uvm_fault(0xfffffd803f011ee0, 0x8453e24a008, 0, 1) -> e kernel: page fault trap, code=0 Stopped at in6_purgeaddr+0x135: movq 0x8(%r12),%r13 ddb> ddb> set $lines = 0 ddb> set $maxwidth = 0 ddb> show panic kernel page fault uvm_fault(0xfffffd803f011ee0, 0x8453e24a008, 0, 1) -> e in6_purgeaddr(ffff800000b19f00) at in6_purgeaddr+0x135 sys/netinet6/in6.c:914 end trace frame: 0xffff80001699f270, count: 0 ddb> trace in6_purgeaddr(ffff800000b19f00) at in6_purgeaddr+0x135 sys/netinet6/in6.c:914 in6_ifdetach(ffff800000b2b000) at in6_ifdetach+0x74 sys/netinet6/in6_ifattach.c:422 if_detach(ffff800000b2b000) at if_detach+0x148 sys/net/if.c:1157 tun_clone_destroy(ffff800000b2b000) at tun_clone_destroy+0x1c0 sys/net/if_tun.c:278 ifioctl(fffffd803b8d9058,80206979,ffff80001699f680,ffff800014939160) at ifioctl+0x3d7 sys/net/if.c:1941 fifo_ioctl(ffff80001699f4c8) at fifo_ioctl+0x101 sys/miscfs/fifofs/fifo_vnops.c:282 VOP_IOCTL(fffffd8026f279d8,80206979,ffff80001699f680,82,fffffd803f7c6a80,ffff800014939160) at VOP_IOCTL+0x88 sys/kern/vfs_vops.c:291 vn_ioctl(fffffd802c1c4350,80206979,ffff80001699f680,ffff800014939160) at vn_ioctl+0xb7 sys/kern/vfs_vnops.c:536 sys_ioctl(ffff800014939160,ffff80001699f798,ffff80001699f7e0) at sys_ioctl+0x5b9 syscall(ffff80001699f860) at syscall+0x507 sys/arch/amd64/amd64/trap.c:555 Xsyscall(6,0,ffffffffffffff36,0,3,17dc396f010) at Xsyscall+0x128 end of kernel end trace frame: 0x180314cf9e0, count: -11 ddb> show registers rdi 0xffffffff820e5371 rtfree+0x51 rsi 0x25bcd acpi_pdirpa+0x11a35 rbp 0xffff80001699f200 rbx 0 rdx 0x25bce acpi_pdirpa+0x11a36 rcx 0xffff800015b69000 rax 0x3 r8 0x1 r9 0x1 r10 0xe1f9cfcd85266b0e r11 0xeee5944e1f882d81 r12 0x8453e24a000 r13 0 r14 0xffff800000b19f00 r15 0xffff800000b2b000 rip 0xffffffff8118f7c5 in6_purgeaddr+0x135 cs 0x8 rflags 0x10206 __ALIGN_SIZE+0xf206 rsp 0xffff80001699f190 ss 0x10 in6_purgeaddr+0x135: movq 0x8(%r12),%r13 ddb> show proc PROC (syz-executor.1) pid=182249 stat=onproc flags process=0 proc=4000000 pri=82, usrpri=82, nice=20 forw=0xffffffffffffffff, list=0xffff8000149393d8,0xffff800014938790 process=0xffff8000148a26d8 user=0xffff80001699a000, vmspace=0xfffffd803f011ee0 estcpu=36, cpticks=1, pctcpu=0.0 user=0, sys=1, intr=0 ddb> ps PID TID PPID UID S FLAGS WAIT COMMAND 88414 225136 38105 0 2 0 syz-executor.1 *88414 182249 38105 0 7 0x4000000 syz-executor.1 88414 17162 38105 0 3 0x4000080 fsleep syz-executor.1 80165 405441 17447 0 3 0x2 biowait syz-executor.0 38105 120591 17447 0 3 0x82 nanosleep syz-executor.1 78998 233054 1 0 3 0x100083 ttyin getty 12511 477332 0 0 3 0x14200 bored sosplice 17447 34027 78463 0 3 0x82 thrsleep syz-fuzzer 17447 362763 78463 0 3 0x4000082 nanosleep syz-fuzzer 17447 319337 78463 0 3 0x4000082 thrsleep syz-fuzzer 17447 225098 78463 0 3 0x4000082 thrsleep syz-fuzzer 17447 141449 78463 0 3 0x4000082 thrsleep syz-fuzzer 17447 512685 78463 0 3 0x4000082 kqread syz-fuzzer 17447 199158 78463 0 3 0x4000082 thrsleep syz-fuzzer 17447 282787 78463 0 3 0x4000082 thrsleep syz-fuzzer 17447 33096 78463 0 3 0x4000082 thrsleep syz-fuzzer 78463 311435 77051 0 3 0x10008a pause ksh 77051 453668 79411 0 3 0x92 select sshd 79411 108222 1 0 3 0x80 select sshd 8292 8376 78057 73 3 0x100090 kqread syslogd 78057 152098 1 0 3 0x100082 netio syslogd 1825 90048 1 77 2 0x100090 dhclient 14689 21800 1 0 3 0x80 poll dhclient 4435 404448 0 0 2 0x14200 zerothread 47316 285446 0 0 3 0x14200 aiodoned aiodoned 84936 379124 0 0 3 0x14200 syncer update 95539 459157 0 0 3 0x14200 cleaner cleaner 67207 258685 0 0 3 0x14200 reaper reaper 90052 100908 0 0 3 0x14200 pgdaemon pagedaemon 25550 21898 0 0 3 0x14200 bored crynlk 72185 512420 0 0 3 0x14200 bored crypto 63024 58407 0 0 3 0x40014200 acpi0 acpi0 99833 307861 0 0 3 0x14200 bored softnet 98279 90577 0 0 2 0x14200 systqmp 27178 249453 0 0 3 0x14200 bored systq 71144 11516 0 0 3 0x40014200 bored softclock 23014 445611 0 0 3 0x40014200 idle0 5634 31571 0 0 3 0x14200 bored smr 1 36721 0 0 3 0x82 wait init 0 0 -1 0 3 0x10200 scheduler swapper ddb> show all locks No such command ddb> show malloc Type InUse MemUse HighUse Limit Requests Type Lim Kern Lim devbuf 9575 7023K 9455K 78643K 35253 0 0 pcb 13 11K 13K 78643K 1021 0 0 rtable 107 12K 14K 78643K 2861 0 0 ifaddr 80 19K 21K 78643K 771 0 0 counters 19 16K 16K 78643K 19 0 0 ioctlops 0 0K 2K 78643K 274 0 0 iov 0 0K 32K 78643K 970 0 0 mount 1 1K 1K 78643K 1 0 0 vnodes 1239 78K 79K 78643K 8239 0 0 UFS quota 1 32K 32K 78643K 1 0 0 UFS mount 5 36K 36K 78643K 5 0 0 shm 2 1K 5K 78643K 65 0 0 VM map 50 12K 12K 78643K 74 0 0 sem 12 0K 1K 78643K 2043 0 0 dirhash 12 2K 2K 78643K 12 0 0 ACPI 1794 195K 288K 78643K 12646 0 0 file desc 5 13K 25K 78643K 4206 0 0 sigio 0 0K 0K 78643K 63 0 0 proc 49 38K 55K 78643K 1864 0 0 subproc 32 2K 2K 78643K 476 0 0 NFS srvsock 1 0K 0K 78643K 1 0 0 NFS daemon 1 16K 16K 78643K 1 0 0 ip_moptions 0 0K 0K 78643K 407 0 0 in_multi 19 1K 2K 78643K 523 0 0 ether_multi 1 0K 0K 78643K 51 0 0 mrt 1 0K 0K 78643K 50 0 0 ISOFS mount 1 32K 32K 78643K 1 0 0 MSDOSFS mount 1 16K 16K 78643K 1 0 0 ttys 114 503K 503K 78643K 114 0 0 exec 0 0K 1K 78643K 1057 0 0 pfkey data 0 0K 4K 78643K 6 0 0 pagedep 1 8K 8K 78643K 1 0 0 inodedep 1 32K 32K 78643K 1 0 0 newblk 1 0K 0K 78643K 1 0 0 VM swap 7 26K 26K 78643K 7 0 0 UVM amap 188 397K 397K 78643K 11598 0 0 UVM aobj 130 4K 4K 78643K 135 0 0 memdesc 1 4K 4K 78643K 1 0 0 crypto data 1 1K 1K 78643K 1 0 0 ip6_options 0 0K 1K 78643K 1013 0 0 NDP 18 0K 1K 78643K 245 0 0 temp 176 3543K 4183K 78643K 146653 0 0 kqueue 0 0K 0K 78643K 76 0 0 SYN cache 2 16K 16K 78643K 2 0 0 ddb> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle arp 64 85 0 81 1 0 1 1 0 8 0 rtpcb 80 539 0 537 1 0 1 1 0 8 0 rtentry 112 548 0 509 2 0 2 2 0 8 0 unpcb 120 2246 0 2232 2 0 2 2 0 8 1 syncache 264 27 0 27 14 14 0 1 0 8 0 tcpqe 32 133 0 133 9 9 0 1 0 8 0 tcpcb 544 1882 0 1876 16 15 1 12 0 8 0 ipq 40 57 0 57 15 15 0 1 0 8 0 ipqe 40 1675 0 1675 15 15 0 1 0 8 0 inpcb 280 6828 0 6818 29 27 2 9 0 8 1 rttmr 72 18 0 18 11 11 0 1 0 8 0 ip6q 72 2 0 2 2 2 0 1 0 8 0 ip6af 40 3 0 3 2 2 0 1 0 8 0 nd6 48 78 0 77 5 4 1 1 0 8 0 pkpcb 40 29 0 29 10 9 1 1 0 8 1 swfcl 56 1 0 0 1 0 1 1 0 8 0 ppxss 1128 84 0 84 13 12 1 1 0 8 1 art_heap8 4096 12 0 8 8 4 4 6 0 8 0 art_heap4 256 2211 0 2009 40 24 16 17 0 8 0 art_table 32 2223 0 2017 7 4 3 3 0 8 0 art_node 16 546 0 509 1 0 1 1 0 8 0 sysvmsgpl 40 47 0 37 1 0 1 1 0 8 0 semupl 112 1 0 1 1 1 0 1 0 8 0 semapl 112 2041 0 2031 1 0 1 1 0 8 0 shmpl 112 133 0 5 4 0 4 4 0 8 0 dirhash 1024 17 0 0 3 0 3 3 0 8 0 dino1pl 128 7722 0 6308 46 0 46 46 0 8 0 ffsino 240 7722 0 6308 85 1 84 84 0 8 0 nchpl 144 14803 0 14338 60 40 20 60 0 8 0 uvmvnodes 72 7871 0 0 144 0 144 144 0 8 0 vnodes 208 7871 0 0 415 0 415 415 0 8 0 namei 1024 55596 0 55596 6 5 1 1 0 8 1 vcpupl 1984 48 0 0 6 0 6 6 0 8 0 vmpool 520 72 0 24 4 0 4 4 0 8 0 scsiplug 64 1 0 1 1 1 0 1 0 8 0 scxspl 192 62481 0 62480 25 23 2 7 0 8 1 plimitpl 152 422 0 415 1 0 1 1 0 8 0 sigapl 432 4301 0 4288 2 0 2 2 0 8 0 futexpl 56 141179 0 141178 7 6 1 1 0 8 0 knotepl 112 1162 0 1143 6 5 1 2 0 8 0 kqueuepl 104 1437 0 1435 4 3 1 4 0 8 0 pipepl 112 2806 0 2787 7 6 1 2 0 8 0 fdescpl 424 4302 0 4288 2 0 2 2 0 8 0 filepl 120 41779 0 41677 30 26 4 11 0 8 0 lockfpl 104 1914 0 1913 1 0 1 1 0 8 0 lockfspl 48 594 0 593 1 0 1 1 0 8 0 sessionpl 112 46 0 36 1 0 1 1 0 8 0 pgrppl 48 98 0 88 1 0 1 1 0 8 0 ucredpl 96 4726 0 4718 1 0 1 1 0 8 0 zombiepl 144 4294 0 4294 1 0 1 1 0 8 1 processpl 864 4323 0 4294 4 0 4 4 0 8 0 procpl 632 9418 0 9379 7 3 4 5 0 8 0 sosppl 128 77 0 77 21 21 0 1 0 8 0 sockpl 384 9715 0 9689 50 45 5 14 0 8 1 mcl64k 65536 864 0 864 70 69 1 33 0 8 1 mcl16k 16384 71 0 71 12 11 1 1 0 8 1 mcl12k 12288 130 0 130 13 12 1 1 0 8 1 mcl9k 9216 61 0 61 17 16 1 1 0 8 1 mcl8k 8192 225 0 225 9 8 1 1 0 8 1 mcl4k 4096 531 0 531 9 8 1 1 0 8 1 mcl2k2 2112 48 0 48 19 19 0 1 0 8 0 mcl2k 2048 76419 0 76366 23 15 8 15 0 8 1 mtagpl 80 172 0 172 5 4 1 1 0 8 1 mbufpl 256 171201 0 171113 230 215 15 42 0 8 5 bufpl 256 23911 0 16033 493 0 493 493 0 8 0 anonpl 16 579183 0 557095 247 145 102 137 0 62 2 amapchunkpl 152 27839 0 27665 126 118 8 37 0 158 0 amappl16 192 26882 0 25616 260 188 72 87 0 8 8 amappl15 184 714 0 714 5 5 0 1 0 8 0 amappl14 176 344 0 335 1 0 1 1 0 8 0 amappl13 168 953 0 953 3 3 0 1 0 8 0 amappl12 160 518 0 517 7 6 1 1 0 8 0 amappl11 152 445 0 432 1 0 1 1 0 8 0 amappl10 144 238 0 235 1 0 1 1 0 8 0 amappl9 136 1883 0 1879 1 0 1 1 0 8 0 amappl8 128 1419 0 1376 2 0 2 2 0 8 0 amappl7 120 367 0 359 1 0 1 1 0 8 0 amappl6 112 408 0 393 1 0 1 1 0 8 0 amappl5 104 885 0 874 1 0 1 1 0 8 0 amappl4 96 5045 0 5013 1 0 1 1 0 8 0 amappl3 88 338 0 330 1 0 1 1 0 8 0 amappl2 80 32958 0 32885 3 1 2 3 0 8 0 amappl1 72 88886 0 88481 27 18 9 20 0 8 0 amappl 80 10183 0 10111 2 0 2 2 0 84 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 253 0 253 1 1 0 1 0 8 0 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 64 134 0 5 3 0 3 3 0 8 0 uaddrrnd 24 4374 0 4288 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 4374 0 4288 1 0 1 1 0 8 0 vmmpekpl 168 29400 0 29365 2 0 2 2 0 8 0 vmmpepl 168 537280 0 534759 416 260 156 160 0 357 39 vmsppl 272 4301 0 4288 8 7 1 2 0 8 0 pdppl 4096 8754 0 8672 17 6 11 11 0 8 0 pvpl 32 1614452 0 1590726 641 383 258 404 0 265 55 pmappl 200 4373 0 4312 6 2 4 4 0 8 0 extentpl 40 46 0 29 1 0 1 1 0 8 0 phpool 112 1031 0 390 20 0 20 20 0 8 0