uvm_fault(0xfffff1006cc875d8, 0x0, 0, 1) -> e kernel: page fault trap, code=0 Stopped at rtable_l2+0x7f: movzbl 0(%rax,%rcx,4),%r14d TID PID UID PRFLAGS PFLAGS CPU COMMAND 331443 18468 0 0 0 0 syz-executor *195261 34982 0 0 0x4000000 1K syz-executor rtable_l2(0) at rtable_l2+0x7f sys/net/rtable.c:315 pf_setup_pdesc(ffff80002a341c38,18,1,ffff800001627300,fffff1006dad9400,ffff80002a341d4e) at pf_setup_pdesc+0xb1 sys/net/pf.c:8065 pf_test(18,1,ffff800001612000,ffff80002a341ed0) at pf_test+0x329 sys/net/pf.c:8365 ip6_input_if(ffff80002a341ed0,ffff80002a341edc,29,0,ffff800001612000,ffff80002a341f38) at ip6_input_if+0x3d4 sys/netinet6/ip6_input.c:403 ipv6_input(ffff800001612000,fffff1006dad9400,ffff80002a341f38) at ipv6_input+0x5f sys/netinet6/ip6_input.c:256 tun_input_process(ffff800001612000,fffff1006dad9400) at tun_input_process+0x2fa sys/net/if_tun.c:1110 tun_dev_write(5d03,ffff80002a342318,ffff80002c380000,2) at tun_dev_write+0x710 tun_put sys/net/if_tun.c:-1 [inline] tun_dev_write(5d03,ffff80002a342318,ffff80002c380000,2) at tun_dev_write+0x710 sys/net/if_tun.c:1042 spec_write(ffff80002a342160) at spec_write+0x11f sys/kern/spec_vnops.c:302 VOP_WRITE(fffff1006e1052b8,ffff80002a342318,11,fffff100097fd6e8) at VOP_WRITE+0x101 sys/kern/vfs_vops.c:245 vn_write(fffff10066b03b88,ffff80002a342318,0) at vn_write+0x1d3 sys/kern/vfs_vnops.c:414 dofilewritev(ffff800045fee018,c8,ffff80002a342318,0,ffff80002a3423d0) at dofilewritev+0x2bd sys/kern/sys_generic.c:384 sys_write(ffff800045fee018,ffff80002a342480,ffff80002a3423d0) at sys_write+0xa2 sys/kern/sys_generic.c:300 syscall(ffff80002a342480) at syscall+0xbd4 mi_syscall sys/sys/syscall_mi.h:176 [inline] syscall(ffff80002a342480) at syscall+0xbd4 sys/arch/amd64/amd64/trap.c:791 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x902b83a76e0, count: 1 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb{1}> ddb{1}> set $lines = 0 ddb{1}> set $maxwidth = 0 ddb{1}> show panic *cpu1: uvm_fault(0xfffff1006cc875d8, 0x0, 0, 1) -> e ddb{1}> show kasan No such command ddb{1}> trace rtable_l2(0) at rtable_l2+0x7f sys/net/rtable.c:315 pf_setup_pdesc(ffff80002a341c38,18,1,ffff800001627300,fffff1006dad9400,ffff80002a341d4e) at pf_setup_pdesc+0xb1 sys/net/pf.c:8065 pf_test(18,1,ffff800001612000,ffff80002a341ed0) at pf_test+0x329 sys/net/pf.c:8365 ip6_input_if(ffff80002a341ed0,ffff80002a341edc,29,0,ffff800001612000,ffff80002a341f38) at ip6_input_if+0x3d4 sys/netinet6/ip6_input.c:403 ipv6_input(ffff800001612000,fffff1006dad9400,ffff80002a341f38) at ipv6_input+0x5f sys/netinet6/ip6_input.c:256 tun_input_process(ffff800001612000,fffff1006dad9400) at tun_input_process+0x2fa sys/net/if_tun.c:1110 tun_dev_write(5d03,ffff80002a342318,ffff80002c380000,2) at tun_dev_write+0x710 tun_put sys/net/if_tun.c:-1 [inline] tun_dev_write(5d03,ffff80002a342318,ffff80002c380000,2) at tun_dev_write+0x710 sys/net/if_tun.c:1042 spec_write(ffff80002a342160) at spec_write+0x11f sys/kern/spec_vnops.c:302 VOP_WRITE(fffff1006e1052b8,ffff80002a342318,11,fffff100097fd6e8) at VOP_WRITE+0x101 sys/kern/vfs_vops.c:245 vn_write(fffff10066b03b88,ffff80002a342318,0) at vn_write+0x1d3 sys/kern/vfs_vnops.c:414 dofilewritev(ffff800045fee018,c8,ffff80002a342318,0,ffff80002a3423d0) at dofilewritev+0x2bd sys/kern/sys_generic.c:384 sys_write(ffff800045fee018,ffff80002a342480,ffff80002a3423d0) at sys_write+0xa2 sys/kern/sys_generic.c:300 syscall(ffff80002a342480) at syscall+0xbd4 mi_syscall sys/sys/syscall_mi.h:176 [inline] syscall(ffff80002a342480) at syscall+0xbd4 sys/arch/amd64/amd64/trap.c:791 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x902b83a76e0, count: -14 ddb{1}> show registers rdi 0xffff80002c380000 rsi 0x38f0 __ALIGN_SIZE+0x28f0 rbp 0xffff80002a341b50 rbx 0x1 rdx 0xffff80002c380000 rcx 0 rax 0 r8 0xc8 r9 0xffff80002a341d4e r10 0x2074fdd2c9f178f2 r11 0xa517cda1c5e312d r12 0x3 r13 0xffff800001627300 r14 0 r15 0xffff800000c40e80 rip 0xffffffff82a02acf rtable_l2+0x7f cs 0x8 rflags 0x10246 __ALIGN_SIZE+0xf246 rsp 0xffff80002a341b10 ss 0x10 rtable_l2+0x7f: movzbl 0(%rax,%rcx,4),%r14d ddb{1}> show proc PROC (syz-executor) tid=195261 pid=34982 tcnt=3 stat=onproc flags process=0 proc=4000000 runpri=32, usrpri=86, slppri=32, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0 forw=0xffffffffffffffff, list=0xffff800045feea78,0xffffffff83b39548 process=0xffff800045ff5840 user=0xffff80002a33d000, vmspace=0xfffff1006cc875d8 estcpu=36, cpticks=1, pctcpu=0.0, user=0, sys=1, intr=0 ddb{1}> ps PID TID PPID UID S PRLAGS PFLAGS WAIT COMMAND 18468 331443 80879 0 7 0 0 syz-executor 18468 134795 80879 0 3 0 0x4000080 kqread syz-executor 18468 326301 80879 0 3 0 0x4000080 pipewr syz-executor 18468 238854 80879 0 3 0 0x4000080 pipewr syz-executor 34982 331017 33206 0 2 0 0 syz-executor 34982 110492 33206 0 3 0 0x4000080 kqpoll syz-executor *34982 195261 33206 0 7 0 0x4000000 syz-executor 19280 40673 4990 0 3 0x1 0x80 nanoslp syz-executor 19280 464341 4990 0 3 0x1 0x4000080 kqread syz-executor 19280 273888 4990 0 3 0x1 0x4000080 fsleep syz-executor 81969 63787 62015 0 3 0 0x80 nanoslp syz-executor 81969 76005 62015 0 3 0 0x4000080 nanoslp syz-executor 81969 189661 62015 0 3 0 0x4000080 ttyout syz-executor 80879 33789 39358 0 3 0x2 0x80 nanoslp syz-executor 22072 295912 39358 0 3 0x2 0x80 nanoslp syz-executor 4990 360961 39358 0 3 0x2 0x80 nanoslp syz-executor 62015 491986 39358 0 3 0x2 0x80 nanoslp syz-executor 85549 227138 0 0 3 0x14000 0x280 nfsidl nfsio 88266 503882 0 0 3 0x14000 0x280 nfsidl nfsio 10318 360653 0 0 3 0x14000 0x280 nfsidl nfsio 64831 237673 0 0 3 0x14000 0x280 nfsidl nfsio 10972 90803 0 0 3 0x14000 0x280 nfsidl nfsio 97020 31989 0 0 3 0x14000 0x280 nfsidl nfsio 78606 486922 0 0 3 0x14000 0x280 nfsidl nfsio 43329 361816 0 0 3 0x14000 0x280 nfsidl nfsio 99070 108120 0 0 3 0x14000 0x280 nfsidl nfsio 39343 449765 0 0 3 0x14000 0x280 nfsidl nfsio 6977 190633 0 0 3 0x14000 0x280 nfsidl nfsio 7179 88861 0 0 3 0x14000 0x280 nfsidl nfsio 47629 450403 0 0 3 0x14000 0x280 nfsidl nfsio 93193 197655 0 0 3 0x14000 0x280 nfsidl nfsio 74893 265767 0 0 3 0x14000 0x280 nfsidl nfsio 19322 309114 0 0 3 0x14000 0x280 nfsidl nfsio 58608 329347 0 0 3 0x14000 0x280 nfsidl nfsio 76995 365701 0 0 3 0x14000 0x280 nfsidl nfsio 23313 208869 0 0 3 0x14000 0x280 nfsidl nfsio 17958 232318 0 0 3 0x14000 0x280 nfsidl nfsio 33206 233419 39358 0 3 0x2 0x80 nanoslp syz-executor 75495 451418 39358 0 3 0x2 0 biowait syz-executor 39358 106675 49964 0 3 0x2 0x80 wait syz-executor 49964 511218 98918 0 3 0x100002 0x88 sigsusp ksh 98918 317014 38855 0 3 0x10 0x88 kqread sshd-session 38855 99447 18455 0 3 0x12 0x80 kqread sshd-session 38362 291036 1 0 3 0x100003 0x80 ttyin getty 18455 379414 1 0 3 0 0x88 kqread sshd 78618 256908 7858 74 3 0x1100012 0x80 bpf pflogd 7858 466431 1 0 3 0 0x80 sbwait pflogd 90658 488619 46811 73 3 0x1100010 0x80 kqread syslogd 46811 244232 1 0 3 0x100002 0x80 sbwait syslogd 44988 426598 1 0 3 0x100000 0x80 kqread resolvd 83012 491734 21134 77 3 0x100012 0x80 kqread dhcpleased 82122 338307 21134 77 3 0x100012 0x80 kqread dhcpleased 21134 104772 1 0 3 0 0x80 kqread dhcpleased 54554 393508 0 0 3 0x14000 0x200 bored smr 69114 303390 0 0 2 0x14000 0x200 zerothread 7496 401887 0 0 3 0x14000 0x200 aiodoned aiodoned 66439 381595 0 0 3 0x14000 0x200 syncer update 97901 515043 0 0 3 0x14000 0x200 cleaner cleaner 38586 398459 0 0 3 0x14000 0x200 reaper reaper 27707 154782 0 0 3 0x14000 0x200 pgdaemon pagedaemon 37011 392474 0 0 3 0x14000 0x200 bored viomb 87860 294439 0 0 3 0x14000 0x40000200 acpi0 acpi0 62990 178154 0 0 3 0x14000 0x40000200 idle1 40024 353277 0 0 3 0x14000 0x200 bored softnet1 30643 308384 0 0 3 0x14000 0x200 bored softnet0 22219 403766 0 0 3 0x14000 0x200 smrbar systqmp 15015 390080 0 0 3 0x14000 0x200 bored systq 79589 314760 0 0 3 0x14000 0x200 tmoslp softclockmp 73516 84134 0 0 3 0x14000 0x40000200 tmoslp softclock 26119 218600 0 0 3 0x14000 0x40000200 idle0 1 185053 0 0 3 0x2 0x80 wait init 0 0 -1 0 3 0x10000 0x200 scheduler swapper ddb{1}> show all locks Process 34982 (syz-executor) thread 0xffff800045fee018 (195261) shared rwlock netlock r = 0 (0xffffffff83983180) #0 witness_lock+0x5f1 stacktrace_save sys/sys/stacktrace.h:37 [inline] #0 witness_lock+0x5f1 sys/kern/subr_witness.c:1160 #1 rw_do_enter_read+0x3e8 sys/kern/kern_rwlock.c:413 #2 tun_input_process+0x15e sys/net/if_tun.c:1093 #3 tun_dev_write+0x710 tun_put sys/net/if_tun.c:-1 [inline] #3 tun_dev_write+0x710 sys/net/if_tun.c:1042 #4 spec_write+0x11f sys/kern/spec_vnops.c:302 #5 VOP_WRITE+0x101 sys/kern/vfs_vops.c:245 #6 vn_write+0x1d3 sys/kern/vfs_vnops.c:414 #7 dofilewritev+0x2bd sys/kern/sys_generic.c:384 #8 sys_write+0xa2 sys/kern/sys_generic.c:300 #9 syscall+0xbd4 mi_syscall sys/sys/syscall_mi.h:176 [inline] #9 syscall+0xbd4 sys/arch/amd64/amd64/trap.c:791 #10 Xsyscall+0x128 exclusive kernel_lock &kernel_lock r = 0 (0xffffffff83afcc00) #0 witness_lock+0x5f1 stacktrace_save sys/sys/stacktrace.h:37 [inline] #0 witness_lock+0x5f1 sys/kern/subr_witness.c:1160 #1 vn_write+0x4e sys/kern/vfs_vnops.c:399 #2 dofilewritev+0x2bd sys/kern/sys_generic.c:384 #3 sys_write+0xa2 sys/kern/sys_generic.c:300 #4 syscall+0xbd4 mi_syscall sys/sys/syscall_mi.h:176 [inline] #4 syscall+0xbd4 sys/arch/amd64/amd64/trap.c:791 #5 Xsyscall+0x128 Process 75495 (syz-executor) thread 0xffff80002a222540 (451418) exclusive rrwlock inode r = 0 (0xfffff1006f045ef0) #0 witness_lock+0x5f1 stacktrace_save sys/sys/stacktrace.h:37 [inline] #0 witness_lock+0x5f1 sys/kern/subr_witness.c:1160 #1 rw_do_enter_write+0x419 sys/kern/kern_rwlock.c:320 #2 rrw_enter+0xc6 sys/kern/kern_rwlock.c:621 #3 VOP_LOCK+0xbd sys/kern/vfs_vops.c:527 #4 vn_lock+0xa4 sys/kern/vfs_vnops.c:576 #5 vget+0x2a2 sys/kern/vfs_subr.c:692 #6 ufs_ihashget+0x185 sys/ufs/ufs/ufs_ihash.c:98 #7 ffs_vget+0x8c sys/ufs/ffs/ffs_vfsops.c:1203 #8 ufs_lookup+0x1a36 sys/ufs/ufs/ufs_lookup.c:478 #9 VOP_LOOKUP+0x6e sys/kern/vfs_vops.c:85 #10 vfs_lookup+0x9e3 sys/kern/vfs_lookup.c:585 #11 namei+0x7c1 sys/kern/vfs_lookup.c:250 #12 dounlinkat+0xc1 sys/kern/vfs_syscalls.c:1807 #13 syscall+0xb17 mi_syscall sys/sys/syscall_mi.h:176 [inline] #13 syscall+0xb17 sys/arch/amd64/amd64/trap.c:791 #14 Xsyscall+0x128 exclusive rrwlock inode r = 0 (0xfffff1006d8dae98) #0 witness_lock+0x5f1 stacktrace_save sys/sys/stacktrace.h:37 [inline] #0 witness_lock+0x5f1 sys/kern/subr_witness.c:1160 #1 rw_do_enter_write+0x419 sys/kern/kern_rwlock.c:320 #2 rrw_enter+0xc6 sys/kern/kern_rwlock.c:621 #3 VOP_LOCK+0xbd sys/kern/vfs_vops.c:527 #4 vn_lock+0xa4 sys/kern/vfs_vnops.c:576 #5 vfs_lookup+0x12b sys/kern/vfs_lookup.c:431 #6 namei+0x7c1 sys/kern/vfs_lookup.c:250 #7 dounlinkat+0xc1 sys/kern/vfs_syscalls.c:1807 #8 syscall+0xb17 mi_syscall sys/sys/syscall_mi.h:176 [inline] #8 syscall+0xb17 sys/arch/amd64/amd64/trap.c:791 #9 Xsyscall+0x128 Process 22219 (systqmp) thread 0xffff800045ffe530 (403766) shared rwlock systqmp r = 0 (0xffffffff839ed2b8) #0 witness_lock+0x5f1 stacktrace_save sys/sys/stacktrace.h:37 [inline] #0 witness_lock+0x5f1 sys/kern/subr_witness.c:1160 #1 taskq_thread+0x12a sys/kern/kern_task.c:442 #2 proc_trampoline+0x10 ddb{1}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 11093 12101K 12287K 166960K 12329 0 pcb 17 12K 12K 166960K 52 0 rtable 246 7K 8K 166960K 915 0 pf 42 19K 23K 166960K 116 0 ifaddr 44 8K 8K 166960K 127 0 ifgroup 60 2K 2K 166960K 142 0 sysctl 2 1K 9K 166960K 6 0 counters 72 37K 37K 166960K 120 0 ioctlops 0 0K 4K 166960K 1537 0 iov 0 0K 16K 166960K 3 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1291 81K 82K 166960K 1669 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 2 20K 24K 166960K 8 0 VM map 2 1K 1K 166960K 2 0 sem 22 1K 1K 166960K 25 0 dirhash 12 2K 2K 166960K 12 0 ACPI 1692 195K 286K 166960K 12470 0 file desc 15 53K 93K 166960K 608 0 sigio 0 0K 0K 166960K 35 0 proc 72 115K 164K 166960K 1080 0 subproc 72 4K 4K 166960K 234 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 ip_moptions 0 0K 0K 166960K 32 0 in_multi 99 6K 6K 166960K 299 0 ether_multi 1 0K 0K 166960K 2 0 mrt 0 0K 0K 166960K 16 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 241 1076K 1076K 166960K 241 0 exec 0 0K 1K 166960K 630 0 fusefs mount 1 32K 32K 166960K 1 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 234 175K 187K 166960K 6380 0 UVM aobj 7 2K 2K 166960K 8 0 pinsyscall 40 80K 104K 166960K 2232 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 ip6_options 2 0K 0K 166960K 8 0 NDP 19 0K 2K 166960K 88 0 temp 37 9118K 12974K 166960K 17654 0 kqueue 15 24K 28K 166960K 62 0 SYN cache 2 16K 16K 166960K 2 0 ddb{1}> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle plcache 128 28 0 0 1 0 1 1 0 8 0 rtpcb 120 79 0 76 1 0 1 1 0 8 0 rtentry 176 311 0 201 6 0 6 6 0 8 0 unpcb 144 249 0 231 4 0 4 4 0 8 3 syncache 336 4 0 4 1 1 0 1 0 8 0 tcpcb 736 55 0 50 1 0 1 1 0 8 0 arp 136 54 0 36 1 0 1 1 0 8 0 inpcb 328 298 0 289 3 1 2 3 0 8 1 nd6 152 80 0 56 2 0 2 2 0 8 1 pkpcb 40 2 0 2 1 0 1 1 0 8 1 kcovpl 48 26 0 18 1 0 1 1 0 8 0 mppekey 1024 1 0 1 1 1 0 1 0 8 0 ppxss 1192 6 0 6 1 0 1 1 0 8 1 pfstscr 40 3 0 2 1 0 1 1 0 8 0 pffrag 232 3 0 0 1 0 1 1 0 482 0 pffrnode 88 3 0 0 1 0 1 1 0 8 0 pffrent 40 3 0 0 1 0 1 1 0 8 0 pfosfp 40 1428 0 1005 5 0 5 5 0 8 0 pfosfpen 112 1428 0 714 21 0 21 21 0 8 0 pfstitem 24 49 0 0 1 0 1 1 0 8 0 pfstkey 128 51 0 2 2 0 2 2 0 8 0 pfstate 448 49 0 1 6 0 6 6 0 8 0 pfrule 1360 27 0 21 2 1 1 2 0 8 0 art_heap8 4096 1 0 0 1 0 1 1 0 8 0 art_heap4 256 1257 0 799 32 0 32 32 0 8 3 art_table 40 1258 0 799 6 0 6 6 0 8 1 art_node 32 311 0 209 1 0 1 1 0 8 0 sysvmsgpl 40 2 0 2 1 0 1 1 0 8 1 semapl 72 21 0 1 1 0 1 1 0 8 0 shmpl 120 5 0 1 1 0 1 1 0 8 0 dirhash 1024 17 0 0 3 0 3 3 0 8 0 dino2pl 256 1964 0 457 95 0 95 95 0 8 0 ffsino 296 1964 0 457 116 0 116 116 0 8 0 nchpl 144 2443 0 674 66 0 66 66 0 8 0 vnodes 216 2299 0 0 128 0 128 128 0 8 0 namei 1024 10497 0 10497 3 1 2 3 0 8 2 percpumem 16 76 0 24 1 0 1 1 0 8 0 kstatmem 264 75 0 46 3 0 3 3 0 8 1 scsiplug 72 1 0 1 1 0 1 1 0 8 1 scxspl 216 8340 0 8339 4 3 1 3 1 8 0 plimitpl 152 70 0 53 1 0 1 1 0 8 0 sigapl 424 909 0 844 8 0 8 8 0 8 0 knotepl 120 309 0 0 10 0 10 10 0 8 0 kqueuepl 224 82 0 69 1 0 1 1 0 8 0 pipepl 344 197 0 169 4 0 4 4 0 8 0 fdescpl 528 873 0 844 3 0 3 3 0 8 0 filepl 160 3577 0 3353 13 0 13 13 0 8 1 lockfpl 104 83 0 80 1 0 1 1 0 8 0 lockfspl 48 39 0 36 1 0 1 1 0 8 0 sessionpl 144 54 0 44 1 0 1 1 0 8 0 pgrppl 48 82 0 64 1 0 1 1 0 8 0 ucredpl 104 488 0 475 1 0 1 1 0 8 0 zombiepl 144 847 0 844 1 0 1 1 0 8 0 processpl 1240 909 0 844 6 0 6 6 0 8 0 procpl 664 1275 0 1201 8 1 7 8 0 8 0 sockpl 752 638 0 608 10 0 10 10 0 8 6 mcl64k 65536 2 0 0 1 0 1 1 0 8 0 mcl16k 16384 3 0 0 1 0 1 1 0 8 0 mcl8k 8192 2 0 0 1 0 1 1 0 8 0 mcl4k 4096 114 0 0 15 0 15 15 0 8 0 mcl2k 2048 20 0 0 3 0 3 3 0 8 0 mextrefs 64 19 0 0 1 0 1 1 0 8 0 mtagpl 96 3 0 0 1 0 1 1 0 8 0 mbufpl 256 184 0 0 12 0 12 12 0 8 0 bufpl 272 2765 0 106 178 0 178 178 0 8 0 anonpl 32 7347 0 0 60 0 60 60 0 247 0 amapchunkpl 152 18034 0 17557 33 1 32 33 0 158 11 amappl16 200 1628 0 1609 15 5 10 14 0 8 8 amappl15 192 12 0 12 2 2 0 1 0 8 0 amappl14 184 644 0 643 1 0 1 1 0 8 0 amappl13 176 161 0 149 1 0 1 1 0 8 0 amappl12 168 1194 0 1166 2 0 2 2 0 8 0 amappl11 160 11 0 10 1 0 1 1 0 8 0 amappl10 152 66 0 52 1 0 1 1 0 8 0 amappl9 144 278 0 278 1 1 0 1 0 8 0 amappl8 136 251 0 247 1 0 1 1 0 8 0 amappl7 128 208 0 194 1 0 1 1 0 8 0 amappl6 120 333 0 332 1 0 1 1 0 8 0 amappl5 112 93 0 83 1 0 1 1 0 8 0 amappl4 104 347 0 327 1 0 1 1 0 8 0 amappl3 96 3330 0 3236 3 0 3 3 0 8 0 amappl2 88 923 0 850 2 0 2 2 0 8 0 amappl1 80 13547 0 12944 15 1 14 15 0 8 0 amappl 88 5322 0 5162 5 0 5 5 0 92 0 uvmvnodes 80 108 0 0 3 0 3 3 0 8 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 254 0 254 2 1 1 1 0 8 1 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 19 0 18 1 0 1 1 0 8 0 aobjpl 72 7 0 1 1 0 1 1 0 8 0 uaddrrnd 24 873 0 844 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 873 0 844 1 0 1 1 0 8 0 vmmpekpl 168 8669 0 8618 3 0 3 3 0 8 0 vmmpepl 168 64409 0 62579 94 0 94 94 0 357 6 vmsppl 488 872 0 844 5 0 5 5 0 8 0 rwobjpl 80 20373 0 19329 26 0 26 26 0 8 2 pdppl 4096 1753 0 1688 109 32 77 85 0 8 12 pvpl 32 14402 0 0 117 0 117 117 0 265 0 pmappl 256 872 0 844 3 0 3 3 0 8 0 extentpl 40 45 0 27 1 0 1 1 0 8 0 phpool 112 471 0 38 13 0 13 13 0 8 0 ddb{1}> machine ddbcpu 0 Stopped at x86_ipi_db+0x27: addq $0x8,%rsp x86_ipi_db(ffffffff839b2ff0) at x86_ipi_db+0x27 sys/arch/amd64/amd64/db_interface.c:394 x86_ipi_handler() at x86_ipi_handler+0xd9 sys/arch/amd64/amd64/ipi.c:106 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __sanitizer_cov_trace_pc() at __sanitizer_cov_trace_pc intr_handler(ffff80002a306d30,ffff8000002a3480) at intr_handler+0xe9 sys/arch/amd64/amd64/intr.c:560 Xintr_ioapic_edge23_untramp() at Xintr_ioapic_edge23_untramp+0x18f end of kernel end trace frame: 0x770b51343a10, count: 9 ddb{0}> trace x86_ipi_db(ffffffff839b2ff0) at x86_ipi_db+0x27 sys/arch/amd64/amd64/db_interface.c:394 x86_ipi_handler() at x86_ipi_handler+0xd9 sys/arch/amd64/amd64/ipi.c:106 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __sanitizer_cov_trace_pc() at __sanitizer_cov_trace_pc intr_handler(ffff80002a306d30,ffff8000002a3480) at intr_handler+0xe9 sys/arch/amd64/amd64/intr.c:560 Xintr_ioapic_edge23_untramp() at Xintr_ioapic_edge23_untramp+0x18f end of kernel end trace frame: 0x770b51343a10, count: -6 ddb{0}> machine ddbcpu 1 Stopped at rtable_l2+0x7f: movzbl 0(%rax,%rcx,4),%r14d rtable_l2(0) at rtable_l2+0x7f sys/net/rtable.c:315 pf_setup_pdesc(ffff80002a341c38,18,1,ffff800001627300,fffff1006dad9400,ffff80002a341d4e) at pf_setup_pdesc+0xb1 sys/net/pf.c:8065 pf_test(18,1,ffff800001612000,ffff80002a341ed0) at pf_test+0x329 sys/net/pf.c:8365 ip6_input_if(ffff80002a341ed0,ffff80002a341edc,29,0,ffff800001612000,ffff80002a341f38) at ip6_input_if+0x3d4 sys/netinet6/ip6_input.c:403 ipv6_input(ffff800001612000,fffff1006dad9400,ffff80002a341f38) at ipv6_input+0x5f sys/netinet6/ip6_input.c:256 tun_input_process(ffff800001612000,fffff1006dad9400) at tun_input_process+0x2fa sys/net/if_tun.c:1110 tun_dev_write(5d03,ffff80002a342318,ffff80002c380000,2) at tun_dev_write+0x710 tun_put sys/net/if_tun.c:-1 [inline] tun_dev_write(5d03,ffff80002a342318,ffff80002c380000,2) at tun_dev_write+0x710 sys/net/if_tun.c:1042 spec_write(ffff80002a342160) at spec_write+0x11f sys/kern/spec_vnops.c:302 VOP_WRITE(fffff1006e1052b8,ffff80002a342318,11,fffff100097fd6e8) at VOP_WRITE+0x101 sys/kern/vfs_vops.c:245 vn_write(fffff10066b03b88,ffff80002a342318,0) at vn_write+0x1d3 sys/kern/vfs_vnops.c:414 dofilewritev(ffff800045fee018,c8,ffff80002a342318,0,ffff80002a3423d0) at dofilewritev+0x2bd sys/kern/sys_generic.c:384 sys_write(ffff800045fee018,ffff80002a342480,ffff80002a3423d0) at sys_write+0xa2 sys/kern/sys_generic.c:300 syscall(ffff80002a342480) at syscall+0xbd4 mi_syscall sys/sys/syscall_mi.h:176 [inline] syscall(ffff80002a342480) at syscall+0xbd4 sys/arch/amd64/amd64/trap.c:791 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x902b83a76e0, count: 1 ddb{1}> trace rtable_l2(0) at rtable_l2+0x7f sys/net/rtable.c:315 pf_setup_pdesc(ffff80002a341c38,18,1,ffff800001627300,fffff1006dad9400,ffff80002a341d4e) at pf_setup_pdesc+0xb1 sys/net/pf.c:8065 pf_test(18,1,ffff800001612000,ffff80002a341ed0) at pf_test+0x329 sys/net/pf.c:8365 ip6_input_if(ffff80002a341ed0,ffff80002a341edc,29,0,ffff800001612000,ffff80002a341f38) at ip6_input_if+0x3d4 sys/netinet6/ip6_input.c:403 ipv6_input(ffff800001612000,fffff1006dad9400,ffff80002a341f38) at ipv6_input+0x5f sys/netinet6/ip6_input.c:256 tun_input_process(ffff800001612000,fffff1006dad9400) at tun_input_process+0x2fa sys/net/if_tun.c:1110 tun_dev_write(5d03,ffff80002a342318,ffff80002c380000,2) at tun_dev_write+0x710 tun_put sys/net/if_tun.c:-1 [inline] tun_dev_write(5d03,ffff80002a342318,ffff80002c380000,2) at tun_dev_write+0x710 sys/net/if_tun.c:1042 spec_write(ffff80002a342160) at spec_write+0x11f sys/kern/spec_vnops.c:302 VOP_WRITE(fffff1006e1052b8,ffff80002a342318,11,fffff100097fd6e8) at VOP_WRITE+0x101 sys/kern/vfs_vops.c:245 vn_write(fffff10066b03b88,ffff80002a342318,0) at vn_write+0x1d3 sys/kern/vfs_vnops.c:414 dofilewritev(ffff800045fee018,c8,ffff80002a342318,0,ffff80002a3423d0) at dofilewritev+0x2bd sys/kern/sys_generic.c:384 sys_write(ffff800045fee018,ffff80002a342480,ffff80002a3423d0) at sys_write+0xa2 sys/kern/sys_generic.c:300 syscall(ffff80002a342480) at syscall+0xbd4 mi_syscall sys/sys/syscall_mi.h:176 [inline] syscall(ffff80002a342480) at syscall+0xbd4 sys/arch/amd64/amd64/trap.c:791 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x902b83a76e0, count: -14