kernel: protection fault trap, code=0 Stopped at mrouter6_rtwalk_delete+0x2b: movl 0x5c(%r15),%r12d ddb> ddb> set $lines = 0 ddb> set $maxwidth = 0 ddb> show panic the kernel did not panic ddb> trace mrouter6_rtwalk_delete(1575fcf76e115db3,0,0) at mrouter6_rtwalk_delete+0x2b sys/netinet6/ip6_mroute.c:502 rtable_walk_helper(fffffd8036f2fc30,ffff80001491c7f8) at rtable_walk_helper+0x58 sys/net/rtable.c:683 art_table_walk(ffff800000075880,fffffd8036f2e320,ffffffff816f0130,ffff80001491c7f8) at art_table_walk+0x226 art_walk_apply sys/net/art.c:676 [inline] art_table_walk(ffff800000075880,fffffd8036f2e320,ffffffff816f0130,ffff80001491c7f8) at art_table_walk+0x226 sys/net/art.c:648 art_table_walk(ffff800000075880,fffffd8036f2e300,ffffffff816f0130,ffff80001491c7f8) at art_table_walk+0x2a6 sys/net/art.c:657 art_table_walk(ffff800000075880,fffffd8036f2e2c0,ffffffff816f0130,ffff80001491c7f8) at art_table_walk+0x2a6 sys/net/art.c:657 art_table_walk(ffff800000075880,fffffd8036f2e2a0,ffffffff816f0130,ffff80001491c7f8) at art_table_walk+0x2a6 sys/net/art.c:657 art_table_walk(ffff800000075880,fffffd8036f2e260,ffffffff816f0130,ffff80001491c7f8) at art_table_walk+0x2a6 sys/net/art.c:657 art_table_walk(ffff800000075880,fffffd8036f2e240,ffffffff816f0130,ffff80001491c7f8) at art_table_walk+0x2a6 sys/net/art.c:657 art_table_walk(ffff800000075880,fffffd8036f2e1a0,ffffffff816f0130,ffff80001491c7f8) at art_table_walk+0x2a6 sys/net/art.c:657 art_table_walk(ffff800000075880,fffffd8036f2e140,ffffffff816f0130,ffff80001491c7f8) at art_table_walk+0x2a6 sys/net/art.c:657 art_table_walk(ffff800000075880,fffffd8036f2e0a0,ffffffff816f0130,ffff80001491c7f8) at art_table_walk+0x2a6 sys/net/art.c:657 art_table_walk(ffff800000075880,fffffd8036f2e080,ffffffff816f0130,ffff80001491c7f8) at art_table_walk+0x2a6 sys/net/art.c:657 art_table_walk(ffff800000075880,fffffd8036f2e060,ffffffff816f0130,ffff80001491c7f8) at art_table_walk+0x2a6 sys/net/art.c:657 art_table_walk(ffff800000075880,fffffd8036f2e020,ffffffff816f0130,ffff80001491c7f8) at art_table_walk+0x2a6 sys/net/art.c:657 art_table_walk(ffff800000075880,fffffd8036f2e000,ffffffff816f0130,ffff80001491c7f8) at art_table_walk+0x2a6 sys/net/art.c:657 art_table_walk(ffff800000075880,fffffd8036f2e040,ffffffff816f0130,ffff80001491c7f8) at art_table_walk+0x2a6 sys/net/art.c:657 art_table_walk(ffff800000075880,fffffd8036f2e0c0,ffffffff816f0130,ffff80001491c7f8) at art_table_walk+0x2a6 sys/net/art.c:657 art_table_walk(ffff800000075880,fffffd8036f2e0e0,ffffffff816f0130,ffff80001491c7f8) at art_table_walk+0x2a6 sys/net/art.c:657 art_table_walk(ffff800000075880,fffffd8036f2e100,ffffffff816f0130,ffff80001491c7f8) at art_table_walk+0x2a6 sys/net/art.c:657 art_table_walk(ffff800000075880,fffffd8036f2e120,ffffffff816f0130,ffff80001491c7f8) at art_table_walk+0x2a6 sys/net/art.c:657 art_table_walk(ffff800000075880,fffffd8036f2e160,ffffffff816f0130,ffff80001491c7f8) at art_table_walk+0x2a6 sys/net/art.c:657 art_table_walk(ffff800000075880,fffffd8036f2e180,ffffffff816f0130,ffff80001491c7f8) at art_table_walk+0x2a6 sys/net/art.c:657 art_table_walk(ffff800000075880,fffffd8036f2e1c0,ffffffff816f0130,ffff80001491c7f8) at art_table_walk+0x2a6 sys/net/art.c:657 art_table_walk(ffff800000075880,fffffd8036f2e1e0,ffffffff816f0130,ffff80001491c7f8) at art_table_walk+0x2a6 sys/net/art.c:657 art_table_walk(ffff800000075880,fffffd8036f2e200,ffffffff816f0130,ffff80001491c7f8) at art_table_walk+0x2a6 sys/net/art.c:657 art_table_walk(ffff800000075880,fffffd8036f2e220,ffffffff816f0130,ffff80001491c7f8) at art_table_walk+0x2a6 sys/net/art.c:657 art_table_walk(ffff800000075880,fffffd8036f2e280,ffffffff816f0130,ffff80001491c7f8) at art_table_walk+0x2a6 sys/net/art.c:657 art_table_walk(ffff800000075880,fffffd8036f2e2e0,ffffffff816f0130,ffff80001491c7f8) at art_table_walk+0x2a6 sys/net/art.c:657 art_table_walk(ffff800000075880,fffffd8036f2e380,ffffffff816f0130,ffff80001491c7f8) at art_table_walk+0x2a6 sys/net/art.c:657 art_table_walk(ffff800000075880,fffffd8036f2e3c0,ffffffff816f0130,ffff80001491c7f8) at art_table_walk+0x2a6 sys/net/art.c:657 art_table_walk(ffff800000075880,fffffd8036f2e3e0,ffffffff816f0130,ffff80001491c7f8) at art_table_walk+0x2a6 sys/net/art.c:657 art_table_walk(ffff800000075880,fffffd8036f2e400,ffffffff816f0130,ffff80001491c7f8) at art_table_walk+0x2a6 sys/net/art.c:657 art_table_walk(ffff800000075880,fffffd8036f2e420,ffffffff816f0130,ffff80001491c7f8) at art_table_walk+0x2a6 sys/net/art.c:657 art_table_walk(ffff800000075880,fffffd8036f2ef60,ffffffff816f0130,ffff80001491c7f8) at art_table_walk+0x2a6 sys/net/art.c:657 art_walk(ffff800000075880,ffffffff816f0130,ffff80001491c7f8) at art_walk+0xcf sys/net/art.c:595 rtable_walk(0,18,0,ffffffff8209fe10,0) at rtable_walk+0xd4 ip6_mrouter_done(fffffd8037102780) at ip6_mrouter_done+0xb5 rip6_detach(fffffd8037102780) at rip6_detach+0x56 sys/netinet6/raw_ip6.c:757 soclose(fffffd8037102780,0) at soclose+0xb2 sys/kern/uipc_socket.c:303 soo_close(fffffd803eadb880,ffff80001493a290) at soo_close+0x40 fdrop(fffffd803eadb880,ffff80001493a290) at fdrop+0xc2 sys/kern/kern_descrip.c:1273 closef(fffffd803eadb880,ffff80001493a290) at closef+0x118 sys/kern/kern_descrip.c:1257 fdfree(ffff80001493a290) at fdfree+0x100 sys/kern/kern_descrip.c:1189 exit1(ffff80001493a290,0,1) at exit1+0x32f sys/kern/kern_exit.c:196 sys_exit(ffff80001493a290,ffff80001491cc90,ffff80001491cce0) at sys_exit+0x17 sys/kern/kern_exit.c:94 syscall(ffff80001491cd60) at syscall+0x507 sys/arch/amd64/amd64/trap.c:555 Xsyscall(6,1,0,1,0,7f7ffffd33e4) at Xsyscall+0x128 end of kernel end trace frame: 0x7f7ffffd33b0, count: -47 ddb> show registers rdi 0x1575fcf76e115db3 rsi 0 rbp 0xffff80001491b530 rbx 0xffff800000075888 rdx 0 rcx 0 rax 0x204 r8 0xa0 r9 0x5 r10 0 r11 0xa02e1d22573578f2 r12 0 r13 0xfffffd8036f2e320 r14 0 r15 0x1575fcf76e115db3 rip 0xffffffff8209fe3b mrouter6_rtwalk_delete+0x2b cs 0x8 rflags 0x10246 __ALIGN_SIZE+0xf246 rsp 0xffff80001491b4f0 ss 0x10 mrouter6_rtwalk_delete+0x2b: movl 0x5c(%r15),%r12d ddb> show proc PROC (syz-executor.0) pid=12216 stat=onproc flags process=1008 proc=2000 pri=32, usrpri=81, nice=20 forw=0xffffffffffffffff, list=0xffff80001493b650,0xffffffff82598330 process=0xffff8000ffff6010 user=0xffff800014917000, vmspace=0xfffffd803f014440 estcpu=36, cpticks=2, pctcpu=0.0 user=0, sys=0, intr=0 ddb> ps PID TID PPID UID S FLAGS WAIT COMMAND 42983 488491 39767 0 3 0x80 nanosleep syz-executor.1 42983 509008 39767 0 3 0x4000080 pipewr syz-executor.1 42983 192970 39767 0 3 0x4000080 fsleep syz-executor.1 39767 215380 35197 0 3 0x82 nanosleep syz-executor.1 39606 397565 35197 0 3 0x82 nanosleep syz-executor.0 40126 206141 0 0 3 0x14200 acct acct 65976 2527 1 0 3 0x100083 ttyin getty 44185 319167 0 0 3 0x14200 bored sosplice 35197 455238 34154 0 3 0x82 thrsleep syz-fuzzer 35197 187260 34154 0 3 0x4000082 thrsleep syz-fuzzer 35197 221350 34154 0 3 0x4000082 kqread syz-fuzzer 35197 170848 34154 0 3 0x4000082 thrsleep syz-fuzzer 35197 431869 34154 0 3 0x4000082 thrsleep syz-fuzzer 35197 91803 34154 0 3 0x4000082 thrsleep syz-fuzzer 35197 363590 34154 0 3 0x4000082 thrsleep syz-fuzzer 35197 482658 34154 0 3 0x4000082 thrsleep syz-fuzzer 34154 147841 40220 0 3 0x10008a pause ksh 40220 272186 69508 0 3 0x92 select sshd 69508 331888 1 0 3 0x80 select sshd 97158 412315 34164 73 3 0x100090 kqread syslogd 34164 507786 1 0 3 0x100082 netio syslogd 14812 521716 0 0 2 0x14200 zerothread 35044 52801 0 0 3 0x14200 aiodoned aiodoned 17109 92116 0 0 3 0x14200 syncer update 37474 418006 0 0 3 0x14200 cleaner cleaner 17183 209504 0 0 3 0x14200 reaper reaper 17878 272974 0 0 3 0x14200 pgdaemon pagedaemon 31462 492491 0 0 3 0x14200 bored crynlk 97026 399322 0 0 3 0x14200 bored crypto 35964 6975 0 0 3 0x40014200 acpi0 acpi0 85014 39305 0 0 3 0x14200 bored softnet 88533 46727 0 0 2 0x14200 systqmp 95993 209059 0 0 3 0x14200 bored systq 86558 228985 0 0 3 0x40014200 bored softclock 68443 97246 0 0 3 0x40014200 idle0 9145 350130 0 0 3 0x14200 bored smr 1 5899 0 0 3 0x82 wait init 0 0 -1 0 3 0x10200 scheduler swapper ddb> show all locks No such command ddb> show malloc Type InUse MemUse HighUse Limit Requests Type Lim Kern Lim devbuf 9572 6959K 14524K 78643K 56160 0 0 pcb 15 8K 8K 78643K 1991 0 0 rtable 120 4K 5K 78643K 3631 0 0 ifaddr 79 22K 26K 78643K 1583 0 0 counters 19 16K 16K 78643K 19 0 0 ioctlops 0 0K 2K 78643K 901 0 0 iov 0 0K 32K 78643K 1844 0 0 mount 1 1K 1K 78643K 1 0 0 vnodes 1206 76K 77K 78643K 17674 0 0 UFS quota 1 32K 32K 78643K 1 0 0 UFS mount 5 36K 36K 78643K 5 0 0 shm 2 1K 5K 78643K 234 0 0 VM map 2 0K 0K 78643K 26 0 0 sem 12 0K 0K 78643K 1885 0 0 dirhash 12 2K 2K 78643K 12 0 0 ACPI 1794 195K 288K 78643K 12723 0 0 file desc 6 17K 25K 78643K 17712 0 0 sigio 0 0K 0K 78643K 253 0 0 proc 44 30K 63K 78643K 3890 0 0 subproc 32 2K 2K 78643K 827 0 0 NFS srvsock 1 0K 0K 78643K 1 0 0 NFS daemon 1 16K 16K 78643K 1 0 0 ip_moptions 0 0K 0K 78643K 1706 0 0 in_multi 33 2K 2K 78643K 1134 0 0 ether_multi 2 0K 0K 78643K 98 0 0 mrt 3 0K 0K 78643K 43 0 0 ISOFS mount 1 32K 32K 78643K 1 0 0 MSDOSFS mount 1 16K 16K 78643K 1 0 0 ttys 120 530K 530K 78643K 120 0 0 exec 0 0K 1K 78643K 2463 0 0 pfkey data 0 0K 4K 78643K 8 0 0 pagedep 1 8K 8K 78643K 1 0 0 inodedep 1 32K 32K 78643K 1 0 0 newblk 1 0K 0K 78643K 1 0 0 VM swap 7 26K 26K 78643K 7 0 0 UVM amap 112 22K 32K 78643K 42765 0 0 UVM aobj 130 4K 4K 78643K 158 0 0 memdesc 1 4K 4K 78643K 1 0 0 crypto data 1 1K 1K 78643K 1 0 0 ip6_options 0 0K 1K 78643K 1975 0 0 NDP 19 0K 1K 78643K 493 0 0 temp 220 3538K 4178K 78643K 243654 0 0 kqueue 0 0K 0K 78643K 130 0 0 SYN cache 2 16K 16K 78643K 2 0 0 ddb> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle arp 64 103 0 97 1 0 1 1 0 8 0 rtpcb 80 742 0 742 15 14 1 1 0 8 1 rtentry 112 532 0 485 2 0 2 2 0 8 0 unpcb 120 6082 0 6076 1 0 1 1 0 8 0 syncache 264 4 0 4 1 1 0 1 0 8 0 sackhl 24 1 0 1 1 1 0 1 0 8 0 tcpqe 32 1308 0 1308 1 1 0 1 0 8 0 tcpcb 544 3599 0 3595 1 0 1 1 0 8 0 ipq 40 24 0 24 12 12 0 1 0 8 0 ipqe 40 62 0 62 12 12 0 1 0 8 0 inpcb 280 9862 0 9852 10 8 2 2 0 8 0 rttmr 72 1 0 1 1 0 1 1 0 8 1 ip6q 72 2 0 2 2 2 0 1 0 8 0 ip6af 40 4 0 4 2 2 0 1 0 8 0 nd6 48 96 0 92 1 0 1 1 0 8 0 pkpcb 40 102 0 102 32 32 0 1 0 8 0 swfcl 56 6 0 0 1 0 1 1 0 8 0 ppxss 1128 262 0 262 64 63 1 1 0 8 1 art_heap8 4096 1 0 0 1 0 1 1 0 8 0 art_heap4 256 2334 0 2089 22 6 16 16 0 8 0 art_table 32 2335 0 2089 3 0 3 3 0 8 0 art_node 16 513 0 470 1 0 1 1 0 8 0 sysvmsgpl 40 56 0 36 1 0 1 1 0 8 0 semapl 112 1881 0 1871 1 0 1 1 0 8 0 shmpl 112 156 0 28 4 0 4 4 0 8 0 dirhash 1024 17 0 0 3 0 3 3 0 8 0 dino1pl 128 28818 0 27401 46 0 46 46 0 8 0 ffsino 240 28818 0 27401 84 0 84 84 0 8 0 nchpl 144 53861 0 52266 60 0 60 60 0 8 0 uvmvnodes 72 8555 0 0 156 0 156 156 0 8 0 vnodes 208 8555 0 0 451 0 451 451 0 8 0 namei 1024 178880 0 178880 7 6 1 1 0 8 1 vmpool 520 24 0 24 10 10 0 1 0 8 0 scsiplug 64 39 0 39 29 29 0 1 0 8 0 scxspl 192 174231 0 174231 31 30 1 6 0 8 1 plimitpl 152 1567 0 1561 1 0 1 1 0 8 0 sigapl 432 17749 0 17737 2 0 2 2 0 8 0 futexpl 56 297793 0 297792 10 9 1 1 0 8 0 knotepl 112 3778 0 3758 1 0 1 1 0 8 0 kqueuepl 104 4016 0 4012 1 0 1 1 0 8 0 pipepl 112 9750 0 9729 16 15 1 2 0 8 0 fdescpl 424 17750 0 17737 2 0 2 2 0 8 0 filepl 120 107731 0 107640 31 27 4 5 0 8 1 lockfpl 104 5592 0 5592 5 4 1 1 0 8 1 lockfspl 48 1841 0 1841 5 4 1 1 0 8 1 sessionpl 112 67 0 59 1 0 1 1 0 8 0 pgrppl 48 234 0 226 1 0 1 1 0 8 0 ucredpl 96 21773 0 21765 1 0 1 1 0 8 0 zombiepl 144 17740 0 17739 2 1 1 1 0 8 0 processpl 864 17768 0 17739 4 0 4 4 0 8 0 procpl 632 39503 0 39465 4 0 4 4 0 8 0 sosppl 128 222 0 222 48 47 1 1 0 8 1 sockpl 384 16954 0 16942 25 23 2 4 0 8 0 mcl64k 65536 4037 0 4037 358 337 21 64 0 8 21 mcl16k 16384 89 0 89 47 47 0 1 0 8 0 mcl12k 12288 321 0 321 63 62 1 1 0 8 1 mcl9k 9216 240 0 240 59 58 1 1 0 8 1 mcl8k 8192 302 0 302 62 62 0 1 0 8 0 mcl4k 4096 935 0 935 22 21 1 1 0 8 1 mcl2k2 2112 95 0 95 46 46 0 1 0 8 0 mcl2k 2048 88247 0 88204 47 41 6 21 0 8 0 mtagpl 80 574 0 567 5 4 1 2 0 8 0 mbufpl 256 230583 0 230482 203 194 9 37 0 8 0 bufpl 256 54109 0 45558 535 0 535 535 0 8 0 anonpl 16 1638715 0 1628503 447 388 59 69 0 62 0 amapchunkpl 152 78800 0 78696 161 153 8 29 0 158 2 amappl16 192 95843 0 95102 593 554 39 50 0 8 1 amappl15 184 1834 0 1833 1 0 1 1 0 8 0 amappl14 176 5030 0 5026 2 1 1 1 0 8 0 amappl13 168 2418 0 2417 6 5 1 1 0 8 0 amappl12 160 1499 0 1496 2 1 1 1 0 8 0 amappl11 152 2114 0 2110 1 0 1 1 0 8 0 amappl10 144 2265 0 2265 9 9 0 1 0 8 0 amappl9 136 3140 0 3130 1 0 1 1 0 8 0 amappl8 128 2560 0 2515 2 0 2 2 0 8 0 amappl7 120 2468 0 2461 1 0 1 1 0 8 0 amappl6 112 2061 0 2051 1 0 1 1 0 8 0 amappl5 104 2086 0 2077 1 0 1 1 0 8 0 amappl4 96 19488 0 19459 1 0 1 1 0 8 0 amappl3 88 3190 0 3185 1 0 1 1 0 8 0 amappl2 80 141490 0 141416 3 1 2 3 0 8 0 amappl1 72 316531 0 316127 28 19 9 20 0 8 0 amappl 80 40597 0 40563 1 0 1 1 0 84 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma64 64 259 0 259 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 17 0 17 1 1 0 1 0 8 0 aobjpl 64 157 0 28 3 0 3 3 0 8 0 uaddrrnd 24 17774 0 17737 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 17774 0 17737 1 0 1 1 0 8 0 vmmpekpl 168 109147 0 109123 2 0 2 2 0 8 0 vmmpepl 168 2059290 0 2057438 835 731 104 123 0 357 17 vmsppl 272 17749 0 17737 5 4 1 2 0 8 0 pdppl 4096 35554 0 35522 10 5 5 6 0 8 0 pvpl 32 4704466 0 4691119 1152 998 154 276 0 265 18 pmappl 200 17773 0 17761 1 0 1 1 0 8 0 extentpl 40 38 0 22 1 0 1 1 0 8 0 phpool 112 1409 0 725 28 7 21 21 0 8 0