uvm_fault(0xfffffd806bc09880, 0x8059, 0, 1) -> e kernel: page fault trap, code=0 Stopped at pfi_dynaddr_remove+0x4a: movq 0x58(%r15),%r12 ddb> ddb> set $lines = 0 ddb> set $maxwidth = 0 ddb> show panic kernel page fault uvm_fault(0xfffffd806bc09880, 0x8059, 0, 1) -> e pfi_dynaddr_remove(ffff800000aee228) at pfi_dynaddr_remove+0x4a sys/net/pf_if.c:602 end trace frame: 0xffff80002044e9b0, count: 0 ddb> trace pfi_dynaddr_remove(ffff800000aee228) at pfi_dynaddr_remove+0x4a sys/net/pf_if.c:602 pf_rm_rule(0,ffff800000aedfe0) at pf_rm_rule+0x3cc sys/net/pf_ioctl.c:304 pfioctl(4900,cd604404,ffff8000009f4000,2,ffff80001d414290) at pfioctl+0x3082 VOP_IOCTL(fffffd8055f168f8,cd604404,ffff8000009f4000,2,fffffd806c3beae0,ffff80001d414290) at VOP_IOCTL+0x88 sys/kern/vfs_vops.c:291 vn_ioctl(fffffd80636ff3d0,cd604404,ffff8000009f4000,ffff80001d414290) at vn_ioctl+0xb7 sys/kern/vfs_vnops.c:533 sys_ioctl(ffff80001d414290,ffff80002044edf8,ffff80002044ee40) at sys_ioctl+0x5b9 syscall(ffff80002044eec0) at syscall+0x507 sys/arch/amd64/amd64/trap.c:555 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xdfe7605e760, count: -8 ddb> show registers rdi 0x2 rsi 0x2 rbp 0xffff80002044e950 rbx 0xffff800000aee228 rdx 0x14e rcx 0xffff80001d643000 rax 0xffff8000009f2e80 r8 0xf8 r9 0x5 r10 0xffff8000009f2e80 r11 0x148f92f14ac31ae8 r12 0xffff800000aee018 r13 0xffff800000aee2b0 r14 0xffff800000aee228 r15 0x8001 __ALIGN_SIZE+0x7001 rip 0xffffffff813c050a pfi_dynaddr_remove+0x4a cs 0x8 rflags 0x10202 __ALIGN_SIZE+0xf202 rsp 0xffff80002044e920 ss 0x10 pfi_dynaddr_remove+0x4a: movq 0x58(%r15),%r12 ddb> show proc PROC (syz-executor.0) pid=523079 stat=onproc flags process=0 proc=4000000 pri=86, usrpri=86, nice=20 forw=0xffffffffffffffff, list=0xffff80001d415b40,0xffffffff8254b668 process=0xffff8000ffff6010 user=0xffff800020449000, vmspace=0xfffffd806bc09880 estcpu=36, cpticks=1, pctcpu=0.0 user=0, sys=1, intr=0 ddb> ps PID TID PPID UID S FLAGS WAIT COMMAND 6444 165790 56817 0 2 0 syz-executor.0 6444 456359 56817 0 3 0x4000080 netio syz-executor.0 * 6444 523079 56817 0 7 0x4000000 syz-executor.0 45196 87735 0 0 3 0x14200 bored sosplice 33657 77135 54180 0 2 0x2 syz-executor.1 56817 171750 54180 0 3 0x82 nanosleep syz-executor.0 54180 371454 77603 0 3 0x82 thrsleep syz-fuzzer 54180 288509 77603 0 3 0x4000082 nanosleep syz-fuzzer 54180 926 77603 0 3 0x4000082 thrsleep syz-fuzzer 54180 413034 77603 0 3 0x4000082 thrsleep syz-fuzzer 54180 455746 77603 0 3 0x4000082 thrsleep syz-fuzzer 54180 414841 77603 0 3 0x4000082 thrsleep syz-fuzzer 54180 328551 77603 0 3 0x4000082 thrsleep syz-fuzzer 54180 244258 77603 0 3 0x4000082 kqread syz-fuzzer 77603 357935 28428 0 3 0x10008a pause ksh 28428 137223 6871 0 3 0x92 select sshd 55726 390969 1 0 3 0x100083 ttyin getty 6871 275485 1 0 3 0x80 select sshd 52064 66260 3912 73 3 0x100090 kqread syslogd 3912 243684 1 0 3 0x100082 netio syslogd 94132 133011 1 77 3 0x100090 poll dhclient 75236 285535 1 0 3 0x80 poll dhclient 54733 396345 0 0 2 0x14200 zerothread 81217 92208 0 0 3 0x14200 aiodoned aiodoned 69363 458173 0 0 3 0x14200 syncer update 6287 84507 0 0 3 0x14200 cleaner cleaner 84417 341398 0 0 3 0x14200 reaper reaper 29901 282035 0 0 3 0x14200 pgdaemon pagedaemon 59708 373788 0 0 3 0x14200 bored crynlk 47073 318506 0 0 3 0x14200 bored crypto 94940 389591 0 0 3 0x40014200 acpi0 acpi0 9537 109219 0 0 3 0x14200 bored softnet 94353 440415 0 0 3 0x14200 bored systqmp 18549 120738 0 0 3 0x14200 bored systq 78922 210944 0 0 3 0x40014200 bored softclock 96952 513193 0 0 3 0x40014200 idle0 34155 499891 0 0 3 0x14200 bored smr 1 187485 0 0 3 0x82 wait init 0 0 -1 0 3 0x10200 scheduler swapper ddb> show all locks No such command ddb> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 9522 6366K 8046K 78643K 31888 0 pcb 14 8K 8K 78643K 438 0 rtable 123 6K 6K 78643K 2317 0 ifaddr 90 18K 18K 78643K 524 0 counters 19 16K 16K 78643K 19 0 ioctlops 1 4K 4K 78643K 3616 0 iov 0 0K 16K 78643K 85 0 mount 1 1K 1K 78643K 1 0 vnodes 1241 78K 78K 78643K 4377 0 UFS quota 1 32K 32K 78643K 1 0 UFS mount 5 36K 36K 78643K 5 0 shm 2 1K 5K 78643K 19 0 VM map 2 0K 0K 78643K 2 0 sem 12 1K 1K 78643K 34 0 dirhash 12 2K 2K 78643K 12 0 ACPI 1794 195K 288K 78643K 12646 0 file desc 5 13K 25K 78643K 7567 0 sigio 0 0K 0K 78643K 54 0 proc 49 38K 63K 78643K 460 0 subproc 32 2K 2K 78643K 51 0 NFS srvsock 1 0K 0K 78643K 1 0 NFS daemon 1 16K 16K 78643K 1 0 ip_moptions 0 0K 0K 78643K 25 0 in_multi 68 3K 3K 78643K 98 0 ether_multi 1 0K 0K 78643K 8 0 mrt 0 0K 0K 78643K 2 0 ISOFS mount 1 32K 32K 78643K 1 0 MSDOSFS mount 1 16K 16K 78643K 1 0 ttys 61 281K 281K 78643K 61 0 exec 0 0K 1K 78643K 244 0 pfkey data 0 0K 1K 78643K 2 0 pagedep 1 8K 8K 78643K 1 0 inodedep 1 32K 32K 78643K 1 0 newblk 1 0K 0K 78643K 1 0 VM swap 7 26K 26K 78643K 7 0 UVM amap 123 22K 31K 78643K 16623 0 UVM aobj 130 4K 4K 78643K 130 0 memdesc 1 4K 4K 78643K 1 0 crypto data 1 1K 1K 78643K 1 0 ip6_options 0 0K 0K 78643K 33 0 NDP 14 0K 0K 78643K 38 0 temp 152 3045K 3111K 78643K 25837 0 kqueue 0 0K 0K 78643K 18 0 SYN cache 2 16K 16K 78643K 2 0 ddb> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle arp 64 9 0 2 1 0 1 1 0 8 0 rtpcb 80 41 0 39 1 0 1 1 0 8 0 rtentry 112 58 0 12 2 0 2 2 0 8 0 unpcb 120 4856 0 4845 7 6 1 2 0 8 0 syncache 264 6 0 6 2 2 0 1 0 8 0 tcpqe 32 27 0 27 1 1 0 1 0 8 0 tcpcb 544 1214 0 1209 2 1 1 2 0 8 0 ipq 40 2 0 2 2 2 0 1 0 8 0 ipqe 40 8 0 8 2 2 0 1 0 8 0 inpcb 280 3771 0 3761 13 11 2 3 0 8 1 nd6 48 6 0 2 1 0 1 1 0 8 0 pkpcb 40 2 0 2 1 1 0 1 0 8 0 ppxss 1128 12 0 12 2 2 0 1 0 8 0 pfosfp 40 1 0 0 1 0 1 1 0 8 0 pfosfpen 112 1 0 0 1 0 1 1 0 8 0 pfrktable 1344 969 0 964 1 0 1 1 0 8 0 pftag 88 4 0 2 1 0 1 1 0 8 0 pfqueue 264 2 0 0 1 0 1 1 0 8 0 pfrule 1360 774 0 415 30 0 30 30 0 8 0 art_heap8 4096 1 0 0 1 0 1 1 0 8 0 art_heap4 256 261 0 43 14 0 14 14 0 8 0 art_table 32 262 0 43 2 0 2 2 0 8 0 art_node 16 57 0 16 1 0 1 1 0 8 0 sysvmsgpl 40 57 0 23 1 0 1 1 0 8 0 semapl 112 32 0 22 1 0 1 1 0 8 0 shmpl 112 128 0 0 4 0 4 4 0 8 0 dirhash 1024 17 0 0 3 0 3 3 0 8 0 dino1pl 128 9137 0 7733 46 0 46 46 0 8 0 ffsino 240 9137 0 7733 83 0 83 83 0 8 0 nchpl 144 18635 0 16958 63 0 63 63 0 8 0 uvmvnodes 72 5926 0 0 108 0 108 108 0 8 0 vnodes 208 5926 0 0 312 0 312 312 0 8 0 namei 1024 56540 0 56540 1 0 1 1 0 8 1 pfiaddrpl 120 400 0 384 1 0 1 1 0 8 0 scsiplug 64 1 0 1 1 1 0 1 0 8 0 scxspl 192 53525 0 53525 1 0 1 1 0 8 1 plimitpl 152 44 0 37 1 0 1 1 0 8 0 sigapl 432 7735 0 7722 2 0 2 2 0 8 0 futexpl 56 86993 0 86993 1 0 1 1 0 8 1 knotepl 112 2284 0 2265 2 1 1 2 0 8 0 kqueuepl 104 3226 0 3222 1 0 1 1 0 8 0 pipepl 112 996 0 977 1 0 1 1 0 8 0 fdescpl 424 7736 0 7722 2 0 2 2 0 8 0 filepl 120 42148 0 42043 14 10 4 6 0 8 0 lockfpl 104 338 0 337 1 0 1 1 0 8 0 lockfspl 48 134 0 133 1 0 1 1 0 8 0 sessionpl 112 18 0 8 1 0 1 1 0 8 0 pgrppl 48 36 0 26 1 0 1 1 0 8 0 ucredpl 96 811 0 804 1 0 1 1 0 8 0 zombiepl 144 7722 0 7722 1 0 1 1 0 8 1 processpl 872 7751 0 7722 4 0 4 4 0 8 0 procpl 632 15868 0 15830 4 0 4 4 0 8 0 sosppl 128 9 0 9 3 3 0 1 0 8 0 sockpl 384 8683 0 8660 28 24 4 7 0 8 1 mcl64k 65536 46 0 46 10 10 0 2 0 8 0 mcl16k 16384 14 0 14 10 10 0 1 0 8 0 mcl12k 12288 47 0 47 11 11 0 1 0 8 0 mcl9k 9216 17 0 17 11 11 0 1 0 8 0 mcl8k 8192 390 0 390 9 8 1 1 0 8 1 mcl4k 4096 349 0 349 10 9 1 1 0 8 1 mcl2k2 2112 161 0 161 10 9 1 1 0 8 1 mcl2k 2048 64722 0 64677 31 24 7 12 0 8 1 mtagpl 80 14 0 14 2 1 1 1 0 8 1 mbufpl 256 138019 0 137935 14 5 9 10 0 8 0 bufpl 280 14273 0 8089 442 0 442 442 0 8 0 anonpl 16 463249 0 447339 83 18 65 78 0 107 0 amapchunkpl 152 25993 0 25860 20 14 6 19 0 158 0 amappl16 192 32654 0 31785 55 11 44 53 0 8 0 amappl15 184 52 0 48 1 0 1 1 0 8 0 amappl14 176 41 0 37 1 0 1 1 0 8 0 amappl13 168 3517 0 3515 1 0 1 1 0 8 0 amappl12 160 6 0 5 2 1 1 1 0 8 0 amappl11 152 50 0 39 1 0 1 1 0 8 0 amappl10 144 12 0 9 1 0 1 1 0 8 0 amappl9 136 4585 0 4579 1 0 1 1 0 8 0 amappl8 128 4156 0 4122 2 0 2 2 0 8 0 amappl7 120 97 0 85 1 0 1 1 0 8 0 amappl6 112 54 0 49 1 0 1 1 0 8 0 amappl5 104 163 0 153 1 0 1 1 0 8 0 amappl4 96 7960 0 7934 1 0 1 1 0 8 0 amappl3 88 180 0 172 1 0 1 1 0 8 0 amappl2 80 64942 0 64872 3 1 2 3 0 8 0 amappl1 72 121950 0 121531 26 16 10 20 0 8 0 amappl 80 16099 0 16058 1 0 1 1 0 84 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 253 0 253 1 1 0 1 0 8 0 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 64 129 0 0 3 0 3 3 0 8 0 uaddrrnd 24 7736 0 7722 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 7736 0 7722 1 0 1 1 0 8 0 vmmpekpl 168 33023 0 33000 2 0 2 2 0 8 0 vmmpepl 168 858712 0 856745 126 35 91 113 0 357 5 vmsppl 272 7735 0 7722 2 1 1 2 0 8 0 pdppl 4096 15478 0 15444 6 1 5 6 0 8 0 pvpl 32 1444869 0 1425846 226 71 155 190 0 265 1 pmappl 200 7735 0 7722 1 0 1 1 0 8 0 extentpl 40 46 0 29 1 0 1 1 0 8 0 phpool 112 228 0 71 5 0 5 5 0 8 0