kernel: protection fault trap, code=0
Stopped at malloc+0x855: movq 0x8(%rbx),%r14
ddb>
ddb> set $lines = 0
ddb> set $maxwidth = 0
ddb> show panic
the kernel did not panic
ddb> show kasan
No such command
ddb> trace
malloc(10,62,2) at malloc+0x855 sys/kern/kern_malloc.c:293
amap_alloc1(20,2,0) at amap_alloc1+0x293 sys/uvm/uvm_amap.c:356
amap_alloc(20000,2,0) at amap_alloc+0xad sys/uvm/uvm_amap.c:-1
amap_copy(fffff9806d0dde70,fffff9806d27abe8,2,0,b3c17564000,b3c17564001) at amap_copy+0x6a8 sys/uvm/uvm_amap.c:570
uvm_fault_check(ffff8000310f7630,ffff8000310f7668,ffff8000310f76a0,0) at uvm_fault_check+0x457 sys/uvm/uvm_fault.c:747
uvm_fault(fffff9806d0dde70,b3c17564000,0,2) at uvm_fault+0xe6 sys/uvm/uvm_fault.c:627
upageflttrap(ffff8000310f77d0,b3c175643f8) at upageflttrap+0xa0 sys/arch/amd64/amd64/trap.c:194
usertrap(ffff8000310f77d0) at usertrap+0x3d1 sys/arch/amd64/amd64/trap.c:648
recall_trap() at recall_trap+0x8
end trace frame: 0x0, count: -9
ddb> show registers
rdi 0xacc21cbba61fc76e
rsi 0x6ae8ad9d
rbp 0xffff8000310f72e0
rbx 0xacc21cbbccf76af3
rdx 0
rcx 0x4
rax 0xffff800039cc3778
r8 0xb3c17564000
r9 0xb3c17564001
r10 0
r11 0x9ca02e55ceb038ae
r12 0x6ae8ad9d
r13 0xffffffff83a429f0 kmemstats+0x1880
r14 0xa30c333 __kernel_phys_end+0x670c333
r15 0xacc21cbba61fc76e
rip 0xffffffff81935175 malloc+0x855
cs 0x8
rflags 0x10286 __ALIGN_SIZE+0xf286
rsp 0xffff8000310f7220
ss 0
malloc+0x855: movq 0x8(%rbx),%r14
ddb> show proc
PROC (syz-executor) tid=28142 pid=34953 tcnt=6 stat=onproc
flags process=10<SUGID> proc=4000000<THREAD>
runpri=50, usrpri=50, slppri=17, nice=20
wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0
forw=0xffffffffffffffff, list=0xffff800039cc2a80,0xffff800039cc3cb8
process=0xffff800039cc84a0 user=0xffff8000310f2000, vmspace=0xfffff9806d0dde70
estcpu=36, cpticks=0, pctcpu=0.0, user=0, sys=0, intr=0
ddb> ps
PID TID PPID UID S PRLAGS PFLAGS WAIT COMMAND
32576 270545 89238 0 2 0 0 syz-executor
34953 440355 88177 60929 2 0x10 0 syz-executor
34953 17879 88177 60929 3 0x10 0x4000080 fsleep syz-executor
34953 370364 88177 60929 3 0x10 0x4000080 fsleep syz-executor
34953 171889 88177 60929 2 0x10 0x4000000 syz-executor
*34953 28142 88177 60929 7 0x10 0x4000000 syz-executor
34953 42398 88177 60929 2 0x10 0x4000000 syz-executor
39474 21046 2497 0 2 0 0 syz-executor
28365 471251 37473 0 2 0 0 syz-executor
58105 454382 49870 0 2 0 0 syz-executor
88177 265565 65929 0 3 0x2 0x80 nanoslp syz-executor
96804 476258 52183 0 2 0 0 syz-executor
96804 248467 52183 0 3 0 0x4000080 sbwait syz-executor
96804 510601 52183 0 3 0 0x4000080 fsleep syz-executor
96804 130221 52183 0 3 0 0x4000080 fsleep syz-executor
57857 269351 47402 0 3 0 0 vmmaplk syz-executor
57857 383506 47402 0 3 0 0x4000000 physio syz-executor
57857 260312 47402 0 3 0 0x4000080 fsleep syz-executor
49870 497888 65929 0 3 0x2 0x80 nanoslp syz-executor
2497 86962 65929 0 2 0x2 0 syz-executor
52183 298844 65929 0 3 0x2 0x80 nanoslp syz-executor
37473 46182 65929 0 2 0x2 0 syz-executor
89238 517332 65929 0 3 0x2 0x80 nanoslp syz-executor
66440 325509 65929 0 2 0x2 0 syz-executor
47402 494637 65929 0 3 0x2 0x80 nanoslp syz-executor
65929 439300 98715 0 2 0x2 0 syz-executor
98715 131200 92836 0 3 0x100002 0x88 sigsusp ksh
92836 33525 11182 0 3 0x10 0x88 kqread sshd-session
11182 128307 9603 0 3 0x12 0x80 kqread sshd-session
50230 110577 1 0 3 0x100003 0x80 ttyin getty
9603 367312 1 0 3 0 0x88 kqread sshd
50461 322750 40783 73 3 0x1100010 0 ffs_fsync syslogd
40783 441930 1 0 3 0x100002 0x80 sbwait syslogd-parent
47268 61670 1 0 3 0x100000 0x80 kqread resolvd
5693 213338 78864 77 3 0x100012 0x80 kqread dhcpleased
10200 76259 78864 77 3 0x100012 0x80 kqread dhcpleased
78864 279605 1 0 3 0 0x80 kqread dhcpleased
13917 489191 0 0 3 0x14000 0x200 bored smr
2311 315994 0 0 2 0x14000 0x200 zerothread
89056 125271 0 0 3 0x14000 0x200 aiodoned aiodoned
28201 271816 0 0 3 0x14000 0x200 syncer update
87954 24104 0 0 3 0x14000 0x200 cleaner cleaner
96896 518737 0 0 3 0x14000 0x200 reaper reaper
83952 476758 0 0 3 0x14000 0x200 pgdaemon pagedaemon
40611 181246 0 0 3 0x14000 0x200 bored viomb
53251 223995 0 0 3 0x14000 0x40000200 acpi0 acpi0
59882 403152 0 0 3 0x14000 0x200 bored softnet0
55575 402648 0 0 3 0x14000 0x200 smrbar systqmp
20335 207791 0 0 3 0x14000 0x200 bored systq
62817 39040 0 0 3 0x14000 0x40000200 tmoslp softclock
3442 435390 0 0 3 0x14000 0x40000200 idle0
1 184696 0 0 3 0x2 0x80 wait init
0 0 -1 0 3 0x10000 0x200 scheduler swapper
ddb> show all locks
No such command
ddb> show malloc
Type InUse MemUse HighUse Limit Requests Type Lim
devbuf 11026 12098K 12168K 166960K 12146 0
pcb 19 12K 12K 166960K 28 0
rtable 240 6K 7K 166960K 439 0
pf 30 12K 16K 166960K 52 0
ifaddr 42 7K 7K 166960K 54 0
ifgroup 50 2K 2K 166960K 62 0
sysctl 1 1K 9K 166960K 5 0
counters 33 17K 18K 166960K 37 0
ioctlops 0 0K 4K 166960K 42 0
iov 1 12K 12K 166960K 6 0
mount 1 1K 1K 166960K 1 0
log 0 0K 0K 166960K 4 0
vnodes 1323 83K 84K 166960K 1423 0
UFS quota 1 32K 32K 166960K 1 0
UFS mount 5 36K 36K 166960K 5 0
shm 2 1K 5K 166960K 3 0
VM map 2 1K 1K 166960K 2 0
sem 2 0K 1K 166960K 101 0
dirhash 12 2K 2K 166960K 12 0
ACPI 1734 201K 291K 166960K 11964 0
file desc 17 61K 89K 166960K 205 0
sigio 0 0K 0K 166960K 1 0
proc 62 67K 91K 166960K 561 0
subproc 72 4K 4K 166960K 91 0
NFS srvsock 1 0K 0K 166960K 1 0
NFS daemon 1 16K 16K 166960K 1 0
ip_moptions 1 0K 0K 166960K 2 0
in_multi 99 6K 6K 166960K 121 0
ether_multi 1 0K 0K 166960K 1 0
mrt 0 0K 0K 166960K 3 0
ISOFS mount 1 32K 32K 166960K 1 0
MSDOSFS mount 1 16K 16K 166960K 1 0
ttys 31 148K 148K 166960K 31 0
exec 0 0K 1K 166960K 400 0
fusefs mount 1 32K 32K 166960K 1 0
tdb 3 0K 0K 166960K 3 0
VM swap 8 62K 64K 166960K 10 0
UVM amap 190 149K 159K 166960K 3289 0
UVM aobj 5 2K 2K 166960K 5 0
pinsyscall 38 76K 93K 166960K 1351 0
memdesc 1 4K 4K 166960K 1 0
crypto data 1 1K 1K 166960K 1 0
NDP 15 0K 2K 166960K 35 0
temp 35 9118K 9138K 166960K 3644 0
kqueue 13 20K 24K 166960K 31 0
SYN cache 2 16K 16K 166960K 2 0
ddb> show all pools
Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle
rtpcb 120 42 0 39 1 0 1 1 0 8 0
rtentry 136 135 0 24 4 0 4 4 0 8 0
unpcb 144 67 0 50 1 0 1 1 0 8 0
syncache 336 4 0 4 1 0 1 1 0 8 1
tcpcb 736 16 0 12 1 0 1 1 0 8 0
arp 96 22 0 4 1 0 1 1 0 8 0
inpcb 328 91 0 81 2 0 2 2 0 8 0
nd6 112 31 0 6 1 0 1 1 0 8 0
kcovpl 48 10 0 2 1 0 1 1 0 8 0
ppxss 1072 2 0 2 1 0 1 1 0 8 1
pfrktable 1344 10 0 10 1 0 1 1 0 8 1
pfanchor 1288 2 0 2 1 0 1 1 0 8 1
pftag 88 2 0 2 1 0 1 1 0 8 1
pfrule 1360 2 0 2 1 0 1 1 0 8 1
art_heap8 4096 1 0 0 1 0 1 1 0 8 0
art_heap4 256 543 0 44 32 0 32 32 0 8 0
art_table 40 544 0 44 6 0 6 6 0 8 0
art_node 32 134 0 32 1 0 1 1 0 8 0
semapl 72 66 0 66 1 0 1 1 0 8 1
shmpl 120 2 0 0 1 0 1 1 0 8 0
dirhash 1024 17 0 0 3 0 3 3 0 8 0
dino2pl 256 1628 0 160 93 0 93 93 0 8 0
ffsino 256 1628 0 160 93 0 93 93 0 8 0
nchpl 144 1884 0 183 64 0 64 64 0 8 0
vnodes 216 1770 0 0 99 0 99 99 0 8 0
namei 1024 6489 0 6489 2 0 2 2 0 8 2
pfiaddrpl 120 2 0 2 1 0 1 1 0 8 1
kstatmem 264 31 0 8 2 0 2 2 0 8 0
scsiplug 72 1 0 1 1 0 1 1 0 8 1
scxspl 216 7046 0 7044 8 0 8 8 1 8 7
plimitpl 152 38 0 21 1 0 1 1 0 8 0
sigapl 424 488 0 446 6 0 6 6 0 8 1
knotepl 120 4000 0 3953 8 0 8 8 0 8 6
kqueuepl 184 31 0 22 1 0 1 1 0 8 0
pipepl 304 135 0 108 3 0 3 3 0 8 0
fdescpl 448 475 0 446 5 0 5 5 0 8 1
filepl 120 1705 0 1494 9 0 9 9 0 8 2
lockfpl 104 17 0 15 1 0 1 1 0 8 0
lockfspl 48 9 0 7 1 0 1 1 0 8 0
sessionpl 144 25 0 17 1 0 1 1 0 8 0
pgrppl 48 35 0 19 1 0 1 1 0 8 0
ucredpl 104 94 0 82 1 0 1 1 0 8 0
zombiepl 144 446 0 446 1 0 1 1 0 8 1
processpl 1160 488 0 446 4 0 4 4 0 8 0
procpl 664 556 0 504 5 0 5 5 0 8 0
sockpl 552 203 0 172 3 0 3 3 0 8 0
mcl64k 65536 1 0 1 1 0 1 1 0 8 1
mcl8k 8192 12 0 12 1 0 1 1 0 8 1
mcl4k 4096 2587 0 2533 14 0 14 14 0 8 7
mcl2k 2048 177 0 176 1 0 1 1 0 8 0
mextrefs 64 63 0 63 1 0 1 1 0 8 1
mtagpl 96 4 0 4 1 0 1 1 0 8 1
mbufpl 256 5040 0 4884 15 0 15 15 0 8 5
bufpl 272 2378 0 89 153 0 153 153 0 8 0
anonpl 24 81711 0 75538 38 0 38 38 0 187 0
amapchunkpl 152 9049 0 8687 22 0 22 22 0 158 7
amappl16 200 1173 0 945 12 0 12 12 0 8 0
amappl15 192 5 0 5 1 0 1 1 0 8 1
amappl14 184 420 0 419 1 0 1 1 0 8 0
amappl13 176 119 0 109 1 0 1 1 0 8 0
amappl12 168 710 0 686 2 0 2 2 0 8 0
amappl11 160 5 0 5 1 0 1 1 0 8 1
amappl10 152 71 0 63 1 0 1 1 0 8 0
amappl9 144 286 0 286 1 0 1 1 0 8 1
amappl8 136 100 0 99 1 0 1 1 0 8 0
amappl7 128 146 0 136 1 0 1 1 0 8 0
amappl6 120 132 0 131 1 0 1 1 0 8 0
amappl5 112 131 0 125 1 0 1 1 0 8 0
amappl4 104 265 0 251 1 0 1 1 0 8 0
amappl3 96 1733 0 1646 4 0 4 4 0 8 1
amappl2 88 440 0 392 2 0 2 2 0 8 0
amappl1 80 10345 0 9809 13 0 13 13 0 8 1
amappl 88 2587 0 2459 4 0 4 4 0 92 0
uvmvnodes 80 99 0 0 3 0 3 3 0 8 0
dma4096 4096 1 0 1 1 0 1 1 0 8 1
dma1024 1024 1 0 0 1 0 1 1 0 8 0
dma256 256 6 0 6 1 0 1 1 0 8 1
dma128 128 254 0 254 1 0 1 1 0 8 1
dma64 64 6 0 6 1 0 1 1 0 8 1
dma32 32 7 0 7 1 0 1 1 0 8 1
dma16 16 18 0 17 1 0 1 1 0 8 0
aobjpl 72 4 0 0 1 0 1 1 0 8 0
uaddrrnd 24 475 0 446 1 0 1 1 0 8 0
uaddrbest 32 2 0 0 1 0 1 1 0 8 0
uaddr 24 475 0 446 1 0 1 1 0 8 0
vmmpekpl 168 5516 0 5484 2 0 2 2 0 8 0
vmmpepl 168 39411 0 37510 87 0 87 87 0 357 0
vmsppl 368 474 0 446 4 0 4 4 0 8 1
rwobjpl 40 14077 0 12984 12 0 12 12 0 8 0
pdppl 4096 956 0 892 96 28 68 78 0 8 4
pvpl 32 217767 0 206141 97 0 97 97 0 265 0
pmappl 216 474 0 446 2 0 2 2 0 8 0
extentpl 40 46 0 28 1 0 1 1 0 8 0
phpool 112 520 0 28 15 0 15 15 0 8 0
ddb> machine ddbcpu 0
No such command
ddb> trace
malloc(10,62,2) at malloc+0x855 sys/kern/kern_malloc.c:293
amap_alloc1(20,2,0) at amap_alloc1+0x293 sys/uvm/uvm_amap.c:356
amap_alloc(20000,2,0) at amap_alloc+0xad sys/uvm/uvm_amap.c:-1
amap_copy(fffff9806d0dde70,fffff9806d27abe8,2,0,b3c17564000,b3c17564001) at amap_copy+0x6a8 sys/uvm/uvm_amap.c:570
uvm_fault_check(ffff8000310f7630,ffff8000310f7668,ffff8000310f76a0,0) at uvm_fault_check+0x457 sys/uvm/uvm_fault.c:747
uvm_fault(fffff9806d0dde70,b3c17564000,0,2) at uvm_fault+0xe6 sys/uvm/uvm_fault.c:627
upageflttrap(ffff8000310f77d0,b3c175643f8) at upageflttrap+0xa0 sys/arch/amd64/amd64/trap.c:194
usertrap(ffff8000310f77d0) at usertrap+0x3d1 sys/arch/amd64/amd64/trap.c:648
recall_trap() at recall_trap+0x8
end trace frame: 0x0, count: -9
ddb> machine ddbcpu 1
No such command
ddb> trace
malloc(10,62,2) at malloc+0x855 sys/kern/kern_malloc.c:293
amap_alloc1(20,2,0) at amap_alloc1+0x293 sys/uvm/uvm_amap.c:356
amap_alloc(20000,2,0) at amap_alloc+0xad sys/uvm/uvm_amap.c:-1
amap_copy(fffff9806d0dde70,fffff9806d27abe8,2,0,b3c17564000,b3c17564001) at amap_copy+0x6a8 sys/uvm/uvm_amap.c:570
uvm_fault_check(ffff8000310f7630,ffff8000310f7668,ffff8000310f76a0,0) at uvm_fault_check+0x457 sys/uvm/uvm_fault.c:747
uvm_fault(fffff9806d0dde70,b3c17564000,0,2) at uvm_fault+0xe6 sys/uvm/uvm_fault.c:627
upageflttrap(ffff8000310f77d0,b3c175643f8) at upageflttrap+0xa0 sys/arch/amd64/amd64/trap.c:194
usertrap(ffff8000310f77d0) at usertrap+0x3d1 sys/arch/amd64/amd64/trap.c:648
recall_trap() at recall_trap+0x8
end trace frame: 0x0, count: -9