uvm_fault(0xffffffff835c71d0, 0xffff80000123a010, 0, 1) -> e kernel: page fault trap, code=0 Stopped at arp_rtrequest+0x65e: movzwl 0xc(%r15,%rbx,1),%ecx TID PID UID PRFLAGS PFLAGS CPU COMMAND * 15831 86581 0 0 0x4000000 0 syz-executor arp_rtrequest(ffff800001192000,1,fffffd806fa85b60) at arp_rtrequest+0x65e arprequest sys/netinet/if_ether.c:281 [inline] arp_rtrequest(ffff800001192000,1,fffffd806fa85b60) at arp_rtrequest+0x65e sys/netinet/if_ether.c:184 rtrequest(1,ffff80002a557208,1,ffff80002a5572d8,0) at rtrequest+0xd2c sys/net/route.c:1103 rt_ifa_add(ffff8000011aab00,240004,ffff8000011aab58,0) at rt_ifa_add+0x38d sys/net/route.c:1273 rt_ifa_addlocal(ffff8000011aab00) at rt_ifa_addlocal+0x1b1 sys/net/route.c:1381 in_ifinit(ffff800001192000,ffff8000011aab00,ffff80002a5575a0,1) at in_ifinit+0x26c sys/netinet/in.c:669 in_ioctl_change_ifaddr(8040691a,ffff80002a557590,ffff800001192000) at in_ioctl_change_ifaddr+0x92c sys/netinet/in.c:504 ifioctl(fffffd8073ed1800,8040691a,ffff80002a557590,ffff80002a4c3c08) at ifioctl+0x1519 pru_control sys/sys/protosw.h:355 [inline] ifioctl(fffffd8073ed1800,8040691a,ffff80002a557590,ffff80002a4c3c08) at ifioctl+0x1519 sys/net/if.c:2449 sys_ioctl(ffff80002a4c3c08,ffff80002a557770,ffff80002a5576c0) at sys_ioctl+0x678 syscall(ffff80002a557770) at syscall+0x97e sys/arch/amd64/amd64/trap.c:577 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x93c8c5c0f60, count: 5 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb> ddb> set $lines = 0 ddb> set $maxwidth = 0 ddb> show panic *cpu0: uvm_fault(0xffffffff835c71d0, 0xffff80000123a010, 0, 1) -> e ddb> trace arp_rtrequest(ffff800001192000,1,fffffd806fa85b60) at arp_rtrequest+0x65e arprequest sys/netinet/if_ether.c:281 [inline] arp_rtrequest(ffff800001192000,1,fffffd806fa85b60) at arp_rtrequest+0x65e sys/netinet/if_ether.c:184 rtrequest(1,ffff80002a557208,1,ffff80002a5572d8,0) at rtrequest+0xd2c sys/net/route.c:1103 rt_ifa_add(ffff8000011aab00,240004,ffff8000011aab58,0) at rt_ifa_add+0x38d sys/net/route.c:1273 rt_ifa_addlocal(ffff8000011aab00) at rt_ifa_addlocal+0x1b1 sys/net/route.c:1381 in_ifinit(ffff800001192000,ffff8000011aab00,ffff80002a5575a0,1) at in_ifinit+0x26c sys/netinet/in.c:669 in_ioctl_change_ifaddr(8040691a,ffff80002a557590,ffff800001192000) at in_ioctl_change_ifaddr+0x92c sys/netinet/in.c:504 ifioctl(fffffd8073ed1800,8040691a,ffff80002a557590,ffff80002a4c3c08) at ifioctl+0x1519 pru_control sys/sys/protosw.h:355 [inline] ifioctl(fffffd8073ed1800,8040691a,ffff80002a557590,ffff80002a4c3c08) at ifioctl+0x1519 sys/net/if.c:2449 sys_ioctl(ffff80002a4c3c08,ffff80002a557770,ffff80002a5576c0) at sys_ioctl+0x678 syscall(ffff80002a557770) at syscall+0x97e sys/arch/amd64/amd64/trap.c:577 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x93c8c5c0f60, count: -10 ddb> show registers rdi 0xffff800036c04000 rsi 0x2b1 rbp 0xffff80002a5570f0 rbx 0x14 rdx 0xffff800036c04000 rcx 0x100040600080100 rax 0xfffffd806c9b1be0 r8 0x10 r9 0xfffffd806fa85b60 r10 0x8ea78f68473795c0 r11 0x5656b5426c527b8 r12 0x2b3 r13 0xfffffd806c9b1b00 r14 0xfffffd806fa85b60 r15 0xffff800001239ff0 rip 0xffffffff82a0841e arp_rtrequest+0x65e cs 0x8 rflags 0x10246 __ALIGN_SIZE+0xf246 rsp 0xffff80002a557070 ss 0x10 arp_rtrequest+0x65e: movzwl 0xc(%r15,%rbx,1),%ecx ddb> show proc PROC (syz-executor) tid=15831 pid=86581 tcnt=2 stat=onproc flags process=0 proc=4000000 runpri=32, usrpri=50, slppri=32, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0 forw=0xffffffffffffffff, list=0xffff80002a4c2f60,0xffffffff835daa58 process=0xffff8000327f7378 user=0xffff80002a552000, vmspace=0xfffffd806fa62008 estcpu=36, cpticks=1, pctcpu=0.0, user=0, sys=1, intr=0 ddb> ps PID TID PPID UID S FLAGS WAIT COMMAND 86581 8289 16725 0 2 0 syz-executor *86581 15831 16725 0 7 0x4000000 syz-executor 87477 196834 68305 0 2 0x100000 sh 68162 392099 75387 0 2 0 syz-executor 68162 345489 75387 0 3 0x4000080 sbwait syz-executor 68305 407585 65209 0 3 0x10008a sigsusp sh 27580 52675 2068 0 2 0 syz-executor 27580 460739 2068 0 3 0x4000080 fifor syz-executor 30848 460565 29260 0 2 0 syz-executor 30848 474753 29260 0 3 0x4000080 fsleep syz-executor 95504 363213 54641 0 2 0 syz-executor 95504 470676 54641 0 3 0x4000080 kqread syz-executor 65209 207790 188 0 3 0x82 wait syz-executor 2068 485420 188 0 2 0x482 syz-executor 29260 33400 188 0 3 0x82 nanoslp syz-executor 55536 69117 188 0 2 0x2 syz-executor 10681 268223 188 0 2 0x2 syz-executor 54641 208439 188 0 3 0x82 nanoslp syz-executor 75387 26916 188 0 2 0x482 syz-executor 16725 453478 188 0 3 0x82 nanoslp syz-executor 24760 296101 1 0 3 0x100083 ttyin getty 23665 271137 0 0 3 0x14280 nfsidl nfsio 48118 124716 0 0 3 0x14280 nfsidl nfsio 820 317274 0 0 3 0x14280 nfsidl nfsio 44338 4717 0 0 3 0x14280 nfsidl nfsio 72825 340541 0 0 3 0x14280 nfsidl nfsio 78983 4506 0 0 3 0x14280 nfsidl nfsio 80229 478571 0 0 3 0x14280 nfsidl nfsio 91761 387511 0 0 3 0x14280 nfsidl nfsio 73004 78864 0 0 3 0x14280 nfsidl nfsio 2053 222922 0 0 3 0x14280 nfsidl nfsio 96320 372427 0 0 3 0x14280 nfsidl nfsio 89664 132025 0 0 3 0x14280 nfsidl nfsio 49697 429418 0 0 3 0x14280 nfsidl nfsio 62199 85842 0 0 3 0x14280 nfsidl nfsio 14867 273196 0 0 3 0x14280 nfsidl nfsio 98307 30281 0 0 3 0x14280 nfsidl nfsio 13989 292815 0 0 3 0x14280 nfsidl nfsio 90102 509540 0 0 3 0x14280 nfsidl nfsio 19362 89810 0 0 3 0x14280 nfsidl nfsio 39174 261027 0 0 3 0x14280 nfsidl nfsio 79679 29250 0 0 3 0x14200 bored sosplice 188 210104 9140 0 2 0x2 syz-executor 9140 331098 10343 0 3 0x10008a sigsusp ksh 10343 80467 46110 0 3 0x98 kqread sshd-session 46110 292749 23890 0 3 0x92 kqread sshd-session 23890 365743 1 0 3 0x88 kqread sshd 17895 384749 50001 73 2 0x1100010 syslogd 50001 503443 1 0 3 0x100082 sbwait syslogd 47281 397007 1 0 3 0x100080 kqread resolvd 36235 355889 4585 77 3 0x100092 kqread dhcpleased 39167 329814 4585 77 3 0x100092 kqread dhcpleased 4585 46597 1 0 3 0x80 kqread dhcpleased 41684 465405 0 0 3 0x14200 bored smr 29040 338790 0 0 2 0x14200 zerothread 61983 347525 0 0 3 0x14200 aiodoned aiodoned 69021 428392 0 0 3 0x14200 syncer update 48551 53161 0 0 3 0x14200 cleaner cleaner 30855 321546 0 0 3 0x14200 reaper reaper 13631 127069 0 0 3 0x14200 pgdaemon pagedaemon 94018 493290 0 0 3 0x14200 bored viomb 72623 444529 0 0 3 0x40014200 acpi0 acpi0 8462 502907 0 0 3 0x14200 bored softnet3 99210 393172 0 0 3 0x14200 bored softnet2 58246 462646 0 0 3 0x14200 bored softnet1 65398 349667 0 0 3 0x14200 bored softnet0 35529 131015 0 0 2 0x14200 systqmp 88899 237638 0 0 3 0x14200 bored systq 46960 271628 0 0 3 0x40014200 tmoslp softclock 55602 138972 0 0 3 0x40014200 idle0 1 423170 0 0 3 0x82 wait init 0 0 -1 0 3 0x10200 scheduler swapper ddb> show all locks No such command ddb> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 10198 10105K 10363K 166960K 13481 0 pcb 17 16K 18K 166960K 625 0 rtable 216 9K 9K 166960K 3077 0 pf 36 14K 16K 166960K 284 0 ifaddr 43 8K 8K 166960K 428 0 ifgroup 54 2K 2K 166960K 492 0 sysctl 4 1K 2K 166960K 10 0 counters 31 17K 17K 166960K 144 0 ioctlops 0 0K 4K 166960K 213 0 iov 0 0K 32K 166960K 146 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1467 92K 93K 166960K 3908 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 2 68K 76K 166960K 31 0 VM map 2 1K 1K 166960K 2 0 sem 19 33K 61K 166960K 53 0 dirhash 15 2K 3K 166960K 45 0 ACPI 1690 195K 286K 166960K 12418 0 file desc 17 61K 97K 166960K 2917 0 sigio 0 0K 0K 166960K 40 0 proc 58 59K 124K 166960K 3070 0 subproc 104 6K 7K 166960K 1261 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 ip_moptions 0 0K 0K 166960K 380 0 in_multi 94 6K 7K 166960K 1081 0 ether_multi 1 0K 0K 166960K 23 0 mrt 0 0K 0K 166960K 5 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 103 466K 466K 166960K 103 0 exec 0 0K 1K 166960K 1878 0 pfkey data 0 0K 0K 166960K 4 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 209 72K 94K 166960K 22890 0 UVM aobj 128 5K 5K 166960K 134 0 pinsyscall 38 76K 100K 166960K 6153 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 ip6_options 0 0K 0K 166960K 95 0 NDP 12 0K 2K 166960K 306 0 temp 76 6816K 6928K 166960K 118543 0 kqueue 14 22K 30K 166960K 262 0 SYN cache 2 8K 16K 166960K 4 0 ddb> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle rtpcb 120 375 0 372 2 0 2 2 0 8 1 rtentry 112 1071 0 976 4 0 4 4 0 8 0 unpcb 144 1604 0 1585 4 0 4 4 0 8 3 syncache 336 11 0 11 1 0 1 1 0 8 1 tcpqe 32 8 0 8 1 0 1 1 0 8 1 tcpcb 808 796 0 792 8 0 8 8 0 8 7 arp 88 190 0 174 1 0 1 1 0 8 0 ipq 40 13 0 7 1 0 1 1 0 8 0 ipqe 40 19 0 13 1 0 1 1 0 8 0 inpcb 336 3151 0 3141 12 3 9 12 0 8 7 nd6 104 281 0 260 1 0 1 1 0 8 0 pkpcb 40 22 0 22 1 0 1 1 0 8 1 kcovpl 48 97 0 89 1 0 1 1 0 8 0 ppxss 1072 12 0 12 1 0 1 1 0 8 1 pfstscr 40 1 0 1 1 0 1 1 0 8 1 pfstitem 24 3 0 0 1 0 1 1 0 8 0 pfstkey 128 5 0 2 1 0 1 1 0 8 0 pfstate 344 4 0 2 1 0 1 1 0 8 0 pfrule 1344 3 0 2 1 0 1 1 0 8 0 art_heap8 4096 3 0 0 3 0 3 3 0 8 0 art_heap4 256 4230 0 3828 29 0 29 29 0 8 3 art_table 32 4233 0 3828 4 0 4 4 0 8 0 art_node 16 1058 0 975 1 0 1 1 0 8 0 sysvmsgpl 40 23 0 20 1 0 1 1 0 8 0 semupl 112 2 0 2 1 0 1 1 0 8 1 semapl 112 46 0 29 1 0 1 1 0 8 0 shmpl 112 131 0 6 4 0 4 4 0 8 0 dirhash 1024 39 0 20 3 0 3 3 0 8 0 dino2pl 256 4502 0 2839 105 0 105 105 0 8 0 ffsino 240 4502 0 2839 98 0 98 98 0 8 0 nchpl 144 6884 0 5088 67 0 67 67 0 8 0 uvmvnodes 80 6591 0 0 135 0 135 135 0 8 0 vnodes 216 6591 0 0 367 0 367 367 0 8 0 namei 1024 32161 0 32159 2 0 2 2 0 8 1 kstatmem 264 250 0 226 2 0 2 2 0 8 0 scsiplug 72 5 0 5 1 0 1 1 0 8 1 scxspl 216 56729 0 56729 8 0 8 8 1 8 8 plimitpl 152 714 0 698 1 0 1 1 0 8 0 sigapl 424 3060 0 2994 8 0 8 8 0 8 0 futexpl 64 24441 0 24440 1 0 1 1 0 8 0 knotepl 120 83371 0 83323 19 9 10 18 0 8 7 kqueuepl 184 609 0 599 4 0 4 4 0 8 3 pipepl 288 588 0 561 7 0 7 7 0 8 4 fdescpl 432 3003 0 2974 5 0 5 5 0 8 1 filepl 120 17419 0 17175 14 0 14 14 0 8 6 lockfpl 104 551 0 548 1 0 1 1 0 8 0 lockfspl 48 255 0 252 1 0 1 1 0 8 0 sessionpl 144 113 0 105 1 0 1 1 0 8 0 pgrppl 48 295 0 279 1 0 1 1 0 8 0 ucredpl 104 2707 0 2695 1 0 1 1 0 8 0 zombiepl 144 2994 0 2994 1 0 1 1 0 8 1 processpl 1096 3060 0 2994 6 0 6 6 0 8 1 procpl 648 5288 0 5217 7 0 7 7 0 8 0 sosppl 168 16 0 16 1 0 1 1 0 8 1 sockpl 504 5278 0 5246 40 28 12 22 0 8 7 mcl64k 65536 14 0 14 1 0 1 1 0 8 1 mcl16k 16384 11 0 11 1 0 1 1 0 8 1 mcl12k 12288 6 0 6 1 0 1 1 0 8 1 mcl8k 8192 42 0 42 1 0 1 1 0 8 1 mcl4k 4096 13 0 13 1 0 1 1 0 8 1 mcl2k2 2112 6 0 6 1 0 1 1 0 8 1 mcl2k 2048 10664 0 10564 27 7 20 27 0 8 7 mtagpl 96 78 0 75 2 0 2 2 0 8 1 mbufpl 256 31558 0 31364 63 40 23 60 0 8 8 bufpl 280 12946 0 5036 566 0 566 566 0 8 0 anonpl 24 427000 0 423743 78 0 78 78 0 187 44 amapchunkpl 152 74688 0 74249 40 0 40 40 0 158 22 amappl16 200 7209 0 7192 57 49 8 23 0 8 7 amappl15 192 10 0 10 1 0 1 1 0 8 1 amappl14 184 283 0 272 1 0 1 1 0 8 0 amappl13 176 9 0 9 1 0 1 1 0 8 1 amappl12 168 4957 0 4927 3 0 3 3 0 8 1 amappl11 160 69 0 59 1 0 1 1 0 8 0 amappl10 152 15 0 15 1 0 1 1 0 8 1 amappl9 144 120 0 120 1 0 1 1 0 8 1 amappl8 136 17 0 16 1 0 1 1 0 8 0 amappl7 128 283 0 272 1 0 1 1 0 8 0 amappl6 120 1048 0 1046 1 0 1 1 0 8 0 amappl5 112 500 0 491 1 0 1 1 0 8 0 amappl4 104 542 0 526 1 0 1 1 0 8 0 amappl3 96 14408 0 14306 4 0 4 4 0 8 0 amappl2 88 1793 0 1733 2 0 2 2 0 8 0 amappl1 80 20882 0 20341 14 0 14 14 0 8 1 amappl 88 21773 0 21618 5 0 5 5 0 92 0 dma32768 32768 3 0 3 1 0 1 1 0 8 1 dma4096 4096 1 0 1 1 0 1 1 0 8 1 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 6 0 6 1 0 1 1 0 8 1 dma128 128 253 0 253 1 0 1 1 0 8 1 dma64 64 6 0 6 1 0 1 1 0 8 1 dma32 32 7 0 7 1 0 1 1 0 8 1 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 133 0 6 3 0 3 3 0 8 0 uaddrrnd 24 3003 0 2974 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 3003 0 2974 1 0 1 1 0 8 0 vmmpekpl 168 23990 0 23941 3 0 3 3 0 8 0 vmmpepl 168 185078 0 183382 97 0 97 97 0 357 21 vmsppl 344 3002 0 2974 4 0 4 4 0 8 1 rwobjpl 24 56848 0 49272 46 0 46 46 0 8 0 pdppl 4096 6012 0 5948 230 162 68 82 0 8 4 pvpl 32 1494055 0 1484238 361 6 355 361 0 265 262 pmappl 216 3002 0 2974 3 0 3 3 0 8 1 extentpl 40 56 0 38 1 0 1 1 0 8 0 phpool 112 636 0 240 12 0 12 12 0 8 0 ddb> machine ddbcpu 0 No such command ddb> trace arp_rtrequest(ffff800001192000,1,fffffd806fa85b60) at arp_rtrequest+0x65e arprequest sys/netinet/if_ether.c:281 [inline] arp_rtrequest(ffff800001192000,1,fffffd806fa85b60) at arp_rtrequest+0x65e sys/netinet/if_ether.c:184 rtrequest(1,ffff80002a557208,1,ffff80002a5572d8,0) at rtrequest+0xd2c sys/net/route.c:1103 rt_ifa_add(ffff8000011aab00,240004,ffff8000011aab58,0) at rt_ifa_add+0x38d sys/net/route.c:1273 rt_ifa_addlocal(ffff8000011aab00) at rt_ifa_addlocal+0x1b1 sys/net/route.c:1381 in_ifinit(ffff800001192000,ffff8000011aab00,ffff80002a5575a0,1) at in_ifinit+0x26c sys/netinet/in.c:669 in_ioctl_change_ifaddr(8040691a,ffff80002a557590,ffff800001192000) at in_ioctl_change_ifaddr+0x92c sys/netinet/in.c:504 ifioctl(fffffd8073ed1800,8040691a,ffff80002a557590,ffff80002a4c3c08) at ifioctl+0x1519 pru_control sys/sys/protosw.h:355 [inline] ifioctl(fffffd8073ed1800,8040691a,ffff80002a557590,ffff80002a4c3c08) at ifioctl+0x1519 sys/net/if.c:2449 sys_ioctl(ffff80002a4c3c08,ffff80002a557770,ffff80002a5576c0) at sys_ioctl+0x678 syscall(ffff80002a557770) at syscall+0x97e sys/arch/amd64/amd64/trap.c:577 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x93c8c5c0f60, count: -10 ddb> machine ddbcpu 1 No such command ddb> trace arp_rtrequest(ffff800001192000,1,fffffd806fa85b60) at arp_rtrequest+0x65e arprequest sys/netinet/if_ether.c:281 [inline] arp_rtrequest(ffff800001192000,1,fffffd806fa85b60) at arp_rtrequest+0x65e sys/netinet/if_ether.c:184 rtrequest(1,ffff80002a557208,1,ffff80002a5572d8,0) at rtrequest+0xd2c sys/net/route.c:1103 rt_ifa_add(ffff8000011aab00,240004,ffff8000011aab58,0) at rt_ifa_add+0x38d sys/net/route.c:1273 rt_ifa_addlocal(ffff8000011aab00) at rt_ifa_addlocal+0x1b1 sys/net/route.c:1381 in_ifinit(ffff800001192000,ffff8000011aab00,ffff80002a5575a0,1) at in_ifinit+0x26c sys/netinet/in.c:669 in_ioctl_change_ifaddr(8040691a,ffff80002a557590,ffff800001192000) at in_ioctl_change_ifaddr+0x92c sys/netinet/in.c:504 ifioctl(fffffd8073ed1800,8040691a,ffff80002a557590,ffff80002a4c3c08) at ifioctl+0x1519 pru_control sys/sys/protosw.h:355 [inline] ifioctl(fffffd8073ed1800,8040691a,ffff80002a557590,ffff80002a4c3c08) at ifioctl+0x1519 sys/net/if.c:2449 sys_ioctl(ffff80002a4c3c08,ffff80002a557770,ffff80002a5576c0) at sys_ioctl+0x678 syscall(ffff80002a557770) at syscall+0x97e sys/arch/amd64/amd64/trap.c:577 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x93c8c5c0f60, count: -10