Fatal trap NUM: page fault in nd6_dad_timer (6)
0 views
Skip to first unread message
syzbot
Nov 26, 2023, 7:20:23 PM11/26/23
to syzkaller-f...@googlegroups.com
Hello,
syzbot found the following issue on:
HEAD commit: e4967d4d48b0 lockf: switch to strtonum() for parsing timeout
git tree: freebsd-src
console output: https://syzkaller.appspot.com/x/log.txt?x=17a9a4d8e80000
dashboard link: https://syzkaller.appspot.com/bug?extid=1778b08d8e798b8dfada
Unfortunately, I don't have any reproducer for this issue yet.
IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+1778b0...@syzkaller.appspotmail.com
Fatal trap 12: page fault while in kernel mode
cpuid = 0; apic id = 00
fault virtual address = 0x10
fault code = supervisor read data, page not present
instruction pointer = 0x20:0xffffffff81a54eee
stack pointer = 0x28:0xfffffe0053fc5ae0
frame pointer = 0x28:0xfffffe0053fc5cb0
code segment = base 0x0, limit 0xfffff, type 0x1b
= DPL 0, pres 1, long 1, def32 0, gran 1
processor eflags = interrupt enabled, resume, IOPL = 0
current process = 2 (clock (0))
rdi: 0000000000000010 rsi: 000000000000001c rdx: 000000000000014a
rcx: fffffe00033eee30 r8: 0000000000000000 r9: 0000000000000279
FreeBSD/amd64rax: fffffe00033eee30 rbx: fffffe00079e7800 rbp: fffffe0053fc5cb0
r10: 69a4a67b82f495ff r11: 0000000000000006 r12: 0000000000000000
r13: fffff7800a7f8b68 r14: fffffe0053fc5c20 r15: fffffe00542fe740
trap number = 12
panic: page fault
cpuid = 0
time = 1701044399
KDB: stack backtrace:
db_trace_self_wrapper() at db_trace_self_wrapper+0xc6/frame 0xfffffe0053fc5210
kdb_backtrace() at kdb_backtrace+0xd0/frame 0xfffffe0053fc5370
vpanic() at vpanic+0x271/frame 0xfffffe0053fc5510
panic() at panic+0xb5/frame 0xfffffe0053fc55d0
trap_fatal() at trap_fatal+0x7ee/frame 0xfffffe0053fc56f0
trap_pfault() at trap_pfault+0x17b/frame 0xfffffe0053fc5830
trap() at trap+0x5f3/frame 0xfffffe0053fc5a10
calltrap() at calltrap+0x8/frame 0xfffffe0053fc5a10
--- trap 0xc, rip = 0xffffffff81a54eee, rsp = 0xfffffe0053fc5ae0, rbp = 0xfffffe0053fc5cb0 ---
nd6_dad_timer() at nd6_dad_timer+0x19e/frame 0xfffffe0053fc5cb0
softclock_call_cc() at softclock_call_cc+0x40a/frame 0xfffffe0053fc5e80
softclock_thread() at softclock_thread+0x200/frame 0xfffffe0053fc5ef0
fork_exit() at fork_exit+0xcc/frame 0xfffffe0053fc5f30
fork_trampoline() at fork_trampoline+0xe/frame 0xfffffe0053fc5f30
--- trap 0, rip = 0, rsp = 0, rbp = 0 ---
KDB: enter: panic
[ thread pid 2 tid 100029 ]
Stopped at kdb_enter+0x6e: movq $0,0x2193207(%rip)
db> set $lines = 0
db> set $maxwidth = 0
db> show registers
cs 0x20
ds 0x3b
es 0x3b
fs 0x13
gs 0x1b
ss 0x28
rax 0x12
rcx 0xfffffe00033eee30
rdx 0xdffff7c000000000
rbx 0xffffffff826ee260 .str.28
rsp 0xfffffe0053fc5350
rbp 0xfffffe0053fc5370
rsi 0x1
rdi 0
r8 0
r9 0xffffffff
r10 0x1
r11 0x1
r12 0
r13 0xfffffe00542fe740
r14 0xffffffff826ee260 .str.28
r15 0
rip 0xffffffff815c7e0e kdb_enter+0x6e
rflags 0x46
kdb_enter+0x6e: movq $0,0x2193207(%rip)
db> show proc
Process 2 (clock) at 0xfffffe0054233020:
state: NORMAL
uid: 0 gids: 0
parent: pid 0 at 0xffffffff836e5700
ABI: null
flag: 0x10000284 flag2: 0
reaper: 0xffffffff836e5700 reapsubtree: 2
sigparent: 20
vmspace: 0xffffffff836e66a0
(map 0xffffffff836e66a0)
(map.pmap 0xffffffff836e6760)
(pmap 0xffffffff836e67d0)
threads: 2
100029 Run CPU 0 [clock (0)]
100030 I [clock (1)]
db> ps
pid ppid pgrp uid state wmesg wchan cmd
15319 15316 424 0 R rtsol
15318 15316 15318 0 Ss select 0xfffffe0057b04ac0 rtsol
15317 15316 424 0 R rtsol
15316 1 424 0 RE CPU 1 rtsol
15314 15249 424 0 R rtsol
15249 15243 424 0 S wait 0xfffffe0007c22b00 sh
15243 424 424 0 S wait 0xfffffe006d2b7580 sh
4851 1 4851 65 Ss select 0xfffffe0057b040c0 dhclient
3847 1 3847 0 Ss select 0xfffffe0057b04240 dhclient
3844 1 3844 0 Ss select 0xfffffe0057b041c0 dhclient
3169 1 3169 65 Ss select 0xfffffe005724a440 dhclient
2078 1 2078 0 Ss select 0xfffffe005724a0c0 dhclient
2075 1 2075 0 Ss select 0xfffffe005724a140 dhclient
2056 1 2056 65 Ss select 0xfffffe005724a240 dhclient
1044 1 1044 0 Ss select 0xfffffe005724a2c0 dhclient
1041 1 1041 0 Ss select 0xfffffe0057234940 dhclient
826 0 0 0 DL aiordy 0xfffffe006cc30b00 [aiod4]
825 0 0 0 DL aiordy 0xfffffe006cc31060 [aiod3]
824 0 0 0 DL aiordy 0xfffffe006cc315c0 [aiod2]
823 0 0 0 DL aiordy 0xfffffe006cdf4580 [aiod1]
776 770 776 0 Ss piperd 0xfffffe0058a1d998 syz-executor.2
773 770 773 0 Ss piperd 0xfffffe0058a1d110 syz-executor.1
772 770 772 0 Ss piperd 0xfffffe0058a1c5b0 syz-executor.0
770 768 768 0 S (threaded) syz-fuzzer
100111 S wait 0xfffffe00571fcae0 syz-fuzzer
100113 S uwait 0xfffffe0058959f00 syz-fuzzer
100114 S uwait 0xfffffe005895a080 syz-fuzzer
100115 S wait 0xfffffe00571fcae0 syz-fuzzer
100116 S uwait 0xfffffe005895a280 syz-fuzzer
100117 S uwait 0xfffffe0057ae7080 syz-fuzzer
100118 S kqread 0xfffffe00576c3600 syz-fuzzer
100120 S uwait 0xfffffe00571e5e00 syz-fuzzer
100121 S wait 0xfffffe00571fcae0 syz-fuzzer
100123 S uwait 0xfffffe0058958c80 syz-fuzzer
100132 S uwait 0xfffffe0057ae7f00 syz-fuzzer
100192 S uwait 0xfffffe0058958580 syz-fuzzer
100373 S uwait 0xfffffe00571e2c00 syz-fuzzer
768 766 768 0 Ss pause 0xfffffe006d1fa0b0 csh
766 682 766 0 Ss select 0xfffffe005724a740 sshd
748 1 748 0 Ss+ ttyin 0xfffffe00540d18b0 getty
747 1 747 0 Ss+ ttyin 0xfffffe0007c3b0b0 getty
746 1 746 0 Ss+ ttyin 0xfffffe0007c3b4b0 getty
745 1 745 0 Ss+ ttyin 0xfffffe0007c3b8b0 getty
744 1 744 0 Ss+ ttyin 0xfffffe0007c3bcb0 getty
743 1 743 0 Ss+ ttyin 0xfffffe0007c3c0b0 getty
742 1 742 0 Ss+ ttyin 0xfffffe0007c3c4b0 getty
741 1 741 0 Ss+ ttyin 0xfffffe0007c3c8b0 getty
740 1 740 0 Ss+ ttyin 0xfffffe0007c3ccb0 getty
686 1 686 0 Ss nanslp 0xffffffff8373c3c1 cron
682 1 682 0 Ss select 0xfffffe0057234f40 sshd
495 1 495 0 Ss select 0xfffffe0057234cc0 syslogd
424 1 424 0 Ss wait 0xfffffe006cc2fae0 devd
423 1 423 65 Ss select 0xfffffe0057b044c0 dhclient
338 1 338 0 Ss select 0xfffffe0057234dc0 dhclient
335 1 335 0 Ss select 0xfffffe0057b045c0 dhclient
17 0 0 0 DL syncer 0xffffffff83859b20 [syncer]
16 0 0 0 DL vlruwt 0xfffffe00571fe060 [vnlru]
15 0 0 0 DL (threaded) [bufdaemon]
100079 D psleep 0xffffffff83858100 [bufdaemon]
100082 D - 0xffffffff82c0a140 [bufspacedaemon-0]
100093 D sdflush 0xfffffe00570ccce8 [/ worker]
9 0 0 0 DL psleep 0xffffffff838cad40 [vmdaemon]
8 0 0 0 DL (threaded) [pagedaemon]
100077 D psleep 0xffffffff838b2bb8 [dom0]
100080 D launds 0xffffffff838b2bc4 [laundry: dom0]
100081 D umarcl 0xffffffff81d5b520 [uma]
7 0 0 0 DL - 0xffffffff834b9c10 [rand_harvestq]
6 0 0 0 DL pftm 0xffffffff83f71a30 [pf purge]
5 0 0 0 DL waiting 0xffffffff843ae4e0 [sctp_iterator]
4 0 0 0 DL (threaded) [cam]
100044 D - 0xffffffff83484340 [doneq0]
100045 D - 0xffffffff834842c0 [async]
100076 D - 0xffffffff83484140 [scanner]
3 0 0 0 DL (threaded) [crypto]
100041 D crypto_ 0xffffffff838ae3e0 [crypto]
100042 D crypto_ 0xfffffe00540ed230 [crypto returns 0]
100043 D crypto_ 0xfffffe00540ed280 [crypto returns 1]
14 0 0 0 DL seqstat 0xfffffe00079bec88 [sequencer 00]
13 0 0 0 DL (threaded) [geom]
100035 D - 0xffffffff836e4d20 [g_event]
100036 D - 0xffffffff836e4d40 [g_up]
100037 D - 0xffffffff836e4d60 [g_down]
2 0 0 0 RL (threaded) [clock]
100029 Run CPU 0 [clock (0)]
100030 I [clock (1)]
12 0 0 0 WL (threaded) [intr]
100012 I [swi6: task queue]
100013 I [swi6: Giant taskq]
100015 I [swi5: fast taskq]
100031 I [swi1: netisr 0]
100032 I [swi1: hpts]
100033 I [swi1: hpts]
100046 I [irq24: virtio_pci0]
100047 I [irq25: virtio_pci0]
100048 I [irq26: virtio_pci0]
100049 I [irq27: virtio_pci0]
100050 I [irq28: virtio_pci1]
100051 I [irq29: virtio_pci1]
100052 I [irq30: virtio_pci1]
100053 I [irq31: virtio_pci1]
100054 I [irq32: virtio_pci1]
100059 I [irq33: virtio_pci2]
100060 I [irq34: virtio_pci2]
100061 I [irq35: virtio_pci2]
100063 I [irq1: atkbd0]
100064 I [irq12: psm0]
100065 I [swi0: uart uart++]
100069 I [swi1: pf send]
11 0 0 0 RL (threaded) [idle]
100003 CanRun [idle: cpu0]
100004 CanRun [idle: cpu1]
1 0 1 0 RLs [init]
10 0 0 0 DL audit_w 0xffffffff838aee40 [audit]
0 0 0 0 DLs (threaded) [kernel]
100000 D swapin 0xffffffff836e5700 [swapper]
100005 D - 0xfffffe00540ded00 [softirq_0]
100006 D - 0xfffffe00540dec00 [softirq_1]
100007 D - 0xfffffe00540deb00 [if_io_tqg_0]
100008 D - 0xfffffe00540dea00 [if_io_tqg_1]
100009 D - 0xfffffe00540de900 [if_config_tqg_0]
100010 D - 0xfffffe00085ebe00 [pci_hp taskq]
100011 D - 0xfffffe00085ebd00 [kqueue_ctx taskq]
100014 D - 0xfffffe00085eba00 [thread taskq]
100016 D - 0xfffffe00085eb800 [aiod_kick taskq]
100017 D - 0xfffffe00085eb700 [deferred_unmount ta]
100018 D - 0xfffffe00085eb600 [inm_free taskq]
100019 D - 0xfffffe00085eb500 [in6m_free taskq]
100020 D - 0xfffffe00085eb400 [linuxkpi_irq_wq]
100021 D - 0xfffffe00085eb300 [linuxkpi_short_wq_0]
100022 D - 0xfffffe00085eb300 [linuxkpi_short_wq_1]
100023 D - 0xfffffe00085eb300 [linuxkpi_short_wq_2]
100024 D - 0xfffffe00085eb300 [linuxkpi_short_wq_3]
100025 D - 0xfffffe00085eb200 [linuxkpi_long_wq_0]
100026 D - 0xfffffe00085eb200 [linuxkpi_long_wq_1]
100027 D - 0xfffffe00085eb200 [linuxkpi_long_wq_2]
100028 D - 0xfffffe00085eb200 [linuxkpi_long_wq_3]
100034 D - 0xfffffe00085eb100 [firmware taskq]
100039 D - 0xfffffe00085eb000 [crypto_0]
100040 D - 0xfffffe00085eb000 [crypto_1]
100055 D - 0xfffffe00085ead00 [vtnet0 rxq 0]
100056 D - 0xfffffe00085eac00 [vtnet0 txq 0]
100057 D - 0xfffffe00085eab00 [vtnet0 rxq 1]
100058 D - 0xfffffe00085eaa00 [vtnet0 txq 1]
100062 D vtbslp 0xfffffe0057235300 [virtio_balloon]
100066 D - 0xffffffff826f34c1 [deadlkres]
100070 D - 0xfffffe0057bae200 [acpi_task_0]
100071 D - 0xfffffe0057bae200 [acpi_task_1]
100072 D - 0xfffffe0057bae200 [acpi_task_2]
100074 D - 0xfffffe00085ec100 [mca taskq]
100075 D - 0xfffffe00085eae00 [CAM taskq]
15315 1 424 0 Z rtsol
db> show all locks
Process 15316 (rtsol) thread 0xfffffe006d287740 (103291)
exclusive rw pmap pv list (pmap pv list) r = 0 (0xfffffe00077a9fc0) locked @ /syzkaller/managers/main/kernel/sys/amd64/amd64/pmap.c:8644
exclusive sleep mutex pmap (pmap) r = 0 (0xfffffe005423dad0) locked @ /syzkaller/managers/main/kernel/sys/amd64/amd64/pmap.c:8554
Process 2 (clock) thread 0xfffffe00542fe740 (100029)
exclusive rw nd6 DAD queue (nd6 DAD queue) r = 0 (0xfffffe00540a0178) locked @ /syzkaller/managers/main/kernel/sys/kern/kern_rwlock.c:176
db> show malloc
Type InUse MemUse Requests
pf_hash 5 11524K 5
tcp_hpts 7 4801K 7
devbuf 4192 4324K 4220
sysctloid 34934 2059K 35005
vtbuf 24 1968K 46
kobj 326 1304K 488
newblk 14 1028K 14881
vfscache 3 1025K 3
inodedep 444 679K 17177
pcb 26 669K 1306
ufs_quota 1 512K 1
vfs_hash 1 512K 1
callout 2 512K 2
intr 4 472K 4
subproc 150 278K 16533
vnet_data 2 224K 2
acpitask 1 224K 1
acpica 1674 184K 60830
tidhash 3 141K 3
vmem 3 138K 5
pagedep 9 130K 14155
linker 352 130K 386
tfo_ccache 1 128K 1
IP reass 1 128K 1
DEVFS1 114 114K 141
dirrem 431 108K 17089
sem 4 106K 4
gtaskqueue 18 98K 18
bus 985 81K 5155
mtx_pool 2 72K 2
BPF 38 71K 59
syncache 1 68K 1
NFSD srvcache 3 68K 3
module 512 64K 512
ddb_capture 1 64K 1
filedesc 8 57K 28346
freefile 420 53K 17076
umtx 368 46K 368
kdtrace 222 45K 31086
LRO 40 41K 52
temp 35 37K 2888
hostcache 1 32K 1
shm 1 32K 1
DEVFS3 128 32K 143
msg 4 30K 4
kbdmux 6 28K 6
routetbl 453 26K 1350
DEVFS_RULE 56 20K 56
ifaddr 70 20K 121
ufs_mount 4 17K 5
proc 3 17K 3
cred 65 17K 1684
tty 16 16K 16
ithread 97 16K 97
bus-sc 34 15K 1687
ifnet 8 15K 12
eventhandler 161 14K 161
KTRACE 100 13K 100
ether_multi 153 13K 368
kenv 95 12K 95
lltable 38 12K 86
GEOM 61 11K 481
rman 86 11K 429
CAM queue 5 11K 1528
in6_multi 69 10K 143
bmsafemap 3 9K 17141
rpc 4 9K 4
devstat 4 9K 4
UART 12 9K 12
ksem 1 8K 1
shmfd 1 8K 2563
pfs_vncache 1 8K 1
audit_evclass 238 8K 300
taskqueue 63 7K 63
sglist 6 7K 6
kqueue 63 7K 15339
CAM DEV 3 6K 510
pf_ifnet 15 6K 44
plimit 22 6K 489
pfs_nodes 20 5K 20
hhook 15 5K 17
ufs_dirhash 24 5K 24
UMA 268 5K 268
vt 11 5K 11
memdesc 1 4K 1
MCA 32 4K 32
session 32 4K 1249
evdev 4 4K 4
pwddesc 59 4K 15320
acpisem 28 4K 28
proc-args 92 4K 16942
lockf 30 4K 65
DEVFSP 52 4K 403
selfd 48 3K 195724
ip6ndp 16 3K 30
terminal 11 3K 11
kcovinfo 39 3K 117
clone 9 3K 9
select 18 3K 71
uidinfo 3 3K 10
freework 9 3K 14149
local_apic 1 2K 1
io_apic 1 2K 1
freeblks 8 2K 14148
ipsec-saq 2 2K 2
tun 7 2K 12
CAM XPT 22 2K 543
Unitno 25 2K 165
sctp_ifa 12 2K 27
msi 12 2K 12
toponodes 6 2K 6
ipsecpolicy 2 2K 2
in_multi 5 2K 14
acpidev 20 2K 20
softdep 1 1K 1
sahead 1 1K 1
secasvar 1 1K 1
CC Mem 4 1K 470
nhops 6 1K 8
vnodemarker 2 1K 48
NFSD session 1 1K 1
procdesc 7 1K 28
CAM periph 4 1K 271
ipsec 3 1K 3
sctp_ifn 6 1K 27
mkdir 6 1K 28268
mld 6 1K 11
igmp 6 1K 11
pfil 6 1K 6
isadev 6 1K 6
mount 16 1K 89
pci_link 10 1K 10
crypto 4 1K 4
encap_export_host 12 1K 12
cdev 2 1K 2
inpcbpolicy 14 1K 3398
osd 9 1K 483
newdirblk 3 1K 14134
diradd 3 1K 17125
netlink 2 1K 2
chacha20random 1 1K 1
biobuf 1 1K 1
vnodes 1 1K 1
NFSD lckfile 1 1K 1
NFSD V4client 1 1K 1
DEVFS 9 1K 10
CAM SIM 2 1K 2
feeder 7 1K 7
tcpfunc 3 1K 3
loginclass 3 1K 6
prison 6 1K 6
filecaps 6 1K 152
lkpikmalloc 5 1K 6
cryptodev 2 1K 301
nexusdev 8 1K 8
apmdev 1 1K 1
atkbddev 2 1K 2
aio 4 1K 4
pmchooks 1 1K 1
CAM path 4 1K 1034
CAM dev queue 2 1K 2
CAM I/O Scheduler 1 1K 1
soname 4 1K 3858
sctp_vrf 1 1K 1
vnet 1 1K 1
pmc 1 1K 1
entropy 2 1K 53
acpiintr 1 1K 1
cpus 2 1K 2
vnet_data_free 1 1K 1
Per-cpu 1 1K 1
p1003.1b 1 1K 1
mqdata 0 0K 0
tcp_do 0 0K 0
tcp_fsb 0 0K 0
ipcomp 0 0K 0
esp 0 0K 0
ah 0 0K 0
sctp_mcore 0 0K 0
sctp_socko 0 0K 80
sctp_iter 0 0K 36
sctp_mvrf 0 0K 0
sctp_timw 0 0K 0
sctp_cpal 0 0K 0
sctp_cmsg 0 0K 0
sctp_stre 0 0K 0
sctp_athi 0 0K 0
sctp_athm 0 0K 312
sctp_atky 0 0K 312
sctp_atcl 0 0K 312
sctp_a_it 0 0K 36
sctp_aadr 0 0K 0
sctp_stro 0 0K 0
sctp_stri 0 0K 0
sctp_map 0 0K 0
filemon 0 0K 0
pf_table 0 0K 0
pf_rule 0 0K 0
pf_altq 0 0K 0
pf_osfp 0 0K 0
pf_krule_item 0 0K 0
pf_temp 0 0K 0
madt_table 0 0K 2
smartpqi 0 0K 0
ixl 0 0K 0
ice-resmgr 0 0K 0
ice-osdep 0 0K 0
ice 0 0K 0
iavf 0 0K 0
axgbe 0 0K 0
fpukern_ctx 0 0K 0
xen_intr 0 0K 0
xen_hvm 0 0K 0
legacydrv 0 0K 0
bounce 0 0K 0
busdma 0 0K 0
qpidrv 0 0K 0
dmar_idpgtbl 0 0K 0
dmar_dom 0 0K 0
dmar_ctx 0 0K 0
isci 0 0K 0
iommu_dmamap 0 0K 0
hyperv_socket 0 0K 0
bxe_ilt 0 0K 0
aesni_data 0 0K 0
xenbus 0 0K 0
vm_fictitious 0 0K 0
UMAHash 0 0K 0
vm_pgdata 0 0K 0
jblocks 0 0K 0
savedino 0 0K 13743
sentinel 0 0K 0
jfsync 0 0K 0
jtrunc 0 0K 0
sbdep 0 0K 22
jsegdep 0 0K 0
jseg 0 0K 0
jfreefrag 0 0K 0
jfreeblk 0 0K 0
jnewblk 0 0K 0
jmvref 0 0K 0
jremref 0 0K 0
jaddref 0 0K 0
freedep 0 0K 0
freefrag 0 0K 2
allocindir 0 0K 0
indirdep 0 0K 10
allocdirect 0 0K 0
ufs_trim 0 0K 0
mactemp 0 0K 0
audit_trigger 0 0K 0
audit_pipe_presel 0 0K 0
audit_pipeent 0 0K 0
audit_pipe 0 0K 0
audit_evname 0 0K 0
audit_bsm 0 0K 0
audit_gidset 0 0K 0
audit_text 0 0K 0
audit_path 0 0K 0
audit_data 0 0K 0
audit_cred 0 0K 0
ktls_ocf 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5E_TLS_RX 0 0K 0
MLX5EEPROM 0 0K 0
MLX5E_TLS 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EN 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5DUMP 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
simple_attr 0 0K 0
seq_file 0 0K 0
lkpiskb 0 0K 0
radix 0 0K 0
idr 0 0K 0
lkpindev 0 0K 0
lkpimhi 0 0K 0
lkpifw 0 0K 0
lkpi80211 0 0K 0
NLM 0 0K 0
ipsec-spdcache 0 0K 0
ipsec-reg 0 0K 0
ipsec-misc 0 0K 0
ipsecrequest 0 0K 0
ip6opt 0 0K 150
ip6_msource 0 0K 0
ip6_moptions 0 0K 0
in6_mfilter 0 0K 0
frag6 0 0K 0
tcplog 0 0K 0
tcp_hwpace 0 0K 0
ip_msource 0 0K 0
ip_moptions 0 0K 0
in_mfilter 0 0K 0
ipid 0 0K 0
80211scan 0 0K 0
80211ratectl 0 0K 0
80211power 0 0K 0
80211nodeie 0 0K 0
80211node 0 0K 0
80211mesh_gt 0 0K 0
80211mesh_rt 0 0K 0
80211perr 0 0K 0
80211prep 0 0K 0
80211preq 0 0K 0
80211dfs 0 0K 0
80211crypto 0 0K 0
80211vap 0 0K 0
iflib 0 0K 0
vlan 0 0K 0
gif 0 0K 0
ifdescr 0 0K 0
zlib 0 0K 0
fadvise 0 0K 0
VN POLL 0 0K 0
statfs 0 0K 219
namei_tracker 0 0K 55
export_host 0 0K 0
cl_savebuf 0 0K 3
lio 0 0K 0
acl 0 0K 0
mbuf_tag 0 0K 0
ktls 0 0K 0
accf 0 0K 0
pts 0 0K 0
timerfd 0 0K 0
iov 0 0K 19162
ioctlops 0 0K 7304
eventfd 0 0K 2137
Witness 0 0K 0
stack 0 0K 0
sbuf 0 0K 288
firmware 0 0K 0
compressor 0 0K 0
SWAP 0 0K 0
sysctltmp 0 0K 954
sysctl 0 0K 3
ekcd 0 0K 0
dumper 0 0K 0
sendfile 0 0K 0
rctl 0 0K 0
cache 0 0K 0
prison_racct 0 0K 0
Fail Points 0 0K 0
sigio 0 0K 1
filedesc_to_leader 0 0K 0
pwd 0 0K 0
tty console 0 0K 0
boottrace 0 0K 0
isofs_node 0 0K 0
isofs_mount 0 0K 0
tr_raid5_data 0 0K 0
tr_raid1e_data 0 0K 0
tr_raid1_data 0 0K 0
tr_raid0_data 0 0K 0
tr_concat_data 0 0K 0
md_sii_data 0 0K 0
md_promise_data 0 0K 0
md_nvidia_data 0 0K 0
md_jmicron_data 0 0K 0
md_intel_data 0 0K 0
md_ddf_data 0 0K 0
raid_data 0 0K 72
geom_flashmap 0 0K 0
tmpfs dir 0 0K 0
tmpfs name 0 0K 0
tmpfs mount 0 0K 0
tmpfs extattr 0 0K 0
NFS FHA 0 0K 0
newnfsmnt 0 0K 0
newnfsclient_req 0 0K 0
NFSCL layrecall 0 0K 0
NFSCL session 0 0K 0
NFSCL sockreq 0 0K 0
NFSCL devinfo 0 0K 0
NFSCL flayout 0 0K 0
NFSCL layout 0 0K 0
NFSD rollback 0 0K 0
NFSCL diroff 0 0K 0
NEWdirectio 0 0K 0
NEWNFSnode 0 0K 0
NFSCL lck 0 0K 0
NFSCL lckown 0 0K 0
NFSCL client 0 0K 0
NFSCL deleg 0 0K 0
NFSCL open 0 0K 0
NFSCL owner 0 0K 0
NFS fh 0 0K 0
NFS req 0 0K 0
NFSD usrgroup 0 0K 0
NFSD string 0 0K 0
NFSD V4lock 0 0K 0
NFSD V4state 0 0K 0
msdosfs_fat 0 0K 0
msdosfs_mount 0 0K 0
msdosfs_node 0 0K 0
DEVFS4 0 0K 0
DEVFS2 0 0K 0
gntdev 0 0K 0
privcmd_dev 0 0K 0
evtchn_dev 0 0K 0
xenstore 0 0K 0
xnb 0 0K 0
xen_acpi 0 0K 0
xbbd 0 0K 0
xbd 0 0K 0
Balloon 0 0K 0
sysmouse 0 0K 0
vtfont 0 0K 0
pvscsi 0 0K 0
USBdev 0 0K 0
USB 0 0K 0
twsbuf 0 0K 0
tcp_log_dev 0 0K 0
midi buffers 0 0K 0
mixer 0 0K 0
ac97 0 0K 0
hdacc 0 0K 0
hdac 0 0K 0
hdaa 0 0K 0
SIIS driver 0 0K 0
PUC 0 0K 0
ppbusdev 0 0K 0
sr_iov 0 0K 0
OCS 0 0K 0
OCS 0 0K 0
nvme 0 0K 0
nvd 0 0K 0
netmap 0 0K 0
mwldev 0 0K 0
MVS driver 0 0K 0
mrsasbuf 0 0K 0
mpt_user 0 0K 0
mps_user 0 0K 0
MPSSAS 0 0K 0
mps 0 0K 0
mpr_user 0 0K 0
MPRSAS 0 0K 0
mpr 0 0K 0
mfibuf 0 0K 0
md_sectors 0 0K 0
md_disk 0 0K 0
malodev 0 0K 0
LED 0 0K 0
ix_sriov 0 0K 0
ix 0 0K 0
ipsbuf 0 0K 0
ciss_data 0 0K 0
BACKLIGHT 0 0K 0
ath_hal 0 0K 0
athdev 0 0K 0
ata_pci 0 0K 0
ata_dma 0 0K 0
ata_generic 0 0K 0
AHCI driver 0 0K 0
agp 0 0K 0
acpipwr 0 0K 0
acpi_perf 0 0K 0
acpicmbat 0 0K 0
aacraidcam 0 0K 0
aacraid_buf 0 0K 0
aaccam 0 0K 0
aacbuf 0 0K 0
zstd 0 0K 0
XZ_DEC 0 0K 0
nvlist 0 0K 0
SCSI ENC 0 0K 0
SCSI sa 0 0K 0
scsi_pass 0 0K 0
scsi_da 0 0K 69
ata_da 0 0K 0
scsi_ch 0 0K 0
scsi_cd 0 0K 0
nvme_da 0 0K 0
CAM CCB 0 0K 523
CAM ccb queue 0 0K 0
db> show uma
Zone Size Used Free Requests Sleeps Bucket Total Mem XFree
mbuf_jumbo_page 4096 8320 1078 29579 0 254 38494208 0
malloc-384 384 4594 2126 21334 0 30 2580480 0
mbuf 256 8630 1033 80376 0 254 2473728 0
BUF TRIE 144 200 11616 930 0 62 1701504 0
mbuf_cluster 2048 762 0 762 0 254 1560576 0
malloc-128 128 11449 145 11473 0 126 1484032 0
malloc-4096 4096 327 3 568 0 2 1351680 0
UMA Slabs 0 112 10814 16 10814 0 126 1212960 0
vmem btag 56 16836 51 16836 0 254 945672 0
RADIX NODE 144 5526 741 410980 0 62 902448 0
malloc-256 256 533 2197 35242 0 62 698880 0
malloc-256 256 226 2324 44624 0 62 652800 0
FFS inode 1160 523 23 17599 0 8 633360 0
sctp_ep 1176 0 510 312 0 254 599760 0
lkpimm 168 1 3095 1 0 62 520128 0
lkpicurr 168 2 3094 2 0 62 520128 0
pbuf 2624 0 198 0 0 2 519552 0
socket 960 44 464 5122 0 254 487680 0
VM OBJECT 264 1491 99 181202 0 30 419760 0
malloc-128 128 442 2224 17124 0 126 341248 0
THREAD 1824 160 24 15765 0 8 335616 0
malloc-65536 65536 4 1 12 0 1 327680 0
256 Bucket 2048 141 19 1208 0 8 327680 0
VNODE 448 561 105 17644 0 30 298368 0
malloc-64 64 3843 504 4552 0 254 278208 0
malloc-4096 4096 61 5 15320 0 2 270336 0
malloc-16 16 14435 315 14495 0 254 236000 0
malloc-16384 16384 5 9 14170 0 1 229376 0
malloc-2048 2048 13 99 1094 0 8 229376 0
DEVCTL 1024 49 171 223 0 0 225280 0
malloc-65536 65536 1 2 243 0 1 196608 0
mbuf_packet 256 31 731 12833 0 254 195072 0
malloc-128 128 1333 186 30005 0 126 194432 0
malloc-32 32 5314 608 9110 0 254 189504 0
UMA Zones 768 240 4 240 0 16 187392 0
MAP ENTRY 96 1553 337 498724 0 126 181440 0
FPU_save_area 832 162 54 16336 0 16 179712 0
FFS2 dinode 256 523 167 17599 0 62 176640 0
malloc-32768 32768 3 2 123 0 1 163840 0
S VFS Cache 104 1019 502 21008 0 126 158184 0
malloc-1024 1024 125 19 307 0 16 147456 0
malloc-65536 65536 0 2 110 0 1 131072 0
malloc-65536 65536 2 0 2 0 1 131072 0
malloc-128 128 767 256 21003 0 126 130944 0
unpcb 256 26 484 1358 0 254 130560 0
PROC 1376 60 28 15319 0 8 121088 0
tcp_inpcb 1312 4 86 470 0 8 118080 0
128 Bucket 1024 74 41 804 0 16 117760 0
ksiginfo 112 71 973 677 0 126 116928 0
malloc-128 128 598 301 18604 0 126 115072 0
malloc-4096 4096 18 8 26 0 2 106496 0
64 Bucket 512 160 40 11379 0 30 102400 0
malloc-32768 32768 3 0 3 0 1 98304 0
pipe 728 19 113 4598 0 16 96096 0
filedesc0 1072 59 25 15320 0 8 90048 0
UMA Kegs 384 227 6 227 0 30 89472 0
malloc-256 256 216 99 2340 0 62 80640 0
32 Bucket 256 147 168 24958 0 62 80640 0
malloc-8192 8192 7 2 110 0 1 73728 0
malloc-4096 4096 14 4 246 0 2 73728 0
g_bio 408 0 180 7135 0 30 73440 0
ripcb 392 4 176 909 0 30 70560 0
malloc-64 64 796 275 16515 0 254 68544 0
malloc-64 64 579 492 2142 0 254 68544 0
malloc-65536 65536 1 0 1 0 1 65536 0
malloc-16384 16384 4 0 4 0 1 65536 0
malloc-4096 4096 12 4 523 0 2 65536 0
udplite_inpcb 424 0 126 1526 0 30 53424 0
udp_inpcb 424 6 120 493 0 30 53424 0
malloc-64 64 310 509 226606 0 254 52416 0
Files 80 200 450 51206 0 126 52000 0
VMSPACE 616 39 45 15300 0 16 51744 0
malloc-128 128 85 318 28815 0 126 51584 0
DIRHASH 1024 35 13 35 0 16 49152 0
NAMEI 1024 0 48 98007 0 16 49152 0
malloc-16384 16384 1 2 161 0 1 49152 0
malloc-8192 8192 6 0 6 0 1 49152 0
malloc-2048 2048 7 17 560 0 8 49152 0
malloc-2048 2048 20 4 26 0 8 49152 0
malloc-1024 1024 22 26 27 0 16 49152 0
malloc-1024 1024 4 44 529 0 16 49152 0
malloc-384 384 66 54 723 0 30 46080 0
malloc-384 384 89 31 89 0 30 46080 0
syncache 168 0 264 4 0 254 44352 0
pcpu-8 8 4856 264 5786 0 254 40960 0
AIOCB 552 0 70 3065 0 16 38640 0
malloc-64 64 15 552 17523 0 254 36288 0
malloc-64 64 37 530 51 0 254 36288 0
malloc-64 64 26 541 717 0 254 36288 0
malloc-64 64 23 544 27 0 254 36288 0
malloc-32 32 571 563 1396 0 254 36288 0
malloc-128 128 37 242 212 0 126 35712 0
malloc-128 128 77 202 135 0 126 35712 0
routing nhops 256 25 110 60 0 62 34560 0
ttyoutq 256 72 63 160 0 62 34560 0
malloc-384 384 36 54 136 0 30 34560 0
malloc-256 256 44 91 29016 0 62 34560 0
malloc-256 256 66 69 131 0 62 34560 0
malloc-256 256 10 125 15306 0 62 34560 0
malloc-256 256 57 78 1500 0 62 34560 0
malloc-256 256 54 81 425 0 62 34560 0
TURNSTILE 136 185 67 185 0 62 34272 0
SLEEPQUEUE 88 185 199 185 0 126 33792 0
malloc-32768 32768 1 0 1 0 1 32768 0
malloc-32768 32768 1 0 1 0 1 32768 0
malloc-8192 8192 4 0 4 0 1 32768 0
malloc-2048 2048 3 13 47 0 8 32768 0
malloc-2048 2048 2 14 2 0 8 32768 0
malloc-2048 2048 10 6 95 0 8 32768 0
malloc-1024 1024 2 30 43 0 16 32768 0
malloc-1024 1024 17 15 4075 0 16 32768 0
malloc-1024 1024 3 29 3 0 16 32768 0
malloc-512 512 0 64 118 0 30 32768 0
malloc-512 512 3 61 49 0 30 32768 0
malloc-512 512 12 52 88 0 30 32768 0
malloc-512 512 0 64 7185 0 30 32768 0
malloc-512 512 2 62 51 0 30 32768 0
malloc-512 512 9 55 13 0 30 32768 0
pcpu-64 64 487 25 487 0 254 32768 0
ertt_txseginfo 40 0 808 20454 0 254 32320 0
PWD 40 16 792 14229 0 254 32320 0
KNOTE 160 22 178 98402 0 62 32000 0
ttyinq 160 135 65 300 0 62 32000 0
PGRP 120 32 232 1249 0 126 31680 0
clpbuf 2624 0 12 25 0 4 31488 0
malloc-32 32 354 528 4500 0 254 28224 0
16 Bucket 144 65 131 399 0 62 28224 0
4 Bucket 48 5 583 7 0 254 28224 0
AIO 208 0 133 3201 0 62 27664 0
da_ccb 544 0 49 1909 0 16 26656 0
cpuset 200 7 121 168 0 62 25600 0
malloc-8192 8192 3 0 3 0 1 24576 0
malloc-8192 8192 3 0 3 0 1 24576 0
malloc-4096 4096 4 2 16 0 2 24576 0
rl_entry 40 85 521 85 0 254 24240 0
rtentry 168 28 116 60 0 62 24192 0
8 Bucket 80 62 238 2741 0 126 24000 0
itimer 352 0 66 1125 0 30 23232 0
domainset 40 0 567 113 0 254 22680 0
hostcache 64 1 314 1 0 254 20160 0
udp_inpcb ports 32 3 627 33 0 254 20160 0
tcp_inpcb ports 32 2 628 2 0 254 20160 0
ertt 72 4 276 470 0 126 20160 0
malloc-32 32 40 590 218 0 254 20160 0
malloc-32 32 13 617 14208 0 254 20160 0
malloc-32 32 35 595 303 0 254 20160 0
malloc-32 32 26 604 1064 0 254 20160 0
2 Bucket 32 56 574 1790 0 254 20160 0
epoch_record pcpu 256 4 60 4 0 62 16384 0
malloc-4096 4096 0 4 859 0 2 16384 0
malloc-1024 1024 5 11 6 0 16 16384 0
malloc-512 512 1 31 1 0 30 16384 0
SMR CPU 32 7 504 7 0 254 16352 0
sctp_laddr 48 0 336 37 0 254 16128 0
vtnet_tx_hdr 24 0 668 22658 0 254 16032 0
malloc-16 16 482 518 3874 0 254 16000 0
kenv 258 17 43 1094 0 30 15480 0
mqnode 416 3 33 3 0 30 14976 0
vmem 1856 1 7 1 0 8 14848 0
SMR SHARED 24 7 504 7 0 254 12264 0
malloc-32 32 13 365 32 0 254 12096 0
malloc-16 16 11 739 233 0 254 12000 0
malloc-16 16 49 701 174 0 254 12000 0
malloc-16 16 69 681 28868 0 254 12000 0
malloc-16 16 59 691 16163 0 254 12000 0
malloc-16 16 4 746 11 0 254 12000 0
malloc-384 384 0 30 3 0 30 11520 0
malloc-384 384 11 19 11 0 30 11520 0
malloc-384 384 1 29 1 0 30 11520 0
Mountpoints 2816 2 2 2 0 4 11264 0
malloc-8192 8192 0 1 26 0 1 8192 0
malloc-8192 8192 1 0 1 0 1 8192 0
pcpu-16 16 4 252 4 0 254 4096 0
UMA Slabs 1 176 9 13 9 0 62 3872 0
KMAP ENTRY 96 12 27 14 0 0 3744 0
FFS1 dinode 128 0 0 0 0 126 0 0
ada_ccb 272 0 0 0 0 30 0 0
swblk 136 0 0 0 0 62 0 0
swpctrie 144 0 0 0 0 62 0 0
cdg_qdiffsample 16 0 0 0 0 254 0 0
pf state scrubs 40 0 0 0 0 254 0 0
pf frag entries 40 0 0 0 0 254 0 0
pf frags 248 0 0 0 0 62 0 0
pf table entries 160 0 0 0 0 254 0 0
pf table entry counters 64 0 0 0 0 254 0 0
pf source nodes 152 0 0 0 0 254 0 0
pf state keys 88 0 0 0 0 126 0 0
pf states 352 0 0 0 0 254 0 0
pf tags 104 0 0 0 0 126 0 0
pf mtags 184 0 0 0 0 62 0 0
tcp_rack_pcb 1024 0 0 0 0 16 0 0
tcp_rack_map 128 0 0 0 0 126 0 0
tcp_bbr_pcb 832 0 0 0 0 16 0 0
tcp_bbr_map 128 0 0 0 0 126 0 0
tfo_ccache_entries 80 0 0 0 0 126 0 0
tfo 4 0 0 0 0 254 0 0
sackhole 32 0 0 0 0 254 0 0
ipq 56 0 0 0 0 254 0 0
sctp_asconf_ack 48 0 0 0 0 254 0 0
sctp_asconf 40 0 0 0 0 254 0 0
sctp_stream_msg_out 112 0 0 0 0 254 0 0
sctp_readq 152 0 0 0 0 254 0 0
sctp_chunk 152 0 0 0 0 254 0 0
sctp_raddr 736 0 0 0 0 254 0 0
sctp_asoc 2256 0 0 0 0 254 0 0
tcp_log_id_node 120 0 0 0 0 126 0 0
tcp_log_id_bucket 176 0 0 0 0 62 0 0
tcp_log 416 0 0 0 0 254 0 0
tcpreass 48 0 0 0 0 254 0 0
udplite_inpcb ports 32 0 0 0 0 254 0 0
ripcb ports 32 0 0 0 0 254 0 0
IPsec SA lft_c 16 0 0 0 0 254 0 0
netlink 2048 0 0 0 0 8 0 0
AIOLIO 272 0 0 0 0 30 0 0
mqnotifier 216 0 0 0 0 62 0 0
mvdata 64 0 0 0 0 254 0 0
mqueue 248 0 0 0 0 62 0 0
TMPFS node 232 0 0 0 0 62 0 0
NCLNODE 608 0 0 0 0 16 0 0
LTS VFS Cache 360 0 0 0 0 30 0 0
L VFS Cache 320 0 0 0 0 30 0 0
STS VFS Cache 144 0 0 0 0 62 0 0
cryptop 280 0 0 0 0 30 0 0
linux_dma_object 32 0 0 0 0 254 0 0
linux_dma_pctrie 144 0 0 0 0 62 0 0
IOMMU_MAP_ENTRY 104 0 0 0 0 126 0 0
mbuf_jumbo_16k 16384 0 0 0 0 254 0 0
mbuf_jumbo_9k 9216 0 0 0 0 254 0 0
audit_record 1280 0 0 0 0 8 0 0
MAC labels 40 0 0 0 0 254 0 0
vnpbuf 2624 0 0 0 0 16 0 0
nfspbuf 2624 0 0 0 0 4 0 0
swwbuf 2624 0 0 0 0 2 0 0
swrbuf 2624 0 0 0 0 4 0 0
umtx_shm 88 0 0 0 0 126 0 0
umtx pi 96 0 0 0 0 126 0 0
rangeset pctrie nodes 144 0 0 0 0 62 0 0
malloc-65536 65536 0 0 0 0 1 0 0
malloc-65536 65536 0 0 0 0 1 0 0
malloc-65536 65536 0 0 0 0 1 0 0
malloc-
---
This report is generated by a bot. It may contain errors.
See https://goo.gl/tpsmEJ for more information about syzbot.
syzbot engineers can be reached at syzk...@googlegroups.com.
syzbot will keep track of this issue. See:
https://goo.gl/tpsmEJ#status for how to communicate with syzbot.
If the report is already addressed, let syzbot know by replying with:
#syz fix: exact-commit-title
If you want to overwrite report's subsystems, reply with:
#syz set subsystems: new-subsystem
(See the list of subsystem names on the web dashboard)
If the report is a duplicate of another one, reply with:
#syz dup: exact-subject-of-another-report
If you want to undo deduplication, reply with:
#syz undup
syzbot found the following issue on:
HEAD commit: e4967d4d48b0 lockf: switch to strtonum() for parsing timeout
git tree: freebsd-src
console output: https://syzkaller.appspot.com/x/log.txt?x=17a9a4d8e80000
dashboard link: https://syzkaller.appspot.com/bug?extid=1778b08d8e798b8dfada
Unfortunately, I don't have any reproducer for this issue yet.
IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+1778b0...@syzkaller.appspotmail.com
Fatal trap 12: page fault while in kernel mode
cpuid = 0; apic id = 00
fault virtual address = 0x10
fault code = supervisor read data, page not present
instruction pointer = 0x20:0xffffffff81a54eee
stack pointer = 0x28:0xfffffe0053fc5ae0
frame pointer = 0x28:0xfffffe0053fc5cb0
code segment = base 0x0, limit 0xfffff, type 0x1b
= DPL 0, pres 1, long 1, def32 0, gran 1
processor eflags = interrupt enabled, resume, IOPL = 0
current process = 2 (clock (0))
rdi: 0000000000000010 rsi: 000000000000001c rdx: 000000000000014a
rcx: fffffe00033eee30 r8: 0000000000000000 r9: 0000000000000279
FreeBSD/amd64rax: fffffe00033eee30 rbx: fffffe00079e7800 rbp: fffffe0053fc5cb0
r10: 69a4a67b82f495ff r11: 0000000000000006 r12: 0000000000000000
r13: fffff7800a7f8b68 r14: fffffe0053fc5c20 r15: fffffe00542fe740
trap number = 12
panic: page fault
cpuid = 0
time = 1701044399
KDB: stack backtrace:
db_trace_self_wrapper() at db_trace_self_wrapper+0xc6/frame 0xfffffe0053fc5210
kdb_backtrace() at kdb_backtrace+0xd0/frame 0xfffffe0053fc5370
vpanic() at vpanic+0x271/frame 0xfffffe0053fc5510
panic() at panic+0xb5/frame 0xfffffe0053fc55d0
trap_fatal() at trap_fatal+0x7ee/frame 0xfffffe0053fc56f0
trap_pfault() at trap_pfault+0x17b/frame 0xfffffe0053fc5830
trap() at trap+0x5f3/frame 0xfffffe0053fc5a10
calltrap() at calltrap+0x8/frame 0xfffffe0053fc5a10
--- trap 0xc, rip = 0xffffffff81a54eee, rsp = 0xfffffe0053fc5ae0, rbp = 0xfffffe0053fc5cb0 ---
nd6_dad_timer() at nd6_dad_timer+0x19e/frame 0xfffffe0053fc5cb0
softclock_call_cc() at softclock_call_cc+0x40a/frame 0xfffffe0053fc5e80
softclock_thread() at softclock_thread+0x200/frame 0xfffffe0053fc5ef0
fork_exit() at fork_exit+0xcc/frame 0xfffffe0053fc5f30
fork_trampoline() at fork_trampoline+0xe/frame 0xfffffe0053fc5f30
--- trap 0, rip = 0, rsp = 0, rbp = 0 ---
KDB: enter: panic
[ thread pid 2 tid 100029 ]
Stopped at kdb_enter+0x6e: movq $0,0x2193207(%rip)
db> set $lines = 0
db> set $maxwidth = 0
db> show registers
cs 0x20
ds 0x3b
es 0x3b
fs 0x13
gs 0x1b
ss 0x28
rax 0x12
rcx 0xfffffe00033eee30
rdx 0xdffff7c000000000
rbx 0xffffffff826ee260 .str.28
rsp 0xfffffe0053fc5350
rbp 0xfffffe0053fc5370
rsi 0x1
rdi 0
r8 0
r9 0xffffffff
r10 0x1
r11 0x1
r12 0
r13 0xfffffe00542fe740
r14 0xffffffff826ee260 .str.28
r15 0
rip 0xffffffff815c7e0e kdb_enter+0x6e
rflags 0x46
kdb_enter+0x6e: movq $0,0x2193207(%rip)
db> show proc
Process 2 (clock) at 0xfffffe0054233020:
state: NORMAL
uid: 0 gids: 0
parent: pid 0 at 0xffffffff836e5700
ABI: null
flag: 0x10000284 flag2: 0
reaper: 0xffffffff836e5700 reapsubtree: 2
sigparent: 20
vmspace: 0xffffffff836e66a0
(map 0xffffffff836e66a0)
(map.pmap 0xffffffff836e6760)
(pmap 0xffffffff836e67d0)
threads: 2
100029 Run CPU 0 [clock (0)]
100030 I [clock (1)]
db> ps
pid ppid pgrp uid state wmesg wchan cmd
15319 15316 424 0 R rtsol
15318 15316 15318 0 Ss select 0xfffffe0057b04ac0 rtsol
15317 15316 424 0 R rtsol
15316 1 424 0 RE CPU 1 rtsol
15314 15249 424 0 R rtsol
15249 15243 424 0 S wait 0xfffffe0007c22b00 sh
15243 424 424 0 S wait 0xfffffe006d2b7580 sh
4851 1 4851 65 Ss select 0xfffffe0057b040c0 dhclient
3847 1 3847 0 Ss select 0xfffffe0057b04240 dhclient
3844 1 3844 0 Ss select 0xfffffe0057b041c0 dhclient
3169 1 3169 65 Ss select 0xfffffe005724a440 dhclient
2078 1 2078 0 Ss select 0xfffffe005724a0c0 dhclient
2075 1 2075 0 Ss select 0xfffffe005724a140 dhclient
2056 1 2056 65 Ss select 0xfffffe005724a240 dhclient
1044 1 1044 0 Ss select 0xfffffe005724a2c0 dhclient
1041 1 1041 0 Ss select 0xfffffe0057234940 dhclient
826 0 0 0 DL aiordy 0xfffffe006cc30b00 [aiod4]
825 0 0 0 DL aiordy 0xfffffe006cc31060 [aiod3]
824 0 0 0 DL aiordy 0xfffffe006cc315c0 [aiod2]
823 0 0 0 DL aiordy 0xfffffe006cdf4580 [aiod1]
776 770 776 0 Ss piperd 0xfffffe0058a1d998 syz-executor.2
773 770 773 0 Ss piperd 0xfffffe0058a1d110 syz-executor.1
772 770 772 0 Ss piperd 0xfffffe0058a1c5b0 syz-executor.0
770 768 768 0 S (threaded) syz-fuzzer
100111 S wait 0xfffffe00571fcae0 syz-fuzzer
100113 S uwait 0xfffffe0058959f00 syz-fuzzer
100114 S uwait 0xfffffe005895a080 syz-fuzzer
100115 S wait 0xfffffe00571fcae0 syz-fuzzer
100116 S uwait 0xfffffe005895a280 syz-fuzzer
100117 S uwait 0xfffffe0057ae7080 syz-fuzzer
100118 S kqread 0xfffffe00576c3600 syz-fuzzer
100120 S uwait 0xfffffe00571e5e00 syz-fuzzer
100121 S wait 0xfffffe00571fcae0 syz-fuzzer
100123 S uwait 0xfffffe0058958c80 syz-fuzzer
100132 S uwait 0xfffffe0057ae7f00 syz-fuzzer
100192 S uwait 0xfffffe0058958580 syz-fuzzer
100373 S uwait 0xfffffe00571e2c00 syz-fuzzer
768 766 768 0 Ss pause 0xfffffe006d1fa0b0 csh
766 682 766 0 Ss select 0xfffffe005724a740 sshd
748 1 748 0 Ss+ ttyin 0xfffffe00540d18b0 getty
747 1 747 0 Ss+ ttyin 0xfffffe0007c3b0b0 getty
746 1 746 0 Ss+ ttyin 0xfffffe0007c3b4b0 getty
745 1 745 0 Ss+ ttyin 0xfffffe0007c3b8b0 getty
744 1 744 0 Ss+ ttyin 0xfffffe0007c3bcb0 getty
743 1 743 0 Ss+ ttyin 0xfffffe0007c3c0b0 getty
742 1 742 0 Ss+ ttyin 0xfffffe0007c3c4b0 getty
741 1 741 0 Ss+ ttyin 0xfffffe0007c3c8b0 getty
740 1 740 0 Ss+ ttyin 0xfffffe0007c3ccb0 getty
686 1 686 0 Ss nanslp 0xffffffff8373c3c1 cron
682 1 682 0 Ss select 0xfffffe0057234f40 sshd
495 1 495 0 Ss select 0xfffffe0057234cc0 syslogd
424 1 424 0 Ss wait 0xfffffe006cc2fae0 devd
423 1 423 65 Ss select 0xfffffe0057b044c0 dhclient
338 1 338 0 Ss select 0xfffffe0057234dc0 dhclient
335 1 335 0 Ss select 0xfffffe0057b045c0 dhclient
17 0 0 0 DL syncer 0xffffffff83859b20 [syncer]
16 0 0 0 DL vlruwt 0xfffffe00571fe060 [vnlru]
15 0 0 0 DL (threaded) [bufdaemon]
100079 D psleep 0xffffffff83858100 [bufdaemon]
100082 D - 0xffffffff82c0a140 [bufspacedaemon-0]
100093 D sdflush 0xfffffe00570ccce8 [/ worker]
9 0 0 0 DL psleep 0xffffffff838cad40 [vmdaemon]
8 0 0 0 DL (threaded) [pagedaemon]
100077 D psleep 0xffffffff838b2bb8 [dom0]
100080 D launds 0xffffffff838b2bc4 [laundry: dom0]
100081 D umarcl 0xffffffff81d5b520 [uma]
7 0 0 0 DL - 0xffffffff834b9c10 [rand_harvestq]
6 0 0 0 DL pftm 0xffffffff83f71a30 [pf purge]
5 0 0 0 DL waiting 0xffffffff843ae4e0 [sctp_iterator]
4 0 0 0 DL (threaded) [cam]
100044 D - 0xffffffff83484340 [doneq0]
100045 D - 0xffffffff834842c0 [async]
100076 D - 0xffffffff83484140 [scanner]
3 0 0 0 DL (threaded) [crypto]
100041 D crypto_ 0xffffffff838ae3e0 [crypto]
100042 D crypto_ 0xfffffe00540ed230 [crypto returns 0]
100043 D crypto_ 0xfffffe00540ed280 [crypto returns 1]
14 0 0 0 DL seqstat 0xfffffe00079bec88 [sequencer 00]
13 0 0 0 DL (threaded) [geom]
100035 D - 0xffffffff836e4d20 [g_event]
100036 D - 0xffffffff836e4d40 [g_up]
100037 D - 0xffffffff836e4d60 [g_down]
2 0 0 0 RL (threaded) [clock]
100029 Run CPU 0 [clock (0)]
100030 I [clock (1)]
12 0 0 0 WL (threaded) [intr]
100012 I [swi6: task queue]
100013 I [swi6: Giant taskq]
100015 I [swi5: fast taskq]
100031 I [swi1: netisr 0]
100032 I [swi1: hpts]
100033 I [swi1: hpts]
100046 I [irq24: virtio_pci0]
100047 I [irq25: virtio_pci0]
100048 I [irq26: virtio_pci0]
100049 I [irq27: virtio_pci0]
100050 I [irq28: virtio_pci1]
100051 I [irq29: virtio_pci1]
100052 I [irq30: virtio_pci1]
100053 I [irq31: virtio_pci1]
100054 I [irq32: virtio_pci1]
100059 I [irq33: virtio_pci2]
100060 I [irq34: virtio_pci2]
100061 I [irq35: virtio_pci2]
100063 I [irq1: atkbd0]
100064 I [irq12: psm0]
100065 I [swi0: uart uart++]
100069 I [swi1: pf send]
11 0 0 0 RL (threaded) [idle]
100003 CanRun [idle: cpu0]
100004 CanRun [idle: cpu1]
1 0 1 0 RLs [init]
10 0 0 0 DL audit_w 0xffffffff838aee40 [audit]
0 0 0 0 DLs (threaded) [kernel]
100000 D swapin 0xffffffff836e5700 [swapper]
100005 D - 0xfffffe00540ded00 [softirq_0]
100006 D - 0xfffffe00540dec00 [softirq_1]
100007 D - 0xfffffe00540deb00 [if_io_tqg_0]
100008 D - 0xfffffe00540dea00 [if_io_tqg_1]
100009 D - 0xfffffe00540de900 [if_config_tqg_0]
100010 D - 0xfffffe00085ebe00 [pci_hp taskq]
100011 D - 0xfffffe00085ebd00 [kqueue_ctx taskq]
100014 D - 0xfffffe00085eba00 [thread taskq]
100016 D - 0xfffffe00085eb800 [aiod_kick taskq]
100017 D - 0xfffffe00085eb700 [deferred_unmount ta]
100018 D - 0xfffffe00085eb600 [inm_free taskq]
100019 D - 0xfffffe00085eb500 [in6m_free taskq]
100020 D - 0xfffffe00085eb400 [linuxkpi_irq_wq]
100021 D - 0xfffffe00085eb300 [linuxkpi_short_wq_0]
100022 D - 0xfffffe00085eb300 [linuxkpi_short_wq_1]
100023 D - 0xfffffe00085eb300 [linuxkpi_short_wq_2]
100024 D - 0xfffffe00085eb300 [linuxkpi_short_wq_3]
100025 D - 0xfffffe00085eb200 [linuxkpi_long_wq_0]
100026 D - 0xfffffe00085eb200 [linuxkpi_long_wq_1]
100027 D - 0xfffffe00085eb200 [linuxkpi_long_wq_2]
100028 D - 0xfffffe00085eb200 [linuxkpi_long_wq_3]
100034 D - 0xfffffe00085eb100 [firmware taskq]
100039 D - 0xfffffe00085eb000 [crypto_0]
100040 D - 0xfffffe00085eb000 [crypto_1]
100055 D - 0xfffffe00085ead00 [vtnet0 rxq 0]
100056 D - 0xfffffe00085eac00 [vtnet0 txq 0]
100057 D - 0xfffffe00085eab00 [vtnet0 rxq 1]
100058 D - 0xfffffe00085eaa00 [vtnet0 txq 1]
100062 D vtbslp 0xfffffe0057235300 [virtio_balloon]
100066 D - 0xffffffff826f34c1 [deadlkres]
100070 D - 0xfffffe0057bae200 [acpi_task_0]
100071 D - 0xfffffe0057bae200 [acpi_task_1]
100072 D - 0xfffffe0057bae200 [acpi_task_2]
100074 D - 0xfffffe00085ec100 [mca taskq]
100075 D - 0xfffffe00085eae00 [CAM taskq]
15315 1 424 0 Z rtsol
db> show all locks
Process 15316 (rtsol) thread 0xfffffe006d287740 (103291)
exclusive rw pmap pv list (pmap pv list) r = 0 (0xfffffe00077a9fc0) locked @ /syzkaller/managers/main/kernel/sys/amd64/amd64/pmap.c:8644
exclusive sleep mutex pmap (pmap) r = 0 (0xfffffe005423dad0) locked @ /syzkaller/managers/main/kernel/sys/amd64/amd64/pmap.c:8554
Process 2 (clock) thread 0xfffffe00542fe740 (100029)
exclusive rw nd6 DAD queue (nd6 DAD queue) r = 0 (0xfffffe00540a0178) locked @ /syzkaller/managers/main/kernel/sys/kern/kern_rwlock.c:176
db> show malloc
Type InUse MemUse Requests
pf_hash 5 11524K 5
tcp_hpts 7 4801K 7
devbuf 4192 4324K 4220
sysctloid 34934 2059K 35005
vtbuf 24 1968K 46
kobj 326 1304K 488
newblk 14 1028K 14881
vfscache 3 1025K 3
inodedep 444 679K 17177
pcb 26 669K 1306
ufs_quota 1 512K 1
vfs_hash 1 512K 1
callout 2 512K 2
intr 4 472K 4
subproc 150 278K 16533
vnet_data 2 224K 2
acpitask 1 224K 1
acpica 1674 184K 60830
tidhash 3 141K 3
vmem 3 138K 5
pagedep 9 130K 14155
linker 352 130K 386
tfo_ccache 1 128K 1
IP reass 1 128K 1
DEVFS1 114 114K 141
dirrem 431 108K 17089
sem 4 106K 4
gtaskqueue 18 98K 18
bus 985 81K 5155
mtx_pool 2 72K 2
BPF 38 71K 59
syncache 1 68K 1
NFSD srvcache 3 68K 3
module 512 64K 512
ddb_capture 1 64K 1
filedesc 8 57K 28346
freefile 420 53K 17076
umtx 368 46K 368
kdtrace 222 45K 31086
LRO 40 41K 52
temp 35 37K 2888
hostcache 1 32K 1
shm 1 32K 1
DEVFS3 128 32K 143
msg 4 30K 4
kbdmux 6 28K 6
routetbl 453 26K 1350
DEVFS_RULE 56 20K 56
ifaddr 70 20K 121
ufs_mount 4 17K 5
proc 3 17K 3
cred 65 17K 1684
tty 16 16K 16
ithread 97 16K 97
bus-sc 34 15K 1687
ifnet 8 15K 12
eventhandler 161 14K 161
KTRACE 100 13K 100
ether_multi 153 13K 368
kenv 95 12K 95
lltable 38 12K 86
GEOM 61 11K 481
rman 86 11K 429
CAM queue 5 11K 1528
in6_multi 69 10K 143
bmsafemap 3 9K 17141
rpc 4 9K 4
devstat 4 9K 4
UART 12 9K 12
ksem 1 8K 1
shmfd 1 8K 2563
pfs_vncache 1 8K 1
audit_evclass 238 8K 300
taskqueue 63 7K 63
sglist 6 7K 6
kqueue 63 7K 15339
CAM DEV 3 6K 510
pf_ifnet 15 6K 44
plimit 22 6K 489
pfs_nodes 20 5K 20
hhook 15 5K 17
ufs_dirhash 24 5K 24
UMA 268 5K 268
vt 11 5K 11
memdesc 1 4K 1
MCA 32 4K 32
session 32 4K 1249
evdev 4 4K 4
pwddesc 59 4K 15320
acpisem 28 4K 28
proc-args 92 4K 16942
lockf 30 4K 65
DEVFSP 52 4K 403
selfd 48 3K 195724
ip6ndp 16 3K 30
terminal 11 3K 11
kcovinfo 39 3K 117
clone 9 3K 9
select 18 3K 71
uidinfo 3 3K 10
freework 9 3K 14149
local_apic 1 2K 1
io_apic 1 2K 1
freeblks 8 2K 14148
ipsec-saq 2 2K 2
tun 7 2K 12
CAM XPT 22 2K 543
Unitno 25 2K 165
sctp_ifa 12 2K 27
msi 12 2K 12
toponodes 6 2K 6
ipsecpolicy 2 2K 2
in_multi 5 2K 14
acpidev 20 2K 20
softdep 1 1K 1
sahead 1 1K 1
secasvar 1 1K 1
CC Mem 4 1K 470
nhops 6 1K 8
vnodemarker 2 1K 48
NFSD session 1 1K 1
procdesc 7 1K 28
CAM periph 4 1K 271
ipsec 3 1K 3
sctp_ifn 6 1K 27
mkdir 6 1K 28268
mld 6 1K 11
igmp 6 1K 11
pfil 6 1K 6
isadev 6 1K 6
mount 16 1K 89
pci_link 10 1K 10
crypto 4 1K 4
encap_export_host 12 1K 12
cdev 2 1K 2
inpcbpolicy 14 1K 3398
osd 9 1K 483
newdirblk 3 1K 14134
diradd 3 1K 17125
netlink 2 1K 2
chacha20random 1 1K 1
biobuf 1 1K 1
vnodes 1 1K 1
NFSD lckfile 1 1K 1
NFSD V4client 1 1K 1
DEVFS 9 1K 10
CAM SIM 2 1K 2
feeder 7 1K 7
tcpfunc 3 1K 3
loginclass 3 1K 6
prison 6 1K 6
filecaps 6 1K 152
lkpikmalloc 5 1K 6
cryptodev 2 1K 301
nexusdev 8 1K 8
apmdev 1 1K 1
atkbddev 2 1K 2
aio 4 1K 4
pmchooks 1 1K 1
CAM path 4 1K 1034
CAM dev queue 2 1K 2
CAM I/O Scheduler 1 1K 1
soname 4 1K 3858
sctp_vrf 1 1K 1
vnet 1 1K 1
pmc 1 1K 1
entropy 2 1K 53
acpiintr 1 1K 1
cpus 2 1K 2
vnet_data_free 1 1K 1
Per-cpu 1 1K 1
p1003.1b 1 1K 1
mqdata 0 0K 0
tcp_do 0 0K 0
tcp_fsb 0 0K 0
ipcomp 0 0K 0
esp 0 0K 0
ah 0 0K 0
sctp_mcore 0 0K 0
sctp_socko 0 0K 80
sctp_iter 0 0K 36
sctp_mvrf 0 0K 0
sctp_timw 0 0K 0
sctp_cpal 0 0K 0
sctp_cmsg 0 0K 0
sctp_stre 0 0K 0
sctp_athi 0 0K 0
sctp_athm 0 0K 312
sctp_atky 0 0K 312
sctp_atcl 0 0K 312
sctp_a_it 0 0K 36
sctp_aadr 0 0K 0
sctp_stro 0 0K 0
sctp_stri 0 0K 0
sctp_map 0 0K 0
filemon 0 0K 0
pf_table 0 0K 0
pf_rule 0 0K 0
pf_altq 0 0K 0
pf_osfp 0 0K 0
pf_krule_item 0 0K 0
pf_temp 0 0K 0
madt_table 0 0K 2
smartpqi 0 0K 0
ixl 0 0K 0
ice-resmgr 0 0K 0
ice-osdep 0 0K 0
ice 0 0K 0
iavf 0 0K 0
axgbe 0 0K 0
fpukern_ctx 0 0K 0
xen_intr 0 0K 0
xen_hvm 0 0K 0
legacydrv 0 0K 0
bounce 0 0K 0
busdma 0 0K 0
qpidrv 0 0K 0
dmar_idpgtbl 0 0K 0
dmar_dom 0 0K 0
dmar_ctx 0 0K 0
isci 0 0K 0
iommu_dmamap 0 0K 0
hyperv_socket 0 0K 0
bxe_ilt 0 0K 0
aesni_data 0 0K 0
xenbus 0 0K 0
vm_fictitious 0 0K 0
UMAHash 0 0K 0
vm_pgdata 0 0K 0
jblocks 0 0K 0
savedino 0 0K 13743
sentinel 0 0K 0
jfsync 0 0K 0
jtrunc 0 0K 0
sbdep 0 0K 22
jsegdep 0 0K 0
jseg 0 0K 0
jfreefrag 0 0K 0
jfreeblk 0 0K 0
jnewblk 0 0K 0
jmvref 0 0K 0
jremref 0 0K 0
jaddref 0 0K 0
freedep 0 0K 0
freefrag 0 0K 2
allocindir 0 0K 0
indirdep 0 0K 10
allocdirect 0 0K 0
ufs_trim 0 0K 0
mactemp 0 0K 0
audit_trigger 0 0K 0
audit_pipe_presel 0 0K 0
audit_pipeent 0 0K 0
audit_pipe 0 0K 0
audit_evname 0 0K 0
audit_bsm 0 0K 0
audit_gidset 0 0K 0
audit_text 0 0K 0
audit_path 0 0K 0
audit_data 0 0K 0
audit_cred 0 0K 0
ktls_ocf 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5E_TLS_RX 0 0K 0
MLX5EEPROM 0 0K 0
MLX5E_TLS 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EN 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5DUMP 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
simple_attr 0 0K 0
seq_file 0 0K 0
lkpiskb 0 0K 0
radix 0 0K 0
idr 0 0K 0
lkpindev 0 0K 0
lkpimhi 0 0K 0
lkpifw 0 0K 0
lkpi80211 0 0K 0
NLM 0 0K 0
ipsec-spdcache 0 0K 0
ipsec-reg 0 0K 0
ipsec-misc 0 0K 0
ipsecrequest 0 0K 0
ip6opt 0 0K 150
ip6_msource 0 0K 0
ip6_moptions 0 0K 0
in6_mfilter 0 0K 0
frag6 0 0K 0
tcplog 0 0K 0
tcp_hwpace 0 0K 0
ip_msource 0 0K 0
ip_moptions 0 0K 0
in_mfilter 0 0K 0
ipid 0 0K 0
80211scan 0 0K 0
80211ratectl 0 0K 0
80211power 0 0K 0
80211nodeie 0 0K 0
80211node 0 0K 0
80211mesh_gt 0 0K 0
80211mesh_rt 0 0K 0
80211perr 0 0K 0
80211prep 0 0K 0
80211preq 0 0K 0
80211dfs 0 0K 0
80211crypto 0 0K 0
80211vap 0 0K 0
iflib 0 0K 0
vlan 0 0K 0
gif 0 0K 0
ifdescr 0 0K 0
zlib 0 0K 0
fadvise 0 0K 0
VN POLL 0 0K 0
statfs 0 0K 219
namei_tracker 0 0K 55
export_host 0 0K 0
cl_savebuf 0 0K 3
lio 0 0K 0
acl 0 0K 0
mbuf_tag 0 0K 0
ktls 0 0K 0
accf 0 0K 0
pts 0 0K 0
timerfd 0 0K 0
iov 0 0K 19162
ioctlops 0 0K 7304
eventfd 0 0K 2137
Witness 0 0K 0
stack 0 0K 0
sbuf 0 0K 288
firmware 0 0K 0
compressor 0 0K 0
SWAP 0 0K 0
sysctltmp 0 0K 954
sysctl 0 0K 3
ekcd 0 0K 0
dumper 0 0K 0
sendfile 0 0K 0
rctl 0 0K 0
cache 0 0K 0
prison_racct 0 0K 0
Fail Points 0 0K 0
sigio 0 0K 1
filedesc_to_leader 0 0K 0
pwd 0 0K 0
tty console 0 0K 0
boottrace 0 0K 0
isofs_node 0 0K 0
isofs_mount 0 0K 0
tr_raid5_data 0 0K 0
tr_raid1e_data 0 0K 0
tr_raid1_data 0 0K 0
tr_raid0_data 0 0K 0
tr_concat_data 0 0K 0
md_sii_data 0 0K 0
md_promise_data 0 0K 0
md_nvidia_data 0 0K 0
md_jmicron_data 0 0K 0
md_intel_data 0 0K 0
md_ddf_data 0 0K 0
raid_data 0 0K 72
geom_flashmap 0 0K 0
tmpfs dir 0 0K 0
tmpfs name 0 0K 0
tmpfs mount 0 0K 0
tmpfs extattr 0 0K 0
NFS FHA 0 0K 0
newnfsmnt 0 0K 0
newnfsclient_req 0 0K 0
NFSCL layrecall 0 0K 0
NFSCL session 0 0K 0
NFSCL sockreq 0 0K 0
NFSCL devinfo 0 0K 0
NFSCL flayout 0 0K 0
NFSCL layout 0 0K 0
NFSD rollback 0 0K 0
NFSCL diroff 0 0K 0
NEWdirectio 0 0K 0
NEWNFSnode 0 0K 0
NFSCL lck 0 0K 0
NFSCL lckown 0 0K 0
NFSCL client 0 0K 0
NFSCL deleg 0 0K 0
NFSCL open 0 0K 0
NFSCL owner 0 0K 0
NFS fh 0 0K 0
NFS req 0 0K 0
NFSD usrgroup 0 0K 0
NFSD string 0 0K 0
NFSD V4lock 0 0K 0
NFSD V4state 0 0K 0
msdosfs_fat 0 0K 0
msdosfs_mount 0 0K 0
msdosfs_node 0 0K 0
DEVFS4 0 0K 0
DEVFS2 0 0K 0
gntdev 0 0K 0
privcmd_dev 0 0K 0
evtchn_dev 0 0K 0
xenstore 0 0K 0
xnb 0 0K 0
xen_acpi 0 0K 0
xbbd 0 0K 0
xbd 0 0K 0
Balloon 0 0K 0
sysmouse 0 0K 0
vtfont 0 0K 0
pvscsi 0 0K 0
USBdev 0 0K 0
USB 0 0K 0
twsbuf 0 0K 0
tcp_log_dev 0 0K 0
midi buffers 0 0K 0
mixer 0 0K 0
ac97 0 0K 0
hdacc 0 0K 0
hdac 0 0K 0
hdaa 0 0K 0
SIIS driver 0 0K 0
PUC 0 0K 0
ppbusdev 0 0K 0
sr_iov 0 0K 0
OCS 0 0K 0
OCS 0 0K 0
nvme 0 0K 0
nvd 0 0K 0
netmap 0 0K 0
mwldev 0 0K 0
MVS driver 0 0K 0
mrsasbuf 0 0K 0
mpt_user 0 0K 0
mps_user 0 0K 0
MPSSAS 0 0K 0
mps 0 0K 0
mpr_user 0 0K 0
MPRSAS 0 0K 0
mpr 0 0K 0
mfibuf 0 0K 0
md_sectors 0 0K 0
md_disk 0 0K 0
malodev 0 0K 0
LED 0 0K 0
ix_sriov 0 0K 0
ix 0 0K 0
ipsbuf 0 0K 0
ciss_data 0 0K 0
BACKLIGHT 0 0K 0
ath_hal 0 0K 0
athdev 0 0K 0
ata_pci 0 0K 0
ata_dma 0 0K 0
ata_generic 0 0K 0
AHCI driver 0 0K 0
agp 0 0K 0
acpipwr 0 0K 0
acpi_perf 0 0K 0
acpicmbat 0 0K 0
aacraidcam 0 0K 0
aacraid_buf 0 0K 0
aaccam 0 0K 0
aacbuf 0 0K 0
zstd 0 0K 0
XZ_DEC 0 0K 0
nvlist 0 0K 0
SCSI ENC 0 0K 0
SCSI sa 0 0K 0
scsi_pass 0 0K 0
scsi_da 0 0K 69
ata_da 0 0K 0
scsi_ch 0 0K 0
scsi_cd 0 0K 0
nvme_da 0 0K 0
CAM CCB 0 0K 523
CAM ccb queue 0 0K 0
db> show uma
Zone Size Used Free Requests Sleeps Bucket Total Mem XFree
mbuf_jumbo_page 4096 8320 1078 29579 0 254 38494208 0
malloc-384 384 4594 2126 21334 0 30 2580480 0
mbuf 256 8630 1033 80376 0 254 2473728 0
BUF TRIE 144 200 11616 930 0 62 1701504 0
mbuf_cluster 2048 762 0 762 0 254 1560576 0
malloc-128 128 11449 145 11473 0 126 1484032 0
malloc-4096 4096 327 3 568 0 2 1351680 0
UMA Slabs 0 112 10814 16 10814 0 126 1212960 0
vmem btag 56 16836 51 16836 0 254 945672 0
RADIX NODE 144 5526 741 410980 0 62 902448 0
malloc-256 256 533 2197 35242 0 62 698880 0
malloc-256 256 226 2324 44624 0 62 652800 0
FFS inode 1160 523 23 17599 0 8 633360 0
sctp_ep 1176 0 510 312 0 254 599760 0
lkpimm 168 1 3095 1 0 62 520128 0
lkpicurr 168 2 3094 2 0 62 520128 0
pbuf 2624 0 198 0 0 2 519552 0
socket 960 44 464 5122 0 254 487680 0
VM OBJECT 264 1491 99 181202 0 30 419760 0
malloc-128 128 442 2224 17124 0 126 341248 0
THREAD 1824 160 24 15765 0 8 335616 0
malloc-65536 65536 4 1 12 0 1 327680 0
256 Bucket 2048 141 19 1208 0 8 327680 0
VNODE 448 561 105 17644 0 30 298368 0
malloc-64 64 3843 504 4552 0 254 278208 0
malloc-4096 4096 61 5 15320 0 2 270336 0
malloc-16 16 14435 315 14495 0 254 236000 0
malloc-16384 16384 5 9 14170 0 1 229376 0
malloc-2048 2048 13 99 1094 0 8 229376 0
DEVCTL 1024 49 171 223 0 0 225280 0
malloc-65536 65536 1 2 243 0 1 196608 0
mbuf_packet 256 31 731 12833 0 254 195072 0
malloc-128 128 1333 186 30005 0 126 194432 0
malloc-32 32 5314 608 9110 0 254 189504 0
UMA Zones 768 240 4 240 0 16 187392 0
MAP ENTRY 96 1553 337 498724 0 126 181440 0
FPU_save_area 832 162 54 16336 0 16 179712 0
FFS2 dinode 256 523 167 17599 0 62 176640 0
malloc-32768 32768 3 2 123 0 1 163840 0
S VFS Cache 104 1019 502 21008 0 126 158184 0
malloc-1024 1024 125 19 307 0 16 147456 0
malloc-65536 65536 0 2 110 0 1 131072 0
malloc-65536 65536 2 0 2 0 1 131072 0
malloc-128 128 767 256 21003 0 126 130944 0
unpcb 256 26 484 1358 0 254 130560 0
PROC 1376 60 28 15319 0 8 121088 0
tcp_inpcb 1312 4 86 470 0 8 118080 0
128 Bucket 1024 74 41 804 0 16 117760 0
ksiginfo 112 71 973 677 0 126 116928 0
malloc-128 128 598 301 18604 0 126 115072 0
malloc-4096 4096 18 8 26 0 2 106496 0
64 Bucket 512 160 40 11379 0 30 102400 0
malloc-32768 32768 3 0 3 0 1 98304 0
pipe 728 19 113 4598 0 16 96096 0
filedesc0 1072 59 25 15320 0 8 90048 0
UMA Kegs 384 227 6 227 0 30 89472 0
malloc-256 256 216 99 2340 0 62 80640 0
32 Bucket 256 147 168 24958 0 62 80640 0
malloc-8192 8192 7 2 110 0 1 73728 0
malloc-4096 4096 14 4 246 0 2 73728 0
g_bio 408 0 180 7135 0 30 73440 0
ripcb 392 4 176 909 0 30 70560 0
malloc-64 64 796 275 16515 0 254 68544 0
malloc-64 64 579 492 2142 0 254 68544 0
malloc-65536 65536 1 0 1 0 1 65536 0
malloc-16384 16384 4 0 4 0 1 65536 0
malloc-4096 4096 12 4 523 0 2 65536 0
udplite_inpcb 424 0 126 1526 0 30 53424 0
udp_inpcb 424 6 120 493 0 30 53424 0
malloc-64 64 310 509 226606 0 254 52416 0
Files 80 200 450 51206 0 126 52000 0
VMSPACE 616 39 45 15300 0 16 51744 0
malloc-128 128 85 318 28815 0 126 51584 0
DIRHASH 1024 35 13 35 0 16 49152 0
NAMEI 1024 0 48 98007 0 16 49152 0
malloc-16384 16384 1 2 161 0 1 49152 0
malloc-8192 8192 6 0 6 0 1 49152 0
malloc-2048 2048 7 17 560 0 8 49152 0
malloc-2048 2048 20 4 26 0 8 49152 0
malloc-1024 1024 22 26 27 0 16 49152 0
malloc-1024 1024 4 44 529 0 16 49152 0
malloc-384 384 66 54 723 0 30 46080 0
malloc-384 384 89 31 89 0 30 46080 0
syncache 168 0 264 4 0 254 44352 0
pcpu-8 8 4856 264 5786 0 254 40960 0
AIOCB 552 0 70 3065 0 16 38640 0
malloc-64 64 15 552 17523 0 254 36288 0
malloc-64 64 37 530 51 0 254 36288 0
malloc-64 64 26 541 717 0 254 36288 0
malloc-64 64 23 544 27 0 254 36288 0
malloc-32 32 571 563 1396 0 254 36288 0
malloc-128 128 37 242 212 0 126 35712 0
malloc-128 128 77 202 135 0 126 35712 0
routing nhops 256 25 110 60 0 62 34560 0
ttyoutq 256 72 63 160 0 62 34560 0
malloc-384 384 36 54 136 0 30 34560 0
malloc-256 256 44 91 29016 0 62 34560 0
malloc-256 256 66 69 131 0 62 34560 0
malloc-256 256 10 125 15306 0 62 34560 0
malloc-256 256 57 78 1500 0 62 34560 0
malloc-256 256 54 81 425 0 62 34560 0
TURNSTILE 136 185 67 185 0 62 34272 0
SLEEPQUEUE 88 185 199 185 0 126 33792 0
malloc-32768 32768 1 0 1 0 1 32768 0
malloc-32768 32768 1 0 1 0 1 32768 0
malloc-8192 8192 4 0 4 0 1 32768 0
malloc-2048 2048 3 13 47 0 8 32768 0
malloc-2048 2048 2 14 2 0 8 32768 0
malloc-2048 2048 10 6 95 0 8 32768 0
malloc-1024 1024 2 30 43 0 16 32768 0
malloc-1024 1024 17 15 4075 0 16 32768 0
malloc-1024 1024 3 29 3 0 16 32768 0
malloc-512 512 0 64 118 0 30 32768 0
malloc-512 512 3 61 49 0 30 32768 0
malloc-512 512 12 52 88 0 30 32768 0
malloc-512 512 0 64 7185 0 30 32768 0
malloc-512 512 2 62 51 0 30 32768 0
malloc-512 512 9 55 13 0 30 32768 0
pcpu-64 64 487 25 487 0 254 32768 0
ertt_txseginfo 40 0 808 20454 0 254 32320 0
PWD 40 16 792 14229 0 254 32320 0
KNOTE 160 22 178 98402 0 62 32000 0
ttyinq 160 135 65 300 0 62 32000 0
PGRP 120 32 232 1249 0 126 31680 0
clpbuf 2624 0 12 25 0 4 31488 0
malloc-32 32 354 528 4500 0 254 28224 0
16 Bucket 144 65 131 399 0 62 28224 0
4 Bucket 48 5 583 7 0 254 28224 0
AIO 208 0 133 3201 0 62 27664 0
da_ccb 544 0 49 1909 0 16 26656 0
cpuset 200 7 121 168 0 62 25600 0
malloc-8192 8192 3 0 3 0 1 24576 0
malloc-8192 8192 3 0 3 0 1 24576 0
malloc-4096 4096 4 2 16 0 2 24576 0
rl_entry 40 85 521 85 0 254 24240 0
rtentry 168 28 116 60 0 62 24192 0
8 Bucket 80 62 238 2741 0 126 24000 0
itimer 352 0 66 1125 0 30 23232 0
domainset 40 0 567 113 0 254 22680 0
hostcache 64 1 314 1 0 254 20160 0
udp_inpcb ports 32 3 627 33 0 254 20160 0
tcp_inpcb ports 32 2 628 2 0 254 20160 0
ertt 72 4 276 470 0 126 20160 0
malloc-32 32 40 590 218 0 254 20160 0
malloc-32 32 13 617 14208 0 254 20160 0
malloc-32 32 35 595 303 0 254 20160 0
malloc-32 32 26 604 1064 0 254 20160 0
2 Bucket 32 56 574 1790 0 254 20160 0
epoch_record pcpu 256 4 60 4 0 62 16384 0
malloc-4096 4096 0 4 859 0 2 16384 0
malloc-1024 1024 5 11 6 0 16 16384 0
malloc-512 512 1 31 1 0 30 16384 0
SMR CPU 32 7 504 7 0 254 16352 0
sctp_laddr 48 0 336 37 0 254 16128 0
vtnet_tx_hdr 24 0 668 22658 0 254 16032 0
malloc-16 16 482 518 3874 0 254 16000 0
kenv 258 17 43 1094 0 30 15480 0
mqnode 416 3 33 3 0 30 14976 0
vmem 1856 1 7 1 0 8 14848 0
SMR SHARED 24 7 504 7 0 254 12264 0
malloc-32 32 13 365 32 0 254 12096 0
malloc-16 16 11 739 233 0 254 12000 0
malloc-16 16 49 701 174 0 254 12000 0
malloc-16 16 69 681 28868 0 254 12000 0
malloc-16 16 59 691 16163 0 254 12000 0
malloc-16 16 4 746 11 0 254 12000 0
malloc-384 384 0 30 3 0 30 11520 0
malloc-384 384 11 19 11 0 30 11520 0
malloc-384 384 1 29 1 0 30 11520 0
Mountpoints 2816 2 2 2 0 4 11264 0
malloc-8192 8192 0 1 26 0 1 8192 0
malloc-8192 8192 1 0 1 0 1 8192 0
pcpu-16 16 4 252 4 0 254 4096 0
UMA Slabs 1 176 9 13 9 0 62 3872 0
KMAP ENTRY 96 12 27 14 0 0 3744 0
FFS1 dinode 128 0 0 0 0 126 0 0
ada_ccb 272 0 0 0 0 30 0 0
swblk 136 0 0 0 0 62 0 0
swpctrie 144 0 0 0 0 62 0 0
cdg_qdiffsample 16 0 0 0 0 254 0 0
pf state scrubs 40 0 0 0 0 254 0 0
pf frag entries 40 0 0 0 0 254 0 0
pf frags 248 0 0 0 0 62 0 0
pf table entries 160 0 0 0 0 254 0 0
pf table entry counters 64 0 0 0 0 254 0 0
pf source nodes 152 0 0 0 0 254 0 0
pf state keys 88 0 0 0 0 126 0 0
pf states 352 0 0 0 0 254 0 0
pf tags 104 0 0 0 0 126 0 0
pf mtags 184 0 0 0 0 62 0 0
tcp_rack_pcb 1024 0 0 0 0 16 0 0
tcp_rack_map 128 0 0 0 0 126 0 0
tcp_bbr_pcb 832 0 0 0 0 16 0 0
tcp_bbr_map 128 0 0 0 0 126 0 0
tfo_ccache_entries 80 0 0 0 0 126 0 0
tfo 4 0 0 0 0 254 0 0
sackhole 32 0 0 0 0 254 0 0
ipq 56 0 0 0 0 254 0 0
sctp_asconf_ack 48 0 0 0 0 254 0 0
sctp_asconf 40 0 0 0 0 254 0 0
sctp_stream_msg_out 112 0 0 0 0 254 0 0
sctp_readq 152 0 0 0 0 254 0 0
sctp_chunk 152 0 0 0 0 254 0 0
sctp_raddr 736 0 0 0 0 254 0 0
sctp_asoc 2256 0 0 0 0 254 0 0
tcp_log_id_node 120 0 0 0 0 126 0 0
tcp_log_id_bucket 176 0 0 0 0 62 0 0
tcp_log 416 0 0 0 0 254 0 0
tcpreass 48 0 0 0 0 254 0 0
udplite_inpcb ports 32 0 0 0 0 254 0 0
ripcb ports 32 0 0 0 0 254 0 0
IPsec SA lft_c 16 0 0 0 0 254 0 0
netlink 2048 0 0 0 0 8 0 0
AIOLIO 272 0 0 0 0 30 0 0
mqnotifier 216 0 0 0 0 62 0 0
mvdata 64 0 0 0 0 254 0 0
mqueue 248 0 0 0 0 62 0 0
TMPFS node 232 0 0 0 0 62 0 0
NCLNODE 608 0 0 0 0 16 0 0
LTS VFS Cache 360 0 0 0 0 30 0 0
L VFS Cache 320 0 0 0 0 30 0 0
STS VFS Cache 144 0 0 0 0 62 0 0
cryptop 280 0 0 0 0 30 0 0
linux_dma_object 32 0 0 0 0 254 0 0
linux_dma_pctrie 144 0 0 0 0 62 0 0
IOMMU_MAP_ENTRY 104 0 0 0 0 126 0 0
mbuf_jumbo_16k 16384 0 0 0 0 254 0 0
mbuf_jumbo_9k 9216 0 0 0 0 254 0 0
audit_record 1280 0 0 0 0 8 0 0
MAC labels 40 0 0 0 0 254 0 0
vnpbuf 2624 0 0 0 0 16 0 0
nfspbuf 2624 0 0 0 0 4 0 0
swwbuf 2624 0 0 0 0 2 0 0
swrbuf 2624 0 0 0 0 4 0 0
umtx_shm 88 0 0 0 0 126 0 0
umtx pi 96 0 0 0 0 126 0 0
rangeset pctrie nodes 144 0 0 0 0 62 0 0
malloc-65536 65536 0 0 0 0 1 0 0
malloc-65536 65536 0 0 0 0 1 0 0
malloc-65536 65536 0 0 0 0 1 0 0
malloc-
---
This report is generated by a bot. It may contain errors.
See https://goo.gl/tpsmEJ for more information about syzbot.
syzbot engineers can be reached at syzk...@googlegroups.com.
syzbot will keep track of this issue. See:
https://goo.gl/tpsmEJ#status for how to communicate with syzbot.
If the report is already addressed, let syzbot know by replying with:
#syz fix: exact-commit-title
If you want to overwrite report's subsystems, reply with:
#syz set subsystems: new-subsystem
(See the list of subsystem names on the web dashboard)
If the report is a duplicate of another one, reply with:
#syz dup: exact-subject-of-another-report
If you want to undo deduplication, reply with:
#syz undup
syzbot
Jan 23, 2024, 1:26:22 AMJan 23
to syzkaller-f...@googlegroups.com
syzbot has found a reproducer for the following issue on:
HEAD commit: 63a5fe834354 pflow: limit to no more than 128 flow exporters
git tree: freebsd-src
console output: https://syzkaller.appspot.com/x/log.txt?x=152c3c1de80000
dashboard link: https://syzkaller.appspot.com/bug?extid=1778b08d8e798b8dfada
userspace arch: i386
syz repro: https://syzkaller.appspot.com/x/repro.syz?x=13c99e73e80000
IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+1778b0...@syzkaller.appspotmail.com
Fatal trap 12: page fault while in kernel mode
cpuid = 0; apic id = 00
fault virtual address = 0x10
fault code = supervisor read data, page not present
instruction pointer = 0x20:0xffffffff81a5c21f
stack pointer = 0x28:0xfffffe0053fc1ae0
frame pointer = 0x28:0xfffffe0053fc1cb0
rcx: fffffe00033eee30 r8: 0000000000000000 r9: 00000000000000e0
rax: fffffe00033eee30 rbx: fffffe0057b2b000 rbp: fffffe0053fc1cb0
r10: f3e38a34f7f58bd9 r11: 0000000000000002 r12: 0000000000000000
r13: fffffe00542cadd0 r14: fffffe0053fc1c20 r15: fffffe00542ca740
KDB: stack backtrace:
db_trace_self_wrapper() at db_trace_self_wrapper+0xc6/frame 0xfffffe0053fc1230
kdb_backtrace() at kdb_backtrace+0xd0/frame 0xfffffe0053fc1390
vpanic() at vpanic+0x271/frame 0xfffffe0053fc1530
panic() at panic+0xb5/frame 0xfffffe0053fc15f0
trap_fatal() at trap_fatal+0x7f1/frame 0xfffffe0053fc1710
trap_pfault() at trap_pfault+0x179/frame 0xfffffe0053fc1830
trap() at trap+0x5f3/frame 0xfffffe0053fc1a10
calltrap() at calltrap+0x8/frame 0xfffffe0053fc1a10
--- trap 0xc, rip = 0xffffffff81a5c21f, rsp = 0xfffffe0053fc1ae0, rbp = 0xfffffe0053fc1cb0 ---
nd6_dad_timer() at nd6_dad_timer+0x19f/frame 0xfffffe0053fc1cb0
softclock_call_cc() at softclock_call_cc+0x409/frame 0xfffffe0053fc1e80
softclock_thread() at softclock_thread+0x200/frame 0xfffffe0053fc1ef0
fork_exit() at fork_exit+0xcc/frame 0xfffffe0053fc1f30
fork_trampoline() at fork_trampoline+0xe/frame 0xfffffe0053fc1f30
rsp 0xfffffe0053fc1370
rbp 0xfffffe0053fc1390
r14 0xffffffff826f87c0 .str.28
r15 0
rip 0xffffffff815cac0e kdb_enter+0x6e
rflags 0x46
kdb_enter+0x6e: movq $0,0x2194407(%rip)
db> show proc
Process 2 (clock) at 0xfffffe00541f7020:
sigparent: 20
vmspace: 0xffffffff836ea6c0
(map 0xffffffff836ea6c0)
(map.pmap 0xffffffff836ea780)
(pmap 0xffffffff836ea7f0)
3574 3571 3571 0 R ifconfig
3573 3570 3570 0 D ifnet_d 0xffffffff8385e2c0 ifconfig
3572 776 3572 0 Ss wait 0xfffffe006d226ac0 syz-executor.2
3571 776 3571 0 Ss wait 0xfffffe006d227580 syz-executor.0
3570 776 3570 0 Ss wait 0xfffffe006cc165a0 syz-executor.3
3563 3466 424 0 S nanslp 0xffffffff83740401 sleep
3466 3461 424 0 S wait 0xfffffe006d228b00 sh
3461 424 424 0 S wait 0xfffffe0057bd4ae0 sh
776 774 774 0 S (threaded) syz-execprog
100094 S uwait 0xfffffe0057209400 syz-execprog
100116 S uwait 0xfffffe0057ab6500 syz-execprog
100117 S uwait 0xfffffe0057ab6600 syz-execprog
100118 S uwait 0xfffffe0057ab6700 syz-execprog
100119 S wait 0xfffffe0057bd5b00 syz-execprog
100120 S uwait 0xfffffe0054040980 syz-execprog
100121 S wait 0xfffffe0057bd5b00 syz-execprog
100122 S wait 0xfffffe0057bd5b00 syz-execprog
100123 S uwait 0xfffffe0057ab6900 syz-execprog
100124 S uwait 0xfffffe0054040b80 syz-execprog
100136 S kqread 0xfffffe00589eda00 syz-execprog
774 772 774 0 Ss pause 0xfffffe006cc14b70 csh
772 682 772 0 Ss select 0xfffffe0057a96640 sshd
748 1 748 0 Ss+ ttyin 0xfffffe00576a00b0 getty
747 1 747 0 Ss+ ttyin 0xfffffe00587e34b0 getty
746 1 746 0 Ss+ ttyin 0xfffffe00587e3cb0 getty
745 1 745 0 Ss+ ttyin 0xfffffe00587e44b0 getty
744 1 744 0 Ss+ ttyin 0xfffffe00587eacb0 getty
743 1 743 0 Ss+ ttyin 0xfffffe00587e4cb0 getty
742 1 742 0 Ss+ ttyin 0xfffffe00543494b0 getty
741 1 741 0 Ss+ ttyin 0xfffffe0054349cb0 getty
740 1 740 0 Ss+ ttyin 0xfffffe005434a4b0 getty
686 1 686 0 Ss nanslp 0xffffffff83740400 cron
682 1 682 0 Ss select 0xfffffe006cd3fcc0 sshd
495 1 495 0 Ss select 0xfffffe006cd3fd40 syslogd
424 1 424 0 Ss wait 0xfffffe006cc16040 devd
423 1 423 65 Ss select 0xfffffe0058a29c40 dhclient
338 1 338 0 Ss select 0xfffffe0057a9c1c0 dhclient
335 1 335 0 Ss select 0xfffffe0058a26240 dhclient
17 0 0 0 DL syncer 0xffffffff8385db20 [syncer]
16 0 0 0 DL vlruwt 0xfffffe00571c9040 [vnlru]
9 0 0 0 DL psleep 0xffffffff838a55c0 [vmdaemon]
100080 D launds 0xffffffff8388d444 [laundry: dom0]
100081 D umarcl 0xffffffff81d60f50 [uma]
7 0 0 0 DL - 0xffffffff834bdc10 [rand_harvestq]
6 0 0 0 DL pftm 0xffffffff84000ea0 [pf purge]
5 0 0 0 DL waiting 0xffffffff845c75a0 [sctp_iterator]
100045 D - 0xffffffff834882c0 [async]
100076 D - 0xffffffff83488140 [scanner]
100042 D crypto_ 0xfffffe00542edd30 [crypto returns 0]
100043 D crypto_ 0xfffffe00542edd80 [crypto returns 1]
14 0 0 0 DL seqstat 0xfffffe000799c088 [sequencer 00]
100036 D - 0xffffffff836e8d60 [g_up]
100037 D - 0xffffffff836e8d80 [g_down]
100004 Run CPU 1 [idle: cpu1]
1 0 1 0 SLs wait 0xfffffe00541f8040 [init]
10 0 0 0 DL audit_w 0xffffffff838896c0 [audit]
100005 D - 0xfffffe00540a8800 [softirq_0]
100006 D - 0xfffffe00540a8600 [softirq_1]
100007 D - 0xfffffe00540a8400 [if_io_tqg_0]
100008 D - 0xfffffe00540a8200 [if_io_tqg_1]
100009 D - 0xfffffe00540a8000 [if_config_tqg_0]
100010 D - 0xfffffe00079e5000 [pci_hp taskq]
100011 D - 0xfffffe00079e4e00 [kqueue_ctx taskq]
100014 D - 0xfffffe00079e4b00 [thread taskq]
100016 D - 0xfffffe00079e4900 [aiod_kick taskq]
100017 D - 0xfffffe00079e4800 [deferred_unmount ta]
100018 D - 0xfffffe00079e4700 [inm_free taskq]
100019 D - 0xfffffe00079e4600 [in6m_free taskq]
100020 D - 0xfffffe00079e4500 [linuxkpi_irq_wq]
100021 D - 0xfffffe00079e4400 [linuxkpi_short_wq_0]
100022 D - 0xfffffe00079e4400 [linuxkpi_short_wq_1]
100023 D - 0xfffffe00079e4400 [linuxkpi_short_wq_2]
100024 D - 0xfffffe00079e4400 [linuxkpi_short_wq_3]
100025 D - 0xfffffe00079e4300 [linuxkpi_long_wq_0]
100026 D - 0xfffffe00079e4300 [linuxkpi_long_wq_1]
100027 D - 0xfffffe00079e4300 [linuxkpi_long_wq_2]
100028 D - 0xfffffe00079e4300 [linuxkpi_long_wq_3]
100034 D - 0xfffffe00079e4200 [firmware taskq]
100039 D - 0xfffffe00079e3700 [crypto_0]
100040 D - 0xfffffe00079e3700 [crypto_1]
100055 D - 0xfffffe00079e3000 [vtnet0 rxq 0]
100056 D - 0xfffffe00079e2e00 [vtnet0 txq 0]
100057 D - 0xfffffe00079e2d00 [vtnet0 rxq 1]
100058 D - 0xfffffe00079e2c00 [vtnet0 txq 1]
100062 D vtbslp 0xfffffe0057197400 [virtio_balloon]
100066 D - 0xffffffff826fda20 [deadlkres]
100070 D - 0xfffffe00079e3200 [acpi_task_0]
100071 D - 0xfffffe00079e3200 [acpi_task_1]
100072 D - 0xfffffe00079e3200 [acpi_task_2]
100074 D - 0xfffffe00079e5100 [mca taskq]
100075 D - 0xfffffe00079e3100 [CAM taskq]
db> show all locks
Process 3574 (ifconfig) thread 0xfffffe006cdd4000 (100114)
exclusive sx ifnet_detach_sx (ifnet_detach_sx) r = 0 (0xffffffff8385e2c0) locked @ /syzkaller/managers/i386/kernel/sys/net/if.c:3039
Process 2 (clock) thread 0xfffffe00542ca740 (100029)
exclusive rw nd6 DAD queue (nd6 DAD queue) r = 0 (0xfffffe0054060178) locked @ /syzkaller/managers/i386/kernel/sys/kern/kern_rwlock.c:176
vfscache 3 1025K 3
pcb 23 669K 739
inodedep 238 601K 602
DEVFS1 262 262K 585
acpica 1674 184K 60830
routetbl 5555 183K 20002
tidhash 3 141K 3
vmem 3 134K 4
linker 352 130K 386
pagedep 8 130K 500
filedesc 14 105K 2686
ddb_capture 1 64K 1
dirrem 229 58K 506
umtx 320 40K 320
kdtrace 189 39K 3877
temp 35 37K 11631
BPF 14 19K 223
ifaddr 60 16K 1469
eventhandler 161 14K 161
freefile 105 14K 380
KTRACE 100 13K 100
kenv 95 12K 95
GEOM 61 11K 481
rman 86 11K 431
lltable 31 9K 1284
bmsafemap 2 9K 565
ip6ndp 25 6K 352
in6_multi 38 6K 1736
kqueue 48 6K 3612
ufs_dirhash 24 5K 24
UMA 267 5K 267
acpisem 28 4K 28
proc-args 74 3K 10067
pwddesc 46 3K 3576
terminal 11 3K 11
session 22 3K 254
clone 9 3K 9
uidinfo 3 3K 9
lockf 20 3K 79
Unitno 27 2K 661
tun 7 2K 160
mkdir 12 2K 970
selfd 24 2K 28349
ipsec 3 1K 3
newdirblk 6 1K 485
diradd 6 1K 536
mld 6 1K 159
CC Mem 3 1K 7
igmp 6 1K 159
nhops 6 1K 163
cdev 2 1K 2
lkpikmalloc 8 1K 9
osd 8 1K 20
inpcbpolicy 13 1K 1797
sctp_ifn 3 1K 337
netlink 2 1K 815
prison 6 1K 6
cryptodev 2 1K 49
filecaps 4 1K 396
sctp_vrf 1 1K 1
freework 1 1K 504
sctp_socko 0 0K 0
sctp_iter 0 0K 483
sctp_atky 0 0K 157
sctp_atcl 0 0K 157
sctp_a_it 0 0K 483
savedino 0 0K 313
freefrag 0 0K 13
ip6opt 0 0K 3
statfs 0 0K 295
namei_tracker 0 0K 0
export_host 0 0K 0
cl_savebuf 0 0K 5
aio 0 0K 0
ioctlops 0 0K 484
eventfd 0 0K 0
mbuf_jumbo_page 4096 8320 1078 14097 0 254 38494208 0
mbuf 256 8583 1080 38391 0 254 2473728 0
BUF TRIE 144 180 11636 804 0 62 1701504 0
malloc-384 384 4122 48 4276 0 30 1601280 0
malloc-4096 4096 380 8 4072 0 2 1589248 0
UMA Slabs 0 112 11223 3 11223 0 126 1257312 0
DEVCTL 1024 1000 100 1338 0 0 1126400 0
vmem btag 56 16308 75 16308 0 254 917448 0
FFS inode 1168 629 15 1010 0 8 752192 0
sctp_ep 1176 0 510 157 0 254 599760 0
RADIX NODE 144 3648 267 142745 0 62 563760 0
lkpicurr 176 2 3080 2 0 62 542432 0
malloc-2048 2048 185 7 342 0 8 393216 0
malloc-32 32 10807 407 12947 0 254 358848 0
VM OBJECT 264 1140 120 68316 0 30 332640 0
VNODE 448 665 55 1201 0 30 322560 0
malloc-1024 1024 281 23 604 0 16 311296 0
256 Bucket 2048 139 7 1060 0 8 299008 0
malloc-64 64 3901 698 13843 0 254 294336 0
THREAD 1824 142 18 300 0 8 291840 0
malloc-65536 65536 4 0 4 0 1 262144 0
malloc-256 256 226 704 1884 0 62 238080 0
malloc-16 16 14387 363 14934 0 254 236000 0
malloc-16384 16384 6 6 1262 0 1 196608 0
malloc-2048 2048 6 90 1067 0 8 196608 0
mbuf_packet 256 0 762 2539 0 254 195072 0
UMA Zones 768 239 0 239 0 16 183552 0
malloc-128 128 1169 226 28372 0 126 178560 0
FFS2 dinode 256 629 61 1009 0 62 176640 0
lkpimm 56 1 3095 1 0 254 173376 0
FPU_save_area 832 144 36 931 0 16 149760 0
S VFS Cache 104 1009 395 2005 0 126 146016 0
MAP ENTRY 96 1098 414 221579 0 126 145152 0
malloc-65536 65536 0 2 8 0 1 131072 0
malloc-128 128 778 245 6427 0 126 130944 0
unpcb 256 8 502 2324 0 254 130560 0
ksiginfo 112 55 989 945 0 126 116928 0
malloc-384 384 256 44 1648 0 30 115200 0
malloc-256 256 293 142 2443 0 62 111360 0
128 Bucket 1024 50 49 403 0 16 101376 0
PROC 1376 45 21 3575 0 8 90816 0
UMA Kegs 384 226 7 226 0 30 89472 0
64 Bucket 512 95 73 3885 0 30 86016 0
malloc-128 128 327 324 3178 0 126 83328 0
malloc-128 128 404 247 4343 0 126 83328 0
malloc-4096 4096 12 8 181 0 2 81920 0
filedesc0 1072 46 24 3576 0 8 75040 0
g_bio 408 0 180 7295 0 30 73440 0
malloc-64 64 513 558 1640 0 254 68544 0
malloc-32768 32768 0 2 120 0 1 65536 0
32 Bucket 256 66 189 3653 0 62 65280 0
malloc-384 384 106 44 599 0 30 57600 0
malloc-4096 4096 7 7 37 0 2 57344 0
malloc-64 64 108 711 34551 0 254 52416 0
malloc-64 64 473 346 2337 0 254 52416 0
malloc-64 64 335 484 646 0 254 52416 0
routing nhops 256 11 184 684 0 62 49920 0
malloc-256 256 52 143 1953 0 62 49920 0
malloc-256 256 68 127 2599 0 62 49920 0
malloc-16384 16384 3 0 3 0 1 49152 0
malloc-2048 2048 9 15 161 0 8 49152 0
malloc-2048 2048 5 19 912 0 8 49152 0
malloc-1024 1024 4 44 553 0 16 49152 0
pcpu-8 8 4996 1148 29865 0 254 49152 0
pipe 728 16 50 1783 0 16 48048 0
syncache 168 0 264 5 0 254 44352 0
malloc-8192 8192 5 0 5 0 1 40960 0
VMSPACE 616 29 37 3721 0 16 40656 0
udp_inpcb 424 9 81 1747 0 30 38160 0
da_ccb 544 0 70 1943 0 16 38080 0
malloc-64 64 40 527 85 0 254 36288 0
malloc-64 64 17 550 33054 0 254 36288 0
malloc-64 64 39 528 705 0 254 36288 0
malloc-128 128 20 259 63 0 126 35712 0
malloc-128 128 104 175 765 0 126 35712 0
malloc-128 128 79 200 87 0 126 35712 0
malloc-256 256 12 123 509 0 62 34560 0
malloc-256 256 5 130 3165 0 62 34560 0
malloc-256 256 30 105 977 0 62 34560 0
TURNSTILE 136 161 91 161 0 62 34272 0
malloc-16384 16384 0 2 160 0 1 32768 0
malloc-16384 16384 2 0 2 0 1 32768 0
malloc-8192 8192 3 1 104 0 1 32768 0
malloc-2048 2048 0 16 50 0 8 32768 0
malloc-2048 2048 7 9 164 0 8 32768 0
malloc-2048 2048 2 14 193 0 8 32768 0
malloc-2048 2048 1 15 686 0 8 32768 0
malloc-1024 1024 15 17 16 0 16 32768 0
malloc-1024 1024 14 18 334 0 16 32768 0
malloc-1024 1024 2 30 157 0 16 32768 0
malloc-1024 1024 10 22 10 0 16 32768 0
malloc-1024 1024 1 31 5930 0 16 32768 0
malloc-512 512 3 61 17 0 30 32768 0
malloc-512 512 3 61 1340 0 30 32768 0
malloc-512 512 4 60 55 0 30 32768 0
malloc-512 512 3 61 23 0 30 32768 0
malloc-512 512 8 56 22 0 30 32768 0
KNOTE 160 26 174 5594 0 62 32000 0
PGRP 120 22 242 254 0 126 31680 0
clpbuf 2624 0 12 23 0 4 31488 0
sctp_laddr 48 0 588 665 0 254 28224 0
16 Bucket 144 55 141 299 0 62 28224 0
4 Bucket 48 6 582 8 0 254 28224 0
cpuset 200 7 121 7 0 62 25600 0
ripcb 392 1 62 43 0 30 24696 0
malloc-8192 8192 1 2 3 0 1 24576 0
malloc-8192 8192 2 1 28 0 1 24576 0
rl_entry 40 53 553 53 0 254 24240 0
rtentry 168 14 130 684 0 62 24192 0
8 Bucket 80 58 242 443 0 126 24000 0
tcp_inpcb 1312 3 15 7 0 8 23616 0
malloc-384 384 0 60 343 0 30 23040 0
malloc-384 384 14 46 176 0 30 23040 0
Mountpoints 2816 2 6 2 0 4 22528 0
SLEEPQUEUE 88 161 95 161 0 126 22528 0
ertt 72 3 277 7 0 126 20160 0
malloc-32 32 3 627 639 0 254 20160 0
malloc-32 32 105 525 161 0 254 20160 0
malloc-32 32 314 316 3268 0 254 20160 0
malloc-32 32 56 574 1193 0 254 20160 0
malloc-32 32 51 579 617 0 254 20160 0
malloc-32 32 53 577 4023 0 254 20160 0
malloc-32 32 34 596 1081 0 254 20160 0
2 Bucket 32 71 559 593 0 254 20160 0
malloc-16384 16384 1 0 1 0 1 16384 0
malloc-8192 8192 2 0 2 0 1 16384 0
malloc-8192 8192 2 0 2 0 1 16384 0
malloc-8192 8192 2 0 2 0 1 16384 0
malloc-4096 4096 2 2 851 0 2 16384 0
malloc-1024 1024 0 16 3 0 16 16384 0
malloc-512 512 0 32 119 0 30 16384 0
kenv 258 17 43 1160 0 30 15480 0
tcp_inpcb ports 32 1 377 1 0 254 12096 0
malloc-16 16 198 552 393 0 254 12000 0
malloc-16 16 17 733 508 0 254 12000 0
malloc-16 16 49 701 1364 0 254 12000 0
malloc-16 16 36 714 203 0 254 12000 0
malloc-16 16 268 482 27991 0 254 12000 0
malloc-16 16 34 716 1007 0 254 12000 0
malloc-384 384 2 28 2 0 30 11520 0
malloc-4096 4096 1 1 1 0 2 8192 0
malloc-4096 4096 0 2 1 0 2 8192 0
malloc-4096 4096 1 1 1 0 2 8192 0
pcpu-16 16 8 504 8 0 254 8192 0
vtnet_tx_hdr 24 0 334 2260 0 254 8016 0
UMA Slabs 1 176 11 11 11 0 62 3872 0
AIO 208 0 0 0 0 62 0 0
malloc-32768 32768 0 0 0 0 1 0 0
malloc-32768 32768 0 0 0 0 1 0 0
malloc-32768 32768 0 0 0 0 1 0 0
malloc-16384 16384 0 0 0 0 1 0 0
malloc-16384 16384 0 0 0 0 1 0 0
malloc-512 512 0 0 0 0 30 0 0
malloc-512 512 0 0
---
If you want syzbot to run the reproducer, reply with:
#syz test: git://repo/address.git branch-or-commit-hash
If you attach or paste a git patch, syzbot will apply it before testing.
HEAD commit: 63a5fe834354 pflow: limit to no more than 128 flow exporters
git tree: freebsd-src
console output: https://syzkaller.appspot.com/x/log.txt?x=152c3c1de80000
dashboard link: https://syzkaller.appspot.com/bug?extid=1778b08d8e798b8dfada
userspace arch: i386
syz repro: https://syzkaller.appspot.com/x/repro.syz?x=13c99e73e80000
IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+1778b0...@syzkaller.appspotmail.com
Fatal trap 12: page fault while in kernel mode
cpuid = 0; apic id = 00
fault virtual address = 0x10
fault code = supervisor read data, page not present
stack pointer = 0x28:0xfffffe0053fc1ae0
frame pointer = 0x28:0xfffffe0053fc1cb0
code segment = base 0x0, limit 0xfffff, type 0x1b
= DPL 0, pres 1, long 1, def32 0, gran 1
processor eflags = interrupt enabled, resume, IOPL = 0
current process = 2 (clock (0))
rdi: 0000000000000010 rsi: 000000000000001c rdx: 0000000000000079
= DPL 0, pres 1, long 1, def32 0, gran 1
processor eflags = interrupt enabled, resume, IOPL = 0
current process = 2 (clock (0))
rcx: fffffe00033eee30 r8: 0000000000000000 r9: 00000000000000e0
rax: fffffe00033eee30 rbx: fffffe0057b2b000 rbp: fffffe0053fc1cb0
r10: f3e38a34f7f58bd9 r11: 0000000000000002 r12: 0000000000000000
r13: fffffe00542cadd0 r14: fffffe0053fc1c20 r15: fffffe00542ca740
trap number = 12
panic: page fault
cpuid = 0
time = 1705985560
panic: page fault
cpuid = 0
KDB: stack backtrace:
db_trace_self_wrapper() at db_trace_self_wrapper+0xc6/frame 0xfffffe0053fc1230
kdb_backtrace() at kdb_backtrace+0xd0/frame 0xfffffe0053fc1390
vpanic() at vpanic+0x271/frame 0xfffffe0053fc1530
panic() at panic+0xb5/frame 0xfffffe0053fc15f0
trap_fatal() at trap_fatal+0x7f1/frame 0xfffffe0053fc1710
trap_pfault() at trap_pfault+0x179/frame 0xfffffe0053fc1830
trap() at trap+0x5f3/frame 0xfffffe0053fc1a10
calltrap() at calltrap+0x8/frame 0xfffffe0053fc1a10
--- trap 0xc, rip = 0xffffffff81a5c21f, rsp = 0xfffffe0053fc1ae0, rbp = 0xfffffe0053fc1cb0 ---
nd6_dad_timer() at nd6_dad_timer+0x19f/frame 0xfffffe0053fc1cb0
softclock_call_cc() at softclock_call_cc+0x409/frame 0xfffffe0053fc1e80
softclock_thread() at softclock_thread+0x200/frame 0xfffffe0053fc1ef0
fork_exit() at fork_exit+0xcc/frame 0xfffffe0053fc1f30
fork_trampoline() at fork_trampoline+0xe/frame 0xfffffe0053fc1f30
--- trap 0, rip = 0, rsp = 0, rbp = 0 ---
KDB: enter: panic
[ thread pid 2 tid 100029 ]
Stopped at kdb_enter+0x6e: movq $0,0x2194407(%rip)
KDB: enter: panic
[ thread pid 2 tid 100029 ]
db> set $lines = 0
db> set $maxwidth = 0
db> show registers
cs 0x20
ds 0x3b
es 0x3b
fs 0x13
gs 0x1b
ss 0x28
rax 0x12
rcx 0xfffffe00033eee30
rdx 0xdffff7c000000000
rbx 0xffffffff826f87c0 .str.28
db> set $maxwidth = 0
db> show registers
cs 0x20
ds 0x3b
es 0x3b
fs 0x13
gs 0x1b
ss 0x28
rax 0x12
rcx 0xfffffe00033eee30
rdx 0xdffff7c000000000
rsp 0xfffffe0053fc1370
rbp 0xfffffe0053fc1390
rsi 0x1
rdi 0
r8 0
r9 0xffffffff
r10 0x1
r11 0x1
r12 0
r13 0xfffffe00542ca740
rdi 0
r8 0
r9 0xffffffff
r10 0x1
r11 0x1
r12 0
r14 0xffffffff826f87c0 .str.28
r15 0
rip 0xffffffff815cac0e kdb_enter+0x6e
rflags 0x46
kdb_enter+0x6e: movq $0,0x2194407(%rip)
db> show proc
Process 2 (clock) at 0xfffffe00541f7020:
state: NORMAL
uid: 0 gids: 0
parent: pid 0 at 0xffffffff836e9720
uid: 0 gids: 0
ABI: null
flag: 0x10000284 flag2: 0
reaper: 0xffffffff836e9720 reapsubtree: 2
flag: 0x10000284 flag2: 0
sigparent: 20
vmspace: 0xffffffff836ea6c0
(map 0xffffffff836ea6c0)
(map.pmap 0xffffffff836ea780)
(pmap 0xffffffff836ea7f0)
threads: 2
100029 Run CPU 0 [clock (0)]
100030 I [clock (1)]
db> ps
pid ppid pgrp uid state wmesg wchan cmd
3575 3572 3572 0 D ifnet_d 0xffffffff8385e2c0 ifconfig
100029 Run CPU 0 [clock (0)]
100030 I [clock (1)]
db> ps
pid ppid pgrp uid state wmesg wchan cmd
3574 3571 3571 0 R ifconfig
3573 3570 3570 0 D ifnet_d 0xffffffff8385e2c0 ifconfig
3572 776 3572 0 Ss wait 0xfffffe006d226ac0 syz-executor.2
3571 776 3571 0 Ss wait 0xfffffe006d227580 syz-executor.0
3570 776 3570 0 Ss wait 0xfffffe006cc165a0 syz-executor.3
3563 3466 424 0 S nanslp 0xffffffff83740401 sleep
3466 3461 424 0 S wait 0xfffffe006d228b00 sh
3461 424 424 0 S wait 0xfffffe0057bd4ae0 sh
776 774 774 0 S (threaded) syz-execprog
100094 S uwait 0xfffffe0057209400 syz-execprog
100116 S uwait 0xfffffe0057ab6500 syz-execprog
100117 S uwait 0xfffffe0057ab6600 syz-execprog
100118 S uwait 0xfffffe0057ab6700 syz-execprog
100119 S wait 0xfffffe0057bd5b00 syz-execprog
100120 S uwait 0xfffffe0054040980 syz-execprog
100121 S wait 0xfffffe0057bd5b00 syz-execprog
100122 S wait 0xfffffe0057bd5b00 syz-execprog
100123 S uwait 0xfffffe0057ab6900 syz-execprog
100124 S uwait 0xfffffe0054040b80 syz-execprog
100136 S kqread 0xfffffe00589eda00 syz-execprog
774 772 774 0 Ss pause 0xfffffe006cc14b70 csh
772 682 772 0 Ss select 0xfffffe0057a96640 sshd
748 1 748 0 Ss+ ttyin 0xfffffe00576a00b0 getty
747 1 747 0 Ss+ ttyin 0xfffffe00587e34b0 getty
746 1 746 0 Ss+ ttyin 0xfffffe00587e3cb0 getty
745 1 745 0 Ss+ ttyin 0xfffffe00587e44b0 getty
744 1 744 0 Ss+ ttyin 0xfffffe00587eacb0 getty
743 1 743 0 Ss+ ttyin 0xfffffe00587e4cb0 getty
742 1 742 0 Ss+ ttyin 0xfffffe00543494b0 getty
741 1 741 0 Ss+ ttyin 0xfffffe0054349cb0 getty
740 1 740 0 Ss+ ttyin 0xfffffe005434a4b0 getty
686 1 686 0 Ss nanslp 0xffffffff83740400 cron
682 1 682 0 Ss select 0xfffffe006cd3fcc0 sshd
495 1 495 0 Ss select 0xfffffe006cd3fd40 syslogd
424 1 424 0 Ss wait 0xfffffe006cc16040 devd
423 1 423 65 Ss select 0xfffffe0058a29c40 dhclient
338 1 338 0 Ss select 0xfffffe0057a9c1c0 dhclient
335 1 335 0 Ss select 0xfffffe0058a26240 dhclient
17 0 0 0 DL syncer 0xffffffff8385db20 [syncer]
16 0 0 0 DL vlruwt 0xfffffe00571c9040 [vnlru]
15 0 0 0 DL (threaded) [bufdaemon]
100079 D psleep 0xffffffff8385c100 [bufdaemon]
100082 D - 0xffffffff82c0a140 [bufspacedaemon-0]
100092 D sdflush 0xfffffe00085fe8e8 [/ worker]
9 0 0 0 DL psleep 0xffffffff838a55c0 [vmdaemon]
8 0 0 0 DL (threaded) [pagedaemon]
100077 D psleep 0xffffffff8388d438 [dom0]
100080 D launds 0xffffffff8388d444 [laundry: dom0]
100081 D umarcl 0xffffffff81d60f50 [uma]
7 0 0 0 DL - 0xffffffff834bdc10 [rand_harvestq]
6 0 0 0 DL pftm 0xffffffff84000ea0 [pf purge]
5 0 0 0 DL waiting 0xffffffff845c75a0 [sctp_iterator]
4 0 0 0 DL (threaded) [cam]
100044 D - 0xffffffff83488340 [doneq0]
100045 D - 0xffffffff834882c0 [async]
100076 D - 0xffffffff83488140 [scanner]
3 0 0 0 DL (threaded) [crypto]
100041 D crypto_ 0xffffffff83888c60 [crypto]
100042 D crypto_ 0xfffffe00542edd30 [crypto returns 0]
100043 D crypto_ 0xfffffe00542edd80 [crypto returns 1]
14 0 0 0 DL seqstat 0xfffffe000799c088 [sequencer 00]
13 0 0 0 DL (threaded) [geom]
100035 D - 0xffffffff836e8d40 [g_event]
100036 D - 0xffffffff836e8d60 [g_up]
100037 D - 0xffffffff836e8d80 [g_down]
1 0 1 0 SLs wait 0xfffffe00541f8040 [init]
10 0 0 0 DL audit_w 0xffffffff838896c0 [audit]
0 0 0 0 DLs (threaded) [kernel]
100000 D swapin 0xffffffff836e9720 [swapper]
100005 D - 0xfffffe00540a8800 [softirq_0]
100006 D - 0xfffffe00540a8600 [softirq_1]
100007 D - 0xfffffe00540a8400 [if_io_tqg_0]
100008 D - 0xfffffe00540a8200 [if_io_tqg_1]
100009 D - 0xfffffe00540a8000 [if_config_tqg_0]
100010 D - 0xfffffe00079e5000 [pci_hp taskq]
100011 D - 0xfffffe00079e4e00 [kqueue_ctx taskq]
100014 D - 0xfffffe00079e4b00 [thread taskq]
100016 D - 0xfffffe00079e4900 [aiod_kick taskq]
100017 D - 0xfffffe00079e4800 [deferred_unmount ta]
100018 D - 0xfffffe00079e4700 [inm_free taskq]
100019 D - 0xfffffe00079e4600 [in6m_free taskq]
100020 D - 0xfffffe00079e4500 [linuxkpi_irq_wq]
100021 D - 0xfffffe00079e4400 [linuxkpi_short_wq_0]
100022 D - 0xfffffe00079e4400 [linuxkpi_short_wq_1]
100023 D - 0xfffffe00079e4400 [linuxkpi_short_wq_2]
100024 D - 0xfffffe00079e4400 [linuxkpi_short_wq_3]
100025 D - 0xfffffe00079e4300 [linuxkpi_long_wq_0]
100026 D - 0xfffffe00079e4300 [linuxkpi_long_wq_1]
100027 D - 0xfffffe00079e4300 [linuxkpi_long_wq_2]
100028 D - 0xfffffe00079e4300 [linuxkpi_long_wq_3]
100034 D - 0xfffffe00079e4200 [firmware taskq]
100039 D - 0xfffffe00079e3700 [crypto_0]
100040 D - 0xfffffe00079e3700 [crypto_1]
100055 D - 0xfffffe00079e3000 [vtnet0 rxq 0]
100056 D - 0xfffffe00079e2e00 [vtnet0 txq 0]
100057 D - 0xfffffe00079e2d00 [vtnet0 rxq 1]
100058 D - 0xfffffe00079e2c00 [vtnet0 txq 1]
100062 D vtbslp 0xfffffe0057197400 [virtio_balloon]
100066 D - 0xffffffff826fda20 [deadlkres]
100070 D - 0xfffffe00079e3200 [acpi_task_0]
100071 D - 0xfffffe00079e3200 [acpi_task_1]
100072 D - 0xfffffe00079e3200 [acpi_task_2]
100074 D - 0xfffffe00079e5100 [mca taskq]
100075 D - 0xfffffe00079e3100 [CAM taskq]
db> show all locks
Process 3574 (ifconfig) thread 0xfffffe006cdd4000 (100114)
exclusive sx ifnet_detach_sx (ifnet_detach_sx) r = 0 (0xffffffff8385e2c0) locked @ /syzkaller/managers/i386/kernel/sys/net/if.c:3039
Process 2 (clock) thread 0xfffffe00542ca740 (100029)
exclusive rw nd6 DAD queue (nd6 DAD queue) r = 0 (0xfffffe0054060178) locked @ /syzkaller/managers/i386/kernel/sys/kern/kern_rwlock.c:176
db> show malloc
Type InUse MemUse Requests
pf_hash 5 11524K 5
tcp_hpts 7 4801K 7
devbuf 4192 4324K 4220
sysctloid 34817 2052K 34888
Type InUse MemUse Requests
pf_hash 5 11524K 5
tcp_hpts 7 4801K 7
devbuf 4192 4324K 4220
vtbuf 24 1968K 46
kobj 326 1304K 488
newblk 7 1026K 1189
kobj 326 1304K 488
vfscache 3 1025K 3
pcb 23 669K 739
inodedep 238 601K 602
ufs_quota 1 512K 1
vfs_hash 1 512K 1
callout 2 512K 2
intr 4 472K 4
LRO 360 363K 674
vfs_hash 1 512K 1
callout 2 512K 2
intr 4 472K 4
DEVFS1 262 262K 585
vnet_data 2 224K 2
acpitask 1 224K 1
subproc 113 210K 3643
acpitask 1 224K 1
acpica 1674 184K 60830
routetbl 5555 183K 20002
tidhash 3 141K 3
vmem 3 134K 4
linker 352 130K 386
pagedep 8 130K 500
tfo_ccache 1 128K 1
IP reass 1 128K 1
sem 4 106K 4
IP reass 1 128K 1
filedesc 14 105K 2686
gtaskqueue 18 98K 18
bus 985 81K 5155
mtx_pool 2 72K 2
bus 985 81K 5155
mtx_pool 2 72K 2
syncache 1 68K 1
NFSD srvcache 3 68K 3
module 513 65K 513
NFSD srvcache 3 68K 3
ddb_capture 1 64K 1
dirrem 229 58K 506
umtx 320 40K 320
kdtrace 189 39K 3877
temp 35 37K 11631
hostcache 1 32K 1
shm 1 32K 1
DEVFS3 128 32K 291
shm 1 32K 1
msg 4 30K 4
kbdmux 6 28K 6
DEVFS_RULE 56 20K 56
kbdmux 6 28K 6
BPF 14 19K 223
ufs_mount 4 17K 5
proc 3 17K 3
tty 16 16K 16
proc 3 17K 3
ifaddr 60 16K 1469
ithread 97 16K 97
bus-sc 34 15K 1687
ifnet 8 15K 160
bus-sc 34 15K 1687
eventhandler 161 14K 161
freefile 105 14K 380
KTRACE 100 13K 100
kenv 95 12K 95
GEOM 61 11K 481
rman 86 11K 431
CAM queue 5 11K 1528
pf_ifnet 31 10K 784
lltable 31 9K 1284
bmsafemap 2 9K 565
rpc 4 9K 4
devstat 4 9K 4
UART 12 9K 12
ksem 1 8K 1
shmfd 1 8K 1
devstat 4 9K 4
UART 12 9K 12
ksem 1 8K 1
pfs_vncache 1 8K 1
audit_evclass 238 8K 300
ether_multi 85 7K 4704
audit_evclass 238 8K 300
taskqueue 63 7K 63
sglist 6 7K 6
sglist 6 7K 6
CAM DEV 3 6K 510
cred 23 6K 374
ip6ndp 25 6K 352
in6_multi 38 6K 1736
kqueue 48 6K 3612
pfs_nodes 20 5K 20
hhook 15 5K 17
plimit 19 5K 1563
hhook 15 5K 17
ufs_dirhash 24 5K 24
UMA 267 5K 267
vt 11 5K 11
memdesc 1 4K 1
MCA 32 4K 32
evdev 4 4K 4
memdesc 1 4K 1
MCA 32 4K 32
acpisem 28 4K 28
proc-args 74 3K 10067
pwddesc 46 3K 3576
terminal 11 3K 11
session 22 3K 254
clone 9 3K 9
uidinfo 3 3K 9
lockf 20 3K 79
local_apic 1 2K 1
io_apic 1 2K 1
ipsec-saq 2 2K 2
io_apic 1 2K 1
Unitno 27 2K 661
tun 7 2K 160
CAM XPT 22 2K 543
msi 12 2K 12
mkdir 12 2K 970
selfd 24 2K 28349
toponodes 6 2K 6
ipsecpolicy 2 2K 2
ipsecpolicy 2 2K 2
acpidev 20 2K 20
softdep 1 1K 1
sahead 1 1K 1
secasvar 1 1K 1
vnodemarker 2 1K 22
softdep 1 1K 1
sahead 1 1K 1
secasvar 1 1K 1
NFSD session 1 1K 1
select 7 1K 160
CAM periph 4 1K 271
sctp_ifa 6 1K 337
ipsec 3 1K 3
newdirblk 6 1K 485
diradd 6 1K 536
mld 6 1K 159
CC Mem 3 1K 7
igmp 6 1K 159
nhops 6 1K 163
pfil 6 1K 6
isadev 6 1K 6
mount 16 1K 89
pci_link 10 1K 10
crypto 4 1K 4
encap_export_host 12 1K 12
in_multi 2 1K 163
isadev 6 1K 6
mount 16 1K 89
pci_link 10 1K 10
crypto 4 1K 4
encap_export_host 12 1K 12
cdev 2 1K 2
lkpikmalloc 8 1K 9
osd 8 1K 20
inpcbpolicy 13 1K 1797
sctp_ifn 3 1K 337
netlink 2 1K 815
chacha20random 1 1K 1
biobuf 1 1K 1
vnodes 1 1K 1
NFSD lckfile 1 1K 1
NFSD V4client 1 1K 1
DEVFSP 4 1K 180
biobuf 1 1K 1
vnodes 1 1K 1
NFSD lckfile 1 1K 1
NFSD V4client 1 1K 1
DEVFS 9 1K 10
CAM SIM 2 1K 2
feeder 7 1K 7
tcpfunc 3 1K 3
loginclass 3 1K 7
CAM SIM 2 1K 2
feeder 7 1K 7
tcpfunc 3 1K 3
prison 6 1K 6
cryptodev 2 1K 49
nexusdev 8 1K 8
apmdev 1 1K 1
atkbddev 2 1K 2
procdesc 1 1K 84
apmdev 1 1K 1
atkbddev 2 1K 2
pmchooks 1 1K 1
CAM path 4 1K 1034
CAM dev queue 2 1K 2
CAM I/O Scheduler 1 1K 1
soname 4 1K 4358
CAM path 4 1K 1034
CAM dev queue 2 1K 2
CAM I/O Scheduler 1 1K 1
filecaps 4 1K 396
sctp_vrf 1 1K 1
freework 1 1K 504
vnet 1 1K 1
pmc 1 1K 1
entropy 2 1K 204
pmc 1 1K 1
acpiintr 1 1K 1
cpus 2 1K 2
vnet_data_free 1 1K 1
Per-cpu 1 1K 1
p1003.1b 1 1K 1
sctp_mcore 0 0K 0
cpus 2 1K 2
vnet_data_free 1 1K 1
Per-cpu 1 1K 1
p1003.1b 1 1K 1
sctp_socko 0 0K 0
sctp_iter 0 0K 483
sctp_mvrf 0 0K 0
sctp_timw 0 0K 0
sctp_cpal 0 0K 0
sctp_cmsg 0 0K 0
sctp_stre 0 0K 0
sctp_athi 0 0K 0
sctp_athm 0 0K 157
sctp_timw 0 0K 0
sctp_cpal 0 0K 0
sctp_cmsg 0 0K 0
sctp_stre 0 0K 0
sctp_athi 0 0K 0
sctp_atky 0 0K 157
sctp_atcl 0 0K 157
sctp_a_it 0 0K 483
sctp_aadr 0 0K 0
sctp_stro 0 0K 0
sctp_stri 0 0K 0
sctp_map 0 0K 0
sctp_stro 0 0K 0
sctp_stri 0 0K 0
sctp_map 0 0K 0
mqdata 0 0K 0
tcp_do 0 0K 0
tcp_fsb 0 0K 0
tcp_do 0 0K 0
tcp_fsb 0 0K 0
pf_table 0 0K 0
pf_rule 0 0K 0
pf_altq 0 0K 0
pf_osfp 0 0K 0
pf_krule_item 0 0K 0
pf_temp 0 0K 0
filemon 0 0K 0
pf_rule 0 0K 0
pf_altq 0 0K 0
pf_osfp 0 0K 0
pf_krule_item 0 0K 0
pf_temp 0 0K 0
ipcomp 0 0K 0
esp 0 0K 0
ah 0 0K 0
esp 0 0K 0
ah 0 0K 0
sentinel 0 0K 0
jfsync 0 0K 0
jtrunc 0 0K 0
sbdep 0 0K 7
jfsync 0 0K 0
jtrunc 0 0K 0
jsegdep 0 0K 0
jseg 0 0K 0
jfreefrag 0 0K 0
jfreeblk 0 0K 0
jnewblk 0 0K 0
jmvref 0 0K 0
jremref 0 0K 0
jaddref 0 0K 0
freedep 0 0K 0
freeblks 0 0K 503
jseg 0 0K 0
jfreefrag 0 0K 0
jfreeblk 0 0K 0
jnewblk 0 0K 0
jmvref 0 0K 0
jremref 0 0K 0
jaddref 0 0K 0
freedep 0 0K 0
freefrag 0 0K 13
namei_tracker 0 0K 0
export_host 0 0K 0
cl_savebuf 0 0K 5
aio 0 0K 0
lio 0 0K 0
acl 0 0K 0
mbuf_tag 0 0K 0
ktls 0 0K 0
accf 0 0K 0
pts 0 0K 0
timerfd 0 0K 0
iov 0 0K 36536
acl 0 0K 0
mbuf_tag 0 0K 0
ktls 0 0K 0
accf 0 0K 0
pts 0 0K 0
timerfd 0 0K 0
ioctlops 0 0K 484
eventfd 0 0K 0
Witness 0 0K 0
stack 0 0K 0
sbuf 0 0K 288
firmware 0 0K 0
compressor 0 0K 0
SWAP 0 0K 0
sysctltmp 0 0K 1624
stack 0 0K 0
sbuf 0 0K 288
firmware 0 0K 0
compressor 0 0K 0
SWAP 0 0K 0
sysctl 0 0K 3
ekcd 0 0K 0
dumper 0 0K 0
sendfile 0 0K 0
rctl 0 0K 0
cache 0 0K 0
kcovinfo 0 0K 0
ekcd 0 0K 0
dumper 0 0K 0
sendfile 0 0K 0
rctl 0 0K 0
cache 0 0K 0
mbuf 256 8583 1080 38391 0 254 2473728 0
BUF TRIE 144 180 11636 804 0 62 1701504 0
malloc-384 384 4122 48 4276 0 30 1601280 0
malloc-4096 4096 380 8 4072 0 2 1589248 0
mbuf_cluster 2048 762 0 762 0 254 1560576 0
malloc-128 128 11446 272 18354 0 126 1499904 0
UMA Slabs 0 112 11223 3 11223 0 126 1257312 0
DEVCTL 1024 1000 100 1338 0 0 1126400 0
vmem btag 56 16308 75 16308 0 254 917448 0
FFS inode 1168 629 15 1010 0 8 752192 0
sctp_ep 1176 0 510 157 0 254 599760 0
RADIX NODE 144 3648 267 142745 0 62 563760 0
lkpicurr 176 2 3080 2 0 62 542432 0
pbuf 2624 0 198 0 0 2 519552 0
socket 960 22 486 4646 0 254 487680 0
malloc-2048 2048 185 7 342 0 8 393216 0
malloc-32 32 10807 407 12947 0 254 358848 0
VM OBJECT 264 1140 120 68316 0 30 332640 0
VNODE 448 665 55 1201 0 30 322560 0
malloc-1024 1024 281 23 604 0 16 311296 0
256 Bucket 2048 139 7 1060 0 8 299008 0
malloc-64 64 3901 698 13843 0 254 294336 0
THREAD 1824 142 18 300 0 8 291840 0
malloc-65536 65536 4 0 4 0 1 262144 0
malloc-256 256 226 704 1884 0 62 238080 0
malloc-16 16 14387 363 14934 0 254 236000 0
malloc-16384 16384 6 6 1262 0 1 196608 0
malloc-2048 2048 6 90 1067 0 8 196608 0
mbuf_packet 256 0 762 2539 0 254 195072 0
UMA Zones 768 239 0 239 0 16 183552 0
malloc-128 128 1169 226 28372 0 126 178560 0
FFS2 dinode 256 629 61 1009 0 62 176640 0
lkpimm 56 1 3095 1 0 254 173376 0
FPU_save_area 832 144 36 931 0 16 149760 0
S VFS Cache 104 1009 395 2005 0 126 146016 0
MAP ENTRY 96 1098 414 221579 0 126 145152 0
malloc-65536 65536 0 2 8 0 1 131072 0
malloc-65536 65536 0 2 110 0 1 131072 0
malloc-65536 65536 2 0 2 0 1 131072 0
malloc-65536 65536 0 2 346 0 1 131072 0
malloc-65536 65536 2 0 2 0 1 131072 0
malloc-128 128 778 245 6427 0 126 130944 0
unpcb 256 8 502 2324 0 254 130560 0
ksiginfo 112 55 989 945 0 126 116928 0
malloc-384 384 256 44 1648 0 30 115200 0
malloc-256 256 293 142 2443 0 62 111360 0
128 Bucket 1024 50 49 403 0 16 101376 0
malloc-32768 32768 3 0 3 0 1 98304 0
malloc-32768 32768 3 0 3 0 1 98304 0
malloc-256 256 232 143 6619 0 62 96000 0
malloc-32768 32768 3 0 3 0 1 98304 0
PROC 1376 45 21 3575 0 8 90816 0
UMA Kegs 384 226 7 226 0 30 89472 0
64 Bucket 512 95 73 3885 0 30 86016 0
malloc-128 128 327 324 3178 0 126 83328 0
malloc-128 128 404 247 4343 0 126 83328 0
malloc-4096 4096 12 8 181 0 2 81920 0
filedesc0 1072 46 24 3576 0 8 75040 0
g_bio 408 0 180 7295 0 30 73440 0
malloc-64 64 513 558 1640 0 254 68544 0
malloc-65536 65536 1 0 1 0 1 65536 0
malloc-65536 65536 1 0 1 0 1 65536 0
malloc-32768 32768 2 0 2 0 1 65536 0
malloc-65536 65536 1 0 1 0 1 65536 0
malloc-32768 32768 0 2 120 0 1 65536 0
32 Bucket 256 66 189 3653 0 62 65280 0
malloc-384 384 106 44 599 0 30 57600 0
malloc-4096 4096 7 7 37 0 2 57344 0
malloc-64 64 108 711 34551 0 254 52416 0
malloc-64 64 473 346 2337 0 254 52416 0
malloc-64 64 335 484 646 0 254 52416 0
routing nhops 256 11 184 684 0 62 49920 0
malloc-256 256 52 143 1953 0 62 49920 0
malloc-256 256 68 127 2599 0 62 49920 0
DIRHASH 1024 35 13 35 0 16 49152 0
NAMEI 1024 0 48 53716 0 16 49152 0
malloc-16384 16384 3 0 3 0 1 49152 0
malloc-8192 8192 6 0 6 0 1 49152 0
malloc-4096 4096 6 6 166 0 2 49152 0
malloc-2048 2048 9 15 161 0 8 49152 0
malloc-2048 2048 5 19 912 0 8 49152 0
malloc-1024 1024 4 44 553 0 16 49152 0
pcpu-8 8 4996 1148 29865 0 254 49152 0
pipe 728 16 50 1783 0 16 48048 0
syncache 168 0 264 5 0 254 44352 0
malloc-8192 8192 5 0 5 0 1 40960 0
VMSPACE 616 29 37 3721 0 16 40656 0
udp_inpcb 424 9 81 1747 0 30 38160 0
da_ccb 544 0 70 1943 0 16 38080 0
malloc-64 64 40 527 85 0 254 36288 0
malloc-64 64 17 550 33054 0 254 36288 0
malloc-64 64 39 528 705 0 254 36288 0
malloc-128 128 20 259 63 0 126 35712 0
malloc-128 128 104 175 765 0 126 35712 0
malloc-128 128 79 200 87 0 126 35712 0
ttyoutq 256 72 63 160 0 62 34560 0
malloc-384 384 52 38 52 0 30 34560 0
malloc-256 256 12 123 509 0 62 34560 0
malloc-256 256 5 130 3165 0 62 34560 0
malloc-256 256 30 105 977 0 62 34560 0
TURNSTILE 136 161 91 161 0 62 34272 0
malloc-16384 16384 0 2 160 0 1 32768 0
malloc-16384 16384 2 0 2 0 1 32768 0
malloc-8192 8192 3 1 104 0 1 32768 0
malloc-2048 2048 0 16 50 0 8 32768 0
malloc-2048 2048 7 9 164 0 8 32768 0
malloc-2048 2048 2 14 193 0 8 32768 0
malloc-2048 2048 1 15 686 0 8 32768 0
malloc-1024 1024 15 17 16 0 16 32768 0
malloc-1024 1024 14 18 334 0 16 32768 0
malloc-1024 1024 2 30 157 0 16 32768 0
malloc-1024 1024 10 22 10 0 16 32768 0
malloc-1024 1024 1 31 5930 0 16 32768 0
malloc-512 512 3 61 17 0 30 32768 0
malloc-512 512 3 61 1340 0 30 32768 0
malloc-512 512 4 60 55 0 30 32768 0
malloc-512 512 3 61 23 0 30 32768 0
malloc-512 512 8 56 22 0 30 32768 0
pcpu-64 64 487 25 487 0 254 32768 0
PWD 40 13 795 585 0 254 32320 0
KNOTE 160 26 174 5594 0 62 32000 0
ttyinq 160 135 65 300 0 62 32000 0
Files 80 102 298 34007 0 126 32000 0
PGRP 120 22 242 254 0 126 31680 0
clpbuf 2624 0 12 23 0 4 31488 0
sctp_laddr 48 0 588 665 0 254 28224 0
16 Bucket 144 55 141 299 0 62 28224 0
4 Bucket 48 6 582 8 0 254 28224 0
cpuset 200 7 121 7 0 62 25600 0
ripcb 392 1 62 43 0 30 24696 0
malloc-8192 8192 1 2 3 0 1 24576 0
malloc-8192 8192 2 1 28 0 1 24576 0
rl_entry 40 53 553 53 0 254 24240 0
rtentry 168 14 130 684 0 62 24192 0
8 Bucket 80 58 242 443 0 126 24000 0
tcp_inpcb 1312 3 15 7 0 8 23616 0
malloc-384 384 0 60 343 0 30 23040 0
malloc-384 384 14 46 176 0 30 23040 0
Mountpoints 2816 2 6 2 0 4 22528 0
SLEEPQUEUE 88 161 95 161 0 126 22528 0
hostcache 64 1 314 1 0 254 20160 0
udp_inpcb ports 32 3 627 40 0 254 20160 0
ertt 72 3 277 7 0 126 20160 0
malloc-32 32 3 627 639 0 254 20160 0
malloc-32 32 105 525 161 0 254 20160 0
malloc-32 32 314 316 3268 0 254 20160 0
malloc-32 32 56 574 1193 0 254 20160 0
malloc-32 32 51 579 617 0 254 20160 0
malloc-32 32 53 577 4023 0 254 20160 0
malloc-32 32 34 596 1081 0 254 20160 0
2 Bucket 32 71 559 593 0 254 20160 0
epoch_record pcpu 256 4 60 4 0 62 16384 0
malloc-16384 16384 1 0 1 0 1 16384 0
malloc-16384 16384 1 0 1 0 1 16384 0
malloc-8192 8192 2 0 2 0 1 16384 0
malloc-8192 8192 2 0 2 0 1 16384 0
malloc-8192 8192 2 0 2 0 1 16384 0
malloc-4096 4096 2 2 851 0 2 16384 0
malloc-1024 1024 0 16 3 0 16 16384 0
malloc-512 512 0 32 119 0 30 16384 0
SMR CPU 32 7 504 7 0 254 16352 0
malloc-16 16 214 786 9936 0 254 16000 0
kenv 258 17 43 1160 0 30 15480 0
mqnode 416 3 33 3 0 30 14976 0
vmem 1856 1 7 1 0 8 14848 0
SMR SHARED 24 7 504 7 0 254 12264 0
ertt_txseginfo 40 0 303 256 0 254 12120 0
vmem 1856 1 7 1 0 8 14848 0
SMR SHARED 24 7 504 7 0 254 12264 0
tcp_inpcb ports 32 1 377 1 0 254 12096 0
malloc-16 16 198 552 393 0 254 12000 0
malloc-16 16 17 733 508 0 254 12000 0
malloc-16 16 49 701 1364 0 254 12000 0
malloc-16 16 36 714 203 0 254 12000 0
malloc-16 16 268 482 27991 0 254 12000 0
malloc-16 16 34 716 1007 0 254 12000 0
malloc-384 384 2 28 2 0 30 11520 0
malloc-4096 4096 1 1 1 0 2 8192 0
malloc-4096 4096 0 2 1 0 2 8192 0
malloc-4096 4096 1 1 1 0 2 8192 0
pcpu-16 16 8 504 8 0 254 8192 0
vtnet_tx_hdr 24 0 334 2260 0 254 8016 0
UMA Slabs 1 176 11 11 11 0 62 3872 0
KMAP ENTRY 96 12 27 14 0 0 3744 0
FFS1 dinode 128 0 0 0 0 126 0 0
ada_ccb 272 0 0 0 0 30 0 0
swblk 136 0 0 0 0 62 0 0
swpctrie 144 0 0 0 0 62 0 0
cdg_qdiffsample 16 0 0 0 0 254 0 0
pf state scrubs 40 0 0 0 0 254 0 0
pf frag entries 40 0 0 0 0 254 0 0
pf frags 248 0 0 0 0 62 0 0
pf table entries 160 0 0 0 0 254 0 0
pf table entry counters 64 0 0 0 0 254 0 0
pf source nodes 152 0 0 0 0 254 0 0
pf state keys 88 0 0 0 0 126 0 0
pf states 360 0 0 0 0 254 0 0
FFS1 dinode 128 0 0 0 0 126 0 0
ada_ccb 272 0 0 0 0 30 0 0
swblk 136 0 0 0 0 62 0 0
swpctrie 144 0 0 0 0 62 0 0
cdg_qdiffsample 16 0 0 0 0 254 0 0
pf state scrubs 40 0 0 0 0 254 0 0
pf frag entries 40 0 0 0 0 254 0 0
pf frags 248 0 0 0 0 62 0 0
pf table entries 160 0 0 0 0 254 0 0
pf table entry counters 64 0 0 0 0 254 0 0
pf source nodes 152 0 0 0 0 254 0 0
pf state keys 88 0 0 0 0 126 0 0
pf tags 104 0 0 0 0 126 0 0
pf mtags 184 0 0 0 0 62 0 0
tcp_rack_pcb 1024 0 0 0 0 16 0 0
tcp_rack_map 128 0 0 0 0 126 0 0
tcp_bbr_pcb 832 0 0 0 0 16 0 0
tcp_bbr_map 128 0 0 0 0 126 0 0
tfo_ccache_entries 80 0 0 0 0 126 0 0
tfo 4 0 0 0 0 254 0 0
sackhole 32 0 0 0 0 254 0 0
ipq 56 0 0 0 0 254 0 0
sctp_asconf_ack 48 0 0 0 0 254 0 0
sctp_asconf 40 0 0 0 0 254 0 0
sctp_stream_msg_out 112 0 0 0 0 254 0 0
sctp_readq 152 0 0 0 0 254 0 0
sctp_chunk 152 0 0 0 0 254 0 0
sctp_raddr 736 0 0 0 0 254 0 0
sctp_asoc 2256 0 0 0 0 254 0 0
tcp_log_id_node 120 0 0 0 0 126 0 0
tcp_log_id_bucket 176 0 0 0 0 62 0 0
tcp_log 416 0 0 0 0 254 0 0
tcpreass 48 0 0 0 0 254 0 0
udplite_inpcb ports 32 0 0 0 0 254 0 0
udplite_inpcb 424 0 0 0 0 30 0 0
pf mtags 184 0 0 0 0 62 0 0
tcp_rack_pcb 1024 0 0 0 0 16 0 0
tcp_rack_map 128 0 0 0 0 126 0 0
tcp_bbr_pcb 832 0 0 0 0 16 0 0
tcp_bbr_map 128 0 0 0 0 126 0 0
tfo_ccache_entries 80 0 0 0 0 126 0 0
tfo 4 0 0 0 0 254 0 0
sackhole 32 0 0 0 0 254 0 0
ipq 56 0 0 0 0 254 0 0
sctp_asconf_ack 48 0 0 0 0 254 0 0
sctp_asconf 40 0 0 0 0 254 0 0
sctp_stream_msg_out 112 0 0 0 0 254 0 0
sctp_readq 152 0 0 0 0 254 0 0
sctp_chunk 152 0 0 0 0 254 0 0
sctp_raddr 736 0 0 0 0 254 0 0
sctp_asoc 2256 0 0 0 0 254 0 0
tcp_log_id_node 120 0 0 0 0 126 0 0
tcp_log_id_bucket 176 0 0 0 0 62 0 0
tcp_log 416 0 0 0 0 254 0 0
tcpreass 48 0 0 0 0 254 0 0
udplite_inpcb ports 32 0 0 0 0 254 0 0
ripcb ports 32 0 0 0 0 254 0 0
IPsec SA lft_c 16 0 0 0 0 254 0 0
itimer 352 0 0 0 0 30 0 0
IPsec SA lft_c 16 0 0 0 0 254 0 0
AIOLIO 272 0 0 0 0 30 0 0
AIOCB 552 0 0 0 0 16 0 0
AIO 208 0 0 0 0 62 0 0
mqnotifier 216 0 0 0 0 62 0 0
mvdata 64 0 0 0 0 254 0 0
mqueue 248 0 0 0 0 62 0 0
TMPFS node 232 0 0 0 0 62 0 0
NCLNODE 608 0 0 0 0 16 0 0
LTS VFS Cache 360 0 0 0 0 30 0 0
L VFS Cache 320 0 0 0 0 30 0 0
STS VFS Cache 144 0 0 0 0 62 0 0
cryptop 280 0 0 0 0 30 0 0
linux_dma_object 32 0 0 0 0 254 0 0
linux_dma_pctrie 144 0 0 0 0 62 0 0
IOMMU_MAP_ENTRY 104 0 0 0 0 126 0 0
mbuf_jumbo_16k 16384 0 0 0 0 254 0 0
mbuf_jumbo_9k 9216 0 0 0 0 254 0 0
audit_record 1280 0 0 0 0 8 0 0
domainset 40 0 0 0 0 254 0 0
mvdata 64 0 0 0 0 254 0 0
mqueue 248 0 0 0 0 62 0 0
TMPFS node 232 0 0 0 0 62 0 0
NCLNODE 608 0 0 0 0 16 0 0
LTS VFS Cache 360 0 0 0 0 30 0 0
L VFS Cache 320 0 0 0 0 30 0 0
STS VFS Cache 144 0 0 0 0 62 0 0
cryptop 280 0 0 0 0 30 0 0
linux_dma_object 32 0 0 0 0 254 0 0
linux_dma_pctrie 144 0 0 0 0 62 0 0
IOMMU_MAP_ENTRY 104 0 0 0 0 126 0 0
mbuf_jumbo_16k 16384 0 0 0 0 254 0 0
mbuf_jumbo_9k 9216 0 0 0 0 254 0 0
audit_record 1280 0 0 0 0 8 0 0
MAC labels 40 0 0 0 0 254 0 0
vnpbuf 2624 0 0 0 0 16 0 0
nfspbuf 2624 0 0 0 0 4 0 0
swwbuf 2624 0 0 0 0 2 0 0
swrbuf 2624 0 0 0 0 4 0 0
umtx_shm 88 0 0 0 0 126 0 0
umtx pi 96 0 0 0 0 126 0 0
rangeset pctrie nodes 144 0 0 0 0 62 0 0
malloc-65536 65536 0 0 0 0 1 0 0
malloc-32768 32768 0 0 0 0 1 0 0
vnpbuf 2624 0 0 0 0 16 0 0
nfspbuf 2624 0 0 0 0 4 0 0
swwbuf 2624 0 0 0 0 2 0 0
swrbuf 2624 0 0 0 0 4 0 0
umtx_shm 88 0 0 0 0 126 0 0
umtx pi 96 0 0 0 0 126 0 0
rangeset pctrie nodes 144 0 0 0 0 62 0 0
malloc-65536 65536 0 0 0 0 1 0 0
malloc-32768 32768 0 0 0 0 1 0 0
malloc-32768 32768 0 0 0 0 1 0 0
malloc-32768 32768 0 0 0 0 1 0 0
malloc-16384 16384 0 0 0 0 1 0 0
malloc-16384 16384 0 0 0 0 1 0 0
malloc-512 512 0 0 0 0 30 0 0
malloc-512 512 0 0
---
If you want syzbot to run the reproducer, reply with:
#syz test: git://repo/address.git branch-or-commit-hash
If you attach or paste a git patch, syzbot will apply it before testing.
Reply all
Reply to author
Forward
0 new messages