panic: Caught invalid memory access at ffff800001d17730 size 8 op 0
Stopped at db_enter+0x17: popq %rbp
TID PID UID PRFLAGS PFLAGS CPU COMMAND
311829 23812 0 0x2 0 0 ndp
*480979 13776 0 0 0x4000000 1K syz-executor
db_enter() at db_enter+0x17 sys/arch/amd64/amd64/db_interface.c:457
panic(ffffffff846431fb) at panic+0x270 sys/kern/subr_prf.c:198
__asan_load8_noabort(ffff800001d17730) at __asan_load8_noabort+0xde kasan_shadow_check sys/kern/subr_kasan.c:-1 [inline]
__asan_load8_noabort(ffff800001d17730) at __asan_load8_noabort+0xde sys/kern/subr_kasan.c:1099
pf_remove_if_empty_ruleset(ffff800001d176e0) at pf_remove_if_empty_ruleset+0x5c sys/net/pf_ruleset.c:292
pfi_dynaddr_setup(ffff8000017fa360,0,1) at pfi_dynaddr_setup+0x837 sys/net/pf_if.c:508
pf_addr_setup(ffffffff85e43b10,ffff8000017fa360,0) at pf_addr_setup+0x3a sys/net/pf_ioctl.c:948
pfioctl(14900,cd604404,ffff800001aa9000,2,ffff800029a39cb0) at pfioctl+0xeac2 sys/net/pf_ioctl.c:2390
VOP_IOCTL(ffff800001d03b38,cd604404,ffff800001aa9000,2,ffff800000118478,ffff800029a39cb0) at VOP_IOCTL+0x131 sys/kern/vfs_vops.c:264
vn_ioctl(ffff800001b4f338,cd604404,ffff800001aa9000,ffff800029a39cb0) at vn_ioctl+0x18c sys/kern/vfs_vnops.c:537
sys_ioctl(ffff800029a39cb0,ffff80003130e500,ffff80003130e460) at sys_ioctl+0x868 sys/kern/sys_generic.c:510
syscall(ffff80003130e500) at syscall+0x1089 mi_syscall sys/sys/syscall_mi.h:176 [inline]
syscall(ffff80003130e500) at syscall+0x1089 sys/arch/amd64/amd64/trap.c:791
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x97230177f30, count: 3
https://www.openbsd.org/ddb.html describes the minimum info required in bug
reports. Insufficient info makes it difficult to find and fix bugs.
ddb{1}>
ddb{1}> set $lines = 0
ddb{1}> set $maxwidth = 0
ddb{1}> show panic
*cpu1: Caught invalid memory access at ffff800001d17730 size 8 op 0
ddb{1}> show kasan
KASAN: invalid read of 8 bytes at 0xffff800001d17730 from pc 0xffffffff83a8e5dc
KASAN: first bad byte at 0xffff800001d17730 (+0); shadow 0xfd: pool use-after-free (or unallocated item)
KASAN: 0xffff800001d17730 is 1248 bytes inside the 1288-byte item [0xffff800001d17250..0xffff800001d17758) in pool 'pfanchor'
KASAN: allocated at:
#0 pool_get+0x770 sys/kern/subr_pool.c:834
#1 pf_create_anchor+0x123 sys/net/pf_ruleset.c:-1
#2 pf_find_or_create_ruleset+0x3eb sys/net/pf_ruleset.c:-1
#3 pfi_dynaddr_setup+0x619 sys/net/pf_if.c:-1
#4 pf_addr_setup+0x3a sys/net/pf_ioctl.c:948
#5 pfioctl+0xeac2 sys/net/pf_ioctl.c:2390
#6 VOP_IOCTL+0x131 sys/kern/vfs_vops.c:264
#7 vn_ioctl+0x18c sys/kern/vfs_vnops.c:537
#8 sys_ioctl+0x868 sys/kern/sys_generic.c:510
#9 syscall+0x1089 mi_syscall sys/sys/syscall_mi.h:176 [inline]
#9 syscall+0x1089 sys/arch/amd64/amd64/trap.c:791
#10 Xsyscall+0x128
KASAN: freed at:
#0 pool_put+0x79 sys/kern/subr_pool.c:1019
#1 pf_remove_if_empty_ruleset+0x2cc sys/net/pf_ruleset.c:-1
#2 pfr_destroy_ktable+0x464 sys/net/pf_table.c:2413
#3 pfr_attach_table+0x5f6 sys/net/pf_table.c:2588
#4 pfi_dynaddr_setup+0x63e sys/net/pf_if.c:-1
#5 pf_addr_setup+0x3a sys/net/pf_ioctl.c:948
#6 pfioctl+0xeac2 sys/net/pf_ioctl.c:2390
#7 VOP_IOCTL+0x131 sys/kern/vfs_vops.c:264
#8 vn_ioctl+0x18c sys/kern/vfs_vnops.c:537
#9 sys_ioctl+0x868 sys/kern/sys_generic.c:510
#10 syscall+0x1089 mi_syscall sys/sys/syscall_mi.h:176 [inline]
#10 syscall+0x1089 sys/arch/amd64/amd64/trap.c:791
#11 Xsyscall+0x128
KASAN: pc: pf_remove_if_empty_ruleset+0x5c
KASAN: call trace:
#0 __asan_load8_noabort+0xbd kasan_shadow_check sys/kern/subr_kasan.c:-1 [inline]
#0 __asan_load8_noabort+0xbd sys/kern/subr_kasan.c:1099
#1 pf_remove_if_empty_ruleset+0x5c sys/net/pf_ruleset.c:292
#2 pfi_dynaddr_setup+0x837 sys/net/pf_if.c:508
#3 pf_addr_setup+0x3a sys/net/pf_ioctl.c:948
#4 pfioctl+0xeac2 sys/net/pf_ioctl.c:2390
#5 VOP_IOCTL+0x131 sys/kern/vfs_vops.c:264
#6 vn_ioctl+0x18c sys/kern/vfs_vnops.c:537
#7 sys_ioctl+0x868 sys/kern/sys_generic.c:510
#8 syscall+0x1089 mi_syscall sys/sys/syscall_mi.h:176 [inline]
#8 syscall+0x1089 sys/arch/amd64/amd64/trap.c:791
#9 Xsyscall+0x128
KASAN: shadow of 0xffff800001d17600..0xffff800001d17880 (1 cell = 8 bytes):
0xffff800001d17600: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
0xffff800001d17680: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
>0xffff800001d17700: fd fd fd fd fd fd[fd]fd fd fd fd fd fd fd fd fd
0xffff800001d17780: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
0xffff800001d17800: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
KASAN: legend: 00 valid; 01..07 partial; fb malloc redzone; fc malloc freed; fd pool freed; fe kmem; fa global; f1..f4/f8 stack/scope
ddb{1}> trace
db_enter() at db_enter+0x17 sys/arch/amd64/amd64/db_interface.c:457
panic(ffffffff846431fb) at panic+0x270 sys/kern/subr_prf.c:198
__asan_load8_noabort(ffff800001d17730) at __asan_load8_noabort+0xde kasan_shadow_check sys/kern/subr_kasan.c:-1 [inline]
__asan_load8_noabort(ffff800001d17730) at __asan_load8_noabort+0xde sys/kern/subr_kasan.c:1099
pf_remove_if_empty_ruleset(ffff800001d176e0) at pf_remove_if_empty_ruleset+0x5c sys/net/pf_ruleset.c:292
pfi_dynaddr_setup(ffff8000017fa360,0,1) at pfi_dynaddr_setup+0x837 sys/net/pf_if.c:508
pf_addr_setup(ffffffff85e43b10,ffff8000017fa360,0) at pf_addr_setup+0x3a sys/net/pf_ioctl.c:948
pfioctl(14900,cd604404,ffff800001aa9000,2,ffff800029a39cb0) at pfioctl+0xeac2 sys/net/pf_ioctl.c:2390
VOP_IOCTL(ffff800001d03b38,cd604404,ffff800001aa9000,2,ffff800000118478,ffff800029a39cb0) at VOP_IOCTL+0x131 sys/kern/vfs_vops.c:264
vn_ioctl(ffff800001b4f338,cd604404,ffff800001aa9000,ffff800029a39cb0) at vn_ioctl+0x18c sys/kern/vfs_vnops.c:537
sys_ioctl(ffff800029a39cb0,ffff80003130e500,ffff80003130e460) at sys_ioctl+0x868 sys/kern/sys_generic.c:510
syscall(ffff80003130e500) at syscall+0x1089 mi_syscall sys/sys/syscall_mi.h:176 [inline]
syscall(ffff80003130e500) at syscall+0x1089 sys/arch/amd64/amd64/trap.c:791
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x97230177f30, count: -12
ddb{1}> show registers
rdi 0
rsi 0x1
rbp 0xffff80003130d8f0
rbx 0xffff80003130d960
rdx 0
rcx 0xffff800028fe3ff0
rax 0xffff800000150080
r8 0x101010101010101
r9 0x8080808080808080
r10 0xffff80003130d6d8
r11 0xffffffff81b47ce0 x86_bus_space_io_read_1
r12 0xffffffff846431fb .str+0x9d3bb
r13 0xffff800028fe4c10
r14 0xffff800028fe4e0f
r15 0x1
rip 0xffffffff83f69c07 db_enter+0x17
cs 0x8
rflags 0x246
rsp 0xffff80003130d8f0
ss 0x10
db_enter+0x17: popq %rbp
ddb{1}> show proc
PROC (syz-executor) tid=480979 pid=13776 tcnt=2 stat=onproc
flags process=0 proc=4000000<THREAD>
runpri=32, usrpri=86, slppri=32, nice=20
wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0
forw=0xffffffffffffffff, list=0xffff800029a38fb8,0xffff800029a38568
process=0xffff800045ffab68 user=0xffff800031303000, vmspace=0xffff800001bddd78
estcpu=36, cpticks=42, pctcpu=0.0, user=0, sys=42, intr=0
ddb{1}> ps
PID TID PPID UID S PRLAGS PFLAGS WAIT COMMAND
52173 12304 37063 0 2 0x100000 0 sh
23812 311829 91452 0 7 0x2 0 ndp
91452 173642 71876 0 3 0x100002 0x88 sigsusp sh
37063 471995 79249 0 3 0x100002 0x88 sigsusp sh
99451 76377 2343 0 2 0 0 syz-executor
99451 87130 2343 0 3 0 0x4000080 fsleep syz-executor
79249 19517 72532 0 3 0x2 0x80 wait syz-executor
13776 334984 87482 0 2 0 0 syz-executor
*13776 480979 87482 0 7 0 0x4000000 syz-executor
3574 114211 19921 0 3 0 0x80 nanoslp syz-executor
3574 139873 19921 0 3 0 0x4000080 kqread syz-executor
3574 59125 19921 0 3 0 0x4000080 fsleep syz-executor
71876 465824 72532 0 3 0x2 0x80 wait syz-executor
20863 150283 72532 0 3 0x2 0 biowait syz-executor
87901 343078 72532 0 3 0x2 0x80 wait syz-executor
2343 422929 72532 0 3 0x2 0x80 nanoslp syz-executor
40382 31839 72532 0 3 0x2 0x80 wait syz-executor
87482 337674 72532 0 3 0x2 0x80 nanoslp syz-executor
19921 138227 72532 0 3 0x2 0x80 nanoslp syz-executor
72532 27100 66666 0 3 0x2 0x80 kqread syz-executor
66666 308820 97970 0 3 0x100002 0x88 sigsusp ksh
97970 345111 70685 0 3 0x10 0x88 kqread sshd-session
70685 287364 74095 0 3 0x12 0x80 kqread sshd-session
12400 191563 1 0 3 0x100003 0x80 ttyin getty
74095 119596 1 0 3 0 0x88 kqread sshd
13038 32133 87909 74 3 0x1100012 0x80 bpf pflogd
87909 283680 1 0 3 0 0x80 sbwait pflogd
22727 101259 38814 73 3 0x1100010 0x80 kqread syslogd
38814 435338 1 0 3 0x100002 0x80 sbwait syslogd
17495 501687 1 0 3 0x100000 0x80 kqread resolvd
90455 24549 2333 77 3 0x100012 0x80 kqread dhcpleased
96851 82717 2333 77 3 0x100012 0x80 kqread dhcpleased
2333 286358 1 0 3 0 0x80 kqread dhcpleased
98805 101536 0 0 3 0x14000 0x200 bored smr
91827 215192 0 0 2 0x14000 0x200 zerothread
38240 51993 0 0 3 0x14000 0x200 aiodoned aiodoned
39968 203748 0 0 3 0x14000 0x200 syncer update
42002 212064 0 0 3 0x14000 0x200 cleaner cleaner
79233 325841 0 0 3 0x14000 0x200 reaper reaper
19315 142174 0 0 3 0x14000 0x200 pgdaemon pagedaemon
96513 471106 0 0 3 0x14000 0x200 bored viomb
82411 198125 0 0 3 0x14000 0x40000200 acpi0 acpi0
5359 283142 0 0 3 0x14000 0x40000200 idle1
62729 148415 0 0 3 0x14000 0x200 bored softnet1
60367 311115 0 0 2 0x14000 0x200 softnet0
75609 287311 0 0 3 0x14000 0x200 smrbar systqmp
13569 450978 0 0 3 0x14000 0x200 bored systq
14609 355932 0 0 3 0x14000 0x200 tmoslp softclockmp
87447 113335 0 0 3 0x14000 0x40000200 tmoslp softclock
80486 334498 0 0 3 0x14000 0x40000200 idle0
1 17322 0 0 3 0x2 0x80 wait init
0 0 -1 0 3 0x10000 0x200 scheduler swapper
ddb{1}> show all locks
Process 23812 (ndp) thread 0xffff800029a38a88 (311829)
exclusive rwlock amaplk r = 0 (0xffff800001c1b548)
#0 witness_lock+0x632 stacktrace_save sys/sys/stacktrace.h:37 [inline]
#0 witness_lock+0x632 sys/kern/subr_witness.c:1160
#1 rw_do_enter_write+0x53e sys/kern/kern_rwlock.c:320
#2 uvm_fault_check+0xf69 sys/uvm/uvm_fault.c:834
#3 uvm_fault+0x1e7 sys/uvm/uvm_fault.c:627
#4 upageflttrap+0xe0 sys/arch/amd64/amd64/trap.c:194
#5 usertrap+0x4f9 sys/arch/amd64/amd64/trap.c:648
#6 recall_trap+0x8
shared rwlock vmmaplk r = 0 (0xffff800001ba94e8)
#0 witness_lock+0x632 stacktrace_save sys/sys/stacktrace.h:37 [inline]
#0 witness_lock+0x632 sys/kern/subr_witness.c:1160
#1 rw_do_enter_read+0x55d sys/kern/kern_rwlock.c:413
#2 uvmfault_lookup+0x1a2 sys/uvm/uvm_fault.c:-1
#3 uvm_fault_check+0x43 sys/uvm/uvm_fault.c:693
#4 uvm_fault+0x1e7 sys/uvm/uvm_fault.c:627
#5 upageflttrap+0xe0 sys/arch/amd64/amd64/trap.c:194
#6 usertrap+0x4f9 sys/arch/amd64/amd64/trap.c:648
#7 recall_trap+0x8
Process 13776 (syz-executor) thread 0xffff800029a39cb0 (480979)
exclusive rwlock pf_lock r = 0 (0xffffffff85081f58)
#0 witness_lock+0x632 stacktrace_save sys/sys/stacktrace.h:37 [inline]
#0 witness_lock+0x632 sys/kern/subr_witness.c:1160
#1 rw_do_enter_write+0x53e sys/kern/kern_rwlock.c:320
#2 pfioctl+0xdf11 sys/net/pf_ioctl.c:2343
#3 VOP_IOCTL+0x131 sys/kern/vfs_vops.c:264
#4 vn_ioctl+0x18c sys/kern/vfs_vnops.c:537
#5 sys_ioctl+0x868 sys/kern/sys_generic.c:510
#6 syscall+0x1089 mi_syscall sys/sys/syscall_mi.h:176 [inline]
#6 syscall+0x1089 sys/arch/amd64/amd64/trap.c:791
#7 Xsyscall+0x128
exclusive rwlock netlock r = 0 (0xffffffff852e0018)
#0 witness_lock+0x632 stacktrace_save sys/sys/stacktrace.h:37 [inline]
#0 witness_lock+0x632 sys/kern/subr_witness.c:1160
#1 rw_do_enter_write+0x53e sys/kern/kern_rwlock.c:320
#2 pfioctl+0xdefc sys/net/pf_ioctl.c:2342
#3 VOP_IOCTL+0x131 sys/kern/vfs_vops.c:264
#4 vn_ioctl+0x18c sys/kern/vfs_vnops.c:537
#5 sys_ioctl+0x868 sys/kern/sys_generic.c:510
#6 syscall+0x1089 mi_syscall sys/sys/syscall_mi.h:176 [inline]
#6 syscall+0x1089 sys/arch/amd64/amd64/trap.c:791
#7 Xsyscall+0x128
exclusive rwlock pfioctl_rw r = 0 (0xffffffff85082058)
#0 witness_lock+0x632 stacktrace_save sys/sys/stacktrace.h:37 [inline]
#0 witness_lock+0x632 sys/kern/subr_witness.c:1160
#1 rw_do_enter_write+0x53e sys/kern/kern_rwlock.c:320
#2 pfioctl+0x256 sys/net/pf_ioctl.c:2064
#3 VOP_IOCTL+0x131 sys/kern/vfs_vops.c:264
#4 vn_ioctl+0x18c sys/kern/vfs_vnops.c:537
#5 sys_ioctl+0x868 sys/kern/sys_generic.c:510
#6 syscall+0x1089 mi_syscall sys/sys/syscall_mi.h:176 [inline]
#6 syscall+0x1089 sys/arch/amd64/amd64/trap.c:791
#7 Xsyscall+0x128
exclusive kernel_lock &kernel_lock r = 0 (0xffffffff85def4c0)
#0 witness_lock+0x632 stacktrace_save sys/sys/stacktrace.h:37 [inline]
#0 witness_lock+0x632 sys/kern/subr_witness.c:1160
#1 vn_ioctl+0x9e sys/kern/vfs_vnops.c:520
#2 sys_ioctl+0x868 sys/kern/sys_generic.c:510
#3 syscall+0x1089 mi_syscall sys/sys/syscall_mi.h:176 [inline]
#3 syscall+0x1089 sys/arch/amd64/amd64/trap.c:791
#4 Xsyscall+0x128
Process 20863 (syz-executor) thread 0xffff800045ffda08 (150283)
exclusive rrwlock inode r = 0 (0xffff800001bb0340)
#0 witness_lock+0x632 stacktrace_save sys/sys/stacktrace.h:37 [inline]
#0 witness_lock+0x632 sys/kern/subr_witness.c:1160
#1 rw_do_enter_write+0x53e sys/kern/kern_rwlock.c:320
#2 rrw_enter+0xf0 sys/kern/kern_rwlock.c:621
#3 VOP_LOCK+0x17e sys/kern/vfs_vops.c:527
#4 vn_lock+0xca sys/kern/vfs_vnops.c:576
#5 vget+0x321 sys/kern/vfs_subr.c:699
#6 ufs_ihashget+0x233 sys/ufs/ufs/ufs_ihash.c:98
#7 ffs_vget+0x10b sys/ufs/ffs/ffs_vfsops.c:1203
#8 ufs_lookup+0x1529 sys/ufs/ufs/ufs_lookup.c:478
#9 VOP_LOOKUP+0xda sys/kern/vfs_vops.c:85
#10 vfs_lookup+0xfbd sys/kern/vfs_lookup.c:580
#11 namei+0xe19 sys/kern/vfs_lookup.c:250
#12 dounlinkat+0x102 sys/kern/vfs_syscalls.c:1807
#13 syscall+0x1089 mi_syscall sys/sys/syscall_mi.h:176 [inline]
#13 syscall+0x1089 sys/arch/amd64/amd64/trap.c:791
#14 Xsyscall+0x128
exclusive rrwlock inode r = 0 (0xffff800001bb0590)
#0 witness_lock+0x632 stacktrace_save sys/sys/stacktrace.h:37 [inline]
#0 witness_lock+0x632 sys/kern/subr_witness.c:1160
#1 rw_do_enter_write+0x53e sys/kern/kern_rwlock.c:320
#2 rrw_enter+0xf0 sys/kern/kern_rwlock.c:621
#3 VOP_LOCK+0x17e sys/kern/vfs_vops.c:527
#4 vn_lock+0xca sys/kern/vfs_vnops.c:576
#5 vget+0x321 sys/kern/vfs_subr.c:699
#6 cache_lookup+0x579 sys/kern/vfs_cache.c:222
#7 ufs_lookup+0x3c0 sys/ufs/ufs/ufs_lookup.c:160
#8 VOP_LOOKUP+0xda sys/kern/vfs_vops.c:85
#9 vfs_lookup+0xfbd sys/kern/vfs_lookup.c:580
#10 namei+0xe19 sys/kern/vfs_lookup.c:250
#11 dounlinkat+0x102 sys/kern/vfs_syscalls.c:1807
#12 syscall+0x1089 mi_syscall sys/sys/syscall_mi.h:176 [inline]
#12 syscall+0x1089 sys/arch/amd64/amd64/trap.c:791
#13 Xsyscall+0x128
Process 75609 (systqmp) thread 0xffff800045ffea60 (287311)
shared rwlock systqmp r = 0 (0xffffffff852ff5b8)
#0 witness_lock+0x632 stacktrace_save sys/sys/stacktrace.h:37 [inline]
#0 witness_lock+0x632 sys/kern/subr_witness.c:1160
#1 taskq_thread+0x1ba sys/kern/kern_task.c:442
#2 proc_trampoline+0x10
ddb{1}> show malloc
Type InUse MemUse HighUse Limit Requests Type Lim
devbuf 11063 12249K 12394K 166960K 12205 0
pcb 20 24K 25K 166960K 38 0
rtable 244 17K 30K 166960K 432 0
pf 46 32K 32K 166960K 75 0
ifaddr 46 13K 14K 166960K 61 0
ifgroup 59 2K 2K 166960K 76 0
sysctl 2 1K 13K 166960K 8 0
counters 72 43K 43K 166960K 80 0
ioctlops 71 75K 194K 166960K 1643 0
iov 0 0K 8K 166960K 1 0
mount 1 1K 1K 166960K 1 0
log 0 0K 0K 166960K 4 0
vnodes 1326 85K 87K 166960K 1470 0
UFS quota 1 36K 36K 166960K 1 0
UFS mount 5 44K 44K 166960K 5 0
shm 2 2K 6K 166960K 4 0
VM map 2 1K 1K 166960K 2 0
sem 6 0K 0K 166960K 9 0
dirhash 12 2K 2K 166960K 12 0
ACPI 1692 195K 405K 166960K 12470 0
file desc 23 75K 121K 166960K 279 0
proc 135 131K 166K 166960K 670 0
subproc 90 11K 12K 166960K 108 0
NFS srvsock 1 0K 0K 166960K 1 0
NFS daemon 1 20K 20K 166960K 1 0
ip_moptions 0 0K 0K 166960K 6 0
in_multi 99 7K 8K 166960K 132 0
ether_multi 1 0K 0K 166960K 1 0
mrt 2 0K 0K 166960K 8 0
ISOFS mount 1 36K 36K 166960K 1 0
MSDOSFS mount 1 20K 20K 166960K 1 0
ttys 67 465K 465K 166960K 67 0
exec 31 7K 17K 166960K 431 0
fusefs mount 1 36K 36K 166960K 1 0
tdb 3 1K 1K 166960K 3 0
VM swap 14 124K 124K 166960K 15 0
UVM amap 545 290K 370K 166960K 4184 0
UVM aobj 5 4K 4K 166960K 6 0
pinsyscall 152 268K 364K 166960K 1522 0
memdesc 1 4K 4K 166960K 1 0
crypto data 1 1K 1K 166960K 1 0
ip6_options 0 0K 0K 166960K 8 0
NDP 17 0K 2K 166960K 39 0
temp 337 9317K 9451K 166960K 4617 0
kqueue 19 58K 86K 166960K 47 0
SYN cache 2 16K 16K 166960K 2 0
ddb{1}> show all pools
Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle
plcache 128 28 0 0 1 0 1 1 0 8 0
rtpcb 120 38 0 35 1 0 1 1 0 8 0
rtentry 176 145 0 45 5 0 5 5 0 8 0
unpcb 144 95 0 77 2 0 2 2 0 8 1
syncache 336 4 0 4 2 2 0 1 0 8 0
tcpcb 736 13 0 9 1 0 1 1 0 8 0
arp 136 24 0 8 1 0 1 1 0 8 0
inpcb 328 144 0 136 2 0 2 2 0 8 1
nd6 152 34 0 12 1 0 1 1 0 8 0
kcovpl 48 12 0 4 1 0 1 1 0 8 0
pfosfp 40 1428 0 1428 5 0 5 5 0 8 5
pfosfpen 112 1428 0 1428 21 0 21 21 0 8 21
pfrktable 1344 1 1 1 1 0 1 1 0 8 1
pfanchor 1288 1 0 1 1 0 1 1 0 8 1
pfstitem 24 33 0 0 1 0 1 1 0 8 0
pfstkey 128 33 0 0 2 0 2 2 0 8 0
pfstate 448 33 0 0 4 0 4 4 0 8 0
pfrule 1360 22 0 16 2 1 1 2 0 8 0
art_heap8 4096 1 0 0 1 0 1 1 0 8 0
art_heap4 256 590 0 176 29 0 29 29 0 8 2
art_table 40 591 0 176 5 0 5 5 0 8 0
art_node 32 145 0 53 1 0 1 1 0 8 0
sysvmsgpl 40 2 0 1 1 0 1 1 0 8 0
semapl 72 5 0 1 1 0 1 1 0 8 0
shmpl 112 3 0 1 1 0 1 1 0 8 0
dirhash 1024 17 0 0 3 0 3 3 0 8 0
dino2pl 256 1729 0 256 93 0 93 93 0 8 0
ffsino 296 1729 0 256 114 0 114 114 0 8 0
nchpl 144 2050 0 336 64 0 64 64 0 8 0
vnodes 216 1893 0 0 106 0 106 106 0 8 0
namei 1024 7601 0 7601 4 1 3 3 0 8 3
percpumem 16 56 0 5 1 0 1 1 0 8 0
pfiaddrpl 120 1 0 0 1 0 1 1 0 8 0
kstatmem 264 37 0 10 2 0 2 2 0 8 0
scxspl 216 7573 0 7572 6 3 3 3 1 8 2
plimitpl 152 40 0 21 1 0 1 1 0 8 0
sigapl 424 588 0 539 7 0 7 7 0 8 1
knotepl 120 139 0 0 5 0 5 5 0 8 0
kqueuepl 224 93 0 81 3 0 3 3 0 8 2
pipepl 344 157 0 130 3 0 3 3 0 8 0
fdescpl 528 572 0 539 3 0 3 3 0 8 0
filepl 160 2393 0 2172 11 0 11 11 0 8 1
lockfpl 104 19 0 17 1 0 1 1 0 8 0
lockfspl 48 10 0 8 1 0 1 1 0 8 0
sessionpl 144 31 0 22 1 0 1 1 0 8 0
pgrppl 48 43 0 26 1 0 1 1 0 8 0
ucredpl 104 181 0 168 1 0 1 1 0 8 0
zombiepl 144 541 0 539 1 0 1 1 0 8 0
processpl 1232 588 0 539 5 0 5 5 0 8 1
procpl 664 738 0 685 6 0 6 6 0 8 1
sosppl 176 3 0 3 1 0 1 1 0 8 1
sockpl 752 280 0 251 5 0 5 5 0 8 1
mcl64k 65536 1 0 0 1 0 1 1 0 8 0
mcl8k 8192 2 0 0 1 0 1 1 0 8 0
mcl4k 4096 136 0 0 17 0 17 17 0 8 0
mcl2k 2048 21 0 0 3 0 3 3 0 8 0
mextrefs 64 21 0 0 1 0 1 1 0 8 0
mtagpl 96 4 0 0 1 0 1 1 0 8 0
mbufpl 256 216 0 0 13 0 13 13 0 8 0
bufpl 272 2557 0 108 164 0 164 164 0 8 0
anonpl 32 5438 0 0 45 1 44 45 0 222 0
amapchunkpl 152 11418 0 10963 24 0 24 24 0 158 4
amappl16 200 832 0 788 5 2 3 3 0 8 0
amappl15 192 11 0 9 1 0 1 1 0 8 0
amappl14 184 470 0 466 1 0 1 1 0 8 0
amappl13 176 125 0 113 1 0 1 1 0 8 0
amappl12 168 832 0 802 2 0 2 2 0 8 0
amappl11 160 13 0 13 2 2 0 1 0 8 0
amappl10 152 79 0 65 1 0 1 1 0 8 0
amappl9 144 274 0 274 1 1 0 1 0 8 0
amappl8 136 135 0 134 1 0 1 1 0 8 0
amappl7 128 152 0 139 1 0 1 1 0 8 0
amappl6 120 187 0 183 1 0 1 1 0 8 0
amappl5 112 94 0 84 1 0 1 1 0 8 0
amappl4 104 326 0 304 1 0 1 1 0 8 0
amappl3 96 2108 0 2017 4 1 3 3 0 8 0
amappl2 88 679 0 601 2 0 2 2 0 8 0
amappl1 80 11299 0 10688 15 0 15 15 0 8 2
amappl 88 3400 0 3248 5 0 5 5 0 92 1
uvmvnodes 80 102 0 0 3 0 3 3 0 8 0
dma4096 4096 1 0 1 1 1 0 1 0 8 0
dma1024 1024 1 0 0 1 0 1 1 0 8 0
dma256 256 6 0 6 1 1 0 1 0 8 0
dma128 128 253 0 253 1 1 0 1 0 8 0
dma64 64 6 0 6 1 1 0 1 0 8 0
dma32 32 7 0 7 1 1 0 1 0 8 0
dma16 16 18 0 17 1 0 1 1 0 8 0
aobjpl 72 5 0 1 1 0 1 1 0 8 0
uaddrrnd 24 572 0 539 1 0 1 1 0 8 0
uaddrbest 32 2 0 0 1 0 1 1 0 8 0
uaddr 24 572 0 539 1 0 1 1 0 8 0
vmmpekpl 168 6698 0 6660 3 0 3 3 0 8 0
vmmpepl 168 44787 0 42864 88 0 88 88 0 357 1
vmsppl 488 571 0 539 5 0 5 5 0 8 0
rwobjpl 80 15208 0 14140 24 0 24 24 0 8 1
pdppl 4096 1152 0 1078 106 30 76 88 0 8 2
pvpl 32 12075 0 0 99 1 98 99 0 265 0
pmappl 256 571 0 539 3 0 3 3 0 8 0
extentpl 40 46 0 28 1 0 1 1 0 8 0
phpool 120 450 0 36 13 0 13 13 0 8 0
ddb{1}> machine ddbcpu 0
Stopped at x86_ipi_db+0x19: leave
x86_ipi_db(ffffffff85416ff0) at x86_ipi_db+0x19 sys/arch/amd64/amd64/db_interface.c:412
x86_ipi_handler() at x86_ipi_handler+0x112 sys/arch/amd64/amd64/ipi.c:106
Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27
__sanitizer_cov_trace_pc() at __sanitizer_cov_trace_pc+0x8 kd_curproc sys/dev/kcov.c:580 [inline]
__sanitizer_cov_trace_pc() at __sanitizer_cov_trace_pc+0x8 sys/dev/kcov.c:153
__mp_lock(ffffffff85deecc0) at __mp_lock+0x290 __mp_lock_spin sys/kern/kern_lock.c:142 [inline]
__mp_lock(ffffffff85deecc0) at __mp_lock+0x290 sys/kern/kern_lock.c:173
intr_handler(ffff8000353028d0,ffff800000162080) at intr_handler+0x113 sys/arch/amd64/amd64/intr.c:560
Xintr_ioapic_edge23_untramp() at Xintr_ioapic_edge23_untramp+0x18f
__asan_load8_noabort(ffff800035302b88) at __asan_load8_noabort+0x89 kasan_shadow_8byte_isvalid sys/kern/kasan_shadow.h:146 [inline]
__asan_load8_noabort(ffff800035302b88) at __asan_load8_noabort+0x89 kasan_shadow_check sys/kern/subr_kasan.c:991 [inline]
__asan_load8_noabort(ffff800035302b88) at __asan_load8_noabort+0x89 sys/kern/subr_kasan.c:1099
uvmfault_promote(ffff800035302b60,ffffffffffffffff,ffff800035302a48,ffff800035302a50) at uvmfault_promote+0x3e sys/uvm/uvm_fault.c:450
uvm_fault_lower(ffff800035302b60,ffff800035302b08,ffff800035302c60) at uvm_fault_lower+0x6cf sys/uvm/uvm_fault.c:1427
uvm_fault(ffff800001ba93e8,2f0d34a3000,0,2) at uvm_fault+0x3ef sys/uvm/uvm_fault.c:657
upageflttrap(ffff800035302e50,2f0d34a3cf0) at upageflttrap+0xe0 sys/arch/amd64/amd64/trap.c:194
usertrap(ffff800035302e50) at usertrap+0x4f9 sys/arch/amd64/amd64/trap.c:648
recall_trap() at recall_trap+0x8
end of kernel
end trace frame: 0x7ce51259a0e0, count: 1
ddb{0}> trace
x86_ipi_db(ffffffff85416ff0) at x86_ipi_db+0x19 sys/arch/amd64/amd64/db_interface.c:412
x86_ipi_handler() at x86_ipi_handler+0x112 sys/arch/amd64/amd64/ipi.c:106
Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27
__sanitizer_cov_trace_pc() at __sanitizer_cov_trace_pc+0x8 kd_curproc sys/dev/kcov.c:580 [inline]
__sanitizer_cov_trace_pc() at __sanitizer_cov_trace_pc+0x8 sys/dev/kcov.c:153
__mp_lock(ffffffff85deecc0) at __mp_lock+0x290 __mp_lock_spin sys/kern/kern_lock.c:142 [inline]
__mp_lock(ffffffff85deecc0) at __mp_lock+0x290 sys/kern/kern_lock.c:173
intr_handler(ffff8000353028d0,ffff800000162080) at intr_handler+0x113 sys/arch/amd64/amd64/intr.c:560
Xintr_ioapic_edge23_untramp() at Xintr_ioapic_edge23_untramp+0x18f
__asan_load8_noabort(ffff800035302b88) at __asan_load8_noabort+0x89 kasan_shadow_8byte_isvalid sys/kern/kasan_shadow.h:146 [inline]
__asan_load8_noabort(ffff800035302b88) at __asan_load8_noabort+0x89 kasan_shadow_check sys/kern/subr_kasan.c:991 [inline]
__asan_load8_noabort(ffff800035302b88) at __asan_load8_noabort+0x89 sys/kern/subr_kasan.c:1099
uvmfault_promote(ffff800035302b60,ffffffffffffffff,ffff800035302a48,ffff800035302a50) at uvmfault_promote+0x3e sys/uvm/uvm_fault.c:450
uvm_fault_lower(ffff800035302b60,ffff800035302b08,ffff800035302c60) at uvm_fault_lower+0x6cf sys/uvm/uvm_fault.c:1427
uvm_fault(ffff800001ba93e8,2f0d34a3000,0,2) at uvm_fault+0x3ef sys/uvm/uvm_fault.c:657
upageflttrap(ffff800035302e50,2f0d34a3cf0) at upageflttrap+0xe0 sys/arch/amd64/amd64/trap.c:194
usertrap(ffff800035302e50) at usertrap+0x4f9 sys/arch/amd64/amd64/trap.c:648
recall_trap() at recall_trap+0x8
end of kernel
end trace frame: 0x7ce51259a0e0, count: -14
ddb{0}> machine ddbcpu 1
Stopped at db_enter+0x17: popq %rbp
db_enter() at db_enter+0x17 sys/arch/amd64/amd64/db_interface.c:457
panic(ffffffff846431fb) at panic+0x270 sys/kern/subr_prf.c:198
__asan_load8_noabort(ffff800001d17730) at __asan_load8_noabort+0xde kasan_shadow_check sys/kern/subr_kasan.c:-1 [inline]
__asan_load8_noabort(ffff800001d17730) at __asan_load8_noabort+0xde sys/kern/subr_kasan.c:1099
pf_remove_if_empty_ruleset(ffff800001d176e0) at pf_remove_if_empty_ruleset+0x5c sys/net/pf_ruleset.c:292
pfi_dynaddr_setup(ffff8000017fa360,0,1) at pfi_dynaddr_setup+0x837 sys/net/pf_if.c:508
pf_addr_setup(ffffffff85e43b10,ffff8000017fa360,0) at pf_addr_setup+0x3a sys/net/pf_ioctl.c:948
pfioctl(14900,cd604404,ffff800001aa9000,2,ffff800029a39cb0) at pfioctl+0xeac2 sys/net/pf_ioctl.c:2390
VOP_IOCTL(ffff800001d03b38,cd604404,ffff800001aa9000,2,ffff800000118478,ffff800029a39cb0) at VOP_IOCTL+0x131 sys/kern/vfs_vops.c:264
vn_ioctl(ffff800001b4f338,cd604404,ffff800001aa9000,ffff800029a39cb0) at vn_ioctl+0x18c sys/kern/vfs_vnops.c:537
sys_ioctl(ffff800029a39cb0,ffff80003130e500,ffff80003130e460) at sys_ioctl+0x868 sys/kern/sys_generic.c:510
syscall(ffff80003130e500) at syscall+0x1089 mi_syscall sys/sys/syscall_mi.h:176 [inline]
syscall(ffff80003130e500) at syscall+0x1089 sys/arch/amd64/amd64/trap.c:791
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x97230177f30, count: 3
ddb{1}> trace
db_enter() at db_enter+0x17 sys/arch/amd64/amd64/db_interface.c:457
panic(ffffffff846431fb) at panic+0x270 sys/kern/subr_prf.c:198
__asan_load8_noabort(ffff800001d17730) at __asan_load8_noabort+0xde kasan_shadow_check sys/kern/subr_kasan.c:-1 [inline]
__asan_load8_noabort(ffff800001d17730) at __asan_load8_noabort+0xde sys/kern/subr_kasan.c:1099
pf_remove_if_empty_ruleset(ffff800001d176e0) at pf_remove_if_empty_ruleset+0x5c sys/net/pf_ruleset.c:292
pfi_dynaddr_setup(ffff8000017fa360,0,1) at pfi_dynaddr_setup+0x837 sys/net/pf_if.c:508
pf_addr_setup(ffffffff85e43b10,ffff8000017fa360,0) at pf_addr_setup+0x3a sys/net/pf_ioctl.c:948
pfioctl(14900,cd604404,ffff800001aa9000,2,ffff800029a39cb0) at pfioctl+0xeac2 sys/net/pf_ioctl.c:2390
VOP_IOCTL(ffff800001d03b38,cd604404,ffff800001aa9000,2,ffff800000118478,ffff800029a39cb0) at VOP_IOCTL+0x131 sys/kern/vfs_vops.c:264
vn_ioctl(ffff800001b4f338,cd604404,ffff800001aa9000,ffff800029a39cb0) at vn_ioctl+0x18c sys/kern/vfs_vnops.c:537
sys_ioctl(ffff800029a39cb0,ffff80003130e500,ffff80003130e460) at sys_ioctl+0x868 sys/kern/sys_generic.c:510
syscall(ffff80003130e500) at syscall+0x1089 mi_syscall sys/sys/syscall_mi.h:176 [inline]
syscall(ffff80003130e500) at syscall+0x1089 sys/arch/amd64/amd64/trap.c:791
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x97230177f30, count: -12