uvm_fault(0xffffffff827ec0f0, 0xffffffff0000000b, 0, 1) -> e kernel: page fault trap, code=0 Stopped at in_delmulti+0x8d: movl 0xc(%r14),%r15d ddb> ddb> set $lines = 0 ddb> set $maxwidth = 0 ddb> show panic kernel page fault uvm_fault(0xffffffff827ec0f0, 0xffffffff0000000b, 0, 1) -> e in_delmulti(fffffffeffffffff) at in_delmulti+0x8d sys/netinet/in.c:914 end trace frame: 0xffff80001d6f6fd0, count: 0 ddb> trace in_delmulti(fffffffeffffffff) at in_delmulti+0x8d sys/netinet/in.c:914 in_purgeaddr(ffff800000afc200) at in_purgeaddr+0x156 sys/netinet/in.c:760 in_ifdetach(ffff800000ac6800) at in_ifdetach+0x74 sys/netinet/in.c:971 if_detach(ffff800000ac6800) at if_detach+0x140 sys/net/if.c:1039 tun_clone_destroy(ffff800000ac6800) at tun_clone_destroy+0x1c7 sys/net/if_tun.c:326 tun_dev_close(5d00,7) at tun_dev_close+0x160 sys/net/if_tun.c:477 spec_close(ffff80001d6f71b0) at spec_close+0x311 sys/kern/spec_vnops.c:560 VOP_CLOSE(fffffd805e513a90,7,fffffd806c3bfa80,ffff80001d75d3a0) at VOP_CLOSE+0xc0 sys/kern/vfs_vops.c:174 vn_closefile(fffffd805751c358,ffff80001d75d3a0) at vn_closefile+0xd2 vn_close sys/kern/vfs_vnops.c:298 [inline] vn_closefile(fffffd805751c358,ffff80001d75d3a0) at vn_closefile+0xd2 sys/kern/vfs_vnops.c:614 fdrop(fffffd805751c358,ffff80001d75d3a0) at fdrop+0xc2 sys/kern/kern_descrip.c:1279 closef(fffffd805751c358,ffff80001d75d3a0) at closef+0x117 sys/kern/kern_descrip.c:1263 fdfree(ffff80001d75d3a0) at fdfree+0x100 sys/kern/kern_descrip.c:1195 exit1(ffff80001d75d3a0,0,0,1) at exit1+0x32c sys/kern/kern_exit.c:197 sys_exit(ffff80001d75d3a0,ffff80001d6f7440,ffff80001d6f7490) at sys_exit+0x16 sys/kern/kern_exit.c:95 syscall(ffff80001d6f7510) at syscall+0x507 sys/arch/amd64/amd64/trap.c:570 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7f7ffffe1310, count: -16 ddb> show registers rdi 0x2 rsi 0 rbp 0xffff80001d6f6f80 rbx 0x8 rdx 0x3 rcx 0x1 rax 0 r8 0xffffffff815fff63 rt_ifa_purge+0x153 r9 0x5 r10 0x58865d65394696c1 r11 0x5270314150712daf r12 0 r13 0x3 r14 0xfffffffeffffffff r15 0x1 rip 0xffffffff819a982d in_delmulti+0x8d cs 0x8 rflags 0x10246 __ALIGN_SIZE+0xf246 rsp 0xffff80001d6f6f20 ss 0x10 in_delmulti+0x8d: movl 0xc(%r14),%r15d ddb> show proc PROC (syz-executor.0) pid=85395 stat=onproc flags process=1008 proc=2000 pri=32, usrpri=57, nice=20 forw=0xffffffffffffffff, list=0xffff80001d75d880,0xffff80001d75db00 process=0xffff80001d780b10 user=0xffff80001d6f2000, vmspace=0xfffffd805c35d120 estcpu=7, cpticks=0, pctcpu=0.0 user=0, sys=0, intr=0 ddb> ps PID TID PPID UID S FLAGS WAIT COMMAND 49021 157642 0 0 3 0x14200 acct acct 62055 370538 1 0 3 0x100083 ttyin getty 80086 523866 0 0 3 0x14280 nfsidl nfsio 32976 451143 0 0 3 0x14280 nfsidl nfsio 95862 39366 0 0 3 0x14280 nfsidl nfsio 36785 119493 0 0 3 0x14280 nfsidl nfsio 33396 101244 0 0 3 0x14280 nfsidl nfsio 88701 70654 0 0 3 0x14280 nfsidl nfsio 54606 62547 0 0 3 0x14280 nfsidl nfsio 55528 452376 0 0 3 0x14280 nfsidl nfsio 30764 163911 0 0 3 0x14280 nfsidl nfsio 56518 61814 0 0 3 0x14280 nfsidl nfsio 70232 138194 0 0 3 0x14280 nfsidl nfsio 30597 503842 0 0 3 0x14280 nfsidl nfsio 27992 150033 0 0 3 0x14280 nfsidl nfsio 79687 512545 0 0 3 0x14280 nfsidl nfsio 3415 389215 0 0 3 0x14280 nfsidl nfsio 60883 23869 0 0 3 0x14280 nfsidl nfsio 59284 443162 0 0 3 0x14280 nfsidl nfsio 66966 163280 0 0 3 0x14280 nfsidl nfsio 77016 507409 0 0 3 0x14280 nfsidl nfsio 85863 375087 0 0 3 0x14280 nfsidl nfsio 44081 390029 0 0 3 0x14200 bored sosplice 88622 254261 3738 0 3 0x82 wait syz-executor.1 3738 179854 83614 0 3 0x82 thrsleep syz-fuzzer 3738 16179 83614 0 3 0x4000082 thrsleep syz-fuzzer 3738 399212 83614 0 3 0x4000082 thrsleep syz-fuzzer 3738 383829 83614 0 3 0x4000082 thrsleep syz-fuzzer 3738 240308 83614 0 3 0x4000082 thrsleep syz-fuzzer 3738 107170 83614 0 3 0x4000082 kqread syz-fuzzer 3738 8058 83614 0 3 0x4000082 thrsleep syz-fuzzer 3738 39426 83614 0 3 0x4000082 thrsleep syz-fuzzer 3738 459213 83614 0 3 0x4000082 thrsleep syz-fuzzer 83614 357007 89354 0 3 0x10008a pause ksh 89354 517778 27058 0 3 0x92 select sshd 27058 199609 1 0 3 0x80 select sshd 64542 120351 93276 73 3 0x100090 kqread syslogd 93276 77776 1 0 3 0x100082 netio syslogd 54015 517086 1 77 3 0x100090 poll dhclient 28228 305724 1 0 3 0x80 poll dhclient 95881 297192 0 0 3 0x14200 bored smr 24558 279785 0 0 3 0x14200 pgzero zerothread 17690 271502 0 0 3 0x14200 aiodoned aiodoned 88748 460425 0 0 3 0x14200 syncer update 22580 353657 0 0 3 0x14200 cleaner cleaner 67506 355867 0 0 3 0x14200 reaper reaper 37240 20710 0 0 3 0x14200 pgdaemon pagedaemon 81583 232769 0 0 3 0x14200 bored crynlk 85884 328300 0 0 3 0x14200 bored crypto 33672 459059 0 0 3 0x40014200 acpi0 acpi0 27832 142528 0 0 3 0x14200 bored softnet 26507 120737 0 0 3 0x14200 bored systqmp 39321 392720 0 0 3 0x14200 bored systq 63008 262223 0 0 3 0x40014200 bored softclock 28889 1589 0 0 3 0x40014200 idle0 1 198349 0 0 3 0x82 wait init 0 0 -1 0 3 0x10200 scheduler swapper ddb> show all locks No such command ddb> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 9537 6366K 7017K 78643K 12212 0 pcb 13 8K 8K 78643K 151 0 rtable 128 13K 16K 78643K 888 0 ifaddr 121 23K 23K 78643K 289 0 sysctl 2 0K 0K 78643K 2 0 counters 21 16K 16K 78643K 41 0 ioctlops 0 0K 4K 78643K 176 0 iov 0 0K 16K 78643K 153 0 mount 1 1K 1K 78643K 1 0 vnodes 1242 78K 78K 78643K 1955 0 UFS quota 1 32K 32K 78643K 1 0 UFS mount 5 36K 36K 78643K 5 0 shm 2 1K 5K 78643K 21 0 VM map 2 0K 0K 78643K 2 0 sem 12 0K 0K 78643K 433 0 dirhash 12 2K 2K 78643K 12 0 ACPI 1809 195K 288K 78643K 12938 0 file desc 5 13K 25K 78643K 1472 0 sigio 0 0K 0K 78643K 14 0 proc 50 38K 55K 78643K 481 0 subproc 23 1K 3K 78643K 85 0 NFS srvsock 1 0K 0K 78643K 1 0 NFS daemon 1 16K 16K 78643K 1 0 ip_moptions 0 0K 0K 78643K 87 0 in_multi 92 4K 4K 78643K 208 0 ether_multi 1 0K 0K 78643K 31 0 mrt 0 0K 0K 78643K 4 0 ISOFS mount 1 32K 32K 78643K 1 0 MSDOSFS mount 1 16K 16K 78643K 1 0 ttys 55 254K 254K 78643K 55 0 exec 0 0K 1K 78643K 251 0 pagedep 1 8K 8K 78643K 1 0 inodedep 1 32K 32K 78643K 1 0 newblk 1 0K 0K 78643K 1 0 VM swap 7 26K 26K 78643K 7 0 UVM amap 147 89K 113K 78643K 4245 0 UVM aobj 76 5K 5K 78643K 86 0 memdesc 1 4K 4K 78643K 1 0 crypto data 1 1K 1K 78643K 1 0 ip6_options 0 0K 0K 78643K 144 0 NDP 17 0K 0K 78643K 47 0 temp 159 3879K 3947K 78643K 17731 0 kqueue 3 4K 10K 78643K 66 0 SYN cache 2 16K 16K 78643K 2 0 ddb> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle arp 64 7 0 1 1 0 1 1 0 8 0 rtpcb 80 77 0 75 1 0 1 1 0 8 0 rtentry 112 72 0 40 2 0 2 2 0 8 0 unpcb 120 437 0 427 1 0 1 1 0 8 0 syncache 264 10 0 10 4 4 0 1 0 8 0 sackhl 24 1 0 1 1 1 0 1 0 8 0 tcpqe 32 243 0 243 1 1 0 1 0 8 0 tcpcb 544 344 0 340 8 7 1 2 0 8 0 ipq 40 1 0 1 1 0 1 1 0 8 1 ipqe 40 2 0 2 1 0 1 1 0 8 1 inpcb 296 1374 0 1365 17 15 2 2 0 8 1 nd6 48 19 0 15 1 0 1 1 0 8 0 pkpcb 40 3 0 3 2 2 0 1 0 8 0 ppxss 1136 1 0 1 1 1 0 1 0 8 0 pfstscr 40 8 0 8 3 3 0 1 0 8 0 pfrktable 1344 153 0 133 6 4 2 3 0 8 0 pftag 88 30 0 26 2 1 1 1 0 8 0 pfstkey 112 12 0 12 3 3 0 1 0 8 0 pfstate 328 6 0 6 3 3 0 1 0 8 0 pfrule 1360 45 0 27 4 2 2 2 0 8 0 art_heap8 4096 2 0 0 2 0 2 2 0 8 0 art_heap4 256 412 0 276 18 6 12 16 0 8 0 art_table 32 414 0 276 3 1 2 3 0 8 0 art_node 16 71 0 45 1 0 1 1 0 8 0 sysvmsgpl 40 15 0 4 1 0 1 1 0 8 0 semupl 112 1 0 1 1 1 0 1 0 8 0 semapl 112 429 0 419 1 0 1 1 0 8 0 shmpl 112 83 0 10 3 0 3 3 0 8 0 dirhash 1024 17 0 0 3 0 3 3 0 8 0 dino2pl 256 3498 0 2100 88 0 88 88 0 8 0 ffsino 240 3498 0 2100 83 0 83 83 0 8 0 nchpl 144 5968 0 4384 60 0 60 60 0 8 0 uvmvnodes 72 3994 0 0 73 0 73 73 0 8 0 vnodes 208 3994 0 0 211 0 211 211 0 8 0 namei 1024 18937 0 18937 4 3 1 1 0 8 1 vcpupl 1984 6 0 1 1 0 1 1 0 8 0 vmpool 528 16 0 11 4 3 1 1 0 8 0 pfiaddrpl 120 62 0 51 2 1 1 1 0 8 0 scsiplug 64 2 0 2 2 2 0 1 0 8 0 scxspl 192 16370 0 16370 2 1 1 1 0 8 1 plimitpl 152 98 0 91 1 0 1 1 0 8 0 sigapl 424 1673 0 1623 6 0 6 6 0 8 0 futexpl 56 28240 0 28240 4 3 1 1 0 8 1 knotepl 112 188 0 175 1 0 1 1 0 8 0 kqueuepl 144 454 0 451 1 0 1 1 0 8 0 pipepl 272 250 0 243 2 1 1 2 0 8 0 fdescpl 432 1636 0 1622 2 0 2 2 0 8 0 filepl 120 11197 0 11113 4 0 4 4 0 8 0 lockfpl 104 532 0 531 1 0 1 1 0 8 0 lockfspl 48 215 0 214 1 0 1 1 0 8 0 sessionpl 112 21 0 11 1 0 1 1 0 8 0 pgrppl 48 33 0 23 1 0 1 1 0 8 0 ucredpl 96 3512 0 3504 1 0 1 1 0 8 0 zombiepl 144 1625 0 1623 1 0 1 1 0 8 0 processpl 928 1673 0 1623 7 0 7 7 0 8 0 procpl 624 3303 0 3245 5 0 5 5 0 8 0 sosppl 128 7 0 7 3 3 0 1 0 8 0 sockpl 400 1904 0 1883 10 6 4 4 0 8 0 mcl64k 65536 391 0 390 56 55 1 29 0 8 0 mcl16k 16384 6 0 6 6 6 0 1 0 8 0 mcl12k 12288 31 0 31 16 16 0 1 0 8 0 mcl9k 9216 29 0 29 15 15 0 1 0 8 0 mcl8k 8192 54 0 54 21 20 1 1 0 8 1 mcl4k 4096 139 0 139 14 13 1 1 0 8 1 mcl2k2 2112 12 0 12 8 7 1 1 0 8 1 mcl2k 2048 96341 0 96288 22 14 8 15 0 8 0 mtagpl 96 115 0 82 3 1 2 2 0 8 0 mbufpl 256 161112 0 160832 57 27 30 31 0 8 0 bufpl 280 6347 0 995 383 0 383 383 0 8 0 anonpl 16 182723 0 170209 116 35 81 89 0 107 0 amapchunkpl 152 8231 0 8087 73 66 7 20 0 158 1 amappl16 192 8073 0 7045 128 76 52 64 0 8 0 amappl15 184 1 0 0 1 0 1 1 0 8 0 amappl14 176 730 0 722 1 0 1 1 0 8 0 amappl13 168 32 0 29 1 0 1 1 0 8 0 amappl12 160 20 0 19 1 0 1 1 0 8 0 amappl11 152 1436 0 1423 1 0 1 1 0 8 0 amappl10 144 17 0 12 1 0 1 1 0 8 0 amappl9 136 371 0 370 1 0 1 1 0 8 0 amappl8 128 387 0 340 2 0 2 2 0 8 0 amappl7 120 112 0 98 1 0 1 1 0 8 0 amappl6 112 710 0 702 1 0 1 1 0 8 0 amappl5 104 844 0 831 1 0 1 1 0 8 0 amappl4 96 1115 0 1087 1 0 1 1 0 8 0 amappl3 88 870 0 861 1 0 1 1 0 8 0 amappl2 80 11773 0 11701 2 0 2 2 0 8 0 amappl1 72 43766 0 43326 23 13 10 17 0 8 1 amappl 80 3568 0 3516 2 0 2 2 0 84 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 253 0 253 1 1 0 1 0 8 0 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 64 85 0 10 2 0 2 2 0 8 0 uaddrrnd 24 1652 0 1633 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 1652 0 1633 1 0 1 1 0 8 0 vmmpekpl 168 13152 0 13115 2 0 2 2 0 8 0 vmmpepl 168 205111 0 202907 229 83 146 146 0 357 46 vmsppl 272 1651 0 1633 6 4 2 2 0 8 0 pdppl 4096 3310 0 3271 8 2 6 6 0 8 0 pvpl 32 458532 0 442901 298 114 184 208 0 265 3 pmappl 200 1651 0 1633 2 0 2 2 0 8 0 extentpl 40 53 0 36 1 0 1 1 0 8 0 phpool 112 419 0 168 8 0 8 8 0 8 0 ddb> machine ddbcpu 0 No such command ddb> trace in_delmulti(fffffffeffffffff) at in_delmulti+0x8d sys/netinet/in.c:914 in_purgeaddr(ffff800000afc200) at in_purgeaddr+0x156 sys/netinet/in.c:760 in_ifdetach(ffff800000ac6800) at in_ifdetach+0x74 sys/netinet/in.c:971 if_detach(ffff800000ac6800) at if_detach+0x140 sys/net/if.c:1039 tun_clone_destroy(ffff800000ac6800) at tun_clone_destroy+0x1c7 sys/net/if_tun.c:326 tun_dev_close(5d00,7) at tun_dev_close+0x160 sys/net/if_tun.c:477 spec_close(ffff80001d6f71b0) at spec_close+0x311 sys/kern/spec_vnops.c:560 VOP_CLOSE(fffffd805e513a90,7,fffffd806c3bfa80,ffff80001d75d3a0) at VOP_CLOSE+0xc0 sys/kern/vfs_vops.c:174 vn_closefile(fffffd805751c358,ffff80001d75d3a0) at vn_closefile+0xd2 vn_close sys/kern/vfs_vnops.c:298 [inline] vn_closefile(fffffd805751c358,ffff80001d75d3a0) at vn_closefile+0xd2 sys/kern/vfs_vnops.c:614 fdrop(fffffd805751c358,ffff80001d75d3a0) at fdrop+0xc2 sys/kern/kern_descrip.c:1279 closef(fffffd805751c358,ffff80001d75d3a0) at closef+0x117 sys/kern/kern_descrip.c:1263 fdfree(ffff80001d75d3a0) at fdfree+0x100 sys/kern/kern_descrip.c:1195 exit1(ffff80001d75d3a0,0,0,1) at exit1+0x32c sys/kern/kern_exit.c:197 sys_exit(ffff80001d75d3a0,ffff80001d6f7440,ffff80001d6f7490) at sys_exit+0x16 sys/kern/kern_exit.c:95 syscall(ffff80001d6f7510) at syscall+0x507 sys/arch/amd64/amd64/trap.c:570 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7f7ffffe1310, count: -16 ddb> machine ddbcpu 1 No such command ddb> trace in_delmulti(fffffffeffffffff) at in_delmulti+0x8d sys/netinet/in.c:914 in_purgeaddr(ffff800000afc200) at in_purgeaddr+0x156 sys/netinet/in.c:760 in_ifdetach(ffff800000ac6800) at in_ifdetach+0x74 sys/netinet/in.c:971 if_detach(ffff800000ac6800) at if_detach+0x140 sys/net/if.c:1039 tun_clone_destroy(ffff800000ac6800) at tun_clone_destroy+0x1c7 sys/net/if_tun.c:326 tun_dev_close(5d00,7) at tun_dev_close+0x160 sys/net/if_tun.c:477 spec_close(ffff80001d6f71b0) at spec_close+0x311 sys/kern/spec_vnops.c:560 VOP_CLOSE(fffffd805e513a90,7,fffffd806c3bfa80,ffff80001d75d3a0) at VOP_CLOSE+0xc0 sys/kern/vfs_vops.c:174 vn_closefile(fffffd805751c358,ffff80001d75d3a0) at vn_closefile+0xd2 vn_close sys/kern/vfs_vnops.c:298 [inline] vn_closefile(fffffd805751c358,ffff80001d75d3a0) at vn_closefile+0xd2 sys/kern/vfs_vnops.c:614 fdrop(fffffd805751c358,ffff80001d75d3a0) at fdrop+0xc2 sys/kern/kern_descrip.c:1279 closef(fffffd805751c358,ffff80001d75d3a0) at closef+0x117 sys/kern/kern_descrip.c:1263 fdfree(ffff80001d75d3a0) at fdfree+0x100 sys/kern/kern_descrip.c:1195 exit1(ffff80001d75d3a0,0,0,1) at exit1+0x32c sys/kern/kern_exit.c:197 sys_exit(ffff80001d75d3a0,ffff80001d6f7440,ffff80001d6f7490) at sys_exit+0x16 sys/kern/kern_exit.c:95 syscall(ffff80001d6f7510) at syscall+0x507 sys/arch/amd64/amd64/trap.c:570 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7f7ffffe1310, count: -16