syzbot


assert failed: l->l_stat == LSONPROC

Status: fixed on 2020/03/08 03:48
Reported-by: syzbot+02bf066c30f812b14f25@syzkaller.appspotmail.com
Fix commit: f61617cee78c exit1(): remove from the radix tree before setting zombie status, as radix_tree_remove_node() can block on locks when freeing.
First crash: 1544d, last: 1530d
Duplicate bugs (1)
duplicates (1):
Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
netbsd test error: assert failed: l->l_stat == LSONPROC 1 1539d 1539d 0/3 closed as dup on 2020/02/26 06:24

Sample crash report:
[ 152.1446860] panic: kernel diagnostic assertion "l->l_stat == LSONPROC" failed: file "/syzkaller/managers/netbsd/kernel/sys/kern/kern_sleepq.c", line 221 
[ 152.1546684] cpu1: Begin traceback...
[ 152.1947380] vpanic() at netbsd:vpanic+0x241 sys/kern/subr_prf.c:336
[ 152.2949027] _GLOBAL__sub_D_65535_0_cpu_configure() at netbsd:_GLOBAL__sub_D_65535_0_cpu_configure
[ 152.3950614] sleepq_enqueue() at netbsd:sleepq_enqueue+0x1c9 sys/kern/kern_sleepq.c:221
[ 152.4952243] turnstile_block() at netbsd:turnstile_block+0x249 x86_curlwp sys/arch/amd64/compile/obj/GENERIC_SYZKALLER/./machine/cpu.h:68 [inline]
[ 152.4952243] turnstile_block() at netbsd:turnstile_block+0x249 KPREEMPT_DISABLE sys/sys/lwp.h:525 [inline]
[ 152.4952243] turnstile_block() at netbsd:turnstile_block+0x249 sys/kern/kern_turnstile.c:438
[ 152.5953884] mutex_enter() at netbsd:mutex_enter+0x22f sys/kern/kern_mutex.c:692
[ 152.6855364] pool_put() at netbsd:pool_put+0x86 pool_put_quarantine sys/kern/subr_pool.c:2970 [inline]
[ 152.6855364] pool_put() at netbsd:pool_put+0x86 sys/kern/subr_pool.c:1306
[ 152.7856985] radix_tree_remove_node() at netbsd:radix_tree_remove_node+0x2a4 sys/lib/libkern/../../../common/lib/libc/gen/radixtree.c:694
[ 152.8858613] exit1() at netbsd:exit1+0x13de sys/kern/kern_exit.c:571
[ 152.9760070] sys_exit() at netbsd:sys_exit+0x77 sys/kern/kern_exit.c:180
[ 153.0761698] syscall() at netbsd:syscall+0x57e sy_call sys/sys/syscallvar.h:65 [inline]
[ 153.0761698] syscall() at netbsd:syscall+0x57e sy_invoke sys/sys/syscallvar.h:94 [inline]
[ 153.0761698] syscall() at netbsd:syscall+0x57e sys/arch/x86/x86/syscall.c:138
[ 153.0962031] --- syscall (number 1) ---
[ 153.1362696] 7ba018d99a6a:
[ 153.1462816] cpu1: End traceback...
[ 153.1462816] fatal breakpoint trap in supervisor mode
[ 153.1462816] trap type 1 code 0 rip 0xffffffff8021e4b5 cs 0x8 rflags 0x246 cr2 0xffffd90172bfe000 ilevel 0x8 rsp 0xffffd9017e78f7c0
[ 153.1663140] curlwp 0xffffd90012c73600 pid 632.1 lowest kstack 0xffffd9017e7882c0
Stopped in pid 632.1 (syz-executor9495) at      netbsd:breakpoint+0x5:  leave
?
breakpoint() at netbsd:breakpoint+0x5
db_panic() at netbsd:db_panic+0xe9 sys/ddb/db_panic.c:67
vpanic() at netbsd:vpanic+0x241 sys/kern/subr_prf.c:336
_GLOBAL__sub_D_65535_0_cpu_configure() at netbsd:_GLOBAL__sub_D_65535_0_cpu_configure
sleepq_enqueue() at netbsd:sleepq_enqueue+0x1c9 sys/kern/kern_sleepq.c:221
turnstile_block() at netbsd:turnstile_block+0x249 x86_curlwp sys/arch/amd64/compile/obj/GENERIC_SYZKALLER/./machine/cpu.h:68 [inline]
turnstile_block() at netbsd:turnstile_block+0x249 KPREEMPT_DISABLE sys/sys/lwp.h:525 [inline]
turnstile_block() at netbsd:turnstile_block+0x249 sys/kern/kern_turnstile.c:438
mutex_enter() at netbsd:mutex_enter+0x22f sys/kern/kern_mutex.c:692
pool_put() at netbsd:pool_put+0x86 pool_put_quarantine sys/kern/subr_pool.c:2970 [inline]
pool_put() at netbsd:pool_put+0x86 sys/kern/subr_pool.c:1306
radix_tree_remove_node() at netbsd:radix_tree_remove_node+0x2a4 sys/lib/libkern/../../../common/lib/libc/gen/radixtree.c:694
exit1() at netbsd:exit1+0x13de sys/kern/kern_exit.c:571
sys_exit() at netbsd:sys_exit+0x77 sys/kern/kern_exit.c:180
syscall() at netbsd:syscall+0x57e sy_call sys/sys/syscallvar.h:65 [inline]
syscall() at netbsd:syscall+0x57e sy_invoke sys/sys/syscallvar.h:94 [inline]
syscall() at netbsd:syscall+0x57e sys/arch/x86/x86/syscall.c:138
--- syscall (number 1) ---
7ba018d99a6a:
ds          4677
es          8946
fs          f7a0
gs          f7f0
rdi         ffffd9000d92d488
rsi         ffffd90012c738b8
rbp         ffffd9017e78f7c0
rbx         ffffd9016d893000
rdx         2
rcx         ffffffff80d11b11    db_panic+0xd5
rax         0
r8          4
r9          1ffffffff0554b78
r10         ffffffff82aa5bc3    db_onpanic+0x3
r11         8000000000
r12         ffffd9016d8a4000
r13         ffffffff821a4120    sigprop+0x200
r14         ffffd9017e78f850
r15         ffffd9016d893068
rip         ffffffff8021e4b5    breakpoint+0x5
cs          8
rflags      246
rsp         ffffd9017e78f7c0
ss          10
netbsd:breakpoint+0x5:  leave
PID    LID S CPU     FLAGS       STRUCT LWP *               NAME WAIT
806      1 2   0         0   ffffd90011f2c200   syz-executor9495
842      1 2   0         0   ffffd900116a1280   syz-executor9495
921      3 3   1        80   ffffd90012c4d980   syz-executor9495 parked
921      2 3   0        80   ffffd90012b67b00   syz-executor9495 parked
921      1 2   0  10040000   ffffd90011f2ca80   syz-executor9495
860      3 3   1        80   ffffd90012bd0780   syz-executor9495 parked
860      2 3   1        80   ffffd90012c7b640   syz-executor9495 parked
860      1 2   0  10040000   ffffd90012c9fb40   syz-executor9495
940      3 3   1        80   ffffd90012c7ba80   syz-executor9495 parked
940      2 3   0        80   ffffd90011c8c740   syz-executor9495 parked
940      1 2   0  10040000   ffffd90012222ac0   syz-executor9495
593      1 2   0         0   ffffd900139d5040   syz-executor9495
471      1 2   0         0   ffffd90011efba40   syz-executor9495
623      1 2   0         0   ffffd90011efb600   syz-executor9495
565      1 2   0         0   ffffd90013416bc0   syz-executor9495
40       1 2   0         0   ffffd90011f47ac0   syz-executor9495
41       1 2   0         0   ffffd90011f47680   syz-executor9495
619      1 3   1        80   ffffd90012ca7b80   syz-executor9495 nanoslp
541      1 3   0        80   ffffd90012019740               sshd select
583      1 3   0        80   ffffd90013416780              getty nanoslp
494      1 3   1        80   ffffd90012c16500              getty nanoslp
478      1 3   1        80   ffffd90012c731c0              getty nanoslp
595      1 3   0        80   ffffd90012c94b00              getty ttyraw
566      1 3   0        80   ffffd90012c67180               cron nanoslp
539      1 3   1        80   ffffd90012c160c0              inetd kqueue
500      1 3   0        80   ffffd90012bd0bc0               sshd select
287      1 3   0        80   ffffd900121889c0             powerd kqueue
464      1 2   1     40000   ffffd90012119b40          makemandb
292      1 3   0        80   ffffd90012c16940            syslogd kqueue
293      1 3   0        80   ffffd9001216d500             dhcpcd kqueue
250      1 3   1        80   ffffd90012024780             dhcpcd kqueue
1        1 3   1        80   ffffd90011e2d540               init wait
0       29 3   0       204   ffffd90011e83140            physiod physiod
0       48 3   0       204   ffffd90011e85180          pooldrain pooldrain
0       47 3   1       200   ffffd90011e839c0            ioflush syncer
0       46 3   1       200   ffffd90011e83580           pgdaemon pgdaemon
0       44 3   1       200   ffffd90011e2d980            npfgc-0 npfgccv
0       43 3   1       204   ffffd90011e2d100            rt_free rt_free
0       42 3   1       204   ffffd90011e24940              unpgc unpgc
0       41 3   1       204   ffffd90011e24500    key_timehandler key_timehandler
0       40 3   1       204   ffffd90011e240c0    icmp6_wqinput/1 icmp6_wqinput
0       39 3   0       204   ffffd90011e1a900    icmp6_wqinput/0 icmp6_wqinput
0       38 3   1       204   ffffd90011e1a4c0          nd6_timer nd6_timer
0       37 3   1       204   ffffd90011e1a080    carp6_wqinput/1 carp6_wqinput
0       36 3   0       204   ffffd90011e168c0    carp6_wqinput/0 carp6_wqinput
0       35 3   1       204   ffffd90011e16480     carp_wqinput/1 carp_wqinput
0       34 3   0       204   ffffd90011e16040     carp_wqinput/0 carp_wqinput
0       33 3   1       204   ffffd90011c9bbc0     icmp_wqinput/1 icmp_wqinput
0       32 3   0       204   ffffd90011c9b780     icmp_wqinput/0 icmp_wqinput
0       31 3   1       204   ffffd90011c9b340           rt_timer rt_timer
0       30 3   0       204   ffffd90011c8c300        vmem_rehash vmem_rehash
0       28 3   0       204   ffffd9000f35dac0           scsibus0 sccomp
0       27 3   0       200   ffffd9000f35d680               pms0 pmsreset
0       26 3   1       204   ffffd9000f35d240            xcall/1 xcall
0       25 1   1       200   ffffd9000f35ca80          softser/1
0       24 1   1       200   ffffd9000f35c640          softclk/1
0       23 1   1       200   ffffd9000f35c200          softbio/1
0       22 1   1       200   ffffd9000f26da40          softnet/1
0       21 1   1       201   ffffd9000f26d600             idle/1
0       20 3   0       204   ffffd9000f26d1c0           lnxpwrwq lnxpwrwq
0       19 3   0       204   ffffd9000f26ba00           lnxlngwq lnxlngwq
0       18 3   0       204   ffffd9000f26b5c0           lnxsyswq lnxsyswq
0       17 3   0       204   ffffd9000f26b180           lnxrcugc lnxrcugc
0       16 3   0       204   ffffd9000de4f9c0             sysmon smtaskq
0       15 3   0       204   ffffd9000de4f580         pmfsuspend pmfsuspend
0       14 3   0       204   ffffd9000de4f140           pmfevent pmfevent
0       13 3   0       204   ffffd9000de40980         sopendfree sopendfr
0       12 3   1       204   ffffd9000de40540            iflnkst iflnkst
0       11 3   0       204   ffffd9000de40100           nfssilly nfssilly
0       10 3   1       200   ffffd9000de34940            cachegc cachegc
0        9 3   0       204   ffffd9000de34500             vdrain vdrain
0        8 3   0       200   ffffd9000de340c0          modunload mod_unld
0        7 3   0       204   ffffd9000de24900            xcall/0 xcall
0        6 1   0       200   ffffd9000de244c0          softser/0
0        5 1   0       200   ffffd9000de24080          softclk/0
0        4 1   0       200   ffffd9000de218c0          softbio/0
0        3 1   0       200   ffffd9000de21480          softnet/0
0        2 1   0       201   ffffd9000de21040             idle/0
0    >   1 7   0       200   ffffffff82b6e280            swapper
[Locks tracked through LWPs]

****** LWP 842.1 (syz-executor9495) @ 0xffffd900116a1280, l_stat=2

*** Locks held:

* Lock 0 (initialized at amap_ctor)
lock address : 0xffffd90013401240 type     :     sleep/adaptive
initialized  : 0xffffffff810d7855
shared holds :                  0 exclusive:                  1
shares wanted:                  0 exclusive:                  0
relevant cpu :                  0 last held:                  0
relevant lwp : 0xffffd900116a1280 last held: 0xffffd900116a1280
last locked* : 0xffffffff810e673f unlocked : 0xffffffff810e4620
owner field  : 0xffffd900116a1280 wait/spin:                0/0
Turnstile: no active turnstile for this lock.

* Lock 1 (initialized at pmap_ctor)
lock address : 0xffffd90012c52380 type     :     sleep/adaptive
initialized  : 0xffffffff80276b39
shared holds :                  0 exclusive:                  1
shares wanted:                  0 exclusive:                  0
relevant cpu :                  0 last held:                  0
relevant lwp : 0xffffd900116a1280 last held: 0xffffd900116a1280
last locked* : 0xffffffff80278f6f unlocked : 0xffffffff80279aef
owner field  : 0xffffd900116a1280 wait/spin:                0/0
Turnstile: no active turnstile for this lock.

*** Locks wanted: none

****** LWP 623.1 (syz-executor9495) @ 0xffffd90011efb600, l_stat=2

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at procinit)
lock address : 0xffffd9000d91a0c0 type     :     sleep/adaptive
initialized  : 0xffffffff81180a73
shared holds :                  0 exclusive:                  1
shares wanted:                  0 exclusive:                  1
relevant cpu :                  0 last held:                  1
relevant lwp : 0xffffd90011efb600 last held: 0xffffd90012c73600
last locked* : 0xffffffff8115981c unlocked : 0xffffffff8115b85b
owner field  : 0xffffd90012c73600 wait/spin:                0/0
Turnstile: no active turnstile for this lock.

****** LWP 0.12 (iflnkst) @ 0xffffd9000de40540, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at module_hook_init)
lock address : 0xffffffff82d8da80 type     :     sleep/adaptive
initialized  : 0xffffffff811752d2
shared holds :                  0 exclusive:                  0
shares wanted:                  0 exclusive:                  0
relevant cpu :                  1 last held:                  0
relevant lwp : 0xffffd9000de40540 last held: 000000000000000000
last locked  : 000000000000000000 unlocked*: 000000000000000000
owner field  : 000000000000000000 wait/spin:                0/0
Turnstile: no active turnstile for this lock.

****** LWP 0.5 (softclk/0) @ 0xffffd9000de24080, l_stat=1

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at module_hook_init)
lock address : 0xffffffff82d8da80 type     :     sleep/adaptive
initialized  : 0xffffffff811752d2
shared holds :                  0 exclusive:                  0
shares wanted:                  0 exclusive:                  0
relevant cpu :                  0 last held:                  0
relevant lwp : 0xffffd9000de24080 last held: 000000000000000000
last locked  : 000000000000000000 unlocked*: 000000000000000000
owner field  : 000000000000000000 wait/spin:                0/0
Turnstile: no active turnstile for this lock.

[Locks tracked through CPUs]

******* Locks held on cpu1:

* Lock 0 (initialized at turnstile_init)
lock address : 0xffffffff82d94e80 type     :               spin
initialized  : 0xffffffff811c74b4
shared holds :                  0 exclusive:                  1
shares wanted:                  0 exclusive:                  0
relevant cpu :                  1 last held:                  1
relevant lwp : 0xffffd90012c73600 last held: 0xffffd90012c73600
last locked* : 0xffffffff811c7599 unlocked : 0xffffffff81176e49
owner field  : 0x0000000000010700 wait/spin:                0/1

              PAGE FLAG   PQ            UOBJECT              UANON
0xffffd90000014180 0041 00000000                0x0                0x0
0xffffd900000141f8 0041 00000000                0x0                0x0
0xffffd90000014270 0041 00000000                0x0                0x0
0xffffd900000142e8 0041 00000000                0x0                0x0
0xffffd90000014360 0041 00000000                0x0                0x0
0xffffd900000143d8 0041 00000000                0x0                0x0
0xffffd90000014450 0041 00000000                0x0                0x0
0xffffd900000144c8 0041 00000000                0x0                0x0
0xffffd90000014540 0041 00000000                0x0                0x0
0xffffd900000145b8 0041 00000000                0x0                0x0
0xffffd90000014630 0041 00000000                0x0                0x0
0xffffd900000146a8 0041 00000000                0x0                0x0
0xffffd90000014720 0041 00000000                0x0                0x0
0xffffd90000014798 0041 00000000                0x0                0x0
0xffffd90000014810 0041 00000000                0x0                0x0
0xffffd90000014888 0041 00000000                0x0                0x0
0xffffd90000014900 0041 00000000                0x0                0x0
0xffffd90000014978 0041 00000000                0x0                0x0
0xffffd900000149f0 0041 00000000                0x0                0x0
0xffffd90000014a68 0041 00000000                0x0                0x0
0xffffd90000014ae0 0041 00000000                0x0                0x0
0xffffd90000014b58 0041 00000000                0x0                0x0
0xffffd90000014bd0 0041 00000000                0x0                0x0
0xffffd90000014c48 0041 00000000                0x0                0x0
0xffffd90000014cc0 0041 00000000                0x0                0x0
0xffffd90000014d38 0041 00000000                0x0                0x0
0xffffd90000014db0 0041 00000000                0x0                0x0
0xffffd90000014e28 0041 00000000                0x0                0x0
0xffffd90000014ea0 0041 00000000                0x0                0x0
0xffffd90000014f18 0041 00000000                0x0                0x0
0xffffd90000014f90 0041 00000000                0x0                0x0
0xffffd90000015008 0041 00000000                0x0                0x0
0xffffd90000015080 0041 00000000                0x0                0x0
0xffffd900000150f8 0041 00000000                0x0                0x0
0xffffd90000015170 0041 00000000                0x0                0x0
0xffffd900000151e8 0041 00000000                0x0                0x0
0xffffd90000015260 0041 00000000                0x0                0x0
0xffffd900000152d8 0041 00000000                0x0                0x0
0xffffd90000015350 0041 00000000                0x0                0x0
0xffffd900000153c8 0041 00000000                0x0                0x0
0xffffd90000015440 0041 00000000                0x0                0x0
0xffffd900000154b8 0041 00000000                0x0                0x0
0xffffd90000015530 0041 00000000                0x0                0x0
0xffffd900000155a8 0041 00000000                0x0                0x0
0xffffd90000015620 0041 00000000                0x0                0x0
0xffffd90000015698 0041 00000000                0x0                0x0
0xffffd90000015710 0041 00000000                0x0                0x0
0xffffd90000015788 0041 00000000                0x0                0x0
0xffffd90000015800 0041 00000000                0x0                0x0
0xffffd90000015878 0041 00000000                0x0                0x0
0xffffd900000158f0 0041 00000000                0x0                0x0
0xffffd90000015968 0041 00000000                0x0                0x0
0xffffd900000159e0 0041 00000000                0x0                0x0
0xffffd90000015a58 0041 00000000                0x0                0x0
0xffffd90000015ad0 0041 00000000                0x0                0x0
0xffffd90000015b48 0041 00000000                0x0                0x0
0xffffd90000015bc0 0041 00000000                0x0                0x0
0xffffd90000015c38 0041 00000000                0x0                0x0
0xffffd90000015cb0 0041 00000000                0x0                0x0
0xffffd90000015d28 0041 00000000                0x0                0x0
0xffffd90000015da0 0041 00000000                0x0                0x0
0xffffd90000015e18 0041 00000000                0x0                0x0
0xffffd90000015e90 0041 00000000                0x0                0x0
0xffffd90000015f08 0041 00000000                0x0                0x0
0xffffd90000015f80 0041 00000000                0x0                0x0
0xffffd90000015ff8 0041 00000000                0x0                0x0
0xffffd90000016070 0041 00000000                0x0                0x0
0xffffd900000160e8 0041 00000000                0x0                0x0
0xffffd90000016160 0041 00000000                0x0                0x0
0xffffd900000161d8 0041 00000000                0x0                0x0
0xffffd90000016250 0041 00000000                0x0                0x0
0xffffd900000162c8 0041 00000000                0x0                0x0
0xffffd90000016340 0041 00000000                0x0                0x0
0xffffd900000163b8 0041 00000000                0x0                0x0
0xffffd90000016430 0045 00000000                0x0                0x0
0xffffd900000164a8 0041 00000000                0x0                0x0
0xffffd90000016520 0045 00000000                0x0                0x0
0xffffd90000016598 0041 00000000                0x0                0x0
0xffffd90000016610 0041 00000000                0x0                0x0
0xffffd90000016688 0041 00000000                0x0                0x0
0xffffd90000016700 0045 00000000                0x0                0x0
0xffffd90000016778 0041 00000000                0x0                0x0
0xffffd900000167f0 0045 00000000                0x0                0x0
0xffffd90000016868 0045 00000000                0x0                0x0
0xffffd900000168e0 0045 00000000                0x0                0x0
0xffffd90000016958 0045 00000000                0x0                0x0
0xffffd900000169d0 0045 00000000                0x0                0x0
0xffffd90000016a48 0045 00000000                0x0                0x0
0xffffd90000016ac0 0045 00000000                0x0                0x0
0xffffd90000016b38 0045 00000000                0x0                0x0
0xffffd90000016bb0 0041 00000000                0x0                0x0
0xffffd90000016c28 0045 00000000                0x0                0x0
0xffffd90000016ca0 0041 00000000                0x0                0x0
0xffffd90000016d18 0045 00000000                0x0                0x0
0xffffd90000016d90 0045 00000000                0x0                0x0
0xffffd90000016e08 0045 00000000                0x0                0x0
0xffffd90000016e80 0041 00000000                0x0                0x0
0xffffd90000016ef8 0045 00000000                0x0                0x0
0xffffd90000016f70 0041 00000000                0x0                0x0
0xffffd90000016fe8 0041 00000000                0x0                0x0
0xffffd90000017060 0041 00000000                0x0                0x0
0xffffd900000170d8 0041 00000000                0x0                0x0
0xffffd90000017150 0041 00000000                0x0                0x0
0xffffd900000171c8 0041 00000000                0x0                0x0
0xffffd90000017240 0041 00000000                0x0                0x0
0xffffd900000172b8 0041 00000000                0x0                0x0
0xffffd90000017330 0041 00000000                0x0                0x0
0xffffd900000173a8 0041 00000000                0x0                0x0
0xffffd90000017420 0041 00000000                0x0                0x0
0xffffd90000017498 0041 00000000                0x0                0x0
0xffffd90000017510 0041 00000000                0x0                0x0
0xffffd90000017588 0041 00000000                0x0                0x0
0xffffd90000017600 0041 00000000                0x0                0x0
0xffffd90000017678 0041 00000000                0x0                0x0
0xffffd900000176f0 0041 00000000                0x0                0x0
0xffffd90000017768 0041 00000000                0x0                0x0
0xffffd900000177e0 0041 00000000                0x0                0x0
0xffffd90000017858 0041 00000000                0x0                0x0
0xffffd900000178d0 0041 00000000                0x0                0x0
0xffffd90000017948 0041 00000000                0x0                0x0
0xffffd900000179c0 0041 00000000                0x0                0x0
0xffffd90000017a38 0041 00000000                0x0                0x0
0xffffd90000017ab0 0041 00000000                0x0                0x0
0xffffd90000017b28 0041 00000000                0x0                0x0
0xffffd90000017ba0 0041 00000000                0x0                0x0
0xffffd90000017c18 0041 00000000                0x0                0x0
0xffffd90000017c90 0041 00000000                0x0                0x0
0xffffd90000017d08 0041 00000000                0x0                0x0
0xffffd90000017d80 0041 00000000                0x0                0x0
0xffffd90000017df8 0041 00000000                0x0                0x0
0xffffd90000017e70 0041 00000000                0x0                0x0
0xffffd90000017ee8 0041 00000000                0x0                0x0
0xffffd90000017f60 0041 00000000                0x0                0x0
0xffffd90000017fd8 0041 00000000                0x0                0x0
0xffffd90000018050 0041 00000000                0x0                0x0
0xffffd900000180c8 0041 00000000                0x0                0x0
0xffffd90000018140 0041 00000000                0x0                0x0
0xffffd900000181b8 0041 00000000                0x0                0x0
0xffffd90000018230 0041 00000000                0x0                0x0
0xffffd900000182a8 0041 00000000                0x0                0x0
0xffffd90000018320 0041 00000000                0x0                0x0
0xffffd90000018398 0041 00000000                0x0                0x0
0xffffd90000018410 0041 00000000                0x0                0x0
0xffffd90000018488 0041 00000000                0x0                0x0
0xffffd90000018500 0041 00000000                0x0                0x0
0xffffd90000018578 0041 00000000                0x0                0x0
0xffffd900000185f0 0041 00000000                0x0                0x0
0xffffd90000018668 0041 00000000                0x0                0x0
0xffffd900000186e0 0041 00000000                0x0                0x0
0xffffd90000018758 0041 00000000                0x0                0x0
0xffffd900000187d0 0041 00000000                0x0                0x0
0xffffd90000018848 0041 00000000                0x0                0x0
0xffffd900000188c0 0041 00000000                0x0                0x0
0xffffd90000018938 0041 00000000                0x0                0x0
0xffffd900000189b0 0041 00000000                0x0                0x0
0xffffd90000018a28 0041 00000000                0x0                0x0
0xffffd90000018aa0 0041 00000000                0x0                0x0
0xffffd90000018b18 0041 00000000                0x0                0x0
0xffffd90000018b90 0041 00000000                0x0                0x0
0xffffd90000018c08 0041 00000000                0x0                0x0
0xffffd90000018c80 0041 00000000                0x0                0x0
0xffffd90000018cf8 0041 00000000                0x0                0x0
0xffffd90000018d70 0041 00000000                0x0                0x0
0xffffd90000018de8 0041 00000000                0x0                0x0
0xffffd90000018e60 0041 00000000                0x0                0x0
0xffffd90000018ed8 0041 00000000                0x0                0x0
0xffffd90000018f50 0041 00000000                0x0                0x0
0xffffd90000018fc8 0041 00000000                0x0                0x0
0xffffd90000019040 0041 00000000                0x0                0x0
0xffffd900000190b8 0041 00000000                0x0                0x0
0xffffd90000019130 0041 00000000                0x0                0x0
0xffffd900000191a8 0041 00000000                0x0                0x0
0xffffd90000019220 0041 00000000                0x0                0x0
0xffffd90000019298 0041 00000000                0x0                0x0
0xffffd90000019310 0041 00000000                0x0                0x0
0xffffd90000019388 0041 00000000                0x0                0x0
0xffffd90000019400 0041 00000000                0x0         

Crashes (645):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2020/02/25 03:07 netbsd 9506d36270f6 59b57593 .config console log report syz C ci2-netbsd
2020/02/25 02:20 netbsd 9506d36270f6 59b57593 .config console log report syz C ci2-netbsd
2020/02/23 09:00 netbsd 9506d36270f6 2c36e7a7 .config console log report syz C ci2-netbsd
2020/02/23 02:45 netbsd 5d6e8781bc73 2c36e7a7 .config console log report syz C ci2-netbsd-kmsan
2020/02/23 02:03 netbsd 5d6e8781bc73 2c36e7a7 .config console log report syz C ci2-netbsd-kmsan
2020/02/23 01:26 netbsd 5d6e8781bc73 2c36e7a7 .config console log report syz C ci2-netbsd-kmsan
2020/02/23 00:30 netbsd 5d6e8781bc73 2c36e7a7 .config console log report syz C ci2-netbsd-kmsan
2020/02/22 23:14 netbsd 5d6e8781bc73 2c36e7a7 .config console log report syz C ci2-netbsd-kmsan
2020/02/22 22:43 netbsd 5d6e8781bc73 2c36e7a7 .config console log report syz C ci2-netbsd-kmsan
2020/02/22 21:55 netbsd 5d6e8781bc73 2c36e7a7 .config console log report syz C ci2-netbsd-kmsan
2020/02/22 21:32 netbsd 5d6e8781bc73 2c36e7a7 .config console log report syz C ci2-netbsd-kmsan
2020/02/22 20:26 netbsd 5d6e8781bc73 2c36e7a7 .config console log report syz C ci2-netbsd-kmsan
2020/02/22 19:34 netbsd 5d6e8781bc73 2c36e7a7 .config console log report syz C ci2-netbsd-kmsan
2020/02/22 19:04 netbsd 5d6e8781bc73 2c36e7a7 .config console log report syz C ci2-netbsd-kmsan
2020/02/22 16:05 netbsd 5d6e8781bc73 2c36e7a7 .config console log report syz C ci2-netbsd-kmsan
2020/02/22 13:06 netbsd 5d6e8781bc73 2c36e7a7 .config console log report syz C ci2-netbsd-kmsan
2020/02/22 09:48 netbsd 162c6ffc13b7 2ffa6679 .config console log report syz C ci2-netbsd-kmsan
2020/02/22 08:39 netbsd 162c6ffc13b7 2ffa6679 .config console log report syz C ci2-netbsd-kmsan
2020/02/22 07:55 netbsd 162c6ffc13b7 2ffa6679 .config console log report syz C ci2-netbsd-kmsan
2020/02/22 07:20 netbsd 162c6ffc13b7 2ffa6679 .config console log report syz C ci2-netbsd-kmsan
2020/02/22 06:38 netbsd 162c6ffc13b7 2ffa6679 .config console log report syz C ci2-netbsd-kmsan
2020/02/22 06:20 netbsd 9506d36270f6 2ffa6679 .config console log report syz C ci2-netbsd
2020/02/22 05:16 netbsd 162c6ffc13b7 2ffa6679 .config console log report syz C ci2-netbsd-kmsan
2020/02/22 01:11 netbsd 9506d36270f6 2ffa6679 .config console log report syz C ci2-netbsd
2020/02/20 12:42 netbsd 8ea832324b2e b690a6e3 .config console log report syz C ci2-netbsd
2020/02/20 11:36 netbsd 8ea832324b2e b690a6e3 .config console log report syz C ci2-netbsd
2020/02/19 05:45 netbsd 978e0790522c 135c18aa .config console log report syz C ci2-netbsd
2020/02/18 03:04 netbsd 53d7edef8a98 1ce142dc .config console log report syz C ci2-netbsd
2020/02/17 14:42 netbsd d694b7d713e7 72bfa6f2 .config console log report syz C ci2-netbsd
2020/02/17 08:32 netbsd e2bf2ea38c4d 1f448cd6 .config console log report syz C ci2-netbsd
2020/02/17 06:52 netbsd e2bf2ea38c4d 1f448cd6 .config console log report syz C ci2-netbsd
2020/02/12 07:08 netbsd 88bf9b50e007 a75b198c .config console log report syz C ci2-netbsd
2020/02/23 07:36 netbsd 9506d36270f6 2c36e7a7 .config console log report syz ci2-netbsd
2020/02/23 02:31 netbsd 9506d36270f6 2c36e7a7 .config console log report syz ci2-netbsd
2020/02/23 00:59 netbsd 5d6e8781bc73 2c36e7a7 .config console log report syz ci2-netbsd-kmsan
2020/02/22 23:46 netbsd 9506d36270f6 2c36e7a7 .config console log report syz ci2-netbsd
2020/02/22 20:48 netbsd 9506d36270f6 2c36e7a7 .config console log report syz ci2-netbsd
2020/02/22 18:28 netbsd 5d6e8781bc73 2c36e7a7 .config console log report syz ci2-netbsd-kmsan
2020/02/22 18:15 netbsd 5d6e8781bc73 2c36e7a7 .config console log report syz ci2-netbsd-kmsan
2020/02/22 06:34 netbsd 9506d36270f6 2ffa6679 .config console log report syz ci2-netbsd
2020/02/22 02:56 netbsd 162c6ffc13b7 2ffa6679 .config console log report syz ci2-netbsd-kmsan
2020/02/16 00:42 netbsd 8166a522c007 5d7b90f1 .config console log report syz ci2-netbsd
2020/02/25 20:34 netbsd 9506d36270f6 4c886d6a .config console log report ci2-netbsd
2020/02/25 18:57 netbsd 9506d36270f6 4c886d6a .config console log report ci2-netbsd
2020/02/25 17:03 netbsd 9506d36270f6 4c886d6a .config console log report ci2-netbsd
2020/02/25 16:00 netbsd 9506d36270f6 4c886d6a .config console log report ci2-netbsd
2020/02/25 14:34 netbsd 9506d36270f6 4c886d6a .config console log report ci2-netbsd
2020/02/25 13:05 netbsd 9506d36270f6 59b57593 .config console log report ci2-netbsd
2020/02/25 10:24 netbsd 9506d36270f6 59b57593 .config console log report ci2-netbsd
2020/02/25 09:16 netbsd 9506d36270f6 59b57593 .config console log report ci2-netbsd
2020/02/25 06:36 netbsd 9506d36270f6 59b57593 .config console log report ci2-netbsd
2020/02/25 05:02 netbsd 9506d36270f6 59b57593 .config console log report ci2-netbsd
2020/02/25 04:02 netbsd 9506d36270f6 59b57593 .config console log report ci2-netbsd
2020/02/24 23:45 netbsd 9506d36270f6 59b57593 .config console log report ci2-netbsd
2020/02/24 22:20 netbsd 9506d36270f6 59b57593 .config console log report ci2-netbsd
2020/02/24 21:06 netbsd 9506d36270f6 1253d6f0 .config console log report ci2-netbsd
2020/02/24 19:55 netbsd 9506d36270f6 1253d6f0 .config console log report ci2-netbsd
2020/02/24 16:16 netbsd 9506d36270f6 1253d6f0 .config console log report ci2-netbsd
2020/02/24 15:01 netbsd 9506d36270f6 1253d6f0 .config console log report ci2-netbsd
2020/02/24 14:13 netbsd 9506d36270f6 1253d6f0 .config console log report ci2-netbsd
2020/02/24 12:34 netbsd 9506d36270f6 1253d6f0 .config console log report ci2-netbsd
2020/02/24 11:05 netbsd 9506d36270f6 1253d6f0 .config console log report ci2-netbsd
2020/02/24 10:00 netbsd 9506d36270f6 1253d6f0 .config console log report ci2-netbsd
2020/02/24 08:34 netbsd 9506d36270f6 d801cb02 .config console log report ci2-netbsd
2020/02/24 07:20 netbsd 9506d36270f6 d801cb02 .config console log report ci2-netbsd
2020/02/24 07:01 netbsd 9506d36270f6 d801cb02 .config console log report ci2-netbsd
2020/02/24 05:51 netbsd 9506d36270f6 d801cb02 .config console log report ci2-netbsd
2020/02/24 02:42 netbsd 9506d36270f6 d801cb02 .config console log report ci2-netbsd
2020/02/24 01:31 netbsd 9506d36270f6 d801cb02 .config console log report ci2-netbsd
2020/02/23 23:25 netbsd 9506d36270f6 d801cb02 .config console log report ci2-netbsd
2020/02/23 21:41 netbsd 9506d36270f6 d801cb02 .config console log report ci2-netbsd
2020/02/23 21:22 netbsd 9506d36270f6 d801cb02 .config console log report ci2-netbsd
2020/02/23 20:17 netbsd 9506d36270f6 2c36e7a7 .config console log report ci2-netbsd
2020/02/23 17:22 netbsd 9506d36270f6 2c36e7a7 .config console log report ci2-netbsd
2020/02/23 15:36 netbsd 9506d36270f6 2c36e7a7 .config console log report ci2-netbsd
2020/02/23 14:13 netbsd 9506d36270f6 2c36e7a7 .config console log report ci2-netbsd
2020/02/23 10:30 netbsd 9506d36270f6 2c36e7a7 .config console log report ci2-netbsd
2020/02/23 08:39 netbsd 9506d36270f6 2c36e7a7 .config console log report ci2-netbsd
2020/02/23 07:38 netbsd 9506d36270f6 2c36e7a7 .config console log report ci2-netbsd
2020/02/23 05:40 netbsd 9506d36270f6 2c36e7a7 .config console log report ci2-netbsd
2020/02/22 15:30 netbsd 9506d36270f6 2c36e7a7 .config console log report ci2-netbsd
2020/02/22 15:15 netbsd 5d6e8781bc73 2c36e7a7 .config console log report ci2-netbsd-kmsan
2020/02/22 14:07 netbsd 9506d36270f6 2c36e7a7 .config console log report ci2-netbsd
2020/02/22 12:17 netbsd 5d6e8781bc73 2c36e7a7 .config console log report ci2-netbsd-kmsan
2020/02/22 11:52 netbsd 5d6e8781bc73 2c36e7a7 .config console log report ci2-netbsd-kmsan
2020/02/11 21:55 netbsd e24987b71940 4d1ab643 .config console log report ci2-netbsd
* Struck through repros no longer work on HEAD.