panic: attempt to access user address 0x7f7ffffdcb28 in supervisor mode Stopped at db_enter+0x18: addq $0x8,%rsp TID PID UID PRFLAGS PFLAGS CPU COMMAND db_enter() at db_enter+0x18 sys/arch/amd64/amd64/db_interface.c:398 panic() at panic+0x15c sys/kern/subr_prf.c:207 pageflttrap() at pageflttrap+0x3eb kerntrap(ffff800016584260) at kerntrap+0xdb sys/arch/amd64/amd64/trap.c:287 alltraps_kern_meltdown(6,0,0,3,ffff800000b0b000,ffff800000b0e700) at alltraps_kern_meltdown+0x7b in6_purgeaddr(ffff800000b0e700) at in6_purgeaddr+0x149 sys/netinet6/in6.c:914 in6_ifdetach(ffff800000b0b000) at in6_ifdetach+0x74 sys/netinet6/in6_ifattach.c:422 if_detach(ffff800000b0b000) at if_detach+0x155 sys/net/if.c:1110 tun_clone_destroy(ffff800000b0b000) at tun_clone_destroy+0x1c0 sys/net/if_tun.c:278 spec_close(ffff800016584520) at spec_close+0x311 sys/kern/spec_vnops.c:555 VOP_CLOSE(fffffd80361e1750,7,fffffd803f7c6c60,ffff8000149209f8) at VOP_CLOSE+0xc0 sys/kern/vfs_vops.c:175 vn_closefile(fffffd8029dc7080,ffff8000149209f8) at vn_closefile+0xd3 vn_close sys/kern/vfs_vnops.c:301 [inline] vn_closefile(fffffd8029dc7080,ffff8000149209f8) at vn_closefile+0xd3 sys/kern/vfs_vnops.c:613 fdrop(fffffd8029dc7080,ffff8000149209f8) at fdrop+0xc2 sys/kern/kern_descrip.c:1273 closef(fffffd8029dc7080,ffff8000149209f8) at closef+0x118 sys/kern/kern_descrip.c:1257 end trace frame: 0xffff8000165846f0, count: 0 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb> ddb> set $lines = 0 ddb> set $maxwidth = 0 ddb> show panic attempt to access user address 0x7f7ffffdcb28 in supervisor mode ddb> trace db_enter() at db_enter+0x18 sys/arch/amd64/amd64/db_interface.c:398 panic() at panic+0x15c sys/kern/subr_prf.c:207 pageflttrap() at pageflttrap+0x3eb kerntrap(ffff800016584260) at kerntrap+0xdb sys/arch/amd64/amd64/trap.c:287 alltraps_kern_meltdown(6,0,0,3,ffff800000b0b000,ffff800000b0e700) at alltraps_kern_meltdown+0x7b in6_purgeaddr(ffff800000b0e700) at in6_purgeaddr+0x149 sys/netinet6/in6.c:914 in6_ifdetach(ffff800000b0b000) at in6_ifdetach+0x74 sys/netinet6/in6_ifattach.c:422 if_detach(ffff800000b0b000) at if_detach+0x155 sys/net/if.c:1110 tun_clone_destroy(ffff800000b0b000) at tun_clone_destroy+0x1c0 sys/net/if_tun.c:278 spec_close(ffff800016584520) at spec_close+0x311 sys/kern/spec_vnops.c:555 VOP_CLOSE(fffffd80361e1750,7,fffffd803f7c6c60,ffff8000149209f8) at VOP_CLOSE+0xc0 sys/kern/vfs_vops.c:175 vn_closefile(fffffd8029dc7080,ffff8000149209f8) at vn_closefile+0xd3 vn_close sys/kern/vfs_vnops.c:301 [inline] vn_closefile(fffffd8029dc7080,ffff8000149209f8) at vn_closefile+0xd3 sys/kern/vfs_vnops.c:613 fdrop(fffffd8029dc7080,ffff8000149209f8) at fdrop+0xc2 sys/kern/kern_descrip.c:1273 closef(fffffd8029dc7080,ffff8000149209f8) at closef+0x118 sys/kern/kern_descrip.c:1257 fdfree(ffff8000149209f8) at fdfree+0x100 sys/kern/kern_descrip.c:1189 exit1(ffff8000149209f8,9,1) at exit1+0x32f sys/kern/kern_exit.c:196 postsig(ffff8000149209f8,9) at postsig+0x4a6 sigexit sys/kern/kern_sig.c:1499 [inline] postsig(ffff8000149209f8,9) at postsig+0x4a6 sys/kern/kern_sig.c:1431 userret(ffff8000149209f8) at userret+0x159 sys/kern/kern_sig.c:1889 syscall(ffff8000165849a0) at syscall+0x42e mi_syscall_return sys/sys/syscall_mi.h:115 [inline] syscall(ffff8000165849a0) at syscall+0x42e sys/arch/amd64/amd64/trap.c:577 Xsyscall(6,b,44,b,97cbf,8b12d8e1000) at Xsyscall+0x128 end of kernel end trace frame: 0x7f7ffffdd990, count: -20 ddb> show registers rdi 0 rsi 0x1 rbp 0xffff8000165840d0 rbx 0xffff800016584180 rdx 0x2 rcx 0 rax 0 r8 0xffff800016584090 r9 0x1 r10 0 r11 0x30e49e5a2ed6eca2 r12 0x3000000008 r13 0xffff8000165840e0 r14 0x100 r15 0x1 rip 0xffffffff81cff578 db_enter+0x18 cs 0x8 rflags 0x246 rsp 0xffff8000165840c0 ss 0x10 db_enter+0x18: addq $0x8,%rsp ddb> show proc PROC (syz-executor.1) pid=497760 stat=onproc flags process=a proc=2000 pri=32, usrpri=50, nice=20 forw=0xffffffffffffffff, list=0xffff8000149218c8,0xffff8000149213e8 process=0xffff8000148a2d98 user=0xffff80001657f000, vmspace=0xfffffd803f013ee0 estcpu=0, cpticks=1, pctcpu=0.0 user=0, sys=1, intr=0 ddb> ps PID TID PPID UID S FLAGS WAIT COMMAND 70636 317679 0 0 3 0x14200 acct acct 377 466429 1 0 3 0x100083 ttyin getty 28823 434128 0 0 3 0x14200 bored sosplice 37261 488477 1856 0 3 0x82 thrsleep syz-fuzzer 37261 444995 1856 0 3 0x4000082 nanosleep syz-fuzzer 37261 44663 1856 0 3 0x4000082 thrsleep syz-fuzzer 37261 326102 1856 0 3 0x4000082 thrsleep syz-fuzzer 37261 394621 1856 0 3 0x4000082 thrsleep syz-fuzzer 37261 413833 1856 0 2 0x4000002 syz-fuzzer 37261 482360 1856 0 3 0x4000082 thrsleep syz-fuzzer 37261 458004 1856 0 3 0x4000082 thrsleep syz-fuzzer 1856 54605 71505 0 3 0x10008a pause ksh 71505 21496 89022 0 3 0x92 select sshd 89022 289764 1 0 3 0x80 select sshd 13644 400321 78741 73 2 0x100010 syslogd 78741 96125 1 0 3 0x100082 netio syslogd 97881 377801 1 77 3 0x100090 poll dhclient 64693 404963 1 0 3 0x80 poll dhclient 92390 348152 0 0 2 0x14200 zerothread 10056 143564 0 0 3 0x14200 aiodoned aiodoned 29296 209031 0 0 3 0x14200 syncer update 61526 510981 0 0 3 0x14200 cleaner cleaner 42422 87214 0 0 2 0x14200 reaper 68583 485750 0 0 3 0x14200 pgdaemon pagedaemon 81970 39461 0 0 3 0x14200 bored crynlk 43473 425869 0 0 3 0x14200 bored crypto 46232 228656 0 0 3 0x40014200 acpi0 acpi0 41883 417008 0 0 2 0x14200 softnet 72116 57301 0 0 3 0x14200 bored systqmp 31414 147412 0 0 3 0x14200 bored systq 79268 14664 0 0 3 0x40014200 bored softclock 21356 204801 0 0 3 0x40014200 idle0 62679 433603 0 0 3 0x14200 bored smr 1 279484 0 0 3 0x82 wait init 0 0 -1 0 3 0x10200 scheduler swapper ddb> show all locks No such command ddb> show malloc Type InUse MemUse HighUse Limit Requests Type Lim Kern Lim devbuf 9592 6394K 7975K 78643K 21079 0 0 pcb 13 10K 12K 78643K 1025 0 0 rtable 120 13K 13K 78643K 2480 0 0 ifaddr 99 22K 23K 78643K 700 0 0 counters 19 16K 16K 78643K 19 0 0 ioctlops 0 0K 2K 78643K 396 0 0 iov 0 0K 34K 78643K 1465 0 0 mount 1 1K 1K 78643K 1 0 0 vnodes 1218 76K 77K 78643K 5228 0 0 UFS quota 1 32K 32K 78643K 1 0 0 UFS mount 5 36K 36K 78643K 5 0 0 shm 2 1K 9K 78643K 54 0 0 VM map 57 14K 14K 78643K 71 0 0 sem 12 0K 1K 78643K 1715 0 0 dirhash 12 2K 2K 78643K 12 0 0 ACPI 1793 195K 288K 78643K 12645 0 0 file desc 3 5K 25K 78643K 4354 0 0 sigio 0 0K 0K 78643K 79 0 0 proc 49 38K 63K 78643K 1713 0 0 subproc 7 0K 2K 78643K 408 0 0 NFS srvsock 1 0K 0K 78643K 1 0 0 NFS daemon 1 16K 16K 78643K 1 0 0 ip_moptions 0 0K 0K 78643K 483 0 0 in_multi 30 1K 2K 78643K 477 0 0 ether_multi 1 0K 0K 78643K 38 0 0 mrt 0 0K 0K 78643K 23 0 0 ISOFS mount 1 32K 32K 78643K 1 0 0 MSDOSFS mount 1 16K 16K 78643K 1 0 0 ttys 90 397K 397K 78643K 90 0 0 exec 0 0K 1K 78643K 1018 0 0 pfkey data 0 0K 4K 78643K 4 0 0 pagedep 1 8K 8K 78643K 1 0 0 inodedep 1 32K 32K 78643K 1 0 0 newblk 1 0K 0K 78643K 1 0 0 VM swap 7 26K 26K 78643K 7 0 0 UVM amap 209 385K 387K 78643K 12053 0 0 UVM aobj 130 6K 6K 78643K 132 0 0 memdesc 1 4K 4K 78643K 1 0 0 crypto data 1 1K 1K 78643K 1 0 0 ip6_options 0 0K 0K 78643K 1057 0 0 NDP 23 0K 1K 78643K 226 0 0 temp 247 3545K 4186K 78643K 116690 0 0 kqueue 0 0K 0K 78643K 63 0 0 SYN cache 2 16K 16K 78643K 2 0 0 ddb> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle arp 64 75 0 71 1 0 1 1 0 8 0 rtpcb 80 824 0 822 1 0 1 1 0 8 0 rtentry 112 466 0 424 2 0 2 2 0 8 0 unpcb 120 5108 0 5093 8 6 2 2 0 8 0 syncache 264 29 0 29 9 9 0 1 0 8 0 tcpqe 32 174 0 174 9 9 0 1 0 8 0 tcpcb 544 2860 0 2856 50 49 1 15 0 8 0 ipq 40 98 0 98 19 19 0 1 0 8 0 ipqe 40 3174 0 3174 20 20 0 2 0 8 0 inpcb 280 20901 0 20894 51 50 1 9 0 8 0 rttmr 72 8 0 8 5 5 0 1 0 8 0 ip6q 72 2 0 2 1 1 0 1 0 8 0 ip6af 40 6 0 6 1 1 0 1 0 8 0 nd6 48 67 0 64 5 4 1 1 0 8 0 pkpcb 40 14 0 14 5 5 0 1 0 8 0 swfcl 56 1 0 0 1 0 1 1 0 8 0 ppxss 1128 87 0 87 17 17 0 1 0 8 0 art_heap8 4096 15 0 12 10 7 3 5 0 8 0 art_heap4 256 2129 0 1886 28 11 17 19 0 8 0 art_table 32 2144 0 1898 4 1 3 3 0 8 0 art_node 16 464 0 427 1 0 1 1 0 8 0 sysvmsgpl 40 99 0 61 1 0 1 1 0 8 0 semupl 112 2 0 2 1 1 0 1 0 8 0 semapl 112 1713 0 1703 1 0 1 1 0 8 0 shmpl 112 130 0 2 4 0 4 4 0 8 0 dirhash 1024 17 0 0 3 0 3 3 0 8 0 dino1pl 128 8142 0 6737 46 0 46 46 0 8 0 ffsino 240 8142 0 6737 83 0 83 83 0 8 0 nchpl 144 14938 0 14501 60 40 20 60 0 8 0 uvmvnodes 72 8532 0 0 156 0 156 156 0 8 0 vnodes 208 8532 0 0 450 0 450 450 0 8 0 namei 1024 50562 0 50562 6 6 0 1 0 8 0 vcpupl 1984 56 0 1 7 0 7 7 0 8 0 vmpool 520 69 0 14 4 0 4 4 0 8 0 scsiplug 64 3 0 3 2 2 0 1 0 8 0 scxspl 192 61685 0 61685 25 24 1 7 0 8 1 plimitpl 152 414 0 406 1 0 1 1 0 8 0 sigapl 432 4460 0 4449 2 0 2 2 0 8 0 futexpl 56 192253 0 192253 8 8 0 1 0 8 0 knotepl 112 1034 0 1015 6 5 1 2 0 8 0 kqueuepl 104 1818 0 1816 10 9 1 4 0 8 0 pipepl 112 2924 0 2909 12 11 1 2 0 8 0 fdescpl 424 4461 0 4449 2 0 2 2 0 8 0 filepl 120 53528 0 53463 43 39 4 11 0 8 0 lockfpl 104 1703 0 1702 1 0 1 1 0 8 0 lockfspl 48 577 0 576 1 0 1 1 0 8 0 sessionpl 112 41 0 31 1 0 1 1 0 8 0 pgrppl 48 127 0 117 1 0 1 1 0 8 0 ucredpl 96 4795 0 4787 1 0 1 1 0 8 0 zombiepl 144 4452 0 4448 1 0 1 1 0 8 0 processpl 864 4479 0 4448 4 0 4 4 0 8 0 procpl 632 10004 0 9963 4 0 4 4 0 8 0 sosppl 128 95 0 95 17 17 0 1 0 8 0 sockpl 384 26979 0 26954 73 68 5 14 0 8 0 mcl64k 65536 1549 0 1549 130 130 0 33 0 8 0 mcl16k 16384 102 0 102 14 14 0 1 0 8 0 mcl12k 12288 182 0 182 10 10 0 1 0 8 0 mcl9k 9216 102 0 102 13 13 0 1 0 8 0 mcl8k 8192 278 0 278 6 6 0 1 0 8 0 mcl4k 4096 586 0 586 8 8 0 1 0 8 0 mcl2k2 2112 48 0 48 16 16 0 1 0 8 0 mcl2k 2048 75979 0 75934 18 11 7 14 0 8 0 mtagpl 80 277 0 277 4 3 1 1 0 8 1 mbufpl 256 189076 0 188980 211 194 17 36 0 8 1 bufpl 256 26105 0 17571 535 1 534 534 0 8 0 anonpl 16 637061 0 607074 242 121 121 121 0 62 0 amapchunkpl 152 28313 0 27842 125 106 19 20 0 158 0 amappl16 192 29624 0 28104 267 191 76 78 0 8 0 amappl15 184 69 0 69 3 3 0 1 0 8 0 amappl14 176 1115 0 1109 1 0 1 1 0 8 0 amappl13 168 1349 0 1347 2 1 1 1 0 8 0 amappl12 160 106 0 102 1 0 1 1 0 8 0 amappl11 152 538 0 527 1 0 1 1 0 8 0 amappl10 144 71 0 69 1 0 1 1 0 8 0 amappl9 136 1789 0 1786 1 0 1 1 0 8 0 amappl8 128 1341 0 1285 2 0 2 2 0 8 0 amappl7 120 180 0 173 1 0 1 1 0 8 0 amappl6 112 502 0 487 1 0 1 1 0 8 0 amappl5 104 500 0 487 1 0 1 1 0 8 0 amappl4 96 5608 0 5575 1 0 1 1 0 8 0 amappl3 88 465 0 458 1 0 1 1 0 8 0 amappl2 80 34339 0 34253 3 1 2 3 0 8 0 amappl1 72 91703 0 91253 27 18 9 20 0 8 0 amappl 80 10696 0 10618 2 0 2 2 0 84 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 253 0 253 1 1 0 1 0 8 0 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 17 0 17 1 1 0 1 0 8 0 aobjpl 64 131 0 2 3 0 3 3 0 8 0 uaddrrnd 24 4530 0 4447 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 4530 0 4447 1 0 1 1 0 8 0 vmmpekpl 168 30255 0 30216 3 0 3 3 0 8 0 vmmpepl 168 554879 0 551932 420 291 129 159 0 357 0 vmsppl 272 4460 0 4446 4 3 1 2 0 8 0 pdppl 4096 9066 0 8975 17 5 12 12 0 8 0 pvpl 32 1718143 0 1691076 672 324 348 362 0 265 105 pmappl 200 4529 0 4460 4 0 4 4 0 8 0 extentpl 40 41 0 26 1 0 1 1 0 8 0 phpool 112 1125 0 447 21 0 21 21 0 8 0