uvm_fault(0xfffff0000b1f71e8, 0x0, 0, 1) -> e
kernel: page fault trap, code=0
Stopped at rtable_match+0xe1: movq 0(%rax,%rcx,8),%r15
TID PID UID PRFLAGS PFLAGS CPU COMMAND
460651 58065 0 0x14000 0x200 1 reaper
rtable_match(0,ffff80002a26c8c0,0) at rtable_match+0xe1 rtable_get sys/net/rtable.c:260 [inline]
rtable_match(0,ffff80002a26c8c0,0) at rtable_match+0xe1 sys/net/rtable.c:492
rtalloc(ffff80002a26c8c0,0,0) at rtalloc+0x4a rt_match sys/net/route.c:349 [inline]
rtalloc(ffff80002a26c8c0,0,0) at rtalloc+0x4a sys/net/route.c:487
in6_ifdetach(ffff800001618800) at in6_ifdetach+0x168 sys/netinet6/in6_ifattach.c:431
if_detach(ffff800001618800) at if_detach+0x30f sys/net/if.c:1314
tun_clone_destroy(ffff800001618800) at tun_clone_destroy+0x2ce sys/net/if_tun.c:343
if_clone_destroy(ffff80002a26ca30) at if_clone_destroy+0x205 sys/net/if.c:1479
tun_dev_close(4287e,3) at tun_dev_close+0x1d9 sys/net/if_tun.c:526
spec_close(ffff80002a26caf0) at spec_close+0x417 sys/kern/spec_vnops.c:-1
VOP_CLOSE(fffff0006fdb69a8,3,fffff000097fd680,ffff800045fe3780) at VOP_CLOSE+0x132 sys/kern/vfs_vops.c:156
vn_closefile(fffff0006fd8f6b0,ffff800045fe3780) at vn_closefile+0x12b vn_close sys/kern/vfs_vnops.c:298 [inline]
vn_closefile(fffff0006fd8f6b0,ffff800045fe3780) at vn_closefile+0x12b sys/kern/vfs_vnops.c:621
fdrop(fffff0006fd8f6b0,ffff800045fe3780) at fdrop+0x121 sys/kern/kern_descrip.c:1281
closef(fffff0006fd8f6b0,ffff800045fe3780) at closef+0x192 sys/kern/kern_descrip.c:1265
fdfree(ffff800045fe3780) at fdfree+0x116 sys/kern/kern_descrip.c:1196
exit1(ffff800045fe3780,b,0,1) at exit1+0x595 sys/kern/kern_exit.c:215
end trace frame: 0xffff80002a26cd80, count: 0
https://www.openbsd.org/ddb.html describes the minimum info required in bug
reports. Insufficient info makes it difficult to find and fix bugs.
ddb{0}>
ddb{0}> set $lines = 0
ddb{0}> set $maxwidth = 0
ddb{0}> show panic
*cpu0: uvm_fault(0xfffff0000b1f71e8, 0x0, 0, 1) -> e
ddb{0}> show kasan
No such command
ddb{0}> trace
rtable_match(0,ffff80002a26c8c0,0) at rtable_match+0xe1 rtable_get sys/net/rtable.c:260 [inline]
rtable_match(0,ffff80002a26c8c0,0) at rtable_match+0xe1 sys/net/rtable.c:492
rtalloc(ffff80002a26c8c0,0,0) at rtalloc+0x4a rt_match sys/net/route.c:349 [inline]
rtalloc(ffff80002a26c8c0,0,0) at rtalloc+0x4a sys/net/route.c:487
in6_ifdetach(ffff800001618800) at in6_ifdetach+0x168 sys/netinet6/in6_ifattach.c:431
if_detach(ffff800001618800) at if_detach+0x30f sys/net/if.c:1314
tun_clone_destroy(ffff800001618800) at tun_clone_destroy+0x2ce sys/net/if_tun.c:343
if_clone_destroy(ffff80002a26ca30) at if_clone_destroy+0x205 sys/net/if.c:1479
tun_dev_close(4287e,3) at tun_dev_close+0x1d9 sys/net/if_tun.c:526
spec_close(ffff80002a26caf0) at spec_close+0x417 sys/kern/spec_vnops.c:-1
VOP_CLOSE(fffff0006fdb69a8,3,fffff000097fd680,ffff800045fe3780) at VOP_CLOSE+0x132 sys/kern/vfs_vops.c:156
vn_closefile(fffff0006fd8f6b0,ffff800045fe3780) at vn_closefile+0x12b vn_close sys/kern/vfs_vnops.c:298 [inline]
vn_closefile(fffff0006fd8f6b0,ffff800045fe3780) at vn_closefile+0x12b sys/kern/vfs_vnops.c:621
fdrop(fffff0006fd8f6b0,ffff800045fe3780) at fdrop+0x121 sys/kern/kern_descrip.c:1281
closef(fffff0006fd8f6b0,ffff800045fe3780) at closef+0x192 sys/kern/kern_descrip.c:1265
fdfree(ffff800045fe3780) at fdfree+0x116 sys/kern/kern_descrip.c:1196
exit1(ffff800045fe3780,b,0,1) at exit1+0x595 sys/kern/kern_exit.c:215
sys_exit(ffff800045fe3780,ffff80002a26ce60,ffff80002a26cdb0) at sys_exit+0x1a sys/kern/kern_exit.c:-1
syscall(ffff80002a26ce60) at syscall+0xb17 mi_syscall sys/sys/syscall_mi.h:176 [inline]
syscall(ffff80002a26ce60) at syscall+0xb17 sys/arch/amd64/amd64/trap.c:783
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x7cb5f41249b0, count: -17
ddb{0}> show registers
rdi 0x1
rsi 0
rbp 0xffff80002a26c840
rbx 0
rdx 0
rcx 0
rax 0
r8 0xffffffffffffffff
r9 0
r10 0xc7ed9403027eecad
r11 0x4f522a55ee6e31b
r12 0xffff80002a26c8c0
r13 0xffff800000c43930
r14 0
r15 0
rip 0xffffffff820778b1 rtable_match+0xe1
cs 0x8
rflags 0x10202 __ALIGN_SIZE+0xf202
rsp 0xffff80002a26c7d0
ss 0x10
rtable_match+0xe1: movq 0(%rax,%rcx,8),%r15
ddb{0}> show proc
PROC (syz-executor) tid=249827 pid=54465 tcnt=0 stat=onproc
flags process=1008<EXITING,SINGLEEXIT> proc=2000<WEXIT>
runpri=32, usrpri=79, slppri=32, nice=20
wchan=0x0, wmesg=, ps_single=0xffff800045fe3780 scnt=-1 ecnt=1
forw=0xffffffffffffffff, list=0xffff80003c498a98,0xffff800045fe8d28
process=0xffff80003c4889c8 user=0xffff80002a267000, vmspace=0xfffff0000b1f71e8
estcpu=29, cpticks=15, pctcpu=0.14, user=0, sys=1, intr=0
ddb{0}> ps
PID TID PPID UID S PRLAGS PFLAGS WAIT COMMAND
74918 35495 39750 0 2 0 0 syz-executor
74918 85036 39750 0 2 0 0x4000000 syz-executor
30413 418636 54150 0 2 0 0 syz-executor
30413 306295 54150 0 2 0 0x4000000 syz-executor
88627 468097 47541 0 2 0 0 syz-executor
11762 327900 51385 -1 2 0x10 0 syz-executor
11762 325288 51385 -1 3 0x10 0x4000080 semwait syz-executor
11762 441902 51385 -1 3 0x10 0x4000080 fsleep syz-executor
11762 444839 51385 -1 3 0x10 0x4000080 fsleep syz-executor
49305 515744 5128 0 3 0 0x80 nanoslp syz-executor
49305 133670 5128 0 3 0 0x4000080 fsleep syz-executor
49305 187475 5128 0 2 0 0x4000000 syz-executor
51385 242412 69102 0 3 0x2 0x80 nanoslp syz-executor
78602 425590 0 0 3 0x14000 0x280 nfsidl nfsio
39344 267037 0 0 3 0x14000 0x280 nfsidl nfsio
99061 95979 0 0 3 0x14000 0x280 nfsidl nfsio
81899 290443 0 0 3 0x14000 0x280 nfsidl nfsio
18449 511815 0 0 3 0x14000 0x280 nfsidl nfsio
90675 447 0 0 3 0x14000 0x280 nfsidl nfsio
92965 78324 0 0 3 0x14000 0x280 nfsidl nfsio
13304 27916 0 0 3 0x14000 0x280 nfsidl nfsio
79854 389808 0 0 3 0x14000 0x280 nfsidl nfsio
45147 81720 0 0 3 0x14000 0x280 nfsidl nfsio
490 52300 0 0 3 0x14000 0x280 nfsidl nfsio
77769 345961 0 0 3 0x14000 0x280 nfsidl nfsio
10266 508449 0 0 3 0x14000 0x280 nfsidl nfsio
33867 457489 0 0 3 0x14000 0x280 nfsidl nfsio
58576 90362 0 0 3 0x14000 0x280 nfsidl nfsio
77753 201547 0 0 3 0x14000 0x280 nfsidl nfsio
85231 500346 0 0 3 0x14000 0x280 nfsidl nfsio
61212 218592 0 0 3 0x14000 0x280 nfsidl nfsio
65519 116746 0 0 3 0x14000 0x280 nfsidl nfsio
50650 38002 0 0 3 0x14000 0x280 nfsidl nfsio
5128 457086 69102 0 3 0x2 0x80 nanoslp syz-executor
80 346115 69102 0 2 0x2 0 syz-executor
47541 358248 69102 0 3 0x2 0x80 nanoslp syz-executor
91535 354826 69102 0 3 0x2 0x80 wait syz-executor
52593 106940 69102 0 3 0x2 0x80 nanoslp syz-executor
54150 292721 69102 0 3 0x2 0x80 nanoslp syz-executor
39750 267946 69102 0 3 0x2 0x80 nanoslp syz-executor
69102 327487 1 0 3 0x2 0x80 kqread syz-executor
25979 1200 1 74 3 0x1100012 0x80 bpf pflogd
62199 20205 1 73 3 0x1100010 0x80 kqread syslogd
89765 164827 0 0 3 0x14000 0x200 bored smr
37724 521612 0 0 3 0x14000 0x200 pgzero zerothread
39980 483671 0 0 3 0x14000 0x200 aiodoned aiodoned
44418 263722 0 0 3 0x14000 0x200 syncer update
7709 168183 0 0 3 0x14000 0x200 cleaner cleaner
58065 460651 0 0 7 0x14000 0x200 reaper
53266 250175 0 0 3 0x14000 0x200 pgdaemon pagedaemon
79795 460876 0 0 3 0x14000 0x200 bored viomb
74519 27883 0 0 3 0x14000 0x40000200 acpi0 acpi0
74619 211312 0 0 3 0x14000 0x40000200 idle1
74726 169046 0 0 3 0x14000 0x200 bored softnet1
15599 365900 0 0 3 0x14000 0x200 bored softnet0
56794 326393 0 0 3 0x14000 0x200 bored systqmp
14718 142682 0 0 3 0x14000 0x200 bored systq
37155 229196 0 0 3 0x14000 0x200 tmoslp softclockmp
96749 473350 0 0 3 0x14000 0x40000200 tmoslp softclock
13647 372732 0 0 3 0x14000 0x40000200 idle0
1 427378 0 0 4 0x50000002 0x8000080 init
0 0 -1 0 3 0x10010000 0x200 scheduler swapper
ddb{0}> show all locks
ddb{0}> show malloc
Type InUse MemUse HighUse Limit Requests Type Lim
devbuf 11064 12097K 13089K 166960K 12772 0
pcb 20 12K 12K 166960K 126 0
rtable 223 7K 8K 166960K 443 0
pf 46 20K 25K 166960K 135 0
ifaddr 42 7K 7K 166960K 66 0
ifgroup 73 3K 3K 166960K 106 0
sysctl 4 1K 9K 166960K 9 0
counters 74 37K 37K 166960K 100 0
ioctlops 0 0K 4K 166960K 1573 0
iov 0 0K 24K 166960K 96 0
mount 1 1K 1K 166960K 1 0
log 0 0K 0K 166960K 4 0
vnodes 1349 85K 85K 166960K 1834 0
UFS quota 1 32K 32K 166960K 1 0
UFS mount 5 36K 36K 166960K 5 0
shm 2 1K 9K 166960K 26 0
VM map 2 1K 1K 166960K 2 0
sem 12 0K 0K 166960K 77 0
dirhash 12 2K 2K 166960K 21 0
ACPI 1734 201K 291K 166960K 11964 0
file desc 17 61K 240K 166960K 617 0
sigio 0 0K 0K 166960K 8 0
proc 12 17K 164K 166960K 628 0
subproc 72 4K 4K 166960K 82 0
NFS srvsock 1 0K 0K 166960K 1 0
NFS daemon 1 16K 16K 166960K 1 0
ip_moptions 0 0K 0K 166960K 60 0
in_multi 87 6K 7K 166960K 137 0
ether_multi 1 0K 0K 166960K 9 0
mrt 1 0K 0K 166960K 15 0
ISOFS mount 1 32K 32K 166960K 1 0
MSDOSFS mount 1 16K 16K 166960K 1 0
ttys 67 307K 307K 166960K 67 0
exec 0 0K 1K 166960K 474 0
fusefs mount 1 32K 32K 166960K 1 0
pfkey data 0 0K 0K 166960K 1 0
tdb 3 0K 0K 166960K 3 0
VM swap 8 62K 64K 166960K 10 0
UVM amap 139 79K 178K 166960K 7240 0
UVM aobj 30 2K 3K 166960K 32 0
pinsyscall 21 42K 104K 166960K 1819 0
memdesc 1 4K 4K 166960K 1 0
crypto data 1 1K 1K 166960K 1 0
ip6_options 0 0K 0K 166960K 19 0
NDP 14 0K 2K 166960K 45 0
temp 44 9120K 9184K 166960K 15511 0
kqueue 3 4K 29K 166960K 87 0
SYN cache 2 16K 16K 166960K 2 0
ddb{0}> show all pools
Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle
plcache 128 28 0 0 1 0 1 1 0 8 0
rtpcb 120 72 0 72 1 0 1 1 0 8 1
rtentry 176 132 0 34 6 0 6 6 0 8 0
unpcb 144 321 0 314 1 0 1 1 0 8 0
syncache 336 8 0 8 2 1 1 1 0 8 1
tcpcb 736 207 0 206 7 5 2 7 0 8 1
arp 136 20 0 6 1 0 1 1 0 8 0
inpcb 328 552 0 547 7 5 2 7 0 8 1
nd6 152 33 0 9 1 0 1 1 0 8 0
pkpcb 40 5 0 5 2 1 1 1 0 8 1
kcovpl 48 9 0 1 1 0 1 1 0 8 0
ppxss 1192 9 0 9 2 1 1 1 0 8 1
pfstscr 40 4 0 2 1 0 1 1 0 8 0
pffrag 232 15 0 2 1 0 1 1 0 482 0
pffrnode 88 13 0 2 1 0 1 1 0 8 0
pffrent 40 50 0 37 1 0 1 1 0 8 0
pfosfp 40 1428 0 1428 5 5 0 5 0 8 0
pfosfpen 112 1428 0 1428 21 7 14 21 0 8 14
pfsrclim 320 1 0 1 1 1 0 1 0 8 0
pfstlim 224 1 0 1 1 0 1 1 0 8 1
pfanchor 1288 7 0 3 1 0 1 1 0 8 0
pftag 88 2 0 2 1 0 1 1 0 8 1
pfqueue 320 1 0 1 1 0 1 1 0 8 1
pfstitem 24 65 0 13 1 0 1 1 0 8 0
pfstkey 128 69 0 17 2 0 2 2 0 8 0
pfstate 448 66 0 15 7 0 7 7 0 8 0
pfrule 1360 31 0 23 2 1 1 2 0 8 0
art_heap8 4096 1 0 0 1 0 1 1 0 8 0
art_heap4 256 597 0 132 32 2 30 30 0 8 0
art_table 40 598 0 132 5 0 5 5 0 8 0
art_node 32 132 0 43 1 0 1 1 0 8 0
sysvmsgpl 40 5 0 3 1 0 1 1 0 8 0
semapl 72 75 0 65 1 0 1 1 0 8 0
shmpl 112 29 0 2 1 0 1 1 0 8 0
dirhash 1024 23 0 6 3 0 3 3 0 8 0
dino2pl 256 2512 0 1051 93 0 93 93 0 8 0
ffsino 296 2512 0 1051 114 0 114 114 0 8 0
nchpl 144 3343 0 1635 64 0 64 64 0 8 0
vnodes 216 2838 0 0 158 0 158 158 0 8 0
namei 1024 11564 0 11564 2 1 1 2 0 8 1
percpumem 16 66 0 13 1 0 1 1 0 8 0
kstatmem 264 55 0 22 3 0 3 3 0 8 0
scsiplug 72 5 0 5 1 0 1 1 0 8 1
scxspl 216 13359 0 13359 11 3 8 8 1 8 8
plimitpl 152 108 0 91 1 0 1 1 0 8 0
sigapl 424 949 0 881 8 0 8 8 0 8 0
knotepl 120 510 0 0 16 0 16 16 0 8 0
kqueuepl 224 129 0 127 1 0 1 1 0 8 0
pipepl 344 157 0 130 3 0 3 3 0 8 0
fdescpl 528 913 0 893 3 0 3 3 0 8 0
filepl 160 5198 0 5017 15 3 12 14 0 8 0
lockfpl 104 166 0 166 1 0 1 1 0 8 1
lockfspl 48 73 0 73 1 0 1 1 0 8 1
sessionpl 144 35 0 25 1 0 1 1 0 8 0
pgrppl 48 51 0 33 1 0 1 1 0 8 0
ucredpl 104 888 0 874 1 0 1 1 0 8 0
zombiepl 144 895 0 881 1 0 1 1 0 8 0
processpl 1232 949 0 881 6 0 6 6 0 8 0
procpl 664 1728 0 1653 8 0 8 8 0 8 0
sosppl 176 2 0 2 1 1 0 1 0 8 0
sockpl 752 964 0 952 10 5 5 10 0 8 2
mcl64k 65536 10 0 0 2 0 2 2 0 8 0
mcl16k 16384 2 0 0 1 0 1 1 0 8 0
mcl12k 12288 1 0 0 1 0 1 1 0 8 0
mcl8k 8192 8 0 0 1 0 1 1 0 8 0
mcl4k 4096 125 0 0 16 0 16 16 0 8 0
mcl2k 2048 23 0 0 3 0 3 3 0 8 0
mextrefs 64 20 0 0 1 0 1 1 0 8 0
mtagpl 96 3 0 0 1 0 1 1 0 8 0
mbufpl 256 232 0 0 14 0 14 14 0 8 0
bufpl 272 4358 0 116 283 0 283 283 0 8 0
anonpl 32 7625 0 0 62 0 62 62 0 247 0
amapchunkpl 152 22637 0 22157 28 0 28 28 0 158 7
amappl16 200 2935 0 2909 18 3 15 15 0 8 7
amappl15 192 2 0 2 1 1 0 1 0 8 0
amappl14 184 453 0 453 1 0 1 1 0 8 1
amappl13 176 129 0 127 1 0 1 1 0 8 0
amappl12 168 1212 0 1194 2 0 2 2 0 8 0
amappl11 160 4 0 4 1 1 0 1 0 8 0
amappl10 152 64 0 60 1 0 1 1 0 8 0
amappl9 144 276 0 275 1 0 1 1 0 8 0
amappl8 136 110 0 108 1 0 1 1 0 8 0
amappl7 128 155 0 150 1 0 1 1 0 8 0
amappl6 120 184 0 183 1 0 1 1 0 8 0
amappl5 112 99 0 96 1 0 1 1 0 8 0
amappl4 104 316 0 307 1 0 1 1 0 8 0
amappl3 96 4644 0 4567 4 0 4 4 0 8 0
amappl2 88 644 0 624 2 0 2 2 0 8 0
amappl1 80 12623 0 12472 15 2 13 15 0 8 3
amappl 88 6409 0 6289 5 0 5 5 0 92 0
uvmvnodes 80 109 0 0 3 0 3 3 0 8 0
dma4096 4096 1 0 1 1 1 0 1 0 8 0
dma1024 1024 1 0 0 1 0 1 1 0 8 0
dma256 256 6 0 6 1 1 0 1 0 8 0
dma128 128 255 0 255 2 2 0 1 0 8 0
dma64 64 7 0 7 2 1 1 1 0 8 1
dma32 32 7 0 7 1 1 0 1 0 8 0
dma16 16 18 0 17 1 0 1 1 0 8 0
aobjpl 72 31 0 2 1 0 1 1 0 8 0
uaddrrnd 24 913 0 893 1 0 1 1 0 8 0
uaddrbest 32 2 0 0 1 0 1 1 0 8 0
uaddr 24 913 0 893 1 0 1 1 0 8 0
vmmpekpl 168 9256 0 9214 3 0 3 3 0 8 0
vmmpepl 168 66217 0 65261 98 7 91 98 0 357 35
vmsppl 488 912 0 893 6 1 5 5 0 8 0
rwobjpl 80 20772 0 20255 27 0 27 27 0 8 1
pdppl 4096 1833 0 1786 111 62 49 87 0 8 2
pvpl 32 14935 0 0 121 0 121 121 0 265 0
pmappl 256 912 0 893 3 0 3 3 0 8 0
extentpl 40 46 0 28 1 0 1 1 0 8 0
phpool 112 586 0 74 15 0 15 15 0 8 0
ddb{0}> machine ddbcpu 0
Invalid cpu 0
ddb{0}> trace
rtable_match(0,ffff80002a26c8c0,0) at rtable_match+0xe1 rtable_get sys/net/rtable.c:260 [inline]
rtable_match(0,ffff80002a26c8c0,0) at rtable_match+0xe1 sys/net/rtable.c:492
rtalloc(ffff80002a26c8c0,0,0) at rtalloc+0x4a rt_match sys/net/route.c:349 [inline]
rtalloc(ffff80002a26c8c0,0,0) at rtalloc+0x4a sys/net/route.c:487
in6_ifdetach(ffff800001618800) at in6_ifdetach+0x168 sys/netinet6/in6_ifattach.c:431
if_detach(ffff800001618800) at if_detach+0x30f sys/net/if.c:1314
tun_clone_destroy(ffff800001618800) at tun_clone_destroy+0x2ce sys/net/if_tun.c:343
if_clone_destroy(ffff80002a26ca30) at if_clone_destroy+0x205 sys/net/if.c:1479
tun_dev_close(4287e,3) at tun_dev_close+0x1d9 sys/net/if_tun.c:526
spec_close(ffff80002a26caf0) at spec_close+0x417 sys/kern/spec_vnops.c:-1
VOP_CLOSE(fffff0006fdb69a8,3,fffff000097fd680,ffff800045fe3780) at VOP_CLOSE+0x132 sys/kern/vfs_vops.c:156
vn_closefile(fffff0006fd8f6b0,ffff800045fe3780) at vn_closefile+0x12b vn_close sys/kern/vfs_vnops.c:298 [inline]
vn_closefile(fffff0006fd8f6b0,ffff800045fe3780) at vn_closefile+0x12b sys/kern/vfs_vnops.c:621
fdrop(fffff0006fd8f6b0,ffff800045fe3780) at fdrop+0x121 sys/kern/kern_descrip.c:1281
closef(fffff0006fd8f6b0,ffff800045fe3780) at closef+0x192 sys/kern/kern_descrip.c:1265
fdfree(ffff800045fe3780) at fdfree+0x116 sys/kern/kern_descrip.c:1196
exit1(ffff800045fe3780,b,0,1) at exit1+0x595 sys/kern/kern_exit.c:215
sys_exit(ffff800045fe3780,ffff80002a26ce60,ffff80002a26cdb0) at sys_exit+0x1a sys/kern/kern_exit.c:-1
syscall(ffff80002a26ce60) at syscall+0xb17 mi_syscall sys/sys/syscall_mi.h:176 [inline]
syscall(ffff80002a26ce60) at syscall+0xb17 sys/arch/amd64/amd64/trap.c:783
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x7cb5f41249b0, count: -17
ddb{0}>