kernel: protection fault trap, code=0 Stopped at nd6_timer+0x67: movq 0x48(%r13),%r12 ddb{0}> ddb{0}> set $lines = 0 ddb{0}> set $maxwidth = 0 ddb{0}> show panic the kernel did not panic ddb{0}> trace nd6_timer(0) at nd6_timer+0x67 sys/netinet6/nd6.c:278 timeout_run(ffffffff8353b680) at timeout_run+0x118 softclock_thread(ffff8000fffff440) at softclock_thread+0x163 sys/kern/kern_timeout.c:814 end trace frame: 0x0, count: -3 ddb{0}> show registers rdi 0 rsi 0x1 rbp 0xffff800029f9ba70 rbx 0x5eca9f738644cef8 rdx 0 rcx 0xffff8000fffff440 rax 0xffffffff8349bff0 cpu_info_full_primary+0x1ff0 r8 0x2 r9 0 r10 0xe619c2d47c171488 r11 0x1360dd796451dd72 r12 0x1 r13 0xdeadbeefdeadbeef r14 0xbc r15 0x1523c acpi_pdirpa+0x10ad rip 0xffffffff817f70b7 nd6_timer+0x67 cs 0x8 rflags 0x10246 __ALIGN_SIZE+0xf246 rsp 0xffff800029f9ba30 ss 0 nd6_timer+0x67: movq 0x48(%r13),%r12 ddb{0}> show proc PROC (softclock) tid=267749 pid=8225 tcnt=1 stat=onproc flags process=14000 proc=40000200 runpri=0, usrpri=50, slppri=0, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0 forw=0xffffffffffffffff, list=0xffff8000fffff6c8,0xffff8000ffffef40 process=0xffff800029f8f180 user=0xffff800029f96000, vmspace=0xffffffff835412e8 estcpu=0, cpticks=1, pctcpu=0.53, user=0, sys=66, intr=319 ddb{0}> ps PID TID PPID UID S FLAGS WAIT COMMAND 47592 148211 27131 0 2 0x8000000 syz-executor 47592 335213 27131 0 3 0xc000080 kqsel syz-executor 8038 320554 60997 0 2 0x8000000 syz-executor 8038 382634 60997 0 3 0xc000080 fsleep syz-executor 69430 320971 15953 0 2 0x8000480 syz-executor 69430 386607 15953 0 3 0xc000080 kqread syz-executor 69430 272016 15953 0 3 0xc000080 fsleep syz-executor 49738 179494 34844 0 2 0x8000480 syz-executor 49738 110051 34844 0 3 0xc000080 netacc syz-executor 49738 374680 34844 0 3 0xc000080 fsleep syz-executor 15953 456493 21113 0 2 0x8000482 syz-executor 34844 362435 21113 0 2 0x8000482 syz-executor 60997 118703 21113 0 2 0x8000482 syz-executor 27131 211290 21113 0 2 0x8000002 syz-executor 52821 435638 21113 0 2 0x8000002 syz-executor 18537 46329 21113 0 2 0x8000482 syz-executor 41101 239207 21113 0 2 0x8000482 syz-executor 58983 412146 21113 0 3 0x8000082 piperd syz-executor 92660 392813 0 0 3 0x14200 acct acct 27884 452129 1 0 3 0x18100083 ttyin getty 45636 462646 0 0 3 0x14200 bored sosplice 21113 85908 96834 0 2 0x8000002 syz-executor 96834 155637 89652 0 3 0x810008a sigsusp ksh 89652 183679 51788 0 3 0x18000098 kqread sshd-session 51788 125837 73346 0 3 0x18000092 kqread sshd-session 73346 318627 1 0 3 0x18000088 kqread sshd 46719 457858 92722 74 7 0x19100092 pflogd 92722 348376 1 0 3 0x18000080 sbwait pflogd 86826 107726 2884 73 2 0x19100010 syslogd 2884 330491 1 0 3 0x18100082 sbwait syslogd 29914 70752 1 0 3 0x18100080 kqread resolvd 7247 476419 78221 77 3 0x18100092 kqread dhcpleased 36626 153998 78221 77 3 0x18100092 kqread dhcpleased 78221 35289 1 0 3 0x18000080 kqread dhcpleased 32373 165511 0 0 2 0x14200 smr 53696 437815 0 0 3 0x14200 pgzero zerothread 52921 290346 0 0 3 0x14200 aiodoned aiodoned 99185 59702 0 0 2 0x14600 update 52510 472799 0 0 3 0x14200 cleaner cleaner 83183 500537 0 0 2 0x14200 reaper 1471 221615 0 0 3 0x14200 pgdaemon pagedaemon 46951 413907 0 0 3 0x14200 bored viomb 73534 328652 0 0 3 0x40014200 acpi0 acpi0 85716 4110 0 0 3 0x40014200 idle1 97005 514492 0 0 3 0x14200 bored softnet3 22868 278664 0 0 3 0x14200 bored softnet2 28244 491756 0 0 3 0x14200 bored softnet1 98313 356774 0 0 2 0x14200 softnet0 57431 73426 0 0 2 0x14200 systqmp 90470 364879 0 0 3 0x14200 bored systq 13822 478185 0 0 2 0x14200 softclockmp * 8225 267749 0 0 7 0x40014200 softclock 84057 8251 0 0 3 0x40014200 idle0 1 184819 0 0 3 0x8000082 wait init 0 0 -1 0 3 0x10200 scheduler swapper ddb{0}> show all locks Process 52821 (syz-executor) thread 0xffff800029fe6548 (435638) exclusive rrwlock inode r = 0 (0xfffffd80707c63d0) #0 witness_lock+0x5b8 stacktrace_save sys/sys/stacktrace.h:37 [inline] #0 witness_lock+0x5b8 sys/kern/subr_witness.c:1151 #1 rw_enter+0x41b sys/kern/kern_rwlock.c:309 #2 rrw_enter+0xbe sys/kern/kern_rwlock.c:464 #3 VOP_LOCK+0xa6 sys/kern/vfs_vops.c:524 #4 vn_lock+0xa4 sys/kern/vfs_vnops.c:564 #5 vget+0x2bd sys/kern/vfs_subr.c:676 #6 ufs_ihashget+0x171 sys/ufs/ufs/ufs_ihash.c:95 #7 ffs_vget+0x8c sys/ufs/ffs/ffs_vfsops.c:1201 #8 ufs_lookup+0x19f8 sys/ufs/ufs/ufs_lookup.c:478 #9 VOP_LOOKUP+0x6e sys/kern/vfs_vops.c:85 #10 vfs_lookup+0x8fa sys/kern/vfs_lookup.c:566 #11 namei+0x7aa sys/kern/vfs_lookup.c:250 #12 dounlinkat+0xc1 sys/kern/vfs_syscalls.c:1852 #13 syscall+0xaf8 mi_syscall sys/sys/syscall_mi.h:179 [inline] #13 syscall+0xaf8 sys/arch/amd64/amd64/trap.c:577 #14 Xsyscall+0x128 exclusive rrwlock inode r = 0 (0xfffffd805ab002b8) #0 witness_lock+0x5b8 stacktrace_save sys/sys/stacktrace.h:37 [inline] #0 witness_lock+0x5b8 sys/kern/subr_witness.c:1151 #1 rw_enter+0x41b sys/kern/kern_rwlock.c:309 #2 rrw_enter+0xbe sys/kern/kern_rwlock.c:464 #3 VOP_LOCK+0xa6 sys/kern/vfs_vops.c:524 #4 vn_lock+0xa4 sys/kern/vfs_vnops.c:564 #5 vfs_lookup+0x109 sys/kern/vfs_lookup.c:418 #6 namei+0x7aa sys/kern/vfs_lookup.c:250 #7 dounlinkat+0xc1 sys/kern/vfs_syscalls.c:1852 #8 syscall+0xaf8 mi_syscall sys/sys/syscall_mi.h:179 [inline] #8 syscall+0xaf8 sys/arch/amd64/amd64/trap.c:577 #9 Xsyscall+0x128 Process 86826 (syslogd) thread 0xffff8000ffffd960 (107726) exclusive rrwlock inode r = 0 (0xfffffd806e49a4e0) #0 witness_lock+0x5b8 stacktrace_save sys/sys/stacktrace.h:37 [inline] #0 witness_lock+0x5b8 sys/kern/subr_witness.c:1151 #1 rw_enter+0x41b sys/kern/kern_rwlock.c:309 #2 rrw_enter+0xbe sys/kern/kern_rwlock.c:464 #3 VOP_LOCK+0xa6 sys/kern/vfs_vops.c:524 #4 vn_lock+0xa4 sys/kern/vfs_vnops.c:564 #5 sys_fsync+0x152 sys/kern/vfs_syscalls.c:2927 #6 syscall+0xaf8 mi_syscall sys/sys/syscall_mi.h:179 [inline] #6 syscall+0xaf8 sys/arch/amd64/amd64/trap.c:577 #7 Xsyscall+0x128 Process 83183 (reaper) thread 0xffff800029fd91c0 (500537) exclusive rwlock vmmaplk r = 0 (0xfffffd8073cb7470) #0 witness_lock+0x5b8 stacktrace_save sys/sys/stacktrace.h:37 [inline] #0 witness_lock+0x5b8 sys/kern/subr_witness.c:1151 #1 rw_enter+0x41b sys/kern/kern_rwlock.c:309 #2 vm_map_lock_ln+0x143 sys/uvm/uvm_map.c:5277 #3 uvm_map_teardown+0x104 sys/uvm/uvm_map.c:2488 #4 uvmspace_free+0xe8 sys/uvm/uvm_map.c:3447 #5 reaper+0x25b sys/kern/kern_exit.c:480 #6 proc_trampoline+0x10 Process 8225 (softclock) thread 0xffff8000fffff440 (267749) exclusive rwlock netlock r = 0 (0xffffffff8344e7d0) #0 witness_lock+0x5b8 stacktrace_save sys/sys/stacktrace.h:37 [inline] #0 witness_lock+0x5b8 sys/kern/subr_witness.c:1151 #1 nd6_timer+0x2e sys/netinet6/nd6.c:271 #2 timeout_run+0x118 #3 softclock_thread+0x163 sys/kern/kern_timeout.c:814 #4 proc_trampoline+0x10 shared rwlock timeout r = 0 (0xffffffff834cca20) #0 witness_lock+0x5b8 stacktrace_save sys/sys/stacktrace.h:37 [inline] #0 witness_lock+0x5b8 sys/kern/subr_witness.c:1151 #1 timeout_run+0xf1 sys/kern/kern_timeout.c:662 #2 softclock_thread+0x163 sys/kern/kern_timeout.c:814 #3 proc_trampoline+0x10 exclusive kernel_lock &kernel_lock r = 0 (0xffffffff8357c390) #0 witness_lock+0x5b8 stacktrace_save sys/sys/stacktrace.h:37 [inline] #0 witness_lock+0x5b8 sys/kern/subr_witness.c:1151 #1 __mp_acquire_count+0x58 #2 mi_switch+0x658 sys/kern/sched_bsd.c:460 #3 sleep_finish+0x229 sys/kern/kern_synch.c:416 #4 msleep+0x13b sys/kern/kern_synch.c:249 #5 softclock_thread+0x11f sys/kern/kern_timeout.c:810 #6 proc_trampoline+0x10 ddb{0}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 10246 10438K 10760K 166960K 14145 0 pcb 19 16K 17K 166960K 426 0 rtable 231 16K 16K 166960K 2001 0 pf 39 10K 13K 166960K 220 0 ifaddr 47 16K 16K 166960K 263 0 ifgroup 63 2K 2K 166960K 291 0 sysctl 4 1K 3K 166960K 5 0 counters 68 36K 37K 166960K 188 0 ioctlops 0 0K 4K 166960K 1696 0 iov 0 0K 30K 166960K 133 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1494 94K 94K 166960K 3629 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 2 1K 9K 166960K 38 0 VM map 2 1K 1K 166960K 2 0 sem 21 10K 10K 166960K 181 0 dirhash 12 2K 2K 166960K 33 0 ACPI 1697 195K 286K 166960K 12548 0 file desc 15 53K 97K 166960K 2082 0 sigio 0 0K 0K 166960K 28 0 proc 70 91K 152K 166960K 2003 0 subproc 104 6K 7K 166960K 741 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 ip_moptions 0 0K 0K 166960K 208 0 in_multi 99 7K 7K 166960K 671 0 ether_multi 1 0K 0K 166960K 8 0 mrt 1 0K 0K 166960K 4 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 217 970K 970K 166960K 217 0 exec 0 0K 1K 166960K 1227 0 pfkey data 0 0K 0K 166960K 4 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 237 75K 91K 166960K 18510 0 UVM aobj 50 2K 2K 166960K 50 0 pinsyscall 40 80K 104K 166960K 4430 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 ip6_options 0 0K 0K 166960K 96 0 NDP 14 0K 2K 166960K 186 0 temp 77 6818K 6928K 166960K 69605 0 kqueue 14 22K 32K 166960K 230 0 SYN cache 2 16K 16K 166960K 2 0 ddb{0}> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle plcache 128 24 0 0 1 0 1 1 0 8 0 rtpcb 120 473 0 470 4 3 1 3 0 8 0 rtentry 112 688 0 586 4 1 3 4 0 8 0 unpcb 144 1301 0 1284 10 9 1 4 0 8 0 syncache 336 12 0 12 5 5 0 1 0 8 0 tcpcb 808 648 0 641 21 15 6 8 0 8 5 arp 120 124 0 106 1 0 1 1 0 8 0 inpcb 336 2521 0 2507 29 23 6 10 0 8 4 nd6 136 182 0 157 1 0 1 1 0 8 0 pkpcb 40 20 0 20 6 6 0 1 0 8 0 kcovpl 48 57 0 49 1 0 1 1 0 8 0 ppxss 1168 7 0 7 4 4 0 1 0 8 0 pfstscr 40 6 0 6 3 2 1 1 0 8 1 pffrag 232 18 0 12 1 0 1 1 0 482 0 pffrnode 88 16 0 10 1 0 1 1 0 8 0 pffrent 40 29 0 22 1 0 1 1 0 8 0 pfosfp 40 1428 0 1005 5 0 5 5 0 8 0 pfosfpen 112 1428 0 714 21 0 21 21 0 8 0 pfrktable 1344 1 0 0 1 0 1 1 0 8 0 pfanchor 1288 1 0 1 1 1 0 1 0 8 0 pftag 88 3 0 1 2 1 1 1 0 8 0 pfqueue 264 1 0 1 1 0 1 1 0 8 1 pfstitem 24 152 0 123 1 0 1 1 0 8 0 pfstkey 128 158 0 129 2 0 2 2 0 8 0 pfstate 376 155 0 126 4 0 4 4 0 8 0 pfrule 1344 57 0 49 2 1 1 2 0 8 0 art_heap8 4096 1 0 0 1 0 1 1 0 8 0 art_heap4 256 2677 0 2231 34 5 29 29 0 8 1 art_table 32 2678 0 2231 4 0 4 4 0 8 0 art_node 16 681 0 590 1 0 1 1 0 8 0 sysvmsgpl 40 8 0 3 1 0 1 1 0 8 0 semapl 112 177 0 158 1 0 1 1 0 8 0 shmpl 112 47 0 0 2 0 2 2 0 8 0 dirhash 1024 31 0 14 3 0 3 3 0 8 0 dino2pl 256 4097 0 2494 101 0 101 101 0 8 0 ffsino 272 4097 0 2494 108 0 108 108 0 8 0 nchpl 144 6228 0 4477 66 0 66 66 0 8 0 uvmvnodes 80 5897 0 0 121 0 121 121 0 8 0 vnodes 216 5897 0 0 328 0 328 328 0 8 0 namei 1024 27876 0 27876 3 2 1 2 0 8 1 percpumem 16 108 0 60 1 0 1 1 0 8 0 vcpupl 3904 3 0 0 1 0 1 1 0 8 0 vmpool 696 5 0 2 1 0 1 1 0 8 0 kstatmem 264 148 0 120 4 2 2 3 0 8 0 scsiplug 72 9 0 9 6 6 0 1 0 8 0 scxspl 216 38582 0 38582 13 12 1 8 1 8 1 plimitpl 152 541 0 522 1 0 1 1 0 8 0 sigapl 424 2309 0 2259 11 4 7 9 0 8 0 futexpl 64 27651 0 27648 6 5 1 1 0 8 0 knotepl 120 619 0 0 17 0 17 17 0 8 0 kqueuepl 216 454 0 443 2 1 1 2 0 8 0 pipepl 320 471 0 443 5 2 3 5 0 8 0 fdescpl 496 2268 0 2239 7 2 5 6 0 8 0 filepl 152 15928 0 15672 36 24 12 17 0 8 1 lockfpl 104 584 0 581 2 1 1 2 0 8 0 lockfspl 48 200 0 197 1 0 1 1 0 8 0 sessionpl 144 72 0 63 1 0 1 1 0 8 0 pgrppl 48 144 0 127 1 0 1 1 0 8 0 ucredpl 104 2854 0 2839 1 0 1 1 0 8 0 zombiepl 144 2261 0 2259 1 0 1 1 0 8 0 processpl 1152 2309 0 2259 7 2 5 6 0 8 0 procpl 648 4503 0 4447 10 4 6 8 0 8 0 srpgc 96 16 0 16 5 5 0 1 0 8 0 sosppl 168 2 0 2 2 2 0 1 0 8 0 sockpl 664 4334 0 4300 31 23 8 12 0 8 4 mcl64k 65536 5 0 0 1 0 1 1 0 8 0 mcl16k 16384 4 0 0 1 0 1 1 0 8 0 mcl12k 12288 3 0 0 1 0 1 1 0 8 0 mcl9k 9216 2 0 0 1 0 1 1 0 8 0 mcl8k 8192 8 0 0 1 0 1 1 0 8 0 mcl4k 4096 4 0 0 1 0 1 1 0 8 0 mcl2k2 2112 2 0 0 1 0 1 1 0 8 0 mcl2k 2048 237 0 0 29 0 29 29 0 8 0 mtagpl 96 27 0 0 1 0 1 1 0 8 0 mbufpl 256 441 0 0 20 0 20 20 0 8 0 bufpl 280 9648 0 2764 492 0 492 492 0 8 0 anonpl 24 367825 0 359545 86 16 70 76 0 185 19 amapchunkpl 152 60468 0 59702 43 11 32 33 0 158 0 amappl16 200 7321 0 7301 49 46 3 15 0 8 1 amappl15 192 12 0 12 1 1 0 1 0 8 0 amappl14 184 216 0 204 1 0 1 1 0 8 0 amappl13 176 12 0 12 2 2 0 1 0 8 0 amappl12 168 3694 0 3664 4 2 2 3 0 8 0 amappl11 160 65 0 51 1 0 1 1 0 8 0 amappl10 152 17 0 17 1 1 0 1 0 8 0 amappl9 144 156 0 156 1 1 0 1 0 8 0 amappl8 136 23 0 21 1 0 1 1 0 8 0 amappl7 128 208 0 195 1 0 1 1 0 8 0 amappl6 120 656 0 653 1 0 1 1 0 8 0 amappl5 112 332 0 320 1 0 1 1 0 8 0 amappl4 104 472 0 453 1 0 1 1 0 8 0 amappl3 96 11780 0 11658 4 0 4 4 0 8 0 amappl2 88 1308 0 1243 2 0 2 2 0 8 0 amappl1 80 16587 0 16002 15 1 14 15 0 8 0 amappl 88 17703 0 17531 5 0 5 5 0 92 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 253 0 253 1 1 0 1 0 8 0 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 49 0 0 1 0 1 1 0 8 0 uaddrrnd 24 2273 0 2241 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 2273 0 2241 1 0 1 1 0 8 0 vmmpekpl 168 20136 0 20079 4 0 4 4 0 8 0 vmmpepl 168 143647 0 141806 119 28 91 97 0 357 6 vmsppl 440 2272 0 2240 7 2 5 5 0 8 0 rwobjpl 56 47471 0 40575 98 0 98 98 0 8 0 pdppl 4096 4553 0 4483 167 91 76 87 0 8 6 pvpl 32 31969 0 0 258 1 257 257 0 265 0 pmappl 248 2272 0 2240 3 0 3 3 0 8 0 extentpl 40 56 0 38 1 0 1 1 0 8 0 phpool 112 532 0 147 12 0 12 12 0 8 0 ddb{0}> machine ddbcpu 0 Invalid cpu 0 ddb{0}> trace nd6_timer(0) at nd6_timer+0x67 sys/netinet6/nd6.c:278 timeout_run(ffffffff8353b680) at timeout_run+0x118 softclock_thread(ffff8000fffff440) at softclock_thread+0x163 sys/kern/kern_timeout.c:814 end trace frame: 0x0, count: -3 ddb{0}> machine ddbcpu 1 Stopped at x86_ipi_db+0x27: addq $0x8,%rsp ddb{1}> trace x86_ipi_db(ffff800029b7bff0) at x86_ipi_db+0x27 sys/arch/amd64/amd64/db_interface.c:393 x86_ipi_handler() at x86_ipi_handler+0xd9 sys/arch/amd64/amd64/ipi.c:106 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __mp_lock(ffffffff8357c188) at __mp_lock+0x199 __mp_lock_spin sys/kern/kern_lock.c:113 [inline] __mp_lock(ffffffff8357c188) at __mp_lock+0x199 sys/kern/kern_lock.c:144 __mp_acquire_count(ffffffff8357c188,1) at __mp_acquire_count+0x58 mi_switch() at mi_switch+0x658 sys/kern/sched_bsd.c:460 sleep_finish(0,1) at sleep_finish+0x229 sys/kern/kern_synch.c:416 msleep(ffff800001140000,ffff800001140008,11a,ffffffff83008332,0) at msleep+0x13b sys/kern/kern_synch.c:249 bpfread(21700,ffff80002a03bea8,0) at bpfread+0x2f4 spec_read(ffff80002a03bd10) at spec_read+0x155 sys/kern/spec_vnops.c:215 VOP_READ(fffffd8076aa6640,ffff80002a03bea8,0,fffffd807f7d37b8) at VOP_READ+0x102 sys/kern/vfs_vops.c:227 vn_read(fffffd806e10e010,ffff80002a03bea8,0) at vn_read+0x17b sys/kern/vfs_vnops.c:369 dofilereadv(ffff800029fd9958,4,ffff80002a03bea8,0,ffff80002a03bf60) at dofilereadv+0x230 sys/kern/sys_generic.c:247 sys_read(ffff800029fd9958,ffff80002a03c010,ffff80002a03bf60) at sys_read+0xa2 sys/kern/sys_generic.c:167 syscall(ffff80002a03c010) at syscall+0xbb6 mi_syscall sys/sys/syscall_mi.h:179 [inline] syscall(ffff80002a03c010) at syscall+0xbb6 sys/arch/amd64/amd64/trap.c:577 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x707e64527670, count: -16