panic: Bad link elm ADDR next->prev != elm (2)
8 views
Skip to first unread message
syzbot
Jan 23, 2020, 11:29:13 AM1/23/20
to syzkaller-f...@googlegroups.com
Hello,
syzbot found the following crash on:
HEAD commit: 0c28589a vmxnet3: add support for RSS kernel option
git tree: freebsd
console output: https://syzkaller.appspot.com/x/log.txt?x=155b7369e00000
dashboard link: https://syzkaller.appspot.com/bug?extid=2b4eab66d748b01f26a0
userspace arch: i386
Unfortunately, I don't have any reproducer for this crash yet.
IMPORTANT: if you fix the bug, please add the following tag to the commit:
Reported-by: syzbot+2b4eab...@syzkaller.appspotmail.com
panic: Bad link elm 0xfffff8003ae78000 next->prev != elm
cpuid = 1
time = 1579796900
KDB: stack backtrace:
db_trace_self_wrapper() at db_trace_self_wrapper+0x47/frame 0xfffffe00244a1650
vpanic() at vpanic+0x1ce/frame 0xfffffe00244a16c0
panic() at panic+0x43/frame 0xfffffe00244a1720
sctp_inpcb_free() at sctp_inpcb_free+0x1749/frame 0xfffffe00244a1790
sctp_close() at sctp_close+0x12f/frame 0xfffffe00244a17c0
soclose() at soclose+0x23e/frame 0xfffffe00244a1850
_fdrop() at _fdrop+0x38/frame 0xfffffe00244a1880
closef() at closef+0x2c6/frame 0xfffffe00244a1910
fdescfree_fds() at fdescfree_fds+0xa4/frame 0xfffffe00244a1960
fdescfree() at fdescfree+0x60f/frame 0xfffffe00244a1a30
exit1() at exit1+0x765/frame 0xfffffe00244a1aa0
sys_sys_exit() at sys_sys_exit+0xd/frame 0xfffffe00244a1ab0
ia32_syscall() at ia32_syscall+0x48c/frame 0xfffffe00244a1bf0
int0x80_syscall_common() at int0x80_syscall_common+0x9c
KDB: enter: panic
[ thread pid 2104 tid 100100 ]
Stopped at kdb_enter+0x67: movq $0,0x1466d26(%rip)
db>
db> set $lines = 0
db> set $maxwidth = 0
db> show registers
cs 0x20
ds 0x3b ll+0x1a
es 0x3b ll+0x1a
fs 0x13
gs 0x1b
ss 0
rax 0x12
rcx 0xffffffff810ba280 vprintf+0x140
rdx 0x1
rbx 0
rsp 0xfffffe00244a1630
rbp 0xfffffe00244a1650
rsi 0
rdi 0xffffffff810ba2b6 vprintf+0x176
r8 0
r9 0xffffffff
r10 0
r11 0xfffff8003ad334f0
r12 0xffffffff82068d90 ddb_dbbe
r13 0
r14 0xffffffff8193773f
r15 0xffffffff8193773f
rip 0xffffffff810af377 kdb_enter+0x67
rflags 0x200086 kernphys+0x86
kdb_enter+0x67: movq $0,0x1466d26(%rip)
db> show proc
Process 2104 (syz-executor.2) at 0xfffff8003a34ca60:
state: NORMAL
uid: 0 gids: 0, 0, 5
parent: pid 778 at 0xfffff8003a5c4a60
ABI: FreeBSD ELF32
arguments: /root/syz-executor.2
reaper: 0xfffff800032fa530 reapsubtree: 1
sigparent: 20
vmspace: 0xfffff8003a3fa000
(map 0xfffff8003a3fa000)
(map.pmap 0xfffff8003a3fa0c0)
(pmap 0xfffff8003a3fa120)
threads: 1
100100 Run CPU 1 syz-executor.2
db> ps
pid ppid pgrp uid state wmesg wchan cmd
2106 784 784 0 S (threaded) syz-executor.3
100271 S nanslp 0xffffffff824feca0 syz-executor.3
100991 S connec 0xfffff80003e89800 syz-executor.3
100995 S connec 0xfffff80003e84800 syz-executor.3
100998 S connec 0xfffff80003e87478 syz-executor.3
100999 S uwait 0xfffff80003a5c980 syz-executor.3
2105 768 768 0 S (threaded) syz-executor.0
100455 S nanslp 0xffffffff824feca1 syz-executor.0
100992 S connec 0xfffff80003e840f0 syz-executor.0
100997 S uwait 0xfffff8003af03080 syz-executor.0
2104 778 778 0 RE CPU 1 syz-executor.2
1625 1618 1625 0 Ss select 0xfffff8003a3a3140 dhclient
1622 1 1622 0 Ss select 0xfffff8003a3a3040 dhclient
1618 1607 422 65 S select 0xfffff80003f366c0 dhclient
1607 422 422 0 S wait 0xfffff8003600d000 sh
784 766 784 0 Ss nanslp 0xffffffff824feca1 syz-executor.3
778 766 778 0 Ss nanslp 0xffffffff824feca1 syz-executor.2
769 766 769 0 Ss piperd 0xfffff80003da68e8 syz-executor.1
768 766 768 0 Ss nanslp 0xffffffff824feca0 syz-executor.0
766 764 764 0 S (threaded) syz-fuzzer
100103 S uwait 0xfffff80003a5a180 syz-fuzzer
100104 S uwait 0xfffff80003ce4100 syz-fuzzer
100105 S uwait 0xfffff80003ce4200 syz-fuzzer
100106 S uwait 0xfffff80003ce4300 syz-fuzzer
100107 S uwait 0xfffff80003ce4400 syz-fuzzer
100108 S kqread 0xfffff80003b3d000 syz-fuzzer
100109 S uwait 0xfffff80003ce3b80 syz-fuzzer
100110 S uwait 0xfffff80003ce3c80 syz-fuzzer
100111 S uwait 0xfffff80003a5a280 syz-fuzzer
100113 S uwait 0xfffff80003ce3d80 syz-fuzzer
100114 S uwait 0xfffff80003ce3e80 syz-fuzzer
764 762 764 0 Ss pause 0xfffff8003a34c0a8 csh
762 680 762 0 Ss select 0xfffff8003a3a3dc0 sshd
746 1 746 0 Ss+ ttyin 0xfffff800033f7cb0 getty
745 1 745 0 Ss+ ttyin 0xfffff800033f8cb0 getty
744 1 744 0 Ss+ ttyin 0xfffff80003ac20b0 getty
743 1 743 0 Ss+ ttyin 0xfffff80003ac24b0 getty
742 1 742 0 Ss+ ttyin 0xfffff80003ac28b0 getty
741 1 741 0 Ss+ ttyin 0xfffff80003ac2cb0 getty
740 1 740 0 Ss+ ttyin 0xfffff80003ac30b0 getty
739 1 739 0 Ss+ ttyin 0xfffff80003ac34b0 getty
738 1 738 0 Ss+ ttyin 0xfffff80003ac38b0 getty
684 1 684 0 Ss nanslp 0xffffffff824feca1 cron
680 1 680 0 Ss select 0xfffff8003a3700c0 sshd
493 1 493 0 Ss select 0xfffff8003a268ac0 syslogd
422 1 422 0 Ss wait 0xfffff80003e33a60 devd
421 1 421 65 Ss select 0xfffff8003a268b40 dhclient
336 1 336 0 Ss select 0xfffff8003a268c40 dhclient
333 1 333 0 Ss select 0xfffff8003a3701c0 dhclient
21 0 0 0 DL vlruwt 0xfffff80003b01a60 [vnlru]
20 0 0 0 DL syncer 0xffffffff825d5118 [syncer]
19 0 0 0 DL (threaded) [bufdaemon]
100065 D qsleep 0xffffffff825d4618 [bufdaemon]
100070 D - 0xffffffff8200a980 [bufspacedaemon-0]
100082 D sdflush 0xfffff80003d058e8 [/ worker]
18 0 0 0 DL psleep 0xffffffff825f0088 [vmdaemon]
17 0 0 0 DL (threaded) [pagedaemon]
100063 D psleep 0xffffffff8261cfd8 [dom0]
100068 D launds 0xffffffff8261cfe4 [laundry: dom0]
100069 D umarcl 0xffffffff8153d760 [uma]
16 0 0 0 DL - 0xffffffff82359530 [rand_harvestq]
15 0 0 0 DL waiting 0xffffffff826625a0 [sctp_iterator]
9 0 0 0 DL - 0xffffffff825d401c [soaiod4]
8 0 0 0 DL - 0xffffffff825d401c [soaiod3]
7 0 0 0 DL - 0xffffffff825d401c [soaiod2]
6 0 0 0 DL - 0xffffffff825d401c [soaiod1]
5 0 0 0 DL (threaded) [cam]
100031 D - 0xffffffff82234940 [doneq0]
100062 D - 0xffffffff82234808 [scanner]
4 0 0 0 DL crypto_ 0xfffff800031f8e90 [crypto returns 1]
3 0 0 0 DL crypto_ 0xfffff800031f8e30 [crypto returns 0]
2 0 0 0 DL crypto_ 0xffffffff825ea0f8 [crypto]
14 0 0 0 DL seqstat 0xfffff80003362888 [sequencer 00]
13 0 0 0 DL (threaded) [geom]
100022 D - 0xffffffff8261b608 [g_event]
100023 D - 0xffffffff8261b618 [g_up]
100024 D - 0xffffffff8261b610 [g_down]
12 0 0 0 WL (threaded) [intr]
100006 I [swi5: fast taskq]
100010 I [swi6: task queue]
100011 I [swi6: Giant taskq]
100017 I [swi3: vm]
100018 I [swi4: clock (0)]
100019 I [swi4: clock (1)]
100020 I [swi1: netisr 0]
100032 I [irq24: virtio_pci0]
100033 I [irq25: virtio_pci0]
100034 I [irq26: virtio_pci0]
100035 I [irq27: virtio_pci0]
100036 I [irq28: virtio_pci1]
100037 I [irq29: virtio_pci1]
100038 I [irq30: virtio_pci1]
100039 I [irq31: virtio_pci1]
100040 I [irq32: virtio_pci1]
100045 I [irq10: virtio_pci2]
100047 I [irq1: atkbd0]
100048 I [irq12: psm0]
100049 I [swi0: uart uart++]
11 0 0 0 RL (threaded) [idle]
100003 Run CPU 0 [idle: cpu0]
100004 CanRun [idle: cpu1]
1 0 1 0 SLs wait 0xfffff800032fa530 [init]
10 0 0 0 DL audit_w 0xffffffff82663230 [audit]
0 0 0 0 DLs (threaded) [kernel]
100000 D swapin 0xffffffff82609bf8 [swapper]
100005 D - 0xfffff8000333d000 [thread taskq]
100007 D - 0xfffff8000333cd00 [kqueue_ctx taskq]
100008 D - 0xfffff8000333cc00 [config_0]
100009 D - 0xfffff8000333cb00 [aiod_kick taskq]
100012 D - 0xfffff8000333c800 [if_config_tqg_0]
100013 D - 0xfffff8000333c700 [if_io_tqg_0]
100014 D - 0xfffff8000333c600 [if_io_tqg_1]
100015 D - 0xfffff8000333c500 [softirq_0]
100016 D - 0xfffff8000333c400 [softirq_1]
100021 D - 0xfffff8000333c300 [firmware taskq]
100026 D - 0xfffff8000333c200 [crypto_0]
100027 D - 0xfffff8000333c200 [crypto_1]
100041 D - 0xfffff8000333c000 [vtnet0 rxq 0]
100042 D - 0xfffff8000333be00 [vtnet0 txq 0]
100043 D - 0xfffff8000333bd00 [vtnet0 rxq 1]
100044 D - 0xfffff8000333bc00 [vtnet0 txq 1]
100046 D vtbslp 0xfffff800034d4400 [virtio_balloon]
100050 D - 0xfffff8000333bb00 [mca taskq]
100055 D - 0xffffffff81cdb260 [deadlkres]
100057 D - 0xfffff80003b3d100 [acpi_task_0]
100058 D - 0xfffff80003b3d100 [acpi_task_1]
100059 D - 0xfffff80003b3d100 [acpi_task_2]
100061 D - 0xfffff8000333c100 [CAM taskq]
db> show all locks
Process 2104 (syz-executor.2) thread 0xfffff80003f7d6e0 (100100)
exclusive sleep mutex sctp-inp (inp) r = 0 (0xfffff8003ae78468) locked @ /syzkaller/managers/i386/kernel/sys/netinet/sctp_pcb.c:3335
exclusive rw sctp-info (sctp-info) r = 0 (0xfffffe0004958b50) locked @ /syzkaller/managers/i386/kernel/sys/netinet/sctp_pcb.c:3333
exclusive sleep mutex sctp-create (inp_create) r = 0 (0xfffff8003ae78488) locked @ /syzkaller/managers/i386/kernel/sys/netinet/sctp_pcb.c:3332
db> show malloc
Type InUse MemUse Requests
devbuf 4213 4851K 4241
vtbuf 24 1968K 46
sysctloid 26527 1553K 26591
kobj 332 1328K 488
newblk 9 1026K 1800
vfscache 4 1025K 4
pcb 49 566K 1772
inodedep 31 527K 1308
ufs_quota 1 512K 1
vfs_hash 1 512K 1
callout 2 512K 2
intr 4 388K 4
subproc 134 249K 2193
acpica 1674 185K 49750
vnet_data 1 168K 1
filedesc 19 133K 2479
pagedep 10 131K 1238
tfo_ccache 1 128K 1
sem 4 106K 4
DEVFS1 105 105K 122
linker 221 89K 252
bus 988 79K 3332
mtx_pool 2 72K 2
syncache 1 68K 1
acpitask 1 64K 1
ddb_capture 1 64K 1
module 494 62K 494
umtx 340 43K 340
BPF 22 36K 22
shm 2 34K 8
gtaskqueue 22 34K 22
kdtrace 173 34K 6185
hostcache 1 32K 1
DEVFS3 124 31K 134
msg 4 30K 4
DEVFS_RULE 56 27K 56
ifaddr 71 24K 73
kbdmux 6 22K 6
vmem 3 19K 4
lltable 47 18K 56
temp 34 17K 1949
ufs_mount 3 17K 4
proc 3 17K 3
tty 16 16K 16
tidhash 1 16K 1
sctp_timw 57 15K 57
ithread 89 15K 89
ether_multi 172 14K 177
bus-sc 30 14K 1394
sctp_atcl 25 13K 1355
KTRACE 100 13K 100
ifnet 7 13K 7
sctp_stro 12 12K 608
kenv 95 12K 99
eventhandler 123 11K 123
in6_multi 89 11K 89
pfs_nodes 20 10K 20
GEOM 60 10K 487
rman 82 10K 423
bmsafemap 2 9K 1277
devstat 4 9K 4
UART 12 9K 12
rpc 2 8K 2
shmfd 1 8K 1
pfs_vncache 1 8K 1
routetbl 58 8K 62
audit_evclass 231 8K 289
cred 28 7K 230
CAM DEV 3 6K 510
kqueue 54 6K 2117
vt 11 6K 11
plimit 21 6K 351
sglist 5 6K 5
CAM queue 5 6K 1528
ufs_dirhash 24 5K 24
DEVFSP 72 5K 76
taskqueue 42 5K 42
memdesc 1 4K 1
MCA 32 4K 32
evdev 4 4K 4
kcovinfo 64 4K 68
UMA 234 4K 234
select 28 4K 28
hhook 13 4K 13
session 25 4K 38
pgrp 25 4K 40
acpisem 22 3K 22
freefile 22 3K 1236
terminal 11 3K 11
dirrem 21 3K 1238
proc-args 44 3K 572
uidinfo 4 3K 5
sctp_ifa 17 3K 17
local_apic 1 2K 1
io_apic 1 2K 1
ipsec-saq 2 2K 2
lockf 19 2K 29
ip6ndp 12 2K 21
Unitno 28 2K 1787
CAM XPT 22 2K 543
sctp_atky 37 2K 1967
in_multi 6 2K 7
acpidev 20 2K 20
crypto 2 2K 2
msi 9 2K 9
tun 7 2K 7
freework 5 2K 1232
mkdir 8 1K 2452
freeblks 4 1K 1231
ipsecpolicy 1 1K 1
sahead 1 1K 1
secasvar 1 1K 1
clone 8 1K 8
vnodemarker 2 1K 29
NFSD session 1 1K 1
CAM periph 4 1K 271
mld 6 1K 6
sctp_ifn 6 1K 6
igmp 6 1K 6
toponodes 6 1K 6
isadev 6 1K 6
mount 16 1K 86
pci_link 10 1K 10
CAM SIM 2 1K 2
softdep 1 1K 1
diradd 4 1K 1271
pfil 4 1K 4
chacha20random 1 1K 1
epoch 4 1K 4
cdev 2 1K 2
encap_export_host 8 1K 8
sctp_athm 25 1K 1358
sctp_map 24 1K 1216
newdirblk 5 1K 1226
osd 3 1K 9
inpcbpolicy 8 1K 477
vnodes 1 1K 2
NFSD lckfile 1 1K 1
NFSD V4client 1 1K 1
DEVFS 9 1K 10
soname 8 1K 6702
feeder 7 1K 7
loginclass 3 1K 3
CAM path 4 1K 1034
apmdev 1 1K 1
atkbddev 2 1K 2
pmchooks 1 1K 1
prison 4 1K 4
CAM dev queue 2 1K 2
CAM I/O Scheduler 1 1K 1
nexusdev 5 1K 5
entropy 2 1K 38
tcpfunc 1 1K 1
sctp_vrf 1 1K 1
vnet 1 1K 1
acpiintr 1 1K 1
pmc 1 1K 1
cpus 2 1K 2
vnet_data_free 1 1K 1
Per-cpu 1 1K 1
filecaps 2 1K 92
p1003.1b 1 1K 1
CAM CCB 0 0K 2046
madt_table 0 0K 2
PUC 0 0K 0
ppbusdev 0 0K 0
agtiapi_MemAlloc malloc 0 0K 0
osti_cacheable 0 0K 0
tempbuff 0 0K 0
tempbuff 0 0K 0
pvscsi 0 0K 0
smartpqi 0 0K 0
ag_tgt_map_t malloc 0 0K 0
ag_slr_map_t malloc 0 0K 0
lDevFlags * malloc 0 0K 0
tiDeviceHandle_t * malloc 0 0K 0
ag_portal_data_t malloc 0 0K 0
ag_device_t malloc 0 0K 0
STLock malloc 0 0K 0
CCB List 0 0K 0
iavf 0 0K 0
ixl 0 0K 0
sr_iov 0 0K 0
OCS 0 0K 0
OCS 0 0K 0
nvme 0 0K 0
nvd 0 0K 0
netmap 0 0K 0
mwldev 0 0K 0
MVS driver 0 0K 0
fpukern_ctx 0 0K 0
xen_intr 0 0K 0
CAM ccb queue 0 0K 0
xen_hvm 0 0K 0
legacydrv 0 0K 0
qpidrv 0 0K 0
mrsasbuf 0 0K 0
mpt_user 0 0K 0
dmar_idpgtbl 0 0K 0
dmar_dom 0 0K 0
dmar_ctx 0 0K 0
dmar_dmamap 0 0K 0
mps_user 0 0K 0
MPSSAS 0 0K 0
isci 0 0K 0
bxe_ilt 0 0K 0
xenbus 0 0K 0
vm_fictitious 0 0K 0
mps 0 0K 0
mpr_user 0 0K 0
MPRSAS 0 0K 0
UMAHash 0 0K 0
vm_pgdata 0 0K 0
jblocks 0 0K 0
savedino 0 0K 456
sentinel 0 0K 0
jfsync 0 0K 0
jtrunc 0 0K 0
sbdep 0 0K 10
jsegdep 0 0K 0
jseg 0 0K 0
jfreefrag 0 0K 0
jfreeblk 0 0K 0
jnewblk 0 0K 0
jmvref 0 0K 0
jremref 0 0K 0
jaddref 0 0K 0
freedep 0 0K 0
freefrag 0 0K 5
allocindir 0 0K 0
indirdep 0 0K 10
allocdirect 0 0K 0
ufs_trim 0 0K 0
mactemp 0 0K 0
audit_trigger 0 0K 0
audit_pipe_presel 0 0K 0
audit_pipeent 0 0K 0
audit_pipe 0 0K 0
audit_evname 0 0K 0
audit_bsm 0 0K 0
audit_gidset 0 0K 0
audit_text 0 0K 0
audit_path 0 0K 0
audit_data 0 0K 0
audit_cred 0 0K 0
xform 0 0K 0
NLM 0 0K 0
nfsclient_nlminfo 0 0K 0
nfsclient_lock 0 0K 0
NFS FHA 0 0K 0
ipsec-spdcache 0 0K 0
ipsec-reg 0 0K 0
ipsec-misc 0 0K 0
ipsecrequest 0 0K 0
ip6opt 0 0K 10
ip6_msource 0 0K 0
ip6_moptions 0 0K 0
in6_mfilter 0 0K 0
frag6 0 0K 0
tcplog 0 0K 0
LRO 0 0K 0
sctp_mcore 0 0K 0
sctp_socko 0 0K 510
sctp_iter 0 0K 9
sctp_mvrf 0 0K 0
sctp_cpal 0 0K 0
sctp_cmsg 0 0K 0
sctp_stre 0 0K 0
sctp_athi 0 0K 0
sctp_a_it 0 0K 9
sctp_aadr 0 0K 0
sctp_stri 0 0K 0
newreno data 0 0K 0
ip_msource 0 0K 0
ip_moptions 0 0K 6
in_mfilter 0 0K 0
ipid 0 0K 0
80211scan 0 0K 0
80211ratectl 0 0K 0
80211power 0 0K 0
80211nodeie 0 0K 0
80211node 0 0K 0
80211mesh_gt 0 0K 0
80211mesh_rt 0 0K 0
80211perr 0 0K 0
80211prep 0 0K 0
80211preq 0 0K 0
80211dfs 0 0K 0
80211crypto 0 0K 0
80211vap 0 0K 0
iflib 0 0K 0
vlan 0 0K 0
gif 0 0K 0
ifdescr 0 0K 0
zlib 0 0K 0
fadvise 0 0K 0
mpr 0 0K 0
statfs 0 0K 1403
export_host 0 0K 0
cl_savebuf 0 0K 2
biobuf 0 0K 0
aios 0 0K 0
lio 0 0K 0
acl 0 0K 0
mfibuf 0 0K 0
mbuf_tag 0 0K 128
accf 0 0K 0
pts 0 0K 0
iov 0 0K 14201
ioctlops 0 0K 114
Witness 0 0K 0
stack 0 0K 0
md_sectors 0 0K 0
sbuf 0 0K 288
md_disk 0 0K 0
compressor 0 0K 0
malodev 0 0K 0
SWAP 0 0K 0
LED 0 0K 0
sysctltmp 0 0K 583
sysctl 0 0K 1
ekcd 0 0K 0
dumper 0 0K 0
rctl 0 0K 0
ix_sriov 0 0K 0
aacraidcam 0 0K 0
ix 0 0K 0
ipsbuf 0 0K 0
iirbuf 0 0K 0
cache 0 0K 0
aacraid_buf 0 0K 0
prison_racct 0 0K 0
Fail Points 0 0K 0
sigio 0 0K 5
filedesc_to_leader 0 0K 0
tty console 0 0K 0
aaccam 0 0K 0
aacbuf 0 0K 0
zstd 0 0K 0
nvlist 0 0K 0
SCSI ENC 0 0K 0
SCSI sa 0 0K 0
isofs_node 0 0K 0
isofs_mount 0 0K 0
tr_raid5_data 0 0K 0
tr_raid1e_data 0 0K 0
tr_raid1_data 0 0K 0
tr_raid0_data 0 0K 0
tr_concat_data 0 0K 0
md_sii_data 0 0K 0
md_promise_data 0 0K 0
md_nvidia_data 0 0K 0
md_jmicron_data 0 0K 0
md_intel_data 0 0K 0
md_ddf_data 0 0K 0
raid_data 0 0K 72
geom_flashmap 0 0K 0
newnfsmnt 0 0K 0
newnfsclient_req 0 0K 0
NFSCL layrecall 0 0K 0
NFSCL session 0 0K 0
NFSCL sockreq 0 0K 0
NFSCL devinfo 0 0K 0
NFSCL flayout 0 0K 0
NFSCL layout 0 0K 0
NFSD rollback 0 0K 0
NFSCL diroffdiroff 0 0K 0
NEWdirectio 0 0K 0
NEWNFSnode 0 0K 0
NFSCL lck 0 0K 0
NFSCL lckown 0 0K 0
NFSCL client 0 0K 0
NFSCL deleg 0 0K 0
NFSCL open 0 0K 0
NFSCL owner 0 0K 0
NFS fh 0 0K 0
NFS req 0 0K 0
NFSD usrgroup 0 0K 0
NFSD string 0 0K 0
NFSD V4lock 0 0K 0
NFSD V4state 0 0K 0
NFSD srvcache 0 0K 0
msdosfs_fat 0 0K 0
msdosfs_mount 0 0K 0
msdosfs_node 0 0K 0
DEVFS4 0 0K 0
DEVFS2 0 0K 0
gntdev 0 0K 0
privcmd_dev 0 0K 0
evtchn_dev 0 0K 0
xenstore 0 0K 0
scsi_pass 0 0K 0
ciss_data 0 0K 0
xnb 0 0K 0
xbbd 0 0K 0
xbd 0 0K 0
Balloon 0 0K 0
sysmouse 0 0K 0
vtfont 0 0K 0
ath_hal 0 0K 0
athdev 0 0K 0
ata_pci 0 0K 0
ata_dma 0 0K 0
ata_generic 0 0K 0
amr 0 0K 0
scsi_da 0 0K 69
ata_da 0 0K 0
scsi_ch 0 0K 0
scsi_cd 0 0K 0
USBdev 0 0K 0
USB 0 0K 0
AHCI driver 0 0K 0
agp 0 0K 0
nvme_da 0 0K 0
acpipwr 0 0K 0
twsbuf 0 0K 0
twe_commands 0 0K 0
twa_commands 0 0K 0
tcp_log_dev 0 0K 0
midi buffers 0 0K 0
mixer 0 0K 0
ac97 0 0K 0
hdacc 0 0K 0
hdac 0 0K 0
hdaa 0 0K 0
acpi_perf 0 0K 0
acpicmbat 0 0K 0
SIIS driver 0 0K 0
db> show ktr
No such command; use "help" to list available commands
---
This bug is generated by a bot. It may contain errors.
See https://goo.gl/tpsmEJ for more information about syzbot.
syzbot engineers can be reached at syzk...@googlegroups.com.
syzbot will keep track of this bug report. See:
https://goo.gl/tpsmEJ#status for how to communicate with syzbot.
syzbot found the following crash on:
HEAD commit: 0c28589a vmxnet3: add support for RSS kernel option
git tree: freebsd
console output: https://syzkaller.appspot.com/x/log.txt?x=155b7369e00000
dashboard link: https://syzkaller.appspot.com/bug?extid=2b4eab66d748b01f26a0
userspace arch: i386
Unfortunately, I don't have any reproducer for this crash yet.
IMPORTANT: if you fix the bug, please add the following tag to the commit:
Reported-by: syzbot+2b4eab...@syzkaller.appspotmail.com
panic: Bad link elm 0xfffff8003ae78000 next->prev != elm
cpuid = 1
time = 1579796900
KDB: stack backtrace:
db_trace_self_wrapper() at db_trace_self_wrapper+0x47/frame 0xfffffe00244a1650
vpanic() at vpanic+0x1ce/frame 0xfffffe00244a16c0
panic() at panic+0x43/frame 0xfffffe00244a1720
sctp_inpcb_free() at sctp_inpcb_free+0x1749/frame 0xfffffe00244a1790
sctp_close() at sctp_close+0x12f/frame 0xfffffe00244a17c0
soclose() at soclose+0x23e/frame 0xfffffe00244a1850
_fdrop() at _fdrop+0x38/frame 0xfffffe00244a1880
closef() at closef+0x2c6/frame 0xfffffe00244a1910
fdescfree_fds() at fdescfree_fds+0xa4/frame 0xfffffe00244a1960
fdescfree() at fdescfree+0x60f/frame 0xfffffe00244a1a30
exit1() at exit1+0x765/frame 0xfffffe00244a1aa0
sys_sys_exit() at sys_sys_exit+0xd/frame 0xfffffe00244a1ab0
ia32_syscall() at ia32_syscall+0x48c/frame 0xfffffe00244a1bf0
int0x80_syscall_common() at int0x80_syscall_common+0x9c
KDB: enter: panic
[ thread pid 2104 tid 100100 ]
Stopped at kdb_enter+0x67: movq $0,0x1466d26(%rip)
db>
db> set $lines = 0
db> set $maxwidth = 0
db> show registers
cs 0x20
ds 0x3b ll+0x1a
es 0x3b ll+0x1a
fs 0x13
gs 0x1b
ss 0
rax 0x12
rcx 0xffffffff810ba280 vprintf+0x140
rdx 0x1
rbx 0
rsp 0xfffffe00244a1630
rbp 0xfffffe00244a1650
rsi 0
rdi 0xffffffff810ba2b6 vprintf+0x176
r8 0
r9 0xffffffff
r10 0
r11 0xfffff8003ad334f0
r12 0xffffffff82068d90 ddb_dbbe
r13 0
r14 0xffffffff8193773f
r15 0xffffffff8193773f
rip 0xffffffff810af377 kdb_enter+0x67
rflags 0x200086 kernphys+0x86
kdb_enter+0x67: movq $0,0x1466d26(%rip)
db> show proc
Process 2104 (syz-executor.2) at 0xfffff8003a34ca60:
state: NORMAL
uid: 0 gids: 0, 0, 5
parent: pid 778 at 0xfffff8003a5c4a60
ABI: FreeBSD ELF32
arguments: /root/syz-executor.2
reaper: 0xfffff800032fa530 reapsubtree: 1
sigparent: 20
vmspace: 0xfffff8003a3fa000
(map 0xfffff8003a3fa000)
(map.pmap 0xfffff8003a3fa0c0)
(pmap 0xfffff8003a3fa120)
threads: 1
100100 Run CPU 1 syz-executor.2
db> ps
pid ppid pgrp uid state wmesg wchan cmd
2106 784 784 0 S (threaded) syz-executor.3
100271 S nanslp 0xffffffff824feca0 syz-executor.3
100991 S connec 0xfffff80003e89800 syz-executor.3
100995 S connec 0xfffff80003e84800 syz-executor.3
100998 S connec 0xfffff80003e87478 syz-executor.3
100999 S uwait 0xfffff80003a5c980 syz-executor.3
2105 768 768 0 S (threaded) syz-executor.0
100455 S nanslp 0xffffffff824feca1 syz-executor.0
100992 S connec 0xfffff80003e840f0 syz-executor.0
100997 S uwait 0xfffff8003af03080 syz-executor.0
2104 778 778 0 RE CPU 1 syz-executor.2
1625 1618 1625 0 Ss select 0xfffff8003a3a3140 dhclient
1622 1 1622 0 Ss select 0xfffff8003a3a3040 dhclient
1618 1607 422 65 S select 0xfffff80003f366c0 dhclient
1607 422 422 0 S wait 0xfffff8003600d000 sh
784 766 784 0 Ss nanslp 0xffffffff824feca1 syz-executor.3
778 766 778 0 Ss nanslp 0xffffffff824feca1 syz-executor.2
769 766 769 0 Ss piperd 0xfffff80003da68e8 syz-executor.1
768 766 768 0 Ss nanslp 0xffffffff824feca0 syz-executor.0
766 764 764 0 S (threaded) syz-fuzzer
100103 S uwait 0xfffff80003a5a180 syz-fuzzer
100104 S uwait 0xfffff80003ce4100 syz-fuzzer
100105 S uwait 0xfffff80003ce4200 syz-fuzzer
100106 S uwait 0xfffff80003ce4300 syz-fuzzer
100107 S uwait 0xfffff80003ce4400 syz-fuzzer
100108 S kqread 0xfffff80003b3d000 syz-fuzzer
100109 S uwait 0xfffff80003ce3b80 syz-fuzzer
100110 S uwait 0xfffff80003ce3c80 syz-fuzzer
100111 S uwait 0xfffff80003a5a280 syz-fuzzer
100113 S uwait 0xfffff80003ce3d80 syz-fuzzer
100114 S uwait 0xfffff80003ce3e80 syz-fuzzer
764 762 764 0 Ss pause 0xfffff8003a34c0a8 csh
762 680 762 0 Ss select 0xfffff8003a3a3dc0 sshd
746 1 746 0 Ss+ ttyin 0xfffff800033f7cb0 getty
745 1 745 0 Ss+ ttyin 0xfffff800033f8cb0 getty
744 1 744 0 Ss+ ttyin 0xfffff80003ac20b0 getty
743 1 743 0 Ss+ ttyin 0xfffff80003ac24b0 getty
742 1 742 0 Ss+ ttyin 0xfffff80003ac28b0 getty
741 1 741 0 Ss+ ttyin 0xfffff80003ac2cb0 getty
740 1 740 0 Ss+ ttyin 0xfffff80003ac30b0 getty
739 1 739 0 Ss+ ttyin 0xfffff80003ac34b0 getty
738 1 738 0 Ss+ ttyin 0xfffff80003ac38b0 getty
684 1 684 0 Ss nanslp 0xffffffff824feca1 cron
680 1 680 0 Ss select 0xfffff8003a3700c0 sshd
493 1 493 0 Ss select 0xfffff8003a268ac0 syslogd
422 1 422 0 Ss wait 0xfffff80003e33a60 devd
421 1 421 65 Ss select 0xfffff8003a268b40 dhclient
336 1 336 0 Ss select 0xfffff8003a268c40 dhclient
333 1 333 0 Ss select 0xfffff8003a3701c0 dhclient
21 0 0 0 DL vlruwt 0xfffff80003b01a60 [vnlru]
20 0 0 0 DL syncer 0xffffffff825d5118 [syncer]
19 0 0 0 DL (threaded) [bufdaemon]
100065 D qsleep 0xffffffff825d4618 [bufdaemon]
100070 D - 0xffffffff8200a980 [bufspacedaemon-0]
100082 D sdflush 0xfffff80003d058e8 [/ worker]
18 0 0 0 DL psleep 0xffffffff825f0088 [vmdaemon]
17 0 0 0 DL (threaded) [pagedaemon]
100063 D psleep 0xffffffff8261cfd8 [dom0]
100068 D launds 0xffffffff8261cfe4 [laundry: dom0]
100069 D umarcl 0xffffffff8153d760 [uma]
16 0 0 0 DL - 0xffffffff82359530 [rand_harvestq]
15 0 0 0 DL waiting 0xffffffff826625a0 [sctp_iterator]
9 0 0 0 DL - 0xffffffff825d401c [soaiod4]
8 0 0 0 DL - 0xffffffff825d401c [soaiod3]
7 0 0 0 DL - 0xffffffff825d401c [soaiod2]
6 0 0 0 DL - 0xffffffff825d401c [soaiod1]
5 0 0 0 DL (threaded) [cam]
100031 D - 0xffffffff82234940 [doneq0]
100062 D - 0xffffffff82234808 [scanner]
4 0 0 0 DL crypto_ 0xfffff800031f8e90 [crypto returns 1]
3 0 0 0 DL crypto_ 0xfffff800031f8e30 [crypto returns 0]
2 0 0 0 DL crypto_ 0xffffffff825ea0f8 [crypto]
14 0 0 0 DL seqstat 0xfffff80003362888 [sequencer 00]
13 0 0 0 DL (threaded) [geom]
100022 D - 0xffffffff8261b608 [g_event]
100023 D - 0xffffffff8261b618 [g_up]
100024 D - 0xffffffff8261b610 [g_down]
12 0 0 0 WL (threaded) [intr]
100006 I [swi5: fast taskq]
100010 I [swi6: task queue]
100011 I [swi6: Giant taskq]
100017 I [swi3: vm]
100018 I [swi4: clock (0)]
100019 I [swi4: clock (1)]
100020 I [swi1: netisr 0]
100032 I [irq24: virtio_pci0]
100033 I [irq25: virtio_pci0]
100034 I [irq26: virtio_pci0]
100035 I [irq27: virtio_pci0]
100036 I [irq28: virtio_pci1]
100037 I [irq29: virtio_pci1]
100038 I [irq30: virtio_pci1]
100039 I [irq31: virtio_pci1]
100040 I [irq32: virtio_pci1]
100045 I [irq10: virtio_pci2]
100047 I [irq1: atkbd0]
100048 I [irq12: psm0]
100049 I [swi0: uart uart++]
11 0 0 0 RL (threaded) [idle]
100003 Run CPU 0 [idle: cpu0]
100004 CanRun [idle: cpu1]
1 0 1 0 SLs wait 0xfffff800032fa530 [init]
10 0 0 0 DL audit_w 0xffffffff82663230 [audit]
0 0 0 0 DLs (threaded) [kernel]
100000 D swapin 0xffffffff82609bf8 [swapper]
100005 D - 0xfffff8000333d000 [thread taskq]
100007 D - 0xfffff8000333cd00 [kqueue_ctx taskq]
100008 D - 0xfffff8000333cc00 [config_0]
100009 D - 0xfffff8000333cb00 [aiod_kick taskq]
100012 D - 0xfffff8000333c800 [if_config_tqg_0]
100013 D - 0xfffff8000333c700 [if_io_tqg_0]
100014 D - 0xfffff8000333c600 [if_io_tqg_1]
100015 D - 0xfffff8000333c500 [softirq_0]
100016 D - 0xfffff8000333c400 [softirq_1]
100021 D - 0xfffff8000333c300 [firmware taskq]
100026 D - 0xfffff8000333c200 [crypto_0]
100027 D - 0xfffff8000333c200 [crypto_1]
100041 D - 0xfffff8000333c000 [vtnet0 rxq 0]
100042 D - 0xfffff8000333be00 [vtnet0 txq 0]
100043 D - 0xfffff8000333bd00 [vtnet0 rxq 1]
100044 D - 0xfffff8000333bc00 [vtnet0 txq 1]
100046 D vtbslp 0xfffff800034d4400 [virtio_balloon]
100050 D - 0xfffff8000333bb00 [mca taskq]
100055 D - 0xffffffff81cdb260 [deadlkres]
100057 D - 0xfffff80003b3d100 [acpi_task_0]
100058 D - 0xfffff80003b3d100 [acpi_task_1]
100059 D - 0xfffff80003b3d100 [acpi_task_2]
100061 D - 0xfffff8000333c100 [CAM taskq]
db> show all locks
Process 2104 (syz-executor.2) thread 0xfffff80003f7d6e0 (100100)
exclusive sleep mutex sctp-inp (inp) r = 0 (0xfffff8003ae78468) locked @ /syzkaller/managers/i386/kernel/sys/netinet/sctp_pcb.c:3335
exclusive rw sctp-info (sctp-info) r = 0 (0xfffffe0004958b50) locked @ /syzkaller/managers/i386/kernel/sys/netinet/sctp_pcb.c:3333
exclusive sleep mutex sctp-create (inp_create) r = 0 (0xfffff8003ae78488) locked @ /syzkaller/managers/i386/kernel/sys/netinet/sctp_pcb.c:3332
db> show malloc
Type InUse MemUse Requests
devbuf 4213 4851K 4241
vtbuf 24 1968K 46
sysctloid 26527 1553K 26591
kobj 332 1328K 488
newblk 9 1026K 1800
vfscache 4 1025K 4
pcb 49 566K 1772
inodedep 31 527K 1308
ufs_quota 1 512K 1
vfs_hash 1 512K 1
callout 2 512K 2
intr 4 388K 4
subproc 134 249K 2193
acpica 1674 185K 49750
vnet_data 1 168K 1
filedesc 19 133K 2479
pagedep 10 131K 1238
tfo_ccache 1 128K 1
sem 4 106K 4
DEVFS1 105 105K 122
linker 221 89K 252
bus 988 79K 3332
mtx_pool 2 72K 2
syncache 1 68K 1
acpitask 1 64K 1
ddb_capture 1 64K 1
module 494 62K 494
umtx 340 43K 340
BPF 22 36K 22
shm 2 34K 8
gtaskqueue 22 34K 22
kdtrace 173 34K 6185
hostcache 1 32K 1
DEVFS3 124 31K 134
msg 4 30K 4
DEVFS_RULE 56 27K 56
ifaddr 71 24K 73
kbdmux 6 22K 6
vmem 3 19K 4
lltable 47 18K 56
temp 34 17K 1949
ufs_mount 3 17K 4
proc 3 17K 3
tty 16 16K 16
tidhash 1 16K 1
sctp_timw 57 15K 57
ithread 89 15K 89
ether_multi 172 14K 177
bus-sc 30 14K 1394
sctp_atcl 25 13K 1355
KTRACE 100 13K 100
ifnet 7 13K 7
sctp_stro 12 12K 608
kenv 95 12K 99
eventhandler 123 11K 123
in6_multi 89 11K 89
pfs_nodes 20 10K 20
GEOM 60 10K 487
rman 82 10K 423
bmsafemap 2 9K 1277
devstat 4 9K 4
UART 12 9K 12
rpc 2 8K 2
shmfd 1 8K 1
pfs_vncache 1 8K 1
routetbl 58 8K 62
audit_evclass 231 8K 289
cred 28 7K 230
CAM DEV 3 6K 510
kqueue 54 6K 2117
vt 11 6K 11
plimit 21 6K 351
sglist 5 6K 5
CAM queue 5 6K 1528
ufs_dirhash 24 5K 24
DEVFSP 72 5K 76
taskqueue 42 5K 42
memdesc 1 4K 1
MCA 32 4K 32
evdev 4 4K 4
kcovinfo 64 4K 68
UMA 234 4K 234
select 28 4K 28
hhook 13 4K 13
session 25 4K 38
pgrp 25 4K 40
acpisem 22 3K 22
freefile 22 3K 1236
terminal 11 3K 11
dirrem 21 3K 1238
proc-args 44 3K 572
uidinfo 4 3K 5
sctp_ifa 17 3K 17
local_apic 1 2K 1
io_apic 1 2K 1
ipsec-saq 2 2K 2
lockf 19 2K 29
ip6ndp 12 2K 21
Unitno 28 2K 1787
CAM XPT 22 2K 543
sctp_atky 37 2K 1967
in_multi 6 2K 7
acpidev 20 2K 20
crypto 2 2K 2
msi 9 2K 9
tun 7 2K 7
freework 5 2K 1232
mkdir 8 1K 2452
freeblks 4 1K 1231
ipsecpolicy 1 1K 1
sahead 1 1K 1
secasvar 1 1K 1
clone 8 1K 8
vnodemarker 2 1K 29
NFSD session 1 1K 1
CAM periph 4 1K 271
mld 6 1K 6
sctp_ifn 6 1K 6
igmp 6 1K 6
toponodes 6 1K 6
isadev 6 1K 6
mount 16 1K 86
pci_link 10 1K 10
CAM SIM 2 1K 2
softdep 1 1K 1
diradd 4 1K 1271
pfil 4 1K 4
chacha20random 1 1K 1
epoch 4 1K 4
cdev 2 1K 2
encap_export_host 8 1K 8
sctp_athm 25 1K 1358
sctp_map 24 1K 1216
newdirblk 5 1K 1226
osd 3 1K 9
inpcbpolicy 8 1K 477
vnodes 1 1K 2
NFSD lckfile 1 1K 1
NFSD V4client 1 1K 1
DEVFS 9 1K 10
soname 8 1K 6702
feeder 7 1K 7
loginclass 3 1K 3
CAM path 4 1K 1034
apmdev 1 1K 1
atkbddev 2 1K 2
pmchooks 1 1K 1
prison 4 1K 4
CAM dev queue 2 1K 2
CAM I/O Scheduler 1 1K 1
nexusdev 5 1K 5
entropy 2 1K 38
tcpfunc 1 1K 1
sctp_vrf 1 1K 1
vnet 1 1K 1
acpiintr 1 1K 1
pmc 1 1K 1
cpus 2 1K 2
vnet_data_free 1 1K 1
Per-cpu 1 1K 1
filecaps 2 1K 92
p1003.1b 1 1K 1
CAM CCB 0 0K 2046
madt_table 0 0K 2
PUC 0 0K 0
ppbusdev 0 0K 0
agtiapi_MemAlloc malloc 0 0K 0
osti_cacheable 0 0K 0
tempbuff 0 0K 0
tempbuff 0 0K 0
pvscsi 0 0K 0
smartpqi 0 0K 0
ag_tgt_map_t malloc 0 0K 0
ag_slr_map_t malloc 0 0K 0
lDevFlags * malloc 0 0K 0
tiDeviceHandle_t * malloc 0 0K 0
ag_portal_data_t malloc 0 0K 0
ag_device_t malloc 0 0K 0
STLock malloc 0 0K 0
CCB List 0 0K 0
iavf 0 0K 0
ixl 0 0K 0
sr_iov 0 0K 0
OCS 0 0K 0
OCS 0 0K 0
nvme 0 0K 0
nvd 0 0K 0
netmap 0 0K 0
mwldev 0 0K 0
MVS driver 0 0K 0
fpukern_ctx 0 0K 0
xen_intr 0 0K 0
CAM ccb queue 0 0K 0
xen_hvm 0 0K 0
legacydrv 0 0K 0
qpidrv 0 0K 0
mrsasbuf 0 0K 0
mpt_user 0 0K 0
dmar_idpgtbl 0 0K 0
dmar_dom 0 0K 0
dmar_ctx 0 0K 0
dmar_dmamap 0 0K 0
mps_user 0 0K 0
MPSSAS 0 0K 0
isci 0 0K 0
bxe_ilt 0 0K 0
xenbus 0 0K 0
vm_fictitious 0 0K 0
mps 0 0K 0
mpr_user 0 0K 0
MPRSAS 0 0K 0
UMAHash 0 0K 0
vm_pgdata 0 0K 0
jblocks 0 0K 0
savedino 0 0K 456
sentinel 0 0K 0
jfsync 0 0K 0
jtrunc 0 0K 0
sbdep 0 0K 10
jsegdep 0 0K 0
jseg 0 0K 0
jfreefrag 0 0K 0
jfreeblk 0 0K 0
jnewblk 0 0K 0
jmvref 0 0K 0
jremref 0 0K 0
jaddref 0 0K 0
freedep 0 0K 0
freefrag 0 0K 5
allocindir 0 0K 0
indirdep 0 0K 10
allocdirect 0 0K 0
ufs_trim 0 0K 0
mactemp 0 0K 0
audit_trigger 0 0K 0
audit_pipe_presel 0 0K 0
audit_pipeent 0 0K 0
audit_pipe 0 0K 0
audit_evname 0 0K 0
audit_bsm 0 0K 0
audit_gidset 0 0K 0
audit_text 0 0K 0
audit_path 0 0K 0
audit_data 0 0K 0
audit_cred 0 0K 0
xform 0 0K 0
NLM 0 0K 0
nfsclient_nlminfo 0 0K 0
nfsclient_lock 0 0K 0
NFS FHA 0 0K 0
ipsec-spdcache 0 0K 0
ipsec-reg 0 0K 0
ipsec-misc 0 0K 0
ipsecrequest 0 0K 0
ip6opt 0 0K 10
ip6_msource 0 0K 0
ip6_moptions 0 0K 0
in6_mfilter 0 0K 0
frag6 0 0K 0
tcplog 0 0K 0
LRO 0 0K 0
sctp_mcore 0 0K 0
sctp_socko 0 0K 510
sctp_iter 0 0K 9
sctp_mvrf 0 0K 0
sctp_cpal 0 0K 0
sctp_cmsg 0 0K 0
sctp_stre 0 0K 0
sctp_athi 0 0K 0
sctp_a_it 0 0K 9
sctp_aadr 0 0K 0
sctp_stri 0 0K 0
newreno data 0 0K 0
ip_msource 0 0K 0
ip_moptions 0 0K 6
in_mfilter 0 0K 0
ipid 0 0K 0
80211scan 0 0K 0
80211ratectl 0 0K 0
80211power 0 0K 0
80211nodeie 0 0K 0
80211node 0 0K 0
80211mesh_gt 0 0K 0
80211mesh_rt 0 0K 0
80211perr 0 0K 0
80211prep 0 0K 0
80211preq 0 0K 0
80211dfs 0 0K 0
80211crypto 0 0K 0
80211vap 0 0K 0
iflib 0 0K 0
vlan 0 0K 0
gif 0 0K 0
ifdescr 0 0K 0
zlib 0 0K 0
fadvise 0 0K 0
mpr 0 0K 0
statfs 0 0K 1403
export_host 0 0K 0
cl_savebuf 0 0K 2
biobuf 0 0K 0
aios 0 0K 0
lio 0 0K 0
acl 0 0K 0
mfibuf 0 0K 0
mbuf_tag 0 0K 128
accf 0 0K 0
pts 0 0K 0
iov 0 0K 14201
ioctlops 0 0K 114
Witness 0 0K 0
stack 0 0K 0
md_sectors 0 0K 0
sbuf 0 0K 288
md_disk 0 0K 0
compressor 0 0K 0
malodev 0 0K 0
SWAP 0 0K 0
LED 0 0K 0
sysctltmp 0 0K 583
sysctl 0 0K 1
ekcd 0 0K 0
dumper 0 0K 0
rctl 0 0K 0
ix_sriov 0 0K 0
aacraidcam 0 0K 0
ix 0 0K 0
ipsbuf 0 0K 0
iirbuf 0 0K 0
cache 0 0K 0
aacraid_buf 0 0K 0
prison_racct 0 0K 0
Fail Points 0 0K 0
sigio 0 0K 5
filedesc_to_leader 0 0K 0
tty console 0 0K 0
aaccam 0 0K 0
aacbuf 0 0K 0
zstd 0 0K 0
nvlist 0 0K 0
SCSI ENC 0 0K 0
SCSI sa 0 0K 0
isofs_node 0 0K 0
isofs_mount 0 0K 0
tr_raid5_data 0 0K 0
tr_raid1e_data 0 0K 0
tr_raid1_data 0 0K 0
tr_raid0_data 0 0K 0
tr_concat_data 0 0K 0
md_sii_data 0 0K 0
md_promise_data 0 0K 0
md_nvidia_data 0 0K 0
md_jmicron_data 0 0K 0
md_intel_data 0 0K 0
md_ddf_data 0 0K 0
raid_data 0 0K 72
geom_flashmap 0 0K 0
newnfsmnt 0 0K 0
newnfsclient_req 0 0K 0
NFSCL layrecall 0 0K 0
NFSCL session 0 0K 0
NFSCL sockreq 0 0K 0
NFSCL devinfo 0 0K 0
NFSCL flayout 0 0K 0
NFSCL layout 0 0K 0
NFSD rollback 0 0K 0
NFSCL diroffdiroff 0 0K 0
NEWdirectio 0 0K 0
NEWNFSnode 0 0K 0
NFSCL lck 0 0K 0
NFSCL lckown 0 0K 0
NFSCL client 0 0K 0
NFSCL deleg 0 0K 0
NFSCL open 0 0K 0
NFSCL owner 0 0K 0
NFS fh 0 0K 0
NFS req 0 0K 0
NFSD usrgroup 0 0K 0
NFSD string 0 0K 0
NFSD V4lock 0 0K 0
NFSD V4state 0 0K 0
NFSD srvcache 0 0K 0
msdosfs_fat 0 0K 0
msdosfs_mount 0 0K 0
msdosfs_node 0 0K 0
DEVFS4 0 0K 0
DEVFS2 0 0K 0
gntdev 0 0K 0
privcmd_dev 0 0K 0
evtchn_dev 0 0K 0
xenstore 0 0K 0
scsi_pass 0 0K 0
ciss_data 0 0K 0
xnb 0 0K 0
xbbd 0 0K 0
xbd 0 0K 0
Balloon 0 0K 0
sysmouse 0 0K 0
vtfont 0 0K 0
ath_hal 0 0K 0
athdev 0 0K 0
ata_pci 0 0K 0
ata_dma 0 0K 0
ata_generic 0 0K 0
amr 0 0K 0
scsi_da 0 0K 69
ata_da 0 0K 0
scsi_ch 0 0K 0
scsi_cd 0 0K 0
USBdev 0 0K 0
USB 0 0K 0
AHCI driver 0 0K 0
agp 0 0K 0
nvme_da 0 0K 0
acpipwr 0 0K 0
twsbuf 0 0K 0
twe_commands 0 0K 0
twa_commands 0 0K 0
tcp_log_dev 0 0K 0
midi buffers 0 0K 0
mixer 0 0K 0
ac97 0 0K 0
hdacc 0 0K 0
hdac 0 0K 0
hdaa 0 0K 0
acpi_perf 0 0K 0
acpicmbat 0 0K 0
SIIS driver 0 0K 0
db> show ktr
No such command; use "help" to list available commands
---
This bug is generated by a bot. It may contain errors.
See https://goo.gl/tpsmEJ for more information about syzbot.
syzbot engineers can be reached at syzk...@googlegroups.com.
syzbot will keep track of this bug report. See:
https://goo.gl/tpsmEJ#status for how to communicate with syzbot.
syzbot
Apr 22, 2020, 12:29:08 PM4/22/20
to syzkaller-f...@googlegroups.com
Auto-closing this bug as obsolete.
Crashes did not happen for a while, no reproducer and no activity.
Crashes did not happen for a while, no reproducer and no activity.
Reply all
Reply to author
Forward
0 new messages