kernel: protection fault trap, code=0 Stopped at in6_purgeaddr+0x135: movq 0x8(%r12),%r13 ddb{1}> ddb{1}> set $lines = 0 ddb{1}> set $maxwidth = 0 ddb{1}> show panic the kernel did not panic ddb{1}> trace in6_purgeaddr(ffff800000b0af00) at in6_purgeaddr+0x135 sys/netinet6/in6.c:915 in6_ifdetach(ffff800000af1800) at in6_ifdetach+0x74 sys/netinet6/in6_ifattach.c:422 if_detach(ffff800000af1800) at if_detach+0x155 sys/net/if.c:1110 tun_clone_destroy(ffff800000af1800) at tun_clone_destroy+0x1c7 sys/net/if_tun.c:278 spec_close(ffff800023a1ec90) at spec_close+0x3b0 sys/kern/spec_vnops.c:553 VOP_CLOSE(fffffd806ec0e278,7,fffffd807f7c67e0,ffff800020ab1650) at VOP_CLOSE+0xc0 sys/kern/vfs_vops.c:175 vn_closefile(fffffd8066445850,ffff800020ab1650) at vn_closefile+0xd8 vn_close sys/kern/vfs_vnops.c:289 [inline] vn_closefile(fffffd8066445850,ffff800020ab1650) at vn_closefile+0xd8 sys/kern/vfs_vnops.c:601 fdrop(fffffd8066445850,ffff800020ab1650) at fdrop+0xc2 sys/kern/kern_descrip.c:1273 closef(fffffd8066445850,ffff800020ab1650) at closef+0x11d sys/kern/kern_descrip.c:1257 fdfree(ffff800020ab1650) at fdfree+0x101 sys/kern/kern_descrip.c:1189 exit1(ffff800020ab1650,0,3) at exit1+0x32f sys/kern/kern_exit.c:196 single_thread_check(ffff800020ab1650,0) at single_thread_check+0x144 sys/kern/kern_sig.c:1943 userret(ffff800020ab1650) at userret+0x34a sys/kern/kern_sig.c:1912 syscall(ffff800023a1f070) at syscall+0x55f mi_syscall_return sys/sys/syscall_mi.h:115 [inline] syscall(ffff800023a1f070) at syscall+0x55f sys/arch/amd64/amd64/trap.c:577 Xsyscall(6,4,b550e51cd10,5b,1c4bc8,b57ed1bc000) at Xsyscall+0x128 end of kernel end trace frame: 0x7f7ffffca750, count: -15 ddb{1}> show registers rdi 0 rsi 0 rbp 0xffff800023a1eaf0 rbx 0xffff800000af2700 rdx 0x97 rcx 0x98 rax 0 r8 0xffffffff81f17364 rt_ifa_dellocal+0x44 r9 0x1 r10 0x18 r11 0x25710c126a5de4e4 r12 0x3030317830202c36 r13 0 r14 0xffff800000b0af00 r15 0xffff800000af1800 rip 0xffffffff815626e5 in6_purgeaddr+0x135 cs 0x8 rflags 0x10206 __ALIGN_SIZE+0xf206 rsp 0xffff800023a1ea80 ss 0x10 in6_purgeaddr+0x135: movq 0x8(%r12),%r13 ddb{1}> show proc PROC (syz-executor.1) pid=337432 stat=onproc flags process=1008 proc=82000 pri=32, usrpri=86, nice=20 forw=0xffffffffffffffff, list=0xffff800020acec78,0xffffffff82671458 process=0xffff8000239ba708 user=0xffff800023a1a000, vmspace=0xfffffd807f00ba10 estcpu=36, cpticks=6, pctcpu=0.0 user=0, sys=1, intr=0 ddb{1}> ps PID TID PPID UID S FLAGS WAIT COMMAND 34494 318679 0 0 3 0x14200 bored sosplice 38020 469585 42056 0 3 0x82 thrsleep syz-fuzzer 38020 515843 42056 0 3 0x4000082 nanosleep syz-fuzzer 38020 71547 42056 0 3 0x4000082 thrsleep syz-fuzzer 38020 224623 42056 0 3 0x4000082 thrsleep syz-fuzzer 38020 159865 42056 0 3 0x4000082 thrsleep syz-fuzzer 38020 73499 42056 0 2 0x4000002 syz-fuzzer 38020 168907 42056 0 3 0x4000082 thrsleep syz-fuzzer 38020 47979 42056 0 3 0x4000082 wait syz-fuzzer 38020 202630 42056 0 3 0x4000082 thrsleep syz-fuzzer 38020 86651 42056 0 3 0x4000082 thrsleep syz-fuzzer 42056 14017 1 0 2 0x10008a ksh 65560 64635 1 0 3 0 biowait sshd 97751 139926 52992 74 2 0x100092 pflogd 52992 110358 1 0 3 0x80 netio pflogd 91911 513367 29183 73 3 0x100090 netio syslogd 29183 446650 1 0 2 0x100002 syslogd 35936 415212 1 77 2 0x100090 dhclient 38508 330584 1 0 3 0x80 poll dhclient 33992 429678 0 0 2 0x14200 zerothread 73063 79678 0 0 3 0x14200 aiodoned aiodoned 11625 205231 0 0 3 0x14200 syncer update 80350 416892 0 0 3 0x14200 cleaner cleaner 46022 80090 0 0 7 0x14200 reaper 34321 463768 0 0 3 0x14200 pgdaemon pagedaemon 44880 307069 0 0 3 0x14200 bored crynlk 42964 13038 0 0 3 0x14200 bored crypto 18547 252769 0 0 3 0x40014200 acpi0 acpi0 86548 471118 0 0 3 0x40014200 idle1 13591 481044 0 0 2 0x14200 softnet 43964 502680 0 0 2 0x14200 systqmp 39572 215780 0 0 3 0x14200 bored systq 93677 265422 0 0 3 0x40014200 bored softclock 12058 117592 0 0 3 0x40014200 idle0 54810 330549 0 0 3 0x14200 bored smr 1 409124 0 0 2 0x2 init 0 0 -1 0 3 0x10200 scheduler swapper ddb{1}> show all locks Process 65560 (sshd) thread 0xffff800020ac1648 (64635) exclusive rrwlock inode r = 0 (0xfffffd806dcc0d58) #0 witness_lock+0x52e sys/kern/subr_witness.c:1163 #1 rw_enter+0x447 sys/kern/kern_rwlock.c:306 #2 rrw_enter+0x4f sys/kern/kern_rwlock.c:435 #3 VOP_LOCK+0xf0 sys/kern/vfs_vops.c:615 #4 vn_lock+0x81 sys/kern/vfs_vnops.c:562 #5 vget+0x1c3 sys/kern/vfs_subr.c:672 #6 ufs_ihashget+0x141 sys/ufs/ufs/ufs_ihash.c:119 #7 ffs_vget+0x74 sys/ufs/ffs/ffs_vfsops.c:1323 #8 ufs_lookup+0x14b4 sys/ufs/ufs/ufs_lookup.c:487 #9 VOP_LOOKUP+0x5b sys/kern/vfs_vops.c:91 #10 vfs_lookup+0x7a6 sys/kern/vfs_lookup.c:568 #11 namei+0x63c sys/kern/vfs_lookup.c:249 #12 dounlinkat+0x99 sys/kern/vfs_syscalls.c:1785 #13 syscall+0x4a4 mi_syscall sys/sys/syscall_mi.h:92 [inline] #13 syscall+0x4a4 sys/arch/amd64/amd64/trap.c:555 #14 Xsyscall+0x128 exclusive rrwlock inode r = 0 (0xfffffd806f86e3d8) #0 witness_lock+0x52e sys/kern/subr_witness.c:1163 #1 rw_enter+0x447 sys/kern/kern_rwlock.c:306 #2 rrw_enter+0x4f sys/kern/kern_rwlock.c:435 #3 VOP_LOCK+0xf0 sys/kern/vfs_vops.c:615 #4 vn_lock+0x81 sys/kern/vfs_vnops.c:562 #5 vget+0x1c3 sys/kern/vfs_subr.c:672 #6 cache_lookup+0x2bb sys/kern/vfs_cache.c:224 #7 ufs_lookup+0x1bc sys/ufs/ufs/ufs_lookup.c:162 #8 VOP_LOOKUP+0x5b sys/kern/vfs_vops.c:91 #9 vfs_lookup+0x7a6 sys/kern/vfs_lookup.c:568 #10 namei+0x63c sys/kern/vfs_lookup.c:249 #11 dounlinkat+0x99 sys/kern/vfs_syscalls.c:1785 #12 syscall+0x4a4 mi_syscall sys/sys/syscall_mi.h:92 [inline] #12 syscall+0x4a4 sys/arch/amd64/amd64/trap.c:555 #13 Xsyscall+0x128 ddb{1}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim Kern Lim devbuf 9615 6520K 7088K 78643K 17953 0 0 pcb 13 10K 12K 78643K 707 0 0 rtable 99 13K 14K 78643K 2602 0 0 ifaddr 89 19K 21K 78643K 753 0 0 counters 39 33K 33K 78643K 39 0 0 ioctlops 0 0K 4K 78643K 1750 0 0 iov 0 0K 24K 78643K 697 0 0 mount 1 1K 1K 78643K 1 0 0 vnodes 1215 76K 77K 78643K 4243 0 0 UFS quota 1 32K 32K 78643K 1 0 0 UFS mount 5 36K 36K 78643K 5 0 0 shm 2 1K 5K 78643K 75 0 0 VM map 31 15K 16K 78643K 52 0 0 sem 12 1K 2K 78643K 664 0 0 dirhash 12 2K 2K 78643K 12 0 0 ACPI 1808 196K 290K 78643K 12765 0 0 file desc 3 5K 25K 78643K 3715 0 0 sigio 0 0K 0K 78643K 34 0 0 proc 54 51K 95K 78643K 1744 0 0 subproc 7 0K 2K 78643K 412 0 0 NFS srvsock 1 0K 0K 78643K 1 0 0 NFS daemon 1 16K 16K 78643K 1 0 0 ip_moptions 0 0K 0K 78643K 293 0 0 in_multi 18 1K 2K 78643K 553 0 0 ether_multi 1 0K 0K 78643K 62 0 0 mrt 1 0K 0K 78643K 18 0 0 ISOFS mount 1 32K 32K 78643K 1 0 0 MSDOSFS mount 1 16K 16K 78643K 1 0 0 ttys 78 344K 344K 78643K 78 0 0 exec 0 0K 1K 78643K 858 0 0 pagedep 1 8K 8K 78643K 1 0 0 inodedep 1 32K 32K 78643K 1 0 0 newblk 1 0K 0K 78643K 1 0 0 VM swap 7 26K 26K 78643K 7 0 0 UVM amap 158 242K 267K 78643K 14983 0 0 UVM aobj 130 6K 6K 78643K 137 0 0 memdesc 1 4K 4K 78643K 1 0 0 crypto data 1 1K 1K 78643K 1 0 0 ip6_options 0 0K 0K 78643K 828 0 0 NDP 23 0K 1K 78643K 243 0 0 temp 233 3560K 4201K 78643K 110796 0 0 kqueue 0 0K 0K 78643K 59 0 0 SYN cache 2 16K 16K 78643K 2 0 0 ddb{1}> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle arp 64 105 0 102 1 0 1 1 0 8 0 plcache 128 20 0 0 1 0 1 1 0 8 0 rtpcb 80 293 0 291 1 0 1 1 0 8 0 rtentry 112 451 0 420 2 0 2 2 0 8 0 unpcb 120 1455 0 1444 1 0 1 1 0 8 0 syncache 264 31 0 31 15 15 0 1 0 8 0 tcpqe 32 7577 0 7577 4 4 0 1 0 8 0 tcpcb 544 1468 0 1464 12 11 1 12 0 8 0 inpcb 280 7065 0 7060 142 139 3 9 0 8 2 rttmr 72 7 0 6 5 4 1 1 0 8 0 ip6q 72 1 0 1 1 1 0 1 0 8 0 ip6af 40 1 0 1 1 1 0 1 0 8 0 nd6 48 61 0 59 5 4 1 1 0 8 0 pkpcb 40 12 0 12 5 5 0 1 0 8 0 ppxss 1128 90 0 90 55 55 0 1 0 8 0 pffrag 232 60 0 60 30 30 0 1 0 482 0 pffrnode 88 60 0 60 30 30 0 1 0 8 0 pffrent 40 1498 0 1498 30 30 0 1 0 8 0 pfosfp 40 846 0 423 5 0 5 5 0 8 0 pfosfpen 112 1428 0 714 21 0 21 21 0 8 0 pfstitem 24 363 0 355 1 0 1 1 0 8 0 pfstkey 112 363 0 355 1 0 1 1 0 8 0 pfstate 328 363 0 355 6 4 2 3 0 8 0 pfrule 1360 21 0 16 2 1 1 2 0 8 0 art_heap8 4096 2 0 1 2 1 1 2 0 8 0 art_heap4 256 1893 0 1693 47 31 16 17 0 8 0 art_table 32 1895 0 1694 3 0 3 3 0 8 0 art_node 16 446 0 415 1 0 1 1 0 8 0 sysvmsgpl 40 45 0 34 1 0 1 1 0 8 0 semupl 112 2 0 2 1 1 0 1 0 8 0 semapl 112 658 0 648 1 0 1 1 0 8 0 shmpl 112 135 0 7 4 0 4 4 0 8 0 dirhash 1024 17 0 0 3 0 3 3 0 8 0 dino1pl 128 6983 0 5573 46 0 46 46 0 8 0 ffsino 272 6983 0 5573 95 0 95 95 0 8 0 nchpl 144 12310 0 10704 61 0 61 61 0 8 0 uvmvnodes 72 5926 0 0 108 0 108 108 0 8 0 vnodes 208 5926 0 0 312 0 312 312 0 8 0 namei 1024 40526 0 40526 4 3 1 1 0 8 1 percpumem 16 30 0 0 1 0 1 1 0 8 0 vcpupl 1984 29 0 0 4 0 4 4 0 8 0 vmpool 552 50 0 21 5 2 3 3 0 8 0 scsiplug 64 8 0 8 8 7 1 1 0 8 1 scxspl 192 40186 0 40185 41 40 1 7 0 8 0 plimitpl 152 350 0 344 1 0 1 1 0 8 0 sigapl 432 3870 0 3859 6 3 3 3 0 8 0 futexpl 56 77785 0 77785 1 0 1 1 0 8 1 knotepl 112 994 0 983 2 1 1 2 0 8 0 kqueuepl 104 1844 0 1842 4 3 1 4 0 8 0 pipepl 112 9902 0 9897 53 51 2 2 0 8 1 fdescpl 488 3871 0 3859 3 0 3 3 0 8 0 filepl 152 36572 0 36517 82 76 6 14 0 8 1 lockfpl 104 1296 0 1295 1 0 1 1 0 8 0 lockfspl 48 418 0 417 1 0 1 1 0 8 0 sessionpl 112 43 0 34 1 0 1 1 0 8 0 pgrppl 48 76 0 67 1 0 1 1 0 8 0 ucredpl 96 3721 0 3712 1 0 1 1 0 8 0 zombiepl 144 3863 0 3860 4 3 1 1 0 8 0 processpl 896 3890 0 3860 5 0 5 5 0 8 0 procpl 632 12244 0 12203 5 0 5 5 0 8 0 srpgc 64 25 0 25 11 11 0 1 0 8 0 sosppl 128 1572 0 1572 82 81 1 2 0 8 1 sockpl 384 8978 0 8960 166 161 5 14 0 8 2 mcl64k 65536 744 0 0 88 80 8 33 0 8 1 mcl16k 16384 17 0 0 3 0 3 3 0 8 0 mcl12k 12288 51 0 0 3 1 2 2 0 8 0 mcl9k 9216 13 0 0 1 0 1 1 0 8 0 mcl8k 8192 33 0 0 4 1 3 3 0 8 0 mcl4k 4096 35 0 0 3 1 2 3 0 8 0 mcl2k2 2112 6 0 0 1 0 1 1 0 8 0 mcl2k 2048 247 0 0 22 11 11 22 0 8 0 mtagpl 80 58 0 0 1 0 1 1 0 8 0 mbufpl 256 1708 0 0 33 6 27 29 0 8 0 bufpl 256 18141 0 11093 441 0 441 441 0 8 0 anonpl 16 2119817 0 2101321 485 376 109 109 0 124 15 amapchunkpl 152 38958 0 38797 101 92 9 14 0 158 0 amappl16 192 115208 0 114192 725 663 62 75 0 8 8 amappl15 184 1052 0 1052 3 3 0 1 0 8 0 amappl14 176 498 0 494 2 1 1 1 0 8 0 amappl13 168 799 0 796 1 0 1 1 0 8 0 amappl12 160 588 0 586 1 0 1 1 0 8 0 amappl11 152 135 0 119 1 0 1 1 0 8 0 amappl10 144 422 0 416 1 0 1 1 0 8 0 amappl9 136 1091 0 1086 1 0 1 1 0 8 0 amappl8 128 619 0 579 2 0 2 2 0 8 0 amappl7 120 533 0 525 1 0 1 1 0 8 0 amappl6 112 122 0 108 1 0 1 1 0 8 0 amappl5 104 905 0 891 1 0 1 1 0 8 0 amappl4 96 4317 0 4280 7 5 2 2 0 8 1 amappl3 88 794 0 783 1 0 1 1 0 8 0 amappl2 80 29628 0 29561 4 2 2 3 0 8 0 amappl1 72 98457 0 98056 28 16 12 20 0 8 1 amappl 80 13640 0 13585 2 0 2 2 0 84 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 253 0 253 1 1 0 1 0 8 0 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 17 0 17 1 1 0 1 0 8 0 aobjpl 64 136 0 7 3 0 3 3 0 8 0 uaddrrnd 24 3921 0 3858 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 3921 0 3858 1 0 1 1 0 8 0 vmmpekpl 168 54196 0 54159 3 0 3 3 0 8 0 vmmpepl 168 595699 0 593581 675 552 123 139 0 357 12 vmsppl 368 3870 0 3857 2 0 2 2 0 8 0 pdppl 4096 7849 0 7785 15 5 10 10 0 8 0 pvpl 32 3130978 0 3111275 894 653 241 241 0 265 35 pmappl 232 3920 0 3878 5 2 3 3 0 8 0 extentpl 40 41 0 26 1 0 1 1 0 8 0 phpool 112 778 0 153 19 0 19 19 0 8 0 ddb{1}> serialport: VM disconnected.