login: panic: uvm_fault_unwire_locked: address not in map Stopped at db_enter+0x17: popq %rbp TID PID UID PRFLAGS PFLAGS CPU COMMAND *148198 47111 0 0 0x4000000 1 syz-executor 437670 61835 0 0 0 0 syz-executor db_enter() at db_enter+0x17 sys/arch/amd64/amd64/db_interface.c:457 panic(ffffffff84c2b500) at panic+0x270 sys/kern/subr_prf.c:198 uvm_fault_unwire_locked(ffff800001aec010,200000003000,200000004000) at uvm_fault_unwire_locked+0x626 uvm_fault_wire(ffff800001aec010,200000003000,200000005000,3) at uvm_fault_wire+0x12d uvm_fault_unwire sys/uvm/uvm_fault.c:1724 [inline] uvm_fault_wire(ffff800001aec010,200000003000,200000005000,3) at uvm_fault_wire+0x12d sys/uvm/uvm_fault.c:1706 uvm_vslock_device(ffff80003bb534e8,200000003440,fed,3,ffff80003bb48700) at uvm_vslock_device+0x187 sys/uvm/uvm_glue.c:169 physio(ffffffff83e63910,d01,8000,ffffffff83e64580,ffff80003bb48c40) at physio+0x4a7 sys/kern/kern_physio.c:139 spec_read(ffff80003bb48980) at spec_read+0x29a sys/kern/spec_vnops.c:215 VOP_READ(ffff800001dd25f0,ffff80003bb48c40,0,ffff8000001192d8) at VOP_READ+0x1a8 sys/kern/vfs_vops.c:227 vn_read(ffff800001d58068,ffff80003bb48c40,0) at vn_read+0x1fc sys/kern/vfs_vnops.c:375 dofilereadv(ffff80003bb534e8,3,ffff80003bb48c40,0,ffff80003bb48e00) at dofilereadv+0x386 sys/kern/sys_generic.c:252 sys_readv(ffff80003bb534e8,ffff80003bb48e90,ffff80003bb48e00) at sys_readv+0x168 sys/kern/sys_generic.c:199 syscall(ffff80003bb48e90) at syscall+0x1089 mi_syscall sys/sys/syscall_mi.h:176 [inline] syscall(ffff80003bb48e90) at syscall+0x1089 sys/arch/amd64/amd64/trap.c:783 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7cd6e38ebc0, count: 2 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb{1}> ddb{1}> set $lines = 0 ddb{1}> set $maxwidth = 0 ddb{1}> show panic *cpu1: uvm_fault_unwire_locked: address not in map ddb{1}> show kasan kasan: no report recorded this boot ddb{1}> trace db_enter() at db_enter+0x17 sys/arch/amd64/amd64/db_interface.c:457 panic(ffffffff84c2b500) at panic+0x270 sys/kern/subr_prf.c:198 uvm_fault_unwire_locked(ffff800001aec010,200000003000,200000004000) at uvm_fault_unwire_locked+0x626 uvm_fault_wire(ffff800001aec010,200000003000,200000005000,3) at uvm_fault_wire+0x12d uvm_fault_unwire sys/uvm/uvm_fault.c:1724 [inline] uvm_fault_wire(ffff800001aec010,200000003000,200000005000,3) at uvm_fault_wire+0x12d sys/uvm/uvm_fault.c:1706 uvm_vslock_device(ffff80003bb534e8,200000003440,fed,3,ffff80003bb48700) at uvm_vslock_device+0x187 sys/uvm/uvm_glue.c:169 physio(ffffffff83e63910,d01,8000,ffffffff83e64580,ffff80003bb48c40) at physio+0x4a7 sys/kern/kern_physio.c:139 spec_read(ffff80003bb48980) at spec_read+0x29a sys/kern/spec_vnops.c:215 VOP_READ(ffff800001dd25f0,ffff80003bb48c40,0,ffff8000001192d8) at VOP_READ+0x1a8 sys/kern/vfs_vops.c:227 vn_read(ffff800001d58068,ffff80003bb48c40,0) at vn_read+0x1fc sys/kern/vfs_vnops.c:375 dofilereadv(ffff80003bb534e8,3,ffff80003bb48c40,0,ffff80003bb48e00) at dofilereadv+0x386 sys/kern/sys_generic.c:252 sys_readv(ffff80003bb534e8,ffff80003bb48e90,ffff80003bb48e00) at sys_readv+0x168 sys/kern/sys_generic.c:199 syscall(ffff80003bb48e90) at syscall+0x1089 mi_syscall sys/sys/syscall_mi.h:176 [inline] syscall(ffff80003bb48e90) at syscall+0x1089 sys/arch/amd64/amd64/trap.c:783 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7cd6e38ebc0, count: -13 ddb{1}> show registers rdi 0 rsi 0x1 rbp 0xffff80003bb48210 rbx 0xffff80003bb48280 rdx 0 rcx 0xffff800028fe3ff0 rax 0 r8 0x101010101010101 r9 0x8080808080808080 r10 0 r11 0xffffffff83dc1190 x86_bus_space_io_read_1 r12 0xffffffff84c2b500 .str.42 r13 0xffff800028fe4c08 r14 0xffff800028fe4e07 r15 0x1 rip 0xffffffff81fcf3c7 db_enter+0x17 cs 0x8 rflags 0x246 rsp 0xffff80003bb48210 ss 0 db_enter+0x17: popq %rbp ddb{1}> show proc PROC (syz-executor) tid=148198 pid=47111 tcnt=3 stat=onproc flags process=0 proc=4000000 runpri=36, usrpri=80, slppri=36, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0 forw=0xffffffffffffffff, list=0xffff80003bb53a18,0xffff80003bb52038 process=0xffff800045ff04f0 user=0xffff80003bb3d000, vmspace=0xffff800001aec010 estcpu=36, cpticks=1, pctcpu=0.0, user=0, sys=1, intr=0 ddb{1}> ps PID TID PPID UID S PRLAGS PFLAGS WAIT COMMAND 1063 248263 0 0 3 0x14000 0x200 acct acct 33334 511750 80347 0 3 0x2 0 clonelk ifconfig 47111 464123 56932 0 3 0 0 vmmaplk syz-executor *47111 148198 56932 0 7 0 0x4000000 syz-executor 47111 400299 56932 0 2 0 0x4000080 syz-executor 80347 502859 65069 0 3 0x100002 0x88 sigsusp sh 39418 115429 68439 0 2 0 0 syz-executor 39418 179942 68439 0 3 0 0x4000080 fsleep syz-executor 23061 334988 35173 0 3 0 0x80 nanoslp syz-executor 23061 480679 35173 0 3 0 0x4000080 netcon syz-executor 23061 323279 35173 0 3 0 0x4000080 fsleep syz-executor 23447 116411 46654 0 2 0 0 syz-executor 23447 335574 46654 0 3 0 0x4000080 fsleep syz-executor 23447 443521 46654 0 3 0 0x4000080 fsleep syz-executor 23447 286711 46654 0 3 0 0x4000080 fsleep syz-executor 61835 437670 84394 0 7 0 0 syz-executor 61835 467831 84394 0 3 0 0x4000080 fsleep syz-executor 65069 340137 63303 0 3 0x2 0x80 wait syz-executor 1818 154620 1 0 3 0x100003 0x80 ttyin getty 56932 396674 63303 0 3 0x2 0x80 nanoslp syz-executor 35173 470599 63303 0 3 0x2 0x80 nanoslp syz-executor 68439 394707 63303 0 3 0x2 0x80 nanoslp syz-executor 46654 452817 63303 0 3 0x2 0x80 nanoslp syz-executor 48340 353966 63303 0 3 0x2 0x80 piperd syz-executor 84394 195058 63303 0 3 0x2 0x80 nanoslp syz-executor 63303 480055 1 0 3 0x2 0x80 wait syz-executor 92594 185316 1 0 3 0x10000002 0x88 kqread sshd 81915 365038 86398 74 3 0x1100012 0x80 bpf pflogd 86398 60909 1 0 3 0 0x80 sbwait pflogd 2962 247391 43801 73 3 0x1100010 0x80 kqread syslogd 43801 231134 1 0 3 0x100002 0x80 sbwait syslogd 85246 135640 1 0 3 0x100000 0x80 kqread resolvd 1672 88761 33345 77 3 0x100012 0x80 kqread dhcpleased 52223 518890 33345 77 3 0x100012 0x80 kqread dhcpleased 33345 157779 1 0 3 0 0x80 kqread dhcpleased 10384 440148 0 0 3 0x14000 0x200 bored smr 11682 319292 0 0 2 0x14000 0x200 zerothread 63249 77626 0 0 3 0x14000 0x200 aiodoned aiodoned 93526 460345 0 0 3 0x14000 0x200 syncer update 60699 478258 0 0 3 0x14000 0x200 cleaner cleaner 36214 467070 0 0 3 0x14000 0x200 reaper reaper 59145 153112 0 0 3 0x14000 0x200 pgdaemon pagedaemon 98008 308747 0 0 3 0x14000 0x200 bored viomb 37738 22467 0 0 3 0x14000 0x40000200 acpi0 acpi0 94323 412778 0 0 3 0x14000 0x40000200 idle1 26290 174758 0 0 3 0x14000 0x200 bored softnet1 96264 447588 0 0 3 0x14000 0x200 bored softnet0 44976 248795 0 0 3 0x14000 0x200 bored systqmp 57914 366718 0 0 3 0x14000 0x200 bored systq 87324 380288 0 0 3 0x14000 0x200 tmoslp softclockmp 81967 370144 0 0 3 0x14000 0x40000200 tmoslp softclock 88204 481784 0 0 3 0x14000 0x40000200 idle0 1 161059 0 0 3 0x2 0x80 wait init 0 0 -1 0 3 0x10000 0x200 scheduler swapper ddb{1}> show all locks Process 47111 (syz-executor) thread 0xffff80003bb53a18 (464123) exclusive rwlock futexlk r = 0 (0xffffffff8549a628) #0 witness_lock+0x632 stacktrace_save sys/sys/stacktrace.h:37 [inline] #0 witness_lock+0x632 sys/kern/subr_witness.c:1160 #1 rw_do_enter_write+0x53e sys/kern/kern_rwlock.c:320 #2 futex_wake+0x11f sys/kern/sys_futex.c:467 #3 sys_futex+0x2e9 sys/kern/sys_futex.c:158 #4 syscall+0x1089 mi_syscall sys/sys/syscall_mi.h:176 [inline] #4 syscall+0x1089 sys/arch/amd64/amd64/trap.c:783 #5 Xsyscall+0x128 Process 47111 (syz-executor) thread 0xffff80003bb534e8 (148198) shared rwlock vmmaplk r = 0 (0xffff800001aec110) #0 witness_lock+0x632 stacktrace_save sys/sys/stacktrace.h:37 [inline] #0 witness_lock+0x632 sys/kern/subr_witness.c:1160 #1 rw_do_enter_read+0x55d sys/kern/kern_rwlock.c:413 #2 uvm_fault_wire+0x116 uvm_fault_unwire sys/uvm/uvm_fault.c:1723 [inline] #2 uvm_fault_wire+0x116 sys/uvm/uvm_fault.c:1706 #3 uvm_vslock_device+0x187 sys/uvm/uvm_glue.c:169 #4 physio+0x4a7 sys/kern/kern_physio.c:139 #5 spec_read+0x29a sys/kern/spec_vnops.c:215 #6 VOP_READ+0x1a8 sys/kern/vfs_vops.c:227 #7 vn_read+0x1fc sys/kern/vfs_vnops.c:375 #8 dofilereadv+0x386 sys/kern/sys_generic.c:252 #9 sys_readv+0x168 sys/kern/sys_generic.c:199 #10 syscall+0x1089 mi_syscall sys/sys/syscall_mi.h:176 [inline] #10 syscall+0x1089 sys/arch/amd64/amd64/trap.c:783 #11 Xsyscall+0x128 exclusive kernel_lock &kernel_lock r = 0 (0xffffffff85442880) #0 witness_lock+0x632 stacktrace_save sys/sys/stacktrace.h:37 [inline] #0 witness_lock+0x632 sys/kern/subr_witness.c:1160 #1 __mp_acquire_count+0x48 sys/kern/kern_lock.c:-1 #2 sleep_finish+0x423 sys/kern/kern_synch.c:369 #3 rw_do_enter_read+0x3bd sys/kern/kern_rwlock.c:392 #4 uvm_fault_wire+0x116 uvm_fault_unwire sys/uvm/uvm_fault.c:1723 [inline] #4 uvm_fault_wire+0x116 sys/uvm/uvm_fault.c:1706 #5 uvm_vslock_device+0x187 sys/uvm/uvm_glue.c:169 #6 physio+0x4a7 sys/kern/kern_physio.c:139 #7 spec_read+0x29a sys/kern/spec_vnops.c:215 #8 VOP_READ+0x1a8 sys/kern/vfs_vops.c:227 #9 vn_read+0x1fc sys/kern/vfs_vnops.c:375 #10 dofilereadv+0x386 sys/kern/sys_generic.c:252 #11 sys_readv+0x168 sys/kern/sys_generic.c:199 #12 syscall+0x1089 mi_syscall sys/sys/syscall_mi.h:176 [inline] #12 syscall+0x1089 sys/arch/amd64/amd64/trap.c:783 #13 Xsyscall+0x128 ddb{1}>