panic.go:LINE +0x72 (4)

[syzbot]

Hello,

syzbot found the following crash on:

HEAD commit: c9200921 Fix missing locking during calls to selwakeup().
git tree: openbsd
console output: https://syzkaller.appspot.com/x/log.txt?x=177e9701e00000
kernel config: https://syzkaller.appspot.com/x/.config?x=bf87b6915a88cd0d
dashboard link: https://syzkaller.appspot.com/bug?extid=3625283ec7c3d27ed2e6

Unfortunately, I don't have any reproducer for this crash yet.

IMPORTANT: if you fix the bug, please add the following tag to the commit:
Reported-by: syzbot+362528...@syzkaller.appspotmail.com

/usr/local/go/src/runtime/panic.go:774 +0x72
runtime.sigpanic()
/usr/local/go/src/runtime/signal_unix.go:378 +0x47c
runtime.greyobject(0x2c00, 0xc002385770, 0x10, 0x2ef254ff8, 0xc00002b270, 0xb0)
/usr/local/go/src/runtime/mgcmark.go:1264 +0x26a
runtime.scanobject(0xc002385770, 0xc00002b270)
/usr/local/go/src/runtime/mgcmark.go:1191 +0x2b3
runtime.gcDrainN(0xc00002b270, 0xcaf3a, 0x28f50)
/usr/local/go/src/runtime/mgcmark.go:1042 +0x12d
runtime.gcAssistAlloc1(0xc0000dbb00, 0xcaf3a)
/usr/local/go/src/runtime/mgcmark.go:512 +0xf2
runtime.gcAssistAlloc.func1()
/usr/local/go/src/runtime/mgcmark.go:423 +0x33
runtime.systemstack(0x0)
/usr/local/go/src/runtime/asm_amd64.s:370 +0x66
runtime.mstart()
/usr/local/go/src/runtime/proc.go:1146

goroutine 13 [GC assist marking]:
runtime.systemstack_switch()
/usr/local/go/src/runtime/asm_amd64.s:330 fp=0xc002bfb848 sp=0xc002bfb840 pc=0x45b520
runtime.gcAssistAlloc(0xc0000dbb00)
/usr/local/go/src/runtime/mgcmark.go:422 +0x157 fp=0xc002bfb8a8 sp=0xc002bfb848 pc=0x41e587
runtime.mallocgc(0xbfe0, 0x8a2440, 0xc000284001, 0x2842ee008)
/usr/local/go/src/runtime/malloc.go:926 +0x907 fp=0xc002bfb948 sp=0xc002bfb8a8 pc=0x40c417
runtime.newarray(0x8a2440, 0x266, 0x2)
/usr/local/go/src/runtime/malloc.go:1173 +0x63 fp=0xc002bfb978 sp=0xc002bfb948 pc=0x40c7e3
runtime.makeBucketArray(0x85cde0, 0xc00317a009, 0x0, 0xc0030ee800, 0x20)
/usr/local/go/src/runtime/map.go:362 +0x183 fp=0xc002bfb9b0 sp=0xc002bfb978 pc=0x40d6b3
runtime.hashGrow(0x85cde0, 0xc0030b7440)
/usr/local/go/src/runtime/map.go:1033 +0x89 fp=0xc002bfba00 sp=0xc002bfb9b0 pc=0x40f1a9
runtime.mapassign_fast64(0x85cde0, 0xc0030b7440, 0x680, 0xd787c0)
/usr/local/go/src/runtime/map_fast64.go:156 +0x12c fp=0xc002bfba40 sp=0xc002bfba00 pc=0x41137c
github.com/google/syzkaller/prog.(*vmaAlloc).noteAlloc(0xc0030b7470, 0x0, 0x800)
/syzkaller/gopath/src/github.com/google/syzkaller/prog/alloc.go:131 +0x9f fp=0xc002bfba98 sp=0xc002bfba40 pc=0x76b59f
github.com/google/syzkaller/prog.(*state).analyzeImpl.func1(0x9a76e0, 0xc0030b7050, 0xc003146200)
/syzkaller/gopath/src/github.com/google/syzkaller/prog/analysis.go:64 +0x4dc fp=0xc002bfbb90 sp=0xc002bfba98 pc=0x79ee4c
github.com/google/syzkaller/prog.foreachArgImpl(0x9a76e0, 0xc0030b7050, 0xc0030f6848, 0x0, 0x0, 0x98c300, 0xc002bfbcf8)
/syzkaller/gopath/src/github.com/google/syzkaller/prog/analysis.go:125 +0xbe fp=0xc002bfbc80 sp=0xc002bfbb90 pc=0x76bffe
github.com/google/syzkaller/prog.ForeachArg(0xc0030f6840, 0xc002bfbcf8)
/syzkaller/gopath/src/github.com/google/syzkaller/prog/analysis.go:120 +0x9e fp=0xc002bfbce8 sp=0xc002bfbc80 pc=0x76bece
github.com/google/syzkaller/prog.(*state).analyzeImpl(0xc002f6ea00, 0xc0030f6840, 0xc00277a000)
/syzkaller/gopath/src/github.com/google/syzkaller/prog/analysis.go:58 +0x61 fp=0xc002bfbd20 sp=0xc002bfbce8 pc=0x76be11
github.com/google/syzkaller/prog.analyze(0xc0020f1ec0, 0xc00277a000, 0x1e2a, 0x2400, 0xc0030f6600, 0xc0030f6640, 0x5585122e01bf5e5d)
/syzkaller/gopath/src/github.com/google/syzkaller/prog/analysis.go:34 +0xa5 fp=0xc002bfbd88 sp=0xc002bfbd20 pc=0x76bb45
github.com/google/syzkaller/prog.(*mutator).mutateArg(0xc002bfbec0, 0xa)
/syzkaller/gopath/src/github.com/google/syzkaller/prog/mutation.go:165 +0xc1 fp=0xc002bfbe48 sp=0xc002bfbd88 pc=0x784071
github.com/google/syzkaller/prog.(*Prog).Mutate(0xc0030f6600, 0x9a1f20, 0xc0021cc240, 0x1e, 0xc0020f1ec0, 0xc00277a000, 0x1e2a, 0x2400)
/syzkaller/gopath/src/github.com/google/syzkaller/prog/mutation.go:44 +0x2da fp=0xc002bfbf08 sp=0xc002bfbe48 pc=0x78338a
main.(*Proc).loop(0xc0020f1f00)
/syzkaller/gopath/src/github.com/google/syzkaller/syz-fuzzer/proc.go:99 +0x434 fp=0xc002bfbfd8 sp=0xc002bfbf08 pc=0x7ecc64
runtime.goexit()
/usr/local/go/src/runtime/asm_amd64.s:1357 +0x1 fp=0xc002bfbfe0 sp=0xc002bfbfd8 pc=0x45d471
created by main.main
/syzkaller/gopath/src/github.com/google/syzkaller/syz-fuzzer/fuzzer.go:259 +0x114c

goroutine 1 [select]:
main.(*Fuzzer).pollLoop(0xc0000a2f20)
/syzkaller/gopath/src/github.com/google/syzkaller/syz-fuzzer/fuzzer.go:320 +0x127
main.main()
/syzkaller/gopath/src/github.com/google/syzkaller/syz-fuzzer/fuzzer.go:262 +0x12bd

goroutine 17 [syscall]:
os/signal.signal_recv(0x0)
/usr/local/go/src/runtime/sigqueue.go:147 +0x9c
os/signal.loop()
/usr/local/go/src/os/signal/signal_unix.go:23 +0x22
created by os/signal.init.0
/usr/local/go/src/os/signal/signal_unix.go:29 +0x41

goroutine 25 [chan receive]:
github.com/google/syzkaller/pkg/osutil.HandleInterrupts.func1(0xc0000e4540)
/syzkaller/gopath/src/github.com/google/syzkaller/pkg/osutil/osutil_unix.go:74 +0xb6
created by github.com/google/syzkaller/pkg/osutil.HandleInterrupts
/syzkaller/gopath/src/github.com/google/syzkaller/pkg/osutil/osutil_unix.go:71 +0x3f

goroutine 26 [chan receive]:
main.main.func1(0xc0000e4540)
/syzkaller/gopath/src/github.com/google/syzkaller/syz-fuzzer/fuzzer.go:137 +0x34
created by main.main
/syzkaller/gopath/src/github.com/google/syzkaller/syz-fuzzer/fuzzer.go:135 +0x5b0

goroutine 8 [IO wait]:
internal/poll.runtime_pollWait(0x225859ed8, 0x72, 0xffffffffffffffff)
/usr/local/go/src/runtime/netpoll.go:184 +0x55
internal/poll.(*pollDesc).wait(0xc0000d3118, 0x72, 0x1000, 0x1000, 0xffffffffffffffff)
/usr/local/go/src/internal/poll/fd_poll_runtime.go:87 +0x45
internal/poll.(*pollDesc).waitRead(...)
/usr/local/go/src/internal/poll/fd_poll_runtime.go:92
internal/poll.(*FD).Read(0xc0000d3100, 0xc000274000, 0x1000, 0x1000, 0x0, 0x0, 0x0)
/usr/local/go/src/internal/poll/fd_unix.go:169 +0x1cf
net.(*netFD).Read(0xc0000d3100, 0xc000274000, 0x1000, 0x1000, 0xc000397a60, 0xc000397b40, 0x7c39cd)
/usr/local/go/src/net/fd_unix.go:202 +0x4f
net.(*conn).Read(0xc00000e058, 0xc000274000, 0x1000, 0x1000, 0x0, 0x0, 0x0)
/usr/local/go/src/net/net.go:184 +0x68
bufio.(*Reader).fill(0xc00005c780)
/usr/local/go/src/bufio/bufio.go:100 +0x103
bufio.(*Reader).ReadByte(0xc00005c780, 0xc000397c00, 0xc0000c2080, 0xc00000c7e0)
/usr/local/go/src/bufio/bufio.go:252 +0x39
compress/flate.(*decompressor).moreBits(0xc00026e000, 0x91cd50, 0xc000397b88)
/usr/local/go/src/compress/flate/inflate.go:696 +0x37
compress/flate.(*decompressor).nextBlock(0xc00026e000)
/usr/local/go/src/compress/flate/inflate.go:303 +0x36
compress/flate.(*decompressor).Read(0xc00026e000, 0xc000282000, 0x1000, 0x1000, 0x892ea0, 0xc0030b44b0, 0x199)
/usr/local/go/src/compress/flate/inflate.go:347 +0x77
github.com/google/syzkaller/pkg/rpctype.(*flateConn).Read(0xc00006b5f0, 0xc000282000, 0x1000, 0x1000, 0x10, 0xc000397b88, 0x7c382d)
/syzkaller/gopath/src/github.com/google/syzkaller/pkg/rpctype/rpc.go:131 +0x51
bufio.(*Reader).Read(0xc00005c7e0, 0xc000020360, 0x1, 0x9, 0x0, 0x0, 0xc000397d70)
/usr/local/go/src/bufio/bufio.go:226 +0x26a
io.ReadAtLeast(0x99dea0, 0xc00005c7e0, 0xc000020360, 0x1, 0x9, 0x1, 0x1, 0x0, 0x0)
/usr/local/go/src/io/io.go:310 +0x87
io.ReadFull(...)
/usr/local/go/src/io/io.go:329
encoding/gob.decodeUintReader(0x99dea0, 0xc00005c7e0, 0xc000020360, 0x9, 0x9, 0x4050d5, 0x43080c, 0xc000397d48, 0x45a320)
/usr/local/go/src/encoding/gob/decode.go:120 +0x6f
encoding/gob.(*Decoder).recvMessage(0xc0000c2080, 0x404fbc)
/usr/local/go/src/encoding/gob/decoder.go:81 +0x57


OpenBSD/amd64 (ci-openbsd-multicore-6.c.syzkaller.internal) (tty00)

encoding/gob.(*Decoder).decodeTypeSequence(0xc0000c2080, 0xc000000100, 0xc000397e10)
/usr/local/go/src/encoding/gob/decoder.go:143 +0x10c
encoding/gob.(*Decoder).DecodeValue(0xc0000c2080, 0x82da40, 0xc000127530, 0x16, 0x0, 0x0)
/usr/local/go/src/encoding/gob/decoder.go:211 +0x10b
encoding/gob.(*Decoder).Decode(0xc0000c2080, 0x82da40, 0xc000127530, 0x0, 0x0)
/usr/local/go/src/encoding/gob/decoder.go:188 +0x16d
net/rpc.(*gobClientCodec).ReadResponseHeader(0xc00006b6e0, 0xc000127530, 0xc0030b4480, 0x0)
/usr/local/go/src/net/rpc/client.go:228 +0x45
net/rpc.(*Client).input(0xc00005c8a0)
/usr/local/go/src/net/rpc/client.go:109 +0xa5
created by net/rpc.NewClientWithCodec
/usr/local/go/src/net/rpc/client.go:206 +0x89

goroutine 29 [IO wait]:
internal/poll.runtime_pollWait(0x225859fa8, 0x72, 0xffffffffffffffff)
/usr/local/go/src/runtime/netpoll.go:184 +0x55
internal/poll.(*pollDesc).wait(0xc00226c498, 0x72, 0x1ff01, 0x1ffa3, 0xffffffffffffffff)
/usr/local/go/src/internal/poll/fd_poll_runtime.go:87 +0x45
internal/poll.(*pollDesc).waitRead(...)
/usr/local/go/src/internal/poll/fd_poll_runtime.go:92
internal/poll.(*FD).Read(0xc00226c480, 0xc002d5805d, 0x1ffa3, 0x1ffa3, 0x0, 0x0, 0x0)
/usr/local/go/src/internal/poll/fd_unix.go:169 +0x1cf
os.(*File).read(...)
/usr/local/go/src/os/file_unix.go:259
os.(*File).Read(0xc0000cb638, 0xc002d5805d, 0x1ffa3, 0x1ffa3, 0xc, 0x0, 0x0)
/usr/local/go/src/os/file.go:116 +0x71
github.com/google/syzkaller/pkg/ipc.makeCommand.func2(0xc0000cb638, 0xc0000fe150)
/syzkaller/gopath/src/github.com/google/syzkaller/pkg/ipc/ipc.go:603 +0xaf
created by github.com/google/syzkaller/pkg/ipc.makeCommand
/syzkaller/gopath/src/github.com/google/syzkaller/pkg/ipc/ipc.go:597 +0x89f

goroutine 14 [IO wait]:
internal/poll.runtime_pollWait(0x225859e08, 0x72, 0xffffffffffffffff)
/usr/local/go/src/runtime/netpoll.go:184 +0x55
internal/poll.(*pollDesc).wait(0xc00275ea98, 0x72, 0x1, 0xc, 0xffffffffffffffff)
/usr/local/go/src/internal/poll/fd_poll_runtime.go:87 +0x45
internal/poll.(*pollDesc).waitRead(...)
/usr/local/go/src/internal/poll/fd_poll_runtime.go:92
internal/poll.(*FD).Read(0xc00275ea80, 0xc002dac590, 0xc, 0xc, 0x0, 0x0, 0x0)
/usr/local/go/src/internal/poll/fd_unix.go:169 +0x1cf
os.(*File).read(...)
/usr/local/go/src/os/file_unix.go:259
os.(*File).Read(0xc0000caea8, 0xc002dac590, 0xc, 0xc, 0xc0022ad9d8, 0x40c698, 0x10)
/usr/local/go/src/os/file.go:116 +0x71
io.ReadAtLeast(0x99e640, 0xc0000caea8, 0xc002dac590, 0xc, 0xc, 0xc, 0x0, 0x3fef08, 0x3fef08)
/usr/local/go/src/io/io.go:310 +0x87
io.ReadFull(...)
/usr/local/go/src/io/io.go:329
github.com/google/syzkaller/pkg/ipc.(*command).exec(0xc002d24000, 0xc0000d48e0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a23a0, 0xc0022adc00, 0x10, ...)
/syzkaller/gopath/src/github.com/google/syzkaller/pkg/ipc/ipc.go:757 +0x282
github.com/google/syzkaller/pkg/ipc.(*Env).Exec(0xc0001162d0, 0xc0000d48e0, 0xc002fcf1c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0022add58, 0x7b0a3b)
/syzkaller/gopath/src/github.com/google/syzkaller/pkg/ipc/ipc.go:282 +0x108
main.(*Proc).executeRaw(0xc0020f1f40, 0xc0000d48e0, 0xc002fcf1c0, 0x1, 0x0)
/syzkaller/gopath/src/github.com/google/syzkaller/syz-fuzzer/proc.go:292 +0x20c
main.(*Proc).execute(0xc0020f1f40, 0xc0000d48e0, 0xc002fcf1c0, 0x0, 0x1, 0x1)
/syzkaller/gopath/src/github.com/google/syzkaller/syz-fuzzer/proc.go:255 +0x6a
main.(*Proc).loop(0xc0020f1f40)
/syzkaller/gopath/src/github.com/google/syzkaller/syz-fuzzer/proc.go:101 +0x4de
created by main.main
/syzkaller/gopath/src/github.com/google/syzkaller/syz-fuzzer/fuzzer.go:259 +0x114c

goroutine 238 [IO wait]:
internal/poll.runtime_pollWait(0x225859928, 0x72, 0xffffffffffffffff)
/usr/local/go/src/runtime/netpoll.go:184 +0x55
internal/poll.(*pollDesc).wait(0xc00275e9d8, 0x72, 0x1ff01, 0x1ff7c, 0xffffffffffffffff)
/usr/local/go/src/internal/poll/fd_poll_runtime.go:87 +0x45
internal/poll.(*pollDesc).waitRead(...)
/usr/local/go/src/internal/poll/fd_poll_runtime.go:92
internal/poll.(*FD).Read(0xc00275e9c0, 0xc003304084, 0x1ff7c, 0x1ff7c, 0x0, 0x0, 0x0)
/usr/local/go/src/internal/poll/fd_unix.go:169 +0x1cf
os.(*File).read(...)
/usr/local/go/src/os/file_unix.go:259
os.(*File).Read(0xc0000cae98, 0xc003304084, 0x1ff7c, 0x1ff7c, 0x33, 0x0, 0x0)
/usr/local/go/src/os/file.go:116 +0x71
github.com/google/syzkaller/pkg/ipc.makeCommand.func2(0xc0000cae98, 0xc002d24000)
/syzkaller/gopath/src/github.com/google/syzkaller/pkg/ipc/ipc.go:603 +0xaf
created by github.com/google/syzkaller/pkg/ipc.makeCommand
/syzkaller/gopath/src/github.com/google/syzkaller/pkg/ipc/ipc.go:597 +0x89f

goroutine 454 [select]:
github.com/google/syzkaller/pkg/ipc.(*command).exec.func1(0xc002d24000, 0xc002485c20, 0xc002485bc0)
/syzkaller/gopath/src/github.com/google/syzkaller/pkg/ipc/ipc.go:742 +0xba
created by github.com/google/syzkaller/pkg/ipc.(*command).exec
/syzkaller/gopath/src/github.com/google/syzkaller/pkg/ipc/ipc.go:740 +0x19c
login: kernel: protection fault trap, code=0
Stopped at in_delmulti+0x8d: movl 0xc(%r14),%r15d
ddb{1}> set $lines = 0
ddb{1}> set $maxwidth = 0
ddb{1}> show panic
the kernel did not panic
ddb{1}> trace
in_delmulti(bffffffedfffffff) at in_delmulti+0x8d sys/netinet/in.c:914
in_purgeaddr(ffff800000a59300) at in_purgeaddr+0x156 sys/netinet/in.c:760
in_ifdetach(ffff800000a1d800) at in_ifdetach+0x74 sys/netinet/in.c:969
if_detach(ffff800000a1d800) at if_detach+0x140 sys/net/if.c:1150
tun_clone_destroy(ffff800000a1d800) at tun_clone_destroy+0x1f2 sys/net/if_tun.c:329
tun_dev_close(5d01,7) at tun_dev_close+0x160 sys/net/if_tun.c:480
spec_close(ffff800021b82de0) at spec_close+0x311 sys/kern/spec_vnops.c:555
VOP_CLOSE(fffffd806f0e7278,7,fffffd807f7be6c0,ffff800020ac2c48) at VOP_CLOSE+0xc0 sys/kern/vfs_vops.c:174
vn_closefile(fffffd8066ff7ef0,ffff800020ac2c48) at vn_closefile+0xd7 vn_close sys/kern/vfs_vnops.c:298 [inline]
vn_closefile(fffffd8066ff7ef0,ffff800020ac2c48) at vn_closefile+0xd7 sys/kern/vfs_vnops.c:610
fdrop(fffffd8066ff7ef0,ffff800020ac2c48) at fdrop+0xc2 sys/kern/kern_descrip.c:1264
closef(fffffd8066ff7ef0,ffff800020ac2c48) at closef+0x11c sys/kern/kern_descrip.c:1248
fdfree(ffff800020ac2c48) at fdfree+0x101 sys/kern/kern_descrip.c:1180
exit1(ffff800020ac2c48,0,19,1) at exit1+0x344 sys/kern/kern_exit.c:196
postsig(ffff800020ac2c48,19) at postsig+0x4e5 sigexit sys/kern/kern_sig.c:1476 [inline]
postsig(ffff800020ac2c48,19) at postsig+0x4e5 sys/kern/kern_sig.c:1408
userret(ffff800020ac2c48) at userret+0x199 sys/kern/kern_sig.c:1860
Xsyscall() at Xsyscall+0x156
end of kernel
end trace frame: 0x7f7ffffcf8a0, count: -16
ddb{1}> show registers
rdi 0x2
rsi 0
rbp 0xffff800021b82bb0
rbx 0
rdx 0xffff800020ac2c48
rcx 0
rax 0
r8 0xffffffff819446f3 rt_ifa_purge+0x153
r9 0x5
r10 0x2f
r11 0x6652fdee40755696
r12 0
r13 0x3
r14 0xbffffffedfffffff
r15 0x1
rip 0xffffffff8177c2ed in_delmulti+0x8d
cs 0x8
rflags 0x10246 __ALIGN_SIZE+0xf246
rsp 0xffff800021b82b50
ss 0x10
in_delmulti+0x8d: movl 0xc(%r14),%r15d
ddb{1}> show proc
PROC (syz-executor.1) pid=438707 stat=onproc
flags process=a<EXEC,EXITING> proc=2000<WEXIT>
pri=32, usrpri=70, nice=20
forw=0xffffffffffffffff, list=0xffff800020ac3128,0xffffffff82628bf8
process=0xffff800020aa83e0 user=0xffff800021b7e000, vmspace=0xfffffd807efff8a0
estcpu=36, cpticks=2, pctcpu=0.8
user=0, sys=1, intr=0
ddb{1}> ps
PID TID PPID UID S FLAGS WAIT COMMAND
19032 437542 0 0 3 0x14200 bored sosplice
18536 440617 72423 0 7 0x92 sshd
82984 169795 1 0 3 0x100083 ttyin getty
72423 468307 1 0 3 0x80 select sshd
96258 427491 92370 74 3 0x100092 bpf pflogd
92370 477473 1 0 3 0x80 netio pflogd
56010 511657 46159 73 3 0x100090 kqread syslogd
46159 110075 1 0 3 0x100082 netio syslogd
91563 194203 1 77 2 0x100090 dhclient
65558 120005 1 0 3 0x80 poll dhclient
57951 484967 0 0 2 0x14200 zerothread
24658 402393 0 0 3 0x14200 aiodoned aiodoned
16542 414486 0 0 3 0x14200 syncer update
71453 217250 0 0 3 0x14200 cleaner cleaner
25986 281454 0 0 3 0x14200 reaper reaper
70904 411888 0 0 3 0x14200 pgdaemon pagedaemon
14977 224879 0 0 3 0x14200 bored crynlk
93160 80504 0 0 3 0x14200 bored crypto
40351 442735 0 0 3 0x40014200 acpi0 acpi0
4487 263983 0 0 3 0x40014200 idle1
21120 380590 0 0 3 0x14200 bored softnet
73690 115895 0 0 2 0x14200 systqmp
89246 211752 0 0 3 0x14200 bored systq
28780 302972 0 0 3 0x40014200 bored softclock
79278 80237 0 0 3 0x40014200 idle0
69089 169605 0 0 3 0x14200 bored smr
1 471694 0 0 3 0x82 wait init
0 0 -1 0 3 0x10200 scheduler swapper
ddb{1}> show all locks
ddb{1}> show malloc
Type InUse MemUse HighUse Limit Requests Type Lim
devbuf 9535 6430K 7254K 78643K 11573 0
pcb 13 8K 8K 78643K 145 0
rtable 100 3K 4K 78643K 395 0
ifaddr 90 17K 18K 78643K 179 0
counters 43 33K 34K 78643K 69 0
ioctlops 0 0K 4K 78643K 1501 0
iov 0 0K 20K 78643K 110 0
mount 1 1K 1K 78643K 1 0
vnodes 1225 77K 77K 78643K 1620 0
UFS quota 1 32K 32K 78643K 1 0
UFS mount 5 36K 36K 78643K 5 0
shm 2 1K 9K 78643K 9 0
VM map 2 1K 1K 78643K 2 0
sem 12 0K 1K 78643K 118 0
dirhash 12 2K 2K 78643K 12 0
ACPI 1809 196K 290K 78643K 12766 0
file desc 3 8K 25K 78643K 473 0
sigio 0 0K 0K 78643K 9 0
proc 62 63K 83K 78643K 548 0
subproc 14 0K 2K 78643K 51 0
NFS srvsock 1 0K 0K 78643K 1 0
NFS daemon 1 16K 16K 78643K 1 0
ip_moptions 0 0K 0K 78643K 90 0
in_multi 90 4K 4K 78643K 187 0
ether_multi 1 0K 0K 78643K 23 0
mrt 0 0K 0K 78643K 7 0
ISOFS mount 1 32K 32K 78643K 1 0
MSDOSFS mount 1 16K 16K 78643K 1 0
ttys 85 387K 387K 78643K 85 0
exec 0 0K 1K 78643K 276 0
pagedep 1 8K 8K 78643K 1 0
inodedep 1 32K 32K 78643K 1 0
newblk 1 0K 0K 78643K 1 0
VM swap 7 26K 26K 78643K 7 0
UVM amap 75 35K 55K 78643K 2633 0
UVM aobj 44 2K 3K 78643K 46 0
memdesc 1 4K 4K 78643K 1 0
crypto data 1 1K 1K 78643K 1 0
ip6_options 0 0K 1K 78643K 100 0
NDP 14 0K 0K 78643K 38 0
temp 141 3018K 3092K 78643K 20889 0
kqueue 2 2K 14K 78643K 38 0
SYN cache 2 16K 16K 78643K 2 0
ddb{1}> show all pools
Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle
arp 64 8 0 4 1 0 1 1 0 8 0
plcache 128 20 0 0 1 0 1 1 0 8 0
rtpcb 80 59 0 57 1 0 1 1 0 8 0
rtentry 112 79 0 39 2 0 2 2 0 8 0
unpcb 120 414 0 404 1 0 1 1 0 8 0
syncache 264 12 0 12 4 3 1 1 0 8 1
tcpqe 32 150 0 150 2 1 1 1 0 8 1
tcpcb 544 216 0 212 1 0 1 1 0 8 0
inpcb 280 774 0 767 3 1 2 2 0 8 1
rttmr 72 1 0 1 1 1 0 1 0 8 0
nd6 48 13 0 9 1 0 1 1 0 8 0
ppxss 1128 1 0 1 1 0 1 1 0 8 1
pffrag 232 8 0 8 3 2 1 1 0 482 1
pffrnode 88 8 0 8 3 2 1 1 0 8 1
pffrent 40 274 0 274 3 2 1 1 0 8 1
pfosfp 40 846 0 423 5 0 5 5 0 8 0
pfosfpen 112 1428 0 714 21 0 21 21 0 8 0
pfstitem 24 50 0 12 1 0 1 1 0 8 0
pfstkey 112 50 0 12 2 0 2 2 0 8 0
pfstate 328 50 0 12 4 0 4 4 0 8 0
pfrule 1360 21 0 16 2 1 1 2 0 8 0
art_heap8 4096 2 0 0 2 0 2 2 0 8 0
art_heap4 256 399 0 180 16 2 14 15 0 8 0
art_table 32 401 0 180 2 0 2 2 0 8 0
art_node 16 78 0 37 1 0 1 1 0 8 0
sysvmsgpl 40 73 0 33 1 0 1 1 0 8 0
semupl 112 1 0 1 1 1 0 1 0 8 0
semapl 112 116 0 106 1 0 1 1 0 8 0
shmpl 112 44 0 2 2 0 2 2 0 8 0
dirhash 1024 17 0 0 3 0 3 3 0 8 0
dino1pl 128 2138 0 728 46 0 46 46 0 8 0
ffsino 272 2138 0 728 96 1 95 95 0 8 0
nchpl 144 3149 0 1543 61 0 61 61 0 8 0
uvmvnodes 72 2458 0 0 45 0 45 45 0 8 0
vnodes 208 2458 0 0 130 0 130 130 0 8 0
namei 1024 11184 0 11184 1 0 1 1 0 8 1
percpumem 16 45 0 13 1 0 1 1 0 8 0
vcpupl 1984 1 0 0 1 0 1 1 0 8 0
vmpool 560 7 0 6 1 0 1 1 0 8 0
scxspl 192 9221 0 9221 13 9 4 7 0 8 4
plimitpl 152 62 0 54 1 0 1 1 0 8 0
sigapl 432 669 0 657 3 1 2 3 0 8 0
futexpl 56 10988 0 10988 2 1 1 1 0 8 1
knotepl 112 110 0 105 1 0 1 1 0 8 0
kqueuepl 104 130 0 129 1 0 1 1 0 8 0
pipelkpl 48 229 0 224 1 0 1 1 0 8 0
pipepl 120 458 0 452 3 2 1 2 0 8 0
fdescpl 496 670 0 657 3 0 3 3 0 8 0
filepl 152 6703 0 6640 9 3 6 7 0 8 2
lockfpl 104 165 0 164 1 0 1 1 0 8 0
lockfspl 48 58 0 57 1 0 1 1 0 8 0
sessionpl 112 19 0 8 1 0 1 1 0 8 0
pgrppl 48 27 0 16 1 0 1 1 0 8 0
ucredpl 96 2145 0 2136 1 0 1 1 0 8 0
zombiepl 144 659 0 656 2 1 1 1 0 8 0
processpl 960 686 0 656 5 0 5 5 0 8 0
procpl 624 1774 0 1744 4 0 4 4 0 8 0
sosppl 128 5 0 5 2 1 1 1 0 8 1
sockpl 400 1257 0 1238 6 2 4 5 0 8 1
mcl64k 65536 265 0 0 34 0 34 34 0 8 0
mcl16k 16384 1 0 0 1 0 1 1 0 8 0
mcl12k 12288 4 0 0 1 0 1 1 0 8 0
mcl9k 9216 1 0 0 1 0 1 1 0 8 0
mcl8k 8192 7 0 0 1 0 1 1 0 8 0
mcl4k 4096 9 0 0 2 0 2 2 0 8 0
mcl2k2 2112 2 0 0 1 0 1 1 0 8 0
mcl2k 2048 163 0 0 20 0 20 20 0 8 0
mtagpl 80 29 0 0 1 0 1 1 0 8 0
mbufpl 256 468 0 0 28 0 28 28 0 8 0
bufpl 280 5420 0 200 373 0 373 373 0 8 0
anonpl 16 86271 0 84997 88 2 86 86 0 125 63
amapchunkpl 152 4339 0 4301 13 5 8 11 0 158 5
amappl16 192 3338 0 3321 66 16 50 61 0 8 43
amappl15 184 179 0 175 1 0 1 1 0 8 0
amappl14 176 33 0 33 1 0 1 1 0 8 1
amappl12 160 213 0 212 1 0 1 1 0 8 0
amappl11 152 59 0 44 1 0 1 1 0 8 0
amappl10 144 117 0 114 1 0 1 1 0 8 0
amappl9 136 616 0 613 1 0 1 1 0 8 0
amappl8 128 143 0 139 1 0 1 1 0 8 0
amappl7 120 222 0 212 1 0 1 1 0 8 0
amappl6 112 62 0 59 1 0 1 1 0 8 0
amappl5 104 370 0 356 1 0 1 1 0 8 0
amappl4 96 724 0 698 1 0 1 1 0 8 0
amappl3 88 343 0 334 1 0 1 1 0 8 0
amappl2 80 4521 0 4461 3 1 2 3 0 8 0
amappl1 72 24794 0 24395 27 17 10 21 0 8 0
amappl 80 2053 0 2029 2 0 2 2 0 84 0
dma4096 4096 1 0 1 1 1 0 1 0 8 0
dma256 256 6 0 6 1 1 0 1 0 8 0
dma128 128 253 0 253 1 1 0 1 0 8 0
dma64 64 6 0 6 1 1 0 1 0 8 0
dma32 32 7 0 7 1 1 0 1 0 8 0
dma16 16 18 0 17 1 0 1 1 0 8 0
aobjpl 64 45 0 2 1 0 1 1 0 8 0
uaddrrnd 24 677 0 663 1 0 1 1 0 8 0
uaddrbest 32 2 0 0 1 0 1 1 0 8 0
uaddr 24 677 0 663 1 0 1 1 0 8 0
vmmpekpl 168 9531 0 9499 2 0 2 2 0 8 0
vmmpepl 168 90601 0 89664 145 18 127 131 0 357 74
vmsppl 368 676 0 663 2 0 2 2 0 8 0
pdppl 4096 1361 0 1327 6 0 6 6 0 8 0
pvpl 32 251841 0 248781 200 1 199 199 0 265 139
pmappl 232 676 0 663 2 0 2 2 0 8 1
extentpl 40 46 0 29 1 0 1 1 0 8 0
phpool 112 227 0 8 7 0 7 7 0 8 0


---
This bug is generated by a bot. It may contain errors.
See https://goo.gl/tpsmEJ for more information about syzbot.
syzbot engineers can be reached at syzk...@googlegroups.com.

syzbot will keep track of this bug report. See:
https://goo.gl/tpsmEJ#status for how to communicate with syzbot.

[Anton Lindqvist]

#syz invalid