login: uvm_fault(0xfffffd803f00c000, 0x3f, 0, 1) -> e kernel: page fault trap, code=0 Stopped at pfi_kif_update+0xf6: movq 0x40(%rax),%rbx ddb> ddb> set $lines = 0 ddb> set $maxwidth = 0 ddb> show panic kernel page fault uvm_fault(0xfffffd803f00c000, 0x3f, 0, 1) -> e pfi_kif_update(ffff8000009cec00) at pfi_kif_update+0xf6 sys/net/pf_if.c:428 end trace frame: 0xffff800016a2ec60, count: 0 ddb> trace pfi_kif_update(ffff8000009cec00) at pfi_kif_update+0xf6 sys/net/pf_if.c:428 pfi_detach_ifnet(ffff8000009c8000) at pfi_detach_ifnet+0x4d sys/net/pf_if.c:255 if_detach(ffff8000009c8000) at if_detach+0x15d sys/net/if.c:1120 tun_clone_destroy(ffff8000009c8000) at tun_clone_destroy+0x1c6 sys/net/if_tun.c:278 spec_close(ffff800016a2ed98) at spec_close+0x3b0 sys/kern/spec_vnops.c:553 VOP_CLOSE(fffffd803c769180,1,fffffd803f7c6ba0,ffff800014951650) at VOP_CLOSE+0x64 sys/kern/vfs_vops.c:174 vn_closefile(fffffd802f87bda8,ffff800014951650) at vn_closefile+0x14b vn_close sys/kern/vfs_vnops.c:289 [inline] vn_closefile(fffffd802f87bda8,ffff800014951650) at vn_closefile+0x14b sys/kern/vfs_vnops.c:587 fdrop(fffffd802f87bda8,ffff800014951650) at fdrop+0xc9 sys/kern/kern_descrip.c:1260 closef(fffffd802f87bda8,ffff800014951650) at closef+0x118 sys/kern/kern_descrip.c:1244 fdrelease(ffff800014951650,3) at fdrelease+0xb3 sys/kern/kern_descrip.c:744 sys_close(ffff800014951650,ffff800016a2efe8,ffff800016a2f050) at sys_close+0xa8 sys/kern/kern_descrip.c:762 syscall(ffff800016a2f0b0) at syscall+0x508 Xsyscall(6,0,fffffffffffffed5,0,1,c2c1b5ed010) at Xsyscall+0x128 end of kernel end trace frame: 0xc2f08c3b600, count: -13 ddb> show registers rdi 0xffffffff816dad8d pfi_kif_update+0x3d rsi 0x7729 __ALIGN_SIZE+0x6729 rbp 0xffff800016a2ec20 rbx 0xffff8000009cec00 rdx 0x772a __ALIGN_SIZE+0x672a rcx 0xffff800016bf7000 rax 0xffffffffffffffff r8 0xffff8000009c8000 r9 0x5 r10 0x6312c0656cc1e80c r11 0x272cae9e51c75a6c r12 0x24 r13 0 r14 0xffff8000009cec00 r15 0 rip 0xffffffff816dae46 pfi_kif_update+0xf6 cs 0x8 rflags 0x10286 __ALIGN_SIZE+0xf286 rsp 0xffff800016a2ebd0 ss 0x10 pfi_kif_update+0xf6: movq 0x40(%rax),%rbx ddb> show proc PROC (syz-executor.1) pid=68905 stat=onproc flags process=0 proc=4000000 pri=86, usrpri=86, nice=20 forw=0xffffffffffffffff, list=0xffff800014950c70,0xffff800014950a08 process=0xffff8000ffff6d90 user=0xffff800016a2a000, vmspace=0xfffffd803f00c000 estcpu=36, cpticks=1, pctcpu=0.0 user=0, sys=1, intr=0 ddb> ps PID TID PPID UID S FLAGS WAIT COMMAND 65300 473142 85571 0 2 0 syz-executor.1 *65300 68905 85571 0 7 0x4000000 syz-executor.1 65300 20985 85571 0 3 0x4000080 fsleep syz-executor.1 79712 41664 1 0 3 0x100083 ttyin getty 34982 102657 41978 0 3 0x2 biowait syz-executor.0 51444 277282 0 0 3 0x14200 bored sosplice 85571 515280 41978 0 3 0x82 nanosleep syz-executor.1 41978 101628 21950 0 3 0x82 kqread syz-fuzzer 41978 467874 21950 0 3 0x4000082 nanosleep syz-fuzzer 41978 451373 21950 0 3 0x4000082 thrsleep syz-fuzzer 41978 378559 21950 0 3 0x4000082 thrsleep syz-fuzzer 41978 442004 21950 0 3 0x4000082 thrsleep syz-fuzzer 41978 103537 21950 0 3 0x4000082 thrsleep syz-fuzzer 41978 387034 21950 0 3 0x4000082 thrsleep syz-fuzzer 21950 28602 47697 0 3 0x10008a pause ksh 47697 471223 29049 0 3 0x92 select sshd 29049 48056 1 0 3 0x80 select sshd 59013 362350 77461 73 3 0x100090 kqread syslogd 77461 235266 1 0 3 0x100082 netio syslogd 51290 448709 1 77 2 0x100090 dhclient 28809 440275 1 0 3 0x80 poll dhclient 88390 211727 0 0 2 0x14200 zerothread 71972 425702 0 0 3 0x14200 aiodoned aiodoned 4023 382397 0 0 3 0x14200 syncer update 24807 377020 0 0 3 0x14200 cleaner cleaner 90242 522275 0 0 3 0x14200 reaper reaper 32064 451001 0 0 3 0x14200 pgdaemon pagedaemon 37016 109912 0 0 3 0x14200 bored crynlk 96646 494406 0 0 3 0x14200 bored crypto 1025 147624 0 0 3 0x40014200 acpi0 acpi0 75555 194882 0 0 2 0x14200 softnet 91356 306758 0 0 3 0x14200 bored systqmp 94820 309017 0 0 3 0x14200 bored systq 38564 194433 0 0 3 0x40014200 bored softclock 43897 5664 0 0 3 0x40014200 idle0 51747 388618 0 0 3 0x14200 bored smr 1 267982 0 0 3 0x82 wait init 0 0 -1 0 3 0x10200 scheduler swapper ddb> show all locks No such command ddb> show malloc Type InUse MemUse HighUse Limit Requests Type Lim Kern Lim devbuf 9497 6354K 6983K 78643K 17665 0 0 pcb 23 9K 11K 78643K 1303 0 0 rtable 111 4K 4K 78643K 664 0 0 ifaddr 54 14K 15K 78643K 287 0 0 counters 19 16K 16K 78643K 19 0 0 ioctlops 0 0K 2K 78643K 134 0 0 iov 0 0K 28K 78643K 354 0 0 mount 1 1K 1K 78643K 1 0 0 vnodes 1221 77K 77K 78643K 3856 0 0 UFS quota 1 32K 32K 78643K 1 0 0 UFS mount 5 36K 36K 78643K 5 0 0 shm 2 1K 5K 78643K 40 0 0 VM map 2 0K 0K 78643K 2 0 0 sem 12 1K 1K 78643K 202 0 0 dirhash 12 2K 2K 78643K 12 0 0 ACPI 1793 195K 288K 78643K 12645 0 0 file desc 5 13K 25K 78643K 2800 0 0 sigio 0 0K 0K 78643K 43 0 0 proc 41 30K 54K 78643K 707 0 0 subproc 32 2K 2K 78643K 62 0 0 NFS srvsock 1 0K 0K 78643K 1 0 0 NFS daemon 1 16K 16K 78643K 1 0 0 ip_moptions 0 0K 0K 78643K 262 0 0 in_multi 33 2K 2K 78643K 140 0 0 ether_multi 1 0K 0K 78643K 13 0 0 mrt 0 0K 0K 78643K 6 0 0 ISOFS mount 1 32K 32K 78643K 1 0 0 MSDOSFS mount 1 16K 16K 78643K 1 0 0 ttys 72 318K 318K 78643K 72 0 0 exec 0 0K 1K 78643K 419 0 0 pagedep 1 8K 8K 78643K 1 0 0 inodedep 1 32K 32K 78643K 1 0 0 newblk 1 0K 0K 78643K 1 0 0 VM swap 7 26K 26K 78643K 7 0 0 UVM amap 82 20K 38K 78643K 7433 0 0 UVM aobj 110 4K 4K 78643K 127 0 0 memdesc 1 4K 4K 78643K 1 0 0 crypto data 1 1K 1K 78643K 1 0 0 ip6_options 0 0K 1K 78643K 63 0 0 NDP 11 0K 0K 78643K 77 0 0 temp 162 2723K 2792K 78643K 11757 0 0 kqueue 0 0K 0K 78643K 29 0 0 SYN cache 2 16K 16K 78643K 2 0 0 ddb> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle arp 64 8 0 2 1 0 1 1 0 8 0 inpcbpl 280 1090 0 1083 1 0 1 1 0 8 0 rtentry 112 56 0 12 2 0 2 2 0 8 0 syncache 264 4 0 4 1 1 0 1 0 8 0 tcpqe 32 29 0 29 1 1 0 1 0 8 0 tcpcb 544 398 0 394 1 0 1 1 0 8 0 nd6 48 9 0 3 1 0 1 1 0 8 0 ppxss 1128 51 0 51 5 4 1 1 0 8 1 art_heap8 4096 1 0 0 1 0 1 1 0 8 0 art_heap4 256 235 0 44 13 1 12 12 0 8 0 art_table 32 236 0 44 2 0 2 2 0 8 0 art_node 16 55 0 15 1 0 1 1 0 8 0 sysvmsgpl 40 14 0 10 1 0 1 1 0 8 0 semupl 112 1 0 1 1 1 0 1 0 8 0 semapl 112 198 0 188 1 0 1 1 0 8 0 shmpl 112 125 0 17 4 0 4 4 0 8 0 dirhash 1024 17 0 0 3 0 3 3 0 8 0 dino1pl 128 5961 0 4514 48 1 47 47 0 8 0 ffsino 240 5961 0 4514 86 0 86 86 0 8 0 nchpl 144 10056 0 8428 61 0 61 61 0 8 0 uvmvnodes 72 5926 0 0 108 0 108 108 0 8 0 vnodes 200 5926 0 0 312 0 312 312 0 8 0 namei 1024 31415 0 31415 2 1 1 1 0 8 1 scsiplug 64 8 0 8 7 6 1 1 0 8 1 scxspl 192 31453 0 31452 16 15 1 5 0 8 0 plimitpl 152 209 0 202 1 0 1 1 0 8 0 sigapl 432 2972 0 2959 2 0 2 2 0 8 0 futexpl 56 45342 0 45341 1 0 1 1 0 8 0 knotepl 112 552 0 533 1 0 1 1 0 8 0 kqueuepl 104 638 0 636 1 0 1 1 0 8 0 pipepl 112 1754 0 1735 6 4 2 2 0 8 1 fdescpl 424 2973 0 2959 2 0 2 2 0 8 0 filepl 120 17854 0 17759 6 1 5 5 0 8 2 lockfpl 104 1059 0 1059 4 3 1 1 0 8 1 lockfspl 48 346 0 346 4 3 1 1 0 8 1 sessionpl 112 22 0 12 1 0 1 1 0 8 0 pgrppl 48 56 0 46 1 0 1 1 0 8 0 ucredpl 96 3972 0 3965 1 0 1 1 0 8 0 zombiepl 144 2959 0 2959 2 1 1 1 0 8 1 processpl 864 2988 0 2959 4 0 4 4 0 8 0 procpl 632 6549 0 6512 4 0 4 4 0 8 0 sosppl 128 43 0 43 7 7 0 1 0 8 0 sockpl 384 2250 0 2233 5 2 3 4 0 8 1 mcl64k 65536 575 0 575 65 64 1 32 0 8 1 mcl16k 16384 5 0 5 2 2 0 1 0 8 0 mcl12k 12288 50 0 50 7 6 1 1 0 8 1 mcl9k 9216 44 0 44 7 6 1 1 0 8 1 mcl8k 8192 44 0 44 8 7 1 1 0 8 1 mcl4k 4096 140 0 140 3 2 1 1 0 8 1 mcl2k2 2112 14 0 14 7 6 1 1 0 8 1 mcl2k 2048 57355 0 57312 16 9 7 12 0 8 1 mtagpl 80 2 0 2 1 1 0 1 0 8 0 mbufpl 256 103798 0 103742 41 36 5 22 0 8 0 bufpl 256 13608 0 7891 358 0 358 358 0 8 0 anonpl 16 287826 0 276293 142 79 63 65 0 62 14 amapchunkpl 152 13027 0 12925 41 27 14 14 0 158 9 amappl16 192 14686 0 14050 124 85 39 45 0 8 6 amappl15 184 1377 0 1375 1 0 1 1 0 8 0 amappl14 176 1436 0 1428 1 0 1 1 0 8 0 amappl13 168 1070 0 1069 2 1 1 1 0 8 0 amappl12 160 316 0 314 1 0 1 1 0 8 0 amappl11 152 56 0 45 1 0 1 1 0 8 0 amappl10 144 65 0 65 6 5 1 1 0 8 1 amappl9 136 574 0 570 1 0 1 1 0 8 0 amappl8 128 139 0 122 1 0 1 1 0 8 0 amappl7 120 36 0 32 1 0 1 1 0 8 0 amappl6 112 59 0 50 1 0 1 1 0 8 0 amappl5 104 471 0 460 1 0 1 1 0 8 0 amappl4 96 1532 0 1507 1 0 1 1 0 8 0 amappl3 88 3351 0 3337 1 0 1 1 0 8 0 amappl2 80 23281 0 23214 3 1 2 3 0 8 0 amappl1 72 60921 0 60507 25 15 10 19 0 8 0 amappl 80 6842 0 6807 1 0 1 1 0 84 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma64 64 259 0 259 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 17 0 17 1 1 0 1 0 8 0 aobjpl 64 126 0 17 2 0 2 2 0 8 0 uaddrrnd 24 2973 0 2959 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 2973 0 2959 1 0 1 1 0 8 0 vmmpekpl 168 20371 0 20347 2 0 2 2 0 8 0 vmmpepl 168 348794 0 347117 164 77 87 94 0 357 9 vmsppl 272 2972 0 2959 2 1 1 2 0 8 0 pdppl 4096 5953 0 5918 6 1 5 6 0 8 0 pvpl 32 797064 0 782500 303 103 200 203 0 265 80 pmappl 200 2972 0 2959 1 0 1 1 0 8 0 extentpl 40 41 0 26 1 0 1 1 0 8 0 phpool 112 609 0 126 15 0 15 15 0 8 0