uvm_fault(0xfffffd805273c340, 0x7000004c3, 0, 1) -> e kernel: page fault trap, code=0 Stopped at pfr_detach_table+0x20: movl 0x4c4(%r14),%r15d ddb> ddb> set $lines = 0 ddb> set $maxwidth = 0 ddb> show panic kernel page fault uvm_fault(0xfffffd805273c340, 0x7000004c3, 0, 1) -> e pfr_detach_table(6ffffffff) at pfr_detach_table+0x20 sys/net/pf_table.c:2240 end trace frame: 0xffff80001d37c200, count: 0 ddb> trace pfr_detach_table(6ffffffff) at pfr_detach_table+0x20 sys/net/pf_table.c:2240 pf_tbladdr_remove(ffff8000009d2ae0) at pf_tbladdr_remove+0x4e sys/net/pf.c:1525 pf_rm_rule(0,ffff8000009d2aa8) at pf_rm_rule+0x3fc sys/net/pf_ioctl.c:309 pfioctl(4900,cd604404,ffff8000009fd000,2,ffff8000ffff2508) at pfioctl+0x4f7a VOP_IOCTL(fffffd805fdc9680,cd604404,ffff8000009fd000,2,fffffd806c3bec00,ffff8000ffff2508) at VOP_IOCTL+0x88 sys/kern/vfs_vops.c:291 vn_ioctl(fffffd8056083628,cd604404,ffff8000009fd000,ffff8000ffff2508) at vn_ioctl+0xb7 sys/kern/vfs_vnops.c:533 sys_ioctl(ffff8000ffff2508,ffff80001d37c6a8,ffff80001d37c6f0) at sys_ioctl+0x5b9 syscall(ffff80001d37c770) at syscall+0x507 sys/arch/amd64/amd64/trap.c:555 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x160b92436c0, count: -9 ddb> show registers rdi 0xffffffff812fb2a0 pfr_detach_table+0x20 rsi 0xe2 rbp 0xffff80001d37c1c0 rbx 0xffff8000009d2cf0 rdx 0xe3 rcx 0xffff80001e46c000 rax 0xffff80001e46c000 r8 0x101010101010101 r9 0x1 r10 0xffff8000009fad40 r11 0x837d441d927e073d r12 0xffff8000009d2e00 r13 0xffff8000009d2d78 r14 0x6ffffffff r15 0x6ffffffff rip 0xffffffff812fb2a0 pfr_detach_table+0x20 cs 0x8 rflags 0x10246 __ALIGN_SIZE+0xf246 rsp 0xffff80001d37c190 ss 0x10 pfr_detach_table+0x20: movl 0x4c4(%r14),%r15d ddb> show proc PROC (syz-executor.1) pid=509752 stat=onproc flags process=0 proc=4000000 pri=79, usrpri=79, nice=20 forw=0xffffffffffffffff, list=0xffff8000ffff33d8,0xffffffff8254b668 process=0xffff8000ffff7480 user=0xffff80001d377000, vmspace=0xfffffd805273c340 estcpu=36, cpticks=1, pctcpu=0.0 user=0, sys=1, intr=0 ddb> ps PID TID PPID UID S FLAGS WAIT COMMAND 20887 386477 30411 0 2 0 syz-executor.1 *20887 509752 30411 0 7 0x4000000 syz-executor.1 83963 406817 56460 0 2 0x482 syz-executor.0 30411 435392 56460 0 2 0x482 syz-executor.1 37188 160416 0 0 3 0x14200 acct acct 97837 27383 0 0 3 0x14200 bored sosplice 56460 82946 71478 0 3 0x82 thrsleep syz-fuzzer 56460 448467 71478 0 3 0x4000082 thrsleep syz-fuzzer 56460 434000 71478 0 3 0x4000082 thrsleep syz-fuzzer 56460 369619 71478 0 3 0x4000082 thrsleep syz-fuzzer 56460 439634 71478 0 3 0x4000082 kqread syz-fuzzer 56460 277353 71478 0 3 0x4000082 thrsleep syz-fuzzer 56460 39720 71478 0 3 0x4000082 thrsleep syz-fuzzer 56460 190678 71478 0 3 0x4000082 thrsleep syz-fuzzer 71478 351643 97064 0 3 0x10008a pause ksh 97064 473468 15730 0 3 0x92 select sshd 77886 92817 1 0 3 0x100083 ttyin getty 15730 400157 1 0 3 0x80 select sshd 13365 8521 29237 73 3 0x100090 kqread syslogd 29237 10145 1 0 3 0x100082 netio syslogd 62341 156468 0 0 2 0x14200 zerothread 87807 430494 0 0 3 0x14200 aiodoned aiodoned 46538 384460 0 0 3 0x14200 syncer update 37785 70199 0 0 3 0x14200 cleaner cleaner 68087 504378 0 0 3 0x14200 reaper reaper 90082 445488 0 0 3 0x14200 pgdaemon pagedaemon 76551 195820 0 0 3 0x14200 bored crynlk 31870 502647 0 0 3 0x14200 bored crypto 73841 286791 0 0 3 0x40014200 acpi0 acpi0 62445 246178 0 0 2 0x14200 softnet 94762 133093 0 0 3 0x14200 bored systqmp 648 521533 0 0 3 0x14200 bored systq 38546 417257 0 0 3 0x40014200 bored softclock 21984 213830 0 0 3 0x40014200 idle0 26629 351024 0 0 3 0x14200 bored smr 1 224351 0 0 3 0x82 wait init 0 0 -1 0 3 0x10200 scheduler swapper ddb> show all locks No such command ddb> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 9554 6308K 7607K 78643K 26224 0 pcb 13 8K 8K 78643K 2447 0 rtable 135 15K 16K 78643K 4958 0 ifaddr 285 66K 67K 78643K 1314 0 counters 19 16K 16K 78643K 19 0 ioctlops 1 4K 4K 78643K 574 0 iov 0 0K 32K 78643K 514 0 mount 1 1K 1K 78643K 1 0 vnodes 1223 77K 78K 78643K 6613 0 UFS quota 1 32K 32K 78643K 1 0 UFS mount 5 36K 36K 78643K 5 0 shm 2 1K 9K 78643K 2540 0 VM map 2 0K 0K 78643K 2 0 sem 12 0K 1K 78643K 396 0 dirhash 12 2K 2K 78643K 12 0 ACPI 1794 195K 288K 78643K 12646 0 file desc 5 13K 25K 78643K 11376 0 sigio 0 0K 0K 78643K 5089 0 proc 52 31K 63K 78643K 850 0 subproc 32 2K 2K 78643K 170 0 NFS srvsock 1 0K 0K 78643K 1 0 NFS daemon 1 16K 16K 78643K 1 0 ip_moptions 0 0K 0K 78643K 170 0 in_multi 112 5K 5K 78643K 283 0 ether_multi 1 0K 0K 78643K 296 0 mrt 0 0K 0K 78643K 685 0 ISOFS mount 1 32K 32K 78643K 1 0 MSDOSFS mount 1 16K 16K 78643K 1 0 ttys 121 546K 546K 78643K 121 0 exec 0 0K 1K 78643K 417 0 pfkey data 0 0K 1K 78643K 2 0 pagedep 1 8K 8K 78643K 1 0 inodedep 1 32K 32K 78643K 1 0 newblk 1 0K 0K 78643K 1 0 VM swap 7 26K 26K 78643K 7 0 UVM amap 170 171K 181K 78643K 25278 0 UVM aobj 130 4K 4K 78643K 132 0 memdesc 1 4K 4K 78643K 1 0 crypto data 1 1K 1K 78643K 1 0 ip6_options 0 0K 0K 78643K 2549 0 NDP 19 0K 0K 78643K 230 0 temp 164 3029K 3117K 78643K 124651 0 kqueue 0 0K 0K 78643K 13 0 SYN cache 2 16K 16K 78643K 2 0 ddb> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle arp 64 28 0 22 1 0 1 1 0 8 0 rtpcb 80 1369 0 1369 1 1 0 1 0 8 0 rtentry 112 662 0 619 2 0 2 2 0 8 0 unpcb 120 8294 0 8288 4 3 1 2 0 8 0 syncache 264 16 0 16 4 4 0 1 0 8 0 sackhl 24 2 0 2 2 2 0 1 0 8 0 tcpqe 32 155 0 155 4 4 0 1 0 8 0 tcpcb 544 4978 0 4974 5 4 1 2 0 8 0 ipq 40 138 0 138 5 5 0 1 0 8 0 ipqe 40 5956 0 5956 5 5 0 1 0 8 0 inpcb 280 68369 0 68365 16 15 1 4 0 8 0 rttmr 72 169 0 169 6 6 0 1 0 8 0 ip6q 72 2 0 2 1 1 0 1 0 8 0 ip6af 40 6 0 6 1 1 0 1 0 8 0 nd6 48 26 0 23 2 1 1 1 0 8 0 pkpcb 40 8 0 8 4 4 0 1 0 8 0 ppxss 1128 173 0 173 10 9 1 1 0 8 1 pfosfp 40 2 0 1 1 0 1 1 0 8 0 pfosfpen 112 2 0 1 1 0 1 1 0 8 0 pfrktable 1344 29 0 23 1 0 1 1 0 8 0 pftag 88 11 0 5 1 0 1 1 0 8 0 pfqueue 264 2 0 0 1 0 1 1 0 8 0 pfrule 1360 203 0 143 6 1 5 5 0 8 0 art_heap8 4096 3 0 1 3 1 2 3 0 8 0 art_heap4 256 3209 0 3001 26 13 13 15 0 8 0 art_table 32 3212 0 3002 2 0 2 2 0 8 0 art_node 16 540 0 500 1 0 1 1 0 8 0 sysvmsgpl 40 30 0 21 1 0 1 1 0 8 0 semapl 112 394 0 384 1 0 1 1 0 8 0 shmpl 112 130 0 2 4 0 4 4 0 8 0 dirhash 1024 17 0 0 3 0 3 3 0 8 0 dino1pl 128 15905 0 14496 46 0 46 46 0 8 0 ffsino 240 15905 0 14496 84 0 84 84 0 8 0 nchpl 144 36494 0 34883 60 0 60 60 0 8 0 uvmvnodes 72 5926 0 0 108 0 108 108 0 8 0 vnodes 208 5926 0 0 312 0 312 312 0 8 0 namei 1024 169701 0 169701 1 0 1 1 0 8 1 vcpupl 1984 18 0 0 3 0 3 3 0 8 0 vmpool 528 18 0 0 2 0 2 2 0 8 0 pfiaddrpl 120 10 0 6 1 0 1 1 0 8 0 scxspl 192 85029 0 85029 1 0 1 1 0 8 1 plimitpl 152 142 0 136 1 0 1 1 0 8 0 sigapl 432 11523 0 11512 2 0 2 2 0 8 0 futexpl 56 551443 0 551443 1 0 1 1 0 8 1 knotepl 112 853 0 834 1 0 1 1 0 8 0 kqueuepl 104 6321 0 6319 1 0 1 1 0 8 0 pipepl 112 17706 0 17683 7 6 1 2 0 8 0 fdescpl 424 11524 0 11512 2 0 2 2 0 8 0 filepl 120 207601 0 207510 18 14 4 6 0 8 1 lockfpl 104 10799 0 10791 1 0 1 1 0 8 0 lockfspl 48 3014 0 3006 1 0 1 1 0 8 0 sessionpl 112 25 0 17 1 0 1 1 0 8 0 pgrppl 48 51 0 43 1 0 1 1 0 8 0 ucredpl 96 52868 0 52862 1 0 1 1 0 8 0 zombiepl 144 11512 0 11511 1 0 1 1 0 8 0 processpl 872 11540 0 11511 4 0 4 4 0 8 0 procpl 632 23850 0 23813 5 1 4 5 0 8 0 sosppl 128 14 0 14 5 5 0 1 0 8 0 sockpl 384 83171 0 83161 36 33 3 7 0 8 1 mcl64k 65536 835 0 835 80 78 2 33 0 8 2 mcl16k 16384 37 0 37 21 20 1 1 0 8 1 mcl12k 12288 2401 0 2401 12 11 1 1 0 8 1 mcl9k 9216 92 0 92 18 18 0 1 0 8 0 mcl8k 8192 434 0 434 16 15 1 1 0 8 1 mcl4k 4096 396 0 396 14 13 1 1 0 8 1 mcl2k2 2112 34 0 34 19 19 0 1 0 8 0 mcl2k 2048 89392 0 89349 44 37 7 16 0 8 0 mtagpl 80 631 0 371 9 3 6 6 0 8 0 mbufpl 256 341132 0 340532 142 101 41 62 0 8 0 bufpl 280 20756 0 14572 442 0 442 442 0 8 0 anonpl 16 782469 0 764209 138 63 75 89 0 107 0 amapchunkpl 152 39221 0 39086 31 18 13 19 0 158 6 amappl16 192 52303 0 51288 106 54 52 63 0 8 1 amappl15 184 1582 0 1576 1 0 1 1 0 8 0 amappl14 176 1614 0 1611 1 0 1 1 0 8 0 amappl13 168 17 0 17 3 3 0 1 0 8 0 amappl12 160 15 0 14 1 0 1 1 0 8 0 amappl11 152 808 0 803 1 0 1 1 0 8 0 amappl10 144 4290 0 4287 1 0 1 1 0 8 0 amappl9 136 3859 0 3855 1 0 1 1 0 8 0 amappl8 128 3468 0 3416 2 0 2 2 0 8 0 amappl7 120 3995 0 3979 1 0 1 1 0 8 0 amappl6 112 775 0 764 1 0 1 1 0 8 0 amappl5 104 256 0 249 1 0 1 1 0 8 0 amappl4 96 11050 0 11024 1 0 1 1 0 8 0 amappl3 88 2623 0 2615 1 0 1 1 0 8 0 amappl2 80 86916 0 86844 3 1 2 3 0 8 0 amappl1 72 200444 0 200063 25 15 10 20 0 8 0 amappl 80 24191 0 24145 2 0 2 2 0 84 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 253 0 253 1 1 0 1 0 8 0 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 64 131 0 2 3 0 3 3 0 8 0 uaddrrnd 24 11542 0 11512 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 11542 0 11512 1 0 1 1 0 8 0 vmmpekpl 168 88010 0 87984 2 0 2 2 0 8 0 vmmpepl 168 1291937 0 1289766 289 187 102 143 0 357 0 vmsppl 272 11541 0 11512 5 2 3 3 0 8 1 pdppl 4096 23090 0 23042 9 2 7 7 0 8 0 pvpl 32 2183728 0 2163972 316 151 165 203 0 265 0 pmappl 200 11541 0 11512 2 0 2 2 0 8 0 extentpl 40 46 0 29 1 0 1 1 0 8 0 phpool 112 461 0 289 6 0 6 6 0 8 0