panic: unhandled af 102
Stopped at db_enter+0x18: addq $0x8,%rsp
TID PID UID PRFLAGS PFLAGS CPU COMMAND
*171435 52075 0 0x10 0x4000000 0 syz-executor.1
db_enter() at db_enter+0x18 sys/arch/amd64/amd64/db_interface.c:398
panic(ffffffff821b8c65) at panic+0x15c sys/kern/subr_prf.c:207
unhandled_af(66) at unhandled_af+0x16
pf_addrcpy(ffff80001f61e7e8,ffff80001f61eae0,66) at pf_addrcpy+0x99 sys/net/pf.c:409
pfioctl(4900,c0504417,ffff80001f61eae0,1,ffff8000ffff2c70) at pfioctl+0x43c0 sys/net/pf_ioctl.c:1827
VOP_IOCTL(fffffd805db34750,c0504417,ffff80001f61eae0,1,fffffd806c3be660,ffff8000ffff2c70) at VOP_IOCTL+0x88 sys/kern/vfs_vops.c:291
vn_ioctl(fffffd8057d0cf00,c0504417,ffff80001f61eae0,ffff8000ffff2c70) at vn_ioctl+0xb7 sys/kern/vfs_vnops.c:533
sys_ioctl(ffff8000ffff2c70,ffff80001f61ebf8,ffff80001f61ec40) at sys_ioctl+0x5b9
syscall(ffff80001f61ecc0) at syscall+0x507 sys/arch/amd64/amd64/trap.c:555
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x4789677fba0, count: 5
https://www.openbsd.org/ddb.html describes the minimum info required in bug
reports. Insufficient info makes it difficult to find and fix bugs.
ddb>
ddb> set $lines = 0
ddb> set $maxwidth = 0
ddb> show panic
unhandled af 102
ddb> trace
db_enter() at db_enter+0x18 sys/arch/amd64/amd64/db_interface.c:398
panic(ffffffff821b8c65) at panic+0x15c sys/kern/subr_prf.c:207
unhandled_af(66) at unhandled_af+0x16
pf_addrcpy(ffff80001f61e7e8,ffff80001f61eae0,66) at pf_addrcpy+0x99 sys/net/pf.c:409
pfioctl(4900,c0504417,ffff80001f61eae0,1,ffff8000ffff2c70) at pfioctl+0x43c0 sys/net/pf_ioctl.c:1827
VOP_IOCTL(fffffd805db34750,c0504417,ffff80001f61eae0,1,fffffd806c3be660,ffff8000ffff2c70) at VOP_IOCTL+0x88 sys/kern/vfs_vops.c:291
vn_ioctl(fffffd8057d0cf00,c0504417,ffff80001f61eae0,ffff8000ffff2c70) at vn_ioctl+0xb7 sys/kern/vfs_vnops.c:533
sys_ioctl(ffff8000ffff2c70,ffff80001f61ebf8,ffff80001f61ec40) at sys_ioctl+0x5b9
syscall(ffff80001f61ecc0) at syscall+0x507 sys/arch/amd64/amd64/trap.c:555
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x4789677fba0, count: -10
ddb> show registers
rdi 0xffffffff817e67d7 db_enter+0x17
rsi 0xc14
rbp 0xffff80001f61e6a0
rbx 0xffff80001f61e750
rdx 0xc15
rcx 0xffff80002004a000
rax 0xffff80002004a000
r8 0xffff80001f61e660
r9 0x1
r10 0xffff800000a5d9c0
r11 0xfc8e99a05fb9de82
r12 0x3000000008
r13 0xffff80001f61e6b0
r14 0x100
r15 0x1
rip 0xffffffff817e67d8 db_enter+0x18
cs 0x8
rflags 0x246
rsp 0xffff80001f61e690
ss 0x10
db_enter+0x18: addq $0x8,%rsp
ddb> show proc
PROC (syz-executor.1) pid=171435 stat=onproc
flags process=10<SUGID> proc=4000000<THREAD>
pri=77, usrpri=77, nice=20
forw=0xffffffffffffffff, list=0xffff8000ffff3650,0xffffffff82560d28
process=0xffff8000ffff7b50 user=0xffff80001f619000, vmspace=0xfffffd8054237120
estcpu=36, cpticks=0, pctcpu=0.0
user=0, sys=0, intr=0
ddb> ps
PID TID PPID UID S FLAGS WAIT COMMAND
52075 420643 59336 0 2 0x10 syz-executor.1
*52075 171435 59336 0 7 0x4000010 syz-executor.1
59336 363682 57261 0 3 0x82 nanosleep syz-executor.1
85245 513596 0 0 3 0x14200 bored sosplice
25236 238349 57261 0 3 0x82 nanosleep syz-executor.0
57261 237752 18476 0 3 0x82 thrsleep syz-fuzzer
57261 355420 18476 0 3 0x4000082 nanosleep syz-fuzzer
57261 466896 18476 0 3 0x4000082 thrsleep syz-fuzzer
57261 85095 18476 0 3 0x4000082 thrsleep syz-fuzzer
57261 166560 18476 0 3 0x4000082 thrsleep syz-fuzzer
57261 281975 18476 0 3 0x4000082 thrsleep syz-fuzzer
57261 118076 18476 0 3 0x4000082 thrsleep syz-fuzzer
57261 302710 18476 0 3 0x4000082 kqread syz-fuzzer
18476 320235 7874 0 3 0x10008a pause ksh
7874 499669 81395 0 3 0x92 select sshd
19424 47473 1 0 3 0x100083 ttyin getty
81395 402530 1 0 3 0x80 select sshd
44610 182302 36544 73 3 0x100090 kqread syslogd
36544 306472 1 0 3 0x100082 netio syslogd
2093 268651 1 77 3 0x100090 poll dhclient
46554 350017 1 0 3 0x80 poll dhclient
1109 208050 0 0 2 0x14200 zerothread
13546 195379 0 0 3 0x14200 aiodoned aiodoned
30074 336458 0 0 3 0x14200 syncer update
85850 279104 0 0 3 0x14200 cleaner cleaner
56854 177342 0 0 3 0x14200 reaper reaper
52277 93512 0 0 3 0x14200 pgdaemon pagedaemon
79376 471946 0 0 3 0x14200 bored crynlk
99152 357318 0 0 3 0x14200 bored crypto
40646 339029 0 0 3 0x40014200 acpi0 acpi0
89733 397540 0 0 3 0x14200 bored softnet
74833 148980 0 0 3 0x14200 bored systqmp
60277 238532 0 0 3 0x14200 bored systq
10147 370764 0 0 3 0x40014200 bored softclock
42012 257375 0 0 3 0x40014200 idle0
81045 121260 0 0 3 0x14200 bored smr
1 147780 0 0 3 0x82 wait init
0 0 -1 0 3 0x10200 scheduler swapper
ddb> show all locks
No such command
ddb> show malloc
Type InUse MemUse HighUse Limit Requests Type Lim
devbuf 9463 6343K 6988K 78643K 30342 0
pcb 13 8K 8K 78643K 5979 0
rtable 272 16K 17K 78643K 2246 0
ifaddr 70 18K 19K 78643K 694 0
counters 19 16K 16K 78643K 19 0
ioctlops 0 0K 4K 78643K 7833 0
iov 0 0K 28K 78643K 19126 0
mount 1 1K 1K 78643K 1 0
vnodes 1225 77K 77K 78643K 15830 0
UFS quota 1 32K 32K 78643K 1 0
UFS mount 5 36K 36K 78643K 5 0
shm 2 1K 5K 78643K 451 0
VM map 2 0K 0K 78643K 2 0
sem 8 0K 0K 78643K 8 0
dirhash 12 2K 2K 78643K 12 0
ACPI 1794 195K 288K 78643K 12646 0
file desc 5 13K 25K 78643K 68215 0
sigio 1 0K 0K 78643K 541 0
proc 276 52K 68K 78643K 5338 0
subproc 32 2K 2K 78643K 697 0
NFS srvsock 1 0K 0K 78643K 1 0
NFS daemon 1 16K 16K 78643K 1 0
ip_moptions 0 0K 0K 78643K 129588 0
in_multi 33 2K 2K 78643K 473 0
ether_multi 1 0K 0K 78643K 1 0
ISOFS mount 1 32K 32K 78643K 1 0
MSDOSFS mount 1 16K 16K 78643K 1 0
ttys 61 281K 281K 78643K 61 0
exec 0 0K 1K 78643K 1019 0
pagedep 1 8K 8K 78643K 1 0
inodedep 1 32K 32K 78643K 1 0
newblk 1 0K 0K 78643K 1 0
VM swap 7 26K 26K 78643K 7 0
UVM amap 187 57K 112K 78643K 147056 0
UVM aobj 130 4K 4K 78643K 137 0
memdesc 1 4K 4K 78643K 1 0
crypto data 1 1K 1K 78643K 1 0
ip6_options 0 0K 0K 78643K 407 0
NDP 6 0K 0K 78643K 127 0
temp 131 3066K 3132K 78643K 566431 0
kqueue 0 0K 0K 78643K 527 0
SYN cache 2 16K 16K 78643K 2 0
ddb> show all pools
Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle
arp 64 87 0 81 1 0 1 1 0 8 0
rtpcb 80 673 0 671 1 0 1 1 0 8 0
rtentry 112 440 0 396 2 0 2 2 0 8 0
unpcb 120 41206 0 41196 23 22 1 2 0 8 0
syncache 264 4 0 4 1 1 0 1 0 8 0
sackhl 24 47 0 47 28 28 0 1 0 8 0
tcpqe 32 24 0 24 1 1 0 1 0 8 0
tcpcb 544 4677 0 4673 2 1 1 2 0 8 0
inpcb 280 67548 0 67541 123 121 2 4 0 8 1
nd6 48 82 0 78 1 0 1 1 0 8 0
pkpcb 40 8 0 8 3 3 0 1 0 8 0
pfstscr 40 19 0 17 3 2 1 1 0 8 0
pfosfp 40 12 0 11 2 1 1 1 0 8 0
pfosfpen 112 13 0 11 2 1 1 1 0 8 0
pfrktable 1344 90 0 82 1 0 1 1 0 8 0
pftag 88 19 0 1 1 0 1 1 0 8 0
pfqueue 264 142 0 13 9 0 9 9 0 8 0
pfstitem 24 7 0 5 3 2 1 1 0 8 0
pfstkey 112 84 0 82 3 2 1 1 0 8 0
pfstate 328 45 0 44 3 2 1 1 0 8 0
pfrule 1360 1260 0 179 91 0 91 91 0 8 0
art_heap8 4096 1 0 0 1 0 1 1 0 8 0
art_heap4 256 1953 0 1738 14 0 14 14 0 8 0
art_table 32 1954 0 1738 2 0 2 2 0 8 0
art_node 16 437 0 397 1 0 1 1 0 8 0
semapl 112 6 0 0 1 0 1 1 0 8 0
shmpl 112 135 0 7 4 0 4 4 0 8 0
dirhash 1024 17 0 0 3 0 3 3 0 8 0
dino1pl 128 89934 0 88445 50 1 49 49 0 8 0
ffsino 240 89934 0 88445 88 0 88 88 0 8 0
nchpl 144 186191 0 184322 70 0 70 70 0 8 0
uvmvnodes 72 5926 0 0 108 0 108 108 0 8 0
vnodes 208 5926 0 0 312 0 312 312 0 8 0
namei 1024 487310 0 487310 1 0 1 1 0 8 1
vcpupl 1984 15 0 9 2 1 1 2 0 8 0
vmpool 528 17 0 11 1 0 1 1 0 8 0
pfiaddrpl 120 9 0 0 1 0 1 1 0 8 0
scxspl 192 547191 0 547191 1 0 1 1 0 8 1
plimitpl 152 1028 0 1021 1 0 1 1 0 8 0
sigapl 432 68269 0 68256 2 0 2 2 0 8 0
futexpl 56 646981 0 646981 1 0 1 1 0 8 1
knotepl 112 3515 0 3496 1 0 1 1 0 8 0
kqueuepl 104 7811 0 7809 1 0 1 1 0 8 0
pipepl 112 10586 0 10567 1 0 1 1 0 8 0
fdescpl 424 68270 0 68256 2 0 2 2 0 8 0
filepl 120 331909 0 331809 90 86 4 5 0 8 0
lockfpl 104 57120 0 57118 1 0 1 1 0 8 0
lockfspl 48 16204 0 16202 1 0 1 1 0 8 0
sessionpl 112 56 0 46 1 0 1 1 0 8 0
pgrppl 48 546 0 536 1 0 1 1 0 8 0
ucredpl 96 41767 0 41759 1 0 1 1 0 8 0
zombiepl 144 68256 0 68255 1 0 1 1 0 8 0
processpl 872 68285 0 68255 4 0 4 4 0 8 0
procpl 632 142411 0 142373 5 1 4 5 0 8 0
sosppl 128 24 0 24 3 3 0 1 0 8 0
sockpl 384 109503 0 109484 257 253 4 8 0 8 2
mcl64k 65536 490 0 490 70 69 1 1 0 8 1
mcl16k 16384 486 0 486 61 60 1 1 0 8 1
mcl12k 12288 1155 0 1155 83 82 1 1 0 8 1
mcl9k 9216 442 0 442 81 80 1 1 0 8 1
mcl8k 8192 1359 0 1359 92 91 1 1 0 8 1
mcl4k 4096 3643 0 3643 67 66 1 1 0 8 1
mcl2k2 2112 180 0 180 65 64 1 1 0 8 1
mcl2k 2048 109653 0 109588 63 48 15 37 0 8 0
mtagpl 80 313 0 270 8 6 2 6 0 8 0
mbufpl 256 565932 0 565670 73 44 29 43 0 8 0
bufpl 280 127953 0 121769 442 0 442 442 0 8 0
anonpl 16 4128457 0 4122528 101 73 28 41 0 107 0
amapchunkpl 152 251177 0 251082 95 90 5 18 0 158 0
amappl16 192 297233 0 296896 91 73 18 28 0 8 0
amappl15 184 591 0 587 1 0 1 1 0 8 0
amappl14 176 11733 0 11730 1 0 1 1 0 8 0
amappl13 168 32850 0 32848 1 0 1 1 0 8 0
amappl12 160 761 0 761 3 3 0 1 0 8 0
amappl11 152 193 0 182 1 0 1 1 0 8 0
amappl10 144 447 0 445 1 0 1 1 0 8 0
amappl9 136 1118 0 1115 1 0 1 1 0 8 0
amappl8 128 1487 0 1382 5 1 4 4 0 8 0
amappl7 120 753 0 739 1 0 1 1 0 8 0
amappl6 112 84 0 75 1 0 1 1 0 8 0
amappl5 104 1651 0 1642 1 0 1 1 0 8 0
amappl4 96 56902 0 56873 1 0 1 1 0 8 0
amappl3 88 24968 0 24960 1 0 1 1 0 8 0
amappl2 80 568306 0 568234 3 1 2 3 0 8 0
amappl1 72 1092202 0 1091777 26 16 10 20 0 8 0
amappl 80 143877 0 143838 2 0 2 2 0 84 0
dma4096 4096 1 0 1 1 1 0 1 0 8 0
dma256 256 6 0 6 1 1 0 1 0 8 0
dma128 128 253 0 253 1 1 0 1 0 8 0
dma64 64 6 0 6 1 1 0 1 0 8 0
dma32 32 7 0 7 1 1 0 1 0 8 0
dma16 16 18 0 17 1 0 1 1 0 8 0
aobjpl 64 136 0 7 3 0 3 3 0 8 0
uaddrrnd 24 68287 0 68267 1 0 1 1 0 8 0
uaddrbest 32 2 0 0 1 0 1 1 0 8 0
uaddr 24 68287 0 68267 1 0 1 1 0 8 0
vmmpekpl 168 297912 0 297881 2 0 2 2 0 8 0
vmmpepl 168 7564387 0 7562835 212 138 74 82 0 357 0
vmsppl 272 68286 0 68267 3 1 2 2 0 8 0
pdppl 4096 136580 0 136540 7 1 6 6 0 8 0
pvpl 32 11702999 0 11694476 382 305 77 116 0 265 0
pmappl 200 68286 0 68267 2 0 2 2 0 8 0
extentpl 40 46 0 29 1 0 1 1 0 8 0
phpool 112 638 0 383 8 0 8 8 0 8 0