panic: ASan: Invalid access, 4-byte read in sctp_sosend
0 views
Skip to first unread message
syzbot
Jul 9, 2021, 8:00:24 PM7/9/21
to syzkaller-f...@googlegroups.com
Hello,
syzbot found the following issue on:
HEAD commit: 105b68b4 sctp: Fix errno in case of association setup fail..
git tree: https://github.com/freebsd/freebsd-src.git main
console output: https://syzkaller.appspot.com/x/log.txt?x=15a2fbc4300000
dashboard link: https://syzkaller.appspot.com/bug?extid=35528f275f2eea6317cc
Unfortunately, I don't have any reproducer for this issue yet.
IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+35528f...@syzkaller.appspotmail.com
panic: ASan: Invalid access, 4-byte read at 0xfffffe005741fe7c, RedZonePartial(4)
cpuid = 0
time = 1625874558
KDB: stack backtrace:
db_trace_self_wrapper() at db_trace_self_wrapper+0xc7/frame 0xfffffe008fbc3050
kdb_backtrace() at kdb_backtrace+0xd3/frame 0xfffffe008fbc31b0
vpanic() at vpanic+0x2c5/frame 0xfffffe008fbc3290
panic() at panic+0xb5/frame 0xfffffe008fbc3350
__asan_load4_noabort() at __asan_load4_noabort+0x20f/frame 0xfffffe008fbc3410
sctp_sosend() at sctp_sosend+0x7a5/frame 0xfffffe008fbc36a0
sosend() at sosend+0x11e/frame 0xfffffe008fbc3710
kern_sendit() at kern_sendit+0x58d/frame 0xfffffe008fbc3880
sendit() at sendit+0x2b0/frame 0xfffffe008fbc38d0
sys_sendmsg() at sys_sendmsg+0x17d/frame 0xfffffe008fbc39f0
amd64_syscall() at amd64_syscall+0x425/frame 0xfffffe008fbc3bf0
fast_syscall_common() at fast_syscall_common+0xf8/frame 0xfffffe008fbc3bf0
--- syscall (198, FreeBSD ELF64, nosys), rip = 0x287eda, rsp = 0x7fffdfffdf08, rbp = 0x7fffdfffdf70 ---
KDB: enter: panic
[ thread pid 3208 tid 103626 ]
Stopped at kdb_enter+0x6b: movq $0,0x28f9c5a(%rip)
db>
db> set $lines = 0
db> set $maxwidth = 0
db> show registers
cs 0x20
ds 0x3b
es 0x3b
fs 0x13
gs 0x1b
ss 0x28
rax 0x12
rcx 0xc61bd80cf2d34d27
rdx 0x40001
rbx 0
rsp 0xfffffe008fbc3190
rbp 0xfffffe008fbc31b0
rsi 0
rdi 0xfffffe009253e8a8
r8 0x3
r9 0xfffffe008fbc2ce8
r10 0
r11 0xfffffe009b10f6f0
r12 0xfffffe009b10f1e0
r13 0xfffffe008fbc3201
r14 0xffffffff82c42700 .str.18
r15 0xffffffff82c42700 .str.18
rip 0xffffffff8178eddb kdb_enter+0x6b
rflags 0x46
kdb_enter+0x6b: movq $0,0x28f9c5a(%rip)
db> show proc
Process 3208 (syz-executor.3) at 0xfffffe009963e000:
state: NORMAL
uid: 0 gids: 0, 0, 5
parent: pid 2256 at 0xfffffe0092573a70
ABI: FreeBSD ELF64
flag: 0x10000080 flag2: 0
arguments: /root/syz-executor.3
reaper: 0xfffffe0053d51538 reapsubtree: 1
sigparent: 20
vmspace: 0xfffffe009205a9f0
(map 0xfffffe009205a9f0)
(map.pmap 0xfffffe009205aab0)
(pmap 0xfffffe009205ab10)
threads: 2
100214 RunQ syz-executor.3
103626 Run CPU 0 syz-executor.3
db> ps
pid ppid pgrp uid state wmesg wchan cmd
3208 2256 2256 0 R (threaded) syz-executor.3
100214 RunQ syz-executor.3
103626 Run CPU 0 syz-executor.3
3207 2808 2808 0 R syz-executor.0
3136 3113 3136 0 Ss select 0xfffffe00925a6ec0 dhclient
3119 780 3119 0 Rs syz-executor.1
3116 1 3116 0 Ss select 0xfffffe00925a66c0 dhclient
3113 3105 436 65 S select 0xfffffe00925653c0 dhclient
3105 436 436 0 S wait 0xfffffe0091faba70 sh
3001 1 3001 65 Ss select 0xfffffe009b1114c0 dhclient
2808 780 2808 0 Rs syz-executor.0
2806 1 2806 0 Ss select 0xfffffe00925a67c0 dhclient
2803 1 2803 0 Ss select 0xfffffe009966f2c0 dhclient
2782 1 2782 65 Ss select 0xfffffe009b111240 dhclient
2607 1 2607 0 Ss select 0xfffffe009b111340 dhclient
2604 1 2604 0 Ss select 0xfffffe00925650c0 dhclient
2256 780 2256 0 Ss nanslp 0xffffffff84055900 syz-executor.3
2249 780 2249 0 Rs syz-executor.2
780 778 778 0 S (threaded) syz-fuzzer
100100 S uwait 0xfffffe00573da480 syz-fuzzer
100116 S uwait 0xfffffe005889dc00 syz-fuzzer
100117 S kqread 0xfffffe00587e3e00 syz-fuzzer
100118 S uwait 0xfffffe0092058c00 syz-fuzzer
100119 S uwait 0xfffffe0092058d00 syz-fuzzer
100120 S uwait 0xfffffe0092528f00 syz-fuzzer
100121 S uwait 0xfffffe005889d080 syz-fuzzer
100122 S uwait 0xfffffe005889d180 syz-fuzzer
100124 S uwait 0xfffffe005889d280 syz-fuzzer
778 776 778 0 Ss pause 0xfffffe009245b0b0 csh
776 694 776 0 Ss select 0xfffffe0091e4f940 sshd
760 1 760 0 Ss+ ttyin 0xfffffe0056fe0cb0 getty
759 1 759 0 Ss+ ttyin 0xfffffe00583ed0b0 getty
758 1 758 0 Ss+ ttyin 0xfffffe00583ed4b0 getty
757 1 757 0 Ss+ ttyin 0xfffffe00583ed8b0 getty
756 1 756 0 Ss+ ttyin 0xfffffe00583edcb0 getty
755 1 755 0 Ss+ ttyin 0xfffffe00583910b0 getty
754 1 754 0 Ss+ ttyin 0xfffffe00583914b0 getty
753 1 753 0 Ss+ ttyin 0xfffffe00583918b0 getty
752 1 752 0 Ss+ ttyin 0xfffffe0058391cb0 getty
698 1 698 0 Ss nanslp 0xffffffff84055901 cron
694 1 694 0 Ss select 0xfffffe0091e4fbc0 sshd
507 1 507 0 Ss select 0xfffffe0091e4f840 syslogd
436 1 436 0 Ss wait 0xfffffe00588b0000 devd
435 1 435 65 Ss select 0xfffffe0091e4fa40 dhclient
350 1 350 0 Ss select 0xfffffe005889d740 dhclient
347 1 347 0 Ss select 0xfffffe0091e4f9c0 dhclient
23 0 0 0 DL syncer 0xffffffff8417ba40 [syncer]
22 0 0 0 DL vlruwt 0xfffffe00587aaa70 [vnlru]
21 0 0 0 DL (threaded) [bufdaemon]
100083 D qsleep 0xffffffff84179940 [bufdaemon]
100086 D - 0xffffffff83411f80 [bufspacedaemon-0]
100096 D sdflush 0xfffffe00588cbce8 [/ worker]
20 0 0 0 DL psleep 0xffffffff841b1c80 [vmdaemon]
19 0 0 0 DL (threaded) [pagedaemon]
100081 D psleep 0xffffffff841a57b8 [dom0]
100084 D launds 0xffffffff841a57c4 [laundry: dom0]
100085 D umarcl 0xffffffff81e7e5e0 [uma]
18 0 0 0 DL - 0xffffffff83e0caa0 [rand_harvestq]
17 0 0 0 DL waiting 0xffffffff84b21460 [sctp_iterator]
16 0 0 0 DL pftm 0xffffffff84742d30 [pf purge]
15 0 0 0 DL - 0xffffffff84174dc0 [soaiod4]
9 0 0 0 DL - 0xffffffff84174dc0 [soaiod3]
8 0 0 0 DL - 0xffffffff84174dc0 [soaiod2]
7 0 0 0 DL - 0xffffffff84174dc0 [soaiod1]
6 0 0 0 DL (threaded) [cam]
100046 D - 0xffffffff83c92240 [doneq0]
100047 D - 0xffffffff83c921c0 [async]
100080 D - 0xffffffff83c92040 [scanner]
14 0 0 0 DL seqstat 0xfffffe0056aadc88 [sequencer 00]
5 0 0 0 DL crypto_ 0xfffffe00541abd80 [crypto returns 1]
4 0 0 0 DL crypto_ 0xfffffe00541abd30 [crypto returns 0]
3 0 0 0 DL crypto_ 0xffffffff8419f860 [crypto]
13 0 0 0 DL (threaded) [geom]
100037 D - 0xffffffff84028ec0 [g_event]
100038 D - 0xffffffff84028f00 [g_up]
100039 D - 0xffffffff84028f40 [g_down]
2 0 0 0 DL (threaded) [KTLS]
100028 D - 0xfffffe0053e16e00 [thr_0]
100029 D - 0xfffffe0053e16e80 [thr_1]
12 0 0 0 WL (threaded) [intr]
100010 I [swi6: task queue]
100011 I [swi6: Giant taskq]
100014 I [swi5: fast taskq]
100030 I [swi1: netisr 0]
100031 I [swi3: vm]
100032 I [swi4: clock (0)]
100033 I [swi4: clock (1)]
100034 I [swi1: hpts]
100035 I [swi1: hpts]
100048 I [irq24: virtio_pci0]
100049 I [irq25: virtio_pci0]
100050 I [irq26: virtio_pci0]
100051 I [irq27: virtio_pci0]
100052 I [irq28: virtio_pci1]
100053 I [irq29: virtio_pci1]
100054 I [irq30: virtio_pci1]
100055 I [irq31: virtio_pci1]
100056 I [irq32: virtio_pci1]
100061 I [irq10: virtio_pci2]
100063 I [irq1: atkbd0]
100064 I [irq12: psm0]
100065 I [swi0: uart uart++]
100073 I [swi1: pf send]
11 0 0 0 RL (threaded) [idle]
100003 CanRun [idle: cpu0]
100004 CanRun [idle: cpu1]
1 0 1 0 SLs wait 0xfffffe0053d51538 [init]
10 0 0 0 DL audit_w 0xffffffff841a0800 [audit]
0 0 0 0 RLs (threaded) [kernel]
100000 D swapin 0xffffffff84029dc0 [swapper]
100005 D - 0xfffffe0053c0d800 [softirq_0]
100006 D - 0xfffffe0053c0d600 [softirq_1]
100007 D - 0xfffffe0053c0d400 [if_io_tqg_0]
100008 D - 0xfffffe0053c0d200 [if_io_tqg_1]
100009 D - 0xfffffe0053c0d000 [if_config_tqg_0]
100012 Run CPU 1 [thread taskq]
100013 D - 0xfffffe000791a400 [inm_free taskq]
100015 D - 0xfffffe000791a200 [kqueue_ctx taskq]
100016 D - 0xfffffe000791a100 [linuxkpi_irq_wq]
100017 D - 0xfffffe000791a000 [aiod_kick taskq]
100018 D - 0xfffffe0053df6e00 [in6m_free taskq]
100019 D - 0xfffffe0053df6d00 [pci_hp taskq]
100020 D - 0xfffffe0053df6c00 [linuxkpi_short_wq_0]
100021 D - 0xfffffe0053df6c00 [linuxkpi_short_wq_1]
100022 D - 0xfffffe0053df6c00 [linuxkpi_short_wq_2]
100023 D - 0xfffffe0053df6c00 [linuxkpi_short_wq_3]
100024 D - 0xfffffe0053df6b00 [linuxkpi_long_wq_0]
100025 D - 0xfffffe0053df6b00 [linuxkpi_long_wq_1]
100026 D - 0xfffffe0053df6b00 [linuxkpi_long_wq_2]
100027 D - 0xfffffe0053df6b00 [linuxkpi_long_wq_3]
100036 D - 0xfffffe0053df6a00 [firmware taskq]
100040 D - 0xfffffe0053df6900 [crypto_0]
100041 D - 0xfffffe0053df6900 [crypto_1]
100057 D - 0xfffffe0053df6700 [vtnet0 rxq 0]
100058 D - 0xfffffe0053df6600 [vtnet0 txq 0]
100059 D - 0xfffffe0053df6500 [vtnet0 rxq 1]
100060 D - 0xfffffe0053df6400 [vtnet0 txq 1]
100062 D vtbslp 0xfffffe0056fc0380 [virtio_balloon]
100066 D - 0xfffffe0053df6300 [mca taskq]
100071 D - 0xffffffff82c49681 [deadlkres]
100076 D - 0xfffffe0058390e00 [acpi_task_0]
100077 D - 0xfffffe0058390e00 [acpi_task_1]
100078 D - 0xfffffe0058390e00 [acpi_task_2]
100079 D - 0xfffffe0053df6800 [CAM taskq]
3204 2249 2249 0 Z syz-executor.2
db> show all locks
Process 0 (kernel) thread 0xfffffe0053df21e0 (100012)
exclusive sleep mutex kernel arena domain (kernel arena domain) r = 0 (0xfffff800064b9000) locked @ /syzkaller/managers/main/kernel/sys/kern/subr_vmem.c:789
exclusive sleep mutex vmem list lock (vmem list lock) r = 0 (0xffffffff83409bc0) locked @ /syzkaller/managers/main/kernel/sys/kern/subr_vmem.c:784
db> show malloc
Type InUse MemUse Requests
pf_hash 5 11524K 5
devbuf 4216 4338K 4244
tcp_hpts 6 3201K 6
sysctloid 34320 2027K 34387
vtbuf 24 1968K 46
kobj 326 1304K 486
newblk 13 1027K 5541
vfscache 3 1025K 3
pcb 168 684K 6625
inodedep 173 577K 2380
ufs_quota 1 512K 1
vfs_hash 1 512K 1
callout 2 512K 2
intr 4 472K 4
vmem 3 274K 6
subproc 139 270K 3288
acpica 1674 184K 54806
vnet_data 1 168K 1
tidhash 3 141K 3
linker 357 140K 418
pagedep 12 131K 2137
tfo_ccache 1 128K 1
DEVFS1 107 107K 124
sem 4 106K 4
filedesc 14 105K 4264
bus 986 80K 3469
mtx_pool 2 72K 2
BPF 38 71K 86
syncache 1 68K 1
sctp_stro 64 64K 1253
acpitask 1 64K 1
ddb_capture 1 64K 1
module 510 64K 510
sctp_atcl 129 49K 4427
umtx 374 47K 374
kdtrace 214 43K 6836
dirrem 158 40K 2182
temp 36 35K 3397
hostcache 1 32K 1
shm 1 32K 24
DEVFS3 126 32K 136
routetbl 512 32K 1686
msg 4 30K 4
gtaskqueue 18 26K 18
kbdmux 6 22K 6
ifaddr 73 21K 99
DEVFS_RULE 56 20K 56
freefile 157 20K 2173
ufs_mount 5 17K 6
proc 3 17K 3
tty 16 16K 16
ithread 99 16K 99
lltable 49 16K 135
bus-sc 33 14K 1684
ether_multi 172 14K 311
KTRACE 101 13K 2046
ifnet 7 13K 7
kenv 95 12K 95
eventhandler 133 12K 133
in6_multi 89 11K 164
pf_rule 6 11K 42
CAM queue 5 11K 1528
rman 84 10K 425
GEOM 60 10K 489
bmsafemap 2 9K 2297
UART 12 9K 12
devstat 4 9K 4
sctp_atky 193 9K 5876
sctp_timw 32 8K 32
ksem 1 8K 48
rpc 2 8K 2
shmfd 1 8K 1
pfs_vncache 1 8K 1
pfs_nodes 20 8K 20
audit_evclass 236 8K 294
cred 25 7K 295
taskqueue 60 7K 60
sglist 5 7K 5
pf_table 3 6K 18
CAM DEV 3 6K 510
kqueue 62 6K 3215
plimit 23 6K 601
pf_ifnet 13 5K 60
DEVFSP 78 5K 418
ufs_dirhash 24 5K 24
UMA 270 5K 270
vt 11 5K 11
memdesc 1 4K 1
MCA 32 4K 32
evdev 4 4K 4
kcovinfo 64 4K 187
session 31 4K 82
pwddesc 59 4K 3209
acpisem 28 4K 28
hhook 15 4K 17
lockf 29 4K 93
fpukern_ctx 3 3K 3
ip6ndp 16 3K 36
selfd 45 3K 43862
terminal 11 3K 11
proc-args 50 3K 870
sctp_ifa 19 3K 36
uidinfo 3 3K 18
sctp_athm 129 3K 4518
sctp_map 128 2K 2506
local_apic 1 2K 1
io_apic 1 2K 1
ipsec-saq 2 2K 2
select 16 2K 217
Unitno 27 2K 55
CAM XPT 22 2K 543
freework 7 2K 2401
mkdir 12 2K 4160
freeblks 6 2K 2158
in_multi 6 2K 19
ipsecpolicy 2 2K 2
acpidev 20 2K 20
tcp_fsb 9 2K 115
msi 9 2K 9
clone 9 2K 9
tun 7 2K 7
softdep 1 1K 1
sahead 1 1K 1
secasvar 1 1K 1
nhops 6 1K 12
vnodemarker 2 1K 178
NFSD session 1 1K 1
diradd 7 1K 2221
CAM periph 4 1K 271
inpcbpolicy 25 1K 1777
sctp_ifn 6 1K 36
ipsec 3 1K 3
newdirblk 6 1K 2080
mld 6 1K 6
igmp 6 1K 6
toponodes 6 1K 6
isadev 6 1K 6
mount 16 1K 89
pci_link 10 1K 10
crypto 4 1K 110
encap_export_host 12 1K 12
osd 19 1K 571
pfil 4 1K 4
procdesc 4 1K 28
cdev 2 1K 2
pf_osfp 4 1K 4
chacha20random 1 1K 1
NFSD lckfile 1 1K 1
NFSD V4client 1 1K 1
DEVFS 9 1K 10
vnodes 1 1K 8
CAM SIM 2 1K 2
ktls 1 1K 1
feeder 7 1K 7
tcpfunc 3 1K 3
loginclass 3 1K 6
prison 6 1K 6
lkpikmalloc 5 1K 6
aesni_data 2 1K 2
apmdev 1 1K 1
atkbddev 2 1K 2
CAM dev queue 2 1K 2
xform 2 1K 389
CAM I/O Scheduler 1 1K 1
CAM path 4 1K 1034
soname 5 1K 6761
pmchooks 1 1K 1
nexusdev 7 1K 7
sctp_vrf 1 1K 1
ip_msource 1 1K 1
vnet 1 1K 1
entropy 2 1K 56
acpiintr 1 1K 1
pmc 1 1K 1
filecaps 4 1K 149
cpus 2 1K 2
vnet_data_free 1 1K 1
Per-cpu 1 1K 1
iov 1 1K 21891
p1003.1b 1 1K 1
tcp_do 0 0K 0
sctp_mcore 0 0K 0
sctp_socko 0 0K 2021
sctp_iter 0 0K 38
sctp_mvrf 0 0K 0
sctp_cpal 0 0K 1
sctp_cmsg 0 0K 0
sctp_stre 0 0K 0
sctp_athi 0 0K 0
sctp_a_it 0 0K 37
sctp_aadr 0 0K 0
sctp_stri 0 0K 226
cdg data 0 0K 0
mqdata 0 0K 0
vegas data 0 0K 8
dctcp data 0 0K 7
htcp data 0 0K 0
cubic data 0 0K 0
chd data 0 0K 8
pf_altq 0 0K 0
pf_temp 0 0K 0
NEWdirectio 0 0K 0
NEWNFSnode 0 0K 0
madt_table 0 0K 2
smartpqi 0 0K 0
NFSCL lck 0 0K 0
NFSCL lckown 0 0K 0
NFSCL client 0 0K 0
NFSCL deleg 0 0K 0
NFSCL open 0 0K 0
NFSCL owner 0 0K 0
NFS fh 0 0K 0
NFS req 0 0K 0
iavf 0 0K 0
ixl 0 0K 0
NFSD usrgroup 0 0K 0
NFSD string 0 0K 0
NFSD V4lock 0 0K 0
NFSD V4state 0 0K 0
NFSD srvcache 0 0K 0
ice-resmgr 0 0K 0
ice-osdep 0 0K 0
ice 0 0K 0
axgbe 0 0K 0
msdosfs_fat 0 0K 0
msdosfs_mount 0 0K 0
msdosfs_node 0 0K 0
DEVFS4 0 0K 0
DEVFS2 0 0K 0
xen_intr 0 0K 0
gntdev 0 0K 0
privcmd_dev 0 0K 0
xen_hvm 0 0K 0
legacydrv 0 0K 0
qpidrv 0 0K 0
evtchn_dev 0 0K 0
xenstore 0 0K 0
dmar_idpgtbl 0 0K 0
dmar_dom 0 0K 0
dmar_ctx 0 0K 0
ciss_data 0 0K 0
BACKLIGHT 0 0K 0
xnb 0 0K 0
isci 0 0K 0
iommu_dmamap 0 0K 0
xbbd 0 0K 0
hyperv_socket 0 0K 0
bxe_ilt 0 0K 0
xenbus 0 0K 0
xbd 0 0K 0
Balloon 0 0K 0
sysmouse 0 0K 0
vm_fictitious 0 0K 0
vtfont 0 0K 0
ath_hal 0 0K 0
athdev 0 0K 0
ata_pci 0 0K 0
ata_dma 0 0K 0
ata_generic 0 0K 0
amr 0 0K 0
pvscsi 0 0K 0
scsi_da 0 0K 69
UMAHash 0 0K 0
ata_da 0 0K 0
vm_pgdata 0 0K 0
jblocks 0 0K 0
savedino 0 0K 1964
sentinel 0 0K 0
jfsync 0 0K 0
jtrunc 0 0K 0
sbdep 0 0K 87
jsegdep 0 0K 0
jseg 0 0K 0
jfreefrag 0 0K 0
jfreeblk 0 0K 0
jnewblk 0 0K 0
jmvref 0 0K 0
jremref 0 0K 0
jaddref 0 0K 0
freedep 0 0K 0
freefrag 0 0K 24
allocindir 0 0K 0
indirdep 0 0K 361
allocdirect 0 0K 0
ufs_trim 0 0K 0
mactemp 0 0K 0
audit_trigger 0 0K 0
audit_pipe_presel 0 0K 0
audit_pipeent 0 0K 0
audit_pipe 0 0K 0
audit_evname 0 0K 0
audit_bsm 0 0K 0
audit_gidset 0 0K 0
audit_text 0 0K 0
audit_path 0 0K 0
audit_data 0 0K 0
audit_cred 0 0K 0
scsi_ch 0 0K 0
scsi_cd 0 0K 0
AHCI driver 0 0K 0
USBdev 0 0K 0
USB 0 0K 0
agp 0 0K 0
nvme_da 0 0K 0
ktls_ocf 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5E_TLS 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EN 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5DUMP 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
seq_file 0 0K 0
radix 0 0K 0
idr 0 0K 0
lkpifw 0 0K 0
NLM 0 0K 0
ipsec-spdcache 0 0K 0
ipsec-reg 0 0K 0
ipsec-misc 0 0K 0
ipsecrequest 0 0K 0
ip6opt 0 0K 6
ip6_msource 0 0K 0
ip6_moptions 0 0K 0
in6_mfilter 0 0K 0
frag6 0 0K 0
tcplog 0 0K 0
tcp_hwpace 0 0K 0
acpipwr 0 0K 0
acpi_perf 0 0K 0
LRO 0 0K 0
newreno data 0 0K 0
ip_moptions 0 0K 5
in_mfilter 0 0K 15
ipid 0 0K 0
80211scan 0 0K 0
80211ratectl 0 0K 0
80211power 0 0K 0
80211nodeie 0 0K 0
80211node 0 0K 0
80211mesh_gt 0 0K 0
80211mesh_rt 0 0K 0
80211perr 0 0K 0
80211prep 0 0K 0
80211preq 0 0K 0
80211dfs 0 0K 0
80211crypto 0 0K 0
80211vap 0 0K 0
iflib 0 0K 0
vlan 0 0K 0
gif 0 0K 0
ifdescr 0 0K 0
zlib 0 0K 0
fadvise 0 0K 69
VN POLL 0 0K 4
twsbuf 0 0K 0
statfs 0 0K 2287
namei_tracker 0 0K 0
export_host 0 0K 0
cl_savebuf 0 0K 31
twe_commands 0 0K 0
twa_commands 0 0K 0
tcp_log_dev 0 0K 59
midi buffers 0 0K 0
mixer 0 0K 0
ac97 0 0K 0
hdacc 0 0K 0
hdac 0 0K 0
hdaa 0 0K 0
acpicmbat 0 0K 0
SIIS driver 0 0K 0
CAM CCB 0 0K 6297
PUC 0 0K 0
ppbusdev 0 0K 0
agtiapi_MemAlloc malloc 0 0K 0
biobuf 0 0K 0
aios 0 0K 0
lio 0 0K 0
acl 0 0K 0
osti_cacheable 0 0K 0
mbuf_tag 0 0K 387
tempbuff 0 0K 0
tempbuff 0 0K 0
ag_tgt_map_t malloc 0 0K 0
ag_slr_map_t malloc 0 0K 0
lDevFlags * malloc 0 0K 0
tiDeviceHandle_t * malloc 0 0K 0
ag_portal_data_t malloc 0 0K 0
ag_device_t malloc 0 0K 0
STLock malloc 0 0K 0
CCB List 0 0K 0
sr_iov 0 0K 0
OCS 0 0K 0
OCS 0 0K 0
nvme 0 0K 0
nvd 0 0K 0
netmap 0 0K 0
mwldev 0 0K 0
MVS driver 0 0K 0
CAM ccb queue 0 0K 0
mrsasbuf 0 0K 0
mpt_user 0 0K 0
mps_user 0 0K 0
accf 0 0K 0
pts 0 0K 0
ioctlops 0 0K 373
eventfd 0 0K 0
Witness 0 0K 0
stack 0 0K 0
MPSSAS 0 0K 0
mps 0 0K 0
mpr_user 0 0K 0
MPRSAS 0 0K 0
mpr 0 0K 0
mfibuf 0 0K 0
sbuf 0 0K 288
md_sectors 0 0K 0
firmware 0 0K 0
compressor 0 0K 0
md_disk 0 0K 4
SWAP 0 0K 0
malodev 0 0K 0
LED 0 0K 0
sysctltmp 0 0K 1114
sysctl 0 0K 3
ekcd 0 0K 0
dumper 0 0K 0
sendfile 0 0K 0
rctl 0 0K 0
ix_sriov 0 0K 0
aacraidcam 0 0K 0
aacraid_buf 0 0K 0
ix 0 0K 0
ipsbuf 0 0K 0
cache 0 0K 0
iirbuf 0 0K 0
prison_racct 0 0K 0
Fail Points 0 0K 0
sigio 0 0K 1
filedesc_to_leader 0 0K 0
pwd 0 0K 0
tty console 0 0K 0
aaccam 0 0K 0
aacbuf 0 0K 0
zstd 0 0K 0
XZ_DEC 0 0K 0
nvlist 0 0K 0
SCSI ENC 0 0K 0
SCSI sa 0 0K 0
scsi_pass 0 0K 0
isofs_node 0 0K 0
isofs_mount 0 0K 0
tr_raid5_data 0 0K 0
tr_raid1e_data 0 0K 0
tr_raid1_data 0 0K 0
tr_raid0_data 0 0K 0
tr_concat_data 0 0K 0
md_sii_data 0 0K 0
md_promise_data 0 0K 0
md_nvidia_data 0 0K 0
md_jmicron_data 0 0K 0
md_intel_data 0 0K 0
md_ddf_data 0 0K 0
raid_data 0 0K 72
geom_flashmap 0 0K 0
tmpfs dir 0 0K 0
tmpfs name 0 0K 0
tmpfs mount 0 0K 0
NFS FHA 0 0K 0
newnfsmnt 0 0K 0
newnfsclient_req 0 0K 0
NFSCL layrecall 0 0K 0
NFSCL session 0 0K 0
NFSCL sockreq 0 0K 0
NFSCL devinfo 0 0K 0
NFSCL flayout 0 0K 0
NFSCL layout 0 0K 0
NFSD rollback 0 0K 0
NFSCL diroff 0 0K 0
db> show uma
Zone Size Used Free Requests Sleeps Bucket Total Mem XFree
mbuf_jumbo_page 4096 8320 1714 252279 0 254 41099264 0
tcp_log 416 2146 10328 76537 0 254 5189184 0
mbuf 256 8878 2957 768628 0 254 3029760 0
pbuf 2624 0 762 0 0 2 1999488 0
BUF TRIE 144 366 11394 4387 0 62 1693440 0
malloc-384 384 4221 19 4307 0 30 1628160 0
RADIX NODE 144 9052 1471 126804 0 62 1515312 0
malloc-128 128 11320 57 11701 0 126 1456256 0
malloc-4096 4096 327 5 580 0 2 1359872 0
UMA Slabs 0 112 11386 23 11386 0 126 1277808 0
mbuf_cluster 2048 570 2 570 0 254 1171456 0
vmem btag 56 18938 117 18971 0 254 1067080 0
ertt_txseginfo 40 0 16867 300373 0 254 674680 0
FFS inode 1160 518 35 2698 0 8 641480 0
256 Bucket 2048 250 26 16480 0 8 565248 0
tcp_bbr_map 128 0 4216 131617 0 126 539648 0
malloc-4096 4096 79 13 3784 0 2 376832 0
lkpimm 160 1 2324 1 0 62 372000 0
lkpicurr 160 2 2323 2 0 62 372000 0
VM OBJECT 264 1217 163 49621 0 30 364320 0
THREAD 1808 153 34 3626 0 8 338096 0
VNODE 448 557 73 2739 0 30 282240 0
malloc-64 64 4183 227 48593 0 254 282240 0
malloc-65536 65536 4 0 4 0 1 262144 0
malloc-256 256 290 715 12671 0 62 257280 0
malloc-16 16 14159 341 18138 0 254 232000 0
malloc-32768 32768 0 7 324 0 1 229376 0
sctp_asoc 2288 64 36 1253 0 254 228800 0
DEVCTL 1024 19 201 226 0 0 225280 0
malloc-2048 2048 67 39 3024 0 8 217088 0
malloc-16384 16384 7 6 2127 0 1 212992 0
malloc-65536 65536 0 3 484 0 1 196608 0
malloc-65536 65536 1 2 14 0 1 196608 0
MAP ENTRY 96 1479 495 184543 0 126 189504 0
UMA Zones 768 242 2 242 0 16 187392 0
malloc-32 32 5363 181 5649 0 254 177408 0
malloc-128 128 1263 70 31733 0 126 170624 0
sctp_ep 1280 65 61 3020 0 254 161280 0
malloc-128 128 1163 46 6967 0 126 154752 0
S VFS Cache 104 1025 418 3303 0 126 150072 0
mbuf_packet 256 81 489 10390 0 254 145920 0
FFS2 dinode 256 518 22 2698 0 62 138240 0
socket 944 47 93 6338 0 254 132160 0
malloc-65536 65536 2 0 2 0 1 131072 0
malloc-65536 65536 2 0 2 0 1 131072 0
malloc-32768 32768 0 4 135 0 1 131072 0
malloc-2048 2048 4 60 511 0 8 131072 0
VMSPACE 2544 36 15 3183 0 4 129744 0
clpbuf 2624 0 48 447 0 16 125952 0
128 Bucket 1024 89 34 1919 0 16 125952 0
malloc-256 256 166 314 9066 0 62 122880 0
ksiginfo 112 63 981 847 0 126 116928 0
malloc-1024 1024 110 2 127 0 16 114688 0
malloc-384 384 172 118 2393 0 30 111360 0
malloc-2048 2048 7 47 6327 0 8 110592 0
malloc-1024 1024 72 32 1772 0 16 106496 0
PROC 1336 59 19 3208 0 8 104208 0
malloc-16384 16384 4 2 179 0 1 98304 0
sctp_raddr 736 64 68 1458 0 254 97152 0
filedesc0 1072 59 25 3209 0 8 90048 0
UMA Kegs 384 227 6 227 0 30 89472 0
malloc-128 128 458 193 2668 0 126 83328 0
malloc-384 384 129 81 4437 0 30 80640 0
g_bio 408 0 170 18378 0 30 69360 0
malloc-65536 65536 0 1 8 0 1 65536 0
malloc-32768 32768 2 0 2 0 1 65536 0
malloc-8192 8192 5 3 135 0 1 65536 0
malloc-8192 8192 6 2 11 0 1 65536 0
64 Bucket 512 82 30 6726 0 30 57344 0
malloc-256 256 156 54 292 0 62 53760 0
malloc-4096 4096 12 1 23 0 2 53248 0
32 Bucket 256 63 132 32519 0 62 49920 0
malloc-16384 16384 3 0 3 0 1 49152 0
malloc-8192 8192 4 2 9 0 1 49152 0
malloc-64 64 572 184 24951 0 254 48384 0
malloc-256 256 114 66 3419 0 62 46080 0
pcpu-8 8 4821 811 6158 0 254 45056 0
malloc-8192 8192 5 0 5 0 1 40960 0
malloc-2048 2048 11 9 278 0 8 40960 0
malloc-384 384 81 19 254 0 30 38400 0
malloc-256 256 113 37 1265 0 62 38400 0
tcpcb 1080 15 20 560 0 254 37800 0
DIRHASH 1024 34 2 34 0 16 36864 0
NAMEI 1024 0 36 26888 0 16 36864 0
malloc-4096 4096 9 0 9 0 2 36864 0
malloc-2048 2048 12 6 276 0 8 36864 0
malloc-64 64 478 89 690 0 254 36288 0
malloc-32768 32768 1 0 1 0 1 32768 0
pcpu-64 64 487 25 487 0 254 32768 0
Files 80 219 181 17684 0 126 32000 0
udplite_inpcb 496 0 64 779 0 254 31744 0
sctp_chunk 152 74 134 1601 0 254 31616 0
tcp_bbr_pcb 832 0 36 305 0 16 29952 0
malloc-4096 4096 2 5 55 0 2 28672 0
TURNSTILE 136 188 22 188 0 62 28560 0
KNOTE 160 28 147 41997 0 62 28000 0
tcp_inpcb 496 15 41 560 0 254 27776 0
malloc-256 256 49 56 646 0 62 26880 0
pipe 744 22 13 567 0 16 26040 0
malloc-8192 8192 2 1 4 0 1 24576 0
malloc-4096 4096 2 4 85 0 2 24576 0
malloc-4096 4096 3 3 2291 0 2 24576 0
malloc-2048 2048 2 10 180 0 8 24576 0
malloc-1024 1024 13 11 1825 0 16 24576 0
PWD 32 18 738 2180 0 254 24192 0
malloc-64 64 213 165 6622 0 254 24192 0
ttyinq 160 135 15 300 0 62 24000 0
ttyoutq 256 72 18 160 0 62 23040 0
malloc-2048 2048 5 5 20 0 8 20480 0
malloc-1024 1024 17 3 17 0 16 20480 0
malloc-32 32 526 104 646 0 254 20160 0
8 Bucket 80 63 187 1488 0 126 20000 0
malloc-128 128 89 66 2220 0 126 19840 0
SLEEPQUEUE 88 188 36 188 0 126 19712 0
Mountpoints 2752 2 5 2 0 4 19264 0
malloc-384 384 38 12 64 0 30 19200 0
malloc-384 384 36 14 36 0 30 19200 0
malloc-8192 8192 2 0 2 0 1 16384 0
malloc-1024 1024 11 5 60 0 16 16384 0
malloc-512 512 10 22 201 0 30 16384 0
malloc-64 64 157 95 176 0 254 16128 0
vtnet_tx_hdr 24 0 668 190859 0 254 16032 0
udp_inpcb 496 6 26 343 0 254 15872 0
unpcb 256 17 43 1471 0 254 15360 0
malloc-256 256 32 28 2264 0 62 15360 0
tcp_rack_pcb 832 9 9 115 0 16 14976 0
malloc-1024 1024 2 10 22 0 16 12288 0
malloc-1024 1024 8 4 9 0 16 12288 0
malloc-512 512 10 14 22 0 30 12288 0
rtentry 176 34 35 73 0 62 12144 0
malloc-64 64 85 104 428 0 254 12096 0
malloc-64 64 95 94 2725 0 254 12096 0
malloc-32 32 164 214 295 0 254 12096 0
malloc-32 32 303 75 9683 0 254 12096 0
16 Bucket 144 57 27 496 0 62 12096 0
malloc-16 16 346 404 653 0 254 12000 0
ripcb 496 4 20 95 0 254 11904 0
malloc-128 128 7 86 302 0 126 11904 0
kenv 258 15 30 1052 0 30 11610 0
routing nhops 256 27 18 73 0 62 11520 0
malloc-256 256 34 11 1497 0 62 11520 0
malloc-8192 8192 1 0 1 0 1 8192 0
malloc-1024 1024 1 7 53 0 16 8192 0
malloc-512 512 3 13 179 0 30 8192 0
malloc-512 512 0 16 98 0 30 8192 0
malloc-512 512 0 16 227 0 30 8192 0
pf tags 104 1 77 19 0 126 8112 0
PGRP 88 31 61 82 0 126 8096 0
rl_entry 40 71 131 76 0 254 8080 0
sctp_stream_msg_out 112 8 64 284 0 254 8064 0
sctp_laddr 48 0 168 930 0 254 8064 0
tcp_rack_map 112 22 50 246 0 126 8064 0
udpcb 32 6 246 1122 0 254 8064 0
ertt 72 15 97 560 0 126 8064 0
malloc-64 64 13 113 261 0 254 8064 0
malloc-32 32 21 231 68 0 254 8064 0
malloc-32 32 38 214 1100 0 254 8064 0
malloc-32 32 154 98 5045 0 254 8064 0
4 Bucket 48 8 160 103 0 254 8064 0
2 Bucket 32 68 184 823 0 254 8064 0
malloc-16 16 17 483 567 0 254 8000 0
malloc-16 16 16 484 19 0 254 8000 0
malloc-16 16 187 313 1417 0 254 8000 0
malloc-16 16 30 470 28387 0 254 8000 0
malloc-16 16 137 363 4686 0 254 8000 0
malloc-128 128 25 37 347 0 126 7936 0
malloc-128 128 20 42 152 0 126 7936 0
sctp_readq 152 0 52 156 0 254 7904 0
cryptop 280 0 28 31 0 30 7840 0
malloc-384 384 1 19 354 0 30 7680 0
malloc-384 384 1 19 128 0 30 7680 0
FPU_save_area 832 1 8 1 0 16 7488 0
cpuset 104 7 55 7 0 126 6448 0
epoch_record pcpu 256 4 12 4 0 62 4096 0
malloc-2048 2048 1 1 1 0 8 4096 0
malloc-512 512 1 7 8 0 30 4096 0
malloc-512 512 4 4 4 0 30 4096 0
pcpu-16 16 7 249 7 0 254 4096 0
tcptw 88 0 46 3 0 254 4048 0
hostcache 64 2 61 2 0 254 4032 0
syncache 168 0 24 4 0 254 4032 0
UMA Slabs 1 176 10 12 10 0 62 3872 0
mqnode 416 3 6 3 0 30 3744 0
KMAP ENTRY 96 12 27 14 0 0 3744 0
vmem 1856 1 1 1 0 8 3712 0
tfo_ccache_entries 80 1 31 1 0 126 2560 0
SMR CPU 32 3 60 3 0 254 2016 0
SMR SHARED 24 3 60 3 0 254 1512 0
FFS1 dinode 128 0 0 0 0 126 0 0
da_ccb 544 0 0 0 0 16 0 0
ada_ccb 272 0 0 0 0 30 0 0
swblk 136 0 0 0 0 62 0 0
swpctrie 144 0 0 0 0 62 0 0
sctp_asconf_ack 48 0 0 0 0 254 0 0
sctp_asconf 40 0 0 0 0 254 0 0
cdg_qdiffsample 16 0 0 0 0 254 0 0
pf state scrubs 40 0 0 0 0 254 0 0
pf frag entries 40 0 0 0 0 254 0 0
pf frags 248 0 0 0 0 62 0 0
pf table entries 160 0 0 0 0 62 0 0
pf table entry counters 64 0 0 0 0 254 0 0
pf source nodes 136 0 0 0 0 254 0 0
pf state keys 88 0 0 0 0 126 0 0
pf states 304 0 0 0 0 254 0 0
pf mtags 48 0 0 0 0 254 0 0
tcp_log_node 120 0 0 0 0 126 0 0
tcp_log_bucket 176 0 0 0 0 62 0 0
tcpreass 48 0 0 0 0 254 0 0
tfo 4 0 0 0 0 254 0 0
sackhole 32 0 0 0 0 254 0 0
ipq 56 0 0 0 0 254 0 0
IPsec SA lft_c 16 0 0 0 0 254 0 0
itimer 352 0 0 0 0 30 0 0
AIOLIO 272 0 0 0 0 30 0 0
AIOCB 552 0 0 0 0 16 0 0
AIOP 32 0 0 0 0 254 0 0
AIO 208 0 0 0 0 62 0 0
NCLNODE 584 0 0 0 0 16 0 0
TMPFS node 224 0 0 0 0 62 0 0
mqnotifier 216 0 0 0 0 62 0 0
mvdata 64 0 0 0 0 254 0 0
mqueue 248 0 0 0 0 62 0 0
LTS VFS Cache 360 0 0 0 0 30 0 0
L VFS Cache 320 0 0 0 0 30 0 0
STS VFS Cache 144 0 0 0 0 62 0 0
linux_dma_object 24 0 0 0 0 254 0 0
linux_dma_pctrie 144 0 0 0 0 62 0 0
IOMMU_MAP_ENTRY 120 0 0 0 0 126 0 0
ktls_session 192 0 0 0 0 62 0 0
mbuf_jumbo_16k 16384 0 0 0 0 254 0 0
mbuf_jumbo_9k 9216 0 0 0 0 254 0 0
audit_record 1280 0 0 0 0 8 0 0
domainset 40 0 0 0 0 254 0 0
MAC labels 40 0 0 0 0 254 0 0
vnpbuf 2624 0 0 0 0 64 0 0
mdpbuf 2624 0 0 0 0 3 0 0
nfspbuf 2624 0 0 0 0 16 0 0
swwbuf 2624 0 0 0 0 8 0 0
swrbuf 2624 0 0 0 0 16 0 0
umtx_shm 88 0 0 0 0 126 0 0
umtx pi 96 0 0 0 0 126 0 0
rangeset pctrie nodes 144 0 0 0 0 62 0 0
malloc-65536 65536 0 0 0 0 1 0 0
malloc-65536 65536 0 0 0 0 1 0 0
malloc-32768 32768 0 0 0 0 1 0 0
malloc-32768 32768 0 0 0 0 1 0 0
malloc-32768 32768 0 0 0 0 1 0 0
malloc-32768 32768 0 0 0 0 1 0 0
malloc-16384 16384 0 0 0 0 1 0 0
malloc-16384 16384 0 0 0 0 1 0 0
malloc-16384 16384 0 0 0 0 1 0 0
malloc-16384 16384 0 0 0 0 1 0 0
malloc-16384 16384 0 0 0 0 1 0 0
malloc-8192 8192 0 0 0 0 1 0 0
malloc-4096 4096 0 0 0
---
This report is generated by a bot. It may contain errors.
See https://goo.gl/tpsmEJ for more information about syzbot.
syzbot engineers can be reached at syzk...@googlegroups.com.
syzbot will keep track of this issue. See:
https://goo.gl/tpsmEJ#status for how to communicate with syzbot.
syzbot found the following issue on:
HEAD commit: 105b68b4 sctp: Fix errno in case of association setup fail..
git tree: https://github.com/freebsd/freebsd-src.git main
console output: https://syzkaller.appspot.com/x/log.txt?x=15a2fbc4300000
dashboard link: https://syzkaller.appspot.com/bug?extid=35528f275f2eea6317cc
Unfortunately, I don't have any reproducer for this issue yet.
IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+35528f...@syzkaller.appspotmail.com
panic: ASan: Invalid access, 4-byte read at 0xfffffe005741fe7c, RedZonePartial(4)
cpuid = 0
time = 1625874558
KDB: stack backtrace:
db_trace_self_wrapper() at db_trace_self_wrapper+0xc7/frame 0xfffffe008fbc3050
kdb_backtrace() at kdb_backtrace+0xd3/frame 0xfffffe008fbc31b0
vpanic() at vpanic+0x2c5/frame 0xfffffe008fbc3290
panic() at panic+0xb5/frame 0xfffffe008fbc3350
__asan_load4_noabort() at __asan_load4_noabort+0x20f/frame 0xfffffe008fbc3410
sctp_sosend() at sctp_sosend+0x7a5/frame 0xfffffe008fbc36a0
sosend() at sosend+0x11e/frame 0xfffffe008fbc3710
kern_sendit() at kern_sendit+0x58d/frame 0xfffffe008fbc3880
sendit() at sendit+0x2b0/frame 0xfffffe008fbc38d0
sys_sendmsg() at sys_sendmsg+0x17d/frame 0xfffffe008fbc39f0
amd64_syscall() at amd64_syscall+0x425/frame 0xfffffe008fbc3bf0
fast_syscall_common() at fast_syscall_common+0xf8/frame 0xfffffe008fbc3bf0
--- syscall (198, FreeBSD ELF64, nosys), rip = 0x287eda, rsp = 0x7fffdfffdf08, rbp = 0x7fffdfffdf70 ---
KDB: enter: panic
[ thread pid 3208 tid 103626 ]
Stopped at kdb_enter+0x6b: movq $0,0x28f9c5a(%rip)
db>
db> set $lines = 0
db> set $maxwidth = 0
db> show registers
cs 0x20
ds 0x3b
es 0x3b
fs 0x13
gs 0x1b
ss 0x28
rax 0x12
rcx 0xc61bd80cf2d34d27
rdx 0x40001
rbx 0
rsp 0xfffffe008fbc3190
rbp 0xfffffe008fbc31b0
rsi 0
rdi 0xfffffe009253e8a8
r8 0x3
r9 0xfffffe008fbc2ce8
r10 0
r11 0xfffffe009b10f6f0
r12 0xfffffe009b10f1e0
r13 0xfffffe008fbc3201
r14 0xffffffff82c42700 .str.18
r15 0xffffffff82c42700 .str.18
rip 0xffffffff8178eddb kdb_enter+0x6b
rflags 0x46
kdb_enter+0x6b: movq $0,0x28f9c5a(%rip)
db> show proc
Process 3208 (syz-executor.3) at 0xfffffe009963e000:
state: NORMAL
uid: 0 gids: 0, 0, 5
parent: pid 2256 at 0xfffffe0092573a70
ABI: FreeBSD ELF64
flag: 0x10000080 flag2: 0
arguments: /root/syz-executor.3
reaper: 0xfffffe0053d51538 reapsubtree: 1
sigparent: 20
vmspace: 0xfffffe009205a9f0
(map 0xfffffe009205a9f0)
(map.pmap 0xfffffe009205aab0)
(pmap 0xfffffe009205ab10)
threads: 2
100214 RunQ syz-executor.3
103626 Run CPU 0 syz-executor.3
db> ps
pid ppid pgrp uid state wmesg wchan cmd
3208 2256 2256 0 R (threaded) syz-executor.3
100214 RunQ syz-executor.3
103626 Run CPU 0 syz-executor.3
3207 2808 2808 0 R syz-executor.0
3136 3113 3136 0 Ss select 0xfffffe00925a6ec0 dhclient
3119 780 3119 0 Rs syz-executor.1
3116 1 3116 0 Ss select 0xfffffe00925a66c0 dhclient
3113 3105 436 65 S select 0xfffffe00925653c0 dhclient
3105 436 436 0 S wait 0xfffffe0091faba70 sh
3001 1 3001 65 Ss select 0xfffffe009b1114c0 dhclient
2808 780 2808 0 Rs syz-executor.0
2806 1 2806 0 Ss select 0xfffffe00925a67c0 dhclient
2803 1 2803 0 Ss select 0xfffffe009966f2c0 dhclient
2782 1 2782 65 Ss select 0xfffffe009b111240 dhclient
2607 1 2607 0 Ss select 0xfffffe009b111340 dhclient
2604 1 2604 0 Ss select 0xfffffe00925650c0 dhclient
2256 780 2256 0 Ss nanslp 0xffffffff84055900 syz-executor.3
2249 780 2249 0 Rs syz-executor.2
780 778 778 0 S (threaded) syz-fuzzer
100100 S uwait 0xfffffe00573da480 syz-fuzzer
100116 S uwait 0xfffffe005889dc00 syz-fuzzer
100117 S kqread 0xfffffe00587e3e00 syz-fuzzer
100118 S uwait 0xfffffe0092058c00 syz-fuzzer
100119 S uwait 0xfffffe0092058d00 syz-fuzzer
100120 S uwait 0xfffffe0092528f00 syz-fuzzer
100121 S uwait 0xfffffe005889d080 syz-fuzzer
100122 S uwait 0xfffffe005889d180 syz-fuzzer
100124 S uwait 0xfffffe005889d280 syz-fuzzer
778 776 778 0 Ss pause 0xfffffe009245b0b0 csh
776 694 776 0 Ss select 0xfffffe0091e4f940 sshd
760 1 760 0 Ss+ ttyin 0xfffffe0056fe0cb0 getty
759 1 759 0 Ss+ ttyin 0xfffffe00583ed0b0 getty
758 1 758 0 Ss+ ttyin 0xfffffe00583ed4b0 getty
757 1 757 0 Ss+ ttyin 0xfffffe00583ed8b0 getty
756 1 756 0 Ss+ ttyin 0xfffffe00583edcb0 getty
755 1 755 0 Ss+ ttyin 0xfffffe00583910b0 getty
754 1 754 0 Ss+ ttyin 0xfffffe00583914b0 getty
753 1 753 0 Ss+ ttyin 0xfffffe00583918b0 getty
752 1 752 0 Ss+ ttyin 0xfffffe0058391cb0 getty
698 1 698 0 Ss nanslp 0xffffffff84055901 cron
694 1 694 0 Ss select 0xfffffe0091e4fbc0 sshd
507 1 507 0 Ss select 0xfffffe0091e4f840 syslogd
436 1 436 0 Ss wait 0xfffffe00588b0000 devd
435 1 435 65 Ss select 0xfffffe0091e4fa40 dhclient
350 1 350 0 Ss select 0xfffffe005889d740 dhclient
347 1 347 0 Ss select 0xfffffe0091e4f9c0 dhclient
23 0 0 0 DL syncer 0xffffffff8417ba40 [syncer]
22 0 0 0 DL vlruwt 0xfffffe00587aaa70 [vnlru]
21 0 0 0 DL (threaded) [bufdaemon]
100083 D qsleep 0xffffffff84179940 [bufdaemon]
100086 D - 0xffffffff83411f80 [bufspacedaemon-0]
100096 D sdflush 0xfffffe00588cbce8 [/ worker]
20 0 0 0 DL psleep 0xffffffff841b1c80 [vmdaemon]
19 0 0 0 DL (threaded) [pagedaemon]
100081 D psleep 0xffffffff841a57b8 [dom0]
100084 D launds 0xffffffff841a57c4 [laundry: dom0]
100085 D umarcl 0xffffffff81e7e5e0 [uma]
18 0 0 0 DL - 0xffffffff83e0caa0 [rand_harvestq]
17 0 0 0 DL waiting 0xffffffff84b21460 [sctp_iterator]
16 0 0 0 DL pftm 0xffffffff84742d30 [pf purge]
15 0 0 0 DL - 0xffffffff84174dc0 [soaiod4]
9 0 0 0 DL - 0xffffffff84174dc0 [soaiod3]
8 0 0 0 DL - 0xffffffff84174dc0 [soaiod2]
7 0 0 0 DL - 0xffffffff84174dc0 [soaiod1]
6 0 0 0 DL (threaded) [cam]
100046 D - 0xffffffff83c92240 [doneq0]
100047 D - 0xffffffff83c921c0 [async]
100080 D - 0xffffffff83c92040 [scanner]
14 0 0 0 DL seqstat 0xfffffe0056aadc88 [sequencer 00]
5 0 0 0 DL crypto_ 0xfffffe00541abd80 [crypto returns 1]
4 0 0 0 DL crypto_ 0xfffffe00541abd30 [crypto returns 0]
3 0 0 0 DL crypto_ 0xffffffff8419f860 [crypto]
13 0 0 0 DL (threaded) [geom]
100037 D - 0xffffffff84028ec0 [g_event]
100038 D - 0xffffffff84028f00 [g_up]
100039 D - 0xffffffff84028f40 [g_down]
2 0 0 0 DL (threaded) [KTLS]
100028 D - 0xfffffe0053e16e00 [thr_0]
100029 D - 0xfffffe0053e16e80 [thr_1]
12 0 0 0 WL (threaded) [intr]
100010 I [swi6: task queue]
100011 I [swi6: Giant taskq]
100014 I [swi5: fast taskq]
100030 I [swi1: netisr 0]
100031 I [swi3: vm]
100032 I [swi4: clock (0)]
100033 I [swi4: clock (1)]
100034 I [swi1: hpts]
100035 I [swi1: hpts]
100048 I [irq24: virtio_pci0]
100049 I [irq25: virtio_pci0]
100050 I [irq26: virtio_pci0]
100051 I [irq27: virtio_pci0]
100052 I [irq28: virtio_pci1]
100053 I [irq29: virtio_pci1]
100054 I [irq30: virtio_pci1]
100055 I [irq31: virtio_pci1]
100056 I [irq32: virtio_pci1]
100061 I [irq10: virtio_pci2]
100063 I [irq1: atkbd0]
100064 I [irq12: psm0]
100065 I [swi0: uart uart++]
100073 I [swi1: pf send]
11 0 0 0 RL (threaded) [idle]
100003 CanRun [idle: cpu0]
100004 CanRun [idle: cpu1]
1 0 1 0 SLs wait 0xfffffe0053d51538 [init]
10 0 0 0 DL audit_w 0xffffffff841a0800 [audit]
0 0 0 0 RLs (threaded) [kernel]
100000 D swapin 0xffffffff84029dc0 [swapper]
100005 D - 0xfffffe0053c0d800 [softirq_0]
100006 D - 0xfffffe0053c0d600 [softirq_1]
100007 D - 0xfffffe0053c0d400 [if_io_tqg_0]
100008 D - 0xfffffe0053c0d200 [if_io_tqg_1]
100009 D - 0xfffffe0053c0d000 [if_config_tqg_0]
100012 Run CPU 1 [thread taskq]
100013 D - 0xfffffe000791a400 [inm_free taskq]
100015 D - 0xfffffe000791a200 [kqueue_ctx taskq]
100016 D - 0xfffffe000791a100 [linuxkpi_irq_wq]
100017 D - 0xfffffe000791a000 [aiod_kick taskq]
100018 D - 0xfffffe0053df6e00 [in6m_free taskq]
100019 D - 0xfffffe0053df6d00 [pci_hp taskq]
100020 D - 0xfffffe0053df6c00 [linuxkpi_short_wq_0]
100021 D - 0xfffffe0053df6c00 [linuxkpi_short_wq_1]
100022 D - 0xfffffe0053df6c00 [linuxkpi_short_wq_2]
100023 D - 0xfffffe0053df6c00 [linuxkpi_short_wq_3]
100024 D - 0xfffffe0053df6b00 [linuxkpi_long_wq_0]
100025 D - 0xfffffe0053df6b00 [linuxkpi_long_wq_1]
100026 D - 0xfffffe0053df6b00 [linuxkpi_long_wq_2]
100027 D - 0xfffffe0053df6b00 [linuxkpi_long_wq_3]
100036 D - 0xfffffe0053df6a00 [firmware taskq]
100040 D - 0xfffffe0053df6900 [crypto_0]
100041 D - 0xfffffe0053df6900 [crypto_1]
100057 D - 0xfffffe0053df6700 [vtnet0 rxq 0]
100058 D - 0xfffffe0053df6600 [vtnet0 txq 0]
100059 D - 0xfffffe0053df6500 [vtnet0 rxq 1]
100060 D - 0xfffffe0053df6400 [vtnet0 txq 1]
100062 D vtbslp 0xfffffe0056fc0380 [virtio_balloon]
100066 D - 0xfffffe0053df6300 [mca taskq]
100071 D - 0xffffffff82c49681 [deadlkres]
100076 D - 0xfffffe0058390e00 [acpi_task_0]
100077 D - 0xfffffe0058390e00 [acpi_task_1]
100078 D - 0xfffffe0058390e00 [acpi_task_2]
100079 D - 0xfffffe0053df6800 [CAM taskq]
3204 2249 2249 0 Z syz-executor.2
db> show all locks
Process 0 (kernel) thread 0xfffffe0053df21e0 (100012)
exclusive sleep mutex kernel arena domain (kernel arena domain) r = 0 (0xfffff800064b9000) locked @ /syzkaller/managers/main/kernel/sys/kern/subr_vmem.c:789
exclusive sleep mutex vmem list lock (vmem list lock) r = 0 (0xffffffff83409bc0) locked @ /syzkaller/managers/main/kernel/sys/kern/subr_vmem.c:784
db> show malloc
Type InUse MemUse Requests
pf_hash 5 11524K 5
devbuf 4216 4338K 4244
tcp_hpts 6 3201K 6
sysctloid 34320 2027K 34387
vtbuf 24 1968K 46
kobj 326 1304K 486
newblk 13 1027K 5541
vfscache 3 1025K 3
pcb 168 684K 6625
inodedep 173 577K 2380
ufs_quota 1 512K 1
vfs_hash 1 512K 1
callout 2 512K 2
intr 4 472K 4
vmem 3 274K 6
subproc 139 270K 3288
acpica 1674 184K 54806
vnet_data 1 168K 1
tidhash 3 141K 3
linker 357 140K 418
pagedep 12 131K 2137
tfo_ccache 1 128K 1
DEVFS1 107 107K 124
sem 4 106K 4
filedesc 14 105K 4264
bus 986 80K 3469
mtx_pool 2 72K 2
BPF 38 71K 86
syncache 1 68K 1
sctp_stro 64 64K 1253
acpitask 1 64K 1
ddb_capture 1 64K 1
module 510 64K 510
sctp_atcl 129 49K 4427
umtx 374 47K 374
kdtrace 214 43K 6836
dirrem 158 40K 2182
temp 36 35K 3397
hostcache 1 32K 1
shm 1 32K 24
DEVFS3 126 32K 136
routetbl 512 32K 1686
msg 4 30K 4
gtaskqueue 18 26K 18
kbdmux 6 22K 6
ifaddr 73 21K 99
DEVFS_RULE 56 20K 56
freefile 157 20K 2173
ufs_mount 5 17K 6
proc 3 17K 3
tty 16 16K 16
ithread 99 16K 99
lltable 49 16K 135
bus-sc 33 14K 1684
ether_multi 172 14K 311
KTRACE 101 13K 2046
ifnet 7 13K 7
kenv 95 12K 95
eventhandler 133 12K 133
in6_multi 89 11K 164
pf_rule 6 11K 42
CAM queue 5 11K 1528
rman 84 10K 425
GEOM 60 10K 489
bmsafemap 2 9K 2297
UART 12 9K 12
devstat 4 9K 4
sctp_atky 193 9K 5876
sctp_timw 32 8K 32
ksem 1 8K 48
rpc 2 8K 2
shmfd 1 8K 1
pfs_vncache 1 8K 1
pfs_nodes 20 8K 20
audit_evclass 236 8K 294
cred 25 7K 295
taskqueue 60 7K 60
sglist 5 7K 5
pf_table 3 6K 18
CAM DEV 3 6K 510
kqueue 62 6K 3215
plimit 23 6K 601
pf_ifnet 13 5K 60
DEVFSP 78 5K 418
ufs_dirhash 24 5K 24
UMA 270 5K 270
vt 11 5K 11
memdesc 1 4K 1
MCA 32 4K 32
evdev 4 4K 4
kcovinfo 64 4K 187
session 31 4K 82
pwddesc 59 4K 3209
acpisem 28 4K 28
hhook 15 4K 17
lockf 29 4K 93
fpukern_ctx 3 3K 3
ip6ndp 16 3K 36
selfd 45 3K 43862
terminal 11 3K 11
proc-args 50 3K 870
sctp_ifa 19 3K 36
uidinfo 3 3K 18
sctp_athm 129 3K 4518
sctp_map 128 2K 2506
local_apic 1 2K 1
io_apic 1 2K 1
ipsec-saq 2 2K 2
select 16 2K 217
Unitno 27 2K 55
CAM XPT 22 2K 543
freework 7 2K 2401
mkdir 12 2K 4160
freeblks 6 2K 2158
in_multi 6 2K 19
ipsecpolicy 2 2K 2
acpidev 20 2K 20
tcp_fsb 9 2K 115
msi 9 2K 9
clone 9 2K 9
tun 7 2K 7
softdep 1 1K 1
sahead 1 1K 1
secasvar 1 1K 1
nhops 6 1K 12
vnodemarker 2 1K 178
NFSD session 1 1K 1
diradd 7 1K 2221
CAM periph 4 1K 271
inpcbpolicy 25 1K 1777
sctp_ifn 6 1K 36
ipsec 3 1K 3
newdirblk 6 1K 2080
mld 6 1K 6
igmp 6 1K 6
toponodes 6 1K 6
isadev 6 1K 6
mount 16 1K 89
pci_link 10 1K 10
crypto 4 1K 110
encap_export_host 12 1K 12
osd 19 1K 571
pfil 4 1K 4
procdesc 4 1K 28
cdev 2 1K 2
pf_osfp 4 1K 4
chacha20random 1 1K 1
NFSD lckfile 1 1K 1
NFSD V4client 1 1K 1
DEVFS 9 1K 10
vnodes 1 1K 8
CAM SIM 2 1K 2
ktls 1 1K 1
feeder 7 1K 7
tcpfunc 3 1K 3
loginclass 3 1K 6
prison 6 1K 6
lkpikmalloc 5 1K 6
aesni_data 2 1K 2
apmdev 1 1K 1
atkbddev 2 1K 2
CAM dev queue 2 1K 2
xform 2 1K 389
CAM I/O Scheduler 1 1K 1
CAM path 4 1K 1034
soname 5 1K 6761
pmchooks 1 1K 1
nexusdev 7 1K 7
sctp_vrf 1 1K 1
ip_msource 1 1K 1
vnet 1 1K 1
entropy 2 1K 56
acpiintr 1 1K 1
pmc 1 1K 1
filecaps 4 1K 149
cpus 2 1K 2
vnet_data_free 1 1K 1
Per-cpu 1 1K 1
iov 1 1K 21891
p1003.1b 1 1K 1
tcp_do 0 0K 0
sctp_mcore 0 0K 0
sctp_socko 0 0K 2021
sctp_iter 0 0K 38
sctp_mvrf 0 0K 0
sctp_cpal 0 0K 1
sctp_cmsg 0 0K 0
sctp_stre 0 0K 0
sctp_athi 0 0K 0
sctp_a_it 0 0K 37
sctp_aadr 0 0K 0
sctp_stri 0 0K 226
cdg data 0 0K 0
mqdata 0 0K 0
vegas data 0 0K 8
dctcp data 0 0K 7
htcp data 0 0K 0
cubic data 0 0K 0
chd data 0 0K 8
pf_altq 0 0K 0
pf_temp 0 0K 0
NEWdirectio 0 0K 0
NEWNFSnode 0 0K 0
madt_table 0 0K 2
smartpqi 0 0K 0
NFSCL lck 0 0K 0
NFSCL lckown 0 0K 0
NFSCL client 0 0K 0
NFSCL deleg 0 0K 0
NFSCL open 0 0K 0
NFSCL owner 0 0K 0
NFS fh 0 0K 0
NFS req 0 0K 0
iavf 0 0K 0
ixl 0 0K 0
NFSD usrgroup 0 0K 0
NFSD string 0 0K 0
NFSD V4lock 0 0K 0
NFSD V4state 0 0K 0
NFSD srvcache 0 0K 0
ice-resmgr 0 0K 0
ice-osdep 0 0K 0
ice 0 0K 0
axgbe 0 0K 0
msdosfs_fat 0 0K 0
msdosfs_mount 0 0K 0
msdosfs_node 0 0K 0
DEVFS4 0 0K 0
DEVFS2 0 0K 0
xen_intr 0 0K 0
gntdev 0 0K 0
privcmd_dev 0 0K 0
xen_hvm 0 0K 0
legacydrv 0 0K 0
qpidrv 0 0K 0
evtchn_dev 0 0K 0
xenstore 0 0K 0
dmar_idpgtbl 0 0K 0
dmar_dom 0 0K 0
dmar_ctx 0 0K 0
ciss_data 0 0K 0
BACKLIGHT 0 0K 0
xnb 0 0K 0
isci 0 0K 0
iommu_dmamap 0 0K 0
xbbd 0 0K 0
hyperv_socket 0 0K 0
bxe_ilt 0 0K 0
xenbus 0 0K 0
xbd 0 0K 0
Balloon 0 0K 0
sysmouse 0 0K 0
vm_fictitious 0 0K 0
vtfont 0 0K 0
ath_hal 0 0K 0
athdev 0 0K 0
ata_pci 0 0K 0
ata_dma 0 0K 0
ata_generic 0 0K 0
amr 0 0K 0
pvscsi 0 0K 0
scsi_da 0 0K 69
UMAHash 0 0K 0
ata_da 0 0K 0
vm_pgdata 0 0K 0
jblocks 0 0K 0
savedino 0 0K 1964
sentinel 0 0K 0
jfsync 0 0K 0
jtrunc 0 0K 0
sbdep 0 0K 87
jsegdep 0 0K 0
jseg 0 0K 0
jfreefrag 0 0K 0
jfreeblk 0 0K 0
jnewblk 0 0K 0
jmvref 0 0K 0
jremref 0 0K 0
jaddref 0 0K 0
freedep 0 0K 0
freefrag 0 0K 24
allocindir 0 0K 0
indirdep 0 0K 361
allocdirect 0 0K 0
ufs_trim 0 0K 0
mactemp 0 0K 0
audit_trigger 0 0K 0
audit_pipe_presel 0 0K 0
audit_pipeent 0 0K 0
audit_pipe 0 0K 0
audit_evname 0 0K 0
audit_bsm 0 0K 0
audit_gidset 0 0K 0
audit_text 0 0K 0
audit_path 0 0K 0
audit_data 0 0K 0
audit_cred 0 0K 0
scsi_ch 0 0K 0
scsi_cd 0 0K 0
AHCI driver 0 0K 0
USBdev 0 0K 0
USB 0 0K 0
agp 0 0K 0
nvme_da 0 0K 0
ktls_ocf 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5E_TLS 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EN 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5DUMP 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
seq_file 0 0K 0
radix 0 0K 0
idr 0 0K 0
lkpifw 0 0K 0
NLM 0 0K 0
ipsec-spdcache 0 0K 0
ipsec-reg 0 0K 0
ipsec-misc 0 0K 0
ipsecrequest 0 0K 0
ip6opt 0 0K 6
ip6_msource 0 0K 0
ip6_moptions 0 0K 0
in6_mfilter 0 0K 0
frag6 0 0K 0
tcplog 0 0K 0
tcp_hwpace 0 0K 0
acpipwr 0 0K 0
acpi_perf 0 0K 0
LRO 0 0K 0
newreno data 0 0K 0
ip_moptions 0 0K 5
in_mfilter 0 0K 15
ipid 0 0K 0
80211scan 0 0K 0
80211ratectl 0 0K 0
80211power 0 0K 0
80211nodeie 0 0K 0
80211node 0 0K 0
80211mesh_gt 0 0K 0
80211mesh_rt 0 0K 0
80211perr 0 0K 0
80211prep 0 0K 0
80211preq 0 0K 0
80211dfs 0 0K 0
80211crypto 0 0K 0
80211vap 0 0K 0
iflib 0 0K 0
vlan 0 0K 0
gif 0 0K 0
ifdescr 0 0K 0
zlib 0 0K 0
fadvise 0 0K 69
VN POLL 0 0K 4
twsbuf 0 0K 0
statfs 0 0K 2287
namei_tracker 0 0K 0
export_host 0 0K 0
cl_savebuf 0 0K 31
twe_commands 0 0K 0
twa_commands 0 0K 0
tcp_log_dev 0 0K 59
midi buffers 0 0K 0
mixer 0 0K 0
ac97 0 0K 0
hdacc 0 0K 0
hdac 0 0K 0
hdaa 0 0K 0
acpicmbat 0 0K 0
SIIS driver 0 0K 0
CAM CCB 0 0K 6297
PUC 0 0K 0
ppbusdev 0 0K 0
agtiapi_MemAlloc malloc 0 0K 0
biobuf 0 0K 0
aios 0 0K 0
lio 0 0K 0
acl 0 0K 0
osti_cacheable 0 0K 0
mbuf_tag 0 0K 387
tempbuff 0 0K 0
tempbuff 0 0K 0
ag_tgt_map_t malloc 0 0K 0
ag_slr_map_t malloc 0 0K 0
lDevFlags * malloc 0 0K 0
tiDeviceHandle_t * malloc 0 0K 0
ag_portal_data_t malloc 0 0K 0
ag_device_t malloc 0 0K 0
STLock malloc 0 0K 0
CCB List 0 0K 0
sr_iov 0 0K 0
OCS 0 0K 0
OCS 0 0K 0
nvme 0 0K 0
nvd 0 0K 0
netmap 0 0K 0
mwldev 0 0K 0
MVS driver 0 0K 0
CAM ccb queue 0 0K 0
mrsasbuf 0 0K 0
mpt_user 0 0K 0
mps_user 0 0K 0
accf 0 0K 0
pts 0 0K 0
ioctlops 0 0K 373
eventfd 0 0K 0
Witness 0 0K 0
stack 0 0K 0
MPSSAS 0 0K 0
mps 0 0K 0
mpr_user 0 0K 0
MPRSAS 0 0K 0
mpr 0 0K 0
mfibuf 0 0K 0
sbuf 0 0K 288
md_sectors 0 0K 0
firmware 0 0K 0
compressor 0 0K 0
md_disk 0 0K 4
SWAP 0 0K 0
malodev 0 0K 0
LED 0 0K 0
sysctltmp 0 0K 1114
sysctl 0 0K 3
ekcd 0 0K 0
dumper 0 0K 0
sendfile 0 0K 0
rctl 0 0K 0
ix_sriov 0 0K 0
aacraidcam 0 0K 0
aacraid_buf 0 0K 0
ix 0 0K 0
ipsbuf 0 0K 0
cache 0 0K 0
iirbuf 0 0K 0
prison_racct 0 0K 0
Fail Points 0 0K 0
sigio 0 0K 1
filedesc_to_leader 0 0K 0
pwd 0 0K 0
tty console 0 0K 0
aaccam 0 0K 0
aacbuf 0 0K 0
zstd 0 0K 0
XZ_DEC 0 0K 0
nvlist 0 0K 0
SCSI ENC 0 0K 0
SCSI sa 0 0K 0
scsi_pass 0 0K 0
isofs_node 0 0K 0
isofs_mount 0 0K 0
tr_raid5_data 0 0K 0
tr_raid1e_data 0 0K 0
tr_raid1_data 0 0K 0
tr_raid0_data 0 0K 0
tr_concat_data 0 0K 0
md_sii_data 0 0K 0
md_promise_data 0 0K 0
md_nvidia_data 0 0K 0
md_jmicron_data 0 0K 0
md_intel_data 0 0K 0
md_ddf_data 0 0K 0
raid_data 0 0K 72
geom_flashmap 0 0K 0
tmpfs dir 0 0K 0
tmpfs name 0 0K 0
tmpfs mount 0 0K 0
NFS FHA 0 0K 0
newnfsmnt 0 0K 0
newnfsclient_req 0 0K 0
NFSCL layrecall 0 0K 0
NFSCL session 0 0K 0
NFSCL sockreq 0 0K 0
NFSCL devinfo 0 0K 0
NFSCL flayout 0 0K 0
NFSCL layout 0 0K 0
NFSD rollback 0 0K 0
NFSCL diroff 0 0K 0
db> show uma
Zone Size Used Free Requests Sleeps Bucket Total Mem XFree
mbuf_jumbo_page 4096 8320 1714 252279 0 254 41099264 0
tcp_log 416 2146 10328 76537 0 254 5189184 0
mbuf 256 8878 2957 768628 0 254 3029760 0
pbuf 2624 0 762 0 0 2 1999488 0
BUF TRIE 144 366 11394 4387 0 62 1693440 0
malloc-384 384 4221 19 4307 0 30 1628160 0
RADIX NODE 144 9052 1471 126804 0 62 1515312 0
malloc-128 128 11320 57 11701 0 126 1456256 0
malloc-4096 4096 327 5 580 0 2 1359872 0
UMA Slabs 0 112 11386 23 11386 0 126 1277808 0
mbuf_cluster 2048 570 2 570 0 254 1171456 0
vmem btag 56 18938 117 18971 0 254 1067080 0
ertt_txseginfo 40 0 16867 300373 0 254 674680 0
FFS inode 1160 518 35 2698 0 8 641480 0
256 Bucket 2048 250 26 16480 0 8 565248 0
tcp_bbr_map 128 0 4216 131617 0 126 539648 0
malloc-4096 4096 79 13 3784 0 2 376832 0
lkpimm 160 1 2324 1 0 62 372000 0
lkpicurr 160 2 2323 2 0 62 372000 0
VM OBJECT 264 1217 163 49621 0 30 364320 0
THREAD 1808 153 34 3626 0 8 338096 0
VNODE 448 557 73 2739 0 30 282240 0
malloc-64 64 4183 227 48593 0 254 282240 0
malloc-65536 65536 4 0 4 0 1 262144 0
malloc-256 256 290 715 12671 0 62 257280 0
malloc-16 16 14159 341 18138 0 254 232000 0
malloc-32768 32768 0 7 324 0 1 229376 0
sctp_asoc 2288 64 36 1253 0 254 228800 0
DEVCTL 1024 19 201 226 0 0 225280 0
malloc-2048 2048 67 39 3024 0 8 217088 0
malloc-16384 16384 7 6 2127 0 1 212992 0
malloc-65536 65536 0 3 484 0 1 196608 0
malloc-65536 65536 1 2 14 0 1 196608 0
MAP ENTRY 96 1479 495 184543 0 126 189504 0
UMA Zones 768 242 2 242 0 16 187392 0
malloc-32 32 5363 181 5649 0 254 177408 0
malloc-128 128 1263 70 31733 0 126 170624 0
sctp_ep 1280 65 61 3020 0 254 161280 0
malloc-128 128 1163 46 6967 0 126 154752 0
S VFS Cache 104 1025 418 3303 0 126 150072 0
mbuf_packet 256 81 489 10390 0 254 145920 0
FFS2 dinode 256 518 22 2698 0 62 138240 0
socket 944 47 93 6338 0 254 132160 0
malloc-65536 65536 2 0 2 0 1 131072 0
malloc-65536 65536 2 0 2 0 1 131072 0
malloc-32768 32768 0 4 135 0 1 131072 0
malloc-2048 2048 4 60 511 0 8 131072 0
VMSPACE 2544 36 15 3183 0 4 129744 0
clpbuf 2624 0 48 447 0 16 125952 0
128 Bucket 1024 89 34 1919 0 16 125952 0
malloc-256 256 166 314 9066 0 62 122880 0
ksiginfo 112 63 981 847 0 126 116928 0
malloc-1024 1024 110 2 127 0 16 114688 0
malloc-384 384 172 118 2393 0 30 111360 0
malloc-2048 2048 7 47 6327 0 8 110592 0
malloc-1024 1024 72 32 1772 0 16 106496 0
PROC 1336 59 19 3208 0 8 104208 0
malloc-16384 16384 4 2 179 0 1 98304 0
sctp_raddr 736 64 68 1458 0 254 97152 0
filedesc0 1072 59 25 3209 0 8 90048 0
UMA Kegs 384 227 6 227 0 30 89472 0
malloc-128 128 458 193 2668 0 126 83328 0
malloc-384 384 129 81 4437 0 30 80640 0
g_bio 408 0 170 18378 0 30 69360 0
malloc-65536 65536 0 1 8 0 1 65536 0
malloc-32768 32768 2 0 2 0 1 65536 0
malloc-8192 8192 5 3 135 0 1 65536 0
malloc-8192 8192 6 2 11 0 1 65536 0
64 Bucket 512 82 30 6726 0 30 57344 0
malloc-256 256 156 54 292 0 62 53760 0
malloc-4096 4096 12 1 23 0 2 53248 0
32 Bucket 256 63 132 32519 0 62 49920 0
malloc-16384 16384 3 0 3 0 1 49152 0
malloc-8192 8192 4 2 9 0 1 49152 0
malloc-64 64 572 184 24951 0 254 48384 0
malloc-256 256 114 66 3419 0 62 46080 0
pcpu-8 8 4821 811 6158 0 254 45056 0
malloc-8192 8192 5 0 5 0 1 40960 0
malloc-2048 2048 11 9 278 0 8 40960 0
malloc-384 384 81 19 254 0 30 38400 0
malloc-256 256 113 37 1265 0 62 38400 0
tcpcb 1080 15 20 560 0 254 37800 0
DIRHASH 1024 34 2 34 0 16 36864 0
NAMEI 1024 0 36 26888 0 16 36864 0
malloc-4096 4096 9 0 9 0 2 36864 0
malloc-2048 2048 12 6 276 0 8 36864 0
malloc-64 64 478 89 690 0 254 36288 0
malloc-32768 32768 1 0 1 0 1 32768 0
pcpu-64 64 487 25 487 0 254 32768 0
Files 80 219 181 17684 0 126 32000 0
udplite_inpcb 496 0 64 779 0 254 31744 0
sctp_chunk 152 74 134 1601 0 254 31616 0
tcp_bbr_pcb 832 0 36 305 0 16 29952 0
malloc-4096 4096 2 5 55 0 2 28672 0
TURNSTILE 136 188 22 188 0 62 28560 0
KNOTE 160 28 147 41997 0 62 28000 0
tcp_inpcb 496 15 41 560 0 254 27776 0
malloc-256 256 49 56 646 0 62 26880 0
pipe 744 22 13 567 0 16 26040 0
malloc-8192 8192 2 1 4 0 1 24576 0
malloc-4096 4096 2 4 85 0 2 24576 0
malloc-4096 4096 3 3 2291 0 2 24576 0
malloc-2048 2048 2 10 180 0 8 24576 0
malloc-1024 1024 13 11 1825 0 16 24576 0
PWD 32 18 738 2180 0 254 24192 0
malloc-64 64 213 165 6622 0 254 24192 0
ttyinq 160 135 15 300 0 62 24000 0
ttyoutq 256 72 18 160 0 62 23040 0
malloc-2048 2048 5 5 20 0 8 20480 0
malloc-1024 1024 17 3 17 0 16 20480 0
malloc-32 32 526 104 646 0 254 20160 0
8 Bucket 80 63 187 1488 0 126 20000 0
malloc-128 128 89 66 2220 0 126 19840 0
SLEEPQUEUE 88 188 36 188 0 126 19712 0
Mountpoints 2752 2 5 2 0 4 19264 0
malloc-384 384 38 12 64 0 30 19200 0
malloc-384 384 36 14 36 0 30 19200 0
malloc-8192 8192 2 0 2 0 1 16384 0
malloc-1024 1024 11 5 60 0 16 16384 0
malloc-512 512 10 22 201 0 30 16384 0
malloc-64 64 157 95 176 0 254 16128 0
vtnet_tx_hdr 24 0 668 190859 0 254 16032 0
udp_inpcb 496 6 26 343 0 254 15872 0
unpcb 256 17 43 1471 0 254 15360 0
malloc-256 256 32 28 2264 0 62 15360 0
tcp_rack_pcb 832 9 9 115 0 16 14976 0
malloc-1024 1024 2 10 22 0 16 12288 0
malloc-1024 1024 8 4 9 0 16 12288 0
malloc-512 512 10 14 22 0 30 12288 0
rtentry 176 34 35 73 0 62 12144 0
malloc-64 64 85 104 428 0 254 12096 0
malloc-64 64 95 94 2725 0 254 12096 0
malloc-32 32 164 214 295 0 254 12096 0
malloc-32 32 303 75 9683 0 254 12096 0
16 Bucket 144 57 27 496 0 62 12096 0
malloc-16 16 346 404 653 0 254 12000 0
ripcb 496 4 20 95 0 254 11904 0
malloc-128 128 7 86 302 0 126 11904 0
kenv 258 15 30 1052 0 30 11610 0
routing nhops 256 27 18 73 0 62 11520 0
malloc-256 256 34 11 1497 0 62 11520 0
malloc-8192 8192 1 0 1 0 1 8192 0
malloc-1024 1024 1 7 53 0 16 8192 0
malloc-512 512 3 13 179 0 30 8192 0
malloc-512 512 0 16 98 0 30 8192 0
malloc-512 512 0 16 227 0 30 8192 0
pf tags 104 1 77 19 0 126 8112 0
PGRP 88 31 61 82 0 126 8096 0
rl_entry 40 71 131 76 0 254 8080 0
sctp_stream_msg_out 112 8 64 284 0 254 8064 0
sctp_laddr 48 0 168 930 0 254 8064 0
tcp_rack_map 112 22 50 246 0 126 8064 0
udpcb 32 6 246 1122 0 254 8064 0
ertt 72 15 97 560 0 126 8064 0
malloc-64 64 13 113 261 0 254 8064 0
malloc-32 32 21 231 68 0 254 8064 0
malloc-32 32 38 214 1100 0 254 8064 0
malloc-32 32 154 98 5045 0 254 8064 0
4 Bucket 48 8 160 103 0 254 8064 0
2 Bucket 32 68 184 823 0 254 8064 0
malloc-16 16 17 483 567 0 254 8000 0
malloc-16 16 16 484 19 0 254 8000 0
malloc-16 16 187 313 1417 0 254 8000 0
malloc-16 16 30 470 28387 0 254 8000 0
malloc-16 16 137 363 4686 0 254 8000 0
malloc-128 128 25 37 347 0 126 7936 0
malloc-128 128 20 42 152 0 126 7936 0
sctp_readq 152 0 52 156 0 254 7904 0
cryptop 280 0 28 31 0 30 7840 0
malloc-384 384 1 19 354 0 30 7680 0
malloc-384 384 1 19 128 0 30 7680 0
FPU_save_area 832 1 8 1 0 16 7488 0
cpuset 104 7 55 7 0 126 6448 0
epoch_record pcpu 256 4 12 4 0 62 4096 0
malloc-2048 2048 1 1 1 0 8 4096 0
malloc-512 512 1 7 8 0 30 4096 0
malloc-512 512 4 4 4 0 30 4096 0
pcpu-16 16 7 249 7 0 254 4096 0
tcptw 88 0 46 3 0 254 4048 0
hostcache 64 2 61 2 0 254 4032 0
syncache 168 0 24 4 0 254 4032 0
UMA Slabs 1 176 10 12 10 0 62 3872 0
mqnode 416 3 6 3 0 30 3744 0
KMAP ENTRY 96 12 27 14 0 0 3744 0
vmem 1856 1 1 1 0 8 3712 0
tfo_ccache_entries 80 1 31 1 0 126 2560 0
SMR CPU 32 3 60 3 0 254 2016 0
SMR SHARED 24 3 60 3 0 254 1512 0
FFS1 dinode 128 0 0 0 0 126 0 0
da_ccb 544 0 0 0 0 16 0 0
ada_ccb 272 0 0 0 0 30 0 0
swblk 136 0 0 0 0 62 0 0
swpctrie 144 0 0 0 0 62 0 0
sctp_asconf_ack 48 0 0 0 0 254 0 0
sctp_asconf 40 0 0 0 0 254 0 0
cdg_qdiffsample 16 0 0 0 0 254 0 0
pf state scrubs 40 0 0 0 0 254 0 0
pf frag entries 40 0 0 0 0 254 0 0
pf frags 248 0 0 0 0 62 0 0
pf table entries 160 0 0 0 0 62 0 0
pf table entry counters 64 0 0 0 0 254 0 0
pf source nodes 136 0 0 0 0 254 0 0
pf state keys 88 0 0 0 0 126 0 0
pf states 304 0 0 0 0 254 0 0
pf mtags 48 0 0 0 0 254 0 0
tcp_log_node 120 0 0 0 0 126 0 0
tcp_log_bucket 176 0 0 0 0 62 0 0
tcpreass 48 0 0 0 0 254 0 0
tfo 4 0 0 0 0 254 0 0
sackhole 32 0 0 0 0 254 0 0
ipq 56 0 0 0 0 254 0 0
IPsec SA lft_c 16 0 0 0 0 254 0 0
itimer 352 0 0 0 0 30 0 0
AIOLIO 272 0 0 0 0 30 0 0
AIOCB 552 0 0 0 0 16 0 0
AIOP 32 0 0 0 0 254 0 0
AIO 208 0 0 0 0 62 0 0
NCLNODE 584 0 0 0 0 16 0 0
TMPFS node 224 0 0 0 0 62 0 0
mqnotifier 216 0 0 0 0 62 0 0
mvdata 64 0 0 0 0 254 0 0
mqueue 248 0 0 0 0 62 0 0
LTS VFS Cache 360 0 0 0 0 30 0 0
L VFS Cache 320 0 0 0 0 30 0 0
STS VFS Cache 144 0 0 0 0 62 0 0
linux_dma_object 24 0 0 0 0 254 0 0
linux_dma_pctrie 144 0 0 0 0 62 0 0
IOMMU_MAP_ENTRY 120 0 0 0 0 126 0 0
ktls_session 192 0 0 0 0 62 0 0
mbuf_jumbo_16k 16384 0 0 0 0 254 0 0
mbuf_jumbo_9k 9216 0 0 0 0 254 0 0
audit_record 1280 0 0 0 0 8 0 0
domainset 40 0 0 0 0 254 0 0
MAC labels 40 0 0 0 0 254 0 0
vnpbuf 2624 0 0 0 0 64 0 0
mdpbuf 2624 0 0 0 0 3 0 0
nfspbuf 2624 0 0 0 0 16 0 0
swwbuf 2624 0 0 0 0 8 0 0
swrbuf 2624 0 0 0 0 16 0 0
umtx_shm 88 0 0 0 0 126 0 0
umtx pi 96 0 0 0 0 126 0 0
rangeset pctrie nodes 144 0 0 0 0 62 0 0
malloc-65536 65536 0 0 0 0 1 0 0
malloc-65536 65536 0 0 0 0 1 0 0
malloc-32768 32768 0 0 0 0 1 0 0
malloc-32768 32768 0 0 0 0 1 0 0
malloc-32768 32768 0 0 0 0 1 0 0
malloc-32768 32768 0 0 0 0 1 0 0
malloc-16384 16384 0 0 0 0 1 0 0
malloc-16384 16384 0 0 0 0 1 0 0
malloc-16384 16384 0 0 0 0 1 0 0
malloc-16384 16384 0 0 0 0 1 0 0
malloc-16384 16384 0 0 0 0 1 0 0
malloc-8192 8192 0 0 0 0 1 0 0
malloc-4096 4096 0 0 0
---
This report is generated by a bot. It may contain errors.
See https://goo.gl/tpsmEJ for more information about syzbot.
syzbot engineers can be reached at syzk...@googlegroups.com.
syzbot will keep track of this issue. See:
https://goo.gl/tpsmEJ#status for how to communicate with syzbot.
syzbot
Jul 10, 2021, 8:54:18 PM7/10/21
to syzkaller-f...@googlegroups.com
syzbot has found a reproducer for the following issue on:
HEAD commit: 58080fbc libalias: fix divide by zero causing panic
dashboard link: https://syzkaller.appspot.com/bug?extid=35528f275f2eea6317cc
syz repro: https://syzkaller.appspot.com/x/repro.syz?x=13a1a73c300000
C reproducer: https://syzkaller.appspot.com/x/repro.c?x=158fd3c4300000
IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+35528f...@syzkaller.appspotmail.com
login: panic: ASan: Invalid access, 4-byte read at 0xfffffe0053d6be30, UMAUseAfterFree(fd)
cpuid = 1
time = 1625964374
KDB: stack backtrace:
db_trace_self_wrapper() at db_trace_self_wrapper+0xc7/frame 0xfffffe00576db050
kdb_backtrace() at kdb_backtrace+0xd3/frame 0xfffffe00576db1b0
vpanic() at vpanic+0x2c5/frame 0xfffffe00576db290
panic() at panic+0xb5/frame 0xfffffe00576db350
__asan_load4_noabort() at __asan_load4_noabort+0x20f/frame 0xfffffe00576db410
sctp_sosend() at sctp_sosend+0x7c9/frame 0xfffffe00576db6a0
sosend() at sosend+0x11e/frame 0xfffffe00576db710
kern_sendit() at kern_sendit+0x58d/frame 0xfffffe00576db880
sendit() at sendit+0x2b0/frame 0xfffffe00576db8d0
sys_sendmsg() at sys_sendmsg+0x17d/frame 0xfffffe00576db9f0
amd64_syscall() at amd64_syscall+0x425/frame 0xfffffe00576dbbf0
fast_syscall_common() at fast_syscall_common+0xf8/frame 0xfffffe00576dbbf0
--- syscall (0, FreeBSD ELF64, nosys), rip = 0x2b42aa, rsp = 0x7fffdffdcf78, rbp = 0x7fffdffdcfb0 ---
KDB: enter: panic
[ thread pid 975 tid 100518 ]
Stopped at kdb_enter+0x6b: movq $0,0x28f9c3a(%rip)
rdx 0xdffff7c000000000
rbx 0
rsp 0xfffffe00576db190
rbp 0xfffffe00576db1b0
rsi 0x1
rdi 0xffffffff840860c0 cov_trace_pc
r8 0x3
r9 0xfffffe00576dace8
r10 0
r11 0xfffffe0092548510
r12 0xfffffe0092548000
r13 0xfffffe00576db201
r14 0xffffffff82c427e0 .str.18
r15 0xffffffff82c427e0 .str.18
rip 0xffffffff8178edfb kdb_enter+0x6b
rflags 0x46
kdb_enter+0x6b: movq $0,0x28f9c3a(%rip)
db> show proc
Process 975 (syz-executor5129495) at 0xfffffe0091fa4000:
(map 0xfffffe00925359f0)
(map.pmap 0xfffffe0092535ab0)
(pmap 0xfffffe0092535b10)
threads: 3
100109 Run CPU 0 syz-executor5129495
100517 S sbwait 0xfffffe0092556924 syz-executor5129495
100518 Run CPU 1 syz-executor5129495
100109 Run CPU 0 syz-executor5129495
100517 S sbwait 0xfffffe0092556924 syz-executor5129495
100518 Run CPU 1 syz-executor5129495
787 785 785 0 S nanslp 0xffffffff84055901 syz-executor5129495
785 783 785 0 Ss pause 0xfffffe0091fa45e8 csh
783 694 783 0 Ss select 0xfffffe0092076540 sshd
758 1 758 0 Ss+ ttyin 0xfffffe00583ee4b0 getty
757 1 757 0 Ss+ ttyin 0xfffffe00583ee8b0 getty
756 1 756 0 Ss+ ttyin 0xfffffe00583eecb0 getty
755 1 755 0 Ss+ ttyin 0xfffffe00583960b0 getty
754 1 754 0 Ss+ ttyin 0xfffffe00583964b0 getty
753 1 753 0 Ss+ ttyin 0xfffffe00583968b0 getty
752 1 752 0 Ss+ ttyin 0xfffffe0058396cb0 getty
698 1 698 0 Ss nanslp 0xffffffff84055900 cron
694 1 694 0 Ss select 0xfffffe008fa75340 sshd
507 1 507 0 Ss select 0xfffffe0091e5ed40 syslogd
436 1 436 0 Ss select 0xfffffe008fa756c0 devd
435 1 435 65 Ss select 0xfffffe008fa75540 dhclient
350 1 350 0 Ss select 0xfffffe008fa755c0 dhclient
347 1 347 0 Ss select 0xfffffe0091e5eb40 dhclient
100097 D sdflush 0xfffffe008f8b7ce8 [/ worker]
100086 D umarcl 0xffffffff81e7e640 [uma]
16 0 0 0 DL pftm 0xffffffff84792d30 [pf purge]
0 0 0 0 DLs (threaded) [kernel]
100013 D - 0xfffffe000791b400 [inm_free taskq]
100015 D - 0xfffffe000791b200 [kqueue_ctx taskq]
100016 D - 0xfffffe000791b100 [linuxkpi_irq_wq]
100017 D - 0xfffffe000791b000 [aiod_kick taskq]
100076 D - 0xfffffe005838de00 [acpi_task_0]
100077 D - 0xfffffe005838de00 [acpi_task_1]
100078 D - 0xfffffe005838de00 [acpi_task_2]
Process 975 (syz-executor5129495) thread 0xfffffe008fa74020 (100109)
exclusive sleep mutex umtxql (umtxql) r = 0 (0xffffffff84078580) locked @ /syzkaller/managers/main/kernel/sys/kern/kern_umtx.c:946
vfscache 3 1025K 3
pcb 25 539K 451
inodedep 13 517K 72
vmem 3 138K 4
pagedep 7 130K 18
tfo_ccache 1 128K 1
sem 4 106K 4
DEVFS1 103 103K 112
kdtrace 169 34K 1495
temp 18 33K 1631
hostcache 1 32K 1
shm 1 32K 1
DEVFS3 122 31K 132
BPF 10 18K 10
KTRACE 100 13K 100
routetbl 50 11K 176
rpc 2 8K 2
bmsafemap 1 8K 42
evdev 4 4K 4
filedesc 1 4K 1
lltable 11 4K 11
pf_ifnet 5 3K 6
fpukern_ctx 3 3K 3
in6_multi 25 3K 25
terminal 11 3K 11
kqueue 44 3K 978
pwddesc 44 3K 976
session 19 3K 32
uidinfo 3 3K 9
lockf 16 2K 26
Unitno 27 2K 39
dirrem 4 1K 28
ipsec 3 1K 3
indirdep 3 1K 4
nhops 6 1K 6
diradd 5 1K 36
crypto 4 1K 4
ip6ndp 4 1K 5
encap_export_host 12 1K 12
newdirblk 4 1K 8
mkdir 4 1K 16
freefile 4 1K 26
in_multi 2 1K 4
pfil 4 1K 4
cdev 2 1K 2
sctp_atcl 1 1K 187
chacha20random 1 1K 1
osd 7 1K 18
inpcbpolicy 11 1K 324
sctp_ifn 2 1K 6
DEVFS 9 1K 10
mld 2 1K 2
igmp 2 1K 2
vnodes 1 1K 1
procdesc 1 1K 6
sctp_vrf 1 1K 1
freework 1 1K 26
vnet 1 1K 1
entropy 2 1K 35
Per-cpu 1 1K 1
sctp_athm 1 1K 187
p1003.1b 1 1K 1
filecaps 1 1K 66
tcp_do 0 0K 0
tcp_fsb 0 0K 0
sctp_mcore 0 0K 0
sctp_socko 0 0K 0
sctp_iter 0 0K 4
sctp_mvrf 0 0K 0
sctp_timw 0 0K 0
sctp_cpal 0 0K 0
sctp_aadr 0 0K 0
sctp_stro 0 0K 0
sctp_stri 0 0K 0
sctp_map 0 0K 0
pf_table 0 0K 0
pf_rule 0 0K 0
pf_altq 0 0K 0
pf_osfp 0 0K 0
pf_temp 0 0K 0
savedino 0 0K 24
freefrag 0 0K 1
allocindir 0 0K 0
ip6opt 0 0K 3
ip_moptions 0 0K 0
in_mfilter 0 0K 0
VN POLL 0 0K 0
twsbuf 0 0K 0
statfs 0 0K 199
mbuf_jumbo_page 4096 8320 987 14922 0 254 38121472 0
mbuf 256 8578 992 18622 0 254 2449920 0
pbuf 2624 0 794 0 0 2 2083456 0
BUF TRIE 144 177 11583 564 0 62 1693440 0
malloc-384 384 4178 12 4178 0 30 1608960 0
malloc-128 128 11300 46 11380 0 126 1452288 0
malloc-4096 4096 326 2 490 0 2 1343488 0
UMA Slabs 0 112 10123 26 10123 0 126 1136688 0
vmem btag 56 15152 87 15152 0 254 853384 0
FFS inode 1160 486 32 513 0 8 600880 0
RADIX NODE 144 2987 256 24835 0 62 466992 0
VM OBJECT 264 858 102 15030 0 30 253440 0
256 Bucket 2048 109 13 10893 0 8 249856 0
VNODE 448 516 33 545 0 30 245952 0
malloc-16 16 14031 469 14102 0 254 232000 0
malloc-4096 4096 51 5 1515 0 2 229376 0
DEVCTL 1024 0 220 125 0 0 225280 0
malloc-256 256 743 67 1109 0 62 207360 0
malloc-65536 65536 0 3 182 0 1 196608 0
malloc-128 128 1249 53 28954 0 126 166656 0
FFS2 dinode 256 486 39 512 0 62 134400 0
malloc-128 128 1001 22 2002 0 126 130944 0
ksiginfo 112 41 1003 58 0 126 116928 0
MAP ENTRY 96 777 441 41282 0 126 116928 0
malloc-1024 1024 106 6 115 0 16 114688 0
S VFS Cache 104 973 80 1012 0 126 109512 0
malloc-2048 2048 7 43 1886 0 8 102400 0
malloc-32768 32768 0 3 130 0 1 98304 0
malloc-16384 16384 3 3 178 0 1 98304 0
VMSPACE 2544 21 12 954 0 4 83952 0
PROC 1336 43 14 975 0 8 76152 0
malloc-8192 8192 6 3 135 0 1 73728 0
g_bio 408 0 170 4924 0 30 69360 0
filedesc0 1072 44 19 976 0 8 67536 0
mbuf_cluster 2048 30 2 30 0 254 65536 0
malloc-65536 65536 1 0 1 0 1 65536 0
malloc-1024 1024 8 36 516 0 16 45056 0
malloc-64 64 556 137 16089 0 254 44352 0
malloc-128 128 295 46 463 0 126 43648 0
malloc-256 256 136 29 884 0 62 42240 0
32 Bucket 256 47 118 6043 0 62 42240 0
clpbuf 2624 0 16 25 0 16 41984 0
malloc-256 256 105 45 961 0 62 38400 0
socket 944 20 20 1700 0 254 37760 0
malloc-32768 32768 0 1 1 0 1 32768 0
malloc-8192 8192 4 0 4 0 1 32768 0
malloc-64 64 478 26 690 0 254 32256 0
malloc-384 384 74 6 103 0 30 30720 0
malloc-1024 1024 13 15 1095 0 16 28672 0
malloc-2048 2048 3 9 191 0 8 24576 0
malloc-64 64 19 359 581 0 254 24192 0
TURNSTILE 136 144 24 144 0 62 22848 0
malloc-4096 4096 3 2 203 0 2 20480 0
malloc-2048 2048 8 2 199 0 8 20480 0
SLEEPQUEUE 88 144 48 144 0 126 16896 0
malloc-16384 16384 1 0 1 0 1 16384 0
malloc-2048 2048 4 4 81 0 8 16384 0
malloc-1024 1024 11 5 11 0 16 16384 0
ertt_txseginfo 40 1 403 459 0 254 16160 0
malloc-64 64 129 123 2052 0 254 16128 0
malloc-32 32 23 481 747 0 254 16128 0
8 Bucket 80 48 152 615 0 126 16000 0
sctp_ep 1280 1 11 187 0 254 15360 0
malloc-384 384 36 4 36 0 30 15360 0
malloc-256 256 32 28 673 0 62 15360 0
tcpcb 1080 3 11 7 0 254 15120 0
malloc-2048 2048 3 3 12 0 8 12288 0
malloc-64 64 146 43 149 0 254 12096 0
malloc-32 32 140 238 250 0 254 12096 0
16 Bucket 144 36 48 236 0 62 12096 0
Files 80 69 81 6988 0 126 12000 0
malloc-16 16 326 424 560 0 254 12000 0
udp_inpcb 496 6 18 126 0 254 11904 0
malloc-128 128 77 16 100 0 126 11904 0
kenv 258 15 30 1026 0 30 11610 0
unpcb 256 7 38 1172 0 254 11520 0
malloc-384 384 19 11 21 0 30 11520 0
malloc-256 256 14 31 137 0 62 11520 0
malloc-256 256 15 30 74 0 62 11520 0
malloc-1024 1024 2 6 10 0 16 8192 0
malloc-1024 1024 1 7 17 0 16 8192 0
malloc-512 512 1 15 2 0 30 8192 0
malloc-512 512 3 13 15 0 30 8192 0
malloc-512 512 4 12 4 0 30 8192 0
rtentry 176 13 33 17 0 62 8096 0
PGRP 88 19 73 32 0 126 8096 0
rl_entry 40 34 168 34 0 254 8080 0
udpcb 32 7 245 313 0 254 8064 0
ertt 72 3 109 7 0 126 8064 0
PWD 32 10 242 102 0 254 8064 0
malloc-64 64 11 115 60 0 254 8064 0
malloc-64 64 7 119 12 0 254 8064 0
malloc-32 32 42 210 92 0 254 8064 0
malloc-32 32 17 235 41 0 254 8064 0
malloc-32 32 38 214 740 0 254 8064 0
4 Bucket 48 6 162 55 0 254 8064 0
2 Bucket 32 47 205 501 0 254 8064 0
vtnet_tx_hdr 24 0 334 2621 0 254 8016 0
malloc-16 16 5 495 13 0 254 8000 0
malloc-16 16 9 491 218 0 254 8000 0
ripcb 496 1 15 4 0 254 7936 0
udplite_inpcb 496 1 15 187 0 254 7936 0
tcp_inpcb 496 3 13 7 0 254 7936 0
malloc-128 128 22 40 70 0 126 7936 0
malloc-128 128 12 50 18 0 126 7936 0
routing nhops 256 10 20 17 0 62 7680 0
mbuf_packet 256 0 30 94 0 254 7680 0
malloc-384 384 1 19 349 0 30 7680 0
malloc-384 384 1 19 187 0 30 7680 0
malloc-256 256 18 12 463 0 62 7680 0
hostcache 64 1 62 1 0 254 4032 0
syncache 168 0 24 5 0 254 4032 0
KNOTE 160 0 25 8 0 62 4000 0
malloc-16 16 12 238 15 0 254 4000 0
UMA Slabs 1 176 8 14 8 0 62 3872 0
malloc-384 384 1 9 2 0 30 3840 0
sctp_readq 152 0 0 0 0 254 0 0
sctp_chunk 152 0 0 0 0 254 0 0
sctp_raddr 736 0 0 0 0 254 0 0
sctp_asoc 2288 0 0 0 0 254 0 0
tcp_rack_map 112 0 0 0 0 126 0 0
tcp_bbr_pcb 832 0 0 0 0 16 0 0
tcp_bbr_map 128 0 0 0 0 126 0 0
malloc-4096 4096 0 0 0 0 2 0 0
malloc-512 512 0 0 0 0 30 0 0
malloc-512 512 0 0 0 0 30 0 0
malloc-32 32 0 0 0 0 254 0 0
malloc-16 16 0 0 0 0 254 0 0
pcpu-32 32 0 0 0 0 254 0 0
pcpu-4 4 0 0 0 0 254 0 0
fakepg 104 0 0 0 0 126 0 0
UMA Hash 256 0 0 0 0 62 0 0
HEAD commit: 58080fbc libalias: fix divide by zero causing panic
git tree: https://github.com/freebsd/freebsd-src.git main
console output: https://syzkaller.appspot.com/x/log.txt?x=17b0c06c300000
dashboard link: https://syzkaller.appspot.com/bug?extid=35528f275f2eea6317cc
syz repro: https://syzkaller.appspot.com/x/repro.syz?x=13a1a73c300000
C reproducer: https://syzkaller.appspot.com/x/repro.c?x=158fd3c4300000
IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+35528f...@syzkaller.appspotmail.com
cpuid = 1
time = 1625964374
KDB: stack backtrace:
db_trace_self_wrapper() at db_trace_self_wrapper+0xc7/frame 0xfffffe00576db050
kdb_backtrace() at kdb_backtrace+0xd3/frame 0xfffffe00576db1b0
vpanic() at vpanic+0x2c5/frame 0xfffffe00576db290
panic() at panic+0xb5/frame 0xfffffe00576db350
__asan_load4_noabort() at __asan_load4_noabort+0x20f/frame 0xfffffe00576db410
sctp_sosend() at sctp_sosend+0x7c9/frame 0xfffffe00576db6a0
sosend() at sosend+0x11e/frame 0xfffffe00576db710
kern_sendit() at kern_sendit+0x58d/frame 0xfffffe00576db880
sendit() at sendit+0x2b0/frame 0xfffffe00576db8d0
sys_sendmsg() at sys_sendmsg+0x17d/frame 0xfffffe00576db9f0
amd64_syscall() at amd64_syscall+0x425/frame 0xfffffe00576dbbf0
fast_syscall_common() at fast_syscall_common+0xf8/frame 0xfffffe00576dbbf0
--- syscall (0, FreeBSD ELF64, nosys), rip = 0x2b42aa, rsp = 0x7fffdffdcf78, rbp = 0x7fffdffdcfb0 ---
KDB: enter: panic
[ thread pid 975 tid 100518 ]
Stopped at kdb_enter+0x6b: movq $0,0x28f9c3a(%rip)
db>
db> set $lines = 0
db> set $maxwidth = 0
db> show registers
cs 0x20
ds 0x3b
es 0x3b
fs 0x13
gs 0x1b
ss 0x28
rax 0x12
rcx 0x3334dc37bbfd0394
db> set $lines = 0
db> set $maxwidth = 0
db> show registers
cs 0x20
ds 0x3b
es 0x3b
fs 0x13
gs 0x1b
ss 0x28
rax 0x12
rdx 0xdffff7c000000000
rbx 0
rsp 0xfffffe00576db190
rbp 0xfffffe00576db1b0
rsi 0x1
rdi 0xffffffff840860c0 cov_trace_pc
r8 0x3
r9 0xfffffe00576dace8
r10 0
r11 0xfffffe0092548510
r12 0xfffffe0092548000
r13 0xfffffe00576db201
r14 0xffffffff82c427e0 .str.18
r15 0xffffffff82c427e0 .str.18
rip 0xffffffff8178edfb kdb_enter+0x6b
rflags 0x46
kdb_enter+0x6b: movq $0,0x28f9c3a(%rip)
db> show proc
Process 975 (syz-executor5129495) at 0xfffffe0091fa4000:
state: NORMAL
uid: 0 gids: 0, 0, 5
parent: pid 787 at 0xfffffe009202aa70
uid: 0 gids: 0, 0, 5
ABI: FreeBSD ELF64
flag: 0x10000080 flag2: 0
arguments: ./syz-executor512949556
flag: 0x10000080 flag2: 0
reaper: 0xfffffe0053d51538 reapsubtree: 1
sigparent: 20
vmspace: 0xfffffe00925359f0
sigparent: 20
(map 0xfffffe00925359f0)
(map.pmap 0xfffffe0092535ab0)
(pmap 0xfffffe0092535b10)
threads: 3
100109 Run CPU 0 syz-executor5129495
100517 S sbwait 0xfffffe0092556924 syz-executor5129495
100518 Run CPU 1 syz-executor5129495
db> ps
pid ppid pgrp uid state wmesg wchan cmd
975 787 785 0 R (threaded) syz-executor5129495
pid ppid pgrp uid state wmesg wchan cmd
100109 Run CPU 0 syz-executor5129495
100517 S sbwait 0xfffffe0092556924 syz-executor5129495
100518 Run CPU 1 syz-executor5129495
787 785 785 0 S nanslp 0xffffffff84055901 syz-executor5129495
785 783 785 0 Ss pause 0xfffffe0091fa45e8 csh
783 694 783 0 Ss select 0xfffffe0092076540 sshd
760 1 760 0 Ss+ ttyin 0xfffffe0056fe0cb0 getty
759 1 759 0 Ss+ ttyin 0xfffffe00583ee0b0 getty
758 1 758 0 Ss+ ttyin 0xfffffe00583ee4b0 getty
757 1 757 0 Ss+ ttyin 0xfffffe00583ee8b0 getty
756 1 756 0 Ss+ ttyin 0xfffffe00583eecb0 getty
755 1 755 0 Ss+ ttyin 0xfffffe00583960b0 getty
754 1 754 0 Ss+ ttyin 0xfffffe00583964b0 getty
753 1 753 0 Ss+ ttyin 0xfffffe00583968b0 getty
752 1 752 0 Ss+ ttyin 0xfffffe0058396cb0 getty
698 1 698 0 Ss nanslp 0xffffffff84055900 cron
694 1 694 0 Ss select 0xfffffe008fa75340 sshd
507 1 507 0 Ss select 0xfffffe0091e5ed40 syslogd
436 1 436 0 Ss select 0xfffffe008fa756c0 devd
435 1 435 65 Ss select 0xfffffe008fa75540 dhclient
350 1 350 0 Ss select 0xfffffe008fa755c0 dhclient
347 1 347 0 Ss select 0xfffffe0091e5eb40 dhclient
23 0 0 0 DL syncer 0xffffffff8417ba40 [syncer]
22 0 0 0 DL vlruwt 0xfffffe0056ab3000 [vnlru]
21 0 0 0 DL (threaded) [bufdaemon]
100083 D qsleep 0xffffffff84179940 [bufdaemon]
100084 D - 0xffffffff83411f80 [bufspacedaemon-0]
100083 D qsleep 0xffffffff84179940 [bufdaemon]
100097 D sdflush 0xfffffe008f8b7ce8 [/ worker]
20 0 0 0 DL psleep 0xffffffff841b1c80 [vmdaemon]
19 0 0 0 DL (threaded) [pagedaemon]
100081 D psleep 0xffffffff841a57b8 [dom0]
100085 D launds 0xffffffff841a57c4 [laundry: dom0]
19 0 0 0 DL (threaded) [pagedaemon]
100081 D psleep 0xffffffff841a57b8 [dom0]
100086 D umarcl 0xffffffff81e7e640 [uma]
18 0 0 0 DL - 0xffffffff83e0caa0 [rand_harvestq]
17 0 0 0 DL waiting 0xffffffff84abd460 [sctp_iterator]
16 0 0 0 DL pftm 0xffffffff84792d30 [pf purge]
100000 D swapin 0xffffffff84029dc0 [swapper]
100005 D - 0xfffffe0053c0d800 [softirq_0]
100006 D - 0xfffffe0053c0d600 [softirq_1]
100007 D - 0xfffffe0053c0d400 [if_io_tqg_0]
100008 D - 0xfffffe0053c0d200 [if_io_tqg_1]
100009 D - 0xfffffe0053c0d000 [if_config_tqg_0]
100012 D - 0xfffffe000791b500 [thread taskq]
100005 D - 0xfffffe0053c0d800 [softirq_0]
100006 D - 0xfffffe0053c0d600 [softirq_1]
100007 D - 0xfffffe0053c0d400 [if_io_tqg_0]
100008 D - 0xfffffe0053c0d200 [if_io_tqg_1]
100009 D - 0xfffffe0053c0d000 [if_config_tqg_0]
100013 D - 0xfffffe000791b400 [inm_free taskq]
100015 D - 0xfffffe000791b200 [kqueue_ctx taskq]
100016 D - 0xfffffe000791b100 [linuxkpi_irq_wq]
100017 D - 0xfffffe000791b000 [aiod_kick taskq]
100018 D - 0xfffffe0053df6e00 [in6m_free taskq]
100019 D - 0xfffffe0053df6d00 [pci_hp taskq]
100020 D - 0xfffffe0053df6c00 [linuxkpi_short_wq_0]
100021 D - 0xfffffe0053df6c00 [linuxkpi_short_wq_1]
100022 D - 0xfffffe0053df6c00 [linuxkpi_short_wq_2]
100023 D - 0xfffffe0053df6c00 [linuxkpi_short_wq_3]
100024 D - 0xfffffe0053df6b00 [linuxkpi_long_wq_0]
100025 D - 0xfffffe0053df6b00 [linuxkpi_long_wq_1]
100026 D - 0xfffffe0053df6b00 [linuxkpi_long_wq_2]
100027 D - 0xfffffe0053df6b00 [linuxkpi_long_wq_3]
100036 D - 0xfffffe0053df6a00 [firmware taskq]
100040 D - 0xfffffe0053df6900 [crypto_0]
100041 D - 0xfffffe0053df6900 [crypto_1]
100057 D - 0xfffffe0053df6700 [vtnet0 rxq 0]
100058 D - 0xfffffe0053df6600 [vtnet0 txq 0]
100059 D - 0xfffffe0053df6500 [vtnet0 rxq 1]
100060 D - 0xfffffe0053df6400 [vtnet0 txq 1]
100062 D vtbslp 0xfffffe0056fc0380 [virtio_balloon]
100066 D - 0xfffffe0053df6300 [mca taskq]
100071 D - 0xffffffff82c49761 [deadlkres]
100019 D - 0xfffffe0053df6d00 [pci_hp taskq]
100020 D - 0xfffffe0053df6c00 [linuxkpi_short_wq_0]
100021 D - 0xfffffe0053df6c00 [linuxkpi_short_wq_1]
100022 D - 0xfffffe0053df6c00 [linuxkpi_short_wq_2]
100023 D - 0xfffffe0053df6c00 [linuxkpi_short_wq_3]
100024 D - 0xfffffe0053df6b00 [linuxkpi_long_wq_0]
100025 D - 0xfffffe0053df6b00 [linuxkpi_long_wq_1]
100026 D - 0xfffffe0053df6b00 [linuxkpi_long_wq_2]
100027 D - 0xfffffe0053df6b00 [linuxkpi_long_wq_3]
100036 D - 0xfffffe0053df6a00 [firmware taskq]
100040 D - 0xfffffe0053df6900 [crypto_0]
100041 D - 0xfffffe0053df6900 [crypto_1]
100057 D - 0xfffffe0053df6700 [vtnet0 rxq 0]
100058 D - 0xfffffe0053df6600 [vtnet0 txq 0]
100059 D - 0xfffffe0053df6500 [vtnet0 rxq 1]
100060 D - 0xfffffe0053df6400 [vtnet0 txq 1]
100062 D vtbslp 0xfffffe0056fc0380 [virtio_balloon]
100066 D - 0xfffffe0053df6300 [mca taskq]
100076 D - 0xfffffe005838de00 [acpi_task_0]
100077 D - 0xfffffe005838de00 [acpi_task_1]
100078 D - 0xfffffe005838de00 [acpi_task_2]
100079 D - 0xfffffe0053df6800 [CAM taskq]
db> show all locks
Process 975 (syz-executor5129495) thread 0xfffffe008fa74020 (100109)
exclusive sleep mutex umtxql (umtxql) r = 0 (0xffffffff84078580) locked @ /syzkaller/managers/main/kernel/sys/kern/kern_umtx.c:946
db> show malloc
Type InUse MemUse Requests
pf_hash 5 11524K 5
devbuf 4216 4338K 4244
tcp_hpts 6 3201K 6
sysctloid 34320 2027K 34387
vtbuf 24 1968K 46
kobj 326 1304K 486
newblk 654 1188K 717
Type InUse MemUse Requests
pf_hash 5 11524K 5
devbuf 4216 4338K 4244
tcp_hpts 6 3201K 6
sysctloid 34320 2027K 34387
vtbuf 24 1968K 46
kobj 326 1304K 486
vfscache 3 1025K 3
pcb 25 539K 451
inodedep 13 517K 72
ufs_quota 1 512K 1
vfs_hash 1 512K 1
callout 2 512K 2
intr 4 472K 4
subproc 102 198K 1034
vfs_hash 1 512K 1
callout 2 512K 2
intr 4 472K 4
acpica 1674 184K 54806
vnet_data 1 168K 1
tidhash 3 141K 3
linker 357 140K 385
vnet_data 1 168K 1
tidhash 3 141K 3
vmem 3 138K 4
pagedep 7 130K 18
tfo_ccache 1 128K 1
sem 4 106K 4
DEVFS1 103 103K 112
bus 986 80K 3469
mtx_pool 2 72K 2
syncache 1 68K 1
mtx_pool 2 72K 2
acpitask 1 64K 1
ddb_capture 1 64K 1
module 510 64K 510
umtx 286 36K 286
ddb_capture 1 64K 1
module 510 64K 510
kdtrace 169 34K 1495
temp 18 33K 1631
hostcache 1 32K 1
shm 1 32K 1
DEVFS3 122 31K 132
msg 4 30K 4
gtaskqueue 18 26K 18
kbdmux 6 22K 6
DEVFS_RULE 56 20K 56
gtaskqueue 18 26K 18
kbdmux 6 22K 6
BPF 10 18K 10
ufs_mount 5 17K 6
proc 3 17K 3
tty 16 16K 16
ithread 99 16K 99
bus-sc 33 14K 1684
proc 3 17K 3
tty 16 16K 16
ithread 99 16K 99
KTRACE 100 13K 100
kenv 95 12K 95
eventhandler 133 12K 133
ifaddr 30 12K 32
eventhandler 133 12K 133
routetbl 50 11K 176
CAM queue 5 11K 1528
rman 84 10K 425
GEOM 60 10K 489
rman 84 10K 425
GEOM 60 10K 489
UART 12 9K 12
devstat 4 9K 4
ksem 1 8K 1
devstat 4 9K 4
rpc 2 8K 2
bmsafemap 1 8K 42
shmfd 1 8K 1
pfs_vncache 1 8K 1
pfs_nodes 20 8K 20
audit_evclass 236 8K 294
pfs_vncache 1 8K 1
pfs_nodes 20 8K 20
audit_evclass 236 8K 294
taskqueue 60 7K 60
sglist 5 7K 5
sglist 5 7K 5
CAM DEV 3 6K 510
cred 22 6K 244
ufs_dirhash 24 5K 24
UMA 270 5K 270
vt 11 5K 11
ifnet 3 5K 3
UMA 270 5K 270
vt 11 5K 11
memdesc 1 4K 1
MCA 32 4K 32
plimit 16 4K 338
MCA 32 4K 32
evdev 4 4K 4
filedesc 1 4K 1
acpisem 28 4K 28
hhook 15 4K 17
ether_multi 40 4K 50
hhook 15 4K 17
lltable 11 4K 11
pf_ifnet 5 3K 6
fpukern_ctx 3 3K 3
in6_multi 25 3K 25
terminal 11 3K 11
kqueue 44 3K 978
pwddesc 44 3K 976
session 19 3K 32
uidinfo 3 3K 9
local_apic 1 2K 1
io_apic 1 2K 1
ipsec-saq 2 2K 2
selfd 27 2K 13135
io_apic 1 2K 1
ipsec-saq 2 2K 2
lockf 16 2K 26
Unitno 27 2K 39
CAM XPT 22 2K 543
proc-args 36 2K 495
ipsecpolicy 2 2K 2
acpidev 20 2K 20
acpidev 20 2K 20
msi 9 2K 9
clone 9 2K 9
softdep 1 1K 1
clone 9 2K 9
dirrem 4 1K 28
sahead 1 1K 1
secasvar 1 1K 1
vnodemarker 2 1K 14
secasvar 1 1K 1
NFSD session 1 1K 1
CAM periph 4 1K 271
select 7 1K 29
ipsec 3 1K 3
indirdep 3 1K 4
nhops 6 1K 6
toponodes 6 1K 6
isadev 6 1K 6
mount 16 1K 89
pci_link 10 1K 10
sctp_ifa 5 1K 6
isadev 6 1K 6
mount 16 1K 89
pci_link 10 1K 10
diradd 5 1K 36
crypto 4 1K 4
ip6ndp 4 1K 5
encap_export_host 12 1K 12
newdirblk 4 1K 8
mkdir 4 1K 16
freefile 4 1K 26
in_multi 2 1K 4
pfil 4 1K 4
cdev 2 1K 2
sctp_atcl 1 1K 187
chacha20random 1 1K 1
osd 7 1K 18
inpcbpolicy 11 1K 324
sctp_ifn 2 1K 6
NFSD lckfile 1 1K 1
NFSD V4client 1 1K 1
DEVFSP 4 1K 9
NFSD V4client 1 1K 1
DEVFS 9 1K 10
mld 2 1K 2
igmp 2 1K 2
vnodes 1 1K 1
CAM SIM 2 1K 2
ktls 1 1K 1
feeder 7 1K 7
tcpfunc 3 1K 3
loginclass 3 1K 7
ktls 1 1K 1
feeder 7 1K 7
tcpfunc 3 1K 3
prison 6 1K 6
lkpikmalloc 5 1K 6
aesni_data 2 1K 2
apmdev 1 1K 1
atkbddev 2 1K 2
CAM dev queue 2 1K 2
xform 2 1K 49
lkpikmalloc 5 1K 6
aesni_data 2 1K 2
apmdev 1 1K 1
atkbddev 2 1K 2
CAM dev queue 2 1K 2
CAM I/O Scheduler 1 1K 1
CAM path 4 1K 1034
soname 5 1K 3636
CAM path 4 1K 1034
procdesc 1 1K 6
pmchooks 1 1K 1
nexusdev 7 1K 7
tun 3 1K 3
nexusdev 7 1K 7
sctp_vrf 1 1K 1
freework 1 1K 26
vnet 1 1K 1
entropy 2 1K 35
acpiintr 1 1K 1
pmc 1 1K 1
sctp_atky 1 1K 187
pmc 1 1K 1
cpus 2 1K 2
vnet_data_free 1 1K 1
iov 2 1K 14223
vnet_data_free 1 1K 1
Per-cpu 1 1K 1
sctp_athm 1 1K 187
p1003.1b 1 1K 1
filecaps 1 1K 66
tcp_do 0 0K 0
tcp_fsb 0 0K 0
sctp_mcore 0 0K 0
sctp_socko 0 0K 0
sctp_iter 0 0K 4
sctp_mvrf 0 0K 0
sctp_timw 0 0K 0
sctp_cpal 0 0K 0
sctp_cmsg 0 0K 0
sctp_stre 0 0K 0
sctp_athi 0 0K 0
sctp_a_it 0 0K 4
sctp_stre 0 0K 0
sctp_athi 0 0K 0
sctp_aadr 0 0K 0
sctp_stro 0 0K 0
sctp_stri 0 0K 0
sctp_map 0 0K 0
cubic data 0 0K 0
dctcp data 0 0K 0
htcp data 0 0K 0
vegas data 0 0K 0
pf_table 0 0K 0
pf_rule 0 0K 0
pf_altq 0 0K 0
pf_osfp 0 0K 0
pf_temp 0 0K 0
cdg data 0 0K 0
mqdata 0 0K 0
chd data 0 0K 0
mqdata 0 0K 0
sentinel 0 0K 0
jfsync 0 0K 0
jtrunc 0 0K 0
sbdep 0 0K 5
jfsync 0 0K 0
jtrunc 0 0K 0
jsegdep 0 0K 0
jseg 0 0K 0
jfreefrag 0 0K 0
jfreeblk 0 0K 0
jnewblk 0 0K 0
jmvref 0 0K 0
jremref 0 0K 0
jaddref 0 0K 0
freedep 0 0K 0
freeblks 0 0K 25
jseg 0 0K 0
jfreefrag 0 0K 0
jfreeblk 0 0K 0
jnewblk 0 0K 0
jmvref 0 0K 0
jremref 0 0K 0
jaddref 0 0K 0
freedep 0 0K 0
freefrag 0 0K 1
allocindir 0 0K 0
ip6_msource 0 0K 0
ip6_moptions 0 0K 0
in6_mfilter 0 0K 0
frag6 0 0K 0
tcplog 0 0K 0
tcp_hwpace 0 0K 0
acpipwr 0 0K 0
acpi_perf 0 0K 0
LRO 0 0K 0
newreno data 0 0K 0
ip_msource 0 0K 0
ip6_moptions 0 0K 0
in6_mfilter 0 0K 0
frag6 0 0K 0
tcplog 0 0K 0
tcp_hwpace 0 0K 0
acpipwr 0 0K 0
acpi_perf 0 0K 0
LRO 0 0K 0
newreno data 0 0K 0
ip_moptions 0 0K 0
in_mfilter 0 0K 0
ipid 0 0K 0
80211scan 0 0K 0
80211ratectl 0 0K 0
80211power 0 0K 0
80211nodeie 0 0K 0
80211node 0 0K 0
80211mesh_gt 0 0K 0
80211mesh_rt 0 0K 0
80211perr 0 0K 0
80211prep 0 0K 0
80211preq 0 0K 0
80211dfs 0 0K 0
80211crypto 0 0K 0
80211vap 0 0K 0
iflib 0 0K 0
vlan 0 0K 0
gif 0 0K 0
ifdescr 0 0K 0
zlib 0 0K 0
fadvise 0 0K 0
80211scan 0 0K 0
80211ratectl 0 0K 0
80211power 0 0K 0
80211nodeie 0 0K 0
80211node 0 0K 0
80211mesh_gt 0 0K 0
80211mesh_rt 0 0K 0
80211perr 0 0K 0
80211prep 0 0K 0
80211preq 0 0K 0
80211dfs 0 0K 0
80211crypto 0 0K 0
80211vap 0 0K 0
iflib 0 0K 0
vlan 0 0K 0
gif 0 0K 0
ifdescr 0 0K 0
zlib 0 0K 0
VN POLL 0 0K 0
twsbuf 0 0K 0
statfs 0 0K 199
namei_tracker 0 0K 0
export_host 0 0K 0
cl_savebuf 0 0K 3
export_host 0 0K 0
cl_savebuf 0 0K 3
twe_commands 0 0K 0
twa_commands 0 0K 0
tcp_log_dev 0 0K 0
twa_commands 0 0K 0
midi buffers 0 0K 0
mixer 0 0K 0
ac97 0 0K 0
hdacc 0 0K 0
hdac 0 0K 0
hdaa 0 0K 0
acpicmbat 0 0K 0
SIIS driver 0 0K 0
CAM CCB 0 0K 1879
mixer 0 0K 0
ac97 0 0K 0
hdacc 0 0K 0
hdac 0 0K 0
hdaa 0 0K 0
acpicmbat 0 0K 0
SIIS driver 0 0K 0
PUC 0 0K 0
ppbusdev 0 0K 0
agtiapi_MemAlloc malloc 0 0K 0
biobuf 0 0K 0
aios 0 0K 0
lio 0 0K 0
acl 0 0K 0
osti_cacheable 0 0K 0
mbuf_tag 0 0K 27
ppbusdev 0 0K 0
agtiapi_MemAlloc malloc 0 0K 0
biobuf 0 0K 0
aios 0 0K 0
lio 0 0K 0
acl 0 0K 0
osti_cacheable 0 0K 0
tempbuff 0 0K 0
tempbuff 0 0K 0
ag_tgt_map_t malloc 0 0K 0
ag_slr_map_t malloc 0 0K 0
lDevFlags * malloc 0 0K 0
tiDeviceHandle_t * malloc 0 0K 0
ag_portal_data_t malloc 0 0K 0
ag_device_t malloc 0 0K 0
STLock malloc 0 0K 0
CCB List 0 0K 0
sr_iov 0 0K 0
OCS 0 0K 0
OCS 0 0K 0
nvme 0 0K 0
nvd 0 0K 0
netmap 0 0K 0
mwldev 0 0K 0
MVS driver 0 0K 0
CAM ccb queue 0 0K 0
mrsasbuf 0 0K 0
mpt_user 0 0K 0
mps_user 0 0K 0
accf 0 0K 0
pts 0 0K 0
ioctlops 0 0K 86
tempbuff 0 0K 0
ag_tgt_map_t malloc 0 0K 0
ag_slr_map_t malloc 0 0K 0
lDevFlags * malloc 0 0K 0
tiDeviceHandle_t * malloc 0 0K 0
ag_portal_data_t malloc 0 0K 0
ag_device_t malloc 0 0K 0
STLock malloc 0 0K 0
CCB List 0 0K 0
sr_iov 0 0K 0
OCS 0 0K 0
OCS 0 0K 0
nvme 0 0K 0
nvd 0 0K 0
netmap 0 0K 0
mwldev 0 0K 0
MVS driver 0 0K 0
CAM ccb queue 0 0K 0
mrsasbuf 0 0K 0
mpt_user 0 0K 0
mps_user 0 0K 0
accf 0 0K 0
pts 0 0K 0
eventfd 0 0K 0
Witness 0 0K 0
stack 0 0K 0
MPSSAS 0 0K 0
mps 0 0K 0
mpr_user 0 0K 0
MPRSAS 0 0K 0
mpr 0 0K 0
mfibuf 0 0K 0
sbuf 0 0K 288
md_sectors 0 0K 0
firmware 0 0K 0
compressor 0 0K 0
md_disk 0 0K 0
Witness 0 0K 0
stack 0 0K 0
MPSSAS 0 0K 0
mps 0 0K 0
mpr_user 0 0K 0
MPRSAS 0 0K 0
mpr 0 0K 0
mfibuf 0 0K 0
sbuf 0 0K 288
md_sectors 0 0K 0
firmware 0 0K 0
compressor 0 0K 0
SWAP 0 0K 0
malodev 0 0K 0
LED 0 0K 0
sysctltmp 0 0K 655
malodev 0 0K 0
LED 0 0K 0
sysctl 0 0K 3
ekcd 0 0K 0
dumper 0 0K 0
sendfile 0 0K 0
rctl 0 0K 0
ix_sriov 0 0K 0
aacraidcam 0 0K 0
aacraid_buf 0 0K 0
ix 0 0K 0
ipsbuf 0 0K 0
cache 0 0K 0
iirbuf 0 0K 0
kcovinfo 0 0K 0
ekcd 0 0K 0
dumper 0 0K 0
sendfile 0 0K 0
rctl 0 0K 0
ix_sriov 0 0K 0
aacraidcam 0 0K 0
aacraid_buf 0 0K 0
ix 0 0K 0
ipsbuf 0 0K 0
cache 0 0K 0
iirbuf 0 0K 0
mbuf 256 8578 992 18622 0 254 2449920 0
pbuf 2624 0 794 0 0 2 2083456 0
BUF TRIE 144 177 11583 564 0 62 1693440 0
malloc-384 384 4178 12 4178 0 30 1608960 0
malloc-128 128 11300 46 11380 0 126 1452288 0
malloc-4096 4096 326 2 490 0 2 1343488 0
UMA Slabs 0 112 10123 26 10123 0 126 1136688 0
vmem btag 56 15152 87 15152 0 254 853384 0
FFS inode 1160 486 32 513 0 8 600880 0
RADIX NODE 144 2987 256 24835 0 62 466992 0
lkpimm 160 1 2324 1 0 62 372000 0
lkpicurr 160 2 2323 2 0 62 372000 0
malloc-64 64 4090 131 17449 0 254 270144 0
lkpicurr 160 2 2323 2 0 62 372000 0
malloc-65536 65536 4 0 4 0 1 262144 0
THREAD 1808 124 19 518 0 8 258544 0
VM OBJECT 264 858 102 15030 0 30 253440 0
256 Bucket 2048 109 13 10893 0 8 249856 0
VNODE 448 516 33 545 0 30 245952 0
malloc-16 16 14031 469 14102 0 254 232000 0
malloc-4096 4096 51 5 1515 0 2 229376 0
DEVCTL 1024 0 220 125 0 0 225280 0
malloc-256 256 743 67 1109 0 62 207360 0
malloc-65536 65536 0 3 182 0 1 196608 0
UMA Zones 768 242 2 242 0 16 187392 0
malloc-32 32 5360 184 5528 0 254 177408 0
malloc-128 128 1249 53 28954 0 126 166656 0
FFS2 dinode 256 486 39 512 0 62 134400 0
malloc-65536 65536 2 0 2 0 1 131072 0
malloc-65536 65536 2 0 2 0 1 131072 0
malloc-65536 65536 0 2 8 0 1 131072 0
malloc-65536 65536 2 0 2 0 1 131072 0
malloc-128 128 1001 22 2002 0 126 130944 0
ksiginfo 112 41 1003 58 0 126 116928 0
MAP ENTRY 96 777 441 41282 0 126 116928 0
malloc-1024 1024 106 6 115 0 16 114688 0
S VFS Cache 104 973 80 1012 0 126 109512 0
malloc-2048 2048 7 43 1886 0 8 102400 0
malloc-32768 32768 0 3 130 0 1 98304 0
malloc-16384 16384 3 3 178 0 1 98304 0
UMA Kegs 384 227 6 227 0 30 89472 0
malloc-2048 2048 4 38 511 0 8 86016 0
VMSPACE 2544 21 12 954 0 4 83952 0
PROC 1336 43 14 975 0 8 76152 0
malloc-8192 8192 6 3 135 0 1 73728 0
g_bio 408 0 170 4924 0 30 69360 0
filedesc0 1072 44 19 976 0 8 67536 0
mbuf_cluster 2048 30 2 30 0 254 65536 0
malloc-65536 65536 1 0 1 0 1 65536 0
malloc-32768 32768 2 0 2 0 1 65536 0
128 Bucket 1024 41 14 611 0 16 56320 0
malloc-4096 4096 12 1 23 0 2 53248 0
malloc-16384 16384 3 0 3 0 1 49152 0
malloc-8192 8192 6 0 6 0 1 49152 0
malloc-1024 1024 8 36 516 0 16 45056 0
malloc-64 64 556 137 16089 0 254 44352 0
malloc-128 128 295 46 463 0 126 43648 0
malloc-256 256 136 29 884 0 62 42240 0
32 Bucket 256 47 118 6043 0 62 42240 0
clpbuf 2624 0 16 25 0 16 41984 0
malloc-8192 8192 5 0 5 0 1 40960 0
malloc-256 256 134 16 151 0 62 38400 0
malloc-256 256 105 45 961 0 62 38400 0
socket 944 20 20 1700 0 254 37760 0
DIRHASH 1024 34 2 34 0 16 36864 0
NAMEI 1024 0 36 12288 0 16 36864 0
malloc-4096 4096 9 0 9 0 2 36864 0
pcpu-8 8 4228 380 4256 0 254 36864 0
malloc-32768 32768 0 1 1 0 1 32768 0
malloc-32768 32768 1 0 1 0 1 32768 0
malloc-8192 8192 2 2 4 0 1 32768 0
malloc-8192 8192 4 0 4 0 1 32768 0
pcpu-64 64 487 25 487 0 254 32768 0
64 Bucket 512 58 6 1266 0 30 32768 0
malloc-64 64 478 26 690 0 254 32256 0
malloc-384 384 74 6 103 0 30 30720 0
malloc-1024 1024 13 15 1095 0 16 28672 0
malloc-2048 2048 3 9 191 0 8 24576 0
malloc-64 64 19 359 581 0 254 24192 0
ttyinq 160 135 15 300 0 62 24000 0
malloc-128 128 7 179 261 0 126 23808 0
ttyoutq 256 72 18 160 0 62 23040 0
malloc-384 384 12 48 71 0 30 23040 0
TURNSTILE 136 144 24 144 0 62 22848 0
malloc-4096 4096 3 2 203 0 2 20480 0
malloc-2048 2048 8 2 199 0 8 20480 0
malloc-1024 1024 17 3 17 0 16 20480 0
malloc-32 32 282 348 4360 0 254 20160 0
Mountpoints 2752 2 5 2 0 4 19264 0
pipe 744 6 19 286 0 16 18600 0
SLEEPQUEUE 88 144 48 144 0 126 16896 0
malloc-16384 16384 1 0 1 0 1 16384 0
malloc-8192 8192 2 0 2 0 1 16384 0
malloc-4096 4096 2 2 85 0 2 16384 0
malloc-2048 2048 4 4 81 0 8 16384 0
malloc-1024 1024 11 5 11 0 16 16384 0
ertt_txseginfo 40 1 403 459 0 254 16160 0
malloc-64 64 129 123 2052 0 254 16128 0
malloc-32 32 23 481 747 0 254 16128 0
8 Bucket 80 48 152 615 0 126 16000 0
sctp_ep 1280 1 11 187 0 254 15360 0
malloc-384 384 36 4 36 0 30 15360 0
malloc-256 256 32 28 673 0 62 15360 0
tcpcb 1080 3 11 7 0 254 15120 0
malloc-2048 2048 3 3 12 0 8 12288 0
malloc-1024 1024 8 4 9 0 16 12288 0
malloc-512 512 10 14 196 0 30 12288 0
malloc-64 64 146 43 149 0 254 12096 0
malloc-32 32 140 238 250 0 254 12096 0
16 Bucket 144 36 48 236 0 62 12096 0
Files 80 69 81 6988 0 126 12000 0
malloc-16 16 326 424 560 0 254 12000 0
udp_inpcb 496 6 18 126 0 254 11904 0
malloc-128 128 77 16 100 0 126 11904 0
kenv 258 15 30 1026 0 30 11610 0
unpcb 256 7 38 1172 0 254 11520 0
malloc-384 384 19 11 21 0 30 11520 0
malloc-256 256 14 31 137 0 62 11520 0
malloc-256 256 15 30 74 0 62 11520 0
malloc-8192 8192 1 0 1 0 1 8192 0
malloc-2048 2048 2 2 2 0 8 8192 0
malloc-1024 1024 2 6 10 0 16 8192 0
malloc-1024 1024 1 7 17 0 16 8192 0
malloc-512 512 1 15 2 0 30 8192 0
malloc-512 512 3 13 15 0 30 8192 0
malloc-512 512 4 12 4 0 30 8192 0
rtentry 176 13 33 17 0 62 8096 0
PGRP 88 19 73 32 0 126 8096 0
rl_entry 40 34 168 34 0 254 8080 0
udpcb 32 7 245 313 0 254 8064 0
ertt 72 3 109 7 0 126 8064 0
PWD 32 10 242 102 0 254 8064 0
malloc-64 64 11 115 60 0 254 8064 0
malloc-64 64 7 119 12 0 254 8064 0
malloc-32 32 42 210 92 0 254 8064 0
malloc-32 32 17 235 41 0 254 8064 0
malloc-32 32 38 214 740 0 254 8064 0
4 Bucket 48 6 162 55 0 254 8064 0
2 Bucket 32 47 205 501 0 254 8064 0
vtnet_tx_hdr 24 0 334 2621 0 254 8016 0
malloc-16 16 5 495 13 0 254 8000 0
malloc-16 16 187 313 1417 0 254 8000 0
malloc-16 16 28 472 25657 0 254 8000 0
malloc-16 16 9 491 218 0 254 8000 0
ripcb 496 1 15 4 0 254 7936 0
udplite_inpcb 496 1 15 187 0 254 7936 0
tcp_inpcb 496 3 13 7 0 254 7936 0
malloc-128 128 22 40 70 0 126 7936 0
malloc-128 128 12 50 18 0 126 7936 0
routing nhops 256 10 20 17 0 62 7680 0
mbuf_packet 256 0 30 94 0 254 7680 0
malloc-384 384 1 19 349 0 30 7680 0
malloc-384 384 1 19 187 0 30 7680 0
malloc-256 256 18 12 463 0 62 7680 0
FPU_save_area 832 1 8 1 0 16 7488 0
cpuset 104 7 55 7 0 126 6448 0
epoch_record pcpu 256 4 12 4 0 62 4096 0
malloc-4096 4096 1 0 1 0 2 4096 0
cpuset 104 7 55 7 0 126 6448 0
epoch_record pcpu 256 4 12 4 0 62 4096 0
malloc-2048 2048 1 1 1 0 8 4096 0
malloc-512 512 4 4 4 0 30 4096 0
malloc-512 512 0 8 1 0 30 4096 0
pcpu-16 16 7 249 7 0 254 4096 0
sctp_laddr 48 0 84 4 0 254 4032 0
hostcache 64 1 62 1 0 254 4032 0
syncache 168 0 24 5 0 254 4032 0
KNOTE 160 0 25 8 0 62 4000 0
malloc-16 16 12 238 15 0 254 4000 0
UMA Slabs 1 176 8 14 8 0 62 3872 0
malloc-384 384 1 9 2 0 30 3840 0
mqnode 416 3 6 3 0 30 3744 0
KMAP ENTRY 96 12 27 14 0 0 3744 0
vmem 1856 1 1 1 0 8 3712 0
KMAP ENTRY 96 12 27 14 0 0 3744 0
vmem 1856 1 1 1 0 8 3712 0
SMR CPU 32 3 60 3 0 254 2016 0
SMR SHARED 24 3 60 3 0 254 1512 0
FFS1 dinode 128 0 0 0 0 126 0 0
da_ccb 544 0 0 0 0 16 0 0
ada_ccb 272 0 0 0 0 30 0 0
swblk 136 0 0 0 0 62 0 0
swpctrie 144 0 0 0 0 62 0 0
SMR SHARED 24 3 60 3 0 254 1512 0
FFS1 dinode 128 0 0 0 0 126 0 0
da_ccb 544 0 0 0 0 16 0 0
ada_ccb 272 0 0 0 0 30 0 0
swblk 136 0 0 0 0 62 0 0
swpctrie 144 0 0 0 0 62 0 0
cdg_qdiffsample 16 0 0 0 0 254 0 0
sctp_asconf_ack 48 0 0 0 0 254 0 0
sctp_asconf 40 0 0 0 0 254 0 0
sctp_stream_msg_out 112 0 0 0 0 254 0 0
sctp_asconf_ack 48 0 0 0 0 254 0 0
sctp_asconf 40 0 0 0 0 254 0 0
sctp_readq 152 0 0 0 0 254 0 0
sctp_chunk 152 0 0 0 0 254 0 0
sctp_raddr 736 0 0 0 0 254 0 0
sctp_asoc 2288 0 0 0 0 254 0 0
pf state scrubs 40 0 0 0 0 254 0 0
pf frag entries 40 0 0 0 0 254 0 0
pf frags 248 0 0 0 0 62 0 0
pf table entries 160 0 0 0 0 62 0 0
pf table entry counters 64 0 0 0 0 254 0 0
pf source nodes 136 0 0 0 0 254 0 0
pf state keys 88 0 0 0 0 126 0 0
pf states 304 0 0 0 0 254 0 0
pf tags 104 0 0 0 0 126 0 0
pf frag entries 40 0 0 0 0 254 0 0
pf frags 248 0 0 0 0 62 0 0
pf table entries 160 0 0 0 0 62 0 0
pf table entry counters 64 0 0 0 0 254 0 0
pf source nodes 136 0 0 0 0 254 0 0
pf state keys 88 0 0 0 0 126 0 0
pf states 304 0 0 0 0 254 0 0
pf mtags 48 0 0 0 0 254 0 0
tcp_rack_pcb 832 0 0 0 0 16 0 0
tcp_rack_map 112 0 0 0 0 126 0 0
tcp_bbr_pcb 832 0 0 0 0 16 0 0
tcp_bbr_map 128 0 0 0 0 126 0 0
tcp_log_node 120 0 0 0 0 126 0 0
tcp_log_bucket 176 0 0 0 0 62 0 0
tcp_log 416 0 0 0 0 254 0 0
tcp_log_bucket 176 0 0 0 0 62 0 0
tcpreass 48 0 0 0 0 254 0 0
tfo_ccache_entries 80 0 0 0 0 126 0 0
tfo 4 0 0 0 0 254 0 0
sackhole 32 0 0 0 0 254 0 0
tcptw 88 0 0 0 0 254 0 0
sackhole 32 0 0 0 0 254 0 0
ipq 56 0 0 0 0 254 0 0
IPsec SA lft_c 16 0 0 0 0 254 0 0
itimer 352 0 0 0 0 30 0 0
AIOLIO 272 0 0 0 0 30 0 0
AIOCB 552 0 0 0 0 16 0 0
AIOP 32 0 0 0 0 254 0 0
AIO 208 0 0 0 0 62 0 0
IPsec SA lft_c 16 0 0 0 0 254 0 0
itimer 352 0 0 0 0 30 0 0
AIOLIO 272 0 0 0 0 30 0 0
AIOCB 552 0 0 0 0 16 0 0
AIOP 32 0 0 0 0 254 0 0
AIO 208 0 0 0 0 62 0 0
TMPFS node 224 0 0 0 0 62 0 0
mqnotifier 216 0 0 0 0 62 0 0
mvdata 64 0 0 0 0 254 0 0
mqueue 248 0 0 0 0 62 0 0
NCLNODE 584 0 0 0 0 16 0 0
LTS VFS Cache 360 0 0 0 0 30 0 0
L VFS Cache 320 0 0 0 0 30 0 0
STS VFS Cache 144 0 0 0 0 62 0 0
cryptop 280 0 0 0 0 30 0 0
mqnotifier 216 0 0 0 0 62 0 0
mvdata 64 0 0 0 0 254 0 0
mqueue 248 0 0 0 0 62 0 0
NCLNODE 584 0 0 0 0 16 0 0
LTS VFS Cache 360 0 0 0 0 30 0 0
L VFS Cache 320 0 0 0 0 30 0 0
STS VFS Cache 144 0 0 0 0 62 0 0
malloc-512 512 0 0 0 0 30 0 0
malloc-512 512 0 0 0 0 30 0 0
malloc-32 32 0 0 0 0 254 0 0
malloc-16 16 0 0 0 0 254 0 0
pcpu-32 32 0 0 0 0 254 0 0
pcpu-4 4 0 0 0 0 254 0 0
fakepg 104 0 0 0 0 126 0 0
UMA Hash 256 0 0 0 0 62 0 0
Reply all
Reply to author
Forward
0 new messages