panic: unhandled af 1
0 views
Skip to first unread message
syzbot
Jan 2, 2020, 4:52:08 AM1/2/20
to syzkaller-o...@googlegroups.com
Hello,
syzbot found the following crash on:
HEAD commit: ae88e52d Fix format expansion in window names, reported by..
git tree: openbsd
console output: https://syzkaller.appspot.com/x/log.txt?x=11789a56e00000
kernel config: https://syzkaller.appspot.com/x/.config?x=fe55924c11e64b0a
dashboard link: https://syzkaller.appspot.com/bug?extid=5dcba60c850b51f77002
Unfortunately, I don't have any reproducer for this crash yet.
IMPORTANT: if you fix the bug, please add the following tag to the commit:
Reported-by: syzbot+5dcba6...@syzkaller.appspotmail.com
panic: unhandled af 1
Stopped at db_enter+0x18: addq $0x8,%rsp
TID PID UID PRFLAGS PFLAGS CPU COMMAND
*415464 16591 0 0 0x4000000 0 syz-executor.0
db_enter() at db_enter+0x18 sys/arch/amd64/amd64/db_interface.c:398
panic(ffffffff821bafb7) at panic+0x15c sys/kern/subr_prf.c:207
unhandled_af(1) at unhandled_af+0x16
pf_addrcpy(ffff80001d435b88,ffff80001d435e80,1) at pf_addrcpy+0x99
sys/net/pf.c:409
pfioctl(4900,c0504417,ffff80001d435e80,1,ffff8000ffff3b40) at
pfioctl+0x43c0 sys/net/pf_ioctl.c:1827
VOP_IOCTL(fffffd8065b484e0,c0504417,ffff80001d435e80,1,fffffd806c3beae0,ffff8000ffff3b40)
at
VOP_IOCTL+0x88 sys/kern/vfs_vops.c:291
vn_ioctl(fffffd8057e9ac40,c0504417,ffff80001d435e80,ffff8000ffff3b40) at
vn_ioctl+0xb7 sys/kern/vfs_vnops.c:533
sys_ioctl(ffff8000ffff3b40,ffff80001d435f98,ffff80001d435fe0) at
sys_ioctl+0x5b9
syscall(ffff80001d436060) at syscall+0x507 sys/arch/amd64/amd64/trap.c:555
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x456fc2643b0, count: 5
https://www.openbsd.org/ddb.html describes the minimum info required in bug
reports. Insufficient info makes it difficult to find and fix bugs.
ddb>
ddb> set $lines = 0
ddb> set $maxwidth = 0
ddb> show panic
unhandled af 1
ddb> trace
db_enter() at db_enter+0x18 sys/arch/amd64/amd64/db_interface.c:398
panic(ffffffff821bafb7) at panic+0x15c sys/kern/subr_prf.c:207
unhandled_af(1) at unhandled_af+0x16
pf_addrcpy(ffff80001d435b88,ffff80001d435e80,1) at pf_addrcpy+0x99
sys/net/pf.c:409
pfioctl(4900,c0504417,ffff80001d435e80,1,ffff8000ffff3b40) at
pfioctl+0x43c0 sys/net/pf_ioctl.c:1827
VOP_IOCTL(fffffd8065b484e0,c0504417,ffff80001d435e80,1,fffffd806c3beae0,ffff8000ffff3b40)
at
VOP_IOCTL+0x88 sys/kern/vfs_vops.c:291
vn_ioctl(fffffd8057e9ac40,c0504417,ffff80001d435e80,ffff8000ffff3b40) at
vn_ioctl+0xb7 sys/kern/vfs_vnops.c:533
sys_ioctl(ffff8000ffff3b40,ffff80001d435f98,ffff80001d435fe0) at
sys_ioctl+0x5b9
syscall(ffff80001d436060) at syscall+0x507 sys/arch/amd64/amd64/trap.c:555
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x456fc2643b0, count: -10
ddb> show registers
rdi 0xffffffff81690f07 db_enter+0x17
rsi 0xacc
rbp 0xffff80001d435a40
rbx 0xffff80001d435af0
rdx 0xacd
rcx 0xffff80001f645000
rax 0xffff80001f645000
r8 0xffff80001d435a00
r9 0x1
r10 0xffff8000009f2ec0
r11 0xc381bcd0861769a4
r12 0x3000000008
r13 0xffff80001d435a50
r14 0x100
r15 0x1
rip 0xffffffff81690f08 db_enter+0x18
cs 0x8
rflags 0x246
rsp 0xffff80001d435a30
ss 0x10
db_enter+0x18: addq $0x8,%rsp
ddb> show proc
PROC (syz-executor.0) pid=415464 stat=onproc
flags process=0 proc=4000000<THREAD>
pri=70, usrpri=70, nice=20
forw=0xffffffffffffffff, list=0xffff8000ffff2508,0xffffffff825934e8
process=0xffff8000ffff7480 user=0xffff80001d431000,
vmspace=0xfffffd806bc09770
estcpu=36, cpticks=0, pctcpu=0.0
user=0, sys=0, intr=0
ddb> ps
PID TID PPID UID S FLAGS WAIT COMMAND
16591 5770 43766 0 2 0 syz-executor.0
*16591 415464 43766 0 7 0x4000000 syz-executor.0
43766 265896 37930 0 3 0x82 nanosleep syz-executor.0
65422 257916 37930 0 2 0x2 syz-executor.1
37930 289533 65097 0 3 0x82 thrsleep syz-fuzzer
37930 280856 65097 0 3 0x4000082 nanosleep syz-fuzzer
37930 246065 65097 0 3 0x4000082 kqread syz-fuzzer
37930 243203 65097 0 3 0x4000082 thrsleep syz-fuzzer
37930 163867 65097 0 3 0x4000082 thrsleep syz-fuzzer
37930 275622 65097 0 3 0x4000082 thrsleep syz-fuzzer
37930 440164 65097 0 3 0x4000082 thrsleep syz-fuzzer
37930 390938 65097 0 3 0x4000082 thrsleep syz-fuzzer
65097 391609 93713 0 3 0x10008a pause ksh
93713 467329 75711 0 3 0x92 select sshd
62972 444540 1 0 3 0x100083 ttyin getty
75711 169870 1 0 3 0x80 select sshd
83648 142140 89627 73 3 0x100090 kqread syslogd
89627 371900 1 0 3 0x100082 netio syslogd
62783 286765 1 77 3 0x100090 poll dhclient
93372 79669 1 0 3 0x80 poll dhclient
76870 461800 0 0 2 0x14200 zerothread
77491 94803 0 0 3 0x14200 aiodoned aiodoned
84026 82136 0 0 3 0x14200 syncer update
20744 218786 0 0 3 0x14200 cleaner cleaner
63869 387976 0 0 3 0x14200 reaper reaper
17759 179364 0 0 3 0x14200 pgdaemon pagedaemon
38117 465598 0 0 3 0x14200 bored crynlk
72018 300501 0 0 3 0x14200 bored crypto
34350 397687 0 0 3 0x40014200 acpi0 acpi0
34015 14275 0 0 3 0x14200 bored softnet
20088 430356 0 0 3 0x14200 bored systqmp
55618 466165 0 0 3 0x14200 bored systq
13613 121729 0 0 3 0x40014200 bored softclock
94417 436218 0 0 3 0x40014200 idle0
75283 382688 0 0 3 0x14200 bored smr
1 449749 0 0 3 0x82 wait init
0 0 -1 0 3 0x10200 scheduler swapper
ddb> show all locks
No such command
ddb> show malloc
Type InUse MemUse HighUse Limit Requests Type Lim
devbuf 9456 6326K 6715K 78643K 13124 0
pcb 13 8K 8K 78643K 171 0
rtable 108 3K 4K 78643K 11776 0
ifaddr 44 10K 10K 78643K 44 0
counters 19 16K 16K 78643K 19 0
ioctlops 0 0K 4K 78643K 804 0
iov 0 0K 32K 78643K 1858 0
mount 1 1K 1K 78643K 1 0
vnodes 1221 77K 77K 78643K 2754 0
UFS quota 1 32K 32K 78643K 1 0
UFS mount 5 36K 36K 78643K 5 0
shm 3 5K 9K 78643K 693 0
VM map 2 0K 0K 78643K 2 0
sem 12 1K 1K 78643K 16 0
dirhash 12 2K 2K 78643K 12 0
ACPI 1794 195K 288K 78643K 12646 0
file desc 5 13K 25K 78643K 27975 0
sigio 0 0K 0K 78643K 1048 0
proc 49 38K 63K 78643K 360 0
subproc 32 2K 2K 78643K 34 0
NFS srvsock 1 0K 0K 78643K 1 0
NFS daemon 1 16K 16K 78643K 1 0
ip_moptions 0 0K 0K 78643K 3639 0
in_multi 33 2K 2K 78643K 50 0
ether_multi 1 0K 0K 78643K 1 0
ISOFS mount 1 32K 32K 78643K 1 0
MSDOSFS mount 1 16K 16K 78643K 1 0
ttys 37 175K 175K 78643K 37 0
exec 0 0K 1K 78643K 181 0
pagedep 1 8K 8K 78643K 1 0
inodedep 1 32K 32K 78643K 1 0
newblk 1 0K 0K 78643K 1 0
VM swap 7 26K 26K 78643K 7 0
UVM amap 133 39K 39K 78643K 58078 0
UVM aobj 130 4K 4K 78643K 176 0
memdesc 1 4K 4K 78643K 1 0
crypto data 1 1K 1K 78643K 1 0
NDP 6 0K 0K 78643K 10 0
temp 109 3018K 3084K 78643K 568224 0
SYN cache 2 16K 16K 78643K 2 0
ddb> show all pools
Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg
Idle
arp 64 6 0 0 1 0 1 1 0
8 0
rtpcb 80 41879 0 41875 6 5 1 2 0
8 0
rtentry 112 45 0 1 2 0 2 2 0
8 0
unpcb 120 7891 0 7883 3 2 1 2 0
8 0
syncache 264 496 0 496 11 11 0 1 0
8 0
sackhl 24 2 0 2 1 1 0 1 0
8 0
tcpcb 544 11832 0 11828 3 2 1 3 0
8 0
inpcb 280 19195 0 19188 5 4 1 4 0
8 0
nd6 48 4 0 0 1 0 1 1 0
8 0
pkpcb 40 15 0 15 2 2 0 1 0
8 0
pfrktable 1344 1 0 0 1 0 1 1 0
8 0
pfrule 1360 81 0 0 7 0 7 7 0
8 0
art_heap8 4096 1 0 0 1 0 1 1 0
8 0
art_heap4 256 212 0 0 14 0 14 14 0
8 0
art_table 32 213 0 0 2 0 2 2 0
8 0
art_node 16 44 0 4 1 0 1 1 0
8 0
sysvmsgpl 40 218 0 218 2 2 0 1 0
8 0
semapl 112 14 0 4 1 0 1 1 0
8 0
shmpl 112 174 0 46 4 0 4 4 0
8 0
dirhash 1024 17 0 0 3 0 3 3 0
8 0
dino1pl 128 32868 0 31466 46 0 46 46 0
8 0
ffsino 240 32868 0 31466 83 0 83 83 0
8 0
nchpl 144 66734 0 65116 62 1 61 61 0
8 0
uvmvnodes 72 5926 0 0 108 0 108 108 0
8 0
vnodes 208 5926 0 0 312 0 312 312 0
8 0
namei 1024 163011 0 163011 1 0 1 1 0
8 1
vcpupl 1984 2 0 0 1 0 1 1 0
8 0
vmpool 528 4 0 2 2 1 1 1 0
8 0
scxspl 192 200001 0 200001 1 0 1 1 0
8 1
plimitpl 152 4477 0 4470 1 0 1 1 0
8 0
sigapl 432 28146 0 28133 2 0 2 2 0
8 0
futexpl 56 272732 0 272732 1 0 1 1 0
8 1
knotepl 112 434 0 415 1 0 1 1 0
8 0
kqueuepl 104 2939 0 2937 1 0 1 1 0
8 0
pipepl 112 3720 0 3701 1 0 1 1 0
8 0
fdescpl 424 28147 0 28133 2 0 2 2 0
8 0
filepl 120 133159 0 133060 29 24 5 6 0
8 2
lockfpl 104 1456 0 1455 1 0 1 1 0
8 0
lockfspl 48 673 0 672 1 0 1 1 0
8 0
sessionpl 112 17 0 7 1 0 1 1 0
8 0
pgrppl 48 130 0 120 1 0 1 1 0
8 0
ucredpl 96 20729 0 20722 1 0 1 1 0
8 0
zombiepl 144 28133 0 28133 1 0 1 1 0
8 1
processpl 872 28161 0 28133 4 0 4 4 0
8 0
procpl 632 56930 0 56894 4 0 4 4 0
8 0
sockpl 384 68980 0 68961 86 80 6 10 0
8 4
mcl64k 65536 494 0 494 16 16 0 1 0
8 0
mcl16k 16384 83 0 83 13 13 0 1 0
8 0
mcl12k 12288 111 0 111 18 17 1 1 0
8 1
mcl9k 9216 1182 0 1182 15 14 1 1 0
8 1
mcl8k 8192 1966 0 1966 26 25 1 1 0
8 1
mcl4k 4096 3026 0 3026 33 32 1 1 0
8 1
mcl2k2 2112 119 0 119 24 24 0 1 0
8 0
mcl2k 2048 64832 0 64793 16 10 6 9 0
8 0
mtagpl 80 2 0 2 1 1 0 1 0
8 0
mbufpl 256 489102 0 488920 1876 1848 28 169 0
8 8
bufpl 280 48581 0 42397 442 0 442 442 0
8 0
anonpl 16 1612090 0 1606803 32 1 31 31 0
107 0
amapchunkpl 152 98905 0 98811 45 40 5 18 0
158 0
amappl16 192 125713 0 125332 22 2 20 20 0
8 0
amappl15 184 50 0 46 1 0 1 1 0
8 0
amappl14 176 35 0 32 1 0 1 1 0
8 0
amappl13 168 2 0 1 1 0 1 1 0
8 0
amappl12 160 6 0 6 2 2 0 1 0
8 0
amappl11 152 48 0 37 1 0 1 1 0
8 0
amappl10 144 14 0 12 1 0 1 1 0
8 0
amappl9 136 14618 0 14613 1 0 1 1 0
8 0
amappl8 128 14314 0 14269 2 0 2 2 0
8 0
amappl7 120 90 0 80 1 0 1 1 0
8 0
amappl6 112 62 0 57 1 0 1 1 0
8 0
amappl5 104 576 0 564 1 0 1 1 0
8 0
amappl4 96 27932 0 27901 1 0 1 1 0
8 0
amappl3 88 1150 0 1143 1 0 1 1 0
8 0
amappl2 80 222084 0 222014 3 1 2 3 0
8 0
amappl1 72 461324 0 460907 26 16 10 20 0
8 0
amappl 80 57321 0 57285 1 0 1 1 0
84 0
dma4096 4096 1 0 1 1 1 0 1 0
8 0
dma256 256 6 0 6 1 1 0 1 0
8 0
dma128 128 253 0 253 1 1 0 1 0
8 0
dma64 64 6 0 6 1 1 0 1 0
8 0
dma32 32 7 0 7 1 1 0 1 0
8 0
dma16 16 18 0 17 1 0 1 1 0
8 0
aobjpl 64 175 0 46 3 0 3 3 0
8 0
uaddrrnd 24 28151 0 28135 1 0 1 1 0
8 0
uaddrbest 32 2 0 0 1 0 1 1 0
8 0
uaddr 24 28151 0 28135 1 0 1 1 0
8 0
vmmpekpl 168 104742 0 104718 2 0 2 2 0
8 0
vmmpepl 168 3079400 0 3077903 116 45 71 78 0
357 5
vmsppl 272 28150 0 28135 4 2 2 2 0
8 1
pdppl 4096 56308 0 56272 6 1 5 6 0
8 0
pvpl 32 4592898 0 4584612 154 68 86 115 0
265 0
pmappl 200 28150 0 28135 1 0 1 1 0
8 0
extentpl 40 46 0 29 1 0 1 1 0
8 0
phpool 112 2104 0 1951 24 18 6 9 0
8 0
---
This bug is generated by a bot. It may contain errors.
See https://goo.gl/tpsmEJ for more information about syzbot.
syzbot engineers can be reached at syzk...@googlegroups.com.
syzbot will keep track of this bug report. See:
https://goo.gl/tpsmEJ#status for how to communicate with syzbot.
syzbot found the following crash on:
HEAD commit: ae88e52d Fix format expansion in window names, reported by..
git tree: openbsd
console output: https://syzkaller.appspot.com/x/log.txt?x=11789a56e00000
kernel config: https://syzkaller.appspot.com/x/.config?x=fe55924c11e64b0a
dashboard link: https://syzkaller.appspot.com/bug?extid=5dcba60c850b51f77002
Unfortunately, I don't have any reproducer for this crash yet.
IMPORTANT: if you fix the bug, please add the following tag to the commit:
Reported-by: syzbot+5dcba6...@syzkaller.appspotmail.com
panic: unhandled af 1
Stopped at db_enter+0x18: addq $0x8,%rsp
TID PID UID PRFLAGS PFLAGS CPU COMMAND
*415464 16591 0 0 0x4000000 0 syz-executor.0
db_enter() at db_enter+0x18 sys/arch/amd64/amd64/db_interface.c:398
panic(ffffffff821bafb7) at panic+0x15c sys/kern/subr_prf.c:207
unhandled_af(1) at unhandled_af+0x16
pf_addrcpy(ffff80001d435b88,ffff80001d435e80,1) at pf_addrcpy+0x99
sys/net/pf.c:409
pfioctl(4900,c0504417,ffff80001d435e80,1,ffff8000ffff3b40) at
pfioctl+0x43c0 sys/net/pf_ioctl.c:1827
VOP_IOCTL(fffffd8065b484e0,c0504417,ffff80001d435e80,1,fffffd806c3beae0,ffff8000ffff3b40)
at
VOP_IOCTL+0x88 sys/kern/vfs_vops.c:291
vn_ioctl(fffffd8057e9ac40,c0504417,ffff80001d435e80,ffff8000ffff3b40) at
vn_ioctl+0xb7 sys/kern/vfs_vnops.c:533
sys_ioctl(ffff8000ffff3b40,ffff80001d435f98,ffff80001d435fe0) at
sys_ioctl+0x5b9
syscall(ffff80001d436060) at syscall+0x507 sys/arch/amd64/amd64/trap.c:555
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x456fc2643b0, count: 5
https://www.openbsd.org/ddb.html describes the minimum info required in bug
reports. Insufficient info makes it difficult to find and fix bugs.
ddb>
ddb> set $lines = 0
ddb> set $maxwidth = 0
ddb> show panic
unhandled af 1
ddb> trace
db_enter() at db_enter+0x18 sys/arch/amd64/amd64/db_interface.c:398
panic(ffffffff821bafb7) at panic+0x15c sys/kern/subr_prf.c:207
unhandled_af(1) at unhandled_af+0x16
pf_addrcpy(ffff80001d435b88,ffff80001d435e80,1) at pf_addrcpy+0x99
sys/net/pf.c:409
pfioctl(4900,c0504417,ffff80001d435e80,1,ffff8000ffff3b40) at
pfioctl+0x43c0 sys/net/pf_ioctl.c:1827
VOP_IOCTL(fffffd8065b484e0,c0504417,ffff80001d435e80,1,fffffd806c3beae0,ffff8000ffff3b40)
at
VOP_IOCTL+0x88 sys/kern/vfs_vops.c:291
vn_ioctl(fffffd8057e9ac40,c0504417,ffff80001d435e80,ffff8000ffff3b40) at
vn_ioctl+0xb7 sys/kern/vfs_vnops.c:533
sys_ioctl(ffff8000ffff3b40,ffff80001d435f98,ffff80001d435fe0) at
sys_ioctl+0x5b9
syscall(ffff80001d436060) at syscall+0x507 sys/arch/amd64/amd64/trap.c:555
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x456fc2643b0, count: -10
ddb> show registers
rdi 0xffffffff81690f07 db_enter+0x17
rsi 0xacc
rbp 0xffff80001d435a40
rbx 0xffff80001d435af0
rdx 0xacd
rcx 0xffff80001f645000
rax 0xffff80001f645000
r8 0xffff80001d435a00
r9 0x1
r10 0xffff8000009f2ec0
r11 0xc381bcd0861769a4
r12 0x3000000008
r13 0xffff80001d435a50
r14 0x100
r15 0x1
rip 0xffffffff81690f08 db_enter+0x18
cs 0x8
rflags 0x246
rsp 0xffff80001d435a30
ss 0x10
db_enter+0x18: addq $0x8,%rsp
ddb> show proc
PROC (syz-executor.0) pid=415464 stat=onproc
flags process=0 proc=4000000<THREAD>
pri=70, usrpri=70, nice=20
forw=0xffffffffffffffff, list=0xffff8000ffff2508,0xffffffff825934e8
process=0xffff8000ffff7480 user=0xffff80001d431000,
vmspace=0xfffffd806bc09770
estcpu=36, cpticks=0, pctcpu=0.0
user=0, sys=0, intr=0
ddb> ps
PID TID PPID UID S FLAGS WAIT COMMAND
16591 5770 43766 0 2 0 syz-executor.0
*16591 415464 43766 0 7 0x4000000 syz-executor.0
43766 265896 37930 0 3 0x82 nanosleep syz-executor.0
65422 257916 37930 0 2 0x2 syz-executor.1
37930 289533 65097 0 3 0x82 thrsleep syz-fuzzer
37930 280856 65097 0 3 0x4000082 nanosleep syz-fuzzer
37930 246065 65097 0 3 0x4000082 kqread syz-fuzzer
37930 243203 65097 0 3 0x4000082 thrsleep syz-fuzzer
37930 163867 65097 0 3 0x4000082 thrsleep syz-fuzzer
37930 275622 65097 0 3 0x4000082 thrsleep syz-fuzzer
37930 440164 65097 0 3 0x4000082 thrsleep syz-fuzzer
37930 390938 65097 0 3 0x4000082 thrsleep syz-fuzzer
65097 391609 93713 0 3 0x10008a pause ksh
93713 467329 75711 0 3 0x92 select sshd
62972 444540 1 0 3 0x100083 ttyin getty
75711 169870 1 0 3 0x80 select sshd
83648 142140 89627 73 3 0x100090 kqread syslogd
89627 371900 1 0 3 0x100082 netio syslogd
62783 286765 1 77 3 0x100090 poll dhclient
93372 79669 1 0 3 0x80 poll dhclient
76870 461800 0 0 2 0x14200 zerothread
77491 94803 0 0 3 0x14200 aiodoned aiodoned
84026 82136 0 0 3 0x14200 syncer update
20744 218786 0 0 3 0x14200 cleaner cleaner
63869 387976 0 0 3 0x14200 reaper reaper
17759 179364 0 0 3 0x14200 pgdaemon pagedaemon
38117 465598 0 0 3 0x14200 bored crynlk
72018 300501 0 0 3 0x14200 bored crypto
34350 397687 0 0 3 0x40014200 acpi0 acpi0
34015 14275 0 0 3 0x14200 bored softnet
20088 430356 0 0 3 0x14200 bored systqmp
55618 466165 0 0 3 0x14200 bored systq
13613 121729 0 0 3 0x40014200 bored softclock
94417 436218 0 0 3 0x40014200 idle0
75283 382688 0 0 3 0x14200 bored smr
1 449749 0 0 3 0x82 wait init
0 0 -1 0 3 0x10200 scheduler swapper
ddb> show all locks
No such command
ddb> show malloc
Type InUse MemUse HighUse Limit Requests Type Lim
devbuf 9456 6326K 6715K 78643K 13124 0
pcb 13 8K 8K 78643K 171 0
rtable 108 3K 4K 78643K 11776 0
ifaddr 44 10K 10K 78643K 44 0
counters 19 16K 16K 78643K 19 0
ioctlops 0 0K 4K 78643K 804 0
iov 0 0K 32K 78643K 1858 0
mount 1 1K 1K 78643K 1 0
vnodes 1221 77K 77K 78643K 2754 0
UFS quota 1 32K 32K 78643K 1 0
UFS mount 5 36K 36K 78643K 5 0
shm 3 5K 9K 78643K 693 0
VM map 2 0K 0K 78643K 2 0
sem 12 1K 1K 78643K 16 0
dirhash 12 2K 2K 78643K 12 0
ACPI 1794 195K 288K 78643K 12646 0
file desc 5 13K 25K 78643K 27975 0
sigio 0 0K 0K 78643K 1048 0
proc 49 38K 63K 78643K 360 0
subproc 32 2K 2K 78643K 34 0
NFS srvsock 1 0K 0K 78643K 1 0
NFS daemon 1 16K 16K 78643K 1 0
ip_moptions 0 0K 0K 78643K 3639 0
in_multi 33 2K 2K 78643K 50 0
ether_multi 1 0K 0K 78643K 1 0
ISOFS mount 1 32K 32K 78643K 1 0
MSDOSFS mount 1 16K 16K 78643K 1 0
ttys 37 175K 175K 78643K 37 0
exec 0 0K 1K 78643K 181 0
pagedep 1 8K 8K 78643K 1 0
inodedep 1 32K 32K 78643K 1 0
newblk 1 0K 0K 78643K 1 0
VM swap 7 26K 26K 78643K 7 0
UVM amap 133 39K 39K 78643K 58078 0
UVM aobj 130 4K 4K 78643K 176 0
memdesc 1 4K 4K 78643K 1 0
crypto data 1 1K 1K 78643K 1 0
NDP 6 0K 0K 78643K 10 0
temp 109 3018K 3084K 78643K 568224 0
SYN cache 2 16K 16K 78643K 2 0
ddb> show all pools
Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg
Idle
arp 64 6 0 0 1 0 1 1 0
8 0
rtpcb 80 41879 0 41875 6 5 1 2 0
8 0
rtentry 112 45 0 1 2 0 2 2 0
8 0
unpcb 120 7891 0 7883 3 2 1 2 0
8 0
syncache 264 496 0 496 11 11 0 1 0
8 0
sackhl 24 2 0 2 1 1 0 1 0
8 0
tcpcb 544 11832 0 11828 3 2 1 3 0
8 0
inpcb 280 19195 0 19188 5 4 1 4 0
8 0
nd6 48 4 0 0 1 0 1 1 0
8 0
pkpcb 40 15 0 15 2 2 0 1 0
8 0
pfrktable 1344 1 0 0 1 0 1 1 0
8 0
pfrule 1360 81 0 0 7 0 7 7 0
8 0
art_heap8 4096 1 0 0 1 0 1 1 0
8 0
art_heap4 256 212 0 0 14 0 14 14 0
8 0
art_table 32 213 0 0 2 0 2 2 0
8 0
art_node 16 44 0 4 1 0 1 1 0
8 0
sysvmsgpl 40 218 0 218 2 2 0 1 0
8 0
semapl 112 14 0 4 1 0 1 1 0
8 0
shmpl 112 174 0 46 4 0 4 4 0
8 0
dirhash 1024 17 0 0 3 0 3 3 0
8 0
dino1pl 128 32868 0 31466 46 0 46 46 0
8 0
ffsino 240 32868 0 31466 83 0 83 83 0
8 0
nchpl 144 66734 0 65116 62 1 61 61 0
8 0
uvmvnodes 72 5926 0 0 108 0 108 108 0
8 0
vnodes 208 5926 0 0 312 0 312 312 0
8 0
namei 1024 163011 0 163011 1 0 1 1 0
8 1
vcpupl 1984 2 0 0 1 0 1 1 0
8 0
vmpool 528 4 0 2 2 1 1 1 0
8 0
scxspl 192 200001 0 200001 1 0 1 1 0
8 1
plimitpl 152 4477 0 4470 1 0 1 1 0
8 0
sigapl 432 28146 0 28133 2 0 2 2 0
8 0
futexpl 56 272732 0 272732 1 0 1 1 0
8 1
knotepl 112 434 0 415 1 0 1 1 0
8 0
kqueuepl 104 2939 0 2937 1 0 1 1 0
8 0
pipepl 112 3720 0 3701 1 0 1 1 0
8 0
fdescpl 424 28147 0 28133 2 0 2 2 0
8 0
filepl 120 133159 0 133060 29 24 5 6 0
8 2
lockfpl 104 1456 0 1455 1 0 1 1 0
8 0
lockfspl 48 673 0 672 1 0 1 1 0
8 0
sessionpl 112 17 0 7 1 0 1 1 0
8 0
pgrppl 48 130 0 120 1 0 1 1 0
8 0
ucredpl 96 20729 0 20722 1 0 1 1 0
8 0
zombiepl 144 28133 0 28133 1 0 1 1 0
8 1
processpl 872 28161 0 28133 4 0 4 4 0
8 0
procpl 632 56930 0 56894 4 0 4 4 0
8 0
sockpl 384 68980 0 68961 86 80 6 10 0
8 4
mcl64k 65536 494 0 494 16 16 0 1 0
8 0
mcl16k 16384 83 0 83 13 13 0 1 0
8 0
mcl12k 12288 111 0 111 18 17 1 1 0
8 1
mcl9k 9216 1182 0 1182 15 14 1 1 0
8 1
mcl8k 8192 1966 0 1966 26 25 1 1 0
8 1
mcl4k 4096 3026 0 3026 33 32 1 1 0
8 1
mcl2k2 2112 119 0 119 24 24 0 1 0
8 0
mcl2k 2048 64832 0 64793 16 10 6 9 0
8 0
mtagpl 80 2 0 2 1 1 0 1 0
8 0
mbufpl 256 489102 0 488920 1876 1848 28 169 0
8 8
bufpl 280 48581 0 42397 442 0 442 442 0
8 0
anonpl 16 1612090 0 1606803 32 1 31 31 0
107 0
amapchunkpl 152 98905 0 98811 45 40 5 18 0
158 0
amappl16 192 125713 0 125332 22 2 20 20 0
8 0
amappl15 184 50 0 46 1 0 1 1 0
8 0
amappl14 176 35 0 32 1 0 1 1 0
8 0
amappl13 168 2 0 1 1 0 1 1 0
8 0
amappl12 160 6 0 6 2 2 0 1 0
8 0
amappl11 152 48 0 37 1 0 1 1 0
8 0
amappl10 144 14 0 12 1 0 1 1 0
8 0
amappl9 136 14618 0 14613 1 0 1 1 0
8 0
amappl8 128 14314 0 14269 2 0 2 2 0
8 0
amappl7 120 90 0 80 1 0 1 1 0
8 0
amappl6 112 62 0 57 1 0 1 1 0
8 0
amappl5 104 576 0 564 1 0 1 1 0
8 0
amappl4 96 27932 0 27901 1 0 1 1 0
8 0
amappl3 88 1150 0 1143 1 0 1 1 0
8 0
amappl2 80 222084 0 222014 3 1 2 3 0
8 0
amappl1 72 461324 0 460907 26 16 10 20 0
8 0
amappl 80 57321 0 57285 1 0 1 1 0
84 0
dma4096 4096 1 0 1 1 1 0 1 0
8 0
dma256 256 6 0 6 1 1 0 1 0
8 0
dma128 128 253 0 253 1 1 0 1 0
8 0
dma64 64 6 0 6 1 1 0 1 0
8 0
dma32 32 7 0 7 1 1 0 1 0
8 0
dma16 16 18 0 17 1 0 1 1 0
8 0
aobjpl 64 175 0 46 3 0 3 3 0
8 0
uaddrrnd 24 28151 0 28135 1 0 1 1 0
8 0
uaddrbest 32 2 0 0 1 0 1 1 0
8 0
uaddr 24 28151 0 28135 1 0 1 1 0
8 0
vmmpekpl 168 104742 0 104718 2 0 2 2 0
8 0
vmmpepl 168 3079400 0 3077903 116 45 71 78 0
357 5
vmsppl 272 28150 0 28135 4 2 2 2 0
8 1
pdppl 4096 56308 0 56272 6 1 5 6 0
8 0
pvpl 32 4592898 0 4584612 154 68 86 115 0
265 0
pmappl 200 28150 0 28135 1 0 1 1 0
8 0
extentpl 40 46 0 29 1 0 1 1 0
8 0
phpool 112 2104 0 1951 24 18 6 9 0
8 0
---
This bug is generated by a bot. It may contain errors.
See https://goo.gl/tpsmEJ for more information about syzbot.
syzbot engineers can be reached at syzk...@googlegroups.com.
syzbot will keep track of this bug report. See:
https://goo.gl/tpsmEJ#status for how to communicate with syzbot.
syzbot
Jan 2, 2020, 5:24:09 AM1/2/20
to syzkaller-o...@googlegroups.com
syzbot has found a reproducer for the following crash on:
HEAD commit: ae88e52d Fix format expansion in window names, reported by..
git tree: openbsd
console output: https://syzkaller.appspot.com/x/log.txt?x=160eb98ee00000
C reproducer: https://syzkaller.appspot.com/x/repro.c?x=10fece15e00000
IMPORTANT: if you fix the bug, please add the following tag to the commit:
Reported-by: syzbot+5dcba6...@syzkaller.appspotmail.com
login: panic: unhandled af 1
sys/net/pf.c:409
pfioctl(4900,c0504417,ffff80001d3d2870,1,ffff8000ffff4ee0) at
pfioctl+0x43c0 sys/net/pf_ioctl.c:1827
VOP_IOCTL(fffffd805db524e0,c0504417,ffff80001d3d2870,1,fffffd806c3bec60,ffff8000ffff4ee0)
at
VOP_IOCTL+0x88 sys/kern/vfs_vops.c:291
vn_ioctl(fffffd805d7214b8,c0504417,ffff80001d3d2870,ffff8000ffff4ee0) at
vn_ioctl+0xb7 sys/kern/vfs_vnops.c:533
sys_ioctl(ffff8000ffff4ee0,ffff80001d3d2988,ffff80001d3d29d0) at
sys_ioctl+0x5b9
syscall(ffff80001d3d2a50) at syscall+0x507 sys/arch/amd64/amd64/trap.c:555
sys/net/pf.c:409
pfioctl(4900,c0504417,ffff80001d3d2870,1,ffff8000ffff4ee0) at
pfioctl+0x43c0 sys/net/pf_ioctl.c:1827
VOP_IOCTL(fffffd805db524e0,c0504417,ffff80001d3d2870,1,fffffd806c3bec60,ffff8000ffff4ee0)
at
VOP_IOCTL+0x88 sys/kern/vfs_vops.c:291
vn_ioctl(fffffd805d7214b8,c0504417,ffff80001d3d2870,ffff8000ffff4ee0) at
vn_ioctl+0xb7 sys/kern/vfs_vnops.c:533
sys_ioctl(ffff8000ffff4ee0,ffff80001d3d2988,ffff80001d3d29d0) at
sys_ioctl+0x5b9
syscall(ffff80001d3d2a50) at syscall+0x507 sys/arch/amd64/amd64/trap.c:555
rbp 0xffff80001d3d2430
rbx 0xffff80001d3d24e0
rdx 0x2
rcx 0x1
rax 0x1
r8 0xffff80001d3d23f0
r9 0x1
r10 0x3b61dd2dc972a72d
r11 0x628d58326f6a3735
r12 0x3000000008
r13 0xffff80001d3d2440
flags process=2<EXEC> proc=0
pri=50, usrpri=50, nice=20
forw=0xffffffffffffffff, list=0xffff8000ffff4010,0xffffffff825934e8
process=0xffff80001d39a380 user=0xffff80001d3cd000,
vmspace=0xfffffd806bc09660
estcpu=0, cpticks=0, pctcpu=0.0
51422 486331 37125 0 3 0x10008a pause ksh
37125 433953 72046 0 2 0x12 sshd
17194 414180 1 0 3 0x100083 ttyin getty
72046 446868 1 0 3 0x80 select sshd
46714 509215 1395 73 3 0x100090 kqread syslogd
1395 232194 1 0 3 0x100082 netio syslogd
55548 236654 1 77 3 0x100090 poll dhclient
18799 405140 1 0 3 0x80 poll dhclient
47896 311451 0 0 2 0x14200 zerothread
51495 254502 0 0 3 0x14200 aiodoned aiodoned
89 77559 0 0 3 0x14200 syncer update
35557 191011 0 0 3 0x14200 cleaner cleaner
30276 234123 0 0 3 0x14200 reaper reaper
80791 408503 0 0 3 0x14200 pgdaemon pagedaemon
82047 413886 0 0 3 0x14200 bored crynlk
47202 399429 0 0 3 0x14200 bored crypto
238 476409 0 0 3 0x40014200 acpi0 acpi0
83017 305065 0 0 3 0x14200 bored softnet
61549 498455 0 0 3 0x14200 bored systqmp
47088 139409 0 0 3 0x14200 bored systq
16279 409438 0 0 3 0x40014200 bored softclock
15626 349573 0 0 3 0x40014200 idle0
89831 250743 0 0 3 0x14200 bored smr
1 463749 0 0 3 0x82 wait init
pcb 13 8K 8K 78643K 13 0
rtable 61 1K 2K 78643K 117 0
ifaddr 24 7K 7K 78643K 24 0
proc 47 38K 46K 78643K 278 0
exec 0 0K 1K 78643K 151 0
UVM aobj 2 2K 2K 78643K 2 0
temp 20 3003K 3067K 78643K 1711 0
8 0
rtpcb 80 15 0 13 1 0 1 1 0
8 0
rtentry 112 23 0 1 1 0 1 1 0
8 0
unpcb 120 27 0 19 1 0 1 1 0
8 0
syncache 264 5 0 5 1 0 1 1 0
8 1
tcpcb 544 8 0 5 1 0 1 1 0
8 0
inpcb 280 22 0 16 1 0 1 1 0
8 0
8 0
art_table 32 98 0 0 1 0 1 1 0
8 0
art_node 16 22 0 2 1 0 1 1 0
8 0
ffsino 240 1392 0 15 81 0 81 81 0
8 0
nchpl 144 1567 0 31 57 0 57 57 0
8 0
uvmvnodes 72 1401 0 0 26 0 26 26 0
8 0
vnodes 208 1401 0 0 74 0 74 74 0
8 0
namei 1024 3479 0 3479 1 0 1 1 0
8 1
scxspl 192 2411 0 2411 1 0 1 1 0
8 1
plimitpl 152 13 0 8 1 0 1 1 0
8 0
sigapl 432 176 0 166 2 0 2 2 0
8 0
knotepl 112 5 0 0 1 0 1 1 0
8 0
kqueuepl 104 1 0 0 1 0 1 1 0
8 0
pipepl 112 114 0 107 1 0 1 1 0
8 0
fdescpl 424 177 0 166 2 0 2 2 0
8 0
filepl 120 858 0 814 2 0 2 2 0
8 0
lockfpl 104 5 0 4 1 0 1 1 0
8 0
lockfspl 48 3 0 2 1 0 1 1 0
8 0
sessionpl 112 17 0 9 1 0 1 1 0
8 0
pgrppl 48 17 0 9 1 0 1 1 0
8 0
ucredpl 96 47 0 40 1 0 1 1 0
8 0
zombiepl 144 166 0 166 1 0 1 1 0
8 1
processpl 872 191 0 166 4 0 4 4 0
8 0
procpl 632 191 0 166 3 0 3 3 0
8 0
sockpl 384 64 0 48 2 0 2 2 0
8 0
mcl4k 4096 10 0 10 1 0 1 1 0
8 1
mcl2k 2048 5785 0 5757 6 0 6 6 0
8 2
8 0
bufpl 280 2096 0 258 132 0 132 132 0
8 0
anonpl 16 17363 0 16219 7 1 6 7 0
107 1
amapchunkpl 152 472 0 436 2 0 2 2 0
158 0
amappl16 192 33 0 31 1 0 1 1 0
8 0
amappl15 184 42 0 38 1 0 1 1 0
8 0
amappl14 176 13 0 12 1 0 1 1 0
8 0
amappl12 160 5 0 5 1 0 1 1 0
8 1
amappl11 152 43 0 32 1 0 1 1 0
8 0
amappl10 144 1 0 1 1 0 1 1 0
8 1
amappl9 136 373 0 372 1 0 1 1 0
8 0
amappl8 128 64 0 60 1 0 1 1 0
8 0
amappl7 120 65 0 56 1 0 1 1 0
8 0
amappl6 112 44 0 42 1 0 1 1 0
8 0
amappl5 104 142 0 132 1 0 1 1 0
8 0
amappl4 96 395 0 371 1 0 1 1 0
8 0
amappl3 88 108 0 101 1 0 1 1 0
8 0
amappl2 80 723 0 669 2 0 2 2 0
8 0
amappl1 72 12286 0 11897 16 3 13 16 0
8 4
amappl 80 356 0 337 1 0 1 1 0
8 0
uaddrrnd 24 177 0 166 1 0 1 1 0
8 0
vmmpekpl 168 5221 0 5207 1 0 1 1 0
8 0
vmmpepl 168 26016 0 25244 48 3 45 48 0 357
11
vmsppl 272 176 0 166 1 0 1 1 0
8 0
pdppl 4096 360 0 332 5 0 5 5 0
8 0
pvpl 32 70977 0 68217 27 0 27 27 0
265 4
pmappl 200 176 0 166 1 0 1 1 0
8 0
HEAD commit: ae88e52d Fix format expansion in window names, reported by..
git tree: openbsd
kernel config: https://syzkaller.appspot.com/x/.config?x=fe55924c11e64b0a
dashboard link: https://syzkaller.appspot.com/bug?extid=5dcba60c850b51f77002
syz repro: https://syzkaller.appspot.com/x/repro.syz?x=15ab96c1e00000
dashboard link: https://syzkaller.appspot.com/bug?extid=5dcba60c850b51f77002
C reproducer: https://syzkaller.appspot.com/x/repro.c?x=10fece15e00000
IMPORTANT: if you fix the bug, please add the following tag to the commit:
Reported-by: syzbot+5dcba6...@syzkaller.appspotmail.com
Stopped at db_enter+0x18: addq $0x8,%rsp
TID PID UID PRFLAGS PFLAGS CPU COMMAND
*329115 68391 0 0x2 0 0 syz-executor6559
TID PID UID PRFLAGS PFLAGS CPU COMMAND
db_enter() at db_enter+0x18 sys/arch/amd64/amd64/db_interface.c:398
panic(ffffffff821bafb7) at panic+0x15c sys/kern/subr_prf.c:207
unhandled_af(1) at unhandled_af+0x16
pf_addrcpy(ffff80001d3d2578,ffff80001d3d2870,1) at pf_addrcpy+0x99
panic(ffffffff821bafb7) at panic+0x15c sys/kern/subr_prf.c:207
unhandled_af(1) at unhandled_af+0x16
sys/net/pf.c:409
pfioctl(4900,c0504417,ffff80001d3d2870,1,ffff8000ffff4ee0) at
pfioctl+0x43c0 sys/net/pf_ioctl.c:1827
VOP_IOCTL(fffffd805db524e0,c0504417,ffff80001d3d2870,1,fffffd806c3bec60,ffff8000ffff4ee0)
at
VOP_IOCTL+0x88 sys/kern/vfs_vops.c:291
vn_ioctl(fffffd805d7214b8,c0504417,ffff80001d3d2870,ffff8000ffff4ee0) at
vn_ioctl+0xb7 sys/kern/vfs_vnops.c:533
sys_ioctl(ffff8000ffff4ee0,ffff80001d3d2988,ffff80001d3d29d0) at
sys_ioctl+0x5b9
syscall(ffff80001d3d2a50) at syscall+0x507 sys/arch/amd64/amd64/trap.c:555
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x7f7ffffe4230, count: 5
end of kernel
https://www.openbsd.org/ddb.html describes the minimum info required in bug
reports. Insufficient info makes it difficult to find and fix bugs.
ddb>
ddb> set $lines = 0
ddb> set $maxwidth = 0
ddb> show panic
unhandled af 1
ddb> trace
db_enter() at db_enter+0x18 sys/arch/amd64/amd64/db_interface.c:398
panic(ffffffff821bafb7) at panic+0x15c sys/kern/subr_prf.c:207
unhandled_af(1) at unhandled_af+0x16
pf_addrcpy(ffff80001d3d2578,ffff80001d3d2870,1) at pf_addrcpy+0x99
reports. Insufficient info makes it difficult to find and fix bugs.
ddb>
ddb> set $lines = 0
ddb> set $maxwidth = 0
ddb> show panic
unhandled af 1
ddb> trace
db_enter() at db_enter+0x18 sys/arch/amd64/amd64/db_interface.c:398
panic(ffffffff821bafb7) at panic+0x15c sys/kern/subr_prf.c:207
unhandled_af(1) at unhandled_af+0x16
sys/net/pf.c:409
pfioctl(4900,c0504417,ffff80001d3d2870,1,ffff8000ffff4ee0) at
pfioctl+0x43c0 sys/net/pf_ioctl.c:1827
VOP_IOCTL(fffffd805db524e0,c0504417,ffff80001d3d2870,1,fffffd806c3bec60,ffff8000ffff4ee0)
at
VOP_IOCTL+0x88 sys/kern/vfs_vops.c:291
vn_ioctl(fffffd805d7214b8,c0504417,ffff80001d3d2870,ffff8000ffff4ee0) at
vn_ioctl+0xb7 sys/kern/vfs_vnops.c:533
sys_ioctl(ffff8000ffff4ee0,ffff80001d3d2988,ffff80001d3d29d0) at
sys_ioctl+0x5b9
syscall(ffff80001d3d2a50) at syscall+0x507 sys/arch/amd64/amd64/trap.c:555
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x7f7ffffe4230, count: -10
end of kernel
ddb> show registers
rdi 0
rsi 0x1
rdi 0
rbp 0xffff80001d3d2430
rbx 0xffff80001d3d24e0
rdx 0x2
rcx 0x1
rax 0x1
r8 0xffff80001d3d23f0
r9 0x1
r10 0x3b61dd2dc972a72d
r11 0x628d58326f6a3735
r12 0x3000000008
r13 0xffff80001d3d2440
r14 0x100
r15 0x1
rip 0xffffffff81690f08 db_enter+0x18
cs 0x8
rflags 0x246
rsp 0xffff80001d3d2420
r15 0x1
rip 0xffffffff81690f08 db_enter+0x18
cs 0x8
rflags 0x246
ss 0x10
db_enter+0x18: addq $0x8,%rsp
ddb> show proc
PROC (syz-executor6559) pid=329115 stat=onproc
db_enter+0x18: addq $0x8,%rsp
ddb> show proc
flags process=2<EXEC> proc=0
pri=50, usrpri=50, nice=20
forw=0xffffffffffffffff, list=0xffff8000ffff4010,0xffffffff825934e8
process=0xffff80001d39a380 user=0xffff80001d3cd000,
vmspace=0xfffffd806bc09660
estcpu=0, cpticks=0, pctcpu=0.0
user=0, sys=0, intr=0
ddb> ps
PID TID PPID UID S FLAGS WAIT COMMAND
*68391 329115 51422 0 7 0x2 syz-executor6559
ddb> ps
PID TID PPID UID S FLAGS WAIT COMMAND
51422 486331 37125 0 3 0x10008a pause ksh
37125 433953 72046 0 2 0x12 sshd
17194 414180 1 0 3 0x100083 ttyin getty
72046 446868 1 0 3 0x80 select sshd
46714 509215 1395 73 3 0x100090 kqread syslogd
1395 232194 1 0 3 0x100082 netio syslogd
55548 236654 1 77 3 0x100090 poll dhclient
18799 405140 1 0 3 0x80 poll dhclient
47896 311451 0 0 2 0x14200 zerothread
51495 254502 0 0 3 0x14200 aiodoned aiodoned
89 77559 0 0 3 0x14200 syncer update
35557 191011 0 0 3 0x14200 cleaner cleaner
30276 234123 0 0 3 0x14200 reaper reaper
80791 408503 0 0 3 0x14200 pgdaemon pagedaemon
82047 413886 0 0 3 0x14200 bored crynlk
47202 399429 0 0 3 0x14200 bored crypto
238 476409 0 0 3 0x40014200 acpi0 acpi0
83017 305065 0 0 3 0x14200 bored softnet
61549 498455 0 0 3 0x14200 bored systqmp
47088 139409 0 0 3 0x14200 bored systq
16279 409438 0 0 3 0x40014200 bored softclock
15626 349573 0 0 3 0x40014200 idle0
89831 250743 0 0 3 0x14200 bored smr
1 463749 0 0 3 0x82 wait init
0 0 -1 0 3 0x10200 scheduler swapper
ddb> show all locks
No such command
ddb> show malloc
Type InUse MemUse HighUse Limit Requests Type Lim
devbuf 9438 6319K 6320K 78643K 10535 0
ddb> show all locks
No such command
ddb> show malloc
Type InUse MemUse HighUse Limit Requests Type Lim
pcb 13 8K 8K 78643K 13 0
rtable 61 1K 2K 78643K 117 0
ifaddr 24 7K 7K 78643K 24 0
counters 19 16K 16K 78643K 19 0
ioctlops 0 0K 2K 78643K 13 0
mount 1 1K 1K 78643K 1 0
vnodes 1180 74K 74K 78643K 1185 0
UFS quota 1 32K 32K 78643K 1 0
UFS mount 5 36K 36K 78643K 5 0
shm 2 1K 1K 78643K 2 0
UFS mount 5 36K 36K 78643K 5 0
VM map 2 0K 0K 78643K 2 0
sem 2 0K 0K 78643K 2 0
dirhash 12 2K 2K 78643K 12 0
ACPI 1794 195K 288K 78643K 12646 0
file desc 1 0K 0K 78643K 1 0
ACPI 1794 195K 288K 78643K 12646 0
proc 47 38K 46K 78643K 278 0
NFS srvsock 1 0K 0K 78643K 1 0
NFS daemon 1 16K 16K 78643K 1 0
in_multi 11 0K 0K 78643K 11 0
NFS daemon 1 16K 16K 78643K 1 0
ether_multi 1 0K 0K 78643K 1 0
ISOFS mount 1 32K 32K 78643K 1 0
MSDOSFS mount 1 16K 16K 78643K 1 0
ttys 19 95K 95K 78643K 19 0
ISOFS mount 1 32K 32K 78643K 1 0
MSDOSFS mount 1 16K 16K 78643K 1 0
exec 0 0K 1K 78643K 151 0
pagedep 1 8K 8K 78643K 1 0
inodedep 1 32K 32K 78643K 1 0
newblk 1 0K 0K 78643K 1 0
VM swap 7 26K 26K 78643K 7 0
UVM amap 60 3K 3K 78643K 710 0
inodedep 1 32K 32K 78643K 1 0
newblk 1 0K 0K 78643K 1 0
VM swap 7 26K 26K 78643K 7 0
UVM aobj 2 2K 2K 78643K 2 0
memdesc 1 4K 4K 78643K 1 0
crypto data 1 1K 1K 78643K 1 0
NDP 3 0K 0K 78643K 3 0
crypto data 1 1K 1K 78643K 1 0
temp 20 3003K 3067K 78643K 1711 0
SYN cache 2 16K 16K 78643K 2 0
ddb> show all pools
Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg
Idle
arp 64 2 0 0 1 0 1 1 0
ddb> show all pools
Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg
Idle
8 0
rtpcb 80 15 0 13 1 0 1 1 0
8 0
rtentry 112 23 0 1 1 0 1 1 0
8 0
unpcb 120 27 0 19 1 0 1 1 0
8 0
syncache 264 5 0 5 1 0 1 1 0
8 1
tcpcb 544 8 0 5 1 0 1 1 0
8 0
inpcb 280 22 0 16 1 0 1 1 0
8 0
art_heap8 4096 1 0 0 1 0 1 1 0
8 0
art_heap4 256 97 0 0 7 0 7 7 0
8 0
8 0
art_table 32 98 0 0 1 0 1 1 0
8 0
art_node 16 22 0 2 1 0 1 1 0
8 0
dirhash 1024 17 0 0 3 0 3 3 0
8 0
dino1pl 128 1392 0 15 45 0 45 45 0
dirhash 1024 17 0 0 3 0 3 3 0
8 0
8 0
ffsino 240 1392 0 15 81 0 81 81 0
8 0
nchpl 144 1567 0 31 57 0 57 57 0
8 0
uvmvnodes 72 1401 0 0 26 0 26 26 0
8 0
vnodes 208 1401 0 0 74 0 74 74 0
8 0
namei 1024 3479 0 3479 1 0 1 1 0
8 1
scxspl 192 2411 0 2411 1 0 1 1 0
8 1
plimitpl 152 13 0 8 1 0 1 1 0
8 0
sigapl 432 176 0 166 2 0 2 2 0
8 0
knotepl 112 5 0 0 1 0 1 1 0
8 0
kqueuepl 104 1 0 0 1 0 1 1 0
8 0
pipepl 112 114 0 107 1 0 1 1 0
8 0
fdescpl 424 177 0 166 2 0 2 2 0
8 0
filepl 120 858 0 814 2 0 2 2 0
8 0
lockfpl 104 5 0 4 1 0 1 1 0
8 0
lockfspl 48 3 0 2 1 0 1 1 0
8 0
sessionpl 112 17 0 9 1 0 1 1 0
8 0
pgrppl 48 17 0 9 1 0 1 1 0
8 0
ucredpl 96 47 0 40 1 0 1 1 0
8 0
zombiepl 144 166 0 166 1 0 1 1 0
8 1
processpl 872 191 0 166 4 0 4 4 0
8 0
procpl 632 191 0 166 3 0 3 3 0
8 0
sockpl 384 64 0 48 2 0 2 2 0
8 0
mcl4k 4096 10 0 10 1 0 1 1 0
8 1
mcl2k 2048 5785 0 5757 6 0 6 6 0
8 2
mtagpl 80 2 0 2 1 1 0 1 0
8 0
mbufpl 256 9893 0 9853 4 0 4 4 0
8 0
8 0
bufpl 280 2096 0 258 132 0 132 132 0
8 0
anonpl 16 17363 0 16219 7 1 6 7 0
107 1
amapchunkpl 152 472 0 436 2 0 2 2 0
158 0
amappl16 192 33 0 31 1 0 1 1 0
8 0
amappl15 184 42 0 38 1 0 1 1 0
8 0
amappl14 176 13 0 12 1 0 1 1 0
8 0
amappl12 160 5 0 5 1 0 1 1 0
8 1
amappl11 152 43 0 32 1 0 1 1 0
8 0
amappl10 144 1 0 1 1 0 1 1 0
8 1
amappl9 136 373 0 372 1 0 1 1 0
8 0
amappl8 128 64 0 60 1 0 1 1 0
8 0
amappl7 120 65 0 56 1 0 1 1 0
8 0
amappl6 112 44 0 42 1 0 1 1 0
8 0
amappl5 104 142 0 132 1 0 1 1 0
8 0
amappl4 96 395 0 371 1 0 1 1 0
8 0
amappl3 88 108 0 101 1 0 1 1 0
8 0
amappl2 80 723 0 669 2 0 2 2 0
8 0
amappl1 72 12286 0 11897 16 3 13 16 0
8 4
amappl 80 356 0 337 1 0 1 1 0
84 0
dma4096 4096 1 0 1 1 1 0 1 0
8 0
dma256 256 6 0 6 1 1 0 1 0
8 0
dma128 128 253 0 253 1 1 0 1 0
8 0
dma64 64 6 0 6 1 1 0 1 0
8 0
dma32 32 7 0 7 1 1 0 1 0
8 0
dma16 16 18 0 17 1 0 1 1 0
8 0
aobjpl 64 1 0 0 1 0 1 1 0
dma4096 4096 1 0 1 1 1 0 1 0
8 0
dma256 256 6 0 6 1 1 0 1 0
8 0
dma128 128 253 0 253 1 1 0 1 0
8 0
dma64 64 6 0 6 1 1 0 1 0
8 0
dma32 32 7 0 7 1 1 0 1 0
8 0
dma16 16 18 0 17 1 0 1 1 0
8 0
8 0
uaddrrnd 24 177 0 166 1 0 1 1 0
8 0
uaddrbest 32 2 0 0 1 0 1 1 0
8 0
uaddr 24 177 0 166 1 0 1 1 0
uaddrbest 32 2 0 0 1 0 1 1 0
8 0
8 0
vmmpekpl 168 5221 0 5207 1 0 1 1 0
8 0
vmmpepl 168 26016 0 25244 48 3 45 48 0 357
11
vmsppl 272 176 0 166 1 0 1 1 0
8 0
pdppl 4096 360 0 332 5 0 5 5 0
8 0
pvpl 32 70977 0 68217 27 0 27 27 0
265 4
pmappl 200 176 0 166 1 0 1 1 0
8 0
extentpl 40 46 0 29 1 0 1 1 0
8 0
phpool 112 113 0 2 4 0 4 4 0
extentpl 40 46 0 29 1 0 1 1 0
8 0
8 0
Anton Lindqvist
Jan 3, 2020, 7:49:09 AM1/3/20
to syzbot, syzkaller-o...@googlegroups.com
#syz dup: panic: unhandled af
Reply all
Reply to author
Forward
0 new messages