From nobody Wed Mar 18 13:34:03 2026 X-Original-To: bugs@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4fbVCv6n5Gz6Vptv for ; Wed, 18 Mar 2026 13:34:03 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org [IPv6:2610:1c1:1:606c::19:3]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mxrelay.nyi.freebsd.org", Issuer "R12" (not verified)) by mx1.freebsd.org (Postfix) with ESMTPS id 4fbVCv6Gflz3dl3 for ; Wed, 18 Mar 2026 13:34:03 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1773840843; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding; bh=9D3weqZKt/Zpi7an8lCYBv1CKa/X0cxdoZqRIKFP+gU=; b=QnkAazBU5yYsWRo0shaPpkHrg/FEXiI4o9KkcNn/vXnw3LChcDGvFCMbKo2BKyRk4xwII3 8iWV15+duavLt732PJx97IQTp0UlYlXkY6buTVTFBJEfB7i1JaK/2ifOFo0BIBDgBTrhC+ jiui74d/Peh2LFV9ezB7XF3NxUqu4/i7q6mzc5BqeytHTtpHNRqY9ciqB/3xbHWmnTHyfw 76JJOqs34nYTfv51SBEh013fSvC485qi2xyfVFKbXWe6ai7nNd9dW3aYjgR4ag3C+MVAVW 2qLGGI2T18nxZ8vIlDn7Em+GhTN9SrI0H3MtJk68EG7C6CxGLY2KEOgdRGre1Q== ARC-Seal: i=1; s=dkim; d=freebsd.org; t=1773840843; a=rsa-sha256; cv=none; b=i3l2tyM2FtQqAwBae2lYVA5lLkyw4Eht6upRCaHOhozK1WhB8MhlBky5cxgy7AXQkYm2Ey vd66vPVpi/UZJ9t5p1CMjVNuUOg4nllN8BFPefaIAJXx0ePdF0h0qmIwHK7hdJ4ssqHIuu Bvs6oFcBpt81LigpcoBILAKMBEeny5gonSTN+svEtbm+nCu/vNJG/gfc1AkBs5qkvr/EFt oQzNO/YGmYgmy6x3B8ij7jsVS9UXFas68q/EfqEspVCjrJxsDLHwGJiFL+c5SrNlugXz95 EQNHOd9u+hqRBz5nci/IVkMdktM8BoA4khPU/KMCNRq/FoTlyC5TQtHpR+SJ4g== ARC-Authentication-Results: i=1; mx1.freebsd.org; none ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1773840843; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding; bh=9D3weqZKt/Zpi7an8lCYBv1CKa/X0cxdoZqRIKFP+gU=; b=X4bO3gxRpAlyz/XzYM1j30q5TOuz3bCuJTFbCIy/mxUBdf6C5w7gmcUQ+VsIHBGiPVKnCA 6lMyDuB45Q99pm6JYLPQ8iaul/7Oe4BZse/jyi8wzEZZe59DRHkVZgYVnjnK1AVtE5Vcuc EjaapFSR8EOM22LRBcGIJDj8jc508+u291abEtDDV9QwgoF0ZRCEgyKIVRjkX3+VDwfLBP qxOtyW3DQDmRNNZt5uoEQfcAEnetdwH9qyelJFABWii5SVXsQ7F9CwM6QpeQo7eoUdxmo2 R9HXUF5TXMQAcYEYXG+/bjSDW83P4/x4h1H7rsVxhRCZwNmoXyrMkRKES/iBUQ== Received: from kenobi.freebsd.org (kenobi.freebsd.org [IPv6:2610:1c1:1:606c::50:1d]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) by mxrelay.nyi.freebsd.org (Postfix) with ESMTPS id 4fbVCv5sKRz18mB for ; Wed, 18 Mar 2026 13:34:03 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from kenobi.freebsd.org ([127.0.1.5]) by kenobi.freebsd.org (8.15.2/8.15.2) with ESMTP id 62IDY3ki030714 for ; Wed, 18 Mar 2026 13:34:03 GMT (envelope-from bugzilla-noreply@freebsd.org) Received: (from www@localhost) by kenobi.freebsd.org (8.15.2/8.15.2/Submit) id 62IDY3Wq030713 for bugs@FreeBSD.org; Wed, 18 Mar 2026 13:34:03 GMT (envelope-from bugzilla-noreply@freebsd.org) X-Authentication-Warning: kenobi.freebsd.org: www set sender to bugzilla-noreply@freebsd.org using -f From: bugzilla-noreply@freebsd.org To: bugs@FreeBSD.org Subject: [Bug 293900] panic: dst_m ADDR is not wired Date: Wed, 18 Mar 2026 13:34:03 +0000 X-Bugzilla-Reason: AssignedTo X-Bugzilla-Type: new X-Bugzilla-Watch-Reason: None X-Bugzilla-Product: Base System X-Bugzilla-Component: kern X-Bugzilla-Version: 15.0-RELEASE X-Bugzilla-Keywords: X-Bugzilla-Severity: Affects Some People X-Bugzilla-Who: r772577952@gmail.com X-Bugzilla-Status: New X-Bugzilla-Resolution: X-Bugzilla-Priority: --- X-Bugzilla-Assigned-To: bugs@FreeBSD.org X-Bugzilla-Flags: X-Bugzilla-Changed-Fields: bug_id short_desc product version rep_platform op_sys bug_status bug_severity priority component assigned_to reporter Message-ID: Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset="UTF-8" X-Bugzilla-URL: https://bugs.freebsd.org/bugzilla/ Auto-Submitted: auto-generated List-Id: Bug reports List-Archive: https://lists.freebsd.org/archives/freebsd-bugs List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-freebsd-bugs@FreeBSD.org MIME-Version: 1.0 https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D293900 Bug ID: 293900 Summary: panic: dst_m ADDR is not wired Product: Base System Version: 15.0-RELEASE Hardware: amd64 OS: Any Status: New Severity: Affects Some People Priority: --- Component: kern Assignee: bugs@FreeBSD.org Reporter: r772577952@gmail.com Hi FreeBSD maintainers, We have discovered an issue in the kernel when fuzzing freebsd with syzkall= er and our generated syscall description. This issue is reproducible on the la= test release (release/15.0.0-p4, commit 8ef0ed690df2dca0cc22b827819d112f868470bb= ), and from the issue report I think the root cause appears to be located with= in the VM subsystem. The kernel console output, kernel config, and C/syz reproducers can be foun= d at https://drive.google.com/drive/folders/15kt9ABSTSccI2V7Bhpwxj9_SrkOkt981?us= p=3Dsharing. The issue report is also listed below (symbolized by our modified syz-symbolize) to assist with the analysis: ``` TITLE: panic: dst_m ADDR is not wired CORRUPTED: false () SUPPRESSED: false MAINTAINERS (TO): [] MAINTAINERS (CC): [] panic: dst_m 0xfffffe0009028e48 is not wired cpuid =3D 2 time =3D 1773840257 KDB: stack backtrace: #0 0xffffffff81608a59 at kdb_backtrace+0x119 /usr/obj/usr/src/kern/subr_kdb.c:452 #1 0xffffffff81537d67 at vpanic+0x257 /usr/obj/usr/src/kern/kern_shutdown.c= :960 #2 0xffffffff81537b05 at panic+0xb5 /usr/obj/usr/src/kern/kern_shutdown.c:8= 87 #3 0xffffffff81dc61b3 at vm_fault_copy_entry+0xa43 /usr/obj/usr/src/vm/vm_fault.c:2172 #4 0xffffffff81dd8edd at vm_map_protect+0xfed /usr/obj/usr/src/vm/vm_map.c:0 #5 0xffffffff81dea3e1 at sys_mprotect+0x191 /usr/obj/usr/src/vm/vm_mmap.c:6= 90 #6 0xffffffff820f9372 at amd64_syscall+0x4e2 /usr/obj/usr/src/kern/subr_syscall.c:193 #7 0xffffffff8209ffab at fast_syscall_common+0xf8 /usr/obj/usr/src/amd64/amd64/exception.S:571 Uptime: 55s Automatic reboot in 15 seconds - press a key on the console to abort ``` --=20 You are receiving this mail because: You are the assignee for the bug.=