panic: ASan: Invalid access, NUM-byte read in smp_targeted_tlb_shootdown
2 views
Skip to first unread message
syzbot
Sep 29, 2021, 11:07:31 AM9/29/21
to syzkaller-f...@googlegroups.com
Hello,
syzbot found the following issue on:
HEAD commit: 5f07d7fe408b mgb: Fix DEBUG (and LINT) build
git tree: https://github.com/freebsd/freebsd-src.git main
console output: https://syzkaller.appspot.com/x/log.txt?x=16068260b00000
dashboard link: https://syzkaller.appspot.com/bug?extid=ab379bf13ff75f251d6c
userspace arch: i386
Unfortunately, I don't have any reproducer for this issue yet.
IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+ab379b...@syzkaller.appspotmail.com
panic: ASan: Invalid access, 8-byte read at 0xfffffe00577be600, UseAfterScope(f8)
cpuid = 0
time = 1632928002
KDB: stack backtrace:
db_trace_self_wrapper() at db_trace_self_wrapper+0xc7/frame 0xfffffe00577be1b0
kdb_backtrace() at kdb_backtrace+0xd3/frame 0xfffffe00577be310
vpanic() at vpanic+0x2c5/frame 0xfffffe00577be3f0
panic() at panic+0xb5/frame 0xfffffe00577be4b0
__asan_load8_noabort() at __asan_load8_noabort+0x376/frame 0xfffffe00577be570
smp_targeted_tlb_shootdown() at smp_targeted_tlb_shootdown+0x26a/frame 0xfffffe00577be710
smp_masked_invlpg() at smp_masked_invlpg+0xe6/frame 0xfffffe00577be810
pmap_invalidate_page() at pmap_invalidate_page+0x240/frame 0xfffffe00577be910
pmap_remove_write() at pmap_remove_write+0xd5d/frame 0xfffffe00577bea50
vm_object_page_clean() at vm_object_page_clean+0x347/frame 0xfffffe00577beb50
vfs_periodic_msync_inactive() at vfs_periodic_msync_inactive+0x437/frame 0xfffffe00577bec50
kern_sync() at kern_sync+0x1b2/frame 0xfffffe00577bed20
sys_sync() at sys_sync+0xe/frame 0xfffffe00577bed30
ia32_syscall() at ia32_syscall+0x41f/frame 0xfffffe00577bef30
int0x80_syscall_common() at int0x80_syscall_common+0x9c/frame 0xfbffcf78
KDB: enter: panic
[ thread pid 884 tid 100138 ]
Stopped at kdb_enter+0x6b: movq $0,0x28dfe8a(%rip)
db>
db> set $lines = 0
db> set $maxwidth = 0
db> show registers
cs 0x20
ds 0x3b
es 0x3b
fs 0x13
gs 0x1b
ss 0
rax 0x12
rcx 0x6d9f8b2b2ad8d52
rdx 0x1
rbx 0
rsp 0xfffffe00577be2f0
rbp 0xfffffe00577be310
rsi 0
rdi 0xffffffff817bceba vprintf+0x35a
r8 0
r9 0xfffffe00577bde28
r10 0
r11 0
r12 0xfffffe009ea2d560
r13 0xfffffe00577be301
r14 0xffffffff82c80040 .str.18
r15 0xffffffff82c80040 .str.18
rip 0xffffffff817b082b kdb_enter+0x6b
rflags 0x200046 kernload+0x46
kdb_enter+0x6b: movq $0,0x28dfe8a(%rip)
db> show proc
Process 884 (syz-executor.0) at 0xfffffe009ea56538:
state: NORMAL
uid: 0 gids: 0, 0, 5
parent: pid 882 at 0xfffffe009ea2b538
ABI: FreeBSD ELF32
flag: 0x10000000 flag2: 0
arguments: /root/syz-executor.0
reaper: 0xfffffe0053d60538 reapsubtree: 1
sigparent: 20
vmspace: 0xfffffe009ea8a3e0
(map 0xfffffe009ea8a3e0)
(map.pmap 0xfffffe009ea8a4a0)
(pmap 0xfffffe009ea8a500)
threads: 1
100138 Run CPU 0 syz-executor.0
db> ps
pid ppid pgrp uid state wmesg wchan cmd
885 882 783 0 R syz-executor.0
884 882 783 0 R CPU 0 syz-executor.0
883 791 791 0 R (threaded) syz-executor.3
100134 Run CPU 1 syz-executor.3
100146 RunQ syz-executor.3
882 783 783 0 R (threaded) syz-executor.0
100132 RunQ syz-executor.0
100145 S uwait 0xfffffe0058b13400 syz-executor.0
875 1 875 0 Ss select 0xfffffe009ea163c0 rtsol
874 1 874 0 Ss select 0xfffffe009ea9adc0 rtsol
873 1 873 0 Ss select 0xfffffe009ea9ae40 rtsol
870 795 436 0 S kqread 0xfffffe0058964a00 rtsol
840 818 784 0 S uwait 0xfffffe009ea31b00 syz-executor.1
818 784 784 0 S (threaded) syz-executor.1
100130 S nanslp 0xffffffff8405d5c0 syz-executor.1
100135 S ksem 0xfffffe009e40d798 syz-executor.1
100136 S uwait 0xfffffe009e472400 syz-executor.1
795 787 436 0 S wait 0xfffffe0058946a70 sh
791 780 791 0 Ss nanslp 0xffffffff8405d5c1 syz-executor.3
787 436 436 0 S wait 0xfffffe009ea1ca70 sh
786 780 786 0 Ss piperd 0xfffffe009ea09000 syz-executor.2
784 780 784 0 Ss nanslp 0xffffffff8405d5c1 syz-executor.1
783 780 783 0 Ss nanslp 0xffffffff8405d5c1 syz-executor.0
780 778 778 0 S (threaded) syz-fuzzer
100094 S uwait 0xfffffe005701ad80 syz-fuzzer
100118 S uwait 0xfffffe0058552680 syz-fuzzer
100119 S uwait 0xfffffe0058552380 syz-fuzzer
100120 S uwait 0xfffffe0057026900 syz-fuzzer
100121 S uwait 0xfffffe0058b13d00 syz-fuzzer
100122 S uwait 0xfffffe009e472500 syz-fuzzer
100123 S uwait 0xfffffe009e472600 syz-fuzzer
100125 S kqread 0xfffffe0058964400 syz-fuzzer
100127 S uwait 0xfffffe009e472200 syz-fuzzer
778 776 778 0 Ss pause 0xfffffe009e9e0b20 csh
776 694 776 0 Ss select 0xfffffe0058b16440 sshd
760 1 760 0 Ss+ ttyin 0xfffffe0057014cb0 getty
759 1 759 0 Ss+ ttyin 0xfffffe00575f74b0 getty
758 1 758 0 Ss+ ttyin 0xfffffe00575f7cb0 getty
757 1 757 0 Ss+ ttyin 0xfffffe00575f44b0 getty
756 1 756 0 Ss+ ttyin 0xfffffe00575f4cb0 getty
755 1 755 0 Ss+ ttyin 0xfffffe00575f04b0 getty
754 1 754 0 Ss+ ttyin 0xfffffe00575f0cb0 getty
753 1 753 0 Ss+ ttyin 0xfffffe00575eb4b0 getty
752 1 752 0 Ss+ ttyin 0xfffffe00575ebcb0 getty
698 1 698 0 Ss nanslp 0xffffffff8405d5c0 cron
694 1 694 0 Ss select 0xfffffe005742d0c0 sshd
507 1 507 0 Ss select 0xfffffe0058b16a40 syslogd
436 1 436 0 Ss wait 0xfffffe005895e000 devd
435 1 435 65 Ss select 0xfffffe0058b16ac0 dhclient
350 1 350 0 Ss select 0xfffffe0058b16b40 dhclient
347 1 347 0 Ss select 0xfffffe005742d540 dhclient
23 0 0 0 DL syncer 0xffffffff84185960 [syncer]
22 0 0 0 DL vlruwt 0xfffffe0058558538 [vnlru]
21 0 0 0 DL (threaded) [bufdaemon]
100085 D qsleep 0xffffffff84183660 [bufdaemon]
100088 D - 0xffffffff83411f80 [bufspacedaemon-0]
100100 D sdflush 0xfffffe00588440e8 [/ worker]
20 0 0 0 DL psleep 0xffffffff841bbb80 [vmdaemon]
19 0 0 0 DL (threaded) [pagedaemon]
100083 D psleep 0xffffffff841af6b8 [dom0]
100089 D launds 0xffffffff841af6c4 [laundry: dom0]
100090 D umarcl 0xffffffff81eb3090 [uma]
18 0 0 0 DL - 0xffffffff83e13ca0 [rand_harvestq]
17 0 0 0 DL waiting 0xffffffff84a866e0 [sctp_iterator]
16 0 0 0 DL pftm 0xffffffff84c5c1a0 [pf purge]
15 0 0 0 DL - 0xffffffff8417e880 [soaiod4]
9 0 0 0 DL - 0xffffffff8417e880 [soaiod3]
8 0 0 0 DL - 0xffffffff8417e880 [soaiod2]
7 0 0 0 DL - 0xffffffff8417e880 [soaiod1]
6 0 0 0 DL (threaded) [cam]
100048 D - 0xffffffff83c99540 [doneq0]
100049 D - 0xffffffff83c994c0 [async]
100082 D - 0xffffffff83c99340 [scanner]
14 0 0 0 DL seqstat 0xfffffe0056ac8c88 [sequencer 00]
5 0 0 0 DL crypto_ 0xfffffe00541c9d80 [crypto returns 1]
4 0 0 0 DL crypto_ 0xfffffe00541c9d30 [crypto returns 0]
3 0 0 0 DL crypto_ 0xffffffff841a9760 [crypto]
13 0 0 0 DL (threaded) [geom]
100039 D - 0xffffffff84030b80 [g_event]
100040 D - 0xffffffff84030bc0 [g_up]
100041 D - 0xffffffff84030c00 [g_down]
2 0 0 0 DL (threaded) [KTLS]
100029 D - 0xfffffe00081f6d00 [thr_0]
100030 D - 0xfffffe00081f6d80 [thr_1]
100031 D - 0xffffffff8417fc08 [alloc_0]
12 0 0 0 WL (threaded) [intr]
100011 I [swi6: task queue]
100012 I [swi6: Giant taskq]
100014 I [swi5: fast taskq]
100032 I [swi1: netisr 0]
100033 I [swi3: vm]
100034 I [swi4: clock (0)]
100035 I [swi4: clock (1)]
100036 I [swi1: hpts]
100037 I [swi1: hpts]
100050 I [irq24: virtio_pci0]
100051 I [irq25: virtio_pci0]
100052 I [irq26: virtio_pci0]
100053 I [irq27: virtio_pci0]
100054 I [irq28: virtio_pci1]
100055 I [irq29: virtio_pci1]
100056 I [irq30: virtio_pci1]
100057 I [irq31: virtio_pci1]
100058 I [irq32: virtio_pci1]
100063 I [irq10: virtio_pci2]
100065 I [irq1: atkbd0]
100066 I [irq12: psm0]
100067 I [swi0: uart uart++]
100075 I [swi1: pf send]
11 0 0 0 RL (threaded) [idle]
100003 CanRun [idle: cpu0]
100004 CanRun [idle: cpu1]
1 0 1 0 SLs wait 0xfffffe0053d60538 [init]
10 0 0 0 DL audit_w 0xffffffff841aa700 [audit]
0 0 0 0 DLs (threaded) [kernel]
100000 D swapin 0xffffffff84031a80 [swapper]
100005 D - 0xfffffe00081f8900 [softirq_0]
100006 D - 0xfffffe00081f8700 [softirq_1]
100007 D - 0xfffffe00081f8500 [if_io_tqg_0]
100008 D - 0xfffffe00081f8300 [if_io_tqg_1]
100009 D - 0xfffffe00081f8100 [if_config_tqg_0]
100010 D - 0xfffffe0053dfce00 [deferred_unmount ta]
100013 D - 0xfffffe0053dfc800 [thread taskq]
100015 D - 0xfffffe0053dfc400 [linuxkpi_irq_wq]
100016 D - 0xfffffe0053dfc200 [kqueue_ctx taskq]
100017 D - 0xfffffe0053dfc000 [pci_hp taskq]
100018 D - 0xfffffe0053e06d00 [aiod_kick taskq]
100019 D - 0xfffffe0053e06b00 [inm_free taskq]
100020 D - 0xfffffe0053e06900 [in6m_free taskq]
100021 D - 0xfffffe0053e06700 [linuxkpi_short_wq_0]
100022 D - 0xfffffe0053e06700 [linuxkpi_short_wq_1]
100023 D - 0xfffffe0053e06700 [linuxkpi_short_wq_2]
100024 D - 0xfffffe0053e06700 [linuxkpi_short_wq_3]
100025 D - 0xfffffe0053e06200 [linuxkpi_long_wq_0]
100026 D - 0xfffffe0053e06200 [linuxkpi_long_wq_1]
100027 D - 0xfffffe0053e06200 [linuxkpi_long_wq_2]
100028 D - 0xfffffe0053e06200 [linuxkpi_long_wq_3]
100038 D - 0xfffffe0053e14200 [firmware taskq]
100042 D - 0xfffffe005419ec00 [crypto_0]
100043 D - 0xfffffe005419ec00 [crypto_1]
100059 D - 0xfffffe0056ec3b00 [vtnet0 rxq 0]
100060 D - 0xfffffe0056ec3a00 [vtnet0 txq 0]
100061 D - 0xfffffe0056ec3900 [vtnet0 rxq 1]
100062 D - 0xfffffe0056ec3800 [vtnet0 txq 1]
100064 D vtbslp 0xfffffe0056ff6600 [virtio_balloon]
100068 D - 0xfffffe0057027800 [mca taskq]
100073 D - 0xffffffff82c86fc1 [deadlkres]
100077 D - 0xfffffe0057400600 [acpi_task_0]
100078 D - 0xfffffe0057400600 [acpi_task_1]
100079 D - 0xfffffe0057400600 [acpi_task_2]
100081 D - 0xfffffe005419e400 [CAM taskq]
db> show all locks
Process 884 (syz-executor.0) thread 0xfffffe009ea2d560 (100138)
exclusive sleep mutex pmap (pmap) r = 0 (0xfffffe009e55bb10) locked @ /syzkaller/managers/i386/kernel/sys/amd64/amd64/pmap.c:8628
exclusive rw pmap pv list (pmap pv list) r = 0 (0xfffffe000775dcc0) locked @ /syzkaller/managers/i386/kernel/sys/amd64/amd64/pmap.c:8602
exclusive rw vm object (vm object) r = 0 (0xfffffe009e480738) locked @ /syzkaller/managers/i386/kernel/sys/kern/vfs_subr.c:4840
exclusive lockmgr ufs (ufs) r = 0 (0xfffffe009ea07cb0) locked @ /syzkaller/managers/i386/kernel/sys/kern/vfs_subr.c:2993
Process 883 (syz-executor.3) thread 0xfffffe009ea2dc80 (100134)
shared sx vm map (user) (vm map (user)) r = 0 (0xfffffe009ea89060) locked @ /syzkaller/managers/i386/kernel/sys/vm/vm_map.c:4935
db> show malloc
Type InUse MemUse Requests
pf_hash 5 11524K 5
devbuf 4213 4323K 4241
tcp_hpts 6 3201K 6
sysctloid 35175 2072K 35246
vtbuf 24 1968K 46
kobj 326 1304K 483
newblk 632 1182K 693
vfscache 3 1025K 3
pcb 35 546K 92
inodedep 34 525K 97
ufs_quota 1 512K 1
vfs_hash 1 512K 1
callout 2 512K 2
intr 4 472K 4
subproc 123 260K 950
acpica 1674 184K 55237
vnet_data 1 168K 1
vmem 3 146K 4
tidhash 3 141K 3
linker 355 140K 383
pagedep 15 132K 35
tfo_ccache 1 128K 1
filedesc 16 121K 77
DEVFS1 108 108K 125
sem 4 106K 4
bus 986 80K 3474
mtx_pool 2 72K 2
syncache 1 68K 1
acpitask 1 64K 1
ddb_capture 1 64K 1
module 509 64K 509
kdtrace 201 40K 1033
umtx 308 39K 308
temp 34 33K 1890
hostcache 1 32K 1
shm 1 32K 1
DEVFS3 127 32K 137
msg 4 30K 4
gtaskqueue 18 26K 18
kbdmux 6 22K 6
DEVFS_RULE 56 20K 56
ifaddr 66 19K 68
BPF 14 19K 14
ufs_mount 4 17K 5
proc 3 17K 3
tty 16 16K 16
routetbl 125 16K 404
ithread 99 16K 99
bus-sc 34 15K 1691
lltable 43 14K 43
KTRACE 100 13K 100
ifnet 7 13K 7
ether_multi 152 13K 162
kenv 95 12K 95
eventhandler 133 12K 133
CAM queue 5 11K 1528
GEOM 61 10K 487
rman 84 10K 425
in6_multi 65 9K 65
ksem 3 9K 3
bmsafemap 2 9K 66
kqueue 63 9K 892
UART 12 9K 12
devstat 4 9K 4
rpc 2 8K 2
shmfd 1 8K 1
pfs_vncache 1 8K 1
pfs_nodes 20 8K 20
audit_evclass 237 8K 295
taskqueue 63 7K 63
sglist 5 7K 5
CAM DEV 3 6K 510
cred 23 6K 196
plimit 20 5K 334
ufs_dirhash 24 5K 24
DEVFSP 72 5K 80
UMA 270 5K 270
pf_ifnet 10 5K 19
vt 11 5K 11
memdesc 1 4K 1
MCA 32 4K 32
evdev 4 4K 4
kcovinfo 64 4K 68
diradd 30 4K 64
pwddesc 58 4K 885
acpisem 28 4K 28
hhook 15 4K 17
session 26 4K 36
mkdir 24 3K 50
terminal 11 3K 11
proc-args 46 3K 555
indirdep 10 3K 10
uidinfo 3 3K 7
ip6ndp 13 3K 14
local_apic 1 2K 1
io_apic 1 2K 1
fpukern_ctx 2 2K 2
ipsec-saq 2 2K 2
selfd 32 2K 24019
Unitno 31 2K 47
sctp_ifa 13 2K 14
CAM XPT 22 2K 543
lockf 15 2K 22
sctp_atcl 4 2K 5
newdirblk 12 2K 25
in_multi 6 2K 8
vnodemarker 3 2K 15
select 11 2K 32
dirrem 5 2K 33
ipsecpolicy 2 2K 2
acpidev 20 2K 20
msi 9 2K 9
clone 9 2K 9
tun 7 2K 7
softdep 1 1K 1
sahead 1 1K 1
secasvar 1 1K 1
nhops 6 1K 8
NFSD session 1 1K 1
CAM periph 4 1K 271
sctp_ifn 6 1K 14
ipsec 3 1K 3
mld 6 1K 6
igmp 6 1K 6
toponodes 6 1K 6
isadev 6 1K 6
mount 16 1K 89
pci_link 10 1K 10
freefile 5 1K 31
crypto 4 1K 4
encap_export_host 12 1K 12
pfil 4 1K 4
procdesc 4 1K 10
cdev 2 1K 2
inpcbpolicy 13 1K 184
osd 8 1K 21
chacha20random 1 1K 1
sctp_timw 1 1K 1
NFSD lckfile 1 1K 1
NFSD V4client 1 1K 1
DEVFS 9 1K 10
vnodes 1 1K 1
CAM SIM 2 1K 2
ktls 1 1K 1
feeder 7 1K 7
tcpfunc 3 1K 3
loginclass 3 1K 6
prison 6 1K 6
lkpikmalloc 5 1K 6
aesni_data 2 1K 2
sctp_atky 4 1K 6
nexusdev 8 1K 8
apmdev 1 1K 1
atkbddev 2 1K 2
CAM dev queue 2 1K 2
xform 2 1K 42
CAM I/O Scheduler 1 1K 1
CAM path 4 1K 1034
pmchooks 1 1K 1
filedesc_to_leader 2 1K 2
soname 4 1K 3451
sctp_vrf 1 1K 1
sctp_athm 4 1K 5
vnet 1 1K 1
entropy 2 1K 37
acpiintr 1 1K 1
pmc 1 1K 1
cpus 2 1K 2
vnet_data_free 1 1K 1
Per-cpu 1 1K 1
freework 1 1K 31
p1003.1b 1 1K 1
filecaps 1 1K 78
dctcp data 0 0K 0
cdg data 0 0K 0
pf_table 0 0K 0
pf_rule 0 0K 0
pf_altq 0 0K 0
pf_osfp 0 0K 0
pf_temp 0 0K 0
chd data 0 0K 0
sctp_mcore 0 0K 0
sctp_socko 0 0K 0
sctp_iter 0 0K 11
sctp_mvrf 0 0K 0
sctp_cpal 0 0K 0
sctp_cmsg 0 0K 0
sctp_stre 0 0K 0
sctp_athi 0 0K 0
sctp_a_it 0 0K 11
sctp_aadr 0 0K 0
sctp_stro 0 0K 1
sctp_stri 0 0K 0
sctp_map 0 0K 2
cubic data 0 0K 0
htcp data 0 0K 0
mqdata 0 0K 0
tcp_do 0 0K 0
tcp_fsb 0 0K 0
vegas data 0 0K 0
NFSCL diroff 0 0K 0
NEWdirectio 0 0K 0
madt_table 0 0K 2
smartpqi 0 0K 0
NEWNFSnode 0 0K 0
NFSCL lck 0 0K 0
NFSCL lckown 0 0K 0
NFSCL client 0 0K 0
NFSCL deleg 0 0K 0
NFSCL open 0 0K 0
NFSCL owner 0 0K 0
NFS fh 0 0K 0
iavf 0 0K 0
ixl 0 0K 0
NFS req 0 0K 0
NFSD usrgroup 0 0K 0
NFSD string 0 0K 0
NFSD V4lock 0 0K 0
NFSD V4state 0 0K 0
ice-resmgr 0 0K 0
ice-osdep 0 0K 0
ice 0 0K 0
axgbe 0 0K 0
NFSD srvcache 0 0K 0
msdosfs_fat 0 0K 0
msdosfs_mount 0 0K 0
msdosfs_node 0 0K 0
DEVFS4 0 0K 0
xen_intr 0 0K 0
DEVFS2 0 0K 0
gntdev 0 0K 0
xen_hvm 0 0K 0
legacydrv 0 0K 0
qpidrv 0 0K 0
privcmd_dev 0 0K 0
evtchn_dev 0 0K 0
dmar_idpgtbl 0 0K 0
dmar_dom 0 0K 0
dmar_ctx 0 0K 0
xenstore 0 0K 0
ciss_data 0 0K 0
BACKLIGHT 0 0K 0
isci 0 0K 0
iommu_dmamap 0 0K 0
xnb 0 0K 0
hyperv_socket 0 0K 0
bxe_ilt 0 0K 0
xbbd 0 0K 0
xenbus 0 0K 0
xbd 0 0K 0
Balloon 0 0K 0
sysmouse 0 0K 0
vm_fictitious 0 0K 0
vtfont 0 0K 0
ath_hal 0 0K 0
athdev 0 0K 0
ata_pci 0 0K 0
ata_dma 0 0K 0
ata_generic 0 0K 0
amr 0 0K 0
pvscsi 0 0K 0
scsi_da 0 0K 69
UMAHash 0 0K 0
ata_da 0 0K 0
vm_pgdata 0 0K 0
jblocks 0 0K 0
savedino 0 0K 17
sentinel 0 0K 0
jfsync 0 0K 0
jtrunc 0 0K 0
sbdep 0 0K 5
jsegdep 0 0K 0
jseg 0 0K 0
jfreefrag 0 0K 0
jfreeblk 0 0K 0
jnewblk 0 0K 0
jmvref 0 0K 0
jremref 0 0K 0
jaddref 0 0K 0
freedep 0 0K 0
freeblks 0 0K 30
freefrag 0 0K 2
allocindir 0 0K 0
allocdirect 0 0K 0
ufs_trim 0 0K 0
mactemp 0 0K 0
audit_trigger 0 0K 0
audit_pipe_presel 0 0K 0
audit_pipeent 0 0K 0
audit_pipe 0 0K 0
audit_evname 0 0K 0
audit_bsm 0 0K 0
audit_gidset 0 0K 0
audit_text 0 0K 0
audit_path 0 0K 0
audit_data 0 0K 0
audit_cred 0 0K 0
scsi_ch 0 0K 0
scsi_cd 0 0K 0
AHCI driver 0 0K 0
USBdev 0 0K 0
USB 0 0K 0
agp 0 0K 0
nvme_da 0 0K 0
ktls_ocf 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5E_TLS 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EN 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5DUMP 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
seq_file 0 0K 0
radix 0 0K 0
idr 0 0K 0
lkpifw 0 0K 0
NLM 0 0K 0
ipsec-spdcache 0 0K 0
ipsec-reg 0 0K 0
ipsec-misc 0 0K 0
ipsecrequest 0 0K 0
ip6opt 0 0K 3
ip6_msource 0 0K 0
ip6_moptions 0 0K 0
in6_mfilter 0 0K 0
frag6 0 0K 0
tcplog 0 0K 0
tcp_hwpace 0 0K 0
acpipwr 0 0K 0
acpi_perf 0 0K 0
LRO 0 0K 0
newreno data 0 0K 0
ip_msource 0 0K 0
ip_moptions 0 0K 0
in_mfilter 0 0K 0
ipid 0 0K 0
80211scan 0 0K 0
80211ratectl 0 0K 0
80211power 0 0K 0
80211nodeie 0 0K 0
80211node 0 0K 0
80211mesh_gt 0 0K 0
80211mesh_rt 0 0K 0
80211perr 0 0K 0
80211prep 0 0K 0
80211preq 0 0K 0
80211dfs 0 0K 0
80211crypto 0 0K 0
80211vap 0 0K 0
iflib 0 0K 0
vlan 0 0K 0
gif 0 0K 0
ifdescr 0 0K 0
zlib 0 0K 0
fadvise 0 0K 0
VN POLL 0 0K 0
twsbuf 0 0K 0
statfs 0 0K 200
namei_tracker 0 0K 0
export_host 0 0K 0
cl_savebuf 0 0K 2
twe_commands 0 0K 0
twa_commands 0 0K 0
tcp_log_dev 0 0K 0
midi buffers 0 0K 0
mixer 0 0K 0
ac97 0 0K 0
hdacc 0 0K 0
hdac 0 0K 0
hdaa 0 0K 0
acpicmbat 0 0K 0
SIIS driver 0 0K 0
CAM CCB 0 0K 523
PUC 0 0K 0
ppbusdev 0 0K 0
agtiapi_MemAlloc malloc 0 0K 0
biobuf 0 0K 0
aios 0 0K 0
lio 0 0K 0
acl 0 0K 0
osti_cacheable 0 0K 0
mbuf_tag 0 0K 95
tempbuff 0 0K 0
tempbuff 0 0K 0
ag_tgt_map_t malloc 0 0K 0
ag_slr_map_t malloc 0 0K 0
lDevFlags * malloc 0 0K 0
tiDeviceHandle_t * malloc 0 0K 0
ag_portal_data_t malloc 0 0K 0
ag_device_t malloc 0 0K 0
STLock malloc 0 0K 0
CCB List 0 0K 0
sr_iov 0 0K 0
OCS 0 0K 0
OCS 0 0K 0
nvme 0 0K 0
nvd 0 0K 0
netmap 0 0K 0
mwldev 0 0K 0
MVS driver 0 0K 0
CAM ccb queue 0 0K 0
mrsasbuf 0 0K 0
mpt_user 0 0K 0
mps_user 0 0K 0
accf 0 0K 0
pts 0 0K 0
iov 0 0K 14001
ioctlops 0 0K 97
eventfd 0 0K 0
Witness 0 0K 0
stack 0 0K 0
MPSSAS 0 0K 0
mps 0 0K 0
mpr_user 0 0K 0
MPRSAS 0 0K 0
mpr 0 0K 0
mfibuf 0 0K 0
sbuf 0 0K 288
md_sectors 0 0K 0
firmware 0 0K 0
compressor 0 0K 0
md_disk 0 0K 0
SWAP 0 0K 0
malodev 0 0K 0
LED 0 0K 0
sysctltmp 0 0K 656
sysctl 0 0K 3
ekcd 0 0K 0
dumper 0 0K 0
sendfile 0 0K 0
rctl 0 0K 0
ix_sriov 0 0K 0
aacraidcam 0 0K 0
aacraid_buf 0 0K 0
ix 0 0K 0
ipsbuf 0 0K 0
cache 0 0K 0
iirbuf 0 0K 0
prison_racct 0 0K 0
Fail Points 0 0K 0
sigio 0 0K 1
pwd 0 0K 0
tty console 0 0K 0
aaccam 0 0K 0
aacbuf 0 0K 0
zstd 0 0K 0
XZ_DEC 0 0K 0
nvlist 0 0K 0
SCSI ENC 0 0K 0
SCSI sa 0 0K 0
scsi_pass 0 0K 0
isofs_node 0 0K 0
isofs_mount 0 0K 0
tr_raid5_data 0 0K 0
tr_raid1e_data 0 0K 0
tr_raid1_data 0 0K 0
tr_raid0_data 0 0K 0
tr_concat_data 0 0K 0
md_sii_data 0 0K 0
md_promise_data 0 0K 0
md_nvidia_data 0 0K 0
md_jmicron_data 0 0K 0
md_intel_data 0 0K 0
md_ddf_data 0 0K 0
raid_data 0 0K 72
geom_flashmap 0 0K 0
tmpfs dir 0 0K 0
tmpfs name 0 0K 0
tmpfs mount 0 0K 0
NFS FHA 0 0K 0
newnfsmnt 0 0K 0
newnfsclient_req 0 0K 0
NFSCL layrecall 0 0K 0
NFSCL session 0 0K 0
NFSCL sockreq 0 0K 0
NFSCL devinfo 0 0K 0
NFSCL flayout 0 0K 0
NFSCL layout 0 0K 0
NFSD rollback 0 0K 0
db> show uma
Zone Size Used Free Requests Sleeps Bucket Total Mem XFree
mbuf_jumbo_page 4096 8320 983 764817 0 254 38105088 0
pbuf 2624 0 973 0 0 2 2553152 0
mbuf 256 8609 961 1149776 0 254 2449920 0
BUF TRIE 144 184 11576 537 0 62 1693440 0
malloc-384 384 4202 28 4266 0 30 1624320 0
malloc-4096 4096 387 3 1373 0 2 1597440 0
malloc-128 128 11833 40 11904 0 126 1519744 0
RADIX NODE 144 10234 149 48396 0 62 1495152 0
UMA Slabs 0 112 10138 11 10138 0 126 1136688 0
vmem btag 56 15650 93 15650 0 254 881608 0
FFS inode 1160 503 22 534 0 8 609000 0
malloc-65536 65536 6 0 6 0 1 393216 0
lkpimm 168 1 2327 1 0 62 391104 0
lkpicurr 168 2 2326 2 0 62 391104 0
VM OBJECT 264 1127 43 14240 0 30 308880 0
malloc-64 64 4480 119 6336 0 254 294336 0
THREAD 1808 141 13 146 0 8 278432 0
256 Bucket 2048 120 10 15338 0 8 266240 0
VNODE 448 539 37 572 0 30 258048 0
malloc-256 256 992 13 1874 0 62 257280 0
malloc-16 16 14749 251 16033 0 254 240000 0
DEVCTL 1024 22 198 150 0 0 225280 0
malloc-65536 65536 1 2 63 0 1 196608 0
malloc-65536 65536 1 2 137 0 1 196608 0
UMA Zones 768 242 2 242 0 16 187392 0
malloc-32 32 5598 198 6381 0 254 185472 0
malloc-16384 16384 7 4 36 0 1 180224 0
malloc-128 128 1225 46 25831 0 126 162688 0
MAP ENTRY 96 1408 188 42988 0 126 153216 0
malloc-1024 1024 133 3 150 0 16 139264 0
malloc-128 128 1042 12 5309 0 126 134912 0
FFS2 dinode 256 503 22 534 0 62 134400 0
FPU_save_area 832 143 10 2437 0 16 127296 0
ksiginfo 112 46 998 2344 0 126 116928 0
S VFS Cache 104 1003 89 1046 0 126 113568 0
VMSPACE 2544 34 8 867 0 4 106848 0
malloc-32768 32768 1 2 131 0 1 98304 0
malloc-8192 8192 9 2 110 0 1 90112 0
UMA Kegs 384 227 6 227 0 30 89472 0
malloc-2048 2048 13 29 578 0 8 86016 0
PROC 1336 58 5 885 0 8 84168 0
clpbuf 2624 0 32 23 0 16 83968 0
malloc-8192 8192 8 1 10 0 1 73728 0
filedesc0 1072 58 5 885 0 8 67536 0
mbuf_cluster 2048 30 2 30 0 254 65536 0
malloc-65536 65536 1 0 1 0 1 65536 0
malloc-65536 65536 0 1 8 0 1 65536 0
g_bio 408 0 160 4972 0 30 65280 0
malloc-4096 4096 14 1 27 0 2 61440 0
128 Bucket 1024 42 17 649 0 16 60416 0
malloc-8192 8192 4 3 32 0 1 57344 0
malloc-16384 16384 3 0 3 0 1 49152 0
malloc-16384 16384 2 1 17 0 1 49152 0
malloc-16384 16384 1 2 161 0 1 49152 0
malloc-2048 2048 2 22 575 0 8 49152 0
malloc-1024 1024 10 34 1557 0 16 45056 0
malloc-64 64 517 176 1629 0 254 44352 0
32 Bucket 256 48 117 3211 0 62 42240 0
pcpu-8 8 4641 479 4797 0 254 40960 0
64 Bucket 512 59 21 2474 0 30 40960 0
malloc-64 64 77 553 37731 0 254 40320 0
socket 960 33 7 1419 0 254 38400 0
DIRHASH 1024 34 2 34 0 16 36864 0
NAMEI 1024 0 36 13254 0 16 36864 0
malloc-4096 4096 8 1 10 0 2 36864 0
malloc-128 128 61 218 323 0 126 35712 0
malloc-32768 32768 1 0 1 0 1 32768 0
malloc-32768 32768 1 0 1 0 1 32768 0
pcpu-64 64 487 25 487 0 254 32768 0
malloc-384 384 67 13 113 0 30 30720 0
malloc-256 256 58 62 272 0 62 30720 0
pipe 744 19 21 335 0 16 29760 0
malloc-64 64 102 339 1500 0 254 28224 0
ttyinq 160 135 40 300 0 62 28000 0
malloc-384 384 53 17 55 0 30 26880 0
da_ccb 544 0 49 1363 0 16 26656 0
malloc-4096 4096 3 3 835 0 2 24576 0
malloc-4096 4096 4 2 7 0 2 24576 0
malloc-2048 2048 12 0 12 0 8 24576 0
ertt_txseginfo 40 0 606 3370 0 254 24240 0
KNOTE 160 31 119 32654 0 62 24000 0
8 Bucket 80 39 261 1107 0 126 24000 0
ttyoutq 256 72 18 160 0 62 23040 0
malloc-256 256 50 40 285 0 62 23040 0
TURNSTILE 136 155 13 155 0 62 22848 0
malloc-4096 4096 5 0 5 0 2 20480 0
malloc-2048 2048 2 8 26 0 8 20480 0
malloc-64 64 224 91 280 0 254 20160 0
Files 80 196 54 7321 0 126 20000 0
malloc-128 128 108 47 168 0 126 19840 0
Mountpoints 2752 2 5 2 0 4 19264 0
malloc-256 256 25 50 184 0 62 19200 0
malloc-256 256 66 9 389 0 62 19200 0
malloc-256 256 50 25 408 0 62 19200 0
malloc-256 256 46 29 113 0 62 19200 0
SLEEPQUEUE 88 155 37 155 0 126 16896 0
malloc-16384 16384 1 0 1 0 1 16384 0
malloc-16384 16384 1 0 1 0 1 16384 0
malloc-1024 1024 8 8 12 0 16 16384 0
malloc-512 512 0 32 131 0 30 16384 0
malloc-64 64 166 86 198 0 254 16128 0
malloc-32 32 88 416 610 0 254 16128 0
16 Bucket 144 41 71 320 0 62 16128 0
vtnet_tx_hdr 24 0 668 379584 0 254 16032 0
malloc-384 384 34 6 35 0 30 15360 0
malloc-384 384 22 18 362 0 30 15360 0
tcpcb 1080 4 10 10 0 254 15120 0
malloc-2048 2048 3 3 194 0 8 12288 0
malloc-1024 1024 8 4 183 0 16 12288 0
malloc-1024 1024 7 5 7 0 16 12288 0
malloc-64 64 57 132 374 0 254 12096 0
malloc-32 32 85 293 4029 0 254 12096 0
udp_inpcb 496 6 18 168 0 254 11904 0
malloc-128 128 55 38 261 0 126 11904 0
kenv 258 15 30 1026 0 30 11610 0
unpcb 256 14 31 1205 0 254 11520 0
sctp_asoc 2288 0 5 1 0 254 11440 0
malloc-8192 8192 1 0 1 0 1 8192 0
malloc-8192 8192 1 0 1 0 1 8192 0
malloc-8192 8192 1 0 1 0 1 8192 0
malloc-8192 8192 1 0 1 0 1 8192 0
malloc-2048 2048 3 1 3 0 8 8192 0
malloc-2048 2048 3 1 3 0 8 8192 0
malloc-2048 2048 2 2 4 0 8 8192 0
malloc-1024 1024 2 6 11 0 16 8192 0
malloc-1024 1024 1 7 2 0 16 8192 0
malloc-512 512 4 12 4 0 30 8192 0
malloc-512 512 6 10 77 0 30 8192 0
malloc-512 512 8 8 8 0 30 8192 0
sctp_raddr 736 0 11 1 0 254 8096 0
rtentry 176 29 17 33 0 62 8096 0
PGRP 88 26 66 36 0 126 8096 0
rl_entry 40 36 166 36 0 254 8080 0
sctp_laddr 48 1 167 13 0 254 8064 0
udpcb 32 6 246 168 0 254 8064 0
ertt 72 4 108 10 0 126 8064 0
PWD 32 17 235 112 0 254 8064 0
malloc-64 64 59 67 70 0 254 8064 0
malloc-32 32 123 129 278 0 254 8064 0
malloc-32 32 56 196 73 0 254 8064 0
malloc-32 32 39 213 78 0 254 8064 0
malloc-32 32 53 199 222 0 254 8064 0
malloc-32 32 17 235 30 0 254 8064 0
4 Bucket 48 6 162 54 0 254 8064 0
2 Bucket 32 49 203 533 0 254 8064 0
malloc-16 16 25 475 116 0 254 8000 0
malloc-16 16 56 444 281 0 254 8000 0
malloc-16 16 18 482 44 0 254 8000 0
malloc-16 16 39 461 176 0 254 8000 0
malloc-16 16 286 214 25355 0 254 8000 0
malloc-16 16 4 496 6 0 254 8000 0
ripcb 496 3 13 6 0 254 7936 0
tcp_inpcb 496 4 12 10 0 254 7936 0
malloc-128 128 36 26 51 0 126 7936 0
malloc-128 128 37 25 211 0 126 7936 0
routing nhops 256 26 4 33 0 62 7680 0
mbuf_packet 256 0 30 116 0 254 7680 0
malloc-384 384 0 20 6 0 30 7680 0
malloc-256 256 14 16 525 0 62 7680 0
sctp_ep 1272 4 2 4 0 254 7632 0
cpuset 104 8 54 8 0 126 6448 0
epoch_record pcpu 256 4 12 4 0 62 4096 0
malloc-4096 4096 0 1 1 0 2 4096 0
malloc-4096 4096 0 1 3 0 2 4096 0
malloc-1024 1024 1 3 1 0 16 4096 0
malloc-512 512 0 8 1 0 30 4096 0
malloc-512 512 5 3 5 0 30 4096 0
malloc-512 512 0 8 1 0 30 4096 0
pcpu-16 16 7 249 7 0 254 4096 0
hostcache 64 1 62 1 0 254 4032 0
syncache 168 0 24 4 0 254 4032 0
malloc-16 16 0 250 7 0 254 4000 0
UMA Slabs 1 176 9 13 9 0 62 3872 0
malloc-384 384 2 8 2 0 30 3840 0
malloc-384 384 1 9 1 0 30 3840 0
mqnode 416 3 6 3 0 30 3744 0
KMAP ENTRY 96 12 27 14 0 0 3744 0
vmem 1856 1 1 1 0 8 3712 0
SMR CPU 32 3 60 3 0 254 2016 0
SMR SHARED 24 3 60 3 0 254 1512 0
FFS1 dinode 128 0 0 0 0 126 0 0
ada_ccb 272 0 0 0 0 30 0 0
swblk 136 0 0 0 0 62 0 0
swpctrie 144 0 0 0 0 62 0 0
cdg_qdiffsample 16 0 0 0 0 254 0 0
sctp_asconf_ack 48 0 0 0 0 254 0 0
sctp_asconf 40 0 0 0 0 254 0 0
sctp_stream_msg_out 112 0 0 0 0 254 0 0
sctp_readq 152 0 0 0 0 254 0 0
sctp_chunk 152 0 0 0 0 254 0 0
pf state scrubs 40 0 0 0 0 254 0 0
pf frag entries 40 0 0 0 0 254 0 0
pf frags 248 0 0 0 0 62 0 0
pf table entries 160 0 0 0 0 62 0 0
pf table entry counters 64 0 0 0 0 254 0 0
pf source nodes 136 0 0 0 0 254 0 0
pf state keys 88 0 0 0 0 126 0 0
pf states 312 0 0 0 0 254 0 0
pf tags 104 0 0 0 0 126 0 0
pf mtags 48 0 0 0 0 254 0 0
tcp_rack_pcb 832 0 0 0 0 16 0 0
tcp_rack_map 112 0 0 0 0 126 0 0
tcp_bbr_pcb 832 0 0 0 0 16 0 0
tcp_bbr_map 128 0 0 0 0 126 0 0
udplite_inpcb 496 0 0 0 0 254 0 0
tcp_log_node 120 0 0 0 0 126 0 0
tcp_log_bucket 176 0 0 0 0 62 0 0
tcp_log 416 0 0 0 0 254 0 0
tcpreass 48 0 0 0 0 254 0 0
tfo_ccache_entries 80 0 0 0 0 126 0 0
tfo 4 0 0 0 0 254 0 0
sackhole 32 0 0 0 0 254 0 0
tcptw 88 0 0 0 0 254 0 0
ipq 56 0 0 0 0 254 0 0
IPsec SA lft_c 16 0 0 0 0 254 0 0
itimer 352 0 0 0 0 30 0 0
AIOLIO 272 0 0 0 0 30 0 0
AIOCB 552 0 0 0 0 16 0 0
AIOP 32 0 0 0 0 254 0 0
AIO 208 0 0 0 0 62 0 0
NCLNODE 592 0 0 0 0 16 0 0
TMPFS node 224 0 0 0 0 62 0 0
mqnotifier 216 0 0 0 0 62 0 0
mvdata 64 0 0 0 0 254 0 0
mqueue 248 0 0 0 0 62 0 0
LTS VFS Cache 360 0 0 0 0 30 0 0
L VFS Cache 320 0 0 0 0 30 0 0
STS VFS Cache 144 0 0 0 0 62 0 0
cryptop 280 0 0 0 0 30 0 0
linux_dma_object 24 0 0 0 0 254 0 0
linux_dma_pctrie 144 0 0 0 0 62 0 0
IOMMU_MAP_ENTRY 120 0 0 0 0 126 0 0
ktls_session 192 0 0 0 0 62 0 0
mbuf_jumbo_16k 16384 0 0 0 0 254 0 0
mbuf_jumbo_9k 9216 0 0 0 0 254 0 0
audit_record 1280 0 0 0 0 8 0 0
domainset 40 0 0 0 0 254 0 0
MAC labels 40 0 0 0 0 254 0 0
vnpbuf 2624 0 0 0 0 64 0 0
mdpbuf 2624 0 0 0 0 3 0 0
nfspbuf 2624 0 0 0 0 16 0 0
swwbuf 2624 0 0 0 0 8 0 0
swrbuf 2624 0 0 0 0 16 0 0
umtx_shm
---
This report is generated by a bot. It may contain errors.
See https://goo.gl/tpsmEJ for more information about syzbot.
syzbot engineers can be reached at syzk...@googlegroups.com.
syzbot will keep track of this issue. See:
https://goo.gl/tpsmEJ#status for how to communicate with syzbot.
syzbot found the following issue on:
HEAD commit: 5f07d7fe408b mgb: Fix DEBUG (and LINT) build
git tree: https://github.com/freebsd/freebsd-src.git main
console output: https://syzkaller.appspot.com/x/log.txt?x=16068260b00000
dashboard link: https://syzkaller.appspot.com/bug?extid=ab379bf13ff75f251d6c
userspace arch: i386
Unfortunately, I don't have any reproducer for this issue yet.
IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+ab379b...@syzkaller.appspotmail.com
panic: ASan: Invalid access, 8-byte read at 0xfffffe00577be600, UseAfterScope(f8)
cpuid = 0
time = 1632928002
KDB: stack backtrace:
db_trace_self_wrapper() at db_trace_self_wrapper+0xc7/frame 0xfffffe00577be1b0
kdb_backtrace() at kdb_backtrace+0xd3/frame 0xfffffe00577be310
vpanic() at vpanic+0x2c5/frame 0xfffffe00577be3f0
panic() at panic+0xb5/frame 0xfffffe00577be4b0
__asan_load8_noabort() at __asan_load8_noabort+0x376/frame 0xfffffe00577be570
smp_targeted_tlb_shootdown() at smp_targeted_tlb_shootdown+0x26a/frame 0xfffffe00577be710
smp_masked_invlpg() at smp_masked_invlpg+0xe6/frame 0xfffffe00577be810
pmap_invalidate_page() at pmap_invalidate_page+0x240/frame 0xfffffe00577be910
pmap_remove_write() at pmap_remove_write+0xd5d/frame 0xfffffe00577bea50
vm_object_page_clean() at vm_object_page_clean+0x347/frame 0xfffffe00577beb50
vfs_periodic_msync_inactive() at vfs_periodic_msync_inactive+0x437/frame 0xfffffe00577bec50
kern_sync() at kern_sync+0x1b2/frame 0xfffffe00577bed20
sys_sync() at sys_sync+0xe/frame 0xfffffe00577bed30
ia32_syscall() at ia32_syscall+0x41f/frame 0xfffffe00577bef30
int0x80_syscall_common() at int0x80_syscall_common+0x9c/frame 0xfbffcf78
KDB: enter: panic
[ thread pid 884 tid 100138 ]
Stopped at kdb_enter+0x6b: movq $0,0x28dfe8a(%rip)
db>
db> set $lines = 0
db> set $maxwidth = 0
db> show registers
cs 0x20
ds 0x3b
es 0x3b
fs 0x13
gs 0x1b
ss 0
rax 0x12
rcx 0x6d9f8b2b2ad8d52
rdx 0x1
rbx 0
rsp 0xfffffe00577be2f0
rbp 0xfffffe00577be310
rsi 0
rdi 0xffffffff817bceba vprintf+0x35a
r8 0
r9 0xfffffe00577bde28
r10 0
r11 0
r12 0xfffffe009ea2d560
r13 0xfffffe00577be301
r14 0xffffffff82c80040 .str.18
r15 0xffffffff82c80040 .str.18
rip 0xffffffff817b082b kdb_enter+0x6b
rflags 0x200046 kernload+0x46
kdb_enter+0x6b: movq $0,0x28dfe8a(%rip)
db> show proc
Process 884 (syz-executor.0) at 0xfffffe009ea56538:
state: NORMAL
uid: 0 gids: 0, 0, 5
parent: pid 882 at 0xfffffe009ea2b538
ABI: FreeBSD ELF32
flag: 0x10000000 flag2: 0
arguments: /root/syz-executor.0
reaper: 0xfffffe0053d60538 reapsubtree: 1
sigparent: 20
vmspace: 0xfffffe009ea8a3e0
(map 0xfffffe009ea8a3e0)
(map.pmap 0xfffffe009ea8a4a0)
(pmap 0xfffffe009ea8a500)
threads: 1
100138 Run CPU 0 syz-executor.0
db> ps
pid ppid pgrp uid state wmesg wchan cmd
885 882 783 0 R syz-executor.0
884 882 783 0 R CPU 0 syz-executor.0
883 791 791 0 R (threaded) syz-executor.3
100134 Run CPU 1 syz-executor.3
100146 RunQ syz-executor.3
882 783 783 0 R (threaded) syz-executor.0
100132 RunQ syz-executor.0
100145 S uwait 0xfffffe0058b13400 syz-executor.0
875 1 875 0 Ss select 0xfffffe009ea163c0 rtsol
874 1 874 0 Ss select 0xfffffe009ea9adc0 rtsol
873 1 873 0 Ss select 0xfffffe009ea9ae40 rtsol
870 795 436 0 S kqread 0xfffffe0058964a00 rtsol
840 818 784 0 S uwait 0xfffffe009ea31b00 syz-executor.1
818 784 784 0 S (threaded) syz-executor.1
100130 S nanslp 0xffffffff8405d5c0 syz-executor.1
100135 S ksem 0xfffffe009e40d798 syz-executor.1
100136 S uwait 0xfffffe009e472400 syz-executor.1
795 787 436 0 S wait 0xfffffe0058946a70 sh
791 780 791 0 Ss nanslp 0xffffffff8405d5c1 syz-executor.3
787 436 436 0 S wait 0xfffffe009ea1ca70 sh
786 780 786 0 Ss piperd 0xfffffe009ea09000 syz-executor.2
784 780 784 0 Ss nanslp 0xffffffff8405d5c1 syz-executor.1
783 780 783 0 Ss nanslp 0xffffffff8405d5c1 syz-executor.0
780 778 778 0 S (threaded) syz-fuzzer
100094 S uwait 0xfffffe005701ad80 syz-fuzzer
100118 S uwait 0xfffffe0058552680 syz-fuzzer
100119 S uwait 0xfffffe0058552380 syz-fuzzer
100120 S uwait 0xfffffe0057026900 syz-fuzzer
100121 S uwait 0xfffffe0058b13d00 syz-fuzzer
100122 S uwait 0xfffffe009e472500 syz-fuzzer
100123 S uwait 0xfffffe009e472600 syz-fuzzer
100125 S kqread 0xfffffe0058964400 syz-fuzzer
100127 S uwait 0xfffffe009e472200 syz-fuzzer
778 776 778 0 Ss pause 0xfffffe009e9e0b20 csh
776 694 776 0 Ss select 0xfffffe0058b16440 sshd
760 1 760 0 Ss+ ttyin 0xfffffe0057014cb0 getty
759 1 759 0 Ss+ ttyin 0xfffffe00575f74b0 getty
758 1 758 0 Ss+ ttyin 0xfffffe00575f7cb0 getty
757 1 757 0 Ss+ ttyin 0xfffffe00575f44b0 getty
756 1 756 0 Ss+ ttyin 0xfffffe00575f4cb0 getty
755 1 755 0 Ss+ ttyin 0xfffffe00575f04b0 getty
754 1 754 0 Ss+ ttyin 0xfffffe00575f0cb0 getty
753 1 753 0 Ss+ ttyin 0xfffffe00575eb4b0 getty
752 1 752 0 Ss+ ttyin 0xfffffe00575ebcb0 getty
698 1 698 0 Ss nanslp 0xffffffff8405d5c0 cron
694 1 694 0 Ss select 0xfffffe005742d0c0 sshd
507 1 507 0 Ss select 0xfffffe0058b16a40 syslogd
436 1 436 0 Ss wait 0xfffffe005895e000 devd
435 1 435 65 Ss select 0xfffffe0058b16ac0 dhclient
350 1 350 0 Ss select 0xfffffe0058b16b40 dhclient
347 1 347 0 Ss select 0xfffffe005742d540 dhclient
23 0 0 0 DL syncer 0xffffffff84185960 [syncer]
22 0 0 0 DL vlruwt 0xfffffe0058558538 [vnlru]
21 0 0 0 DL (threaded) [bufdaemon]
100085 D qsleep 0xffffffff84183660 [bufdaemon]
100088 D - 0xffffffff83411f80 [bufspacedaemon-0]
100100 D sdflush 0xfffffe00588440e8 [/ worker]
20 0 0 0 DL psleep 0xffffffff841bbb80 [vmdaemon]
19 0 0 0 DL (threaded) [pagedaemon]
100083 D psleep 0xffffffff841af6b8 [dom0]
100089 D launds 0xffffffff841af6c4 [laundry: dom0]
100090 D umarcl 0xffffffff81eb3090 [uma]
18 0 0 0 DL - 0xffffffff83e13ca0 [rand_harvestq]
17 0 0 0 DL waiting 0xffffffff84a866e0 [sctp_iterator]
16 0 0 0 DL pftm 0xffffffff84c5c1a0 [pf purge]
15 0 0 0 DL - 0xffffffff8417e880 [soaiod4]
9 0 0 0 DL - 0xffffffff8417e880 [soaiod3]
8 0 0 0 DL - 0xffffffff8417e880 [soaiod2]
7 0 0 0 DL - 0xffffffff8417e880 [soaiod1]
6 0 0 0 DL (threaded) [cam]
100048 D - 0xffffffff83c99540 [doneq0]
100049 D - 0xffffffff83c994c0 [async]
100082 D - 0xffffffff83c99340 [scanner]
14 0 0 0 DL seqstat 0xfffffe0056ac8c88 [sequencer 00]
5 0 0 0 DL crypto_ 0xfffffe00541c9d80 [crypto returns 1]
4 0 0 0 DL crypto_ 0xfffffe00541c9d30 [crypto returns 0]
3 0 0 0 DL crypto_ 0xffffffff841a9760 [crypto]
13 0 0 0 DL (threaded) [geom]
100039 D - 0xffffffff84030b80 [g_event]
100040 D - 0xffffffff84030bc0 [g_up]
100041 D - 0xffffffff84030c00 [g_down]
2 0 0 0 DL (threaded) [KTLS]
100029 D - 0xfffffe00081f6d00 [thr_0]
100030 D - 0xfffffe00081f6d80 [thr_1]
100031 D - 0xffffffff8417fc08 [alloc_0]
12 0 0 0 WL (threaded) [intr]
100011 I [swi6: task queue]
100012 I [swi6: Giant taskq]
100014 I [swi5: fast taskq]
100032 I [swi1: netisr 0]
100033 I [swi3: vm]
100034 I [swi4: clock (0)]
100035 I [swi4: clock (1)]
100036 I [swi1: hpts]
100037 I [swi1: hpts]
100050 I [irq24: virtio_pci0]
100051 I [irq25: virtio_pci0]
100052 I [irq26: virtio_pci0]
100053 I [irq27: virtio_pci0]
100054 I [irq28: virtio_pci1]
100055 I [irq29: virtio_pci1]
100056 I [irq30: virtio_pci1]
100057 I [irq31: virtio_pci1]
100058 I [irq32: virtio_pci1]
100063 I [irq10: virtio_pci2]
100065 I [irq1: atkbd0]
100066 I [irq12: psm0]
100067 I [swi0: uart uart++]
100075 I [swi1: pf send]
11 0 0 0 RL (threaded) [idle]
100003 CanRun [idle: cpu0]
100004 CanRun [idle: cpu1]
1 0 1 0 SLs wait 0xfffffe0053d60538 [init]
10 0 0 0 DL audit_w 0xffffffff841aa700 [audit]
0 0 0 0 DLs (threaded) [kernel]
100000 D swapin 0xffffffff84031a80 [swapper]
100005 D - 0xfffffe00081f8900 [softirq_0]
100006 D - 0xfffffe00081f8700 [softirq_1]
100007 D - 0xfffffe00081f8500 [if_io_tqg_0]
100008 D - 0xfffffe00081f8300 [if_io_tqg_1]
100009 D - 0xfffffe00081f8100 [if_config_tqg_0]
100010 D - 0xfffffe0053dfce00 [deferred_unmount ta]
100013 D - 0xfffffe0053dfc800 [thread taskq]
100015 D - 0xfffffe0053dfc400 [linuxkpi_irq_wq]
100016 D - 0xfffffe0053dfc200 [kqueue_ctx taskq]
100017 D - 0xfffffe0053dfc000 [pci_hp taskq]
100018 D - 0xfffffe0053e06d00 [aiod_kick taskq]
100019 D - 0xfffffe0053e06b00 [inm_free taskq]
100020 D - 0xfffffe0053e06900 [in6m_free taskq]
100021 D - 0xfffffe0053e06700 [linuxkpi_short_wq_0]
100022 D - 0xfffffe0053e06700 [linuxkpi_short_wq_1]
100023 D - 0xfffffe0053e06700 [linuxkpi_short_wq_2]
100024 D - 0xfffffe0053e06700 [linuxkpi_short_wq_3]
100025 D - 0xfffffe0053e06200 [linuxkpi_long_wq_0]
100026 D - 0xfffffe0053e06200 [linuxkpi_long_wq_1]
100027 D - 0xfffffe0053e06200 [linuxkpi_long_wq_2]
100028 D - 0xfffffe0053e06200 [linuxkpi_long_wq_3]
100038 D - 0xfffffe0053e14200 [firmware taskq]
100042 D - 0xfffffe005419ec00 [crypto_0]
100043 D - 0xfffffe005419ec00 [crypto_1]
100059 D - 0xfffffe0056ec3b00 [vtnet0 rxq 0]
100060 D - 0xfffffe0056ec3a00 [vtnet0 txq 0]
100061 D - 0xfffffe0056ec3900 [vtnet0 rxq 1]
100062 D - 0xfffffe0056ec3800 [vtnet0 txq 1]
100064 D vtbslp 0xfffffe0056ff6600 [virtio_balloon]
100068 D - 0xfffffe0057027800 [mca taskq]
100073 D - 0xffffffff82c86fc1 [deadlkres]
100077 D - 0xfffffe0057400600 [acpi_task_0]
100078 D - 0xfffffe0057400600 [acpi_task_1]
100079 D - 0xfffffe0057400600 [acpi_task_2]
100081 D - 0xfffffe005419e400 [CAM taskq]
db> show all locks
Process 884 (syz-executor.0) thread 0xfffffe009ea2d560 (100138)
exclusive sleep mutex pmap (pmap) r = 0 (0xfffffe009e55bb10) locked @ /syzkaller/managers/i386/kernel/sys/amd64/amd64/pmap.c:8628
exclusive rw pmap pv list (pmap pv list) r = 0 (0xfffffe000775dcc0) locked @ /syzkaller/managers/i386/kernel/sys/amd64/amd64/pmap.c:8602
exclusive rw vm object (vm object) r = 0 (0xfffffe009e480738) locked @ /syzkaller/managers/i386/kernel/sys/kern/vfs_subr.c:4840
exclusive lockmgr ufs (ufs) r = 0 (0xfffffe009ea07cb0) locked @ /syzkaller/managers/i386/kernel/sys/kern/vfs_subr.c:2993
Process 883 (syz-executor.3) thread 0xfffffe009ea2dc80 (100134)
shared sx vm map (user) (vm map (user)) r = 0 (0xfffffe009ea89060) locked @ /syzkaller/managers/i386/kernel/sys/vm/vm_map.c:4935
db> show malloc
Type InUse MemUse Requests
pf_hash 5 11524K 5
devbuf 4213 4323K 4241
tcp_hpts 6 3201K 6
sysctloid 35175 2072K 35246
vtbuf 24 1968K 46
kobj 326 1304K 483
newblk 632 1182K 693
vfscache 3 1025K 3
pcb 35 546K 92
inodedep 34 525K 97
ufs_quota 1 512K 1
vfs_hash 1 512K 1
callout 2 512K 2
intr 4 472K 4
subproc 123 260K 950
acpica 1674 184K 55237
vnet_data 1 168K 1
vmem 3 146K 4
tidhash 3 141K 3
linker 355 140K 383
pagedep 15 132K 35
tfo_ccache 1 128K 1
filedesc 16 121K 77
DEVFS1 108 108K 125
sem 4 106K 4
bus 986 80K 3474
mtx_pool 2 72K 2
syncache 1 68K 1
acpitask 1 64K 1
ddb_capture 1 64K 1
module 509 64K 509
kdtrace 201 40K 1033
umtx 308 39K 308
temp 34 33K 1890
hostcache 1 32K 1
shm 1 32K 1
DEVFS3 127 32K 137
msg 4 30K 4
gtaskqueue 18 26K 18
kbdmux 6 22K 6
DEVFS_RULE 56 20K 56
ifaddr 66 19K 68
BPF 14 19K 14
ufs_mount 4 17K 5
proc 3 17K 3
tty 16 16K 16
routetbl 125 16K 404
ithread 99 16K 99
bus-sc 34 15K 1691
lltable 43 14K 43
KTRACE 100 13K 100
ifnet 7 13K 7
ether_multi 152 13K 162
kenv 95 12K 95
eventhandler 133 12K 133
CAM queue 5 11K 1528
GEOM 61 10K 487
rman 84 10K 425
in6_multi 65 9K 65
ksem 3 9K 3
bmsafemap 2 9K 66
kqueue 63 9K 892
UART 12 9K 12
devstat 4 9K 4
rpc 2 8K 2
shmfd 1 8K 1
pfs_vncache 1 8K 1
pfs_nodes 20 8K 20
audit_evclass 237 8K 295
taskqueue 63 7K 63
sglist 5 7K 5
CAM DEV 3 6K 510
cred 23 6K 196
plimit 20 5K 334
ufs_dirhash 24 5K 24
DEVFSP 72 5K 80
UMA 270 5K 270
pf_ifnet 10 5K 19
vt 11 5K 11
memdesc 1 4K 1
MCA 32 4K 32
evdev 4 4K 4
kcovinfo 64 4K 68
diradd 30 4K 64
pwddesc 58 4K 885
acpisem 28 4K 28
hhook 15 4K 17
session 26 4K 36
mkdir 24 3K 50
terminal 11 3K 11
proc-args 46 3K 555
indirdep 10 3K 10
uidinfo 3 3K 7
ip6ndp 13 3K 14
local_apic 1 2K 1
io_apic 1 2K 1
fpukern_ctx 2 2K 2
ipsec-saq 2 2K 2
selfd 32 2K 24019
Unitno 31 2K 47
sctp_ifa 13 2K 14
CAM XPT 22 2K 543
lockf 15 2K 22
sctp_atcl 4 2K 5
newdirblk 12 2K 25
in_multi 6 2K 8
vnodemarker 3 2K 15
select 11 2K 32
dirrem 5 2K 33
ipsecpolicy 2 2K 2
acpidev 20 2K 20
msi 9 2K 9
clone 9 2K 9
tun 7 2K 7
softdep 1 1K 1
sahead 1 1K 1
secasvar 1 1K 1
nhops 6 1K 8
NFSD session 1 1K 1
CAM periph 4 1K 271
sctp_ifn 6 1K 14
ipsec 3 1K 3
mld 6 1K 6
igmp 6 1K 6
toponodes 6 1K 6
isadev 6 1K 6
mount 16 1K 89
pci_link 10 1K 10
freefile 5 1K 31
crypto 4 1K 4
encap_export_host 12 1K 12
pfil 4 1K 4
procdesc 4 1K 10
cdev 2 1K 2
inpcbpolicy 13 1K 184
osd 8 1K 21
chacha20random 1 1K 1
sctp_timw 1 1K 1
NFSD lckfile 1 1K 1
NFSD V4client 1 1K 1
DEVFS 9 1K 10
vnodes 1 1K 1
CAM SIM 2 1K 2
ktls 1 1K 1
feeder 7 1K 7
tcpfunc 3 1K 3
loginclass 3 1K 6
prison 6 1K 6
lkpikmalloc 5 1K 6
aesni_data 2 1K 2
sctp_atky 4 1K 6
nexusdev 8 1K 8
apmdev 1 1K 1
atkbddev 2 1K 2
CAM dev queue 2 1K 2
xform 2 1K 42
CAM I/O Scheduler 1 1K 1
CAM path 4 1K 1034
pmchooks 1 1K 1
filedesc_to_leader 2 1K 2
soname 4 1K 3451
sctp_vrf 1 1K 1
sctp_athm 4 1K 5
vnet 1 1K 1
entropy 2 1K 37
acpiintr 1 1K 1
pmc 1 1K 1
cpus 2 1K 2
vnet_data_free 1 1K 1
Per-cpu 1 1K 1
freework 1 1K 31
p1003.1b 1 1K 1
filecaps 1 1K 78
dctcp data 0 0K 0
cdg data 0 0K 0
pf_table 0 0K 0
pf_rule 0 0K 0
pf_altq 0 0K 0
pf_osfp 0 0K 0
pf_temp 0 0K 0
chd data 0 0K 0
sctp_mcore 0 0K 0
sctp_socko 0 0K 0
sctp_iter 0 0K 11
sctp_mvrf 0 0K 0
sctp_cpal 0 0K 0
sctp_cmsg 0 0K 0
sctp_stre 0 0K 0
sctp_athi 0 0K 0
sctp_a_it 0 0K 11
sctp_aadr 0 0K 0
sctp_stro 0 0K 1
sctp_stri 0 0K 0
sctp_map 0 0K 2
cubic data 0 0K 0
htcp data 0 0K 0
mqdata 0 0K 0
tcp_do 0 0K 0
tcp_fsb 0 0K 0
vegas data 0 0K 0
NFSCL diroff 0 0K 0
NEWdirectio 0 0K 0
madt_table 0 0K 2
smartpqi 0 0K 0
NEWNFSnode 0 0K 0
NFSCL lck 0 0K 0
NFSCL lckown 0 0K 0
NFSCL client 0 0K 0
NFSCL deleg 0 0K 0
NFSCL open 0 0K 0
NFSCL owner 0 0K 0
NFS fh 0 0K 0
iavf 0 0K 0
ixl 0 0K 0
NFS req 0 0K 0
NFSD usrgroup 0 0K 0
NFSD string 0 0K 0
NFSD V4lock 0 0K 0
NFSD V4state 0 0K 0
ice-resmgr 0 0K 0
ice-osdep 0 0K 0
ice 0 0K 0
axgbe 0 0K 0
NFSD srvcache 0 0K 0
msdosfs_fat 0 0K 0
msdosfs_mount 0 0K 0
msdosfs_node 0 0K 0
DEVFS4 0 0K 0
xen_intr 0 0K 0
DEVFS2 0 0K 0
gntdev 0 0K 0
xen_hvm 0 0K 0
legacydrv 0 0K 0
qpidrv 0 0K 0
privcmd_dev 0 0K 0
evtchn_dev 0 0K 0
dmar_idpgtbl 0 0K 0
dmar_dom 0 0K 0
dmar_ctx 0 0K 0
xenstore 0 0K 0
ciss_data 0 0K 0
BACKLIGHT 0 0K 0
isci 0 0K 0
iommu_dmamap 0 0K 0
xnb 0 0K 0
hyperv_socket 0 0K 0
bxe_ilt 0 0K 0
xbbd 0 0K 0
xenbus 0 0K 0
xbd 0 0K 0
Balloon 0 0K 0
sysmouse 0 0K 0
vm_fictitious 0 0K 0
vtfont 0 0K 0
ath_hal 0 0K 0
athdev 0 0K 0
ata_pci 0 0K 0
ata_dma 0 0K 0
ata_generic 0 0K 0
amr 0 0K 0
pvscsi 0 0K 0
scsi_da 0 0K 69
UMAHash 0 0K 0
ata_da 0 0K 0
vm_pgdata 0 0K 0
jblocks 0 0K 0
savedino 0 0K 17
sentinel 0 0K 0
jfsync 0 0K 0
jtrunc 0 0K 0
sbdep 0 0K 5
jsegdep 0 0K 0
jseg 0 0K 0
jfreefrag 0 0K 0
jfreeblk 0 0K 0
jnewblk 0 0K 0
jmvref 0 0K 0
jremref 0 0K 0
jaddref 0 0K 0
freedep 0 0K 0
freeblks 0 0K 30
freefrag 0 0K 2
allocindir 0 0K 0
allocdirect 0 0K 0
ufs_trim 0 0K 0
mactemp 0 0K 0
audit_trigger 0 0K 0
audit_pipe_presel 0 0K 0
audit_pipeent 0 0K 0
audit_pipe 0 0K 0
audit_evname 0 0K 0
audit_bsm 0 0K 0
audit_gidset 0 0K 0
audit_text 0 0K 0
audit_path 0 0K 0
audit_data 0 0K 0
audit_cred 0 0K 0
scsi_ch 0 0K 0
scsi_cd 0 0K 0
AHCI driver 0 0K 0
USBdev 0 0K 0
USB 0 0K 0
agp 0 0K 0
nvme_da 0 0K 0
ktls_ocf 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5E_TLS 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EN 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5DUMP 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
seq_file 0 0K 0
radix 0 0K 0
idr 0 0K 0
lkpifw 0 0K 0
NLM 0 0K 0
ipsec-spdcache 0 0K 0
ipsec-reg 0 0K 0
ipsec-misc 0 0K 0
ipsecrequest 0 0K 0
ip6opt 0 0K 3
ip6_msource 0 0K 0
ip6_moptions 0 0K 0
in6_mfilter 0 0K 0
frag6 0 0K 0
tcplog 0 0K 0
tcp_hwpace 0 0K 0
acpipwr 0 0K 0
acpi_perf 0 0K 0
LRO 0 0K 0
newreno data 0 0K 0
ip_msource 0 0K 0
ip_moptions 0 0K 0
in_mfilter 0 0K 0
ipid 0 0K 0
80211scan 0 0K 0
80211ratectl 0 0K 0
80211power 0 0K 0
80211nodeie 0 0K 0
80211node 0 0K 0
80211mesh_gt 0 0K 0
80211mesh_rt 0 0K 0
80211perr 0 0K 0
80211prep 0 0K 0
80211preq 0 0K 0
80211dfs 0 0K 0
80211crypto 0 0K 0
80211vap 0 0K 0
iflib 0 0K 0
vlan 0 0K 0
gif 0 0K 0
ifdescr 0 0K 0
zlib 0 0K 0
fadvise 0 0K 0
VN POLL 0 0K 0
twsbuf 0 0K 0
statfs 0 0K 200
namei_tracker 0 0K 0
export_host 0 0K 0
cl_savebuf 0 0K 2
twe_commands 0 0K 0
twa_commands 0 0K 0
tcp_log_dev 0 0K 0
midi buffers 0 0K 0
mixer 0 0K 0
ac97 0 0K 0
hdacc 0 0K 0
hdac 0 0K 0
hdaa 0 0K 0
acpicmbat 0 0K 0
SIIS driver 0 0K 0
CAM CCB 0 0K 523
PUC 0 0K 0
ppbusdev 0 0K 0
agtiapi_MemAlloc malloc 0 0K 0
biobuf 0 0K 0
aios 0 0K 0
lio 0 0K 0
acl 0 0K 0
osti_cacheable 0 0K 0
mbuf_tag 0 0K 95
tempbuff 0 0K 0
tempbuff 0 0K 0
ag_tgt_map_t malloc 0 0K 0
ag_slr_map_t malloc 0 0K 0
lDevFlags * malloc 0 0K 0
tiDeviceHandle_t * malloc 0 0K 0
ag_portal_data_t malloc 0 0K 0
ag_device_t malloc 0 0K 0
STLock malloc 0 0K 0
CCB List 0 0K 0
sr_iov 0 0K 0
OCS 0 0K 0
OCS 0 0K 0
nvme 0 0K 0
nvd 0 0K 0
netmap 0 0K 0
mwldev 0 0K 0
MVS driver 0 0K 0
CAM ccb queue 0 0K 0
mrsasbuf 0 0K 0
mpt_user 0 0K 0
mps_user 0 0K 0
accf 0 0K 0
pts 0 0K 0
iov 0 0K 14001
ioctlops 0 0K 97
eventfd 0 0K 0
Witness 0 0K 0
stack 0 0K 0
MPSSAS 0 0K 0
mps 0 0K 0
mpr_user 0 0K 0
MPRSAS 0 0K 0
mpr 0 0K 0
mfibuf 0 0K 0
sbuf 0 0K 288
md_sectors 0 0K 0
firmware 0 0K 0
compressor 0 0K 0
md_disk 0 0K 0
SWAP 0 0K 0
malodev 0 0K 0
LED 0 0K 0
sysctltmp 0 0K 656
sysctl 0 0K 3
ekcd 0 0K 0
dumper 0 0K 0
sendfile 0 0K 0
rctl 0 0K 0
ix_sriov 0 0K 0
aacraidcam 0 0K 0
aacraid_buf 0 0K 0
ix 0 0K 0
ipsbuf 0 0K 0
cache 0 0K 0
iirbuf 0 0K 0
prison_racct 0 0K 0
Fail Points 0 0K 0
sigio 0 0K 1
pwd 0 0K 0
tty console 0 0K 0
aaccam 0 0K 0
aacbuf 0 0K 0
zstd 0 0K 0
XZ_DEC 0 0K 0
nvlist 0 0K 0
SCSI ENC 0 0K 0
SCSI sa 0 0K 0
scsi_pass 0 0K 0
isofs_node 0 0K 0
isofs_mount 0 0K 0
tr_raid5_data 0 0K 0
tr_raid1e_data 0 0K 0
tr_raid1_data 0 0K 0
tr_raid0_data 0 0K 0
tr_concat_data 0 0K 0
md_sii_data 0 0K 0
md_promise_data 0 0K 0
md_nvidia_data 0 0K 0
md_jmicron_data 0 0K 0
md_intel_data 0 0K 0
md_ddf_data 0 0K 0
raid_data 0 0K 72
geom_flashmap 0 0K 0
tmpfs dir 0 0K 0
tmpfs name 0 0K 0
tmpfs mount 0 0K 0
NFS FHA 0 0K 0
newnfsmnt 0 0K 0
newnfsclient_req 0 0K 0
NFSCL layrecall 0 0K 0
NFSCL session 0 0K 0
NFSCL sockreq 0 0K 0
NFSCL devinfo 0 0K 0
NFSCL flayout 0 0K 0
NFSCL layout 0 0K 0
NFSD rollback 0 0K 0
db> show uma
Zone Size Used Free Requests Sleeps Bucket Total Mem XFree
mbuf_jumbo_page 4096 8320 983 764817 0 254 38105088 0
pbuf 2624 0 973 0 0 2 2553152 0
mbuf 256 8609 961 1149776 0 254 2449920 0
BUF TRIE 144 184 11576 537 0 62 1693440 0
malloc-384 384 4202 28 4266 0 30 1624320 0
malloc-4096 4096 387 3 1373 0 2 1597440 0
malloc-128 128 11833 40 11904 0 126 1519744 0
RADIX NODE 144 10234 149 48396 0 62 1495152 0
UMA Slabs 0 112 10138 11 10138 0 126 1136688 0
vmem btag 56 15650 93 15650 0 254 881608 0
FFS inode 1160 503 22 534 0 8 609000 0
malloc-65536 65536 6 0 6 0 1 393216 0
lkpimm 168 1 2327 1 0 62 391104 0
lkpicurr 168 2 2326 2 0 62 391104 0
VM OBJECT 264 1127 43 14240 0 30 308880 0
malloc-64 64 4480 119 6336 0 254 294336 0
THREAD 1808 141 13 146 0 8 278432 0
256 Bucket 2048 120 10 15338 0 8 266240 0
VNODE 448 539 37 572 0 30 258048 0
malloc-256 256 992 13 1874 0 62 257280 0
malloc-16 16 14749 251 16033 0 254 240000 0
DEVCTL 1024 22 198 150 0 0 225280 0
malloc-65536 65536 1 2 63 0 1 196608 0
malloc-65536 65536 1 2 137 0 1 196608 0
UMA Zones 768 242 2 242 0 16 187392 0
malloc-32 32 5598 198 6381 0 254 185472 0
malloc-16384 16384 7 4 36 0 1 180224 0
malloc-128 128 1225 46 25831 0 126 162688 0
MAP ENTRY 96 1408 188 42988 0 126 153216 0
malloc-1024 1024 133 3 150 0 16 139264 0
malloc-128 128 1042 12 5309 0 126 134912 0
FFS2 dinode 256 503 22 534 0 62 134400 0
FPU_save_area 832 143 10 2437 0 16 127296 0
ksiginfo 112 46 998 2344 0 126 116928 0
S VFS Cache 104 1003 89 1046 0 126 113568 0
VMSPACE 2544 34 8 867 0 4 106848 0
malloc-32768 32768 1 2 131 0 1 98304 0
malloc-8192 8192 9 2 110 0 1 90112 0
UMA Kegs 384 227 6 227 0 30 89472 0
malloc-2048 2048 13 29 578 0 8 86016 0
PROC 1336 58 5 885 0 8 84168 0
clpbuf 2624 0 32 23 0 16 83968 0
malloc-8192 8192 8 1 10 0 1 73728 0
filedesc0 1072 58 5 885 0 8 67536 0
mbuf_cluster 2048 30 2 30 0 254 65536 0
malloc-65536 65536 1 0 1 0 1 65536 0
malloc-65536 65536 0 1 8 0 1 65536 0
g_bio 408 0 160 4972 0 30 65280 0
malloc-4096 4096 14 1 27 0 2 61440 0
128 Bucket 1024 42 17 649 0 16 60416 0
malloc-8192 8192 4 3 32 0 1 57344 0
malloc-16384 16384 3 0 3 0 1 49152 0
malloc-16384 16384 2 1 17 0 1 49152 0
malloc-16384 16384 1 2 161 0 1 49152 0
malloc-2048 2048 2 22 575 0 8 49152 0
malloc-1024 1024 10 34 1557 0 16 45056 0
malloc-64 64 517 176 1629 0 254 44352 0
32 Bucket 256 48 117 3211 0 62 42240 0
pcpu-8 8 4641 479 4797 0 254 40960 0
64 Bucket 512 59 21 2474 0 30 40960 0
malloc-64 64 77 553 37731 0 254 40320 0
socket 960 33 7 1419 0 254 38400 0
DIRHASH 1024 34 2 34 0 16 36864 0
NAMEI 1024 0 36 13254 0 16 36864 0
malloc-4096 4096 8 1 10 0 2 36864 0
malloc-128 128 61 218 323 0 126 35712 0
malloc-32768 32768 1 0 1 0 1 32768 0
malloc-32768 32768 1 0 1 0 1 32768 0
pcpu-64 64 487 25 487 0 254 32768 0
malloc-384 384 67 13 113 0 30 30720 0
malloc-256 256 58 62 272 0 62 30720 0
pipe 744 19 21 335 0 16 29760 0
malloc-64 64 102 339 1500 0 254 28224 0
ttyinq 160 135 40 300 0 62 28000 0
malloc-384 384 53 17 55 0 30 26880 0
da_ccb 544 0 49 1363 0 16 26656 0
malloc-4096 4096 3 3 835 0 2 24576 0
malloc-4096 4096 4 2 7 0 2 24576 0
malloc-2048 2048 12 0 12 0 8 24576 0
ertt_txseginfo 40 0 606 3370 0 254 24240 0
KNOTE 160 31 119 32654 0 62 24000 0
8 Bucket 80 39 261 1107 0 126 24000 0
ttyoutq 256 72 18 160 0 62 23040 0
malloc-256 256 50 40 285 0 62 23040 0
TURNSTILE 136 155 13 155 0 62 22848 0
malloc-4096 4096 5 0 5 0 2 20480 0
malloc-2048 2048 2 8 26 0 8 20480 0
malloc-64 64 224 91 280 0 254 20160 0
Files 80 196 54 7321 0 126 20000 0
malloc-128 128 108 47 168 0 126 19840 0
Mountpoints 2752 2 5 2 0 4 19264 0
malloc-256 256 25 50 184 0 62 19200 0
malloc-256 256 66 9 389 0 62 19200 0
malloc-256 256 50 25 408 0 62 19200 0
malloc-256 256 46 29 113 0 62 19200 0
SLEEPQUEUE 88 155 37 155 0 126 16896 0
malloc-16384 16384 1 0 1 0 1 16384 0
malloc-16384 16384 1 0 1 0 1 16384 0
malloc-1024 1024 8 8 12 0 16 16384 0
malloc-512 512 0 32 131 0 30 16384 0
malloc-64 64 166 86 198 0 254 16128 0
malloc-32 32 88 416 610 0 254 16128 0
16 Bucket 144 41 71 320 0 62 16128 0
vtnet_tx_hdr 24 0 668 379584 0 254 16032 0
malloc-384 384 34 6 35 0 30 15360 0
malloc-384 384 22 18 362 0 30 15360 0
tcpcb 1080 4 10 10 0 254 15120 0
malloc-2048 2048 3 3 194 0 8 12288 0
malloc-1024 1024 8 4 183 0 16 12288 0
malloc-1024 1024 7 5 7 0 16 12288 0
malloc-64 64 57 132 374 0 254 12096 0
malloc-32 32 85 293 4029 0 254 12096 0
udp_inpcb 496 6 18 168 0 254 11904 0
malloc-128 128 55 38 261 0 126 11904 0
kenv 258 15 30 1026 0 30 11610 0
unpcb 256 14 31 1205 0 254 11520 0
sctp_asoc 2288 0 5 1 0 254 11440 0
malloc-8192 8192 1 0 1 0 1 8192 0
malloc-8192 8192 1 0 1 0 1 8192 0
malloc-8192 8192 1 0 1 0 1 8192 0
malloc-8192 8192 1 0 1 0 1 8192 0
malloc-2048 2048 3 1 3 0 8 8192 0
malloc-2048 2048 3 1 3 0 8 8192 0
malloc-2048 2048 2 2 4 0 8 8192 0
malloc-1024 1024 2 6 11 0 16 8192 0
malloc-1024 1024 1 7 2 0 16 8192 0
malloc-512 512 4 12 4 0 30 8192 0
malloc-512 512 6 10 77 0 30 8192 0
malloc-512 512 8 8 8 0 30 8192 0
sctp_raddr 736 0 11 1 0 254 8096 0
rtentry 176 29 17 33 0 62 8096 0
PGRP 88 26 66 36 0 126 8096 0
rl_entry 40 36 166 36 0 254 8080 0
sctp_laddr 48 1 167 13 0 254 8064 0
udpcb 32 6 246 168 0 254 8064 0
ertt 72 4 108 10 0 126 8064 0
PWD 32 17 235 112 0 254 8064 0
malloc-64 64 59 67 70 0 254 8064 0
malloc-32 32 123 129 278 0 254 8064 0
malloc-32 32 56 196 73 0 254 8064 0
malloc-32 32 39 213 78 0 254 8064 0
malloc-32 32 53 199 222 0 254 8064 0
malloc-32 32 17 235 30 0 254 8064 0
4 Bucket 48 6 162 54 0 254 8064 0
2 Bucket 32 49 203 533 0 254 8064 0
malloc-16 16 25 475 116 0 254 8000 0
malloc-16 16 56 444 281 0 254 8000 0
malloc-16 16 18 482 44 0 254 8000 0
malloc-16 16 39 461 176 0 254 8000 0
malloc-16 16 286 214 25355 0 254 8000 0
malloc-16 16 4 496 6 0 254 8000 0
ripcb 496 3 13 6 0 254 7936 0
tcp_inpcb 496 4 12 10 0 254 7936 0
malloc-128 128 36 26 51 0 126 7936 0
malloc-128 128 37 25 211 0 126 7936 0
routing nhops 256 26 4 33 0 62 7680 0
mbuf_packet 256 0 30 116 0 254 7680 0
malloc-384 384 0 20 6 0 30 7680 0
malloc-256 256 14 16 525 0 62 7680 0
sctp_ep 1272 4 2 4 0 254 7632 0
cpuset 104 8 54 8 0 126 6448 0
epoch_record pcpu 256 4 12 4 0 62 4096 0
malloc-4096 4096 0 1 1 0 2 4096 0
malloc-4096 4096 0 1 3 0 2 4096 0
malloc-1024 1024 1 3 1 0 16 4096 0
malloc-512 512 0 8 1 0 30 4096 0
malloc-512 512 5 3 5 0 30 4096 0
malloc-512 512 0 8 1 0 30 4096 0
pcpu-16 16 7 249 7 0 254 4096 0
hostcache 64 1 62 1 0 254 4032 0
syncache 168 0 24 4 0 254 4032 0
malloc-16 16 0 250 7 0 254 4000 0
UMA Slabs 1 176 9 13 9 0 62 3872 0
malloc-384 384 2 8 2 0 30 3840 0
malloc-384 384 1 9 1 0 30 3840 0
mqnode 416 3 6 3 0 30 3744 0
KMAP ENTRY 96 12 27 14 0 0 3744 0
vmem 1856 1 1 1 0 8 3712 0
SMR CPU 32 3 60 3 0 254 2016 0
SMR SHARED 24 3 60 3 0 254 1512 0
FFS1 dinode 128 0 0 0 0 126 0 0
ada_ccb 272 0 0 0 0 30 0 0
swblk 136 0 0 0 0 62 0 0
swpctrie 144 0 0 0 0 62 0 0
cdg_qdiffsample 16 0 0 0 0 254 0 0
sctp_asconf_ack 48 0 0 0 0 254 0 0
sctp_asconf 40 0 0 0 0 254 0 0
sctp_stream_msg_out 112 0 0 0 0 254 0 0
sctp_readq 152 0 0 0 0 254 0 0
sctp_chunk 152 0 0 0 0 254 0 0
pf state scrubs 40 0 0 0 0 254 0 0
pf frag entries 40 0 0 0 0 254 0 0
pf frags 248 0 0 0 0 62 0 0
pf table entries 160 0 0 0 0 62 0 0
pf table entry counters 64 0 0 0 0 254 0 0
pf source nodes 136 0 0 0 0 254 0 0
pf state keys 88 0 0 0 0 126 0 0
pf states 312 0 0 0 0 254 0 0
pf tags 104 0 0 0 0 126 0 0
pf mtags 48 0 0 0 0 254 0 0
tcp_rack_pcb 832 0 0 0 0 16 0 0
tcp_rack_map 112 0 0 0 0 126 0 0
tcp_bbr_pcb 832 0 0 0 0 16 0 0
tcp_bbr_map 128 0 0 0 0 126 0 0
udplite_inpcb 496 0 0 0 0 254 0 0
tcp_log_node 120 0 0 0 0 126 0 0
tcp_log_bucket 176 0 0 0 0 62 0 0
tcp_log 416 0 0 0 0 254 0 0
tcpreass 48 0 0 0 0 254 0 0
tfo_ccache_entries 80 0 0 0 0 126 0 0
tfo 4 0 0 0 0 254 0 0
sackhole 32 0 0 0 0 254 0 0
tcptw 88 0 0 0 0 254 0 0
ipq 56 0 0 0 0 254 0 0
IPsec SA lft_c 16 0 0 0 0 254 0 0
itimer 352 0 0 0 0 30 0 0
AIOLIO 272 0 0 0 0 30 0 0
AIOCB 552 0 0 0 0 16 0 0
AIOP 32 0 0 0 0 254 0 0
AIO 208 0 0 0 0 62 0 0
NCLNODE 592 0 0 0 0 16 0 0
TMPFS node 224 0 0 0 0 62 0 0
mqnotifier 216 0 0 0 0 62 0 0
mvdata 64 0 0 0 0 254 0 0
mqueue 248 0 0 0 0 62 0 0
LTS VFS Cache 360 0 0 0 0 30 0 0
L VFS Cache 320 0 0 0 0 30 0 0
STS VFS Cache 144 0 0 0 0 62 0 0
cryptop 280 0 0 0 0 30 0 0
linux_dma_object 24 0 0 0 0 254 0 0
linux_dma_pctrie 144 0 0 0 0 62 0 0
IOMMU_MAP_ENTRY 120 0 0 0 0 126 0 0
ktls_session 192 0 0 0 0 62 0 0
mbuf_jumbo_16k 16384 0 0 0 0 254 0 0
mbuf_jumbo_9k 9216 0 0 0 0 254 0 0
audit_record 1280 0 0 0 0 8 0 0
domainset 40 0 0 0 0 254 0 0
MAC labels 40 0 0 0 0 254 0 0
vnpbuf 2624 0 0 0 0 64 0 0
mdpbuf 2624 0 0 0 0 3 0 0
nfspbuf 2624 0 0 0 0 16 0 0
swwbuf 2624 0 0 0 0 8 0 0
swrbuf 2624 0 0 0 0 16 0 0
umtx_shm
---
This report is generated by a bot. It may contain errors.
See https://goo.gl/tpsmEJ for more information about syzbot.
syzbot engineers can be reached at syzk...@googlegroups.com.
syzbot will keep track of this issue. See:
https://goo.gl/tpsmEJ#status for how to communicate with syzbot.
Mark Johnston
Nov 3, 2021, 1:32:41 PM11/3/21
to syzbot, syzkaller-f...@googlegroups.com
Reply all
Reply to author
Forward
0 new messages