Fatal trap NUM: page fault in sctp_wakeup_the_read_socket (4)

0 views
Skip to first unread message

syzbot

unread,
Apr 28, 2022, 3:06:41 AM4/28/22
to syzkaller-f...@googlegroups.com
Hello,

syzbot found the following issue on:

HEAD commit: e4a38f5407d1 powerpc pseries xics: Use devclass_find to lo..
git tree: freebsd-src
console output: https://syzkaller.appspot.com/x/log.txt?x=13e8e6b4f00000
dashboard link: https://syzkaller.appspot.com/bug?extid=1991808b7bd392eb3fc3

Unfortunately, I don't have any reproducer for this issue yet.

IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+199180...@syzkaller.appspotmail.com

Fatal trap 12: page fault while in kernel mode
cpuid = 1; apic id = 01
fault virtual address = 0x1c0
fault code = supervisor read data, page not present
instruction pointer = 0x20:0xffffffff84671078
stack pointer = 0x28:0xfffffe0053b23d20
frame pointer = 0x28:0xfffffe0053b23d50
code segment = base 0x0, limit 0xfffff, type 0x1b
= DPL 0, pres 1, long 1, def32 0, gran 1
processor eflags = interrupt enabled, resume, IOPL = 0
current process = 12 (swi1: netisr 0)
trap number = 12
panic: page fault
cpuid = 1
time = 1651129509
KDB: stack backtrace:
db_trace_self_wrapper() at db_trace_self_wrapper+0xc7/frame 0xfffffe0053b23530
kdb_backtrace() at kdb_backtrace+0xd3/frame 0xfffffe0053b23690
vpanic() at vpanic+0x2b8/frame 0xfffffe0053b23770
panic() at panic+0xb5/frame 0xfffffe0053b23830
trap_fatal() at trap_fatal+0x6a4/frame 0xfffffe0053b23930
trap_pfault() at trap_pfault+0x186/frame 0xfffffe0053b23a70
trap() at trap+0x5ad/frame 0xfffffe0053b23c50
calltrap() at calltrap+0x8/frame 0xfffffe0053b23c50
--- trap 0xc, rip = 0xffffffff84671078, rsp = 0xfffffe0053b23d20, rbp = 0xfffffe0053b23d50 ---
sctp_wakeup_the_read_socket() at sctp_wakeup_the_read_socket+0xf8/frame 0xfffffe0053b23d50
sctp_add_to_readq() at sctp_add_to_readq+0x633/frame 0xfffffe0053b23df0
sctp_queue_data_to_stream() at sctp_queue_data_to_stream+0x779/frame 0xfffffe0053b23f90
sctp_process_data() at sctp_process_data+0x2cdb/frame 0xfffffe0053b24680
sctp_common_input_processing() at sctp_common_input_processing+0x168d/frame 0xfffffe0053b248a0
sctp6_input_with_port() at sctp6_input_with_port+0x597/frame 0xfffffe0053b24a70
sctp6_input() at sctp6_input+0x1f/frame 0xfffffe0053b24a90
ip6_input() at ip6_input+0x1f40/frame 0xfffffe0053b24cf0
swi_net() at swi_net+0x2f0/frame 0xfffffe0053b24d90
ithread_loop() at ithread_loop+0x4f1/frame 0xfffffe0053b24ef0
fork_exit() at fork_exit+0xd0/frame 0xfffffe0053b24f30
fork_trampoline() at fork_trampoline+0xe/frame 0xfffffe0053b24f30
--- trap 0, rip = 0, rsp = 0, rbp = 0 ---
KDB: enter: panic
[ thread pid 12 tid 100031 ]
Stopped at kdb_enter+0x6b: movq $0,0x270524a(%rip)
db>
db> set $lines = 0
db> set $maxwidth = 0
db> show registers
cs 0x20
ds 0x3b
es 0x3b
fs 0x13
gs 0x1b
ss 0x28
rax 0x12
rcx 0x7eaa946b6f672fcc
rdx 0xdffff7c000000000
rbx 0
rsp 0xfffffe0053b23670
rbp 0xfffffe0053b23690
rsi 0x1
rdi 0
r8 0x3
r9 0xffffffff
r10 0
r11 0xbf
r12 0xfffffe0053ea8560
r13 0xfffffe0053b23601
r14 0xffffffff82bc88e0 .str.26
r15 0xffffffff82bc88e0 .str.26
rip 0xffffffff8177514b kdb_enter+0x6b
rflags 0x46
kdb_enter+0x6b: movq $0,0x270524a(%rip)
db> show proc
Process 12 (intr) at 0xfffffe0053def548:
state: NORMAL
uid: 0 gids: 0
parent: pid 0 at 0xffffffff83e1da40
ABI: null
flag: 0x10000284 flag2: 0
reaper: 0xffffffff83e1da40 reapsubtree: 12
sigparent: 20
vmspace: 0xffffffff83e1e9e0
(map 0xffffffff83e1e9e0)
(map.pmap 0xffffffff83e1eaa0)
(pmap 0xffffffff83e1eb08)
threads: 22
100015 I [swi5: fast taskq]
100018 I [swi6: task queue]
100019 I [swi6: Giant taskq]
100031 Run CPU 1 [swi1: netisr 0]
100032 I [swi1: hpts]
100033 Run CPU 0 [swi1: hpts]
100046 I [irq24: virtio_pci0]
100047 I [irq25: virtio_pci0]
100048 I [irq26: virtio_pci0]
100049 I [irq27: virtio_pci0]
100050 I [irq28: virtio_pci1]
100051 I [irq29: virtio_pci1]
100052 I [irq30: virtio_pci1]
100053 I [irq31: virtio_pci1]
100054 I [irq32: virtio_pci1]
100059 I [irq33: virtio_pci2]
100060 I [irq34: virtio_pci2]
100061 I [irq35: virtio_pci2]
100063 I [irq1: atkbd0]
100064 I [irq12: psm0]
100065 I [swi0: uart uart++]
100069 I [swi1: pf send]
db> ps
pid ppid pgrp uid state wmesg wchan cmd
890 781 781 0 RE syz-executor.3
877 1 877 0 Ss select 0xfffffe00923576c0 rtsol
876 1 876 0 Ss select 0xfffffe008fe582c0 rtsol
875 1 875 0 Ss select 0xfffffe008fe58340 rtsol
870 788 430 0 S kqread 0xfffffe0058a63200 rtsol
790 774 790 0 Ss piperd 0xfffffe0058b672e8 syz-executor.2
788 783 430 0 S wait 0xfffffe008fe4b000 sh
783 430 430 0 S wait 0xfffffe0053df0a90 sh
781 774 781 0 Rs syz-executor.3
780 774 780 0 Ss piperd 0xfffffe0092509ba0 syz-executor.1
779 774 779 0 Ss piperd 0xfffffe0092d998b8 syz-executor.0
774 772 772 0 S (threaded) syz-fuzzer
100111 S uwait 0xfffffe0058b70d80 syz-fuzzer
100117 S uwait 0xfffffe0057895380 syz-fuzzer
100118 S uwait 0xfffffe0057895480 syz-fuzzer
100119 S uwait 0xfffffe0057894380 syz-fuzzer
100120 S kqread 0xfffffe0058a5fd00 syz-fuzzer
100121 S uwait 0xfffffe0057894580 syz-fuzzer
100122 S uwait 0xfffffe0058b71400 syz-fuzzer
100123 S uwait 0xfffffe0058b71500 syz-fuzzer
100124 S uwait 0xfffffe0057894680 syz-fuzzer
772 770 772 0 Ss pause 0xfffffe0058c370b0 csh
770 688 770 0 Ss select 0xfffffe0092357a40 sshd
754 1 754 0 Ss+ ttyin 0xfffffe00574774b0 getty
753 1 753 0 Ss+ ttyin 0xfffffe0058690cb0 getty
752 1 752 0 Ss+ ttyin 0xfffffe00586914b0 getty
751 1 751 0 Ss+ ttyin 0xfffffe0058691cb0 getty
750 1 750 0 Ss+ ttyin 0xfffffe00586924b0 getty
749 1 749 0 Ss+ ttyin 0xfffffe0058692cb0 getty
748 1 748 0 Ss+ ttyin 0xfffffe0053f414b0 getty
747 1 747 0 Ss+ ttyin 0xfffffe0053f41cb0 getty
746 1 746 0 Ss+ ttyin 0xfffffe0053f424b0 getty
692 1 692 0 Ss nanslp 0xffffffff83e47a40 cron
688 1 688 0 Ss select 0xfffffe008fe58ac0 sshd
501 1 501 0 Ss select 0xfffffe0092358340 syslogd
430 1 430 0 Ss wait 0xfffffe0058c37a90 devd
429 1 429 65 Ss select 0xfffffe0092358440 dhclient
344 1 344 0 Ss select 0xfffffe0092358540 dhclient
341 1 341 0 Ss select 0xfffffe008fe58ec0 dhclient
17 0 0 0 DL vlruwt 0xfffffe0056f9d548 [vnlru]
16 0 0 0 DL syncer 0xffffffff83f6d260 [syncer]
15 0 0 0 RL (threaded) [bufdaemon]
100079 RunQ [bufdaemon]
100082 D - 0xffffffff83211f80 [bufspacedaemon-0]
100094 D sdflush 0xfffffe0058c5cce8 [/ worker]
9 0 0 0 DL psleep 0xffffffff83f9f380 [vmdaemon]
8 0 0 0 RL (threaded) [pagedaemon]
100077 D psleep 0xffffffff83f93238 [dom0]
100080 D launds 0xffffffff83f93244 [laundry: dom0]
100081 RunQ [uma]
7 0 0 0 DL - 0xffffffff83c03788 [rand_harvestq]
6 0 0 0 RL [pf purge]
5 0 0 0 DL waiting 0xffffffff846a74a0 [sctp_iterator]
4 0 0 0 DL (threaded) [cam]
100044 D - 0xffffffff83aa56c0 [doneq0]
100045 D - 0xffffffff83aa5640 [async]
100076 D - 0xffffffff83aa54c0 [scanner]
14 0 0 0 DL seqstat 0xfffffe0056f03c88 [sequencer 00]
3 0 0 0 DL (threaded) [crypto]
100040 D crypto_ 0xffffffff83f8ea40 [crypto]
100041 D crypto_ 0xfffffe0053f73030 [crypto returns 0]
100042 D crypto_ 0xfffffe0053f73080 [crypto returns 1]
13 0 0 0 DL (threaded) [geom]
100035 D - 0xffffffff83e1d000 [g_event]
100036 D - 0xffffffff83e1d020 [g_up]
100037 D - 0xffffffff83e1d040 [g_down]
2 0 0 0 WL (threaded) [clock]
100029 I [clock (0)]
100030 I [clock (1)]
12 0 0 0 RL (threaded) [intr]
100015 I [swi5: fast taskq]
100018 I [swi6: task queue]
100019 I [swi6: Giant taskq]
100031 Run CPU 1 [swi1: netisr 0]
100032 I [swi1: hpts]
100033 Run CPU 0 [swi1: hpts]
100046 I [irq24: virtio_pci0]
100047 I [irq25: virtio_pci0]
100048 I [irq26: virtio_pci0]
100049 I [irq27: virtio_pci0]
100050 I [irq28: virtio_pci1]
100051 I [irq29: virtio_pci1]
100052 I [irq30: virtio_pci1]
100053 I [irq31: virtio_pci1]
100054 I [irq32: virtio_pci1]
100059 I [irq33: virtio_pci2]
100060 I [irq34: virtio_pci2]
100061 I [irq35: virtio_pci2]
100063 I [irq1: atkbd0]
100064 I [irq12: psm0]
100065 I [swi0: uart uart++]
100069 I [swi1: pf send]
11 0 0 0 RL (threaded) [idle]
100003 CanRun [idle: cpu0]
100004 CanRun [idle: cpu1]
1 0 1 0 SLs wait 0xfffffe0053df0000 [init]
10 0 0 0 DL audit_w 0xffffffff83f8f540 [audit]
0 0 0 0 DLs (threaded) [kernel]
100000 D swapin 0xffffffff83e1da40 [swapper]
100005 D - 0xfffffe0008191000 [if_config_tqg_0]
100006 D - 0xfffffe0008190e00 [softirq_0]
100007 D - 0xfffffe0008190d00 [softirq_1]
100008 D - 0xfffffe0008190c00 [if_io_tqg_0]
100009 D - 0xfffffe0008190b00 [if_io_tqg_1]
100010 D - 0xfffffe0008190a00 [inm_free taskq]
100011 D - 0xfffffe0008190900 [linuxkpi_irq_wq]
100012 D - 0xfffffe0008190800 [in6m_free taskq]
100013 D - 0xfffffe0008190700 [deferred_unmount ta]
100014 D - 0xfffffe0008190600 [thread taskq]
100016 D - 0xfffffe0008190400 [pci_hp taskq]
100017 D - 0xfffffe0008190300 [kqueue_ctx taskq]
100020 D - 0xfffffe0008190000 [aiod_kick taskq]
100021 D - 0xfffffe000818fe00 [linuxkpi_short_wq_0]
100022 D - 0xfffffe000818fe00 [linuxkpi_short_wq_1]
100023 D - 0xfffffe000818fe00 [linuxkpi_short_wq_2]
100024 D - 0xfffffe000818fe00 [linuxkpi_short_wq_3]
100025 D - 0xfffffe000818fd00 [linuxkpi_long_wq_0]
100026 D - 0xfffffe000818fd00 [linuxkpi_long_wq_1]
100027 D - 0xfffffe000818fd00 [linuxkpi_long_wq_2]
100028 D - 0xfffffe000818fd00 [linuxkpi_long_wq_3]
100034 D - 0xfffffe000818fc00 [firmware taskq]
100038 D - 0xfffffe000818f200 [crypto_0]
100039 D - 0xfffffe000818f200 [crypto_1]
100055 D - 0xfffffe000818e900 [vtnet0 rxq 0]
100056 D - 0xfffffe000818e800 [vtnet0 txq 0]
100057 D - 0xfffffe000818e700 [vtnet0 rxq 1]
100058 D - 0xfffffe000818e600 [vtnet0 txq 1]
100062 D vtbslp 0xfffffe0056f4be00 [virtio_balloon]
100066 D - 0xffffffff82bce761 [deadlkres]
100070 D - 0xfffffe0008191100 [mca taskq]
100071 D - 0xfffffe000818eb00 [acpi_task_0]
100072 D - 0xfffffe000818eb00 [acpi_task_1]
100073 D - 0xfffffe000818eb00 [acpi_task_2]
100075 D - 0xfffffe000818ea00 [CAM taskq]
db> show all locks
Process 890 (syz-executor.3) thread 0xfffffe0092db4000 (100127)
exclusive sleep mutex sctp-inp (inp) r = 0 (0xfffffe0094caa700) locked @ /syzkaller/managers/main/kernel/sys/netinet/sctp_pcb.c:3340
exclusive rw sctp-info (sctp-info) r = 0 (0xfffffe0053c402f8) locked @ /syzkaller/managers/main/kernel/sys/netinet/sctp_pcb.c:3339
exclusive sleep mutex sctp-create (inp_create) r = 0 (0xfffffe0094caa720) locked @ /syzkaller/managers/main/kernel/sys/netinet/sctp_pcb.c:3338
Process 12 (intr) thread 0xfffffe0053ea8560 (100031)
exclusive sleep mutex so_rcv (so_rcv) r = 0 (0xfffffe0058c191a0) locked @ /syzkaller/managers/main/kernel/sys/netinet/sctputil.c:4846
exclusive sleep mutex sctp-read (inpr) r = 0 (0xfffffe0094caa740) locked @ /syzkaller/managers/main/kernel/sys/netinet/sctputil.c:4874
exclusive sleep mutex sctp-tcb (tcb) r = 0 (0xfffffe0094da58b0) locked @ /syzkaller/managers/main/kernel/sys/netinet/sctp_pcb.c:2138
Process 12 (intr) thread 0xfffffe0053ee3ac0 (100033)
exclusive sleep mutex tcp_hpts_lck (hpts) r = 0 (0xfffffe0053edc000) locked @ /syzkaller/managers/main/kernel/sys/netinet/tcp_hpts.c:1658
db> show malloc
Type InUse MemUse Requests
pf_hash 5 11524K 5
tcp_hpts 7 4801K 7
devbuf 4217 4323K 4245
sysctloid 35322 2081K 35393
vtbuf 24 1968K 46
kobj 328 1312K 489
newblk 38 1034K 672
vfscache 3 1025K 3
pcb 173 706K 478
inodedep 51 531K 119
ufs_quota 1 512K 1
vfs_hash 1 512K 1
callout 2 512K 2
intr 4 472K 4
subproc 106 214K 957
acpica 1674 184K 57552
vnet_data 1 168K 1
vmem 3 146K 5
tidhash 3 141K 3
linker 358 134K 386
pagedep 14 132K 57
tfo_ccache 1 128K 1
DEVFS1 109 109K 126
sem 4 106K 4
filedesc 12 89K 117
bus 994 81K 5207
mtx_pool 2 72K 2
syncache 1 68K 1
module 513 65K 513
acpitask 1 64K 1
ddb_capture 1 64K 1
umtx 308 39K 308
kdtrace 183 37K 1068
sctp_atcl 92 35K 273
temp 34 33K 1890
DEVFS3 128 32K 138
hostcache 1 32K 1
shm 1 32K 1
msg 4 30K 4
gtaskqueue 18 26K 18
kbdmux 6 22K 6
DEVFS_RULE 56 20K 56
ifaddr 67 19K 69
BPF 14 19K 14
ufs_mount 4 17K 5
proc 3 17K 3
sctp_stro 16 16K 59
tty 16 16K 16
ithread 97 16K 97
routetbl 130 16K 413
bus-sc 34 15K 1681
lltable 44 14K 44
ether_multi 157 13K 167
KTRACE 100 13K 100
ifnet 7 13K 7
kenv 95 12K 95
eventhandler 134 12K 134
rman 88 11K 431
GEOM 61 11K 490
CAM queue 5 11K 1528
in6_multi 71 9K 71
bmsafemap 2 9K 87
UART 12 9K 12
devstat 4 9K 4
ksem 1 8K 1
rpc 2 8K 2
shmfd 1 8K 1
pfs_vncache 1 8K 1
cred 30 8K 206
kqueue 52 8K 905
pfs_nodes 20 8K 20
audit_evclass 237 8K 296
sctp_timw 27 7K 27
dirrem 27 7K 55
taskqueue 63 7K 63
sglist 5 7K 5
CAM DEV 3 6K 510
plimit 20 5K 349
ufs_dirhash 24 5K 24
UMA 272 5K 272
pf_ifnet 10 5K 19
vt 11 5K 11
memdesc 1 4K 1
MCA 32 4K 32
evdev 4 4K 4
sctp_atky 108 4K 334
DEVFSP 60 4K 64
acpisem 28 4K 28
freefile 27 4K 53
hhook 15 4K 17
diradd 26 4K 86
session 26 4K 37
kcovinfo 52 4K 52
proc-args 77 4K 1983
mkdir 24 3K 94
pwddesc 47 3K 899
terminal 11 3K 11
uidinfo 3 3K 8
local_apic 1 2K 1
io_apic 1 2K 1
fpukern_ctx 2 2K 2
indirdep 8 2K 10
ipsec-saq 2 2K 2
selfd 32 2K 35817
ip6ndp 12 2K 15
sctp_ifa 14 2K 15
Unitno 30 2K 47
lockf 16 2K 26
CAM XPT 22 2K 543
msi 12 2K 12
newdirblk 12 2K 47
in_multi 6 2K 8
sctp_athm 92 2K 275
select 11 2K 32
ipsecpolicy 2 2K 2
acpidev 20 2K 20
clone 9 2K 9
tun 7 2K 7
softdep 1 1K 1
sahead 1 1K 1
secasvar 1 1K 1
nhops 6 1K 8
vnodemarker 2 1K 18
NFSD session 1 1K 1
CAM periph 4 1K 271
ipsec 3 1K 3
sctp_ifn 6 1K 15
mld 6 1K 6
igmp 6 1K 6
toponodes 6 1K 6
isadev 6 1K 6
mount 16 1K 89
pci_link 10 1K 10
crypto 4 1K 4
encap_export_host 12 1K 12
sctp_stri 1 1K 4
sctp_map 32 1K 118
freework 2 1K 53
pfil 4 1K 4
procdesc 4 1K 10
cdev 2 1K 2
inpcbpolicy 15 1K 193
osd 9 1K 27
chacha20random 1 1K 1
CC Mem 5 1K 16
NFSD lckfile 1 1K 1
NFSD V4client 1 1K 1
DEVFS 9 1K 10
freeblks 1 1K 52
vnodes 1 1K 1
CAM SIM 2 1K 2
feeder 7 1K 7
tcpfunc 3 1K 3
loginclass 3 1K 6
prison 6 1K 6
lkpikmalloc 5 1K 6
aesni_data 2 1K 2
cryptodev 2 1K 42
nexusdev 8 1K 8
apmdev 1 1K 1
atkbddev 2 1K 2
CAM dev queue 2 1K 2
CAM I/O Scheduler 1 1K 1
CAM path 4 1K 1034
pmchooks 1 1K 1
soname 4 1K 3542
sctp_vrf 1 1K 1
vnet 1 1K 1
entropy 2 1K 38
pmc 1 1K 1
acpiintr 1 1K 1
cpus 2 1K 2
vnet_data_free 1 1K 1
Per-cpu 1 1K 1
p1003.1b 1 1K 1
filecaps 1 1K 82
pf_table 0 0K 0
pf_rule 0 0K 0
pf_altq 0 0K 0
pf_osfp 0 0K 0
pf_temp 0 0K 0
mqdata 0 0K 0
tcp_do 0 0K 0
tcp_fsb 0 0K 0
ipcomp 0 0K 0
esp 0 0K 0
ah 0 0K 0
filemon 0 0K 0
sctp_mcore 0 0K 0
sctp_socko 0 0K 86
sctp_iter 0 0K 11
sctp_mvrf 0 0K 0
sctp_cpal 0 0K 0
sctp_cmsg 0 0K 0
sctp_stre 0 0K 0
sctp_athi 0 0K 0
sctp_a_it 0 0K 11
sctp_aadr 0 0K 0
NFSCL layrecall 0 0K 0
NFSCL session 0 0K 0
madt_table 0 0K 2
smartpqi 0 0K 0
NFSCL sockreq 0 0K 0
NFSCL devinfo 0 0K 0
NFSCL flayout 0 0K 0
ixl 0 0K 0
NFSCL layout 0 0K 0
NFSD rollback 0 0K 0
NFSCL diroff 0 0K 0
NEWdirectio 0 0K 0
NEWNFSnode 0 0K 0
NFSCL lck 0 0K 0
NFSCL lckown 0 0K 0
ice-resmgr 0 0K 0
ice-osdep 0 0K 0
ice 0 0K 0
iavf 0 0K 0
axgbe 0 0K 0
NFSCL client 0 0K 0
NFSCL deleg 0 0K 0
NFSCL open 0 0K 0
NFSCL owner 0 0K 0
NFS fh 0 0K 0
NFS req 0 0K 0
NFSD usrgroup 0 0K 0
NFSD string 0 0K 0
NFSD V4lock 0 0K 0
xen_intr 0 0K 0
NFSD V4state 0 0K 0
xen_hvm 0 0K 0
legacydrv 0 0K 0
bounce 0 0K 0
busdma 0 0K 0
qpidrv 0 0K 0
NFSD srvcache 0 0K 0
msdosfs_fat 0 0K 0
dmar_idpgtbl 0 0K 0
dmar_dom 0 0K 0
dmar_ctx 0 0K 0
msdosfs_mount 0 0K 0
msdosfs_node 0 0K 0
isci 0 0K 0
iommu_dmamap 0 0K 0
hyperv_socket 0 0K 0
bxe_ilt 0 0K 0
xenbus 0 0K 0
DEVFS4 0 0K 0
vm_fictitious 0 0K 0
DEVFS2 0 0K 0
gntdev 0 0K 0
privcmd_dev 0 0K 0
evtchn_dev 0 0K 0
xenstore 0 0K 0
scsi_pass 0 0K 0
ciss_data 0 0K 0
xnb 0 0K 0
xen_acpi 0 0K 0
xbbd 0 0K 0
xbd 0 0K 0
UMAHash 0 0K 0
Balloon 0 0K 0
sysmouse 0 0K 0
vm_pgdata 0 0K 0
jblocks 0 0K 0
savedino 0 0K 17
sentinel 0 0K 0
jfsync 0 0K 0
jtrunc 0 0K 0
sbdep 0 0K 6
jsegdep 0 0K 0
jseg 0 0K 0
jfreefrag 0 0K 0
jfreeblk 0 0K 0
jnewblk 0 0K 0
jmvref 0 0K 0
jremref 0 0K 0
jaddref 0 0K 0
freedep 0 0K 0
freefrag 0 0K 6
allocindir 0 0K 0
allocdirect 0 0K 0
ufs_trim 0 0K 0
mactemp 0 0K 0
audit_trigger 0 0K 0
audit_pipe_presel 0 0K 0
audit_pipeent 0 0K 0
audit_pipe 0 0K 0
audit_evname 0 0K 0
audit_bsm 0 0K 0
audit_gidset 0 0K 0
audit_text 0 0K 0
audit_path 0 0K 0
audit_data 0 0K 0
audit_cred 0 0K 0
vtfont 0 0K 0
BACKLIGHT 0 0K 0
ath_hal 0 0K 0
athdev 0 0K 0
ata_pci 0 0K 0
ata_dma 0 0K 0
ata_generic 0 0K 0
pvscsi 0 0K 0
scsi_da 0 0K 69
ata_da 0 0K 0
scsi_ch 0 0K 0
scsi_cd 0 0K 0
ktls_ocf 0 0K 0
AHCI driver 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5E_TLS_RX 0 0K 0
MLX5EEPROM 0 0K 0
MLX5E_TLS 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EN 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5DUMP 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
seq_file 0 0K 0
lkpiskb 0 0K 0
radix 0 0K 0
idr 0 0K 0
lkpindev 0 0K 0
lkpifw 0 0K 0
lkpi80211 0 0K 0
NLM 0 0K 0
ipsec-spdcache 0 0K 0
ipsec-reg 0 0K 0
ipsec-misc 0 0K 0
ipsecrequest 0 0K 0
ip6opt 0 0K 7
ip6_msource 0 0K 0
ip6_moptions 0 0K 0
in6_mfilter 0 0K 0
frag6 0 0K 0
tcplog 0 0K 0
tcp_hwpace 0 0K 0
USBdev 0 0K 0
USB 0 0K 0
LRO 0 0K 0
ip_msource 0 0K 0
ip_moptions 0 0K 0
in_mfilter 0 0K 0
ipid 0 0K 0
80211scan 0 0K 0
80211ratectl 0 0K 0
80211power 0 0K 0
80211nodeie 0 0K 0
80211node 0 0K 0
80211mesh_gt 0 0K 0
80211mesh_rt 0 0K 0
80211perr 0 0K 0
80211prep 0 0K 0
80211preq 0 0K 0
80211dfs 0 0K 0
80211crypto 0 0K 0
80211vap 0 0K 0
iflib 0 0K 0
vlan 0 0K 0
gif 0 0K 0
ifdescr 0 0K 0
zlib 0 0K 0
fadvise 0 0K 0
VN POLL 0 0K 0
agp 0 0K 0
statfs 0 0K 224
namei_tracker 0 0K 0
export_host 0 0K 0
cl_savebuf 0 0K 3
nvme_da 0 0K 0
acpipwr 0 0K 0
acpi_perf 0 0K 0
twsbuf 0 0K 0
twe_commands 0 0K 0
tcp_log_dev 0 0K 0
midi buffers 0 0K 0
mixer 0 0K 0
ac97 0 0K 0
hdacc 0 0K 0
hdac 0 0K 0
hdaa 0 0K 0
acpicmbat 0 0K 0
SIIS driver 0 0K 0
CAM CCB 0 0K 523
biobuf 0 0K 0
aios 0 0K 0
lio 0 0K 0
acl 0 0K 0
mbuf_tag 0 0K 99
ktls 0 0K 0
PUC 0 0K 0
ppbusdev 0 0K 0
agtiapi_MemAlloc malloc 0 0K 0
osti_cacheable 0 0K 0
tempbuff 0 0K 0
tempbuff 0 0K 0
ag_tgt_map_t malloc 0 0K 0
ag_slr_map_t malloc 0 0K 0
lDevFlags * malloc 0 0K 0
tiDeviceHandle_t * malloc 0 0K 0
ag_portal_data_t malloc 0 0K 0
ag_device_t malloc 0 0K 0
STLock malloc 0 0K 0
CCB List 0 0K 0
sr_iov 0 0K 0
OCS 0 0K 0
OCS 0 0K 0
nvme 0 0K 0
nvd 0 0K 0
netmap 0 0K 0
mwldev 0 0K 0
MVS driver 0 0K 0
CAM ccb queue 0 0K 0
accf 0 0K 0
pts 0 0K 0
iov 0 0K 13995
ioctlops 0 0K 98
eventfd 0 0K 0
Witness 0 0K 0
stack 0 0K 0
mrsasbuf 0 0K 0
mpt_user 0 0K 0
mps_user 0 0K 0
MPSSAS 0 0K 0
mps 0 0K 0
sbuf 0 0K 288
mpr_user 0 0K 0
firmware 0 0K 0
compressor 0 0K 0
MPRSAS 0 0K 0
SWAP 0 0K 0
mpr 0 0K 0
mfibuf 0 0K 0
sysctltmp 0 0K 657
sysctl 0 0K 3
md_sectors 0 0K 0
ekcd 0 0K 0
dumper 0 0K 0
sendfile 0 0K 0
rctl 0 0K 0
md_disk 0 0K 0
malodev 0 0K 0
LED 0 0K 0
ix_sriov 0 0K 0
cache 0 0K 0
aacraidcam 0 0K 0
prison_racct 0 0K 0
Fail Points 0 0K 0
sigio 0 0K 1
filedesc_to_leader 0 0K 0
pwd 0 0K 0
tty console 0 0K 0
ix 0 0K 0
ipsbuf 0 0K 0
aacraid_buf 0 0K 0
aaccam 0 0K 0
boottrace 0 0K 0
aacbuf 0 0K 0
zstd 0 0K 0
XZ_DEC 0 0K 0
nvlist 0 0K 0
SCSI ENC 0 0K 0
SCSI sa 0 0K 0
isofs_node 0 0K 0
isofs_mount 0 0K 0
tr_raid5_data 0 0K 0
tr_raid1e_data 0 0K 0
tr_raid1_data 0 0K 0
tr_raid0_data 0 0K 0
tr_concat_data 0 0K 0
md_sii_data 0 0K 0
md_promise_data 0 0K 0
md_nvidia_data 0 0K 0
md_jmicron_data 0 0K 0
md_intel_data 0 0K 0
md_ddf_data 0 0K 0
raid_data 0 0K 72
geom_flashmap 0 0K 0
tmpfs dir 0 0K 0
tmpfs name 0 0K 0
tmpfs mount 0 0K 0
NFS FHA 0 0K 0
newnfsmnt 0 0K 0
newnfsclient_req 0 0K 0
db> show uma
Zone Size Used Free Requests Sleeps Bucket Total Mem XFree
mbuf_jumbo_page 4096 8320 1078 1522636 0 254 38494208 0
mbuf 256 8656 1006 2297448 0 254 2473472 0
RADIX NODE 144 14222 249 56453 0 62 2083824 0
pbuf 2624 0 794 0 0 2 2083456 0
BUF TRIE 144 185 11603 542 0 62 1697472 0
malloc-384 384 4167 33 4236 0 30 1612800 0
malloc-128 128 11671 202 11835 0 126 1519744 0
malloc-4096 4096 330 4 494 0 2 1368064 0
UMA Slabs 0 112 10698 24 10698 0 126 1200864 0
sctp_asoc 2256 16 494 59 0 254 1150560 0
mbuf_cluster 2048 508 0 508 0 254 1040384 0
vmem btag 56 16915 116 16915 0 254 953736 0
FFS inode 1160 506 26 559 0 8 617120 0
sctp_ep 1208 75 435 212 0 254 616080 0
tcpcb 1104 5 506 16 0 254 564144 0
VM OBJECT 264 1867 83 27692 0 30 514800 0
socket 960 91 417 1639 0 254 487680 0
malloc-65536 65536 6 0 6 0 1 393216 0
lkpimm 168 1 2327 1 0 62 391104 0
lkpicurr 168 2 2326 2 0 62 391104 0
sctp_raddr 736 16 501 59 0 254 380512 0
malloc-2048 2048 83 93 220 0 8 360448 0
256 Bucket 2048 145 17 5758 0 8 331776 0
malloc-64 64 3923 676 40564 0 254 294336 0
VNODE 448 542 88 597 0 30 282240 0
THREAD 1808 134 20 168 0 8 278432 0
malloc-65536 65536 1 3 137 0 1 262144 0
MAP ENTRY 96 2226 420 96163 0 126 254016 0
malloc-16 16 14614 386 14694 0 254 240000 0
malloc-4096 4096 53 5 906 0 2 237568 0
DEVCTL 1024 23 197 151 0 0 225280 0
malloc-16384 16384 6 7 57 0 1 212992 0
malloc-256 256 236 574 1061 0 62 207360 0
malloc-65536 65536 1 2 65 0 1 196608 0
malloc-32 32 5564 358 5638 0 254 189504 0
UMA Zones 768 244 0 244 0 16 187392 0
malloc-1024 1024 137 23 154 0 16 163840 0
malloc-128 128 1242 29 27172 0 126 162688 0
malloc-128 128 1052 95 5332 0 126 146816 0
FFS2 dinode 256 506 64 559 0 62 145920 0
FPU_save_area 832 136 26 3764 0 16 134784 0
S VFS Cache 104 1004 283 1067 0 126 133848 0
unpcb 256 14 496 1208 0 254 130560 0
mbuf_packet 256 1 507 210 0 254 130048 0
ertt_txseginfo 40 2741 390 11193 0 254 125240 0
ksiginfo 112 46 998 3649 0 126 116928 0
VMSPACE 2552 31 11 883 0 4 107184 0
malloc-8192 8192 9 4 38 0 1 106496 0
malloc-384 384 123 117 304 0 30 92160 0
malloc-4096 4096 19 3 33 0 2 90112 0
UMA Kegs 384 230 3 230 0 30 89472 0
128 Bucket 1024 49 34 521 0 16 84992 0
malloc-2048 2048 5 35 1232 0 8 81920 0
malloc-256 256 139 176 569 0 62 80640 0
PROC 1352 47 10 898 0 8 77064 0
filedesc0 1072 48 22 899 0 8 75040 0
malloc-8192 8192 8 1 10 0 1 73728 0
g_bio 408 0 180 4996 0 30 73440 0
64 Bucket 512 76 60 2796 0 30 69632 0
malloc-64 64 589 482 1759 0 254 68544 0
tcp_bbr_map 128 336 191 672 0 126 67456 0
malloc-128 128 369 158 574 0 126 67456 0
malloc-65536 65536 1 0 1 0 1 65536 0
malloc-65536 65536 0 1 8 0 1 65536 0
malloc-32768 32768 2 0 2 0 1 65536 0
malloc-32768 32768 0 2 120 0 1 65536 0
malloc-256 256 227 28 593 0 62 65280 0
sctp_stream_msg_out 112 14 526 17 0 254 60480 0
malloc-384 384 110 40 111 0 30 57600 0
malloc-64 64 559 260 1025 0 254 52416 0
malloc-256 256 91 104 290 0 62 49920 0
32 Bucket 256 71 124 3701 0 62 49920 0
DIRHASH 1024 35 13 35 0 16 49152 0
NAMEI 1024 0 48 13361 0 16 49152 0
malloc-16384 16384 3 0 3 0 1 49152 0
malloc-16384 16384 0 3 160 0 1 49152 0
malloc-1024 1024 5 43 1565 0 16 49152 0
syncache 168 0 264 4 0 254 44352 0
clpbuf 2624 0 16 21 0 16 41984 0
malloc-8192 8192 2 3 103 0 1 40960 0
pcpu-8 8 4635 485 4791 0 254 40960 0
sctp_readq 152 1 259 2 0 254 39520 0
sctp_chunk 152 2 258 4 0 254 39520 0
Mountpoints 2752 2 12 2 0 4 38528 0
udp_inpcb 424 6 84 166 0 30 38160 0
da_ccb 544 0 70 1365 0 16 38080 0
pipe 744 19 31 337 0 16 37200 0
malloc-64 64 89 478 999 0 254 36288 0
malloc-64 64 37 530 13657 0 254 36288 0
malloc-64 64 79 488 1496 0 254 36288 0
malloc-64 64 223 344 246 0 254 36288 0
malloc-64 64 157 410 166 0 254 36288 0
malloc-128 128 35 244 156 0 126 35712 0
malloc-128 128 25 254 36 0 126 35712 0
malloc-128 128 59 220 237 0 126 35712 0
malloc-128 128 47 232 47 0 126 35712 0
routing nhops 256 26 109 34 0 62 34560 0
ttyoutq 256 72 63 160 0 62 34560 0
malloc-384 384 47 43 49 0 30 34560 0
malloc-256 256 48 87 170 0 62 34560 0
malloc-256 256 32 103 374 0 62 34560 0
malloc-256 256 52 83 672 0 62 34560 0
malloc-256 256 7 128 725 0 62 34560 0
malloc-32768 32768 1 0 1 0 1 32768 0
malloc-16384 16384 2 0 17 0 1 32768 0
malloc-2048 2048 3 13 26 0 8 32768 0
malloc-2048 2048 10 6 10 0 8 32768 0
malloc-2048 2048 4 12 62 0 8 32768 0
malloc-2048 2048 0 16 50 0 8 32768 0
malloc-1024 1024 19 13 71 0 16 32768 0
malloc-1024 1024 5 27 5 0 16 32768 0
malloc-1024 1024 3 29 160 0 16 32768 0
malloc-1024 1024 8 24 8 0 16 32768 0
malloc-1024 1024 3 29 19 0 16 32768 0
malloc-512 512 4 60 4 0 30 32768 0
malloc-512 512 0 64 132 0 30 32768 0
malloc-512 512 2 62 51 0 30 32768 0
malloc-512 512 3 61 19 0 30 32768 0
malloc-512 512 8 56 8 0 30 32768 0
pcpu-64 64 493 19 493 0 254 32768 0
KNOTE 160 31 169 46858 0 62 32000 0
ttyinq 160 135 65 300 0 62 32000 0
Files 80 240 160 7568 0 126 32000 0
tcp_bbr_pcb 832 1 35 2 0 16 29952 0
cpuset 104 7 272 7 0 126 29016 0
sctp_laddr 48 0 588 13 0 254 28224 0
16 Bucket 144 49 147 241 0 62 28224 0
4 Bucket 48 6 582 53 0 254 28224 0
tcp_inpcb 424 5 58 16 0 30 26712 0
ripcb 424 4 59 11 0 30 26712 0
TURNSTILE 136 155 34 155 0 62 25704 0
malloc-8192 8192 3 0 3 0 1 24576 0
malloc-4096 4096 5 1 8 0 2 24576 0
malloc-4096 4096 2 4 849 0 2 24576 0
malloc-4096 4096 2 4 5 0 2 24576 0
rtentry 176 30 108 34 0 62 24288 0
PGRP 88 26 250 37 0 126 24288 0
rl_entry 40 40 566 40 0 254 24240 0
8 Bucket 80 50 250 855 0 126 24000 0
malloc-384 384 3 57 50 0 30 23040 0
malloc-384 384 20 40 360 0 30 23040 0
SLEEPQUEUE 88 155 101 155 0 126 22528 0
hostcache 64 1 314 1 0 254 20160 0
udpcb 32 6 624 166 0 254 20160 0
udp_inpcb ports 32 3 627 33 0 254 20160 0
tcp_inpcb ports 32 3 627 9 0 254 20160 0
ertt 72 5 275 16 0 126 20160 0
PWD 32 14 616 134 0 254 20160 0
malloc-32 32 108 522 125 0 254 20160 0
malloc-32 32 26 604 77 0 254 20160 0
malloc-32 32 56 574 965 0 254 20160 0
malloc-32 32 54 576 207 0 254 20160 0
malloc-32 32 233 397 4478 0 254 20160 0
malloc-32 32 5 625 9 0 254 20160 0
2 Bucket 32 48 582 321 0 254 20160 0
epoch_record pcpu 256 4 60 4 0 62 16384 0
malloc-16384 16384 1 0 1 0 1 16384 0
malloc-16384 16384 1 0 1 0 1 16384 0
malloc-2048 2048 3 5 3 0 8 16384 0
malloc-2048 2048 3 5 3 0 8 16384 0
malloc-1024 1024 8 8 9 0 16 16384 0
malloc-512 512 0 32 1 0 30 16384 0
malloc-512 512 1 31 1 0 30 16384 0
malloc-512 512 1 31 5 0 30 16384 0
SMR CPU 32 7 504 7 0 254 16352 0
vtnet_tx_hdr 24 0 668 765417 0 254 16032 0
malloc-16 16 261 739 4737 0 254 16000 0
kenv 258 15 45 1039 0 30 15480 0
mqnode 416 3 33 3 0 30 14976 0
vmem 1856 1 7 1 0 8 14848 0
SMR SHARED 24 7 504 7 0 254 12264 0
malloc-32 32 121 257 758 0 254 12096 0
malloc-16 16 14 736 98 0 254 12000 0
malloc-16 16 179 571 634 0 254 12000 0
malloc-16 16 38 712 164 0 254 12000 0
malloc-16 16 287 463 26498 0 254 12000 0
malloc-384 384 1 29 1 0 30 11520 0
malloc-384 384 2 28 2 0 30 11520 0
malloc-8192 8192 1 0 1 0 1 8192 0
malloc-8192 8192 1 0 1 0 1 8192 0
malloc-8192 8192 1 0 1 0 1 8192 0
malloc-4096 4096 0 2 1 0 2 8192 0
pcpu-16 16 14 498 14 0 254 8192 0
malloc-16 16 0 500 2 0 254 8000 0
malloc-16 16 10 490 12 0 254 8000 0
UMA Slabs 1 176 10 12 10 0 62 3872 0
KMAP ENTRY 96 12 27 14 0 0 3744 0
pcpu-4 4 1 511 1 0 254 2048 0
FFS1 dinode 128 0 0 0 0 126 0 0
ada_ccb 272 0 0 0 0 30 0 0
swblk 136 0 0 0 0 62 0 0
swpctrie 144 0 0 0 0 62 0 0
cdg_qdiffsample 16 0 0 0 0 254 0 0
pf state scrubs 40 0 0 0 0 254 0 0
pf frag entries 40 0 0 0 0 254 0 0
pf frags 248 0 0 0 0 62 0 0
pf table entries 160 0 0 0 0 254 0 0
pf table entry counters 64 0 0 0 0 254 0 0
pf source nodes 136 0 0 0 0 254 0 0
pf state keys 88 0 0 0 0 126 0 0
pf states 312 0 0 0 0 254 0 0
pf tags 104 0 0 0 0 126 0 0
pf mtags 56 0 0 0 0 254 0 0
tcp_rack_pcb 896 0 0 0 0 16 0 0
tcp_rack_map 120 0 0 0 0 126 0 0
ipq 56 0 0 0 0 254 0 0
tfo_ccache_entries 80 0 0 0 0 126 0 0
tfo 4 0 0 0 0 254 0 0
sackhole 32 0 0 0 0 254 0 0
tcptw 72 0 0 0 0 254 0 0
sctp_asconf_ack 48 0 0 0 0 254 0 0
sctp_asconf 40 0 0 0 0 254 0 0
tcp_log_id_node 120 0 0 0 0 126 0 0
tcp_log_id_bucket 176 0 0 0 0 62 0 0
tcp_log 416 0 0 0 0 254 0 0
tcpreass 48 0 0 0 0 254 0 0
ripcb ports 32 0 0 0 0 254 0 0
udplite_inpcb ports 32 0 0 0 0 254 0 0
udplite_inpcb 424 0 0 0 0 30 0 0
IPsec SA lft_c 16 0 0 0 0 254 0 0
itimer 352 0 0 0 0 30 0 0
AIOLIO 272 0 0 0 0 30 0 0
AIOCB 552

---
This report is generated by a bot. It may contain errors.
See https://goo.gl/tpsmEJ for more information about syzbot.
syzbot engineers can be reached at syzk...@googlegroups.com.

syzbot will keep track of this issue. See:
https://goo.gl/tpsmEJ#status for how to communicate with syzbot.

syzbot

unread,
Jul 27, 2022, 3:06:23 AM7/27/22
to syzkaller-f...@googlegroups.com
Auto-closing this bug as obsolete.
Crashes did not happen for a while, no reproducer and no activity.
Reply all
Reply to author
Forward
0 new messages