kernel: protection fault trap, code=0 Stopped at __x86_indirect_thunk_r11+0x14: ret ddb> ddb> set $lines = 0 ddb> set $maxwidth = 0 ddb> show panic the kernel did not panic ddb> trace __x86_indirect_thunk_r11() at __x86_indirect_thunk_r11+0x14 softclock_thread(ffff80002a58cff0) at softclock_thread+0xc3 sys/kern/kern_timeout.c:814 end trace frame: 0x0, count: -2 ddb> show registers rdi 0xdeadbeefdeadbeef rsi 0 rbp 0xffff80002a5994d0 rbx 0 rdx 0 rcx 0xffffffff82dda630 timeout_proc rax 0x9 r8 0x43e r9 0 r10 0x75a868a0979ffeed r11 0xdeadbeefdeadbeef r12 0xdeadbeefdeadbeef r13 0xffffffff82c52ff0 cpu_info_full_primary+0x1ff0 r14 0xffff8000ffffcc90 r15 0xdeadbeefdeadbeef rip 0xffffffff822a9314 __x86_indirect_thunk_r11+0x14 cs 0x8 rflags 0x10246 __ALIGN_SIZE+0xf246 rsp 0xffff80002a599490 ss 0x10 __x86_indirect_thunk_r11+0x14: ret ddb> show proc PROC (softclock) tid=184899 pid=2607 tcnt=1 stat=onproc flags process=14000 proc=40000200 runpri=50, usrpri=51, slppri=0, nice=20 wchan=0x0, wmesg=, ps_single=0x0 forw=0xffffffffffffffff, list=0xffff80002a58d298,0xffff80002a58cd58 process=0xffff8000ffffcc90 user=0xffff80002a594000, vmspace=0xffffffff82dd98a8 estcpu=1, cpticks=1, pctcpu=0.0, user=0, sys=1, intr=0 ddb> ps PID TID PPID UID S FLAGS WAIT COMMAND 27123 451041 11641 0 2 0 syz-executor.6 27123 504932 11641 0 2 0x4000000 syz-executor.6 34905 392826 15850 0 2 0 syz-executor.0 34905 464726 15850 0 2 0x4000000 syz-executor.0 28855 426008 95870 0 2 0 syz-executor.4 28855 331768 95870 0 2 0x4000000 syz-executor.4 69737 501573 65813 0 2 0 syz-executor.1 69737 261042 65813 0 2 0x4000000 syz-executor.1 89066 38193 88175 0 2 0 syz-executor.2 89066 345889 88175 0 2 0x4000000 syz-executor.2 31515 43013 32083 0 2 0 syz-executor.3 31515 439388 32083 0 2 0x4000000 syz-executor.3 31515 347481 32083 0 2 0x4000000 syz-executor.3 31515 161040 32083 0 2 0x4000000 syz-executor.3 59500 389450 74117 0 2 0 syz-executor.5 59500 104801 74117 0 2 0x4000000 syz-executor.5 68244 438058 72161 0 2 0 syz-executor.7 68244 409152 72161 0 3 0x4000080 lockf syz-executor.7 68244 235008 72161 0 3 0x4000080 fsleep syz-executor.7 72457 120898 0 0 3 0x14280 nfsidl nfsio 34498 329211 0 0 3 0x14280 nfsidl nfsio 18387 244826 0 0 3 0x14280 nfsidl nfsio 96587 497125 0 0 3 0x14280 nfsidl nfsio 97258 69331 0 0 3 0x14280 nfsidl nfsio 39669 39367 0 0 3 0x14280 nfsidl nfsio 87814 62614 0 0 3 0x14280 nfsidl nfsio 14271 262551 0 0 3 0x14280 nfsidl nfsio 18934 240134 0 0 3 0x14280 nfsidl nfsio 30542 327490 0 0 3 0x14280 nfsidl nfsio 1750 198792 0 0 3 0x14280 nfsidl nfsio 91011 433885 0 0 3 0x14280 nfsidl nfsio 86729 276356 0 0 3 0x14280 nfsidl nfsio 26347 5938 0 0 3 0x14280 nfsidl nfsio 82825 105631 0 0 3 0x14280 nfsidl nfsio 10442 108996 0 0 3 0x14280 nfsidl nfsio 83092 346137 0 0 3 0x14280 nfsidl nfsio 76584 500214 0 0 3 0x14280 nfsidl nfsio 41449 148723 0 0 3 0x14280 nfsidl nfsio 40146 413060 0 0 3 0x14280 nfsidl nfsio 11641 429754 82818 0 2 0x482 syz-executor.6 32083 28021 82818 0 2 0x482 syz-executor.3 80252 479670 0 0 2 0x14600 acct 65813 433803 82818 0 2 0x482 syz-executor.1 95870 446056 82818 0 2 0x482 syz-executor.4 15850 337038 82818 0 2 0x482 syz-executor.0 88175 120037 82818 0 2 0x482 syz-executor.2 72161 129785 82818 0 2 0x482 syz-executor.7 74117 284478 82818 0 2 0x482 syz-executor.5 92083 147818 1 0 3 0x18100083 ttyin getty 14814 398982 0 0 3 0x14200 bored sosplice 82818 308343 34366 0 3 0x1a000082 wait syz-fuzzer 82818 123180 34366 0 2 0x1e000002 syz-fuzzer 82818 510664 34366 0 2 0x1e000482 syz-fuzzer 82818 470258 34366 0 3 0x1e000082 thrsleep syz-fuzzer 82818 143299 34366 0 3 0x1e000082 wait syz-fuzzer 82818 73510 34366 0 2 0x1e000002 syz-fuzzer 82818 33853 34366 0 3 0x1e000082 wait syz-fuzzer 82818 65952 34366 0 3 0x1e000082 wait syz-fuzzer 82818 90591 34366 0 3 0x1e000082 thrsleep syz-fuzzer 82818 472628 34366 0 3 0x1e000082 wait syz-fuzzer 82818 140862 34366 0 3 0x1e000082 thrsleep syz-fuzzer 82818 137132 34366 0 3 0x1e000082 wait syz-fuzzer 82818 195173 34366 0 3 0x1e000082 wait syz-fuzzer 82818 443653 34366 0 3 0x1e000082 wait syz-fuzzer 82818 32563 34366 0 3 0x1e000082 thrsleep syz-fuzzer 34366 74423 17550 0 3 0x810008a sigsusp ksh 17550 508143 56054 0 3 0x1800009a kqread sshd 56054 490319 1 0 3 0x18000088 kqread sshd 29097 416494 41316 73 2 0x19100490 syslogd 41316 156513 1 0 3 0x18100082 netio syslogd 5092 169698 1 0 3 0x18100080 kqread resolvd 74623 375634 66878 77 3 0x18100092 kqread dhcpleased 4588 261994 66878 77 3 0x18100092 kqread dhcpleased 66878 27267 1 0 3 0x18000080 kqread dhcpleased 73908 121842 0 0 3 0x14200 bored smr 81856 7139 0 0 2 0x14200 zerothread 52218 376013 0 0 3 0x14200 aiodoned aiodoned 58568 291849 0 0 3 0x14200 syncer update 65269 25969 0 0 3 0x14200 cleaner cleaner 81810 353712 0 0 3 0x14200 reaper reaper 67761 166810 0 0 3 0x14200 pgdaemon pagedaemon 62073 71016 0 0 3 0x14200 bored viomb 14434 128835 0 0 3 0x40014200 acpi0 acpi0 75250 276950 0 0 3 0x14200 bored softnet3 56505 16580 0 0 3 0x14200 bored softnet2 81753 394632 0 0 3 0x14200 bored softnet1 82168 327993 0 0 3 0x14200 bored softnet0 84709 206230 0 0 3 0x14200 bored systqmp 76456 487742 0 0 3 0x14200 bored systq * 2607 184899 0 0 7 0x40014200 softclock 13757 444016 0 0 3 0x40014200 idle0 1 338076 0 0 3 0x8000082 wait init 0 0 -1 0 3 0x10200 scheduler swapper ddb> show all locks No such command ddb> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 10208 6434K 7235K 166960K 76849 0 pcb 15 28K 32K 166960K 2297 0 rtable 185 9K 11K 166960K 8141 0 pf 32 9K 10K 166960K 1298 0 ifaddr 38 18K 22K 166960K 1176 0 ifgroup 55 2K 2K 166960K 2117 0 sysctl 3 0K 0K 166960K 9 0 counters 31 17K 18K 166960K 597 0 ioctlops 0 0K 2K 166960K 1913 0 iov 0 0K 32K 166960K 4287 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1748 110K 110K 166960K 22669 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 2 1K 9K 166960K 460 0 VM map 2 1K 1K 166960K 2 0 sem 12 0K 0K 166960K 4832 0 dirhash 12 2K 2K 166960K 294 0 ACPI 1697 195K 286K 166960K 12548 0 file desc 18 65K 85K 166960K 31165 0 sigio 0 0K 0K 166960K 1849 0 proc 75 60K 93K 166960K 6206 0 subproc 104 6K 7K 166960K 2362 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 ip_moptions 0 0K 0K 166960K 2308 0 in_multi 63 4K 7K 166960K 2379 0 ether_multi 1 0K 0K 166960K 39 0 mrt 1 0K 0K 166960K 26 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 247 1102K 1102K 166960K 247 0 exec 0 0K 1K 166960K 6859 0 pfkey data 0 0K 0K 166960K 102 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 709 1636K 1637K 166960K 284260 0 UVM aobj 131 4K 4K 166960K 133 0 pinsyscall 22 44K 100K 166960K 7069 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 ip6_options 0 0K 1K 166960K 891 0 NDP 12 0K 1K 166960K 951 0 temp 74 6804K 7440K 166960K 270862 0 kqueue 12 18K 29K 166960K 2328 0 SYN cache 2 104K 112K 166960K 3 0 ddb> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle rtpcb 120 2052 0 2049 7 2 5 5 0 8 4 rtentry 112 2668 0 2586 5 1 4 4 0 8 1 unpcb 144 26259 0 26246 37 29 8 9 0 8 7 syncache 336 338 0 338 6 5 1 1 0 8 1 sackhl 24 1 25 1 1 1 0 1 0 8 0 tcpqe 32 451 0 451 6 5 1 1 0 8 1 tcpcb 808 10639 0 10615 91 78 13 20 0 8 7 arp 88 551 0 533 1 0 1 1 0 8 0 ipq 40 37 0 37 3 2 1 1 0 8 1 ipqe 40 192 0 192 3 2 1 1 0 8 1 inpcb 360 27148 0 27118 99 86 13 19 0 8 5 nd6 104 570 0 557 1 0 1 1 0 8 0 pkpcb 40 252 0 252 5 3 2 2 0 8 2 kcovpl 48 180 0 172 1 0 1 1 0 8 0 ppxss 1072 168 0 168 5 4 1 1 0 8 1 rttmr 136 2 0 2 1 0 1 1 0 8 1 pool(rttmr): free list modified: page 0xfffffd805ffa8000; item ordinal 0; addr 0xfffffd805ffa8d48 (p 0xfffffd805ffa8000); offset 0x10=0xffffffff art_heap8 4096 9 0 7 4 1 3 3 0 8 1 art_heap4 256 9885 0 9518 55 25 30 31 0 8 4 art_table 32 9894 0 9525 4 0 4 4 0 8 0 art_node 16 2612 0 2536 1 0 1 1 0 8 0 sysvmsgpl 40 53 0 13 1 0 1 1 0 8 0 semupl 112 3 0 3 1 1 0 1 0 8 0 semapl 112 4828 0 4818 1 0 1 1 0 8 0 shmpl 112 130 0 2 4 0 4 4 0 8 0 dirhash 1024 205 0 188 3 0 3 3 0 8 0 dino2pl 256 43714 0 42007 107 0 107 107 0 8 0 ffsino 240 43714 0 42007 101 0 101 101 0 8 0 nchpl 144 84470 0 82747 66 0 66 66 0 8 0 uvmvnodes 80 51912 0 0 1060 0 1060 1060 0 8 0 vnodes 216 51912 0 0 2884 0 2884 2884 0 8 0 namei 1024 305184 0 305184 7 5 2 2 0 8 2 vcpupl 2048 512 0 0 64 0 64 64 0 8 0 vmpool 664 580 0 68 43 0 43 43 0 8 0 kstatmem 264 1156 0 1132 3 0 3 3 0 8 1 scxspl 216 246280 0 246280 18 14 4 8 1 8 4 plimitpl 152 3910 0 3895 1 0 1 1 0 8 0 sigapl 424 31442 0 31375 9 1 8 8 0 8 0 futexpl 64 288669 0 288668 1 0 1 1 0 8 0 knotepl 120 271793 0 271711 33 22 11 16 0 8 7 kqueuepl 184 5972 0 5964 20 16 4 7 0 8 3 pipepl 288 5289 0 5261 21 14 7 11 0 8 4 fdescpl 432 31100 0 31071 4 0 4 4 0 8 0 filepl 120 198154 0 197918 50 33 17 19 0 8 7 lockfpl 104 9285 0 9281 5 2 3 3 0 8 2 lockfspl 48 3524 0 3521 2 0 2 2 0 8 1 sessionpl 144 204 0 188 1 0 1 1 0 8 0 pgrppl 48 854 0 838 1 0 1 1 0 8 0 ucredpl 104 32281 0 32263 1 0 1 1 0 8 0 zombiepl 144 31375 0 31375 2 1 1 1 0 8 1 processpl 1072 31442 0 31375 5 0 5 5 0 8 0 procpl 680 76851 0 76759 15 6 9 10 0 8 1 sosppl 168 411 0 408 2 1 1 1 0 8 0 sockpl 488 55761 0 55719 867 849 18 39 0 8 8 mcl64k 65536 1348 0 1348 7 6 1 1 0 8 1 mcl16k 16384 677 0 677 7 6 1 1 0 8 1 mcl12k 12288 1107 0 1107 7 6 1 1 0 8 1 mcl9k 9216 519 0 519 6 5 1 1 0 8 1 mcl8k 8192 2374 0 2374 7 6 1 1 0 8 1 mcl4k 4096 3266 0 3262 9 7 2 2 0 8 1 mcl2k2 2112 190 0 190 6 5 1 1 0 8 1 mcl2k 2048 145363 0 145240 79 59 20 34 0 8 3 mtagpl 96 6683 0 6320 26 17 9 16 0 8 0 mbufpl 256 542067 0 541505 1409 1361 48 424 0 8 7 bufpl 280 60971 0 52247 624 0 624 624 0 8 0 anonpl 24 2882189 0 2867212 148 34 114 119 0 188 11 amapchunkpl 152 892121 0 891206 60 13 47 50 0 158 8 amappl16 200 53908 0 53399 102 64 38 42 0 8 8 amappl15 192 210 0 209 1 0 1 1 0 8 0 amappl14 184 733 0 714 3 1 2 2 0 8 0 amappl13 176 66 0 66 4 3 1 1 0 8 1 amappl12 168 34328 0 34292 2 0 2 2 0 8 0 amappl11 160 73 0 63 1 0 1 1 0 8 0 amappl10 152 369 0 356 1 0 1 1 0 8 0 amappl9 144 442 0 442 7 6 1 1 0 8 1 amappl8 136 1347 0 1232 5 0 5 5 0 8 0 amappl7 128 196 0 181 1 0 1 1 0 8 0 amappl6 120 2767 0 2738 3 1 2 2 0 8 1 amappl5 112 1396 0 1384 1 0 1 1 0 8 0 amappl4 104 2086 0 2050 4 2 2 2 0 8 0 amappl3 96 174491 0 174393 4 0 4 4 0 8 1 amappl2 88 33661 0 33583 4 2 2 4 0 8 0 amappl1 80 130975 0 130480 22 10 12 21 0 8 1 amappl 88 281352 0 280976 10 0 10 10 0 92 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 253 0 253 1 1 0 1 0 8 0 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 132 0 2 3 0 3 3 0 8 0 uaddrrnd 24 31680 0 31139 4 0 4 4 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 31680 0 31139 4 0 4 4 0 8 0 vmmpekpl 168 196297 0 196181 6 0 6 6 0 8 0 vmmpepl 168 1884643 0 1881602 238 75 163 163 0 357 11 vmsppl 352 31679 0 31139 51 1 50 50 0 8 0 rwobjpl 24 465773 0 412008 325 0 325 325 0 8 0 pdppl 4096 63366 0 62790 2330 1754 576 576 0 8 0 pvpl 32 8104819 0 8084145 451 250 201 344 0 265 20 pmappl 216 31679 0 31139 31 0 31 31 0 8 0 extentpl 40 56 0 38 1 0 1 1 0 8 0 phpool 112 4325 0 3335 44 6 38 38 0 8 7 ddb> machine ddbcpu 0 No such command ddb> trace __x86_indirect_thunk_r11() at __x86_indirect_thunk_r11+0x14 softclock_thread(ffff80002a58cff0) at softclock_thread+0xc3 sys/kern/kern_timeout.c:814 end trace frame: 0x0, count: -2 ddb> machine ddbcpu 1 No such command ddb> trace __x86_indirect_thunk_r11() at __x86_indirect_thunk_r11+0x14 softclock_thread(ffff80002a58cff0) at softclock_thread+0xc3 sys/kern/kern_timeout.c:814 end trace frame: 0x0, count: -2