kernel: protection fault trap, code=0 Stopped at sblock+0x4a: movq 0x8(%rax),%rax ddb> ddb> set $lines = 0 ddb> set $maxwidth = 0 ddb> show panic the kernel did not panic ddb> trace sblock(fffffd806eeb2008,fffffd806eeb2120,1) at sblock+0x4a soassertlocked sys/kern/uipc_socket2.c:323 [inline] sblock(fffffd806eeb2008,fffffd806eeb2120,1) at sblock+0x4a sys/kern/uipc_socket2.c:378 sosend(fffffd806eeb2008,0,ffff800021644e90,0,0,0) at sosend+0x280 sys/kern/uipc_socket.c:517 fifo_write(ffff800021644de0) at fifo_write+0x7c sys/miscfs/fifofs/fifo_vnops.c:281 VOP_WRITE(fffffd807870a408,ffff800021644e90,3,fffffd807f7d87e0) at VOP_WRITE+0xbf sys/kern/vfs_vops.c:245 ktrwriteraw(ffff80002160f510,fffffd807870a408,fffffd807f7d87e0,ffff800021644f50,ffff800021644f30) at ktrwriteraw+0x13d sys/kern/kern_ktrace.c:666 ktrgenio(ffff80002160f510,4,1,ffff800000c34c80,1c4) at ktrgenio+0x26b ktrwrite2 sys/kern/kern_ktrace.c:630 [inline] ktrgenio(ffff80002160f510,4,1,ffff800000c34c80,1c4) at ktrgenio+0x26b sys/kern/kern_ktrace.c:265 dofilewritev(ffff80002160f510,4,ffff8000216450d8,0,ffff8000216451d0) at dofilewritev+0x38a sys/kern/sys_generic.c:402 sys_write(ffff80002160f510,ffff800021645170,ffff8000216451d0) at sys_write+0x83 sys/kern/sys_generic.c:301 syscall(ffff800021645240) at syscall+0x44e sys/arch/amd64/amd64/trap.c:585 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7f7ffffed2b0, count: -10 ddb> show registers rdi 0 rsi 0 rbp 0xffff800021644ca0 rbx 0xfffffd806eeb2120 rdx 0 rcx 0xffff80002160f514 rax 0x68f082cfe99315a7 r8 0 r9 0 r10 0xa94913789177bf41 r11 0xcff6f0b1c6f18d21 r12 0xfffffd806eeb2001 r13 0x1 r14 0xfffffd806eeb2170 r15 0xfffffd806eeb2008 rip 0xffffffff81ccb44a sblock+0x4a cs 0x8 rflags 0x10246 __ALIGN_SIZE+0xf246 rsp 0xffff800021644c40 ss 0x10 sblock+0x4a: movq 0x8(%rax),%rax ddb> show proc PROC (sshd) pid=411005 stat=onproc flags process=12 proc=1 pri=24, usrpri=50, nice=20 forw=0xffffffffffffffff, list=0xffff80002160ed30,0xffff80002160e020 process=0xffff8000215f07e0 user=0xffff800021640000, vmspace=0xfffffd807f018990 estcpu=0, cpticks=0, pctcpu=0.0 user=0, sys=0, intr=0 ddb> ps PID TID PPID UID S FLAGS WAIT COMMAND 74542 373372 60269 0 2 0 syz-executor.5 74542 422139 60269 0 3 0x4000080 fsleep syz-executor.5 74542 106820 60269 0 3 0x4000080 fsleep syz-executor.5 44367 126813 93868 0 2 0 syz-executor.7 44367 442360 93868 0 3 0x4000080 fsleep syz-executor.7 44367 324973 93868 0 3 0x4000080 fsleep syz-executor.7 9803 71112 22365 0 2 0 syz-executor.6 9803 154817 22365 0 3 0x4000080 bell syz-executor.6 9803 388742 22365 0 3 0x4000080 fsleep syz-executor.6 12148 369111 37688 0 2 0 syz-executor.1 12148 38433 37688 0 2 0x4000081 syz-executor.1 12148 129060 37688 0 2 0x4000000 syz-executor.1 22365 372408 92693 0 2 0x83 syz-executor.6 85949 308442 0 0 3 0x14200 bored sosplice 53518 93267 1 0 3 0x100083 ttyin getty 37688 479371 92693 0 2 0x83 syz-executor.1 88279 498154 92693 0 2 0x83 syz-executor.4 60269 477447 92693 0 2 0x83 syz-executor.5 93868 284157 92693 0 2 0x83 syz-executor.7 85282 67835 92693 0 2 0x83 syz-executor.3 24576 148694 92693 0 2 0x83 syz-executor.2 28926 202264 92693 0 2 0x83 syz-executor.0 92693 513675 42949 0 2 0x83 syz-fuzzer 92693 485981 42949 0 2 0x4000083 syz-fuzzer 92693 289592 42949 0 3 0x4000082 thrsleep syz-fuzzer 92693 350828 42949 0 3 0x4000082 thrsleep syz-fuzzer 92693 97716 42949 0 3 0x4000082 thrsleep syz-fuzzer 92693 244910 42949 0 3 0x4000082 thrsleep syz-fuzzer 92693 432321 42949 0 3 0x4000082 thrsleep syz-fuzzer 92693 163352 42949 0 3 0x4000082 thrsleep syz-fuzzer 92693 240318 42949 0 3 0x4000082 thrsleep syz-fuzzer 42949 443190 97900 0 3 0x10008a sigsusp ksh *97900 411005 43663 0 7 0x13 sshd 43663 348682 1 0 3 0x88 kqread sshd 97378 464182 94773 73 3 0x1100090 kqread syslogd 94773 523504 1 0 3 0x100082 netio syslogd 49821 523944 1 0 3 0x100080 kqread resolvd 30803 504822 14719 77 3 0x100092 kqread dhcpleased 32088 398675 14719 77 3 0x100092 kqread dhcpleased 14719 499970 1 0 3 0x80 kqread dhcpleased 18125 479372 0 0 3 0x14200 bored smr 79472 25764 0 0 2 0x14200 zerothread 65534 26380 0 0 3 0x14200 aiodoned aiodoned 69616 172617 0 0 3 0x14200 syncer update 31478 280703 0 0 3 0x14200 cleaner cleaner 5249 264872 0 0 3 0x14200 reaper reaper 46185 83872 0 0 3 0x14200 pgdaemon pagedaemon 66600 428005 0 0 3 0x14200 bored viomb 64465 186877 0 0 3 0x40014200 acpi0 acpi0 78723 1307 0 0 3 0x14200 bored softnet 30469 316632 0 0 3 0x14200 bored systqmp 77601 328399 0 0 3 0x14200 bored systq 12171 90593 0 0 3 0x40014200 bored softclock 58101 152493 0 0 3 0x40014200 idle0 1 196287 0 0 3 0x82 wait init 0 0 -1 0 3 0x10200 scheduler swapper ddb> show all locks No such command ddb> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 10159 6412K 6982K 78643K 13701 0 pcb 13 12K 14K 78643K 229 0 rtable 167 5K 8K 78643K 591 0 ifaddr 65 14K 17K 78643K 203 0 counters 25 17K 17K 78643K 46 0 ioctlops 0 0K 4K 78643K 132 0 iov 1 2K 16K 78643K 166 0 mount 1 1K 1K 78643K 1 0 log 0 0K 0K 78643K 4 0 vnodes 1338 84K 84K 78643K 1813 0 UFS quota 1 32K 32K 78643K 1 0 UFS mount 5 36K 36K 78643K 5 0 shm 2 1K 5K 78643K 15 0 VM map 2 0K 0K 78643K 2 0 sem 12 0K 0K 78643K 122 0 dirhash 12 2K 2K 78643K 12 0 ACPI 1697 195K 286K 78643K 12548 0 file desc 14 49K 89K 78643K 1299 0 sigio 0 0K 0K 78643K 3 0 proc 59 55K 79K 78643K 671 0 subproc 104 6K 6K 78643K 169 0 NFS srvsock 1 0K 0K 78643K 1 0 NFS daemon 1 16K 16K 78643K 1 0 ip_moptions 0 0K 0K 78643K 66 0 in_multi 64 4K 6K 78643K 207 0 ether_multi 1 0K 0K 78643K 18 0 mrt 0 0K 0K 78643K 3 0 ISOFS mount 1 32K 32K 78643K 1 0 MSDOSFS mount 1 16K 16K 78643K 1 0 ttys 67 307K 307K 78643K 67 0 exec 0 0K 2K 78643K 922 0 tdb 3 0K 0K 78643K 3 0 pagedep 1 8K 8K 78643K 1 0 inodedep 1 32K 32K 78643K 1 0 newblk 1 0K 0K 78643K 1 0 VM swap 7 26K 26K 78643K 7 0 UVM amap 341 245K 753K 78643K 17029 0 UVM aobj 62 7K 7K 78643K 62 0 memdesc 1 4K 4K 78643K 1 0 crypto data 1 1K 1K 78643K 1 0 ip6_options 0 0K 0K 78643K 115 0 NDP 9 0K 2K 78643K 57 0 temp 110 4712K 4769K 78643K 8599 0 kqueue 12 18K 24K 78643K 95 0 SYN cache 2 16K 16K 78643K 2 0 ddb> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle rtpcb 120 72 0 69 1 0 1 1 0 8 0 rtentry 112 184 0 110 4 0 4 4 0 8 0 unpcb 136 838 0 821 12 10 2 6 0 8 1 syncache 296 7 0 7 2 2 0 1 0 8 0 tcpcb 736 490 0 481 14 7 7 7 0 8 5 arp 88 30 0 14 1 0 1 1 0 8 0 inpcb 304 1248 0 1239 29 20 9 14 0 8 8 ip6q 72 1 0 0 1 0 1 1 0 8 0 ip6af 40 1 0 0 1 0 1 1 0 8 0 nd6 48 42 0 24 1 0 1 1 0 8 0 pkpcb 40 4 0 4 1 1 0 1 0 8 0 kcovpl 48 13 0 5 1 0 1 1 0 8 0 pfrktable 1344 18 0 18 1 1 0 1 0 8 0 pftag 88 8 0 8 2 1 1 1 0 8 1 pfrule 1360 16 0 16 1 0 1 1 0 8 1 art_heap8 4096 1 0 0 1 0 1 1 0 8 0 art_heap4 256 830 0 506 33 5 28 31 0 8 3 art_table 32 831 0 506 4 0 4 4 0 8 0 art_node 16 183 0 116 1 0 1 1 0 8 0 sysvmsgpl 40 27 0 21 1 0 1 1 0 8 0 semapl 112 120 0 110 1 0 1 1 0 8 0 shmpl 112 59 0 0 2 0 2 2 0 8 0 dirhash 1024 17 0 0 3 0 3 3 0 8 0 dino2pl 256 2896 0 1460 90 0 90 90 0 8 0 ffsino 240 2896 0 1460 85 0 85 85 0 8 0 nchpl 144 4760 0 3127 63 0 63 63 0 8 0 uvmvnodes 80 3441 0 0 71 0 71 71 0 8 0 vnodes 224 3441 0 0 203 0 203 203 0 8 0 namei 1024 16547 0 16546 2 1 1 2 0 8 0 vcpupl 1984 12 0 0 2 0 2 2 0 8 0 vmpool 528 18 0 6 1 0 1 1 0 8 0 pfiaddrpl 120 3 0 3 1 1 0 1 0 8 0 scxspl 216 14946 0 14946 13 10 3 8 0 8 3 plimitpl 152 58 0 44 1 0 1 1 0 8 0 sigapl 424 1577 0 1535 6 1 5 6 0 8 0 futexpl 64 10718 0 10713 1 0 1 1 0 8 0 knotepl 120 17771 0 17690 4 0 4 4 0 8 0 kqueuepl 184 326 0 318 8 4 4 4 0 8 3 pipepl 304 232 0 204 5 2 3 5 0 8 0 fdescpl 432 1563 0 1538 4 0 4 4 0 8 0 filepl 120 8749 0 8505 24 10 14 15 0 8 4 lockfpl 104 423 0 421 2 1 1 2 0 8 0 lockfspl 48 91 0 89 1 0 1 1 0 8 0 sessionpl 144 30 0 14 1 0 1 1 0 8 0 pgrppl 48 30 0 14 1 0 1 1 0 8 0 ucredpl 96 521 0 511 1 0 1 1 0 8 0 zombiepl 144 1538 0 1535 1 0 1 1 0 8 0 processpl 1000 1577 0 1535 7 1 6 7 0 8 0 procpl 672 3385 0 3327 6 0 6 6 0 8 0 sockpl 448 2162 0 2133 50 38 12 22 0 8 8 mcl64k 65536 53 0 53 2 1 1 1 0 8 1 mcl16k 16384 5 0 5 2 1 1 1 0 8 1 mcl12k 12288 27 0 27 3 2 1 1 0 8 1 mcl9k 9216 24 0 24 3 2 1 1 0 8 1 mcl8k 8192 60 0 60 4 3 1 1 0 8 1 mcl4k 4096 146 0 146 3 2 1 1 0 8 1 mcl2k2 2112 11 0 11 3 2 1 1 0 8 1 mcl2k 2048 77606 0 77554 11 3 8 9 0 8 0 mtagpl 96 307 0 118 7 1 6 6 0 8 0 mbufpl 256 132133 0 131763 34 4 30 32 0 8 0 bufpl 288 6141 0 147 429 0 429 429 0 8 0 anonpl 24 390369 0 372826 140 21 119 139 0 188 0 amapchunkpl 152 97752 0 97015 1130 942 188 657 0 158 156 amappl16 200 4103 0 3423 48 12 36 47 0 8 0 amappl15 192 241 0 235 1 0 1 1 0 8 0 amappl14 184 8 0 4 1 0 1 1 0 8 0 amappl13 176 313 0 308 1 0 1 1 0 8 0 amappl12 168 255 0 252 1 0 1 1 0 8 0 amappl11 160 84 0 72 1 0 1 1 0 8 0 amappl10 152 250 0 248 1 0 1 1 0 8 0 amappl9 144 614 0 608 1 0 1 1 0 8 0 amappl8 136 849 0 780 3 0 3 3 0 8 0 amappl7 128 294 0 281 1 0 1 1 0 8 0 amappl6 120 338 0 318 2 1 1 2 0 8 0 amappl5 112 1465 0 1451 1 0 1 1 0 8 0 amappl4 104 944 0 914 1 0 1 1 0 8 0 amappl3 96 620 0 606 1 0 1 1 0 8 0 amappl2 88 835 0 786 3 1 2 3 0 8 0 amappl1 80 30589 0 30049 19 6 13 18 0 8 0 amappl 88 16437 0 16206 8 1 7 7 0 92 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 253 0 253 1 1 0 1 0 8 0 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 61 0 0 2 0 2 2 0 8 0 uaddrrnd 24 1581 0 1544 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 1581 0 1544 1 0 1 1 0 8 0 vmmpekpl 168 14269 0 14220 3 0 3 3 0 8 0 vmmpepl 168 148888 0 146457 196 67 129 160 0 357 10 vmsppl 272 1580 0 1544 4 1 3 3 0 8 0 rwobjpl 24 38956 0 33828 32 0 32 32 0 8 0 pdppl 4096 3168 0 3100 156 80 76 76 0 8 8 pvpl 32 773130 0 752080 256 62 194 244 0 265 6 pmappl 216 1580 0 1544 3 0 3 3 0 8 0 extentpl 40 58 0 38 1 0 1 1 0 8 0 phpool 112 927 0 148 23 0 23 23 0 8 0 ddb> machine ddbcpu 0 No such command ddb> trace sblock(fffffd806eeb2008,fffffd806eeb2120,1) at sblock+0x4a soassertlocked sys/kern/uipc_socket2.c:323 [inline] sblock(fffffd806eeb2008,fffffd806eeb2120,1) at sblock+0x4a sys/kern/uipc_socket2.c:378 sosend(fffffd806eeb2008,0,ffff800021644e90,0,0,0) at sosend+0x280 sys/kern/uipc_socket.c:517 fifo_write(ffff800021644de0) at fifo_write+0x7c sys/miscfs/fifofs/fifo_vnops.c:281 VOP_WRITE(fffffd807870a408,ffff800021644e90,3,fffffd807f7d87e0) at VOP_WRITE+0xbf sys/kern/vfs_vops.c:245 ktrwriteraw(ffff80002160f510,fffffd807870a408,fffffd807f7d87e0,ffff800021644f50,ffff800021644f30) at ktrwriteraw+0x13d sys/kern/kern_ktrace.c:666 ktrgenio(ffff80002160f510,4,1,ffff800000c34c80,1c4) at ktrgenio+0x26b ktrwrite2 sys/kern/kern_ktrace.c:630 [inline] ktrgenio(ffff80002160f510,4,1,ffff800000c34c80,1c4) at ktrgenio+0x26b sys/kern/kern_ktrace.c:265 dofilewritev(ffff80002160f510,4,ffff8000216450d8,0,ffff8000216451d0) at dofilewritev+0x38a sys/kern/sys_generic.c:402 sys_write(ffff80002160f510,ffff800021645170,ffff8000216451d0) at sys_write+0x83 sys/kern/sys_generic.c:301 syscall(ffff800021645240) at syscall+0x44e sys/arch/amd64/amd64/trap.c:585 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7f7ffffed2b0, count: -10 ddb> machine ddbcpu 1 No such command ddb> trace sblock(fffffd806eeb2008,fffffd806eeb2120,1) at sblock+0x4a soassertlocked sys/kern/uipc_socket2.c:323 [inline] sblock(fffffd806eeb2008,fffffd806eeb2120,1) at sblock+0x4a sys/kern/uipc_socket2.c:378 sosend(fffffd806eeb2008,0,ffff800021644e90,0,0,0) at sosend+0x280 sys/kern/uipc_socket.c:517 fifo_write(ffff800021644de0) at fifo_write+0x7c sys/miscfs/fifofs/fifo_vnops.c:281 VOP_WRITE(fffffd807870a408,ffff800021644e90,3,fffffd807f7d87e0) at VOP_WRITE+0xbf sys/kern/vfs_vops.c:245 ktrwriteraw(ffff80002160f510,fffffd807870a408,fffffd807f7d87e0,ffff800021644f50,ffff800021644f30) at ktrwriteraw+0x13d sys/kern/kern_ktrace.c:666 ktrgenio(ffff80002160f510,4,1,ffff800000c34c80,1c4) at ktrgenio+0x26b ktrwrite2 sys/kern/kern_ktrace.c:630 [inline] ktrgenio(ffff80002160f510,4,1,ffff800000c34c80,1c4) at ktrgenio+0x26b sys/kern/kern_ktrace.c:265 dofilewritev(ffff80002160f510,4,ffff8000216450d8,0,ffff8000216451d0) at dofilewritev+0x38a sys/kern/sys_generic.c:402 sys_write(ffff80002160f510,ffff800021645170,ffff8000216451d0) at sys_write+0x83 sys/kern/sys_generic.c:301 syscall(ffff800021645240) at syscall+0x44e sys/arch/amd64/amd64/trap.c:585 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7f7ffffed2b0, count: -10