failed to run ["ssh" "-p" "22" "-F" "/dev/null" "-o" "UserKnownHostsFile=/dev/null" "-o" "BatchMode=yes" "-o" "IdentitiesOnly=yes" "-o" "StrictHostKeyChecking=no" "-o" "ConnectTimeout=10" "-i" "/syzkaller/managers/i386/latest.tmp/key" "root@10.128.1.95" "pwd"]: exit status 255 ssh: connect to host 10.128.1.95 port 22: Operation timed out Pseudo-terminal will not be allocated because stdin is not a terminal. Warning: Permanently added '[ssh-serialport.googleapis.com]:9600' (RSA) to the list of known hosts. serialport: Connected to syzkaller.us-central1-c.ci-freebsd-i386-test-0 port 1 (session ID: ff829075e853292467169c60d3614a9b012265d63c0cbff88b47c9efbc7b2d78, active connections: 1). SeaBIOS (version 1.8.2-google) Total RAM Size = 0x0000000080000000 = 2048 MiB CPUs found: 2 Max CPUs supported: 2 SeaBIOS (version 1.8.2-google) Machine UUID ced9917b-3dd0-048f-d942-086a49d23637 found virtio-scsi at 0:3 virtio-scsi vendor='Google' product='PersistentDisk' rev='1' type=0 removable=0 virtio-scsi blksize=512 sectors=6291456 = 3072 MiB drive 0x000f27d0: PCHS=0/0/0 translation=lba LCHS=780/128/63 s=6291456 Sending Seabios boot VM event. Booting from Hard Disk 0... Loading /boot/loader.conf.local -\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/Loading kernel... -\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-/boot/kernel/kernel text=0x188858 \|/-\|/-\|/-\|text=0x1fde357 /-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\text=0xbe7c54 |/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-data=0x7320 data=0x8c2ef0+0x535110 \|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/syms=[0x8+0x3a51c8-\|/-\|/-\|/-\|/-\|/-\|/-\|/-+0x8+0x1d2416\|/-\|/-\|/-\|/] Loading configured modules... -\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\/boot/kernel/tcp_bbr.ko |/-\|/-\size 0xd40c0 at 0x4378000 |/-\|/-\|/-\|/-\|/-\|/boot/kernel/mqueuefs.ko /-size 0x268b0 at 0x444d000 \|/-\|/-\|/-\|//boot/kernel/cc_htcp.ko size 0x78d8 at 0x4474000 -\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|can't find 'cc_vegas' /-\|/-\|/-\|/-\/boot/kernel/sctp.ko |/-\|/-\|/-\|/-\|/-\|/-\size 0x2dda50 at 0x447c000 |/-\|/-\|/-\|/-/boot/kernel/cc_dctcp.ko \size 0x87a8 at 0x475a000 |/-\|/-\|/-\|/-\|/-\|/boot/kernel/cc_cubic.ko /size 0x9568 at 0x4763000 -\|/-\|/-\|/-\|/-\|/-/boot/kernel/ipsec.ko \|/-\size 0x7cd78 at 0x476d000 |/-\|/-\|/-\|/-\|/-/boot/kernel/tcp_rack.ko \|/-\|/-\size 0x10b710 at 0x47ea000 |/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/can't find 'cc_cdg' -\|/-\|/-\|/-\|/-\|/-/boot/kernel/pf.ko \|/-\|/-\|/-\|/-size 0x1df3e0 at 0x48f6000 \|/-\|/-\|/-\|/-\|//boot/kernel/sem.ko size 0x10bd8 at 0x4ad6000 -\|/-\|/-\|/-\|/-\|/boot/kernel/filemon.ko size 0xd920 at 0x4ae7000 /-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-can't find 'cc_chd' \|/-\|/-\|/-\|/-\|/-\/boot/kernel/cryptodev.ko |size 0x15880 at 0x4af5000 /-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-can't find 'cc_hd' \|/-\|/-/boot/entropy size=0x1000 \|/-\|GDB: no debug ports present KDB: debugger backends: ddb KDB: current backend: ddb ---<>--- Copyright (c) 1992-2023 The FreeBSD Project. Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994 The Regents of the University of California. All rights reserved. FreeBSD is a registered trademark of The FreeBSD Foundation. FreeBSD 14.0-CURRENT #0 n260944-4b0552d5f4ea: Wed Feb 15 01:02:08 UTC 2023 root@ci-freebsd:/syzkaller/managers/i386/kernel/obj/syzkaller/managers/i386/kernel/amd64.amd64/sys/SYZKALLER amd64 FreeBSD clang version 15.0.7 (https://github.com/llvm/llvm-project.git llvmorg-15.0.7-0-g8dfdcc7b7bf6) WARNING: WITNESS option enabled, expect reduced performance. WARNING: DIAGNOSTIC option enabled, expect reduced performance. VT(vga): text 80x25 module cubic already present! CPU: Intel(R) Xeon(R) CPU @ 2.20GHz (2200.18-MHz K8-class CPU) Origin="GenuineIntel" Id=0x406f0 Family=0x6 Model=0x4f Stepping=0 Features=0x1f83fbff Features2=0xfefa3223 AMD Features=0x2c100800 AMD Features2=0x121 Structured Extended Features=0x1c2ffb Structured Extended Features3=0xac000400 XSAVE Features=0x1 IA32_ARCH_CAPS=0x4c VT-x: PAT,HLT,PAUSE,EPT,UG,VPID TSC: P-state invariant Hypervisor: Origin = "KVMKVMKVM" real memory = 2147483648 (2048 MB) avail memory = 1795162112 (1712 MB) Event timer "LAPIC" quality 600 ACPI APIC Table: FreeBSD/SMP: Multiprocessor System Detected: 2 CPUs FreeBSD/SMP: 1 package(s) x 1 core(s) x 2 hardware threads random: registering fast source Intel Secure Key RNG random: fast provider: "Intel Secure Key RNG" random: unblocking device. ioapic0 irqs 0-23 Launching APs: 1 TCP_ratelimit: Is now initialized TCP Hpts created 2 swi interrupt threads and bound 0 to cpus HPTS is in INVARIANT mode!! random: entropy device external interface kbd1 at kbdmux0 kvmclock0: Timecounter "kvmclock" frequency 1000000000 Hz quality 975 kvmclock0: registered as a time-of-day clock, resolution 0.000001s vtvga0: smbios0: at iomem 0xf2840-0xf285e smbios0: Version: 2.4, BCD Revision: 2.4 aesni0: acpi0: acpi0: Power Button (fixed) acpi0: Sleep Button (fixed) cpu0: on acpi0 atrtc0: port 0x70-0x71,0x72-0x77 irq 8 on acpi0 atrtc0: registered as a time-of-day clock, resolution 1.000000s Event timer "RTC" frequency 32768 Hz quality 0 Timecounter "ACPI-fast" frequency 3579545 Hz quality 900 acpi_timer0: <24-bit timer at 3.579545MHz> port 0xb008-0xb00b on acpi0 pcib0: port 0xcf8-0xcff on acpi0 pci0: on pcib0 isab0: at device 1.0 on pci0 isa0: on isab0 pci0: at device 1.3 (no driver attached) virtio_pci0: port 0xc000-0xc03f mem 0xfe800000-0xfe80007f irq 11 at device 3.0 on pci0 vtscsi0: on virtio_pci0 virtio_pci1: port 0xc040-0xc07f mem 0xfe801000-0xfe80107f irq 11 at device 4.0 on pci0 vtnet0: on virtio_pci1 vtnet0: Ethernet address: 42:01:0a:80:01:5f vtnet0: netmap queues/slots: TX 2/2048, RX 2/2048 000.000127 [ 453] vtnet_netmap_attach vtnet attached txq=2, txd=2048 rxq=2, rxd=2048 vgapci0: mem 0xfe000000-0xfe7fffff irq 10 at device 5.0 on pci0 vgapci0: Boot video device virtio_pci2: port 0xc080-0xc09f mem 0xfe802000-0xfe80207f irq 10 at device 6.0 on pci0 vtballoon0: on virtio_pci2 virtio_pci3: port 0xc0a0-0xc0bf mem 0xfe803000-0xfe80303f irq 11 at device 7.0 on pci0 atkbdc0: port 0x60,0x64 irq 1 on acpi0 atkbd0: irq 1 on atkbdc0 kbd0 at atkbd0 atkbd0: [GIANT-LOCKED] psm0: irq 12 on atkbdc0 psm0: [GIANT-LOCKED] WARNING: Device "psm" is Giant locked and may be deleted before FreeBSD 14.0. psm0: model IntelliMouse Explorer, device ID 4 uart0: <16550 or compatible> port 0x3f8-0x3ff irq 4 flags 0x10 on acpi0 uart0: console (9600,n,8,1) uart1: <16550 or compatible> port 0x2f8-0x2ff irq 3 on acpi0 uart2: port 0x3e8-0x3ef irq 6 on acpi0 uart3: <16550 or compatible> port 0x2e8-0x2ef irq 7 on acpi0 orm0: at iomem 0xeb800-0xeffff pnpid ORM0000 on isa0 vga0: at port 0x3c0-0x3df iomem 0xa0000-0xbffff pnpid PNP0900 on isa0 attimer0: at port 0x40 on isa0 Timecounter "i8254" frequency 1193182 Hz quality 0 attimer0: Can't map interrupt. NULL mp in getnewvnode(9), tag crossmp Timecounter "TSC-low" frequency 1100105092 Hz quality 1000 Timecounters tick every 10.000 msec [nl_generic] genl_register_family: Registered family nlctrl id 16 Fatal trap 12: page fault while in kernel mode cpuid = 1; apic id = 01 fault virtual address = 0x30030000 fault code = supervisor read data, page not present instruction pointer = 0x20:0xffffffff81bcbabd stack pointer = 0x28:0xffffffff84d22ba0 frame pointer = 0x28:0xffffffff84d22cc0 code segment = base 0x0, limit 0xfffff, type 0x1b = DPL 0, pres 1, long 1, def32 0, gran 1 processor eflags = interrupt enabled, resume, IOPL = 0 current process = 0 (swapper) rdi: 30030000 rsi: 0 rdx: 0 rcx: fffffe00033eee30 r8: fffff78000000000 r9: 20000000000 rax: fffffe00033eee30 rbx: ffffffff83dc7bf8 rbp: ffffffff84d22cc0 r10: 0 r11: 2d8ffc51 r12: fffffe005791ac00 r13: 3ffffff r14: 10030000 r15: 1ffffffff09a457c trap number = 12 panic: page fault cpuid = 1 time = 1 KDB: stack backtrace: db_trace_self_wrapper() at db_trace_self_wrapper+0xc7/frame 0xffffffff84d22390 kdb_backtrace() at kdb_backtrace+0xd1/frame 0xffffffff84d224f0 vpanic() at vpanic+0x254/frame 0xffffffff84d225d0 panic() at panic+0xb5/frame 0xffffffff84d22690 trap_fatal() at trap_fatal+0x7ed/frame 0xffffffff84d227b0 trap_pfault() at trap_pfault+0x182/frame 0xffffffff84d228f0 trap() at trap+0x5e1/frame 0xffffffff84d22ad0 calltrap() at calltrap+0x8/frame 0xffffffff84d22ad0 --- trap 0xc, rip = 0xffffffff81bcbabd, rsp = 0xffffffff84d22ba0, rbp = 0xffffffff84d22cc0 --- nl_send_group() at nl_send_group+0x19d/frame 0xffffffff84d22cc0 nlmsg_write_group_mbuf() at nlmsg_write_group_mbuf+0xbb/frame 0xffffffff84d22d00 nlmsg_flush() at nlmsg_flush+0xba/frame 0xffffffff84d22d50 genl_register_family() at genl_register_family+0x5d0/frame 0xffffffff84d22e90 genl_load() at genl_load+0x89/frame 0xffffffff84d22eb0 mi_startup() at mi_startup+0x4c6/frame 0xffffffff84d22ff0 btext() at btext+0x3d KDB: enter: panic [ thread pid 0 tid 100000 ] Stopped at kdb_enter+0x6b: movq $0,0x258104a(%rip) db>