ook=C>65J.QF:-흧Cp%j`g5mx.$[~ykbϓ]̄cICիC["E ;uvm_fault(0xfffffd807effe5c0, 0x601, 0, 1) -> e kernel: page fault trap, code=0 Stopped at in_delmulti+0x8d: movl 0xc(%r14),%r15d ddb{0}> ddb{0}> set $lines = 0 ddb{0}> set $maxwidth = 0 ddb{0}> show panic kernel page fault uvm_fault(0xfffffd807effe5c0, 0x601, 0, 1) -> e in_delmulti(5f5) at in_delmulti+0x8d sys/netinet/in.c:914 end trace frame: 0xffff8000230f43d0, count: 0 ddb{0}> trace in_delmulti(5f5) at in_delmulti+0x8d sys/netinet/in.c:914 in_purgeaddr(ffff800000b00100) at in_purgeaddr+0x156 sys/netinet/in.c:760 in_ifdetach(ffff800000af7000) at in_ifdetach+0x74 sys/netinet/in.c:971 if_detach(ffff800000af7000) at if_detach+0x140 sys/net/if.c:1032 tun_clone_destroy(ffff800000af7000) at tun_clone_destroy+0x1e1 sys/net/if_tun.c:326 tun_dev_close(5d01,7) at tun_dev_close+0x160 sys/net/if_tun.c:477 spec_close(ffff8000230f45b0) at spec_close+0x311 sys/kern/spec_vnops.c:560 VOP_CLOSE(fffffd806edf4758,7,fffffd807f7bf960,ffff800020dd64f8) at VOP_CLOSE+0xc0 sys/kern/vfs_vops.c:174 vn_closefile(fffffd806a3f2ef0,ffff800020dd64f8) at vn_closefile+0xd7 vn_close sys/kern/vfs_vnops.c:298 [inline] vn_closefile(fffffd806a3f2ef0,ffff800020dd64f8) at vn_closefile+0xd7 sys/kern/vfs_vnops.c:614 fdrop(fffffd806a3f2ef0,ffff800020dd64f8) at fdrop+0xc2 sys/kern/kern_descrip.c:1279 closef(fffffd806a3f2ef0,ffff800020dd64f8) at closef+0x11c sys/kern/kern_descrip.c:1263 fdfree(ffff800020dd64f8) at fdfree+0x101 sys/kern/kern_descrip.c:1195 exit1(ffff800020dd64f8,0,19,1) at exit1+0x32c sys/kern/kern_exit.c:197 postsig(ffff800020dd64f8,19) at postsig+0x4ed sigexit sys/kern/kern_sig.c:1483 [inline] postsig(ffff800020dd64f8,19) at postsig+0x4ed sys/kern/kern_sig.c:1415 userret(ffff800020dd64f8) at userret+0x199 sys/kern/kern_sig.c:1872 syscall(ffff8000230f4a30) at syscall+0x55f mi_syscall_return sys/sys/syscall_mi.h:129 [inline] syscall(ffff8000230f4a30) at syscall+0x55f sys/arch/amd64/amd64/trap.c:592 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7f7ffffd3190, count: -17 ddb{0}> show registers rdi 0x2 rsi 0 rbp 0xffff8000230f4380 rbx 0 rdx 0 rcx 0 rax 0xffff800020dd64f8 r8 0xffff800000b00100 r9 0xffffffff81e56833 rt_ifa_purge+0x153 r10 0x5 r11 0xd88c27e25d952b72 r12 0 r13 0x3 r14 0x5f5 r15 0x1 rip 0xffffffff823bf7bd in_delmulti+0x8d cs 0x8 rflags 0x10246 __ALIGN_SIZE+0xf246 rsp 0xffff8000230f4320 ss 0x10 in_delmulti+0x8d: movl 0xc(%r14),%r15d ddb{0}> show proc PROC (syz-executor.1) pid=139505 stat=onproc flags process=a proc=2000 pri=32, usrpri=81, nice=20 forw=0xffffffffffffffff, list=0xffff800020dd7b30,0xffff800020e8ea08 process=0xffff800020df1ba0 user=0xffff8000230ef000, vmspace=0xfffffd807effe5c0 estcpu=36, cpticks=1, pctcpu=0.31 user=0, sys=0, intr=0 ddb{0}> ps PID TID PPID UID S FLAGS WAIT COMMAND 78097 232918 26156 0 7 0 syz-executor.0 37579 278616 0 0 3 0x14200 bored sosplice 43478 42680 0 0 3 0x14280 nfsidl nfsio 47836 76800 0 0 3 0x14280 nfsidl nfsio 72799 234088 0 0 3 0x14280 nfsidl nfsio 36626 404341 0 0 3 0x14280 nfsidl nfsio 53354 310030 0 0 3 0x14280 nfsidl nfsio 92934 418365 0 0 3 0x14280 nfsidl nfsio 55099 458788 0 0 3 0x14280 nfsidl nfsio 40584 214705 0 0 3 0x14280 nfsidl nfsio 28292 290197 0 0 3 0x14280 nfsidl nfsio 82465 40700 0 0 3 0x14280 nfsidl nfsio 67808 196225 0 0 3 0x14280 nfsidl nfsio 13850 27339 0 0 3 0x14280 nfsidl nfsio 27358 190490 0 0 3 0x14280 nfsidl nfsio 4198 260254 0 0 3 0x14280 nfsidl nfsio 25328 505852 0 0 3 0x14280 nfsidl nfsio 42344 431767 0 0 3 0x14280 nfsidl nfsio 59848 96926 0 0 3 0x14280 nfsidl nfsio 73740 411022 0 0 3 0x14280 nfsidl nfsio 7915 113225 0 0 3 0x14280 nfsidl nfsio 55640 354334 0 0 3 0x14280 nfsidl nfsio 26156 212936 80853 0 3 0x82 nanosleep syz-executor.0 80853 202158 65194 0 3 0x82 thrsleep syz-fuzzer 80853 501799 65194 0 3 0x4000082 nanosleep syz-fuzzer 80853 166237 65194 0 3 0x4000082 thrsleep syz-fuzzer 80853 253818 65194 0 3 0x4000082 thrsleep syz-fuzzer 80853 448205 65194 0 3 0x4000082 thrsleep syz-fuzzer 80853 285026 65194 0 3 0x4000082 thrsleep syz-fuzzer 80853 498743 65194 0 3 0x4000082 thrsleep syz-fuzzer 80853 362237 65194 0 3 0x4000082 kqread syz-fuzzer 65194 325562 47019 0 3 0x10008a pause ksh 47019 5669 5233 0 3 0x92 select sshd 71441 208531 1 0 3 0x100083 ttyin getty 5233 147437 1 0 3 0x80 select sshd 44135 449860 32788 74 3 0x100092 bpf pflogd 32788 273701 1 0 3 0x80 netio pflogd 10942 98748 89972 73 3 0x100090 kqread syslogd 89972 138418 1 0 3 0x100082 netio syslogd 1015 119017 1 77 2 0x100090 dhclient 18103 205645 1 0 3 0x80 poll dhclient 6366 311905 0 0 3 0x14200 bored smr 6995 80607 0 0 3 0x14200 pgzero zerothread 22488 94983 0 0 3 0x14200 aiodoned aiodoned 76276 480398 0 0 3 0x14200 syncer update 53498 349932 0 0 3 0x14200 cleaner cleaner 36306 75119 0 0 3 0x14200 reaper reaper 81040 277486 0 0 3 0x14200 pgdaemon pagedaemon 53532 381888 0 0 3 0x14200 bored crynlk 13165 329451 0 0 3 0x14200 bored crypto 80432 293561 0 0 3 0x40014200 acpi0 acpi0 12727 252257 0 0 3 0x40014200 idle1 65525 259544 0 0 3 0x14200 bored softnet 94706 144100 0 0 2 0x14200 systqmp 49821 392796 0 0 3 0x14200 bored systq 9939 465652 0 0 3 0x40014200 bored softclock 34989 316348 0 0 3 0x40014200 idle0 1 230589 0 0 3 0x82 wait init 0 0 -1 0 3 0x10200 scheduler swapper ddb{0}> show all locks ddb{0}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 9502 6418K 7107K 78643K 11344 0 pcb 13 8K 8K 78643K 36 0 rtable 100 3K 5K 78643K 276 0 ifaddr 71 15K 17K 78643K 102 0 counters 43 33K 33K 78643K 43 0 ioctlops 0 0K 4K 78643K 1563 0 iov 0 0K 12K 78643K 35 0 mount 1 1K 1K 78643K 1 0 vnodes 1222 77K 77K 78643K 1658 0 UFS quota 1 32K 32K 78643K 1 0 UFS mount 5 36K 36K 78643K 5 0 shm 2 1K 1K 78643K 2 0 VM map 2 1K 1K 78643K 2 0 sem 12 0K 0K 78643K 137 0 dirhash 12 2K 2K 78643K 12 0 ACPI 1824 197K 290K 78643K 13058 0 file desc 5 13K 25K 78643K 800 0 proc 61 63K 95K 78643K 614 0 subproc 23 1K 2K 78643K 34 0 NFS srvsock 1 0K 0K 78643K 1 0 NFS daemon 1 16K 16K 78643K 1 0 ip_moptions 0 0K 0K 78643K 22 0 in_multi 82 3K 3K 78643K 83 0 ether_multi 1 0K 0K 78643K 1 0 mrt 0 0K 0K 78643K 15 0 ISOFS mount 1 32K 32K 78643K 1 0 MSDOSFS mount 1 16K 16K 78643K 1 0 ttys 37 175K 175K 78643K 37 0 exec 0 0K 1K 78643K 215 0 pagedep 1 8K 8K 78643K 1 0 inodedep 1 32K 32K 78643K 1 0 newblk 1 0K 0K 78643K 1 0 VM swap 7 26K 26K 78643K 7 0 UVM amap 118 24K 25K 78643K 2688 0 UVM aobj 17 2K 2K 78643K 17 0 memdesc 1 4K 4K 78643K 1 0 crypto data 1 1K 1K 78643K 1 0 ip6_options 0 0K 0K 78643K 20 0 NDP 10 0K 0K 78643K 14 0 temp 84 3860K 3926K 78643K 4163 0 kqueue 3 4K 8K 78643K 58 0 SYN cache 2 16K 16K 78643K 2 0 ddb{0}> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle arp 64 6 0 2 1 0 1 1 0 8 0 plcache 128 20 0 0 1 0 1 1 0 8 0 rtpcb 88 79 0 77 1 0 1 1 0 8 0 rtentry 112 53 0 12 2 0 2 2 0 8 0 unpcb 120 251 0 241 1 0 1 1 0 8 0 syncache 272 4 0 4 1 1 0 1 0 8 0 tcpqe 32 9 0 9 1 1 0 1 0 8 0 tcpcb 592 120 0 112 6 4 2 3 0 8 0 inpcb 296 494 0 487 1 0 1 1 0 8 0 rttmr 72 7 0 7 2 2 0 1 0 8 0 nd6 48 7 0 0 1 0 1 1 0 8 0 pkpcb 40 5 0 5 1 0 1 1 0 8 1 pffrent 40 5 0 5 1 0 1 1 0 8 1 pfosfp 40 847 0 423 5 0 5 5 0 8 0 pfosfpen 112 1430 0 714 21 0 21 21 0 8 0 pfrktable 1344 4 0 4 1 0 1 1 0 8 1 pfstitem 24 12 0 5 1 0 1 1 0 8 0 pfstkey 112 12 0 5 1 0 1 1 0 8 0 pfstate 328 12 0 5 1 0 1 1 0 8 0 pfsrctr 152 15 0 15 1 0 1 1 0 8 1 pfrule 1360 26 0 25 2 1 1 2 0 8 0 art_heap8 4096 1 0 0 1 0 1 1 0 8 0 art_heap4 256 201 0 2 13 0 13 13 0 8 0 art_table 32 202 0 2 2 0 2 2 0 8 0 art_node 16 52 0 14 1 0 1 1 0 8 0 semapl 112 135 0 125 1 0 1 1 0 8 0 shmpl 112 14 0 0 1 0 1 1 0 8 0 dirhash 1024 17 0 0 3 0 3 3 0 8 0 dino2pl 256 2645 0 1241 88 0 88 88 0 8 0 ffsino 272 2645 0 1241 94 0 94 94 0 8 0 nchpl 144 3908 0 2301 60 0 60 60 0 8 0 uvmvnodes 72 2908 0 0 53 0 53 53 0 8 0 vnodes 208 2908 0 0 154 0 154 154 0 8 0 namei 1024 9653 0 9653 1 0 1 1 0 8 1 percpumem 16 32 0 0 1 0 1 1 0 8 0 vmpool 560 7 0 7 1 1 0 1 0 8 0 pfiaddrpl 120 5 0 5 1 0 1 1 0 8 1 scxspl 200 10653 0 10653 8 7 1 7 0 8 1 plimitpl 152 30 0 22 1 0 1 1 0 8 0 sigapl 424 1036 0 984 6 0 6 6 0 8 0 futexpl 56 6640 0 6640 1 0 1 1 0 8 1 knotepl 112 108 0 90 1 0 1 1 0 8 0 kqueuepl 152 88 0 86 1 0 1 1 0 8 0 pipepl 304 118 0 108 2 1 1 2 0 8 0 fdescpl 496 1000 0 984 3 0 3 3 0 8 0 filepl 152 3835 0 3744 5 0 5 5 0 8 0 lockfpl 104 115 0 114 1 0 1 1 0 8 0 lockfspl 48 55 0 54 1 0 1 1 0 8 0 sessionpl 120 18 0 7 1 0 1 1 0 8 0 pgrppl 48 18 0 7 1 0 1 1 0 8 0 ucredpl 96 284 0 275 1 0 1 1 0 8 0 zombiepl 144 985 0 984 1 0 1 1 0 8 0 processpl 1008 1036 0 984 7 0 7 7 0 8 0 procpl 632 1935 0 1876 6 0 6 6 0 8 0 sosppl 144 10 0 10 1 0 1 1 0 8 1 sockpl 400 830 0 811 4 1 3 3 0 8 1 mcl64k 65536 17 0 0 3 0 3 3 0 8 0 mcl12k 12288 2 0 0 1 0 1 1 0 8 0 mcl9k 9216 3 0 0 1 0 1 1 0 8 0 mcl8k 8192 11 0 0 2 0 2 2 0 8 0 mcl4k 4096 17 0 0 3 0 3 3 0 8 0 mcl2k 2048 145 0 0 18 0 18 18 0 8 0 mtagpl 96 74 0 0 2 0 2 2 0 8 0 mbufpl 256 370 0 0 22 0 22 22 0 8 0 bufpl 280 4284 0 126 297 0 297 297 0 8 0 anonpl 16 112020 0 108108 49 15 34 48 0 124 14 amapchunkpl 152 3694 0 3546 8 1 7 8 0 158 0 amappl16 192 5225 0 5126 41 35 6 29 0 8 0 amappl15 184 368 0 366 1 0 1 1 0 8 0 amappl14 176 3 0 1 1 0 1 1 0 8 0 amappl13 168 29 0 26 1 0 1 1 0 8 0 amappl12 160 427 0 420 1 0 1 1 0 8 0 amappl11 152 59 0 43 1 0 1 1 0 8 0 amappl10 144 382 0 377 1 0 1 1 0 8 0 amappl9 136 341 0 340 1 0 1 1 0 8 0 amappl8 128 318 0 291 1 0 1 1 0 8 0 amappl7 120 484 0 470 1 0 1 1 0 8 0 amappl6 112 32 0 25 1 0 1 1 0 8 0 amappl5 104 1359 0 1342 1 0 1 1 0 8 0 amappl4 96 490 0 464 1 0 1 1 0 8 0 amappl3 88 125 0 115 1 0 1 1 0 8 0 amappl2 80 7084 0 7016 2 0 2 2 0 8 0 amappl1 72 31924 0 31491 23 13 10 18 0 8 0 amappl 80 2177 0 2129 2 0 2 2 0 84 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 253 0 253 1 1 0 1 0 8 0 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 64 16 0 0 1 0 1 1 0 8 0 uaddrrnd 24 1007 0 991 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 1007 0 991 1 0 1 1 0 8 0 vmmpekpl 168 9247 0 9202 3 0 3 3 0 8 0 vmmpepl 168 127110 0 125857 99 25 74 92 0 357 16 vmsppl 368 1006 0 991 2 0 2 2 0 8 0 pdppl 4096 2021 0 1982 6 0 6 6 0 8 1 pvpl 32 377258 0 370142 133 19 114 131 0 265 47 pmappl 232 1006 0 991 2 1 1 2 0 8 0 extentpl 40 53 0 36 1 0 1 1 0 8 0 phpool 112 265 0 5 8 0 8 8 0 8 0 ddb{0}> machine ddbcpu 0 Invalid cpu 0 ddb{0}> trace in_delmulti(5f5) at in_delmulti+0x8d sys/netinet/in.c:914 in_purgeaddr(ffff800000b00100) at in_purgeaddr+0x156 sys/netinet/in.c:760 in_ifdetach(ffff800000af7000) at in_ifdetach+0x74 sys/netinet/in.c:971 if_detach(ffff800000af7000) at if_detach+0x140 sys/net/if.c:1032 tun_clone_destroy(ffff800000af7000) at tun_clone_destroy+0x1e1 sys/net/if_tun.c:326 tun_dev_close(5d01,7) at tun_dev_close+0x160 sys/net/if_tun.c:477 spec_close(ffff8000230f45b0) at spec_close+0x311 sys/kern/spec_vnops.c:560 VOP_CLOSE(fffffd806edf4758,7,fffffd807f7bf960,ffff800020dd64f8) at VOP_CLOSE+0xc0 sys/kern/vfs_vops.c:174 vn_closefile(fffffd806a3f2ef0,ffff800020dd64f8) at vn_closefile+0xd7 vn_close sys/kern/vfs_vnops.c:298 [inline] vn_closefile(fffffd806a3f2ef0,ffff800020dd64f8) at vn_closefile+0xd7 sys/kern/vfs_vnops.c:614 fdrop(fffffd806a3f2ef0,ffff800020dd64f8) at fdrop+0xc2 sys/kern/kern_descrip.c:1279 closef(fffffd806a3f2ef0,ffff800020dd64f8) at closef+0x11c sys/kern/kern_descrip.c:1263 fdfree(ffff800020dd64f8) at fdfree+0x101 sys/kern/kern_descrip.c:1195 exit1(ffff800020dd64f8,0,19,1) at exit1+0x32c sys/kern/kern_exit.c:197 postsig(ffff800020dd64f8,19) at postsig+0x4ed sigexit sys/kern/kern_sig.c:1483 [inline] postsig(ffff800020dd64f8,19) at postsig+0x4ed sys/kern/kern_sig.c:1415 userret(ffff800020dd64f8) at userret+0x199 sys/kern/kern_sig.c:1872 syscall(ffff8000230f4a30) at syscall+0x55f mi_syscall_return sys/sys/syscall_mi.h:129 [inline] syscall(ffff8000230f4a30) at syscall+0x55f sys/arch/amd64/amd64/trap.c:592 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7f7ffffd3190, count: -17 ddb{0}> machine ddbcpu 1 Stopped at x86_ipi_db+0x1a: addq $0x8,%rsp ddb{1}> trace x86_ipi_db(ffff800020d70ff0) at x86_ipi_db+0x1a sys/arch/amd64/amd64/db_interface.c:352 x86_ipi_handler() at x86_ipi_handler+0xc6 sys/arch/amd64/amd64/ipi.c:106 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x23 __mp_lock(ffffffff82933140) at __mp_lock+0x127 __mp_lock_spin sys/kern/kern_lock.c:116 [inline] __mp_lock(ffffffff82933140) at __mp_lock+0x127 sys/kern/kern_lock.c:147 uvm_map_inentry(ffff8000241893e8,ffff800024189460,3e85ff1d71a,ffffffff82428c3c,ffffffff810c3510,b) at uvm_map_inentry+0xbe sys/uvm/uvm_map.c:1890 syscall(ffff8000241873b0) at syscall+0x3dc mi_syscall sys/sys/syscall_mi.h:87 [inline] syscall(ffff8000241873b0) at syscall+0x3dc sys/arch/amd64/amd64/trap.c:570 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7f7ffffc6c60, count: -7