uvm_fault: nd6_rtrequest
0 views
Skip to first unread message
syzbot
Oct 18, 2025, 5:33:26 PM (10 days ago) Oct 18
to syzkaller-o...@googlegroups.com
Hello,
syzbot found the following issue on:
HEAD commit: 98ebdb79786a remove a small piece of magic we are not read..
git tree: openbsd
console output: https://syzkaller.appspot.com/x/log.txt?x=108ff542580000
kernel config: https://syzkaller.appspot.com/x/.config?x=1bc15e68cd2a49e5
dashboard link: https://syzkaller.appspot.com/bug?extid=9153f39c8dfe639e7b6c
Unfortunately, I don't have any reproducer for this issue yet.
Downloadable assets:
disk image: https://storage.googleapis.com/syzbot-assets/f964b0054a05/disk-98ebdb79.raw.xz
bsd.gdb: https://storage.googleapis.com/syzbot-assets/79ac15051e3f/bsd-98ebdb79.gdb.xz
kernel image: https://storage.googleapis.com/syzbot-assets/db7dcf414546/kernel-98ebdb79.xz
IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+9153f3...@syzkaller.appspotmail.com
uvm_fault(0xfffffd806c23fe70, 0x60, 0, 1) -> e
kernel: page fault trap, code=0
Stopped at nd6_rtrequest+0x8e5: movq 0x60(%rax),%rbx
TID PID UID PRFLAGS PFLAGS CPU COMMAND
*398260 81956 0 0 0x4000000 0 syz-executor
nd6_rtrequest(ffff800001467800,b,fffffd806c019898) at nd6_rtrequest+0x8e5 sys/netinet6/nd6.c:837
rtrequest(b,ffff80003c9787f8,3,ffff80003c978898,0) at rtrequest+0xf08 sys/net/route.c:1114
rt_match(ffff80003c978978,ffff80003c978994,1,0) at rt_match+0x11a rt_clone sys/net/route.c:381 [inline]
rt_match(ffff80003c978978,ffff80003c978994,1,0) at rt_match+0x11a sys/net/route.c:356
route6_mpath(ffff80003c978960,fffffd805f1fc068,fffffd805f1fc058,0) at route6_mpath+0x163 sys/net/route.c:305
ip6_input_if(ffff80003c978a80,ffff80003c978a8c,29,0,ffff800001467800,0) at ip6_input_if+0xba3 sys/netinet6/ip6_input.c:-1
ipv6_input(ffff800001467800,fffffd8069659f00,0) at ipv6_input+0x5f sys/netinet6/ip6_input.c:256
ether_input(ffff800001467800,fffffd8069659f00,0) at ether_input+0x70f sys/net/if_ethersubr.c:-1
tun_dev_write(5d05,ffff80003c978e58,ffff800035d14000,2) at tun_dev_write+0x769 sys/net/if_tun.c:1039
spec_write(ffff80003c978ca0) at spec_write+0x116 sys/kern/spec_vnops.c:302
VOP_WRITE(fffffd80710e22b0,ffff80003c978e58,11,fffffd8007bfb340) at VOP_WRITE+0x101 sys/kern/vfs_vops.c:245
vn_write(fffffd806c1d3b50,ffff80003c978e58,0) at vn_write+0x1c2 sys/kern/vfs_vnops.c:408
dofilewritev(ffff80002f100018,c8,ffff80003c978e58,0,ffff80003c978f00) at dofilewritev+0x242 sys/kern/sys_generic.c:380
sys_write(ffff80002f100018,ffff80003c978fb0,ffff80003c978f00) at sys_write+0xa2 sys/kern/sys_generic.c:300
syscall(ffff80003c978fb0) at syscall+0x962 mi_syscall sys/sys/syscall_mi.h:-1 [inline]
syscall(ffff80003c978fb0) at syscall+0x962 sys/arch/amd64/amd64/trap.c:748
end trace frame: 0xffff80003c979030, count: 0
https://www.openbsd.org/ddb.html describes the minimum info required in bug
reports. Insufficient info makes it difficult to find and fix bugs.
ddb>
ddb> set $lines = 0
ddb> set $maxwidth = 0
ddb> show panic
*cpu0: uvm_fault(0xfffffd806c23fe70, 0x60, 0, 1) -> e
ddb> trace
nd6_rtrequest(ffff800001467800,b,fffffd806c019898) at nd6_rtrequest+0x8e5 sys/netinet6/nd6.c:837
rtrequest(b,ffff80003c9787f8,3,ffff80003c978898,0) at rtrequest+0xf08 sys/net/route.c:1114
rt_match(ffff80003c978978,ffff80003c978994,1,0) at rt_match+0x11a rt_clone sys/net/route.c:381 [inline]
rt_match(ffff80003c978978,ffff80003c978994,1,0) at rt_match+0x11a sys/net/route.c:356
route6_mpath(ffff80003c978960,fffffd805f1fc068,fffffd805f1fc058,0) at route6_mpath+0x163 sys/net/route.c:305
ip6_input_if(ffff80003c978a80,ffff80003c978a8c,29,0,ffff800001467800,0) at ip6_input_if+0xba3 sys/netinet6/ip6_input.c:-1
ipv6_input(ffff800001467800,fffffd8069659f00,0) at ipv6_input+0x5f sys/netinet6/ip6_input.c:256
ether_input(ffff800001467800,fffffd8069659f00,0) at ether_input+0x70f sys/net/if_ethersubr.c:-1
tun_dev_write(5d05,ffff80003c978e58,ffff800035d14000,2) at tun_dev_write+0x769 sys/net/if_tun.c:1039
spec_write(ffff80003c978ca0) at spec_write+0x116 sys/kern/spec_vnops.c:302
VOP_WRITE(fffffd80710e22b0,ffff80003c978e58,11,fffffd8007bfb340) at VOP_WRITE+0x101 sys/kern/vfs_vops.c:245
vn_write(fffffd806c1d3b50,ffff80003c978e58,0) at vn_write+0x1c2 sys/kern/vfs_vnops.c:408
dofilewritev(ffff80002f100018,c8,ffff80003c978e58,0,ffff80003c978f00) at dofilewritev+0x242 sys/kern/sys_generic.c:380
sys_write(ffff80002f100018,ffff80003c978fb0,ffff80003c978f00) at sys_write+0xa2 sys/kern/sys_generic.c:300
syscall(ffff80003c978fb0) at syscall+0x962 mi_syscall sys/sys/syscall_mi.h:-1 [inline]
syscall(ffff80003c978fb0) at syscall+0x962 sys/arch/amd64/amd64/trap.c:748
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0xd35702a6fe0, count: -15
ddb> show registers
rdi 0xffff800035d14000
rsi 0x5c5
rbp 0xffff80003c9786e0
rbx 0
rdx 0xffffffff837db300 nd6_list
rcx 0xfffffd806cd94850
rax 0
r8 0x70
r9 0xfffffd806c019898
r10 0xe35a1449ef82cc39
r11 0x6431f60175f4d501
r12 0xffff80002a7497a0
r13 0xfffffd806cd94a10
r14 0x1
r15 0xfffffd806c019898
rip 0xffffffff822b9505 nd6_rtrequest+0x8e5
cs 0x8
rflags 0x10282 __ALIGN_SIZE+0xf282
rsp 0xffff80003c978670
ss 0x10
nd6_rtrequest+0x8e5: movq 0x60(%rax),%rbx
ddb> show proc
PROC (syz-executor) tid=398260 pid=81956 tcnt=2 stat=onproc
flags process=0 proc=4000000<THREAD>
runpri=32, usrpri=84, slppri=32, nice=20
wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0
forw=0xffffffffffffffff, list=0xffff80002f101a08,0xffff80002f1014e8
process=0xffff80003c9ce420 user=0xffff80003c974000, vmspace=0xfffffd806c23fe70
estcpu=34, cpticks=1, pctcpu=0.0, user=0, sys=1, intr=0
ddb> ps
PID TID PPID UID S FLAGS WAIT COMMAND
24100 246670 25958 0 2 0 syz-executor
24100 429585 25958 0 2 0x4000000 syz-executor
81956 59405 43485 0 2 0 syz-executor
*81956 398260 43485 0 7 0x4000000 syz-executor
21589 86173 42695 0 2 0 syz-executor
21589 324075 42695 0 3 0x4000000 netlock syz-executor
21589 123347 42695 0 2 0x4000000 syz-executor
24269 388771 91499 0 2 0x10 syz-executor
24269 28164 91499 0 2 0x4000010 syz-executor
70838 108592 51718 0 2 0 syz-executor
70838 209575 51718 0 3 0x4000080 fsleep syz-executor
90926 336246 5862 0 2 0 syz-executor
90926 131575 5862 0 2 0x4000000 syz-executor
38570 435502 47402 0 2 0 syz-executor
38570 263084 47402 0 2 0x4000000 syz-executor
71853 182824 93524 0 2 0 syz-executor
71853 120984 93524 0 2 0x4000000 syz-executor
71853 214550 93524 0 3 0x4000080 fsleep syz-executor
71853 64494 93524 0 3 0x4000080 fsleep syz-executor
2190 281902 0 0 3 0x14200 acct acct
61378 408267 0 0 3 0x14280 nfsidl nfsio
40985 54648 0 0 3 0x14280 nfsidl nfsio
78979 488721 0 0 3 0x14280 nfsidl nfsio
7795 380516 0 0 3 0x14280 nfsidl nfsio
47474 469357 0 0 3 0x14280 nfsidl nfsio
44843 80507 0 0 3 0x14280 nfsidl nfsio
16221 423126 0 0 3 0x14280 nfsidl nfsio
46482 220542 0 0 3 0x14280 nfsidl nfsio
97649 82572 0 0 3 0x14280 nfsidl nfsio
6907 946 0 0 3 0x14280 nfsidl nfsio
83864 476451 0 0 3 0x14280 nfsidl nfsio
11878 486611 0 0 3 0x14280 nfsidl nfsio
7941 178351 0 0 3 0x14280 nfsidl nfsio
25742 128926 0 0 3 0x14280 nfsidl nfsio
37169 277555 0 0 3 0x14280 nfsidl nfsio
84783 426696 0 0 3 0x14280 nfsidl nfsio
97446 223402 0 0 3 0x14280 nfsidl nfsio
66310 22999 0 0 3 0x14280 nfsidl nfsio
17281 31090 0 0 3 0x14280 nfsidl nfsio
67807 334760 0 0 3 0x14280 nfsidl nfsio
7951 255429 0 0 3 0x14200 bored sosplice
47402 45793 73512 0 3 0x82 nanoslp syz-executor
25958 449968 73512 0 2 0xc82 syz-executor
43485 68404 73512 0 2 0xc82 syz-executor
91499 39833 73512 0 3 0x82 nanoslp syz-executor
51718 96947 73512 0 3 0x82 nanoslp syz-executor
93524 5549 73512 0 3 0x82 nanoslp syz-executor
5862 286030 73512 0 3 0x82 nanoslp syz-executor
42695 302958 73512 0 3 0x82 nanoslp syz-executor
73512 185674 73110 0 3 0x2 netlock syz-executor
73110 124389 21585 0 3 0x10008a sigsusp ksh
21585 406657 22570 0 3 0x98 kqread sshd-session
22570 412217 23960 0 3 0x92 kqread sshd-session
89882 472653 1 0 3 0x100083 ttyin getty
23960 108830 1 0 3 0x88 kqread sshd
1465 108345 9730 73 3 0x1100090 kqread syslogd
9730 138164 1 0 3 0x100082 sbwait syslogd
47619 494434 1 0 3 0x100080 kqread resolvd
27250 427914 93665 77 3 0x100092 kqread dhcpleased
70146 465018 93665 77 3 0x100092 kqread dhcpleased
93665 54801 1 0 3 0x80 kqread dhcpleased
40509 57887 0 0 3 0x14200 bored smr
18771 475081 0 0 2 0x14200 zerothread
37929 113411 0 0 3 0x14200 aiodoned aiodoned
37640 512051 0 0 3 0x14200 syncer update
7591 419778 0 0 3 0x14200 cleaner cleaner
91266 187244 0 0 3 0x14200 reaper reaper
43888 134905 0 0 3 0x14200 pgdaemon pagedaemon
3640 253100 0 0 3 0x14200 bored viomb
4134 434468 0 0 3 0x40014200 acpi0 acpi0
77420 426268 0 0 2 0x14200 softnet0
47564 279026 0 0 3 0x14200 bored systqmp
73930 135027 0 0 3 0x14200 bored systq
66921 144244 0 0 2 0x40014200 softclock
72746 138902 0 0 3 0x40014200 idle0
1 135141 0 0 3 0x82 wait init
0 0 -1 0 3 0x10200 scheduler swapper
ddb> show all locks
No such command
ddb> show malloc
Type InUse MemUse HighUse Limit Requests Type Lim
devbuf 10220 11124K 12104K 166960K 13417 0
pcb 18 16K 18K 166960K 483 0
rtable 233 11K 11K 166960K 587 0
pf 32 13K 67480K 166960K 128 0
ifaddr 37 6K 7K 166960K 94 0
ifgroup 54 2K 2K 166960K 150 0
sysctl 4 1K 9K 166960K 79 0
counters 33 17K 18K 166960K 128 0
ioctlops 0 0K 4K 166960K 235 0
iov 0 0K 24K 166960K 62 0
mount 1 1K 1K 166960K 1 0
log 0 0K 0K 166960K 4 0
vnodes 1514 95K 96K 166960K 2579 0
UFS quota 1 32K 32K 166960K 1 0
UFS mount 5 36K 36K 166960K 5 0
shm 2 1K 5K 166960K 15 0
VM map 2 1K 1K 166960K 2 0
sem 29 5K 5K 166960K 113 0
dirhash 12 2K 2K 166960K 30 0
ACPI 1692 195K 286K 166960K 12470 0
file desc 18 65K 236K 166960K 1174 0
sigio 0 0K 0K 166960K 28 0
proc 60 59K 91K 166960K 622 0
subproc 72 4K 4K 166960K 72 0
NFS srvsock 1 0K 0K 166960K 1 0
NFS daemon 1 16K 16K 166960K 1 0
ip_moptions 1 0K 0K 166960K 138 0
in_multi 79 5K 7K 166960K 155 0
ether_multi 2 0K 0K 166960K 26 0
mrt 3 0K 0K 166960K 23 0
ISOFS mount 1 32K 32K 166960K 1 0
MSDOSFS mount 1 16K 16K 166960K 1 0
ttys 265 1182K 1182K 166960K 265 0
exec 0 0K 1K 166960K 541 0
fusefs mount 1 32K 32K 166960K 1 0
pfkey data 0 0K 0K 166960K 2 0
tdb 3 0K 0K 166960K 3 0
VM swap 8 62K 64K 166960K 10 0
UVM amap 237 159K 184K 166960K 12393 0
UVM aobj 27 4K 4K 166960K 32 0
pinsyscall 39 78K 90K 166960K 2221 0
memdesc 1 4K 4K 166960K 1 0
crypto data 1 1K 1K 166960K 1 0
ip6_options 0 0K 0K 166960K 62 0
NDP 12 0K 1K 166960K 63 0
temp 65 8645K 8710K 166960K 28696 0
kqueue 14 22K 31K 166960K 232 0
SYN cache 2 16K 16K 166960K 2 0
ddb> show all pools
Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle
rtpcb 120 141 0 138 2 0 2 2 0 8 1
rtentry 136 144 0 55 4 0 4 4 0 8 0
unpcb 144 1015 0 1000 9 5 4 6 0 8 3
syncache 336 6 0 6 3 2 1 1 0 8 1
tcpcb 736 639 0 634 19 12 7 7 0 8 6
arp 96 23 0 9 1 0 1 1 0 8 0
ipq 40 4 0 3 2 1 1 1 0 8 0
ipqe 40 7 0 6 2 1 1 1 0 8 0
inpcb 328 1873 0 1862 29 20 9 12 0 8 7
ip6q 72 8 0 5 1 0 1 1 0 8 0
ip6af 40 16 0 12 1 0 1 1 0 8 0
nd6 112 33 0 13 1 0 1 1 0 8 0
pkpcb 40 7 0 7 2 1 1 1 0 8 1
kcovpl 48 8 0 0 1 0 1 1 0 8 0
mppekey 1024 33 0 33 1 0 1 1 0 8 1
ppxss 1072 86 0 86 3 2 1 1 0 8 1
pppxif 1384 6 0 6 3 2 1 1 0 8 1
pfrktable 1344 2 0 2 1 1 0 1 0 8 0
pftag 88 1 0 0 1 0 1 1 0 8 0
pfrule 1344 2 0 2 1 1 0 1 0 8 0
rttmr 136 2 0 2 2 1 1 1 0 8 1
art_heap8 4096 3 0 0 3 0 3 3 0 8 0
art_heap4 256 520 0 158 30 3 27 30 0 8 2
art_table 40 523 0 158 5 0 5 5 0 8 0
art_node 32 143 0 63 1 0 1 1 0 8 0
sysvmsgpl 40 8 0 7 3 2 1 1 0 8 0
semupl 112 4 0 4 2 2 0 1 0 8 0
semapl 112 107 0 80 1 0 1 1 0 8 0
shmpl 112 29 0 5 1 0 1 1 0 8 0
dirhash 1024 30 0 13 3 0 3 3 0 8 0
dino2pl 256 3516 0 2023 95 0 95 95 0 8 0
ffsino 256 3516 0 2023 95 0 95 95 0 8 0
nchpl 144 5243 0 3550 64 0 64 64 0 8 0
rtmask 32 12 0 12 3 2 1 1 0 8 1
vnodes 216 4409 0 0 245 0 245 245 0 8 0
namei 1024 19181 0 19180 2 1 1 2 0 8 0
kstatmem 264 94 0 70 2 0 2 2 0 8 0
scsiplug 72 9 0 9 2 1 1 1 0 8 1
scxspl 216 17905 0 17905 16 14 2 8 1 8 2
plimitpl 152 238 0 221 1 0 1 1 0 8 0
sigapl 424 1457 0 1392 8 0 8 8 0 8 0
knotepl 120 77093 0 77042 51 40 11 17 0 8 8
kqueuepl 184 573 0 561 6 2 4 4 0 8 3
pipepl 304 299 0 269 9 4 5 5 0 8 2
fdescpl 448 1422 0 1392 5 1 4 5 0 8 0
filepl 120 11300 0 11072 21 8 13 13 0 8 4
lockfpl 104 716 0 714 2 0 2 2 0 8 1
lockfspl 48 145 0 143 1 0 1 1 0 8 0
sessionpl 144 22 0 14 1 0 1 1 0 8 0
pgrppl 48 77 0 61 1 0 1 1 0 8 0
ucredpl 104 1546 0 1534 1 0 1 1 0 8 0
zombiepl 144 1721 0 1721 1 0 1 1 0 8 1
processpl 1152 1457 0 1392 5 0 5 5 0 8 0
procpl 664 3136 0 3060 7 0 7 7 0 8 0
sosppl 168 11 0 11 2 1 1 1 0 8 1
sockpl 552 3069 0 3039 29 19 10 12 0 8 7
mcl64k 65536 409 0 409 4 2 2 2 0 8 2
mcl16k 16384 1 0 1 1 1 0 1 0 8 0
mcl12k 12288 1 0 1 1 0 1 1 0 8 1
mcl9k 9216 3 0 3 2 1 1 1 0 8 1
mcl8k 8192 83 0 82 3 2 1 1 0 8 0
mcl4k 4096 3855 0 3802 17 8 9 14 0 8 1
mcl2k 2048 1873 0 1868 2 0 2 2 0 8 1
mtagpl 96 7 0 5 1 0 1 1 0 8 0
mbufpl 256 16191 0 16031 25 2 23 25 0 8 8
bufpl 280 6281 0 123 440 0 440 440 0 8 0
anonpl 24 223220 0 220028 95 50 45 56 0 187 13
amapchunkpl 152 56080 0 55586 69 30 39 41 0 158 19
amappl16 200 4126 0 4091 39 27 12 15 0 8 8
amappl15 192 8 0 8 1 1 0 1 0 8 0
amappl14 184 43 0 43 2 1 1 1 0 8 1
amappl13 176 405 0 404 1 0 1 1 0 8 0
amappl12 168 1761 0 1721 2 0 2 2 0 8 0
amappl11 160 14 0 14 1 1 0 1 0 8 0
amappl10 152 40 0 30 1 0 1 1 0 8 0
amappl9 144 282 0 282 1 1 0 1 0 8 0
amappl8 136 21 0 19 1 0 1 1 0 8 0
amappl7 128 84 0 83 1 0 1 1 0 8 0
amappl6 120 272 0 260 1 0 1 1 0 8 0
amappl5 112 71 0 63 1 0 1 1 0 8 0
amappl4 104 380 0 356 1 0 1 1 0 8 0
amappl3 96 7198 0 7106 3 0 3 3 0 8 0
amappl2 88 1545 0 1473 2 0 2 2 0 8 0
amappl1 80 13074 0 12534 14 2 12 13 0 8 0
amappl 88 11433 0 11267 6 1 5 5 0 92 0
uvmvnodes 80 4409 0 0 90 0 90 90 0 8 0
dma4096 4096 1 0 1 1 1 0 1 0 8 0
dma2048 2048 1 0 1 1 1 0 1 0 8 0
dma1024 1024 1 0 0 1 0 1 1 0 8 0
dma256 256 8 0 8 3 2 1 1 0 8 1
dma128 128 255 0 255 3 2 1 1 0 8 1
dma64 64 7 0 7 2 2 0 1 0 8 0
dma32 32 7 0 7 1 1 0 1 0 8 0
dma16 16 18 0 17 1 0 1 1 0 8 0
aobjpl 72 31 0 5 1 0 1 1 0 8 0
uaddrrnd 24 1422 0 1392 1 0 1 1 0 8 0
uaddrbest 32 2 0 0 1 0 1 1 0 8 0
uaddr 24 1422 0 1392 1 0 1 1 0 8 0
vmmpekpl 168 13076 0 13039 3 0 3 3 0 8 0
vmmpepl 168 94802 0 92956 114 22 92 92 0 357 10
vmsppl 368 1421 0 1392 4 1 3 4 0 8 0
rwobjpl 40 30536 0 25251 54 0 54 54 0 8 0
pdppl 4096 2850 0 2784 102 36 66 78 0 8 0
pvpl 32 628212 0 618979 210 77 133 133 0 265 44
pmappl 216 1421 0 1392 2 0 2 2 0 8 0
extentpl 40 45 0 27 1 0 1 1 0 8 0
phpool 112 420 0 75 10 0 10 10 0 8 0
ddb> machine ddbcpu 0
No such command
ddb> trace
nd6_rtrequest(ffff800001467800,b,fffffd806c019898) at nd6_rtrequest+0x8e5 sys/netinet6/nd6.c:837
rtrequest(b,ffff80003c9787f8,3,ffff80003c978898,0) at rtrequest+0xf08 sys/net/route.c:1114
rt_match(ffff80003c978978,ffff80003c978994,1,0) at rt_match+0x11a rt_clone sys/net/route.c:381 [inline]
rt_match(ffff80003c978978,ffff80003c978994,1,0) at rt_match+0x11a sys/net/route.c:356
route6_mpath(ffff80003c978960,fffffd805f1fc068,fffffd805f1fc058,0) at route6_mpath+0x163 sys/net/route.c:305
ip6_input_if(ffff80003c978a80,ffff80003c978a8c,29,0,ffff800001467800,0) at ip6_input_if+0xba3 sys/netinet6/ip6_input.c:-1
ipv6_input(ffff800001467800,fffffd8069659f00,0) at ipv6_input+0x5f sys/netinet6/ip6_input.c:256
ether_input(ffff800001467800,fffffd8069659f00,0) at ether_input+0x70f sys/net/if_ethersubr.c:-1
tun_dev_write(5d05,ffff80003c978e58,ffff800035d14000,2) at tun_dev_write+0x769 sys/net/if_tun.c:1039
spec_write(ffff80003c978ca0) at spec_write+0x116 sys/kern/spec_vnops.c:302
VOP_WRITE(fffffd80710e22b0,ffff80003c978e58,11,fffffd8007bfb340) at VOP_WRITE+0x101 sys/kern/vfs_vops.c:245
vn_write(fffffd806c1d3b50,ffff80003c978e58,0) at vn_write+0x1c2 sys/kern/vfs_vnops.c:408
dofilewritev(ffff80002f100018,c8,ffff80003c978e58,0,ffff80003c978f00) at dofilewritev+0x242 sys/kern/sys_generic.c:380
sys_write(ffff80002f100018,ffff80003c978fb0,ffff80003c978f00) at sys_write+0xa2 sys/kern/sys_generic.c:300
syscall(ffff80003c978fb0) at syscall+0x962 mi_syscall sys/sys/syscall_mi.h:-1 [inline]
syscall(ffff80003c978fb0) at syscall+0x962 sys/arch/amd64/amd64/trap.c:748
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0xd35702a6fe0, count: -15
ddb> machine ddbcpu 1
No such command
ddb> trace
nd6_rtrequest(ffff800001467800,b,fffffd806c019898) at nd6_rtrequest+0x8e5 sys/netinet6/nd6.c:837
rtrequest(b,ffff80003c9787f8,3,ffff80003c978898,0) at rtrequest+0xf08 sys/net/route.c:1114
rt_match(ffff80003c978978,ffff80003c978994,1,0) at rt_match+0x11a rt_clone sys/net/route.c:381 [inline]
rt_match(ffff80003c978978,ffff80003c978994,1,0) at rt_match+0x11a sys/net/route.c:356
route6_mpath(ffff80003c978960,fffffd805f1fc068,fffffd805f1fc058,0) at route6_mpath+0x163 sys/net/route.c:305
ip6_input_if(ffff80003c978a80,ffff80003c978a8c,29,0,ffff800001467800,0) at ip6_input_if+0xba3 sys/netinet6/ip6_input.c:-1
ipv6_input(ffff800001467800,fffffd8069659f00,0) at ipv6_input+0x5f sys/netinet6/ip6_input.c:256
ether_input(ffff800001467800,fffffd8069659f00,0) at ether_input+0x70f sys/net/if_ethersubr.c:-1
tun_dev_write(5d05,ffff80003c978e58,ffff800035d14000,2) at tun_dev_write+0x769 sys/net/if_tun.c:1039
spec_write(ffff80003c978ca0) at spec_write+0x116 sys/kern/spec_vnops.c:302
VOP_WRITE(fffffd80710e22b0,ffff80003c978e58,11,fffffd8007bfb340) at VOP_WRITE+0x101 sys/kern/vfs_vops.c:245
vn_write(fffffd806c1d3b50,ffff80003c978e58,0) at vn_write+0x1c2 sys/kern/vfs_vnops.c:408
dofilewritev(ffff80002f100018,c8,ffff80003c978e58,0,ffff80003c978f00) at dofilewritev+0x242 sys/kern/sys_generic.c:380
sys_write(ffff80002f100018,ffff80003c978fb0,ffff80003c978f00) at sys_write+0xa2 sys/kern/sys_generic.c:300
syscall(ffff80003c978fb0) at syscall+0x962 mi_syscall sys/sys/syscall_mi.h:-1 [inline]
syscall(ffff80003c978fb0) at syscall+0x962 sys/arch/amd64/amd64/trap.c:748
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0xd35702a6fe0, count: -15
---
This report is generated by a bot. It may contain errors.
See https://goo.gl/tpsmEJ for more information about syzbot.
syzbot engineers can be reached at syzk...@googlegroups.com.
syzbot will keep track of this issue. See:
https://goo.gl/tpsmEJ#status for how to communicate with syzbot.
If the report is already addressed, let syzbot know by replying with:
#syz fix: exact-commit-title
If you want to overwrite report's subsystems, reply with:
#syz set subsystems: new-subsystem
(See the list of subsystem names on the web dashboard)
If the report is a duplicate of another one, reply with:
#syz dup: exact-subject-of-another-report
If you want to undo deduplication, reply with:
#syz undup
syzbot found the following issue on:
HEAD commit: 98ebdb79786a remove a small piece of magic we are not read..
git tree: openbsd
console output: https://syzkaller.appspot.com/x/log.txt?x=108ff542580000
kernel config: https://syzkaller.appspot.com/x/.config?x=1bc15e68cd2a49e5
dashboard link: https://syzkaller.appspot.com/bug?extid=9153f39c8dfe639e7b6c
Unfortunately, I don't have any reproducer for this issue yet.
Downloadable assets:
disk image: https://storage.googleapis.com/syzbot-assets/f964b0054a05/disk-98ebdb79.raw.xz
bsd.gdb: https://storage.googleapis.com/syzbot-assets/79ac15051e3f/bsd-98ebdb79.gdb.xz
kernel image: https://storage.googleapis.com/syzbot-assets/db7dcf414546/kernel-98ebdb79.xz
IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+9153f3...@syzkaller.appspotmail.com
uvm_fault(0xfffffd806c23fe70, 0x60, 0, 1) -> e
kernel: page fault trap, code=0
Stopped at nd6_rtrequest+0x8e5: movq 0x60(%rax),%rbx
TID PID UID PRFLAGS PFLAGS CPU COMMAND
*398260 81956 0 0 0x4000000 0 syz-executor
nd6_rtrequest(ffff800001467800,b,fffffd806c019898) at nd6_rtrequest+0x8e5 sys/netinet6/nd6.c:837
rtrequest(b,ffff80003c9787f8,3,ffff80003c978898,0) at rtrequest+0xf08 sys/net/route.c:1114
rt_match(ffff80003c978978,ffff80003c978994,1,0) at rt_match+0x11a rt_clone sys/net/route.c:381 [inline]
rt_match(ffff80003c978978,ffff80003c978994,1,0) at rt_match+0x11a sys/net/route.c:356
route6_mpath(ffff80003c978960,fffffd805f1fc068,fffffd805f1fc058,0) at route6_mpath+0x163 sys/net/route.c:305
ip6_input_if(ffff80003c978a80,ffff80003c978a8c,29,0,ffff800001467800,0) at ip6_input_if+0xba3 sys/netinet6/ip6_input.c:-1
ipv6_input(ffff800001467800,fffffd8069659f00,0) at ipv6_input+0x5f sys/netinet6/ip6_input.c:256
ether_input(ffff800001467800,fffffd8069659f00,0) at ether_input+0x70f sys/net/if_ethersubr.c:-1
tun_dev_write(5d05,ffff80003c978e58,ffff800035d14000,2) at tun_dev_write+0x769 sys/net/if_tun.c:1039
spec_write(ffff80003c978ca0) at spec_write+0x116 sys/kern/spec_vnops.c:302
VOP_WRITE(fffffd80710e22b0,ffff80003c978e58,11,fffffd8007bfb340) at VOP_WRITE+0x101 sys/kern/vfs_vops.c:245
vn_write(fffffd806c1d3b50,ffff80003c978e58,0) at vn_write+0x1c2 sys/kern/vfs_vnops.c:408
dofilewritev(ffff80002f100018,c8,ffff80003c978e58,0,ffff80003c978f00) at dofilewritev+0x242 sys/kern/sys_generic.c:380
sys_write(ffff80002f100018,ffff80003c978fb0,ffff80003c978f00) at sys_write+0xa2 sys/kern/sys_generic.c:300
syscall(ffff80003c978fb0) at syscall+0x962 mi_syscall sys/sys/syscall_mi.h:-1 [inline]
syscall(ffff80003c978fb0) at syscall+0x962 sys/arch/amd64/amd64/trap.c:748
end trace frame: 0xffff80003c979030, count: 0
https://www.openbsd.org/ddb.html describes the minimum info required in bug
reports. Insufficient info makes it difficult to find and fix bugs.
ddb>
ddb> set $lines = 0
ddb> set $maxwidth = 0
ddb> show panic
*cpu0: uvm_fault(0xfffffd806c23fe70, 0x60, 0, 1) -> e
ddb> trace
nd6_rtrequest(ffff800001467800,b,fffffd806c019898) at nd6_rtrequest+0x8e5 sys/netinet6/nd6.c:837
rtrequest(b,ffff80003c9787f8,3,ffff80003c978898,0) at rtrequest+0xf08 sys/net/route.c:1114
rt_match(ffff80003c978978,ffff80003c978994,1,0) at rt_match+0x11a rt_clone sys/net/route.c:381 [inline]
rt_match(ffff80003c978978,ffff80003c978994,1,0) at rt_match+0x11a sys/net/route.c:356
route6_mpath(ffff80003c978960,fffffd805f1fc068,fffffd805f1fc058,0) at route6_mpath+0x163 sys/net/route.c:305
ip6_input_if(ffff80003c978a80,ffff80003c978a8c,29,0,ffff800001467800,0) at ip6_input_if+0xba3 sys/netinet6/ip6_input.c:-1
ipv6_input(ffff800001467800,fffffd8069659f00,0) at ipv6_input+0x5f sys/netinet6/ip6_input.c:256
ether_input(ffff800001467800,fffffd8069659f00,0) at ether_input+0x70f sys/net/if_ethersubr.c:-1
tun_dev_write(5d05,ffff80003c978e58,ffff800035d14000,2) at tun_dev_write+0x769 sys/net/if_tun.c:1039
spec_write(ffff80003c978ca0) at spec_write+0x116 sys/kern/spec_vnops.c:302
VOP_WRITE(fffffd80710e22b0,ffff80003c978e58,11,fffffd8007bfb340) at VOP_WRITE+0x101 sys/kern/vfs_vops.c:245
vn_write(fffffd806c1d3b50,ffff80003c978e58,0) at vn_write+0x1c2 sys/kern/vfs_vnops.c:408
dofilewritev(ffff80002f100018,c8,ffff80003c978e58,0,ffff80003c978f00) at dofilewritev+0x242 sys/kern/sys_generic.c:380
sys_write(ffff80002f100018,ffff80003c978fb0,ffff80003c978f00) at sys_write+0xa2 sys/kern/sys_generic.c:300
syscall(ffff80003c978fb0) at syscall+0x962 mi_syscall sys/sys/syscall_mi.h:-1 [inline]
syscall(ffff80003c978fb0) at syscall+0x962 sys/arch/amd64/amd64/trap.c:748
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0xd35702a6fe0, count: -15
ddb> show registers
rdi 0xffff800035d14000
rsi 0x5c5
rbp 0xffff80003c9786e0
rbx 0
rdx 0xffffffff837db300 nd6_list
rcx 0xfffffd806cd94850
rax 0
r8 0x70
r9 0xfffffd806c019898
r10 0xe35a1449ef82cc39
r11 0x6431f60175f4d501
r12 0xffff80002a7497a0
r13 0xfffffd806cd94a10
r14 0x1
r15 0xfffffd806c019898
rip 0xffffffff822b9505 nd6_rtrequest+0x8e5
cs 0x8
rflags 0x10282 __ALIGN_SIZE+0xf282
rsp 0xffff80003c978670
ss 0x10
nd6_rtrequest+0x8e5: movq 0x60(%rax),%rbx
ddb> show proc
PROC (syz-executor) tid=398260 pid=81956 tcnt=2 stat=onproc
flags process=0 proc=4000000<THREAD>
runpri=32, usrpri=84, slppri=32, nice=20
wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0
forw=0xffffffffffffffff, list=0xffff80002f101a08,0xffff80002f1014e8
process=0xffff80003c9ce420 user=0xffff80003c974000, vmspace=0xfffffd806c23fe70
estcpu=34, cpticks=1, pctcpu=0.0, user=0, sys=1, intr=0
ddb> ps
PID TID PPID UID S FLAGS WAIT COMMAND
24100 246670 25958 0 2 0 syz-executor
24100 429585 25958 0 2 0x4000000 syz-executor
81956 59405 43485 0 2 0 syz-executor
*81956 398260 43485 0 7 0x4000000 syz-executor
21589 86173 42695 0 2 0 syz-executor
21589 324075 42695 0 3 0x4000000 netlock syz-executor
21589 123347 42695 0 2 0x4000000 syz-executor
24269 388771 91499 0 2 0x10 syz-executor
24269 28164 91499 0 2 0x4000010 syz-executor
70838 108592 51718 0 2 0 syz-executor
70838 209575 51718 0 3 0x4000080 fsleep syz-executor
90926 336246 5862 0 2 0 syz-executor
90926 131575 5862 0 2 0x4000000 syz-executor
38570 435502 47402 0 2 0 syz-executor
38570 263084 47402 0 2 0x4000000 syz-executor
71853 182824 93524 0 2 0 syz-executor
71853 120984 93524 0 2 0x4000000 syz-executor
71853 214550 93524 0 3 0x4000080 fsleep syz-executor
71853 64494 93524 0 3 0x4000080 fsleep syz-executor
2190 281902 0 0 3 0x14200 acct acct
61378 408267 0 0 3 0x14280 nfsidl nfsio
40985 54648 0 0 3 0x14280 nfsidl nfsio
78979 488721 0 0 3 0x14280 nfsidl nfsio
7795 380516 0 0 3 0x14280 nfsidl nfsio
47474 469357 0 0 3 0x14280 nfsidl nfsio
44843 80507 0 0 3 0x14280 nfsidl nfsio
16221 423126 0 0 3 0x14280 nfsidl nfsio
46482 220542 0 0 3 0x14280 nfsidl nfsio
97649 82572 0 0 3 0x14280 nfsidl nfsio
6907 946 0 0 3 0x14280 nfsidl nfsio
83864 476451 0 0 3 0x14280 nfsidl nfsio
11878 486611 0 0 3 0x14280 nfsidl nfsio
7941 178351 0 0 3 0x14280 nfsidl nfsio
25742 128926 0 0 3 0x14280 nfsidl nfsio
37169 277555 0 0 3 0x14280 nfsidl nfsio
84783 426696 0 0 3 0x14280 nfsidl nfsio
97446 223402 0 0 3 0x14280 nfsidl nfsio
66310 22999 0 0 3 0x14280 nfsidl nfsio
17281 31090 0 0 3 0x14280 nfsidl nfsio
67807 334760 0 0 3 0x14280 nfsidl nfsio
7951 255429 0 0 3 0x14200 bored sosplice
47402 45793 73512 0 3 0x82 nanoslp syz-executor
25958 449968 73512 0 2 0xc82 syz-executor
43485 68404 73512 0 2 0xc82 syz-executor
91499 39833 73512 0 3 0x82 nanoslp syz-executor
51718 96947 73512 0 3 0x82 nanoslp syz-executor
93524 5549 73512 0 3 0x82 nanoslp syz-executor
5862 286030 73512 0 3 0x82 nanoslp syz-executor
42695 302958 73512 0 3 0x82 nanoslp syz-executor
73512 185674 73110 0 3 0x2 netlock syz-executor
73110 124389 21585 0 3 0x10008a sigsusp ksh
21585 406657 22570 0 3 0x98 kqread sshd-session
22570 412217 23960 0 3 0x92 kqread sshd-session
89882 472653 1 0 3 0x100083 ttyin getty
23960 108830 1 0 3 0x88 kqread sshd
1465 108345 9730 73 3 0x1100090 kqread syslogd
9730 138164 1 0 3 0x100082 sbwait syslogd
47619 494434 1 0 3 0x100080 kqread resolvd
27250 427914 93665 77 3 0x100092 kqread dhcpleased
70146 465018 93665 77 3 0x100092 kqread dhcpleased
93665 54801 1 0 3 0x80 kqread dhcpleased
40509 57887 0 0 3 0x14200 bored smr
18771 475081 0 0 2 0x14200 zerothread
37929 113411 0 0 3 0x14200 aiodoned aiodoned
37640 512051 0 0 3 0x14200 syncer update
7591 419778 0 0 3 0x14200 cleaner cleaner
91266 187244 0 0 3 0x14200 reaper reaper
43888 134905 0 0 3 0x14200 pgdaemon pagedaemon
3640 253100 0 0 3 0x14200 bored viomb
4134 434468 0 0 3 0x40014200 acpi0 acpi0
77420 426268 0 0 2 0x14200 softnet0
47564 279026 0 0 3 0x14200 bored systqmp
73930 135027 0 0 3 0x14200 bored systq
66921 144244 0 0 2 0x40014200 softclock
72746 138902 0 0 3 0x40014200 idle0
1 135141 0 0 3 0x82 wait init
0 0 -1 0 3 0x10200 scheduler swapper
ddb> show all locks
No such command
ddb> show malloc
Type InUse MemUse HighUse Limit Requests Type Lim
devbuf 10220 11124K 12104K 166960K 13417 0
pcb 18 16K 18K 166960K 483 0
rtable 233 11K 11K 166960K 587 0
pf 32 13K 67480K 166960K 128 0
ifaddr 37 6K 7K 166960K 94 0
ifgroup 54 2K 2K 166960K 150 0
sysctl 4 1K 9K 166960K 79 0
counters 33 17K 18K 166960K 128 0
ioctlops 0 0K 4K 166960K 235 0
iov 0 0K 24K 166960K 62 0
mount 1 1K 1K 166960K 1 0
log 0 0K 0K 166960K 4 0
vnodes 1514 95K 96K 166960K 2579 0
UFS quota 1 32K 32K 166960K 1 0
UFS mount 5 36K 36K 166960K 5 0
shm 2 1K 5K 166960K 15 0
VM map 2 1K 1K 166960K 2 0
sem 29 5K 5K 166960K 113 0
dirhash 12 2K 2K 166960K 30 0
ACPI 1692 195K 286K 166960K 12470 0
file desc 18 65K 236K 166960K 1174 0
sigio 0 0K 0K 166960K 28 0
proc 60 59K 91K 166960K 622 0
subproc 72 4K 4K 166960K 72 0
NFS srvsock 1 0K 0K 166960K 1 0
NFS daemon 1 16K 16K 166960K 1 0
ip_moptions 1 0K 0K 166960K 138 0
in_multi 79 5K 7K 166960K 155 0
ether_multi 2 0K 0K 166960K 26 0
mrt 3 0K 0K 166960K 23 0
ISOFS mount 1 32K 32K 166960K 1 0
MSDOSFS mount 1 16K 16K 166960K 1 0
ttys 265 1182K 1182K 166960K 265 0
exec 0 0K 1K 166960K 541 0
fusefs mount 1 32K 32K 166960K 1 0
pfkey data 0 0K 0K 166960K 2 0
tdb 3 0K 0K 166960K 3 0
VM swap 8 62K 64K 166960K 10 0
UVM amap 237 159K 184K 166960K 12393 0
UVM aobj 27 4K 4K 166960K 32 0
pinsyscall 39 78K 90K 166960K 2221 0
memdesc 1 4K 4K 166960K 1 0
crypto data 1 1K 1K 166960K 1 0
ip6_options 0 0K 0K 166960K 62 0
NDP 12 0K 1K 166960K 63 0
temp 65 8645K 8710K 166960K 28696 0
kqueue 14 22K 31K 166960K 232 0
SYN cache 2 16K 16K 166960K 2 0
ddb> show all pools
Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle
rtpcb 120 141 0 138 2 0 2 2 0 8 1
rtentry 136 144 0 55 4 0 4 4 0 8 0
unpcb 144 1015 0 1000 9 5 4 6 0 8 3
syncache 336 6 0 6 3 2 1 1 0 8 1
tcpcb 736 639 0 634 19 12 7 7 0 8 6
arp 96 23 0 9 1 0 1 1 0 8 0
ipq 40 4 0 3 2 1 1 1 0 8 0
ipqe 40 7 0 6 2 1 1 1 0 8 0
inpcb 328 1873 0 1862 29 20 9 12 0 8 7
ip6q 72 8 0 5 1 0 1 1 0 8 0
ip6af 40 16 0 12 1 0 1 1 0 8 0
nd6 112 33 0 13 1 0 1 1 0 8 0
pkpcb 40 7 0 7 2 1 1 1 0 8 1
kcovpl 48 8 0 0 1 0 1 1 0 8 0
mppekey 1024 33 0 33 1 0 1 1 0 8 1
ppxss 1072 86 0 86 3 2 1 1 0 8 1
pppxif 1384 6 0 6 3 2 1 1 0 8 1
pfrktable 1344 2 0 2 1 1 0 1 0 8 0
pftag 88 1 0 0 1 0 1 1 0 8 0
pfrule 1344 2 0 2 1 1 0 1 0 8 0
rttmr 136 2 0 2 2 1 1 1 0 8 1
art_heap8 4096 3 0 0 3 0 3 3 0 8 0
art_heap4 256 520 0 158 30 3 27 30 0 8 2
art_table 40 523 0 158 5 0 5 5 0 8 0
art_node 32 143 0 63 1 0 1 1 0 8 0
sysvmsgpl 40 8 0 7 3 2 1 1 0 8 0
semupl 112 4 0 4 2 2 0 1 0 8 0
semapl 112 107 0 80 1 0 1 1 0 8 0
shmpl 112 29 0 5 1 0 1 1 0 8 0
dirhash 1024 30 0 13 3 0 3 3 0 8 0
dino2pl 256 3516 0 2023 95 0 95 95 0 8 0
ffsino 256 3516 0 2023 95 0 95 95 0 8 0
nchpl 144 5243 0 3550 64 0 64 64 0 8 0
rtmask 32 12 0 12 3 2 1 1 0 8 1
vnodes 216 4409 0 0 245 0 245 245 0 8 0
namei 1024 19181 0 19180 2 1 1 2 0 8 0
kstatmem 264 94 0 70 2 0 2 2 0 8 0
scsiplug 72 9 0 9 2 1 1 1 0 8 1
scxspl 216 17905 0 17905 16 14 2 8 1 8 2
plimitpl 152 238 0 221 1 0 1 1 0 8 0
sigapl 424 1457 0 1392 8 0 8 8 0 8 0
knotepl 120 77093 0 77042 51 40 11 17 0 8 8
kqueuepl 184 573 0 561 6 2 4 4 0 8 3
pipepl 304 299 0 269 9 4 5 5 0 8 2
fdescpl 448 1422 0 1392 5 1 4 5 0 8 0
filepl 120 11300 0 11072 21 8 13 13 0 8 4
lockfpl 104 716 0 714 2 0 2 2 0 8 1
lockfspl 48 145 0 143 1 0 1 1 0 8 0
sessionpl 144 22 0 14 1 0 1 1 0 8 0
pgrppl 48 77 0 61 1 0 1 1 0 8 0
ucredpl 104 1546 0 1534 1 0 1 1 0 8 0
zombiepl 144 1721 0 1721 1 0 1 1 0 8 1
processpl 1152 1457 0 1392 5 0 5 5 0 8 0
procpl 664 3136 0 3060 7 0 7 7 0 8 0
sosppl 168 11 0 11 2 1 1 1 0 8 1
sockpl 552 3069 0 3039 29 19 10 12 0 8 7
mcl64k 65536 409 0 409 4 2 2 2 0 8 2
mcl16k 16384 1 0 1 1 1 0 1 0 8 0
mcl12k 12288 1 0 1 1 0 1 1 0 8 1
mcl9k 9216 3 0 3 2 1 1 1 0 8 1
mcl8k 8192 83 0 82 3 2 1 1 0 8 0
mcl4k 4096 3855 0 3802 17 8 9 14 0 8 1
mcl2k 2048 1873 0 1868 2 0 2 2 0 8 1
mtagpl 96 7 0 5 1 0 1 1 0 8 0
mbufpl 256 16191 0 16031 25 2 23 25 0 8 8
bufpl 280 6281 0 123 440 0 440 440 0 8 0
anonpl 24 223220 0 220028 95 50 45 56 0 187 13
amapchunkpl 152 56080 0 55586 69 30 39 41 0 158 19
amappl16 200 4126 0 4091 39 27 12 15 0 8 8
amappl15 192 8 0 8 1 1 0 1 0 8 0
amappl14 184 43 0 43 2 1 1 1 0 8 1
amappl13 176 405 0 404 1 0 1 1 0 8 0
amappl12 168 1761 0 1721 2 0 2 2 0 8 0
amappl11 160 14 0 14 1 1 0 1 0 8 0
amappl10 152 40 0 30 1 0 1 1 0 8 0
amappl9 144 282 0 282 1 1 0 1 0 8 0
amappl8 136 21 0 19 1 0 1 1 0 8 0
amappl7 128 84 0 83 1 0 1 1 0 8 0
amappl6 120 272 0 260 1 0 1 1 0 8 0
amappl5 112 71 0 63 1 0 1 1 0 8 0
amappl4 104 380 0 356 1 0 1 1 0 8 0
amappl3 96 7198 0 7106 3 0 3 3 0 8 0
amappl2 88 1545 0 1473 2 0 2 2 0 8 0
amappl1 80 13074 0 12534 14 2 12 13 0 8 0
amappl 88 11433 0 11267 6 1 5 5 0 92 0
uvmvnodes 80 4409 0 0 90 0 90 90 0 8 0
dma4096 4096 1 0 1 1 1 0 1 0 8 0
dma2048 2048 1 0 1 1 1 0 1 0 8 0
dma1024 1024 1 0 0 1 0 1 1 0 8 0
dma256 256 8 0 8 3 2 1 1 0 8 1
dma128 128 255 0 255 3 2 1 1 0 8 1
dma64 64 7 0 7 2 2 0 1 0 8 0
dma32 32 7 0 7 1 1 0 1 0 8 0
dma16 16 18 0 17 1 0 1 1 0 8 0
aobjpl 72 31 0 5 1 0 1 1 0 8 0
uaddrrnd 24 1422 0 1392 1 0 1 1 0 8 0
uaddrbest 32 2 0 0 1 0 1 1 0 8 0
uaddr 24 1422 0 1392 1 0 1 1 0 8 0
vmmpekpl 168 13076 0 13039 3 0 3 3 0 8 0
vmmpepl 168 94802 0 92956 114 22 92 92 0 357 10
vmsppl 368 1421 0 1392 4 1 3 4 0 8 0
rwobjpl 40 30536 0 25251 54 0 54 54 0 8 0
pdppl 4096 2850 0 2784 102 36 66 78 0 8 0
pvpl 32 628212 0 618979 210 77 133 133 0 265 44
pmappl 216 1421 0 1392 2 0 2 2 0 8 0
extentpl 40 45 0 27 1 0 1 1 0 8 0
phpool 112 420 0 75 10 0 10 10 0 8 0
ddb> machine ddbcpu 0
No such command
ddb> trace
nd6_rtrequest(ffff800001467800,b,fffffd806c019898) at nd6_rtrequest+0x8e5 sys/netinet6/nd6.c:837
rtrequest(b,ffff80003c9787f8,3,ffff80003c978898,0) at rtrequest+0xf08 sys/net/route.c:1114
rt_match(ffff80003c978978,ffff80003c978994,1,0) at rt_match+0x11a rt_clone sys/net/route.c:381 [inline]
rt_match(ffff80003c978978,ffff80003c978994,1,0) at rt_match+0x11a sys/net/route.c:356
route6_mpath(ffff80003c978960,fffffd805f1fc068,fffffd805f1fc058,0) at route6_mpath+0x163 sys/net/route.c:305
ip6_input_if(ffff80003c978a80,ffff80003c978a8c,29,0,ffff800001467800,0) at ip6_input_if+0xba3 sys/netinet6/ip6_input.c:-1
ipv6_input(ffff800001467800,fffffd8069659f00,0) at ipv6_input+0x5f sys/netinet6/ip6_input.c:256
ether_input(ffff800001467800,fffffd8069659f00,0) at ether_input+0x70f sys/net/if_ethersubr.c:-1
tun_dev_write(5d05,ffff80003c978e58,ffff800035d14000,2) at tun_dev_write+0x769 sys/net/if_tun.c:1039
spec_write(ffff80003c978ca0) at spec_write+0x116 sys/kern/spec_vnops.c:302
VOP_WRITE(fffffd80710e22b0,ffff80003c978e58,11,fffffd8007bfb340) at VOP_WRITE+0x101 sys/kern/vfs_vops.c:245
vn_write(fffffd806c1d3b50,ffff80003c978e58,0) at vn_write+0x1c2 sys/kern/vfs_vnops.c:408
dofilewritev(ffff80002f100018,c8,ffff80003c978e58,0,ffff80003c978f00) at dofilewritev+0x242 sys/kern/sys_generic.c:380
sys_write(ffff80002f100018,ffff80003c978fb0,ffff80003c978f00) at sys_write+0xa2 sys/kern/sys_generic.c:300
syscall(ffff80003c978fb0) at syscall+0x962 mi_syscall sys/sys/syscall_mi.h:-1 [inline]
syscall(ffff80003c978fb0) at syscall+0x962 sys/arch/amd64/amd64/trap.c:748
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0xd35702a6fe0, count: -15
ddb> machine ddbcpu 1
No such command
ddb> trace
nd6_rtrequest(ffff800001467800,b,fffffd806c019898) at nd6_rtrequest+0x8e5 sys/netinet6/nd6.c:837
rtrequest(b,ffff80003c9787f8,3,ffff80003c978898,0) at rtrequest+0xf08 sys/net/route.c:1114
rt_match(ffff80003c978978,ffff80003c978994,1,0) at rt_match+0x11a rt_clone sys/net/route.c:381 [inline]
rt_match(ffff80003c978978,ffff80003c978994,1,0) at rt_match+0x11a sys/net/route.c:356
route6_mpath(ffff80003c978960,fffffd805f1fc068,fffffd805f1fc058,0) at route6_mpath+0x163 sys/net/route.c:305
ip6_input_if(ffff80003c978a80,ffff80003c978a8c,29,0,ffff800001467800,0) at ip6_input_if+0xba3 sys/netinet6/ip6_input.c:-1
ipv6_input(ffff800001467800,fffffd8069659f00,0) at ipv6_input+0x5f sys/netinet6/ip6_input.c:256
ether_input(ffff800001467800,fffffd8069659f00,0) at ether_input+0x70f sys/net/if_ethersubr.c:-1
tun_dev_write(5d05,ffff80003c978e58,ffff800035d14000,2) at tun_dev_write+0x769 sys/net/if_tun.c:1039
spec_write(ffff80003c978ca0) at spec_write+0x116 sys/kern/spec_vnops.c:302
VOP_WRITE(fffffd80710e22b0,ffff80003c978e58,11,fffffd8007bfb340) at VOP_WRITE+0x101 sys/kern/vfs_vops.c:245
vn_write(fffffd806c1d3b50,ffff80003c978e58,0) at vn_write+0x1c2 sys/kern/vfs_vnops.c:408
dofilewritev(ffff80002f100018,c8,ffff80003c978e58,0,ffff80003c978f00) at dofilewritev+0x242 sys/kern/sys_generic.c:380
sys_write(ffff80002f100018,ffff80003c978fb0,ffff80003c978f00) at sys_write+0xa2 sys/kern/sys_generic.c:300
syscall(ffff80003c978fb0) at syscall+0x962 mi_syscall sys/sys/syscall_mi.h:-1 [inline]
syscall(ffff80003c978fb0) at syscall+0x962 sys/arch/amd64/amd64/trap.c:748
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0xd35702a6fe0, count: -15
---
This report is generated by a bot. It may contain errors.
See https://goo.gl/tpsmEJ for more information about syzbot.
syzbot engineers can be reached at syzk...@googlegroups.com.
syzbot will keep track of this issue. See:
https://goo.gl/tpsmEJ#status for how to communicate with syzbot.
If the report is already addressed, let syzbot know by replying with:
#syz fix: exact-commit-title
If you want to overwrite report's subsystems, reply with:
#syz set subsystems: new-subsystem
(See the list of subsystem names on the web dashboard)
If the report is a duplicate of another one, reply with:
#syz dup: exact-subject-of-another-report
If you want to undo deduplication, reply with:
#syz undup
Reply all
Reply to author
Forward
0 new messages