uvm_fault: rt_timer_timer
0 views
Skip to first unread message
syzbot
Feb 29, 2024, 5:20:32 PMFeb 29
to syzkaller-o...@googlegroups.com
Hello,
syzbot found the following issue on:
HEAD commit: b0ca02faf19d align qwx_ce_rx error code checking with linu..
git tree: openbsd
console output: https://syzkaller.appspot.com/x/log.txt?x=1120a7f6180000
kernel config: https://syzkaller.appspot.com/x/.config?x=1bc15e68cd2a49e5
dashboard link: https://syzkaller.appspot.com/bug?extid=cb0b8edf09a565466582
Unfortunately, I don't have any reproducer for this issue yet.
Downloadable assets:
disk image: https://storage.googleapis.com/syzbot-assets/c4937bf77cd8/disk-b0ca02fa.raw.xz
bsd.gdb: https://storage.googleapis.com/syzbot-assets/abd6de49871e/bsd-b0ca02fa.gdb.xz
kernel image: https://storage.googleapis.com/syzbot-assets/c354c2a8272d/kernel-b0ca02fa.xz
IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+cb0b8e...@syzkaller.appspotmail.com
uvm_fault(0xffffffff82e54e28, 0x17, 0, 2) -> e
kernel: page fault trap, code=2
Stopped at rt_timer_timer+0x4f: movq %rax,0x18(%r15)
TID PID UID PRFLAGS PFLAGS CPU COMMAND
*207669 67416 0 0x14000 0x40000200 0 softclock
rt_timer_timer(fffffd806179de58) at rt_timer_timer+0x4f sys/net/route.c:1697
timeout_run(fffffd806179de78) at timeout_run+0x8f sys/kern/kern_timeout.c:666
softclock_thread(ffff80002a57cd48) at softclock_thread+0xc4 sys/kern/kern_timeout.c:814
end trace frame: 0x0, count: 12
https://www.openbsd.org/ddb.html describes the minimum info required in bug
reports. Insufficient info makes it difficult to find and fix bugs.
ddb>
ddb> set $lines = 0
ddb> set $maxwidth = 0
ddb> show panic
*cpu0: uvm_fault(0xffffffff82e54e28, 0x17, 0, 2) -> e
ddb> trace
rt_timer_timer(fffffd806179de58) at rt_timer_timer+0x4f sys/net/route.c:1697
timeout_run(fffffd806179de78) at timeout_run+0x8f sys/kern/kern_timeout.c:666
softclock_thread(ffff80002a57cd48) at softclock_thread+0xc4 sys/kern/kern_timeout.c:814
end trace frame: 0x0, count: -3
ddb> show registers
rdi 0x1
rsi 0x9
rbp 0xffff80002a589b90
rbx 0
rdx 0
rcx 0xffffffff82dc9d90 timeout_proc
rax 0xffffffffffffffff
r8 0xbb9
r9 0
r10 0x4c283e93099a1ce4
r11 0x8b5349171102d786
r12 0xffffffff82e43a30 ip_mtudisc_timeout_q
r13 0xffffffff82cdcff0 cpu_info_full_primary+0x1ff0
r14 0xfffffd806179de58
r15 0xffffffffffffffff
rip 0xffffffff819873bf rt_timer_timer+0x4f
cs 0x8
rflags 0x10246 __ALIGN_SIZE+0xf246
rsp 0xffff80002a589b60
ss 0x10
rt_timer_timer+0x4f: movq %rax,0x18(%r15)
ddb> show proc
PROC (softclock) tid=207669 pid=67416 tcnt=1 stat=onproc
flags process=14000<NOZOMBIE,SYSTEM> proc=40000200<SYSTEM,CPUPEG>
runpri=50, usrpri=54, slppri=0, nice=20
wchan=0x0, wmesg=, ps_single=0x0
forw=0xffffffffffffffff, list=0xffff80002a57d540,0xffff80002a57cab0
process=0xffff8000ffffdd50 user=0xffff80002a584000, vmspace=0xffffffff82e54e28
estcpu=4, cpticks=19, pctcpu=0.0, user=0, sys=19, intr=0
ddb> ps
PID TID PPID UID S FLAGS WAIT COMMAND
63583 104467 11063 0 2 0 syz-executor.3
92877 476914 31706 0 2 0 syz-executor.0
92877 98362 31706 0 2 0x4000000 syz-executor.0
92877 480573 31706 0 2 0x4000000 syz-executor.0
92877 434911 31706 0 2 0x4000000 syz-executor.0
20190 459556 85211 0 2 0 syz-executor.1
20190 496711 85211 0 2 0x4000000 syz-executor.1
39848 194934 578 0 2 0 syz-executor.6
39848 9473 578 0 3 0x4000080 fsleep syz-executor.6
6268 389774 31319 0 2 0 syz-executor.2
6268 356033 31319 0 3 0x4000080 fsleep syz-executor.2
85999 491842 56840 0 2 0 syz-executor.4
85999 270384 56840 0 3 0x4000080 fsleep syz-executor.4
64599 461411 41977 0 2 0 syz-executor.5
64599 14818 41977 0 3 0x4000080 fsleep syz-executor.5
11063 314184 88232 0 2 0x2 syz-executor.3
85211 213943 88232 0 2 0x482 syz-executor.1
31706 405152 88232 0 2 0x482 syz-executor.0
41977 26367 88232 0 2 0x482 syz-executor.5
34061 65593 88232 0 2 0x2 syz-executor.7
56840 423410 88232 0 2 0x482 syz-executor.4
24647 317803 1 0 3 0x100083 ttyin getty
31319 388522 88232 0 2 0x482 syz-executor.2
578 278589 88232 0 2 0x482 syz-executor.6
80905 19907 0 0 3 0x14200 acct acct
50437 408396 8050 0 3 0x100082 netio ndp
8050 502653 1 0 3 0x10008a sigsusp sh
59728 359436 0 0 3 0x14200 bored sosplice
88232 96226 85491 0 3 0x2000082 wait syz-fuzzer
88232 235613 85491 0 3 0x6000082 nanoslp syz-fuzzer
88232 324382 85491 0 3 0x6000082 thrsleep syz-fuzzer
88232 322095 85491 0 3 0x6000082 wait syz-fuzzer
88232 72010 85491 0 3 0x6000082 wait syz-fuzzer
88232 148664 85491 0 3 0x6000082 thrsleep syz-fuzzer
88232 329717 85491 0 3 0x6000082 wait syz-fuzzer
88232 444436 85491 0 3 0x6000082 wait syz-fuzzer
88232 249235 85491 0 3 0x6000082 thrsleep syz-fuzzer
88232 355564 85491 0 3 0x6000082 wait syz-fuzzer
88232 239196 85491 0 3 0x6000082 thrsleep syz-fuzzer
88232 351866 85491 0 3 0x6000082 wait syz-fuzzer
88232 181380 85491 0 2 0x6000482 syz-fuzzer
88232 188123 85491 0 3 0x6000082 wait syz-fuzzer
85491 491264 36146 0 3 0x10008a sigsusp ksh
36146 268337 56867 0 3 0x9a kqread sshd
56867 217885 1 0 3 0x88 kqread sshd
4098 7169 45210 73 3 0x1100090 kqread syslogd
45210 49712 1 0 3 0x100082 netio syslogd
60245 444424 1 0 3 0x100080 kqread resolvd
65379 385620 44886 77 3 0x100092 kqread dhcpleased
90561 254266 44886 77 3 0x100092 kqread dhcpleased
44886 479321 1 0 3 0x80 kqread dhcpleased
27709 387702 0 0 3 0x14200 bored smr
20749 1667 0 0 2 0x14200 zerothread
71067 280915 0 0 3 0x14200 aiodoned aiodoned
47126 112858 0 0 2 0x14600 update
61360 310513 0 0 3 0x14200 cleaner cleaner
62101 342457 0 0 3 0x14200 reaper reaper
13727 94095 0 0 3 0x14200 pgdaemon pagedaemon
97998 188015 0 0 3 0x14200 bored viomb
85987 185973 0 0 3 0x40014200 acpi0 acpi0
46243 395927 0 0 3 0x14200 bored softnet3
30956 40134 0 0 3 0x14200 bored softnet2
96045 106164 0 0 3 0x14200 bored softnet1
97748 269595 0 0 3 0x14200 bored softnet0
32064 450623 0 0 3 0x14200 bored systqmp
90178 49682 0 0 3 0x14200 bored systq
*67416 207669 0 0 7 0x40014200 softclock
77250 498860 0 0 3 0x40014200 idle0
1 375614 0 0 3 0x82 wait init
0 0 -1 0 3 0x10200 scheduler swapper
ddb> show all locks
No such command
ddb> show malloc
Type InUse MemUse HighUse Limit Requests Type Lim
devbuf 10221 6435K 10791K 166960K 50772 0
pcb 15 22K 24K 166960K 2065 0
rtable 224 14K 15K 166960K 8422 0
pf 34 9K 10K 166960K 1074 0
ifaddr 42 14K 15K 166960K 1182 0
ifgroup 59 2K 2K 166960K 1861 0
sysctl 4 1K 1K 166960K 16 0
counters 32 17K 18K 166960K 511 0
ioctlops 0 0K 2K 166960K 1629 0
iov 0 0K 32K 166960K 2137 0
mount 1 1K 1K 166960K 1 0
log 0 0K 0K 166960K 4 0
vnodes 1678 105K 105K 166960K 26491 0
UFS quota 1 32K 32K 166960K 1 0
UFS mount 5 36K 36K 166960K 5 0
shm 2 1K 17K 166960K 302 0
VM map 2 1K 1K 166960K 2 0
sem 10 0K 0K 166960K 12 0
dirhash 12 2K 2K 166960K 150 0
ACPI 1697 195K 286K 166960K 12548 0
file desc 19 69K 85K 166960K 27745 0
sigio 0 0K 0K 166960K 605 0
proc 61 59K 100K 166960K 7271 0
subproc 117 7K 7K 166960K 3045 0
NFS srvsock 1 0K 0K 166960K 1 0
NFS daemon 1 16K 16K 166960K 1 0
ip_moptions 0 0K 0K 166960K 1906 0
in_multi 88 6K 7K 166960K 2633 0
ether_multi 1 0K 0K 166960K 27 0
mrt 1 0K 0K 166960K 20 0
ISOFS mount 1 32K 32K 166960K 1 0
MSDOSFS mount 1 16K 16K 166960K 1 0
ttys 295 1314K 1314K 166960K 295 0
exec 0 0K 1K 166960K 6156 0
pfkey data 0 0K 0K 166960K 11 0
tdb 3 0K 0K 166960K 3 0
VM swap 8 62K 64K 166960K 10 0
UVM amap 557 1004K 1005K 166960K 246937 0
UVM aobj 131 4K 4K 166960K 134 0
memdesc 1 4K 4K 166960K 1 0
crypto data 1 1K 1K 166960K 1 0
ip6_options 0 0K 1K 166960K 551 0
NDP 13 0K 1K 166960K 932 0
temp 74 6764K 7152K 166960K 215186 0
kqueue 12 18K 28K 166960K 3290 0
SYN cache 2 16K 16K 166960K 2 0
ddb> show all pools
Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle
rtpcb 120 1575 0 1571 5 2 3 3 0 8 2
rtentry 112 2912 0 2810 4 0 4 4 0 8 0
unpcb 144 24489 0 24474 30 21 9 11 0 8 8
syncache 336 258 0 258 4 3 1 1 0 8 1
sackhl 24 6 0 6 1 0 1 1 0 8 1
tcpqe 32 338 0 338 4 3 1 1 0 8 1
tcpcb 808 9761 0 9752 38 29 9 16 0 8 7
arp 88 547 0 531 1 0 1 1 0 8 0
ipq 40 21 0 21 2 1 1 1 0 8 1
ipqe 40 134 0 134 2 1 1 1 0 8 1
inpcb 360 23263 0 23250 55 46 9 16 0 8 7
ip6q 72 10 0 10 2 1 1 1 0 8 1
ip6af 40 10 0 10 2 1 1 1 0 8 1
nd6 104 680 0 656 1 0 1 1 0 8 0
pkpcb 40 115 0 115 2 1 1 1 0 8 1
kcovpl 48 234 0 225 1 0 1 1 0 8 0
ppxss 1072 98 0 98 3 2 1 1 0 8 1
rttmr 136 1 0 1 1 0 1 1 0 8 1
art_heap8 4096 4 0 3 3 1 2 3 0 8 1
art_heap4 256 10950 0 10508 111 81 30 30 0 8 2
art_table 32 10954 0 10511 4 0 4 4 0 8 0
art_node 16 2833 0 2740 1 0 1 1 0 8 0
sysvmsgpl 40 80 0 71 2 1 1 1 0 8 0
semupl 112 4 0 4 1 1 0 1 0 8 0
semapl 112 10 0 2 1 0 1 1 0 8 0
shmpl 112 131 0 3 4 0 4 4 0 8 0
dirhash 1024 109 0 92 3 0 3 3 0 8 0
dino2pl 256 45257 0 43693 98 0 98 98 0 8 0
ffsino 240 45257 0 43693 93 0 93 93 0 8 0
nchpl 144 81908 0 80262 63 0 63 63 0 8 0
uvmvnodes 80 8315 0 0 170 0 170 170 0 8 0
vnodes 216 8315 0 0 462 0 462 462 0 8 0
namei 1024 297774 0 297774 8 6 2 3 0 8 2
vcpupl 2048 139 0 0 18 0 18 18 0 8 0
vmpool 664 171 0 32 12 0 12 12 0 8 0
kstatmem 264 984 0 958 3 0 3 3 0 8 0
scxspl 216 256191 0 256191 17 13 4 8 1 8 4
plimitpl 152 4735 0 4719 1 0 1 1 0 8 0
sigapl 424 27755 0 27707 10 2 8 8 0 8 1
futexpl 64 247137 0 247133 1 0 1 1 0 8 0
knotepl 120 246701 0 246619 25 14 11 17 0 8 7
kqueuepl 184 5857 0 5847 15 8 7 7 0 8 6
pipepl 288 6625 0 6594 18 8 10 11 0 8 7
fdescpl 432 27513 0 27483 4 0 4 4 0 8 0
filepl 120 204629 0 204368 35 19 16 20 0 8 5
lockfpl 104 8162 0 8160 4 2 2 2 0 8 1
lockfspl 48 2393 0 2391 1 0 1 1 0 8 0
sessionpl 144 253 0 236 1 0 1 1 0 8 0
pgrppl 48 596 0 579 1 0 1 1 0 8 0
ucredpl 104 54075 0 54062 1 0 1 1 0 8 0
zombiepl 144 27707 0 27707 2 1 1 1 0 8 1
processpl 1072 27755 0 27707 5 0 5 5 0 8 0
procpl 680 64140 0 64071 11 1 10 10 0 8 2
sosppl 168 271 0 271 3 2 1 1 0 8 1
sockpl 488 49571 0 49539 776 763 13 37 0 8 8
mcl64k 65536 905 0 905 4 3 1 1 0 8 1
mcl16k 16384 453 0 453 4 3 1 1 0 8 1
mcl12k 12288 850 0 850 4 3 1 1 0 8 1
mcl9k 9216 559 0 559 3 2 1 1 0 8 1
mcl8k 8192 1642 0 1642 4 3 1 1 0 8 1
mcl4k 4096 3380 0 3380 5 3 2 2 0 8 2
mcl2k2 2112 154 0 154 3 2 1 1 0 8 1
mcl2k 2048 128540 0 128475 56 42 14 32 0 8 4
mtagpl 96 4271 0 3972 18 7 11 14 0 8 3
mbufpl 256 446720 0 446296 1289 1254 35 556 0 8 6
bufpl 280 53192 0 44875 595 0 595 595 0 8 0
anonpl 24 2894745 0 2880089 170 50 120 153 0 188 13
amapchunkpl 152 787633 0 786791 80 28 52 59 0 158 12
amappl16 200 47038 0 46485 107 69 38 51 0 8 8
amappl15 192 107 0 107 3 2 1 1 0 8 1
amappl14 184 883 0 868 2 1 1 2 0 8 0
amappl13 176 111 0 111 3 2 1 1 0 8 1
amappl12 168 31423 0 31391 2 0 2 2 0 8 0
amappl11 160 145 0 133 1 0 1 1 0 8 0
amappl10 152 437 0 423 1 0 1 1 0 8 0
amappl9 144 418 0 418 1 0 1 1 0 8 1
amappl8 136 1402 0 1277 5 0 5 5 0 8 0
amappl7 128 869 0 844 2 0 2 2 0 8 0
amappl6 120 3829 0 3809 1 0 1 1 0 8 0
amappl5 112 729 0 721 1 0 1 1 0 8 0
amappl4 104 2083 0 2052 2 1 1 2 0 8 0
amappl3 96 149929 0 149832 4 0 4 4 0 8 0
amappl2 88 29871 0 29787 3 1 2 3 0 8 0
amappl1 80 125339 0 124805 23 10 13 22 0 8 1
amappl 88 242486 0 242193 8 0 8 8 0 92 0
dma4096 4096 1 0 1 1 1 0 1 0 8 0
dma1024 1024 1 0 0 1 0 1 1 0 8 0
dma256 256 6 0 6 1 1 0 1 0 8 0
dma128 128 253 0 253 1 1 0 1 0 8 0
dma64 64 6 0 6 1 1 0 1 0 8 0
dma32 32 7 0 7 1 1 0 1 0 8 0
dma16 16 18 0 17 1 0 1 1 0 8 0
aobjpl 72 133 0 3 3 0 3 3 0 8 0
uaddrrnd 24 27684 0 27515 2 0 2 2 0 8 0
uaddrbest 32 2 0 0 1 0 1 1 0 8 0
uaddr 24 27684 0 27515 2 0 2 2 0 8 0
vmmpekpl 168 195217 0 195130 5 0 5 5 0 8 0
vmmpepl 168 1756907 0 1754212 220 69 151 151 0 357 12
vmsppl 352 27683 0 27515 16 0 16 16 0 8 0
rwobjpl 24 374640 0 364451 63 1 62 62 0 8 0
pdppl 4096 55374 0 55169 1832 1627 205 209 0 8 0
pvpl 32 8549535 0 8528764 517 274 243 337 0 265 40
pmappl 216 27683 0 27515 10 0 10 10 0 8 0
extentpl 40 56 0 38 1 0 1 1 0 8 0
phpool 112 3602 0 3066 29 5 24 29 0 8 7
ddb> machine ddbcpu 0
No such command
ddb> trace
rt_timer_timer(fffffd806179de58) at rt_timer_timer+0x4f sys/net/route.c:1697
timeout_run(fffffd806179de78) at timeout_run+0x8f sys/kern/kern_timeout.c:666
softclock_thread(ffff80002a57cd48) at softclock_thread+0xc4 sys/kern/kern_timeout.c:814
end trace frame: 0x0, count: -3
ddb> machine ddbcpu 1
No such command
ddb> trace
rt_timer_timer(fffffd806179de58) at rt_timer_timer+0x4f sys/net/route.c:1697
timeout_run(fffffd806179de78) at timeout_run+0x8f sys/kern/kern_timeout.c:666
softclock_thread(ffff80002a57cd48) at softclock_thread+0xc4 sys/kern/kern_timeout.c:814
end trace frame: 0x0, count: -3
---
This report is generated by a bot. It may contain errors.
See https://goo.gl/tpsmEJ for more information about syzbot.
syzbot engineers can be reached at syzk...@googlegroups.com.
syzbot will keep track of this issue. See:
https://goo.gl/tpsmEJ#status for how to communicate with syzbot.
If the report is already addressed, let syzbot know by replying with:
#syz fix: exact-commit-title
If you want to overwrite report's subsystems, reply with:
#syz set subsystems: new-subsystem
(See the list of subsystem names on the web dashboard)
If the report is a duplicate of another one, reply with:
#syz dup: exact-subject-of-another-report
If you want to undo deduplication, reply with:
#syz undup
syzbot found the following issue on:
HEAD commit: b0ca02faf19d align qwx_ce_rx error code checking with linu..
git tree: openbsd
console output: https://syzkaller.appspot.com/x/log.txt?x=1120a7f6180000
kernel config: https://syzkaller.appspot.com/x/.config?x=1bc15e68cd2a49e5
dashboard link: https://syzkaller.appspot.com/bug?extid=cb0b8edf09a565466582
Unfortunately, I don't have any reproducer for this issue yet.
Downloadable assets:
disk image: https://storage.googleapis.com/syzbot-assets/c4937bf77cd8/disk-b0ca02fa.raw.xz
bsd.gdb: https://storage.googleapis.com/syzbot-assets/abd6de49871e/bsd-b0ca02fa.gdb.xz
kernel image: https://storage.googleapis.com/syzbot-assets/c354c2a8272d/kernel-b0ca02fa.xz
IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+cb0b8e...@syzkaller.appspotmail.com
uvm_fault(0xffffffff82e54e28, 0x17, 0, 2) -> e
kernel: page fault trap, code=2
Stopped at rt_timer_timer+0x4f: movq %rax,0x18(%r15)
TID PID UID PRFLAGS PFLAGS CPU COMMAND
*207669 67416 0 0x14000 0x40000200 0 softclock
rt_timer_timer(fffffd806179de58) at rt_timer_timer+0x4f sys/net/route.c:1697
timeout_run(fffffd806179de78) at timeout_run+0x8f sys/kern/kern_timeout.c:666
softclock_thread(ffff80002a57cd48) at softclock_thread+0xc4 sys/kern/kern_timeout.c:814
end trace frame: 0x0, count: 12
https://www.openbsd.org/ddb.html describes the minimum info required in bug
reports. Insufficient info makes it difficult to find and fix bugs.
ddb>
ddb> set $lines = 0
ddb> set $maxwidth = 0
ddb> show panic
*cpu0: uvm_fault(0xffffffff82e54e28, 0x17, 0, 2) -> e
ddb> trace
rt_timer_timer(fffffd806179de58) at rt_timer_timer+0x4f sys/net/route.c:1697
timeout_run(fffffd806179de78) at timeout_run+0x8f sys/kern/kern_timeout.c:666
softclock_thread(ffff80002a57cd48) at softclock_thread+0xc4 sys/kern/kern_timeout.c:814
end trace frame: 0x0, count: -3
ddb> show registers
rdi 0x1
rsi 0x9
rbp 0xffff80002a589b90
rbx 0
rdx 0
rcx 0xffffffff82dc9d90 timeout_proc
rax 0xffffffffffffffff
r8 0xbb9
r9 0
r10 0x4c283e93099a1ce4
r11 0x8b5349171102d786
r12 0xffffffff82e43a30 ip_mtudisc_timeout_q
r13 0xffffffff82cdcff0 cpu_info_full_primary+0x1ff0
r14 0xfffffd806179de58
r15 0xffffffffffffffff
rip 0xffffffff819873bf rt_timer_timer+0x4f
cs 0x8
rflags 0x10246 __ALIGN_SIZE+0xf246
rsp 0xffff80002a589b60
ss 0x10
rt_timer_timer+0x4f: movq %rax,0x18(%r15)
ddb> show proc
PROC (softclock) tid=207669 pid=67416 tcnt=1 stat=onproc
flags process=14000<NOZOMBIE,SYSTEM> proc=40000200<SYSTEM,CPUPEG>
runpri=50, usrpri=54, slppri=0, nice=20
wchan=0x0, wmesg=, ps_single=0x0
forw=0xffffffffffffffff, list=0xffff80002a57d540,0xffff80002a57cab0
process=0xffff8000ffffdd50 user=0xffff80002a584000, vmspace=0xffffffff82e54e28
estcpu=4, cpticks=19, pctcpu=0.0, user=0, sys=19, intr=0
ddb> ps
PID TID PPID UID S FLAGS WAIT COMMAND
63583 104467 11063 0 2 0 syz-executor.3
92877 476914 31706 0 2 0 syz-executor.0
92877 98362 31706 0 2 0x4000000 syz-executor.0
92877 480573 31706 0 2 0x4000000 syz-executor.0
92877 434911 31706 0 2 0x4000000 syz-executor.0
20190 459556 85211 0 2 0 syz-executor.1
20190 496711 85211 0 2 0x4000000 syz-executor.1
39848 194934 578 0 2 0 syz-executor.6
39848 9473 578 0 3 0x4000080 fsleep syz-executor.6
6268 389774 31319 0 2 0 syz-executor.2
6268 356033 31319 0 3 0x4000080 fsleep syz-executor.2
85999 491842 56840 0 2 0 syz-executor.4
85999 270384 56840 0 3 0x4000080 fsleep syz-executor.4
64599 461411 41977 0 2 0 syz-executor.5
64599 14818 41977 0 3 0x4000080 fsleep syz-executor.5
11063 314184 88232 0 2 0x2 syz-executor.3
85211 213943 88232 0 2 0x482 syz-executor.1
31706 405152 88232 0 2 0x482 syz-executor.0
41977 26367 88232 0 2 0x482 syz-executor.5
34061 65593 88232 0 2 0x2 syz-executor.7
56840 423410 88232 0 2 0x482 syz-executor.4
24647 317803 1 0 3 0x100083 ttyin getty
31319 388522 88232 0 2 0x482 syz-executor.2
578 278589 88232 0 2 0x482 syz-executor.6
80905 19907 0 0 3 0x14200 acct acct
50437 408396 8050 0 3 0x100082 netio ndp
8050 502653 1 0 3 0x10008a sigsusp sh
59728 359436 0 0 3 0x14200 bored sosplice
88232 96226 85491 0 3 0x2000082 wait syz-fuzzer
88232 235613 85491 0 3 0x6000082 nanoslp syz-fuzzer
88232 324382 85491 0 3 0x6000082 thrsleep syz-fuzzer
88232 322095 85491 0 3 0x6000082 wait syz-fuzzer
88232 72010 85491 0 3 0x6000082 wait syz-fuzzer
88232 148664 85491 0 3 0x6000082 thrsleep syz-fuzzer
88232 329717 85491 0 3 0x6000082 wait syz-fuzzer
88232 444436 85491 0 3 0x6000082 wait syz-fuzzer
88232 249235 85491 0 3 0x6000082 thrsleep syz-fuzzer
88232 355564 85491 0 3 0x6000082 wait syz-fuzzer
88232 239196 85491 0 3 0x6000082 thrsleep syz-fuzzer
88232 351866 85491 0 3 0x6000082 wait syz-fuzzer
88232 181380 85491 0 2 0x6000482 syz-fuzzer
88232 188123 85491 0 3 0x6000082 wait syz-fuzzer
85491 491264 36146 0 3 0x10008a sigsusp ksh
36146 268337 56867 0 3 0x9a kqread sshd
56867 217885 1 0 3 0x88 kqread sshd
4098 7169 45210 73 3 0x1100090 kqread syslogd
45210 49712 1 0 3 0x100082 netio syslogd
60245 444424 1 0 3 0x100080 kqread resolvd
65379 385620 44886 77 3 0x100092 kqread dhcpleased
90561 254266 44886 77 3 0x100092 kqread dhcpleased
44886 479321 1 0 3 0x80 kqread dhcpleased
27709 387702 0 0 3 0x14200 bored smr
20749 1667 0 0 2 0x14200 zerothread
71067 280915 0 0 3 0x14200 aiodoned aiodoned
47126 112858 0 0 2 0x14600 update
61360 310513 0 0 3 0x14200 cleaner cleaner
62101 342457 0 0 3 0x14200 reaper reaper
13727 94095 0 0 3 0x14200 pgdaemon pagedaemon
97998 188015 0 0 3 0x14200 bored viomb
85987 185973 0 0 3 0x40014200 acpi0 acpi0
46243 395927 0 0 3 0x14200 bored softnet3
30956 40134 0 0 3 0x14200 bored softnet2
96045 106164 0 0 3 0x14200 bored softnet1
97748 269595 0 0 3 0x14200 bored softnet0
32064 450623 0 0 3 0x14200 bored systqmp
90178 49682 0 0 3 0x14200 bored systq
*67416 207669 0 0 7 0x40014200 softclock
77250 498860 0 0 3 0x40014200 idle0
1 375614 0 0 3 0x82 wait init
0 0 -1 0 3 0x10200 scheduler swapper
ddb> show all locks
No such command
ddb> show malloc
Type InUse MemUse HighUse Limit Requests Type Lim
devbuf 10221 6435K 10791K 166960K 50772 0
pcb 15 22K 24K 166960K 2065 0
rtable 224 14K 15K 166960K 8422 0
pf 34 9K 10K 166960K 1074 0
ifaddr 42 14K 15K 166960K 1182 0
ifgroup 59 2K 2K 166960K 1861 0
sysctl 4 1K 1K 166960K 16 0
counters 32 17K 18K 166960K 511 0
ioctlops 0 0K 2K 166960K 1629 0
iov 0 0K 32K 166960K 2137 0
mount 1 1K 1K 166960K 1 0
log 0 0K 0K 166960K 4 0
vnodes 1678 105K 105K 166960K 26491 0
UFS quota 1 32K 32K 166960K 1 0
UFS mount 5 36K 36K 166960K 5 0
shm 2 1K 17K 166960K 302 0
VM map 2 1K 1K 166960K 2 0
sem 10 0K 0K 166960K 12 0
dirhash 12 2K 2K 166960K 150 0
ACPI 1697 195K 286K 166960K 12548 0
file desc 19 69K 85K 166960K 27745 0
sigio 0 0K 0K 166960K 605 0
proc 61 59K 100K 166960K 7271 0
subproc 117 7K 7K 166960K 3045 0
NFS srvsock 1 0K 0K 166960K 1 0
NFS daemon 1 16K 16K 166960K 1 0
ip_moptions 0 0K 0K 166960K 1906 0
in_multi 88 6K 7K 166960K 2633 0
ether_multi 1 0K 0K 166960K 27 0
mrt 1 0K 0K 166960K 20 0
ISOFS mount 1 32K 32K 166960K 1 0
MSDOSFS mount 1 16K 16K 166960K 1 0
ttys 295 1314K 1314K 166960K 295 0
exec 0 0K 1K 166960K 6156 0
pfkey data 0 0K 0K 166960K 11 0
tdb 3 0K 0K 166960K 3 0
VM swap 8 62K 64K 166960K 10 0
UVM amap 557 1004K 1005K 166960K 246937 0
UVM aobj 131 4K 4K 166960K 134 0
memdesc 1 4K 4K 166960K 1 0
crypto data 1 1K 1K 166960K 1 0
ip6_options 0 0K 1K 166960K 551 0
NDP 13 0K 1K 166960K 932 0
temp 74 6764K 7152K 166960K 215186 0
kqueue 12 18K 28K 166960K 3290 0
SYN cache 2 16K 16K 166960K 2 0
ddb> show all pools
Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle
rtpcb 120 1575 0 1571 5 2 3 3 0 8 2
rtentry 112 2912 0 2810 4 0 4 4 0 8 0
unpcb 144 24489 0 24474 30 21 9 11 0 8 8
syncache 336 258 0 258 4 3 1 1 0 8 1
sackhl 24 6 0 6 1 0 1 1 0 8 1
tcpqe 32 338 0 338 4 3 1 1 0 8 1
tcpcb 808 9761 0 9752 38 29 9 16 0 8 7
arp 88 547 0 531 1 0 1 1 0 8 0
ipq 40 21 0 21 2 1 1 1 0 8 1
ipqe 40 134 0 134 2 1 1 1 0 8 1
inpcb 360 23263 0 23250 55 46 9 16 0 8 7
ip6q 72 10 0 10 2 1 1 1 0 8 1
ip6af 40 10 0 10 2 1 1 1 0 8 1
nd6 104 680 0 656 1 0 1 1 0 8 0
pkpcb 40 115 0 115 2 1 1 1 0 8 1
kcovpl 48 234 0 225 1 0 1 1 0 8 0
ppxss 1072 98 0 98 3 2 1 1 0 8 1
rttmr 136 1 0 1 1 0 1 1 0 8 1
art_heap8 4096 4 0 3 3 1 2 3 0 8 1
art_heap4 256 10950 0 10508 111 81 30 30 0 8 2
art_table 32 10954 0 10511 4 0 4 4 0 8 0
art_node 16 2833 0 2740 1 0 1 1 0 8 0
sysvmsgpl 40 80 0 71 2 1 1 1 0 8 0
semupl 112 4 0 4 1 1 0 1 0 8 0
semapl 112 10 0 2 1 0 1 1 0 8 0
shmpl 112 131 0 3 4 0 4 4 0 8 0
dirhash 1024 109 0 92 3 0 3 3 0 8 0
dino2pl 256 45257 0 43693 98 0 98 98 0 8 0
ffsino 240 45257 0 43693 93 0 93 93 0 8 0
nchpl 144 81908 0 80262 63 0 63 63 0 8 0
uvmvnodes 80 8315 0 0 170 0 170 170 0 8 0
vnodes 216 8315 0 0 462 0 462 462 0 8 0
namei 1024 297774 0 297774 8 6 2 3 0 8 2
vcpupl 2048 139 0 0 18 0 18 18 0 8 0
vmpool 664 171 0 32 12 0 12 12 0 8 0
kstatmem 264 984 0 958 3 0 3 3 0 8 0
scxspl 216 256191 0 256191 17 13 4 8 1 8 4
plimitpl 152 4735 0 4719 1 0 1 1 0 8 0
sigapl 424 27755 0 27707 10 2 8 8 0 8 1
futexpl 64 247137 0 247133 1 0 1 1 0 8 0
knotepl 120 246701 0 246619 25 14 11 17 0 8 7
kqueuepl 184 5857 0 5847 15 8 7 7 0 8 6
pipepl 288 6625 0 6594 18 8 10 11 0 8 7
fdescpl 432 27513 0 27483 4 0 4 4 0 8 0
filepl 120 204629 0 204368 35 19 16 20 0 8 5
lockfpl 104 8162 0 8160 4 2 2 2 0 8 1
lockfspl 48 2393 0 2391 1 0 1 1 0 8 0
sessionpl 144 253 0 236 1 0 1 1 0 8 0
pgrppl 48 596 0 579 1 0 1 1 0 8 0
ucredpl 104 54075 0 54062 1 0 1 1 0 8 0
zombiepl 144 27707 0 27707 2 1 1 1 0 8 1
processpl 1072 27755 0 27707 5 0 5 5 0 8 0
procpl 680 64140 0 64071 11 1 10 10 0 8 2
sosppl 168 271 0 271 3 2 1 1 0 8 1
sockpl 488 49571 0 49539 776 763 13 37 0 8 8
mcl64k 65536 905 0 905 4 3 1 1 0 8 1
mcl16k 16384 453 0 453 4 3 1 1 0 8 1
mcl12k 12288 850 0 850 4 3 1 1 0 8 1
mcl9k 9216 559 0 559 3 2 1 1 0 8 1
mcl8k 8192 1642 0 1642 4 3 1 1 0 8 1
mcl4k 4096 3380 0 3380 5 3 2 2 0 8 2
mcl2k2 2112 154 0 154 3 2 1 1 0 8 1
mcl2k 2048 128540 0 128475 56 42 14 32 0 8 4
mtagpl 96 4271 0 3972 18 7 11 14 0 8 3
mbufpl 256 446720 0 446296 1289 1254 35 556 0 8 6
bufpl 280 53192 0 44875 595 0 595 595 0 8 0
anonpl 24 2894745 0 2880089 170 50 120 153 0 188 13
amapchunkpl 152 787633 0 786791 80 28 52 59 0 158 12
amappl16 200 47038 0 46485 107 69 38 51 0 8 8
amappl15 192 107 0 107 3 2 1 1 0 8 1
amappl14 184 883 0 868 2 1 1 2 0 8 0
amappl13 176 111 0 111 3 2 1 1 0 8 1
amappl12 168 31423 0 31391 2 0 2 2 0 8 0
amappl11 160 145 0 133 1 0 1 1 0 8 0
amappl10 152 437 0 423 1 0 1 1 0 8 0
amappl9 144 418 0 418 1 0 1 1 0 8 1
amappl8 136 1402 0 1277 5 0 5 5 0 8 0
amappl7 128 869 0 844 2 0 2 2 0 8 0
amappl6 120 3829 0 3809 1 0 1 1 0 8 0
amappl5 112 729 0 721 1 0 1 1 0 8 0
amappl4 104 2083 0 2052 2 1 1 2 0 8 0
amappl3 96 149929 0 149832 4 0 4 4 0 8 0
amappl2 88 29871 0 29787 3 1 2 3 0 8 0
amappl1 80 125339 0 124805 23 10 13 22 0 8 1
amappl 88 242486 0 242193 8 0 8 8 0 92 0
dma4096 4096 1 0 1 1 1 0 1 0 8 0
dma1024 1024 1 0 0 1 0 1 1 0 8 0
dma256 256 6 0 6 1 1 0 1 0 8 0
dma128 128 253 0 253 1 1 0 1 0 8 0
dma64 64 6 0 6 1 1 0 1 0 8 0
dma32 32 7 0 7 1 1 0 1 0 8 0
dma16 16 18 0 17 1 0 1 1 0 8 0
aobjpl 72 133 0 3 3 0 3 3 0 8 0
uaddrrnd 24 27684 0 27515 2 0 2 2 0 8 0
uaddrbest 32 2 0 0 1 0 1 1 0 8 0
uaddr 24 27684 0 27515 2 0 2 2 0 8 0
vmmpekpl 168 195217 0 195130 5 0 5 5 0 8 0
vmmpepl 168 1756907 0 1754212 220 69 151 151 0 357 12
vmsppl 352 27683 0 27515 16 0 16 16 0 8 0
rwobjpl 24 374640 0 364451 63 1 62 62 0 8 0
pdppl 4096 55374 0 55169 1832 1627 205 209 0 8 0
pvpl 32 8549535 0 8528764 517 274 243 337 0 265 40
pmappl 216 27683 0 27515 10 0 10 10 0 8 0
extentpl 40 56 0 38 1 0 1 1 0 8 0
phpool 112 3602 0 3066 29 5 24 29 0 8 7
ddb> machine ddbcpu 0
No such command
ddb> trace
rt_timer_timer(fffffd806179de58) at rt_timer_timer+0x4f sys/net/route.c:1697
timeout_run(fffffd806179de78) at timeout_run+0x8f sys/kern/kern_timeout.c:666
softclock_thread(ffff80002a57cd48) at softclock_thread+0xc4 sys/kern/kern_timeout.c:814
end trace frame: 0x0, count: -3
ddb> machine ddbcpu 1
No such command
ddb> trace
rt_timer_timer(fffffd806179de58) at rt_timer_timer+0x4f sys/net/route.c:1697
timeout_run(fffffd806179de78) at timeout_run+0x8f sys/kern/kern_timeout.c:666
softclock_thread(ffff80002a57cd48) at softclock_thread+0xc4 sys/kern/kern_timeout.c:814
end trace frame: 0x0, count: -3
---
This report is generated by a bot. It may contain errors.
See https://goo.gl/tpsmEJ for more information about syzbot.
syzbot engineers can be reached at syzk...@googlegroups.com.
syzbot will keep track of this issue. See:
https://goo.gl/tpsmEJ#status for how to communicate with syzbot.
If the report is already addressed, let syzbot know by replying with:
#syz fix: exact-commit-title
If you want to overwrite report's subsystems, reply with:
#syz set subsystems: new-subsystem
(See the list of subsystem names on the web dashboard)
If the report is a duplicate of another one, reply with:
#syz dup: exact-subject-of-another-report
If you want to undo deduplication, reply with:
#syz undup
Reply all
Reply to author
Forward
0 new messages