LLLLkernel: protection fault trap, code=0 Stopped at done_flush+0x38: movl %eax,%dr6 ddb> ddb> set $lines = 0 ddb> set $maxwidth = 0 ddb> show panic the kernel did not panic ddb> trace done_flush() at done_flush+0x38 vm_run(ffff8000378736c0) at vm_run+0x163 vmmioctl(a00,c0205602,ffff8000378736c0,1,ffff80002c187558) at vmmioctl+0x299 sys/dev/vmm/vmm.c:242 VOP_IOCTL(fffffd806ecdc0d8,c0205602,ffff8000378736c0,1,fffffd807f7d7410,ffff80002c187558) at VOP_IOCTL+0x91 sys/kern/vfs_vops.c:264 vn_ioctl(fffffd8066458d20,c0205602,ffff8000378736c0,ffff80002c187558) at vn_ioctl+0xbb sys/kern/vfs_vnops.c:525 sys_ioctl(ffff80002c187558,ffff8000378737d0,ffff800037873820) at sys_ioctl+0x49e syscall(ffff800037873890) at syscall+0x543 sys/arch/amd64/amd64/trap.c:606 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x2648bff3640, count: -8 ddb> show registers rdi 0x6c14 __ALIGN_SIZE+0x5c14 rsi 0xffff800037823e30 rbp 0xffff800037873410 rbx 0x756e6547 rdx 0x49656e69 rcx 0x6c65746e rax 0xfffffffffffffffc r8 0 r9 0x10000 __ALIGN_SIZE+0xf000 r10 0xc3f4cd2a49460e9b r11 0xf4c454db06bd8b81 r12 0xffff800037823ba8 r13 0xffff800037873346 r14 0xffff800037823800 r15 0x246 rip 0xffffffff8121cd3b done_flush+0x38 cs 0x8 rflags 0x10046 __ALIGN_SIZE+0xf046 rsp 0xffff800037873276 ss 0x10 done_flush+0x38: movl %eax,%dr6 ddb> show proc PROC (syz-executor.1) tid=33917 pid=88116 tcnt=2 stat=onproc flags process=0 proc=4000000 runpri=32, usrpri=55, slppri=32, nice=20 wchan=0x0, wmesg=, ps_single=0x0 forw=0xffffffffffffffff, list=0xffff80002a7332b8,0xffffffff82c6c410 process=0xffff80002c1453b0 user=0xffff80003786e000, vmspace=0xfffffd806931dba0 estcpu=10, cpticks=0, pctcpu=0.0, user=0, sys=0, intr=0 ddb> ps PID TID PPID UID S FLAGS WAIT COMMAND 88116 293517 42124 0 2 0 syz-executor.1 *88116 33917 42124 0 7 0x4000000 syz-executor.1 67073 171646 47006 0 2 0 syz-executor.0 29071 506388 93661 0 3 0x82 nanoslp syz-executor.4 21418 131788 93661 0 3 0x82 piperd syz-executor.6 46574 348153 93661 0 3 0x82 nanoslp syz-executor.5 76627 308971 0 0 3 0x14280 nfsidl nfsio 39498 400375 0 0 3 0x14280 nfsidl nfsio 52322 330593 0 0 3 0x14280 nfsidl nfsio 79325 375768 0 0 3 0x14280 nfsidl nfsio 80173 83152 0 0 3 0x14280 nfsidl nfsio 62351 24046 0 0 3 0x14280 nfsidl nfsio 29012 388228 0 0 3 0x14280 nfsidl nfsio 46012 354543 0 0 3 0x14280 nfsidl nfsio 67988 345571 0 0 3 0x14280 nfsidl nfsio 87078 74831 0 0 3 0x14280 nfsidl nfsio 58999 101872 0 0 3 0x14280 nfsidl nfsio 70352 368165 0 0 3 0x14280 nfsidl nfsio 8531 108728 0 0 3 0x14280 nfsidl nfsio 82848 462115 0 0 3 0x14280 nfsidl nfsio 41396 411646 0 0 3 0x14280 nfsidl nfsio 94027 340598 0 0 3 0x14280 nfsidl nfsio 56679 11035 0 0 3 0x14280 nfsidl nfsio 15238 247941 0 0 3 0x14280 nfsidl nfsio 41803 366336 0 0 3 0x14280 nfsidl nfsio 67414 185461 0 0 3 0x14280 nfsidl nfsio 70553 519973 93661 0 3 0x82 piperd syz-executor.3 42124 240858 93661 0 3 0x82 nanoslp syz-executor.1 47006 199048 93661 0 3 0x82 nanoslp syz-executor.0 53484 60452 93661 0 3 0x82 nanoslp syz-executor.2 82124 33508 93661 0 2 0x2 syz-executor.7 11447 168105 0 0 3 0x14200 acct acct 94873 77097 0 0 3 0x14200 bored sosplice 93661 202679 55367 0 3 0x2000082 wait syz-fuzzer 93661 192504 55367 0 3 0x6000082 nanoslp syz-fuzzer 93661 413128 55367 0 3 0x6000082 wait syz-fuzzer 93661 265790 55367 0 3 0x6000082 thrsleep syz-fuzzer 93661 202662 55367 0 3 0x6000082 thrsleep syz-fuzzer 93661 517132 55367 0 3 0x6000082 wait syz-fuzzer 93661 60856 55367 0 3 0x6000082 wait syz-fuzzer 93661 179204 55367 0 3 0x6000082 thrsleep syz-fuzzer 93661 158010 55367 0 3 0x6000082 kqread syz-fuzzer 93661 510416 55367 0 3 0x6000082 thrsleep syz-fuzzer 93661 166308 55367 0 3 0x6000082 wait syz-fuzzer 93661 116562 55367 0 3 0x6000082 wait syz-fuzzer 93661 354086 55367 0 3 0x6000082 wait syz-fuzzer 93661 504300 55367 0 3 0x6000082 wait syz-fuzzer 55367 265072 35483 0 3 0x10008a sigsusp ksh 35483 442824 70336 0 3 0x9a kqread sshd 43581 388113 1 0 3 0x100083 ttyin getty 70336 478646 1 0 3 0x88 kqread sshd 35993 166224 4102 73 3 0x1100090 kqread syslogd 4102 276289 1 0 3 0x100082 netio syslogd 31912 342665 1 0 3 0x100080 kqread resolvd 77662 502250 17025 77 3 0x100092 kqread dhcpleased 65065 332731 17025 77 3 0x100092 kqread dhcpleased 17025 391180 1 0 3 0x80 kqread dhcpleased 90428 276991 0 0 3 0x14200 bored smr 12627 345603 0 0 2 0x14200 zerothread 33112 31891 0 0 3 0x14200 aiodoned aiodoned 73524 321153 0 0 3 0x14200 syncer update 57402 240340 0 0 3 0x14200 cleaner cleaner 56625 186304 0 0 3 0x14200 reaper reaper 19627 315859 0 0 3 0x14200 pgdaemon pagedaemon 45680 506851 0 0 3 0x14200 bored viomb 17286 233441 0 0 3 0x40014200 acpi0 acpi0 68149 384403 0 0 3 0x14200 bored softnet3 76765 314937 0 0 3 0x14200 bored softnet2 97883 259163 0 0 3 0x14200 bored softnet1 2890 194222 0 0 3 0x14200 bored softnet0 16526 431796 0 0 3 0x14200 bored systqmp 54338 172988 0 0 3 0x14200 bored systq 80688 71410 0 0 3 0x40014200 tmoslp softclock 82443 15925 0 0 3 0x40014200 idle0 1 447921 0 0 3 0x82 wait init 0 0 -1 0 3 0x10200 scheduler swapper ddb> show all locks No such command ddb> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 10224 6421K 7112K 166960K 19622 0 pcb 13 18K 22K 166960K 2132 0 rtable 222 14K 15K 166960K 867 0 pf 31 9K 9K 166960K 136 0 ifaddr 40 10K 11K 166960K 133 0 ifgroup 54 2K 2K 166960K 219 0 sysctl 4 1K 1K 166960K 7 0 counters 29 17K 17K 166960K 74 0 ioctlops 0 0K 2K 166960K 201 0 iov 0 0K 16K 166960K 548 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1448 91K 91K 166960K 5519 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 2 1K 5K 166960K 60 0 VM map 2 1K 1K 166960K 2 0 sem 12 0K 1K 166960K 761 0 dirhash 12 2K 2K 166960K 12 0 ACPI 1697 195K 286K 166960K 12548 0 file desc 12 41K 69K 166960K 4751 0 sigio 0 0K 0K 166960K 243 0 proc 58 59K 75K 166960K 1042 0 subproc 104 6K 6K 166960K 260 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 ip_moptions 0 0K 0K 166960K 726 0 in_multi 89 6K 7K 166960K 293 0 ether_multi 1 0K 0K 166960K 15 0 mrt 0 0K 0K 166960K 3 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 229 1023K 1023K 166960K 229 0 exec 0 0K 1K 166960K 1090 0 tdb 3 0K 0K 166960K 3 0 pagedep 1 8K 8K 166960K 1 0 inodedep 1 32K 32K 166960K 1 0 newblk 1 0K 0K 166960K 1 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 366 182K 191K 166960K 45973 0 UVM aobj 131 4K 4K 166960K 137 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 ip6_options 0 0K 0K 166960K 438 0 NDP 12 0K 2K 166960K 99 0 temp 74 5920K 6280K 166960K 36302 0 kqueue 12 18K 24K 166960K 329 0 SYN cache 2 16K 16K 166960K 2 0 ddb> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle rtpcb 120 308 0 305 6 5 1 5 0 8 0 rtentry 112 285 0 184 4 0 4 4 0 8 0 unpcb 144 3856 0 3843 55 54 1 6 0 8 0 syncache 312 55 0 55 13 12 1 1 0 8 1 tcpqe 32 154 0 154 9 8 1 1 0 8 1 tcpcb 808 3100 0 3080 64 61 3 12 0 8 0 arp 88 45 0 31 1 0 1 1 0 8 0 ipq 40 6 0 6 4 3 1 1 0 8 1 ipqe 40 19 0 19 4 3 1 1 0 8 1 inpcb 336 7610 0 7591 121 113 8 19 0 8 5 nd6 104 87 0 62 1 0 1 1 0 8 0 pkpcb 40 173 0 173 5 5 0 1 0 8 0 kcovpl 48 20 0 12 1 0 1 1 0 8 0 ppxss 1160 15 0 15 4 4 0 1 0 8 0 art_heap8 4096 1 0 0 1 0 1 1 0 8 0 art_heap4 256 1212 0 746 41 11 30 30 0 8 0 art_table 32 1213 0 746 4 0 4 4 0 8 0 art_node 16 284 0 191 1 0 1 1 0 8 0 sysvmsgpl 40 5 0 3 1 0 1 1 0 8 0 semupl 112 3 0 3 1 1 0 1 0 8 0 semapl 112 721 0 711 1 0 1 1 0 8 0 shmpl 112 134 0 6 4 0 4 4 0 8 0 dirhash 1024 17 0 0 3 0 3 3 0 8 0 dino2pl 256 8882 0 7401 93 0 93 93 0 8 0 ffsino 240 8882 0 7401 88 0 88 88 0 8 0 nchpl 144 15345 0 14798 63 41 22 63 0 8 0 uvmvnodes 80 5926 0 0 121 0 121 121 0 8 0 vnodes 216 5926 0 0 330 0 330 330 0 8 0 namei 1024 57801 0 57800 7 6 1 3 0 8 0 vcpupl 2048 32 0 0 4 0 4 4 0 8 0 vmpool 664 46 0 14 3 0 3 3 0 8 0 kstatmem 264 114 0 90 2 0 2 2 0 8 0 scxspl 216 44342 0 44342 23 22 1 8 1 8 1 plimitpl 152 343 0 328 1 0 1 1 0 8 0 sigapl 424 5049 0 4985 8 0 8 8 0 8 0 futexpl 64 51069 0 51069 3 2 1 1 0 8 1 knotepl 120 47243 0 47161 24 19 5 11 0 8 0 kqueuepl 184 651 0 643 11 10 1 4 0 8 0 pipepl 288 1498 0 1470 33 30 3 7 0 8 0 fdescpl 432 5011 0 4988 5 1 4 4 0 8 0 filepl 120 42597 0 42361 93 83 10 16 0 8 1 lockfpl 104 1469 0 1467 4 3 1 2 0 8 0 lockfspl 48 433 0 431 1 0 1 1 0 8 0 sessionpl 144 35 0 19 1 0 1 1 0 8 0 pgrppl 48 118 0 102 1 0 1 1 0 8 0 ucredpl 104 10525 0 10512 1 0 1 1 0 8 0 zombiepl 144 4988 0 4985 1 0 1 1 0 8 0 processpl 1008 5049 0 4985 10 1 9 9 0 8 0 procpl 680 12072 0 11994 20 12 8 9 0 8 0 sosppl 168 44 0 42 7 6 1 1 0 8 0 sockpl 456 11962 0 11927 312 298 14 34 0 8 8 mcl64k 65536 197 0 197 15 14 1 1 0 8 1 mcl16k 16384 133 0 133 16 15 1 1 0 8 1 mcl12k 12288 189 0 189 16 16 0 1 0 8 0 mcl9k 9216 99 0 99 16 15 1 1 0 8 1 mcl8k 8192 469 0 469 14 13 1 1 0 8 1 mcl4k 4096 634 0 634 9 8 1 2 0 8 1 mcl2k2 2112 105 0 105 15 15 0 1 0 8 0 mcl2k 2048 77285 0 77233 39 31 8 30 0 8 0 mtagpl 96 1344 0 920 17 6 11 14 0 8 0 mbufpl 256 174834 0 174317 292 252 40 94 0 8 1 bufpl 288 13309 0 6912 458 0 458 458 0 8 0 anonpl 24 636111 0 622335 149 56 93 107 0 188 0 amapchunkpl 152 148354 0 147618 88 51 37 42 0 158 0 amappl16 200 13295 0 12810 61 34 27 39 0 8 0 amappl15 192 14 0 14 1 1 0 1 0 8 0 amappl14 184 190 0 178 2 1 1 2 0 8 0 amappl13 176 17 0 16 1 0 1 1 0 8 0 amappl12 168 5813 0 5788 2 0 2 2 0 8 0 amappl11 160 57 0 45 1 0 1 1 0 8 0 amappl10 152 96 0 85 1 0 1 1 0 8 0 amappl9 144 210 0 210 9 9 0 1 0 8 0 amappl8 136 327 0 238 4 0 4 4 0 8 0 amappl7 128 200 0 176 2 0 2 2 0 8 0 amappl6 120 486 0 475 1 0 1 1 0 8 0 amappl5 112 203 0 195 1 0 1 1 0 8 0 amappl4 104 577 0 551 2 1 1 2 0 8 0 amappl3 96 28776 0 28714 3 0 3 3 0 8 0 amappl2 88 5666 0 5597 3 1 2 3 0 8 0 amappl1 80 26898 0 26404 22 10 12 22 0 8 0 amappl 88 45183 0 44978 8 1 7 7 0 92 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 253 0 253 1 1 0 1 0 8 0 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 136 0 6 3 0 3 3 0 8 0 uaddrrnd 24 5057 0 5002 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 5057 0 5002 1 0 1 1 0 8 0 vmmpekpl 168 41416 0 41357 4 0 4 4 0 8 0 vmmpepl 168 311893 0 309781 273 164 109 130 0 357 0 vmsppl 368 5056 0 5002 12 6 6 6 0 8 0 rwobjpl 24 83907 0 76352 49 2 47 48 0 8 0 pdppl 4096 10120 0 10036 397 302 95 95 0 8 11 pvpl 32 1553129 0 1534354 420 250 170 361 0 265 0 pmappl 216 5056 0 5002 4 0 4 4 0 8 0 extentpl 40 56 0 38 1 0 1 1 0 8 0 phpool 112 1743 0 888 26 0 26 26 0 8 0 ddb> machine ddbcpu 0 No such command ddb> trace done_flush() at done_flush+0x38 vm_run(ffff8000378736c0) at vm_run+0x163 vmmioctl(a00,c0205602,ffff8000378736c0,1,ffff80002c187558) at vmmioctl+0x299 sys/dev/vmm/vmm.c:242 VOP_IOCTL(fffffd806ecdc0d8,c0205602,ffff8000378736c0,1,fffffd807f7d7410,ffff80002c187558) at VOP_IOCTL+0x91 sys/kern/vfs_vops.c:264 vn_ioctl(fffffd8066458d20,c0205602,ffff8000378736c0,ffff80002c187558) at vn_ioctl+0xbb sys/kern/vfs_vnops.c:525 sys_ioctl(ffff80002c187558,ffff8000378737d0,ffff800037873820) at sys_ioctl+0x49e syscall(ffff800037873890) at syscall+0x543 sys/arch/amd64/amd64/trap.c:606 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x2648bff3640, count: -8 ddb> machine ddbcpu 1 No such command ddb> trace done_flush() at done_flush+0x38 vm_run(ffff8000378736c0) at vm_run+0x163 vmmioctl(a00,c0205602,ffff8000378736c0,1,ffff80002c187558) at vmmioctl+0x299 sys/dev/vmm/vmm.c:242 VOP_IOCTL(fffffd806ecdc0d8,c0205602,ffff8000378736c0,1,fffffd807f7d7410,ffff80002c187558) at VOP_IOCTL+0x91 sys/kern/vfs_vops.c:264 vn_ioctl(fffffd8066458d20,c0205602,ffff8000378736c0,ffff80002c187558) at vn_ioctl+0xbb sys/kern/vfs_vnops.c:525 sys_ioctl(ffff80002c187558,ffff8000378737d0,ffff800037873820) at sys_ioctl+0x49e syscall(ffff800037873890) at syscall+0x543 sys/arch/amd64/amd64/trap.c:606 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x2648bff3640, count: -8