uvm_fault(0xfffffd803f00ba50, 0x100000008, 0, 2) -> e kernel: page fault trap, code=0 Stopped at arp_rtrequest+0x15f: movq %rcx,0x8(%r15) ddb> ddb> set $lines = 0 ddb> set $maxwidth = 0 ddb> show panic kernel page fault uvm_fault(0xfffffd803f00ba50, 0x100000008, 0, 2) -> e arp_rtrequest() at arp_rtrequest+0x15f sys/netinet/if_ether.c:201 end trace frame: 0xffff8000149efd20, count: 0 ddb> trace arp_rtrequest() at arp_rtrequest+0x15f sys/netinet/if_ether.c:201 rtrequest_delete(ffff8000149efdd0,40,ffff8000001722a8,ffff8000149efd48,0) at rtrequest_delete+0x21c _atomic_inc_int sys/arch/amd64/compile/SYZKALLER/obj/machine/atomic.h:139 [inline] rtrequest_delete(ffff8000149efdd0,40,ffff8000001722a8,ffff8000149efd48,0) at rtrequest_delete+0x21c sys/net/route.c:792 rtm_output(ffff8000009e0800,ffff8000149efe78,ffff8000149efdd0,40,0) at rtm_output+0x5dc sys/net/rtsock.c:955 route_output(fffffd80354b5700,fffffd8036fdd000,0,0) at route_output+0x7d7 sys/net/rtsock.c:814 route_usrreq(fffffd8036fdd000,9,fffffd80354b5700,0,0,ffff8000ffff8008) at route_usrreq+0x363 sys/net/rtsock.c:271 sosend(fffffd8036fdd000,0,ffff8000149f0070,0,0,80) at sosend+0x660 sys/kern/uipc_socket.c:513 sendit(ffff8000ffff8008,5,ffff8000149f0150,0,ffff8000149f0260) at sendit+0x53c sys/kern/uipc_syscalls.c:662 sys_sendto(ffff8000ffff8008,ffff8000149f01f8,ffff8000149f0260) at sys_sendto+0x80 sys/kern/uipc_syscalls.c:527 syscall(ffff8000149f02d0) at syscall+0x511 Xsyscall(6,0,ffffffffffffffd8,0,6,67dcdaf2010) at Xsyscall+0x128 end of kernel end trace frame: 0x67ff28362a0, count: -10 ddb> show registers rdi 0xffffffff812f5717 arp_rtrequest+0x157 rsi 0x273 rbp 0xffff8000149efc90 rbx 0xffff8000000250e0 rdx 0x274 rcx 0xdeafbeaddeafbead rax 0xffff8000000250e8 r8 0x40 r9 0x5 r10 0xffff800000995940 r11 0x8bd6af07a07e0be2 r12 0xffff8000001722a8 r13 0x2 r14 0xfffffd8037f9a7e8 r15 0x100000000 rip 0xffffffff812f571f arp_rtrequest+0x15f cs 0x8 rflags 0x10246 __ALIGN_SIZE+0xf246 rsp 0xffff8000149efc10 ss 0x10 arp_rtrequest+0x15f: movq %rcx,0x8(%r15) ddb> show proc PROC (syz-executor.0) pid=402724 stat=onproc flags process=0 proc=4000000 pri=79, usrpri=79, nice=20 forw=0xffffffffffffffff, list=0xffff8000ffff5078,0xffffffff822ccf20 process=0xffff8000ffff7078 user=0xffff8000149eb000, vmspace=0xfffffd803f00ba50 estcpu=36, cpticks=0, pctcpu=0.0 user=0, sys=0, intr=0 ddb> ps PID TID PPID UID S FLAGS WAIT COMMAND 32605 257231 20490 0 2 0 syz-executor.0 *32605 402724 20490 0 7 0x4000000 syz-executor.0 30827 474810 1 0 3 0x100083 ttyin getty 17742 388858 0 0 3 0x14200 bored sosplice 20490 369265 73939 0 3 0x82 nanosleep syz-executor.0 81032 242461 73939 0 2 0x2 syz-executor.1 73939 483095 67035 0 3 0x82 thrsleep syz-fuzzer 73939 367574 67035 0 3 0x4000082 nanosleep syz-fuzzer 73939 509609 67035 0 3 0x4000082 thrsleep syz-fuzzer 73939 186330 67035 0 3 0x4000082 thrsleep syz-fuzzer 73939 347409 67035 0 3 0x4000082 thrsleep syz-fuzzer 73939 224367 67035 0 3 0x4000082 kqread syz-fuzzer 73939 392224 67035 0 3 0x4000082 thrsleep syz-fuzzer 73939 217933 67035 0 3 0x4000082 thrsleep syz-fuzzer 67035 443240 63148 0 3 0x10008a pause ksh 63148 83545 7310 0 3 0x92 select sshd 7310 212449 1 0 3 0x80 select sshd 50769 322002 97427 73 2 0x100090 syslogd 97427 415563 1 0 3 0x100082 netio syslogd 97224 115560 1 77 3 0x100090 poll dhclient 85583 255703 1 0 3 0x80 poll dhclient 57717 219413 0 0 2 0x14200 zerothread 27368 119597 0 0 3 0x14200 aiodoned aiodoned 59044 518552 0 0 3 0x14200 syncer update 68106 281448 0 0 3 0x14200 cleaner cleaner 58666 424220 0 0 3 0x14200 reaper reaper 92899 136501 0 0 3 0x14200 pgdaemon pagedaemon 35880 115406 0 0 3 0x14200 bored crynlk 40372 16288 0 0 3 0x14200 bored crypto 44385 133481 0 0 3 0x40014200 acpi0 acpi0 39257 25496 0 0 3 0x14200 bored softnet 6917 339959 0 0 2 0x14200 systqmp 1940 54055 0 0 3 0x14200 bored systq 97653 223777 0 0 3 0x40014200 bored softclock 77197 249689 0 0 3 0x40014200 idle0 94191 104889 0 0 3 0x14200 bored smr 1 103787 0 0 3 0x82 wait init 0 0 -1 0 3 0x10200 scheduler swapper ddb> show all locks No such command ddb> show malloc Type InUse MemUse HighUse Limit Requests Type Lim Kern Lim devbuf 9519 7131K 15195K 78643K 16936 0 0 pcb 24 9K 11K 78643K 1685 0 0 rtable 115 4K 4K 78643K 735 0 0 ifaddr 61 15K 16K 78643K 277 0 0 counters 19 16K 16K 78643K 19 0 0 ioctlops 0 0K 2K 78643K 151 0 0 iov 0 0K 24K 78643K 416 0 0 mount 1 1K 1K 78643K 1 0 0 vnodes 1195 75K 76K 78643K 3918 0 0 UFS quota 1 32K 32K 78643K 1 0 0 UFS mount 5 36K 36K 78643K 5 0 0 shm 2 1K 5K 78643K 36 0 0 VM map 2 0K 0K 78643K 2 0 0 sem 12 1K 1K 78643K 214 0 0 dirhash 12 2K 2K 78643K 12 0 0 ACPI 1793 195K 288K 78643K 12537 0 0 file desc 5 13K 25K 78643K 3401 0 0 sigio 0 0K 0K 78643K 34 0 0 proc 42 30K 54K 78643K 692 0 0 subproc 32 2K 2K 78643K 34 0 0 NFS srvsock 1 0K 0K 78643K 1 0 0 NFS daemon 1 16K 16K 78643K 1 0 0 ip_moptions 0 0K 0K 78643K 339 0 0 in_multi 33 2K 2K 78643K 154 0 0 ether_multi 1 0K 0K 78643K 12 0 0 mrt 0 0K 0K 78643K 5 0 0 ISOFS mount 1 32K 32K 78643K 1 0 0 MSDOSFS mount 1 16K 16K 78643K 1 0 0 ttys 102 450K 450K 78643K 102 0 0 exec 0 0K 1K 78643K 470 0 0 pfkey data 0 0K 4K 78643K 4 0 0 pagedep 1 8K 8K 78643K 1 0 0 inodedep 1 32K 32K 78643K 1 0 0 newblk 1 0K 0K 78643K 1 0 0 VM swap 7 26K 26K 78643K 7 0 0 UVM amap 88 20K 29K 78643K 8800 0 0 UVM aobj 130 5K 5K 78643K 146 0 0 memdesc 1 4K 4K 78643K 1 0 0 crypto data 1 1K 1K 78643K 1 0 0 ip6_options 0 0K 0K 78643K 144 0 0 NDP 12 0K 0K 78643K 80 0 0 temp 178 2715K 3355K 78643K 12953 0 0 kqueue 0 0K 0K 78643K 24 0 0 SYN cache 2 16K 16K 78643K 2 0 0 ddb> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle arp 64 6 0 0 1 0 1 1 0 8 0 inpcbpl 280 1305 0 1297 1 0 1 1 0 8 0 plimitpl 152 103 0 96 1 0 1 1 0 8 0 rtentry 112 55 0 10 2 0 2 2 0 8 0 syncache 264 4 0 4 1 1 0 1 0 8 0 tcpcb 544 507 0 502 1 0 1 1 0 8 0 nd6 48 6 0 0 1 0 1 1 0 8 0 ppxss 1128 58 0 57 5 4 1 1 0 8 0 art_heap8 4096 1 0 0 1 0 1 1 0 8 0 art_heap4 256 194 0 0 13 0 13 13 0 8 0 art_table 32 195 0 0 2 0 2 2 0 8 0 art_node 16 45 0 4 1 0 1 1 0 8 0 sysvmsgpl 40 24 0 10 1 0 1 1 0 8 0 semupl 112 2 0 2 1 1 0 1 0 8 0 semapl 112 212 0 202 1 0 1 1 0 8 0 shmpl 112 144 0 16 4 0 4 4 0 8 0 dirhash 1024 17 0 0 3 0 3 3 0 8 0 dino1pl 128 7170 0 5712 48 0 48 48 0 8 0 ffsino 240 7170 0 5712 86 0 86 86 0 8 0 nchpl 144 12181 0 10547 61 0 61 61 0 8 0 uvmvnodes 72 5926 0 0 108 0 108 108 0 8 0 vnodes 200 5926 0 0 312 0 312 312 0 8 0 namei 1024 37473 0 37473 3 2 1 1 0 8 1 scsiplug 64 12 0 12 6 6 0 1 0 8 0 scxspl 192 38508 0 38508 29 28 1 6 0 8 1 sigapl 432 3574 0 3561 2 0 2 2 0 8 0 futexpl 56 52105 0 52105 2 1 1 1 0 8 1 knotepl 112 640 0 621 1 0 1 1 0 8 0 kqueuepl 104 826 0 823 1 0 1 1 0 8 0 pipepl 112 1924 0 1905 7 6 1 2 0 8 0 fdescpl 424 3575 0 3561 2 0 2 2 0 8 0 filepl 120 20786 0 20688 6 2 4 5 0 8 1 lockfpl 104 1209 0 1209 3 2 1 1 0 8 1 lockfspl 48 396 0 396 3 2 1 1 0 8 1 sessionpl 112 19 0 9 1 0 1 1 0 8 0 pgrppl 48 49 0 39 1 0 1 1 0 8 0 ucredpl 96 4685 0 4678 1 0 1 1 0 8 0 zombiepl 144 3561 0 3561 2 1 1 1 0 8 1 processpl 840 3590 0 3561 4 0 4 4 0 8 0 procpl 600 7949 0 7912 4 0 4 4 0 8 1 sosppl 128 39 0 39 9 9 0 1 0 8 0 sockpl 384 2822 0 2803 5 2 3 4 0 8 1 mcl64k 65536 546 0 289 34 1 33 33 0 8 0 mcl16k 16384 13 0 13 11 11 0 1 0 8 0 mcl12k 12288 65 0 65 9 8 1 1 0 8 1 mcl9k 9216 42 0 41 2 1 1 1 0 8 0 mcl8k 8192 40 0 40 12 12 0 1 0 8 0 mcl4k 4096 139 0 139 6 6 0 1 0 8 0 mcl2k2 2112 16 0 16 8 8 0 1 0 8 0 mcl2k 2048 58132 0 58091 15 9 6 10 0 8 0 mtagpl 80 4 0 4 2 2 0 1 0 8 0 mbufpl 256 110618 0 110281 33 9 24 24 0 8 0 bufpl 256 14273 0 9671 289 1 288 288 0 8 0 anonpl 16 312129 0 302344 193 137 56 58 0 62 15 amapchunkpl 152 15368 0 15283 52 47 5 9 0 158 0 amappl16 192 18742 0 18208 148 109 39 40 0 8 12 amappl15 184 1 0 1 1 1 0 1 0 8 0 amappl14 176 3403 0 3399 2 1 1 1 0 8 0 amappl13 168 3 0 2 1 0 1 1 0 8 0 amappl12 160 11 0 10 1 0 1 1 0 8 0 amappl11 152 49 0 35 1 0 1 1 0 8 0 amappl10 144 65 0 62 1 0 1 1 0 8 0 amappl9 136 550 0 547 1 0 1 1 0 8 0 amappl8 128 143 0 125 1 0 1 1 0 8 0 amappl7 120 30 0 27 1 0 1 1 0 8 0 amappl6 112 62 0 54 1 0 1 1 0 8 0 amappl5 104 161 0 151 1 0 1 1 0 8 0 amappl4 96 3726 0 3701 1 0 1 1 0 8 0 amappl3 88 3634 0 3623 1 0 1 1 0 8 0 amappl2 80 27877 0 27811 4 2 2 3 0 8 0 amappl1 72 69024 0 68626 24 15 9 19 0 8 0 amappl 80 8213 0 8180 1 0 1 1 0 84 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma64 64 259 0 259 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 17 0 17 1 1 0 1 0 8 0 aobjpl 64 145 0 16 3 0 3 3 0 8 0 uaddrrnd 24 3575 0 3561 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 3575 0 3561 1 0 1 1 0 8 0 vmmpekpl 168 25496 0 25473 2 0 2 2 0 8 0 vmmpepl 168 359810 0 358320 183 106 77 81 0 357 9 vmsppl 264 3574 0 3561 2 1 1 2 0 8 0 pdppl 4096 7157 0 7122 6 1 5 6 0 8 0 pvpl 32 854912 0 842115 305 164 141 147 0 265 36 pmappl 200 3574 0 3561 1 0 1 1 0 8 0 extentpl 40 41 0 26 1 0 1 1 0 8 0 phpool 112 515 0 54 14 0 14 14 0 8 0