login: uvm_fault(0xffffff002b740530, 0x600011c, 0, 1) -> e kernel: page fault trap, code=0 Stopped at m_free+0x2a: movswq 0x1c(%r14),%rdx ddb> ddb> set $lines = 0 ddb> show panic kernel page fault uvm_fault(0xffffff002b740530, 0x600011c, 0, 1) -> e m_free(6000100) at m_free+0x2a sys/kern/uipc_mbuf.c:423 end trace frame: 0xffff800014adbdd0, count: 0 ddb> trace m_free(6000100) at m_free+0x2a sys/kern/uipc_mbuf.c:423 mq_purge(ffff8000042cdd00) at mq_purge+0x6d m_freem sys/kern/uipc_mbuf.c:525 [inline] mq_purge(ffff8000042cdd00) at mq_purge+0x6d ml_purge sys/kern/uipc_mbuf.c:1591 [inline] mq_purge(ffff8000042cdd00) at mq_purge+0x6d sys/kern/uipc_mbuf.c:1695 switchclose(ffff800014a1ce58,ffff800014adbe48,ffffffff815638d7,ffff800014adbdf0) at switchclose+0x77 sys/net/switchctl.c:323 spec_close(ffffffff81e2a3a0) at spec_close+0x271 sys/kern/spec_vnops.c:553 VOP_CLOSE(ffffff003c2dc650,ffff800014a1ce58,ffffff003f7c7b40,3) at VOP_CLOSE+0x5f sys/kern/vfs_vops.c:174 vn_closefile(ffff800014a1ce58,ffffff0038768000) at vn_closefile+0xfc vn_close sys/kern/vfs_vnops.c:289 [inline] vn_closefile(ffff800014a1ce58,ffffff0038768000) at vn_closefile+0xfc sys/kern/vfs_vnops.c:575 fdrop(ffffff0038768000,ffff800014a1ce58) at fdrop+0xa4 sys/kern/kern_descrip.c:1260 closef(ffff800014a1ce58,ffffff003f7c64f8) at closef+0xd5 sys/kern/kern_descrip.c:1244 fdfree(ffff8000149fa000) at fdfree+0x98 sys/kern/kern_descrip.c:1176 exit1(ffff800014adc110,ffff800014a1ce58,ffff8000149fa000) at exit1+0x22f sys/kern/kern_exit.c:194 sys_exit(ffffffff813e2103,ffff800014adc030,ffff800014adc110) at sys_exit+0x13 sys/kern/kern_exit.c:94 syscall(0) at syscall+0x3e4 Xsyscall(6,1,0,1,0,7f7ffffceba0) at Xsyscall+0x128 end of kernel end trace frame: 0x7f7ffffceb50, count: -13 ddb> show registers rdi 0x7 rsi 0xf0 rbp 0xffff800014adbda0 rbx 0xffffffff81563860 switchclose rdx 0xffff800014adbcb0 rcx 0xffffffff81e42550 mbstat_boot_boot_cpumem rax 0 r8 0 r9 0 r10 0 r11 0xffffffff817ad660 pool_lock_mtx_leave r12 0xffffff0036ac4000 r13 0x236161bc r14 0x6000100 __kernel_end_phys+0x4000100 r15 0x6000100 __kernel_end_phys+0x4000100 rip 0xffffffff812ff9ea m_free+0x2a cs 0x8 rflags 0x10282 __ALIGN_SIZE+0xf282 rsp 0xffff800014adbd80 ss 0x10 m_free+0x2a: movswq 0x1c(%r14),%rdx ddb> show proc PROC (syz-executor1) pid=181119 stat=onproc flags process=1008 proc=2000 pri=50, usrpri=82, nice=20 forw=0xffffffffffffffff, list=0xffff800014a1d560,0xffff800014a1d7c8 process=0xffff8000149fa000 user=0xffff800014ad7000, vmspace=0xffffff002b740530 estcpu=32, cpticks=2, pctcpu=0.2 user=0, sys=1, intr=0 ddb> ps PID TID PPID UID S FLAGS WAIT COMMAND 71977 74862 68471 0 3 0x80 nanosleep syz-executor0 71977 61252 68471 0 3 0x4000080 ttyin syz-executor0 71977 488599 68471 0 3 0x4000080 lockf syz-executor0 71977 241758 68471 0 3 0x4000080 lockf syz-executor0 18802 505308 1 0 3 0x100083 ttyin getty 58323 450479 0 0 3 0x14200 bored sosplice 31582 478688 82041 0 3 0x82 nanosleep syz-executor1 68471 470975 82041 0 3 0x82 nanosleep syz-executor0 82041 309999 42736 0 3 0x82 thrsleep syz-fuzzer 82041 371688 42736 0 3 0x4000082 thrsleep syz-fuzzer 82041 332446 42736 0 3 0x4000082 thrsleep syz-fuzzer 82041 205035 42736 0 3 0x4000082 kqread syz-fuzzer 82041 522479 42736 0 3 0x4000082 thrsleep syz-fuzzer 82041 143349 42736 0 3 0x4000082 thrsleep syz-fuzzer 82041 519168 42736 0 3 0x4000082 thrsleep syz-fuzzer 42736 409511 8263 0 3 0x10008a pause ksh 8263 515614 30024 0 3 0x92 select sshd 30024 447997 1 0 3 0x80 select sshd 7842 9547 99308 73 2 0x100090 syslogd 99308 17591 1 0 3 0x100082 netio syslogd 65986 61270 1 77 3 0x100090 poll dhclient 33707 413933 1 0 3 0x80 poll dhclient 57805 57101 0 0 2 0x14200 zerothread 15041 2891 0 0 3 0x14200 aiodoned aiodoned 49637 193306 0 0 3 0x14200 syncer update 23468 398441 0 0 3 0x14200 cleaner cleaner 7954 377876 0 0 3 0x14200 reaper reaper 5262 337942 0 0 3 0x14200 pgdaemon pagedaemon 40228 403600 0 0 3 0x14200 bored crynlk 63188 443575 0 0 3 0x14200 bored crypto 52570 391822 0 0 3 0x40014200 acpi0 acpi0 12733 12558 0 0 3 0x14200 bored softnet 2078 229817 0 0 3 0x14200 bored systqmp 93879 214078 0 0 3 0x14200 bored systq 34426 215165 0 0 3 0x40014200 bored softclock 23806 464225 0 0 3 0x40014200 idle0 1 511184 0 0 3 0x82 wait init 0 0 -1 0 3 0x10200 scheduler swapper