uvm_fault(0xffffffff82795140, 0xfffffeffffffc00b, 0, 1) -> e kernel: page fault trap, code=0 Stopped at in_delmulti+0x8d: movl 0xc(%r14),%r15d ddb> ddb> set $lines = 0 ddb> set $maxwidth = 0 ddb> show panic kernel page fault uvm_fault(0xffffffff82795140, 0xfffffeffffffc00b, 0, 1) -> e in_delmulti(fffffeffffffbfff) at in_delmulti+0x8d sys/netinet/in.c:914 end trace frame: 0xffff80001e7b2fb0, count: 0 ddb> trace in_delmulti(fffffeffffffbfff) at in_delmulti+0x8d sys/netinet/in.c:914 in_purgeaddr(ffff8000006b5b00) at in_purgeaddr+0x156 sys/netinet/in.c:760 in_ifdetach(ffff800000ac6000) at in_ifdetach+0x74 sys/netinet/in.c:971 if_detach(ffff800000ac6000) at if_detach+0x140 sys/net/if.c:1039 tun_clone_destroy(ffff800000ac6000) at tun_clone_destroy+0x1c7 sys/net/if_tun.c:326 tun_dev_close(5d01,7) at tun_dev_close+0x160 sys/net/if_tun.c:477 spec_close(ffff80001e7b3190) at spec_close+0x311 sys/kern/spec_vnops.c:560 VOP_CLOSE(fffffd80688cda90,7,fffffd806c3bfba0,ffff80001d6a9278) at VOP_CLOSE+0xc0 sys/kern/vfs_vops.c:174 vn_closefile(fffffd8057536e98,ffff80001d6a9278) at vn_closefile+0xd2 vn_close sys/kern/vfs_vnops.c:298 [inline] vn_closefile(fffffd8057536e98,ffff80001d6a9278) at vn_closefile+0xd2 sys/kern/vfs_vnops.c:614 fdrop(fffffd8057536e98,ffff80001d6a9278) at fdrop+0xc2 sys/kern/kern_descrip.c:1279 closef(fffffd8057536e98,ffff80001d6a9278) at closef+0x117 sys/kern/kern_descrip.c:1263 fdfree(ffff80001d6a9278) at fdfree+0x100 sys/kern/kern_descrip.c:1195 exit1(ffff80001d6a9278,0,19,1) at exit1+0x32c sys/kern/kern_exit.c:197 postsig(ffff80001d6a9278,19) at postsig+0x4b2 sigexit sys/kern/kern_sig.c:1483 [inline] postsig(ffff80001d6a9278,19) at postsig+0x4b2 sys/kern/kern_sig.c:1415 userret(ffff80001d6a9278) at userret+0x159 sys/kern/kern_sig.c:1872 syscall(ffff80001e7b3610) at syscall+0x42e mi_syscall_return sys/sys/syscall_mi.h:129 [inline] syscall(ffff80001e7b3610) at syscall+0x42e sys/arch/amd64/amd64/trap.c:592 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7f7ffffd19b0, count: -17 ddb> show registers rdi 0x2 rsi 0 rbp 0xffff80001e7b2f60 rbx 0 rdx 0x3 rcx 0x1 rax 0 r8 0xffffffff818ebc13 rt_ifa_purge+0x153 r9 0x5 r10 0xa113f024718ec2cd r11 0x8474da5c0009ebeb r12 0 r13 0x3 r14 0xfffffeffffffbfff r15 0x1 rip 0xffffffff81e46f2d in_delmulti+0x8d cs 0x8 rflags 0x10246 __ALIGN_SIZE+0xf246 rsp 0xffff80001e7b2f00 ss 0x10 in_delmulti+0x8d: movl 0xc(%r14),%r15d ddb> show proc PROC (syz-executor.1) pid=110808 stat=onproc flags process=a proc=2000 pri=32, usrpri=77, nice=20 forw=0xffffffffffffffff, list=0xffff80001d6aa5f8,0xffff80001d6c2298 process=0xffff80001d6c55d0 user=0xffff80001e7ae000, vmspace=0xfffffd806bc09110 estcpu=36, cpticks=1, pctcpu=0.0 user=0, sys=0, intr=0 ddb> ps PID TID PPID UID S FLAGS WAIT COMMAND 59497 113630 0 0 3 0x14280 nfsidl nfsio 52618 383289 0 0 3 0x14280 nfsidl nfsio 39293 504091 0 0 3 0x14280 nfsidl nfsio 95106 245953 0 0 3 0x14280 nfsidl nfsio 36834 193226 0 0 3 0x14280 nfsidl nfsio 59894 245286 0 0 3 0x14280 nfsidl nfsio 68881 427325 0 0 3 0x14280 nfsidl nfsio 25485 335163 0 0 3 0x14280 nfsidl nfsio 40409 339932 0 0 3 0x14280 nfsidl nfsio 83871 306639 0 0 3 0x14280 nfsidl nfsio 36100 315743 0 0 3 0x14280 nfsidl nfsio 64245 265484 0 0 3 0x14280 nfsidl nfsio 76811 97420 0 0 3 0x14280 nfsidl nfsio 53768 351179 0 0 3 0x14280 nfsidl nfsio 18281 93375 0 0 3 0x14280 nfsidl nfsio 59845 219413 0 0 3 0x14280 nfsidl nfsio 72951 102174 0 0 3 0x14280 nfsidl nfsio 94071 329834 0 0 3 0x14280 nfsidl nfsio 7241 24808 0 0 3 0x14280 nfsidl nfsio 12283 303027 0 0 3 0x14280 nfsidl nfsio 43505 384551 86558 0 3 0x2 biowait syz-executor.0 86558 404026 421 0 3 0x82 thrsleep syz-fuzzer 86558 314467 421 0 3 0x4000082 nanosleep syz-fuzzer 86558 36309 421 0 3 0x4000082 thrsleep syz-fuzzer 86558 217818 421 0 3 0x4000082 thrsleep syz-fuzzer 86558 351596 421 0 3 0x4000082 thrsleep syz-fuzzer 86558 434276 421 0 3 0x4000082 kqread syz-fuzzer 86558 141046 421 0 3 0x4000082 thrsleep syz-fuzzer 86558 382358 421 0 3 0x4000082 thrsleep syz-fuzzer 421 317150 32178 0 3 0x10008a pause ksh 32178 355850 95471 0 3 0x92 select sshd 96577 140920 1 0 3 0x100083 ttyin getty 95471 16328 1 0 3 0x80 select sshd 42976 120265 30553 73 3 0x100090 kqread syslogd 30553 520970 1 0 3 0x100082 netio syslogd 36347 105424 1 77 2 0x100090 dhclient 49478 54782 1 0 3 0x80 poll dhclient 79082 306092 0 0 3 0x14200 bored smr 90369 85783 0 0 2 0x14200 zerothread 66195 398409 0 0 3 0x14200 aiodoned aiodoned 81762 360741 0 0 3 0x14200 syncer update 37421 313821 0 0 3 0x14200 cleaner cleaner 8385 43233 0 0 3 0x14200 reaper reaper 16332 180565 0 0 3 0x14200 pgdaemon pagedaemon 51814 212994 0 0 3 0x14200 bored crynlk 11367 90830 0 0 3 0x14200 bored crypto 517 106835 0 0 3 0x40014200 acpi0 acpi0 77171 432878 0 0 3 0x14200 bored softnet 1739 364298 0 0 2 0x14200 systqmp 97350 327632 0 0 3 0x14200 bored systq 14568 35949 0 0 3 0x40014200 bored softclock 10751 278333 0 0 3 0x40014200 idle0 1 443947 0 0 3 0x82 wait init 0 0 -1 0 3 0x10200 scheduler swapper ddb> show all locks No such command ddb> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 9493 6341K 7105K 78643K 11668 0 pcb 13 8K 8K 78643K 31 0 rtable 98 3K 5K 78643K 262 0 ifaddr 65 12K 13K 78643K 93 0 counters 21 16K 16K 78643K 24 0 ioctlops 0 0K 4K 78643K 47 0 iov 0 0K 16K 78643K 253 0 mount 1 1K 1K 78643K 1 0 vnodes 1222 77K 77K 78643K 1498 0 UFS quota 1 32K 32K 78643K 1 0 UFS mount 5 36K 36K 78643K 5 0 shm 2 1K 5K 78643K 8 0 VM map 2 0K 0K 78643K 2 0 sem 12 0K 0K 78643K 72 0 dirhash 12 2K 2K 78643K 12 0 ACPI 1809 195K 288K 78643K 12938 0 file desc 4 9K 25K 78643K 316 0 sigio 1 0K 0K 78643K 11 0 proc 49 38K 54K 78643K 377 0 subproc 23 1K 2K 78643K 34 0 NFS srvsock 1 0K 0K 78643K 1 0 NFS daemon 1 16K 16K 78643K 1 0 ip_moptions 0 0K 0K 78643K 10 0 in_multi 35 2K 2K 78643K 49 0 ether_multi 1 0K 0K 78643K 2 0 ISOFS mount 1 32K 32K 78643K 1 0 MSDOSFS mount 1 16K 16K 78643K 1 0 ttys 61 281K 281K 78643K 61 0 exec 0 0K 1K 78643K 207 0 pagedep 1 8K 8K 78643K 1 0 inodedep 1 32K 32K 78643K 1 0 newblk 1 0K 0K 78643K 1 0 VM swap 7 26K 26K 78643K 7 0 UVM amap 119 22K 38K 78643K 1584 0 UVM aobj 23 6K 6K 78643K 25 0 memdesc 1 4K 4K 78643K 1 0 crypto data 1 1K 1K 78643K 1 0 ip6_options 0 0K 0K 78643K 13 0 NDP 11 0K 0K 78643K 19 0 temp 99 3855K 3919K 78643K 9292 0 kqueue 3 4K 8K 78643K 9 0 SYN cache 2 16K 16K 78643K 2 0 ddb> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle arp 64 6 0 2 1 0 1 1 0 8 0 rtpcb 80 27 0 25 1 0 1 1 0 8 0 rtentry 112 51 0 12 2 0 2 2 0 8 0 unpcb 120 170 0 161 1 0 1 1 0 8 0 syncache 264 5 0 5 2 2 0 1 0 8 0 tcpqe 32 416 0 416 1 1 0 1 0 8 0 tcpcb 544 70 0 62 2 1 1 2 0 8 0 ipq 40 1 0 1 1 0 1 1 0 8 1 ipqe 40 45 0 45 1 0 1 1 0 8 1 inpcb 296 177 0 170 2 0 2 2 0 8 1 nd6 48 9 0 3 1 0 1 1 0 8 0 pkpcb 40 4 0 4 1 0 1 1 0 8 1 pfrktable 1344 15 0 14 1 0 1 1 0 8 0 pfstkey 112 2 0 2 1 1 0 1 0 8 0 pfstate 328 1 0 1 1 1 0 1 0 8 0 pfrule 1360 10 0 8 1 0 1 1 0 8 0 art_heap8 4096 1 0 0 1 0 1 1 0 8 0 art_heap4 256 256 0 40 14 0 14 14 0 8 0 art_table 32 257 0 40 2 0 2 2 0 8 0 art_node 16 50 0 10 1 0 1 1 0 8 0 sysvmsgpl 40 14 0 8 1 0 1 1 0 8 0 semupl 112 4 0 4 2 2 0 1 0 8 0 semapl 112 68 0 58 1 0 1 1 0 8 0 shmpl 112 22 0 2 1 0 1 1 0 8 0 dirhash 1024 17 0 0 3 0 3 3 0 8 0 dino2pl 256 1824 0 426 88 0 88 88 0 8 0 ffsino 240 1824 0 426 83 0 83 83 0 8 0 nchpl 144 2572 0 979 60 0 60 60 0 8 0 uvmvnodes 72 2094 0 0 39 0 39 39 0 8 0 vnodes 208 2094 0 0 111 0 111 111 0 8 0 namei 1024 6753 0 6753 2 1 1 1 0 8 1 vcpupl 1984 2 0 0 1 0 1 1 0 8 0 vmpool 528 2 0 0 1 0 1 1 0 8 0 pfiaddrpl 120 4 0 4 1 1 0 1 0 8 0 scxspl 192 7396 0 7395 1 0 1 1 0 8 0 plimitpl 152 34 0 27 1 0 1 1 0 8 0 sigapl 424 522 0 475 6 0 6 6 0 8 0 futexpl 56 6011 0 6011 2 1 1 1 0 8 1 knotepl 112 69 0 52 1 0 1 1 0 8 0 kqueuepl 144 38 0 35 1 0 1 1 0 8 0 pipepl 272 116 0 107 3 1 2 2 0 8 1 fdescpl 432 488 0 475 2 0 2 2 0 8 0 filepl 120 2733 0 2649 5 1 4 5 0 8 1 lockfpl 104 63 0 62 1 0 1 1 0 8 0 lockfspl 48 23 0 22 1 0 1 1 0 8 0 sessionpl 112 17 0 7 1 0 1 1 0 8 0 pgrppl 48 21 0 11 1 0 1 1 0 8 0 ucredpl 96 303 0 296 1 0 1 1 0 8 0 zombiepl 144 476 0 475 1 0 1 1 0 8 0 processpl 928 522 0 475 7 0 7 7 0 8 0 procpl 624 880 0 826 5 0 5 5 0 8 0 sockpl 400 378 0 360 6 2 4 4 0 8 1 mcl64k 65536 22 0 22 1 0 1 1 0 8 1 mcl16k 16384 2 0 2 1 0 1 1 0 8 1 mcl12k 12288 7 0 7 1 0 1 1 0 8 1 mcl9k 9216 7 0 7 2 1 1 1 0 8 1 mcl8k 8192 11 0 11 2 1 1 1 0 8 1 mcl4k 4096 25 0 25 3 2 1 1 0 8 1 mcl2k 2048 94698 0 94643 20 12 8 16 0 8 0 mtagpl 96 166 0 64 5 1 4 4 0 8 0 mbufpl 256 151298 0 150984 34 4 30 32 0 8 3 bufpl 280 4030 0 125 279 0 279 279 0 8 0 anonpl 16 69324 0 52201 85 1 84 84 0 107 12 amapchunkpl 152 3015 0 2893 20 6 14 19 0 158 8 amappl16 192 2615 0 1653 62 4 58 59 0 8 8 amappl15 184 9 0 7 1 0 1 1 0 8 0 amappl14 176 25 0 20 1 0 1 1 0 8 0 amappl13 168 170 0 165 1 0 1 1 0 8 0 amappl12 160 153 0 151 1 0 1 1 0 8 0 amappl11 152 44 0 35 1 0 1 1 0 8 0 amappl10 144 12 0 9 1 0 1 1 0 8 0 amappl9 136 510 0 507 1 0 1 1 0 8 0 amappl8 128 469 0 426 2 0 2 2 0 8 0 amappl7 120 106 0 94 1 0 1 1 0 8 0 amappl6 112 25 0 19 1 0 1 1 0 8 0 amappl5 104 286 0 276 1 0 1 1 0 8 0 amappl4 96 567 0 539 1 0 1 1 0 8 0 amappl3 88 256 0 250 1 0 1 1 0 8 0 amappl2 80 3044 0 2989 2 0 2 2 0 8 0 amappl1 72 19796 0 19394 23 14 9 17 0 8 0 amappl 80 1096 0 1059 1 0 1 1 0 84 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 253 0 253 1 1 0 1 0 8 0 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 64 24 0 2 1 0 1 1 0 8 0 uaddrrnd 24 490 0 475 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 490 0 475 1 0 1 1 0 8 0 vmmpekpl 168 7140 0 7108 2 0 2 2 0 8 0 vmmpepl 168 66176 0 64189 133 25 108 118 0 357 13 vmsppl 272 489 0 475 3 1 2 2 0 8 0 pdppl 4096 986 0 952 6 1 5 6 0 8 0 pvpl 32 199716 0 180105 197 0 197 197 0 265 32 pmappl 200 489 0 475 1 0 1 1 0 8 0 extentpl 40 53 0 36 1 0 1 1 0 8 0 phpool 112 280 0 28 8 0 8 8 0 8 0 ddb> machine ddbcpu 0 No such command ddb> trace in_delmulti(fffffeffffffbfff) at in_delmulti+0x8d sys/netinet/in.c:914 in_purgeaddr(ffff8000006b5b00) at in_purgeaddr+0x156 sys/netinet/in.c:760 in_ifdetach(ffff800000ac6000) at in_ifdetach+0x74 sys/netinet/in.c:971 if_detach(ffff800000ac6000) at if_detach+0x140 sys/net/if.c:1039 tun_clone_destroy(ffff800000ac6000) at tun_clone_destroy+0x1c7 sys/net/if_tun.c:326 tun_dev_close(5d01,7) at tun_dev_close+0x160 sys/net/if_tun.c:477 spec_close(ffff80001e7b3190) at spec_close+0x311 sys/kern/spec_vnops.c:560 VOP_CLOSE(fffffd80688cda90,7,fffffd806c3bfba0,ffff80001d6a9278) at VOP_CLOSE+0xc0 sys/kern/vfs_vops.c:174 vn_closefile(fffffd8057536e98,ffff80001d6a9278) at vn_closefile+0xd2 vn_close sys/kern/vfs_vnops.c:298 [inline] vn_closefile(fffffd8057536e98,ffff80001d6a9278) at vn_closefile+0xd2 sys/kern/vfs_vnops.c:614 fdrop(fffffd8057536e98,ffff80001d6a9278) at fdrop+0xc2 sys/kern/kern_descrip.c:1279 closef(fffffd8057536e98,ffff80001d6a9278) at closef+0x117 sys/kern/kern_descrip.c:1263 fdfree(ffff80001d6a9278) at fdfree+0x100 sys/kern/kern_descrip.c:1195 exit1(ffff80001d6a9278,0,19,1) at exit1+0x32c sys/kern/kern_exit.c:197 postsig(ffff80001d6a9278,19) at postsig+0x4b2 sigexit sys/kern/kern_sig.c:1483 [inline] postsig(ffff80001d6a9278,19) at postsig+0x4b2 sys/kern/kern_sig.c:1415 userret(ffff80001d6a9278) at userret+0x159 sys/kern/kern_sig.c:1872 syscall(ffff80001e7b3610) at syscall+0x42e mi_syscall_return sys/sys/syscall_mi.h:129 [inline] syscall(ffff80001e7b3610) at syscall+0x42e sys/arch/amd64/amd64/trap.c:592 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7f7ffffd19b0, count: -17 ddb> machine ddbcpu 1 No such command ddb> trace in_delmulti(fffffeffffffbfff) at in_delmulti+0x8d sys/netinet/in.c:914 in_purgeaddr(ffff8000006b5b00) at in_purgeaddr+0x156 sys/netinet/in.c:760 in_ifdetach(ffff800000ac6000) at in_ifdetach+0x74 sys/netinet/in.c:971 if_detach(ffff800000ac6000) at if_detach+0x140 sys/net/if.c:1039 tun_clone_destroy(ffff800000ac6000) at tun_clone_destroy+0x1c7 sys/net/if_tun.c:326 tun_dev_close(5d01,7) at tun_dev_close+0x160 sys/net/if_tun.c:477 spec_close(ffff80001e7b3190) at spec_close+0x311 sys/kern/spec_vnops.c:560 VOP_CLOSE(fffffd80688cda90,7,fffffd806c3bfba0,ffff80001d6a9278) at VOP_CLOSE+0xc0 sys/kern/vfs_vops.c:174 vn_closefile(fffffd8057536e98,ffff80001d6a9278) at vn_closefile+0xd2 vn_close sys/kern/vfs_vnops.c:298 [inline] vn_closefile(fffffd8057536e98,ffff80001d6a9278) at vn_closefile+0xd2 sys/kern/vfs_vnops.c:614 fdrop(fffffd8057536e98,ffff80001d6a9278) at fdrop+0xc2 sys/kern/kern_descrip.c:1279 closef(fffffd8057536e98,ffff80001d6a9278) at closef+0x117 sys/kern/kern_descrip.c:1263 fdfree(ffff80001d6a9278) at fdfree+0x100 sys/kern/kern_descrip.c:1195 exit1(ffff80001d6a9278,0,19,1) at exit1+0x32c sys/kern/kern_exit.c:197 postsig(ffff80001d6a9278,19) at postsig+0x4b2 sigexit sys/kern/kern_sig.c:1483 [inline] postsig(ffff80001d6a9278,19) at postsig+0x4b2 sys/kern/kern_sig.c:1415 userret(ffff80001d6a9278) at userret+0x159 sys/kern/kern_sig.c:1872 syscall(ffff80001e7b3610) at syscall+0x42e mi_syscall_return sys/sys/syscall_mi.h:129 [inline] syscall(ffff80001e7b3610) at syscall+0x42e sys/arch/amd64/amd64/trap.c:592 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7f7ffffd19b0, count: -17