kernel: protection fault trap, code=0
Stopped at pf_anchor_global_RB_REMOVE+0x58: movq 0(%r12),%rbx
ddb{0}>
ddb{0}> set $lines = 0
ddb{0}> set $maxwidth = 0
ddb{0}> show panic
the kernel did not panic
ddb{0}> trace
pf_anchor_global_RB_REMOVE(ffffffff829c92e0,ffff800000cfc000) at pf_anchor_global_RB_REMOVE+0x58 sys/net/pf_ruleset.c:84
pf_remove_if_empty_ruleset(ffff800000cfc490) at pf_remove_if_empty_ruleset+0xdd sys/net/pf_ruleset.c:300
pfi_dynaddr_setup(ffff800000b9f2b8,0) at pfi_dynaddr_setup+0x411 sys/net/pf_if.c:485
pfioctl(4900,cd60441a,ffff800000be5000,3,ffff8000246417a8) at pfioctl+0x84eb pf_addr_setup sys/net/pf_ioctl.c:892 [inline]
pfioctl(4900,cd60441a,ffff800000be5000,3,ffff8000246417a8) at pfioctl+0x84eb sys/net/pf_ioctl.c:1646
VOP_IOCTL(fffffd806f7baaa8,cd60441a,ffff800000be5000,3,fffffd807f7d8540,ffff8000246417a8) at VOP_IOCTL+0x96 sys/kern/vfs_vops.c:264
vn_ioctl(fffffd806327f098,cd60441a,ffff800000be5000,ffff8000246417a8) at vn_ioctl+0xbc sys/kern/vfs_vnops.c:531
sys_ioctl(ffff8000246417a8,ffff800025ec49e8,ffff800025ec4a40) at sys_ioctl+0x4a2
syscall(ffff800025ec4ab0) at syscall+0x489 mi_syscall sys/sys/syscall_mi.h:102 [inline]
syscall(ffff800025ec4ab0) at syscall+0x489 sys/arch/amd64/amd64/trap.c:585
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0xf8938c0a70, count: -9
ddb{0}> show registers
rdi 0xffff800024697000
rsi 0x128f __ALIGN_SIZE+0x28f
rbp 0xffff800025ec44d0
rbx 0xffffffff829c92e0 pf_anchors
rdx 0xffff800024697000
rcx 0x128e __ALIGN_SIZE+0x28e
rax 0xffffffff81222c6b pf_anchor_global_RB_REMOVE+0x2b
r8 0x400
r9 0x8080808080808080
r10 0x638fe8f127690279
r11 0x81081d745bd1316f
r12 0x323d483967b9537c
r13 0xffffffff829c92e8 pf_main_anchor
r14 0xffff800000cfc000
r15 0xdead007fdeadbeef
rip 0xffffffff81222c98 pf_anchor_global_RB_REMOVE+0x58
cs 0x8
rflags 0x10202 __ALIGN_SIZE+0xf202
rsp 0xffff800025ec4480
ss 0x10
pf_anchor_global_RB_REMOVE+0x58: movq 0(%r12),%rbx
ddb{0}> show proc
PROC (syz-executor.5) pid=228518 stat=onproc
flags process=0 proc=4000000<THREAD>
pri=32, usrpri=83, nice=20
forw=0xffffffffffffffff, list=0xffff800024640548,0xffff8000246407f8
process=0xffff8000ffff14e8 user=0xffff800025ebf000, vmspace=0xfffffd805b5ede78
estcpu=36, cpticks=0, pctcpu=0.0
user=0, sys=0, intr=0
ddb{0}> ps
PID TID PPID UID S FLAGS WAIT COMMAND
60629 247432 84259 0 2 0 syz-executor.7
60629 371549 84259 0 3 0x4000080 fsleep syz-executor.7
60629 363760 84259 0 3 0x4000080 fsleep syz-executor.7
60629 500052 84259 0 3 0x4000080 fsleep syz-executor.7
66184 394751 72379 0 2 0 syz-executor.1
66184 123175 72379 0 3 0x4000080 fsleep syz-executor.1
12783 508408 8914 0 2 0 syz-executor.2
12783 252213 8914 0 3 0x4000080 fsleep syz-executor.2
74530 288939 83285 0 2 0 syz-executor.6
74530 229189 83285 0 3 0x4000080 fsleep syz-executor.6
25759 284250 91709 0 2 0 syz-executor.5
*25759 228518 91709 0 7 0x4000000 syz-executor.5
22990 359110 65004 0 2 0 syz-executor.0
22990 381672 65004 0 3 0x4000080 fsleep syz-executor.0
34339 292842 12897 0 2 0 syz-executor.3
88102 147782 19717 0 2 0 syz-executor.4
88102 247945 19717 0 3 0x4000080 fsleep syz-executor.4
8914 27034 54819 0 3 0x82 nanoslp syz-executor.2
12897 334285 54819 0 2 0x2 syz-executor.3
91709 54968 54819 0 3 0x82 nanoslp syz-executor.5
84259 268273 54819 0 3 0x82 nanoslp syz-executor.7
83285 351066 54819 0 3 0x82 nanoslp syz-executor.6
72379 364865 54819 0 3 0x82 nanoslp syz-executor.1
19717 505612 54819 0 3 0x82 nanoslp syz-executor.4
65004 410123 54819 0 3 0x82 nanoslp syz-executor.0
42183 375397 1 0 3 0x100083 ttyin getty
39102 94576 0 0 3 0x14200 acct acct
95558 54010 0 0 3 0x14280 nfsidl nfsio
758 124610 0 0 3 0x14280 nfsidl nfsio
92928 522449 0 0 3 0x14280 nfsidl nfsio
94408 295507 0 0 3 0x14280 nfsidl nfsio
83380 218667 0 0 3 0x14280 nfsidl nfsio
49354 511026 0 0 3 0x14280 nfsidl nfsio
19973 222153 0 0 3 0x14280 nfsidl nfsio
96532 62796 0 0 3 0x14280 nfsidl nfsio
74586 421869 0 0 3 0x14280 nfsidl nfsio
82378 15884 0 0 3 0x14280 nfsidl nfsio
23114 23517 0 0 3 0x14280 nfsidl nfsio
11327 229454 0 0 3 0x14280 nfsidl nfsio
64431 200422 0 0 3 0x14280 nfsidl nfsio
19382 409919 0 0 3 0x14280 nfsidl nfsio
24466 374838 0 0 3 0x14280 nfsidl nfsio
9853 155129 0 0 3 0x14280 nfsidl nfsio
17055 85137 0 0 3 0x14280 nfsidl nfsio
91059 141595 0 0 3 0x14280 nfsidl nfsio
30649 283815 0 0 3 0x14280 nfsidl nfsio
71288 338928 0 0 3 0x14280 nfsidl nfsio
73600 224112 0 0 3 0x14200 bored sosplice
54819 274904 83175 0 3 0x82 thrsleep syz-fuzzer
54819 68733 83175 0 3 0x4000082 thrsleep syz-fuzzer
54819 234041 83175 0 3 0x4000082 thrsleep syz-fuzzer
54819 509644 83175 0 3 0x4000082 thrsleep syz-fuzzer
54819 46723 83175 0 3 0x4000082 thrsleep syz-fuzzer
54819 201032 83175 0 3 0x4000082 thrsleep syz-fuzzer
54819 477499 83175 0 3 0x4000082 kqread syz-fuzzer
54819 457860 83175 0 3 0x4000082 thrsleep syz-fuzzer
54819 457595 83175 0 3 0x4000082 thrsleep syz-fuzzer
83175 349708 65165 0 3 0x10008a sigsusp ksh
65165 65328 56066 0 3 0x9a kqread sshd
56066 103946 1 0 3 0x88 kqread sshd
24459 437826 3711 74 3 0x1100092 bpf pflogd
3711 416006 1 0 3 0x80 netio pflogd
60008 392537 97993 73 3 0x1100090 kqread syslogd
97993 491966 1 0 3 0x100082 netio syslogd
17617 54044 1 0 3 0x100080 kqread resolvd
89713 482746 59297 77 3 0x100092 kqread dhcpleased
34488 504732 59297 77 3 0x100092 kqread dhcpleased
59297 486740 1 0 3 0x80 kqread dhcpleased
40859 351736 0 0 3 0x14200 bored smr
88647 271420 0 0 2 0x14200 zerothread
44616 351570 0 0 3 0x14200 aiodoned aiodoned
93273 42543 0 0 3 0x14200 syncer update
70551 20813 0 0 3 0x14200 cleaner cleaner
69009 448126 0 0 3 0x14200 reaper reaper
92787 408294 0 0 3 0x14200 pgdaemon pagedaemon
44303 425029 0 0 3 0x14200 bored viomb
59080 289671 0 0 3 0x40014200 acpi0 acpi0
15147 158948 0 0 7 0x40014200 idle1
74515 378784 0 0 3 0x14200 bored softnet
61234 404714 0 0 3 0x14200 bored systqmp
78593 265471 0 0 3 0x14200 bored systq
70547 44984 0 0 3 0x40014200 bored softclock
76761 362790 0 0 3 0x40014200 idle0
1 55868 0 0 3 0x82 wait init
0 0 -1 0 3 0x10200 scheduler swapper
ddb{0}> show all locks
Process 25759 (syz-executor.5) thread 0xffff8000246417a8 (228518)
exclusive rwlock pf_lock r = 0 (0xffffffff829ac890)
#0 witness_lock+0x44d
#1 pfioctl+0x5b38 sys/net/pf_ioctl.c:1601
#2 VOP_IOCTL+0x96 sys/kern/vfs_vops.c:264
#3 vn_ioctl+0xbc sys/kern/vfs_vnops.c:531
#4 sys_ioctl+0x4a2
#5 syscall+0x489 mi_syscall sys/sys/syscall_mi.h:102 [inline]
#5 syscall+0x489 sys/arch/amd64/amd64/trap.c:585
#6 Xsyscall+0x128
exclusive rwlock netlock r = 0 (0xffffffff8295ec00)
#0 witness_lock+0x44d
#1 pfioctl+0x3690 sys/net/pf_ioctl.c:1601
#2 VOP_IOCTL+0x96 sys/kern/vfs_vops.c:264
#3 vn_ioctl+0xbc sys/kern/vfs_vnops.c:531
#4 sys_ioctl+0x4a2
#5 syscall+0x489 mi_syscall sys/sys/syscall_mi.h:102 [inline]
#5 syscall+0x489 sys/arch/amd64/amd64/trap.c:585
#6 Xsyscall+0x128
exclusive kernel_lock &kernel_lock r = 0 (0xffffffff829cd168)
#0 witness_lock+0x44d
#1 vn_ioctl+0x41 sys/kern/vfs_vnops.c:514
#2 sys_ioctl+0x4a2
#3 syscall+0x489 mi_syscall sys/sys/syscall_mi.h:102 [inline]
#3 syscall+0x489 sys/arch/amd64/amd64/trap.c:585
#4 Xsyscall+0x128
ddb{0}> show malloc
Type InUse MemUse HighUse Limit Requests Type Lim
devbuf 10232 6815K 10586K 78643K 56828 0
pcb 13 18K 23K 78643K 1381 0
rtable 211 9K 10K 78643K 2789 0
ifaddr 92 22K 24K 78643K 1334 0
sysctl 2 0K 0K 78643K 6 0
counters 56 35K 36K 78643K 334 0
ioctlops 1 4K 4K 78643K 3674 0
iov 0 0K 32K 78643K 1627 0
mount 1 1K 1K 78643K 1 0
log 0 0K 0K 78643K 5 0
vnodes 1454 91K 92K 78643K 14276 0
UFS quota 1 32K 32K 78643K 1 0
UFS mount 5 36K 36K 78643K 5 0
shm 2 1K 9K 78643K 101 0
VM map 2 1K 1K 78643K 2 0
sem 19 6K 11K 78643K 377 0
dirhash 12 2K 2K 78643K 12 0
ACPI 1697 195K 286K 78643K 12548 0
file desc 18 65K 89K 78643K 11670 0
sigio 0 0K 0K 78643K 273 0
proc 71 87K 124K 78643K 1877 0
subproc 104 6K 6K 78643K 476 0
NFS srvsock 1 0K 0K 78643K 1 0
NFS daemon 1 16K 16K 78643K 1 0
ip_moptions 0 0K 0K 78643K 1120 0
in_multi 88 5K 6K 78643K 683 0
ether_multi 1 0K 0K 78643K 85 0
mrt 1 0K 0K 78643K 49 0
ISOFS mount 1 32K 32K 78643K 1 0
MSDOSFS mount 1 16K 16K 78643K 1 0
ttys 193 864K 864K 78643K 193 0
exec 0 0K 2K 78643K 2625 0
tdb 3 0K 0K 78643K 3 0
pagedep 1 8K 8K 78643K 1 0
inodedep 1 32K 32K 78643K 1 0
newblk 1 0K 0K 78643K 1 0
VM swap 7 26K 26K 78643K 7 0
UVM amap 556 855K 860K 78643K 144906 0
UVM aobj 131 8K 8K 78643K 143 0
memdesc 1 4K 4K 78643K 1 0
crypto data 1 1K 1K 78643K 1 0
ip6_options 0 0K 0K 78643K 347 0
NDP 13 0K 2K 78643K 248 0
temp 149 4739K 4825K 78643K 113964 0
kqueue 12 18K 26K 78643K 727 0
SYN cache 2 8K 16K 78643K 3 0
ddb{0}> show all pools
Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle
plcache 128 22 0 0 1 0 1 1 0 8 0
rtpcb 120 718 0 715 12 11 1 5 0 8 0
rtentry 112 600 0 510 4 1 3 4 0 8 0
unpcb 136 7280 0 7265 83 81 2 9 0 8 1
syncache 296 39 0 39 9 9 0 1 0 8 0
tcpqe 32 71 56 71 1 1 0 1 0 8 0
tcpcb 736 3779 0 3771 132 129 3 15 0 8 1
arp 120 87 0 71 1 0 1 1 0 8 0
inpcb 304 9823 0 9812 146 137 9 16 0 8 8
rttmr 72 12 0 12 4 4 0 1 0 8 0
nd6 48 134 0 113 1 0 1 1 0 8 0
pkpcb 40 27 0 27 7 6 1 1 0 8 1
kcovpl 48 36 0 28 1 0 1 1 0 8 0
ppxss 1248 65 0 65 13 13 0 1 0 8 0
pfstscr 40 142 0 142 9 9 0 1 0 8 0
pffrag 232 54 0 52 6 5 1 1 0 482 0
pffrnode 88 54 0 52 6 5 1 1 0 8 0
pffrent 40 125 0 123 8 7 1 1 0 8 0
pfosfp 40 1428 0 1005 5 0 5 5 0 8 0
pfosfpen 112 1428 0 714 21 0 21 21 0 8 0
pfrktable 1344 198 260 195 2 1 1 1 0 8 0
pftag 88 86 0 79 2 1 1 1 0 8 0
pfqueue 264 3 0 3 1 1 0 1 0 8 0
pfstitem 24 53 0 51 1 0 1 1 0 8 0
pfstkey 112 381 0 379 1 0 1 1 0 8 0
pfstate 320 206 0 204 2 1 1 2 0 8 0
pfrule 1360 595 0 590 7 2 5 5 0 8 3
art_heap8 4096 1 0 0 1 0 1 1 0 8 0
art_heap4 256 2362 0 1945 44 17 27 29 0 8 0
art_table 32 2363 0 1945 4 0 4 4 0 8 0
art_node 16 560 0 480 1 0 1 1 0 8 0
semupl 112 1 0 1 1 1 0 1 0 8 0
semapl 112 361 0 344 1 0 1 1 0 8 0
shmpl 112 140 0 12 4 0 4 4 0 8 0
dirhash 1024 17 0 0 3 0 3 3 0 8 0
dino2pl 256 17760 0 16296 92 0 92 92 0 8 0
ffsino 272 17760 0 16296 98 0 98 98 0 8 0
nchpl 144 33396 0 31772 63 1 62 63 0 8 0
uvmvnodes 80 5926 0 0 121 0 121 121 0 8 0
vnodes 224 5926 0 0 349 0 349 349 0 8 0
namei 1024 123691 0 123691 3 2 1 2 0 8 1
percpumem 16 179 0 139 1 0 1 1 0 8 0
vcpupl 2048 151 0 0 19 0 19 19 0 8 0
vmpool 560 202 0 51 12 1 11 11 0 8 0
pfiaddrpl 120 194 0 193 2 1 1 1 0 8 0
scxspl 216 89897 0 89897 15 14 1 8 0 8 1
plimitpl 152 1451 0 1436 1 0 1 1 0 8 0
sigapl 424 11956 0 11889 11 3 8 8 0 8 0
futexpl 64 116347 0 116339 1 0 1 1 0 8 0
knotepl 120 652 0 0 9 1 8 9 0 8 0
kqueuepl 216 2133 0 2125 35 34 1 5 0 8 0
pipepl 336 2908 0 2880 73 69 4 9 0 8 1
fdescpl 496 11900 0 11869 6 1 5 5 0 8 0
filepl 152 83800 0 83552 161 146 15 23 0 8 4
lockfpl 104 15550 0 15544 36 34 2 4 0 8 1
lockfspl 48 7038 0 7032 6 5 1 2 0 8 0
sessionpl 144 54 0 37 1 0 1 1 0 8 0
pgrppl 48 90 0 73 1 0 1 1 0 8 0
ucredpl 96 10770 0 10757 1 0 1 1 0 8 0
zombiepl 144 11889 0 11889 2 1 1 1 0 8 1
processpl 1064 11956 0 11889 5 0 5 5 0 8 0
procpl 672 30182 0 30098 20 12 8 9 0 8 0
srpgc 96 34 0 34 12 12 0 1 0 8 0
sosppl 168 80 0 80 14 14 0 1 0 8 0
sockpl 480 17927 0 17896 468 455 13 37 0 8 8
mcl64k 65536 17 0 0 3 0 3 3 0 8 0
mcl16k 16384 5 0 0 1 0 1 1 0 8 0
mcl12k 12288 18 0 0 2 0 2 2 0 8 0
mcl9k 9216 9 0 0 1 0 1 1 0 8 0
mcl8k 8192 17 0 0 3 0 3 3 0 8 0
mcl4k 4096 17 0 0 3 0 3 3 0 8 0
mcl2k2 2112 5 0 0 1 0 1 1 0 8 0
mcl2k 2048 320 0 0 22 0 22 22 0 8 0
mtagpl 96 2142 0 0 44 0 44 44 0 8 0
mbufpl 256 2360 0 0 123 0 123 123 0 8 0
bufpl 288 21397 0 15061 453 0 453 453 0 8 0
anonpl 24 3375789 0 3358094 322 172 150 160 0 186 12
amapchunkpl 152 347586 0 346678 83 44 39 47 0 158 1
amappl16 200 38847 0 38153 220 175 45 61 0 8 7
amappl15 192 2990 0 2983 1 0 1 1 0 8 0
amappl14 184 1160 0 1152 1 0 1 1 0 8 0
amappl13 176 707 0 704 1 0 1 1 0 8 0
amappl12 168 3208 0 3202 2 1 1 1 0 8 0
amappl11 160 174 0 159 1 0 1 1 0 8 0
amappl10 152 1511 0 1503 1 0 1 1 0 8 0
amappl9 144 2648 0 2645 1 0 1 1 0 8 0
amappl8 136 1748 0 1633 5 0 5 5 0 8 1
amappl7 128 646 0 633 1 0 1 1 0 8 0
amappl6 120 2485 0 2456 2 1 1 2 0 8 0
amappl5 112 10497 0 10475 1 0 1 1 0 8 0
amappl4 104 2328 0 2292 2 0 2 2 0 8 0
amappl3 96 4125 0 4110 1 0 1 1 0 8 0
amappl2 88 3812 0 3755 3 1 2 3 0 8 0
amappl1 80 209371 0 208768 19 5 14 19 0 8 0
amappl 88 143652 0 143316 9 1 8 8 0 92 0
dma4096 4096 1 0 1 1 1 0 1 0 8 0
dma1024 1024 1 0 0 1 0 1 1 0 8 0
dma256 256 6 0 6 1 1 0 1 0 8 0
dma128 128 253 0 253 1 1 0 1 0 8 0
dma64 64 6 0 6 1 1 0 1 0 8 0
dma32 32 7 0 7 1 1 0 1 0 8 0
dma16 16 18 0 17 1 0 1 1 0 8 0
aobjpl 72 142 0 12 3 0 3 3 0 8 0
uaddrrnd 24 12102 0 11920 2 0 2 2 0 8 0
uaddrbest 32 2 0 0 1 0 1 1 0 8 0
uaddr 24 12102 0 11920 2 0 2 2 0 8 0
vmmpekpl 168 83070 0 82987 5 1 4 4 0 8 0
vmmpepl 168 1074528 0 1071381 352 180 172 172 0 357 32
vmsppl 368 12101 0 11920 19 2 17 17 0 8 0
rwobjpl 56 261626 0 253734 140 24 116 117 0 8 0
pdppl 4096 24211 0 23991 673 453 220 222 0 8 0
pvpl 32 5522354 0 5500019 542 303 239 252 0 265 26
pmappl 248 12101 0 11920 12 0 12 12 0 8 0
extentpl 40 58 0 38 1 0 1 1 0 8 0
phpool 112 1775 0 676 32 0 32 32 0 8 0
ddb{0}> machine ddbcpu 0
Invalid cpu 0
ddb{0}> trace
pf_anchor_global_RB_REMOVE(ffffffff829c92e0,ffff800000cfc000) at pf_anchor_global_RB_REMOVE+0x58 sys/net/pf_ruleset.c:84
pf_remove_if_empty_ruleset(ffff800000cfc490) at pf_remove_if_empty_ruleset+0xdd sys/net/pf_ruleset.c:300
pfi_dynaddr_setup(ffff800000b9f2b8,0) at pfi_dynaddr_setup+0x411 sys/net/pf_if.c:485
pfioctl(4900,cd60441a,ffff800000be5000,3,ffff8000246417a8) at pfioctl+0x84eb pf_addr_setup sys/net/pf_ioctl.c:892 [inline]
pfioctl(4900,cd60441a,ffff800000be5000,3,ffff8000246417a8) at pfioctl+0x84eb sys/net/pf_ioctl.c:1646
VOP_IOCTL(fffffd806f7baaa8,cd60441a,ffff800000be5000,3,fffffd807f7d8540,ffff8000246417a8) at VOP_IOCTL+0x96 sys/kern/vfs_vops.c:264
vn_ioctl(fffffd806327f098,cd60441a,ffff800000be5000,ffff8000246417a8) at vn_ioctl+0xbc sys/kern/vfs_vnops.c:531
sys_ioctl(ffff8000246417a8,ffff800025ec49e8,ffff800025ec4a40) at sys_ioctl+0x4a2
syscall(ffff800025ec4ab0) at syscall+0x489 mi_syscall sys/sys/syscall_mi.h:102 [inline]
syscall(ffff800025ec4ab0) at syscall+0x489 sys/arch/amd64/amd64/trap.c:585
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0xf8938c0a70, count: -9
ddb{0}> machine ddbcpu 1
Stopped at x86_ipi_db+0x1a: addq $0x8,%rsp
ddb{1}> trace
x86_ipi_db(ffff800020ce8ff0) at x86_ipi_db+0x1a sys/arch/amd64/amd64/db_interface.c:393
x86_ipi_handler() at x86_ipi_handler+0xb7 sys/arch/amd64/amd64/ipi.c:106
Xresume_lapic_ipi() at Xresume_lapic_ipi+0x23
acpicpu_idle() at acpicpu_idle+0x312 sys/dev/acpi/acpicpu.c:1206
sched_idle(ffff800020ce8ff0) at sched_idle+0x417 sys/kern/kern_sched.c:178
end trace frame: 0x0, count: -5