kernel: protection fault trap, code=0 Stopped at pool_do_put+0x115: movq 0x8(%rbx),%rbx ddb> ddb> set $lines = 0 ddb> set $maxwidth = 0 ddb> show panic the kernel did not panic ddb> trace pool_do_put(ffffffff82ad0bd8,fffffd8065e9a5a0) at pool_do_put+0x115 pool_put(ffffffff82ad0bd8,fffffd8065e9a5a0) at pool_put+0x67 sys/kern/subr_pool.c:799 in_pcbdetach(fffffd8075c23ea0) at in_pcbdetach+0x30 sys/netinet/in_pcb.c:580 tcp_close(ffff800000e18910) at tcp_close+0x13d sys/netinet/tcp_subr.c:536 tcp_timer_2msl(ffff800000e18910) at tcp_timer_2msl+0x16f sys/netinet/tcp_timer.c:531 timeout_run(ffff800000e189f8) at timeout_run+0x8b sys/kern/kern_timeout.c:678 softclock_thread(ffff8000ffffefc0) at softclock_thread+0xf4 sys/kern/kern_timeout.c:802 end trace frame: 0x0, count: -7 ddb> show registers rdi 0 rsi 0xfffffd8065e9aaf8 rbp 0xffff800021684300 rbx 0x6ba7e6b6c8c65a38 rdx 0 rcx 0x1 rax 0xffff8000ffffefc0 r8 0 r9 0 r10 0x611098e38b01d5f7 r11 0x4f63676ee523ee71 r12 0xfffffd8065e9a5a0 r13 0x2ab733fe06b83969 r14 0xffffffff82ad0bd8 socket_pool r15 0xfffffd8065e9af90 rip 0xffffffff82246d55 pool_do_put+0x115 cs 0x8 rflags 0x10292 __ALIGN_SIZE+0xf292 rsp 0xffff800021684250 ss 0x10 pool_do_put+0x115: movq 0x8(%rbx),%rbx ddb> show proc PROC (softclock) pid=169654 stat=onproc flags process=14000 proc=40000200 pri=0, usrpri=50, nice=20 forw=0xffffffffffffffff, list=0xffff8000fffff260,0xffff8000ffffea90 process=0xffff8000ffffc7d0 user=0xffff80002167f000, vmspace=0xffffffff829c8b48 estcpu=0, cpticks=0, pctcpu=0.0 user=0, sys=0, intr=0 ddb> ps PID TID PPID UID S FLAGS WAIT COMMAND 71077 41472 99175 0 3 0x82 piperd syz-executor.1 67811 267766 99175 0 3 0x3 kernel: protection fault trap, code=0 Faulted in DDB; continuing... ddb> show all locks No such command ddb> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 10201 6403K 7247K 78643K 25449 0 pcb 13 18K 23K 78643K 4022 0 rtable 169 15K 17K 78643K 3137 0 ifaddr 157 39K 42K 78643K 1428 0 sysctl 3 1K 1K 78643K 3 0 counters 24 17K 17K 78643K 349 0 ioctlops 0 0K 4K 78643K 3281 0 iov 0 0K 28K 78643K 8265 0 mount 1 1K 1K 78643K 1 0 log 0 0K 0K 78643K 4 0 vnodes 1400 87K 88K 78643K 6605 0 UFS quota 1 32K 32K 78643K 1 0 UFS mount 5 36K 36K 78643K 5 0 shm 2 1K 5K 78643K 51 0 VM map 2 0K 0K 78643K 2 0 sem 22 3K 5K 78643K 242 0 dirhash 12 2K 2K 78643K 12 0 ACPI 1697 195K 286K 78643K 12548 0 file desc 9 29K 81K 78643K 12190 0 sigio 0 0K 0K 78643K 120 0 proc 64 59K 75K 78643K 2501 0 subproc 91 5K 7K 78643K 827 0 NFS srvsock 1 0K 0K 78643K 1 0 NFS daemon 1 16K 16K 78643K 1 0 ip_moptions 0 0K 0K 78643K 523 0 in_multi 59 4K 6K 78643K 1006 0 ether_multi 1 0K 0K 78643K 50 0 mrt 3 0K 0K 78643K 23 0 ISOFS mount 1 32K 32K 78643K 1 0 MSDOSFS mount 1 16K 16K 78643K 1 0 ttys 181 811K 811K 78643K 181 0 exec 0 0K 1K 78643K 2545 0 pfkey data 0 0K 0K 78643K 79 0 tdb 3 0K 0K 78643K 3 0 pagedep 1 8K 8K 78643K 1 0 inodedep 1 32K 32K 78643K 1 0 newblk 1 0K 0K 78643K 1 0 VM swap 8 62K 64K 78643K 10 0 UVM amap 413 710K 719K 78643K 78827 0 UVM aobj 131 4K 4K 78643K 140 0 memdesc 1 4K 4K 78643K 1 0 crypto data 1 1K 1K 78643K 1 0 ip6_options 0 0K 0K 78643K 212 0 NDP 11 0K 1K 78643K 355 0 temp 144 4732K 70262K 78643K 129630 0 kqueue 12 18K 26K 78643K 1117 0 SYN cache 2 16K 16K 78643K 2 0 ddb> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle rtpcb 120 680 0 677 7 6 1 3 0 8 0 rtentry 112 1017 0 949 5 1 4 4 0 8 0 unpcb 144 9026 0 9013 81 80 1 10 0 8 0 syncache 296 35 0 35 12 12 0 1 0 8 0 tcpqe 32 848 0 848 5 5 0 1 0 8 0 tcpcb 768 2698 0 2691 105 102 3 15 0 8 0 arp 88 174 0 162 1 0 1 1 0 8 0 ipq 40 14 0 14 4 4 0 1 0 8 0 ipqe 40 50 0 50 4 4 0 1 0 8 0 inpcb 336 10699 0 10690 133 130 3 19 0 8 1 ip6q 72 1 0 1 1 1 0 1 0 8 0 ip6af 40 2 0 2 1 1 0 1 0 8 0 nd6 48 216 0 201 1 0 1 1 0 8 0 pkpcb 40 34 0 34 8 8 0 1 0 8 0 kcovpl 48 63 0 56 1 0 1 1 0 8 0 mppekey 1024 3 0 3 2 2 0 1 0 8 0 ppxss 1160 165 0 165 18 18 0 1 0 8 0 pppxif 1608 44 0 44 10 10 0 1 0 8 0 pfstscr 40 26 0 15 1 0 1 1 0 8 0 pfrktable 1344 100 0 100 5 5 0 2 0 8 0 pfanchor 1280 526 24 14 43 0 43 43 0 8 0 pftag 88 8 0 3 1 0 1 1 0 8 0 pfstitem 24 16 0 0 1 0 1 1 0 8 0 pfstkey 120 44 0 37 1 0 1 1 0 8 0 pfstate 336 22 0 14 1 0 1 1 0 8 0 pfrule 1360 347 0 347 2 2 0 2 0 8 0 rttmr 136 5 0 5 2 2 0 1 0 8 0 art_heap8 4096 5 0 4 5 4 1 2 0 8 0 art_heap4 256 4186 0 3889 53 28 25 31 0 8 0 art_table 32 4191 0 3893 4 0 4 4 0 8 0 art_node 16 1008 0 949 1 0 1 1 0 8 0 sysvmsgpl 40 56 0 16 1 0 1 1 0 8 0 semupl 112 3 0 3 1 1 0 1 0 8 0 semapl 112 236 0 216 1 0 1 1 0 8 0 shmpl 112 137 0 9 4 0 4 4 0 8 0 dirhash 1024 17 0 0 3 0 3 3 0 8 0 dino2pl 256 18257 0 16795 92 0 92 92 0 8 0 ffsino 240 18257 0 16795 87 0 87 87 0 8 0 nchpl 144 36486 0 36007 63 42 21 63 0 8 0 rtmask 32 6 0 6 3 3 0 1 0 8 0 uvmvnodes 80 6071 0 0 124 0 124 124 0 8 0 vnodes 216 6071 0 0 338 0 338 338 0 8 0 namei 1024 132243 0 132243 7 7 0 3 0 8 0 vcpupl 2048 147 0 0 19 0 19 19 0 8 0 vmpool 536 168 0 21 10 0 10 10 0 8 0 pfiaddrpl 120 52 0 52 2 2 0 1 0 8 0 kstatmem 264 428 0 406 4 2 2 3 0 8 0 scsiplug 72 7 0 7 2 2 0 1 0 8 0 scxspl 216 120732 0 120732 40 40 0 8 0 8 0 plimitpl 152 1319 0 1305 1 0 1 1 0 8 0 sigapl 424 12410 0 12372 10 3 7 8 0 8 0 futexpl 64 121801 0 121801 1 1 0 1 0 8 0 knotepl 120 236223 0 236145 55 51 4 11 0 8 0 kqueuepl 184 2577 0 2569 32 31 1 4 0 8 0 pipepl 288 1916 0 1889 35 32 3 7 0 8 0 fdescpl 432 12352 0 12332 5 1 4 4 0 8 0 filepl 120 84355 0 84140 95 86 9 16 0 8 0 lockfpl 104 2642 0 2640 7 6 1 2 0 8 0 lockfspl 48 820 0 818 1 0 1 1 0 8 0 sessionpl 144 81 0 66 1 0 1 1 0 8 0 pgrppl 48 288 0 273 1 0 1 1 0 8 0 ucredpl 104 8260 0 8249 1 0 1 1 0 8 0 zombiepl 144 12372 0 12372 2 2 0 1 0 8 0 processpl 1000 12410 0 12372 14 7 7 9 0 8 0 procpl 672 32126 0 32071 18 10 8 9 0 8 0 sosppl 168 89 0 89 15 15 0 1 0 8 0 sockpl 456 20443 0 20418 397 392 5 33 0 8 0 sockpl: pool(0xffffffff82ad0bd8:sockpl): free list modified: page 0xfffffd8065e9a000; item ordinal 1; addr 0xfffffd8065e9a212 (p 0xfffffd8065e9a000); offset 0x0=0x992138fdaeff7745 pool(sockpl): free list modified: page 0xfffffd8065e9a000; item ordinal 1; addr 0xfffffd8065e9a212 (p 0xfffffd8065e9a000); offset 0x0=0x4110dead sockpl: pool(0xffffffff82ad0bd8:sockpl): page inconsistency: page 0xfffffd8065e9a000; item ordinal 2; addr 0x6ba7e6b6c8c65a38 mcl64k 65536 481 0 481 15 15 0 1 0 8 0 mcl16k 16384 130 0 130 21 21 0 1 0 8 0 mcl12k 12288 416 0 416 18 18 0 1 0 8 0 mcl9k 9216 128 0 128 22 22 0 1 0 8 0 mcl8k 8192 655 0 653 11 10 1 1 0 8 0 mcl4k 4096 1180 0 1180 6 6 0 1 0 8 0 mcl2k2 2112 82 0 82 25 25 0 1 0 8 0 mcl2k 2048 101330 0 101253 42 31 11 22 0 8 0 mtagpl 96 1379 0 1227 18 13 5 9 0 8 0 mbufpl 256 257342 0 256869 544 507 37 117 0 8 0 bufpl 288 29352 0 22948 458 0 458 458 0 8 0 anonpl 24 2389211 0 2372353 256 132 124 136 0 188 0 amapchunkpl 152 251964 0 251319 128 97 31 43 0 158 0 amappl16 200 25285 0 24677 162 127 35 48 0 8 0 amappl15 192 4 0 3 2 1 1 1 0 8 0 amappl14 184 380 0 360 5 3 2 2 0 8 0 amappl13 176 4 0 3 1 0 1 1 0 8 0 amappl12 168 1058 0 1056 1 0 1 1 0 8 0 amappl11 160 42 0 32 1 0 1 1 0 8 0 amappl10 152 80 0 71 1 0 1 1 0 8 0 amappl9 144 1071 0 1069 1 0 1 1 0 8 0 amappl8 136 554 0 450 4 0 4 4 0 8 0 amappl7 128 78 0 59 1 0 1 1 0 8 0 amappl6 120 895 0 880 2 1 1 2 0 8 0 amappl5 112 247 0 239 1 0 1 1 0 8 0 amappl4 104 1350 0 1323 1 0 1 1 0 8 0 amappl3 96 34638 0 34600 2 0 2 2 0 8 0 amappl2 88 13328 0 13266 3 1 2 3 0 8 0 amappl1 80 278143 0 277568 21 5 16 21 0 8 0 amappl 88 77707 0 77509 8 2 6 6 0 92 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 253 0 253 1 1 0 1 0 8 0 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 139 0 9 3 0 3 3 0 8 0 uaddrrnd 24 12520 0 12353 2 0 2 2 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 12520 0 12353 2 0 2 2 0 8 0 vmmpekpl 168 87234 0 87156 4 0 4 4 0 8 0 vmmpepl 168 1139705 0 1137085 271 119 152 172 0 357 0 vmsppl 272 12519 0 12353 15 3 12 12 0 8 0 rwobjpl 24 297206 0 289326 53 3 50 51 0 8 0 pdppl 4096 25046 0 24853 867 674 193 212 0 8 0 pvpl 32 4733066 0 4711382 531 331 200 253 0 265 0 pmappl 216 12519 0 12353 11 1 10 10 0 8 0 extentpl 40 56 0 38 1 0 1 1 0 8 0 phpool 112 2421 0 1474 30 0 30 30 0 8 0 ddb> machine ddbcpu 0 No such command ddb> trace pool_do_put(ffffffff82ad0bd8,fffffd8065e9a5a0) at pool_do_put+0x115 pool_put(ffffffff82ad0bd8,fffffd8065e9a5a0) at pool_put+0x67 sys/kern/subr_pool.c:799 in_pcbdetach(fffffd8075c23ea0) at in_pcbdetach+0x30 sys/netinet/in_pcb.c:580 tcp_close(ffff800000e18910) at tcp_close+0x13d sys/netinet/tcp_subr.c:536 tcp_timer_2msl(ffff800000e18910) at tcp_timer_2msl+0x16f sys/netinet/tcp_timer.c:531 timeout_run(ffff800000e189f8) at timeout_run+0x8b sys/kern/kern_timeout.c:678 softclock_thread(ffff8000ffffefc0) at softclock_thread+0xf4 sys/kern/kern_timeout.c:802 end trace frame: 0x0, count: -7 ddb> machine ddbcpu 1 No such command ddb> trace pool_do_put(ffffffff82ad0bd8,fffffd8065e9a5a0) at pool_do_put+0x115 pool_put(ffffffff82ad0bd8,fffffd8065e9a5a0) at pool_put+0x67 sys/kern/subr_pool.c:799 in_pcbdetach(fffffd8075c23ea0) at in_pcbdetach+0x30 sys/netinet/in_pcb.c:580 tcp_close(ffff800000e18910) at tcp_close+0x13d sys/netinet/tcp_subr.c:536 tcp_timer_2msl(ffff800000e18910) at tcp_timer_2msl+0x16f sys/netinet/tcp_timer.c:531 timeout_run(ffff800000e189f8) at timeout_run+0x8b sys/kern/kern_timeout.c:678 softclock_thread(ffff8000ffffefc0) at softclock_thread+0xf4 sys/kern/kern_timeout.c:802 end trace frame: 0x0, count: -7