uvm_fault(0xfffffd8067bfaef0, 0x54c, 0, 1) -> e kernel: page fault trap, code=0 Stopped at pfr_detach_table+0x20: movl 0x4c4(%r14),%r15d ddb> ddb> set $lines = 0 ddb> set $maxwidth = 0 ddb> show panic kernel page fault uvm_fault(0xfffffd8067bfaef0, 0x54c, 0, 1) -> e pfr_detach_table(88) at pfr_detach_table+0x20 sys/net/pf_table.c:2240 end trace frame: 0xffff80001e030100, count: 0 ddb> trace pfr_detach_table(88) at pfr_detach_table+0x20 sys/net/pf_table.c:2240 pf_tbladdr_remove(ffff800000af7248) at pf_tbladdr_remove+0x4e sys/net/pf.c:1525 pf_rm_rule(0,ffff800000af7000) at pf_rm_rule+0x40c sys/net/pf_ioctl.c:311 pfioctl(4900,cd604404,ffff8000009fa000,2,ffff8000ffff2290) at pfioctl+0x3082 VOP_IOCTL(fffffd8063ca0750,cd604404,ffff8000009fa000,2,fffffd806c3beba0,ffff8000ffff2290) at VOP_IOCTL+0x88 sys/kern/vfs_vops.c:291 vn_ioctl(fffffd806a29a270,cd604404,ffff8000009fa000,ffff8000ffff2290) at vn_ioctl+0xb7 sys/kern/vfs_vnops.c:533 sys_ioctl(ffff8000ffff2290,ffff80001e0305a8,ffff80001e0305f0) at sys_ioctl+0x5b9 syscall(ffff80001e030670) at syscall+0x507 sys/arch/amd64/amd64/trap.c:555 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x6340d436240, count: -9 ddb> show registers rdi 0xffffffff81247e70 pfr_detach_table+0x20 rsi 0x247 rbp 0xffff80001e0300c0 rbx 0xffff800000af7248 rdx 0x248 rcx 0xffff800020645000 rax 0xffff800020645000 r8 0xf8 r9 0x5 r10 0xffff8000009f1b40 r11 0xaaa46f6543eda399 r12 0xffff800000af7358 r13 0xffff800000af72d0 r14 0x88 r15 0x88 rip 0xffffffff81247e70 pfr_detach_table+0x20 cs 0x8 rflags 0x10246 __ALIGN_SIZE+0xf246 rsp 0xffff80001e030090 ss 0x10 pfr_detach_table+0x20: movl 0x4c4(%r14),%r15d ddb> show proc PROC (syz-executor.1) pid=116725 stat=onproc flags process=0 proc=4000000 pri=81, usrpri=81, nice=20 forw=0xffffffffffffffff, list=0xffff8000ffff2018,0xffff8000ffff2ef8 process=0xffff8000ffff6010 user=0xffff80001e02b000, vmspace=0xfffffd8067bfaef0 estcpu=36, cpticks=0, pctcpu=0.0 user=0, sys=0, intr=0 ddb> ps PID TID PPID UID S FLAGS WAIT COMMAND 25421 35844 47173 0 2 0 syz-executor.0 25421 517860 47173 0 3 0x4000080 fsleep syz-executor.0 83930 360873 16551 0 2 0 syz-executor.1 *83930 116725 16551 0 7 0x4000000 syz-executor.1 47173 376230 95141 0 3 0x82 nanosleep syz-executor.0 16551 16083 95141 0 3 0x82 nanosleep syz-executor.1 74426 420395 0 0 3 0x14200 bored sosplice 35612 451936 0 0 3 0x14200 acct acct 95141 19702 48726 0 3 0x82 thrsleep syz-fuzzer 95141 180863 48726 0 3 0x4000082 thrsleep syz-fuzzer 95141 520511 48726 0 3 0x4000082 thrsleep syz-fuzzer 95141 245644 48726 0 3 0x4000082 thrsleep syz-fuzzer 95141 265447 48726 0 3 0x4000082 thrsleep syz-fuzzer 95141 330094 48726 0 3 0x4000082 thrsleep syz-fuzzer 95141 177287 48726 0 3 0x4000082 thrsleep syz-fuzzer 95141 502988 48726 0 3 0x4000082 kqread syz-fuzzer 48726 417943 32241 0 3 0x10008a pause ksh 32241 261904 68628 0 3 0x92 select sshd 53236 193660 1 0 3 0x100083 ttyin getty 68628 215742 1 0 3 0x80 select sshd 81013 323066 99320 73 3 0x100090 kqread syslogd 99320 110692 1 0 3 0x100082 netio syslogd 77760 45872 1 77 3 0x100090 poll dhclient 39263 194083 1 0 3 0x80 poll dhclient 41408 419308 0 0 2 0x14200 zerothread 35992 62653 0 0 3 0x14200 aiodoned aiodoned 40201 48792 0 0 3 0x14200 syncer update 11970 331219 0 0 3 0x14200 cleaner cleaner 39599 140737 0 0 3 0x14200 reaper reaper 46860 109370 0 0 3 0x14200 pgdaemon pagedaemon 95704 455626 0 0 3 0x14200 bored crynlk 45694 165949 0 0 3 0x14200 bored crypto 15031 438785 0 0 3 0x40014200 acpi0 acpi0 33745 491431 0 0 3 0x14200 bored softnet 13185 47372 0 0 3 0x14200 bored systqmp 49375 14880 0 0 3 0x14200 bored systq 74351 288517 0 0 3 0x40014200 bored softclock 62836 170987 0 0 3 0x40014200 idle0 40541 205188 0 0 3 0x14200 bored smr 1 316109 0 0 3 0x82 wait init 0 0 -1 0 3 0x10200 scheduler swapper ddb> show all locks No such command ddb> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 9459 6341K 6663K 78643K 17032 0 pcb 13 8K 8K 78643K 9993 0 rtable 120 6K 7K 78643K 607 0 ifaddr 48 12K 12K 78643K 121 0 counters 19 16K 16K 78643K 19 0 ioctlops 1 4K 4K 78643K 3049 0 iov 0 0K 16K 78643K 2525 0 mount 1 1K 1K 78643K 1 0 vnodes 1211 76K 77K 78643K 4906 0 UFS quota 1 32K 32K 78643K 1 0 UFS mount 5 36K 36K 78643K 5 0 shm 2 1K 5K 78643K 318 0 VM map 2 0K 0K 78643K 2 0 sem 12 0K 0K 78643K 442 0 dirhash 12 2K 2K 78643K 12 0 ACPI 1794 195K 288K 78643K 12646 0 file desc 6 17K 25K 78643K 46745 0 sigio 0 0K 0K 78643K 7007 0 proc 63 39K 63K 78643K 4776 0 subproc 32 2K 2K 78643K 119 0 NFS srvsock 1 0K 0K 78643K 1 0 NFS daemon 1 16K 16K 78643K 1 0 ip_moptions 0 0K 0K 78643K 917 0 in_multi 33 2K 2K 78643K 477 0 ether_multi 1 0K 0K 78643K 1 0 ISOFS mount 1 32K 32K 78643K 1 0 MSDOSFS mount 1 16K 16K 78643K 1 0 ttys 67 307K 307K 78643K 67 0 exec 0 0K 1K 78643K 958 0 pagedep 1 8K 8K 78643K 1 0 inodedep 1 32K 32K 78643K 1 0 newblk 1 0K 0K 78643K 1 0 VM swap 7 26K 26K 78643K 7 0 UVM amap 167 56K 56K 78643K 97113 0 UVM aobj 130 4K 4K 78643K 133 0 memdesc 1 4K 4K 78643K 1 0 crypto data 1 1K 1K 78643K 1 0 ip6_options 0 0K 0K 78643K 75 0 NDP 5 0K 0K 78643K 24 0 temp 108 3025K 3103K 78643K 1238201 0 kqueue 0 0K 0K 78643K 246 0 SYN cache 2 16K 16K 78643K 2 0 ddb> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle arp 64 16 0 10 1 0 1 1 0 8 0 rtpcb 80 171 0 169 1 0 1 1 0 8 0 rtentry 112 95 0 51 2 0 2 2 0 8 0 unpcb 120 51816 0 51808 25 24 1 2 0 8 0 syncache 264 4 0 4 1 1 0 1 0 8 0 sackhl 24 9 0 9 4 4 0 1 0 8 0 tcpcb 544 824 0 820 1 0 1 1 0 8 0 inpcb 280 22828 0 22821 6 5 1 2 0 8 0 nd6 48 14 0 10 1 0 1 1 0 8 0 pfosfp 40 2 0 1 2 1 1 1 0 8 0 pfosfpen 112 2 0 1 2 1 1 1 0 8 0 pfrktable 1344 91 0 84 1 0 1 1 0 8 0 pftag 88 25 0 20 1 0 1 1 0 8 0 pfqueue 264 11 0 0 1 0 1 1 0 8 0 pfrule 1360 670 0 187 41 0 41 41 0 8 0 art_heap8 4096 1 0 0 1 0 1 1 0 8 0 art_heap4 256 427 0 215 14 0 14 14 0 8 0 art_table 32 428 0 215 2 0 2 2 0 8 0 art_node 16 94 0 54 1 0 1 1 0 8 0 sysvmsgpl 40 8 0 0 1 0 1 1 0 8 0 semapl 112 440 0 430 1 0 1 1 0 8 0 shmpl 112 131 0 3 4 0 4 4 0 8 0 dirhash 1024 17 0 0 3 0 3 3 0 8 0 dino1pl 128 59118 0 57550 51 0 51 51 0 8 0 ffsino 240 59118 0 57550 93 0 93 93 0 8 0 nchpl 144 126547 0 124778 67 1 66 66 0 8 0 uvmvnodes 72 5926 0 0 108 0 108 108 0 8 0 vnodes 208 5926 0 0 312 0 312 312 0 8 0 namei 1024 320582 0 320582 1 0 1 1 0 8 1 vcpupl 1984 3 0 0 1 0 1 1 0 8 0 vmpool 528 3 0 0 1 0 1 1 0 8 0 pfiaddrpl 120 242 0 27 7 0 7 7 0 8 0 scxspl 192 358282 0 358282 1 0 1 1 0 8 1 plimitpl 152 31 0 24 1 0 1 1 0 8 0 sigapl 432 46901 0 46887 2 0 2 2 0 8 0 futexpl 56 453202 0 453201 1 0 1 1 0 8 0 knotepl 112 2695 0 2676 1 0 1 1 0 8 0 kqueuepl 104 37942 0 37932 5 4 1 2 0 8 0 pipepl 112 11136 0 11117 3 2 1 2 0 8 0 fdescpl 424 46902 0 46887 2 0 2 2 0 8 0 filepl 120 247143 0 247036 53 49 4 6 0 8 0 lockfpl 104 4423 0 4422 1 0 1 1 0 8 0 lockfspl 48 1953 0 1952 1 0 1 1 0 8 0 sessionpl 112 22 0 12 1 0 1 1 0 8 0 pgrppl 48 496 0 486 1 0 1 1 0 8 0 ucredpl 96 20619 0 20612 1 0 1 1 0 8 0 zombiepl 144 46889 0 46889 1 0 1 1 0 8 1 processpl 872 46920 0 46889 4 0 4 4 0 8 0 procpl 632 95221 0 95181 4 0 4 4 0 8 0 sosppl 128 22 0 22 3 3 0 1 0 8 0 sockpl 384 75193 0 75176 103 99 4 7 0 8 2 mcl64k 65536 435 0 435 21 21 0 1 0 8 0 mcl16k 16384 195 0 195 32 31 1 1 0 8 1 mcl12k 12288 701 0 701 38 38 0 1 0 8 0 mcl9k 9216 378 0 378 37 37 0 1 0 8 0 mcl8k 8192 1143 0 1143 46 45 1 1 0 8 1 mcl4k 4096 3287 0 3287 36 35 1 1 0 8 1 mcl2k2 2112 217 0 217 41 41 0 1 0 8 0 mcl2k 2048 80830 0 80780 41 34 7 11 0 8 0 mtagpl 80 4 0 4 2 2 0 1 0 8 0 mbufpl 256 361738 0 361640 27 19 8 14 0 8 0 bufpl 280 91764 0 85580 442 0 442 442 0 8 0 anonpl 16 2949547 0 2944344 161 138 23 39 0 107 0 amapchunkpl 152 146095 0 145997 21 16 5 9 0 158 0 amappl16 192 199088 0 198834 135 122 13 25 0 8 0 amappl15 184 75 0 71 1 0 1 1 0 8 0 amappl14 176 64 0 62 1 0 1 1 0 8 0 amappl13 168 15671 0 15669 6 5 1 1 0 8 0 amappl12 160 8243 0 8243 2 2 0 1 0 8 0 amappl11 152 6196 0 6183 1 0 1 1 0 8 0 amappl10 144 14831 0 14829 1 0 1 1 0 8 0 amappl9 136 2517 0 2512 1 0 1 1 0 8 0 amappl8 128 2541 0 2461 3 0 3 3 0 8 0 amappl7 120 14700 0 14688 1 0 1 1 0 8 0 amappl6 112 6189 0 6180 1 0 1 1 0 8 0 amappl5 104 8804 0 8794 1 0 1 1 0 8 0 amappl4 96 59719 0 59687 1 0 1 1 0 8 0 amappl3 88 1371 0 1364 1 0 1 1 0 8 0 amappl2 80 377014 0 376933 3 1 2 3 0 8 0 amappl1 72 755066 0 754640 26 16 10 20 0 8 0 amappl 80 95501 0 95461 1 0 1 1 0 84 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 253 0 253 1 1 0 1 0 8 0 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 64 132 0 3 3 0 3 3 0 8 0 uaddrrnd 24 46905 0 46887 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 46905 0 46887 1 0 1 1 0 8 0 vmmpekpl 168 215987 0 215958 2 0 2 2 0 8 0 vmmpepl 168 5197142 0 5195647 200 134 66 78 0 357 0 vmsppl 272 46904 0 46887 3 1 2 2 0 8 0 pdppl 4096 93816 0 93777 7 2 5 6 0 8 0 pvpl 32 8464391 0 8455971 502 432 70 115 0 265 0 pmappl 200 46904 0 46887 1 0 1 1 0 8 0 extentpl 40 46 0 29 1 0 1 1 0 8 0 phpool 112 369 0 190 7 1 6 6 0 8 0