uvm_fault(0xfffffd806bc0a770, 0x240010051, 0, 1) -> e kernel: page fault trap, code=0 Stopped at pfi_dynaddr_remove+0x4a: movq 0x58(%r15),%r12 ddb> ddb> set $lines = 0 ddb> set $maxwidth = 0 ddb> show panic kernel page fault uvm_fault(0xfffffd806bc0a770, 0x240010051, 0, 1) -> e pfi_dynaddr_remove(ffff800000bf7048) at pfi_dynaddr_remove+0x4a sys/net/pf_if.c:602 end trace frame: 0xffff80001d42e100, count: 0 ddb> trace pfi_dynaddr_remove(ffff800000bf7048) at pfi_dynaddr_remove+0x4a sys/net/pf_if.c:602 pf_rm_rule(0,ffff800000bf7010) at pf_rm_rule+0x3ae sys/net/pf_ioctl.c:303 pfioctl(4900,cd604404,ffff8000009f8000,2,ffff8000ffff2780) at pfioctl+0x3082 VOP_IOCTL(fffffd805d5fb8f0,cd604404,ffff8000009f8000,2,fffffd806c3be8a0,ffff8000ffff2780) at VOP_IOCTL+0x88 sys/kern/vfs_vops.c:291 vn_ioctl(fffffd8057d64178,cd604404,ffff8000009f8000,ffff8000ffff2780) at vn_ioctl+0xb7 sys/kern/vfs_vnops.c:533 sys_ioctl(ffff8000ffff2780,ffff80001d42e548,ffff80001d42e590) at sys_ioctl+0x5b9 syscall(ffff80001d42e610) at syscall+0x507 sys/arch/amd64/amd64/trap.c:555 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x52a1691a6f0, count: -8 ddb> show registers rdi 0x2 rsi 0x2 rbp 0xffff80001d42e0a0 rbx 0x2 rdx 0x25e rcx 0xffff80001f637000 rax 0xffff8000009f2c00 r8 0xf8 r9 0x5 r10 0xffff8000009f2c00 r11 0x74febe5fffa1d206 r12 0xffff800000bf7048 r13 0x10 r14 0xffff800000bf7048 r15 0x24000fff9 rip 0xffffffff8112b48a pfi_dynaddr_remove+0x4a cs 0x8 rflags 0x10206 __ALIGN_SIZE+0xf206 rsp 0xffff80001d42e070 ss 0x10 pfi_dynaddr_remove+0x4a: movq 0x58(%r15),%r12 ddb> show proc PROC (syz-executor.1) pid=26885 stat=onproc flags process=0 proc=4000000 pri=78, usrpri=78, nice=20 forw=0xffffffffffffffff, list=0xffff8000ffff2290,0xffff8000ffff3b50 process=0xffff8000ffff7480 user=0xffff80001d429000, vmspace=0xfffffd806bc0a770 estcpu=36, cpticks=1, pctcpu=0.0 user=0, sys=1, intr=0 ddb> ps PID TID PPID UID S FLAGS WAIT COMMAND 86441 86136 33029 0 2 0 syz-executor.0 86441 114290 33029 0 3 0x4000080 fsleep syz-executor.0 21801 478093 32357 0 2 0 syz-executor.1 *21801 26885 32357 0 7 0x4000000 syz-executor.1 97417 161971 0 0 3 0x14200 bored sosplice 33029 317730 29739 0 3 0x82 nanosleep syz-executor.0 32357 44750 29739 0 3 0x82 nanosleep syz-executor.1 29739 472784 88991 0 3 0x82 thrsleep syz-fuzzer 29739 231799 88991 0 3 0x4000082 thrsleep syz-fuzzer 29739 242774 88991 0 3 0x4000082 thrsleep syz-fuzzer 29739 254704 88991 0 3 0x4000082 thrsleep syz-fuzzer 29739 472297 88991 0 3 0x4000082 thrsleep syz-fuzzer 29739 220716 88991 0 3 0x4000082 kqread syz-fuzzer 29739 152171 88991 0 3 0x4000082 thrsleep syz-fuzzer 29739 352012 88991 0 3 0x4000082 thrsleep syz-fuzzer 88991 20727 29862 0 3 0x10008a pause ksh 29862 141068 66807 0 3 0x92 select sshd 15202 138671 1 0 3 0x100083 ttyin getty 66807 317249 1 0 3 0x80 select sshd 63346 493321 70017 73 2 0x100010 syslogd 70017 227805 1 0 3 0x100082 netio syslogd 22790 69943 1 77 3 0x100090 poll dhclient 24983 195954 1 0 3 0x80 poll dhclient 70233 477330 0 0 2 0x14200 zerothread 3288 182588 0 0 3 0x14200 aiodoned aiodoned 52755 107791 0 0 3 0x14200 syncer update 93998 158226 0 0 3 0x14200 cleaner cleaner 85081 284362 0 0 3 0x14200 reaper reaper 83945 156663 0 0 3 0x14200 pgdaemon pagedaemon 20780 101190 0 0 3 0x14200 bored crynlk 48430 236152 0 0 3 0x14200 bored crypto 19941 466544 0 0 3 0x40014200 acpi0 acpi0 92768 397269 0 0 3 0x14200 bored softnet 54917 421487 0 0 3 0x14200 bored systqmp 75385 161383 0 0 3 0x14200 bored systq 81553 101290 0 0 3 0x40014200 bored softclock 70337 373318 0 0 3 0x40014200 idle0 92260 495092 0 0 3 0x14200 bored smr 1 111917 0 0 3 0x82 wait init 0 0 -1 0 3 0x10200 scheduler swapper ddb> show all locks No such command ddb> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 9449 6339K 6348K 78643K 18085 0 pcb 13 8K 8K 78643K 1604 0 rtable 150 12K 12K 78643K 3573 0 ifaddr 61 15K 15K 78643K 564 0 counters 19 16K 16K 78643K 19 0 ioctlops 1 4K 4K 78643K 7983 0 iov 0 0K 32K 78643K 1237 0 mount 1 1K 1K 78643K 1 0 vnodes 1215 76K 77K 78643K 7165 0 UFS quota 1 32K 32K 78643K 1 0 UFS mount 5 36K 36K 78643K 5 0 shm 2 1K 9K 78643K 974 0 VM map 2 0K 0K 78643K 2 0 sem 12 0K 1K 78643K 454 0 dirhash 12 2K 2K 78643K 12 0 ACPI 1794 195K 288K 78643K 12646 0 file desc 6 17K 25K 78643K 26782 0 sigio 0 0K 0K 78643K 265 0 proc 704 79K 79K 78643K 1015 0 subproc 32 2K 2K 78643K 34 0 NFS srvsock 1 0K 0K 78643K 1 0 NFS daemon 1 16K 16K 78643K 1 0 in_multi 33 2K 2K 78643K 33 0 ether_multi 1 0K 0K 78643K 1 0 ISOFS mount 1 32K 32K 78643K 1 0 MSDOSFS mount 1 16K 16K 78643K 1 0 ttys 19 95K 95K 78643K 19 0 exec 0 0K 1K 78643K 181 0 pagedep 1 8K 8K 78643K 1 0 inodedep 1 32K 32K 78643K 1 0 newblk 1 0K 0K 78643K 1 0 VM swap 7 26K 26K 78643K 7 0 UVM amap 126 22K 22K 78643K 55898 0 UVM aobj 130 4K 4K 78643K 540 0 memdesc 1 4K 4K 78643K 1 0 crypto data 1 1K 1K 78643K 1 0 NDP 5 0K 0K 78643K 9 0 temp 114 3038K 3104K 78643K 62741 0 kqueue 0 0K 0K 78643K 38 0 SYN cache 2 16K 16K 78643K 2 0 ddb> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle arp 64 8 0 1 1 0 1 1 0 8 0 rtpcb 80 1374 0 1372 1 0 1 1 0 8 0 rtentry 112 47 0 2 2 0 2 2 0 8 0 unpcb 120 86534 0 86522 53 51 2 4 0 8 1 syncache 264 4 0 4 1 1 0 1 0 8 0 sackhl 24 7 0 7 5 5 0 1 0 8 0 tcpcb 544 81 0 77 1 0 1 1 0 8 0 inpcb 280 4323 0 4312 3 2 1 2 0 8 0 nd6 48 4 0 0 1 0 1 1 0 8 0 pfosfp 40 1 0 0 1 0 1 1 0 8 0 pfosfpen 112 3 0 0 1 0 1 1 0 8 0 pfrktable 1344 1420 0 1403 5 3 2 2 0 8 0 pftag 88 6 0 6 1 1 0 1 0 8 0 pfstitem 24 2 0 0 1 0 1 1 0 8 0 pfstkey 112 10 0 8 1 0 1 1 0 8 0 pfstate 328 5 0 4 1 0 1 1 0 8 0 pfrule 1360 2190 0 795 117 0 117 117 0 8 0 art_heap8 4096 1 0 0 1 0 1 1 0 8 0 art_heap4 256 212 0 0 14 0 14 14 0 8 0 art_table 32 213 0 0 2 0 2 2 0 8 0 art_node 16 46 0 5 1 0 1 1 0 8 0 sysvmsgpl 40 38 0 0 1 0 1 1 0 8 0 semapl 112 452 0 442 1 0 1 1 0 8 0 shmpl 112 538 0 410 4 0 4 4 0 8 0 dirhash 1024 17 0 0 3 0 3 3 0 8 0 dino1pl 128 41867 0 40468 46 0 46 46 0 8 0 ffsino 240 41867 0 40468 83 0 83 83 0 8 0 nchpl 144 76375 0 74715 63 1 62 62 0 8 0 uvmvnodes 72 5926 0 0 108 0 108 108 0 8 0 vnodes 208 5926 0 0 312 0 312 312 0 8 0 namei 1024 193448 0 193448 1 0 1 1 0 8 1 pfiaddrpl 120 705 0 652 5 3 2 2 0 8 0 scxspl 192 204514 0 204514 1 0 1 1 0 8 1 plimitpl 152 89 0 82 1 0 1 1 0 8 0 sigapl 432 26953 0 26939 2 0 2 2 0 8 0 futexpl 56 309082 0 309081 1 0 1 1 0 8 0 knotepl 112 516 0 497 2 1 1 2 0 8 0 kqueuepl 104 6789 0 6784 1 0 1 1 0 8 0 pipepl 112 13342 0 13323 11 10 1 2 0 8 0 fdescpl 424 26954 0 26939 2 0 2 2 0 8 0 filepl 120 178236 0 178124 50 45 5 7 0 8 1 lockfpl 104 3487 0 3486 1 0 1 1 0 8 0 lockfspl 48 1389 0 1388 1 0 1 1 0 8 0 sessionpl 112 17 0 7 1 0 1 1 0 8 0 pgrppl 48 862 0 852 1 0 1 1 0 8 0 ucredpl 96 5997 0 5990 1 0 1 1 0 8 0 zombiepl 144 26939 0 26939 1 0 1 1 0 8 1 processpl 872 26969 0 26939 4 0 4 4 0 8 0 procpl 632 55108 0 55069 4 0 4 4 0 8 0 sosppl 128 212 0 212 8 8 0 1 0 8 0 sockpl 384 92312 0 92291 171 165 6 11 0 8 3 mcl64k 65536 65 0 65 10 9 1 1 0 8 1 mcl16k 16384 61 0 61 25 25 0 1 0 8 0 mcl12k 12288 234 0 234 31 31 0 1 0 8 0 mcl9k 9216 67 0 67 17 17 0 1 0 8 0 mcl8k 8192 317 0 317 31 30 1 1 0 8 1 mcl4k 4096 1533 0 1533 37 36 1 1 0 8 1 mcl2k2 2112 110 0 110 38 37 1 1 0 8 1 mcl2k 2048 53256 0 53223 23 18 5 9 0 8 0 mtagpl 80 2 0 2 1 1 0 1 0 8 0 mbufpl 256 279807 0 279604 69 54 15 17 0 8 1 bufpl 280 33191 0 27007 442 0 442 442 0 8 0 anonpl 16 1530856 0 1526174 42 21 21 34 0 107 0 amapchunkpl 152 84066 0 83980 9 5 4 7 0 158 0 amappl16 192 109905 0 109689 63 52 11 23 0 8 0 amappl15 184 53 0 48 1 0 1 1 0 8 0 amappl14 176 26 0 24 1 0 1 1 0 8 0 amappl13 168 13215 0 13213 2 1 1 1 0 8 0 amappl12 160 16 0 15 2 1 1 1 0 8 0 amappl11 152 52 0 41 1 0 1 1 0 8 0 amappl10 144 13552 0 13547 1 0 1 1 0 8 0 amappl9 136 561 0 558 1 0 1 1 0 8 0 amappl8 128 407 0 357 2 0 2 2 0 8 0 amappl7 120 13615 0 13604 1 0 1 1 0 8 0 amappl6 112 52 0 48 1 0 1 1 0 8 0 amappl5 104 202 0 192 1 0 1 1 0 8 0 amappl4 96 27300 0 27270 1 0 1 1 0 8 0 amappl3 88 446 0 437 1 0 1 1 0 8 0 amappl2 80 228203 0 228123 3 1 2 3 0 8 0 amappl1 72 442206 0 441771 26 17 9 20 0 8 0 amappl 80 55302 0 55267 1 0 1 1 0 84 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 253 0 253 1 1 0 1 0 8 0 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 64 539 0 410 3 0 3 3 0 8 0 uaddrrnd 24 26954 0 26939 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 26954 0 26939 1 0 1 1 0 8 0 vmmpekpl 168 141419 0 141399 2 0 2 2 0 8 0 vmmpepl 168 2963754 0 2962320 120 56 64 78 0 357 1 vmsppl 272 26953 0 26939 2 1 1 2 0 8 0 pdppl 4096 53914 0 53878 6 1 5 6 0 8 0 pvpl 32 4506374 0 4498251 284 213 71 115 0 265 5 pmappl 200 26953 0 26939 1 0 1 1 0 8 0 extentpl 40 46 0 29 1 0 1 1 0 8 0 phpool 112 425 0 176 9 1 8 8 0 8 0