kernel: protection fault trap, code=0 Stopped at mrouter6_rtwalk_delete+0x2b: movl 0x5c(%r15),%r12d ddb> ddb> set $lines = 0 ddb> set $maxwidth = 0 ddb> show panic the kernel did not panic ddb> trace mrouter6_rtwalk_delete(86659161848b5d3c,0,0) at mrouter6_rtwalk_delete+0x2b sys/netinet6/ip6_mroute.c:500 rtable_walk_helper(fffffd8036db8ad0,ffff800016a21db8) at rtable_walk_helper+0x58 sys/net/rtable.c:682 art_table_walk(ffff800000075780,fffffd8036db7000,ffffffff8142a0b0,ffff800016a21db8) at art_table_walk+0x226 art_walk_apply sys/net/art.c:676 [inline] art_table_walk(ffff800000075780,fffffd8036db7000,ffffffff8142a0b0,ffff800016a21db8) at art_table_walk+0x226 sys/net/art.c:648 art_table_walk(ffff800000075780,fffffd8036db7040,ffffffff8142a0b0,ffff800016a21db8) at art_table_walk+0x2a6 sys/net/art.c:657 art_table_walk(ffff800000075780,fffffd8036db7080,ffffffff8142a0b0,ffff800016a21db8) at art_table_walk+0x2a6 sys/net/art.c:657 art_table_walk(ffff800000075780,fffffd8036db70c0,ffffffff8142a0b0,ffff800016a21db8) at art_table_walk+0x2a6 sys/net/art.c:657 art_table_walk(ffff800000075780,fffffd8036db70e0,ffffffff8142a0b0,ffff800016a21db8) at art_table_walk+0x2a6 sys/net/art.c:657 art_table_walk(ffff800000075780,fffffd8036db7100,ffffffff8142a0b0,ffff800016a21db8) at art_table_walk+0x2a6 sys/net/art.c:657 art_table_walk(ffff800000075780,fffffd8036db7120,ffffffff8142a0b0,ffff800016a21db8) at art_table_walk+0x2a6 sys/net/art.c:657 art_table_walk(ffff800000075780,fffffd8036db7140,ffffffff8142a0b0,ffff800016a21db8) at art_table_walk+0x2a6 sys/net/art.c:657 art_table_walk(ffff800000075780,fffffd8036db7160,ffffffff8142a0b0,ffff800016a21db8) at art_table_walk+0x2a6 sys/net/art.c:657 art_table_walk(ffff800000075780,fffffd8036db7180,ffffffff8142a0b0,ffff800016a21db8) at art_table_walk+0x2a6 sys/net/art.c:657 art_table_walk(ffff800000075780,fffffd8036db71a0,ffffffff8142a0b0,ffff800016a21db8) at art_table_walk+0x2a6 sys/net/art.c:657 art_table_walk(ffff800000075780,fffffd8036db71c0,ffffffff8142a0b0,ffff800016a21db8) at art_table_walk+0x2a6 sys/net/art.c:657 art_table_walk(ffff800000075780,fffffd8036db71e0,ffffffff8142a0b0,ffff800016a21db8) at art_table_walk+0x2a6 sys/net/art.c:657 art_table_walk(ffff800000075780,fffffd8036db7200,ffffffff8142a0b0,ffff800016a21db8) at art_table_walk+0x2a6 sys/net/art.c:657 art_table_walk(ffff800000075780,fffffd8036db7240,ffffffff8142a0b0,ffff800016a21db8) at art_table_walk+0x2a6 sys/net/art.c:657 art_table_walk(ffff800000075780,fffffd8036db7260,ffffffff8142a0b0,ffff800016a21db8) at art_table_walk+0x2a6 sys/net/art.c:657 art_table_walk(ffff800000075780,fffffd8036db7280,ffffffff8142a0b0,ffff800016a21db8) at art_table_walk+0x2a6 sys/net/art.c:657 art_table_walk(ffff800000075780,fffffd8036db72a0,ffffffff8142a0b0,ffff800016a21db8) at art_table_walk+0x2a6 sys/net/art.c:657 art_table_walk(ffff800000075780,fffffd8036db7300,ffffffff8142a0b0,ffff800016a21db8) at art_table_walk+0x2a6 sys/net/art.c:657 art_table_walk(ffff800000075780,fffffd8036db7380,ffffffff8142a0b0,ffff800016a21db8) at art_table_walk+0x2a6 sys/net/art.c:657 art_table_walk(ffff800000075780,fffffd8036db73c0,ffffffff8142a0b0,ffff800016a21db8) at art_table_walk+0x2a6 sys/net/art.c:657 art_table_walk(ffff800000075780,fffffd8036db7400,ffffffff8142a0b0,ffff800016a21db8) at art_table_walk+0x2a6 sys/net/art.c:657 art_table_walk(ffff800000075780,fffffd8036db7420,ffffffff8142a0b0,ffff800016a21db8) at art_table_walk+0x2a6 sys/net/art.c:657 art_table_walk(ffff800000075780,fffffd8036db7460,ffffffff8142a0b0,ffff800016a21db8) at art_table_walk+0x2a6 sys/net/art.c:657 art_table_walk(ffff800000075780,fffffd8036db74a0,ffffffff8142a0b0,ffff800016a21db8) at art_table_walk+0x2a6 sys/net/art.c:657 art_table_walk(ffff800000075780,fffffd8036db74c0,ffffffff8142a0b0,ffff800016a21db8) at art_table_walk+0x2a6 sys/net/art.c:657 art_table_walk(ffff800000075780,fffffd8036db74e0,ffffffff8142a0b0,ffff800016a21db8) at art_table_walk+0x2a6 sys/net/art.c:657 art_table_walk(ffff800000075780,fffffd8036db7520,ffffffff8142a0b0,ffff800016a21db8) at art_table_walk+0x2a6 sys/net/art.c:657 art_table_walk(ffff800000075780,fffffd8036db7560,ffffffff8142a0b0,ffff800016a21db8) at art_table_walk+0x2a6 sys/net/art.c:657 art_table_walk(ffff800000075780,fffffd8036db75a0,ffffffff8142a0b0,ffff800016a21db8) at art_table_walk+0x2a6 sys/net/art.c:657 art_table_walk(ffff800000075780,fffffd8036db75c0,ffffffff8142a0b0,ffff800016a21db8) at art_table_walk+0x2a6 sys/net/art.c:657 art_table_walk(ffff800000075780,fffffd8036db7f00,ffffffff8142a0b0,ffff800016a21db8) at art_table_walk+0x2a6 sys/net/art.c:657 art_walk(ffff800000075780,ffffffff8142a0b0,ffff800016a21db8) at art_walk+0xcf sys/net/art.c:595 rtable_walk(0,18,ffffffff8120dda0,0) at rtable_walk+0xc7 sys/net/rtable.c:706 ip6_mrouter_done(fffffd8037009a80) at ip6_mrouter_done+0xb8 sys/netinet6/ip6_mroute.c:529 rip6_detach(fffffd8037009a80) at rip6_detach+0x56 sys/netinet6/raw_ip6.c:757 soclose(fffffd8037009a80,0) at soclose+0xb2 sys/kern/uipc_socket.c:292 soo_close(fffffd802fb821f0,ffff80001491fc48) at soo_close+0x40 fdrop(fffffd802fb821f0,ffff80001491fc48) at fdrop+0xc9 sys/kern/kern_descrip.c:1260 closef(fffffd802fb821f0,ffff80001491fc48) at closef+0x118 sys/kern/kern_descrip.c:1244 fdfree(ffff80001491fc48) at fdfree+0xf7 sys/kern/kern_descrip.c:1176 exit1(ffff80001491fc48,0,1) at exit1+0x32f sys/kern/kern_exit.c:196 sys_exit(ffff80001491fc48,ffff800016a22230,ffff800016a222a0) at sys_exit+0x17 sys/kern/kern_exit.c:94 syscall(ffff800016a22300) at syscall+0x508 Xsyscall(6,1,0,1,0,7f7ffffe1ec4) at Xsyscall+0x128 end of kernel end trace frame: 0x7f7ffffe1e90, count: -47 ddb> show registers rdi 0x86659161848b5d3c rsi 0 rbp 0xffff800016a20af0 rbx 0xffff800000075788 rdx 0 rcx 0 rax 0x204 r8 0 r9 0x5 r10 0 r11 0x7681da9aba4883d8 r12 0 r13 0xfffffd8036db7000 r14 0 r15 0x86659161848b5d3c rip 0xffffffff8120ddcb mrouter6_rtwalk_delete+0x2b cs 0x8 rflags 0x10246 __ALIGN_SIZE+0xf246 rsp 0xffff800016a20ab0 ss 0x10 mrouter6_rtwalk_delete+0x2b: movl 0x5c(%r15),%r12d ddb> show proc PROC (syz-executor.1) pid=436019 stat=onproc flags process=1008 proc=2000 pri=50, usrpri=86, nice=20 forw=0xffffffffffffffff, list=0xffff800014920128,0xffffffff822a6498 process=0xffff800014956360 user=0xffff800016a1d000, vmspace=0xfffffd803f014770 estcpu=36, cpticks=1, pctcpu=0.0 user=0, sys=0, intr=0 ddb> ps PID TID PPID UID S FLAGS WAIT COMMAND 71094 123323 84331 0 3 0x82 nanosleep syz-executor.1 74401 139937 84331 0 3 0x82 nanosleep syz-executor.0 73846 97483 1 0 3 0x100083 ttyin getty 41936 296845 0 0 3 0x14200 bored sosplice 84331 417466 75450 0 3 0x82 thrsleep syz-fuzzer 84331 414295 75450 0 3 0x4000082 thrsleep syz-fuzzer 84331 425281 75450 0 3 0x4000082 thrsleep syz-fuzzer 84331 99129 75450 0 3 0x4000082 kqread syz-fuzzer 84331 394784 75450 0 3 0x4000082 thrsleep syz-fuzzer 84331 181629 75450 0 3 0x4000082 thrsleep syz-fuzzer 84331 324296 75450 0 3 0x4000082 thrsleep syz-fuzzer 75450 436217 67856 0 3 0x10008a pause ksh 67856 279827 82212 0 3 0x92 select sshd 82212 360648 1 0 3 0x80 select sshd 57496 499266 85661 73 3 0x100090 kqread syslogd 85661 362173 1 0 3 0x100082 netio syslogd 42117 254757 1 77 3 0x100090 poll dhclient 26855 504038 1 0 3 0x80 poll dhclient 59978 282860 0 0 2 0x14200 zerothread 93300 203249 0 0 3 0x14200 aiodoned aiodoned 19127 367374 0 0 3 0x14200 syncer update 51067 165927 0 0 3 0x14200 cleaner cleaner 27303 107721 0 0 3 0x14200 reaper reaper 9925 291634 0 0 3 0x14200 pgdaemon pagedaemon 2423 352199 0 0 3 0x14200 bored crynlk 47274 116666 0 0 3 0x14200 bored crypto 2851 233915 0 0 3 0x40014200 acpi0 acpi0 50342 254152 0 0 3 0x14200 bored softnet 97623 451374 0 0 2 0x14200 systqmp 42958 520154 0 0 3 0x14200 bored systq 66907 511481 0 0 3 0x40014200 bored softclock 78515 490508 0 0 3 0x40014200 idle0 75437 226083 0 0 3 0x14200 bored smr 1 501257 0 0 3 0x82 wait init 0 0 -1 0 3 0x10200 scheduler swapper ddb> show all locks No such command ddb> show malloc Type InUse MemUse HighUse Limit Requests Type Lim Kern Lim devbuf 9575 6385K 14805K 78643K 60602 0 0 pcb 25 9K 11K 78643K 8670 0 0 rtable 220 9K 9K 78643K 3935 0 0 ifaddr 74 22K 26K 78643K 1734 0 0 counters 19 16K 16K 78643K 19 0 0 ioctlops 0 0K 2K 78643K 969 0 0 iov 0 0K 40K 78643K 2281 0 0 mount 1 1K 1K 78643K 1 0 0 vnodes 1198 75K 76K 78643K 20186 0 0 UFS quota 1 32K 32K 78643K 1 0 0 UFS mount 5 36K 36K 78643K 5 0 0 shm 2 1K 5K 78643K 252 0 0 VM map 2 0K 0K 78643K 2 0 0 sem 12 0K 0K 78643K 1519 0 0 dirhash 12 2K 2K 78643K 12 0 0 ACPI 1793 195K 288K 78643K 12537 0 0 file desc 5 13K 25K 78643K 19842 0 0 sigio 0 0K 0K 78643K 322 0 0 proc 43 30K 54K 78643K 2710 0 0 subproc 32 2K 2K 78643K 322 0 0 NFS srvsock 1 0K 0K 78643K 1 0 0 NFS daemon 1 16K 16K 78643K 1 0 0 ip_moptions 0 0K 0K 78643K 1940 0 0 in_multi 33 2K 2K 78643K 831 0 0 ether_multi 1 0K 0K 78643K 82 0 0 mrt 1 0K 0K 78643K 27 0 0 ISOFS mount 1 32K 32K 78643K 1 0 0 MSDOSFS mount 1 16K 16K 78643K 1 0 0 ttys 120 530K 530K 78643K 120 0 0 exec 0 0K 1K 78643K 1707 0 0 pfkey data 0 0K 4K 78643K 6 0 0 pagedep 1 8K 8K 78643K 1 0 0 inodedep 1 32K 32K 78643K 1 0 0 newblk 1 0K 0K 78643K 1 0 0 VM swap 7 26K 26K 78643K 7 0 0 UVM amap 97 21K 40K 78643K 47253 0 0 UVM aobj 130 4K 5K 78643K 151 0 0 memdesc 1 4K 4K 78643K 1 0 0 crypto data 1 1K 1K 78643K 1 0 0 ip6_options 0 0K 1K 78643K 721 0 0 NDP 17 0K 1K 78643K 483 0 0 temp 205 2720K 3360K 78643K 65062 0 0 kqueue 0 0K 0K 78643K 134 0 0 SYN cache 2 16K 16K 78643K 2 0 0 ddb> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle arp 64 38 0 32 1 0 1 1 0 8 0 inpcbpl 280 7671 0 7662 2 1 1 2 0 8 0 rtentry 112 297 0 211 3 0 3 3 0 8 0 syncache 264 4 0 4 1 1 0 1 0 8 0 sackhl 24 2 0 2 1 1 0 1 0 8 0 tcpqe 32 50 0 50 1 1 0 1 0 8 0 tcpcb 544 2844 0 2838 1 0 1 1 0 8 0 ipq 40 4 0 4 2 2 0 1 0 8 0 ipqe 40 8 0 8 2 2 0 1 0 8 0 rttmr 72 1 0 1 1 0 1 1 0 8 1 nd6 48 54 0 48 1 0 1 1 0 8 0 swfcl 56 1 0 0 1 0 1 1 0 8 0 ppxss 1128 351 0 351 58 57 1 1 0 8 1 art_heap8 4096 1 0 0 1 0 1 1 0 8 0 art_heap4 256 954 0 756 15 2 13 13 0 8 0 art_table 32 955 0 756 2 0 2 2 0 8 0 art_node 16 263 0 222 1 0 1 1 0 8 0 sysvmsgpl 40 40 0 20 1 0 1 1 0 8 0 semapl 112 1515 0 1505 1 0 1 1 0 8 0 shmpl 112 149 0 21 5 1 4 4 0 8 0 dirhash 1024 17 0 0 3 0 3 3 0 8 0 dino1pl 128 33889 0 32218 54 0 54 54 0 8 0 ffsino 240 33889 0 32218 99 0 99 99 0 8 0 nchpl 144 61617 0 60005 61 0 61 61 0 8 0 uvmvnodes 72 6792 0 0 124 0 124 124 0 8 0 vnodes 200 6792 0 0 358 0 358 358 0 8 0 namei 1024 201001 0 201001 5 4 1 1 0 8 1 scsiplug 64 34 0 34 26 25 1 1 0 8 1 scxspl 192 197730 0 197730 84 82 2 6 0 8 2 plimitpl 152 633 0 626 1 0 1 1 0 8 0 sigapl 432 19973 0 19960 2 0 2 2 0 8 0 futexpl 56 315535 0 315535 5 4 1 1 0 8 1 knotepl 112 3574 0 3555 4 3 1 2 0 8 0 kqueuepl 104 4346 0 4344 1 0 1 1 0 8 0 pipepl 112 11660 0 11637 27 26 1 2 0 8 0 fdescpl 424 19974 0 19960 2 0 2 2 0 8 0 filepl 120 121558 0 121458 12 8 4 5 0 8 0 lockfpl 104 6869 0 6869 12 11 1 1 0 8 1 lockfspl 48 2342 0 2342 12 11 1 1 0 8 1 sessionpl 112 41 0 31 1 0 1 1 0 8 0 pgrppl 48 253 0 243 1 0 1 1 0 8 0 ucredpl 96 29307 0 29300 1 0 1 1 0 8 0 zombiepl 144 19961 0 19959 3 2 1 1 0 8 0 processpl 840 19989 0 19959 4 0 4 4 0 8 0 procpl 624 45098 0 45062 4 0 4 4 0 8 0 sosppl 128 235 0 235 64 63 1 1 0 8 1 sockpl 384 15388 0 15369 13 10 3 4 0 8 0 mcl64k 65536 6071 0 6071 484 481 3 33 0 8 3 mcl16k 16384 63 0 63 43 43 0 1 0 8 0 mcl12k 12288 377 0 377 52 51 1 1 0 8 1 mcl9k 9216 298 0 298 51 50 1 1 0 8 1 mcl8k 8192 265 0 265 63 62 1 1 0 8 1 mcl4k 4096 808 0 808 31 30 1 1 0 8 1 mcl2k2 2112 102 0 102 51 50 1 1 0 8 1 mcl2k 2048 81556 0 81513 34 28 6 11 0 8 0 mtagpl 80 19 0 17 6 5 1 1 0 8 0 mbufpl 256 228247 0 228163 207 199 8 23 0 8 0 bufpl 256 54565 0 47773 426 1 425 425 0 8 0 anonpl 16 1702795 0 1692290 515 456 59 69 0 62 10 amapchunkpl 152 82138 0 82035 180 168 12 18 0 158 7 amappl16 192 113437 0 112843 600 560 40 43 0 8 8 amappl15 184 1650 0 1648 2 1 1 1 0 8 0 amappl14 176 1528 0 1523 2 1 1 1 0 8 0 amappl13 168 1211 0 1211 3 3 0 1 0 8 0 amappl12 160 17 0 16 2 1 1 1 0 8 0 amappl11 152 104 0 90 1 0 1 1 0 8 0 amappl10 144 1455 0 1455 14 14 0 1 0 8 0 amappl9 136 8894 0 8890 1 0 1 1 0 8 0 amappl8 128 8461 0 8431 3 1 2 2 0 8 0 amappl7 120 1452 0 1444 1 0 1 1 0 8 0 amappl6 112 80 0 70 1 0 1 1 0 8 0 amappl5 104 372 0 363 1 0 1 1 0 8 0 amappl4 96 20437 0 20410 1 0 1 1 0 8 0 amappl3 88 2877 0 2867 1 0 1 1 0 8 0 amappl2 80 159103 0 159036 4 2 2 3 0 8 0 amappl1 72 352214 0 351802 26 17 9 19 0 8 0 amappl 80 45731 0 45696 1 0 1 1 0 84 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma64 64 259 0 259 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 17 0 17 1 1 0 1 0 8 0 aobjpl 64 150 0 21 3 0 3 3 0 8 0 uaddrrnd 24 19974 0 19960 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 19974 0 19960 1 0 1 1 0 8 0 vmmpekpl 168 120403 0 120376 2 0 2 2 0 8 0 vmmpepl 168 2306724 0 2305092 486 398 88 96 0 357 11 vmsppl 272 19973 0 19960 3 2 1 2 0 8 0 pdppl 4096 39954 0 39920 6 1 5 6 0 8 0 pvpl 32 4831640 0 4818016 1029 838 191 259 0 265 71 pmappl 200 19973 0 19960 1 0 1 1 0 8 0 extentpl 40 41 0 26 1 0 1 1 0 8 0 phpool 112 1427 0 855 23 5 18 18 0 8 0