kernel: protection fault trap, code=0 Stopped at ktrops+0x4e: movq 0x8(%rbx),%r14 ddb> ddb> set $lines = 0 ddb> set $maxwidth = 0 ddb> show panic the kernel did not panic ddb> trace ktrops(ffff8000fffedb58,deaf4152deaf4152,0,8000190a,fffffd806d1d3448,fffffd807f7d77b8) at ktrops+0x4e ktrcanset sys/kern/kern_ktrace.c:700 [inline] ktrops(ffff8000fffedb58,deaf4152deaf4152,0,8000190a,fffffd806d1d3448,fffffd807f7d77b8) at ktrops+0x4e sys/kern/kern_ktrace.c:543 doktrace(fffffd806d1d3448,4,190a,0,ffff8000fffedb58) at doktrace+0x524 ktrsetchildren sys/kern/kern_ktrace.c:568 [inline] doktrace(fffffd806d1d3448,4,190a,0,ffff8000fffedb58) at doktrace+0x524 sys/kern/kern_ktrace.c:490 sys_ktrace(ffff8000fffedb58,ffff8000216f21a0,ffff8000216f21f0) at sys_ktrace+0xd6 sys/kern/kern_ktrace.c:531 syscall(ffff8000216f2270) at syscall+0x4a8 sys/arch/amd64/amd64/trap.c:623 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7e9c29d6e210, count: -5 ddb> show registers rdi 0xffff8000fffedb58 rsi 0xdeaf4152deaf4152 rbp 0xffff8000216f1f90 rbx 0xdeaf4152deaf4152 rdx 0 rcx 0x8000190a __kernel_virt_to_phys+0x190a rax 0x1 r8 0xfffffd806d1d3448 r9 0xfffffd807f7d77b8 r10 0x9befbb44b771e938 r11 0xcdff19379ddebce2 r12 0xdeaf4152deaf4152 r13 0xfffffd807f7d77b8 r14 0xffff8000fffedb58 r15 0x8000190a __kernel_virt_to_phys+0x190a rip 0xffffffff81da25ce ktrops+0x4e cs 0x8 rflags 0x10246 __ALIGN_SIZE+0xf246 rsp 0xffff8000216f1f10 ss 0x10 ktrops+0x4e: movq 0x8(%rbx),%r14 ddb> show proc PROC (syz-executor3188834491) pid=132094 stat=onproc flags process=0 proc=0 pri=17, usrpri=86, nice=20 forw=0xffffffffffffffff, list=0xffff8000ffff02d8,0xffff8000fffec5a8 process=0xffff8000fffefb90 user=0xffff8000216ed000, vmspace=0xfffffd806f304458 estcpu=36, cpticks=1, pctcpu=0.0 user=0, sys=1, intr=0 ddb> ps PID TID PPID UID S FLAGS WAIT COMMAND 69042 259778 68770 0 2 0 syz-executor3188834491 *27193 132094 94281 0 7 0 syz-executor3188834491 2455 87601 88212 0 2 0 syz-executor3188834491 94843 273024 88212 0 3 0x80 nanoslp syz-executor3188834491 68770 387600 88212 0 3 0x80 nanoslp syz-executor3188834491 94281 258342 88212 0 3 0x80 nanoslp syz-executor3188834491 8864 120512 88212 0 3 0x80 nanoslp syz-executor3188834491 47743 30812 88212 0 2 0 syz-executor3188834491 94509 125261 88212 0 2 0x480 syz-executor3188834491 66509 418134 88212 0 2 0 syz-executor3188834491 88212 388824 28287 0 3 0x82 nanoslp syz-executor3188834491 28287 52464 60853 0 3 0x10008a sigsusp ksh 60853 177678 74426 0 2 0x12 sshd 77122 145075 1 0 3 0x100083 ttyin getty 74426 359773 1 0 3 0x88 kqread sshd 23839 101978 39402 73 3 0x1100090 kqread syslogd 39402 41232 1 0 3 0x100082 netio syslogd 33619 164263 1 0 3 0x100080 kqread resolvd 64581 517107 45854 77 3 0x100092 kqread dhcpleased 45221 359943 45854 77 3 0x100092 kqread dhcpleased 45854 154114 1 0 3 0x80 kqread dhcpleased 72613 378661 0 0 3 0x14200 bored smr 5391 237808 0 0 2 0x14200 zerothread 57221 398182 0 0 3 0x14200 aiodoned aiodoned 56867 447522 0 0 3 0x14200 syncer update 39094 373170 0 0 3 0x14200 cleaner cleaner 93705 397564 0 0 3 0x14200 reaper reaper 55109 4841 0 0 3 0x14200 pgdaemon pagedaemon 27373 352397 0 0 3 0x14200 bored viomb 22886 78848 0 0 3 0x40014200 acpi0 acpi0 10305 86931 0 0 3 0x14200 bored softnet3 40982 145729 0 0 3 0x14200 bored softnet2 68724 76531 0 0 3 0x14200 bored softnet1 71491 131 0 0 3 0x14200 bored softnet0 94524 521082 0 0 3 0x14200 bored systqmp 3711 101820 0 0 3 0x14200 bored systq 85752 77031 0 0 3 0x40014200 bored softclock 62518 166617 0 0 3 0x40014200 idle0 1 258930 0 0 3 0x82 wait init 0 0 -1 0 3 0x10200 scheduler swapper ddb> show all locks No such command ddb> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 10133 6381K 6412K 78643K 11211 0 pcb 13 8K 8K 78643K 13 0 rtable 58 1K 2K 78643K 110 0 pf 12 6K 6K 78643K 12 0 ifaddr 11 5K 5K 78643K 11 0 ifgroup 17 1K 1K 78643K 17 0 counters 20 16K 16K 78643K 20 0 ioctlops 0 0K 2K 78643K 21 0 mount 1 1K 1K 78643K 1 0 log 0 0K 0K 78643K 4 0 vnodes 1174 73K 74K 78643K 1187 0 UFS quota 1 32K 32K 78643K 1 0 UFS mount 5 36K 36K 78643K 5 0 shm 2 1K 1K 78643K 2 0 VM map 2 1K 1K 78643K 2 0 sem 2 0K 0K 78643K 2 0 dirhash 12 2K 2K 78643K 12 0 ACPI 1697 195K 286K 78643K 12548 0 file desc 1 0K 0K 78643K 1 0 proc 55 58K 59K 78643K 246 0 NFS srvsock 1 0K 0K 78643K 1 0 NFS daemon 1 16K 16K 78643K 1 0 in_multi 11 0K 0K 78643K 11 0 ether_multi 1 0K 0K 78643K 1 0 ISOFS mount 1 32K 32K 78643K 1 0 MSDOSFS mount 1 16K 16K 78643K 1 0 ttys 25 122K 122K 78643K 25 0 exec 0 0K 1K 78643K 243 0 tdb 3 0K 0K 78643K 3 0 pagedep 1 8K 8K 78643K 1 0 inodedep 1 32K 32K 78643K 1 0 newblk 1 0K 0K 78643K 1 0 VM swap 8 62K 64K 78643K 10 0 UVM amap 110 5K 5K 78643K 2465 0 UVM aobj 3 2K 2K 78643K 3 0 memdesc 1 4K 4K 78643K 1 0 crypto data 1 1K 1K 78643K 1 0 NDP 3 0K 0K 78643K 3 0 temp 1 5840K 5904K 78643K 3610 0 kqueue 11 16K 18K 78643K 24 0 SYN cache 2 16K 16K 78643K 2 0 ddb> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle rtpcb 120 20 0 17 1 0 1 1 0 8 0 rtentry 112 23 0 1 1 0 1 1 0 8 0 unpcb 144 33 0 20 1 0 1 1 0 8 0 syncache 296 5 0 5 2 1 1 1 0 8 1 tcpqe 32 75 0 75 1 1 0 1 0 8 0 tcpcb 808 8 0 5 1 0 1 1 0 8 0 arp 88 2 0 0 1 0 1 1 0 8 0 inpcb 336 26 0 20 1 0 1 1 0 8 0 art_heap8 4096 1 0 0 1 0 1 1 0 8 0 art_heap4 256 97 0 0 7 0 7 7 0 8 0 art_table 32 98 0 0 1 0 1 1 0 8 0 art_node 16 22 0 2 1 0 1 1 0 8 0 dirhash 1024 17 0 0 3 0 3 3 0 8 0 dino2pl 256 1904 0 422 93 0 93 93 0 8 0 ffsino 240 1904 0 422 88 0 88 88 0 8 0 nchpl 144 2560 0 973 59 0 59 59 0 8 0 uvmvnodes 80 1913 0 0 40 0 40 40 0 8 0 vnodes 216 1913 0 0 107 0 107 107 0 8 0 namei 1024 6383 0 6382 3 1 2 2 0 8 1 kstatmem 264 6 0 0 1 0 1 1 0 8 0 scxspl 216 7088 0 7088 14 13 1 8 0 8 1 plimitpl 152 16 0 10 1 0 1 1 0 8 0 sigapl 424 553 0 511 6 0 6 6 0 8 0 knotepl 120 5198 0 5168 3 1 2 2 0 8 1 kqueuepl 184 20 0 13 1 0 1 1 0 8 0 pipepl 288 87 0 84 2 1 1 1 0 8 0 fdescpl 432 537 0 514 3 0 3 3 0 8 0 filepl 120 1594 0 1536 2 0 2 2 0 8 0 lockfpl 104 6 0 4 1 0 1 1 0 8 0 lockfspl 48 4 0 2 1 0 1 1 0 8 0 sessionpl 144 17 0 9 1 0 1 1 0 8 0 pgrppl 48 17 0 9 1 0 1 1 0 8 0 ucredpl 104 66 0 56 1 0 1 1 0 8 0 zombiepl 144 514 0 511 2 1 1 1 0 8 0 processpl 1008 553 0 511 7 1 6 6 0 8 0 procpl 696 553 0 511 6 1 5 5 0 8 0 sockpl 456 79 0 57 3 0 3 3 0 8 0 mcl8k 8192 9 0 9 2 1 1 1 0 8 1 mcl4k 4096 5 0 5 2 1 1 1 0 8 1 mcl2k 2048 10947 0 10910 29 21 8 26 0 8 3 mtagpl 96 4 0 4 1 1 0 1 0 8 0 mbufpl 256 18247 0 18205 14 8 6 14 0 8 1 bufpl 288 2880 0 92 200 0 200 200 0 8 0 anonpl 24 178091 0 176084 25 12 13 24 0 188 0 amapchunkpl 152 8439 0 8237 9 1 8 8 0 158 0 amappl16 200 5385 0 5375 6 5 1 5 0 8 0 amappl15 192 44 0 43 1 0 1 1 0 8 0 amappl14 184 104 0 95 1 0 1 1 0 8 0 amappl13 176 11 0 11 1 1 0 1 0 8 0 amappl12 168 794 0 774 1 0 1 1 0 8 0 amappl11 160 56 0 45 1 0 1 1 0 8 0 amappl10 152 18 0 18 2 1 1 1 0 8 1 amappl9 144 103 0 103 1 1 0 1 0 8 0 amappl8 136 78 0 76 1 0 1 1 0 8 0 amappl7 128 60 0 55 1 0 1 1 0 8 0 amappl6 120 151 0 140 1 0 1 1 0 8 0 amappl5 112 80 0 74 1 0 1 1 0 8 0 amappl4 104 433 0 405 1 0 1 1 0 8 0 amappl3 96 2537 0 2483 2 0 2 2 0 8 0 amappl2 88 459 0 421 2 1 1 2 0 8 0 amappl1 80 9930 0 9468 15 4 11 11 0 8 0 amappl 88 2197 0 2124 2 0 2 2 0 92 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 253 0 253 1 1 0 1 0 8 0 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 2 0 0 1 0 1 1 0 8 0 uaddrrnd 24 537 0 514 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 537 0 514 1 0 1 1 0 8 0 vmmpekpl 168 7470 0 7456 1 0 1 1 0 8 0 vmmpepl 168 39962 0 38811 62 8 54 54 0 357 2 vmsppl 368 536 0 514 3 0 3 3 0 8 0 rwobjpl 24 19335 0 16749 17 1 16 16 0 8 0 pdppl 4096 1080 0 1028 80 22 58 58 0 8 6 pvpl 32 282202 0 277590 61 23 38 52 0 265 0 pmappl 216 536 0 514 2 0 2 2 0 8 0 extentpl 40 56 0 38 1 0 1 1 0 8 0 phpool 112 532 0 57 14 0 14 14 0 8 0 ddb> machine ddbcpu 0 No such command ddb> trace ktrops(ffff8000fffedb58,deaf4152deaf4152,0,8000190a,fffffd806d1d3448,fffffd807f7d77b8) at ktrops+0x4e ktrcanset sys/kern/kern_ktrace.c:700 [inline] ktrops(ffff8000fffedb58,deaf4152deaf4152,0,8000190a,fffffd806d1d3448,fffffd807f7d77b8) at ktrops+0x4e sys/kern/kern_ktrace.c:543 doktrace(fffffd806d1d3448,4,190a,0,ffff8000fffedb58) at doktrace+0x524 ktrsetchildren sys/kern/kern_ktrace.c:568 [inline] doktrace(fffffd806d1d3448,4,190a,0,ffff8000fffedb58) at doktrace+0x524 sys/kern/kern_ktrace.c:490 sys_ktrace(ffff8000fffedb58,ffff8000216f21a0,ffff8000216f21f0) at sys_ktrace+0xd6 sys/kern/kern_ktrace.c:531 syscall(ffff8000216f2270) at syscall+0x4a8 sys/arch/amd64/amd64/trap.c:623 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7e9c29d6e210, count: -5 ddb> machine ddbcpu 1 No such command ddb> trace ktrops(ffff8000fffedb58,deaf4152deaf4152,0,8000190a,fffffd806d1d3448,fffffd807f7d77b8) at ktrops+0x4e ktrcanset sys/kern/kern_ktrace.c:700 [inline] ktrops(ffff8000fffedb58,deaf4152deaf4152,0,8000190a,fffffd806d1d3448,fffffd807f7d77b8) at ktrops+0x4e sys/kern/kern_ktrace.c:543 doktrace(fffffd806d1d3448,4,190a,0,ffff8000fffedb58) at doktrace+0x524 ktrsetchildren sys/kern/kern_ktrace.c:568 [inline] doktrace(fffffd806d1d3448,4,190a,0,ffff8000fffedb58) at doktrace+0x524 sys/kern/kern_ktrace.c:490 sys_ktrace(ffff8000fffedb58,ffff8000216f21a0,ffff8000216f21f0) at sys_ktrace+0xd6 sys/kern/kern_ktrace.c:531 syscall(ffff8000216f2270) at syscall+0x4a8 sys/arch/amd64/amd64/trap.c:623 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7e9c29d6e210, count: -5