panic: ASan: Invalid access, 8-byte read in sctp_inpcb_free
4 views
Skip to first unread message
syzbot
Jul 10, 2021, 8:02:25 PM7/10/21
to syzkaller-f...@googlegroups.com
Hello,
syzbot found the following issue on:
HEAD commit: 58080fbc libalias: fix divide by zero causing panic
git tree: https://github.com/freebsd/freebsd-src.git main
console output: https://syzkaller.appspot.com/x/log.txt?x=1014a46c300000
dashboard link: https://syzkaller.appspot.com/bug?extid=1b064007a79b75637dc7
Unfortunately, I don't have any reproducer for this issue yet.
IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+1b0640...@syzkaller.appspotmail.com
panic: ASan: Invalid access, 8-byte read at 0xfffffe00a754a728, UMAUseAfterFree(fd)
cpuid = 1
time = 1625941914
KDB: stack backtrace:
db_trace_self_wrapper() at db_trace_self_wrapper+0xc7/frame 0xfffffe009bff2e70
kdb_backtrace() at kdb_backtrace+0xd3/frame 0xfffffe009bff2fd0
vpanic() at vpanic+0x2c5/frame 0xfffffe009bff30b0
panic() at panic+0xb5/frame 0xfffffe009bff3180
__asan_load8_noabort() at __asan_load8_noabort+0x36f/frame 0xfffffe009bff3240
sctp_inpcb_free() at sctp_inpcb_free+0x666/frame 0xfffffe009bff32d0
sctp_close() at sctp_close+0x1e4/frame 0xfffffe009bff33b0
soclose() at soclose+0x1a4/frame 0xfffffe009bff34c0
_fdrop() at _fdrop+0x58/frame 0xfffffe009bff34f0
closef() at closef+0x686/frame 0xfffffe009bff36e0
fdescfree_fds() at fdescfree_fds+0x1fa/frame 0xfffffe009bff3750
fdescfree() at fdescfree+0x903/frame 0xfffffe009bff3940
exit1() at exit1+0x8b7/frame 0xfffffe009bff39d0
sys_sys_exit() at sys_sys_exit+0x28/frame 0xfffffe009bff39f0
amd64_syscall() at amd64_syscall+0x425/frame 0xfffffe009bff3bf0
fast_syscall_common() at fast_syscall_common+0xf8/frame 0xfffffe009bff3bf0
--- syscall (1, FreeBSD ELF64, sys_sys_exit), rip = 0x2e985a, rsp = 0x7fffffffe478, rbp = 0x7fffffffe480 ---
KDB: enter: panic
[ thread pid 2743 tid 102802 ]
Stopped at kdb_enter+0x6b: movq $0,0x28f9c3a(%rip)
db>
db> set $lines = 0
db> set $maxwidth = 0
db> show registers
cs 0x20
ds 0x3b
es 0x3b
fs 0x13
gs 0x1b
ss 0x28
rax 0x12
rcx 0x4cf660f5f8471c35
rdx 0x1
rbx 0
rsp 0xfffffe009bff2fb0
rbp 0xfffffe009bff2fd0
rsi 0
rdi 0xffffffff8179b3d9 vprintf+0x319
r8 0x3
r9 0xfffffe009bff2b08
r10 0
r11 0xfffffe009e4086f0
r12 0xfffffe00a7705560
r13 0xfffffe009bff3001
r14 0xffffffff82c427e0 .str.18
r15 0xffffffff82c427e0 .str.18
rip 0xffffffff8178edfb kdb_enter+0x6b
rflags 0x46
kdb_enter+0x6b: movq $0,0x28f9c3a(%rip)
db> show proc
Process 2743 (syz-executor.2) at 0xfffffe00a76c1000:
state: NORMAL
uid: 0 gids: 0, 0, 5
parent: pid 793 at 0xfffffe009e401000
ABI: FreeBSD ELF64
flag: 0x10002000 flag2: 0
arguments: /root/syz-executor.2
reaper: 0xfffffe0053d51538 reapsubtree: 1
sigparent: 20
vmspace: 0xfffffe00a7821000
(map 0xfffffe00a7821000)
(map.pmap 0xfffffe00a78210c0)
(pmap 0xfffffe00a7821120)
threads: 1
102802 Run CPU 1 syz-executor.2
db> ps
pid ppid pgrp uid state wmesg wchan cmd
2745 790 790 0 S (threaded) syz-executor.1
102835 S nanslp 0xffffffff84055901 syz-executor.1
103431 S connec 0xfffffe00a75eabf0 syz-executor.1
103434 S uwait 0xfffffe009e0a3f00 syz-executor.1
2743 793 793 0 RE CPU 1 syz-executor.2
2665 1 793 60929 S uwait 0xfffffe009e9d3900 syz-executor.2
2276 1 827 0 S uwait 0xfffffe009e9d3500 syz-executor.3
2275 1 827 0 S uwait 0xfffffe009e9d3800 syz-executor.3
2274 1 793 0 S uwait 0xfffffe00a3bea780 syz-executor.2
2273 1 793 0 S uwait 0xfffffe00a3a65c00 syz-executor.2
2271 1 827 0 S uwait 0xfffffe009e3fe400 syz-executor.3
2266 1 793 0 S uwait 0xfffffe00a3a65580 syz-executor.2
2260 1 793 0 S uwait 0xfffffe00a3a65480 syz-executor.2
2259 1 827 0 S uwait 0xfffffe00a3a37200 syz-executor.3
2258 1 793 0 S uwait 0xfffffe00a3a42a00 syz-executor.2
2257 1 827 0 S uwait 0xfffffe009e3fb780 syz-executor.3
2256 1 793 0 S uwait 0xfffffe00a707fd80 syz-executor.2
2254 1 827 0 S uwait 0xfffffe009e3fb180 syz-executor.3
2246 1 793 0 S uwait 0xfffffe00a3a42000 syz-executor.2
2245 1 827 0 S uwait 0xfffffe00a3bea380 syz-executor.3
2244 1 793 0 S uwait 0xfffffe009e9d3d00 syz-executor.2
2243 1 827 0 S uwait 0xfffffe00a3a37400 syz-executor.3
2242 1 793 0 S uwait 0xfffffe009e3fe300 syz-executor.2
2241 1 827 0 S uwait 0xfffffe00a3bea480 syz-executor.3
2234 1 793 0 S uwait 0xfffffe00a3a42400 syz-executor.2
2233 1 793 0 S uwait 0xfffffe00a3a65800 syz-executor.2
2232 1 793 0 S uwait 0xfffffe009e3fe200 syz-executor.2
2229 1 793 0 S uwait 0xfffffe009e3fed80 syz-executor.2
2228 1 793 0 S uwait 0xfffffe00a3a65e80 syz-executor.2
2227 1 793 0 S uwait 0xfffffe00a3a42600 syz-executor.2
1981 1 790 0 S uwait 0xfffffe00a3a37500 syz-executor.1
1977 1 793 0 S uwait 0xfffffe009e9d3b00 syz-executor.2
1974 1 790 0 S uwait 0xfffffe00a3a37100 syz-executor.1
1971 1 789 0 S uwait 0xfffffe009e2e5880 syz-executor.0
1967 1 793 0 S uwait 0xfffffe009e3fee00 syz-executor.2
1965 1 790 0 S uwait 0xfffffe00a3bea080 syz-executor.1
1962 1 793 0 S uwait 0xfffffe00a707ff00 syz-executor.2
1960 1 789 0 S uwait 0xfffffe00a3a37600 syz-executor.0
1955 1 789 0 S uwait 0xfffffe00a3bea880 syz-executor.0
1950 1 827 0 S uwait 0xfffffe009e3fef00 syz-executor.3
1946 1 827 0 S uwait 0xfffffe009e3fea00 syz-executor.3
1934 1 827 0 S uwait 0xfffffe00a3beaa80 syz-executor.3
1930 1 790 0 S uwait 0xfffffe009e3fe900 syz-executor.1
1926 1 827 0 S uwait 0xfffffe00a3bea180 syz-executor.3
1922 1 790 0 S uwait 0xfffffe00a3bea680 syz-executor.1
1918 1 827 0 S uwait 0xfffffe009e3fb280 syz-executor.3
1914 1 790 0 S uwait 0xfffffe009e3fe100 syz-executor.1
1910 1 790 0 S uwait 0xfffffe00a3a42800 syz-executor.1
1900 1 790 0 S uwait 0xfffffe00a3bea580 syz-executor.1
1688 1 1688 65 Ss select 0xfffffe00a707f7c0 dhclient
1639 1 793 0 S uwait 0xfffffe009e537880 syz-executor.2
1630 1 793 0 S uwait 0xfffffe009e9d3a00 syz-executor.2
1629 1 789 0 S uwait 0xfffffe009e2e5c80 syz-executor.0
1623 1 789 0 S uwait 0xfffffe00a3bea280 syz-executor.0
1619 1 793 0 S uwait 0xfffffe00a3a37800 syz-executor.2
1611 1 789 0 S uwait 0xfffffe00a3a42500 syz-executor.0
1608 1 789 0 S uwait 0xfffffe00a3a42b00 syz-executor.0
1603 1 789 0 S uwait 0xfffffe009e9d3e00 syz-executor.0
1523 1 1523 0 Ss select 0xfffffe00a707fa40 dhclient
1520 1 1520 0 Ss select 0xfffffe00a707f6c0 dhclient
1491 1 1491 65 Ss select 0xfffffe009e3fb440 dhclient
1395 1 1395 0 Ss select 0xfffffe00a3a37040 dhclient
1388 1 1388 0 Ss select 0xfffffe009e3feec0 dhclient
1367 1 1367 65 Ss select 0xfffffe009e537f40 dhclient
1179 1 1179 0 Ss select 0xfffffe00a3beabc0 dhclient
1174 1 1174 0 Ss select 0xfffffe00a3beaec0 dhclient
1152 1 1152 65 Ss select 0xfffffe00a3a37ac0 dhclient
944 1 944 0 Ss select 0xfffffe00a3a37a40 dhclient
941 1 941 0 Ss select 0xfffffe00a3a65f40 dhclient
827 782 827 0 Ss piperd 0xfffffe009788d8b8 syz-executor.3
793 782 793 0 Ss nanslp 0xffffffff84055900 syz-executor.2
790 782 790 0 Ss nanslp 0xffffffff84055901 syz-executor.1
789 782 789 0 Ss piperd 0xfffffe009e9885d0 syz-executor.0
782 780 780 0 S (threaded) syz-fuzzer
100097 S uwait 0xfffffe005874ea00 syz-fuzzer
100118 S uwait 0xfffffe009e3fbb80 syz-fuzzer
100119 S uwait 0xfffffe009e3fbc80 syz-fuzzer
100120 S uwait 0xfffffe009e3fbd80 syz-fuzzer
100121 S uwait 0xfffffe009e3fbe80 syz-fuzzer
100122 S uwait 0xfffffe005874e000 syz-fuzzer
100123 S uwait 0xfffffe009e3fe500 syz-fuzzer
100124 S kqread 0xfffffe009791a400 syz-fuzzer
100125 S uwait 0xfffffe009e3fe700 syz-fuzzer
780 778 780 0 Ss pause 0xfffffe009e3d15e8 csh
778 694 778 0 Ss select 0xfffffe009e537ec0 sshd
760 1 760 0 Ss+ ttyin 0xfffffe0056fe0cb0 getty
759 1 759 0 Ss+ ttyin 0xfffffe00583ed0b0 getty
758 1 758 0 Ss+ ttyin 0xfffffe00583ed4b0 getty
757 1 757 0 Ss+ ttyin 0xfffffe00583ed8b0 getty
756 1 756 0 Ss+ ttyin 0xfffffe00583edcb0 getty
755 1 755 0 Ss+ ttyin 0xfffffe00583950b0 getty
754 1 754 0 Ss+ ttyin 0xfffffe00583954b0 getty
753 1 753 0 Ss+ ttyin 0xfffffe00583958b0 getty
752 1 752 0 Ss+ ttyin 0xfffffe0058395cb0 getty
698 1 698 0 Ss nanslp 0xffffffff84055900 cron
694 1 694 0 Ss select 0xfffffe009e3fec40 sshd
507 1 507 0 Ss select 0xfffffe009e2e52c0 syslogd
436 1 436 0 Ss select 0xfffffe009e2e51c0 devd
435 1 435 65 Ss select 0xfffffe009e3fb4c0 dhclient
350 1 350 0 Ss select 0xfffffe009e2e50c0 dhclient
347 1 347 0 Ss select 0xfffffe005874e0c0 dhclient
23 0 0 0 DL syncer 0xffffffff8417ba40 [syncer]
22 0 0 0 DL vlruwt 0xfffffe0058747a70 [vnlru]
21 0 0 0 DL (threaded) [bufdaemon]
100083 D qsleep 0xffffffff84179940 [bufdaemon]
100086 D - 0xffffffff83411f80 [bufspacedaemon-0]
100095 D sdflush 0xfffffe0097925ce8 [/ worker]
20 0 0 0 DL psleep 0xffffffff841b1c80 [vmdaemon]
19 0 0 0 DL (threaded) [pagedaemon]
100081 D psleep 0xffffffff841a57b8 [dom0]
100087 D launds 0xffffffff841a57c4 [laundry: dom0]
100088 D umarcl 0xffffffff81e7e640 [uma]
18 0 0 0 DL - 0xffffffff83e0caa0 [rand_harvestq]
17 0 0 0 DL waiting 0xffffffff84d6e460 [sctp_iterator]
16 0 0 0 DL pftm 0xffffffff8494dd30 [pf purge]
15 0 0 0 DL - 0xffffffff84174dc0 [soaiod4]
9 0 0 0 DL - 0xffffffff84174dc0 [soaiod3]
8 0 0 0 DL - 0xffffffff84174dc0 [soaiod2]
7 0 0 0 DL - 0xffffffff84174dc0 [soaiod1]
6 0 0 0 DL (threaded) [cam]
100046 D - 0xffffffff83c92240 [doneq0]
100047 D - 0xffffffff83c921c0 [async]
100080 D - 0xffffffff83c92040 [scanner]
14 0 0 0 DL seqstat 0xfffffe0056aadc88 [sequencer 00]
5 0 0 0 DL crypto_ 0xfffffe00541abd80 [crypto returns 1]
4 0 0 0 DL crypto_ 0xfffffe00541abd30 [crypto returns 0]
3 0 0 0 DL crypto_ 0xffffffff8419f860 [crypto]
13 0 0 0 DL (threaded) [geom]
100037 D - 0xffffffff84028ec0 [g_event]
100038 D - 0xffffffff84028f00 [g_up]
100039 D - 0xffffffff84028f40 [g_down]
2 0 0 0 DL (threaded) [KTLS]
100028 D - 0xfffffe0053e16e00 [thr_0]
100029 D - 0xfffffe0053e16e80 [thr_1]
12 0 0 0 WL (threaded) [intr]
100010 I [swi6: task queue]
100011 I [swi6: Giant taskq]
100014 I [swi5: fast taskq]
100030 I [swi1: netisr 0]
100031 I [swi3: vm]
100032 I [swi4: clock (0)]
100033 I [swi4: clock (1)]
100034 I [swi1: hpts]
100035 I [swi1: hpts]
100048 I [irq24: virtio_pci0]
100049 I [irq25: virtio_pci0]
100050 I [irq26: virtio_pci0]
100051 I [irq27: virtio_pci0]
100052 I [irq28: virtio_pci1]
100053 I [irq29: virtio_pci1]
100054 I [irq30: virtio_pci1]
100055 I [irq31: virtio_pci1]
100056 I [irq32: virtio_pci1]
100061 I [irq10: virtio_pci2]
100063 I [irq1: atkbd0]
100064 I [irq12: psm0]
100065 I [swi0: uart uart++]
100073 I [swi1: pf send]
11 0 0 0 RL (threaded) [idle]
100003 Run CPU 0 [idle: cpu0]
100004 CanRun [idle: cpu1]
1 0 1 0 SLs wait 0xfffffe0053d51538 [init]
10 0 0 0 DL audit_w 0xffffffff841a0800 [audit]
0 0 0 0 DLs (threaded) [kernel]
100000 D swapin 0xffffffff84029dc0 [swapper]
100005 D - 0xfffffe0053c0d800 [softirq_0]
100006 D - 0xfffffe0053c0d600 [softirq_1]
100007 D - 0xfffffe0053c0d400 [if_io_tqg_0]
100008 D - 0xfffffe0053c0d200 [if_io_tqg_1]
100009 D - 0xfffffe0053c0d000 [if_config_tqg_0]
100012 D - 0xfffffe000791b500 [thread taskq]
100013 D - 0xfffffe000791b400 [inm_free taskq]
100015 D - 0xfffffe000791b200 [kqueue_ctx taskq]
100016 D - 0xfffffe000791b100 [linuxkpi_irq_wq]
100017 D - 0xfffffe000791b000 [aiod_kick taskq]
100018 D - 0xfffffe0053df6e00 [in6m_free taskq]
100019 D - 0xfffffe0053df6d00 [pci_hp taskq]
100020 D - 0xfffffe0053df6c00 [linuxkpi_short_wq_0]
100021 D - 0xfffffe0053df6c00 [linuxkpi_short_wq_1]
100022 D - 0xfffffe0053df6c00 [linuxkpi_short_wq_2]
100023 D - 0xfffffe0053df6c00 [linuxkpi_short_wq_3]
100024 D - 0xfffffe0053df6b00 [linuxkpi_long_wq_0]
100025 D - 0xfffffe0053df6b00 [linuxkpi_long_wq_1]
100026 D - 0xfffffe0053df6b00 [linuxkpi_long_wq_2]
100027 D - 0xfffffe0053df6b00 [linuxkpi_long_wq_3]
100036 D - 0xfffffe0053df6a00 [firmware taskq]
100040 D - 0xfffffe0053df6900 [crypto_0]
100041 D - 0xfffffe0053df6900 [crypto_1]
100057 D - 0xfffffe0053df6700 [vtnet0 rxq 0]
100058 D - 0xfffffe0053df6600 [vtnet0 txq 0]
100059 D - 0xfffffe0053df6500 [vtnet0 rxq 1]
100060 D - 0xfffffe0053df6400 [vtnet0 txq 1]
100062 D vtbslp 0xfffffe0056fc0380 [virtio_balloon]
100066 D - 0xfffffe0053df6300 [mca taskq]
100071 D - 0xffffffff82c49760 [deadlkres]
100076 D - 0xfffffe0058394e00 [acpi_task_0]
100077 D - 0xfffffe0058394e00 [acpi_task_1]
100078 D - 0xfffffe0058394e00 [acpi_task_2]
100079 D - 0xfffffe0053df6800 [CAM taskq]
db> show all locks
Process 2743 (syz-executor.2) thread 0xfffffe00a7705560 (102802)
exclusive sleep mutex sctp-inp (inp) r = 0 (0xfffffe00a7319468) locked @ /syzkaller/managers/main/kernel/sys/netinet/sctp_pcb.c:3333
exclusive rw sctp-info (sctp-info) r = 0 (0xfffffe00081af390) locked @ /syzkaller/managers/main/kernel/sys/netinet/sctp_pcb.c:3331
exclusive sleep mutex sctp-create (inp_create) r = 0 (0xfffffe00a7319488) locked @ /syzkaller/managers/main/kernel/sys/netinet/sctp_pcb.c:3330
db> show malloc
Type InUse MemUse Requests
pf_hash 5 11524K 5
devbuf 4216 4338K 4244
tcp_hpts 6 3201K 6
sysctloid 34320 2027K 34387
vtbuf 24 1968K 46
kobj 326 1304K 486
newblk 77 1043K 5685
vfscache 3 1025K 3
filedesc 118 938K 3441
pcb 238 770K 4349
inodedep 13 517K 1977
ufs_quota 1 512K 1
vfs_hash 1 512K 1
callout 2 512K 2
subproc 237 499K 2880
intr 4 472K 4
vmem 3 274K 5
acpica 1674 184K 54806
vnet_data 1 168K 1
tidhash 3 141K 3
linker 357 140K 397
pagedep 9 130K 1725
tfo_ccache 1 128K 1
DEVFS1 107 107K 124
sem 4 106K 4
BPF 46 88K 54
bus 986 80K 3469
mtx_pool 2 72K 2
syncache 1 68K 1
acpitask 1 64K 1
ddb_capture 1 64K 1
module 510 64K 510
sctp_atcl 164 62K 2661
umtx 462 58K 462
kdtrace 313 58K 6194
sctp_stro 47 47K 764
temp 35 33K 2756
hostcache 1 32K 1
shm 1 32K 3
DEVFS3 126 32K 136
msg 4 30K 4
gtaskqueue 18 26K 18
kbdmux 6 22K 6
ifaddr 70 20K 72
DEVFS_RULE 56 20K 56
ufs_mount 5 17K 6
proc 3 17K 3
routetbl 131 17K 420
tty 16 16K 16
ithread 99 16K 99
bus-sc 33 14K 1684
KTRACE 100 13K 100
ifnet 7 13K 7
ether_multi 152 13K 162
lltable 40 12K 135
ksem 31 12K 97
kenv 95 12K 95
eventhandler 133 12K 133
cred 44 11K 321
CAM queue 5 11K 1528
rman 84 10K 425
GEOM 60 10K 489
kqueue 115 10K 2757
in6_multi 65 9K 65
sctp_atky 211 9K 3466
bmsafemap 2 9K 1899
UART 12 9K 12
devstat 4 9K 4
sctp_timw 32 8K 32
rpc 2 8K 2
shmfd 1 8K 12
pfs_vncache 1 8K 1
pfs_nodes 20 8K 20
DEVFSP 118 8K 597
audit_evclass 236 8K 294
pwddesc 112 7K 2754
taskqueue 60 7K 60
sglist 5 7K 5
CAM DEV 3 6K 510
plimit 24 6K 555
sctp_stri 11 6K 114
lockf 48 5K 314
ufs_dirhash 20 5K 24
freework 19 5K 2051
pf_ifnet 11 5K 66
UMA 270 5K 270
session 35 5K 66
vt 11 5K 11
memdesc 1 4K 1
MCA 32 4K 32
evdev 4 4K 4
kcovinfo 64 4K 68
acpisem 28 4K 28
selfd 55 4K 50580
hhook 15 4K 17
fpukern_ctx 3 3K 3
proc-args 52 3K 720
terminal 11 3K 11
sctp_athm 164 3K 2691
xform 40 3K 793
select 19 3K 146
uidinfo 4 3K 22
pf_osfp 18 3K 18
local_apic 1 2K 1
io_apic 1 2K 1
ipsec-saq 2 2K 2
ip6ndp 12 2K 13
inpcbpolicy 56 2K 1772
Unitno 29 2K 57
sctp_ifa 13 2K 14
CAM XPT 22 2K 543
in_multi 6 2K 8
sctp_map 94 2K 1500
freeblks 5 2K 1705
ipsecpolicy 2 2K 2
acpidev 20 2K 20
msi 9 2K 9
clone 9 2K 9
tun 7 2K 7
softdep 1 1K 1
dirrem 4 1K 1733
sahead 1 1K 1
secasvar 1 1K 1
nhops 6 1K 8
vnodemarker 2 1K 288
NFSD session 1 1K 1
CAM periph 4 1K 271
sctp_ifn 6 1K 14
ipsec 3 1K 3
indirdep 3 1K 169
mld 6 1K 6
igmp 6 1K 6
toponodes 6 1K 6
isadev 6 1K 6
mount 16 1K 89
pci_link 10 1K 10
mkdir 5 1K 3316
freefile 5 1K 1693
crypto 4 1K 177
encap_export_host 12 1K 12
procdesc 5 1K 18
osd 17 1K 842
newdirblk 4 1K 1658
diradd 4 1K 1774
pfil 4 1K 4
cdev 2 1K 2
chacha20random 1 1K 1
NFSD lckfile 1 1K 1
NFSD V4client 1 1K 1
DEVFS 9 1K 10
vnodes 1 1K 1
CAM SIM 2 1K 2
ktls 1 1K 1
feeder 7 1K 7
tcpfunc 3 1K 3
loginclass 3 1K 6
prison 6 1K 6
lkpikmalloc 5 1K 6
aesni_data 2 1K 2
soname 5 1K 6457
apmdev 1 1K 1
atkbddev 2 1K 2
CAM dev queue 2 1K 2
CAM I/O Scheduler 1 1K 1
CAM path 4 1K 1034
pmchooks 1 1K 1
nexusdev 7 1K 7
filecaps 5 1K 120
sctp_vrf 1 1K 1
vnet 1 1K 1
entropy 2 1K 48
acpiintr 1 1K 1
pmc 1 1K 1
cpus 2 1K 2
vnet_data_free 1 1K 1
Per-cpu 1 1K 1
p1003.1b 1 1K 1
sctp_mcore 0 0K 0
sctp_socko 0 0K 1073
sctp_iter 0 0K 12
sctp_mvrf 0 0K 0
sctp_cpal 0 0K 0
sctp_cmsg 0 0K 0
sctp_stre 0 0K 0
sctp_athi 0 0K 0
sctp_a_it 0 0K 12
sctp_aadr 0 0K 5
mqdata 0 0K 0
tcp_do 0 0K 0
tcp_fsb 0 0K 197
pf_table 0 0K 0
pf_rule 0 0K 86
pf_altq 0 0K 0
pf_temp 0 0K 0
cdg data 0 0K 9
chd data 0 0K 2
dctcp data 0 0K 13
htcp data 0 0K 8
cubic data 0 0K 17
vegas data 0 0K 10
NEWdirectio 0 0K 0
NEWNFSnode 0 0K 0
madt_table 0 0K 2
smartpqi 0 0K 0
NFSCL lck 0 0K 0
NFSCL lckown 0 0K 0
NFSCL client 0 0K 0
NFSCL deleg 0 0K 0
NFSCL open 0 0K 0
NFSCL owner 0 0K 0
NFS fh 0 0K 0
NFS req 0 0K 0
iavf 0 0K 0
ixl 0 0K 0
NFSD usrgroup 0 0K 0
NFSD string 0 0K 0
NFSD V4lock 0 0K 0
NFSD V4state 0 0K 0
NFSD srvcache 0 0K 0
ice-resmgr 0 0K 0
ice-osdep 0 0K 0
ice 0 0K 0
axgbe 0 0K 0
msdosfs_fat 0 0K 0
msdosfs_mount 0 0K 0
msdosfs_node 0 0K 0
DEVFS4 0 0K 0
DEVFS2 0 0K 0
xen_intr 0 0K 0
gntdev 0 0K 0
privcmd_dev 0 0K 0
xen_hvm 0 0K 0
legacydrv 0 0K 0
qpidrv 0 0K 0
evtchn_dev 0 0K 0
xenstore 0 0K 0
dmar_idpgtbl 0 0K 0
dmar_dom 0 0K 0
dmar_ctx 0 0K 0
ciss_data 0 0K 0
BACKLIGHT 0 0K 0
xnb 0 0K 0
isci 0 0K 0
iommu_dmamap 0 0K 0
xbbd 0 0K 0
hyperv_socket 0 0K 0
bxe_ilt 0 0K 0
xenbus 0 0K 0
xbd 0 0K 0
Balloon 0 0K 0
sysmouse 0 0K 0
vm_fictitious 0 0K 0
vtfont 0 0K 0
ath_hal 0 0K 0
athdev 0 0K 0
ata_pci 0 0K 0
ata_dma 0 0K 0
ata_generic 0 0K 0
amr 0 0K 0
pvscsi 0 0K 0
scsi_da 0 0K 69
UMAHash 0 0K 0
ata_da 0 0K 0
vm_pgdata 0 0K 0
jblocks 0 0K 0
savedino 0 0K 1308
sentinel 0 0K 0
jfsync 0 0K 0
jtrunc 0 0K 0
sbdep 0 0K 140
jsegdep 0 0K 0
jseg 0 0K 0
jfreefrag 0 0K 0
jfreeblk 0 0K 0
jnewblk 0 0K 0
jmvref 0 0K 0
jremref 0 0K 0
jaddref 0 0K 0
freedep 0 0K 0
freefrag 0 0K 283
allocindir 0 0K 0
allocdirect 0 0K 0
ufs_trim 0 0K 0
mactemp 0 0K 0
audit_trigger 0 0K 0
audit_pipe_presel 0 0K 0
audit_pipeent 0 0K 0
audit_pipe 0 0K 0
audit_evname 0 0K 0
audit_bsm 0 0K 0
audit_gidset 0 0K 0
audit_text 0 0K 0
audit_path 0 0K 0
audit_data 0 0K 0
audit_cred 0 0K 0
scsi_ch 0 0K 0
scsi_cd 0 0K 0
AHCI driver 0 0K 0
USBdev 0 0K 0
USB 0 0K 0
agp 0 0K 0
nvme_da 0 0K 0
ktls_ocf 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5E_TLS 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EN 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5DUMP 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
seq_file 0 0K 0
radix 0 0K 0
idr 0 0K 0
lkpifw 0 0K 0
NLM 0 0K 0
ipsec-spdcache 0 0K 0
ipsec-reg 0 0K 0
ipsec-misc 0 0K 0
ipsecrequest 0 0K 0
ip6opt 0 0K 57
ip6_msource 0 0K 0
ip6_moptions 0 0K 0
in6_mfilter 0 0K 0
frag6 0 0K 0
tcplog 0 0K 0
tcp_hwpace 0 0K 0
acpipwr 0 0K 0
acpi_perf 0 0K 0
LRO 0 0K 0
newreno data 0 0K 0
ip_msource 0 0K 0
ip_moptions 0 0K 8
in_mfilter 0 0K 0
ipid 0 0K 0
80211scan 0 0K 0
80211ratectl 0 0K 0
80211power 0 0K 0
80211nodeie 0 0K 0
80211node 0 0K 0
80211mesh_gt 0 0K 0
80211mesh_rt 0 0K 0
80211perr 0 0K 0
80211prep 0 0K 0
80211preq 0 0K 0
80211dfs 0 0K 0
80211crypto 0 0K 0
80211vap 0 0K 0
iflib 0 0K 0
vlan 0 0K 0
gif 0 0K 0
ifdescr 0 0K 0
zlib 0 0K 0
fadvise 0 0K 0
VN POLL 0 0K 0
twsbuf 0 0K 0
statfs 0 0K 1884
namei_tracker 0 0K 4
export_host 0 0K 0
cl_savebuf 0 0K 122
twe_commands 0 0K 0
twa_commands 0 0K 0
tcp_log_dev 0 0K 146
midi buffers 0 0K 0
mixer 0 0K 0
ac97 0 0K 0
hdacc 0 0K 0
hdac 0 0K 0
hdaa 0 0K 0
acpicmbat 0 0K 0
SIIS driver 0 0K 0
CAM CCB 0 0K 8605
PUC 0 0K 0
ppbusdev 0 0K 0
agtiapi_MemAlloc malloc 0 0K 0
biobuf 0 0K 0
aios 0 0K 0
lio 0 0K 0
acl 0 0K 0
osti_cacheable 0 0K 0
mbuf_tag 0 0K 137
tempbuff 0 0K 0
tempbuff 0 0K 0
ag_tgt_map_t malloc 0 0K 0
ag_slr_map_t malloc 0 0K 0
lDevFlags * malloc 0 0K 0
tiDeviceHandle_t * malloc 0 0K 0
ag_portal_data_t malloc 0 0K 0
ag_device_t malloc 0 0K 0
STLock malloc 0 0K 0
CCB List 0 0K 0
sr_iov 0 0K 0
OCS 0 0K 0
OCS 0 0K 0
nvme 0 0K 0
nvd 0 0K 0
netmap 0 0K 0
mwldev 0 0K 0
MVS driver 0 0K 0
CAM ccb queue 0 0K 0
mrsasbuf 0 0K 0
mpt_user 0 0K 0
mps_user 0 0K 0
accf 0 0K 0
pts 0 0K 0
iov 0 0K 17970
ioctlops 0 0K 530
eventfd 0 0K 6
Witness 0 0K 0
stack 0 0K 0
MPSSAS 0 0K 0
mps 0 0K 0
mpr_user 0 0K 0
MPRSAS 0 0K 0
mpr 0 0K 0
mfibuf 0 0K 0
sbuf 0 0K 288
md_sectors 0 0K 0
firmware 0 0K 0
compressor 0 0K 0
md_disk 0 0K 0
SWAP 0 0K 0
malodev 0 0K 0
LED 0 0K 0
sysctltmp 0 0K 939
sysctl 0 0K 3
ekcd 0 0K 0
dumper 0 0K 0
sendfile 0 0K 0
rctl 0 0K 0
ix_sriov 0 0K 0
aacraidcam 0 0K 0
aacraid_buf 0 0K 0
ix 0 0K 0
ipsbuf 0 0K 0
cache 0 0K 0
iirbuf 0 0K 0
prison_racct 0 0K 0
Fail Points 0 0K 0
sigio 0 0K 1
filedesc_to_leader 0 0K 19
pwd 0 0K 0
tty console 0 0K 0
aaccam 0 0K 0
aacbuf 0 0K 0
zstd 0 0K 0
XZ_DEC 0 0K 0
nvlist 0 0K 0
SCSI ENC 0 0K 0
SCSI sa 0 0K 0
scsi_pass 0 0K 0
isofs_node 0 0K 0
isofs_mount 0 0K 0
tr_raid5_data 0 0K 0
tr_raid1e_data 0 0K 0
tr_raid1_data 0 0K 0
tr_raid0_data 0 0K 0
tr_concat_data 0 0K 0
md_sii_data 0 0K 0
md_promise_data 0 0K 0
md_nvidia_data 0 0K 0
md_jmicron_data 0 0K 0
md_intel_data 0 0K 0
md_ddf_data 0 0K 0
raid_data 0 0K 72
geom_flashmap 0 0K 0
tmpfs dir 0 0K 0
tmpfs name 0 0K 0
tmpfs mount 0 0K 0
NFS FHA 0 0K 0
newnfsmnt 0 0K 0
newnfsclient_req 0 0K 0
NFSCL layrecall 0 0K 0
NFSCL session 0 0K 0
NFSCL sockreq 0 0K 0
NFSCL devinfo 0 0K 0
NFSCL flayout 0 0K 0
NFSCL layout 0 0K 0
NFSD rollback 0 0K 0
NFSCL diroff 0 0K 0
db> show uma
Zone Size Used Free Requests Sleeps Bucket Total Mem XFree
mbuf_jumbo_page 4096 8320 509 1116897 0 253 36163584 0
RADIX NODE 144 14877 10794 175236 0 62 3696624 0
tcp_log 416 72 7461 218295 0 253 3133728 0
mbuf 256 9423 1437 2505543 0 254 2780160 0
pbuf 2624 0 958 0 0 2 2513792 0
ertt_txseginfo 40 46005 11262 450442 0 254 2290680 0
BUF TRIE 144 356 11404 6768 0 62 1693440 0
malloc-384 384 4257 23 4357 0 30 1643520 0
malloc-128 128 11357 51 11642 0 126 1460224 0
malloc-4096 4096 327 3 626 0 2 1351680 0
UMA Slabs 0 112 10182 291 10734 0 126 1172976 0
mbuf_cluster 2048 570 2 570 0 253 1171456 0
malloc-16384 16384 59 6 1719 0 1 1064960 0
vmem btag 56 18128 351 18411 0 254 1034824 0
FFS inode 1160 555 26 2250 0 8 673960 0
tcp_bbr_map 128 1816 3175 154533 0 126 638848 0
malloc-4096 4096 136 7 3310 0 2 585728 0
VM OBJECT 264 2045 85 42564 0 30 562320 0
MAP ENTRY 96 4585 329 156863 0 126 471744 0
256 Bucket 2048 208 10 18060 0 8 446464 0
THREAD 1808 199 32 3442 0 8 417648 0
lkpimm 160 1 2324 1 0 62 372000 0
lkpicurr 160 2 2323 2 0 62 372000 0
VNODE 448 593 73 2290 0 30 298368 0
malloc-64 64 4195 404 55115 0 254 294336 0
malloc-65536 65536 0 4 493 0 1 262144 0
malloc-65536 65536 4 0 4 0 1 262144 0
VMSPACE 2544 90 12 2729 0 4 259488 0
malloc-2048 2048 105 15 1817 0 8 245760 0
malloc-16 16 14125 375 16345 0 254 232000 0
UMA Zones 768 242 2 242 0 16 187392 0
socket 944 141 43 4970 0 253 173696 0
malloc-32 32 5364 54 5622 0 254 173376 0
malloc-256 256 231 444 11584 0 62 172800 0
sctp_asoc 2288 47 28 750 0 253 171600 0
malloc-128 128 1264 69 30916 0 126 170624 0
malloc-128 128 1238 64 5884 0 126 166656 0
sctp_ep 1280 106 23 1805 0 253 165120 0
PROC 1336 112 11 2750 0 8 164328 0
malloc-32768 32768 0 5 100 0 1 163840 0
FFS2 dinode 256 555 15 2249 0 62 145920 0
mbuf_packet 256 47 523 8437 0 254 145920 0
filedesc0 1072 113 20 2754 0 8 142576 0
S VFS Cache 104 1027 338 2816 0 126 141960 0
malloc-65536 65536 2 0 2 0 1 131072 0
malloc-65536 65536 2 0 2 0 1 131072 0
malloc-65536 65536 0 2 16 0 1 131072 0
clpbuf 2624 0 47 839 0 15 123328 0
malloc-1024 1024 110 6 127 0 16 118784 0
128 Bucket 1024 76 39 2111 0 16 117760 0
DEVCTL 1024 0 100 153 0 0 102400 0
malloc-2048 2048 7 43 8614 0 8 102400 0
sctp_chunk 152 84 566 1891 0 253 98800 0
malloc-16384 16384 4 2 179 0 1 98304 0
malloc-256 256 212 148 7225 0 62 92160 0
UMA Kegs 384 227 6 227 0 30 89472 0
sctp_raddr 736 73 48 860 0 253 89056 0
malloc-1024 1024 55 25 1296 0 16 81920 0
malloc-384 384 164 36 2669 0 30 76800 0
malloc-128 128 308 281 2432 0 126 75392 0
malloc-8192 8192 5 4 134 0 1 73728 0
malloc-8192 8192 5 4 10 0 1 73728 0
g_bio 408 0 180 23527 0 30 73440 0
malloc-384 384 12 168 2002 0 30 69120 0
malloc-65536 65536 1 0 1 0 1 65536 0
malloc-32768 32768 0 2 130 0 1 65536 0
malloc-32768 32768 2 0 2 0 1 65536 0
64 Bucket 512 70 42 28820 0 30 57344 0
malloc-4096 4096 12 1 23 0 2 53248 0
tcpcb 1080 13 36 831 0 253 52920 0
malloc-256 256 155 40 2214 0 62 49920 0
32 Bucket 256 60 135 520504 0 62 49920 0
malloc-16384 16384 3 0 3 0 1 49152 0
malloc-16384 16384 0 3 4 0 1 49152 0
malloc-8192 8192 6 0 6 0 1 49152 0
malloc-8192 8192 4 2 12 0 1 49152 0
malloc-64 64 625 131 20682 0 254 48384 0
Files 80 420 180 15355 0 126 48000 0
malloc-256 256 154 26 313 0 62 46080 0
malloc-2048 2048 4 18 511 0 8 45056 0
udplite_inpcb 496 32 56 638 0 253 43648 0
malloc-256 256 114 51 1200 0 62 42240 0
DIRHASH 1024 30 10 34 0 16 40960 0
pcpu-8 8 4725 395 6221 0 254 40960 0
malloc-4096 4096 9 0 9 0 2 36864 0
malloc-64 64 478 89 690 0 254 36288 0
malloc-384 384 75 15 139 0 30 34560 0
TURNSTILE 136 232 20 232 0 62 34272 0
malloc-32768 32768 1 0 1 0 1 32768 0
malloc-8192 8192 2 2 4 0 1 32768 0
pcpu-64 64 487 25 487 0 254 32768 0
ksiginfo 112 106 182 2767 0 126 32256 0
tcp_inpcb 496 13 51 831 0 253 31744 0
tcp_rack_pcb 832 0 36 197 0 16 29952 0
tcp_bbr_pcb 832 8 28 405 0 16 29952 0
pipe 744 23 17 486 0 16 29760 0
malloc-4096 4096 3 4 1888 0 2 28672 0
malloc-1024 1024 13 15 1511 0 16 28672 0
malloc-64 64 311 130 5680 0 254 28224 0
malloc-64 64 117 324 2660 0 254 28224 0
malloc-2048 2048 12 0 203 0 8 24576 0
PWD 32 52 704 1756 0 254 24192 0
malloc-32 32 386 370 8750 0 254 24192 0
KNOTE 160 28 122 77266 0 62 24000 0
ttyinq 160 135 15 300 0 62 24000 0
8 Bucket 80 48 252 2032 0 126 24000 0
malloc-128 128 7 179 387 0 126 23808 0
ttyoutq 256 72 18 160 0 62 23040 0
malloc-256 256 29 61 1939 0 62 23040 0
SLEEPQUEUE 88 232 24 232 0 126 22528 0
NAMEI 1024 0 20 23501 0 16 20480 0
malloc-2048 2048 5 5 233 0 8 20480 0
malloc-1024 1024 17 3 17 0 16 20480 0
malloc-32 32 179 451 3156 0 254 20160 0
malloc-128 128 97 58 1942 0 126 19840 0
Mountpoints 2752 2 5 2 0 4 19264 0
malloc-384 384 36 14 36 0 30 19200 0
malloc-256 256 39 36 326 0 62 19200 0
malloc-8192 8192 2 0 2 0 1 16384 0
malloc-4096 4096 2 2 85 0 2 16384 0
malloc-2048 2048 2 6 227 0 8 16384 0
malloc-1024 1024 11 5 11 0 16 16384 0
malloc-64 64 166 86 268 0 254 16128 0
16 Bucket 144 53 59 514 0 62 16128 0
vtnet_tx_hdr 24 0 668 825664 0 254 16032 0
itimer 352 0 44 37 0 30 15488 0
malloc-384 384 35 5 37 0 30 15360 0
malloc-256 256 34 26 1237 0 62 15360 0
malloc-4096 4096 2 1 5 0 2 12288 0
malloc-1024 1024 8 4 9 0 16 12288 0
malloc-512 512 3 21 289 0 30 12288 0
malloc-512 512 10 14 201 0 30 12288 0
malloc-512 512 11 13 131 0 30 12288 0
malloc-64 64 125 64 653 0 254 12096 0
malloc-32 32 160 218 281 0 254 12096 0
malloc-16 16 342 408 603 0 254 12000 0
ripcb 496 5 19 53 0 253 11904 0
udp_inpcb 496 6 18 250 0 253 11904 0
kenv 258 15 30 1042 0 30 11610 0
unpcb 256 20 25 1342 0 253 11520 0
malloc-8192 8192 1 0 1 0 1 8192 0
malloc-2048 2048 2 2 2 0 8 8192 0
malloc-1024 1024 2 6 15 0 16 8192 0
malloc-1024 1024 1 7 70 0 16 8192 0
malloc-512 512 1 15 7 0 30 8192 0
malloc-512 512 12 4 16 0 30 8192 0
rtentry 176 30 16 34 0 62 8096 0
tcptw 88 0 92 4 0 253 8096 0
PGRP 88 35 57 66 0 126 8096 0
rl_entry 40 84 118 84 0 254 8080 0
sctp_stream_msg_out 112 13 59 151 0 253 8064 0
sctp_laddr 48 46 122 572 0 254 8064 0
tcp_rack_map 112 0 72 556 0 126 8064 0
hostcache 64 2 124 2 0 254 8064 0
udpcb 32 38 214 888 0 254 8064 0
ertt 72 13 99 831 0 126 8064 0
malloc-64 64 12 114 108 0 254 8064 0
malloc-32 32 137 115 202 0 254 8064 0
malloc-32 32 23 229 63 0 254 8064 0
malloc-32 32 38 214 850 0 254 8064 0
4 Bucket 48 7 161 98 0 254 8064 0
2 Bucket 32 60 192 846 0 254 8064 0
malloc-16 16 15 485 838 0 254 8000 0
malloc-16 16 16 484 19 0 254 8000 0
malloc-16 16 187 313 1417 0 254 8000 0
malloc-16 16 29 471 27719 0 254 8000 0
malloc-16 16 172 328 2853 0 254 8000 0
malloc-128 128 25 37 124 0 126 7936 0
malloc-128 128 11 51 250 0 126 7936 0
cryptop 280 0 28 24 0 30 7840 0
routing nhops 256 27 3 34 0 62 7680 0
malloc-384 384 1 19 349 0 30 7680 0
malloc-384 384 1 19 57 0 30 7680 0
FPU_save_area 832 1 8 1 0 16 7488 0
cpuset 104 7 55 35 0 126 6448 0
domainset 40 0 126 23 0 254 5040 0
epoch_record pcpu 256 4 12 4 0 62 4096 0
malloc-2048 2048 1 1 1 0 8 4096 0
malloc-512 512 4 4 4 0 30 4096 0
pcpu-16 16 7 249 7 0 254 4096 0
sackhole 32 0 126 1 0 254 4032 0
syncache 168 0 24 4 0 253 4032 0
sctp_readq 152 5 21 64 0 253 3952 0
UMA Slabs 1 176 9 13 9 0 62 3872 0
mqnode 416 3 6 3 0 30 3744 0
KMAP ENTRY 96 12 27 14 0 0 3744 0
vmem 1856 1 1 1 0 8 3712 0
SMR CPU 32 3 60 3 0 254 2016 0
SMR SHARED 24 3 60 3 0 254 1512 0
FFS1 dinode 128 0 0 0 0 126 0 0
da_ccb 544 0 0 0 0 16 0 0
ada_ccb 272 0 0 0 0 30 0 0
swblk 136 0 0 0 0 62 0 0
swpctrie 144 0 0 0 0 62 0 0
sctp_asconf_ack 48 0 0 0 0 254 0 0
sctp_asconf 40 0 0 0 0 254 0 0
cdg_qdiffsample 16 0 0 0 0 254 0 0
pf state scrubs 40 0 0 0 0 254 0 0
pf frag entries 40 0 0 0 0 254 0 0
pf frags 248 0 0 0 0 62 0 0
pf table entries 160 0 0 0 0 62 0 0
pf table entry counters 64 0 0 0 0 254 0 0
pf source nodes 136 0 0 0 0 253 0 0
pf state keys 88 0 0 0 0 126 0 0
pf states 304 0 0 0 0 253 0 0
pf tags 104 0 0 0 0 126 0
---
This report is generated by a bot. It may contain errors.
See https://goo.gl/tpsmEJ for more information about syzbot.
syzbot engineers can be reached at syzk...@googlegroups.com.
syzbot will keep track of this issue. See:
https://goo.gl/tpsmEJ#status for how to communicate with syzbot.
syzbot found the following issue on:
HEAD commit: 58080fbc libalias: fix divide by zero causing panic
git tree: https://github.com/freebsd/freebsd-src.git main
console output: https://syzkaller.appspot.com/x/log.txt?x=1014a46c300000
dashboard link: https://syzkaller.appspot.com/bug?extid=1b064007a79b75637dc7
Unfortunately, I don't have any reproducer for this issue yet.
IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+1b0640...@syzkaller.appspotmail.com
panic: ASan: Invalid access, 8-byte read at 0xfffffe00a754a728, UMAUseAfterFree(fd)
cpuid = 1
time = 1625941914
KDB: stack backtrace:
db_trace_self_wrapper() at db_trace_self_wrapper+0xc7/frame 0xfffffe009bff2e70
kdb_backtrace() at kdb_backtrace+0xd3/frame 0xfffffe009bff2fd0
vpanic() at vpanic+0x2c5/frame 0xfffffe009bff30b0
panic() at panic+0xb5/frame 0xfffffe009bff3180
__asan_load8_noabort() at __asan_load8_noabort+0x36f/frame 0xfffffe009bff3240
sctp_inpcb_free() at sctp_inpcb_free+0x666/frame 0xfffffe009bff32d0
sctp_close() at sctp_close+0x1e4/frame 0xfffffe009bff33b0
soclose() at soclose+0x1a4/frame 0xfffffe009bff34c0
_fdrop() at _fdrop+0x58/frame 0xfffffe009bff34f0
closef() at closef+0x686/frame 0xfffffe009bff36e0
fdescfree_fds() at fdescfree_fds+0x1fa/frame 0xfffffe009bff3750
fdescfree() at fdescfree+0x903/frame 0xfffffe009bff3940
exit1() at exit1+0x8b7/frame 0xfffffe009bff39d0
sys_sys_exit() at sys_sys_exit+0x28/frame 0xfffffe009bff39f0
amd64_syscall() at amd64_syscall+0x425/frame 0xfffffe009bff3bf0
fast_syscall_common() at fast_syscall_common+0xf8/frame 0xfffffe009bff3bf0
--- syscall (1, FreeBSD ELF64, sys_sys_exit), rip = 0x2e985a, rsp = 0x7fffffffe478, rbp = 0x7fffffffe480 ---
KDB: enter: panic
[ thread pid 2743 tid 102802 ]
Stopped at kdb_enter+0x6b: movq $0,0x28f9c3a(%rip)
db>
db> set $lines = 0
db> set $maxwidth = 0
db> show registers
cs 0x20
ds 0x3b
es 0x3b
fs 0x13
gs 0x1b
ss 0x28
rax 0x12
rcx 0x4cf660f5f8471c35
rdx 0x1
rbx 0
rsp 0xfffffe009bff2fb0
rbp 0xfffffe009bff2fd0
rsi 0
rdi 0xffffffff8179b3d9 vprintf+0x319
r8 0x3
r9 0xfffffe009bff2b08
r10 0
r11 0xfffffe009e4086f0
r12 0xfffffe00a7705560
r13 0xfffffe009bff3001
r14 0xffffffff82c427e0 .str.18
r15 0xffffffff82c427e0 .str.18
rip 0xffffffff8178edfb kdb_enter+0x6b
rflags 0x46
kdb_enter+0x6b: movq $0,0x28f9c3a(%rip)
db> show proc
Process 2743 (syz-executor.2) at 0xfffffe00a76c1000:
state: NORMAL
uid: 0 gids: 0, 0, 5
parent: pid 793 at 0xfffffe009e401000
ABI: FreeBSD ELF64
flag: 0x10002000 flag2: 0
arguments: /root/syz-executor.2
reaper: 0xfffffe0053d51538 reapsubtree: 1
sigparent: 20
vmspace: 0xfffffe00a7821000
(map 0xfffffe00a7821000)
(map.pmap 0xfffffe00a78210c0)
(pmap 0xfffffe00a7821120)
threads: 1
102802 Run CPU 1 syz-executor.2
db> ps
pid ppid pgrp uid state wmesg wchan cmd
2745 790 790 0 S (threaded) syz-executor.1
102835 S nanslp 0xffffffff84055901 syz-executor.1
103431 S connec 0xfffffe00a75eabf0 syz-executor.1
103434 S uwait 0xfffffe009e0a3f00 syz-executor.1
2743 793 793 0 RE CPU 1 syz-executor.2
2665 1 793 60929 S uwait 0xfffffe009e9d3900 syz-executor.2
2276 1 827 0 S uwait 0xfffffe009e9d3500 syz-executor.3
2275 1 827 0 S uwait 0xfffffe009e9d3800 syz-executor.3
2274 1 793 0 S uwait 0xfffffe00a3bea780 syz-executor.2
2273 1 793 0 S uwait 0xfffffe00a3a65c00 syz-executor.2
2271 1 827 0 S uwait 0xfffffe009e3fe400 syz-executor.3
2266 1 793 0 S uwait 0xfffffe00a3a65580 syz-executor.2
2260 1 793 0 S uwait 0xfffffe00a3a65480 syz-executor.2
2259 1 827 0 S uwait 0xfffffe00a3a37200 syz-executor.3
2258 1 793 0 S uwait 0xfffffe00a3a42a00 syz-executor.2
2257 1 827 0 S uwait 0xfffffe009e3fb780 syz-executor.3
2256 1 793 0 S uwait 0xfffffe00a707fd80 syz-executor.2
2254 1 827 0 S uwait 0xfffffe009e3fb180 syz-executor.3
2246 1 793 0 S uwait 0xfffffe00a3a42000 syz-executor.2
2245 1 827 0 S uwait 0xfffffe00a3bea380 syz-executor.3
2244 1 793 0 S uwait 0xfffffe009e9d3d00 syz-executor.2
2243 1 827 0 S uwait 0xfffffe00a3a37400 syz-executor.3
2242 1 793 0 S uwait 0xfffffe009e3fe300 syz-executor.2
2241 1 827 0 S uwait 0xfffffe00a3bea480 syz-executor.3
2234 1 793 0 S uwait 0xfffffe00a3a42400 syz-executor.2
2233 1 793 0 S uwait 0xfffffe00a3a65800 syz-executor.2
2232 1 793 0 S uwait 0xfffffe009e3fe200 syz-executor.2
2229 1 793 0 S uwait 0xfffffe009e3fed80 syz-executor.2
2228 1 793 0 S uwait 0xfffffe00a3a65e80 syz-executor.2
2227 1 793 0 S uwait 0xfffffe00a3a42600 syz-executor.2
1981 1 790 0 S uwait 0xfffffe00a3a37500 syz-executor.1
1977 1 793 0 S uwait 0xfffffe009e9d3b00 syz-executor.2
1974 1 790 0 S uwait 0xfffffe00a3a37100 syz-executor.1
1971 1 789 0 S uwait 0xfffffe009e2e5880 syz-executor.0
1967 1 793 0 S uwait 0xfffffe009e3fee00 syz-executor.2
1965 1 790 0 S uwait 0xfffffe00a3bea080 syz-executor.1
1962 1 793 0 S uwait 0xfffffe00a707ff00 syz-executor.2
1960 1 789 0 S uwait 0xfffffe00a3a37600 syz-executor.0
1955 1 789 0 S uwait 0xfffffe00a3bea880 syz-executor.0
1950 1 827 0 S uwait 0xfffffe009e3fef00 syz-executor.3
1946 1 827 0 S uwait 0xfffffe009e3fea00 syz-executor.3
1934 1 827 0 S uwait 0xfffffe00a3beaa80 syz-executor.3
1930 1 790 0 S uwait 0xfffffe009e3fe900 syz-executor.1
1926 1 827 0 S uwait 0xfffffe00a3bea180 syz-executor.3
1922 1 790 0 S uwait 0xfffffe00a3bea680 syz-executor.1
1918 1 827 0 S uwait 0xfffffe009e3fb280 syz-executor.3
1914 1 790 0 S uwait 0xfffffe009e3fe100 syz-executor.1
1910 1 790 0 S uwait 0xfffffe00a3a42800 syz-executor.1
1900 1 790 0 S uwait 0xfffffe00a3bea580 syz-executor.1
1688 1 1688 65 Ss select 0xfffffe00a707f7c0 dhclient
1639 1 793 0 S uwait 0xfffffe009e537880 syz-executor.2
1630 1 793 0 S uwait 0xfffffe009e9d3a00 syz-executor.2
1629 1 789 0 S uwait 0xfffffe009e2e5c80 syz-executor.0
1623 1 789 0 S uwait 0xfffffe00a3bea280 syz-executor.0
1619 1 793 0 S uwait 0xfffffe00a3a37800 syz-executor.2
1611 1 789 0 S uwait 0xfffffe00a3a42500 syz-executor.0
1608 1 789 0 S uwait 0xfffffe00a3a42b00 syz-executor.0
1603 1 789 0 S uwait 0xfffffe009e9d3e00 syz-executor.0
1523 1 1523 0 Ss select 0xfffffe00a707fa40 dhclient
1520 1 1520 0 Ss select 0xfffffe00a707f6c0 dhclient
1491 1 1491 65 Ss select 0xfffffe009e3fb440 dhclient
1395 1 1395 0 Ss select 0xfffffe00a3a37040 dhclient
1388 1 1388 0 Ss select 0xfffffe009e3feec0 dhclient
1367 1 1367 65 Ss select 0xfffffe009e537f40 dhclient
1179 1 1179 0 Ss select 0xfffffe00a3beabc0 dhclient
1174 1 1174 0 Ss select 0xfffffe00a3beaec0 dhclient
1152 1 1152 65 Ss select 0xfffffe00a3a37ac0 dhclient
944 1 944 0 Ss select 0xfffffe00a3a37a40 dhclient
941 1 941 0 Ss select 0xfffffe00a3a65f40 dhclient
827 782 827 0 Ss piperd 0xfffffe009788d8b8 syz-executor.3
793 782 793 0 Ss nanslp 0xffffffff84055900 syz-executor.2
790 782 790 0 Ss nanslp 0xffffffff84055901 syz-executor.1
789 782 789 0 Ss piperd 0xfffffe009e9885d0 syz-executor.0
782 780 780 0 S (threaded) syz-fuzzer
100097 S uwait 0xfffffe005874ea00 syz-fuzzer
100118 S uwait 0xfffffe009e3fbb80 syz-fuzzer
100119 S uwait 0xfffffe009e3fbc80 syz-fuzzer
100120 S uwait 0xfffffe009e3fbd80 syz-fuzzer
100121 S uwait 0xfffffe009e3fbe80 syz-fuzzer
100122 S uwait 0xfffffe005874e000 syz-fuzzer
100123 S uwait 0xfffffe009e3fe500 syz-fuzzer
100124 S kqread 0xfffffe009791a400 syz-fuzzer
100125 S uwait 0xfffffe009e3fe700 syz-fuzzer
780 778 780 0 Ss pause 0xfffffe009e3d15e8 csh
778 694 778 0 Ss select 0xfffffe009e537ec0 sshd
760 1 760 0 Ss+ ttyin 0xfffffe0056fe0cb0 getty
759 1 759 0 Ss+ ttyin 0xfffffe00583ed0b0 getty
758 1 758 0 Ss+ ttyin 0xfffffe00583ed4b0 getty
757 1 757 0 Ss+ ttyin 0xfffffe00583ed8b0 getty
756 1 756 0 Ss+ ttyin 0xfffffe00583edcb0 getty
755 1 755 0 Ss+ ttyin 0xfffffe00583950b0 getty
754 1 754 0 Ss+ ttyin 0xfffffe00583954b0 getty
753 1 753 0 Ss+ ttyin 0xfffffe00583958b0 getty
752 1 752 0 Ss+ ttyin 0xfffffe0058395cb0 getty
698 1 698 0 Ss nanslp 0xffffffff84055900 cron
694 1 694 0 Ss select 0xfffffe009e3fec40 sshd
507 1 507 0 Ss select 0xfffffe009e2e52c0 syslogd
436 1 436 0 Ss select 0xfffffe009e2e51c0 devd
435 1 435 65 Ss select 0xfffffe009e3fb4c0 dhclient
350 1 350 0 Ss select 0xfffffe009e2e50c0 dhclient
347 1 347 0 Ss select 0xfffffe005874e0c0 dhclient
23 0 0 0 DL syncer 0xffffffff8417ba40 [syncer]
22 0 0 0 DL vlruwt 0xfffffe0058747a70 [vnlru]
21 0 0 0 DL (threaded) [bufdaemon]
100083 D qsleep 0xffffffff84179940 [bufdaemon]
100086 D - 0xffffffff83411f80 [bufspacedaemon-0]
100095 D sdflush 0xfffffe0097925ce8 [/ worker]
20 0 0 0 DL psleep 0xffffffff841b1c80 [vmdaemon]
19 0 0 0 DL (threaded) [pagedaemon]
100081 D psleep 0xffffffff841a57b8 [dom0]
100087 D launds 0xffffffff841a57c4 [laundry: dom0]
100088 D umarcl 0xffffffff81e7e640 [uma]
18 0 0 0 DL - 0xffffffff83e0caa0 [rand_harvestq]
17 0 0 0 DL waiting 0xffffffff84d6e460 [sctp_iterator]
16 0 0 0 DL pftm 0xffffffff8494dd30 [pf purge]
15 0 0 0 DL - 0xffffffff84174dc0 [soaiod4]
9 0 0 0 DL - 0xffffffff84174dc0 [soaiod3]
8 0 0 0 DL - 0xffffffff84174dc0 [soaiod2]
7 0 0 0 DL - 0xffffffff84174dc0 [soaiod1]
6 0 0 0 DL (threaded) [cam]
100046 D - 0xffffffff83c92240 [doneq0]
100047 D - 0xffffffff83c921c0 [async]
100080 D - 0xffffffff83c92040 [scanner]
14 0 0 0 DL seqstat 0xfffffe0056aadc88 [sequencer 00]
5 0 0 0 DL crypto_ 0xfffffe00541abd80 [crypto returns 1]
4 0 0 0 DL crypto_ 0xfffffe00541abd30 [crypto returns 0]
3 0 0 0 DL crypto_ 0xffffffff8419f860 [crypto]
13 0 0 0 DL (threaded) [geom]
100037 D - 0xffffffff84028ec0 [g_event]
100038 D - 0xffffffff84028f00 [g_up]
100039 D - 0xffffffff84028f40 [g_down]
2 0 0 0 DL (threaded) [KTLS]
100028 D - 0xfffffe0053e16e00 [thr_0]
100029 D - 0xfffffe0053e16e80 [thr_1]
12 0 0 0 WL (threaded) [intr]
100010 I [swi6: task queue]
100011 I [swi6: Giant taskq]
100014 I [swi5: fast taskq]
100030 I [swi1: netisr 0]
100031 I [swi3: vm]
100032 I [swi4: clock (0)]
100033 I [swi4: clock (1)]
100034 I [swi1: hpts]
100035 I [swi1: hpts]
100048 I [irq24: virtio_pci0]
100049 I [irq25: virtio_pci0]
100050 I [irq26: virtio_pci0]
100051 I [irq27: virtio_pci0]
100052 I [irq28: virtio_pci1]
100053 I [irq29: virtio_pci1]
100054 I [irq30: virtio_pci1]
100055 I [irq31: virtio_pci1]
100056 I [irq32: virtio_pci1]
100061 I [irq10: virtio_pci2]
100063 I [irq1: atkbd0]
100064 I [irq12: psm0]
100065 I [swi0: uart uart++]
100073 I [swi1: pf send]
11 0 0 0 RL (threaded) [idle]
100003 Run CPU 0 [idle: cpu0]
100004 CanRun [idle: cpu1]
1 0 1 0 SLs wait 0xfffffe0053d51538 [init]
10 0 0 0 DL audit_w 0xffffffff841a0800 [audit]
0 0 0 0 DLs (threaded) [kernel]
100000 D swapin 0xffffffff84029dc0 [swapper]
100005 D - 0xfffffe0053c0d800 [softirq_0]
100006 D - 0xfffffe0053c0d600 [softirq_1]
100007 D - 0xfffffe0053c0d400 [if_io_tqg_0]
100008 D - 0xfffffe0053c0d200 [if_io_tqg_1]
100009 D - 0xfffffe0053c0d000 [if_config_tqg_0]
100012 D - 0xfffffe000791b500 [thread taskq]
100013 D - 0xfffffe000791b400 [inm_free taskq]
100015 D - 0xfffffe000791b200 [kqueue_ctx taskq]
100016 D - 0xfffffe000791b100 [linuxkpi_irq_wq]
100017 D - 0xfffffe000791b000 [aiod_kick taskq]
100018 D - 0xfffffe0053df6e00 [in6m_free taskq]
100019 D - 0xfffffe0053df6d00 [pci_hp taskq]
100020 D - 0xfffffe0053df6c00 [linuxkpi_short_wq_0]
100021 D - 0xfffffe0053df6c00 [linuxkpi_short_wq_1]
100022 D - 0xfffffe0053df6c00 [linuxkpi_short_wq_2]
100023 D - 0xfffffe0053df6c00 [linuxkpi_short_wq_3]
100024 D - 0xfffffe0053df6b00 [linuxkpi_long_wq_0]
100025 D - 0xfffffe0053df6b00 [linuxkpi_long_wq_1]
100026 D - 0xfffffe0053df6b00 [linuxkpi_long_wq_2]
100027 D - 0xfffffe0053df6b00 [linuxkpi_long_wq_3]
100036 D - 0xfffffe0053df6a00 [firmware taskq]
100040 D - 0xfffffe0053df6900 [crypto_0]
100041 D - 0xfffffe0053df6900 [crypto_1]
100057 D - 0xfffffe0053df6700 [vtnet0 rxq 0]
100058 D - 0xfffffe0053df6600 [vtnet0 txq 0]
100059 D - 0xfffffe0053df6500 [vtnet0 rxq 1]
100060 D - 0xfffffe0053df6400 [vtnet0 txq 1]
100062 D vtbslp 0xfffffe0056fc0380 [virtio_balloon]
100066 D - 0xfffffe0053df6300 [mca taskq]
100071 D - 0xffffffff82c49760 [deadlkres]
100076 D - 0xfffffe0058394e00 [acpi_task_0]
100077 D - 0xfffffe0058394e00 [acpi_task_1]
100078 D - 0xfffffe0058394e00 [acpi_task_2]
100079 D - 0xfffffe0053df6800 [CAM taskq]
db> show all locks
Process 2743 (syz-executor.2) thread 0xfffffe00a7705560 (102802)
exclusive sleep mutex sctp-inp (inp) r = 0 (0xfffffe00a7319468) locked @ /syzkaller/managers/main/kernel/sys/netinet/sctp_pcb.c:3333
exclusive rw sctp-info (sctp-info) r = 0 (0xfffffe00081af390) locked @ /syzkaller/managers/main/kernel/sys/netinet/sctp_pcb.c:3331
exclusive sleep mutex sctp-create (inp_create) r = 0 (0xfffffe00a7319488) locked @ /syzkaller/managers/main/kernel/sys/netinet/sctp_pcb.c:3330
db> show malloc
Type InUse MemUse Requests
pf_hash 5 11524K 5
devbuf 4216 4338K 4244
tcp_hpts 6 3201K 6
sysctloid 34320 2027K 34387
vtbuf 24 1968K 46
kobj 326 1304K 486
newblk 77 1043K 5685
vfscache 3 1025K 3
filedesc 118 938K 3441
pcb 238 770K 4349
inodedep 13 517K 1977
ufs_quota 1 512K 1
vfs_hash 1 512K 1
callout 2 512K 2
subproc 237 499K 2880
intr 4 472K 4
vmem 3 274K 5
acpica 1674 184K 54806
vnet_data 1 168K 1
tidhash 3 141K 3
linker 357 140K 397
pagedep 9 130K 1725
tfo_ccache 1 128K 1
DEVFS1 107 107K 124
sem 4 106K 4
BPF 46 88K 54
bus 986 80K 3469
mtx_pool 2 72K 2
syncache 1 68K 1
acpitask 1 64K 1
ddb_capture 1 64K 1
module 510 64K 510
sctp_atcl 164 62K 2661
umtx 462 58K 462
kdtrace 313 58K 6194
sctp_stro 47 47K 764
temp 35 33K 2756
hostcache 1 32K 1
shm 1 32K 3
DEVFS3 126 32K 136
msg 4 30K 4
gtaskqueue 18 26K 18
kbdmux 6 22K 6
ifaddr 70 20K 72
DEVFS_RULE 56 20K 56
ufs_mount 5 17K 6
proc 3 17K 3
routetbl 131 17K 420
tty 16 16K 16
ithread 99 16K 99
bus-sc 33 14K 1684
KTRACE 100 13K 100
ifnet 7 13K 7
ether_multi 152 13K 162
lltable 40 12K 135
ksem 31 12K 97
kenv 95 12K 95
eventhandler 133 12K 133
cred 44 11K 321
CAM queue 5 11K 1528
rman 84 10K 425
GEOM 60 10K 489
kqueue 115 10K 2757
in6_multi 65 9K 65
sctp_atky 211 9K 3466
bmsafemap 2 9K 1899
UART 12 9K 12
devstat 4 9K 4
sctp_timw 32 8K 32
rpc 2 8K 2
shmfd 1 8K 12
pfs_vncache 1 8K 1
pfs_nodes 20 8K 20
DEVFSP 118 8K 597
audit_evclass 236 8K 294
pwddesc 112 7K 2754
taskqueue 60 7K 60
sglist 5 7K 5
CAM DEV 3 6K 510
plimit 24 6K 555
sctp_stri 11 6K 114
lockf 48 5K 314
ufs_dirhash 20 5K 24
freework 19 5K 2051
pf_ifnet 11 5K 66
UMA 270 5K 270
session 35 5K 66
vt 11 5K 11
memdesc 1 4K 1
MCA 32 4K 32
evdev 4 4K 4
kcovinfo 64 4K 68
acpisem 28 4K 28
selfd 55 4K 50580
hhook 15 4K 17
fpukern_ctx 3 3K 3
proc-args 52 3K 720
terminal 11 3K 11
sctp_athm 164 3K 2691
xform 40 3K 793
select 19 3K 146
uidinfo 4 3K 22
pf_osfp 18 3K 18
local_apic 1 2K 1
io_apic 1 2K 1
ipsec-saq 2 2K 2
ip6ndp 12 2K 13
inpcbpolicy 56 2K 1772
Unitno 29 2K 57
sctp_ifa 13 2K 14
CAM XPT 22 2K 543
in_multi 6 2K 8
sctp_map 94 2K 1500
freeblks 5 2K 1705
ipsecpolicy 2 2K 2
acpidev 20 2K 20
msi 9 2K 9
clone 9 2K 9
tun 7 2K 7
softdep 1 1K 1
dirrem 4 1K 1733
sahead 1 1K 1
secasvar 1 1K 1
nhops 6 1K 8
vnodemarker 2 1K 288
NFSD session 1 1K 1
CAM periph 4 1K 271
sctp_ifn 6 1K 14
ipsec 3 1K 3
indirdep 3 1K 169
mld 6 1K 6
igmp 6 1K 6
toponodes 6 1K 6
isadev 6 1K 6
mount 16 1K 89
pci_link 10 1K 10
mkdir 5 1K 3316
freefile 5 1K 1693
crypto 4 1K 177
encap_export_host 12 1K 12
procdesc 5 1K 18
osd 17 1K 842
newdirblk 4 1K 1658
diradd 4 1K 1774
pfil 4 1K 4
cdev 2 1K 2
chacha20random 1 1K 1
NFSD lckfile 1 1K 1
NFSD V4client 1 1K 1
DEVFS 9 1K 10
vnodes 1 1K 1
CAM SIM 2 1K 2
ktls 1 1K 1
feeder 7 1K 7
tcpfunc 3 1K 3
loginclass 3 1K 6
prison 6 1K 6
lkpikmalloc 5 1K 6
aesni_data 2 1K 2
soname 5 1K 6457
apmdev 1 1K 1
atkbddev 2 1K 2
CAM dev queue 2 1K 2
CAM I/O Scheduler 1 1K 1
CAM path 4 1K 1034
pmchooks 1 1K 1
nexusdev 7 1K 7
filecaps 5 1K 120
sctp_vrf 1 1K 1
vnet 1 1K 1
entropy 2 1K 48
acpiintr 1 1K 1
pmc 1 1K 1
cpus 2 1K 2
vnet_data_free 1 1K 1
Per-cpu 1 1K 1
p1003.1b 1 1K 1
sctp_mcore 0 0K 0
sctp_socko 0 0K 1073
sctp_iter 0 0K 12
sctp_mvrf 0 0K 0
sctp_cpal 0 0K 0
sctp_cmsg 0 0K 0
sctp_stre 0 0K 0
sctp_athi 0 0K 0
sctp_a_it 0 0K 12
sctp_aadr 0 0K 5
mqdata 0 0K 0
tcp_do 0 0K 0
tcp_fsb 0 0K 197
pf_table 0 0K 0
pf_rule 0 0K 86
pf_altq 0 0K 0
pf_temp 0 0K 0
cdg data 0 0K 9
chd data 0 0K 2
dctcp data 0 0K 13
htcp data 0 0K 8
cubic data 0 0K 17
vegas data 0 0K 10
NEWdirectio 0 0K 0
NEWNFSnode 0 0K 0
madt_table 0 0K 2
smartpqi 0 0K 0
NFSCL lck 0 0K 0
NFSCL lckown 0 0K 0
NFSCL client 0 0K 0
NFSCL deleg 0 0K 0
NFSCL open 0 0K 0
NFSCL owner 0 0K 0
NFS fh 0 0K 0
NFS req 0 0K 0
iavf 0 0K 0
ixl 0 0K 0
NFSD usrgroup 0 0K 0
NFSD string 0 0K 0
NFSD V4lock 0 0K 0
NFSD V4state 0 0K 0
NFSD srvcache 0 0K 0
ice-resmgr 0 0K 0
ice-osdep 0 0K 0
ice 0 0K 0
axgbe 0 0K 0
msdosfs_fat 0 0K 0
msdosfs_mount 0 0K 0
msdosfs_node 0 0K 0
DEVFS4 0 0K 0
DEVFS2 0 0K 0
xen_intr 0 0K 0
gntdev 0 0K 0
privcmd_dev 0 0K 0
xen_hvm 0 0K 0
legacydrv 0 0K 0
qpidrv 0 0K 0
evtchn_dev 0 0K 0
xenstore 0 0K 0
dmar_idpgtbl 0 0K 0
dmar_dom 0 0K 0
dmar_ctx 0 0K 0
ciss_data 0 0K 0
BACKLIGHT 0 0K 0
xnb 0 0K 0
isci 0 0K 0
iommu_dmamap 0 0K 0
xbbd 0 0K 0
hyperv_socket 0 0K 0
bxe_ilt 0 0K 0
xenbus 0 0K 0
xbd 0 0K 0
Balloon 0 0K 0
sysmouse 0 0K 0
vm_fictitious 0 0K 0
vtfont 0 0K 0
ath_hal 0 0K 0
athdev 0 0K 0
ata_pci 0 0K 0
ata_dma 0 0K 0
ata_generic 0 0K 0
amr 0 0K 0
pvscsi 0 0K 0
scsi_da 0 0K 69
UMAHash 0 0K 0
ata_da 0 0K 0
vm_pgdata 0 0K 0
jblocks 0 0K 0
savedino 0 0K 1308
sentinel 0 0K 0
jfsync 0 0K 0
jtrunc 0 0K 0
sbdep 0 0K 140
jsegdep 0 0K 0
jseg 0 0K 0
jfreefrag 0 0K 0
jfreeblk 0 0K 0
jnewblk 0 0K 0
jmvref 0 0K 0
jremref 0 0K 0
jaddref 0 0K 0
freedep 0 0K 0
freefrag 0 0K 283
allocindir 0 0K 0
allocdirect 0 0K 0
ufs_trim 0 0K 0
mactemp 0 0K 0
audit_trigger 0 0K 0
audit_pipe_presel 0 0K 0
audit_pipeent 0 0K 0
audit_pipe 0 0K 0
audit_evname 0 0K 0
audit_bsm 0 0K 0
audit_gidset 0 0K 0
audit_text 0 0K 0
audit_path 0 0K 0
audit_data 0 0K 0
audit_cred 0 0K 0
scsi_ch 0 0K 0
scsi_cd 0 0K 0
AHCI driver 0 0K 0
USBdev 0 0K 0
USB 0 0K 0
agp 0 0K 0
nvme_da 0 0K 0
ktls_ocf 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5E_TLS 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EN 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5DUMP 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
seq_file 0 0K 0
radix 0 0K 0
idr 0 0K 0
lkpifw 0 0K 0
NLM 0 0K 0
ipsec-spdcache 0 0K 0
ipsec-reg 0 0K 0
ipsec-misc 0 0K 0
ipsecrequest 0 0K 0
ip6opt 0 0K 57
ip6_msource 0 0K 0
ip6_moptions 0 0K 0
in6_mfilter 0 0K 0
frag6 0 0K 0
tcplog 0 0K 0
tcp_hwpace 0 0K 0
acpipwr 0 0K 0
acpi_perf 0 0K 0
LRO 0 0K 0
newreno data 0 0K 0
ip_msource 0 0K 0
ip_moptions 0 0K 8
in_mfilter 0 0K 0
ipid 0 0K 0
80211scan 0 0K 0
80211ratectl 0 0K 0
80211power 0 0K 0
80211nodeie 0 0K 0
80211node 0 0K 0
80211mesh_gt 0 0K 0
80211mesh_rt 0 0K 0
80211perr 0 0K 0
80211prep 0 0K 0
80211preq 0 0K 0
80211dfs 0 0K 0
80211crypto 0 0K 0
80211vap 0 0K 0
iflib 0 0K 0
vlan 0 0K 0
gif 0 0K 0
ifdescr 0 0K 0
zlib 0 0K 0
fadvise 0 0K 0
VN POLL 0 0K 0
twsbuf 0 0K 0
statfs 0 0K 1884
namei_tracker 0 0K 4
export_host 0 0K 0
cl_savebuf 0 0K 122
twe_commands 0 0K 0
twa_commands 0 0K 0
tcp_log_dev 0 0K 146
midi buffers 0 0K 0
mixer 0 0K 0
ac97 0 0K 0
hdacc 0 0K 0
hdac 0 0K 0
hdaa 0 0K 0
acpicmbat 0 0K 0
SIIS driver 0 0K 0
CAM CCB 0 0K 8605
PUC 0 0K 0
ppbusdev 0 0K 0
agtiapi_MemAlloc malloc 0 0K 0
biobuf 0 0K 0
aios 0 0K 0
lio 0 0K 0
acl 0 0K 0
osti_cacheable 0 0K 0
mbuf_tag 0 0K 137
tempbuff 0 0K 0
tempbuff 0 0K 0
ag_tgt_map_t malloc 0 0K 0
ag_slr_map_t malloc 0 0K 0
lDevFlags * malloc 0 0K 0
tiDeviceHandle_t * malloc 0 0K 0
ag_portal_data_t malloc 0 0K 0
ag_device_t malloc 0 0K 0
STLock malloc 0 0K 0
CCB List 0 0K 0
sr_iov 0 0K 0
OCS 0 0K 0
OCS 0 0K 0
nvme 0 0K 0
nvd 0 0K 0
netmap 0 0K 0
mwldev 0 0K 0
MVS driver 0 0K 0
CAM ccb queue 0 0K 0
mrsasbuf 0 0K 0
mpt_user 0 0K 0
mps_user 0 0K 0
accf 0 0K 0
pts 0 0K 0
iov 0 0K 17970
ioctlops 0 0K 530
eventfd 0 0K 6
Witness 0 0K 0
stack 0 0K 0
MPSSAS 0 0K 0
mps 0 0K 0
mpr_user 0 0K 0
MPRSAS 0 0K 0
mpr 0 0K 0
mfibuf 0 0K 0
sbuf 0 0K 288
md_sectors 0 0K 0
firmware 0 0K 0
compressor 0 0K 0
md_disk 0 0K 0
SWAP 0 0K 0
malodev 0 0K 0
LED 0 0K 0
sysctltmp 0 0K 939
sysctl 0 0K 3
ekcd 0 0K 0
dumper 0 0K 0
sendfile 0 0K 0
rctl 0 0K 0
ix_sriov 0 0K 0
aacraidcam 0 0K 0
aacraid_buf 0 0K 0
ix 0 0K 0
ipsbuf 0 0K 0
cache 0 0K 0
iirbuf 0 0K 0
prison_racct 0 0K 0
Fail Points 0 0K 0
sigio 0 0K 1
filedesc_to_leader 0 0K 19
pwd 0 0K 0
tty console 0 0K 0
aaccam 0 0K 0
aacbuf 0 0K 0
zstd 0 0K 0
XZ_DEC 0 0K 0
nvlist 0 0K 0
SCSI ENC 0 0K 0
SCSI sa 0 0K 0
scsi_pass 0 0K 0
isofs_node 0 0K 0
isofs_mount 0 0K 0
tr_raid5_data 0 0K 0
tr_raid1e_data 0 0K 0
tr_raid1_data 0 0K 0
tr_raid0_data 0 0K 0
tr_concat_data 0 0K 0
md_sii_data 0 0K 0
md_promise_data 0 0K 0
md_nvidia_data 0 0K 0
md_jmicron_data 0 0K 0
md_intel_data 0 0K 0
md_ddf_data 0 0K 0
raid_data 0 0K 72
geom_flashmap 0 0K 0
tmpfs dir 0 0K 0
tmpfs name 0 0K 0
tmpfs mount 0 0K 0
NFS FHA 0 0K 0
newnfsmnt 0 0K 0
newnfsclient_req 0 0K 0
NFSCL layrecall 0 0K 0
NFSCL session 0 0K 0
NFSCL sockreq 0 0K 0
NFSCL devinfo 0 0K 0
NFSCL flayout 0 0K 0
NFSCL layout 0 0K 0
NFSD rollback 0 0K 0
NFSCL diroff 0 0K 0
db> show uma
Zone Size Used Free Requests Sleeps Bucket Total Mem XFree
mbuf_jumbo_page 4096 8320 509 1116897 0 253 36163584 0
RADIX NODE 144 14877 10794 175236 0 62 3696624 0
tcp_log 416 72 7461 218295 0 253 3133728 0
mbuf 256 9423 1437 2505543 0 254 2780160 0
pbuf 2624 0 958 0 0 2 2513792 0
ertt_txseginfo 40 46005 11262 450442 0 254 2290680 0
BUF TRIE 144 356 11404 6768 0 62 1693440 0
malloc-384 384 4257 23 4357 0 30 1643520 0
malloc-128 128 11357 51 11642 0 126 1460224 0
malloc-4096 4096 327 3 626 0 2 1351680 0
UMA Slabs 0 112 10182 291 10734 0 126 1172976 0
mbuf_cluster 2048 570 2 570 0 253 1171456 0
malloc-16384 16384 59 6 1719 0 1 1064960 0
vmem btag 56 18128 351 18411 0 254 1034824 0
FFS inode 1160 555 26 2250 0 8 673960 0
tcp_bbr_map 128 1816 3175 154533 0 126 638848 0
malloc-4096 4096 136 7 3310 0 2 585728 0
VM OBJECT 264 2045 85 42564 0 30 562320 0
MAP ENTRY 96 4585 329 156863 0 126 471744 0
256 Bucket 2048 208 10 18060 0 8 446464 0
THREAD 1808 199 32 3442 0 8 417648 0
lkpimm 160 1 2324 1 0 62 372000 0
lkpicurr 160 2 2323 2 0 62 372000 0
VNODE 448 593 73 2290 0 30 298368 0
malloc-64 64 4195 404 55115 0 254 294336 0
malloc-65536 65536 0 4 493 0 1 262144 0
malloc-65536 65536 4 0 4 0 1 262144 0
VMSPACE 2544 90 12 2729 0 4 259488 0
malloc-2048 2048 105 15 1817 0 8 245760 0
malloc-16 16 14125 375 16345 0 254 232000 0
UMA Zones 768 242 2 242 0 16 187392 0
socket 944 141 43 4970 0 253 173696 0
malloc-32 32 5364 54 5622 0 254 173376 0
malloc-256 256 231 444 11584 0 62 172800 0
sctp_asoc 2288 47 28 750 0 253 171600 0
malloc-128 128 1264 69 30916 0 126 170624 0
malloc-128 128 1238 64 5884 0 126 166656 0
sctp_ep 1280 106 23 1805 0 253 165120 0
PROC 1336 112 11 2750 0 8 164328 0
malloc-32768 32768 0 5 100 0 1 163840 0
FFS2 dinode 256 555 15 2249 0 62 145920 0
mbuf_packet 256 47 523 8437 0 254 145920 0
filedesc0 1072 113 20 2754 0 8 142576 0
S VFS Cache 104 1027 338 2816 0 126 141960 0
malloc-65536 65536 2 0 2 0 1 131072 0
malloc-65536 65536 2 0 2 0 1 131072 0
malloc-65536 65536 0 2 16 0 1 131072 0
clpbuf 2624 0 47 839 0 15 123328 0
malloc-1024 1024 110 6 127 0 16 118784 0
128 Bucket 1024 76 39 2111 0 16 117760 0
DEVCTL 1024 0 100 153 0 0 102400 0
malloc-2048 2048 7 43 8614 0 8 102400 0
sctp_chunk 152 84 566 1891 0 253 98800 0
malloc-16384 16384 4 2 179 0 1 98304 0
malloc-256 256 212 148 7225 0 62 92160 0
UMA Kegs 384 227 6 227 0 30 89472 0
sctp_raddr 736 73 48 860 0 253 89056 0
malloc-1024 1024 55 25 1296 0 16 81920 0
malloc-384 384 164 36 2669 0 30 76800 0
malloc-128 128 308 281 2432 0 126 75392 0
malloc-8192 8192 5 4 134 0 1 73728 0
malloc-8192 8192 5 4 10 0 1 73728 0
g_bio 408 0 180 23527 0 30 73440 0
malloc-384 384 12 168 2002 0 30 69120 0
malloc-65536 65536 1 0 1 0 1 65536 0
malloc-32768 32768 0 2 130 0 1 65536 0
malloc-32768 32768 2 0 2 0 1 65536 0
64 Bucket 512 70 42 28820 0 30 57344 0
malloc-4096 4096 12 1 23 0 2 53248 0
tcpcb 1080 13 36 831 0 253 52920 0
malloc-256 256 155 40 2214 0 62 49920 0
32 Bucket 256 60 135 520504 0 62 49920 0
malloc-16384 16384 3 0 3 0 1 49152 0
malloc-16384 16384 0 3 4 0 1 49152 0
malloc-8192 8192 6 0 6 0 1 49152 0
malloc-8192 8192 4 2 12 0 1 49152 0
malloc-64 64 625 131 20682 0 254 48384 0
Files 80 420 180 15355 0 126 48000 0
malloc-256 256 154 26 313 0 62 46080 0
malloc-2048 2048 4 18 511 0 8 45056 0
udplite_inpcb 496 32 56 638 0 253 43648 0
malloc-256 256 114 51 1200 0 62 42240 0
DIRHASH 1024 30 10 34 0 16 40960 0
pcpu-8 8 4725 395 6221 0 254 40960 0
malloc-4096 4096 9 0 9 0 2 36864 0
malloc-64 64 478 89 690 0 254 36288 0
malloc-384 384 75 15 139 0 30 34560 0
TURNSTILE 136 232 20 232 0 62 34272 0
malloc-32768 32768 1 0 1 0 1 32768 0
malloc-8192 8192 2 2 4 0 1 32768 0
pcpu-64 64 487 25 487 0 254 32768 0
ksiginfo 112 106 182 2767 0 126 32256 0
tcp_inpcb 496 13 51 831 0 253 31744 0
tcp_rack_pcb 832 0 36 197 0 16 29952 0
tcp_bbr_pcb 832 8 28 405 0 16 29952 0
pipe 744 23 17 486 0 16 29760 0
malloc-4096 4096 3 4 1888 0 2 28672 0
malloc-1024 1024 13 15 1511 0 16 28672 0
malloc-64 64 311 130 5680 0 254 28224 0
malloc-64 64 117 324 2660 0 254 28224 0
malloc-2048 2048 12 0 203 0 8 24576 0
PWD 32 52 704 1756 0 254 24192 0
malloc-32 32 386 370 8750 0 254 24192 0
KNOTE 160 28 122 77266 0 62 24000 0
ttyinq 160 135 15 300 0 62 24000 0
8 Bucket 80 48 252 2032 0 126 24000 0
malloc-128 128 7 179 387 0 126 23808 0
ttyoutq 256 72 18 160 0 62 23040 0
malloc-256 256 29 61 1939 0 62 23040 0
SLEEPQUEUE 88 232 24 232 0 126 22528 0
NAMEI 1024 0 20 23501 0 16 20480 0
malloc-2048 2048 5 5 233 0 8 20480 0
malloc-1024 1024 17 3 17 0 16 20480 0
malloc-32 32 179 451 3156 0 254 20160 0
malloc-128 128 97 58 1942 0 126 19840 0
Mountpoints 2752 2 5 2 0 4 19264 0
malloc-384 384 36 14 36 0 30 19200 0
malloc-256 256 39 36 326 0 62 19200 0
malloc-8192 8192 2 0 2 0 1 16384 0
malloc-4096 4096 2 2 85 0 2 16384 0
malloc-2048 2048 2 6 227 0 8 16384 0
malloc-1024 1024 11 5 11 0 16 16384 0
malloc-64 64 166 86 268 0 254 16128 0
16 Bucket 144 53 59 514 0 62 16128 0
vtnet_tx_hdr 24 0 668 825664 0 254 16032 0
itimer 352 0 44 37 0 30 15488 0
malloc-384 384 35 5 37 0 30 15360 0
malloc-256 256 34 26 1237 0 62 15360 0
malloc-4096 4096 2 1 5 0 2 12288 0
malloc-1024 1024 8 4 9 0 16 12288 0
malloc-512 512 3 21 289 0 30 12288 0
malloc-512 512 10 14 201 0 30 12288 0
malloc-512 512 11 13 131 0 30 12288 0
malloc-64 64 125 64 653 0 254 12096 0
malloc-32 32 160 218 281 0 254 12096 0
malloc-16 16 342 408 603 0 254 12000 0
ripcb 496 5 19 53 0 253 11904 0
udp_inpcb 496 6 18 250 0 253 11904 0
kenv 258 15 30 1042 0 30 11610 0
unpcb 256 20 25 1342 0 253 11520 0
malloc-8192 8192 1 0 1 0 1 8192 0
malloc-2048 2048 2 2 2 0 8 8192 0
malloc-1024 1024 2 6 15 0 16 8192 0
malloc-1024 1024 1 7 70 0 16 8192 0
malloc-512 512 1 15 7 0 30 8192 0
malloc-512 512 12 4 16 0 30 8192 0
rtentry 176 30 16 34 0 62 8096 0
tcptw 88 0 92 4 0 253 8096 0
PGRP 88 35 57 66 0 126 8096 0
rl_entry 40 84 118 84 0 254 8080 0
sctp_stream_msg_out 112 13 59 151 0 253 8064 0
sctp_laddr 48 46 122 572 0 254 8064 0
tcp_rack_map 112 0 72 556 0 126 8064 0
hostcache 64 2 124 2 0 254 8064 0
udpcb 32 38 214 888 0 254 8064 0
ertt 72 13 99 831 0 126 8064 0
malloc-64 64 12 114 108 0 254 8064 0
malloc-32 32 137 115 202 0 254 8064 0
malloc-32 32 23 229 63 0 254 8064 0
malloc-32 32 38 214 850 0 254 8064 0
4 Bucket 48 7 161 98 0 254 8064 0
2 Bucket 32 60 192 846 0 254 8064 0
malloc-16 16 15 485 838 0 254 8000 0
malloc-16 16 16 484 19 0 254 8000 0
malloc-16 16 187 313 1417 0 254 8000 0
malloc-16 16 29 471 27719 0 254 8000 0
malloc-16 16 172 328 2853 0 254 8000 0
malloc-128 128 25 37 124 0 126 7936 0
malloc-128 128 11 51 250 0 126 7936 0
cryptop 280 0 28 24 0 30 7840 0
routing nhops 256 27 3 34 0 62 7680 0
malloc-384 384 1 19 349 0 30 7680 0
malloc-384 384 1 19 57 0 30 7680 0
FPU_save_area 832 1 8 1 0 16 7488 0
cpuset 104 7 55 35 0 126 6448 0
domainset 40 0 126 23 0 254 5040 0
epoch_record pcpu 256 4 12 4 0 62 4096 0
malloc-2048 2048 1 1 1 0 8 4096 0
malloc-512 512 4 4 4 0 30 4096 0
pcpu-16 16 7 249 7 0 254 4096 0
sackhole 32 0 126 1 0 254 4032 0
syncache 168 0 24 4 0 253 4032 0
sctp_readq 152 5 21 64 0 253 3952 0
UMA Slabs 1 176 9 13 9 0 62 3872 0
mqnode 416 3 6 3 0 30 3744 0
KMAP ENTRY 96 12 27 14 0 0 3744 0
vmem 1856 1 1 1 0 8 3712 0
SMR CPU 32 3 60 3 0 254 2016 0
SMR SHARED 24 3 60 3 0 254 1512 0
FFS1 dinode 128 0 0 0 0 126 0 0
da_ccb 544 0 0 0 0 16 0 0
ada_ccb 272 0 0 0 0 30 0 0
swblk 136 0 0 0 0 62 0 0
swpctrie 144 0 0 0 0 62 0 0
sctp_asconf_ack 48 0 0 0 0 254 0 0
sctp_asconf 40 0 0 0 0 254 0 0
cdg_qdiffsample 16 0 0 0 0 254 0 0
pf state scrubs 40 0 0 0 0 254 0 0
pf frag entries 40 0 0 0 0 254 0 0
pf frags 248 0 0 0 0 62 0 0
pf table entries 160 0 0 0 0 62 0 0
pf table entry counters 64 0 0 0 0 254 0 0
pf source nodes 136 0 0 0 0 253 0 0
pf state keys 88 0 0 0 0 126 0 0
pf states 304 0 0 0 0 253 0 0
pf tags 104 0 0 0 0 126 0
---
This report is generated by a bot. It may contain errors.
See https://goo.gl/tpsmEJ for more information about syzbot.
syzbot engineers can be reached at syzk...@googlegroups.com.
syzbot will keep track of this issue. See:
https://goo.gl/tpsmEJ#status for how to communicate with syzbot.
syzbot
Aug 6, 2021, 11:56:24 PM8/6/21
to syzkaller-f...@googlegroups.com
syzbot has found a reproducer for the following issue on:
HEAD commit: 362fef2f4a99 bsd.cpu.mk: add support for x86-64-v[234] lev..
dashboard link: https://syzkaller.appspot.com/bug?extid=1b064007a79b75637dc7
syz repro: https://syzkaller.appspot.com/x/repro.syz?x=10e1bce6300000
C reproducer: https://syzkaller.appspot.com/x/repro.c?x=1782d281300000
IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+1b0640...@syzkaller.appspotmail.com
login: panic: ASan: Invalid access, 8-byte read at 0xfffffe009ea11220, UMAUseAfterFree(fd)
cpuid = 0
time = 1628308408
KDB: stack backtrace:
db_trace_self_wrapper() at db_trace_self_wrapper+0xc7/frame 0xfffffe009bc95e70
kdb_backtrace() at kdb_backtrace+0xd3/frame 0xfffffe009bc95fd0
vpanic() at vpanic+0x2c5/frame 0xfffffe009bc960b0
panic() at panic+0xb5/frame 0xfffffe009bc96180
__asan_load8_noabort() at __asan_load8_noabort+0x376/frame 0xfffffe009bc96240
sctp_inpcb_free() at sctp_inpcb_free+0xebc/frame 0xfffffe009bc962d0
sctp_close() at sctp_close+0x1e4/frame 0xfffffe009bc963b0
soclose() at soclose+0x1a4/frame 0xfffffe009bc964c0
_fdrop() at _fdrop+0x58/frame 0xfffffe009bc964f0
closef() at closef+0x686/frame 0xfffffe009bc966e0
fdescfree_fds() at fdescfree_fds+0x1fa/frame 0xfffffe009bc96750
fdescfree() at fdescfree+0x903/frame 0xfffffe009bc96940
exit1() at exit1+0x8b7/frame 0xfffffe009bc969d0
sys_sys_exit() at sys_sys_exit+0x28/frame 0xfffffe009bc969f0
amd64_syscall() at amd64_syscall+0x425/frame 0xfffffe009bc96bf0
fast_syscall_common() at fast_syscall_common+0xf8/frame 0xfffffe009bc96bf0
--- syscall (1, FreeBSD ELF64, sys_sys_exit), rip = 0x29188a, rsp = 0x7fffffffe9f8, rbp = 0x7fffffffea10 ---
KDB: enter: panic
[ thread pid 3757 tid 100095 ]
Stopped at kdb_enter+0x6b: movq $0,0x28eba0a(%rip)
rdx 0xdffff7c000000000
rbx 0
rsp 0xfffffe009bc95fb0
rbp 0xfffffe009bc95fd0
rsi 0x1
rdi 0xffffffff840889c0 cov_trace_pc
r8 0x3
r9 0xfffffe009bc95ae8
r10 0
r11 0
r12 0xfffffe005873f3a0
r13 0xfffffe009bc96001
r14 0xffffffff82c612e0 .str.18
r15 0xffffffff82c612e0 .str.18
rip 0xffffffff8179f92b kdb_enter+0x6b
rflags 0x46
kdb_enter+0x6b: movq $0,0x28eba0a(%rip)
db> show proc
Process 3757 (syz-executor3796714) at 0xfffffe005873b000:
reaper: 0xfffffe0053d4f538 reapsubtree: 1
sigparent: 20
vmspace: 0xfffffe009f1a2000
(map 0xfffffe009f1a2000)
(map.pmap 0xfffffe009f1a20c0)
(pmap 0xfffffe009f1a2120)
threads: 1
100095 Run CPU 0 syz-executor3796714
3758 795 792 0 R syz-executor3796714
3757 798 792 0 RE CPU 0 syz-executor3796714
3746 796 792 0 RE syz-executor3796714
800 794 792 0 R syz-executor3796714
798 794 792 0 R syz-executor3796714
796 794 792 0 S wait 0xfffffe009e97aa70 syz-executor3796714
795 794 792 0 R syz-executor3796714
794 792 792 0 S nanslp 0xffffffff84058200 syz-executor3796714
792 790 792 0 Ss pause 0xfffffe009e97a5e8 csh
790 694 790 0 Ss select 0xfffffe0058844e40 sshd
762 1 762 0 Ss+ ttyin 0xfffffe0056fe2cb0 getty
761 1 761 0 Ss+ ttyin 0xfffffe00575f98b0 getty
760 1 760 0 Ss+ ttyin 0xfffffe00575f9cb0 getty
759 1 759 0 Ss+ ttyin 0xfffffe00583e50b0 getty
758 1 758 0 Ss+ ttyin 0xfffffe00583e54b0 getty
757 1 757 0 Ss+ ttyin 0xfffffe00583e58b0 getty
756 1 756 0 Ss+ ttyin 0xfffffe00583e5cb0 getty
755 1 755 0 Ss+ ttyin 0xfffffe00575250b0 getty
754 1 754 0 Ss+ ttyin 0xfffffe00575254b0 getty
698 1 698 0 Ss nanslp 0xffffffff84058200 cron
694 1 694 0 Ss select 0xfffffe0058844ec0 sshd
507 1 507 0 Ss select 0xfffffe00588ffbc0 syslogd
436 1 436 0 Ss select 0xfffffe00588ff140 devd
435 1 435 65 Ss select 0xfffffe009e3dbdc0 dhclient
350 1 350 0 Ss select 0xfffffe009e3dbec0 dhclient
347 1 347 0 Ss select 0xfffffe00588ffe40 dhclient
23 0 0 0 DL vlruwt 0xfffffe005873b538 [vnlru]
22 0 0 0 DL syncer 0xffffffff84180380 [syncer]
100088 D - 0xffffffff83411f80 [bufspacedaemon-0]
100098 D sdflush 0xfffffe0058914ce8 [/ worker]
20 0 0 0 DL psleep 0xffffffff841b6640 [vmdaemon]
100089 D launds 0xffffffff841aa184 [laundry: dom0]
100090 D umarcl 0xffffffff81e9a550 [uma]
18 0 0 0 DL - 0xffffffff83e0f320 [rand_harvestq]
17 0 0 0 DL waiting 0xffffffff84d7a460 [sctp_iterator]
16 0 0 0 DL pftm 0xffffffff84782e20 [pf purge]
15 0 0 0 DL - 0xffffffff841794c0 [soaiod4]
9 0 0 0 DL - 0xffffffff841794c0 [soaiod3]
8 0 0 0 DL - 0xffffffff841794c0 [soaiod2]
7 0 0 0 DL - 0xffffffff841794c0 [soaiod1]
100049 D - 0xffffffff83c94a40 [async]
100082 D - 0xffffffff83c948c0 [scanner]
14 0 0 0 DL seqstat 0xfffffe0056a9dc88 [sequencer 00]
5 0 0 0 DL crypto_ 0xfffffe0053c01b80 [crypto returns 1]
4 0 0 0 DL crypto_ 0xfffffe0053c01b30 [crypto returns 0]
3 0 0 0 DL crypto_ 0xffffffff841a4220 [crypto]
100040 D - 0xffffffff8402b800 [g_up]
100041 D - 0xffffffff8402b840 [g_down]
100030 D - 0xfffffe0053df5380 [thr_1]
100031 D - 0xffffffff8417a748 [alloc_0]
12 0 0 0 RL (threaded) [intr]
100012 I [swi6: task queue]
100013 I [swi6: Giant taskq]
100015 I [swi5: fast taskq]
100035 I [swi3: vm]
100036 I [swi1: hpts]
100037 I [swi1: hpts]
100050 I [irq24: virtio_pci0]
100051 I [irq25: virtio_pci0]
100052 I [irq26: virtio_pci0]
100053 I [irq27: virtio_pci0]
100054 I [irq28: virtio_pci1]
100055 I [irq29: virtio_pci1]
100056 I [irq30: virtio_pci1]
100057 I [irq31: virtio_pci1]
100058 I [irq32: virtio_pci1]
100063 I [irq10: virtio_pci2]
100065 I [irq1: atkbd0]
100066 I [irq12: psm0]
100067 I [swi0: uart uart++]
100075 I [swi1: pf send]
100004 CanRun [idle: cpu1]
1 0 1 0 SLs wait 0xfffffe0053d4f538 [init]
10 0 0 0 DL audit_w 0xffffffff841a51c0 [audit]
100005 D - 0xfffffe0053de6e00 [if_config_tqg_0]
100006 D - 0xfffffe0053de6d00 [softirq_0]
100007 D - 0xfffffe0053de6c00 [softirq_1]
100008 D - 0xfffffe0053de6b00 [if_io_tqg_0]
100009 D - 0xfffffe0053de6a00 [if_io_tqg_1]
100010 D - 0xfffffe0053de6900 [in6m_free taskq]
100011 D - 0xfffffe0053de6800 [deferred_unmount ta]
100014 D - 0xfffffe0053de6500 [thread taskq]
100016 D - 0xfffffe0053de6300 [linuxkpi_irq_wq]
100017 D - 0xfffffe0053de6200 [kqueue_ctx taskq]
100018 D - 0xfffffe0053de6100 [aiod_kick taskq]
100019 D - 0xfffffe0053de6000 [pci_hp taskq]
100020 D - 0xfffffe0053df6e00 [inm_free taskq]
100021 D - 0xfffffe0053df6d00 [linuxkpi_short_wq_0]
100022 D - 0xfffffe0053df6d00 [linuxkpi_short_wq_1]
100023 D - 0xfffffe0053df6d00 [linuxkpi_short_wq_2]
100024 D - 0xfffffe0053df6d00 [linuxkpi_short_wq_3]
100025 D - 0xfffffe0053df6c00 [linuxkpi_long_wq_0]
100026 D - 0xfffffe0053df6c00 [linuxkpi_long_wq_1]
100027 D - 0xfffffe0053df6c00 [linuxkpi_long_wq_2]
100028 D - 0xfffffe0053df6c00 [linuxkpi_long_wq_3]
100038 D - 0xfffffe0053df6a00 [firmware taskq]
100042 D - 0xfffffe0053df6000 [crypto_0]
100043 D - 0xfffffe0053df6000 [crypto_1]
100059 D - 0xfffffe0056b83500 [vtnet0 rxq 0]
100060 D - 0xfffffe0056b83400 [vtnet0 txq 0]
100061 D - 0xfffffe0056b83300 [vtnet0 rxq 1]
100062 D - 0xfffffe0056b83200 [vtnet0 txq 1]
100064 D vtbslp 0xfffffe0056fb0480 [virtio_balloon]
100068 D - 0xfffffe0056fc6100 [mca taskq]
100073 D - 0xffffffff82c68260 [deadlkres]
100077 D - 0xfffffe0056a42900 [acpi_task_0]
100078 D - 0xfffffe0056a42900 [acpi_task_1]
100079 D - 0xfffffe0056a42900 [acpi_task_2]
100081 D - 0xfffffe0056a42700 [CAM taskq]
db> show all locks
Process 3757 (syz-executor3796714) thread 0xfffffe005873f3a0 (100095)
exclusive sleep mutex sctp-inp (inp) r = 0 (0xfffffe009e9d2968) locked @ /syzkaller/managers/main/kernel/sys/netinet/sctp_pcb.c:3333
exclusive rw sctp-info (sctp-info) r = 0 (0xfffffe00081af408) locked @ /syzkaller/managers/main/kernel/sys/netinet/sctp_pcb.c:3331
exclusive sleep mutex sctp-create (inp_create) r = 0 (0xfffffe009e9d2988) locked @ /syzkaller/managers/main/kernel/sys/netinet/sctp_pcb.c:3330
Process 3746 (syz-executor3796714) thread 0xfffffe009e983740 (100123)
exclusive rw pmap pv list (pmap pv list) r = 0 (0xfffffe0007759f00) locked @ /syzkaller/managers/main/kernel/sys/amd64/amd64/pmap.c:8258
exclusive sleep mutex pmap (pmap) r = 0 (0xfffffe009e9b5120) locked @ /syzkaller/managers/main/kernel/sys/amd64/amd64/pmap.c:8170
vtbuf 24 1968K 46
kobj 326 1304K 485
vfscache 3 1025K 3
newblk 1 1024K 719
pcb 25 539K 17819
ufs_quota 1 512K 1
inodedep 1 512K 72
subproc 109 226K 3818
acpica 1674 184K 55752
vnet_data 1 168K 1
vmem 3 146K 4
tidhash 3 141K 3
linker 356 140K 384
pagedep 1 128K 20
tfo_ccache 1 128K 1
sem 4 106K 4
DEVFS1 103 103K 112
bus 984 80K 3475
umtx 330 42K 330
kdtrace 178 35K 6862
sctp_timw 138 35K 138
temp 18 33K 1649
hostcache 1 32K 1
shm 1 32K 1
DEVFS3 122 31K 132
BPF 10 18K 10
ufs_mount 4 17K 5
proc 3 17K 3
KTRACE 100 13K 100
routetbl 50 11K 176
rman 84 10K 425
rpc 2 8K 2
bmsafemap 1 8K 41
shmfd 1 8K 1
taskqueue 63 7K 63
ufs_dirhash 24 5K 24
UMA 270 5K 270
vt 11 5K 11
ifnet 3 5K 3
evdev 4 4K 4
filedesc 1 4K 1
acpisem 28 4K 28
hhook 15 4K 17
kqueue 51 4K 3762
ether_multi 40 4K 50
lltable 11 4K 11
pwddesc 49 4K 3760
pf_ifnet 5 3K 6
in6_multi 25 3K 25
terminal 11 3K 11
session 19 3K 34
uidinfo 3 3K 11
ipsec-saq 2 2K 2
selfd 27 2K 48921
lockf 16 2K 29
Unitno 27 2K 39
ipsec 3 1K 3
nhops 6 1K 6
crypto 4 1K 4
ip6ndp 4 1K 5
encap_export_host 12 1K 12
in_multi 2 1K 4
chacha20random 1 1K 1
osd 7 1K 18
inpcbpolicy 10 1K 137
sctp_ifn 2 1K 6
DEVFS 9 1K 10
mld 2 1K 2
igmp 2 1K 2
tun 3 1K 3
sctp_vrf 1 1K 1
freework 1 1K 26
vnet 1 1K 1
entropy 2 1K 36
p1003.1b 1 1K 1
filecaps 1 1K 70
sctp_mcore 0 0K 0
sctp_socko 0 0K 2953
sctp_iter 0 0K 4
sctp_aadr 0 0K 0
sctp_stro 0 0K 5905
sctp_stri 0 0K 5904
sctp_map 0 0K 5906
tcp_do 0 0K 0
tcp_fsb 0 0K 0
cdg data 0 0K 0
cubic data 0 0K 0
dctcp data 0 0K 0
vegas data 0 0K 0
chd data 0 0K 0
htcp data 0 0K 0
pf_table 0 0K 0
pf_rule 0 0K 0
pf_altq 0 0K 0
pf_osfp 0 0K 0
pf_temp 0 0K 0
mqdata 0 0K 0
savedino 0 0K 19
dirrem 0 0K 28
mkdir 0 0K 16
diradd 0 0K 37
freefile 0 0K 26
freeblks 0 0K 25
freefrag 0 0K 1
allocindir 0 0K 0
indirdep 0 0K 3
ip6opt 0 0K 3
namei_tracker 0 0K 0
export_host 0 0K 0
cl_savebuf 0 0K 3
ioctlops 0 0K 86
eventfd 0 0K 0
mbuf_jumbo_page 4096 8320 990 16124 0 254 38133760 0
pbuf 2624 0 973 0 0 2 2553152 0
mbuf 256 8579 991 107836 0 254 2449920 0
BUF TRIE 144 177 11583 596 0 62 1693440 0
malloc-384 384 4247 13 4595 0 30 1635840 0
malloc-128 128 11275 164 11611 0 126 1464192 0
malloc-4096 4096 326 1 485 0 2 1339392 0
UMA Slabs 0 112 10181 4 10181 0 126 1140720 0
vmem btag 56 15628 43 15628 0 254 877576 0
FFS inode 1160 488 23 514 0 8 592760 0
RADIX NODE 144 3064 291 160099 0 62 483120 0
malloc-65536 65536 4 2 186 0 1 393216 0
lkpimm 168 1 2327 1 0 62 391104 0
lkpicurr 168 2 2326 2 0 62 391104 0
mbuf_cluster 2048 180 0 180 0 254 368640 0
THREAD 1808 126 39 3101 0 8 298320 0
256 Bucket 2048 124 10 11015 0 8 274432 0
malloc-64 64 4094 64 7828 0 254 266112 0
VM OBJECT 264 905 70 45471 0 30 257400 0
VNODE 448 518 40 546 0 30 249984 0
malloc-4096 4096 58 1 4391 0 2 241664 0
malloc-16 16 14028 222 14105 0 254 228000 0
DEVCTL 1024 0 220 125 0 0 225280 0
malloc-256 256 373 452 2012 0 62 211200 0
malloc-128 128 1207 64 26018 0 126 162688 0
malloc-1024 1024 119 29 1744 0 16 151552 0
sctp_ep 1280 1 110 8871 0 254 142080 0
FFS2 dinode 256 488 37 514 0 62 134400 0
socket 944 19 117 10199 0 254 128384 0
ksiginfo 112 39 1005 80 0 126 116928 0
S VFS Cache 104 982 71 1021 0 126 109512 0
MAP ENTRY 96 861 273 80107 0 126 108864 0
malloc-8192 8192 8 5 137 0 1 106496 0
malloc-128 128 756 50 1761 0 126 103168 0
malloc-16384 16384 5 1 180 0 1 98304 0
VMSPACE 2544 28 8 3738 0 4 91584 0
sctp_asoc 2288 0 40 2953 0 254 91520 0
malloc-256 256 214 86 3651 0 62 76800 0
PROC 1336 50 7 3759 0 8 76152 0
filedesc0 1072 50 20 3760 0 8 75040 0
malloc-128 128 512 46 3867 0 126 71424 0
128 Bucket 1024 38 29 610 0 16 68608 0
malloc-2048 2048 10 20 1043 0 8 61440 0
g_bio 408 0 150 5089 0 30 61200 0
malloc-64 64 507 438 1288 0 254 60480 0
malloc-4096 4096 13 1 29 0 2 57344 0
mbuf_packet 256 0 180 35497 0 254 46080 0
malloc-64 64 544 149 10524 0 254 44352 0
malloc-256 256 22 143 8927 0 62 42240 0
32 Bucket 256 49 116 3146 0 62 42240 0
malloc-8192 8192 5 0 5 0 1 40960 0
malloc-8192 8192 5 0 5 0 1 40960 0
64 Bucket 512 66 14 3636 0 30 40960 0
DIRHASH 1024 34 2 34 0 16 36864 0
NAMEI 1024 0 36 12483 0 16 36864 0
pcpu-8 8 4229 379 4257 0 254 36864 0
malloc-384 384 16 64 97 0 30 30720 0
malloc-384 384 2 78 14777 0 30 30720 0
da_ccb 544 0 56 1398 0 16 30464 0
malloc-4096 4096 7 0 7 0 2 28672 0
malloc-512 512 1 55 5905 0 30 28672 0
TURNSTILE 136 166 23 166 0 62 25704 0
malloc-8192 8192 3 0 3 0 1 24576 0
malloc-8192 8192 2 1 4 0 1 24576 0
malloc-4096 4096 6 0 6 0 2 24576 0
malloc-1024 1024 18 6 25 0 16 24576 0
ertt_txseginfo 40 0 606 3176 0 254 24240 0
malloc-32 32 183 447 1451 0 254 20160 0
SLEEPQUEUE 88 166 58 166 0 126 19712 0
pipe 744 6 19 291 0 16 18600 0
malloc-16384 16384 1 0 1 0 1 16384 0
malloc-16384 16384 1 0 1 0 1 16384 0
malloc-16384 16384 1 0 1 0 1 16384 0
malloc-2048 2048 4 4 13 0 8 16384 0
malloc-1024 1024 13 3 13 0 16 16384 0
malloc-64 64 64 188 17434 0 254 16128 0
malloc-64 64 101 151 52756 0 254 16128 0
16 Bucket 144 42 70 315 0 62 16128 0
vtnet_tx_hdr 24 0 668 5227 0 254 16032 0
Files 80 68 132 18519 0 126 16000 0
sctp_chunk 152 0 104 5929 0 254 15808 0
malloc-384 384 34 6 34 0 30 15360 0
tcpcb 1080 3 11 7 0 254 15120 0
malloc-2048 2048 3 3 79 0 8 12288 0
malloc-512 512 5 19 247 0 30 12288 0
malloc-64 64 125 64 147 0 254 12096 0
malloc-32 32 246 132 328 0 254 12096 0
malloc-32 32 27 351 14581 0 254 12096 0
malloc-16 16 509 241 7752 0 254 12000 0
8 Bucket 80 41 109 751 0 126 12000 0
malloc-128 128 69 24 78 0 126 11904 0
kenv 258 15 30 1026 0 30 11610 0
malloc-256 256 21 24 25 0 62 11520 0
malloc-256 256 24 21 267 0 62 11520 0
malloc-2048 2048 4 0 4 0 8 8192 0
malloc-2048 2048 4 0 4 0 8 8192 0
malloc-1024 1024 1 7 5 0 16 8192 0
malloc-1024 1024 6 2 6 0 16 8192 0
malloc-1024 1024 7 1 7 0 16 8192 0
malloc-512 512 8 8 9 0 30 8192 0
rtentry 176 13 33 17 0 62 8096 0
PGRP 88 19 73 34 0 126 8096 0
rl_entry 40 30 172 30 0 254 8080 0
sctp_stream_msg_out 112 0 72 2952 0 254 8064 0
sctp_laddr 48 0 168 4 0 254 8064 0
udpcb 32 6 246 126 0 254 8064 0
ertt 72 3 109 7 0 126 8064 0
PWD 32 10 242 106 0 254 8064 0
malloc-64 64 13 113 34 0 254 8064 0
malloc-64 64 4 122 8 0 254 8064 0
malloc-32 32 27 225 9051 0 254 8064 0
malloc-32 32 69 183 110 0 254 8064 0
malloc-32 32 26 226 166 0 254 8064 0
malloc-32 32 0 252 5 0 254 8064 0
4 Bucket 48 5 163 82 0 254 8064 0
2 Bucket 32 43 209 495 0 254 8064 0
malloc-16 16 1 499 3147 0 254 8000 0
malloc-16 16 2 498 2 0 254 8000 0
malloc-16 16 24 476 62 0 254 8000 0
malloc-16 16 32 468 25361 0 254 8000 0
malloc-16 16 3 497 117 0 254 8000 0
malloc-16 16 5 495 17733 0 254 8000 0
tcp_inpcb 496 3 13 7 0 254 7936 0
udp_inpcb 496 6 10 126 0 254 7936 0
malloc-128 128 17 45 178 0 126 7936 0
malloc-128 128 5 57 18 0 126 7936 0
sctp_readq 152 1 51 2952 0 254 7904 0
routing nhops 256 10 20 17 0 62 7680 0
unpcb 256 7 23 1174 0 254 7680 0
malloc-384 384 0 20 20 0 30 7680 0
malloc-384 384 7 13 9 0 30 7680 0
malloc-256 256 0 30 390 0 62 7680 0
malloc-256 256 6 24 262 0 62 7680 0
malloc-4096 4096 0 1 2 0 2 4096 0
malloc-2048 2048 2 0 2 0 8 4096 0
malloc-512 512 1 7 1 0 30 4096 0
malloc-512 512 1 7 1 0 30 4096 0
malloc-512 512 4 4 5 0 30 4096 0
malloc-512 512 2 6 2 0 30 4096 0
syncache 168 0 24 5 0 254 4032 0
KNOTE 160 0 25 8 0 62 4000 0
ripcb 496 1 7 4 0 254 3968 0
UMA Slabs 1 176 8 14 8 0 62 3872 0
malloc-384 384 1 9 1 0 30 3840 0
malloc-384 384 3 7 3 0 30 3840 0
pf tags 104 0 0 0 0 126 0 0
pf mtags 48 0 0 0 0 254 0 0
tcp_bbr_pcb 832 0 0 0 0 16 0 0
tcp_bbr_map 128 0 0 0 0 126 0 0
tcp_rack_pcb 832 0 0 0 0 16 0 0
tcp_rack_map 112 0 0 0 0 126 0 0
udplite_inpcb 496 0 0 0 0 254 0 0
tcp_log_node 120 0 0 0 0 126 0 0
tcp_log_bucket 176 0 0 0 0 62 0 0
tcp_log 416 0 0 0 0 254 0 0
tcpreass 48 0 0 0 0 254 0 0
tfo_ccache_entries 80 0 0 0 0 126 0 0
tfo 4 0 0 0 0 254 0 0
sackhole 32 0 0 0 0 254 0 0
tcptw 88 0 0 0 0 254 0 0
ipq 56 0 0 0 0 254 0 0
IPsec SA lft_c 16 0 0 0 0 254 0 0
itimer 352 0 0 0 0 30 0 0
AIOLIO 272 0 0 0 0 30 0 0
AIOCB 552 0 0 0 0 16 0 0
AIOP 32 0 0 0 0 254 0 0
AIO 208 0 0 0 0 62 0 0
TMPFS node 224 0 0 0 0 62 0 0
NCLNODE 592 0 0 0 0 16 0 0
mqnotifier 216 0 0 0 0 62 0 0
mvdata 64 0 0 0 0 254 0 0
mqueue 248 0 0 0 0 62 0 0
LTS VFS Cache 360 0 0 0 0 30 0 0
L VFS Cache 320 0 0 0 0 30 0 0
STS VFS Cache 144 0 0 0 0 62 0 0
cryptop 280 0 0 0 0 30 0 0
linux_dma_object 24 0 0 0 0 254 0 0
linux_dma_pctrie 144 0 0 0 0 62 0 0
IOMMU_MAP_ENTRY 120 0 0 0 0 126 0 0
ktls_session 192 0 0 0 0 62 0 0
mbuf_jumbo_16k 16384 0 0 0 0 254 0 0
mbuf_jumbo_9k 9216 0 0 0 0 254 0 0
audit_record 1280 0 0 0 0 8 0 0
domainset 40 0 0 0 0 254 0 0
MAC labels 40 0 0 0 0 254 0 0
vnpbuf 2624 0 0 0 0 64 0 0
mdpbuf 2624 0 0 0 0 3 0 0
nfspbuf 2624 0 0 0 0 16 0 0
swwbuf 2624 0 0 0 0 8 0 0
swrbuf 2624 0 0 0 0 16 0 0
umtx_shm 88 0 0 0 0 126 0 0
umtx pi 96 0 0 0 0 126 0 0
rangeset pctrie nodes 144 0 0 0 0 62 0 0
malloc-65536 65536 0 0 0 0 1 0 0
malloc-65536 65536 0 0 0 0 1 0 0
malloc-65536 65536 0 0 0 0 1 0 0
malloc-32768 32768 0 0 0 0 1 0 0
malloc-32768 32768 0 0 0 0 1 0 0
malloc-32768 32768 0 0 0 0 1 0 0
malloc-32768 32768 0 0 0 0 1 0 0
malloc-32768 32768 0 0 0 0 1 0 0
malloc-16384 16384 0 0 0 0 1 0 0
malloc-16384 16384 0 0 0 0 1 0 0
malloc-16384 16384 0 0 0 0 1 0 0
malloc-16384 16384 0 0 0 0 1 0 0
malloc-8192 8192 0 0 0 0 1 0 0
malloc-2048 2048 0 0 0 0 8 0 0
malloc-1024 1024 0 0 0 0 16 0 0
malloc-512 512 0 0 0 0 30 0 0
pcpu-32 32 0 0 0 0 254 0 0
pcpu-4 4 0 0 0 0 254 0 0
fakepg 104 0 0 0 0 126 0
HEAD commit: 362fef2f4a99 bsd.cpu.mk: add support for x86-64-v[234] lev..
git tree: https://github.com/freebsd/freebsd-src.git main
console output: https://syzkaller.appspot.com/x/log.txt?x=11788392300000
dashboard link: https://syzkaller.appspot.com/bug?extid=1b064007a79b75637dc7
syz repro: https://syzkaller.appspot.com/x/repro.syz?x=10e1bce6300000
C reproducer: https://syzkaller.appspot.com/x/repro.c?x=1782d281300000
IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+1b0640...@syzkaller.appspotmail.com
cpuid = 0
time = 1628308408
KDB: stack backtrace:
db_trace_self_wrapper() at db_trace_self_wrapper+0xc7/frame 0xfffffe009bc95e70
kdb_backtrace() at kdb_backtrace+0xd3/frame 0xfffffe009bc95fd0
vpanic() at vpanic+0x2c5/frame 0xfffffe009bc960b0
panic() at panic+0xb5/frame 0xfffffe009bc96180
__asan_load8_noabort() at __asan_load8_noabort+0x376/frame 0xfffffe009bc96240
sctp_inpcb_free() at sctp_inpcb_free+0xebc/frame 0xfffffe009bc962d0
sctp_close() at sctp_close+0x1e4/frame 0xfffffe009bc963b0
soclose() at soclose+0x1a4/frame 0xfffffe009bc964c0
_fdrop() at _fdrop+0x58/frame 0xfffffe009bc964f0
closef() at closef+0x686/frame 0xfffffe009bc966e0
fdescfree_fds() at fdescfree_fds+0x1fa/frame 0xfffffe009bc96750
fdescfree() at fdescfree+0x903/frame 0xfffffe009bc96940
exit1() at exit1+0x8b7/frame 0xfffffe009bc969d0
sys_sys_exit() at sys_sys_exit+0x28/frame 0xfffffe009bc969f0
amd64_syscall() at amd64_syscall+0x425/frame 0xfffffe009bc96bf0
fast_syscall_common() at fast_syscall_common+0xf8/frame 0xfffffe009bc96bf0
--- syscall (1, FreeBSD ELF64, sys_sys_exit), rip = 0x29188a, rsp = 0x7fffffffe9f8, rbp = 0x7fffffffea10 ---
KDB: enter: panic
[ thread pid 3757 tid 100095 ]
Stopped at kdb_enter+0x6b: movq $0,0x28eba0a(%rip)
db>
db> set $lines = 0
db> set $maxwidth = 0
db> show registers
cs 0x20
ds 0x3b
es 0x3b
fs 0x13
gs 0x1b
ss 0x28
rax 0x12
rcx 0x208f0278bb2770
db> set $lines = 0
db> set $maxwidth = 0
db> show registers
cs 0x20
ds 0x3b
es 0x3b
fs 0x13
gs 0x1b
ss 0x28
rax 0x12
rdx 0xdffff7c000000000
rbx 0
rsp 0xfffffe009bc95fb0
rbp 0xfffffe009bc95fd0
rsi 0x1
rdi 0xffffffff840889c0 cov_trace_pc
r8 0x3
r9 0xfffffe009bc95ae8
r10 0
r11 0
r12 0xfffffe005873f3a0
r13 0xfffffe009bc96001
r14 0xffffffff82c612e0 .str.18
r15 0xffffffff82c612e0 .str.18
rip 0xffffffff8179f92b kdb_enter+0x6b
rflags 0x46
kdb_enter+0x6b: movq $0,0x28eba0a(%rip)
db> show proc
Process 3757 (syz-executor3796714) at 0xfffffe005873b000:
state: NORMAL
uid: 0 gids: 0, 0, 5
parent: pid 798 at 0xfffffe0058863538
uid: 0 gids: 0, 0, 5
ABI: FreeBSD ELF64
flag: 0x10002000 flag2: 0
arguments: ./syz-executor379671465
flag: 0x10002000 flag2: 0
reaper: 0xfffffe0053d4f538 reapsubtree: 1
sigparent: 20
vmspace: 0xfffffe009f1a2000
(map 0xfffffe009f1a2000)
(map.pmap 0xfffffe009f1a20c0)
(pmap 0xfffffe009f1a2120)
threads: 1
100095 Run CPU 0 syz-executor3796714
db> ps
pid ppid pgrp uid state wmesg wchan cmd
3759 800 792 0 R syz-executor3796714
pid ppid pgrp uid state wmesg wchan cmd
3758 795 792 0 R syz-executor3796714
3757 798 792 0 RE CPU 0 syz-executor3796714
3746 796 792 0 RE syz-executor3796714
800 794 792 0 R syz-executor3796714
798 794 792 0 R syz-executor3796714
796 794 792 0 S wait 0xfffffe009e97aa70 syz-executor3796714
795 794 792 0 R syz-executor3796714
794 792 792 0 S nanslp 0xffffffff84058200 syz-executor3796714
792 790 792 0 Ss pause 0xfffffe009e97a5e8 csh
790 694 790 0 Ss select 0xfffffe0058844e40 sshd
762 1 762 0 Ss+ ttyin 0xfffffe0056fe2cb0 getty
761 1 761 0 Ss+ ttyin 0xfffffe00575f98b0 getty
760 1 760 0 Ss+ ttyin 0xfffffe00575f9cb0 getty
759 1 759 0 Ss+ ttyin 0xfffffe00583e50b0 getty
758 1 758 0 Ss+ ttyin 0xfffffe00583e54b0 getty
757 1 757 0 Ss+ ttyin 0xfffffe00583e58b0 getty
756 1 756 0 Ss+ ttyin 0xfffffe00583e5cb0 getty
755 1 755 0 Ss+ ttyin 0xfffffe00575250b0 getty
754 1 754 0 Ss+ ttyin 0xfffffe00575254b0 getty
698 1 698 0 Ss nanslp 0xffffffff84058200 cron
694 1 694 0 Ss select 0xfffffe0058844ec0 sshd
507 1 507 0 Ss select 0xfffffe00588ffbc0 syslogd
436 1 436 0 Ss select 0xfffffe00588ff140 devd
435 1 435 65 Ss select 0xfffffe009e3dbdc0 dhclient
350 1 350 0 Ss select 0xfffffe009e3dbec0 dhclient
347 1 347 0 Ss select 0xfffffe00588ffe40 dhclient
23 0 0 0 DL vlruwt 0xfffffe005873b538 [vnlru]
22 0 0 0 DL syncer 0xffffffff84180380 [syncer]
21 0 0 0 DL (threaded) [bufdaemon]
100085 D qsleep 0xffffffff8417e1a0 [bufdaemon]
100088 D - 0xffffffff83411f80 [bufspacedaemon-0]
100098 D sdflush 0xfffffe0058914ce8 [/ worker]
20 0 0 0 DL psleep 0xffffffff841b6640 [vmdaemon]
19 0 0 0 DL (threaded) [pagedaemon]
100083 D psleep 0xffffffff841aa178 [dom0]
100089 D launds 0xffffffff841aa184 [laundry: dom0]
100090 D umarcl 0xffffffff81e9a550 [uma]
18 0 0 0 DL - 0xffffffff83e0f320 [rand_harvestq]
17 0 0 0 DL waiting 0xffffffff84d7a460 [sctp_iterator]
16 0 0 0 DL pftm 0xffffffff84782e20 [pf purge]
15 0 0 0 DL - 0xffffffff841794c0 [soaiod4]
9 0 0 0 DL - 0xffffffff841794c0 [soaiod3]
8 0 0 0 DL - 0xffffffff841794c0 [soaiod2]
7 0 0 0 DL - 0xffffffff841794c0 [soaiod1]
6 0 0 0 DL (threaded) [cam]
100048 D - 0xffffffff83c94ac0 [doneq0]
100049 D - 0xffffffff83c94a40 [async]
100082 D - 0xffffffff83c948c0 [scanner]
14 0 0 0 DL seqstat 0xfffffe0056a9dc88 [sequencer 00]
5 0 0 0 DL crypto_ 0xfffffe0053c01b80 [crypto returns 1]
4 0 0 0 DL crypto_ 0xfffffe0053c01b30 [crypto returns 0]
3 0 0 0 DL crypto_ 0xffffffff841a4220 [crypto]
13 0 0 0 DL (threaded) [geom]
100039 D - 0xffffffff8402b7c0 [g_event]
100040 D - 0xffffffff8402b800 [g_up]
100041 D - 0xffffffff8402b840 [g_down]
2 0 0 0 DL (threaded) [KTLS]
100029 D - 0xfffffe0053df5300 [thr_0]
100030 D - 0xfffffe0053df5380 [thr_1]
100031 D - 0xffffffff8417a748 [alloc_0]
12 0 0 0 RL (threaded) [intr]
100012 I [swi6: task queue]
100013 I [swi6: Giant taskq]
100015 I [swi5: fast taskq]
100032 I [swi4: clock (0)]
100033 I [swi4: clock (1)]
100034 Run CPU 1 [swi1: netisr 0]
100033 I [swi4: clock (1)]
100035 I [swi3: vm]
100036 I [swi1: hpts]
100037 I [swi1: hpts]
100050 I [irq24: virtio_pci0]
100051 I [irq25: virtio_pci0]
100052 I [irq26: virtio_pci0]
100053 I [irq27: virtio_pci0]
100054 I [irq28: virtio_pci1]
100055 I [irq29: virtio_pci1]
100056 I [irq30: virtio_pci1]
100057 I [irq31: virtio_pci1]
100058 I [irq32: virtio_pci1]
100063 I [irq10: virtio_pci2]
100065 I [irq1: atkbd0]
100066 I [irq12: psm0]
100067 I [swi0: uart uart++]
100075 I [swi1: pf send]
11 0 0 0 RL (threaded) [idle]
100003 CanRun [idle: cpu0]
100004 CanRun [idle: cpu1]
1 0 1 0 SLs wait 0xfffffe0053d4f538 [init]
10 0 0 0 DL audit_w 0xffffffff841a51c0 [audit]
0 0 0 0 DLs (threaded) [kernel]
100000 D swapin 0xffffffff8402c6c0 [swapper]
100005 D - 0xfffffe0053de6e00 [if_config_tqg_0]
100006 D - 0xfffffe0053de6d00 [softirq_0]
100007 D - 0xfffffe0053de6c00 [softirq_1]
100008 D - 0xfffffe0053de6b00 [if_io_tqg_0]
100009 D - 0xfffffe0053de6a00 [if_io_tqg_1]
100010 D - 0xfffffe0053de6900 [in6m_free taskq]
100011 D - 0xfffffe0053de6800 [deferred_unmount ta]
100014 D - 0xfffffe0053de6500 [thread taskq]
100016 D - 0xfffffe0053de6300 [linuxkpi_irq_wq]
100017 D - 0xfffffe0053de6200 [kqueue_ctx taskq]
100018 D - 0xfffffe0053de6100 [aiod_kick taskq]
100019 D - 0xfffffe0053de6000 [pci_hp taskq]
100020 D - 0xfffffe0053df6e00 [inm_free taskq]
100021 D - 0xfffffe0053df6d00 [linuxkpi_short_wq_0]
100022 D - 0xfffffe0053df6d00 [linuxkpi_short_wq_1]
100023 D - 0xfffffe0053df6d00 [linuxkpi_short_wq_2]
100024 D - 0xfffffe0053df6d00 [linuxkpi_short_wq_3]
100025 D - 0xfffffe0053df6c00 [linuxkpi_long_wq_0]
100026 D - 0xfffffe0053df6c00 [linuxkpi_long_wq_1]
100027 D - 0xfffffe0053df6c00 [linuxkpi_long_wq_2]
100028 D - 0xfffffe0053df6c00 [linuxkpi_long_wq_3]
100038 D - 0xfffffe0053df6a00 [firmware taskq]
100042 D - 0xfffffe0053df6000 [crypto_0]
100043 D - 0xfffffe0053df6000 [crypto_1]
100059 D - 0xfffffe0056b83500 [vtnet0 rxq 0]
100060 D - 0xfffffe0056b83400 [vtnet0 txq 0]
100061 D - 0xfffffe0056b83300 [vtnet0 rxq 1]
100062 D - 0xfffffe0056b83200 [vtnet0 txq 1]
100064 D vtbslp 0xfffffe0056fb0480 [virtio_balloon]
100068 D - 0xfffffe0056fc6100 [mca taskq]
100073 D - 0xffffffff82c68260 [deadlkres]
100077 D - 0xfffffe0056a42900 [acpi_task_0]
100078 D - 0xfffffe0056a42900 [acpi_task_1]
100079 D - 0xfffffe0056a42900 [acpi_task_2]
100081 D - 0xfffffe0056a42700 [CAM taskq]
db> show all locks
Process 3757 (syz-executor3796714) thread 0xfffffe005873f3a0 (100095)
exclusive sleep mutex sctp-inp (inp) r = 0 (0xfffffe009e9d2968) locked @ /syzkaller/managers/main/kernel/sys/netinet/sctp_pcb.c:3333
exclusive rw sctp-info (sctp-info) r = 0 (0xfffffe00081af408) locked @ /syzkaller/managers/main/kernel/sys/netinet/sctp_pcb.c:3331
exclusive sleep mutex sctp-create (inp_create) r = 0 (0xfffffe009e9d2988) locked @ /syzkaller/managers/main/kernel/sys/netinet/sctp_pcb.c:3330
Process 3746 (syz-executor3796714) thread 0xfffffe009e983740 (100123)
exclusive rw pmap pv list (pmap pv list) r = 0 (0xfffffe0007759f00) locked @ /syzkaller/managers/main/kernel/sys/amd64/amd64/pmap.c:8258
exclusive sleep mutex pmap (pmap) r = 0 (0xfffffe009e9b5120) locked @ /syzkaller/managers/main/kernel/sys/amd64/amd64/pmap.c:8170
db> show malloc
Type InUse MemUse Requests
pf_hash 5 11524K 5
devbuf 4216 4338K 4244
tcp_hpts 6 3201K 6
sysctloid 34332 2028K 34402
Type InUse MemUse Requests
pf_hash 5 11524K 5
devbuf 4216 4338K 4244
tcp_hpts 6 3201K 6
vtbuf 24 1968K 46
kobj 326 1304K 485
vfscache 3 1025K 3
newblk 1 1024K 719
pcb 25 539K 17819
ufs_quota 1 512K 1
inodedep 1 512K 72
vfs_hash 1 512K 1
callout 2 512K 2
intr 4 472K 4
callout 2 512K 2
subproc 109 226K 3818
acpica 1674 184K 55752
vnet_data 1 168K 1
vmem 3 146K 4
tidhash 3 141K 3
linker 356 140K 384
pagedep 1 128K 20
tfo_ccache 1 128K 1
sem 4 106K 4
DEVFS1 103 103K 112
bus 984 80K 3475
mtx_pool 2 72K 2
syncache 1 68K 1
acpitask 1 64K 1
ddb_capture 1 64K 1
module 509 64K 509
syncache 1 68K 1
acpitask 1 64K 1
ddb_capture 1 64K 1
umtx 330 42K 330
kdtrace 178 35K 6862
sctp_timw 138 35K 138
temp 18 33K 1649
hostcache 1 32K 1
shm 1 32K 1
DEVFS3 122 31K 132
msg 4 30K 4
gtaskqueue 18 26K 18
kbdmux 6 22K 6
DEVFS_RULE 56 20K 56
gtaskqueue 18 26K 18
kbdmux 6 22K 6
BPF 10 18K 10
ufs_mount 4 17K 5
proc 3 17K 3
tty 16 16K 16
ithread 99 16K 99
bus-sc 33 14K 1692
ithread 99 16K 99
KTRACE 100 13K 100
kenv 95 12K 95
eventhandler 133 12K 133
ifaddr 30 12K 32
eventhandler 133 12K 133
routetbl 50 11K 176
CAM queue 5 11K 1528
GEOM 61 10K 489
rman 84 10K 425
UART 12 9K 12
devstat 4 9K 4
ksem 1 8K 1
devstat 4 9K 4
rpc 2 8K 2
bmsafemap 1 8K 41
shmfd 1 8K 1
pfs_vncache 1 8K 1
pfs_nodes 20 8K 20
audit_evclass 237 8K 295
pfs_nodes 20 8K 20
taskqueue 63 7K 63
sglist 5 7K 5
CAM DEV 3 6K 510
cred 22 6K 263
CAM DEV 3 6K 510
ufs_dirhash 24 5K 24
UMA 270 5K 270
vt 11 5K 11
ifnet 3 5K 3
memdesc 1 4K 1
MCA 32 4K 32
plimit 16 4K 368
MCA 32 4K 32
evdev 4 4K 4
filedesc 1 4K 1
acpisem 28 4K 28
hhook 15 4K 17
kqueue 51 4K 3762
ether_multi 40 4K 50
lltable 11 4K 11
pwddesc 49 4K 3760
pf_ifnet 5 3K 6
in6_multi 25 3K 25
terminal 11 3K 11
session 19 3K 34
uidinfo 3 3K 11
local_apic 1 2K 1
io_apic 1 2K 1
fpukern_ctx 2 2K 2
io_apic 1 2K 1
ipsec-saq 2 2K 2
selfd 27 2K 48921
lockf 16 2K 29
Unitno 27 2K 39
CAM XPT 22 2K 543
proc-args 36 2K 503
ipsecpolicy 2 2K 2
acpidev 20 2K 20
msi 9 2K 9
clone 9 2K 9
softdep 1 1K 1
acpidev 20 2K 20
msi 9 2K 9
clone 9 2K 9
sahead 1 1K 1
secasvar 1 1K 1
vnodemarker 2 1K 58
secasvar 1 1K 1
NFSD session 1 1K 1
CAM periph 4 1K 271
select 7 1K 29
CAM periph 4 1K 271
ipsec 3 1K 3
nhops 6 1K 6
toponodes 6 1K 6
isadev 6 1K 6
mount 16 1K 89
pci_link 10 1K 10
sctp_ifa 5 1K 6
isadev 6 1K 6
mount 16 1K 89
pci_link 10 1K 10
crypto 4 1K 4
ip6ndp 4 1K 5
encap_export_host 12 1K 12
in_multi 2 1K 4
pfil 4 1K 4
cdev 2 1K 2
sctp_atcl 1 1K 14776
cdev 2 1K 2
chacha20random 1 1K 1
osd 7 1K 18
inpcbpolicy 10 1K 137
sctp_ifn 2 1K 6
NFSD lckfile 1 1K 1
NFSD V4client 1 1K 1
DEVFSP 4 1K 9
NFSD V4client 1 1K 1
DEVFS 9 1K 10
mld 2 1K 2
igmp 2 1K 2
vnodes 1 1K 1
CAM SIM 2 1K 2
ktls 1 1K 1
feeder 7 1K 7
tcpfunc 3 1K 3
loginclass 3 1K 7
CAM SIM 2 1K 2
ktls 1 1K 1
feeder 7 1K 7
tcpfunc 3 1K 3
prison 6 1K 6
lkpikmalloc 5 1K 6
aesni_data 2 1K 2
lkpikmalloc 5 1K 6
aesni_data 2 1K 2
apmdev 1 1K 1
atkbddev 2 1K 2
CAM dev queue 2 1K 2
xform 2 1K 49
atkbddev 2 1K 2
CAM dev queue 2 1K 2
CAM I/O Scheduler 1 1K 1
CAM path 4 1K 1034
procdesc 1 1K 6
CAM path 4 1K 1034
pmchooks 1 1K 1
nexusdev 7 1K 7
soname 4 1K 12321
nexusdev 7 1K 7
tun 3 1K 3
sctp_vrf 1 1K 1
freework 1 1K 26
vnet 1 1K 1
entropy 2 1K 36
acpiintr 1 1K 1
pmc 1 1K 1
sctp_atky 1 1K 20681
pmc 1 1K 1
cpus 2 1K 2
vnet_data_free 1 1K 1
Per-cpu 1 1K 1
sctp_athm 1 1K 17728
vnet_data_free 1 1K 1
Per-cpu 1 1K 1
p1003.1b 1 1K 1
filecaps 1 1K 70
sctp_mcore 0 0K 0
sctp_socko 0 0K 2953
sctp_iter 0 0K 4
sctp_mvrf 0 0K 0
sctp_cpal 0 0K 0
sctp_cmsg 0 0K 0
sctp_stre 0 0K 0
sctp_athi 0 0K 0
sctp_a_it 0 0K 4
sctp_cpal 0 0K 0
sctp_cmsg 0 0K 0
sctp_stre 0 0K 0
sctp_athi 0 0K 0
sctp_aadr 0 0K 0
sctp_stro 0 0K 5905
sctp_stri 0 0K 5904
sctp_map 0 0K 5906
tcp_do 0 0K 0
tcp_fsb 0 0K 0
cdg data 0 0K 0
cubic data 0 0K 0
dctcp data 0 0K 0
vegas data 0 0K 0
chd data 0 0K 0
htcp data 0 0K 0
pf_table 0 0K 0
pf_rule 0 0K 0
pf_altq 0 0K 0
pf_osfp 0 0K 0
pf_temp 0 0K 0
mqdata 0 0K 0
sentinel 0 0K 0
jfsync 0 0K 0
jtrunc 0 0K 0
sbdep 0 0K 8
jfsync 0 0K 0
jtrunc 0 0K 0
jsegdep 0 0K 0
jseg 0 0K 0
jfreefrag 0 0K 0
jfreeblk 0 0K 0
jnewblk 0 0K 0
jmvref 0 0K 0
jremref 0 0K 0
jaddref 0 0K 0
freedep 0 0K 0
newdirblk 0 0K 8
jseg 0 0K 0
jfreefrag 0 0K 0
jfreeblk 0 0K 0
jnewblk 0 0K 0
jmvref 0 0K 0
jremref 0 0K 0
jaddref 0 0K 0
freedep 0 0K 0
dirrem 0 0K 28
mkdir 0 0K 16
diradd 0 0K 37
freefile 0 0K 26
freeblks 0 0K 25
freefrag 0 0K 1
allocindir 0 0K 0
indirdep 0 0K 3
ip6_msource 0 0K 0
ip6_moptions 0 0K 0
in6_mfilter 0 0K 0
frag6 0 0K 0
tcplog 0 0K 0
tcp_hwpace 0 0K 0
acpipwr 0 0K 0
acpi_perf 0 0K 0
LRO 0 0K 0
newreno data 0 0K 0
ip_msource 0 0K 0
ip_moptions 0 0K 0
ip6_moptions 0 0K 0
in6_mfilter 0 0K 0
frag6 0 0K 0
tcplog 0 0K 0
tcp_hwpace 0 0K 0
acpipwr 0 0K 0
acpi_perf 0 0K 0
LRO 0 0K 0
newreno data 0 0K 0
ip_msource 0 0K 0
in_mfilter 0 0K 0
ipid 0 0K 0
80211scan 0 0K 0
80211ratectl 0 0K 0
80211power 0 0K 0
80211nodeie 0 0K 0
80211node 0 0K 0
80211mesh_gt 0 0K 0
80211mesh_rt 0 0K 0
80211perr 0 0K 0
80211prep 0 0K 0
80211preq 0 0K 0
80211dfs 0 0K 0
80211crypto 0 0K 0
80211vap 0 0K 0
iflib 0 0K 0
vlan 0 0K 0
gif 0 0K 0
ifdescr 0 0K 0
zlib 0 0K 0
fadvise 0 0K 0
VN POLL 0 0K 0
twsbuf 0 0K 0
statfs 0 0K 212
ipid 0 0K 0
80211scan 0 0K 0
80211ratectl 0 0K 0
80211power 0 0K 0
80211nodeie 0 0K 0
80211node 0 0K 0
80211mesh_gt 0 0K 0
80211mesh_rt 0 0K 0
80211perr 0 0K 0
80211prep 0 0K 0
80211preq 0 0K 0
80211dfs 0 0K 0
80211crypto 0 0K 0
80211vap 0 0K 0
iflib 0 0K 0
vlan 0 0K 0
gif 0 0K 0
ifdescr 0 0K 0
zlib 0 0K 0
fadvise 0 0K 0
VN POLL 0 0K 0
twsbuf 0 0K 0
namei_tracker 0 0K 0
export_host 0 0K 0
cl_savebuf 0 0K 3
twe_commands 0 0K 0
twa_commands 0 0K 0
tcp_log_dev 0 0K 0
twa_commands 0 0K 0
midi buffers 0 0K 0
mixer 0 0K 0
ac97 0 0K 0
hdacc 0 0K 0
hdac 0 0K 0
hdaa 0 0K 0
acpicmbat 0 0K 0
SIIS driver 0 0K 0
CAM CCB 0 0K 523
mixer 0 0K 0
ac97 0 0K 0
hdacc 0 0K 0
hdac 0 0K 0
hdaa 0 0K 0
acpicmbat 0 0K 0
SIIS driver 0 0K 0
PUC 0 0K 0
ppbusdev 0 0K 0
agtiapi_MemAlloc malloc 0 0K 0
biobuf 0 0K 0
aios 0 0K 0
lio 0 0K 0
acl 0 0K 0
osti_cacheable 0 0K 0
mbuf_tag 0 0K 27
ppbusdev 0 0K 0
agtiapi_MemAlloc malloc 0 0K 0
biobuf 0 0K 0
aios 0 0K 0
lio 0 0K 0
acl 0 0K 0
osti_cacheable 0 0K 0
tempbuff 0 0K 0
tempbuff 0 0K 0
ag_tgt_map_t malloc 0 0K 0
ag_slr_map_t malloc 0 0K 0
lDevFlags * malloc 0 0K 0
tiDeviceHandle_t * malloc 0 0K 0
ag_portal_data_t malloc 0 0K 0
ag_device_t malloc 0 0K 0
STLock malloc 0 0K 0
CCB List 0 0K 0
sr_iov 0 0K 0
OCS 0 0K 0
OCS 0 0K 0
nvme 0 0K 0
nvd 0 0K 0
netmap 0 0K 0
mwldev 0 0K 0
MVS driver 0 0K 0
CAM ccb queue 0 0K 0
mrsasbuf 0 0K 0
mpt_user 0 0K 0
mps_user 0 0K 0
accf 0 0K 0
pts 0 0K 0
iov 0 0K 13749
tempbuff 0 0K 0
ag_tgt_map_t malloc 0 0K 0
ag_slr_map_t malloc 0 0K 0
lDevFlags * malloc 0 0K 0
tiDeviceHandle_t * malloc 0 0K 0
ag_portal_data_t malloc 0 0K 0
ag_device_t malloc 0 0K 0
STLock malloc 0 0K 0
CCB List 0 0K 0
sr_iov 0 0K 0
OCS 0 0K 0
OCS 0 0K 0
nvme 0 0K 0
nvd 0 0K 0
netmap 0 0K 0
mwldev 0 0K 0
MVS driver 0 0K 0
CAM ccb queue 0 0K 0
mrsasbuf 0 0K 0
mpt_user 0 0K 0
mps_user 0 0K 0
accf 0 0K 0
pts 0 0K 0
ioctlops 0 0K 86
eventfd 0 0K 0
Witness 0 0K 0
stack 0 0K 0
MPSSAS 0 0K 0
mps 0 0K 0
mpr_user 0 0K 0
MPRSAS 0 0K 0
mpr 0 0K 0
mfibuf 0 0K 0
sbuf 0 0K 288
md_sectors 0 0K 0
firmware 0 0K 0
compressor 0 0K 0
md_disk 0 0K 0
SWAP 0 0K 0
malodev 0 0K 0
LED 0 0K 0
sysctltmp 0 0K 657
stack 0 0K 0
MPSSAS 0 0K 0
mps 0 0K 0
mpr_user 0 0K 0
MPRSAS 0 0K 0
mpr 0 0K 0
mfibuf 0 0K 0
sbuf 0 0K 288
md_sectors 0 0K 0
firmware 0 0K 0
compressor 0 0K 0
md_disk 0 0K 0
SWAP 0 0K 0
malodev 0 0K 0
LED 0 0K 0
sysctl 0 0K 3
ekcd 0 0K 0
dumper 0 0K 0
sendfile 0 0K 0
rctl 0 0K 0
ix_sriov 0 0K 0
aacraidcam 0 0K 0
aacraid_buf 0 0K 0
ix 0 0K 0
ipsbuf 0 0K 0
cache 0 0K 0
iirbuf 0 0K 0
kcovinfo 0 0K 0
ekcd 0 0K 0
dumper 0 0K 0
sendfile 0 0K 0
rctl 0 0K 0
ix_sriov 0 0K 0
aacraidcam 0 0K 0
aacraid_buf 0 0K 0
ix 0 0K 0
ipsbuf 0 0K 0
cache 0 0K 0
iirbuf 0 0K 0
prison_racct 0 0K 0
Fail Points 0 0K 0
sigio 0 0K 1
filedesc_to_leader 0 0K 0
Fail Points 0 0K 0
sigio 0 0K 1
pbuf 2624 0 973 0 0 2 2553152 0
mbuf 256 8579 991 107836 0 254 2449920 0
BUF TRIE 144 177 11583 596 0 62 1693440 0
malloc-384 384 4247 13 4595 0 30 1635840 0
malloc-128 128 11275 164 11611 0 126 1464192 0
malloc-4096 4096 326 1 485 0 2 1339392 0
UMA Slabs 0 112 10181 4 10181 0 126 1140720 0
vmem btag 56 15628 43 15628 0 254 877576 0
FFS inode 1160 488 23 514 0 8 592760 0
RADIX NODE 144 3064 291 160099 0 62 483120 0
malloc-65536 65536 4 2 186 0 1 393216 0
lkpimm 168 1 2327 1 0 62 391104 0
lkpicurr 168 2 2326 2 0 62 391104 0
mbuf_cluster 2048 180 0 180 0 254 368640 0
THREAD 1808 126 39 3101 0 8 298320 0
256 Bucket 2048 124 10 11015 0 8 274432 0
malloc-64 64 4094 64 7828 0 254 266112 0
VM OBJECT 264 905 70 45471 0 30 257400 0
VNODE 448 518 40 546 0 30 249984 0
malloc-4096 4096 58 1 4391 0 2 241664 0
malloc-16 16 14028 222 14105 0 254 228000 0
DEVCTL 1024 0 220 125 0 0 225280 0
malloc-256 256 373 452 2012 0 62 211200 0
UMA Zones 768 242 2 242 0 16 187392 0
malloc-32 32 5326 344 6423 0 254 181440 0
malloc-128 128 1207 64 26018 0 126 162688 0
malloc-1024 1024 119 29 1744 0 16 151552 0
sctp_ep 1280 1 110 8871 0 254 142080 0
FFS2 dinode 256 488 37 514 0 62 134400 0
malloc-65536 65536 2 0 2 0 1 131072 0
malloc-65536 65536 1 1 9 0 1 131072 0
socket 944 19 117 10199 0 254 128384 0
ksiginfo 112 39 1005 80 0 126 116928 0
S VFS Cache 104 982 71 1021 0 126 109512 0
MAP ENTRY 96 861 273 80107 0 126 108864 0
malloc-8192 8192 8 5 137 0 1 106496 0
malloc-128 128 756 50 1761 0 126 103168 0
malloc-16384 16384 5 1 180 0 1 98304 0
VMSPACE 2544 28 8 3738 0 4 91584 0
sctp_asoc 2288 0 40 2953 0 254 91520 0
UMA Kegs 384 227 6 227 0 30 89472 0
clpbuf 2624 0 32 25 0 16 83968 0
malloc-256 256 214 86 3651 0 62 76800 0
PROC 1336 50 7 3759 0 8 76152 0
filedesc0 1072 50 20 3760 0 8 75040 0
malloc-128 128 512 46 3867 0 126 71424 0
128 Bucket 1024 38 29 610 0 16 68608 0
malloc-65536 65536 1 0 1 0 1 65536 0
malloc-65536 65536 1 0 1 0 1 65536 0
malloc-32768 32768 0 2 130 0 1 65536 0
malloc-32768 32768 2 0 2 0 1 65536 0
malloc-2048 2048 5 25 9066 0 8 61440 0
malloc-65536 65536 1 0 1 0 1 65536 0
malloc-32768 32768 0 2 130 0 1 65536 0
malloc-32768 32768 2 0 2 0 1 65536 0
malloc-2048 2048 10 20 1043 0 8 61440 0
g_bio 408 0 150 5089 0 30 61200 0
malloc-64 64 507 438 1288 0 254 60480 0
malloc-4096 4096 13 1 29 0 2 57344 0
mbuf_packet 256 0 180 35497 0 254 46080 0
malloc-64 64 544 149 10524 0 254 44352 0
malloc-256 256 22 143 8927 0 62 42240 0
32 Bucket 256 49 116 3146 0 62 42240 0
malloc-8192 8192 5 0 5 0 1 40960 0
malloc-8192 8192 5 0 5 0 1 40960 0
64 Bucket 512 66 14 3636 0 30 40960 0
DIRHASH 1024 34 2 34 0 16 36864 0
NAMEI 1024 0 36 12483 0 16 36864 0
pcpu-8 8 4229 379 4257 0 254 36864 0
malloc-32768 32768 1 0 1 0 1 32768 0
pcpu-64 64 487 25 487 0 254 32768 0
sctp_raddr 736 1 43 2953 0 254 32384 0
malloc-384 384 16 64 97 0 30 30720 0
malloc-384 384 2 78 14777 0 30 30720 0
da_ccb 544 0 56 1398 0 16 30464 0
malloc-4096 4096 7 0 7 0 2 28672 0
malloc-512 512 1 55 5905 0 30 28672 0
TURNSTILE 136 166 23 166 0 62 25704 0
malloc-8192 8192 3 0 3 0 1 24576 0
malloc-8192 8192 2 1 4 0 1 24576 0
malloc-4096 4096 6 0 6 0 2 24576 0
malloc-1024 1024 18 6 25 0 16 24576 0
ertt_txseginfo 40 0 606 3176 0 254 24240 0
ttyinq 160 135 15 300 0 62 24000 0
malloc-128 128 150 36 218 0 126 23808 0
ttyoutq 256 72 18 160 0 62 23040 0
malloc-1024 1024 1 19 2954 0 16 20480 0
malloc-32 32 183 447 1451 0 254 20160 0
SLEEPQUEUE 88 166 58 166 0 126 19712 0
Mountpoints 2752 2 5 2 0 4 19264 0
malloc-256 256 13 62 375 0 62 19200 0
pipe 744 6 19 291 0 16 18600 0
malloc-16384 16384 1 0 1 0 1 16384 0
malloc-16384 16384 1 0 1 0 1 16384 0
malloc-16384 16384 1 0 1 0 1 16384 0
malloc-2048 2048 4 4 13 0 8 16384 0
malloc-1024 1024 13 3 13 0 16 16384 0
malloc-64 64 64 188 17434 0 254 16128 0
malloc-64 64 101 151 52756 0 254 16128 0
16 Bucket 144 42 70 315 0 62 16128 0
vtnet_tx_hdr 24 0 668 5227 0 254 16032 0
Files 80 68 132 18519 0 126 16000 0
sctp_chunk 152 0 104 5929 0 254 15808 0
malloc-384 384 34 6 34 0 30 15360 0
tcpcb 1080 3 11 7 0 254 15120 0
malloc-2048 2048 3 3 79 0 8 12288 0
malloc-512 512 5 19 247 0 30 12288 0
malloc-64 64 125 64 147 0 254 12096 0
malloc-32 32 246 132 328 0 254 12096 0
malloc-32 32 27 351 14581 0 254 12096 0
malloc-16 16 509 241 7752 0 254 12000 0
8 Bucket 80 41 109 751 0 126 12000 0
malloc-128 128 69 24 78 0 126 11904 0
kenv 258 15 30 1026 0 30 11610 0
malloc-256 256 21 24 25 0 62 11520 0
malloc-256 256 24 21 267 0 62 11520 0
malloc-8192 8192 1 0 1 0 1 8192 0
malloc-8192 8192 1 0 1 0 1 8192 0
malloc-4096 4096 0 2 212 0 2 8192 0
malloc-8192 8192 1 0 1 0 1 8192 0
malloc-2048 2048 4 0 4 0 8 8192 0
malloc-2048 2048 4 0 4 0 8 8192 0
malloc-1024 1024 1 7 5 0 16 8192 0
malloc-1024 1024 6 2 6 0 16 8192 0
malloc-1024 1024 7 1 7 0 16 8192 0
malloc-512 512 8 8 9 0 30 8192 0
rtentry 176 13 33 17 0 62 8096 0
PGRP 88 19 73 34 0 126 8096 0
rl_entry 40 30 172 30 0 254 8080 0
sctp_stream_msg_out 112 0 72 2952 0 254 8064 0
sctp_laddr 48 0 168 4 0 254 8064 0
udpcb 32 6 246 126 0 254 8064 0
ertt 72 3 109 7 0 126 8064 0
PWD 32 10 242 106 0 254 8064 0
malloc-64 64 13 113 34 0 254 8064 0
malloc-64 64 4 122 8 0 254 8064 0
malloc-32 32 27 225 9051 0 254 8064 0
malloc-32 32 69 183 110 0 254 8064 0
malloc-32 32 26 226 166 0 254 8064 0
malloc-32 32 0 252 5 0 254 8064 0
4 Bucket 48 5 163 82 0 254 8064 0
2 Bucket 32 43 209 495 0 254 8064 0
malloc-16 16 1 499 3147 0 254 8000 0
malloc-16 16 2 498 2 0 254 8000 0
malloc-16 16 24 476 62 0 254 8000 0
malloc-16 16 32 468 25361 0 254 8000 0
malloc-16 16 3 497 117 0 254 8000 0
malloc-16 16 5 495 17733 0 254 8000 0
tcp_inpcb 496 3 13 7 0 254 7936 0
udp_inpcb 496 6 10 126 0 254 7936 0
malloc-128 128 17 45 178 0 126 7936 0
malloc-128 128 5 57 18 0 126 7936 0
sctp_readq 152 1 51 2952 0 254 7904 0
routing nhops 256 10 20 17 0 62 7680 0
unpcb 256 7 23 1174 0 254 7680 0
malloc-384 384 0 20 20 0 30 7680 0
malloc-384 384 7 13 9 0 30 7680 0
malloc-256 256 0 30 390 0 62 7680 0
malloc-256 256 6 24 262 0 62 7680 0
FPU_save_area 832 1 8 1 0 16 7488 0
cpuset 104 8 54 8 0 126 6448 0
epoch_record pcpu 256 4 12 4 0 62 4096 0
malloc-4096 4096 1 0 1 0 2 4096 0
malloc-4096 4096 0 1 2 0 2 4096 0
malloc-2048 2048 2 0 2 0 8 4096 0
malloc-512 512 1 7 1 0 30 4096 0
malloc-512 512 1 7 1 0 30 4096 0
malloc-512 512 4 4 5 0 30 4096 0
malloc-512 512 2 6 2 0 30 4096 0
pcpu-16 16 7 249 7 0 254 4096 0
hostcache 64 1 62 1 0 254 4032 0
syncache 168 0 24 5 0 254 4032 0
KNOTE 160 0 25 8 0 62 4000 0
ripcb 496 1 7 4 0 254 3968 0
UMA Slabs 1 176 8 14 8 0 62 3872 0
malloc-384 384 1 9 1 0 30 3840 0
malloc-384 384 3 7 3 0 30 3840 0
mqnode 416 3 6 3 0 30 3744 0
KMAP ENTRY 96 12 27 14 0 0 3744 0
vmem 1856 1 1 1 0 8 3712 0
SMR CPU 32 3 60 3 0 254 2016 0
SMR SHARED 24 3 60 3 0 254 1512 0
FFS1 dinode 128 0 0 0 0 126 0 0
KMAP ENTRY 96 12 27 14 0 0 3744 0
vmem 1856 1 1 1 0 8 3712 0
SMR CPU 32 3 60 3 0 254 2016 0
SMR SHARED 24 3 60 3 0 254 1512 0
FFS1 dinode 128 0 0 0 0 126 0 0
ada_ccb 272 0 0 0 0 30 0 0
swblk 136 0 0 0 0 62 0 0
swpctrie 144 0 0 0 0 62 0 0
sctp_asconf_ack 48 0 0 0 0 254 0 0
sctp_asconf 40 0 0 0 0 254 0 0
cdg_qdiffsample 16 0 0 0 0 254 0 0
pf state scrubs 40 0 0 0 0 254 0 0
pf frag entries 40 0 0 0 0 254 0 0
pf frags 248 0 0 0 0 62 0 0
pf table entries 160 0 0 0 0 62 0 0
pf table entry counters 64 0 0 0 0 254 0 0
pf source nodes 136 0 0 0 0 254 0 0
swblk 136 0 0 0 0 62 0 0
swpctrie 144 0 0 0 0 62 0 0
sctp_asconf_ack 48 0 0 0 0 254 0 0
sctp_asconf 40 0 0 0 0 254 0 0
cdg_qdiffsample 16 0 0 0 0 254 0 0
pf state scrubs 40 0 0 0 0 254 0 0
pf frag entries 40 0 0 0 0 254 0 0
pf frags 248 0 0 0 0 62 0 0
pf table entries 160 0 0 0 0 62 0 0
pf table entry counters 64 0 0 0 0 254 0 0
pf state keys 88 0 0 0 0 126 0 0
pf states 312 0 0 0 0 254 0 0
pf tags 104 0 0 0 0 126 0 0
pf mtags 48 0 0 0 0 254 0 0
tcp_bbr_pcb 832 0 0 0 0 16 0 0
tcp_bbr_map 128 0 0 0 0 126 0 0
tcp_rack_pcb 832 0 0 0 0 16 0 0
tcp_rack_map 112 0 0 0 0 126 0 0
udplite_inpcb 496 0 0 0 0 254 0 0
tcp_log_node 120 0 0 0 0 126 0 0
tcp_log_bucket 176 0 0 0 0 62 0 0
tcp_log 416 0 0 0 0 254 0 0
tcpreass 48 0 0 0 0 254 0 0
tfo_ccache_entries 80 0 0 0 0 126 0 0
tfo 4 0 0 0 0 254 0 0
sackhole 32 0 0 0 0 254 0 0
tcptw 88 0 0 0 0 254 0 0
ipq 56 0 0 0 0 254 0 0
IPsec SA lft_c 16 0 0 0 0 254 0 0
itimer 352 0 0 0 0 30 0 0
AIOLIO 272 0 0 0 0 30 0 0
AIOCB 552 0 0 0 0 16 0 0
AIOP 32 0 0 0 0 254 0 0
AIO 208 0 0 0 0 62 0 0
TMPFS node 224 0 0 0 0 62 0 0
NCLNODE 592 0 0 0 0 16 0 0
mqnotifier 216 0 0 0 0 62 0 0
mvdata 64 0 0 0 0 254 0 0
mqueue 248 0 0 0 0 62 0 0
LTS VFS Cache 360 0 0 0 0 30 0 0
L VFS Cache 320 0 0 0 0 30 0 0
STS VFS Cache 144 0 0 0 0 62 0 0
cryptop 280 0 0 0 0 30 0 0
linux_dma_object 24 0 0 0 0 254 0 0
linux_dma_pctrie 144 0 0 0 0 62 0 0
IOMMU_MAP_ENTRY 120 0 0 0 0 126 0 0
ktls_session 192 0 0 0 0 62 0 0
mbuf_jumbo_16k 16384 0 0 0 0 254 0 0
mbuf_jumbo_9k 9216 0 0 0 0 254 0 0
audit_record 1280 0 0 0 0 8 0 0
domainset 40 0 0 0 0 254 0 0
MAC labels 40 0 0 0 0 254 0 0
vnpbuf 2624 0 0 0 0 64 0 0
mdpbuf 2624 0 0 0 0 3 0 0
nfspbuf 2624 0 0 0 0 16 0 0
swwbuf 2624 0 0 0 0 8 0 0
swrbuf 2624 0 0 0 0 16 0 0
umtx_shm 88 0 0 0 0 126 0 0
umtx pi 96 0 0 0 0 126 0 0
rangeset pctrie nodes 144 0 0 0 0 62 0 0
malloc-65536 65536 0 0 0 0 1 0 0
malloc-65536 65536 0 0 0 0 1 0 0
malloc-65536 65536 0 0 0 0 1 0 0
malloc-32768 32768 0 0 0 0 1 0 0
malloc-32768 32768 0 0 0 0 1 0 0
malloc-32768 32768 0 0 0 0 1 0 0
malloc-32768 32768 0 0 0 0 1 0 0
malloc-32768 32768 0 0 0 0 1 0 0
malloc-16384 16384 0 0 0 0 1 0 0
malloc-16384 16384 0 0 0 0 1 0 0
malloc-16384 16384 0 0 0 0 1 0 0
malloc-16384 16384 0 0 0 0 1 0 0
malloc-8192 8192 0 0 0 0 1 0 0
malloc-2048 2048 0 0 0 0 8 0 0
malloc-1024 1024 0 0 0 0 16 0 0
malloc-512 512 0 0 0 0 30 0 0
pcpu-32 32 0 0 0 0 254 0 0
pcpu-4 4 0 0 0 0 254 0 0
fakepg 104 0 0 0 0 126 0
Mark Johnston
Sep 8, 2021, 4:40:14 PM9/8/21
to syzbot, syzkaller-f...@googlegroups.com
Reply all
Reply to author
Forward
0 new messages