uvm_fault(0xfffff1800ded2468, 0x0, 0, 1) -> e kernel: page fault trap, code=0 Stopped at rtable_l2+0x6b: movzbl 0(%rax,%rcx,4),%eax TID PID UID PRFLAGS PFLAGS CPU COMMAND *494171 21992 0 0 0x4000000 0 syz-executor rtable_l2(0) at rtable_l2+0x6b sys/net/rtable.c:315 in_pcbhash_insert(fffff1806fd57a40) at in_pcbhash_insert+0x193 sys/netinet/in_pcb.c:-1 in_pcballoc(ffff800010fe0f20,ffffffff839b52c0,1) at in_pcballoc+0x23a sys/netinet/in_pcb.c:269 tcp_attach(ffff800010fe0f20,6,1) at tcp_attach+0x1c4 sys/netinet/tcp_usrreq.c:496 socreate(18,ffff80003c9a3970,1,6) at socreate+0x22f pru_attach sys/sys/protosw.h:275 [inline] socreate(18,ffff80003c9a3970,1,6) at socreate+0x22f sys/kern/uipc_socket.c:220 sys_socket(ffff80002f0bcfb8,ffff80003c9a3ab0,ffff80003c9a3a00) at sys_socket+0x124 sys/kern/uipc_syscalls.c:102 syscall(ffff80003c9a3ab0) at syscall+0x962 mi_syscall sys/sys/syscall_mi.h:-1 [inline] syscall(ffff80003c9a3ab0) at syscall+0x962 sys/arch/amd64/amd64/trap.c:783 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x184f0d19720, count: 7 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb> ddb> set $lines = 0 ddb> set $maxwidth = 0 ddb> show panic *cpu0: uvm_fault(0xfffff1800ded2468, 0x0, 0, 1) -> e ddb> show kasan No such command ddb> trace rtable_l2(0) at rtable_l2+0x6b sys/net/rtable.c:315 in_pcbhash_insert(fffff1806fd57a40) at in_pcbhash_insert+0x193 sys/netinet/in_pcb.c:-1 in_pcballoc(ffff800010fe0f20,ffffffff839b52c0,1) at in_pcballoc+0x23a sys/netinet/in_pcb.c:269 tcp_attach(ffff800010fe0f20,6,1) at tcp_attach+0x1c4 sys/netinet/tcp_usrreq.c:496 socreate(18,ffff80003c9a3970,1,6) at socreate+0x22f pru_attach sys/sys/protosw.h:275 [inline] socreate(18,ffff80003c9a3970,1,6) at socreate+0x22f sys/kern/uipc_socket.c:220 sys_socket(ffff80002f0bcfb8,ffff80003c9a3ab0,ffff80003c9a3a00) at sys_socket+0x124 sys/kern/uipc_syscalls.c:102 syscall(ffff80003c9a3ab0) at syscall+0x962 mi_syscall sys/sys/syscall_mi.h:-1 [inline] syscall(ffff80003c9a3ab0) at syscall+0x962 sys/arch/amd64/amd64/trap.c:783 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x184f0d19720, count: -8 ddb>