syzbot


uvm_fault: arp_rtrequest (3)

Status: upstream: reported on 2025/02/05 13:53
Reported-by: syzbot+4d8933b9545402ed0c6b@syzkaller.appspotmail.com
First crash: 5h08m, last: 5h08m
Similar bugs (2)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
openbsd uvm_fault: arp_rtrequest (2) 18 122d 295d 0/3 auto-obsoleted due to no activity on 2025/01/04 11:42
openbsd uvm_fault: arp_rtrequest C 79 2074d 2084d 3/3 fixed on 2019/06/14 04:59

Sample crash report:
uvm_fault(0xffffffff8357d450, 0xffff80000130004a, 0, 1) -> e
kernel: page fault trap, code=0
Stopped at      arp_rtrequest+0x660:    movzwl  0xc(%r15,%rbx,1),%ecx
    TID    PID    UID     PRFLAGS     PFLAGS  CPU  COMMAND
*312530  55829      0           0  0x4000000    1  syz-executor
 441971  97218      0     0x14000      0x200    0  systqmp
arp_rtrequest(ffff800000039058,1,fffffd806eacaaf0) at arp_rtrequest+0x660 arprequest sys/netinet/if_ether.c:281 [inline]
arp_rtrequest(ffff800000039058,1,fffffd806eacaaf0) at arp_rtrequest+0x660 sys/netinet/if_ether.c:184
rtrequest(1,ffff800037166230,0,ffff8000371661b0,0) at rtrequest+0xbdc sys/net/route.c:1109
rtm_output(ffff800001315b00,ffff8000371662d8,ffff800037166230,0,0) at rtm_output+0x855 sys/net/rtsock.c:973
route_output(fffffd805f0e9100,ffff80000133b0c8) at route_output+0x9a1 sys/net/rtsock.c:878
route_send(ffff80000133b0c8,fffffd805f0e9100,0,0) at route_send+0xd7 sys/net/rtsock.c:342
sosend(ffff80000133b0c8,0,ffff800037166478,0,0,802) at sosend+0x804
sendit(ffff80003b982540,4,ffff800037166570,802,ffff800037166620) at sendit+0x721 sys/kern/uipc_syscalls.c:779
sys_sendto(ffff80003b982540,ffff8000371666d0,ffff800037166620) at sys_sendto+0x8d sys/kern/uipc_syscalls.c:557
syscall(ffff8000371666d0) at syscall+0xbc6 mi_syscall sys/sys/syscall_mi.h:176 [inline]
syscall(ffff8000371666d0) at syscall+0xbc6 sys/arch/amd64/amd64/trap.c:577
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x7aebcf0f1c0, count: 5
https://www.openbsd.org/ddb.html describes the minimum info required in bug
reports.  Insufficient info makes it difficult to find and fix bugs.
ddb{1}> 
ddb{1}> set $lines = 0
ddb{1}> set $maxwidth = 0
ddb{1}> show panic
*cpu1: uvm_fault(0xffffffff8357d450, 0xffff80000130004a, 0, 1) -> e
ddb{1}> trace
arp_rtrequest(ffff800000039058,1,fffffd806eacaaf0) at arp_rtrequest+0x660 arprequest sys/netinet/if_ether.c:281 [inline]
arp_rtrequest(ffff800000039058,1,fffffd806eacaaf0) at arp_rtrequest+0x660 sys/netinet/if_ether.c:184
rtrequest(1,ffff800037166230,0,ffff8000371661b0,0) at rtrequest+0xbdc sys/net/route.c:1109
rtm_output(ffff800001315b00,ffff8000371662d8,ffff800037166230,0,0) at rtm_output+0x855 sys/net/rtsock.c:973
route_output(fffffd805f0e9100,ffff80000133b0c8) at route_output+0x9a1 sys/net/rtsock.c:878
route_send(ffff80000133b0c8,fffffd805f0e9100,0,0) at route_send+0xd7 sys/net/rtsock.c:342
sosend(ffff80000133b0c8,0,ffff800037166478,0,0,802) at sosend+0x804
sendit(ffff80003b982540,4,ffff800037166570,802,ffff800037166620) at sendit+0x721 sys/kern/uipc_syscalls.c:779
sys_sendto(ffff80003b982540,ffff8000371666d0,ffff800037166620) at sys_sendto+0x8d sys/kern/uipc_syscalls.c:557
syscall(ffff8000371666d0) at syscall+0xbc6 mi_syscall sys/sys/syscall_mi.h:176 [inline]
syscall(ffff8000371666d0) at syscall+0xbc6 sys/arch/amd64/amd64/trap.c:577
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x7aebcf0f1c0, count: -10
ddb{1}> show registers
rdi               0xffff80002a54b000
rsi                            0x872
rbp               0xffff800037166080
rbx                             0xde
rdx               0xffff80002a54b000
rcx                0x100040600080100
rax               0xfffffd805f0eb4e0
r8                              0x10
r9                0xfffffd806eacaaf0
r10               0xe840abd5b0d33c37
r11               0x1df5def016548ac7
r12                             0x32
r13               0xfffffd805f0eb400
r14               0xfffffd806eacaaf0
r15               0xffff8000012fff60
rip               0xffffffff826af780    arp_rtrequest+0x660
cs                               0x8
rflags                       0x10246    __ALIGN_SIZE+0xf246
rsp               0xffff800037166000
ss                              0x10
arp_rtrequest+0x660:    movzwl  0xc(%r15,%rbx,1),%ecx
ddb{1}> show proc
PROC (syz-executor) tid=312530 pid=55829 tcnt=2 stat=onproc
    flags process=0 proc=4000000<THREAD>
    runpri=32, usrpri=50, slppri=32, nice=20
    wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0
    forw=0xffffffffffffffff, list=0xffff80003b9831e8,0xffff80003b9822c8
    process=0xffff80002f551018 user=0xffff800037161000, vmspace=0xfffffd806b2ee020
    estcpu=36, cpticks=1, pctcpu=0.0, user=0, sys=1, intr=0
ddb{1}> ps
   PID     TID   PPID    UID  S       FLAGS  WAIT          COMMAND
  5113   20907  89779      0  2           0                syz-executor
 55829  457841   6710      0  2           0                syz-executor
*55829  312530   6710      0  7   0x4000000                syz-executor
 89408  144996  44045      0  2           0                syz-executor
 89408  162458  44045      0  3   0x4000080  fsleep        syz-executor
 66093  108659  47813      0  2           0                syz-executor
 66093   57289  47813      0  3   0x4000080  fsleep        syz-executor
 66093  105791  47813      0  3   0x4000080  fsleep        syz-executor
 66093  180592  47813      0  3   0x4000080  fsleep        syz-executor
 10410  162026  70071      0  2           0                syz-executor
 10410  218253  70071      0  3   0x4000080  fsleep        syz-executor
 33893  153022      0      0  3     0x14200  bored         sosplice
 75366   55262      0      0  3     0x14200  acct          acct
 40076   95103  37498      0  3    0x100082  sbwait        arp
 37498  154203  59720      0  3    0x10008a  sigsusp       sh
 89779  388712  64471      0  3        0x82  nanoslp       syz-executor
 65662  143011  64471      0  3         0x2  biowait       syz-executor
 59720  261462  64471      0  3        0x82  wait          syz-executor
 85270  104614  64471      0  3        0x82  nanoslp       syz-executor
 47813  313855  64471      0  3        0x82  nanoslp       syz-executor
 44045  187211  64471      0  3        0x82  nanoslp       syz-executor
  6710   48043  64471      0  3        0x82  nanoslp       syz-executor
 70071  261290  64471      0  3        0x82  nanoslp       syz-executor
 64471  347093  68170      0  3        0x82  kqread        syz-executor
 68170   59893  20451      0  3    0x10008a  sigsusp       ksh
 20451   12372  26703      0  3        0x98  kqread        sshd-session
 26703  479182  68640      0  3        0x92  kqread        sshd-session
 49269  346383      1      0  3    0x100083  ttyopn        getty
 68640  476031      1      0  3        0x88  kqread        sshd
  9848  276708   4911     74  3   0x1100092  bpf           pflogd
  4911  291421      1      0  3        0x80  sbwait        pflogd
 90639  109588  50916     73  3   0x1100090  kqread        syslogd
 50916  234184      1      0  3    0x100082  sbwait        syslogd
 51606  191064      1      0  3    0x100080  kqread        resolvd
 23985  398068  10259     77  3    0x100092  kqread        dhcpleased
 86681  248886  10259     77  3    0x100092  kqread        dhcpleased
 10259  269317      1      0  3        0x80  kqread        dhcpleased
 27550   32376      0      0  3     0x14200  bored         smr
 76127  520625      0      0  2     0x14200                zerothread
 64615  279091      0      0  3     0x14200  aiodoned      aiodoned
 27192  515022      0      0  3     0x14200  syncer        update
 69883  475279      0      0  3     0x14200  cleaner       cleaner
 13150   60230      0      0  3     0x14200  reaper        reaper
 94383  270300      0      0  3     0x14200  pgdaemon      pagedaemon
 93656  346676      0      0  3     0x14200  bored         viomb
   608  174500      0      0  3  0x40014200  acpi0         acpi0
  5669  190527      0      0  3  0x40014200                idle1
 71062  344130      0      0  3     0x14200  bored         softnet3
 67906  358430      0      0  3     0x14200  bored         softnet2
 88046  413618      0      0  3     0x14200  bored         softnet1
 43083  412247      0      0  2     0x14200                softnet0
 97218  441971      0      0  7     0x14200                systqmp
 80200  378660      0      0  3     0x14200  bored         systq
 30570  154457      0      0  3     0x14200  tmoslp        softclockmp
 19950  250386      0      0  3  0x40014200  tmoslp        softclock
 92097  192303      0      0  3  0x40014200                idle0
     1  300857      0      0  3        0x82  wait          init
     0       0     -1      0  3     0x10200  scheduler     swapper
ddb{1}> show all locks
Process 55829 (syz-executor) thread 0xffff80003b982540 (312530)
Process 65662 (syz-executor) thread 0xffff8000ffff8020 (143011)
ddb{1}> show malloc
           Type InUse  MemUse  HighUse   Limit  Requests Type Lim
         devbuf 10215  11104K   11424K 166960K     12519        0
            pcb    17     16K      21K 166960K       453        0
         rtable   221      7K       7K 166960K       428        0
             pf    37     18K      21K 166960K        78        0
         ifaddr    41      7K       7K 166960K        60        0
        ifgroup    60      2K       2K 166960K        89        0
         sysctl     4      1K       2K 166960K         7        0
       counters    66     36K      36K 166960K        90        0
       ioctlops     0      0K       4K 166960K      1672        0
            iov     0      0K      32K 166960K        66        0
          mount     1      1K       1K 166960K         1        0
            log     0      0K       0K 166960K         4        0
         vnodes  1393     88K      88K 166960K      2203        0
      UFS quota     1     32K      32K 166960K         1        0
      UFS mount     5     36K      36K 166960K         5        0
            shm     2      1K       5K 166960K        15        0
         VM map     2      1K       1K 166960K         2        0
            sem    20      6K       6K 166960K        41        0
        dirhash    12      2K       2K 166960K        27        0
           ACPI  1690    195K     286K 166960K     12468        0
      file desc    18     65K      93K 166960K       966        0
          sigio     0      0K       0K 166960K        17        0
           proc    72     91K     128K 166960K       606        0
        subproc    72      4K       4K 166960K        72        0
    NFS srvsock     1      0K       0K 166960K         1        0
     NFS daemon     1     16K      16K 166960K         1        0
    ip_moptions     0      0K       0K 166960K       226        0
       in_multi    85      6K       6K 166960K       117        0
    ether_multi     1      0K       0K 166960K         2        0
            mrt     0      0K       0K 166960K         3        0
    ISOFS mount     1     32K      32K 166960K         1        0
  MSDOSFS mount     1     16K      16K 166960K         1        0
           ttys    85    387K     387K 166960K        85        0
           exec     0      0K       1K 166960K       457        0
   fusefs mount     1     32K      32K 166960K         1        0
     pfkey data     0      0K       0K 166960K         2        0
            tdb     3      0K       0K 166960K         3        0
        VM swap     8     62K      64K 166960K        10        0
       UVM amap   229     73K      87K 166960K     10778        0
       UVM aobj    75      6K       6K 166960K        78        0
     pinsyscall    44     88K     106K 166960K      2073        0
        memdesc     1      4K       4K 166960K         1        0
    crypto data     1      1K       1K 166960K         1        0
    ip6_options     0      0K       0K 166960K        61        0
            NDP    13      0K       1K 166960K        40        0
           temp    78   6900K    6996K 166960K     31252        0
         kqueue    13     20K      30K 166960K       174        0
      SYN cache     2     16K      16K 166960K         2        0
ddb{1}> show all pools
Name      Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle
plcache    128       24    0        0     1     0     1     1     0     8    0
rtpcb      120      122    0      117     2     0     2     2     0     8    1
rtentry    112      123    0       25     4     1     3     4     0     8    0
unpcb      144     1110    0     1092    12     8     4     6     0     8    3
syncache   336       10    0       10     3     2     1     1     0     8    1
tcpqe       32        2    0        2     1     1     0     1     0     8    0
tcpcb      808      383    0      375     9     7     2     7     0     8    1
arp        120       21    0        1     1     0     1     1     0     8    0
ipq         40        2    0        2     1     1     0     1     0     8    0
ipqe        40        6    0        6     1     1     0     1     0     8    0
inpcb      376     1478    0     1467    18    15     3    15     0     8    1
nd6        136       25    0        2     1     0     1     1     0     8    0
pkpcb       40        6    0        6     2     1     1     1     0     8    1
kcovpl      48        8    0        0     1     0     1     1     0     8    0
ppxss      1168      10    0       10     2     1     1     1     0     8    1
pffrag     232        5    0        1     1     0     1     1     0   482    0
pffrnode    88        5    0        1     1     0     1     1     0     8    0
pffrent     40        8    0        4     1     0     1     1     0     8    0
pfosfp      40     1428    0     1005     5     0     5     5     0     8    0
pfosfpen   112     1428    0      714    21     0    21    21     0     8    0
pfrktable  1344       1    0        1     1     1     0     1     0     8    0
pftag       88        2    0        1     2     1     1     1     0     8    0
pfstitem    24       59    0       14     1     0     1     1     0     8    0
pfstkey    128       59    0       14     2     0     2     2     0     8    0
pfstate    376       59    0       14     6     0     6     6     0     8    0
pfrule     1344      88    0       83     2     1     1     2     0     8    0
art_heap8  4096       2    0        0     2     0     2     2     0     8    0
art_heap4  256      505    0       94    29     3    26    28     0     8    0
art_table   32      507    0       94     4     0     4     4     0     8    0
art_node    16      118    0       31     1     0     1     1     0     8    0
sysvmsgpl   40        3    0        2     1     0     1     1     0     8    0
semupl     112        1    0        1     1     1     0     1     0     8    0
semapl     112       30    0       12     1     0     1     1     0     8    0
shmpl      112       75    0        3     3     0     3     3     0     8    0
dirhash    1024      27    0       10     3     0     3     3     0     8    0
dino2pl    256     3287    0     1785    95     0    95    95     0     8    0
ffsino     280     3287    0     1785   109     0   109   109     0     8    0
nchpl      144     4755    0     4219    63    40    23    63     0     8    0
uvmvnodes   80     3784    0        0    78     0    78    78     0     8    0
vnodes     216     3784    0        0   211     0   211   211     0     8    0
namei      1024   15929    0    15928     4     2     2     2     0     8    1
percpumem   16       59    0       12     1     0     1     1     0     8    0
kstatmem   264       50    0       24     2     0     2     2     0     8    0
scsiplug    72        8    0        8     3     2     1     1     0     8    1
scxspl     216    13674    0    13673     9     8     1     8     1     8    0
plimitpl   152      171    0      154     1     0     1     1     0     8    0
sigapl     424     1274    0     1222     9     2     7     7     0     8    0
futexpl     64    13353    0    13348     1     0     1     1     0     8    0
knotepl    120      554    0        0    18     1    17    18     0     8    0
kqueuepl   216      320    0      311     5     4     1     5     0     8    0
pipepl     328      188    0      160     3     0     3     3     0     8    0
fdescpl    504     1254    0     1222     5     0     5     5     0     8    0
filepl     152     8672    0     8454    20     7    13    16     0     8    3
lockfpl    104      311    0      309     1     0     1     1     0     8    0
lockfspl    48      126    0      124     1     0     1     1     0     8    0
sessionpl  144       29    0       20     1     0     1     1     0     8    0
pgrppl      48       49    0       32     1     0     1     1     0     8    0
ucredpl    104     1617    0     1603     1     0     1     1     0     8    0
zombiepl   144     1223    0     1222     1     0     1     1     0     8    0
processpl  1168    1274    0     1222     5     0     5     5     0     8    0
procpl     648     2721    0     2663     7     1     6     6     0     8    0
srpgc       96        4    0        4     1     1     0     1     0     8    0
sosppl     168        3    0        2     2     1     1     1     0     8    0
sockpl     688     2724    0     2690    37    25    12    17     0     8    8
mcl64k     65536      3    0        0     1     0     1     1     0     8    0
mcl16k     16384      2    0        0     1     0     1     1     0     8    0
mcl8k      8192       5    0        0     1     0     1     1     0     8    0
mcl4k      4096     115    0        0    15     0    15    15     0     8    0
mcl2k      2048      35    0        0     4     0     4     4     0     8    0
mtagpl      96       36    0        0     1     0     1     1     0     8    0
mbufpl     256     1185    0        0    74     0    74    74     0     8    0
bufpl      280     4019    0      135   278     0   278   278     0     8    0
anonpl      24   200314    0   194989    71    13    58    58     0   185   14
amapchunkpl 152   35114    0    34549    34     7    27    33     0   158    3
amappl16   200     4476    0     4405    33    18    15    17     0     8    8
amappl15   192       46    0       46     2     2     0     1     0     8    0
amappl14   184      126    0      112     1     0     1     1     0     8    0
amappl13   176       22    0       22     1     1     0     1     0     8    0
amappl12   168     1899    0     1866     4     1     3     3     0     8    0
amappl11   160       54    0       38     1     0     1     1     0     8    0
amappl10   152        4    0        4     1     1     0     1     0     8    0
amappl9    144      247    0      247     1     1     0     1     0     8    0
amappl8    136       27    0       24     1     0     1     1     0     8    0
amappl7    128      127    0      113     1     0     1     1     0     8    0
amappl6    120      182    0      178     1     0     1     1     0     8    0
amappl5    112      122    0      112     1     0     1     1     0     8    0
amappl4    104      357    0      337     1     0     1     1     0     8    0
amappl3     96     6967    0     6854     4     0     4     4     0     8    0
amappl2     88      703    0      637     2     0     2     2     0     8    0
amappl1     80    11915    0    11324    16     1    15    15     0     8    0
amappl      88    10313    0    10142     5     0     5     5     0    92    0
dma32768   32768      1    0        1     1     1     0     1     0     8    0
dma4096    4096       1    0        1     1     1     0     1     0     8    0
dma1024    1024       1    0        0     1     0     1     1     0     8    0
dma256     256        7    0        7     2     2     0     1     0     8    0
dma128     128      257    0      257     3     3     0     1     0     8    0
dma64       64        6    0        6     1     1     0     1     0     8    0
dma32       32        7    0        7     1     1     0     1     0     8    0
dma16       16       18    0       17     1     0     1     1     0     8    0
aobjpl      72       77    0        3     2     0     2     2     0     8    0
uaddrrnd    24     1254    0     1222     1     0     1     1     0     8    0
uaddrbest   32        2    0        0     1     0     1     1     0     8    0
uaddr       24     1254    0     1222     1     0     1     1     0     8    0
vmmpekpl   168    11790    0    11750     3     0     3     3     0     8    0
vmmpepl    168    84993    0    83063   101     5    96    99     0   357    7
vmsppl     456     1253    0     1222     5     0     5     5     0     8    0
rwobjpl     64    29098    0    24222    80     0    80    80     0     8    0
pdppl      4096    2515    0     2444   107    32    75    85     0     8    4
pvpl        32    17601    0        0   142     0   142   142     0   265    0
pmappl     248     1253    0     1222     3     0     3     3     0     8    0
extentpl    40       55    0       38     1     0     1     1     0     8    0
phpool     112      365    0       51     9     0     9     9     0     8    0
ddb{1}> machine ddbcpu 0
Stopped at      x86_ipi_db+0x27:        addq    $0x8,%rsp
x86_ipi_db(ffffffff834ccff0) at x86_ipi_db+0x27 sys/arch/amd64/amd64/db_interface.c:393
x86_ipi_handler() at x86_ipi_handler+0xd9 sys/arch/amd64/amd64/ipi.c:106
Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27
__mp_lock(ffffffff8360d908) at __mp_lock+0x192 __mp_lock_spin sys/kern/kern_lock.c:113 [inline]
__mp_lock(ffffffff8360d908) at __mp_lock+0x192 sys/kern/kern_lock.c:144
intr_handler(ffff80002a38c320,ffff800000079f00) at intr_handler+0xe1 sys/arch/amd64/amd64/intr.c:553
Xintr_ioapic_edge23_untramp() at Xintr_ioapic_edge23_untramp+0x18f
__sanitizer_cov_trace_pc() at __sanitizer_cov_trace_pc+0x33 kd_curproc sys/dev/kcov.c:585 [inline]
__sanitizer_cov_trace_pc() at __sanitizer_cov_trace_pc+0x33 sys/dev/kcov.c:153
witness_checkorder(ffffffff8356b398,9,0) at witness_checkorder+0x35
mtx_enter(ffffffff8356b388) at mtx_enter+0x47 sys/kern/kern_lock.c:238
msleep(ffffffff8356b370,ffffffff8356b388,20,ffffffff8314e05b,0) at msleep+0x2cf sys/kern/kern_synch.c:239
taskq_next_work(ffffffff8356b370,ffff80002a38c5b0) at taskq_next_work+0x8e sys/kern/kern_task.c:399
taskq_thread(ffffffff8356b370) at taskq_thread+0x1d5 sys/kern/kern_task.c:439
end trace frame: 0x0, count: 3
ddb{0}> trace
x86_ipi_db(ffffffff834ccff0) at x86_ipi_db+0x27 sys/arch/amd64/amd64/db_interface.c:393
x86_ipi_handler() at x86_ipi_handler+0xd9 sys/arch/amd64/amd64/ipi.c:106
Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27
__mp_lock(ffffffff8360d908) at __mp_lock+0x192 __mp_lock_spin sys/kern/kern_lock.c:113 [inline]
__mp_lock(ffffffff8360d908) at __mp_lock+0x192 sys/kern/kern_lock.c:144
intr_handler(ffff80002a38c320,ffff800000079f00) at intr_handler+0xe1 sys/arch/amd64/amd64/intr.c:553
Xintr_ioapic_edge23_untramp() at Xintr_ioapic_edge23_untramp+0x18f
__sanitizer_cov_trace_pc() at __sanitizer_cov_trace_pc+0x33 kd_curproc sys/dev/kcov.c:585 [inline]
__sanitizer_cov_trace_pc() at __sanitizer_cov_trace_pc+0x33 sys/dev/kcov.c:153
witness_checkorder(ffffffff8356b398,9,0) at witness_checkorder+0x35
mtx_enter(ffffffff8356b388) at mtx_enter+0x47 sys/kern/kern_lock.c:238
msleep(ffffffff8356b370,ffffffff8356b388,20,ffffffff8314e05b,0) at msleep+0x2cf sys/kern/kern_synch.c:239
taskq_next_work(ffffffff8356b370,ffff80002a38c5b0) at taskq_next_work+0x8e sys/kern/kern_task.c:399
taskq_thread(ffffffff8356b370) at taskq_thread+0x1d5 sys/kern/kern_task.c:439
end trace frame: 0x0, count: -12
ddb{0}> machine ddbcpu 1
Stopped at      arp_rtrequest+0x660:    movzwl  0xc(%r15,%rbx,1),%ecx
arp_rtrequest(ffff800000039058,1,fffffd806eacaaf0) at arp_rtrequest+0x660 arprequest sys/netinet/if_ether.c:281 [inline]
arp_rtrequest(ffff800000039058,1,fffffd806eacaaf0) at arp_rtrequest+0x660 sys/netinet/if_ether.c:184
rtrequest(1,ffff800037166230,0,ffff8000371661b0,0) at rtrequest+0xbdc sys/net/route.c:1109
rtm_output(ffff800001315b00,ffff8000371662d8,ffff800037166230,0,0) at rtm_output+0x855 sys/net/rtsock.c:973
route_output(fffffd805f0e9100,ffff80000133b0c8) at route_output+0x9a1 sys/net/rtsock.c:878
route_send(ffff80000133b0c8,fffffd805f0e9100,0,0) at route_send+0xd7 sys/net/rtsock.c:342
sosend(ffff80000133b0c8,0,ffff800037166478,0,0,802) at sosend+0x804
sendit(ffff80003b982540,4,ffff800037166570,802,ffff800037166620) at sendit+0x721 sys/kern/uipc_syscalls.c:779
sys_sendto(ffff80003b982540,ffff8000371666d0,ffff800037166620) at sys_sendto+0x8d sys/kern/uipc_syscalls.c:557
syscall(ffff8000371666d0) at syscall+0xbc6 mi_syscall sys/sys/syscall_mi.h:176 [inline]
syscall(ffff8000371666d0) at syscall+0xbc6 sys/arch/amd64/amd64/trap.c:577
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x7aebcf0f1c0, count: 5
ddb{1}> trace
arp_rtrequest(ffff800000039058,1,fffffd806eacaaf0) at arp_rtrequest+0x660 arprequest sys/netinet/if_ether.c:281 [inline]
arp_rtrequest(ffff800000039058,1,fffffd806eacaaf0) at arp_rtrequest+0x660 sys/netinet/if_ether.c:184
rtrequest(1,ffff800037166230,0,ffff8000371661b0,0) at rtrequest+0xbdc sys/net/route.c:1109
rtm_output(ffff800001315b00,ffff8000371662d8,ffff800037166230,0,0) at rtm_output+0x855 sys/net/rtsock.c:973
route_output(fffffd805f0e9100,ffff80000133b0c8) at route_output+0x9a1 sys/net/rtsock.c:878
route_send(ffff80000133b0c8,fffffd805f0e9100,0,0) at route_send+0xd7 sys/net/rtsock.c:342
sosend(ffff80000133b0c8,0,ffff800037166478,0,0,802) at sosend+0x804
sendit(ffff80003b982540,4,ffff800037166570,802,ffff800037166620) at sendit+0x721 sys/kern/uipc_syscalls.c:779
sys_sendto(ffff80003b982540,ffff8000371666d0,ffff800037166620) at sys_sendto+0x8d sys/kern/uipc_syscalls.c:557
syscall(ffff8000371666d0) at syscall+0xbc6 mi_syscall sys/sys/syscall_mi.h:176 [inline]
syscall(ffff8000371666d0) at syscall+0xbc6 sys/arch/amd64/amd64/trap.c:577
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x7aebcf0f1c0, count: -10

Crashes (1):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2025/02/05 13:52 openbsd 9d84dc8a699e 5896748e .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: arp_rtrequest
* Struck through repros no longer work on HEAD.