kernel: protection fault trap, code=0 Stopped at __x86_indirect_thunk_r11+0x14: ret ddb> ddb> set $lines = 0 ddb> set $maxwidth = 0 ddb> show panic the kernel did not panic ddb> trace __x86_indirect_thunk_r11() at __x86_indirect_thunk_r11+0x14 softclock_thread(ffff80002a57cff0) at softclock_thread+0xc4 sys/kern/kern_timeout.c:814 end trace frame: 0x0, count: -2 ddb> show registers rdi 0xdeaf4152deaf4152 rsi 0 rbp 0xffff80002a589100 rbx 0 rdx 0 rcx 0xffffffff82d9b070 timeout_proc rax 0x9 r8 0xffffffffffffffff r9 0 r10 0xca9277b508fc725e r11 0xdeaf4152deaf4152 r12 0xdeaf4152deaf4152 r13 0xffffffff82d0aff0 cpu_info_full_primary+0x1ff0 r14 0xffff8000ffffee10 r15 0xdeaf4152deaf4152 rip 0xffffffff817ba314 __x86_indirect_thunk_r11+0x14 cs 0x8 rflags 0x10246 __ALIGN_SIZE+0xf246 rsp 0xffff80002a5890c0 ss 0x10 __x86_indirect_thunk_r11+0x14: ret ddb> show proc PROC (softclock) tid=295280 pid=56006 tcnt=1 stat=onproc flags process=14000 proc=40000200 runpri=50, usrpri=50, slppri=0, nice=20 wchan=0x0, wmesg=, ps_single=0x0 forw=0xffffffffffffffff, list=0xffff80002a57da90,0xffff80002a57cd58 process=0xffff8000ffffee10 user=0xffff80002a584000, vmspace=0xffffffff82d608a8 estcpu=0, cpticks=1, pctcpu=0.0, user=0, sys=1, intr=0 ddb> ps PID TID PPID UID S FLAGS WAIT COMMAND 67040 409142 60264 0 3 0x82 wait syz-executor.1 89520 335762 37039 0 3 0x100002 inode arp 20644 518537 60264 0 3 0x82 wait syz-executor.2 4902 381128 38079 0 3 0x100002 inode sh 46757 253447 60264 0 3 0x82 piperd syz-executor.0 37039 66543 3537 0 3 0x10008a sigsusp sh 25040 110798 60264 0 3 0x82 wait syz-executor.7 14390 440542 99901 0 3 0x10008a sigsusp sh 3537 122983 60264 0 3 0x82 wait syz-executor.5 99901 249658 60264 0 3 0x82 wait syz-executor.6 38079 408801 60264 0 3 0x82 wait syz-executor.3 92439 156878 0 0 3 0x14280 nfsidl nfsio 17878 426199 0 0 3 0x14280 nfsidl nfsio 60502 389582 0 0 3 0x14280 nfsidl nfsio 26598 118946 0 0 3 0x14280 nfsidl nfsio 24939 230687 0 0 3 0x14280 nfsidl nfsio 49403 429763 0 0 3 0x14280 nfsidl nfsio 21847 496606 0 0 3 0x14280 nfsidl nfsio 74537 108684 0 0 3 0x14280 nfsidl nfsio 13015 60897 0 0 3 0x14280 nfsidl nfsio 77076 34161 0 0 3 0x14280 nfsidl nfsio 66612 132083 0 0 3 0x14280 nfsidl nfsio 68232 256889 0 0 3 0x14280 nfsidl nfsio 54186 127839 0 0 3 0x14280 nfsidl nfsio 23803 381457 0 0 3 0x14280 nfsidl nfsio 98531 98349 0 0 3 0x14280 nfsidl nfsio 38164 320543 0 0 3 0x14280 nfsidl nfsio 29011 11850 0 0 3 0x14280 nfsidl nfsio 94378 519864 0 0 3 0x14280 nfsidl nfsio 6729 468071 0 0 3 0x14280 nfsidl nfsio 9881 513940 0 0 3 0x14280 nfsidl nfsio 12800 309804 1 0 3 0x100083 ttyin getty 94051 336891 0 0 3 0x14200 acct acct 43208 415588 0 0 3 0x14200 bored sosplice 60264 27052 78517 0 3 0x2000082 wait syz-fuzzer 60264 420474 78517 0 3 0x6000082 nanoslp syz-fuzzer 60264 271918 78517 0 3 0x6000082 wait syz-fuzzer 60264 426035 78517 0 3 0x6000082 wait syz-fuzzer 60264 469385 78517 0 3 0x6000082 wait syz-fuzzer 60264 368044 78517 0 3 0x6000002 biowait syz-fuzzer 60264 142828 78517 0 3 0x6000082 thrsleep syz-fuzzer 60264 427458 78517 0 3 0x6000082 thrsleep syz-fuzzer 60264 378054 78517 0 3 0x6000082 thrsleep syz-fuzzer 60264 220324 78517 0 3 0x6000082 thrsleep syz-fuzzer 60264 79033 78517 0 3 0x6000082 thrsleep syz-fuzzer 60264 385723 78517 0 3 0x6000082 wait syz-fuzzer 60264 397244 78517 0 3 0x6000082 wait syz-fuzzer 60264 499610 78517 0 3 0x6000082 thrsleep syz-fuzzer 60264 186565 78517 0 3 0x6000082 wait syz-fuzzer 78517 482460 51290 0 3 0x10008a sigsusp ksh 51290 56197 46494 0 3 0x9a kqread sshd 46494 424437 1 0 3 0x88 kqread sshd 64450 129027 84769 73 3 0x1100010 biowait syslogd 84769 56057 1 0 3 0x100082 netio syslogd 54365 476351 1 0 3 0x100080 kqread resolvd 66405 31770 8065 77 3 0x100092 kqread dhcpleased 68803 333643 8065 77 3 0x100092 kqread dhcpleased 8065 347944 1 0 3 0x80 kqread dhcpleased 92201 93387 0 0 3 0x14200 bored smr 52767 495833 0 0 2 0x14200 zerothread 57910 133936 0 0 3 0x14200 aiodoned aiodoned 59814 433037 0 0 3 0x14200 syncer update 25271 151088 0 0 3 0x14200 cleaner cleaner 20331 152971 0 0 2 0x14200 reaper 38212 117788 0 0 3 0x14200 pgdaemon pagedaemon 50812 103386 0 0 3 0x14200 bored viomb 81139 103609 0 0 3 0x40014200 acpi0 acpi0 13702 399908 0 0 3 0x14200 bored softnet3 98727 95853 0 0 3 0x14200 bored softnet2 95963 517184 0 0 3 0x14200 bored softnet1 17861 389841 0 0 3 0x14200 bored softnet0 89939 351216 0 0 3 0x14200 bored systqmp 27632 469976 0 0 3 0x14200 bored systq *56006 295280 0 0 7 0x40014200 softclock 25629 278013 0 0 3 0x40014200 idle0 1 22869 0 0 3 0x82 wait init 0 0 -1 0 3 0x10200 scheduler swapper ddb> show all locks No such command ddb> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 10204 6428K 7617K 166960K 32428 0 pcb 15 18K 20K 166960K 1603 0 rtable 158 13K 15K 166960K 3120 0 pf 29 8K 9K 166960K 456 0 ifaddr 32 10K 13K 166960K 401 0 ifgroup 50 2K 2K 166960K 747 0 sysctl 3 0K 0K 166960K 8 0 counters 30 17K 17K 166960K 209 0 ioctlops 0 0K 2K 166960K 671 0 iov 0 0K 32K 166960K 1334 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1572 98K 98K 166960K 8519 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 2 1K 9K 166960K 155 0 VM map 2 1K 1K 166960K 2 0 sem 10 1K 1K 166960K 10 0 dirhash 12 2K 2K 166960K 96 0 ACPI 1697 195K 286K 166960K 12548 0 file desc 13 45K 77K 166960K 12801 0 sigio 0 0K 0K 166960K 424 0 proc 58 59K 91K 166960K 2341 0 subproc 91 5K 7K 166960K 858 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 ip_moptions 0 0K 0K 166960K 658 0 in_multi 56 4K 7K 166960K 754 0 ether_multi 1 0K 0K 166960K 4 0 mrt 1 0K 0K 166960K 4 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 247 1102K 1102K 166960K 247 0 exec 0 0K 1K 166960K 2469 0 pfkey data 0 0K 0K 166960K 4 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 470 726K 740K 166960K 116506 0 UVM aobj 131 4K 4K 166960K 131 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 ip6_options 0 0K 0K 166960K 417 0 NDP 11 0K 2K 166960K 316 0 temp 70 6763K 7400K 166960K 166535 0 kqueue 12 18K 28K 166960K 796 0 SYN cache 2 192K 200K 166960K 4 0 ddb> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle rtpcb 120 890 0 886 5 2 3 3 0 8 2 rtentry 112 893 0 824 4 0 4 4 0 8 2 unpcb 144 10601 0 10588 16 7 9 10 0 8 8 syncache 336 126 0 126 2 1 1 1 0 8 1 tcpqe 32 263 0 263 2 1 1 1 0 8 1 tcpcb 808 4005 0 4000 24 15 9 15 0 8 8 arp 88 197 0 186 1 0 1 1 0 8 0 ipq 40 13 0 13 2 1 1 1 0 8 1 ipqe 40 169 0 169 2 1 1 1 0 8 1 inpcb 360 10549 0 10541 43 34 9 17 0 8 8 nd6 104 194 0 182 1 0 1 1 0 8 0 pkpcb 40 194 0 194 3 1 2 2 0 8 2 kcovpl 48 66 0 59 1 0 1 1 0 8 0 ppxss 1072 44 0 44 2 1 1 1 0 8 1 rttmr 136 1 0 1 1 0 1 1 0 8 1 pool(rttmr): free list modified: page 0xfffffd8067f83000; item ordinal 0; addr 0xfffffd8067f83ee0 (p 0xfffffd8067f83000); offset 0x10=0xffffffff art_heap8 4096 5 0 4 3 0 3 3 0 8 2 art_heap4 256 3210 0 2928 44 16 28 30 0 8 10 art_table 32 3215 0 2932 4 0 4 4 0 8 1 art_node 16 885 0 822 1 0 1 1 0 8 0 sysvmsgpl 40 40 0 6 1 0 1 1 0 8 0 semupl 112 6 0 6 1 1 0 1 0 8 0 semapl 112 8 0 0 1 0 1 1 0 8 0 shmpl 112 128 0 0 4 0 4 4 0 8 0 dirhash 1024 73 0 56 3 0 3 3 0 8 0 dino2pl 256 17969 0 16468 95 0 95 95 0 8 0 ffsino 240 17969 0 16468 89 0 89 89 0 8 0 nchpl 144 36482 0 34839 63 0 63 63 0 8 0 uvmvnodes 80 6043 0 0 124 0 124 124 0 8 0 vnodes 216 6043 0 0 336 0 336 336 0 8 0 namei 1024 122269 0 122266 3 1 2 2 0 8 1 vcpupl 2048 342 0 0 43 0 43 43 0 8 0 vmpool 664 353 0 11 29 0 29 29 0 8 0 kstatmem 264 380 0 358 2 0 2 2 0 8 0 scxspl 216 106167 0 106164 11 7 4 8 1 8 3 plimitpl 152 1390 0 1375 1 0 1 1 0 8 0 sigapl 424 13276 0 13210 8 0 8 8 0 8 0 futexpl 64 133886 0 133886 1 0 1 1 0 8 1 knotepl 120 109899 0 109817 19 8 11 18 0 8 8 kqueuepl 184 2367 0 2359 7 3 4 4 0 8 3 pipepl 288 2012 0 1987 11 4 7 7 0 8 5 fdescpl 432 12958 0 12934 4 0 4 4 0 8 1 filepl 120 78223 0 78008 22 7 15 18 0 8 8 lockfpl 104 3560 0 3558 3 1 2 2 0 8 1 lockfspl 48 1107 0 1105 1 0 1 1 0 8 0 sessionpl 144 86 0 71 1 0 1 1 0 8 0 pgrppl 48 448 0 433 1 0 1 1 0 8 0 ucredpl 104 11950 0 11939 1 0 1 1 0 8 0 zombiepl 144 13214 0 13210 1 0 1 1 0 8 0 processpl 1072 13276 0 13210 5 0 5 5 0 8 0 procpl 680 31042 0 30961 9 0 9 9 0 8 1 sosppl 168 179 0 179 1 0 1 1 0 8 1 sockpl 488 22241 0 22216 358 347 11 39 0 8 7 mcl64k 65536 471 0 471 2 1 1 1 0 8 1 mcl16k 16384 257 0 257 2 1 1 1 0 8 1 mcl12k 12288 465 0 465 2 1 1 1 0 8 1 mcl9k 9216 222 0 222 2 1 1 1 0 8 1 mcl8k 8192 1002 0 1002 2 1 1 1 0 8 1 mcl4k 4096 1907 0 1907 3 2 1 2 0 8 1 mcl2k2 2112 147 0 147 2 1 1 1 0 8 1 mcl2k 2048 108533 0 108489 39 25 14 29 0 8 8 mtagpl 96 2103 0 2103 12 4 8 12 0 8 8 mbufpl 256 324113 0 323953 154 130 24 75 0 8 8 bufpl 280 29553 0 23158 457 0 457 457 0 8 0 anonpl 24 1248930 0 1224200 186 22 164 164 0 188 15 amapchunkpl 152 366770 0 365197 72 6 66 66 0 158 5 amappl16 200 23795 0 23355 53 18 35 37 0 8 8 amappl15 192 82 0 80 1 0 1 1 0 8 0 amappl14 184 334 0 321 2 1 1 2 0 8 0 amappl13 176 33 0 32 1 0 1 1 0 8 0 amappl12 168 14433 0 14400 2 0 2 2 0 8 0 amappl11 160 56 0 46 1 0 1 1 0 8 0 amappl10 152 90 0 80 1 0 1 1 0 8 0 amappl9 144 225 0 224 1 0 1 1 0 8 0 amappl8 136 600 0 513 4 0 4 4 0 8 0 amappl7 128 323 0 297 2 0 2 2 0 8 0 amappl6 120 1135 0 1115 1 0 1 1 0 8 0 amappl5 112 349 0 341 1 0 1 1 0 8 0 amappl4 104 893 0 867 2 1 1 2 0 8 0 amappl3 96 72828 0 72735 3 0 3 3 0 8 0 amappl2 88 14160 0 14085 3 1 2 3 0 8 0 amappl1 80 58607 0 58077 22 10 12 22 0 8 0 amappl 88 115222 0 114963 7 0 7 7 0 92 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 253 0 253 1 1 0 1 0 8 0 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 130 0 0 3 0 3 3 0 8 0 uaddrrnd 24 13311 0 12942 3 0 3 3 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 13311 0 12942 3 0 3 3 0 8 0 vmmpekpl 168 84533 0 84437 5 0 5 5 0 8 0 vmmpepl 168 777879 0 775158 185 32 153 153 0 357 16 vmsppl 352 13310 0 12941 34 0 34 34 0 8 0 rwobjpl 24 181163 0 173412 48 0 48 48 0 8 0 pdppl 4096 26628 0 26224 927 521 406 406 0 8 2 pvpl 32 3443912 0 3416654 471 173 298 335 0 265 41 pmappl 216 13310 0 12941 21 0 21 21 0 8 0 extentpl 40 56 0 38 1 0 1 1 0 8 0 phpool 112 1458 0 720 22 0 22 22 0 8 0 ddb> machine ddbcpu 0 No such command ddb> trace __x86_indirect_thunk_r11() at __x86_indirect_thunk_r11+0x14 softclock_thread(ffff80002a57cff0) at softclock_thread+0xc4 sys/kern/kern_timeout.c:814 end trace frame: 0x0, count: -2 ddb> machine ddbcpu 1 No such command ddb> trace __x86_indirect_thunk_r11() at __x86_indirect_thunk_r11+0x14 softclock_thread(ffff80002a57cff0) at softclock_thread+0xc4 sys/kern/kern_timeout.c:814 end trace frame: 0x0, count: -2