kernel: protection fault trap, code=0
Stopped at malloc+0x855: movq 0x8(%rbx),%r14
ddb>
ddb> set $lines = 0
ddb> set $maxwidth = 0
ddb> show panic
the kernel did not panic
ddb> show kasan
No such command
ddb> trace
malloc(10,7f,1) at malloc+0x855 sys/kern/kern_malloc.c:294
ktrsyscall(ffff80002a778d08,67,8,ffff80002a7f1220) at ktrsyscall+0x199 sys/kern/kern_ktrace.c:174
syscall(ffff80002a7f1220) at syscall+0x2bc mi_syscall sys/sys/syscall_mi.h:154 [inline]
syscall(ffff80002a7f1220) at syscall+0x2bc sys/arch/amd64/amd64/trap.c:783
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x723a38aff700, count: -4
ddb> show registers
rdi 0x5f518dddd45669f0
rsi 0x7fff00000070
rbp 0xffff80002a7f1070
rbx 0x5f51f222d4566980
rdx 0
rcx 0x4
rax 0xffff80002a778d08
r8 0
r9 0
r10 0
r11 0x6aaab9f7f9637220
r12 0x7fff00000070
r13 0xffffffff83a7cd70 kmemstats+0x1fc0
r14 0xa30c333 __kernel_phys_end+0x670c333
r15 0x5f518dddd45669f0
rip 0xffffffff816a7945 malloc+0x855
cs 0x8
rflags 0x10202 __ALIGN_SIZE+0xf202
rsp 0xffff80002a7f0fb0
ss 0x10
malloc+0x855: movq 0x8(%rbx),%r14
ddb> show proc
PROC (syz-executor) tid=339350 pid=70763 tcnt=1 stat=onproc
flags process=10000002<EXEC,WAITEVENT> proc=1<INKTR>
runpri=32, usrpri=50, slppri=32, nice=20
wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0
forw=0xffffffffffffffff, list=0xffff80002a7787d8,0xffff80002a779778
process=0xffff80002a79c490 user=0xffff80002a7ec000, vmspace=0xfffff980765a0e68
estcpu=24, cpticks=4, pctcpu=0.0, user=0, sys=4, intr=0
ddb> ps
PID TID PPID UID S PRLAGS PFLAGS WAIT COMMAND
15146 66227 97589 0 2 0 0 syz-executor
15146 309680 97589 0 3 0 0x4000080 fsleep syz-executor
52194 43427 19815 0 2 0 0 syz-executor
52194 237866 19815 0 2 0 0x4000000 syz-executor
59893 441046 97950 0 2 0 0 syz-executor
59893 267632 97950 0 2 0 0x4000000 syz-executor
75147 223443 52928 0 2 0 0 syz-executor
75147 53908 52928 0 3 0 0x4000000 biowait syz-executor
75147 127697 52928 0 3 0 0x4000080 fsleep syz-executor
32063 98579 0 0 3 0x14000 0x200 acct acct
3108 511007 95868 0 3 0x2 0x80 piperd syz-executor
97589 288636 95868 0 3 0x2 0x80 nanoslp syz-executor
19815 455202 95868 0 3 0x2 0x80 nanoslp syz-executor
64868 129282 95868 0 3 0x2 0 biowait syz-executor
97950 407474 95868 0 3 0x2 0x80 nanoslp syz-executor
*70763 339350 95868 0 7 0x10000002 0x1 syz-executor
52928 277853 95868 0 3 0x2 0x80 nanoslp syz-executor
95868 147782 28369 0 3 0x2 0x80 nanoslp syz-executor
28369 8430 86386 0 3 0x100002 0x88 sigsusp ksh
86386 482000 84576 0 3 0x10 0x88 kqread sshd-session
84576 328021 85342 0 3 0x12 0x80 kqread sshd-session
51614 10645 1 0 3 0x100003 0x80 ttyin getty
85342 361422 1 0 3 0 0x88 kqread sshd
52432 156553 20676 73 3 0x1100010 0x80 kqread syslogd
20676 465496 1 0 3 0x100002 0x80 sbwait syslogd
25497 227800 1 0 3 0x100000 0x80 kqread resolvd
96236 3720 29000 77 3 0x100012 0x80 kqread dhcpleased
41306 24173 29000 77 3 0x100012 0x80 kqread dhcpleased
29000 398582 1 0 3 0 0x80 kqread dhcpleased
71016 487874 0 0 3 0x14000 0x200 bored smr
85983 271254 0 0 2 0x14000 0x200 zerothread
83634 81785 0 0 3 0x14000 0x200 aiodoned aiodoned
88722 415825 0 0 3 0x14000 0x200 syncer update
44027 441763 0 0 3 0x14000 0x200 cleaner cleaner
21645 264106 0 0 3 0x14000 0x200 reaper reaper
53272 85934 0 0 3 0x14000 0x200 pgdaemon pagedaemon
56537 102231 0 0 3 0x14000 0x200 bored viomb
35903 508289 0 0 3 0x14000 0x40000200 acpi0 acpi0
64335 265346 0 0 3 0x14000 0x200 bored softnet0
80470 20527 0 0 3 0x14000 0x200 bored systqmp
16631 322421 0 0 3 0x14000 0x200 bored systq
54897 422878 0 0 3 0x14000 0x40000200 tmoslp softclock
35004 186256 0 0 3 0x14000 0x40000200 idle0
1 453170 0 0 3 0x2 0x80 wait init
0 0 -1 0 3 0x10000 0x200 scheduler swapper
ddb> show all locks
No such command
ddb> show malloc
Type InUse MemUse HighUse Limit Requests Type Lim
devbuf 11038 12143K 12323K 166960K 12425 0
pcb 17 13K 14K 166960K 102 0
rtable 222 8K 9K 166960K 405 0
pf 31 13K 73K 166960K 48 0
ifaddr 37 6K 7K 166960K 48 0
ifgroup 46 2K 2K 166960K 61 0
sysctl 1 1K 9K 166960K 6 0
counters 32 17K 17K 166960K 36 0
ioctlops 0 0K 4K 166960K 134 0
iov 0 0K 16K 166960K 14 0
mount 1 1K 1K 166960K 1 0
log 0 0K 0K 166960K 4 0
vnodes 1335 84K 84K 166960K 1788 0
UFS quota 1 32K 32K 166960K 1 0
UFS mount 5 36K 36K 166960K 5 0
shm 3 5K 5K 166960K 6 0
VM map 2 1K 1K 166960K 2 0
sem 11 0K 0K 166960K 143 0
dirhash 12 2K 2K 166960K 24 0
ACPI 1734 201K 291K 166960K 11964 0
file desc 13 45K 93K 166960K 394 0
sigio 0 0K 0K 166960K 5 0
proc 60 59K 91K 166960K 531 0
subproc 63 3K 5K 166960K 180 0
NFS srvsock 1 0K 0K 166960K 1 0
NFS daemon 1 16K 16K 166960K 1 0
ip_moptions 0 0K 0K 166960K 49 0
in_multi 84 6K 7K 166960K 109 0
ether_multi 1 0K 0K 166960K 1 0
mrt 1 0K 0K 166960K 17 0
ISOFS mount 1 32K 32K 166960K 1 0
MSDOSFS mount 1 16K 16K 166960K 1 0
ttys 67 307K 307K 166960K 67 0
exec 0 0K 1K 166960K 399 0
fusefs mount 1 32K 32K 166960K 1 0
pfkey data 0 0K 0K 166960K 1 0
tdb 3 0K 0K 166960K 3 0
VM swap 8 62K 64K 166960K 10 0
UVM amap 183 133K 151K 166960K 4851 0
UVM aobj 13 2K 2K 166960K 13 0
pinsyscall 34 68K 94K 166960K 1504 0
memdesc 1 4K 4K 166960K 1 0
crypto data 1 1K 1K 166960K 1 0
ip6_options 0 0K 0K 166960K 7 0
NDP 10 0K 2K 166960K 31 0
temp 36 9111K 9175K 166960K 9650 0
kqueue 13 20K 34K 166960K 82 0
SYN cache 2 16K 16K 166960K 2 0
ddb> show all pools
Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle
rtpcb 120 57 0 54 1 0 1 1 0 8 0
rtentry 136 121 0 25 4 0 4 4 0 8 0
unpcb 144 272 0 257 4 0 4 4 0 8 3
syncache 336 12 0 12 1 0 1 1 0 8 1
tcpqe 32 8 0 8 1 0 1 1 0 8 1
tcpcb 736 111 0 107 4 0 4 4 0 8 3
arp 96 19 0 3 1 0 1 1 0 8 0
inpcb 328 383 0 376 4 0 4 4 0 8 3
ip6q 72 1 0 1 1 0 1 1 0 8 1
ip6af 40 2 0 2 1 0 1 1 0 8 1
nd6 112 26 0 7 1 0 1 1 0 8 0
pkpcb 40 2 0 2 1 0 1 1 0 8 1
kcovpl 48 20 0 13 1 0 1 1 0 8 0
ppxss 1072 1 0 1 1 0 1 1 0 8 1
pfrktable 1344 4 0 1 1 0 1 1 0 8 0
pfstlim 224 1 0 0 1 0 1 1 0 8 0
pfanchor 1288 1 0 0 1 0 1 1 0 8 0
pftag 88 2 0 0 1 0 1 1 0 8 0
pfstitem 24 2 0 0 1 0 1 1 0 8 0
pfstkey 128 2 0 0 1 0 1 1 0 8 0
pfstate 384 1 0 0 1 0 1 1 0 8 0
pfrule 1360 36 0 34 1 0 1 1 0 8 0
art_heap8 4096 1 0 0 1 0 1 1 0 8 0
art_heap4 256 496 0 101 30 0 30 30 0 8 2
art_table 40 497 0 101 5 0 5 5 0 8 0
art_node 32 119 0 31 1 0 1 1 0 8 0
sysvmsgpl 40 6 0 2 1 0 1 1 0 8 0
semapl 72 75 0 66 1 0 1 1 0 8 0
shmpl 112 10 0 0 1 0 1 1 0 8 0
dirhash 1024 25 0 8 3 0 3 3 0 8 0
dino2pl 256 2102 0 632 92 0 92 92 0 8 0
ffsino 256 2102 0 632 92 0 92 92 0 8 0
nchpl 144 2594 0 889 64 0 64 64 0 8 0
vnodes 216 2440 0 0 136 0 136 136 0 8 0
namei 1024 8242 0 8240 1 0 1 1 0 8 0
pfiaddrpl 120 1 0 0 1 0 1 1 0 8 0
kstatmem 264 29 0 8 2 0 2 2 0 8 0
scsiplug 72 1 0 1 1 0 1 1 0 8 1
scxspl 216 8234 0 8232 5 0 5 5 1 8 4
plimitpl 152 93 0 77 1 0 1 1 0 8 0
sigapl 424 669 0 629 6 0 6 6 0 8 1
knotepl 120 10450 0 10403 17 7 10 17 0 8 8
kqueuepl 184 95 0 86 1 0 1 1 0 8 0
pipepl 304 173 0 146 3 0 3 3 0 8 0
fdescpl 448 655 0 630 5 0 5 5 0 8 1
filepl 120 3606 0 3410 10 0 10 10 0 8 3
lockfpl 104 61 0 59 1 0 1 1 0 8 0
lockfspl 48 26 0 24 1 0 1 1 0 8 0
sessionpl 144 43 0 35 1 0 1 1 0 8 0
pgrppl 48 64 0 49 1 0 1 1 0 8 0
ucredpl 104 607 0 594 1 0 1 1 0 8 0
zombiepl 144 630 0 629 1 0 1 1 0 8 0
processpl 1152 669 0 629 4 0 4 4 0 8 0
procpl 664 1012 0 967 6 0 6 6 0 8 1
sockpl 552 721 0 696 8 0 8 8 0 8 6
mcl64k 65536 76 0 76 1 0 1 1 0 8 1
mcl16k 16384 1 0 1 1 0 1 1 0 8 1
mcl8k 8192 6 0 6 1 0 1 1 0 8 1
mcl4k 4096 2811 0 2744 14 0 14 14 0 8 5
mcl2k 2048 408 0 408 4 0 4 4 0 8 4
mextrefs 64 157 0 157 1 0 1 1 0 8 1
mtagpl 96 5 0 5 1 0 1 1 0 8 1
mbufpl 256 7215 0 7026 26 2 24 26 0 8 8
bufpl 272 2778 0 104 179 0 179 179 0 8 0
anonpl 24 112123 0 109230 56 0 56 56 0 187 31
amapchunkpl 152 15376 0 15021 31 0 31 31 0 158 15
amappl16 200 1731 0 1708 15 4 11 15 0 8 8
amappl15 192 4 0 4 1 0 1 1 0 8 1
amappl14 184 413 0 412 1 0 1 1 0 8 0
amappl13 176 143 0 133 1 0 1 1 0 8 0
amappl12 168 904 0 880 2 0 2 2 0 8 0
amappl11 160 101 0 101 1 0 1 1 0 8 1
amappl10 152 58 0 48 1 0 1 1 0 8 0
amappl9 144 273 0 273 1 0 1 1 0 8 1
amappl8 136 96 0 94 1 0 1 1 0 8 0
amappl7 128 140 0 129 1 0 1 1 0 8 0
amappl6 120 148 0 146 1 0 1 1 0 8 0
amappl5 112 91 0 83 1 0 1 1 0 8 0
amappl4 104 262 0 245 1 0 1 1 0 8 0
amappl3 96 2922 0 2840 4 0 4 4 0 8 1
amappl2 88 531 0 476 2 0 2 2 0 8 0
amappl1 80 11190 0 10653 13 0 13 13 0 8 1
amappl 88 4118 0 3994 5 0 5 5 0 92 1
uvmvnodes 80 106 0 0 3 0 3 3 0 8 0
dma32768 32768 1 0 1 1 0 1 1 0 8 1
dma4096 4096 1 0 1 1 0 1 1 0 8 1
dma1024 1024 1 0 0 1 0 1 1 0 8 0
dma512 512 1 0 1 1 0 1 1 0 8 1
dma256 256 6 0 6 1 0 1 1 0 8 1
dma128 128 254 0 254 1 0 1 1 0 8 1
dma64 64 6 0 6 1 0 1 1 0 8 1
dma32 32 7 0 7 1 0 1 1 0 8 1
dma16 16 18 0 17 1 0 1 1 0 8 0
aobjpl 72 12 0 0 1 0 1 1 0 8 0
uaddrrnd 24 655 0 630 1 0 1 1 0 8 0
uaddrbest 32 2 0 0 1 0 1 1 0 8 0
uaddr 24 655 0 630 1 0 1 1 0 8 0
vmmpekpl 168 7288 0 7255 2 0 2 2 0 8 0
vmmpepl 168 49926 0 48355 92 0 92 92 0 357 18
vmsppl 368 654 0 630 4 0 4 4 0 8 1
rwobjpl 40 16489 0 15583 13 0 13 13 0 8 1
pdppl 4096 1316 0 1260 104 42 62 80 0 8 6
pvpl 32 299067 0 291363 118 0 118 118 0 265 40
pmappl 216 654 0 630 3 0 3 3 0 8 1
extentpl 40 46 0 28 1 0 1 1 0 8 0
phpool 112 569 0 44 16 0 16 16 0 8 0
ddb> machine ddbcpu 0
No such command
ddb> trace
malloc(10,7f,1) at malloc+0x855 sys/kern/kern_malloc.c:294
ktrsyscall(ffff80002a778d08,67,8,ffff80002a7f1220) at ktrsyscall+0x199 sys/kern/kern_ktrace.c:174
syscall(ffff80002a7f1220) at syscall+0x2bc mi_syscall sys/sys/syscall_mi.h:154 [inline]
syscall(ffff80002a7f1220) at syscall+0x2bc sys/arch/amd64/amd64/trap.c:783
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x723a38aff700, count: -4
ddb> machine ddbcpu 1
No such command
ddb> trace
malloc(10,7f,1) at malloc+0x855 sys/kern/kern_malloc.c:294
ktrsyscall(ffff80002a778d08,67,8,ffff80002a7f1220) at ktrsyscall+0x199 sys/kern/kern_ktrace.c:174
syscall(ffff80002a7f1220) at syscall+0x2bc mi_syscall sys/sys/syscall_mi.h:154 [inline]
syscall(ffff80002a7f1220) at syscall+0x2bc sys/arch/amd64/amd64/trap.c:783
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x723a38aff700, count: -4