panic: unhandled af 95 Stopped at db_enter+0x18: addq $0x8,%rsp TID PID UID PRFLAGS PFLAGS CPU COMMAND *123000 43961 0 0 0x4000000 0 syz-executor.0 db_enter() at db_enter+0x18 sys/arch/amd64/amd64/db_interface.c:398 panic(ffffffff821b73a4) at panic+0x15c sys/kern/subr_prf.c:207 unhandled_af(5f) at unhandled_af+0x16 pf_addrcpy(ffff80001d41fac8,ffff80001d41fdc0,5f) at pf_addrcpy+0x99 sys/net/pf.c:409 pfioctl(4900,c0504417,ffff80001d41fdc0,9,ffff8000ffff2018) at pfioctl+0x43c0 sys/net/pf_ioctl.c:1827 VOP_IOCTL(fffffd8069a2e750,c0504417,ffff80001d41fdc0,9,fffffd806c3beba0,ffff8000ffff2018) at VOP_IOCTL+0x88 sys/kern/vfs_vops.c:291 vn_ioctl(fffffd805795ddb0,c0504417,ffff80001d41fdc0,ffff8000ffff2018) at vn_ioctl+0xb7 sys/kern/vfs_vnops.c:533 sys_ioctl(ffff8000ffff2018,ffff80001d41fed8,ffff80001d41ff20) at sys_ioctl+0x5b9 syscall(ffff80001d41ffa0) at syscall+0x507 sys/arch/amd64/amd64/trap.c:555 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xeb1dacec4a0, count: 5 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb> ddb> set $lines = 0 ddb> set $maxwidth = 0 ddb> show panic unhandled af 95 ddb> trace db_enter() at db_enter+0x18 sys/arch/amd64/amd64/db_interface.c:398 panic(ffffffff821b73a4) at panic+0x15c sys/kern/subr_prf.c:207 unhandled_af(5f) at unhandled_af+0x16 pf_addrcpy(ffff80001d41fac8,ffff80001d41fdc0,5f) at pf_addrcpy+0x99 sys/net/pf.c:409 pfioctl(4900,c0504417,ffff80001d41fdc0,9,ffff8000ffff2018) at pfioctl+0x43c0 sys/net/pf_ioctl.c:1827 VOP_IOCTL(fffffd8069a2e750,c0504417,ffff80001d41fdc0,9,fffffd806c3beba0,ffff8000ffff2018) at VOP_IOCTL+0x88 sys/kern/vfs_vops.c:291 vn_ioctl(fffffd805795ddb0,c0504417,ffff80001d41fdc0,ffff8000ffff2018) at vn_ioctl+0xb7 sys/kern/vfs_vnops.c:533 sys_ioctl(ffff8000ffff2018,ffff80001d41fed8,ffff80001d41ff20) at sys_ioctl+0x5b9 syscall(ffff80001d41ffa0) at syscall+0x507 sys/arch/amd64/amd64/trap.c:555 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xeb1dacec4a0, count: -10 ddb> show registers rdi 0xffffffff811c6087 db_enter+0x17 rsi 0xbc9 rbp 0xffff80001d41f980 rbx 0xffff80001d41fa30 rdx 0xbca rcx 0xffff80001fe55000 rax 0xffff80001fe55000 r8 0xffff80001d41f940 r9 0x1 r10 0xffff800000a40dc0 r11 0x2ff9c5854842e407 r12 0x3000000008 r13 0xffff80001d41f990 r14 0x100 r15 0x1 rip 0xffffffff811c6088 db_enter+0x18 cs 0x8 rflags 0x246 rsp 0xffff80001d41f970 ss 0x10 db_enter+0x18: addq $0x8,%rsp ddb> show proc PROC (syz-executor.0) pid=123000 stat=onproc flags process=0 proc=4000000 pri=81, usrpri=81, nice=20 forw=0xffffffffffffffff, list=0xffff8000ffff2290,0xffffffff82542b50 process=0xffff8000ffff6a48 user=0xffff80001d41b000, vmspace=0xfffffd806bc09550 estcpu=36, cpticks=1, pctcpu=0.0 user=0, sys=1, intr=0 ddb> ps PID TID PPID UID S FLAGS WAIT COMMAND 43961 462143 55665 0 2 0 syz-executor.0 *43961 123000 55665 0 7 0x4000000 syz-executor.0 53106 333479 34419 0 2 0x2 syz-executor.1 55665 382115 34419 0 3 0x82 nanosleep syz-executor.0 52464 250622 0 0 3 0x14200 bored sosplice 34419 186327 3501 0 3 0x82 thrsleep syz-fuzzer 34419 450230 3501 0 3 0x4000082 nanosleep syz-fuzzer 34419 490374 3501 0 3 0x4000082 thrsleep syz-fuzzer 34419 134844 3501 0 3 0x4000082 thrsleep syz-fuzzer 34419 179179 3501 0 3 0x4000082 thrsleep syz-fuzzer 34419 455733 3501 0 3 0x4000082 kqread syz-fuzzer 34419 3370 3501 0 3 0x4000082 thrsleep syz-fuzzer 34419 370218 3501 0 3 0x4000082 thrsleep syz-fuzzer 3501 482216 4827 0 3 0x10008a pause ksh 4827 7026 8782 0 3 0x92 select sshd 75005 493026 1 0 3 0x100083 ttyin getty 8782 194288 1 0 3 0x80 select sshd 84824 353284 23015 73 3 0x100090 kqread syslogd 23015 177370 1 0 3 0x100082 netio syslogd 87400 514987 1 77 3 0x100090 poll dhclient 31460 299884 1 0 3 0x80 poll dhclient 26088 340558 0 0 2 0x14200 zerothread 84945 39706 0 0 3 0x14200 aiodoned aiodoned 71434 284004 0 0 3 0x14200 syncer update 55197 432406 0 0 3 0x14200 cleaner cleaner 12237 417603 0 0 3 0x14200 reaper reaper 30607 140676 0 0 3 0x14200 pgdaemon pagedaemon 60142 402849 0 0 3 0x14200 bored crynlk 32859 515767 0 0 3 0x14200 bored crypto 43250 10897 0 0 3 0x40014200 acpi0 acpi0 995 347845 0 0 3 0x14200 bored softnet 63301 101289 0 0 3 0x14200 bored systqmp 26237 146916 0 0 3 0x14200 bored systq 48879 325824 0 0 3 0x40014200 bored softclock 44420 400150 0 0 3 0x40014200 idle0 50442 209305 0 0 3 0x14200 bored smr 1 325317 0 0 3 0x82 wait init 0 0 -1 0 3 0x10200 scheduler swapper ddb> show all locks No such command ddb> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 9456 6340K 14602K 78643K 61263 0 pcb 13 10K 11K 78643K 7350 0 rtable 109 3K 4K 78643K 13865 0 ifaddr 39 10K 10K 78643K 177 0 counters 19 16K 16K 78643K 19 0 ioctlops 0 0K 4K 78643K 5511 0 iov 0 0K 16K 78643K 941 0 mount 1 1K 1K 78643K 1 0 vnodes 1235 78K 78K 78643K 25982 0 UFS quota 1 32K 32K 78643K 1 0 UFS mount 5 36K 36K 78643K 5 0 shm 2 1K 9K 78643K 432 0 VM map 2 0K 0K 78643K 2 0 sem 12 0K 0K 78643K 987 0 dirhash 12 2K 2K 78643K 12 0 ACPI 1794 195K 288K 78643K 12646 0 file desc 5 13K 25K 78643K 59839 0 sigio 0 0K 0K 78643K 1302 0 proc 48 38K 54K 78643K 1009 0 subproc 32 2K 2K 78643K 255 0 NFS srvsock 1 0K 0K 78643K 1 0 NFS daemon 1 16K 16K 78643K 1 0 ip_moptions 0 0K 0K 78643K 1721 0 in_multi 33 2K 2K 78643K 217 0 ether_multi 1 0K 0K 78643K 315 0 mrt 0 0K 0K 78643K 622 0 ISOFS mount 1 32K 32K 78643K 1 0 MSDOSFS mount 1 16K 16K 78643K 1 0 ttys 61 281K 281K 78643K 61 0 exec 0 0K 1K 78643K 401 0 pagedep 1 8K 8K 78643K 1 0 inodedep 1 32K 32K 78643K 1 0 newblk 1 0K 0K 78643K 1 0 VM swap 7 26K 26K 78643K 7 0 UVM amap 188 41K 45K 78643K 123275 0 UVM aobj 130 6K 6K 78643K 130 0 memdesc 1 4K 4K 78643K 1 0 crypto data 1 1K 1K 78643K 1 0 ip6_options 0 0K 0K 78643K 571 0 NDP 5 0K 0K 78643K 48 0 temp 104 3017K 3087K 78643K 806623 0 kqueue 0 0K 0K 78643K 176 0 SYN cache 2 16K 16K 78643K 2 0 ddb> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle arp 64 33 0 27 1 0 1 1 0 8 0 rtpcb 80 211 0 209 1 0 1 1 0 8 0 rtentry 112 176 0 132 2 0 2 2 0 8 0 unpcb 120 35760 0 35752 22 21 1 3 0 8 0 syncache 264 4 0 4 1 1 0 1 0 8 0 sackhl 24 16 0 16 11 11 0 1 0 8 0 tcpcb 544 4517 0 4513 1 0 1 1 0 8 0 ipq 40 151 0 151 2 2 0 1 0 8 0 ipqe 40 6804 0 6804 2 2 0 1 0 8 0 inpcb 280 75878 0 75871 91 89 2 5 0 8 1 nd6 48 30 0 26 1 0 1 1 0 8 0 pkpcb 40 19 0 19 4 4 0 1 0 8 0 pfosfp 40 2 0 0 1 0 1 1 0 8 0 pfosfpen 112 3 0 0 1 0 1 1 0 8 0 pfrktable 1344 129 0 129 3 3 0 1 0 8 0 pfrule 1360 76 0 76 2 2 0 1 0 8 0 art_heap8 4096 1 0 0 1 0 1 1 0 8 0 art_heap4 256 774 0 559 14 0 14 14 0 8 0 art_table 32 775 0 559 2 0 2 2 0 8 0 art_node 16 175 0 135 1 0 1 1 0 8 0 semapl 112 985 0 975 1 0 1 1 0 8 0 shmpl 112 128 0 0 4 0 4 4 0 8 0 dirhash 1024 17 0 0 3 0 3 3 0 8 0 dino1pl 128 70006 0 68455 51 0 51 51 0 8 0 ffsino 240 70006 0 68455 92 0 92 92 0 8 0 nchpl 144 147016 0 145139 72 2 70 70 0 8 0 uvmvnodes 72 6209 0 0 113 0 113 113 0 8 0 vnodes 208 6209 0 0 327 0 327 327 0 8 0 namei 1024 395442 0 395441 1 0 1 1 0 8 0 vcpupl 1984 2 0 0 1 0 1 1 0 8 0 vmpool 528 2 0 0 1 0 1 1 0 8 0 pfiaddrpl 120 43 0 43 3 3 0 1 0 8 0 scxspl 192 399663 0 399663 1 0 1 1 0 8 1 plimitpl 152 285 0 278 1 0 1 1 0 8 0 sigapl 432 59971 0 59958 2 0 2 2 0 8 0 futexpl 56 638826 0 638826 1 0 1 1 0 8 1 knotepl 112 2026 0 2007 1 0 1 1 0 8 0 kqueuepl 104 5445 0 5443 1 0 1 1 0 8 0 pipepl 112 10878 0 10859 1 0 1 1 0 8 0 fdescpl 424 59972 0 59958 2 0 2 2 0 8 0 filepl 120 303712 0 303616 60 56 4 6 0 8 1 lockfpl 104 6595 0 6594 1 0 1 1 0 8 0 lockfspl 48 2743 0 2742 1 0 1 1 0 8 0 sessionpl 112 30 0 20 1 0 1 1 0 8 0 pgrppl 48 30 0 20 1 0 1 1 0 8 0 ucredpl 96 35258 0 35245 1 0 1 1 0 8 0 zombiepl 144 59958 0 59958 1 0 1 1 0 8 1 processpl 872 59987 0 59958 4 0 4 4 0 8 0 procpl 632 121303 0 121266 4 0 4 4 0 8 0 sosppl 128 15 0 15 2 2 0 1 0 8 0 sockpl 384 111868 0 111851 210 205 5 10 0 8 3 mcl64k 65536 383 0 383 35 34 1 1 0 8 1 mcl16k 16384 232 0 232 34 34 0 1 0 8 0 mcl12k 12288 621 0 621 67 66 1 1 0 8 1 mcl9k 9216 688 0 688 63 63 0 1 0 8 0 mcl8k 8192 711 0 711 67 67 0 1 0 8 0 mcl4k 4096 2374 0 2374 60 59 1 1 0 8 1 mcl2k2 2112 164 0 164 51 50 1 1 0 8 1 mcl2k 2048 90871 0 90830 35 29 6 10 0 8 0 mtagpl 80 902 0 890 19 18 1 10 0 8 0 mbufpl 256 530670 0 530556 134 125 9 67 0 8 0 bufpl 280 78420 0 72210 444 0 444 444 0 8 0 anonpl 16 3786625 0 3781553 77 46 31 52 0 107 0 amapchunkpl 152 196590 0 196495 37 31 6 18 0 158 0 amappl16 192 250363 0 249983 77 57 20 34 0 8 0 amappl15 184 822 0 818 1 0 1 1 0 8 0 amappl14 176 4033 0 4029 1 0 1 1 0 8 0 amappl13 168 10229 0 10229 2 2 0 1 0 8 0 amappl12 160 27113 0 27113 4 4 0 1 0 8 0 amappl11 152 1620 0 1609 1 0 1 1 0 8 0 amappl10 144 863 0 860 1 0 1 1 0 8 0 amappl9 136 14686 0 14683 1 0 1 1 0 8 0 amappl8 128 14868 0 14766 7 3 4 4 0 8 0 amappl7 120 1019 0 1005 1 0 1 1 0 8 0 amappl6 112 1566 0 1558 1 0 1 1 0 8 0 amappl5 104 27314 0 27304 1 0 1 1 0 8 0 amappl4 96 57744 0 57717 1 0 1 1 0 8 0 amappl3 88 17934 0 17925 1 0 1 1 0 8 0 amappl2 80 475898 0 475825 3 1 2 3 0 8 0 amappl1 72 975381 0 974961 26 16 10 20 0 8 0 amappl 80 121947 0 121909 1 0 1 1 0 84 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 253 0 253 1 1 0 1 0 8 0 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 64 129 0 0 3 0 3 3 0 8 0 uaddrrnd 24 59974 0 59958 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 59974 0 59958 1 0 1 1 0 8 0 vmmpekpl 168 294075 0 294054 2 0 2 2 0 8 0 vmmpepl 168 6596814 0 6595263 203 130 73 83 0 357 1 vmsppl 272 59973 0 59958 4 2 2 2 0 8 1 pdppl 4096 119954 0 119918 6 1 5 6 0 8 0 pvpl 32 10020628 0 10012475 236 149 87 134 0 265 0 pmappl 200 59973 0 59958 1 0 1 1 0 8 0 extentpl 40 46 0 29 1 0 1 1 0 8 0 phpool 112 491 0 355 6 0 6 6 0 8 0