uvm_fault(0xfffffd803f013440, 0x38f38b1708, 0, 1) -> e kernel: page fault trap, code=0 Stopped at in6_purgeaddr+0x135: movq 0x8(%r12),%r13 ddb> ddb> set $lines = 0 ddb> set $maxwidth = 0 ddb> show panic kernel page fault uvm_fault(0xfffffd803f013440, 0x38f38b1708, 0, 1) -> e in6_purgeaddr(ffff800000a45300) at in6_purgeaddr+0x135 sys/netinet6/in6.c:914 end trace frame: 0xffff800017b36d90, count: 0 ddb> trace in6_purgeaddr(ffff800000a45300) at in6_purgeaddr+0x135 sys/netinet6/in6.c:914 in6_ifdetach(ffff800000d1d800) at in6_ifdetach+0x74 sys/netinet6/in6_ifattach.c:422 if_detach(ffff800000d1d800) at if_detach+0x155 sys/net/if.c:1110 tun_clone_destroy(ffff800000d1d800) at tun_clone_destroy+0x1c0 sys/net/if_tun.c:278 ifioctl(fffffd8036ff1480,80206979,ffff800017b36f20,ffff8000ffff38c8) at ifioctl+0x3d4 sys/net/if.c:1877 sys_ioctl(ffff8000ffff38c8,ffff800017b37038,ffff800017b37080) at sys_ioctl+0x5b9 syscall(ffff800017b37100) at syscall+0x507 sys/arch/amd64/amd64/trap.c:555 Xsyscall(6,0,ffffffffffffff36,0,3,2fa6af4c010) at Xsyscall+0x128 end of kernel end trace frame: 0x2fd3ba94a20, count: -8 ddb> show registers rdi 0xffffffff816469d8 rtfree+0x58 rsi 0x2dbb9 acpi_pdirpa+0x19a21 rbp 0xffff800017b36d20 rbx 0 rdx 0x2dbba acpi_pdirpa+0x19a22 rcx 0xffff800015510000 rax 0 r8 0xffff800000a45200 r9 0x1 r10 0x160ba3e668a2aca r11 0xa4d2229f39289cb2 r12 0x38f38b1700 r13 0 r14 0xffff800000a45300 r15 0xffff800000d1d800 rip 0xffffffff81b36da5 in6_purgeaddr+0x135 cs 0x8 rflags 0x10206 __ALIGN_SIZE+0xf206 rsp 0xffff800017b36cb0 ss 0x10 in6_purgeaddr+0x135: movq 0x8(%r12),%r13 ddb> show proc PROC (syz-executor.0) pid=472265 stat=onproc flags process=0 proc=4000000 pri=86, usrpri=86, nice=20 forw=0xffffffffffffffff, list=0xffff8000ffff3b40,0xffffffff82592f90 process=0xffff8000ffff6010 user=0xffff800017b32000, vmspace=0xfffffd803f013440 estcpu=36, cpticks=1, pctcpu=0.0 user=0, sys=1, intr=0 ddb> ps PID TID PPID UID S FLAGS WAIT COMMAND 8785 244603 45358 0 2 0 syz-executor.0 * 8785 472265 45358 0 7 0x4000000 syz-executor.0 45358 255714 65710 0 3 0x82 nanosleep syz-executor.0 20333 262404 65710 0 2 0x2 syz-executor.1 33507 509990 0 0 3 0x14200 acct acct 11371 473896 1 0 3 0x100083 ttyin getty 83503 353187 0 0 3 0x14200 bored sosplice 65710 116680 50806 0 3 0x82 thrsleep syz-fuzzer 65710 327949 50806 0 3 0x4000082 nanosleep syz-fuzzer 65710 321699 50806 0 3 0x4000082 thrsleep syz-fuzzer 65710 88833 50806 0 3 0x4000082 thrsleep syz-fuzzer 65710 246600 50806 0 3 0x4000082 thrsleep syz-fuzzer 65710 363809 50806 0 3 0x4000082 kqread syz-fuzzer 65710 273831 50806 0 3 0x4000082 thrsleep syz-fuzzer 65710 441844 50806 0 3 0x4000082 thrsleep syz-fuzzer 65710 438863 50806 0 3 0x4000082 thrsleep syz-fuzzer 50806 37330 95431 0 3 0x10008a pause ksh 95431 152303 92405 0 3 0x92 select sshd 92405 489487 1 0 3 0x80 select sshd 72361 181525 47532 73 3 0x100090 kqread syslogd 47532 179260 1 0 3 0x100082 netio syslogd 66955 370657 0 0 2 0x14200 zerothread 43232 301436 0 0 3 0x14200 aiodoned aiodoned 42682 42065 0 0 3 0x14200 syncer update 88877 484236 0 0 3 0x14200 cleaner cleaner 48889 214416 0 0 3 0x14200 reaper reaper 71781 286357 0 0 3 0x14200 pgdaemon pagedaemon 89301 201562 0 0 3 0x14200 bored crynlk 12562 473876 0 0 3 0x14200 bored crypto 36812 172621 0 0 3 0x40014200 acpi0 acpi0 11800 445077 0 0 3 0x14200 bored softnet 80086 344167 0 0 2 0x14200 systqmp 48419 185488 0 0 3 0x14200 bored systq 94789 291725 0 0 3 0x40014200 bored softclock 23627 367448 0 0 3 0x40014200 idle0 19938 477873 0 0 3 0x14200 bored smr 1 65395 0 0 3 0x82 wait init 0 0 -1 0 3 0x10200 scheduler swapper ddb> show all locks No such command ddb> show malloc Type InUse MemUse HighUse Limit Requests Type Lim Kern Lim devbuf 9648 6957K 8047K 78643K 21562 0 0 pcb 13 10K 12K 78643K 1175 0 0 rtable 140 14K 15K 78643K 2542 0 0 ifaddr 110 23K 24K 78643K 787 0 0 counters 19 16K 16K 78643K 19 0 0 ioctlops 0 0K 2K 78643K 299 0 0 iov 0 0K 24K 78643K 1265 0 0 mount 1 1K 1K 78643K 1 0 0 vnodes 1220 77K 77K 78643K 5550 0 0 UFS quota 1 32K 32K 78643K 1 0 0 UFS mount 5 36K 36K 78643K 5 0 0 shm 2 1K 5K 78643K 75 0 0 VM map 37 9K 9K 78643K 81 0 0 sem 12 0K 1K 78643K 2700 0 0 dirhash 12 2K 2K 78643K 12 0 0 ACPI 1793 195K 288K 78643K 12645 0 0 file desc 5 13K 25K 78643K 4766 0 0 sigio 0 0K 0K 78643K 88 0 0 proc 44 30K 63K 78643K 2046 0 0 subproc 32 2K 2K 78643K 595 0 0 NFS srvsock 1 0K 0K 78643K 1 0 0 NFS daemon 1 16K 16K 78643K 1 0 0 ip_moptions 0 0K 0K 78643K 3423 0 0 in_multi 32 2K 2K 78643K 754 0 0 ether_multi 1 0K 0K 78643K 32 0 0 mrt 0 0K 0K 78643K 34 0 0 ISOFS mount 1 32K 32K 78643K 1 0 0 MSDOSFS mount 1 16K 16K 78643K 1 0 0 ttys 390 1722K 1722K 78643K 390 0 0 exec 0 0K 1K 78643K 1153 0 0 pfkey data 0 0K 4K 78643K 4 0 0 pagedep 1 8K 8K 78643K 1 0 0 inodedep 1 32K 32K 78643K 1 0 0 newblk 1 0K 0K 78643K 1 0 0 VM swap 7 26K 26K 78643K 7 0 0 UVM amap 195 317K 317K 78643K 13546 0 0 UVM aobj 130 4K 4K 78643K 139 0 0 memdesc 1 4K 4K 78643K 1 0 0 crypto data 1 1K 1K 78643K 1 0 0 ip6_options 0 0K 1K 78643K 1045 0 0 NDP 25 0K 1K 78643K 267 0 0 temp 261 3545K 4185K 78643K 195490 0 0 kqueue 0 0K 0K 78643K 62 0 0 SYN cache 2 16K 16K 78643K 2 0 0 ddb> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle arp 64 90 0 85 1 0 1 1 0 8 0 rtpcb 80 619 0 619 6 5 1 1 0 8 1 rtentry 112 613 0 562 2 0 2 2 0 8 0 unpcb 120 3933 0 3913 9 7 2 2 0 8 1 syncache 264 37 0 37 12 11 1 1 0 8 1 tcpqe 32 233 0 233 6 6 0 1 0 8 0 tcpcb 544 4790 0 4786 38 36 2 15 0 8 1 ipq 40 76 0 76 24 24 0 1 0 8 0 ipqe 40 2064 0 2064 24 24 0 1 0 8 0 inpcb 280 8865 0 8860 33 31 2 9 0 8 1 rttmr 72 10 0 10 8 8 0 1 0 8 0 ip6q 72 3 0 3 2 2 0 1 0 8 0 ip6af 40 6 0 6 1 1 0 1 0 8 0 nd6 48 91 0 88 5 4 1 1 0 8 0 pkpcb 40 17 0 17 6 6 0 1 0 8 0 swfcl 56 2 0 0 1 0 1 1 0 8 0 ppxss 1128 70 0 70 19 19 0 1 0 8 0 art_heap8 4096 34 0 32 13 11 2 4 0 8 0 art_heap4 256 2769 0 2528 43 27 16 19 0 8 0 art_table 32 2803 0 2560 7 4 3 3 0 8 0 art_node 16 611 0 567 1 0 1 1 0 8 0 sysvmsgpl 40 83 0 56 1 0 1 1 0 8 0 semupl 112 2 0 2 1 1 0 1 0 8 0 semapl 112 2698 0 2688 1 0 1 1 0 8 0 shmpl 112 137 0 9 4 0 4 4 0 8 0 dirhash 1024 17 0 0 3 0 3 3 0 8 0 dino1pl 128 9300 0 7889 46 0 46 46 0 8 0 ffsino 240 9300 0 7889 84 0 84 84 0 8 0 nchpl 144 17084 0 16527 62 40 22 60 0 8 0 uvmvnodes 72 9045 0 0 165 0 165 165 0 8 0 vnodes 208 9045 0 0 477 0 477 477 0 8 0 namei 1024 70516 0 70515 10 9 1 1 0 8 0 vcpupl 1984 35 0 0 5 0 5 5 0 8 0 vmpool 520 79 0 44 4 1 3 3 0 8 0 scsiplug 64 5 0 5 3 3 0 1 0 8 0 scxspl 192 83307 0 83307 30 28 2 6 0 8 2 plimitpl 152 419 0 413 1 0 1 1 0 8 0 sigapl 432 4838 0 4827 2 0 2 2 0 8 0 futexpl 56 192270 0 192270 12 11 1 1 0 8 1 knotepl 112 3364 0 3345 12 11 1 3 0 8 0 kqueuepl 104 6886 0 6884 4 3 1 4 0 8 0 pipepl 112 8236 0 8217 18 17 1 2 0 8 0 fdescpl 424 4839 0 4827 2 0 2 2 0 8 0 filepl 120 63344 0 63257 57 52 5 11 0 8 2 lockfpl 104 1901 0 1901 5 4 1 1 0 8 1 lockfspl 48 633 0 633 5 4 1 1 0 8 1 sessionpl 112 51 0 43 1 0 1 1 0 8 0 pgrppl 48 128 0 120 1 0 1 1 0 8 0 ucredpl 96 10506 0 10500 1 0 1 1 0 8 0 zombiepl 144 4827 0 4827 1 0 1 1 0 8 1 processpl 864 4855 0 4827 4 0 4 4 0 8 0 procpl 632 11134 0 11097 6 2 4 5 0 8 0 sosppl 128 100 0 100 26 25 1 1 0 8 1 sockpl 384 13533 0 13507 58 52 6 14 0 8 2 mcl64k 65536 1644 0 1644 130 127 3 33 0 8 3 mcl16k 16384 86 0 86 20 19 1 1 0 8 1 mcl12k 12288 184 0 184 19 18 1 1 0 8 1 mcl9k 9216 108 0 108 19 18 1 1 0 8 1 mcl8k 8192 313 0 313 14 13 1 1 0 8 1 mcl4k 4096 580 0 580 12 11 1 1 0 8 1 mcl2k2 2112 43 0 43 22 21 1 1 0 8 1 mcl2k 2048 79273 0 79225 27 20 7 14 0 8 0 mtagpl 80 176 0 166 6 5 1 1 0 8 0 mbufpl 256 179135 0 179012 206 192 14 39 0 8 0 bufpl 256 31902 0 22263 604 0 604 604 0 8 0 anonpl 16 663501 0 642529 298 198 100 114 0 62 10 amapchunkpl 152 30314 0 30162 137 127 10 21 0 158 3 amappl16 192 30335 0 29112 335 265 70 82 0 8 8 amappl15 184 1413 0 1412 1 0 1 1 0 8 0 amappl14 176 1045 0 1040 1 0 1 1 0 8 0 amappl13 168 263 0 261 5 4 1 1 0 8 0 amappl12 160 893 0 893 7 7 0 1 0 8 0 amappl11 152 531 0 526 1 0 1 1 0 8 0 amappl10 144 314 0 312 1 0 1 1 0 8 0 amappl9 136 1890 0 1887 1 0 1 1 0 8 0 amappl8 128 1482 0 1419 3 0 3 3 0 8 0 amappl7 120 436 0 427 1 0 1 1 0 8 0 amappl6 112 456 0 437 1 0 1 1 0 8 0 amappl5 104 1476 0 1469 1 0 1 1 0 8 0 amappl4 96 4657 0 4630 1 0 1 1 0 8 0 amappl3 88 1481 0 1475 1 0 1 1 0 8 0 amappl2 80 36968 0 36902 3 1 2 3 0 8 0 amappl1 72 101725 0 101348 27 19 8 20 0 8 0 amappl 80 11929 0 11869 2 0 2 2 0 84 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 253 0 253 1 1 0 1 0 8 0 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 17 0 17 1 1 0 1 0 8 0 aobjpl 64 138 0 9 3 0 3 3 0 8 0 uaddrrnd 24 4918 0 4827 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 4918 0 4827 1 0 1 1 0 8 0 vmmpekpl 168 45400 0 45363 2 0 2 2 0 8 0 vmmpepl 168 607584 0 605224 537 390 147 152 0 357 36 vmsppl 272 4838 0 4827 7 6 1 2 0 8 0 pdppl 4096 9842 0 9777 16 7 9 9 0 8 0 pvpl 32 1907321 0 1884523 753 480 273 336 0 265 80 pmappl 200 4917 0 4871 5 2 3 3 0 8 0 extentpl 40 41 0 26 1 0 1 1 0 8 0 phpool 112 1229 0 480 23 0 23 23 0 8 0