panic: size_on_reasm_queue is 4

0 views
Skip to first unread message

syzbot

unread,
Dec 1, 2020, 5:46:19 AM12/1/20
to syzkaller-f...@googlegroups.com
Hello,

syzbot found the following issue on:

HEAD commit: 74bc68cd efibootmgr: fix an incorrect error handling check
git tree: freebsd
console output: https://syzkaller.appspot.com/x/log.txt?x=12199795500000
dashboard link: https://syzkaller.appspot.com/bug?extid=69d859931c3fe461b43b
userspace arch: i386

Unfortunately, I don't have any reproducer for this issue yet.

IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+69d859...@syzkaller.appspotmail.com

panic: size_on_reasm_queue is 4
cpuid = 0
time = 11
KDB: stack backtrace:
db_trace_self_wrapper() at db_trace_self_wrapper+0x47/frame 0xfffffe0051f05450
vpanic() at vpanic+0x1c7/frame 0xfffffe0051f054b0
panic() at panic+0x43/frame 0xfffffe0051f05510
sctp_calc_rwnd() at sctp_calc_rwnd+0x1fc/frame 0xfffffe0051f05560
sctp_user_rcvd() at sctp_user_rcvd+0x100/frame 0xfffffe0051f055c0
sctp_sorecvmsg() at sctp_sorecvmsg+0x1d41/frame 0xfffffe0051f05700
sctp_soreceive() at sctp_soreceive+0x1f1/frame 0xfffffe0051f05910
soreceive() at soreceive+0xb9/frame 0xfffffe0051f05970
kern_recvit() at kern_recvit+0x2ff/frame 0xfffffe0051f05a40
freebsd32_recvfrom() at freebsd32_recvfrom+0xb1/frame 0xfffffe0051f05ab0
ia32_syscall() at ia32_syscall+0x237/frame 0xfffffe0051f05bf0
int0x80_syscall_common() at int0x80_syscall_common+0x9c/frame 0xfbffcf78
KDB: enter: panic
[ thread pid 10542 tid 111203 ]
Stopped at kdb_enter+0x67: movq $0,0x1471be6(%rip)
db>
db> set $lines = 0
db> set $maxwidth = 0
db> show registers
cs 0x20
ds 0x3b
es 0x3b
fs 0x13
gs 0x1b
ss 0
rax 0x12
rcx 0xfffffe009b600000
rdx 0x3ffff
rbx 0
rsp 0xfffffe0051f05430
rbp 0xfffffe0051f05450
rsi 0x40001
rdi 0xffffffff810f67e6 vprintf+0x176
r8 0
r9 0xffffffff
r10 0
r11 0xfffffe0094c5cd10
r12 0xffffffff820671c0 ddb_dbbe
r13 0
r14 0xffffffff8197cd84
r15 0xffffffff8197cd84
rip 0xffffffff810eab17 kdb_enter+0x67
rflags 0x200086 kernload+0x86
kdb_enter+0x67: movq $0,0x1471be6(%rip)
db> show proc
Process 10542 (syz-executor.3) at 0xfffff80018c15528:
state: NORMAL
uid: 0 gids: 0, 0, 5
parent: pid 841 at 0xfffff80004eea000
ABI: FreeBSD ELF32
arguments: /root/syz-executor.3
reaper: 0xfffff80004453528 reapsubtree: 1
sigparent: 20
vmspace: 0xfffffe0094c3c3e0
(map 0xfffffe0094c3c3e0)
(map.pmap 0xfffffe0094c3c4a0)
(pmap 0xfffffe0094c3c500)
threads: 3
100197 RunQ syz-executor.3
111203 Run CPU 0 syz-executor.3
111205 RunQ syz-executor.3
db> ps
pid ppid pgrp uid state wmesg wchan cmd
10543 777 777 0 R (threaded) syz-executor.0
100134 RunQ syz-executor.0
111204 S sbwait 0xfffff8007b1b5574 syz-executor.0
10542 841 841 0 R (threaded) syz-executor.3
100197 RunQ syz-executor.3
111203 Run CPU 0 syz-executor.3
111205 RunQ syz-executor.3
3139 3126 3139 0 Ss select 0xfffff80004e281c0 dhclient
3132 1 3132 0 Ss select 0xfffff80004e28540 dhclient
3126 3115 436 65 S select 0xfffff800189f9d40 dhclient
3115 436 436 0 S wait 0xfffff8001884fa50 sh
3106 1 3106 65 Ss select 0xfffff80004e28840 dhclient
2309 1 2309 0 Ss select 0xfffff80004e285c0 dhclient
2301 1 2301 0 Ss select 0xfffff80004e28740 dhclient
2276 1 2276 65 Ss select 0xfffff80004e28940 dhclient
1012 1 1012 0 Ss select 0xfffff80018445b40 dhclient
1009 1 1009 0 Ss select 0xfffff80018a69f40 dhclient
841 774 841 0 Ss nanslp 0xffffffff8252fea0 syz-executor.3
839 774 839 0 Rs syz-executor.2
830 774 830 0 Rs syz-executor.1
777 774 777 0 Rs syz-executor.0
774 772 772 0 S (threaded) syz-fuzzer
100092 S kqread 0xfffff80004eef800 syz-fuzzer
100106 S uwait 0xfffff8001829c380 syz-fuzzer
100107 S uwait 0xfffff8001829c480 syz-fuzzer
100108 S uwait 0xfffff8001829c580 syz-fuzzer
100109 S uwait 0xfffff8001829c680 syz-fuzzer
100110 S uwait 0xfffff80004de1380 syz-fuzzer
100111 S uwait 0xfffff80018445e00 syz-fuzzer
100112 S uwait 0xfffff80018445200 syz-fuzzer
100114 S uwait 0xfffff80018445300 syz-fuzzer
772 770 772 0 Ss pause 0xfffff800184460b0 csh
770 694 770 0 Ss select 0xfffff80018445a40 sshd
754 1 754 0 Ss+ ttyin 0xfffff800048a0cb0 getty
753 1 753 0 Ss+ ttyin 0xfffff80004ba48b0 getty
752 1 752 0 Ss+ ttyin 0xfffff80004ba4cb0 getty
751 1 751 0 Ss+ ttyin 0xfffff80004b9c0b0 getty
750 1 750 0 Ss+ ttyin 0xfffff80004b9c4b0 getty
749 1 749 0 Ss+ ttyin 0xfffff80004b9c8b0 getty
748 1 748 0 Ss+ ttyin 0xfffff80004b9ccb0 getty
747 1 747 0 Ss+ ttyin 0xfffff80004b390b0 getty
746 1 746 0 Ss+ ttyin 0xfffff80004b394b0 getty
698 1 698 0 Ss nanslp 0xffffffff8252fea1 cron
694 1 694 0 Ss select 0xfffff80018445d40 sshd
507 1 507 0 Ss select 0xfffff8001829c740 syslogd
436 1 436 0 Ss wait 0xfffff80004e8b528 devd
435 1 435 65 Ss select 0xfffff8001829c8c0 dhclient
350 1 350 0 Ss select 0xfffff8001829c940 dhclient
347 1 347 0 Ss select 0xfffff80004e28c40 dhclient
23 0 0 0 DL syncer 0xffffffff8261d238 [syncer]
22 0 0 0 DL vlruwt 0xfffff80004d5da50 [vnlru]
21 0 0 0 DL (threaded) [bufdaemon]
100070 D qsleep 0xffffffff8261c300 [bufdaemon]
100077 D - 0xffffffff8200ac80 [bufspacedaemon-0]
100086 D sdflush 0xfffff800043408e8 [/ worker]
20 0 0 0 DL psleep 0xffffffff82643788 [vmdaemon]
19 0 0 0 DL (threaded) [pagedaemon]
100068 D psleep 0xffffffff82637bf8 [dom0]
100075 D launds 0xffffffff82637c04 [laundry: dom0]
100076 D umarcl 0xffffffff814f6e00 [uma]
18 0 0 0 DL - 0xffffffff82364278 [rand_harvestq]
17 0 0 0 DL waiting 0xffffffff82d50818 [sctp_iterator]
16 0 0 0 DL pftm 0xffffffff82e49390 [pf purge]
15 0 0 0 DL - 0xffffffff8261b8dc [soaiod4]
9 0 0 0 DL - 0xffffffff8261b8dc [soaiod3]
8 0 0 0 DL - 0xffffffff8261b8dc [soaiod2]
7 0 0 0 DL - 0xffffffff8261b8dc [soaiod1]
6 0 0 0 DL (threaded) [cam]
100034 D - 0xffffffff8223bfc0 [doneq0]
100067 D - 0xffffffff8223be90 [scanner]
5 0 0 0 DL crypto_ 0xfffff80004348c90 [crypto returns 1]
4 0 0 0 DL crypto_ 0xfffff80004348c30 [crypto returns 0]
3 0 0 0 DL crypto_ 0xffffffff82635110 [crypto]
14 0 0 0 DL seqstat 0xfffff800044bf488 [sequencer 00]
13 0 0 0 DL (threaded) [geom]
100025 D - 0xffffffff8250f720 [g_event]
100026 D - 0xffffffff8250f728 [g_up]
100027 D - 0xffffffff8250f730 [g_down]
2 0 0 0 DL (threaded) [KTLS]
100018 D - 0xfffff80004472300 [thr_0]
100019 D - 0xfffff80004472380 [thr_1]
12 0 0 0 RL (threaded) [intr]
100012 I [swi5: fast taskq]
100015 I [swi6: task queue]
100016 I [swi6: Giant taskq]
100020 Run CPU 1 [swi1: netisr 0]
100021 I [swi3: vm]
100022 I [swi4: clock (0)]
100023 I [swi4: clock (1)]
100035 I [irq24: virtio_pci0]
100036 I [irq25: virtio_pci0]
100037 I [irq26: virtio_pci0]
100038 I [irq27: virtio_pci0]
100039 I [irq28: virtio_pci1]
100040 I [irq29: virtio_pci1]
100041 I [irq30: virtio_pci1]
100042 I [irq31: virtio_pci1]
100043 I [irq32: virtio_pci1]
100048 I [irq10: virtio_pci2]
100050 I [irq1: atkbd0]
100051 I [irq12: psm0]
100052 I [swi0: uart uart++]
100060 I [swi1: pf send]
100073 I [swi1: hpts]
100074 I [swi1: hpts]
11 0 0 0 RL (threaded) [idle]
100003 CanRun [idle: cpu0]
100004 CanRun [idle: cpu1]
1 0 1 0 SLs wait 0xfffff80004453528 [init]
10 0 0 0 DL audit_w 0xffffffff82635630 [audit]
0 0 0 0 DLs (threaded) [kernel]
100000 D swapin 0xffffffff8250fcb0 [swapper]
100005 D - 0xfffff80004477e00 [if_io_tqg_0]
100006 D - 0xfffff80004477d00 [if_io_tqg_1]
100007 D - 0xfffff80004477c00 [if_config_tqg_0]
100008 D - 0xfffff80004477b00 [softirq_0]
100009 D - 0xfffff80004477a00 [softirq_1]
100010 D - 0xfffff80004342200 [in6m_free taskq]
100011 D - 0xfffff80004342000 [thread taskq]
100013 D - 0xfffff80004478b00 [inm_free taskq]
100014 D - 0xfffff80004478900 [kqueue_ctx taskq]
100017 D - 0xfffff80004478300 [aiod_kick taskq]
100024 D - 0xfffff8000448ca00 [firmware taskq]
100029 D - 0xfffff8000448c300 [crypto_0]
100030 D - 0xfffff8000448c300 [crypto_1]
100044 D - 0xfffff800044fe300 [vtnet0 rxq 0]
100045 D - 0xfffff800044fe200 [vtnet0 txq 0]
100046 D - 0xfffff800044fe100 [vtnet0 rxq 1]
100047 D - 0xfffff800044fe000 [vtnet0 txq 1]
100049 D vtbslp 0xfffff80004645700 [virtio_balloon]
100053 D - 0xfffff800048aee00 [mca taskq]
100056 D - 0xffffffff81d254f1 [deadlkres]
100063 D - 0xfffff80004ac2100 [acpi_task_0]
100064 D - 0xfffff80004ac2100 [acpi_task_1]
100065 D - 0xfffff80004ac2100 [acpi_task_2]
100066 D - 0xfffff800044feb00 [CAM taskq]
db> show all locks
Process 10543 (syz-executor.0) thread 0xfffffe0088562000 (111204)
exclusive sx so_rcv_sx (so_rcv_sx) r = 0 (0xfffff8007b1b5518) locked @ /syzkaller/managers/i386/kernel/sys/kern/uipc_sockbuf.c:467
Process 10542 (syz-executor.3) thread 0xfffffe0094c5c800 (111203)
exclusive sleep mutex sctp-read (inpr) r = 0 (0xfffff80018ddb4a8) locked @ /syzkaller/managers/i386/kernel/sys/netinet/sctputil.c:6001
exclusive sx so_rcv_sx (so_rcv_sx) r = 0 (0xfffff8007b1828c8) locked @ /syzkaller/managers/i386/kernel/sys/kern/uipc_sockbuf.c:467
Process 830 (syz-executor.1) thread 0xfffffe0094b80e00 (100098)
exclusive lockmgr bufwait (bufwait) r = 0 (0xfffffe0003f0c280) locked @ /syzkaller/managers/i386/kernel/sys/kern/vfs_bio.c:1674
exclusive lockmgr ufs (ufs) r = 0 (0xfffff800182db810) locked @ /syzkaller/managers/i386/kernel/sys/ufs/ffs/ffs_vfsops.c:1999
exclusive lockmgr ufs (ufs) r = 0 (0xfffff80018ae49f8) locked @ /syzkaller/managers/i386/kernel/sys/kern/vfs_lookup.c:1047
Process 12 (intr) thread 0xfffffe000470da00 (100020)
exclusive sleep mutex sctp-tcb (tcb) r = 0 (0xfffffe0094d26380) locked @ /syzkaller/managers/i386/kernel/sys/netinet/sctp_pcb.c:2143
db> show malloc
Type InUse MemUse Requests
pf_hash 5 11524K 5
devbuf 4216 4339K 4244
tcp_hpts 5 3201K 5
vtbuf 24 1968K 46
sysctloid 29250 1706K 29315
kobj 337 1348K 498
newblk 5 1025K 14485
vfscache 3 1025K 3
pcb 112 583K 7723
inodedep 67 537K 11954
ufs_quota 1 512K 1
vfs_hash 1 512K 1
callout 2 512K 2
intr 4 472K 4
subproc 138 266K 10623
acpica 1674 184K 54318
vnet_data 1 168K 1
tidhash 3 141K 3
pagedep 8 130K 19721
tfo_ccache 1 128K 1
sem 4 106K 4
DEVFS1 105 105K 122
filedesc 14 105K 19217
linker 254 97K 294
bus 994 81K 3318
mtx_pool 2 72K 2
BPF 38 71K 38
syncache 1 68K 1
acpitask 1 64K 1
ddb_capture 1 64K 1
module 509 64K 509
umtx 342 43K 342
kdtrace 204 40K 21750
temp 35 33K 2669
hostcache 1 32K 1
shm 1 32K 65
DEVFS3 124 31K 134
msg 4 30K 4
vmem 3 26K 5
gtaskqueue 18 26K 18
sctp_timw 99 25K 99
kbdmux 6 22K 6
ifaddr 72 21K 72
DEVFS_RULE 56 20K 56
sctp_stro 19 19K 1344
dirrem 72 18K 9838
ufs_mount 5 17K 6
proc 3 17K 3
tty 16 16K 16
ithread 99 16K 99
sctp_atcl 40 15K 4321
lltable 46 15K 173
bus-sc 31 14K 1555
ether_multi 157 13K 172
KTRACE 100 13K 100
ifnet 7 13K 7
kenv 92 12K 92
eventhandler 125 11K 125
GEOM 60 10K 489
rman 82 10K 423
in6_multi 71 9K 71
bmsafemap 2 9K 10090
UART 12 9K 12
devstat 4 9K 4
rpc 2 8K 2
freefile 64 8K 9836
shmfd 1 8K 13
pfs_vncache 1 8K 1
pfs_nodes 20 8K 20
audit_evclass 233 8K 291
cred 27 7K 404
sglist 5 7K 5
CAM DEV 3 6K 510
kqueue 61 6K 10758
plimit 23 6K 420
CAM queue 5 6K 1528
taskqueue 48 6K 48
DEVFSP 76 5K 80
ufs_dirhash 24 5K 24
pf_ifnet 11 5K 21
vt 11 5K 11
UMA 254 5K 254
memdesc 1 4K 1
MCA 32 4K 32
kcovinfo 64 4K 68
evdev 4 4K 4
session 31 4K 46
pgrp 31 4K 50
routetbl 24 4K 24
pwddesc 59 4K 10544
hhook 13 4K 13
lockf 28 3K 51
selfd 45 3K 132979
terminal 11 3K 11
acpisem 22 3K 22
proc-args 50 3K 642
sctp_atky 59 3K 6877
uidinfo 5 3K 39
local_apic 1 2K 1
io_apic 1 2K 1
ipsec-saq 2 2K 2
select 16 2K 96
ip6ndp 12 2K 15
inpcbpolicy 59 2K 5193
sctp_ifa 14 2K 16
Unitno 28 2K 49
CAM XPT 22 2K 543
in_multi 6 2K 9
ipsecpolicy 2 2K 2
acpidev 20 2K 20
msi 9 2K 9
clone 9 2K 9
tun 7 2K 7
sctp_stri 2 1K 1700
softdep 1 1K 1
sahead 1 1K 1
secasvar 1 1K 1
nhops 6 1K 8
vnodemarker 2 1K 44
NFSD session 1 1K 1
CAM periph 4 1K 271
sctp_ifn 6 1K 16
ipsec 3 1K 3
mld 6 1K 6
igmp 6 1K 6
toponodes 6 1K 6
isadev 6 1K 6
mount 16 1K 89
pci_link 10 1K 10
sctp_map 38 1K 3958
sctp_athm 40 1K 5191
encap_export_host 12 1K 12
crypto 3 1K 3
mkdir 4 1K 19210
pfil 4 1K 4
procdesc 4 1K 16
CAM SIM 2 1K 2
cdev 2 1K 2
newdirblk 3 1K 9605
diradd 3 1K 9874
chacha20random 1 1K 1
pf_osfp 3 1K 3
osd 3 1K 9
vnodes 1 1K 3
ktls 1 1K 1
NFSD lckfile 1 1K 1
NFSD V4client 1 1K 1
DEVFS 9 1K 10
feeder 7 1K 7
frag6 2 1K 3
loginclass 3 1K 6
prison 6 1K 6
CAM dev queue 2 1K 2
CAM I/O Scheduler 1 1K 1
apmdev 1 1K 1
atkbddev 2 1K 2
CAM path 4 1K 1034
freework 1 1K 11381
tcpfunc 2 1K 2
pmchooks 1 1K 1
soname 4 1K 10551
nexusdev 5 1K 5
sctp_vrf 1 1K 1
entropy 2 1K 41
vnet 1 1K 1
iov 1 1K 17989
pmc 1 1K 1
filecaps 4 1K 101
acpiintr 1 1K 1
cpus 2 1K 2
vnet_data_free 1 1K 1
Per-cpu 1 1K 1
p1003.1b 1 1K 1
pf_table 0 0K 0
pf_rule 0 0K 0
pf_altq 0 0K 0
pf_temp 0 0K 0
sctp_mcore 0 0K 0
sctp_socko 0 0K 2042
sctp_iter 0 0K 9
sctp_mvrf 0 0K 0
sctp_cpal 0 0K 0
sctp_cmsg 0 0K 0
sctp_stre 0 0K 0
sctp_athi 0 0K 0
sctp_a_it 0 0K 9
sctp_aadr 0 0K 184
nvlist 0 0K 0
SCSI ENC 0 0K 0
SCSI sa 0 0K 0
madt_table 0 0K 2
smartpqi 0 0K 0
scsi_pass 0 0K 0
ciss_data 0 0K 0
pvscsi 0 0K 0
ath_hal 0 0K 0
athdev 0 0K 0
ata_pci 0 0K 0
ata_dma 0 0K 0
ata_generic 0 0K 0
iavf 0 0K 0
ixl 0 0K 0
amr 0 0K 0
scsi_da 0 0K 69
ata_da 0 0K 0
scsi_ch 0 0K 0
scsi_cd 0 0K 0
USBdev 0 0K 0
ice-resmgr 0 0K 0
ice-osdep 0 0K 0
ice 0 0K 0
axgbe 0 0K 0
fpukern_ctx 0 0K 0
USB 0 0K 0
xen_intr 0 0K 0
AHCI driver 0 0K 0
agp 0 0K 0
xen_hvm 0 0K 0
legacydrv 0 0K 0
qpidrv 0 0K 0
dmar_idpgtbl 0 0K 0
dmar_dom 0 0K 0
dmar_ctx 0 0K 0
nvme_da 0 0K 0
acpipwr 0 0K 0
isci 0 0K 0
iommu_dmamap 0 0K 0
twsbuf 0 0K 0
hyperv_socket 0 0K 0
bxe_ilt 0 0K 0
xenbus 0 0K 0
twe_commands 0 0K 0
twa_commands 0 0K 0
tcp_log_dev 0 0K 2
vm_fictitious 0 0K 0
midi buffers 0 0K 0
mixer 0 0K 0
ac97 0 0K 0
hdacc 0 0K 0
hdac 0 0K 0
hdaa 0 0K 0
acpi_perf 0 0K 0
acpicmbat 0 0K 0
SIIS driver 0 0K 0
UMAHash 0 0K 0
CAM CCB 0 0K 31574
vm_pgdata 0 0K 0
jblocks 0 0K 0
savedino 0 0K 30177
sentinel 0 0K 0
jfsync 0 0K 0
jtrunc 0 0K 0
sbdep 0 0K 19
jsegdep 0 0K 0
jseg 0 0K 0
jfreefrag 0 0K 0
jfreeblk 0 0K 0
jnewblk 0 0K 0
jmvref 0 0K 0
jremref 0 0K 0
jaddref 0 0K 0
freedep 0 0K 0
freeblks 0 0K 9868
freefrag 0 0K 6
allocindir 0 0K 0
indirdep 0 0K 2662
allocdirect 0 0K 0
ufs_trim 0 0K 0
mactemp 0 0K 0
audit_trigger 0 0K 0
audit_pipe_presel 0 0K 0
audit_pipeent 0 0K 0
audit_pipe 0 0K 0
audit_evname 0 0K 0
audit_bsm 0 0K 0
audit_gidset 0 0K 0
audit_text 0 0K 0
audit_path 0 0K 0
audit_data 0 0K 0
audit_cred 0 0K 0
xform 0 0K 0
NLM 0 0K 0
ipsec-spdcache 0 0K 0
ipsec-reg 0 0K 0
ipsec-misc 0 0K 0
ipsecrequest 0 0K 0
ip6opt 0 0K 264
ip6_msource 0 0K 0
ip6_moptions 0 0K 0
in6_mfilter 0 0K 0
tcplog 0 0K 0
LRO 0 0K 0
newreno data 0 0K 0
ip_msource 0 0K 0
ip_moptions 0 0K 13
in_mfilter 0 0K 3
ipid 0 0K 0
80211scan 0 0K 0
80211ratectl 0 0K 0
80211power 0 0K 0
80211nodeie 0 0K 0
80211node 0 0K 0
80211mesh_gt 0 0K 0
80211mesh_rt 0 0K 0
80211perr 0 0K 0
80211prep 0 0K 0
80211preq 0 0K 0
80211dfs 0 0K 0
80211crypto 0 0K 0
80211vap 0 0K 0
iflib 0 0K 0
vlan 0 0K 0
gif 0 0K 0
ifdescr 0 0K 0
zlib 0 0K 0
fadvise 0 0K 0
VN POLL 0 0K 0
statfs 0 0K 9794
namei_tracker 0 0K 8
export_host 0 0K 0
cl_savebuf 0 0K 4
PUC 0 0K 0
ppbusdev 0 0K 0
agtiapi_MemAlloc malloc 0 0K 0
osti_cacheable 0 0K 0
tempbuff 0 0K 0
tempbuff 0 0K 0
ag_tgt_map_t malloc 0 0K 0
ag_slr_map_t malloc 0 0K 0
lDevFlags * malloc 0 0K 0
tiDeviceHandle_t * malloc 0 0K 0
ag_portal_data_t malloc 0 0K 0
ag_device_t malloc 0 0K 0
STLock malloc 0 0K 0
CCB List 0 0K 0
sr_iov 0 0K 0
OCS 0 0K 0
OCS 0 0K 0
nvme 0 0K 0
nvd 0 0K 0
netmap 0 0K 0
mwldev 0 0K 0
biobuf 0 0K 0
aios 0 0K 0
lio 0 0K 0
acl 0 0K 0
MVS driver 0 0K 0
mbuf_tag 0 0K 229
accf 0 0K 0
pts 0 0K 0
ioctlops 0 0K 217
Witness 0 0K 0
stack 0 0K 0
CAM ccb queue 0 0K 0
mrsasbuf 0 0K 0
mpt_user 0 0K 0
sbuf 0 0K 288
mps_user 0 0K 0
firmware 0 0K 0
compressor 0 0K 0
MPSSAS 0 0K 0
SWAP 0 0K 0
mps 0 0K 0
mpr_user 0 0K 0
sysctltmp 0 0K 679
sysctl 0 0K 1
MPRSAS 0 0K 0
ekcd 0 0K 0
dumper 0 0K 0
sendfile 0 0K 3
rctl 0 0K 0
mpr 0 0K 0
mfibuf 0 0K 0
md_sectors 0 0K 0
md_disk 0 0K 0
malodev 0 0K 0
LED 0 0K 0
cache 0 0K 0
prison_racct 0 0K 0
Fail Points 0 0K 0
sigio 0 0K 10
filedesc_to_leader 0 0K 0
pwd 0 0K 0
tty console 0 0K 0
ix_sriov 0 0K 0
aacraidcam 0 0K 0
ix 0 0K 0
ipsbuf 0 0K 0
iirbuf 0 0K 0
aacraid_buf 0 0K 0
aaccam 0 0K 0
isofs_node 0 0K 0
isofs_mount 0 0K 0
tr_raid5_data 0 0K 0
tr_raid1e_data 0 0K 0
tr_raid1_data 0 0K 0
tr_raid0_data 0 0K 0
tr_concat_data 0 0K 0
md_sii_data 0 0K 0
md_promise_data 0 0K 0
md_nvidia_data 0 0K 0
md_jmicron_data 0 0K 0
md_intel_data 0 0K 0
md_ddf_data 0 0K 0
raid_data 0 0K 72
geom_flashmap 0 0K 0
tmpfs dir 0 0K 0
tmpfs name 0 0K 0
tmpfs mount 0 0K 0
NFS FHA 0 0K 0
newnfsmnt 0 0K 0
newnfsclient_req 0 0K 0
NFSCL layrecall 0 0K 0
NFSCL session 0 0K 0
NFSCL sockreq 0 0K 0
NFSCL devinfo 0 0K 0
NFSCL flayout 0 0K 0
NFSCL layout 0 0K 0
NFSD rollback 0 0K 0
NFSCL diroffdiroff 0 0K 0
NEWdirectio 0 0K 0
NEWNFSnode 0 0K 0
NFSCL lck 0 0K 0
NFSCL lckown 0 0K 0
NFSCL client 0 0K 0
NFSCL deleg 0 0K 0
NFSCL open 0 0K 0
NFSCL owner 0 0K 0
NFS fh 0 0K 0
NFS req 0 0K 0
NFSD usrgroup 0 0K 0
NFSD string 0 0K 0
NFSD V4lock 0 0K 0
NFSD V4state 0 0K 0
NFSD srvcache 0 0K 0
msdosfs_fat 0 0K 0
msdosfs_mount 0 0K 0
msdosfs_node 0 0K 0
DEVFS4 0 0K 0
DEVFS2 0 0K 0
gntdev 0 0K 0
privcmd_dev 0 0K 0
evtchn_dev 0 0K 0
xenstore 0 0K 0
aacbuf 0 0K 0
xnb 0 0K 0
xbbd 0 0K 0
xbd 0 0K 0
Balloon 0 0K 0
sysmouse 0 0K 0
vtfont 0 0K 0
zstd 0 0K 0
db> show uma
Zone Size Used Free Requests Sleeps Bucket Total Mem XFree
mbuf_cluster 2048 9668 0 9668 0 254 19800064 0
RADIX NODE 144 12422 14287 1613950 0 62 3846096 0
pbuf 2632 0 973 0 0 2 2560936 0
mbuf_packet 256 8255 1285 1151085 0 254 2442240 0
mbuf_jumbo_page 4096 0 509 12591 0 254 2084864 0
BUF TRIE 144 186 13282 24954 0 62 1939392 0
malloc-384 384 4139 11 4143 0 30 1593600 0
malloc-4096 4096 337 1 498 0 2 1384448 0
malloc-128 128 10514 26 10883 0 126 1349120 0
mbuf 256 1857 2223 1493086 0 254 1044480 0
UMA Slabs 0 112 6253 8 6253 0 126 701232 0
FFS inode 1128 512 27 10352 0 8 607992 0
VM OBJECT 264 1306 74 146050 0 30 364320 0
256 Bucket 2048 148 20 11161 0 8 344064 0
VNODE 488 548 92 10390 0 30 312320 0
THREAD 1792 144 27 11205 0 8 306432 0
malloc-4096 4096 62 6 11130 0 2 278528 0
malloc-65536 65536 4 0 4 0 1 262144 0
malloc-65536 65536 3 1 11 0 1 262144 0
DEVCTL 1024 4 208 128 0 0 217088 0
malloc-384 384 66 494 11953 0 30 215040 0
malloc-16384 16384 7 6 9607 0 1 212992 0
malloc-16 16 12270 480 14991 0 254 204000 0
malloc-65536 65536 0 3 129 0 1 196608 0
malloc-32768 32768 2 4 15 0 1 196608 0
malloc-32768 32768 0 6 2520 0 1 196608 0
malloc-64 64 2757 141 4081 0 254 185472 0
MAP ENTRY 96 1491 399 564498 0 126 181440 0
malloc-256 256 102 588 11985 0 62 176640 0
UMA Zones 768 226 3 226 0 16 175872 0
sctp_chunk 152 384 760 168696 0 254 173888 0
malloc-32 32 4838 580 19629 0 254 173376 0
FFS2 dinode 256 512 133 10351 0 62 165120 0
sctp_asoc 2288 19 51 1342 0 254 160160 0
malloc-128 128 1128 81 25318 0 126 154752 0
sctp_raddr 736 29 180 5442 0 254 153824 0
socket 944 82 78 9291 0 254 151040 0
malloc-256 256 146 424 14760 0 62 145920 0
malloc-4096 4096 35 0 46 0 2 143360 0
S VFS Cache 104 1007 358 10970 0 126 141960 0
malloc-65536 65536 0 2 149 0 1 131072 0
malloc-65536 65536 2 0 2 0 1 131072 0
64 Bucket 512 202 54 28750 0 30 131072 0
vmem btag 56 2119 101 2119 0 254 124320 0
malloc-1024 1024 117 3 159 0 16 122880 0
VMSPACE 2544 36 12 10527 0 4 122112 0
malloc-128 128 214 716 30020 0 126 119040 0
ksiginfo 112 63 981 1263 0 126 116928 0
PROC 1320 58 20 10543 0 8 102960 0
tcpcb 1048 53 35 4139 0 254 92224 0
malloc-256 256 220 140 33106 0 62 92160 0
malloc-2048 2048 20 24 33702 0 8 90112 0
128 Bucket 1024 53 34 1998 0 16 89088 0
clpbuf 2632 0 32 20 0 16 84224 0
filedesc0 1072 59 18 10544 0 8 82544 0
UMA Kegs 384 212 1 212 0 30 81792 0
malloc-256 256 153 162 30847 0 62 80640 0
malloc-128 128 311 278 10107 0 126 75392 0
malloc-8192 8192 6 3 34 0 1 73728 0
malloc-64 64 586 548 144522 0 254 72576 0
malloc-16384 16384 3 1 5 0 1 65536 0
g_bio 408 0 160 123761 0 30 65280 0
sctp_ep 1280 19 29 2127 0 254 61440 0
malloc-384 384 93 67 4374 0 30 61440 0
malloc-1024 1024 21 35 1384 0 16 57344 0
tcp_inpcb 488 54 58 4139 0 254 54656 0
32 Bucket 256 74 136 7209 0 62 53760 0
malloc-64 64 265 554 21361 0 254 52416 0
malloc-128 128 135 268 10025 0 126 51584 0
malloc-2048 2048 9 13 519 0 8 45056 0
tcp_bbr_pcb 832 31 23 464 0 16 44928 0
pipe 744 22 38 1620 0 16 44640 0
malloc-64 64 524 169 1625 0 254 44352 0
malloc-384 384 99 11 446 0 30 42240 0
malloc-256 256 24 141 30478 0 62 42240 0
DIRHASH 1024 34 2 34 0 16 36864 0
NAMEI 1024 1 35 54329 0 16 36864 0
pcpu-8 8 4246 362 4250 0 254 36864 0
malloc-32768 32768 1 0 1 0 1 32768 0
malloc-32768 32768 0 1 126 0 1 32768 0
malloc-16384 16384 2 0 5 0 1 32768 0
malloc-8192 8192 3 1 5 0 1 32768 0
pcpu-64 64 452 60 452 0 254 32768 0
malloc-2048 2048 3 11 84 0 8 28672 0
16 Bucket 144 68 128 52166 0 62 28224 0
KNOTE 160 28 147 192398 0 62 28000 0
Files 80 218 132 29688 0 126 28000 0
8 Bucket 80 48 302 30674 0 126 28000 0
malloc-128 128 142 75 857 0 126 27776 0
unpcb 256 17 88 1886 0 254 26880 0
TURNSTILE 136 172 17 172 0 62 25704 0
malloc-8192 8192 2 1 6 0 1 24576 0
malloc-8192 8192 2 1 102 0 1 24576 0
malloc-8192 8192 3 0 3 0 1 24576 0
malloc-4096 4096 4 2 8 0 2 24576 0
malloc-4096 4096 1 5 9798 0 2 24576 0
PWD 32 19 737 9688 0 254 24192 0
malloc-64 64 329 49 17007 0 254 24192 0
ttyinq 160 135 15 300 0 62 24000 0
ttyoutq 256 72 18 160 0 62 23040 0
malloc-384 384 23 37 161 0 30 23040 0
malloc-256 256 49 41 192 0 62 23040 0
malloc-256 256 62 28 777 0 62 23040 0
malloc-256 256 71 19 549 0 62 23040 0
malloc-4096 4096 3 2 7 0 2 20480 0
malloc-2048 2048 6 4 262 0 8 20480 0
malloc-1024 1024 18 2 18 0 16 20480 0
malloc-512 512 2 38 1700 0 30 20480 0
4 Bucket 48 7 413 4806 0 254 20160 0
2 Bucket 32 71 559 12470 0 254 20160 0
tcp_bbr_map 128 93 62 1030 0 126 19840 0
SLEEPQUEUE 88 172 52 172 0 126 19712 0
Mountpoints 2752 2 5 2 0 4 19264 0
malloc-16384 16384 1 0 1 0 1 16384 0
malloc-16384 16384 0 1 153 0 1 16384 0
malloc-16384 16384 1 0 1 0 1 16384 0
malloc-8192 8192 2 0 2 0 1 16384 0
malloc-8192 8192 2 0 2 0 1 16384 0
malloc-2048 2048 7 1 7 0 8 16384 0
malloc-1024 1024 6 10 1203 0 16 16384 0
malloc-1024 1024 14 2 14 0 16 16384 0
malloc-32 32 347 157 3914 0 254 16128 0
vtnet_tx_hdr 24 0 668 569760 0 254 16032 0
ripcb 488 4 28 439 0 254 15616 0
udplite_inpcb 488 0 32 112 0 254 15616 0
udp_inpcb 488 2 30 503 0 254 15616 0
malloc-384 384 25 15 27 0 30 15360 0
malloc-2048 2048 3 3 15 0 8 12288 0
malloc-2048 2048 3 3 194 0 8 12288 0
malloc-512 512 1 23 119 0 30 12288 0
malloc-64 64 75 114 92 0 254 12096 0
malloc-64 64 57 132 3120 0 254 12096 0
malloc-128 128 60 33 3207 0 126 11904 0
sctp_readq 152 1 77 1078 0 254 11856 0
malloc-8192 8192 1 0 1 0 1 8192 0
malloc-4096 4096 1 1 3 0 2 8192 0
malloc-2048 2048 1 3 107 0 8 8192 0
malloc-1024 1024 2 6 2 0 16 8192 0
malloc-1024 1024 4 4 178 0 16 8192 0
malloc-1024 1024 3 5 20 0 16 8192 0
malloc-512 512 10 6 10 0 30 8192 0
malloc-512 512 2 14 561 0 30 8192 0
malloc-512 512 3 13 72 0 30 8192 0
malloc-512 512 2 14 44 0 30 8192 0
malloc-512 512 8 8 8 0 30 8192 0
rtentry 176 32 14 36 0 62 8096 0
tcp_log_bucket 176 0 46 5 0 62 8096 0
rl_entry 40 73 129 73 0 254 8080 0
sctp_stream_msg_out 112 7 65 989 0 254 8064 0
sctp_laddr 48 24 144 341 0 254 8064 0
udpcb 32 2 250 615 0 254 8064 0
malloc-64 64 52 74 3458 0 254 8064 0
malloc-32 32 101 151 4947 0 254 8064 0
malloc-32 32 75 177 2130 0 254 8064 0
malloc-32 32 59 193 894 0 254 8064 0
malloc-32 32 4 248 177 0 254 8064 0
malloc-32 32 30 222 2724 0 254 8064 0
malloc-16 16 16 484 46 0 254 8000 0
malloc-16 16 28 472 3715 0 254 8000 0
malloc-16 16 99 401 5739 0 254 8000 0
malloc-16 16 188 312 3051 0 254 8000 0
malloc-16 16 8 492 8 0 254 8000 0
malloc-16 16 256 244 259 0 254 8000 0
malloc-16 16 27 473 24504 0 254 8000 0
malloc-128 128 20 42 112 0 126 7936 0
tcp_log_node 120 0 66 10 0 126 7920 0
kenv 258 3 27 1015 0 30 7740 0
routing nhops 256 28 2 36 0 62 7680 0
tcp_log 416 0 18 5 0 254 7488 0
FPU_save_area 832 1 8 1 0 16 7488 0
cpuset 104 7 55 24 0 126 6448 0
domainset 40 0 126 13 0 254 5040 0
epoch_record pcpu 256 4 12 4 0 62 4096 0
malloc-512 512 1 7 2 0 30 4096 0
pcpu-16 16 7 249 7 0 254 4096 0
sctp_asconf_ack 48 0 84 181 0 254 4032 0
hostcache 96 1 41 1 0 254 4032 0
syncache 168 0 24 4 0 254 4032 0
malloc-32 32 8 118 31 0 254 4032 0
UMA Slabs 1 176 8 14 8 0 62 3872 0
malloc-384 384 1 9 1 0 30 3840 0
malloc-384 384 1 9 1 0 30 3840 0
KMAP ENTRY 96 12 27 12 0 0 3744 0
vmem 1856 1 1 1 0 8 3712 0
SMR CPU 32 2 29 2 0 254 992 0
SMR SHARED 24 2 29 2 0 254 744 0
FFS1 dinode 128 0 0 0 0 126 0 0
swblk 136 0 0 0 0 62 0 0
swpctrie 144 0 0 0 0 62 0 0
sctp_asconf 40 0 0 0 0 254 0 0
pf state scrubs 40 0 0 0 0 254 0 0
pf frag entries 40 0 0 0 0 254 0 0
pf frags 248 0 0 0 0 62 0 0
pf table entries 160 0 0 0 0 62 0 0
pf table entry counters 64 0 0 0 0 254 0 0
pf source nodes 136 0 0 0 0 254 0 0
pf state keys 88 0 0 0 0 126 0 0
pf states 296 0 0 0 0 254 0 0
pf tags 104 0 0 0 0 126 0 0
pf mtags 48 0 0 0 0 254 0 0
IPsec SA lft_c 16 0 0 0 0 254 0 0
tcpreass 48 0 0 0 0 254 0 0
tfo_ccache_entries 80 0 0 0 0 126 0 0
tfo 4 0 0 0 0 254 0 0
sackhole 32 0 0 0 0 254 0 0
tcptw 88 0 0 0 0 254 0 0
ipq 56 0 0 0 0 254 0 0
itimer 352 0 0 0 0 30 0 0
AIOLIO 272 0 0 0 0 30 0 0
AIOCB 488 0 0 0 0 30 0 0
AIOP 32 0 0 0 0 254 0 0
AIO 208 0 0 0 0 62 0 0
TMPFS node 224 0 0 0 0 62 0 0
NCLNODE 592 0 0 0 0 16 0 0
LTS VFS Cache 360 0 0 0 0 30 0 0
L VFS Cache 320 0 0 0 0 30 0 0
STS VFS Cache 144 0 0 0 0 62 0 0
crypto_session 72 0 0 0 0 126 0 0
cryptop 280 0 0 0 0 30 0 0
IOMMU_MAP_ENTRY 120 0 0 0 0 126 0 0
ktls_session 192 0 0 0 0 62 0 0
mbuf_jumbo_16k 16384 0 0 0 0 254 0 0
mbuf_jumbo_9k 9216 0 0 0 0 254 0 0
audit_record 1280 0 0 0 0 8 0 0
MAC labels 40 0 0 0 0 254 0 0
vnpbuf 2632 0 0 0 0 62 0 0
mdpbuf 2632 0 0 0 0 4 0 0
nfspbuf 2632 0 0 0 0 16 0 0
swwbuf 2632 0 0 0 0 8 0 0
swrbuf 2632 0 0 0 0 16 0 0
umtx_shm 88 0 0 0 0 126 0 0
umtx pi 96 0 0 0 0 126 0 0
rangeset pctrie nodes 144 0 0 0 0 62 0 0
malloc-65536 65536 0 0 0 0 1 0 0
malloc-65536 65536 0 0 0 0 1 0 0
malloc-65536 65536 0 0 0 0 1 0 0
malloc-32768 32768 0 0 0 0 1 0 0
malloc-32768 32768 0 0 0 0 1 0 0
malloc-32768 32768 0 0 0 0 1 0 0
malloc-32768 32768 0 0 0 0 1 0 0
malloc-16384 16384 0 0 0 0 1 0 0
malloc-16384 16384 0 0 0 0 1 0 0
malloc-4096 4096 0 0 0 0 2 0 0
pcpu-32 32 0 0 0 0 254 0 0
pcpu-4 4 0 0 0 0 254 0 0
fakepg 104 0 0 0 0 126 0 0
UMA Hash 256 0 0 0 0 62 0 0


---
This report is generated by a bot. It may contain errors.
See https://goo.gl/tpsmEJ for more information about syzbot.
syzbot engineers can be reached at syzk...@googlegroups.com.

syzbot will keep track of this issue. See:
https://goo.gl/tpsmEJ#status for how to communicate with syzbot.

syzbot

unread,
Mar 1, 2021, 5:46:10 AM3/1/21
to syzkaller-f...@googlegroups.com
Auto-closing this bug as obsolete.
Crashes did not happen for a while, no reproducer and no activity.
Reply all
Reply to author
Forward
0 new messages