uvm_fault: rn_delete
0 views
Skip to first unread message
syzbot
Dec 25, 2025, 1:49:20 PM (7 days ago) 12/25/25
to syzkaller-o...@googlegroups.com
Hello,
syzbot found the following issue on:
HEAD commit: b1d076877106 astrix -> asterisk
git tree: openbsd
console output: https://syzkaller.appspot.com/x/log.txt?x=167eab92580000
kernel config: https://syzkaller.appspot.com/x/.config?x=1bc15e68cd2a49e5
dashboard link: https://syzkaller.appspot.com/bug?extid=a5445d1efcde7c47189c
Unfortunately, I don't have any reproducer for this issue yet.
Downloadable assets:
disk image: https://storage.googleapis.com/syzbot-assets/da08e75d3891/disk-b1d07687.raw.xz
bsd.gdb: https://storage.googleapis.com/syzbot-assets/870a6714f10e/bsd-b1d07687.gdb.xz
kernel image: https://storage.googleapis.com/syzbot-assets/d30e3b7e0757/kernel-b1d07687.xz
IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+a5445d...@syzkaller.appspotmail.com
login: uvm_fault(0xffffffff83893690, 0xffff80000b7dd71a, 0, 1) -> e
kernel: page fault trap, code=0
Stopped at rn_delete+0x89: movzbl 0(%r12,%rax,1),%eax
TID PID UID PRFLAGS PFLAGS CPU COMMAND
rn_delete(ffff80002cce95c8,ffff80002cce95d8,ffff8000015a3100,ffff80002cce94f0) at rn_delete+0x89 rn_search sys/net/radix.c:129 [inline]
rn_delete(ffff80002cce95c8,ffff80002cce95d8,ffff8000015a3100,ffff80002cce94f0) at rn_delete+0x89 sys/net/radix.c:922
pipex_unlink_session_locked(ffff80002cce94f0) at pipex_unlink_session_locked+0x136 sys/net/pipex.c:-1
pipex_destroy_all_sessions(ffff8000015a5000) at pipex_destroy_all_sessions+0xd9 pipex_rele_session sys/net/pipex.c:-1 [inline]
pipex_destroy_all_sessions(ffff8000015a5000) at pipex_destroy_all_sessions+0xd9 sys/net/pipex.c:151
pppacclose(637e,41,2000,ffff80002a7bc018) at pppacclose+0x16f sys/net/if_pppx.c:1335
spec_close(ffff80003c95fb90) at spec_close+0x417 sys/kern/spec_vnops.c:-1
VOP_CLOSE(fffffd806bc63be0,41,fffffd8007bfd208,ffff80002a7bc018) at VOP_CLOSE+0x129 sys/kern/vfs_vops.c:156
vn_closefile(fffffd807c2e4268,ffff80002a7bc018) at vn_closefile+0x11d vn_close sys/kern/vfs_vnops.c:292 [inline]
vn_closefile(fffffd807c2e4268,ffff80002a7bc018) at vn_closefile+0x11d sys/kern/vfs_vnops.c:615
fdrop(fffffd807c2e4268,ffff80002a7bc018) at fdrop+0x121 sys/kern/kern_descrip.c:1280
closef(fffffd807c2e4268,ffff80002a7bc018) at closef+0x190 sys/kern/kern_descrip.c:1264
fdfree(ffff80002a7bc018) at fdfree+0x115 sys/kern/kern_descrip.c:1195
exit1(ffff80002a7bc018,0,0,1) at exit1+0x576 sys/kern/kern_exit.c:215
sys_exit(ffff80002a7bc018,ffff80003c95fef0,ffff80003c95fe40) at sys_exit+0x1a sys/kern/kern_exit.c:-1
syscall(ffff80003c95fef0) at syscall+0x962 mi_syscall sys/sys/syscall_mi.h:-1 [inline]
syscall(ffff80003c95fef0) at syscall+0x962 sys/arch/amd64/amd64/trap.c:775
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x7888cd0c2c00, count: 1
https://www.openbsd.org/ddb.html describes the minimum info required in bug
reports. Insufficient info makes it difficult to find and fix bugs.
ddb>
ddb> set $lines = 0
ddb> set $maxwidth = 0
ddb> show panic
*cpu0: uvm_fault(0xffffffff83893690, 0xffff80000b7dd71a, 0, 1) -> e
ddb> trace
rn_delete(ffff80002cce95c8,ffff80002cce95d8,ffff8000015a3100,ffff80002cce94f0) at rn_delete+0x89 rn_search sys/net/radix.c:129 [inline]
rn_delete(ffff80002cce95c8,ffff80002cce95d8,ffff8000015a3100,ffff80002cce94f0) at rn_delete+0x89 sys/net/radix.c:922
pipex_unlink_session_locked(ffff80002cce94f0) at pipex_unlink_session_locked+0x136 sys/net/pipex.c:-1
pipex_destroy_all_sessions(ffff8000015a5000) at pipex_destroy_all_sessions+0xd9 pipex_rele_session sys/net/pipex.c:-1 [inline]
pipex_destroy_all_sessions(ffff8000015a5000) at pipex_destroy_all_sessions+0xd9 sys/net/pipex.c:151
pppacclose(637e,41,2000,ffff80002a7bc018) at pppacclose+0x16f sys/net/if_pppx.c:1335
spec_close(ffff80003c95fb90) at spec_close+0x417 sys/kern/spec_vnops.c:-1
VOP_CLOSE(fffffd806bc63be0,41,fffffd8007bfd208,ffff80002a7bc018) at VOP_CLOSE+0x129 sys/kern/vfs_vops.c:156
vn_closefile(fffffd807c2e4268,ffff80002a7bc018) at vn_closefile+0x11d vn_close sys/kern/vfs_vnops.c:292 [inline]
vn_closefile(fffffd807c2e4268,ffff80002a7bc018) at vn_closefile+0x11d sys/kern/vfs_vnops.c:615
fdrop(fffffd807c2e4268,ffff80002a7bc018) at fdrop+0x121 sys/kern/kern_descrip.c:1280
closef(fffffd807c2e4268,ffff80002a7bc018) at closef+0x190 sys/kern/kern_descrip.c:1264
fdfree(ffff80002a7bc018) at fdfree+0x115 sys/kern/kern_descrip.c:1195
exit1(ffff80002a7bc018,0,0,1) at exit1+0x576 sys/kern/kern_exit.c:215
sys_exit(ffff80002a7bc018,ffff80003c95fef0,ffff80003c95fe40) at sys_exit+0x1a sys/kern/kern_exit.c:-1
syscall(ffff80003c95fef0) at syscall+0x962 mi_syscall sys/sys/syscall_mi.h:-1 [inline]
syscall(ffff80003c95fef0) at syscall+0x962 sys/arch/amd64/amd64/trap.c:775
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x7888cd0c2c00, count: -14
ddb> show registers
rdi 0
rsi 0
rbp 0xffff80003c95fa30
rbx 0x10
rdx 0
rcx 0xffff80002cce94f0
rax 0xffffffffdeaf4152
r8 0xffffffffffffffff
r9 0
r10 0xd241d423b371ab43
r11 0x855852ebfd01f30c
r12 0xffff80002cce95c8
r13 0
r14 0xffff80002cceb6a0
r15 0x4
rip 0xffffffff8111ef49 rn_delete+0x89
cs 0x8
rflags 0x10246 __ALIGN_SIZE+0xf246
rsp 0xffff80003c95f9d0
ss 0x10
rn_delete+0x89: movzbl 0(%r12,%rax,1),%eax
ddb> show proc
PROC (syz-executor) tid=480229 pid=1059 tcnt=0 stat=onproc
flags process=1008<EXITING,SINGLEEXIT> proc=2000<WEXIT>
runpri=32, usrpri=50, slppri=32, nice=20
wchan=0x0, wmesg=, ps_single=0xffff80002a7bc018 scnt=-1 ecnt=1
forw=0xffffffffffffffff, list=0xffff80002cce74e8,0xffff80002a7bc2c0
process=0xffff8000ffff8d98 user=0xffff80003c95a000, vmspace=0xfffffd806c9b42f0
estcpu=36, cpticks=1, pctcpu=0.0, user=0, sys=0, intr=0
ddb> ps
PID TID PPID UID S FLAGS WAIT COMMAND
64126 88869 75892 0 3 0x80 nanoslp syz-executor
64126 280336 75892 0 3 0x4000080 msgwait syz-executor
64126 311257 75892 0 3 0x4000080 msgwait syz-executor
64126 302537 75892 0 3 0x4000080 fsleep syz-executor
84800 157945 81444 0 3 0x80 nanoslp syz-executor
84800 244952 81444 0 3 0x4000080 sbwait syz-executor
84800 386262 81444 0 3 0x4000080 fsleep syz-executor
32797 134747 20302 0 3 0x80 nanoslp syz-executor
32797 212548 20302 0 3 0x4000080 netacc syz-executor
32797 458585 20302 0 3 0x4000080 fsleep syz-executor
98987 79404 61257 0 3 0x80 nanoslp syz-executor
98987 394432 61257 0 3 0x4000080 kqread syz-executor
98987 1996 61257 0 3 0x4000080 fsleep syz-executor
1391 401004 1 0 3 0x100083 ttyopn getty
97978 417996 0 0 3 0x14200 acct acct
61257 170044 37303 0 3 0x82 nanoslp syz-executor
26101 214919 37303 0 3 0x82 nanoslp syz-executor
27282 166724 37303 0 2 0x10000082 syz-executor
79619 148500 37303 0 2 0x2 syz-executor
20302 346104 37303 0 3 0x82 nanoslp syz-executor
81444 434902 37303 0 3 0x82 nanoslp syz-executor
43863 200913 37303 0 2 0x10000082 syz-executor
75892 187660 37303 0 3 0x82 nanoslp syz-executor
37303 185157 45718 0 2 0x2 syz-executor
45718 64531 46082 0 3 0x10008a sigsusp ksh
46082 444208 38186 0 3 0x98 kqread sshd-session
38186 257212 50233 0 3 0x92 kqread sshd-session
50233 424252 1 0 3 0x88 kqread sshd
88740 159448 42789 73 3 0x1100090 kqread syslogd
42789 279549 1 0 3 0x100082 sbwait syslogd
80352 152581 1 0 3 0x100080 kqread resolvd
31557 172481 43185 77 2 0x100012 dhcpleased
50238 6331 43185 77 3 0x100092 kqread dhcpleased
43185 439945 1 0 3 0x80 kqread dhcpleased
18836 212103 0 0 3 0x14200 bored smr
45668 279902 0 0 2 0x14200 zerothread
63616 238633 0 0 3 0x14200 aiodoned aiodoned
98556 69851 0 0 3 0x14200 syncer update
14271 493894 0 0 3 0x14200 cleaner cleaner
54627 479046 0 0 3 0x14200 reaper reaper
758 269673 0 0 3 0x14200 pgdaemon pagedaemon
88983 511503 0 0 3 0x14200 bored viomb
53514 280052 0 0 3 0x40014200 acpi0 acpi0
23270 135882 0 0 3 0x14200 bored softnet0
39653 477033 0 0 3 0x14200 bored systqmp
80421 288762 0 0 3 0x14200 bored systq
68931 470512 0 0 3 0x40014200 tmoslp softclock
63626 113588 0 0 3 0x40014200 idle0
1 81731 0 0 3 0x80082 wait init
0 0 -1 0 3 0x10010200 scheduler swapper
ddb> show all locks
No such command
ddb> show malloc
Type InUse MemUse HighUse Limit Requests Type Lim
devbuf 11047 12139K 12506K 166960K 12928 0
pcb 19 12K 12K 166960K 84 0
rtable 188 8K 9K 166960K 453 0
pf 28 12K 14K 166960K 91 0
ifaddr 33 5K 7K 166960K 76 0
ifgroup 46 2K 2K 166960K 116 0
sysctl 3 1K 9K 166960K 10 0
counters 34 17K 18K 166960K 80 0
ioctlops 0 0K 4K 166960K 126 0
iov 0 0K 16K 166960K 21 0
mount 1 1K 1K 166960K 1 0
log 0 0K 0K 166960K 4 0
vnodes 1468 92K 92K 166960K 1820 0
UFS quota 1 32K 32K 166960K 1 0
UFS mount 5 36K 36K 166960K 5 0
shm 3 5K 9K 166960K 9 0
VM map 2 1K 1K 166960K 2 0
sem 12 0K 0K 166960K 19 0
dirhash 12 2K 2K 166960K 12 0
ACPI 1692 195K 286K 166960K 12470 0
file desc 15 53K 97K 166960K 459 0
sigio 0 0K 0K 166960K 12 0
proc 60 59K 116K 166960K 535 0
subproc 72 4K 4K 166960K 72 0
NFS srvsock 1 0K 0K 166960K 1 0
NFS daemon 1 16K 16K 166960K 1 0
ip_moptions 0 0K 0K 166960K 46 0
in_multi 72 5K 7K 166960K 122 0
ether_multi 1 0K 0K 166960K 5 0
ISOFS mount 1 32K 32K 166960K 1 0
MSDOSFS mount 1 16K 16K 166960K 1 0
ttys 91 413K 413K 166960K 91 0
exec 0 0K 1K 166960K 492 0
fusefs mount 1 32K 32K 166960K 1 0
tdb 3 0K 0K 166960K 3 0
VM swap 8 62K 64K 166960K 10 0
UVM amap 216 158K 188K 166960K 5878 0
UVM aobj 11 2K 4K 166960K 13 0
pinsyscall 36 72K 96K 166960K 1546 0
memdesc 1 4K 4K 166960K 1 0
crypto data 1 1K 1K 166960K 1 0
ip6_options 1 0K 0K 166960K 31 0
NDP 10 0K 1K 166960K 54 0
temp 48 8665K 8738K 166960K 23709 0
kqueue 14 22K 28K 166960K 104 0
SYN cache 2 16K 16K 166960K 2 0
ddb> show all pools
Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle
rtpcb 120 96 0 93 2 0 2 2 0 8 1
rtentry 136 123 0 50 4 0 4 4 0 8 0
unpcb 144 562 0 482 6 0 6 6 0 8 2
syncache 336 6 0 6 1 0 1 1 0 8 1
tcpqe 32 1 0 1 1 0 1 1 0 8 1
tcpcb 736 155 0 149 4 0 4 4 0 8 3
arp 96 19 0 7 1 0 1 1 0 8 0
ipq 40 3 0 1 1 0 1 1 0 8 0
ipqe 40 36 0 34 1 0 1 1 0 8 0
inpcb 328 438 0 426 7 0 7 7 0 8 5
nd6 112 27 0 9 1 0 1 1 0 8 0
kcovpl 48 8 0 0 1 0 1 1 0 8 0
ppxss 1072 42 0 40 1 0 1 1 0 8 0
pfrule 1344 2 0 2 1 0 1 1 0 8 1
art_heap8 4096 1 0 0 1 0 1 1 0 8 0
art_heap4 256 536 0 181 31 0 31 31 0 8 7
art_table 40 537 0 181 5 0 5 5 0 8 0
art_node 32 121 0 57 1 0 1 1 0 8 0
sysvmsgpl 40 4 0 2 1 0 1 1 0 8 0
semupl 112 1 0 1 1 0 1 1 0 8 1
semapl 112 16 0 6 1 0 1 1 0 8 0
shmpl 112 9 0 1 1 0 1 1 0 8 0
dirhash 1024 17 0 0 3 0 3 3 0 8 0
dino2pl 256 2204 0 699 95 0 95 95 0 8 0
ffsino 256 2204 0 699 95 0 95 95 0 8 0
nchpl 144 2883 0 1182 64 0 64 64 0 8 0
rtmask 32 14 0 12 1 0 1 1 0 8 0
vnodes 216 2616 0 0 146 0 146 146 0 8 0
namei 1024 9929 0 9929 2 0 2 2 0 8 2
vmpool 808 1 0 1 1 0 1 1 0 8 1
kstatmem 264 74 0 54 2 0 2 2 0 8 0
scsiplug 72 3 0 3 1 0 1 1 0 8 1
scxspl 216 10955 0 10955 8 0 8 8 1 8 8
plimitpl 152 112 0 95 1 0 1 1 0 8 0
sigapl 424 751 0 708 6 0 6 6 0 8 1
knotepl 120 15762 0 15713 11 0 11 11 0 8 9
kqueuepl 184 150 0 139 2 0 2 2 0 8 1
pipepl 304 150 0 123 3 0 3 3 0 8 0
fdescpl 448 736 0 709 5 0 5 5 0 8 1
filepl 120 4572 0 4291 12 0 12 12 0 8 2
lockfpl 104 263 0 261 2 0 2 2 0 8 1
lockfspl 48 120 0 118 1 0 1 1 0 8 0
sessionpl 144 25 0 17 1 0 1 1 0 8 0
pgrppl 48 40 0 24 1 0 1 1 0 8 0
ucredpl 104 549 0 538 1 0 1 1 0 8 0
zombiepl 144 711 0 708 1 0 1 1 0 8 0
processpl 1152 751 0 708 4 0 4 4 0 8 0
procpl 664 1243 0 1191 6 0 6 6 0 8 1
sockpl 552 1140 0 1044 13 2 11 13 0 8 3
mcl64k 65536 23 0 22 1 0 1 1 0 8 0
mcl9k 9216 1 0 1 1 0 1 1 0 8 1
mcl8k 8192 5 0 5 1 0 1 1 0 8 1
mcl4k 4096 2903 0 2850 13 0 13 13 0 8 6
mcl2k 2048 996 0 993 3 0 3 3 0 8 2
mtagpl 96 47 0 7 1 0 1 1 0 8 0
mbufpl 256 8431 0 8254 14 0 14 14 0 8 1
bufpl 280 4592 0 118 320 0 320 320 0 8 0
anonpl 24 146184 0 143145 48 0 48 48 0 187 19
amapchunkpl 152 19035 0 18613 40 0 40 40 0 158 19
amappl16 200 2945 0 2913 20 8 12 16 0 8 8
amappl15 192 4 0 4 1 0 1 1 0 8 1
amappl14 184 12 0 12 1 0 1 1 0 8 1
amappl13 176 401 0 400 1 0 1 1 0 8 0
amappl12 168 1084 0 1048 2 0 2 2 0 8 0
amappl11 160 6 0 6 1 0 1 1 0 8 1
amappl10 152 43 0 33 1 0 1 1 0 8 0
amappl9 144 251 0 251 1 0 1 1 0 8 1
amappl8 136 30 0 29 1 0 1 1 0 8 0
amappl7 128 124 0 123 1 0 1 1 0 8 0
amappl6 120 278 0 266 1 0 1 1 0 8 0
amappl5 112 75 0 67 1 0 1 1 0 8 0
amappl4 104 395 0 371 1 0 1 1 0 8 0
amappl3 96 3387 0 3294 4 0 4 4 0 8 0
amappl2 88 556 0 502 2 0 2 2 0 8 0
amappl1 80 10925 0 10395 14 0 14 14 0 8 1
amappl 88 5112 0 4967 5 0 5 5 0 92 0
uvmvnodes 80 106 0 0 3 0 3 3 0 8 0
dma4096 4096 1 0 1 1 0 1 1 0 8 1
dma1024 1024 2 0 1 1 0 1 1 0 8 0
dma256 256 6 0 6 1 0 1 1 0 8 1
dma128 128 255 0 255 1 0 1 1 0 8 1
dma64 64 6 0 6 1 0 1 1 0 8 1
dma32 32 7 0 7 1 0 1 1 0 8 1
dma16 16 18 0 17 1 0 1 1 0 8 0
aobjpl 72 12 0 2 1 0 1 1 0 8 0
uaddrrnd 24 736 0 709 1 0 1 1 0 8 0
uaddrbest 32 2 0 0 1 0 1 1 0 8 0
uaddr 24 736 0 709 1 0 1 1 0 8 0
vmmpekpl 168 7558 0 7528 2 0 2 2 0 8 0
vmmpepl 168 54820 0 53134 94 0 94 94 0 357 12
vmsppl 368 735 0 709 4 0 4 4 0 8 1
rwobjpl 40 18114 0 17174 13 0 13 13 0 8 1
pdppl 4096 1480 0 1420 98 32 66 82 0 8 6
pvpl 32 360690 0 352467 137 0 137 137 0 265 41
pmappl 216 736 0 710 3 0 3 3 0 8 0
extentpl 40 45 0 27 1 0 1 1 0 8 0
phpool 112 375 0 32 10 0 10 10 0 8 0
ddb> machine ddbcpu 0
No such command
ddb> trace
rn_delete(ffff80002cce95c8,ffff80002cce95d8,ffff8000015a3100,ffff80002cce94f0) at rn_delete+0x89 rn_search sys/net/radix.c:129 [inline]
rn_delete(ffff80002cce95c8,ffff80002cce95d8,ffff8000015a3100,ffff80002cce94f0) at rn_delete+0x89 sys/net/radix.c:922
pipex_unlink_session_locked(ffff80002cce94f0) at pipex_unlink_session_locked+0x136 sys/net/pipex.c:-1
pipex_destroy_all_sessions(ffff8000015a5000) at pipex_destroy_all_sessions+0xd9 pipex_rele_session sys/net/pipex.c:-1 [inline]
pipex_destroy_all_sessions(ffff8000015a5000) at pipex_destroy_all_sessions+0xd9 sys/net/pipex.c:151
pppacclose(637e,41,2000,ffff80002a7bc018) at pppacclose+0x16f sys/net/if_pppx.c:1335
spec_close(ffff80003c95fb90) at spec_close+0x417 sys/kern/spec_vnops.c:-1
VOP_CLOSE(fffffd806bc63be0,41,fffffd8007bfd208,ffff80002a7bc018) at VOP_CLOSE+0x129 sys/kern/vfs_vops.c:156
vn_closefile(fffffd807c2e4268,ffff80002a7bc018) at vn_closefile+0x11d vn_close sys/kern/vfs_vnops.c:292 [inline]
vn_closefile(fffffd807c2e4268,ffff80002a7bc018) at vn_closefile+0x11d sys/kern/vfs_vnops.c:615
fdrop(fffffd807c2e4268,ffff80002a7bc018) at fdrop+0x121 sys/kern/kern_descrip.c:1280
closef(fffffd807c2e4268,ffff80002a7bc018) at closef+0x190 sys/kern/kern_descrip.c:1264
fdfree(ffff80002a7bc018) at fdfree+0x115 sys/kern/kern_descrip.c:1195
exit1(ffff80002a7bc018,0,0,1) at exit1+0x576 sys/kern/kern_exit.c:215
sys_exit(ffff80002a7bc018,ffff80003c95fef0,ffff80003c95fe40) at sys_exit+0x1a sys/kern/kern_exit.c:-1
syscall(ffff80003c95fef0) at syscall+0x962 mi_syscall sys/sys/syscall_mi.h:-1 [inline]
syscall(ffff80003c95fef0) at syscall+0x962 sys/arch/amd64/amd64/trap.c:775
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x7888cd0c2c00, count: -14
ddb> machine ddbcpu 1
No such command
ddb> trace
rn_delete(ffff80002cce95c8,ffff80002cce95d8,ffff8000015a3100,ffff80002cce94f0) at rn_delete+0x89 rn_search sys/net/radix.c:129 [inline]
rn_delete(ffff80002cce95c8,ffff80002cce95d8,ffff8000015a3100,ffff80002cce94f0) at rn_delete+0x89 sys/net/radix.c:922
pipex_unlink_session_locked(ffff80002cce94f0) at pipex_unlink_session_locked+0x136 sys/net/pipex.c:-1
pipex_destroy_all_sessions(ffff8000015a5000) at pipex_destroy_all_sessions+0xd9 pipex_rele_session sys/net/pipex.c:-1 [inline]
pipex_destroy_all_sessions(ffff8000015a5000) at pipex_destroy_all_sessions+0xd9 sys/net/pipex.c:151
pppacclose(637e,41,2000,ffff80002a7bc018) at pppacclose+0x16f sys/net/if_pppx.c:1335
spec_close(ffff80003c95fb90) at spec_close+0x417 sys/kern/spec_vnops.c:-1
VOP_CLOSE(fffffd806bc63be0,41,fffffd8007bfd208,ffff80002a7bc018) at VOP_CLOSE+0x129 sys/kern/vfs_vops.c:156
vn_closefile(fffffd807c2e4268,ffff80002a7bc018) at vn_closefile+0x11d vn_close sys/kern/vfs_vnops.c:292 [inline]
vn_closefile(fffffd807c2e4268,ffff80002a7bc018) at vn_closefile+0x11d sys/kern/vfs_vnops.c:615
fdrop(fffffd807c2e4268,ffff80002a7bc018) at fdrop+0x121 sys/kern/kern_descrip.c:1280
closef(fffffd807c2e4268,ffff80002a7bc018) at closef+0x190 sys/kern/kern_descrip.c:1264
fdfree(ffff80002a7bc018) at fdfree+0x115 sys/kern/kern_descrip.c:1195
exit1(ffff80002a7bc018,0,0,1) at exit1+0x576 sys/kern/kern_exit.c:215
sys_exit(ffff80002a7bc018,ffff80003c95fef0,ffff80003c95fe40) at sys_exit+0x1a sys/kern/kern_exit.c:-1
syscall(ffff80003c95fef0) at syscall+0x962 mi_syscall sys/sys/syscall_mi.h:-1 [inline]
syscall(ffff80003c95fef0) at syscall+0x962 sys/arch/amd64/amd64/trap.c:775
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x7888cd0c2c00, count: -14
---
This report is generated by a bot. It may contain errors.
See https://goo.gl/tpsmEJ for more information about syzbot.
syzbot engineers can be reached at syzk...@googlegroups.com.
syzbot will keep track of this issue. See:
https://goo.gl/tpsmEJ#status for how to communicate with syzbot.
If the report is already addressed, let syzbot know by replying with:
#syz fix: exact-commit-title
If you want to overwrite report's subsystems, reply with:
#syz set subsystems: new-subsystem
(See the list of subsystem names on the web dashboard)
If the report is a duplicate of another one, reply with:
#syz dup: exact-subject-of-another-report
If you want to undo deduplication, reply with:
#syz undup
syzbot found the following issue on:
HEAD commit: b1d076877106 astrix -> asterisk
git tree: openbsd
console output: https://syzkaller.appspot.com/x/log.txt?x=167eab92580000
kernel config: https://syzkaller.appspot.com/x/.config?x=1bc15e68cd2a49e5
dashboard link: https://syzkaller.appspot.com/bug?extid=a5445d1efcde7c47189c
Unfortunately, I don't have any reproducer for this issue yet.
Downloadable assets:
disk image: https://storage.googleapis.com/syzbot-assets/da08e75d3891/disk-b1d07687.raw.xz
bsd.gdb: https://storage.googleapis.com/syzbot-assets/870a6714f10e/bsd-b1d07687.gdb.xz
kernel image: https://storage.googleapis.com/syzbot-assets/d30e3b7e0757/kernel-b1d07687.xz
IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+a5445d...@syzkaller.appspotmail.com
login: uvm_fault(0xffffffff83893690, 0xffff80000b7dd71a, 0, 1) -> e
kernel: page fault trap, code=0
Stopped at rn_delete+0x89: movzbl 0(%r12,%rax,1),%eax
TID PID UID PRFLAGS PFLAGS CPU COMMAND
rn_delete(ffff80002cce95c8,ffff80002cce95d8,ffff8000015a3100,ffff80002cce94f0) at rn_delete+0x89 rn_search sys/net/radix.c:129 [inline]
rn_delete(ffff80002cce95c8,ffff80002cce95d8,ffff8000015a3100,ffff80002cce94f0) at rn_delete+0x89 sys/net/radix.c:922
pipex_unlink_session_locked(ffff80002cce94f0) at pipex_unlink_session_locked+0x136 sys/net/pipex.c:-1
pipex_destroy_all_sessions(ffff8000015a5000) at pipex_destroy_all_sessions+0xd9 pipex_rele_session sys/net/pipex.c:-1 [inline]
pipex_destroy_all_sessions(ffff8000015a5000) at pipex_destroy_all_sessions+0xd9 sys/net/pipex.c:151
pppacclose(637e,41,2000,ffff80002a7bc018) at pppacclose+0x16f sys/net/if_pppx.c:1335
spec_close(ffff80003c95fb90) at spec_close+0x417 sys/kern/spec_vnops.c:-1
VOP_CLOSE(fffffd806bc63be0,41,fffffd8007bfd208,ffff80002a7bc018) at VOP_CLOSE+0x129 sys/kern/vfs_vops.c:156
vn_closefile(fffffd807c2e4268,ffff80002a7bc018) at vn_closefile+0x11d vn_close sys/kern/vfs_vnops.c:292 [inline]
vn_closefile(fffffd807c2e4268,ffff80002a7bc018) at vn_closefile+0x11d sys/kern/vfs_vnops.c:615
fdrop(fffffd807c2e4268,ffff80002a7bc018) at fdrop+0x121 sys/kern/kern_descrip.c:1280
closef(fffffd807c2e4268,ffff80002a7bc018) at closef+0x190 sys/kern/kern_descrip.c:1264
fdfree(ffff80002a7bc018) at fdfree+0x115 sys/kern/kern_descrip.c:1195
exit1(ffff80002a7bc018,0,0,1) at exit1+0x576 sys/kern/kern_exit.c:215
sys_exit(ffff80002a7bc018,ffff80003c95fef0,ffff80003c95fe40) at sys_exit+0x1a sys/kern/kern_exit.c:-1
syscall(ffff80003c95fef0) at syscall+0x962 mi_syscall sys/sys/syscall_mi.h:-1 [inline]
syscall(ffff80003c95fef0) at syscall+0x962 sys/arch/amd64/amd64/trap.c:775
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x7888cd0c2c00, count: 1
https://www.openbsd.org/ddb.html describes the minimum info required in bug
reports. Insufficient info makes it difficult to find and fix bugs.
ddb>
ddb> set $lines = 0
ddb> set $maxwidth = 0
ddb> show panic
*cpu0: uvm_fault(0xffffffff83893690, 0xffff80000b7dd71a, 0, 1) -> e
ddb> trace
rn_delete(ffff80002cce95c8,ffff80002cce95d8,ffff8000015a3100,ffff80002cce94f0) at rn_delete+0x89 rn_search sys/net/radix.c:129 [inline]
rn_delete(ffff80002cce95c8,ffff80002cce95d8,ffff8000015a3100,ffff80002cce94f0) at rn_delete+0x89 sys/net/radix.c:922
pipex_unlink_session_locked(ffff80002cce94f0) at pipex_unlink_session_locked+0x136 sys/net/pipex.c:-1
pipex_destroy_all_sessions(ffff8000015a5000) at pipex_destroy_all_sessions+0xd9 pipex_rele_session sys/net/pipex.c:-1 [inline]
pipex_destroy_all_sessions(ffff8000015a5000) at pipex_destroy_all_sessions+0xd9 sys/net/pipex.c:151
pppacclose(637e,41,2000,ffff80002a7bc018) at pppacclose+0x16f sys/net/if_pppx.c:1335
spec_close(ffff80003c95fb90) at spec_close+0x417 sys/kern/spec_vnops.c:-1
VOP_CLOSE(fffffd806bc63be0,41,fffffd8007bfd208,ffff80002a7bc018) at VOP_CLOSE+0x129 sys/kern/vfs_vops.c:156
vn_closefile(fffffd807c2e4268,ffff80002a7bc018) at vn_closefile+0x11d vn_close sys/kern/vfs_vnops.c:292 [inline]
vn_closefile(fffffd807c2e4268,ffff80002a7bc018) at vn_closefile+0x11d sys/kern/vfs_vnops.c:615
fdrop(fffffd807c2e4268,ffff80002a7bc018) at fdrop+0x121 sys/kern/kern_descrip.c:1280
closef(fffffd807c2e4268,ffff80002a7bc018) at closef+0x190 sys/kern/kern_descrip.c:1264
fdfree(ffff80002a7bc018) at fdfree+0x115 sys/kern/kern_descrip.c:1195
exit1(ffff80002a7bc018,0,0,1) at exit1+0x576 sys/kern/kern_exit.c:215
sys_exit(ffff80002a7bc018,ffff80003c95fef0,ffff80003c95fe40) at sys_exit+0x1a sys/kern/kern_exit.c:-1
syscall(ffff80003c95fef0) at syscall+0x962 mi_syscall sys/sys/syscall_mi.h:-1 [inline]
syscall(ffff80003c95fef0) at syscall+0x962 sys/arch/amd64/amd64/trap.c:775
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x7888cd0c2c00, count: -14
ddb> show registers
rdi 0
rsi 0
rbp 0xffff80003c95fa30
rbx 0x10
rdx 0
rcx 0xffff80002cce94f0
rax 0xffffffffdeaf4152
r8 0xffffffffffffffff
r9 0
r10 0xd241d423b371ab43
r11 0x855852ebfd01f30c
r12 0xffff80002cce95c8
r13 0
r14 0xffff80002cceb6a0
r15 0x4
rip 0xffffffff8111ef49 rn_delete+0x89
cs 0x8
rflags 0x10246 __ALIGN_SIZE+0xf246
rsp 0xffff80003c95f9d0
ss 0x10
rn_delete+0x89: movzbl 0(%r12,%rax,1),%eax
ddb> show proc
PROC (syz-executor) tid=480229 pid=1059 tcnt=0 stat=onproc
flags process=1008<EXITING,SINGLEEXIT> proc=2000<WEXIT>
runpri=32, usrpri=50, slppri=32, nice=20
wchan=0x0, wmesg=, ps_single=0xffff80002a7bc018 scnt=-1 ecnt=1
forw=0xffffffffffffffff, list=0xffff80002cce74e8,0xffff80002a7bc2c0
process=0xffff8000ffff8d98 user=0xffff80003c95a000, vmspace=0xfffffd806c9b42f0
estcpu=36, cpticks=1, pctcpu=0.0, user=0, sys=0, intr=0
ddb> ps
PID TID PPID UID S FLAGS WAIT COMMAND
64126 88869 75892 0 3 0x80 nanoslp syz-executor
64126 280336 75892 0 3 0x4000080 msgwait syz-executor
64126 311257 75892 0 3 0x4000080 msgwait syz-executor
64126 302537 75892 0 3 0x4000080 fsleep syz-executor
84800 157945 81444 0 3 0x80 nanoslp syz-executor
84800 244952 81444 0 3 0x4000080 sbwait syz-executor
84800 386262 81444 0 3 0x4000080 fsleep syz-executor
32797 134747 20302 0 3 0x80 nanoslp syz-executor
32797 212548 20302 0 3 0x4000080 netacc syz-executor
32797 458585 20302 0 3 0x4000080 fsleep syz-executor
98987 79404 61257 0 3 0x80 nanoslp syz-executor
98987 394432 61257 0 3 0x4000080 kqread syz-executor
98987 1996 61257 0 3 0x4000080 fsleep syz-executor
1391 401004 1 0 3 0x100083 ttyopn getty
97978 417996 0 0 3 0x14200 acct acct
61257 170044 37303 0 3 0x82 nanoslp syz-executor
26101 214919 37303 0 3 0x82 nanoslp syz-executor
27282 166724 37303 0 2 0x10000082 syz-executor
79619 148500 37303 0 2 0x2 syz-executor
20302 346104 37303 0 3 0x82 nanoslp syz-executor
81444 434902 37303 0 3 0x82 nanoslp syz-executor
43863 200913 37303 0 2 0x10000082 syz-executor
75892 187660 37303 0 3 0x82 nanoslp syz-executor
37303 185157 45718 0 2 0x2 syz-executor
45718 64531 46082 0 3 0x10008a sigsusp ksh
46082 444208 38186 0 3 0x98 kqread sshd-session
38186 257212 50233 0 3 0x92 kqread sshd-session
50233 424252 1 0 3 0x88 kqread sshd
88740 159448 42789 73 3 0x1100090 kqread syslogd
42789 279549 1 0 3 0x100082 sbwait syslogd
80352 152581 1 0 3 0x100080 kqread resolvd
31557 172481 43185 77 2 0x100012 dhcpleased
50238 6331 43185 77 3 0x100092 kqread dhcpleased
43185 439945 1 0 3 0x80 kqread dhcpleased
18836 212103 0 0 3 0x14200 bored smr
45668 279902 0 0 2 0x14200 zerothread
63616 238633 0 0 3 0x14200 aiodoned aiodoned
98556 69851 0 0 3 0x14200 syncer update
14271 493894 0 0 3 0x14200 cleaner cleaner
54627 479046 0 0 3 0x14200 reaper reaper
758 269673 0 0 3 0x14200 pgdaemon pagedaemon
88983 511503 0 0 3 0x14200 bored viomb
53514 280052 0 0 3 0x40014200 acpi0 acpi0
23270 135882 0 0 3 0x14200 bored softnet0
39653 477033 0 0 3 0x14200 bored systqmp
80421 288762 0 0 3 0x14200 bored systq
68931 470512 0 0 3 0x40014200 tmoslp softclock
63626 113588 0 0 3 0x40014200 idle0
1 81731 0 0 3 0x80082 wait init
0 0 -1 0 3 0x10010200 scheduler swapper
ddb> show all locks
No such command
ddb> show malloc
Type InUse MemUse HighUse Limit Requests Type Lim
devbuf 11047 12139K 12506K 166960K 12928 0
pcb 19 12K 12K 166960K 84 0
rtable 188 8K 9K 166960K 453 0
pf 28 12K 14K 166960K 91 0
ifaddr 33 5K 7K 166960K 76 0
ifgroup 46 2K 2K 166960K 116 0
sysctl 3 1K 9K 166960K 10 0
counters 34 17K 18K 166960K 80 0
ioctlops 0 0K 4K 166960K 126 0
iov 0 0K 16K 166960K 21 0
mount 1 1K 1K 166960K 1 0
log 0 0K 0K 166960K 4 0
vnodes 1468 92K 92K 166960K 1820 0
UFS quota 1 32K 32K 166960K 1 0
UFS mount 5 36K 36K 166960K 5 0
shm 3 5K 9K 166960K 9 0
VM map 2 1K 1K 166960K 2 0
sem 12 0K 0K 166960K 19 0
dirhash 12 2K 2K 166960K 12 0
ACPI 1692 195K 286K 166960K 12470 0
file desc 15 53K 97K 166960K 459 0
sigio 0 0K 0K 166960K 12 0
proc 60 59K 116K 166960K 535 0
subproc 72 4K 4K 166960K 72 0
NFS srvsock 1 0K 0K 166960K 1 0
NFS daemon 1 16K 16K 166960K 1 0
ip_moptions 0 0K 0K 166960K 46 0
in_multi 72 5K 7K 166960K 122 0
ether_multi 1 0K 0K 166960K 5 0
ISOFS mount 1 32K 32K 166960K 1 0
MSDOSFS mount 1 16K 16K 166960K 1 0
ttys 91 413K 413K 166960K 91 0
exec 0 0K 1K 166960K 492 0
fusefs mount 1 32K 32K 166960K 1 0
tdb 3 0K 0K 166960K 3 0
VM swap 8 62K 64K 166960K 10 0
UVM amap 216 158K 188K 166960K 5878 0
UVM aobj 11 2K 4K 166960K 13 0
pinsyscall 36 72K 96K 166960K 1546 0
memdesc 1 4K 4K 166960K 1 0
crypto data 1 1K 1K 166960K 1 0
ip6_options 1 0K 0K 166960K 31 0
NDP 10 0K 1K 166960K 54 0
temp 48 8665K 8738K 166960K 23709 0
kqueue 14 22K 28K 166960K 104 0
SYN cache 2 16K 16K 166960K 2 0
ddb> show all pools
Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle
rtpcb 120 96 0 93 2 0 2 2 0 8 1
rtentry 136 123 0 50 4 0 4 4 0 8 0
unpcb 144 562 0 482 6 0 6 6 0 8 2
syncache 336 6 0 6 1 0 1 1 0 8 1
tcpqe 32 1 0 1 1 0 1 1 0 8 1
tcpcb 736 155 0 149 4 0 4 4 0 8 3
arp 96 19 0 7 1 0 1 1 0 8 0
ipq 40 3 0 1 1 0 1 1 0 8 0
ipqe 40 36 0 34 1 0 1 1 0 8 0
inpcb 328 438 0 426 7 0 7 7 0 8 5
nd6 112 27 0 9 1 0 1 1 0 8 0
kcovpl 48 8 0 0 1 0 1 1 0 8 0
ppxss 1072 42 0 40 1 0 1 1 0 8 0
pfrule 1344 2 0 2 1 0 1 1 0 8 1
art_heap8 4096 1 0 0 1 0 1 1 0 8 0
art_heap4 256 536 0 181 31 0 31 31 0 8 7
art_table 40 537 0 181 5 0 5 5 0 8 0
art_node 32 121 0 57 1 0 1 1 0 8 0
sysvmsgpl 40 4 0 2 1 0 1 1 0 8 0
semupl 112 1 0 1 1 0 1 1 0 8 1
semapl 112 16 0 6 1 0 1 1 0 8 0
shmpl 112 9 0 1 1 0 1 1 0 8 0
dirhash 1024 17 0 0 3 0 3 3 0 8 0
dino2pl 256 2204 0 699 95 0 95 95 0 8 0
ffsino 256 2204 0 699 95 0 95 95 0 8 0
nchpl 144 2883 0 1182 64 0 64 64 0 8 0
rtmask 32 14 0 12 1 0 1 1 0 8 0
vnodes 216 2616 0 0 146 0 146 146 0 8 0
namei 1024 9929 0 9929 2 0 2 2 0 8 2
vmpool 808 1 0 1 1 0 1 1 0 8 1
kstatmem 264 74 0 54 2 0 2 2 0 8 0
scsiplug 72 3 0 3 1 0 1 1 0 8 1
scxspl 216 10955 0 10955 8 0 8 8 1 8 8
plimitpl 152 112 0 95 1 0 1 1 0 8 0
sigapl 424 751 0 708 6 0 6 6 0 8 1
knotepl 120 15762 0 15713 11 0 11 11 0 8 9
kqueuepl 184 150 0 139 2 0 2 2 0 8 1
pipepl 304 150 0 123 3 0 3 3 0 8 0
fdescpl 448 736 0 709 5 0 5 5 0 8 1
filepl 120 4572 0 4291 12 0 12 12 0 8 2
lockfpl 104 263 0 261 2 0 2 2 0 8 1
lockfspl 48 120 0 118 1 0 1 1 0 8 0
sessionpl 144 25 0 17 1 0 1 1 0 8 0
pgrppl 48 40 0 24 1 0 1 1 0 8 0
ucredpl 104 549 0 538 1 0 1 1 0 8 0
zombiepl 144 711 0 708 1 0 1 1 0 8 0
processpl 1152 751 0 708 4 0 4 4 0 8 0
procpl 664 1243 0 1191 6 0 6 6 0 8 1
sockpl 552 1140 0 1044 13 2 11 13 0 8 3
mcl64k 65536 23 0 22 1 0 1 1 0 8 0
mcl9k 9216 1 0 1 1 0 1 1 0 8 1
mcl8k 8192 5 0 5 1 0 1 1 0 8 1
mcl4k 4096 2903 0 2850 13 0 13 13 0 8 6
mcl2k 2048 996 0 993 3 0 3 3 0 8 2
mtagpl 96 47 0 7 1 0 1 1 0 8 0
mbufpl 256 8431 0 8254 14 0 14 14 0 8 1
bufpl 280 4592 0 118 320 0 320 320 0 8 0
anonpl 24 146184 0 143145 48 0 48 48 0 187 19
amapchunkpl 152 19035 0 18613 40 0 40 40 0 158 19
amappl16 200 2945 0 2913 20 8 12 16 0 8 8
amappl15 192 4 0 4 1 0 1 1 0 8 1
amappl14 184 12 0 12 1 0 1 1 0 8 1
amappl13 176 401 0 400 1 0 1 1 0 8 0
amappl12 168 1084 0 1048 2 0 2 2 0 8 0
amappl11 160 6 0 6 1 0 1 1 0 8 1
amappl10 152 43 0 33 1 0 1 1 0 8 0
amappl9 144 251 0 251 1 0 1 1 0 8 1
amappl8 136 30 0 29 1 0 1 1 0 8 0
amappl7 128 124 0 123 1 0 1 1 0 8 0
amappl6 120 278 0 266 1 0 1 1 0 8 0
amappl5 112 75 0 67 1 0 1 1 0 8 0
amappl4 104 395 0 371 1 0 1 1 0 8 0
amappl3 96 3387 0 3294 4 0 4 4 0 8 0
amappl2 88 556 0 502 2 0 2 2 0 8 0
amappl1 80 10925 0 10395 14 0 14 14 0 8 1
amappl 88 5112 0 4967 5 0 5 5 0 92 0
uvmvnodes 80 106 0 0 3 0 3 3 0 8 0
dma4096 4096 1 0 1 1 0 1 1 0 8 1
dma1024 1024 2 0 1 1 0 1 1 0 8 0
dma256 256 6 0 6 1 0 1 1 0 8 1
dma128 128 255 0 255 1 0 1 1 0 8 1
dma64 64 6 0 6 1 0 1 1 0 8 1
dma32 32 7 0 7 1 0 1 1 0 8 1
dma16 16 18 0 17 1 0 1 1 0 8 0
aobjpl 72 12 0 2 1 0 1 1 0 8 0
uaddrrnd 24 736 0 709 1 0 1 1 0 8 0
uaddrbest 32 2 0 0 1 0 1 1 0 8 0
uaddr 24 736 0 709 1 0 1 1 0 8 0
vmmpekpl 168 7558 0 7528 2 0 2 2 0 8 0
vmmpepl 168 54820 0 53134 94 0 94 94 0 357 12
vmsppl 368 735 0 709 4 0 4 4 0 8 1
rwobjpl 40 18114 0 17174 13 0 13 13 0 8 1
pdppl 4096 1480 0 1420 98 32 66 82 0 8 6
pvpl 32 360690 0 352467 137 0 137 137 0 265 41
pmappl 216 736 0 710 3 0 3 3 0 8 0
extentpl 40 45 0 27 1 0 1 1 0 8 0
phpool 112 375 0 32 10 0 10 10 0 8 0
ddb> machine ddbcpu 0
No such command
ddb> trace
rn_delete(ffff80002cce95c8,ffff80002cce95d8,ffff8000015a3100,ffff80002cce94f0) at rn_delete+0x89 rn_search sys/net/radix.c:129 [inline]
rn_delete(ffff80002cce95c8,ffff80002cce95d8,ffff8000015a3100,ffff80002cce94f0) at rn_delete+0x89 sys/net/radix.c:922
pipex_unlink_session_locked(ffff80002cce94f0) at pipex_unlink_session_locked+0x136 sys/net/pipex.c:-1
pipex_destroy_all_sessions(ffff8000015a5000) at pipex_destroy_all_sessions+0xd9 pipex_rele_session sys/net/pipex.c:-1 [inline]
pipex_destroy_all_sessions(ffff8000015a5000) at pipex_destroy_all_sessions+0xd9 sys/net/pipex.c:151
pppacclose(637e,41,2000,ffff80002a7bc018) at pppacclose+0x16f sys/net/if_pppx.c:1335
spec_close(ffff80003c95fb90) at spec_close+0x417 sys/kern/spec_vnops.c:-1
VOP_CLOSE(fffffd806bc63be0,41,fffffd8007bfd208,ffff80002a7bc018) at VOP_CLOSE+0x129 sys/kern/vfs_vops.c:156
vn_closefile(fffffd807c2e4268,ffff80002a7bc018) at vn_closefile+0x11d vn_close sys/kern/vfs_vnops.c:292 [inline]
vn_closefile(fffffd807c2e4268,ffff80002a7bc018) at vn_closefile+0x11d sys/kern/vfs_vnops.c:615
fdrop(fffffd807c2e4268,ffff80002a7bc018) at fdrop+0x121 sys/kern/kern_descrip.c:1280
closef(fffffd807c2e4268,ffff80002a7bc018) at closef+0x190 sys/kern/kern_descrip.c:1264
fdfree(ffff80002a7bc018) at fdfree+0x115 sys/kern/kern_descrip.c:1195
exit1(ffff80002a7bc018,0,0,1) at exit1+0x576 sys/kern/kern_exit.c:215
sys_exit(ffff80002a7bc018,ffff80003c95fef0,ffff80003c95fe40) at sys_exit+0x1a sys/kern/kern_exit.c:-1
syscall(ffff80003c95fef0) at syscall+0x962 mi_syscall sys/sys/syscall_mi.h:-1 [inline]
syscall(ffff80003c95fef0) at syscall+0x962 sys/arch/amd64/amd64/trap.c:775
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x7888cd0c2c00, count: -14
ddb> machine ddbcpu 1
No such command
ddb> trace
rn_delete(ffff80002cce95c8,ffff80002cce95d8,ffff8000015a3100,ffff80002cce94f0) at rn_delete+0x89 rn_search sys/net/radix.c:129 [inline]
rn_delete(ffff80002cce95c8,ffff80002cce95d8,ffff8000015a3100,ffff80002cce94f0) at rn_delete+0x89 sys/net/radix.c:922
pipex_unlink_session_locked(ffff80002cce94f0) at pipex_unlink_session_locked+0x136 sys/net/pipex.c:-1
pipex_destroy_all_sessions(ffff8000015a5000) at pipex_destroy_all_sessions+0xd9 pipex_rele_session sys/net/pipex.c:-1 [inline]
pipex_destroy_all_sessions(ffff8000015a5000) at pipex_destroy_all_sessions+0xd9 sys/net/pipex.c:151
pppacclose(637e,41,2000,ffff80002a7bc018) at pppacclose+0x16f sys/net/if_pppx.c:1335
spec_close(ffff80003c95fb90) at spec_close+0x417 sys/kern/spec_vnops.c:-1
VOP_CLOSE(fffffd806bc63be0,41,fffffd8007bfd208,ffff80002a7bc018) at VOP_CLOSE+0x129 sys/kern/vfs_vops.c:156
vn_closefile(fffffd807c2e4268,ffff80002a7bc018) at vn_closefile+0x11d vn_close sys/kern/vfs_vnops.c:292 [inline]
vn_closefile(fffffd807c2e4268,ffff80002a7bc018) at vn_closefile+0x11d sys/kern/vfs_vnops.c:615
fdrop(fffffd807c2e4268,ffff80002a7bc018) at fdrop+0x121 sys/kern/kern_descrip.c:1280
closef(fffffd807c2e4268,ffff80002a7bc018) at closef+0x190 sys/kern/kern_descrip.c:1264
fdfree(ffff80002a7bc018) at fdfree+0x115 sys/kern/kern_descrip.c:1195
exit1(ffff80002a7bc018,0,0,1) at exit1+0x576 sys/kern/kern_exit.c:215
sys_exit(ffff80002a7bc018,ffff80003c95fef0,ffff80003c95fe40) at sys_exit+0x1a sys/kern/kern_exit.c:-1
syscall(ffff80003c95fef0) at syscall+0x962 mi_syscall sys/sys/syscall_mi.h:-1 [inline]
syscall(ffff80003c95fef0) at syscall+0x962 sys/arch/amd64/amd64/trap.c:775
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x7888cd0c2c00, count: -14
---
This report is generated by a bot. It may contain errors.
See https://goo.gl/tpsmEJ for more information about syzbot.
syzbot engineers can be reached at syzk...@googlegroups.com.
syzbot will keep track of this issue. See:
https://goo.gl/tpsmEJ#status for how to communicate with syzbot.
If the report is already addressed, let syzbot know by replying with:
#syz fix: exact-commit-title
If you want to overwrite report's subsystems, reply with:
#syz set subsystems: new-subsystem
(See the list of subsystem names on the web dashboard)
If the report is a duplicate of another one, reply with:
#syz dup: exact-subject-of-another-report
If you want to undo deduplication, reply with:
#syz undup
Reply all
Reply to author
Forward
0 new messages