panic: to_ticks == 0 for timer type 2
2 views
Skip to first unread message
syzbot
Mar 25, 2020, 12:28:17 AM3/25/20
to syzkaller-f...@googlegroups.com
Hello,
syzbot found the following crash on:
HEAD commit: 51126b47 libpmc: Always add the full include path for libp..
git tree: freebsd
console output: https://syzkaller.appspot.com/x/log.txt?x=12b68a23e00000
dashboard link: https://syzkaller.appspot.com/bug?extid=b44787b4be7096cd1590
Unfortunately, I don't have any reproducer for this crash yet.
IMPORTANT: if you fix the bug, please add the following tag to the commit:
Reported-by: syzbot+b44787...@syzkaller.appspotmail.com
panic: to_ticks == 0 for timer type 2
cpuid = 0
time = 185
KDB: stack backtrace:
db_trace_self_wrapper() at db_trace_self_wrapper+0x47/frame 0xfffffe002b845420
vpanic() at vpanic+0x1c7/frame 0xfffffe002b845480
panic() at panic+0x43/frame 0xfffffe002b8454e0
sctp_timer_start() at sctp_timer_start+0xc7f/frame 0xfffffe002b845540
sctp_send_initiate() at sctp_send_initiate+0x10b/frame 0xfffffe002b8455d0
sctp_lower_sosend() at sctp_lower_sosend+0x3f54/frame 0xfffffe002b8457b0
sctp_sosend() at sctp_sosend+0x501/frame 0xfffffe002b8458e0
sosend() at sosend+0xc6/frame 0xfffffe002b845950
kern_sendit() at kern_sendit+0x33d/frame 0xfffffe002b845a00
sendit() at sendit+0x224/frame 0xfffffe002b845a60
sys_sendto() at sys_sendto+0x5c/frame 0xfffffe002b845ac0
amd64_syscall() at amd64_syscall+0x2f4/frame 0xfffffe002b845bf0
fast_syscall_common() at fast_syscall_common+0x101/frame 0xfffffe002b845bf0
--- syscall (198, FreeBSD ELF64, nosys), rip = 0x41332a, rsp = 0x7fffdfffdf38, rbp = 0x6 ---
KDB: enter: panic
[ thread pid 6865 tid 100136 ]
Stopped at kdb_enter+0x67: movq $0,0x146cf76(%rip)
db>
db> set $lines = 0
db> set $maxwidth = 0
db> show registers
cs 0x20
ds 0x3b ll+0x1a
es 0x3b ll+0x1a
fs 0x13
gs 0x1b
ss 0x28 ll+0x7
rax 0x12
rcx 0xfffffe0029a00000
rdx 0x3ffff
rbx 0
rsp 0xfffffe002b845400
rbp 0xfffffe002b845420
rsi 0x40001
rdi 0xffffffff810b5056 vprintf+0x176
r8 0
r9 0xffffffff
r10 0xf3b2edf
r11 0xfffffe002417ea10
r12 0xffffffff82068e50 ddb_dbbe
r13 0
r14 0xffffffff81932dde
r15 0xffffffff81932dde
rip 0xffffffff810aa317 kdb_enter+0x67
rflags 0x86 ll+0x65
kdb_enter+0x67: movq $0,0x146cf76(%rip)
db> show proc
Process 6865 (syz-executor.3) at 0xfffff8000bfd8530:
state: NORMAL
uid: 0 gids: 0, 0, 5
parent: pid 784 at 0xfffff8000ba30000
ABI: FreeBSD ELF64
arguments: /root/syz-executor.3
reaper: 0xfffff80003318000 reapsubtree: 1
sigparent: 20
vmspace: 0xfffffe00243ab9e8
(map 0xfffffe00243ab9e8)
(map.pmap 0xfffffe00243abaa8)
(pmap 0xfffffe00243abb08)
threads: 2
100469 RunQ syz-executor.3
100136 Run CPU 0 syz-executor.3
db> ps
pid ppid pgrp uid state wmesg wchan cmd
6867 769 769 0 R syz-executor.1
6866 768 768 0 R (threaded) syz-executor.0
100597 Run CPU 1 syz-executor.0
100135 S sbwait 0xfffffe0003dbee14 syz-executor.0
6865 784 784 0 R (threaded) syz-executor.3
100469 RunQ syz-executor.3
100136 Run CPU 0 syz-executor.3
6859 775 775 0 S (threaded) syz-executor.2
100114 S nanslp 0xffffffff824ffe90 syz-executor.2
100138 S accept 0xfffffe0003da6698 syz-executor.2
101092 S uwait 0xfffff8000bd07900 syz-executor.2
100143 S uwait 0xfffff80003809c80 syz-executor.2
101103 S uwait 0xfffff8000b324200 syz-executor.2
2615 1 2615 65 Ss select 0xfffff80003bc6f40 dhclient
2259 1 2259 0 Ss select 0xfffff80003bc7ac0 dhclient
2256 1 2256 0 Ss select 0xfffff80003bc7e40 dhclient
2236 1 2236 65 Ss select 0xfffff80003bc7440 dhclient
1847 1 1847 0 Ss select 0xfffff80003bc6cc0 dhclient
1844 1 1844 0 Ss select 0xfffff80003bc6b40 dhclient
1823 1 1823 65 Ss select 0xfffff80003bd6940 dhclient
1391 1 1391 0 Ss select 0xfffff8000b0b64c0 dhclient
1388 1 1388 0 Ss select 0xfffff80003bc7ec0 dhclient
1368 1 1368 65 Ss select 0xfffff8000b0b6240 dhclient
983 1 983 0 Ss select 0xfffff8000bd985c0 dhclient
978 1 978 0 Ss select 0xfffff80003bc6c40 dhclient
784 766 784 0 Ss nanslp 0xffffffff824ffe90 syz-executor.3
775 766 775 0 Ss nanslp 0xffffffff824ffe91 syz-executor.2
769 766 769 0 Rs syz-executor.1
768 766 768 0 Ss nanslp 0xffffffff824ffe90 syz-executor.0
766 764 764 0 S (threaded) syz-fuzzer
100074 S uwait 0xfffff80003807b80 syz-fuzzer
100097 S uwait 0xfffff80003a41480 syz-fuzzer
100098 S uwait 0xfffff80003a41580 syz-fuzzer
100099 S uwait 0xfffff80003a41680 syz-fuzzer
100100 S uwait 0xfffff80003a42900 syz-fuzzer
100101 S uwait 0xfffff80003808180 syz-fuzzer
100102 S kqread 0xfffff80003be5c00 syz-fuzzer
100103 S uwait 0xfffff8000b31e700 syz-fuzzer
100104 S uwait 0xfffff8000b31e580 syz-fuzzer
100106 S uwait 0xfffff8000b318d00 syz-fuzzer
764 762 764 0 Ss pause 0xfffff80003c6d0a8 csh
762 680 762 0 Ss select 0xfffff8000b0b6440 sshd
746 1 746 0 Ss+ ttyin 0xfffff80003814cb0 getty
745 1 745 0 Ss+ ttyin 0xfffff80003b3d8b0 getty
744 1 744 0 Ss+ ttyin 0xfffff80003b400b0 getty
743 1 743 0 Ss+ ttyin 0xfffff80003b408b0 getty
742 1 742 0 Ss+ ttyin 0xfffff800033a20b0 getty
741 1 741 0 Ss+ ttyin 0xfffff800033a28b0 getty
740 1 740 0 Ss+ ttyin 0xfffff800033a10b0 getty
739 1 739 0 Ss+ ttyin 0xfffff800033a18b0 getty
738 1 738 0 Ss+ ttyin 0xfffff800033a40b0 getty
684 1 684 0 Ss nanslp 0xffffffff824ffe90 cron
680 1 680 0 Ss select 0xfffff80003bc8e40 sshd
493 1 493 0 Ss select 0xfffff80003bc8740 syslogd
422 1 422 0 Ss select 0xfffff80003bc8dc0 devd
421 1 421 65 Ss select 0xfffff8000b0b6540 dhclient
336 1 336 0 Ss select 0xfffff8000b0b6340 dhclient
333 1 333 0 Ss select 0xfffff8000b0b62c0 dhclient
21 0 0 0 DL vlruwt 0xfffff800033eea60 [vnlru]
20 0 0 0 DL syncer 0xffffffff825d6358 [syncer]
19 0 0 0 DL (threaded) [bufdaemon]
100065 D qsleep 0xffffffff825d5858 [bufdaemon]
100070 D - 0xffffffff8200aa00 [bufspacedaemon-0]
100080 D sdflush 0xfffff800035998e8 [/ worker]
18 0 0 0 DL psleep 0xffffffff825f12c8 [vmdaemon]
17 0 0 0 DL (threaded) [pagedaemon]
100063 D psleep 0xffffffff8261d1d8 [dom0]
100068 D launds 0xffffffff8261d1e4 [laundry: dom0]
100069 D umarcl 0xffffffff81536c90 [uma]
16 0 0 0 DL - 0xffffffff8235a6b0 [rand_harvestq]
15 0 0 0 DL waiting 0xffffffff826627a0 [sctp_iterator]
9 0 0 0 DL - 0xffffffff825d525c [soaiod4]
8 0 0 0 DL - 0xffffffff825d525c [soaiod3]
7 0 0 0 DL - 0xffffffff825d525c [soaiod2]
6 0 0 0 DL - 0xffffffff825d525c [soaiod1]
5 0 0 0 DL (threaded) [cam]
100031 D - 0xffffffff82235ac0 [doneq0]
100062 D - 0xffffffff82235988 [scanner]
4 0 0 0 DL crypto_ 0xfffff800033e7190 [crypto returns 1]
3 0 0 0 DL crypto_ 0xfffff800033e7130 [crypto returns 0]
2 0 0 0 DL crypto_ 0xffffffff825eb338 [crypto]
14 0 0 0 DL seqstat 0xfffff8000336e888 [sequencer 00]
13 0 0 0 DL (threaded) [geom]
100022 D - 0xffffffff8261b808 [g_event]
100023 D - 0xffffffff8261b818 [g_up]
100024 D - 0xffffffff8261b810 [g_down]
12 0 0 0 WL (threaded) [intr]
100005 I [swi6: Giant taskq]
100007 I [swi5: fast taskq]
100011 I [swi6: task queue]
100017 I [swi1: netisr 0]
100018 I [swi3: vm]
100019 I [swi4: clock (0)]
100020 I [swi4: clock (1)]
100032 I [irq24: virtio_pci0]
100033 I [irq25: virtio_pci0]
100034 I [irq26: virtio_pci0]
100035 I [irq27: virtio_pci0]
100036 I [irq28: virtio_pci1]
100037 I [irq29: virtio_pci1]
100038 I [irq30: virtio_pci1]
100039 I [irq31: virtio_pci1]
100040 I [irq32: virtio_pci1]
100045 I [irq10: virtio_pci2]
100047 I [irq1: atkbd0]
100048 I [irq12: psm0]
100049 I [swi0: uart uart++]
11 0 0 0 RL (threaded) [idle]
100003 CanRun [idle: cpu0]
100004 CanRun [idle: cpu1]
1 0 1 0 SLs wait 0xfffff80003318000 [init]
10 0 0 0 DL audit_w 0xffffffff82663430 [audit]
0 0 0 0 DLs (threaded) [kernel]
100000 D swapin 0xffffffff8260ae48 [swapper]
100006 D - 0xfffff80003339000 [thread taskq]
100008 D - 0xfffff80003333000 [config_0]
100009 D - 0xfffff8000333ad00 [kqueue_ctx taskq]
100010 D - 0xfffff8000333ac00 [aiod_kick taskq]
100012 D - 0xfffff80003334e00 [if_config_tqg_0]
100013 D - 0xfffff80003334d00 [if_io_tqg_0]
100014 D - 0xfffff80003334c00 [if_io_tqg_1]
100015 D - 0xfffff80003334b00 [softirq_0]
100016 D - 0xfffff80003334a00 [softirq_1]
100021 D - 0xfffff8000333aa00 [firmware taskq]
100026 D - 0xfffff80003337e00 [crypto_0]
100027 D - 0xfffff80003337e00 [crypto_1]
100041 D - 0xfffff80003337600 [vtnet0 rxq 0]
100042 D - 0xfffff80003337500 [vtnet0 txq 0]
100043 D - 0xfffff80003337400 [vtnet0 rxq 1]
100044 D - 0xfffff80003337300 [vtnet0 txq 1]
100046 D vtbslp 0xfffff8000350a580 [virtio_balloon]
100050 D - 0xfffff80003337200 [mca taskq]
100055 D - 0xffffffff81cd6151 [deadlkres]
100057 D - 0xfffff80003337900 [acpi_task_0]
100058 D - 0xfffff80003337900 [acpi_task_1]
100059 D - 0xfffff80003337900 [acpi_task_2]
100061 D - 0xfffff80003337800 [CAM taskq]
db> show all locks
Process 6865 (syz-executor.3) thread 0xfffffe002417e500 (100136)
exclusive sleep mutex sctp-tcb (tcb) r = 0 (0xfffffe0024265380) locked @ /syzkaller/managers/main/kernel/sys/netinet/sctp_output.c:13643
db> show malloc
Type InUse MemUse Requests
sctp_stro 5 8257K 468
devbuf 4213 4851K 4241
vtbuf 24 1968K 46
sysctloid 26033 1517K 26097
kobj 332 1328K 488
newblk 24 1030K 16275
vfscache 4 1025K 4
pcb 38 551K 4647
inodedep 17 520K 7512
ufs_quota 1 512K 1
vfs_hash 1 512K 1
callout 2 512K 2
intr 4 388K 4
subproc 143 285K 6950
acpica 1674 185K 52709
vnet_data 1 168K 1
filedesc 21 149K 11785
pagedep 10 131K 6067
tfo_ccache 1 128K 1
sem 4 106K 4
DEVFS1 105 105K 122
linker 222 89K 253
BPF 46 88K 46
bus 964 78K 3374
mtx_pool 2 72K 2
syncache 1 68K 1
acpitask 1 64K 1
ddb_capture 1 64K 1
module 494 62K 494
umtx 360 45K 360
kdtrace 187 36K 33504
gtaskqueue 22 34K 22
hostcache 1 32K 1
shm 1 32K 21
DEVFS3 124 31K 134
msg 4 30K 4
DEVFS_RULE 56 27K 56
vmem 3 26K 5
ifaddr 74 25K 76
kbdmux 6 22K 6
temp 34 17K 2748
ufs_mount 3 17K 4
lltable 45 17K 121
proc 3 17K 3
tty 16 16K 16
tidhash 1 16K 1
ithread 89 15K 89
ether_multi 172 14K 197
bus-sc 30 14K 1431
KTRACE 100 13K 100
ifnet 7 13K 7
kenv 95 12K 99
in6_multi 89 11K 89
eventhandler 122 11K 122
pfs_nodes 20 10K 20
GEOM 60 10K 487
rman 82 10K 423
cred 38 10K 420
select 75 10K 75
bmsafemap 2 9K 7541
UART 12 9K 12
devstat 4 9K 4
rpc 2 8K 2
sctp_timw 32 8K 32
shmfd 1 8K 1
lockf 70 8K 7850
pfs_vncache 1 8K 1
routetbl 58 8K 62
audit_evclass 232 8K 290
kqueue 63 7K 6874
CAM DEV 3 6K 510
plimit 24 6K 574
sctp_atcl 11 6K 1977
vt 11 6K 11
sglist 5 6K 5
CAM queue 5 6K 1528
DEVFSP 78 5K 82
ufs_dirhash 24 5K 24
taskqueue 42 5K 42
session 35 5K 52
pgrp 35 5K 52
freework 18 5K 9709
memdesc 1 4K 1
MCA 32 4K 32
evdev 4 4K 4
kcovinfo 64 4K 68
UMA 236 4K 236
hhook 13 4K 13
proc-args 52 3K 679
acpisem 22 3K 22
terminal 11 3K 11
uidinfo 4 3K 52
sctp_ifa 17 3K 17
local_apic 1 2K 1
io_apic 1 2K 1
dirrem 8 2K 7055
ipsec-saq 2 2K 2
ip6ndp 12 2K 21
CAM XPT 22 2K 543
Unitno 27 2K 37405
in_multi 6 2K 11
freeblks 5 2K 6496
crypto 2 2K 2
acpidev 20 2K 20
msi 9 2K 9
tun 7 2K 7
softdep 1 1K 1
freefile 8 1K 7022
ipsecpolicy 1 1K 1
sahead 1 1K 1
secasvar 1 1K 1
clone 8 1K 8
vnodemarker 2 1K 470
NFSD session 1 1K 1
CAM periph 4 1K 271
mkdir 6 1K 11838
mld 6 1K 6
sctp_ifn 6 1K 6
igmp 6 1K 6
toponodes 6 1K 6
isadev 6 1K 6
mount 16 1K 86
pci_link 10 1K 10
sctp_atky 16 1K 2460
newdirblk 5 1K 5919
diradd 4 1K 7096
inpcbpolicy 16 1K 22625
pfil 4 1K 4
chacha20random 1 1K 1
CAM SIM 2 1K 2
epoch 4 1K 4
cdev 2 1K 2
encap_export_host 8 1K 8
osd 3 1K 9
indirdep 1 1K 4006
vnodes 1 1K 136
NFSD lckfile 1 1K 1
NFSD V4client 1 1K 1
DEVFS 9 1K 10
feeder 7 1K 7
ip_msource 3 1K 29
loginclass 3 1K 6
sctp_athm 11 1K 1998
sctp_map 10 1K 928
CAM dev queue 2 1K 2
CAM I/O Scheduler 1 1K 1
apmdev 1 1K 1
atkbddev 2 1K 2
CAM path 4 1K 1034
soname 5 1K 7465
iov 1 1K 26357
pmchooks 1 1K 1
prison 4 1K 4
nexusdev 5 1K 5
filecaps 5 1K 131
entropy 2 1K 46
tcpfunc 1 1K 1
sctp_vrf 1 1K 1
vnet 1 1K 1
acpiintr 1 1K 1
pmc 1 1K 1
cpus 2 1K 2
vnet_data_free 1 1K 1
Per-cpu 1 1K 1
p1003.1b 1 1K 1
ath_hal 0 0K 0
athdev 0 0K 0
madt_table 0 0K 2
ata_pci 0 0K 0
ata_dma 0 0K 0
ata_generic 0 0K 0
amr 0 0K 0
scsi_da 0 0K 69
ata_da 0 0K 0
scsi_ch 0 0K 0
pvscsi 0 0K 0
smartpqi 0 0K 0
scsi_cd 0 0K 0
USBdev 0 0K 0
USB 0 0K 0
AHCI driver 0 0K 0
agp 0 0K 0
nvme_da 0 0K 0
iavf 0 0K 0
ixl 0 0K 0
acpipwr 0 0K 0
twsbuf 0 0K 0
twe_commands 0 0K 0
twa_commands 0 0K 0
tcp_log_dev 0 0K 0
midi buffers 0 0K 0
mixer 0 0K 0
fpukern_ctx 0 0K 0
xen_intr 0 0K 0
ac97 0 0K 0
hdacc 0 0K 0
xen_hvm 0 0K 0
legacydrv 0 0K 0
qpidrv 0 0K 0
hdac 0 0K 0
hdaa 0 0K 0
dmar_idpgtbl 0 0K 0
dmar_dom 0 0K 0
dmar_ctx 0 0K 0
dmar_dmamap 0 0K 0
acpi_perf 0 0K 0
acpicmbat 0 0K 0
SIIS driver 0 0K 0
isci 0 0K 0
bxe_ilt 0 0K 0
xenbus 0 0K 0
CAM CCB 0 0K 36437
vm_fictitious 0 0K 0
PUC 0 0K 0
ppbusdev 0 0K 0
agtiapi_MemAlloc malloc 0 0K 0
osti_cacheable 0 0K 0
tempbuff 0 0K 0
tempbuff 0 0K 0
ag_tgt_map_t malloc 0 0K 0
UMAHash 0 0K 0
ag_slr_map_t malloc 0 0K 0
lDevFlags * malloc 0 0K 0
vm_pgdata 0 0K 0
jblocks 0 0K 0
savedino 0 0K 3642
sentinel 0 0K 0
jfsync 0 0K 0
jtrunc 0 0K 0
sbdep 0 0K 235
jsegdep 0 0K 0
jseg 0 0K 0
jfreefrag 0 0K 0
jfreeblk 0 0K 0
jnewblk 0 0K 0
jmvref 0 0K 0
jremref 0 0K 0
jaddref 0 0K 0
freedep 0 0K 0
freefrag 0 0K 56
allocindir 0 0K 0
allocdirect 0 0K 0
ufs_trim 0 0K 0
mactemp 0 0K 0
audit_trigger 0 0K 0
audit_pipe_presel 0 0K 0
audit_pipeent 0 0K 0
audit_pipe 0 0K 0
audit_evname 0 0K 0
audit_bsm 0 0K 0
audit_gidset 0 0K 0
audit_text 0 0K 0
audit_path 0 0K 0
audit_data 0 0K 0
audit_cred 0 0K 0
xform 0 0K 0
NLM 0 0K 0
nfsclient_nlminfo 0 0K 0
nfsclient_lock 0 0K 0
NFS FHA 0 0K 0
ipsec-spdcache 0 0K 0
ipsec-reg 0 0K 0
ipsec-misc 0 0K 0
ipsecrequest 0 0K 0
ip6opt 0 0K 32
ip6_msource 0 0K 0
ip6_moptions 0 0K 0
in6_mfilter 0 0K 0
frag6 0 0K 0
tcplog 0 0K 0
LRO 0 0K 0
sctp_mcore 0 0K 0
sctp_socko 0 0K 540
sctp_iter 0 0K 9
sctp_mvrf 0 0K 0
sctp_cpal 0 0K 0
sctp_cmsg 0 0K 0
sctp_stre 0 0K 0
sctp_athi 0 0K 0
sctp_a_it 0 0K 9
sctp_aadr 0 0K 14
sctp_stri 0 0K 22
newreno data 0 0K 0
ip_moptions 0 0K 48
in_mfilter 0 0K 75
ipid 0 0K 0
80211scan 0 0K 0
80211ratectl 0 0K 0
80211power 0 0K 0
80211nodeie 0 0K 0
80211node 0 0K 0
80211mesh_gt 0 0K 0
80211mesh_rt 0 0K 0
80211perr 0 0K 0
80211prep 0 0K 0
80211preq 0 0K 0
80211dfs 0 0K 0
80211crypto 0 0K 0
80211vap 0 0K 0
iflib 0 0K 0
vlan 0 0K 0
gif 0 0K 0
ifdescr 0 0K 0
zlib 0 0K 0
fadvise 0 0K 0
tiDeviceHandle_t * malloc 0 0K 0
statfs 0 0K 6108
export_host 0 0K 0
cl_savebuf 0 0K 5
ag_portal_data_t malloc 0 0K 0
ag_device_t malloc 0 0K 0
STLock malloc 0 0K 0
CCB List 0 0K 0
sr_iov 0 0K 0
OCS 0 0K 0
OCS 0 0K 0
nvme 0 0K 0
nvd 0 0K 0
netmap 0 0K 0
mwldev 0 0K 0
MVS driver 0 0K 0
CAM ccb queue 0 0K 0
mrsasbuf 0 0K 0
mpt_user 0 0K 0
mps_user 0 0K 0
biobuf 0 0K 0
aios 0 0K 0
lio 0 0K 0
acl 0 0K 0
MPSSAS 0 0K 0
mbuf_tag 0 0K 332
accf 0 0K 0
pts 0 0K 0
ioctlops 0 0K 220
Witness 0 0K 0
stack 0 0K 0
mps 0 0K 0
mpr_user 0 0K 0
MPRSAS 0 0K 0
mpr 0 0K 0
mfibuf 0 0K 0
md_sectors 0 0K 0
sbuf 0 0K 288
md_disk 0 0K 0
compressor 0 0K 0
malodev 0 0K 0
SWAP 0 0K 0
LED 0 0K 0
sysctltmp 0 0K 729
sysctl 0 0K 1
ekcd 0 0K 0
dumper 0 0K 0
rctl 0 0K 0
ix_sriov 0 0K 0
aacraidcam 0 0K 0
ix 0 0K 0
ipsbuf 0 0K 0
iirbuf 0 0K 0
cache 0 0K 0
aacraid_buf 0 0K 0
prison_racct 0 0K 0
Fail Points 0 0K 0
sigio 0 0K 6
filedesc_to_leader 0 0K 0
pwd 0 0K 0
tty console 0 0K 0
aaccam 0 0K 0
aacbuf 0 0K 0
zstd 0 0K 0
nvlist 0 0K 0
SCSI ENC 0 0K 0
SCSI sa 0 0K 0
isofs_node 0 0K 0
isofs_mount 0 0K 0
tr_raid5_data 0 0K 0
tr_raid1e_data 0 0K 0
tr_raid1_data 0 0K 0
tr_raid0_data 0 0K 0
tr_concat_data 0 0K 0
md_sii_data 0 0K 0
md_promise_data 0 0K 0
md_nvidia_data 0 0K 0
md_jmicron_data 0 0K 0
md_intel_data 0 0K 0
md_ddf_data 0 0K 0
raid_data 0 0K 72
geom_flashmap 0 0K 0
newnfsmnt 0 0K 0
newnfsclient_req 0 0K 0
NFSCL layrecall 0 0K 0
NFSCL session 0 0K 0
NFSCL sockreq 0 0K 0
NFSCL devinfo 0 0K 0
NFSCL flayout 0 0K 0
NFSCL layout 0 0K 0
NFSD rollback 0 0K 0
NFSCL diroffdiroff 0 0K 0
NEWdirectio 0 0K 0
NEWNFSnode 0 0K 0
NFSCL lck 0 0K 0
NFSCL lckown 0 0K 0
NFSCL client 0 0K 0
NFSCL deleg 0 0K 0
NFSCL open 0 0K 0
NFSCL owner 0 0K 0
NFS fh 0 0K 0
NFS req 0 0K 0
NFSD usrgroup 0 0K 0
NFSD string 0 0K 0
NFSD V4lock 0 0K 0
NFSD V4state 0 0K 0
NFSD srvcache 0 0K 0
msdosfs_fat 0 0K 0
msdosfs_mount 0 0K 0
msdosfs_node 0 0K 0
DEVFS4 0 0K 0
DEVFS2 0 0K 0
gntdev 0 0K 0
privcmd_dev 0 0K 0
evtchn_dev 0 0K 0
xenstore 0 0K 0
scsi_pass 0 0K 0
ciss_data 0 0K 0
xnb 0 0K 0
xbbd 0 0K 0
xbd 0 0K 0
Balloon 0 0K 0
sysmouse 0 0K 0
vtfont 0 0K 0
db> show ktr
No such command; use "help" to list available commands
---
This bug is generated by a bot. It may contain errors.
See https://goo.gl/tpsmEJ for more information about syzbot.
syzbot engineers can be reached at syzk...@googlegroups.com.
syzbot will keep track of this bug report. See:
https://goo.gl/tpsmEJ#status for how to communicate with syzbot.
syzbot found the following crash on:
HEAD commit: 51126b47 libpmc: Always add the full include path for libp..
git tree: freebsd
console output: https://syzkaller.appspot.com/x/log.txt?x=12b68a23e00000
dashboard link: https://syzkaller.appspot.com/bug?extid=b44787b4be7096cd1590
Unfortunately, I don't have any reproducer for this crash yet.
IMPORTANT: if you fix the bug, please add the following tag to the commit:
Reported-by: syzbot+b44787...@syzkaller.appspotmail.com
panic: to_ticks == 0 for timer type 2
cpuid = 0
time = 185
KDB: stack backtrace:
db_trace_self_wrapper() at db_trace_self_wrapper+0x47/frame 0xfffffe002b845420
vpanic() at vpanic+0x1c7/frame 0xfffffe002b845480
panic() at panic+0x43/frame 0xfffffe002b8454e0
sctp_timer_start() at sctp_timer_start+0xc7f/frame 0xfffffe002b845540
sctp_send_initiate() at sctp_send_initiate+0x10b/frame 0xfffffe002b8455d0
sctp_lower_sosend() at sctp_lower_sosend+0x3f54/frame 0xfffffe002b8457b0
sctp_sosend() at sctp_sosend+0x501/frame 0xfffffe002b8458e0
sosend() at sosend+0xc6/frame 0xfffffe002b845950
kern_sendit() at kern_sendit+0x33d/frame 0xfffffe002b845a00
sendit() at sendit+0x224/frame 0xfffffe002b845a60
sys_sendto() at sys_sendto+0x5c/frame 0xfffffe002b845ac0
amd64_syscall() at amd64_syscall+0x2f4/frame 0xfffffe002b845bf0
fast_syscall_common() at fast_syscall_common+0x101/frame 0xfffffe002b845bf0
--- syscall (198, FreeBSD ELF64, nosys), rip = 0x41332a, rsp = 0x7fffdfffdf38, rbp = 0x6 ---
KDB: enter: panic
[ thread pid 6865 tid 100136 ]
Stopped at kdb_enter+0x67: movq $0,0x146cf76(%rip)
db>
db> set $lines = 0
db> set $maxwidth = 0
db> show registers
cs 0x20
ds 0x3b ll+0x1a
es 0x3b ll+0x1a
fs 0x13
gs 0x1b
ss 0x28 ll+0x7
rax 0x12
rcx 0xfffffe0029a00000
rdx 0x3ffff
rbx 0
rsp 0xfffffe002b845400
rbp 0xfffffe002b845420
rsi 0x40001
rdi 0xffffffff810b5056 vprintf+0x176
r8 0
r9 0xffffffff
r10 0xf3b2edf
r11 0xfffffe002417ea10
r12 0xffffffff82068e50 ddb_dbbe
r13 0
r14 0xffffffff81932dde
r15 0xffffffff81932dde
rip 0xffffffff810aa317 kdb_enter+0x67
rflags 0x86 ll+0x65
kdb_enter+0x67: movq $0,0x146cf76(%rip)
db> show proc
Process 6865 (syz-executor.3) at 0xfffff8000bfd8530:
state: NORMAL
uid: 0 gids: 0, 0, 5
parent: pid 784 at 0xfffff8000ba30000
ABI: FreeBSD ELF64
arguments: /root/syz-executor.3
reaper: 0xfffff80003318000 reapsubtree: 1
sigparent: 20
vmspace: 0xfffffe00243ab9e8
(map 0xfffffe00243ab9e8)
(map.pmap 0xfffffe00243abaa8)
(pmap 0xfffffe00243abb08)
threads: 2
100469 RunQ syz-executor.3
100136 Run CPU 0 syz-executor.3
db> ps
pid ppid pgrp uid state wmesg wchan cmd
6867 769 769 0 R syz-executor.1
6866 768 768 0 R (threaded) syz-executor.0
100597 Run CPU 1 syz-executor.0
100135 S sbwait 0xfffffe0003dbee14 syz-executor.0
6865 784 784 0 R (threaded) syz-executor.3
100469 RunQ syz-executor.3
100136 Run CPU 0 syz-executor.3
6859 775 775 0 S (threaded) syz-executor.2
100114 S nanslp 0xffffffff824ffe90 syz-executor.2
100138 S accept 0xfffffe0003da6698 syz-executor.2
101092 S uwait 0xfffff8000bd07900 syz-executor.2
100143 S uwait 0xfffff80003809c80 syz-executor.2
101103 S uwait 0xfffff8000b324200 syz-executor.2
2615 1 2615 65 Ss select 0xfffff80003bc6f40 dhclient
2259 1 2259 0 Ss select 0xfffff80003bc7ac0 dhclient
2256 1 2256 0 Ss select 0xfffff80003bc7e40 dhclient
2236 1 2236 65 Ss select 0xfffff80003bc7440 dhclient
1847 1 1847 0 Ss select 0xfffff80003bc6cc0 dhclient
1844 1 1844 0 Ss select 0xfffff80003bc6b40 dhclient
1823 1 1823 65 Ss select 0xfffff80003bd6940 dhclient
1391 1 1391 0 Ss select 0xfffff8000b0b64c0 dhclient
1388 1 1388 0 Ss select 0xfffff80003bc7ec0 dhclient
1368 1 1368 65 Ss select 0xfffff8000b0b6240 dhclient
983 1 983 0 Ss select 0xfffff8000bd985c0 dhclient
978 1 978 0 Ss select 0xfffff80003bc6c40 dhclient
784 766 784 0 Ss nanslp 0xffffffff824ffe90 syz-executor.3
775 766 775 0 Ss nanslp 0xffffffff824ffe91 syz-executor.2
769 766 769 0 Rs syz-executor.1
768 766 768 0 Ss nanslp 0xffffffff824ffe90 syz-executor.0
766 764 764 0 S (threaded) syz-fuzzer
100074 S uwait 0xfffff80003807b80 syz-fuzzer
100097 S uwait 0xfffff80003a41480 syz-fuzzer
100098 S uwait 0xfffff80003a41580 syz-fuzzer
100099 S uwait 0xfffff80003a41680 syz-fuzzer
100100 S uwait 0xfffff80003a42900 syz-fuzzer
100101 S uwait 0xfffff80003808180 syz-fuzzer
100102 S kqread 0xfffff80003be5c00 syz-fuzzer
100103 S uwait 0xfffff8000b31e700 syz-fuzzer
100104 S uwait 0xfffff8000b31e580 syz-fuzzer
100106 S uwait 0xfffff8000b318d00 syz-fuzzer
764 762 764 0 Ss pause 0xfffff80003c6d0a8 csh
762 680 762 0 Ss select 0xfffff8000b0b6440 sshd
746 1 746 0 Ss+ ttyin 0xfffff80003814cb0 getty
745 1 745 0 Ss+ ttyin 0xfffff80003b3d8b0 getty
744 1 744 0 Ss+ ttyin 0xfffff80003b400b0 getty
743 1 743 0 Ss+ ttyin 0xfffff80003b408b0 getty
742 1 742 0 Ss+ ttyin 0xfffff800033a20b0 getty
741 1 741 0 Ss+ ttyin 0xfffff800033a28b0 getty
740 1 740 0 Ss+ ttyin 0xfffff800033a10b0 getty
739 1 739 0 Ss+ ttyin 0xfffff800033a18b0 getty
738 1 738 0 Ss+ ttyin 0xfffff800033a40b0 getty
684 1 684 0 Ss nanslp 0xffffffff824ffe90 cron
680 1 680 0 Ss select 0xfffff80003bc8e40 sshd
493 1 493 0 Ss select 0xfffff80003bc8740 syslogd
422 1 422 0 Ss select 0xfffff80003bc8dc0 devd
421 1 421 65 Ss select 0xfffff8000b0b6540 dhclient
336 1 336 0 Ss select 0xfffff8000b0b6340 dhclient
333 1 333 0 Ss select 0xfffff8000b0b62c0 dhclient
21 0 0 0 DL vlruwt 0xfffff800033eea60 [vnlru]
20 0 0 0 DL syncer 0xffffffff825d6358 [syncer]
19 0 0 0 DL (threaded) [bufdaemon]
100065 D qsleep 0xffffffff825d5858 [bufdaemon]
100070 D - 0xffffffff8200aa00 [bufspacedaemon-0]
100080 D sdflush 0xfffff800035998e8 [/ worker]
18 0 0 0 DL psleep 0xffffffff825f12c8 [vmdaemon]
17 0 0 0 DL (threaded) [pagedaemon]
100063 D psleep 0xffffffff8261d1d8 [dom0]
100068 D launds 0xffffffff8261d1e4 [laundry: dom0]
100069 D umarcl 0xffffffff81536c90 [uma]
16 0 0 0 DL - 0xffffffff8235a6b0 [rand_harvestq]
15 0 0 0 DL waiting 0xffffffff826627a0 [sctp_iterator]
9 0 0 0 DL - 0xffffffff825d525c [soaiod4]
8 0 0 0 DL - 0xffffffff825d525c [soaiod3]
7 0 0 0 DL - 0xffffffff825d525c [soaiod2]
6 0 0 0 DL - 0xffffffff825d525c [soaiod1]
5 0 0 0 DL (threaded) [cam]
100031 D - 0xffffffff82235ac0 [doneq0]
100062 D - 0xffffffff82235988 [scanner]
4 0 0 0 DL crypto_ 0xfffff800033e7190 [crypto returns 1]
3 0 0 0 DL crypto_ 0xfffff800033e7130 [crypto returns 0]
2 0 0 0 DL crypto_ 0xffffffff825eb338 [crypto]
14 0 0 0 DL seqstat 0xfffff8000336e888 [sequencer 00]
13 0 0 0 DL (threaded) [geom]
100022 D - 0xffffffff8261b808 [g_event]
100023 D - 0xffffffff8261b818 [g_up]
100024 D - 0xffffffff8261b810 [g_down]
12 0 0 0 WL (threaded) [intr]
100005 I [swi6: Giant taskq]
100007 I [swi5: fast taskq]
100011 I [swi6: task queue]
100017 I [swi1: netisr 0]
100018 I [swi3: vm]
100019 I [swi4: clock (0)]
100020 I [swi4: clock (1)]
100032 I [irq24: virtio_pci0]
100033 I [irq25: virtio_pci0]
100034 I [irq26: virtio_pci0]
100035 I [irq27: virtio_pci0]
100036 I [irq28: virtio_pci1]
100037 I [irq29: virtio_pci1]
100038 I [irq30: virtio_pci1]
100039 I [irq31: virtio_pci1]
100040 I [irq32: virtio_pci1]
100045 I [irq10: virtio_pci2]
100047 I [irq1: atkbd0]
100048 I [irq12: psm0]
100049 I [swi0: uart uart++]
11 0 0 0 RL (threaded) [idle]
100003 CanRun [idle: cpu0]
100004 CanRun [idle: cpu1]
1 0 1 0 SLs wait 0xfffff80003318000 [init]
10 0 0 0 DL audit_w 0xffffffff82663430 [audit]
0 0 0 0 DLs (threaded) [kernel]
100000 D swapin 0xffffffff8260ae48 [swapper]
100006 D - 0xfffff80003339000 [thread taskq]
100008 D - 0xfffff80003333000 [config_0]
100009 D - 0xfffff8000333ad00 [kqueue_ctx taskq]
100010 D - 0xfffff8000333ac00 [aiod_kick taskq]
100012 D - 0xfffff80003334e00 [if_config_tqg_0]
100013 D - 0xfffff80003334d00 [if_io_tqg_0]
100014 D - 0xfffff80003334c00 [if_io_tqg_1]
100015 D - 0xfffff80003334b00 [softirq_0]
100016 D - 0xfffff80003334a00 [softirq_1]
100021 D - 0xfffff8000333aa00 [firmware taskq]
100026 D - 0xfffff80003337e00 [crypto_0]
100027 D - 0xfffff80003337e00 [crypto_1]
100041 D - 0xfffff80003337600 [vtnet0 rxq 0]
100042 D - 0xfffff80003337500 [vtnet0 txq 0]
100043 D - 0xfffff80003337400 [vtnet0 rxq 1]
100044 D - 0xfffff80003337300 [vtnet0 txq 1]
100046 D vtbslp 0xfffff8000350a580 [virtio_balloon]
100050 D - 0xfffff80003337200 [mca taskq]
100055 D - 0xffffffff81cd6151 [deadlkres]
100057 D - 0xfffff80003337900 [acpi_task_0]
100058 D - 0xfffff80003337900 [acpi_task_1]
100059 D - 0xfffff80003337900 [acpi_task_2]
100061 D - 0xfffff80003337800 [CAM taskq]
db> show all locks
Process 6865 (syz-executor.3) thread 0xfffffe002417e500 (100136)
exclusive sleep mutex sctp-tcb (tcb) r = 0 (0xfffffe0024265380) locked @ /syzkaller/managers/main/kernel/sys/netinet/sctp_output.c:13643
db> show malloc
Type InUse MemUse Requests
sctp_stro 5 8257K 468
devbuf 4213 4851K 4241
vtbuf 24 1968K 46
sysctloid 26033 1517K 26097
kobj 332 1328K 488
newblk 24 1030K 16275
vfscache 4 1025K 4
pcb 38 551K 4647
inodedep 17 520K 7512
ufs_quota 1 512K 1
vfs_hash 1 512K 1
callout 2 512K 2
intr 4 388K 4
subproc 143 285K 6950
acpica 1674 185K 52709
vnet_data 1 168K 1
filedesc 21 149K 11785
pagedep 10 131K 6067
tfo_ccache 1 128K 1
sem 4 106K 4
DEVFS1 105 105K 122
linker 222 89K 253
BPF 46 88K 46
bus 964 78K 3374
mtx_pool 2 72K 2
syncache 1 68K 1
acpitask 1 64K 1
ddb_capture 1 64K 1
module 494 62K 494
umtx 360 45K 360
kdtrace 187 36K 33504
gtaskqueue 22 34K 22
hostcache 1 32K 1
shm 1 32K 21
DEVFS3 124 31K 134
msg 4 30K 4
DEVFS_RULE 56 27K 56
vmem 3 26K 5
ifaddr 74 25K 76
kbdmux 6 22K 6
temp 34 17K 2748
ufs_mount 3 17K 4
lltable 45 17K 121
proc 3 17K 3
tty 16 16K 16
tidhash 1 16K 1
ithread 89 15K 89
ether_multi 172 14K 197
bus-sc 30 14K 1431
KTRACE 100 13K 100
ifnet 7 13K 7
kenv 95 12K 99
in6_multi 89 11K 89
eventhandler 122 11K 122
pfs_nodes 20 10K 20
GEOM 60 10K 487
rman 82 10K 423
cred 38 10K 420
select 75 10K 75
bmsafemap 2 9K 7541
UART 12 9K 12
devstat 4 9K 4
rpc 2 8K 2
sctp_timw 32 8K 32
shmfd 1 8K 1
lockf 70 8K 7850
pfs_vncache 1 8K 1
routetbl 58 8K 62
audit_evclass 232 8K 290
kqueue 63 7K 6874
CAM DEV 3 6K 510
plimit 24 6K 574
sctp_atcl 11 6K 1977
vt 11 6K 11
sglist 5 6K 5
CAM queue 5 6K 1528
DEVFSP 78 5K 82
ufs_dirhash 24 5K 24
taskqueue 42 5K 42
session 35 5K 52
pgrp 35 5K 52
freework 18 5K 9709
memdesc 1 4K 1
MCA 32 4K 32
evdev 4 4K 4
kcovinfo 64 4K 68
UMA 236 4K 236
hhook 13 4K 13
proc-args 52 3K 679
acpisem 22 3K 22
terminal 11 3K 11
uidinfo 4 3K 52
sctp_ifa 17 3K 17
local_apic 1 2K 1
io_apic 1 2K 1
dirrem 8 2K 7055
ipsec-saq 2 2K 2
ip6ndp 12 2K 21
CAM XPT 22 2K 543
Unitno 27 2K 37405
in_multi 6 2K 11
freeblks 5 2K 6496
crypto 2 2K 2
acpidev 20 2K 20
msi 9 2K 9
tun 7 2K 7
softdep 1 1K 1
freefile 8 1K 7022
ipsecpolicy 1 1K 1
sahead 1 1K 1
secasvar 1 1K 1
clone 8 1K 8
vnodemarker 2 1K 470
NFSD session 1 1K 1
CAM periph 4 1K 271
mkdir 6 1K 11838
mld 6 1K 6
sctp_ifn 6 1K 6
igmp 6 1K 6
toponodes 6 1K 6
isadev 6 1K 6
mount 16 1K 86
pci_link 10 1K 10
sctp_atky 16 1K 2460
newdirblk 5 1K 5919
diradd 4 1K 7096
inpcbpolicy 16 1K 22625
pfil 4 1K 4
chacha20random 1 1K 1
CAM SIM 2 1K 2
epoch 4 1K 4
cdev 2 1K 2
encap_export_host 8 1K 8
osd 3 1K 9
indirdep 1 1K 4006
vnodes 1 1K 136
NFSD lckfile 1 1K 1
NFSD V4client 1 1K 1
DEVFS 9 1K 10
feeder 7 1K 7
ip_msource 3 1K 29
loginclass 3 1K 6
sctp_athm 11 1K 1998
sctp_map 10 1K 928
CAM dev queue 2 1K 2
CAM I/O Scheduler 1 1K 1
apmdev 1 1K 1
atkbddev 2 1K 2
CAM path 4 1K 1034
soname 5 1K 7465
iov 1 1K 26357
pmchooks 1 1K 1
prison 4 1K 4
nexusdev 5 1K 5
filecaps 5 1K 131
entropy 2 1K 46
tcpfunc 1 1K 1
sctp_vrf 1 1K 1
vnet 1 1K 1
acpiintr 1 1K 1
pmc 1 1K 1
cpus 2 1K 2
vnet_data_free 1 1K 1
Per-cpu 1 1K 1
p1003.1b 1 1K 1
ath_hal 0 0K 0
athdev 0 0K 0
madt_table 0 0K 2
ata_pci 0 0K 0
ata_dma 0 0K 0
ata_generic 0 0K 0
amr 0 0K 0
scsi_da 0 0K 69
ata_da 0 0K 0
scsi_ch 0 0K 0
pvscsi 0 0K 0
smartpqi 0 0K 0
scsi_cd 0 0K 0
USBdev 0 0K 0
USB 0 0K 0
AHCI driver 0 0K 0
agp 0 0K 0
nvme_da 0 0K 0
iavf 0 0K 0
ixl 0 0K 0
acpipwr 0 0K 0
twsbuf 0 0K 0
twe_commands 0 0K 0
twa_commands 0 0K 0
tcp_log_dev 0 0K 0
midi buffers 0 0K 0
mixer 0 0K 0
fpukern_ctx 0 0K 0
xen_intr 0 0K 0
ac97 0 0K 0
hdacc 0 0K 0
xen_hvm 0 0K 0
legacydrv 0 0K 0
qpidrv 0 0K 0
hdac 0 0K 0
hdaa 0 0K 0
dmar_idpgtbl 0 0K 0
dmar_dom 0 0K 0
dmar_ctx 0 0K 0
dmar_dmamap 0 0K 0
acpi_perf 0 0K 0
acpicmbat 0 0K 0
SIIS driver 0 0K 0
isci 0 0K 0
bxe_ilt 0 0K 0
xenbus 0 0K 0
CAM CCB 0 0K 36437
vm_fictitious 0 0K 0
PUC 0 0K 0
ppbusdev 0 0K 0
agtiapi_MemAlloc malloc 0 0K 0
osti_cacheable 0 0K 0
tempbuff 0 0K 0
tempbuff 0 0K 0
ag_tgt_map_t malloc 0 0K 0
UMAHash 0 0K 0
ag_slr_map_t malloc 0 0K 0
lDevFlags * malloc 0 0K 0
vm_pgdata 0 0K 0
jblocks 0 0K 0
savedino 0 0K 3642
sentinel 0 0K 0
jfsync 0 0K 0
jtrunc 0 0K 0
sbdep 0 0K 235
jsegdep 0 0K 0
jseg 0 0K 0
jfreefrag 0 0K 0
jfreeblk 0 0K 0
jnewblk 0 0K 0
jmvref 0 0K 0
jremref 0 0K 0
jaddref 0 0K 0
freedep 0 0K 0
freefrag 0 0K 56
allocindir 0 0K 0
allocdirect 0 0K 0
ufs_trim 0 0K 0
mactemp 0 0K 0
audit_trigger 0 0K 0
audit_pipe_presel 0 0K 0
audit_pipeent 0 0K 0
audit_pipe 0 0K 0
audit_evname 0 0K 0
audit_bsm 0 0K 0
audit_gidset 0 0K 0
audit_text 0 0K 0
audit_path 0 0K 0
audit_data 0 0K 0
audit_cred 0 0K 0
xform 0 0K 0
NLM 0 0K 0
nfsclient_nlminfo 0 0K 0
nfsclient_lock 0 0K 0
NFS FHA 0 0K 0
ipsec-spdcache 0 0K 0
ipsec-reg 0 0K 0
ipsec-misc 0 0K 0
ipsecrequest 0 0K 0
ip6opt 0 0K 32
ip6_msource 0 0K 0
ip6_moptions 0 0K 0
in6_mfilter 0 0K 0
frag6 0 0K 0
tcplog 0 0K 0
LRO 0 0K 0
sctp_mcore 0 0K 0
sctp_socko 0 0K 540
sctp_iter 0 0K 9
sctp_mvrf 0 0K 0
sctp_cpal 0 0K 0
sctp_cmsg 0 0K 0
sctp_stre 0 0K 0
sctp_athi 0 0K 0
sctp_a_it 0 0K 9
sctp_aadr 0 0K 14
sctp_stri 0 0K 22
newreno data 0 0K 0
ip_moptions 0 0K 48
in_mfilter 0 0K 75
ipid 0 0K 0
80211scan 0 0K 0
80211ratectl 0 0K 0
80211power 0 0K 0
80211nodeie 0 0K 0
80211node 0 0K 0
80211mesh_gt 0 0K 0
80211mesh_rt 0 0K 0
80211perr 0 0K 0
80211prep 0 0K 0
80211preq 0 0K 0
80211dfs 0 0K 0
80211crypto 0 0K 0
80211vap 0 0K 0
iflib 0 0K 0
vlan 0 0K 0
gif 0 0K 0
ifdescr 0 0K 0
zlib 0 0K 0
fadvise 0 0K 0
tiDeviceHandle_t * malloc 0 0K 0
statfs 0 0K 6108
export_host 0 0K 0
cl_savebuf 0 0K 5
ag_portal_data_t malloc 0 0K 0
ag_device_t malloc 0 0K 0
STLock malloc 0 0K 0
CCB List 0 0K 0
sr_iov 0 0K 0
OCS 0 0K 0
OCS 0 0K 0
nvme 0 0K 0
nvd 0 0K 0
netmap 0 0K 0
mwldev 0 0K 0
MVS driver 0 0K 0
CAM ccb queue 0 0K 0
mrsasbuf 0 0K 0
mpt_user 0 0K 0
mps_user 0 0K 0
biobuf 0 0K 0
aios 0 0K 0
lio 0 0K 0
acl 0 0K 0
MPSSAS 0 0K 0
mbuf_tag 0 0K 332
accf 0 0K 0
pts 0 0K 0
ioctlops 0 0K 220
Witness 0 0K 0
stack 0 0K 0
mps 0 0K 0
mpr_user 0 0K 0
MPRSAS 0 0K 0
mpr 0 0K 0
mfibuf 0 0K 0
md_sectors 0 0K 0
sbuf 0 0K 288
md_disk 0 0K 0
compressor 0 0K 0
malodev 0 0K 0
SWAP 0 0K 0
LED 0 0K 0
sysctltmp 0 0K 729
sysctl 0 0K 1
ekcd 0 0K 0
dumper 0 0K 0
rctl 0 0K 0
ix_sriov 0 0K 0
aacraidcam 0 0K 0
ix 0 0K 0
ipsbuf 0 0K 0
iirbuf 0 0K 0
cache 0 0K 0
aacraid_buf 0 0K 0
prison_racct 0 0K 0
Fail Points 0 0K 0
sigio 0 0K 6
filedesc_to_leader 0 0K 0
pwd 0 0K 0
tty console 0 0K 0
aaccam 0 0K 0
aacbuf 0 0K 0
zstd 0 0K 0
nvlist 0 0K 0
SCSI ENC 0 0K 0
SCSI sa 0 0K 0
isofs_node 0 0K 0
isofs_mount 0 0K 0
tr_raid5_data 0 0K 0
tr_raid1e_data 0 0K 0
tr_raid1_data 0 0K 0
tr_raid0_data 0 0K 0
tr_concat_data 0 0K 0
md_sii_data 0 0K 0
md_promise_data 0 0K 0
md_nvidia_data 0 0K 0
md_jmicron_data 0 0K 0
md_intel_data 0 0K 0
md_ddf_data 0 0K 0
raid_data 0 0K 72
geom_flashmap 0 0K 0
newnfsmnt 0 0K 0
newnfsclient_req 0 0K 0
NFSCL layrecall 0 0K 0
NFSCL session 0 0K 0
NFSCL sockreq 0 0K 0
NFSCL devinfo 0 0K 0
NFSCL flayout 0 0K 0
NFSCL layout 0 0K 0
NFSD rollback 0 0K 0
NFSCL diroffdiroff 0 0K 0
NEWdirectio 0 0K 0
NEWNFSnode 0 0K 0
NFSCL lck 0 0K 0
NFSCL lckown 0 0K 0
NFSCL client 0 0K 0
NFSCL deleg 0 0K 0
NFSCL open 0 0K 0
NFSCL owner 0 0K 0
NFS fh 0 0K 0
NFS req 0 0K 0
NFSD usrgroup 0 0K 0
NFSD string 0 0K 0
NFSD V4lock 0 0K 0
NFSD V4state 0 0K 0
NFSD srvcache 0 0K 0
msdosfs_fat 0 0K 0
msdosfs_mount 0 0K 0
msdosfs_node 0 0K 0
DEVFS4 0 0K 0
DEVFS2 0 0K 0
gntdev 0 0K 0
privcmd_dev 0 0K 0
evtchn_dev 0 0K 0
xenstore 0 0K 0
scsi_pass 0 0K 0
ciss_data 0 0K 0
xnb 0 0K 0
xbbd 0 0K 0
xbd 0 0K 0
Balloon 0 0K 0
sysmouse 0 0K 0
vtfont 0 0K 0
db> show ktr
No such command; use "help" to list available commands
---
This bug is generated by a bot. It may contain errors.
See https://goo.gl/tpsmEJ for more information about syzbot.
syzbot engineers can be reached at syzk...@googlegroups.com.
syzbot will keep track of this bug report. See:
https://goo.gl/tpsmEJ#status for how to communicate with syzbot.
syzbot
Mar 25, 2020, 1:33:15 AM3/25/20
to syzkaller-f...@googlegroups.com
syzbot has found a reproducer for the following crash on:
HEAD commit: 51126b47 libpmc: Always add the full include path for libp..
git tree: freebsd
console output: https://syzkaller.appspot.com/x/log.txt?x=17e8764be00000
dashboard link: https://syzkaller.appspot.com/bug?extid=b44787b4be7096cd1590
syz repro: https://syzkaller.appspot.com/x/repro.syz?x=15881d1de00000
C reproducer: https://syzkaller.appspot.com/x/repro.c?x=1593c903e00000
IMPORTANT: if you fix the bug, please add the following tag to the commit:
Reported-by: syzbot+b44787...@syzkaller.appspotmail.com
login: panic: to_ticks == 0 for timer type 2
cpuid = 1
time = 1585113958
KDB: stack backtrace:
db_trace_self_wrapper() at db_trace_self_wrapper+0x47/frame 0xfffffe0024a54420
vpanic() at vpanic+0x1c7/frame 0xfffffe0024a54480
panic() at panic+0x43/frame 0xfffffe0024a544e0
sctp_timer_start() at sctp_timer_start+0xc7f/frame 0xfffffe0024a54540
sctp_send_initiate() at sctp_send_initiate+0x10b/frame 0xfffffe0024a545d0
sctp_lower_sosend() at sctp_lower_sosend+0x3f54/frame 0xfffffe0024a547b0
sctp_sosend() at sctp_sosend+0x501/frame 0xfffffe0024a548e0
sosend() at sosend+0xc6/frame 0xfffffe0024a54950
kern_sendit() at kern_sendit+0x33d/frame 0xfffffe0024a54a00
sendit() at sendit+0x224/frame 0xfffffe0024a54a60
sys_sendto() at sys_sendto+0x5c/frame 0xfffffe0024a54ac0
amd64_syscall() at amd64_syscall+0x2f4/frame 0xfffffe0024a54bf0
fast_syscall_common() at fast_syscall_common+0x101/frame 0xfffffe0024a54bf0
--- syscall (0, FreeBSD ELF64, nosys), rip = 0x41c3aa, rsp = 0x7fffffffeac8, rbp = 0x7fffffffeb30 ---
KDB: enter: panic
[ thread pid 771 tid 100100 ]
rdx 0xffffffff81893a65
rbx 0
rsp 0xfffffe0024a54400
rbp 0xfffffe0024a54420
rsi 0x1
rdi 0
ABI: FreeBSD ELF64
arguments: ./syz-executor717092001
(map 0xfffffe0024949000)
(map.pmap 0xfffffe00249490c0)
(pmap 0xfffffe0024949120)
threads: 1
100100 Run CPU 1 syz-executor7170920
769 767 769 0 Ss pause 0xfffff8000b67d5d8 csh
767 680 767 0 Ss select 0xfffff80003bd3040 sshd
746 1 746 0 Ss+ ttyin 0xfffff80003811cb0 getty
745 1 745 0 Ss+ ttyin 0xfffff80003b408b0 getty
744 1 744 0 Ss+ ttyin 0xfffff80003b3f0b0 getty
743 1 743 0 Ss+ ttyin 0xfffff80003b3f8b0 getty
742 1 742 0 Ss+ ttyin 0xfffff800033a70b0 getty
741 1 741 0 Ss+ ttyin 0xfffff800033a78b0 getty
740 1 740 0 Ss+ ttyin 0xfffff800033aa0b0 getty
739 1 739 0 Ss+ ttyin 0xfffff800033aa8b0 getty
738 1 738 0 Ss+ ttyin 0xfffff800033a90b0 getty
736 1 22 0 S+ piperd 0xfffff80003c8a2f8 logger
735 734 22 0 S+ nanslp 0xffffffff824ffe91 sleep
734 1 22 0 S+ wait 0xfffff80003318a60 sh
493 1 493 0 Ss select 0xfffff80003bd3f40 syslogd
422 1 422 0 Ss select 0xfffff80003bd3a40 devd
421 1 421 65 Ss select 0xfffff80003bd3ac0 dhclient
336 1 336 0 Ss select 0xfffff80003bd3ec0 dhclient
333 1 333 0 Ss select 0xfffff8000b0c6a40 dhclient
21 0 0 0 DL vlruwt 0xfffff800033eda60 [vnlru]
3 0 0 0 DL crypto_ 0xfffff800033ea130 [crypto returns 0]
100003 Run CPU 0 [idle: cpu0]
exclusive sleep mutex sctp-tcb (tcb) r = 0 (0xfffffe00249f1380) locked @ /syzkaller/managers/main/kernel/sys/netinet/sctp_output.c:13643
vfscache 4 1025K 4
pcb 23 539K 77
inodedep 48 536K 71
linker 222 89K 241
bus 964 78K 3342
msg 4 30K 4
DEVFS3 120 30K 130
umtx 234 30K 234
kdtrace 138 27K 1594
DEVFS_RULE 56 27K 56
vmem 3 22K 4
kbdmux 6 22K 6
BPF 10 18K 10
temp 17 17K 1533
ufs_mount 3 17K 4
kenv 95 12K 99
pfs_vncache 1 8K 1
audit_evclass 232 8K 290
cred 21 6K 234
plimit 17 5K 322
ifnet 3 5K 3
UMA 236 4K 236
lltable 11 4K 11
hhook 13 4K 13
ether_multi 40 4K 45
diradd 25 4K 36
in6_multi 25 3K 25
session 20 3K 31
pgrp 20 3K 31
select 19 3K 19
uidinfo 3 3K 8
proc-args 39 2K 472
Unitno 25 2K 37
sctp_stro 1 1K 1
clone 8 1K 8
vnodemarker 2 1K 6
sctp_ifa 5 1K 5
newdirblk 4 1K 8
mkdir 4 1K 16
in_multi 2 1K 3
sctp_ifn 2 1K 2
igmp 2 1K 2
vnodes 1 1K 1
loginclass 3 1K 7
soname 5 1K 5741
filecaps 4 1K 66
tun 3 1K 3
nexusdev 5 1K 5
entropy 2 1K 35
sctp_athm 2 1K 2
sctp_map 2 1K 2
CAM CCB 0 0K 1786
freeblks 0 0K 25
freefrag 0 0K 7
sctp_iter 0 0K 3
sctp_mvrf 0 0K 0
sctp_timw 0 0K 0
sctp_aadr 0 0K 0
sctp_stri 0 0K 0
ip_moptions 0 0K 0
in_mfilter 0 0K 0
export_host 0 0K 0
cl_savebuf 0 0K 3
ioctlops 0 0K 86
HEAD commit: 51126b47 libpmc: Always add the full include path for libp..
git tree: freebsd
dashboard link: https://syzkaller.appspot.com/bug?extid=b44787b4be7096cd1590
syz repro: https://syzkaller.appspot.com/x/repro.syz?x=15881d1de00000
C reproducer: https://syzkaller.appspot.com/x/repro.c?x=1593c903e00000
IMPORTANT: if you fix the bug, please add the following tag to the commit:
Reported-by: syzbot+b44787...@syzkaller.appspotmail.com
cpuid = 1
time = 1585113958
KDB: stack backtrace:
db_trace_self_wrapper() at db_trace_self_wrapper+0x47/frame 0xfffffe0024a54420
vpanic() at vpanic+0x1c7/frame 0xfffffe0024a54480
panic() at panic+0x43/frame 0xfffffe0024a544e0
sctp_timer_start() at sctp_timer_start+0xc7f/frame 0xfffffe0024a54540
sctp_send_initiate() at sctp_send_initiate+0x10b/frame 0xfffffe0024a545d0
sctp_lower_sosend() at sctp_lower_sosend+0x3f54/frame 0xfffffe0024a547b0
sctp_sosend() at sctp_sosend+0x501/frame 0xfffffe0024a548e0
sosend() at sosend+0xc6/frame 0xfffffe0024a54950
kern_sendit() at kern_sendit+0x33d/frame 0xfffffe0024a54a00
sendit() at sendit+0x224/frame 0xfffffe0024a54a60
sys_sendto() at sys_sendto+0x5c/frame 0xfffffe0024a54ac0
amd64_syscall() at amd64_syscall+0x2f4/frame 0xfffffe0024a54bf0
fast_syscall_common() at fast_syscall_common+0x101/frame 0xfffffe0024a54bf0
--- syscall (0, FreeBSD ELF64, nosys), rip = 0x41c3aa, rsp = 0x7fffffffeac8, rbp = 0x7fffffffeb30 ---
KDB: enter: panic
[ thread pid 771 tid 100100 ]
Stopped at kdb_enter+0x67: movq $0,0x146cf76(%rip)
db>
db> set $lines = 0
db> set $maxwidth = 0
db> show registers
cs 0x20
ds 0x3b ll+0x1a
es 0x3b ll+0x1a
fs 0x13
gs 0x1b
ss 0x28 ll+0x7
rax 0x12
rcx 0x80 ll+0x5f
db>
db> set $lines = 0
db> set $maxwidth = 0
db> show registers
cs 0x20
ds 0x3b ll+0x1a
es 0x3b ll+0x1a
fs 0x13
gs 0x1b
ss 0x28 ll+0x7
rax 0x12
rdx 0xffffffff81893a65
rbx 0
rsp 0xfffffe0024a54400
rbp 0xfffffe0024a54420
rsi 0x1
rdi 0
r8 0
r9 0xffffffff
r10 0
r11 0xfffffe0024951c10
r9 0xffffffff
r10 0
r12 0xffffffff82068e50 ddb_dbbe
r13 0
r14 0xffffffff81932dde
r15 0xffffffff81932dde
rip 0xffffffff810aa317 kdb_enter+0x67
rflags 0x86 ll+0x65
kdb_enter+0x67: movq $0,0x146cf76(%rip)
db> show proc
Process 771 (syz-executor7170920) at 0xfffff8000b67d000:
r13 0
r14 0xffffffff81932dde
r15 0xffffffff81932dde
rip 0xffffffff810aa317 kdb_enter+0x67
rflags 0x86 ll+0x65
kdb_enter+0x67: movq $0,0x146cf76(%rip)
db> show proc
state: NORMAL
uid: 0 gids: 0, 0, 5
parent: pid 769 at 0xfffff8000b67d530
uid: 0 gids: 0, 0, 5
ABI: FreeBSD ELF64
arguments: ./syz-executor717092001
reaper: 0xfffff80003318000 reapsubtree: 1
sigparent: 20
vmspace: 0xfffffe0024949000
sigparent: 20
(map 0xfffffe0024949000)
(map.pmap 0xfffffe00249490c0)
(pmap 0xfffffe0024949120)
threads: 1
100100 Run CPU 1 syz-executor7170920
db> ps
pid ppid pgrp uid state wmesg wchan cmd
771 769 769 0 R CPU 1 syz-executor7170920
pid ppid pgrp uid state wmesg wchan cmd
769 767 769 0 Ss pause 0xfffff8000b67d5d8 csh
767 680 767 0 Ss select 0xfffff80003bd3040 sshd
746 1 746 0 Ss+ ttyin 0xfffff80003811cb0 getty
745 1 745 0 Ss+ ttyin 0xfffff80003b408b0 getty
744 1 744 0 Ss+ ttyin 0xfffff80003b3f0b0 getty
743 1 743 0 Ss+ ttyin 0xfffff80003b3f8b0 getty
742 1 742 0 Ss+ ttyin 0xfffff800033a70b0 getty
741 1 741 0 Ss+ ttyin 0xfffff800033a78b0 getty
740 1 740 0 Ss+ ttyin 0xfffff800033aa0b0 getty
739 1 739 0 Ss+ ttyin 0xfffff800033aa8b0 getty
738 1 738 0 Ss+ ttyin 0xfffff800033a90b0 getty
736 1 22 0 S+ piperd 0xfffff80003c8a2f8 logger
735 734 22 0 S+ nanslp 0xffffffff824ffe91 sleep
734 1 22 0 S+ wait 0xfffff80003318a60 sh
684 1 684 0 Ss nanslp 0xffffffff824ffe90 cron
680 1 680 0 Ss select 0xfffff8000b0c6440 sshd
493 1 493 0 Ss select 0xfffff80003bd3f40 syslogd
422 1 422 0 Ss select 0xfffff80003bd3a40 devd
421 1 421 65 Ss select 0xfffff80003bd3ac0 dhclient
336 1 336 0 Ss select 0xfffff80003bd3ec0 dhclient
333 1 333 0 Ss select 0xfffff8000b0c6a40 dhclient
21 0 0 0 DL vlruwt 0xfffff800033eda60 [vnlru]
20 0 0 0 DL syncer 0xffffffff825d6358 [syncer]
19 0 0 0 DL (threaded) [bufdaemon]
100065 D qsleep 0xffffffff825d5858 [bufdaemon]
100070 D - 0xffffffff8200aa00 [bufspacedaemon-0]
100080 D sdflush 0xfffff8000359c8e8 [/ worker]
19 0 0 0 DL (threaded) [bufdaemon]
100065 D qsleep 0xffffffff825d5858 [bufdaemon]
100070 D - 0xffffffff8200aa00 [bufspacedaemon-0]
18 0 0 0 DL psleep 0xffffffff825f12c8 [vmdaemon]
17 0 0 0 DL (threaded) [pagedaemon]
100063 D psleep 0xffffffff8261d1d8 [dom0]
100068 D launds 0xffffffff8261d1e4 [laundry: dom0]
100069 D umarcl 0xffffffff81536c90 [uma]
16 0 0 0 DL - 0xffffffff8235a6b0 [rand_harvestq]
15 0 0 0 DL waiting 0xffffffff826627a0 [sctp_iterator]
9 0 0 0 DL - 0xffffffff825d525c [soaiod4]
8 0 0 0 DL - 0xffffffff825d525c [soaiod3]
7 0 0 0 DL - 0xffffffff825d525c [soaiod2]
6 0 0 0 DL - 0xffffffff825d525c [soaiod1]
5 0 0 0 DL (threaded) [cam]
100031 D - 0xffffffff82235ac0 [doneq0]
100062 D - 0xffffffff82235988 [scanner]
4 0 0 0 DL crypto_ 0xfffff800033ea190 [crypto returns 1]
17 0 0 0 DL (threaded) [pagedaemon]
100063 D psleep 0xffffffff8261d1d8 [dom0]
100068 D launds 0xffffffff8261d1e4 [laundry: dom0]
100069 D umarcl 0xffffffff81536c90 [uma]
16 0 0 0 DL - 0xffffffff8235a6b0 [rand_harvestq]
15 0 0 0 DL waiting 0xffffffff826627a0 [sctp_iterator]
9 0 0 0 DL - 0xffffffff825d525c [soaiod4]
8 0 0 0 DL - 0xffffffff825d525c [soaiod3]
7 0 0 0 DL - 0xffffffff825d525c [soaiod2]
6 0 0 0 DL - 0xffffffff825d525c [soaiod1]
5 0 0 0 DL (threaded) [cam]
100031 D - 0xffffffff82235ac0 [doneq0]
100062 D - 0xffffffff82235988 [scanner]
3 0 0 0 DL crypto_ 0xfffff800033ea130 [crypto returns 0]
100004 CanRun [idle: cpu1]
1 0 1 0 SLs wait 0xfffff80003318000 [init]
10 0 0 0 DL audit_w 0xffffffff82663430 [audit]
0 0 0 0 DLs (threaded) [kernel]
100000 D swapin 0xffffffff8260ae48 [swapper]
100006 D - 0xfffff80003339000 [thread taskq]
100008 D - 0xfffff80003333000 [config_0]
100009 D - 0xfffff8000333ad00 [kqueue_ctx taskq]
100010 D - 0xfffff8000333ac00 [aiod_kick taskq]
100012 D - 0xfffff80003334e00 [if_config_tqg_0]
100013 D - 0xfffff80003334d00 [if_io_tqg_0]
100014 D - 0xfffff80003334c00 [if_io_tqg_1]
100015 D - 0xfffff80003334b00 [softirq_0]
100016 D - 0xfffff80003334a00 [softirq_1]
100021 D - 0xfffff8000333aa00 [firmware taskq]
100026 D - 0xfffff80003337e00 [crypto_0]
100027 D - 0xfffff80003337e00 [crypto_1]
100041 D - 0xfffff80003337600 [vtnet0 rxq 0]
100042 D - 0xfffff80003337500 [vtnet0 txq 0]
100043 D - 0xfffff80003337400 [vtnet0 rxq 1]
100044 D - 0xfffff80003337300 [vtnet0 txq 1]
100046 D vtbslp 0xfffff80003509580 [virtio_balloon]
1 0 1 0 SLs wait 0xfffff80003318000 [init]
10 0 0 0 DL audit_w 0xffffffff82663430 [audit]
0 0 0 0 DLs (threaded) [kernel]
100000 D swapin 0xffffffff8260ae48 [swapper]
100006 D - 0xfffff80003339000 [thread taskq]
100008 D - 0xfffff80003333000 [config_0]
100009 D - 0xfffff8000333ad00 [kqueue_ctx taskq]
100010 D - 0xfffff8000333ac00 [aiod_kick taskq]
100012 D - 0xfffff80003334e00 [if_config_tqg_0]
100013 D - 0xfffff80003334d00 [if_io_tqg_0]
100014 D - 0xfffff80003334c00 [if_io_tqg_1]
100015 D - 0xfffff80003334b00 [softirq_0]
100016 D - 0xfffff80003334a00 [softirq_1]
100021 D - 0xfffff8000333aa00 [firmware taskq]
100026 D - 0xfffff80003337e00 [crypto_0]
100027 D - 0xfffff80003337e00 [crypto_1]
100041 D - 0xfffff80003337600 [vtnet0 rxq 0]
100042 D - 0xfffff80003337500 [vtnet0 txq 0]
100043 D - 0xfffff80003337400 [vtnet0 rxq 1]
100044 D - 0xfffff80003337300 [vtnet0 txq 1]
100050 D - 0xfffff80003337200 [mca taskq]
100055 D - 0xffffffff81cd6151 [deadlkres]
100057 D - 0xfffff80003337900 [acpi_task_0]
100058 D - 0xfffff80003337900 [acpi_task_1]
100059 D - 0xfffff80003337900 [acpi_task_2]
100061 D - 0xfffff80003337800 [CAM taskq]
db> show all locks
Process 771 (syz-executor7170920) thread 0xfffffe0024951700 (100100)
100055 D - 0xffffffff81cd6151 [deadlkres]
100057 D - 0xfffff80003337900 [acpi_task_0]
100058 D - 0xfffff80003337900 [acpi_task_1]
100059 D - 0xfffff80003337900 [acpi_task_2]
100061 D - 0xfffff80003337800 [CAM taskq]
db> show all locks
exclusive sleep mutex sctp-tcb (tcb) r = 0 (0xfffffe00249f1380) locked @ /syzkaller/managers/main/kernel/sys/netinet/sctp_output.c:13643
db> show malloc
Type InUse MemUse Requests
devbuf 4213 4851K 4238
Type InUse MemUse Requests
vtbuf 24 1968K 46
sysctloid 26033 1517K 26097
kobj 332 1328K 488
newblk 509 1151K 527
sysctloid 26033 1517K 26097
kobj 332 1328K 488
vfscache 4 1025K 4
pcb 23 539K 77
inodedep 48 536K 71
ufs_quota 1 512K 1
vfs_hash 1 512K 1
callout 2 512K 2
intr 4 388K 4
subproc 102 205K 830
vfs_hash 1 512K 1
callout 2 512K 2
intr 4 388K 4
acpica 1674 185K 52709
vnet_data 1 168K 1
pagedep 14 132K 18
vnet_data 1 168K 1
tfo_ccache 1 128K 1
sem 4 106K 4
DEVFS1 101 101K 110
sem 4 106K 4
linker 222 89K 241
bus 964 78K 3342
mtx_pool 2 72K 2
syncache 1 68K 1
acpitask 1 64K 1
ddb_capture 1 64K 1
module 494 62K 494
syncache 1 68K 1
acpitask 1 64K 1
ddb_capture 1 64K 1
module 494 62K 494
gtaskqueue 22 34K 22
hostcache 1 32K 1
shm 1 32K 1
hostcache 1 32K 1
msg 4 30K 4
DEVFS3 120 30K 130
umtx 234 30K 234
kdtrace 138 27K 1594
DEVFS_RULE 56 27K 56
vmem 3 22K 4
kbdmux 6 22K 6
BPF 10 18K 10
temp 17 17K 1533
ufs_mount 3 17K 4
proc 3 17K 3
tty 16 16K 16
tidhash 1 16K 1
ithread 89 15K 89
tty 16 16K 16
tidhash 1 16K 1
ithread 89 15K 89
bus-sc 30 14K 1431
KTRACE 100 13K 100
ifaddr 30 12K 32
KTRACE 100 13K 100
kenv 95 12K 99
eventhandler 122 11K 122
pfs_nodes 20 10K 20
GEOM 60 10K 487
rman 82 10K 423
bmsafemap 4 9K 41
pfs_nodes 20 10K 20
GEOM 60 10K 487
rman 82 10K 423
UART 12 9K 12
devstat 4 9K 4
rpc 2 8K 2
shmfd 1 8K 1
devstat 4 9K 4
rpc 2 8K 2
pfs_vncache 1 8K 1
audit_evclass 232 8K 290
CAM DEV 3 6K 510
vt 11 6K 11
cred 21 6K 234
sglist 5 6K 5
CAM queue 5 6K 1528
routetbl 28 5K 32
CAM queue 5 6K 1528
ufs_dirhash 24 5K 24
taskqueue 42 5K 42
dirrem 17 5K 28
taskqueue 42 5K 42
plimit 17 5K 322
ifnet 3 5K 3
memdesc 1 4K 1
MCA 32 4K 32
evdev 4 4K 4
filedesc 1 4K 1
MCA 32 4K 32
evdev 4 4K 4
UMA 236 4K 236
lltable 11 4K 11
hhook 13 4K 13
ether_multi 40 4K 45
diradd 25 4K 36
in6_multi 25 3K 25
acpisem 22 3K 22
terminal 11 3K 11
kqueue 44 3K 774
terminal 11 3K 11
session 20 3K 31
pgrp 20 3K 31
select 19 3K 19
uidinfo 3 3K 8
local_apic 1 2K 1
io_apic 1 2K 1
ipsec-saq 2 2K 2
io_apic 1 2K 1
proc-args 39 2K 472
CAM XPT 22 2K 543
lockf 15 2K 22
Unitno 25 2K 37
crypto 2 2K 2
acpidev 20 2K 20
msi 9 2K 9
softdep 1 1K 1
acpidev 20 2K 20
msi 9 2K 9
ipsecpolicy 1 1K 1
sahead 1 1K 1
secasvar 1 1K 1
sctp_atcl 2 1K 2
sahead 1 1K 1
secasvar 1 1K 1
sctp_stro 1 1K 1
clone 8 1K 8
vnodemarker 2 1K 6
NFSD session 1 1K 1
CAM periph 4 1K 271
indirdep 3 1K 3
CAM periph 4 1K 271
toponodes 6 1K 6
isadev 6 1K 6
mount 16 1K 86
pci_link 10 1K 10
ip6ndp 4 1K 5
isadev 6 1K 6
mount 16 1K 86
pci_link 10 1K 10
sctp_ifa 5 1K 5
newdirblk 4 1K 8
mkdir 4 1K 16
in_multi 2 1K 3
pfil 4 1K 4
chacha20random 1 1K 1
CAM SIM 2 1K 2
epoch 4 1K 4
cdev 2 1K 2
encap_export_host 8 1K 8
osd 3 1K 9
mld 2 1K 2
chacha20random 1 1K 1
CAM SIM 2 1K 2
epoch 4 1K 4
cdev 2 1K 2
encap_export_host 8 1K 8
osd 3 1K 9
sctp_ifn 2 1K 2
igmp 2 1K 2
vnodes 1 1K 1
NFSD lckfile 1 1K 1
NFSD V4client 1 1K 1
DEVFS 9 1K 10
feeder 7 1K 7
inpcbpolicy 6 1K 131
NFSD V4client 1 1K 1
DEVFS 9 1K 10
feeder 7 1K 7
loginclass 3 1K 7
CAM dev queue 2 1K 2
CAM I/O Scheduler 1 1K 1
apmdev 1 1K 1
atkbddev 2 1K 2
CAM path 4 1K 1034
sctp_atky 3 1K 3
CAM I/O Scheduler 1 1K 1
apmdev 1 1K 1
atkbddev 2 1K 2
CAM path 4 1K 1034
soname 5 1K 5741
pmchooks 1 1K 1
prison 4 1K 4
DEVFSP 2 1K 2
prison 4 1K 4
filecaps 4 1K 66
tun 3 1K 3
nexusdev 5 1K 5
entropy 2 1K 35
tcpfunc 1 1K 1
sctp_vrf 1 1K 1
vnet 1 1K 1
acpiintr 1 1K 1
pmc 1 1K 1
cpus 2 1K 2
freework 1 1K 26
sctp_vrf 1 1K 1
vnet 1 1K 1
acpiintr 1 1K 1
pmc 1 1K 1
cpus 2 1K 2
sctp_athm 2 1K 2
sctp_map 2 1K 2
vm_fictitious 0 0K 0
PUC 0 0K 0
ppbusdev 0 0K 0
agtiapi_MemAlloc malloc 0 0K 0
osti_cacheable 0 0K 0
tempbuff 0 0K 0
tempbuff 0 0K 0
ag_tgt_map_t malloc 0 0K 0
UMAHash 0 0K 0
ag_slr_map_t malloc 0 0K 0
lDevFlags * malloc 0 0K 0
vm_pgdata 0 0K 0
jblocks 0 0K 0
savedino 0 0K 10
PUC 0 0K 0
ppbusdev 0 0K 0
agtiapi_MemAlloc malloc 0 0K 0
osti_cacheable 0 0K 0
tempbuff 0 0K 0
tempbuff 0 0K 0
ag_tgt_map_t malloc 0 0K 0
UMAHash 0 0K 0
ag_slr_map_t malloc 0 0K 0
lDevFlags * malloc 0 0K 0
vm_pgdata 0 0K 0
jblocks 0 0K 0
sentinel 0 0K 0
jfsync 0 0K 0
jtrunc 0 0K 0
sbdep 0 0K 2
jfsync 0 0K 0
jtrunc 0 0K 0
sbdep 0 0K 2
jsegdep 0 0K 0
jseg 0 0K 0
jfreefrag 0 0K 0
jfreeblk 0 0K 0
jnewblk 0 0K 0
jmvref 0 0K 0
jremref 0 0K 0
jaddref 0 0K 0
freedep 0 0K 0
freefile 0 0K 9
jseg 0 0K 0
jfreefrag 0 0K 0
jfreeblk 0 0K 0
jnewblk 0 0K 0
jmvref 0 0K 0
jremref 0 0K 0
jaddref 0 0K 0
freedep 0 0K 0
freeblks 0 0K 25
freefrag 0 0K 7
ip6_msource 0 0K 0
ip6_moptions 0 0K 0
in6_mfilter 0 0K 0
frag6 0 0K 0
tcplog 0 0K 0
LRO 0 0K 0
sctp_mcore 0 0K 0
sctp_socko 0 0K 1
ip6_moptions 0 0K 0
in6_mfilter 0 0K 0
frag6 0 0K 0
tcplog 0 0K 0
LRO 0 0K 0
sctp_mcore 0 0K 0
sctp_iter 0 0K 3
sctp_mvrf 0 0K 0
sctp_timw 0 0K 0
sctp_cpal 0 0K 0
sctp_cmsg 0 0K 0
sctp_stre 0 0K 0
sctp_athi 0 0K 0
sctp_a_it 0 0K 3
sctp_cmsg 0 0K 0
sctp_stre 0 0K 0
sctp_athi 0 0K 0
sctp_aadr 0 0K 0
sctp_stri 0 0K 0
newreno data 0 0K 0
ip_msource 0 0K 0
ip_moptions 0 0K 0
in_mfilter 0 0K 0
ipid 0 0K 0
80211scan 0 0K 0
80211ratectl 0 0K 0
80211power 0 0K 0
80211nodeie 0 0K 0
80211node 0 0K 0
80211mesh_gt 0 0K 0
80211mesh_rt 0 0K 0
80211perr 0 0K 0
80211prep 0 0K 0
80211preq 0 0K 0
80211dfs 0 0K 0
80211crypto 0 0K 0
80211vap 0 0K 0
iflib 0 0K 0
vlan 0 0K 0
gif 0 0K 0
ifdescr 0 0K 0
zlib 0 0K 0
fadvise 0 0K 0
tiDeviceHandle_t * malloc 0 0K 0
statfs 0 0K 195
80211scan 0 0K 0
80211ratectl 0 0K 0
80211power 0 0K 0
80211nodeie 0 0K 0
80211node 0 0K 0
80211mesh_gt 0 0K 0
80211mesh_rt 0 0K 0
80211perr 0 0K 0
80211prep 0 0K 0
80211preq 0 0K 0
80211dfs 0 0K 0
80211crypto 0 0K 0
80211vap 0 0K 0
iflib 0 0K 0
vlan 0 0K 0
gif 0 0K 0
ifdescr 0 0K 0
zlib 0 0K 0
fadvise 0 0K 0
tiDeviceHandle_t * malloc 0 0K 0
export_host 0 0K 0
cl_savebuf 0 0K 3
ag_portal_data_t malloc 0 0K 0
ag_device_t malloc 0 0K 0
STLock malloc 0 0K 0
CCB List 0 0K 0
sr_iov 0 0K 0
OCS 0 0K 0
OCS 0 0K 0
nvme 0 0K 0
nvd 0 0K 0
netmap 0 0K 0
mwldev 0 0K 0
MVS driver 0 0K 0
CAM ccb queue 0 0K 0
mrsasbuf 0 0K 0
mpt_user 0 0K 0
mps_user 0 0K 0
biobuf 0 0K 0
aios 0 0K 0
lio 0 0K 0
acl 0 0K 0
MPSSAS 0 0K 0
mbuf_tag 0 0K 25
ag_device_t malloc 0 0K 0
STLock malloc 0 0K 0
CCB List 0 0K 0
sr_iov 0 0K 0
OCS 0 0K 0
OCS 0 0K 0
nvme 0 0K 0
nvd 0 0K 0
netmap 0 0K 0
mwldev 0 0K 0
MVS driver 0 0K 0
CAM ccb queue 0 0K 0
mrsasbuf 0 0K 0
mpt_user 0 0K 0
mps_user 0 0K 0
biobuf 0 0K 0
aios 0 0K 0
lio 0 0K 0
acl 0 0K 0
MPSSAS 0 0K 0
accf 0 0K 0
pts 0 0K 0
iov 0 0K 12973
pts 0 0K 0
ioctlops 0 0K 86
Witness 0 0K 0
stack 0 0K 0
mps 0 0K 0
mpr_user 0 0K 0
MPRSAS 0 0K 0
mpr 0 0K 0
mfibuf 0 0K 0
md_sectors 0 0K 0
sbuf 0 0K 288
md_disk 0 0K 0
compressor 0 0K 0
malodev 0 0K 0
SWAP 0 0K 0
LED 0 0K 0
sysctltmp 0 0K 570
stack 0 0K 0
mps 0 0K 0
mpr_user 0 0K 0
MPRSAS 0 0K 0
mpr 0 0K 0
mfibuf 0 0K 0
md_sectors 0 0K 0
sbuf 0 0K 288
md_disk 0 0K 0
compressor 0 0K 0
malodev 0 0K 0
SWAP 0 0K 0
LED 0 0K 0
sysctl 0 0K 1
ekcd 0 0K 0
dumper 0 0K 0
rctl 0 0K 0
ix_sriov 0 0K 0
aacraidcam 0 0K 0
ix 0 0K 0
ipsbuf 0 0K 0
iirbuf 0 0K 0
cache 0 0K 0
aacraid_buf 0 0K 0
kcovinfo 0 0K 0
ekcd 0 0K 0
dumper 0 0K 0
rctl 0 0K 0
ix_sriov 0 0K 0
aacraidcam 0 0K 0
ix 0 0K 0
ipsbuf 0 0K 0
iirbuf 0 0K 0
cache 0 0K 0
aacraid_buf 0 0K 0
prison_racct 0 0K 0
Fail Points 0 0K 0
sigio 0 0K 1
Fail Points 0 0K 0
Reply all
Reply to author
Forward
0 new messages