syzbot


Fatal trap 9: general protection fault in in6_selecthlim

Status: fixed on 2020/04/26 21:27
Reported-by: syzbot+5c813c01096363174684@syzkaller.appspotmail.com
Fix commit: 17cb6ddba8ab Fix order of arguments in fib[46]_lookup calls in SCTP.
First crash: 1016d, last: 1015d

Sample crash report:
Fatal trap 9: general protection fault while in kernel mode
cpuid = 0; apic id = 00
instruction pointer	= 0x20:0xffffffff813f638f
stack pointer	        = 0x28:0xfffffe0025a85290
frame pointer	        = 0x28:0xfffffe0025a852e0
code segment		= base 0x0, limit 0xfffff, type 0x1b
			= DPL 0, pres 1, long 1, def32 0, gran 1
processor eflags	= interrupt enabled, resume, IOPL = 0
current process		= 888 (syz-executor.0)
trap number		= 9
panic: general protection fault
cpuid = 0
time = 1587935729
KDB: stack backtrace:
db_trace_self_wrapper() at db_trace_self_wrapper+0x47/frame 0xfffffe0025a84f60
vpanic() at vpanic+0x1c7/frame 0xfffffe0025a84fc0
panic() at panic+0x43/frame 0xfffffe0025a85020
trap_fatal() at trap_fatal+0x4ca/frame 0xfffffe0025a850a0
trap() at trap+0xda/frame 0xfffffe0025a851c0
calltrap() at calltrap+0x8/frame 0xfffffe0025a851c0
--- trap 0x9, rip = 0xffffffff813f638f, rsp = 0xfffffe0025a85290, rbp = 0xfffffe0025a852e0 ---
in6_selecthlim() at in6_selecthlim+0x4f/frame 0xfffffe0025a852e0
sctp_lowlevel_chunk_output() at sctp_lowlevel_chunk_output+0x1651/frame 0xfffffe0025a85430
sctp_med_chunk_output() at sctp_med_chunk_output+0x1916/frame 0xfffffe0025a85e20
sctp_chunk_output() at sctp_chunk_output+0x1c45/frame 0xfffffe0025a86770
sctp_disconnect() at sctp_disconnect+0x5fb/frame 0xfffffe0025a867f0
soclose() at soclose+0xe5/frame 0xfffffe0025a86870
_fdrop() at _fdrop+0x38/frame 0xfffffe0025a868a0
closef() at closef+0x28b/frame 0xfffffe0025a86930
fdescfree_fds() at fdescfree_fds+0xb4/frame 0xfffffe0025a86980
fdescfree() at fdescfree+0x582/frame 0xfffffe0025a86a40
exit1() at exit1+0x6c5/frame 0xfffffe0025a86ab0
sys_sys_exit() at sys_sys_exit+0xd/frame 0xfffffe0025a86ac0
amd64_syscall() at amd64_syscall+0x262/frame 0xfffffe0025a86bf0
fast_syscall_common() at fast_syscall_common+0x101/frame 0xfffffe0025a86bf0
--- syscall (1, FreeBSD ELF64, sys_sys_exit), rip = 0x44f7ca, rsp = 0x7fffffffebe8, rbp = 0 ---
KDB: enter: panic
[ thread pid 888 tid 100214 ]
Stopped at      kdb_enter+0x67: movq    $0,0x14a9b06(%rip)
db> 
db> set $lines = 0
db> set $maxwidth = 0
db> show registers
cs                        0x20
ds                        0x3b  ll+0x1a
es                        0x3b  ll+0x1a
fs                        0x13
gs                        0x1b
ss                        0x28  ll+0x7
rax                       0x12
rcx         0xffffffff810b8ab0  vprintf+0x140
rdx                        0x1
rbx                          0
rsp         0xfffffe0025a84f40
rbp         0xfffffe0025a84f60
rsi                          0
rdi         0xffffffff810b8ae6  vprintf+0x176
r8                           0
r9                  0xffffffff
r10                     0x224e  ll+0x222d
r11                     0x224e  ll+0x222d
r12         0xffffffff82068ea0  ddb_dbbe
r13                          0
r14         0xffffffff81943078
r15         0xffffffff81943078
rip         0xffffffff810add67  kdb_enter+0x67
rflags                    0x86  ll+0x65
kdb_enter+0x67: movq    $0,0x14a9b06(%rip)
db> show proc
Process 888 (syz-executor.0) at 0xfffff8000dbb8520:
 state: NORMAL
 uid: 0  gids: 0, 0, 5
 parent: pid 773 at 0xfffff80003ca8000
 ABI: FreeBSD ELF64
 arguments: /root/syz-executor.0
 reaper: 0xfffff8000331a000 reapsubtree: 1
 sigparent: 20
 vmspace: 0xfffffe00257fd000
   (map 0xfffffe00257fd000)
   (map.pmap 0xfffffe00257fd0c0)
   (pmap 0xfffffe00257fd120)
 threads: 1
100214                   Run     CPU 0                       syz-executor.0
db> ps
  pid  ppid  pgrp   uid  state   wmesg   wchan               cmd
  889   774   774     0  R       (threaded)                  syz-executor.1
100090                   Run     CPU 1                       syz-executor.1
100323                   S       select  0xfffff80003c04340  syz-executor.1
  888   773   773     0  RE      CPU 0                       syz-executor.0
  882   787   787     0  R       (threaded)                  syz-executor.3
100117                   RunQ                                syz-executor.3
100308                   S       lockf   0xfffff8000d480b00  syz-executor.3
100309                   S       uwait   0xfffff8000353a880  syz-executor.3
100310                   S       uwait   0xfffff8000353a780  syz-executor.3
100313                   S       uwait   0xfffff8000d84b800  syz-executor.3
100315                   S       uwait   0xfffff80003a37700  syz-executor.3
  826   820   826     0  Ss      select  0xfffff8000d4809c0  dhclient
  823     1   823     0  Ss      select  0xfffff800030844c0  dhclient
  820   812   424    65  S       select  0xfffff8000d480d40  dhclient
  812   424   424     0  S       wait    0xfffff8000d1e3a40  sh
  787   768   787     0  Ss      nanslp  0xffffffff8252c1f1  syz-executor.3
  778   768   778     0  Ss      piperd  0xfffff8000d9c02f8  syz-executor.2
  774   768   774     0  Ss      nanslp  0xffffffff8252c1f1  syz-executor.1
  773   768   773     0  Ss      nanslp  0xffffffff8252c1f1  syz-executor.0
  768   766   766     0  S       (threaded)                  syz-fuzzer
100082                   S       uwait   0xfffff80003538200  syz-fuzzer
100107                   S       uwait   0xfffff80003539a80  syz-fuzzer
100108                   S       uwait   0xfffff80003539b80  syz-fuzzer
100109                   S       uwait   0xfffff800030f4a00  syz-fuzzer
100110                   S       uwait   0xfffff800030f4b00  syz-fuzzer
100111                   S       uwait   0xfffff80003a36480  syz-fuzzer
100112                   S       uwait   0xfffff800030f4c00  syz-fuzzer
100113                   S       uwait   0xfffff80003a37980  syz-fuzzer
100114                   S       uwait   0xfffff80003a36580  syz-fuzzer
100115                   S       kqread  0xfffff8000320b300  syz-fuzzer
  766   764   766     0  Ss      pause   0xfffff8000d39c0a8  csh
  764   682   764     0  Ss      select  0xfffff8000d480f40  sshd
  748     1   748     0  Ss+     ttyin   0xfffff8000356f8b0  getty
  747     1   747     0  Ss+     ttyin   0xfffff80003b6fcb0  getty
  746     1   746     0  Ss+     ttyin   0xfffff80003b6e4b0  getty
  745     1   745     0  Ss+     ttyin   0xfffff80003b6ecb0  getty
  744     1   744     0  Ss+     ttyin   0xfffff800033b74b0  getty
  743     1   743     0  Ss+     ttyin   0xfffff800033b7cb0  getty
  742     1   742     0  Ss+     ttyin   0xfffff800033b64b0  getty
  741     1   741     0  Ss+     ttyin   0xfffff800033b6cb0  getty
  740     1   740     0  Ss+     ttyin   0xfffff800033b94b0  getty
  686     1   686     0  Ss      nanslp  0xffffffff8252c1f1  cron
  682     1   682     0  Ss      select  0xfffff80003c04ac0  sshd
  495     1   495     0  Ss      select  0xfffff800030846c0  syslogd
  424     1   424     0  Ss      wait    0xfffff80003ca6520  devd
  423     1   423    65  Ss      select  0xfffff80003c04e40  dhclient
  338     1   338     0  Ss      select  0xfffff800030845c0  dhclient
  335     1   335     0  Ss      select  0xfffff80003c03040  dhclient
   23     0     0     0  DL      vlruwt  0xfffff800033e0520  [vnlru]
   22     0     0     0  DL      syncer  0xffffffff82618118  [syncer]
   21     0     0     0  DL      (threaded)                  [bufdaemon]
100069                   D       qsleep  0xffffffff82617438  [bufdaemon]
100076                   D       -       0xffffffff8200aa00  [bufspacedaemon-0]
100086                   D       sdflush 0xfffff80003c22ce8  [/ worker]
   20     0     0     0  DL      psleep  0xffffffff8263e308  [vmdaemon]
   19     0     0     0  DL      (threaded)                  [pagedaemon]
100067                   D       psleep  0xffffffff826328d8  [dom0]
100074                   D       launds  0xffffffff826328e4  [laundry: dom0]
100075                   D       umarcl  0xffffffff81544e70  [uma]
   18     0     0     0  DL      -       0xffffffff8235fe20  [rand_harvestq]
   17     0     0     0  DL      pftm    0xffffffff82c363a0  [pf purge]
   16     0     0     0  DL      waiting 0xffffffff8261a890  [sctp_iterator]
   15     0     0     0  DL      -       0xffffffff82616a2c  [soaiod4]
    9     0     0     0  DL      -       0xffffffff82616a2c  [soaiod3]
    8     0     0     0  DL      -       0xffffffff82616a2c  [soaiod2]
    7     0     0     0  DL      -       0xffffffff82616a2c  [soaiod1]
    6     0     0     0  DL      (threaded)                  [cam]
100033                   D       -       0xffffffff82237b40  [doneq0]
100066                   D       -       0xffffffff82237a10  [scanner]
    5     0     0     0  DL      crypto_ 0xfffff8000320cd90  [crypto returns 1]
    4     0     0     0  DL      crypto_ 0xfffff8000320cd30  [crypto returns 0]
    3     0     0     0  DL      crypto_ 0xffffffff826300c0  [crypto]
   14     0     0     0  DL      seqstat 0xfffff80003363488  [sequencer 00]
   13     0     0     0  DL      (threaded)                  [geom]
100024                   D       -       0xffffffff8250b180  [g_event]
100025                   D       -       0xffffffff8250b188  [g_up]
100026                   D       -       0xffffffff8250b190  [g_down]
    2     0     0     0  DL      (threaded)                  [KTLS]
100017                   D       -       0xfffff80003084a00  [thr_0]
100018                   D       -       0xfffff80003084a40  [thr_1]
   12     0     0     0  WL      (threaded)                  [intr]
100010                   I                                   [swi6: Giant taskq]
100013                   I                                   [swi5: fast taskq]
100016                   I                                   [swi6: task queue]
100019                   I                                   [swi3: vm]
100020                   I                                   [swi4: clock (0)]
100021                   I                                   [swi4: clock (1)]
100022                   I                                   [swi1: netisr 0]
100034                   I                                   [irq24: virtio_pci0]
100035                   I                                   [irq25: virtio_pci0]
100036                   I                                   [irq26: virtio_pci0]
100037                   I                                   [irq27: virtio_pci0]
100038                   I                                   [irq28: virtio_pci1]
100039                   I                                   [irq29: virtio_pci1]
100040                   I                                   [irq30: virtio_pci1]
100041                   I                                   [irq31: virtio_pci1]
100042                   I                                   [irq32: virtio_pci1]
100047                   I                                   [irq10: virtio_pci2]
100049                   I                                   [irq1: atkbd0]
100050                   I                                   [irq12: psm0]
100051                   I                                   [swi0: uart uart++]
100060                   I                                   [swi1: pf send]
100072                   I                                   [swi1: hpts]
100073                   I                                   [swi1: hpts]
   11     0     0     0  RL      (threaded)                  [idle]
100003                   CanRun                              [idle: cpu0]
100004                   CanRun                              [idle: cpu1]
    1     0     1     0  SLs     wait    0xfffff8000331a000  [init]
   10     0     0     0  DL      audit_w 0xffffffff82630598  [audit]
    0     0     0     0  DLs     (threaded)                  [kernel]
100000                   D       swapin  0xffffffff8250b710  [swapper]
100005                   D       -       0xfffff80003338000  [if_config_tqg_0]
100006                   D       -       0xfffff80003339e00  [softirq_0]
100007                   D       -       0xfffff80003339d00  [softirq_1]
100008                   D       -       0xfffff80003339c00  [if_io_tqg_0]
100009                   D       -       0xfffff80003339b00  [if_io_tqg_1]
100011                   D       -       0xfffff8000333e000  [in6m_free taskq]
100012                   D       -       0xfffff8000333fe00  [thread taskq]
100014                   D       -       0xfffff8000333fc00  [kqueue_ctx taskq]
100015                   D       -       0xfffff8000333fb00  [aiod_kick taskq]
100023                   D       -       0xfffff8000333f900  [firmware taskq]
100028                   D       -       0xfffff8000333f800  [crypto_0]
100029                   D       -       0xfffff8000333f800  [crypto_1]
100043                   D       -       0xfffff8000333f500  [vtnet0 rxq 0]
100044                   D       -       0xfffff8000333f400  [vtnet0 txq 0]
100045                   D       -       0xfffff8000333f300  [vtnet0 rxq 1]
100046                   D       -       0xfffff8000333f200  [vtnet0 txq 1]
100048                   D       vtbslp  0xfffff800034fc580  [virtio_balloon]
100052                   D       -       0xfffff8000333f100  [mca taskq]
100057                   D       -       0xffffffff81ce6671  [deadlkres]
100062                   D       -       0xfffff80003b5e300  [acpi_task_0]
100063                   D       -       0xfffff80003b5e300  [acpi_task_1]
100064                   D       -       0xfffff80003b5e300  [acpi_task_2]
100065                   D       -       0xfffff8000333f700  [CAM taskq]
db> show all locks
Process 889 (syz-executor.1) thread 0xfffffe0023bea000 (100090)
exclusive sleep mutex umtxql (umtxql) r = 0 (0xffffffff82552450) locked @ /syzkaller/managers/main/kernel/sys/kern/kern_umtx.c:512
Process 888 (syz-executor.0) thread 0xfffffe00257c9300 (100214)
exclusive sleep mutex sctp-tcb (tcb) r = 0 (0xfffffe0025990a90) locked @ /syzkaller/managers/main/kernel/sys/netinet/sctp_usrreq.c:713
exclusive sleep mutex sctp-inp (inp) r = 0 (0xfffff8000dd19968) locked @ /syzkaller/managers/main/kernel/sys/netinet/sctp_usrreq.c:695
db> show malloc
              Type        InUse        MemUse     Requests
           pf_hash            5        11524K            5
            devbuf         4213         4851K         4241
          tcp_hpts            5         3201K            5
             vtbuf           24         1968K           46
         sysctloid        28335         1653K        28399
              kobj          332         1328K          488
            newblk           38         1034K         2560
          vfscache            4         1025K            4
               pcb           25          539K          148
          inodedep           12          518K          206
         ufs_quota            1          512K            1
          vfs_hash            1          512K            1
           callout            2          512K            2
              intr            4          388K            4
           subproc          121          250K          957
            acpica         1674          185K        52709
         vnet_data            1          168K            1
          filedesc           19          133K          185
           pagedep            9          130K          104
        tfo_ccache            1          128K            1
               sem            4          106K            4
            DEVFS1          105          105K          122
            linker          244           92K          277
               bus          984           79K         3376
          mtx_pool            2           72K            2
          syncache            1           68K            1
          acpitask            1           64K            1
       ddb_capture            1           64K            1
            module          497           63K          497
              umtx          306           39K          306
               BPF           22           36K           22
              temp           36           35K         1888
           kdtrace          178           35K         2045
         hostcache            1           32K            1
               shm            1           32K            1
            DEVFS3          124           31K          134
               msg            4           30K            4
        DEVFS_RULE           56           27K           56
        gtaskqueue           18           26K           18
            ifaddr           71           24K           73
              vmem            3           22K            4
            kbdmux            6           22K            6
           lltable           48           18K           48
         ufs_mount            3           17K            4
              proc            3           17K            3
               tty           16           16K           16
           tidhash            1           16K            1
           ithread           98           16K           98
       ether_multi          172           14K          177
            bus-sc           30           14K         1431
            KTRACE          100           13K          100
             ifnet            7           13K            7
              kenv           95           12K           99
      eventhandler          132           12K          132
         in6_multi           89           11K           89
         pfs_nodes           20           10K           20
          routetbl           66           10K           74
              GEOM           60           10K          486
              rman           82           10K          423
         bmsafemap            2            9K          151
              UART           12            9K           12
           devstat            4            9K            4
               rpc            2            8K            2
             shmfd            1            8K            1
       pfs_vncache            1            8K            1
     audit_evclass          233            8K          291
           CAM DEV            3            6K          510
            kqueue           56            6K          894
                vt           11            6K           11
            plimit           21            6K          375
              cred           21            6K          211
            sglist            5            6K            5
         CAM queue            5            6K         1528
          pf_ifnet           13            5K           23
         taskqueue           45            5K           45
       ufs_dirhash           24            5K           24
            DEVFSP           72            5K           76
          pf_table            2            4K            3
           memdesc            1            4K            1
               MCA           32            4K           32
               UMA          249            4K          249
             evdev            4            4K            4
          kcovinfo           64            4K           68
          freework           16            4K          239
             hhook           13            4K           13
           session           25            4K           36
              pgrp           25            4K           36
            select           24            3K           24
             lockf           29            3K           96
           acpisem           22            3K           22
          terminal           11            3K           11
         proc-args           44            3K          549
           uidinfo            3            3K            8
          sctp_ifa           17            3K           17
        local_apic            1            2K            1
           io_apic            1            2K            1
         ipsec-saq            2            2K            2
            ip6ndp           12            2K           21
           CAM XPT           22            2K          543
            dirrem            6            2K          100
         sctp_atcl            3            2K           35
          in_multi            6            2K            7
            Unitno           25            2K           45
           acpidev           20            2K           20
               msi            9            2K            9
               tun            7            2K            7
           softdep            1            1K            1
       ipsecpolicy            1            1K            1
            sahead            1            1K            1
          secasvar            1            1K            1
         sctp_timw            4            1K            4
         sctp_stro            1            1K            6
             clone            8            1K            8
       vnodemarker            2            1K           60
      NFSD session            1            1K            1
        CAM periph            4            1K          271
             mkdir            7            1K          158
          freefile            7            1K           98
          freeblks            3            1K          106
               mld            6            1K            6
          sctp_ifn            6            1K            6
              igmp            6            1K            6
             nhops            6            1K            6
         toponodes            6            1K            6
            isadev            6            1K            6
             mount           16            1K           86
          pci_link           10            1K           10
            diradd            5            1K          134
            crypto            3            1K            3
         newdirblk            4            1K           79
         sctp_stri            1            1K           10
              pfil            4            1K            4
    chacha20random            1            1K            1
           CAM SIM            2            1K            2
             epoch            4            1K            4
              cdev            2            1K            2
       inpcbpolicy           14            1K          413
 encap_export_host            8            1K            8
               osd            3            1K            9
           pf_rule            2            1K            2
          indirdep            1            1K          239
            vnodes            1            1K            1
      NFSD lckfile            1            1K            1
     NFSD V4client            1            1K            1
             DEVFS            9            1K           10
            feeder            7            1K            7
           tcpfunc            3            1K            3
         sctp_atky            4            1K           46
        loginclass            3            1K            6
     CAM dev queue            2            1K            2
 CAM I/O Scheduler            1            1K            1
            apmdev            1            1K            1
          atkbddev            2            1K            2
          CAM path            4            1K         1034
              ktls            1            1K            1
          pmchooks            1            1K            1
            prison            4            1K            4
            soname            4            1K         5815
          nexusdev            5            1K            5
           entropy            2            1K           37
          sctp_vrf            1            1K            1
              vnet            1            1K            1
          acpiintr            1            1K            1
               pmc            1            1K            1
         sctp_athm            3            1K           40
              cpus            2            1K            2
          sctp_map            2            1K           12
    vnet_data_free            1            1K            1
           Per-cpu            1            1K            1
          filecaps            2            1K           72
          p1003.1b            1            1K            1
           pf_altq            0            0K            0
           pf_osfp            0            0K            0
           pf_temp            0            0K            0
           ath_hal            0            0K            0
        madt_table            0            0K            2
            athdev            0            0K            0
           ata_pci            0            0K            0
           ata_dma            0            0K            0
       ata_generic            0            0K            0
               amr            0            0K            0
           scsi_da            0            0K           69
            ata_da            0            0K            0
            pvscsi            0            0K            0
          smartpqi            0            0K            0
           scsi_ch            0            0K            0
           scsi_cd            0            0K            0
            USBdev            0            0K            0
               USB            0            0K            0
       AHCI driver            0            0K            0
               agp            0            0K            0
              iavf            0            0K            0
               ixl            0            0K            0
           nvme_da            0            0K            0
           acpipwr            0            0K            0
            twsbuf            0            0K            0
      twe_commands            0            0K            0
      twa_commands            0            0K            0
       tcp_log_dev            0            0K            0
      midi buffers            0            0K            0
       fpukern_ctx            0            0K            0
             mixer            0            0K            0
          xen_intr            0            0K            0
              ac97            0            0K            0
           xen_hvm            0            0K            0
         legacydrv            0            0K            0
            qpidrv            0            0K            0
             hdacc            0            0K            0
              hdac            0            0K            0
      dmar_idpgtbl            0            0K            0
          dmar_dom            0            0K            0
          dmar_ctx            0            0K            0
       dmar_dmamap            0            0K            0
              hdaa            0            0K            0
         acpi_perf            0            0K            0
         acpicmbat            0            0K            0
              isci            0            0K            0
           bxe_ilt            0            0K            0
            xenbus            0            0K            0
       SIIS driver            0            0K            0
     vm_fictitious            0            0K            0
           CAM CCB            0            0K         4757
               PUC            0            0K            0
          ppbusdev            0            0K            0
agtiapi_MemAlloc malloc            0            0K            0
    osti_cacheable            0            0K            0
          tempbuff            0            0K            0
          tempbuff            0            0K            0
           UMAHash            0            0K            0
ag_tgt_map_t malloc            0            0K            0
ag_slr_map_t malloc            0            0K            0
         vm_pgdata            0            0K            0
           jblocks            0            0K            0
          savedino            0            0K          116
          sentinel            0            0K            0
            jfsync            0            0K            0
            jtrunc            0            0K            0
             sbdep            0            0K           29
           jsegdep            0            0K            0
              jseg            0            0K            0
         jfreefrag            0            0K            0
          jfreeblk            0            0K            0
           jnewblk            0            0K            0
            jmvref            0            0K            0
           jremref            0            0K            0
           jaddref            0            0K            0
           freedep            0            0K            0
          freefrag            0            0K           14
        allocindir            0            0K            0
       allocdirect            0            0K            0
          ufs_trim            0            0K            0
           mactemp            0            0K            0
     audit_trigger            0            0K            0
 audit_pipe_presel            0            0K            0
     audit_pipeent            0            0K            0
        audit_pipe            0            0K            0
      audit_evname            0            0K            0
         audit_bsm            0            0K            0
      audit_gidset            0            0K            0
        audit_text            0            0K            0
        audit_path            0            0K            0
        audit_data            0            0K            0
        audit_cred            0            0K            0
             xform            0            0K            0
               NLM            0            0K            0
    ipsec-spdcache            0            0K            0
         ipsec-reg            0            0K            0
        ipsec-misc            0            0K            0
      ipsecrequest            0            0K            0
            ip6opt            0            0K            3
       ip6_msource            0            0K            0
      ip6_moptions            0            0K            0
       in6_mfilter            0            0K            0
             frag6            0            0K            0
            tcplog            0            0K            0
lDevFlags * malloc            0            0K            0
               LRO            0            0K            0
        sctp_mcore            0            0K            0
        sctp_socko            0            0K            5
         sctp_iter            0            0K            9
         sctp_mvrf            0            0K            0
         sctp_cpal            0            0K            0
         sctp_cmsg            0            0K            0
         sctp_stre            0            0K            0
         sctp_athi            0            0K            0
         sctp_a_it            0            0K            9
         sctp_aadr            0            0K            0
      newreno data            0            0K            0
        ip_msource            0            0K            0
       ip_moptions            0            0K            0
        in_mfilter            0            0K            0
              ipid            0            0K            0
         80211scan            0            0K            0
      80211ratectl            0            0K            0
        80211power            0            0K            0
       80211nodeie            0            0K            0
         80211node            0            0K            0
      80211mesh_gt            0            0K            0
      80211mesh_rt            0            0K            0
         80211perr            0            0K            0
         80211prep            0            0K            0
         80211preq            0            0K            0
          80211dfs            0            0K            0
       80211crypto            0            0K            0
          80211vap            0            0K            0
             iflib            0            0K            0
              vlan            0            0K            0
               gif            0            0K            0
           ifdescr            0            0K            0
              zlib            0            0K            0
           fadvise            0            0K            0
tiDeviceHandle_t * malloc            0            0K            0
            statfs            0            0K          251
       export_host            0            0K            0
        cl_savebuf            0            0K            5
ag_portal_data_t malloc            0            0K            0
ag_device_t malloc            0            0K            0
     STLock malloc            0            0K            0
          CCB List            0            0K            0
            sr_iov            0            0K            0
               OCS            0            0K            0
               OCS            0            0K            0
              nvme            0            0K            0
               nvd            0            0K            0
            netmap            0            0K            0
            mwldev            0            0K            0
        MVS driver            0            0K            0
     CAM ccb queue            0            0K            0
          mrsasbuf            0            0K            0
          mpt_user            0            0K            0
          mps_user            0            0K            0
            biobuf            0            0K            0
              aios            0            0K            0
               lio            0            0K            0
               acl            0            0K            0
            MPSSAS            0            0K            0
          mbuf_tag            0            0K          111
              accf            0            0K            0
               pts            0            0K            0
               iov            0            0K        13853
          ioctlops            0            0K          110
           Witness            0            0K            0
             stack            0            0K            0
               mps            0            0K            0
          mpr_user            0            0K            0
            MPRSAS            0            0K            0
               mpr            0            0K            0
            mfibuf            0            0K            0
        md_sectors            0            0K            0
              sbuf            0            0K          288
           md_disk            0            0K            0
        compressor            0            0K            0
           malodev            0            0K            0
              SWAP            0            0K            0
               LED            0            0K            0
         sysctltmp            0            0K          597
            sysctl            0            0K            1
              ekcd            0            0K            0
            dumper            0            0K            0
          sendfile            0            0K            0
              rctl            0            0K            0
          ix_sriov            0            0K            0
        aacraidcam            0            0K            0
                ix            0            0K            0
            ipsbuf            0            0K            0
            iirbuf            0            0K            0
             cache            0            0K            0
       aacraid_buf            0            0K            0
      prison_racct            0            0K            0
       Fail Points            0            0K            0
             sigio            0            0K            1
filedesc_to_leader            0            0K            0
               pwd            0            0K            0
       tty console            0            0K            0
            aaccam            0            0K            0
            aacbuf            0            0K            0
              zstd            0            0K            0
            nvlist            0            0K            0
          SCSI ENC            0            0K            0
           SCSI sa            0            0K            0
        isofs_node            0            0K            0
       isofs_mount            0            0K            0
     tr_raid5_data            0            0K            0
    tr_raid1e_data            0            0K            0
     tr_raid1_data            0            0K            0
     tr_raid0_data            0            0K            0
    tr_concat_data            0            0K            0
       md_sii_data            0            0K            0
   md_promise_data            0            0K            0
    md_nvidia_data            0            0K            0
   md_jmicron_data            0            0K            0
     md_intel_data            0            0K            0
       md_ddf_data            0            0K            0
         raid_data            0            0K           72
     geom_flashmap            0            0K            0
           NFS FHA            0            0K            0
         newnfsmnt            0            0K            0
  newnfsclient_req            0            0K            0
   NFSCL layrecall            0            0K            0
     NFSCL session            0            0K            0
     NFSCL sockreq            0            0K            0
     NFSCL devinfo            0            0K            0
     NFSCL flayout            0            0K            0
      NFSCL layout            0            0K            0
     NFSD rollback            0            0K            0
NFSCL diroffdiroff            0            0K            0
       NEWdirectio            0            0K            0
        NEWNFSnode            0            0K            0
         NFSCL lck            0            0K            0
      NFSCL lckown            0            0K            0
      NFSCL client            0            0K            0
       NFSCL deleg            0            0K            0
        NFSCL open            0            0K            0
       NFSCL owner            0            0K            0
            NFS fh            0            0K            0
           NFS req            0            0K            0
     NFSD usrgroup            0            0K            0
       NFSD string            0            0K            0
       NFSD V4lock            0            0K            0
      NFSD V4state            0            0K            0
     NFSD srvcache            0            0K            0
       msdosfs_fat            0            0K            0
     msdosfs_mount            0            0K            0
      msdosfs_node            0            0K            0
            DEVFS4            0            0K            0
            DEVFS2            0            0K            0
            gntdev            0            0K            0
       privcmd_dev            0            0K            0
        evtchn_dev            0            0K            0
          xenstore            0            0K            0
         scsi_pass            0            0K            0
         ciss_data            0            0K            0
               xnb            0            0K            0
              xbbd            0            0K            0
               xbd            0            0K            0
           Balloon            0            0K            0
          sysmouse            0            0K            0
            vtfont            0            0K            0
db> show ktr
No such command; use "help" to list available commands

Crashes (25):
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets Title
ci-freebsd-main 2020/04/26 21:15 freebsd 3188fdb7b877 0ce7569e console log report
ci-freebsd-main 2020/04/26 15:21 freebsd 3188fdb7b877 0ce7569e console log report
ci-freebsd-main 2020/04/26 14:55 freebsd 3188fdb7b877 0ce7569e console log report
ci-freebsd-main 2020/04/26 13:55 freebsd 3188fdb7b877 0ce7569e console log report
ci-freebsd-main 2020/04/26 13:29 freebsd 3188fdb7b877 0ce7569e console log report
ci-freebsd-main 2020/04/26 13:26 freebsd 3188fdb7b877 0ce7569e console log report
ci-freebsd-main 2020/04/26 10:34 freebsd 3188fdb7b877 0ce7569e console log report
ci-freebsd-main 2020/04/26 10:32 freebsd 3188fdb7b877 0ce7569e console log report
ci-freebsd-main 2020/04/26 09:26 freebsd 3188fdb7b877 0ce7569e console log report
ci-freebsd-main 2020/04/26 09:00 freebsd 3188fdb7b877 0ce7569e console log report
ci-freebsd-main 2020/04/26 08:35 freebsd 3188fdb7b877 0ce7569e console log report
ci-freebsd-main 2020/04/26 08:26 freebsd 3188fdb7b877 0ce7569e console log report
ci-freebsd-main 2020/04/26 03:29 freebsd 1bb1283aafd8 b8bb8e5f console log report
ci-freebsd-main 2020/04/26 00:08 freebsd 1bb1283aafd8 b8bb8e5f console log report
ci-freebsd-main 2020/04/25 21:52 freebsd 1bb1283aafd8 b8bb8e5f console log report
ci-freebsd-main 2020/04/25 20:13 freebsd 1bb1283aafd8 b8bb8e5f console log report
ci-freebsd-main 2020/04/25 20:07 freebsd 1bb1283aafd8 b8bb8e5f console log report
ci-freebsd-i386 2020/04/26 19:50 freebsd 3188fdb7b877 0ce7569e console log report
ci-freebsd-i386 2020/04/26 13:07 freebsd 3188fdb7b877 0ce7569e console log report
ci-freebsd-i386 2020/04/26 12:32 freebsd 3188fdb7b877 0ce7569e console log report
ci-freebsd-i386 2020/04/26 09:01 freebsd 3188fdb7b877 0ce7569e console log report
ci-freebsd-i386 2020/04/26 02:05 freebsd 1bb1283aafd8 b8bb8e5f console log report
ci-freebsd-i386 2020/04/26 01:43 freebsd 1bb1283aafd8 b8bb8e5f console log report
ci-freebsd-i386 2020/04/26 00:16 freebsd 1bb1283aafd8 b8bb8e5f console log report
ci-freebsd-i386 2020/04/25 23:38 freebsd 1bb1283aafd8 b8bb8e5f console log report
* Struck through repros no longer work on HEAD.