kern.securelevel: 0 -> 1 creating runtime link editor directory cache. preserving editor files. starting network daemons: sshd. starting local daemons:. Sat Jun 22 13:47:12 PDT 2019 OpenBSD/amd64 (ci-openbsd-main-2.c.syzkaller.internal) (tty00) Warning: Permanently added '10.128.1.10' (ECDSA) to the list of known hosts. 2019/06/22 13:47:34 parsed 1 programs 2019/06/22 13:47:40 executed programs: 0 login: kernel: protection fault trap, code=0 Stopped at mrouter6_rtwalk_delete+0x2b: movl 0x5c(%r15),%r12d ddb> ddb> set $lines = 0 ddb> set $maxwidth = 0 ddb> show panic the kernel did not panic ddb> trace mrouter6_rtwalk_delete(a0acf441032be5ec,0,0) at mrouter6_rtwalk_delete+0x2b rtable_walk_helper(fffffd8036da9ab0,ffff8000149d6718) at rtable_walk_helper+0x58 art_table_walk(ffff800000075780,fffffd80351ab868,ffffffff81b0c620,ffff8000149d6718) at art_table_walk+0x226 art_table_walk(ffff800000075780,fffffd80351ab848,ffffffff81b0c620,ffff8000149d6718) at art_table_walk+0x2a6 art_table_walk(ffff800000075780,fffffd80351ab828,ffffffff81b0c620,ffff8000149d6718) at art_table_walk+0x2a6 art_table_walk(ffff800000075780,fffffd80351ab7e8,ffffffff81b0c620,ffff8000149d6718) at art_table_walk+0x2a6 art_table_walk(ffff800000075780,fffffd80351ab7a8,ffffffff81b0c620,ffff8000149d6718) at art_table_walk+0x2a6 art_table_walk(ffff800000075780,fffffd80351ab788,ffffffff81b0c620,ffff8000149d6718) at art_table_walk+0x2a6 art_table_walk(ffff800000075780,fffffd80351ab768,ffffffff81b0c620,ffff8000149d6718) at art_table_walk+0x2a6 art_table_walk(ffff800000075780,fffffd80351ab748,ffffffff81b0c620,ffff8000149d6718) at art_table_walk+0x2a6 art_table_walk(ffff800000075780,fffffd80351ab728,ffffffff81b0c620,ffff8000149d6718) at art_table_walk+0x2a6 art_table_walk(ffff800000075780,fffffd80351ab6c8,ffffffff81b0c620,ffff8000149d6718) at art_table_walk+0x2a6 art_table_walk(ffff800000075780,fffffd80351ab6a8,ffffffff81b0c620,ffff8000149d6718) at art_table_walk+0x2a6 art_table_walk(ffff800000075780,fffffd80351ab688,ffffffff81b0c620,ffff8000149d6718) at art_table_walk+0x2a6 art_table_walk(ffff800000075780,fffffd80351ab668,ffffffff81b0c620,ffff8000149d6718) at art_table_walk+0x2a6 art_table_walk(ffff800000075780,fffffd80351ab648,ffffffff81b0c620,ffff8000149d6718) at art_table_walk+0x2a6 art_table_walk(ffff800000075780,fffffd80351ab628,ffffffff81b0c620,ffff8000149d6718) at art_table_walk+0x2a6 art_table_walk(ffff800000075780,fffffd80351ab608,ffffffff81b0c620,ffff8000149d6718) at art_table_walk+0x2a6 art_table_walk(ffff800000075780,fffffd80351ab5c8,ffffffff81b0c620,ffff8000149d6718) at art_table_walk+0x2a6 art_table_walk(ffff800000075780,fffffd80351ab5a8,ffffffff81b0c620,ffff8000149d6718) at art_table_walk+0x2a6 art_table_walk(ffff800000075780,fffffd80351ab588,ffffffff81b0c620,ffff8000149d6718) at art_table_walk+0x2a6 art_table_walk(ffff800000075780,fffffd80351ab528,ffffffff81b0c620,ffff8000149d6718) at art_table_walk+0x2a6 art_table_walk(ffff800000075780,fffffd80351ab508,ffffffff81b0c620,ffff8000149d6718) at art_table_walk+0x2a6 art_table_walk(ffff800000075780,fffffd80351ab488,ffffffff81b0c620,ffff8000149d6718) at art_table_walk+0x2a6 art_table_walk(ffff800000075780,fffffd80351ab388,ffffffff81b0c620,ffff8000149d6718) at art_table_walk+0x2a6 art_table_walk(ffff800000075780,fffffd80351ab368,ffffffff81b0c620,ffff8000149d6718) at art_table_walk+0x2a6 art_table_walk(ffff800000075780,fffffd80351ab348,ffffffff81b0c620,ffff8000149d6718) at art_table_walk+0x2a6 art_table_walk(ffff800000075780,fffffd80351ab328,ffffffff81b0c620,ffff8000149d6718) at art_table_walk+0x2a6 art_table_walk(ffff800000075780,fffffd80351ab308,ffffffff81b0c620,ffff8000149d6718) at art_table_walk+0x2a6 art_table_walk(ffff800000075780,fffffd80351ab2c8,ffffffff81b0c620,ffff8000149d6718) at art_table_walk+0x2a6 art_table_walk(ffff800000075780,fffffd80351ab2a8,ffffffff81b0c620,ffff8000149d6718) at art_table_walk+0x2a6 art_table_walk(ffff800000075780,fffffd80351ab288,ffffffff81b0c620,ffff8000149d6718) at art_table_walk+0x2a6 art_table_walk(ffff800000075780,fffffd8036da8ea0,ffffffff81b0c620,ffff8000149d6718) at art_table_walk+0x2a6 art_table_walk(ffff800000075780,fffffd8036da8ec0,ffffffff81b0c620,ffff8000149d6718) at art_table_walk+0x2a6 art_walk(ffff800000075780,ffffffff81b0c620,ffff8000149d6718) at art_walk+0xcf rtable_walk(0,18,0,ffffffff81054df0,0) at rtable_walk+0xd4 ip6_mrouter_done(fffffd803ec0b780) at ip6_mrouter_done+0xb5 rip6_detach(fffffd803ec0b780) at rip6_detach+0x56 soclose(fffffd803ec0b780,0) at soclose+0xb2 soo_close(fffffd80375a87f8,ffff8000ffff4288) at soo_close+0x40 fdrop(fffffd80375a87f8,ffff8000ffff4288) at fdrop+0xc9 closef(fffffd80375a87f8,ffff8000ffff4288) at closef+0x118 fdfree(ffff8000ffff4288) at fdfree+0xf7 exit1(ffff8000ffff4288,0,1) at exit1+0x32f sys_exit(ffff8000ffff4288,ffff8000149d6bb0,ffff8000149d6c20) at sys_exit+0x17 syscall(ffff8000149d6c80) at syscall+0x508 Xsyscall(6,1,0,1,0,7f7ffffe5924) at Xsyscall+0x128 end of kernel end trace frame: 0x7f7ffffe58f0, count: -47 ddb> show registers rdi 0xa0acf441032be5ec rsi 0 rbp 0xffff8000149d5450 rbx 0xffff800000075788 rdx 0 rcx 0x1 rax 0x204 r8 0x100000 acpi_pdirpa+0xebe68 r9 0x5 r10 0xab4a3eec021c884d r11 0x20f064dde7e6d287 r12 0 r13 0xfffffd80351ab868 r14 0 r15 0xa0acf441032be5ec rip 0xffffffff81054e1b mrouter6_rtwalk_delete+0x2b cs 0x8 rflags 0x10246 __ALIGN_SIZE+0xf246 rsp 0xffff8000149d5410 ss 0x10 mrouter6_rtwalk_delete+0x2b: movl 0x5c(%r15),%r12d ddb> show proc PROC (syz-executor.0) pid=121040 stat=onproc flags process=8 proc=2000 pri=50, usrpri=50, nice=20 forw=0xffffffffffffffff, list=0xffff8000ffff93c8,0xffffffff822cbdb0 process=0xffff8000ffff66d0 user=0xffff8000149d1000, vmspace=0xfffffd803f013ee0 estcpu=0, cpticks=1, pctcpu=0.0 user=0, sys=1, intr=0 ddb> ps PID TID PPID UID S FLAGS WAIT COMMAND 74119 181166 97213 0 2 0x2 syz-executor.1 40582 387197 97213 0 2 0x2 syz-executor.0 97213 103080 28272 0 3 0x82 thrsleep syz-execprog 97213 90043 28272 0 3 0x4000082 nanosleep syz-execprog 97213 121908 28272 0 3 0x4000082 thrsleep syz-execprog 97213 254947 28272 0 3 0x4000082 thrsleep syz-execprog 97213 41441 28272 0 3 0x4000082 kqread syz-execprog 97213 70774 28272 0 3 0x4000082 thrsleep syz-execprog 97213 144228 28272 0 3 0x4000082 thrsleep syz-execprog 28272 285992 58359 0 3 0x10008a pause ksh 58359 119972 46074 0 3 0x92 select sshd 94925 236932 1 0 3 0x100083 ttyin getty 46074 352146 1 0 3 0x80 select sshd 20978 90031 59753 73 3 0x100090 kqread syslogd 59753 395756 1 0 3 0x100082 netio syslogd 48121 8043 1 77 3 0x100090 poll dhclient 4282 519646 1 0 3 0x80 poll dhclient 60228 321725 0 0 2 0x14200 zerothread 98598 521210 0 0 3 0x14200 aiodoned aiodoned 91017 466153 0 0 3 0x14200 syncer update 79558 336275 0 0 3 0x14200 cleaner cleaner 23716 273103 0 0 3 0x14200 reaper reaper 85215 68145 0 0 3 0x14200 pgdaemon pagedaemon 46448 104737 0 0 3 0x14200 bored crynlk 80999 454427 0 0 3 0x14200 bored crypto 28054 196044 0 0 3 0x40014200 acpi0 acpi0 17179 371858 0 0 3 0x14200 bored softnet 30583 303640 0 0 2 0x14200 systqmp 91986 309650 0 0 3 0x14200 bored systq 93336 142068 0 0 3 0x40014200 bored softclock 76949 377607 0 0 3 0x40014200 idle0 962 510675 0 0 3 0x14200 bored smr 1 264977 0 0 3 0x82 wait init 0 0 -1 0 3 0x10200 scheduler swapper ddb> show all locks No such command ddb> show malloc Type InUse MemUse HighUse Limit Requests Type Lim Kern Lim devbuf 9436 6311K 6311K 78643K 10529 0 0 pcb 24 9K 9K 78643K 60 0 0 rtable 106 3K 3K 78643K 194 0 0 ifaddr 34 9K 9K 78643K 34 0 0 counters 19 16K 16K 78643K 19 0 0 ioctlops 0 0K 2K 78643K 15 0 0 mount 1 1K 1K 78643K 1 0 0 vnodes 1180 74K 74K 78643K 1185 0 0 UFS quota 1 32K 32K 78643K 1 0 0 UFS mount 5 36K 36K 78643K 5 0 0 shm 2 1K 1K 78643K 2 0 0 VM map 2 0K 0K 78643K 2 0 0 sem 2 0K 0K 78643K 2 0 0 dirhash 12 2K 2K 78643K 12 0 0 ACPI 1793 195K 288K 78643K 12645 0 0 file desc 4 12K 24K 78643K 34 0 0 proc 40 30K 54K 78643K 337 0 0 NFS srvsock 1 0K 0K 78643K 1 0 0 NFS daemon 1 16K 16K 78643K 1 0 0 in_multi 33 2K 2K 78643K 33 0 0 ether_multi 1 0K 0K 78643K 1 0 0 mrt 1 0K 0K 78643K 2 0 0 ISOFS mount 1 32K 32K 78643K 1 0 0 MSDOSFS mount 1 16K 16K 78643K 1 0 0 ttys 18 79K 79K 78643K 18 0 0 exec 0 0K 1K 78643K 185 0 0 pagedep 1 8K 8K 78643K 1 0 0 inodedep 1 32K 32K 78643K 1 0 0 newblk 1 0K 0K 78643K 1 0 0 VM swap 7 26K 26K 78643K 7 0 0 UVM amap 70 19K 20K 78643K 900 0 0 UVM aobj 2 2K 2K 78643K 2 0 0 memdesc 1 4K 4K 78643K 1 0 0 crypto data 1 1K 1K 78643K 1 0 0 NDP 9 0K 0K 78643K 9 0 0 temp 46 2702K 2765K 78643K 2987 0 0 SYN cache 2 16K 16K 78643K 2 0 0 ddb> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle arp 64 6 0 0 1 0 1 1 0 8 0 inpcbpl 280 31 0 24 1 0 1 1 0 8 0 rtentry 112 46 0 2 2 0 2 2 0 8 0 syncache 264 5 0 5 1 0 1 1 0 8 1 tcpcb 544 8 0 5 1 0 1 1 0 8 0 rttmr 72 1 0 1 1 0 1 1 0 8 1 nd6 48 6 0 0 1 0 1 1 0 8 0 art_heap8 4096 1 0 0 1 0 1 1 0 8 0 art_heap4 256 219 0 0 14 0 14 14 0 8 0 art_table 32 220 0 0 2 0 2 2 0 8 0 art_node 16 45 0 4 1 0 1 1 0 8 0 dirhash 1024 17 0 0 3 0 3 3 0 8 0 dino1pl 128 1443 0 20 46 0 46 46 0 8 0 ffsino 240 1443 0 20 84 0 84 84 0 8 0 nchpl 144 1674 0 34 61 0 61 61 0 8 0 uvmvnodes 72 1452 0 0 27 0 27 27 0 8 0 vnodes 200 1452 0 0 77 0 77 77 0 8 0 namei 1024 4114 0 4114 2 1 1 1 0 8 1 scxspl 192 3761 0 3761 7 1 6 6 0 8 6 plimitpl 152 15 0 8 1 0 1 1 0 8 0 sigapl 432 210 0 197 2 0 2 2 0 8 0 knotepl 112 51 0 34 1 0 1 1 0 8 0 kqueuepl 104 2 0 0 1 0 1 1 0 8 0 pipepl 112 146 0 127 2 1 1 1 0 8 0 fdescpl 424 211 0 197 2 0 2 2 0 8 0 filepl 120 988 0 926 2 0 2 2 0 8 0 lockfpl 104 6 0 6 1 1 0 1 0 8 0 lockfspl 48 3 0 3 1 1 0 1 0 8 0 sessionpl 112 19 0 9 1 0 1 1 0 8 0 pgrppl 48 19 0 9 1 0 1 1 0 8 0 ucredpl 96 47 0 40 1 0 1 1 0 8 0 zombiepl 144 198 0 197 2 1 1 1 0 8 0 processpl 864 225 0 197 4 0 4 4 0 8 0 procpl 632 231 0 197 4 0 4 4 0 8 1 sockpl 384 77 0 60 2 0 2 2 0 8 0 mcl4k 4096 10 0 10 1 0 1 1 0 8 1 mcl2k 2048 5530 0 5502 6 2 4 6 0 8 0 mtagpl 80 2 0 2 1 1 0 1 0 8 0 mbufpl 256 9726 0 9613 8 0 8 8 0 8 0 bufpl 256 5304 0 1181 258 0 258 258 0 8 0 anonpl 16 21406 0 19934 14 2 12 12 0 62 5 amapchunkpl 152 875 0 814 5 0 5 5 0 158 1 amappl16 192 120 0 88 2 0 2 2 0 8 0 amappl14 176 52 0 48 1 0 1 1 0 8 0 amappl13 168 13 0 12 1 0 1 1 0 8 0 amappl12 160 8 0 6 1 0 1 1 0 8 0 amappl11 152 50 0 38 1 0 1 1 0 8 0 amappl10 144 65 0 63 2 1 1 1 0 8 0 amappl9 136 400 0 396 1 0 1 1 0 8 0 amappl8 128 125 0 114 1 0 1 1 0 8 0 amappl7 120 27 0 25 1 0 1 1 0 8 0 amappl6 112 58 0 51 1 0 1 1 0 8 0 amappl5 104 144 0 134 1 0 1 1 0 8 0 amappl4 96 451 0 424 1 0 1 1 0 8 0 amappl3 88 173 0 163 1 0 1 1 0 8 0 amappl2 80 868 0 811 4 1 3 3 0 8 1 amappl1 72 13955 0 13557 26 9 17 19 0 8 8 amappl 80 456 0 428 1 0 1 1 0 84 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma64 64 259 0 259 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 17 0 17 1 1 0 1 0 8 0 aobjpl 64 1 0 0 1 0 1 1 0 8 0 uaddrrnd 24 211 0 197 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 211 0 197 1 0 1 1 0 8 0 vmmpekpl 168 6261 0 6244 1 0 1 1 0 8 0 vmmpepl 168 30019 0 29127 87 12 75 75 0 357 33 vmsppl 272 210 0 197 2 0 2 2 0 8 1 pdppl 4096 428 0 394 6 0 6 6 0 8 0 pvpl 32 103588 0 99799 104 5 99 99 0 265 65 pmappl 200 210 0 197 1 0 1 1 0 8 0 extentpl 40 41 0 26 1 0 1 1 0 8 0 phpool 112 388 0 5 11 0 11 11 0 8 0 ddb>