panic: Bad tailq NEXT(ADDR->tqh_last) != NULL (4)

3 views
Skip to first unread message

syzbot

unread,
Nov 25, 2020, 9:58:17 PM11/25/20
to syzkaller-f...@googlegroups.com
Hello,

syzbot found the following issue on:

HEAD commit: 8848cda9 A couple small fixes for the imx6_sdma driver...
git tree: freebsd
console output: https://syzkaller.appspot.com/x/log.txt?x=1620b7a5500000
dashboard link: https://syzkaller.appspot.com/bug?extid=ed6e8de942351d0309f4

Unfortunately, I don't have any reproducer for this issue yet.

IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+ed6e8d...@syzkaller.appspotmail.com

panic: Bad tailq NEXT(0xfffffe0025dfc610->tqh_last) != NULL
cpuid = 0
time = 1606359450
KDB: stack backtrace:
db_trace_self_wrapper() at db_trace_self_wrapper+0x47/frame 0xfffffe002ce314b0
vpanic() at vpanic+0x1c7/frame 0xfffffe002ce31510
panic() at panic+0x43/frame 0xfffffe002ce31570
sctp_ss_default_add() at sctp_ss_default_add+0x132/frame 0xfffffe002ce315b0
sctp_lower_sosend() at sctp_lower_sosend+0x5531/frame 0xfffffe002ce317a0
sctp_sosend() at sctp_sosend+0x4fc/frame 0xfffffe002ce318d0
sosend() at sosend+0xc6/frame 0xfffffe002ce31940
kern_sendit() at kern_sendit+0x35b/frame 0xfffffe002ce319f0
sendit() at sendit+0x229/frame 0xfffffe002ce31a50
sys_sendmsg() at sys_sendmsg+0x8b/frame 0xfffffe002ce31ab0
amd64_syscall() at amd64_syscall+0x247/frame 0xfffffe002ce31bf0
fast_syscall_common() at fast_syscall_common+0xf8/frame 0xfffffe002ce31bf0
--- syscall (198, FreeBSD ELF64, nosys), rip = 0x2838ea, rsp = 0x7fffdfffdf08, rbp = 0x7fffdfffdf70 ---
KDB: enter: panic
[ thread pid 4897 tid 108137 ]
Stopped at kdb_enter+0x67: movq $0,0x1472096(%rip)
db>
db> set $lines = 0
db> set $maxwidth = 0
db> show registers
cs 0x20
ds 0x3b
es 0x3b
fs 0x13
gs 0x1b
ss 0x28
rax 0x12
rcx 0xfffffe002b000000
rdx 0x3ffff
rbx 0
rsp 0xfffffe002ce31490
rbp 0xfffffe002ce314b0
rsi 0x40001
rdi 0xffffffff810f5096 vprintf+0x176
r8 0
r9 0xffffffff
r10 0x18
r11 0xfffffe0025850510
r12 0xffffffff820671c0 ddb_dbbe
r13 0
r14 0xffffffff8197ad94
r15 0xffffffff8197ad94
rip 0xffffffff810e9567 kdb_enter+0x67
rflags 0x86
kdb_enter+0x67: movq $0,0x1472096(%rip)
db> show proc
Process 4897 (syz-executor.3) at 0xfffff8001cff3000:
state: NORMAL
uid: 0 gids: 0, 0, 5
parent: pid 822 at 0xfffff8002e7f9a50
ABI: FreeBSD ELF64
arguments: /root/syz-executor.3
reaper: 0xfffff80004294528 reapsubtree: 1
sigparent: 20
vmspace: 0xfffffe00258ba000
(map 0xfffffe00258ba000)
(map.pmap 0xfffffe00258ba0c0)
(pmap 0xfffffe00258ba120)
threads: 2
100103 s syz-executor.3
108137 Run CPU 0 syz-executor.3
db> ps
pid ppid pgrp uid state wmesg wchan cmd
4897 822 822 0 T (threaded) syz-executor.3
100103 s syz-executor.3
108137 Run CPU 0 syz-executor.3
4893 812 812 0 T (threaded) syz-executor.2
102383 s syz-executor.2
108119 RunQ syz-executor.2
4890 764 764 0 T (threaded) syz-executor.0
100104 s syz-executor.0
108105 RunQ syz-executor.0
108107 RunQ syz-executor.0
3046 1 3046 65 Ss select 0xfffff8002e59b040 dhclient
2548 1 2548 0 Ss select 0xfffff8002ef70bc0 dhclient
2541 1 2541 0 Ss select 0xfffff8002ef70a40 dhclient
2521 1 2521 65 Ss select 0xfffff8002e59bb40 dhclient
1939 1 1939 0 Ss select 0xfffff8002ef706c0 dhclient
1935 1 1935 0 Ss select 0xfffff8002ef70ac0 dhclient
1915 1 1915 65 Ss select 0xfffff8002ef70d40 dhclient
1492 1 1492 0 Ss select 0xfffff8002e9232c0 dhclient
1486 1 1486 0 Ss select 0xfffff8002e9233c0 dhclient
1464 1 1464 65 Ss select 0xfffff8002e9231c0 dhclient
976 1 976 0 Ss select 0xfffff8002e923f40 dhclient
972 1 972 0 Ss select 0xfffff8001cfe60c0 dhclient
822 762 822 0 SWs wait 0xfffff8002e7f9a50 syz-executor.3
812 762 812 0 SWs wait 0xfffff8001cff3528 syz-executor.2
766 762 766 0 Ss piperd 0xfffff8002e73d2e8 syz-executor.1
764 762 764 0 SWs wait 0xfffff8002e11f000 syz-executor.0
762 760 760 0 R (threaded) syz-fuzzer
100108 S kqread 0xfffff80004ba3200 syz-fuzzer
100109 RunQ syz-fuzzer
100110 S uwait 0xfffff8001cf26b80 syz-fuzzer
100111 S uwait 0xfffff8002e103f00 syz-fuzzer
100112 S uwait 0xfffff8001ce61280 syz-fuzzer
100113 S uwait 0xfffff8001cfe6480 syz-fuzzer
100114 S uwait 0xfffff8001cfe6580 syz-fuzzer
100115 S uwait 0xfffff8001cfe6680 syz-fuzzer
100117 S uwait 0xfffff8001cfe6780 syz-fuzzer
760 758 760 0 SWs pause 0xfffff8001cfb35d8 csh
758 682 758 0 Ss select 0xfffff8001cfe6c40 sshd
742 1 742 0 Ss+ ttyin 0xfffff80004707cb0 getty
741 1 741 0 Ss+ ttyin 0xfffff800049e98b0 getty
740 1 740 0 Ss+ ttyin 0xfffff800049e9cb0 getty
739 1 739 0 Ss+ ttyin 0xfffff800049e10b0 getty
738 1 738 0 Ss+ ttyin 0xfffff800049e14b0 getty
737 1 737 0 Ss+ ttyin 0xfffff800049e18b0 getty
736 1 736 0 Ss+ ttyin 0xfffff800049e1cb0 getty
735 1 735 0 Ss+ ttyin 0xfffff800049850b0 getty
734 1 734 0 Ss+ ttyin 0xfffff800049854b0 getty
686 1 686 0 SWs nanslp 0xffffffff8252ed90 cron
682 1 682 0 Ss select 0xfffff8001cf26040 sshd
495 1 495 0 Ss select 0xfffff8001cf260c0 syslogd
424 1 424 0 Ss select 0xfffff8001cf26e40 devd
423 1 423 65 Ss select 0xfffff8001cf262c0 dhclient
338 1 338 0 Ss select 0xfffff8001cf26c40 dhclient
335 1 335 0 Ss select 0xfffff8001ce616c0 dhclient
23 0 0 0 DL syncer 0xffffffff8261c138 [syncer]
22 0 0 0 DL vlruwt 0xfffff800049f8528 [vnlru]
21 0 0 0 RL (threaded) [bufdaemon]
100070 RunQ [bufdaemon]
100077 D - 0xffffffff8200ac80 [bufspacedaemon-0]
100087 D sdflush 0xfffff800041818e8 [/ worker]
20 0 0 0 RL CPU 1 [vmdaemon]
19 0 0 0 DL (threaded) [pagedaemon]
100068 D psleep 0xffffffff82636af8 [dom0]
100075 D launds 0xffffffff82636b04 [laundry: dom0]
100076 D umarcl 0xffffffff814f4fa0 [uma]
18 0 0 0 DL - 0xffffffff82363278 [rand_harvestq]
17 0 0 0 DL waiting 0xffffffff82e16818 [sctp_iterator]
16 0 0 0 RL [pf purge]
15 0 0 0 DL - 0xffffffff8261a7dc [soaiod4]
9 0 0 0 DL - 0xffffffff8261a7dc [soaiod3]
8 0 0 0 DL - 0xffffffff8261a7dc [soaiod2]
7 0 0 0 DL - 0xffffffff8261a7dc [soaiod1]
6 0 0 0 DL (threaded) [cam]
100034 D - 0xffffffff8223afc0 [doneq0]
100067 D - 0xffffffff8223ae90 [scanner]
5 0 0 0 DL crypto_ 0xfffff80004350d90 [crypto returns 1]
4 0 0 0 DL crypto_ 0xfffff80004350d30 [crypto returns 0]
3 0 0 0 DL crypto_ 0xffffffff82634010 [crypto]
14 0 0 0 DL seqstat 0xfffff8000432a888 [sequencer 00]
13 0 0 0 DL (threaded) [geom]
100025 D - 0xffffffff8250e620 [g_event]
100026 D - 0xffffffff8250e628 [g_up]
100027 D - 0xffffffff8250e630 [g_down]
2 0 0 0 DL (threaded) [KTLS]
100018 D - 0xfffff800042b3300 [thr_0]
100019 D - 0xfffff800042b3380 [thr_1]
12 0 0 0 WL (threaded) [intr]
100012 I [swi5: fast taskq]
100015 I [swi6: task queue]
100016 I [swi6: Giant taskq]
100020 I [swi1: netisr 0]
100021 I [swi3: vm]
100022 I [swi4: clock (0)]
100023 I [swi4: clock (1)]
100035 I [irq24: virtio_pci0]
100036 I [irq25: virtio_pci0]
100037 I [irq26: virtio_pci0]
100038 I [irq27: virtio_pci0]
100039 I [irq28: virtio_pci1]
100040 I [irq29: virtio_pci1]
100041 I [irq30: virtio_pci1]
100042 I [irq31: virtio_pci1]
100043 I [irq32: virtio_pci1]
100048 I [irq10: virtio_pci2]
100050 I [irq1: atkbd0]
100051 I [irq12: psm0]
100052 I [swi0: uart uart++]
100060 I [swi1: pf send]
100073 I [swi1: hpts]
100074 I [swi1: hpts]
11 0 0 0 RL (threaded) [idle]
100003 CanRun [idle: cpu0]
100004 CanRun [idle: cpu1]
1 0 1 0 SLs wait 0xfffff80004294528 [init]
10 0 0 0 DL audit_w 0xffffffff82634530 [audit]
0 0 0 0 DLs (threaded) [kernel]
100000 D swapin 0xffffffff8250ebb0 [swapper]
100005 D - 0xfffff800042b8e00 [if_io_tqg_0]
100006 D - 0xfffff800042b8d00 [if_io_tqg_1]
100007 D - 0xfffff800042b8c00 [if_config_tqg_0]
100008 D - 0xfffff800042b8b00 [softirq_0]
100009 D - 0xfffff800042b8a00 [softirq_1]
100010 D - 0xfffff80004183200 [in6m_free taskq]
100011 D - 0xfffff80004183000 [thread taskq]
100013 D - 0xfffff800042b9b00 [inm_free taskq]
100014 D - 0xfffff800042b9900 [kqueue_ctx taskq]
100017 D - 0xfffff800042b9300 [aiod_kick taskq]
100024 D - 0xfffff800042d6800 [firmware taskq]
100029 D - 0xfffff800042d6100 [crypto_0]
100030 D - 0xfffff800042d6100 [crypto_1]
100044 D - 0xfffff80004353100 [vtnet0 rxq 0]
100045 D - 0xfffff80004353000 [vtnet0 txq 0]
100046 D - 0xfffff800046ebe00 [vtnet0 rxq 1]
100047 D - 0xfffff800046ebd00 [vtnet0 txq 1]
100049 D vtbslp 0xfffff8000449eb80 [virtio_balloon]
100053 D - 0xfffff800046fec00 [mca taskq]
100054 D - 0xffffffff81d22f01 [deadlkres]
100062 D - 0xfffff800049d2d00 [acpi_task_0]
100063 D - 0xfffff800049d2d00 [acpi_task_1]
100064 D - 0xfffff800049d2d00 [acpi_task_2]
100066 D - 0xfffff80004353900 [CAM taskq]
db> show all locks
Process 4897 (syz-executor.3) thread 0xfffffe0025850000 (108137)
exclusive sleep mutex sctp-send-tcb (tcbs) r = 0 (0xfffffe0025dfcab0) locked @ /syzkaller/managers/main/kernel/sys/netinet/sctp_output.c:13092
Process 4890 (syz-executor.0) thread 0xfffffe00257b0800 (108107)
exclusive sleep mutex vm reserv (vm reserv) r = 0 (0xfffff8007c7e4580) locked @ /syzkaller/managers/main/kernel/sys/vm/vm_reserv.c:855
exclusive rw kernel vm object (kernel vm object) r = 0 (0xffffffff82636360) locked @ /syzkaller/managers/main/kernel/sys/vm/vm_kern.c:473
Process 20 (vmdaemon) thread 0xfffffe0003d0e100 (100069)
exclusive sleep mutex process lock (process lock) r = 0 (0xfffff800042d0128) locked @ /syzkaller/managers/main/kernel/sys/vm/vm_swapout.c:799
shared sx allproc (allproc) r = 0 (0xffffffff82002740) locked @ /syzkaller/managers/main/kernel/sys/vm/vm_swapout.c:853
db> show malloc
Type InUse MemUse Requests
pf_hash 5 11524K 5
sctp_stro 12 10327K 1205
devbuf 4214 4339K 4242
tcp_hpts 5 3201K 5
vtbuf 24 1968K 46
sysctloid 29217 1704K 29281
kobj 337 1348K 498
newblk 5 1025K 7260
vfscache 3 1025K 3
pcb 54 569K 7132
inodedep 6 514K 8267
ufs_quota 1 512K 1
vfs_hash 1 512K 1
callout 2 512K 2
intr 4 472K 4
pf_rule 292 292K 3273
subproc 144 279K 4980
acpica 1674 184K 52405
vnet_data 1 168K 1
tidhash 3 141K 3
pagedep 9 130K 9459
tfo_ccache 1 128K 1
filedesc 16 121K 7875
sem 4 106K 4
DEVFS1 105 105K 122
linker 254 97K 294
BPF 46 88K 46
bus 983 79K 3045
mtx_pool 2 72K 2
syncache 1 68K 1
acpitask 1 64K 1
ddb_capture 1 64K 1
module 509 64K 509
temp 47 57K 5939
umtx 360 45K 360
kdtrace 211 42K 13042
hostcache 1 32K 1
shm 1 32K 10
DEVFS3 124 31K 134
msg 4 30K 4
gtaskqueue 18 26K 18
ifaddr 76 23K 76
vmem 3 22K 4
kbdmux 6 22K 6
DEVFS_RULE 56 20K 56
ufs_mount 5 17K 6
proc 3 17K 3
tty 16 16K 16
ithread 99 16K 99
ether_multi 172 14K 182
lltable 44 14K 71
bus-sc 30 14K 1422
KTRACE 100 13K 100
ifnet 7 13K 7
kenv 92 12K 92
eventhandler 125 11K 125
in6_multi 89 11K 89
pf_table 5 10K 27
routetbl 44 10K 132
sctp_atcl 26 10K 4113
GEOM 60 10K 489
rman 82 10K 423
sctp_timw 33 9K 33
bmsafemap 2 9K 4446
UART 12 9K 12
devstat 4 9K 4
rpc 2 8K 2
shmfd 1 8K 31
pfs_vncache 1 8K 1
pfs_nodes 20 8K 20
audit_evclass 233 8K 291
cred 26 7K 391
lockf 58 7K 283
kqueue 64 7K 4993
CAM DEV 3 6K 510
plimit 24 6K 2200
sglist 5 6K 5
CAM queue 5 6K 1528
taskqueue 48 6K 48
DEVFSP 78 5K 82
pf_ifnet 11 5K 31
session 35 5K 51
pgrp 35 5K 55
ufs_dirhash 16 5K 24
vt 11 5K 11
UMA 254 5K 254
memdesc 1 4K 1
MCA 32 4K 32
kcovinfo 64 4K 68
evdev 4 4K 4
pwddesc 62 4K 4898
selfd 55 4K 67868
hhook 13 4K 13
proc-args 52 3K 663
terminal 11 3K 11
acpisem 22 3K 22
select 19 3K 3933
uidinfo 4 3K 25
sctp_ifa 17 3K 19
local_apic 1 2K 1
io_apic 1 2K 1
ipsec-saq 2 2K 2
ip6ndp 12 2K 21
CAM XPT 22 2K 543
sctp_atky 38 2K 4782
in_multi 6 2K 8
Unitno 25 2K 57
ipsecpolicy 2 2K 2
acpidev 20 2K 20
msi 9 2K 9
clone 9 2K 9
tun 7 2K 7
softdep 1 1K 1
sahead 1 1K 1
secasvar 1 1K 1
nhops 6 1K 8
vnodemarker 2 1K 6682
NFSD session 1 1K 1
CAM periph 4 1K 271
sctp_ifn 6 1K 19
ipsec 3 1K 3
mld 6 1K 6
igmp 6 1K 6
toponodes 6 1K 6
isadev 6 1K 6
mount 16 1K 89
pci_link 10 1K 10
pf_osfp 6 1K 6
mkdir 5 1K 7860
encap_export_host 12 1K 12
procdesc 5 1K 18
crypto 3 1K 3
newdirblk 4 1K 3930
diradd 4 1K 4032
pfil 4 1K 4
CAM SIM 2 1K 2
cdev 2 1K 2
sctp_athm 26 1K 4122
sctp_map 24 1K 1292
chacha20random 1 1K 1
inpcbpolicy 11 1K 2985
osd 3 1K 9
vnodes 1 1K 2
ktls 1 1K 1
NFSD lckfile 1 1K 1
NFSD V4client 1 1K 1
DEVFS 9 1K 10
feeder 7 1K 7
loginclass 3 1K 6
prison 6 1K 6
soname 6 1K 4335
CAM dev queue 2 1K 2
CAM I/O Scheduler 1 1K 1
apmdev 1 1K 1
atkbddev 2 1K 2
CAM path 4 1K 1034
freework 1 1K 4258
tcpfunc 2 1K 2
pmchooks 1 1K 1
nexusdev 5 1K 5
filecaps 5 1K 131
sctp_vrf 1 1K 1
entropy 2 1K 45
vnet 1 1K 1
pmc 1 1K 1
acpiintr 1 1K 1
cpus 2 1K 2
vnet_data_free 1 1K 1
iov 2 1K 17036
Per-cpu 1 1K 1
p1003.1b 1 1K 1
sctp_mcore 0 0K 0
sctp_socko 0 0K 1129
sctp_iter 0 0K 12
sctp_mvrf 0 0K 0
sctp_cpal 0 0K 3
sctp_cmsg 0 0K 0
sctp_stre 0 0K 0
sctp_athi 0 0K 0
sctp_a_it 0 0K 9
sctp_aadr 0 0K 0
sctp_stri 0 0K 6
pf_altq 0 0K 0
pf_temp 0 0K 0
nvlist 0 0K 0
SCSI ENC 0 0K 0
SCSI sa 0 0K 0
madt_table 0 0K 2
smartpqi 0 0K 0
scsi_pass 0 0K 0
ciss_data 0 0K 0
pvscsi 0 0K 0
ath_hal 0 0K 0
athdev 0 0K 0
ata_pci 0 0K 0
ata_dma 0 0K 0
ata_generic 0 0K 0
iavf 0 0K 0
ixl 0 0K 0
amr 0 0K 0
scsi_da 0 0K 69
ata_da 0 0K 0
scsi_ch 0 0K 0
scsi_cd 0 0K 0
USBdev 0 0K 0
ice-resmgr 0 0K 0
ice-osdep 0 0K 0
ice 0 0K 0
axgbe 0 0K 0
fpukern_ctx 0 0K 0
USB 0 0K 0
xen_intr 0 0K 0
AHCI driver 0 0K 0
agp 0 0K 0
xen_hvm 0 0K 0
legacydrv 0 0K 0
qpidrv 0 0K 0
dmar_idpgtbl 0 0K 0
dmar_dom 0 0K 0
dmar_ctx 0 0K 0
nvme_da 0 0K 0
acpipwr 0 0K 0
isci 0 0K 0
iommu_dmamap 0 0K 0
twsbuf 0 0K 0
hyperv_socket 0 0K 0
bxe_ilt 0 0K 0
xenbus 0 0K 0
twe_commands 0 0K 0
twa_commands 0 0K 0
tcp_log_dev 0 0K 3
vm_fictitious 0 0K 0
midi buffers 0 0K 0
mixer 0 0K 0
ac97 0 0K 0
hdacc 0 0K 0
hdac 0 0K 0
hdaa 0 0K 0
acpi_perf 0 0K 0
acpicmbat 0 0K 0
SIIS driver 0 0K 0
UMAHash 0 0K 0
CAM CCB 0 0K 206147
vm_pgdata 0 0K 0
jblocks 0 0K 0
savedino 0 0K 8809
sentinel 0 0K 0
jfsync 0 0K 0
jtrunc 0 0K 0
sbdep 0 0K 3252
jsegdep 0 0K 0
jseg 0 0K 0
jfreefrag 0 0K 0
jfreeblk 0 0K 0
jnewblk 0 0K 0
jmvref 0 0K 0
jremref 0 0K 0
jaddref 0 0K 0
freedep 0 0K 0
dirrem 0 0K 3992
freefile 0 0K 3979
freeblks 0 0K 3990
freefrag 0 0K 26
allocindir 0 0K 0
indirdep 0 0K 329
allocdirect 0 0K 0
ufs_trim 0 0K 0
mactemp 0 0K 0
audit_trigger 0 0K 0
audit_pipe_presel 0 0K 0
audit_pipeent 0 0K 0
audit_pipe 0 0K 0
audit_evname 0 0K 0
audit_bsm 0 0K 0
audit_gidset 0 0K 0
audit_text 0 0K 0
audit_path 0 0K 0
audit_data 0 0K 0
audit_cred 0 0K 0
xform 0 0K 0
NLM 0 0K 0
ipsec-spdcache 0 0K 0
ipsec-reg 0 0K 0
ipsec-misc 0 0K 0
ipsecrequest 0 0K 0
ip6opt 0 0K 42
ip6_msource 0 0K 0
ip6_moptions 0 0K 0
in6_mfilter 0 0K 0
frag6 0 0K 0
tcplog 0 0K 0
LRO 0 0K 0
newreno data 0 0K 0
ip_msource 0 0K 0
ip_moptions 0 0K 8
in_mfilter 0 0K 1
ipid 0 0K 0
80211scan 0 0K 0
80211ratectl 0 0K 0
80211power 0 0K 0
80211nodeie 0 0K 0
80211node 0 0K 0
80211mesh_gt 0 0K 0
80211mesh_rt 0 0K 0
80211perr 0 0K 0
80211prep 0 0K 0
80211preq 0 0K 0
80211dfs 0 0K 0
80211crypto 0 0K 0
80211vap 0 0K 0
iflib 0 0K 0
vlan 0 0K 0
gif 0 0K 0
ifdescr 0 0K 0
zlib 0 0K 0
fadvise 0 0K 2
VN POLL 0 0K 0
statfs 0 0K 4119
namei_tracker 0 0K 12
export_host 0 0K 0
cl_savebuf 0 0K 11
PUC 0 0K 0
ppbusdev 0 0K 0
agtiapi_MemAlloc malloc 0 0K 0
osti_cacheable 0 0K 0
tempbuff 0 0K 0
tempbuff 0 0K 0
ag_tgt_map_t malloc 0 0K 0
ag_slr_map_t malloc 0 0K 0
lDevFlags * malloc 0 0K 0
tiDeviceHandle_t * malloc 0 0K 0
ag_portal_data_t malloc 0 0K 0
ag_device_t malloc 0 0K 0
STLock malloc 0 0K 0
CCB List 0 0K 0
sr_iov 0 0K 0
OCS 0 0K 0
OCS 0 0K 0
nvme 0 0K 0
nvd 0 0K 0
netmap 0 0K 0
mwldev 0 0K 0
biobuf 0 0K 0
aios 0 0K 0
lio 0 0K 0
acl 0 0K 0
MVS driver 0 0K 0
mbuf_tag 0 0K 135
accf 0 0K 0
pts 0 0K 0
ioctlops 0 0K 8418
Witness 0 0K 0
stack 0 0K 0
CAM ccb queue 0 0K 0
mrsasbuf 0 0K 0
mpt_user 0 0K 0
sbuf 0 0K 288
mps_user 0 0K 0
firmware 0 0K 0
compressor 0 0K 0
MPSSAS 0 0K 0
SWAP 0 0K 0
mps 0 0K 0
mpr_user 0 0K 0
sysctltmp 0 0K 720
sysctl 0 0K 1
MPRSAS 0 0K 0
ekcd 0 0K 0
dumper 0 0K 0
sendfile 0 0K 0
rctl 0 0K 0
mpr 0 0K 0
mfibuf 0 0K 0
md_sectors 0 0K 0
md_disk 0 0K 0
malodev 0 0K 0
LED 0 0K 0
cache 0 0K 0
prison_racct 0 0K 0
Fail Points 0 0K 0
sigio 0 0K 7
filedesc_to_leader 0 0K 0
pwd 0 0K 0
tty console 0 0K 0
ix_sriov 0 0K 0
aacraidcam 0 0K 0
ix 0 0K 0
ipsbuf 0 0K 0
iirbuf 0 0K 0
aacraid_buf 0 0K 0
aaccam 0 0K 0
isofs_node 0 0K 0
isofs_mount 0 0K 0
tr_raid5_data 0 0K 0
tr_raid1e_data 0 0K 0
tr_raid1_data 0 0K 0
tr_raid0_data 0 0K 0
tr_concat_data 0 0K 0
md_sii_data 0 0K 0
md_promise_data 0 0K 0
md_nvidia_data 0 0K 0
md_jmicron_data 0 0K 0
md_intel_data 0 0K 0
md_ddf_data 0 0K 0
raid_data 0 0K 72
geom_flashmap 0 0K 0
tmpfs dir 0 0K 0
tmpfs name 0 0K 0
tmpfs mount 0 0K 0
NFS FHA 0 0K 0
newnfsmnt 0 0K 0
newnfsclient_req 0 0K 0
NFSCL layrecall 0 0K 0
NFSCL session 0 0K 0
NFSCL sockreq 0 0K 0
NFSCL devinfo 0 0K 0
NFSCL flayout 0 0K 0
NFSCL layout 0 0K 0
NFSD rollback 0 0K 0
NFSCL diroffdiroff 0 0K 0
NEWdirectio 0 0K 0
NEWNFSnode 0 0K 0
NFSCL lck 0 0K 0
NFSCL lckown 0 0K 0
NFSCL client 0 0K 0
NFSCL deleg 0 0K 0
NFSCL open 0 0K 0
NFSCL owner 0 0K 0
NFS fh 0 0K 0
NFS req 0 0K 0
NFSD usrgroup 0 0K 0
NFSD string 0 0K 0
NFSD V4lock 0 0K 0
NFSD V4state 0 0K 0
NFSD srvcache 0 0K 0
msdosfs_fat 0 0K 0
msdosfs_mount 0 0K 0
msdosfs_node 0 0K 0
DEVFS4 0 0K 0
DEVFS2 0 0K 0
gntdev 0 0K 0
privcmd_dev 0 0K 0
evtchn_dev 0 0K 0
xenstore 0 0K 0
aacbuf 0 0K 0
xnb 0 0K 0
xbbd 0 0K 0
xbd 0 0K 0
Balloon 0 0K 0
sysmouse 0 0K 0
vtfont 0 0K 0
zstd 0 0K 0
db> show uma
Zone Size Used Free Requests Sleeps Bucket Total Mem XFree
mbuf_cluster 2048 8966 764 9728 0 252 19927040 0
RADIX NODE 144 16171 17258 770246 0 62 4813776 0
mbuf_packet 256 8235 603 1046417 0 254 2262528 0
mbuf_jumbo_page 4096 0 510 2758 0 252 2088960 0
BUF TRIE 144 352 13116 144829 0 62 1939392 0
malloc-384 384 4138 22 4162 0 30 1597440 0
malloc-4096 4096 337 2 498 0 2 1388544 0
malloc-128 128 10556 46 14865 0 126 1357056 0
pbuf 832 0 969 0 0 2 806208 0
UMA Slabs 0 112 6381 60 6435 0 126 721392 0
FFS inode 1128 527 26 4508 0 8 623784 0
VM OBJECT 264 1329 66 76292 0 30 368280 0
mbuf 256 508 854 552499 0 254 348672 0
256 Bucket 2048 133 33 10651 0 8 339968 0
THREAD 1792 148 32 8143 0 8 322560 0
VNODE 488 563 85 4546 0 30 316224 0
malloc-1024 1024 298 10 6573 0 16 315392 0
malloc-4096 4096 65 7 9370 0 2 294912 0
tcp_log 416 0 648 15000 0 252 269568 0
malloc-65536 65536 4 0 4 0 1 262144 0
malloc-65536 65536 3 1 11 0 1 262144 0
socket 944 40 236 7747 0 252 260544 0
sctp_asoc 2288 12 83 646 0 252 217360 0
malloc-16384 16384 8 5 3936 0 1 212992 0
malloc-16 16 12246 254 13590 0 254 200000 0
g_bio 408 0 470 822242 0 30 191760 0
MAP ENTRY 96 1647 327 270020 0 126 189504 0
malloc-64 64 2758 77 2913 0 254 181440 0
UMA Zones 768 226 3 226 0 16 175872 0
FFS2 dinode 256 527 133 4507 0 62 168960 0
malloc-32 32 4780 386 11742 0 254 165312 0
sctp_ep 1280 14 115 3464 0 252 165120 0
malloc-32768 32768 2 3 11 0 1 163840 0
malloc-2048 2048 15 65 209612 0 8 163840 0
malloc-4096 4096 39 0 50 0 2 159744 0
malloc-128 128 1129 80 24409 0 126 154752 0
S VFS Cache 104 1018 347 5183 0 126 141960 0
malloc-65536 65536 0 2 2 0 1 131072 0
malloc-65536 65536 0 2 195 0 1 131072 0
malloc-65536 65536 2 0 2 0 1 131072 0
malloc-32768 32768 0 4 290 0 1 131072 0
VMSPACE 2544 39 12 4876 0 4 129744 0
malloc-1024 1024 117 3 135 0 16 122880 0
vmem btag 56 1912 20 1912 0 254 108192 0
malloc-256 256 80 340 7479 0 62 107520 0
PROC 1320 61 20 4897 0 8 106920 0
DEVCTL 1024 0 100 125 0 0 102400 0
128 Bucket 1024 52 39 2717 0 16 93184 0
malloc-256 256 233 127 17028 0 62 92160 0
64 Bucket 512 155 21 23315 0 30 90112 0
filedesc0 1072 62 22 4898 0 8 90048 0
UMA Kegs 384 212 1 212 0 30 81792 0
malloc-128 128 310 279 7639 0 126 75392 0
malloc-8192 8192 6 3 34 0 1 73728 0
malloc-256 256 154 131 9453 0 62 72960 0
sctp_raddr 736 12 87 653 0 252 72864 0
malloc-65536 65536 0 1 110 0 1 65536 0
malloc-16384 16384 1 3 11 0 1 65536 0
malloc-128 128 157 277 12842 0 126 55552 0
malloc-384 384 79 61 4166 0 30 53760 0
malloc-128 128 140 263 4188 0 126 51584 0
32 Bucket 256 50 145 10163 0 62 49920 0
malloc-16384 16384 3 0 3 0 1 49152 0
malloc-64 64 598 158 73797 0 254 48384 0
tcp_bbr_map 128 0 372 1506 0 126 47616 0
udplite_inpcb 488 0 96 2083 0 252 46848 0
malloc-2048 2048 9 13 516 0 8 45056 0
pcpu-8 8 5222 410 14432 0 254 45056 0
malloc-64 64 277 416 10011 0 254 44352 0
malloc-64 64 524 169 1606 0 254 44352 0
malloc-384 384 102 8 493 0 30 42240 0
malloc-2048 2048 15 5 1568 0 8 40960 0
Files 80 240 260 23952 0 126 40000 0
clpbuf 832 0 48 105078 0 16 39936 0
malloc-256 256 25 125 7479 0 62 38400 0
malloc-256 256 25 125 14615 0 62 38400 0
DIRHASH 1024 19 17 34 0 16 36864 0
NAMEI 1024 0 36 35159 0 16 36864 0
ksiginfo 112 70 254 1438 0 126 36288 0
tcpcb 1048 4 29 513 0 252 34584 0
pipe 744 23 22 618 0 16 33480 0
malloc-32768 32768 1 0 1 0 1 32768 0
malloc-32768 32768 0 1 112 0 1 32768 0
malloc-16384 16384 2 0 5 0 1 32768 0
malloc-8192 8192 2 2 4 0 1 32768 0
malloc-8192 8192 2 2 95 0 1 32768 0
malloc-512 512 2 62 6682 0 30 32768 0
pcpu-64 64 452 60 452 0 254 32768 0
malloc-384 384 5 75 8267 0 30 30720 0
malloc-256 256 75 45 2338 0 62 30720 0
malloc-1024 1024 9 19 686 0 16 28672 0
16 Bucket 144 55 141 237644 0 62 28224 0
8 Bucket 80 63 287 33979 0 126 28000 0
TURNSTILE 136 181 8 181 0 62 25704 0
malloc-8192 8192 2 1 4 0 1 24576 0
malloc-8192 8192 1 2 5 0 1 24576 0
malloc-8192 8192 3 0 3 0 1 24576 0
malloc-4096 4096 4 2 8 0 2 24576 0
malloc-4096 4096 1 5 4124 0 2 24576 0
malloc-64 64 329 49 15897 0 254 24192 0
KNOTE 160 28 122 74433 0 62 24000 0
ttyinq 160 135 15 300 0 62 24000 0
malloc-128 128 142 44 495 0 126 23808 0
ttyoutq 256 72 18 160 0 62 23040 0
malloc-4096 4096 4 1 7 0 2 20480 0
malloc-2048 2048 8 2 42 0 8 20480 0
malloc-2048 2048 5 5 279 0 8 20480 0
malloc-1024 1024 18 2 18 0 16 20480 0
PWD 32 21 609 4019 0 254 20160 0
4 Bucket 48 13 407 20970 0 254 20160 0
SLEEPQUEUE 88 181 43 181 0 126 19712 0
Mountpoints 2752 2 5 2 0 4 19264 0
malloc-256 256 49 26 92 0 62 19200 0
malloc-256 256 59 16 1234 0 62 19200 0
malloc-16384 16384 0 1 136 0 1 16384 0
malloc-16384 16384 1 0 1 0 1 16384 0
malloc-8192 8192 2 0 2 0 1 16384 0
malloc-8192 8192 2 0 2 0 1 16384 0
malloc-2048 2048 7 1 7 0 8 16384 0
malloc-1024 1024 14 2 14 0 16 16384 0
malloc-32 32 347 157 4586 0 254 16128 0
2 Bucket 32 75 429 11612 0 254 16128 0
vtnet_tx_hdr 24 0 668 534888 0 254 16032 0
malloc-128 128 64 60 3099 0 126 15872 0
unpcb 256 20 40 1256 0 252 15360 0
malloc-384 384 31 9 103 0 30 15360 0
malloc-384 384 29 11 29 0 30 15360 0
tcp_bbr_pcb 832 0 18 335 0 16 14976 0
malloc-1024 1024 4 8 184 0 16 12288 0
malloc-512 512 1 23 119 0 30 12288 0
malloc-64 64 48 141 726 0 254 12096 0
ripcb 488 5 19 123 0 252 11712 0
tcp_inpcb 488 4 20 513 0 252 11712 0
udp_inpcb 488 2 22 266 0 252 11712 0
malloc-4096 4096 1 1 3 0 2 8192 0
malloc-2048 2048 1 3 3987 0 8 8192 0
malloc-2048 2048 3 1 194 0 8 8192 0
malloc-1024 1024 3 5 18 0 16 8192 0
malloc-512 512 12 4 12 0 30 8192 0
malloc-512 512 2 14 522 0 30 8192 0
malloc-512 512 3 13 66 0 30 8192 0
malloc-512 512 0 16 6 0 30 8192 0
malloc-512 512 8 8 8 0 30 8192 0
pf tags 104 4 74 37 0 126 8112 0
rtentry 176 35 11 39 0 62 8096 0
rl_entry 40 77 125 77 0 254 8080 0
sctp_stream_msg_out 112 3 69 600 0 252 8064 0
sctp_laddr 48 36 132 82 0 254 8064 0
udpcb 32 2 250 2349 0 254 8064 0
ipq 56 0 144 3 0 254 8064 0
malloc-64 64 75 51 92 0 254 8064 0
malloc-64 64 3 123 103 0 254 8064 0
malloc-32 32 8 244 30 0 254 8064 0
malloc-32 32 102 150 1021 0 254 8064 0
malloc-32 32 78 174 2035 0 254 8064 0
malloc-32 32 59 193 904 0 254 8064 0
malloc-32 32 5 247 83 0 254 8064 0
malloc-32 32 30 222 2646 0 254 8064 0
malloc-16 16 16 484 46 0 254 8000 0
malloc-16 16 30 470 1517 0 254 8000 0
malloc-16 16 85 415 4670 0 254 8000 0
malloc-16 16 184 316 1779 0 254 8000 0
malloc-16 16 256 244 259 0 254 8000 0
malloc-16 16 21 479 23600 0 254 8000 0
malloc-128 128 20 42 100 0 126 7936 0
sctp_readq 152 0 52 2 0 252 7904 0
sctp_chunk 152 13 39 24 0 252 7904 0
kenv 258 3 27 1013 0 30 7740 0
routing nhops 256 28 2 39 0 62 7680 0
FPU_save_area 832 1 8 1 0 16 7488 0
cpuset 104 7 55 70 0 126 6448 0
domainset 40 0 126 51 0 254 5040 0
epoch_record pcpu 256 4 12 4 0 62 4096 0
malloc-1024 1024 3 1 3 0 16 4096 0
malloc-512 512 1 7 2 0 30 4096 0
pcpu-16 16 7 249 7 0 254 4096 0
hostcache 96 1 41 1 0 252 4032 0
syncache 168 0 24 4 0 252 4032 0
malloc-16 16 8 242 8 0 254 4000 0
UMA Slabs 1 176 10 12 10 0 62 3872 0
malloc-384 384 1 9 1 0 30 3840 0
malloc-384 384 1 9 1 0 30 3840 0
KMAP ENTRY 96 12 27 12 0 0 3744 0
vmem 1856 1 1 1 0 8 3712 0
SMR CPU 32 2 61 2 0 254 2016 0
SMR SHARED 24 2 61 2 0 254 1512 0
FFS1 dinode 128 0 0 0 0 126 0 0
swblk 136 0 0 0 0 62 0 0
swpctrie 144 0 0 0 0 62 0 0
sctp_asconf_ack 48 0 0 0 0 254 0 0
sctp_asconf 40 0 0 0 0 254 0 0
pf state scrubs 40 0 0 0 0 254 0 0
pf frag entries 40 0 0 0 0 0 0 0
pf frags 248 0 0 0 0 62 0 0
pf table entries 160 0 0 0 0 62 0 0
pf table entry counters 64 0 0 0 0 254 0 0
pf source nodes 136 0 0 0 0 252 0 0
pf state keys 88 0 0 0 0 126 0 0
pf states 296 0 0 0 0 252 0 0
pf mtags 48 0 0 0 0 254 0 0
IPsec SA lft_c 16 0 0 0 0 254 0 0
tcp_log_node 120 0 0 0 0 126 0 0
tcp_log_bucket 176 0 0 0 0 62 0 0
tcpreass 48 0 0 0 0 254 0 0
tfo_ccache_entries 80 0 0 0 0 126 0 0
tfo 4 0 0 0 0 254 0 0
sackhole 32 0 0 0 0 254 0 0
tcptw 88 0 0 0 0 252 0 0
itimer 352 0 0 0 0 30 0 0
AIOLIO 272 0 0 0 0 30 0 0
AIOCB 744 0 0 0 0 16 0 0
AIOP 32 0 0 0 0 254 0 0
AIO 208 0 0 0 0 62 0 0
TMPFS node 224 0 0 0 0 62 0 0
NCLNODE 592 0 0 0 0 16 0 0
LTS VFS Cache 360 0 0 0 0 30 0 0
L VFS Cache 320 0 0 0 0 30 0 0
STS VFS Cache 144 0 0 0 0 62 0 0
crypto_session 72 0 0 0 0 126 0 0
cryptop 280 0 0 0 0 30 0 0
IOMMU_MAP_ENTRY 120 0 0 0 0 126 0 0
ktls_session 192 0 0 0 0 62 0 0
mbuf_jumbo_16k 16384 0 0 0 0 252 0 0
mbuf_jumbo_9k 9216 0 0 0 0 252 0 0
audit_record 1280 0 0 0 0 8 0 0
MAC labels 40 0 0 0 0 254 0 0
vnpbuf 832 0 0 0 0 60 0 0
mdpbuf 832 0 0 0 0 4 0 0
nfspbuf 832 0 0 0 0 16 0 0
swwbuf 832 0 0 0 0 8 0 0
swrbuf 832 0 0 0 0 16 0 0
umtx_shm 88 0 0 0 0 126 0 0
umtx pi 96 0 0 0 0 126 0 0
rangeset pctrie nodes 144 0 0 0 0 62 0 0
malloc-65536 65536 0 0 0 0 1 0 0
malloc-65536 65536 0 0 0 0 1 0 0
malloc-32768 32768 0 0 0 0 1 0 0
malloc-32768 32768 0 0 0 0 1 0 0
malloc-32768 32768 0 0 0 0 1 0 0
malloc-32768 32768 0 0 0 0 1 0 0
malloc-16384 16384 0 0 0 0 1 0 0
malloc-16384 16384 0 0 0 0 1 0 0
malloc-4096 4096 0 0 0 0 2 0 0
pcpu-32 32 0 0 0 0 254 0 0
pcpu-4 4 0 0 0 0 254 0 0
fakepg 104 0 0 0 0 126 0 0
UMA Hash 256 0 0 0 0 62 0 0


---
This report is generated by a bot. It may contain errors.
See https://goo.gl/tpsmEJ for more information about syzbot.
syzbot engineers can be reached at syzk...@googlegroups.com.

syzbot will keep track of this issue. See:
https://goo.gl/tpsmEJ#status for how to communicate with syzbot.

syzbot

unread,
Mar 20, 2021, 8:28:18 PM3/20/21
to syzkaller-f...@googlegroups.com
syzbot has found a reproducer for the following issue on:

HEAD commit: 839fdcfc elftoolchain: Support building on Arm-based Macs
git tree: https://github.com/freebsd/freebsd-src.git main
console output: https://syzkaller.appspot.com/x/log.txt?x=11975caad00000
dashboard link: https://syzkaller.appspot.com/bug?extid=ed6e8de942351d0309f4
syz repro: https://syzkaller.appspot.com/x/repro.syz?x=10f38826d00000
C reproducer: https://syzkaller.appspot.com/x/repro.c?x=16fa6d06d00000

IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+ed6e8d...@syzkaller.appspotmail.com

login: panic: Bad tailq NEXT(0xfffffe009e9f2f00->tqh_last) != NULL
cpuid = 0
time = 1616286345
KDB: stack backtrace:
db_trace_self_wrapper() at db_trace_self_wrapper+0x47/frame 0xfffffe00949784b0
vpanic() at vpanic+0x1c7/frame 0xfffffe0094978510
panic() at panic+0x43/frame 0xfffffe0094978570
sctp_ss_default_add() at sctp_ss_default_add+0x132/frame 0xfffffe00949785b0
sctp_lower_sosend() at sctp_lower_sosend+0x5566/frame 0xfffffe00949787a0
sctp_sosend() at sctp_sosend+0x4fc/frame 0xfffffe00949788d0
sosend() at sosend+0xc6/frame 0xfffffe0094978940
kern_sendit() at kern_sendit+0x35b/frame 0xfffffe00949789f0
sendit() at sendit+0x229/frame 0xfffffe0094978a50
sys_sendmsg() at sys_sendmsg+0x8b/frame 0xfffffe0094978ab0
amd64_syscall() at amd64_syscall+0x247/frame 0xfffffe0094978bf0
fast_syscall_common() at fast_syscall_common+0xf8/frame 0xfffffe0094978bf0
--- syscall (0, FreeBSD ELF64, nosys), rip = 0x2b42ca, rsp = 0x7fffdfffdf78, rbp = 0x7fffdfffdfb0 ---
KDB: enter: panic
[ thread pid 5014 tid 108542 ]
Stopped at kdb_enter+0x67: movq $0,0x143f43e(%rip)
db>
db> set $lines = 0
db> set $maxwidth = 0
db> show registers
cs 0x20
ds 0x3b
es 0x3b
fs 0x13
gs 0x1b
ss 0x28
rax 0x12
rcx 0x80
rdx 0xffffffff819ab359
rbx 0
rsp 0xfffffe0094978490
rbp 0xfffffe00949784b0
rsi 0x1
rdi 0
r8 0
r9 0x8080808080808080
r10 0xfffffe0094978380
r11 0x1ff6bfff59c
r12 0xffffffff82067a90 ddb_dbbe
r13 0
r14 0xffffffff81a5b14d
r15 0xffffffff81a5b14d
rip 0xffffffff81127a47 kdb_enter+0x67
rflags 0x86
kdb_enter+0x67: movq $0,0x143f43e(%rip)
db> show proc
Process 5014 (syz-executor4875068) at 0xfffff80004f47a50:
state: NORMAL
uid: 0 gids: 0, 0, 5
parent: pid 787 at 0xfffff80018336a50
ABI: FreeBSD ELF64
flag: 0x10080480 flag2: 0
arguments: ./syz-executor487506825
reaper: 0xfffff80004459528 reapsubtree: 1
sigparent: 20
vmspace: 0xfffffe0094e1b9f0
(map 0xfffffe0094e1b9f0)
(map.pmap 0xfffffe0094e1bab0)
(pmap 0xfffffe0094e1bb10)
threads: 2
100114 s syz-executor4875068
108542 Run CPU 0 syz-executor4875068
db> ps
pid ppid pgrp uid state wmesg wchan cmd
5014 787 785 0 T (threaded) syz-executor4875068
100114 s syz-executor4875068
108542 Run CPU 0 syz-executor4875068
787 785 785 0 S nanslp 0xffffffff8253a5e0 syz-executor4875068
785 783 785 0 Ss pause 0xfffff800182d30b0 csh
783 694 783 0 Ss select 0xfffff80004e570c0 sshd
760 1 760 0 Ss+ ttyin 0xfffff800048c7cb0 getty
759 1 759 0 Ss+ ttyin 0xfffff80004be6cb0 getty
758 1 758 0 Ss+ ttyin 0xfffff80004bed0b0 getty
757 1 757 0 Ss+ ttyin 0xfffff80004bed4b0 getty
756 1 756 0 Ss+ ttyin 0xfffff80004bed8b0 getty
755 1 755 0 Ss+ ttyin 0xfffff80004bedcb0 getty
754 1 754 0 Ss+ ttyin 0xfffff80004b670b0 getty
753 1 753 0 Ss+ ttyin 0xfffff80004b674b0 getty
752 1 752 0 Ss+ ttyin 0xfffff80004b678b0 getty
750 1 24 0 S+ piperd 0xfffff80018320ba0 logger
749 748 24 0 S+ nanslp 0xffffffff8253a5e0 sleep
748 1 24 0 S+ wait 0xfffff80004f47528 sh
698 1 698 0 Ss nanslp 0xffffffff8253a5e0 cron
694 1 694 0 Ss select 0xfffff80004e566c0 sshd
507 1 507 0 Ss select 0xfffff80004de0f40 syslogd
436 1 436 0 Ss select 0xfffff80004e563c0 devd
435 1 435 65 Ss select 0xfffff80004e565c0 dhclient
350 1 350 0 Ss select 0xfffff80004e564c0 dhclient
347 1 347 0 Ss select 0xfffff80004e547c0 dhclient
23 0 0 0 DL syncer 0xffffffff82629a50 [syncer]
22 0 0 0 DL vlruwt 0xfffff80004bd1528 [vnlru]
21 0 0 0 DL (threaded) [bufdaemon]
100080 D qsleep 0xffffffff82628b00 [bufdaemon]
100085 D - 0xffffffff8200ad80 [bufspacedaemon-0]
100096 D sdflush 0xfffff800043478e8 [/ worker]
20 0 0 0 DL psleep 0xffffffff82650948 [vmdaemon]
19 0 0 0 DL (threaded) [pagedaemon]
100078 D psleep 0xffffffff82644db8 [dom0]
100086 D launds 0xffffffff82644dc4 [laundry: dom0]
100087 D umarcl 0xffffffff815b4f90 [uma]
18 0 0 0 DL - 0xffffffff8236e948 [rand_harvestq]
17 0 0 0 DL waiting 0xffffffff82e52818 [sctp_iterator]
16 0 0 0 DL pftm 0xffffffff82bf83c0 [pf purge]
15 0 0 0 DL - 0xffffffff8262615c [soaiod4]
9 0 0 0 DL - 0xffffffff8262615c [soaiod3]
8 0 0 0 DL - 0xffffffff8262615c [soaiod2]
7 0 0 0 DL - 0xffffffff8262615c [soaiod1]
6 0 0 0 DL (threaded) [cam]
100043 D - 0xffffffff82246040 [doneq0]
100044 D - 0xffffffff82245fc0 [async]
100077 D - 0xffffffff82245e90 [scanner]
14 0 0 0 DL seqstat 0xfffff80004653c88 [sequencer 00]
5 0 0 0 DL crypto_ 0xfffff8000434ec90 [crypto returns 1]
4 0 0 0 DL crypto_ 0xfffff8000434ec30 [crypto returns 0]
3 0 0 0 DL crypto_ 0xffffffff826422a0 [crypto]
13 0 0 0 DL (threaded) [geom]
100034 D - 0xffffffff82519e20 [g_event]
100035 D - 0xffffffff82519e28 [g_up]
100036 D - 0xffffffff82519e30 [g_down]
2 0 0 0 DL (threaded) [KTLS]
100027 D - 0xfffff800044aa300 [thr_0]
100028 D - 0xfffff800044aa380 [thr_1]
12 0 0 0 WL (threaded) [intr]
100013 I [swi6: task queue]
100015 I [swi6: Giant taskq]
100017 I [swi5: fast taskq]
100029 I [swi3: vm]
100030 I [swi4: clock (0)]
100031 I [swi4: clock (1)]
100032 I [swi1: netisr 0]
100045 I [irq24: virtio_pci0]
100046 I [irq25: virtio_pci0]
100047 I [irq26: virtio_pci0]
100048 I [irq27: virtio_pci0]
100049 I [irq28: virtio_pci1]
100050 I [irq29: virtio_pci1]
100051 I [irq30: virtio_pci1]
100052 I [irq31: virtio_pci1]
100053 I [irq32: virtio_pci1]
100058 I [irq10: virtio_pci2]
100060 I [irq1: atkbd0]
100061 I [irq12: psm0]
100062 I [swi0: uart uart++]
100070 I [swi1: pf send]
100083 I [swi1: hpts]
100084 I [swi1: hpts]
11 0 0 0 RL (threaded) [idle]
100003 CanRun [idle: cpu0]
100004 CanRun [idle: cpu1]
1 0 1 0 SLs wait 0xfffff80004459528 [init]
10 0 0 0 DL audit_w 0xffffffff826427c0 [audit]
0 0 0 0 RLs (threaded) [kernel]
100000 D swapin 0xffffffff8251a3b0 [swapper]
100005 D - 0xfffff80004349700 [if_io_tqg_0]
100006 D - 0xfffff80004349500 [if_io_tqg_1]
100007 D - 0xfffff80004349300 [if_config_tqg_0]
100008 D - 0xfffff80004349100 [softirq_0]
100009 D - 0xfffff800044a9e00 [softirq_1]
100010 D - 0xfffff800044a8e00 [kqueue_ctx taskq]
100011 D - 0xfffff800044a8d00 [inm_free taskq]
100012 D - 0xfffff800044a8c00 [linuxkpi_irq_wq]
100014 D - 0xfffff800044a8a00 [aiod_kick taskq]
100016 Run CPU 1 [thread taskq]
100018 D - 0xfffff800044a8600 [in6m_free taskq]
100019 D - 0xfffff800044a8500 [linuxkpi_short_wq_0]
100020 D - 0xfffff800044a8500 [linuxkpi_short_wq_1]
100021 D - 0xfffff800044a8500 [linuxkpi_short_wq_2]
100022 D - 0xfffff800044a8500 [linuxkpi_short_wq_3]
100023 D - 0xfffff800044a8400 [linuxkpi_long_wq_0]
100024 D - 0xfffff800044a8400 [linuxkpi_long_wq_1]
100025 D - 0xfffff800044a8400 [linuxkpi_long_wq_2]
100026 D - 0xfffff800044a8400 [linuxkpi_long_wq_3]
100033 D - 0xfffff800044a8300 [firmware taskq]
100037 D - 0xfffff800044a8100 [crypto_0]
100038 D - 0xfffff800044a8100 [crypto_1]
100054 D - 0xfffff8000486ce00 [vtnet0 rxq 0]
100055 D - 0xfffff8000486cd00 [vtnet0 txq 0]
100056 D - 0xfffff8000486cc00 [vtnet0 rxq 1]
100057 D - 0xfffff8000486cb00 [vtnet0 txq 1]
100059 D vtbslp 0xfffff80004864100 [virtio_balloon]
100063 D - 0xfffff800048b8a00 [mca taskq]
100065 D - 0xffffffff81e06841 [deadlkres]
100072 D - 0xfffff80004b7de00 [acpi_task_0]
100073 D - 0xfffff80004b7de00 [acpi_task_1]
100074 D - 0xfffff80004b7de00 [acpi_task_2]
100076 D - 0xfffff80004683e00 [CAM taskq]
db> show all locks
Process 5014 (syz-executor4875068) thread 0xfffffe0094d30a00 (108542)
exclusive sleep mutex sctp-send-tcb (tcbs) r = 0 (0xfffffe009e9f33a0) locked @ /syzkaller/managers/main/kernel/sys/netinet/sctp_output.c:13125
Process 0 (kernel) thread 0xfffffe000427e700 (100016)
exclusive sleep mutex kernel arena domain (kernel arena domain) r = 0 (0xfffff8000400a000) locked @ /syzkaller/managers/main/kernel/sys/kern/subr_vmem.c:747
exclusive sleep mutex vmem list lock (vmem list lock) r = 0 (0xffffffff82002a00) locked @ /syzkaller/managers/main/kernel/sys/kern/subr_vmem.c:784
db> show malloc
Type InUse MemUse Requests
sctp_stro 8442 135072K 16884
pcb 16907 19534K 16983
pf_hash 5 11524K 5
sctp_atcl 16885 6332K 16896
devbuf 4216 4340K 4241
tcp_hpts 5 3201K 5
vtbuf 24 1968K 46
sysctloid 30935 1814K 31002
kobj 332 1328K 492
newblk 566 1166K 599
sctp_atky 25327 1056K 25338
vfscache 3 1025K 3
inodedep 26 522K 71
ufs_quota 1 512K 1
vfs_hash 1 512K 1
callout 2 512K 2
intr 4 472K 4
sctp_athm 16885 264K 16896
sctp_map 16884 264K 16884
vmem 4 210K 6
subproc 99 208K 5067
acpica 1674 184K 55181
vnet_data 1 168K 1
tidhash 3 141K 3
pagedep 8 130K 18
tfo_ccache 1 128K 1
sem 4 106K 4
DEVFS1 102 102K 111
linker 287 101K 310
bus 995 81K 3509
mtx_pool 2 72K 2
syncache 1 68K 1
acpitask 1 64K 1
ddb_capture 1 64K 1
module 507 64K 507
umtx 270 34K 270
kdtrace 167 33K 13560
temp 18 33K 1583
hostcache 1 32K 1
shm 1 32K 1
DEVFS3 121 31K 131
msg 4 30K 4
gtaskqueue 18 26K 18
kbdmux 6 22K 6
DEVFS_RULE 56 20K 56
BPF 10 18K 10
ufs_mount 5 17K 6
proc 3 17K 3
tty 16 16K 16
ithread 99 16K 99
bus-sc 33 14K 1719
KTRACE 100 13K 100
kenv 93 12K 93
eventhandler 133 12K 133
ifaddr 30 12K 32
rman 84 10K 425
GEOM 60 10K 489
UART 12 9K 12
devstat 4 9K 4
ksem 1 8K 1
rpc 2 8K 2
bmsafemap 1 8K 41
shmfd 1 8K 1
pfs_vncache 1 8K 1
pfs_nodes 20 8K 20
audit_evclass 236 8K 294
sglist 5 7K 5
CAM DEV 3 6K 510
taskqueue 57 6K 57
cred 21 6K 244
CAM queue 5 6K 1528
ufs_dirhash 24 5K 24
UMA 263 5K 263
plimit 17 5K 337
vt 11 5K 11
ifnet 3 5K 3
memdesc 1 4K 1
MCA 32 4K 32
evdev 4 4K 4
filedesc 1 4K 1
hhook 13 4K 13
routetbl 14 4K 14
ether_multi 40 4K 50
lltable 11 4K 11
pf_ifnet 5 3K 6
fpukern_ctx 3 3K 3
in6_multi 25 3K 25
kqueue 47 3K 5017
pwddesc 47 3K 5015
acpisem 22 3K 22
terminal 11 3K 11
session 20 3K 32
uidinfo 3 3K 9
local_apic 1 2K 1
io_apic 1 2K 1
ipsec-saq 2 2K 2
selfd 27 2K 64400
lockf 16 2K 26
proc-args 39 2K 492
freefile 13 2K 22
Unitno 27 2K 39
CAM XPT 22 2K 543
ipsecpolicy 2 2K 2
acpidev 20 2K 20
msi 9 2K 9
clone 9 2K 9
softdep 1 1K 1
dirrem 4 1K 28
sahead 1 1K 1
secasvar 1 1K 1
vnodemarker 2 1K 10
NFSD session 1 1K 1
diradd 7 1K 36
CAM periph 4 1K 271
select 7 1K 29
ipsec 3 1K 3
indirdep 3 1K 3
nhops 6 1K 6
toponodes 6 1K 6
isadev 6 1K 6
mount 16 1K 89
pci_link 10 1K 10
sctp_ifa 5 1K 6
crypto 4 1K 4
ip6ndp 4 1K 5
encap_export_host 12 1K 12
linuxcurrent 3 1K 4
newdirblk 4 1K 8
mkdir 4 1K 16
in_multi 2 1K 4
pfil 4 1K 4
CAM SIM 2 1K 2
cdev 2 1K 2
chacha20random 1 1K 1
osd 3 1K 10
sctp_ifn 2 1K 6
NFSD lckfile 1 1K 1
NFSD V4client 1 1K 1
DEVFS 9 1K 10
mld 2 1K 2
igmp 2 1K 2
vnodes 1 1K 1
ktls 1 1K 1
feeder 7 1K 7
inpcbpolicy 6 1K 131
tcpfunc 3 1K 3
loginclass 3 1K 7
prison 6 1K 6
linux 5 1K 6
aesni_data 2 1K 2
soname 5 1K 11663
DEVFSP 2 1K 2
apmdev 1 1K 1
atkbddev 2 1K 2
CAM dev queue 2 1K 2
CAM I/O Scheduler 1 1K 1
freework 1 1K 26
CAM path 4 1K 1034
procdesc 1 1K 6
pmchooks 1 1K 1
nexusdev 7 1K 7
filecaps 4 1K 66
tun 3 1K 3
sctp_vrf 1 1K 1
vnet 1 1K 1
entropy 2 1K 35
acpiintr 1 1K 1
pmc 1 1K 1
cpus 2 1K 2
vnet_data_free 1 1K 1
Per-cpu 1 1K 1
iov 1 1K 21970
p1003.1b 1 1K 1
sctp_mcore 0 0K 0
sctp_socko 0 0K 0
sctp_iter 0 0K 3
sctp_mvrf 0 0K 0
sctp_timw 0 0K 0
sctp_cpal 0 0K 0
sctp_cmsg 0 0K 0
sctp_stre 0 0K 0
sctp_athi 0 0K 0
sctp_a_it 0 0K 3
sctp_aadr 0 0K 0
sctp_stri 0 0K 0
mqdata 0 0K 0
pf_table 0 0K 0
pf_rule 0 0K 0
pf_altq 0 0K 0
pf_osfp 0 0K 0
pf_temp 0 0K 0
NFSD string 0 0K 0
NFSD V4lock 0 0K 0
madt_table 0 0K 2
smartpqi 0 0K 0
NFSD V4state 0 0K 0
NFSD srvcache 0 0K 0
msdosfs_fat 0 0K 0
msdosfs_mount 0 0K 0
msdosfs_node 0 0K 0
iavf 0 0K 0
ixl 0 0K 0
DEVFS4 0 0K 0
DEVFS2 0 0K 0
gntdev 0 0K 0
privcmd_dev 0 0K 0
ice-resmgr 0 0K 0
ice-osdep 0 0K 0
ice 0 0K 0
axgbe 0 0K 0
evtchn_dev 0 0K 0
xenstore 0 0K 0
ciss_data 0 0K 0
BACKLIGHT 0 0K 0
xnb 0 0K 0
xbbd 0 0K 0
xbd 0 0K 0
Balloon 0 0K 0
sysmouse 0 0K 0
vtfont 0 0K 0
xen_intr 0 0K 0
xen_hvm 0 0K 0
legacydrv 0 0K 0
qpidrv 0 0K 0
ath_hal 0 0K 0
athdev 0 0K 0
dmar_idpgtbl 0 0K 0
dmar_dom 0 0K 0
dmar_ctx 0 0K 0
ata_pci 0 0K 0
ata_dma 0 0K 0
ata_generic 0 0K 0
isci 0 0K 0
iommu_dmamap 0 0K 0
amr 0 0K 0
hyperv_socket 0 0K 0
bxe_ilt 0 0K 0
xenbus 0 0K 0
pvscsi 0 0K 0
scsi_da 0 0K 69
vm_fictitious 0 0K 0
ata_da 0 0K 0
scsi_ch 0 0K 0
scsi_cd 0 0K 0
AHCI driver 0 0K 0
USBdev 0 0K 0
USB 0 0K 0
agp 0 0K 0
nvme_da 0 0K 0
UMAHash 0 0K 0
acpipwr 0 0K 0
acpi_perf 0 0K 0
vm_pgdata 0 0K 0
jblocks 0 0K 0
savedino 0 0K 16
sentinel 0 0K 0
jfsync 0 0K 0
jtrunc 0 0K 0
sbdep 0 0K 3
jsegdep 0 0K 0
jseg 0 0K 0
jfreefrag 0 0K 0
jfreeblk 0 0K 0
jnewblk 0 0K 0
jmvref 0 0K 0
jremref 0 0K 0
jaddref 0 0K 0
freedep 0 0K 0
freeblks 0 0K 25
freefrag 0 0K 7
allocindir 0 0K 0
allocdirect 0 0K 0
ufs_trim 0 0K 0
mactemp 0 0K 0
audit_trigger 0 0K 0
audit_pipe_presel 0 0K 0
audit_pipeent 0 0K 0
audit_pipe 0 0K 0
audit_evname 0 0K 0
audit_bsm 0 0K 0
audit_gidset 0 0K 0
audit_text 0 0K 0
audit_path 0 0K 0
audit_data 0 0K 0
audit_cred 0 0K 0
xform 0 0K 0
twsbuf 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5E_TLS 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EN 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5DUMP 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
seq_file 0 0K 0
radix 0 0K 0
idr 0 0K 0
lkpifw 0 0K 0
NLM 0 0K 0
ipsec-spdcache 0 0K 0
ipsec-reg 0 0K 0
ipsec-misc 0 0K 0
ipsecrequest 0 0K 0
ip6opt 0 0K 3
ip6_msource 0 0K 0
ip6_moptions 0 0K 0
in6_mfilter 0 0K 0
frag6 0 0K 0
tcplog 0 0K 0
tcp_hwpace 0 0K 0
twe_commands 0 0K 0
LRO 0 0K 0
newreno data 0 0K 0
ip_msource 0 0K 0
ip_moptions 0 0K 0
in_mfilter 0 0K 0
ipid 0 0K 0
80211scan 0 0K 0
80211ratectl 0 0K 0
80211power 0 0K 0
80211nodeie 0 0K 0
80211node 0 0K 0
80211mesh_gt 0 0K 0
80211mesh_rt 0 0K 0
80211perr 0 0K 0
80211prep 0 0K 0
80211preq 0 0K 0
80211dfs 0 0K 0
80211crypto 0 0K 0
80211vap 0 0K 0
iflib 0 0K 0
vlan 0 0K 0
gif 0 0K 0
ifdescr 0 0K 0
zlib 0 0K 0
fadvise 0 0K 0
VN POLL 0 0K 0
twa_commands 0 0K 0
statfs 0 0K 197
namei_tracker 0 0K 0
export_host 0 0K 0
cl_savebuf 0 0K 6
tcp_log_dev 0 0K 0
midi buffers 0 0K 0
mixer 0 0K 0
ac97 0 0K 0
hdacc 0 0K 0
hdac 0 0K 0
hdaa 0 0K 0
acpicmbat 0 0K 0
SIIS driver 0 0K 0
CAM CCB 0 0K 1794
PUC 0 0K 0
ppbusdev 0 0K 0
agtiapi_MemAlloc malloc 0 0K 0
osti_cacheable 0 0K 0
tempbuff 0 0K 0
biobuf 0 0K 0
aios 0 0K 0
lio 0 0K 0
acl 0 0K 0
tempbuff 0 0K 0
mbuf_tag 0 0K 27
ag_tgt_map_t malloc 0 0K 0
ag_slr_map_t malloc 0 0K 0
lDevFlags * malloc 0 0K 0
tiDeviceHandle_t * malloc 0 0K 0
ag_portal_data_t malloc 0 0K 0
ag_device_t malloc 0 0K 0
STLock malloc 0 0K 0
CCB List 0 0K 0
sr_iov 0 0K 0
OCS 0 0K 0
OCS 0 0K 0
nvme 0 0K 0
nvd 0 0K 0
netmap 0 0K 0
mwldev 0 0K 0
MVS driver 0 0K 0
CAM ccb queue 0 0K 0
mrsasbuf 0 0K 0
mpt_user 0 0K 0
mps_user 0 0K 0
accf 0 0K 0
pts 0 0K 0
ioctlops 0 0K 86
eventfd 0 0K 0
Witness 0 0K 0
stack 0 0K 0
MPSSAS 0 0K 0
mps 0 0K 0
mpr_user 0 0K 0
MPRSAS 0 0K 0
mpr 0 0K 0
mfibuf 0 0K 0
sbuf 0 0K 288
md_sectors 0 0K 0
firmware 0 0K 0
compressor 0 0K 0
md_disk 0 0K 0
SWAP 0 0K 0
malodev 0 0K 0
LED 0 0K 0
sysctltmp 0 0K 615
sysctl 0 0K 1
ekcd 0 0K 0
dumper 0 0K 0
sendfile 0 0K 0
rctl 0 0K 0
ix_sriov 0 0K 0
aacraidcam 0 0K 0
aacraid_buf 0 0K 0
ix 0 0K 0
ipsbuf 0 0K 0
cache 0 0K 0
iirbuf 0 0K 0
kcovinfo 0 0K 0
prison_racct 0 0K 0
Fail Points 0 0K 0
sigio 0 0K 1
filedesc_to_leader 0 0K 0
pwd 0 0K 0
tty console 0 0K 0
aaccam 0 0K 0
aacbuf 0 0K 0
zstd 0 0K 0
XZ_DEC 0 0K 0
nvlist 0 0K 0
SCSI ENC 0 0K 0
SCSI sa 0 0K 0
scsi_pass 0 0K 0
NFSCL diroff 0 0K 0
NEWdirectio 0 0K 0
NEWNFSnode 0 0K 0
NFSCL lck 0 0K 0
NFSCL lckown 0 0K 0
NFSCL client 0 0K 0
NFSCL deleg 0 0K 0
NFSCL open 0 0K 0
NFSCL owner 0 0K 0
NFS fh 0 0K 0
NFS req 0 0K 0
NFSD usrgroup 0 0K 0
db> show uma
Zone Size Used Free Requests Sleeps Bucket Total Mem XFree
malloc-16384 16384 8443 0 8443 0 1 138330112 0
mbuf_jumbo_page 4096 8320 898 15558 0 254 37756928 0
sctp_asoc 2288 8442 3 8442 0 254 19322160 0
malloc-2048 2048 8444 0 10249 0 8 17293312 0
sctp_ep 1280 8443 2 8454 0 254 10809600 0
malloc-384 384 16886 14 16897 0 30 6489600 0
sctp_raddr 736 8442 6 8442 0 254 6217728 0
mbuf 256 17031 429 63850 0 254 4469760 0
UMA Slabs 0 112 22909 20 22909 0 126 2568048 0
pbuf 2624 0 973 0 0 2 2553152 0
malloc-256 256 8450 10 8765 0 62 2165760 0
BUF TRIE 144 171 13297 452 0 62 1939392 0
malloc-384 384 4141 9 4142 0 30 1593600 0
malloc-4096 4096 332 1 492 0 2 1363968 0
malloc-128 128 10400 16 10473 0 126 1333248 0
sctp_chunk 152 8452 24 8452 0 254 1288352 0
mbuf_cluster 2048 510 2 510 0 254 1048576 0
vmem btag 56 12904 116 12904 0 254 729120 0
RADIX NODE 144 4783 170 103271 0 62 713232 0
FFS inode 1160 489 29 512 0 8 600880 0
malloc-64 64 8446 59 8451 0 254 544320 0
malloc-32 32 16932 78 17976 0 254 544320 0
malloc-16 16 17142 108 17146 0 254 276000 0
malloc-16 16 16889 111 16906 0 254 272000 0
256 Bucket 2048 119 11 17424 0 8 266240 0
malloc-65536 65536 4 0 4 0 1 262144 0
malloc-65536 65536 2 2 10 0 1 262144 0
malloc-64 64 3682 413 8847 0 254 262080 0
VM OBJECT 264 905 70 63438 0 30 257400 0
VNODE 448 518 31 543 0 30 245952 0
THREAD 1792 119 16 8544 0 8 241920 0
malloc-4096 4096 51 4 5631 0 2 225280 0
DEVCTL 1024 0 216 115 0 0 221184 0
malloc-16 16 13005 245 14308 0 254 212000 0
malloc-65536 65536 1 2 137 0 1 196608 0
UMA Zones 768 235 4 235 0 16 183552 0
malloc-32 32 4912 128 5805 0 254 161280 0
socket 944 16 152 9694 0 254 158592 0
malloc-256 256 588 27 758 0 62 157440 0
malloc-128 128 1136 73 25792 0 126 154752 0
FFS2 dinode 256 489 36 511 0 62 134400 0
malloc-65536 65536 2 0 2 0 1 131072 0
malloc-65536 65536 1 1 47 0 1 131072 0
malloc-128 128 846 177 1132 0 126 130944 0
mbuf_packet 256 0 510 20884 0 254 130560 0
malloc-1024 1024 119 1 129 0 16 122880 0
ksiginfo 112 36 1008 52 0 126 116928 0
MAP ENTRY 96 854 322 105737 0 126 112896 0
S VFS Cache 104 969 84 1009 0 126 109512 0
malloc-32768 32768 1 2 131 0 1 98304 0
UMA Kegs 384 220 3 220 0 30 85632 0
clpbuf 2624 0 32 20 0 16 83968 0
VMSPACE 2544 24 9 4993 0 4 83952 0
malloc-256 256 168 132 8867 0 62 76800 0
malloc-8192 8192 6 3 9 0 1 73728 0
128 Bucket 1024 39 32 614 0 16 72704 0
filedesc0 1072 47 16 5015 0 8 67536 0
PROC 1320 46 5 5014 0 8 67320 0
malloc-8192 8192 5 3 33 0 1 65536 0
malloc-4096 4096 14 0 25 0 2 57344 0
g_bio 408 0 140 4632 0 30 57120 0
malloc-2048 2048 11 15 518 0 8 53248 0
malloc-16384 16384 3 0 3 0 1 49152 0
malloc-16384 16384 2 1 8 0 1 49152 0
malloc-256 256 151 29 465 0 62 46080 0
32 Bucket 256 47 133 8945 0 62 46080 0
malloc-4096 4096 11 0 11 0 2 45056 0
malloc-64 64 512 181 1591 0 254 44352 0
DIRHASH 1024 34 6 34 0 16 40960 0
malloc-8192 8192 4 1 105 0 1 40960 0
NAMEI 1024 0 36 12004 0 16 36864 0
malloc-512 512 2 70 510 0 30 36864 0
pcpu-8 8 4147 461 4175 0 254 36864 0
sctp_stream_msg_out 112 2 322 8454 0 254 36288 0
malloc-32768 32768 1 0 1 0 1 32768 0
malloc-32768 32768 1 0 1 0 1 32768 0
malloc-16384 16384 0 2 170 0 1 32768 0
pcpu-64 64 479 33 479 0 254 32768 0
64 Bucket 512 54 10 3598 0 30 32768 0
malloc-384 384 72 8 418 0 30 30720 0
malloc-256 256 82 38 848 0 62 30720 0
malloc-64 64 227 214 74810 0 254 28224 0
malloc-384 384 28 42 74 0 30 26880 0
malloc-384 384 54 16 54 0 30 26880 0
malloc-64 64 265 113 13467 0 254 24192 0
ttyinq 160 135 15 300 0 62 24000 0
malloc-128 128 137 49 496 0 126 23808 0
tcpcb 1048 3 19 7 0 254 23056 0
ttyoutq 256 72 18 160 0 62 23040 0
TURNSTILE 136 136 32 136 0 62 22848 0
malloc-4096 4096 3 2 5 0 2 20480 0
malloc-2048 2048 5 5 261 0 8 20480 0
malloc-1024 1024 17 3 17 0 16 20480 0
Files 80 71 179 14972 0 126 20000 0
malloc-128 128 115 40 152 0 126 19840 0
Mountpoints 2752 2 5 2 0 4 19264 0
malloc-16384 16384 1 0 1 0 1 16384 0
malloc-16384 16384 1 0 1 0 1 16384 0
malloc-8192 8192 2 0 2 0 1 16384 0
malloc-8192 8192 2 0 2 0 1 16384 0
malloc-8192 8192 2 0 2 0 1 16384 0
malloc-1024 1024 2 14 45 0 16 16384 0
malloc-1024 1024 16 0 16 0 16 16384 0
malloc-32 32 24 480 823 0 254 16128 0
malloc-32 32 267 237 421 0 254 16128 0
vtnet_tx_hdr 24 0 668 26320 0 254 16032 0
8 Bucket 80 44 156 4806 0 126 16000 0
malloc-128 128 89 35 739 0 126 15872 0
malloc-256 256 52 8 58 0 62 15360 0
malloc-256 256 34 26 435 0 62 15360 0
pipe 744 7 13 286 0 16 14880 0
SLEEPQUEUE 88 136 24 136 0 126 14080 0
malloc-4096 4096 1 2 202 0 2 12288 0
malloc-2048 2048 2 4 14 0 8 12288 0
malloc-2048 2048 3 3 5 0 8 12288 0
malloc-2048 2048 3 3 194 0 8 12288 0
malloc-1024 1024 1 11 888 0 16 12288 0
malloc-1024 1024 1 11 8443 0 16 12288 0
malloc-1024 1024 8 4 183 0 16 12288 0
malloc-512 512 9 15 127 0 30 12288 0
malloc-32 32 122 256 8610 0 254 12096 0
malloc-128 128 32 61 160 0 126 11904 0
malloc-128 128 53 40 3118 0 126 11904 0
udp_inpcb 488 2 22 120 0 254 11712 0
kenv 258 15 30 1049 0 30 11610 0
malloc-256 256 25 20 100 0 62 11520 0
malloc-4096 4096 1 1 3 0 2 8192 0
malloc-2048 2048 1 3 41 0 8 8192 0
malloc-2048 2048 2 2 2 0 8 8192 0
malloc-1024 1024 3 5 7 0 16 8192 0
malloc-512 512 4 12 4 0 30 8192 0
malloc-512 512 3 13 62 0 30 8192 0
rtentry 176 13 33 17 0 62 8096 0
PGRP 88 20 72 32 0 126 8096 0
rl_entry 40 29 173 29 0 254 8080 0
udpcb 32 2 250 120 0 254 8064 0
PWD 32 10 242 102 0 254 8064 0
malloc-64 64 46 80 316 0 254 8064 0
malloc-64 64 8 118 47 0 254 8064 0
malloc-64 64 33 93 54 0 254 8064 0
malloc-32 32 36 216 200 0 254 8064 0
malloc-32 32 6 246 27 0 254 8064 0
malloc-32 32 24 228 2708 0 254 8064 0
16 Bucket 144 38 18 227 0 62 8064 0
4 Bucket 48 6 162 147 0 254 8064 0
2 Bucket 32 49 203 8951 0 254 8064 0
malloc-16 16 28 472 101 0 254 8000 0
malloc-16 16 39 461 8691 0 254 8000 0
malloc-16 16 36 464 204 0 254 8000 0
malloc-16 16 8 492 9 0 254 8000 0
malloc-16 16 14 486 24971 0 254 8000 0
ripcb 488 1 15 4 0 254 7808 0
tcp_inpcb 488 3 13 7 0 254 7808 0
routing nhops 256 10 20 17 0 62 7680 0
unpcb 256 7 23 1092 0 254 7680 0
malloc-384 384 7 13 9 0 30 7680 0
malloc-384 384 1 19 20 0 30 7680 0
FPU_save_area 832 1 8 1 0 16 7488 0
cpuset 104 7 55 7 0 126 6448 0
epoch_record pcpu 256 4 12 4 0 62 4096 0
malloc-512 512 2 6 11 0 30 4096 0
malloc-512 512 1 7 1 0 30 4096 0
pcpu-16 16 7 249 7 0 254 4096 0
sctp_laddr 48 0 84 4 0 254 4032 0
hostcache 96 1 41 1 0 254 4032 0
syncache 168 0 24 5 0 254 4032 0
KNOTE 160 0 25 8 0 62 4000 0
UMA Slabs 1 176 8 14 8 0 62 3872 0
mqnode 416 3 6 3 0 30 3744 0
KMAP ENTRY 96 12 27 12 0 0 3744 0
vmem 1856 1 1 1 0 8 3712 0
SMR CPU 32 2 29 2 0 254 992 0
SMR SHARED 24 2 29 2 0 254 744 0
FFS1 dinode 128 0 0 0 0 126 0 0
swblk 136 0 0 0 0 62 0 0
swpctrie 144 0 0 0 0 62 0 0
sctp_asconf_ack 48 0 0 0 0 254 0 0
sctp_asconf 40 0 0 0 0 254 0 0
sctp_readq 152 0 0 0 0 254 0 0
pf state scrubs 40 0 0 0 0 254 0 0
pf frag entries 40 0 0 0 0 254 0 0
pf frags 248 0 0 0 0 62 0 0
pf table entries 160 0 0 0 0 62 0 0
pf table entry counters 64 0 0 0 0 254 0 0
pf source nodes 136 0 0 0 0 254 0 0
pf state keys 88 0 0 0 0 126 0 0
pf states 296 0 0 0 0 254 0 0
pf tags 104 0 0 0 0 126 0 0
pf mtags 48 0 0 0 0 254 0 0
tcp_bbr_pcb 832 0 0 0 0 16 0 0
tcp_bbr_map 128 0 0 0 0 126 0 0
tcp_rack_pcb 704 0 0 0 0 16 0 0
tcp_rack_map 120 0 0 0 0 126 0 0
IPsec SA lft_c 16 0 0 0 0 254 0 0
udplite_inpcb 488 0 0 0 0 254 0 0
tcp_log_node 120 0 0 0 0 126 0 0
tcp_log_bucket 176 0 0 0 0 62 0 0
tcp_log 416 0 0 0 0 254 0 0
tcpreass 48 0 0 0 0 254 0 0
tfo_ccache_entries 80 0 0 0 0 126 0 0
tfo 4 0 0 0 0 254 0 0
sackhole 32 0 0 0 0 254 0 0
tcptw 88 0 0 0 0 254 0 0
ipq 56 0 0 0 0 254 0 0
itimer 352 0 0 0 0 30 0 0
AIOLIO 272 0 0 0 0 30 0 0
AIOCB 552 0 0 0 0 16 0 0
AIOP 32 0 0 0 0 254 0 0
AIO 208 0 0 0 0 62 0 0
NCLNODE 584 0 0 0 0 16 0 0
mqnotifier 216 0 0 0 0 62 0 0
mvdata 64 0 0 0 0 254 0 0
mqueue 248 0 0 0 0 62 0 0
TMPFS node 224 0 0 0 0 62 0 0
LTS VFS Cache 360 0 0 0 0 30 0 0
L VFS Cache 320 0 0 0 0 30 0 0
STS VFS Cache 144 0 0 0 0 62 0 0
cryptop 280 0 0 0 0 30 0 0
linux_dma_object 24 0 0 0 0 254 0 0
linux_dma_pctrie 144 0 0 0 0 62 0 0
IOMMU_MAP_ENTRY 120 0 0 0 0 126 0 0
ktls_session 192 0 0 0 0 62 0 0
mbuf_jumbo_16k 16384 0 0 0 0 254 0 0
mbuf_jumbo_9k 9216 0 0 0 0 254 0 0
audit_record 1280 0 0 0 0 8 0 0
domainset 40 0 0 0 0 254 0 0
MAC labels 40 0 0 0 0 254 0 0
vnpbuf 2624 0 0 0 0 64 0 0
mdpbuf 2624 0 0 0 0 3 0 0
nfspbuf 2624 0 0 0 0 16 0 0
swwbuf 2624 0 0 0 0 8 0 0
swrbuf 2624 0 0 0 0 16 0 0
umtx_shm 88 0 0 0 0 126 0 0
umtx pi 96 0 0 0 0 126 0 0
rangeset pctrie nodes 144 0 0 0 0 62 0 0
malloc-65536 65536 0 0 0 0 1 0 0
malloc-65536 65536 0 0 0 0 1 0 0
malloc-65536 65536 0 0 0 0 1 0 0
malloc-32768 32768 0 0 0 0 1 0 0
malloc-32768 32768 0 0 0 0 1 0 0
malloc-32768 32768 0 0 0 0 1 0 0
malloc-32768 32768 0 0 0 0 1 0 0
malloc-32768 32768 0 0 0 0 1 0 0
malloc-16384 16384 0 0 0 0 1 0 0
malloc-16384 16384 0 0 0 0 1 0 0
malloc-8192 8192 0 0 0 0 1 0 0
malloc-8192 8192 0 0 0 0 1 0 0
malloc-4096 4096 0 0 0 0 2 0 0
malloc-512 512 0 0 0 0 30 0 0
malloc-512 512 0 0 0 0 30 0 0
malloc-384 384 0 0 0 0 30 0 0
Reply all
Reply to author
Forward
0 new messages