panic: mutex pcbinfohash not owned at /syzkaller/managers/i386/kernel/sys/netinet6/in6_pcb.c:LINE
0 views
Skip to first unread message
syzbot
Nov 8, 2019, 3:16:10 PM11/8/19
to syzkaller-f...@googlegroups.com
Hello,
syzbot found the following crash on:
HEAD commit: d12922a9 mark LLVM_LIBUNWIND as broken on sparc64, with PR..
git tree: freebsd
console output: https://syzkaller.appspot.com/x/log.txt?x=1697d006e00000
dashboard link: https://syzkaller.appspot.com/bug?extid=fa8cba37135356a8ebc4
userspace arch: i386
Unfortunately, I don't have any reproducer for this crash yet.
IMPORTANT: if you fix the bug, please add the following tag to the commit:
Reported-by: syzbot+fa8cba...@syzkaller.appspotmail.com
panic: mutex pcbinfohash not owned at
/syzkaller/managers/i386/kernel/sys/netinet6/in6_pcb.c:717
cpuid = 0
time = 1573244099
KDB: stack backtrace:
db_trace_self_wrapper() at db_trace_self_wrapper+0x47/frame
0xfffffe002437d250
vpanic() at vpanic+0x1c7/frame 0xfffffe002437d2c0
panic() at panic+0x43/frame 0xfffffe002437d320
__mtx_assert() at __mtx_assert+0x18b/frame 0xfffffe002437d360
in6_pcblookup_local() at in6_pcblookup_local+0x53/frame 0xfffffe002437d3b0
in_pcb_lport() at in_pcb_lport+0x3fd/frame 0xfffffe002437d440
in_pcbbind_setup() at in_pcbbind_setup+0x28b/frame 0xfffffe002437d4e0
in_pcbconnect_setup() at in_pcbconnect_setup+0x4aa/frame 0xfffffe002437d5a0
udp_send() at udp_send+0xee4/frame 0xfffffe002437d6b0
udp6_send() at udp6_send+0x4e8/frame 0xfffffe002437d860
sosend_dgram() at sosend_dgram+0x54f/frame 0xfffffe002437d8d0
sosend() at sosend+0xc6/frame 0xfffffe002437d940
kern_sendit() at kern_sendit+0x32d/frame 0xfffffe002437d9f0
sendit() at sendit+0x226/frame 0xfffffe002437da50
sys_sendto() at sys_sendto+0x5c/frame 0xfffffe002437dab0
ia32_syscall() at ia32_syscall+0x466/frame 0xfffffe002437dbf0
int0x80_syscall_common() at int0x80_syscall_common+0x9c/frame 0x814303e
KDB: enter: panic
[ thread pid 28165 tid 100699 ]
Stopped at kdb_enter+0x67: movq $0,0x14698f6(%rip)
db>
db> set $lines = 0
db> set $maxwidth = 0
db> show registers
cs 0x20
ds 0x3b ll+0x1a
es 0x3b ll+0x1a
fs 0x13
gs 0x1b
ss 0
rax 0x12
rcx 0xfffffe0024800000
rdx 0x3ffff
rbx 0
rsp 0xfffffe002437d230
rbp 0xfffffe002437d250
rsi 0x40001
rdi 0xffffffff810b4a71 vprintf+0xe1
r8 0
r9 0xffffffff
r10 0x7e9c5965
r11 0x2e3c4c02
r12 0xffffffff82068cf0 ddb_dbbe
r13 0
r14 0xffffffff81912bef
r15 0xffffffff81912bef
rip 0xffffffff810a9cf7 kdb_enter+0x67
rflags 0x200086 kernphys+0x86
kdb_enter+0x67: movq $0,0x14698f6(%rip)
db> show proc
Process 28165 (syz-executor.0) at 0xfffff80036c36000:
state: NORMAL
uid: 0 gids: 0, 0, 5
parent: pid 757 at 0xfffff800039ac530
ABI: FreeBSD ELF32
arguments: /root/syz-executor.0
reaper: 0xfffff800031f9530 reapsubtree: 1
sigparent: 20
vmspace: 0xfffff80003cc0000
(map 0xfffff80003cc0000)
(map.pmap 0xfffff80003cc00d0)
(pmap 0xfffff80003cc0130)
threads: 2
100196 RunQ syz-executor.0
100699 Run CPU 0 syz-executor.0
db> ps
pid ppid pgrp uid state wmesg wchan cmd
28165 757 757 0 R (threaded) syz-executor.0
100196 RunQ syz-executor.0
100699 Run CPU 0 syz-executor.0
28164 758 758 0 R (threaded) syz-executor.1
100765 Run CPU 1 syz-executor.1
100693 S sbwait 0xfffff80003d182d4 syz-executor.1
28160 759 759 0 S (threaded) syz-executor.2
100331 S nanslp 0xffffffff824fc1e0 syz-executor.2
100701 S connec 0xfffff80003d710f0 syz-executor.2
100709 S uwait 0xfffff80036ec2a00 syz-executor.2
28159 830 830 0 S (threaded) syz-executor.3
100333 S nanslp 0xffffffff824fc1e1 syz-executor.3
100698 S connec 0xfffff80003d7f800 syz-executor.3
100725 S uwait 0xfffff800032a6e80 syz-executor.3
3512 1 3512 65 Ss select 0xfffff80036200cc0 dhclient
2901 1 2901 0 Ss select 0xfffff8003633a840 dhclient
2898 1 2898 0 Ss select 0xfffff8005f3bb740 dhclient
2875 1 2875 65 Ss select 0xfffff8003633af40 dhclient
2291 1 2291 0 Ss select 0xfffff800039fe0c0 dhclient
2288 1 2288 0 Ss select 0xfffff80003074740 dhclient
2265 1 2265 65 Ss select 0xfffff8005f3811c0 dhclient
1654 1 1654 0 Ss select 0xfffff80003074240 dhclient
1651 1 1651 0 Ss select 0xfffff800039fdf40 dhclient
1630 1 1630 65 Ss select 0xfffff800362000c0 dhclient
1028 1 1028 0 Ss select 0xfffff8003633bc40 dhclient
1024 1 1024 0 Ss select 0xfffff800039fdec0 dhclient
830 754 830 0 Ss nanslp 0xffffffff824fc1e1 syz-executor.3
759 754 759 0 Ss nanslp 0xffffffff824fc1e1 syz-executor.2
758 754 758 0 Ss nanslp 0xffffffff824fc1e0 syz-executor.1
757 754 757 0 Ss nanslp 0xffffffff824fc1e1 syz-executor.0
754 752 752 0 S (threaded) syz-fuzzer
100093 S uwait 0xfffff800032a7a80 syz-fuzzer
100099 S uwait 0xfffff800032aa880 syz-fuzzer
100100 S uwait 0xfffff800032aa980 syz-fuzzer
100101 S uwait 0xfffff800032aaa80 syz-fuzzer
100102 S uwait 0xfffff800032aab80 syz-fuzzer
100103 S uwait 0xfffff800032aac80 syz-fuzzer
100104 S uwait 0xfffff800032a7b80 syz-fuzzer
100105 S kqread 0xfffff800031d8900 syz-fuzzer
100106 S uwait 0xfffff800032aa480 syz-fuzzer
100107 S uwait 0xfffff800032a7c80 syz-fuzzer
100108 S uwait 0xfffff800032aa580 syz-fuzzer
752 750 752 0 Ss pause 0xfffff80003c98b08 csh
750 668 750 0 Ss select 0xfffff8003633ba40 sshd
734 1 734 0 Ss+ ttyin 0xfffff800036e40b0 getty
733 1 733 0 Ss+ ttyin 0xfffff80003a044b0 getty
732 1 732 0 Ss+ ttyin 0xfffff80003a04cb0 getty
731 1 731 0 Ss+ ttyin 0xfffff80003a054b0 getty
730 1 730 0 Ss+ ttyin 0xfffff80003a05cb0 getty
729 1 729 0 Ss+ ttyin 0xfffff80003a064b0 getty
728 1 728 0 Ss+ ttyin 0xfffff80003a06cb0 getty
727 1 727 0 Ss+ ttyin 0xfffff800036facb0 getty
726 1 726 0 Ss+ ttyin 0xfffff800036fb4b0 getty
672 1 672 0 Ss nanslp 0xffffffff824fc1e1 cron
668 1 668 0 Ss select 0xfffff800039feb40 sshd
481 1 481 0 Ss select 0xfffff80003074340 syslogd
410 1 410 0 Ss select 0xfffff800030743c0 devd
409 1 409 65 Ss select 0xfffff80003074640 dhclient
324 1 324 0 Ss select 0xfffff800030746c0 dhclient
321 1 321 0 Ss select 0xfffff800039feec0 dhclient
21 0 0 0 DL syncer 0xffffffff825d26b0 [syncer]
20 0 0 0 DL vlruwt 0xfffff80003429000 [vnlru]
19 0 0 0 DL (threaded) [bufdaemon]
100063 D qsleep 0xffffffff825d1b58 [bufdaemon]
100065 D - 0xffffffff8200a900
[bufspacedaemon-0]
100078 D sdflush 0xfffff800039024e8 [/ worker]
18 0 0 0 DL psleep 0xffffffff825ed008 [vmdaemon]
17 0 0 0 DL (threaded) [pagedaemon]
100061 D psleep 0xffffffff82618d98 [dom0]
100067 D launds 0xffffffff82618da4 [laundry: dom0]
100068 D umarcl 0xffffffff81529b80 [uma]
16 0 0 0 DL - 0xffffffff82357e20 [rand_harvestq]
15 0 0 0 DL waiting 0xffffffff8265e370 [sctp_iterator]
9 0 0 0 DL - 0xffffffff825d155c [soaiod4]
8 0 0 0 DL - 0xffffffff825d155c [soaiod3]
7 0 0 0 DL - 0xffffffff825d155c [soaiod2]
6 0 0 0 DL - 0xffffffff825d155c [soaiod1]
5 0 0 0 DL (threaded) [cam]
100031 D - 0xffffffff822331c0 [doneq0]
100060 D - 0xffffffff82233088 [scanner]
4 0 0 0 DL crypto_ 0xfffff800031dbc90 [crypto
returns 1]
3 0 0 0 DL crypto_ 0xfffff800031dbc30 [crypto
returns 0]
2 0 0 0 DL crypto_ 0xffffffff825e7648 [crypto]
14 0 0 0 DL seqstat 0xfffff80003254888 [sequencer 00]
13 0 0 0 DL (threaded) [geom]
100022 D - 0xffffffff82617390 [g_event]
100023 D - 0xffffffff826173a0 [g_up]
100024 D - 0xffffffff82617398 [g_down]
12 0 0 0 WL (threaded) [intr]
100005 I [swi6: Giant
taskq]
100007 I [swi5: fast
taskq]
100011 I [swi6: task
queue]
100017 I [swi4: clock
(0)]
100018 I [swi4: clock
(1)]
100019 I [swi3: vm]
100020 I [swi1: netisr
0]
100032 I [irq24:
virtio_pci0]
100033 I [irq25:
virtio_pci0]
100034 I [irq26:
virtio_pci0]
100035 I [irq27:
virtio_pci0]
100036 I [irq28:
virtio_pci1]
100037 I [irq29:
virtio_pci1]
100038 I [irq30:
virtio_pci1]
100039 I [irq31:
virtio_pci1]
100040 I [irq32:
virtio_pci1]
100045 I [irq1: atkbd0]
100046 I [irq12: psm0]
100047 I [swi0: uart
uart++]
11 0 0 0 RL (threaded) [idle]
100003 CanRun [idle: cpu0]
100004 CanRun [idle: cpu1]
1 0 1 0 SLs wait 0xfffff800031f9530 [init]
10 0 0 0 DL audit_w 0xffffffff8265f000 [audit]
0 0 0 0 DLs (threaded) [kernel]
100000 D swapin 0xffffffff82606b68 [swapper]
100006 D - 0xfffff8000322ce00 [thread taskq]
100008 D - 0xfffff8000322cc00 [config_0]
100009 D - 0xfffff8000322cb00 [kqueue_ctx
taskq]
100010 D - 0xfffff8000322ca00 [aiod_kick
taskq]
100012 D - 0xfffff8000322c800 [softirq_0]
100013 D - 0xfffff8000322c700 [softirq_1]
100014 D - 0xfffff8000322c600 [if_io_tqg_0]
100015 D - 0xfffff8000322c500 [if_io_tqg_1]
100016 D - 0xfffff8000322c400
[if_config_tqg_0]
100021 D - 0xfffff8000322c300 [firmware
taskq]
100026 D - 0xfffff8000322c200 [crypto_0]
100027 D - 0xfffff8000322c200 [crypto_1]
100041 D - 0xfffff8000322bd00 [vtnet0 rxq 0]
100042 D - 0xfffff8000322bc00 [vtnet0 txq 0]
100043 D - 0xfffff8000322bb00 [vtnet0 rxq 1]
100044 D - 0xfffff8000322ba00 [vtnet0 txq 1]
100048 D - 0xfffff8000322b900 [mca taskq]
100052 D - 0xffffffff824faf61 [deadlkres]
100055 D - 0xfffff800039d9100 [acpi_task_0]
100056 D - 0xfffff800039d9100 [acpi_task_1]
100057 D - 0xfffff800039d9100 [acpi_task_2]
100059 D - 0xfffff8000322c100 [CAM taskq]
db> show all locks
Process 28165 (syz-executor.0) thread 0xfffff8005f8cf6e0 (100699)
exclusive rw udpinp (udpinp) r = 0 (0xfffff80003da1b90) locked @
/syzkaller/managers/i386/kernel/sys/netinet/udp_usrreq.c:1125
Process 28164 (syz-executor.1) thread 0xfffff80036f26000 (100693)
exclusive sx so_snd_sx (so_snd_sx) r = 0 (0xfffff80003d18278) locked @
/syzkaller/managers/i386/kernel/sys/kern/uipc_sockbuf.c:393
db> show malloc
Type InUse MemUse Requests
devbuf 4200 4764K 4227
vtbuf 24 1968K 46
callout 3 1672K 3
kobj 332 1328K 488
newblk 38 1034K 201461
vfscache 4 1025K 4
pcb 54 566K 9484
inodedep 12 518K 43100
ufs_quota 1 512K 1
vfs_hash 1 512K 1
intr 4 388K 4
subproc 143 285K 28248
acpica 1674 185K 47809
vnet_data 1 168K 1
filedesc 21 149K 54193
pagedep 9 130K 27152
tfo_ccache 1 128K 1
sysctloid 2038 107K 2098
sem 18446744073709551615 106K 4
DEVFS1 105 105K 122
BPF 46 88K 46
bus 948 77K 2929
linker 205 76K 231
UMAHash 3 73K 6
mtx_pool 2 72K 2
syncache 1 68K 1
acpitask 1 64K 1
ddb_capture 1 64K 1
module 493 62K 494
umtx 340 43K 340
kdtrace 186 36K 114788
gtaskqueue 22 34K 22
hostcache 1 32K 1
shm 1 32K 76
DEVFS3 124 31K 142
msg 4 30K 4
DEVFS_RULE 56 27K 56
ifaddr 76 26K 76
kbdmux 6 22K 6
vmem 3 20K 5
temp 39 18K 3912
ufs_mount 3 17K 4
lltable 45 17K 257
proc 3 17K 3
tty 16 16K 16
tidhash 1 16K 1
ithread 87 15K 87
ether_multi 174 14K 179
sctp_atcl 26 13K 4816
sctp_stro 13 13K 1193
bus-sc 26 13K 1128
KTRACE 100 13K 100
ifnet 7 13K 7
kenv 95 12K 99
cred 44 11K 527
in6_multi 89 11K 89
eventhandler 122 11K 122
pfs_nodes 20 10K 20
select 78 10K 78
GEOM 60 10K 487
rman 77 9K 418
bmsafemap 2 9K 38934
devstat 4 9K 4
UART 12 9K 12
rpc 2 8K 2
sctp_timw 32 8K 32
shmfd 1 8K 1
pfs_vncache 1 8K 1
audit_evclass 230 8K 288
routetbl 58 7K 62
kqueue 63 7K 28172
plimit 24 6K 639
CAM DEV 3 6K 508
vt 11 6K 11
sglist 5 6K 5
CAM queue 5 6K 1522
DEVFSP 78 5K 82
ufs_dirhash 24 5K 24
taskqueue 42 5K 42
session 35 5K 63
pgrp 35 5K 63
memdesc 1 4K 1
MCA 32 4K 32
evdev 4 4K 4
kcovinfo 64 4K 68
freework 16 4K 98740
lockf 32 4K 2507
hhook 13 4K 13
proc-args 52 3K 784
terminal 11 3K 11
uidinfo 6 3K 68
acpisem 20 3K 20
sctp_ifa 17 3K 17
local_apic 1 2K 1
io_apic 1 2K 1
ipsec-saq 2 2K 2
ip6ndp 12 2K 21
in_multi 7 2K 8
sctp_atky 39 2K 6002
Unitno 29 2K 114799
CAM XPT 22 2K 542
acpidev 20 2K 20
crypto 2 2K 2
msi 9 2K 9
tun 7 2K 7
ipsecpolicy 1 1K 1
sahead 1 1K 1
secasvar 1 1K 1
clone 8 1K 8
cdev 4 1K 4
NFSD session 1 1K 1
CAM periph 4 1K 270
mkdir 6 1K 54254
freeblks 3 1K 37402
mld 6 1K 6
sctp_ifn 6 1K 6
igmp 6 1K 6
toponodes 6 1K 6
isadev 6 1K 6
mount 16 1K 86
pci_link 10 1K 10
freefile 5 1K 33934
CAM SIM 2 1K 2
softdep 1 1K 1
dirrem 4 1K 33956
diradd 4 1K 34001
chacha20random 1 1K 1
epoch 4 1K 4
inpcbpolicy 14 1K 6427
encap_export_host 8 1K 8
sctp_athm 26 1K 4816
sctp_map 26 1K 2372
pfil 3 1K 3
osd 3 1K 9
newdirblk 4 1K 27127
indirdep 1 1K 107191
vnodes 1 1K 523
NFSD lckfile 1 1K 1
NFSD V4client 1 1K 1
DEVFS 9 1K 18
feeder 7 1K 7
soname 8 1K 8794
ip_msource 3 1K 54
loginclass 3 1K 3
apmdev 1 1K 1
atkbddev 2 1K 2
pmchooks 1 1K 1
prison 4 1K 4
CAM dev queue 2 1K 2
CAM I/O Scheduler 1 1K 1
CAM path 4 1K 1030
nexusdev 5 1K 5
filecaps 5 1K 129
ip6_msource 1 1K 1
tcpfunc 1 1K 1
sctp_vrf 1 1K 1
vnet 1 1K 1
acpiintr 1 1K 1
pmc 1 1K 1
cpus 2 1K 2
vnet_data_free 1 1K 1
Per-cpu 1 1K 1
entropy 1 1K 50
p1003.1b 1 1K 1
ppbusdev 0 0K 0
agtiapi_MemAlloc malloc 0 0K 0
osti_cacheable 0 0K 0
madt_table 0 0K 2
tempbuff 0 0K 0
tempbuff 0 0K 0
smartpqi 0 0K 0
ag_tgt_map_t malloc 0 0K 0
ag_slr_map_t malloc 0 0K 0
lDevFlags * malloc 0 0K 0
tiDeviceHandle_t * malloc 0 0K 0
ag_portal_data_t malloc 0 0K 0
ag_device_t malloc 0 0K 0
STLock malloc 0 0K 0
CCB List 0 0K 0
iavf 0 0K 0
ixl 0 0K 0
sr_iov 0 0K 0
OCS 0 0K 0
OCS 0 0K 0
nvme 0 0K 0
nvd 0 0K 0
netmap 0 0K 0
mwldev 0 0K 0
MVS driver 0 0K 0
fpukern_ctx 0 0K 0
xen_intr 0 0K 0
CAM ccb queue 0 0K 0
xen_hvm 0 0K 0
legacydrv 0 0K 0
qpidrv 0 0K 0
mrsasbuf 0 0K 0
mpt_user 0 0K 0
dmar_idpgtbl 0 0K 0
dmar_dom 0 0K 0
dmar_ctx 0 0K 0
dmar_dmamap 0 0K 0
mps_user 0 0K 0
MPSSAS 0 0K 0
isci 0 0K 0
bxe_ilt 0 0K 0
xenbus 0 0K 0
vm_fictitious 0 0K 0
mps 0 0K 0
mpr_user 0 0K 0
MPRSAS 0 0K 0
vm_pgdata 0 0K 0
jblocks 0 0K 0
savedino 0 0K 36863
sentinel 0 0K 0
jfsync 0 0K 0
jtrunc 0 0K 0
sbdep 0 0K 99
jsegdep 0 0K 0
jseg 0 0K 0
jfreefrag 0 0K 0
jfreeblk 0 0K 0
jnewblk 0 0K 0
jmvref 0 0K 0
jremref 0 0K 0
jaddref 0 0K 0
freedep 0 0K 0
freefrag 0 0K 29
allocindir 0 0K 0
allocdirect 0 0K 0
ufs_trim 0 0K 0
mactemp 0 0K 0
audit_trigger 0 0K 0
audit_pipe_presel 0 0K 0
audit_pipeent 0 0K 0
audit_pipe 0 0K 0
audit_evname 0 0K 0
audit_bsm 0 0K 0
audit_gidset 0 0K 0
audit_text 0 0K 0
audit_path 0 0K 0
audit_data 0 0K 0
audit_cred 0 0K 0
xform 0 0K 0
NLM 0 0K 0
nfsclient_nlminfo 0 0K 0
nfsclient_lock 0 0K 0
NFS FHA 0 0K 0
ipsec-spdcache 0 0K 0
ipsec-reg 0 0K 0
ipsec-misc 0 0K 0
ipsecrequest 0 0K 0
ip6opt 0 0K 40
ip6_moptions 0 0K 22
in6_mfilter 0 0K 34
frag6 0 0K 3
tcplog 0 0K 0
LRO 0 0K 0
sctp_mcore 0 0K 0
sctp_socko 0 0K 602
sctp_iter 0 0K 9
sctp_mvrf 0 0K 0
sctp_cpal 0 0K 0
sctp_cmsg 0 0K 0
sctp_stre 0 0K 0
sctp_athi 0 0K 0
sctp_a_it 0 0K 9
sctp_aadr 0 0K 0
sctp_stri 0 0K 0
newreno data 0 0K 0
ip_moptions 0 0K 37
in_mfilter 0 0K 110
ipid 0 0K 0
80211scan 0 0K 0
80211ratectl 0 0K 0
80211power 0 0K 0
80211nodeie 0 0K 0
80211node 0 0K 0
80211mesh_gt 0 0K 0
80211mesh_rt 0 0K 0
80211perr 0 0K 0
80211prep 0 0K 0
80211preq 0 0K 0
80211dfs 0 0K 0
80211crypto 0 0K 0
80211vap 0 0K 0
iflib 0 0K 0
vlan 0 0K 0
gif 0 0K 0
ifdescr 0 0K 0
zlib 0 0K 0
fadvise 0 0K 0
vnodemarker 0 0K 198
mpr 0 0K 0
statfs 0 0K 27361
export_host 0 0K 0
cl_savebuf 0 0K 6
biobuf 0 0K 0
aios 0 0K 0
lio 0 0K 0
acl 0 0K 0
mfibuf 0 0K 0
mbuf_tag 0 0K 376
accf 0 0K 0
pts 0 0K 0
iov 0 0K 35039
ioctlops 0 0K 161
Witness 0 0K 0
stack 0 0K 0
md_sectors 0 0K 0
sbuf 0 0K 364
md_disk 0 0K 0
compressor 0 0K 0
malodev 0 0K 0
SWAP 0 0K 0
LED 0 0K 0
sysctltmp 0 0K 1032
sysctl 0 0K 1
ekcd 0 0K 0
dumper 0 0K 0
rctl 0 0K 0
ix_sriov 0 0K 0
aacraidcam 0 0K 0
ix 0 0K 0
ipsbuf 0 0K 0
iirbuf 0 0K 0
cache 0 0K 0
aacraid_buf 0 0K 0
prison_racct 0 0K 0
Fail Points 0 0K 0
sigio 0 0K 11
filedesc_to_leader 0 0K 0
tty console 0 0K 0
aaccam 0 0K 0
aacbuf 0 0K 0
zstd 0 0K 0
nvlist 0 0K 0
SCSI ENC 0 0K 0
SCSI sa 0 0K 0
isofs_node 0 0K 0
isofs_mount 0 0K 0
tr_raid5_data 0 0K 0
tr_raid1e_data 0 0K 0
tr_raid1_data 0 0K 0
tr_raid0_data 0 0K 0
tr_concat_data 0 0K 0
md_sii_data 0 0K 0
md_promise_data 0 0K 0
md_nvidia_data 0 0K 0
md_jmicron_data 0 0K 0
md_intel_data 0 0K 0
md_ddf_data 0 0K 0
raid_data 0 0K 72
geom_flashmap 0 0K 0
newnfsmnt 0 0K 0
newnfsclient_req 0 0K 0
NFSCL layrecall 0 0K 0
NFSCL session 0 0K 0
NFSCL sockreq 0 0K 0
NFSCL devinfo 0 0K 0
NFSCL flayout 0 0K 0
NFSCL layout 0 0K 0
NFSD rollback 0 0K 0
NFSCL diroffdiroff 0 0K 0
NEWdirectio 0 0K 0
NEWNFSnode 0 0K 0
NFSCL lck 0 0K 0
NFSCL lckown 0 0K 0
NFSCL client 0 0K 0
NFSCL deleg 0 0K 0
NFSCL open 0 0K 0
NFSCL owner 0 0K 0
NFS fh 0 0K 0
NFS req 0 0K 0
NFSD usrgroup 0 0K 0
NFSD string 0 0K 0
NFSD V4lock 0 0K 0
NFSD V4state 0 0K 0
NFSD srvcache 0 0K 0
msdosfs_fat 0 0K 0
msdosfs_mount 0 0K 0
msdosfs_node 0 0K 0
DEVFS4 0 0K 0
DEVFS2 0 0K 0
gntdev 0 0K 0
privcmd_dev 0 0K 0
evtchn_dev 0 0K 0
xenstore 0 0K 0
scsi_pass 0 0K 0
ciss_data 0 0K 0
xnb 0 0K 0
xbbd 0 0K 0
xbd 0 0K 0
Balloon 0 0K 0
sysmouse 0 0K 0
vtfont 0 0K 0
ath_hal 0 0K 0
athdev 0 0K 0
ata_pci 0 0K 0
ata_dma 0 0K 0
ata_generic 0 0K 0
amr 0 0K 0
scsi_da 0 0K 69
ata_da 0 0K 0
scsi_ch 0 0K 0
scsi_cd 0 0K 0
USBdev 0 0K 0
USB 0 0K 0
AHCI driver 0 0K 0
agp 0 0K 0
nvme_da 0 0K 0
acpipwr 0 0K 0
twsbuf 0 0K 0
twe_commands 0 0K 0
twa_commands 0 0K 0
tcp_log_dev 0 0K 0
midi buffers 0 0K 0
mixer 0 0K 0
ac97 0 0K 0
hdacc 0 0K 0
hdac 0 0K 0
hdaa 0 0K 0
acpi_perf 0 0K 0
acpicmbat 0 0K 0
SIIS driver 0 0K 0
CAM CCB 0 0K 402014
PUC 0 0K 0
db> show ktr
No such command; use "help" to list available commands
---
This bug is generated by a bot. It may contain errors.
See https://goo.gl/tpsmEJ for more information about syzbot.
syzbot engineers can be reached at syzk...@googlegroups.com.
syzbot will keep track of this bug report. See:
https://goo.gl/tpsmEJ#status for how to communicate with syzbot.
syzbot found the following crash on:
HEAD commit: d12922a9 mark LLVM_LIBUNWIND as broken on sparc64, with PR..
git tree: freebsd
console output: https://syzkaller.appspot.com/x/log.txt?x=1697d006e00000
dashboard link: https://syzkaller.appspot.com/bug?extid=fa8cba37135356a8ebc4
userspace arch: i386
Unfortunately, I don't have any reproducer for this crash yet.
IMPORTANT: if you fix the bug, please add the following tag to the commit:
Reported-by: syzbot+fa8cba...@syzkaller.appspotmail.com
panic: mutex pcbinfohash not owned at
/syzkaller/managers/i386/kernel/sys/netinet6/in6_pcb.c:717
cpuid = 0
time = 1573244099
KDB: stack backtrace:
db_trace_self_wrapper() at db_trace_self_wrapper+0x47/frame
0xfffffe002437d250
vpanic() at vpanic+0x1c7/frame 0xfffffe002437d2c0
panic() at panic+0x43/frame 0xfffffe002437d320
__mtx_assert() at __mtx_assert+0x18b/frame 0xfffffe002437d360
in6_pcblookup_local() at in6_pcblookup_local+0x53/frame 0xfffffe002437d3b0
in_pcb_lport() at in_pcb_lport+0x3fd/frame 0xfffffe002437d440
in_pcbbind_setup() at in_pcbbind_setup+0x28b/frame 0xfffffe002437d4e0
in_pcbconnect_setup() at in_pcbconnect_setup+0x4aa/frame 0xfffffe002437d5a0
udp_send() at udp_send+0xee4/frame 0xfffffe002437d6b0
udp6_send() at udp6_send+0x4e8/frame 0xfffffe002437d860
sosend_dgram() at sosend_dgram+0x54f/frame 0xfffffe002437d8d0
sosend() at sosend+0xc6/frame 0xfffffe002437d940
kern_sendit() at kern_sendit+0x32d/frame 0xfffffe002437d9f0
sendit() at sendit+0x226/frame 0xfffffe002437da50
sys_sendto() at sys_sendto+0x5c/frame 0xfffffe002437dab0
ia32_syscall() at ia32_syscall+0x466/frame 0xfffffe002437dbf0
int0x80_syscall_common() at int0x80_syscall_common+0x9c/frame 0x814303e
KDB: enter: panic
[ thread pid 28165 tid 100699 ]
Stopped at kdb_enter+0x67: movq $0,0x14698f6(%rip)
db>
db> set $lines = 0
db> set $maxwidth = 0
db> show registers
cs 0x20
ds 0x3b ll+0x1a
es 0x3b ll+0x1a
fs 0x13
gs 0x1b
ss 0
rax 0x12
rcx 0xfffffe0024800000
rdx 0x3ffff
rbx 0
rsp 0xfffffe002437d230
rbp 0xfffffe002437d250
rsi 0x40001
rdi 0xffffffff810b4a71 vprintf+0xe1
r8 0
r9 0xffffffff
r10 0x7e9c5965
r11 0x2e3c4c02
r12 0xffffffff82068cf0 ddb_dbbe
r13 0
r14 0xffffffff81912bef
r15 0xffffffff81912bef
rip 0xffffffff810a9cf7 kdb_enter+0x67
rflags 0x200086 kernphys+0x86
kdb_enter+0x67: movq $0,0x14698f6(%rip)
db> show proc
Process 28165 (syz-executor.0) at 0xfffff80036c36000:
state: NORMAL
uid: 0 gids: 0, 0, 5
parent: pid 757 at 0xfffff800039ac530
ABI: FreeBSD ELF32
arguments: /root/syz-executor.0
reaper: 0xfffff800031f9530 reapsubtree: 1
sigparent: 20
vmspace: 0xfffff80003cc0000
(map 0xfffff80003cc0000)
(map.pmap 0xfffff80003cc00d0)
(pmap 0xfffff80003cc0130)
threads: 2
100196 RunQ syz-executor.0
100699 Run CPU 0 syz-executor.0
db> ps
pid ppid pgrp uid state wmesg wchan cmd
28165 757 757 0 R (threaded) syz-executor.0
100196 RunQ syz-executor.0
100699 Run CPU 0 syz-executor.0
28164 758 758 0 R (threaded) syz-executor.1
100765 Run CPU 1 syz-executor.1
100693 S sbwait 0xfffff80003d182d4 syz-executor.1
28160 759 759 0 S (threaded) syz-executor.2
100331 S nanslp 0xffffffff824fc1e0 syz-executor.2
100701 S connec 0xfffff80003d710f0 syz-executor.2
100709 S uwait 0xfffff80036ec2a00 syz-executor.2
28159 830 830 0 S (threaded) syz-executor.3
100333 S nanslp 0xffffffff824fc1e1 syz-executor.3
100698 S connec 0xfffff80003d7f800 syz-executor.3
100725 S uwait 0xfffff800032a6e80 syz-executor.3
3512 1 3512 65 Ss select 0xfffff80036200cc0 dhclient
2901 1 2901 0 Ss select 0xfffff8003633a840 dhclient
2898 1 2898 0 Ss select 0xfffff8005f3bb740 dhclient
2875 1 2875 65 Ss select 0xfffff8003633af40 dhclient
2291 1 2291 0 Ss select 0xfffff800039fe0c0 dhclient
2288 1 2288 0 Ss select 0xfffff80003074740 dhclient
2265 1 2265 65 Ss select 0xfffff8005f3811c0 dhclient
1654 1 1654 0 Ss select 0xfffff80003074240 dhclient
1651 1 1651 0 Ss select 0xfffff800039fdf40 dhclient
1630 1 1630 65 Ss select 0xfffff800362000c0 dhclient
1028 1 1028 0 Ss select 0xfffff8003633bc40 dhclient
1024 1 1024 0 Ss select 0xfffff800039fdec0 dhclient
830 754 830 0 Ss nanslp 0xffffffff824fc1e1 syz-executor.3
759 754 759 0 Ss nanslp 0xffffffff824fc1e1 syz-executor.2
758 754 758 0 Ss nanslp 0xffffffff824fc1e0 syz-executor.1
757 754 757 0 Ss nanslp 0xffffffff824fc1e1 syz-executor.0
754 752 752 0 S (threaded) syz-fuzzer
100093 S uwait 0xfffff800032a7a80 syz-fuzzer
100099 S uwait 0xfffff800032aa880 syz-fuzzer
100100 S uwait 0xfffff800032aa980 syz-fuzzer
100101 S uwait 0xfffff800032aaa80 syz-fuzzer
100102 S uwait 0xfffff800032aab80 syz-fuzzer
100103 S uwait 0xfffff800032aac80 syz-fuzzer
100104 S uwait 0xfffff800032a7b80 syz-fuzzer
100105 S kqread 0xfffff800031d8900 syz-fuzzer
100106 S uwait 0xfffff800032aa480 syz-fuzzer
100107 S uwait 0xfffff800032a7c80 syz-fuzzer
100108 S uwait 0xfffff800032aa580 syz-fuzzer
752 750 752 0 Ss pause 0xfffff80003c98b08 csh
750 668 750 0 Ss select 0xfffff8003633ba40 sshd
734 1 734 0 Ss+ ttyin 0xfffff800036e40b0 getty
733 1 733 0 Ss+ ttyin 0xfffff80003a044b0 getty
732 1 732 0 Ss+ ttyin 0xfffff80003a04cb0 getty
731 1 731 0 Ss+ ttyin 0xfffff80003a054b0 getty
730 1 730 0 Ss+ ttyin 0xfffff80003a05cb0 getty
729 1 729 0 Ss+ ttyin 0xfffff80003a064b0 getty
728 1 728 0 Ss+ ttyin 0xfffff80003a06cb0 getty
727 1 727 0 Ss+ ttyin 0xfffff800036facb0 getty
726 1 726 0 Ss+ ttyin 0xfffff800036fb4b0 getty
672 1 672 0 Ss nanslp 0xffffffff824fc1e1 cron
668 1 668 0 Ss select 0xfffff800039feb40 sshd
481 1 481 0 Ss select 0xfffff80003074340 syslogd
410 1 410 0 Ss select 0xfffff800030743c0 devd
409 1 409 65 Ss select 0xfffff80003074640 dhclient
324 1 324 0 Ss select 0xfffff800030746c0 dhclient
321 1 321 0 Ss select 0xfffff800039feec0 dhclient
21 0 0 0 DL syncer 0xffffffff825d26b0 [syncer]
20 0 0 0 DL vlruwt 0xfffff80003429000 [vnlru]
19 0 0 0 DL (threaded) [bufdaemon]
100063 D qsleep 0xffffffff825d1b58 [bufdaemon]
100065 D - 0xffffffff8200a900
[bufspacedaemon-0]
100078 D sdflush 0xfffff800039024e8 [/ worker]
18 0 0 0 DL psleep 0xffffffff825ed008 [vmdaemon]
17 0 0 0 DL (threaded) [pagedaemon]
100061 D psleep 0xffffffff82618d98 [dom0]
100067 D launds 0xffffffff82618da4 [laundry: dom0]
100068 D umarcl 0xffffffff81529b80 [uma]
16 0 0 0 DL - 0xffffffff82357e20 [rand_harvestq]
15 0 0 0 DL waiting 0xffffffff8265e370 [sctp_iterator]
9 0 0 0 DL - 0xffffffff825d155c [soaiod4]
8 0 0 0 DL - 0xffffffff825d155c [soaiod3]
7 0 0 0 DL - 0xffffffff825d155c [soaiod2]
6 0 0 0 DL - 0xffffffff825d155c [soaiod1]
5 0 0 0 DL (threaded) [cam]
100031 D - 0xffffffff822331c0 [doneq0]
100060 D - 0xffffffff82233088 [scanner]
4 0 0 0 DL crypto_ 0xfffff800031dbc90 [crypto
returns 1]
3 0 0 0 DL crypto_ 0xfffff800031dbc30 [crypto
returns 0]
2 0 0 0 DL crypto_ 0xffffffff825e7648 [crypto]
14 0 0 0 DL seqstat 0xfffff80003254888 [sequencer 00]
13 0 0 0 DL (threaded) [geom]
100022 D - 0xffffffff82617390 [g_event]
100023 D - 0xffffffff826173a0 [g_up]
100024 D - 0xffffffff82617398 [g_down]
12 0 0 0 WL (threaded) [intr]
100005 I [swi6: Giant
taskq]
100007 I [swi5: fast
taskq]
100011 I [swi6: task
queue]
100017 I [swi4: clock
(0)]
100018 I [swi4: clock
(1)]
100019 I [swi3: vm]
100020 I [swi1: netisr
0]
100032 I [irq24:
virtio_pci0]
100033 I [irq25:
virtio_pci0]
100034 I [irq26:
virtio_pci0]
100035 I [irq27:
virtio_pci0]
100036 I [irq28:
virtio_pci1]
100037 I [irq29:
virtio_pci1]
100038 I [irq30:
virtio_pci1]
100039 I [irq31:
virtio_pci1]
100040 I [irq32:
virtio_pci1]
100045 I [irq1: atkbd0]
100046 I [irq12: psm0]
100047 I [swi0: uart
uart++]
11 0 0 0 RL (threaded) [idle]
100003 CanRun [idle: cpu0]
100004 CanRun [idle: cpu1]
1 0 1 0 SLs wait 0xfffff800031f9530 [init]
10 0 0 0 DL audit_w 0xffffffff8265f000 [audit]
0 0 0 0 DLs (threaded) [kernel]
100000 D swapin 0xffffffff82606b68 [swapper]
100006 D - 0xfffff8000322ce00 [thread taskq]
100008 D - 0xfffff8000322cc00 [config_0]
100009 D - 0xfffff8000322cb00 [kqueue_ctx
taskq]
100010 D - 0xfffff8000322ca00 [aiod_kick
taskq]
100012 D - 0xfffff8000322c800 [softirq_0]
100013 D - 0xfffff8000322c700 [softirq_1]
100014 D - 0xfffff8000322c600 [if_io_tqg_0]
100015 D - 0xfffff8000322c500 [if_io_tqg_1]
100016 D - 0xfffff8000322c400
[if_config_tqg_0]
100021 D - 0xfffff8000322c300 [firmware
taskq]
100026 D - 0xfffff8000322c200 [crypto_0]
100027 D - 0xfffff8000322c200 [crypto_1]
100041 D - 0xfffff8000322bd00 [vtnet0 rxq 0]
100042 D - 0xfffff8000322bc00 [vtnet0 txq 0]
100043 D - 0xfffff8000322bb00 [vtnet0 rxq 1]
100044 D - 0xfffff8000322ba00 [vtnet0 txq 1]
100048 D - 0xfffff8000322b900 [mca taskq]
100052 D - 0xffffffff824faf61 [deadlkres]
100055 D - 0xfffff800039d9100 [acpi_task_0]
100056 D - 0xfffff800039d9100 [acpi_task_1]
100057 D - 0xfffff800039d9100 [acpi_task_2]
100059 D - 0xfffff8000322c100 [CAM taskq]
db> show all locks
Process 28165 (syz-executor.0) thread 0xfffff8005f8cf6e0 (100699)
exclusive rw udpinp (udpinp) r = 0 (0xfffff80003da1b90) locked @
/syzkaller/managers/i386/kernel/sys/netinet/udp_usrreq.c:1125
Process 28164 (syz-executor.1) thread 0xfffff80036f26000 (100693)
exclusive sx so_snd_sx (so_snd_sx) r = 0 (0xfffff80003d18278) locked @
/syzkaller/managers/i386/kernel/sys/kern/uipc_sockbuf.c:393
db> show malloc
Type InUse MemUse Requests
devbuf 4200 4764K 4227
vtbuf 24 1968K 46
callout 3 1672K 3
kobj 332 1328K 488
newblk 38 1034K 201461
vfscache 4 1025K 4
pcb 54 566K 9484
inodedep 12 518K 43100
ufs_quota 1 512K 1
vfs_hash 1 512K 1
intr 4 388K 4
subproc 143 285K 28248
acpica 1674 185K 47809
vnet_data 1 168K 1
filedesc 21 149K 54193
pagedep 9 130K 27152
tfo_ccache 1 128K 1
sysctloid 2038 107K 2098
sem 18446744073709551615 106K 4
DEVFS1 105 105K 122
BPF 46 88K 46
bus 948 77K 2929
linker 205 76K 231
UMAHash 3 73K 6
mtx_pool 2 72K 2
syncache 1 68K 1
acpitask 1 64K 1
ddb_capture 1 64K 1
module 493 62K 494
umtx 340 43K 340
kdtrace 186 36K 114788
gtaskqueue 22 34K 22
hostcache 1 32K 1
shm 1 32K 76
DEVFS3 124 31K 142
msg 4 30K 4
DEVFS_RULE 56 27K 56
ifaddr 76 26K 76
kbdmux 6 22K 6
vmem 3 20K 5
temp 39 18K 3912
ufs_mount 3 17K 4
lltable 45 17K 257
proc 3 17K 3
tty 16 16K 16
tidhash 1 16K 1
ithread 87 15K 87
ether_multi 174 14K 179
sctp_atcl 26 13K 4816
sctp_stro 13 13K 1193
bus-sc 26 13K 1128
KTRACE 100 13K 100
ifnet 7 13K 7
kenv 95 12K 99
cred 44 11K 527
in6_multi 89 11K 89
eventhandler 122 11K 122
pfs_nodes 20 10K 20
select 78 10K 78
GEOM 60 10K 487
rman 77 9K 418
bmsafemap 2 9K 38934
devstat 4 9K 4
UART 12 9K 12
rpc 2 8K 2
sctp_timw 32 8K 32
shmfd 1 8K 1
pfs_vncache 1 8K 1
audit_evclass 230 8K 288
routetbl 58 7K 62
kqueue 63 7K 28172
plimit 24 6K 639
CAM DEV 3 6K 508
vt 11 6K 11
sglist 5 6K 5
CAM queue 5 6K 1522
DEVFSP 78 5K 82
ufs_dirhash 24 5K 24
taskqueue 42 5K 42
session 35 5K 63
pgrp 35 5K 63
memdesc 1 4K 1
MCA 32 4K 32
evdev 4 4K 4
kcovinfo 64 4K 68
freework 16 4K 98740
lockf 32 4K 2507
hhook 13 4K 13
proc-args 52 3K 784
terminal 11 3K 11
uidinfo 6 3K 68
acpisem 20 3K 20
sctp_ifa 17 3K 17
local_apic 1 2K 1
io_apic 1 2K 1
ipsec-saq 2 2K 2
ip6ndp 12 2K 21
in_multi 7 2K 8
sctp_atky 39 2K 6002
Unitno 29 2K 114799
CAM XPT 22 2K 542
acpidev 20 2K 20
crypto 2 2K 2
msi 9 2K 9
tun 7 2K 7
ipsecpolicy 1 1K 1
sahead 1 1K 1
secasvar 1 1K 1
clone 8 1K 8
cdev 4 1K 4
NFSD session 1 1K 1
CAM periph 4 1K 270
mkdir 6 1K 54254
freeblks 3 1K 37402
mld 6 1K 6
sctp_ifn 6 1K 6
igmp 6 1K 6
toponodes 6 1K 6
isadev 6 1K 6
mount 16 1K 86
pci_link 10 1K 10
freefile 5 1K 33934
CAM SIM 2 1K 2
softdep 1 1K 1
dirrem 4 1K 33956
diradd 4 1K 34001
chacha20random 1 1K 1
epoch 4 1K 4
inpcbpolicy 14 1K 6427
encap_export_host 8 1K 8
sctp_athm 26 1K 4816
sctp_map 26 1K 2372
pfil 3 1K 3
osd 3 1K 9
newdirblk 4 1K 27127
indirdep 1 1K 107191
vnodes 1 1K 523
NFSD lckfile 1 1K 1
NFSD V4client 1 1K 1
DEVFS 9 1K 18
feeder 7 1K 7
soname 8 1K 8794
ip_msource 3 1K 54
loginclass 3 1K 3
apmdev 1 1K 1
atkbddev 2 1K 2
pmchooks 1 1K 1
prison 4 1K 4
CAM dev queue 2 1K 2
CAM I/O Scheduler 1 1K 1
CAM path 4 1K 1030
nexusdev 5 1K 5
filecaps 5 1K 129
ip6_msource 1 1K 1
tcpfunc 1 1K 1
sctp_vrf 1 1K 1
vnet 1 1K 1
acpiintr 1 1K 1
pmc 1 1K 1
cpus 2 1K 2
vnet_data_free 1 1K 1
Per-cpu 1 1K 1
entropy 1 1K 50
p1003.1b 1 1K 1
ppbusdev 0 0K 0
agtiapi_MemAlloc malloc 0 0K 0
osti_cacheable 0 0K 0
madt_table 0 0K 2
tempbuff 0 0K 0
tempbuff 0 0K 0
smartpqi 0 0K 0
ag_tgt_map_t malloc 0 0K 0
ag_slr_map_t malloc 0 0K 0
lDevFlags * malloc 0 0K 0
tiDeviceHandle_t * malloc 0 0K 0
ag_portal_data_t malloc 0 0K 0
ag_device_t malloc 0 0K 0
STLock malloc 0 0K 0
CCB List 0 0K 0
iavf 0 0K 0
ixl 0 0K 0
sr_iov 0 0K 0
OCS 0 0K 0
OCS 0 0K 0
nvme 0 0K 0
nvd 0 0K 0
netmap 0 0K 0
mwldev 0 0K 0
MVS driver 0 0K 0
fpukern_ctx 0 0K 0
xen_intr 0 0K 0
CAM ccb queue 0 0K 0
xen_hvm 0 0K 0
legacydrv 0 0K 0
qpidrv 0 0K 0
mrsasbuf 0 0K 0
mpt_user 0 0K 0
dmar_idpgtbl 0 0K 0
dmar_dom 0 0K 0
dmar_ctx 0 0K 0
dmar_dmamap 0 0K 0
mps_user 0 0K 0
MPSSAS 0 0K 0
isci 0 0K 0
bxe_ilt 0 0K 0
xenbus 0 0K 0
vm_fictitious 0 0K 0
mps 0 0K 0
mpr_user 0 0K 0
MPRSAS 0 0K 0
vm_pgdata 0 0K 0
jblocks 0 0K 0
savedino 0 0K 36863
sentinel 0 0K 0
jfsync 0 0K 0
jtrunc 0 0K 0
sbdep 0 0K 99
jsegdep 0 0K 0
jseg 0 0K 0
jfreefrag 0 0K 0
jfreeblk 0 0K 0
jnewblk 0 0K 0
jmvref 0 0K 0
jremref 0 0K 0
jaddref 0 0K 0
freedep 0 0K 0
freefrag 0 0K 29
allocindir 0 0K 0
allocdirect 0 0K 0
ufs_trim 0 0K 0
mactemp 0 0K 0
audit_trigger 0 0K 0
audit_pipe_presel 0 0K 0
audit_pipeent 0 0K 0
audit_pipe 0 0K 0
audit_evname 0 0K 0
audit_bsm 0 0K 0
audit_gidset 0 0K 0
audit_text 0 0K 0
audit_path 0 0K 0
audit_data 0 0K 0
audit_cred 0 0K 0
xform 0 0K 0
NLM 0 0K 0
nfsclient_nlminfo 0 0K 0
nfsclient_lock 0 0K 0
NFS FHA 0 0K 0
ipsec-spdcache 0 0K 0
ipsec-reg 0 0K 0
ipsec-misc 0 0K 0
ipsecrequest 0 0K 0
ip6opt 0 0K 40
ip6_moptions 0 0K 22
in6_mfilter 0 0K 34
frag6 0 0K 3
tcplog 0 0K 0
LRO 0 0K 0
sctp_mcore 0 0K 0
sctp_socko 0 0K 602
sctp_iter 0 0K 9
sctp_mvrf 0 0K 0
sctp_cpal 0 0K 0
sctp_cmsg 0 0K 0
sctp_stre 0 0K 0
sctp_athi 0 0K 0
sctp_a_it 0 0K 9
sctp_aadr 0 0K 0
sctp_stri 0 0K 0
newreno data 0 0K 0
ip_moptions 0 0K 37
in_mfilter 0 0K 110
ipid 0 0K 0
80211scan 0 0K 0
80211ratectl 0 0K 0
80211power 0 0K 0
80211nodeie 0 0K 0
80211node 0 0K 0
80211mesh_gt 0 0K 0
80211mesh_rt 0 0K 0
80211perr 0 0K 0
80211prep 0 0K 0
80211preq 0 0K 0
80211dfs 0 0K 0
80211crypto 0 0K 0
80211vap 0 0K 0
iflib 0 0K 0
vlan 0 0K 0
gif 0 0K 0
ifdescr 0 0K 0
zlib 0 0K 0
fadvise 0 0K 0
vnodemarker 0 0K 198
mpr 0 0K 0
statfs 0 0K 27361
export_host 0 0K 0
cl_savebuf 0 0K 6
biobuf 0 0K 0
aios 0 0K 0
lio 0 0K 0
acl 0 0K 0
mfibuf 0 0K 0
mbuf_tag 0 0K 376
accf 0 0K 0
pts 0 0K 0
iov 0 0K 35039
ioctlops 0 0K 161
Witness 0 0K 0
stack 0 0K 0
md_sectors 0 0K 0
sbuf 0 0K 364
md_disk 0 0K 0
compressor 0 0K 0
malodev 0 0K 0
SWAP 0 0K 0
LED 0 0K 0
sysctltmp 0 0K 1032
sysctl 0 0K 1
ekcd 0 0K 0
dumper 0 0K 0
rctl 0 0K 0
ix_sriov 0 0K 0
aacraidcam 0 0K 0
ix 0 0K 0
ipsbuf 0 0K 0
iirbuf 0 0K 0
cache 0 0K 0
aacraid_buf 0 0K 0
prison_racct 0 0K 0
Fail Points 0 0K 0
sigio 0 0K 11
filedesc_to_leader 0 0K 0
tty console 0 0K 0
aaccam 0 0K 0
aacbuf 0 0K 0
zstd 0 0K 0
nvlist 0 0K 0
SCSI ENC 0 0K 0
SCSI sa 0 0K 0
isofs_node 0 0K 0
isofs_mount 0 0K 0
tr_raid5_data 0 0K 0
tr_raid1e_data 0 0K 0
tr_raid1_data 0 0K 0
tr_raid0_data 0 0K 0
tr_concat_data 0 0K 0
md_sii_data 0 0K 0
md_promise_data 0 0K 0
md_nvidia_data 0 0K 0
md_jmicron_data 0 0K 0
md_intel_data 0 0K 0
md_ddf_data 0 0K 0
raid_data 0 0K 72
geom_flashmap 0 0K 0
newnfsmnt 0 0K 0
newnfsclient_req 0 0K 0
NFSCL layrecall 0 0K 0
NFSCL session 0 0K 0
NFSCL sockreq 0 0K 0
NFSCL devinfo 0 0K 0
NFSCL flayout 0 0K 0
NFSCL layout 0 0K 0
NFSD rollback 0 0K 0
NFSCL diroffdiroff 0 0K 0
NEWdirectio 0 0K 0
NEWNFSnode 0 0K 0
NFSCL lck 0 0K 0
NFSCL lckown 0 0K 0
NFSCL client 0 0K 0
NFSCL deleg 0 0K 0
NFSCL open 0 0K 0
NFSCL owner 0 0K 0
NFS fh 0 0K 0
NFS req 0 0K 0
NFSD usrgroup 0 0K 0
NFSD string 0 0K 0
NFSD V4lock 0 0K 0
NFSD V4state 0 0K 0
NFSD srvcache 0 0K 0
msdosfs_fat 0 0K 0
msdosfs_mount 0 0K 0
msdosfs_node 0 0K 0
DEVFS4 0 0K 0
DEVFS2 0 0K 0
gntdev 0 0K 0
privcmd_dev 0 0K 0
evtchn_dev 0 0K 0
xenstore 0 0K 0
scsi_pass 0 0K 0
ciss_data 0 0K 0
xnb 0 0K 0
xbbd 0 0K 0
xbd 0 0K 0
Balloon 0 0K 0
sysmouse 0 0K 0
vtfont 0 0K 0
ath_hal 0 0K 0
athdev 0 0K 0
ata_pci 0 0K 0
ata_dma 0 0K 0
ata_generic 0 0K 0
amr 0 0K 0
scsi_da 0 0K 69
ata_da 0 0K 0
scsi_ch 0 0K 0
scsi_cd 0 0K 0
USBdev 0 0K 0
USB 0 0K 0
AHCI driver 0 0K 0
agp 0 0K 0
nvme_da 0 0K 0
acpipwr 0 0K 0
twsbuf 0 0K 0
twe_commands 0 0K 0
twa_commands 0 0K 0
tcp_log_dev 0 0K 0
midi buffers 0 0K 0
mixer 0 0K 0
ac97 0 0K 0
hdacc 0 0K 0
hdac 0 0K 0
hdaa 0 0K 0
acpi_perf 0 0K 0
acpicmbat 0 0K 0
SIIS driver 0 0K 0
CAM CCB 0 0K 402014
PUC 0 0K 0
db> show ktr
No such command; use "help" to list available commands
---
This bug is generated by a bot. It may contain errors.
See https://goo.gl/tpsmEJ for more information about syzbot.
syzbot engineers can be reached at syzk...@googlegroups.com.
syzbot will keep track of this bug report. See:
https://goo.gl/tpsmEJ#status for how to communicate with syzbot.
syzbot
Nov 8, 2019, 7:01:10 PM11/8/19
to syzkaller-f...@googlegroups.com
syzbot has found a reproducer for the following crash on:
HEAD commit: d12922a9 mark LLVM_LIBUNWIND as broken on sparc64, with PR..
git tree: freebsd
console output: https://syzkaller.appspot.com/x/log.txt?x=13485a4ae00000
syz repro: https://syzkaller.appspot.com/x/repro.syz?x=1223b92ce00000
IMPORTANT: if you fix the bug, please add the following tag to the commit:
Reported-by: syzbot+fa8cba...@syzkaller.appspotmail.com
login: panic: mutex pcbinfohash not owned at
/syzkaller/managers/i386/kernel/sys/netinet6/in6_pcb.c:717
cpuid = 1
time = 1573257413
vpanic() at vpanic+0x1c7/frame 0xfffffe00242402c0
panic() at panic+0x43/frame 0xfffffe0024240320
__mtx_assert() at __mtx_assert+0x18b/frame 0xfffffe0024240360
in6_pcblookup_local() at in6_pcblookup_local+0x53/frame 0xfffffe00242403b0
in_pcb_lport() at in_pcb_lport+0x3fd/frame 0xfffffe0024240440
in_pcbbind_setup() at in_pcbbind_setup+0x28b/frame 0xfffffe00242404e0
in_pcbconnect_setup() at in_pcbconnect_setup+0x4aa/frame 0xfffffe00242405a0
udp_send() at udp_send+0xee4/frame 0xfffffe00242406b0
udp6_send() at udp6_send+0x4e8/frame 0xfffffe0024240860
sosend_dgram() at sosend_dgram+0x54f/frame 0xfffffe00242408d0
sosend() at sosend+0xc6/frame 0xfffffe0024240940
kern_sendit() at kern_sendit+0x32d/frame 0xfffffe00242409f0
sendit() at sendit+0x226/frame 0xfffffe0024240a50
sys_sendto() at sys_sendto+0x5c/frame 0xfffffe0024240ab0
ia32_syscall() at ia32_syscall+0x466/frame 0xfffffe0024240bf0
rdx 0xffffffff818cb695
rbx 0
rsp 0xfffffe0024240230
rbp 0xfffffe0024240250
rsi 0
rdi 0
r8 0
r9 0xffffffff
r10 0x47cc8636
r11 0x95d61d43
(map 0xfffff80036574000)
(map.pmap 0xfffff800365740d0)
(pmap 0xfffff80036574130)
threads: 1
100078 Run CPU 1 syz-executor.0
776 410 410 0 R CPU 0 sh
761 759 761 0 Ss nanslp 0xffffffff824fc1e1 syz-executor.0
759 757 757 0 R (threaded) syz-execprog
100076 S uwait 0xfffff800030cca00 syz-execprog
100099 RunQ syz-execprog
100100 S uwait 0xfffff80003ca3680 syz-execprog
100101 S kqread 0xfffff800031d8a00 syz-execprog
100102 S uwait 0xfffff80003b36080 syz-execprog
100103 S uwait 0xfffff80003b35700 syz-execprog
100104 S uwait 0xfffff80003b35800 syz-execprog
100105 S uwait 0xfffff80003b35900 syz-execprog
100106 S uwait 0xfffff80003b35a00 syz-execprog
757 755 757 0 Ss pause 0xfffff80003c89b08 csh
755 668 755 0 Ss select 0xfffff8003643ee40 sshd
734 1 734 0 Ss+ ttyin 0xfffff800037480b0 getty
733 1 733 0 Ss+ ttyin 0xfffff80003a020b0 getty
732 1 732 0 Ss+ ttyin 0xfffff80003a028b0 getty
731 1 731 0 Ss+ ttyin 0xfffff80003a030b0 getty
730 1 730 0 Ss+ ttyin 0xfffff8000327e8b0 getty
729 1 729 0 Ss+ ttyin 0xfffff800032e60b0 getty
728 1 728 0 Ss+ ttyin 0xfffff800032e68b0 getty
727 1 727 0 Ss+ ttyin 0xfffff800032e70b0 getty
726 1 726 0 Ss+ ttyin 0xfffff800032e78b0 getty
724 1 22 0 S+ piperd 0xfffff80003c20be0 logger
723 722 22 0 S+ nanslp 0xffffffff824fc1e1 sleep
722 1 22 0 S+ wait 0xfffff80003c8aa60 sh
481 1 481 0 Ss select 0xfffff800039f5d40 syslogd
410 1 410 0 Ss wait 0xfffff80003c89530 devd
409 1 409 65 Rs dhclient
324 1 324 0 Ss select 0xfffff800039f5f40 dhclient
321 1 321 0 Ss select 0xfffff800039f5e40 dhclient
[bufspacedaemon-0]
100080 D sdflush 0xfffff800039f8ce8 [/ worker]
100067 D umarcl 0xffffffff81529b80 [uma]
returns 1]
3 0 0 0 DL crypto_ 0xfffff800032c5030 [crypto
100021 D - 0xfffff8000329a100 [firmware
taskq]
100026 D - 0xfffff8000329a000 [crypto_0]
100027 D - 0xfffff8000329a000 [crypto_1]
100041 D - 0xfffff80003299b00 [vtnet0 rxq 0]
100042 D - 0xfffff80003299a00 [vtnet0 txq 0]
100043 D - 0xfffff80003299900 [vtnet0 rxq 1]
100044 D - 0xfffff80003299800 [vtnet0 txq 1]
100048 D - 0xfffff80003299700 [mca taskq]
100050 D - 0xffffffff824faf60 [deadlkres]
100055 D - 0xfffff80003299600 [acpi_task_0]
100056 D - 0xfffff80003299600 [acpi_task_1]
100057 D - 0xfffff80003299600 [acpi_task_2]
100059 D - 0xfffff80003299e00 [CAM taskq]
db> show all locks
Process 777 (syz-executor.0) thread 0xfffff80003c3c000 (100078)
exclusive rw udpinp (udpinp) r = 0 (0xfffff80003d39020) locked @
/syzkaller/managers/i386/kernel/sys/netinet/udp_usrreq.c:1125
vfscache 4 1025K 4
inodedep 54 539K 77
pcb 21 537K 77
DEVFS1 102 102K 113
bus 948 77K 2905
linker 205 76K 222
DEVFS3 121 31K 131
msg 4 30K 4
kdtrace 150 29K 1612
umtx 220 28K 220
DEVFS_RULE 56 27K 56
kbdmux 6 22K 6
vmem 3 19K 4
BPF 11 18K 11
temp 22 17K 1591
ufs_mount 3 17K 4
ithread 87 15K 87
cred 27 7K 233
ifnet 4 7K 4
vt 11 6K 11
kqueue 49 6K 782
ufs_dirhash 24 5K 24
routetbl 36 5K 40
plimit 18 5K 329
taskqueue 42 5K 42
hhook 13 4K 13
terminal 11 3K 11
session 21 3K 32
pgrp 21 3K 32
acpisem 20 3K 20
uidinfo 4 3K 4
proc-args 41 3K 485
dirrem 17 3K 28
Unitno 25 2K 39
ip6ndp 8 2K 9
acpidev 20 2K 20
mkdir 10 2K 22
encap_export_host 8 1K 8
mld 3 1K 3
sctp_ifn 3 1K 3
igmp 3 1K 3
pfil 3 1K 3
tun 4 1K 4
osd 3 1K 9
inpcbpolicy 8 1K 144
vnodes 1 1K 1
feeder 7 1K 7
loginclass 3 1K 3
DEVFSP 3 1K 3
soname 5 1K 5511
nexusdev 5 1K 5
savedino 0 0K 12
freeblks 0 0K 25
freefrag 0 0K 5
ip6_msource 0 0K 0
ip6_moptions 0 0K 0
in6_mfilter 0 0K 0
frag6 0 0K 0
sctp_iter 0 0K 4
sctp_mvrf 0 0K 0
sctp_timw 0 0K 0
sctp_atky 0 0K 0
sctp_atcl 0 0K 0
sctp_a_it 0 0K 4
sctp_aadr 0 0K 0
sctp_stro 0 0K 0
sctp_stri 0 0K 0
sctp_map 0 0K 0
ip_moptions 0 0K 0
in_mfilter 0 0K 0
mpr 0 0K 0
statfs 0 0K 195
export_host 0 0K 0
cl_savebuf 0 0K 2
ioctlops 0 0K 90
CAM CCB 0 0K 1761
HEAD commit: d12922a9 mark LLVM_LIBUNWIND as broken on sparc64, with PR..
git tree: freebsd
syz repro: https://syzkaller.appspot.com/x/repro.syz?x=1223b92ce00000
IMPORTANT: if you fix the bug, please add the following tag to the commit:
Reported-by: syzbot+fa8cba...@syzkaller.appspotmail.com
/syzkaller/managers/i386/kernel/sys/netinet6/in6_pcb.c:717
cpuid = 1
time = 1573257413
KDB: stack backtrace:
db_trace_self_wrapper() at db_trace_self_wrapper+0x47/frame
0xfffffe0024240250
db_trace_self_wrapper() at db_trace_self_wrapper+0x47/frame
vpanic() at vpanic+0x1c7/frame 0xfffffe00242402c0
panic() at panic+0x43/frame 0xfffffe0024240320
__mtx_assert() at __mtx_assert+0x18b/frame 0xfffffe0024240360
in6_pcblookup_local() at in6_pcblookup_local+0x53/frame 0xfffffe00242403b0
in_pcb_lport() at in_pcb_lport+0x3fd/frame 0xfffffe0024240440
in_pcbbind_setup() at in_pcbbind_setup+0x28b/frame 0xfffffe00242404e0
in_pcbconnect_setup() at in_pcbconnect_setup+0x4aa/frame 0xfffffe00242405a0
udp_send() at udp_send+0xee4/frame 0xfffffe00242406b0
udp6_send() at udp6_send+0x4e8/frame 0xfffffe0024240860
sosend_dgram() at sosend_dgram+0x54f/frame 0xfffffe00242408d0
sosend() at sosend+0xc6/frame 0xfffffe0024240940
kern_sendit() at kern_sendit+0x32d/frame 0xfffffe00242409f0
sendit() at sendit+0x226/frame 0xfffffe0024240a50
sys_sendto() at sys_sendto+0x5c/frame 0xfffffe0024240ab0
ia32_syscall() at ia32_syscall+0x466/frame 0xfffffe0024240bf0
int0x80_syscall_common() at int0x80_syscall_common+0x9c/frame 0x814303e
KDB: enter: panic
[ thread pid 777 tid 100078 ]
KDB: enter: panic
Stopped at kdb_enter+0x67: movq $0,0x14698f6(%rip)
db>
db> set $lines = 0
db> set $maxwidth = 0
db> show registers
cs 0x20
ds 0x3b ll+0x1a
es 0x3b ll+0x1a
fs 0x13
gs 0x1b
ss 0
rax 0x12
rcx 0x80 ll+0x5f
db>
db> set $lines = 0
db> set $maxwidth = 0
db> show registers
cs 0x20
ds 0x3b ll+0x1a
es 0x3b ll+0x1a
fs 0x13
gs 0x1b
ss 0
rax 0x12
rdx 0xffffffff818cb695
rbx 0
rsp 0xfffffe0024240230
rbp 0xfffffe0024240250
rsi 0
rdi 0
r8 0
r9 0xffffffff
r10 0x47cc8636
r11 0x95d61d43
r12 0xffffffff82068cf0 ddb_dbbe
r13 0
r14 0xffffffff81912bef
r15 0xffffffff81912bef
rip 0xffffffff810a9cf7 kdb_enter+0x67
rflags 0x200086 kernphys+0x86
kdb_enter+0x67: movq $0,0x14698f6(%rip)
db> show proc
Process 777 (syz-executor.0) at 0xfffff80003c10000:
r13 0
r14 0xffffffff81912bef
r15 0xffffffff81912bef
rip 0xffffffff810a9cf7 kdb_enter+0x67
rflags 0x200086 kernphys+0x86
kdb_enter+0x67: movq $0,0x14698f6(%rip)
db> show proc
state: NORMAL
uid: 0 gids: 0, 0, 5
parent: pid 761 at 0xfffff80003c12000
uid: 0 gids: 0, 0, 5
ABI: FreeBSD ELF32
arguments: /root/syz-executor.0
reaper: 0xfffff800031f9530 reapsubtree: 1
sigparent: 20
vmspace: 0xfffff80036574000
arguments: /root/syz-executor.0
reaper: 0xfffff800031f9530 reapsubtree: 1
sigparent: 20
(map 0xfffff80036574000)
(map.pmap 0xfffff800365740d0)
(pmap 0xfffff80036574130)
threads: 1
100078 Run CPU 1 syz-executor.0
db> ps
pid ppid pgrp uid state wmesg wchan cmd
777 761 761 0 R CPU 1 syz-executor.0
pid ppid pgrp uid state wmesg wchan cmd
776 410 410 0 R CPU 0 sh
761 759 761 0 Ss nanslp 0xffffffff824fc1e1 syz-executor.0
759 757 757 0 R (threaded) syz-execprog
100076 S uwait 0xfffff800030cca00 syz-execprog
100099 RunQ syz-execprog
100100 S uwait 0xfffff80003ca3680 syz-execprog
100101 S kqread 0xfffff800031d8a00 syz-execprog
100102 S uwait 0xfffff80003b36080 syz-execprog
100103 S uwait 0xfffff80003b35700 syz-execprog
100104 S uwait 0xfffff80003b35800 syz-execprog
100105 S uwait 0xfffff80003b35900 syz-execprog
100106 S uwait 0xfffff80003b35a00 syz-execprog
757 755 757 0 Ss pause 0xfffff80003c89b08 csh
755 668 755 0 Ss select 0xfffff8003643ee40 sshd
734 1 734 0 Ss+ ttyin 0xfffff800037480b0 getty
733 1 733 0 Ss+ ttyin 0xfffff80003a020b0 getty
732 1 732 0 Ss+ ttyin 0xfffff80003a028b0 getty
731 1 731 0 Ss+ ttyin 0xfffff80003a030b0 getty
730 1 730 0 Ss+ ttyin 0xfffff8000327e8b0 getty
729 1 729 0 Ss+ ttyin 0xfffff800032e60b0 getty
728 1 728 0 Ss+ ttyin 0xfffff800032e68b0 getty
727 1 727 0 Ss+ ttyin 0xfffff800032e70b0 getty
726 1 726 0 Ss+ ttyin 0xfffff800032e78b0 getty
724 1 22 0 S+ piperd 0xfffff80003c20be0 logger
723 722 22 0 S+ nanslp 0xffffffff824fc1e1 sleep
722 1 22 0 S+ wait 0xfffff80003c8aa60 sh
672 1 672 0 Ss nanslp 0xffffffff824fc1e1 cron
668 1 668 0 Ss select 0xfffff800030745c0 sshd
481 1 481 0 Ss select 0xfffff800039f5d40 syslogd
410 1 410 0 Ss wait 0xfffff80003c89530 devd
409 1 409 65 Rs dhclient
324 1 324 0 Ss select 0xfffff800039f5f40 dhclient
321 1 321 0 Ss select 0xfffff800039f5e40 dhclient
21 0 0 0 DL syncer 0xffffffff825d26b0 [syncer]
20 0 0 0 DL vlruwt 0xfffff80003a1d000 [vnlru]
19 0 0 0 DL (threaded) [bufdaemon]
100063 D qsleep 0xffffffff825d1b58 [bufdaemon]
100068 D - 0xffffffff8200a900
100063 D qsleep 0xffffffff825d1b58 [bufdaemon]
[bufspacedaemon-0]
100080 D sdflush 0xfffff800039f8ce8 [/ worker]
18 0 0 0 DL psleep 0xffffffff825ed008 [vmdaemon]
17 0 0 0 DL (threaded) [pagedaemon]
100061 D psleep 0xffffffff82618d98 [dom0]
100066 D launds 0xffffffff82618da4 [laundry: dom0]
17 0 0 0 DL (threaded) [pagedaemon]
100061 D psleep 0xffffffff82618d98 [dom0]
100067 D umarcl 0xffffffff81529b80 [uma]
16 0 0 0 DL - 0xffffffff82357e20 [rand_harvestq]
15 0 0 0 DL waiting 0xffffffff8265e370 [sctp_iterator]
9 0 0 0 DL - 0xffffffff825d155c [soaiod4]
8 0 0 0 DL - 0xffffffff825d155c [soaiod3]
7 0 0 0 DL - 0xffffffff825d155c [soaiod2]
6 0 0 0 DL - 0xffffffff825d155c [soaiod1]
5 0 0 0 DL (threaded) [cam]
100031 D - 0xffffffff822331c0 [doneq0]
100060 D - 0xffffffff82233088 [scanner]
4 0 0 0 DL crypto_ 0xfffff800032c5090 [crypto
15 0 0 0 DL waiting 0xffffffff8265e370 [sctp_iterator]
9 0 0 0 DL - 0xffffffff825d155c [soaiod4]
8 0 0 0 DL - 0xffffffff825d155c [soaiod3]
7 0 0 0 DL - 0xffffffff825d155c [soaiod2]
6 0 0 0 DL - 0xffffffff825d155c [soaiod1]
5 0 0 0 DL (threaded) [cam]
100031 D - 0xffffffff822331c0 [doneq0]
100060 D - 0xffffffff82233088 [scanner]
returns 1]
3 0 0 0 DL crypto_ 0xfffff800032c5030 [crypto
returns 0]
2 0 0 0 DL crypto_ 0xffffffff825e7648 [crypto]
14 0 0 0 DL seqstat 0xfffff8000327b888 [sequencer 00]
2 0 0 0 DL crypto_ 0xffffffff825e7648 [crypto]
taskq]
100026 D - 0xfffff8000329a000 [crypto_0]
100027 D - 0xfffff8000329a000 [crypto_1]
100041 D - 0xfffff80003299b00 [vtnet0 rxq 0]
100042 D - 0xfffff80003299a00 [vtnet0 txq 0]
100043 D - 0xfffff80003299900 [vtnet0 rxq 1]
100044 D - 0xfffff80003299800 [vtnet0 txq 1]
100048 D - 0xfffff80003299700 [mca taskq]
100050 D - 0xffffffff824faf60 [deadlkres]
100055 D - 0xfffff80003299600 [acpi_task_0]
100056 D - 0xfffff80003299600 [acpi_task_1]
100057 D - 0xfffff80003299600 [acpi_task_2]
100059 D - 0xfffff80003299e00 [CAM taskq]
db> show all locks
Process 777 (syz-executor.0) thread 0xfffff80003c3c000 (100078)
exclusive rw udpinp (udpinp) r = 0 (0xfffff80003d39020) locked @
/syzkaller/managers/i386/kernel/sys/netinet/udp_usrreq.c:1125
db> show malloc
Type InUse MemUse Requests
devbuf 4200 4764K 4224
Type InUse MemUse Requests
vtbuf 24 1968K 46
callout 3 1672K 3
kobj 332 1328K 488
newblk 365 1115K 407
callout 3 1672K 3
kobj 332 1328K 488
vfscache 4 1025K 4
inodedep 54 539K 77
pcb 21 537K 77
ufs_quota 1 512K 1
vfs_hash 1 512K 1
intr 4 388K 4
subproc 111 220K 842
vfs_hash 1 512K 1
intr 4 388K 4
acpica 1674 185K 47809
vnet_data 1 168K 1
pagedep 17 132K 21
vnet_data 1 168K 1
tfo_ccache 1 128K 1
sysctloid 2038 107K 2098
sem 4 106K 4
sysctloid 2038 107K 2098
DEVFS1 102 102K 113
bus 948 77K 2905
linker 205 76K 222
mtx_pool 2 72K 2
syncache 1 68K 1
UMAHash 3 67K 4
syncache 1 68K 1
acpitask 1 64K 1
ddb_capture 1 64K 1
module 493 62K 494
filedesc 5 37K 17
ddb_capture 1 64K 1
module 493 62K 494
gtaskqueue 22 34K 22
hostcache 1 32K 1
shm 1 32K 1
hostcache 1 32K 1
DEVFS3 121 31K 131
msg 4 30K 4
kdtrace 150 29K 1612
umtx 220 28K 220
DEVFS_RULE 56 27K 56
kbdmux 6 22K 6
vmem 3 19K 4
BPF 11 18K 11
temp 22 17K 1591
ufs_mount 3 17K 4
proc 3 17K 3
tty 16 16K 16
tidhash 1 16K 1
ifaddr 42 16K 42
tty 16 16K 16
tidhash 1 16K 1
ithread 87 15K 87
bus-sc 26 13K 1128
KTRACE 100 13K 100
kenv 95 12K 99
KTRACE 100 13K 100
eventhandler 122 11K 122
pfs_nodes 20 10K 20
pfs_nodes 20 10K 20
GEOM 60 10K 487
rman 77 9K 418
bmsafemap 4 9K 46
rman 77 9K 418
devstat 4 9K 4
UART 12 9K 12
rpc 2 8K 2
UART 12 9K 12
rpc 2 8K 2
shmfd 1 8K 1
pfs_vncache 1 8K 1
audit_evclass 230 8K 288
lltable 20 7K 20
pfs_vncache 1 8K 1
audit_evclass 230 8K 288
cred 27 7K 233
ifnet 4 7K 4
CAM DEV 3 6K 508
ether_multi 73 6K 78
vt 11 6K 11
kqueue 49 6K 782
sglist 5 6K 5
CAM queue 5 6K 1522
in6_multi 41 5K 41
CAM queue 5 6K 1522
ufs_dirhash 24 5K 24
routetbl 36 5K 40
plimit 18 5K 329
taskqueue 42 5K 42
memdesc 1 4K 1
MCA 32 4K 32
evdev 4 4K 4
diradd 31 4K 42
MCA 32 4K 32
evdev 4 4K 4
hhook 13 4K 13
terminal 11 3K 11
session 21 3K 32
pgrp 21 3K 32
acpisem 20 3K 20
uidinfo 4 3K 4
proc-args 41 3K 485
dirrem 17 3K 28
local_apic 1 2K 1
io_apic 1 2K 1
ipsec-saq 2 2K 2
select 15 2K 15
io_apic 1 2K 1
ipsec-saq 2 2K 2
CAM XPT 22 2K 542
lockf 15 2K 22
Unitno 25 2K 39
ip6ndp 8 2K 9
acpidev 20 2K 20
mkdir 10 2K 22
crypto 2 2K 2
msi 9 2K 9
indirdep 4 1K 4
msi 9 2K 9
ipsecpolicy 1 1K 1
sahead 1 1K 1
secasvar 1 1K 1
sctp_ifa 8 1K 8
sahead 1 1K 1
secasvar 1 1K 1
clone 8 1K 8
cdev 4 1K 4
NFSD session 1 1K 1
CAM periph 4 1K 270
in_multi 3 1K 4
cdev 4 1K 4
NFSD session 1 1K 1
CAM periph 4 1K 270
toponodes 6 1K 6
isadev 6 1K 6
mount 16 1K 86
pci_link 10 1K 10
isadev 6 1K 6
mount 16 1K 86
pci_link 10 1K 10
CAM SIM 2 1K 2
softdep 1 1K 1
softdep 1 1K 1
chacha20random 1 1K 1
epoch 4 1K 4
newdirblk 7 1K 11
epoch 4 1K 4
encap_export_host 8 1K 8
mld 3 1K 3
sctp_ifn 3 1K 3
igmp 3 1K 3
pfil 3 1K 3
tun 4 1K 4
osd 3 1K 9
inpcbpolicy 8 1K 144
vnodes 1 1K 1
NFSD lckfile 1 1K 1
NFSD V4client 1 1K 1
DEVFS 9 1K 10
NFSD V4client 1 1K 1
feeder 7 1K 7
loginclass 3 1K 3
DEVFSP 3 1K 3
soname 5 1K 5511
apmdev 1 1K 1
atkbddev 2 1K 2
pmchooks 1 1K 1
prison 4 1K 4
CAM dev queue 2 1K 2
CAM I/O Scheduler 1 1K 1
CAM path 4 1K 1030
filecaps 4 1K 63
atkbddev 2 1K 2
pmchooks 1 1K 1
prison 4 1K 4
CAM dev queue 2 1K 2
CAM I/O Scheduler 1 1K 1
CAM path 4 1K 1030
nexusdev 5 1K 5
tcpfunc 1 1K 1
sctp_vrf 1 1K 1
vnet 1 1K 1
acpiintr 1 1K 1
pmc 1 1K 1
cpus 2 1K 2
freework 1 1K 26
sctp_vrf 1 1K 1
vnet 1 1K 1
acpiintr 1 1K 1
pmc 1 1K 1
cpus 2 1K 2
vnet_data_free 1 1K 1
Per-cpu 1 1K 1
entropy 1 1K 36
Per-cpu 1 1K 1
sentinel 0 0K 0
jfsync 0 0K 0
jtrunc 0 0K 0
sbdep 0 0K 2
jfsync 0 0K 0
jtrunc 0 0K 0
jsegdep 0 0K 0
jseg 0 0K 0
jfreefrag 0 0K 0
jfreeblk 0 0K 0
jnewblk 0 0K 0
jmvref 0 0K 0
jremref 0 0K 0
jaddref 0 0K 0
freedep 0 0K 0
freefile 0 0K 9
jseg 0 0K 0
jfreefrag 0 0K 0
jfreeblk 0 0K 0
jnewblk 0 0K 0
jmvref 0 0K 0
jremref 0 0K 0
jaddref 0 0K 0
freedep 0 0K 0
freeblks 0 0K 25
freefrag 0 0K 5
allocindir 0 0K 0
allocdirect 0 0K 0
ufs_trim 0 0K 0
mactemp 0 0K 0
audit_trigger 0 0K 0
audit_pipe_presel 0 0K 0
audit_pipeent 0 0K 0
audit_pipe 0 0K 0
audit_evname 0 0K 0
audit_bsm 0 0K 0
audit_gidset 0 0K 0
audit_text 0 0K 0
audit_path 0 0K 0
audit_data 0 0K 0
audit_cred 0 0K 0
xform 0 0K 0
NLM 0 0K 0
nfsclient_nlminfo 0 0K 0
nfsclient_lock 0 0K 0
NFS FHA 0 0K 0
ipsec-spdcache 0 0K 0
ipsec-reg 0 0K 0
ipsec-misc 0 0K 0
ipsecrequest 0 0K 0
ip6opt 0 0K 3
allocdirect 0 0K 0
ufs_trim 0 0K 0
mactemp 0 0K 0
audit_trigger 0 0K 0
audit_pipe_presel 0 0K 0
audit_pipeent 0 0K 0
audit_pipe 0 0K 0
audit_evname 0 0K 0
audit_bsm 0 0K 0
audit_gidset 0 0K 0
audit_text 0 0K 0
audit_path 0 0K 0
audit_data 0 0K 0
audit_cred 0 0K 0
xform 0 0K 0
NLM 0 0K 0
nfsclient_nlminfo 0 0K 0
nfsclient_lock 0 0K 0
NFS FHA 0 0K 0
ipsec-spdcache 0 0K 0
ipsec-reg 0 0K 0
ipsec-misc 0 0K 0
ipsecrequest 0 0K 0
ip6_msource 0 0K 0
ip6_moptions 0 0K 0
in6_mfilter 0 0K 0
frag6 0 0K 0
tcplog 0 0K 0
LRO 0 0K 0
sctp_mcore 0 0K 0
sctp_socko 0 0K 0
LRO 0 0K 0
sctp_mcore 0 0K 0
sctp_iter 0 0K 4
sctp_mvrf 0 0K 0
sctp_timw 0 0K 0
sctp_cpal 0 0K 0
sctp_cmsg 0 0K 0
sctp_stre 0 0K 0
sctp_athi 0 0K 0
sctp_athm 0 0K 0
sctp_cmsg 0 0K 0
sctp_stre 0 0K 0
sctp_athi 0 0K 0
sctp_atky 0 0K 0
sctp_atcl 0 0K 0
sctp_a_it 0 0K 4
sctp_aadr 0 0K 0
sctp_stro 0 0K 0
sctp_stri 0 0K 0
sctp_map 0 0K 0
newreno data 0 0K 0
ip_msource 0 0K 0
ip_moptions 0 0K 0
in_mfilter 0 0K 0
ipid 0 0K 0
80211scan 0 0K 0
80211ratectl 0 0K 0
80211power 0 0K 0
80211nodeie 0 0K 0
80211node 0 0K 0
80211mesh_gt 0 0K 0
80211mesh_rt 0 0K 0
80211perr 0 0K 0
80211prep 0 0K 0
80211preq 0 0K 0
80211dfs 0 0K 0
80211crypto 0 0K 0
80211vap 0 0K 0
iflib 0 0K 0
vlan 0 0K 0
gif 0 0K 0
ifdescr 0 0K 0
zlib 0 0K 0
fadvise 0 0K 0
vnodemarker 0 0K 4
80211scan 0 0K 0
80211ratectl 0 0K 0
80211power 0 0K 0
80211nodeie 0 0K 0
80211node 0 0K 0
80211mesh_gt 0 0K 0
80211mesh_rt 0 0K 0
80211perr 0 0K 0
80211prep 0 0K 0
80211preq 0 0K 0
80211dfs 0 0K 0
80211crypto 0 0K 0
80211vap 0 0K 0
iflib 0 0K 0
vlan 0 0K 0
gif 0 0K 0
ifdescr 0 0K 0
zlib 0 0K 0
fadvise 0 0K 0
mpr 0 0K 0
statfs 0 0K 195
export_host 0 0K 0
cl_savebuf 0 0K 2
biobuf 0 0K 0
aios 0 0K 0
lio 0 0K 0
acl 0 0K 0
mfibuf 0 0K 0
mbuf_tag 0 0K 46
aios 0 0K 0
lio 0 0K 0
acl 0 0K 0
mfibuf 0 0K 0
accf 0 0K 0
pts 0 0K 0
iov 0 0K 12842
pts 0 0K 0
ioctlops 0 0K 90
Witness 0 0K 0
stack 0 0K 0
md_sectors 0 0K 0
sbuf 0 0K 364
md_disk 0 0K 0
compressor 0 0K 0
malodev 0 0K 0
SWAP 0 0K 0
LED 0 0K 0
sysctltmp 0 0K 565
stack 0 0K 0
md_sectors 0 0K 0
sbuf 0 0K 364
md_disk 0 0K 0
compressor 0 0K 0
malodev 0 0K 0
SWAP 0 0K 0
LED 0 0K 0
sysctl 0 0K 1
ekcd 0 0K 0
dumper 0 0K 0
rctl 0 0K 0
ix_sriov 0 0K 0
aacraidcam 0 0K 0
ix 0 0K 0
ipsbuf 0 0K 0
iirbuf 0 0K 0
cache 0 0K 0
aacraid_buf 0 0K 0
kcovinfo 0 0K 0
ekcd 0 0K 0
dumper 0 0K 0
rctl 0 0K 0
ix_sriov 0 0K 0
aacraidcam 0 0K 0
ix 0 0K 0
ipsbuf 0 0K 0
iirbuf 0 0K 0
cache 0 0K 0
aacraid_buf 0 0K 0
prison_racct 0 0K 0
Fail Points 0 0K 0
sigio 0 0K 1
Fail Points 0 0K 0
sigio 0 0K 1
Reply all
Reply to author
Forward
0 new messages