panic: pmap_kasan_enter_alloc_4k: no memory to grow shadow map
1 view
Skip to first unread message
syzbot
Jul 14, 2021, 6:53:20 AM7/14/21
to syzkaller-f...@googlegroups.com
Hello,
syzbot found the following issue on:
HEAD commit: d411b285 pmap: Micro-optimize pmap_remove_pages() on amd64..
git tree: https://github.com/freebsd/freebsd-src.git main
console output: https://syzkaller.appspot.com/x/log.txt?x=17c2c6b0300000
dashboard link: https://syzkaller.appspot.com/bug?extid=e5e4bf10034f89aef0ea
Unfortunately, I don't have any reproducer for this issue yet.
IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+e5e4bf...@syzkaller.appspotmail.com
panic: pmap_kasan_enter_alloc_4k: no memory to grow shadow map
cpuid = 0
time = 1626259935
KDB: stack backtrace:
db_trace_self_wrapper() at db_trace_self_wrapper+0xc7/frame 0xfffffe009c288f70
kdb_backtrace() at kdb_backtrace+0xd3/frame 0xfffffe009c2890d0
vpanic() at vpanic+0x2c5/frame 0xfffffe009c2891b0
panic() at panic+0xb5/frame 0xfffffe009c289280
pmap_kasan_enter() at pmap_kasan_enter+0x77f/frame 0xfffffe009c2892c0
kasan_shadow_map() at kasan_shadow_map+0x88/frame 0xfffffe009c2892f0
pmap_growkernel() at pmap_growkernel+0xdf/frame 0xfffffe009c289330
vm_map_insert() at vm_map_insert+0x67e/frame 0xfffffe009c289490
vm_map_find() at vm_map_find+0x903/frame 0xfffffe009c289570
kva_import() at kva_import+0xd4/frame 0xfffffe009c289650
vmem_try_fetch() at vmem_try_fetch+0x21f/frame 0xfffffe009c289740
vmem_xalloc() at vmem_xalloc+0xc3f/frame 0xfffffe009c289800
kva_import_domain() at kva_import_domain+0x5f/frame 0xfffffe009c289850
vmem_try_fetch() at vmem_try_fetch+0x21f/frame 0xfffffe009c289930
vmem_xalloc() at vmem_xalloc+0xc3f/frame 0xfffffe009c2899f0
vmem_alloc() at vmem_alloc+0x106/frame 0xfffffe009c289a50
kmem_malloc_domainset() at kmem_malloc_domainset+0x183/frame 0xfffffe009c289b90
malloc_large() at malloc_large+0x3e/frame 0xfffffe009c289bd0
pfioctl() at pfioctl+0x23f5/frame 0xfffffe009c28b2b0
devfs_ioctl() at devfs_ioctl+0x22a/frame 0xfffffe009c28b390
VOP_IOCTL_APV() at VOP_IOCTL_APV+0xb0/frame 0xfffffe009c28b3d0
vn_ioctl() at vn_ioctl+0x215/frame 0xfffffe009c28b720
devfs_ioctl_f() at devfs_ioctl_f+0x71/frame 0xfffffe009c28b770
kern_ioctl() at kern_ioctl+0x62e/frame 0xfffffe009c28b870
sys_ioctl() at sys_ioctl+0x3b6/frame 0xfffffe009c28b9f0
amd64_syscall() at amd64_syscall+0x425/frame 0xfffffe009c28bbf0
fast_syscall_common() at fast_syscall_common+0xf8/frame 0xfffffe009c28bbf0
--- syscall (198, FreeBSD ELF64, nosys), rip = 0x287eda, rsp = 0x7fffdffdcf08, rbp = 0x7fffdffdcf70 ---
KDB: enter: panic
[ thread pid 7103 tid 106782 ]
Stopped at kdb_enter+0x6b: movq $0,0x28e6eea(%rip)
db>
db> set $lines = 0
db> set $maxwidth = 0
db> show registers
cs 0x20
ds 0x3b
es 0x3b
fs 0x13
gs 0x1b
ss 0x28
rax 0x12
rcx 0x84998608f4969297
rdx 0x40001
rbx 0
rsp 0xfffffe009c2890b0
rbp 0xfffffe009c2890d0
rsi 0
rdi 0xfffffe00587e0128
r8 0x3
r9 0xfffffe009c288c08
r10 0
r11 0xfffffe005877b350
r12 0xfffffe009be663a0
r13 0xfffffe009c289101
r14 0xffffffff82c68b40 .str.18
r15 0xffffffff82c68b40 .str.18
rip 0xffffffff817a7c4b kdb_enter+0x6b
rflags 0x46
kdb_enter+0x6b: movq $0,0x28e6eea(%rip)
db> show proc
Process 7103 (syz-executor.2) at 0xfffffe009c070a70:
state: NORMAL
uid: 0 gids: 0, 0, 5
parent: pid 795 at 0xfffffe008f81a538
ABI: FreeBSD ELF64
flag: 0x10080480 flag2: 0
arguments: /root/syz-executor.2
reaper: 0xfffffe0053d51538 reapsubtree: 1
sigparent: 20
vmspace: 0xfffffe009c04f3e0
(map 0xfffffe009c04f3e0)
(map.pmap 0xfffffe009c04f4a0)
(pmap 0xfffffe009c04f500)
threads: 3
105342 s syz-executor.2
106774 Run CPU 1 syz-executor.2
106782 Run CPU 0 syz-executor.2
db> ps
pid ppid pgrp uid state wmesg wchan cmd
7103 795 795 0 T (threaded) syz-executor.2
105342 s syz-executor.2
106774 Run CPU 1 syz-executor.2
106782 Run CPU 0 syz-executor.2
7076 0 0 0 DL aiordy 0xfffffe009c070000 [aiod4]
7075 0 0 0 DL aiordy 0xfffffe009c02ea70 [aiod3]
7074 0 0 0 DL aiordy 0xfffffe009c0afa70 [aiod2]
7073 0 0 0 DL aiordy 0xfffffe009c0a9538 [aiod1]
5706 1 786 0 S uwait 0xfffffe009c036880 syz-executor.1
5699 1 786 0 S uwait 0xfffffe009be6a100 syz-executor.1
5695 1 786 0 S uwait 0xfffffe009be6ac00 syz-executor.1
5690 1 786 0 S uwait 0xfffffe009b8bde80 syz-executor.1
5682 1 786 0 S uwait 0xfffffe009be6a900 syz-executor.1
5676 1 786 0 S uwait 0xfffffe009be6a800 syz-executor.1
5674 1 786 0 S uwait 0xfffffe009be6ae00 syz-executor.1
5666 1 786 0 S uwait 0xfffffe009bd60300 syz-executor.1
5661 1 786 0 S uwait 0xfffffe009be6ad00 syz-executor.1
5657 1 822 0 S uwait 0xfffffe009bd60800 syz-executor.3
5652 1 786 0 S uwait 0xfffffe009be6af00 syz-executor.1
5650 1 822 0 S uwait 0xfffffe009bb77880 syz-executor.3
5648 1 786 0 S uwait 0xfffffe009bdce580 syz-executor.1
5643 1 786 0 S uwait 0xfffffe009bdcea80 syz-executor.1
5638 1 822 0 S uwait 0xfffffe009bcba800 syz-executor.3
5634 1 786 0 S uwait 0xfffffe009bd60a00 syz-executor.1
5629 1 786 0 S uwait 0xfffffe009bd60400 syz-executor.1
5628 1 822 0 S uwait 0xfffffe009bdce880 syz-executor.3
5622 1 786 0 S uwait 0xfffffe009bcba380 syz-executor.1
5611 1 786 0 S uwait 0xfffffe009bdce480 syz-executor.1
5603 1 786 0 S uwait 0xfffffe009bd60c00 syz-executor.1
5595 1 786 0 S uwait 0xfffffe009bd60600 syz-executor.1
5590 1 786 0 S uwait 0xfffffe009bcba180 syz-executor.1
5581 1 786 0 S uwait 0xfffffe009bdce980 syz-executor.1
5572 1 786 0 S uwait 0xfffffe009bd60b00 syz-executor.1
5567 1 786 0 S uwait 0xfffffe009bd60700 syz-executor.1
5416 1 795 0 S uwait 0xfffffe009bd60500 syz-executor.2
5415 1 795 0 S uwait 0xfffffe009bdce080 syz-executor.2
5408 1 822 0 S uwait 0xfffffe009bd60d00 syz-executor.3
5389 1 822 0 S uwait 0xfffffe009bdce380 syz-executor.3
5362 1 822 0 S uwait 0xfffffe009bb77480 syz-executor.3
5360 1 786 0 S uwait 0xfffffe009b8bd100 syz-executor.1
5358 1 786 0 S uwait 0xfffffe009bd60e00 syz-executor.1
5355 1 786 0 S uwait 0xfffffe009bcba480 syz-executor.1
5353 1 786 0 S uwait 0xfffffe009bcba580 syz-executor.1
5350 1 786 0 S uwait 0xfffffe009bb77000 syz-executor.1
5346 1 786 0 S uwait 0xfffffe009bd60f00 syz-executor.1
5344 1 822 0 S uwait 0xfffffe009bdce780 syz-executor.3
5338 1 786 0 S uwait 0xfffffe009bcbae80 syz-executor.1
5336 1 822 0 S uwait 0xfffffe009bcbab80 syz-executor.3
5335 1 786 0 S uwait 0xfffffe009b2f2000 syz-executor.1
5328 1 786 0 S uwait 0xfffffe009bdceb80 syz-executor.1
5326 1 822 0 S uwait 0xfffffe009bdced80 syz-executor.3
5325 1 786 0 S uwait 0xfffffe009bdcee80 syz-executor.1
5323 1 786 0 S uwait 0xfffffe009bdcec80 syz-executor.1
5320 1 786 0 S uwait 0xfffffe009bb77380 syz-executor.1
5307 1 786 0 S uwait 0xfffffe009bcba080 syz-executor.1
5298 1 786 0 S uwait 0xfffffe009bcba280 syz-executor.1
5289 1 786 0 S uwait 0xfffffe009bb77a80 syz-executor.1
5285 1 786 0 S uwait 0xfffffe009b2f2500 syz-executor.1
5274 1 786 0 S uwait 0xfffffe009b2f2080 syz-executor.1
5273 1 786 0 S uwait 0xfffffe009b38d280 syz-executor.1
5270 1 786 0 S uwait 0xfffffe009bcbac80 syz-executor.1
5268 1 786 0 S uwait 0xfffffe009b298180 syz-executor.1
5265 1 785 0 S uwait 0xfffffe009bb77b80 syz-executor.0
5264 1 786 0 S uwait 0xfffffe009b38d000 syz-executor.1
5263 1 785 0 S uwait 0xfffffe009bb77980 syz-executor.0
5262 1 786 0 S uwait 0xfffffe009bcbaa80 syz-executor.1
5257 1 786 0 S uwait 0xfffffe009b2f2400 syz-executor.1
5253 1 786 0 S uwait 0xfffffe009b38d980 syz-executor.1
5247 1 786 0 S uwait 0xfffffe009bb77580 syz-executor.1
5246 1 786 0 S uwait 0xfffffe009b8bd680 syz-executor.1
5238 1 786 0 S uwait 0xfffffe0091e34700 syz-executor.1
5236 1 786 0 S uwait 0xfffffe009bcba980 syz-executor.1
5220 1 786 0 S uwait 0xfffffe0092572700 syz-executor.1
5218 1 786 0 S uwait 0xfffffe009b38d200 syz-executor.1
5212 1 786 0 S uwait 0xfffffe009b38d100 syz-executor.1
5208 1 786 0 S uwait 0xfffffe009bcbad80 syz-executor.1
5199 1 786 0 S uwait 0xfffffe009bb77780 syz-executor.1
5166 1 785 0 S uwait 0xfffffe009b8bd200 syz-executor.0
5157 1 785 0 S uwait 0xfffffe009b8bd500 syz-executor.0
5149 1 785 0 S uwait 0xfffffe009bb77680 syz-executor.0
5145 1 785 0 S uwait 0xfffffe009bb77c80 syz-executor.0
5142 1 785 0 S uwait 0xfffffe009b38df00 syz-executor.0
5138 1 785 0 S uwait 0xfffffe009bb77d80 syz-executor.0
5135 1 785 0 S uwait 0xfffffe009b2f2200 syz-executor.0
5131 1 785 0 S uwait 0xfffffe009b8bd000 syz-executor.0
5126 1 785 0 S umtxn 0xfffffe009bb77e80 syz-executor.0
5123 1 785 0 S uwait 0xfffffe009b298d80 syz-executor.0
5119 1 785 0 S uwait 0xfffffe009b298080 syz-executor.0
5116 1 785 0 S uwait 0xfffffe009b2f2180 syz-executor.0
5113 1 785 0 S uwait 0xfffffe009b8bdf00 syz-executor.0
5110 1 785 0 S uwait 0xfffffe009b38d600 syz-executor.0
5104 1 785 0 S uwait 0xfffffe009b0fdc00 syz-executor.0
5102 1 785 0 S uwait 0xfffffe009b8bd800 syz-executor.0
5100 1 785 0 S uwait 0xfffffe0092051b00 syz-executor.0
5097 1 785 0 S uwait 0xfffffe009b2f2600 syz-executor.0
5096 1 785 0 S uwait 0xfffffe009b38d700 syz-executor.0
5091 1 785 0 S umtxn 0xfffffe009b8bd300 syz-executor.0
5090 1 785 0 S uwait 0xfffffe0091e34380 syz-executor.0
5088 1 785 0 S uwait 0xfffffe009b0fd380 syz-executor.0
5087 1 785 0 S uwait 0xfffffe009b38da80 syz-executor.0
5084 1 785 0 S uwait 0xfffffe009b8bd400 syz-executor.0
5082 1 785 0 S uwait 0xfffffe009b298880 syz-executor.0
5079 1 786 0 S uwait 0xfffffe009b8bdc00 syz-executor.1
5078 1 785 0 S uwait 0xfffffe009b298480 syz-executor.0
5076 1 785 0 S uwait 0xfffffe009b298380 syz-executor.0
5073 1 786 0 S uwait 0xfffffe009b38d400 syz-executor.1
5068 1 785 0 S uwait 0xfffffe009b2f2880 syz-executor.0
5064 1 785 0 S uwait 0xfffffe009b2f2d80 syz-executor.0
5060 1 785 0 S uwait 0xfffffe009aa73700 syz-executor.0
5054 1 785 0 S uwait 0xfffffe009b298c80 syz-executor.0
4977 1 795 0 S uwait 0xfffffe009b8bdd80 syz-executor.2
4967 1 795 0 S uwait 0xfffffe009b38d880 syz-executor.2
4490 1 795 0 S uwait 0xfffffe009b2f2300 syz-executor.2
4484 1 795 0 S uwait 0xfffffe009aee2780 syz-executor.2
4477 1 795 0 S uwait 0xfffffe009aee2100 syz-executor.2
4473 1 795 0 S uwait 0xfffffe009b0fd100 syz-executor.2
4465 1 795 0 S uwait 0xfffffe009ad4ba00 syz-executor.2
4460 1 795 0 S uwait 0xfffffe009b0fd400 syz-executor.2
4456 1 795 0 S uwait 0xfffffe009b2f2e80 syz-executor.2
4450 1 795 0 S uwait 0xfffffe009b0fd480 syz-executor.2
4444 1 795 0 S uwait 0xfffffe009b38de00 syz-executor.2
4437 1 795 0 S uwait 0xfffffe009b298680 syz-executor.2
4424 1 795 0 S uwait 0xfffffe009b0fd200 syz-executor.2
4412 1 795 0 S uwait 0xfffffe0092015d80 syz-executor.2
4411 1 786 0 S uwait 0xfffffe009b0fd600 syz-executor.1
4410 1 786 0 S uwait 0xfffffe0092572080 syz-executor.1
4409 1 822 0 S uwait 0xfffffe009aee2300 syz-executor.3
4405 1 822 0 S uwait 0xfffffe009b2f2700 syz-executor.3
4404 1 786 0 S uwait 0xfffffe009aa73f00 syz-executor.1
4403 1 795 0 S uwait 0xfffffe009b2f2a80 syz-executor.2
4401 1 786 0 S uwait 0xfffffe009b298a80 syz-executor.1
4397 1 822 0 S uwait 0xfffffe009b298280 syz-executor.3
4396 1 795 0 S uwait 0xfffffe009b298780 syz-executor.2
4395 1 822 0 S uwait 0xfffffe009aee2000 syz-executor.3
4390 1 822 0 S uwait 0xfffffe009aee2200 syz-executor.3
4385 1 786 0 S uwait 0xfffffe009b2f2c80 syz-executor.1
4380 1 786 0 S uwait 0xfffffe009b298980 syz-executor.1
4379 1 795 0 S uwait 0xfffffe009b2f2980 syz-executor.2
4371 1 795 0 S uwait 0xfffffe009b0fdf00 syz-executor.2
4366 1 786 0 S uwait 0xfffffe009b0fd300 syz-executor.1
4365 1 822 0 S uwait 0xfffffe009b38dc80 syz-executor.3
3709 1 3709 65 Ss select 0xfffffe009b38da40 dhclient
3322 1 785 0 S uwait 0xfffffe009b0fd000 syz-executor.0
3316 1 785 0 S uwait 0xfffffe009b2f2b80 syz-executor.0
3303 1 785 0 S uwait 0xfffffe009ad4bc00 syz-executor.0
3298 1 795 0 S uwait 0xfffffe009aee2680 syz-executor.2
3294 1 785 0 S uwait 0xfffffe009b298e80 syz-executor.0
3289 1 785 0 S uwait 0xfffffe009b298b80 syz-executor.0
3285 1 795 0 S uwait 0xfffffe0092051980 syz-executor.2
3279 1 785 0 S uwait 0xfffffe009ad4bb00 syz-executor.0
3278 1 795 0 S uwait 0xfffffe009ad4b080 syz-executor.2
3271 1 785 0 S uwait 0xfffffe009aee2580 syz-executor.0
3265 1 795 0 S uwait 0xfffffe009aee2c80 syz-executor.2
3263 1 3263 0 Ss select 0xfffffe009b0fd540 dhclient
3260 1 3260 0 Ss select 0xfffffe009aee23c0 dhclient
3240 1 785 0 S uwait 0xfffffe009ad4b580 syz-executor.0
3230 1 3230 65 Ss select 0xfffffe009aa73a40 dhclient
3226 1 795 0 S uwait 0xfffffe009b0fdd00 syz-executor.2
3222 1 795 0 S uwait 0xfffffe009aee2a80 syz-executor.2
3217 1 785 0 S uwait 0xfffffe009b0fd800 syz-executor.0
3215 1 795 0 S uwait 0xfffffe0091e34300 syz-executor.2
3210 1 785 0 S umtxn 0xfffffe009aee2980 syz-executor.0
3207 1 795 0 S uwait 0xfffffe009b0fd700 syz-executor.2
3205 1 785 0 S uwait 0xfffffe009aee2880 syz-executor.0
3201 1 795 0 S uwait 0xfffffe009b0fdb00 syz-executor.2
3197 1 795 0 S uwait 0xfffffe0092572280 syz-executor.2
3194 1 785 0 S uwait 0xfffffe009b0fd900 syz-executor.0
3192 1 795 0 S uwait 0xfffffe009aa73300 syz-executor.2
3191 1 785 0 S uwait 0xfffffe009aee2d80 syz-executor.0
3186 1 795 0 S uwait 0xfffffe009ad4b280 syz-executor.2
3184 1 785 0 S uwait 0xfffffe009b0fda00 syz-executor.0
3183 1 795 0 S uwait 0xfffffe009aa73980 syz-executor.2
3178 1 795 0 S uwait 0xfffffe009aa73b00 syz-executor.2
3176 1 785 0 S uwait 0xfffffe009ad4b180 syz-executor.0
3171 1 795 0 S uwait 0xfffffe0092051a00 syz-executor.2
3170 1 785 0 S uwait 0xfffffe009aa73400 syz-executor.0
3167 1 795 0 S uwait 0xfffffe009ad4b680 syz-executor.2
3163 1 785 0 S uwait 0xfffffe009ad4b380 syz-executor.0
3162 1 795 0 S uwait 0xfffffe009ad4b780 syz-executor.2
3157 1 795 0 S uwait 0xfffffe009ad4b480 syz-executor.2
3156 1 785 0 S uwait 0xfffffe0092015180 syz-executor.0
3152 1 785 0 S uwait 0xfffffe009aa73200 syz-executor.0
3151 1 795 0 S uwait 0xfffffe009aa73600 syz-executor.2
3146 1 795 0 S uwait 0xfffffe00925b8180 syz-executor.2
3144 1 785 0 S uwait 0xfffffe0092051a80 syz-executor.0
3141 1 795 0 S uwait 0xfffffe009aee2b80 syz-executor.2
3138 1 785 0 S uwait 0xfffffe0092051800 syz-executor.0
3137 1 795 0 S uwait 0xfffffe009aa73000 syz-executor.2
3136 1 785 0 S uwait 0xfffffe009aa73a80 syz-executor.0
3133 1 785 0 S uwait 0xfffffe0092592080 syz-executor.0
3130 1 795 0 S uwait 0xfffffe00925b8800 syz-executor.2
3129 1 795 0 S uwait 0xfffffe0092572480 syz-executor.2
3128 1 785 0 S uwait 0xfffffe00925b8480 syz-executor.0
3124 1 785 0 S uwait 0xfffffe009aa73e00 syz-executor.0
3123 1 795 0 S uwait 0xfffffe0092592180 syz-executor.2
3121 1 795 0 S uwait 0xfffffe0056fdd280 syz-executor.2
3119 1 785 0 S uwait 0xfffffe009aa73500 syz-executor.0
3117 1 795 0 S uwait 0xfffffe009aa73b80 syz-executor.2
3115 1 785 0 S uwait 0xfffffe009aa73100 syz-executor.0
3114 1 795 0 S uwait 0xfffffe00925b8380 syz-executor.2
3112 1 785 0 S uwait 0xfffffe009aee2e80 syz-executor.0
3107 1 785 0 S uwait 0xfffffe0092051100 syz-executor.0
3105 1 795 0 S uwait 0xfffffe00925b8c00 syz-executor.2
3104 1 795 0 S uwait 0xfffffe0092592780 syz-executor.2
3102 1 785 0 S uwait 0xfffffe0092572180 syz-executor.0
3100 1 795 0 S uwait 0xfffffe00925b8080 syz-executor.2
3099 1 785 0 S uwait 0xfffffe009aa73d00 syz-executor.0
3098 1 795 0 S uwait 0xfffffe00925b8900 syz-executor.2
3097 1 785 0 S uwait 0xfffffe005877fe80 syz-executor.0
3092 1 795 0 S uwait 0xfffffe005877f000 syz-executor.2
3091 1 785 0 S uwait 0xfffffe008fa81400 syz-executor.0
3089 1 785 0 S uwait 0xfffffe00925b8a00 syz-executor.0
3088 1 795 0 S uwait 0xfffffe008fa81600 syz-executor.2
3082 1 795 0 S uwait 0xfffffe0092015c80 syz-executor.2
3081 1 785 0 S uwait 0xfffffe0092051500 syz-executor.0
3079 1 795 0 S uwait 0xfffffe0092051900 syz-executor.2
3076 1 785 0 S uwait 0xfffffe00925b8d00 syz-executor.0
1770 1 1770 0 Ss select 0xfffffe0092572540 dhclient
1757 1 1757 0 Ss select 0xfffffe009aa737c0 dhclient
1683 1 1683 65 Ss select 0xfffffe009ad4b840 dhclient
1468 1 795 0 S uwait 0xfffffe0092051000 syz-executor.2
1467 1 795 0 S uwait 0xfffffe0092051400 syz-executor.2
1466 1 795 0 S uwait 0xfffffe00925b8b00 syz-executor.2
1465 1 795 0 S uwait 0xfffffe0092051300 syz-executor.2
1353 1 822 0 S uwait 0xfffffe0092572380 syz-executor.3
1346 1 822 0 S uwait 0xfffffe008fa81000 syz-executor.3
1338 1 822 0 S uwait 0xfffffe0092051d00 syz-executor.3
1337 1 822 0 S uwait 0xfffffe00925b8f00 syz-executor.3
1333 1 822 0 S uwait 0xfffffe00925b8280 syz-executor.3
1327 1 822 0 S uwait 0xfffffe0056fdd180 syz-executor.3
1278 1 822 0 S uwait 0xfffffe00925b8e00 syz-executor.3
1277 1 822 0 S uwait 0xfffffe0092051600 syz-executor.3
1014 1 1014 0 Ss select 0xfffffe00925b86c0 dhclient
1007 1 1007 0 Ss select 0xfffffe0092592840 dhclient
988 1 988 65 Ss select 0xfffffe0092572940 dhclient
830 1 830 0 Ss select 0xfffffe0092592ec0 dhclient
822 780 822 0 Ss piperd 0xfffffe00925682e8 syz-executor.3
821 1 821 0 Ss select 0xfffffe0092572840 dhclient
795 780 795 0 Rs syz-executor.2
786 780 786 0 Ss piperd 0xfffffe008f88c8b8 syz-executor.1
785 780 785 0 Ss piperd 0xfffffe00920b22e8 syz-executor.0
780 778 778 0 S (threaded) syz-fuzzer
100099 S uwait 0xfffffe008fa81e80 syz-fuzzer
100123 S uwait 0xfffffe0092015380 syz-fuzzer
100124 S uwait 0xfffffe0092015480 syz-fuzzer
100125 S uwait 0xfffffe0092015580 syz-fuzzer
100126 S uwait 0xfffffe0092015680 syz-fuzzer
100127 S uwait 0xfffffe00573dc180 syz-fuzzer
100128 S kqread 0xfffffe0091fc0700 syz-fuzzer
100129 S uwait 0xfffffe0092015780 syz-fuzzer
101919 S uwait 0xfffffe009ad4bf00 syz-fuzzer
778 776 778 0 Ss pause 0xfffffe009209fb20 csh
776 694 776 0 Ss select 0xfffffe0092051bc0 sshd
760 1 760 0 Ss+ ttyin 0xfffffe0056fe1cb0 getty
759 1 759 0 Ss+ ttyin 0xfffffe00583ee0b0 getty
758 1 758 0 Ss+ ttyin 0xfffffe00583ee4b0 getty
757 1 757 0 Ss+ ttyin 0xfffffe00583ee8b0 getty
756 1 756 0 Ss+ ttyin 0xfffffe00583eecb0 getty
755 1 755 0 Ss+ ttyin 0xfffffe00583960b0 getty
754 1 754 0 Ss+ ttyin 0xfffffe00583964b0 getty
753 1 753 0 Ss+ ttyin 0xfffffe00583968b0 getty
752 1 752 0 Ss+ ttyin 0xfffffe0058396cb0 getty
698 1 698 0 Ss nanslp 0xffffffff8405ba00 cron
694 1 694 0 Ss select 0xfffffe008fa81840 sshd
507 1 507 0 Ss select 0xfffffe0091e347c0 syslogd
436 1 436 0 Ss select 0xfffffe008fa818c0 devd
435 1 435 65 Ss select 0xfffffe0091e34840 dhclient
350 1 350 0 Ss select 0xfffffe008fa817c0 dhclient
347 1 347 0 Ss select 0xfffffe0091e348c0 dhclient
23 0 0 0 DL syncer 0xffffffff84181b40 [syncer]
22 0 0 0 DL vlruwt 0xfffffe0056ab8000 [vnlru]
21 0 0 0 RL (threaded) [bufdaemon]
100083 RunQ [bufdaemon]
100086 D - 0xffffffff83411f80 [bufspacedaemon-0]
100097 D sdflush 0xfffffe008f8b0ce8 [/ worker]
20 0 0 0 DL psleep 0xffffffff841b7dc0 [vmdaemon]
19 0 0 0 RL (threaded) [pagedaemon]
100081 RunQ [dom0]
100084 D launds 0xffffffff841ab904 [laundry: dom0]
100085 D umarecl 0xffffffff841aa5a0 [uma]
18 0 0 0 RL [rand_harvestq]
17 0 0 0 DL waiting 0xffffffff84d72460 [sctp_iterator]
16 0 0 0 RL [pf purge]
15 0 0 0 DL - 0xffffffff8417aec0 [soaiod4]
9 0 0 0 DL - 0xffffffff8417aec0 [soaiod3]
8 0 0 0 DL - 0xffffffff8417aec0 [soaiod2]
7 0 0 0 DL - 0xffffffff8417aec0 [soaiod1]
6 0 0 0 DL (threaded) [cam]
100046 D - 0xffffffff83c98240 [doneq0]
100047 D - 0xffffffff83c981c0 [async]
100080 D - 0xffffffff83c98040 [scanner]
14 0 0 0 DL seqstat 0xfffffe0056ab1c88 [sequencer 00]
5 0 0 0 DL crypto_ 0xfffffe00541aed80 [crypto returns 1]
4 0 0 0 DL crypto_ 0xfffffe00541aed30 [crypto returns 0]
3 0 0 0 DL crypto_ 0xffffffff841a59a0 [crypto]
13 0 0 0 DL (threaded) [geom]
100037 D - 0xffffffff8402efc0 [g_event]
100038 D - 0xffffffff8402f000 [g_up]
100039 D - 0xffffffff8402f040 [g_down]
2 0 0 0 DL (threaded) [KTLS]
100028 D - 0xfffffe0053e16e00 [thr_0]
100029 D - 0xfffffe0053e16e80 [thr_1]
12 0 0 0 WL (threaded) [intr]
100010 I [swi6: task queue]
100011 I [swi6: Giant taskq]
100014 I [swi5: fast taskq]
100030 I [swi1: netisr 0]
100031 I [swi3: vm]
100032 I [swi4: clock (0)]
100033 I [swi4: clock (1)]
100034 I [swi1: hpts]
100035 I [swi1: hpts]
100048 I [irq24: virtio_pci0]
100049 I [irq25: virtio_pci0]
100050 I [irq26: virtio_pci0]
100051 I [irq27: virtio_pci0]
100052 I [irq28: virtio_pci1]
100053 I [irq29: virtio_pci1]
100054 I [irq30: virtio_pci1]
100055 I [irq31: virtio_pci1]
100056 I [irq32: virtio_pci1]
100061 I [irq10: virtio_pci2]
100063 I [irq1: atkbd0]
100064 I [irq12: psm0]
100065 I [swi0: uart uart++]
100073 I [swi1: pf send]
11 0 0 0 RL (threaded) [idle]
100003 CanRun [idle: cpu0]
100004 CanRun [idle: cpu1]
1 0 1 0 SLs wait 0xfffffe0053d51538 [init]
10 0 0 0 DL audit_w 0xffffffff841a6940 [audit]
0 0 0 0 DLs (threaded) [kernel]
100000 D swapin 0xffffffff8402fec0 [swapper]
100005 D - 0xfffffe0053c0d800 [softirq_0]
100006 D - 0xfffffe0053c0d600 [softirq_1]
100007 D - 0xfffffe0053c0d400 [if_io_tqg_0]
100008 D - 0xfffffe0053c0d200 [if_io_tqg_1]
100009 D - 0xfffffe0053c0d000 [if_config_tqg_0]
100012 D - 0xfffffe000791b500 [thread taskq]
100013 D - 0xfffffe000791b400 [inm_free taskq]
100015 D - 0xfffffe000791b200 [kqueue_ctx taskq]
100016 D - 0xfffffe000791b100 [linuxkpi_irq_wq]
100017 D - 0xfffffe000791b000 [aiod_kick taskq]
100018 D - 0xfffffe0053df6e00 [in6m_free taskq]
100019 D - 0xfffffe0053df6d00 [pci_hp taskq]
100020 D - 0xfffffe0053df6c00 [linuxkpi_short_wq_0]
100021 D - 0xfffffe0053df6c00 [linuxkpi_short_wq_1]
100022 D - 0xfffffe0053df6c00 [linuxkpi_short_wq_2]
100023 D - 0xfffffe0053df6c00 [linuxkpi_short_wq_3]
100024 D - 0xfffffe0053df6b00 [linuxkpi_long_wq_0]
100025 D - 0xfffffe0053df6b00 [linuxkpi_long_wq_1]
100026 D - 0xfffffe0053df6b00 [linuxkpi_long_wq_2]
100027 D - 0xfffffe0053df6b00 [linuxkpi_long_wq_3]
100036 D - 0xfffffe0053df6a00 [firmware taskq]
100040 D - 0xfffffe0053df6900 [crypto_0]
100041 D - 0xfffffe0053df6900 [crypto_1]
100057 D - 0xfffffe0053df6700 [vtnet0 rxq 0]
100058 D - 0xfffffe0053df6600 [vtnet0 txq 0]
100059 D - 0xfffffe0053df6500 [vtnet0 rxq 1]
100060 D - 0xfffffe0053df6400 [vtnet0 txq 1]
100062 D vtbslp 0xfffffe0056fbc300 [virtio_balloon]
100066 D - 0xfffffe0053df6300 [mca taskq]
100071 D - 0xffffffff82c6fac0 [deadlkres]
100075 D - 0xfffffe005838be00 [acpi_task_0]
100076 D - 0xfffffe005838be00 [acpi_task_1]
100077 D - 0xfffffe005838be00 [acpi_task_2]
100079 D - 0xfffffe0053df6800 [CAM taskq]
db> show all locks
Process 7103 (syz-executor.2) thread 0xfffffe009c032900 (106774)
exclusive sleep mutex pmap (pmap) r = 0 (0xffffffff841f5e40) locked @ /syzkaller/managers/main/kernel/sys/amd64/amd64/pmap.c:6155
Process 7103 (syz-executor.2) thread 0xfffffe009be663a0 (106782)
exclusive sleep mutex vm map (system) (vm map (system)) r = 0 (0xffffffff841aaa80) locked @ /syzkaller/managers/main/kernel/sys/vm/vm_map.c:2127
Process 19 (pagedaemon) thread 0xfffffe005838ec80 (100081)
shared rw UMA lock (UMA lock) r = 0 (0xffffffff8344b5c0) locked @ /syzkaller/managers/main/kernel/sys/vm/uma_core.c:3029
shared sx umareclaim (umareclaim) r = 0 (0xffffffff841aa5a0) locked @ /syzkaller/managers/main/kernel/sys/vm/uma_core.c:5142
db> show malloc
Type InUse MemUse Requests
pf_hash 5 11524K 5
devbuf 4216 4338K 4244
filedesc 446 3567K 12401
tcp_hpts 6 3201K 6
sysctloid 34320 2027K 34387
vtbuf 24 1968K 46
kobj 327 1308K 487
subproc 573 1234K 7403
newblk 38 1034K 6610
vfscache 3 1025K 3
pcb 425 983K 12250
inodedep 100 550K 6062
ufs_quota 1 512K 1
vfs_hash 1 512K 1
callout 2 512K 2
intr 4 472K 4
vmem 3 276K 7
acpica 1674 184K 54844
vnet_data 1 168K 1
tidhash 3 141K 3
linker 357 140K 397
pagedep 35 137K 5990
tfo_ccache 1 128K 1
kdtrace 650 110K 13896
DEVFS1 107 107K 124
sem 4 106K 4
umtx 770 97K 770
sctp_atcl 249 94K 6949
BPF 46 88K 50
bus 989 81K 3482
mtx_pool 2 72K 2
syncache 1 68K 1
acpitask 1 64K 1
ddb_capture 1 64K 1
module 511 64K 511
sctp_stro 50 50K 1174
temp 35 33K 2382
hostcache 1 32K 1
shm 1 32K 1
DEVFS3 126 32K 136
msg 4 30K 4
gtaskqueue 18 26K 18
kbdmux 6 22K 6
kqueue 283 20K 7178
ifaddr 70 20K 72
DEVFS_RULE 56 20K 56
pwddesc 281 18K 7111
ufs_mount 5 17K 6
proc 3 17K 3
routetbl 128 16K 419
tty 16 16K 16
ithread 99 16K 99
dirrem 62 16K 5981
bus-sc 33 14K 1694
KTRACE 100 13K 100
ifnet 7 13K 7
ether_multi 152 13K 162
lltable 39 12K 53
kenv 95 12K 95
eventhandler 133 12K 133
sctp_atky 299 11K 8358
CAM queue 5 11K 1528
rman 84 10K 425
sctp_timw 39 10K 39
GEOM 60 10K 489
in6_multi 65 9K 65
bmsafemap 2 9K 6042
UART 12 9K 12
devstat 4 9K 4
ksem 1 8K 1
rpc 2 8K 2
shmfd 1 8K 3
pfs_vncache 1 8K 1
freefile 62 8K 5808
pfs_nodes 20 8K 20
audit_evclass 236 8K 294
cred 26 7K 258
taskqueue 60 7K 60
sglist 5 7K 5
CAM DEV 3 6K 510
plimit 24 6K 454
DEVFSP 80 5K 1793
ufs_dirhash 20 5K 24
UMA 270 5K 270
session 35 5K 49
pf_ifnet 10 5K 19
vt 11 5K 11
memdesc 1 4K 1
MCA 32 4K 32
evdev 4 4K 4
kcovinfo 64 4K 68
sctp_athm 249 4K 7071
newdirblk 30 4K 5972
acpisem 28 4K 28
selfd 55 4K 103524
lockf 32 4K 60
hhook 15 4K 17
fpukern_ctx 3 3K 3
proc-args 52 3K 665
terminal 11 3K 11
select 19 3K 63
uidinfo 3 3K 11
local_apic 1 2K 1
io_apic 1 2K 1
ipsec-saq 2 2K 2
inpcbpolicy 63 2K 1460
ip6ndp 12 2K 13
sctp_ifa 13 2K 14
Unitno 27 2K 47
CAM XPT 22 2K 543
sctp_map 100 2K 2348
in_multi 6 2K 8
pf_rule 10 2K 10
ipsecpolicy 2 2K 2
acpidev 20 2K 20
msi 9 2K 9
clone 9 2K 9
osd 54 2K 1094
tun 7 2K 7
freework 5 2K 5811
softdep 1 1K 1
mkdir 8 1K 11944
freeblks 4 1K 5810
sahead 1 1K 1
secasvar 1 1K 1
nhops 6 1K 8
vnodemarker 2 1K 54
NFSD session 1 1K 1
CAM periph 4 1K 271
sctp_ifn 6 1K 14
ipsec 3 1K 3
mld 6 1K 6
igmp 6 1K 6
toponodes 6 1K 6
isadev 6 1K 6
mount 16 1K 89
pci_link 10 1K 10
crypto 4 1K 532
encap_export_host 12 1K 12
procdesc 5 1K 14
sctp_stri 1 1K 244
diradd 4 1K 6021
pfil 4 1K 4
cdev 2 1K 2
chacha20random 1 1K 1
NFSD lckfile 1 1K 1
NFSD V4client 1 1K 1
DEVFS 9 1K 10
vnodes 1 1K 1
CAM SIM 2 1K 2
ktls 1 1K 1
feeder 7 1K 7
tcpfunc 3 1K 3
loginclass 3 1K 6
prison 6 1K 6
lkpikmalloc 5 1K 6
aesni_data 2 1K 2
apmdev 1 1K 1
atkbddev 2 1K 2
CAM dev queue 2 1K 2
xform 2 1K 2187
CAM I/O Scheduler 1 1K 1
CAM path 4 1K 1034
pmchooks 1 1K 1
nexusdev 7 1K 7
soname 4 1K 8363
filecaps 5 1K 98
sctp_vrf 1 1K 1
vnet 1 1K 1
entropy 2 1K 46
acpiintr 1 1K 1
pmc 1 1K 1
cpus 2 1K 2
vnet_data_free 1 1K 1
Per-cpu 1 1K 1
p1003.1b 1 1K 1
sctp_mcore 0 0K 0
sctp_socko 0 0K 3060
sctp_iter 0 0K 12
sctp_mvrf 0 0K 0
sctp_cpal 0 0K 0
sctp_cmsg 0 0K 0
sctp_stre 0 0K 0
sctp_athi 0 0K 0
sctp_a_it 0 0K 12
sctp_aadr 0 0K 1
htcp data 0 0K 0
mqdata 0 0K 0
vegas data 0 0K 0
tcp_do 0 0K 0
tcp_fsb 0 0K 1
dctcp data 0 0K 0
chd data 0 0K 0
pf_table 0 0K 0
pf_altq 0 0K 0
pf_osfp 0 0K 0
pf_temp 0 0K 0
cubic data 0 0K 0
cdg data 0 0K 0
NEWdirectio 0 0K 0
NEWNFSnode 0 0K 0
madt_table 0 0K 2
smartpqi 0 0K 0
NFSCL lck 0 0K 0
NFSCL lckown 0 0K 0
NFSCL client 0 0K 0
NFSCL deleg 0 0K 0
NFSCL open 0 0K 0
NFSCL owner 0 0K 0
NFS fh 0 0K 0
NFS req 0 0K 0
iavf 0 0K 0
ixl 0 0K 0
NFSD usrgroup 0 0K 0
NFSD string 0 0K 0
NFSD V4lock 0 0K 0
NFSD V4state 0 0K 0
NFSD srvcache 0 0K 0
ice-resmgr 0 0K 0
ice-osdep 0 0K 0
ice 0 0K 0
axgbe 0 0K 0
msdosfs_fat 0 0K 0
msdosfs_mount 0 0K 0
msdosfs_node 0 0K 0
DEVFS4 0 0K 0
DEVFS2 0 0K 0
xen_intr 0 0K 0
gntdev 0 0K 0
privcmd_dev 0 0K 0
xen_hvm 0 0K 0
legacydrv 0 0K 0
qpidrv 0 0K 0
evtchn_dev 0 0K 0
xenstore 0 0K 0
dmar_idpgtbl 0 0K 0
dmar_dom 0 0K 0
dmar_ctx 0 0K 0
ciss_data 0 0K 0
BACKLIGHT 0 0K 0
xnb 0 0K 0
isci 0 0K 0
iommu_dmamap 0 0K 0
xbbd 0 0K 0
hyperv_socket 0 0K 0
bxe_ilt 0 0K 0
xenbus 0 0K 0
xbd 0 0K 0
Balloon 0 0K 0
sysmouse 0 0K 0
vm_fictitious 0 0K 0
vtfont 0 0K 0
ath_hal 0 0K 0
athdev 0 0K 0
ata_pci 0 0K 0
ata_dma 0 0K 0
ata_generic 0 0K 0
amr 0 0K 0
pvscsi 0 0K 0
scsi_da 0 0K 69
UMAHash 0 0K 0
ata_da 0 0K 0
vm_pgdata 0 0K 0
jblocks 0 0K 0
savedino 0 0K 3666
sentinel 0 0K 0
jfsync 0 0K 0
jtrunc 0 0K 0
sbdep 0 0K 22
jsegdep 0 0K 0
jseg 0 0K 0
jfreefrag 0 0K 0
jfreeblk 0 0K 0
jnewblk 0 0K 0
jmvref 0 0K 0
jremref 0 0K 0
jaddref 0 0K 0
freedep 0 0K 0
freefrag 0 0K 2
allocindir 0 0K 0
indirdep 0 0K 10
allocdirect 0 0K 0
ufs_trim 0 0K 0
mactemp 0 0K 0
audit_trigger 0 0K 0
audit_pipe_presel 0 0K 0
audit_pipeent 0 0K 0
audit_pipe 0 0K 0
audit_evname 0 0K 0
audit_bsm 0 0K 0
audit_gidset 0 0K 0
audit_text 0 0K 0
audit_path 0 0K 0
audit_data 0 0K 0
audit_cred 0 0K 0
scsi_ch 0 0K 0
scsi_cd 0 0K 0
AHCI driver 0 0K 0
USBdev 0 0K 0
USB 0 0K 0
agp 0 0K 0
nvme_da 0 0K 0
ktls_ocf 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5E_TLS 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EN 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5DUMP 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
seq_file 0 0K 0
radix 0 0K 0
idr 0 0K 0
lkpifw 0 0K 0
NLM 0 0K 0
ipsec-spdcache 0 0K 0
ipsec-reg 0 0K 0
ipsec-misc 0 0K 0
ipsecrequest 0 0K 0
ip6opt 0 0K 3
ip6_msource 0 0K 0
ip6_moptions 0 0K 0
in6_mfilter 0 0K 0
frag6 0 0K 0
tcplog 0 0K 0
tcp_hwpace 0 0K 0
acpipwr 0 0K 0
acpi_perf 0 0K 0
LRO 0 0K 0
newreno data 0 0K 0
ip_msource 0 0K 0
ip_moptions 0 0K 0
in_mfilter 0 0K 0
ipid 0 0K 0
80211scan 0 0K 0
80211ratectl 0 0K 0
80211power 0 0K 0
80211nodeie 0 0K 0
80211node 0 0K 0
80211mesh_gt 0 0K 0
80211mesh_rt 0 0K 0
80211perr 0 0K 0
80211prep 0 0K 0
80211preq 0 0K 0
80211dfs 0 0K 0
80211crypto 0 0K 0
80211vap 0 0K 0
iflib 0 0K 0
vlan 0 0K 0
gif 0 0K 0
ifdescr 0 0K 0
zlib 0 0K 0
fadvise 0 0K 2
VN POLL 0 0K 0
twsbuf 0 0K 0
statfs 0 0K 6160
namei_tracker 0 0K 0
export_host 0 0K 0
cl_savebuf 0 0K 2
twe_commands 0 0K 0
twa_commands 0 0K 0
tcp_log_dev 0 0K 504
midi buffers 0 0K 0
mixer 0 0K 0
ac97 0 0K 0
hdacc 0 0K 0
hdac 0 0K 0
hdaa 0 0K 0
acpicmbat 0 0K 0
SIIS driver 0 0K 0
CAM CCB 0 0K 2487
PUC 0 0K 0
ppbusdev 0 0K 0
agtiapi_MemAlloc malloc 0 0K 0
biobuf 0 0K 0
aios 0 0K 0
lio 0 0K 0
acl 0 0K 0
osti_cacheable 0 0K 0
mbuf_tag 0 0K 120
tempbuff 0 0K 0
tempbuff 0 0K 0
ag_tgt_map_t malloc 0 0K 0
ag_slr_map_t malloc 0 0K 0
lDevFlags * malloc 0 0K 0
tiDeviceHandle_t * malloc 0 0K 0
ag_portal_data_t malloc 0 0K 0
ag_device_t malloc 0 0K 0
STLock malloc 0 0K 0
CCB List 0 0K 0
sr_iov 0 0K 0
OCS 0 0K 0
OCS 0 0K 0
nvme 0 0K 0
nvd 0 0K 0
netmap 0 0K 0
mwldev 0 0K 0
MVS driver 0 0K 0
CAM ccb queue 0 0K 0
mrsasbuf 0 0K 0
mpt_user 0 0K 0
mps_user 0 0K 0
accf 0 0K 0
pts 0 0K 0
iov 0 0K 16275
ioctlops 0 0K 196
eventfd 0 0K 0
Witness 0 0K 0
stack 0 0K 0
MPSSAS 0 0K 0
mps 0 0K 0
mpr_user 0 0K 0
MPRSAS 0 0K 0
mpr 0 0K 0
mfibuf 0 0K 0
sbuf 0 0K 288
md_sectors 0 0K 0
firmware 0 0K 0
compressor 0 0K 0
md_disk 0 0K 0
SWAP 0 0K 0
malodev 0 0K 0
LED 0 0K 0
sysctltmp 0 0K 859
sysctl 0 0K 3
ekcd 0 0K 0
dumper 0 0K 0
sendfile 0 0K 0
rctl 0 0K 0
ix_sriov 0 0K 0
aacraidcam 0 0K 0
aacraid_buf 0 0K 0
ix 0 0K 0
ipsbuf 0 0K 0
cache 0 0K 0
iirbuf 0 0K 0
prison_racct 0 0K 0
Fail Points 0 0K 0
sigio 0 0K 1
filedesc_to_leader 0 0K 0
pwd 0 0K 0
tty console 0 0K 0
aaccam 0 0K 0
aacbuf 0 0K 0
zstd 0 0K 0
XZ_DEC 0 0K 0
nvlist 0 0K 0
SCSI ENC 0 0K 0
SCSI sa 0 0K 0
scsi_pass 0 0K 0
isofs_node 0 0K 0
isofs_mount 0 0K 0
tr_raid5_data 0 0K 0
tr_raid1e_data 0 0K 0
tr_raid1_data 0 0K 0
tr_raid0_data 0 0K 0
tr_concat_data 0 0K 0
md_sii_data 0 0K 0
md_promise_data 0 0K 0
md_nvidia_data 0 0K 0
md_jmicron_data 0 0K 0
md_intel_data 0 0K 0
md_ddf_data 0 0K 0
raid_data 0 0K 72
geom_flashmap 0 0K 0
tmpfs dir 0 0K 0
tmpfs name 0 0K 0
tmpfs mount 0 0K 0
NFS FHA 0 0K 0
newnfsmnt 0 0K 0
newnfsclient_req 0 0K 0
NFSCL layrecall 0 0K 0
NFSCL session 0 0K 0
NFSCL sockreq 0 0K 0
NFSCL devinfo 0 0K 0
NFSCL flayout 0 0K 0
NFSCL layout 0 0K 0
NFSD rollback 0 0K 0
NFSCL diroff 0 0K 0
db> show uma
Zone Size Used Free Requests Sleeps Bucket Total Mem XFree
mbuf_jumbo_page 4096 8336 975 1196491 0 254 38137856 0
malloc-16384 16384 223 7 6199 0 1 3768320 0
RADIX NODE 144 22762 109 200562 0 62 3293424 0
tcp_log 416 4136 3739 92118 0 253 3276000 0
mbuf 256 8722 848 1889258 0 254 2449920 0
pbuf 2624 0 778 0 0 2 2041472 0
tcp_bbr_map 128 13433 52 47103 0 126 1726080 0
malloc-384 384 4424 6 4438 0 30 1701120 0
BUF TRIE 144 187 11573 875 0 62 1693440 0
malloc-128 128 11312 34 11471 0 126 1452288 0
malloc-4096 4096 328 3 526 0 2 1355776 0
MAP ENTRY 96 13075 407 381060 0 126 1294272 0
malloc-4096 4096 304 6 7666 0 2 1269760 0
UMA Slabs 0 112 11069 16 11069 0 126 1241520 0
mbuf_cluster 2048 570 2 570 0 254 1171456 0
vmem btag 56 20255 24 20255 0 254 1135624 0
VM OBJECT 264 3849 96 101658 0 30 1041480 0
FFS inode 1160 687 20 6495 0 8 820120 0
ertt_txseginfo 40 19513 586 79542 0 254 803960 0
THREAD 1808 368 17 6784 0 8 696080 0
VMSPACE 2544 254 13 7085 0 4 679248 0
malloc-2048 2048 200 24 5657 0 8 458752 0
malloc-384 384 99 1051 6061 0 30 441600 0
256 Bucket 2048 141 59 17677 0 8 409600 0
PROC 1336 280 11 7110 0 8 388776 0
lkpimm 160 1 2324 1 0 62 372000 0
lkpicurr 160 2 2323 2 0 62 372000 0
VNODE 448 726 75 6536 0 30 358848 0
malloc-256 256 217 1073 24559 0 62 330240 0
filedesc0 1072 281 20 7111 0 8 322672 0
sctp_ep 1280 198 39 5653 0 253 303360 0
malloc-64 64 4192 533 108034 0 254 302400 0
socket 944 237 55 8468 0 254 275648 0
malloc-65536 65536 4 0 4 0 1 262144 0
malloc-16 16 14131 369 18343 0 254 232000 0
DEVCTL 1024 0 220 153 0 0 225280 0
malloc-128 128 1560 21 14668 0 126 202368 0
UMA Zones 768 242 2 242 0 16 187392 0
malloc-128 128 366 1091 6263 0 126 186496 0
FFS2 dinode 256 687 18 6495 0 62 180480 0
malloc-32 32 5364 180 5954 0 254 177408 0
malloc-256 256 381 309 16858 0 62 176640 0
malloc-128 128 1264 38 35172 0 126 166656 0
mbuf_packet 256 71 499 8934 0 254 145920 0
128 Bucket 1024 55 84 2087 0 16 142336 0
S VFS Cache 104 1024 341 7190 0 126 141960 0
sctp_asoc 2288 50 10 1174 0 253 137280 0
malloc-65536 65536 2 0 2 0 1 131072 0
malloc-65536 65536 0 2 366 0 1 131072 0
malloc-65536 65536 2 0 2 0 1 131072 0
malloc-1024 1024 110 6 127 0 16 118784 0
ksiginfo 112 275 769 3255 0 126 116928 0
malloc-384 384 249 51
---
This report is generated by a bot. It may contain errors.
See https://goo.gl/tpsmEJ for more information about syzbot.
syzbot engineers can be reached at syzk...@googlegroups.com.
syzbot will keep track of this issue. See:
https://goo.gl/tpsmEJ#status for how to communicate with syzbot.
syzbot found the following issue on:
HEAD commit: d411b285 pmap: Micro-optimize pmap_remove_pages() on amd64..
git tree: https://github.com/freebsd/freebsd-src.git main
console output: https://syzkaller.appspot.com/x/log.txt?x=17c2c6b0300000
dashboard link: https://syzkaller.appspot.com/bug?extid=e5e4bf10034f89aef0ea
Unfortunately, I don't have any reproducer for this issue yet.
IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+e5e4bf...@syzkaller.appspotmail.com
panic: pmap_kasan_enter_alloc_4k: no memory to grow shadow map
cpuid = 0
time = 1626259935
KDB: stack backtrace:
db_trace_self_wrapper() at db_trace_self_wrapper+0xc7/frame 0xfffffe009c288f70
kdb_backtrace() at kdb_backtrace+0xd3/frame 0xfffffe009c2890d0
vpanic() at vpanic+0x2c5/frame 0xfffffe009c2891b0
panic() at panic+0xb5/frame 0xfffffe009c289280
pmap_kasan_enter() at pmap_kasan_enter+0x77f/frame 0xfffffe009c2892c0
kasan_shadow_map() at kasan_shadow_map+0x88/frame 0xfffffe009c2892f0
pmap_growkernel() at pmap_growkernel+0xdf/frame 0xfffffe009c289330
vm_map_insert() at vm_map_insert+0x67e/frame 0xfffffe009c289490
vm_map_find() at vm_map_find+0x903/frame 0xfffffe009c289570
kva_import() at kva_import+0xd4/frame 0xfffffe009c289650
vmem_try_fetch() at vmem_try_fetch+0x21f/frame 0xfffffe009c289740
vmem_xalloc() at vmem_xalloc+0xc3f/frame 0xfffffe009c289800
kva_import_domain() at kva_import_domain+0x5f/frame 0xfffffe009c289850
vmem_try_fetch() at vmem_try_fetch+0x21f/frame 0xfffffe009c289930
vmem_xalloc() at vmem_xalloc+0xc3f/frame 0xfffffe009c2899f0
vmem_alloc() at vmem_alloc+0x106/frame 0xfffffe009c289a50
kmem_malloc_domainset() at kmem_malloc_domainset+0x183/frame 0xfffffe009c289b90
malloc_large() at malloc_large+0x3e/frame 0xfffffe009c289bd0
pfioctl() at pfioctl+0x23f5/frame 0xfffffe009c28b2b0
devfs_ioctl() at devfs_ioctl+0x22a/frame 0xfffffe009c28b390
VOP_IOCTL_APV() at VOP_IOCTL_APV+0xb0/frame 0xfffffe009c28b3d0
vn_ioctl() at vn_ioctl+0x215/frame 0xfffffe009c28b720
devfs_ioctl_f() at devfs_ioctl_f+0x71/frame 0xfffffe009c28b770
kern_ioctl() at kern_ioctl+0x62e/frame 0xfffffe009c28b870
sys_ioctl() at sys_ioctl+0x3b6/frame 0xfffffe009c28b9f0
amd64_syscall() at amd64_syscall+0x425/frame 0xfffffe009c28bbf0
fast_syscall_common() at fast_syscall_common+0xf8/frame 0xfffffe009c28bbf0
--- syscall (198, FreeBSD ELF64, nosys), rip = 0x287eda, rsp = 0x7fffdffdcf08, rbp = 0x7fffdffdcf70 ---
KDB: enter: panic
[ thread pid 7103 tid 106782 ]
Stopped at kdb_enter+0x6b: movq $0,0x28e6eea(%rip)
db>
db> set $lines = 0
db> set $maxwidth = 0
db> show registers
cs 0x20
ds 0x3b
es 0x3b
fs 0x13
gs 0x1b
ss 0x28
rax 0x12
rcx 0x84998608f4969297
rdx 0x40001
rbx 0
rsp 0xfffffe009c2890b0
rbp 0xfffffe009c2890d0
rsi 0
rdi 0xfffffe00587e0128
r8 0x3
r9 0xfffffe009c288c08
r10 0
r11 0xfffffe005877b350
r12 0xfffffe009be663a0
r13 0xfffffe009c289101
r14 0xffffffff82c68b40 .str.18
r15 0xffffffff82c68b40 .str.18
rip 0xffffffff817a7c4b kdb_enter+0x6b
rflags 0x46
kdb_enter+0x6b: movq $0,0x28e6eea(%rip)
db> show proc
Process 7103 (syz-executor.2) at 0xfffffe009c070a70:
state: NORMAL
uid: 0 gids: 0, 0, 5
parent: pid 795 at 0xfffffe008f81a538
ABI: FreeBSD ELF64
flag: 0x10080480 flag2: 0
arguments: /root/syz-executor.2
reaper: 0xfffffe0053d51538 reapsubtree: 1
sigparent: 20
vmspace: 0xfffffe009c04f3e0
(map 0xfffffe009c04f3e0)
(map.pmap 0xfffffe009c04f4a0)
(pmap 0xfffffe009c04f500)
threads: 3
105342 s syz-executor.2
106774 Run CPU 1 syz-executor.2
106782 Run CPU 0 syz-executor.2
db> ps
pid ppid pgrp uid state wmesg wchan cmd
7103 795 795 0 T (threaded) syz-executor.2
105342 s syz-executor.2
106774 Run CPU 1 syz-executor.2
106782 Run CPU 0 syz-executor.2
7076 0 0 0 DL aiordy 0xfffffe009c070000 [aiod4]
7075 0 0 0 DL aiordy 0xfffffe009c02ea70 [aiod3]
7074 0 0 0 DL aiordy 0xfffffe009c0afa70 [aiod2]
7073 0 0 0 DL aiordy 0xfffffe009c0a9538 [aiod1]
5706 1 786 0 S uwait 0xfffffe009c036880 syz-executor.1
5699 1 786 0 S uwait 0xfffffe009be6a100 syz-executor.1
5695 1 786 0 S uwait 0xfffffe009be6ac00 syz-executor.1
5690 1 786 0 S uwait 0xfffffe009b8bde80 syz-executor.1
5682 1 786 0 S uwait 0xfffffe009be6a900 syz-executor.1
5676 1 786 0 S uwait 0xfffffe009be6a800 syz-executor.1
5674 1 786 0 S uwait 0xfffffe009be6ae00 syz-executor.1
5666 1 786 0 S uwait 0xfffffe009bd60300 syz-executor.1
5661 1 786 0 S uwait 0xfffffe009be6ad00 syz-executor.1
5657 1 822 0 S uwait 0xfffffe009bd60800 syz-executor.3
5652 1 786 0 S uwait 0xfffffe009be6af00 syz-executor.1
5650 1 822 0 S uwait 0xfffffe009bb77880 syz-executor.3
5648 1 786 0 S uwait 0xfffffe009bdce580 syz-executor.1
5643 1 786 0 S uwait 0xfffffe009bdcea80 syz-executor.1
5638 1 822 0 S uwait 0xfffffe009bcba800 syz-executor.3
5634 1 786 0 S uwait 0xfffffe009bd60a00 syz-executor.1
5629 1 786 0 S uwait 0xfffffe009bd60400 syz-executor.1
5628 1 822 0 S uwait 0xfffffe009bdce880 syz-executor.3
5622 1 786 0 S uwait 0xfffffe009bcba380 syz-executor.1
5611 1 786 0 S uwait 0xfffffe009bdce480 syz-executor.1
5603 1 786 0 S uwait 0xfffffe009bd60c00 syz-executor.1
5595 1 786 0 S uwait 0xfffffe009bd60600 syz-executor.1
5590 1 786 0 S uwait 0xfffffe009bcba180 syz-executor.1
5581 1 786 0 S uwait 0xfffffe009bdce980 syz-executor.1
5572 1 786 0 S uwait 0xfffffe009bd60b00 syz-executor.1
5567 1 786 0 S uwait 0xfffffe009bd60700 syz-executor.1
5416 1 795 0 S uwait 0xfffffe009bd60500 syz-executor.2
5415 1 795 0 S uwait 0xfffffe009bdce080 syz-executor.2
5408 1 822 0 S uwait 0xfffffe009bd60d00 syz-executor.3
5389 1 822 0 S uwait 0xfffffe009bdce380 syz-executor.3
5362 1 822 0 S uwait 0xfffffe009bb77480 syz-executor.3
5360 1 786 0 S uwait 0xfffffe009b8bd100 syz-executor.1
5358 1 786 0 S uwait 0xfffffe009bd60e00 syz-executor.1
5355 1 786 0 S uwait 0xfffffe009bcba480 syz-executor.1
5353 1 786 0 S uwait 0xfffffe009bcba580 syz-executor.1
5350 1 786 0 S uwait 0xfffffe009bb77000 syz-executor.1
5346 1 786 0 S uwait 0xfffffe009bd60f00 syz-executor.1
5344 1 822 0 S uwait 0xfffffe009bdce780 syz-executor.3
5338 1 786 0 S uwait 0xfffffe009bcbae80 syz-executor.1
5336 1 822 0 S uwait 0xfffffe009bcbab80 syz-executor.3
5335 1 786 0 S uwait 0xfffffe009b2f2000 syz-executor.1
5328 1 786 0 S uwait 0xfffffe009bdceb80 syz-executor.1
5326 1 822 0 S uwait 0xfffffe009bdced80 syz-executor.3
5325 1 786 0 S uwait 0xfffffe009bdcee80 syz-executor.1
5323 1 786 0 S uwait 0xfffffe009bdcec80 syz-executor.1
5320 1 786 0 S uwait 0xfffffe009bb77380 syz-executor.1
5307 1 786 0 S uwait 0xfffffe009bcba080 syz-executor.1
5298 1 786 0 S uwait 0xfffffe009bcba280 syz-executor.1
5289 1 786 0 S uwait 0xfffffe009bb77a80 syz-executor.1
5285 1 786 0 S uwait 0xfffffe009b2f2500 syz-executor.1
5274 1 786 0 S uwait 0xfffffe009b2f2080 syz-executor.1
5273 1 786 0 S uwait 0xfffffe009b38d280 syz-executor.1
5270 1 786 0 S uwait 0xfffffe009bcbac80 syz-executor.1
5268 1 786 0 S uwait 0xfffffe009b298180 syz-executor.1
5265 1 785 0 S uwait 0xfffffe009bb77b80 syz-executor.0
5264 1 786 0 S uwait 0xfffffe009b38d000 syz-executor.1
5263 1 785 0 S uwait 0xfffffe009bb77980 syz-executor.0
5262 1 786 0 S uwait 0xfffffe009bcbaa80 syz-executor.1
5257 1 786 0 S uwait 0xfffffe009b2f2400 syz-executor.1
5253 1 786 0 S uwait 0xfffffe009b38d980 syz-executor.1
5247 1 786 0 S uwait 0xfffffe009bb77580 syz-executor.1
5246 1 786 0 S uwait 0xfffffe009b8bd680 syz-executor.1
5238 1 786 0 S uwait 0xfffffe0091e34700 syz-executor.1
5236 1 786 0 S uwait 0xfffffe009bcba980 syz-executor.1
5220 1 786 0 S uwait 0xfffffe0092572700 syz-executor.1
5218 1 786 0 S uwait 0xfffffe009b38d200 syz-executor.1
5212 1 786 0 S uwait 0xfffffe009b38d100 syz-executor.1
5208 1 786 0 S uwait 0xfffffe009bcbad80 syz-executor.1
5199 1 786 0 S uwait 0xfffffe009bb77780 syz-executor.1
5166 1 785 0 S uwait 0xfffffe009b8bd200 syz-executor.0
5157 1 785 0 S uwait 0xfffffe009b8bd500 syz-executor.0
5149 1 785 0 S uwait 0xfffffe009bb77680 syz-executor.0
5145 1 785 0 S uwait 0xfffffe009bb77c80 syz-executor.0
5142 1 785 0 S uwait 0xfffffe009b38df00 syz-executor.0
5138 1 785 0 S uwait 0xfffffe009bb77d80 syz-executor.0
5135 1 785 0 S uwait 0xfffffe009b2f2200 syz-executor.0
5131 1 785 0 S uwait 0xfffffe009b8bd000 syz-executor.0
5126 1 785 0 S umtxn 0xfffffe009bb77e80 syz-executor.0
5123 1 785 0 S uwait 0xfffffe009b298d80 syz-executor.0
5119 1 785 0 S uwait 0xfffffe009b298080 syz-executor.0
5116 1 785 0 S uwait 0xfffffe009b2f2180 syz-executor.0
5113 1 785 0 S uwait 0xfffffe009b8bdf00 syz-executor.0
5110 1 785 0 S uwait 0xfffffe009b38d600 syz-executor.0
5104 1 785 0 S uwait 0xfffffe009b0fdc00 syz-executor.0
5102 1 785 0 S uwait 0xfffffe009b8bd800 syz-executor.0
5100 1 785 0 S uwait 0xfffffe0092051b00 syz-executor.0
5097 1 785 0 S uwait 0xfffffe009b2f2600 syz-executor.0
5096 1 785 0 S uwait 0xfffffe009b38d700 syz-executor.0
5091 1 785 0 S umtxn 0xfffffe009b8bd300 syz-executor.0
5090 1 785 0 S uwait 0xfffffe0091e34380 syz-executor.0
5088 1 785 0 S uwait 0xfffffe009b0fd380 syz-executor.0
5087 1 785 0 S uwait 0xfffffe009b38da80 syz-executor.0
5084 1 785 0 S uwait 0xfffffe009b8bd400 syz-executor.0
5082 1 785 0 S uwait 0xfffffe009b298880 syz-executor.0
5079 1 786 0 S uwait 0xfffffe009b8bdc00 syz-executor.1
5078 1 785 0 S uwait 0xfffffe009b298480 syz-executor.0
5076 1 785 0 S uwait 0xfffffe009b298380 syz-executor.0
5073 1 786 0 S uwait 0xfffffe009b38d400 syz-executor.1
5068 1 785 0 S uwait 0xfffffe009b2f2880 syz-executor.0
5064 1 785 0 S uwait 0xfffffe009b2f2d80 syz-executor.0
5060 1 785 0 S uwait 0xfffffe009aa73700 syz-executor.0
5054 1 785 0 S uwait 0xfffffe009b298c80 syz-executor.0
4977 1 795 0 S uwait 0xfffffe009b8bdd80 syz-executor.2
4967 1 795 0 S uwait 0xfffffe009b38d880 syz-executor.2
4490 1 795 0 S uwait 0xfffffe009b2f2300 syz-executor.2
4484 1 795 0 S uwait 0xfffffe009aee2780 syz-executor.2
4477 1 795 0 S uwait 0xfffffe009aee2100 syz-executor.2
4473 1 795 0 S uwait 0xfffffe009b0fd100 syz-executor.2
4465 1 795 0 S uwait 0xfffffe009ad4ba00 syz-executor.2
4460 1 795 0 S uwait 0xfffffe009b0fd400 syz-executor.2
4456 1 795 0 S uwait 0xfffffe009b2f2e80 syz-executor.2
4450 1 795 0 S uwait 0xfffffe009b0fd480 syz-executor.2
4444 1 795 0 S uwait 0xfffffe009b38de00 syz-executor.2
4437 1 795 0 S uwait 0xfffffe009b298680 syz-executor.2
4424 1 795 0 S uwait 0xfffffe009b0fd200 syz-executor.2
4412 1 795 0 S uwait 0xfffffe0092015d80 syz-executor.2
4411 1 786 0 S uwait 0xfffffe009b0fd600 syz-executor.1
4410 1 786 0 S uwait 0xfffffe0092572080 syz-executor.1
4409 1 822 0 S uwait 0xfffffe009aee2300 syz-executor.3
4405 1 822 0 S uwait 0xfffffe009b2f2700 syz-executor.3
4404 1 786 0 S uwait 0xfffffe009aa73f00 syz-executor.1
4403 1 795 0 S uwait 0xfffffe009b2f2a80 syz-executor.2
4401 1 786 0 S uwait 0xfffffe009b298a80 syz-executor.1
4397 1 822 0 S uwait 0xfffffe009b298280 syz-executor.3
4396 1 795 0 S uwait 0xfffffe009b298780 syz-executor.2
4395 1 822 0 S uwait 0xfffffe009aee2000 syz-executor.3
4390 1 822 0 S uwait 0xfffffe009aee2200 syz-executor.3
4385 1 786 0 S uwait 0xfffffe009b2f2c80 syz-executor.1
4380 1 786 0 S uwait 0xfffffe009b298980 syz-executor.1
4379 1 795 0 S uwait 0xfffffe009b2f2980 syz-executor.2
4371 1 795 0 S uwait 0xfffffe009b0fdf00 syz-executor.2
4366 1 786 0 S uwait 0xfffffe009b0fd300 syz-executor.1
4365 1 822 0 S uwait 0xfffffe009b38dc80 syz-executor.3
3709 1 3709 65 Ss select 0xfffffe009b38da40 dhclient
3322 1 785 0 S uwait 0xfffffe009b0fd000 syz-executor.0
3316 1 785 0 S uwait 0xfffffe009b2f2b80 syz-executor.0
3303 1 785 0 S uwait 0xfffffe009ad4bc00 syz-executor.0
3298 1 795 0 S uwait 0xfffffe009aee2680 syz-executor.2
3294 1 785 0 S uwait 0xfffffe009b298e80 syz-executor.0
3289 1 785 0 S uwait 0xfffffe009b298b80 syz-executor.0
3285 1 795 0 S uwait 0xfffffe0092051980 syz-executor.2
3279 1 785 0 S uwait 0xfffffe009ad4bb00 syz-executor.0
3278 1 795 0 S uwait 0xfffffe009ad4b080 syz-executor.2
3271 1 785 0 S uwait 0xfffffe009aee2580 syz-executor.0
3265 1 795 0 S uwait 0xfffffe009aee2c80 syz-executor.2
3263 1 3263 0 Ss select 0xfffffe009b0fd540 dhclient
3260 1 3260 0 Ss select 0xfffffe009aee23c0 dhclient
3240 1 785 0 S uwait 0xfffffe009ad4b580 syz-executor.0
3230 1 3230 65 Ss select 0xfffffe009aa73a40 dhclient
3226 1 795 0 S uwait 0xfffffe009b0fdd00 syz-executor.2
3222 1 795 0 S uwait 0xfffffe009aee2a80 syz-executor.2
3217 1 785 0 S uwait 0xfffffe009b0fd800 syz-executor.0
3215 1 795 0 S uwait 0xfffffe0091e34300 syz-executor.2
3210 1 785 0 S umtxn 0xfffffe009aee2980 syz-executor.0
3207 1 795 0 S uwait 0xfffffe009b0fd700 syz-executor.2
3205 1 785 0 S uwait 0xfffffe009aee2880 syz-executor.0
3201 1 795 0 S uwait 0xfffffe009b0fdb00 syz-executor.2
3197 1 795 0 S uwait 0xfffffe0092572280 syz-executor.2
3194 1 785 0 S uwait 0xfffffe009b0fd900 syz-executor.0
3192 1 795 0 S uwait 0xfffffe009aa73300 syz-executor.2
3191 1 785 0 S uwait 0xfffffe009aee2d80 syz-executor.0
3186 1 795 0 S uwait 0xfffffe009ad4b280 syz-executor.2
3184 1 785 0 S uwait 0xfffffe009b0fda00 syz-executor.0
3183 1 795 0 S uwait 0xfffffe009aa73980 syz-executor.2
3178 1 795 0 S uwait 0xfffffe009aa73b00 syz-executor.2
3176 1 785 0 S uwait 0xfffffe009ad4b180 syz-executor.0
3171 1 795 0 S uwait 0xfffffe0092051a00 syz-executor.2
3170 1 785 0 S uwait 0xfffffe009aa73400 syz-executor.0
3167 1 795 0 S uwait 0xfffffe009ad4b680 syz-executor.2
3163 1 785 0 S uwait 0xfffffe009ad4b380 syz-executor.0
3162 1 795 0 S uwait 0xfffffe009ad4b780 syz-executor.2
3157 1 795 0 S uwait 0xfffffe009ad4b480 syz-executor.2
3156 1 785 0 S uwait 0xfffffe0092015180 syz-executor.0
3152 1 785 0 S uwait 0xfffffe009aa73200 syz-executor.0
3151 1 795 0 S uwait 0xfffffe009aa73600 syz-executor.2
3146 1 795 0 S uwait 0xfffffe00925b8180 syz-executor.2
3144 1 785 0 S uwait 0xfffffe0092051a80 syz-executor.0
3141 1 795 0 S uwait 0xfffffe009aee2b80 syz-executor.2
3138 1 785 0 S uwait 0xfffffe0092051800 syz-executor.0
3137 1 795 0 S uwait 0xfffffe009aa73000 syz-executor.2
3136 1 785 0 S uwait 0xfffffe009aa73a80 syz-executor.0
3133 1 785 0 S uwait 0xfffffe0092592080 syz-executor.0
3130 1 795 0 S uwait 0xfffffe00925b8800 syz-executor.2
3129 1 795 0 S uwait 0xfffffe0092572480 syz-executor.2
3128 1 785 0 S uwait 0xfffffe00925b8480 syz-executor.0
3124 1 785 0 S uwait 0xfffffe009aa73e00 syz-executor.0
3123 1 795 0 S uwait 0xfffffe0092592180 syz-executor.2
3121 1 795 0 S uwait 0xfffffe0056fdd280 syz-executor.2
3119 1 785 0 S uwait 0xfffffe009aa73500 syz-executor.0
3117 1 795 0 S uwait 0xfffffe009aa73b80 syz-executor.2
3115 1 785 0 S uwait 0xfffffe009aa73100 syz-executor.0
3114 1 795 0 S uwait 0xfffffe00925b8380 syz-executor.2
3112 1 785 0 S uwait 0xfffffe009aee2e80 syz-executor.0
3107 1 785 0 S uwait 0xfffffe0092051100 syz-executor.0
3105 1 795 0 S uwait 0xfffffe00925b8c00 syz-executor.2
3104 1 795 0 S uwait 0xfffffe0092592780 syz-executor.2
3102 1 785 0 S uwait 0xfffffe0092572180 syz-executor.0
3100 1 795 0 S uwait 0xfffffe00925b8080 syz-executor.2
3099 1 785 0 S uwait 0xfffffe009aa73d00 syz-executor.0
3098 1 795 0 S uwait 0xfffffe00925b8900 syz-executor.2
3097 1 785 0 S uwait 0xfffffe005877fe80 syz-executor.0
3092 1 795 0 S uwait 0xfffffe005877f000 syz-executor.2
3091 1 785 0 S uwait 0xfffffe008fa81400 syz-executor.0
3089 1 785 0 S uwait 0xfffffe00925b8a00 syz-executor.0
3088 1 795 0 S uwait 0xfffffe008fa81600 syz-executor.2
3082 1 795 0 S uwait 0xfffffe0092015c80 syz-executor.2
3081 1 785 0 S uwait 0xfffffe0092051500 syz-executor.0
3079 1 795 0 S uwait 0xfffffe0092051900 syz-executor.2
3076 1 785 0 S uwait 0xfffffe00925b8d00 syz-executor.0
1770 1 1770 0 Ss select 0xfffffe0092572540 dhclient
1757 1 1757 0 Ss select 0xfffffe009aa737c0 dhclient
1683 1 1683 65 Ss select 0xfffffe009ad4b840 dhclient
1468 1 795 0 S uwait 0xfffffe0092051000 syz-executor.2
1467 1 795 0 S uwait 0xfffffe0092051400 syz-executor.2
1466 1 795 0 S uwait 0xfffffe00925b8b00 syz-executor.2
1465 1 795 0 S uwait 0xfffffe0092051300 syz-executor.2
1353 1 822 0 S uwait 0xfffffe0092572380 syz-executor.3
1346 1 822 0 S uwait 0xfffffe008fa81000 syz-executor.3
1338 1 822 0 S uwait 0xfffffe0092051d00 syz-executor.3
1337 1 822 0 S uwait 0xfffffe00925b8f00 syz-executor.3
1333 1 822 0 S uwait 0xfffffe00925b8280 syz-executor.3
1327 1 822 0 S uwait 0xfffffe0056fdd180 syz-executor.3
1278 1 822 0 S uwait 0xfffffe00925b8e00 syz-executor.3
1277 1 822 0 S uwait 0xfffffe0092051600 syz-executor.3
1014 1 1014 0 Ss select 0xfffffe00925b86c0 dhclient
1007 1 1007 0 Ss select 0xfffffe0092592840 dhclient
988 1 988 65 Ss select 0xfffffe0092572940 dhclient
830 1 830 0 Ss select 0xfffffe0092592ec0 dhclient
822 780 822 0 Ss piperd 0xfffffe00925682e8 syz-executor.3
821 1 821 0 Ss select 0xfffffe0092572840 dhclient
795 780 795 0 Rs syz-executor.2
786 780 786 0 Ss piperd 0xfffffe008f88c8b8 syz-executor.1
785 780 785 0 Ss piperd 0xfffffe00920b22e8 syz-executor.0
780 778 778 0 S (threaded) syz-fuzzer
100099 S uwait 0xfffffe008fa81e80 syz-fuzzer
100123 S uwait 0xfffffe0092015380 syz-fuzzer
100124 S uwait 0xfffffe0092015480 syz-fuzzer
100125 S uwait 0xfffffe0092015580 syz-fuzzer
100126 S uwait 0xfffffe0092015680 syz-fuzzer
100127 S uwait 0xfffffe00573dc180 syz-fuzzer
100128 S kqread 0xfffffe0091fc0700 syz-fuzzer
100129 S uwait 0xfffffe0092015780 syz-fuzzer
101919 S uwait 0xfffffe009ad4bf00 syz-fuzzer
778 776 778 0 Ss pause 0xfffffe009209fb20 csh
776 694 776 0 Ss select 0xfffffe0092051bc0 sshd
760 1 760 0 Ss+ ttyin 0xfffffe0056fe1cb0 getty
759 1 759 0 Ss+ ttyin 0xfffffe00583ee0b0 getty
758 1 758 0 Ss+ ttyin 0xfffffe00583ee4b0 getty
757 1 757 0 Ss+ ttyin 0xfffffe00583ee8b0 getty
756 1 756 0 Ss+ ttyin 0xfffffe00583eecb0 getty
755 1 755 0 Ss+ ttyin 0xfffffe00583960b0 getty
754 1 754 0 Ss+ ttyin 0xfffffe00583964b0 getty
753 1 753 0 Ss+ ttyin 0xfffffe00583968b0 getty
752 1 752 0 Ss+ ttyin 0xfffffe0058396cb0 getty
698 1 698 0 Ss nanslp 0xffffffff8405ba00 cron
694 1 694 0 Ss select 0xfffffe008fa81840 sshd
507 1 507 0 Ss select 0xfffffe0091e347c0 syslogd
436 1 436 0 Ss select 0xfffffe008fa818c0 devd
435 1 435 65 Ss select 0xfffffe0091e34840 dhclient
350 1 350 0 Ss select 0xfffffe008fa817c0 dhclient
347 1 347 0 Ss select 0xfffffe0091e348c0 dhclient
23 0 0 0 DL syncer 0xffffffff84181b40 [syncer]
22 0 0 0 DL vlruwt 0xfffffe0056ab8000 [vnlru]
21 0 0 0 RL (threaded) [bufdaemon]
100083 RunQ [bufdaemon]
100086 D - 0xffffffff83411f80 [bufspacedaemon-0]
100097 D sdflush 0xfffffe008f8b0ce8 [/ worker]
20 0 0 0 DL psleep 0xffffffff841b7dc0 [vmdaemon]
19 0 0 0 RL (threaded) [pagedaemon]
100081 RunQ [dom0]
100084 D launds 0xffffffff841ab904 [laundry: dom0]
100085 D umarecl 0xffffffff841aa5a0 [uma]
18 0 0 0 RL [rand_harvestq]
17 0 0 0 DL waiting 0xffffffff84d72460 [sctp_iterator]
16 0 0 0 RL [pf purge]
15 0 0 0 DL - 0xffffffff8417aec0 [soaiod4]
9 0 0 0 DL - 0xffffffff8417aec0 [soaiod3]
8 0 0 0 DL - 0xffffffff8417aec0 [soaiod2]
7 0 0 0 DL - 0xffffffff8417aec0 [soaiod1]
6 0 0 0 DL (threaded) [cam]
100046 D - 0xffffffff83c98240 [doneq0]
100047 D - 0xffffffff83c981c0 [async]
100080 D - 0xffffffff83c98040 [scanner]
14 0 0 0 DL seqstat 0xfffffe0056ab1c88 [sequencer 00]
5 0 0 0 DL crypto_ 0xfffffe00541aed80 [crypto returns 1]
4 0 0 0 DL crypto_ 0xfffffe00541aed30 [crypto returns 0]
3 0 0 0 DL crypto_ 0xffffffff841a59a0 [crypto]
13 0 0 0 DL (threaded) [geom]
100037 D - 0xffffffff8402efc0 [g_event]
100038 D - 0xffffffff8402f000 [g_up]
100039 D - 0xffffffff8402f040 [g_down]
2 0 0 0 DL (threaded) [KTLS]
100028 D - 0xfffffe0053e16e00 [thr_0]
100029 D - 0xfffffe0053e16e80 [thr_1]
12 0 0 0 WL (threaded) [intr]
100010 I [swi6: task queue]
100011 I [swi6: Giant taskq]
100014 I [swi5: fast taskq]
100030 I [swi1: netisr 0]
100031 I [swi3: vm]
100032 I [swi4: clock (0)]
100033 I [swi4: clock (1)]
100034 I [swi1: hpts]
100035 I [swi1: hpts]
100048 I [irq24: virtio_pci0]
100049 I [irq25: virtio_pci0]
100050 I [irq26: virtio_pci0]
100051 I [irq27: virtio_pci0]
100052 I [irq28: virtio_pci1]
100053 I [irq29: virtio_pci1]
100054 I [irq30: virtio_pci1]
100055 I [irq31: virtio_pci1]
100056 I [irq32: virtio_pci1]
100061 I [irq10: virtio_pci2]
100063 I [irq1: atkbd0]
100064 I [irq12: psm0]
100065 I [swi0: uart uart++]
100073 I [swi1: pf send]
11 0 0 0 RL (threaded) [idle]
100003 CanRun [idle: cpu0]
100004 CanRun [idle: cpu1]
1 0 1 0 SLs wait 0xfffffe0053d51538 [init]
10 0 0 0 DL audit_w 0xffffffff841a6940 [audit]
0 0 0 0 DLs (threaded) [kernel]
100000 D swapin 0xffffffff8402fec0 [swapper]
100005 D - 0xfffffe0053c0d800 [softirq_0]
100006 D - 0xfffffe0053c0d600 [softirq_1]
100007 D - 0xfffffe0053c0d400 [if_io_tqg_0]
100008 D - 0xfffffe0053c0d200 [if_io_tqg_1]
100009 D - 0xfffffe0053c0d000 [if_config_tqg_0]
100012 D - 0xfffffe000791b500 [thread taskq]
100013 D - 0xfffffe000791b400 [inm_free taskq]
100015 D - 0xfffffe000791b200 [kqueue_ctx taskq]
100016 D - 0xfffffe000791b100 [linuxkpi_irq_wq]
100017 D - 0xfffffe000791b000 [aiod_kick taskq]
100018 D - 0xfffffe0053df6e00 [in6m_free taskq]
100019 D - 0xfffffe0053df6d00 [pci_hp taskq]
100020 D - 0xfffffe0053df6c00 [linuxkpi_short_wq_0]
100021 D - 0xfffffe0053df6c00 [linuxkpi_short_wq_1]
100022 D - 0xfffffe0053df6c00 [linuxkpi_short_wq_2]
100023 D - 0xfffffe0053df6c00 [linuxkpi_short_wq_3]
100024 D - 0xfffffe0053df6b00 [linuxkpi_long_wq_0]
100025 D - 0xfffffe0053df6b00 [linuxkpi_long_wq_1]
100026 D - 0xfffffe0053df6b00 [linuxkpi_long_wq_2]
100027 D - 0xfffffe0053df6b00 [linuxkpi_long_wq_3]
100036 D - 0xfffffe0053df6a00 [firmware taskq]
100040 D - 0xfffffe0053df6900 [crypto_0]
100041 D - 0xfffffe0053df6900 [crypto_1]
100057 D - 0xfffffe0053df6700 [vtnet0 rxq 0]
100058 D - 0xfffffe0053df6600 [vtnet0 txq 0]
100059 D - 0xfffffe0053df6500 [vtnet0 rxq 1]
100060 D - 0xfffffe0053df6400 [vtnet0 txq 1]
100062 D vtbslp 0xfffffe0056fbc300 [virtio_balloon]
100066 D - 0xfffffe0053df6300 [mca taskq]
100071 D - 0xffffffff82c6fac0 [deadlkres]
100075 D - 0xfffffe005838be00 [acpi_task_0]
100076 D - 0xfffffe005838be00 [acpi_task_1]
100077 D - 0xfffffe005838be00 [acpi_task_2]
100079 D - 0xfffffe0053df6800 [CAM taskq]
db> show all locks
Process 7103 (syz-executor.2) thread 0xfffffe009c032900 (106774)
exclusive sleep mutex pmap (pmap) r = 0 (0xffffffff841f5e40) locked @ /syzkaller/managers/main/kernel/sys/amd64/amd64/pmap.c:6155
Process 7103 (syz-executor.2) thread 0xfffffe009be663a0 (106782)
exclusive sleep mutex vm map (system) (vm map (system)) r = 0 (0xffffffff841aaa80) locked @ /syzkaller/managers/main/kernel/sys/vm/vm_map.c:2127
Process 19 (pagedaemon) thread 0xfffffe005838ec80 (100081)
shared rw UMA lock (UMA lock) r = 0 (0xffffffff8344b5c0) locked @ /syzkaller/managers/main/kernel/sys/vm/uma_core.c:3029
shared sx umareclaim (umareclaim) r = 0 (0xffffffff841aa5a0) locked @ /syzkaller/managers/main/kernel/sys/vm/uma_core.c:5142
db> show malloc
Type InUse MemUse Requests
pf_hash 5 11524K 5
devbuf 4216 4338K 4244
filedesc 446 3567K 12401
tcp_hpts 6 3201K 6
sysctloid 34320 2027K 34387
vtbuf 24 1968K 46
kobj 327 1308K 487
subproc 573 1234K 7403
newblk 38 1034K 6610
vfscache 3 1025K 3
pcb 425 983K 12250
inodedep 100 550K 6062
ufs_quota 1 512K 1
vfs_hash 1 512K 1
callout 2 512K 2
intr 4 472K 4
vmem 3 276K 7
acpica 1674 184K 54844
vnet_data 1 168K 1
tidhash 3 141K 3
linker 357 140K 397
pagedep 35 137K 5990
tfo_ccache 1 128K 1
kdtrace 650 110K 13896
DEVFS1 107 107K 124
sem 4 106K 4
umtx 770 97K 770
sctp_atcl 249 94K 6949
BPF 46 88K 50
bus 989 81K 3482
mtx_pool 2 72K 2
syncache 1 68K 1
acpitask 1 64K 1
ddb_capture 1 64K 1
module 511 64K 511
sctp_stro 50 50K 1174
temp 35 33K 2382
hostcache 1 32K 1
shm 1 32K 1
DEVFS3 126 32K 136
msg 4 30K 4
gtaskqueue 18 26K 18
kbdmux 6 22K 6
kqueue 283 20K 7178
ifaddr 70 20K 72
DEVFS_RULE 56 20K 56
pwddesc 281 18K 7111
ufs_mount 5 17K 6
proc 3 17K 3
routetbl 128 16K 419
tty 16 16K 16
ithread 99 16K 99
dirrem 62 16K 5981
bus-sc 33 14K 1694
KTRACE 100 13K 100
ifnet 7 13K 7
ether_multi 152 13K 162
lltable 39 12K 53
kenv 95 12K 95
eventhandler 133 12K 133
sctp_atky 299 11K 8358
CAM queue 5 11K 1528
rman 84 10K 425
sctp_timw 39 10K 39
GEOM 60 10K 489
in6_multi 65 9K 65
bmsafemap 2 9K 6042
UART 12 9K 12
devstat 4 9K 4
ksem 1 8K 1
rpc 2 8K 2
shmfd 1 8K 3
pfs_vncache 1 8K 1
freefile 62 8K 5808
pfs_nodes 20 8K 20
audit_evclass 236 8K 294
cred 26 7K 258
taskqueue 60 7K 60
sglist 5 7K 5
CAM DEV 3 6K 510
plimit 24 6K 454
DEVFSP 80 5K 1793
ufs_dirhash 20 5K 24
UMA 270 5K 270
session 35 5K 49
pf_ifnet 10 5K 19
vt 11 5K 11
memdesc 1 4K 1
MCA 32 4K 32
evdev 4 4K 4
kcovinfo 64 4K 68
sctp_athm 249 4K 7071
newdirblk 30 4K 5972
acpisem 28 4K 28
selfd 55 4K 103524
lockf 32 4K 60
hhook 15 4K 17
fpukern_ctx 3 3K 3
proc-args 52 3K 665
terminal 11 3K 11
select 19 3K 63
uidinfo 3 3K 11
local_apic 1 2K 1
io_apic 1 2K 1
ipsec-saq 2 2K 2
inpcbpolicy 63 2K 1460
ip6ndp 12 2K 13
sctp_ifa 13 2K 14
Unitno 27 2K 47
CAM XPT 22 2K 543
sctp_map 100 2K 2348
in_multi 6 2K 8
pf_rule 10 2K 10
ipsecpolicy 2 2K 2
acpidev 20 2K 20
msi 9 2K 9
clone 9 2K 9
osd 54 2K 1094
tun 7 2K 7
freework 5 2K 5811
softdep 1 1K 1
mkdir 8 1K 11944
freeblks 4 1K 5810
sahead 1 1K 1
secasvar 1 1K 1
nhops 6 1K 8
vnodemarker 2 1K 54
NFSD session 1 1K 1
CAM periph 4 1K 271
sctp_ifn 6 1K 14
ipsec 3 1K 3
mld 6 1K 6
igmp 6 1K 6
toponodes 6 1K 6
isadev 6 1K 6
mount 16 1K 89
pci_link 10 1K 10
crypto 4 1K 532
encap_export_host 12 1K 12
procdesc 5 1K 14
sctp_stri 1 1K 244
diradd 4 1K 6021
pfil 4 1K 4
cdev 2 1K 2
chacha20random 1 1K 1
NFSD lckfile 1 1K 1
NFSD V4client 1 1K 1
DEVFS 9 1K 10
vnodes 1 1K 1
CAM SIM 2 1K 2
ktls 1 1K 1
feeder 7 1K 7
tcpfunc 3 1K 3
loginclass 3 1K 6
prison 6 1K 6
lkpikmalloc 5 1K 6
aesni_data 2 1K 2
apmdev 1 1K 1
atkbddev 2 1K 2
CAM dev queue 2 1K 2
xform 2 1K 2187
CAM I/O Scheduler 1 1K 1
CAM path 4 1K 1034
pmchooks 1 1K 1
nexusdev 7 1K 7
soname 4 1K 8363
filecaps 5 1K 98
sctp_vrf 1 1K 1
vnet 1 1K 1
entropy 2 1K 46
acpiintr 1 1K 1
pmc 1 1K 1
cpus 2 1K 2
vnet_data_free 1 1K 1
Per-cpu 1 1K 1
p1003.1b 1 1K 1
sctp_mcore 0 0K 0
sctp_socko 0 0K 3060
sctp_iter 0 0K 12
sctp_mvrf 0 0K 0
sctp_cpal 0 0K 0
sctp_cmsg 0 0K 0
sctp_stre 0 0K 0
sctp_athi 0 0K 0
sctp_a_it 0 0K 12
sctp_aadr 0 0K 1
htcp data 0 0K 0
mqdata 0 0K 0
vegas data 0 0K 0
tcp_do 0 0K 0
tcp_fsb 0 0K 1
dctcp data 0 0K 0
chd data 0 0K 0
pf_table 0 0K 0
pf_altq 0 0K 0
pf_osfp 0 0K 0
pf_temp 0 0K 0
cubic data 0 0K 0
cdg data 0 0K 0
NEWdirectio 0 0K 0
NEWNFSnode 0 0K 0
madt_table 0 0K 2
smartpqi 0 0K 0
NFSCL lck 0 0K 0
NFSCL lckown 0 0K 0
NFSCL client 0 0K 0
NFSCL deleg 0 0K 0
NFSCL open 0 0K 0
NFSCL owner 0 0K 0
NFS fh 0 0K 0
NFS req 0 0K 0
iavf 0 0K 0
ixl 0 0K 0
NFSD usrgroup 0 0K 0
NFSD string 0 0K 0
NFSD V4lock 0 0K 0
NFSD V4state 0 0K 0
NFSD srvcache 0 0K 0
ice-resmgr 0 0K 0
ice-osdep 0 0K 0
ice 0 0K 0
axgbe 0 0K 0
msdosfs_fat 0 0K 0
msdosfs_mount 0 0K 0
msdosfs_node 0 0K 0
DEVFS4 0 0K 0
DEVFS2 0 0K 0
xen_intr 0 0K 0
gntdev 0 0K 0
privcmd_dev 0 0K 0
xen_hvm 0 0K 0
legacydrv 0 0K 0
qpidrv 0 0K 0
evtchn_dev 0 0K 0
xenstore 0 0K 0
dmar_idpgtbl 0 0K 0
dmar_dom 0 0K 0
dmar_ctx 0 0K 0
ciss_data 0 0K 0
BACKLIGHT 0 0K 0
xnb 0 0K 0
isci 0 0K 0
iommu_dmamap 0 0K 0
xbbd 0 0K 0
hyperv_socket 0 0K 0
bxe_ilt 0 0K 0
xenbus 0 0K 0
xbd 0 0K 0
Balloon 0 0K 0
sysmouse 0 0K 0
vm_fictitious 0 0K 0
vtfont 0 0K 0
ath_hal 0 0K 0
athdev 0 0K 0
ata_pci 0 0K 0
ata_dma 0 0K 0
ata_generic 0 0K 0
amr 0 0K 0
pvscsi 0 0K 0
scsi_da 0 0K 69
UMAHash 0 0K 0
ata_da 0 0K 0
vm_pgdata 0 0K 0
jblocks 0 0K 0
savedino 0 0K 3666
sentinel 0 0K 0
jfsync 0 0K 0
jtrunc 0 0K 0
sbdep 0 0K 22
jsegdep 0 0K 0
jseg 0 0K 0
jfreefrag 0 0K 0
jfreeblk 0 0K 0
jnewblk 0 0K 0
jmvref 0 0K 0
jremref 0 0K 0
jaddref 0 0K 0
freedep 0 0K 0
freefrag 0 0K 2
allocindir 0 0K 0
indirdep 0 0K 10
allocdirect 0 0K 0
ufs_trim 0 0K 0
mactemp 0 0K 0
audit_trigger 0 0K 0
audit_pipe_presel 0 0K 0
audit_pipeent 0 0K 0
audit_pipe 0 0K 0
audit_evname 0 0K 0
audit_bsm 0 0K 0
audit_gidset 0 0K 0
audit_text 0 0K 0
audit_path 0 0K 0
audit_data 0 0K 0
audit_cred 0 0K 0
scsi_ch 0 0K 0
scsi_cd 0 0K 0
AHCI driver 0 0K 0
USBdev 0 0K 0
USB 0 0K 0
agp 0 0K 0
nvme_da 0 0K 0
ktls_ocf 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5E_TLS 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EN 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5DUMP 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
seq_file 0 0K 0
radix 0 0K 0
idr 0 0K 0
lkpifw 0 0K 0
NLM 0 0K 0
ipsec-spdcache 0 0K 0
ipsec-reg 0 0K 0
ipsec-misc 0 0K 0
ipsecrequest 0 0K 0
ip6opt 0 0K 3
ip6_msource 0 0K 0
ip6_moptions 0 0K 0
in6_mfilter 0 0K 0
frag6 0 0K 0
tcplog 0 0K 0
tcp_hwpace 0 0K 0
acpipwr 0 0K 0
acpi_perf 0 0K 0
LRO 0 0K 0
newreno data 0 0K 0
ip_msource 0 0K 0
ip_moptions 0 0K 0
in_mfilter 0 0K 0
ipid 0 0K 0
80211scan 0 0K 0
80211ratectl 0 0K 0
80211power 0 0K 0
80211nodeie 0 0K 0
80211node 0 0K 0
80211mesh_gt 0 0K 0
80211mesh_rt 0 0K 0
80211perr 0 0K 0
80211prep 0 0K 0
80211preq 0 0K 0
80211dfs 0 0K 0
80211crypto 0 0K 0
80211vap 0 0K 0
iflib 0 0K 0
vlan 0 0K 0
gif 0 0K 0
ifdescr 0 0K 0
zlib 0 0K 0
fadvise 0 0K 2
VN POLL 0 0K 0
twsbuf 0 0K 0
statfs 0 0K 6160
namei_tracker 0 0K 0
export_host 0 0K 0
cl_savebuf 0 0K 2
twe_commands 0 0K 0
twa_commands 0 0K 0
tcp_log_dev 0 0K 504
midi buffers 0 0K 0
mixer 0 0K 0
ac97 0 0K 0
hdacc 0 0K 0
hdac 0 0K 0
hdaa 0 0K 0
acpicmbat 0 0K 0
SIIS driver 0 0K 0
CAM CCB 0 0K 2487
PUC 0 0K 0
ppbusdev 0 0K 0
agtiapi_MemAlloc malloc 0 0K 0
biobuf 0 0K 0
aios 0 0K 0
lio 0 0K 0
acl 0 0K 0
osti_cacheable 0 0K 0
mbuf_tag 0 0K 120
tempbuff 0 0K 0
tempbuff 0 0K 0
ag_tgt_map_t malloc 0 0K 0
ag_slr_map_t malloc 0 0K 0
lDevFlags * malloc 0 0K 0
tiDeviceHandle_t * malloc 0 0K 0
ag_portal_data_t malloc 0 0K 0
ag_device_t malloc 0 0K 0
STLock malloc 0 0K 0
CCB List 0 0K 0
sr_iov 0 0K 0
OCS 0 0K 0
OCS 0 0K 0
nvme 0 0K 0
nvd 0 0K 0
netmap 0 0K 0
mwldev 0 0K 0
MVS driver 0 0K 0
CAM ccb queue 0 0K 0
mrsasbuf 0 0K 0
mpt_user 0 0K 0
mps_user 0 0K 0
accf 0 0K 0
pts 0 0K 0
iov 0 0K 16275
ioctlops 0 0K 196
eventfd 0 0K 0
Witness 0 0K 0
stack 0 0K 0
MPSSAS 0 0K 0
mps 0 0K 0
mpr_user 0 0K 0
MPRSAS 0 0K 0
mpr 0 0K 0
mfibuf 0 0K 0
sbuf 0 0K 288
md_sectors 0 0K 0
firmware 0 0K 0
compressor 0 0K 0
md_disk 0 0K 0
SWAP 0 0K 0
malodev 0 0K 0
LED 0 0K 0
sysctltmp 0 0K 859
sysctl 0 0K 3
ekcd 0 0K 0
dumper 0 0K 0
sendfile 0 0K 0
rctl 0 0K 0
ix_sriov 0 0K 0
aacraidcam 0 0K 0
aacraid_buf 0 0K 0
ix 0 0K 0
ipsbuf 0 0K 0
cache 0 0K 0
iirbuf 0 0K 0
prison_racct 0 0K 0
Fail Points 0 0K 0
sigio 0 0K 1
filedesc_to_leader 0 0K 0
pwd 0 0K 0
tty console 0 0K 0
aaccam 0 0K 0
aacbuf 0 0K 0
zstd 0 0K 0
XZ_DEC 0 0K 0
nvlist 0 0K 0
SCSI ENC 0 0K 0
SCSI sa 0 0K 0
scsi_pass 0 0K 0
isofs_node 0 0K 0
isofs_mount 0 0K 0
tr_raid5_data 0 0K 0
tr_raid1e_data 0 0K 0
tr_raid1_data 0 0K 0
tr_raid0_data 0 0K 0
tr_concat_data 0 0K 0
md_sii_data 0 0K 0
md_promise_data 0 0K 0
md_nvidia_data 0 0K 0
md_jmicron_data 0 0K 0
md_intel_data 0 0K 0
md_ddf_data 0 0K 0
raid_data 0 0K 72
geom_flashmap 0 0K 0
tmpfs dir 0 0K 0
tmpfs name 0 0K 0
tmpfs mount 0 0K 0
NFS FHA 0 0K 0
newnfsmnt 0 0K 0
newnfsclient_req 0 0K 0
NFSCL layrecall 0 0K 0
NFSCL session 0 0K 0
NFSCL sockreq 0 0K 0
NFSCL devinfo 0 0K 0
NFSCL flayout 0 0K 0
NFSCL layout 0 0K 0
NFSD rollback 0 0K 0
NFSCL diroff 0 0K 0
db> show uma
Zone Size Used Free Requests Sleeps Bucket Total Mem XFree
mbuf_jumbo_page 4096 8336 975 1196491 0 254 38137856 0
malloc-16384 16384 223 7 6199 0 1 3768320 0
RADIX NODE 144 22762 109 200562 0 62 3293424 0
tcp_log 416 4136 3739 92118 0 253 3276000 0
mbuf 256 8722 848 1889258 0 254 2449920 0
pbuf 2624 0 778 0 0 2 2041472 0
tcp_bbr_map 128 13433 52 47103 0 126 1726080 0
malloc-384 384 4424 6 4438 0 30 1701120 0
BUF TRIE 144 187 11573 875 0 62 1693440 0
malloc-128 128 11312 34 11471 0 126 1452288 0
malloc-4096 4096 328 3 526 0 2 1355776 0
MAP ENTRY 96 13075 407 381060 0 126 1294272 0
malloc-4096 4096 304 6 7666 0 2 1269760 0
UMA Slabs 0 112 11069 16 11069 0 126 1241520 0
mbuf_cluster 2048 570 2 570 0 254 1171456 0
vmem btag 56 20255 24 20255 0 254 1135624 0
VM OBJECT 264 3849 96 101658 0 30 1041480 0
FFS inode 1160 687 20 6495 0 8 820120 0
ertt_txseginfo 40 19513 586 79542 0 254 803960 0
THREAD 1808 368 17 6784 0 8 696080 0
VMSPACE 2544 254 13 7085 0 4 679248 0
malloc-2048 2048 200 24 5657 0 8 458752 0
malloc-384 384 99 1051 6061 0 30 441600 0
256 Bucket 2048 141 59 17677 0 8 409600 0
PROC 1336 280 11 7110 0 8 388776 0
lkpimm 160 1 2324 1 0 62 372000 0
lkpicurr 160 2 2323 2 0 62 372000 0
VNODE 448 726 75 6536 0 30 358848 0
malloc-256 256 217 1073 24559 0 62 330240 0
filedesc0 1072 281 20 7111 0 8 322672 0
sctp_ep 1280 198 39 5653 0 253 303360 0
malloc-64 64 4192 533 108034 0 254 302400 0
socket 944 237 55 8468 0 254 275648 0
malloc-65536 65536 4 0 4 0 1 262144 0
malloc-16 16 14131 369 18343 0 254 232000 0
DEVCTL 1024 0 220 153 0 0 225280 0
malloc-128 128 1560 21 14668 0 126 202368 0
UMA Zones 768 242 2 242 0 16 187392 0
malloc-128 128 366 1091 6263 0 126 186496 0
FFS2 dinode 256 687 18 6495 0 62 180480 0
malloc-32 32 5364 180 5954 0 254 177408 0
malloc-256 256 381 309 16858 0 62 176640 0
malloc-128 128 1264 38 35172 0 126 166656 0
mbuf_packet 256 71 499 8934 0 254 145920 0
128 Bucket 1024 55 84 2087 0 16 142336 0
S VFS Cache 104 1024 341 7190 0 126 141960 0
sctp_asoc 2288 50 10 1174 0 253 137280 0
malloc-65536 65536 2 0 2 0 1 131072 0
malloc-65536 65536 0 2 366 0 1 131072 0
malloc-65536 65536 2 0 2 0 1 131072 0
malloc-1024 1024 110 6 127 0 16 118784 0
ksiginfo 112 275 769 3255 0 126 116928 0
malloc-384 384 249 51
---
This report is generated by a bot. It may contain errors.
See https://goo.gl/tpsmEJ for more information about syzbot.
syzbot engineers can be reached at syzk...@googlegroups.com.
syzbot will keep track of this issue. See:
https://goo.gl/tpsmEJ#status for how to communicate with syzbot.
syzbot
Jul 23, 2021, 8:16:24 AM7/23/21
to syzkaller-f...@googlegroups.com
syzbot has found a reproducer for the following issue on:
HEAD commit: 95f0da5be1e3 bsdinstall: Only show menu if there are more ..
dashboard link: https://syzkaller.appspot.com/bug?extid=e5e4bf10034f89aef0ea
syz repro: https://syzkaller.appspot.com/x/repro.syz?x=128ba2d4300000
C reproducer: https://syzkaller.appspot.com/x/repro.c?x=10b794f4300000
IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+e5e4bf...@syzkaller.appspotmail.com
login: panic: pmap_kasan_enter_alloc_4k: no memory to grow shadow map
cpuid = 0
time = 1627042244
KDB: stack backtrace:
db_trace_self_wrapper() at db_trace_self_wrapper+0xc7/frame 0xfffffe009bd18f70
kdb_backtrace() at kdb_backtrace+0xd3/frame 0xfffffe009bd190d0
vpanic() at vpanic+0x2c5/frame 0xfffffe009bd191b0
panic() at panic+0xb5/frame 0xfffffe009bd19280
pmap_kasan_enter() at pmap_kasan_enter+0x77f/frame 0xfffffe009bd192c0
kasan_shadow_map() at kasan_shadow_map+0x88/frame 0xfffffe009bd192f0
pmap_growkernel() at pmap_growkernel+0xdf/frame 0xfffffe009bd19330
vm_map_insert() at vm_map_insert+0x67e/frame 0xfffffe009bd19490
vm_map_find() at vm_map_find+0x903/frame 0xfffffe009bd19570
kva_import() at kva_import+0xd4/frame 0xfffffe009bd19650
vmem_try_fetch() at vmem_try_fetch+0x21f/frame 0xfffffe009bd19740
vmem_xalloc() at vmem_xalloc+0xc3f/frame 0xfffffe009bd19800
kva_import_domain() at kva_import_domain+0x5f/frame 0xfffffe009bd19850
vmem_try_fetch() at vmem_try_fetch+0x21f/frame 0xfffffe009bd19930
vmem_xalloc() at vmem_xalloc+0xc3f/frame 0xfffffe009bd199f0
vmem_alloc() at vmem_alloc+0x106/frame 0xfffffe009bd19a50
kmem_malloc_domainset() at kmem_malloc_domainset+0x183/frame 0xfffffe009bd19b90
malloc_large() at malloc_large+0x3e/frame 0xfffffe009bd19bd0
pfioctl() at pfioctl+0x13cf/frame 0xfffffe009bd1b2b0
devfs_ioctl() at devfs_ioctl+0x22a/frame 0xfffffe009bd1b390
VOP_IOCTL_APV() at VOP_IOCTL_APV+0xb0/frame 0xfffffe009bd1b3d0
vn_ioctl() at vn_ioctl+0x215/frame 0xfffffe009bd1b720
devfs_ioctl_f() at devfs_ioctl_f+0x71/frame 0xfffffe009bd1b770
kern_ioctl() at kern_ioctl+0x62e/frame 0xfffffe009bd1b870
sys_ioctl() at sys_ioctl+0x3b6/frame 0xfffffe009bd1b9f0
amd64_syscall() at amd64_syscall+0x425/frame 0xfffffe009bd1bbf0
fast_syscall_common() at fast_syscall_common+0xf8/frame 0xfffffe009bd1bbf0
--- syscall (0, FreeBSD ELF64, nosys), rip = 0x2b577a, rsp = 0x7fffdffdcf68, rbp = 0x7fffdffdcf70 ---
KDB: enter: panic
[ thread pid 793 tid 100127 ]
Stopped at kdb_enter+0x6b: movq $0,0x28ef4ca(%rip)
rdx 0xdffff7c000000000
rbx 0
rsp 0xfffffe009bd190b0
rbp 0xfffffe009bd190d0
rsi 0x1
rdi 0xffffffff84088140 cov_trace_pc
r8 0x3
r9 0xfffffe009bd18c08
r10 0
r11 0xfffffe009e4f3e10
r12 0xfffffe009e4f3900
r13 0xfffffe009bd19101
r14 0xffffffff82c57960 .str.18
r15 0xffffffff82c57960 .str.18
rip 0xffffffff8179b5eb kdb_enter+0x6b
rflags 0x46
kdb_enter+0x6b: movq $0,0x28ef4ca(%rip)
db> show proc
Process 793 (syz-executor4374487) at 0xfffffe009e996000:
ABI: FreeBSD ELF64
flag: 0x10000080 flag2: 0
arguments: ./syz-executor437448767
reaper: 0xfffffe0053d4b538 reapsubtree: 1
sigparent: 20
vmspace: 0xfffffe009e41e9f0
(map 0xfffffe009e41e9f0)
(map.pmap 0xfffffe009e41eab0)
(pmap 0xfffffe009e41eb10)
threads: 3
100123 RunQ syz-executor4374487
100125 Run CPU 1 syz-executor4374487
100127 Run CPU 0 syz-executor4374487
100096 RunQ syz-executor4374487
100129 L *kernel 0xfffffe009e4f5c00 syz-executor4374487
100130 S uwait 0xfffffe0058390000 syz-executor4374487
795 790 785 0 R (threaded) syz-executor4374487
100113 RunQ syz-executor4374487
100128 L *kernel 0xfffffe009e4f5c00 syz-executor4374487
100132 S uwait 0xfffffe0058390100 syz-executor4374487
794 791 785 0 L (threaded) syz-executor4374487
100124 L *kernel 0xfffffe009e4f5c00 syz-executor4374487
100126 L *kernel 0xfffffe009e4f5c00 syz-executor4374487
793 788 785 0 R (threaded) syz-executor4374487
100123 RunQ syz-executor4374487
100125 Run CPU 1 syz-executor4374487
100127 Run CPU 0 syz-executor4374487
792 787 785 0 R syz-executor4374487
791 787 785 0 R syz-executor4374487
790 787 785 0 R syz-executor4374487
788 787 785 0 R syz-executor4374487
787 785 785 0 S nanslp 0xffffffff84057980 syz-executor4374487
785 783 785 0 Ss pause 0xfffffe00588970b0 csh
783 694 783 0 Ss select 0xfffffe0056b764c0 sshd
760 1 760 0 Ss+ ttyin 0xfffffe0056fdecb0 getty
754 1 754 0 Ss+ ttyin 0xfffffe00583944b0 getty
753 1 753 0 Ss+ ttyin 0xfffffe00583948b0 getty
752 1 752 0 Ss+ ttyin 0xfffffe0058394cb0 getty
698 1 698 0 Ss nanslp 0xffffffff84057980 cron
694 1 694 0 Ss select 0xfffffe0056b74740 sshd
507 1 507 0 Ss select 0xfffffe0056b74bc0 syslogd
436 1 436 0 Ss select 0xfffffe0056b73040 devd
435 1 435 65 Ss select 0xfffffe0056b74cc0 dhclient
350 1 350 0 Ss select 0xfffffe0056b74d40 dhclient
347 1 347 0 Ss select 0xfffffe00573e7e40 dhclient
23 0 0 0 DL syncer 0xffffffff8417dac0 [syncer]
22 0 0 0 DL vlruwt 0xfffffe0058736a70 [vnlru]
21 0 0 0 DL (threaded) [bufdaemon]
100083 D qsleep 0xffffffff8417b9c0 [bufdaemon]
20 0 0 0 DL psleep 0xffffffff841b3d80 [vmdaemon]
100088 D umarcl 0xffffffff81e91c70 [uma]
18 0 0 0 DL - 0xffffffff83e0eae0 [rand_harvestq]
17 0 0 0 DL waiting 0xffffffff84d06460 [sctp_iterator]
16 0 0 0 DL pftm 0xffffffff84746e20 [pf purge]
15 0 0 0 DL - 0xffffffff84176e40 [soaiod4]
9 0 0 0 DL - 0xffffffff84176e40 [soaiod3]
8 0 0 0 DL - 0xffffffff84176e40 [soaiod2]
7 0 0 0 DL - 0xffffffff84176e40 [soaiod1]
100047 D - 0xffffffff83c941c0 [async]
100080 D - 0xffffffff83c94040 [scanner]
14 0 0 0 DL seqstat 0xfffffe0007919888 [sequencer 00]
5 0 0 0 DL crypto_ 0xfffffe0053e0fc80 [crypto returns 1]
4 0 0 0 DL crypto_ 0xfffffe0053e0fc30 [crypto returns 0]
3 0 0 0 DL crypto_ 0xffffffff841a1960 [crypto]
100038 D - 0xffffffff8402af80 [g_up]
100039 D - 0xffffffff8402afc0 [g_down]
100029 D - 0xfffffe0053e0fe80 [thr_1]
1 0 1 0 SLs wait 0xfffffe0053d4b538 [init]
10 0 0 0 DL audit_w 0xffffffff841a2900 [audit]
100005 D - 0xfffffe000791d500 [softirq_0]
100006 D - 0xfffffe000791d400 [softirq_1]
100007 D - 0xfffffe000791d300 [if_io_tqg_0]
100008 D - 0xfffffe000791d200 [if_io_tqg_1]
100009 D - 0xfffffe000791d100 [if_config_tqg_0]
100012 D - 0xfffffe0053dde100 [thread taskq]
100013 D - 0xfffffe0053dde000 [inm_free taskq]
100015 D - 0xfffffe0053df1c00 [kqueue_ctx taskq]
100016 D - 0xfffffe0053df1b00 [linuxkpi_irq_wq]
100017 D - 0xfffffe0053df1a00 [aiod_kick taskq]
100018 D - 0xfffffe0053df1900 [in6m_free taskq]
100019 D - 0xfffffe0053df1800 [pci_hp taskq]
100020 D - 0xfffffe0053df1700 [linuxkpi_short_wq_0]
100021 D - 0xfffffe0053df1700 [linuxkpi_short_wq_1]
100022 D - 0xfffffe0053df1700 [linuxkpi_short_wq_2]
100023 D - 0xfffffe0053df1700 [linuxkpi_short_wq_3]
100024 D - 0xfffffe0053df1600 [linuxkpi_long_wq_0]
100025 D - 0xfffffe0053df1600 [linuxkpi_long_wq_1]
100026 D - 0xfffffe0053df1600 [linuxkpi_long_wq_2]
100027 D - 0xfffffe0053df1600 [linuxkpi_long_wq_3]
100036 D - 0xfffffe0054140d00 [firmware taskq]
100040 D - 0xfffffe0054140c00 [crypto_0]
100041 D - 0xfffffe0054140c00 [crypto_1]
100057 D - 0xfffffe0054140600 [vtnet0 rxq 0]
100058 D - 0xfffffe0054140500 [vtnet0 txq 0]
100059 D - 0xfffffe0054140400 [vtnet0 rxq 1]
100060 D - 0xfffffe0054140300 [vtnet0 txq 1]
100062 D vtbslp 0xfffffe0056b73100 [virtio_balloon]
100066 D - 0xfffffe0056fb3b00 [mca taskq]
100071 D - 0xffffffff82c5e8e0 [deadlkres]
100075 D - 0xfffffe005834bd00 [acpi_task_0]
100076 D - 0xfffffe005834bd00 [acpi_task_1]
100077 D - 0xfffffe005834bd00 [acpi_task_2]
100079 D - 0xfffffe0054140b00 [CAM taskq]
db> show all locks
Process 793 (syz-executor4374487) thread 0xfffffe009e4f3900 (100127)
exclusive sleep mutex vm map (system) (vm map (system)) r = 0 (0xffffffff841a6a40) locked @ /syzkaller/managers/main/kernel/sys/vm/vm_map.c:2127
Process 19 (pagedaemon) thread 0xfffffe0058386000 (100081)
sysctloid 34320 2027K 34390
vtbuf 24 1968K 46
kobj 326 1304K 485
newblk 654 1188K 717
vfscache 3 1025K 3
pcb 23 537K 77
inodedep 13 517K 72
acpica 1674 184K 54712
vnet_data 1 168K 1
vmem 3 146K 4
tidhash 3 141K 3
linker 356 140K 384
pagedep 7 130K 18
tfo_ccache 1 128K 1
sem 4 106K 4
DEVFS1 103 103K 112
bus 984 80K 3475
kdtrace 183 37K 929
umtx 264 33K 264
temp 18 33K 1631
BPF 10 18K 10
KTRACE 100 13K 100
routetbl 50 11K 176
shmfd 1 8K 1
pfs_vncache 1 8K 1
ifnet 3 5K 3
evdev 4 4K 4
filedesc 1 4K 1
acpisem 28 4K 28
hhook 15 4K 17
kqueue 51 4K 799
pwddesc 51 4K 797
ether_multi 40 4K 50
lltable 11 4K 11
pf_ifnet 5 3K 6
fpukern_ctx 3 3K 3
in6_multi 25 3K 25
terminal 11 3K 11
session 19 3K 32
uidinfo 3 3K 9
lockf 16 2K 26
Unitno 27 2K 39
dirrem 4 1K 28
ipsec 3 1K 3
diradd 6 1K 36
indirdep 3 1K 3
nhops 6 1K 6
crypto 4 1K 4
ip6ndp 4 1K 5
encap_export_host 12 1K 12
newdirblk 4 1K 8
mkdir 4 1K 16
freefile 4 1K 26
in_multi 2 1K 4
inpcbpolicy 10 1K 137
sctp_ifn 2 1K 6
DEVFS 9 1K 10
mld 2 1K 2
igmp 2 1K 2
tun 3 1K 3
sctp_vrf 1 1K 1
freework 1 1K 26
vnet 1 1K 1
entropy 2 1K 35
sctp_socko 0 0K 0
sctp_iter 0 0K 4
sctp_mvrf 0 0K 0
sctp_timw 0 0K 0
sctp_atky 0 0K 0
sctp_atcl 0 0K 0
sctp_a_it 0 0K 4
sctp_aadr 0 0K 0
sctp_stro 0 0K 0
sctp_stri 0 0K 0
sctp_map 0 0K 0
tcp_fsb 0 0K 0
pf_rule 0 0K 0
savedino 0 0K 30
freefrag 0 0K 1
allocindir 0 0K 0
HEAD commit: 95f0da5be1e3 bsdinstall: Only show menu if there are more ..
git tree: https://github.com/freebsd/freebsd-src.git main
console output: https://syzkaller.appspot.com/x/log.txt?x=118ad292300000
dashboard link: https://syzkaller.appspot.com/bug?extid=e5e4bf10034f89aef0ea
syz repro: https://syzkaller.appspot.com/x/repro.syz?x=128ba2d4300000
C reproducer: https://syzkaller.appspot.com/x/repro.c?x=10b794f4300000
IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+e5e4bf...@syzkaller.appspotmail.com
cpuid = 0
time = 1627042244
KDB: stack backtrace:
db_trace_self_wrapper() at db_trace_self_wrapper+0xc7/frame 0xfffffe009bd18f70
kdb_backtrace() at kdb_backtrace+0xd3/frame 0xfffffe009bd190d0
vpanic() at vpanic+0x2c5/frame 0xfffffe009bd191b0
panic() at panic+0xb5/frame 0xfffffe009bd19280
pmap_kasan_enter() at pmap_kasan_enter+0x77f/frame 0xfffffe009bd192c0
kasan_shadow_map() at kasan_shadow_map+0x88/frame 0xfffffe009bd192f0
pmap_growkernel() at pmap_growkernel+0xdf/frame 0xfffffe009bd19330
vm_map_insert() at vm_map_insert+0x67e/frame 0xfffffe009bd19490
vm_map_find() at vm_map_find+0x903/frame 0xfffffe009bd19570
kva_import() at kva_import+0xd4/frame 0xfffffe009bd19650
vmem_try_fetch() at vmem_try_fetch+0x21f/frame 0xfffffe009bd19740
vmem_xalloc() at vmem_xalloc+0xc3f/frame 0xfffffe009bd19800
kva_import_domain() at kva_import_domain+0x5f/frame 0xfffffe009bd19850
vmem_try_fetch() at vmem_try_fetch+0x21f/frame 0xfffffe009bd19930
vmem_xalloc() at vmem_xalloc+0xc3f/frame 0xfffffe009bd199f0
vmem_alloc() at vmem_alloc+0x106/frame 0xfffffe009bd19a50
kmem_malloc_domainset() at kmem_malloc_domainset+0x183/frame 0xfffffe009bd19b90
malloc_large() at malloc_large+0x3e/frame 0xfffffe009bd19bd0
pfioctl() at pfioctl+0x13cf/frame 0xfffffe009bd1b2b0
devfs_ioctl() at devfs_ioctl+0x22a/frame 0xfffffe009bd1b390
VOP_IOCTL_APV() at VOP_IOCTL_APV+0xb0/frame 0xfffffe009bd1b3d0
vn_ioctl() at vn_ioctl+0x215/frame 0xfffffe009bd1b720
devfs_ioctl_f() at devfs_ioctl_f+0x71/frame 0xfffffe009bd1b770
kern_ioctl() at kern_ioctl+0x62e/frame 0xfffffe009bd1b870
sys_ioctl() at sys_ioctl+0x3b6/frame 0xfffffe009bd1b9f0
amd64_syscall() at amd64_syscall+0x425/frame 0xfffffe009bd1bbf0
fast_syscall_common() at fast_syscall_common+0xf8/frame 0xfffffe009bd1bbf0
--- syscall (0, FreeBSD ELF64, nosys), rip = 0x2b577a, rsp = 0x7fffdffdcf68, rbp = 0x7fffdffdcf70 ---
KDB: enter: panic
[ thread pid 793 tid 100127 ]
Stopped at kdb_enter+0x6b: movq $0,0x28ef4ca(%rip)
db>
db> set $lines = 0
db> set $maxwidth = 0
db> show registers
cs 0x20
ds 0x3b
es 0x3b
fs 0x13
gs 0x1b
ss 0x28
rax 0x12
rcx 0x4022bb20acf266b2
db> set $lines = 0
db> set $maxwidth = 0
db> show registers
cs 0x20
ds 0x3b
es 0x3b
fs 0x13
gs 0x1b
ss 0x28
rax 0x12
rdx 0xdffff7c000000000
rbx 0
rsp 0xfffffe009bd190b0
rbp 0xfffffe009bd190d0
rsi 0x1
rdi 0xffffffff84088140 cov_trace_pc
r8 0x3
r9 0xfffffe009bd18c08
r10 0
r11 0xfffffe009e4f3e10
r12 0xfffffe009e4f3900
r13 0xfffffe009bd19101
r14 0xffffffff82c57960 .str.18
r15 0xffffffff82c57960 .str.18
rip 0xffffffff8179b5eb kdb_enter+0x6b
rflags 0x46
kdb_enter+0x6b: movq $0,0x28ef4ca(%rip)
db> show proc
Process 793 (syz-executor4374487) at 0xfffffe009e996000:
state: NORMAL
uid: 0 gids: 0, 0, 5
parent: pid 788 at 0xfffffe009e527538
uid: 0 gids: 0, 0, 5
ABI: FreeBSD ELF64
flag: 0x10000080 flag2: 0
arguments: ./syz-executor437448767
reaper: 0xfffffe0053d4b538 reapsubtree: 1
sigparent: 20
vmspace: 0xfffffe009e41e9f0
(map 0xfffffe009e41e9f0)
(map.pmap 0xfffffe009e41eab0)
(pmap 0xfffffe009e41eb10)
threads: 3
100123 RunQ syz-executor4374487
100125 Run CPU 1 syz-executor4374487
100127 Run CPU 0 syz-executor4374487
db> ps
pid ppid pgrp uid state wmesg wchan cmd
796 792 785 0 R (threaded) syz-executor4374487
pid ppid pgrp uid state wmesg wchan cmd
100096 RunQ syz-executor4374487
100129 L *kernel 0xfffffe009e4f5c00 syz-executor4374487
100130 S uwait 0xfffffe0058390000 syz-executor4374487
795 790 785 0 R (threaded) syz-executor4374487
100113 RunQ syz-executor4374487
100128 L *kernel 0xfffffe009e4f5c00 syz-executor4374487
100132 S uwait 0xfffffe0058390100 syz-executor4374487
794 791 785 0 L (threaded) syz-executor4374487
100124 L *kernel 0xfffffe009e4f5c00 syz-executor4374487
100126 L *kernel 0xfffffe009e4f5c00 syz-executor4374487
793 788 785 0 R (threaded) syz-executor4374487
100123 RunQ syz-executor4374487
100125 Run CPU 1 syz-executor4374487
100127 Run CPU 0 syz-executor4374487
792 787 785 0 R syz-executor4374487
791 787 785 0 R syz-executor4374487
790 787 785 0 R syz-executor4374487
788 787 785 0 R syz-executor4374487
787 785 785 0 S nanslp 0xffffffff84057980 syz-executor4374487
785 783 785 0 Ss pause 0xfffffe00588970b0 csh
783 694 783 0 Ss select 0xfffffe0056b764c0 sshd
760 1 760 0 Ss+ ttyin 0xfffffe0056fdecb0 getty
759 1 759 0 Ss+ ttyin 0xfffffe00583ee0b0 getty
758 1 758 0 Ss+ ttyin 0xfffffe00583ee4b0 getty
757 1 757 0 Ss+ ttyin 0xfffffe00583ee8b0 getty
756 1 756 0 Ss+ ttyin 0xfffffe00583eecb0 getty
755 1 755 0 Ss+ ttyin 0xfffffe00583940b0 getty
758 1 758 0 Ss+ ttyin 0xfffffe00583ee4b0 getty
757 1 757 0 Ss+ ttyin 0xfffffe00583ee8b0 getty
756 1 756 0 Ss+ ttyin 0xfffffe00583eecb0 getty
754 1 754 0 Ss+ ttyin 0xfffffe00583944b0 getty
753 1 753 0 Ss+ ttyin 0xfffffe00583948b0 getty
752 1 752 0 Ss+ ttyin 0xfffffe0058394cb0 getty
698 1 698 0 Ss nanslp 0xffffffff84057980 cron
694 1 694 0 Ss select 0xfffffe0056b74740 sshd
507 1 507 0 Ss select 0xfffffe0056b74bc0 syslogd
436 1 436 0 Ss select 0xfffffe0056b73040 devd
435 1 435 65 Ss select 0xfffffe0056b74cc0 dhclient
350 1 350 0 Ss select 0xfffffe0056b74d40 dhclient
347 1 347 0 Ss select 0xfffffe00573e7e40 dhclient
23 0 0 0 DL syncer 0xffffffff8417dac0 [syncer]
22 0 0 0 DL vlruwt 0xfffffe0058736a70 [vnlru]
21 0 0 0 DL (threaded) [bufdaemon]
100083 D qsleep 0xffffffff8417b9c0 [bufdaemon]
100086 D - 0xffffffff83411f80 [bufspacedaemon-0]
100099 D sdflush 0xfffffe0056fc14e8 [/ worker]
20 0 0 0 DL psleep 0xffffffff841b3d80 [vmdaemon]
19 0 0 0 RL (threaded) [pagedaemon]
100081 RunQ [dom0]
100087 D launds 0xffffffff841a78c4 [laundry: dom0]
100081 RunQ [dom0]
100088 D umarcl 0xffffffff81e91c70 [uma]
18 0 0 0 DL - 0xffffffff83e0eae0 [rand_harvestq]
17 0 0 0 DL waiting 0xffffffff84d06460 [sctp_iterator]
16 0 0 0 DL pftm 0xffffffff84746e20 [pf purge]
15 0 0 0 DL - 0xffffffff84176e40 [soaiod4]
9 0 0 0 DL - 0xffffffff84176e40 [soaiod3]
8 0 0 0 DL - 0xffffffff84176e40 [soaiod2]
7 0 0 0 DL - 0xffffffff84176e40 [soaiod1]
6 0 0 0 DL (threaded) [cam]
100046 D - 0xffffffff83c94240 [doneq0]
100047 D - 0xffffffff83c941c0 [async]
100080 D - 0xffffffff83c94040 [scanner]
14 0 0 0 DL seqstat 0xfffffe0007919888 [sequencer 00]
5 0 0 0 DL crypto_ 0xfffffe0053e0fc80 [crypto returns 1]
4 0 0 0 DL crypto_ 0xfffffe0053e0fc30 [crypto returns 0]
3 0 0 0 DL crypto_ 0xffffffff841a1960 [crypto]
13 0 0 0 DL (threaded) [geom]
100037 D - 0xffffffff8402af40 [g_event]
100038 D - 0xffffffff8402af80 [g_up]
100039 D - 0xffffffff8402afc0 [g_down]
2 0 0 0 DL (threaded) [KTLS]
100028 D - 0xfffffe0053e0fe00 [thr_0]
100029 D - 0xfffffe0053e0fe80 [thr_1]
10 0 0 0 DL audit_w 0xffffffff841a2900 [audit]
0 0 0 0 DLs (threaded) [kernel]
100000 D swapin 0xffffffff8402be40 [swapper]
100005 D - 0xfffffe000791d500 [softirq_0]
100006 D - 0xfffffe000791d400 [softirq_1]
100007 D - 0xfffffe000791d300 [if_io_tqg_0]
100008 D - 0xfffffe000791d200 [if_io_tqg_1]
100009 D - 0xfffffe000791d100 [if_config_tqg_0]
100012 D - 0xfffffe0053dde100 [thread taskq]
100013 D - 0xfffffe0053dde000 [inm_free taskq]
100015 D - 0xfffffe0053df1c00 [kqueue_ctx taskq]
100016 D - 0xfffffe0053df1b00 [linuxkpi_irq_wq]
100017 D - 0xfffffe0053df1a00 [aiod_kick taskq]
100018 D - 0xfffffe0053df1900 [in6m_free taskq]
100019 D - 0xfffffe0053df1800 [pci_hp taskq]
100020 D - 0xfffffe0053df1700 [linuxkpi_short_wq_0]
100021 D - 0xfffffe0053df1700 [linuxkpi_short_wq_1]
100022 D - 0xfffffe0053df1700 [linuxkpi_short_wq_2]
100023 D - 0xfffffe0053df1700 [linuxkpi_short_wq_3]
100024 D - 0xfffffe0053df1600 [linuxkpi_long_wq_0]
100025 D - 0xfffffe0053df1600 [linuxkpi_long_wq_1]
100026 D - 0xfffffe0053df1600 [linuxkpi_long_wq_2]
100027 D - 0xfffffe0053df1600 [linuxkpi_long_wq_3]
100036 D - 0xfffffe0054140d00 [firmware taskq]
100040 D - 0xfffffe0054140c00 [crypto_0]
100041 D - 0xfffffe0054140c00 [crypto_1]
100057 D - 0xfffffe0054140600 [vtnet0 rxq 0]
100058 D - 0xfffffe0054140500 [vtnet0 txq 0]
100059 D - 0xfffffe0054140400 [vtnet0 rxq 1]
100060 D - 0xfffffe0054140300 [vtnet0 txq 1]
100062 D vtbslp 0xfffffe0056b73100 [virtio_balloon]
100066 D - 0xfffffe0056fb3b00 [mca taskq]
100071 D - 0xffffffff82c5e8e0 [deadlkres]
100075 D - 0xfffffe005834bd00 [acpi_task_0]
100076 D - 0xfffffe005834bd00 [acpi_task_1]
100077 D - 0xfffffe005834bd00 [acpi_task_2]
100079 D - 0xfffffe0054140b00 [CAM taskq]
db> show all locks
Process 793 (syz-executor4374487) thread 0xfffffe009e4f3900 (100127)
exclusive sleep mutex vm map (system) (vm map (system)) r = 0 (0xffffffff841a6a40) locked @ /syzkaller/managers/main/kernel/sys/vm/vm_map.c:2127
Process 19 (pagedaemon) thread 0xfffffe0058386000 (100081)
shared rw UMA lock (UMA lock) r = 0 (0xffffffff8344b5c0) locked @ /syzkaller/managers/main/kernel/sys/vm/uma_core.c:3029
shared sx umareclaim (umareclaim) r = 0 (0xffffffff841a6560) locked @ /syzkaller/managers/main/kernel/sys/vm/uma_core.c:5142
db> show malloc
Type InUse MemUse Requests
pf_hash 5 11524K 5
devbuf 4216 4338K 4244
tcp_hpts 6 3201K 6
Type InUse MemUse Requests
pf_hash 5 11524K 5
devbuf 4216 4338K 4244
sysctloid 34320 2027K 34390
vtbuf 24 1968K 46
kobj 326 1304K 485
newblk 654 1188K 717
vfscache 3 1025K 3
pcb 23 537K 77
inodedep 13 517K 72
ufs_quota 1 512K 1
vfs_hash 1 512K 1
callout 2 512K 2
intr 4 472K 4
subproc 112 227K 858
vfs_hash 1 512K 1
callout 2 512K 2
intr 4 472K 4
acpica 1674 184K 54712
vnet_data 1 168K 1
vmem 3 146K 4
tidhash 3 141K 3
linker 356 140K 384
pagedep 7 130K 18
tfo_ccache 1 128K 1
sem 4 106K 4
DEVFS1 103 103K 112
bus 984 80K 3475
mtx_pool 2 72K 2
syncache 1 68K 1
acpitask 1 64K 1
ddb_capture 1 64K 1
module 509 64K 509
syncache 1 68K 1
acpitask 1 64K 1
ddb_capture 1 64K 1
kdtrace 183 37K 929
umtx 264 33K 264
temp 18 33K 1631
hostcache 1 32K 1
shm 1 32K 1
DEVFS3 122 31K 132
shm 1 32K 1
msg 4 30K 4
gtaskqueue 18 26K 18
kbdmux 6 22K 6
DEVFS_RULE 56 20K 56
gtaskqueue 18 26K 18
kbdmux 6 22K 6
BPF 10 18K 10
ufs_mount 5 17K 6
proc 3 17K 3
proc 3 17K 3
tty 16 16K 16
ithread 99 16K 99
bus-sc 33 14K 1692
ithread 99 16K 99
KTRACE 100 13K 100
kenv 95 12K 95
eventhandler 133 12K 133
ifaddr 30 12K 32
eventhandler 133 12K 133
routetbl 50 11K 176
CAM queue 5 11K 1528
rman 84 10K 425
GEOM 60 10K 489
rman 84 10K 425
UART 12 9K 12
devstat 4 9K 4
ksem 1 8K 1
rpc 2 8K 2
bmsafemap 1 8K 45
devstat 4 9K 4
ksem 1 8K 1
rpc 2 8K 2
shmfd 1 8K 1
pfs_vncache 1 8K 1
pfs_nodes 20 8K 20
audit_evclass 236 8K 294
audit_evclass 236 8K 294
taskqueue 60 7K 60
sglist 5 7K 5
CAM DEV 3 6K 510
cred 22 6K 244
sglist 5 7K 5
CAM DEV 3 6K 510
ufs_dirhash 20 5K 24
UMA 270 5K 270
vt 11 5K 11
UMA 270 5K 270
ifnet 3 5K 3
memdesc 1 4K 1
MCA 32 4K 32
plimit 16 4K 338
MCA 32 4K 32
evdev 4 4K 4
filedesc 1 4K 1
acpisem 28 4K 28
hhook 15 4K 17
kqueue 51 4K 799
pwddesc 51 4K 797
ether_multi 40 4K 50
lltable 11 4K 11
pf_ifnet 5 3K 6
fpukern_ctx 3 3K 3
in6_multi 25 3K 25
terminal 11 3K 11
session 19 3K 32
uidinfo 3 3K 9
local_apic 1 2K 1
io_apic 1 2K 1
ipsec-saq 2 2K 2
selfd 27 2K 11040
io_apic 1 2K 1
ipsec-saq 2 2K 2
lockf 16 2K 26
Unitno 27 2K 39
CAM XPT 22 2K 543
proc-args 36 2K 494
ipsecpolicy 2 2K 2
acpidev 20 2K 20
msi 9 2K 9
clone 9 2K 9
softdep 1 1K 1
acpidev 20 2K 20
msi 9 2K 9
clone 9 2K 9
dirrem 4 1K 28
sahead 1 1K 1
secasvar 1 1K 1
vnodemarker 2 1K 16
secasvar 1 1K 1
NFSD session 1 1K 1
CAM periph 4 1K 271
select 7 1K 29
CAM periph 4 1K 271
ipsec 3 1K 3
diradd 6 1K 36
indirdep 3 1K 3
nhops 6 1K 6
toponodes 6 1K 6
isadev 6 1K 6
mount 16 1K 89
pci_link 10 1K 10
sctp_ifa 5 1K 6
isadev 6 1K 6
mount 16 1K 89
pci_link 10 1K 10
crypto 4 1K 4
ip6ndp 4 1K 5
encap_export_host 12 1K 12
newdirblk 4 1K 8
mkdir 4 1K 16
freefile 4 1K 26
in_multi 2 1K 4
pfil 4 1K 4
cdev 2 1K 2
chacha20random 1 1K 1
osd 7 1K 18
cdev 2 1K 2
chacha20random 1 1K 1
inpcbpolicy 10 1K 137
sctp_ifn 2 1K 6
NFSD lckfile 1 1K 1
NFSD V4client 1 1K 1
DEVFSP 4 1K 9
NFSD V4client 1 1K 1
DEVFS 9 1K 10
mld 2 1K 2
igmp 2 1K 2
vnodes 1 1K 1
CAM SIM 2 1K 2
ktls 1 1K 1
feeder 7 1K 7
tcpfunc 3 1K 3
loginclass 3 1K 7
CAM SIM 2 1K 2
ktls 1 1K 1
feeder 7 1K 7
tcpfunc 3 1K 3
prison 6 1K 6
lkpikmalloc 5 1K 6
aesni_data 2 1K 2
apmdev 1 1K 1
atkbddev 2 1K 2
CAM dev queue 2 1K 2
xform 2 1K 49
lkpikmalloc 5 1K 6
aesni_data 2 1K 2
apmdev 1 1K 1
atkbddev 2 1K 2
CAM dev queue 2 1K 2
CAM I/O Scheduler 1 1K 1
CAM path 4 1K 1034
procdesc 1 1K 6
CAM path 4 1K 1034
pmchooks 1 1K 1
nexusdev 7 1K 7
soname 4 1K 3449
nexusdev 7 1K 7
tun 3 1K 3
sctp_vrf 1 1K 1
freework 1 1K 26
vnet 1 1K 1
entropy 2 1K 35
acpiintr 1 1K 1
pmc 1 1K 1
cpus 2 1K 2
vnet_data_free 1 1K 1
Per-cpu 1 1K 1
p1003.1b 1 1K 1
filecaps 1 1K 66
pmc 1 1K 1
cpus 2 1K 2
vnet_data_free 1 1K 1
Per-cpu 1 1K 1
p1003.1b 1 1K 1
chd data 0 0K 0
mqdata 0 0K 0
vegas data 0 0K 0
vegas data 0 0K 0
cubic data 0 0K 0
sctp_mcore 0 0K 0
sctp_socko 0 0K 0
sctp_iter 0 0K 4
sctp_mvrf 0 0K 0
sctp_timw 0 0K 0
sctp_cpal 0 0K 0
sctp_cmsg 0 0K 0
sctp_stre 0 0K 0
sctp_athi 0 0K 0
sctp_athm 0 0K 0
sctp_cmsg 0 0K 0
sctp_stre 0 0K 0
sctp_athi 0 0K 0
sctp_atky 0 0K 0
sctp_atcl 0 0K 0
sctp_a_it 0 0K 4
sctp_aadr 0 0K 0
sctp_stro 0 0K 0
sctp_stri 0 0K 0
sctp_map 0 0K 0
htcp data 0 0K 0
dctcp data 0 0K 0
tcp_do 0 0K 0
tcp_fsb 0 0K 0
cdg data 0 0K 0
pf_table 0 0K 0
pf_rule 0 0K 0
pf_altq 0 0K 0
pf_osfp 0 0K 0
pf_temp 0 0K 0
pf_osfp 0 0K 0
pf_temp 0 0K 0
sentinel 0 0K 0
jfsync 0 0K 0
jtrunc 0 0K 0
sbdep 0 0K 6
jfsync 0 0K 0
jtrunc 0 0K 0
jsegdep 0 0K 0
jseg 0 0K 0
jfreefrag 0 0K 0
jfreeblk 0 0K 0
jnewblk 0 0K 0
jmvref 0 0K 0
jremref 0 0K 0
jaddref 0 0K 0
freedep 0 0K 0
freeblks 0 0K 25
jseg 0 0K 0
jfreefrag 0 0K 0
jfreeblk 0 0K 0
jnewblk 0 0K 0
jmvref 0 0K 0
jremref 0 0K 0
jaddref 0 0K 0
freedep 0 0K 0
freefrag 0 0K 1
allocindir 0 0K 0
Mark Johnston
Aug 5, 2021, 11:45:55 AM8/5/21
to syzbot, syzkaller-f...@googlegroups.com
Reply all
Reply to author
Forward
0 new messages