kernel: protection fault trap, code=0 Stopped at bpfdetach+0x40: movq 0(%r15),%r12 ddb> ddb> set $lines = 0 ddb> set $maxwidth = 0 ddb> show panic the kernel did not panic ddb> trace bpfdetach(ffff800001488000) at bpfdetach+0x40 sys/net/bpf.c:1770 if_detach(ffff800001488000) at if_detach+0x1bb sys/net/if.c:1199 tun_clone_destroy(ffff800001488000) at tun_clone_destroy+0x2aa sys/net/if_tun.c:340 if_clone_destroy(ffff80003c98bd40) at if_clone_destroy+0x1d7 sys/net/if.c:1388 sys_ioctl(ffff80002a810d10,ffff80003c98bf20,ffff80003c98be70) at sys_ioctl+0x5bf sys/kern/sys_generic.c:-1 syscall(ffff80003c98bf20) at syscall+0x97e mi_syscall sys/sys/syscall_mi.h:-1 [inline] syscall(ffff80003c98bf20) at syscall+0x97e sys/arch/amd64/amd64/trap.c:748 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xbaf19d1d0d0, count: -7 ddb> show registers rdi 0xffff80002f120000 rsi 0xf77b __ALIGN_SIZE+0xe77b rbp 0xffff80003c98bc30 rbx 0xffff80003c98bf20 rdx 0xffff80002f120000 rcx 0xf77a __ALIGN_SIZE+0xe77a rax 0xffffffff81b5a3c9 bpfdetach+0x89 r8 0 r9 0 r10 0x9c7678e2a9d13d31 r11 0xac993876cd53f3ce r12 0xdead0002deadbeef r13 0x800 r14 0xffff800001488000 r15 0xdead0002deadbeef rip 0xffffffff81b5a380 bpfdetach+0x40 cs 0x8 rflags 0x10246 __ALIGN_SIZE+0xf246 rsp 0xffff80003c98bc00 ss 0 bpfdetach+0x40: movq 0(%r15),%r12 ddb> show proc PROC (syz-executor) tid=5194 pid=56828 tcnt=3 stat=onproc flags process=0 proc=4000000 runpri=32, usrpri=81, slppri=32, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0 forw=0xffffffffffffffff, list=0xffff80002a8119e0,0xffff80002a87dc70 process=0xffff80002a862d50 user=0xffff80003c986000, vmspace=0xfffffd806ba78880 estcpu=31, cpticks=0, pctcpu=0.0, user=0, sys=0, intr=0 ddb> ps PID TID PPID UID S FLAGS WAIT COMMAND 79897 346345 29966 0 2 0 syz-executor 79897 47116 29966 0 3 0x4000080 fsleep syz-executor 79897 158722 29966 0 3 0x4000080 fsleep syz-executor 79897 191226 29966 0 3 0x4000080 fsleep syz-executor 41157 119647 94984 0 2 0 syz-executor 41157 497933 94984 0 3 0x4000080 fsleep syz-executor 58473 204704 8053 0 2 0 syz-executor 58473 164870 8053 0 3 0x4000080 fsleep syz-executor 54952 155245 5342 0 2 0 syz-executor 54952 472154 5342 0 2 0x4000000 syz-executor 54952 73492 5342 0 3 0x4000080 fsleep syz-executor 81909 241081 37969 0 2 0 syz-executor 81909 221472 37969 0 3 0x4000080 kqsel syz-executor 81909 318914 37969 0 3 0x4000080 fsleep syz-executor 56828 177053 89043 0 3 0x80 nanoslp syz-executor *56828 5194 89043 0 7 0x4000000 syz-executor 56828 362578 89043 0 3 0x4000080 fsleep syz-executor 89043 264954 29236 0 3 0x82 nanoslp syz-executor 94984 177402 29236 0 3 0x82 nanoslp syz-executor 14393 140504 0 0 3 0x14280 nfsidl nfsio 42757 284420 0 0 3 0x14280 nfsidl nfsio 37715 394411 0 0 3 0x14280 nfsidl nfsio 50003 504758 0 0 3 0x14280 nfsidl nfsio 962 99202 0 0 3 0x14280 nfsidl nfsio 7213 228877 0 0 3 0x14280 nfsidl nfsio 95403 51058 0 0 3 0x14280 nfsidl nfsio 56441 295258 0 0 3 0x14280 nfsidl nfsio 11085 3867 0 0 3 0x14280 nfsidl nfsio 75917 182465 0 0 3 0x14280 nfsidl nfsio 27157 427675 0 0 3 0x14280 nfsidl nfsio 2225 89297 0 0 3 0x14280 nfsidl nfsio 74951 103801 0 0 3 0x14280 nfsidl nfsio 23350 359963 0 0 3 0x14280 nfsidl nfsio 67353 232158 0 0 3 0x14280 nfsidl nfsio 24040 55453 0 0 3 0x14280 nfsidl nfsio 3189 337810 0 0 3 0x14280 nfsidl nfsio 18522 362060 0 0 3 0x14280 nfsidl nfsio 28579 151967 0 0 3 0x14280 nfsidl nfsio 26575 139637 0 0 3 0x14280 nfsidl nfsio 37619 518966 0 0 3 0x14200 bored sosplice 37969 131044 29236 0 3 0x82 nanoslp syz-executor 29966 333251 29236 0 3 0x82 nanoslp syz-executor 18605 3830 29236 0 2 0x2 syz-executor 4030 139220 29236 0 3 0x82 nanoslp syz-executor 5342 113702 29236 0 3 0x82 nanoslp syz-executor 8053 352765 29236 0 3 0x82 nanoslp syz-executor 29236 378624 47524 0 3 0x82 kqread syz-executor 47524 407629 58121 0 3 0x10008a sigsusp ksh 58121 120504 48004 0 3 0x98 kqread sshd-session 48004 364864 12500 0 3 0x92 kqread sshd-session 33143 255324 1 0 3 0x100083 ttyopn getty 12500 306587 1 0 3 0x88 kqread sshd 18403 397328 19807 73 3 0x1100090 kqread syslogd 19807 512502 1 0 3 0x100082 sbwait syslogd 50372 34407 1 0 3 0x100080 kqread resolvd 14631 20375 94906 77 3 0x100092 kqread dhcpleased 61148 327936 94906 77 3 0x100092 kqread dhcpleased 94906 468523 1 0 3 0x80 kqread dhcpleased 63257 481420 0 0 3 0x14200 bored smr 91590 238467 0 0 2 0x14200 zerothread 51380 96894 0 0 3 0x14200 aiodoned aiodoned 12074 304013 0 0 3 0x14200 syncer update 52144 290392 0 0 3 0x14200 cleaner cleaner 76441 371684 0 0 2 0x14200 reaper 182 36618 0 0 3 0x14200 pgdaemon pagedaemon 73566 489329 0 0 3 0x14200 bored viomb 63394 290329 0 0 3 0x40014200 acpi0 acpi0 48688 467297 0 0 3 0x14200 bored softnet7 38630 439398 0 0 3 0x14200 bored softnet6 86466 226873 0 0 3 0x14200 bored softnet5 22460 317410 0 0 3 0x14200 bored softnet4 33440 383596 0 0 3 0x14200 bored softnet3 172 141965 0 0 3 0x14200 bored softnet2 38995 456500 0 0 3 0x14200 bored softnet1 44674 262812 0 0 3 0x14200 bored softnet0 80783 70544 0 0 3 0x14200 bored systqmp 78482 83991 0 0 3 0x14200 syncxs systq 69752 194418 0 0 3 0x40014200 tmoslp softclock 30524 259038 0 0 3 0x40014200 idle0 1 385520 0 0 3 0x82 wait init 0 0 -1 0 3 0x10010200 scheduler swapper ddb> show all locks No such command ddb> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 10191 11257K 11444K 166960K 12507 0 pcb 83 18K 18K 166960K 334 0 rtable 184 7K 7K 166960K 420 0 pf 26 12K 14K 166960K 85 0 ifaddr 33 6K 7K 166960K 81 0 ifgroup 42 1K 2K 166960K 112 0 sysctl 4 1K 9K 166960K 9 0 counters 30 17K 18K 166960K 94 0 ioctlops 0 0K 4K 166960K 228 0 iov 0 0K 16K 166960K 33 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1401 88K 89K 166960K 2184 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 2 1K 9K 166960K 5 0 VM map 2 1K 1K 166960K 2 0 sem 12 0K 0K 166960K 34 0 dirhash 12 2K 2K 166960K 21 0 ACPI 1692 195K 286K 166960K 12470 0 file desc 16 57K 240K 166960K 772 0 sigio 0 0K 0K 166960K 8 0 proc 60 59K 91K 166960K 607 0 subproc 72 4K 4K 166960K 99 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 ip_moptions 0 0K 0K 166960K 144 0 in_multi 72 5K 7K 166960K 163 0 ether_multi 1 0K 0K 166960K 6 0 mrt 0 0K 0K 166960K 2 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 97 440K 440K 166960K 97 0 exec 0 0K 1K 166960K 424 0 fusefs mount 1 32K 32K 166960K 1 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 220 151K 174K 166960K 8217 0 UVM aobj 13 4K 4K 166960K 14 0 pinsyscall 37 74K 91K 166960K 1869 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 ip6_options 0 0K 0K 166960K 38 0 NDP 11 0K 2K 166960K 54 0 temp 63 8672K 8739K 166960K 10774 0 kqueue 13 20K 34K 166960K 129 0 SYN cache 2 16K 16K 166960K 2 0 ddb> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle vscsiccb 40 1 0 0 1 0 1 1 0 8 0 rtpcb 120 92 0 89 1 0 1 1 0 8 0 rtentry 136 152 0 75 4 0 4 4 0 8 0 unpcb 144 495 0 479 5 1 4 4 0 8 3 syncache 336 5 0 5 1 1 0 1 0 8 0 tcpqe 32 1 0 1 1 1 0 1 0 8 0 tcpcb 736 261 0 256 7 6 1 7 0 8 0 arp 88 19 0 11 1 0 1 1 0 8 0 ipq 40 2 0 0 1 0 1 1 0 8 0 ipqe 40 3 0 1 1 0 1 1 0 8 0 inpcb 328 892 0 817 12 5 7 7 0 8 0 ip6q 72 3 0 0 1 0 1 1 0 8 0 ip6af 40 2 0 0 1 0 1 1 0 8 0 nd6 104 31 0 16 1 0 1 1 0 8 0 pkpcb 40 9 0 9 2 1 1 1 0 8 1 kcovpl 48 11 0 3 1 0 1 1 0 8 0 ppxss 1072 55 0 55 1 0 1 1 0 8 1 pppxif 1384 1 0 1 1 0 1 1 0 8 1 pfrktable 1344 1 0 1 1 1 0 1 0 8 0 art_heap8 4096 3 0 0 3 0 3 3 0 8 0 art_heap4 256 675 0 299 33 9 24 29 0 8 0 art_table 40 678 0 299 5 1 4 5 0 8 0 art_node 32 151 0 82 1 0 1 1 0 8 0 sysvmsgpl 40 46 0 6 1 0 1 1 0 8 0 semupl 112 1 0 1 1 1 0 1 0 8 0 semapl 112 30 0 20 1 0 1 1 0 8 0 shmpl 112 11 0 1 1 0 1 1 0 8 0 dirhash 1024 23 0 6 3 0 3 3 0 8 0 dino2pl 256 2808 0 1312 95 0 95 95 0 8 0 ffsino 248 2808 0 1312 95 0 95 95 0 8 0 nchpl 144 3795 0 2104 63 0 63 63 0 8 0 rtmask 32 5 0 5 1 1 0 1 0 8 0 uvmvnodes 80 3371 0 0 69 0 69 69 0 8 0 vnodes 216 3371 0 0 188 0 188 188 0 8 0 namei 1024 13215 0 13214 2 1 1 2 0 8 0 kstatmem 264 64 0 46 2 0 2 2 0 8 0 scsiplug 72 3 0 3 2 1 1 1 0 8 1 scxspl 216 13960 0 13959 8 7 1 8 1 8 0 plimitpl 152 136 0 120 1 0 1 1 0 8 0 sigapl 424 1058 0 988 9 0 9 9 0 8 0 knotepl 120 43196 0 43149 25 15 10 17 0 8 8 kqueuepl 184 232 0 222 3 2 1 3 0 8 0 pipepl 296 153 0 126 3 0 3 3 0 8 0 fdescpl 440 1016 0 988 5 1 4 5 0 8 0 filepl 120 6426 0 6148 11 2 9 11 0 8 0 lockfpl 104 594 0 592 2 1 1 2 0 8 0 lockfspl 48 194 0 192 1 0 1 1 0 8 0 sessionpl 144 26 0 18 1 0 1 1 0 8 0 pgrppl 48 44 0 28 1 0 1 1 0 8 0 ucredpl 104 1117 0 1106 1 0 1 1 0 8 0 zombiepl 144 1084 0 1083 1 0 1 1 0 8 0 processpl 1160 1058 0 988 6 0 6 6 0 8 0 procpl 656 1952 0 1871 9 1 8 8 0 8 0 sosppl 168 1 0 1 1 1 0 1 0 8 0 sockpl 528 1507 0 1413 11 4 7 7 0 8 0 mcl64k 65536 80 0 80 2 1 1 1 0 8 1 mcl16k 16384 3 0 3 2 1 1 1 0 8 1 mcl12k 12288 5 0 5 1 1 0 1 0 8 0 mcl9k 9216 1 0 1 1 1 0 1 0 8 0 mcl8k 8192 13 0 13 2 1 1 1 0 8 1 mcl4k 4096 3215 0 3159 17 9 8 16 0 8 0 mcl2k2 2112 7 0 7 2 1 1 1 0 8 1 mcl2k 2048 1054 0 1049 4 2 2 4 0 8 0 mtagpl 96 27 0 12 1 0 1 1 0 8 0 mbufpl 256 10680 0 10481 16 2 14 15 0 8 0 bufpl 280 4842 0 118 338 0 338 338 0 8 0 anonpl 24 168415 0 165337 69 12 57 57 0 187 27 amapchunkpl 152 27400 0 26947 44 8 36 36 0 158 15 amappl16 200 2927 0 2898 14 2 12 13 0 8 7 amappl15 192 3 0 3 1 1 0 1 0 8 0 amappl14 184 113 0 103 1 0 1 1 0 8 0 amappl13 176 6 0 6 1 1 0 1 0 8 0 amappl12 168 1675 0 1647 3 1 2 3 0 8 0 amappl11 160 44 0 34 1 0 1 1 0 8 0 amappl10 152 68 0 68 1 1 0 1 0 8 0 amappl9 144 241 0 241 1 1 0 1 0 8 0 amappl8 136 39 0 37 1 0 1 1 0 8 0 amappl7 128 105 0 94 1 0 1 1 0 8 0 amappl6 120 205 0 202 1 0 1 1 0 8 0 amappl5 112 229 0 222 1 0 1 1 0 8 0 amappl4 104 281 0 265 1 0 1 1 0 8 0 amappl3 96 5132 0 5030 4 0 4 4 0 8 0 amappl2 88 668 0 612 2 0 2 2 0 8 0 amappl1 80 11051 0 10506 14 0 14 14 0 8 1 amappl 88 7414 0 7258 5 0 5 5 0 92 0 dma16384 16384 1 0 1 1 1 0 1 0 8 0 dma8192 8192 2 0 2 1 1 0 1 0 8 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 253 0 253 1 1 0 1 0 8 0 dma64 64 7 0 7 2 1 1 1 0 8 1 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 13 0 1 1 0 1 1 0 8 0 uaddrrnd 24 1016 0 988 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 1016 0 988 1 0 1 1 0 8 0 vmmpekpl 168 9241 0 9200 3 0 3 3 0 8 0 vmmpepl 168 69029 0 67222 94 2 92 94 0 357 6 vmsppl 360 1015 0 987 4 1 3 4 0 8 0 rwobjpl 32 23181 0 18962 35 0 35 35 0 8 0 pdppl 4096 2038 0 1974 108 40 68 78 0 8 4 pvpl 32 452153 0 443932 158 16 142 142 0 265 50 pmappl 216 1015 0 987 2 0 2 2 0 8 0 extentpl 40 45 0 27 1 0 1 1 0 8 0 phpool 112 300 0 77 8 0 8 8 0 8 0 ddb> machine ddbcpu 0 No such command ddb> trace bpfdetach(ffff800001488000) at bpfdetach+0x40 sys/net/bpf.c:1770 if_detach(ffff800001488000) at if_detach+0x1bb sys/net/if.c:1199 tun_clone_destroy(ffff800001488000) at tun_clone_destroy+0x2aa sys/net/if_tun.c:340 if_clone_destroy(ffff80003c98bd40) at if_clone_destroy+0x1d7 sys/net/if.c:1388 sys_ioctl(ffff80002a810d10,ffff80003c98bf20,ffff80003c98be70) at sys_ioctl+0x5bf sys/kern/sys_generic.c:-1 syscall(ffff80003c98bf20) at syscall+0x97e mi_syscall sys/sys/syscall_mi.h:-1 [inline] syscall(ffff80003c98bf20) at syscall+0x97e sys/arch/amd64/amd64/trap.c:748 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xbaf19d1d0d0, count: -7 ddb> machine ddbcpu 1 No such command ddb> trace bpfdetach(ffff800001488000) at bpfdetach+0x40 sys/net/bpf.c:1770 if_detach(ffff800001488000) at if_detach+0x1bb sys/net/if.c:1199 tun_clone_destroy(ffff800001488000) at tun_clone_destroy+0x2aa sys/net/if_tun.c:340 if_clone_destroy(ffff80003c98bd40) at if_clone_destroy+0x1d7 sys/net/if.c:1388 sys_ioctl(ffff80002a810d10,ffff80003c98bf20,ffff80003c98be70) at sys_ioctl+0x5bf sys/kern/sys_generic.c:-1 syscall(ffff80003c98bf20) at syscall+0x97e mi_syscall sys/sys/syscall_mi.h:-1 [inline] syscall(ffff80003c98bf20) at syscall+0x97e sys/arch/amd64/amd64/trap.c:748 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xbaf19d1d0d0, count: -7