last executing test programs: 37.741984ms ago: executing program 6 (id=7): ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x100000000000000, 0x10040000000001}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x18, 0x1, 0x0) r1 = kqueue() readv(r1, &(0x7f00000000c0)=[{0x0}], 0x1) setsockopt(r0, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = socket(0x11, 0x3, 0x0) setsockopt(r3, 0x0, 0x9, &(0x7f0000000880)="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", 0x801) r4 = dup(r2) ioctl$BIOCSBLEN(r4, 0xc0044266, &(0x7f0000000100)=0x6) ioctl$BIOCSETIF(r4, 0x8020426c, &(0x7f0000000200)={'tap', 0x0}) ioctl$BIOCIMMEDIATE(r4, 0x80044270, &(0x7f0000000000)=0x5) readv(r4, &(0x7f0000000080)=[{&(0x7f0000000180)=""/15, 0xf}, {&(0x7f0000000040)=""/17, 0x11}], 0x2) syz_emit_ethernet(0x36, &(0x7f00000001c0)=ANY=[]) getsockname$inet(r4, &(0x7f00000000c0), &(0x7f0000000140)=0xc) 33.402533ms ago: executing program 4 (id=5): mknod(&(0x7f00000000c0)='./bus\x00', 0x3a0914c44f7b202d, 0x65) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) (async) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$TIOCSTAT(r0, 0x20007465, 0x0) r1 = socket(0x11, 0x3, 0x0) sendto$unix(r1, &(0x7f0000000000)="b1000501600000041600000007000000087c156610c18125d7f96ecfc73fd3d89815a9c61d3952ddb06b36ac970bff03000000000000000000000000ebe1aa5323edeb51e2f0ca3ebbc2c4699a09000000acb5b302000d7d010000000100000021020000742fe2458bfbb770c1f5a8aec872ea772ec58904000000008d9810361b1257aba8c500002012010000de5000000000000000000000000000000000000000000000000000001f00000000000000", 0xb1, 0xe, 0x0, 0x0) (async) sendto$unix(r1, &(0x7f0000000000)="b1000501600000041600000007000000087c156610c18125d7f96ecfc73fd3d89815a9c61d3952ddb06b36ac970bff03000000000000000000000000ebe1aa5323edeb51e2f0ca3ebbc2c4699a09000000acb5b302000d7d010000000100000021020000742fe2458bfbb770c1f5a8aec872ea772ec58904000000008d9810361b1257aba8c500002012010000de5000000000000000000000000000000000000000000000000000001f00000000000000", 0xb1, 0xe, 0x0, 0x0) sendmmsg(r1, &(0x7f00000005c0)={&(0x7f0000000580)={&(0x7f00000000c0)=@in={0x2, 0x1}, 0xc, &(0x7f00000003c0)=[{&(0x7f0000000100)="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", 0xfa}, {&(0x7f0000000200)="45798adc8140b0db9ea422a52d8d781bc34a8c5cbc10ac5b3f62c97953c34c2a0b5e7760bf6a1aaed8837f17503f82e330169216e426f8ad6ec6669e5f1c74670f1f150c85fee41de855dbfa4aacae16bcdefe324b8739bfeb94b3c5b22f13fc2d5aeef46249f7e97e7aa11ef9671b4d66ea44b90494f6b92b82cd9e5e5095c18c5a7a4eda3b0e09a39a89d95120db2b83d5ddf327749440db9f36c23d0ee58a09dc342a27366bde96e586818c95c99857829c5d199513fc07826b20ba8776ea58fac4b072389c7d81da8078389e371db41784e3f91053cb88322776fc628392755b67c3e88936ece6", 0xe9}, {&(0x7f0000000300)="bfe2d6718ade53bc420aa3191fce51f96fe44e0207fa1d5b6818864eea6a93557fca95eab33689c0ee3f851cd04de76e431bcb98213221dd6ba445ac600fdcd07e545f586ddea1f78923b9979440032426ddffa49cbdab5f41b74520b8ca9f637959176aac96c785de384ecad1595d15b61703b5dbb73adf0f6ebfaeccad56898c9b194594ead76319daacc35a2b73eea9a558d7793d1f1d", 0x98}], 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x168}}, 0x10, 0x8) 26.305602ms ago: executing program 5 (id=6): mknod(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x0) mknod(&(0x7f0000000000)='./bus\x00', 0x2000, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x200, 0x0) link(&(0x7f0000000340)='./bus\x00', &(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') close(r0) socket(0x18, 0x5, 0x10) 3.396788ms ago: executing program 7 (id=8): ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x0, 0x0, 0x8}, {0x1, 0x0, 0x0, 0x2}, {0x4, 0x0, 0x0, 0x8}]}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x49}, 0x2, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r0 = open(&(0x7f0000000300)='./file0\x00', 0x80, 0x0) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0x3, 0x2000007, 0x5, 0x80000001, 0x80000001, 0x10001, 0x10, [{0x7, 0x7, 0x4, 0x8000}, {0x7, 0x8, 0x100, 0xfffffffb}, {0x8, 0x8000b86, 0xfbffff7d, 0x9}, {0xfff, 0x8800, 0x3, 0x1}, {0x401, 0x2, 0x2800, 0x7}, {0x2, 0x2, 0x1, 0x99}, {0xcdf, 0x42a7, 0x4, 0x4010}, {0x6, 0x80b, 0x14, 0xb}, {0x2, 0x82, 0x4, 0x9}, {0x4, 0x8101, 0xd1b, 0x88}, {0x1, 0x10001, 0xc, 0x3}, {0x7ff, 0x9, 0x9, 0x5}, {0xb8c, 0xc3b, 0x5, 0x4}, {0x29a71717, 0xfffffffa, 0x0, 0x5}, {0xc, 0x4, 0x6}, {0xfffffffd, 0x9, 0x4, 0x30005}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = socket(0x18, 0x1, 0x0) setsockopt(r1, 0x1000000000029, 0xb, &(0x7f00000001c0)='\x00\x00\x00\x00', 0x4) setsockopt(r1, 0x1000000000029, 0xb, &(0x7f00000002c0)="03000000", 0x4) ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$VNDIOCSET(r0, 0x80044403, &(0x7f00000001c0)={0x0, 0xff7ffffffffffffd, 0x0, 0x53}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x49}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0xff0a, 0x0, 0x37) 990.781µs ago: executing program 0 (id=1): mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x412e02) (async) ioctl$VNDIOCGET(0xffffffffffffffff, 0xc4104603, &(0x7f0000000400)={'./file0\x00', 0x3, 0x8001, 0x1}) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) (async) ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f0000000040)={0x8000, 0x0, 0x1, 0x804, '\x00\a\x00', 0x3fffc}) (async, rerun: 64) sysctl$kern(&(0x7f0000000040)={0x1, 0x3e}, 0x3, &(0x7f00000000c0)="3bf2ee74e747c82dad6eb2a36fa755e1a3925fe49afca7e63b52fa65ccaa74d6e6b85b6cdced70357ef201f97842b1068dca31553fa2d7031f38c03e56ad0e24dfc4f97b8b7f81499647e6e7725765d61436c85e43c15d12a78cb8c57ddde87021d7b685507fd3e0652f35e45bdaa3afd86c4fe557433e4c2b632de71c951516adff26aa2e48b45f8ce92bcefd3eceefabee7e3ebe806fdb4f6af569ae94b5d127", &(0x7f0000000080)=0x4, &(0x7f0000000340)="5a67923ef0cb189971421989ebcff78831a7581e2f27caa362f1363042efb27688b2c899220fb2fe37e467d974592496856ca7b78060998608c2f952e43bc0bf11555cc5cb0fe17b2ec1be389871829bfe10dd4c4d2c8f9da2bd2868fd86791dc09dc4fa89a217458bdaed31003fdc3a7323189ba3ccbad6c8af17516e4557f61ad20180000000000000125f568ca7d3396b9057255f381855110eb3a673713716cdf010ddfa7977f92cf061ad125ca670353b45d53aae196b00271f9d3452b523b3dea22d6027625614312183724b71c7eb02083a410c1c99fa455013521f98686e472b70b560f7021f567adf4d", 0x4) (async, rerun: 64) r0 = open(&(0x7f0000000240)='./bus\x00', 0x800, 0x100) preadv(r0, &(0x7f0000000cc0)=[{&(0x7f0000000840)=""/174, 0xae}, {&(0x7f0000000280)=""/88, 0x58}, {&(0x7f0000000900)=""/179, 0xb3}, {&(0x7f00000009c0)=""/78, 0x4e}, {&(0x7f0000000a40)=""/202, 0xca}, {&(0x7f0000000b40)=""/65, 0x41}, {&(0x7f0000000bc0)=""/197, 0xc5}], 0x7, 0x400) (async) r1 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) (async) mknod(&(0x7f0000000200)='./bus/file0\x00', 0x1, 0xffffffd3) (async) open(&(0x7f0000000000)='./file0\x00', 0x8000, 0x1) (async) ioctl$WSMUXIO_REMOVE_DEVICE(0xffffffffffffffff, 0x80085762, &(0x7f0000000040)={0x1}) r2 = socket(0x18, 0x3, 0x3a) (async) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000d80), 0x8, 0x0) ioctl$VMM_IOC_CREATE(r3, 0xc2585601, &(0x7f0000000dc0)={0x10, 0x0, [{&(0x7f0000187000/0x2000)=nil, &(0x7f0000060000/0x3000)=nil, 0x7}, {&(0x7f00001b8000/0x4000)=nil, &(0x7f00001f7000/0x2000)=nil, 0x8}, {&(0x7f000037d000/0x3000)=nil, &(0x7f0000281000/0x1000)=nil, 0x5}, {&(0x7f0000000000/0x800000)=nil, &(0x7f000055a000/0x4000)=nil, 0xfffffffffffffffb}, {&(0x7f00007f1000/0x3000)=nil, &(0x7f000059e000/0x3000)=nil, 0xffffe00000000000}, {&(0x7f000000b000/0x4000)=nil, &(0x7f000053e000/0x4000)=nil, 0xa}, {&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000126000/0x3000)=nil, 0x8000000000000001}, {&(0x7f0000297000/0x4000)=nil, &(0x7f000010c000/0x4000)=nil, 0xe19}, {&(0x7f00002f7000/0x3000)=nil, &(0x7f0000329000/0x3000)=nil, 0x3}, {&(0x7f000038f000/0x3000)=nil, &(0x7f0000319000/0x2000)=nil, 0x3}, {&(0x7f0000738000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0xf}, {&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0xfffffffffffffffb}, {&(0x7f00003a8000/0x2000)=nil, &(0x7f0000032000/0x2000)=nil, 0x1}, {&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x3}, {&(0x7f0000662000/0x4000)=nil, &(0x7f0000417000/0x1000)=nil, 0x1ff}, {&(0x7f00003f0000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x6}], './bus/file0\x00'}) (async, rerun: 64) setsockopt(r2, 0x29, 0x6c, &(0x7f0000000040), 0x4) (rerun: 64) setsockopt$inet6_MRT6_ADD_MIF(r2, 0x29, 0x67, 0x0, 0x0) (async) preadv(r1, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/104, 0x68}, {&(0x7f0000000140)=""/192, 0xc0}, {&(0x7f0000000340)=""/175, 0xaf}, {&(0x7f0000000d40)=""/25, 0x19}], 0x4, 0xe79d) 0s ago: executing program 3 (id=4): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) syz_emit_ethernet(0x4de, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa9cd7361987d486dd60ecea6604a80000fe8000000000000089750e6b000000aaff02000000000000000000000000000100209f"]) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x11, r1, 0x0) r2 = socket(0x18, 0x2, 0x0) setsockopt(r2, 0x1000000000029, 0x9, &(0x7f0000000040)="03000000", 0x4) setsockopt(r2, 0x1000000000029, 0xc, 0x0, 0x0) ftruncate(r1, 0x8531) open(&(0x7f00000000c0)='./file0\x00', 0x200, 0x0) syz_emit_ethernet(0x1e, &(0x7f0000000140)=ANY=[@ANYBLOB="ffd847ffffff00000000000008"]) sysctl$vm_swapencrypt(&(0x7f0000001580), 0x3, 0x0, 0x0, &(0x7f0000001700)="10bb42d4", 0x4) setuid(0xee01) r3 = semget(0x0, 0x1, 0xc) kevent(0xffffffffffffffff, &(0x7f0000000040)=[{}, {}, {{0xffffffffffffff9c}}, {{0xffffffffffffff9c}}, {}], 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mknod(&(0x7f00000000c0)='./bus\x00', 0x2000, 0xd01) r4 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BIOCSETIF(r4, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) ioctl$VNDIOCSET(r1, 0xc0384600, &(0x7f0000000240)={&(0x7f0000000080)='./file0\x00', 0x7fff, &(0x7f0000000100)='./file0\x00', 0x8}) semctl$IPC_RMID(r3, 0x0, 0x0) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000140)={0x3, &(0x7f00000001c0)=[{0x61, 0xda, 0x80, 0x1}, {0x34, 0x9, 0x3, 0x81}, {0x6, 0x0, 0xa4, 0x8620}]}) mknod(&(0x7f0000000480)='./bus\x00', 0x2000, 0x412dff) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f0000000100)={0x0, 0xb43, {[0x0, 0x0, 0x40, 0x100000000, 0x6, 0x0, 0xdf60, 0xfffffffffffdfffe, 0x0, 0x2f02, 0xfffffffffffffffc, 0x3, 0xfffbffffffffffff, 0x0, 0x4, 0x4, 0x20000000000002, 0x100], [0xfffffffffffffffe, 0x80000001, 0xfffffffffffffffd, 0x20000001, 0x5e, 0x7b98, 0x1fe], [0x100000001, 0x2, 0x40000000, 0x2, 0x100000001, 0x11000, 0x9], [0xfe, 0x20000000000, 0x7fffffffffffffff, 0x100000000, 0x1ff, 0x4], [{0x0, 0x20000004, 0x0, 0x7d06}, {0xfffc, 0x2, 0x5, 0xfffffffffffffffe}, {0x4, 0x0, 0xfffffffe, 0x80}, {0x3, 0x5, 0x4, 0xffffffffffffffff}, {0x0, 0x2, 0x0, 0x8}, {0x0, 0x2003, 0x9, 0x2000000000000000}, {}, {0x0, 0x100, 0x0, 0x8}], {0x4, 0x5, 0x5}, {0xffde, 0x80000000, 0x6d5, 0x2}}}) r5 = kqueue() kevent(r5, &(0x7f0000000040), 0x30, 0x0, 0x57d, 0x0) close(0xffffffffffffffff) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x6381) r6 = open$dir(&(0x7f0000000080)='./file0\x00', 0x402, 0x0) readv(r6, &(0x7f0000000000)=[{&(0x7f0000000180)=""/216, 0xd8}], 0x1) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.81' (ED25519) to the list of known hosts. load: 0.19 cmd: getty 40763 [ttyuin] 0.00u 0.01s v0% 335k m_fault(0xffffffff838bcbc8, 0xffff80000149e06a, 0, 1) -> e kernel: page fault trap, code=0 Stopped at arp_rtrequest+0x65e: movzwl 0xc(%r15,%rbx,1),%ecx TID PID UID PRFLAGS PFLAGS CPU COMMAND *406081 29088 0 0 0x4000000 0 syz-executor arp_rtrequest(ffff800000039058,1,fffffd80691d9678) at arp_rtrequest+0x65e rtrequest(1,ffff80003a558c68,0,ffff80003a558be0,16) at rtrequest+0xd4c rtm_output(ffff80000149be00,ffff80003a558d10,ffff80003a558c68,0,16) at rtm_output+0x855 route_output(fffffd807e1b5100,ffff800010fdf9f0) at route_output+0x9ac route_send(ffff800010fdf9f0,fffffd807e1b5100,0,0) at route_send+0xd7 sosend(ffff800010fdf9f0,0,ffff80003a558eb8,0,0,e) at sosend+0x804 sendit(ffff80002a7efc50,5,ffff80003a558fb0,e,ffff80003a559060) at sendit+0x721 sys_sendto(ffff80002a7efc50,ffff80003a559110,ffff80003a559060) at sys_sendto+0x8d syscall(ffff80003a559110) at syscall+0x97e Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xa1f184620a0, count: 5 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb> ddb> set $lines = 0 ddb> set $maxwidth = 0 ddb> show panic *cpu0: uvm_fault(0xffffffff838bcbc8, 0xffff80000149e06a, 0, 1) -> e ddb> trace arp_rtrequest(ffff800000039058,1,fffffd80691d9678) at arp_rtrequest+0x65e rtrequest(1,ffff80003a558c68,0,ffff80003a558be0,16) at rtrequest+0xd4c rtm_output(ffff80000149be00,ffff80003a558d10,ffff80003a558c68,0,16) at rtm_output+0x855 route_output(fffffd807e1b5100,ffff800010fdf9f0) at route_output+0x9ac route_send(ffff800010fdf9f0,fffffd807e1b5100,0,0) at route_send+0xd7 sosend(ffff800010fdf9f0,0,ffff80003a558eb8,0,0,e) at sosend+0x804 sendit(ffff80002a7efc50,5,ffff80003a558fb0,e,ffff80003a559060) at sendit+0x721 sys_sendto(ffff80002a7efc50,ffff80003a559110,ffff80003a559060) at sys_sendto+0x8d syscall(ffff80003a559110) at syscall+0x97e Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xa1f184620a0, count: -10 ddb> show registers rdi 0x20 rsi 0x90 rbp 0xffff80003a558ab0 rbx 0xde rdx 0 rcx 0x100040600080100 rax 0xfffffd807e1b5ee0 r8 0x1000 __ALIGN_SIZE r9 0 r10 0xb7d7bcd2b35881f9 r11 0x121197652bf82748 r12 0x1c r13 0xfffffd807e1b5e00 r14 0xfffffd80691d9678 r15 0xffff80000149df80 rip 0xffffffff82f71e6e arp_rtrequest+0x65e cs 0x8 rflags 0x10246 __ALIGN_SIZE+0xf246 rsp 0xffff80003a558a30 ss 0x10 arp_rtrequest+0x65e: movzwl 0xc(%r15,%rbx,1),%ecx ddb> show proc PROC (syz-executor) tid=406081 pid=29088 tcnt=2 stat=onproc flags process=0 proc=4000000 runpri=32, usrpri=51, slppri=32, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0 forw=0xffffffffffffffff, list=0xffff80002a7ee020,0xffff80002a7ee2c0 process=0xffff80002cd21b78 user=0xffff80003a554000, vmspace=0xfffffd806bbb8740 estcpu=1, cpticks=1, pctcpu=0.0, user=0, sys=1, intr=0 ddb> ps PID TID PPID UID S FLAGS WAIT COMMAND 25860 445429 74108 0 2 0 syz-executor 25860 289985 74108 0 2 0x4000000 syz-executor 28324 409756 53393 0 2 0 syz-executor 28324 408737 53393 0 3 0x4000080 fsleep syz-executor 28324 481575 53393 0 3 0x4000080 fsleep syz-executor 21840 119622 95990 0 2 0 syz-executor 21840 372128 95990 0 2 0x4000000 syz-executor 52918 225070 25691 0 2 0 syz-executor 52918 483834 25691 0 3 0x4000080 fsleep syz-executor 84407 337621 56906 0 2 0 syz-executor 84407 103260 56906 0 3 0x4000080 fsleep syz-executor 29088 210876 5030 0 2 0 syz-executor *29088 406081 5030 0 7 0x4000000 syz-executor 87274 370107 86453 0 2 0 syz-executor 87274 135501 86453 0 3 0x4000080 fsleep syz-executor 64100 25236 53876 0 2 0x100000 sh 53876 322079 97575 0 3 0x10008a sigsusp sh 86453 344232 46170 0 3 0x82 nanoslp syz-executor 25691 470726 46170 0 3 0x82 nanoslp syz-executor 56906 183442 46170 0 3 0x82 nanoslp syz-executor 5030 235417 46170 0 3 0x82 nanoslp syz-executor 95990 197159 46170 0 2 0xc82 syz-executor 53393 335165 46170 0 2 0xc82 syz-executor 97575 415904 46170 0 3 0x82 wait syz-executor 74108 423036 46170 0 3 0x82 nanoslp syz-executor 46170 465182 31613 0 3 0x82 kqread syz-executor 31613 441955 85437 0 3 0x10008a sigsusp ksh 85437 54554 36286 0 3 0x98 kqread sshd-session 36286 224254 10960 0 3 0x92 kqread sshd-session 40763 482593 1 0 3 0x100083 ttyin getty 10960 434145 1 0 3 0x88 kqread sshd 16352 125209 7793 73 3 0x1100090 kqread syslogd 7793 487993 1 0 3 0x100082 sbwait syslogd 49152 358300 1 0 3 0x100080 kqread resolvd 53516 347689 82331 77 3 0x100092 kqread dhcpleased 25248 241588 82331 77 3 0x100092 kqread dhcpleased 82331 191956 1 0 3 0x80 kqread dhcpleased 82473 297323 0 0 2 0x14200 smr 43660 381502 0 0 2 0x14200 zerothread 80188 464073 0 0 3 0x14200 aiodoned aiodoned 96478 483001 0 0 3 0x14200 syncer update 92376 251114 0 0 3 0x14200 cleaner cleaner 79611 431615 0 0 3 0x14200 reaper reaper 88296 269437 0 0 3 0x14200 pgdaemon pagedaemon 13720 136724 0 0 3 0x14200 bored viomb 5228 375026 0 0 3 0x40014200 acpi0 acpi0 21637 254103 0 0 3 0x14200 bored softnet7 7681 470250 0 0 3 0x14200 bored softnet6 7185 253552 0 0 3 0x14200 bored softnet5 95246 236416 0 0 3 0x14200 bored softnet4 46668 58729 0 0 3 0x14200 bored softnet3 2638 266039 0 0 3 0x14200 bored softnet2 24134 41388 0 0 3 0x14200 bored softnet1 82480 379500 0 0 3 0x14200 bored softnet0 51842 84352 0 0 3 0x14200 smrbar systqmp 11128 52511 0 0 3 0x14200 bored systq 45017 203016 0 0 2 0x40014200 softclock 5755 140326 0 0 3 0x40014200 idle0 1 353240 0 0 3 0x82 wait init 0 0 -1 0 3 0x10200 scheduler swapper ddb> show all locks No such command ddb> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 10174 11057K 11057K 166960K 11251 0 pcb 18 12K 12K 166960K 18 0 rtable 216 7K 7K 166960K 278 0 pf 30 12K 12K 166960K 30 0 ifaddr 42 7K 7K 166960K 44 0 ifgroup 50 2K 2K 166960K 50 0 sysctl 1 1K 9K 166960K 5 0 counters 32 17K 17K 166960K 32 0 ioctlops 0 0K 2K 166960K 29 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1340 84K 84K 166960K 1356 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 2 1K 1K 166960K 2 0 VM map 2 1K 1K 166960K 2 0 sem 2 0K 0K 166960K 2 0 dirhash 12 2K 2K 166960K 12 0 ACPI 1692 195K 286K 166960K 12470 0 file desc 19 69K 97K 166960K 138 0 proc 57 58K 116K 166960K 472 0 subproc 72 4K 4K 166960K 72 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 ip_moptions 0 0K 0K 166960K 1 0 in_multi 99 7K 7K 166960K 99 0 ether_multi 1 0K 0K 166960K 1 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 25 122K 122K 166960K 25 0 exec 0 0K 1K 166960K 346 0 fusefs mount 1 32K 32K 166960K 1 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 222 152K 159K 166960K 2810 0 UVM aobj 3 2K 2K 166960K 3 0 pinsyscall 40 80K 96K 166960K 1167 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 NDP 27 2K 2K 166960K 27 0 temp 34 8662K 8726K 166960K 3659 0 kqueue 13 20K 20K 166960K 21 0 SYN cache 2 16K 16K 166960K 2 0 ddb> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle rtpcb 120 37 0 33 1 0 1 1 0 8 0 rtentry 136 97 0 1 4 0 4 4 0 8 0 unpcb 144 31 0 16 1 0 1 1 0 8 0 syncache 336 3 0 3 1 0 1 1 0 8 1 tcpcb 736 8 0 2 1 0 1 1 0 8 0 arp 88 10 0 0 1 0 1 1 0 8 0 inpcb 328 58 0 47 2 0 2 2 0 8 1 nd6 104 17 0 0 1 0 1 1 0 8 0 kcovpl 48 8 0 0 1 0 1 1 0 8 0 art_heap8 4096 2 0 0 2 0 2 2 0 8 0 art_heap4 256 452 0 0 29 0 29 29 0 8 0 art_table 40 454 0 0 5 0 5 5 0 8 0 art_node 32 97 0 3 1 0 1 1 0 8 0 dirhash 1024 17 0 0 3 0 3 3 0 8 0 dino2pl 256 1549 0 44 95 0 95 95 0 8 0 ffsino 256 1549 0 44 95 0 95 95 0 8 0 nchpl 144 1733 0 48 63 0 63 63 0 8 0 uvmvnodes 80 1633 0 0 34 0 34 34 0 8 0 vnodes 216 1633 0 0 91 0 91 91 0 8 0 namei 1024 5050 0 5049 2 0 2 2 0 8 1 kstatmem 264 22 0 0 2 0 2 2 0 8 0 scxspl 216 6161 0 6161 8 0 8 8 1 8 8 plimitpl 152 26 0 10 1 0 1 1 0 8 0 sigapl 424 422 0 371 7 0 7 7 0 8 0 knotepl 120 3013 0 2966 2 0 2 2 0 8 0 kqueuepl 184 18 0 8 1 0 1 1 0 8 0 pipepl 304 99 0 72 3 0 3 3 0 8 0 fdescpl 448 402 0 371 5 0 5 5 0 8 0 filepl 120 1277 0 1063 7 0 7 7 0 8 0 lockfpl 104 6 0 4 1 0 1 1 0 8 0 lockfspl 48 4 0 2 1 0 1 1 0 8 0 sessionpl 144 21 0 13 1 0 1 1 0 8 0 pgrppl 48 29 0 13 1 0 1 1 0 8 0 ucredpl 104 64 0 53 1 0 1 1 0 8 0 zombiepl 144 371 0 371 1 0 1 1 0 8 1 processpl 1168 422 0 371 5 0 5 5 0 8 0 procpl 656 434 0 375 6 0 6 6 0 8 0 sockpl 552 126 0 96 3 0 3 3 0 8 0 mcl8k 8192 4 0 4 1 0 1 1 0 8 1 mcl4k 4096 2397 0 2347 13 0 13 13 0 8 6 mcl2k 2048 150 0 147 1 0 1 1 0 8 0 mtagpl 96 4 0 4 1 0 1 1 0 8 1 mbufpl 256 3689 0 3556 9 0 9 9 0 8 0 bufpl 280 2803 0 117 192 0 192 192 0 8 0 anonpl 24 89683 0 86655 23 0 23 23 0 187 3 amapchunkpl 152 7854 0 7377 19 0 19 19 0 158 0 amappl16 200 1503 0 1489 5 0 5 5 0 8 4 amappl15 192 6 0 6 1 0 1 1 0 8 1 amappl14 184 135 0 125 1 0 1 1 0 8 0 amappl13 176 7 0 7 1 0 1 1 0 8 1 amappl12 168 1008 0 977 3 0 3 3 0 8 1 amappl11 160 47 0 37 1 0 1 1 0 8 0 amappl10 152 7 0 7 1 0 1 1 0 8 1 amappl9 144 271 0 271 1 0 1 1 0 8 1 amappl8 136 20 0 19 1 0 1 1 0 8 0 amappl7 128 96 0 86 1 0 1 1 0 8 0 amappl6 120 184 0 179 1 0 1 1 0 8 0 amappl5 112 110 0 104 1 0 1 1 0 8 0 amappl4 104 269 0 253 1 0 1 1 0 8 0 amappl3 96 1179 0 1072 3 0 3 3 0 8 0 amappl2 88 608 0 556 2 0 2 2 0 8 0 amappl1 80 7875 0 7321 13 0 13 13 0 8 1 amappl 88 2176 0 2017 4 0 4 4 0 92 0 dma4096 4096 1 0 1 1 0 1 1 0 8 1 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 6 0 6 1 0 1 1 0 8 1 dma128 128 253 0 253 1 0 1 1 0 8 1 dma64 64 6 0 6 1 0 1 1 0 8 1 dma32 32 7 0 7 1 0 1 1 0 8 1 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 2 0 0 1 0 1 1 0 8 0 uaddrrnd 24 402 0 371 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 402 0 371 1 0 1 1 0 8 0 vmmpekpl 168 4727 0 4702 2 0 2 2 0 8 0 vmmpepl 168 32081 0 30251 80 0 80 80 0 357 0 vmsppl 368 401 0 371 4 0 4 4 0 8 0 rwobjpl 40 13212 0 10752 26 0 26 26 0 8 0 pdppl 4096 811 0 742 97 14 83 83 0 8 14 pvpl 32 199090 0 190907 69 0 69 69 0 265 0 pmappl 216 401 0 371 3 0 3 3 0 8 0 extentpl 40 45 0 27 1 0 1 1 0 8 0 phpool 112 366 0 14 11 0 11 11 0 8 0 ddb> machine ddbcpu 0 No such command ddb> trace arp_rtrequest(ffff800000039058,1,fffffd80691d9678) at arp_rtrequest+0x65e rtrequest(1,ffff80003a558c68,0,ffff80003a558be0,16) at rtrequest+0xd4c rtm_output(ffff80000149be00,ffff80003a558d10,ffff80003a558c68,0,16) at rtm_output+0x855 route_output(fffffd807e1b5100,ffff800010fdf9f0) at route_output+0x9ac route_send(ffff800010fdf9f0,fffffd807e1b5100,0,0) at route_send+0xd7 sosend(ffff800010fdf9f0,0,ffff80003a558eb8,0,0,e) at sosend+0x804 sendit(ffff80002a7efc50,5,ffff80003a558fb0,e,ffff80003a559060) at sendit+0x721 sys_sendto(ffff80002a7efc50,ffff80003a559110,ffff80003a559060) at sys_sendto+0x8d syscall(ffff80003a559110) at syscall+0x97e Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xa1f184620a0, count: -10 ddb> machine ddbcpu 1 No such command ddb> trace arp_rtrequest(ffff800000039058,1,fffffd80691d9678) at arp_rtrequest+0x65e rtrequest(1,ffff80003a558c68,0,ffff80003a558be0,16) at rtrequest+0xd4c rtm_output(ffff80000149be00,ffff80003a558d10,ffff80003a558c68,0,16) at rtm_output+0x855 route_output(fffffd807e1b5100,ffff800010fdf9f0) at route_output+0x9ac route_send(ffff800010fdf9f0,fffffd807e1b5100,0,0) at route_send+0xd7 sosend(ffff800010fdf9f0,0,ffff80003a558eb8,0,0,e) at sosend+0x804 sendit(ffff80002a7efc50,5,ffff80003a558fb0,e,ffff80003a559060) at sendit+0x721 sys_sendto(ffff80002a7efc50,ffff80003a559110,ffff80003a559060) at sys_sendto+0x8d syscall(ffff80003a559110) at syscall+0x97e Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xa1f184620a0, count: -10