kernel: protection fault trap, code=0 Stopped at malloc+0x855: movq 0x8(%rbx),%r14 ddb> ddb> set $lines = 0 ddb> set $maxwidth = 0 ddb> show panic the kernel did not panic ddb> show kasan No such command ddb> trace malloc(10,7f,1) at malloc+0x855 sys/kern/kern_malloc.c:294 ktrsyscall(ffff80002a779c98,67,8,ffff80002a80ff20) at ktrsyscall+0x199 sys/kern/kern_ktrace.c:174 syscall(ffff80002a80ff20) at syscall+0x2bc mi_syscall sys/sys/syscall_mi.h:154 [inline] syscall(ffff80002a80ff20) at syscall+0x2bc sys/arch/amd64/amd64/trap.c:783 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7e1bcefd2970, count: -4 ddb> show registers rdi 0xb4922ad454810310 rsi 0xffffffffffffffff rbp 0xffff80002a80fd70 rbx 0x4b6dd52bab7efcef rdx 0 rcx 0x4 rax 0xffff80002a779c98 r8 0 r9 0 r10 0 r11 0x8e2723398afbc0d r12 0xffffffffffffffff r13 0xffffffff83a89be0 kmemstats+0x1fc0 r14 0xa30c333 __kernel_phys_end+0x670c333 r15 0xb4922ad454810310 rip 0xffffffff82944bc5 malloc+0x855 cs 0x8 rflags 0x10202 __ALIGN_SIZE+0xf202 rsp 0xffff80002a80fcb0 ss 0x10 malloc+0x855: movq 0x8(%rbx),%r14 ddb> show proc PROC (syz-executor) tid=409906 pid=15794 tcnt=1 stat=onproc flags process=10000002 proc=1 runpri=32, usrpri=50, slppri=32, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0 forw=0xffffffffffffffff, list=0xffff80002a7794d0,0xffff80002a7362b0 process=0xffff80002a79db10 user=0xffff80002a80a000, vmspace=0xfffff8006fdba8a8 estcpu=36, cpticks=5, pctcpu=0.2, user=0, sys=4, intr=1 ddb> ps PID TID PPID UID S FLAGS WAIT COMMAND 67664 267687 28403 0 2 0 syz-executor 67664 132133 28403 0 3 0x4000080 sbwait syz-executor 7791 145517 99049 0 3 0x1000080 nanoslp syz-executor 7791 10656 99049 0 3 0x5000080 netcon syz-executor 7791 32962 99049 0 3 0x5000080 fsleep syz-executor 47572 185437 88354 0 3 0x80 nanoslp syz-executor 47572 200306 88354 0 3 0x4000080 msgwait syz-executor 47572 337840 88354 0 3 0x4000080 fsleep syz-executor 31649 305591 4860 0 3 0x80 nanoslp syz-executor 31649 222725 4860 0 3 0x4000080 msgwait syz-executor 31649 35865 4860 0 3 0x4000080 fsleep syz-executor 87706 92384 11767 0 3 0x80 nanoslp syz-executor 87706 335136 11767 0 3 0x4000080 ttyout syz-executor 76554 463743 98699 0 3 0x81 nanoslp syz-executor 76554 500571 98699 0 3 0x4000081 lockf syz-executor 76554 472509 98699 0 3 0x4000081 fsleep syz-executor 76554 360412 98699 0 3 0x4000081 fsleep syz-executor 77130 413660 1 0 3 0x100083 ttyin getty 11554 35123 61027 0 3 0x82 wait syz-executor 88354 330937 61027 0 3 0x82 nanoslp syz-executor 28403 249625 61027 0 3 0x82 nanoslp syz-executor 4860 33114 61027 0 3 0x82 nanoslp syz-executor 99049 302079 61027 0 3 0x82 nanoslp syz-executor *15794 409906 61027 0 7 0x10000003 syz-executor 98699 51020 61027 0 3 0x82 nanoslp syz-executor 11767 42540 61027 0 3 0x82 nanoslp syz-executor 61027 86589 1 0 3 0x82 kqread syz-executor 38396 437509 84571 0 3 0x98 kqread sshd-session 84571 253162 1 0 3 0x92 kqread sshd-session 29507 466869 5356 73 3 0x1100090 kqread syslogd 5356 261285 1 0 3 0x100082 sbwait syslogd 63147 83240 0 0 3 0x14200 bored smr 48984 337649 0 0 2 0x14200 zerothread 69906 220028 0 0 3 0x14200 aiodoned aiodoned 8065 296781 0 0 3 0x14200 syncer update 2873 460703 0 0 3 0x14200 cleaner cleaner 37017 362773 0 0 3 0x14200 reaper reaper 99490 285707 0 0 3 0x14200 pgdaemon pagedaemon 54935 428155 0 0 3 0x14200 bored viomb 2965 228187 0 0 3 0x40014200 acpi0 acpi0 99486 104370 0 0 3 0x14200 bored softnet0 40198 488381 0 0 3 0x14200 bored systqmp 86130 242224 0 0 3 0x14200 bored systq 50298 449998 0 0 3 0x40014200 tmoslp softclock 10075 252514 0 0 3 0x40014200 idle0 1 180165 0 0 3 0x82 wait init 0 0 -1 0 3 0x10200 scheduler swapper ddb> show all locks No such command ddb> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 11052 12102K 12233K 166960K 12270 0 pcb 20 13K 14K 166960K 97 0 rtable 259 8K 8K 166960K 397 0 pf 30 12K 13K 166960K 39 0 ifaddr 43 7K 7K 166960K 48 0 ifgroup 50 2K 2K 166960K 56 0 sysctl 3 1K 9K 166960K 7 0 counters 33 17K 18K 166960K 37 0 ioctlops 0 0K 4K 166960K 86 0 iov 0 0K 16K 166960K 9 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1289 81K 82K 166960K 1459 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 2 1K 5K 166960K 6 0 VM map 2 1K 1K 166960K 2 0 sem 9 1K 1K 166960K 15 0 dirhash 12 2K 2K 166960K 12 0 ACPI 1734 201K 291K 166960K 11964 0 file desc 17 61K 93K 166960K 308 0 proc 48 42K 83K 166960K 524 0 subproc 72 4K 4K 166960K 72 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 ip_moptions 0 0K 0K 166960K 16 0 in_multi 99 7K 7K 166960K 106 0 ether_multi 1 0K 0K 166960K 2 0 mrt 0 0K 0K 166960K 9 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 217 970K 970K 166960K 217 0 exec 0 0K 1K 166960K 379 0 fusefs mount 1 32K 32K 166960K 1 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 191 109K 167K 166960K 4439 0 UVM aobj 6 2K 2K 166960K 7 0 pinsyscall 27 54K 94K 166960K 1412 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 ip6_options 0 0K 0K 166960K 5 0 NDP 11 0K 2K 166960K 30 0 temp 76 9120K 9184K 166960K 18769 0 kqueue 8 13K 25K 166960K 66 0 SYN cache 2 16K 16K 166960K 2 0 ddb> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle rtpcb 120 46 0 45 2 1 1 1 0 8 0 rtentry 136 121 0 5 4 0 4 4 0 8 0 unpcb 144 89 0 80 1 0 1 1 0 8 0 syncache 336 4 0 4 1 1 0 1 0 8 0 tcpcb 736 36 0 30 1 0 1 1 0 8 0 arp 96 21 0 1 1 0 1 1 0 8 0 ipq 40 1 0 0 1 0 1 1 0 8 0 ipqe 40 1 0 0 1 0 1 1 0 8 0 inpcb 328 210 0 194 5 3 2 4 0 8 0 ip6q 72 1 0 0 1 0 1 1 0 8 0 ip6af 40 1 0 0 1 0 1 1 0 8 0 nd6 112 25 0 0 1 0 1 1 0 8 0 pkpcb 40 1 0 1 1 1 0 1 0 8 0 kcovpl 48 8 0 0 1 0 1 1 0 8 0 ppxss 1072 4 0 4 1 1 0 1 0 8 0 pfrule 1360 1 0 1 1 1 0 1 0 8 0 art_heap8 4096 2 0 0 2 0 2 2 0 8 0 art_heap4 256 465 0 2 29 0 29 29 0 8 0 art_table 40 467 0 2 5 0 5 5 0 8 0 art_node 32 120 0 15 1 0 1 1 0 8 0 sysvmsgpl 40 9 0 9 2 1 1 1 0 8 1 semupl 112 3 0 3 1 1 0 1 0 8 0 semapl 72 7 0 0 1 0 1 1 0 8 0 shmpl 112 4 0 1 1 0 1 1 0 8 0 dirhash 1024 17 0 0 3 0 3 3 0 8 0 dino2pl 256 1869 0 402 92 0 92 92 0 8 0 ffsino 256 1869 0 402 92 0 92 92 0 8 0 nchpl 144 2301 0 600 64 0 64 64 0 8 0 vnodes 216 2001 0 0 112 0 112 112 0 8 0 namei 1024 7136 0 7136 2 1 1 2 0 8 1 kstatmem 264 29 0 6 2 0 2 2 0 8 0 scsiplug 72 1 0 1 1 1 0 1 0 8 0 scxspl 216 11493 0 11493 8 6 2 8 1 8 2 plimitpl 152 51 0 36 1 0 1 1 0 8 0 sigapl 424 604 0 567 6 1 5 6 0 8 0 knotepl 120 17652 0 17621 16 7 9 9 0 8 6 kqueuepl 184 66 0 60 1 0 1 1 0 8 0 pipepl 304 127 0 100 3 0 3 3 0 8 0 fdescpl 448 591 0 568 5 1 4 5 0 8 0 filepl 120 2452 0 2245 9 1 8 9 0 8 0 lockfpl 104 35 0 33 1 0 1 1 0 8 0 lockfspl 48 17 0 16 1 0 1 1 0 8 0 sessionpl 144 30 0 24 1 0 1 1 0 8 0 pgrppl 48 39 0 25 1 0 1 1 0 8 0 ucredpl 104 356 0 348 1 0 1 1 0 8 0 zombiepl 144 569 0 567 1 0 1 1 0 8 0 processpl 1152 604 0 567 4 0 4 4 0 8 0 procpl 664 866 0 818 6 1 5 6 0 8 0 sockpl 552 386 0 360 5 3 2 5 0 8 0 mcl64k 65536 15 0 15 1 0 1 1 0 8 1 mcl16k 16384 3 0 3 1 1 0 1 0 8 0 mcl12k 12288 1 0 1 1 1 0 1 0 8 0 mcl8k 8192 7 0 7 2 1 1 1 0 8 1 mcl4k 4096 2755 0 2705 16 8 8 15 0 8 0 mcl2k 2048 215 0 214 1 0 1 1 0 8 0 mextrefs 64 106 0 106 2 1 1 1 0 8 1 mtagpl 96 4 0 4 1 1 0 1 0 8 0 mbufpl 256 5827 0 5661 12 0 12 12 0 8 0 bufpl 272 5107 0 102 334 0 334 334 0 8 0 anonpl 24 105211 0 102719 55 15 40 53 0 187 8 amapchunkpl 152 13950 0 13501 33 2 31 31 0 158 10 amappl16 200 1676 0 1655 23 9 14 15 0 8 10 amappl15 192 3 0 3 1 1 0 1 0 8 0 amappl14 184 413 0 413 1 1 0 1 0 8 0 amappl13 176 118 0 113 1 0 1 1 0 8 0 amappl12 168 829 0 807 2 0 2 2 0 8 0 amappl11 160 9 0 8 2 1 1 1 0 8 0 amappl10 152 57 0 53 1 0 1 1 0 8 0 amappl9 144 268 0 268 1 1 0 1 0 8 0 amappl8 136 94 0 93 1 0 1 1 0 8 0 amappl7 128 174 0 168 1 0 1 1 0 8 0 amappl6 120 147 0 147 1 1 0 1 0 8 0 amappl5 112 89 0 85 1 0 1 1 0 8 0 amappl4 104 262 0 252 1 0 1 1 0 8 0 amappl3 96 2517 0 2421 3 0 3 3 0 8 0 amappl2 88 518 0 488 2 0 2 2 0 8 0 amappl1 80 10813 0 10471 13 3 10 13 0 8 0 amappl 88 3686 0 3531 4 0 4 4 0 92 0 uvmvnodes 80 105 0 0 3 0 3 3 0 8 0 dma32768 32768 1 0 1 1 0 1 1 0 8 1 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 7 0 7 1 1 0 1 0 8 0 dma128 128 253 0 253 1 1 0 1 0 8 0 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 19 0 18 1 0 1 1 0 8 0 aobjpl 72 6 0 1 1 0 1 1 0 8 0 uaddrrnd 24 591 0 568 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 591 0 568 1 0 1 1 0 8 0 vmmpekpl 168 6598 0 6573 2 0 2 2 0 8 0 vmmpepl 168 45781 0 44458 82 6 76 82 0 357 3 vmsppl 368 590 0 568 4 1 3 4 0 8 0 rwobjpl 40 15701 0 15030 11 0 11 11 0 8 0 pdppl 4096 1188 0 1136 94 40 54 80 0 8 2 pvpl 32 272263 0 264840 120 20 100 119 0 265 12 pmappl 216 590 0 568 3 1 2 3 0 8 0 extentpl 40 46 0 28 1 0 1 1 0 8 0 phpool 112 697 0 57 19 0 19 19 0 8 0 ddb> machine ddbcpu 0 No such command ddb> trace malloc(10,7f,1) at malloc+0x855 sys/kern/kern_malloc.c:294 ktrsyscall(ffff80002a779c98,67,8,ffff80002a80ff20) at ktrsyscall+0x199 sys/kern/kern_ktrace.c:174 syscall(ffff80002a80ff20) at syscall+0x2bc mi_syscall sys/sys/syscall_mi.h:154 [inline] syscall(ffff80002a80ff20) at syscall+0x2bc sys/arch/amd64/amd64/trap.c:783 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7e1bcefd2970, count: -4 ddb> machine ddbcpu 1 No such command ddb> trace malloc(10,7f,1) at malloc+0x855 sys/kern/kern_malloc.c:294 ktrsyscall(ffff80002a779c98,67,8,ffff80002a80ff20) at ktrsyscall+0x199 sys/kern/kern_ktrace.c:174 syscall(ffff80002a80ff20) at syscall+0x2bc mi_syscall sys/sys/syscall_mi.h:154 [inline] syscall(ffff80002a80ff20) at syscall+0x2bc sys/arch/amd64/amd64/trap.c:783 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7e1bcefd2970, count: -4