kernel: protection fault trap, code=0 Stopped at sblock+0x4a: movq 0x8(%rax),%rax ddb> ddb> set $lines = 0 ddb> set $maxwidth = 0 ddb> show panic the kernel did not panic ddb> trace sblock(fffffd806e4b0e10,fffffd806e4b0f28,1) at sblock+0x4a soassertlocked sys/kern/uipc_socket2.c:323 [inline] sblock(fffffd806e4b0e10,fffffd806e4b0f28,1) at sblock+0x4a sys/kern/uipc_socket2.c:378 sosend(fffffd806e4b0e10,0,ffff8000216318b0,0,0,0) at sosend+0x280 sys/kern/uipc_socket.c:527 fifo_write(ffff800021631800) at fifo_write+0x7c sys/miscfs/fifofs/fifo_vnops.c:288 VOP_WRITE(fffffd80686b9090,ffff8000216318b0,3,fffffd807f7d8840) at VOP_WRITE+0xbf sys/kern/vfs_vops.c:245 ktrwriteraw(ffff8000ffff87e8,fffffd80686b9090,fffffd807f7d8840,ffff800021631970,ffff800021631950) at ktrwriteraw+0x13d sys/kern/kern_ktrace.c:666 ktrgenio(ffff8000ffff87e8,4,1,ffff800000c82670,d54) at ktrgenio+0x26b ktrwrite2 sys/kern/kern_ktrace.c:630 [inline] ktrgenio(ffff8000ffff87e8,4,1,ffff800000c82670,d54) at ktrgenio+0x26b sys/kern/kern_ktrace.c:265 dofilewritev(ffff8000ffff87e8,4,ffff800021631af8,0,ffff800021631bf0) at dofilewritev+0x38a sys/kern/sys_generic.c:401 sys_write(ffff8000ffff87e8,ffff800021631b90,ffff800021631bf0) at sys_write+0x83 sys/kern/sys_generic.c:300 syscall(ffff800021631c60) at syscall+0x44e sys/arch/amd64/amd64/trap.c:585 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7f7ffffebfc0, count: -10 ddb> show registers rdi 0 rsi 0 rbp 0xffff8000216316c0 rbx 0xfffffd806e4b0f28 rdx 0 rcx 0xffff8000ffff87ec rax 0x1f34d5897bf842d9 r8 0 r9 0 r10 0xdcebc75f140a2a2b r11 0x99ab29fe9eceea48 r12 0xfffffd806e4b0e01 r13 0x1 r14 0xfffffd806e4b0f78 r15 0xfffffd806e4b0e10 rip 0xffffffff81c5410a sblock+0x4a cs 0x8 rflags 0x10246 __ALIGN_SIZE+0xf246 rsp 0xffff800021631660 ss 0x10 sblock+0x4a: movq 0x8(%rax),%rax ddb> show proc PROC (sshd) pid=239075 stat=onproc flags process=12 proc=1 pri=24, usrpri=50, nice=20 forw=0xffffffffffffffff, list=0xffff8000ffff8548,0xffff8000ffff8d38 process=0xffff800021624400 user=0xffff80002162c000, vmspace=0xfffffd807f018220 estcpu=0, cpticks=0, pctcpu=0.0 user=0, sys=0, intr=0 ddb> ps PID TID PPID UID S FLAGS WAIT COMMAND 41697 149015 14708 0 3 0x82 nanoslp syz-executor.6 15583 48036 14708 0 3 0x82 piperd syz-executor.2 15969 119391 14708 0 3 0x82 piperd syz-executor.0 64950 458576 14708 0 3 0x82 piperd syz-executor.7 92964 402690 14708 0 3 0x82 piperd syz-executor.4 43674 211069 14708 0 2 0x83 syz-executor.5 36915 504167 0 0 3 0x14200 acct acct 52642 482893 14708 0 2 0x83 syz-executor.3 72008 101995 14708 0 3 0x82 piperd syz-executor.1 90126 97264 0 0 3 0x14200 bored sosplice 14708 170557 74936 0 3 0x82 thrsleep syz-fuzzer 14708 238360 74936 0 3 0x4000082 nanoslp syz-fuzzer 14708 166649 74936 0 2 0x4000083 syz-fuzzer 14708 508808 74936 0 2 0x4000083 syz-fuzzer 14708 41638 74936 0 2 0x4000083 syz-fuzzer 14708 40762 74936 0 3 0x4000082 thrsleep syz-fuzzer 14708 138758 74936 0 3 0x4000082 kqread syz-fuzzer 14708 116795 74936 0 3 0x4000082 thrsleep syz-fuzzer 74936 38758 18657 0 3 0x10008a sigsusp ksh *18657 239075 48691 0 7 0x13 sshd 63385 125790 1 0 3 0x100083 ttyin getty 48691 334541 1 0 3 0x88 poll sshd 26251 307575 52692 73 3 0x100090 kqread syslogd 52692 53450 1 0 3 0x100082 netio syslogd 45079 57180 1 0 3 0x100080 kqread resolvd 10608 450152 3574 77 3 0x100092 kqread dhcpleased 78603 484819 3574 77 3 0x100092 kqread dhcpleased 3574 12640 1 0 3 0x80 kqread dhcpleased 37039 496332 0 0 3 0x14200 bored smr 1013 135687 0 0 2 0x14200 zerothread 10401 273472 0 0 3 0x14200 aiodoned aiodoned 8865 247606 0 0 3 0x14200 syncer update 15773 443582 0 0 3 0x14200 cleaner cleaner 49493 490868 0 0 3 0x14200 reaper reaper 58048 40826 0 0 3 0x14200 pgdaemon pagedaemon 98546 215489 0 0 3 0x14200 bored viomb 30257 83496 0 0 3 0x40014200 acpi0 acpi0 49315 425032 0 0 3 0x14200 bored softnet 34541 445397 0 0 3 0x14200 bored systqmp 97281 211322 0 0 3 0x14200 bored systq 54126 375065 0 0 3 0x40014200 bored softclock 19414 46045 0 0 3 0x40014200 idle0 1 124150 0 0 3 0x82 wait init 0 0 -1 0 3 0x10200 scheduler swapper ddb> show all locks No such command ddb> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 10198 6407K 7288K 78643K 19076 0 pcb 13 16K 18K 78643K 627 0 rtable 253 14K 16K 78643K 1385 0 ifaddr 95 21K 22K 78643K 639 0 sysctl 2 0K 0K 78643K 2 0 counters 27 17K 17K 78643K 81 0 ioctlops 0 0K 4K 78643K 1049 0 iov 0 0K 28K 78643K 319 0 mount 1 1K 1K 78643K 1 0 log 0 0K 0K 78643K 4 0 vnodes 1391 87K 88K 78643K 7735 0 UFS quota 1 32K 32K 78643K 1 0 UFS mount 5 36K 36K 78643K 5 0 shm 2 1K 5K 78643K 27 0 VM map 2 0K 0K 78643K 2 0 sem 12 0K 0K 78643K 615 0 dirhash 12 2K 2K 78643K 12 0 ACPI 1697 195K 286K 78643K 12598 0 file desc 10 33K 81K 78643K 4459 0 sigio 0 0K 0K 78643K 43 0 proc 65 55K 71K 78643K 1189 0 subproc 104 6K 6K 78643K 390 0 NFS srvsock 1 0K 0K 78643K 1 0 NFS daemon 1 16K 16K 78643K 1 0 ip_moptions 0 0K 0K 78643K 90 0 in_multi 90 6K 6K 78643K 456 0 ether_multi 1 0K 0K 78643K 51 0 mrt 2 0K 0K 78643K 23 0 ISOFS mount 1 32K 32K 78643K 1 0 MSDOSFS mount 1 16K 16K 78643K 1 0 ttys 283 1261K 1261K 78643K 283 0 exec 0 0K 2K 78643K 1613 0 tdb 3 0K 0K 78643K 3 0 pagedep 1 8K 8K 78643K 1 0 inodedep 1 32K 32K 78643K 1 0 newblk 1 0K 0K 78643K 1 0 VM swap 7 26K 26K 78643K 7 0 UVM amap 272 182K 202K 78643K 54738 0 UVM aobj 134 9K 9K 78643K 140 0 memdesc 1 4K 4K 78643K 1 0 crypto data 1 1K 1K 78643K 1 0 ip6_options 0 0K 0K 78643K 197 0 NDP 12 0K 2K 78643K 134 0 temp 156 4716K 4791K 78643K 33319 0 kqueue 10 14K 18K 78643K 185 0 SYN cache 2 16K 16K 78643K 2 0 ddb> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle rtpcb 120 166 0 163 1 0 1 1 0 8 0 rtentry 112 413 0 314 4 1 3 4 0 8 0 unpcb 136 2381 0 2368 23 21 2 6 0 8 1 syncache 296 22 0 22 6 6 0 1 0 8 0 tcpqe 32 450 0 450 2 2 0 1 0 8 0 tcpcb 736 1439 0 1435 53 46 7 14 0 8 6 arp 88 75 0 56 1 0 1 1 0 8 0 ipq 40 14 0 14 3 3 0 1 0 8 0 ipqe 40 333 0 333 3 3 0 1 0 8 0 inpcb 304 4050 0 4042 55 46 9 14 0 8 8 ip6q 72 2 0 2 1 1 0 1 0 8 0 ip6af 40 4 0 4 1 1 0 1 0 8 0 nd6 48 104 0 80 1 0 1 1 0 8 0 pkpcb 40 23 0 23 4 4 0 1 0 8 0 kcovpl 48 30 0 22 1 0 1 1 0 8 0 ppxss 1152 3 0 3 1 1 0 1 0 8 0 pfstscr 40 84 0 81 1 0 1 1 0 8 0 pfrktable 1344 85 0 70 4 2 2 2 0 8 0 pftag 88 16 0 10 2 1 1 1 0 8 0 pfqueue 264 3 0 3 1 1 0 1 0 8 0 pfstitem 24 8 0 4 1 0 1 1 0 8 0 pfstkey 112 156 0 152 1 0 1 1 0 8 0 pfstate 320 78 0 76 1 0 1 1 0 8 0 pfrule 1360 317 0 114 18 0 18 18 0 8 0 art_heap8 4096 1 0 0 1 0 1 1 0 8 0 art_heap4 256 1540 0 1140 31 5 26 30 0 8 0 art_table 32 1541 0 1140 4 0 4 4 0 8 0 art_node 16 412 0 325 1 0 1 1 0 8 0 sysvmsgpl 40 32 0 31 1 0 1 1 0 8 0 semapl 112 613 0 603 1 0 1 1 0 8 0 shmpl 112 137 0 9 4 0 4 4 0 8 0 dirhash 1024 17 0 0 3 0 3 3 0 8 0 dino2pl 256 11529 0 10097 90 0 90 90 0 8 0 ffsino 240 11529 0 10097 85 0 85 85 0 8 0 nchpl 144 17679 0 16071 62 0 62 62 0 8 0 uvmvnodes 80 5926 0 0 121 0 121 121 0 8 0 vnodes 224 5926 0 0 349 0 349 349 0 8 0 namei 1024 73027 0 73027 2 1 1 2 0 8 1 vcpupl 1984 38 0 0 5 0 5 5 0 8 0 vmpool 528 119 0 81 4 1 3 3 0 8 0 pfiaddrpl 120 115 0 22 3 0 3 3 0 8 0 scsiplug 72 9 0 9 5 4 1 1 0 8 1 scxspl 216 42430 0 42430 16 12 4 8 0 8 4 plimitpl 152 648 0 634 1 0 1 1 0 8 0 sigapl 424 4698 0 4662 6 1 5 6 0 8 0 futexpl 64 48882 0 48882 3 2 1 1 0 8 1 knotepl 112 2162 0 2088 3 0 3 3 0 8 0 kqueuepl 184 1108 0 1098 20 17 3 4 0 8 2 pipepl 304 6093 0 6065 54 44 10 14 0 8 7 fdescpl 432 4683 0 4662 4 0 4 4 0 8 0 filepl 120 57864 0 57631 68 52 16 21 0 8 8 lockfpl 104 2900 0 2898 7 5 2 2 0 8 1 lockfspl 48 756 0 754 1 0 1 1 0 8 0 sessionpl 144 45 0 29 1 0 1 1 0 8 0 pgrppl 48 124 0 108 1 0 1 1 0 8 0 ucredpl 96 22172 0 22162 1 0 1 1 0 8 0 zombiepl 144 4662 0 4661 1 0 1 1 0 8 0 processpl 1000 4698 0 4661 6 0 6 6 0 8 0 procpl 672 11468 0 11424 18 11 7 7 0 8 1 sosppl 168 28 0 28 5 4 1 1 0 8 1 sockpl 448 6622 0 6599 139 128 11 25 0 8 8 pool(sockpl): free list modified: page 0xfffffd806e4b0000; item ordinal 0; addr 0xfffffd806e4b0e10 (p 0xfffffd806fa92000); offset 0x10=0xdead9eef mcl64k 65536 213 0 213 6 5 1 2 0 8 1 mcl16k 16384 28 0 28 7 7 0 1 0 8 0 mcl12k 12288 515 0 515 4 3 1 1 0 8 1 mcl9k 9216 72 0 72 11 10 1 1 0 8 1 mcl8k 8192 236 0 236 6 5 1 1 0 8 1 mcl4k 4096 398 0 395 5 4 1 1 0 8 0 mcl2k2 2112 35 0 35 6 5 1 1 0 8 1 mcl2k 2048 86218 0 86155 19 9 10 16 0 8 0 mtagpl 96 695 0 596 9 5 4 5 0 8 0 mbufpl 256 171406 0 170972 75 38 37 65 0 8 4 bufpl 288 11483 0 5075 459 0 459 459 0 8 0 anonpl 24 1261419 0 1242756 187 60 127 146 0 188 2 amapchunkpl 152 142671 0 142027 71 32 39 43 0 158 6 amappl16 200 12091 0 11434 65 29 36 48 0 8 0 amappl15 192 695 0 689 1 0 1 1 0 8 0 amappl14 184 409 0 406 1 0 1 1 0 8 0 amappl13 176 934 0 933 1 0 1 1 0 8 0 amappl12 168 83 0 76 1 0 1 1 0 8 0 amappl11 160 585 0 573 1 0 1 1 0 8 0 amappl10 152 30 0 25 1 0 1 1 0 8 0 amappl9 144 1540 0 1533 1 0 1 1 0 8 0 amappl8 136 2183 0 2113 3 0 3 3 0 8 0 amappl7 128 1336 0 1324 1 0 1 1 0 8 0 amappl6 120 1330 0 1311 2 1 1 2 0 8 0 amappl5 112 3906 0 3892 1 0 1 1 0 8 0 amappl4 104 2321 0 2291 2 0 2 2 0 8 0 amappl3 96 1009 0 998 1 0 1 1 0 8 0 amappl2 88 1686 0 1641 3 1 2 3 0 8 0 amappl1 80 84824 0 84362 18 5 13 18 0 8 1 amappl 88 53861 0 53692 10 3 7 7 0 92 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 253 0 253 1 1 0 1 0 8 0 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 139 0 6 3 0 3 3 0 8 0 uaddrrnd 24 4802 0 4743 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 4802 0 4743 1 0 1 1 0 8 0 vmmpekpl 168 56765 0 56720 3 0 3 3 0 8 0 vmmpepl 168 434480 0 432317 208 80 128 152 0 357 0 vmsppl 272 4801 0 4743 7 2 5 5 0 8 0 rwobjpl 24 106529 0 98953 49 2 47 48 0 8 0 pdppl 4096 9610 0 9524 338 238 100 104 0 8 14 pvpl 32 2284657 0 2262285 319 110 209 258 0 265 6 pmappl 216 4801 0 4743 4 0 4 4 0 8 0 extentpl 40 57 0 38 1 0 1 1 0 8 0 phpool 112 1347 0 490 27 1 26 26 0 8 0 ddb> machine ddbcpu 0 No such command ddb> trace sblock(fffffd806e4b0e10,fffffd806e4b0f28,1) at sblock+0x4a soassertlocked sys/kern/uipc_socket2.c:323 [inline] sblock(fffffd806e4b0e10,fffffd806e4b0f28,1) at sblock+0x4a sys/kern/uipc_socket2.c:378 sosend(fffffd806e4b0e10,0,ffff8000216318b0,0,0,0) at sosend+0x280 sys/kern/uipc_socket.c:527 fifo_write(ffff800021631800) at fifo_write+0x7c sys/miscfs/fifofs/fifo_vnops.c:288 VOP_WRITE(fffffd80686b9090,ffff8000216318b0,3,fffffd807f7d8840) at VOP_WRITE+0xbf sys/kern/vfs_vops.c:245 ktrwriteraw(ffff8000ffff87e8,fffffd80686b9090,fffffd807f7d8840,ffff800021631970,ffff800021631950) at ktrwriteraw+0x13d sys/kern/kern_ktrace.c:666 ktrgenio(ffff8000ffff87e8,4,1,ffff800000c82670,d54) at ktrgenio+0x26b ktrwrite2 sys/kern/kern_ktrace.c:630 [inline] ktrgenio(ffff8000ffff87e8,4,1,ffff800000c82670,d54) at ktrgenio+0x26b sys/kern/kern_ktrace.c:265 dofilewritev(ffff8000ffff87e8,4,ffff800021631af8,0,ffff800021631bf0) at dofilewritev+0x38a sys/kern/sys_generic.c:401 sys_write(ffff8000ffff87e8,ffff800021631b90,ffff800021631bf0) at sys_write+0x83 sys/kern/sys_generic.c:300 syscall(ffff800021631c60) at syscall+0x44e sys/arch/amd64/amd64/trap.c:585 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7f7ffffebfc0, count: -10 ddb> machine ddbcpu 1 No such command ddb> trace sblock(fffffd806e4b0e10,fffffd806e4b0f28,1) at sblock+0x4a soassertlocked sys/kern/uipc_socket2.c:323 [inline] sblock(fffffd806e4b0e10,fffffd806e4b0f28,1) at sblock+0x4a sys/kern/uipc_socket2.c:378 sosend(fffffd806e4b0e10,0,ffff8000216318b0,0,0,0) at sosend+0x280 sys/kern/uipc_socket.c:527 fifo_write(ffff800021631800) at fifo_write+0x7c sys/miscfs/fifofs/fifo_vnops.c:288 VOP_WRITE(fffffd80686b9090,ffff8000216318b0,3,fffffd807f7d8840) at VOP_WRITE+0xbf sys/kern/vfs_vops.c:245 ktrwriteraw(ffff8000ffff87e8,fffffd80686b9090,fffffd807f7d8840,ffff800021631970,ffff800021631950) at ktrwriteraw+0x13d sys/kern/kern_ktrace.c:666 ktrgenio(ffff8000ffff87e8,4,1,ffff800000c82670,d54) at ktrgenio+0x26b ktrwrite2 sys/kern/kern_ktrace.c:630 [inline] ktrgenio(ffff8000ffff87e8,4,1,ffff800000c82670,d54) at ktrgenio+0x26b sys/kern/kern_ktrace.c:265 dofilewritev(ffff8000ffff87e8,4,ffff800021631af8,0,ffff800021631bf0) at dofilewritev+0x38a sys/kern/sys_generic.c:401 sys_write(ffff8000ffff87e8,ffff800021631b90,ffff800021631bf0) at sys_write+0x83 sys/kern/sys_generic.c:300 syscall(ffff800021631c60) at syscall+0x44e sys/arch/amd64/amd64/trap.c:585 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7f7ffffebfc0, count: -10