uvm_fault(0xffffffff8393bab0, 0xffff8000015a00ca, 0, 1) -> e
kernel: page fault trap, code=0
Stopped at arp_rtrequest+0x6a4: movzwl 0xc(%rcx,%rbx,1),%ecx
TID PID UID PRFLAGS PFLAGS CPU COMMAND
*361606 67135 0 0 0x4000000 0 syz-executor
arp_rtrequest(ffff8000002a2058,1,fffffd807e780888) at arp_rtrequest+0x6a4 arprequest sys/netinet/if_ether.c:325 [inline]
arp_rtrequest(ffff8000002a2058,1,fffffd807e780888) at arp_rtrequest+0x6a4 sys/netinet/if_ether.c:226
rtrequest(1,ffff80003c987650,0,ffff80003c9875c0,16) at rtrequest+0xdc1 sys/net/route.c:1114
rtm_output(ffff800001599e00,ffff80003c9876f8,ffff80003c987650,0,16) at rtm_output+0x91a sys/net/rtsock.c:953
route_output(fffffd806f57f600,ffff800010fe1c08) at route_output+0xa2b sys/net/rtsock.c:858
route_send(ffff800010fe1c08,fffffd806f57f600,0,0) at route_send+0xd7 sys/net/rtsock.c:322
sosend(ffff800010fe1c08,0,ffff80003c9878a8,0,0,808) at sosend+0x804 sys/kern/uipc_socket.c:-1
sendit(ffff80002a7b8010,4,ffff80003c9879a0,808,ffff80003c987a40) at sendit+0x5a5 sys/kern/uipc_syscalls.c:785
sys_sendto(ffff80002a7b8010,ffff80003c987af0,ffff80003c987a40) at sys_sendto+0x8d sys/kern/uipc_syscalls.c:563
syscall(ffff80003c987af0) at syscall+0x962 mi_syscall sys/sys/syscall_mi.h:-1 [inline]
syscall(ffff80003c987af0) at syscall+0x962 sys/arch/amd64/amd64/trap.c:775
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x9931f22df10, count: 5
https://www.openbsd.org/ddb.html describes the minimum info required in bug
reports. Insufficient info makes it difficult to find and fix bugs.
ddb>
ddb> set $lines = 0
ddb> set $maxwidth = 0
ddb> show panic
*cpu0: uvm_fault(0xffffffff8393bab0, 0xffff8000015a00ca, 0, 1) -> e
ddb> trace
arp_rtrequest(ffff8000002a2058,1,fffffd807e780888) at arp_rtrequest+0x6a4 arprequest sys/netinet/if_ether.c:325 [inline]
arp_rtrequest(ffff8000002a2058,1,fffffd807e780888) at arp_rtrequest+0x6a4 sys/netinet/if_ether.c:226
rtrequest(1,ffff80003c987650,0,ffff80003c9875c0,16) at rtrequest+0xdc1 sys/net/route.c:1114
rtm_output(ffff800001599e00,ffff80003c9876f8,ffff80003c987650,0,16) at rtm_output+0x91a sys/net/rtsock.c:953
route_output(fffffd806f57f600,ffff800010fe1c08) at route_output+0xa2b sys/net/rtsock.c:858
route_send(ffff800010fe1c08,fffffd806f57f600,0,0) at route_send+0xd7 sys/net/rtsock.c:322
sosend(ffff800010fe1c08,0,ffff80003c9878a8,0,0,808) at sosend+0x804 sys/kern/uipc_socket.c:-1
sendit(ffff80002a7b8010,4,ffff80003c9879a0,808,ffff80003c987a40) at sendit+0x5a5 sys/kern/uipc_syscalls.c:785
sys_sendto(ffff80002a7b8010,ffff80003c987af0,ffff80003c987a40) at sys_sendto+0x8d sys/kern/uipc_syscalls.c:563
syscall(ffff80003c987af0) at syscall+0x962 mi_syscall sys/sys/syscall_mi.h:-1 [inline]
syscall(ffff80003c987af0) at syscall+0x962 sys/arch/amd64/amd64/trap.c:775
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x9931f22df10, count: -10
ddb> show registers
rdi 0xffff800039d1a000
rsi 0x41f
rbp 0xffff80003c9874a0
rbx 0xde
rdx 0xffff800039d1a000
rcx 0xffff80000159ffe0
rax 0xfffffd806dad63e0
r8 0x20
r9 0xfffffd807e780888
r10 0x96e685c1f5c84c33
r11 0xac7340862c89ec65
r12 0x11a
r13 0xfffffd806dad6300
r14 0xfffffd807e780888
r15 0xffff8000002a2058
rip 0xffffffff811f3014 arp_rtrequest+0x6a4
cs 0x8
rflags 0x10246 __ALIGN_SIZE+0xf246
rsp 0xffff80003c987420
ss 0x10
arp_rtrequest+0x6a4: movzwl 0xc(%rcx,%rbx,1),%ecx
ddb> show proc
PROC (syz-executor) tid=361606 pid=67135 tcnt=2 stat=onproc
flags process=0 proc=4000000<THREAD>
runpri=50, usrpri=50, slppri=32, nice=20
wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0
forw=0xffffffffffffffff, list=0xffff80002a776a68,0xffffffff83998560
process=0xffff80002a8d4da8 user=0xffff80003c982000, vmspace=0xfffffd80779ca2e8
estcpu=36, cpticks=0, pctcpu=0.0, user=0, sys=0, intr=0
ddb> ps
PID TID PPID UID S FLAGS WAIT COMMAND
67135 461296 80590 0 2 0 syz-executor
*67135 361606 80590 0 7 0x4000000 syz-executor
18294 11730 99964 0 2 0 syz-executor
52474 300646 56266 0 2 0 syz-executor
52474 202358 56266 0 3 0x4000080 fsleep syz-executor
52474 70758 56266 0 2 0x4000000 syz-executor
71791 381107 4692 0 2 0 syz-executor
71791 142181 4692 0 3 0x4000080 fsleep syz-executor
71791 136500 4692 0 2 0x4000000 syz-executor
43848 370005 31762 0 2 0 syz-executor
25546 78500 51599 0 2 0 syz-executor
25546 50576 51599 0 3 0x4000080 pipewr syz-executor
4692 191548 68331 0 3 0x82 nanoslp syz-executor
38433 100361 0 0 3 0x14280 nfsidl nfsio
8826 120789 1 0 3 0x100083 ttyin getty
80590 235668 68331 0 3 0x82 nanoslp syz-executor
16072 480387 68331 0 2 0x2 syz-executor
84209 30898 0 0 3 0x14200 acct acct
56266 87757 68331 0 3 0x82 nanoslp syz-executor
51599 233973 68331 0 3 0x82 nanoslp syz-executor
88859 52227 68331 0 2 0x2 syz-executor
99964 281721 68331 0 3 0x82 nanoslp syz-executor
31762 349424 68331 0 3 0x82 nanoslp syz-executor
68331 370195 18474 0 3 0x82 kqread syz-executor
18474 214328 23439 0 3 0x10008a sigsusp ksh
23439 430242 16662 0 3 0x98 kqread sshd-session
16662 129321 23116 0 3 0x92 kqread sshd-session
23116 351986 1 0 3 0x88 kqread sshd
92197 31491 88269 73 3 0x1100090 kqread syslogd
88269 394997 1 0 3 0x100082 sbwait syslogd
3554 486274 1 0 3 0x100080 kqread resolvd
60879 416737 36981 77 3 0x100092 kqread dhcpleased
57855 270398 36981 77 3 0x100092 kqread dhcpleased
36981 415185 1 0 3 0x80 kqread dhcpleased
13836 494677 0 0 3 0x14200 bored smr
74636 505423 0 0 2 0x14200 zerothread
31224 478843 0 0 3 0x14200 aiodoned aiodoned
60076 219580 0 0 3 0x14200 syncer update
2880 227562 0 0 3 0x14200 cleaner cleaner
50561 171678 0 0 3 0x14200 reaper reaper
51468 316227 0 0 3 0x14200 pgdaemon pagedaemon
15762 269268 0 0 3 0x14200 bored viomb
22417 122151 0 0 3 0x40014200 acpi0 acpi0
52 1831 0 0 3 0x14200 bored softnet0
24161 322136 0 0 2 0x14200 systqmp
83047 207434 0 0 3 0x14200 bored systq
74599 211643 0 0 3 0x40014200 tmoslp softclock
95354 445058 0 0 3 0x40014200 idle0
1 484336 0 0 3 0x82 wait init
0 0 -1 0 3 0x10010200 scheduler swapper
ddb> show all locks
No such command
ddb> show malloc
Type InUse MemUse HighUse Limit Requests Type Lim
devbuf 11043 12117K 13387K 166960K 17737 0
pcb 17 13K 13K 166960K 508 0
rtable 239 16K 17K 166960K 972 0
pf 27 12K 15K 166960K 478 0
ifaddr 34 7K 9K 166960K 323 0
ifgroup 39 1K 2K 166960K 593 0
sysctl 4 1K 9K 166960K 28 0
counters 31 17K 18K 166960K 375 0
ioctlops 0 0K 4K 166960K 557 0
iov 0 0K 32K 166960K 124 0
mount 1 1K 1K 166960K 1 0
log 0 0K 0K 166960K 4 0
vnodes 1387 87K 88K 166960K 4135 0
UFS quota 1 32K 32K 166960K 1 0
UFS mount 5 36K 36K 166960K 5 0
shm 2 1K 5K 166960K 3 0
VM map 2 1K 1K 166960K 2 0
sem 18 11K 11K 166960K 58 0
dirhash 12 2K 2K 166960K 48 0
ACPI 1692 195K 286K 166960K 12470 0
file desc 18 65K 240K 166960K 5720 0
sigio 0 0K 0K 166960K 57 0
proc 61 59K 108K 166960K 837 0
subproc 72 4K 4K 166960K 121 0
NFS srvsock 1 0K 0K 166960K 1 0
NFS daemon 1 16K 16K 166960K 1 0
ip_moptions 0 0K 0K 166960K 299 0
in_multi 73 5K 7K 166960K 309 0
ether_multi 1 0K 0K 166960K 28 0
mrt 1 0K 0K 166960K 26 0
ISOFS mount 1 32K 32K 166960K 1 0
MSDOSFS mount 1 16K 16K 166960K 1 0
ttys 115 519K 519K 166960K 115 0
exec 0 0K 1K 166960K 604 0
fusefs mount 1 32K 32K 166960K 1 0
pfkey data 0 0K 0K 166960K 7 0
tdb 3 0K 0K 166960K 3 0
VM swap 8 62K 64K 166960K 10 0
UVM amap 207 151K 168K 166960K 46389 0
UVM aobj 75 25K 26K 166960K 89 0
pinsyscall 39 78K 94K 166960K 6923 0
memdesc 1 4K 4K 166960K 1 0
crypto data 1 1K 1K 166960K 1 0
ip6_options 0 0K 0K 166960K 203 0
NDP 11 0K 2K 166960K 234 0
temp 92 8672K 8800K 166960K 94144 0
kqueue 13 20K 30K 166960K 517 0
SYN cache 2 8K 16K 166960K 3 0
ddb> show all pools
Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle
rtpcb 120 222 0 218 1 0 1 1 0 8 0
rtentry 136 289 0 213 5 0 5 5 0 8 0
unpcb 144 1419 0 1404 6 0 6 6 0 8 5
syncache 336 10 0 10 3 2 1 1 0 8 1
tcpqe 32 5 0 5 2 1 1 1 0 8 1
tcpcb 736 682 0 677 2 0 2 2 0 8 1
arp 96 38 0 25 1 0 1 1 0 8 0
ipq 40 10 0 10 1 0 1 1 0 8 1
ipqe 40 15 0 15 1 0 1 1 0 8 1
inpcb 328 2176 0 2167 8 1 7 7 0 8 6
ip6q 72 13 0 13 1 0 1 1 0 8 1
ip6af 40 22 0 22 1 0 1 1 0 8 1
nd6 112 49 0 33 1 0 1 1 0 8 0
pkpcb 40 57 0 57 2 1 1 1 0 8 1
kcovpl 48 13 0 5 1 0 1 1 0 8 0
mppekey 1024 3 0 3 1 1 0 1 0 8 0
ppxss 1072 286 0 286 2 1 1 1 0 8 1
pppxif 1384 39 0 39 2 1 1 1 0 8 1
pfstscr 40 1 0 1 1 1 0 1 0 8 0
pfrktable 1344 2 0 2 2 1 1 1 0 8 1
pfstitem 24 2 0 0 1 0 1 1 0 8 0
pfstkey 128 4 0 2 1 0 1 1 0 8 0
pfstate 384 2 0 1 1 0 1 1 0 8 0
rttmr 136 6 0 6 2 1 1 1 0 8 1
art_heap8 4096 5 0 0 5 0 5 5 0 8 0
art_heap4 256 1318 0 991 35 8 27 31 0 8 4
art_table 40 1323 0 991 6 0 6 6 0 8 0
art_node 32 281 0 212 1 0 1 1 0 8 0
sysvmsgpl 40 16 0 9 1 0 1 1 0 8 0
semupl 112 5 0 5 2 1 1 1 0 8 1
semapl 112 51 0 35 1 0 1 1 0 8 0
shmpl 112 68 0 6 2 0 2 2 0 8 0
dirhash 1024 42 0 25 3 0 3 3 0 8 0
dino2pl 256 9758 0 8259 95 0 95 95 0 8 0
ffsino 256 9758 0 8259 95 0 95 95 0 8 0
nchpl 144 16084 0 14372 64 0 64 64 0 8 0
rtmask 32 83 0 83 2 1 1 1 0 8 1
vnodes 216 5926 0 0 330 0 330 330 0 8 0
namei 1024 40294 0 40293 4 1 3 3 0 8 2
vcpupl 3904 11 0 1 2 0 2 2 0 8 0
vmpool 808 16 0 6 2 0 2 2 0 8 1
kstatmem 264 414 0 396 2 0 2 2 0 8 0
acpiwqpl 32 3 0 3 1 0 1 1 1 8 1
scsiplug 72 17 0 17 2 1 1 1 0 8 1
scxspl 216 55462 0 55462 9 8 1 8 1 8 1
plimitpl 152 352 0 335 1 0 1 1 0 8 0
sigapl 424 6017 0 5972 11 3 8 8 0 8 0
knotepl 120 209835 0 209788 30 20 10 16 0 8 8
kqueuepl 184 792 0 783 1 0 1 1 0 8 0
pipepl 304 261 0 232 3 0 3 3 0 8 0
fdescpl 448 5959 0 5929 5 1 4 5 0 8 0
filepl 120 16878 0 16665 13 1 12 12 0 8 3
lockfpl 104 908 0 906 2 0 2 2 0 8 1
lockfspl 48 368 0 366 1 0 1 1 0 8 0
sessionpl 144 33 0 25 1 0 1 1 0 8 0
pgrppl 48 71 0 55 1 0 1 1 0 8 0
ucredpl 104 2214 0 2202 1 0 1 1 0 8 0
zombiepl 144 6707 0 6707 3 2 1 1 0 8 1
processpl 1152 6017 0 5972 6 1 5 5 0 8 0
procpl 664 12288 0 12237 8 1 7 7 0 8 0
sosppl 176 57 0 57 2 1 1 1 0 8 1
sockpl 552 3910 0 3882 16 6 10 14 0 8 8
mcl64k 65536 1181 0 1181 2 1 1 1 0 8 1
mcl16k 16384 611 0 611 3 2 1 1 0 8 1
mcl12k 12288 465 0 465 3 2 1 1 0 8 1
mcl9k 9216 226 0 226 2 1 1 1 0 8 1
mcl8k 8192 1086 0 1086 3 2 1 1 0 8 1
mcl4k 4096 12627 0 12573 16 8 8 15 0 8 0
mcl2k2 2112 9 0 9 2 1 1 1 0 8 1
mcl2k 2048 3964 0 3955 4 2 2 3 0 8 0
mtagpl 96 110 0 54 4 1 3 3 0 8 0
mbufpl 256 70197 0 69990 84 60 24 76 0 8 2
bufpl 280 32254 0 26033 445 0 445 445 0 8 0
anonpl 24 676645 0 673761 90 29 61 61 0 187 25
amapchunkpl 152 162679 0 162281 41 14 27 31 0 158 8
amappl16 200 13121 0 13088 89 76 13 24 0 8 8
amappl15 192 4 0 4 2 2 0 1 0 8 0
amappl14 184 7 0 7 2 2 0 1 0 8 0
amappl13 176 467 0 466 1 0 1 1 0 8 0
amappl12 168 6341 0 6304 2 0 2 2 0 8 0
amappl11 160 5 0 5 1 1 0 1 0 8 0
amappl10 152 40 0 30 1 0 1 1 0 8 0
amappl9 144 256 0 256 1 1 0 1 0 8 0
amappl8 136 54 0 53 1 0 1 1 0 8 0
amappl7 128 97 0 94 1 0 1 1 0 8 0
amappl6 120 329 0 318 1 0 1 1 0 8 0
amappl5 112 68 0 60 1 0 1 1 0 8 0
amappl4 104 432 0 409 1 0 1 1 0 8 0
amappl3 96 30808 0 30732 3 0 3 3 0 8 0
amappl2 88 6099 0 6027 2 0 2 2 0 8 0
amappl1 80 32505 0 31984 13 1 12 13 0 8 0
amappl 88 45250 0 45112 5 0 5 5 0 92 0
uvmvnodes 80 155 0 0 4 0 4 4 0 8 0
dma8192 8192 1 0 1 1 1 0 1 0 8 0
dma4096 4096 3 0 3 2 2 0 1 0 8 0
dma1024 1024 2 0 1 1 0 1 1 0 8 0
dma512 512 1 0 1 1 0 1 1 0 8 1
dma256 256 7 0 7 2 2 0 1 0 8 0
dma128 128 259 0 259 3 2 1 1 0 8 1
dma64 64 6 0 6 1 1 0 1 0 8 0
dma32 32 7 0 7 1 1 0 1 0 8 0
dma16 16 18 0 17 1 0 1 1 0 8 0
aobjpl 72 88 0 14 2 0 2 2 0 8 0
uaddrrnd 24 5959 0 5929 1 0 1 1 0 8 0
uaddrbest 32 2 0 0 1 0 1 1 0 8 0
uaddr 24 5959 0 5929 1 0 1 1 0 8 0
vmmpekpl 168 37640 0 37604 3 0 3 3 0 8 0
vmmpepl 168 349924 0 348152 114 15 99 99 0 357 16
vmsppl 368 5958 0 5929 4 1 3 4 0 8 0
rwobjpl 40 74991 0 73955 16 1 15 15 0 8 0
pdppl 4096 11957 0 11880 145 66 79 81 0 8 2
pvpl 32 2420098 0 2411617 197 56 141 141 0 265 45
pmappl 216 5974 0 5935 4 1 3 3 0 8 0
extentpl 40 45 0 27 1 0 1 1 0 8 0
phpool 112 518 0 160 12 0 12 12 0 8 0
ddb> machine ddbcpu 0
No such command
ddb> trace
arp_rtrequest(ffff8000002a2058,1,fffffd807e780888) at arp_rtrequest+0x6a4 arprequest sys/netinet/if_ether.c:325 [inline]
arp_rtrequest(ffff8000002a2058,1,fffffd807e780888) at arp_rtrequest+0x6a4 sys/netinet/if_ether.c:226
rtrequest(1,ffff80003c987650,0,ffff80003c9875c0,16) at rtrequest+0xdc1 sys/net/route.c:1114
rtm_output(ffff800001599e00,ffff80003c9876f8,ffff80003c987650,0,16) at rtm_output+0x91a sys/net/rtsock.c:953
route_output(fffffd806f57f600,ffff800010fe1c08) at route_output+0xa2b sys/net/rtsock.c:858
route_send(ffff800010fe1c08,fffffd806f57f600,0,0) at route_send+0xd7 sys/net/rtsock.c:322
sosend(ffff800010fe1c08,0,ffff80003c9878a8,0,0,808) at sosend+0x804 sys/kern/uipc_socket.c:-1
sendit(ffff80002a7b8010,4,ffff80003c9879a0,808,ffff80003c987a40) at sendit+0x5a5 sys/kern/uipc_syscalls.c:785
sys_sendto(ffff80002a7b8010,ffff80003c987af0,ffff80003c987a40) at sys_sendto+0x8d sys/kern/uipc_syscalls.c:563
syscall(ffff80003c987af0) at syscall+0x962 mi_syscall sys/sys/syscall_mi.h:-1 [inline]
syscall(ffff80003c987af0) at syscall+0x962 sys/arch/amd64/amd64/trap.c:775
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x9931f22df10, count: -10
ddb> machine ddbcpu 1
No such command
ddb> trace
arp_rtrequest(ffff8000002a2058,1,fffffd807e780888) at arp_rtrequest+0x6a4 arprequest sys/netinet/if_ether.c:325 [inline]
arp_rtrequest(ffff8000002a2058,1,fffffd807e780888) at arp_rtrequest+0x6a4 sys/netinet/if_ether.c:226
rtrequest(1,ffff80003c987650,0,ffff80003c9875c0,16) at rtrequest+0xdc1 sys/net/route.c:1114
rtm_output(ffff800001599e00,ffff80003c9876f8,ffff80003c987650,0,16) at rtm_output+0x91a sys/net/rtsock.c:953
route_output(fffffd806f57f600,ffff800010fe1c08) at route_output+0xa2b sys/net/rtsock.c:858
route_send(ffff800010fe1c08,fffffd806f57f600,0,0) at route_send+0xd7 sys/net/rtsock.c:322
sosend(ffff800010fe1c08,0,ffff80003c9878a8,0,0,808) at sosend+0x804 sys/kern/uipc_socket.c:-1
sendit(ffff80002a7b8010,4,ffff80003c9879a0,808,ffff80003c987a40) at sendit+0x5a5 sys/kern/uipc_syscalls.c:785
sys_sendto(ffff80002a7b8010,ffff80003c987af0,ffff80003c987a40) at sys_sendto+0x8d sys/kern/uipc_syscalls.c:563
syscall(ffff80003c987af0) at syscall+0x962 mi_syscall sys/sys/syscall_mi.h:-1 [inline]
syscall(ffff80003c987af0) at syscall+0x962 sys/arch/amd64/amd64/trap.c:775
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x9931f22df10, count: -10