kernel: integer divide fault trap, code=0 Stopped at rc4_keysetup+0xaf: divl 0xffffffffffffffac(%rbp),%eax ddb{0}> ddb{0}> set $lines = 0 ddb{0}> set $maxwidth = 0 ddb{0}> show panic the kernel did not panic ddb{0}> trace rc4_keysetup(ffff80002ffd6cda,ffff80002ffd6dec,0) at rc4_keysetup+0xaf sys/crypto/arc4.c:41 pipex_mppe_init(ffff80002ffd6ca0,ffffdc60,6c59,ffff8000006d1a6c,ffffdc60) at pipex_mppe_init+0x212 sys/net/pipex.c:2319 pipex_init_session(ffff800021288718,ffff8000006d1800) at pipex_init_session+0x5e1 pipex_session_init_mppe_recv sys/net/pipex.c:2327 [inline] pipex_init_session(ffff800021288718,ffff8000006d1800) at pipex_init_session+0x5e1 sys/net/pipex.c:385 pppacioctl(4486337,82907003,ffff8000006d1800,1,ffff8000261fefc0) at pppacioctl+0x156 pppac_add_session sys/net/if_pppx.c:1315 [inline] pppacioctl(4486337,82907003,ffff8000006d1800,1,ffff8000261fefc0) at pppacioctl+0x156 sys/net/if_pppx.c:1165 VOP_IOCTL(fffffd8063bdc948,82907003,ffff8000006d1800,1,fffffd807f7d7410,ffff8000261fefc0) at VOP_IOCTL+0x96 sys/kern/vfs_vops.c:264 vn_ioctl(fffffd80666803b0,82907003,ffff8000006d1800,ffff8000261fefc0) at vn_ioctl+0xbc sys/kern/vfs_vnops.c:525 sys_ioctl(ffff8000261fefc0,ffff800021288a68,ffff800021288ab0) at sys_ioctl+0x4a2 syscall(ffff800021288b30) at syscall+0x4c3 mi_syscall sys/sys/syscall_mi.h:101 [inline] syscall(ffff800021288b30) at syscall+0x4c3 sys/arch/amd64/amd64/trap.c:585 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xbead9afba10, count: -9 ddb{0}> show registers rdi 0xffff800029435000 rsi 0 rbp 0xffff8000212885a0 rbx 0 rdx 0 rcx 0 rax 0x1 r8 0x60 r9 0x2f2d33bf r10 0xfca5e316638a3622 r11 0x8a84d8601e96d8b2 r12 0xffff80002ffd6dec r13 0 r14 0xffff80002ffd6cda r15 0 rip 0xffffffff818fba1f rc4_keysetup+0xaf cs 0x8 rflags 0x10246 __ALIGN_SIZE+0xf246 rsp 0xffff800021288540 ss 0x10 rc4_keysetup+0xaf: divl 0xffffffffffffffac(%rbp),%eax ddb{0}> show proc PROC (syz-executor.5) pid=312461 stat=onproc flags process=0 proc=4000000 pri=32, usrpri=84, nice=20 forw=0xffffffffffffffff, list=0xffff8000261fe540,0xffff8000212f5a50 process=0xffff8000ffff3a48 user=0xffff800021283000, vmspace=0xfffffd807effd5c0 estcpu=34, cpticks=0, pctcpu=0.0 user=0, sys=0, intr=0 ddb{0}> ps PID TID PPID UID S FLAGS WAIT COMMAND 16844 57023 51594 0 2 0 syz-executor.2 16844 140356 51594 0 2 0x4000000 syz-executor.2 16844 255324 51594 0 2 0x4000000 syz-executor.2 16844 124257 51594 0 2 0x4000000 syz-executor.2 43403 486752 85983 0 2 0 syz-executor.0 43403 460102 85983 0 3 0x4000080 fsleep syz-executor.0 45180 413380 42287 0 2 0 syz-executor.7 45180 243311 42287 0 3 0x4000080 lockf syz-executor.7 45180 126039 42287 0 3 0x4000080 fsleep syz-executor.7 45180 250337 42287 0 3 0x4000080 fsleep syz-executor.7 28137 206231 58181 0 2 0 syz-executor.4 28137 307167 58181 0 3 0x4000080 lockf syz-executor.4 28137 54816 58181 0 3 0x4000080 lockf syz-executor.4 59207 441696 83268 0 2 0 syz-executor.1 59207 419286 83268 0 3 0x4000080 fsleep syz-executor.1 71755 144561 69559 0 2 0 syz-executor.5 *71755 312461 69559 0 7 0x4000000 syz-executor.5 96561 37377 41849 0 3 0x80 nanoslp syz-executor.3 96561 494550 41849 0 3 0x4000080 fsleep syz-executor.3 96561 400625 41849 0 3 0x4000080 lockf syz-executor.3 96561 93351 41849 0 3 0x4000080 fsleep syz-executor.3 65311 41866 295 0 3 0x80 nanoslp syz-executor.6 65311 379210 295 0 3 0x4000080 lockf syz-executor.6 65311 43406 295 0 3 0x4000080 lockf syz-executor.6 65311 34600 295 0 3 0x4000080 fsleep syz-executor.6 295 148482 39945 0 3 0x82 nanoslp syz-executor.6 58181 473087 39945 0 3 0x82 nanoslp syz-executor.4 83268 364046 39945 0 3 0x82 nanoslp syz-executor.1 51594 322019 39945 0 3 0x82 nanoslp syz-executor.2 85983 228774 39945 0 3 0x82 nanoslp syz-executor.0 42287 131501 39945 0 3 0x82 nanoslp syz-executor.7 19024 128462 0 0 3 0x14200 acct acct 44351 258707 1 0 3 0x100083 ttyin getty 11942 243349 0 0 3 0x14280 nfsidl nfsio 71109 349234 0 0 3 0x14280 nfsidl nfsio 78041 43867 0 0 3 0x14280 nfsidl nfsio 49290 31174 0 0 3 0x14280 nfsidl nfsio 64366 73685 0 0 3 0x14280 nfsidl nfsio 85470 267027 0 0 3 0x14280 nfsidl nfsio 85600 234414 0 0 3 0x14280 nfsidl nfsio 9398 497865 0 0 3 0x14280 nfsidl nfsio 26247 142538 0 0 3 0x14280 nfsidl nfsio 68257 327242 0 0 3 0x14280 nfsidl nfsio 95808 305371 0 0 3 0x14280 nfsidl nfsio 12111 257429 0 0 3 0x14280 nfsidl nfsio 7218 229402 0 0 3 0x14280 nfsidl nfsio 85985 176664 0 0 3 0x14280 nfsidl nfsio 2197 484557 0 0 3 0x14280 nfsidl nfsio 7384 377390 0 0 3 0x14280 nfsidl nfsio 55678 415214 0 0 3 0x14280 nfsidl nfsio 93674 52640 0 0 3 0x14280 nfsidl nfsio 14852 336914 0 0 3 0x14280 nfsidl nfsio 20207 24975 0 0 3 0x14280 nfsidl nfsio 69559 217538 39945 0 3 0x82 nanoslp syz-executor.5 41849 117126 39945 0 3 0x82 nanoslp syz-executor.3 8128 461864 0 0 3 0x14200 bored sosplice 3892 402198 97181 0 3 0x100082 netio arp 97181 292670 1 0 3 0x10008a sigsusp sh 39945 79281 21092 0 3 0x82 wait syz-fuzzer 39945 207153 21092 0 3 0x4000082 thrsleep syz-fuzzer 39945 516691 21092 0 3 0x4000082 thrsleep syz-fuzzer 39945 35908 21092 0 3 0x4000082 thrsleep syz-fuzzer 39945 192040 21092 0 3 0x4000082 wait syz-fuzzer 39945 126312 21092 0 3 0x4000082 wait syz-fuzzer 39945 261492 21092 0 3 0x4000082 thrsleep syz-fuzzer 39945 413653 21092 0 3 0x4000082 kqread syz-fuzzer 39945 498706 21092 0 3 0x4000082 thrsleep syz-fuzzer 39945 55314 21092 0 3 0x4000082 wait syz-fuzzer 39945 464772 21092 0 3 0x4000082 thrsleep syz-fuzzer 39945 39066 21092 0 3 0x4000082 wait syz-fuzzer 39945 289563 21092 0 3 0x4000082 thrsleep syz-fuzzer 39945 99480 21092 0 3 0x4000082 wait syz-fuzzer 39945 408468 21092 0 3 0x4000082 thrsleep syz-fuzzer 39945 32798 21092 0 3 0x4000082 wait syz-fuzzer 39945 278510 21092 0 3 0x4000082 wait syz-fuzzer 21092 495126 71060 0 3 0x10008a sigsusp ksh 71060 314278 97365 0 3 0x9a kqread sshd 97365 472434 1 0 3 0x88 kqread sshd 18347 285268 36052 74 3 0x1100092 bpf pflogd 36052 230955 1 0 3 0x80 netio pflogd 30046 509762 31038 73 3 0x1100090 kqread syslogd 31038 11455 1 0 3 0x100082 netio syslogd 12330 452374 1 0 3 0x100080 kqread resolvd 27787 267463 0 0 3 0x14200 bored smr 82299 256968 0 0 2 0x14200 zerothread 20384 232402 0 0 3 0x14200 aiodoned aiodoned 27206 28903 0 0 3 0x14200 syncer update 6488 44659 0 0 3 0x14200 cleaner cleaner 38577 295067 0 0 3 0x14200 reaper reaper 55375 150615 0 0 3 0x14200 pgdaemon pagedaemon 76972 107643 0 0 3 0x14200 bored viomb 2801 58372 0 0 3 0x40014200 acpi0 acpi0 17145 430114 0 0 7 0x40014200 idle1 10571 24034 0 0 3 0x14200 bored softnet 80316 133333 0 0 3 0x14200 bored softnet 41673 509560 0 0 3 0x14200 bored softnet 89961 485708 0 0 3 0x14200 bored softnet 75360 42507 0 0 3 0x14200 bored systqmp 8654 62710 0 0 3 0x14200 bored systq 30019 278395 0 0 3 0x40014200 bored softclock 31096 344969 0 0 3 0x40014200 idle0 1 431093 0 0 3 0x80082 wait init 0 0 -1 0 3 0x10200 scheduler swapper ddb{0}> show all locks Process 71755 (syz-executor.5) thread 0xffff8000261fefc0 (312461) ddb{0}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 10222 6497K 7550K 78643K 75627 0 pcb 13 18K 23K 78643K 1501 0 rtable 215 20K 22K 78643K 1968 0 ifaddr 104 22K 24K 78643K 1046 0 sysctl 3 1K 1K 78643K 3 0 counters 58 35K 36K 78643K 414 0 ioctlops 1 1K 8K 78643K 3938 0 iov 0 0K 20K 78643K 1080 0 mount 1 1K 1K 78643K 1 0 log 0 0K 0K 78643K 4 0 vnodes 1470 92K 92K 78643K 17042 0 UFS quota 1 32K 32K 78643K 1 0 UFS mount 5 36K 36K 78643K 5 0 shm 2 1K 9K 78643K 153 0 VM map 2 1K 1K 78643K 2 0 sem 12 0K 0K 78643K 939 0 dirhash 12 2K 2K 78643K 12 0 ACPI 1697 195K 286K 78643K 12548 0 file desc 20 73K 89K 78643K 11810 0 sigio 0 0K 0K 78643K 325 0 proc 68 67K 116K 78643K 1774 0 subproc 117 7K 7K 78643K 516 0 NFS srvsock 1 0K 0K 78643K 1 0 NFS daemon 1 16K 16K 78643K 1 0 ip_moptions 0 0K 0K 78643K 987 0 in_multi 76 5K 7K 78643K 626 0 ether_multi 1 0K 0K 78643K 49 0 mrt 1 0K 0K 78643K 35 0 ISOFS mount 1 32K 32K 78643K 1 0 MSDOSFS mount 1 16K 16K 78643K 1 0 ttys 217 970K 970K 78643K 217 0 exec 0 0K 2K 78643K 2823 0 tdb 3 0K 0K 78643K 3 0 pagedep 1 8K 8K 78643K 1 0 inodedep 1 32K 32K 78643K 1 0 newblk 1 0K 0K 78643K 1 0 VM swap 8 62K 62K 78643K 8 0 UVM amap 606 1578K 1578K 78643K 68566 0 UVM aobj 131 4K 4K 78643K 137 0 memdesc 1 4K 4K 78643K 1 0 crypto data 1 1K 1K 78643K 1 0 ip6_options 0 0K 0K 78643K 387 0 NDP 17 0K 2K 78643K 270 0 temp 147 4726K 70263K 78643K 210307 0 kqueue 9 13K 26K 78643K 890 0 SYN cache 2 16K 24K 78643K 3 0 ddb{0}> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle plcache 128 22 0 0 1 0 1 1 0 8 0 rtpcb 120 673 0 671 9 8 1 3 0 8 0 rtentry 112 534 0 454 4 0 4 4 0 8 0 unpcb 144 10023 0 10015 129 121 8 10 0 8 7 syncache 296 60 0 60 18 18 0 1 0 8 0 sackhl 24 1 0 1 1 1 0 1 0 8 0 tcpqe 32 42 0 42 11 11 0 1 0 8 0 tcpcb 768 3349 0 3344 126 125 1 13 0 8 0 arp 120 80 0 66 1 0 1 1 0 8 0 inpcb 368 10064 0 10059 195 188 7 14 0 8 6 nd6 48 137 0 120 1 0 1 1 0 8 0 pkpcb 40 314 0 314 18 18 0 1 0 8 0 kcovpl 48 37 0 28 1 0 1 1 0 8 0 mppekey 1024 1 0 0 1 0 1 1 0 8 0 ppxss 1256 97 0 95 20 19 1 1 0 8 0 pfstscr 40 11 0 11 2 2 0 1 0 8 0 pffrag 232 29 0 26 5 4 1 1 0 482 0 pffrnode 88 29 0 26 5 4 1 1 0 8 0 pffrent 40 110 0 107 5 4 1 1 0 8 0 pfosfp 40 1428 0 1005 5 0 5 5 0 8 0 pfosfpen 112 1428 0 714 21 0 21 21 0 8 0 pfrktable 1344 67 0 61 2 1 1 1 0 8 0 pfanchor 1280 15 0 2 3 1 2 2 0 8 0 pftag 88 12 0 9 1 0 1 1 0 8 0 pfstitem 24 51 0 49 1 0 1 1 0 8 0 pfstkey 120 73 0 71 1 0 1 1 0 8 0 pfstate 336 62 0 60 3 2 1 2 0 8 0 pfrule 1360 101 0 83 3 1 2 2 0 8 0 rttmr 136 3 0 3 1 1 0 1 0 8 0 art_heap8 4096 1 0 0 1 0 1 1 0 8 0 art_heap4 256 2354 0 2008 43 16 27 35 0 8 0 art_table 32 2355 0 2008 5 0 5 5 0 8 0 art_node 16 530 0 460 1 0 1 1 0 8 0 sysvmsgpl 40 86 0 46 1 0 1 1 0 8 0 semupl 112 3 0 3 1 1 0 1 0 8 0 semapl 112 935 0 925 1 0 1 1 0 8 0 shmpl 112 134 0 6 4 0 4 4 0 8 0 dirhash 1024 17 0 0 3 0 3 3 0 8 0 dino2pl 256 16894 0 15423 93 0 93 93 0 8 0 ffsino 272 16894 0 15423 99 0 99 99 0 8 0 nchpl 144 32635 0 30991 63 0 63 63 0 8 0 rtmask 32 10 0 10 4 3 1 1 0 8 1 uvmvnodes 80 5926 0 0 121 0 121 121 0 8 0 vnodes 216 5926 0 0 330 0 330 330 0 8 0 namei 1024 130043 0 130043 7 6 1 2 0 8 1 percpumem 16 219 0 178 1 0 1 1 0 8 0 vcpupl 2048 189 0 0 24 0 24 24 0 8 0 vmpool 568 208 0 19 15 1 14 14 0 8 0 pfiaddrpl 120 30 0 19 2 1 1 1 0 8 0 kstatmem 264 354 0 320 3 0 3 3 0 8 0 scsiplug 72 11 0 11 3 3 0 1 0 8 0 scxspl 216 99375 0 99375 24 23 1 8 0 8 1 plimitpl 152 1596 0 1581 1 0 1 1 0 8 0 sigapl 424 12094 0 12025 10 1 9 9 0 8 0 futexpl 64 123790 0 123783 6 5 1 1 0 8 0 knotepl 120 894 0 0 12 1 11 12 0 8 0 kqueuepl 216 2429 0 2423 42 41 1 6 0 8 0 pipepl 320 2384 0 2353 76 73 3 9 0 8 0 fdescpl 496 12055 0 12025 5 0 5 5 0 8 0 filepl 152 88447 0 88188 177 158 19 29 0 8 8 lockfpl 104 23309 0 23301 33 32 1 6 0 8 0 lockfspl 48 10641 0 10639 6 5 1 3 0 8 0 sessionpl 144 54 0 37 1 0 1 1 0 8 0 pgrppl 48 183 0 166 1 0 1 1 0 8 0 ucredpl 104 9043 0 9032 1 0 1 1 0 8 0 zombiepl 144 12025 0 12025 3 2 1 1 0 8 1 processpl 1064 12094 0 12025 5 0 5 5 0 8 0 procpl 672 32067 0 31965 27 17 10 11 0 8 1 srpgc 96 38 0 38 13 13 0 1 0 8 0 sosppl 168 96 0 96 20 20 0 1 0 8 0 sockpl 488 21084 0 21069 544 533 11 34 0 8 8 mcl64k 65536 17 0 0 3 1 2 3 0 8 0 mcl16k 16384 8 0 0 1 0 1 1 0 8 0 mcl12k 12288 17 0 0 2 0 2 2 0 8 0 mcl9k 9216 11 0 0 1 0 1 1 0 8 0 mcl8k 8192 19 0 0 3 1 2 3 0 8 0 mcl4k 4096 34 0 0 4 0 4 4 0 8 0 mcl2k2 2112 10 0 0 1 0 1 1 0 8 0 mcl2k 2048 689 0 0 45 2 43 45 0 8 0 mtagpl 96 1897 0 0 41 0 41 41 0 8 0 mbufpl 256 2350 0 0 120 0 120 120 0 8 0 bufpl 288 23268 0 16939 453 0 453 453 0 8 0 anonpl 24 2332967 0 2312829 332 190 142 202 0 186 0 amapchunkpl 152 211680 0 210624 120 74 46 71 0 158 0 amappl16 200 32410 0 31780 169 135 34 47 0 8 0 amappl15 192 4067 0 4056 1 0 1 1 0 8 0 amappl14 184 1091 0 1084 1 0 1 1 0 8 0 amappl13 176 1600 0 1596 1 0 1 1 0 8 0 amappl12 168 577 0 575 1 0 1 1 0 8 0 amappl11 160 689 0 674 1 0 1 1 0 8 0 amappl10 152 2714 0 2708 1 0 1 1 0 8 0 amappl9 144 2300 0 2297 1 0 1 1 0 8 0 amappl8 136 1935 0 1805 5 0 5 5 0 8 0 amappl7 128 816 0 792 1 0 1 1 0 8 0 amappl6 120 2199 0 2176 2 1 1 2 0 8 0 amappl5 112 12578 0 12560 1 0 1 1 0 8 0 amappl4 104 3360 0 3323 2 0 2 2 0 8 0 amappl3 96 35885 0 35824 2 0 2 2 0 8 0 amappl2 88 2647 0 2609 2 0 2 2 0 8 0 amappl1 80 296043 0 295302 20 3 17 20 0 8 0 amappl 88 67128 0 66828 8 0 8 8 0 92 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 253 0 253 1 1 0 1 0 8 0 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 136 0 6 3 0 3 3 0 8 0 uaddrrnd 24 12264 0 12045 2 0 2 2 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 12264 0 12045 2 0 2 2 0 8 0 vmmpekpl 168 87160 0 87071 5 0 5 5 0 8 0 vmmpepl 168 1167112 0 1163883 357 182 175 175 0 357 32 vmsppl 368 12263 0 12045 20 0 20 20 0 8 0 rwobjpl 56 286756 0 278811 143 28 115 117 0 8 0 pdppl 4096 24535 0 24279 743 486 257 261 0 8 1 pvpl 32 4600735 0 4579700 587 381 206 310 0 265 0 pmappl 248 12263 0 12045 14 0 14 14 0 8 0 extentpl 40 56 0 38 1 0 1 1 0 8 0 phpool 112 1887 0 724 34 0 34 34 0 8 0 ddb{0}> machine ddbcpu 0 Invalid cpu 0 ddb{0}> trace rc4_keysetup(ffff80002ffd6cda,ffff80002ffd6dec,0) at rc4_keysetup+0xaf sys/crypto/arc4.c:41 pipex_mppe_init(ffff80002ffd6ca0,ffffdc60,6c59,ffff8000006d1a6c,ffffdc60) at pipex_mppe_init+0x212 sys/net/pipex.c:2319 pipex_init_session(ffff800021288718,ffff8000006d1800) at pipex_init_session+0x5e1 pipex_session_init_mppe_recv sys/net/pipex.c:2327 [inline] pipex_init_session(ffff800021288718,ffff8000006d1800) at pipex_init_session+0x5e1 sys/net/pipex.c:385 pppacioctl(4486337,82907003,ffff8000006d1800,1,ffff8000261fefc0) at pppacioctl+0x156 pppac_add_session sys/net/if_pppx.c:1315 [inline] pppacioctl(4486337,82907003,ffff8000006d1800,1,ffff8000261fefc0) at pppacioctl+0x156 sys/net/if_pppx.c:1165 VOP_IOCTL(fffffd8063bdc948,82907003,ffff8000006d1800,1,fffffd807f7d7410,ffff8000261fefc0) at VOP_IOCTL+0x96 sys/kern/vfs_vops.c:264 vn_ioctl(fffffd80666803b0,82907003,ffff8000006d1800,ffff8000261fefc0) at vn_ioctl+0xbc sys/kern/vfs_vnops.c:525 sys_ioctl(ffff8000261fefc0,ffff800021288a68,ffff800021288ab0) at sys_ioctl+0x4a2 syscall(ffff800021288b30) at syscall+0x4c3 mi_syscall sys/sys/syscall_mi.h:101 [inline] syscall(ffff800021288b30) at syscall+0x4c3 sys/arch/amd64/amd64/trap.c:585 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xbead9afba10, count: -9 ddb{0}> machine ddbcpu 1 Stopped at x86_ipi_db+0x1a: addq $0x8,%rsp ddb{1}> trace x86_ipi_db(ffff800020dd8ff0) at x86_ipi_db+0x1a sys/arch/amd64/amd64/db_interface.c:393 x86_ipi_handler() at x86_ipi_handler+0xb7 sys/arch/amd64/amd64/ipi.c:106 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x23 acpicpu_idle() at acpicpu_idle+0x312 sys/dev/acpi/acpicpu.c:1206 sched_idle(ffff800020dd8ff0) at sched_idle+0x417 sys/kern/kern_sched.c:175 end trace frame: 0x0, count: -5