kernel: protection fault trap, code=0 Stopped at sys_semop+0x3d5: movzwl 0(%rax),%r15d ddb> ddb> set $lines = 0 ddb> set $maxwidth = 0 ddb> show panic the kernel did not panic ddb> trace sys_semop(ffff80002a8b82c8,ffff80003390d7b0,ffff80003390d700) at sys_semop+0x3d5 sys/kern/sysv_sem.c:617 syscall(ffff80003390d7b0) at syscall+0x962 mi_syscall sys/sys/syscall_mi.h:-1 [inline] syscall(ffff80003390d7b0) at syscall+0x962 sys/arch/amd64/amd64/trap.c:765 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xd9009b1f990, count: -3 ddb> show registers rdi 0 rsi 0 rbp 0xffff80003390d6e0 rbx 0xdead4110dead4110 rdx 0 rcx 0 rax 0xdead4110dead4110 r8 0x7f7fffffc000 r9 0 r10 0x336ca575f2374923 r11 0x7ed9ad7d3e68686 r12 0 r13 0xfffffd8068beebd0 r14 0xffff80003390d7b0 r15 0 rip 0xffffffff821bdf25 sys_semop+0x3d5 cs 0x8 rflags 0x10246 __ALIGN_SIZE+0xf246 rsp 0xffff80003390d5f0 ss 0x10 sys_semop+0x3d5: movzwl 0(%rax),%r15d ddb> show proc PROC (syz-executor) tid=10306 pid=15329 tcnt=4 stat=onproc flags process=0 proc=4000000 runpri=83, usrpri=86, slppri=32, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0 forw=0xffffffffffffffff, list=0xffff80002a8b87f8,0xffff80002a8b9798 process=0xffff800035d10920 user=0xffff800033908000, vmspace=0xfffffd806c230180 estcpu=36, cpticks=18, pctcpu=0.0, user=0, sys=18, intr=0 ddb> ps PID TID PPID UID S FLAGS WAIT COMMAND 15329 74089 74230 0 2 0 syz-executor *15329 10306 74230 0 7 0x4000000 syz-executor 15329 306994 74230 0 3 0x4000080 fsleep syz-executor 15329 22375 74230 0 2 0x4000000 syz-executor 31225 443278 74684 0 2 0 syz-executor 31225 168472 74684 0 3 0x4000080 kqpoll syz-executor 51499 523036 50650 0 2 0 syz-executor 60922 111769 99591 0 2 0 syz-executor 60922 118530 99591 0 3 0x4000080 fsleep syz-executor 60922 462610 99591 0 3 0x4000080 fsleep syz-executor 60415 376322 72964 0 3 0x82 sysctllk syz-executor 21321 170423 96431 0 3 0x81000 vmmapbsy syz-executor 21321 234066 96431 0 3 0x4081000 vmmapbsy syz-executor 21321 375756 96431 0 2 0x4081c00 syz-executor 21321 102102 96431 0 3 0x4003000 suspend syz-executor 4152 499399 1 0 3 0x100083 ttyin getty 50650 484561 72964 0 2 0xc82 syz-executor 34676 238301 72964 0 2 0x2 syz-executor 69057 20723 0 0 3 0x14200 acct acct 96431 368019 72964 0 3 0x82 wait syz-executor 99591 311298 72964 0 2 0xc82 syz-executor 74230 473050 72964 0 2 0xc82 syz-executor 76399 365116 72964 0 2 0x2 syz-executor 74684 256412 72964 0 2 0xc82 syz-executor 72964 319296 58205 0 3 0x82 kqread syz-executor 58205 166074 98605 0 3 0x10008a sigsusp ksh 98605 237403 88115 0 3 0x98 kqread sshd-session 88115 387910 83436 0 3 0x92 kqread sshd-session 83436 388129 1 0 3 0x88 kqread sshd 93440 440432 70484 73 3 0x1100090 kqread syslogd 70484 447268 1 0 3 0x100082 sbwait syslogd 22279 325680 1 0 3 0x100080 kqread resolvd 4216 110517 0 0 3 0x14200 bored smr 76769 234277 0 0 2 0x14200 zerothread 20753 68711 0 0 3 0x14200 aiodoned aiodoned 11530 22741 0 0 3 0x14200 syncer update 49049 320019 0 0 3 0x14200 cleaner cleaner 74712 70599 0 0 3 0x14200 reaper reaper 42172 227141 0 0 3 0x14200 pgdaemon pagedaemon 94712 455063 0 0 3 0x14200 bored viomb 18744 337697 0 0 3 0x40014200 acpi0 acpi0 34861 487344 0 0 3 0x14200 bored softnet0 4607 206372 0 0 3 0x14200 bored systqmp 92757 460730 0 0 3 0x14200 bored systq 13381 256264 0 0 2 0x40014200 softclock 56134 401791 0 0 3 0x40014200 idle0 1 432233 0 0 3 0x82 wait init 0 0 -1 0 3 0x10010200 scheduler swapper ddb> show all locks No such command ddb> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 10171 11035K 11272K 166960K 11902 0 pcb 17 14K 15K 166960K 282 0 rtable 213 10K 10K 166960K 672 0 pf 32 13K 17K 166960K 226 0 ifaddr 35 6K 8K 166960K 106 0 ifgroup 50 2K 2K 166960K 175 0 sysctl 4 1K 9K 166960K 14 0 counters 32 17K 18K 166960K 100 0 ioctlops 0 0K 4K 166960K 249 0 iov 0 0K 40K 166960K 60 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1396 88K 88K 166960K 2208 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 2 1K 5K 166960K 3 0 VM map 2 1K 1K 166960K 2 0 sem 25 3K 3K 166960K 37 0 dirhash 12 2K 2K 166960K 18 0 ACPI 1692 195K 286K 166960K 12470 0 file desc 16 54K 240K 166960K 1137 0 sigio 0 0K 0K 166960K 24 0 proc 54 43K 124K 166960K 635 0 subproc 63 3K 4K 166960K 90 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 ip_moptions 0 0K 0K 166960K 150 0 in_multi 73 5K 7K 166960K 156 0 ether_multi 1 0K 0K 166960K 6 0 mrt 0 0K 0K 166960K 12 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 91 413K 413K 166960K 91 0 exec 0 0K 1K 166960K 544 0 fusefs mount 1 32K 32K 166960K 1 0 pfkey data 0 0K 0K 166960K 4 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 189 126K 168K 166960K 12167 0 UVM aobj 35 2K 2K 166960K 39 0 pinsyscall 31 62K 96K 166960K 2290 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 ip6_options 1 0K 0K 166960K 65 0 NDP 11 0K 2K 166960K 75 0 temp 67 8645K 8715K 166960K 54016 0 kqueue 8 14K 28K 166960K 208 0 SYN cache 2 16K 16K 166960K 2 0 ddb> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle rtpcb 120 284 0 282 4 1 3 3 0 8 2 rtentry 136 179 0 102 4 0 4 4 0 8 0 unpcb 144 802 0 791 7 0 7 7 0 8 6 syncache 336 11 0 11 2 1 1 1 0 8 1 tcpqe 32 4 0 4 2 1 1 1 0 8 1 tcpcb 736 378 0 370 7 3 4 4 0 8 3 arp 96 31 0 16 1 0 1 1 0 8 0 ipq 40 7 0 4 1 0 1 1 0 8 0 ipqe 40 8 0 5 1 0 1 1 0 8 0 inpcb 328 1302 0 1294 16 9 7 10 0 8 5 ip6q 72 4 0 3 1 0 1 1 0 8 0 ip6af 40 7 0 6 1 0 1 1 0 8 0 nd6 112 33 0 16 1 0 1 1 0 8 0 pkpcb 40 12 0 12 2 1 1 1 0 8 1 kcovpl 48 10 0 3 1 0 1 1 0 8 0 mppekey 1024 2 0 2 2 1 1 1 0 8 1 ppxss 1072 54 0 54 2 1 1 1 0 8 1 pppxif 1384 6 0 6 2 1 1 1 0 8 1 pfstscr 40 1 0 1 1 0 1 1 0 8 1 pfrktable 1344 1 0 1 1 0 1 1 0 8 1 pfanchor 1288 1 0 0 1 0 1 1 0 8 0 pftag 88 5 0 0 1 0 1 1 0 8 0 pfstitem 24 2 0 0 1 0 1 1 0 8 0 pfstkey 128 3 0 1 1 0 1 1 0 8 0 pfstate 384 2 0 1 1 0 1 1 0 8 0 pfrule 1344 7 0 6 1 0 1 1 0 8 0 rttmr 136 4 0 4 2 1 1 1 0 8 1 art_heap8 4096 5 0 1 4 0 4 4 0 8 0 art_heap4 256 772 0 423 31 1 30 30 0 8 4 art_table 40 777 0 424 5 0 5 5 0 8 0 art_node 32 176 0 111 1 0 1 1 0 8 0 sysvmsgpl 40 14 0 9 1 0 1 1 0 8 0 semupl 112 2 0 2 2 1 1 1 0 8 1 semapl 112 31 0 9 1 0 1 1 0 8 0 shmpl 112 36 0 4 1 0 1 1 0 8 0 dirhash 1024 21 0 4 3 0 3 3 0 8 0 dino2pl 256 3511 0 2008 95 0 95 95 0 8 0 ffsino 256 3511 0 2008 95 0 95 95 0 8 0 nchpl 144 5113 0 3430 64 0 64 64 0 8 0 rtmask 32 10 0 10 2 1 1 1 0 8 1 vnodes 216 4009 0 0 223 0 223 223 0 8 0 namei 1024 18150 0 18149 3 2 1 2 0 8 0 kstatmem 264 110 0 88 2 0 2 2 0 8 0 scsiplug 72 6 0 6 2 1 1 1 0 8 1 scxspl 216 19531 0 19531 15 7 8 8 1 8 8 plimitpl 152 319 0 302 1 0 1 1 0 8 0 sigapl 424 1438 0 1399 7 0 7 7 0 8 2 knotepl 120 114365 0 114331 29 19 10 17 0 8 8 kqueuepl 184 398 0 390 4 0 4 4 0 8 3 pipepl 304 296 0 268 7 2 5 5 0 8 2 fdescpl 448 1403 0 1378 5 1 4 5 0 8 0 filepl 120 9352 0 9167 18 4 14 14 0 8 6 lockfpl 104 418 0 417 1 0 1 1 0 8 0 lockfspl 48 173 0 172 1 0 1 1 0 8 0 sessionpl 144 30 0 23 1 0 1 1 0 8 0 pgrppl 48 95 0 80 1 0 1 1 0 8 0 ucredpl 104 1529 0 1521 1 0 1 1 0 8 0 zombiepl 144 1867 0 1866 1 0 1 1 0 8 0 processpl 1152 1438 0 1399 5 0 5 5 0 8 0 procpl 664 3131 0 3083 7 0 7 7 0 8 1 sosppl 176 7 0 7 2 1 1 1 0 8 1 sockpl 552 2471 0 2450 26 15 11 19 0 8 8 mcl64k 65536 92 0 91 1 0 1 1 0 8 0 mcl16k 16384 4 0 4 2 1 1 1 0 8 1 mcl9k 9216 1 0 1 1 0 1 1 0 8 1 mcl8k 8192 24 0 24 2 1 1 1 0 8 1 mcl4k 4096 3801 0 3751 15 7 8 14 0 8 1 mcl2k 2048 1918 0 1912 6 3 3 4 0 8 1 mtagpl 96 39 0 39 1 0 1 1 0 8 1 mbufpl 256 18017 0 17888 130 103 27 122 0 8 8 bufpl 280 8359 0 2137 445 0 445 445 0 8 0 anonpl 24 207472 0 201642 68 18 50 50 0 187 11 amapchunkpl 152 40079 0 39676 36 6 30 30 0 158 9 amappl16 200 3363 0 3161 28 13 15 15 0 8 3 amappl15 192 7 0 7 1 1 0 1 0 8 0 amappl14 184 8 0 7 1 0 1 1 0 8 0 amappl13 176 449 0 447 1 0 1 1 0 8 0 amappl12 168 1775 0 1746 2 0 2 2 0 8 0 amappl11 160 5 0 5 1 1 0 1 0 8 0 amappl10 152 41 0 37 1 0 1 1 0 8 0 amappl9 144 255 0 255 1 1 0 1 0 8 0 amappl8 136 21 0 19 1 0 1 1 0 8 0 amappl7 128 85 0 84 1 0 1 1 0 8 0 amappl6 120 292 0 284 1 0 1 1 0 8 0 amappl5 112 74 0 69 1 0 1 1 0 8 0 amappl4 104 422 0 401 1 0 1 1 0 8 0 amappl3 96 7030 0 6962 3 0 3 3 0 8 0 amappl2 88 1567 0 1516 2 0 2 2 0 8 0 amappl1 80 14843 0 14398 13 1 12 13 0 8 0 amappl 88 11215 0 11079 5 0 5 5 0 92 0 uvmvnodes 80 4009 0 0 82 0 82 82 0 8 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma2048 2048 1 0 1 1 1 0 1 0 8 0 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 255 0 255 2 1 1 1 0 8 1 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 38 0 4 1 0 1 1 0 8 0 uaddrrnd 24 1402 0 1378 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 1402 0 1378 1 0 1 1 0 8 0 vmmpekpl 168 13407 0 13360 4 0 4 4 0 8 0 vmmpepl 168 95564 0 93960 104 22 82 97 0 357 3 vmsppl 368 1402 0 1378 4 1 3 4 0 8 0 rwobjpl 40 30772 0 25877 51 0 51 51 0 8 0 pdppl 4096 2813 0 2756 117 58 59 83 0 8 2 pvpl 32 609853 0 599503 151 31 120 120 0 265 28 pmappl 216 1402 0 1378 3 0 3 3 0 8 0 extentpl 40 45 0 27 1 0 1 1 0 8 0 phpool 112 528 0 186 13 0 13 13 0 8 0 ddb> machine ddbcpu 0 No such command ddb> trace sys_semop(ffff80002a8b82c8,ffff80003390d7b0,ffff80003390d700) at sys_semop+0x3d5 sys/kern/sysv_sem.c:617 syscall(ffff80003390d7b0) at syscall+0x962 mi_syscall sys/sys/syscall_mi.h:-1 [inline] syscall(ffff80003390d7b0) at syscall+0x962 sys/arch/amd64/amd64/trap.c:765 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xd9009b1f990, count: -3 ddb> machine ddbcpu 1 No such command ddb> trace sys_semop(ffff80002a8b82c8,ffff80003390d7b0,ffff80003390d700) at sys_semop+0x3d5 sys/kern/sysv_sem.c:617 syscall(ffff80003390d7b0) at syscall+0x962 mi_syscall sys/sys/syscall_mi.h:-1 [inline] syscall(ffff80003390d7b0) at syscall+0x962 sys/arch/amd64/amd64/trap.c:765 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xd9009b1f990, count: -3