panic: _mtx_lock_sleep: recursed on non-recursive mutex so_snd @ /syzkaller/managers/main/kernel/sys/kern/uipc_socket.c:

2 views
Skip to first unread message

syzbot

unread,
May 21, 2020, 5:01:19 PM5/21/20
to syzkaller-f...@googlegroups.com
Hello,

syzbot found the following crash on:

HEAD commit: 46c2358a Fix ACCEPT_FILTER_DEFINE to pass the version to M..
git tree: freebsd
console output: https://syzkaller.appspot.com/x/log.txt?x=133125e6100000
dashboard link: https://syzkaller.appspot.com/bug?extid=621ea1f68df673851e66

Unfortunately, I don't have any reproducer for this crash yet.

IMPORTANT: if you fix the bug, please add the following tag to the commit:
Reported-by: syzbot+621ea1...@syzkaller.appspotmail.com

panic: _mtx_lock_sleep: recursed on non-recursive mutex so_snd @ /syzkaller/managers/main/kernel/sys/kern/uipc_socket.c:4035

cpuid = 0
time = 129
KDB: stack backtrace:
db_trace_self_wrapper() at db_trace_self_wrapper+0x47/frame 0xfffffe00037fc790
vpanic() at vpanic+0x1c7/frame 0xfffffe00037fc7f0
panic() at panic+0x43/frame 0xfffffe00037fc850
__mtx_lock_sleep() at __mtx_lock_sleep+0x72e/frame 0xfffffe00037fc8f0
__mtx_lock_flags() at __mtx_lock_flags+0x150/frame 0xfffffe00037fc950
soisdisconnected() at soisdisconnected+0xb2/frame 0xfffffe00037fc980
tcp_close() at tcp_close+0x183/frame 0xfffffe00037fc9c0
tcp_hpts_thread() at tcp_hpts_thread+0x143d/frame 0xfffffe00037fcb10
ithread_loop() at ithread_loop+0x328/frame 0xfffffe00037fcbb0
fork_exit() at fork_exit+0xb3/frame 0xfffffe00037fcbf0
fork_trampoline() at fork_trampoline+0xe/frame 0xfffffe00037fcbf0
--- trap 0, rip = 0, rsp = 0, rbp = 0 ---
KDB: enter: panic
[ thread pid 12 tid 100072 ]
Stopped at kdb_enter+0x67: movq $0,0x14ab366(%rip)
db>
db> set $lines = 0
db> set $maxwidth = 0
db> show registers
cs 0x20
ds 0x3b ll+0x1a
es 0x3b ll+0x1a
fs 0x13
gs 0x1b
ss 0x28 ll+0x7
rax 0x12
rcx 0xffffffff810b71c0 vprintf+0x140
rdx 0x1
rbx 0
rsp 0xfffffe00037fc770
rbp 0xfffffe00037fc790
rsi 0
rdi 0xffffffff810b71f6 vprintf+0x176
r8 0
r9 0xffffffff
r10 0
r11 0xd49704b2
r12 0xffffffff82068e40 ddb_dbbe
r13 0
r14 0xffffffff819472dc
r15 0xffffffff819472dc
rip 0xffffffff810ac507 kdb_enter+0x67
rflags 0x82 ll+0x61
kdb_enter+0x67: movq $0,0x14ab366(%rip)
db> show proc
Process 12 (intr) at 0xfffff80003308520:
state: NORMAL
uid: 0 gids: 0
parent: pid 0 at 0xffffffff8250b710
ABI: null
reaper: 0xffffffff8250b710 reapsubtree: 12
sigparent: 20
vmspace: 0xffffffff8250c350
(map 0xffffffff8250c350)
(map.pmap 0xffffffff8250c410)
(pmap 0xffffffff8250c470)
threads: 23
100012 I [swi5: fast taskq]
100015 I [swi6: task queue]
100016 I [swi6: Giant taskq]
100019 I [swi4: clock (0)]
100020 I [swi4: clock (1)]
100021 I [swi1: netisr 0]
100022 I [swi3: vm]
100034 I [irq24: virtio_pci0]
100035 I [irq25: virtio_pci0]
100036 I [irq26: virtio_pci0]
100037 I [irq27: virtio_pci0]
100038 I [irq28: virtio_pci1]
100039 I [irq29: virtio_pci1]
100040 RunQ [irq30: virtio_pci1]
100041 I [irq31: virtio_pci1]
100042 I [irq32: virtio_pci1]
100047 I [irq10: virtio_pci2]
100049 I [irq1: atkbd0]
100050 I [irq12: psm0]
100051 I [swi0: uart uart++]
100060 I [swi1: pf send]
100072 Run CPU 0 [swi1: hpts]
100073 RunQ [swi1: hpts]
db> ps
pid ppid pgrp uid state wmesg wchan cmd
7707 3034 3034 0 R (threaded) syz-executor.3
100542 RunQ syz-executor.3
100735 S sbwait 0xfffffe00239b90f4 syz-executor.3
100742 S connec 0xfffffe00239b20f0 syz-executor.3
100745 S uwait 0xfffff80068014680 syz-executor.3
7706 3257 3257 0 R (threaded) syz-executor.2
100575 RunQ syz-executor.2
100734 S connec 0xfffffe00239b0f10 syz-executor.2
100740 S uwait 0xfffff80003ca2f00 syz-executor.2
7704 3305 3305 0 R (threaded) syz-executor.1
100703 RunQ syz-executor.1
100723 S sbwait 0xfffffe00239b3a8c syz-executor.1
100726 S sbwait 0xfffffe00239b3704 syz-executor.1
100729 S connec 0xfffffe00239b40f0 syz-executor.1
7703 6041 6041 0 R (threaded) syz-executor.0
101006 RunQ syz-executor.0
100720 S connec 0xfffffe0023bfc9a8 syz-executor.0
100721 Run CPU 1 syz-executor.0
100995 S connec 0xfffffe00239b59a8 syz-executor.0
101133 S connec 0xfffffe00239b59a8 syz-executor.0
6473 6467 6473 0 Ss select 0xfffff8000cf0cd40 dhclient
6470 1 6470 0 Ss select 0xfffff800680141c0 dhclient
6467 6460 424 65 S select 0xfffff800680147c0 dhclient
6460 424 424 0 S wait 0xfffff80003ce4520 sh
6424 1 6424 65 Ss select 0xfffff80068014240 dhclient
6041 768 6041 0 Rs syz-executor.0
5793 1 5793 0 Ss select 0xfffff80003dd5340 dhclient
5790 1 5790 0 Ss select 0xfffff8000c311dc0 dhclient
4986 1 4986 65 Ss select 0xfffff8000c541440 dhclient
4165 1 4165 0 Ss select 0xfffff8000cf0c040 dhclient
4162 1 4162 0 Ss select 0xfffff8000cf0d440 dhclient
4151 1 4151 65 Ss select 0xfffff80003d0d4c0 dhclient
3305 768 3305 0 Rs syz-executor.1
3297 1 3297 0 Ss select 0xfffff8000c311340 dhclient
3294 1 3294 0 Ss select 0xfffff8000cf0d240 dhclient
3257 768 3257 0 Rs syz-executor.2
3034 768 3034 0 Rs syz-executor.3
768 766 766 0 S (threaded) syz-fuzzer
100106 S kqread 0xfffff800031fc800 syz-fuzzer
100107 S uwait 0xfffff80003b87d00 syz-fuzzer
100108 S uwait 0xfffff80003b87d80 syz-fuzzer
100109 S uwait 0xfffff80003dd5700 syz-fuzzer
100110 S uwait 0xfffff80003dd5800 syz-fuzzer
100111 S uwait 0xfffff80003dd5900 syz-fuzzer
100112 S uwait 0xfffff80003dd5d00 syz-fuzzer
100113 S uwait 0xfffff80003dd5e00 syz-fuzzer
100114 S uwait 0xfffff80003ca2600 syz-fuzzer
100116 S uwait 0xfffff80003c9d680 syz-fuzzer
100118 S uwait 0xfffff8000c516300 syz-fuzzer
766 764 766 0 Ss pause 0xfffff8000c48d5c8 csh
764 682 764 0 Ss select 0xfffff80003dd53c0 sshd
748 1 748 0 Ss+ ttyin 0xfffff8000383ecb0 getty
747 1 747 0 Ss+ ttyin 0xfffff80003b334b0 getty
746 1 746 0 Ss+ ttyin 0xfffff80003b338b0 getty
745 1 745 0 Ss+ ttyin 0xfffff80003b33cb0 getty
744 1 744 0 Ss+ ttyin 0xfffff80003b360b0 getty
743 1 743 0 Ss+ ttyin 0xfffff80003b364b0 getty
742 1 742 0 Ss+ ttyin 0xfffff80003b368b0 getty
741 1 741 0 Ss+ ttyin 0xfffff80003b36cb0 getty
740 1 740 0 Ss+ ttyin 0xfffff80003b350b0 getty
686 1 686 0 Ss nanslp 0xffffffff8252c1e0 cron
682 1 682 0 Ss select 0xfffff80003dd54c0 sshd
495 1 495 0 Rs syslogd
424 1 424 0 Ss wait 0xfffff8000c1f7520 devd
423 1 423 65 Ss select 0xfffff80003b87f40 dhclient
338 1 338 0 Ss select 0xfffff80003b87ec0 dhclient
335 1 335 0 Ss select 0xfffff80003b87e40 dhclient
23 0 0 0 DL syncer 0xffffffff82618118 [syncer]
22 0 0 0 DL vlruwt 0xfffff800033dca40 [vnlru]
21 0 0 0 DL (threaded) [bufdaemon]
100069 D qsleep 0xffffffff82617430 [bufdaemon]
100076 D - 0xffffffff8200aa00 [bufspacedaemon-0]
100085 D sdflush 0xfffff80003c6dce8 [/ worker]
20 0 0 0 DL psleep 0xffffffff8263e308 [vmdaemon]
19 0 0 0 DL (threaded) [pagedaemon]
100067 D psleep 0xffffffff826328d8 [dom0]
100074 D launds 0xffffffff826328e4 [laundry: dom0]
100075 D umarcl 0xffffffff81544300 [uma]
18 0 0 0 DL - 0xffffffff8235fe58 [rand_harvestq]
17 0 0 0 DL pftm 0xffffffff82bcc3a0 [pf purge]
16 0 0 0 DL waiting 0xffffffff8261a890 [sctp_iterator]
15 0 0 0 DL - 0xffffffff82616a2c [soaiod4]
9 0 0 0 DL - 0xffffffff82616a2c [soaiod3]
8 0 0 0 DL - 0xffffffff82616a2c [soaiod2]
7 0 0 0 DL - 0xffffffff82616a2c [soaiod1]
6 0 0 0 DL (threaded) [cam]
100033 D - 0xffffffff82237bc0 [doneq0]
100066 D - 0xffffffff82237a90 [scanner]
5 0 0 0 DL crypto_ 0xfffff80003206e90 [crypto returns 1]
4 0 0 0 DL crypto_ 0xfffff80003206e30 [crypto returns 0]
3 0 0 0 DL crypto_ 0xffffffff826300c0 [crypto]
14 0 0 0 DL seqstat 0xfffff8000335f488 [sequencer 00]
13 0 0 0 DL (threaded) [geom]
100024 D - 0xffffffff8250b180 [g_event]
100025 D - 0xffffffff8250b188 [g_up]
100026 D - 0xffffffff8250b190 [g_down]
2 0 0 0 DL (threaded) [KTLS]
100017 D - 0xfffff80003319600 [thr_0]
100018 D - 0xfffff80003319640 [thr_1]
12 0 0 0 RL (threaded) [intr]
100012 I [swi5: fast taskq]
100015 I [swi6: task queue]
100016 I [swi6: Giant taskq]
100019 I [swi4: clock (0)]
100020 I [swi4: clock (1)]
100021 I [swi1: netisr 0]
100022 I [swi3: vm]
100034 I [irq24: virtio_pci0]
100035 I [irq25: virtio_pci0]
100036 I [irq26: virtio_pci0]
100037 I [irq27: virtio_pci0]
100038 I [irq28: virtio_pci1]
100039 I [irq29: virtio_pci1]
100040 RunQ [irq30: virtio_pci1]
100041 I [irq31: virtio_pci1]
100042 I [irq32: virtio_pci1]
100047 I [irq10: virtio_pci2]
100049 I [irq1: atkbd0]
100050 I [irq12: psm0]
100051 I [swi0: uart uart++]
100060 I [swi1: pf send]
100072 Run CPU 0 [swi1: hpts]
100073 RunQ [swi1: hpts]
11 0 0 0 RL (threaded) [idle]
100003 CanRun [idle: cpu0]
100004 CanRun [idle: cpu1]
1 0 1 0 SLs wait 0xfffff80003307000 [init]
10 0 0 0 DL audit_w 0xffffffff82630598 [audit]
0 0 0 0 DLs (threaded) [kernel]
100000 D swapin 0xffffffff8250b710 [swapper]
100005 D - 0xfffff80003211b00 [softirq_0]
100006 D - 0xfffff80003211900 [softirq_1]
100007 D - 0xfffff80003211700 [if_io_tqg_0]
100008 D - 0xfffff80003211500 [if_io_tqg_1]
100009 D - 0xfffff80003211300 [if_config_tqg_0]
100010 D - 0xfffff800031fee00 [in6m_free taskq]
100011 D - 0xfffff800031fed00 [thread taskq]
100013 D - 0xfffff800031feb00 [kqueue_ctx taskq]
100014 D - 0xfffff800031fea00 [aiod_kick taskq]
100023 D - 0xfffff800031fe700 [firmware taskq]
100028 D - 0xfffff800031fe500 [crypto_0]
100029 D - 0xfffff800031fe500 [crypto_1]
100043 D - 0xfffff800031fe200 [vtnet0 rxq 0]
100044 D - 0xfffff800031fe100 [vtnet0 txq 0]
100045 D - 0xfffff800031fe000 [vtnet0 rxq 1]
100046 D - 0xfffff800031fde00 [vtnet0 txq 1]
100048 D vtbslp 0xfffff800034f0580 [virtio_balloon]
100052 D - 0xfffff800031fdc00 [mca taskq]
100057 D - 0xffffffff81ce8e00 [deadlkres]
100062 D - 0xfffff80003b7f000 [acpi_task_0]
100063 D - 0xfffff80003b7f000 [acpi_task_1]
100064 D - 0xfffff80003b7f000 [acpi_task_2]
100065 D - 0xfffff800031fe300 [CAM taskq]
db> show all locks
Process 7707 (syz-executor.3) thread 0xfffffe002584c300 (100735)
exclusive sx so_snd_sx (so_snd_sx) r = 0 (0xfffffe00239b9098) locked @ /syzkaller/managers/main/kernel/sys/kern/uipc_sockbuf.c:414
Process 7703 (syz-executor.0) thread 0xfffffe002594e500 (100721)
exclusive sx so_snd_sx (so_snd_sx) r = 0 (0xfffffe00239b5b30) locked @ /syzkaller/managers/main/kernel/sys/kern/uipc_sockbuf.c:414
Process 12 (intr) thread 0xfffffe0004cfb700 (100072)
exclusive rw tcpinp (tcpinp) r = 0 (0xfffff8001902e9a8) locked @ /syzkaller/managers/main/kernel/sys/netinet/tcp_hpts.c:1272
exclusive sleep mutex so_snd (so_snd) r = 0 (0xfffffe00239b5b10) locked @ /syzkaller/managers/main/kernel/sys/modules/tcp/bbr/../../../netinet/tcp_stacks/bbr.c:12532
db> show malloc
Type InUse MemUse Requests
pf_hash 5 11524K 5
devbuf 4213 4851K 4241
tcp_hpts 5 3201K 5
vtbuf 24 1968K 46
sysctloid 27849 1625K 27913
kobj 333 1332K 490
newblk 9 1026K 14990
vfscache 4 1025K 4
pcb 79 549K 8610
inodedep 32 528K 7647
ufs_quota 1 512K 1
vfs_hash 1 512K 1
callout 2 512K 2
intr 4 388K 4
subproc 146 297K 7790
acpica 1674 185K 52709
vnet_data 1 168K 1
filedesc 22 153K 12976
pagedep 10 131K 6605
tfo_ccache 1 128K 1
sem 4 106K 4
DEVFS1 105 105K 122
linker 238 96K 372
BPF 46 88K 110
bus 1029 81K 3505
mtx_pool 2 72K 2
syncache 1 68K 1
acpitask 1 64K 1
ddb_capture 1 64K 1
module 500 63K 500
ifaddr 117 47K 179
umtx 360 45K 360
kdtrace 204 39K 32762
temp 36 35K 5343
hostcache 1 32K 1
shm 1 32K 14
DEVFS3 124 31K 134
msg 4 30K 4
DEVFS_RULE 56 27K 56
vmem 3 26K 5
gtaskqueue 18 26K 18
kbdmux 6 22K 6
ufs_mount 3 17K 4
proc 3 17K 3
tty 16 16K 16
tidhash 1 16K 1
ithread 98 16K 98
lltable 40 14K 237
ether_multi 172 14K 913
bus-sc 30 14K 1431
KTRACE 100 13K 100
ifnet 7 13K 7
kenv 95 12K 99
eventhandler 132 12K 132
in6_multi 89 11K 526
pfs_nodes 20 10K 20
select 79 10K 79
GEOM 60 10K 484
rman 82 10K 423
bmsafemap 2 9K 7372
UART 12 9K 12
devstat 4 9K 4
rpc 2 8K 2
sctp_timw 32 8K 32
shmfd 1 8K 63
pfs_vncache 1 8K 1
audit_evclass 233 8K 291
routetbl 27 7K 222
cred 25 7K 753
kqueue 66 7K 7716
CAM DEV 3 6K 510
plimit 24 6K 1047
dirrem 23 6K 6743
vt 11 6K 11
sglist 5 6K 5
CAM queue 5 6K 1528
lockf 46 5K 1648
DEVFSP 78 5K 656
taskqueue 45 5K 45
ufs_dirhash 24 5K 24
pf_ifnet 12 5K 82
session 34 5K 103
pgrp 34 5K 117
pf_table 2 4K 42
memdesc 1 4K 1
MCA 32 4K 32
UMA 248 4K 248
evdev 4 4K 4
kcovinfo 64 4K 595
sctp_ifa 30 4K 110
hhook 13 4K 13
sctp_atcl 6 3K 3615
freefile 23 3K 6723
proc-args 53 3K 1292
acpisem 22 3K 22
terminal 11 3K 11
uidinfo 3 3K 29
local_apic 1 2K 1
io_apic 1 2K 1
ipsec-saq 2 2K 2
sctp_stro 2 2K 991
ip6ndp 12 2K 83
inpcbpolicy 59 2K 18146
CAM XPT 22 2K 543
Unitno 27 2K 32539
in_multi 6 2K 42
acpidev 20 2K 20
msi 9 2K 9
tun 7 2K 7
freework 5 2K 8886
softdep 1 1K 1
mkdir 8 1K 12674
freeblks 4 1K 6642
ipsecpolicy 1 1K 1
sahead 1 1K 1
secasvar 1 1K 1
clone 8 1K 8
vnodemarker 2 1K 926
NFSD session 1 1K 1
CAM periph 4 1K 271
mld 6 1K 6
sctp_ifn 6 1K 37
igmp 6 1K 6
nhops 6 1K 6
toponodes 6 1K 6
isadev 6 1K 6
mount 16 1K 86
pci_link 10 1K 10
newdirblk 5 1K 6337
crypto 3 1K 3
diradd 4 1K 6907
pfil 4 1K 4
chacha20random 1 1K 1
CAM SIM 2 1K 2
epoch 4 1K 4
cdev 2 1K 2
encap_export_host 8 1K 8
pf_osfp 3 1K 3
sctp_atky 8 1K 4612
osd 3 1K 9
vnodes 1 1K 25
iov 2 1K 33596
NFSD lckfile 1 1K 1
NFSD V4client 1 1K 1
DEVFS 9 1K 10
soname 11 1K 14916
feeder 7 1K 7
loginclass 3 1K 6
pf_rule 1 1K 117
CAM dev queue 2 1K 2
CAM I/O Scheduler 1 1K 1
apmdev 1 1K 1
atkbddev 2 1K 2
CAM path 4 1K 1034
tcpfunc 2 1K 2
ktls 1 1K 1
pmchooks 1 1K 1
prison 4 1K 4
sctp_athm 6 1K 3616
nexusdev 5 1K 5
filecaps 5 1K 212
entropy 2 1K 80
sctp_vrf 1 1K 1
sctp_map 4 1K 1982
ip_msource 1 1K 13
vnet 1 1K 1
acpiintr 1 1K 1
pmc 1 1K 1
cpus 2 1K 2
vnet_data_free 1 1K 1
Per-cpu 1 1K 1
p1003.1b 1 1K 1
pf_altq 0 0K 0
pf_temp 0 0K 0
vtfont 0 0K 0
madt_table 0 0K 2
ath_hal 0 0K 0
athdev 0 0K 0
ata_pci 0 0K 0
ata_dma 0 0K 0
ata_generic 0 0K 0
amr 0 0K 0
scsi_da 0 0K 69
pvscsi 0 0K 0
smartpqi 0 0K 0
ata_da 0 0K 0
scsi_ch 0 0K 0
scsi_cd 0 0K 0
USBdev 0 0K 0
USB 0 0K 0
AHCI driver 0 0K 0
agp 0 0K 0
iavf 0 0K 0
ixl 0 0K 0
nvme_da 0 0K 0
acpipwr 0 0K 0
twsbuf 0 0K 0
twe_commands 0 0K 0
twa_commands 0 0K 0
tcp_log_dev 0 0K 14
fpukern_ctx 0 0K 0
midi buffers 0 0K 0
xen_intr 0 0K 0
mixer 0 0K 0
xen_hvm 0 0K 0
legacydrv 0 0K 0
qpidrv 0 0K 0
ac97 0 0K 0
hdacc 0 0K 0
dmar_idpgtbl 0 0K 0
dmar_dom 0 0K 0
dmar_ctx 0 0K 0
dmar_dmamap 0 0K 0
hdac 0 0K 0
hdaa 0 0K 0
acpi_perf 0 0K 0
isci 0 0K 0
hyperv_socket 0 0K 0
bxe_ilt 0 0K 0
xenbus 0 0K 0
acpicmbat 0 0K 0
SIIS driver 0 0K 0
vm_fictitious 0 0K 0
CAM CCB 0 0K 49682
PUC 0 0K 0
ppbusdev 0 0K 0
agtiapi_MemAlloc malloc 0 0K 0
osti_cacheable 0 0K 0
tempbuff 0 0K 0
tempbuff 0 0K 0
UMAHash 0 0K 0
ag_tgt_map_t malloc 0 0K 0
ag_slr_map_t malloc 0 0K 0
vm_pgdata 0 0K 0
jblocks 0 0K 0
savedino 0 0K 4998
sentinel 0 0K 0
jfsync 0 0K 0
jtrunc 0 0K 0
sbdep 0 0K 459
jsegdep 0 0K 0
jseg 0 0K 0
jfreefrag 0 0K 0
jfreeblk 0 0K 0
jnewblk 0 0K 0
jmvref 0 0K 0
jremref 0 0K 0
jaddref 0 0K 0
freedep 0 0K 0
freefrag 0 0K 24
allocindir 0 0K 0
indirdep 0 0K 2917
allocdirect 0 0K 0
ufs_trim 0 0K 0
mactemp 0 0K 0
audit_trigger 0 0K 0
audit_pipe_presel 0 0K 0
audit_pipeent 0 0K 0
audit_pipe 0 0K 0
audit_evname 0 0K 0
audit_bsm 0 0K 0
audit_gidset 0 0K 0
audit_text 0 0K 0
audit_path 0 0K 0
audit_data 0 0K 0
audit_cred 0 0K 0
xform 0 0K 0
NLM 0 0K 0
ipsec-spdcache 0 0K 0
ipsec-reg 0 0K 0
ipsec-misc 0 0K 0
ipsecrequest 0 0K 0
ip6opt 0 0K 387
ip6_msource 0 0K 14
ip6_moptions 0 0K 12
in6_mfilter 0 0K 30
frag6 0 0K 6
tcplog 0 0K 0
lDevFlags * malloc 0 0K 0
LRO 0 0K 0
sctp_mcore 0 0K 0
sctp_socko 0 0K 2210
sctp_iter 0 0K 111
sctp_mvrf 0 0K 0
sctp_cpal 0 0K 0
sctp_cmsg 0 0K 0
sctp_stre 0 0K 0
sctp_athi 0 0K 0
sctp_a_it 0 0K 111
sctp_aadr 0 0K 54
sctp_stri 0 0K 2
newreno data 0 0K 0
ip_moptions 0 0K 60
in_mfilter 0 0K 42
ipid 0 0K 0
80211scan 0 0K 0
80211ratectl 0 0K 0
80211power 0 0K 0
80211nodeie 0 0K 0
80211node 0 0K 0
80211mesh_gt 0 0K 0
80211mesh_rt 0 0K 0
80211perr 0 0K 0
80211prep 0 0K 0
80211preq 0 0K 0
80211dfs 0 0K 0
80211crypto 0 0K 0
80211vap 0 0K 0
iflib 0 0K 0
vlan 0 0K 0
gif 0 0K 0
ifdescr 0 0K 0
zlib 0 0K 0
fadvise 0 0K 8
tiDeviceHandle_t * malloc 0 0K 0
statfs 0 0K 6466
export_host 0 0K 0
cl_savebuf 0 0K 6
ag_portal_data_t malloc 0 0K 0
ag_device_t malloc 0 0K 0
STLock malloc 0 0K 0
CCB List 0 0K 0
sr_iov 0 0K 0
OCS 0 0K 0
OCS 0 0K 0
nvme 0 0K 0
nvd 0 0K 0
netmap 0 0K 0
mwldev 0 0K 0
MVS driver 0 0K 0
CAM ccb queue 0 0K 0
mrsasbuf 0 0K 0
mpt_user 0 0K 0
mps_user 0 0K 0
biobuf 0 0K 0
aios 0 0K 0
lio 0 0K 0
acl 0 0K 0
MPSSAS 0 0K 0
mbuf_tag 0 0K 1131
accf 0 0K 0
pts 0 0K 0
ioctlops 0 0K 2262
Witness 0 0K 0
stack 0 0K 0
mps 0 0K 0
mpr_user 0 0K 0
MPRSAS 0 0K 0
mpr 0 0K 0
mfibuf 0 0K 0
md_sectors 0 0K 0
sbuf 0 0K 288
md_disk 0 0K 0
compressor 0 0K 0
malodev 0 0K 0
SWAP 0 0K 0
LED 0 0K 0
sysctltmp 0 0K 960
sysctl 0 0K 1
ekcd 0 0K 0
dumper 0 0K 0
sendfile 0 0K 0
rctl 0 0K 0
ix_sriov 0 0K 0
aacraidcam 0 0K 0
ix 0 0K 0
ipsbuf 0 0K 0
iirbuf 0 0K 0
cache 0 0K 0
aacraid_buf 0 0K 0
prison_racct 0 0K 0
Fail Points 0 0K 0
sigio 0 0K 18
filedesc_to_leader 0 0K 0
pwd 0 0K 0
tty console 0 0K 0
aaccam 0 0K 0
aacbuf 0 0K 0
zstd 0 0K 0
nvlist 0 0K 0
SCSI ENC 0 0K 0
SCSI sa 0 0K 0
isofs_node 0 0K 0
isofs_mount 0 0K 0
tr_raid5_data 0 0K 0
tr_raid1e_data 0 0K 0
tr_raid1_data 0 0K 0
tr_raid0_data 0 0K 0
tr_concat_data 0 0K 0
md_sii_data 0 0K 0
md_promise_data 0 0K 0
md_nvidia_data 0 0K 0
md_jmicron_data 0 0K 0
md_intel_data 0 0K 0
md_ddf_data 0 0K 0
raid_data 0 0K 72
geom_flashmap 0 0K 0
NFS FHA 0 0K 0
newnfsmnt 0 0K 0
newnfsclient_req 0 0K 0
NFSCL layrecall 0 0K 0
NFSCL session 0 0K 0
NFSCL sockreq 0 0K 0
NFSCL devinfo 0 0K 0
NFSCL flayout 0 0K 0
NFSCL layout 0 0K 0
NFSD rollback 0 0K 0
NFSCL diroffdiroff 0 0K 0
NEWdirectio 0 0K 0
NEWNFSnode 0 0K 0
NFSCL lck 0 0K 0
NFSCL lckown 0 0K 0
NFSCL client 0 0K 0
NFSCL deleg 0 0K 0
NFSCL open 0 0K 0
NFSCL owner 0 0K 0
NFS fh 0 0K 0
NFS req 0 0K 0
NFSD usrgroup 0 0K 0
NFSD string 0 0K 0
NFSD V4lock 0 0K 0
NFSD V4state 0 0K 0
NFSD srvcache 0 0K 0
msdosfs_fat 0 0K 0
msdosfs_mount 0 0K 0
msdosfs_node 0 0K 0
DEVFS4 0 0K 0
DEVFS2 0 0K 0
gntdev 0 0K 0
privcmd_dev 0 0K 0
evtchn_dev 0 0K 0
xenstore 0 0K 0
scsi_pass 0 0K 0
ciss_data 0 0K 0
xnb 0 0K 0
xbbd 0 0K 0
xbd 0 0K 0
Balloon 0 0K 0
sysmouse 0 0K 0
db> show uma
Zone Size Used Free Requests Sleeps Bucket Total Mem XFree
mbuf_cluster 2048 9780 126 9780 0 254 20287488 0
mbuf_jumbo_page 4096 2 3300 8464 0 254 13524992 0
mbuf_packet 256 8214 1438 658975 0 254 2470912 0
RADIX NODE 144 15840 229 517348 0 62 2313936 0
512 512 4147 29 4257 0 30 2138112 0
BUF TRIE 144 508 12988 43035 0 62 1943424 0
4096 4096 333 5 490 0 2 1384448 0
128 128 10072 530 16804 0 126 1357056 0
sctp_asoc 2288 2 508 991 0 254 1166880 0
UMA Slabs 0 112 10145 1 10145 0 126 1136352 0
mbuf 256 500 3318 977492 0 254 977408 0
pbuf 832 0 889 0 0 2 739648 0
sctp_ep 1280 4 506 2623 0 254 652800 0
tcpcb 1032 49 468 4121 0 254 533544 0
2048 2048 2 254 49716 0 8 524288 0
socket 904 90 423 25426 0 254 463752 0
256 Bucket 2048 199 19 1285 0 8 446464 0
g_bio 408 0 1020 196384 0 31 416160 0
VM OBJECT 264 1460 70 125712 0 30 403920 0
sctp_raddr 736 2 515 993 0 254 380512 0
tcp_inpcb 488 50 718 4121 0 254 374784 0
VNODE 488 680 40 7431 0 30 351360 0
32768 32768 2 8 2582 0 1 327680 0
THREAD 1776 156 24 17426 0 8 319680 0
tcp_bbr_map 128 16 2402 23863 0 126 309504 0
4096 4096 65 5 7712 0 2 286720 0
256 256 62 1003 15184 0 62 272640 0
65536 65536 4 0 4 0 1 262144 0
512 512 35 477 9083 0 30 262144 0
ripcb 488 5 507 506 0 254 249856 0
udplite_inpcb 488 3 509 12826 0 254 249856 0
udp_inpcb 488 2 510 693 0 254 249856 0
16384 16384 9 4 6599 0 1 212992 0
tcp_log 408 0 510 1378 0 254 208080 0
64 64 2681 406 2709 0 254 197568 0
65536 65536 1 2 5 0 1 196608 0
65536 65536 2 1 114 0 1 196608 0
MAP ENTRY 96 1723 293 454964 0 126 193536 0
FFS2 dinode 256 643 107 7391 0 62 192000 0
16 16 11711 289 11913 0 254 192000 0
128 128 1134 261 24402 0 126 178560 0
256 256 150 540 7404 0 62 176640 0
UMA Zones 768 222 4 222 0 16 173568 0
4096 4096 39 3 96 0 2 172032 0
32 32 4398 264 5472 0 254 149184 0
vmem btag 56 2272 379 2272 0 254 148456 0
1024 1024 121 23 157 0 16 147456 0
256 256 35 535 18446 0 62 145920 0
VMSPACE 2536 41 13 7686 0 4 136944 0
65536 65536 0 2 459 0 1 131072 0
65536 65536 2 0 2 0 1 131072 0
unpcb 256 22 488 4508 0 254 130560 0
FFS inode 160 643 107 7392 0 62 120000 0
128 Bucket 1024 73 42 1271 0 16 117760 0
ksiginfo 112 65 979 232 0 126 116928 0
16384 16384 3 4 10 0 1 114688 0
clpbuf 832 0 128 24601 0 16 106496 0
PROC 1312 63 18 7707 0 8 106272 0
64 Bucket 512 124 76 9733 0 30 102400 0
256 256 217 173 31909 0 62 99840 0
S VFS Cache 108 658 242 8614 0 126 97200 0
filedesc0 1088 64 20 7708 0 8 91392 0
128 128 304 347 7010 0 126 83328 0
UMA Kegs 384 208 7 208 0 30 82560 0
2048 2048 5 35 2624 0 8 81920 0
sctp_chunk 152 0 520 18 0 254 79040 0
512 512 32 120 3838 0 30 77824 0
1024 1024 4 64 275 0 16 69632 0
64 64 389 682 26744 0 254 68544 0
64 64 575 496 9167 0 254 68544 0
64 64 514 557 1684 0 254 68544 0
128 128 223 304 20168 0 126 67456 0
65536 65536 0 1 8 0 1 65536 0
512 512 74 54 395 0 30 65536 0
256 256 64 191 8275 0 62 65280 0
32 Bucket 256 60 195 8055 0 62 65280 0
512 512 84 36 209 0 30 61440 0
sctp_stream_msg_out 112 0 540 19 0 254 60480 0
tcp_bbr_pcb 832 4 68 2487 0 16 59904 0
8192 8192 4 3 32 0 1 57344 0
8192 8192 3 4 12 0 1 57344 0
4096 4096 9 5 488 0 2 57344 0
128 128 167 236 545 0 126 51584 0
256 256 128 67 1326 0 62 49920 0
256 256 9 186 9924 0 62 49920 0
pipe 760 22 43 1179 0 16 49400 0
DIRHASH 1024 34 14 34 0 16 49152 0
NAMEI 1024 0 48 54095 0 16 49152 0
16384 16384 2 1 3 0 1 49152 0
2048 2048 7 17 28 0 8 49152 0
2048 2048 8 16 625 0 8 49152 0
2048 2048 13 11 53 0 8 49152 0
1024 1024 4 44 1028 0 16 49152 0
512 512 70 26 132 0 30 49152 0
syncache 168 0 264 4 0 254 44352 0
Files 80 243 307 49524 0 126 44000 0
8192 8192 4 1 85 0 1 40960 0
16 Bucket 144 84 196 51136 0 62 40320 0
sctp_readq 152 0 260 2 0 254 39520 0
64 pcpu 8 3990 618 5221 0 254 36864 0
selfd 64 153 414 56637 0 254 36288 0
64 64 11 556 106 0 254 36288 0
64 64 177 390 7899 0 254 36288 0
64 64 113 454 3223 0 254 36288 0
64 64 38 529 1035 0 254 36288 0
8 Bucket 80 74 376 56807 0 126 36000 0
128 128 46 233 170 0 126 35712 0
128 128 103 176 8335 0 126 35712 0
128 128 85 194 1518 0 126 35712 0
routing nhops 256 13 122 169 0 62 34560 0
ttyoutq 256 72 63 160 0 62 34560 0
256 256 35 100 123 0 62 34560 0
TURNSTILE 136 181 71 181 0 62 34272 0
32768 32768 1 0 1 0 1 32768 0
32768 32768 0 1 112 0 1 32768 0
4096 4096 3 5 10 0 2 32768 0
4096 4096 3 5 6469 0 2 32768 0
2048 2048 2 14 2 0 8 32768 0
2048 2048 1 15 1836 0 8 32768 0
1024 1024 1 31 2558 0 16 32768 0
1024 1024 2 30 156 0 16 32768 0
1024 1024 16 16 16 0 16 32768 0
1024 1024 19 13 19 0 16 32768 0
1024 1024 1 31 34 0 16 32768 0
512 512 5 59 85 0 30 32768 0
mt_stats_zone 64 439 73 439 0 254 32768 0
KNOTE 160 27 173 82175 0 62 32000 0
ttyinq 160 135 65 300 0 62 32000 0
cpuset 104 7 272 7 0 126 29016 0
sctp_laddr 48 0 588 343 0 254 28224 0
hostcache 96 1 293 1 0 254 28224 0
PWD 32 22 860 6416 0 254 28224 0
32 32 349 533 37983 0 254 28224 0
4 Bucket 48 6 582 8401 0 254 28224 0
rtentry 200 31 109 169 0 62 28000 0
KMAP ENTRY 96 12 279 12 0 126 27936 0
8192 8192 3 0 5 0 1 24576 0
8192 8192 3 0 3 0 1 24576 0
rl_entry 40 91 515 91 0 254 24240 0
2 Bucket 32 69 687 15668 0 254 24192 0
vtnet_tx_hdr 24 1 1001 929351 0 254 24048 0
SLEEPQUEUE 88 181 75 181 0 126 22528 0
udpcb 32 5 625 13519 0 254 20160 0
32 32 99 531 7593 0 254 20160 0
32 32 26 604 811 0 254 20160 0
32 32 104 526 7612 0 254 20160 0
32 32 107 523 18878 0 254 20160 0
32 32 38 592 2656 0 254 20160 0
procdesc 136 5 140 38 0 62 19720 0
L VFS Cache 328 0 60 7 0 30 19680 0
epoch_record pcpu 256 4 60 4 0 62 16384 0
16384 16384 1 0 1 0 1 16384 0
16384 16384 1 0 1 0 1 16384 0
8192 8192 2 0 2 0 1 16384 0
8192 8192 2 0 2 0 1 16384 0
4096 4096 0 4 217 0 2 16384 0
2048 2048 1 7 13 0 8 16384 0
512 512 2 30 162 0 30 16384 0
rentr 24 0 668 92 0 254 16032 0
mt_zone 24 439 229 439 0 254 16032 0
tcp_log_node 120 0 132 2 0 126 15840 0
MAP 216 2 69 2 0 62 15336 0
vmem 1856 1 7 1 0 8 14848 0
tcp_log_bucket 184 0 66 1 0 62 12144 0
32 32 3 375 55 0 254 12096 0
16 16 11 739 2198 0 254 12000 0
16 16 37 713 7596 0 254 12000 0
16 16 53 697 4402 0 254 12000 0
16 16 193 557 1245 0 254 12000 0
16 16 14 736 50 0 254 12000 0
16 16 250 500 2231 0 254 12000 0
16 16 19 731 23954 0 254 12000 0
Mountpoints 2816 2 2 2 0 4 11264 0
4096 4096 0 2 1 0 2 8192 0
SMR CPU 32 1 254 1 0 254 8160 0
SMR SHARED 24 1 254 1 0 254 6120 0
UMA Slabs 1 176 9 13 9 0 62 3872 0
int pcpu 4 18 494 18 0 254 2048 0
FFS1 dinode 128 0 0 0 0 126 0 0
swblk 136 0 0 0 0 62 0 0
swpctrie 144 0 0 0 0 62 0 0
pf state scrubs 40 0 0 0 0 254 0 0
pf frag entries 40 0 0 0 0 254 0 0
pf frags 256 0 0 0 0 62 0 0
pf table entries 160 0 0 0 0 62 0 0
pf table entry counters 64 0 0 0 0 254 0 0
pf source nodes 136 0 0 0 0 254 0 0
pf state keys 88 0 0 0 0 126 0 0
pf states 296 0 0 0 0 254 0 0
pf tags 104 0 0 0 0 126 0 0
pf mtags 48 0 0 0 0 254 0 0
IPsec SA lft_c 16 0 0 0 0 254 0 0
sctp_asconf_ack 48 0 0 0 0 254 0 0
sctp_asconf 40 0 0 0 0 254 0 0
tcpreass 48 0 0 0 0 254 0 0
tfo_ccache_entries 80 0 0 0 0 126 0 0
tfo 4 0 0 0 0 254 0 0
sackhole 32 0 0 0 0 254 0 0
tcptw 88 0 0 0 0 254 0 0
ipq 56 0 0 0 0 254 0 0
itimer 352 0 0 0 0 30 0 0
AIOLIO 280 0 0 0 0 30 0 0
AIOCB 752 0 0 0 0 16 0 0
AIOP 32 0 0 0 0 254 0 0
AIO 208 0 0 0 0 62 0 0
NCLNODE 592 0 0 0 0 16 0 0
LTS VFS Cache 368 0 0 0 0 30 0 0
STS VFS Cache 148 0 0 0 0 62 0 0
VNODEPOLL 120 0 0 0 0 126 0 0
crypto_session 72 0 0 0 0 126 0 0
cryptop 240 0 0 0 0 62 0 0
nvme_request 128 0 0 0 0 126 0 0
FPU_save_area 832 0 0 0 0 16 0 0
DMAR_MAP_ENTRY 128 0 0 0 0 126 0 0
ktls_session 192 0 0 0 0 62 0 0
mbuf_jumbo_16k 16384 0 0 0 0 254 0 0
mbuf_jumbo_9k 9216 0 0 0 0 254 0 0
audit_record 1280 0 0 0 0 8 0 0
domainset 40 0 0 0 0 254 0 0
MAC labels 40 0 0 0 0 254 0 0
vnpbuf 832 0 0 0 0 62 0 0
mdpbuf 832 0 0 0 0 4 0 0
nfspbuf 832 0 0 0 0 16 0 0
swwbuf 832 0 0 0 0 8 0 0
swrbuf 832 0 0 0 0 16 0 0
umtx_shm 88 0 0 0 0 126 0 0
umtx pi 96 0 0 0 0 126 0 0
rangeset pctrie nodes 144 0 0 0 0 62 0 0
65536 65536 0 0 0 0 1 0 0
65536 65536 0 0 0 0 1 0 0
32768 32768 0 0 0 0 1 0 0
32768 32768 0 0 0 0 1 0 0
32768 32768 0 0 0 0 1 0 0
32768 32768 0 0 0 0 1 0 0
32768 32768 0 0 0 0 1 0 0
16384 16384 0 0 0 0 1 0 0
16384 16384 0 0 0 0 1 0 0
16384 16384 0 0 0 0 1 0 0
8192 8192 0 0 0 0 1 0 0
fakepg 104 0 0 0 0 126 0 0
UMA Hash 256 0 0 0 0 62 0 0


---
This bug is generated by a bot. It may contain errors.
See https://goo.gl/tpsmEJ for more information about syzbot.
syzbot engineers can be reached at syzk...@googlegroups.com.

syzbot will keep track of this bug report. See:
https://goo.gl/tpsmEJ#status for how to communicate with syzbot.

syzbot

unread,
Aug 19, 2020, 5:01:14 PM8/19/20
to syzkaller-f...@googlegroups.com
Auto-closing this bug as obsolete.
Crashes did not happen for a while, no reproducer and no activity.
Reply all
Reply to author
Forward
0 new messages