LLLLkernel: protection fault trap, code=0 Stopped at done_flush+0x38: movl %eax,%dr6 ddb> ddb> set $lines = 0 ddb> set $maxwidth = 0 ddb> show panic the kernel did not panic ddb> trace done_flush() at done_flush+0x38 vm_run(ffff800033a175a0) at vm_run+0x163 vmmioctl(a00,c0205602,ffff800033a175a0,1,ffff80002a6f6000) at vmmioctl+0x299 sys/dev/vmm/vmm.c:242 VOP_IOCTL(fffffd8079ee9510,c0205602,ffff800033a175a0,1,fffffd807f7d7410,ffff80002a6f6000) at VOP_IOCTL+0x91 sys/kern/vfs_vops.c:264 vn_ioctl(fffffd8079b48ca8,c0205602,ffff800033a175a0,ffff80002a6f6000) at vn_ioctl+0xbb sys/kern/vfs_vnops.c:525 sys_ioctl(ffff80002a6f6000,ffff800033a176b0,ffff800033a17700) at sys_ioctl+0x49e syscall(ffff800033a17770) at syscall+0x543 sys/arch/amd64/amd64/trap.c:606 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x26173834560, count: -8 ddb> show registers rdi 0x6c14 __ALIGN_SIZE+0x5c14 rsi 0xffff800037835630 rbp 0xffff800033a172f0 rbx 0x756e6547 rdx 0x49656e69 rcx 0x6c65746e rax 0xfffffffffffffffc r8 0 r9 0x10000 __ALIGN_SIZE+0xf000 r10 0x3d66578421bc4cb6 r11 0xe2912b856aedf549 r12 0xffff8000378353a8 r13 0xffff800033a17226 r14 0xffff800037835000 r15 0x246 rip 0xffffffff8121cd3b done_flush+0x38 cs 0x8 rflags 0x10046 __ALIGN_SIZE+0xf046 rsp 0xffff800033a17156 ss 0x10 done_flush+0x38: movl %eax,%dr6 ddb> show proc PROC (syz-executor.2) tid=24205 pid=76438 tcnt=2 stat=onproc flags process=0 proc=4000000 runpri=32, usrpri=86, slppri=32, nice=20 wchan=0x0, wmesg=, ps_single=0x0 forw=0xffffffffffffffff, list=0xffff80002a6f62a8,0xffff800037831020 process=0xffff80002a6353c0 user=0xffff800033a12000, vmspace=0xfffffd8069c4e010 estcpu=36, cpticks=1, pctcpu=0.0, user=0, sys=1, intr=0 ddb> ps PID TID PPID UID S FLAGS WAIT COMMAND 25565 316765 70909 0 3 0x80 nanoslp syz-executor.1 25565 517949 70909 0 3 0x4000080 fsleep syz-executor.1 76438 149226 68239 0 2 0 syz-executor.2 *76438 24205 68239 0 7 0x4000000 syz-executor.2 56259 371120 73807 0 2 0 syz-executor.0 56259 355360 73807 0 3 0x4000080 ttyretype syz-executor.0 54355 506950 17561 0 3 0x80 nanoslp syz-executor.3 54355 345213 17561 0 3 0x4000080 wsevent_read syz-executor.3 54355 505230 17561 0 3 0x4000080 fsleep syz-executor.3 75608 149618 33907 0 2 0x2 syz-executor.5 70909 189668 33907 0 3 0x82 nanoslp syz-executor.1 71374 41108 33907 0 2 0x2 syz-executor.4 68239 106299 33907 0 3 0x82 nanoslp syz-executor.2 4710 40588 33907 0 2 0x2 syz-executor.7 55148 477300 33907 0 3 0x82 nanoslp syz-executor.6 44751 395955 0 0 3 0x14280 nfsidl nfsio 99 235701 0 0 3 0x14280 nfsidl nfsio 78449 443029 0 0 3 0x14280 nfsidl nfsio 50889 68957 0 0 3 0x14280 nfsidl nfsio 31489 31714 0 0 3 0x14280 nfsidl nfsio 63459 48260 0 0 3 0x14280 nfsidl nfsio 19240 92141 0 0 3 0x14280 nfsidl nfsio 39364 401729 0 0 3 0x14280 nfsidl nfsio 65516 2965 0 0 3 0x14280 nfsidl nfsio 47161 171056 0 0 3 0x14280 nfsidl nfsio 5088 195022 0 0 3 0x14280 nfsidl nfsio 54383 39655 0 0 3 0x14280 nfsidl nfsio 80215 141990 0 0 3 0x14280 nfsidl nfsio 47999 231471 0 0 3 0x14280 nfsidl nfsio 64229 65034 0 0 3 0x14280 nfsidl nfsio 25782 59420 0 0 3 0x14280 nfsidl nfsio 89884 135256 0 0 3 0x14280 nfsidl nfsio 93932 11392 0 0 3 0x14280 nfsidl nfsio 26074 173935 0 0 3 0x14280 nfsidl nfsio 20166 323303 0 0 3 0x14280 nfsidl nfsio 17561 143369 33907 0 3 0x82 nanoslp syz-executor.3 88827 18996 0 0 3 0x14200 bored sosplice 73807 334436 33907 0 3 0x82 nanoslp syz-executor.0 33907 15399 59649 0 3 0x2000082 thrsleep syz-fuzzer 33907 90851 59649 0 3 0x6000082 nanoslp syz-fuzzer 33907 89591 59649 0 3 0x6000082 thrsleep syz-fuzzer 33907 219425 59649 0 3 0x6000082 wait syz-fuzzer 33907 157134 59649 0 3 0x6000082 wait syz-fuzzer 33907 99774 59649 0 3 0x6000082 wait syz-fuzzer 33907 12273 59649 0 3 0x6000082 wait syz-fuzzer 33907 469326 59649 0 3 0x6000082 thrsleep syz-fuzzer 33907 171242 59649 0 3 0x6000082 kqread syz-fuzzer 33907 399772 59649 0 3 0x6000082 wait syz-fuzzer 33907 470507 59649 0 3 0x6000082 thrsleep syz-fuzzer 33907 257516 59649 0 3 0x6000082 wait syz-fuzzer 33907 449570 59649 0 3 0x6000082 wait syz-fuzzer 33907 13213 59649 0 3 0x6000082 wait syz-fuzzer 59649 430360 6234 0 3 0x10008a sigsusp ksh 6234 71911 24514 0 3 0x9a kqread sshd 70259 305536 1 0 3 0x100083 ttyin getty 24514 386693 1 0 3 0x88 kqread sshd 56976 497846 48536 73 3 0x1100090 kqread syslogd 48536 262770 1 0 3 0x100082 netio syslogd 10327 261899 1 0 3 0x100080 kqread resolvd 89153 450708 51447 77 3 0x100092 kqread dhcpleased 29990 104194 51447 77 3 0x100092 kqread dhcpleased 51447 56095 1 0 3 0x80 kqread dhcpleased 77620 85033 0 0 3 0x14200 bored smr 96407 123657 0 0 2 0x14200 zerothread 82688 8832 0 0 3 0x14200 aiodoned aiodoned 39441 251602 0 0 3 0x14200 syncer update 4844 194905 0 0 3 0x14200 cleaner cleaner 39632 137462 0 0 3 0x14200 reaper reaper 40535 361342 0 0 3 0x14200 pgdaemon pagedaemon 21223 240520 0 0 3 0x14200 bored viomb 56307 111195 0 0 3 0x40014200 acpi0 acpi0 47566 83516 0 0 3 0x14200 bored softnet3 56820 8595 0 0 3 0x14200 bored softnet2 5163 473954 0 0 3 0x14200 bored softnet1 18482 100458 0 0 3 0x14200 bored softnet0 91422 63756 0 0 3 0x14200 bored systqmp 6128 191386 0 0 3 0x14200 bored systq 27467 337780 0 0 3 0x40014200 tmoslp softclock 56513 235584 0 0 3 0x40014200 idle0 1 498354 0 0 3 0x82 wait init 0 0 -1 0 3 0x10200 scheduler swapper ddb> show all locks No such command ddb> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 10238 6456K 7238K 166960K 24536 0 pcb 13 18K 22K 166960K 274 0 rtable 193 14K 15K 166960K 843 0 pf 33 9K 9K 166960K 191 0 ifaddr 37 10K 12K 166960K 157 0 ifgroup 58 2K 2K 166960K 308 0 sysctl 4 1K 1K 166960K 6 0 counters 29 17K 17K 166960K 93 0 ioctlops 0 0K 2K 166960K 2669 0 iov 1 0K 24K 166960K 640 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1471 92K 92K 166960K 6767 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 2 1K 5K 166960K 42 0 VM map 2 1K 1K 166960K 2 0 sem 12 1K 1K 166960K 305 0 dirhash 12 2K 2K 166960K 33 0 ACPI 1697 195K 286K 166960K 12548 0 file desc 14 49K 77K 166960K 6847 0 sigio 0 0K 0K 166960K 20 0 proc 57 59K 83K 166960K 896 0 subproc 104 6K 6K 166960K 234 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 ip_moptions 0 0K 0K 166960K 400 0 in_multi 79 5K 7K 166960K 293 0 ether_multi 1 0K 0K 166960K 1 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 217 970K 970K 166960K 217 0 exec 0 0K 1K 166960K 931 0 tdb 3 0K 0K 166960K 3 0 pagedep 1 8K 8K 166960K 1 0 inodedep 1 32K 32K 166960K 1 0 newblk 1 0K 0K 166960K 1 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 369 141K 152K 166960K 64298 0 UVM aobj 131 4K 4K 166960K 132 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 ip6_options 0 0K 0K 166960K 134 0 NDP 16 0K 2K 166960K 123 0 temp 74 5920K 6000K 166960K 34095 0 kqueue 12 18K 24K 166960K 325 0 SYN cache 2 16K 16K 166960K 2 0 ddb> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle rtpcb 120 152 0 149 1 0 1 1 0 8 0 rtentry 112 273 0 188 4 0 4 4 0 8 1 unpcb 144 21999 0 21986 66 63 3 11 0 8 2 syncache 312 47 0 47 10 10 0 1 0 8 0 sackhl 24 1 0 1 1 1 0 1 0 8 0 tcpqe 32 188 0 188 8 8 0 1 0 8 0 tcpcb 808 628 0 618 15 13 2 9 0 8 0 arp 88 38 0 28 1 0 1 1 0 8 0 inpcb 336 3285 0 3273 67 57 10 18 0 8 8 nd6 104 73 0 54 1 0 1 1 0 8 0 pkpcb 40 8 0 8 2 2 0 1 0 8 0 kcovpl 48 18 0 10 1 0 1 1 0 8 0 ppxss 1160 18 0 18 7 7 0 1 0 8 0 art_heap8 4096 1 0 0 1 0 1 1 0 8 0 art_heap4 256 1235 0 795 35 6 29 31 0 8 1 art_table 32 1236 0 795 4 0 4 4 0 8 0 art_node 16 269 0 190 1 0 1 1 0 8 0 sysvmsgpl 40 40 0 0 1 0 1 1 0 8 0 semupl 112 3 0 3 1 1 0 1 0 8 0 semapl 112 296 0 286 1 0 1 1 0 8 0 shmpl 112 129 0 1 4 0 4 4 0 8 0 dirhash 1024 31 0 14 3 0 3 3 0 8 0 dino2pl 256 12240 0 10787 92 0 92 92 0 8 0 ffsino 240 12240 0 10787 86 0 86 86 0 8 0 nchpl 144 22783 0 22283 63 41 22 63 0 8 0 uvmvnodes 80 5926 0 0 121 0 121 121 0 8 0 vnodes 216 5926 0 0 330 0 330 330 0 8 0 namei 1024 74375 0 74375 4 3 1 3 0 8 1 vcpupl 2048 49 0 1 6 0 6 6 0 8 0 vmpool 664 55 0 7 4 0 4 4 0 8 0 kstatmem 264 154 0 128 2 0 2 2 0 8 0 scxspl 216 66204 0 66204 19 18 1 8 1 8 1 plimitpl 152 470 0 454 1 0 1 1 0 8 0 sigapl 424 7147 0 7084 8 0 8 8 0 8 0 futexpl 64 72610 0 72608 2 1 1 1 0 8 0 knotepl 120 60197 0 60113 5 1 4 5 0 8 0 kqueuepl 184 681 0 673 8 7 1 4 0 8 0 pipepl 288 1219 0 1191 30 27 3 11 0 8 0 fdescpl 432 7107 0 7082 6 2 4 4 0 8 0 filepl 120 57630 0 57386 72 59 13 20 0 8 5 lockfpl 104 2937 0 2935 5 4 1 3 0 8 0 lockfspl 48 1233 0 1231 2 1 1 2 0 8 0 sessionpl 144 33 0 17 1 0 1 1 0 8 0 pgrppl 48 45 0 29 1 0 1 1 0 8 0 ucredpl 104 5603 0 5589 1 0 1 1 0 8 0 zombiepl 144 7085 0 7084 1 0 1 1 0 8 0 processpl 1008 7147 0 7084 11 2 9 9 0 8 0 procpl 680 16969 0 16888 13 5 8 9 0 8 0 sosppl 168 32 0 32 4 3 1 1 0 8 1 sockpl 456 25453 0 25425 554 540 14 39 0 8 8 mcl64k 65536 319 0 319 9 8 1 1 0 8 1 mcl16k 16384 214 0 214 12 11 1 1 0 8 1 mcl12k 12288 762 0 762 5 4 1 1 0 8 1 mcl9k 9216 148 0 148 17 16 1 1 0 8 1 mcl8k 8192 349 0 349 8 7 1 1 0 8 1 mcl4k 4096 644 0 644 8 7 1 2 0 8 1 mcl2k2 2112 40 0 40 13 12 1 1 0 8 1 mcl2k 2048 81900 0 81851 41 33 8 30 0 8 1 mtagpl 96 1856 0 1834 14 4 10 12 0 8 8 mbufpl 256 195207 0 195044 191 158 33 89 0 8 8 bufpl 288 15829 0 9435 457 0 457 457 0 8 0 anonpl 24 817739 0 803918 193 92 101 156 0 188 0 amapchunkpl 152 205626 0 204817 86 53 33 65 0 158 0 amappl16 200 17604 0 17099 85 57 28 40 0 8 0 amappl15 192 21 0 21 1 1 0 1 0 8 0 amappl14 184 179 0 169 2 1 1 2 0 8 0 amappl13 176 19 0 18 1 0 1 1 0 8 0 amappl12 168 7874 0 7843 2 0 2 2 0 8 0 amappl11 160 51 0 40 1 0 1 1 0 8 0 amappl10 152 60 0 49 1 0 1 1 0 8 0 amappl9 144 236 0 234 1 0 1 1 0 8 0 amappl8 136 340 0 259 3 0 3 3 0 8 0 amappl7 128 192 0 166 2 0 2 2 0 8 0 amappl6 120 504 0 492 1 0 1 1 0 8 0 amappl5 112 218 0 210 1 0 1 1 0 8 0 amappl4 104 525 0 501 2 1 1 2 0 8 0 amappl3 96 41208 0 41127 4 1 3 3 0 8 0 amappl2 88 7758 0 7680 3 1 2 3 0 8 0 amappl1 80 33506 0 32998 22 10 12 22 0 8 0 amappl 88 63624 0 63404 6 0 6 6 0 92 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 253 0 253 1 1 0 1 0 8 0 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 131 0 1 3 0 3 3 0 8 0 uaddrrnd 24 7162 0 7089 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 7162 0 7089 1 0 1 1 0 8 0 vmmpekpl 168 50570 0 50491 4 0 4 4 0 8 0 vmmpepl 168 427784 0 425469 235 110 125 126 0 357 13 vmsppl 368 7161 0 7089 8 1 7 7 0 8 0 rwobjpl 24 108883 0 101280 49 1 48 48 0 8 0 pdppl 4096 14330 0 14226 363 252 111 112 0 8 7 pvpl 32 2142180 0 2122866 400 222 178 361 0 265 3 pmappl 216 7161 0 7089 5 0 5 5 0 8 0 extentpl 40 56 0 38 1 0 1 1 0 8 0 phpool 112 1462 0 600 27 1 26 27 0 8 0 ddb> machine ddbcpu 0 No such command ddb> trace done_flush() at done_flush+0x38 vm_run(ffff800033a175a0) at vm_run+0x163 vmmioctl(a00,c0205602,ffff800033a175a0,1,ffff80002a6f6000) at vmmioctl+0x299 sys/dev/vmm/vmm.c:242 VOP_IOCTL(fffffd8079ee9510,c0205602,ffff800033a175a0,1,fffffd807f7d7410,ffff80002a6f6000) at VOP_IOCTL+0x91 sys/kern/vfs_vops.c:264 vn_ioctl(fffffd8079b48ca8,c0205602,ffff800033a175a0,ffff80002a6f6000) at vn_ioctl+0xbb sys/kern/vfs_vnops.c:525 sys_ioctl(ffff80002a6f6000,ffff800033a176b0,ffff800033a17700) at sys_ioctl+0x49e syscall(ffff800033a17770) at syscall+0x543 sys/arch/amd64/amd64/trap.c:606 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x26173834560, count: -8 ddb> machine ddbcpu 1 No such command ddb> trace done_flush() at done_flush+0x38 vm_run(ffff800033a175a0) at vm_run+0x163 vmmioctl(a00,c0205602,ffff800033a175a0,1,ffff80002a6f6000) at vmmioctl+0x299 sys/dev/vmm/vmm.c:242 VOP_IOCTL(fffffd8079ee9510,c0205602,ffff800033a175a0,1,fffffd807f7d7410,ffff80002a6f6000) at VOP_IOCTL+0x91 sys/kern/vfs_vops.c:264 vn_ioctl(fffffd8079b48ca8,c0205602,ffff800033a175a0,ffff80002a6f6000) at vn_ioctl+0xbb sys/kern/vfs_vnops.c:525 sys_ioctl(ffff80002a6f6000,ffff800033a176b0,ffff800033a17700) at sys_ioctl+0x49e syscall(ffff800033a17770) at syscall+0x543 sys/arch/amd64/amd64/trap.c:606 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x26173834560, count: -8