DF-3169 / run.log
kldload: can't load autofs: module already loaded or in kernel vfs.autofs.timeout: 1 -> 1 vfs.autofs.retry_attempts: 12 -> 12 vfs.autofs.retry_delay: 2 -> 2 vfs.autofs.interruptible: 1 -> 1 vfs.autofs.debug: 0 -> 0 df3169 on /df3169_mp (autofs) KLDRC=0 DF3169: harness loaded, scanning for autofs mount... DF3169: mp=0xfffff8008eddb800 amp=0xfffff8008d5d8e00 root anp=0xfffff8008da90e00 last_request_id=0 DF3169: ERROR: no trigger request appeared; is the stat churn running? DF3169: harness loaded, scanning for autofs mount... DF3169: mp=0xfffff8008db3d400 amp=0xfffff8008d214600 root anp=0xfffff800899b0e00 last_request_id=1 DF3169: churn trigger observed (ticks=6992); calling dounmount(MNT_FORCE) DF3169: dounmount returned 0 (ticks=8296, dounmount_ticks=8296) DF3169: reuse blocks: amp 0xfffff8008d214600 (freed amp was 0xfffff8008d214600) SAME-BLOCK, node 0xfffff800899b0e00 (freed anp was 0xfffff800899b0e00) SAME-BLOCK DF3169 POLL: anp=0xfffff800899b0e00 an_retries: -1 -> 6 (ticks=8298) DF3169: DANGLING REQUEST ar=0xfffff8011873ba00 id=6 ar_mount=0xfffff8008d214600 == FREED amp (ticks=8499, dounmount_ticks=8296) DF3169: ar_from="AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA"... DF3169: ar_path="AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA"... DF3169 POLL: freed anp=0xfffff800899b0e00 an_retries: 6 -> 7 (ticks=8593) <== WRITE-AFTER-FREE DF3169 POLL: freed anp=0xfffff800899b0e00 an_retries: 7 -> 8 (ticks=8896) <== WRITE-AFTER-FREE DF3169 POLL: freed anp=0xfffff800899b0e00 an_retries: 8 -> 9 (ticks=9197) <== WRITE-AFTER-FREE DF3169 POLL: freed anp=0xfffff800899b0e00 an_retries: 9 -> 10 (ticks=9499) <== WRITE-AFTER-FREE DF3169 POLL: freed anp=0xfffff800899b0e00 an_retries: 10 -> 11 (ticks=9791) <== WRITE-AFTER-FREE DF3169 POLL: freed anp=0xfffff800899b0e00 an_retries: 11 -> 0 (ticks=10093) <== WRITE-AFTER-FREE DF3169: SUMMARY dounmount_ticks=8296 dangling=1 write_after_free_transitions=6 last_request_id 1 -> 12 DF3169: UAF CONFIRMED - post-free accesses observed RUN-DONE