uvm_fault: rn_add_radix_mask
0 views
Skip to first unread message
syzbot
Nov 25, 2025, 11:17:25 PM (3 days ago) Nov 25
to syzkaller-o...@googlegroups.com
Hello,
syzbot found the following issue on:
HEAD commit: 34f94be7b87a Add seconds options for clock mode, from augu..
git tree: openbsd
console output: https://syzkaller.appspot.com/x/log.txt?x=1035257c580000
kernel config: https://syzkaller.appspot.com/x/.config?x=7058272de1526588
dashboard link: https://syzkaller.appspot.com/bug?extid=f3267798c52bcc27ffb3
Unfortunately, I don't have any reproducer for this issue yet.
Downloadable assets:
disk image: https://storage.googleapis.com/syzbot-assets/d91362438314/disk-34f94be7.raw.xz
bsd.gdb: https://storage.googleapis.com/syzbot-assets/500fd6f4c28f/bsd-34f94be7.gdb.xz
kernel image: https://storage.googleapis.com/syzbot-assets/341722d65a48/kernel-34f94be7.xz
IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+f32677...@syzkaller.appspotmail.com
uvm_fault(0xfffffd80761b07b8, 0x0, 0, 1) -> e
kernel: page fault trap, code=0
Stopped at rn_add_radix_mask+0x296: movzbl 0(%r12),%ebx
TID PID UID PRFLAGS PFLAGS CPU COMMAND
*385761 40846 0 0 0x4000000 0K syz-executor
rn_add_radix_mask(ffff80003c4c6e98,0) at rn_add_radix_mask+0x296 rn_refines sys/net/radix.c:163 [inline]
rn_add_radix_mask(ffff80003c4c6e98,0) at rn_add_radix_mask+0x296 sys/net/radix.c:620
rn_addroute(ffff80003c4c6f98,ffff80003c4c6fa8,ffff80000148e000,ffff80003c4c6e98,8) at rn_addroute+0x1da sys/net/radix.c:807
pipex_link_session(ffff80003c4c6e98,ffff80000147a000,ffff80000147a000) at pipex_link_session+0x3af sys/net/pipex.c:-1
pppacioctl(637d,82907003,ffff800001703000,1,ffff80003c45ad30) at pppacioctl+0x224 pppac_add_session sys/net/if_pppx.c:1381 [inline]
pppacioctl(637d,82907003,ffff800001703000,1,ffff80003c45ad30) at pppacioctl+0x224 sys/net/if_pppx.c:1214
VOP_IOCTL(fffffd8060995630,82907003,ffff800001703000,1,fffffd80097fd4e0,ffff80003c45ad30) at VOP_IOCTL+0xac sys/kern/vfs_vops.c:264
vn_ioctl(fffffd806d9742a0,82907003,ffff800001703000,ffff80003c45ad30) at vn_ioctl+0xf8 sys/kern/vfs_vnops.c:531
sys_ioctl(ffff80003c45ad30,ffff80003c4efe40,ffff80003c4efd90) at sys_ioctl+0x674 sys/kern/sys_generic.c:-1
syscall(ffff80003c4efe40) at syscall+0xbd4 mi_syscall sys/sys/syscall_mi.h:176 [inline]
syscall(ffff80003c4efe40) at syscall+0xbd4 sys/arch/amd64/amd64/trap.c:765
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x6c44daf0bc0, count: 6
https://www.openbsd.org/ddb.html describes the minimum info required in bug
reports. Insufficient info makes it difficult to find and fix bugs.
ddb{0}>
ddb{0}> set $lines = 0
ddb{0}> set $maxwidth = 0
ddb{0}> show panic
*cpu0: uvm_fault(0xfffffd80761b07b8, 0x0, 0, 1) -> e
ddb{0}> trace
rn_add_radix_mask(ffff80003c4c6e98,0) at rn_add_radix_mask+0x296 rn_refines sys/net/radix.c:163 [inline]
rn_add_radix_mask(ffff80003c4c6e98,0) at rn_add_radix_mask+0x296 sys/net/radix.c:620
rn_addroute(ffff80003c4c6f98,ffff80003c4c6fa8,ffff80000148e000,ffff80003c4c6e98,8) at rn_addroute+0x1da sys/net/radix.c:807
pipex_link_session(ffff80003c4c6e98,ffff80000147a000,ffff80000147a000) at pipex_link_session+0x3af sys/net/pipex.c:-1
pppacioctl(637d,82907003,ffff800001703000,1,ffff80003c45ad30) at pppacioctl+0x224 pppac_add_session sys/net/if_pppx.c:1381 [inline]
pppacioctl(637d,82907003,ffff800001703000,1,ffff80003c45ad30) at pppacioctl+0x224 sys/net/if_pppx.c:1214
VOP_IOCTL(fffffd8060995630,82907003,ffff800001703000,1,fffffd80097fd4e0,ffff80003c45ad30) at VOP_IOCTL+0xac sys/kern/vfs_vops.c:264
vn_ioctl(fffffd806d9742a0,82907003,ffff800001703000,ffff80003c45ad30) at vn_ioctl+0xf8 sys/kern/vfs_vnops.c:531
sys_ioctl(ffff80003c45ad30,ffff80003c4efe40,ffff80003c4efd90) at sys_ioctl+0x674 sys/kern/sys_generic.c:-1
syscall(ffff80003c4efe40) at syscall+0xbd4 mi_syscall sys/sys/syscall_mi.h:176 [inline]
syscall(ffff80003c4efe40) at syscall+0xbd4 sys/arch/amd64/amd64/trap.c:765
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x6c44daf0bc0, count: -9
ddb{0}> show registers
rdi 0xffff80002ffd7000
rsi 0x497
rbp 0xffff80003c4ef900
rbx 0xffff80000148e040
rdx 0xffff80002ffd7000
rcx 0x496
rax 0xffff80003c4c52c8
r8 0x90
r9 0xffff80003c45ad30
r10 0x60a914d97a8b48e4
r11 0x9ffb8e52bee95b9
r12 0
r13 0xffff80003c4c6e98
r14 0
r15 0xffff800010fcab60
rip 0xffffffff818e7956 rn_add_radix_mask+0x296
cs 0x8
rflags 0x10207 __ALIGN_SIZE+0xf207
rsp 0xffff80003c4ef840
ss 0x10
rn_add_radix_mask+0x296: movzbl 0(%r12),%ebx
ddb{0}> show proc
PROC (syz-executor) tid=385761 pid=40846 tcnt=2 stat=onproc
flags process=0 proc=4000000<THREAD>
runpri=32, usrpri=50, slppri=32, nice=20
wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0
forw=0xffffffffffffffff, list=0xffff80003c45bcc0,0xffffffff839b9030
process=0xffff80003c420e90 user=0xffff80003c4ea000, vmspace=0xfffffd80761b07b8
estcpu=36, cpticks=1, pctcpu=0.0, user=0, sys=1, intr=0
ddb{0}> ps
PID TID PPID UID S FLAGS WAIT COMMAND
40846 41362 62934 0 2 0 syz-executor
*40846 385761 62934 0 7 0x4000000 syz-executor
92748 15416 45542 0 2 0 syz-executor
92748 418106 45542 0 2 0x4000000 syz-executor
83842 141599 93787 0 2 0x100002 sh
86277 246464 44922 0 2 0x100002 sh
3116 10399 0 0 3 0x14200 acct acct
43252 200465 91304 0 2 0 syz-executor
43252 350023 91304 0 3 0x4000080 kqsel syz-executor
45032 498638 39275 -1 2 0x10 syz-executor
45032 65230 39275 -1 3 0x4000090 fsleep syz-executor
37737 356985 63818 0 2 0 syz-executor
37737 59812 63818 0 3 0x4000080 fsleep syz-executor
44922 329319 72586 0 3 0x82 wait syz-executor
93787 178262 72586 0 3 0x82 wait syz-executor
16811 139833 12142 0 3 0x80 nanoslp syz-executor
16811 512231 12142 0 3 0x4000000 biowait syz-executor
16811 222802 12142 0 3 0x4000000 inode syz-executor
16811 491304 12142 0 3 0x4000080 fsleep syz-executor
62934 418534 72586 0 3 0x82 nanoslp syz-executor
12142 262459 72586 0 3 0x82 nanoslp syz-executor
39275 425698 72586 0 3 0x82 nanoslp syz-executor
63818 330716 72586 0 3 0x82 nanoslp syz-executor
6270 506952 31242 0 3 0x100082 sbwait arp
31242 382875 1 0 3 0x10008a sigsusp sh
45542 461640 72586 0 3 0x82 nanoslp syz-executor
91304 500731 72586 0 3 0x82 nanoslp syz-executor
72586 54570 62034 0 2 0x2 syz-executor
62034 519073 42521 0 3 0x10008a sigsusp ksh
42521 443835 36282 0 3 0x98 kqread sshd-session
36282 33116 37322 0 3 0x92 kqread sshd-session
68997 238269 1 0 3 0x100083 ttyopn getty
37322 137498 1 0 3 0x88 kqread sshd
8305 256664 96890 74 3 0x1100092 bpf pflogd
96890 159340 1 0 3 0x80 sbwait pflogd
48091 311540 85773 73 3 0x1100090 kqread syslogd
85773 7886 1 0 3 0x100082 sbwait syslogd
38197 374221 1 0 3 0x100080 kqread resolvd
41700 255393 14173 77 3 0x100092 kqread dhcpleased
75073 437876 14173 77 3 0x100092 kqread dhcpleased
14173 120827 1 0 3 0x80 kqread dhcpleased
82935 425206 0 0 3 0x14200 bored smr
78141 208767 0 0 2 0x14200 zerothread
63552 359348 0 0 3 0x14200 aiodoned aiodoned
42941 142420 0 0 3 0x14200 syncer update
64035 473862 0 0 3 0x14200 cleaner cleaner
36826 175256 0 0 3 0x14200 reaper reaper
76268 77578 0 0 3 0x14200 pgdaemon pagedaemon
29930 451021 0 0 3 0x14200 bored viomb
82154 166656 0 0 3 0x40014200 acpi0 acpi0
55564 412211 0 0 7 0x40014200 idle1
72924 417124 0 0 3 0x14200 bored softnet1
73051 283772 0 0 3 0x14200 bored softnet0
32691 286234 0 0 3 0x14200 bored systqmp
76743 449398 0 0 3 0x14200 bored systq
39895 461490 0 0 3 0x14200 tmoslp softclockmp
40064 330114 0 0 3 0x40014200 tmoslp softclock
51637 474338 0 0 3 0x40014200 idle0
1 36571 0 0 3 0x80082 wait init
0 0 -1 0 3 0x10010200 scheduler swapper
ddb{0}> show all locks
CPU 0:
exclusive mutex /syzkaller/managers/multicore/kernel/sys/net/pipex.c:78 r = 0 (0xffffffff838772b0)
#0 witness_lock+0x5f1 stacktrace_save sys/sys/stacktrace.h:37 [inline]
#0 witness_lock+0x5f1 sys/kern/subr_witness.c:1160
#1 mtx_enter_try+0x1ad sys/kern/kern_lock.c:311
#2 mtx_enter+0x62 sys/kern/kern_lock.c:261
#3 pipex_link_session+0x49 sys/net/pipex.c:388
#4 pppacioctl+0x224 pppac_add_session sys/net/if_pppx.c:1381 [inline]
#4 pppacioctl+0x224 sys/net/if_pppx.c:1214
#5 VOP_IOCTL+0xac sys/kern/vfs_vops.c:264
#6 vn_ioctl+0xf8 sys/kern/vfs_vnops.c:531
#7 sys_ioctl+0x674 sys/kern/sys_generic.c:-1
#8 syscall+0xbd4 mi_syscall sys/sys/syscall_mi.h:176 [inline]
#8 syscall+0xbd4 sys/arch/amd64/amd64/trap.c:765
#9 Xsyscall+0x128
Process 40846 (syz-executor) thread 0xffff80003c45ad30 (385761)
Process 16811 (syz-executor) thread 0xffff80003c45b4f8 (512231)
ddb{0}> show malloc
Type InUse MemUse HighUse Limit Requests Type Lim
devbuf 10248 11188K 12448K 166960K 15485 0
pcb 18 16K 18K 166960K 655 0
rtable 210 12K 12K 166960K 822 0
pf 40 18K 82K 166960K 299 0
ifaddr 38 7K 7K 166960K 172 0
ifgroup 57 2K 2K 166960K 312 0
sysctl 4 1K 9K 166960K 17 0
counters 72 37K 38K 166960K 326 0
ioctlops 1 1K 4K 166960K 1905 0
iov 0 0K 20K 166960K 117 0
mount 1 1K 1K 166960K 1 0
log 0 0K 0K 166960K 4 0
vnodes 1494 94K 95K 166960K 3866 0
UFS quota 1 32K 32K 166960K 1 0
UFS mount 5 36K 36K 166960K 5 0
shm 2 1K 9K 166960K 33 0
VM map 2 1K 1K 166960K 2 0
sem 12 0K 0K 166960K 137 0
dirhash 63 11K 14K 166960K 1602 0
ACPI 1692 195K 286K 166960K 12470 0
file desc 20 73K 114K 166960K 2343 0
sigio 0 0K 0K 166960K 66 0
proc 74 115K 180K 166960K 921 0
subproc 81 5K 5K 166960K 162 0
NFS srvsock 1 0K 0K 166960K 1 0
NFS daemon 1 16K 16K 166960K 1 0
ip_moptions 0 0K 0K 166960K 394 0
in_multi 75 5K 6K 166960K 249 0
ether_multi 1 0K 0K 166960K 27 0
mrt 1 0K 0K 166960K 10 0
ISOFS mount 1 32K 32K 166960K 1 0
MSDOSFS mount 1 16K 16K 166960K 1 0
ttys 253 1129K 1129K 166960K 253 0
exec 0 0K 1K 166960K 812 0
fusefs mount 1 32K 32K 166960K 1 0
pfkey data 0 0K 0K 166960K 3 0
tdb 3 0K 0K 166960K 3 0
VM swap 8 62K 64K 166960K 10 0
UVM amap 248 170K 194K 166960K 21846 0
UVM aobj 28 14K 14K 166960K 30 0
pinsyscall 46 92K 106K 166960K 3697 0
memdesc 1 4K 4K 166960K 1 0
crypto data 1 1K 1K 166960K 1 0
ip6_options 0 0K 1K 166960K 220 0
NDP 13 0K 1K 166960K 127 0
temp 83 8676K 8921K 166960K 116952 0
kqueue 15 24K 32K 166960K 394 0
SYN cache 2 16K 16K 166960K 2 0
ddb{0}> show all pools
Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle
plcache 128 26 0 0 1 0 1 1 0 8 0
rtpcb 120 256 0 252 3 2 1 3 0 8 0
rtentry 176 247 0 170 5 1 4 5 0 8 0
unpcb 144 1427 0 1410 15 11 4 4 0 8 3
syncache 336 9 0 9 4 4 0 1 0 8 0
tcpqe 32 3 0 3 3 3 0 1 0 8 0
tcpcb 736 891 0 884 25 24 1 10 0 8 0
arp 136 43 0 31 1 0 1 1 0 8 0
inpcb 328 3123 0 3109 37 27 10 13 0 8 8
nd6 152 49 0 30 1 0 1 1 0 8 0
pkpcb 40 16 0 16 6 5 1 1 0 8 1
kcovpl 48 18 0 9 1 0 1 1 0 8 0
mppekey 1024 3 0 3 3 2 1 1 0 8 1
ppxss 1192 94 0 92 2 1 1 1 0 8 0
pppxif 1504 8 0 8 3 2 1 1 0 8 1
pfstscr 40 4 0 4 2 2 0 1 0 8 0
pffrag 232 12 0 7 1 0 1 1 0 482 0
pffrnode 88 11 0 6 1 0 1 1 0 8 0
pffrent 40 24 0 19 1 0 1 1 0 8 0
pfosfp 40 1428 0 1005 5 0 5 5 0 8 0
pfosfpen 112 1428 0 714 21 0 21 21 0 8 0
pfrktable 1344 3 0 3 3 3 0 1 0 8 0
pfanchor 1288 6 0 0 1 0 1 1 0 8 0
pftag 88 1 0 0 1 0 1 1 0 8 0
pfstitem 24 40 0 31 1 0 1 1 0 8 0
pfstkey 128 44 0 35 2 1 1 2 0 8 0
pfstate 448 39 0 33 4 1 3 4 0 8 0
pfrule 1344 31 0 25 2 1 1 2 0 8 0
rttmr 136 1 0 1 1 1 0 1 0 8 0
art_heap8 4096 3 0 0 3 0 3 3 0 8 0
art_heap4 256 961 0 605 34 10 24 27 0 8 1
art_table 40 964 0 605 5 1 4 5 0 8 0
art_node 32 245 0 178 1 0 1 1 0 8 0
sysvmsgpl 40 20 0 13 2 1 1 1 0 8 0
semupl 112 3 0 3 2 2 0 1 0 8 0
semapl 112 134 0 124 1 0 1 1 0 8 0
shmpl 112 20 0 1 1 0 1 1 0 8 0
dirhash 1024 554 0 520 5 0 5 5 0 8 0
dino2pl 256 5888 0 4371 96 0 96 96 0 8 0
ffsino 296 5888 0 4371 117 0 117 117 0 8 0
nchpl 144 9107 0 8477 64 35 29 64 0 8 5
rtmask 32 22 0 21 4 3 1 1 0 8 0
vnodes 216 5926 0 0 330 0 330 330 0 8 0
namei 1024 33588 0 33588 4 2 2 2 0 8 2
percpumem 16 178 0 127 1 0 1 1 0 8 0
vcpupl 3968 7 0 1 1 0 1 1 0 8 0
vmpool 840 7 0 1 1 0 1 1 0 8 0
kstatmem 264 196 0 166 4 1 3 3 0 8 0
acpiwqpl 32 1 0 1 1 0 1 1 1 8 1
scsiplug 72 12 0 12 6 5 1 1 0 8 1
scxspl 216 59670 0 59669 13 11 2 8 1 8 1
plimitpl 152 570 0 551 1 0 1 1 0 8 0
sigapl 424 2656 0 2605 10 3 7 9 0 8 0
knotepl 120 684 0 0 20 0 20 20 0 8 0
kqueuepl 224 1023 0 1008 13 10 3 5 0 8 2
pipepl 344 432 0 402 13 8 5 9 0 8 1
fdescpl 528 2614 0 2580 3 0 3 3 0 8 0
filepl 160 19883 0 19647 35 16 19 19 0 8 8
lockfpl 104 1353 0 1350 4 2 2 2 0 8 1
lockfspl 48 476 0 473 1 0 1 1 0 8 0
sessionpl 144 38 0 29 1 0 1 1 0 8 0
pgrppl 48 88 0 70 1 0 1 1 0 8 0
ucredpl 104 3932 0 3918 1 0 1 1 0 8 0
zombiepl 144 2605 0 2605 1 0 1 1 0 8 1
processpl 1232 2656 0 2605 6 0 6 6 0 8 0
procpl 664 5830 0 5771 8 0 8 8 0 8 0
sosppl 176 27 0 27 6 5 1 1 0 8 1
sockpl 752 4881 0 4846 59 47 12 24 0 8 8
mcl64k 65536 17 0 0 3 0 3 3 0 8 0
mcl16k 16384 2 0 0 1 0 1 1 0 8 0
mcl12k 12288 1 0 0 1 0 1 1 0 8 0
mcl9k 9216 1 0 0 1 0 1 1 0 8 0
mcl8k 8192 2 0 0 1 0 1 1 0 8 0
mcl4k 4096 127 0 0 16 0 16 16 0 8 0
mcl2k2 2112 1 0 0 1 0 1 1 0 8 0
mcl2k 2048 76 0 0 7 1 6 6 0 8 0
mtagpl 96 276 0 0 6 0 6 6 0 8 0
mbufpl 256 2007 0 0 123 0 123 123 0 8 0
bufpl 280 23528 0 17391 439 0 439 439 0 8 0
anonpl 32 15502 0 0 126 1 125 125 0 246 0
amapchunkpl 152 76406 0 75871 49 15 34 34 0 158 7
amappl16 200 12210 0 11844 93 66 27 40 0 8 3
amappl15 192 8 0 8 1 1 0 1 0 8 0
amappl14 184 4 0 4 2 2 0 1 0 8 0
amappl13 176 519 0 515 1 0 1 1 0 8 0
amappl12 168 3034 0 2990 3 0 3 3 0 8 0
amappl11 160 5 0 5 1 1 0 1 0 8 0
amappl10 152 46 0 32 1 0 1 1 0 8 0
amappl9 144 254 0 253 2 1 1 1 0 8 0
amappl8 136 31 0 27 1 0 1 1 0 8 0
amappl7 128 115 0 113 1 0 1 1 0 8 0
amappl6 120 381 0 364 1 0 1 1 0 8 0
amappl5 112 83 0 72 1 0 1 1 0 8 0
amappl4 104 479 0 448 1 0 1 1 0 8 0
amappl3 96 13307 0 13216 4 1 3 3 0 8 0
amappl2 88 2741 0 2661 2 0 2 2 0 8 0
amappl1 80 20518 0 19895 16 1 15 15 0 8 0
amappl 88 20623 0 20458 5 0 5 5 0 92 0
uvmvnodes 80 161 0 0 4 0 4 4 0 8 0
dma8192 8192 1 0 1 1 1 0 1 0 8 0
dma4096 4096 1 0 1 1 1 0 1 0 8 0
dma1024 1024 2 0 1 1 0 1 1 0 8 0
dma256 256 8 0 8 2 1 1 1 0 8 1
dma128 128 256 0 256 3 2 1 1 0 8 1
dma64 64 6 0 6 1 1 0 1 0 8 0
dma32 32 8 0 8 2 1 1 1 0 8 1
dma16 16 18 0 17 1 0 1 1 0 8 0
aobjpl 72 29 0 2 1 0 1 1 0 8 0
uaddrrnd 24 2614 0 2580 1 0 1 1 0 8 0
uaddrbest 32 2 0 0 1 0 1 1 0 8 0
uaddr 24 2614 0 2580 1 0 1 1 0 8 0
vmmpekpl 168 20487 0 20426 4 1 3 3 0 8 0
vmmpepl 168 172640 0 170319 148 33 115 118 0 357 5
vmsppl 488 2613 0 2580 5 0 5 5 0 8 0
rwobjpl 80 47577 0 46076 49 15 34 38 0 8 0
pdppl 4096 5250 0 5168 115 33 82 86 0 8 0
pvpl 32 23966 0 0 193 0 193 193 0 265 0
pmappl 256 2620 0 2581 3 0 3 3 0 8 0
extentpl 40 45 0 27 1 0 1 1 0 8 0
phpool 112 452 0 80 11 0 11 11 0 8 0
ddb{0}> machine ddbcpu 0
Invalid cpu 0
ddb{0}> trace
rn_add_radix_mask(ffff80003c4c6e98,0) at rn_add_radix_mask+0x296 rn_refines sys/net/radix.c:163 [inline]
rn_add_radix_mask(ffff80003c4c6e98,0) at rn_add_radix_mask+0x296 sys/net/radix.c:620
rn_addroute(ffff80003c4c6f98,ffff80003c4c6fa8,ffff80000148e000,ffff80003c4c6e98,8) at rn_addroute+0x1da sys/net/radix.c:807
pipex_link_session(ffff80003c4c6e98,ffff80000147a000,ffff80000147a000) at pipex_link_session+0x3af sys/net/pipex.c:-1
pppacioctl(637d,82907003,ffff800001703000,1,ffff80003c45ad30) at pppacioctl+0x224 pppac_add_session sys/net/if_pppx.c:1381 [inline]
pppacioctl(637d,82907003,ffff800001703000,1,ffff80003c45ad30) at pppacioctl+0x224 sys/net/if_pppx.c:1214
VOP_IOCTL(fffffd8060995630,82907003,ffff800001703000,1,fffffd80097fd4e0,ffff80003c45ad30) at VOP_IOCTL+0xac sys/kern/vfs_vops.c:264
vn_ioctl(fffffd806d9742a0,82907003,ffff800001703000,ffff80003c45ad30) at vn_ioctl+0xf8 sys/kern/vfs_vnops.c:531
sys_ioctl(ffff80003c45ad30,ffff80003c4efe40,ffff80003c4efd90) at sys_ioctl+0x674 sys/kern/sys_generic.c:-1
syscall(ffff80003c4efe40) at syscall+0xbd4 mi_syscall sys/sys/syscall_mi.h:176 [inline]
syscall(ffff80003c4efe40) at syscall+0xbd4 sys/arch/amd64/amd64/trap.c:765
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x6c44daf0bc0, count: -9
ddb{0}> machine ddbcpu 1
Stopped at x86_ipi_db+0x27: addq $0x8,%rsp
x86_ipi_db(ffff8000299edff0) at x86_ipi_db+0x27 sys/arch/amd64/amd64/db_interface.c:394
x86_ipi_handler() at x86_ipi_handler+0xd9 sys/arch/amd64/amd64/ipi.c:106
Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27
acpicpu_idle() at acpicpu_idle+0x457 sys/dev/acpi/acpicpu_x86.c:1224
sched_idle(ffff8000299edff0) at sched_idle+0x391 sys/kern/kern_sched.c:191
end trace frame: 0x0, count: 10
ddb{1}> trace
x86_ipi_db(ffff8000299edff0) at x86_ipi_db+0x27 sys/arch/amd64/amd64/db_interface.c:394
x86_ipi_handler() at x86_ipi_handler+0xd9 sys/arch/amd64/amd64/ipi.c:106
Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27
acpicpu_idle() at acpicpu_idle+0x457 sys/dev/acpi/acpicpu_x86.c:1224
sched_idle(ffff8000299edff0) at sched_idle+0x391 sys/kern/kern_sched.c:191
end trace frame: 0x0, count: -5
---
This report is generated by a bot. It may contain errors.
See https://goo.gl/tpsmEJ for more information about syzbot.
syzbot engineers can be reached at syzk...@googlegroups.com.
syzbot will keep track of this issue. See:
https://goo.gl/tpsmEJ#status for how to communicate with syzbot.
If the report is already addressed, let syzbot know by replying with:
#syz fix: exact-commit-title
If you want to overwrite report's subsystems, reply with:
#syz set subsystems: new-subsystem
(See the list of subsystem names on the web dashboard)
If the report is a duplicate of another one, reply with:
#syz dup: exact-subject-of-another-report
If you want to undo deduplication, reply with:
#syz undup
syzbot found the following issue on:
HEAD commit: 34f94be7b87a Add seconds options for clock mode, from augu..
git tree: openbsd
console output: https://syzkaller.appspot.com/x/log.txt?x=1035257c580000
kernel config: https://syzkaller.appspot.com/x/.config?x=7058272de1526588
dashboard link: https://syzkaller.appspot.com/bug?extid=f3267798c52bcc27ffb3
Unfortunately, I don't have any reproducer for this issue yet.
Downloadable assets:
disk image: https://storage.googleapis.com/syzbot-assets/d91362438314/disk-34f94be7.raw.xz
bsd.gdb: https://storage.googleapis.com/syzbot-assets/500fd6f4c28f/bsd-34f94be7.gdb.xz
kernel image: https://storage.googleapis.com/syzbot-assets/341722d65a48/kernel-34f94be7.xz
IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+f32677...@syzkaller.appspotmail.com
uvm_fault(0xfffffd80761b07b8, 0x0, 0, 1) -> e
kernel: page fault trap, code=0
Stopped at rn_add_radix_mask+0x296: movzbl 0(%r12),%ebx
TID PID UID PRFLAGS PFLAGS CPU COMMAND
*385761 40846 0 0 0x4000000 0K syz-executor
rn_add_radix_mask(ffff80003c4c6e98,0) at rn_add_radix_mask+0x296 rn_refines sys/net/radix.c:163 [inline]
rn_add_radix_mask(ffff80003c4c6e98,0) at rn_add_radix_mask+0x296 sys/net/radix.c:620
rn_addroute(ffff80003c4c6f98,ffff80003c4c6fa8,ffff80000148e000,ffff80003c4c6e98,8) at rn_addroute+0x1da sys/net/radix.c:807
pipex_link_session(ffff80003c4c6e98,ffff80000147a000,ffff80000147a000) at pipex_link_session+0x3af sys/net/pipex.c:-1
pppacioctl(637d,82907003,ffff800001703000,1,ffff80003c45ad30) at pppacioctl+0x224 pppac_add_session sys/net/if_pppx.c:1381 [inline]
pppacioctl(637d,82907003,ffff800001703000,1,ffff80003c45ad30) at pppacioctl+0x224 sys/net/if_pppx.c:1214
VOP_IOCTL(fffffd8060995630,82907003,ffff800001703000,1,fffffd80097fd4e0,ffff80003c45ad30) at VOP_IOCTL+0xac sys/kern/vfs_vops.c:264
vn_ioctl(fffffd806d9742a0,82907003,ffff800001703000,ffff80003c45ad30) at vn_ioctl+0xf8 sys/kern/vfs_vnops.c:531
sys_ioctl(ffff80003c45ad30,ffff80003c4efe40,ffff80003c4efd90) at sys_ioctl+0x674 sys/kern/sys_generic.c:-1
syscall(ffff80003c4efe40) at syscall+0xbd4 mi_syscall sys/sys/syscall_mi.h:176 [inline]
syscall(ffff80003c4efe40) at syscall+0xbd4 sys/arch/amd64/amd64/trap.c:765
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x6c44daf0bc0, count: 6
https://www.openbsd.org/ddb.html describes the minimum info required in bug
reports. Insufficient info makes it difficult to find and fix bugs.
ddb{0}>
ddb{0}> set $lines = 0
ddb{0}> set $maxwidth = 0
ddb{0}> show panic
*cpu0: uvm_fault(0xfffffd80761b07b8, 0x0, 0, 1) -> e
ddb{0}> trace
rn_add_radix_mask(ffff80003c4c6e98,0) at rn_add_radix_mask+0x296 rn_refines sys/net/radix.c:163 [inline]
rn_add_radix_mask(ffff80003c4c6e98,0) at rn_add_radix_mask+0x296 sys/net/radix.c:620
rn_addroute(ffff80003c4c6f98,ffff80003c4c6fa8,ffff80000148e000,ffff80003c4c6e98,8) at rn_addroute+0x1da sys/net/radix.c:807
pipex_link_session(ffff80003c4c6e98,ffff80000147a000,ffff80000147a000) at pipex_link_session+0x3af sys/net/pipex.c:-1
pppacioctl(637d,82907003,ffff800001703000,1,ffff80003c45ad30) at pppacioctl+0x224 pppac_add_session sys/net/if_pppx.c:1381 [inline]
pppacioctl(637d,82907003,ffff800001703000,1,ffff80003c45ad30) at pppacioctl+0x224 sys/net/if_pppx.c:1214
VOP_IOCTL(fffffd8060995630,82907003,ffff800001703000,1,fffffd80097fd4e0,ffff80003c45ad30) at VOP_IOCTL+0xac sys/kern/vfs_vops.c:264
vn_ioctl(fffffd806d9742a0,82907003,ffff800001703000,ffff80003c45ad30) at vn_ioctl+0xf8 sys/kern/vfs_vnops.c:531
sys_ioctl(ffff80003c45ad30,ffff80003c4efe40,ffff80003c4efd90) at sys_ioctl+0x674 sys/kern/sys_generic.c:-1
syscall(ffff80003c4efe40) at syscall+0xbd4 mi_syscall sys/sys/syscall_mi.h:176 [inline]
syscall(ffff80003c4efe40) at syscall+0xbd4 sys/arch/amd64/amd64/trap.c:765
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x6c44daf0bc0, count: -9
ddb{0}> show registers
rdi 0xffff80002ffd7000
rsi 0x497
rbp 0xffff80003c4ef900
rbx 0xffff80000148e040
rdx 0xffff80002ffd7000
rcx 0x496
rax 0xffff80003c4c52c8
r8 0x90
r9 0xffff80003c45ad30
r10 0x60a914d97a8b48e4
r11 0x9ffb8e52bee95b9
r12 0
r13 0xffff80003c4c6e98
r14 0
r15 0xffff800010fcab60
rip 0xffffffff818e7956 rn_add_radix_mask+0x296
cs 0x8
rflags 0x10207 __ALIGN_SIZE+0xf207
rsp 0xffff80003c4ef840
ss 0x10
rn_add_radix_mask+0x296: movzbl 0(%r12),%ebx
ddb{0}> show proc
PROC (syz-executor) tid=385761 pid=40846 tcnt=2 stat=onproc
flags process=0 proc=4000000<THREAD>
runpri=32, usrpri=50, slppri=32, nice=20
wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0
forw=0xffffffffffffffff, list=0xffff80003c45bcc0,0xffffffff839b9030
process=0xffff80003c420e90 user=0xffff80003c4ea000, vmspace=0xfffffd80761b07b8
estcpu=36, cpticks=1, pctcpu=0.0, user=0, sys=1, intr=0
ddb{0}> ps
PID TID PPID UID S FLAGS WAIT COMMAND
40846 41362 62934 0 2 0 syz-executor
*40846 385761 62934 0 7 0x4000000 syz-executor
92748 15416 45542 0 2 0 syz-executor
92748 418106 45542 0 2 0x4000000 syz-executor
83842 141599 93787 0 2 0x100002 sh
86277 246464 44922 0 2 0x100002 sh
3116 10399 0 0 3 0x14200 acct acct
43252 200465 91304 0 2 0 syz-executor
43252 350023 91304 0 3 0x4000080 kqsel syz-executor
45032 498638 39275 -1 2 0x10 syz-executor
45032 65230 39275 -1 3 0x4000090 fsleep syz-executor
37737 356985 63818 0 2 0 syz-executor
37737 59812 63818 0 3 0x4000080 fsleep syz-executor
44922 329319 72586 0 3 0x82 wait syz-executor
93787 178262 72586 0 3 0x82 wait syz-executor
16811 139833 12142 0 3 0x80 nanoslp syz-executor
16811 512231 12142 0 3 0x4000000 biowait syz-executor
16811 222802 12142 0 3 0x4000000 inode syz-executor
16811 491304 12142 0 3 0x4000080 fsleep syz-executor
62934 418534 72586 0 3 0x82 nanoslp syz-executor
12142 262459 72586 0 3 0x82 nanoslp syz-executor
39275 425698 72586 0 3 0x82 nanoslp syz-executor
63818 330716 72586 0 3 0x82 nanoslp syz-executor
6270 506952 31242 0 3 0x100082 sbwait arp
31242 382875 1 0 3 0x10008a sigsusp sh
45542 461640 72586 0 3 0x82 nanoslp syz-executor
91304 500731 72586 0 3 0x82 nanoslp syz-executor
72586 54570 62034 0 2 0x2 syz-executor
62034 519073 42521 0 3 0x10008a sigsusp ksh
42521 443835 36282 0 3 0x98 kqread sshd-session
36282 33116 37322 0 3 0x92 kqread sshd-session
68997 238269 1 0 3 0x100083 ttyopn getty
37322 137498 1 0 3 0x88 kqread sshd
8305 256664 96890 74 3 0x1100092 bpf pflogd
96890 159340 1 0 3 0x80 sbwait pflogd
48091 311540 85773 73 3 0x1100090 kqread syslogd
85773 7886 1 0 3 0x100082 sbwait syslogd
38197 374221 1 0 3 0x100080 kqread resolvd
41700 255393 14173 77 3 0x100092 kqread dhcpleased
75073 437876 14173 77 3 0x100092 kqread dhcpleased
14173 120827 1 0 3 0x80 kqread dhcpleased
82935 425206 0 0 3 0x14200 bored smr
78141 208767 0 0 2 0x14200 zerothread
63552 359348 0 0 3 0x14200 aiodoned aiodoned
42941 142420 0 0 3 0x14200 syncer update
64035 473862 0 0 3 0x14200 cleaner cleaner
36826 175256 0 0 3 0x14200 reaper reaper
76268 77578 0 0 3 0x14200 pgdaemon pagedaemon
29930 451021 0 0 3 0x14200 bored viomb
82154 166656 0 0 3 0x40014200 acpi0 acpi0
55564 412211 0 0 7 0x40014200 idle1
72924 417124 0 0 3 0x14200 bored softnet1
73051 283772 0 0 3 0x14200 bored softnet0
32691 286234 0 0 3 0x14200 bored systqmp
76743 449398 0 0 3 0x14200 bored systq
39895 461490 0 0 3 0x14200 tmoslp softclockmp
40064 330114 0 0 3 0x40014200 tmoslp softclock
51637 474338 0 0 3 0x40014200 idle0
1 36571 0 0 3 0x80082 wait init
0 0 -1 0 3 0x10010200 scheduler swapper
ddb{0}> show all locks
CPU 0:
exclusive mutex /syzkaller/managers/multicore/kernel/sys/net/pipex.c:78 r = 0 (0xffffffff838772b0)
#0 witness_lock+0x5f1 stacktrace_save sys/sys/stacktrace.h:37 [inline]
#0 witness_lock+0x5f1 sys/kern/subr_witness.c:1160
#1 mtx_enter_try+0x1ad sys/kern/kern_lock.c:311
#2 mtx_enter+0x62 sys/kern/kern_lock.c:261
#3 pipex_link_session+0x49 sys/net/pipex.c:388
#4 pppacioctl+0x224 pppac_add_session sys/net/if_pppx.c:1381 [inline]
#4 pppacioctl+0x224 sys/net/if_pppx.c:1214
#5 VOP_IOCTL+0xac sys/kern/vfs_vops.c:264
#6 vn_ioctl+0xf8 sys/kern/vfs_vnops.c:531
#7 sys_ioctl+0x674 sys/kern/sys_generic.c:-1
#8 syscall+0xbd4 mi_syscall sys/sys/syscall_mi.h:176 [inline]
#8 syscall+0xbd4 sys/arch/amd64/amd64/trap.c:765
#9 Xsyscall+0x128
Process 40846 (syz-executor) thread 0xffff80003c45ad30 (385761)
Process 16811 (syz-executor) thread 0xffff80003c45b4f8 (512231)
ddb{0}> show malloc
Type InUse MemUse HighUse Limit Requests Type Lim
devbuf 10248 11188K 12448K 166960K 15485 0
pcb 18 16K 18K 166960K 655 0
rtable 210 12K 12K 166960K 822 0
pf 40 18K 82K 166960K 299 0
ifaddr 38 7K 7K 166960K 172 0
ifgroup 57 2K 2K 166960K 312 0
sysctl 4 1K 9K 166960K 17 0
counters 72 37K 38K 166960K 326 0
ioctlops 1 1K 4K 166960K 1905 0
iov 0 0K 20K 166960K 117 0
mount 1 1K 1K 166960K 1 0
log 0 0K 0K 166960K 4 0
vnodes 1494 94K 95K 166960K 3866 0
UFS quota 1 32K 32K 166960K 1 0
UFS mount 5 36K 36K 166960K 5 0
shm 2 1K 9K 166960K 33 0
VM map 2 1K 1K 166960K 2 0
sem 12 0K 0K 166960K 137 0
dirhash 63 11K 14K 166960K 1602 0
ACPI 1692 195K 286K 166960K 12470 0
file desc 20 73K 114K 166960K 2343 0
sigio 0 0K 0K 166960K 66 0
proc 74 115K 180K 166960K 921 0
subproc 81 5K 5K 166960K 162 0
NFS srvsock 1 0K 0K 166960K 1 0
NFS daemon 1 16K 16K 166960K 1 0
ip_moptions 0 0K 0K 166960K 394 0
in_multi 75 5K 6K 166960K 249 0
ether_multi 1 0K 0K 166960K 27 0
mrt 1 0K 0K 166960K 10 0
ISOFS mount 1 32K 32K 166960K 1 0
MSDOSFS mount 1 16K 16K 166960K 1 0
ttys 253 1129K 1129K 166960K 253 0
exec 0 0K 1K 166960K 812 0
fusefs mount 1 32K 32K 166960K 1 0
pfkey data 0 0K 0K 166960K 3 0
tdb 3 0K 0K 166960K 3 0
VM swap 8 62K 64K 166960K 10 0
UVM amap 248 170K 194K 166960K 21846 0
UVM aobj 28 14K 14K 166960K 30 0
pinsyscall 46 92K 106K 166960K 3697 0
memdesc 1 4K 4K 166960K 1 0
crypto data 1 1K 1K 166960K 1 0
ip6_options 0 0K 1K 166960K 220 0
NDP 13 0K 1K 166960K 127 0
temp 83 8676K 8921K 166960K 116952 0
kqueue 15 24K 32K 166960K 394 0
SYN cache 2 16K 16K 166960K 2 0
ddb{0}> show all pools
Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle
plcache 128 26 0 0 1 0 1 1 0 8 0
rtpcb 120 256 0 252 3 2 1 3 0 8 0
rtentry 176 247 0 170 5 1 4 5 0 8 0
unpcb 144 1427 0 1410 15 11 4 4 0 8 3
syncache 336 9 0 9 4 4 0 1 0 8 0
tcpqe 32 3 0 3 3 3 0 1 0 8 0
tcpcb 736 891 0 884 25 24 1 10 0 8 0
arp 136 43 0 31 1 0 1 1 0 8 0
inpcb 328 3123 0 3109 37 27 10 13 0 8 8
nd6 152 49 0 30 1 0 1 1 0 8 0
pkpcb 40 16 0 16 6 5 1 1 0 8 1
kcovpl 48 18 0 9 1 0 1 1 0 8 0
mppekey 1024 3 0 3 3 2 1 1 0 8 1
ppxss 1192 94 0 92 2 1 1 1 0 8 0
pppxif 1504 8 0 8 3 2 1 1 0 8 1
pfstscr 40 4 0 4 2 2 0 1 0 8 0
pffrag 232 12 0 7 1 0 1 1 0 482 0
pffrnode 88 11 0 6 1 0 1 1 0 8 0
pffrent 40 24 0 19 1 0 1 1 0 8 0
pfosfp 40 1428 0 1005 5 0 5 5 0 8 0
pfosfpen 112 1428 0 714 21 0 21 21 0 8 0
pfrktable 1344 3 0 3 3 3 0 1 0 8 0
pfanchor 1288 6 0 0 1 0 1 1 0 8 0
pftag 88 1 0 0 1 0 1 1 0 8 0
pfstitem 24 40 0 31 1 0 1 1 0 8 0
pfstkey 128 44 0 35 2 1 1 2 0 8 0
pfstate 448 39 0 33 4 1 3 4 0 8 0
pfrule 1344 31 0 25 2 1 1 2 0 8 0
rttmr 136 1 0 1 1 1 0 1 0 8 0
art_heap8 4096 3 0 0 3 0 3 3 0 8 0
art_heap4 256 961 0 605 34 10 24 27 0 8 1
art_table 40 964 0 605 5 1 4 5 0 8 0
art_node 32 245 0 178 1 0 1 1 0 8 0
sysvmsgpl 40 20 0 13 2 1 1 1 0 8 0
semupl 112 3 0 3 2 2 0 1 0 8 0
semapl 112 134 0 124 1 0 1 1 0 8 0
shmpl 112 20 0 1 1 0 1 1 0 8 0
dirhash 1024 554 0 520 5 0 5 5 0 8 0
dino2pl 256 5888 0 4371 96 0 96 96 0 8 0
ffsino 296 5888 0 4371 117 0 117 117 0 8 0
nchpl 144 9107 0 8477 64 35 29 64 0 8 5
rtmask 32 22 0 21 4 3 1 1 0 8 0
vnodes 216 5926 0 0 330 0 330 330 0 8 0
namei 1024 33588 0 33588 4 2 2 2 0 8 2
percpumem 16 178 0 127 1 0 1 1 0 8 0
vcpupl 3968 7 0 1 1 0 1 1 0 8 0
vmpool 840 7 0 1 1 0 1 1 0 8 0
kstatmem 264 196 0 166 4 1 3 3 0 8 0
acpiwqpl 32 1 0 1 1 0 1 1 1 8 1
scsiplug 72 12 0 12 6 5 1 1 0 8 1
scxspl 216 59670 0 59669 13 11 2 8 1 8 1
plimitpl 152 570 0 551 1 0 1 1 0 8 0
sigapl 424 2656 0 2605 10 3 7 9 0 8 0
knotepl 120 684 0 0 20 0 20 20 0 8 0
kqueuepl 224 1023 0 1008 13 10 3 5 0 8 2
pipepl 344 432 0 402 13 8 5 9 0 8 1
fdescpl 528 2614 0 2580 3 0 3 3 0 8 0
filepl 160 19883 0 19647 35 16 19 19 0 8 8
lockfpl 104 1353 0 1350 4 2 2 2 0 8 1
lockfspl 48 476 0 473 1 0 1 1 0 8 0
sessionpl 144 38 0 29 1 0 1 1 0 8 0
pgrppl 48 88 0 70 1 0 1 1 0 8 0
ucredpl 104 3932 0 3918 1 0 1 1 0 8 0
zombiepl 144 2605 0 2605 1 0 1 1 0 8 1
processpl 1232 2656 0 2605 6 0 6 6 0 8 0
procpl 664 5830 0 5771 8 0 8 8 0 8 0
sosppl 176 27 0 27 6 5 1 1 0 8 1
sockpl 752 4881 0 4846 59 47 12 24 0 8 8
mcl64k 65536 17 0 0 3 0 3 3 0 8 0
mcl16k 16384 2 0 0 1 0 1 1 0 8 0
mcl12k 12288 1 0 0 1 0 1 1 0 8 0
mcl9k 9216 1 0 0 1 0 1 1 0 8 0
mcl8k 8192 2 0 0 1 0 1 1 0 8 0
mcl4k 4096 127 0 0 16 0 16 16 0 8 0
mcl2k2 2112 1 0 0 1 0 1 1 0 8 0
mcl2k 2048 76 0 0 7 1 6 6 0 8 0
mtagpl 96 276 0 0 6 0 6 6 0 8 0
mbufpl 256 2007 0 0 123 0 123 123 0 8 0
bufpl 280 23528 0 17391 439 0 439 439 0 8 0
anonpl 32 15502 0 0 126 1 125 125 0 246 0
amapchunkpl 152 76406 0 75871 49 15 34 34 0 158 7
amappl16 200 12210 0 11844 93 66 27 40 0 8 3
amappl15 192 8 0 8 1 1 0 1 0 8 0
amappl14 184 4 0 4 2 2 0 1 0 8 0
amappl13 176 519 0 515 1 0 1 1 0 8 0
amappl12 168 3034 0 2990 3 0 3 3 0 8 0
amappl11 160 5 0 5 1 1 0 1 0 8 0
amappl10 152 46 0 32 1 0 1 1 0 8 0
amappl9 144 254 0 253 2 1 1 1 0 8 0
amappl8 136 31 0 27 1 0 1 1 0 8 0
amappl7 128 115 0 113 1 0 1 1 0 8 0
amappl6 120 381 0 364 1 0 1 1 0 8 0
amappl5 112 83 0 72 1 0 1 1 0 8 0
amappl4 104 479 0 448 1 0 1 1 0 8 0
amappl3 96 13307 0 13216 4 1 3 3 0 8 0
amappl2 88 2741 0 2661 2 0 2 2 0 8 0
amappl1 80 20518 0 19895 16 1 15 15 0 8 0
amappl 88 20623 0 20458 5 0 5 5 0 92 0
uvmvnodes 80 161 0 0 4 0 4 4 0 8 0
dma8192 8192 1 0 1 1 1 0 1 0 8 0
dma4096 4096 1 0 1 1 1 0 1 0 8 0
dma1024 1024 2 0 1 1 0 1 1 0 8 0
dma256 256 8 0 8 2 1 1 1 0 8 1
dma128 128 256 0 256 3 2 1 1 0 8 1
dma64 64 6 0 6 1 1 0 1 0 8 0
dma32 32 8 0 8 2 1 1 1 0 8 1
dma16 16 18 0 17 1 0 1 1 0 8 0
aobjpl 72 29 0 2 1 0 1 1 0 8 0
uaddrrnd 24 2614 0 2580 1 0 1 1 0 8 0
uaddrbest 32 2 0 0 1 0 1 1 0 8 0
uaddr 24 2614 0 2580 1 0 1 1 0 8 0
vmmpekpl 168 20487 0 20426 4 1 3 3 0 8 0
vmmpepl 168 172640 0 170319 148 33 115 118 0 357 5
vmsppl 488 2613 0 2580 5 0 5 5 0 8 0
rwobjpl 80 47577 0 46076 49 15 34 38 0 8 0
pdppl 4096 5250 0 5168 115 33 82 86 0 8 0
pvpl 32 23966 0 0 193 0 193 193 0 265 0
pmappl 256 2620 0 2581 3 0 3 3 0 8 0
extentpl 40 45 0 27 1 0 1 1 0 8 0
phpool 112 452 0 80 11 0 11 11 0 8 0
ddb{0}> machine ddbcpu 0
Invalid cpu 0
ddb{0}> trace
rn_add_radix_mask(ffff80003c4c6e98,0) at rn_add_radix_mask+0x296 rn_refines sys/net/radix.c:163 [inline]
rn_add_radix_mask(ffff80003c4c6e98,0) at rn_add_radix_mask+0x296 sys/net/radix.c:620
rn_addroute(ffff80003c4c6f98,ffff80003c4c6fa8,ffff80000148e000,ffff80003c4c6e98,8) at rn_addroute+0x1da sys/net/radix.c:807
pipex_link_session(ffff80003c4c6e98,ffff80000147a000,ffff80000147a000) at pipex_link_session+0x3af sys/net/pipex.c:-1
pppacioctl(637d,82907003,ffff800001703000,1,ffff80003c45ad30) at pppacioctl+0x224 pppac_add_session sys/net/if_pppx.c:1381 [inline]
pppacioctl(637d,82907003,ffff800001703000,1,ffff80003c45ad30) at pppacioctl+0x224 sys/net/if_pppx.c:1214
VOP_IOCTL(fffffd8060995630,82907003,ffff800001703000,1,fffffd80097fd4e0,ffff80003c45ad30) at VOP_IOCTL+0xac sys/kern/vfs_vops.c:264
vn_ioctl(fffffd806d9742a0,82907003,ffff800001703000,ffff80003c45ad30) at vn_ioctl+0xf8 sys/kern/vfs_vnops.c:531
sys_ioctl(ffff80003c45ad30,ffff80003c4efe40,ffff80003c4efd90) at sys_ioctl+0x674 sys/kern/sys_generic.c:-1
syscall(ffff80003c4efe40) at syscall+0xbd4 mi_syscall sys/sys/syscall_mi.h:176 [inline]
syscall(ffff80003c4efe40) at syscall+0xbd4 sys/arch/amd64/amd64/trap.c:765
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x6c44daf0bc0, count: -9
ddb{0}> machine ddbcpu 1
Stopped at x86_ipi_db+0x27: addq $0x8,%rsp
x86_ipi_db(ffff8000299edff0) at x86_ipi_db+0x27 sys/arch/amd64/amd64/db_interface.c:394
x86_ipi_handler() at x86_ipi_handler+0xd9 sys/arch/amd64/amd64/ipi.c:106
Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27
acpicpu_idle() at acpicpu_idle+0x457 sys/dev/acpi/acpicpu_x86.c:1224
sched_idle(ffff8000299edff0) at sched_idle+0x391 sys/kern/kern_sched.c:191
end trace frame: 0x0, count: 10
ddb{1}> trace
x86_ipi_db(ffff8000299edff0) at x86_ipi_db+0x27 sys/arch/amd64/amd64/db_interface.c:394
x86_ipi_handler() at x86_ipi_handler+0xd9 sys/arch/amd64/amd64/ipi.c:106
Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27
acpicpu_idle() at acpicpu_idle+0x457 sys/dev/acpi/acpicpu_x86.c:1224
sched_idle(ffff8000299edff0) at sched_idle+0x391 sys/kern/kern_sched.c:191
end trace frame: 0x0, count: -5
---
This report is generated by a bot. It may contain errors.
See https://goo.gl/tpsmEJ for more information about syzbot.
syzbot engineers can be reached at syzk...@googlegroups.com.
syzbot will keep track of this issue. See:
https://goo.gl/tpsmEJ#status for how to communicate with syzbot.
If the report is already addressed, let syzbot know by replying with:
#syz fix: exact-commit-title
If you want to overwrite report's subsystems, reply with:
#syz set subsystems: new-subsystem
(See the list of subsystem names on the web dashboard)
If the report is a duplicate of another one, reply with:
#syz dup: exact-subject-of-another-report
If you want to undo deduplication, reply with:
#syz undup
Reply all
Reply to author
Forward
0 new messages