last executing test programs: 81.088937ms ago: executing program 0 (id=1): r0 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0xbe, 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) write(r1, &(0x7f00000003c0)="f0305594cd2b0a6f40898e1415", 0xffdd) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2, 0x10, r0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x40000, 0x0) ioctl$BIOCSETIF(r3, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) ioctl$BIOCSETF(r3, 0x80104267, &(0x7f00000006c0)={0x3, &(0x7f0000000000)=[{0x84, 0xc, 0x55, 0xf}, {0x4, 0x8, 0x6, 0x5}, {0x6, 0xbc, 0x28, 0x8001}]}) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x5900) close(0xffffffffffffffff) r4 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) ioctl$VNDIOCSET(r4, 0xc0384600, &(0x7f0000000140)={&(0x7f0000000180)='./file0\x00', 0x567, 0x0}) syz_emit_ethernet(0x66, &(0x7f0000000480)=ANY=[]) write(r2, &(0x7f0000000080)="cd666bbdb94884e561a0c9f546260c5b6f27fad835b11d1df5d6ae0fcf98a651f3546d92ec22b4ab5e2792e118b19125201d1041d13c1348d54f71000000000000", 0x41) syz_emit_ethernet(0xf6, &(0x7f0000001440)={@remote, @empty, [], {@ipv6={0x86dd, {0x5, 0x6, "010c75", 0xc0, 0x2b, 0xc, @empty, @remote={0xfe, 0x80, '\x00', 0x0}, {[@fragment={0x3a, 0x0, 0x4, 0x0, 0x0, 0x0, 0x64}], @generic="c73010cefd5dd2719437144c4f2709c49228a4977271d73488140560e1da28ae17691cf6e3957dd23426594d737e41d221b77c441663f7e60189a679588e919cd495f4f195c33516242326e9495c2c9b0d25ab038b22383588794680f8634950fa0028ee23d3e49b2fddeb82bea33b1d35ad6980025b7f38edf99471d6e277c8a044a420460e7b531aa6bbdd501c57657bec65ad243a3fdbf2e22975b9e468476c885ed8034ab6b81e5f1f8a5cfbe48260fcd4e4ae2a2d00"}}}}}) execve(0x0, 0x0, 0x0) 77.718303ms ago: executing program 2 (id=3): r0 = semget$private(0x0, 0x2, 0x1) semctl$GETPID(r0, 0x2, 0x4, &(0x7f00000000c0)=""/102) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0xfff) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f00000001c0), 0x20, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) fstat(r2, &(0x7f0000000200)) semctl$SETALL(r0, 0x0, 0x9, &(0x7f0000000180)=[0x62b, 0x8, 0x5, 0x8]) r3 = semget(0x1, 0x1, 0x400) close(r1) semctl$IPC_RMID(r3, 0x0, 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000a00)={0x3, &(0x7f0000000000)=[{0x1, 0x3, 0x31, 0x8000}, {0x3, 0xff, 0x30, 0x6}, {0x9b1e, 0x26, 0xfa, 0x6}]}) ioctl$BIOCPROMISC(r1, 0x20004269) open(&(0x7f0000000080)='./bus\x00', 0x880, 0x0) 64.906258ms ago: executing program 3 (id=4): r0 = socket(0x2, 0x4001, 0x0) setuid(0xffffffffffffffff) setresuid(0xffffffffffffffff, 0xee00, 0xffffffffffffffff) r1 = openat$pci(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) ioctl$PCIOCGETROM(r1, 0xc0107005, &(0x7f0000000100)={{}, 0x0, 0x0}) readlinkat(0xffffffffffffffff, 0x0, 0x0, 0x0) shutdown(r0, 0x1) listen(r0, 0x1) 58.699914ms ago: executing program 5 (id=6): r0 = semget(0x3, 0x2, 0x608) semctl$SETVAL(r0, 0x4, 0x8, &(0x7f00000004c0)=0xffff6d65) semctl$GETPID(r0, 0x511ea7ed941ca12b, 0x4, &(0x7f0000000000)=""/3) sysctl$vm_swapencrypt(&(0x7f0000002980), 0x3, 0x0, 0x0, &(0x7f0000002ac0), 0x0) 47.08675ms ago: executing program 1 (id=2): mknod(&(0x7f0000000080)='./bus\x00', 0x2000, 0x205b1a) r0 = socket(0x11, 0x3, 0x0) sendto$unix(r0, &(0x7f0000000000)="b1000501600000041600000007000000087c156610c18125d7f96ecfc73fd3d89815a9c61d3952ddb06b36ac970bff03000000000000000000000000ebe1aa5323edeb51e2f0ca3ebbc2c4699a09000000acb5b302000d7d010000000100000021020000742fe2458bfbb770c1f5a8aec872ea772ec58904000000008d9810361b1257aba8c500002012010000de5000000000000000000000000000000000000000000000000000001f00000000000000", 0xb1, 0x808, 0x0, 0x0) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f00000001c0), 0x40000, 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) r2 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) ioctl$WSKBDIO_SETMAP(r2, 0x8010570e, &(0x7f0000000180)={0x1bd1, &(0x7f0000000040)}) ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0xc, 0xfe, 0x3, 0x9}, {0x2, 0x0, 0x7, 0x5}, {0x9b1e, 0x7, 0xff, 0x200000}]}) syz_emit_ethernet(0x1000e, &(0x7f00000015c0)=ANY=[]) r3 = open(&(0x7f0000000080)='./bus\x00', 0x2, 0x0) r4 = socket(0x2, 0x8002, 0x0) r5 = fcntl$dupfd(r4, 0x2, 0xffffffffffffffff) r6 = socket$inet(0x2, 0x3, 0x40) recvmmsg(r6, &(0x7f0000001580)={{0x0, 0x0, 0x0, 0x0, &(0x7f0000001540)=""/21, 0x15}, 0x2}, 0x38, 0x800, &(0x7f00000015c0)={0xffffffffffffff78, 0x8}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) sendto$inet(r6, 0x0, 0x0, 0xa, &(0x7f00000002c0)={0x10, 0x2, 0x2, 0xffffffff}, 0x10) closefrom(r5) ioctl$VMM_IOC_RESETCPU(r5, 0x82405605, &(0x7f00000010c0)={0x4, 0x10001, {[0x8, 0xd67, 0x2, 0x5, 0x4, 0x6, 0x8001, 0x5174724e, 0x1, 0x5, 0x6, 0x100000001, 0x101, 0x7fff, 0x1, 0x9, 0x7, 0x3], [0x9, 0x884cee5, 0x8, 0x7f, 0x7fffffffffffffff, 0x81, 0x9, 0x3, 0x4, 0x9], [0x8, 0x7cd56998, 0x5, 0x9, 0x0, 0x8, 0x1a], [0xffffffffffff0001, 0x8000, 0x100000000, 0x8, 0x2, 0x2], [{0x6, 0xc1, 0x7, 0x10}, {0xc, 0x0, 0x7, 0x7ff}, {0x4, 0x3, 0xb6, 0xffffffff80000000}, {0xffe7, 0x9, 0x4, 0x838}, {0x2, 0x88, 0x954, 0x1ff}, {0x3, 0x800, 0x1, 0x3}, {0x3, 0x4, 0x5, 0x8}, {0x3, 0x7, 0x0, 0x200}], {0xdb91, 0xb4, 0x7, 0x3ff}, {0x3, 0x749e3ef4, 0xb, 0x5}}}) ioctl$TIOCSTAT(r3, 0x20007465) pwritev(r3, &(0x7f0000001840)=[{0x0, 0x5b}, {0x0}, {0x0}, {0x0, 0x4c}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) open(&(0x7f0000000080)='./file0\x00', 0x2, 0xfa) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000040)={0x80000000, 0xffff63de, 0x5, 0x2, 0x8, 0x3, 0x44, 0x10, [{0x5, 0x3, 0xfffff115, 0x80000001}, {0x3, 0xffffffff, 0x6, 0xfff}, {0x1, 0x4baa, 0x8, 0x9}, {0x4, 0xe2, 0x0, 0x100}, {0x7, 0x2000007, 0x5, 0x84}, {0xa, 0xfffd, 0x8, 0x2}, {0x4, 0x800, 0x4, 0x1}, {0x207, 0xffffffff, 0x28000, 0xffffe2ea}, {0x9, 0x1000, 0x4, 0x7fff}, {0x7, 0x1, 0x6, 0x8c01}, {0x4, 0x0, 0x8, 0x6}, {0x10000, 0x0, 0x800000, 0x28}, {0x401, 0x4, 0x400009, 0xfd}, {0x3, 0x6e2, 0x78a49e17, 0x6f5fc48f}, {0x3, 0x101, 0x3, 0x9}, {0x9be2, 0x1, 0x2, 0x400}]}) sysctl$vfs_ffs(&(0x7f00000000c0)={0x4, 0x1, 0x1}, 0x4, 0x0, 0x0, 0x0, 0xffffffffffffff3d) ioctl$WSMOUSEIO_SCALIBCOORDS(r3, 0x81205724, &(0x7f0000000100)={0x7ff, 0x17, 0x30, 0x5, 0x3fe, 0x80010001, 0x8, 0x10, [{0x0, 0x6, 0x7, 0x9}, {0xc5f, 0x0, 0x9, 0xc}, {0x3a77, 0x5, 0x3, 0xa}, {0x80000000, 0xd, 0x107, 0x70a}, {0x401, 0xff59, 0x1002805, 0x9}, {0x20000008, 0x4, 0x2, 0xb4}, {0xce1, 0x91, 0x4f5, 0xfffffffe}, {0x0, 0x801, 0x7ff, 0xe}, {0x483a2561, 0x9, 0x6, 0x100000}, {0x2005, 0x2001, 0xcee, 0x400000}, {0x1bf, 0x80000002, 0x7}, {0x3f1, 0xdbc, 0x8, 0x8000006}, {0x26, 0x67, 0xc, 0x2c6}, {0x29a70716, 0xfffffffa, 0x3, 0xd}, {0x2, 0x9, 0x6, 0xfffffffd}, {0x0, 0xc0, 0x2, 0x20000b}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r7 = socket(0x18, 0xc003, 0x3a) sysctl$kern(&(0x7f0000000040)={0x1, 0x3f}, 0x2, 0x0, 0x0, 0x0, 0x0) setsockopt(r7, 0x29, 0x6c, &(0x7f0000000040), 0x4) setsockopt$inet6_MRT6_ADD_MFC(r7, 0x29, 0x68, 0x0, 0x0) 30.599302ms ago: executing program 4 (id=5): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x6, 0x1, &(0x7f0000000340)="04000000d7fc90fd03c797bb16f5edfd61edbc85363696e0551b2724734db75301d7ac8d37aac04fea8f866e144323c7791672e0d20db4fba0619ac7a41377f11359c9f6618bd4c187f58f833bc05e313a606f825908e3c7db76310fc54f09d96158efa47b46a744033d7a39334165a4b2783b735b5698cfd30ff7568ba07e742a8fa2d98e35c20c5feb235b9f02b9c89194a0516744000000000020001808e2c11aa78b2a6e8494f418faeca147d2294e2abb05f699ce738ec509847135b3406401bdae8f045570805c031e6606b1d1acbb95ed8269f1f07400bb65b788f19f09", 0xe1) setrlimit(0x6, &(0x7f0000000080)={0xffffffff, 0x800}) r1 = socket(0x6, 0x5, 0x6) setsockopt(r1, 0x1000000000029, 0x3f, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x18) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) setuid(0xee01) r2 = syz_open_pts() ioctl$TIOCSETA(r2, 0x802c7414, &(0x7f0000000380)={0x2, 0x0, 0xfffffffe, 0x80000000, "7837b271eca64737b1c34d859895269eb4b1690c", 0x5, 0xc}) sync() select(0x40, &(0x7f0000000340)={0x2, 0x81, 0x7, 0x1, 0xffffffffffffffa5, 0x9, 0x4, 0xaeb6}, &(0x7f0000000040)={0xde8, 0x7, 0x0, 0x1, 0x6, 0x6, 0x2, 0x4}, 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') 9.512448ms ago: executing program 6 (id=7): r0 = syz_open_pts() mknod(&(0x7f00000002c0)='./file0\x00', 0x2000, 0x5200) r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$WSMOUSEIO_SCALIBCOORDS(r1, 0x81205724, &(0x7f0000000640)={0xffffffff, 0x0, 0x9, 0x3, 0x4, 0xffffffff, 0x0, 0x10, [{0x5e7, 0xa, 0xff, 0x6}, {0x8001, 0xd4d6, 0x6, 0xf2}, {0xc, 0x2, 0x5}, {0x9, 0x8, 0x8}, {0x4, 0x6, 0x0, 0x3}, {0x1, 0x5, 0x8, 0xb8d6}, {0x80000001, 0x9, 0x7fffffff, 0xd43}, {0x8001, 0x1, 0xfff, 0x6}, {0x9f, 0x3, 0xef78, 0x10000}, {0x4, 0xfffffffa, 0x1, 0x1d1}, {0xb2, 0xfffffff7, 0x7fffffff, 0x8}, {0x3, 0x4, 0x0, 0x3}, {0x1, 0x4, 0xff, 0x1}, {0x49, 0x6, 0x1, 0x60}, {0x8, 0x4, 0x7, 0x5}, {0x6, 0x8000, 0xf6, 0x6}]}) ioctl$TIOCCBRK(r0, 0x2000747a) r2 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$WSKBDIO_GETBELL(r2, 0x40105704, &(0x7f0000000040)) read(r0, &(0x7f0000000000)=""/48, 0x30) syz_open_pts() (async) mknod(&(0x7f00000002c0)='./file0\x00', 0x2000, 0x5200) (async) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) (async) ioctl$WSMOUSEIO_SCALIBCOORDS(r1, 0x81205724, &(0x7f0000000640)={0xffffffff, 0x0, 0x9, 0x3, 0x4, 0xffffffff, 0x0, 0x10, [{0x5e7, 0xa, 0xff, 0x6}, {0x8001, 0xd4d6, 0x6, 0xf2}, {0xc, 0x2, 0x5}, {0x9, 0x8, 0x8}, {0x4, 0x6, 0x0, 0x3}, {0x1, 0x5, 0x8, 0xb8d6}, {0x80000001, 0x9, 0x7fffffff, 0xd43}, {0x8001, 0x1, 0xfff, 0x6}, {0x9f, 0x3, 0xef78, 0x10000}, {0x4, 0xfffffffa, 0x1, 0x1d1}, {0xb2, 0xfffffff7, 0x7fffffff, 0x8}, {0x3, 0x4, 0x0, 0x3}, {0x1, 0x4, 0xff, 0x1}, {0x49, 0x6, 0x1, 0x60}, {0x8, 0x4, 0x7, 0x5}, {0x6, 0x8000, 0xf6, 0x6}]}) (async) ioctl$TIOCCBRK(r0, 0x2000747a) (async) openat$wskbd(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) (async) ioctl$WSKBDIO_GETBELL(r2, 0x40105704, &(0x7f0000000040)) (async) read(r0, &(0x7f0000000000)=""/48, 0x30) (async) 0s ago: executing program 7 (id=8): r0 = open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x2, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) sysctl$vm_swapencrypt(&(0x7f0000000000), 0x3, 0x0, 0x0, &(0x7f0000001380)='\x00\x00\x00\x00', 0x4) writev(r1, &(0x7f0000000340)=[{&(0x7f0000000000), 0x2cfea}], 0x1000000000000013) mkdir(&(0x7f0000000180)='./file0\x00', 0x25) unveil(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000300)='w\x00') unveil(&(0x7f0000000280)='.\x00', &(0x7f00000002c0)='r\x00') open(&(0x7f00000000c0)='./file0\x00', 0x1, 0x28) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x11, r0, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0xe2) setrlimit(0x0, &(0x7f00000011c0)={0x7, 0xfffffff7ffffffff}) ioctl$TIOCSETAF(0xffffffffffffffff, 0x802c7416, &(0x7f0000000040)={0x78, 0x20007, 0x100, 0xd, "5e7bff010000de169c940000ebffff07a200b823", 0x101, 0x7fffffff}) munmap(&(0x7f0000000000/0xa000)=nil, 0xa000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.243' (ED25519) to the list of known hosts. uvm_fault(0xffffffff83a25c80, 0xffff80000160f06a, 0, 1) -> e kernel: page fault trap, code=0 Stopped at arp_rtrequest+0x6a4: movzwl 0xc(%rcx,%rbx,1),%ecx TID PID UID PRFLAGS PFLAGS CPU COMMAND *441191 35391 0 0 0x4000000 0 syz-executor arp_rtrequest(ffff8000002a2058,1,fffffd806c9a7898) at arp_rtrequest+0x6a4 rtrequest(1,ffff80003c8f5900,0,ffff80003c8f5870,16) at rtrequest+0xdc1 rtm_output(ffff80000160da00,ffff80003c8f59a8,ffff80003c8f5900,0,16) at rtm_output+0x91a route_output(fffffd806ca5bb00,ffff8000015a1c10) at route_output+0xa6a route_send(ffff8000015a1c10,fffffd806ca5bb00,0,0) at route_send+0xd7 sosend(ffff8000015a1c10,0,ffff80003c8f5b58,0,0,808) at sosend+0x804 sendit(ffff80003c8fbca8,3,ffff80003c8f5c50,808,ffff80003c8f5cf0) at sendit+0x5a5 sys_sendto(ffff80003c8fbca8,ffff80003c8f5da0,ffff80003c8f5cf0) at sys_sendto+0x8d syscall(ffff80003c8f5da0) at syscall+0x962 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xd206a20eee0, count: 5 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb> ddb> set $lines = 0 ddb> set $maxwidth = 0 ddb> show panic *cpu0: uvm_fault(0xffffffff83a25c80, 0xffff80000160f06a, 0, 1) -> e ddb> trace arp_rtrequest(ffff8000002a2058,1,fffffd806c9a7898) at arp_rtrequest+0x6a4 rtrequest(1,ffff80003c8f5900,0,ffff80003c8f5870,16) at rtrequest+0xdc1 rtm_output(ffff80000160da00,ffff80003c8f59a8,ffff80003c8f5900,0,16) at rtm_output+0x91a route_output(fffffd806ca5bb00,ffff8000015a1c10) at route_output+0xa6a route_send(ffff8000015a1c10,fffffd806ca5bb00,0,0) at route_send+0xd7 sosend(ffff8000015a1c10,0,ffff80003c8f5b58,0,0,808) at sosend+0x804 sendit(ffff80003c8fbca8,3,ffff80003c8f5c50,808,ffff80003c8f5cf0) at sendit+0x5a5 sys_sendto(ffff80003c8fbca8,ffff80003c8f5da0,ffff80003c8f5cf0) at sys_sendto+0x8d syscall(ffff80003c8f5da0) at syscall+0x962 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xd206a20eee0, count: -10 ddb> show registers rdi 0xffff80002ccac000 rsi 0x95e rbp 0xffff80003c8f5750 rbx 0xde rdx 0xffff80002ccac000 rcx 0xffff80000160ef80 rax 0xfffffd806ca5b5e0 r8 0x1000 __ALIGN_SIZE r9 0 r10 0xde23fdd8919ab824 r11 0x90690cdbd86f6e57 r12 0x18 r13 0xfffffd806ca5b500 r14 0xfffffd806c9a7898 r15 0xffff8000002a2058 rip 0xffffffff818d8594 arp_rtrequest+0x6a4 cs 0x8 rflags 0x10246 __ALIGN_SIZE+0xf246 rsp 0xffff80003c8f56d0 ss 0x10 arp_rtrequest+0x6a4: movzwl 0xc(%rcx,%rbx,1),%ecx ddb> show proc PROC (syz-executor) tid=441191 pid=35391 tcnt=2 stat=onproc flags process=0 proc=4000000 runpri=32, usrpri=50, slppri=32, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0 forw=0xffffffffffffffff, list=0xffff80003c8fa020,0xffff80003c8faa90 process=0xffff8000ffff8018 user=0xffff80003c8f0000, vmspace=0xfffffd806ca6d188 estcpu=27, cpticks=0, pctcpu=0.0, user=0, sys=0, intr=0 ddb> ps PID TID PPID UID S FLAGS WAIT COMMAND 46591 227667 34137 0 2 0 syz-executor 33753 81237 65909 0 2 0 syz-executor 33753 93101 65909 0 3 0x4000080 fsleep syz-executor 35391 345689 80974 0 2 0 syz-executor *35391 441191 80974 0 7 0x4000000 syz-executor 63675 388015 91121 0 2 0 syz-executor 63675 380170 91121 0 3 0x4000080 fsleep syz-executor 66480 71186 47360 0 2 0 syz-executor 88217 241128 71877 -1 2 0x10 syz-executor 88217 356538 71877 -1 3 0x4000090 fsleep syz-executor 82259 290676 72793 0 2 0 syz-executor 82259 289789 72793 0 3 0x4000080 fsleep syz-executor 15760 177812 94928 0 2 0x2 syz-executor 34137 369536 94928 0 3 0x82 nanoslp syz-executor 91121 286774 94928 0 3 0x82 nanoslp syz-executor 65909 348033 94928 0 2 0xc82 syz-executor 71877 3917 94928 0 2 0xc82 syz-executor 72793 300684 94928 0 2 0xc82 syz-executor 80974 46317 94928 0 3 0x82 nanoslp syz-executor 47360 521759 94928 0 3 0x82 nanoslp syz-executor 94928 43972 20502 0 2 0x2 syz-executor 20502 458007 8934 0 3 0x10008a sigsusp ksh 8934 267659 75891 0 3 0x98 kqread sshd-session 75891 384775 8935 0 3 0x92 kqread sshd-session 93387 450011 1 0 3 0x100083 ttyin getty 8935 190453 1 0 3 0x88 kqread sshd 9837 301381 18440 73 3 0x1100090 kqread syslogd 18440 247036 1 0 3 0x100082 sbwait syslogd 87356 309050 1 0 3 0x100080 kqread resolvd 5920 392099 13663 77 3 0x100092 kqread dhcpleased 82 43474 13663 77 3 0x100092 kqread dhcpleased 13663 111327 1 0 3 0x80 kqread dhcpleased 25855 496600 0 0 3 0x14200 bored smr 40400 187908 0 0 2 0x14200 zerothread 73372 98931 0 0 3 0x14200 aiodoned aiodoned 62863 259311 0 0 3 0x14200 syncer update 6905 121782 0 0 3 0x14200 cleaner cleaner 76654 51893 0 0 3 0x14200 reaper reaper 96814 245715 0 0 3 0x14200 pgdaemon pagedaemon 25771 131147 0 0 3 0x14200 bored viomb 69010 114309 0 0 3 0x40014200 acpi0 acpi0 38131 294591 0 0 3 0x14200 bored softnet0 92129 203175 0 0 3 0x14200 smrbar systqmp 46928 8466 0 0 3 0x14200 bored systq 70793 162092 0 0 3 0x40014200 tmoslp softclock 46797 239707 0 0 3 0x40014200 idle0 1 25134 0 0 3 0x82 wait init 0 0 -1 0 3 0x10200 scheduler swapper ddb> show all locks No such command ddb> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 11028 12103K 12119K 166960K 12112 0 pcb 17 12K 12K 166960K 17 0 rtable 246 8K 8K 166960K 370 0 pf 30 12K 12K 166960K 30 0 ifaddr 42 7K 7K 166960K 44 0 ifgroup 50 2K 2K 166960K 50 0 sysctl 1 1K 9K 166960K 5 0 counters 33 17K 17K 166960K 33 0 ioctlops 0 0K 2K 166960K 29 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1288 81K 81K 166960K 1353 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 2 1K 1K 166960K 2 0 VM map 2 1K 1K 166960K 2 0 sem 4 0K 0K 166960K 4 0 dirhash 12 2K 2K 166960K 12 0 ACPI 1692 195K 286K 166960K 12470 0 file desc 17 61K 93K 166960K 137 0 proc 58 59K 91K 166960K 496 0 subproc 72 4K 4K 166960K 72 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 in_multi 99 7K 7K 166960K 99 0 ether_multi 1 0K 0K 166960K 1 0 mrt 0 0K 0K 166960K 1 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 25 122K 122K 166960K 25 0 exec 0 0K 1K 166960K 365 0 fusefs mount 1 32K 32K 166960K 1 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 202 158K 165K 166960K 2868 0 UVM aobj 3 2K 2K 166960K 3 0 pinsyscall 38 76K 94K 166960K 1237 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 NDP 27 2K 2K 166960K 27 0 temp 33 9102K 9108K 166960K 3585 0 kqueue 13 20K 20K 166960K 25 0 SYN cache 2 16K 16K 166960K 2 0 ddb> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle rtpcb 120 37 0 33 1 0 1 1 0 8 0 rtentry 136 112 0 1 4 0 4 4 0 8 0 unpcb 144 37 0 22 1 0 1 1 0 8 0 syncache 336 4 0 4 1 0 1 1 0 8 1 tcpcb 736 10 0 4 1 0 1 1 0 8 0 arp 96 18 0 0 1 0 1 1 0 8 0 inpcb 328 60 0 51 1 0 1 1 0 8 0 nd6 112 24 0 0 1 0 1 1 0 8 0 kcovpl 48 8 0 0 1 0 1 1 0 8 0 art_heap8 4096 2 0 0 2 0 2 2 0 8 0 art_heap4 256 452 0 0 29 0 29 29 0 8 0 art_table 40 454 0 0 5 0 5 5 0 8 0 art_node 32 112 0 4 1 0 1 1 0 8 0 semapl 72 2 0 0 1 0 1 1 0 8 0 dirhash 1024 17 0 0 3 0 3 3 0 8 0 dino2pl 256 1554 0 94 92 0 92 92 0 8 0 ffsino 256 1554 0 94 92 0 92 92 0 8 0 nchpl 144 1745 0 50 63 0 63 63 0 8 0 vnodes 216 1636 0 0 91 0 91 91 0 8 0 namei 1024 5128 0 5127 2 0 2 2 0 8 1 kstatmem 264 23 0 0 2 0 2 2 0 8 0 scxspl 216 5915 0 5915 3 0 3 3 1 8 3 plimitpl 152 28 0 12 1 0 1 1 0 8 0 sigapl 424 432 0 390 6 0 6 6 0 8 1 knotepl 120 2102 0 2055 2 0 2 2 0 8 0 kqueuepl 184 21 0 12 1 0 1 1 0 8 0 pipepl 304 123 0 95 3 0 3 3 0 8 0 fdescpl 448 419 0 390 5 0 5 5 0 8 1 filepl 120 1426 0 1217 7 0 7 7 0 8 0 lockfpl 104 7 0 4 1 0 1 1 0 8 0 lockfspl 48 5 0 2 1 0 1 1 0 8 0 sessionpl 144 23 0 15 1 0 1 1 0 8 0 pgrppl 48 31 0 15 1 0 1 1 0 8 0 ucredpl 104 78 0 66 1 0 1 1 0 8 0 zombiepl 144 390 0 390 1 0 1 1 0 8 1 processpl 1152 432 0 390 4 0 4 4 0 8 0 procpl 664 437 0 390 5 0 5 5 0 8 0 sockpl 552 134 0 106 3 0 3 3 0 8 1 mcl8k 8192 4 0 4 1 0 1 1 0 8 1 mcl4k 4096 2495 0 2437 15 0 15 15 0 8 5 mcl2k 2048 111 0 111 1 0 1 1 0 8 1 mtagpl 96 4 0 4 1 0 1 1 0 8 1 mbufpl 256 4134 0 3990 10 0 10 10 0 8 0 bufpl 280 2218 0 102 152 0 152 152 0 8 0 anonpl 24 88522 0 85616 22 0 22 22 0 186 4 amapchunkpl 152 7781 0 7377 16 0 16 16 0 158 0 amappl16 200 1511 0 1501 5 0 5 5 0 8 4 amappl15 192 56 0 56 1 0 1 1 0 8 1 amappl14 184 415 0 414 1 0 1 1 0 8 0 amappl13 176 118 0 108 1 0 1 1 0 8 0 amappl12 168 656 0 629 2 0 2 2 0 8 0 amappl11 160 2 0 2 1 0 1 1 0 8 1 amappl10 152 81 0 71 1 0 1 1 0 8 0 amappl9 144 274 0 274 1 0 1 1 0 8 1 amappl8 136 110 0 109 1 0 1 1 0 8 0 amappl7 128 141 0 130 1 0 1 1 0 8 0 amappl6 120 147 0 144 1 0 1 1 0 8 0 amappl5 112 104 0 97 1 0 1 1 0 8 0 amappl4 104 258 0 243 1 0 1 1 0 8 0 amappl3 96 1378 0 1284 3 0 3 3 0 8 0 amappl2 88 529 0 480 2 0 2 2 0 8 0 amappl1 80 10135 0 9592 13 0 13 13 0 8 0 amappl 88 2180 0 2041 4 0 4 4 0 92 0 uvmvnodes 80 97 0 0 2 0 2 2 0 8 0 dma4096 4096 1 0 1 1 0 1 1 0 8 1 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 6 0 6 1 0 1 1 0 8 1 dma128 128 253 0 253 1 0 1 1 0 8 1 dma64 64 6 0 6 1 0 1 1 0 8 1 dma32 32 7 0 7 1 0 1 1 0 8 1 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 2 0 0 1 0 1 1 0 8 0 uaddrrnd 24 419 0 390 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 419 0 390 1 0 1 1 0 8 0 vmmpekpl 168 5345 0 5314 2 0 2 2 0 8 0 vmmpepl 168 36378 0 34684 78 0 78 78 0 357 2 vmsppl 368 418 0 390 4 0 4 4 0 8 1 rwobjpl 40 13811 0 12930 11 0 11 11 0 8 1 pdppl 4096 844 0 780 94 14 80 80 0 8 16 pvpl 32 207522 0 199529 67 0 67 67 0 265 2 pmappl 216 418 0 390 3 0 3 3 0 8 0 extentpl 40 45 0 27 1 0 1 1 0 8 0 phpool 112 355 0 14 10 0 10 10 0 8 0 ddb> machine ddbcpu 0 No such command ddb> trace arp_rtrequest(ffff8000002a2058,1,fffffd806c9a7898) at arp_rtrequest+0x6a4 rtrequest(1,ffff80003c8f5900,0,ffff80003c8f5870,16) at rtrequest+0xdc1 rtm_output(ffff80000160da00,ffff80003c8f59a8,ffff80003c8f5900,0,16) at rtm_output+0x91a route_output(fffffd806ca5bb00,ffff8000015a1c10) at route_output+0xa6a route_send(ffff8000015a1c10,fffffd806ca5bb00,0,0) at route_send+0xd7 sosend(ffff8000015a1c10,0,ffff80003c8f5b58,0,0,808) at sosend+0x804 sendit(ffff80003c8fbca8,3,ffff80003c8f5c50,808,ffff80003c8f5cf0) at sendit+0x5a5 sys_sendto(ffff80003c8fbca8,ffff80003c8f5da0,ffff80003c8f5cf0) at sys_sendto+0x8d syscall(ffff80003c8f5da0) at syscall+0x962 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xd206a20eee0, count: -10 ddb> machine ddbcpu 1 No such command ddb> trace arp_rtrequest(ffff8000002a2058,1,fffffd806c9a7898) at arp_rtrequest+0x6a4 rtrequest(1,ffff80003c8f5900,0,ffff80003c8f5870,16) at rtrequest+0xdc1 rtm_output(ffff80000160da00,ffff80003c8f59a8,ffff80003c8f5900,0,16) at rtm_output+0x91a route_output(fffffd806ca5bb00,ffff8000015a1c10) at route_output+0xa6a route_send(ffff8000015a1c10,fffffd806ca5bb00,0,0) at route_send+0xd7 sosend(ffff8000015a1c10,0,ffff80003c8f5b58,0,0,808) at sosend+0x804 sendit(ffff80003c8fbca8,3,ffff80003c8f5c50,808,ffff80003c8f5cf0) at sendit+0x5a5 sys_sendto(ffff80003c8fbca8,ffff80003c8f5da0,ffff80003c8f5cf0) at sys_sendto+0x8d syscall(ffff80003c8f5da0) at syscall+0x962 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xd206a20eee0, count: -10