uvm_fault(0xfffffd807f008730, 0xa0a2938, 0, 1) -> e kernel: page fault trap, code=0 Stopped at in6_purgeaddr+0x135: movq 0x8(%r12),%r13 ddb{1}> ddb{1}> set $lines = 0 ddb{1}> set $maxwidth = 0 ddb{1}> show panic kernel page fault uvm_fault(0xfffffd807f008730, 0xa0a2938, 0, 1) -> e in6_purgeaddr(ffff800000c1ce00) at in6_purgeaddr+0x135 sys/netinet6/in6.c:914 end trace frame: 0xffff800021da6ff0, count: 0 ddb{1}> trace in6_purgeaddr(ffff800000c1ce00) at in6_purgeaddr+0x135 sys/netinet6/in6.c:914 in6_ifdetach(ffff800000c78800) at in6_ifdetach+0x74 sys/netinet6/in6_ifattach.c:422 if_detach(ffff800000c78800) at if_detach+0x155 sys/net/if.c:1110 tun_clone_destroy(ffff800000c78800) at tun_clone_destroy+0x1c7 sys/net/if_tun.c:278 spec_close(ffff800021da7120) at spec_close+0x311 sys/kern/spec_vnops.c:555 VOP_CLOSE(fffffd806e68f9c8,7,fffffd807f7c6840,ffff800020acf1b0) at VOP_CLOSE+0xc0 sys/kern/vfs_vops.c:175 vn_closefile(fffffd8068dfc1e0,ffff800020acf1b0) at vn_closefile+0xd8 vn_close sys/kern/vfs_vnops.c:301 [inline] vn_closefile(fffffd8068dfc1e0,ffff800020acf1b0) at vn_closefile+0xd8 sys/kern/vfs_vnops.c:613 fdrop(fffffd8068dfc1e0,ffff800020acf1b0) at fdrop+0xc2 sys/kern/kern_descrip.c:1273 closef(fffffd8068dfc1e0,ffff800020acf1b0) at closef+0x11d sys/kern/kern_descrip.c:1257 fdfree(ffff800020acf1b0) at fdfree+0x101 sys/kern/kern_descrip.c:1189 exit1(ffff800020acf1b0,19,1) at exit1+0x32f sys/kern/kern_exit.c:196 postsig(ffff800020acf1b0,19) at postsig+0x4e3 sigexit sys/kern/kern_sig.c:1499 [inline] postsig(ffff800020acf1b0,19) at postsig+0x4e3 sys/kern/kern_sig.c:1431 userret(ffff800020acf1b0) at userret+0x199 sys/kern/kern_sig.c:1889 syscall(ffff800021da75a0) at syscall+0x55f mi_syscall_return sys/sys/syscall_mi.h:115 [inline] syscall(ffff800021da75a0) at syscall+0x55f sys/arch/amd64/amd64/trap.c:577 Xsyscall(6,0,c6,57,1265ad,7f7fffffaed4) at Xsyscall+0x128 end of kernel end trace frame: 0x7f7fffffaf20, count: -15 ddb{1}> show registers rdi 0x1 rsi 0x4 rbp 0xffff800021da6f80 rbx 0xffff800000c1c100 rdx 0 rcx 0 rax 0 r8 0xffffffff81cdc104 rt_ifa_dellocal+0x44 r9 0x1 r10 0x18 r11 0xc5fd443ec4c313f4 r12 0xa0a2930 __kernel_end_phys+0x78a2930 r13 0 r14 0xffff800000c1ce00 r15 0xffff800000c78800 rip 0xffffffff82171be5 in6_purgeaddr+0x135 cs 0x8 rflags 0x10206 __ALIGN_SIZE+0xf206 rsp 0xffff800021da6f10 ss 0x10 in6_purgeaddr+0x135: movq 0x8(%r12),%r13 ddb{1}> show proc PROC (syz-executor.0) pid=298677 stat=onproc flags process=a proc=2000 pri=80, usrpri=80, nice=20 forw=0xffffffffffffffff, list=0xffff800020ab0780,0xffffffff8266aad8 process=0xffff800020adc000 user=0xffff800021da2000, vmspace=0xfffffd807f008730 estcpu=36, cpticks=6, pctcpu=0.24 user=0, sys=2, intr=0 ddb{1}> ps PID TID PPID UID S FLAGS WAIT COMMAND 4353 368111 91176 0 2 0x482 syz-executor.1 24747 331161 1 0 3 0x100083 ttyin getty 59746 281005 0 0 3 0x14200 acct acct 31353 317197 0 0 3 0x14200 bored sosplice 91176 39745 46551 0 2 0x82 syz-fuzzer 91176 312368 46551 0 3 0x4000082 thrsleep syz-fuzzer 91176 449784 46551 0 3 0x4000082 thrsleep syz-fuzzer 91176 267215 46551 0 3 0x4000082 thrsleep syz-fuzzer 91176 304347 46551 0 3 0x4000082 thrsleep syz-fuzzer 91176 310479 46551 0 3 0x4000082 thrsleep syz-fuzzer 91176 57776 46551 0 3 0x4000082 thrsleep syz-fuzzer 91176 387134 46551 0 3 0x4000082 thrsleep syz-fuzzer 91176 229867 46551 0 3 0x4000082 thrsleep syz-fuzzer 91176 367409 46551 0 3 0x4000082 thrsleep syz-fuzzer 46551 229393 97451 0 3 0x10008a pause ksh 97451 170585 43264 0 3 0x92 select sshd 43264 440064 1 0 3 0x80 select sshd 75573 118014 25997 74 3 0x100092 bpf pflogd 25997 139507 1 0 3 0x80 netio pflogd 31315 363973 97134 73 3 0x100090 kqread syslogd 97134 148484 1 0 3 0x100082 netio syslogd 46333 468076 1 77 2 0x100090 dhclient 26751 326081 1 0 7 0 dhclient 68076 483051 0 0 2 0x14200 zerothread 2957 430194 0 0 3 0x14200 aiodoned aiodoned 65351 414244 0 0 3 0x14200 syncer update 59518 205916 0 0 3 0x14200 cleaner cleaner 71965 21291 0 0 3 0x14200 reaper reaper 3165 16996 0 0 3 0x14200 pgdaemon pagedaemon 82916 277900 0 0 3 0x14200 bored crynlk 70827 350051 0 0 3 0x14200 bored crypto 46568 74280 0 0 3 0x40014200 acpi0 acpi0 64832 452520 0 0 3 0x40014200 idle1 98609 188731 0 0 2 0x14200 softnet 2867 193838 0 0 2 0x14200 systqmp 16178 276174 0 0 3 0x14200 bored systq 50402 249201 0 0 3 0x40014200 bored softclock 64995 187179 0 0 3 0x40014200 idle0 7623 470545 0 0 3 0x14200 bored smr 1 66355 0 0 3 0x82 wait init 0 0 -1 0 3 0x10200 scheduler swapper ddb{1}> show all locks ddb{1}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim Kern Lim devbuf 9625 6485K 8990K 78643K 45357 0 0 pcb 13 12K 14K 78643K 14609 0 0 rtable 183 18K 18K 78643K 28373 0 0 ifaddr 130 33K 34K 78643K 1998 0 0 counters 39 33K 33K 78643K 39 0 0 ioctlops 0 0K 4K 78643K 2586 0 0 iov 0 0K 32K 78643K 7323 0 0 mount 1 1K 1K 78643K 1 0 0 vnodes 1226 77K 78K 78643K 16911 0 0 UFS quota 1 32K 32K 78643K 1 0 0 UFS mount 5 36K 36K 78643K 5 0 0 shm 2 1K 9K 78643K 256 0 0 VM map 28 14K 14K 78643K 53 0 0 sem 12 0K 0K 78643K 15218 0 0 dirhash 12 2K 2K 78643K 12 0 0 ACPI 1809 196K 290K 78643K 12766 0 0 file desc 4 9K 25K 78643K 26571 0 0 sigio 0 0K 0K 78643K 160 0 0 proc 62 63K 95K 78643K 3649 0 0 subproc 23 1K 2K 78643K 867 0 0 NFS srvsock 1 0K 0K 78643K 1 0 0 NFS daemon 1 16K 16K 78643K 1 0 0 ip_moptions 0 0K 0K 78643K 1646 0 0 in_multi 33 2K 3K 78643K 4920 0 0 ether_multi 1 0K 0K 78643K 110 0 0 mrt 0 0K 0K 78643K 9073 0 0 ISOFS mount 1 32K 32K 78643K 1 0 0 MSDOSFS mount 1 16K 16K 78643K 1 0 0 ttys 96 424K 424K 78643K 96 0 0 exec 0 0K 1K 78643K 1940 0 0 pfkey data 0 0K 0K 78643K 4 0 0 pagedep 1 8K 8K 78643K 1 0 0 inodedep 1 32K 32K 78643K 1 0 0 newblk 1 0K 0K 78643K 1 0 0 VM swap 7 26K 26K 78643K 7 0 0 UVM amap 258 224K 228K 78643K 71391 0 0 UVM aobj 130 8K 8K 78643K 130 0 0 memdesc 1 4K 4K 78643K 1 0 0 crypto data 1 1K 1K 78643K 1 0 0 ip6_options 0 0K 2K 78643K 3277 0 0 NDP 23 0K 1K 78643K 1077 0 0 temp 250 3565K 3671K 78643K 468948 0 0 kqueue 0 0K 0K 78643K 316 0 0 SYN cache 2 16K 16K 78643K 2 0 0 ddb{1}> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle arp 64 627 0 623 1 0 1 1 0 8 0 plcache 128 20 0 0 1 0 1 1 0 8 0 rtpcb 80 6503 0 6501 1 0 1 1 0 8 0 rtentry 112 9548 0 9473 4 1 3 3 0 8 0 unpcb 120 12176 0 12153 11 9 2 2 0 8 1 syncache 264 46 0 46 12 12 0 1 0 8 0 tcpqe 32 67 0 67 11 11 0 1 0 8 0 tcpcb 544 45933 0 45929 35 33 2 14 0 8 1 ipq 40 4 0 4 1 1 0 1 0 8 0 ipqe 40 8 0 8 1 1 0 1 0 8 0 inpcb 280 279868 0 279860 134 125 9 11 0 8 7 rttmr 72 4512 0 4512 7 6 1 1 0 8 1 ip6q 72 16 0 16 3 3 0 1 0 8 0 ip6af 40 32 0 32 3 3 0 1 0 8 0 nd6 48 763 0 757 4 3 1 1 0 8 0 pkpcb 40 42 0 42 14 14 0 1 0 8 0 swfcl 56 2 0 0 1 0 1 1 0 8 0 ppxss 1128 234 0 233 6 5 1 1 0 8 0 pffrag 232 969 0 969 28 28 0 1 0 482 0 pffrnode 88 961 0 961 28 28 0 1 0 8 0 pffrent 40 20913 0 20913 28 28 0 1 0 8 0 pfosfp 40 846 0 423 5 0 5 5 0 8 0 pfosfpen 112 1428 0 714 21 0 21 21 0 8 0 pfstitem 24 731 0 596 1 0 1 1 0 8 0 pfstkey 112 731 0 596 5 1 4 4 0 8 0 pfstate 328 731 0 596 24 12 12 12 0 8 0 pfrule 1360 21 0 16 2 1 1 2 0 8 0 art_heap8 4096 174 0 170 9 5 4 6 0 8 0 art_heap4 256 21723 0 21346 51 27 24 24 0 8 0 art_table 32 21897 0 21516 7 3 4 4 0 8 0 art_node 16 9539 0 9478 1 0 1 1 0 8 0 sysvmsgpl 40 150 0 140 1 0 1 1 0 8 0 semapl 112 15216 0 15206 1 0 1 1 0 8 0 shmpl 112 128 0 0 4 0 4 4 0 8 0 dirhash 1024 17 0 0 3 0 3 3 0 8 0 dino1pl 128 45122 0 43591 51 1 50 50 0 8 0 ffsino 272 45122 0 43591 104 1 103 103 0 8 0 nchpl 144 96957 0 96464 62 43 19 61 0 8 0 uvmvnodes 72 7214 0 0 132 0 132 132 0 8 0 vnodes 208 7214 0 0 380 0 380 380 0 8 0 namei 1024 362893 0 362893 5 4 1 1 0 8 1 percpumem 16 30 0 0 1 0 1 1 0 8 0 vcpupl 1984 30 0 4 4 0 4 4 0 8 0 vmpool 552 51 0 25 4 2 2 2 0 8 0 scsiplug 64 17 0 17 9 9 0 1 0 8 0 scxspl 192 243317 0 243317 56 55 1 7 0 8 1 plimitpl 152 1015 0 1007 1 0 1 1 0 8 0 sigapl 432 26625 0 26611 3 1 2 3 0 8 0 futexpl 56 1382363 0 1382363 3 2 1 1 0 8 1 knotepl 112 4396 0 4377 10 9 1 2 0 8 0 kqueuepl 104 5589 0 5587 4 3 1 4 0 8 0 pipepl 112 9012 0 8994 10 9 1 2 0 8 0 fdescpl 488 26626 0 26611 3 0 3 3 0 8 0 filepl 152 536786 0 536696 92 82 10 13 0 8 5 lockfpl 104 3800 0 3799 1 0 1 1 0 8 0 lockfspl 48 1499 0 1498 1 0 1 1 0 8 0 sessionpl 112 70 0 59 1 0 1 1 0 8 0 pgrppl 48 225 0 214 1 0 1 1 0 8 0 ucredpl 96 16762 0 16751 1 0 1 1 0 8 0 zombiepl 144 26613 0 26610 5 4 1 1 0 8 0 processpl 896 26644 0 26610 4 0 4 4 0 8 0 procpl 632 67644 0 67601 14 9 5 5 0 8 0 srpgc 64 77 0 74 28 27 1 1 0 8 0 sosppl 128 306 0 306 24 24 0 1 0 8 0 sockpl 384 298709 0 298677 183 171 12 17 0 8 8 mcl64k 65536 435 0 0 43 8 35 35 0 8 0 mcl16k 16384 41 0 0 6 3 3 3 0 8 0 mcl12k 12288 49 0 0 2 0 2 2 0 8 0 mcl9k 9216 49 0 0 2 0 2 2 0 8 0 mcl8k 8192 54 0 0 5 2 3 4 0 8 0 mcl4k 4096 60 0 0 5 2 3 3 0 8 0 mcl2k2 2112 17 0 0 2 0 2 2 0 8 0 mcl2k 2048 697 0 0 20 6 14 18 0 8 0 mtagpl 80 432 0 0 5 1 4 5 0 8 0 mbufpl 256 1729 0 0 60 0 60 60 0 8 0 bufpl 256 61479 0 54232 454 0 454 454 0 8 0 anonpl 16 1999405 0 1963362 351 199 152 180 0 124 6 amapchunkpl 152 126561 0 124923 157 88 69 93 0 158 5 amappl16 192 123818 0 123196 222 189 33 44 0 8 1 amappl15 184 1498 0 1497 2 1 1 1 0 8 0 amappl14 176 4877 0 4866 1 0 1 1 0 8 0 amappl13 168 1543 0 1542 7 6 1 1 0 8 0 amappl12 160 1427 0 1425 1 0 1 1 0 8 0 amappl11 152 4141 0 4126 1 0 1 1 0 8 0 amappl10 144 2187 0 2181 1 0 1 1 0 8 0 amappl9 136 7218 0 7214 1 0 1 1 0 8 0 amappl8 128 6989 0 6850 6 1 5 5 0 8 0 amappl7 120 2366 0 2358 1 0 1 1 0 8 0 amappl6 112 4039 0 4012 1 0 1 1 0 8 0 amappl5 104 6742 0 6728 1 0 1 1 0 8 0 amappl4 96 27140 0 27095 2 0 2 2 0 8 0 amappl3 88 8973 0 8968 1 0 1 1 0 8 0 amappl2 80 212161 0 212091 4 2 2 3 0 8 0 amappl1 72 510560 0 510143 26 16 10 20 0 8 0 amappl 80 68775 0 68728 2 0 2 2 0 84 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 253 0 253 1 1 0 1 0 8 0 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 64 129 0 0 3 0 3 3 0 8 0 uaddrrnd 24 26677 0 26611 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 26677 0 26611 1 0 1 1 0 8 0 vmmpekpl 168 139482 0 139442 2 0 2 2 0 8 0 vmmpepl 168 3121736 0 3119910 450 346 104 112 0 357 10 vmsppl 368 26625 0 26611 2 0 2 2 0 8 0 pdppl 4096 53361 0 53298 12 3 9 9 0 8 0 pvpl 32 6317446 0 6302593 629 482 147 159 0 265 24 pmappl 232 26676 0 26636 6 3 3 3 0 8 0 extentpl 40 46 0 29 1 0 1 1 0 8 0 phpool 112 818 0 97 21 0 21 21 0 8 0