panic: Lock sctp-info not exclusively locked @ /syzkaller/managers/main/kernel/sys/netinet/sctp_pcb.c:LINE
1 view
Skip to first unread message
syzbot
Sep 9, 2021, 9:29:22 AM9/9/21
to syzkaller-f...@googlegroups.com
Hello,
syzbot found the following issue on:
HEAD commit: 395db99f32bc Export _mmap and __sys_mmap from libc.so
git tree: https://github.com/freebsd/freebsd-src.git main
console output: https://syzkaller.appspot.com/x/log.txt?x=13a107a5300000
dashboard link: https://syzkaller.appspot.com/bug?extid=7fe26e26911344e7211d
Unfortunately, I don't have any reproducer for this issue yet.
IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+7fe26e...@syzkaller.appspotmail.com
panic: Lock sctp-info not exclusively locked @ /syzkaller/managers/main/kernel/sys/netinet/sctp_pcb.c:4542
cpuid = 1
time = 1631194118
KDB: stack backtrace:
db_trace_self_wrapper() at db_trace_self_wrapper+0xc7/frame 0xfffffe009bfada50
13:28:37 executing program 0:
r0 = socket$inet6_sctp(0x1c, 0x1, 0x84)
recvmsg(r0, &(0x7f00000027c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x40003)
13:28:37 executing program 1:
r0 = openat$crypto(0xffffff9c, &(0x7f0000001380), 0x0, 0x0)
ioctl$CIOCGSESSION2(r0, 0xc030636a, &(0x7f0000000000)={0x17, 0x20, 0x0, 0x0, 0x0, 0x0})
13:28:37 executing program 2:
r0 = socket(0x2, 0x10000001, 0x0)
setsockopt$inet_tcp_TCP_FUNCTION_BLK(r0, 0x6, 0x2000, &(0x7f0000000180)={'bbr\x00'}, 0x24)
sendto$inet(r0, 0x0, 0x0, 0xb857788ebbdb0884, &(0x7f0000000280)={0x10, 0x2, 0x3, @rand_addr}, 0x10)
13:28:38 executing program 0:
r0 = socket$inet6_sctp(0x1c, 0x1, 0x84)
recvmsg(r0, &(0x7f00000027c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x40003)
13:28:38 executing program 1:
r0 = openat$crypto(0xffffff9c, &(0x7f0000001380), 0x0, 0x0)
ioctl$CIOCGSESSION2(r0, 0xc030636a, &(0x7f0000000000)={0x17, 0x20, 0x0, 0x0, 0x0, 0x0})
kdb_backtrace() at kdb_backtrace+0xd3/frame 0xfffffe009bfadbb0
vpanic() at vpanic+0x2c5/frame 0xfffffe009bfadc90
panic() at panic+0xb5/frame 0xfffffe009bfadd60
__rw_assert() at __rw_assert+0x201/frame 0xfffffe009bfaddb0
sctp_free_assoc() at sctp_free_assoc+0x14cd/frame 0xfffffe009bfadf10
sctp_lower_sosend() at sctp_lower_sosend+0x42fa/frame 0xfffffe009bfae400
sctp_sosend() at sctp_sosend+0x716/frame 0xfffffe009bfae6a0
sosend() at sosend+0xfc/frame 0xfffffe009bfae710
kern_sendit() at kern_sendit+0x58d/frame 0xfffffe009bfae880
sendit() at sendit+0x2b0/frame 0xfffffe009bfae8d0
sys_sendmsg() at sys_sendmsg+0x17d/frame 0xfffffe009bfae9f0
amd64_syscall() at amd64_syscall+0x425/frame 0xfffffe009bfaebf0
fast_syscall_common() at fast_syscall_common+0xf8/frame 0xfffffe009bfaebf0
--- syscall (198, FreeBSD ELF64, nosys), rip = 0x289eea, rsp = 0x7fffdfffdf08, rbp = 0x7fffdfffdf70 ---
KDB: enter: panic
[ thread pid 913 tid 100230 ]
Stopped at kdb_enter+0x6b: movq $0,0x28e223a(%rip)
db>
db> set $lines = 0
db> set $maxwidth = 0
db> show registers
cs 0x20
ds 0x3b
es 0x3b
fs 0x13
gs 0x1b
ss 0x28
rax 0x12
rcx 0xd3110d9370fa44f
rdx 0x40001
rbx 0
rsp 0xfffffe009bfadb90
rbp 0xfffffe009bfadbb0
rsi 0
rdi 0xfffffe009e4c1568
r8 0x3
r9 0xfffffe009bfad6c8
r10 0
r11 0x7ffb2da2
r12 0xfffffe009e960740
r13 0xfffffe009bfadc01
r14 0xffffffff82c79420 .str.18
r15 0xffffffff82c79420 .str.18
rip 0xffffffff817abe7b kdb_enter+0x6b
rflags 0x46
kdb_enter+0x6b: movq $0,0x28e223a(%rip)
db> show proc
Process 913 (syz-executor.3) at 0xfffffe009e951538:
state: NORMAL
uid: 0 gids: 0, 0, 5
parent: pid 786 at 0xfffffe009e42c000
ABI: FreeBSD ELF64
flag: 0x10000080 flag2: 0
arguments: /root/syz-executor.3
reaper: 0xfffffe0053d58538 reapsubtree: 1
sigparent: 20
vmspace: 0xfffffe009e9969f0
(map 0xfffffe009e9969f0)
(map.pmap 0xfffffe009e996ab0)
(pmap 0xfffffe009e996b10)
threads: 2
100158 RunQ syz-executor.3
100230 Run CPU 1 syz-executor.3
db> ps
pid ppid pgrp uid state wmesg wchan cmd
917 783 783 0 R CPU 0 syz-executor.1
915 782 782 0 R (threaded) syz-executor.0
100127 RunQ syz-executor.0
100232 S uwait 0xfffffe009e919a00 syz-executor.0
913 786 786 0 R (threaded) syz-executor.3
100158 RunQ syz-executor.3
100230 Run CPU 1 syz-executor.3
842 827 842 0 Ss select 0xfffffe009e943ac0 dhclient
833 1 833 0 Ss select 0xfffffe009e943a40 dhclient
827 810 436 65 S select 0xfffffe009e943b40 dhclient
810 436 436 0 S wait 0xfffffe009e8e0000 sh
786 780 786 0 Rs syz-executor.3
785 780 785 0 Rs syz-executor.2
783 780 783 0 Rs syz-executor.1
782 780 782 0 Ss nanslp 0xffffffff8405af81 syz-executor.0
780 778 778 0 S (threaded) syz-fuzzer
100115 S uwait 0xfffffe005894ab00 syz-fuzzer
100116 S uwait 0xfffffe005894a400 syz-fuzzer
100117 S uwait 0xfffffe005894a500 syz-fuzzer
100118 S uwait 0xfffffe005894a600 syz-fuzzer
100119 S uwait 0xfffffe009e8aec80 syz-fuzzer
100120 S uwait 0xfffffe009e8aed80 syz-fuzzer
100121 S uwait 0xfffffe009e8aee80 syz-fuzzer
100122 S kqread 0xfffffe0058788100 syz-fuzzer
100124 S uwait 0xfffffe005876b100 syz-fuzzer
778 776 778 0 Ss pause 0xfffffe009e475b20 csh
776 694 776 0 Ss select 0xfffffe009e56aec0 sshd
760 1 760 0 Ss+ ttyin 0xfffffe0057003cb0 getty
759 1 759 0 Ss+ ttyin 0xfffffe00575f14b0 getty
758 1 758 0 Ss+ ttyin 0xfffffe00575f1cb0 getty
757 1 757 0 Ss+ ttyin 0xfffffe00583f44b0 getty
756 1 756 0 Ss+ ttyin 0xfffffe00583f4cb0 getty
755 1 755 0 Ss+ ttyin 0xfffffe00583f04b0 getty
754 1 754 0 Ss+ ttyin 0xfffffe00583f0cb0 getty
753 1 753 0 Ss+ ttyin 0xfffffe005839b4b0 getty
752 1 752 0 Ss+ ttyin 0xfffffe005839bcb0 getty
750 1 24 0 S+ piperd 0xfffffe009e4515d0 logger
749 748 24 0 S+ nanslp 0xffffffff8405af80 sleep
748 1 24 0 S+ wait 0xfffffe009e42ca70 sh
698 1 698 0 Ss nanslp 0xffffffff8405af80 cron
694 1 694 0 Ss select 0xfffffe0057405740 sshd
507 1 507 0 Ss select 0xfffffe0058afc440 syslogd
436 1 436 0 Ss wait 0xfffffe0058b29538 devd
435 1 435 65 Ss select 0xfffffe0058afc7c0 dhclient
350 1 350 0 Ss select 0xfffffe0058afc5c0 dhclient
347 1 347 0 Ss select 0xfffffe0058afc8c0 dhclient
23 0 0 0 DL syncer 0xffffffff84183360 [syncer]
22 0 0 0 DL vlruwt 0xfffffe0058763a70 [vnlru]
21 0 0 0 DL (threaded) [bufdaemon]
100085 D qsleep 0xffffffff84181060 [bufdaemon]
100088 D - 0xffffffff83411f80 [bufspacedaemon-0]
100099 D sdflush 0xfffffe00574768e8 [/ worker]
20 0 0 0 DL psleep 0xffffffff841b9580 [vmdaemon]
19 0 0 0 DL (threaded) [pagedaemon]
100083 D psleep 0xffffffff841ad0b8 [dom0]
100089 D launds 0xffffffff841ad0c4 [laundry: dom0]
100090 D umarcl 0xffffffff81eae980 [uma]
18 0 0 0 DL - 0xffffffff83e120a0 [rand_harvestq]
17 0 0 0 DL waiting 0xffffffff8487b500 [sctp_iterator]
16 0 0 0 DL pftm 0xffffffff84c80e20 [pf purge]
15 0 0 0 DL - 0xffffffff8417c280 [soaiod4]
9 0 0 0 DL - 0xffffffff8417c280 [soaiod3]
8 0 0 0 DL - 0xffffffff8417c280 [soaiod2]
7 0 0 0 DL - 0xffffffff8417c280 [soaiod1]
6 0 0 0 DL (threaded) [cam]
100048 D - 0xffffffff83c97840 [doneq0]
100049 D - 0xffffffff83c977c0 [async]
100082 D - 0xffffffff83c97640 [scanner]
14 0 0 0 DL seqstat 0xfffffe0056abac88 [sequencer 00]
5 0 0 0 DL crypto_ 0xfffffe00541b8d80 [crypto returns 1]
4 0 0 0 DL crypto_ 0xfffffe00541b8d30 [crypto returns 0]
3 0 0 0 DL crypto_ 0xffffffff841a7160 [crypto]
13 0 0 0 DL (threaded) [geom]
100039 D - 0xffffffff8402e540 [g_event]
100040 D - 0xffffffff8402e580 [g_up]
100041 D - 0xffffffff8402e5c0 [g_down]
2 0 0 0 DL (threaded) [KTLS]
100029 D - 0xfffffe00081f6d00 [thr_0]
100030 D - 0xfffffe00081f6d80 [thr_1]
100031 D - 0xffffffff8417d608 [alloc_0]
12 0 0 0 WL (threaded) [intr]
100011 I [swi6: task queue]
100012 I [swi6: Giant taskq]
100014 I [swi5: fast taskq]
100032 I [swi1: netisr 0]
100033 I [swi3: vm]
100034 I [swi4: clock (0)]
100035 I [swi4: clock (1)]
100036 I [swi1: hpts]
100037 I [swi1: hpts]
100050 I [irq24: virtio_pci0]
100051 I [irq25: virtio_pci0]
100052 I [irq26: virtio_pci0]
100053 I [irq27: virtio_pci0]
100054 I [irq28: virtio_pci1]
100055 I [irq29: virtio_pci1]
100056 I [irq30: virtio_pci1]
100057 I [irq31: virtio_pci1]
100058 I [irq32: virtio_pci1]
100063 I [irq10: virtio_pci2]
100065 I [irq1: atkbd0]
100066 I [irq12: psm0]
100067 I [swi0: uart uart++]
100075 I [swi1: pf send]
11 0 0 0 RL (threaded) [idle]
100003 CanRun [idle: cpu0]
100004 CanRun [idle: cpu1]
1 0 1 0 SLs wait 0xfffffe0053d58538 [init]
10 0 0 0 DL audit_w 0xffffffff841a8100 [audit]
0 0 0 0 DLs (threaded) [kernel]
100000 D swapin 0xffffffff8402f440 [swapper]
100005 D - 0xfffffe00081f8900 [softirq_0]
100006 D - 0xfffffe00081f8700 [softirq_1]
100007 D - 0xfffffe00081f8500 [if_io_tqg_0]
100008 D - 0xfffffe00081f8300 [if_io_tqg_1]
100009 D - 0xfffffe00081f8100 [if_config_tqg_0]
100010 D - 0xfffffe0053df4e00 [deferred_unmount ta]
100013 D - 0xfffffe0053df4800 [thread taskq]
100015 D - 0xfffffe0053df4400 [linuxkpi_irq_wq]
100016 D - 0xfffffe0053df4200 [kqueue_ctx taskq]
100017 D - 0xfffffe0053df4000 [pci_hp taskq]
100018 D - 0xfffffe0053dfed00 [aiod_kick taskq]
100019 D - 0xfffffe0053dfeb00 [inm_free taskq]
100020 D - 0xfffffe0053dfe900 [in6m_free taskq]
100021 D - 0xfffffe0053dfe700 [linuxkpi_short_wq_0]
100022 D - 0xfffffe0053dfe700 [linuxkpi_short_wq_1]
100023 D - 0xfffffe0053dfe700 [linuxkpi_short_wq_2]
100024 D - 0xfffffe0053dfe700 [linuxkpi_short_wq_3]
100025 D - 0xfffffe0053dfe200 [linuxkpi_long_wq_0]
100026 D - 0xfffffe0053dfe200 [linuxkpi_long_wq_1]
100027 D - 0xfffffe0053dfe200 [linuxkpi_long_wq_2]
100028 D - 0xfffffe0053dfe200 [linuxkpi_long_wq_3]
100038 D - 0xfffffe0053e08200 [firmware taskq]
100042 D - 0xfffffe005418fc00 [crypto_0]
100043 D - 0xfffffe005418fc00 [crypto_1]
100059 D - 0xfffffe0056eb6b00 [vtnet0 rxq 0]
100060 D - 0xfffffe0056eb6a00 [vtnet0 txq 0]
100061 D - 0xfffffe0056eb6900 [vtnet0 rxq 1]
100062 D - 0xfffffe0056eb6800 [vtnet0 txq 1]
100064 D vtbslp 0xfffffe0056ee3400 [virtio_balloon]
100068 D - 0xfffffe0057016800 [mca taskq]
100069 D - 0xffffffff82c803a1 [deadlkres]
100077 D - 0xfffffe00573faa00 [acpi_task_0]
100078 D - 0xfffffe00573faa00 [acpi_task_1]
100079 D - 0xfffffe00573faa00 [acpi_task_2]
100081 D - 0xfffffe005418f400 [CAM taskq]
916 785 785 0 Z syz-executor.2
db> show all locks
Process 917 (syz-executor.1) thread 0xfffffe009e9171e0 (100131)
exclusive sleep mutex vm reserv (vm reserv) r = 0 (0xfffff8007c7fcb80) locked @ /syzkaller/managers/main/kernel/sys/vm/vm_reserv.c:931
exclusive rw vm object (vm object) r = 0 (0xfffffe009e95b630) locked @ /syzkaller/managers/main/kernel/sys/vm/vm_fault.c:1332
shared sx vm map (user) (vm map (user)) r = 0 (0xfffffe009e996060) locked @ /syzkaller/managers/main/kernel/sys/vm/vm_map.c:4935
Process 913 (syz-executor.3) thread 0xfffffe009e960740 (100230)
exclusive sleep mutex sctp-send-tcb (tcbs) r = 0 (0xfffffe009e965ab0) locked @ /syzkaller/managers/main/kernel/sys/netinet/sctp_pcb.c:4664
exclusive sleep mutex sctp-tcb (tcb) r = 0 (0xfffffe009e965a90) locked @ /syzkaller/managers/main/kernel/sys/netinet/sctp_pcb.c:4337
db> show malloc
Type InUse MemUse Requests
pf_hash 5 11524K 5
devbuf 4217 4339K 4242
tcp_hpts 6 3201K 6
sysctloid 34389 2031K 34460
vtbuf 24 1968K 46
kobj 326 1304K 485
newblk 594 1173K 728
vfscache 3 1025K 3
inodedep 120 557K 176
pcb 29 542K 299
ufs_quota 1 512K 1
vfs_hash 1 512K 1
callout 2 512K 2
intr 4 472K 4
subproc 119 255K 979
acpica 1674 184K 55623
vnet_data 1 168K 1
vmem 3 146K 4
tidhash 3 141K 3
linker 355 140K 383
pagedep 20 133K 114
tfo_ccache 1 128K 1
filedesc 16 121K 233
DEVFS1 108 108K 125
sem 4 106K 4
bus 986 80K 3488
mtx_pool 2 72K 2
syncache 1 68K 1
acpitask 1 64K 1
ddb_capture 1 64K 1
module 509 64K 509
kdtrace 198 39K 1152
umtx 308 39K 308
BPF 22 36K 22
temp 35 33K 1884
hostcache 1 32K 1
shm 1 32K 1
DEVFS3 127 32K 137
msg 4 30K 4
gtaskqueue 18 26K 18
dirrem 86 22K 110
kbdmux 6 22K 6
DEVFS_RULE 56 20K 56
ifaddr 67 19K 69
ufs_mount 4 17K 5
proc 3 17K 3
routetbl 131 17K 415
tty 16 16K 16
ithread 99 16K 99
bus-sc 34 15K 1693
lltable 45 14K 45
KTRACE 100 13K 100
ifnet 7 13K 7
ether_multi 152 13K 162
kenv 95 12K 95
eventhandler 133 12K 133
freefile 86 11K 104
CAM queue 5 11K 1528
GEOM 61 10K 490
rman 84 10K 425
in6_multi 65 9K 65
bmsafemap 2 9K 144
UART 12 9K 12
devstat 4 9K 4
ksem 1 8K 1
rpc 2 8K 2
shmfd 1 8K 1
pfs_vncache 1 8K 1
pfs_nodes 20 8K 20
audit_evclass 237 8K 295
taskqueue 63 7K 63
sglist 5 7K 5
CAM DEV 3 6K 510
cred 24 6K 201
kqueue 60 6K 922
plimit 22 6K 348
ufs_dirhash 24 5K 24
DEVFSP 74 5K 85
UMA 270 5K 270
pf_ifnet 10 5K 19
sctp_timw 17 5K 17
vt 11 5K 11
memdesc 1 4K 1
MCA 32 4K 32
evdev 4 4K 4
kcovinfo 64 4K 68
diradd 31 4K 143
pwddesc 57 4K 918
mkdir 28 4K 204
acpisem 28 4K 28
hhook 15 4K 17
session 26 4K 35
terminal 11 3K 11
proc-args 47 3K 555
indirdep 10 3K 10
uidinfo 3 3K 7
local_apic 1 2K 1
io_apic 1 2K 1
fpukern_ctx 2 2K 2
newdirblk 16 2K 102
ipsec-saq 2 2K 2
lockf 19 2K 29
selfd 31 2K 10857
ip6ndp 12 2K 13
Unitno 30 2K 47
sctp_ifa 13 2K 14
CAM XPT 22 2K 543
in_multi 6 2K 8
ipsecpolicy 2 2K 2
acpidev 20 2K 20
select 10 2K 31
sctp_atcl 3 2K 115
msi 9 2K 9
clone 9 2K 9
tun 7 2K 7
sctp_stro 1 1K 24
softdep 1 1K 1
sahead 1 1K 1
secasvar 1 1K 1
nhops 6 1K 8
vnodemarker 2 1K 12
NFSD session 1 1K 1
CAM periph 4 1K 271
ipsec 3 1K 3
sctp_ifn 6 1K 14
mld 6 1K 6
igmp 6 1K 6
toponodes 6 1K 6
isadev 6 1K 6
mount 16 1K 89
pci_link 10 1K 10
crypto 4 1K 4
encap_export_host 12 1K 12
pfil 4 1K 4
cdev 2 1K 2
inpcbpolicy 13 1K 200
osd 8 1K 56
chacha20random 1 1K 1
NFSD lckfile 1 1K 1
NFSD V4client 1 1K 1
DEVFS 9 1K 10
vnodes 1 1K 1
CAM SIM 2 1K 2
ktls 1 1K 1
procdesc 2 1K 8
feeder 7 1K 7
tcpfunc 3 1K 3
loginclass 3 1K 6
prison 6 1K 6
lkpikmalloc 5 1K 6
sctp_atky 4 1K 139
aesni_data 2 1K 2
soname 5 1K 3570
nexusdev 8 1K 8
apmdev 1 1K 1
atkbddev 2 1K 2
CAM dev queue 2 1K 2
xform 2 1K 45
CAM I/O Scheduler 1 1K 1
CAM path 4 1K 1034
pmchooks 1 1K 1
filecaps 5 1K 72
sctp_vrf 1 1K 1
vnet 1 1K 1
entropy 2 1K 38
acpiintr 1 1K 1
pmc 1 1K 1
sctp_athm 3 1K 115
sctp_map 2 1K 48
cpus 2 1K 2
vnet_data_free 1 1K 1
Per-cpu 1 1K 1
freework 1 1K 108
iov 1 1K 14062
p1003.1b 1 1K 1
pf_table 0 0K 0
pf_rule 0 0K 0
pf_altq 0 0K 0
pf_osfp 0 0K 0
pf_temp 0 0K 0
mqdata 0 0K 0
vegas data 0 0K 0
tcp_do 0 0K 0
tcp_fsb 0 0K 0
chd data 0 0K 0
htcp data 0 0K 0
dctcp data 0 0K 0
cubic data 0 0K 0
cdg data 0 0K 0
sctp_mcore 0 0K 0
sctp_socko 0 0K 83
sctp_iter 0 0K 12
sctp_mvrf 0 0K 0
sctp_cpal 0 0K 0
sctp_cmsg 0 0K 0
sctp_stre 0 0K 0
sctp_athi 0 0K 0
sctp_a_it 0 0K 12
sctp_aadr 0 0K 0
sctp_stri 0 0K 0
NFSCL diroff 0 0K 0
NEWdirectio 0 0K 0
madt_table 0 0K 2
smartpqi 0 0K 0
NEWNFSnode 0 0K 0
NFSCL lck 0 0K 0
NFSCL lckown 0 0K 0
NFSCL client 0 0K 0
NFSCL deleg 0 0K 0
NFSCL open 0 0K 0
NFSCL owner 0 0K 0
NFS fh 0 0K 0
iavf 0 0K 0
ixl 0 0K 0
NFS req 0 0K 0
NFSD usrgroup 0 0K 0
NFSD string 0 0K 0
NFSD V4lock 0 0K 0
NFSD V4state 0 0K 0
ice-resmgr 0 0K 0
ice-osdep 0 0K 0
ice 0 0K 0
axgbe 0 0K 0
NFSD srvcache 0 0K 0
msdosfs_fat 0 0K 0
msdosfs_mount 0 0K 0
msdosfs_node 0 0K 0
DEVFS4 0 0K 0
xen_intr 0 0K 0
DEVFS2 0 0K 0
gntdev 0 0K 0
xen_hvm 0 0K 0
legacydrv 0 0K 0
qpidrv 0 0K 0
privcmd_dev 0 0K 0
evtchn_dev 0 0K 0
dmar_idpgtbl 0 0K 0
dmar_dom 0 0K 0
dmar_ctx 0 0K 0
xenstore 0 0K 0
ciss_data 0 0K 0
BACKLIGHT 0 0K 0
isci 0 0K 0
iommu_dmamap 0 0K 0
xnb 0 0K 0
hyperv_socket 0 0K 0
bxe_ilt 0 0K 0
xbbd 0 0K 0
xenbus 0 0K 0
xbd 0 0K 0
Balloon 0 0K 0
sysmouse 0 0K 0
vm_fictitious 0 0K 0
vtfont 0 0K 0
ath_hal 0 0K 0
athdev 0 0K 0
ata_pci 0 0K 0
ata_dma 0 0K 0
ata_generic 0 0K 0
amr 0 0K 0
pvscsi 0 0K 0
scsi_da 0 0K 69
UMAHash 0 0K 0
ata_da 0 0K 0
vm_pgdata 0 0K 0
jblocks 0 0K 0
savedino 0 0K 17
sentinel 0 0K 0
jfsync 0 0K 0
jtrunc 0 0K 0
sbdep 0 0K 4
jsegdep 0 0K 0
jseg 0 0K 0
jfreefrag 0 0K 0
jfreeblk 0 0K 0
jnewblk 0 0K 0
jmvref 0 0K 0
jremref 0 0K 0
jaddref 0 0K 0
freedep 0 0K 0
freeblks 0 0K 107
freefrag 0 0K 2
allocindir 0 0K 0
allocdirect 0 0K 0
ufs_trim 0 0K 0
mactemp 0 0K 0
audit_trigger 0 0K 0
audit_pipe_presel 0 0K 0
audit_pipeent 0 0K 0
audit_pipe 0 0K 0
audit_evname 0 0K 0
audit_bsm 0 0K 0
audit_gidset 0 0K 0
audit_text 0 0K 0
audit_path 0 0K 0
audit_data 0 0K 0
audit_cred 0 0K 0
scsi_ch 0 0K 0
scsi_cd 0 0K 0
AHCI driver 0 0K 0
USBdev 0 0K 0
USB 0 0K 0
agp 0 0K 0
nvme_da 0 0K 0
ktls_ocf 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5E_TLS 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EN 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5DUMP 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
seq_file 0 0K 0
radix 0 0K 0
idr 0 0K 0
lkpifw 0 0K 0
NLM 0 0K 0
ipsec-spdcache 0 0K 0
ipsec-reg 0 0K 0
ipsec-misc 0 0K 0
ipsecrequest 0 0K 0
ip6opt 0 0K 3
ip6_msource 0 0K 0
ip6_moptions 0 0K 0
in6_mfilter 0 0K 0
frag6 0 0K 0
tcplog 0 0K 0
tcp_hwpace 0 0K 0
acpipwr 0 0K 0
acpi_perf 0 0K 0
LRO 0 0K 0
newreno data 0 0K 0
ip_msource 0 0K 0
ip_moptions 0 0K 0
in_mfilter 0 0K 0
ipid 0 0K 0
80211scan 0 0K 0
80211ratectl 0 0K 0
80211power 0 0K 0
80211nodeie 0 0K 0
80211node 0 0K 0
80211mesh_gt 0 0K 0
80211mesh_rt 0 0K 0
80211perr 0 0K 0
80211prep 0 0K 0
80211preq 0 0K 0
80211dfs 0 0K 0
80211crypto 0 0K 0
80211vap 0 0K 0
iflib 0 0K 0
vlan 0 0K 0
gif 0 0K 0
ifdescr 0 0K 0
zlib 0 0K 0
fadvise 0 0K 0
VN POLL 0 0K 0
twsbuf 0 0K 0
statfs 0 0K 271
namei_tracker 0 0K 0
export_host 0 0K 0
cl_savebuf 0 0K 2
twe_commands 0 0K 0
twa_commands 0 0K 0
tcp_log_dev 0 0K 0
midi buffers 0 0K 0
mixer 0 0K 0
ac97 0 0K 0
hdacc 0 0K 0
hdac 0 0K 0
hdaa 0 0K 0
acpicmbat 0 0K 0
SIIS driver 0 0K 0
CAM CCB 0 0K 523
PUC 0 0K 0
ppbusdev 0 0K 0
agtiapi_MemAlloc malloc 0 0K 0
biobuf 0 0K 0
aios 0 0K 0
lio 0 0K 0
acl 0 0K 0
osti_cacheable 0 0K 0
mbuf_tag 0 0K 97
tempbuff 0 0K 0
tempbuff 0 0K 0
ag_tgt_map_t malloc 0 0K 0
ag_slr_map_t malloc 0 0K 0
lDevFlags * malloc 0 0K 0
tiDeviceHandle_t * malloc 0 0K 0
ag_portal_data_t malloc 0 0K 0
ag_device_t malloc 0 0K 0
STLock malloc 0 0K 0
CCB List 0 0K 0
sr_iov 0 0K 0
OCS 0 0K 0
OCS 0 0K 0
nvme 0 0K 0
nvd 0 0K 0
netmap 0 0K 0
mwldev 0 0K 0
MVS driver 0 0K 0
CAM ccb queue 0 0K 0
mrsasbuf 0 0K 0
mpt_user 0 0K 0
mps_user 0 0K 0
accf 0 0K 0
pts 0 0K 0
ioctlops 0 0K 95
eventfd 0 0K 0
Witness 0 0K 0
stack 0 0K 0
MPSSAS 0 0K 0
mps 0 0K 0
mpr_user 0 0K 0
MPRSAS 0 0K 0
mpr 0 0K 0
mfibuf 0 0K 0
sbuf 0 0K 288
md_sectors 0 0K 0
firmware 0 0K 0
compressor 0 0K 0
md_disk 0 0K 0
SWAP 0 0K 0
malodev 0 0K 0
LED 0 0K 0
sysctltmp 0 0K 675
sysctl 0 0K 3
ekcd 0 0K 0
dumper 0 0K 0
sendfile 0 0K 0
rctl 0 0K 0
ix_sriov 0 0K 0
aacraidcam 0 0K 0
aacraid_buf 0 0K 0
ix 0 0K 0
ipsbuf 0 0K 0
cache 0 0K 0
iirbuf 0 0K 0
prison_racct 0 0K 0
Fail Points 0 0K 0
sigio 0 0K 1
filedesc_to_leader 0 0K 0
pwd 0 0K 0
tty console 0 0K 0
aaccam 0 0K 0
aacbuf 0 0K 0
zstd 0 0K 0
XZ_DEC 0 0K 0
nvlist 0 0K 0
SCSI ENC 0 0K 0
SCSI sa 0 0K 0
scsi_pass 0 0K 0
isofs_node 0 0K 0
isofs_mount 0 0K 0
tr_raid5_data 0 0K 0
tr_raid1e_data 0 0K 0
tr_raid1_data 0 0K 0
tr_raid0_data 0 0K 0
tr_concat_data 0 0K 0
md_sii_data 0 0K 0
md_promise_data 0 0K 0
md_nvidia_data 0 0K 0
md_jmicron_data 0 0K 0
md_intel_data 0 0K 0
md_ddf_data 0 0K 0
raid_data 0 0K 72
geom_flashmap 0 0K 0
tmpfs dir 0 0K 0
tmpfs name 0 0K 0
tmpfs mount 0 0K 0
NFS FHA 0 0K 0
newnfsmnt 0 0K 0
newnfsclient_req 0 0K 0
NFSCL layrecall 0 0K 0
NFSCL session 0 0K 0
NFSCL sockreq 0 0K 0
NFSCL devinfo 0 0K 0
NFSCL flayout 0 0K 0
NFSCL layout 0 0K 0
NFSD rollback 0 0K 0
db> show uma
Zone Size Used Free Requests Sleeps Bucket Total Mem XFree
mbuf_jumbo_page 4096 8320 714 14045 0 254 37003264 0
pbuf 2624 0 973 0 0 2 2553152 0
mbuf 256 8671 749 39129 0 254 2411520 0
BUF TRIE 144 184 11576 513 0 62 1693440 0
malloc-384 384 4288 12 4345 0 30 1651200 0
malloc-4096 4096 386 2 1407 0 2 1589248 0
malloc-128 128 11572 22 11645 0 126 1484032 0
UMA Slabs 0 112 9955 14 9955 0 126 1116528 0
vmem btag 56 15586 85 15586 0 254 877576 0
RADIX NODE 144 5864 207 28109 0 62 874224 0
FFS inode 1160 508 24 612 0 8 617120 0
malloc-65536 65536 6 0 6 0 1 393216 0
lkpimm 168 1 2327 1 0 62 391104 0
lkpicurr 168 2 2326 2 0 62 391104 0
ertt_txseginfo 40 1 9190 22493 0 254 367640 0
256 Bucket 2048 151 5 10789 0 8 319488 0
VM OBJECT 264 1133 67 14835 0 30 316800 0
mbuf_cluster 2048 150 2 150 0 254 311296 0
malloc-64 64 4479 57 6403 0 254 290304 0
THREAD 1808 139 15 233 0 8 278432 0
VNODE 448 544 68 650 0 30 274176 0
malloc-256 256 952 38 2093 0 62 253440 0
malloc-16 16 14227 273 15561 0 254 232000 0
DEVCTL 1024 20 200 151 0 0 225280 0
malloc-65536 65536 1 2 59 0 1 196608 0
malloc-65536 65536 1 2 137 0 1 196608 0
malloc-16384 16384 7 5 114 0 1 196608 0
UMA Zones 768 242 2 242 0 16 187392 0
malloc-32 32 5598 72 6389 0 254 181440 0
malloc-128 128 1229 42 26167 0 126 162688 0
MAP ENTRY 96 1360 278 46193 0 126 157248 0
malloc-1024 1024 133 7 150 0 16 143360 0
malloc-128 128 1042 43 5314 0 126 138880 0
FFS2 dinode 256 508 17 612 0 62 134400 0
malloc-65536 65536 0 2 8 0 1 131072 0
S VFS Cache 104 1001 169 1123 0 126 121680 0
ksiginfo 112 45 999 163 0 126 116928 0
tcp_bbr_map 128 0 868 2081 0 126 111104 0
VMSPACE 2544 34 8 896 0 4 106848 0
malloc-32768 32768 1 2 131 0 1 98304 0
malloc-2048 2048 12 36 576 0 8 98304 0
UMA Kegs 384 227 6 227 0 30 89472 0
clpbuf 2624 0 32 21 0 16 83968 0
filedesc0 1072 57 20 918 0 8 82544 0
malloc-8192 8192 9 1 110 0 1 81920 0
PROC 1336 57 3 917 0 8 80160 0
malloc-8192 8192 8 1 10 0 1 73728 0
g_bio 408 0 170 4809 0 30 69360 0
128 Bucket 1024 47 20 678 0 16 68608 0
malloc-65536 65536 1 0 1 0 1 65536 0
malloc-4096 4096 14 1 27 0 2 61440 0
malloc-8192 8192 4 3 32 0 1 57344 0
malloc-16384 16384 3 0 3 0 1 49152 0
malloc-16384 16384 1 2 161 0 1 49152 0
malloc-2048 2048 2 22 575 0 8 49152 0
malloc-2048 2048 10 14 99 0 8 49152 0
malloc-1024 1024 10 34 1561 0 16 45056 0
malloc-64 64 517 176 1623 0 254 44352 0
socket 960 27 17 1514 0 254 42240 0
malloc-256 256 143 22 428 0 62 42240 0
32 Bucket 256 49 116 5102 0 62 42240 0
DIRHASH 1024 34 6 34 0 16 40960 0
pcpu-8 8 4660 460 4816 0 254 40960 0
mbuf_packet 256 19 131 540 0 254 38400 0
NAMEI 1024 0 36 13483 0 16 36864 0
malloc-4096 4096 9 0 9 0 2 36864 0
malloc-4096 4096 8 1 10 0 2 36864 0
64 Bucket 512 59 13 2069 0 30 36864 0
malloc-128 128 61 218 323 0 126 35712 0
malloc-32768 32768 1 0 1 0 1 32768 0
malloc-32768 32768 1 0 1 0 1 32768 0
malloc-16384 16384 2 0 17 0 1 32768 0
pcpu-64 64 487 25 487 0 254 32768 0
da_ccb 544 0 56 1319 0 16 30464 0
malloc-64 64 101 340 1515 0 254 28224 0
malloc-384 384 64 6 109 0 30 26880 0
TURNSTILE 136 155 34 155 0 62 25704 0
malloc-4096 4096 4 2 7 0 2 24576 0
ttyinq 160 135 15 300 0 62 24000 0
ttyoutq 256 72 18 160 0 62 23040 0
malloc-384 384 35 25 147 0 30 23040 0
malloc-384 384 54 6 56 0 30 23040 0
malloc-256 256 68 22 439 0 62 23040 0
malloc-256 256 49 41 531 0 62 23040 0
sctp_ep 1272 2 16 91 0 254 22896 0
sctp_asoc 2288 1 9 24 0 254 22880 0
pipe 744 21 9 304 0 16 22320 0
malloc-4096 4096 3 2 906 0 2 20480 0
malloc-2048 2048 2 8 26 0 8 20480 0
malloc-64 64 224 91 318 0 254 20160 0
Files 80 194 56 7320 0 126 20000 0
malloc-128 128 108 47 246 0 126 19840 0
Mountpoints 2752 2 5 2 0 4 19264 0
malloc-256 256 67 8 386 0 62 19200 0
malloc-256 256 46 29 113 0 62 19200 0
SLEEPQUEUE 88 155 37 155 0 126 16896 0
malloc-16384 16384 1 0 1 0 1 16384 0
malloc-16384 16384 1 0 1 0 1 16384 0
malloc-1024 1024 8 8 12 0 16 16384 0
sctp_raddr 736 1 21 24 0 254 16192 0
malloc-64 64 168 84 204 0 254 16128 0
malloc-32 32 89 415 655 0 254 16128 0
16 Bucket 144 47 65 311 0 62 16128 0
tcp_inpcb 496 19 13 45 0 254 15872 0
malloc-128 128 116 8 282 0 126 15872 0
malloc-384 384 22 18 362 0 30 15360 0
malloc-256 256 25 35 185 0 62 15360 0
tcpcb 1080 4 10 45 0 254 15120 0
tcp_bbr_pcb 832 0 18 34 0 16 14976 0
malloc-2048 2048 3 3 194 0 8 12288 0
malloc-2048 2048 2 4 4 0 8 12288 0
malloc-1024 1024 8 4 185 0 16 12288 0
malloc-1024 1024 7 5 7 0 16 12288 0
malloc-64 64 76 113 24638 0 254 12096 0
malloc-32 32 88 290 4141 0 254 12096 0
KNOTE 160 28 47 1378 0 62 12000 0
8 Bucket 80 43 107 730 0 126 12000 0
udp_inpcb 496 6 18 150 0 254 11904 0
malloc-128 128 60 33 342 0 126 11904 0
kenv 258 15 30 1033 0 30 11610 0
routing nhops 256 27 18 34 0 62 11520 0
malloc-8192 8192 1 0 1 0 1 8192 0
malloc-8192 8192 1 0 1 0 1 8192 0
malloc-8192 8192 1 0 1 0 1 8192 0
malloc-8192 8192 1 0 1 0 1 8192 0
malloc-2048 2048 3 1 3 0 8 8192 0
malloc-2048 2048 3 1 3 0 8 8192 0
malloc-1024 1024 2 6 11 0 16 8192 0
malloc-1024 1024 2 6 25 0 16 8192 0
malloc-512 512 6 10 6 0 30 8192 0
malloc-512 512 0 16 131 0 30 8192 0
malloc-512 512 5 11 74 0 30 8192 0
malloc-512 512 8 8 8 0 30 8192 0
rtentry 176 30 16 34 0 62 8096 0
PGRP 88 26 66 35 0 126 8096 0
rl_entry 40 35 167 35 0 254 8080 0
sctp_laddr 48 0 168 114 0 254 8064 0
udpcb 32 6 246 150 0 254 8064 0
ertt 72 4 108 45 0 126 8064 0
PWD 32 18 234 191 0 254 8064 0
malloc-64 64 54 72 370 0 254 8064 0
malloc-64 64 60 66 93 0 254 8064 0
malloc-32 32 129 123 284 0 254 8064 0
malloc-32 32 56 196 72 0 254 8064 0
malloc-32 32 38 214 188 0 254 8064 0
malloc-32 32 51 201 222 0 254 8064 0
malloc-32 32 17 235 30 0 254 8064 0
4 Bucket 48 5 163 55 0 254 8064 0
2 Bucket 32 51 201 533 0 254 8064 0
vtnet_tx_hdr 24 0 334 1602 0 254 8016 0
malloc-16 16 0 500 7 0 254 8000 0
malloc-16 16 26 474 108 0 254 8000 0
malloc-16 16 57 443 368 0 254 8000 0
malloc-16 16 17 483 190 0 254 8000 0
malloc-16 16 39 461 176 0 254 8000 0
malloc-16 16 287 213 25541 0 254 8000 0
malloc-16 16 4 496 89 0 254 8000 0
ripcb 496 2 14 5 0 254 7936 0
malloc-128 128 37 25 54 0 126 7936 0
unpcb 256 11 19 1197 0 254 7680 0
malloc-256 256 13 17 524 0 62 7680 0
FPU_save_area 832 1 8 1 0 16 7488 0
cpuset 104 8 54 8 0 126 6448 0
epoch_record pcpu 256 4 12 4 0 62 4096 0
malloc-4096 4096 0 1 1 0 2 4096 0
malloc-4096 4096 0 1 3 0 2 4096 0
malloc-1024 1024 1 3 1 0 16 4096 0
malloc-512 512 0 8 1 0 30 4096 0
malloc-512 512 5 3 5 0 30 4096 0
malloc-512 512 0 8 1 0 30 4096 0
pcpu-16 16 7 249 7 0 254 4096 0
hostcache 64 1 62 1 0 254 4032 0
syncache 168 0 24 4 0 254 4032 0
UMA Slabs 1 176 9 13 9 0 62 3872 0
malloc-384 384 0 10 1 0 30 3840 0
malloc-384 384 2 8 2 0 30 3840 0
malloc-384 384 1 9 1 0 30 3840 0
mqnode 416 3 6 3 0 30 3744 0
KMAP ENTRY 96 12 27 14 0 0 3744 0
vmem 1856 1 1 1 0 8 3712 0
SMR CPU 32 3 60 3 0 254 2016 0
SMR SHARED 24 3 60 3 0 254 1512 0
FFS1 dinode 128 0 0 0 0 126 0 0
ada_ccb 272 0 0 0 0 30 0 0
swblk 136 0 0 0 0 62 0 0
swpctrie 144 0 0 0 0 62 0 0
cdg_qdiffsample 16 0 0 0 0 254 0 0
sctp_asconf_ack 48 0 0 0 0 254 0 0
sctp_asconf 40 0 0 0 0 254 0 0
sctp_stream_msg_out 112 0 0 0 0 254 0 0
sctp_readq 152 0 0 0 0 254 0 0
sctp_chunk 152 0 0 0 0 254 0 0
pf state scrubs 40 0 0 0 0 254 0 0
pf frag entries 40 0 0 0 0 254 0 0
pf frags 248 0 0 0 0 62 0 0
pf table entries 160 0 0 0 0 62 0 0
pf table entry counters 64 0 0 0 0 254 0 0
pf source nodes 136 0 0 0 0 254 0 0
pf state keys 88 0 0 0 0 126 0 0
pf states 312 0 0 0 0 254 0 0
pf tags 104 0 0 0 0 126 0 0
pf mtags 48 0 0 0 0 254 0 0
tcp_rack_pcb 832 0 0 0 0 16 0 0
tcp_rack_map 112 0 0 0 0 126 0 0
udplite_inpcb 496 0 0 0 0 254 0 0
tcp_log_node 120 0 0 0 0 126 0 0
tcp_log_bucket 176 0 0 0 0 62 0 0
tcp_log 416 0 0 0 0 254 0 0
tcpreass 48 0 0 0 0 254 0 0
tfo_ccache_entries 80 0 0 0 0 126 0 0
tfo 4 0 0 0 0 254 0 0
sackhole 32 0 0 0 0 254 0 0
tcptw 88 0 0 0 0 254 0 0
ipq 56 0 0 0 0 254 0 0
IPsec SA lft_c 16 0 0 0 0 254 0 0
itimer 352 0 0 0 0 30 0 0
AIOLIO 272 0 0 0 0 30 0 0
AIOCB 552 0 0 0 0 16 0 0
AIOP 32 0 0 0 0 254 0 0
AIO 208 0 0 0 0 62 0 0
TMPFS node 224 0 0 0 0 62 0 0
NCLNODE 592 0 0 0 0 16 0 0
mqnotifier 216 0 0 0 0 62 0 0
mvdata 64 0 0 0 0 254 0 0
mqueue 248 0 0 0 0 62 0 0
LTS VFS Cache 360 0 0 0 0 30 0 0
L VFS Cache 320 0 0 0 0 30 0 0
STS VFS Cache 144 0 0 0 0 62 0 0
cryptop 280 0 0 0 0 30 0 0
linux_dma_object 24 0 0 0 0 254 0 0
linux_dma_pctrie 144 0 0 0 0 62 0 0
IOMMU_MAP_ENTRY 120 0 0 0 0 126 0 0
ktls_session 192 0 0 0 0 62 0 0
mbuf_jumbo_16k 16384 0 0 0 0 254 0 0
mbuf_jumbo_9k 9216 0 0 0 0 254 0 0
audit_record 1280 0 0 0 0 8 0 0
domainset 40 0 0 0
---
This report is generated by a bot. It may contain errors.
See https://goo.gl/tpsmEJ for more information about syzbot.
syzbot engineers can be reached at syzk...@googlegroups.com.
syzbot will keep track of this issue. See:
https://goo.gl/tpsmEJ#status for how to communicate with syzbot.
syzbot found the following issue on:
HEAD commit: 395db99f32bc Export _mmap and __sys_mmap from libc.so
git tree: https://github.com/freebsd/freebsd-src.git main
console output: https://syzkaller.appspot.com/x/log.txt?x=13a107a5300000
dashboard link: https://syzkaller.appspot.com/bug?extid=7fe26e26911344e7211d
Unfortunately, I don't have any reproducer for this issue yet.
IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+7fe26e...@syzkaller.appspotmail.com
panic: Lock sctp-info not exclusively locked @ /syzkaller/managers/main/kernel/sys/netinet/sctp_pcb.c:4542
cpuid = 1
time = 1631194118
KDB: stack backtrace:
db_trace_self_wrapper() at db_trace_self_wrapper+0xc7/frame 0xfffffe009bfada50
13:28:37 executing program 0:
r0 = socket$inet6_sctp(0x1c, 0x1, 0x84)
recvmsg(r0, &(0x7f00000027c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x40003)
13:28:37 executing program 1:
r0 = openat$crypto(0xffffff9c, &(0x7f0000001380), 0x0, 0x0)
ioctl$CIOCGSESSION2(r0, 0xc030636a, &(0x7f0000000000)={0x17, 0x20, 0x0, 0x0, 0x0, 0x0})
13:28:37 executing program 2:
r0 = socket(0x2, 0x10000001, 0x0)
setsockopt$inet_tcp_TCP_FUNCTION_BLK(r0, 0x6, 0x2000, &(0x7f0000000180)={'bbr\x00'}, 0x24)
sendto$inet(r0, 0x0, 0x0, 0xb857788ebbdb0884, &(0x7f0000000280)={0x10, 0x2, 0x3, @rand_addr}, 0x10)
13:28:38 executing program 0:
r0 = socket$inet6_sctp(0x1c, 0x1, 0x84)
recvmsg(r0, &(0x7f00000027c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x40003)
13:28:38 executing program 1:
r0 = openat$crypto(0xffffff9c, &(0x7f0000001380), 0x0, 0x0)
ioctl$CIOCGSESSION2(r0, 0xc030636a, &(0x7f0000000000)={0x17, 0x20, 0x0, 0x0, 0x0, 0x0})
kdb_backtrace() at kdb_backtrace+0xd3/frame 0xfffffe009bfadbb0
vpanic() at vpanic+0x2c5/frame 0xfffffe009bfadc90
panic() at panic+0xb5/frame 0xfffffe009bfadd60
__rw_assert() at __rw_assert+0x201/frame 0xfffffe009bfaddb0
sctp_free_assoc() at sctp_free_assoc+0x14cd/frame 0xfffffe009bfadf10
sctp_lower_sosend() at sctp_lower_sosend+0x42fa/frame 0xfffffe009bfae400
sctp_sosend() at sctp_sosend+0x716/frame 0xfffffe009bfae6a0
sosend() at sosend+0xfc/frame 0xfffffe009bfae710
kern_sendit() at kern_sendit+0x58d/frame 0xfffffe009bfae880
sendit() at sendit+0x2b0/frame 0xfffffe009bfae8d0
sys_sendmsg() at sys_sendmsg+0x17d/frame 0xfffffe009bfae9f0
amd64_syscall() at amd64_syscall+0x425/frame 0xfffffe009bfaebf0
fast_syscall_common() at fast_syscall_common+0xf8/frame 0xfffffe009bfaebf0
--- syscall (198, FreeBSD ELF64, nosys), rip = 0x289eea, rsp = 0x7fffdfffdf08, rbp = 0x7fffdfffdf70 ---
KDB: enter: panic
[ thread pid 913 tid 100230 ]
Stopped at kdb_enter+0x6b: movq $0,0x28e223a(%rip)
db>
db> set $lines = 0
db> set $maxwidth = 0
db> show registers
cs 0x20
ds 0x3b
es 0x3b
fs 0x13
gs 0x1b
ss 0x28
rax 0x12
rcx 0xd3110d9370fa44f
rdx 0x40001
rbx 0
rsp 0xfffffe009bfadb90
rbp 0xfffffe009bfadbb0
rsi 0
rdi 0xfffffe009e4c1568
r8 0x3
r9 0xfffffe009bfad6c8
r10 0
r11 0x7ffb2da2
r12 0xfffffe009e960740
r13 0xfffffe009bfadc01
r14 0xffffffff82c79420 .str.18
r15 0xffffffff82c79420 .str.18
rip 0xffffffff817abe7b kdb_enter+0x6b
rflags 0x46
kdb_enter+0x6b: movq $0,0x28e223a(%rip)
db> show proc
Process 913 (syz-executor.3) at 0xfffffe009e951538:
state: NORMAL
uid: 0 gids: 0, 0, 5
parent: pid 786 at 0xfffffe009e42c000
ABI: FreeBSD ELF64
flag: 0x10000080 flag2: 0
arguments: /root/syz-executor.3
reaper: 0xfffffe0053d58538 reapsubtree: 1
sigparent: 20
vmspace: 0xfffffe009e9969f0
(map 0xfffffe009e9969f0)
(map.pmap 0xfffffe009e996ab0)
(pmap 0xfffffe009e996b10)
threads: 2
100158 RunQ syz-executor.3
100230 Run CPU 1 syz-executor.3
db> ps
pid ppid pgrp uid state wmesg wchan cmd
917 783 783 0 R CPU 0 syz-executor.1
915 782 782 0 R (threaded) syz-executor.0
100127 RunQ syz-executor.0
100232 S uwait 0xfffffe009e919a00 syz-executor.0
913 786 786 0 R (threaded) syz-executor.3
100158 RunQ syz-executor.3
100230 Run CPU 1 syz-executor.3
842 827 842 0 Ss select 0xfffffe009e943ac0 dhclient
833 1 833 0 Ss select 0xfffffe009e943a40 dhclient
827 810 436 65 S select 0xfffffe009e943b40 dhclient
810 436 436 0 S wait 0xfffffe009e8e0000 sh
786 780 786 0 Rs syz-executor.3
785 780 785 0 Rs syz-executor.2
783 780 783 0 Rs syz-executor.1
782 780 782 0 Ss nanslp 0xffffffff8405af81 syz-executor.0
780 778 778 0 S (threaded) syz-fuzzer
100115 S uwait 0xfffffe005894ab00 syz-fuzzer
100116 S uwait 0xfffffe005894a400 syz-fuzzer
100117 S uwait 0xfffffe005894a500 syz-fuzzer
100118 S uwait 0xfffffe005894a600 syz-fuzzer
100119 S uwait 0xfffffe009e8aec80 syz-fuzzer
100120 S uwait 0xfffffe009e8aed80 syz-fuzzer
100121 S uwait 0xfffffe009e8aee80 syz-fuzzer
100122 S kqread 0xfffffe0058788100 syz-fuzzer
100124 S uwait 0xfffffe005876b100 syz-fuzzer
778 776 778 0 Ss pause 0xfffffe009e475b20 csh
776 694 776 0 Ss select 0xfffffe009e56aec0 sshd
760 1 760 0 Ss+ ttyin 0xfffffe0057003cb0 getty
759 1 759 0 Ss+ ttyin 0xfffffe00575f14b0 getty
758 1 758 0 Ss+ ttyin 0xfffffe00575f1cb0 getty
757 1 757 0 Ss+ ttyin 0xfffffe00583f44b0 getty
756 1 756 0 Ss+ ttyin 0xfffffe00583f4cb0 getty
755 1 755 0 Ss+ ttyin 0xfffffe00583f04b0 getty
754 1 754 0 Ss+ ttyin 0xfffffe00583f0cb0 getty
753 1 753 0 Ss+ ttyin 0xfffffe005839b4b0 getty
752 1 752 0 Ss+ ttyin 0xfffffe005839bcb0 getty
750 1 24 0 S+ piperd 0xfffffe009e4515d0 logger
749 748 24 0 S+ nanslp 0xffffffff8405af80 sleep
748 1 24 0 S+ wait 0xfffffe009e42ca70 sh
698 1 698 0 Ss nanslp 0xffffffff8405af80 cron
694 1 694 0 Ss select 0xfffffe0057405740 sshd
507 1 507 0 Ss select 0xfffffe0058afc440 syslogd
436 1 436 0 Ss wait 0xfffffe0058b29538 devd
435 1 435 65 Ss select 0xfffffe0058afc7c0 dhclient
350 1 350 0 Ss select 0xfffffe0058afc5c0 dhclient
347 1 347 0 Ss select 0xfffffe0058afc8c0 dhclient
23 0 0 0 DL syncer 0xffffffff84183360 [syncer]
22 0 0 0 DL vlruwt 0xfffffe0058763a70 [vnlru]
21 0 0 0 DL (threaded) [bufdaemon]
100085 D qsleep 0xffffffff84181060 [bufdaemon]
100088 D - 0xffffffff83411f80 [bufspacedaemon-0]
100099 D sdflush 0xfffffe00574768e8 [/ worker]
20 0 0 0 DL psleep 0xffffffff841b9580 [vmdaemon]
19 0 0 0 DL (threaded) [pagedaemon]
100083 D psleep 0xffffffff841ad0b8 [dom0]
100089 D launds 0xffffffff841ad0c4 [laundry: dom0]
100090 D umarcl 0xffffffff81eae980 [uma]
18 0 0 0 DL - 0xffffffff83e120a0 [rand_harvestq]
17 0 0 0 DL waiting 0xffffffff8487b500 [sctp_iterator]
16 0 0 0 DL pftm 0xffffffff84c80e20 [pf purge]
15 0 0 0 DL - 0xffffffff8417c280 [soaiod4]
9 0 0 0 DL - 0xffffffff8417c280 [soaiod3]
8 0 0 0 DL - 0xffffffff8417c280 [soaiod2]
7 0 0 0 DL - 0xffffffff8417c280 [soaiod1]
6 0 0 0 DL (threaded) [cam]
100048 D - 0xffffffff83c97840 [doneq0]
100049 D - 0xffffffff83c977c0 [async]
100082 D - 0xffffffff83c97640 [scanner]
14 0 0 0 DL seqstat 0xfffffe0056abac88 [sequencer 00]
5 0 0 0 DL crypto_ 0xfffffe00541b8d80 [crypto returns 1]
4 0 0 0 DL crypto_ 0xfffffe00541b8d30 [crypto returns 0]
3 0 0 0 DL crypto_ 0xffffffff841a7160 [crypto]
13 0 0 0 DL (threaded) [geom]
100039 D - 0xffffffff8402e540 [g_event]
100040 D - 0xffffffff8402e580 [g_up]
100041 D - 0xffffffff8402e5c0 [g_down]
2 0 0 0 DL (threaded) [KTLS]
100029 D - 0xfffffe00081f6d00 [thr_0]
100030 D - 0xfffffe00081f6d80 [thr_1]
100031 D - 0xffffffff8417d608 [alloc_0]
12 0 0 0 WL (threaded) [intr]
100011 I [swi6: task queue]
100012 I [swi6: Giant taskq]
100014 I [swi5: fast taskq]
100032 I [swi1: netisr 0]
100033 I [swi3: vm]
100034 I [swi4: clock (0)]
100035 I [swi4: clock (1)]
100036 I [swi1: hpts]
100037 I [swi1: hpts]
100050 I [irq24: virtio_pci0]
100051 I [irq25: virtio_pci0]
100052 I [irq26: virtio_pci0]
100053 I [irq27: virtio_pci0]
100054 I [irq28: virtio_pci1]
100055 I [irq29: virtio_pci1]
100056 I [irq30: virtio_pci1]
100057 I [irq31: virtio_pci1]
100058 I [irq32: virtio_pci1]
100063 I [irq10: virtio_pci2]
100065 I [irq1: atkbd0]
100066 I [irq12: psm0]
100067 I [swi0: uart uart++]
100075 I [swi1: pf send]
11 0 0 0 RL (threaded) [idle]
100003 CanRun [idle: cpu0]
100004 CanRun [idle: cpu1]
1 0 1 0 SLs wait 0xfffffe0053d58538 [init]
10 0 0 0 DL audit_w 0xffffffff841a8100 [audit]
0 0 0 0 DLs (threaded) [kernel]
100000 D swapin 0xffffffff8402f440 [swapper]
100005 D - 0xfffffe00081f8900 [softirq_0]
100006 D - 0xfffffe00081f8700 [softirq_1]
100007 D - 0xfffffe00081f8500 [if_io_tqg_0]
100008 D - 0xfffffe00081f8300 [if_io_tqg_1]
100009 D - 0xfffffe00081f8100 [if_config_tqg_0]
100010 D - 0xfffffe0053df4e00 [deferred_unmount ta]
100013 D - 0xfffffe0053df4800 [thread taskq]
100015 D - 0xfffffe0053df4400 [linuxkpi_irq_wq]
100016 D - 0xfffffe0053df4200 [kqueue_ctx taskq]
100017 D - 0xfffffe0053df4000 [pci_hp taskq]
100018 D - 0xfffffe0053dfed00 [aiod_kick taskq]
100019 D - 0xfffffe0053dfeb00 [inm_free taskq]
100020 D - 0xfffffe0053dfe900 [in6m_free taskq]
100021 D - 0xfffffe0053dfe700 [linuxkpi_short_wq_0]
100022 D - 0xfffffe0053dfe700 [linuxkpi_short_wq_1]
100023 D - 0xfffffe0053dfe700 [linuxkpi_short_wq_2]
100024 D - 0xfffffe0053dfe700 [linuxkpi_short_wq_3]
100025 D - 0xfffffe0053dfe200 [linuxkpi_long_wq_0]
100026 D - 0xfffffe0053dfe200 [linuxkpi_long_wq_1]
100027 D - 0xfffffe0053dfe200 [linuxkpi_long_wq_2]
100028 D - 0xfffffe0053dfe200 [linuxkpi_long_wq_3]
100038 D - 0xfffffe0053e08200 [firmware taskq]
100042 D - 0xfffffe005418fc00 [crypto_0]
100043 D - 0xfffffe005418fc00 [crypto_1]
100059 D - 0xfffffe0056eb6b00 [vtnet0 rxq 0]
100060 D - 0xfffffe0056eb6a00 [vtnet0 txq 0]
100061 D - 0xfffffe0056eb6900 [vtnet0 rxq 1]
100062 D - 0xfffffe0056eb6800 [vtnet0 txq 1]
100064 D vtbslp 0xfffffe0056ee3400 [virtio_balloon]
100068 D - 0xfffffe0057016800 [mca taskq]
100069 D - 0xffffffff82c803a1 [deadlkres]
100077 D - 0xfffffe00573faa00 [acpi_task_0]
100078 D - 0xfffffe00573faa00 [acpi_task_1]
100079 D - 0xfffffe00573faa00 [acpi_task_2]
100081 D - 0xfffffe005418f400 [CAM taskq]
916 785 785 0 Z syz-executor.2
db> show all locks
Process 917 (syz-executor.1) thread 0xfffffe009e9171e0 (100131)
exclusive sleep mutex vm reserv (vm reserv) r = 0 (0xfffff8007c7fcb80) locked @ /syzkaller/managers/main/kernel/sys/vm/vm_reserv.c:931
exclusive rw vm object (vm object) r = 0 (0xfffffe009e95b630) locked @ /syzkaller/managers/main/kernel/sys/vm/vm_fault.c:1332
shared sx vm map (user) (vm map (user)) r = 0 (0xfffffe009e996060) locked @ /syzkaller/managers/main/kernel/sys/vm/vm_map.c:4935
Process 913 (syz-executor.3) thread 0xfffffe009e960740 (100230)
exclusive sleep mutex sctp-send-tcb (tcbs) r = 0 (0xfffffe009e965ab0) locked @ /syzkaller/managers/main/kernel/sys/netinet/sctp_pcb.c:4664
exclusive sleep mutex sctp-tcb (tcb) r = 0 (0xfffffe009e965a90) locked @ /syzkaller/managers/main/kernel/sys/netinet/sctp_pcb.c:4337
db> show malloc
Type InUse MemUse Requests
pf_hash 5 11524K 5
devbuf 4217 4339K 4242
tcp_hpts 6 3201K 6
sysctloid 34389 2031K 34460
vtbuf 24 1968K 46
kobj 326 1304K 485
newblk 594 1173K 728
vfscache 3 1025K 3
inodedep 120 557K 176
pcb 29 542K 299
ufs_quota 1 512K 1
vfs_hash 1 512K 1
callout 2 512K 2
intr 4 472K 4
subproc 119 255K 979
acpica 1674 184K 55623
vnet_data 1 168K 1
vmem 3 146K 4
tidhash 3 141K 3
linker 355 140K 383
pagedep 20 133K 114
tfo_ccache 1 128K 1
filedesc 16 121K 233
DEVFS1 108 108K 125
sem 4 106K 4
bus 986 80K 3488
mtx_pool 2 72K 2
syncache 1 68K 1
acpitask 1 64K 1
ddb_capture 1 64K 1
module 509 64K 509
kdtrace 198 39K 1152
umtx 308 39K 308
BPF 22 36K 22
temp 35 33K 1884
hostcache 1 32K 1
shm 1 32K 1
DEVFS3 127 32K 137
msg 4 30K 4
gtaskqueue 18 26K 18
dirrem 86 22K 110
kbdmux 6 22K 6
DEVFS_RULE 56 20K 56
ifaddr 67 19K 69
ufs_mount 4 17K 5
proc 3 17K 3
routetbl 131 17K 415
tty 16 16K 16
ithread 99 16K 99
bus-sc 34 15K 1693
lltable 45 14K 45
KTRACE 100 13K 100
ifnet 7 13K 7
ether_multi 152 13K 162
kenv 95 12K 95
eventhandler 133 12K 133
freefile 86 11K 104
CAM queue 5 11K 1528
GEOM 61 10K 490
rman 84 10K 425
in6_multi 65 9K 65
bmsafemap 2 9K 144
UART 12 9K 12
devstat 4 9K 4
ksem 1 8K 1
rpc 2 8K 2
shmfd 1 8K 1
pfs_vncache 1 8K 1
pfs_nodes 20 8K 20
audit_evclass 237 8K 295
taskqueue 63 7K 63
sglist 5 7K 5
CAM DEV 3 6K 510
cred 24 6K 201
kqueue 60 6K 922
plimit 22 6K 348
ufs_dirhash 24 5K 24
DEVFSP 74 5K 85
UMA 270 5K 270
pf_ifnet 10 5K 19
sctp_timw 17 5K 17
vt 11 5K 11
memdesc 1 4K 1
MCA 32 4K 32
evdev 4 4K 4
kcovinfo 64 4K 68
diradd 31 4K 143
pwddesc 57 4K 918
mkdir 28 4K 204
acpisem 28 4K 28
hhook 15 4K 17
session 26 4K 35
terminal 11 3K 11
proc-args 47 3K 555
indirdep 10 3K 10
uidinfo 3 3K 7
local_apic 1 2K 1
io_apic 1 2K 1
fpukern_ctx 2 2K 2
newdirblk 16 2K 102
ipsec-saq 2 2K 2
lockf 19 2K 29
selfd 31 2K 10857
ip6ndp 12 2K 13
Unitno 30 2K 47
sctp_ifa 13 2K 14
CAM XPT 22 2K 543
in_multi 6 2K 8
ipsecpolicy 2 2K 2
acpidev 20 2K 20
select 10 2K 31
sctp_atcl 3 2K 115
msi 9 2K 9
clone 9 2K 9
tun 7 2K 7
sctp_stro 1 1K 24
softdep 1 1K 1
sahead 1 1K 1
secasvar 1 1K 1
nhops 6 1K 8
vnodemarker 2 1K 12
NFSD session 1 1K 1
CAM periph 4 1K 271
ipsec 3 1K 3
sctp_ifn 6 1K 14
mld 6 1K 6
igmp 6 1K 6
toponodes 6 1K 6
isadev 6 1K 6
mount 16 1K 89
pci_link 10 1K 10
crypto 4 1K 4
encap_export_host 12 1K 12
pfil 4 1K 4
cdev 2 1K 2
inpcbpolicy 13 1K 200
osd 8 1K 56
chacha20random 1 1K 1
NFSD lckfile 1 1K 1
NFSD V4client 1 1K 1
DEVFS 9 1K 10
vnodes 1 1K 1
CAM SIM 2 1K 2
ktls 1 1K 1
procdesc 2 1K 8
feeder 7 1K 7
tcpfunc 3 1K 3
loginclass 3 1K 6
prison 6 1K 6
lkpikmalloc 5 1K 6
sctp_atky 4 1K 139
aesni_data 2 1K 2
soname 5 1K 3570
nexusdev 8 1K 8
apmdev 1 1K 1
atkbddev 2 1K 2
CAM dev queue 2 1K 2
xform 2 1K 45
CAM I/O Scheduler 1 1K 1
CAM path 4 1K 1034
pmchooks 1 1K 1
filecaps 5 1K 72
sctp_vrf 1 1K 1
vnet 1 1K 1
entropy 2 1K 38
acpiintr 1 1K 1
pmc 1 1K 1
sctp_athm 3 1K 115
sctp_map 2 1K 48
cpus 2 1K 2
vnet_data_free 1 1K 1
Per-cpu 1 1K 1
freework 1 1K 108
iov 1 1K 14062
p1003.1b 1 1K 1
pf_table 0 0K 0
pf_rule 0 0K 0
pf_altq 0 0K 0
pf_osfp 0 0K 0
pf_temp 0 0K 0
mqdata 0 0K 0
vegas data 0 0K 0
tcp_do 0 0K 0
tcp_fsb 0 0K 0
chd data 0 0K 0
htcp data 0 0K 0
dctcp data 0 0K 0
cubic data 0 0K 0
cdg data 0 0K 0
sctp_mcore 0 0K 0
sctp_socko 0 0K 83
sctp_iter 0 0K 12
sctp_mvrf 0 0K 0
sctp_cpal 0 0K 0
sctp_cmsg 0 0K 0
sctp_stre 0 0K 0
sctp_athi 0 0K 0
sctp_a_it 0 0K 12
sctp_aadr 0 0K 0
sctp_stri 0 0K 0
NFSCL diroff 0 0K 0
NEWdirectio 0 0K 0
madt_table 0 0K 2
smartpqi 0 0K 0
NEWNFSnode 0 0K 0
NFSCL lck 0 0K 0
NFSCL lckown 0 0K 0
NFSCL client 0 0K 0
NFSCL deleg 0 0K 0
NFSCL open 0 0K 0
NFSCL owner 0 0K 0
NFS fh 0 0K 0
iavf 0 0K 0
ixl 0 0K 0
NFS req 0 0K 0
NFSD usrgroup 0 0K 0
NFSD string 0 0K 0
NFSD V4lock 0 0K 0
NFSD V4state 0 0K 0
ice-resmgr 0 0K 0
ice-osdep 0 0K 0
ice 0 0K 0
axgbe 0 0K 0
NFSD srvcache 0 0K 0
msdosfs_fat 0 0K 0
msdosfs_mount 0 0K 0
msdosfs_node 0 0K 0
DEVFS4 0 0K 0
xen_intr 0 0K 0
DEVFS2 0 0K 0
gntdev 0 0K 0
xen_hvm 0 0K 0
legacydrv 0 0K 0
qpidrv 0 0K 0
privcmd_dev 0 0K 0
evtchn_dev 0 0K 0
dmar_idpgtbl 0 0K 0
dmar_dom 0 0K 0
dmar_ctx 0 0K 0
xenstore 0 0K 0
ciss_data 0 0K 0
BACKLIGHT 0 0K 0
isci 0 0K 0
iommu_dmamap 0 0K 0
xnb 0 0K 0
hyperv_socket 0 0K 0
bxe_ilt 0 0K 0
xbbd 0 0K 0
xenbus 0 0K 0
xbd 0 0K 0
Balloon 0 0K 0
sysmouse 0 0K 0
vm_fictitious 0 0K 0
vtfont 0 0K 0
ath_hal 0 0K 0
athdev 0 0K 0
ata_pci 0 0K 0
ata_dma 0 0K 0
ata_generic 0 0K 0
amr 0 0K 0
pvscsi 0 0K 0
scsi_da 0 0K 69
UMAHash 0 0K 0
ata_da 0 0K 0
vm_pgdata 0 0K 0
jblocks 0 0K 0
savedino 0 0K 17
sentinel 0 0K 0
jfsync 0 0K 0
jtrunc 0 0K 0
sbdep 0 0K 4
jsegdep 0 0K 0
jseg 0 0K 0
jfreefrag 0 0K 0
jfreeblk 0 0K 0
jnewblk 0 0K 0
jmvref 0 0K 0
jremref 0 0K 0
jaddref 0 0K 0
freedep 0 0K 0
freeblks 0 0K 107
freefrag 0 0K 2
allocindir 0 0K 0
allocdirect 0 0K 0
ufs_trim 0 0K 0
mactemp 0 0K 0
audit_trigger 0 0K 0
audit_pipe_presel 0 0K 0
audit_pipeent 0 0K 0
audit_pipe 0 0K 0
audit_evname 0 0K 0
audit_bsm 0 0K 0
audit_gidset 0 0K 0
audit_text 0 0K 0
audit_path 0 0K 0
audit_data 0 0K 0
audit_cred 0 0K 0
scsi_ch 0 0K 0
scsi_cd 0 0K 0
AHCI driver 0 0K 0
USBdev 0 0K 0
USB 0 0K 0
agp 0 0K 0
nvme_da 0 0K 0
ktls_ocf 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5E_TLS 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EN 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5DUMP 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
seq_file 0 0K 0
radix 0 0K 0
idr 0 0K 0
lkpifw 0 0K 0
NLM 0 0K 0
ipsec-spdcache 0 0K 0
ipsec-reg 0 0K 0
ipsec-misc 0 0K 0
ipsecrequest 0 0K 0
ip6opt 0 0K 3
ip6_msource 0 0K 0
ip6_moptions 0 0K 0
in6_mfilter 0 0K 0
frag6 0 0K 0
tcplog 0 0K 0
tcp_hwpace 0 0K 0
acpipwr 0 0K 0
acpi_perf 0 0K 0
LRO 0 0K 0
newreno data 0 0K 0
ip_msource 0 0K 0
ip_moptions 0 0K 0
in_mfilter 0 0K 0
ipid 0 0K 0
80211scan 0 0K 0
80211ratectl 0 0K 0
80211power 0 0K 0
80211nodeie 0 0K 0
80211node 0 0K 0
80211mesh_gt 0 0K 0
80211mesh_rt 0 0K 0
80211perr 0 0K 0
80211prep 0 0K 0
80211preq 0 0K 0
80211dfs 0 0K 0
80211crypto 0 0K 0
80211vap 0 0K 0
iflib 0 0K 0
vlan 0 0K 0
gif 0 0K 0
ifdescr 0 0K 0
zlib 0 0K 0
fadvise 0 0K 0
VN POLL 0 0K 0
twsbuf 0 0K 0
statfs 0 0K 271
namei_tracker 0 0K 0
export_host 0 0K 0
cl_savebuf 0 0K 2
twe_commands 0 0K 0
twa_commands 0 0K 0
tcp_log_dev 0 0K 0
midi buffers 0 0K 0
mixer 0 0K 0
ac97 0 0K 0
hdacc 0 0K 0
hdac 0 0K 0
hdaa 0 0K 0
acpicmbat 0 0K 0
SIIS driver 0 0K 0
CAM CCB 0 0K 523
PUC 0 0K 0
ppbusdev 0 0K 0
agtiapi_MemAlloc malloc 0 0K 0
biobuf 0 0K 0
aios 0 0K 0
lio 0 0K 0
acl 0 0K 0
osti_cacheable 0 0K 0
mbuf_tag 0 0K 97
tempbuff 0 0K 0
tempbuff 0 0K 0
ag_tgt_map_t malloc 0 0K 0
ag_slr_map_t malloc 0 0K 0
lDevFlags * malloc 0 0K 0
tiDeviceHandle_t * malloc 0 0K 0
ag_portal_data_t malloc 0 0K 0
ag_device_t malloc 0 0K 0
STLock malloc 0 0K 0
CCB List 0 0K 0
sr_iov 0 0K 0
OCS 0 0K 0
OCS 0 0K 0
nvme 0 0K 0
nvd 0 0K 0
netmap 0 0K 0
mwldev 0 0K 0
MVS driver 0 0K 0
CAM ccb queue 0 0K 0
mrsasbuf 0 0K 0
mpt_user 0 0K 0
mps_user 0 0K 0
accf 0 0K 0
pts 0 0K 0
ioctlops 0 0K 95
eventfd 0 0K 0
Witness 0 0K 0
stack 0 0K 0
MPSSAS 0 0K 0
mps 0 0K 0
mpr_user 0 0K 0
MPRSAS 0 0K 0
mpr 0 0K 0
mfibuf 0 0K 0
sbuf 0 0K 288
md_sectors 0 0K 0
firmware 0 0K 0
compressor 0 0K 0
md_disk 0 0K 0
SWAP 0 0K 0
malodev 0 0K 0
LED 0 0K 0
sysctltmp 0 0K 675
sysctl 0 0K 3
ekcd 0 0K 0
dumper 0 0K 0
sendfile 0 0K 0
rctl 0 0K 0
ix_sriov 0 0K 0
aacraidcam 0 0K 0
aacraid_buf 0 0K 0
ix 0 0K 0
ipsbuf 0 0K 0
cache 0 0K 0
iirbuf 0 0K 0
prison_racct 0 0K 0
Fail Points 0 0K 0
sigio 0 0K 1
filedesc_to_leader 0 0K 0
pwd 0 0K 0
tty console 0 0K 0
aaccam 0 0K 0
aacbuf 0 0K 0
zstd 0 0K 0
XZ_DEC 0 0K 0
nvlist 0 0K 0
SCSI ENC 0 0K 0
SCSI sa 0 0K 0
scsi_pass 0 0K 0
isofs_node 0 0K 0
isofs_mount 0 0K 0
tr_raid5_data 0 0K 0
tr_raid1e_data 0 0K 0
tr_raid1_data 0 0K 0
tr_raid0_data 0 0K 0
tr_concat_data 0 0K 0
md_sii_data 0 0K 0
md_promise_data 0 0K 0
md_nvidia_data 0 0K 0
md_jmicron_data 0 0K 0
md_intel_data 0 0K 0
md_ddf_data 0 0K 0
raid_data 0 0K 72
geom_flashmap 0 0K 0
tmpfs dir 0 0K 0
tmpfs name 0 0K 0
tmpfs mount 0 0K 0
NFS FHA 0 0K 0
newnfsmnt 0 0K 0
newnfsclient_req 0 0K 0
NFSCL layrecall 0 0K 0
NFSCL session 0 0K 0
NFSCL sockreq 0 0K 0
NFSCL devinfo 0 0K 0
NFSCL flayout 0 0K 0
NFSCL layout 0 0K 0
NFSD rollback 0 0K 0
db> show uma
Zone Size Used Free Requests Sleeps Bucket Total Mem XFree
mbuf_jumbo_page 4096 8320 714 14045 0 254 37003264 0
pbuf 2624 0 973 0 0 2 2553152 0
mbuf 256 8671 749 39129 0 254 2411520 0
BUF TRIE 144 184 11576 513 0 62 1693440 0
malloc-384 384 4288 12 4345 0 30 1651200 0
malloc-4096 4096 386 2 1407 0 2 1589248 0
malloc-128 128 11572 22 11645 0 126 1484032 0
UMA Slabs 0 112 9955 14 9955 0 126 1116528 0
vmem btag 56 15586 85 15586 0 254 877576 0
RADIX NODE 144 5864 207 28109 0 62 874224 0
FFS inode 1160 508 24 612 0 8 617120 0
malloc-65536 65536 6 0 6 0 1 393216 0
lkpimm 168 1 2327 1 0 62 391104 0
lkpicurr 168 2 2326 2 0 62 391104 0
ertt_txseginfo 40 1 9190 22493 0 254 367640 0
256 Bucket 2048 151 5 10789 0 8 319488 0
VM OBJECT 264 1133 67 14835 0 30 316800 0
mbuf_cluster 2048 150 2 150 0 254 311296 0
malloc-64 64 4479 57 6403 0 254 290304 0
THREAD 1808 139 15 233 0 8 278432 0
VNODE 448 544 68 650 0 30 274176 0
malloc-256 256 952 38 2093 0 62 253440 0
malloc-16 16 14227 273 15561 0 254 232000 0
DEVCTL 1024 20 200 151 0 0 225280 0
malloc-65536 65536 1 2 59 0 1 196608 0
malloc-65536 65536 1 2 137 0 1 196608 0
malloc-16384 16384 7 5 114 0 1 196608 0
UMA Zones 768 242 2 242 0 16 187392 0
malloc-32 32 5598 72 6389 0 254 181440 0
malloc-128 128 1229 42 26167 0 126 162688 0
MAP ENTRY 96 1360 278 46193 0 126 157248 0
malloc-1024 1024 133 7 150 0 16 143360 0
malloc-128 128 1042 43 5314 0 126 138880 0
FFS2 dinode 256 508 17 612 0 62 134400 0
malloc-65536 65536 0 2 8 0 1 131072 0
S VFS Cache 104 1001 169 1123 0 126 121680 0
ksiginfo 112 45 999 163 0 126 116928 0
tcp_bbr_map 128 0 868 2081 0 126 111104 0
VMSPACE 2544 34 8 896 0 4 106848 0
malloc-32768 32768 1 2 131 0 1 98304 0
malloc-2048 2048 12 36 576 0 8 98304 0
UMA Kegs 384 227 6 227 0 30 89472 0
clpbuf 2624 0 32 21 0 16 83968 0
filedesc0 1072 57 20 918 0 8 82544 0
malloc-8192 8192 9 1 110 0 1 81920 0
PROC 1336 57 3 917 0 8 80160 0
malloc-8192 8192 8 1 10 0 1 73728 0
g_bio 408 0 170 4809 0 30 69360 0
128 Bucket 1024 47 20 678 0 16 68608 0
malloc-65536 65536 1 0 1 0 1 65536 0
malloc-4096 4096 14 1 27 0 2 61440 0
malloc-8192 8192 4 3 32 0 1 57344 0
malloc-16384 16384 3 0 3 0 1 49152 0
malloc-16384 16384 1 2 161 0 1 49152 0
malloc-2048 2048 2 22 575 0 8 49152 0
malloc-2048 2048 10 14 99 0 8 49152 0
malloc-1024 1024 10 34 1561 0 16 45056 0
malloc-64 64 517 176 1623 0 254 44352 0
socket 960 27 17 1514 0 254 42240 0
malloc-256 256 143 22 428 0 62 42240 0
32 Bucket 256 49 116 5102 0 62 42240 0
DIRHASH 1024 34 6 34 0 16 40960 0
pcpu-8 8 4660 460 4816 0 254 40960 0
mbuf_packet 256 19 131 540 0 254 38400 0
NAMEI 1024 0 36 13483 0 16 36864 0
malloc-4096 4096 9 0 9 0 2 36864 0
malloc-4096 4096 8 1 10 0 2 36864 0
64 Bucket 512 59 13 2069 0 30 36864 0
malloc-128 128 61 218 323 0 126 35712 0
malloc-32768 32768 1 0 1 0 1 32768 0
malloc-32768 32768 1 0 1 0 1 32768 0
malloc-16384 16384 2 0 17 0 1 32768 0
pcpu-64 64 487 25 487 0 254 32768 0
da_ccb 544 0 56 1319 0 16 30464 0
malloc-64 64 101 340 1515 0 254 28224 0
malloc-384 384 64 6 109 0 30 26880 0
TURNSTILE 136 155 34 155 0 62 25704 0
malloc-4096 4096 4 2 7 0 2 24576 0
ttyinq 160 135 15 300 0 62 24000 0
ttyoutq 256 72 18 160 0 62 23040 0
malloc-384 384 35 25 147 0 30 23040 0
malloc-384 384 54 6 56 0 30 23040 0
malloc-256 256 68 22 439 0 62 23040 0
malloc-256 256 49 41 531 0 62 23040 0
sctp_ep 1272 2 16 91 0 254 22896 0
sctp_asoc 2288 1 9 24 0 254 22880 0
pipe 744 21 9 304 0 16 22320 0
malloc-4096 4096 3 2 906 0 2 20480 0
malloc-2048 2048 2 8 26 0 8 20480 0
malloc-64 64 224 91 318 0 254 20160 0
Files 80 194 56 7320 0 126 20000 0
malloc-128 128 108 47 246 0 126 19840 0
Mountpoints 2752 2 5 2 0 4 19264 0
malloc-256 256 67 8 386 0 62 19200 0
malloc-256 256 46 29 113 0 62 19200 0
SLEEPQUEUE 88 155 37 155 0 126 16896 0
malloc-16384 16384 1 0 1 0 1 16384 0
malloc-16384 16384 1 0 1 0 1 16384 0
malloc-1024 1024 8 8 12 0 16 16384 0
sctp_raddr 736 1 21 24 0 254 16192 0
malloc-64 64 168 84 204 0 254 16128 0
malloc-32 32 89 415 655 0 254 16128 0
16 Bucket 144 47 65 311 0 62 16128 0
tcp_inpcb 496 19 13 45 0 254 15872 0
malloc-128 128 116 8 282 0 126 15872 0
malloc-384 384 22 18 362 0 30 15360 0
malloc-256 256 25 35 185 0 62 15360 0
tcpcb 1080 4 10 45 0 254 15120 0
tcp_bbr_pcb 832 0 18 34 0 16 14976 0
malloc-2048 2048 3 3 194 0 8 12288 0
malloc-2048 2048 2 4 4 0 8 12288 0
malloc-1024 1024 8 4 185 0 16 12288 0
malloc-1024 1024 7 5 7 0 16 12288 0
malloc-64 64 76 113 24638 0 254 12096 0
malloc-32 32 88 290 4141 0 254 12096 0
KNOTE 160 28 47 1378 0 62 12000 0
8 Bucket 80 43 107 730 0 126 12000 0
udp_inpcb 496 6 18 150 0 254 11904 0
malloc-128 128 60 33 342 0 126 11904 0
kenv 258 15 30 1033 0 30 11610 0
routing nhops 256 27 18 34 0 62 11520 0
malloc-8192 8192 1 0 1 0 1 8192 0
malloc-8192 8192 1 0 1 0 1 8192 0
malloc-8192 8192 1 0 1 0 1 8192 0
malloc-8192 8192 1 0 1 0 1 8192 0
malloc-2048 2048 3 1 3 0 8 8192 0
malloc-2048 2048 3 1 3 0 8 8192 0
malloc-1024 1024 2 6 11 0 16 8192 0
malloc-1024 1024 2 6 25 0 16 8192 0
malloc-512 512 6 10 6 0 30 8192 0
malloc-512 512 0 16 131 0 30 8192 0
malloc-512 512 5 11 74 0 30 8192 0
malloc-512 512 8 8 8 0 30 8192 0
rtentry 176 30 16 34 0 62 8096 0
PGRP 88 26 66 35 0 126 8096 0
rl_entry 40 35 167 35 0 254 8080 0
sctp_laddr 48 0 168 114 0 254 8064 0
udpcb 32 6 246 150 0 254 8064 0
ertt 72 4 108 45 0 126 8064 0
PWD 32 18 234 191 0 254 8064 0
malloc-64 64 54 72 370 0 254 8064 0
malloc-64 64 60 66 93 0 254 8064 0
malloc-32 32 129 123 284 0 254 8064 0
malloc-32 32 56 196 72 0 254 8064 0
malloc-32 32 38 214 188 0 254 8064 0
malloc-32 32 51 201 222 0 254 8064 0
malloc-32 32 17 235 30 0 254 8064 0
4 Bucket 48 5 163 55 0 254 8064 0
2 Bucket 32 51 201 533 0 254 8064 0
vtnet_tx_hdr 24 0 334 1602 0 254 8016 0
malloc-16 16 0 500 7 0 254 8000 0
malloc-16 16 26 474 108 0 254 8000 0
malloc-16 16 57 443 368 0 254 8000 0
malloc-16 16 17 483 190 0 254 8000 0
malloc-16 16 39 461 176 0 254 8000 0
malloc-16 16 287 213 25541 0 254 8000 0
malloc-16 16 4 496 89 0 254 8000 0
ripcb 496 2 14 5 0 254 7936 0
malloc-128 128 37 25 54 0 126 7936 0
unpcb 256 11 19 1197 0 254 7680 0
malloc-256 256 13 17 524 0 62 7680 0
FPU_save_area 832 1 8 1 0 16 7488 0
cpuset 104 8 54 8 0 126 6448 0
epoch_record pcpu 256 4 12 4 0 62 4096 0
malloc-4096 4096 0 1 1 0 2 4096 0
malloc-4096 4096 0 1 3 0 2 4096 0
malloc-1024 1024 1 3 1 0 16 4096 0
malloc-512 512 0 8 1 0 30 4096 0
malloc-512 512 5 3 5 0 30 4096 0
malloc-512 512 0 8 1 0 30 4096 0
pcpu-16 16 7 249 7 0 254 4096 0
hostcache 64 1 62 1 0 254 4032 0
syncache 168 0 24 4 0 254 4032 0
UMA Slabs 1 176 9 13 9 0 62 3872 0
malloc-384 384 0 10 1 0 30 3840 0
malloc-384 384 2 8 2 0 30 3840 0
malloc-384 384 1 9 1 0 30 3840 0
mqnode 416 3 6 3 0 30 3744 0
KMAP ENTRY 96 12 27 14 0 0 3744 0
vmem 1856 1 1 1 0 8 3712 0
SMR CPU 32 3 60 3 0 254 2016 0
SMR SHARED 24 3 60 3 0 254 1512 0
FFS1 dinode 128 0 0 0 0 126 0 0
ada_ccb 272 0 0 0 0 30 0 0
swblk 136 0 0 0 0 62 0 0
swpctrie 144 0 0 0 0 62 0 0
cdg_qdiffsample 16 0 0 0 0 254 0 0
sctp_asconf_ack 48 0 0 0 0 254 0 0
sctp_asconf 40 0 0 0 0 254 0 0
sctp_stream_msg_out 112 0 0 0 0 254 0 0
sctp_readq 152 0 0 0 0 254 0 0
sctp_chunk 152 0 0 0 0 254 0 0
pf state scrubs 40 0 0 0 0 254 0 0
pf frag entries 40 0 0 0 0 254 0 0
pf frags 248 0 0 0 0 62 0 0
pf table entries 160 0 0 0 0 62 0 0
pf table entry counters 64 0 0 0 0 254 0 0
pf source nodes 136 0 0 0 0 254 0 0
pf state keys 88 0 0 0 0 126 0 0
pf states 312 0 0 0 0 254 0 0
pf tags 104 0 0 0 0 126 0 0
pf mtags 48 0 0 0 0 254 0 0
tcp_rack_pcb 832 0 0 0 0 16 0 0
tcp_rack_map 112 0 0 0 0 126 0 0
udplite_inpcb 496 0 0 0 0 254 0 0
tcp_log_node 120 0 0 0 0 126 0 0
tcp_log_bucket 176 0 0 0 0 62 0 0
tcp_log 416 0 0 0 0 254 0 0
tcpreass 48 0 0 0 0 254 0 0
tfo_ccache_entries 80 0 0 0 0 126 0 0
tfo 4 0 0 0 0 254 0 0
sackhole 32 0 0 0 0 254 0 0
tcptw 88 0 0 0 0 254 0 0
ipq 56 0 0 0 0 254 0 0
IPsec SA lft_c 16 0 0 0 0 254 0 0
itimer 352 0 0 0 0 30 0 0
AIOLIO 272 0 0 0 0 30 0 0
AIOCB 552 0 0 0 0 16 0 0
AIOP 32 0 0 0 0 254 0 0
AIO 208 0 0 0 0 62 0 0
TMPFS node 224 0 0 0 0 62 0 0
NCLNODE 592 0 0 0 0 16 0 0
mqnotifier 216 0 0 0 0 62 0 0
mvdata 64 0 0 0 0 254 0 0
mqueue 248 0 0 0 0 62 0 0
LTS VFS Cache 360 0 0 0 0 30 0 0
L VFS Cache 320 0 0 0 0 30 0 0
STS VFS Cache 144 0 0 0 0 62 0 0
cryptop 280 0 0 0 0 30 0 0
linux_dma_object 24 0 0 0 0 254 0 0
linux_dma_pctrie 144 0 0 0 0 62 0 0
IOMMU_MAP_ENTRY 120 0 0 0 0 126 0 0
ktls_session 192 0 0 0 0 62 0 0
mbuf_jumbo_16k 16384 0 0 0 0 254 0 0
mbuf_jumbo_9k 9216 0 0 0 0 254 0 0
audit_record 1280 0 0 0 0 8 0 0
domainset 40 0 0 0
---
This report is generated by a bot. It may contain errors.
See https://goo.gl/tpsmEJ for more information about syzbot.
syzbot engineers can be reached at syzk...@googlegroups.com.
syzbot will keep track of this issue. See:
https://goo.gl/tpsmEJ#status for how to communicate with syzbot.
syzbot
Sep 9, 2021, 1:45:28 PM9/9/21
to syzkaller-f...@googlegroups.com
syzbot has found a reproducer for the following issue on:
HEAD commit: 395db99f32bc Export _mmap and __sys_mmap from libc.so
git tree: https://github.com/freebsd/freebsd-src.git main
console output: https://syzkaller.appspot.com/x/log.txt?x=143f3b0d300000
dashboard link: https://syzkaller.appspot.com/bug?extid=7fe26e26911344e7211d
syz repro: https://syzkaller.appspot.com/x/repro.syz?x=137f836d300000
C reproducer: https://syzkaller.appspot.com/x/repro.c?x=1516508b300000
IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+7fe26e...@syzkaller.appspotmail.com
panic: Lock sctp-info not exclusively locked @ /syzkaller/managers/main/kernel/sys/netinet/sctp_pcb.c:4542
cpuid = 1
time = 1631209387
KDB: stack backtrace:
db_trace_self_wrapper() at db_trace_self_wrapper+0xc7/frame 0xfffffe0053be3a50
kdb_backtrace() at kdb_backtrace+0xd3/frame 0xfffffe0053be3bb0
vpanic() at vpanic+0x2c5/frame 0xfffffe0053be3c90
panic() at panic+0xb5/frame 0xfffffe0053be3d60
__rw_assert() at __rw_assert+0x201/frame 0xfffffe0053be3db0
sctp_free_assoc() at sctp_free_assoc+0x14cd/frame 0xfffffe0053be3f10
sctp_lower_sosend() at sctp_lower_sosend+0x42fa/frame 0xfffffe0053be4400
sctp_sosend() at sctp_sosend+0x716/frame 0xfffffe0053be46a0
sosend() at sosend+0xfc/frame 0xfffffe0053be4710
kern_sendit() at kern_sendit+0x58d/frame 0xfffffe0053be4880
sendit() at sendit+0x2b0/frame 0xfffffe0053be48d0
sys_sendmsg() at sys_sendmsg+0x17d/frame 0xfffffe0053be49f0
amd64_syscall() at amd64_syscall+0x425/frame 0xfffffe0053be4bf0
fast_syscall_common() at fast_syscall_common+0xf8/frame 0xfffffe0053be4bf0
--- syscall (0, FreeBSD ELF64, nosys), rip = 0x2b3c8a, rsp = 0x7fffffffea68, rbp = 0x7fffffffea80 ---
KDB: enter: panic
[ thread pid 785 tid 100102 ]
rdx 0xdffff7c000000000
rbx 0
rsp 0xfffffe0053be3b90
rbp 0xfffffe0053be3bb0
rsi 0x1
rdi 0xffffffff8408b740 cov_trace_pc
r8 0x3
r9 0xfffffe0053be36c8
r10 0
r11 0xc279fede
r12 0xfffffe005893c560
r13 0xfffffe0053be3c01
ABI: FreeBSD ELF64
flag: 0x10004000 flag2: 0
arguments: ./syz-executor068217322
(map 0xfffffe009e4d09f0)
(map.pmap 0xfffffe009e4d0ab0)
(pmap 0xfffffe009e4d0b10)
threads: 1
100102 Run CPU 1 syz-executor0682173
783 781 783 0 Ss pause 0xfffffe0058b2ab20 csh
781 694 781 0 Ss select 0xfffffe009e45c7c0 sshd
758 1 758 0 Ss+ ttyin 0xfffffe00575f8cb0 getty
757 1 757 0 Ss+ ttyin 0xfffffe00583ee4b0 getty
756 1 756 0 Ss+ ttyin 0xfffffe00583eecb0 getty
755 1 755 0 Ss+ ttyin 0xfffffe00583ea4b0 getty
754 1 754 0 Ss+ ttyin 0xfffffe00583eacb0 getty
753 1 753 0 Ss+ ttyin 0xfffffe00583954b0 getty
752 1 752 0 Ss+ ttyin 0xfffffe0058395cb0 getty
750 1 24 0 S+ piperd 0xfffffe009e4a6ba0 logger
698 1 698 0 Ss nanslp 0xffffffff8405af81 cron
694 1 694 0 Ss select 0xfffffe0057419b40 sshd
507 1 507 0 Ss select 0xfffffe0058af0240 syslogd
436 1 436 0 Ss select 0xfffffe0057419d40 devd
435 1 435 65 Ss select 0xfffffe0058af03c0 dhclient
350 1 350 0 Ss select 0xfffffe0057419cc0 dhclient
347 1 347 0 Ss select 0xfffffe0058af0440 dhclient
100003 Run CPU 0 [idle: cpu0]
100073 D - 0xffffffff82c803a0 [deadlkres]
100077 D - 0xfffffe00573ee600 [acpi_task_0]
100078 D - 0xfffffe00573ee600 [acpi_task_1]
100079 D - 0xfffffe00573ee600 [acpi_task_2]
Process 785 (syz-executor0682173) thread 0xfffffe005893c560 (100102)
exclusive sleep mutex sctp-send-tcb (tcbs) r = 0 (0xfffffe009e9b9c90) locked @ /syzkaller/managers/main/kernel/sys/netinet/sctp_pcb.c:4664
exclusive sleep mutex sctp-tcb (tcb) r = 0 (0xfffffe009e9b9c70) locked @ /syzkaller/managers/main/kernel/sys/netinet/sctp_pcb.c:4337
vfscache 3 1025K 3
pcb 25 539K 79
inodedep 50 531K 71
tfo_ccache 1 128K 1
sem 4 106K 4
DEVFS1 104 104K 113
temp 18 33K 1616
umtx 242 31K 242
routetbl 50 11K 176
ufs_dirhash 24 5K 24
UMA 270 5K 270
dirrem 17 5K 28
plimit 17 5K 322
vt 11 5K 11
ifnet 3 5K 3
diradd 25 4K 36
lltable 11 4K 11
pf_ifnet 5 3K 6
in6_multi 25 3K 25
kqueue 46 3K 788
pwddesc 46 3K 786
terminal 11 3K 11
session 20 3K 31
uidinfo 3 3K 8
selfd 27 2K 11020
proc-args 39 2K 488
Unitno 27 2K 39
sctp_atcl 2 1K 2
ipsec 3 1K 3
indirdep 3 1K 3
nhops 6 1K 6
crypto 4 1K 4
ip6ndp 4 1K 5
encap_export_host 12 1K 12
newdirblk 4 1K 8
mkdir 4 1K 16
in_multi 2 1K 4
osd 7 1K 18
inpcbpolicy 10 1K 137
sctp_ifn 2 1K 6
DEVFS 9 1K 10
mld 2 1K 2
igmp 2 1K 2
soname 5 1K 3472
sctp_atky 3 1K 3
pmchooks 1 1K 1
filecaps 4 1K 66
tun 3 1K 3
sctp_map 2 1K 2
iov 1 1K 13646
sctp_socko 0 0K 0
sctp_iter 0 0K 4
sctp_mvrf 0 0K 0
sctp_timw 0 0K 0
savedino 0 0K 15
freeblks 0 0K 25
freefrag 0 0K 1
statfs 0 0K 196
mbuf_jumbo_page 4096 8320 990 14688 0 254 38133760 0
pbuf 2624 0 989 0 0 2 2595136 0
mbuf 256 8579 991 17814 0 254 2449920 0
BUF TRIE 144 184 11576 500 0 62 1693440 0
malloc-384 384 4218 12 4240 0 30 1624320 0
malloc-4096 4096 373 3 1272 0 2 1540096 0
malloc-128 128 11557 6 11624 0 126 1480064 0
UMA Slabs 0 112 10097 16 10097 0 126 1132656 0
vmem btag 56 15354 29 15354 0 254 861448 0
FFS inode 1160 499 12 508 0 8 592760 0
RADIX NODE 144 3028 187 21148 0 62 462960 0
malloc-256 256 1045 5 1848 0 62 268800 0
256 Bucket 2048 112 12 10825 0 8 253952 0
VNODE 448 529 20 540 0 30 245952 0
VM OBJECT 264 891 39 12691 0 30 245520 0
malloc-16 16 14227 273 15515 0 254 232000 0
DEVCTL 1024 0 220 126 0 0 225280 0
THREAD 1808 120 1 120 0 8 218768 0
malloc-65536 65536 1 2 47 0 1 196608 0
malloc-1024 1024 129 3 138 0 16 135168 0
FFS2 dinode 256 499 11 508 0 62 130560 0
malloc-128 128 976 16 5180 0 126 126976 0
ksiginfo 112 37 1007 52 0 126 116928 0
MAP ENTRY 96 836 340 38045 0 126 112896 0
S VFS Cache 104 966 87 1005 0 126 109512 0
PROC 1336 45 9 785 0 8 72144 0
VMSPACE 2544 23 4 764 0 4 68688 0
mbuf_cluster 2048 30 2 30 0 254 65536 0
filedesc0 1072 46 10 786 0 8 60032 0
malloc-2048 2048 7 19 551 0 8 53248 0
malloc-64 64 517 176 1620 0 254 44352 0
32 Bucket 256 46 119 3426 0 62 42240 0
clpbuf 2624 0 16 22 0 16 41984 0
64 Bucket 512 57 15 1266 0 30 36864 0
socket 960 19 9 1334 0 254 26880 0
da_ccb 544 0 49 1236 0 16 26656 0
malloc-64 64 88 290 1382 0 254 24192 0
malloc-256 256 67 23 246 0 62 23040 0
malloc-4096 4096 5 0 5 0 2 20480 0
malloc-4096 4096 3 2 831 0 2 20480 0
malloc-2048 2048 9 1 9 0 8 20480 0
malloc-64 64 215 100 277 0 254 20160 0
TURNSTILE 136 122 25 122 0 62 19992 0
malloc-256 256 39 36 302 0 62 19200 0
malloc-256 256 46 29 111 0 62 19200 0
pipe 744 7 18 284 0 16 18600 0
tcpcb 1080 3 11 7 0 254 15120 0
SLEEPQUEUE 88 122 38 122 0 126 14080 0
malloc-4096 4096 3 0 3 0 2 12288 0
malloc-2048 2048 3 3 12 0 8 12288 0
malloc-64 64 72 117 24408 0 254 12096 0
malloc-32 32 89 289 616 0 254 12096 0
malloc-32 32 78 300 3964 0 254 12096 0
16 Bucket 144 38 46 291 0 62 12096 0
8 Bucket 80 36 114 623 0 126 12000 0
udp_inpcb 496 6 18 126 0 254 11904 0
malloc-128 128 51 42 89 0 126 11904 0
kenv 258 15 30 1030 0 30 11610 0
malloc-384 384 16 14 16 0 30 11520 0
malloc-256 256 18 27 121 0 62 11520 0
malloc-256 256 26 19 327 0 62 11520 0
sctp_asoc 2288 1 4 1 0 254 11440 0
malloc-512 512 4 12 4 0 30 8192 0
malloc-512 512 0 16 127 0 30 8192 0
malloc-512 512 5 11 70 0 30 8192 0
malloc-512 512 5 11 5 0 30 8192 0
rtentry 176 13 33 17 0 62 8096 0
PGRP 88 20 72 31 0 126 8096 0
rl_entry 40 30 172 30 0 254 8080 0
udpcb 32 6 246 126 0 254 8064 0
ertt 72 3 109 7 0 126 8064 0
PWD 32 10 242 100 0 254 8064 0
malloc-64 64 48 78 305 0 254 8064 0
malloc-64 64 16 110 26 0 254 8064 0
malloc-64 64 94 32 121 0 254 8064 0
malloc-32 32 50 202 200 0 254 8064 0
malloc-32 32 36 216 52 0 254 8064 0
malloc-32 32 17 235 55 0 254 8064 0
malloc-32 32 46 206 143 0 254 8064 0
malloc-32 32 17 235 32 0 254 8064 0
4 Bucket 48 5 163 45 0 254 8064 0
2 Bucket 32 44 208 495 0 254 8064 0
vtnet_tx_hdr 24 0 334 2237 0 254 8016 0
Files 80 72 28 6582 0 126 8000 0
malloc-16 16 41 459 281 0 254 8000 0
malloc-16 16 11 489 27 0 254 8000 0
malloc-16 16 35 465 174 0 254 8000 0
malloc-16 16 286 214 25539 0 254 8000 0
malloc-16 16 4 496 5 0 254 8000 0
ripcb 496 1 15 4 0 254 7936 0
tcp_inpcb 496 3 13 7 0 254 7936 0
malloc-128 128 39 23 165 0 126 7936 0
malloc-128 128 32 30 48 0 126 7936 0
malloc-128 128 29 33 184 0 126 7936 0
routing nhops 256 10 20 17 0 62 7680 0
unpcb 256 7 23 1179 0 254 7680 0
mbuf_packet 256 0 30 93 0 254 7680 0
KNOTE 160 0 25 8 0 62 4000 0
UMA Slabs 1 176 8 14 8 0 62 3872 0
sctp_ep 1272 1 2 1 0 254 3816 0
tcp_bbr_map 128 0 0 0 0 126 0 0
MAC labels 40 0 0 0 0 254 0 0
vnpbuf 2624 0 0 0 0 64 0 0
mdpbuf 2624 0 0 0 0 3 0 0
nfspbuf 2624 0 0 0 0 16 0 0
swwbuf 2624 0 0 0 0 8 0 0
swrbuf 2624 0 0 0 0 16 0 0
umtx_shm 88 0 0 0 0 126 0 0
umtx pi 96 0 0 0 0 126 0 0
rangeset pctrie nodes 144 0 0 0 0 62 0 0
malloc-65536 65536 0 0 0 0 1 0 0
malloc-65536 65536 0 0 0 0 1 0 0
malloc-65536 65536 0 0 0 0 1 0 0
malloc-32768 32768 0 0 0 0 1 0 0
malloc-32768 32768 0 0 0 0 1 0 0
malloc-32768 32768 0 0 0 0 1 0 0
malloc-32768 32768 0 0 0 0 1 0 0
malloc-32768 32768 0 0 0 0 1 0 0
malloc-16384 16384 0 0 0 0 1 0 0
malloc-16384 16384 0 0 0 0 1 0 0
malloc-16384 16384 0 0 0 0 1 0 0
malloc-8192 8192 0 0 0 0 1 0 0
malloc-512 512 0 0 0 0 30 0 0
pcpu-32 32 0 0 0 0 254 0 0
pcpu-4 4 0 0 0 0 254 0 0
fakepg 104 0 0 0 0 126 0 0
UMA Hash 256 0 0 0 0 62 0 0
HEAD commit: 395db99f32bc Export _mmap and __sys_mmap from libc.so
git tree: https://github.com/freebsd/freebsd-src.git main
dashboard link: https://syzkaller.appspot.com/bug?extid=7fe26e26911344e7211d
syz repro: https://syzkaller.appspot.com/x/repro.syz?x=137f836d300000
C reproducer: https://syzkaller.appspot.com/x/repro.c?x=1516508b300000
IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+7fe26e...@syzkaller.appspotmail.com
panic: Lock sctp-info not exclusively locked @ /syzkaller/managers/main/kernel/sys/netinet/sctp_pcb.c:4542
cpuid = 1
KDB: stack backtrace:
db_trace_self_wrapper() at db_trace_self_wrapper+0xc7/frame 0xfffffe0053be3a50
kdb_backtrace() at kdb_backtrace+0xd3/frame 0xfffffe0053be3bb0
vpanic() at vpanic+0x2c5/frame 0xfffffe0053be3c90
panic() at panic+0xb5/frame 0xfffffe0053be3d60
__rw_assert() at __rw_assert+0x201/frame 0xfffffe0053be3db0
sctp_free_assoc() at sctp_free_assoc+0x14cd/frame 0xfffffe0053be3f10
sctp_lower_sosend() at sctp_lower_sosend+0x42fa/frame 0xfffffe0053be4400
sctp_sosend() at sctp_sosend+0x716/frame 0xfffffe0053be46a0
sosend() at sosend+0xfc/frame 0xfffffe0053be4710
kern_sendit() at kern_sendit+0x58d/frame 0xfffffe0053be4880
sendit() at sendit+0x2b0/frame 0xfffffe0053be48d0
sys_sendmsg() at sys_sendmsg+0x17d/frame 0xfffffe0053be49f0
amd64_syscall() at amd64_syscall+0x425/frame 0xfffffe0053be4bf0
fast_syscall_common() at fast_syscall_common+0xf8/frame 0xfffffe0053be4bf0
--- syscall (0, FreeBSD ELF64, nosys), rip = 0x2b3c8a, rsp = 0x7fffffffea68, rbp = 0x7fffffffea80 ---
KDB: enter: panic
[ thread pid 785 tid 100102 ]
Stopped at kdb_enter+0x6b: movq $0,0x28e223a(%rip)
db>
db> set $lines = 0
db> set $maxwidth = 0
db> show registers
cs 0x20
ds 0x3b
es 0x3b
fs 0x13
gs 0x1b
ss 0x28
rax 0x12
rcx 0x81e004809f90349e
db>
db> set $lines = 0
db> set $maxwidth = 0
db> show registers
cs 0x20
ds 0x3b
es 0x3b
fs 0x13
gs 0x1b
ss 0x28
rax 0x12
rdx 0xdffff7c000000000
rbx 0
rsp 0xfffffe0053be3b90
rbp 0xfffffe0053be3bb0
rsi 0x1
rdi 0xffffffff8408b740 cov_trace_pc
r8 0x3
r9 0xfffffe0053be36c8
r10 0
r11 0xc279fede
r12 0xfffffe005893c560
r13 0xfffffe0053be3c01
r14 0xffffffff82c79420 .str.18
r15 0xffffffff82c79420 .str.18
rip 0xffffffff817abe7b kdb_enter+0x6b
rflags 0x46
kdb_enter+0x6b: movq $0,0x28e223a(%rip)
db> show proc
Process 785 (syz-executor0682173) at 0xfffffe0058942000:
r15 0xffffffff82c79420 .str.18
rip 0xffffffff817abe7b kdb_enter+0x6b
rflags 0x46
kdb_enter+0x6b: movq $0,0x28e223a(%rip)
db> show proc
state: NORMAL
uid: 0 gids: 0, 0, 5
parent: pid 783 at 0xfffffe0058b2aa70
uid: 0 gids: 0, 0, 5
ABI: FreeBSD ELF64
flag: 0x10004000 flag2: 0
arguments: ./syz-executor068217322
reaper: 0xfffffe0053d58538 reapsubtree: 1
sigparent: 20
vmspace: 0xfffffe009e4d09f0
sigparent: 20
(map 0xfffffe009e4d09f0)
(map.pmap 0xfffffe009e4d0ab0)
(pmap 0xfffffe009e4d0b10)
threads: 1
100102 Run CPU 1 syz-executor0682173
db> ps
pid ppid pgrp uid state wmesg wchan cmd
785 783 783 0 R CPU 1 syz-executor0682173
pid ppid pgrp uid state wmesg wchan cmd
783 781 783 0 Ss pause 0xfffffe0058b2ab20 csh
781 694 781 0 Ss select 0xfffffe009e45c7c0 sshd
760 1 760 0 Ss+ ttyin 0xfffffe0057003cb0 getty
759 1 759 0 Ss+ ttyin 0xfffffe00575f84b0 getty
758 1 758 0 Ss+ ttyin 0xfffffe00575f8cb0 getty
757 1 757 0 Ss+ ttyin 0xfffffe00583ee4b0 getty
756 1 756 0 Ss+ ttyin 0xfffffe00583eecb0 getty
755 1 755 0 Ss+ ttyin 0xfffffe00583ea4b0 getty
754 1 754 0 Ss+ ttyin 0xfffffe00583eacb0 getty
753 1 753 0 Ss+ ttyin 0xfffffe00583954b0 getty
752 1 752 0 Ss+ ttyin 0xfffffe0058395cb0 getty
750 1 24 0 S+ piperd 0xfffffe009e4a6ba0 logger
749 748 24 0 S+ nanslp 0xffffffff8405af80 sleep
748 1 24 0 S+ wait 0xfffffe0058b21000 sh
698 1 698 0 Ss nanslp 0xffffffff8405af81 cron
694 1 694 0 Ss select 0xfffffe0057419b40 sshd
507 1 507 0 Ss select 0xfffffe0058af0240 syslogd
436 1 436 0 Ss select 0xfffffe0057419d40 devd
435 1 435 65 Ss select 0xfffffe0058af03c0 dhclient
350 1 350 0 Ss select 0xfffffe0057419cc0 dhclient
347 1 347 0 Ss select 0xfffffe0058af0440 dhclient
23 0 0 0 DL syncer 0xffffffff84183360 [syncer]
22 0 0 0 DL vlruwt 0xfffffe0058540538 [vnlru]
21 0 0 0 DL (threaded) [bufdaemon]
100085 D qsleep 0xffffffff84181060 [bufdaemon]
100088 D - 0xffffffff83411f80 [bufspacedaemon-0]
100100 D sdflush 0xfffffe005882c8e8 [/ worker]
100085 D qsleep 0xffffffff84181060 [bufdaemon]
100088 D - 0xffffffff83411f80 [bufspacedaemon-0]
20 0 0 0 DL psleep 0xffffffff841b9580 [vmdaemon]
19 0 0 0 DL (threaded) [pagedaemon]
100083 D psleep 0xffffffff841ad0b8 [dom0]
100089 D launds 0xffffffff841ad0c4 [laundry: dom0]
100090 D umarcl 0xffffffff81eae980 [uma]
18 0 0 0 DL - 0xffffffff83e120a0 [rand_harvestq]
17 0 0 0 DL waiting 0xffffffff84aa3500 [sctp_iterator]
19 0 0 0 DL (threaded) [pagedaemon]
100083 D psleep 0xffffffff841ad0b8 [dom0]
100089 D launds 0xffffffff841ad0c4 [laundry: dom0]
100090 D umarcl 0xffffffff81eae980 [uma]
18 0 0 0 DL - 0xffffffff83e120a0 [rand_harvestq]
100077 D - 0xfffffe00573ee600 [acpi_task_0]
100078 D - 0xfffffe00573ee600 [acpi_task_1]
100079 D - 0xfffffe00573ee600 [acpi_task_2]
100081 D - 0xfffffe005418f400 [CAM taskq]
db> show all locks
Process 785 (syz-executor0682173) thread 0xfffffe005893c560 (100102)
exclusive sleep mutex sctp-send-tcb (tcbs) r = 0 (0xfffffe009e9b9c90) locked @ /syzkaller/managers/main/kernel/sys/netinet/sctp_pcb.c:4664
exclusive sleep mutex sctp-tcb (tcb) r = 0 (0xfffffe009e9b9c70) locked @ /syzkaller/managers/main/kernel/sys/netinet/sctp_pcb.c:4337
db> show malloc
Type InUse MemUse Requests
pf_hash 5 11524K 5
devbuf 4217 4339K 4242
tcp_hpts 6 3201K 6
sysctloid 34389 2031K 34460
vtbuf 24 1968K 46
kobj 326 1304K 485
newblk 708 1201K 720
Type InUse MemUse Requests
pf_hash 5 11524K 5
devbuf 4217 4339K 4242
tcp_hpts 6 3201K 6
sysctloid 34389 2031K 34460
vtbuf 24 1968K 46
kobj 326 1304K 485
vfscache 3 1025K 3
pcb 25 539K 79
inodedep 50 531K 71
ufs_quota 1 512K 1
vfs_hash 1 512K 1
callout 2 512K 2
intr 4 472K 4
subproc 101 205K 841
vfs_hash 1 512K 1
callout 2 512K 2
intr 4 472K 4
acpica 1674 184K 55623
vnet_data 1 168K 1
vmem 3 146K 4
tidhash 3 141K 3
linker 355 140K 383
pagedep 14 132K 18
vnet_data 1 168K 1
vmem 3 146K 4
tidhash 3 141K 3
linker 355 140K 383
tfo_ccache 1 128K 1
sem 4 106K 4
DEVFS1 104 104K 113
bus 986 80K 3488
mtx_pool 2 72K 2
syncache 1 68K 1
acpitask 1 64K 1
ddb_capture 1 64K 1
module 509 64K 509
kdtrace 167 34K 907
mtx_pool 2 72K 2
syncache 1 68K 1
acpitask 1 64K 1
ddb_capture 1 64K 1
module 509 64K 509
temp 18 33K 1616
hostcache 1 32K 1
shm 1 32K 1
DEVFS3 123 31K 133
shm 1 32K 1
umtx 242 31K 242
msg 4 30K 4
gtaskqueue 18 26K 18
gtaskqueue 18 26K 18
kbdmux 6 22K 6
DEVFS_RULE 56 20K 56
BPF 10 18K 10
DEVFS_RULE 56 20K 56
ufs_mount 4 17K 5
proc 3 17K 3
proc 3 17K 3
tty 16 16K 16
ithread 99 16K 99
bus-sc 34 15K 1693
KTRACE 100 13K 100
ithread 99 16K 99
bus-sc 34 15K 1693
kenv 95 12K 95
eventhandler 133 12K 133
ifaddr 30 12K 32
eventhandler 133 12K 133
routetbl 50 11K 176
CAM queue 5 11K 1528
GEOM 61 10K 490
rman 84 10K 425
bmsafemap 4 9K 40
GEOM 61 10K 490
rman 84 10K 425
UART 12 9K 12
devstat 4 9K 4
ksem 1 8K 1
rpc 2 8K 2
shmfd 1 8K 1
pfs_vncache 1 8K 1
pfs_nodes 20 8K 20
audit_evclass 237 8K 295
taskqueue 63 7K 63
sglist 5 7K 5
CAM DEV 3 6K 510
cred 23 6K 234
devstat 4 9K 4
ksem 1 8K 1
rpc 2 8K 2
shmfd 1 8K 1
pfs_vncache 1 8K 1
pfs_nodes 20 8K 20
audit_evclass 237 8K 295
taskqueue 63 7K 63
sglist 5 7K 5
CAM DEV 3 6K 510
ufs_dirhash 24 5K 24
UMA 270 5K 270
dirrem 17 5K 28
plimit 17 5K 322
vt 11 5K 11
ifnet 3 5K 3
memdesc 1 4K 1
MCA 32 4K 32
evdev 4 4K 4
filedesc 1 4K 1
MCA 32 4K 32
evdev 4 4K 4
acpisem 28 4K 28
hhook 15 4K 17
ether_multi 40 4K 50
hhook 15 4K 17
diradd 25 4K 36
lltable 11 4K 11
pf_ifnet 5 3K 6
in6_multi 25 3K 25
kqueue 46 3K 788
pwddesc 46 3K 786
terminal 11 3K 11
session 20 3K 31
uidinfo 3 3K 8
local_apic 1 2K 1
io_apic 1 2K 1
fpukern_ctx 2 2K 2
ipsec-saq 2 2K 2
io_apic 1 2K 1
fpukern_ctx 2 2K 2
selfd 27 2K 11020
proc-args 39 2K 488
Unitno 27 2K 39
CAM XPT 22 2K 543
lockf 15 2K 22
ipsecpolicy 2 2K 2
acpidev 20 2K 20
acpidev 20 2K 20
msi 9 2K 9
clone 9 2K 9
sctp_stro 1 1K 1
clone 9 2K 9
softdep 1 1K 1
sahead 1 1K 1
secasvar 1 1K 1
vnodemarker 2 1K 8
sahead 1 1K 1
secasvar 1 1K 1
NFSD session 1 1K 1
CAM periph 4 1K 271
select 7 1K 29
CAM periph 4 1K 271
sctp_atcl 2 1K 2
ipsec 3 1K 3
indirdep 3 1K 3
nhops 6 1K 6
toponodes 6 1K 6
isadev 6 1K 6
mount 16 1K 89
pci_link 10 1K 10
sctp_ifa 5 1K 6
isadev 6 1K 6
mount 16 1K 89
pci_link 10 1K 10
crypto 4 1K 4
ip6ndp 4 1K 5
encap_export_host 12 1K 12
newdirblk 4 1K 8
mkdir 4 1K 16
in_multi 2 1K 4
pfil 4 1K 4
cdev 2 1K 2
chacha20random 1 1K 1
cdev 2 1K 2
osd 7 1K 18
inpcbpolicy 10 1K 137
sctp_ifn 2 1K 6
NFSD lckfile 1 1K 1
NFSD V4client 1 1K 1
DEVFSP 4 1K 9
NFSD V4client 1 1K 1
DEVFS 9 1K 10
mld 2 1K 2
igmp 2 1K 2
vnodes 1 1K 1
CAM SIM 2 1K 2
ktls 1 1K 1
CAM SIM 2 1K 2
ktls 1 1K 1
feeder 7 1K 7
tcpfunc 3 1K 3
loginclass 3 1K 7
tcpfunc 3 1K 3
prison 6 1K 6
lkpikmalloc 5 1K 6
aesni_data 2 1K 2
lkpikmalloc 5 1K 6
soname 5 1K 3472
sctp_atky 3 1K 3
nexusdev 8 1K 8
apmdev 1 1K 1
atkbddev 2 1K 2
CAM dev queue 2 1K 2
xform 2 1K 49
apmdev 1 1K 1
atkbddev 2 1K 2
CAM dev queue 2 1K 2
CAM I/O Scheduler 1 1K 1
CAM path 4 1K 1034
procdesc 1 1K 6
CAM path 4 1K 1034
pmchooks 1 1K 1
filecaps 4 1K 66
tun 3 1K 3
sctp_vrf 1 1K 1
vnet 1 1K 1
entropy 2 1K 35
vnet 1 1K 1
acpiintr 1 1K 1
pmc 1 1K 1
sctp_athm 2 1K 2
pmc 1 1K 1
sctp_map 2 1K 2
cpus 2 1K 2
vnet_data_free 1 1K 1
Per-cpu 1 1K 1
freework 1 1K 26
vnet_data_free 1 1K 1
Per-cpu 1 1K 1
iov 1 1K 13646
p1003.1b 1 1K 1
pf_table 0 0K 0
pf_rule 0 0K 0
pf_altq 0 0K 0
pf_osfp 0 0K 0
pf_temp 0 0K 0
sctp_mcore 0 0K 0
pf_table 0 0K 0
pf_rule 0 0K 0
pf_altq 0 0K 0
pf_osfp 0 0K 0
pf_temp 0 0K 0
sctp_socko 0 0K 0
sctp_iter 0 0K 4
sctp_mvrf 0 0K 0
sctp_timw 0 0K 0
sctp_cpal 0 0K 0
sctp_cmsg 0 0K 0
sctp_stre 0 0K 0
sctp_athi 0 0K 0
sctp_a_it 0 0K 4
sctp_cmsg 0 0K 0
sctp_stre 0 0K 0
sctp_athi 0 0K 0
sctp_aadr 0 0K 0
sctp_stri 0 0K 0
sctp_stri 0 0K 0
cubic data 0 0K 0
chd data 0 0K 0
cdg data 0 0K 0
mqdata 0 0K 0
dctcp data 0 0K 0
htcp data 0 0K 0
htcp data 0 0K 0
tcp_do 0 0K 0
tcp_fsb 0 0K 0
vegas data 0 0K 0
tcp_fsb 0 0K 0
vegas data 0 0K 0
sentinel 0 0K 0
jfsync 0 0K 0
jtrunc 0 0K 0
sbdep 0 0K 2
jfsync 0 0K 0
jtrunc 0 0K 0
jsegdep 0 0K 0
jseg 0 0K 0
jfreefrag 0 0K 0
jfreeblk 0 0K 0
jnewblk 0 0K 0
jmvref 0 0K 0
jremref 0 0K 0
jaddref 0 0K 0
freedep 0 0K 0
freefile 0 0K 9
jseg 0 0K 0
jfreefrag 0 0K 0
jfreeblk 0 0K 0
jnewblk 0 0K 0
jmvref 0 0K 0
jremref 0 0K 0
jaddref 0 0K 0
freedep 0 0K 0
freeblks 0 0K 25
freefrag 0 0K 1
namei_tracker 0 0K 0
export_host 0 0K 0
cl_savebuf 0 0K 3
export_host 0 0K 0
twe_commands 0 0K 0
twa_commands 0 0K 0
tcp_log_dev 0 0K 0
midi buffers 0 0K 0
mixer 0 0K 0
ac97 0 0K 0
hdacc 0 0K 0
hdac 0 0K 0
hdaa 0 0K 0
acpicmbat 0 0K 0
SIIS driver 0 0K 0
CAM CCB 0 0K 523
PUC 0 0K 0
ppbusdev 0 0K 0
agtiapi_MemAlloc malloc 0 0K 0
biobuf 0 0K 0
aios 0 0K 0
lio 0 0K 0
acl 0 0K 0
osti_cacheable 0 0K 0
mbuf_tag 0 0K 27
twa_commands 0 0K 0
tcp_log_dev 0 0K 0
midi buffers 0 0K 0
mixer 0 0K 0
ac97 0 0K 0
hdacc 0 0K 0
hdac 0 0K 0
hdaa 0 0K 0
acpicmbat 0 0K 0
SIIS driver 0 0K 0
CAM CCB 0 0K 523
PUC 0 0K 0
ppbusdev 0 0K 0
agtiapi_MemAlloc malloc 0 0K 0
biobuf 0 0K 0
aios 0 0K 0
lio 0 0K 0
acl 0 0K 0
osti_cacheable 0 0K 0
tempbuff 0 0K 0
tempbuff 0 0K 0
ag_tgt_map_t malloc 0 0K 0
ag_slr_map_t malloc 0 0K 0
lDevFlags * malloc 0 0K 0
tiDeviceHandle_t * malloc 0 0K 0
ag_portal_data_t malloc 0 0K 0
ag_device_t malloc 0 0K 0
STLock malloc 0 0K 0
CCB List 0 0K 0
sr_iov 0 0K 0
OCS 0 0K 0
OCS 0 0K 0
nvme 0 0K 0
nvd 0 0K 0
netmap 0 0K 0
mwldev 0 0K 0
MVS driver 0 0K 0
CAM ccb queue 0 0K 0
mrsasbuf 0 0K 0
mpt_user 0 0K 0
mps_user 0 0K 0
accf 0 0K 0
pts 0 0K 0
ioctlops 0 0K 86
tempbuff 0 0K 0
ag_tgt_map_t malloc 0 0K 0
ag_slr_map_t malloc 0 0K 0
lDevFlags * malloc 0 0K 0
tiDeviceHandle_t * malloc 0 0K 0
ag_portal_data_t malloc 0 0K 0
ag_device_t malloc 0 0K 0
STLock malloc 0 0K 0
CCB List 0 0K 0
sr_iov 0 0K 0
OCS 0 0K 0
OCS 0 0K 0
nvme 0 0K 0
nvd 0 0K 0
netmap 0 0K 0
mwldev 0 0K 0
MVS driver 0 0K 0
CAM ccb queue 0 0K 0
mrsasbuf 0 0K 0
mpt_user 0 0K 0
mps_user 0 0K 0
accf 0 0K 0
pts 0 0K 0
eventfd 0 0K 0
Witness 0 0K 0
stack 0 0K 0
MPSSAS 0 0K 0
mps 0 0K 0
mpr_user 0 0K 0
MPRSAS 0 0K 0
mpr 0 0K 0
mfibuf 0 0K 0
sbuf 0 0K 288
md_sectors 0 0K 0
firmware 0 0K 0
compressor 0 0K 0
md_disk 0 0K 0
SWAP 0 0K 0
malodev 0 0K 0
LED 0 0K 0
sysctltmp 0 0K 658
Witness 0 0K 0
stack 0 0K 0
MPSSAS 0 0K 0
mps 0 0K 0
mpr_user 0 0K 0
MPRSAS 0 0K 0
mpr 0 0K 0
mfibuf 0 0K 0
sbuf 0 0K 288
md_sectors 0 0K 0
firmware 0 0K 0
compressor 0 0K 0
md_disk 0 0K 0
SWAP 0 0K 0
malodev 0 0K 0
LED 0 0K 0
sysctl 0 0K 3
ekcd 0 0K 0
dumper 0 0K 0
sendfile 0 0K 0
rctl 0 0K 0
ix_sriov 0 0K 0
aacraidcam 0 0K 0
aacraid_buf 0 0K 0
ix 0 0K 0
ipsbuf 0 0K 0
cache 0 0K 0
iirbuf 0 0K 0
kcovinfo 0 0K 0
ekcd 0 0K 0
dumper 0 0K 0
sendfile 0 0K 0
rctl 0 0K 0
ix_sriov 0 0K 0
aacraidcam 0 0K 0
aacraid_buf 0 0K 0
ix 0 0K 0
ipsbuf 0 0K 0
cache 0 0K 0
iirbuf 0 0K 0
pbuf 2624 0 989 0 0 2 2595136 0
mbuf 256 8579 991 17814 0 254 2449920 0
BUF TRIE 144 184 11576 500 0 62 1693440 0
malloc-384 384 4218 12 4240 0 30 1624320 0
malloc-4096 4096 373 3 1272 0 2 1540096 0
malloc-128 128 11557 6 11624 0 126 1480064 0
UMA Slabs 0 112 10097 16 10097 0 126 1132656 0
vmem btag 56 15354 29 15354 0 254 861448 0
FFS inode 1160 499 12 508 0 8 592760 0
RADIX NODE 144 3028 187 21148 0 62 462960 0
malloc-65536 65536 6 0 6 0 1 393216 0
lkpimm 168 1 2327 1 0 62 391104 0
lkpicurr 168 2 2326 2 0 62 391104 0
malloc-64 64 4391 82 6069 0 254 286272 0
lkpimm 168 1 2327 1 0 62 391104 0
lkpicurr 168 2 2326 2 0 62 391104 0
malloc-256 256 1045 5 1848 0 62 268800 0
256 Bucket 2048 112 12 10825 0 8 253952 0
VNODE 448 529 20 540 0 30 245952 0
VM OBJECT 264 891 39 12691 0 30 245520 0
malloc-16 16 14227 273 15515 0 254 232000 0
DEVCTL 1024 0 220 126 0 0 225280 0
THREAD 1808 120 1 120 0 8 218768 0
malloc-65536 65536 1 2 47 0 1 196608 0
malloc-65536 65536 1 2 137 0 1 196608 0
UMA Zones 768 242 2 242 0 16 187392 0
malloc-32 32 5598 72 6389 0 254 181440 0
malloc-128 128 1205 35 25979 0 126 158720 0
malloc-32 32 5598 72 6389 0 254 181440 0
malloc-1024 1024 129 3 138 0 16 135168 0
FFS2 dinode 256 499 11 508 0 62 130560 0
malloc-128 128 976 16 5180 0 126 126976 0
ksiginfo 112 37 1007 52 0 126 116928 0
MAP ENTRY 96 836 340 38045 0 126 112896 0
S VFS Cache 104 966 87 1005 0 126 109512 0
malloc-32768 32768 1 2 131 0 1 98304 0
UMA Kegs 384 227 6 227 0 30 89472 0
malloc-8192 8192 9 1 110 0 1 81920 0
malloc-8192 8192 8 2 10 0 1 81920 0
PROC 1336 45 9 785 0 8 72144 0
VMSPACE 2544 23 4 764 0 4 68688 0
mbuf_cluster 2048 30 2 30 0 254 65536 0
malloc-65536 65536 1 0 1 0 1 65536 0
malloc-65536 65536 0 1 8 0 1 65536 0
malloc-4096 4096 14 1 27 0 2 61440 0
g_bio 408 0 150 4462 0 30 61200 0
filedesc0 1072 46 10 786 0 8 60032 0
malloc-8192 8192 4 3 32 0 1 57344 0
128 Bucket 1024 39 16 604 0 16 56320 0
malloc-2048 2048 7 19 551 0 8 53248 0
malloc-16384 16384 3 0 3 0 1 49152 0
malloc-16384 16384 1 2 161 0 1 49152 0
malloc-2048 2048 2 22 575 0 8 49152 0
malloc-1024 1024 10 34 1427 0 16 45056 0
malloc-16384 16384 1 2 161 0 1 49152 0
malloc-2048 2048 2 22 575 0 8 49152 0
malloc-64 64 517 176 1620 0 254 44352 0
32 Bucket 256 46 119 3426 0 62 42240 0
clpbuf 2624 0 16 22 0 16 41984 0
DIRHASH 1024 34 6 34 0 16 40960 0
NAMEI 1024 0 36 12237 0 16 36864 0
malloc-4096 4096 8 1 10 0 2 36864 0
pcpu-8 8 4233 375 4261 0 254 36864 0
64 Bucket 512 57 15 1266 0 30 36864 0
malloc-32768 32768 1 0 1 0 1 32768 0
malloc-32768 32768 1 0 1 0 1 32768 0
malloc-16384 16384 2 0 17 0 1 32768 0
pcpu-64 64 487 25 487 0 254 32768 0
malloc-128 128 63 154 322 0 126 27776 0
malloc-32768 32768 1 0 1 0 1 32768 0
malloc-16384 16384 2 0 17 0 1 32768 0
pcpu-64 64 487 25 487 0 254 32768 0
socket 960 19 9 1334 0 254 26880 0
da_ccb 544 0 49 1236 0 16 26656 0
malloc-64 64 88 290 1382 0 254 24192 0
ttyinq 160 135 15 300 0 62 24000 0
ttyoutq 256 72 18 160 0 62 23040 0
malloc-384 384 57 3 86 0 30 23040 0
ttyoutq 256 72 18 160 0 62 23040 0
malloc-256 256 67 23 246 0 62 23040 0
malloc-4096 4096 5 0 5 0 2 20480 0
malloc-4096 4096 3 2 831 0 2 20480 0
malloc-2048 2048 9 1 9 0 8 20480 0
malloc-64 64 215 100 277 0 254 20160 0
TURNSTILE 136 122 25 122 0 62 19992 0
Mountpoints 2752 2 5 2 0 4 19264 0
malloc-384 384 41 9 43 0 30 19200 0
malloc-256 256 39 36 302 0 62 19200 0
malloc-256 256 46 29 111 0 62 19200 0
pipe 744 7 18 284 0 16 18600 0
malloc-16384 16384 1 0 1 0 1 16384 0
malloc-16384 16384 1 0 1 0 1 16384 0
malloc-1024 1024 8 8 12 0 16 16384 0
malloc-16384 16384 1 0 1 0 1 16384 0
malloc-1024 1024 8 8 12 0 16 16384 0
malloc-384 384 22 18 362 0 30 15360 0
malloc-256 256 30 30 372 0 62 15360 0
tcpcb 1080 3 11 7 0 254 15120 0
SLEEPQUEUE 88 122 38 122 0 126 14080 0
malloc-4096 4096 3 0 3 0 2 12288 0
malloc-2048 2048 3 3 12 0 8 12288 0
malloc-2048 2048 3 3 194 0 8 12288 0
malloc-2048 2048 2 4 4 0 8 12288 0
malloc-1024 1024 8 4 185 0 16 12288 0
malloc-1024 1024 7 5 7 0 16 12288 0
ertt_txseginfo 40 1 302 266 0 254 12120 0
malloc-2048 2048 2 4 4 0 8 12288 0
malloc-1024 1024 8 4 185 0 16 12288 0
malloc-1024 1024 7 5 7 0 16 12288 0
malloc-64 64 72 117 24408 0 254 12096 0
malloc-32 32 89 289 616 0 254 12096 0
malloc-32 32 78 300 3964 0 254 12096 0
16 Bucket 144 38 46 291 0 62 12096 0
8 Bucket 80 36 114 623 0 126 12000 0
udp_inpcb 496 6 18 126 0 254 11904 0
malloc-128 128 51 42 89 0 126 11904 0
kenv 258 15 30 1030 0 30 11610 0
malloc-384 384 16 14 16 0 30 11520 0
malloc-256 256 18 27 121 0 62 11520 0
malloc-256 256 26 19 327 0 62 11520 0
sctp_asoc 2288 1 4 1 0 254 11440 0
malloc-8192 8192 1 0 1 0 1 8192 0
malloc-8192 8192 1 0 1 0 1 8192 0
malloc-8192 8192 1 0 1 0 1 8192 0
malloc-8192 8192 1 0 1 0 1 8192 0
malloc-2048 2048 3 1 3 0 8 8192 0
malloc-2048 2048 3 1 3 0 8 8192 0
malloc-1024 1024 2 6 10 0 16 8192 0
malloc-8192 8192 1 0 1 0 1 8192 0
malloc-8192 8192 1 0 1 0 1 8192 0
malloc-8192 8192 1 0 1 0 1 8192 0
malloc-2048 2048 3 1 3 0 8 8192 0
malloc-2048 2048 3 1 3 0 8 8192 0
malloc-512 512 4 12 4 0 30 8192 0
malloc-512 512 0 16 127 0 30 8192 0
malloc-512 512 5 11 70 0 30 8192 0
malloc-512 512 5 11 5 0 30 8192 0
malloc-512 512 8 8 8 0 30 8192 0
sctp_raddr 736 1 10 1 0 254 8096 0
rtentry 176 13 33 17 0 62 8096 0
PGRP 88 20 72 31 0 126 8096 0
rl_entry 40 30 172 30 0 254 8080 0
udpcb 32 6 246 126 0 254 8064 0
ertt 72 3 109 7 0 126 8064 0
PWD 32 10 242 100 0 254 8064 0
malloc-64 64 48 78 305 0 254 8064 0
malloc-64 64 16 110 26 0 254 8064 0
malloc-64 64 94 32 121 0 254 8064 0
malloc-32 32 50 202 200 0 254 8064 0
malloc-32 32 36 216 52 0 254 8064 0
malloc-32 32 17 235 55 0 254 8064 0
malloc-32 32 46 206 143 0 254 8064 0
malloc-32 32 17 235 32 0 254 8064 0
4 Bucket 48 5 163 45 0 254 8064 0
2 Bucket 32 44 208 495 0 254 8064 0
vtnet_tx_hdr 24 0 334 2237 0 254 8016 0
Files 80 72 28 6582 0 126 8000 0
malloc-16 16 0 500 7 0 254 8000 0
malloc-16 16 26 474 97 0 254 8000 0
malloc-16 16 41 459 281 0 254 8000 0
malloc-16 16 11 489 27 0 254 8000 0
malloc-16 16 35 465 174 0 254 8000 0
malloc-16 16 286 214 25539 0 254 8000 0
malloc-16 16 4 496 5 0 254 8000 0
ripcb 496 1 15 4 0 254 7936 0
tcp_inpcb 496 3 13 7 0 254 7936 0
malloc-128 128 39 23 165 0 126 7936 0
malloc-128 128 32 30 48 0 126 7936 0
malloc-128 128 29 33 184 0 126 7936 0
routing nhops 256 10 20 17 0 62 7680 0
unpcb 256 7 23 1179 0 254 7680 0
mbuf_packet 256 0 30 93 0 254 7680 0
FPU_save_area 832 1 8 1 0 16 7488 0
cpuset 104 8 54 8 0 126 6448 0
epoch_record pcpu 256 4 12 4 0 62 4096 0
malloc-4096 4096 0 1 1 0 2 4096 0
malloc-4096 4096 0 1 3 0 2 4096 0
malloc-1024 1024 2 2 2 0 16 4096 0
cpuset 104 8 54 8 0 126 6448 0
epoch_record pcpu 256 4 12 4 0 62 4096 0
malloc-4096 4096 0 1 1 0 2 4096 0
malloc-4096 4096 0 1 3 0 2 4096 0
malloc-1024 1024 1 3 1 0 16 4096 0
malloc-512 512 0 8 1 0 30 4096 0
malloc-512 512 0 8 1 0 30 4096 0
malloc-512 512 0 8 1 0 30 4096 0
pcpu-16 16 7 249 7 0 254 4096 0
sctp_laddr 48 0 84 4 0 254 4032 0
pcpu-16 16 7 249 7 0 254 4096 0
hostcache 64 1 62 1 0 254 4032 0
syncache 168 0 24 5 0 254 4032 0
KNOTE 160 0 25 8 0 62 4000 0
UMA Slabs 1 176 8 14 8 0 62 3872 0
malloc-384 384 0 10 1 0 30 3840 0
malloc-384 384 2 8 2 0 30 3840 0
malloc-384 384 1 9 1 0 30 3840 0
malloc-256 256 7 8 518 0 62 3840 0
malloc-384 384 2 8 2 0 30 3840 0
malloc-384 384 1 9 1 0 30 3840 0
sctp_ep 1272 1 2 1 0 254 3816 0
mqnode 416 3 6 3 0 30 3744 0
KMAP ENTRY 96 12 27 14 0 0 3744 0
vmem 1856 1 1 1 0 8 3712 0
SMR CPU 32 3 60 3 0 254 2016 0
SMR SHARED 24 3 60 3 0 254 1512 0
FFS1 dinode 128 0 0 0 0 126 0 0
ada_ccb 272 0 0 0 0 30 0 0
swblk 136 0 0 0 0 62 0 0
swpctrie 144 0 0 0 0 62 0 0
KMAP ENTRY 96 12 27 14 0 0 3744 0
vmem 1856 1 1 1 0 8 3712 0
SMR CPU 32 3 60 3 0 254 2016 0
SMR SHARED 24 3 60 3 0 254 1512 0
FFS1 dinode 128 0 0 0 0 126 0 0
ada_ccb 272 0 0 0 0 30 0 0
swblk 136 0 0 0 0 62 0 0
swpctrie 144 0 0 0 0 62 0 0
sctp_asconf_ack 48 0 0 0 0 254 0 0
sctp_asconf 40 0 0 0 0 254 0 0
sctp_stream_msg_out 112 0 0 0 0 254 0 0
sctp_readq 152 0 0 0 0 254 0 0
sctp_chunk 152 0 0 0 0 254 0 0
cdg_qdiffsample 16 0 0 0 0 254 0 0
pf state scrubs 40 0 0 0 0 254 0 0
pf frag entries 40 0 0 0 0 254 0 0
pf frags 248 0 0 0 0 62 0 0
pf table entries 160 0 0 0 0 62 0 0
pf table entry counters 64 0 0 0 0 254 0 0
pf source nodes 136 0 0 0 0 254 0 0
pf state keys 88 0 0 0 0 126 0 0
pf states 312 0 0 0 0 254 0 0
pf tags 104 0 0 0 0 126 0 0
pf mtags 48 0 0 0 0 254 0 0
tcp_bbr_pcb 832 0 0 0 0 16 0 0
sctp_asconf 40 0 0 0 0 254 0 0
sctp_stream_msg_out 112 0 0 0 0 254 0 0
sctp_readq 152 0 0 0 0 254 0 0
sctp_chunk 152 0 0 0 0 254 0 0
cdg_qdiffsample 16 0 0 0 0 254 0 0
pf state scrubs 40 0 0 0 0 254 0 0
pf frag entries 40 0 0 0 0 254 0 0
pf frags 248 0 0 0 0 62 0 0
pf table entries 160 0 0 0 0 62 0 0
pf table entry counters 64 0 0 0 0 254 0 0
pf source nodes 136 0 0 0 0 254 0 0
pf state keys 88 0 0 0 0 126 0 0
pf states 312 0 0 0 0 254 0 0
pf tags 104 0 0 0 0 126 0 0
pf mtags 48 0 0 0 0 254 0 0
tcp_bbr_map 128 0 0 0 0 126 0 0
tcp_rack_pcb 832 0 0 0 0 16 0 0
tcp_rack_map 112 0 0 0 0 126 0 0
udplite_inpcb 496 0 0 0 0 254 0 0
tcp_log_node 120 0 0 0 0 126 0 0
tcp_log_bucket 176 0 0 0 0 62 0 0
tcp_log 416 0 0 0 0 254 0 0
tcpreass 48 0 0 0 0 254 0 0
tfo_ccache_entries 80 0 0 0 0 126 0 0
tfo 4 0 0 0 0 254 0 0
sackhole 32 0 0 0 0 254 0 0
tcptw 88 0 0 0 0 254 0 0
ipq 56 0 0 0 0 254 0 0
IPsec SA lft_c 16 0 0 0 0 254 0 0
itimer 352 0 0 0 0 30 0 0
AIOLIO 272 0 0 0 0 30 0 0
AIOCB 552 0 0 0 0 16 0 0
AIOP 32 0 0 0 0 254 0 0
AIO 208 0 0 0 0 62 0 0
tcp_rack_map 112 0 0 0 0 126 0 0
udplite_inpcb 496 0 0 0 0 254 0 0
tcp_log_node 120 0 0 0 0 126 0 0
tcp_log_bucket 176 0 0 0 0 62 0 0
tcp_log 416 0 0 0 0 254 0 0
tcpreass 48 0 0 0 0 254 0 0
tfo_ccache_entries 80 0 0 0 0 126 0 0
tfo 4 0 0 0 0 254 0 0
sackhole 32 0 0 0 0 254 0 0
tcptw 88 0 0 0 0 254 0 0
ipq 56 0 0 0 0 254 0 0
IPsec SA lft_c 16 0 0 0 0 254 0 0
itimer 352 0 0 0 0 30 0 0
AIOLIO 272 0 0 0 0 30 0 0
AIOCB 552 0 0 0 0 16 0 0
AIOP 32 0 0 0 0 254 0 0
AIO 208 0 0 0 0 62 0 0
NCLNODE 592 0 0 0 0 16 0 0
mqnotifier 216 0 0 0 0 62 0 0
mvdata 64 0 0 0 0 254 0 0
mqueue 248 0 0 0 0 62 0 0
TMPFS node 224 0 0 0 0 62 0 0
LTS VFS Cache 360 0 0 0 0 30 0 0
L VFS Cache 320 0 0 0 0 30 0 0
STS VFS Cache 144 0 0 0 0 62 0 0
cryptop 280 0 0 0 0 30 0 0
linux_dma_object 24 0 0 0 0 254 0 0
linux_dma_pctrie 144 0 0 0 0 62 0 0
IOMMU_MAP_ENTRY 120 0 0 0 0 126 0 0
ktls_session 192 0 0 0 0 62 0 0
mbuf_jumbo_16k 16384 0 0 0 0 254 0 0
mbuf_jumbo_9k 9216 0 0 0 0 254 0 0
audit_record 1280 0 0 0 0 8 0 0
domainset 40 0 0 0 0 254 0 0
mqnotifier 216 0 0 0 0 62 0 0
mvdata 64 0 0 0 0 254 0 0
mqueue 248 0 0 0 0 62 0 0
TMPFS node 224 0 0 0 0 62 0 0
LTS VFS Cache 360 0 0 0 0 30 0 0
L VFS Cache 320 0 0 0 0 30 0 0
STS VFS Cache 144 0 0 0 0 62 0 0
cryptop 280 0 0 0 0 30 0 0
linux_dma_object 24 0 0 0 0 254 0 0
linux_dma_pctrie 144 0 0 0 0 62 0 0
IOMMU_MAP_ENTRY 120 0 0 0 0 126 0 0
ktls_session 192 0 0 0 0 62 0 0
mbuf_jumbo_16k 16384 0 0 0 0 254 0 0
mbuf_jumbo_9k 9216 0 0 0 0 254 0 0
audit_record 1280 0 0 0 0 8 0 0
MAC labels 40 0 0 0 0 254 0 0
vnpbuf 2624 0 0 0 0 64 0 0
mdpbuf 2624 0 0 0 0 3 0 0
nfspbuf 2624 0 0 0 0 16 0 0
swwbuf 2624 0 0 0 0 8 0 0
swrbuf 2624 0 0 0 0 16 0 0
umtx_shm 88 0 0 0 0 126 0 0
umtx pi 96 0 0 0 0 126 0 0
rangeset pctrie nodes 144 0 0 0 0 62 0 0
malloc-65536 65536 0 0 0 0 1 0 0
malloc-65536 65536 0 0 0 0 1 0 0
malloc-65536 65536 0 0 0 0 1 0 0
malloc-32768 32768 0 0 0 0 1 0 0
malloc-32768 32768 0 0 0 0 1 0 0
malloc-32768 32768 0 0 0 0 1 0 0
malloc-32768 32768 0 0 0 0 1 0 0
malloc-32768 32768 0 0 0 0 1 0 0
malloc-16384 16384 0 0 0 0 1 0 0
malloc-16384 16384 0 0 0 0 1 0 0
malloc-16384 16384 0 0 0 0 1 0 0
malloc-8192 8192 0 0 0 0 1 0 0
malloc-512 512 0 0 0 0 30 0 0
pcpu-32 32 0 0 0 0 254 0 0
pcpu-4 4 0 0 0 0 254 0 0
fakepg 104 0 0 0 0 126 0 0
UMA Hash 256 0 0 0 0 62 0 0
Reply all
Reply to author
Forward
0 new messages