kernel: protection fault trap, code=0 Stopped at bpfdetach+0x40: movq 0(%r15),%r12 ddb> ddb> set $lines = 0 ddb> set $maxwidth = 0 ddb> show panic the kernel did not panic ddb> trace bpfdetach(ffff8000015bc800) at bpfdetach+0x40 sys/net/bpf.c:1770 if_detach(ffff8000015bc800) at if_detach+0x12b sys/net/if.c:1289 tun_clone_destroy(ffff8000015bc800) at tun_clone_destroy+0x2a2 sys/net/if_tun.c:343 if_clone_destroy(ffff80003c975cd0) at if_clone_destroy+0x1d5 sys/net/if.c:1479 sys_ioctl(ffff80002f0b1770,ffff80003c975ea0,ffff80003c975df0) at sys_ioctl+0x660 sys/kern/sys_generic.c:-1 syscall(ffff80003c975ea0) at syscall+0x962 mi_syscall sys/sys/syscall_mi.h:-1 [inline] syscall(ffff80003c975ea0) at syscall+0x962 sys/arch/amd64/amd64/trap.c:783 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xd4cb40f0570, count: -7 ddb> show registers rdi 0 rsi 0 rbp 0xffff80003c975bc0 rbx 0 rdx 0 rcx 0x4e9a4f97644bbefe rax 0xffff80002f0b1770 r8 0x2 r9 0 r10 0xdbc64efd0ab97db0 r11 0x1a4acf48169fe1cd r12 0xdeaf0002deafbead r13 0xffff8000015bcd80 r14 0xffff8000015bc800 r15 0xdeaf0002deafbead rip 0xffffffff82b2a9d0 bpfdetach+0x40 cs 0x8 rflags 0x10246 __ALIGN_SIZE+0xf246 rsp 0xffff80003c975b90 ss 0x10 bpfdetach+0x40: movq 0(%r15),%r12 ddb> show proc PROC (syz-executor) tid=13622 pid=55869 tcnt=2 stat=onproc flags process=1000 proc=4080000 runpri=32, usrpri=50, slppri=32, nice=20 wchan=0x0, wmesg=, ps_single=0xffff80002f0b0fa8 scnt=1 ecnt=1 forw=0xffffffffffffffff, list=0xffff80002f0b0fa8,0xffff80003c8edcc0 process=0xffff8000ffff8018 user=0xffff80003c970000, vmspace=0xfffffd807ec5e730 estcpu=36, cpticks=0, pctcpu=0.0, user=0, sys=0, intr=0 ddb>