kernel: protection fault trap, code=0 Stopped at sys_semop+0x45b: movzwl 0(%rax),%r15d ddb> ddb> set $lines = 0 ddb> set $maxwidth = 0 ddb> show panic the kernel did not panic ddb> trace sys_semop(ffff80003b14b4a8,ffff80003c9630c0,ffff80003c963010) at sys_semop+0x45b sys/kern/sysv_sem.c:615 syscall(ffff80003c9630c0) at syscall+0x97e mi_syscall sys/sys/syscall_mi.h:-1 [inline] syscall(ffff80003c9630c0) at syscall+0x97e sys/arch/amd64/amd64/trap.c:748 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xa583ea4eac0, count: -3 ddb> show registers rdi 0 rsi 0 rbp 0xffff80003c962fe0 rbx 0 rdx 0 rcx 0 rax 0xdeafbeaddeafbead r8 0x7f7fffffc000 r9 0 r10 0x45a9e0aa08742428 r11 0x65df62aacfd78497 r12 0xffff80000148c184 r13 0 r14 0xffff80003c9630c0 r15 0 rip 0xffffffff81f6a3eb sys_semop+0x45b cs 0x8 rflags 0x10246 __ALIGN_SIZE+0xf246 rsp 0xffff80003c962ec0 ss 0x10 sys_semop+0x45b: movzwl 0(%rax),%r15d ddb> show proc PROC (syz-executor) tid=28096 pid=81282 tcnt=4 stat=onproc flags process=0 proc=4000000 runpri=80, usrpri=80, slppri=32, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0 forw=0xffffffffffffffff, list=0xffff80003b14b738,0xffff80003b14a7e8 process=0xffff80003b1416f0 user=0xffff80003c95e000, vmspace=0xfffffd806b8e9018 estcpu=30, cpticks=0, pctcpu=0.0, user=0, sys=0, intr=0 ddb> ps PID TID PPID UID S FLAGS WAIT COMMAND 11844 10866 14146 0 2 0x82000 syz-executor 11844 210410 14146 0 3 0x4002000 suspend syz-executor 44342 119450 45085 0 2 0 syz-executor 44342 367517 45085 0 3 0x4000080 fsleep syz-executor 99753 328617 52998 0 2 0 syz-executor 99753 69366 52998 0 3 0x4000080 fsleep syz-executor 99753 18051 52998 0 3 0x4000080 fsleep syz-executor 99753 377635 52998 0 2 0x4000000 syz-executor 57726 116416 37884 0 2 0 syz-executor 57726 269413 37884 0 3 0x4000000 inode syz-executor 57726 265280 37884 0 2 0x4000000 syz-executor 57726 377879 37884 0 2 0x4000000 syz-executor 81282 305944 35356 0 2 0 syz-executor *81282 28096 35356 0 7 0x4000000 syz-executor 81282 65176 35356 0 3 0x4000080 fsleep syz-executor 81282 45788 35356 0 3 0x4000080 fsleep syz-executor 66651 321060 37850 -1 2 0x10 syz-executor 66651 53013 37850 -1 2 0x4000010 syz-executor 66651 309312 37850 -1 3 0x4000090 fsleep syz-executor 89879 29789 0 0 3 0x14200 bored sosplice 52998 499005 3861 0 3 0x82 nanoslp syz-executor 37884 303471 3861 0 3 0x82 nanoslp syz-executor 37850 465998 3861 0 3 0x82 nanoslp syz-executor 51200 360195 3861 0 3 0x82 wait syz-executor 45085 96723 3861 0 3 0x82 nanoslp syz-executor 35356 381145 3861 0 3 0x82 nanoslp syz-executor 14146 510067 3861 0 3 0x82 nanoslp syz-executor 21141 177663 3861 0 2 0x2 syz-executor 3861 24136 78197 0 3 0x82 kqread syz-executor 78197 215280 97167 0 3 0x10008a sigsusp ksh 97167 33516 43441 0 3 0x98 kqread sshd-session 43441 384953 75037 0 3 0x92 kqread sshd-session 33711 270814 1 0 3 0x100083 ttyin getty 75037 82651 1 0 3 0x88 kqread sshd 3242 90552 38461 73 3 0x1100090 kqread syslogd 38461 202655 1 0 3 0x100082 sbwait syslogd 12557 328934 1 0 3 0x100080 kqread resolvd 46785 102124 12235 77 3 0x100092 kqread dhcpleased 81316 119255 12235 77 3 0x100092 kqread dhcpleased 12235 449400 1 0 3 0x80 kqread dhcpleased 10804 302871 0 0 3 0x14200 bored smr 6029 251201 0 0 2 0x14200 zerothread 66002 78950 0 0 3 0x14200 aiodoned aiodoned 2334 26845 0 0 3 0x14200 syncer update 34089 262835 0 0 3 0x14200 cleaner cleaner 35077 511620 0 0 3 0x14200 reaper reaper 63922 361687 0 0 3 0x14200 pgdaemon pagedaemon 84132 203545 0 0 3 0x14200 bored viomb 71862 243645 0 0 3 0x40014200 acpi0 acpi0 51254 495229 0 0 3 0x14200 bored softnet7 47594 145372 0 0 3 0x14200 bored softnet6 70131 296588 0 0 3 0x14200 bored softnet5 99437 436676 0 0 3 0x14200 bored softnet4 92528 306314 0 0 3 0x14200 bored softnet3 45082 340674 0 0 3 0x14200 bored softnet2 82127 155929 0 0 3 0x14200 bored softnet1 87258 360446 0 0 3 0x14200 bored softnet0 99992 308307 0 0 3 0x14200 bored systqmp 43296 352656 0 0 3 0x14200 bored systq 68757 242617 0 0 3 0x40014200 tmoslp softclock 47333 327495 0 0 3 0x40014200 idle0 1 293565 0 0 3 0x82 wait init 0 0 -1 0 3 0x10010200 scheduler swapper ddb> show all locks No such command ddb> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 10188 11049K 11444K 166960K 11728 0 pcb 18 12K 12K 166960K 59 0 rtable 204 7K 8K 166960K 440 0 pf 30 12K 19K 166960K 51 0 ifaddr 41 7K 7K 166960K 51 0 ifgroup 50 2K 2K 166960K 60 0 sysctl 4 1K 9K 166960K 9 0 counters 32 17K 17K 166960K 39 0 ioctlops 0 0K 4K 166960K 76 0 iov 0 0K 16K 166960K 18 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1337 84K 85K 166960K 1592 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 2 1K 5K 166960K 6 0 VM map 2 1K 1K 166960K 2 0 sem 9 0K 0K 166960K 14 0 dirhash 12 2K 2K 166960K 15 0 ACPI 1692 195K 286K 166960K 12470 0 file desc 18 65K 236K 166960K 390 0 sigio 0 0K 0K 166960K 12 0 proc 60 59K 100K 166960K 496 0 subproc 72 4K 4K 166960K 72 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 ip_moptions 0 0K 0K 166960K 25 0 in_multi 96 7K 7K 166960K 104 0 ether_multi 1 0K 0K 166960K 2 0 mrt 0 0K 0K 166960K 2 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 103 466K 466K 166960K 103 0 exec 0 0K 1K 166960K 466 0 fusefs mount 1 32K 32K 166960K 1 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 231 151K 169K 166960K 5016 0 UVM aobj 8 2K 2K 166960K 8 0 pinsyscall 39 78K 92K 166960K 1409 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 ip6_options 0 0K 0K 166960K 12 0 NDP 11 0K 1K 166960K 32 0 temp 43 8667K 8732K 166960K 13243 0 kqueue 13 20K 26K 166960K 65 0 SYN cache 2 16K 16K 166960K 2 0 ddb> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle rtpcb 120 53 0 50 1 0 1 1 0 8 0 rtentry 136 166 0 80 4 0 4 4 0 8 0 unpcb 144 150 0 135 1 0 1 1 0 8 0 syncache 336 3 0 3 1 1 0 1 0 8 0 tcpcb 736 64 0 60 1 0 1 1 0 8 0 arp 88 11 0 0 1 0 1 1 0 8 0 inpcb 328 318 0 309 8 1 7 7 0 8 6 nd6 104 19 0 1 1 0 1 1 0 8 0 pkpcb 40 2 0 2 2 1 1 1 0 8 1 kcovpl 48 8 0 0 1 0 1 1 0 8 0 mppekey 1024 1 0 1 1 1 0 1 0 8 0 ppxss 1072 7 0 7 1 1 0 1 0 8 0 pfanchor 1288 1 0 0 1 0 1 1 0 8 0 pfrule 1344 1 0 1 1 1 0 1 0 8 0 rttmr 136 1 0 1 1 1 0 1 0 8 0 art_heap8 4096 2 0 0 2 0 2 2 0 8 0 art_heap4 256 484 0 87 29 0 29 29 0 8 2 art_table 40 486 0 87 5 0 5 5 0 8 0 art_node 32 100 0 24 1 0 1 1 0 8 0 sysvmsgpl 40 2 0 2 1 0 1 1 0 8 1 semapl 112 9 0 3 1 0 1 1 0 8 0 shmpl 112 5 0 0 1 0 1 1 0 8 0 dirhash 1024 19 0 2 3 0 3 3 0 8 0 dino2pl 256 2011 0 514 95 0 95 95 0 8 0 ffsino 256 2011 0 514 95 0 95 95 0 8 0 nchpl 144 2529 0 852 63 0 63 63 0 8 0 rtmask 32 1 0 1 1 1 0 1 0 8 0 uvmvnodes 80 2248 0 0 46 0 46 46 0 8 0 vnodes 216 2248 0 0 125 0 125 125 0 8 0 namei 1024 7913 0 7910 4 2 2 2 0 8 1 kstatmem 264 32 0 10 2 0 2 2 0 8 0 scsiplug 72 2 0 2 1 0 1 1 0 8 1 scxspl 216 8803 0 8803 9 7 2 8 1 8 2 plimitpl 152 54 0 38 1 0 1 1 0 8 0 sigapl 424 683 0 632 9 3 6 9 0 8 0 knotepl 120 12897 0 12850 10 8 2 10 0 8 0 kqueuepl 184 218 0 209 4 0 4 4 0 8 3 pipepl 304 122 0 95 3 0 3 3 0 8 0 fdescpl 448 641 0 611 5 1 4 5 0 8 0 filepl 120 2853 0 2643 11 0 11 11 0 8 4 lockfpl 104 282 0 279 2 0 2 2 0 8 1 lockfspl 48 66 0 63 1 0 1 1 0 8 0 sessionpl 144 21 0 13 1 0 1 1 0 8 0 pgrppl 48 36 0 20 1 0 1 1 0 8 0 ucredpl 104 290 0 278 1 0 1 1 0 8 0 zombiepl 144 739 0 738 1 0 1 1 0 8 0 processpl 1168 683 0 632 6 2 4 6 0 8 0 procpl 656 1123 0 1059 8 1 7 8 0 8 1 sosppl 168 2 0 2 2 1 1 1 0 8 1 sockpl 552 529 0 501 8 0 8 8 0 8 5 mcl64k 65536 19 0 19 2 1 1 1 0 8 1 mcl16k 16384 2 0 2 1 0 1 1 0 8 1 mcl9k 9216 1 0 1 1 0 1 1 0 8 1 mcl8k 8192 10 0 10 2 1 1 1 0 8 1 mcl4k 4096 2755 0 2705 14 6 8 13 0 8 1 mcl2k 2048 541 0 539 1 0 1 1 0 8 0 mtagpl 96 10 0 4 1 0 1 1 0 8 0 mbufpl 256 6325 0 6167 12 1 11 11 0 8 0 bufpl 280 3291 0 117 227 0 227 227 0 8 0 anonpl 24 134970 0 131799 72 24 48 71 0 187 22 amapchunkpl 152 16033 0 15538 41 13 28 35 0 158 7 amappl16 200 2886 0 2858 29 17 12 28 0 8 8 amappl15 192 8 0 8 1 1 0 1 0 8 0 amappl14 184 105 0 94 1 0 1 1 0 8 0 amappl13 176 42 0 42 1 1 0 1 0 8 0 amappl12 168 1257 0 1227 3 1 2 3 0 8 0 amappl11 160 48 0 38 1 0 1 1 0 8 0 amappl10 152 4 0 4 1 1 0 1 0 8 0 amappl9 144 243 0 243 1 1 0 1 0 8 0 amappl8 136 22 0 21 1 0 1 1 0 8 0 amappl7 128 101 0 91 1 0 1 1 0 8 0 amappl6 120 190 0 187 1 0 1 1 0 8 0 amappl5 112 141 0 135 1 0 1 1 0 8 0 amappl4 104 268 0 253 1 0 1 1 0 8 0 amappl3 96 2886 0 2776 4 0 4 4 0 8 0 amappl2 88 610 0 555 2 0 2 2 0 8 0 amappl1 80 8805 0 8257 13 1 12 13 0 8 0 amappl 88 4337 0 4169 5 0 5 5 0 92 0 dma65536 65536 1 0 1 1 1 0 1 0 8 0 dma32768 32768 1 0 1 1 1 0 1 0 8 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 253 0 253 1 1 0 1 0 8 0 dma64 64 8 0 8 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 7 0 0 1 0 1 1 0 8 0 uaddrrnd 24 641 0 611 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 641 0 611 1 0 1 1 0 8 0 vmmpekpl 168 6628 0 6604 2 0 2 2 0 8 0 vmmpepl 168 46997 0 45142 107 12 95 105 0 357 8 vmsppl 368 640 0 611 4 1 3 4 0 8 0 rwobjpl 40 17746 0 14641 34 1 33 33 0 8 1 pdppl 4096 1288 0 1222 94 28 66 78 0 8 0 pvpl 32 307049 0 298655 157 31 126 146 0 265 43 pmappl 216 640 0 611 2 0 2 2 0 8 0 extentpl 40 45 0 27 1 0 1 1 0 8 0 phpool 112 377 0 49 10 0 10 10 0 8 0 ddb> machine ddbcpu 0 No such command ddb> trace sys_semop(ffff80003b14b4a8,ffff80003c9630c0,ffff80003c963010) at sys_semop+0x45b sys/kern/sysv_sem.c:615 syscall(ffff80003c9630c0) at syscall+0x97e mi_syscall sys/sys/syscall_mi.h:-1 [inline] syscall(ffff80003c9630c0) at syscall+0x97e sys/arch/amd64/amd64/trap.c:748 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xa583ea4eac0, count: -3 ddb> machine ddbcpu 1 No such command ddb> trace sys_semop(ffff80003b14b4a8,ffff80003c9630c0,ffff80003c963010) at sys_semop+0x45b sys/kern/sysv_sem.c:615 syscall(ffff80003c9630c0) at syscall+0x97e mi_syscall sys/sys/syscall_mi.h:-1 [inline] syscall(ffff80003c9630c0) at syscall+0x97e sys/arch/amd64/amd64/trap.c:748 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xa583ea4eac0, count: -3