login: kernel: protection fault trap, code=0
Stopped at sysctl_doproc+0x270: movq 0x378(%rbx),%r14
ddb{0}>
ddb{0}> set $lines = 0
ddb{0}> set $maxwidth = 0
ddb{0}> show panic
the kernel did not panic
ddb{0}> show kasan
No such command
ddb{0}> trace
sysctl_doproc(ffff8000303bcb08,4,200000000100,ffff8000303bcb38) at sysctl_doproc+0x270 sys/kern/kern_sysctl.c:1945
kern_sysctl_dirs(42,ffff8000303bcb08,4,200000000100,ffff8000303bcb38,0,3cd64804581fcb5d,ffff8000303bcb08) at kern_sysctl_dirs+0x430 sys/kern/kern_sysctl.c:459
kern_sysctl(ffff8000303bcb04,5,200000000100,ffff8000303bcb38,0,ffac,b8539885311aabcf) at kern_sysctl+0x139 sys/kern/kern_sysctl.c:736
sys_sysctl(ffff80002a22b240,ffff8000303bcc70,ffff8000303bcbc0) at sys_sysctl+0x3e5 sys/kern/kern_sysctl.c:-1
syscall(ffff8000303bcc70) at syscall+0xbd4 mi_syscall sys/sys/syscall_mi.h:176 [inline]
syscall(ffff8000303bcc70) at syscall+0xbd4 sys/arch/amd64/amd64/trap.c:791
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0xcfec424d320, count: -6
ddb{0}> show registers
rdi 0xffff8000307c8000
rsi 0x11c5 __ALIGN_SIZE+0x1c5
rbp 0xffff8000303bc830
rbx 0xdeaf4152deaf4152
rdx 0xffff8000307c8000
rcx 0x11c4 __ALIGN_SIZE+0x1c4
rax 0xffffffff82ec8a86 sysctl_doproc+0x7c6
r8 0x7f7fffffc000
r9 0
r10 0xb98b63b17b5bfb20
r11 0xc54f5c5d90c65e37
r12 0x18d2 __ALIGN_SIZE+0x8d2
r13 0x46
r14 0x46
r15 0x6
rip 0xffffffff82ec8530 sysctl_doproc+0x270
cs 0x8
rflags 0x10246 __ALIGN_SIZE+0xf246
rsp 0xffff8000303bc780
ss 0x10
sysctl_doproc+0x270: movq 0x378(%rbx),%r14
ddb{0}> show proc
PROC (syz-executor) tid=159060 pid=91381 tcnt=3 stat=onproc
flags process=0 proc=4000000<THREAD>
runpri=36, usrpri=80, slppri=36, nice=20
wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0
forw=0xffffffffffffffff, list=0xffff800045feb248,0xffff80002a22a2c0
process=0xffff800045fec4f0 user=0xffff8000303b7000, vmspace=0xfffff3806f0ae010
estcpu=30, cpticks=0, pctcpu=0.0, user=0, sys=0, intr=0
ddb{0}> ps
PID TID PPID UID S PRLAGS PFLAGS WAIT COMMAND
87163 19591 42167 0 7 0 0 syz-executor
87163 422154 42167 0 3 0 0x4000080 semwait syz-executor
1052 498803 20376 0 2 0 0 syz-executor
1052 193907 20376 0 3 0 0x4000080 fsleep syz-executor
1052 410900 20376 0 3 0 0x4000080 msgwait syz-executor
1052 409693 20376 0 3 0 0x4000080 fsleep syz-executor
1052 310212 20376 0 3 0 0x4000080 fsleep syz-executor
91381 330742 78763 0 2 0 0 syz-executor
*91381 159060 78763 0 7 0 0x4000000 syz-executor
91381 15058 78763 0 3 0 0x4000080 fsleep syz-executor
45302 471524 65832 0 2 0 0 syz-executor
45302 48781 65832 0 3 0 0x4000080 fsleep syz-executor
45302 319881 65832 0 3 0 0x4000080 fsleep syz-executor
77812 246309 80801 0 2 0x2 0 syz-executor
20376 227813 80801 0 3 0x2 0x80 nanoslp syz-executor
42167 451979 80801 0 3 0x2 0x80 nanoslp syz-executor
65832 297828 80801 0 3 0x2 0x80 nanoslp syz-executor
78763 241001 80801 0 2 0x2 0x1 syz-executor
12204 516265 1 0 3 0x100003 0x80 ttyin getty
80801 344796 39297 0 3 0x2 0x80 nanoslp syz-executor
39297 336939 60171 0 3 0x100002 0x88 sigsusp ksh
60171 66699 53049 0 3 0x10 0x88 kqread sshd-session
53049 17138 44239 0 3 0x12 0x80 kqread sshd-session
44239 319587 1 0 3 0 0x88 kqread sshd
47481 503682 13564 74 3 0x1100012 0x80 bpf pflogd
13564 92847 1 0 3 0 0x80 sbwait pflogd
60889 361896 75624 73 3 0x1100010 0x80 kqread syslogd
75624 298699 1 0 3 0x100002 0x80 sbwait syslogd
59385 407108 1 0 3 0x100000 0x80 kqread resolvd
50613 65100 7667 77 3 0x100012 0x80 kqread dhcpleased
79258 427092 7667 77 3 0x100012 0x80 kqread dhcpleased
7667 513162 1 0 3 0 0x80 kqread dhcpleased
52863 132536 0 0 3 0x14000 0x200 bored smr
54760 158296 0 0 2 0x14000 0x200 zerothread
83651 161983 0 0 3 0x14000 0x200 aiodoned aiodoned
52533 191707 0 0 3 0x14000 0x200 syncer update
91237 102505 0 0 3 0x14000 0x200 cleaner cleaner
34106 464354 0 0 3 0x14000 0x200 reaper reaper
33640 144636 0 0 3 0x14000 0x200 pgdaemon pagedaemon
79254 57722 0 0 3 0x14000 0x200 bored viomb
21821 504472 0 0 3 0x14000 0x40000200 acpi0 acpi0
52289 39958 0 0 3 0x14000 0x40000200 idle1
55946 18168 0 0 3 0x14000 0x200 bored softnet1
2350 277851 0 0 3 0x14000 0x200 bored softnet0
4270 81084 0 0 3 0x14000 0x200 smrbar systqmp
11006 509024 0 0 3 0x14000 0x200 bored systq
78710 226531 0 0 3 0x14000 0x200 tmoslp softclockmp
66163 274497 0 0 3 0x14000 0x40000200 tmoslp softclock
3222 127049 0 0 3 0x14000 0x40000200 idle0
1 58283 0 0 3 0x2 0x80 wait init
0 0 -1 0 3 0x10000 0x200 scheduler swapper
ddb{0}> show all locks
Process 91381 (syz-executor) thread 0xffff80002a22b240 (159060)
exclusive kernel_lock &kernel_lock r = 0 (0xffffffff83aa0c00)
#0 witness_lock+0x5f1 stacktrace_save sys/sys/stacktrace.h:37 [inline]
#0 witness_lock+0x5f1 sys/kern/subr_witness.c:1160
#1 __mp_acquire_count+0x58 sys/kern/kern_lock.c:-1
#2 sleep_finish+0x2d8 sys/kern/kern_synch.c:369
#3 rw_do_enter_read+0x309 sys/kern/kern_rwlock.c:-1
#4 uvmfault_lookup+0x122 sys/uvm/uvm_fault.c:1880
#5 uvm_fault_check+0x4f sys/uvm/uvm_fault.c:693
#6 uvm_fault+0x106 sys/uvm/uvm_fault.c:627
#7 kpageflttrap+0x2f4 sys/arch/amd64/amd64/trap.c:285
#8 kerntrap+0x19d sys/arch/amd64/amd64/trap.c:532
#9 alltraps_kern_meltdown+0x7b
#10 copyout+0x64
#11 kern_sysctl_dirs+0x430 sys/kern/kern_sysctl.c:459
#12 kern_sysctl+0x139 sys/kern/kern_sysctl.c:736
#13 sys_sysctl+0x3e5 sys/kern/kern_sysctl.c:-1
#14 syscall+0xbd4 mi_syscall sys/sys/syscall_mi.h:176 [inline]
#14 syscall+0xbd4 sys/arch/amd64/amd64/trap.c:791
#15 Xsyscall+0x128
exclusive rwlock sysctllk r = 0 (0xffffffff839b9838)
#0 witness_lock+0x5f1 stacktrace_save sys/sys/stacktrace.h:37 [inline]
#0 witness_lock+0x5f1 sys/kern/subr_witness.c:1160
#1 rw_do_enter_write+0x419 sys/kern/kern_rwlock.c:320
#2 sysctl_vslock+0x45 sys/kern/kern_sysctl.c:192
#3 kern_sysctl_dirs+0x399 sys/kern/kern_sysctl.c:457
#4 kern_sysctl+0x139 sys/kern/kern_sysctl.c:736
#5 sys_sysctl+0x3e5 sys/kern/kern_sysctl.c:-1
#6 syscall+0xbd4 mi_syscall sys/sys/syscall_mi.h:176 [inline]
#6 syscall+0xbd4 sys/arch/amd64/amd64/trap.c:791
#7 Xsyscall+0x128
Process 4270 (systqmp) thread 0xffff800045ffe298 (81084)
shared rwlock systqmp r = 0 (0xffffffff83927e98)
#0 witness_lock+0x5f1 stacktrace_save sys/sys/stacktrace.h:37 [inline]
#0 witness_lock+0x5f1 sys/kern/subr_witness.c:1160
#1 taskq_thread+0x12a sys/kern/kern_task.c:442
#2 proc_trampoline+0x10
ddb{0}> show malloc
Type InUse MemUse HighUse Limit Requests Type Lim
devbuf 11050 12081K 12212K 166960K 12684 0
pcb 18 14K 16K 166960K 387 0
rtable 206 7K 8K 166960K 4045 0
pf 33 17K 24K 166960K 389 0
ifaddr 34 7K 8K 166960K 558 0
ifgroup 47 2K 2K 166960K 585 0
sysctl 3 1K 9K 166960K 8 0
counters 66 36K 37K 166960K 354 0
ioctlops 0 0K 4K 166960K 1895 0
iov 0 0K 16K 166960K 9 0
mount 1 1K 1K 166960K 1 0
log 0 0K 0K 166960K 4 0
vnodes 1358 85K 86K 166960K 3530 0
UFS quota 1 32K 32K 166960K 1 0
UFS mount 5 36K 36K 166960K 5 0
shm 2 1K 5K 166960K 12 0
VM map 2 1K 1K 166960K 2 0
sem 15 1K 1K 166960K 46 0
dirhash 15 2K 2K 166960K 18 0
ACPI 1734 201K 291K 166960K 11964 0
file desc 13 45K 97K 166960K 2277 0
sigio 0 0K 0K 166960K 5 0
proc 73 115K 213K 166960K 3981 0
subproc 63 3K 4K 166960K 1170 0
NFS srvsock 1 0K 0K 166960K 1 0
NFS daemon 1 16K 16K 166960K 1 0
ip_moptions 0 0K 0K 166960K 32 0
in_multi 76 5K 6K 166960K 1436 0
ether_multi 1 0K 0K 166960K 4 0
mrt 1 0K 0K 166960K 47 0
ISOFS mount 1 32K 32K 166960K 1 0
MSDOSFS mount 1 16K 16K 166960K 1 0
ttys 55 254K 254K 166960K 55 0
exec 0 0K 1K 166960K 2067 0
fusefs mount 1 32K 32K 166960K 1 0
pfkey data 0 0K 0K 166960K 1 0
tdb 3 0K 0K 166960K 3 0
VM swap 8 62K 64K 166960K 10 0
UVM amap 207 166K 190K 166960K 15608 0
UVM aobj 19 2K 4K 166960K 25 0
pinsyscall 38 76K 105K 166960K 6613 0
memdesc 1 4K 4K 166960K 1 0
crypto data 1 1K 1K 166960K 1 0
ip6_options 0 0K 0K 166960K 8 0
NDP 10 0K 2K 166960K 409 0
temp 33 9115K 9164K 166960K 45207 0
kqueue 14 22K 24K 166960K 74 0
SYN cache 2 16K 16K 166960K 2 0
ddb{0}> show all pools
Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle
plcache 128 28 0 0 1 0 1 1 0 8 0
rtpcb 120 294 0 291 1 0 1 1 0 8 0
rtentry 176 1448 0 1361 6 1 5 6 0 8 0
unpcb 144 177 0 159 2 1 1 2 0 8 0
syncache 336 6 0 6 1 1 0 1 0 8 0
tcpcb 736 58 0 54 1 0 1 1 0 8 0
arp 136 260 0 246 1 0 1 1 0 8 0
inpcb 328 1022 0 1014 13 12 1 7 0 8 0
nd6 152 388 0 370 1 0 1 1 0 8 0
pkpcb 40 2 0 2 2 2 0 1 0 8 0
kcovpl 48 129 0 123 1 0 1 1 0 8 0
mppekey 1024 1 0 1 1 1 0 1 0 8 0
ppxss 1192 18 0 18 3 3 0 1 0 8 0
pppxif 1576 3 0 3 2 2 0 1 0 8 0
pfstscr 40 3 0 0 1 0 1 1 0 8 0
pffrag 232 3 0 2 1 0 1 1 0 482 0
pffrnode 88 3 0 2 1 0 1 1 0 8 0
pffrent 40 7 0 6 1 0 1 1 0 8 0
pfosfp 40 1428 0 1005 5 0 5 5 0 8 0
pfosfpen 112 1428 0 714 21 0 21 21 0 8 0
pfrktable 1344 2 0 2 2 2 0 1 0 8 0
pfanchor 1288 6 0 4 1 0 1 1 0 8 0
pftag 88 4 0 4 2 2 0 1 0 8 0
pfstitem 24 67 0 29 1 0 1 1 0 8 0
pfstkey 128 67 0 29 2 0 2 2 0 8 0
pfstate 448 65 0 29 6 0 6 6 0 8 0
pfrule 1360 24 0 19 2 1 1 2 0 8 0
art_heap8 4096 3 0 0 3 0 3 3 0 8 0
art_heap4 256 5875 0 5458 39 12 27 31 0 8 0
art_table 40 5878 0 5458 6 1 5 6 0 8 0
art_node 32 1448 0 1369 1 0 1 1 0 8 0
sysvmsgpl 40 2 0 1 2 1 1 1 0 8 0
semapl 72 29 0 17 1 0 1 1 0 8 0
shmpl 120 22 0 6 1 0 1 1 0 8 0
dirhash 1024 21 0 2 3 0 3 3 0 8 0
dino2pl 256 2276 0 511 111 0 111 111 0 8 0
ffsino 296 2276 0 511 136 0 136 136 0 8 0
nchpl 144 2997 0 801 82 0 82 82 0 8 0
vnodes 216 4454 0 0 248 0 248 248 0 8 0
namei 1024 25211 0 25211 6 4 2 3 0 8 2
percpumem 16 193 0 144 1 0 1 1 0 8 0
kstatmem 264 305 0 282 2 0 2 2 0 8 0
scxspl 216 10363 0 10363 11 10 1 8 1 8 1
plimitpl 152 188 0 172 1 0 1 1 0 8 0
sigapl 424 2360 0 2317 7 1 6 7 0 8 0
knotepl 120 345 0 0 11 1 10 10 0 8 0
kqueuepl 224 780 0 770 11 6 5 5 0 8 4
pipepl 344 509 0 482 4 1 3 4 0 8 0
fdescpl 528 2344 0 2317 3 0 3 3 0 8 0
filepl 160 8893 0 8698 26 10 16 18 0 8 7
lockfpl 104 196 0 194 2 1 1 2 0 8 0
lockfspl 48 97 0 95 1 0 1 1 0 8 0
sessionpl 144 233 0 224 1 0 1 1 0 8 0
pgrppl 48 368 0 352 1 0 1 1 0 8 0
ucredpl 104 440 0 427 1 0 1 1 0 8 0
zombiepl 144 2451 0 2449 1 0 1 1 0 8 0
processpl 1240 2360 0 2317 6 2 4 5 0 8 0
procpl 664 3138 0 3086 7 1 6 6 0 8 0
sosppl 176 2 0 2 1 1 0 1 0 8 0
sockpl 752 1502 0 1473 18 14 4 10 0 8 1
mcl64k 65536 3 0 0 1 0 1 1 0 8 0
mcl16k 16384 2 0 0 1 0 1 1 0 8 0
mcl12k 12288 1 0 0 1 0 1 1 0 8 0
mcl8k 8192 3 0 0 1 0 1 1 0 8 0
mcl4k 4096 116 0 0 15 0 15 15 0 8 0
mcl2k 2048 21 0 0 3 0 3 3 0 8 0
mextrefs 64 28 0 0 1 0 1 1 0 8 0
mtagpl 96 4 0 0 1 0 1 1 0 8 0
mbufpl 256 287 0 0 18 0 18 18 0 8 0
bufpl 272 3472 0 106 225 0 225 225 0 8 0
anonpl 32 5288 0 0 43 0 43 43 0 247 0
amapchunkpl 152 42114 0 41722 34 15 19 23 0 158 1
amappl16 200 1741 0 1728 5 3 2 5 0 8 0
amappl15 192 3 0 3 1 1 0 1 0 8 0
amappl14 184 1890 0 1889 1 0 1 1 0 8 0
amappl13 176 369 0 356 1 0 1 1 0 8 0
amappl12 168 3081 0 3055 2 0 2 2 0 8 0
amappl11 160 8 0 8 1 1 0 1 0 8 0
amappl10 152 67 0 53 1 0 1 1 0 8 0
amappl9 144 277 0 277 1 1 0 1 0 8 0
amappl8 136 583 0 581 1 0 1 1 0 8 0
amappl7 128 400 0 386 1 0 1 1 0 8 0
amappl6 120 1370 0 1369 1 0 1 1 0 8 0
amappl5 112 97 0 87 1 0 1 1 0 8 0
amappl4 104 661 0 641 1 0 1 1 0 8 0
amappl3 96 8164 0 8087 3 0 3 3 0 8 0
amappl2 88 1989 0 1916 2 0 2 2 0 8 0
amappl1 80 27311 0 26736 17 3 14 15 0 8 1
amappl 88 12756 0 12621 6 2 4 5 0 92 0
uvmvnodes 80 106 0 0 3 0 3 3 0 8 0
dma4096 4096 1 0 1 1 1 0 1 0 8 0
dma1024 1024 2 0 1 1 0 1 1 0 8 0
dma256 256 6 0 6 1 1 0 1 0 8 0
dma128 128 253 0 253 1 1 0 1 0 8 0
dma64 64 6 0 6 1 1 0 1 0 8 0
dma32 32 7 0 7 1 1 0 1 0 8 0
dma16 16 18 0 17 1 0 1 1 0 8 0
aobjpl 72 24 0 6 1 0 1 1 0 8 0
uaddrrnd 24 2344 0 2317 1 0 1 1 0 8 0
uaddrbest 32 2 0 0 1 0 1 1 0 8 0
uaddr 24 2344 0 2317 1 0 1 1 0 8 0
vmmpekpl 168 18905 0 18847 3 0 3 3 0 8 0
vmmpepl 168 155840 0 154157 96 16 80 89 0 357 1
vmsppl 488 2343 0 2317 7 2 5 5 0 8 1
rwobjpl 80 44411 0 43430 25 2 23 24 0 8 0
pdppl 4096 4695 0 4634 251 182 69 87 0 8 8
pvpl 32 11725 0 0 95 0 95 95 0 265 0
pmappl 256 2343 0 2317 3 0 3 3 0 8 0
extentpl 40 46 0 28 1 0 1 1 0 8 0
phpool 112 694 0 203 15 0 15 15 0 8 0
ddb{0}> machine ddbcpu 0
Invalid cpu 0
ddb{0}> trace
sysctl_doproc(ffff8000303bcb08,4,200000000100,ffff8000303bcb38) at sysctl_doproc+0x270 sys/kern/kern_sysctl.c:1945
kern_sysctl_dirs(42,ffff8000303bcb08,4,200000000100,ffff8000303bcb38,0,3cd64804581fcb5d,ffff8000303bcb08) at kern_sysctl_dirs+0x430 sys/kern/kern_sysctl.c:459
kern_sysctl(ffff8000303bcb04,5,200000000100,ffff8000303bcb38,0,ffac,b8539885311aabcf) at kern_sysctl+0x139 sys/kern/kern_sysctl.c:736
sys_sysctl(ffff80002a22b240,ffff8000303bcc70,ffff8000303bcbc0) at sys_sysctl+0x3e5 sys/kern/kern_sysctl.c:-1
syscall(ffff8000303bcc70) at syscall+0xbd4 mi_syscall sys/sys/syscall_mi.h:176 [inline]
syscall(ffff8000303bcc70) at syscall+0xbd4 sys/arch/amd64/amd64/trap.c:791
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0xcfec424d320, count: -6
ddb{0}> machine ddbcpu 1
Stopped at x86_ipi_db+0x27: addq $0x8,%rsp
ddb{1}> trace
x86_ipi_db(ffff80002999dff0) at x86_ipi_db+0x27 sys/arch/amd64/amd64/db_interface.c:394
x86_ipi_handler() at x86_ipi_handler+0xd9 sys/arch/amd64/amd64/ipi.c:106
Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27
end of kernel
end trace frame: 0x7108a86876e0, count: -3