uvm_fault(0xffffffff839feec0, 0xffff80000161400a, 0, 1) -> e kernel: page fault trap, code=0 Stopped at arp_rtrequest+0x6a4: movzwl 0xc(%rcx,%rbx,1),%ecx TID PID UID PRFLAGS PFLAGS CPU COMMAND * 41463 17659 0 0 0x4000000 0 syz-executor arp_rtrequest(ffff8000002a3058,1,fffff1806a67fbc8) at arp_rtrequest+0x6a4 arprequest sys/netinet/if_ether.c:325 [inline] arp_rtrequest(ffff8000002a3058,1,fffff1806a67fbc8) at arp_rtrequest+0x6a4 sys/netinet/if_ether.c:226 rtrequest(1,ffff80003c916be0,0,ffff80003c916b50,16) at rtrequest+0xdc1 sys/net/route.c:1114 rtm_output(ffff800001606c00,ffff80003c916c88,ffff80003c916be0,0,16) at rtm_output+0x91a sys/net/rtsock.c:956 route_output(fffff180707a2900,ffff800010fe0f28) at route_output+0xa6a sys/net/rtsock.c:862 route_send(ffff800010fe0f28,fffff180707a2900,0,0) at route_send+0xd7 sys/net/rtsock.c:322 sosend(ffff800010fe0f28,0,ffff80003c916e38,0,0,808) at sosend+0x804 sys/kern/uipc_socket.c:-1 sendit(ffff80002a795ca0,3,ffff80003c916f30,808,ffff80003c916fd0) at sendit+0x5a5 sys/kern/uipc_syscalls.c:785 sys_sendto(ffff80002a795ca0,ffff80003c917080,ffff80003c916fd0) at sys_sendto+0x8d sys/kern/uipc_syscalls.c:563 syscall(ffff80003c917080) at syscall+0x962 mi_syscall sys/sys/syscall_mi.h:-1 [inline] syscall(ffff80003c917080) at syscall+0x962 sys/arch/amd64/amd64/trap.c:783 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x438cd02d0f0, count: 5 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb> ddb> set $lines = 0 ddb> set $maxwidth = 0 ddb> show panic *cpu0: uvm_fault(0xffffffff839feec0, 0xffff80000161400a, 0, 1) -> e ddb> show kasan No such command ddb> trace arp_rtrequest(ffff8000002a3058,1,fffff1806a67fbc8) at arp_rtrequest+0x6a4 arprequest sys/netinet/if_ether.c:325 [inline] arp_rtrequest(ffff8000002a3058,1,fffff1806a67fbc8) at arp_rtrequest+0x6a4 sys/netinet/if_ether.c:226 rtrequest(1,ffff80003c916be0,0,ffff80003c916b50,16) at rtrequest+0xdc1 sys/net/route.c:1114 rtm_output(ffff800001606c00,ffff80003c916c88,ffff80003c916be0,0,16) at rtm_output+0x91a sys/net/rtsock.c:956 route_output(fffff180707a2900,ffff800010fe0f28) at route_output+0xa6a sys/net/rtsock.c:862 route_send(ffff800010fe0f28,fffff180707a2900,0,0) at route_send+0xd7 sys/net/rtsock.c:322 sosend(ffff800010fe0f28,0,ffff80003c916e38,0,0,808) at sosend+0x804 sys/kern/uipc_socket.c:-1 sendit(ffff80002a795ca0,3,ffff80003c916f30,808,ffff80003c916fd0) at sendit+0x5a5 sys/kern/uipc_syscalls.c:785 sys_sendto(ffff80002a795ca0,ffff80003c917080,ffff80003c916fd0) at sys_sendto+0x8d sys/kern/uipc_syscalls.c:563 syscall(ffff80003c917080) at syscall+0x962 mi_syscall sys/sys/syscall_mi.h:-1 [inline] syscall(ffff80003c917080) at syscall+0x962 sys/arch/amd64/amd64/trap.c:783 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x438cd02d0f0, count: -10 ddb> show registers rdi 0xffff800035cd0000 rsi 0x966 rbp 0xffff80003c916a30 rbx 0xde rdx 0xffff800035cd0000 rcx 0xffff800001613f20 rax 0xfffff1807f235ce0 r8 0x1000 __ALIGN_SIZE r9 0 r10 0xcfc815c4f0e51f18 r11 0x4d4db74567d989a4 r12 0x1d r13 0xfffff1807f235c00 r14 0xfffff1806a67fbc8 r15 0xffff8000002a3058 rip 0xffffffff81f35d74 arp_rtrequest+0x6a4 cs 0x8 rflags 0x10246 __ALIGN_SIZE+0xf246 rsp 0xffff80003c9169b0 ss 0x10 arp_rtrequest+0x6a4: movzwl 0xc(%rcx,%rbx,1),%ecx ddb> show proc PROC (syz-executor) tid=41463 pid=17659 tcnt=2 stat=onproc flags process=0 proc=4000000 runpri=32, usrpri=50, slppri=32, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0 forw=0xffffffffffffffff, list=0xffff80002a737760,0xffff80002a794558 process=0xffff8000314b8d98 user=0xffff80003c912000, vmspace=0xfffff1806d18dd00 estcpu=0, cpticks=1, pctcpu=0.0, user=0, sys=1, intr=0 ddb> ps PID TID PPID UID S PRLAGS PFLAGS WAIT COMMAND 98011 38999 74293 0 2 0 0 syz-executor 98011 342021 74293 0 2 0 0x4000000 syz-executor 98011 203723 74293 0 3 0 0x4000000 inode syz-executor 17659 176151 11307 0 2 0 0 syz-executor *17659 41463 11307 0 7 0 0x4000000 syz-executor 74663 51623 36748 0 2 0 0 syz-executor 74663 434163 36748 0 2 0 0x4000000 syz-executor 84017 365271 914 0 3 0 0x80 nanoslp syz-executor 84017 493032 914 0 3 0 0x4000080 fsleep syz-executor 84017 258182 914 0 3 0 0x4000080 fsleep syz-executor 59605 173074 25953 0 2 0 0 syz-executor 59605 76412 25953 0 3 0 0x4000080 fsleep syz-executor 70964 125945 97053 0 2 0 0 syz-executor 70964 375600 97053 0 3 0 0x4000080 fsleep syz-executor 70855 251670 58998 0 2 0 0 syz-executor 70855 429954 58998 0 3 0 0x4000080 netcon syz-executor 6029 187293 70700 60929 3 0x10 0x80 nanoslp syz-executor 6029 414725 70700 60929 3 0x10 0x4000080 kqsel syz-executor 6029 138276 70700 60929 3 0x10 0x4000080 fsleep syz-executor 25953 168383 19658 0 3 0x2 0x80 nanoslp syz-executor 914 435096 19658 0 3 0x2 0x80 nanoslp syz-executor 11307 39565 19658 0 3 0x2 0x80 nanoslp syz-executor 74293 479905 19658 0 2 0x2 0 syz-executor 58998 14168 19658 0 3 0x2 0x80 nanoslp syz-executor 70700 405238 19658 0 3 0x2 0x80 nanoslp syz-executor 97053 251605 19658 0 3 0x2 0x80 nanoslp syz-executor 36748 254311 19658 0 3 0x2 0x80 nanoslp syz-executor 19658 67047 79960 0 3 0x2 0x80 kqread syz-executor 79960 398671 43604 0 3 0x100002 0x88 sigsusp ksh 43604 162535 32981 0 3 0x10 0x88 kqread sshd-session 32981 177910 60573 0 3 0x12 0x80 kqread sshd-session 17179 7683 1 0 3 0x100003 0x80 ttyin getty 60573 425837 1 0 3 0 0x88 kqread sshd 66189 251747 88616 73 3 0x1100010 0x80 kqread syslogd 88616 113098 1 0 3 0x100002 0x80 sbwait syslogd 85028 319419 1 0 3 0x100000 0x80 kqread resolvd 22182 89330 70316 77 3 0x100012 0x80 kqread dhcpleased 37829 463548 70316 77 3 0x100012 0x80 kqread dhcpleased 70316 376637 1 0 3 0 0x80 kqread dhcpleased 21212 356994 0 0 3 0x14000 0x200 bored smr 84244 88535 0 0 2 0x14000 0x200 zerothread 85080 411189 0 0 3 0x14000 0x200 aiodoned aiodoned 68487 146934 0 0 3 0x14000 0x200 syncer update 6531 239279 0 0 3 0x14000 0x200 cleaner cleaner 3102 227221 0 0 3 0x14000 0x200 reaper reaper 33735 6465 0 0 3 0x14000 0x200 pgdaemon pagedaemon 60466 9049 0 0 3 0x14000 0x200 bored viomb 58435 230822 0 0 3 0x14000 0x40000200 acpi0 acpi0 26283 495738 0 0 3 0x14000 0x200 bored softnet0 13331 12456 0 0 3 0x14000 0x200 bored systqmp 53704 341988 0 0 3 0x14000 0x200 bored systq 22741 479803 0 0 3 0x14000 0x40000200 tmoslp softclock 61882 287104 0 0 3 0x14000 0x40000200 idle0 1 219635 0 0 3 0x2 0x80 wait init 0 0 -1 0 3 0x10000 0x200 scheduler swapper ddb> show all locks No such command ddb> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 11028 12118K 12183K 166960K 12117 0 pcb 18 12K 12K 166960K 18 0 rtable 254 8K 8K 166960K 390 0 pf 30 12K 12K 166960K 30 0 ifaddr 42 7K 7K 166960K 44 0 ifgroup 50 2K 2K 166960K 50 0 sysctl 1 1K 9K 166960K 5 0 counters 33 17K 17K 166960K 33 0 ioctlops 0 0K 2K 166960K 31 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1292 81K 81K 166960K 1359 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 2 1K 1K 166960K 2 0 VM map 2 1K 1K 166960K 2 0 sem 2 0K 0K 166960K 2 0 dirhash 12 2K 2K 166960K 12 0 ACPI 1734 201K 291K 166960K 11964 0 file desc 18 65K 93K 166960K 142 0 proc 58 59K 99K 166960K 496 0 subproc 72 4K 4K 166960K 72 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 ip_moptions 1 0K 0K 166960K 1 0 in_multi 99 6K 6K 166960K 99 0 ether_multi 1 0K 0K 166960K 1 0 mrt 0 0K 0K 166960K 1 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 25 122K 122K 166960K 25 0 exec 0 0K 2K 166960K 369 0 fusefs mount 1 32K 32K 166960K 1 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 225 167K 167K 166960K 2887 0 UVM aobj 3 2K 2K 166960K 3 0 pinsyscall 39 78K 94K 166960K 1252 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 NDP 27 2K 2K 166960K 27 0 temp 34 9106K 9114K 166960K 3612 0 kqueue 14 22K 22K 166960K 26 0 SYN cache 2 16K 16K 166960K 2 0 ddb> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle rtpcb 120 39 0 35 1 0 1 1 0 8 0 rtentry 136 113 0 1 4 0 4 4 0 8 0 unpcb 144 37 0 22 1 0 1 1 0 8 0 syncache 336 4 0 4 1 0 1 1 0 8 1 tcpcb 736 11 0 5 1 0 1 1 0 8 0 arp 96 18 0 0 1 0 1 1 0 8 0 inpcb 328 66 0 54 2 0 2 2 0 8 0 ip6q 72 1 0 0 1 0 1 1 0 8 0 ip6af 40 1 0 0 1 0 1 1 0 8 0 nd6 112 24 0 0 1 0 1 1 0 8 0 kcovpl 48 8 0 0 1 0 1 1 0 8 0 art_heap8 4096 2 0 0 2 0 2 2 0 8 0 art_heap4 256 485 0 0 31 0 31 31 0 8 0 art_table 40 487 0 0 5 0 5 5 0 8 0 art_node 32 113 0 11 1 0 1 1 0 8 0 dirhash 1024 17 0 0 3 0 3 3 0 8 0 dino2pl 256 1565 0 101 92 0 92 92 0 8 0 ffsino 256 1565 0 101 92 0 92 92 0 8 0 nchpl 144 1764 0 64 64 0 64 64 0 8 0 vnodes 216 1649 0 0 92 0 92 92 0 8 0 namei 1024 5187 0 5187 2 0 2 2 0 8 2 kstatmem 264 23 0 0 2 0 2 2 0 8 0 scsiplug 72 1 0 1 1 0 1 1 0 8 1 scxspl 216 6008 0 6008 4 0 4 4 1 8 4 plimitpl 152 30 0 12 1 0 1 1 0 8 0 sigapl 424 440 0 397 6 0 6 6 0 8 1 knotepl 120 2478 0 2182 9 0 9 9 0 8 0 kqueuepl 184 23 0 12 1 0 1 1 0 8 0 pipepl 304 125 0 97 3 0 3 3 0 8 0 fdescpl 448 427 0 397 5 0 5 5 0 8 1 filepl 120 1465 0 1246 7 0 7 7 0 8 0 lockfpl 104 8 0 6 1 0 1 1 0 8 0 lockfspl 48 5 0 3 1 0 1 1 0 8 0 sessionpl 144 23 0 15 1 0 1 1 0 8 0 pgrppl 48 31 0 15 1 0 1 1 0 8 0 ucredpl 104 78 0 66 1 0 1 1 0 8 0 zombiepl 144 397 0 397 1 0 1 1 0 8 1 processpl 1152 440 0 397 4 0 4 4 0 8 0 procpl 664 456 0 402 5 0 5 5 0 8 0 sockpl 552 143 0 111 3 0 3 3 0 8 0 mcl8k 8192 5 0 4 1 0 1 1 0 8 0 mcl4k 4096 2493 0 2442 14 0 14 14 0 8 5 mcl2k 2048 115 0 114 1 0 1 1 0 8 0 mextrefs 64 38 0 38 1 0 1 1 0 8 1 mtagpl 96 4 0 4 1 0 1 1 0 8 1 mbufpl 256 4207 0 4068 9 0 9 9 0 8 0 bufpl 272 2267 0 102 145 0 145 145 0 8 0 anonpl 24 82942 0 78676 31 0 31 31 0 187 5 amapchunkpl 152 7878 0 7333 23 0 23 23 0 158 1 amappl16 200 1169 0 1146 4 0 4 4 0 8 2 amappl15 192 5 0 5 1 0 1 1 0 8 1 amappl14 184 420 0 419 1 0 1 1 0 8 0 amappl13 176 116 0 106 1 0 1 1 0 8 0 amappl12 168 672 0 643 2 0 2 2 0 8 0 amappl11 160 3 0 3 1 0 1 1 0 8 1 amappl10 152 57 0 47 1 0 1 1 0 8 0 amappl9 144 270 0 270 1 0 1 1 0 8 1 amappl8 136 103 0 102 1 0 1 1 0 8 0 amappl7 128 140 0 129 1 0 1 1 0 8 0 amappl6 120 149 0 147 1 0 1 1 0 8 0 amappl5 112 91 0 84 1 0 1 1 0 8 0 amappl4 104 263 0 246 1 0 1 1 0 8 0 amappl3 96 1422 0 1310 3 0 3 3 0 8 0 amappl2 88 528 0 477 2 0 2 2 0 8 0 amappl1 80 10151 0 9598 13 0 13 13 0 8 0 amappl 88 2191 0 2030 4 0 4 4 0 92 0 uvmvnodes 80 95 0 0 2 0 2 2 0 8 0 dma4096 4096 1 0 1 1 0 1 1 0 8 1 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 6 0 6 1 0 1 1 0 8 1 dma128 128 253 0 253 1 0 1 1 0 8 1 dma64 64 6 0 6 1 0 1 1 0 8 1 dma32 32 7 0 7 1 0 1 1 0 8 1 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 2 0 0 1 0 1 1 0 8 0 uaddrrnd 24 427 0 397 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 427 0 397 1 0 1 1 0 8 0 vmmpekpl 168 5449 0 5418 2 0 2 2 0 8 0 vmmpepl 168 36287 0 34478 79 0 79 79 0 357 0 vmsppl 368 426 0 397 4 0 4 4 0 8 1 rwobjpl 40 13594 0 12657 11 0 11 11 0 8 0 pdppl 4096 860 0 794 94 14 80 80 0 8 14 pvpl 32 203747 0 193826 85 0 85 85 0 265 4 pmappl 216 426 0 397 3 0 3 3 0 8 0 extentpl 40 46 0 28 1 0 1 1 0 8 0 phpool 112 500 0 14 14 0 14 14 0 8 0 ddb> machine ddbcpu 0 No such command ddb> trace arp_rtrequest(ffff8000002a3058,1,fffff1806a67fbc8) at arp_rtrequest+0x6a4 arprequest sys/netinet/if_ether.c:325 [inline] arp_rtrequest(ffff8000002a3058,1,fffff1806a67fbc8) at arp_rtrequest+0x6a4 sys/netinet/if_ether.c:226 rtrequest(1,ffff80003c916be0,0,ffff80003c916b50,16) at rtrequest+0xdc1 sys/net/route.c:1114 rtm_output(ffff800001606c00,ffff80003c916c88,ffff80003c916be0,0,16) at rtm_output+0x91a sys/net/rtsock.c:956 route_output(fffff180707a2900,ffff800010fe0f28) at route_output+0xa6a sys/net/rtsock.c:862 route_send(ffff800010fe0f28,fffff180707a2900,0,0) at route_send+0xd7 sys/net/rtsock.c:322 sosend(ffff800010fe0f28,0,ffff80003c916e38,0,0,808) at sosend+0x804 sys/kern/uipc_socket.c:-1 sendit(ffff80002a795ca0,3,ffff80003c916f30,808,ffff80003c916fd0) at sendit+0x5a5 sys/kern/uipc_syscalls.c:785 sys_sendto(ffff80002a795ca0,ffff80003c917080,ffff80003c916fd0) at sys_sendto+0x8d sys/kern/uipc_syscalls.c:563 syscall(ffff80003c917080) at syscall+0x962 mi_syscall sys/sys/syscall_mi.h:-1 [inline] syscall(ffff80003c917080) at syscall+0x962 sys/arch/amd64/amd64/trap.c:783 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x438cd02d0f0, count: -10 ddb> machine ddbcpu 1 No such command ddb> trace arp_rtrequest(ffff8000002a3058,1,fffff1806a67fbc8) at arp_rtrequest+0x6a4 arprequest sys/netinet/if_ether.c:325 [inline] arp_rtrequest(ffff8000002a3058,1,fffff1806a67fbc8) at arp_rtrequest+0x6a4 sys/netinet/if_ether.c:226 rtrequest(1,ffff80003c916be0,0,ffff80003c916b50,16) at rtrequest+0xdc1 sys/net/route.c:1114 rtm_output(ffff800001606c00,ffff80003c916c88,ffff80003c916be0,0,16) at rtm_output+0x91a sys/net/rtsock.c:956 route_output(fffff180707a2900,ffff800010fe0f28) at route_output+0xa6a sys/net/rtsock.c:862 route_send(ffff800010fe0f28,fffff180707a2900,0,0) at route_send+0xd7 sys/net/rtsock.c:322 sosend(ffff800010fe0f28,0,ffff80003c916e38,0,0,808) at sosend+0x804 sys/kern/uipc_socket.c:-1 sendit(ffff80002a795ca0,3,ffff80003c916f30,808,ffff80003c916fd0) at sendit+0x5a5 sys/kern/uipc_syscalls.c:785 sys_sendto(ffff80002a795ca0,ffff80003c917080,ffff80003c916fd0) at sys_sendto+0x8d sys/kern/uipc_syscalls.c:563 syscall(ffff80003c917080) at syscall+0x962 mi_syscall sys/sys/syscall_mi.h:-1 [inline] syscall(ffff80003c917080) at syscall+0x962 sys/arch/amd64/amd64/trap.c:783 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x438cd02d0f0, count: -10