kernel: protection fault trap, code=0 Stopped at in6_purgeaddr+0x135: movq 0x8(%r12),%r13 ddb{0}> ddb{0}> set $lines = 0 ddb{0}> set $maxwidth = 0 ddb{0}> show panic the kernel did not panic ddb{0}> trace in6_purgeaddr(ffff800000b20b00) at in6_purgeaddr+0x135 sys/netinet6/in6.c:915 in6_ifdetach(ffff800000b22000) at in6_ifdetach+0x74 sys/netinet6/in6_ifattach.c:422 if_detach(ffff800000b22000) at if_detach+0x155 sys/net/if.c:1110 tun_clone_destroy(ffff800000b22000) at tun_clone_destroy+0x1c7 sys/net/if_tun.c:278 spec_close(ffff800021f6d430) at spec_close+0x3b0 sys/kern/spec_vnops.c:553 VOP_CLOSE(fffffd806e9815b8,7,fffffd807f7c6660,ffff800020ab0508) at VOP_CLOSE+0xc0 sys/kern/vfs_vops.c:175 vn_closefile(fffffd80665e6738,ffff800020ab0508) at vn_closefile+0xd8 vn_close sys/kern/vfs_vnops.c:301 [inline] vn_closefile(fffffd80665e6738,ffff800020ab0508) at vn_closefile+0xd8 sys/kern/vfs_vnops.c:613 fdrop(fffffd80665e6738,ffff800020ab0508) at fdrop+0xc2 sys/kern/kern_descrip.c:1273 closef(fffffd80665e6738,ffff800020ab0508) at closef+0x11d sys/kern/kern_descrip.c:1257 fdfree(ffff800020ab0508) at fdfree+0x101 sys/kern/kern_descrip.c:1189 exit1(ffff800020ab0508,9,1) at exit1+0x32f sys/kern/kern_exit.c:196 postsig(ffff800020ab0508,9) at postsig+0x4e3 sigexit sys/kern/kern_sig.c:1499 [inline] postsig(ffff800020ab0508,9) at postsig+0x4e3 sys/kern/kern_sig.c:1431 userret(ffff800020ab0508) at userret+0x199 sys/kern/kern_sig.c:1889 Xsyscall(6,7d83,7,b,8fe76,7f0e84e1000) at Xsyscall+0x156 end of kernel end trace frame: 0x7f7ffffc1210, count: -14 ddb{0}> show registers rdi 0x1 rsi 0x1 rbp 0xffff800021f6d290 rbx 0 rdx 0xa2 rcx 0 rax 0x3 r8 0x1 r9 0x1 r10 0xe2a51338f65f571e r11 0xf6cb3637e2933bb6 r12 0x100000000000000 r13 0 r14 0xffff800000b20b00 r15 0xffff800000b22000 rip 0xffffffff810836d5 in6_purgeaddr+0x135 cs 0x8 rflags 0x10206 __ALIGN_SIZE+0xf206 rsp 0xffff800021f6d220 ss 0x10 in6_purgeaddr+0x135: movq 0x8(%r12),%r13 ddb{0}> show proc PROC (syz-executor.0) pid=468028 stat=onproc flags process=a proc=2000 pri=77, usrpri=77, nice=20 forw=0xffffffffffffffff, list=0xffff800020ab0290,0xffff800020ab0c80 process=0xffff800020add180 user=0xffff800021f68000, vmspace=0xfffffd807f00a730 estcpu=36, cpticks=0, pctcpu=0.14 user=0, sys=0, intr=0 ddb{0}> ps PID TID PPID UID S FLAGS WAIT COMMAND 90776 307143 1 0 3 0x80 nanosleep init 13028 246331 51078 0 2 0x2 syz-executor.1 86477 205458 0 0 3 0x14200 bored sosplice 51078 176501 87381 0 3 0x82 thrsleep syz-fuzzer 51078 437368 87381 0 3 0x4000082 nanosleep syz-fuzzer 51078 195411 87381 0 3 0x4000082 thrsleep syz-fuzzer 51078 155217 87381 0 3 0x4000082 thrsleep syz-fuzzer 51078 127817 87381 0 3 0x4000082 thrsleep syz-fuzzer 51078 415221 87381 0 3 0x4000082 thrsleep syz-fuzzer 51078 7944 87381 0 3 0x4000082 nanosleep syz-fuzzer 51078 179481 87381 0 3 0x4000082 thrsleep syz-fuzzer 51078 3750 87381 0 3 0x4000082 thrsleep syz-fuzzer 51078 32097 87381 0 7 0x4000002 syz-fuzzer 87381 176825 36228 0 3 0x10008a pause ksh 36228 72162 17569 0 2 0x92 sshd 17569 36638 1 0 2 0x80 sshd 26821 388545 25316 74 3 0x100092 bpf pflogd 25316 162870 1 0 3 0x80 netio pflogd 42825 338550 36964 73 3 0x100010 ffs_fsync syslogd 36964 256904 1 0 3 0x100082 netio syslogd 52404 505844 1 77 2 0x100090 dhclient 43689 129463 1 0 2 0x80 dhclient 68890 478716 0 0 2 0x14200 zerothread 47453 27829 0 0 3 0x14200 aiodoned aiodoned 99854 36926 0 0 3 0x14200 syncer update 5683 522915 0 0 3 0x14200 cleaner cleaner 28335 178560 0 0 3 0x14200 reaper reaper 58636 25859 0 0 3 0x14200 pgdaemon pagedaemon 22193 227020 0 0 3 0x14200 bored crynlk 70199 96239 0 0 3 0x14200 bored crypto 60974 174717 0 0 3 0x40014200 acpi0 acpi0 13509 267741 0 0 3 0x40014200 idle1 43882 269864 0 0 2 0x14200 softnet 55937 243181 0 0 3 0x14200 bored systqmp 48393 140116 0 0 3 0x14200 bored systq 20131 492445 0 0 3 0x40014200 bored softclock 18534 60100 0 0 3 0x40014200 idle0 32215 451398 0 0 3 0x14200 bored smr 1 302247 0 0 3 0x82 wait init 0 0 -1 0 3 0x10200 scheduler swapper ddb{0}> show all locks Process 42825 (syslogd) thread 0xffff800020ac0ee0 (338550) exclusive rrwlock inode r = 0 (0xfffffd806ead2d58) #0 witness_lock+0x52e sys/kern/subr_witness.c:1163 #1 rw_enter+0x447 sys/kern/kern_rwlock.c:306 #2 rrw_enter+0x4f sys/kern/kern_rwlock.c:435 #3 VOP_LOCK+0xf0 sys/kern/vfs_vops.c:615 #4 vn_lock+0x81 sys/kern/vfs_vnops.c:574 #5 sys_fsync+0x114 sys/kern/vfs_syscalls.c:2806 #6 syscall+0x4a4 mi_syscall sys/sys/syscall_mi.h:92 [inline] #6 syscall+0x4a4 sys/arch/amd64/amd64/trap.c:555 #7 Xsyscall+0x128 ddb{0}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim Kern Lim devbuf 9613 6469K 7795K 78643K 23978 0 0 pcb 13 12K 14K 78643K 1319 0 0 rtable 87 8K 9K 78643K 3510 0 0 ifaddr 97 25K 29K 78643K 1089 0 0 counters 39 33K 33K 78643K 39 0 0 ioctlops 0 0K 4K 78643K 1739 0 0 iov 0 0K 28K 78643K 1143 0 0 mount 1 1K 1K 78643K 1 0 0 vnodes 1210 76K 77K 78643K 6345 0 0 UFS quota 1 32K 32K 78643K 1 0 0 UFS mount 5 36K 36K 78643K 5 0 0 shm 2 1K 5K 78643K 100 0 0 VM map 44 22K 22K 78643K 69 0 0 sem 12 0K 0K 78643K 1523 0 0 dirhash 12 2K 2K 78643K 12 0 0 ACPI 1808 196K 290K 78643K 12765 0 0 file desc 4 9K 25K 78643K 6237 0 0 sigio 0 0K 0K 78643K 59 0 0 proc 55 51K 95K 78643K 2187 0 0 subproc 23 1K 2K 78643K 533 0 0 NFS srvsock 1 0K 0K 78643K 1 0 0 NFS daemon 1 16K 16K 78643K 1 0 0 ip_moptions 0 0K 0K 78643K 515 0 0 in_multi 17 1K 2K 78643K 749 0 0 ether_multi 1 0K 0K 78643K 85 0 0 mrt 0 0K 0K 78643K 36 0 0 ISOFS mount 1 32K 32K 78643K 1 0 0 MSDOSFS mount 1 16K 16K 78643K 1 0 0 ttys 96 424K 424K 78643K 96 0 0 exec 0 0K 1K 78643K 1253 0 0 pagedep 1 8K 8K 78643K 1 0 0 inodedep 1 32K 32K 78643K 1 0 0 newblk 1 0K 0K 78643K 1 0 0 VM swap 7 26K 26K 78643K 7 0 0 UVM amap 179 397K 399K 78643K 23263 0 0 UVM aobj 130 8K 8K 78643K 179 0 0 memdesc 1 4K 4K 78643K 1 0 0 crypto data 1 1K 1K 78643K 1 0 0 ip6_options 0 0K 1K 78643K 1858 0 0 NDP 23 0K 1K 78643K 340 0 0 temp 249 3565K 4205K 78643K 160942 0 0 kqueue 0 0K 0K 78643K 72 0 0 SYN cache 2 16K 16K 78643K 2 0 0 ddb{0}> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle arp 64 106 0 102 1 0 1 1 0 8 0 plcache 128 20 0 0 1 0 1 1 0 8 0 rtpcb 80 458 0 456 1 0 1 1 0 8 0 rtentry 112 575 0 548 2 0 2 2 0 8 0 unpcb 120 2943 0 2929 2 1 1 2 0 8 0 syncache 264 49 0 49 15 15 0 1 0 8 0 sackhl 24 1 0 1 1 1 0 1 0 8 0 tcpqe 32 105 0 105 4 4 0 1 0 8 0 tcpcb 544 3195 0 3191 33 32 1 14 0 8 0 inpcb 280 14753 0 14746 47 46 1 13 0 8 0 rttmr 72 14 0 14 1 0 1 1 0 8 1 ip6q 72 5 0 5 2 2 0 1 0 8 0 ip6af 40 15 0 15 2 2 0 1 0 8 0 nd6 48 83 0 82 6 5 1 1 0 8 0 pkpcb 40 28 0 28 11 11 0 1 0 8 0 swfcl 56 6 0 0 1 0 1 1 0 8 0 ppxss 1128 156 0 156 19 19 0 1 0 8 0 pffrag 232 111 0 111 16 16 0 1 0 482 0 pffrnode 88 107 0 107 16 16 0 1 0 8 0 pffrent 40 2306 0 2306 16 16 0 1 0 8 0 pfosfp 40 846 0 423 5 0 5 5 0 8 0 pfosfpen 112 1428 0 714 21 0 21 21 0 8 0 pfstitem 24 451 0 422 1 0 1 1 0 8 0 pfstkey 112 452 0 423 4 1 3 3 0 8 0 pfstate 328 452 0 423 10 4 6 7 0 8 0 pfrule 1360 21 0 16 2 1 1 2 0 8 0 art_heap8 4096 24 0 23 18 16 2 4 0 8 1 art_heap4 256 2514 0 2353 32 18 14 18 0 8 0 art_table 32 2538 0 2376 3 0 3 3 0 8 0 art_node 16 574 0 549 1 0 1 1 0 8 0 sysvmsgpl 40 34 0 30 2 1 1 1 0 8 0 semupl 112 1 0 1 1 1 0 1 0 8 0 semapl 112 1521 0 1511 1 0 1 1 0 8 0 shmpl 112 177 0 49 4 0 4 4 0 8 0 dirhash 1024 17 0 0 3 0 3 3 0 8 0 dino1pl 128 10934 0 9506 47 0 47 47 0 8 0 ffsino 272 10934 0 9506 96 0 96 96 0 8 0 nchpl 144 21663 0 20010 62 0 62 62 0 8 0 uvmvnodes 72 6171 0 0 113 0 113 113 0 8 0 vnodes 208 6171 0 0 325 0 325 325 0 8 0 namei 1024 71661 0 71661 3 2 1 1 0 8 1 percpumem 16 30 0 0 1 0 1 1 0 8 0 vcpupl 1984 42 0 0 6 0 6 6 0 8 0 vmpool 552 67 0 25 5 2 3 4 0 8 0 scsiplug 64 4 0 4 3 3 0 1 0 8 0 scxspl 192 67807 0 67804 41 40 1 7 0 8 0 plimitpl 152 471 0 463 1 0 1 1 0 8 0 sigapl 432 6353 0 6339 3 1 2 3 0 8 0 futexpl 56 128903 0 128903 3 3 0 1 0 8 0 knotepl 112 1635 0 1616 9 8 1 3 0 8 0 kqueuepl 104 1792 0 1790 8 7 1 4 0 8 0 pipepl 112 4434 0 4416 16 15 1 2 0 8 0 fdescpl 488 6354 0 6339 3 0 3 3 0 8 0 filepl 152 56038 0 55948 52 47 5 14 0 8 1 lockfpl 104 2287 0 2286 1 0 1 1 0 8 0 lockfspl 48 756 0 755 1 0 1 1 0 8 0 sessionpl 112 49 0 38 1 0 1 1 0 8 0 pgrppl 48 111 0 100 1 0 1 1 0 8 0 ucredpl 96 6248 0 6238 1 0 1 1 0 8 0 zombiepl 144 6346 0 6344 3 2 1 1 0 8 0 processpl 896 6376 0 6344 4 0 4 4 0 8 0 procpl 632 20766 0 20725 8 4 4 5 0 8 0 srpgc 64 44 0 44 18 18 0 1 0 8 0 sosppl 128 87 0 87 16 16 0 1 0 8 0 sockpl 384 18240 0 18217 74 70 4 23 0 8 1 mcl64k 65536 266 0 0 34 29 5 34 0 8 0 mcl16k 16384 23 0 0 3 1 2 3 0 8 0 mcl12k 12288 25 0 0 2 0 2 2 0 8 0 mcl9k 9216 17 0 0 2 0 2 2 0 8 0 mcl8k 8192 17 0 0 3 0 3 3 0 8 0 mcl4k 4096 33 0 0 5 2 3 3 0 8 0 mcl2k2 2112 4 0 0 1 0 1 1 0 8 0 mcl2k 2048 199 0 0 23 6 17 23 0 8 0 mtagpl 80 103 0 0 1 0 1 1 0 8 0 mbufpl 256 1005 0 0 46 0 46 46 0 8 0 bufpl 256 24682 0 17634 441 0 441 441 0 8 0 anonpl 16 771004 0 752764 212 122 90 91 0 124 12 amapchunkpl 152 47491 0 47377 92 85 7 19 0 158 1 amappl16 192 34509 0 33430 230 168 62 67 0 8 7 amappl15 184 1941 0 1939 1 0 1 1 0 8 0 amappl14 176 1806 0 1804 2 1 1 1 0 8 0 amappl13 168 345 0 345 4 4 0 1 0 8 0 amappl12 160 301 0 300 6 5 1 1 0 8 0 amappl11 152 991 0 976 1 0 1 1 0 8 0 amappl10 144 1165 0 1158 1 0 1 1 0 8 0 amappl9 136 1100 0 1094 1 0 1 1 0 8 0 amappl8 128 695 0 642 2 0 2 2 0 8 0 amappl7 120 1298 0 1289 1 0 1 1 0 8 0 amappl6 112 942 0 926 1 0 1 1 0 8 0 amappl5 104 665 0 651 1 0 1 1 0 8 0 amappl4 96 6288 0 6257 1 0 1 1 0 8 0 amappl3 88 1505 0 1498 1 0 1 1 0 8 0 amappl2 80 49359 0 49291 4 1 3 3 0 8 0 amappl1 72 151692 0 151298 25 14 11 20 0 8 0 amappl 80 21603 0 21543 2 0 2 2 0 84 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 253 0 253 1 1 0 1 0 8 0 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 17 0 17 1 1 0 1 0 8 0 aobjpl 64 178 0 49 4 1 3 3 0 8 0 uaddrrnd 24 6421 0 6339 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 6421 0 6339 1 0 1 1 0 8 0 vmmpekpl 168 55230 0 55181 3 0 3 3 0 8 0 vmmpepl 168 809417 0 807213 379 261 118 145 0 357 10 vmsppl 368 6353 0 6339 2 0 2 2 0 8 0 pdppl 4096 12849 0 12770 15 4 11 11 0 8 0 pvpl 32 1950626 0 1929931 409 201 208 213 0 265 30 pmappl 232 6420 0 6364 9 5 4 4 0 8 0 extentpl 40 41 0 26 1 0 1 1 0 8 0 phpool 112 761 0 113 20 0 20 20 0 8 0 ddb{0}> serialport: VM disconnected.