kernel: protection fault trap, code=0 Stopped at icmp_mtudisc_timeout+0x111: movq 0(%rax),%rcx ddb> ddb> set $lines = 0 ddb> set $maxwidth = 0 ddb> show panic the kernel did not panic ddb> trace icmp_mtudisc_timeout(fffffd806ed78330,0) at icmp_mtudisc_timeout+0x111 sys/netinet/ip_icmp.c:1102 rt_timer_queue_flush(ffffffff83899c38) at rt_timer_queue_flush+0x281 sys/net/route.c:1586 ip_sysctl(ffff80003ca4d21c,1,0,ffff80003ca4d248,200000001300,4) at ip_sysctl+0x845 sys/netinet/ip_input.c:1753 net_sysctl(ffff80003ca4d214,3,0,ffff80003ca4d248,200000001300,4,22efeba6f5c124a6) at net_sysctl+0x64e sys/kern/uipc_domain.c:260 sys_sysctl(ffff800035d34548,ffff80003ca4d380,ffff80003ca4d2d0) at sys_sysctl+0x3f2 sys/kern/kern_sysctl.c:-1 syscall(ffff80003ca4d380) at syscall+0x97e mi_syscall sys/sys/syscall_mi.h:-1 [inline] syscall(ffff80003ca4d380) at syscall+0x97e sys/arch/amd64/amd64/trap.c:748 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x10e9dff9570, count: -7 ddb> show registers rdi 0x14 rsi 0x14 rbp 0xffff80003ca4d050 rbx 0x3 rdx 0xffff80000146c600 rcx 0xc11 rax 0x65198978ceaab57b r8 0xffffffff81b27050 tcp_mtudisc_increase r9 0 r10 0xa7b64c109e4d784e r11 0x8ebf7af2b9ffd784 r12 0xffff800000039058 r13 0x14 r14 0 r15 0xfffffd806ed78330 rip 0xffffffff81264901 icmp_mtudisc_timeout+0x111 cs 0x8 rflags 0x10246 __ALIGN_SIZE+0xf246 rsp 0xffff80003ca4d000 ss 0x10 icmp_mtudisc_timeout+0x111: movq 0(%rax),%rcx ddb> show proc PROC (syz-executor) tid=474097 pid=62799 tcnt=3 stat=onproc flags process=0 proc=4000000 runpri=32, usrpri=83, slppri=32, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0 forw=0xffffffffffffffff, list=0xffff800035d34028,0xffff800035d34a78 process=0xffff80002cd1edc8 user=0xffff80003ca48000, vmspace=0xfffffd806bbbde70 estcpu=33, cpticks=0, pctcpu=0.0, user=0, sys=0, intr=0 ddb> ps PID TID PPID UID S FLAGS WAIT COMMAND 50491 423431 88775 0 2 0 syz-executor 50491 471470 88775 0 3 0x4000080 fsleep syz-executor 9786 255890 24417 0 2 0x10 syz-executor 9786 158295 24417 0 3 0x4000090 fsleep syz-executor 9786 233674 24417 0 3 0x4000090 fsleep syz-executor 62799 207841 15810 0 2 0 syz-executor *62799 474097 15810 0 7 0x4000000 syz-executor 62799 324870 15810 0 3 0x4000080 fsleep syz-executor 54645 39828 36053 0 2 0x1 syz-executor 54645 490377 36053 0 3 0x4000080 kqpoll syz-executor 54645 28744 36053 0 2 0x4000000 syz-executor 965 378207 16586 0 2 0 syz-executor 965 44093 16586 0 3 0x4000080 sbwait syz-executor 965 72020 16586 0 3 0x4000080 fsleep syz-executor 965 522417 16586 0 3 0x4000080 fsleep syz-executor 45767 395895 77923 0 3 0x3000 suspend syz-executor 45767 376250 77923 0 2 0x4081000 syz-executor 15810 408461 87412 0 2 0xc82 syz-executor 41667 421302 87412 0 2 0x2 syz-executor 30780 170099 0 0 3 0x14280 nfsidl nfsio 31609 298264 0 0 3 0x14280 nfsidl nfsio 19580 322471 0 0 3 0x14280 nfsidl nfsio 76232 522092 0 0 3 0x14280 nfsidl nfsio 11693 49025 0 0 3 0x14280 nfsidl nfsio 54178 295412 0 0 3 0x14280 nfsidl nfsio 80793 379859 0 0 3 0x14280 nfsidl nfsio 6557 258661 0 0 3 0x14280 nfsidl nfsio 59532 415792 0 0 3 0x14280 nfsidl nfsio 61985 384857 0 0 3 0x14280 nfsidl nfsio 60227 310733 0 0 3 0x14280 nfsidl nfsio 25933 137811 0 0 3 0x14280 nfsidl nfsio 90688 200978 0 0 3 0x14280 nfsidl nfsio 87366 441527 0 0 3 0x14280 nfsidl nfsio 25005 290388 0 0 3 0x14280 nfsidl nfsio 30464 488722 0 0 3 0x14280 nfsidl nfsio 89302 62019 0 0 3 0x14280 nfsidl nfsio 9406 469438 0 0 3 0x14280 nfsidl nfsio 54785 10626 0 0 3 0x14280 nfsidl nfsio 82537 379204 0 0 3 0x14280 nfsidl nfsio 44751 130467 46456 0 3 0x82 sbwait sshd-session 44325 333801 0 0 3 0x14200 acct acct 36053 412489 87412 0 2 0xc82 syz-executor 68854 347187 46456 0 3 0x82 sbwait sshd-session 24417 513248 87412 0 2 0xc82 syz-executor 58128 110214 46456 0 3 0x82 sbwait sshd-session 17025 6659 46456 0 3 0x82 sbwait sshd-session 11682 278299 0 0 3 0x14200 bored sosplice 77923 35596 87412 0 2 0xc82 syz-executor 88775 203447 87412 0 2 0xc82 syz-executor 16586 389260 87412 0 2 0xc82 syz-executor 33000 59738 87412 0 2 0xc82 syz-executor 87412 194625 74929 0 3 0x82 kqread syz-executor 74929 33475 99828 0 3 0x10008a sigsusp ksh 99828 442112 81395 0 3 0x98 kqread sshd-session 81395 147027 46456 0 3 0x92 kqread sshd-session 24232 270649 1 0 3 0x100083 ttyopn getty 46456 129491 1 0 3 0x88 kqread sshd 57013 190077 85370 73 3 0x1100090 kqread syslogd 85370 97978 1 0 3 0x100082 sbwait syslogd 77482 457830 1 0 3 0x100080 kqread resolvd 40726 234700 417 77 3 0x100092 kqread dhcpleased 81213 416284 417 77 3 0x100092 kqread dhcpleased 417 452032 1 0 3 0x80 kqread dhcpleased 90821 518786 0 0 3 0x14200 bored smr 57447 320927 0 0 2 0x14200 zerothread 9908 348942 0 0 3 0x14200 aiodoned aiodoned 87539 147793 0 0 3 0x14200 syncer update 55571 90114 0 0 3 0x14200 cleaner cleaner 88928 418652 0 0 3 0x14200 reaper reaper 72572 180562 0 0 3 0x14200 pgdaemon pagedaemon 84967 78157 0 0 3 0x14200 bored viomb 44055 394048 0 0 3 0x40014200 acpi0 acpi0 51830 394762 0 0 3 0x14200 bored softnet7 77298 340580 0 0 3 0x14200 bored softnet6 44556 50663 0 0 3 0x14200 bored softnet5 47486 341742 0 0 3 0x14200 bored softnet4 75954 522027 0 0 3 0x14200 bored softnet3 33840 472469 0 0 3 0x14200 bored softnet2 73269 104148 0 0 3 0x14200 bored softnet1 24418 40517 0 0 3 0x14200 bored softnet0 89782 271150 0 0 2 0x14200 systqmp 42572 384566 0 0 3 0x14200 bored systq 16043 303835 0 0 2 0x40014200 softclock 60971 337920 0 0 3 0x40014200 idle0 1 112208 0 0 3 0x82 wait init 0 0 -1 0 3 0x10010200 scheduler swapper ddb> show all locks No such command ddb> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 10236 11148K 11844K 166960K 13996 0 pcb 18 15K 17K 166960K 293 0 rtable 163 8K 9K 166960K 477 0 pf 35 14K 131086K 166960K 140 0 ifaddr 33 5K 7K 166960K 115 0 ifgroup 55 2K 2K 166960K 180 0 sysctl 3 1K 9K 166960K 16 0 counters 33 17K 18K 166960K 159 0 ioctlops 0 0K 4K 166960K 247 0 iov 1 4K 17K 166960K 121 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1484 93K 94K 166960K 2734 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 2 1K 5K 166960K 18 0 VM map 2 1K 1K 166960K 2 0 sem 12 0K 0K 166960K 68 0 dirhash 12 2K 2K 166960K 30 0 ACPI 1692 195K 286K 166960K 12470 0 file desc 17 61K 97K 166960K 1085 0 sigio 0 0K 0K 166960K 51 0 proc 60 59K 124K 166960K 634 0 subproc 72 4K 4K 166960K 108 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 ip_moptions 0 0K 0K 166960K 145 0 in_multi 61 4K 7K 166960K 197 0 ether_multi 1 0K 0K 166960K 10 0 mrt 1 0K 0K 166960K 10 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 319 1420K 1420K 166960K 319 0 exec 0 0K 1K 166960K 459 0 fusefs mount 1 32K 32K 166960K 1 0 pfkey data 0 0K 0K 166960K 5 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 278 187K 199K 166960K 11158 0 UVM aobj 36 2K 4K 166960K 38 0 pinsyscall 46 92K 98K 166960K 2256 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 ip6_options 0 0K 0K 166960K 58 0 NDP 13 0K 2K 166960K 76 0 temp 78 8678K 8744K 166960K 36473 0 kqueue 16 26K 36K 166960K 198 0 SYN cache 2 16K 16K 166960K 2 0 ddb> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle rtpcb 120 103 0 99 1 0 1 1 0 8 0 rtentry 136 169 0 113 4 1 3 4 0 8 0 unpcb 144 733 0 705 8 2 6 6 0 8 4 syncache 336 10 0 10 1 1 0 1 0 8 0 tcpqe 32 1 0 1 1 1 0 1 0 8 0 tcpcb 736 377 0 359 10 5 5 7 0 8 3 arp 88 16 0 9 1 0 1 1 0 8 0 ipq 40 2 0 2 1 0 1 1 0 8 1 ipqe 40 2 0 2 1 0 1 1 0 8 1 inpcb 328 1260 0 1236 16 6 10 10 0 8 5 nd6 104 28 0 18 1 0 1 1 0 8 0 pkpcb 40 11 0 11 2 1 1 1 0 8 1 kcovpl 48 12 0 4 1 0 1 1 0 8 0 ppxss 1072 106 0 106 1 0 1 1 0 8 1 pppxif 1384 11 0 11 2 1 1 1 0 8 1 pfstscr 40 3 0 2 1 0 1 1 0 8 0 pffrag 232 5 0 2 1 0 1 1 0 482 0 pffrnode 88 5 0 2 1 0 1 1 0 8 0 pffrent 40 11 0 8 1 0 1 1 0 8 0 pfanchor 1288 3 0 0 1 0 1 1 0 8 0 pftag 88 1 0 1 1 1 0 1 0 8 0 pfstitem 24 1 0 0 1 0 1 1 0 8 0 pfstkey 128 2 0 1 1 0 1 1 0 8 0 pfstate 384 2 0 1 1 0 1 1 0 8 0 pfrule 1344 2 0 2 1 1 0 1 0 8 0 rttmr 136 9 0 7 2 1 1 1 0 8 0 art_heap8 4096 3 0 0 3 0 3 3 0 8 0 art_heap4 256 797 0 474 29 8 21 28 0 8 0 art_table 40 800 0 474 5 0 5 5 0 8 0 art_node 32 168 0 118 1 0 1 1 0 8 0 sysvmsgpl 40 40 0 35 1 0 1 1 0 8 0 semupl 112 4 0 4 2 1 1 1 0 8 1 semapl 112 64 0 54 1 0 1 1 0 8 0 shmpl 112 35 0 2 1 0 1 1 0 8 0 dirhash 1024 30 0 13 3 0 3 3 0 8 0 dino2pl 256 3332 0 1835 95 0 95 95 0 8 0 ffsino 256 3332 0 1835 95 0 95 95 0 8 0 nchpl 144 4790 0 3096 63 0 63 63 0 8 0 rtmask 32 9 0 9 2 1 1 1 0 8 1 uvmvnodes 80 4399 0 0 90 0 90 90 0 8 0 vnodes 216 4399 0 0 245 0 245 245 0 8 0 namei 1024 17446 0 17444 4 2 2 2 0 8 1 kstatmem 264 102 0 78 3 0 3 3 0 8 1 acpiwqpl 32 2 0 2 1 0 1 1 1 8 1 scsiplug 72 9 0 9 2 1 1 1 0 8 1 scxspl 216 15906 0 15906 15 7 8 8 1 8 8 plimitpl 152 260 0 244 1 0 1 1 0 8 0 sigapl 424 1391 0 1316 9 0 9 9 0 8 0 knotepl 120 48437 0 48344 43 30 13 19 0 8 8 kqueuepl 184 575 0 561 5 4 1 5 0 8 0 pipepl 304 186 0 159 3 0 3 3 0 8 0 fdescpl 448 1348 0 1315 5 1 4 5 0 8 0 filepl 120 9335 0 9088 13 1 12 12 0 8 2 lockfpl 104 1437 0 1432 3 2 1 3 0 8 0 lockfspl 48 561 0 557 2 1 1 2 0 8 0 sessionpl 144 32 0 20 1 0 1 1 0 8 0 pgrppl 48 85 0 65 1 0 1 1 0 8 0 ucredpl 104 1327 0 1315 1 0 1 1 0 8 0 zombiepl 144 1538 0 1536 1 0 1 1 0 8 0 processpl 1168 1391 0 1316 6 0 6 6 0 8 0 procpl 656 2794 0 2708 9 0 9 9 0 8 1 sosppl 168 5 0 5 2 1 1 1 0 8 1 sockpl 552 2133 0 2077 19 6 13 13 0 8 7 mcl64k 65536 55 0 49 1 0 1 1 0 8 0 mcl16k 16384 6 0 5 1 0 1 1 0 8 0 mcl12k 12288 2 0 2 2 1 1 1 0 8 1 mcl9k 9216 4 0 4 1 0 1 1 0 8 1 mcl8k 8192 15 0 15 2 1 1 1 0 8 1 mcl4k 4096 3665 0 3614 15 7 8 14 0 8 1 mcl2k 2048 1751 0 1745 4 2 2 3 0 8 1 mtagpl 96 133 0 25 3 0 3 3 0 8 0 mbufpl 256 15526 0 15276 83 57 26 81 0 8 8 bufpl 280 5399 0 117 378 0 378 378 0 8 0 anonpl 24 189839 0 185799 50 12 38 43 0 187 6 amapchunkpl 152 36466 0 35921 32 5 27 28 0 158 0 amappl16 200 2783 0 2756 6 2 4 6 0 8 0 amappl15 192 6 0 6 1 1 0 1 0 8 0 amappl14 184 128 0 114 1 0 1 1 0 8 0 amappl13 176 6 0 6 1 1 0 1 0 8 0 amappl12 168 2030 0 1997 2 0 2 2 0 8 0 amappl11 160 51 0 41 1 0 1 1 0 8 0 amappl10 152 11 0 11 1 1 0 1 0 8 0 amappl9 144 256 0 256 1 1 0 1 0 8 0 amappl8 136 28 0 27 1 0 1 1 0 8 0 amappl7 128 114 0 100 1 0 1 1 0 8 0 amappl6 120 219 0 211 1 0 1 1 0 8 0 amappl5 112 126 0 119 1 0 1 1 0 8 0 amappl4 104 313 0 296 1 0 1 1 0 8 0 amappl3 96 7217 0 7093 4 0 4 4 0 8 0 amappl2 88 731 0 648 2 0 2 2 0 8 0 amappl1 80 13784 0 12903 20 0 20 20 0 8 0 amappl 88 10225 0 10038 5 0 5 5 0 92 0 dma8192 8192 1 0 1 1 1 0 1 0 8 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 256 0 256 1 1 0 1 0 8 0 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 19 0 18 1 0 1 1 0 8 0 aobjpl 72 37 0 2 1 0 1 1 0 8 0 uaddrrnd 24 1348 0 1315 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 1348 0 1315 1 0 1 1 0 8 0 vmmpekpl 168 12048 0 12001 3 0 3 3 0 8 0 vmmpepl 168 88912 0 86483 113 2 111 113 0 357 2 vmsppl 368 1347 0 1315 4 0 4 4 0 8 0 rwobjpl 40 28411 0 22717 58 0 58 58 0 8 0 pdppl 4096 2702 0 2630 120 46 74 82 0 8 2 pvpl 32 566744 0 555137 152 27 125 132 0 265 15 pmappl 216 1347 0 1315 3 0 3 3 0 8 0 extentpl 40 45 0 27 1 0 1 1 0 8 0 phpool 112 485 0 133 12 0 12 12 0 8 0 ddb> machine ddbcpu 0 No such command ddb> trace icmp_mtudisc_timeout(fffffd806ed78330,0) at icmp_mtudisc_timeout+0x111 sys/netinet/ip_icmp.c:1102 rt_timer_queue_flush(ffffffff83899c38) at rt_timer_queue_flush+0x281 sys/net/route.c:1586 ip_sysctl(ffff80003ca4d21c,1,0,ffff80003ca4d248,200000001300,4) at ip_sysctl+0x845 sys/netinet/ip_input.c:1753 net_sysctl(ffff80003ca4d214,3,0,ffff80003ca4d248,200000001300,4,22efeba6f5c124a6) at net_sysctl+0x64e sys/kern/uipc_domain.c:260 sys_sysctl(ffff800035d34548,ffff80003ca4d380,ffff80003ca4d2d0) at sys_sysctl+0x3f2 sys/kern/kern_sysctl.c:-1 syscall(ffff80003ca4d380) at syscall+0x97e mi_syscall sys/sys/syscall_mi.h:-1 [inline] syscall(ffff80003ca4d380) at syscall+0x97e sys/arch/amd64/amd64/trap.c:748 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x10e9dff9570, count: -7 ddb> machine ddbcpu 1 No such command ddb> trace icmp_mtudisc_timeout(fffffd806ed78330,0) at icmp_mtudisc_timeout+0x111 sys/netinet/ip_icmp.c:1102 rt_timer_queue_flush(ffffffff83899c38) at rt_timer_queue_flush+0x281 sys/net/route.c:1586 ip_sysctl(ffff80003ca4d21c,1,0,ffff80003ca4d248,200000001300,4) at ip_sysctl+0x845 sys/netinet/ip_input.c:1753 net_sysctl(ffff80003ca4d214,3,0,ffff80003ca4d248,200000001300,4,22efeba6f5c124a6) at net_sysctl+0x64e sys/kern/uipc_domain.c:260 sys_sysctl(ffff800035d34548,ffff80003ca4d380,ffff80003ca4d2d0) at sys_sysctl+0x3f2 sys/kern/kern_sysctl.c:-1 syscall(ffff80003ca4d380) at syscall+0x97e mi_syscall sys/sys/syscall_mi.h:-1 [inline] syscall(ffff80003ca4d380) at syscall+0x97e sys/arch/amd64/amd64/trap.c:748 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x10e9dff9570, count: -7