/usr/local/go/src/runtime/panic.go:774 +0x72 fp=0xc00030b7b8 sp=0xc00030b788 pc=0x42e9d2 runtime.sigpanic() /usr/local/go/src/runtime/signal_unix.go:401 +0x3de fp=0xc00030b7e8 sp=0xc00030b7b8 pc=0x443ebe math/rand.(*Rand).Perm(0xc0015b3bf0, 0x26dd, 0x3, 0x3, 0xc0015b3b60) /usr/local/go/src/math/rand/rand.go:226 +0x9d fp=0xc00030b830 sp=0xc00030b7e8 pc=0x4ef8dd github.com/google/syzkaller/prog.(*randGen).resourceCentric(0xc00239c060, 0xc0015887d0, 0xcab2a0, 0x925800, 0xc00030b9f0, 0x40, 0xc00006b200, 0x9258a8, 0xc00030ba60) /syzkaller/gopath/src/github.com/google/syzkaller/prog/rand.go:847 +0x57 fp=0xc00030b990 sp=0xc00030b830 pc=0x7941b7 github.com/google/syzkaller/prog.(*ResourceType).generate(0xcab2a0, 0xc00239c060, 0xc0015887d0, 0xc0017cd500, 0x0, 0xc00030ba80, 0x203000, 0x9258a8, 0xc00030ba90) /syzkaller/gopath/src/github.com/google/syzkaller/prog/rand.go:678 +0x27c fp=0xc00030ba10 sp=0xc00030b990 pc=0x791ddc github.com/google/syzkaller/prog.(*randGen).generateArgImpl(0xc00239c060, 0xc0015887d0, 0x9b8160, 0xcab2a0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0) /syzkaller/gopath/src/github.com/google/syzkaller/prog/rand.go:667 +0x450 fp=0xc00030bae8 sp=0xc00030ba10 pc=0x791760 github.com/google/syzkaller/prog.(*randGen).generateArg(...) /syzkaller/gopath/src/github.com/google/syzkaller/prog/rand.go:617 github.com/google/syzkaller/prog.regenerate(0xc00239c060, 0xc0015887d0, 0x9b1ec0, 0xc0015b3a40, 0x7a645d, 0x2c0, 0x9b8160, 0xcab2a0) /syzkaller/gopath/src/github.com/google/syzkaller/prog/mutation.go:246 +0xa9 fp=0xc00030bb70 sp=0xc00030bae8 pc=0x785339 github.com/google/syzkaller/prog.(*ResourceType).mutate(0xcab2a0, 0xc00239c060, 0xc0015887d0, 0x9b1ec0, 0xc0015b3a40, 0xc0016bad88, 0xcc3780, 0x3, 0x3, 0x0, ...) /syzkaller/gopath/src/github.com/google/syzkaller/prog/mutation.go:315 +0x4d fp=0xc00030bbc0 sp=0xc00030bb70 pc=0x785c0d github.com/google/syzkaller/prog.(*Target).mutateArg(0xc00011e000, 0xc00239c060, 0xc0015887d0, 0x9b1ec0, 0xc0015b3a40, 0xc0016bad88, 0xcc3780, 0x3, 0x3, 0x0, ...) /syzkaller/gopath/src/github.com/google/syzkaller/prog/mutation.go:229 +0xe3 fp=0xc00030bca0 sp=0xc00030bbc0 pc=0x784fa3 github.com/google/syzkaller/prog.(*mutator).mutateArg(0xc00030bec0, 0xa) /syzkaller/gopath/src/github.com/google/syzkaller/prog/mutation.go:182 +0x288 fp=0xc00030be30 sp=0xc00030bca0 pc=0x7848b8 github.com/google/syzkaller/prog.(*Prog).Mutate(0xc0016bac40, 0x9ab4c0, 0xc002612a80, 0x14, 0xc00278e000, 0xc002702000, 0x26dd, 0x3000) /syzkaller/gopath/src/github.com/google/syzkaller/prog/mutation.go:47 +0x32c fp=0xc00030bf08 sp=0xc00030be30 pc=0x78373c main.(*Proc).loop(0xc00278e040) /syzkaller/gopath/src/github.com/google/syzkaller/syz-fuzzer/proc.go:95 +0x434 fp=0xc00030bfd8 sp=0xc00030bf08 pc=0x7f11e4 runtime.goexit() /usr/local/go/src/runtime/asm_amd64.s:1357 +0x1 fp=0xc00030bfe0 sp=0xc00030bfd8 pc=0x45d461 created by main.main /syzkaller/gopath/src/github.com/google/syzkaller/syz-fuzzer/fuzzer.go:258 +0x1155 goroutine 1 [select]: main.(*Fuzzer).pollLoop(0xc0000b8840) /syzkaller/gopath/src/github.com/google/syzkaller/syz-fuzzer/fuzzer.go:319 +0x127 main.main() /syzkaller/gopath/src/github.com/google/syzkaller/syz-fuzzer/fuzzer.go:261 +0x12c6 goroutine 17 [syscall]: os/signal.signal_recv(0x0) /usr/local/go/src/runtime/sigqueue.go:147 +0x9c os/signal.loop() /usr/local/go/src/os/signal/signal_unix.go:23 +0x22 created by os/signal.init.0 /usr/local/go/src/os/signal/signal_unix.go:29 +0x41 goroutine 11 [chan receive]: github.com/google/syzkaller/pkg/osutil.HandleInterrupts.func1(0xc00007e120) /syzkaller/gopath/src/github.com/google/syzkaller/pkg/osutil/osutil_unix.go:74 +0xb6 created by github.com/google/syzkaller/pkg/osutil.HandleInterrupts /syzkaller/gopath/src/github.com/google/syzkaller/pkg/osutil/osutil_unix.go:71 +0x3f goroutine 12 [chan receive]: main.main.func1(0xc00007e120) /syzkaller/gopath/src/github.com/google/syzkaller/syz-fuzzer/fuzzer.go:137 +0x34 created by main.main /syzkaller/gopath/src/github.com/google/syzkaller/syz-fuzzer/fuzzer.go:135 +0x5b0 goroutine 16 [IO wait]: internal/poll.runtime_pollWait(0x2ee008010, 0x72, 0xffffffffffffffff) /usr/local/go/src/runtime/netpoll.go:184 +0x55 internal/poll.(*pollDesc).wait(0xc0001c4118, 0x72, 0x1000, 0x1000, 0xffffffffffffffff) /usr/local/go/src/internal/poll/fd_poll_runtime.go:87 +0x45 internal/poll.(*pollDesc).waitRead(...) /usr/local/go/src/internal/poll/fd_poll_runtime.go:92 internal/poll.(*FD).Read(0xc0001c4100, 0xc0002ac000, 0x1000, 0x1000, 0x0, 0x0, 0x0) /usr/local/go/src/internal/poll/fd_unix.go:169 +0x1cf net.(*netFD).Read(0xc0001c4100, 0xc0002ac000, 0x1000, 0x1000, 0xc0003a9a60, 0xc0003a9b40, 0x7c7e7d) /usr/local/go/src/net/fd_unix.go:202 +0x4f net.(*conn).Read(0xc00000e088, 0xc0002ac000, 0x1000, 0x1000, 0x0, 0x0, 0x0) /usr/local/go/src/net/net.go:184 +0x68 bufio.(*Reader).fill(0xc00005eb40) /usr/local/go/src/bufio/bufio.go:100 +0x103 bufio.(*Reader).ReadByte(0xc00005eb40, 0xc0003a9c00, 0xc0001c4180, 0xc0000dd800) /usr/local/go/src/bufio/bufio.go:252 +0x39 compress/flate.(*decompressor).moreBits(0xc0002a6000, 0x925250, 0xc0003a9b88) /usr/local/go/src/compress/flate/inflate.go:696 +0x37 compress/flate.(*decompressor).nextBlock(0xc0002a6000) /usr/local/go/src/compress/flate/inflate.go:303 +0x36 compress/flate.(*decompressor).Read(0xc0002a6000, 0xc0002ba000, 0x1000, 0x1000, 0x8978c0, 0xc002821e30, 0x199) /usr/local/go/src/compress/flate/inflate.go:347 +0x77 github.com/google/syzkaller/pkg/rpctype.(*flateConn).Read(0xc0000813b0, 0xc0002ba000, 0x1000, 0x1000, 0x10, 0xc0003a9b88, 0x7c7cdd) /syzkaller/gopath/src/github.com/google/syzkaller/pkg/rpctype/rpc.go:131 +0x51 bufio.(*Reader).Read(0xc00005eba0, 0xc0000203d0, 0x1, 0x9, 0x0, 0x0, 0xc0003a9d70) /usr/local/go/src/bufio/bufio.go:226 +0x26a io.ReadAtLeast(0x9a7280, 0xc00005eba0, 0xc0000203d0, 0x1, 0x9, 0x1, 0x1, 0x0, 0x0) /usr/local/go/src/io/io.go:310 +0x87 io.ReadFull(...) /usr/local/go/src/io/io.go:329 encoding/gob.decodeUintReader(0x9a7280, 0xc00005eba0, 0xc0000203d0, 0x9, 0x9, 0x4050d5, 0x4307fc, 0xc0003a9d48, 0x45a310) /usr/local/go/src/encoding/gob/decode.go:120 +0x6f encoding/gob.(*Decoder).recvMessage(0xc0001c4180, 0x404fbc) /usr/local/go/src/encoding/gob/decoder.go:81 +0x57 encoding/gob.(*Decoder).decodeTypeSequence(0xc0001c4180, 0xc000000100, 0xc0003a9e10) /usr/local/go/src/encoding/gob/decoder.go:143 +0x10c encoding/gob.(*Decoder).DecodeValue(0xc0001c4180, 0x831ec0, 0xc000081890, 0x16, 0x0, 0x0) /usr/local/go/src/encoding/gob/decoder.go:211 +0x10b encoding/gob.(*Decoder).Decode(0xc0001c4180, 0x831ec0, 0xc000081890, 0x0, 0x0) /usr/local/go/src/encoding/gob/decoder.go:188 +0x16d net/rpc.(*gobClientCodec).ReadResponseHeader(0xc0000814a0, 0xc000081890, 0xc002821e00, 0x0) /usr/local/go/src/net/rpc/client.go:228 +0x45 net/rpc.(*Client).input(0xc00005ec60) /usr/local/go/src/net/rpc/client.go:109 +0xa5 created by net/rpc.NewClientWithCodec /usr/local/go/src/net/rpc/client.go:206 +0x89 goroutine 35 [IO wait]: internal/poll.runtime_pollWait(0x2ee0080e0, 0x72, 0xffffffffffffffff) /usr/local/go/src/runtime/netpoll.go:184 +0x55 internal/poll.(*pollDesc).wait(0xc0028219f8, 0x72, 0x1ff01, 0x1ffb1, 0xffffffffffffffff) /usr/local/go/src/internal/poll/fd_poll_runtime.go:87 +0x45 internal/poll.(*pollDesc).waitRead(...) /usr/local/go/src/internal/poll/fd_poll_runtime.go:92 internal/poll.(*FD).Read(0xc0028219e0, 0xc002a2e04f, 0x1ffb1, 0x1ffb1, 0x0, 0x0, 0x0) /usr/local/go/src/internal/poll/fd_unix.go:169 +0x1cf os.(*File).read(...) /usr/local/go/src/os/file_unix.go:259 os.(*File).Read(0xc00000ebf8, 0xc002a2e04f, 0x1ffb1, 0x1ffb1, 0xc, 0x0, 0x0) /usr/local/go/src/os/file.go:116 +0x71 github.com/google/syzkaller/pkg/ipc.makeCommand.func2(0xc00000ebf8, 0xc00010c0e0) /syzkaller/gopath/src/github.com/google/syzkaller/pkg/ipc/ipc.go:603 +0xaf created by github.com/google/syzkaller/pkg/ipc.makeCommand /syzkaller/gopath/src/github.com/google/syzkaller/pkg/ipc/ipc.go:597 +0x89f goroutine 37 [runnable]: github.com/google/syzkaller/prog.(*vmaAlloc).noteAlloc(0xc00143fa70, 0x0, 0x800) /syzkaller/gopath/src/github.com/google/syzkaller/prog/alloc.go:131 +0x9f github.com/google/syzkaller/prog.(*state).analyzeImpl.func1(0x9b1e80, 0xc00143f500, 0xc0016c9dc0) /syzkaller/gopath/src/github.com/google/syzkaller/prog/analysis.go:64 +0x3e1 github.com/google/syzkaller/prog.foreachArgImpl(0x9b1e80, 0xc00143f500, 0xc0016c9dc0, 0xc00030fd38) /syzkaller/gopath/src/github.com/google/syzkaller/prog/analysis.go:129 +0x113 github.com/google/syzkaller/prog.ForeachArg(0xc0016c9a40, 0xc00030fd38) /syzkaller/gopath/src/github.com/google/syzkaller/prog/analysis.go:122 +0xdd github.com/google/syzkaller/prog.(*state).analyzeImpl(0xc000473bd0, 0xc0016c9a40, 0xc002702000) /syzkaller/gopath/src/github.com/google/syzkaller/prog/analysis.go:58 +0x61 github.com/google/syzkaller/prog.analyze(0xc00278e000, 0xc002702000, 0x26dd, 0x3000, 0xc0016c9800, 0xc0016c9840, 0xc00030fe20) /syzkaller/gopath/src/github.com/google/syzkaller/prog/analysis.go:34 +0xa5 github.com/google/syzkaller/prog.(*mutator).insertCall(0xc00030fec0, 0x14) /syzkaller/gopath/src/github.com/google/syzkaller/prog/mutation.go:140 +0xc6 github.com/google/syzkaller/prog.(*Prog).Mutate(0xc0016c9800, 0x9ab4c0, 0xc0027e5bc0, 0x14, 0xc00278e000, 0xc002702000, 0x26dd, 0x3000) /syzkaller/gopath/src/github.com/google/syzkaller/prog/mutation.go:45 +0x2ea main.(*Proc).loop(0xc0028374c0) /syzkaller/gopath/src/github.com/google/syzkaller/syz-fuzzer/proc.go:95 +0x434 created by main.main /syzkaller/gopath/src/github.com/google/syzkaller/syz-fuzzer/fuzzer.go:258 +0x1155 goroutine 38 [IO wait]: internal/poll.runtime_pollWait(0x2ee007e70, 0x72, 0xffffffffffffffff) /usr/local/go/src/runtime/netpoll.go:184 +0x55 internal/poll.(*pollDesc).wait(0xc00287e1f8, 0x72, 0x1ff01, 0x1ffd6, 0xffffffffffffffff) /usr/local/go/src/internal/poll/fd_poll_runtime.go:87 +0x45 internal/poll.(*pollDesc).waitRead(...) /usr/local/go/src/internal/poll/fd_poll_runtime.go:92 internal/poll.(*FD).Read(0xc00287e1e0, 0xc002a5802a, 0x1ffd6, 0x1ffd6, 0x0, 0x0, 0x0) /usr/local/go/src/internal/poll/fd_unix.go:169 +0x1cf os.(*File).read(...) /usr/local/go/src/os/file_unix.go:259 os.(*File).Read(0xc00000f1b0, 0xc002a5802a, 0x1ffd6, 0x1ffd6, 0x11, 0x0, 0x0) /usr/local/go/src/os/file.go:116 +0x71 github.com/google/syzkaller/pkg/ipc.makeCommand.func2(0xc00000f1b0, 0xc00010c1c0) /syzkaller/gopath/src/github.com/google/syzkaller/pkg/ipc/ipc.go:603 +0xaf created by github.com/google/syzkaller/pkg/ipc.makeCommand /syzkaller/gopath/src/github.com/google/syzkaller/pkg/ipc/ipc.go:597 +0x89f OpenBSD/amd64 (ci-openbsd-multicore-0.c.syzkaller.internal) (tty00) login: kernel: protection fault trap, code=0 Stopped at in_delmulti+0x8d: movl 0xc(%r14),%r15d ddb{1}> set $lines = 0 ddb{1}> set $maxwidth = 0 ddb{1}> show panic the kernel did not panic ddb{1}> trace in_delmulti(fff7ffefffffffff) at in_delmulti+0x8d sys/netinet/in.c:914 in_purgeaddr(ffff800000a0c900) at in_purgeaddr+0x156 sys/netinet/in.c:760 in_ifdetach(ffff8000009d5000) at in_ifdetach+0x74 sys/netinet/in.c:971 if_detach(ffff8000009d5000) at if_detach+0x140 sys/net/if.c:1148 tun_clone_destroy(ffff8000009d5000) at tun_clone_destroy+0x1f2 sys/net/if_tun.c:329 tun_dev_close(5d00,7) at tun_dev_close+0x160 sys/net/if_tun.c:480 spec_close(ffff800020f6b4a0) at spec_close+0x311 sys/kern/spec_vnops.c:555 VOP_CLOSE(fffffd806e7504e8,7,fffffd807f7bfba0,ffff800020e6dad8) at VOP_CLOSE+0xc0 sys/kern/vfs_vops.c:174 vn_closefile(fffffd80677faa30,ffff800020e6dad8) at vn_closefile+0xd7 vn_close sys/kern/vfs_vnops.c:298 [inline] vn_closefile(fffffd80677faa30,ffff800020e6dad8) at vn_closefile+0xd7 sys/kern/vfs_vnops.c:614 fdrop(fffffd80677faa30,ffff800020e6dad8) at fdrop+0xc2 sys/kern/kern_descrip.c:1276 closef(fffffd80677faa30,ffff800020e6dad8) at closef+0x11c sys/kern/kern_descrip.c:1260 fdfree(ffff800020e6dad8) at fdfree+0x101 sys/kern/kern_descrip.c:1192 exit1(ffff800020e6dad8,0,d,1) at exit1+0x32c sys/kern/kern_exit.c:197 postsig(ffff800020e6dad8,d) at postsig+0x4ed sigexit sys/kern/kern_sig.c:1483 [inline] postsig(ffff800020e6dad8,d) at postsig+0x4ed sys/kern/kern_sig.c:1415 userret(ffff800020e6dad8) at userret+0x199 sys/kern/kern_sig.c:1867 syscall(ffff800020f6b920) at syscall+0x55f mi_syscall_return sys/sys/syscall_mi.h:129 [inline] syscall(ffff800020f6b920) at syscall+0x55f sys/arch/amd64/amd64/trap.c:592 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7f7ffffbb830, count: -17 ddb{1}> show registers rdi 0x2 rsi 0 rbp 0xffff800020f6b270 rbx 0 rdx 0xffff800020e6dad8 rcx 0 rax 0 r8 0xffffffff815bd863 rt_ifa_purge+0x153 r9 0x5 r10 0x3 r11 0xae0e27fa40a5e5e5 r12 0 r13 0x3 r14 0xfff7ffefffffffff r15 0x1 rip 0xffffffff819f34cd in_delmulti+0x8d cs 0x8 rflags 0x10246 __ALIGN_SIZE+0xf246 rsp 0xffff800020f6b210 ss 0x10 in_delmulti+0x8d: movl 0xc(%r14),%r15d ddb{1}> show proc PROC (syz-executor.0) pid=446611 stat=onproc flags process=a proc=2000 pri=32, usrpri=50, nice=20 forw=0xffffffffffffffff, list=0xffff800020ed0010,0xffff800020ec7af8 process=0xffff800020e803e8 user=0xffff800020f66000, vmspace=0xfffffd807f000a10 estcpu=7, cpticks=0, pctcpu=0.1 user=0, sys=0, intr=0 ddb{1}> ps PID TID PPID UID S FLAGS WAIT COMMAND 32270 190676 0 0 3 0x14200 bored sosplice 73414 498193 53509 0 2 0x100002 ksh 53509 439898 2428 0 3 0x92 select sshd 82612 337790 1 0 3 0x100083 ttyin getty 2428 357052 1 0 3 0x80 select sshd 22370 496688 4516 74 3 0x100092 bpf pflogd 4516 471471 1 0 3 0x80 netio pflogd 58881 174689 21207 73 3 0x100090 kqread syslogd 21207 402118 1 0 3 0x100082 netio syslogd 88551 449912 1 77 3 0x100090 poll dhclient 10438 89195 1 0 3 0x80 poll dhclient 16184 326715 0 0 3 0x14200 bored smr 48020 483894 0 0 2 0x14200 zerothread 33637 42320 0 0 3 0x14200 aiodoned aiodoned 79558 509363 0 0 3 0x14200 syncer update 28851 19438 0 0 3 0x14200 cleaner cleaner 87119 495428 0 0 2 0x14200 reaper 14034 496191 0 0 3 0x14200 pgdaemon pagedaemon 95952 466831 0 0 3 0x14200 bored crynlk 11834 56636 0 0 3 0x14200 bored crypto 55884 157631 0 0 3 0x40014200 acpi0 acpi0 8396 101175 0 0 3 0x40014200 idle1 49907 200374 0 0 3 0x14200 bored softnet 21109 227879 0 0 3 0x14200 bored systqmp 76115 20608 0 0 3 0x14200 bored systq 36371 197497 0 0 3 0x40014200 bored softclock 87394 426349 0 0 3 0x40014200 idle0 1 72596 0 0 3 0x82 wait init 0 0 -1 0 3 0x10200 scheduler swapper ddb{1}> show all locks Process 87119 (reaper) thread 0xffff800020e19860 (495428) exclusive rwlock kmmaplk r = 0 (0xffffffff825f6148) #0 witness_lock+0x4c7 stacktrace_save sys/sys/stacktrace.h:36 [inline] #0 witness_lock+0x4c7 sys/kern/subr_witness.c:1164 #1 rw_enter+0x453 sys/kern/kern_rwlock.c:311 #2 vm_map_lock_ln+0x111 sys/uvm/uvm_map.c:5445 #3 uvm_unmap+0x6b sys/uvm/uvm_map.c:2040 #4 uvm_uarea_free+0x36 sys/uvm/uvm_glue.c:287 #5 reaper+0x156 sys/kern/kern_exit.c:445 #6 proc_trampoline+0x1c ddb{1}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 9480 6401K 6660K 78643K 10625 0 pcb 13 8K 8K 78643K 13 0 rtable 103 3K 3K 78643K 213 0 ifaddr 53 12K 12K 78643K 54 0 counters 43 33K 33K 78643K 43 0 ioctlops 0 0K 4K 78643K 1469 0 iov 0 0K 12K 78643K 8 0 mount 1 1K 1K 78643K 1 0 vnodes 1219 77K 77K 78643K 1237 0 UFS quota 1 32K 32K 78643K 1 0 UFS mount 5 36K 36K 78643K 5 0 shm 2 1K 1K 78643K 2 0 VM map 2 1K 1K 78643K 2 0 sem 10 0K 0K 78643K 12 0 dirhash 12 2K 2K 78643K 12 0 ACPI 1824 197K 290K 78643K 13058 0 file desc 3 8K 25K 78643K 73 0 proc 60 63K 95K 78643K 439 0 subproc 14 0K 2K 78643K 34 0 NFS srvsock 1 0K 0K 78643K 1 0 NFS daemon 1 16K 16K 78643K 1 0 in_multi 46 2K 2K 78643K 46 0 ether_multi 1 0K 0K 78643K 1 0 ISOFS mount 1 32K 32K 78643K 1 0 MSDOSFS mount 1 16K 16K 78643K 1 0 ttys 37 175K 175K 78643K 37 0 exec 0 0K 1K 78643K 207 0 pagedep 1 8K 8K 78643K 1 0 inodedep 1 32K 32K 78643K 1 0 newblk 1 0K 0K 78643K 1 0 VM swap 7 26K 26K 78643K 7 0 UVM amap 67 19K 38K 78643K 1151 0 UVM aobj 6 2K 2K 78643K 6 0 memdesc 1 4K 4K 78643K 1 0 crypto data 1 1K 1K 78643K 1 0 NDP 7 0K 0K 78643K 11 0 temp 75 3036K 3132K 78643K 2118 0 kqueue 2 2K 18K 78643K 19 0 SYN cache 2 16K 16K 78643K 2 0 ddb{1}> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle arp 64 7 0 1 1 0 1 1 0 8 0 plcache 128 20 0 0 1 0 1 1 0 8 0 rtpcb 80 21 0 19 1 0 1 1 0 8 0 rtentry 112 47 0 4 2 0 2 2 0 8 0 unpcb 120 39 0 29 1 0 1 1 0 8 0 syncache 264 4 0 4 1 1 0 1 0 8 0 tcpqe 32 22 0 22 1 1 0 1 0 8 0 tcpcb 544 18 0 15 1 0 1 1 0 8 0 inpcb 280 94 0 88 3 1 2 2 0 8 1 nd6 48 6 0 0 1 0 1 1 0 8 0 pfosfp 40 846 0 423 5 0 5 5 0 8 0 pfosfpen 112 1428 0 714 21 0 21 21 0 8 0 pfstitem 24 16 0 2 1 0 1 1 0 8 0 pfstkey 112 16 0 2 1 0 1 1 0 8 0 pfstate 328 16 0 2 2 0 2 2 0 8 0 pfrule 1360 21 0 16 2 1 1 2 0 8 0 art_heap8 4096 1 0 0 1 0 1 1 0 8 0 art_heap4 256 189 0 2 12 0 12 12 0 8 0 art_table 32 190 0 2 2 0 2 2 0 8 0 art_node 16 46 0 8 1 0 1 1 0 8 0 semapl 112 8 0 0 1 0 1 1 0 8 0 shmpl 112 4 0 0 1 0 1 1 0 8 0 dirhash 1024 17 0 0 3 0 3 3 0 8 0 dino2pl 256 1477 0 71 89 0 89 89 0 8 0 ffsino 272 1477 0 71 94 0 94 94 0 8 0 nchpl 144 1748 0 141 60 0 60 60 0 8 0 uvmvnodes 72 1533 0 0 28 0 28 28 0 8 0 vnodes 208 1533 0 0 81 0 81 81 0 8 0 namei 1024 4580 0 4580 2 1 1 1 0 8 1 percpumem 16 32 0 0 1 0 1 1 0 8 0 scxspl 192 4704 0 4704 9 8 1 7 0 8 1 plimitpl 152 17 0 9 1 0 1 1 0 8 0 sigapl 424 289 0 259 4 0 4 4 0 8 0 futexpl 56 717 0 717 2 1 1 1 0 8 1 knotepl 112 79 0 74 1 0 1 1 0 8 0 kqueuepl 144 24 0 23 1 0 1 1 0 8 0 pipelkpl 48 95 0 87 1 0 1 1 0 8 0 pipepl 120 190 0 179 1 0 1 1 0 8 0 fdescpl 496 273 0 259 3 0 3 3 0 8 0 filepl 152 1411 0 1343 6 1 5 5 0 8 1 lockfpl 104 11 0 10 1 0 1 1 0 8 0 lockfspl 48 6 0 5 1 0 1 1 0 8 0 sessionpl 112 18 0 7 1 0 1 1 0 8 0 pgrppl 48 19 0 8 1 0 1 1 0 8 0 ucredpl 96 87 0 78 1 0 1 1 0 8 0 zombiepl 144 278 0 275 2 1 1 1 0 8 0 processpl 984 289 0 258 5 0 5 5 0 8 1 procpl 624 391 0 356 4 0 4 4 0 8 0 sosppl 128 2 0 2 1 1 0 1 0 8 0 sockpl 400 154 0 136 4 1 3 3 0 8 1 mcl64k 65536 2 0 0 1 0 1 1 0 8 0 mcl9k 9216 1 0 0 1 0 1 1 0 8 0 mcl4k 4096 4 0 0 1 0 1 1 0 8 0 mcl2k2 2112 1 0 0 1 0 1 1 0 8 0 mcl2k 2048 189 0 0 23 0 23 23 0 8 0 mtagpl 80 2 0 0 1 0 1 1 0 8 0 mbufpl 256 205 0 0 13 0 13 13 0 8 0 bufpl 280 3418 0 133 235 0 235 235 0 8 0 anonpl 16 39374 0 38069 58 2 56 56 0 124 44 amapchunkpl 152 1636 0 1597 20 13 7 20 0 158 4 amappl16 192 1036 0 1025 38 0 38 38 0 8 36 amappl15 184 22 0 20 1 0 1 1 0 8 0 amappl14 176 25 0 22 1 0 1 1 0 8 0 amappl13 168 30 0 27 1 0 1 1 0 8 0 amappl12 160 20 0 19 1 0 1 1 0 8 0 amappl11 152 97 0 80 1 0 1 1 0 8 0 amappl10 144 20 0 18 1 0 1 1 0 8 0 amappl9 136 387 0 386 1 0 1 1 0 8 0 amappl8 128 340 0 339 2 0 2 2 0 8 1 amappl7 120 118 0 110 1 0 1 1 0 8 0 amappl6 112 66 0 65 1 0 1 1 0 8 0 amappl5 104 150 0 134 1 0 1 1 0 8 0 amappl4 96 510 0 483 1 0 1 1 0 8 0 amappl3 88 101 0 93 1 0 1 1 0 8 0 amappl2 80 1224 0 1167 2 0 2 2 0 8 0 amappl1 72 16308 0 15884 23 13 10 18 0 8 0 amappl 80 641 0 617 2 0 2 2 0 84 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 253 0 253 1 1 0 1 0 8 0 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 64 5 0 0 1 0 1 1 0 8 0 uaddrrnd 24 273 0 259 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 273 0 259 1 0 1 1 0 8 0 vmmpekpl 168 6290 0 6258 2 0 2 2 0 8 0 vmmpepl 168 40328 0 39382 109 21 88 105 0 357 37 vmsppl 368 272 0 259 2 0 2 2 0 8 0 pdppl 4096 554 0 518 6 0 6 6 0 8 0 pvpl 32 141090 0 137928 147 5 142 142 0 265 99 pmappl 232 272 0 259 2 1 1 2 0 8 0 extentpl 40 53 0 36 1 0 1 1 0 8 0 phpool 112 260 0 5 8 0 8 8 0 8 0 ddb{1}> machine ddbcpu 0 Stopped at x86_ipi_db+0x1a: addq $0x8,%rsp ddb{0}> trace x86_ipi_db(ffffffff824b6ff0) at x86_ipi_db+0x1a sys/arch/amd64/amd64/db_interface.c:352 x86_ipi_handler() at x86_ipi_handler+0xc6 sys/arch/amd64/amd64/ipi.c:106 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x23 __mp_lock(ffffffff8266a1e8) at __mp_lock+0x127 __mp_lock_spin sys/kern/kern_lock.c:116 [inline] __mp_lock(ffffffff8266a1e8) at __mp_lock+0x127 sys/kern/kern_lock.c:147 __mp_acquire_count(ffffffff8266a1e8,2) at __mp_acquire_count+0x51 sys/kern/kern_lock.c:227 mi_switch() at mi_switch+0x392 sys/kern/sched_bsd.c:435 sleep_finish(ffff800023190988,1) at sleep_finish+0x113 sys/kern/kern_synch.c:418 cond_wait(ffff800023190a08,ffffffff821f8f6f) at cond_wait+0x76 sys/kern/kern_synch.c:907 smr_barrier_impl(0) at smr_barrier_impl+0xf9 sys/kern/kern_smr.c:271 tun_clone_destroy(ffff800000a28000) at tun_clone_destroy+0x136 sys/net/if_tun.c:312 tun_dev_close(5d01,7) at tun_dev_close+0x160 sys/net/if_tun.c:480 spec_close(ffff800023190b70) at spec_close+0x311 sys/kern/spec_vnops.c:555 VOP_CLOSE(fffffd806e750418,7,fffffd807f7bfba0,ffff800020ec7ae8) at VOP_CLOSE+0xc0 sys/kern/vfs_vops.c:174 vn_closefile(fffffd80677fabf8,ffff800020ec7ae8) at vn_closefile+0xd7 vn_close sys/kern/vfs_vnops.c:298 [inline] vn_closefile(fffffd80677fabf8,ffff800020ec7ae8) at vn_closefile+0xd7 sys/kern/vfs_vnops.c:614 fdrop(fffffd80677fabf8,ffff800020ec7ae8) at fdrop+0xc2 sys/kern/kern_descrip.c:1276 closef(fffffd80677fabf8,ffff800020ec7ae8) at closef+0x11c sys/kern/kern_descrip.c:1260 fdfree(ffff800020ec7ae8) at fdfree+0x101 sys/kern/kern_descrip.c:1192 exit1(ffff800020ec7ae8,0,d,1) at exit1+0x32c sys/kern/kern_exit.c:197 postsig(ffff800020ec7ae8,d) at postsig+0x4ed sigexit sys/kern/kern_sig.c:1483 [inline] postsig(ffff800020ec7ae8,d) at postsig+0x4ed sys/kern/kern_sig.c:1415 userret(ffff800020ec7ae8) at userret+0x199 sys/kern/kern_sig.c:1867 syscall(ffff800023190ff0) at syscall+0x55f mi_syscall_return sys/sys/syscall_mi.h:129 [inline] syscall(ffff800023190ff0) at syscall+0x55f sys/arch/amd64/amd64/trap.c:592 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7f7ffffe83e0, count: -22 ddb{0}> machine ddbcpu 1 Stopped at in_delmulti+0x8d: movl 0xc(%r14),%r15d ddb{1}> trace in_delmulti(fff7ffefffffffff) at in_delmulti+0x8d sys/netinet/in.c:914 in_purgeaddr(ffff800000a0c900) at in_purgeaddr+0x156 sys/netinet/in.c:760 in_ifdetach(ffff8000009d5000) at in_ifdetach+0x74 sys/netinet/in.c:971 if_detach(ffff8000009d5000) at if_detach+0x140 sys/net/if.c:1148 tun_clone_destroy(ffff8000009d5000) at tun_clone_destroy+0x1f2 sys/net/if_tun.c:329 tun_dev_close(5d00,7) at tun_dev_close+0x160 sys/net/if_tun.c:480 spec_close(ffff800020f6b4a0) at spec_close+0x311 sys/kern/spec_vnops.c:555 VOP_CLOSE(fffffd806e7504e8,7,fffffd807f7bfba0,ffff800020e6dad8) at VOP_CLOSE+0xc0 sys/kern/vfs_vops.c:174 vn_closefile(fffffd80677faa30,ffff800020e6dad8) at vn_closefile+0xd7 vn_close sys/kern/vfs_vnops.c:298 [inline] vn_closefile(fffffd80677faa30,ffff800020e6dad8) at vn_closefile+0xd7 sys/kern/vfs_vnops.c:614 fdrop(fffffd80677faa30,ffff800020e6dad8) at fdrop+0xc2 sys/kern/kern_descrip.c:1276 closef(fffffd80677faa30,ffff800020e6dad8) at closef+0x11c sys/kern/kern_descrip.c:1260 fdfree(ffff800020e6dad8) at fdfree+0x101 sys/kern/kern_descrip.c:1192 exit1(ffff800020e6dad8,0,d,1) at exit1+0x32c sys/kern/kern_exit.c:197 postsig(ffff800020e6dad8,d) at postsig+0x4ed sigexit sys/kern/kern_sig.c:1483 [inline] postsig(ffff800020e6dad8,d) at postsig+0x4ed sys/kern/kern_sig.c:1415 userret(ffff800020e6dad8) at userret+0x199 sys/kern/kern_sig.c:1867 syscall(ffff800020f6b920) at syscall+0x55f mi_syscall_return sys/sys/syscall_mi.h:129 [inline] syscall(ffff800020f6b920) at syscall+0x55f sys/arch/amd64/amd64/trap.c:592 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7f7ffffbb830, count: -17