login: uvm_fault(0xffffffff82535310, 0xfffffd0000000008, 0, 1) -> e kernel: page fault trap, code=0 Stopped at ml_purge+0x38: movq 0x8(%r12),%r12 ddb{0}> ddb{0}> set $lines = 0 ddb{0}> set $maxwidth = 0 ddb{0}> show panic kernel page fault uvm_fault(0xffffffff82535310, 0xfffffd0000000008, 0, 1) -> e ml_purge(ffff800022d80e78) at ml_purge+0x38 sys/kern/uipc_mbuf.c:1627 end trace frame: 0xffff800022d80ec0, count: 0 ddb{0}> trace ml_purge(ffff800022d80e78) at ml_purge+0x38 sys/kern/uipc_mbuf.c:1627 ifq_purge(ffff800000a43278) at ifq_purge+0x9a sys/net/ifq.c:462 if_down(ffff800000a43000) at if_down+0x9c if_linkstate sys/net/if.c:1676 [inline] if_down(ffff800000a43000) at if_down+0x9c sys/net/if.c:1627 if_clone_destroy(ffff800022d81090) at if_clone_destroy+0x13c sys/net/if.c:1304 ifioctl(fffffd806f6ed000,80206979,ffff800022d81090,ffff800020ac64f8) at ifioctl+0x3ea sys/net/if.c:1937 soo_ioctl(fffffd80662c01e0,80206979,ffff800022d81090,ffff800020ac64f8) at soo_ioctl+0x27c sys/kern/sys_socket.c:138 sys_ioctl(ffff800020ac64f8,ffff800022d811a8,ffff800022d811f0) at sys_ioctl+0x4a5 syscall(ffff800022d81270) at syscall+0x4a4 mi_syscall sys/sys/syscall_mi.h:102 [inline] syscall(ffff800022d81270) at syscall+0x4a4 sys/arch/amd64/amd64/trap.c:570 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xf6753559280, count: -9 ddb{0}> show registers rdi 0xffffffff819ce1d5 ml_purge+0x35 rsi 0x372 rbp 0xffff800022d80e60 rbx 0xfffffd806f6ed000 rdx 0x373 rcx 0xffff800021d6c000 rax 0xffff800021d6c000 r8 0x101010101010101 r9 0x8080808080808080 r10 0x712d298b941f7d26 r11 0x31d9bfabd7dab8e5 r12 0xfffffd0000000000 r13 0x3 r14 0xffff800022d80e78 r15 0xfffffd0000000000 rip 0xffffffff819ce1d8 ml_purge+0x38 cs 0x8 rflags 0x10246 __ALIGN_SIZE+0xf246 rsp 0xffff800022d80e30 ss 0x10 ml_purge+0x38: movq 0x8(%r12),%r12 ddb{0}> show proc PROC (syz-executor.0) pid=225032 stat=onproc flags process=0 proc=4000000 pri=32, usrpri=78, nice=20 forw=0xffffffffffffffff, list=0xffff800020ac7ae8,0xffffffff82646508 process=0xffff800020a92f20 user=0xffff800022d7c000, vmspace=0xfffffd806e9b88a8 estcpu=36, cpticks=1, pctcpu=0.0 user=0, sys=1, intr=0 ddb{0}> ps PID TID PPID UID S FLAGS WAIT COMMAND 47012 173473 96998 0 7 0 syz-executor.0 *47012 225032 96998 0 7 0x4000000 syz-executor.0 67518 150053 88144 0 3 0x82 nanosleep syz-executor.1 35747 123311 1 0 3 0x100083 ttyin getty 96998 248932 88144 0 3 0x82 nanosleep syz-executor.0 61341 279732 0 0 3 0x14200 bored sosplice 88144 125002 11860 0 3 0x82 thrsleep syz-fuzzer 88144 103378 11860 0 3 0x4000082 nanosleep syz-fuzzer 88144 62109 11860 0 3 0x4000082 thrsleep syz-fuzzer 88144 245779 11860 0 3 0x4000082 thrsleep syz-fuzzer 88144 436654 11860 0 3 0x4000082 thrsleep syz-fuzzer 88144 237275 11860 0 3 0x4000082 kqread syz-fuzzer 88144 380173 11860 0 3 0x4000082 thrsleep syz-fuzzer 88144 293554 11860 0 3 0x4000082 thrsleep syz-fuzzer 88144 191857 11860 0 3 0x4000082 thrsleep syz-fuzzer 88144 47724 11860 0 3 0x4000082 thrsleep syz-fuzzer 11860 43670 55459 0 3 0x10008a pause ksh 55459 2408 25393 0 3 0x92 select sshd 25393 129913 1 0 3 0x80 select sshd 26506 316861 83129 74 3 0x100092 bpf pflogd 83129 474270 1 0 3 0x80 netio pflogd 28763 134182 79343 73 3 0x100090 kqread syslogd 79343 24384 1 0 3 0x100082 netio syslogd 10436 83578 0 0 3 0x14200 bored smr 8281 212771 0 0 3 0x14200 pgzero zerothread 34909 119719 0 0 3 0x14200 aiodoned aiodoned 9884 255649 0 0 3 0x14200 syncer update 7936 106290 0 0 3 0x14200 cleaner cleaner 7625 28152 0 0 3 0x14200 reaper reaper 7558 103854 0 0 3 0x14200 pgdaemon pagedaemon 57910 174869 0 0 3 0x14200 bored crynlk 46680 18703 0 0 3 0x14200 bored crypto 63770 161664 0 0 3 0x40014200 acpi0 acpi0 8477 325394 0 0 3 0x40014200 idle1 54694 129775 0 0 3 0x14200 bored softnet 67128 211774 0 0 3 0x14200 bored systqmp 68080 227485 0 0 3 0x14200 bored systq 47076 170690 0 0 3 0x40014200 bored softclock 7614 423736 0 0 3 0x40014200 idle0 1 94794 0 0 3 0x82 wait init 0 0 -1 0 3 0x10200 scheduler swapper ddb{0}> show all locks Process 47012 (syz-executor.0) thread 0xffff800020ac64f8 (225032) exclusive rwlock netlock r = 0 (0xffffffff824f53d8) #0 witness_lock+0x52e sys/kern/subr_witness.c:1164 #1 if_clone_destroy+0xf3 sys/net/if.c:1300 #2 ifioctl+0x3ea sys/net/if.c:1937 #3 soo_ioctl+0x27c sys/kern/sys_socket.c:138 #4 sys_ioctl+0x4a5 #5 syscall+0x4a4 mi_syscall sys/sys/syscall_mi.h:102 [inline] #5 syscall+0x4a4 sys/arch/amd64/amd64/trap.c:570 #6 Xsyscall+0x128 exclusive kernel_lock &kernel_lock r = 1 (0xffffffff82648eb0) #0 witness_lock+0x52e sys/kern/subr_witness.c:1164 #1 soo_ioctl+0x26a sys/kern/sys_socket.c:138 #2 sys_ioctl+0x4a5 #3 syscall+0x4a4 mi_syscall sys/sys/syscall_mi.h:102 [inline] #3 syscall+0x4a4 sys/arch/amd64/amd64/trap.c:570 #4 Xsyscall+0x128 ddb{0}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 9521 6370K 6939K 78643K 11352 0 pcb 13 8K 8K 78643K 129 0 rtable 104 3K 4K 78643K 446 0 ifaddr 77 14K 14K 78643K 147 0 counters 43 33K 34K 78643K 63 0 ioctlops 0 0K 4K 78643K 1500 0 iov 0 0K 16K 78643K 66 0 mount 1 1K 1K 78643K 1 0 vnodes 1216 76K 77K 78643K 1511 0 UFS quota 1 32K 32K 78643K 1 0 UFS mount 5 36K 36K 78643K 5 0 shm 2 1K 5K 78643K 9 0 VM map 2 1K 1K 78643K 2 0 sem 12 0K 0K 78643K 183 0 dirhash 12 2K 2K 78643K 12 0 ACPI 1809 196K 290K 78643K 12766 0 file desc 5 13K 25K 78643K 570 0 sigio 0 0K 0K 78643K 6 0 proc 57 51K 95K 78643K 625 0 subproc 32 2K 2K 78643K 85 0 NFS srvsock 1 0K 0K 78643K 1 0 NFS daemon 1 16K 16K 78643K 1 0 ip_moptions 0 0K 0K 78643K 441 0 in_multi 45 2K 2K 78643K 149 0 ether_multi 1 0K 0K 78643K 18 0 mrt 0 0K 0K 78643K 1 0 ISOFS mount 1 32K 32K 78643K 1 0 MSDOSFS mount 1 16K 16K 78643K 1 0 ttys 49 228K 228K 78643K 49 0 exec 0 0K 1K 78643K 280 0 pagedep 1 8K 8K 78643K 1 0 inodedep 1 32K 32K 78643K 1 0 newblk 1 0K 0K 78643K 1 0 VM swap 7 26K 26K 78643K 7 0 UVM amap 124 71K 71K 78643K 2891 0 UVM aobj 28 2K 2K 78643K 31 0 memdesc 1 4K 4K 78643K 1 0 crypto data 1 1K 1K 78643K 1 0 ip6_options 0 0K 1K 78643K 132 0 NDP 15 0K 0K 78643K 37 0 temp 128 3025K 3101K 78643K 7535 0 kqueue 3 4K 20K 78643K 43 0 SYN cache 2 16K 16K 78643K 2 0 ddb{0}> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle arp 64 12 0 6 1 0 1 1 0 8 0 plcache 128 20 0 0 1 0 1 1 0 8 0 rtpcb 80 113 0 113 1 0 1 1 0 8 1 rtentry 112 95 0 53 3 1 2 2 0 8 0 unpcb 120 1236 0 1227 3 1 2 2 0 8 1 syncache 264 9 0 9 4 4 0 1 0 8 0 tcpqe 32 28 0 28 2 2 0 1 0 8 0 tcpcb 544 481 0 476 4 2 2 3 0 8 1 inpcb 280 1004 0 998 6 2 4 4 0 8 3 nd6 48 19 0 15 1 0 1 1 0 8 0 pkpcb 40 1 0 1 1 0 1 1 0 8 1 ppxss 1128 1 0 1 1 1 0 1 0 8 0 pffrag 232 3 0 3 2 2 0 1 0 482 0 pffrnode 88 3 0 3 2 2 0 1 0 8 0 pffrent 40 92 0 92 2 2 0 1 0 8 0 pfosfp 40 846 0 423 5 0 5 5 0 8 0 pfosfpen 112 1428 0 714 21 0 21 21 0 8 0 pfstitem 24 54 0 8 1 0 1 1 0 8 0 pfstkey 112 54 0 8 2 0 2 2 0 8 0 pfstate 328 54 0 8 4 0 4 4 0 8 0 pfrule 1360 21 0 16 2 1 1 2 0 8 0 art_heap8 4096 2 0 0 2 0 2 2 0 8 0 art_heap4 256 432 0 251 16 3 13 13 0 8 1 art_table 32 434 0 251 2 0 2 2 0 8 0 art_node 16 94 0 55 1 0 1 1 0 8 0 sysvmsgpl 40 12 0 2 1 0 1 1 0 8 0 semupl 112 1 0 1 1 1 0 1 0 8 0 semapl 112 179 0 169 1 0 1 1 0 8 0 shmpl 112 29 0 3 1 0 1 1 0 8 0 dirhash 1024 17 0 0 3 0 3 3 0 8 0 dino1pl 128 2161 0 754 46 0 46 46 0 8 0 ffsino 272 2161 0 754 95 0 95 95 0 8 0 nchpl 144 3162 0 1556 61 0 61 61 0 8 0 uvmvnodes 72 2429 0 0 45 0 45 45 0 8 0 vnodes 208 2429 0 0 128 0 128 128 0 8 0 namei 1024 9997 0 9997 1 0 1 1 0 8 1 percpumem 16 42 0 10 1 0 1 1 0 8 0 vcpupl 1984 7 0 0 1 0 1 1 0 8 0 vmpool 560 7 0 0 1 0 1 1 0 8 0 scsiplug 64 2 0 2 1 1 0 1 0 8 0 scxspl 192 9581 0 9581 10 7 3 7 0 8 3 plimitpl 152 49 0 42 1 0 1 1 0 8 0 sigapl 424 778 0 748 4 0 4 4 0 8 0 futexpl 56 11706 0 11706 1 0 1 1 0 8 1 knotepl 112 138 0 119 1 0 1 1 0 8 0 kqueuepl 144 131 0 129 1 0 1 1 0 8 0 pipelkpl 48 431 0 421 1 0 1 1 0 8 0 pipepl 120 862 0 843 5 2 3 3 0 8 2 fdescpl 496 762 0 748 3 0 3 3 0 8 0 filepl 152 7354 0 7262 15 6 9 12 0 8 4 lockfpl 104 126 0 126 1 0 1 1 0 8 1 lockfspl 48 44 0 44 1 0 1 1 0 8 1 sessionpl 112 22 0 13 1 0 1 1 0 8 0 pgrppl 48 27 0 18 1 0 1 1 0 8 0 ucredpl 96 392 0 384 1 0 1 1 0 8 0 zombiepl 144 748 0 747 1 0 1 1 0 8 0 processpl 960 778 0 747 5 0 5 5 0 8 0 procpl 624 1967 0 1926 4 0 4 4 0 8 0 srpgc 64 2 0 2 1 1 0 1 0 8 0 sosppl 128 10 0 10 2 1 1 1 0 8 1 sockpl 400 2360 0 2345 14 7 7 11 0 8 4 mcl64k 65536 12 0 0 2 0 2 2 0 8 0 mcl16k 16384 5 0 0 1 0 1 1 0 8 0 mcl12k 12288 3 0 0 1 0 1 1 0 8 0 mcl9k 9216 4 0 0 1 0 1 1 0 8 0 mcl8k 8192 9 0 0 2 0 2 2 0 8 0 mcl4k 4096 14 0 0 2 0 2 2 0 8 0 mcl2k2 2112 2 0 0 1 0 1 1 0 8 0 mcl2k 2048 201 0 0 25 0 25 25 0 8 0 mtagpl 80 32 0 0 1 0 1 1 0 8 0 mbufpl 256 337 0 0 20 0 20 20 0 8 0 bufpl 280 5197 0 176 359 0 359 359 0 8 0 anonpl 16 91474 0 77168 94 19 75 85 0 124 1 amapchunkpl 152 4456 0 4319 8 1 7 8 0 158 0 amappl16 192 3724 0 2719 66 14 52 61 0 8 1 amappl15 184 1 0 1 1 1 0 1 0 8 0 amappl14 176 11 0 9 2 1 1 1 0 8 0 amappl13 168 110 0 108 1 0 1 1 0 8 0 amappl12 160 124 0 122 1 0 1 1 0 8 0 amappl11 152 80 0 66 1 0 1 1 0 8 0 amappl10 144 163 0 160 1 0 1 1 0 8 0 amappl9 136 579 0 574 1 0 1 1 0 8 0 amappl8 128 571 0 544 1 0 1 1 0 8 0 amappl7 120 265 0 253 1 0 1 1 0 8 0 amappl6 112 29 0 25 1 0 1 1 0 8 0 amappl5 104 662 0 647 1 0 1 1 0 8 0 amappl4 96 614 0 583 2 1 1 2 0 8 0 amappl3 88 134 0 129 1 0 1 1 0 8 0 amappl2 80 5094 0 5032 3 1 2 3 0 8 0 amappl1 72 26758 0 26351 26 16 10 20 0 8 0 amappl 80 2269 0 2224 2 0 2 2 0 84 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 253 0 253 1 1 0 1 0 8 0 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 64 30 0 3 1 0 1 1 0 8 0 uaddrrnd 24 769 0 748 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 769 0 748 1 0 1 1 0 8 0 vmmpekpl 168 10514 0 10482 2 0 2 2 0 8 0 vmmpepl 168 102362 0 100249 154 25 129 129 0 357 31 vmsppl 368 768 0 748 2 0 2 2 0 8 0 pdppl 4096 1546 0 1503 6 0 6 6 0 8 0 pvpl 32 271385 0 254959 208 20 188 198 0 265 25 pmappl 232 768 0 748 2 0 2 2 0 8 0 extentpl 40 46 0 29 1 0 1 1 0 8 0 phpool 112 203 0 15 6 0 6 6 0 8 0