Fatal trap 12: page fault in sctp_inpcb_bind
4 views
Skip to first unread message
syzbot
Dec 22, 2019, 2:08:09 PM12/22/19
to syzkaller-f...@googlegroups.com
Hello,
syzbot found the following crash on:
HEAD commit: bdb3ec24 Make page busy state deterministic on free. Page..
git tree: freebsd
console output: https://syzkaller.appspot.com/x/log.txt?x=144316c1e00000
dashboard link: https://syzkaller.appspot.com/bug?extid=a38c3729810502fc5211
Unfortunately, I don't have any reproducer for this crash yet.
IMPORTANT: if you fix the bug, please add the following tag to the commit:
Reported-by: syzbot+a38c37...@syzkaller.appspotmail.com
Fatal trap 12: page fault while in kernel mode
cpuid = 1; apic id = 01
fault virtual address = 0xbf60
fault code = supervisor read data, page not present
instruction pointer = 0x20:0xffffffff8133f3d0
stack pointer = 0x28:0xfffffe0024483890
frame pointer = 0x28:0xfffffe0024483930
code segment = base 0x0, limit 0xfffff, type 0x1b
= DPL 0, pres 1, long 1, def32 0, gran 1
processor eflags =
interrupt enabled, resume, IOPL = 0
current process = 2251 (syz-executor.1)
trap number = 12
panic: page fault
cpuid = 1
time = 1577041606
KDB: stack backtrace:
db_trace_self_wrapper() at db_trace_self_wrapper+0x47/frame
0xfffffe0024483490
vpanic() at vpanic+0x1c7/frame 0xfffffe0024483500
panic() at panic+0x43/frame 0xfffffe0024483560
trap_fatal() at trap_fatal+0x4cc/frame 0xfffffe00244835e0
trap_pfault() at trap_pfault+0xdc/frame 0xfffffe0024483680
trap() at trap+0x441/frame 0xfffffe00244837c0
calltrap() at calltrap+0x8/frame 0xfffffe00244837c0
--- trap 0xc, rip = 0xffffffff8133f3d0, rsp = 0xfffffe0024483890, rbp =
0xfffffe0024483930 ---
sctp_inpcb_bind() at sctp_inpcb_bind+0x430/frame 0xfffffe0024483930
sctp6_connect() at sctp6_connect+0x208/frame 0xfffffe00244839b0
soconnectat() at soconnectat+0x183/frame 0xfffffe0024483a10
kern_connectat() at kern_connectat+0x1ec/frame 0xfffffe0024483a70
sys_connect() at sys_connect+0xd9/frame 0xfffffe0024483ab0
amd64_syscall() at amd64_syscall+0x499/frame 0xfffffe0024483bf0
fast_syscall_common() at fast_syscall_common+0x101/frame 0xfffffe0024483bf0
--- syscall (198, FreeBSD ELF64, nosys), rip = 0x4132ea, rsp =
0x7fffdffdcf38, rbp = 0x3 ---
KDB: enter: panic
[ thread pid 2251 tid 100801 ]
Stopped at kdb_enter+0x67: movq $0,0x14600e6(%rip)
db> set $lines = 0
db> set $maxwidth = 0
db> show registers
cs 0x20
ds 0x3b ll+0x1a
es 0x3b ll+0x1a
fs 0x13
gs 0x1b
ss 0x28 ll+0x7
rax 0x12
rcx 0xfffffe0027200000
rdx 0x3ffff
rbx 0
rsp 0xfffffe0024483470
rbp 0xfffffe0024483490
rsi 0x40001
rdi 0xffffffff810c0ea1 vprintf+0xe1
r8 0
r9 0xffffffff
r10 0
r11 0xfffff8003420ebd0
r12 0xffffffff82068d90 ddb_dbbe
r13 0
r14 0xffffffff81936bdd
r15 0xffffffff81936bdd
rip 0xffffffff810b6127 kdb_enter+0x67
rflags 0x82 ll+0x61
kdb_enter+0x67: movq $0,0x14600e6(%rip)
db> show proc
Process 2251 (syz-executor.1) at 0xfffff80059b4ca60:
state: NORMAL
uid: 0 gids: 0, 0, 5
parent: pid 770 at 0xfffff80003e69530
ABI: FreeBSD ELF64
arguments: /root/syz-executor.1
reaper: 0xfffff800032b8530 reapsubtree: 1
sigparent: 20
vmspace: 0xfffff8003af5e000
(map 0xfffff8003af5e000)
(map.pmap 0xfffff8003af5e0c0)
(pmap 0xfffff8003af5e120)
threads: 5
100255 RunQ syz-executor.1
100799 S sbwait 0xfffff80003e2d55c syz-executor.1
100801 Run CPU 1 syz-executor.1
100802 L *sctp-in 0xfffff8003aaafb40 syz-executor.1
100805 RunQ syz-executor.1
db> ps
pid ppid pgrp uid state wmesg wchan cmd
2252 783 783 0 R (threaded) syz-executor.3
100434 RunQ syz-executor.3
100804 S sbwait 0xfffff80003e9a55c syz-executor.3
2251 770 770 0 R (threaded) syz-executor.1
100255 RunQ syz-executor.1
100799 S sbwait 0xfffff80003e2d55c syz-executor.1
100801 Run CPU 1 syz-executor.1
100802 L *sctp-in 0xfffff8003aaafb40 syz-executor.1
100805 RunQ syz-executor.1
2250 771 771 0 R (threaded) syz-executor.2
100470 RunQ syz-executor.2
100782 S sbwait 0xfffff80003e248e4 syz-executor.2
100796 S uwait 0xfffff800030c1600 syz-executor.2
100798 S uwait 0xfffff80003c5fd80 syz-executor.2
2249 769 769 0 R (threaded) syz-executor.0
100593 RunQ syz-executor.0
100776 S select 0xfffff80003cd37c0 syz-executor.0
100781 S uwait 0xfffff8003ab4fe00 syz-executor.0
100785 S uwait 0xfffff8003ab4fa00 syz-executor.0
100787 S uwait 0xfffff80003c5fb80 syz-executor.0
1935 1929 1935 0 Ss select 0xfffff8003a21c040 dhclient
1932 1 1932 0 Ss select 0xfffff800550702c0 dhclient
1929 1922 422 65 S select 0xfffff8003a21acc0 dhclient
1922 422 422 0 S wait 0xfffff80003df3530 sh
1881 1 1881 65 Ss select 0xfffff8003a21aec0 dhclient
1513 1 1513 0 Ss select 0xfffff8003a21a940 dhclient
1510 1 1510 0 Ss select 0xfffff8003a21a8c0 dhclient
1488 1 1488 65 Ss select 0xfffff8003a21c140 dhclient
981 1 981 0 Ss select 0xfffff80003cd3840 dhclient
978 1 978 0 Ss select 0xfffff8003a21c2c0 dhclient
783 766 783 0 Rs syz-executor.3
771 766 771 0 Rs syz-executor.2
770 766 770 0 Rs syz-executor.1
769 766 769 0 Rs syz-executor.0
766 764 764 0 S (threaded) syz-fuzzer
100085 S uwait 0xfffff800030c1400 syz-fuzzer
100105 S uwait 0xfffff80003c60480 syz-fuzzer
100106 S uwait 0xfffff80003c60680 syz-fuzzer
100107 S kqread 0xfffff8000333ee00 syz-fuzzer
100108 S uwait 0xfffff8003a20de00 syz-fuzzer
100109 S uwait 0xfffff8003a20df00 syz-fuzzer
100110 S uwait 0xfffff8003a20e080 syz-fuzzer
100111 S uwait 0xfffff80003c5fa80 syz-fuzzer
100112 S uwait 0xfffff8003a20e180 syz-fuzzer
100113 S uwait 0xfffff8003a20d880 syz-fuzzer
764 762 764 0 SWs pause 0xfffff80003d350a8 csh
762 680 762 0 Ss select 0xfffff80003cd3a40 sshd
746 1 746 0 Rs+ CPU 0 getty
745 1 745 0 Ss+ ttyin 0xfffff80003af10b0 getty
744 1 744 0 Ss+ ttyin 0xfffff80003ae10b0 getty
743 1 743 0 Ss+ ttyin 0xfffff80003ae18b0 getty
742 1 742 0 Ss+ ttyin 0xfffff80003ae20b0 getty
741 1 741 0 Ss+ ttyin 0xfffff80003ae28b0 getty
740 1 740 0 Ss+ ttyin 0xfffff80003ae30b0 getty
739 1 739 0 Ss+ ttyin 0xfffff80003ae38b0 getty
738 1 738 0 Ss+ ttyin 0xfffff80003ae40b0 getty
684 1 684 0 Ss nanslp 0xffffffff824fee11 cron
680 1 680 0 Ss select 0xfffff80003cd4040 sshd
493 1 493 0 Ds bo_wwai 0xfffff8003a49d338 syslogd
422 1 422 0 Ss wait 0xfffff80003d35a60 devd
421 1 421 65 Ss select 0xfffff8003a21c9c0 dhclient
336 1 336 0 Ss select 0xfffff8003a21ccc0 dhclient
333 1 333 0 Ss select 0xfffff8003a21cb40 dhclient
21 0 0 0 DL syncer 0xffffffff825d52e0 [syncer]
20 0 0 0 DL vlruwt 0xfffff80003aff000 [vnlru]
19 0 0 0 DL (threaded) [bufdaemon]
100065 D qsleep 0xffffffff825d4798 [bufdaemon]
100070 D - 0xffffffff8200a980
[bufspacedaemon-0]
100081 D sdflush 0xfffff8000308e0e8 [/ worker]
18 0 0 0 DL psleep 0xffffffff825f01c8 [vmdaemon]
17 0 0 0 DL (threaded) [pagedaemon]
100063 D psleep 0xffffffff8261d0d8 [dom0]
100068 D launds 0xffffffff8261d0e4 [laundry: dom0]
100069 D umarcl 0xffffffff8153dec0 [uma]
16 0 0 0 DL - 0xffffffff82359598 [rand_harvestq]
15 0 0 0 DL waiting 0xffffffff826626a0 [sctp_iterator]
9 0 0 0 DL - 0xffffffff825d419c [soaiod4]
8 0 0 0 DL - 0xffffffff825d419c [soaiod3]
7 0 0 0 DL - 0xffffffff825d419c [soaiod2]
6 0 0 0 DL - 0xffffffff825d419c [soaiod1]
5 0 0 0 DL (threaded) [cam]
100031 D - 0xffffffff82234940 [doneq0]
100062 D - 0xffffffff82234808 [scanner]
4 0 0 0 DL crypto_ 0xfffff8000333d690 [crypto
returns 1]
3 0 0 0 DL crypto_ 0xfffff8000333d630 [crypto
returns 0]
2 0 0 0 DL crypto_ 0xffffffff825ea268 [crypto]
14 0 0 0 DL seqstat 0xfffff8000334f888 [sequencer 00]
13 0 0 0 DL (threaded) [geom]
100022 D - 0xffffffff8261b708 [g_event]
100023 D - 0xffffffff8261b718 [g_up]
100024 D - 0xffffffff8261b710 [g_down]
12 0 0 0 WL (threaded) [intr]
100005 I [swi5: fast
taskq]
100009 I [swi6: task
queue]
100010 I [swi6: Giant
taskq]
100017 I [swi3: vm]
100018 I [swi1: netisr
0]
100019 I [swi4: clock
(0)]
100020 I [swi4: clock
(1)]
100032 I [irq24:
virtio_pci0]
100033 I [irq25:
virtio_pci0]
100034 I [irq26:
virtio_pci0]
100035 I [irq27:
virtio_pci0]
100036 I [irq28:
virtio_pci1]
100037 I [irq29:
virtio_pci1]
100038 I [irq30:
virtio_pci1]
100039 I [irq31:
virtio_pci1]
100040 I [irq32:
virtio_pci1]
100045 I [irq10:
virtio_pci2]
100047 I [irq1: atkbd0]
100048 I [irq12: psm0]
100049 I [swi0: uart
uart++]
11 0 0 0 RL (threaded) [idle]
100003 CanRun [idle: cpu0]
100004 CanRun [idle: cpu1]
1 0 1 0 SLs wait 0xfffff800032b8530 [init]
10 0 0 0 DL audit_w 0xffffffff82663330 [audit]
0 0 0 0 DLs (threaded) [kernel]
100000 D swapin 0xffffffff82609d38 [swapper]
100006 D - 0xfffff800032f9000 [config_0]
100007 D - 0xfffff800032f2e00 [kqueue_ctx
taskq]
100008 D - 0xfffff800032f2d00 [aiod_kick
taskq]
100011 D - 0xfffff800032f2a00 [thread taskq]
100012 D - 0xfffff800032f8e00
[if_config_tqg_0]
100013 D - 0xfffff800032f8d00 [softirq_0]
100014 D - 0xfffff800032f8c00 [softirq_1]
100015 D - 0xfffff800032f8b00 [if_io_tqg_0]
100016 D - 0xfffff800032f8a00 [if_io_tqg_1]
100021 D - 0xfffff80003382100 [firmware
taskq]
100026 D - 0xfffff80003381e00 [crypto_0]
100027 D - 0xfffff80003381e00 [crypto_1]
100041 D - 0xfffff80003381a00 [vtnet0 rxq 0]
100042 D - 0xfffff80003381900 [vtnet0 txq 0]
100043 D - 0xfffff80003381800 [vtnet0 rxq 1]
100044 D - 0xfffff80003381700 [vtnet0 txq 1]
100046 D vtbslp 0xfffff80003510400
[virtio_balloon]
100050 D - 0xfffff80003381600 [mca taskq]
100051 D - 0xffffffff824fdb91 [deadlkres]
100058 D - 0xfffff80003380b00 [acpi_task_0]
100059 D - 0xfffff80003380b00 [acpi_task_1]
100060 D - 0xfffff80003380b00 [acpi_task_2]
100061 D - 0xfffff80003381d00 [CAM taskq]
db> show all locks
Process 2251 (syz-executor.1) thread 0xfffff8003420e6e0 (100801)
exclusive sleep mutex sctp-inp (inp) r = 0 (0xfffff8003a3d8468) locked @
/syzkaller/managers/main/kernel/sys/netinet/sctp_pcb.c:2918
exclusive rw sctp-info (sctp-info) r = 0 (0xfffffe0004958b50) locked @
/syzkaller/managers/main/kernel/sys/netinet/sctp_pcb.c:2917
exclusive sleep mutex sctp-create (inp_create) r = 0 (0xfffff8003a3d8488)
locked @ /syzkaller/managers/main/kernel/sys/netinet6/sctp6_usrreq.c:835
Process 746 (getty) thread 0xfffff80003d5a6e0 (100080)
exclusive sleep mutex ttymtx (ttymtx) r = 0 (0xfffff80003814c08) locked @
/syzkaller/managers/main/kernel/sys/kern/tty.c:216
Process 493 (syslogd) thread 0xfffff80003c5c6e0 (100086)
exclusive lockmgr ufs (ufs) r = 0 (0xfffff8003a49d248) locked @
/syzkaller/managers/main/kernel/sys/kern/vfs_syscalls.c:3431
db> show malloc
Type InUse MemUse Requests
devbuf 4213 4851K 4241
vtbuf 24 1968K 46
sysctloid 23668 1374K 23732
kobj 333 1332K 489
newblk 7 1026K 2755
vfscache 4 1025K 4
pcb 27 539K 453
inodedep 11 517K 1425
ufs_quota 1 512K 1
vfs_hash 1 512K 1
callout 2 512K 2
intr 4 388K 4
subproc 135 274K 2329
acpica 1674 185K 49997
vnet_data 1 168K 1
filedesc 21 149K 2655
pagedep 9 130K 1332
tfo_ccache 1 128K 1
sem 4 106K 4
DEVFS1 105 105K 122
linker 221 89K 252
bus 976 79K 3333
mtx_pool 2 72K 2
BPF 38 71K 38
syncache 1 68K 1
acpitask 1 64K 1
ddb_capture 1 64K 1
module 495 62K 495
umtx 316 40K 316
kdtrace 189 37K 9416
gtaskqueue 22 34K 22
hostcache 1 32K 1
shm 1 32K 2
DEVFS3 124 31K 134
msg 4 30K 4
DEVFS_RULE 56 27K 56
ifaddr 75 26K 75
kbdmux 6 22K 6
vmem 3 20K 5
temp 34 17K 2165
ufs_mount 3 17K 4
lltable 45 17K 47
proc 3 17K 3
tty 16 16K 16
tidhash 1 16K 1
ithread 89 15K 89
ether_multi 172 14K 177
KTRACE 100 13K 100
ifnet 7 13K 7
kenv 95 12K 99
in6_multi 89 11K 89
eventhandler 122 11K 122
pfs_nodes 20 10K 20
GEOM 60 10K 487
rman 82 10K 423
devstat 4 9K 4
UART 12 9K 12
bmsafemap 1 8K 1405
rpc 2 8K 2
shmfd 1 8K 1
cred 32 8K 260
pfs_vncache 1 8K 1
select 63 8K 63
sctp_timw 30 8K 30
audit_evclass 231 8K 289
routetbl 58 7K 62
CAM DEV 3 6K 508
kqueue 61 6K 2259
plimit 23 6K 398
vt 11 6K 11
sglist 5 6K 5
CAM queue 5 6K 1522
DEVFSP 76 5K 80
taskqueue 42 5K 42
memdesc 1 4K 1
MCA 32 4K 32
ufs_dirhash 8 4K 24
evdev 4 4K 4
kcovinfo 64 4K 68
session 31 4K 45
pgrp 31 4K 45
UMA 233 4K 233
hhook 13 4K 13
lockf 28 3K 47
acpisem 22 3K 22
terminal 11 3K 11
proc-args 50 3K 627
uidinfo 4 3K 5
sctp_ifa 17 3K 17
CAM CCB 1 2K 3555
local_apic 1 2K 1
io_apic 1 2K 1
ipsec-saq 2 2K 2
ip6ndp 12 2K 21
Unitno 30 2K 7677
CAM XPT 22 2K 541
in_multi 6 2K 7
acpidev 20 2K 20
crypto 2 2K 2
msi 9 2K 9
tun 7 2K 7
ipsecpolicy 1 1K 1
sahead 1 1K 1
secasvar 1 1K 1
clone 8 1K 8
NFSD session 1 1K 1
CAM periph 4 1K 270
inpcbpolicy 26 1K 5996
mld 6 1K 6
sctp_ifn 6 1K 6
igmp 6 1K 6
toponodes 6 1K 6
isadev 6 1K 6
mount 16 1K 86
pci_link 10 1K 10
mkdir 5 1K 2630
CAM SIM 2 1K 2
softdep 1 1K 1
diradd 4 1K 1380
sctp_atcl 1 1K 269
chacha20random 1 1K 1
epoch 4 1K 4
cdev 2 1K 2
encap_export_host 8 1K 8
pfil 3 1K 3
osd 3 1K 9
freework 2 1K 1509
newdirblk 4 1K 1315
freeblks 1 1K 1348
vnodes 1 1K 1
NFSD lckfile 1 1K 1
NFSD V4client 1 1K 1
DEVFS 9 1K 10
feeder 7 1K 7
loginclass 3 1K 3
soname 5 1K 6019
CAM path 4 1K 1030
apmdev 1 1K 1
atkbddev 2 1K 2
dirrem 1 1K 1343
freefile 1 1K 1341
freefrag 1 1K 10
pmchooks 1 1K 1
prison 4 1K 4
CAM dev queue 2 1K 2
CAM I/O Scheduler 1 1K 1
nexusdev 5 1K 5
entropy 2 1K 40
tcpfunc 1 1K 1
sctp_vrf 1 1K 1
vnet 1 1K 1
acpiintr 1 1K 1
pmc 1 1K 1
filecaps 4 1K 104
cpus 2 1K 2
sctp_atky 1 1K 369
vnet_data_free 1 1K 1
Per-cpu 1 1K 1
sctp_socko 1 1K 261
sctp_athm 1 1K 269
p1003.1b 1 1K 1
madt_table 0 0K 2
PUC 0 0K 0
ppbusdev 0 0K 0
agtiapi_MemAlloc malloc 0 0K 0
osti_cacheable 0 0K 0
tempbuff 0 0K 0
tempbuff 0 0K 0
pvscsi 0 0K 0
smartpqi 0 0K 0
ag_tgt_map_t malloc 0 0K 0
ag_slr_map_t malloc 0 0K 0
lDevFlags * malloc 0 0K 0
tiDeviceHandle_t * malloc 0 0K 0
ag_portal_data_t malloc 0 0K 0
ag_device_t malloc 0 0K 0
STLock malloc 0 0K 0
CCB List 0 0K 0
iavf 0 0K 0
ixl 0 0K 0
sr_iov 0 0K 0
OCS 0 0K 0
OCS 0 0K 0
nvme 0 0K 0
nvd 0 0K 0
netmap 0 0K 0
mwldev 0 0K 0
MVS driver 0 0K 0
fpukern_ctx 0 0K 0
xen_intr 0 0K 0
CAM ccb queue 0 0K 0
xen_hvm 0 0K 0
legacydrv 0 0K 0
qpidrv 0 0K 0
mrsasbuf 0 0K 0
mpt_user 0 0K 0
dmar_idpgtbl 0 0K 0
dmar_dom 0 0K 0
dmar_ctx 0 0K 0
dmar_dmamap 0 0K 0
mps_user 0 0K 0
MPSSAS 0 0K 0
isci 0 0K 0
bxe_ilt 0 0K 0
xenbus 0 0K 0
vm_fictitious 0 0K 0
mps 0 0K 0
mpr_user 0 0K 0
MPRSAS 0 0K 0
UMAHash 0 0K 0
vm_pgdata 0 0K 0
jblocks 0 0K 0
savedino 0 0K 1392
sentinel 0 0K 0
jfsync 0 0K 0
jtrunc 0 0K 0
sbdep 0 0K 16
jsegdep 0 0K 0
jseg 0 0K 0
jfreefrag 0 0K 0
jfreeblk 0 0K 0
jnewblk 0 0K 0
jmvref 0 0K 0
jremref 0 0K 0
jaddref 0 0K 0
freedep 0 0K 0
allocindir 0 0K 0
indirdep 0 0K 170
allocdirect 0 0K 0
ufs_trim 0 0K 0
mactemp 0 0K 0
audit_trigger 0 0K 0
audit_pipe_presel 0 0K 0
audit_pipeent 0 0K 0
audit_pipe 0 0K 0
audit_evname 0 0K 0
audit_bsm 0 0K 0
audit_gidset 0 0K 0
audit_text 0 0K 0
audit_path 0 0K 0
audit_data 0 0K 0
audit_cred 0 0K 0
xform 0 0K 0
NLM 0 0K 0
nfsclient_nlminfo 0 0K 0
nfsclient_lock 0 0K 0
NFS FHA 0 0K 0
ipsec-spdcache 0 0K 0
ipsec-reg 0 0K 0
ipsec-misc 0 0K 0
ipsecrequest 0 0K 0
ip6opt 0 0K 6
ip6_msource 0 0K 0
ip6_moptions 0 0K 2
in6_mfilter 0 0K 2
frag6 0 0K 0
tcplog 0 0K 0
LRO 0 0K 0
sctp_mcore 0 0K 0
sctp_iter 0 0K 9
sctp_mvrf 0 0K 0
sctp_cpal 0 0K 0
sctp_cmsg 0 0K 0
sctp_stre 0 0K 0
sctp_athi 0 0K 0
sctp_a_it 0 0K 9
sctp_aadr 0 0K 0
sctp_stro 0 0K 100
sctp_stri 0 0K 0
sctp_map 0 0K 200
newreno data 0 0K 0
ip_msource 0 0K 0
ip_moptions 0 0K 2
in_mfilter 0 0K 2
ipid 0 0K 0
80211scan 0 0K 0
80211ratectl 0 0K 0
80211power 0 0K 0
80211nodeie 0 0K 0
80211node 0 0K 0
80211mesh_gt 0 0K 0
80211mesh_rt 0 0K 0
80211perr 0 0K 0
80211prep 0 0K 0
80211preq 0 0K 0
80211dfs 0 0K 0
80211crypto 0 0K 0
80211vap 0 0K 0
iflib 0 0K 0
vlan 0 0K 0
gif 0 0K 0
ifdescr 0 0K 0
zlib 0 0K 0
fadvise 0 0K 0
vnodemarker 0 0K 34
mpr 0 0K 0
statfs 0 0K 1496
export_host 0 0K 0
cl_savebuf 0 0K 4
biobuf 0 0K 0
aios 0 0K 0
lio 0 0K 0
acl 0 0K 0
mfibuf 0 0K 0
mbuf_tag 0 0K 123
accf 0 0K 0
pts 0 0K 0
iov 0 0K 18191
ioctlops 0 0K 203
Witness 0 0K 0
stack 0 0K 0
md_sectors 0 0K 0
sbuf 0 0K 364
md_disk 0 0K 0
compressor 0 0K 0
malodev 0 0K 0
SWAP 0 0K 0
LED 0 0K 0
sysctltmp 0 0K 645
sysctl 0 0K 1
ekcd 0 0K 0
dumper 0 0K 0
rctl 0 0K 0
ix_sriov 0 0K 0
aacraidcam 0 0K 0
ix 0 0K 0
ipsbuf 0 0K 0
iirbuf 0 0K 0
cache 0 0K 0
aacraid_buf 0 0K 0
prison_racct 0 0K 0
Fail Points 0 0K 0
sigio 0 0K 1
filedesc_to_leader 0 0K 0
tty console 0 0K 0
aaccam 0 0K 0
aacbuf 0 0K 0
zstd 0 0K 0
nvlist 0 0K 0
SCSI ENC 0 0K 0
SCSI sa 0 0K 0
isofs_node 0 0K 0
isofs_mount 0 0K 0
tr_raid5_data 0 0K 0
tr_raid1e_data 0 0K 0
tr_raid1_data 0 0K 0
tr_raid0_data 0 0K 0
tr_concat_data 0 0K 0
md_sii_data 0 0K 0
md_promise_data 0 0K 0
md_nvidia_data 0 0K 0
md_jmicron_data 0 0K 0
md_intel_data 0 0K 0
md_ddf_data 0 0K 0
raid_data 0 0K 72
geom_flashmap 0 0K 0
newnfsmnt 0 0K 0
newnfsclient_req 0 0K 0
NFSCL layrecall 0 0K 0
NFSCL session 0 0K 0
NFSCL sockreq 0 0K 0
NFSCL devinfo 0 0K 0
NFSCL flayout 0 0K 0
NFSCL layout 0 0K 0
NFSD rollback 0 0K 0
NFSCL diroffdiroff 0 0K 0
NEWdirectio 0 0K 0
NEWNFSnode 0 0K 0
NFSCL lck 0 0K 0
NFSCL lckown 0 0K 0
NFSCL client 0 0K 0
NFSCL deleg 0 0K 0
NFSCL open 0 0K 0
NFSCL owner 0 0K 0
NFS fh 0 0K 0
NFS req 0 0K 0
NFSD usrgroup 0 0K 0
NFSD string 0 0K 0
NFSD V4lock 0 0K 0
NFSD V4state 0 0K 0
NFSD srvcache 0 0K 0
msdosfs_fat 0 0K 0
msdosfs_mount 0 0K 0
msdosfs_node 0 0K 0
DEVFS4 0 0K 0
DEVFS2 0 0K 0
gntdev 0 0K 0
privcmd_dev 0 0K 0
evtchn_dev 0 0K 0
xenstore 0 0K 0
scsi_pass 0 0K 0
ciss_data 0 0K 0
xnb 0 0K 0
xbbd 0 0K 0
xbd 0 0K 0
Balloon 0 0K 0
sysmouse 0 0K 0
vtfont 0 0K 0
ath_hal 0 0K 0
athdev 0 0K 0
ata_pci 0 0K 0
ata_dma 0 0K 0
ata_generic 0 0K 0
amr 0 0K 0
scsi_da 0 0K 69
ata_da 0 0K 0
scsi_ch 0 0K 0
scsi_cd 0 0K 0
USBdev 0 0K 0
USB 0 0K 0
AHCI driver 0 0K 0
agp 0 0K 0
nvme_da 0 0K 0
acpipwr 0 0K 0
twsbuf 0 0K 0
twe_commands 0 0K 0
twa_commands 0 0K 0
tcp_log_dev 0 0K 0
midi buffers 0 0K 0
mixer 0 0K 0
ac97 0 0K 0
hdacc 0 0K 0
hdac 0 0K 0
hdaa 0 0K 0
acpi_perf 0 0K 0
acpicmbat 0 0K 0
SIIS driver 0 0K 0
db> show ktr
No such command; use "help" to list available commands
---
This bug is generated by a bot. It may contain errors.
See https://goo.gl/tpsmEJ for more information about syzbot.
syzbot engineers can be reached at syzk...@googlegroups.com.
syzbot will keep track of this bug report. See:
https://goo.gl/tpsmEJ#status for how to communicate with syzbot.
syzbot found the following crash on:
HEAD commit: bdb3ec24 Make page busy state deterministic on free. Page..
git tree: freebsd
console output: https://syzkaller.appspot.com/x/log.txt?x=144316c1e00000
dashboard link: https://syzkaller.appspot.com/bug?extid=a38c3729810502fc5211
Unfortunately, I don't have any reproducer for this crash yet.
IMPORTANT: if you fix the bug, please add the following tag to the commit:
Reported-by: syzbot+a38c37...@syzkaller.appspotmail.com
Fatal trap 12: page fault while in kernel mode
cpuid = 1; apic id = 01
fault virtual address = 0xbf60
fault code = supervisor read data, page not present
instruction pointer = 0x20:0xffffffff8133f3d0
stack pointer = 0x28:0xfffffe0024483890
frame pointer = 0x28:0xfffffe0024483930
code segment = base 0x0, limit 0xfffff, type 0x1b
= DPL 0, pres 1, long 1, def32 0, gran 1
processor eflags =
interrupt enabled, resume, IOPL = 0
current process = 2251 (syz-executor.1)
trap number = 12
panic: page fault
cpuid = 1
time = 1577041606
KDB: stack backtrace:
db_trace_self_wrapper() at db_trace_self_wrapper+0x47/frame
0xfffffe0024483490
vpanic() at vpanic+0x1c7/frame 0xfffffe0024483500
panic() at panic+0x43/frame 0xfffffe0024483560
trap_fatal() at trap_fatal+0x4cc/frame 0xfffffe00244835e0
trap_pfault() at trap_pfault+0xdc/frame 0xfffffe0024483680
trap() at trap+0x441/frame 0xfffffe00244837c0
calltrap() at calltrap+0x8/frame 0xfffffe00244837c0
--- trap 0xc, rip = 0xffffffff8133f3d0, rsp = 0xfffffe0024483890, rbp =
0xfffffe0024483930 ---
sctp_inpcb_bind() at sctp_inpcb_bind+0x430/frame 0xfffffe0024483930
sctp6_connect() at sctp6_connect+0x208/frame 0xfffffe00244839b0
soconnectat() at soconnectat+0x183/frame 0xfffffe0024483a10
kern_connectat() at kern_connectat+0x1ec/frame 0xfffffe0024483a70
sys_connect() at sys_connect+0xd9/frame 0xfffffe0024483ab0
amd64_syscall() at amd64_syscall+0x499/frame 0xfffffe0024483bf0
fast_syscall_common() at fast_syscall_common+0x101/frame 0xfffffe0024483bf0
--- syscall (198, FreeBSD ELF64, nosys), rip = 0x4132ea, rsp =
0x7fffdffdcf38, rbp = 0x3 ---
KDB: enter: panic
[ thread pid 2251 tid 100801 ]
Stopped at kdb_enter+0x67: movq $0,0x14600e6(%rip)
db> set $lines = 0
db> set $maxwidth = 0
db> show registers
cs 0x20
ds 0x3b ll+0x1a
es 0x3b ll+0x1a
fs 0x13
gs 0x1b
ss 0x28 ll+0x7
rax 0x12
rcx 0xfffffe0027200000
rdx 0x3ffff
rbx 0
rsp 0xfffffe0024483470
rbp 0xfffffe0024483490
rsi 0x40001
rdi 0xffffffff810c0ea1 vprintf+0xe1
r8 0
r9 0xffffffff
r10 0
r11 0xfffff8003420ebd0
r12 0xffffffff82068d90 ddb_dbbe
r13 0
r14 0xffffffff81936bdd
r15 0xffffffff81936bdd
rip 0xffffffff810b6127 kdb_enter+0x67
rflags 0x82 ll+0x61
kdb_enter+0x67: movq $0,0x14600e6(%rip)
db> show proc
Process 2251 (syz-executor.1) at 0xfffff80059b4ca60:
state: NORMAL
uid: 0 gids: 0, 0, 5
parent: pid 770 at 0xfffff80003e69530
ABI: FreeBSD ELF64
arguments: /root/syz-executor.1
reaper: 0xfffff800032b8530 reapsubtree: 1
sigparent: 20
vmspace: 0xfffff8003af5e000
(map 0xfffff8003af5e000)
(map.pmap 0xfffff8003af5e0c0)
(pmap 0xfffff8003af5e120)
threads: 5
100255 RunQ syz-executor.1
100799 S sbwait 0xfffff80003e2d55c syz-executor.1
100801 Run CPU 1 syz-executor.1
100802 L *sctp-in 0xfffff8003aaafb40 syz-executor.1
100805 RunQ syz-executor.1
db> ps
pid ppid pgrp uid state wmesg wchan cmd
2252 783 783 0 R (threaded) syz-executor.3
100434 RunQ syz-executor.3
100804 S sbwait 0xfffff80003e9a55c syz-executor.3
2251 770 770 0 R (threaded) syz-executor.1
100255 RunQ syz-executor.1
100799 S sbwait 0xfffff80003e2d55c syz-executor.1
100801 Run CPU 1 syz-executor.1
100802 L *sctp-in 0xfffff8003aaafb40 syz-executor.1
100805 RunQ syz-executor.1
2250 771 771 0 R (threaded) syz-executor.2
100470 RunQ syz-executor.2
100782 S sbwait 0xfffff80003e248e4 syz-executor.2
100796 S uwait 0xfffff800030c1600 syz-executor.2
100798 S uwait 0xfffff80003c5fd80 syz-executor.2
2249 769 769 0 R (threaded) syz-executor.0
100593 RunQ syz-executor.0
100776 S select 0xfffff80003cd37c0 syz-executor.0
100781 S uwait 0xfffff8003ab4fe00 syz-executor.0
100785 S uwait 0xfffff8003ab4fa00 syz-executor.0
100787 S uwait 0xfffff80003c5fb80 syz-executor.0
1935 1929 1935 0 Ss select 0xfffff8003a21c040 dhclient
1932 1 1932 0 Ss select 0xfffff800550702c0 dhclient
1929 1922 422 65 S select 0xfffff8003a21acc0 dhclient
1922 422 422 0 S wait 0xfffff80003df3530 sh
1881 1 1881 65 Ss select 0xfffff8003a21aec0 dhclient
1513 1 1513 0 Ss select 0xfffff8003a21a940 dhclient
1510 1 1510 0 Ss select 0xfffff8003a21a8c0 dhclient
1488 1 1488 65 Ss select 0xfffff8003a21c140 dhclient
981 1 981 0 Ss select 0xfffff80003cd3840 dhclient
978 1 978 0 Ss select 0xfffff8003a21c2c0 dhclient
783 766 783 0 Rs syz-executor.3
771 766 771 0 Rs syz-executor.2
770 766 770 0 Rs syz-executor.1
769 766 769 0 Rs syz-executor.0
766 764 764 0 S (threaded) syz-fuzzer
100085 S uwait 0xfffff800030c1400 syz-fuzzer
100105 S uwait 0xfffff80003c60480 syz-fuzzer
100106 S uwait 0xfffff80003c60680 syz-fuzzer
100107 S kqread 0xfffff8000333ee00 syz-fuzzer
100108 S uwait 0xfffff8003a20de00 syz-fuzzer
100109 S uwait 0xfffff8003a20df00 syz-fuzzer
100110 S uwait 0xfffff8003a20e080 syz-fuzzer
100111 S uwait 0xfffff80003c5fa80 syz-fuzzer
100112 S uwait 0xfffff8003a20e180 syz-fuzzer
100113 S uwait 0xfffff8003a20d880 syz-fuzzer
764 762 764 0 SWs pause 0xfffff80003d350a8 csh
762 680 762 0 Ss select 0xfffff80003cd3a40 sshd
746 1 746 0 Rs+ CPU 0 getty
745 1 745 0 Ss+ ttyin 0xfffff80003af10b0 getty
744 1 744 0 Ss+ ttyin 0xfffff80003ae10b0 getty
743 1 743 0 Ss+ ttyin 0xfffff80003ae18b0 getty
742 1 742 0 Ss+ ttyin 0xfffff80003ae20b0 getty
741 1 741 0 Ss+ ttyin 0xfffff80003ae28b0 getty
740 1 740 0 Ss+ ttyin 0xfffff80003ae30b0 getty
739 1 739 0 Ss+ ttyin 0xfffff80003ae38b0 getty
738 1 738 0 Ss+ ttyin 0xfffff80003ae40b0 getty
684 1 684 0 Ss nanslp 0xffffffff824fee11 cron
680 1 680 0 Ss select 0xfffff80003cd4040 sshd
493 1 493 0 Ds bo_wwai 0xfffff8003a49d338 syslogd
422 1 422 0 Ss wait 0xfffff80003d35a60 devd
421 1 421 65 Ss select 0xfffff8003a21c9c0 dhclient
336 1 336 0 Ss select 0xfffff8003a21ccc0 dhclient
333 1 333 0 Ss select 0xfffff8003a21cb40 dhclient
21 0 0 0 DL syncer 0xffffffff825d52e0 [syncer]
20 0 0 0 DL vlruwt 0xfffff80003aff000 [vnlru]
19 0 0 0 DL (threaded) [bufdaemon]
100065 D qsleep 0xffffffff825d4798 [bufdaemon]
100070 D - 0xffffffff8200a980
[bufspacedaemon-0]
100081 D sdflush 0xfffff8000308e0e8 [/ worker]
18 0 0 0 DL psleep 0xffffffff825f01c8 [vmdaemon]
17 0 0 0 DL (threaded) [pagedaemon]
100063 D psleep 0xffffffff8261d0d8 [dom0]
100068 D launds 0xffffffff8261d0e4 [laundry: dom0]
100069 D umarcl 0xffffffff8153dec0 [uma]
16 0 0 0 DL - 0xffffffff82359598 [rand_harvestq]
15 0 0 0 DL waiting 0xffffffff826626a0 [sctp_iterator]
9 0 0 0 DL - 0xffffffff825d419c [soaiod4]
8 0 0 0 DL - 0xffffffff825d419c [soaiod3]
7 0 0 0 DL - 0xffffffff825d419c [soaiod2]
6 0 0 0 DL - 0xffffffff825d419c [soaiod1]
5 0 0 0 DL (threaded) [cam]
100031 D - 0xffffffff82234940 [doneq0]
100062 D - 0xffffffff82234808 [scanner]
4 0 0 0 DL crypto_ 0xfffff8000333d690 [crypto
returns 1]
3 0 0 0 DL crypto_ 0xfffff8000333d630 [crypto
returns 0]
2 0 0 0 DL crypto_ 0xffffffff825ea268 [crypto]
14 0 0 0 DL seqstat 0xfffff8000334f888 [sequencer 00]
13 0 0 0 DL (threaded) [geom]
100022 D - 0xffffffff8261b708 [g_event]
100023 D - 0xffffffff8261b718 [g_up]
100024 D - 0xffffffff8261b710 [g_down]
12 0 0 0 WL (threaded) [intr]
100005 I [swi5: fast
taskq]
100009 I [swi6: task
queue]
100010 I [swi6: Giant
taskq]
100017 I [swi3: vm]
100018 I [swi1: netisr
0]
100019 I [swi4: clock
(0)]
100020 I [swi4: clock
(1)]
100032 I [irq24:
virtio_pci0]
100033 I [irq25:
virtio_pci0]
100034 I [irq26:
virtio_pci0]
100035 I [irq27:
virtio_pci0]
100036 I [irq28:
virtio_pci1]
100037 I [irq29:
virtio_pci1]
100038 I [irq30:
virtio_pci1]
100039 I [irq31:
virtio_pci1]
100040 I [irq32:
virtio_pci1]
100045 I [irq10:
virtio_pci2]
100047 I [irq1: atkbd0]
100048 I [irq12: psm0]
100049 I [swi0: uart
uart++]
11 0 0 0 RL (threaded) [idle]
100003 CanRun [idle: cpu0]
100004 CanRun [idle: cpu1]
1 0 1 0 SLs wait 0xfffff800032b8530 [init]
10 0 0 0 DL audit_w 0xffffffff82663330 [audit]
0 0 0 0 DLs (threaded) [kernel]
100000 D swapin 0xffffffff82609d38 [swapper]
100006 D - 0xfffff800032f9000 [config_0]
100007 D - 0xfffff800032f2e00 [kqueue_ctx
taskq]
100008 D - 0xfffff800032f2d00 [aiod_kick
taskq]
100011 D - 0xfffff800032f2a00 [thread taskq]
100012 D - 0xfffff800032f8e00
[if_config_tqg_0]
100013 D - 0xfffff800032f8d00 [softirq_0]
100014 D - 0xfffff800032f8c00 [softirq_1]
100015 D - 0xfffff800032f8b00 [if_io_tqg_0]
100016 D - 0xfffff800032f8a00 [if_io_tqg_1]
100021 D - 0xfffff80003382100 [firmware
taskq]
100026 D - 0xfffff80003381e00 [crypto_0]
100027 D - 0xfffff80003381e00 [crypto_1]
100041 D - 0xfffff80003381a00 [vtnet0 rxq 0]
100042 D - 0xfffff80003381900 [vtnet0 txq 0]
100043 D - 0xfffff80003381800 [vtnet0 rxq 1]
100044 D - 0xfffff80003381700 [vtnet0 txq 1]
100046 D vtbslp 0xfffff80003510400
[virtio_balloon]
100050 D - 0xfffff80003381600 [mca taskq]
100051 D - 0xffffffff824fdb91 [deadlkres]
100058 D - 0xfffff80003380b00 [acpi_task_0]
100059 D - 0xfffff80003380b00 [acpi_task_1]
100060 D - 0xfffff80003380b00 [acpi_task_2]
100061 D - 0xfffff80003381d00 [CAM taskq]
db> show all locks
Process 2251 (syz-executor.1) thread 0xfffff8003420e6e0 (100801)
exclusive sleep mutex sctp-inp (inp) r = 0 (0xfffff8003a3d8468) locked @
/syzkaller/managers/main/kernel/sys/netinet/sctp_pcb.c:2918
exclusive rw sctp-info (sctp-info) r = 0 (0xfffffe0004958b50) locked @
/syzkaller/managers/main/kernel/sys/netinet/sctp_pcb.c:2917
exclusive sleep mutex sctp-create (inp_create) r = 0 (0xfffff8003a3d8488)
locked @ /syzkaller/managers/main/kernel/sys/netinet6/sctp6_usrreq.c:835
Process 746 (getty) thread 0xfffff80003d5a6e0 (100080)
exclusive sleep mutex ttymtx (ttymtx) r = 0 (0xfffff80003814c08) locked @
/syzkaller/managers/main/kernel/sys/kern/tty.c:216
Process 493 (syslogd) thread 0xfffff80003c5c6e0 (100086)
exclusive lockmgr ufs (ufs) r = 0 (0xfffff8003a49d248) locked @
/syzkaller/managers/main/kernel/sys/kern/vfs_syscalls.c:3431
db> show malloc
Type InUse MemUse Requests
devbuf 4213 4851K 4241
vtbuf 24 1968K 46
sysctloid 23668 1374K 23732
kobj 333 1332K 489
newblk 7 1026K 2755
vfscache 4 1025K 4
pcb 27 539K 453
inodedep 11 517K 1425
ufs_quota 1 512K 1
vfs_hash 1 512K 1
callout 2 512K 2
intr 4 388K 4
subproc 135 274K 2329
acpica 1674 185K 49997
vnet_data 1 168K 1
filedesc 21 149K 2655
pagedep 9 130K 1332
tfo_ccache 1 128K 1
sem 4 106K 4
DEVFS1 105 105K 122
linker 221 89K 252
bus 976 79K 3333
mtx_pool 2 72K 2
BPF 38 71K 38
syncache 1 68K 1
acpitask 1 64K 1
ddb_capture 1 64K 1
module 495 62K 495
umtx 316 40K 316
kdtrace 189 37K 9416
gtaskqueue 22 34K 22
hostcache 1 32K 1
shm 1 32K 2
DEVFS3 124 31K 134
msg 4 30K 4
DEVFS_RULE 56 27K 56
ifaddr 75 26K 75
kbdmux 6 22K 6
vmem 3 20K 5
temp 34 17K 2165
ufs_mount 3 17K 4
lltable 45 17K 47
proc 3 17K 3
tty 16 16K 16
tidhash 1 16K 1
ithread 89 15K 89
ether_multi 172 14K 177
KTRACE 100 13K 100
ifnet 7 13K 7
kenv 95 12K 99
in6_multi 89 11K 89
eventhandler 122 11K 122
pfs_nodes 20 10K 20
GEOM 60 10K 487
rman 82 10K 423
devstat 4 9K 4
UART 12 9K 12
bmsafemap 1 8K 1405
rpc 2 8K 2
shmfd 1 8K 1
cred 32 8K 260
pfs_vncache 1 8K 1
select 63 8K 63
sctp_timw 30 8K 30
audit_evclass 231 8K 289
routetbl 58 7K 62
CAM DEV 3 6K 508
kqueue 61 6K 2259
plimit 23 6K 398
vt 11 6K 11
sglist 5 6K 5
CAM queue 5 6K 1522
DEVFSP 76 5K 80
taskqueue 42 5K 42
memdesc 1 4K 1
MCA 32 4K 32
ufs_dirhash 8 4K 24
evdev 4 4K 4
kcovinfo 64 4K 68
session 31 4K 45
pgrp 31 4K 45
UMA 233 4K 233
hhook 13 4K 13
lockf 28 3K 47
acpisem 22 3K 22
terminal 11 3K 11
proc-args 50 3K 627
uidinfo 4 3K 5
sctp_ifa 17 3K 17
CAM CCB 1 2K 3555
local_apic 1 2K 1
io_apic 1 2K 1
ipsec-saq 2 2K 2
ip6ndp 12 2K 21
Unitno 30 2K 7677
CAM XPT 22 2K 541
in_multi 6 2K 7
acpidev 20 2K 20
crypto 2 2K 2
msi 9 2K 9
tun 7 2K 7
ipsecpolicy 1 1K 1
sahead 1 1K 1
secasvar 1 1K 1
clone 8 1K 8
NFSD session 1 1K 1
CAM periph 4 1K 270
inpcbpolicy 26 1K 5996
mld 6 1K 6
sctp_ifn 6 1K 6
igmp 6 1K 6
toponodes 6 1K 6
isadev 6 1K 6
mount 16 1K 86
pci_link 10 1K 10
mkdir 5 1K 2630
CAM SIM 2 1K 2
softdep 1 1K 1
diradd 4 1K 1380
sctp_atcl 1 1K 269
chacha20random 1 1K 1
epoch 4 1K 4
cdev 2 1K 2
encap_export_host 8 1K 8
pfil 3 1K 3
osd 3 1K 9
freework 2 1K 1509
newdirblk 4 1K 1315
freeblks 1 1K 1348
vnodes 1 1K 1
NFSD lckfile 1 1K 1
NFSD V4client 1 1K 1
DEVFS 9 1K 10
feeder 7 1K 7
loginclass 3 1K 3
soname 5 1K 6019
CAM path 4 1K 1030
apmdev 1 1K 1
atkbddev 2 1K 2
dirrem 1 1K 1343
freefile 1 1K 1341
freefrag 1 1K 10
pmchooks 1 1K 1
prison 4 1K 4
CAM dev queue 2 1K 2
CAM I/O Scheduler 1 1K 1
nexusdev 5 1K 5
entropy 2 1K 40
tcpfunc 1 1K 1
sctp_vrf 1 1K 1
vnet 1 1K 1
acpiintr 1 1K 1
pmc 1 1K 1
filecaps 4 1K 104
cpus 2 1K 2
sctp_atky 1 1K 369
vnet_data_free 1 1K 1
Per-cpu 1 1K 1
sctp_socko 1 1K 261
sctp_athm 1 1K 269
p1003.1b 1 1K 1
madt_table 0 0K 2
PUC 0 0K 0
ppbusdev 0 0K 0
agtiapi_MemAlloc malloc 0 0K 0
osti_cacheable 0 0K 0
tempbuff 0 0K 0
tempbuff 0 0K 0
pvscsi 0 0K 0
smartpqi 0 0K 0
ag_tgt_map_t malloc 0 0K 0
ag_slr_map_t malloc 0 0K 0
lDevFlags * malloc 0 0K 0
tiDeviceHandle_t * malloc 0 0K 0
ag_portal_data_t malloc 0 0K 0
ag_device_t malloc 0 0K 0
STLock malloc 0 0K 0
CCB List 0 0K 0
iavf 0 0K 0
ixl 0 0K 0
sr_iov 0 0K 0
OCS 0 0K 0
OCS 0 0K 0
nvme 0 0K 0
nvd 0 0K 0
netmap 0 0K 0
mwldev 0 0K 0
MVS driver 0 0K 0
fpukern_ctx 0 0K 0
xen_intr 0 0K 0
CAM ccb queue 0 0K 0
xen_hvm 0 0K 0
legacydrv 0 0K 0
qpidrv 0 0K 0
mrsasbuf 0 0K 0
mpt_user 0 0K 0
dmar_idpgtbl 0 0K 0
dmar_dom 0 0K 0
dmar_ctx 0 0K 0
dmar_dmamap 0 0K 0
mps_user 0 0K 0
MPSSAS 0 0K 0
isci 0 0K 0
bxe_ilt 0 0K 0
xenbus 0 0K 0
vm_fictitious 0 0K 0
mps 0 0K 0
mpr_user 0 0K 0
MPRSAS 0 0K 0
UMAHash 0 0K 0
vm_pgdata 0 0K 0
jblocks 0 0K 0
savedino 0 0K 1392
sentinel 0 0K 0
jfsync 0 0K 0
jtrunc 0 0K 0
sbdep 0 0K 16
jsegdep 0 0K 0
jseg 0 0K 0
jfreefrag 0 0K 0
jfreeblk 0 0K 0
jnewblk 0 0K 0
jmvref 0 0K 0
jremref 0 0K 0
jaddref 0 0K 0
freedep 0 0K 0
allocindir 0 0K 0
indirdep 0 0K 170
allocdirect 0 0K 0
ufs_trim 0 0K 0
mactemp 0 0K 0
audit_trigger 0 0K 0
audit_pipe_presel 0 0K 0
audit_pipeent 0 0K 0
audit_pipe 0 0K 0
audit_evname 0 0K 0
audit_bsm 0 0K 0
audit_gidset 0 0K 0
audit_text 0 0K 0
audit_path 0 0K 0
audit_data 0 0K 0
audit_cred 0 0K 0
xform 0 0K 0
NLM 0 0K 0
nfsclient_nlminfo 0 0K 0
nfsclient_lock 0 0K 0
NFS FHA 0 0K 0
ipsec-spdcache 0 0K 0
ipsec-reg 0 0K 0
ipsec-misc 0 0K 0
ipsecrequest 0 0K 0
ip6opt 0 0K 6
ip6_msource 0 0K 0
ip6_moptions 0 0K 2
in6_mfilter 0 0K 2
frag6 0 0K 0
tcplog 0 0K 0
LRO 0 0K 0
sctp_mcore 0 0K 0
sctp_iter 0 0K 9
sctp_mvrf 0 0K 0
sctp_cpal 0 0K 0
sctp_cmsg 0 0K 0
sctp_stre 0 0K 0
sctp_athi 0 0K 0
sctp_a_it 0 0K 9
sctp_aadr 0 0K 0
sctp_stro 0 0K 100
sctp_stri 0 0K 0
sctp_map 0 0K 200
newreno data 0 0K 0
ip_msource 0 0K 0
ip_moptions 0 0K 2
in_mfilter 0 0K 2
ipid 0 0K 0
80211scan 0 0K 0
80211ratectl 0 0K 0
80211power 0 0K 0
80211nodeie 0 0K 0
80211node 0 0K 0
80211mesh_gt 0 0K 0
80211mesh_rt 0 0K 0
80211perr 0 0K 0
80211prep 0 0K 0
80211preq 0 0K 0
80211dfs 0 0K 0
80211crypto 0 0K 0
80211vap 0 0K 0
iflib 0 0K 0
vlan 0 0K 0
gif 0 0K 0
ifdescr 0 0K 0
zlib 0 0K 0
fadvise 0 0K 0
vnodemarker 0 0K 34
mpr 0 0K 0
statfs 0 0K 1496
export_host 0 0K 0
cl_savebuf 0 0K 4
biobuf 0 0K 0
aios 0 0K 0
lio 0 0K 0
acl 0 0K 0
mfibuf 0 0K 0
mbuf_tag 0 0K 123
accf 0 0K 0
pts 0 0K 0
iov 0 0K 18191
ioctlops 0 0K 203
Witness 0 0K 0
stack 0 0K 0
md_sectors 0 0K 0
sbuf 0 0K 364
md_disk 0 0K 0
compressor 0 0K 0
malodev 0 0K 0
SWAP 0 0K 0
LED 0 0K 0
sysctltmp 0 0K 645
sysctl 0 0K 1
ekcd 0 0K 0
dumper 0 0K 0
rctl 0 0K 0
ix_sriov 0 0K 0
aacraidcam 0 0K 0
ix 0 0K 0
ipsbuf 0 0K 0
iirbuf 0 0K 0
cache 0 0K 0
aacraid_buf 0 0K 0
prison_racct 0 0K 0
Fail Points 0 0K 0
sigio 0 0K 1
filedesc_to_leader 0 0K 0
tty console 0 0K 0
aaccam 0 0K 0
aacbuf 0 0K 0
zstd 0 0K 0
nvlist 0 0K 0
SCSI ENC 0 0K 0
SCSI sa 0 0K 0
isofs_node 0 0K 0
isofs_mount 0 0K 0
tr_raid5_data 0 0K 0
tr_raid1e_data 0 0K 0
tr_raid1_data 0 0K 0
tr_raid0_data 0 0K 0
tr_concat_data 0 0K 0
md_sii_data 0 0K 0
md_promise_data 0 0K 0
md_nvidia_data 0 0K 0
md_jmicron_data 0 0K 0
md_intel_data 0 0K 0
md_ddf_data 0 0K 0
raid_data 0 0K 72
geom_flashmap 0 0K 0
newnfsmnt 0 0K 0
newnfsclient_req 0 0K 0
NFSCL layrecall 0 0K 0
NFSCL session 0 0K 0
NFSCL sockreq 0 0K 0
NFSCL devinfo 0 0K 0
NFSCL flayout 0 0K 0
NFSCL layout 0 0K 0
NFSD rollback 0 0K 0
NFSCL diroffdiroff 0 0K 0
NEWdirectio 0 0K 0
NEWNFSnode 0 0K 0
NFSCL lck 0 0K 0
NFSCL lckown 0 0K 0
NFSCL client 0 0K 0
NFSCL deleg 0 0K 0
NFSCL open 0 0K 0
NFSCL owner 0 0K 0
NFS fh 0 0K 0
NFS req 0 0K 0
NFSD usrgroup 0 0K 0
NFSD string 0 0K 0
NFSD V4lock 0 0K 0
NFSD V4state 0 0K 0
NFSD srvcache 0 0K 0
msdosfs_fat 0 0K 0
msdosfs_mount 0 0K 0
msdosfs_node 0 0K 0
DEVFS4 0 0K 0
DEVFS2 0 0K 0
gntdev 0 0K 0
privcmd_dev 0 0K 0
evtchn_dev 0 0K 0
xenstore 0 0K 0
scsi_pass 0 0K 0
ciss_data 0 0K 0
xnb 0 0K 0
xbbd 0 0K 0
xbd 0 0K 0
Balloon 0 0K 0
sysmouse 0 0K 0
vtfont 0 0K 0
ath_hal 0 0K 0
athdev 0 0K 0
ata_pci 0 0K 0
ata_dma 0 0K 0
ata_generic 0 0K 0
amr 0 0K 0
scsi_da 0 0K 69
ata_da 0 0K 0
scsi_ch 0 0K 0
scsi_cd 0 0K 0
USBdev 0 0K 0
USB 0 0K 0
AHCI driver 0 0K 0
agp 0 0K 0
nvme_da 0 0K 0
acpipwr 0 0K 0
twsbuf 0 0K 0
twe_commands 0 0K 0
twa_commands 0 0K 0
tcp_log_dev 0 0K 0
midi buffers 0 0K 0
mixer 0 0K 0
ac97 0 0K 0
hdacc 0 0K 0
hdac 0 0K 0
hdaa 0 0K 0
acpi_perf 0 0K 0
acpicmbat 0 0K 0
SIIS driver 0 0K 0
db> show ktr
No such command; use "help" to list available commands
---
This bug is generated by a bot. It may contain errors.
See https://goo.gl/tpsmEJ for more information about syzbot.
syzbot engineers can be reached at syzk...@googlegroups.com.
syzbot will keep track of this bug report. See:
https://goo.gl/tpsmEJ#status for how to communicate with syzbot.
syzbot
Mar 21, 2020, 3:07:09 PM3/21/20
to syzkaller-f...@googlegroups.com
Auto-closing this bug as obsolete.
Crashes did not happen for a while, no reproducer and no activity.
Crashes did not happen for a while, no reproducer and no activity.
Reply all
Reply to author
Forward
0 new messages