panic: refcount ADDR wraparound (3)
1 view
Skip to first unread message
syzbot
May 23, 2021, 3:16:25 AM5/23/21
to syzkaller-f...@googlegroups.com
Hello,
syzbot found the following issue on:
HEAD commit: c50346bc ath: bump the default node queue size to 128 fram..
git tree: https://github.com/freebsd/freebsd-src.git main
console output: https://syzkaller.appspot.com/x/log.txt?x=17c057add00000
dashboard link: https://syzkaller.appspot.com/bug?extid=9b96ea7a5ff8917d3fe4
Unfortunately, I don't have any reproducer for this issue yet.
IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+9b96ea...@syzkaller.appspotmail.com
panic: refcount 0xfffff80049c1036c wraparound
cpuid = 0
time = 1621754153
KDB: stack backtrace:
db_trace_self_wrapper() at db_trace_self_wrapper+0x47/frame 0xfffffe0094de08a0
vpanic() at vpanic+0x1c7/frame 0xfffffe0094de0900
panic() at panic+0x43/frame 0xfffffe0094de0960
_refcount_update_saturated() at _refcount_update_saturated+0x15/frame 0xfffffe0094de0970
vrele() at vrele+0x7e/frame 0xfffffe0094de0990
ktr_writerequest() at ktr_writerequest+0x735/frame 0xfffffe0094de0a80
ktr_submitrequest() at ktr_submitrequest+0x5e/frame 0xfffffe0094de0ab0
amd64_syscall() at amd64_syscall+0x5fa/frame 0xfffffe0094de0bf0
fast_syscall_common() at fast_syscall_common+0xf8/frame 0xfffffe0094de0bf0
--- syscall (0, FreeBSD ELF64, nosys), rip = 0x2e7aea, rsp = 0x7fffffffe428, rbp = 0x7fffffffe450 ---
KDB: enter: panic
[ thread pid 811 tid 100128 ]
Stopped at kdb_enter+0x67: movq $0,0x163736e(%rip)
db>
db> set $lines = 0
db> set $maxwidth = 0
db> show registers
cs 0x20
ds 0x3b
es 0x3b
fs 0x13
gs 0x1b
ss 0x28
rax 0x12
rcx 0xffffffff8113aa70 vprintf+0x140
rdx 0x1
rbx 0
rsp 0xfffffe0094de0880
rbp 0xfffffe0094de08a0
rsi 0
rdi 0xffffffff8113aaa6 vprintf+0x176
r8 0
r9 0x8080808080808080
r10 0xfffffe0094de0770
r11 0x1ff6bfff59c
r12 0xffffffff82267b90 ddb_dbbe
r13 0
r14 0xffffffff81a74c1a
r15 0xffffffff81a74c1a
rip 0xffffffff81131a97 kdb_enter+0x67
rflags 0x82
kdb_enter+0x67: movq $0,0x163736e(%rip)
db> show proc
Process 811 (syz-executor.3) at 0xfffff80049548530:
state: NORMAL
uid: 0 gids: 0, 0, 5
parent: pid 780 at 0xfffff8004992a530
ABI: FreeBSD ELF64
flag: 0x10004000 flag2: 0
arguments: /root/syz-executor.3
reaper: 0xfffff80004bc7530 reapsubtree: 1
sigparent: 20
vmspace: 0xfffffe0094fe89f0
(map 0xfffffe0094fe89f0)
(map.pmap 0xfffffe0094fe8ab0)
(pmap 0xfffffe0094fe8b10)
threads: 1
100128 Run CPU 0 syz-executor.3
db> ps
pid ppid pgrp uid state wmesg wchan cmd
9934 800 800 0 R syz-executor.2
9933 811 811 0 R syz-executor.3
9930 784 784 0 R (threaded) syz-executor.0
108719 Run CPU 1 syz-executor.0
113234 S sbwait 0xfffff80049e0ccd4 syz-executor.0
9638 1 784 0 S uwait 0xfffff800673abb00 syz-executor.0
9633 1 784 0 S umtxn 0xfffff80067399b00 syz-executor.0
9632 1 811 0 S uwait 0xfffff800673ab900 syz-executor.3
9629 1 811 0 S uwait 0xfffff8007ae92700 syz-executor.3
9627 1 784 0 S uwait 0xfffff800673abd00 syz-executor.0
9625 1 811 0 S uwait 0xfffff8007aba4d00 syz-executor.3
9624 1 784 0 S uwait 0xfffff800671e0100 syz-executor.0
9619 1 811 0 S uwait 0xfffff800672a4700 syz-executor.3
9617 1 784 0 S uwait 0xfffff800673ab700 syz-executor.0
9616 1 811 0 S uwait 0xfffff8007ae92d00 syz-executor.3
9613 1 784 0 S uwait 0xfffff8007ae23100 syz-executor.0
9611 1 811 0 S uwait 0xfffff800673ab300 syz-executor.3
9610 1 784 0 S uwait 0xfffff80067305300 syz-executor.0
9605 1 784 0 S uwait 0xfffff80067399f00 syz-executor.0
9601 1 784 0 S uwait 0xfffff8006728cd00 syz-executor.0
9596 1 784 0 S uwait 0xfffff80067399d00 syz-executor.0
9594 1 784 0 S uwait 0xfffff800673ab100 syz-executor.0
9559 1 800 0 S uwait 0xfffff8006728c100 syz-executor.2
9558 1 811 0 S uwait 0xfffff8007ae92f00 syz-executor.3
9552 1 800 0 S uwait 0xfffff8006728c300 syz-executor.2
9550 1 811 0 S uwait 0xfffff800672a4d00 syz-executor.3
9546 1 800 0 S uwait 0xfffff8007ae92100 syz-executor.2
9545 1 811 0 S uwait 0xfffff800673abf00 syz-executor.3
9540 1 811 0 S uwait 0xfffff8007ae92b00 syz-executor.3
9539 1 811 0 S uwait 0xfffff800672a4b00 syz-executor.3
8148 1 784 0 S uwait 0xfffff8007ae23f00 syz-executor.0
8147 1 811 0 S uwait 0xfffff800672a4f00 syz-executor.3
8138 1 784 0 S uwait 0xfffff80049b39f00 syz-executor.0
8137 1 811 0 S uwait 0xfffff8007ae23d00 syz-executor.3
8128 1 784 0 S uwait 0xfffff80067305100 syz-executor.0
8127 1 811 0 S uwait 0xfffff8007ae92300 syz-executor.3
8117 1 811 0 S uwait 0xfffff8007ae92500 syz-executor.3
8116 1 811 0 S uwait 0xfffff8006728c900 syz-executor.3
6764 1 800 0 S uwait 0xfffff800671e0900 syz-executor.2
6760 1 800 0 S uwait 0xfffff80049b39b00 syz-executor.2
6759 1 6756 0 S uwait 0xfffff8007ae23300 syz-executor.0
6754 1 6753 0 S uwait 0xfffff800671e0f00 syz-executor.0
6752 1 800 0 S uwait 0xfffff8007aba4700 syz-executor.2
6750 1 6749 0 S uwait 0xfffff8007ae3b700 syz-executor.0
6748 1 800 0 S uwait 0xfffff80049a3a700 syz-executor.2
6747 1 6745 0 S uwait 0xfffff80049dcbf00 syz-executor.0
6746 1 6745 0 S uwait 0xfffff8007ae23500 syz-executor.0
6744 1 800 0 S uwait 0xfffff8007ae3bb00 syz-executor.2
6706 1 811 0 S uwait 0xfffff80015dce700 syz-executor.3
6705 1 811 0 S umtxn 0xfffff80049a0f500 syz-executor.3
6701 1 811 0 S uwait 0xfffff8007ae23b00 syz-executor.3
6700 1 811 0 S uwait 0xfffff800671e0d00 syz-executor.3
6698 1 811 0 S uwait 0xfffff8007ae23900 syz-executor.3
6697 1 811 0 S uwait 0xfffff8007a15ab00 syz-executor.3
6695 1 811 0 S uwait 0xfffff8007ae3b100 syz-executor.3
6694 1 811 0 S uwait 0xfffff80049b39300 syz-executor.3
6692 1 811 0 S uwait 0xfffff8007ae3bd00 syz-executor.3
6691 1 811 0 S uwait 0xfffff8007a991b00 syz-executor.3
6688 1 811 0 S uwait 0xfffff8007a991700 syz-executor.3
6687 1 811 0 S uwait 0xfffff8007a991900 syz-executor.3
6683 1 811 0 S uwait 0xfffff8007aba4f00 syz-executor.3
6682 1 811 0 S uwait 0xfffff80049a3a300 syz-executor.3
6680 1 811 0 S uwait 0xfffff8007ae3b900 syz-executor.3
6679 1 811 0 S uwait 0xfffff8007a991f00 syz-executor.3
6677 1 811 0 S uwait 0xfffff8007a991300 syz-executor.3
6676 1 811 0 S uwait 0xfffff8007a991100 syz-executor.3
6674 1 811 0 S uwait 0xfffff8007ae3b500 syz-executor.3
6673 1 811 0 S uwait 0xfffff8007a15a700 syz-executor.3
6672 1 811 0 S uwait 0xfffff8007a991d00 syz-executor.3
6671 1 811 0 S uwait 0xfffff8007ae3b300 syz-executor.3
6565 1 784 0 S uwait 0xfffff8007a15ad00 syz-executor.0
6557 1 784 0 S uwait 0xfffff80049d64100 syz-executor.0
6553 1 785 0 S uwait 0xfffff8007a8bf300 syz-executor.1
6548 1 784 0 S uwait 0xfffff80049a3af00 syz-executor.0
6544 1 785 0 S uwait 0xfffff80049a3ab00 syz-executor.1
6538 1 785 0 S uwait 0xfffff8007a991500 syz-executor.1
6526 1 785 0 S uwait 0xfffff80049a3a500 syz-executor.1
6523 1 785 0 S uwait 0xfffff80049b1e900 syz-executor.1
6485 1 784 0 S uwait 0xfffff8007a66b700 syz-executor.0
6482 1 784 0 S uwait 0xfffff80049b39700 syz-executor.0
6473 1 784 0 S uwait 0xfffff8007a66b500 syz-executor.0
6469 1 784 0 S uwait 0xfffff80049c2cf00 syz-executor.0
6465 1 784 0 S uwait 0xfffff8007ae3bf00 syz-executor.0
6463 1 784 0 S uwait 0xfffff8007a15a300 syz-executor.0
6456 1 784 0 S uwait 0xfffff8007a8bfd00 syz-executor.0
6455 1 784 0 S uwait 0xfffff80049b39500 syz-executor.0
6453 1 784 0 S uwait 0xfffff8007a66b100 syz-executor.0
6451 1 784 0 S uwait 0xfffff8007aba4500 syz-executor.0
5733 1 800 0 S uwait 0xfffff80049dcb500 syz-executor.2
5723 1 800 0 S uwait 0xfffff8007a8bff00 syz-executor.2
5717 1 800 0 S uwait 0xfffff8007aba4b00 syz-executor.2
5712 1 784 0 S uwait 0xfffff80049dcb100 syz-executor.0
5705 1 784 0 S uwait 0xfffff80049c2c300 syz-executor.0
5700 1 784 0 S uwait 0xfffff80049b1ef00 syz-executor.0
5695 1 784 0 S uwait 0xfffff80049a3a100 syz-executor.0
5694 1 784 0 S uwait 0xfffff8007a8bf100 syz-executor.0
5640 1 811 0 S uwait 0xfffff80049d64d00 syz-executor.3
5635 1 811 0 S uwait 0xfffff8007a15a100 syz-executor.3
5631 1 811 0 S uwait 0xfffff8007a8bfb00 syz-executor.3
5628 1 811 0 S uwait 0xfffff80049d64f00 syz-executor.3
5627 1 811 0 S uwait 0xfffff8007a8bf900 syz-executor.3
5609 1 785 0 S uwait 0xfffff80015d9f100 syz-executor.1
5603 1 785 0 S uwait 0xfffff8007a15a900 syz-executor.1
5597 1 785 0 S uwait 0xfffff80015d47100 syz-executor.1
5591 1 785 0 S uwait 0xfffff8007a8bf500 syz-executor.1
5590 1 785 0 S uwait 0xfffff8007a8bf700 syz-executor.1
5219 1 811 0 S uwait 0xfffff8007a66bb00 syz-executor.3
5218 1 800 0 S uwait 0xfffff80049d64500 syz-executor.2
5217 1 785 0 S uwait 0xfffff80049d64b00 syz-executor.1
5208 1 785 0 S uwait 0xfffff8007a15a500 syz-executor.1
5207 1 800 0 S uwait 0xfffff80049a0f300 syz-executor.2
5206 1 811 0 S uwait 0xfffff80049dcb300 syz-executor.3
5197 1 800 0 S uwait 0xfffff80049b1e100 syz-executor.2
5196 1 785 0 S uwait 0xfffff80015dce100 syz-executor.1
5195 1 811 0 S uwait 0xfffff80049b1ed00 syz-executor.3
5186 1 811 0 S uwait 0xfffff80049b39d00 syz-executor.3
5185 1 811 0 S uwait 0xfffff80049dcb700 syz-executor.3
5005 1 785 0 S uwait 0xfffff800154b2100 syz-executor.1
5000 1 785 0 S uwait 0xfffff80049d64700 syz-executor.1
4998 1 785 0 S uwait 0xfffff8007a66b900 syz-executor.1
4994 1 785 0 S uwait 0xfffff80015d45b00 syz-executor.1
4993 1 785 0 S uwait 0xfffff80015d4ab00 syz-executor.1
4373 1 4373 65 Ss select 0xfffff80049b45d40 dhclient
3850 1 800 0 S uwait 0xfffff80049c2c900 syz-executor.2
3843 1 800 0 S uwait 0xfffff80015dce300 syz-executor.2
3841 1 785 0 S uwait 0xfffff80049d64900 syz-executor.1
3836 1 800 0 S uwait 0xfffff80049b1e500 syz-executor.2
3835 1 785 0 S uwait 0xfffff80015dceb00 syz-executor.1
3834 1 784 0 S uwait 0xfffff80049c2cb00 syz-executor.0
3832 1 784 0 S uwait 0xfffff80049dcb900 syz-executor.0
3828 1 784 0 S uwait 0xfffff80049a3a900 syz-executor.0
3827 1 800 0 S uwait 0xfffff80049b39100 syz-executor.2
3826 1 785 0 S uwait 0xfffff80049b1e700 syz-executor.1
3820 1 800 0 S uwait 0xfffff8007a15af00 syz-executor.2
3816 1 800 0 S uwait 0xfffff8007a66bd00 syz-executor.2
3810 1 800 0 S uwait 0xfffff80049b1eb00 syz-executor.2
3808 1 800 0 S uwait 0xfffff80049c2c700 syz-executor.2
3564 1 3564 0 Ss select 0xfffff8007a770d40 dhclient
3561 1 3561 0 Ss select 0xfffff8007a787d40 dhclient
3542 1 3542 65 Ss select 0xfffff8007a6642c0 dhclient
2805 1 2805 0 Ss select 0xfffff800494922c0 dhclient
2799 1 2799 0 Ss select 0xfffff8007a4878c0 dhclient
2779 1 2779 65 Ss select 0xfffff8007a03b140 dhclient
2005 1 2005 0 Ss select 0xfffff800494925c0 dhclient
2000 1 2000 0 Ss select 0xfffff80049492a40 dhclient
1980 1 1980 65 Ss select 0xfffff80049492740 dhclient
1738 1 784 0 S uwait 0xfffff80015c9a900 syz-executor.0
1731 1 784 0 S uwait 0xfffff80015d54500 syz-executor.0
1722 1 785 0 S uwait 0xfffff80049c2cd00 syz-executor.1
1721 1 784 0 S uwait 0xfffff80015d45f00 syz-executor.0
1719 1 785 0 S uwait 0xfffff80049a0f100 syz-executor.1
1711 1 785 0 S uwait 0xfffff80015d43d00 syz-executor.1
1705 1 785 0 S uwait 0xfffff80049a0f700 syz-executor.1
1703 1 785 0 S uwait 0xfffff80015d54300 syz-executor.1
1286 1285 785 0 SV uwait 0xfffff80015d47700 syz-executor.1
1285 1 785 0 DV ppwait 0xfffff800497d4f40 syz-executor.1
1204 1 1204 0 Ss select 0xfffff80049c9d740 dhclient
1201 1 1201 0 Ss select 0xfffff80049d31d40 dhclient
811 780 811 0 Rs CPU 0 syz-executor.3
800 780 800 0 Rs syz-executor.2
785 780 785 0 Rs syz-executor.1
784 780 784 0 Rs syz-executor.0
780 778 778 0 S (threaded) syz-fuzzer
100117 S uwait 0xfffff80015d94700 syz-fuzzer
100118 S uwait 0xfffff80015d9f500 syz-fuzzer
100119 S uwait 0xfffff80015d94b00 syz-fuzzer
100120 S kqread 0xfffff80015d54100 syz-fuzzer
100121 S uwait 0xfffff80015d94900 syz-fuzzer
100122 S uwait 0xfffff80015d4af00 syz-fuzzer
100123 S uwait 0xfffff80015d4a300 syz-fuzzer
100124 S uwait 0xfffff80015d4a500 syz-fuzzer
101307 S uwait 0xfffff80049b39900 syz-fuzzer
107463 S uwait 0xfffff8007aba4100 syz-fuzzer
778 776 778 0 Ss pause 0xfffff8004992ab10 csh
776 694 776 0 Ss select 0xfffff800493565c0 sshd
760 1 760 0 Ss+ ttyin 0xfffff80015465cb0 getty
759 1 759 0 Ss+ ttyin 0xfffff80015afa4b0 getty
758 1 758 0 Ss+ ttyin 0xfffff80015afacb0 getty
757 1 757 0 Ss+ ttyin 0xfffff80015b004b0 getty
756 1 756 0 Ss+ ttyin 0xfffff80015b00cb0 getty
755 1 755 0 Ss+ ttyin 0xfffff80015a864b0 getty
754 1 754 0 Ss+ ttyin 0xfffff80015a86cb0 getty
753 1 753 0 Ss+ ttyin 0xfffff80015a8b4b0 getty
752 1 752 0 Ss+ ttyin 0xfffff80015a8bcb0 getty
698 1 698 0 Ss nanslp 0xffffffff8273c560 cron
694 1 694 0 Ss select 0xfffff80049356d40 sshd
507 1 507 0 Ss select 0xfffff80049356ec0 syslogd
436 1 436 0 Ss select 0xfffff80015d49740 devd
435 1 435 65 Ss select 0xfffff800493a75c0 dhclient
350 1 350 0 Ss select 0xfffff800493a78c0 dhclient
347 1 347 0 Ss select 0xfffff80015d935c0 dhclient
23 0 0 0 DL vlruwt 0xfffff80015c9e530 [vnlru]
22 0 0 0 DL syncer 0xffffffff8282b9d0 [syncer]
21 0 0 0 DL (threaded) [bufdaemon]
100081 D qsleep 0xffffffff8282aa80 [bufdaemon]
100086 D - 0xffffffff8220ae80 [bufspacedaemon-0]
100098 D sdflush 0xfffff80004dfc4e8 [/ worker]
20 0 0 0 DL psleep 0xffffffff828528c8 [vmdaemon]
19 0 0 0 DL (threaded) [pagedaemon]
100079 D psleep 0xffffffff82846d38 [dom0]
100087 D launds 0xffffffff82846d44 [laundry: dom0]
100088 D umarcl 0xffffffff815cd2b0 [uma]
18 0 0 0 DL - 0xffffffff82570908 [rand_harvestq]
17 0 0 0 DL waiting 0xffffffff82ee1828 [sctp_iterator]
16 0 0 0 DL pftm 0xffffffff830d63c0 [pf purge]
15 0 0 0 DL - 0xffffffff828280dc [soaiod4]
9 0 0 0 DL - 0xffffffff828280dc [soaiod3]
8 0 0 0 DL - 0xffffffff828280dc [soaiod2]
7 0 0 0 DL - 0xffffffff828280dc [soaiod1]
6 0 0 0 DL (threaded) [cam]
100044 D - 0xffffffff82447dc0 [doneq0]
100045 D - 0xffffffff82447d40 [async]
100078 D - 0xffffffff82447c10 [scanner]
14 0 0 0 DL seqstat 0xfffff80004dcbc88 [sequencer 00]
5 0 0 0 DL crypto_ 0xfffff80004d99d80 [crypto returns 1]
4 0 0 0 DL crypto_ 0xfffff80004d99d30 [crypto returns 0]
3 0 0 0 DL crypto_ 0xffffffff82844220 [crypto]
13 0 0 0 DL (threaded) [geom]
100035 D - 0xffffffff8271bda0 [g_event]
100036 D - 0xffffffff8271bda8 [g_up]
100037 D - 0xffffffff8271bdb0 [g_down]
2 0 0 0 DL (threaded) [KTLS]
100028 D - 0xfffff80004c39d00 [thr_0]
100029 D - 0xfffff80004c39d80 [thr_1]
12 0 0 0 WL (threaded) [intr]
100012 I [swi5: fast taskq]
100015 I [swi6: task queue]
100017 I [swi6: Giant taskq]
100030 I [swi4: clock (0)]
100031 I [swi4: clock (1)]
100032 I [swi1: netisr 0]
100033 I [swi3: vm]
100046 I [irq24: virtio_pci0]
100047 I [irq25: virtio_pci0]
100048 I [irq26: virtio_pci0]
100049 I [irq27: virtio_pci0]
100050 I [irq28: virtio_pci1]
100051 I [irq29: virtio_pci1]
100052 I [irq30: virtio_pci1]
100053 I [irq31: virtio_pci1]
100054 I [irq32: virtio_pci1]
100059 I [irq10: virtio_pci2]
100061 I [irq1: atkbd0]
100062 I [irq12: psm0]
100063 I [swi0: uart uart++]
100071 I [swi1: pf send]
100084 I [swi1: hpts]
100085 I [swi1: hpts]
11 0 0 0 RL (threaded) [idle]
100003 CanRun [idle: cpu0]
100004 CanRun [idle: cpu1]
1 0 1 0 SLs wait 0xfffff80004bc7530 [init]
10 0 0 0 DL audit_w 0xffffffff82844730 [audit]
0 0 0 0 DLs (threaded) [kernel]
100000 D swapin 0xffffffff8271c330 [swapper]
100005 D - 0xfffff80004c63d00 [if_config_tqg_0]
100006 D - 0xfffff80004c63900 [softirq_0]
100007 D - 0xfffff80004c63500 [softirq_1]
100008 D - 0xfffff80004c63100 [if_io_tqg_0]
100009 D - 0xfffff80004c61d00 [if_io_tqg_1]
100010 D - 0xfffff80004c5fd00 [in6m_free taskq]
100011 D - 0xfffff80004c5f900 [aiod_kick taskq]
100013 D - 0xfffff80004c5f100 [kqueue_ctx taskq]
100014 D - 0xfffff80004c58d00 [pci_hp taskq]
100016 D - 0xfffff80004c58500 [inm_free taskq]
100018 D - 0xfffff80004c53d00 [linuxkpi_irq_wq]
100019 D - 0xfffff80004c53900 [thread taskq]
100020 D - 0xfffff80004c53500 [linuxkpi_short_wq_0]
100021 D - 0xfffff80004c53500 [linuxkpi_short_wq_1]
100022 D - 0xfffff80004c53500 [linuxkpi_short_wq_2]
100023 D - 0xfffff80004c53500 [linuxkpi_short_wq_3]
100024 D - 0xfffff80004c53100 [linuxkpi_long_wq_0]
100025 D - 0xfffff80004c53100 [linuxkpi_long_wq_1]
100026 D - 0xfffff80004c53100 [linuxkpi_long_wq_2]
100027 D - 0xfffff80004c53100 [linuxkpi_long_wq_3]
100034 D - 0xfffff80004c39900 [firmware taskq]
100038 D - 0xfffff80004c39500 [crypto_0]
100039 D - 0xfffff80004c39500 [crypto_1]
100055 D - 0xfffff800153dc900 [vtnet0 rxq 0]
100056 D - 0xfffff800153dc500 [vtnet0 txq 0]
100057 D - 0xfffff800153dc100 [vtnet0 rxq 1]
100058 D - 0xfffff800153c6d00 [vtnet0 txq 1]
100060 D vtbslp 0xfffff80015429500 [virtio_balloon]
100064 D - 0xfffff800153c6900 [mca taskq]
100069 D - 0xffffffff81e21530 [deadlkres]
100074 D - 0xfffff80015a1a500 [acpi_task_0]
100075 D - 0xfffff80015a1a500 [acpi_task_1]
100076 D - 0xfffff80015a1a500 [acpi_task_2]
100077 D - 0xfffff80004c39100 [CAM taskq]
9932 785 785 0 Z syz-executor.1
db> show all locks
Process 9930 (syz-executor.0) thread 0xfffffe009dcdb720 (108719)
exclusive sleep mutex umtxql (umtxql) r = 0 (0xffffffff8275e820) locked @ /syzkaller/managers/main/kernel/sys/kern/kern_umtx.c:932
Process 9930 (syz-executor.0) thread 0xfffffe009dcea740 (113234)
exclusive sx so_rcv_sx (so_rcv_sx) r = 0 (0xfffff80049e0cc78) locked @ /syzkaller/managers/main/kernel/sys/kern/uipc_sockbuf.c:467
Process 811 (syz-executor.3) thread 0xfffffe0094fec3a0 (100128)
exclusive sx ktrace_sx (ktrace_sx) r = 0 (0xffffffff8271e7e8) locked @ /syzkaller/managers/main/kernel/sys/kern/kern_ktrace.c:416
db> show malloc
Type InUse MemUse Requests
sysctloid 34288 12858K 34355
pf_hash 5 11560K 5
devbuf 4216 6982K 4244
filedesc 294 4743K 17871
tcp_hpts 5 3219K 5
pcb 558 2966K 23564
kobj 328 2624K 488
vtbuf 24 2064K 46
subproc 418 1846K 10192
newblk 56 1060K 12385
vfscache 3 1035K 3
acpica 1674 649K 55230
inodedep 96 615K 9728
callout 2 528K 2
ufs_quota 1 520K 1
vfs_hash 1 520K 1
sctp_atcl 507 507K 16942
sctp_stro 245 490K 5146
intr 4 480K 4
bus 990 378K 3499
kdtrace 492 365K 23172
BPF 46 337K 46
sctp_atky 753 283K 23102
linker 348 270K 528
umtx 616 270K 616
DEVFS1 107 214K 124
module 512 192K 512
sctp_athm 507 191K 17324
sctp_map 490 184K 10252
vnet_data 1 176K 1
tidhash 3 164K 3
pagedep 10 141K 9168
tfo_ccache 1 136K 1
sem 4 120K 4
UMA 270 102K 270
audit_evclass 236 89K 294
kqueue 206 85K 10079
vmem 3 80K 6
mtx_pool 2 80K 2
temp 35 77K 3104
syncache 1 76K 1
pwddesc 201 76K 9926
routetbl 127 69K 1112
msg 4 68K 4
ifaddr 70 66K 72
acpitask 1 64K 1
ddb_capture 1 64K 1
DEVFS3 126 63K 136
ether_multi 152 57K 182
gtaskqueue 18 57K 18
DEVFS_RULE 56 54K 56
kenv 95 52K 95
eventhandler 133 50K 133
ithread 99 43K 99
dirrem 83 42K 9085
rman 84 42K 425
lltable 46 40K 219
DEVFSP 102 39K 649
KTRACE 101 38K 600
taskqueue 60 36K 60
proc 3 34K 3
ufs_mount 5 34K 6
bus-sc 33 34K 1710
devstat 4 33K 4
sctp_timw 65 33K 65
hostcache 1 32K 1
tty 16 32K 16
shm 1 32K 33
freefile 82 31K 8969
inpcbpolicy 76 29K 5708
GEOM 60 29K 489
in6_multi 65 29K 65
ksem 17 28K 131
kbdmux 6 28K 6
cred 27 27K 380
ifnet 7 25K 7
plimit 24 24K 743
kcovinfo 64 24K 68
CAM queue 5 21K 1528
selfd 55 21K 123681
pfs_nodes 20 20K 20
proc-args 52 20K 695
session 39 20K 80
UART 12 18K 12
bmsafemap 2 17K 9385
rpc 2 16K 2
shmfd 1 16K 33
pfs_vncache 1 16K 1
ufs_dirhash 24 14K 24
sglist 5 13K 5
lockf 33 13K 337
MCA 32 12K 32
CAM DEV 3 12K 510
freework 23 12K 9030
vt 11 11K 11
pf_ifnet 14 11K 395
acpisem 28 11K 28
CAM XPT 22 11K 543
Unitno 27 11K 47
pf_osfp 26 10K 26
osd 25 10K 2563
xform 24 9K 1011
uidinfo 3 9K 26
memdesc 1 8K 1
ipsec-saq 2 8K 2
evdev 4 8K 4
acpidev 20 8K 20
hhook 15 8K 17
select 19 8K 336
mount 16 7K 90
fpukern_ctx 3 6K 3
terminal 11 6K 11
sctp_aadr 14 6K 100
ip6ndp 12 6K 13
freeblks 10 5K 8861
sctp_ifa 13 5K 14
ipsecpolicy 2 5K 2
encap_export_host 12 5K 12
clone 9 5K 9
local_apic 1 4K 1
io_apic 1 4K 1
sahead 1 4K 1
secasvar 1 4K 1
nhops 6 4K 8
pci_link 10 4K 10
filedesc_to_leader 10 4K 18
msi 9 4K 9
DEVFS 9 4K 10
ip_msource 9 4K 28
tun 7 4K 7
ipsec 3 3K 3
tcp_fsb 8 3K 522
mkdir 8 3K 17770
in_multi 6 3K 12
nexusdev 7 3K 7
feeder 7 3K 7
procdesc 5 3K 18
sctp_ifn 6 3K 14
mld 6 3K 6
igmp 6 3K 6
toponodes 6 3K 6
prison 6 3K 6
isadev 6 3K 6
softdep 1 2K 1
vnodemarker 2 2K 1346
NFSD session 1 2K 1
newdirblk 5 2K 8885
linux 5 2K 6
CAM periph 4 2K 271
filecaps 5 2K 116
crypto 4 2K 423
diradd 4 2K 9126
pfil 4 2K 4
CAM path 4 2K 1034
soname 4 2K 14648
freefrag 3 2K 54
tcpfunc 3 2K 3
loginclass 3 2K 6
sctp_stri 1 1K 1155
indirdep 2 1K 129
chacha20random 1 1K 1
vnodes 1 1K 11
CAM SIM 2 1K 2
ktls 1 1K 1
cdev 2 1K 2
aesni_data 2 1K 2
cpus 2 1K 2
atkbddev 2 1K 2
CAM dev queue 2 1K 2
entropy 2 1K 47
NFSD lckfile 1 1K 1
NFSD V4client 1 1K 1
pmchooks 1 1K 1
sctp_vrf 1 1K 1
apmdev 1 1K 1
CAM I/O Scheduler 1 1K 1
vnet_data_free 1 1K 1
vnet 1 1K 1
iov 1 1K 21906
Per-cpu 1 1K 1
p1003.1b 1 1K 1
acpiintr 1 1K 1
pmc 1 1K 1
mqdata 0 0K 0
pf_table 0 0K 177
pf_rule 0 0K 427
pf_altq 0 0K 0
pf_temp 0 0K 0
vegas data 0 0K 26
cubic data 0 0K 0
chd data 0 0K 10
dctcp data 0 0K 19
sctp_mcore 0 0K 0
sctp_socko 0 0K 8235
sctp_iter 0 0K 11
sctp_mvrf 0 0K 0
sctp_cpal 0 0K 2
sctp_cmsg 0 0K 0
sctp_stre 0 0K 0
sctp_athi 0 0K 0
sctp_a_it 0 0K 9
cdg data 0 0K 17
htcp data 0 0K 12
tcp_do 0 0K 0
NFSD V4lock 0 0K 0
madt_table 0 0K 2
smartpqi 0 0K 0
NFSD V4state 0 0K 0
NFSD srvcache 0 0K 0
msdosfs_fat 0 0K 0
msdosfs_mount 0 0K 0
msdosfs_node 0 0K 0
iavf 0 0K 0
ixl 0 0K 0
DEVFS4 0 0K 0
DEVFS2 0 0K 0
gntdev 0 0K 0
privcmd_dev 0 0K 0
ice-resmgr 0 0K 0
ice-osdep 0 0K 0
ice 0 0K 0
axgbe 0 0K 0
evtchn_dev 0 0K 0
xenstore 0 0K 0
ciss_data 0 0K 0
BACKLIGHT 0 0K 0
xnb 0 0K 0
xbbd 0 0K 0
xbd 0 0K 0
Balloon 0 0K 0
sysmouse 0 0K 0
vtfont 0 0K 0
xen_intr 0 0K 0
xen_hvm 0 0K 0
legacydrv 0 0K 0
qpidrv 0 0K 0
ath_hal 0 0K 0
athdev 0 0K 0
dmar_idpgtbl 0 0K 0
dmar_dom 0 0K 0
dmar_ctx 0 0K 0
ata_pci 0 0K 0
ata_dma 0 0K 0
ata_generic 0 0K 0
isci 0 0K 0
iommu_dmamap 0 0K 0
amr 0 0K 0
hyperv_socket 0 0K 0
bxe_ilt 0 0K 0
xenbus 0 0K 0
pvscsi 0 0K 0
scsi_da 0 0K 69
vm_fictitious 0 0K 0
ata_da 0 0K 0
scsi_ch 0 0K 0
scsi_cd 0 0K 0
AHCI driver 0 0K 0
USBdev 0 0K 0
USB 0 0K 0
agp 0 0K 0
nvme_da 0 0K 0
UMAHash 0 0K 0
acpipwr 0 0K 0
acpi_perf 0 0K 0
vm_pgdata 0 0K 0
jblocks 0 0K 0
savedino 0 0K 6974
sentinel 0 0K 0
jfsync 0 0K 0
jtrunc 0 0K 0
sbdep 0 0K 663
jsegdep 0 0K 0
jseg 0 0K 0
jfreefrag 0 0K 0
jfreeblk 0 0K 0
jnewblk 0 0K 0
jmvref 0 0K 0
jremref 0 0K 0
jaddref 0 0K 0
freedep 0 0K 0
allocindir 0 0K 0
allocdirect 0 0K 0
ufs_trim 0 0K 0
mactemp 0 0K 0
audit_trigger 0 0K 0
audit_pipe_presel 0 0K 0
audit_pipeent 0 0K 0
audit_pipe 0 0K 0
audit_evname 0 0K 0
audit_bsm 0 0K 0
audit_gidset 0 0K 0
audit_text 0 0K 0
audit_path 0 0K 0
audit_data 0 0K 0
audit_cred 0 0K 0
twsbuf 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5E_TLS 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EN 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5DUMP 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
seq_file 0 0K 0
radix 0 0K 0
idr 0 0K 0
lkpifw 0 0K 0
NLM 0 0K 0
ipsec-spdcache 0 0K 0
ipsec-reg 0 0K 0
ipsec-misc 0 0K 0
ipsecrequest 0 0K 0
ip6opt 0 0K 154
ip6_msource 0 0K 0
ip6_moptions 0 0K 0
in6_mfilter 0 0K 0
frag6 0 0K 0
tcplog 0 0K 0
tcp_hwpace 0 0K 0
twe_commands 0 0K 0
LRO 0 0K 0
newreno data 0 0K 0
ip_moptions 0 0K 39
in_mfilter 0 0K 72
ipid 0 0K 0
80211scan 0 0K 0
80211ratectl 0 0K 0
80211power 0 0K 0
80211nodeie 0 0K 0
80211node 0 0K 0
80211mesh_gt 0 0K 0
80211mesh_rt 0 0K 0
80211perr 0 0K 0
80211prep 0 0K 0
80211preq 0 0K 0
80211dfs 0 0K 0
80211crypto 0 0K 0
80211vap 0 0K 0
iflib 0 0K 0
vlan 0 0K 0
gif 0 0K 0
ifdescr 0 0K 0
zlib 0 0K 0
fadvise 0 0K 0
VN POLL 0 0K 17
twa_commands 0 0K 0
statfs 0 0K 9088
namei_tracker 0 0K 2
export_host 0 0K 0
cl_savebuf 0 0K 282
tcp_log_dev 0 0K 139
midi buffers 0 0K 0
mixer 0 0K 0
ac97 0 0K 0
hdacc 0 0K 0
hdac 0 0K 0
hdaa 0 0K 0
acpicmbat 0 0K 0
SIIS driver 0 0K 0
CAM CCB 0 0K 36135
PUC 0 0K 0
ppbusdev 0 0K 0
agtiapi_MemAlloc malloc 0 0K 0
osti_cacheable 0 0K 0
tempbuff 0 0K 0
biobuf 0 0K 0
aios 0 0K 0
lio 0 0K 0
acl 0 0K 0
tempbuff 0 0K 0
mbuf_tag 0 0K 189
ag_tgt_map_t malloc 0 0K 0
ag_slr_map_t malloc 0 0K 0
lDevFlags * malloc 0 0K 0
tiDeviceHandle_t * malloc 0 0K 0
ag_portal_data_t malloc 0 0K 0
ag_device_t malloc 0 0K 0
STLock malloc 0 0K 0
CCB List 0 0K 0
sr_iov 0 0K 0
OCS 0 0K 0
OCS 0 0K 0
nvme 0 0K 0
nvd 0 0K 0
netmap 0 0K 0
mwldev 0 0K 0
MVS driver 0 0K 0
CAM ccb queue 0 0K 0
mrsasbuf 0 0K 0
mpt_user 0 0K 0
mps_user 0 0K 0
accf 0 0K 0
pts 0 0K 0
ioctlops 0 0K 1552
eventfd 0 0K 0
Witness 0 0K 0
stack 0 0K 0
MPSSAS 0 0K 0
mps 0 0K 0
mpr_user 0 0K 0
MPRSAS 0 0K 0
mpr 0 0K 0
mfibuf 0 0K 0
sbuf 0 0K 288
md_sectors 0 0K 0
firmware 0 0K 0
compressor 0 0K 0
md_disk 0 0K 0
SWAP 0 0K 0
malodev 0 0K 0
LED 0 0K 0
sysctltmp 0 0K 813
sysctl 0 0K 3
ekcd 0 0K 0
dumper 0 0K 0
sendfile 0 0K 40
rctl 0 0K 0
ix_sriov 0 0K 0
aacraidcam 0 0K 0
aacraid_buf 0 0K 0
ix 0 0K 0
ipsbuf 0 0K 0
cache 0 0K 0
iirbuf 0 0K 0
prison_racct 0 0K 0
Fail Points 0 0K 0
sigio 0 0K 23
pwd 0 0K 0
tty console 0 0K 0
aaccam 0 0K 0
aacbuf 0 0K 0
zstd 0 0K 0
XZ_DEC 0 0K 0
nvlist 0 0K 0
SCSI ENC 0 0K 0
SCSI sa 0 0K 0
scsi_pass 0 0K 0
isofs_node 0 0K 0
isofs_mount 0 0K 0
tr_raid5_data 0 0K 0
tr_raid1e_data 0 0K 0
tr_raid1_data 0 0K 0
tr_raid0_data 0 0K 0
tr_concat_data 0 0K 0
md_sii_data 0 0K 0
md_promise_data 0 0K 0
md_nvidia_data 0 0K 0
md_jmicron_data 0 0K 0
md_intel_data 0 0K 0
md_ddf_data 0 0K 0
raid_data 0 0K 72
geom_flashmap 0 0K 0
tmpfs dir 0 0K 0
tmpfs name 0 0K 0
tmpfs mount 0 0K 0
NFS FHA 0 0K 0
newnfsmnt 0 0K 0
newnfsclient_req 0 0K 0
NFSCL layrecall 0 0K 0
NFSCL session 0 0K 0
NFSCL sockreq 0 0K 0
NFSCL devinfo 0 0K 0
NFSCL flayout 0 0K 0
NFSCL layout 0 0K 0
NFSD rollback 0 0K 0
NFSCL diroff 0 0K 0
NEWdirectio 0 0K 0
NEWNFSnode 0 0K 0
NFSCL lck 0 0K 0
NFSCL lckown 0 0K 0
NFSCL client 0 0K 0
NFSCL deleg 0 0K 0
NFSCL open 0 0K 0
NFSCL owner 0 0K 0
NFS fh 0 0K 0
NFS req 0 0K 0
NFSD usrgroup 0 0K 0
NFSD string 0 0K 0
db> show uma
Zone Size Used Free Requests Sleeps Bucket Total Mem XFree
mbuf_jumbo_page 4096 12963 503 82296 0 254 55156736 0
malloc-384 384 36101 139 86787 0 30 13916160 0
tcp_log 416 9192 5244 113634 0 254 6005376 0
malloc-32768 32768 150 5 9082 0 1 5079040 0
malloc-1024 1024 4155 33 5852 0 16 4288512 0
mbuf 256 14280 1110 1925957 0 254 3939840 0
malloc-8192 8192 329 2 1098 0 1 2711552 0
pbuf 2624 0 957 0 0 2 2511168 0
malloc-8192 8192 264 28 10878 0 1 2392064 0
UMA Slabs 0 112 17607 30 17607 0 126 1975344 0
BUF TRIE 144 359 13109 26370 0 62 1939392 0
RADIX NODE 144 10445 1844 338114 0 62 1769616 0
malloc-8192 8192 213 3 9976 0 1 1769472 0
tcp_bbr_map 128 8592 4366 383735 0 126 1658624 0
mbuf_cluster 2048 615 1 615 0 254 1261568 0
malloc-384 384 2182 398 133518 0 30 990720 0
malloc-384 384 2433 47 42757 0 30 952320 0
MAP ENTRY 96 9282 294 577473 0 126 919296 0
VM OBJECT 264 3137 88 146092 0 30 851400 0
malloc-1024 1024 763 49 19361 0 16 831488 0
ertt_txseginfo 40 8631 12074 1212330 0 254 828200 0
FFS inode 1160 632 26 9619 0 8 763280 0
sctp_asoc 2288 245 50 5126 0 254 674960 0
malloc-1024 1024 161 451 10217 0 16 626688 0
malloc-2048 2048 253 37 5642 0 8 593920 0
malloc-512 512 200 960 30989 0 30 593920 0
THREAD 1808 287 21 13236 0 8 556864 0
malloc-65536 65536 1 7 211 0 1 524288 0
malloc-1024 1024 2 498 7215 0 16 512000 0
malloc-4096 4096 2 116 36315 0 2 483328 0
VMSPACE 2544 179 10 9911 0 4 480816 0
malloc-16384 16384 26 0 30 0 1 425984 0
malloc-384 384 1037 33 4861 0 30 410880 0
sctp_ep 1280 261 57 10875 0 254 407040 0
malloc-1024 1024 355 33 14628 0 16 397312 0
malloc-65536 65536 4 2 11 0 1 393216 0
256 Bucket 2048 157 29 22152 0 8 380928 0
lkpimm 160 1 2324 1 0 62 372000 0
lkpicurr 160 2 2323 2 0 62 372000 0
malloc-1024 1024 293 47 10986 0 16 348160 0
VNODE 448 670 86 9659 0 30 338688 0
malloc-65536 65536 0 5 18 0 1 327680 0
sctp_raddr 736 276 120 7315 0 254 291456 0
PROC 1328 203 10 9934 0 8 282864 0
malloc-384 384 685 25 1070 0 30 272640 0
malloc-16384 16384 11 4 274 0 1 245760 0
malloc-512 512 438 18 1289 0 30 233472 0
filedesc0 1072 201 16 9926 0 8 232624 0
socket 944 118 122 18273 0 254 226560 0
malloc-2048 2048 107 3 124 0 8 225280 0
DEVCTL 1024 0 216 132 0 0 221184 0
g_bio 408 0 540 98205 0 31 220320 0
vmem btag 56 3610 50 3610 0 254 204960 0
malloc-32768 32768 2 4 6 0 1 196608 0
UMA Zones 768 242 2 242 0 16 187392 0
FFS2 dinode 256 632 43 9618 0 62 172800 0
malloc-8192 8192 15 6 240 0 1 172032 0
sctp_chunk 152 454 664 11728 0 254 169936 0
mbuf_packet 256 71 544 39755 0 254 157440 0
malloc-384 384 289 81 133472 0 30 142080 0
S VFS Cache 104 1033 332 10272 0 126 141960 0
malloc-65536 65536 2 0 2 0 1 131072 0
clpbuf 2624 0 48 3833 0 16 125952 0
malloc-512 512 205 27 719 0 30 118784 0
ksiginfo 112 196 848 628 0 126 116928 0
128 Bucket 1024 65 38 4132 0 16 105472 0
malloc-16384 16384 6 0 6 0 1 98304 0
UMA Kegs 384 227 6 227 0 30 89472 0
tcpcb 1064 21 63 2551 0 254 89376 0
malloc-512 512 101 59 9774 0 30 81920 0
64 Bucket 512 92 44 13320 0 30 69632 0
malloc-384 384 121 59 8998 0 30 69120 0
malloc-65536 65536 1 0 1 0 1 65536 0
malloc-65536 65536 1 0 1 0 1 65536 0
malloc-32768 32768 0 2 8 0 1 65536 0
malloc-32768 32768 2 0 2 0 1 65536 0
malloc-16384 16384 1 3 10 0 1 65536 0
malloc-4096 4096 10 6 723 0 2 65536 0
tcp_inpcb 488 21 107 2551 0 254 62464 0
32 Bucket 256 127 113 26165 0 62 61440 0
malloc-8192 8192 2 5 9094 0 1 57344 0
malloc-1024 1024 53 3 57 0 16 57344 0
malloc-2048 2048 9 17 1593 0 8 53248 0
malloc-512 512 92 12 233 0 30 53248 0
malloc-16384 16384 3 0 3 0 1 49152 0
malloc-8192 8192 4 2 534 0 1 49152 0
malloc-4096 4096 5 7 547 0 2 49152 0
malloc-512 512 22 74 11401 0 30 49152 0
udplite_inpcb 488 44 52 2639 0 254 46848 0
malloc-2048 2048 18 4 22 0 8 45056 0
malloc-512 512 37 51 9295 0 30 45056 0
pcpu-8 8 4755 877 15061 0 254 45056 0
Files 80 337 213 37107 0 126 44000 0
TURNSTILE 136 309 6 309 0 62 42840 0
16 Bucket 144 126 154 3226 0 62 40320 0
malloc-384 384 47 53 2684 0 30 38400 0
pipe 744 23 27 595 0 16 37200 0
DIRHASH 1024 34 2 34 0 16 36864 0
NAMEI 1024 0 36 53925 0 16 36864 0
malloc-4096 4096 7 2 49 0 2 36864 0
malloc-16384 16384 2 0 2 0 1 32768 0
malloc-8192 8192 0 4 23 0 1 32768 0
malloc-4096 4096 8 0 199 0 2 32768 0
pcpu-64 64 486 26 486 0 254 32768 0
tcp_rack_pcb 832 8 28 522 0 16 29952 0
tcp_bbr_pcb 832 9 27 1121 0 16 29952 0
malloc-4096 4096 7 0 7 0 2 28672 0
malloc-512 512 32 24 1656 0 30 28672 0
SLEEPQUEUE 88 309 11 309 0 126 28160 0
KNOTE 160 28 147 83916 0 62 28000 0
itimer 352 0 77 228 0 30 27104 0
malloc-4096 4096 1 5 281 0 2 24576 0
PWD 32 129 627 8889 0 254 24192 0
2 Bucket 32 157 599 15972 0 254 24192 0
ttyinq 160 135 15 300 0 62 24000 0
ttyoutq 256 72 18 160 0 62 23040 0
malloc-2048 2048 9 1 9 0 8 20480 0
malloc-2048 2048 9 1 9 0 8 20480 0
malloc-2048 2048 4 6 140 0 8 20480 0
Mountpoints 2752 2 5 2 0 4 19264 0
malloc-16384 16384 1 0 1 0 1 16384 0
malloc-16384 16384 1 0 1 0 1 16384 0
sctp_stream_msg_out 112 104 40 1058 0 254 16128 0
sctp_laddr 48 108 228 3129 0 254 16128 0
tcp_rack_map 112 16 128 1038 0 126 16128 0
vtnet_tx_hdr 24 0 668 920713 0 254 16032 0
8 Bucket 80 44 156 2355 0 126 16000 0
unpcb 256 20 40 1628 0 254 15360 0
ertt 72 21 147 2551 0 126 12096 0
ripcb 488 5 19 244 0 254 11712 0
udp_inpcb 488 6 18 274 0 254 11712 0
kenv 258 15 30 1060 0 30 11610 0
routing nhops 256 27 18 34 0 62 11520 0
malloc-4
---
This report is generated by a bot. It may contain errors.
See https://goo.gl/tpsmEJ for more information about syzbot.
syzbot engineers can be reached at syzk...@googlegroups.com.
syzbot will keep track of this issue. See:
https://goo.gl/tpsmEJ#status for how to communicate with syzbot.
syzbot found the following issue on:
HEAD commit: c50346bc ath: bump the default node queue size to 128 fram..
git tree: https://github.com/freebsd/freebsd-src.git main
console output: https://syzkaller.appspot.com/x/log.txt?x=17c057add00000
dashboard link: https://syzkaller.appspot.com/bug?extid=9b96ea7a5ff8917d3fe4
Unfortunately, I don't have any reproducer for this issue yet.
IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+9b96ea...@syzkaller.appspotmail.com
panic: refcount 0xfffff80049c1036c wraparound
cpuid = 0
time = 1621754153
KDB: stack backtrace:
db_trace_self_wrapper() at db_trace_self_wrapper+0x47/frame 0xfffffe0094de08a0
vpanic() at vpanic+0x1c7/frame 0xfffffe0094de0900
panic() at panic+0x43/frame 0xfffffe0094de0960
_refcount_update_saturated() at _refcount_update_saturated+0x15/frame 0xfffffe0094de0970
vrele() at vrele+0x7e/frame 0xfffffe0094de0990
ktr_writerequest() at ktr_writerequest+0x735/frame 0xfffffe0094de0a80
ktr_submitrequest() at ktr_submitrequest+0x5e/frame 0xfffffe0094de0ab0
amd64_syscall() at amd64_syscall+0x5fa/frame 0xfffffe0094de0bf0
fast_syscall_common() at fast_syscall_common+0xf8/frame 0xfffffe0094de0bf0
--- syscall (0, FreeBSD ELF64, nosys), rip = 0x2e7aea, rsp = 0x7fffffffe428, rbp = 0x7fffffffe450 ---
KDB: enter: panic
[ thread pid 811 tid 100128 ]
Stopped at kdb_enter+0x67: movq $0,0x163736e(%rip)
db>
db> set $lines = 0
db> set $maxwidth = 0
db> show registers
cs 0x20
ds 0x3b
es 0x3b
fs 0x13
gs 0x1b
ss 0x28
rax 0x12
rcx 0xffffffff8113aa70 vprintf+0x140
rdx 0x1
rbx 0
rsp 0xfffffe0094de0880
rbp 0xfffffe0094de08a0
rsi 0
rdi 0xffffffff8113aaa6 vprintf+0x176
r8 0
r9 0x8080808080808080
r10 0xfffffe0094de0770
r11 0x1ff6bfff59c
r12 0xffffffff82267b90 ddb_dbbe
r13 0
r14 0xffffffff81a74c1a
r15 0xffffffff81a74c1a
rip 0xffffffff81131a97 kdb_enter+0x67
rflags 0x82
kdb_enter+0x67: movq $0,0x163736e(%rip)
db> show proc
Process 811 (syz-executor.3) at 0xfffff80049548530:
state: NORMAL
uid: 0 gids: 0, 0, 5
parent: pid 780 at 0xfffff8004992a530
ABI: FreeBSD ELF64
flag: 0x10004000 flag2: 0
arguments: /root/syz-executor.3
reaper: 0xfffff80004bc7530 reapsubtree: 1
sigparent: 20
vmspace: 0xfffffe0094fe89f0
(map 0xfffffe0094fe89f0)
(map.pmap 0xfffffe0094fe8ab0)
(pmap 0xfffffe0094fe8b10)
threads: 1
100128 Run CPU 0 syz-executor.3
db> ps
pid ppid pgrp uid state wmesg wchan cmd
9934 800 800 0 R syz-executor.2
9933 811 811 0 R syz-executor.3
9930 784 784 0 R (threaded) syz-executor.0
108719 Run CPU 1 syz-executor.0
113234 S sbwait 0xfffff80049e0ccd4 syz-executor.0
9638 1 784 0 S uwait 0xfffff800673abb00 syz-executor.0
9633 1 784 0 S umtxn 0xfffff80067399b00 syz-executor.0
9632 1 811 0 S uwait 0xfffff800673ab900 syz-executor.3
9629 1 811 0 S uwait 0xfffff8007ae92700 syz-executor.3
9627 1 784 0 S uwait 0xfffff800673abd00 syz-executor.0
9625 1 811 0 S uwait 0xfffff8007aba4d00 syz-executor.3
9624 1 784 0 S uwait 0xfffff800671e0100 syz-executor.0
9619 1 811 0 S uwait 0xfffff800672a4700 syz-executor.3
9617 1 784 0 S uwait 0xfffff800673ab700 syz-executor.0
9616 1 811 0 S uwait 0xfffff8007ae92d00 syz-executor.3
9613 1 784 0 S uwait 0xfffff8007ae23100 syz-executor.0
9611 1 811 0 S uwait 0xfffff800673ab300 syz-executor.3
9610 1 784 0 S uwait 0xfffff80067305300 syz-executor.0
9605 1 784 0 S uwait 0xfffff80067399f00 syz-executor.0
9601 1 784 0 S uwait 0xfffff8006728cd00 syz-executor.0
9596 1 784 0 S uwait 0xfffff80067399d00 syz-executor.0
9594 1 784 0 S uwait 0xfffff800673ab100 syz-executor.0
9559 1 800 0 S uwait 0xfffff8006728c100 syz-executor.2
9558 1 811 0 S uwait 0xfffff8007ae92f00 syz-executor.3
9552 1 800 0 S uwait 0xfffff8006728c300 syz-executor.2
9550 1 811 0 S uwait 0xfffff800672a4d00 syz-executor.3
9546 1 800 0 S uwait 0xfffff8007ae92100 syz-executor.2
9545 1 811 0 S uwait 0xfffff800673abf00 syz-executor.3
9540 1 811 0 S uwait 0xfffff8007ae92b00 syz-executor.3
9539 1 811 0 S uwait 0xfffff800672a4b00 syz-executor.3
8148 1 784 0 S uwait 0xfffff8007ae23f00 syz-executor.0
8147 1 811 0 S uwait 0xfffff800672a4f00 syz-executor.3
8138 1 784 0 S uwait 0xfffff80049b39f00 syz-executor.0
8137 1 811 0 S uwait 0xfffff8007ae23d00 syz-executor.3
8128 1 784 0 S uwait 0xfffff80067305100 syz-executor.0
8127 1 811 0 S uwait 0xfffff8007ae92300 syz-executor.3
8117 1 811 0 S uwait 0xfffff8007ae92500 syz-executor.3
8116 1 811 0 S uwait 0xfffff8006728c900 syz-executor.3
6764 1 800 0 S uwait 0xfffff800671e0900 syz-executor.2
6760 1 800 0 S uwait 0xfffff80049b39b00 syz-executor.2
6759 1 6756 0 S uwait 0xfffff8007ae23300 syz-executor.0
6754 1 6753 0 S uwait 0xfffff800671e0f00 syz-executor.0
6752 1 800 0 S uwait 0xfffff8007aba4700 syz-executor.2
6750 1 6749 0 S uwait 0xfffff8007ae3b700 syz-executor.0
6748 1 800 0 S uwait 0xfffff80049a3a700 syz-executor.2
6747 1 6745 0 S uwait 0xfffff80049dcbf00 syz-executor.0
6746 1 6745 0 S uwait 0xfffff8007ae23500 syz-executor.0
6744 1 800 0 S uwait 0xfffff8007ae3bb00 syz-executor.2
6706 1 811 0 S uwait 0xfffff80015dce700 syz-executor.3
6705 1 811 0 S umtxn 0xfffff80049a0f500 syz-executor.3
6701 1 811 0 S uwait 0xfffff8007ae23b00 syz-executor.3
6700 1 811 0 S uwait 0xfffff800671e0d00 syz-executor.3
6698 1 811 0 S uwait 0xfffff8007ae23900 syz-executor.3
6697 1 811 0 S uwait 0xfffff8007a15ab00 syz-executor.3
6695 1 811 0 S uwait 0xfffff8007ae3b100 syz-executor.3
6694 1 811 0 S uwait 0xfffff80049b39300 syz-executor.3
6692 1 811 0 S uwait 0xfffff8007ae3bd00 syz-executor.3
6691 1 811 0 S uwait 0xfffff8007a991b00 syz-executor.3
6688 1 811 0 S uwait 0xfffff8007a991700 syz-executor.3
6687 1 811 0 S uwait 0xfffff8007a991900 syz-executor.3
6683 1 811 0 S uwait 0xfffff8007aba4f00 syz-executor.3
6682 1 811 0 S uwait 0xfffff80049a3a300 syz-executor.3
6680 1 811 0 S uwait 0xfffff8007ae3b900 syz-executor.3
6679 1 811 0 S uwait 0xfffff8007a991f00 syz-executor.3
6677 1 811 0 S uwait 0xfffff8007a991300 syz-executor.3
6676 1 811 0 S uwait 0xfffff8007a991100 syz-executor.3
6674 1 811 0 S uwait 0xfffff8007ae3b500 syz-executor.3
6673 1 811 0 S uwait 0xfffff8007a15a700 syz-executor.3
6672 1 811 0 S uwait 0xfffff8007a991d00 syz-executor.3
6671 1 811 0 S uwait 0xfffff8007ae3b300 syz-executor.3
6565 1 784 0 S uwait 0xfffff8007a15ad00 syz-executor.0
6557 1 784 0 S uwait 0xfffff80049d64100 syz-executor.0
6553 1 785 0 S uwait 0xfffff8007a8bf300 syz-executor.1
6548 1 784 0 S uwait 0xfffff80049a3af00 syz-executor.0
6544 1 785 0 S uwait 0xfffff80049a3ab00 syz-executor.1
6538 1 785 0 S uwait 0xfffff8007a991500 syz-executor.1
6526 1 785 0 S uwait 0xfffff80049a3a500 syz-executor.1
6523 1 785 0 S uwait 0xfffff80049b1e900 syz-executor.1
6485 1 784 0 S uwait 0xfffff8007a66b700 syz-executor.0
6482 1 784 0 S uwait 0xfffff80049b39700 syz-executor.0
6473 1 784 0 S uwait 0xfffff8007a66b500 syz-executor.0
6469 1 784 0 S uwait 0xfffff80049c2cf00 syz-executor.0
6465 1 784 0 S uwait 0xfffff8007ae3bf00 syz-executor.0
6463 1 784 0 S uwait 0xfffff8007a15a300 syz-executor.0
6456 1 784 0 S uwait 0xfffff8007a8bfd00 syz-executor.0
6455 1 784 0 S uwait 0xfffff80049b39500 syz-executor.0
6453 1 784 0 S uwait 0xfffff8007a66b100 syz-executor.0
6451 1 784 0 S uwait 0xfffff8007aba4500 syz-executor.0
5733 1 800 0 S uwait 0xfffff80049dcb500 syz-executor.2
5723 1 800 0 S uwait 0xfffff8007a8bff00 syz-executor.2
5717 1 800 0 S uwait 0xfffff8007aba4b00 syz-executor.2
5712 1 784 0 S uwait 0xfffff80049dcb100 syz-executor.0
5705 1 784 0 S uwait 0xfffff80049c2c300 syz-executor.0
5700 1 784 0 S uwait 0xfffff80049b1ef00 syz-executor.0
5695 1 784 0 S uwait 0xfffff80049a3a100 syz-executor.0
5694 1 784 0 S uwait 0xfffff8007a8bf100 syz-executor.0
5640 1 811 0 S uwait 0xfffff80049d64d00 syz-executor.3
5635 1 811 0 S uwait 0xfffff8007a15a100 syz-executor.3
5631 1 811 0 S uwait 0xfffff8007a8bfb00 syz-executor.3
5628 1 811 0 S uwait 0xfffff80049d64f00 syz-executor.3
5627 1 811 0 S uwait 0xfffff8007a8bf900 syz-executor.3
5609 1 785 0 S uwait 0xfffff80015d9f100 syz-executor.1
5603 1 785 0 S uwait 0xfffff8007a15a900 syz-executor.1
5597 1 785 0 S uwait 0xfffff80015d47100 syz-executor.1
5591 1 785 0 S uwait 0xfffff8007a8bf500 syz-executor.1
5590 1 785 0 S uwait 0xfffff8007a8bf700 syz-executor.1
5219 1 811 0 S uwait 0xfffff8007a66bb00 syz-executor.3
5218 1 800 0 S uwait 0xfffff80049d64500 syz-executor.2
5217 1 785 0 S uwait 0xfffff80049d64b00 syz-executor.1
5208 1 785 0 S uwait 0xfffff8007a15a500 syz-executor.1
5207 1 800 0 S uwait 0xfffff80049a0f300 syz-executor.2
5206 1 811 0 S uwait 0xfffff80049dcb300 syz-executor.3
5197 1 800 0 S uwait 0xfffff80049b1e100 syz-executor.2
5196 1 785 0 S uwait 0xfffff80015dce100 syz-executor.1
5195 1 811 0 S uwait 0xfffff80049b1ed00 syz-executor.3
5186 1 811 0 S uwait 0xfffff80049b39d00 syz-executor.3
5185 1 811 0 S uwait 0xfffff80049dcb700 syz-executor.3
5005 1 785 0 S uwait 0xfffff800154b2100 syz-executor.1
5000 1 785 0 S uwait 0xfffff80049d64700 syz-executor.1
4998 1 785 0 S uwait 0xfffff8007a66b900 syz-executor.1
4994 1 785 0 S uwait 0xfffff80015d45b00 syz-executor.1
4993 1 785 0 S uwait 0xfffff80015d4ab00 syz-executor.1
4373 1 4373 65 Ss select 0xfffff80049b45d40 dhclient
3850 1 800 0 S uwait 0xfffff80049c2c900 syz-executor.2
3843 1 800 0 S uwait 0xfffff80015dce300 syz-executor.2
3841 1 785 0 S uwait 0xfffff80049d64900 syz-executor.1
3836 1 800 0 S uwait 0xfffff80049b1e500 syz-executor.2
3835 1 785 0 S uwait 0xfffff80015dceb00 syz-executor.1
3834 1 784 0 S uwait 0xfffff80049c2cb00 syz-executor.0
3832 1 784 0 S uwait 0xfffff80049dcb900 syz-executor.0
3828 1 784 0 S uwait 0xfffff80049a3a900 syz-executor.0
3827 1 800 0 S uwait 0xfffff80049b39100 syz-executor.2
3826 1 785 0 S uwait 0xfffff80049b1e700 syz-executor.1
3820 1 800 0 S uwait 0xfffff8007a15af00 syz-executor.2
3816 1 800 0 S uwait 0xfffff8007a66bd00 syz-executor.2
3810 1 800 0 S uwait 0xfffff80049b1eb00 syz-executor.2
3808 1 800 0 S uwait 0xfffff80049c2c700 syz-executor.2
3564 1 3564 0 Ss select 0xfffff8007a770d40 dhclient
3561 1 3561 0 Ss select 0xfffff8007a787d40 dhclient
3542 1 3542 65 Ss select 0xfffff8007a6642c0 dhclient
2805 1 2805 0 Ss select 0xfffff800494922c0 dhclient
2799 1 2799 0 Ss select 0xfffff8007a4878c0 dhclient
2779 1 2779 65 Ss select 0xfffff8007a03b140 dhclient
2005 1 2005 0 Ss select 0xfffff800494925c0 dhclient
2000 1 2000 0 Ss select 0xfffff80049492a40 dhclient
1980 1 1980 65 Ss select 0xfffff80049492740 dhclient
1738 1 784 0 S uwait 0xfffff80015c9a900 syz-executor.0
1731 1 784 0 S uwait 0xfffff80015d54500 syz-executor.0
1722 1 785 0 S uwait 0xfffff80049c2cd00 syz-executor.1
1721 1 784 0 S uwait 0xfffff80015d45f00 syz-executor.0
1719 1 785 0 S uwait 0xfffff80049a0f100 syz-executor.1
1711 1 785 0 S uwait 0xfffff80015d43d00 syz-executor.1
1705 1 785 0 S uwait 0xfffff80049a0f700 syz-executor.1
1703 1 785 0 S uwait 0xfffff80015d54300 syz-executor.1
1286 1285 785 0 SV uwait 0xfffff80015d47700 syz-executor.1
1285 1 785 0 DV ppwait 0xfffff800497d4f40 syz-executor.1
1204 1 1204 0 Ss select 0xfffff80049c9d740 dhclient
1201 1 1201 0 Ss select 0xfffff80049d31d40 dhclient
811 780 811 0 Rs CPU 0 syz-executor.3
800 780 800 0 Rs syz-executor.2
785 780 785 0 Rs syz-executor.1
784 780 784 0 Rs syz-executor.0
780 778 778 0 S (threaded) syz-fuzzer
100117 S uwait 0xfffff80015d94700 syz-fuzzer
100118 S uwait 0xfffff80015d9f500 syz-fuzzer
100119 S uwait 0xfffff80015d94b00 syz-fuzzer
100120 S kqread 0xfffff80015d54100 syz-fuzzer
100121 S uwait 0xfffff80015d94900 syz-fuzzer
100122 S uwait 0xfffff80015d4af00 syz-fuzzer
100123 S uwait 0xfffff80015d4a300 syz-fuzzer
100124 S uwait 0xfffff80015d4a500 syz-fuzzer
101307 S uwait 0xfffff80049b39900 syz-fuzzer
107463 S uwait 0xfffff8007aba4100 syz-fuzzer
778 776 778 0 Ss pause 0xfffff8004992ab10 csh
776 694 776 0 Ss select 0xfffff800493565c0 sshd
760 1 760 0 Ss+ ttyin 0xfffff80015465cb0 getty
759 1 759 0 Ss+ ttyin 0xfffff80015afa4b0 getty
758 1 758 0 Ss+ ttyin 0xfffff80015afacb0 getty
757 1 757 0 Ss+ ttyin 0xfffff80015b004b0 getty
756 1 756 0 Ss+ ttyin 0xfffff80015b00cb0 getty
755 1 755 0 Ss+ ttyin 0xfffff80015a864b0 getty
754 1 754 0 Ss+ ttyin 0xfffff80015a86cb0 getty
753 1 753 0 Ss+ ttyin 0xfffff80015a8b4b0 getty
752 1 752 0 Ss+ ttyin 0xfffff80015a8bcb0 getty
698 1 698 0 Ss nanslp 0xffffffff8273c560 cron
694 1 694 0 Ss select 0xfffff80049356d40 sshd
507 1 507 0 Ss select 0xfffff80049356ec0 syslogd
436 1 436 0 Ss select 0xfffff80015d49740 devd
435 1 435 65 Ss select 0xfffff800493a75c0 dhclient
350 1 350 0 Ss select 0xfffff800493a78c0 dhclient
347 1 347 0 Ss select 0xfffff80015d935c0 dhclient
23 0 0 0 DL vlruwt 0xfffff80015c9e530 [vnlru]
22 0 0 0 DL syncer 0xffffffff8282b9d0 [syncer]
21 0 0 0 DL (threaded) [bufdaemon]
100081 D qsleep 0xffffffff8282aa80 [bufdaemon]
100086 D - 0xffffffff8220ae80 [bufspacedaemon-0]
100098 D sdflush 0xfffff80004dfc4e8 [/ worker]
20 0 0 0 DL psleep 0xffffffff828528c8 [vmdaemon]
19 0 0 0 DL (threaded) [pagedaemon]
100079 D psleep 0xffffffff82846d38 [dom0]
100087 D launds 0xffffffff82846d44 [laundry: dom0]
100088 D umarcl 0xffffffff815cd2b0 [uma]
18 0 0 0 DL - 0xffffffff82570908 [rand_harvestq]
17 0 0 0 DL waiting 0xffffffff82ee1828 [sctp_iterator]
16 0 0 0 DL pftm 0xffffffff830d63c0 [pf purge]
15 0 0 0 DL - 0xffffffff828280dc [soaiod4]
9 0 0 0 DL - 0xffffffff828280dc [soaiod3]
8 0 0 0 DL - 0xffffffff828280dc [soaiod2]
7 0 0 0 DL - 0xffffffff828280dc [soaiod1]
6 0 0 0 DL (threaded) [cam]
100044 D - 0xffffffff82447dc0 [doneq0]
100045 D - 0xffffffff82447d40 [async]
100078 D - 0xffffffff82447c10 [scanner]
14 0 0 0 DL seqstat 0xfffff80004dcbc88 [sequencer 00]
5 0 0 0 DL crypto_ 0xfffff80004d99d80 [crypto returns 1]
4 0 0 0 DL crypto_ 0xfffff80004d99d30 [crypto returns 0]
3 0 0 0 DL crypto_ 0xffffffff82844220 [crypto]
13 0 0 0 DL (threaded) [geom]
100035 D - 0xffffffff8271bda0 [g_event]
100036 D - 0xffffffff8271bda8 [g_up]
100037 D - 0xffffffff8271bdb0 [g_down]
2 0 0 0 DL (threaded) [KTLS]
100028 D - 0xfffff80004c39d00 [thr_0]
100029 D - 0xfffff80004c39d80 [thr_1]
12 0 0 0 WL (threaded) [intr]
100012 I [swi5: fast taskq]
100015 I [swi6: task queue]
100017 I [swi6: Giant taskq]
100030 I [swi4: clock (0)]
100031 I [swi4: clock (1)]
100032 I [swi1: netisr 0]
100033 I [swi3: vm]
100046 I [irq24: virtio_pci0]
100047 I [irq25: virtio_pci0]
100048 I [irq26: virtio_pci0]
100049 I [irq27: virtio_pci0]
100050 I [irq28: virtio_pci1]
100051 I [irq29: virtio_pci1]
100052 I [irq30: virtio_pci1]
100053 I [irq31: virtio_pci1]
100054 I [irq32: virtio_pci1]
100059 I [irq10: virtio_pci2]
100061 I [irq1: atkbd0]
100062 I [irq12: psm0]
100063 I [swi0: uart uart++]
100071 I [swi1: pf send]
100084 I [swi1: hpts]
100085 I [swi1: hpts]
11 0 0 0 RL (threaded) [idle]
100003 CanRun [idle: cpu0]
100004 CanRun [idle: cpu1]
1 0 1 0 SLs wait 0xfffff80004bc7530 [init]
10 0 0 0 DL audit_w 0xffffffff82844730 [audit]
0 0 0 0 DLs (threaded) [kernel]
100000 D swapin 0xffffffff8271c330 [swapper]
100005 D - 0xfffff80004c63d00 [if_config_tqg_0]
100006 D - 0xfffff80004c63900 [softirq_0]
100007 D - 0xfffff80004c63500 [softirq_1]
100008 D - 0xfffff80004c63100 [if_io_tqg_0]
100009 D - 0xfffff80004c61d00 [if_io_tqg_1]
100010 D - 0xfffff80004c5fd00 [in6m_free taskq]
100011 D - 0xfffff80004c5f900 [aiod_kick taskq]
100013 D - 0xfffff80004c5f100 [kqueue_ctx taskq]
100014 D - 0xfffff80004c58d00 [pci_hp taskq]
100016 D - 0xfffff80004c58500 [inm_free taskq]
100018 D - 0xfffff80004c53d00 [linuxkpi_irq_wq]
100019 D - 0xfffff80004c53900 [thread taskq]
100020 D - 0xfffff80004c53500 [linuxkpi_short_wq_0]
100021 D - 0xfffff80004c53500 [linuxkpi_short_wq_1]
100022 D - 0xfffff80004c53500 [linuxkpi_short_wq_2]
100023 D - 0xfffff80004c53500 [linuxkpi_short_wq_3]
100024 D - 0xfffff80004c53100 [linuxkpi_long_wq_0]
100025 D - 0xfffff80004c53100 [linuxkpi_long_wq_1]
100026 D - 0xfffff80004c53100 [linuxkpi_long_wq_2]
100027 D - 0xfffff80004c53100 [linuxkpi_long_wq_3]
100034 D - 0xfffff80004c39900 [firmware taskq]
100038 D - 0xfffff80004c39500 [crypto_0]
100039 D - 0xfffff80004c39500 [crypto_1]
100055 D - 0xfffff800153dc900 [vtnet0 rxq 0]
100056 D - 0xfffff800153dc500 [vtnet0 txq 0]
100057 D - 0xfffff800153dc100 [vtnet0 rxq 1]
100058 D - 0xfffff800153c6d00 [vtnet0 txq 1]
100060 D vtbslp 0xfffff80015429500 [virtio_balloon]
100064 D - 0xfffff800153c6900 [mca taskq]
100069 D - 0xffffffff81e21530 [deadlkres]
100074 D - 0xfffff80015a1a500 [acpi_task_0]
100075 D - 0xfffff80015a1a500 [acpi_task_1]
100076 D - 0xfffff80015a1a500 [acpi_task_2]
100077 D - 0xfffff80004c39100 [CAM taskq]
9932 785 785 0 Z syz-executor.1
db> show all locks
Process 9930 (syz-executor.0) thread 0xfffffe009dcdb720 (108719)
exclusive sleep mutex umtxql (umtxql) r = 0 (0xffffffff8275e820) locked @ /syzkaller/managers/main/kernel/sys/kern/kern_umtx.c:932
Process 9930 (syz-executor.0) thread 0xfffffe009dcea740 (113234)
exclusive sx so_rcv_sx (so_rcv_sx) r = 0 (0xfffff80049e0cc78) locked @ /syzkaller/managers/main/kernel/sys/kern/uipc_sockbuf.c:467
Process 811 (syz-executor.3) thread 0xfffffe0094fec3a0 (100128)
exclusive sx ktrace_sx (ktrace_sx) r = 0 (0xffffffff8271e7e8) locked @ /syzkaller/managers/main/kernel/sys/kern/kern_ktrace.c:416
db> show malloc
Type InUse MemUse Requests
sysctloid 34288 12858K 34355
pf_hash 5 11560K 5
devbuf 4216 6982K 4244
filedesc 294 4743K 17871
tcp_hpts 5 3219K 5
pcb 558 2966K 23564
kobj 328 2624K 488
vtbuf 24 2064K 46
subproc 418 1846K 10192
newblk 56 1060K 12385
vfscache 3 1035K 3
acpica 1674 649K 55230
inodedep 96 615K 9728
callout 2 528K 2
ufs_quota 1 520K 1
vfs_hash 1 520K 1
sctp_atcl 507 507K 16942
sctp_stro 245 490K 5146
intr 4 480K 4
bus 990 378K 3499
kdtrace 492 365K 23172
BPF 46 337K 46
sctp_atky 753 283K 23102
linker 348 270K 528
umtx 616 270K 616
DEVFS1 107 214K 124
module 512 192K 512
sctp_athm 507 191K 17324
sctp_map 490 184K 10252
vnet_data 1 176K 1
tidhash 3 164K 3
pagedep 10 141K 9168
tfo_ccache 1 136K 1
sem 4 120K 4
UMA 270 102K 270
audit_evclass 236 89K 294
kqueue 206 85K 10079
vmem 3 80K 6
mtx_pool 2 80K 2
temp 35 77K 3104
syncache 1 76K 1
pwddesc 201 76K 9926
routetbl 127 69K 1112
msg 4 68K 4
ifaddr 70 66K 72
acpitask 1 64K 1
ddb_capture 1 64K 1
DEVFS3 126 63K 136
ether_multi 152 57K 182
gtaskqueue 18 57K 18
DEVFS_RULE 56 54K 56
kenv 95 52K 95
eventhandler 133 50K 133
ithread 99 43K 99
dirrem 83 42K 9085
rman 84 42K 425
lltable 46 40K 219
DEVFSP 102 39K 649
KTRACE 101 38K 600
taskqueue 60 36K 60
proc 3 34K 3
ufs_mount 5 34K 6
bus-sc 33 34K 1710
devstat 4 33K 4
sctp_timw 65 33K 65
hostcache 1 32K 1
tty 16 32K 16
shm 1 32K 33
freefile 82 31K 8969
inpcbpolicy 76 29K 5708
GEOM 60 29K 489
in6_multi 65 29K 65
ksem 17 28K 131
kbdmux 6 28K 6
cred 27 27K 380
ifnet 7 25K 7
plimit 24 24K 743
kcovinfo 64 24K 68
CAM queue 5 21K 1528
selfd 55 21K 123681
pfs_nodes 20 20K 20
proc-args 52 20K 695
session 39 20K 80
UART 12 18K 12
bmsafemap 2 17K 9385
rpc 2 16K 2
shmfd 1 16K 33
pfs_vncache 1 16K 1
ufs_dirhash 24 14K 24
sglist 5 13K 5
lockf 33 13K 337
MCA 32 12K 32
CAM DEV 3 12K 510
freework 23 12K 9030
vt 11 11K 11
pf_ifnet 14 11K 395
acpisem 28 11K 28
CAM XPT 22 11K 543
Unitno 27 11K 47
pf_osfp 26 10K 26
osd 25 10K 2563
xform 24 9K 1011
uidinfo 3 9K 26
memdesc 1 8K 1
ipsec-saq 2 8K 2
evdev 4 8K 4
acpidev 20 8K 20
hhook 15 8K 17
select 19 8K 336
mount 16 7K 90
fpukern_ctx 3 6K 3
terminal 11 6K 11
sctp_aadr 14 6K 100
ip6ndp 12 6K 13
freeblks 10 5K 8861
sctp_ifa 13 5K 14
ipsecpolicy 2 5K 2
encap_export_host 12 5K 12
clone 9 5K 9
local_apic 1 4K 1
io_apic 1 4K 1
sahead 1 4K 1
secasvar 1 4K 1
nhops 6 4K 8
pci_link 10 4K 10
filedesc_to_leader 10 4K 18
msi 9 4K 9
DEVFS 9 4K 10
ip_msource 9 4K 28
tun 7 4K 7
ipsec 3 3K 3
tcp_fsb 8 3K 522
mkdir 8 3K 17770
in_multi 6 3K 12
nexusdev 7 3K 7
feeder 7 3K 7
procdesc 5 3K 18
sctp_ifn 6 3K 14
mld 6 3K 6
igmp 6 3K 6
toponodes 6 3K 6
prison 6 3K 6
isadev 6 3K 6
softdep 1 2K 1
vnodemarker 2 2K 1346
NFSD session 1 2K 1
newdirblk 5 2K 8885
linux 5 2K 6
CAM periph 4 2K 271
filecaps 5 2K 116
crypto 4 2K 423
diradd 4 2K 9126
pfil 4 2K 4
CAM path 4 2K 1034
soname 4 2K 14648
freefrag 3 2K 54
tcpfunc 3 2K 3
loginclass 3 2K 6
sctp_stri 1 1K 1155
indirdep 2 1K 129
chacha20random 1 1K 1
vnodes 1 1K 11
CAM SIM 2 1K 2
ktls 1 1K 1
cdev 2 1K 2
aesni_data 2 1K 2
cpus 2 1K 2
atkbddev 2 1K 2
CAM dev queue 2 1K 2
entropy 2 1K 47
NFSD lckfile 1 1K 1
NFSD V4client 1 1K 1
pmchooks 1 1K 1
sctp_vrf 1 1K 1
apmdev 1 1K 1
CAM I/O Scheduler 1 1K 1
vnet_data_free 1 1K 1
vnet 1 1K 1
iov 1 1K 21906
Per-cpu 1 1K 1
p1003.1b 1 1K 1
acpiintr 1 1K 1
pmc 1 1K 1
mqdata 0 0K 0
pf_table 0 0K 177
pf_rule 0 0K 427
pf_altq 0 0K 0
pf_temp 0 0K 0
vegas data 0 0K 26
cubic data 0 0K 0
chd data 0 0K 10
dctcp data 0 0K 19
sctp_mcore 0 0K 0
sctp_socko 0 0K 8235
sctp_iter 0 0K 11
sctp_mvrf 0 0K 0
sctp_cpal 0 0K 2
sctp_cmsg 0 0K 0
sctp_stre 0 0K 0
sctp_athi 0 0K 0
sctp_a_it 0 0K 9
cdg data 0 0K 17
htcp data 0 0K 12
tcp_do 0 0K 0
NFSD V4lock 0 0K 0
madt_table 0 0K 2
smartpqi 0 0K 0
NFSD V4state 0 0K 0
NFSD srvcache 0 0K 0
msdosfs_fat 0 0K 0
msdosfs_mount 0 0K 0
msdosfs_node 0 0K 0
iavf 0 0K 0
ixl 0 0K 0
DEVFS4 0 0K 0
DEVFS2 0 0K 0
gntdev 0 0K 0
privcmd_dev 0 0K 0
ice-resmgr 0 0K 0
ice-osdep 0 0K 0
ice 0 0K 0
axgbe 0 0K 0
evtchn_dev 0 0K 0
xenstore 0 0K 0
ciss_data 0 0K 0
BACKLIGHT 0 0K 0
xnb 0 0K 0
xbbd 0 0K 0
xbd 0 0K 0
Balloon 0 0K 0
sysmouse 0 0K 0
vtfont 0 0K 0
xen_intr 0 0K 0
xen_hvm 0 0K 0
legacydrv 0 0K 0
qpidrv 0 0K 0
ath_hal 0 0K 0
athdev 0 0K 0
dmar_idpgtbl 0 0K 0
dmar_dom 0 0K 0
dmar_ctx 0 0K 0
ata_pci 0 0K 0
ata_dma 0 0K 0
ata_generic 0 0K 0
isci 0 0K 0
iommu_dmamap 0 0K 0
amr 0 0K 0
hyperv_socket 0 0K 0
bxe_ilt 0 0K 0
xenbus 0 0K 0
pvscsi 0 0K 0
scsi_da 0 0K 69
vm_fictitious 0 0K 0
ata_da 0 0K 0
scsi_ch 0 0K 0
scsi_cd 0 0K 0
AHCI driver 0 0K 0
USBdev 0 0K 0
USB 0 0K 0
agp 0 0K 0
nvme_da 0 0K 0
UMAHash 0 0K 0
acpipwr 0 0K 0
acpi_perf 0 0K 0
vm_pgdata 0 0K 0
jblocks 0 0K 0
savedino 0 0K 6974
sentinel 0 0K 0
jfsync 0 0K 0
jtrunc 0 0K 0
sbdep 0 0K 663
jsegdep 0 0K 0
jseg 0 0K 0
jfreefrag 0 0K 0
jfreeblk 0 0K 0
jnewblk 0 0K 0
jmvref 0 0K 0
jremref 0 0K 0
jaddref 0 0K 0
freedep 0 0K 0
allocindir 0 0K 0
allocdirect 0 0K 0
ufs_trim 0 0K 0
mactemp 0 0K 0
audit_trigger 0 0K 0
audit_pipe_presel 0 0K 0
audit_pipeent 0 0K 0
audit_pipe 0 0K 0
audit_evname 0 0K 0
audit_bsm 0 0K 0
audit_gidset 0 0K 0
audit_text 0 0K 0
audit_path 0 0K 0
audit_data 0 0K 0
audit_cred 0 0K 0
twsbuf 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5E_TLS 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EN 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5DUMP 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
seq_file 0 0K 0
radix 0 0K 0
idr 0 0K 0
lkpifw 0 0K 0
NLM 0 0K 0
ipsec-spdcache 0 0K 0
ipsec-reg 0 0K 0
ipsec-misc 0 0K 0
ipsecrequest 0 0K 0
ip6opt 0 0K 154
ip6_msource 0 0K 0
ip6_moptions 0 0K 0
in6_mfilter 0 0K 0
frag6 0 0K 0
tcplog 0 0K 0
tcp_hwpace 0 0K 0
twe_commands 0 0K 0
LRO 0 0K 0
newreno data 0 0K 0
ip_moptions 0 0K 39
in_mfilter 0 0K 72
ipid 0 0K 0
80211scan 0 0K 0
80211ratectl 0 0K 0
80211power 0 0K 0
80211nodeie 0 0K 0
80211node 0 0K 0
80211mesh_gt 0 0K 0
80211mesh_rt 0 0K 0
80211perr 0 0K 0
80211prep 0 0K 0
80211preq 0 0K 0
80211dfs 0 0K 0
80211crypto 0 0K 0
80211vap 0 0K 0
iflib 0 0K 0
vlan 0 0K 0
gif 0 0K 0
ifdescr 0 0K 0
zlib 0 0K 0
fadvise 0 0K 0
VN POLL 0 0K 17
twa_commands 0 0K 0
statfs 0 0K 9088
namei_tracker 0 0K 2
export_host 0 0K 0
cl_savebuf 0 0K 282
tcp_log_dev 0 0K 139
midi buffers 0 0K 0
mixer 0 0K 0
ac97 0 0K 0
hdacc 0 0K 0
hdac 0 0K 0
hdaa 0 0K 0
acpicmbat 0 0K 0
SIIS driver 0 0K 0
CAM CCB 0 0K 36135
PUC 0 0K 0
ppbusdev 0 0K 0
agtiapi_MemAlloc malloc 0 0K 0
osti_cacheable 0 0K 0
tempbuff 0 0K 0
biobuf 0 0K 0
aios 0 0K 0
lio 0 0K 0
acl 0 0K 0
tempbuff 0 0K 0
mbuf_tag 0 0K 189
ag_tgt_map_t malloc 0 0K 0
ag_slr_map_t malloc 0 0K 0
lDevFlags * malloc 0 0K 0
tiDeviceHandle_t * malloc 0 0K 0
ag_portal_data_t malloc 0 0K 0
ag_device_t malloc 0 0K 0
STLock malloc 0 0K 0
CCB List 0 0K 0
sr_iov 0 0K 0
OCS 0 0K 0
OCS 0 0K 0
nvme 0 0K 0
nvd 0 0K 0
netmap 0 0K 0
mwldev 0 0K 0
MVS driver 0 0K 0
CAM ccb queue 0 0K 0
mrsasbuf 0 0K 0
mpt_user 0 0K 0
mps_user 0 0K 0
accf 0 0K 0
pts 0 0K 0
ioctlops 0 0K 1552
eventfd 0 0K 0
Witness 0 0K 0
stack 0 0K 0
MPSSAS 0 0K 0
mps 0 0K 0
mpr_user 0 0K 0
MPRSAS 0 0K 0
mpr 0 0K 0
mfibuf 0 0K 0
sbuf 0 0K 288
md_sectors 0 0K 0
firmware 0 0K 0
compressor 0 0K 0
md_disk 0 0K 0
SWAP 0 0K 0
malodev 0 0K 0
LED 0 0K 0
sysctltmp 0 0K 813
sysctl 0 0K 3
ekcd 0 0K 0
dumper 0 0K 0
sendfile 0 0K 40
rctl 0 0K 0
ix_sriov 0 0K 0
aacraidcam 0 0K 0
aacraid_buf 0 0K 0
ix 0 0K 0
ipsbuf 0 0K 0
cache 0 0K 0
iirbuf 0 0K 0
prison_racct 0 0K 0
Fail Points 0 0K 0
sigio 0 0K 23
pwd 0 0K 0
tty console 0 0K 0
aaccam 0 0K 0
aacbuf 0 0K 0
zstd 0 0K 0
XZ_DEC 0 0K 0
nvlist 0 0K 0
SCSI ENC 0 0K 0
SCSI sa 0 0K 0
scsi_pass 0 0K 0
isofs_node 0 0K 0
isofs_mount 0 0K 0
tr_raid5_data 0 0K 0
tr_raid1e_data 0 0K 0
tr_raid1_data 0 0K 0
tr_raid0_data 0 0K 0
tr_concat_data 0 0K 0
md_sii_data 0 0K 0
md_promise_data 0 0K 0
md_nvidia_data 0 0K 0
md_jmicron_data 0 0K 0
md_intel_data 0 0K 0
md_ddf_data 0 0K 0
raid_data 0 0K 72
geom_flashmap 0 0K 0
tmpfs dir 0 0K 0
tmpfs name 0 0K 0
tmpfs mount 0 0K 0
NFS FHA 0 0K 0
newnfsmnt 0 0K 0
newnfsclient_req 0 0K 0
NFSCL layrecall 0 0K 0
NFSCL session 0 0K 0
NFSCL sockreq 0 0K 0
NFSCL devinfo 0 0K 0
NFSCL flayout 0 0K 0
NFSCL layout 0 0K 0
NFSD rollback 0 0K 0
NFSCL diroff 0 0K 0
NEWdirectio 0 0K 0
NEWNFSnode 0 0K 0
NFSCL lck 0 0K 0
NFSCL lckown 0 0K 0
NFSCL client 0 0K 0
NFSCL deleg 0 0K 0
NFSCL open 0 0K 0
NFSCL owner 0 0K 0
NFS fh 0 0K 0
NFS req 0 0K 0
NFSD usrgroup 0 0K 0
NFSD string 0 0K 0
db> show uma
Zone Size Used Free Requests Sleeps Bucket Total Mem XFree
mbuf_jumbo_page 4096 12963 503 82296 0 254 55156736 0
malloc-384 384 36101 139 86787 0 30 13916160 0
tcp_log 416 9192 5244 113634 0 254 6005376 0
malloc-32768 32768 150 5 9082 0 1 5079040 0
malloc-1024 1024 4155 33 5852 0 16 4288512 0
mbuf 256 14280 1110 1925957 0 254 3939840 0
malloc-8192 8192 329 2 1098 0 1 2711552 0
pbuf 2624 0 957 0 0 2 2511168 0
malloc-8192 8192 264 28 10878 0 1 2392064 0
UMA Slabs 0 112 17607 30 17607 0 126 1975344 0
BUF TRIE 144 359 13109 26370 0 62 1939392 0
RADIX NODE 144 10445 1844 338114 0 62 1769616 0
malloc-8192 8192 213 3 9976 0 1 1769472 0
tcp_bbr_map 128 8592 4366 383735 0 126 1658624 0
mbuf_cluster 2048 615 1 615 0 254 1261568 0
malloc-384 384 2182 398 133518 0 30 990720 0
malloc-384 384 2433 47 42757 0 30 952320 0
MAP ENTRY 96 9282 294 577473 0 126 919296 0
VM OBJECT 264 3137 88 146092 0 30 851400 0
malloc-1024 1024 763 49 19361 0 16 831488 0
ertt_txseginfo 40 8631 12074 1212330 0 254 828200 0
FFS inode 1160 632 26 9619 0 8 763280 0
sctp_asoc 2288 245 50 5126 0 254 674960 0
malloc-1024 1024 161 451 10217 0 16 626688 0
malloc-2048 2048 253 37 5642 0 8 593920 0
malloc-512 512 200 960 30989 0 30 593920 0
THREAD 1808 287 21 13236 0 8 556864 0
malloc-65536 65536 1 7 211 0 1 524288 0
malloc-1024 1024 2 498 7215 0 16 512000 0
malloc-4096 4096 2 116 36315 0 2 483328 0
VMSPACE 2544 179 10 9911 0 4 480816 0
malloc-16384 16384 26 0 30 0 1 425984 0
malloc-384 384 1037 33 4861 0 30 410880 0
sctp_ep 1280 261 57 10875 0 254 407040 0
malloc-1024 1024 355 33 14628 0 16 397312 0
malloc-65536 65536 4 2 11 0 1 393216 0
256 Bucket 2048 157 29 22152 0 8 380928 0
lkpimm 160 1 2324 1 0 62 372000 0
lkpicurr 160 2 2323 2 0 62 372000 0
malloc-1024 1024 293 47 10986 0 16 348160 0
VNODE 448 670 86 9659 0 30 338688 0
malloc-65536 65536 0 5 18 0 1 327680 0
sctp_raddr 736 276 120 7315 0 254 291456 0
PROC 1328 203 10 9934 0 8 282864 0
malloc-384 384 685 25 1070 0 30 272640 0
malloc-16384 16384 11 4 274 0 1 245760 0
malloc-512 512 438 18 1289 0 30 233472 0
filedesc0 1072 201 16 9926 0 8 232624 0
socket 944 118 122 18273 0 254 226560 0
malloc-2048 2048 107 3 124 0 8 225280 0
DEVCTL 1024 0 216 132 0 0 221184 0
g_bio 408 0 540 98205 0 31 220320 0
vmem btag 56 3610 50 3610 0 254 204960 0
malloc-32768 32768 2 4 6 0 1 196608 0
UMA Zones 768 242 2 242 0 16 187392 0
FFS2 dinode 256 632 43 9618 0 62 172800 0
malloc-8192 8192 15 6 240 0 1 172032 0
sctp_chunk 152 454 664 11728 0 254 169936 0
mbuf_packet 256 71 544 39755 0 254 157440 0
malloc-384 384 289 81 133472 0 30 142080 0
S VFS Cache 104 1033 332 10272 0 126 141960 0
malloc-65536 65536 2 0 2 0 1 131072 0
clpbuf 2624 0 48 3833 0 16 125952 0
malloc-512 512 205 27 719 0 30 118784 0
ksiginfo 112 196 848 628 0 126 116928 0
128 Bucket 1024 65 38 4132 0 16 105472 0
malloc-16384 16384 6 0 6 0 1 98304 0
UMA Kegs 384 227 6 227 0 30 89472 0
tcpcb 1064 21 63 2551 0 254 89376 0
malloc-512 512 101 59 9774 0 30 81920 0
64 Bucket 512 92 44 13320 0 30 69632 0
malloc-384 384 121 59 8998 0 30 69120 0
malloc-65536 65536 1 0 1 0 1 65536 0
malloc-65536 65536 1 0 1 0 1 65536 0
malloc-32768 32768 0 2 8 0 1 65536 0
malloc-32768 32768 2 0 2 0 1 65536 0
malloc-16384 16384 1 3 10 0 1 65536 0
malloc-4096 4096 10 6 723 0 2 65536 0
tcp_inpcb 488 21 107 2551 0 254 62464 0
32 Bucket 256 127 113 26165 0 62 61440 0
malloc-8192 8192 2 5 9094 0 1 57344 0
malloc-1024 1024 53 3 57 0 16 57344 0
malloc-2048 2048 9 17 1593 0 8 53248 0
malloc-512 512 92 12 233 0 30 53248 0
malloc-16384 16384 3 0 3 0 1 49152 0
malloc-8192 8192 4 2 534 0 1 49152 0
malloc-4096 4096 5 7 547 0 2 49152 0
malloc-512 512 22 74 11401 0 30 49152 0
udplite_inpcb 488 44 52 2639 0 254 46848 0
malloc-2048 2048 18 4 22 0 8 45056 0
malloc-512 512 37 51 9295 0 30 45056 0
pcpu-8 8 4755 877 15061 0 254 45056 0
Files 80 337 213 37107 0 126 44000 0
TURNSTILE 136 309 6 309 0 62 42840 0
16 Bucket 144 126 154 3226 0 62 40320 0
malloc-384 384 47 53 2684 0 30 38400 0
pipe 744 23 27 595 0 16 37200 0
DIRHASH 1024 34 2 34 0 16 36864 0
NAMEI 1024 0 36 53925 0 16 36864 0
malloc-4096 4096 7 2 49 0 2 36864 0
malloc-16384 16384 2 0 2 0 1 32768 0
malloc-8192 8192 0 4 23 0 1 32768 0
malloc-4096 4096 8 0 199 0 2 32768 0
pcpu-64 64 486 26 486 0 254 32768 0
tcp_rack_pcb 832 8 28 522 0 16 29952 0
tcp_bbr_pcb 832 9 27 1121 0 16 29952 0
malloc-4096 4096 7 0 7 0 2 28672 0
malloc-512 512 32 24 1656 0 30 28672 0
SLEEPQUEUE 88 309 11 309 0 126 28160 0
KNOTE 160 28 147 83916 0 62 28000 0
itimer 352 0 77 228 0 30 27104 0
malloc-4096 4096 1 5 281 0 2 24576 0
PWD 32 129 627 8889 0 254 24192 0
2 Bucket 32 157 599 15972 0 254 24192 0
ttyinq 160 135 15 300 0 62 24000 0
ttyoutq 256 72 18 160 0 62 23040 0
malloc-2048 2048 9 1 9 0 8 20480 0
malloc-2048 2048 9 1 9 0 8 20480 0
malloc-2048 2048 4 6 140 0 8 20480 0
Mountpoints 2752 2 5 2 0 4 19264 0
malloc-16384 16384 1 0 1 0 1 16384 0
malloc-16384 16384 1 0 1 0 1 16384 0
sctp_stream_msg_out 112 104 40 1058 0 254 16128 0
sctp_laddr 48 108 228 3129 0 254 16128 0
tcp_rack_map 112 16 128 1038 0 126 16128 0
vtnet_tx_hdr 24 0 668 920713 0 254 16032 0
8 Bucket 80 44 156 2355 0 126 16000 0
unpcb 256 20 40 1628 0 254 15360 0
ertt 72 21 147 2551 0 126 12096 0
ripcb 488 5 19 244 0 254 11712 0
udp_inpcb 488 6 18 274 0 254 11712 0
kenv 258 15 30 1060 0 30 11610 0
routing nhops 256 27 18 34 0 62 11520 0
malloc-4
---
This report is generated by a bot. It may contain errors.
See https://goo.gl/tpsmEJ for more information about syzbot.
syzbot engineers can be reached at syzk...@googlegroups.com.
syzbot will keep track of this issue. See:
https://goo.gl/tpsmEJ#status for how to communicate with syzbot.
syzbot
May 23, 2021, 10:00:22 AM5/23/21
to syzkaller-f...@googlegroups.com
syzbot has found a reproducer for the following issue on:
HEAD commit: c50346bc ath: bump the default node queue size to 128 fram..
git tree: https://github.com/freebsd/freebsd-src.git main
console output: https://syzkaller.appspot.com/x/log.txt?x=11dd7fe3d00000
dashboard link: https://syzkaller.appspot.com/bug?extid=9b96ea7a5ff8917d3fe4
syz repro: https://syzkaller.appspot.com/x/repro.syz?x=164d07f7d00000
C reproducer: https://syzkaller.appspot.com/x/repro.c?x=1265034bd00000
IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+9b96ea...@syzkaller.appspotmail.com
login: panic: refcount 0xfffff8004d4a31ac wraparound
cpuid = 1
time = 1621778281
KDB: stack backtrace:
db_trace_self_wrapper() at db_trace_self_wrapper+0x47/frame 0xfffffe0094df9630
vpanic() at vpanic+0x1c7/frame 0xfffffe0094df9690
panic() at panic+0x43/frame 0xfffffe0094df96f0
_refcount_update_saturated() at _refcount_update_saturated+0x15/frame 0xfffffe0094df9700
vput() at vput+0xb5/frame 0xfffffe0094df9730
vn_close1() at vn_close1+0x209/frame 0xfffffe0094df97b0
vn_closefile() at vn_closefile+0x85/frame 0xfffffe0094df9840
_fdrop() at _fdrop+0x3a/frame 0xfffffe0094df9870
closef() at closef+0x28b/frame 0xfffffe0094df9900
fdescfree_fds() at fdescfree_fds+0x194/frame 0xfffffe0094df9960
fdescfree() at fdescfree+0x5a6/frame 0xfffffe0094df9a30
exit1() at exit1+0x705/frame 0xfffffe0094df9aa0
sys_sys_exit() at sys_sys_exit+0xd/frame 0xfffffe0094df9ab0
amd64_syscall() at amd64_syscall+0x247/frame 0xfffffe0094df9bf0
fast_syscall_common() at fast_syscall_common+0xf8/frame 0xfffffe0094df9bf0
--- syscall (1, FreeBSD ELF64, sys_sys_exit), rip = 0x29162a, rsp = 0x7fffffffe9e8, rbp = 0x7fffffffea00 ---
KDB: enter: panic
[ thread pid 795 tid 100104 ]
rdx 0xffffffff819c36cb
rbx 0
rsp 0xfffffe0094df9610
rbp 0xfffffe0094df9630
rsi 0x1
rdi 0
r8 0
r9 0x8080808080808080
r10 0xfffffe0094df9500
ABI: FreeBSD ELF64
flag: 0x10002000 flag2: 0
arguments: ./syz-executor922864684
(map 0xfffffe00559063e0)
(map.pmap 0xfffffe00559064a0)
(pmap 0xfffffe0055906500)
threads: 1
100104 Run CPU 1 syz-executor9228646
794 792 792 0 S nanslp 0xffffffff8273c561 syz-executor9228646
792 790 792 0 Ss pause 0xfffff80015eb35e0 csh
790 694 790 0 Ss select 0xfffff80015e0a740 sshd
758 1 758 0 Ss+ ttyin 0xfffff80015afccb0 getty
754 1 754 0 Ss+ ttyin 0xfffff80015a89cb0 getty
753 1 753 0 Ss+ ttyin 0xfffff80015a8c4b0 getty
752 1 752 0 Ss+ ttyin 0xfffff80015a8ccb0 getty
698 1 698 0 Ss nanslp 0xffffffff8273c561 cron
694 1 694 0 Ss select 0xfffff8004d458a40 sshd
507 1 507 0 Ss select 0xfffff8004d31cbc0 syslogd
436 1 436 0 Ss select 0xfffff80015de2bc0 devd
435 1 435 65 Ss select 0xfffff80015e38440 dhclient
350 1 350 0 Ss select 0xfffff80015e9dd40 dhclient
347 1 347 0 Ss select 0xfffff80015e9d2c0 dhclient
23 0 0 0 DL vlruwt 0xfffff80015ae7000 [vnlru]
100099 D sdflush 0xfffff80004dfc4e8 [/ worker]
100087 D umarcl 0xffffffff815cd2b0 [uma]
16 0 0 0 DL pftm 0xffffffff82d783c0 [pf purge]
100003 Run CPU 0 [idle: cpu0]
100066 D - 0xffffffff81e21530 [deadlkres]
100074 D - 0xfffff80015a1a900 [acpi_task_0]
100075 D - 0xfffff80015a1a900 [acpi_task_1]
100076 D - 0xfffff80015a1a900 [acpi_task_2]
Process 795 (syz-executor9228646) thread 0xfffffe0094f03560 (100104)
shared lockmgr ufs (ufs) r = 0 (0xfffff8004d4a3070) locked @ /syzkaller/managers/main/kernel/sys/kern/vfs_vnops.c:534
callout 2 528K 2
inodedep 3 522K 73
subproc 96 404K 848
bus 990 378K 3499
linker 348 270K 397
DEVFS1 103 206K 112
module 512 192K 512
pagedep 2 137K 20
syncache 1 76K 1
temp 18 71K 1646
msg 4 68K 4
BPF 10 68K 10
gtaskqueue 18 57K 18
vmem 3 56K 4
ifaddr 30 40K 32
KTRACE 101 38K 104
devstat 4 33K 4
GEOM 60 29K 489
kbdmux 6 28K 6
cred 22 22K 263
UART 12 18K 12
plimit 17 17K 374
bmsafemap 2 17K 42
kqueue 44 17K 798
pwddesc 43 17K 796
ksem 1 16K 1
rpc 2 16K 2
shmfd 1 16K 1
pfs_vncache 1 16K 1
ether_multi 40 15K 50
ufs_dirhash 24 14K 24
proc-args 36 14K 504
sglist 5 13K 5
in6_multi 25 11K 25
Unitno 27 11K 39
session 19 10K 34
lltable 11 9K 11
uidinfo 3 9K 11
ifnet 3 9K 3
pf_ifnet 5 6K 6
fpukern_ctx 3 6K 3
lockf 16 6K 29
terminal 11 6K 11
freefrag 14 6K 21
inpcbpolicy 10 4K 137
nhops 6 3K 6
osd 7 3K 19
ip6ndp 4 2K 5
DEVFSP 4 2K 9
tcpfunc 3 2K 3
tun 3 2K 3
loginclass 3 2K 7
indirdep 2 1K 4
in_multi 2 1K 4
xform 2 1K 49
mld 2 1K 2
igmp 2 1K 2
entropy 2 1K 36
tcp_do 0 0K 0
tcp_fsb 0 0K 0
mqdata 0 0K 0
dctcp data 0 0K 0
htcp data 0 0K 0
vegas data 0 0K 0
cdg data 0 0K 0
sctp_mcore 0 0K 0
sctp_socko 0 0K 0
sctp_iter 0 0K 3
sctp_mvrf 0 0K 0
sctp_timw 0 0K 0
sctp_cpal 0 0K 0
sctp_atky 0 0K 0
sctp_atcl 0 0K 0
sctp_a_it 0 0K 3
sctp_aadr 0 0K 0
sctp_stro 0 0K 0
sctp_stri 0 0K 0
sctp_map 0 0K 0
pf_table 0 0K 0
pf_rule 0 0K 0
pf_altq 0 0K 0
pf_osfp 0 0K 0
pf_temp 0 0K 0
savedino 0 0K 18
dirrem 0 0K 28
mkdir 0 0K 16
freefile 0 0K 26
freeblks 0 0K 25
ip6opt 0 0K 3
ip_moptions 0 0K 0
in_mfilter 0 0K 0
twa_commands 0 0K 0
statfs 0 0K 208
namei_tracker 0 0K 0
export_host 0 0K 0
cl_savebuf 0 0K 8
tcp_log_dev 0 0K 0
ioctlops 0 0K 86
filedesc_to_leader 0 0K 0
mbuf_jumbo_page 4096 8320 802 13355 0 254 37363712 0
malloc-384 384 34651 49 36569 0 30 13324800 0
malloc-1024 1024 4142 10 4423 0 16 4251648 0
malloc-8192 8192 329 1 489 0 1 2703360 0
pbuf 2624 0 973 0 0 2 2553152 0
mbuf 256 8577 813 15675 0 254 2403840 0
BUF TRIE 144 173 13295 484 0 62 1939392 0
UMA Slabs 0 112 11273 28 11273 0 126 1265712 0
malloc-384 384 1875 55 72306 0 30 741120 0
FFS inode 1160 489 22 515 0 8 592760 0
malloc-384 384 1263 27 3658 0 30 495360 0
malloc-8192 8192 53 5 805 0 1 475136 0
malloc-384 384 1010 10 3351 0 30 391680 0
malloc-512 512 220 324 922 0 30 278528 0
malloc-65536 65536 4 0 4 0 1 262144 0
VNODE 448 519 30 547 0 30 245952 0
VM OBJECT 264 864 66 12894 0 30 245520 0
THREAD 1808 121 11 121 0 8 238656 0
malloc-384 384 589 21 733 0 30 234240 0
malloc-16384 16384 11 3 273 0 1 229376 0
DEVCTL 1024 0 216 116 0 0 221184 0
malloc-2048 2048 103 3 112 0 8 217088 0
malloc-65536 65536 1 2 178 0 1 196608 0
malloc-1024 1024 155 5 928 0 16 163840 0
malloc-4096 4096 2 36 1847 0 2 155648 0
256 Bucket 2048 58 12 9933 0 8 143360 0
malloc-512 512 249 15 960 0 30 135168 0
FFS2 dinode 256 489 36 515 0 62 134400 0
vmem btag 56 2327 37 2327 0 254 132384 0
malloc-8192 8192 14 1 134 0 1 122880 0
ksiginfo 112 36 1008 68 0 126 116928 0
malloc-1024 1024 49 63 151 0 16 114688 0
S VFS Cache 104 983 70 1024 0 126 109512 0
MAP ENTRY 96 781 353 38597 0 126 108864 0
malloc-1024 1024 93 7 687 0 16 102400 0
malloc-512 512 71 65 393 0 30 69632 0
VMSPACE 2544 21 6 774 0 4 68688 0
PROC 1328 43 8 795 0 8 67728 0
filedesc0 1072 44 19 796 0 8 67536 0
mbuf_cluster 2048 30 2 30 0 254 65536 0
malloc-4096 4096 5 10 515 0 2 61440 0
malloc-384 384 90 70 9435 0 30 61440 0
malloc-384 384 68 52 585 0 30 46080 0
malloc-4096 4096 6 5 74 0 2 45056 0
malloc-2048 2048 9 11 1207 0 8 40960 0
128 Bucket 1024 22 17 139 0 16 39936 0
malloc-8192 8192 1 2 210 0 1 24576 0
malloc-8192 8192 3 0 3 0 1 24576 0
malloc-512 512 15 25 104 0 30 20480 0
malloc-512 512 12 28 1228 0 30 20480 0
2 Bucket 32 78 552 1434 0 254 20160 0
TURNSTILE 136 133 14 133 0 62 19992 0
tcpcb 1064 3 11 7 0 254 14896 0
pipe 744 6 14 291 0 16 14880 0
malloc-512 512 13 11 20 0 30 12288 0
Files 80 68 82 6618 0 126 12000 0
8 Bucket 80 33 117 389 0 126 12000 0
udp_inpcb 488 6 18 126 0 254 11712 0
kenv 258 15 30 1044 0 30 11610 0
unpcb 256 7 38 1102 0 254 11520 0
malloc-384 384 25 5 49 0 30 11520 0
malloc-2048 2048 4 0 4 0 8 8192 0
malloc-1024 1024 0 8 19 0 16 8192 0
rtentry 176 13 33 17 0 62 8096 0
PGRP 88 19 73 34 0 126 8096 0
ertt_txseginfo 40 0 202 208 0 254 8080 0
rl_entry 40 29 173 29 0 254 8080 0
sctp_laddr 48 0 168 4 0 254 8064 0
udpcb 32 6 246 126 0 254 8064 0
ertt 72 3 109 7 0 126 8064 0
PWD 32 10 242 106 0 254 8064 0
16 Bucket 144 41 15 1312 0 62 8064 0
4 Bucket 48 5 163 48 0 254 8064 0
vtnet_tx_hdr 24 0 334 1495 0 254 8016 0
tcp_inpcb 488 3 13 7 0 254 7808 0
routing nhops 256 10 20 17 0 62 7680 0
mbuf_packet 256 0 30 96 0 254 7680 0
FPU_save_area 832 1 8 1 0 16 7488 0
cpuset 104 7 55 7 0 126 6448 0
epoch_record pcpu 256 4 12 4 0 62 4096 0
malloc-2048 2048 0 2 4 0 8 4096 0
pcpu-16 16 7 249 7 0 254 4096 0
hostcache 64 1 62 1 0 254 4032 0
syncache 168 0 24 5 0 254 4032 0
KNOTE 160 0 25 8 0 62 4000 0
ripcb 488 1 7 4 0 254 3904 0
UMA Slabs 1 176 8 14 8 0 62 3872 0
mqnode 416 3 6 3 0 30 3744 0
KMAP ENTRY 96 12 27 12 0 0 3744 0
vmem 1856 1 1 1 0 8 3712 0
SMR CPU 32 3 60 3 0 254 2016 0
SMR SHARED 24 3 60 3 0 254 1512 0
FFS1 dinode 128 0 0 0 0 126 0 0
da_ccb 544 0 0 0 0 16 0 0
ada_ccb 272 0 0 0 0 30 0 0
swblk 136 0 0 0 0 62 0 0
swpctrie 144 0 0 0 0 62 0 0
sctp_asconf_ack 48 0 0 0 0 254 0 0
sctp_asconf 40 0 0 0 0 254 0 0
sctp_stream_msg_out 112 0 0 0 0 254 0 0
sctp_readq 152 0 0 0 0 254 0 0
sctp_chunk 152 0 0 0 0 254 0 0
sctp_raddr 736 0 0 0 0 254 0 0
sctp_asoc 2288 0 0 0 0 254 0 0
sctp_ep 1280 0 0 0 0 254 0 0
cdg_qdiffsample 16 0 0 0 0 254 0 0
pf state scrubs 40 0 0 0 0 254 0 0
pf frag entries 40 0 0 0 0 254 0 0
pf frags 248 0 0 0 0 62 0 0
pf table entries 160 0 0 0 0 62 0 0
pf table entry counters 64 0 0 0 0 254 0 0
pf source nodes 136 0 0 0 0 254 0 0
pf state keys 88 0 0 0 0 126 0 0
pf states 304 0 0 0 0 254 0 0
pf tags 104 0 0 0 0 126 0 0
pf mtags 48 0 0 0 0 254 0 0
tcp_rack_pcb 832 0 0 0 0 16 0 0
tcp_rack_map 112 0 0 0 0 126 0 0
tcp_bbr_pcb 832 0 0 0 0 16 0 0
tcp_bbr_map 128 0 0 0 0 126 0 0
udplite_inpcb 488 0 0 0 0 254 0 0
tcp_log_node 120 0 0 0 0 126 0 0
tcp_log_bucket 176 0 0 0 0 62 0 0
tcp_log 416 0 0 0 0 254 0 0
tcpreass 48 0 0 0 0 254 0 0
tfo_ccache_entries 80 0 0 0 0 126 0 0
tfo 4 0 0 0 0 254 0 0
sackhole 32 0 0 0 0 254 0 0
tcptw 88 0 0 0 0 254 0 0
ipq 56 0 0 0 0 254 0 0
IPsec SA lft_c 16 0 0 0 0 254 0 0
itimer 352 0 0 0 0 30 0 0
AIOLIO 272 0 0 0 0 30 0 0
AIOCB 552 0 0 0 0 16 0 0
AIOP 32 0 0 0 0 254 0 0
AIO 208 0 0 0 0 62 0 0
TMPFS node 224 0 0 0 0 62 0 0
mqnotifier 216 0 0 0 0 62 0 0
mvdata 64 0 0 0 0 254 0 0
mqueue 248 0 0 0 0 62 0 0
NCLNODE 584 0 0 0 0 16 0 0
LTS VFS Cache 360 0 0 0 0 30 0 0
L VFS Cache 320 0 0 0 0 30 0 0
STS VFS Cache 144 0 0 0 0 62 0 0
cryptop 280 0 0 0 0 30 0 0
linux_dma_object 24 0 0 0 0 254 0 0
linux_dma_pctrie 144 0 0 0 0 62 0 0
IOMMU_MAP_ENTRY 120 0 0 0 0 126 0 0
ktls_session 192 0 0 0 0 62 0 0
mbuf_jumbo_16k 16384 0 0 0 0 254 0 0
mbuf_jumbo_9k 9216 0 0 0 0 254 0 0
audit_record 1280 0 0 0 0 8 0 0
domainset 40 0 0 0 0 254 0 0
MAC labels 40 0 0 0 0 254 0 0
vnpbuf 2624 0 0 0 0 64 0 0
mdpbuf 2624 0 0 0 0 3 0 0
nfspbuf 2624 0 0 0 0 16 0 0
swwbuf 2624 0 0 0 0 8 0 0
swrbuf 2624 0 0 0 0 16 0 0
umtx_shm 88 0 0 0 0 126 0 0
umtx pi 96 0 0 0 0 126 0 0
rangeset pctrie nodes 144 0 0 0 0 62 0 0
malloc-65536 65536 0 0 0 0 1 0 0
malloc-65536 65536 0 0 0 0 1 0 0
malloc-65536 65536 0 0 0 0 1 0 0
malloc-32768 32768 0 0 0 0 1 0 0
malloc-32768 32768 0 0 0 0 1 0 0
malloc-32768 32768 0 0 0 0 1 0 0
malloc-32768 32768 0 0 0 0 1 0 0
malloc-32768 32768 0 0 0 0 1 0 0
malloc-8192 8192 0 0 0 0 1 0 0
malloc-8192 8192 0 0 0 0 1 0 0
malloc-4096 4096 0 0 0 0 2 0 0
malloc-256 256 0 0 0 0 62 0 0
malloc-256 256 0 0 0 0 62 0 0
malloc-256 256 0 0 0 0 62 0 0
malloc-256 256 0 0 0 0 62 0 0
malloc-256 256 0 0 0 0 62 0 0
malloc-256 256 0 0 0 0 62 0 0
malloc-256 256 0 0 0 0 62 0 0
malloc-256 256 0 0 0 0 62 0 0
malloc-128 128 0 0 0 0 126 0 0
malloc-128 128 0 0 0 0 126 0 0
malloc-128 128 0 0 0 0 126 0 0
malloc-128 128 0 0 0 0 126 0 0
malloc-128 128 0 0 0 0 126 0 0
malloc-128 128 0 0 0 0 126 0 0
malloc-128 128 0 0 0 0 126 0 0
malloc-128 128 0 0 0 0 126 0 0
malloc-64 64 0 0 0 0 254 0 0
malloc-64 64 0 0 0 0 254 0 0
malloc-64 64 0 0 0 0 254 0 0
malloc-64 64 0 0 0 0 254 0 0
malloc-64 64 0 0 0 0 254 0 0
malloc-64 64 0 0 0 0 254 0 0
malloc-64 64 0 0 0 0 254 0 0
malloc-64 64 0 0 0 0 254 0 0
malloc-32 32 0 0 0 0 254 0 0
malloc-32 32 0 0 0 0 254 0 0
malloc-32 32 0 0 0 0 254 0 0
malloc-32 32 0 0 0 0 254 0 0
malloc-32 32 0 0 0 0 254 0 0
malloc-32 32 0 0 0 0 254 0 0
malloc-32 32 0 0 0 0 254 0 0
malloc-32 32 0 0 0 0 254 0 0
malloc-16 16 0 0 0 0 254 0 0
malloc-16 16 0 0 0 0 254 0 0
malloc-16 16 0 0 0 0 254 0 0
malloc-16 16 0 0 0 0 254 0 0
malloc-16 16 0 0 0 0 254 0 0
malloc-16 16 0 0 0 0 254 0 0
malloc-16 16 0 0 0 0 254 0 0
malloc-16 16 0 0 0 0 254 0 0
pcpu-32 32 0 0 0 0 254 0 0
pcpu-4 4 0 0 0 0 254 0 0
fakepg 104 0 0 0 0 126 0 0
UMA Hash 256 0 0 0 0 62 0 0
HEAD commit: c50346bc ath: bump the default node queue size to 128 fram..
git tree: https://github.com/freebsd/freebsd-src.git main
dashboard link: https://syzkaller.appspot.com/bug?extid=9b96ea7a5ff8917d3fe4
syz repro: https://syzkaller.appspot.com/x/repro.syz?x=164d07f7d00000
C reproducer: https://syzkaller.appspot.com/x/repro.c?x=1265034bd00000
IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+9b96ea...@syzkaller.appspotmail.com
cpuid = 1
time = 1621778281
KDB: stack backtrace:
db_trace_self_wrapper() at db_trace_self_wrapper+0x47/frame 0xfffffe0094df9630
vpanic() at vpanic+0x1c7/frame 0xfffffe0094df9690
panic() at panic+0x43/frame 0xfffffe0094df96f0
_refcount_update_saturated() at _refcount_update_saturated+0x15/frame 0xfffffe0094df9700
vput() at vput+0xb5/frame 0xfffffe0094df9730
vn_close1() at vn_close1+0x209/frame 0xfffffe0094df97b0
vn_closefile() at vn_closefile+0x85/frame 0xfffffe0094df9840
_fdrop() at _fdrop+0x3a/frame 0xfffffe0094df9870
closef() at closef+0x28b/frame 0xfffffe0094df9900
fdescfree_fds() at fdescfree_fds+0x194/frame 0xfffffe0094df9960
fdescfree() at fdescfree+0x5a6/frame 0xfffffe0094df9a30
exit1() at exit1+0x705/frame 0xfffffe0094df9aa0
sys_sys_exit() at sys_sys_exit+0xd/frame 0xfffffe0094df9ab0
amd64_syscall() at amd64_syscall+0x247/frame 0xfffffe0094df9bf0
fast_syscall_common() at fast_syscall_common+0xf8/frame 0xfffffe0094df9bf0
--- syscall (1, FreeBSD ELF64, sys_sys_exit), rip = 0x29162a, rsp = 0x7fffffffe9e8, rbp = 0x7fffffffea00 ---
KDB: enter: panic
[ thread pid 795 tid 100104 ]
Stopped at kdb_enter+0x67: movq $0,0x163736e(%rip)
db>
db> set $lines = 0
db> set $maxwidth = 0
db> show registers
cs 0x20
ds 0x3b
es 0x3b
fs 0x13
gs 0x1b
ss 0x28
rax 0x12
rcx 0x80
db>
db> set $lines = 0
db> set $maxwidth = 0
db> show registers
cs 0x20
ds 0x3b
es 0x3b
fs 0x13
gs 0x1b
ss 0x28
rax 0x12
rdx 0xffffffff819c36cb
rbx 0
rsp 0xfffffe0094df9610
rbp 0xfffffe0094df9630
rsi 0x1
rdi 0
r8 0
r9 0x8080808080808080
r10 0xfffffe0094df9500
r11 0x1ff6bfff59c
r12 0xffffffff82267b90 ddb_dbbe
r13 0
r14 0xffffffff81a74c1a
r15 0xffffffff81a74c1a
rip 0xffffffff81131a97 kdb_enter+0x67
rflags 0x82
kdb_enter+0x67: movq $0,0x163736e(%rip)
db> show proc
Process 795 (syz-executor9228646) at 0xfffff80015eb6530:
r12 0xffffffff82267b90 ddb_dbbe
r13 0
r14 0xffffffff81a74c1a
r15 0xffffffff81a74c1a
rip 0xffffffff81131a97 kdb_enter+0x67
rflags 0x82
kdb_enter+0x67: movq $0,0x163736e(%rip)
db> show proc
state: NORMAL
uid: 0 gids: 0, 0, 5
parent: pid 794 at 0xfffff8004d425530
uid: 0 gids: 0, 0, 5
ABI: FreeBSD ELF64
flag: 0x10002000 flag2: 0
arguments: ./syz-executor922864684
reaper: 0xfffff80004bc7530 reapsubtree: 1
sigparent: 20
vmspace: 0xfffffe00559063e0
sigparent: 20
(map 0xfffffe00559063e0)
(map.pmap 0xfffffe00559064a0)
(pmap 0xfffffe0055906500)
threads: 1
100104 Run CPU 1 syz-executor9228646
db> ps
pid ppid pgrp uid state wmesg wchan cmd
795 794 792 0 RE CPU 1 syz-executor9228646
pid ppid pgrp uid state wmesg wchan cmd
794 792 792 0 S nanslp 0xffffffff8273c561 syz-executor9228646
792 790 792 0 Ss pause 0xfffff80015eb35e0 csh
790 694 790 0 Ss select 0xfffff80015e0a740 sshd
760 1 760 0 Ss+ ttyin 0xfffff80015465cb0 getty
759 1 759 0 Ss+ ttyin 0xfffff80015afc4b0 getty
758 1 758 0 Ss+ ttyin 0xfffff80015afccb0 getty
757 1 757 0 Ss+ ttyin 0xfffff80015b004b0 getty
756 1 756 0 Ss+ ttyin 0xfffff80015b00cb0 getty
755 1 755 0 Ss+ ttyin 0xfffff80015a894b0 getty
756 1 756 0 Ss+ ttyin 0xfffff80015b00cb0 getty
754 1 754 0 Ss+ ttyin 0xfffff80015a89cb0 getty
753 1 753 0 Ss+ ttyin 0xfffff80015a8c4b0 getty
752 1 752 0 Ss+ ttyin 0xfffff80015a8ccb0 getty
698 1 698 0 Ss nanslp 0xffffffff8273c561 cron
694 1 694 0 Ss select 0xfffff8004d458a40 sshd
507 1 507 0 Ss select 0xfffff8004d31cbc0 syslogd
436 1 436 0 Ss select 0xfffff80015de2bc0 devd
435 1 435 65 Ss select 0xfffff80015e38440 dhclient
350 1 350 0 Ss select 0xfffff80015e9dd40 dhclient
347 1 347 0 Ss select 0xfffff80015e9d2c0 dhclient
23 0 0 0 DL vlruwt 0xfffff80015ae7000 [vnlru]
22 0 0 0 DL syncer 0xffffffff8282b9d0 [syncer]
21 0 0 0 DL (threaded) [bufdaemon]
100081 D qsleep 0xffffffff8282aa80 [bufdaemon]
100088 D - 0xffffffff8220ae80 [bufspacedaemon-0]
21 0 0 0 DL (threaded) [bufdaemon]
100081 D qsleep 0xffffffff8282aa80 [bufdaemon]
100099 D sdflush 0xfffff80004dfc4e8 [/ worker]
20 0 0 0 DL psleep 0xffffffff828528c8 [vmdaemon]
19 0 0 0 DL (threaded) [pagedaemon]
100079 D psleep 0xffffffff82846d38 [dom0]
100086 D launds 0xffffffff82846d44 [laundry: dom0]
19 0 0 0 DL (threaded) [pagedaemon]
100079 D psleep 0xffffffff82846d38 [dom0]
100087 D umarcl 0xffffffff815cd2b0 [uma]
18 0 0 0 DL - 0xffffffff82570908 [rand_harvestq]
17 0 0 0 DL waiting 0xffffffff82f20828 [sctp_iterator]
16 0 0 0 DL pftm 0xffffffff82d783c0 [pf purge]
100074 D - 0xfffff80015a1a900 [acpi_task_0]
100075 D - 0xfffff80015a1a900 [acpi_task_1]
100076 D - 0xfffff80015a1a900 [acpi_task_2]
100077 D - 0xfffff80004c39100 [CAM taskq]
db> show all locks
Process 795 (syz-executor9228646) thread 0xfffffe0094f03560 (100104)
shared lockmgr ufs (ufs) r = 0 (0xfffff8004d4a3070) locked @ /syzkaller/managers/main/kernel/sys/kern/vfs_vnops.c:534
db> show malloc
Type InUse MemUse Requests
sysctloid 34288 12858K 34355
pf_hash 5 11560K 5
devbuf 4216 6982K 4244
tcp_hpts 5 3219K 5
Type InUse MemUse Requests
sysctloid 34288 12858K 34355
pf_hash 5 11560K 5
devbuf 4216 6982K 4244
kobj 328 2624K 488
vtbuf 24 2064K 46
newblk 163 1113K 722
vtbuf 24 2064K 46
vfscache 3 1035K 3
acpica 1674 649K 55230
pcb 23 612K 77
acpica 1674 649K 55230
callout 2 528K 2
inodedep 3 522K 73
ufs_quota 1 520K 1
vfs_hash 1 520K 1
intr 4 480K 4
vfs_hash 1 520K 1
subproc 96 404K 848
bus 990 378K 3499
linker 348 270K 397
DEVFS1 103 206K 112
module 512 192K 512
vnet_data 1 176K 1
tidhash 3 164K 3
kdtrace 166 139K 918
tidhash 3 164K 3
pagedep 2 137K 20
tfo_ccache 1 136K 1
sem 4 120K 4
umtx 264 116K 264
sem 4 120K 4
UMA 270 102K 270
audit_evclass 236 89K 294
mtx_pool 2 80K 2
audit_evclass 236 89K 294
syncache 1 76K 1
temp 18 71K 1646
msg 4 68K 4
BPF 10 68K 10
acpitask 1 64K 1
ddb_capture 1 64K 1
DEVFS3 122 61K 132
ddb_capture 1 64K 1
gtaskqueue 18 57K 18
vmem 3 56K 4
DEVFS_RULE 56 54K 56
kenv 95 52K 95
eventhandler 133 50K 133
ithread 99 43K 99
rman 84 42K 425
kenv 95 52K 95
eventhandler 133 50K 133
ithread 99 43K 99
ifaddr 30 40K 32
KTRACE 101 38K 104
taskqueue 60 36K 60
proc 3 34K 3
ufs_mount 5 34K 6
bus-sc 33 34K 1710
routetbl 50 34K 176
proc 3 34K 3
ufs_mount 5 34K 6
bus-sc 33 34K 1710
devstat 4 33K 4
hostcache 1 32K 1
tty 16 32K 16
shm 1 32K 1
tty 16 32K 16
GEOM 60 29K 489
kbdmux 6 28K 6
cred 22 22K 263
CAM queue 5 21K 1528
pfs_nodes 20 20K 20
UART 12 18K 12
plimit 17 17K 374
bmsafemap 2 17K 42
kqueue 44 17K 798
pwddesc 43 17K 796
ksem 1 16K 1
rpc 2 16K 2
shmfd 1 16K 1
pfs_vncache 1 16K 1
ether_multi 40 15K 50
ufs_dirhash 24 14K 24
proc-args 36 14K 504
sglist 5 13K 5
MCA 32 12K 32
CAM DEV 3 12K 510
vt 11 11K 11
CAM DEV 3 12K 510
in6_multi 25 11K 25
acpisem 28 11K 28
CAM XPT 22 11K 543
selfd 27 11K 9293
CAM XPT 22 11K 543
Unitno 27 11K 39
session 19 10K 34
lltable 11 9K 11
uidinfo 3 9K 11
ifnet 3 9K 3
memdesc 1 8K 1
ipsec-saq 2 8K 2
evdev 4 8K 4
filedesc 1 8K 1
ipsec-saq 2 8K 2
evdev 4 8K 4
acpidev 20 8K 20
hhook 15 8K 17
mount 16 7K 90
hhook 15 8K 17
pf_ifnet 5 6K 6
fpukern_ctx 3 6K 3
lockf 16 6K 29
terminal 11 6K 11
freefrag 14 6K 21
ipsecpolicy 2 5K 2
encap_export_host 12 5K 12
clone 9 5K 9
select 11 5K 33
encap_export_host 12 5K 12
clone 9 5K 9
local_apic 1 4K 1
io_apic 1 4K 1
sahead 1 4K 1
secasvar 1 4K 1
pci_link 10 4K 10
io_apic 1 4K 1
sahead 1 4K 1
secasvar 1 4K 1
inpcbpolicy 10 4K 137
msi 9 4K 9
DEVFS 9 4K 10
ipsec 3 3K 3
DEVFS 9 4K 10
nhops 6 3K 6
osd 7 3K 19
nexusdev 7 3K 7
feeder 7 3K 7
feeder 7 3K 7
toponodes 6 3K 6
prison 6 3K 6
isadev 6 3K 6
softdep 1 2K 1
vnodemarker 2 2K 42
prison 6 3K 6
isadev 6 3K 6
softdep 1 2K 1
NFSD session 1 2K 1
sctp_ifa 5 2K 6
linux 5 2K 6
CAM periph 4 2K 271
crypto 4 2K 4
CAM periph 4 2K 271
ip6ndp 4 2K 5
DEVFSP 4 2K 9
pfil 4 2K 4
CAM path 4 2K 1034
soname 4 2K 3237
CAM path 4 2K 1034
tcpfunc 3 2K 3
tun 3 2K 3
loginclass 3 2K 7
indirdep 2 1K 4
in_multi 2 1K 4
chacha20random 1 1K 1
vnodes 1 1K 1
vnodes 1 1K 1
CAM SIM 2 1K 2
ktls 1 1K 1
cdev 2 1K 2
aesni_data 2 1K 2
sctp_ifn 2 1K 6
ktls 1 1K 1
cdev 2 1K 2
aesni_data 2 1K 2
cpus 2 1K 2
atkbddev 2 1K 2
CAM dev queue 2 1K 2
diradd 2 1K 38
atkbddev 2 1K 2
CAM dev queue 2 1K 2
xform 2 1K 49
mld 2 1K 2
igmp 2 1K 2
entropy 2 1K 36
NFSD lckfile 1 1K 1
NFSD V4client 1 1K 1
procdesc 1 1K 6
NFSD V4client 1 1K 1
pmchooks 1 1K 1
sctp_vrf 1 1K 1
apmdev 1 1K 1
CAM I/O Scheduler 1 1K 1
freework 1 1K 26
sctp_vrf 1 1K 1
apmdev 1 1K 1
CAM I/O Scheduler 1 1K 1
vnet_data_free 1 1K 1
vnet 1 1K 1
vnet 1 1K 1
Per-cpu 1 1K 1
p1003.1b 1 1K 1
acpiintr 1 1K 1
pmc 1 1K 1
filecaps 1 1K 70
p1003.1b 1 1K 1
acpiintr 1 1K 1
pmc 1 1K 1
tcp_do 0 0K 0
tcp_fsb 0 0K 0
mqdata 0 0K 0
cubic data 0 0K 0
chd data 0 0K 0
dctcp data 0 0K 0
htcp data 0 0K 0
vegas data 0 0K 0
cdg data 0 0K 0
sctp_mcore 0 0K 0
sctp_socko 0 0K 0
sctp_iter 0 0K 3
sctp_mvrf 0 0K 0
sctp_timw 0 0K 0
sctp_cpal 0 0K 0
sctp_cmsg 0 0K 0
sctp_stre 0 0K 0
sctp_athi 0 0K 0
sctp_athm 0 0K 0
sctp_stre 0 0K 0
sctp_athi 0 0K 0
sctp_atky 0 0K 0
sctp_atcl 0 0K 0
sctp_a_it 0 0K 3
sctp_aadr 0 0K 0
sctp_stro 0 0K 0
sctp_stri 0 0K 0
sctp_map 0 0K 0
pf_table 0 0K 0
pf_rule 0 0K 0
pf_altq 0 0K 0
pf_osfp 0 0K 0
pf_temp 0 0K 0
sentinel 0 0K 0
jfsync 0 0K 0
jtrunc 0 0K 0
sbdep 0 0K 6
jfsync 0 0K 0
jtrunc 0 0K 0
sbdep 0 0K 6
jsegdep 0 0K 0
jseg 0 0K 0
jfreefrag 0 0K 0
jfreeblk 0 0K 0
jnewblk 0 0K 0
jmvref 0 0K 0
jremref 0 0K 0
jaddref 0 0K 0
freedep 0 0K 0
newdirblk 0 0K 8
jseg 0 0K 0
jfreefrag 0 0K 0
jfreeblk 0 0K 0
jnewblk 0 0K 0
jmvref 0 0K 0
jremref 0 0K 0
jaddref 0 0K 0
freedep 0 0K 0
dirrem 0 0K 28
mkdir 0 0K 16
freefile 0 0K 26
freeblks 0 0K 25
ip6_msource 0 0K 0
ip6_moptions 0 0K 0
in6_mfilter 0 0K 0
frag6 0 0K 0
tcplog 0 0K 0
tcp_hwpace 0 0K 0
twe_commands 0 0K 0
LRO 0 0K 0
newreno data 0 0K 0
ip_msource 0 0K 0
ip6_moptions 0 0K 0
in6_mfilter 0 0K 0
frag6 0 0K 0
tcplog 0 0K 0
tcp_hwpace 0 0K 0
twe_commands 0 0K 0
LRO 0 0K 0
newreno data 0 0K 0
ip_moptions 0 0K 0
in_mfilter 0 0K 0
ipid 0 0K 0
80211scan 0 0K 0
80211ratectl 0 0K 0
80211power 0 0K 0
80211nodeie 0 0K 0
80211node 0 0K 0
80211mesh_gt 0 0K 0
80211mesh_rt 0 0K 0
80211perr 0 0K 0
80211prep 0 0K 0
80211preq 0 0K 0
80211dfs 0 0K 0
80211crypto 0 0K 0
80211vap 0 0K 0
iflib 0 0K 0
vlan 0 0K 0
gif 0 0K 0
ifdescr 0 0K 0
zlib 0 0K 0
fadvise 0 0K 0
VN POLL 0 0K 0
80211scan 0 0K 0
80211ratectl 0 0K 0
80211power 0 0K 0
80211nodeie 0 0K 0
80211node 0 0K 0
80211mesh_gt 0 0K 0
80211mesh_rt 0 0K 0
80211perr 0 0K 0
80211prep 0 0K 0
80211preq 0 0K 0
80211dfs 0 0K 0
80211crypto 0 0K 0
80211vap 0 0K 0
iflib 0 0K 0
vlan 0 0K 0
gif 0 0K 0
ifdescr 0 0K 0
zlib 0 0K 0
fadvise 0 0K 0
twa_commands 0 0K 0
statfs 0 0K 208
namei_tracker 0 0K 0
export_host 0 0K 0
cl_savebuf 0 0K 8
tcp_log_dev 0 0K 0
midi buffers 0 0K 0
mixer 0 0K 0
ac97 0 0K 0
hdacc 0 0K 0
hdac 0 0K 0
hdaa 0 0K 0
acpicmbat 0 0K 0
SIIS driver 0 0K 0
CAM CCB 0 0K 1844
mixer 0 0K 0
ac97 0 0K 0
hdacc 0 0K 0
hdac 0 0K 0
hdaa 0 0K 0
acpicmbat 0 0K 0
SIIS driver 0 0K 0
PUC 0 0K 0
ppbusdev 0 0K 0
agtiapi_MemAlloc malloc 0 0K 0
osti_cacheable 0 0K 0
tempbuff 0 0K 0
biobuf 0 0K 0
aios 0 0K 0
lio 0 0K 0
acl 0 0K 0
tempbuff 0 0K 0
mbuf_tag 0 0K 27
ppbusdev 0 0K 0
agtiapi_MemAlloc malloc 0 0K 0
osti_cacheable 0 0K 0
tempbuff 0 0K 0
biobuf 0 0K 0
aios 0 0K 0
lio 0 0K 0
acl 0 0K 0
tempbuff 0 0K 0
ag_tgt_map_t malloc 0 0K 0
ag_slr_map_t malloc 0 0K 0
lDevFlags * malloc 0 0K 0
tiDeviceHandle_t * malloc 0 0K 0
ag_portal_data_t malloc 0 0K 0
ag_device_t malloc 0 0K 0
STLock malloc 0 0K 0
CCB List 0 0K 0
sr_iov 0 0K 0
OCS 0 0K 0
OCS 0 0K 0
nvme 0 0K 0
nvd 0 0K 0
netmap 0 0K 0
mwldev 0 0K 0
MVS driver 0 0K 0
CAM ccb queue 0 0K 0
mrsasbuf 0 0K 0
mpt_user 0 0K 0
mps_user 0 0K 0
accf 0 0K 0
pts 0 0K 0
iov 0 0K 13626
ag_slr_map_t malloc 0 0K 0
lDevFlags * malloc 0 0K 0
tiDeviceHandle_t * malloc 0 0K 0
ag_portal_data_t malloc 0 0K 0
ag_device_t malloc 0 0K 0
STLock malloc 0 0K 0
CCB List 0 0K 0
sr_iov 0 0K 0
OCS 0 0K 0
OCS 0 0K 0
nvme 0 0K 0
nvd 0 0K 0
netmap 0 0K 0
mwldev 0 0K 0
MVS driver 0 0K 0
CAM ccb queue 0 0K 0
mrsasbuf 0 0K 0
mpt_user 0 0K 0
mps_user 0 0K 0
accf 0 0K 0
pts 0 0K 0
ioctlops 0 0K 86
eventfd 0 0K 0
Witness 0 0K 0
stack 0 0K 0
MPSSAS 0 0K 0
mps 0 0K 0
mpr_user 0 0K 0
MPRSAS 0 0K 0
mpr 0 0K 0
mfibuf 0 0K 0
sbuf 0 0K 288
md_sectors 0 0K 0
firmware 0 0K 0
compressor 0 0K 0
md_disk 0 0K 0
SWAP 0 0K 0
malodev 0 0K 0
LED 0 0K 0
sysctltmp 0 0K 621
Witness 0 0K 0
stack 0 0K 0
MPSSAS 0 0K 0
mps 0 0K 0
mpr_user 0 0K 0
MPRSAS 0 0K 0
mpr 0 0K 0
mfibuf 0 0K 0
sbuf 0 0K 288
md_sectors 0 0K 0
firmware 0 0K 0
compressor 0 0K 0
md_disk 0 0K 0
SWAP 0 0K 0
malodev 0 0K 0
LED 0 0K 0
sysctl 0 0K 3
ekcd 0 0K 0
dumper 0 0K 0
sendfile 0 0K 0
ekcd 0 0K 0
dumper 0 0K 0
rctl 0 0K 0
ix_sriov 0 0K 0
aacraidcam 0 0K 0
aacraid_buf 0 0K 0
ix 0 0K 0
ipsbuf 0 0K 0
cache 0 0K 0
iirbuf 0 0K 0
kcovinfo 0 0K 0
ix_sriov 0 0K 0
aacraidcam 0 0K 0
aacraid_buf 0 0K 0
ix 0 0K 0
ipsbuf 0 0K 0
cache 0 0K 0
iirbuf 0 0K 0
prison_racct 0 0K 0
Fail Points 0 0K 0
sigio 0 0K 1
Fail Points 0 0K 0
filedesc_to_leader 0 0K 0
malloc-384 384 34651 49 36569 0 30 13324800 0
malloc-1024 1024 4142 10 4423 0 16 4251648 0
malloc-8192 8192 329 1 489 0 1 2703360 0
pbuf 2624 0 973 0 0 2 2553152 0
mbuf 256 8577 813 15675 0 254 2403840 0
BUF TRIE 144 173 13295 484 0 62 1939392 0
UMA Slabs 0 112 11273 28 11273 0 126 1265712 0
malloc-384 384 1875 55 72306 0 30 741120 0
FFS inode 1160 489 22 515 0 8 592760 0
malloc-384 384 1263 27 3658 0 30 495360 0
malloc-8192 8192 53 5 805 0 1 475136 0
malloc-384 384 1010 10 3351 0 30 391680 0
lkpimm 160 1 2324 1 0 62 372000 0
lkpicurr 160 2 2323 2 0 62 372000 0
RADIX NODE 144 2102 135 20605 0 62 322128 0
lkpicurr 160 2 2323 2 0 62 372000 0
malloc-512 512 220 324 922 0 30 278528 0
malloc-65536 65536 4 0 4 0 1 262144 0
VNODE 448 519 30 547 0 30 245952 0
VM OBJECT 264 864 66 12894 0 30 245520 0
THREAD 1808 121 11 121 0 8 238656 0
malloc-384 384 589 21 733 0 30 234240 0
malloc-16384 16384 11 3 273 0 1 229376 0
DEVCTL 1024 0 216 116 0 0 221184 0
malloc-2048 2048 103 3 112 0 8 217088 0
malloc-65536 65536 1 2 178 0 1 196608 0
UMA Zones 768 242 2 242 0 16 187392 0
malloc-16384 16384 10 1 14 0 1 180224 0
malloc-1024 1024 155 5 928 0 16 163840 0
malloc-4096 4096 2 36 1847 0 2 155648 0
256 Bucket 2048 58 12 9933 0 8 143360 0
malloc-512 512 249 15 960 0 30 135168 0
FFS2 dinode 256 489 36 515 0 62 134400 0
vmem btag 56 2327 37 2327 0 254 132384 0
malloc-65536 65536 2 0 2 0 1 131072 0
malloc-32768 32768 3 1 148 0 1 131072 0
malloc-8192 8192 14 1 134 0 1 122880 0
ksiginfo 112 36 1008 68 0 126 116928 0
malloc-1024 1024 49 63 151 0 16 114688 0
S VFS Cache 104 983 70 1024 0 126 109512 0
MAP ENTRY 96 781 353 38597 0 126 108864 0
malloc-1024 1024 93 7 687 0 16 102400 0
malloc-16384 16384 6 0 6 0 1 98304 0
malloc-512 512 168 16 197 0 30 94208 0
UMA Kegs 384 227 6 227 0 30 89472 0
clpbuf 2624 0 32 20 0 16 83968 0
malloc-512 512 71 65 393 0 30 69632 0
VMSPACE 2544 21 6 774 0 4 68688 0
PROC 1328 43 8 795 0 8 67728 0
filedesc0 1072 44 19 796 0 8 67536 0
mbuf_cluster 2048 30 2 30 0 254 65536 0
malloc-65536 65536 1 0 1 0 1 65536 0
malloc-65536 65536 1 0 1 0 1 65536 0
malloc-65536 65536 1 0 1 0 1 65536 0
malloc-32768 32768 2 0 2 0 1 65536 0
malloc-32768 32768 2 0 2 0 1 65536 0
g_bio 408 0 160 4835 0 30 65280 0
malloc-32768 32768 2 0 2 0 1 65536 0
malloc-4096 4096 5 10 515 0 2 61440 0
malloc-384 384 90 70 9435 0 30 61440 0
malloc-1024 1024 53 3 57 0 16 57344 0
32 Bucket 256 76 134 8586 0 62 53760 0
malloc-16384 16384 3 0 3 0 1 49152 0
malloc-16384 16384 1 2 5 0 1 49152 0
malloc-8192 8192 4 2 534 0 1 49152 0
malloc-2048 2048 8 16 516 0 8 49152 0
malloc-384 384 68 52 585 0 30 46080 0
malloc-4096 4096 6 5 74 0 2 45056 0
malloc-2048 2048 18 4 22 0 8 45056 0
NAMEI 1024 0 40 12247 0 16 40960 0
malloc-2048 2048 9 11 1207 0 8 40960 0
128 Bucket 1024 22 17 139 0 16 39936 0
DIRHASH 1024 34 2 34 0 16 36864 0
pcpu-8 8 4210 398 4238 0 254 36864 0
malloc-16384 16384 2 0 2 0 1 32768 0
malloc-4096 4096 6 2 22 0 2 32768 0
malloc-4096 4096 8 0 199 0 2 32768 0
malloc-1024 1024 30 2 31 0 16 32768 0
pcpu-64 64 486 26 486 0 254 32768 0
64 Bucket 512 43 21 1379 0 30 32768 0
malloc-4096 4096 7 0 7 0 2 28672 0
socket 944 18 10 1256 0 254 26432 0
malloc-8192 8192 1 2 210 0 1 24576 0
malloc-8192 8192 3 0 3 0 1 24576 0
ttyinq 160 135 15 300 0 62 24000 0
ttyoutq 256 72 18 160 0 62 23040 0
malloc-4096 4096 2 3 268 0 2 20480 0
ttyoutq 256 72 18 160 0 62 23040 0
malloc-2048 2048 9 1 9 0 8 20480 0
malloc-2048 2048 9 1 9 0 8 20480 0
malloc-1024 1024 2 18 23 0 16 20480 0
malloc-2048 2048 9 1 9 0 8 20480 0
malloc-512 512 15 25 104 0 30 20480 0
malloc-512 512 12 28 1228 0 30 20480 0
2 Bucket 32 78 552 1434 0 254 20160 0
TURNSTILE 136 133 14 133 0 62 19992 0
Mountpoints 2752 2 5 2 0 4 19264 0
SLEEPQUEUE 88 133 59 133 0 126 16896 0
malloc-16384 16384 1 0 1 0 1 16384 0
malloc-16384 16384 1 0 1 0 1 16384 0
malloc-512 512 14 18 303 0 30 16384 0
malloc-16384 16384 1 0 1 0 1 16384 0
tcpcb 1064 3 11 7 0 254 14896 0
pipe 744 6 14 291 0 16 14880 0
malloc-512 512 13 11 20 0 30 12288 0
Files 80 68 82 6618 0 126 12000 0
8 Bucket 80 33 117 389 0 126 12000 0
udp_inpcb 488 6 18 126 0 254 11712 0
kenv 258 15 30 1044 0 30 11610 0
unpcb 256 7 38 1102 0 254 11520 0
malloc-384 384 25 5 49 0 30 11520 0
malloc-2048 2048 4 0 4 0 8 8192 0
malloc-1024 1024 0 8 19 0 16 8192 0
rtentry 176 13 33 17 0 62 8096 0
PGRP 88 19 73 34 0 126 8096 0
ertt_txseginfo 40 0 202 208 0 254 8080 0
rl_entry 40 29 173 29 0 254 8080 0
sctp_laddr 48 0 168 4 0 254 8064 0
udpcb 32 6 246 126 0 254 8064 0
ertt 72 3 109 7 0 126 8064 0
PWD 32 10 242 106 0 254 8064 0
16 Bucket 144 41 15 1312 0 62 8064 0
4 Bucket 48 5 163 48 0 254 8064 0
vtnet_tx_hdr 24 0 334 1495 0 254 8016 0
tcp_inpcb 488 3 13 7 0 254 7808 0
routing nhops 256 10 20 17 0 62 7680 0
mbuf_packet 256 0 30 96 0 254 7680 0
FPU_save_area 832 1 8 1 0 16 7488 0
cpuset 104 7 55 7 0 126 6448 0
epoch_record pcpu 256 4 12 4 0 62 4096 0
malloc-2048 2048 0 2 4 0 8 4096 0
pcpu-16 16 7 249 7 0 254 4096 0
hostcache 64 1 62 1 0 254 4032 0
syncache 168 0 24 5 0 254 4032 0
KNOTE 160 0 25 8 0 62 4000 0
ripcb 488 1 7 4 0 254 3904 0
UMA Slabs 1 176 8 14 8 0 62 3872 0
mqnode 416 3 6 3 0 30 3744 0
KMAP ENTRY 96 12 27 12 0 0 3744 0
vmem 1856 1 1 1 0 8 3712 0
SMR CPU 32 3 60 3 0 254 2016 0
SMR SHARED 24 3 60 3 0 254 1512 0
FFS1 dinode 128 0 0 0 0 126 0 0
da_ccb 544 0 0 0 0 16 0 0
ada_ccb 272 0 0 0 0 30 0 0
swblk 136 0 0 0 0 62 0 0
swpctrie 144 0 0 0 0 62 0 0
sctp_asconf_ack 48 0 0 0 0 254 0 0
sctp_asconf 40 0 0 0 0 254 0 0
sctp_stream_msg_out 112 0 0 0 0 254 0 0
sctp_readq 152 0 0 0 0 254 0 0
sctp_chunk 152 0 0 0 0 254 0 0
sctp_raddr 736 0 0 0 0 254 0 0
sctp_asoc 2288 0 0 0 0 254 0 0
sctp_ep 1280 0 0 0 0 254 0 0
cdg_qdiffsample 16 0 0 0 0 254 0 0
pf state scrubs 40 0 0 0 0 254 0 0
pf frag entries 40 0 0 0 0 254 0 0
pf frags 248 0 0 0 0 62 0 0
pf table entries 160 0 0 0 0 62 0 0
pf table entry counters 64 0 0 0 0 254 0 0
pf source nodes 136 0 0 0 0 254 0 0
pf state keys 88 0 0 0 0 126 0 0
pf states 304 0 0 0 0 254 0 0
pf tags 104 0 0 0 0 126 0 0
pf mtags 48 0 0 0 0 254 0 0
tcp_rack_pcb 832 0 0 0 0 16 0 0
tcp_rack_map 112 0 0 0 0 126 0 0
tcp_bbr_pcb 832 0 0 0 0 16 0 0
tcp_bbr_map 128 0 0 0 0 126 0 0
udplite_inpcb 488 0 0 0 0 254 0 0
tcp_log_node 120 0 0 0 0 126 0 0
tcp_log_bucket 176 0 0 0 0 62 0 0
tcp_log 416 0 0 0 0 254 0 0
tcpreass 48 0 0 0 0 254 0 0
tfo_ccache_entries 80 0 0 0 0 126 0 0
tfo 4 0 0 0 0 254 0 0
sackhole 32 0 0 0 0 254 0 0
tcptw 88 0 0 0 0 254 0 0
ipq 56 0 0 0 0 254 0 0
IPsec SA lft_c 16 0 0 0 0 254 0 0
itimer 352 0 0 0 0 30 0 0
AIOLIO 272 0 0 0 0 30 0 0
AIOCB 552 0 0 0 0 16 0 0
AIOP 32 0 0 0 0 254 0 0
AIO 208 0 0 0 0 62 0 0
TMPFS node 224 0 0 0 0 62 0 0
mqnotifier 216 0 0 0 0 62 0 0
mvdata 64 0 0 0 0 254 0 0
mqueue 248 0 0 0 0 62 0 0
NCLNODE 584 0 0 0 0 16 0 0
LTS VFS Cache 360 0 0 0 0 30 0 0
L VFS Cache 320 0 0 0 0 30 0 0
STS VFS Cache 144 0 0 0 0 62 0 0
cryptop 280 0 0 0 0 30 0 0
linux_dma_object 24 0 0 0 0 254 0 0
linux_dma_pctrie 144 0 0 0 0 62 0 0
IOMMU_MAP_ENTRY 120 0 0 0 0 126 0 0
ktls_session 192 0 0 0 0 62 0 0
mbuf_jumbo_16k 16384 0 0 0 0 254 0 0
mbuf_jumbo_9k 9216 0 0 0 0 254 0 0
audit_record 1280 0 0 0 0 8 0 0
domainset 40 0 0 0 0 254 0 0
MAC labels 40 0 0 0 0 254 0 0
vnpbuf 2624 0 0 0 0 64 0 0
mdpbuf 2624 0 0 0 0 3 0 0
nfspbuf 2624 0 0 0 0 16 0 0
swwbuf 2624 0 0 0 0 8 0 0
swrbuf 2624 0 0 0 0 16 0 0
umtx_shm 88 0 0 0 0 126 0 0
umtx pi 96 0 0 0 0 126 0 0
rangeset pctrie nodes 144 0 0 0 0 62 0 0
malloc-65536 65536 0 0 0 0 1 0 0
malloc-65536 65536 0 0 0 0 1 0 0
malloc-65536 65536 0 0 0 0 1 0 0
malloc-32768 32768 0 0 0 0 1 0 0
malloc-32768 32768 0 0 0 0 1 0 0
malloc-32768 32768 0 0 0 0 1 0 0
malloc-32768 32768 0 0 0 0 1 0 0
malloc-32768 32768 0 0 0 0 1 0 0
malloc-8192 8192 0 0 0 0 1 0 0
malloc-8192 8192 0 0 0 0 1 0 0
malloc-4096 4096 0 0 0 0 2 0 0
malloc-256 256 0 0 0 0 62 0 0
malloc-256 256 0 0 0 0 62 0 0
malloc-256 256 0 0 0 0 62 0 0
malloc-256 256 0 0 0 0 62 0 0
malloc-256 256 0 0 0 0 62 0 0
malloc-256 256 0 0 0 0 62 0 0
malloc-256 256 0 0 0 0 62 0 0
malloc-256 256 0 0 0 0 62 0 0
malloc-128 128 0 0 0 0 126 0 0
malloc-128 128 0 0 0 0 126 0 0
malloc-128 128 0 0 0 0 126 0 0
malloc-128 128 0 0 0 0 126 0 0
malloc-128 128 0 0 0 0 126 0 0
malloc-128 128 0 0 0 0 126 0 0
malloc-128 128 0 0 0 0 126 0 0
malloc-128 128 0 0 0 0 126 0 0
malloc-64 64 0 0 0 0 254 0 0
malloc-64 64 0 0 0 0 254 0 0
malloc-64 64 0 0 0 0 254 0 0
malloc-64 64 0 0 0 0 254 0 0
malloc-64 64 0 0 0 0 254 0 0
malloc-64 64 0 0 0 0 254 0 0
malloc-64 64 0 0 0 0 254 0 0
malloc-64 64 0 0 0 0 254 0 0
malloc-32 32 0 0 0 0 254 0 0
malloc-32 32 0 0 0 0 254 0 0
malloc-32 32 0 0 0 0 254 0 0
malloc-32 32 0 0 0 0 254 0 0
malloc-32 32 0 0 0 0 254 0 0
malloc-32 32 0 0 0 0 254 0 0
malloc-32 32 0 0 0 0 254 0 0
malloc-32 32 0 0 0 0 254 0 0
malloc-16 16 0 0 0 0 254 0 0
malloc-16 16 0 0 0 0 254 0 0
malloc-16 16 0 0 0 0 254 0 0
malloc-16 16 0 0 0 0 254 0 0
malloc-16 16 0 0 0 0 254 0 0
malloc-16 16 0 0 0 0 254 0 0
malloc-16 16 0 0 0 0 254 0 0
malloc-16 16 0 0 0 0 254 0 0
pcpu-32 32 0 0 0 0 254 0 0
pcpu-4 4 0 0 0 0 254 0 0
fakepg 104 0 0 0 0 126 0 0
UMA Hash 256 0 0 0 0 62 0 0
Reply all
Reply to author
Forward
0 new messages