kern.securelevel: 0 -> 1
creating runtime link editor directory cache.
preserving editor files.
starting network daemons: sshd.
starting local daemons:.
Mon Feb  3 01:50:21 PST 2020

OpenBSD/amd64 (ci-openbsd-multicore-2.c.syzkaller.internal) (tty00)

Warning: Permanently added '10.128.0.198' (ECDSA) to the list of known hosts.
2020/02/03 01:50:36 parsed 1 programs
2020/02/03 01:50:41 executed programs: 0
login: uvm_fault(0xfffffd807f000a10, 0x3fff7ee000b, 0, 1) -> e

kernel: page fault trap, code=0

Stopped at      in_delmulti+0x8d:       movl    0xc(%r14),%r15d

ddb{1}> 

ddb{1}> set $lines = 0

ddb{1}> set $maxwidth = 0

ddb{1}> show panic

kernel page fault

uvm_fault(0xfffffd807f000a10, 0x3fff7ee000b, 0, 1) -> e

in_delmulti(3fff7edffff) at in_delmulti+0x8d

end trace frame: 0xffff800020b74920, count: 0

ddb{1}> trace

in_delmulti(3fff7edffff) at in_delmulti+0x8d

in_purgeaddr(ffff8000009d1400) at in_purgeaddr+0x156

in_ifdetach(ffff8000009ce000) at in_ifdetach+0x74

if_detach(ffff8000009ce000) at if_detach+0x140

tun_clone_destroy(ffff8000009ce000) at tun_clone_destroy+0x1f2

tun_dev_close(5d00,7) at tun_dev_close+0x160

spec_close(ffff800020b74b00) at spec_close+0x311

VOP_CLOSE(fffffd806e23a348,7,fffffd807f7bea80,ffff800020a7c008) at VOP_CLOSE+0xc0

vn_closefile(fffffd806d0c4860,ffff800020a7c008) at vn_closefile+0xd7

fdrop(fffffd806d0c4860,ffff800020a7c008) at fdrop+0xc2

closef(fffffd806d0c4860,ffff800020a7c008) at closef+0x11c

fdfree(ffff800020a7c008) at fdfree+0x101

exit1(ffff800020a7c008,0,9,1) at exit1+0x344

postsig(ffff800020a7c008,9) at postsig+0x4e5

userret(ffff800020a7c008) at userret+0x199

syscall(ffff800020b74f80) at syscall+0x55f

Xsyscall() at Xsyscall+0x128

end of kernel

end trace frame: 0x7f7fffff3d10, count: -17

ddb{1}> show registers

rdi                              0x2

rsi                                0

rbp               0xffff800020b748d0

rbx                                0

rdx                             0x8b

rcx                              0x1

rax                              0x1

r8                0xffffffff81449a03    rt_ifa_purge+0x153

r9                               0x5

r10               0xf60e8f8e8dd7b51b

r11               0xed8eab18585c54df

r12                                0

r13                              0x3

r14                    0x3fff7edffff

r15                              0x1

rip               0xffffffff81e0661d    in_delmulti+0x8d

cs                               0x8

rflags                       0x10246    __ALIGN_SIZE+0xf246

rsp               0xffff800020b74870

ss                              0x10

in_delmulti+0x8d:       movl    0xc(%r14),%r15d

ddb{1}> show proc

PROC (syz-executor.0) pid=146434 stat=onproc

    flags process=a<EXEC,EXITING> proc=2000<WEXIT>

    pri=32, usrpri=58, nice=20

    forw=0xffffffffffffffff, list=0xffff800020a7cc38,0xffff800020a7d608

    process=0xffff800020a912d0 user=0xffff800020b70000, vmspace=0xfffffd807f000a10

    estcpu=8, cpticks=2, pctcpu=0.1

    user=0, sys=1, intr=0

ddb{1}> ps

   PID     TID   PPID    UID  S       FLAGS  WAIT          COMMAND

 20332  296953  98163      0  3        0x82  thrsleep      syz-execprog

 20332   98240  98163      0  3   0x4000082  thrsleep      syz-execprog

 20332   24827  98163      0  3   0x4000082  thrsleep      syz-execprog

 20332    7830  98163      0  3   0x4000082  thrsleep      syz-execprog

 20332   28960  98163      0  3   0x4000082  thrsleep      syz-execprog

 20332  355227  98163      0  3   0x4000082  thrsleep      syz-execprog

 20332  164613  98163      0  3   0x4000082  kqread        syz-execprog

 20332  138124  98163      0  3   0x4000082  thrsleep      syz-execprog

 20332   82962  98163      0  3   0x4000082  wait          syz-execprog

 98163  408543   4510      0  3    0x10008a  pause         ksh

  4510  337172  27336      0  3        0x92  select        sshd

 78741  444043      1      0  3    0x100083  ttyin         getty

 27336  376523      1      0  3        0x80  select        sshd

 98990  237450  26557     74  3    0x100092  bpf           pflogd

 26557  512105      1      0  3        0x80  netio         pflogd

 65302  213320    842     73  3    0x100090  kqread        syslogd

   842  320199      1      0  3    0x100082  netio         syslogd

 60221  399582      1     77  7    0x100090                dhclient

 23567  519977      1      0  3        0x80  poll          dhclient

 38600   46257      0      0  3     0x14200  pgzero        zerothread

 73640  263434      0      0  3     0x14200  aiodoned      aiodoned

 24892  277707      0      0  3     0x14200  syncer        update

 59138  382837      0      0  3     0x14200  cleaner       cleaner

 40955  455092      0      0  3     0x14200  reaper        reaper

 68959  455938      0      0  3     0x14200  pgdaemon      pagedaemon

  5396    1957      0      0  3     0x14200  bored         crynlk

 95667   14118      0      0  3     0x14200  bored         crypto

 69139  377792      0      0  3  0x40014200  acpi0         acpi0

 73333  454550      0      0  3  0x40014200                idle1

 23903  500092      0      0  3     0x14200  bored         softnet

 26900   49850      0      0  2     0x14200                systqmp

 36595   59835      0      0  3     0x14200  bored         systq

 97712  258689      0      0  3  0x40014200  bored         softclock

 25942   22872      0      0  3  0x40014200                idle0

 94542   25910      0      0  3     0x14200  bored         smr

     1  454945      0      0  3        0x82  wait          init

     0       0     -1      0  3     0x10200  scheduler     swapper

ddb{1}> show all locks

ddb{1}> show malloc

           Type InUse  MemUse  HighUse   Limit  Requests Type Lim

         devbuf  9463   6395K    6395K  78643K     10556        0

            pcb    13      8K       8K  78643K        13        0

         rtable    75      2K       2K  78643K       163        0

         ifaddr    37      9K       9K  78643K        39        0

       counters    41     33K      33K  78643K        41        0

       ioctlops     0      0K       4K  78643K      1468        0

          mount     1      1K       1K  78643K         1        0

         vnodes  1181     74K      74K  78643K      1186        0

      UFS quota     1     32K      32K  78643K         1        0

      UFS mount     5     36K      36K  78643K         5        0

            shm     2      1K       1K  78643K         2        0

         VM map     2      1K       1K  78643K         2        0

            sem     2      0K       0K  78643K         2        0

        dirhash    12      2K       2K  78643K        12        0

           ACPI  1809    196K     290K  78643K     12766        0

      file desc     2      4K      12K  78643K        18        0

           proc    59     63K      83K  78643K       398        0

    NFS srvsock     1      0K       0K  78643K         1        0

     NFS daemon     1     16K      16K  78643K         1        0

       in_multi    25      1K       1K  78643K        26        0

    ether_multi     1      0K       0K  78643K         1        0

    ISOFS mount     1     32K      32K  78643K         1        0

  MSDOSFS mount     1     16K      16K  78643K         1        0

           ttys    19     95K      95K  78643K        19        0

           exec     0      0K       1K  78643K       197        0

        pagedep     1      8K       8K  78643K         1        0

       inodedep     1     32K      32K  78643K         1        0

         newblk     1      0K       0K  78643K         1        0

        VM swap     7     26K      26K  78643K         7        0

       UVM amap    83     12K      12K  78643K       975        0

       UVM aobj     2      2K       2K  78643K         2        0

        memdesc     1      4K       4K  78643K         1        0

    crypto data     1      1K       1K  78643K         1        0

            NDP     7      0K       0K  78643K         7        0

           temp    29   3005K    3069K  78643K      2022        0

         kqueue     3      4K       4K  78643K         3        0

      SYN cache     2     16K      16K  78643K         2        0

ddb{1}> show all pools

Name      Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle

arp         64        4    0        2     1     0     1     1     0     8    0

plcache    128       20    0        0     1     0     1     1     0     8    0

rtpcb       80       17    0       15     1     0     1     1     0     8    0

rtentry    112       34    0        5     1     0     1     1     0     8    0

unpcb      120       29    0       19     1     0     1     1     0     8    0

syncache   264        5    0        5     1     0     1     1     0     8    1

tcpcb      544        8    0        5     1     0     1     1     0     8    0

inpcb      280       34    0       28     1     0     1     1     0     8    0

nd6         48        2    0        0     1     0     1     1     0     8    0

pfosfp      40      846    0      423     5     0     5     5     0     8    0

pfosfpen   112     1428    0      714    21     0    21    21     0     8    0

pfstitem    24       11    0        0     1     0     1     1     0     8    0

pfstkey    112       11    0        0     1     0     1     1     0     8    0

pfstate    328       11    0        0     1     0     1     1     0     8    0

pfrule     1360      21    0       16     2     1     1     2     0     8    0

art_heap8  4096       1    0        0     1     0     1     1     0     8    0

art_heap4  256      167    0        2    11     0    11    11     0     8    0

art_table   32      168    0        2     2     0     2     2     0     8    0

art_node    16       33    0        6     1     0     1     1     0     8    0

dirhash    1024      17    0        0     3     0     3     3     0     8    0

dino1pl    128     1425    0       20    46     0    46    46     0     8    0

ffsino     272     1425    0       20    94     0    94    94     0     8    0

nchpl      144     1652    0       38    60     0    60    60     0     8    0

uvmvnodes   72     1435    0        0    27     0    27    27     0     8    0

vnodes     208     1435    0        0    76     0    76    76     0     8    0

namei      1024    4159    0     4159     1     0     1     1     0     8    1

percpumem   16       31    0        0     1     0     1     1     0     8    0

scxspl     192     4482    0     4482     2     1     1     2     0     8    1

plimitpl   152       15    0        8     1     0     1     1     0     8    0

sigapl     432      225    0      212     2     0     2     2     0     8    0

knotepl    112       39    0       30     1     0     1     1     0     8    0

kqueuepl   104        3    0        1     1     0     1     1     0     8    0

pipelkpl    48       74    0       68     1     0     1     1     0     8    0

pipepl     120      148    0      137     1     0     1     1     0     8    0

fdescpl    496      226    0      212     3     0     3     3     0     8    0

filepl     152     1139    0     1083     3     0     3     3     0     8    0

lockfpl    104        5    0        4     1     0     1     1     0     8    0

lockfspl    48        3    0        2     1     0     1     1     0     8    0

sessionpl  112       19    0        9     1     0     1     1     0     8    0

pgrppl      48       19    0        9     1     0     1     1     0     8    0

ucredpl     96       52    0       43     1     0     1     1     0     8    0

zombiepl   144      213    0      212     1     0     1     1     0     8    0

processpl  960      241    0      212     5     0     5     5     0     8    1

procpl     624      249    0      212     4     0     4     4     0     8    1

sockpl     400       80    0       62     2     0     2     2     0     8    0

mcl4k      4096       2    0        0     1     0     1     1     0     8    0

mcl2k      2048      79    0        0    10     0    10    10     0     8    0

mtagpl      80        1    0        0     1     0     1     1     0     8    0

mbufpl     256      105    0        0     7     0     7     7     0     8    0

bufpl      280     3811    0      192   259     0   259   259     0     8    0

anonpl      16    26300    0    24647    25     1    24    24     0   125   17

amapchunkpl 152     767    0      698     5     0     5     5     0   158    2

amappl16   192      328    0      301    14     0    14    14     0     8   12

amappl15   184       58    0       54     1     0     1     1     0     8    0

amappl14   176       24    0       21     1     0     1     1     0     8    0

amappl12   160        9    0        7     1     0     1     1     0     8    0

amappl11   152       59    0       42     1     0     1     1     0     8    0

amappl10   144       13    0        9     1     0     1     1     0     8    0

amappl9    136      435    0      433     1     0     1     1     0     8    0

amappl8    128       92    0       81     1     0     1     1     0     8    0

amappl7    120      100    0       89     1     0     1     1     0     8    0

amappl6    112       57    0       53     1     0     1     1     0     8    0

amappl5    104      125    0      112     1     0     1     1     0     8    0

amappl4     96      493    0      465     1     0     1     1     0     8    0

amappl3     88      124    0      116     1     0     1     1     0     8    0

amappl2     80      961    0      895     3     0     3     3     0     8    1

amappl1     72    15211    0    14791    26     8    18    20     0     8    8

amappl      80      476    0      447     1     0     1     1     0    84    0

dma4096    4096       1    0        1     1     1     0     1     0     8    0

dma256     256        6    0        6     1     1     0     1     0     8    0

dma128     128      253    0      253     1     1     0     1     0     8    0

dma64       64        6    0        6     1     1     0     1     0     8    0

dma32       32        7    0        7     1     1     0     1     0     8    0

dma16       16       18    0       17     1     0     1     1     0     8    0

aobjpl      64        1    0        0     1     0     1     1     0     8    0

uaddrrnd    24      226    0      212     1     0     1     1     0     8    0

uaddrbest   32        2    0        0     1     0     1     1     0     8    0

uaddr       24      226    0      212     1     0     1     1     0     8    0

vmmpekpl   168     6250    0     6223     2     0     2     2     0     8    0

vmmpepl    168    33200    0    32251    90     9    81    81     0   357   37

vmsppl     368      225    0      212     2     0     2     2     0     8    0

pdppl      4096     459    0      424     6     0     6     6     0     8    1

pvpl        32   116518    0   112447   116     0   116   116     0   265   81

pmappl     232      225    0      212     1     0     1     1     0     8    0

extentpl    40       46    0       29     1     0     1     1     0     8    0

phpool     112      147    0        3     5     0     5     5     0     8    0

ddb{1}>