kernel: integer divide fault trap, code=0 Stopped at rc4_keysetup+0xaf: divl 0xffffffffffffffac(%rbp),%eax ddb{0}> ddb{0}> set $lines = 0 ddb{0}> set $maxwidth = 0 ddb{0}> show panic the kernel did not panic ddb{0}> trace rc4_keysetup(ffff80002e529a9a,ffff80002e529bac,0) at rc4_keysetup+0xaf sys/crypto/arc4.c:41 pipex_mppe_init(ffff80002e529a60,74ad,5084,ffff800000cd566c,74ad) at pipex_mppe_init+0x212 sys/net/pipex.c:2319 pipex_init_session(ffff80002e577278,ffff800000cd5400) at pipex_init_session+0x5e1 pipex_session_init_mppe_recv sys/net/pipex.c:2327 [inline] pipex_init_session(ffff80002e577278,ffff800000cd5400) at pipex_init_session+0x5e1 sys/net/pipex.c:385 pppacioctl(4086334,82907003,ffff800000cd5400,1,ffff80002b499510) at pppacioctl+0x156 pppac_add_session sys/net/if_pppx.c:1315 [inline] pppacioctl(4086334,82907003,ffff800000cd5400,1,ffff80002b499510) at pppacioctl+0x156 sys/net/if_pppx.c:1165 VOP_IOCTL(fffffd807bdafcf8,82907003,ffff800000cd5400,1,fffffd807f7d76e8,ffff80002b499510) at VOP_IOCTL+0x96 sys/kern/vfs_vops.c:264 vn_ioctl(fffffd807680ee60,82907003,ffff800000cd5400,ffff80002b499510) at vn_ioctl+0xbc sys/kern/vfs_vnops.c:525 sys_ioctl(ffff80002b499510,ffff80002e5775c8,ffff80002e577610) at sys_ioctl+0x4a2 syscall(ffff80002e577690) at syscall+0x4c3 mi_syscall sys/sys/syscall_mi.h:101 [inline] syscall(ffff80002e577690) at syscall+0x4c3 sys/arch/amd64/amd64/trap.c:585 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xddcb44ecfc0, count: -9 ddb{0}> show registers rdi 0xffff80002766e000 rsi 0 rbp 0xffff80002e577100 rbx 0 rdx 0 rcx 0 rax 0x1 r8 0x60 r9 0x2f2d33bf r10 0xfa47b4b6a74396bc r11 0x157ac130a89b619d r12 0xffff80002e529bac r13 0 r14 0xffff80002e529a9a r15 0 rip 0xffffffff81e2f22f rc4_keysetup+0xaf cs 0x8 rflags 0x10246 __ALIGN_SIZE+0xf246 rsp 0xffff80002e5770a0 ss 0x10 rc4_keysetup+0xaf: divl 0xffffffffffffffac(%rbp),%eax ddb{0}> show proc PROC (syz-executor.1) pid=133952 stat=onproc flags process=0 proc=4000000 pri=32, usrpri=79, nice=20 forw=0xffffffffffffffff, list=0xffff8000212ee7e0,0xffff800022dc57b8 process=0xffff80002e4d0020 user=0xffff80002e572000, vmspace=0xfffffd8066d9d8b8 estcpu=29, cpticks=0, pctcpu=0.0 user=0, sys=0, intr=0 ddb{0}> ps PID TID PPID UID S FLAGS WAIT COMMAND 35103 264039 4352 0 3 0x90 nanoslp syz-executor.0 35103 316394 4352 0 3 0x4000090 fsleep syz-executor.0 88485 207966 35226 0 4 0x82000 syz-executor.5 88485 24587 35226 0 2 0x4082000 syz-executor.5 88485 449400 35226 0 3 0x4002000 suspend syz-executor.5 76362 231430 19932 0 2 0 syz-executor.1 76362 271762 19932 0 2 0x4000000 syz-executor.1 *76362 133952 19932 0 7 0x4000000 syz-executor.1 19932 114419 7867 0 3 0x82 nanoslp syz-executor.1 76536 510299 0 0 3 0x14200 acct acct 92981 108252 7867 0 3 0x82 nanoslp syz-executor.2 35226 29113 7867 0 3 0x82 nanoslp syz-executor.5 22184 35151 7867 0 3 0x82 piperd syz-executor.4 4352 2875 7867 0 3 0x82 nanoslp syz-executor.0 7009 154078 7867 0 3 0x82 piperd syz-executor.7 77547 370529 0 0 3 0x14200 bored sosplice 61347 41958 0 0 3 0x14280 nfsidl nfsio 87385 298762 0 0 3 0x14280 nfsidl nfsio 43786 231087 0 0 3 0x14280 nfsidl nfsio 2926 341321 0 0 3 0x14280 nfsidl nfsio 24750 156745 0 0 3 0x14280 nfsidl nfsio 99577 267352 0 0 3 0x14280 nfsidl nfsio 30492 197510 0 0 3 0x14280 nfsidl nfsio 31605 145250 0 0 3 0x14280 nfsidl nfsio 13682 347790 0 0 3 0x14280 nfsidl nfsio 14039 161985 0 0 3 0x14280 nfsidl nfsio 98167 259707 0 0 3 0x14280 nfsidl nfsio 25273 368696 0 0 3 0x14280 nfsidl nfsio 94546 87100 0 0 3 0x14280 nfsidl nfsio 92283 233855 0 0 3 0x14280 nfsidl nfsio 27284 177255 0 0 3 0x14280 nfsidl nfsio 18525 437450 0 0 3 0x14280 nfsidl nfsio 31922 172936 0 0 3 0x14280 nfsidl nfsio 15933 24013 0 0 3 0x14280 nfsidl nfsio 45762 73606 0 0 3 0x14280 nfsidl nfsio 27104 96545 0 0 3 0x14280 nfsidl nfsio 49749 64276 7867 0 3 0x82 piperd syz-executor.6 82974 467638 7867 0 3 0x82 piperd syz-executor.3 7867 406645 81658 0 3 0x82 thrsleep syz-fuzzer 7867 390775 81658 0 3 0x4000082 thrsleep syz-fuzzer 7867 30899 81658 0 3 0x4000082 thrsleep syz-fuzzer 7867 62347 81658 0 3 0x4000082 wait syz-fuzzer 7867 169263 81658 0 3 0x4000082 wait syz-fuzzer 7867 318989 81658 0 3 0x4000082 thrsleep syz-fuzzer 7867 390497 81658 0 3 0x4000082 wait syz-fuzzer 7867 366821 81658 0 3 0x4000082 thrsleep syz-fuzzer 7867 175255 81658 0 3 0x4000082 thrsleep syz-fuzzer 7867 88719 81658 0 3 0x4000082 wait syz-fuzzer 7867 353427 81658 0 3 0x4000082 wait syz-fuzzer 7867 195157 81658 0 3 0x4000082 kqread syz-fuzzer 7867 291835 81658 0 3 0x4000082 wait syz-fuzzer 7867 255787 81658 0 3 0x4000082 wait syz-fuzzer 7867 381564 81658 0 3 0x4000082 thrsleep syz-fuzzer 7867 391654 81658 0 3 0x4000082 wait syz-fuzzer 81658 76155 18089 0 3 0x10008a sigsusp ksh 18089 31975 71424 0 3 0x9a kqread sshd 12229 116977 1 0 3 0x100083 ttyin getty 71424 213609 1 0 3 0x88 kqread sshd 39815 293758 7848 74 3 0x1100092 bpf pflogd 7848 481282 1 0 3 0x80 netio pflogd 58693 213073 85382 73 3 0x1100090 kqread syslogd 85382 135857 1 0 3 0x100082 netio syslogd 51061 251386 1 0 3 0x100080 kqread resolvd 60952 243158 63735 77 3 0x100092 kqread dhcpleased 47547 379050 63735 77 3 0x100092 kqread dhcpleased 63735 54676 1 0 3 0x80 kqread dhcpleased 28002 284495 0 0 3 0x14200 bored smr 25866 454114 0 0 2 0x14200 zerothread 2283 279005 0 0 3 0x14200 aiodoned aiodoned 75864 167629 0 0 3 0x14200 syncer update 42029 56027 0 0 3 0x14200 cleaner cleaner 38717 296897 0 0 3 0x14200 reaper reaper 20656 111934 0 0 3 0x14200 pgdaemon pagedaemon 24599 277820 0 0 3 0x14200 bored viomb 52342 25324 0 0 3 0x40014200 acpi0 acpi0 6384 472360 0 0 7 0x40014200 idle1 123 202529 0 0 3 0x14200 bored softnet 66454 225990 0 0 3 0x14200 bored softnet 85162 15694 0 0 3 0x14200 bored softnet 2233 96145 0 0 3 0x14200 bored softnet 21873 291784 0 0 3 0x14200 bored systqmp 6886 248423 0 0 3 0x14200 bored systq 54025 173045 0 0 3 0x40014200 bored softclock 73308 403277 0 0 3 0x40014200 idle0 1 309260 0 0 3 0x82 wait init 0 0 -1 0 3 0x10200 scheduler swapper ddb{0}> show all locks Process 76362 (syz-executor.1) thread 0xffff80002b499510 (133952) exclusive kernel_lock &kernel_lock r = 0 (0xffffffff82b6b108) #0 witness_lock+0x44d #1 vn_ioctl+0x41 sys/kern/vfs_vnops.c:508 #2 sys_ioctl+0x4a2 #3 syscall+0x4c3 mi_syscall sys/sys/syscall_mi.h:101 [inline] #3 syscall+0x4c3 sys/arch/amd64/amd64/trap.c:585 #4 Xsyscall+0x128 ddb{0}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 10210 6499K 11046K 78643K 23948 0 pcb 13 14K 17K 78643K 548 0 rtable 182 18K 19K 78643K 1816 0 ifaddr 91 19K 20K 78643K 777 0 sysctl 2 0K 0K 78643K 2 0 counters 56 35K 36K 78643K 250 0 ioctlops 1 1K 6K 78643K 2420 0 iov 0 0K 24K 78643K 329 0 mount 1 1K 1K 78643K 1 0 log 0 0K 0K 78643K 4 0 vnodes 1503 94K 94K 78643K 4737 0 UFS quota 1 32K 32K 78643K 1 0 UFS mount 5 36K 36K 78643K 5 0 shm 2 1K 9K 78643K 30 0 VM map 2 1K 1K 78643K 2 0 sem 12 0K 1K 78643K 331 0 dirhash 12 2K 2K 78643K 12 0 ACPI 1697 195K 286K 78643K 12548 0 file desc 13 45K 85K 78643K 3115 0 sigio 0 0K 0K 78643K 105 0 proc 70 91K 115K 78643K 966 0 subproc 104 6K 6K 78643K 234 0 NFS srvsock 1 0K 0K 78643K 1 0 NFS daemon 1 16K 16K 78643K 1 0 ip_moptions 0 0K 0K 78643K 140 0 in_multi 58 3K 6K 78643K 245 0 ether_multi 1 0K 0K 78643K 10 0 mrt 1 0K 0K 78643K 13 0 ISOFS mount 1 32K 32K 78643K 1 0 MSDOSFS mount 1 16K 16K 78643K 1 0 ttys 169 758K 758K 78643K 169 0 exec 0 0K 2K 78643K 1441 0 tdb 3 0K 0K 78643K 3 0 pagedep 1 8K 8K 78643K 1 0 inodedep 1 32K 32K 78643K 1 0 newblk 1 0K 0K 78643K 1 0 VM swap 8 62K 62K 78643K 8 0 UVM amap 327 364K 365K 78643K 19829 0 UVM aobj 131 4K 4K 78643K 139 0 memdesc 1 4K 4K 78643K 1 0 crypto data 1 1K 1K 78643K 1 0 ip6_options 0 0K 0K 78643K 88 0 NDP 13 0K 2K 78643K 112 0 temp 136 4726K 4794K 78643K 53414 0 kqueue 12 18K 24K 78643K 255 0 SYN cache 2 16K 16K 78643K 2 0 ddb{0}> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle plcache 128 22 0 0 1 0 1 1 0 8 0 rtpcb 120 164 0 161 1 0 1 1 0 8 0 rtentry 112 243 0 173 4 0 4 4 0 8 0 unpcb 144 2467 0 2448 28 26 2 6 0 8 1 syncache 296 17 0 17 5 5 0 1 0 8 0 tcpqe 32 185 0 185 2 2 0 1 0 8 0 tcpcb 768 773 0 769 34 33 1 9 0 8 0 arp 120 40 0 26 1 0 1 1 0 8 0 inpcb 368 1965 0 1958 45 42 3 16 0 8 2 nd6 48 55 0 40 1 0 1 1 0 8 0 kcovpl 48 18 0 10 1 0 1 1 0 8 0 mppekey 1024 1 0 0 1 0 1 1 0 8 0 ppxss 1256 77 0 75 7 6 1 1 0 8 0 pfstscr 40 7 0 4 2 1 1 1 0 8 0 pffrag 232 4 0 3 1 0 1 1 0 482 0 pffrnode 88 4 0 3 1 0 1 1 0 8 0 pffrent 40 9 0 8 1 0 1 1 0 8 0 pfosfp 40 1428 0 1005 5 0 5 5 0 8 0 pfosfpen 112 1428 0 714 21 0 21 21 0 8 0 pfrktable 1344 520 0 511 3 2 1 1 0 8 0 pfanchor 1280 88 0 71 4 2 2 2 0 8 0 pftag 88 4 0 3 2 1 1 1 0 8 0 pfstitem 24 50 0 41 1 0 1 1 0 8 0 pfstkey 120 58 0 51 1 0 1 1 0 8 0 pfstate 336 51 0 45 3 1 2 3 0 8 0 pfrule 1360 506 0 480 4 1 3 3 0 8 0 rttmr 136 6 0 6 2 2 0 1 0 8 0 art_heap8 4096 1 0 0 1 0 1 1 0 8 0 art_heap4 256 984 0 711 32 11 21 30 0 8 0 art_table 32 985 0 711 4 0 4 4 0 8 0 art_node 16 239 0 179 1 0 1 1 0 8 0 sysvmsgpl 40 5 0 0 1 0 1 1 0 8 0 semupl 112 2 0 2 1 1 0 1 0 8 0 semapl 112 327 0 317 1 0 1 1 0 8 0 shmpl 112 136 0 8 4 0 4 4 0 8 0 dirhash 1024 17 0 0 3 0 3 3 0 8 0 dino2pl 256 5556 0 4108 91 0 91 91 0 8 0 ffsino 272 5556 0 4108 97 0 97 97 0 8 0 nchpl 144 9880 0 8230 63 0 63 63 0 8 0 rtmask 32 3 0 3 1 1 0 1 0 8 0 uvmvnodes 80 5926 0 0 121 0 121 121 0 8 0 vnodes 216 5926 0 0 330 0 330 330 0 8 0 namei 1024 38665 0 38665 2 1 1 2 0 8 1 percpumem 16 137 0 97 1 0 1 1 0 8 0 vcpupl 2048 21 0 0 3 0 3 3 0 8 0 vmpool 568 21 0 0 2 0 2 2 0 8 0 pfiaddrpl 120 158 0 145 3 2 1 1 0 8 0 kstatmem 264 150 0 124 4 2 2 3 0 8 0 scsiplug 72 3 0 3 1 1 0 1 0 8 0 scxspl 216 27827 0 27827 11 10 1 8 0 8 1 plimitpl 152 288 0 272 1 0 1 1 0 8 0 sigapl 424 3437 0 3371 10 2 8 8 0 8 0 futexpl 64 28970 0 28969 1 0 1 1 0 8 0 knotepl 120 642 0 0 17 0 17 17 0 8 0 kqueuepl 216 691 0 683 17 13 4 5 0 8 3 pipepl 320 1450 0 1420 30 24 6 14 0 8 3 fdescpl 496 3397 0 3371 6 2 4 5 0 8 0 filepl 152 24913 0 24661 52 38 14 24 0 8 3 lockfpl 104 1184 0 1182 4 3 1 2 0 8 0 lockfspl 48 383 0 381 1 0 1 1 0 8 0 sessionpl 144 34 0 17 1 0 1 1 0 8 0 pgrppl 48 101 0 84 1 0 1 1 0 8 0 ucredpl 104 2554 0 2541 1 0 1 1 0 8 0 zombiepl 144 3372 0 3371 1 0 1 1 0 8 0 processpl 1064 3437 0 3371 5 0 5 5 0 8 0 procpl 672 8899 0 8813 14 5 9 10 0 8 0 srpgc 96 14 0 14 3 3 0 1 0 8 0 sosppl 168 12 0 12 3 3 0 1 0 8 0 sockpl 488 4596 0 4567 101 93 8 24 0 8 4 mcl64k 65536 18 0 0 3 0 3 3 0 8 0 mcl16k 16384 5 0 0 1 0 1 1 0 8 0 mcl12k 12288 15 0 0 2 0 2 2 0 8 0 mcl9k 9216 9 0 0 1 0 1 1 0 8 0 mcl8k 8192 15 0 0 2 0 2 2 0 8 0 mcl4k 4096 17 0 0 3 0 3 3 0 8 0 mcl2k2 2112 2 0 0 1 0 1 1 0 8 0 mcl2k 2048 437 0 0 54 0 54 54 0 8 0 mtagpl 96 494 0 0 12 0 12 12 0 8 0 mbufpl 256 728 0 0 41 0 41 41 0 8 0 bufpl 288 8867 0 2538 453 0 453 453 0 8 0 anonpl 24 640324 0 623866 170 51 119 140 0 186 2 amapchunkpl 152 68249 0 67544 56 22 34 43 0 158 0 amappl16 200 9228 0 8600 64 27 37 47 0 8 0 amappl15 192 973 0 965 1 0 1 1 0 8 0 amappl14 184 679 0 672 1 0 1 1 0 8 0 amappl13 176 437 0 434 1 0 1 1 0 8 0 amappl12 168 476 0 473 1 0 1 1 0 8 0 amappl11 160 182 0 161 1 0 1 1 0 8 0 amappl10 152 501 0 492 1 0 1 1 0 8 0 amappl9 144 666 0 660 1 0 1 1 0 8 0 amappl8 136 1121 0 1042 3 0 3 3 0 8 0 amappl7 128 477 0 452 1 0 1 1 0 8 0 amappl6 120 455 0 442 2 1 1 2 0 8 0 amappl5 112 2610 0 2594 1 0 1 1 0 8 0 amappl4 104 1587 0 1555 3 2 1 2 0 8 0 amappl3 96 10205 0 10156 3 1 2 2 0 8 0 amappl2 88 1082 0 1046 2 1 1 2 0 8 0 amappl1 80 85228 0 84597 21 5 16 20 0 8 0 amappl 88 19065 0 18876 5 0 5 5 0 92 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 253 0 253 1 1 0 1 0 8 0 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 138 0 8 3 0 3 3 0 8 0 uaddrrnd 24 3419 0 3372 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 3419 0 3372 1 0 1 1 0 8 0 vmmpekpl 168 33054 0 32988 4 0 4 4 0 8 0 vmmpepl 168 333888 0 331400 203 73 130 175 0 357 0 vmsppl 368 3418 0 3372 7 2 5 5 0 8 0 rwobjpl 56 88200 0 80460 119 8 111 113 0 8 0 pdppl 4096 6845 0 6765 281 193 88 90 0 8 8 pvpl 32 1331954 0 1312244 307 114 193 260 0 265 8 pmappl 248 3418 0 3372 5 1 4 4 0 8 0 extentpl 40 56 0 38 1 0 1 1 0 8 0 phpool 112 1137 0 259 26 0 26 26 0 8 0 ddb{0}> machine ddbcpu 0 Invalid cpu 0 ddb{0}> trace rc4_keysetup(ffff80002e529a9a,ffff80002e529bac,0) at rc4_keysetup+0xaf sys/crypto/arc4.c:41 pipex_mppe_init(ffff80002e529a60,74ad,5084,ffff800000cd566c,74ad) at pipex_mppe_init+0x212 sys/net/pipex.c:2319 pipex_init_session(ffff80002e577278,ffff800000cd5400) at pipex_init_session+0x5e1 pipex_session_init_mppe_recv sys/net/pipex.c:2327 [inline] pipex_init_session(ffff80002e577278,ffff800000cd5400) at pipex_init_session+0x5e1 sys/net/pipex.c:385 pppacioctl(4086334,82907003,ffff800000cd5400,1,ffff80002b499510) at pppacioctl+0x156 pppac_add_session sys/net/if_pppx.c:1315 [inline] pppacioctl(4086334,82907003,ffff800000cd5400,1,ffff80002b499510) at pppacioctl+0x156 sys/net/if_pppx.c:1165 VOP_IOCTL(fffffd807bdafcf8,82907003,ffff800000cd5400,1,fffffd807f7d76e8,ffff80002b499510) at VOP_IOCTL+0x96 sys/kern/vfs_vops.c:264 vn_ioctl(fffffd807680ee60,82907003,ffff800000cd5400,ffff80002b499510) at vn_ioctl+0xbc sys/kern/vfs_vnops.c:525 sys_ioctl(ffff80002b499510,ffff80002e5775c8,ffff80002e577610) at sys_ioctl+0x4a2 syscall(ffff80002e577690) at syscall+0x4c3 mi_syscall sys/sys/syscall_mi.h:101 [inline] syscall(ffff80002e577690) at syscall+0x4c3 sys/arch/amd64/amd64/trap.c:585 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xddcb44ecfc0, count: -9 ddb{0}> machine ddbcpu 1 Stopped at x86_ipi_db+0x1a: addq $0x8,%rsp ddb{1}> trace x86_ipi_db(ffff800020dd8ff0) at x86_ipi_db+0x1a sys/arch/amd64/amd64/db_interface.c:393 x86_ipi_handler() at x86_ipi_handler+0xb7 sys/arch/amd64/amd64/ipi.c:106 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x23 acpicpu_idle() at acpicpu_idle+0x312 sys/dev/acpi/acpicpu.c:1206 sched_idle(ffff800020dd8ff0) at sched_idle+0x417 sys/kern/kern_sched.c:175 end trace frame: 0x0, count: -5