kernel: protection fault trap, code=0 Stopped at malloc+0x855: movq 0x8(%rbx),%r14 ddb> ddb> set $lines = 0 ddb> set $maxwidth = 0 ddb> show panic the kernel did not panic ddb> show kasan No such command ddb> trace malloc(10,7f,1) at malloc+0x855 sys/kern/kern_malloc.c:294 ktrsyscall(ffff80002a736008,67,8,ffff80002a867d80) at ktrsyscall+0x199 sys/kern/kern_ktrace.c:174 syscall(ffff80002a867d80) at syscall+0x2bc mi_syscall sys/sys/syscall_mi.h:154 [inline] syscall(ffff80002a867d80) at syscall+0x2bc sys/arch/amd64/amd64/trap.c:783 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7c2b669dc860, count: -4 ddb> show registers rdi 0x368f2afaa9d49f02 rsi 0x36f6 __ALIGN_SIZE+0x26f6 rbp 0xffff80002a867bd0 rbx 0x368f2afaa9d4a9f4 rdx 0 rcx 0x4 rax 0xffff80002a736008 r8 0 r9 0 r10 0 r11 0xfab8895ede3cd6bb r12 0x36f6 __ALIGN_SIZE+0x26f6 r13 0xffffffff83a89be0 kmemstats+0x1fc0 r14 0xa30c333 __kernel_phys_end+0x670c333 r15 0x368f2afaa9d49f02 rip 0xffffffff82944bc5 malloc+0x855 cs 0x8 rflags 0x10202 __ALIGN_SIZE+0xf202 rsp 0xffff80002a867b10 ss 0x10 malloc+0x855: movq 0x8(%rbx),%r14 ddb> show proc PROC (syz-executor) tid=474410 pid=89566 tcnt=1 stat=onproc flags process=10000002 proc=1 runpri=32, usrpri=50, slppri=32, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0 forw=0xffffffffffffffff, list=0xffff80002a7362a0,0xffff80002a736548 process=0xffff80002a792890 user=0xffff80002a862000, vmspace=0xfffffc806fa36a18 estcpu=36, cpticks=4, pctcpu=0.0, user=0, sys=4, intr=0 ddb> ps PID TID PPID UID S FLAGS WAIT COMMAND 87117 446516 69320 0 2 0x10 syz-executor 87117 413677 69320 0 3 0x4000090 ttyout syz-executor 6679 494836 6737 -1 4 0x82010 syz-executor 6679 302930 6737 -1 3 0x4082010 smrbar syz-executor 6679 223473 6737 -1 3 0x4002010 suspend syz-executor 63676 521322 83125 0 2 0x1 syz-executor 63676 230936 83125 0 3 0x4000081 fsleep syz-executor 7927 218103 22387 0 2 0xc81 syz-executor 7927 25917 22387 0 3 0x4000081 ttyout syz-executor 7927 316684 22387 0 3 0x4000081 fsleep syz-executor 92612 261018 38565 -1 2 0xc90 syz-executor 92612 268578 38565 -1 3 0x4000090 lockf syz-executor 92612 168050 38565 -1 3 0x4000090 fsleep syz-executor 92612 241461 38565 -1 3 0x4000090 fsleep syz-executor 14624 155295 53164 0 2 0xc80 syz-executor 14624 324063 53164 0 3 0x4000080 pipewr syz-executor 14624 37479 53164 0 3 0x4000080 fsleep syz-executor 22387 290963 5860 0 2 0xc82 syz-executor 69320 341429 5860 0 2 0xc82 syz-executor *89566 474410 5860 0 7 0x10000003 syz-executor 53164 292780 5860 0 2 0xc82 syz-executor 78400 259639 5860 0 2 0x2 syz-executor 83125 484949 5860 0 2 0xc82 syz-executor 6737 240450 5860 0 2 0xc82 syz-executor 38565 389051 5860 0 2 0xc82 syz-executor 5860 18266 44695 0 2 0x2 syz-executor 44695 370466 87086 0 3 0x10008a sigsusp ksh 87086 208470 61721 0 3 0x98 kqread sshd-session 61721 409198 56577 0 3 0x92 kqread sshd-session 98673 78257 1 0 3 0x100083 ttyin getty 56577 39695 1 0 3 0x88 kqread sshd 5056 402877 13371 73 3 0x1100090 kqread syslogd 13371 456926 1 0 3 0x100082 sbwait syslogd 11510 417747 1 0 3 0x100080 kqread resolvd 8737 463818 25202 77 3 0x100092 kqread dhcpleased 91205 523977 25202 77 3 0x100092 kqread dhcpleased 25202 318753 1 0 3 0x80 kqread dhcpleased 16772 431993 0 0 3 0x14200 bored smr 85821 135003 0 0 2 0x14200 zerothread 71017 129657 0 0 3 0x14200 aiodoned aiodoned 95815 63716 0 0 3 0x14200 syncer update 60712 437576 0 0 3 0x14200 cleaner cleaner 22725 430985 0 0 3 0x14200 reaper reaper 12088 486668 0 0 3 0x14200 pgdaemon pagedaemon 71453 49543 0 0 3 0x14200 bored viomb 95467 133338 0 0 3 0x40014200 acpi0 acpi0 6355 294010 0 0 3 0x14200 bored softnet0 29910 220740 0 0 3 0x14200 bored systqmp 56366 68967 0 0 3 0x14200 bored systq 61047 93929 0 0 3 0x40014200 tmoslp softclock 83428 460586 0 0 3 0x40014200 idle0 1 190278 0 0 3 0x82 wait init 0 0 -1 0 3 0x10200 scheduler swapper ddb> show all locks No such command ddb> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 11031 12101K 13154K 166960K 12481 0 pcb 19 12K 12K 166960K 34 0 rtable 249 9K 9K 166960K 377 0 pf 32 13K 15K 166960K 40 0 ifaddr 43 7K 7K 166960K 48 0 ifgroup 52 2K 2K 166960K 59 0 sysctl 2 1K 9K 166960K 7 0 counters 36 18K 18K 166960K 39 0 ioctlops 0 0K 4K 166960K 47 0 iov 0 0K 12K 166960K 6 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1453 91K 91K 166960K 1563 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 2 1K 1K 166960K 2 0 VM map 2 1K 1K 166960K 2 0 sem 6 0K 0K 166960K 6 0 dirhash 12 2K 2K 166960K 12 0 ACPI 1734 201K 291K 166960K 11964 0 file desc 16 57K 97K 166960K 202 0 sigio 0 0K 0K 166960K 4 0 proc 59 59K 124K 166960K 515 0 subproc 72 4K 4K 166960K 72 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 ip_moptions 1 0K 0K 166960K 5 0 in_multi 99 7K 7K 166960K 100 0 ether_multi 1 0K 0K 166960K 1 0 mrt 0 0K 0K 166960K 6 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 49 228K 228K 166960K 49 0 exec 0 0K 1K 166960K 369 0 fusefs mount 1 32K 32K 166960K 1 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 216 142K 151K 166960K 3511 0 UVM aobj 6 2K 2K 166960K 6 0 pinsyscall 37 74K 96K 166960K 1305 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 ip6_options 0 0K 0K 166960K 6 0 NDP 12 0K 2K 166960K 30 0 temp 35 9106K 9113K 166960K 6543 0 kqueue 16 24K 26K 166960K 40 0 SYN cache 2 16K 16K 166960K 2 0 ddb> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle rtpcb 120 42 0 39 1 0 1 1 0 8 0 rtentry 136 113 0 2 4 0 4 4 0 8 0 unpcb 144 93 0 75 2 0 2 2 0 8 1 syncache 336 6 0 6 1 0 1 1 0 8 1 tcpcb 736 33 0 28 1 0 1 1 0 8 0 arp 96 18 0 0 1 0 1 1 0 8 0 ipq 40 2 0 2 1 0 1 1 0 8 1 ipqe 40 4 0 4 1 0 1 1 0 8 1 inpcb 328 121 0 108 2 0 2 2 0 8 0 nd6 112 25 0 0 1 0 1 1 0 8 0 kcovpl 48 8 0 0 1 0 1 1 0 8 0 ppxss 1072 5 0 2 1 0 1 1 0 8 0 pppxif 1416 1 0 1 1 0 1 1 0 8 1 pfosfp 40 1 0 0 1 0 1 1 0 8 0 pfosfpen 112 1 0 0 1 0 1 1 0 8 0 pftag 88 1 0 1 1 0 1 1 0 8 1 pfrule 1360 1 0 1 1 0 1 1 0 8 1 art_heap8 4096 1 0 0 1 0 1 1 0 8 0 art_heap4 256 460 0 6 29 0 29 29 0 8 0 art_table 40 461 0 6 5 0 5 5 0 8 0 art_node 32 113 0 12 1 0 1 1 0 8 0 semupl 112 2 0 2 1 0 1 1 0 8 1 semapl 72 4 0 0 1 0 1 1 0 8 0 shmpl 112 3 0 0 1 0 1 1 0 8 0 dirhash 1024 17 0 0 3 0 3 3 0 8 0 dino2pl 256 1670 0 208 92 0 92 92 0 8 0 ffsino 256 1670 0 208 92 0 92 92 0 8 0 nchpl 144 1964 0 270 64 0 64 64 0 8 0 rtmask 32 2 0 0 1 0 1 1 0 8 0 vnodes 216 1940 0 0 108 0 108 108 0 8 0 namei 1024 6031 0 6031 2 0 2 2 0 8 2 kstatmem 264 29 0 4 2 0 2 2 0 8 0 scxspl 216 6860 0 6860 8 0 8 8 1 8 8 plimitpl 152 31 0 14 1 0 1 1 0 8 0 sigapl 424 498 0 456 6 0 6 6 0 8 1 knotepl 120 6059 0 5977 14 0 14 14 0 8 11 kqueuepl 184 46 0 31 1 0 1 1 0 8 0 pipepl 304 130 0 101 3 0 3 3 0 8 0 fdescpl 448 485 0 457 5 0 5 5 0 8 1 filepl 120 2009 0 1776 11 0 11 11 0 8 3 lockfpl 104 24 0 20 1 0 1 1 0 8 0 lockfspl 48 12 0 9 1 0 1 1 0 8 0 sessionpl 144 31 0 21 1 0 1 1 0 8 0 pgrppl 48 39 0 21 1 0 1 1 0 8 0 ucredpl 104 158 0 143 1 0 1 1 0 8 0 zombiepl 144 457 0 456 1 0 1 1 0 8 0 processpl 1152 498 0 456 4 0 4 4 0 8 0 procpl 664 600 0 547 5 0 5 5 0 8 0 sockpl 552 258 0 223 6 0 6 6 0 8 3 mcl64k 65536 6 0 6 1 0 1 1 0 8 1 mcl16k 16384 4 0 4 1 0 1 1 0 8 1 mcl8k 8192 6 0 6 1 0 1 1 0 8 1 mcl4k 4096 2589 0 2538 14 0 14 14 0 8 6 mcl2k 2048 168 0 168 1 0 1 1 0 8 1 mextrefs 64 64 0 64 1 0 1 1 0 8 1 mtagpl 96 5 0 4 1 0 1 1 0 8 0 mbufpl 256 5047 0 4882 18 0 18 18 0 8 7 bufpl 272 2351 0 103 150 0 150 150 0 8 0 anonpl 24 77732 0 74637 21 0 21 21 0 187 0 amapchunkpl 152 9467 0 9010 21 0 21 21 0 158 1 amappl16 200 950 0 927 4 0 4 4 0 8 2 amappl15 192 6 0 5 1 0 1 1 0 8 0 amappl14 184 410 0 409 1 0 1 1 0 8 0 amappl13 176 207 0 197 1 0 1 1 0 8 0 amappl12 168 719 0 692 2 0 2 2 0 8 0 amappl11 160 9 0 9 1 0 1 1 0 8 1 amappl10 152 56 0 46 1 0 1 1 0 8 0 amappl9 144 305 0 305 1 0 1 1 0 8 1 amappl8 136 94 0 93 1 0 1 1 0 8 0 amappl7 128 137 0 126 1 0 1 1 0 8 0 amappl6 120 147 0 146 1 0 1 1 0 8 0 amappl5 112 97 0 90 1 0 1 1 0 8 0 amappl4 104 293 0 277 1 0 1 1 0 8 0 amappl3 96 1812 0 1708 3 0 3 3 0 8 0 amappl2 88 550 0 496 2 0 2 2 0 8 0 amappl1 80 10365 0 9816 13 0 13 13 0 8 1 amappl 88 2814 0 2660 4 0 4 4 0 92 0 uvmvnodes 80 98 0 0 2 0 2 2 0 8 0 dma4096 4096 1 0 1 1 0 1 1 0 8 1 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 6 0 6 1 0 1 1 0 8 1 dma128 128 253 0 253 1 0 1 1 0 8 1 dma64 64 6 0 6 1 0 1 1 0 8 1 dma32 32 7 0 7 1 0 1 1 0 8 1 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 5 0 0 1 0 1 1 0 8 0 uaddrrnd 24 485 0 457 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 485 0 457 1 0 1 1 0 8 0 vmmpekpl 168 5811 0 5770 2 0 2 2 0 8 0 vmmpepl 168 39449 0 37728 80 0 80 80 0 357 0 vmsppl 368 484 0 457 4 0 4 4 0 8 1 rwobjpl 40 13850 0 12913 11 0 11 11 0 8 1 pdppl 4096 976 0 914 100 34 66 82 0 8 4 pvpl 32 215155 0 206689 76 0 76 76 0 265 3 pmappl 216 484 0 457 3 0 3 3 0 8 0 extentpl 40 46 0 28 1 0 1 1 0 8 0 phpool 112 520 0 34 14 0 14 14 0 8 0 ddb> machine ddbcpu 0 No such command ddb> trace malloc(10,7f,1) at malloc+0x855 sys/kern/kern_malloc.c:294 ktrsyscall(ffff80002a736008,67,8,ffff80002a867d80) at ktrsyscall+0x199 sys/kern/kern_ktrace.c:174 syscall(ffff80002a867d80) at syscall+0x2bc mi_syscall sys/sys/syscall_mi.h:154 [inline] syscall(ffff80002a867d80) at syscall+0x2bc sys/arch/amd64/amd64/trap.c:783 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7c2b669dc860, count: -4 ddb> machine ddbcpu 1 No such command ddb> trace malloc(10,7f,1) at malloc+0x855 sys/kern/kern_malloc.c:294 ktrsyscall(ffff80002a736008,67,8,ffff80002a867d80) at ktrsyscall+0x199 sys/kern/kern_ktrace.c:174 syscall(ffff80002a867d80) at syscall+0x2bc mi_syscall sys/sys/syscall_mi.h:154 [inline] syscall(ffff80002a867d80) at syscall+0x2bc sys/arch/amd64/amd64/trap.c:783 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7c2b669dc860, count: -4