panic: kernel diagnostic assertion "(rule != NULL) && (rule->ruleset != NULL)" failed: file "/syzkaller/managers/multicore/kernel/sys/net/pf_ioctl.c", line 330 Stopped at db_enter+0x18: addq $0x8,%rsp TID PID UID PRFLAGS PFLAGS CPU COMMAND 387574 67139 0 0x14000 0x200 0 zerothread *362448 62807 0 0x14000 0x200 1 systq db_enter() at db_enter+0x18 sys/arch/amd64/amd64/db_interface.c:440 panic(ffffffff82454e65) at panic+0x177 sys/kern/subr_prf.c:202 __assert(ffffffff824c2ed5,ffffffff824fd8fe,14a,ffffffff82489b4f) at __assert+0x25 sys/kern/subr_prf.c:161 pf_purge_rule(ffff800000cf7a98) at pf_purge_rule+0x1ab sys/net/pf_ioctl.c:330 pf_purge_expired_rules() at pf_purge_expired_rules+0xbc sys/net/pf.c:1275 pf_purge(ffffffff829c5840) at pf_purge+0xe0 sys/net/pf.c:1312 taskq_thread(ffffffff8282e760) at taskq_thread+0xe5 sys/kern/kern_task.c:449 end trace frame: 0x0, count: 8 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb{1}> ddb{1}> set $lines = 0 ddb{1}> set $maxwidth = 0 ddb{1}> show panic *cpu1: kernel diagnostic assertion "(rule != NULL) && (rule->ruleset != NULL)" failed: file "/syzkaller/managers/multicore/kernel/sys/net/pf_ioctl.c", line 330 ddb{1}> trace db_enter() at db_enter+0x18 sys/arch/amd64/amd64/db_interface.c:440 panic(ffffffff82454e65) at panic+0x177 sys/kern/subr_prf.c:202 __assert(ffffffff824c2ed5,ffffffff824fd8fe,14a,ffffffff82489b4f) at __assert+0x25 sys/kern/subr_prf.c:161 pf_purge_rule(ffff800000cf7a98) at pf_purge_rule+0x1ab sys/net/pf_ioctl.c:330 pf_purge_expired_rules() at pf_purge_expired_rules+0xbc sys/net/pf.c:1275 pf_purge(ffffffff829c5840) at pf_purge+0xe0 sys/net/pf.c:1312 taskq_thread(ffffffff8282e760) at taskq_thread+0xe5 sys/kern/kern_task.c:449 end trace frame: 0x0, count: -7 ddb{1}> show registers rdi 0 rsi 0x1 rbp 0xffff80002115ad50 rbx 0xffff800020d39bff rdx 0 rcx 0 rax 0xffff800021148fc0 r8 0x101010101010101 r9 0x8080808080808080 r10 0xb24806ea2adbca48 r11 0xb27b4ee59dc728d4 r12 0xffff800020d39a00 r13 0 r14 0 r15 0x1 rip 0xffffffff81bdaf28 db_enter+0x18 cs 0x8 rflags 0x246 rsp 0xffff80002115ad40 ss 0 db_enter+0x18: addq $0x8,%rsp ddb{1}> show proc PROC (systq) pid=362448 stat=onproc flags process=14000 proc=200 pri=32, usrpri=50, nice=20 forw=0xffffffffffffffff, list=0xffff800021149500,0xffff800021148d30 process=0xffff8000ffffdd18 user=0xffff800021156000, vmspace=0xffffffff829e14b8 estcpu=0, cpticks=1, pctcpu=0.0 user=0, sys=1, intr=0 ddb{1}> ps PID TID PPID UID S FLAGS WAIT COMMAND 22067 109707 18134 0 2 0 syz-executor.0 5594 81340 25342 0 2 0x482 syz-executor.3 68976 456367 1 0 3 0x100083 ttyin getty 18134 495937 25342 0 3 0x82 nanoslp syz-executor.0 81664 317623 25342 0 3 0x2 biowait syz-executor.1 40073 404936 0 0 3 0x14200 acct acct 75262 446658 0 0 3 0x14200 bored sosplice 78594 148933 0 0 3 0x14280 nfsidl nfsio 30241 15483 0 0 3 0x14280 nfsidl nfsio 1905 237706 0 0 3 0x14280 nfsidl nfsio 68012 8608 0 0 3 0x14280 nfsidl nfsio 20505 283200 0 0 3 0x14280 nfsidl nfsio 50941 37846 0 0 3 0x14280 nfsidl nfsio 60144 82938 0 0 3 0x14280 nfsidl nfsio 47278 137574 0 0 3 0x14280 nfsidl nfsio 68816 119097 0 0 3 0x14280 nfsidl nfsio 63348 104557 0 0 3 0x14280 nfsidl nfsio 57782 328344 0 0 3 0x14280 nfsidl nfsio 1181 8997 0 0 3 0x14280 nfsidl nfsio 48092 406571 0 0 3 0x14280 nfsidl nfsio 26847 348147 0 0 3 0x14280 nfsidl nfsio 30001 239913 0 0 3 0x14280 nfsidl nfsio 51158 19643 0 0 3 0x14280 nfsidl nfsio 20891 186748 0 0 3 0x14280 nfsidl nfsio 50284 301586 0 0 3 0x14280 nfsidl nfsio 20488 246932 0 0 3 0x14280 nfsidl nfsio 66855 291861 0 0 3 0x14280 nfsidl nfsio 99096 198469 25342 0 3 0x2 biowait syz-executor.2 25342 352519 28823 0 3 0x82 thrsleep syz-fuzzer 25342 61159 28823 0 3 0x4000082 nanoslp syz-fuzzer 25342 51087 28823 0 3 0x4000082 kqread syz-fuzzer 25342 353022 28823 0 3 0x4000082 thrsleep syz-fuzzer 25342 483505 28823 0 3 0x4000082 thrsleep syz-fuzzer 25342 206389 28823 0 3 0x4000082 thrsleep syz-fuzzer 25342 79312 28823 0 3 0x4000082 nanoslp syz-fuzzer 25342 144453 28823 0 3 0x4000082 thrsleep syz-fuzzer 28823 374473 12824 0 3 0x10008a sigsusp ksh 12824 1231 66126 0 3 0x9a poll sshd 66126 433986 1 0 3 0x88 poll sshd 41818 10301 23192 74 3 0x100092 bpf pflogd 23192 22491 1 0 3 0x80 netio pflogd 52584 430025 30471 73 3 0x100090 kqread syslogd 30471 15571 1 0 3 0x100082 netio syslogd 56630 361387 1 0 3 0x100080 kqread resolvd 68303 170380 5636 77 3 0x100092 kqread dhcpleased 88798 226425 5636 77 3 0x100092 kqread dhcpleased 5636 472767 1 0 3 0x80 kqread dhcpleased 19118 414283 0 0 3 0x14200 bored smr 67139 387574 0 0 7 0x14200 zerothread 45741 118526 0 0 3 0x14200 aiodoned aiodoned 3961 522707 0 0 3 0x14200 syncer update 89610 157091 0 0 3 0x14200 cleaner cleaner 21790 424433 0 0 3 0x14200 reaper reaper 56045 397568 0 0 3 0x14200 pgdaemon pagedaemon 52135 89630 0 0 3 0x14200 bored viomb 92038 248492 0 0 3 0x40014200 acpi0 acpi0 21071 63160 0 0 3 0x40014200 idle1 71826 142208 0 0 3 0x14200 bored softnet 79576 383696 0 0 2 0x14200 systqmp *62807 362448 0 0 7 0x14200 systq 17982 404584 0 0 3 0x40014200 bored softclock 67156 138867 0 0 3 0x40014200 idle0 1 93110 0 0 3 0x82 wait init 0 0 -1 0 3 0x10200 scheduler swapper ddb{1}> show all locks CPU 0: exclusive mutex &uvm.fpageqlock r = 0 (0xffffffff829dd710) #0 witness_lock+0x44d #1 mtx_enter_try+0x100 #2 mtx_enter+0x4b sys/kern/kern_lock.c:266 #3 uvm_pagezero_thread+0x191 sys/uvm/uvm_pmemrange.c:2185 #4 proc_trampoline+0x1c Process 81664 (syz-executor.1) thread 0xffff800027acf7a8 (317623) exclusive rrwlock inode r = 0 (0xfffffd80610cae78) #0 witness_lock+0x44d #1 rw_enter+0x3e1 sys/kern/kern_rwlock.c:310 #2 rrw_enter+0x8b sys/kern/kern_rwlock.c:461 #3 VOP_LOCK+0x87 sys/kern/vfs_vops.c:534 #4 ufs_ihashins+0x42 sys/ufs/ufs/ufs_ihash.c:140 #5 ffs_vget+0x141 sys/ufs/ffs/ffs_vfsops.c:1347 #6 ffs_inode_alloc+0x1be sys/ufs/ffs/ffs_alloc.c:394 #7 ufs_mkdir+0xf4 sys/ufs/ufs/ufs_vnops.c:1162 #8 VOP_MKDIR+0xbf sys/kern/vfs_vops.c:404 #9 domkdirat+0x121 sys/kern/vfs_syscalls.c:3100 #10 syscall+0x489 mi_syscall sys/sys/syscall_mi.h:102 [inline] #10 syscall+0x489 sys/arch/amd64/amd64/trap.c:585 #11 Xsyscall+0x128 exclusive rrwlock inode r = 0 (0xfffffd80610caa38) #0 witness_lock+0x44d #1 rw_enter+0x3e1 sys/kern/kern_rwlock.c:310 #2 rrw_enter+0x8b sys/kern/kern_rwlock.c:461 #3 VOP_LOCK+0x87 sys/kern/vfs_vops.c:534 #4 vn_lock+0x84 sys/kern/vfs_vnops.c:579 #5 vfs_lookup+0xd1 sys/kern/vfs_lookup.c:413 #6 namei+0x36a sys/kern/vfs_lookup.c:245 #7 domkdirat+0x75 sys/kern/vfs_syscalls.c:3085 #8 syscall+0x489 mi_syscall sys/sys/syscall_mi.h:102 [inline] #8 syscall+0x489 sys/arch/amd64/amd64/trap.c:585 #9 Xsyscall+0x128 Process 99096 (syz-executor.2) thread 0xffff800021236a80 (198469) exclusive rrwlock inode r = 0 (0xfffffd806a60c918) #0 witness_lock+0x44d #1 rw_enter+0x3e1 sys/kern/kern_rwlock.c:310 #2 rrw_enter+0x8b sys/kern/kern_rwlock.c:461 #3 VOP_LOCK+0x87 sys/kern/vfs_vops.c:534 #4 ufs_ihashins+0x42 sys/ufs/ufs/ufs_ihash.c:140 #5 ffs_vget+0x141 sys/ufs/ffs/ffs_vfsops.c:1347 #6 ffs_inode_alloc+0x1be sys/ufs/ffs/ffs_alloc.c:394 #7 ufs_mkdir+0xf4 sys/ufs/ufs/ufs_vnops.c:1162 #8 VOP_MKDIR+0xbf sys/kern/vfs_vops.c:404 #9 domkdirat+0x121 sys/kern/vfs_syscalls.c:3100 #10 syscall+0x489 mi_syscall sys/sys/syscall_mi.h:102 [inline] #10 syscall+0x489 sys/arch/amd64/amd64/trap.c:585 #11 Xsyscall+0x128 exclusive rrwlock inode r = 0 (0xfffffd806a60c1a8) #0 witness_lock+0x44d #1 rw_enter+0x3e1 sys/kern/kern_rwlock.c:310 #2 rrw_enter+0x8b sys/kern/kern_rwlock.c:461 #3 VOP_LOCK+0x87 sys/kern/vfs_vops.c:534 #4 vn_lock+0x84 sys/kern/vfs_vnops.c:579 #5 vfs_lookup+0xd1 sys/kern/vfs_lookup.c:413 #6 namei+0x36a sys/kern/vfs_lookup.c:245 #7 domkdirat+0x75 sys/kern/vfs_syscalls.c:3085 #8 syscall+0x489 mi_syscall sys/sys/syscall_mi.h:102 [inline] #8 syscall+0x489 sys/arch/amd64/amd64/trap.c:585 #9 Xsyscall+0x128 Process 62807 (systq) thread 0xffff800021148fc0 (362448) exclusive rwlock pf_lock r = 0 (0xffffffff8277cee0) #0 witness_lock+0x44d #1 pf_purge+0xa9 sys/net/pf.c:1308 #2 taskq_thread+0xe5 sys/kern/kern_task.c:449 #3 proc_trampoline+0x1c exclusive rwlock netlock r = 0 (0xffffffff827a4940) #0 witness_lock+0x44d #1 pf_purge+0x38 sys/net/pf.c:1306 #2 taskq_thread+0xe5 sys/kern/kern_task.c:449 #3 proc_trampoline+0x1c shared rwlock systq r = 0 (0xffffffff8282e7d0) #0 witness_lock+0x44d #1 taskq_thread+0xca sys/kern/kern_task.c:445 #2 proc_trampoline+0x1c exclusive kernel_lock &kernel_lock r = 0 (0xffffffff82982fa8) #0 witness_lock+0x44d #1 __mp_acquire_count+0x48 sys/kern/kern_lock.c:227 #2 mi_switch+0x3d3 sys/kern/sched_bsd.c:416 #3 sleep_finish+0x1b2 sys/kern/kern_synch.c:433 #4 msleep+0x110 sys/kern/kern_synch.c:259 #5 taskq_next_work+0x6e sys/kern/kern_task.c:402 #6 taskq_thread+0x135 sys/kern/kern_task.c:442 #7 proc_trampoline+0x1c ddb{1}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 10189 6494K 7183K 78643K 26882 0 pcb 13 16K 18K 78643K 693 0 rtable 180 9K 11K 78643K 1763 0 ifaddr 64 15K 16K 78643K 521 0 sysctl 2 0K 0K 78643K 2 0 counters 48 34K 35K 78643K 164 0 ioctlops 0 0K 4K 78643K 3335 0 iov 0 0K 16K 78643K 206 0 mount 1 1K 1K 78643K 1 0 log 0 0K 0K 78643K 5 0 vnodes 1369 86K 86K 78643K 5154 0 UFS quota 1 32K 32K 78643K 1 0 UFS mount 5 36K 36K 78643K 5 0 shm 2 1K 5K 78643K 37 0 VM map 2 1K 1K 78643K 2 0 sem 12 0K 0K 78643K 783 0 dirhash 12 2K 2K 78643K 12 0 ACPI 1697 195K 286K 78643K 12598 0 file desc 7 21K 49K 78643K 5539 0 sigio 0 0K 0K 78643K 65 0 proc 70 87K 99K 78643K 842 0 subproc 52 3K 3K 78643K 201 0 NFS srvsock 1 0K 0K 78643K 1 0 NFS daemon 1 16K 16K 78643K 1 0 ip_moptions 0 0K 0K 78643K 302 0 in_multi 55 3K 4K 78643K 861 0 ether_multi 1 0K 0K 78643K 62 0 mrt 0 0K 0K 78643K 30 0 ISOFS mount 1 32K 32K 78643K 1 0 MSDOSFS mount 1 16K 16K 78643K 1 0 ttys 175 784K 784K 78643K 175 0 exec 0 0K 2K 78643K 954 0 tdb 3 0K 0K 78643K 3 0 pagedep 1 8K 8K 78643K 1 0 inodedep 1 32K 32K 78643K 1 0 newblk 1 0K 0K 78643K 1 0 VM swap 7 26K 26K 78643K 7 0 UVM amap 332 419K 420K 78643K 70542 0 UVM aobj 57 2K 2K 78643K 60 0 memdesc 1 4K 4K 78643K 1 0 crypto data 1 1K 1K 78643K 1 0 ip6_options 0 0K 0K 78643K 163 0 NDP 9 0K 1K 78643K 189 0 temp 106 4210K 4837K 78643K 38033 0 kqueue 10 14K 22K 78643K 169 0 SYN cache 2 16K 16K 78643K 2 0 ddb{1}> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle plcache 128 22 0 0 1 0 1 1 0 8 0 rtpcb 120 217 0 214 3 2 1 2 0 8 0 rtentry 112 542 0 472 3 1 2 3 0 8 0 unpcb 128 4604 0 4589 40 39 1 6 0 8 0 syncache 296 26 0 26 9 8 1 1 0 8 1 tcpqe 32 144 0 144 3 2 1 1 0 8 1 tcpcb 736 1577 0 1573 59 53 6 13 0 8 5 arp 120 35 0 24 1 0 1 1 0 8 0 inpcb 304 3957 0 3950 64 60 4 11 0 8 3 rttmr 72 8 0 8 3 3 0 1 0 8 0 nd6 48 153 0 139 1 0 1 1 0 8 0 pkpcb 40 3 0 3 1 1 0 1 0 8 0 kcovpl 48 15 0 11 1 0 1 1 0 8 0 ppxss 1248 27 0 27 6 6 0 1 0 8 0 pfstscr 40 35 0 35 1 1 0 1 0 8 0 pffrag 232 24 0 18 4 3 1 1 0 482 0 pffrnode 88 24 0 18 4 3 1 1 0 8 0 pffrent 40 210 0 204 4 3 1 1 0 8 0 pfosfp 40 1428 0 1005 5 0 5 5 0 8 0 pfosfpen 112 1428 0 714 21 0 21 21 0 8 0 pfrktable 1344 131 0 124 2 0 2 2 0 8 0 pftag 88 19 0 18 4 3 1 1 0 8 0 pfstitem 24 90 0 88 1 0 1 1 0 8 0 pfstkey 112 160 0 158 1 0 1 1 0 8 0 pfstate 320 125 0 123 3 2 1 3 0 8 0 pfrule 1360 730 0 539 17 1 16 16 0 8 0 art_heap8 4096 1 0 0 1 0 1 1 0 8 0 art_heap4 256 2904 0 2613 30 11 19 20 0 8 0 art_table 32 2905 0 2613 3 0 3 3 0 8 0 art_node 16 541 0 478 1 0 1 1 0 8 0 sysvmsgpl 40 31 0 31 2 2 0 1 0 8 0 semupl 112 4 0 4 2 2 0 1 0 8 0 semapl 112 781 0 771 1 0 1 1 0 8 0 shmpl 112 57 0 3 2 0 2 2 0 8 0 dirhash 1024 17 0 0 3 0 3 3 0 8 0 dino2pl 256 7947 0 6518 90 0 90 90 0 8 0 ffsino 272 7947 0 6518 96 0 96 96 0 8 0 nchpl 144 14862 0 13260 61 0 61 61 0 8 0 uvmvnodes 80 5926 0 0 121 0 121 121 0 8 0 vnodes 224 5926 0 0 349 0 349 349 0 8 0 namei 1024 48011 0 48009 1 0 1 1 0 8 0 percpumem 16 94 0 58 1 0 1 1 0 8 0 vcpupl 2048 26 0 0 4 0 4 4 0 8 0 vmpool 560 29 0 3 2 0 2 2 0 8 0 pfiaddrpl 120 39 0 29 1 0 1 1 0 8 0 scxspl 216 41778 0 41776 11 10 1 8 0 8 0 plimitpl 152 148 0 137 1 0 1 1 0 8 0 sigapl 424 5767 0 5711 7 0 7 7 0 8 0 futexpl 64 40268 0 40268 1 0 1 1 0 8 1 knotepl 112 109 0 0 3 0 3 3 0 8 0 kqueuepl 216 1121 0 1111 27 24 3 5 0 8 1 pipepl 336 1893 0 1877 57 50 7 7 0 8 5 fdescpl 496 5731 0 5711 4 1 3 4 0 8 0 filepl 152 33702 0 33552 69 58 11 15 0 8 5 lockfpl 104 946 0 944 3 2 1 2 0 8 0 lockfspl 48 265 0 263 1 0 1 1 0 8 0 sessionpl 144 32 0 19 1 0 1 1 0 8 0 pgrppl 48 34 0 21 1 0 1 1 0 8 0 ucredpl 96 2464 0 2451 1 0 1 1 0 8 0 zombiepl 144 5711 0 5710 1 0 1 1 0 8 0 processpl 1064 5767 0 5710 4 0 4 4 0 8 0 procpl 672 15264 0 15200 11 4 7 8 0 8 0 srpgc 96 12 0 12 3 3 0 1 0 8 0 sosppl 168 31 0 31 9 8 1 1 0 8 1 sockpl 480 8781 0 8756 223 213 10 28 0 8 6 mcl64k 65536 20 0 0 3 1 2 3 0 8 0 mcl16k 16384 15 0 0 2 0 2 2 0 8 0 mcl12k 12288 11 0 0 2 0 2 2 0 8 0 mcl9k 9216 12 0 0 1 0 1 1 0 8 0 mcl8k 8192 23 0 0 3 1 2 3 0 8 0 mcl4k 4096 18 0 0 3 0 3 3 0 8 0 mcl2k2 2112 5 0 0 1 0 1 1 0 8 0 mcl2k 2048 251 0 0 23 4 19 23 0 8 0 mtagpl 96 1061 0 0 24 0 24 24 0 8 0 mbufpl 256 2588 0 0 150 0 150 150 0 8 0 bufpl 288 10357 0 4012 454 0 454 454 0 8 0 anonpl 24 1566825 0 1551975 175 58 117 140 0 186 0 amapchunkpl 152 187315 0 186642 91 59 32 45 0 158 0 amappl16 200 14485 0 13908 70 39 31 43 0 8 0 amappl15 192 6 0 3 1 0 1 1 0 8 0 amappl14 184 6 0 4 1 0 1 1 0 8 0 amappl13 176 1550 0 1548 1 0 1 1 0 8 0 amappl12 168 28 0 24 1 0 1 1 0 8 0 amappl11 160 1631 0 1615 1 0 1 1 0 8 0 amappl10 152 1453 0 1443 1 0 1 1 0 8 0 amappl9 144 933 0 930 1 0 1 1 0 8 0 amappl8 136 1166 0 1099 3 0 3 3 0 8 0 amappl7 128 641 0 631 1 0 1 1 0 8 0 amappl6 120 660 0 646 1 0 1 1 0 8 0 amappl5 112 5063 0 5042 1 0 1 1 0 8 0 amappl4 104 4045 0 4017 1 0 1 1 0 8 0 amappl3 96 748 0 731 1 0 1 1 0 8 0 amappl2 88 2079 0 2036 3 1 2 2 0 8 1 amappl1 80 105145 0 104681 13 1 12 13 0 8 0 amappl 88 69887 0 69681 6 0 6 6 0 92 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 253 0 253 1 1 0 1 0 8 0 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 59 0 3 2 0 2 2 0 8 0 uaddrrnd 24 5760 0 5714 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 5760 0 5714 1 0 1 1 0 8 0 vmmpekpl 168 44245 0 44201 3 0 3 3 0 8 0 vmmpepl 168 519905 0 517924 213 95 118 118 0 357 19 vmsppl 368 5759 0 5714 5 0 5 5 0 8 0 rwobjpl 56 128525 0 121099 109 3 106 109 0 8 0 pdppl 4096 11528 0 11454 106 26 80 80 0 8 6 pvpl 32 2615578 0 2597235 283 96 187 218 0 265 2 pmappl 248 5759 0 5714 4 0 4 4 0 8 0 extentpl 40 57 0 38 1 0 1 1 0 8 0 phpool 112 1110 0 149 28 0 28 28 0 8 0 ddb{1}> machine ddbcpu 0 Stopped at x86_ipi_db+0x1a: addq $0x8,%rsp x86_ipi_db(ffffffff827adff0) at x86_ipi_db+0x1a sys/arch/amd64/amd64/db_interface.c:393 x86_ipi_handler() at x86_ipi_handler+0xb7 sys/arch/amd64/amd64/ipi.c:106 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x23 __sanitizer_cov_trace_pc() at __sanitizer_cov_trace_pc+0x40 sys/dev/kcov.c:149 mtx_enter(ffffffff829dd700) at mtx_enter+0x4b sys/kern/kern_lock.c:266 msleep(ffffffff829dd56c,ffffffff829dd700,7f,ffffffff82435982,0) at msleep+0x214 uvm_pagezero_thread(ffff800021192fc8) at uvm_pagezero_thread+0xb0 sys/uvm/uvm_pmemrange.c:2171 end trace frame: 0x0, count: 8 ddb{0}> trace x86_ipi_db(ffffffff827adff0) at x86_ipi_db+0x1a sys/arch/amd64/amd64/db_interface.c:393 x86_ipi_handler() at x86_ipi_handler+0xb7 sys/arch/amd64/amd64/ipi.c:106 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x23 __sanitizer_cov_trace_pc() at __sanitizer_cov_trace_pc+0x40 sys/dev/kcov.c:149 mtx_enter(ffffffff829dd700) at mtx_enter+0x4b sys/kern/kern_lock.c:266 msleep(ffffffff829dd56c,ffffffff829dd700,7f,ffffffff82435982,0) at msleep+0x214 uvm_pagezero_thread(ffff800021192fc8) at uvm_pagezero_thread+0xb0 sys/uvm/uvm_pmemrange.c:2171 end trace frame: 0x0, count: -7 ddb{0}> machine ddbcpu 1 Stopped at db_enter+0x18: addq $0x8,%rsp db_enter() at db_enter+0x18 sys/arch/amd64/amd64/db_interface.c:440 panic(ffffffff82454e65) at panic+0x177 sys/kern/subr_prf.c:202 __assert(ffffffff824c2ed5,ffffffff824fd8fe,14a,ffffffff82489b4f) at __assert+0x25 sys/kern/subr_prf.c:161 pf_purge_rule(ffff800000cf7a98) at pf_purge_rule+0x1ab sys/net/pf_ioctl.c:330 pf_purge_expired_rules() at pf_purge_expired_rules+0xbc sys/net/pf.c:1275 pf_purge(ffffffff829c5840) at pf_purge+0xe0 sys/net/pf.c:1312 taskq_thread(ffffffff8282e760) at taskq_thread+0xe5 sys/kern/kern_task.c:449 end trace frame: 0x0, count: 8 ddb{1}> trace db_enter() at db_enter+0x18 sys/arch/amd64/amd64/db_interface.c:440 panic(ffffffff82454e65) at panic+0x177 sys/kern/subr_prf.c:202 __assert(ffffffff824c2ed5,ffffffff824fd8fe,14a,ffffffff82489b4f) at __assert+0x25 sys/kern/subr_prf.c:161 pf_purge_rule(ffff800000cf7a98) at pf_purge_rule+0x1ab sys/net/pf_ioctl.c:330 pf_purge_expired_rules() at pf_purge_expired_rules+0xbc sys/net/pf.c:1275 pf_purge(ffffffff829c5840) at pf_purge+0xe0 sys/net/pf.c:1312 taskq_thread(ffffffff8282e760) at taskq_thread+0xe5 sys/kern/kern_task.c:449 end trace frame: 0x0, count: -7