uvm_fault(0xfffffd805245c230, 0x5025a8058, 0, 1) -> e kernel: page fault trap, code=0 Stopped at pfi_dynaddr_remove+0x4a: movq 0x58(%r15),%r12 ddb> ddb> set $lines = 0 ddb> set $maxwidth = 0 ddb> show panic kernel page fault uvm_fault(0xfffffd805245c230, 0x5025a8058, 0, 1) -> e pfi_dynaddr_remove(ffff800000b21898) at pfi_dynaddr_remove+0x4a sys/net/pf_if.c:602 end trace frame: 0xffff80001e405d70, count: 0 ddb> trace pfi_dynaddr_remove(ffff800000b21898) at pfi_dynaddr_remove+0x4a sys/net/pf_if.c:602 pf_rm_rule(0,ffff800000b21540) at pf_rm_rule+0x3df sys/net/pf_ioctl.c:274 pfioctl(4900,cd60441a,ffff8000009f3000,2,ffff8000ffff33d8) at pfioctl+0x4f7a VOP_IOCTL(fffffd805d628680,cd60441a,ffff8000009f3000,2,fffffd806c3be7e0,ffff8000ffff33d8) at VOP_IOCTL+0x88 sys/kern/vfs_vops.c:291 vn_ioctl(fffffd8055d9ecb8,cd60441a,ffff8000009f3000,ffff8000ffff33d8) at vn_ioctl+0xb7 sys/kern/vfs_vnops.c:533 sys_ioctl(ffff8000ffff33d8,ffff80001e4061b8,ffff80001e406200) at sys_ioctl+0x5b9 syscall(ffff80001e406280) at syscall+0x507 sys/arch/amd64/amd64/trap.c:555 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xfda84fbbbd0, count: -8 ddb> show registers rdi 0x2 rsi 0x2 rbp 0xffff80001e405d10 rbx 0xffff800000b21788 rdx 0xd2 rcx 0xffff80001f647000 rax 0xffff8000009f2580 r8 0x550 r9 0x1 r10 0xffff8000009f2580 r11 0xca37748ab82b9c96 r12 0xffff800000b21898 r13 0xffff800000b21810 r14 0xffff800000b21898 r15 0x5025a8000 rip 0xffffffff8112b48a pfi_dynaddr_remove+0x4a cs 0x8 rflags 0x10206 __ALIGN_SIZE+0xf206 rsp 0xffff80001e405ce0 ss 0x10 pfi_dynaddr_remove+0x4a: movq 0x58(%r15),%r12 ddb> show proc PROC (syz-executor.1) pid=253540 stat=onproc flags process=0 proc=4000000 pri=86, usrpri=86, nice=20 forw=0xffffffffffffffff, list=0xffff8000ffff29f8,0xffffffff8258dce8 process=0xffff80001d39aa50 user=0xffff80001e401000, vmspace=0xfffffd805245c230 estcpu=36, cpticks=1, pctcpu=0.0 user=0, sys=1, intr=0 ddb> ps PID TID PPID UID S FLAGS WAIT COMMAND 63076 358503 43582 0 2 0 syz-executor.1 *63076 253540 43582 0 7 0x4000000 syz-executor.1 6879 343122 99873 0 2 0x2 syz-executor.0 31128 395914 1 0 3 0x100083 ttyin getty 29109 242092 0 0 3 0x14200 bored sosplice 43582 488456 99873 0 2 0x482 syz-executor.1 99873 33658 91796 0 3 0x82 thrsleep syz-fuzzer 99873 495671 91796 0 2 0x4000482 syz-fuzzer 99873 440705 91796 0 3 0x4000082 thrsleep syz-fuzzer 99873 229799 91796 0 3 0x4000082 thrsleep syz-fuzzer 99873 198380 91796 0 3 0x4000082 thrsleep syz-fuzzer 99873 112945 91796 0 3 0x4000082 thrsleep syz-fuzzer 99873 409249 91796 0 3 0x4000082 thrsleep syz-fuzzer 99873 126724 91796 0 3 0x4000082 kqread syz-fuzzer 91796 510320 50599 0 3 0x10008a pause ksh 50599 252636 81155 0 3 0x92 select sshd 81155 466964 1 0 3 0x80 select sshd 23064 489952 5912 73 2 0x100090 syslogd 5912 307388 1 0 3 0x100082 netio syslogd 98092 106483 1 77 3 0x100090 poll dhclient 72211 506079 1 0 3 0x80 poll dhclient 73595 11643 0 0 2 0x14200 zerothread 88958 162724 0 0 3 0x14200 aiodoned aiodoned 14334 310329 0 0 3 0x14200 syncer update 50711 25412 0 0 3 0x14200 cleaner cleaner 14135 276429 0 0 3 0x14200 reaper reaper 42486 292130 0 0 3 0x14200 pgdaemon pagedaemon 23736 403544 0 0 3 0x14200 bored crynlk 36475 481662 0 0 3 0x14200 bored crypto 26692 41844 0 0 3 0x40014200 acpi0 acpi0 70173 1231 0 0 3 0x14200 bored softnet 5453 14 0 0 3 0x14200 bored systqmp 298 349817 0 0 3 0x14200 bored systq 44977 180953 0 0 2 0x40014200 softclock 19414 178230 0 0 3 0x40014200 idle0 84010 197254 0 0 3 0x14200 bored smr 1 518646 0 0 3 0x82 wait init 0 0 -1 0 3 0x10200 scheduler swapper ddb> show all locks No such command ddb> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 9606 7292K 8649K 78643K 40436 0 pcb 13 8K 9K 78643K 216 0 rtable 126 6K 8K 78643K 2483 0 ifaddr 109 22K 23K 78643K 1310 0 counters 19 16K 16K 78643K 19 0 ioctlops 1 4K 4K 78643K 15445 0 iov 0 0K 16K 78643K 222 0 mount 1 1K 1K 78643K 1 0 vnodes 1252 79K 79K 78643K 7265 0 UFS quota 1 32K 32K 78643K 1 0 UFS mount 5 36K 36K 78643K 5 0 shm 2 1K 9K 78643K 49 0 VM map 2 0K 0K 78643K 2 0 sem 12 0K 1K 78643K 828 0 dirhash 12 2K 2K 78643K 12 0 ACPI 1794 195K 288K 78643K 12646 0 file desc 5 13K 25K 78643K 26792 0 sigio 0 0K 0K 78643K 169 0 proc 58 39K 63K 78643K 733 0 subproc 32 2K 2K 78643K 89 0 NFS srvsock 1 0K 0K 78643K 1 0 NFS daemon 1 16K 16K 78643K 1 0 ip_moptions 0 0K 1K 78643K 1896 0 in_multi 124 5K 5K 78643K 895 0 ether_multi 1 0K 0K 78643K 21 0 mrt 0 0K 0K 78643K 10 0 ISOFS mount 1 32K 32K 78643K 1 0 MSDOSFS mount 1 16K 16K 78643K 1 0 ttys 67 307K 307K 78643K 67 0 exec 0 0K 1K 78643K 365 0 pagedep 1 8K 8K 78643K 1 0 inodedep 1 32K 32K 78643K 1 0 newblk 1 0K 0K 78643K 1 0 VM swap 7 26K 26K 78643K 7 0 UVM amap 133 55K 58K 78643K 53740 0 UVM aobj 130 4K 4K 78643K 171 0 memdesc 1 4K 4K 78643K 1 0 crypto data 1 1K 1K 78643K 1 0 ip6_options 0 0K 0K 78643K 145 0 NDP 15 0K 0K 78643K 55 0 temp 151 3033K 3101K 78643K 89511 0 kqueue 0 0K 0K 78643K 8 0 SYN cache 2 16K 16K 78643K 2 0 ddb> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle arp 64 13 0 7 1 0 1 1 0 8 0 rtpcb 80 340 0 338 1 0 1 1 0 8 0 rtentry 112 80 0 35 2 0 2 2 0 8 0 unpcb 120 6450 0 6441 10 9 1 2 0 8 0 syncache 264 16 0 16 5 5 0 1 0 8 0 sackhl 24 3 0 3 2 2 0 1 0 8 0 tcpqe 32 143 0 143 1 1 0 1 0 8 0 tcpcb 544 1387 0 1383 1 0 1 1 0 8 0 ipq 40 93 0 93 3 3 0 1 0 8 0 ipqe 40 3886 0 3886 3 3 0 1 0 8 0 inpcb 280 5810 0 5802 22 20 2 4 0 8 1 rttmr 72 3 0 3 2 2 0 1 0 8 0 nd6 48 10 0 6 1 0 1 1 0 8 0 pkpcb 40 10 0 10 2 2 0 1 0 8 0 ppxss 1128 21 0 21 4 4 0 1 0 8 0 pfstscr 40 4 0 4 1 1 0 1 0 8 0 pfosfp 40 2 0 1 1 0 1 1 0 8 0 pfosfpen 112 2 0 1 1 0 1 1 0 8 0 pfrktable 1344 948 0 944 2 1 1 1 0 8 0 pftag 88 10 0 6 2 1 1 1 0 8 0 pfqueue 264 2 0 0 1 0 1 1 0 8 0 pfstitem 24 2 0 2 1 1 0 1 0 8 0 pfstkey 112 4 0 4 1 1 0 1 0 8 0 pfstate 328 2 0 2 1 1 0 1 0 8 0 pfrule 1360 642 0 334 28 2 26 26 0 8 0 art_heap8 4096 2 0 0 2 0 2 2 0 8 0 art_heap4 256 357 0 135 16 2 14 14 0 8 0 art_table 32 359 0 135 2 0 2 2 0 8 0 art_node 16 79 0 38 1 0 1 1 0 8 0 sysvmsgpl 40 22 0 13 1 0 1 1 0 8 0 semupl 112 7 0 7 4 4 0 1 0 8 0 semapl 112 822 0 812 1 0 1 1 0 8 0 shmpl 112 169 0 41 4 0 4 4 0 8 0 dirhash 1024 17 0 0 3 0 3 3 0 8 0 dino1pl 128 29594 0 28198 46 0 46 46 0 8 0 ffsino 240 29594 0 28198 83 0 83 83 0 8 0 nchpl 144 59132 0 57521 61 0 61 61 0 8 0 uvmvnodes 72 5926 0 0 108 0 108 108 0 8 0 vnodes 208 5926 0 0 312 0 312 312 0 8 0 namei 1024 176760 0 176759 1 0 1 1 0 8 0 vcpupl 1984 8 0 4 2 1 1 1 0 8 0 vmpool 528 8 0 4 2 1 1 1 0 8 0 pfiaddrpl 120 489 0 460 1 0 1 1 0 8 0 scxspl 192 171098 0 171098 1 0 1 1 0 8 1 plimitpl 152 161 0 154 1 0 1 1 0 8 0 sigapl 432 26956 0 26943 2 0 2 2 0 8 0 futexpl 56 183682 0 183682 1 0 1 1 0 8 1 knotepl 112 763 0 744 5 4 1 3 0 8 0 kqueuepl 104 797 0 795 1 0 1 1 0 8 0 pipepl 112 1700 0 1681 2 1 1 2 0 8 0 fdescpl 424 26957 0 26943 2 0 2 2 0 8 0 filepl 120 98723 0 98622 16 12 4 6 0 8 0 lockfpl 104 749 0 748 1 0 1 1 0 8 0 lockfspl 48 263 0 262 1 0 1 1 0 8 0 sessionpl 112 22 0 12 1 0 1 1 0 8 0 pgrppl 48 274 0 264 1 0 1 1 0 8 0 ucredpl 96 4885 0 4877 1 0 1 1 0 8 0 zombiepl 144 26944 0 26944 1 0 1 1 0 8 1 processpl 872 26973 0 26944 4 0 4 4 0 8 0 procpl 632 52822 0 52785 4 0 4 4 0 8 0 sosppl 128 24 0 24 4 4 0 1 0 8 0 sockpl 384 12635 0 12616 51 46 5 8 0 8 2 mcl64k 65536 436 0 436 47 47 0 33 0 8 0 mcl16k 16384 17 0 17 11 10 1 1 0 8 1 mcl12k 12288 79 0 79 20 19 1 1 0 8 1 mcl9k 9216 46 0 46 17 16 1 1 0 8 1 mcl8k 8192 385 0 385 14 13 1 1 0 8 1 mcl4k 4096 327 0 327 16 15 1 1 0 8 1 mcl2k2 2112 19 0 19 13 13 0 1 0 8 0 mcl2k 2048 84213 0 84158 40 32 8 14 0 8 0 mtagpl 80 586 0 330 13 4 9 11 0 8 0 mbufpl 256 277699 0 277080 85 24 61 68 0 8 1 bufpl 280 35019 0 28835 442 0 442 442 0 8 0 anonpl 16 1460628 0 1445511 113 47 66 81 0 107 0 amapchunkpl 152 81012 0 80884 31 25 6 19 0 158 0 amappl16 192 108575 0 107686 93 48 45 56 0 8 0 amappl15 184 58 0 54 1 0 1 1 0 8 0 amappl14 176 13177 0 13171 1 0 1 1 0 8 0 amappl13 168 7085 0 7085 1 1 0 1 0 8 0 amappl12 160 14 0 13 1 0 1 1 0 8 0 amappl11 152 56 0 45 1 0 1 1 0 8 0 amappl10 144 5473 0 5470 1 0 1 1 0 8 0 amappl9 136 829 0 824 1 0 1 1 0 8 0 amappl8 128 484 0 446 2 0 2 2 0 8 0 amappl7 120 4887 0 4875 1 0 1 1 0 8 0 amappl6 112 54 0 49 1 0 1 1 0 8 0 amappl5 104 288 0 277 1 0 1 1 0 8 0 amappl4 96 32837 0 32803 1 0 1 1 0 8 0 amappl3 88 843 0 836 1 0 1 1 0 8 0 amappl2 80 203388 0 203318 3 1 2 3 0 8 0 amappl1 72 383646 0 383226 22 11 11 20 0 8 0 amappl 80 53097 0 53054 2 0 2 2 0 84 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 253 0 253 1 1 0 1 0 8 0 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 64 170 0 41 3 0 3 3 0 8 0 uaddrrnd 24 26965 0 26947 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 26965 0 26947 1 0 1 1 0 8 0 vmmpekpl 168 119443 0 119419 2 0 2 2 0 8 0 vmmpepl 168 2906806 0 2904802 210 94 116 122 0 357 22 vmsppl 272 26964 0 26947 3 1 2 2 0 8 0 pdppl 4096 53936 0 53898 8 2 6 6 0 8 1 pvpl 32 4202369 0 4184191 297 127 170 196 0 265 16 pmappl 200 26964 0 26947 2 1 1 2 0 8 0 extentpl 40 46 0 29 1 0 1 1 0 8 0 phpool 112 360 0 150 8 1 7 7 0 8 0