uvm_fault(0xfffffd807f008170, 0xa12, 0, 1) -> e kernel: page fault trap, code=0 Stopped at in6_purgeaddr+0x135: movq 0x8(%r12),%r13 ddb{1}> ddb{1}> set $lines = 0 ddb{1}> set $maxwidth = 0 ddb{1}> show panic kernel page fault uvm_fault(0xfffffd807f008170, 0xa12, 0, 1) -> e in6_purgeaddr(ffff800000b41100) at in6_purgeaddr+0x135 sys/netinet6/in6.c:914 end trace frame: 0xffff800023b64c40, count: 0 ddb{1}> trace in6_purgeaddr(ffff800000b41100) at in6_purgeaddr+0x135 sys/netinet6/in6.c:914 in6_ifdetach(ffff800000ac5000) at in6_ifdetach+0x74 sys/netinet6/in6_ifattach.c:422 if_detach(ffff800000ac5000) at if_detach+0x155 sys/net/if.c:1110 tun_clone_destroy(ffff800000ac5000) at tun_clone_destroy+0x1c7 sys/net/if_tun.c:278 spec_close(ffff800023b64d70) at spec_close+0x311 sys/kern/spec_vnops.c:555 VOP_CLOSE(fffffd806e2bb0d8,7,fffffd807f7c6a20,ffff800020ace518) at VOP_CLOSE+0xc0 sys/kern/vfs_vops.c:175 vn_closefile(fffffd80617f1558,ffff800020ace518) at vn_closefile+0xd8 vn_close sys/kern/vfs_vnops.c:301 [inline] vn_closefile(fffffd80617f1558,ffff800020ace518) at vn_closefile+0xd8 sys/kern/vfs_vnops.c:613 fdrop(fffffd80617f1558,ffff800020ace518) at fdrop+0xc2 sys/kern/kern_descrip.c:1273 closef(fffffd80617f1558,ffff800020ace518) at closef+0x11d sys/kern/kern_descrip.c:1257 fdfree(ffff800020ace518) at fdfree+0x101 sys/kern/kern_descrip.c:1189 exit1(ffff800020ace518,19,1) at exit1+0x32f sys/kern/kern_exit.c:196 postsig(ffff800020ace518,19) at postsig+0x4e3 sigexit sys/kern/kern_sig.c:1499 [inline] postsig(ffff800020ace518,19) at postsig+0x4e3 sys/kern/kern_sig.c:1431 userret(ffff800020ace518) at userret+0x199 sys/kern/kern_sig.c:1889 syscall(ffff800023b651f0) at syscall+0x55f mi_syscall_return sys/sys/syscall_mi.h:115 [inline] syscall(ffff800023b651f0) at syscall+0x55f sys/arch/amd64/amd64/trap.c:577 Xsyscall(6,0,4,57,b07e4,7f7ffffcca84) at Xsyscall+0x128 end of kernel end trace frame: 0x7f7ffffccad0, count: -15 ddb{1}> show registers rdi 0 rsi 0 rbp 0xffff800023b64bd0 rbx 0xffff800000b41500 rdx 0x205 rcx 0x206 rax 0 r8 0xffffffff819dccf4 rt_ifa_dellocal+0x44 r9 0x1 r10 0x18 r11 0xf47652ac85f7fcab r12 0xa0a r13 0 r14 0xffff800000b41100 r15 0xffff800000ac5000 rip 0xffffffff8142a7b5 in6_purgeaddr+0x135 cs 0x8 rflags 0x10206 __ALIGN_SIZE+0xf206 rsp 0xffff800023b64b60 ss 0x10 in6_purgeaddr+0x135: movq 0x8(%r12),%r13 ddb{1}> show proc PROC (syz-executor.0) pid=397599 stat=onproc flags process=a proc=2000 pri=86, usrpri=86, nice=20 forw=0xffffffffffffffff, list=0xffff800020abe508,0xffff800020abea08 process=0xffff800020adc380 user=0xffff800023b60000, vmspace=0xfffffd807f008170 estcpu=36, cpticks=2, pctcpu=0.23 user=0, sys=2, intr=0 ddb{1}> ps PID TID PPID UID S FLAGS WAIT COMMAND 37629 505984 65 0 3 0x82 nanosleep syz-executor.1 44024 267794 1 0 3 0x100083 ttyin getty 46610 341064 0 0 3 0x14200 bored sosplice 34113 234630 0 0 3 0x14200 acct acct 65 231615 28208 0 3 0x82 thrsleep syz-fuzzer 65 59378 28208 0 3 0x4000082 thrsleep syz-fuzzer 65 164978 28208 0 3 0x4000082 thrsleep syz-fuzzer 65 157543 28208 0 3 0x4000082 thrsleep syz-fuzzer 65 397170 28208 0 3 0x4000082 thrsleep syz-fuzzer 65 85810 28208 0 2 0x4000082 syz-fuzzer 65 193949 28208 0 3 0x4000082 thrsleep syz-fuzzer 65 449448 28208 0 3 0x4000082 thrsleep syz-fuzzer 65 207845 28208 0 3 0x4000082 thrsleep syz-fuzzer 65 364751 28208 0 3 0x4000082 thrsleep syz-fuzzer 28208 283715 84426 0 3 0x10008a pause ksh 84426 178518 15445 0 3 0x92 select sshd 15445 294076 1 0 3 0x80 select sshd 38346 294207 93430 74 3 0x100092 bpf pflogd 93430 407801 1 0 3 0x80 netio pflogd 83694 273076 58649 73 3 0x100090 kqread syslogd 58649 67159 1 0 3 0x100082 netio syslogd 36357 449308 1 77 2 0x100010 dhclient 37870 30761 1 0 2 0 dhclient 86263 49721 0 0 2 0x14200 zerothread 47253 439108 0 0 3 0x14200 aiodoned aiodoned 59413 472171 0 0 3 0x14200 syncer update 49805 511584 0 0 3 0x14200 cleaner cleaner 84881 297896 0 0 7 0x14200 reaper 67680 508842 0 0 3 0x14200 pgdaemon pagedaemon 86060 168390 0 0 3 0x14200 bored crynlk 43353 146724 0 0 3 0x14200 bored crypto 59771 410347 0 0 3 0x40014200 acpi0 acpi0 54723 472051 0 0 3 0x40014200 idle1 25985 82574 0 0 2 0x14200 softnet 24689 233888 0 0 3 0x14200 bored systqmp 53745 175564 0 0 3 0x14200 bored systq 31260 169715 0 0 2 0x40014200 softclock 61687 403530 0 0 3 0x40014200 idle0 60353 283552 0 0 3 0x14200 bored smr 1 369878 0 0 3 0x82 wait init 0 0 -1 0 3 0x10200 scheduler swapper ddb{1}> show all locks ddb{1}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim Kern Lim devbuf 9635 7119K 9450K 78643K 43888 0 0 pcb 13 12K 14K 78643K 3855 0 0 rtable 187 19K 20K 78643K 6353 0 0 ifaddr 129 33K 34K 78643K 1859 0 0 counters 39 33K 33K 78643K 39 0 0 ioctlops 0 0K 4K 78643K 2036 0 0 iov 0 0K 28K 78643K 1982 0 0 mount 1 1K 1K 78643K 1 0 0 vnodes 1226 77K 78K 78643K 11691 0 0 UFS quota 1 32K 32K 78643K 1 0 0 UFS mount 5 36K 36K 78643K 5 0 0 shm 2 1K 5K 78643K 109 0 0 VM map 75 37K 37K 78643K 110 0 0 sem 12 0K 1K 78643K 2395 0 0 dirhash 12 2K 2K 78643K 12 0 0 ACPI 1809 196K 290K 78643K 12766 0 0 file desc 4 9K 25K 78643K 9299 0 0 sigio 0 0K 0K 78643K 155 0 0 proc 62 63K 95K 78643K 3897 0 0 subproc 23 1K 2K 78643K 1056 0 0 NFS srvsock 1 0K 0K 78643K 1 0 0 NFS daemon 1 16K 16K 78643K 1 0 0 ip_moptions 0 0K 1K 78643K 888 0 0 in_multi 41 2K 3K 78643K 1307 0 0 ether_multi 1 0K 0K 78643K 100 0 0 mrt 0 0K 0K 78643K 46 0 0 ISOFS mount 1 32K 32K 78643K 1 0 0 MSDOSFS mount 1 16K 16K 78643K 1 0 0 ttys 96 424K 424K 78643K 96 0 0 exec 0 0K 1K 78643K 1974 0 0 pfkey data 0 0K 0K 78643K 1 0 0 pagedep 1 8K 8K 78643K 1 0 0 inodedep 1 32K 32K 78643K 1 0 0 newblk 1 0K 0K 78643K 1 0 0 VM swap 7 26K 26K 78643K 7 0 0 UVM amap 258 571K 575K 78643K 34191 0 0 UVM aobj 130 4K 4K 78643K 132 0 0 memdesc 1 4K 4K 78643K 1 0 0 crypto data 1 1K 1K 78643K 1 0 0 ip6_options 0 0K 2K 78643K 2067 0 0 NDP 24 0K 1K 78643K 601 0 0 temp 257 3561K 4201K 78643K 277578 0 0 kqueue 0 0K 0K 78643K 103 0 0 SYN cache 2 16K 16K 78643K 2 0 0 ddb{1}> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle arp 64 186 0 182 1 0 1 1 0 8 0 plcache 128 20 0 0 1 0 1 1 0 8 0 rtpcb 80 3892 0 3890 1 0 1 1 0 8 0 rtentry 112 1174 0 1098 5 2 3 3 0 8 0 unpcb 120 15214 0 15196 32 30 2 2 0 8 1 syncache 264 42 0 42 18 17 1 1 0 8 1 tcpqe 32 12 0 12 8 8 0 1 0 8 0 tcpcb 544 5233 0 5226 77 76 1 14 0 8 0 inpcb 280 16865 0 16857 85 82 3 13 0 8 2 rttmr 72 16 0 16 10 10 0 1 0 8 0 ip6q 72 2 0 2 1 1 0 1 0 8 0 ip6af 40 4 0 4 1 1 0 1 0 8 0 nd6 48 181 0 179 3 2 1 1 0 8 0 pkpcb 40 60 0 60 16 16 0 1 0 8 0 swfcl 56 6 0 0 1 0 1 1 0 8 0 ppxss 1128 250 0 250 23 22 1 1 0 8 1 pffrag 232 243 0 243 19 18 1 1 0 482 1 pffrnode 88 239 0 239 19 18 1 1 0 8 1 pffrent 40 8347 0 8347 19 18 1 1 0 8 1 pfosfp 40 846 0 423 5 0 5 5 0 8 0 pfosfpen 112 1428 0 714 21 0 21 21 0 8 0 pfstitem 24 733 0 672 1 0 1 1 0 8 0 pfstkey 112 733 0 672 4 1 3 3 0 8 0 pfstate 328 733 0 671 10 2 8 8 0 8 0 pfrule 1360 21 0 16 2 1 1 2 0 8 0 art_heap8 4096 12 0 6 10 4 6 8 0 8 0 art_heap4 256 5163 0 4906 47 27 20 22 0 8 1 art_table 32 5175 0 4912 3 0 3 3 0 8 0 art_node 16 1168 0 1120 1 0 1 1 0 8 0 sysvmsgpl 40 16 0 9 1 0 1 1 0 8 0 semupl 112 2 0 2 1 1 0 1 0 8 0 semapl 112 2391 0 2381 1 0 1 1 0 8 0 shmpl 112 130 0 2 4 0 4 4 0 8 0 dirhash 1024 17 0 0 3 0 3 3 0 8 0 dino1pl 128 15562 0 14110 47 0 47 47 0 8 0 ffsino 272 15562 0 14110 98 1 97 97 0 8 0 nchpl 144 29581 0 29115 63 43 20 61 0 8 0 uvmvnodes 72 6769 0 0 124 0 124 124 0 8 0 vnodes 208 6769 0 0 357 0 357 357 0 8 0 namei 1024 115100 0 115100 6 5 1 1 0 8 1 percpumem 16 30 0 0 1 0 1 1 0 8 0 vcpupl 1984 74 0 1 10 0 10 10 0 8 0 vmpool 552 108 0 35 8 2 6 6 0 8 0 scsiplug 64 9 0 9 7 7 0 1 0 8 0 scxspl 192 96544 0 96543 55 52 3 4 0 8 2 plimitpl 152 757 0 749 1 0 1 1 0 8 0 sigapl 432 9322 0 9308 3 1 2 3 0 8 0 futexpl 56 239048 0 239048 5 4 1 1 0 8 1 knotepl 112 1898 0 1879 3 1 2 2 0 8 1 kqueuepl 104 2898 0 2896 16 15 1 4 0 8 0 pipepl 112 5914 0 5896 9 8 1 2 0 8 0 fdescpl 488 9323 0 9308 3 0 3 3 0 8 0 filepl 152 100618 0 100528 81 75 6 14 0 8 1 lockfpl 104 3670 0 3669 1 0 1 1 0 8 0 lockfspl 48 1286 0 1285 1 0 1 1 0 8 0 sessionpl 112 83 0 72 1 0 1 1 0 8 0 pgrppl 48 229 0 218 1 0 1 1 0 8 0 ucredpl 96 11204 0 11195 1 0 1 1 0 8 0 zombiepl 144 9309 0 9306 4 3 1 1 0 8 0 processpl 896 9340 0 9306 4 0 4 4 0 8 0 procpl 632 30043 0 30000 6 1 5 5 0 8 0 srpgc 64 123 0 123 27 27 0 1 0 8 0 sosppl 128 322 0 322 21 20 1 1 0 8 1 sockpl 384 36258 0 36230 138 132 6 22 0 8 2 mcl64k 65536 989 0 0 101 35 66 66 0 8 0 mcl16k 16384 30 0 0 4 1 3 3 0 8 0 mcl12k 12288 41 0 0 3 1 2 2 0 8 0 mcl9k 9216 26 0 0 2 0 2 2 0 8 0 mcl8k 8192 17 0 0 3 0 3 3 0 8 0 mcl4k 4096 25 0 0 4 1 3 3 0 8 0 mcl2k2 2112 7 0 0 1 0 1 1 0 8 0 mcl2k 2048 179 0 0 18 5 13 18 0 8 0 mtagpl 80 102 0 0 1 0 1 1 0 8 0 mbufpl 256 1151 0 0 50 0 50 50 0 8 0 bufpl 256 32508 0 25450 442 0 442 442 0 8 0 anonpl 16 1159419 0 1128295 322 195 127 141 0 124 0 amapchunkpl 152 72313 0 71578 160 129 31 36 0 158 0 amappl16 192 49689 0 48428 296 231 65 76 0 8 1 amappl15 184 863 0 861 7 6 1 1 0 8 0 amappl14 176 2630 0 2620 1 0 1 1 0 8 0 amappl13 168 948 0 948 7 7 0 1 0 8 0 amappl12 160 840 0 840 9 9 0 1 0 8 0 amappl11 152 2020 0 2005 1 0 1 1 0 8 0 amappl10 144 738 0 730 1 0 1 1 0 8 0 amappl9 136 2496 0 2492 1 0 1 1 0 8 0 amappl8 128 2125 0 2058 5 2 3 3 0 8 0 amappl7 120 955 0 947 1 0 1 1 0 8 0 amappl6 112 1861 0 1844 1 0 1 1 0 8 0 amappl5 104 1498 0 1483 1 0 1 1 0 8 0 amappl4 96 9935 0 9898 1 0 1 1 0 8 0 amappl3 88 2437 0 2428 1 0 1 1 0 8 0 amappl2 80 70607 0 70518 4 1 3 3 0 8 1 amappl1 72 220816 0 220367 26 16 10 20 0 8 0 amappl 80 31550 0 31458 3 0 3 3 0 84 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 253 0 253 1 1 0 1 0 8 0 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 64 131 0 2 3 0 3 3 0 8 0 uaddrrnd 24 9431 0 9308 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 9431 0 9308 1 0 1 1 0 8 0 vmmpekpl 168 74282 0 74230 3 0 3 3 0 8 0 vmmpepl 168 1206684 0 1204011 405 243 162 163 0 357 35 vmsppl 368 9322 0 9307 2 0 2 2 0 8 0 pdppl 4096 18869 0 18757 20 5 15 15 0 8 0 pvpl 32 2980472 0 2956963 531 332 199 233 0 265 4 pmappl 232 9430 0 9342 7 1 6 6 0 8 0 extentpl 40 46 0 29 1 0 1 1 0 8 0 phpool 112 889 0 163 22 1 21 22 0 8 0