uvm_fault(0xfffffd807f00a730, 0xa0a293580, 0, 1) -> e kernel: page fault trap, code=0 Stopped at in6_purgeaddr+0x135: movq 0x8(%r12),%r13 ddb{1}> ddb{1}> set $lines = 0 ddb{1}> set $maxwidth = 0 ddb{1}> show panic kernel page fault uvm_fault(0xfffffd807f00a730, 0xa0a293580, 0, 1) -> e in6_purgeaddr(ffff800000af4600) at in6_purgeaddr+0x135 sys/netinet6/in6.c:914 end trace frame: 0xffff800023bd95e0, count: 0 ddb{1}> trace in6_purgeaddr(ffff800000af4600) at in6_purgeaddr+0x135 sys/netinet6/in6.c:914 in6_ifdetach(ffff800000b10000) at in6_ifdetach+0x74 sys/netinet6/in6_ifattach.c:422 if_detach(ffff800000b10000) at if_detach+0x155 sys/net/if.c:1110 tun_clone_destroy(ffff800000b10000) at tun_clone_destroy+0x1c7 sys/net/if_tun.c:278 spec_close(ffff800023bd9710) at spec_close+0x311 sys/kern/spec_vnops.c:555 VOP_CLOSE(fffffd80718595b8,7,fffffd807f7c68a0,ffff800020ab0ee8) at VOP_CLOSE+0xc0 sys/kern/vfs_vops.c:175 vn_closefile(fffffd8064d80e58,ffff800020ab0ee8) at vn_closefile+0xd8 vn_close sys/kern/vfs_vnops.c:301 [inline] vn_closefile(fffffd8064d80e58,ffff800020ab0ee8) at vn_closefile+0xd8 sys/kern/vfs_vnops.c:613 fdrop(fffffd8064d80e58,ffff800020ab0ee8) at fdrop+0xc2 sys/kern/kern_descrip.c:1273 closef(fffffd8064d80e58,ffff800020ab0ee8) at closef+0x11d sys/kern/kern_descrip.c:1257 fdfree(ffff800020ab0ee8) at fdfree+0x101 sys/kern/kern_descrip.c:1189 exit1(ffff800020ab0ee8,19,1) at exit1+0x32f sys/kern/kern_exit.c:196 postsig(ffff800020ab0ee8,19) at postsig+0x4e3 sigexit sys/kern/kern_sig.c:1499 [inline] postsig(ffff800020ab0ee8,19) at postsig+0x4e3 sys/kern/kern_sig.c:1431 userret(ffff800020ab0ee8) at userret+0x199 sys/kern/kern_sig.c:1889 Xsyscall(6,0,7f7ffffe1710,89,797622c6b80,7f7ffffe1bd0) at Xsyscall+0x156 end of kernel end trace frame: 0x7f7ffffe1bc0, count: -14 ddb{1}> show registers rdi 0 rsi 0 rbp 0xffff800023bd9570 rbx 0 rdx 0x83 rcx 0x84 rax 0 r8 0xffffffff819dccf4 rt_ifa_dellocal+0x44 r9 0x1 r10 0x18 r11 0x8efd6c7d12996ede r12 0xa0a293578 r13 0 r14 0xffff800000af4600 r15 0xffff800000b10000 rip 0xffffffff8142a7b5 in6_purgeaddr+0x135 cs 0x8 rflags 0x10206 __ALIGN_SIZE+0xf206 rsp 0xffff800023bd9500 ss 0x10 in6_purgeaddr+0x135: movq 0x8(%r12),%r13 ddb{1}> show proc PROC (syz-executor.1) pid=412917 stat=onproc flags process=a proc=2000 pri=17, usrpri=75, nice=20 forw=0xffffffffffffffff, list=0xffff800020acf3e0,0xffff800020ab02a0 process=0xffff800020adce00 user=0xffff800023bd4000, vmspace=0xfffffd807f00a730 estcpu=36, cpticks=2, pctcpu=0.3 user=0, sys=2, intr=0 ddb{1}> ps PID TID PPID UID S FLAGS WAIT COMMAND 987 214352 19159 0 3 0x3000 suspend syz-executor.0 987 435453 19159 0 7 0x4081000 syz-executor.0 19159 87062 11993 0 3 0x82 nanosleep syz-executor.0 2007 138871 0 0 3 0x14200 acct acct 51255 6653 1 0 3 0x100083 ttyin getty 78764 357444 0 0 3 0x14200 bored sosplice 11993 444107 66523 0 3 0x82 thrsleep syz-fuzzer 11993 510275 66523 0 3 0x4000082 nanosleep syz-fuzzer 11993 512249 66523 0 3 0x4000082 thrsleep syz-fuzzer 11993 329529 66523 0 3 0x4000082 nanosleep syz-fuzzer 11993 504141 66523 0 3 0x4000082 thrsleep syz-fuzzer 11993 270031 66523 0 3 0x4000082 thrsleep syz-fuzzer 11993 6880 66523 0 3 0x4000082 thrsleep syz-fuzzer 11993 438414 66523 0 3 0x4000082 thrsleep syz-fuzzer 11993 430611 66523 0 2 0x4000082 syz-fuzzer 11993 462554 66523 0 3 0x4000082 thrsleep syz-fuzzer 66523 292659 82812 0 3 0x10008a pause ksh 82812 145377 67364 0 3 0x92 select sshd 67364 454856 1 0 3 0x80 select sshd 43783 107028 38003 74 3 0x100092 bpf pflogd 38003 165949 1 0 3 0x80 netio pflogd 50326 172819 24339 73 3 0x100090 kqread syslogd 24339 108700 1 0 3 0x100082 netio syslogd 2003 345834 1 77 2 0x100090 dhclient 53805 67929 1 0 3 0x80 poll dhclient 4207 405441 0 0 2 0x14200 zerothread 669 444986 0 0 3 0x14200 aiodoned aiodoned 83694 439606 0 0 3 0x14200 syncer update 70424 67624 0 0 3 0x14200 cleaner cleaner 88790 360656 0 0 3 0x14200 reaper reaper 90037 412541 0 0 3 0x14200 pgdaemon pagedaemon 83858 26034 0 0 3 0x14200 bored crynlk 27080 100591 0 0 3 0x14200 bored crypto 24338 374552 0 0 3 0x40014200 acpi0 acpi0 60389 347910 0 0 3 0x40014200 idle1 52383 288615 0 0 2 0x14200 softnet 16784 315738 0 0 2 0x14200 systqmp 15571 90392 0 0 3 0x14200 bored systq 88277 290213 0 0 3 0x40014200 bored softclock 95081 519080 0 0 3 0x40014200 idle0 61280 482608 0 0 3 0x14200 bored smr 1 106928 0 0 3 0x82 wait init 0 0 -1 0 3 0x10200 scheduler swapper ddb{1}> show all locks ddb{1}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim Kern Lim devbuf 9606 7105K 8518K 78643K 30401 0 0 pcb 13 10K 12K 78643K 854 0 0 rtable 136 15K 15K 78643K 2216 0 0 ifaddr 101 22K 23K 78643K 662 0 0 counters 39 33K 33K 78643K 39 0 0 ioctlops 0 0K 4K 78643K 1700 0 0 iov 0 0K 24K 78643K 1444 0 0 mount 1 1K 1K 78643K 1 0 0 vnodes 1214 76K 77K 78643K 7043 0 0 UFS quota 1 32K 32K 78643K 1 0 0 UFS mount 5 36K 36K 78643K 5 0 0 shm 2 1K 9K 78643K 57 0 0 VM map 30 15K 15K 78643K 34 0 0 sem 12 0K 0K 78643K 838 0 0 dirhash 12 2K 2K 78643K 12 0 0 ACPI 1808 196K 290K 78643K 12765 0 0 file desc 5 13K 25K 78643K 3502 0 0 sigio 0 0K 0K 78643K 61 0 0 proc 62 75K 95K 78643K 1669 0 0 subproc 23 1K 2K 78643K 374 0 0 NFS srvsock 1 0K 0K 78643K 1 0 0 NFS daemon 1 16K 16K 78643K 1 0 0 ip_moptions 0 0K 1K 78643K 401 0 0 in_multi 27 1K 2K 78643K 522 0 0 ether_multi 1 0K 0K 78643K 56 0 0 mrt 5 0K 0K 78643K 35 0 0 ISOFS mount 1 32K 32K 78643K 1 0 0 MSDOSFS mount 1 16K 16K 78643K 1 0 0 ttys 84 371K 371K 78643K 84 0 0 exec 0 0K 1K 78643K 910 0 0 pagedep 1 8K 8K 78643K 1 0 0 inodedep 1 32K 32K 78643K 1 0 0 newblk 1 0K 0K 78643K 1 0 0 VM swap 7 26K 26K 78643K 7 0 0 UVM amap 195 213K 229K 78643K 14242 0 0 UVM aobj 130 4K 4K 78643K 140 0 0 memdesc 1 4K 4K 78643K 1 0 0 crypto data 1 1K 1K 78643K 1 0 0 ip6_options 0 0K 1K 78643K 787 0 0 NDP 23 0K 1K 78643K 212 0 0 temp 250 3561K 4202K 78643K 118121 0 0 kqueue 0 0K 0K 78643K 52 0 0 SYN cache 2 16K 16K 78643K 2 0 0 ddb{1}> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle arp 64 55 0 51 1 0 1 1 0 8 0 plcache 128 20 0 0 1 0 1 1 0 8 0 rtpcb 80 311 0 309 1 0 1 1 0 8 0 rtentry 112 408 0 358 2 0 2 2 0 8 0 unpcb 120 5938 0 5924 8 7 1 2 0 8 0 syncache 264 26 0 26 12 12 0 1 0 8 0 tcpqe 32 39 0 39 5 5 0 1 0 8 0 tcpcb 544 1663 0 1659 11 10 1 2 0 8 0 inpcb 280 6380 0 6371 36 34 2 13 0 8 1 rttmr 72 7 0 7 6 6 0 1 0 8 0 nd6 48 64 0 60 4 3 1 1 0 8 0 pkpcb 40 12 0 12 4 4 0 1 0 8 0 ppxss 1128 91 0 91 23 22 1 1 0 8 1 pffrag 232 64 0 64 22 21 1 1 0 482 1 pffrnode 88 64 0 64 22 21 1 1 0 8 1 pffrent 40 2274 0 2274 22 21 1 1 0 8 1 pfosfp 40 846 0 423 5 0 5 5 0 8 0 pfosfpen 112 1428 0 714 21 0 21 21 0 8 0 pfstitem 24 335 0 297 1 0 1 1 0 8 0 pfstkey 112 335 0 297 3 1 2 2 0 8 0 pfstate 328 335 0 297 8 2 6 6 0 8 0 pfrule 1360 21 0 16 2 1 1 2 0 8 0 art_heap8 4096 7 0 3 7 3 4 6 0 8 0 art_heap4 256 1842 0 1541 40 20 20 20 0 8 0 art_table 32 1849 0 1544 4 1 3 3 0 8 0 art_node 16 404 0 356 1 0 1 1 0 8 0 sysvmsgpl 40 85 0 48 1 0 1 1 0 8 0 semupl 112 2 0 2 1 1 0 1 0 8 0 semapl 112 836 0 826 1 0 1 1 0 8 0 shmpl 112 138 0 10 4 0 4 4 0 8 0 dirhash 1024 17 0 0 3 0 3 3 0 8 0 dino1pl 128 6953 0 5545 46 0 46 46 0 8 0 ffsino 272 6953 0 5545 95 0 95 95 0 8 0 nchpl 144 12951 0 12468 61 42 19 61 0 8 0 uvmvnodes 72 5926 0 0 108 0 108 108 0 8 0 vnodes 208 5926 0 0 312 0 312 312 0 8 0 namei 1024 46802 0 46802 5 4 1 1 0 8 1 percpumem 16 30 0 0 1 0 1 1 0 8 0 vcpupl 1984 28 0 0 4 0 4 4 0 8 0 vmpool 552 32 0 4 4 1 3 3 0 8 1 scsiplug 64 2 0 2 1 1 0 1 0 8 0 scxspl 192 39930 0 39930 28 27 1 4 0 8 1 plimitpl 152 299 0 291 1 0 1 1 0 8 0 sigapl 432 3641 0 3626 3 1 2 3 0 8 0 futexpl 56 95703 0 95703 5 4 1 1 0 8 1 knotepl 112 1349 0 1330 5 4 1 2 0 8 0 kqueuepl 104 1896 0 1894 2 1 1 2 0 8 0 pipepl 112 2350 0 2332 7 6 1 2 0 8 0 fdescpl 488 3642 0 3626 3 0 3 3 0 8 0 filepl 152 39032 0 38939 41 36 5 14 0 8 0 lockfpl 104 1273 0 1272 1 0 1 1 0 8 0 lockfspl 48 458 0 457 1 0 1 1 0 8 0 sessionpl 112 39 0 28 1 0 1 1 0 8 0 pgrppl 48 222 0 211 1 0 1 1 0 8 0 ucredpl 96 3631 0 3622 1 0 1 1 0 8 0 zombiepl 144 3628 0 3626 2 1 1 1 0 8 0 processpl 896 3659 0 3626 4 0 4 4 0 8 0 procpl 632 12297 0 12254 6 1 5 6 0 8 0 srpgc 64 31 0 29 11 10 1 1 0 8 0 sosppl 128 176 0 176 17 16 1 1 0 8 1 sockpl 384 12724 0 12699 61 56 5 22 0 8 1 mcl64k 65536 449 0 0 45 17 28 35 0 8 1 mcl16k 16384 20 0 0 3 1 2 3 0 8 0 mcl12k 12288 17 0 0 2 0 2 2 0 8 0 mcl9k 9216 20 0 0 2 0 2 2 0 8 0 mcl8k 8192 18 0 0 3 1 2 3 0 8 0 mcl4k 4096 25 0 0 3 0 3 3 0 8 0 mcl2k2 2112 9 0 0 1 0 1 1 0 8 0 mcl2k 2048 201 0 0 22 4 18 22 0 8 0 mtagpl 80 98 0 0 2 0 2 2 0 8 0 mbufpl 256 932 0 0 35 0 35 35 0 8 0 bufpl 256 17013 0 9955 442 0 442 442 0 8 0 anonpl 16 481978 0 461603 190 99 91 100 0 124 1 amapchunkpl 152 28831 0 28666 83 71 12 21 0 158 3 amappl16 192 21358 0 20199 169 108 61 71 0 8 0 amappl15 184 589 0 589 2 2 0 1 0 8 0 amappl14 176 622 0 612 1 0 1 1 0 8 0 amappl13 168 293 0 293 3 3 0 1 0 8 0 amappl12 160 964 0 962 2 1 1 1 0 8 0 amappl11 152 113 0 98 1 0 1 1 0 8 0 amappl10 144 417 0 412 1 0 1 1 0 8 0 amappl9 136 1285 0 1279 1 0 1 1 0 8 0 amappl8 128 897 0 833 3 0 3 3 0 8 0 amappl7 120 500 0 491 1 0 1 1 0 8 0 amappl6 112 95 0 79 1 0 1 1 0 8 0 amappl5 104 1348 0 1335 1 0 1 1 0 8 0 amappl4 96 3625 0 3592 1 0 1 1 0 8 0 amappl3 88 1349 0 1342 1 0 1 1 0 8 0 amappl2 80 27602 0 27530 3 1 2 3 0 8 0 amappl1 72 92232 0 91789 26 16 10 20 0 8 0 amappl 80 12964 0 12899 2 0 2 2 0 84 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 253 0 253 1 1 0 1 0 8 0 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 17 0 17 1 1 0 1 0 8 0 aobjpl 64 139 0 10 3 0 3 3 0 8 0 uaddrrnd 24 3674 0 3626 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 3674 0 3626 1 0 1 1 0 8 0 vmmpekpl 168 32139 0 32091 4 1 3 3 0 8 0 vmmpepl 168 473733 0 471334 405 264 141 160 0 357 27 vmsppl 368 3641 0 3626 2 0 2 2 0 8 0 pdppl 4096 7355 0 7288 12 3 9 9 0 8 0 pvpl 32 1324452 0 1301318 430 212 218 229 0 265 23 pmappl 232 3673 0 3630 4 1 3 3 0 8 0 extentpl 40 41 0 26 1 0 1 1 0 8 0 phpool 112 732 0 66 20 0 20 20 0 8 0