>¡ï¯&$aH%òW¤)Ño$g-uvm_fault(0xfffffd807f00a170, 0x757341aa, 0, 1) -> e kernel: page fault trap, code=0 Stopped at in6_purgeaddr+0x135: movq 0x8(%r12),%r13 ddb{1}> ddb{1}> set $lines = 0 ddb{1}> set $maxwidth = 0 ddb{1}> show panic kernel page fault uvm_fault(0xfffffd807f00a170, 0x757341aa, 0, 1) -> e in6_purgeaddr(ffff800000b81300) at in6_purgeaddr+0x135 sys/netinet6/in6.c:914 end trace frame: 0xffff80002279b0f0, count: 0 ddb{1}> trace in6_purgeaddr(ffff800000b81300) at in6_purgeaddr+0x135 sys/netinet6/in6.c:914 in6_ifdetach(ffff800000b51800) at in6_ifdetach+0x74 sys/netinet6/in6_ifattach.c:422 if_detach(ffff800000b51800) at if_detach+0x185 sys/net/if.c:1127 tun_clone_destroy(ffff800000b51800) at tun_clone_destroy+0x1c7 sys/net/if_tun.c:278 ifioctl(fffffd807b332660,80206979,ffff80002279b280,ffff800020b5c298) at ifioctl+0x3f0 sys/net/if.c:1893 sys_ioctl(ffff800020b5c298,ffff80002279b398,ffff80002279b3e0) at sys_ioctl+0x5b9 syscall(ffff80002279b460) at syscall+0x4a4 mi_syscall sys/sys/syscall_mi.h:92 [inline] syscall(ffff80002279b460) at syscall+0x4a4 sys/arch/amd64/amd64/trap.c:555 Xsyscall(6,0,ffffffffffffff36,0,3,e7489117010) at Xsyscall+0x128 end of kernel end trace frame: 0xe775cd993d0, count: -8 ddb{1}> show registers rdi 0xffffffff816aef79 rtfree+0x59 rsi 0x15d9c acpi_pdirpa+0x1c04 rbp 0xffff80002279b080 rbx 0xffff800000b7fe00 rdx 0x15d9d acpi_pdirpa+0x1c05 rcx 0xffff8000229a0000 rax 0 r8 0xffffffff816b2454 rt_ifa_dellocal+0x44 r9 0x1 r10 0x18 r11 0xc672502eae12a9eb r12 0x757341a2 r13 0 r14 0xffff800000b81300 r15 0xffff800000b51800 rip 0xffffffff817d6ab5 in6_purgeaddr+0x135 cs 0x8 rflags 0x10202 __ALIGN_SIZE+0xf202 rsp 0xffff80002279b010 ss 0x10 in6_purgeaddr+0x135: movq 0x8(%r12),%r13 ddb{1}> show proc PROC (syz-executor.0) pid=19248 stat=onproc flags process=0 proc=4000000 pri=86, usrpri=86, nice=20 forw=0xffffffffffffffff, list=0xffff800020b5db48,0xffffffff82646fa0 process=0xffff800020a8a710 user=0xffff800022796000, vmspace=0xfffffd807f00a170 estcpu=36, cpticks=1, pctcpu=0.0 user=0, sys=1, intr=0 ddb{1}> ps PID TID PPID UID S FLAGS WAIT COMMAND 4362 84831 29235 0 7 0 syz-executor.0 * 4362 19248 29235 0 7 0x4000000 syz-executor.0 29235 146933 71303 0 3 0x82 nanosleep syz-executor.0 91486 119642 71303 0 3 0x82 nanosleep syz-executor.1 86037 439854 1 0 3 0x100083 ttyopn getty 7083 481569 0 0 3 0x14200 bored sosplice 71303 4141 35447 0 3 0x82 thrsleep syz-fuzzer 71303 189029 35447 0 3 0x4000082 nanosleep syz-fuzzer 71303 366634 35447 0 3 0x4000082 thrsleep syz-fuzzer 71303 523247 35447 0 3 0x4000082 thrsleep syz-fuzzer 71303 271472 35447 0 3 0x4000082 thrsleep syz-fuzzer 71303 298563 35447 0 3 0x4000082 thrsleep syz-fuzzer 71303 320314 35447 0 3 0x4000082 thrsleep syz-fuzzer 71303 380348 35447 0 3 0x4000082 kqread syz-fuzzer 71303 1581 35447 0 3 0x4000082 thrsleep syz-fuzzer 71303 78797 35447 0 3 0x4000082 nanosleep syz-fuzzer 35447 161882 39896 0 3 0x10008a pause ksh 39896 520414 92291 0 3 0x92 select sshd 92291 180960 1 0 3 0x80 select sshd 50980 230349 40882 74 3 0x100092 bpf pflogd 40882 109704 1 0 3 0x80 netio pflogd 56534 135496 90108 73 3 0x100090 kqread syslogd 90108 386131 1 0 3 0x100082 netio syslogd 37819 262657 0 0 3 0x14200 pgzero zerothread 25797 470583 0 0 3 0x14200 aiodoned aiodoned 8096 15221 0 0 3 0x14200 syncer update 24793 193579 0 0 3 0x14200 cleaner cleaner 6397 392649 0 0 3 0x14200 reaper reaper 86580 367382 0 0 3 0x14200 pgdaemon pagedaemon 87385 192704 0 0 3 0x14200 bored crynlk 56731 346849 0 0 3 0x14200 bored crypto 92417 55688 0 0 3 0x40014200 acpi0 acpi0 57204 216639 0 0 3 0x40014200 idle1 36146 297509 0 0 3 0x14200 bored softnet 20807 391928 0 0 2 0x14200 systqmp 2340 5027 0 0 3 0x14200 bored systq 18725 424335 0 0 3 0x40014200 bored softclock 41022 188652 0 0 3 0x40014200 idle0 30924 359846 0 0 3 0x14200 bored smr 1 419342 0 0 3 0x82 wait init 0 0 -1 0 3 0x10200 scheduler swapper ddb{1}> show all locks Process 4362 (syz-executor.0) thread 0xffff800020b5c298 (19248) exclusive rwlock netlock r = 0 (0xffffffff824d4548) #0 witness_lock+0x52e sys/kern/subr_witness.c:1163 #1 if_detach+0xad sys/net/if.c:1102 #2 tun_clone_destroy+0x1c7 sys/net/if_tun.c:278 #3 ifioctl+0x3f0 sys/net/if.c:1893 #4 sys_ioctl+0x5b9 #5 syscall+0x4a4 mi_syscall sys/sys/syscall_mi.h:92 [inline] #5 syscall+0x4a4 sys/arch/amd64/amd64/trap.c:555 #6 Xsyscall+0x128 exclusive kernel_lock &kernel_lock r = 1 (0xffffffff82677638) #0 witness_lock+0x52e sys/kern/subr_witness.c:1163 #1 syscall+0x400 mi_syscall sys/sys/syscall_mi.h:83 [inline] #1 syscall+0x400 sys/arch/amd64/amd64/trap.c:555 #2 Xsyscall+0x128 ddb{1}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim Kern Lim devbuf 9629 7064K 8550K 78643K 36204 0 0 pcb 13 12K 14K 78643K 1953 0 0 rtable 177 18K 19K 78643K 4793 0 0 ifaddr 129 32K 35K 78643K 1552 0 0 counters 39 33K 33K 78643K 39 0 0 ioctlops 0 0K 4K 78643K 1936 0 0 iov 0 0K 28K 78643K 1802 0 0 mount 1 1K 1K 78643K 1 0 0 vnodes 1218 76K 78K 78643K 9861 0 0 UFS quota 1 32K 32K 78643K 1 0 0 UFS mount 5 36K 36K 78643K 5 0 0 shm 2 1K 9K 78643K 135 0 0 VM map 81 40K 41K 78643K 111 0 0 sem 12 0K 1K 78643K 1863 0 0 dirhash 12 2K 2K 78643K 12 0 0 ACPI 1808 196K 290K 78643K 12765 0 0 file desc 5 13K 25K 78643K 8210 0 0 sigio 0 0K 0K 78643K 140 0 0 proc 56 51K 95K 78643K 3502 0 0 subproc 32 2K 2K 78643K 952 0 0 NFS srvsock 1 0K 0K 78643K 1 0 0 NFS daemon 1 16K 16K 78643K 1 0 0 ip_moptions 0 0K 1K 78643K 804 0 0 in_multi 34 2K 3K 78643K 1075 0 0 ether_multi 1 0K 0K 78643K 94 0 0 mrt 0 0K 0K 78643K 38 0 0 ISOFS mount 1 32K 32K 78643K 1 0 0 MSDOSFS mount 1 16K 16K 78643K 1 0 0 ttys 102 450K 450K 78643K 102 0 0 exec 0 0K 1K 78643K 1706 0 0 pagedep 1 8K 8K 78643K 1 0 0 inodedep 1 32K 32K 78643K 1 0 0 newblk 1 0K 0K 78643K 1 0 0 VM swap 7 26K 26K 78643K 7 0 0 UVM amap 264 620K 625K 78643K 30588 0 0 UVM aobj 130 8K 8K 78643K 134 0 0 memdesc 1 4K 4K 78643K 1 0 0 crypto data 1 1K 1K 78643K 1 0 0 ip6_options 0 0K 2K 78643K 1885 0 0 NDP 25 0K 1K 78643K 492 0 0 temp 239 3561K 4201K 78643K 340007 0 0 kqueue 0 0K 0K 78643K 210 0 0 SYN cache 2 16K 16K 78643K 2 0 0 ddb{1}> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle arp 64 129 0 125 1 0 1 1 0 8 0 plcache 128 20 0 0 1 0 1 1 0 8 0 rtpcb 80 891 0 891 2 1 1 1 0 8 1 rtentry 112 880 0 809 3 0 3 3 0 8 0 unpcb 120 7502 0 7490 25 24 1 2 0 8 0 syncache 264 44 0 44 17 17 0 1 0 8 0 tcpqe 32 19 0 19 12 12 0 1 0 8 0 tcpcb 544 11713 0 11708 41 39 2 11 0 8 1 inpcb 280 28243 0 28237 53 50 3 13 0 8 2 rttmr 72 12 0 12 10 10 0 1 0 8 0 ip6q 72 4 0 4 3 3 0 1 0 8 0 ip6af 40 9 0 9 3 3 0 1 0 8 0 nd6 48 136 0 132 2 1 1 1 0 8 0 pkpcb 40 29 0 29 14 14 0 1 0 8 0 swfcl 56 2 0 0 1 0 1 1 0 8 0 ppxss 1128 213 0 213 22 21 1 1 0 8 1 pffrag 232 225 0 225 29 29 0 1 0 482 0 pffrnode 88 225 0 225 29 29 0 1 0 8 0 pffrent 40 7705 0 7705 29 29 0 1 0 8 0 pfosfp 40 846 0 423 5 0 5 5 0 8 0 pfosfpen 112 1428 0 714 21 0 21 21 0 8 0 pfstitem 24 655 0 596 1 0 1 1 0 8 0 pfstkey 112 657 0 598 3 0 3 3 0 8 0 pfstate 328 657 0 597 9 2 7 7 0 8 0 pfrule 1360 21 0 16 2 1 1 2 0 8 0 art_heap8 4096 11 0 5 9 3 6 6 0 8 0 art_heap4 256 4268 0 3949 53 28 25 25 0 8 1 art_table 32 4279 0 3954 7 3 4 4 0 8 0 art_node 16 876 0 821 1 0 1 1 0 8 0 sysvmsgpl 40 52 0 39 1 0 1 1 0 8 0 semapl 112 1861 0 1851 1 0 1 1 0 8 0 shmpl 112 132 0 4 4 0 4 4 0 8 0 dirhash 1024 17 0 0 3 0 3 3 0 8 0 dino1pl 128 14343 0 12890 48 0 48 48 0 8 0 ffsino 272 14343 0 12890 98 0 98 98 0 8 0 nchpl 144 27180 0 26715 61 42 19 61 0 8 0 uvmvnodes 72 6904 0 0 126 0 126 126 0 8 0 vnodes 208 6904 0 0 364 0 364 364 0 8 0 namei 1024 99390 0 99390 3 2 1 1 0 8 1 percpumem 16 30 0 0 1 0 1 1 0 8 0 vcpupl 1984 80 0 1 10 0 10 10 0 8 0 vmpool 552 109 0 30 6 0 6 6 0 8 0 scsiplug 64 24 0 24 13 13 0 1 0 8 0 scxspl 192 95068 0 95068 60 59 1 6 0 8 1 plimitpl 152 706 0 698 1 0 1 1 0 8 0 sigapl 432 8251 0 8238 3 1 2 3 0 8 0 futexpl 56 214686 0 214686 1 0 1 1 0 8 1 knotepl 112 2141 0 2122 7 6 1 3 0 8 0 kqueuepl 104 2391 0 2389 4 3 1 4 0 8 0 pipepl 112 5138 0 5119 13 12 1 2 0 8 0 fdescpl 488 8252 0 8238 3 0 3 3 0 8 0 filepl 152 88028 0 87938 61 54 7 14 0 8 3 lockfpl 104 5946 0 5946 1 0 1 1 0 8 1 lockfspl 48 1904 0 1904 1 0 1 1 0 8 1 sessionpl 112 77 0 68 1 0 1 1 0 8 0 pgrppl 48 235 0 226 1 0 1 1 0 8 0 ucredpl 96 9346 0 9334 1 0 1 1 0 8 0 zombiepl 144 8240 0 8239 2 1 1 1 0 8 0 processpl 896 8270 0 8239 4 0 4 4 0 8 0 procpl 632 26747 0 26706 5 0 5 5 0 8 0 srpgc 64 117 0 115 26 25 1 1 0 8 0 sosppl 128 211 0 211 33 32 1 1 0 8 1 sockpl 384 36807 0 36789 103 98 5 22 0 8 1 mcl64k 65536 321 0 0 38 18 20 34 0 8 1 mcl16k 16384 22 0 0 3 1 2 3 0 8 0 mcl12k 12288 41 0 0 2 0 2 2 0 8 0 mcl9k 9216 49 0 0 4 2 2 2 0 8 0 mcl8k 8192 33 0 0 4 1 3 3 0 8 0 mcl4k 4096 17 0 0 3 0 3 3 0 8 0 mcl2k2 2112 17 0 0 2 0 2 2 0 8 0 mcl2k 2048 256 0 0 25 12 13 25 0 8 0 mtagpl 80 295 0 0 5 3 2 5 0 8 0 mbufpl 256 887 0 0 43 0 43 43 0 8 0 bufpl 256 32749 0 25691 442 0 442 442 0 8 0 anonpl 16 1042380 0 1000812 343 163 180 187 0 124 13 amapchunkpl 152 64354 0 62906 157 97 60 62 0 158 3 amappl16 192 44219 0 42949 259 187 72 76 0 8 4 amappl15 184 934 0 934 9 9 0 1 0 8 0 amappl14 176 922 0 915 1 0 1 1 0 8 0 amappl13 168 1102 0 1101 7 6 1 1 0 8 0 amappl12 160 1635 0 1632 1 0 1 1 0 8 0 amappl11 152 1597 0 1589 1 0 1 1 0 8 0 amappl10 144 1040 0 1031 1 0 1 1 0 8 0 amappl9 136 2164 0 2159 1 0 1 1 0 8 0 amappl8 128 1797 0 1722 4 1 3 3 0 8 0 amappl7 120 1270 0 1261 1 0 1 1 0 8 0 amappl6 112 1475 0 1461 1 0 1 1 0 8 0 amappl5 104 2254 0 2242 1 0 1 1 0 8 0 amappl4 96 7570 0 7539 1 0 1 1 0 8 0 amappl3 88 2416 0 2410 1 0 1 1 0 8 0 amappl2 80 62954 0 62890 3 1 2 3 0 8 0 amappl1 72 196361 0 195950 25 15 10 20 0 8 0 amappl 80 28128 0 28042 2 0 2 2 0 84 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 253 0 253 1 1 0 1 0 8 0 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 17 0 17 1 1 0 1 0 8 0 aobjpl 64 133 0 4 3 0 3 3 0 8 0 uaddrrnd 24 8361 0 8238 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 8361 0 8238 1 0 1 1 0 8 0 vmmpekpl 168 67558 0 67512 4 1 3 3 0 8 0 vmmpepl 168 1072517 0 1070006 424 265 159 161 0 357 38 vmsppl 368 8251 0 8238 2 0 2 2 0 8 0 pdppl 4096 16729 0 16615 19 4 15 15 0 8 0 pvpl 32 2647850 0 2624932 535 310 225 237 0 265 26 pmappl 232 8360 0 8268 7 1 6 6 0 8 0 extentpl 40 41 0 26 1 0 1 1 0 8 0 phpool 112 790 0 111 20 0 20 20 0 8 0