Autoloading module: intpm.ko
Starting background file system checks in 60 seconds.

Fri Oct 18 03:04

FreeBSD/amd64 (ci-freebsd-main-4.c.syzkaller.internal) (ttyu0)



Warning: Permanently added '10.128.1.50' (ECDSA) to the list of known hosts.
2019/10/18 03:06:44 parsed 1 programs
2019/10/18 03:06:44 executed programs: 0
2019/10/18 03:06:49 executed programs: 62
login: 

Fatal trap 12: page fault while in kernel mode
cpuid = 1; apic id = 01
fault virtual address	= 0x418
fault code		= supervisor read data, page not present
instruction pointer	= 0x20:0xffffffff81003017
stack pointer	        = 0x28:0xfffffe0024346670
frame pointer	        = 0x28:0xfffffe0024346710
code segment		= base 0x0, limit 0xfffff, type 0x1b
			= DPL 0, pres 1, long 1, def32 0, gran 1
processor eflags	= interrupt enabled, resume, IOPL = 0
current process		= 967 (syz-executor.3)
trap number		= 12
panic: page fault
cpuid = 1
time = 1571368013
KDB: stack backtrace:
db_trace_self_wrapper() at db_trace_self_wrapper+0x47/frame 0xfffffe0024346270
vpanic() at vpanic+0x1c7/frame 0xfffffe00243462e0
panic() at panic+0x43/frame 0xfffffe0024346340
trap_fatal() at trap_fatal+0x4d6/frame 0xfffffe00243463d0
trap_pfault() at trap_pfault+0xdc/frame 0xfffffe0024346470
trap() at trap+0x44a/frame 0xfffffe00243465a0
calltrap() at calltrap+0x8/frame 0xfffffe00243465a0
--- trap 0xc, rip = 0xffffffff81003017, rsp = 0xfffffe0024346670, rbp = 0xfffffe0024346710 ---
__mtx_lock_sleep() at __mtx_lock_sleep+0x127/frame 0xfffffe0024346710
__mtx_lock_flags() at __mtx_lock_flags+0x155/frame 0xfffffe0024346770
soo_stat() at soo_stat+0x13b/frame 0xfffffe00243467b0
kern_fstat() at kern_fstat+0xed/frame 0xfffffe0024346800
freebsd11_fstat() at freebsd11_fstat+0x2b/frame 0xfffffe0024346980
amd64_syscall() at amd64_syscall+0x473/frame 0xfffffe0024346ab0
fast_syscall_common() at fast_syscall_common+0x101/frame 0xfffffe0024346ab0
--- syscall (198, FreeBSD ELF64, nosys), rip = 0x4132aa, rsp = 0x7fffdffbbf38, rbp = 0x2 ---
KDB: enter: panic
[ thread pid 967 tid 100438 ]
Stopped at      kdb_enter+0x67: movq    $0,0x14772a6(%rip)