panic: unhandled af 1 Stopped at db_enter+0x18: addq $0x8,%rsp TID PID UID PRFLAGS PFLAGS CPU COMMAND *415464 16591 0 0 0x4000000 0 syz-executor.0 db_enter() at db_enter+0x18 sys/arch/amd64/amd64/db_interface.c:398 panic(ffffffff821bafb7) at panic+0x15c sys/kern/subr_prf.c:207 unhandled_af(1) at unhandled_af+0x16 pf_addrcpy(ffff80001d435b88,ffff80001d435e80,1) at pf_addrcpy+0x99 sys/net/pf.c:409 pfioctl(4900,c0504417,ffff80001d435e80,1,ffff8000ffff3b40) at pfioctl+0x43c0 sys/net/pf_ioctl.c:1827 VOP_IOCTL(fffffd8065b484e0,c0504417,ffff80001d435e80,1,fffffd806c3beae0,ffff8000ffff3b40) at VOP_IOCTL+0x88 sys/kern/vfs_vops.c:291 vn_ioctl(fffffd8057e9ac40,c0504417,ffff80001d435e80,ffff8000ffff3b40) at vn_ioctl+0xb7 sys/kern/vfs_vnops.c:533 sys_ioctl(ffff8000ffff3b40,ffff80001d435f98,ffff80001d435fe0) at sys_ioctl+0x5b9 syscall(ffff80001d436060) at syscall+0x507 sys/arch/amd64/amd64/trap.c:555 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x456fc2643b0, count: 5 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb> ddb> set $lines = 0 ddb> set $maxwidth = 0 ddb> show panic unhandled af 1 ddb> trace db_enter() at db_enter+0x18 sys/arch/amd64/amd64/db_interface.c:398 panic(ffffffff821bafb7) at panic+0x15c sys/kern/subr_prf.c:207 unhandled_af(1) at unhandled_af+0x16 pf_addrcpy(ffff80001d435b88,ffff80001d435e80,1) at pf_addrcpy+0x99 sys/net/pf.c:409 pfioctl(4900,c0504417,ffff80001d435e80,1,ffff8000ffff3b40) at pfioctl+0x43c0 sys/net/pf_ioctl.c:1827 VOP_IOCTL(fffffd8065b484e0,c0504417,ffff80001d435e80,1,fffffd806c3beae0,ffff8000ffff3b40) at VOP_IOCTL+0x88 sys/kern/vfs_vops.c:291 vn_ioctl(fffffd8057e9ac40,c0504417,ffff80001d435e80,ffff8000ffff3b40) at vn_ioctl+0xb7 sys/kern/vfs_vnops.c:533 sys_ioctl(ffff8000ffff3b40,ffff80001d435f98,ffff80001d435fe0) at sys_ioctl+0x5b9 syscall(ffff80001d436060) at syscall+0x507 sys/arch/amd64/amd64/trap.c:555 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x456fc2643b0, count: -10 ddb> show registers rdi 0xffffffff81690f07 db_enter+0x17 rsi 0xacc rbp 0xffff80001d435a40 rbx 0xffff80001d435af0 rdx 0xacd rcx 0xffff80001f645000 rax 0xffff80001f645000 r8 0xffff80001d435a00 r9 0x1 r10 0xffff8000009f2ec0 r11 0xc381bcd0861769a4 r12 0x3000000008 r13 0xffff80001d435a50 r14 0x100 r15 0x1 rip 0xffffffff81690f08 db_enter+0x18 cs 0x8 rflags 0x246 rsp 0xffff80001d435a30 ss 0x10 db_enter+0x18: addq $0x8,%rsp ddb> show proc PROC (syz-executor.0) pid=415464 stat=onproc flags process=0 proc=4000000 pri=70, usrpri=70, nice=20 forw=0xffffffffffffffff, list=0xffff8000ffff2508,0xffffffff825934e8 process=0xffff8000ffff7480 user=0xffff80001d431000, vmspace=0xfffffd806bc09770 estcpu=36, cpticks=0, pctcpu=0.0 user=0, sys=0, intr=0 ddb> ps PID TID PPID UID S FLAGS WAIT COMMAND 16591 5770 43766 0 2 0 syz-executor.0 *16591 415464 43766 0 7 0x4000000 syz-executor.0 43766 265896 37930 0 3 0x82 nanosleep syz-executor.0 65422 257916 37930 0 2 0x2 syz-executor.1 37930 289533 65097 0 3 0x82 thrsleep syz-fuzzer 37930 280856 65097 0 3 0x4000082 nanosleep syz-fuzzer 37930 246065 65097 0 3 0x4000082 kqread syz-fuzzer 37930 243203 65097 0 3 0x4000082 thrsleep syz-fuzzer 37930 163867 65097 0 3 0x4000082 thrsleep syz-fuzzer 37930 275622 65097 0 3 0x4000082 thrsleep syz-fuzzer 37930 440164 65097 0 3 0x4000082 thrsleep syz-fuzzer 37930 390938 65097 0 3 0x4000082 thrsleep syz-fuzzer 65097 391609 93713 0 3 0x10008a pause ksh 93713 467329 75711 0 3 0x92 select sshd 62972 444540 1 0 3 0x100083 ttyin getty 75711 169870 1 0 3 0x80 select sshd 83648 142140 89627 73 3 0x100090 kqread syslogd 89627 371900 1 0 3 0x100082 netio syslogd 62783 286765 1 77 3 0x100090 poll dhclient 93372 79669 1 0 3 0x80 poll dhclient 76870 461800 0 0 2 0x14200 zerothread 77491 94803 0 0 3 0x14200 aiodoned aiodoned 84026 82136 0 0 3 0x14200 syncer update 20744 218786 0 0 3 0x14200 cleaner cleaner 63869 387976 0 0 3 0x14200 reaper reaper 17759 179364 0 0 3 0x14200 pgdaemon pagedaemon 38117 465598 0 0 3 0x14200 bored crynlk 72018 300501 0 0 3 0x14200 bored crypto 34350 397687 0 0 3 0x40014200 acpi0 acpi0 34015 14275 0 0 3 0x14200 bored softnet 20088 430356 0 0 3 0x14200 bored systqmp 55618 466165 0 0 3 0x14200 bored systq 13613 121729 0 0 3 0x40014200 bored softclock 94417 436218 0 0 3 0x40014200 idle0 75283 382688 0 0 3 0x14200 bored smr 1 449749 0 0 3 0x82 wait init 0 0 -1 0 3 0x10200 scheduler swapper ddb> show all locks No such command ddb> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 9456 6326K 6715K 78643K 13124 0 pcb 13 8K 8K 78643K 171 0 rtable 108 3K 4K 78643K 11776 0 ifaddr 44 10K 10K 78643K 44 0 counters 19 16K 16K 78643K 19 0 ioctlops 0 0K 4K 78643K 804 0 iov 0 0K 32K 78643K 1858 0 mount 1 1K 1K 78643K 1 0 vnodes 1221 77K 77K 78643K 2754 0 UFS quota 1 32K 32K 78643K 1 0 UFS mount 5 36K 36K 78643K 5 0 shm 3 5K 9K 78643K 693 0 VM map 2 0K 0K 78643K 2 0 sem 12 1K 1K 78643K 16 0 dirhash 12 2K 2K 78643K 12 0 ACPI 1794 195K 288K 78643K 12646 0 file desc 5 13K 25K 78643K 27975 0 sigio 0 0K 0K 78643K 1048 0 proc 49 38K 63K 78643K 360 0 subproc 32 2K 2K 78643K 34 0 NFS srvsock 1 0K 0K 78643K 1 0 NFS daemon 1 16K 16K 78643K 1 0 ip_moptions 0 0K 0K 78643K 3639 0 in_multi 33 2K 2K 78643K 50 0 ether_multi 1 0K 0K 78643K 1 0 ISOFS mount 1 32K 32K 78643K 1 0 MSDOSFS mount 1 16K 16K 78643K 1 0 ttys 37 175K 175K 78643K 37 0 exec 0 0K 1K 78643K 181 0 pagedep 1 8K 8K 78643K 1 0 inodedep 1 32K 32K 78643K 1 0 newblk 1 0K 0K 78643K 1 0 VM swap 7 26K 26K 78643K 7 0 UVM amap 133 39K 39K 78643K 58078 0 UVM aobj 130 4K 4K 78643K 176 0 memdesc 1 4K 4K 78643K 1 0 crypto data 1 1K 1K 78643K 1 0 NDP 6 0K 0K 78643K 10 0 temp 109 3018K 3084K 78643K 568224 0 SYN cache 2 16K 16K 78643K 2 0 ddb> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle arp 64 6 0 0 1 0 1 1 0 8 0 rtpcb 80 41879 0 41875 6 5 1 2 0 8 0 rtentry 112 45 0 1 2 0 2 2 0 8 0 unpcb 120 7891 0 7883 3 2 1 2 0 8 0 syncache 264 496 0 496 11 11 0 1 0 8 0 sackhl 24 2 0 2 1 1 0 1 0 8 0 tcpcb 544 11832 0 11828 3 2 1 3 0 8 0 inpcb 280 19195 0 19188 5 4 1 4 0 8 0 nd6 48 4 0 0 1 0 1 1 0 8 0 pkpcb 40 15 0 15 2 2 0 1 0 8 0 pfrktable 1344 1 0 0 1 0 1 1 0 8 0 pfrule 1360 81 0 0 7 0 7 7 0 8 0 art_heap8 4096 1 0 0 1 0 1 1 0 8 0 art_heap4 256 212 0 0 14 0 14 14 0 8 0 art_table 32 213 0 0 2 0 2 2 0 8 0 art_node 16 44 0 4 1 0 1 1 0 8 0 sysvmsgpl 40 218 0 218 2 2 0 1 0 8 0 semapl 112 14 0 4 1 0 1 1 0 8 0 shmpl 112 174 0 46 4 0 4 4 0 8 0 dirhash 1024 17 0 0 3 0 3 3 0 8 0 dino1pl 128 32868 0 31466 46 0 46 46 0 8 0 ffsino 240 32868 0 31466 83 0 83 83 0 8 0 nchpl 144 66734 0 65116 62 1 61 61 0 8 0 uvmvnodes 72 5926 0 0 108 0 108 108 0 8 0 vnodes 208 5926 0 0 312 0 312 312 0 8 0 namei 1024 163011 0 163011 1 0 1 1 0 8 1 vcpupl 1984 2 0 0 1 0 1 1 0 8 0 vmpool 528 4 0 2 2 1 1 1 0 8 0 scxspl 192 200001 0 200001 1 0 1 1 0 8 1 plimitpl 152 4477 0 4470 1 0 1 1 0 8 0 sigapl 432 28146 0 28133 2 0 2 2 0 8 0 futexpl 56 272732 0 272732 1 0 1 1 0 8 1 knotepl 112 434 0 415 1 0 1 1 0 8 0 kqueuepl 104 2939 0 2937 1 0 1 1 0 8 0 pipepl 112 3720 0 3701 1 0 1 1 0 8 0 fdescpl 424 28147 0 28133 2 0 2 2 0 8 0 filepl 120 133159 0 133060 29 24 5 6 0 8 2 lockfpl 104 1456 0 1455 1 0 1 1 0 8 0 lockfspl 48 673 0 672 1 0 1 1 0 8 0 sessionpl 112 17 0 7 1 0 1 1 0 8 0 pgrppl 48 130 0 120 1 0 1 1 0 8 0 ucredpl 96 20729 0 20722 1 0 1 1 0 8 0 zombiepl 144 28133 0 28133 1 0 1 1 0 8 1 processpl 872 28161 0 28133 4 0 4 4 0 8 0 procpl 632 56930 0 56894 4 0 4 4 0 8 0 sockpl 384 68980 0 68961 86 80 6 10 0 8 4 mcl64k 65536 494 0 494 16 16 0 1 0 8 0 mcl16k 16384 83 0 83 13 13 0 1 0 8 0 mcl12k 12288 111 0 111 18 17 1 1 0 8 1 mcl9k 9216 1182 0 1182 15 14 1 1 0 8 1 mcl8k 8192 1966 0 1966 26 25 1 1 0 8 1 mcl4k 4096 3026 0 3026 33 32 1 1 0 8 1 mcl2k2 2112 119 0 119 24 24 0 1 0 8 0 mcl2k 2048 64832 0 64793 16 10 6 9 0 8 0 mtagpl 80 2 0 2 1 1 0 1 0 8 0 mbufpl 256 489102 0 488920 1876 1848 28 169 0 8 8 bufpl 280 48581 0 42397 442 0 442 442 0 8 0 anonpl 16 1612090 0 1606803 32 1 31 31 0 107 0 amapchunkpl 152 98905 0 98811 45 40 5 18 0 158 0 amappl16 192 125713 0 125332 22 2 20 20 0 8 0 amappl15 184 50 0 46 1 0 1 1 0 8 0 amappl14 176 35 0 32 1 0 1 1 0 8 0 amappl13 168 2 0 1 1 0 1 1 0 8 0 amappl12 160 6 0 6 2 2 0 1 0 8 0 amappl11 152 48 0 37 1 0 1 1 0 8 0 amappl10 144 14 0 12 1 0 1 1 0 8 0 amappl9 136 14618 0 14613 1 0 1 1 0 8 0 amappl8 128 14314 0 14269 2 0 2 2 0 8 0 amappl7 120 90 0 80 1 0 1 1 0 8 0 amappl6 112 62 0 57 1 0 1 1 0 8 0 amappl5 104 576 0 564 1 0 1 1 0 8 0 amappl4 96 27932 0 27901 1 0 1 1 0 8 0 amappl3 88 1150 0 1143 1 0 1 1 0 8 0 amappl2 80 222084 0 222014 3 1 2 3 0 8 0 amappl1 72 461324 0 460907 26 16 10 20 0 8 0 amappl 80 57321 0 57285 1 0 1 1 0 84 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 253 0 253 1 1 0 1 0 8 0 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 64 175 0 46 3 0 3 3 0 8 0 uaddrrnd 24 28151 0 28135 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 28151 0 28135 1 0 1 1 0 8 0 vmmpekpl 168 104742 0 104718 2 0 2 2 0 8 0 vmmpepl 168 3079400 0 3077903 116 45 71 78 0 357 5 vmsppl 272 28150 0 28135 4 2 2 2 0 8 1 pdppl 4096 56308 0 56272 6 1 5 6 0 8 0 pvpl 32 4592898 0 4584612 154 68 86 115 0 265 0 pmappl 200 28150 0 28135 1 0 1 1 0 8 0 extentpl 40 46 0 29 1 0 1 1 0 8 0 phpool 112 2104 0 1951 24 18 6 9 0 8 0