panic: acquiring blockable sleep lock with spinlock or critical section held (rwlock) vmmaplk
Stopped at      db_enter+0x1c:  addq    $0x8,%rsp
    TID    PID    UID     PRFLAGS     PFLAGS  CPU  COMMAND
 426060  12870      0   0x8000000          0    0  syz-executor.1
* 39775  90403      0     0x14000      0x200    1  reaper
db_enter() at db_enter+0x1c sys/arch/amd64/amd64/db_interface.c:437
panic(ffffffff828e5d2e) at panic+0x17b sys/kern/subr_prf.c:198
witness_checkorder(ffffffff82d90258,1,0) at witness_checkorder+0xdf4 witness_debugger sys/kern/subr_witness.c:2513 [inline]
witness_checkorder(ffffffff82d90258,1,0) at witness_checkorder+0xdf4 sys/kern/subr_witness.c:777
rw_enter_read(ffffffff82d90248) at rw_enter_read+0x87 sys/kern/kern_rwlock.c:112
uvmfault_lookup(ffff80002a154eb0,0) at uvmfault_lookup+0xd9 sys/uvm/uvm_fault.c:1785
uvm_fault_check(ffff80002a154eb0,ffff80002a154ee8,ffff80002a154f10) at uvm_fault_check+0x3e sys/uvm/uvm_fault.c:672
uvm_fault(ffffffff82d90168,7f857a20d000,0,2) at uvm_fault+0xf2 sys/uvm/uvm_fault.c:600
kpageflttrap(ffff80002a155050,7f857a20d308) at kpageflttrap+0x238 sys/arch/amd64/amd64/trap.c:279
kerntrap(ffff80002a155050) at kerntrap+0xf2 sys/arch/amd64/amd64/trap.c:332
alltraps_kern_meltdown() at alltraps_kern_meltdown+0x7b
pmap_page_remove(fffffd800790c2e0) at pmap_page_remove+0x33d _atomic_swap_64 machine/atomic.h:117 [inline]
pmap_page_remove(fffffd800790c2e0) at pmap_page_remove+0x33d sys/arch/amd64/amd64/pmap.c:1990
uvm_anfree_list(fffffd807af58648,ffff80002a1551d8) at uvm_anfree_list+0x98
amap_wipeout(fffffd806e582d40) at amap_wipeout+0x1d1 sys/uvm/uvm_amap.c:504
uvm_unmap_detach(ffff80002a1552a0,1) at uvm_unmap_detach+0x7d sys/uvm/uvm_map.c:1354
end trace frame: 0xffff80002a1552e0, count: 0
https://www.openbsd.org/ddb.html describes the minimum info required in bug
reports.  Insufficient info makes it difficult to find and fix bugs.