uvm_fault(0xfffffd803f013bb0, 0x12, 0, 1) -> e kernel: page fault trap, code=0 Stopped at in6_purgeaddr+0x135: movq 0x8(%r12),%r13 ddb> ddb> set $lines = 0 ddb> set $maxwidth = 0 ddb> show panic kernel page fault uvm_fault(0xfffffd803f013bb0, 0x12, 0, 1) -> e in6_purgeaddr(ffff800000a48600) at in6_purgeaddr+0x135 sys/netinet6/in6.c:914 end trace frame: 0xffff800015959a20, count: 0 ddb> trace in6_purgeaddr(ffff800000a48600) at in6_purgeaddr+0x135 sys/netinet6/in6.c:914 in6_ifdetach(ffff800000a49000) at in6_ifdetach+0x74 sys/netinet6/in6_ifattach.c:422 if_detach(ffff800000a49000) at if_detach+0x155 sys/net/if.c:1110 tun_clone_destroy(ffff800000a49000) at tun_clone_destroy+0x1c0 sys/net/if_tun.c:278 spec_close(ffff800015959b50) at spec_close+0x311 sys/kern/spec_vnops.c:555 VOP_CLOSE(fffffd803dafc8f0,7,fffffd803f7c6780,ffff8000ffff2290) at VOP_CLOSE+0xc0 sys/kern/vfs_vops.c:175 vn_closefile(fffffd802d560880,ffff8000ffff2290) at vn_closefile+0xd3 vn_close sys/kern/vfs_vnops.c:301 [inline] vn_closefile(fffffd802d560880,ffff8000ffff2290) at vn_closefile+0xd3 sys/kern/vfs_vnops.c:613 fdrop(fffffd802d560880,ffff8000ffff2290) at fdrop+0xc2 sys/kern/kern_descrip.c:1273 closef(fffffd802d560880,ffff8000ffff2290) at closef+0x118 sys/kern/kern_descrip.c:1257 fdfree(ffff8000ffff2290) at fdfree+0x100 sys/kern/kern_descrip.c:1189 exit1(ffff8000ffff2290,19,1) at exit1+0x32f sys/kern/kern_exit.c:196 postsig(ffff8000ffff2290,19) at postsig+0x4a6 sigexit sys/kern/kern_sig.c:1499 [inline] postsig(ffff8000ffff2290,19) at postsig+0x4a6 sys/kern/kern_sig.c:1431 userret(ffff8000ffff2290) at userret+0x159 sys/kern/kern_sig.c:1889 syscall(ffff800015959fd0) at syscall+0x42e mi_syscall_return sys/sys/syscall_mi.h:115 [inline] syscall(ffff800015959fd0) at syscall+0x42e sys/arch/amd64/amd64/trap.c:577 Xsyscall(6,38,7f7ffffe1ab0,3,0,e5279d29000) at Xsyscall+0x128 end of kernel end trace frame: 0x7f7ffffe1aa0, count: -15 ddb> show registers rdi 0 rsi 0 rbp 0xffff8000159599b0 rbx 0 rdx 0 rcx 0xfffffd803b647e00 rax 0 r8 0xffff800000a48b00 r9 0x1 r10 0x25aee352779e18b0 r11 0x7d02a236d92276c r12 0xa r13 0 r14 0xffff800000a48600 r15 0xffff800000a49000 rip 0xffffffff82014ef5 in6_purgeaddr+0x135 cs 0x8 rflags 0x10206 __ALIGN_SIZE+0xf206 rsp 0xffff800015959940 ss 0x10 in6_purgeaddr+0x135: movq 0x8(%r12),%r13 ddb> show proc PROC (syz-executor.0) pid=285554 stat=onproc flags process=a proc=2000 pri=17, usrpri=78, nice=20 forw=0xffffffffffffffff, list=0xffff8000ffff2c70,0xffff8000ffff2028 process=0xffff8000ffff7b10 user=0xffff800015955000, vmspace=0xfffffd803f013bb0 estcpu=28, cpticks=1, pctcpu=0.1 user=0, sys=1, intr=0 ddb> ps PID TID PPID UID S FLAGS WAIT COMMAND 85597 460266 15575 0 2 0x2 syz-executor.1 32263 197696 0 0 3 0x14200 acct acct 3049 14984 0 0 3 0x14200 bored sosplice 15575 25500 97302 0 3 0x82 thrsleep syz-fuzzer 15575 456772 97302 0 3 0x4000082 nanosleep syz-fuzzer 15575 58772 97302 0 3 0x4000082 thrsleep syz-fuzzer 15575 377989 97302 0 3 0x4000082 thrsleep syz-fuzzer 15575 301172 97302 0 2 0x4000082 syz-fuzzer 15575 351741 97302 0 3 0x4000082 thrsleep syz-fuzzer 15575 75309 97302 0 3 0x4000082 thrsleep syz-fuzzer 15575 47990 97302 0 3 0x4000082 thrsleep syz-fuzzer 97302 310465 90064 0 3 0x10008a pause ksh 90064 242608 15454 0 3 0x92 select sshd 20954 506770 1 0 3 0x100083 ttyin getty 15454 380736 1 0 3 0x80 select sshd 53387 58251 54835 73 3 0x100090 kqread syslogd 54835 376190 1 0 3 0x100082 netio syslogd 91932 111027 0 0 2 0x14200 zerothread 43894 517715 0 0 3 0x14200 aiodoned aiodoned 3934 165930 0 0 3 0x14200 syncer update 88757 482693 0 0 3 0x14200 cleaner cleaner 60377 183072 0 0 3 0x14200 reaper reaper 15695 148730 0 0 3 0x14200 pgdaemon pagedaemon 87215 345813 0 0 3 0x14200 bored crynlk 11907 418682 0 0 3 0x14200 bored crypto 97987 244561 0 0 3 0x40014200 acpi0 acpi0 37673 242577 0 0 2 0x14200 softnet 50561 34887 0 0 2 0x14200 systqmp 48511 411932 0 0 3 0x14200 bored systq 71836 425086 0 0 3 0x40014200 bored softclock 34837 509499 0 0 3 0x40014200 idle0 47863 476525 0 0 3 0x14200 bored smr 1 20325 0 0 3 0x82 wait init 0 0 -1 0 3 0x10200 scheduler swapper ddb> show all locks No such command ddb> show malloc Type InUse MemUse HighUse Limit Requests Type Lim Kern Lim devbuf 9528 6287K 7519K 78643K 15115 0 0 pcb 13 8K 8K 78643K 263 0 0 rtable 90 4K 5K 78643K 491 0 0 ifaddr 66 14K 16K 78643K 196 0 0 counters 19 16K 16K 78643K 19 0 0 ioctlops 0 0K 2K 78643K 73 0 0 iov 0 0K 32K 78643K 684 0 0 mount 1 1K 1K 78643K 1 0 0 vnodes 1231 77K 78K 78643K 2607 0 0 UFS quota 1 32K 32K 78643K 1 0 0 UFS mount 5 36K 36K 78643K 5 0 0 shm 2 1K 5K 78643K 12 0 0 VM map 8 2K 2K 78643K 15 0 0 sem 12 0K 0K 78643K 391 0 0 dirhash 12 2K 2K 78643K 12 0 0 ACPI 1793 195K 288K 78643K 12645 0 0 file desc 4 9K 25K 78643K 908 0 0 sigio 0 0K 0K 78643K 8 0 0 proc 45 30K 54K 78643K 722 0 0 subproc 23 1K 2K 78643K 136 0 0 NFS srvsock 1 0K 0K 78643K 1 0 0 NFS daemon 1 16K 16K 78643K 1 0 0 ip_moptions 0 0K 0K 78643K 107 0 0 in_multi 14 0K 2K 78643K 170 0 0 ether_multi 1 0K 0K 78643K 10 0 0 mrt 0 0K 0K 78643K 8 0 0 ISOFS mount 1 32K 32K 78643K 1 0 0 MSDOSFS mount 1 16K 16K 78643K 1 0 0 ttys 108 477K 477K 78643K 108 0 0 exec 0 0K 1K 78643K 344 0 0 pagedep 1 8K 8K 78643K 1 0 0 inodedep 1 32K 32K 78643K 1 0 0 newblk 1 0K 0K 78643K 1 0 0 VM swap 7 26K 26K 78643K 7 0 0 UVM amap 111 55K 55K 78643K 3150 0 0 UVM aobj 93 5K 5K 78643K 95 0 0 memdesc 1 4K 4K 78643K 1 0 0 crypto data 1 1K 1K 78643K 1 0 0 ip6_options 0 0K 0K 78643K 254 0 0 NDP 15 0K 0K 78643K 65 0 0 temp 191 3544K 3620K 78643K 76396 0 0 kqueue 0 0K 0K 78643K 1 0 0 SYN cache 2 16K 16K 78643K 2 0 0 ddb> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle arp 64 17 0 13 1 0 1 1 0 8 0 rtpcb 80 133 0 133 2 1 1 1 0 8 1 rtentry 112 137 0 105 2 0 2 2 0 8 0 unpcb 120 691 0 685 1 0 1 1 0 8 0 syncache 264 7 0 7 3 3 0 1 0 8 0 tcpqe 32 189 0 189 1 1 0 1 0 8 0 tcpcb 544 435 0 431 3 1 2 2 0 8 1 ipq 40 21 0 21 4 3 1 1 0 8 1 ipqe 40 525 0 525 4 3 1 1 0 8 1 inpcb 280 1243 0 1239 6 4 2 2 0 8 1 rttmr 72 1 0 1 1 1 0 1 0 8 0 nd6 48 24 0 23 1 0 1 1 0 8 0 pkpcb 40 2 0 2 1 1 0 1 0 8 0 ppxss 1128 13 0 13 5 4 1 1 0 8 1 art_heap8 4096 2 0 0 2 0 2 2 0 8 0 art_heap4 256 660 0 455 17 1 16 16 0 8 0 art_table 32 662 0 455 3 0 3 3 0 8 0 art_node 16 135 0 100 1 0 1 1 0 8 0 sysvmsgpl 40 101 0 90 1 0 1 1 0 8 0 semupl 112 1 0 1 1 1 0 1 0 8 0 semapl 112 389 0 379 1 0 1 1 0 8 0 shmpl 112 93 0 2 3 0 3 3 0 8 0 dirhash 1024 17 0 0 3 0 3 3 0 8 0 dino1pl 128 2763 0 1369 46 0 46 46 0 8 0 ffsino 240 2763 0 1369 83 0 83 83 0 8 0 nchpl 144 4548 0 4100 60 40 20 60 0 8 0 uvmvnodes 72 3962 0 0 73 0 73 73 0 8 0 vnodes 208 3962 0 0 209 0 209 209 0 8 0 namei 1024 14673 0 14673 2 1 1 1 0 8 1 vcpupl 1984 6 0 0 1 0 1 1 0 8 0 vmpool 520 13 0 7 3 2 1 1 0 8 0 scsiplug 64 1 0 1 1 1 0 1 0 8 0 scxspl 192 14228 0 14228 13 11 2 7 0 8 2 plimitpl 152 80 0 74 1 0 1 1 0 8 0 sigapl 432 1060 0 1050 2 0 2 2 0 8 0 futexpl 56 28866 0 28866 2 1 1 1 0 8 1 knotepl 112 217 0 198 1 0 1 1 0 8 0 kqueuepl 104 272 0 270 1 0 1 1 0 8 0 pipepl 112 790 0 772 4 3 1 2 0 8 0 fdescpl 424 1061 0 1050 2 0 2 2 0 8 0 filepl 120 9609 0 9534 8 4 4 5 0 8 1 lockfpl 104 379 0 379 2 1 1 1 0 8 1 lockfspl 48 128 0 128 2 1 1 1 0 8 1 sessionpl 112 23 0 15 1 0 1 1 0 8 0 pgrppl 48 39 0 31 1 0 1 1 0 8 0 ucredpl 96 1055 0 1049 1 0 1 1 0 8 0 zombiepl 144 1051 0 1050 1 0 1 1 0 8 0 processpl 864 1077 0 1050 4 0 4 4 0 8 0 procpl 632 2153 0 2119 4 0 4 4 0 8 0 sosppl 128 22 0 22 4 3 1 1 0 8 1 sockpl 384 2080 0 2070 8 4 4 4 0 8 2 mcl64k 65536 102 0 102 2 1 1 1 0 8 1 mcl16k 16384 21 0 21 3 2 1 1 0 8 1 mcl12k 12288 35 0 35 2 1 1 1 0 8 1 mcl9k 9216 15 0 15 5 4 1 1 0 8 1 mcl8k 8192 53 0 53 2 1 1 1 0 8 1 mcl4k 4096 116 0 116 3 2 1 1 0 8 1 mcl2k2 2112 20 0 20 2 2 0 1 0 8 0 mcl2k 2048 69304 0 69251 18 10 8 15 0 8 0 mtagpl 80 451 0 451 7 5 2 6 0 8 2 mbufpl 256 119543 0 119478 71 53 18 56 0 8 5 bufpl 256 9663 0 4336 334 0 334 334 0 8 0 anonpl 16 154928 0 136015 106 25 81 95 0 62 0 amapchunkpl 152 6376 0 6233 34 26 8 20 0 158 1 amappl16 192 6704 0 5582 96 34 62 69 0 8 4 amappl15 184 36 0 35 1 0 1 1 0 8 0 amappl14 176 231 0 225 1 0 1 1 0 8 0 amappl13 168 214 0 214 1 1 0 1 0 8 0 amappl12 160 375 0 373 1 0 1 1 0 8 0 amappl11 152 65 0 60 1 0 1 1 0 8 0 amappl10 144 24 0 23 1 0 1 1 0 8 0 amappl9 136 673 0 669 1 0 1 1 0 8 0 amappl8 128 250 0 217 2 0 2 2 0 8 0 amappl7 120 68 0 62 1 0 1 1 0 8 0 amappl6 112 56 0 46 1 0 1 1 0 8 0 amappl5 104 559 0 551 1 0 1 1 0 8 0 amappl4 96 1473 0 1446 1 0 1 1 0 8 0 amappl3 88 234 0 228 1 0 1 1 0 8 0 amappl2 80 7358 0 7304 3 1 2 3 0 8 0 amappl1 72 29132 0 28773 25 16 9 20 0 8 0 amappl 80 2484 0 2443 2 0 2 2 0 84 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 253 0 253 1 1 0 1 0 8 0 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 17 0 17 1 1 0 1 0 8 0 aobjpl 64 94 0 2 2 0 2 2 0 8 0 uaddrrnd 24 1074 0 1050 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 1074 0 1050 1 0 1 1 0 8 0 vmmpekpl 168 11494 0 11465 2 0 2 2 0 8 0 vmmpepl 168 139139 0 137126 177 40 137 137 0 357 39 vmsppl 272 1060 0 1050 2 1 1 2 0 8 0 pdppl 4096 2154 0 2120 6 1 5 6 0 8 0 pvpl 32 396603 0 374794 239 44 195 230 0 265 9 pmappl 200 1073 0 1057 1 0 1 1 0 8 0 extentpl 40 41 0 26 1 0 1 1 0 8 0 phpool 112 553 0 76 14 0 14 14 0 8 0