kernel: protection fault trap, code=0 Stopped at bpfdetach+0x40: movq 0(%r15),%r12 ddb> ddb> set $lines = 0 ddb> set $maxwidth = 0 ddb> show panic the kernel did not panic ddb> trace bpfdetach(ffff8000015e5800) at bpfdetach+0x40 sys/net/bpf.c:1770 if_detach(ffff8000015e5800) at if_detach+0x12b sys/net/if.c:1288 tun_clone_destroy(ffff8000015e5800) at tun_clone_destroy+0x2a2 sys/net/if_tun.c:347 if_clone_destroy(ffff80003c913510) at if_clone_destroy+0x1d5 sys/net/if.c:1478 sys_ioctl(ffff80003c9b54f0,ffff80003c9136e0,ffff80003c913630) at sys_ioctl+0x660 sys/kern/sys_generic.c:-1 syscall(ffff80003c9136e0) at syscall+0x962 mi_syscall sys/sys/syscall_mi.h:-1 [inline] syscall(ffff80003c9136e0) at syscall+0x962 sys/arch/amd64/amd64/trap.c:783 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xe69b76ac810, count: -7 ddb> show registers rdi 0xffff80002eccc000 rsi 0x8fc8 __ALIGN_SIZE+0x7fc8 rbp 0xffff80003c913400 rbx 0 rdx 0xffff80002eccc000 rcx 0x8fc7 __ALIGN_SIZE+0x7fc7 rax 0xffffffff82fb7999 bpfdetach+0x89 r8 0 r9 0xffffffffffffffff r10 0x44a38fdc2e4e2229 r11 0x9a1d64bfc88488e2 r12 0xdeaf0002deafbead r13 0xffff8000015e5d60 r14 0xffff8000015e5800 r15 0xdeaf0002deafbead rip 0xffffffff82fb7950 bpfdetach+0x40 cs 0x8 rflags 0x10246 __ALIGN_SIZE+0xf246 rsp 0xffff80003c9133d0 ss 0 bpfdetach+0x40: movq 0(%r15),%r12 ddb> show proc PROC (syz-executor) tid=71449 pid=54994 tcnt=4 stat=onproc flags process=0 proc=4000000 runpri=32, usrpri=50, slppri=32, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0 forw=0xffffffffffffffff, list=0xffff80003c9b47f8,0xffff80002a798020 process=0xffff8000ffffb618 user=0xffff80003c90e000, vmspace=0xfffffd80738eca28 estcpu=36, cpticks=1, pctcpu=0.0, user=0, sys=1, intr=0 ddb> ps PID TID PPID UID S FLAGS WAIT COMMAND 96517 123762 86351 0 2 0 syz-executor 96517 496317 86351 0 3 0x4000080 fsleep syz-executor 96517 387036 86351 0 3 0x4000080 fsleep syz-executor 91007 470884 78700 0 2 0 syz-executor 91007 469073 78700 0 3 0x4000080 fsleep syz-executor 54994 56976 29497 0 2 0 syz-executor *54994 71449 29497 0 7 0x4000000 syz-executor 54994 16777 29497 0 2 0x4000000 syz-executor 54994 311003 29497 0 2 0x4000000 syz-executor 42262 497171 16265 0 3 0x80 nanoslp syz-executor 42262 163915 16265 0 3 0x4000080 bell syz-executor 42262 46071 16265 0 3 0x4000080 fsleep syz-executor 75824 256046 70404 0 3 0 vmmaplk syz-executor 75824 299043 70404 0 2 0x4000000 syz-executor 75824 371242 70404 0 2 0x4000000 syz-executor 2546 276791 1 0 3 0x100083 ttyin getty 86706 496094 0 0 3 0x14200 acct acct 29497 366309 48400 0 3 0x82 nanoslp syz-executor 95653 369785 0 0 3 0x14280 nfsidl nfsio 55895 375085 0 0 3 0x14280 nfsidl nfsio 87512 97476 0 0 3 0x14280 nfsidl nfsio 93672 249126 0 0 3 0x14280 nfsidl nfsio 89688 45653 0 0 3 0x14280 nfsidl nfsio 16553 155060 0 0 3 0x14280 nfsidl nfsio 67206 461403 0 0 3 0x14280 nfsidl nfsio 57731 88666 0 0 3 0x14280 nfsidl nfsio 90404 473607 0 0 3 0x14280 nfsidl nfsio 90619 66605 0 0 3 0x14280 nfsidl nfsio 19921 206503 0 0 3 0x14280 nfsidl nfsio 95416 95997 0 0 3 0x14280 nfsidl nfsio 83789 510153 0 0 3 0x14280 nfsidl nfsio 31525 514333 0 0 3 0x14280 nfsidl nfsio 8321 520895 0 0 3 0x14280 nfsidl nfsio 15198 227812 0 0 3 0x14280 nfsidl nfsio 58880 143193 0 0 3 0x14280 nfsidl nfsio 63473 203750 0 0 3 0x14280 nfsidl nfsio 4078 239318 0 0 3 0x14280 nfsidl nfsio 90651 315362 0 0 3 0x14280 nfsidl nfsio 16265 339934 48400 0 3 0x82 nanoslp syz-executor 78700 226896 48400 0 3 0x82 nanoslp syz-executor 54985 30310 48400 0 3 0x82 nanoslp syz-executor 29678 53801 48400 0 3 0x82 nanoslp syz-executor 70404 46257 48400 0 3 0x82 nanoslp syz-executor 52206 275533 48400 0 2 0x2 syz-executor 86351 504824 48400 0 3 0x82 nanoslp syz-executor 48400 338642 55127 0 3 0x82 kqread syz-executor 55127 366031 58644 0 3 0x10008a sigsusp ksh 58644 56786 92018 0 3 0x98 kqread sshd-session 92018 74590 15714 0 3 0x92 kqread sshd-session 15714 494715 1 0 3 0x88 kqread sshd 5417 205804 53467 73 3 0x1100090 kqread syslogd 53467 465780 1 0 3 0x100082 sbwait syslogd 16522 458858 1 0 3 0x100080 kqread resolvd 8209 364125 46772 77 2 0x100092 dhcpleased 47041 223359 46772 77 3 0x100092 kqread dhcpleased 46772 61785 1 0 3 0x80 kqread dhcpleased 28717 34913 0 0 3 0x14200 bored smr 39013 106498 0 0 2 0x14200 zerothread 36460 149136 0 0 3 0x14200 aiodoned aiodoned 69989 282118 0 0 3 0x14200 syncer update 11183 203701 0 0 3 0x14200 cleaner cleaner 27791 464363 0 0 2 0x14200 reaper 93530 191017 0 0 3 0x14200 pgdaemon pagedaemon 66919 214700 0 0 3 0x14200 bored viomb 41757 439443 0 0 3 0x40014200 acpi0 acpi0 57859 10281 0 0 3 0x14200 bored softnet0 67076 58243 0 0 3 0x14200 smrbar systqmp 5649 138443 0 0 3 0x14200 bored systq 80823 503127 0 0 3 0x40014200 tmoslp softclock 42386 365000 0 0 3 0x40014200 idle0 1 32013 0 0 3 0x82 wait init 0 0 -1 0 3 0x10010200 scheduler swapper ddb> show all locks No such command ddb> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 11066 12388K 12777K 166960K 14389 0 pcb 17 14K 15K 166960K 192 0 rtable 239 12K 12K 166960K 703 0 pf 33 13K 17K 166960K 312 0 ifaddr 38 7K 7K 166960K 100 0 ifgroup 43 1K 2K 166960K 159 0 sysctl 4 1K 9K 166960K 16 0 counters 32 17K 18K 166960K 100 0 ioctlops 0 0K 4K 166960K 367 0 iov 0 0K 24K 166960K 44 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1447 91K 91K 166960K 2754 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 2 1K 5K 166960K 7 0 VM map 2 1K 1K 166960K 2 0 sem 12 0K 0K 166960K 65 0 dirhash 12 2K 2K 166960K 36 0 ACPI 1692 195K 286K 166960K 12470 0 file desc 16 57K 85K 166960K 1028 0 sigio 0 0K 0K 166960K 81 0 proc 60 59K 91K 166960K 636 0 subproc 72 4K 4K 166960K 81 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 ip_moptions 1 0K 0K 166960K 117 0 in_multi 86 6K 7K 166960K 158 0 ether_multi 2 0K 0K 166960K 9 0 mrt 0 0K 0K 166960K 22 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 97 440K 440K 166960K 97 0 exec 0 0K 1K 166960K 498 0 fusefs mount 1 32K 32K 166960K 1 0 pfkey data 0 0K 0K 166960K 33 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 226 160K 176K 166960K 10897 0 UVM aobj 55 11K 11K 166960K 62 0 pinsyscall 37 74K 90K 166960K 2159 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 ip6_options 0 0K 0K 166960K 62 0 NDP 10 0K 2K 166960K 66 0 temp 113 9076K 9142K 166960K 44085 0 kqueue 13 20K 30K 166960K 187 0 SYN cache 2 16K 16K 166960K 2 0 ddb> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle rtpcb 120 126 0 123 1 0 1 1 0 8 0 rtentry 136 162 0 71 4 0 4 4 0 8 0 unpcb 144 1037 0 1021 4 3 1 4 0 8 0 syncache 336 6 0 6 1 1 0 1 0 8 0 tcpqe 32 4 0 4 1 1 0 1 0 8 0 tcpcb 736 276 0 267 3 2 1 3 0 8 0 arp 96 25 0 7 1 0 1 1 0 8 0 ipq 40 4 0 0 1 0 1 1 0 8 0 ipqe 40 5 0 1 1 0 1 1 0 8 0 inpcb 328 912 0 895 7 5 2 7 0 8 0 ip6q 72 1 0 0 1 0 1 1 0 8 0 ip6af 40 2 0 0 1 0 1 1 0 8 0 nd6 112 32 0 11 1 0 1 1 0 8 0 pkpcb 40 4 0 4 1 1 0 1 0 8 0 kcovpl 48 9 0 1 1 0 1 1 0 8 0 mppekey 1024 1 0 1 1 1 0 1 0 8 0 ppxss 1072 53 0 53 2 1 1 1 0 8 1 pppxif 1384 7 0 7 2 1 1 1 0 8 1 pffrag 232 3 0 1 1 0 1 1 0 482 0 pffrnode 88 3 0 1 1 0 1 1 0 8 0 pffrent 40 6 0 4 1 0 1 1 0 8 0 pfrktable 1344 40 0 36 1 0 1 1 0 8 0 pfsrclim 320 1 0 1 1 1 0 1 0 8 0 pfanchor 1288 2 0 0 1 0 1 1 0 8 0 pftag 88 36 0 35 1 0 1 1 0 8 0 pfqueue 320 1 0 0 1 0 1 1 0 8 0 pfstitem 24 8 0 2 1 0 1 1 0 8 0 pfstkey 128 140 0 132 1 0 1 1 0 8 0 pfstate 384 70 0 67 1 0 1 1 0 8 0 pfrule 1360 43 0 41 1 0 1 1 0 8 0 art_heap8 4096 2 0 0 2 0 2 2 0 8 0 art_heap4 256 673 0 271 31 5 26 31 0 8 0 art_table 40 675 0 271 5 0 5 5 0 8 0 art_node 32 156 0 72 1 0 1 1 0 8 0 sysvmsgpl 40 3 0 2 1 0 1 1 0 8 0 semapl 112 61 0 51 1 0 1 1 0 8 0 shmpl 112 55 0 7 2 0 2 2 0 8 0 dirhash 1024 33 0 16 3 0 3 3 0 8 0 dino2pl 256 3400 0 1945 92 0 92 92 0 8 0 ffsino 256 3400 0 1945 92 0 92 92 0 8 0 nchpl 144 4849 0 3152 64 0 64 64 0 8 0 rtmask 32 16 0 16 1 1 0 1 0 8 0 vnodes 216 4429 0 0 247 0 247 247 0 8 0 namei 1024 17640 0 17640 3 2 1 2 0 8 1 vcpupl 3904 4 0 0 1 0 1 1 0 8 0 vmpool 808 4 0 0 1 0 1 1 0 8 0 pfiaddrpl 120 2 0 0 1 0 1 1 0 8 0 kstatmem 264 94 0 74 2 0 2 2 0 8 0 scsiplug 72 6 0 6 2 1 1 1 0 8 1 scxspl 216 23902 0 23902 8 7 1 8 1 8 1 plimitpl 152 437 0 418 1 0 1 1 0 8 0 sigapl 424 1346 0 1283 8 0 8 8 0 8 0 knotepl 120 49937 0 49889 34 24 10 17 0 8 8 kqueuepl 184 330 0 321 3 2 1 3 0 8 0 pipepl 304 227 0 200 5 2 3 5 0 8 0 fdescpl 448 1309 0 1281 4 0 4 4 0 8 0 filepl 120 9577 0 9348 13 5 8 13 0 8 0 lockfpl 104 1092 0 1022 4 2 2 4 0 8 0 lockfspl 48 275 0 265 1 0 1 1 0 8 0 sessionpl 144 25 0 17 1 0 1 1 0 8 0 pgrppl 48 45 0 29 1 0 1 1 0 8 0 ucredpl 104 1430 0 1419 1 0 1 1 0 8 0 zombiepl 144 1342 0 1340 1 0 1 1 0 8 0 processpl 1152 1346 0 1283 5 0 5 5 0 8 0 procpl 664 2708 0 2635 8 0 8 8 0 8 0 sosppl 176 6 0 5 2 1 1 1 0 8 0 sockpl 552 2106 0 2070 8 5 3 8 0 8 0 mcl64k 65536 46 5 46 1 1 0 1 0 8 0 mcl12k 12288 1 0 1 1 1 0 1 0 8 0 mcl8k 8192 16 0 16 2 1 1 1 0 8 1 mcl4k 4096 3677 0 3626 15 8 7 15 0 8 0 mcl2k 2048 1049 0 1044 6 4 2 5 0 8 1 mtagpl 96 125 0 25 3 0 3 3 0 8 0 mbufpl 256 16016 0 15766 19 1 18 19 0 8 0 bufpl 280 8606 0 2388 445 0 445 445 0 8 0 anonpl 24 199394 0 196199 68 29 39 68 0 187 0 amapchunkpl 152 36741 0 36269 37 14 23 37 0 158 2 amappl16 200 3546 0 3512 25 16 9 25 0 8 1 amappl15 192 6 0 6 1 1 0 1 0 8 0 amappl14 184 433 0 432 1 0 1 1 0 8 0 amappl13 176 122 0 112 1 0 1 1 0 8 0 amappl12 168 1566 0 1539 2 0 2 2 0 8 0 amappl11 160 8 0 8 1 1 0 1 0 8 0 amappl10 152 59 0 48 1 0 1 1 0 8 0 amappl9 144 286 0 286 1 1 0 1 0 8 0 amappl8 136 102 0 101 1 0 1 1 0 8 0 amappl7 128 48 0 46 1 0 1 1 0 8 0 amappl6 120 265 0 255 1 0 1 1 0 8 0 amappl5 112 85 0 78 1 0 1 1 0 8 0 amappl4 104 469 0 434 2 0 2 2 0 8 0 amappl3 96 6331 0 6242 3 0 3 3 0 8 0 amappl2 88 1395 0 1332 2 0 2 2 0 8 0 amappl1 80 13335 0 12804 13 0 13 13 0 8 0 amappl 88 10016 0 9855 5 0 5 5 0 92 0 uvmvnodes 80 129 0 0 3 0 3 3 0 8 0 dma65536 65536 1 0 1 1 1 0 1 0 8 0 dma8192 8192 2 0 2 1 1 0 1 0 8 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 255 0 255 1 1 0 1 0 8 0 dma64 64 8 0 8 2 1 1 1 0 8 1 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 19 0 18 1 0 1 1 0 8 0 aobjpl 72 61 0 7 1 0 1 1 0 8 0 uaddrrnd 24 1309 0 1281 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 1309 0 1281 1 0 1 1 0 8 0 vmmpekpl 168 11729 0 11692 3 0 3 3 0 8 0 vmmpepl 168 88508 0 86740 101 13 88 101 0 357 2 vmsppl 368 1308 0 1280 4 1 3 4 0 8 0 rwobjpl 40 24700 0 23665 15 0 15 15 0 8 0 pdppl 4096 2632 0 2564 117 47 70 76 0 8 2 pvpl 32 579564 0 570840 144 47 97 144 0 265 1 pmappl 216 1312 0 1280 2 0 2 2 0 8 0 extentpl 40 45 0 27 1 0 1 1 0 8 0 phpool 112 403 0 78 11 0 11 11 0 8 0 ddb> machine ddbcpu 0 No such command ddb> trace bpfdetach(ffff8000015e5800) at bpfdetach+0x40 sys/net/bpf.c:1770 if_detach(ffff8000015e5800) at if_detach+0x12b sys/net/if.c:1288 tun_clone_destroy(ffff8000015e5800) at tun_clone_destroy+0x2a2 sys/net/if_tun.c:347 if_clone_destroy(ffff80003c913510) at if_clone_destroy+0x1d5 sys/net/if.c:1478 sys_ioctl(ffff80003c9b54f0,ffff80003c9136e0,ffff80003c913630) at sys_ioctl+0x660 sys/kern/sys_generic.c:-1 syscall(ffff80003c9136e0) at syscall+0x962 mi_syscall sys/sys/syscall_mi.h:-1 [inline] syscall(ffff80003c9136e0) at syscall+0x962 sys/arch/amd64/amd64/trap.c:783 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xe69b76ac810, count: -7 ddb> machine ddbcpu 1 No such command ddb> trace bpfdetach(ffff8000015e5800) at bpfdetach+0x40 sys/net/bpf.c:1770 if_detach(ffff8000015e5800) at if_detach+0x12b sys/net/if.c:1288 tun_clone_destroy(ffff8000015e5800) at tun_clone_destroy+0x2a2 sys/net/if_tun.c:347 if_clone_destroy(ffff80003c913510) at if_clone_destroy+0x1d5 sys/net/if.c:1478 sys_ioctl(ffff80003c9b54f0,ffff80003c9136e0,ffff80003c913630) at sys_ioctl+0x660 sys/kern/sys_generic.c:-1 syscall(ffff80003c9136e0) at syscall+0x962 mi_syscall sys/sys/syscall_mi.h:-1 [inline] syscall(ffff80003c9136e0) at syscall+0x962 sys/arch/amd64/amd64/trap.c:783 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xe69b76ac810, count: -7