panic: Queues are not empty when handling SHUTDOWN-COMPLETE

2 views
Skip to first unread message

syzbot

unread,
Nov 7, 2020, 11:22:20 AM11/7/20
to syzkaller-f...@googlegroups.com
Hello,

syzbot found the following issue on:

HEAD commit: c4f7f2c1 binmiscctl(8): miscellaneous cleanup
git tree: freebsd
console output: https://syzkaller.appspot.com/x/log.txt?x=118abe1a500000
dashboard link: https://syzkaller.appspot.com/bug?extid=341e9ebd9d24ca7dc62a

Unfortunately, I don't have any reproducer for this issue yet.

IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+341e9e...@syzkaller.appspotmail.com

panic: Queues are not empty when handling SHUTDOWN-COMPLETE
cpuid = 1
time = 1604766106
KDB: stack backtrace:
db_trace_self_wrapper() at db_trace_self_wrapper+0x47/frame 0xfffffe0003638210
vpanic() at vpanic+0x1c7/frame 0xfffffe0003638270
panic() at panic+0x43/frame 0xfffffe00036382d0
sctp_process_control() at sctp_process_control+0x9961/frame 0xfffffe0003638750
sctp_common_input_processing() at sctp_common_input_processing+0x7db/frame 0xfffffe00036388e0
sctp_input_with_port() at sctp_input_with_port+0x308/frame 0xfffffe00036389d0
sctp_input() at sctp_input+0x1f/frame 0xfffffe00036389f0
ip_input() at ip_input+0x388/frame 0xfffffe0003638a90
swi_net() at swi_net+0x20d/frame 0xfffffe0003638b10
ithread_loop() at ithread_loop+0x33f/frame 0xfffffe0003638bb0
fork_exit() at fork_exit+0xb3/frame 0xfffffe0003638bf0
fork_trampoline() at fork_trampoline+0xe/frame 0xfffffe0003638bf0
--- trap 0, rip = 0, rsp = 0, rbp = 0 ---
KDB: enter: panic
[ thread pid 12 tid 100020 ]
Stopped at kdb_enter+0x67: movq $0,0x147ce26(%rip)
db>
db> set $lines = 0
db> set $maxwidth = 0
db> show registers
cs 0x20
ds 0x3b
es 0x3b
fs 0x13
gs 0x1b
ss 0x28
rax 0x12
rcx 0xffffffff810eb250 vprintf+0x140
rdx 0x1
rbx 0
rsp 0xfffffe00036381f0
rbp 0xfffffe0003638210
rsi 0
rdi 0xffffffff810eb286 vprintf+0x176
r8 0
r9 0xffffffff
r10 0xfffffe00036387dc
r11 0xbf
r12 0xffffffff820671a0 ddb_dbbe
r13 0
r14 0xffffffff8196df21
r15 0xffffffff8196df21
rip 0xffffffff810df7d7 kdb_enter+0x67
rflags 0x86
kdb_enter+0x67: movq $0,0x147ce26(%rip)
db> show proc
Process 12 (intr) at 0xfffff800042a3a40:
state: NORMAL
uid: 0 gids: 0
parent: pid 0 at 0xffffffff8250ee70
ABI: null
reaper: 0xffffffff8250ee70 reapsubtree: 12
sigparent: 20
vmspace: 0xffffffff8250fac0
(map 0xffffffff8250fac0)
(map.pmap 0xffffffff8250fb80)
(pmap 0xffffffff8250fbe0)
threads: 23
100012 I [swi6: task queue]
100014 I [swi6: Giant taskq]
100017 I [swi5: fast taskq]
100020 Run CPU 1 [swi1: netisr 0]
100021 I [swi3: vm]
100022 I [swi4: clock (0)]
100023 I [swi4: clock (1)]
100035 I [irq24: virtio_pci0]
100036 I [irq25: virtio_pci0]
100037 I [irq26: virtio_pci0]
100038 I [irq27: virtio_pci0]
100039 I [irq28: virtio_pci1]
100040 I [irq29: virtio_pci1]
100041 I [irq30: virtio_pci1]
100042 I [irq31: virtio_pci1]
100043 I [irq32: virtio_pci1]
100048 I [irq10: virtio_pci2]
100050 I [irq1: atkbd0]
100051 I [irq12: psm0]
100052 I [swi0: uart uart++]
100060 I [swi1: pf send]
100073 I [swi1: hpts]
100074 I [swi1: hpts]
db> ps
pid ppid pgrp uid state wmesg wchan cmd
20676 766 766 0 RE syz-executor.1
20675 910 910 0 RE CPU 0 syz-executor.2
20674 985 985 0 R (threaded) syz-executor.3
100203 RunQ syz-executor.3
101124 S uwait 0xfffff800281ac780 syz-executor.3
20671 8004 8004 0 S (threaded) syz-executor.0
100684 S nanslp 0xffffffff8252fd70 syz-executor.0
100632 S connec 0xfffff8003157c4b0 syz-executor.0
101110 S uwait 0xfffff800319d8280 syz-executor.0
8378 1 8378 65 Ss select 0xfffff800316debc0 dhclient
8030 1 8030 0 Ss select 0xfffff800316de2c0 dhclient
8021 1 8021 0 Ss select 0xfffff800316de1c0 dhclient
8004 762 8004 0 Ss nanslp 0xffffffff8252fd71 syz-executor.0
4375 1 4375 65 Ss select 0xfffff80031e330c0 dhclient
3543 1 3543 0 Ss select 0xfffff80031692ac0 dhclient
3540 1 3540 0 Ss select 0xfffff80031e39640 dhclient
3516 1 3516 65 Ss select 0xfffff8002811a140 dhclient
2870 1 2870 0 Ss select 0xfffff800316de040 dhclient
2867 1 2867 0 Ss select 0xfffff8002811a640 dhclient
2847 1 2847 65 Ss select 0xfffff80031def6c0 dhclient
2200 1 2200 0 Ss select 0xfffff8002811a5c0 dhclient
2197 1 2197 0 Ss select 0xfffff80031def2c0 dhclient
985 762 985 0 Ss nanslp 0xffffffff8252fd71 syz-executor.3
910 762 910 0 Ss nanslp 0xffffffff8252fd70 syz-executor.2
766 762 766 0 Ss nanslp 0xffffffff8252fd70 syz-executor.1
762 760 760 0 S (threaded) syz-fuzzer
100085 S uwait 0xfffff800046e3300 syz-fuzzer
100107 S uwait 0xfffff80031143d80 syz-fuzzer
100108 S uwait 0xfffff80031143e80 syz-fuzzer
100109 S uwait 0xfffff8001ef2f000 syz-fuzzer
100110 S uwait 0xfffff8001ef2f100 syz-fuzzer
100111 S uwait 0xfffff800049f1980 syz-fuzzer
100112 S uwait 0xfffff8001ef2f200 syz-fuzzer
100113 S uwait 0xfffff8001ef2f300 syz-fuzzer
100927 S uwait 0xfffff800319b0100 syz-fuzzer
100942 S kqread 0xfffff8001ef55800 syz-fuzzer
760 758 760 0 Ss pause 0xfffff800310ca0a8 csh
758 682 758 0 Ss select 0xfffff8001eeed7c0 sshd
742 1 742 0 Ss+ ttyin 0xfffff800046fc8b0 getty
741 1 741 0 Ss+ ttyin 0xfffff80004a06cb0 getty
740 1 740 0 Ss+ ttyin 0xfffff80004a024b0 getty
739 1 739 0 Ss+ ttyin 0xfffff80004a02cb0 getty
738 1 738 0 Ss+ ttyin 0xfffff800049fd4b0 getty
737 1 737 0 Ss+ ttyin 0xfffff800049fdcb0 getty
736 1 736 0 Ss+ ttyin 0xfffff800049fa4b0 getty
735 1 735 0 Ss+ ttyin 0xfffff800049facb0 getty
734 1 734 0 Ss+ ttyin 0xfffff800049ef4b0 getty
686 1 686 0 Ss nanslp 0xffffffff8252fd70 cron
682 1 682 0 Ss select 0xfffff80004abb840 sshd
495 1 495 0 Ss select 0xfffff8001eeedac0 syslogd
424 1 424 0 Ss select 0xfffff8001eeedf40 devd
423 1 423 65 Ss select 0xfffff80004abb940 dhclient
338 1 338 0 Ss select 0xfffff80004abb7c0 dhclient
335 1 335 0 Ss select 0xfffff80004abb8c0 dhclient
23 0 0 0 DL syncer 0xffffffff8261d0f8 [syncer]
22 0 0 0 DL vlruwt 0xfffff80004a18520 [vnlru]
21 0 0 0 DL (threaded) [bufdaemon]
100070 D qsleep 0xffffffff8261c1d0 [bufdaemon]
100077 D - 0xffffffff8200ac00 [bufspacedaemon-0]
100087 D sdflush 0xfffff800047098e8 [/ worker]
20 0 0 0 DL psleep 0xffffffff82643688 [vmdaemon]
19 0 0 0 DL (threaded) [pagedaemon]
100068 D psleep 0xffffffff82637af8 [dom0]
100075 D launds 0xffffffff82637b04 [laundry: dom0]
100076 D umarcl 0xffffffff814e7330 [uma]
18 0 0 0 DL - 0xffffffff823634f8 [rand_harvestq]
17 0 0 0 DL waiting 0xffffffff82d1e818 [sctp_iterator]
16 0 0 0 DL pftm 0xffffffff82b9d390 [pf purge]
15 0 0 0 DL - 0xffffffff8261b7a4 [soaiod4]
9 0 0 0 DL - 0xffffffff8261b7a4 [soaiod3]
8 0 0 0 DL - 0xffffffff8261b7a4 [soaiod2]
7 0 0 0 DL - 0xffffffff8261b7a4 [soaiod1]
6 0 0 0 DL (threaded) [cam]
100034 D - 0xffffffff8223b240 [doneq0]
100067 D - 0xffffffff8223b110 [scanner]
5 0 0 0 DL crypto_ 0xfffff80004328d90 [crypto returns 1]
4 0 0 0 DL crypto_ 0xfffff80004328d30 [crypto returns 0]
3 0 0 0 DL crypto_ 0xffffffff82634ff0 [crypto]
14 0 0 0 DL seqstat 0xfffff800042f6c88 [sequencer 00]
13 0 0 0 DL (threaded) [geom]
100025 D - 0xffffffff8250e8e0 [g_event]
100026 D - 0xffffffff8250e8e8 [g_up]
100027 D - 0xffffffff8250e8f0 [g_down]
2 0 0 0 DL (threaded) [KTLS]
100018 D - 0xfffff800042b3e00 [thr_0]
100019 D - 0xfffff800042b3e80 [thr_1]
12 0 0 0 RL (threaded) [intr]
100012 I [swi6: task queue]
100014 I [swi6: Giant taskq]
100017 I [swi5: fast taskq]
100020 Run CPU 1 [swi1: netisr 0]
100021 I [swi3: vm]
100022 I [swi4: clock (0)]
100023 I [swi4: clock (1)]
100035 I [irq24: virtio_pci0]
100036 I [irq25: virtio_pci0]
100037 I [irq26: virtio_pci0]
100038 I [irq27: virtio_pci0]
100039 I [irq28: virtio_pci1]
100040 I [irq29: virtio_pci1]
100041 I [irq30: virtio_pci1]
100042 I [irq31: virtio_pci1]
100043 I [irq32: virtio_pci1]
100048 I [irq10: virtio_pci2]
100050 I [irq1: atkbd0]
100051 I [irq12: psm0]
100052 I [swi0: uart uart++]
100060 I [swi1: pf send]
100073 I [swi1: hpts]
100074 I [swi1: hpts]
11 0 0 0 RL (threaded) [idle]
100003 CanRun [idle: cpu0]
100004 CanRun [idle: cpu1]
1 0 1 0 SLs wait 0xfffff80004288520 [init]
10 0 0 0 DL audit_w 0xffffffff82635510 [audit]
0 0 0 0 DLs (threaded) [kernel]
100000 D swapin 0xffffffff8250ee70 [swapper]
100005 D - 0xfffff800042a0e00 [if_io_tqg_0]
100006 D - 0xfffff800042a0d00 [if_io_tqg_1]
100007 D - 0xfffff800042a0c00 [if_config_tqg_0]
100008 D - 0xfffff800042a0b00 [softirq_0]
100009 D - 0xfffff800042a0a00 [softirq_1]
100010 D - 0xfffff800042a0900 [inm_free taskq]
100011 D - 0xfffff800042a0800 [kqueue_ctx taskq]
100013 D - 0xfffff800042a0600 [aiod_kick taskq]
100015 D - 0xfffff800042a0400 [in6m_free taskq]
100016 D - 0xfffff800042a0300 [thread taskq]
100024 D - 0xfffff800042a0100 [firmware taskq]
100029 D - 0xfffff800042ed600 [crypto_0]
100030 D - 0xfffff800042ed600 [crypto_1]
100044 D - 0xfffff800046e6e00 [vtnet0 rxq 0]
100045 D - 0xfffff800046e6d00 [vtnet0 txq 0]
100046 D - 0xfffff800046e6c00 [vtnet0 rxq 1]
100047 D - 0xfffff800046e6b00 [vtnet0 txq 1]
100049 D vtbslp 0xfffff80004476980 [virtio_balloon]
100053 D - 0xfffff800046e6a00 [mca taskq]
100058 D - 0xffffffff81d15c41 [deadlkres]
100062 D - 0xfffff800042ed100 [acpi_task_0]
100063 D - 0xfffff800042ed100 [acpi_task_1]
100064 D - 0xfffff800042ed100 [acpi_task_2]
100066 D - 0xfffff800042ed000 [CAM taskq]
db> show all locks
Process 20675 (syz-executor.2) thread 0xfffffe002597b100 (101181)
exclusive sleep mutex sctp-inp (inp) r = 0 (0xfffff80028c7a968) locked @ /syzkaller/managers/main/kernel/sys/netinet/sctp_usrreq.c:676
Process 12 (intr) thread 0xfffffe00048b2a00 (100020)
exclusive sleep mutex sctp-tcb (tcb) r = 0 (0xfffffe0025894c70) locked @ /syzkaller/managers/main/kernel/sys/netinet/sctp_pcb.c:2143
db> show malloc
Type InUse MemUse Requests
pf_hash 5 11524K 5
devbuf 4214 4854K 4242
tcp_hpts 5 3201K 5
vtbuf 24 1968K 46
sysctloid 28272 1649K 28336
pcb 870 1483K 71068
kobj 336 1344K 496
newblk 9 1026K 36605
vfscache 3 1025K 3
inodedep 106 565K 21270
ufs_quota 1 512K 1
vfs_hash 1 512K 1
callout 2 512K 2
intr 4 472K 4
sctp_atcl 850 425K 57345
sctp_stro 420 420K 16672
subproc 145 293K 20759
acpica 1674 185K 52508
vnet_data 1 168K 1
filedesc 22 153K 39194
pagedep 9 130K 19897
tfo_ccache 1 128K 1
sem 4 106K 4
DEVFS1 105 105K 122
linker 254 99K 315
BPF 46 88K 54
bus 979 79K 3033
mtx_pool 2 72K 2
syncache 1 68K 1
acpitask 1 64K 1
ddb_capture 1 64K 1
module 507 64K 507
sctp_timw 235 59K 235
sctp_atky 1270 53K 72535
pf_rule 48 48K 441
umtx 378 48K 378
kdtrace 195 37K 76044
temp 35 33K 4846
hostcache 1 32K 1
shm 1 32K 50
ifaddr 87 32K 98
DEVFS3 124 31K 134
msg 4 30K 4
DEVFS_RULE 56 27K 56
vmem 3 26K 6
gtaskqueue 18 26K 18
dirrem 97 25K 20076
kbdmux 6 22K 6
lltable 52 20K 378
ufs_mount 5 17K 6
proc 3 17K 3
tty 16 16K 16
tidhash 1 16K 1
ithread 99 16K 99
ether_multi 172 14K 388
sctp_athm 850 14K 57821
bus-sc 30 14K 1414
sctp_map 840 14K 33330
KTRACE 100 13K 100
freefile 97 13K 20065
ifnet 7 13K 7
kenv 92 12K 92
eventhandler 132 12K 132
select 84 11K 84
in6_multi 89 11K 195
pfs_nodes 20 10K 20
GEOM 60 10K 489
rman 82 10K 423
bmsafemap 3 9K 21232
selfd 133 9K 263103
UART 12 9K 12
devstat 4 9K 4
rpc 2 8K 2
shmfd 1 8K 179
pfs_vncache 1 8K 1
cred 31 8K 855
audit_evclass 233 8K 291
kqueue 65 7K 20760
CAM DEV 3 6K 510
plimit 24 6K 1065
vt 11 6K 11
sglist 5 6K 5
CAM queue 5 6K 1528
taskqueue 48 6K 48
pf_ifnet 13 5K 423
DEVFSP 78 5K 210
ufs_dirhash 24 5K 24
session 35 5K 68
pgrp 35 5K 84
memdesc 1 4K 1
MCA 32 4K 32
kcovinfo 64 4K 187
evdev 4 4K 4
UMA 245 4K 245
routetbl 21 4K 31
lockf 32 4K 169
hhook 13 4K 13
sctp_stri 6 3K 5063
proc-args 52 3K 889
terminal 11 3K 11
acpisem 22 3K 22
sctp_ifa 19 3K 40
uidinfo 4 3K 167
local_apic 1 2K 1
io_apic 1 2K 1
ipsec-saq 2 2K 2
ip6ndp 12 2K 35
Unitno 28 2K 67242
CAM XPT 22 2K 543
in_multi 6 2K 16
ipsecpolicy 2 2K 2
acpidev 20 2K 20
msi 9 2K 9
freework 5 2K 25505
clone 9 2K 9
tun 7 2K 7
softdep 1 1K 1
mkdir 8 1K 39118
freeblks 4 1K 20404
sahead 1 1K 1
secasvar 1 1K 1
nhops 6 1K 10
vnodemarker 2 1K 1818
NFSD session 1 1K 1
CAM periph 4 1K 271
sctp_ifn 6 1K 40
ipsec 3 1K 3
mld 6 1K 6
igmp 6 1K 6
toponodes 6 1K 6
isadev 6 1K 6
mount 16 1K 89
pci_link 10 1K 10
encap_export_host 12 1K 12
crypto 3 1K 3
newdirblk 4 1K 19559
diradd 4 1K 20147
pfil 4 1K 4
chacha20random 1 1K 1
CAM SIM 2 1K 2
cdev 2 1K 2
inpcbpolicy 12 1K 19530
osd 3 1K 9
vnodes 1 1K 1
ktls 1 1K 1
NFSD lckfile 1 1K 1
NFSD V4client 1 1K 1
DEVFS 9 1K 10
feeder 7 1K 7
loginclass 3 1K 6
prison 6 1K 6
CAM dev queue 2 1K 2
CAM I/O Scheduler 1 1K 1
apmdev 1 1K 1
atkbddev 2 1K 2
CAM path 4 1K 1034
tcpfunc 2 1K 2
soname 5 1K 36841
pmchooks 1 1K 1
nexusdev 5 1K 5
filecaps 5 1K 171
sctp_vrf 1 1K 1
entropy 2 1K 59
vnet 1 1K 1
pmc 1 1K 1
acpiintr 1 1K 1
cpus 2 1K 2
vnet_data_free 1 1K 1
Per-cpu 1 1K 1
p1003.1b 1 1K 1
sctp_mcore 0 0K 0
sctp_socko 0 0K 21145
sctp_iter 0 0K 187
sctp_mvrf 0 0K 0
sctp_cpal 0 0K 281
sctp_cmsg 0 0K 0
sctp_stre 0 0K 0
sctp_athi 0 0K 0
sctp_a_it 0 0K 35
sctp_aadr 0 0K 380
pf_table 0 0K 0
pf_altq 0 0K 0
pf_osfp 0 0K 0
pf_temp 0 0K 0
nvlist 0 0K 0
SCSI ENC 0 0K 0
SCSI sa 0 0K 0
madt_table 0 0K 2
scsi_pass 0 0K 0
ciss_data 0 0K 0
smartpqi 0 0K 0
pvscsi 0 0K 0
ath_hal 0 0K 0
athdev 0 0K 0
ata_pci 0 0K 0
ata_dma 0 0K 0
ata_generic 0 0K 0
amr 0 0K 0
scsi_da 0 0K 69
iavf 0 0K 0
ixl 0 0K 0
ata_da 0 0K 0
scsi_ch 0 0K 0
scsi_cd 0 0K 0
USBdev 0 0K 0
USB 0 0K 0
AHCI driver 0 0K 0
ice-resmgr 0 0K 0
ice-osdep 0 0K 0
ice 0 0K 0
axgbe 0 0K 0
fpukern_ctx 0 0K 0
agp 0 0K 0
xen_intr 0 0K 0
xen_hvm 0 0K 0
legacydrv 0 0K 0
qpidrv 0 0K 0
nvme_da 0 0K 0
dmar_idpgtbl 0 0K 0
dmar_dom 0 0K 0
dmar_ctx 0 0K 0
acpipwr 0 0K 0
twsbuf 0 0K 0
twe_commands 0 0K 0
isci 0 0K 0
iommu_dmamap 0 0K 0
twa_commands 0 0K 0
hyperv_socket 0 0K 0
bxe_ilt 0 0K 0
xenbus 0 0K 0
tcp_log_dev 0 0K 536
midi buffers 0 0K 0
mixer 0 0K 0
vm_fictitious 0 0K 0
ac97 0 0K 0
hdacc 0 0K 0
hdac 0 0K 0
hdaa 0 0K 0
acpi_perf 0 0K 0
acpicmbat 0 0K 0
SIIS driver 0 0K 0
CAM CCB 0 0K 95025
UMAHash 0 0K 0
vm_pgdata 0 0K 0
jblocks 0 0K 0
savedino 0 0K 19514
sentinel 0 0K 0
jfsync 0 0K 0
jtrunc 0 0K 0
sbdep 0 0K 917
jsegdep 0 0K 0
jseg 0 0K 0
jfreefrag 0 0K 0
jfreeblk 0 0K 0
jnewblk 0 0K 0
jmvref 0 0K 0
jremref 0 0K 0
jaddref 0 0K 0
freedep 0 0K 0
freefrag 0 0K 18
allocindir 0 0K 0
indirdep 0 0K 8861
allocdirect 0 0K 0
ufs_trim 0 0K 0
mactemp 0 0K 0
audit_trigger 0 0K 0
audit_pipe_presel 0 0K 0
audit_pipeent 0 0K 0
audit_pipe 0 0K 0
audit_evname 0 0K 0
audit_bsm 0 0K 0
audit_gidset 0 0K 0
audit_text 0 0K 0
audit_path 0 0K 0
audit_data 0 0K 0
audit_cred 0 0K 0
xform 0 0K 0
NLM 0 0K 0
ipsec-spdcache 0 0K 0
ipsec-reg 0 0K 0
ipsec-misc 0 0K 0
ipsecrequest 0 0K 0
ip6opt 0 0K 96
ip6_msource 0 0K 0
ip6_moptions 0 0K 2
in6_mfilter 0 0K 0
frag6 0 0K 0
tcplog 0 0K 0
PUC 0 0K 0
LRO 0 0K 0
newreno data 0 0K 0
ip_msource 0 0K 0
ip_moptions 0 0K 20
in_mfilter 0 0K 4
ipid 0 0K 0
80211scan 0 0K 0
80211ratectl 0 0K 0
80211power 0 0K 0
80211nodeie 0 0K 0
80211node 0 0K 0
80211mesh_gt 0 0K 0
80211mesh_rt 0 0K 0
80211perr 0 0K 0
80211prep 0 0K 0
80211preq 0 0K 0
80211dfs 0 0K 0
80211crypto 0 0K 0
80211vap 0 0K 0
iflib 0 0K 0
vlan 0 0K 0
gif 0 0K 0
ifdescr 0 0K 0
zlib 0 0K 0
fadvise 0 0K 10
VN POLL 0 0K 0
ppbusdev 0 0K 0
statfs 0 0K 19767
namei_tracker 0 0K 50
export_host 0 0K 0
cl_savebuf 0 0K 6
agtiapi_MemAlloc malloc 0 0K 0
osti_cacheable 0 0K 0
tempbuff 0 0K 0
tempbuff 0 0K 0
ag_tgt_map_t malloc 0 0K 0
ag_slr_map_t malloc 0 0K 0
lDevFlags * malloc 0 0K 0
tiDeviceHandle_t * malloc 0 0K 0
ag_portal_data_t malloc 0 0K 0
ag_device_t malloc 0 0K 0
STLock malloc 0 0K 0
CCB List 0 0K 0
sr_iov 0 0K 0
OCS 0 0K 0
OCS 0 0K 0
nvme 0 0K 0
nvd 0 0K 0
netmap 0 0K 0
mwldev 0 0K 0
MVS driver 0 0K 0
biobuf 0 0K 0
aios 0 0K 0
lio 0 0K 0
acl 0 0K 0
mbuf_tag 0 0K 474
accf 0 0K 0
pts 0 0K 0
iov 0 0K 39026
ioctlops 0 0K 2289
Witness 0 0K 0
stack 0 0K 0
CAM ccb queue 0 0K 0
mrsasbuf 0 0K 0
mpt_user 0 0K 0
mps_user 0 0K 0
MPSSAS 0 0K 0
sbuf 0 0K 288
mps 0 0K 0
firmware 0 0K 0
compressor 0 0K 0
mpr_user 0 0K 0
SWAP 0 0K 0
MPRSAS 0 0K 0
mpr 0 0K 0
sysctltmp 0 0K 1013
sysctl 0 0K 1
mfibuf 0 0K 0
ekcd 0 0K 0
dumper 0 0K 0
sendfile 0 0K 0
rctl 0 0K 0
md_sectors 0 0K 0
md_disk 0 0K 0
malodev 0 0K 0
LED 0 0K 0
cache 0 0K 0
ix_sriov 0 0K 0
prison_racct 0 0K 0
Fail Points 0 0K 0
sigio 0 0K 27
filedesc_to_leader 0 0K 0
pwd 0 0K 0
tty console 0 0K 0
aacraidcam 0 0K 0
ix 0 0K 0
ipsbuf 0 0K 0
iirbuf 0 0K 0
aacraid_buf 0 0K 0
aaccam 0 0K 0
isofs_node 0 0K 0
isofs_mount 0 0K 0
tr_raid5_data 0 0K 0
tr_raid1e_data 0 0K 0
tr_raid1_data 0 0K 0
tr_raid0_data 0 0K 0
tr_concat_data 0 0K 0
md_sii_data 0 0K 0
md_promise_data 0 0K 0
md_nvidia_data 0 0K 0
md_jmicron_data 0 0K 0
md_intel_data 0 0K 0
md_ddf_data 0 0K 0
raid_data 0 0K 72
geom_flashmap 0 0K 0
tmpfs dir 0 0K 0
tmpfs name 0 0K 0
tmpfs mount 0 0K 0
NFS FHA 0 0K 0
newnfsmnt 0 0K 0
newnfsclient_req 0 0K 0
NFSCL layrecall 0 0K 0
NFSCL session 0 0K 0
NFSCL sockreq 0 0K 0
NFSCL devinfo 0 0K 0
NFSCL flayout 0 0K 0
NFSCL layout 0 0K 0
NFSD rollback 0 0K 0
NFSCL diroffdiroff 0 0K 0
NEWdirectio 0 0K 0
NEWNFSnode 0 0K 0
NFSCL lck 0 0K 0
NFSCL lckown 0 0K 0
NFSCL client 0 0K 0
NFSCL deleg 0 0K 0
NFSCL open 0 0K 0
NFSCL owner 0 0K 0
NFS fh 0 0K 0
NFS req 0 0K 0
NFSD usrgroup 0 0K 0
NFSD string 0 0K 0
NFSD V4lock 0 0K 0
NFSD V4state 0 0K 0
NFSD srvcache 0 0K 0
msdosfs_fat 0 0K 0
msdosfs_mount 0 0K 0
msdosfs_node 0 0K 0
DEVFS4 0 0K 0
DEVFS2 0 0K 0
gntdev 0 0K 0
privcmd_dev 0 0K 0
evtchn_dev 0 0K 0
xenstore 0 0K 0
aacbuf 0 0K 0
xnb 0 0K 0
xbbd 0 0K 0
xbd 0 0K 0
Balloon 0 0K 0
sysmouse 0 0K 0
vtfont 0 0K 0
zstd 0 0K 0
db> show uma
Zone Size Used Free Requests Sleeps Bucket Total Mem XFree
mbuf_cluster 2048 9683 1 9683 0 254 19832832 0
tcp_log 416 0 15003 71272 0 254 6241248 0
sctp_asoc 2288 420 1115 16665 0 254 3512080 0
malloc-2048 2048 426 1118 33986 0 8 3162112 0
RADIX NODE 144 17123 430 855029 0 63 2527632 0
mbuf_packet 256 8319 1236 1157882 0 254 2446080 0
mbuf_jumbo_page 4096 6 511 6164 0 254 2117632 0
malloc-512 512 4127 9 4139 0 30 2117632 0
sctp_ep 1280 424 1124 33980 0 254 1981440 0
BUF TRIE 144 443 13025 87577 0 62 1939392 0
malloc-512 512 879 2233 57700 0 30 1593344 0
malloc-1024 1024 423 1109 17948 0 16 1568768 0
malloc-4096 4096 355 2 533 0 2 1462272 0
malloc-128 128 9355 224 69546 0 126 1226112 0
sctp_raddr 736 450 1101 37622 0 254 1141536 0
UMA Slabs 0 112 8598 3 8598 0 126 963312 0
pbuf 832 0 953 0 0 2 792896 0
mbuf 256 1011 1629 3125085 0 254 675840 0
256 Bucket 2048 260 16 14212 0 8 565248 0
malloc-512 512 188 764 21354 0 30 487424 0
malloc-256 256 622 1148 89414 0 62 453120 0
VM OBJECT 264 1442 73 308385 0 30 399960 0
tcp_bbr_map 128 0 2790 361960 0 126 357120 0
THREAD 1792 150 39 34771 0 8 338688 0
VNODE 496 585 95 20653 0 30 337280 0
socket 960 46 298 55080 0 254 330240 0
sctp_laddr 48 1552 4580 20740 0 254 294336 0
malloc-4096 4096 63 8 20681 0 2 290816 0
malloc-2048 2048 8 124 96183 0 8 270336 0
malloc-65536 65536 4 0 4 0 1 262144 0
malloc-65536 65536 2 2 116 0 1 262144 0
malloc-65536 65536 0 4 695 0 1 262144 0
sctp_chunk 152 450 1188 24084 0 254 248976 0
malloc-256 256 189 771 61516 0 62 245760 0
malloc-32768 32768 0 7 8406 0 1 229376 0
DEVCTL 1024 0 208 139 0 0 212992 0
g_bio 408 0 520 377754 0 32 212160 0
malloc-256 256 200 580 86172 0 62 199680 0
malloc-16384 16384 8 4 19727 0 1 196608 0
malloc-256 256 17 733 19532 0 62 192000 0
malloc-16 16 11813 187 11867 0 254 192000 0
malloc-128 128 716 772 23715 0 126 190464 0
malloc-64 64 2784 177 265766 0 254 189504 0
MAP ENTRY 96 1693 281 1143766 0 126 189504 0
tcp_inpcb 488 4 356 6221 0 254 175680 0
UMA Zones 768 220 2 220 0 16 170496 0
FFS2 dinode 256 548 112 20614 0 62 168960 0
malloc-128 128 1211 60 24829 0 126 162688 0
malloc-32 32 4603 185 4659 0 254 153216 0
S VFS Cache 104 1072 332 21737 0 126 146016 0
malloc-64 64 985 1157 24230 0 254 137088 0
vmem btag 56 2301 63 2316 0 254 132384 0
malloc-65536 65536 2 0 2 0 1 131072 0
malloc-16384 16384 3 5 125 0 1 131072 0
VMSPACE 2536 40 11 20655 0 4 129336 0
malloc-1024 1024 121 3 138 0 16 126976 0
ksiginfo 112 66 978 4381 0 126 116928 0
FFS inode 160 548 177 20614 0 62 116000 0
tcpcb 1048 4 106 6221 0 254 115280 0
128 Bucket 1024 80 31 9777 0 16 113664 0
malloc-32 32 1132 2270 53920 0 254 108864 0
malloc-4096 4096 21 5 35 0 2 106496 0
PROC 1312 62 19 20676 0 8 106272 0
filedesc0 1080 63 21 20677 0 8 90720 0
64 Bucket 512 117 59 17563 0 30 90112 0
malloc-256 256 314 16 4227 0 62 84480 0
UMA Kegs 384 206 0 206 0 30 79104 0
udplite_inpcb 488 1 159 12163 0 254 78080 0
malloc-65536 65536 1 0 1 0 1 65536 0
malloc-8192 8192 6 2 34 0 1 65536 0
malloc-1024 1024 60 4 441 0 16 65536 0
32 Bucket 256 140 115 11606 0 62 65280 0
sctp_readq 152 2 414 1990 0 254 63232 0
malloc-4096 4096 10 5 20839 0 2 61440 0
malloc-16 16 1100 2650 81809 0 254 60000 0
malloc-128 128 425 40 1638 0 126 59520 0
malloc-16 16 868 2632 33441 0 254 56000 0
clpbuf 832 0 64 49710 0 16 53248 0
malloc-128 128 353 50 571 0 126 51584 0
malloc-128 128 165 238 19819 0 126 51584 0
malloc-16384 16384 3 0 6 0 1 49152 0
pipe 760 23 37 1329 0 16 45600 0
NAMEI 1024 0 40 100846 0 16 40960 0
malloc-8192 8192 2 3 25 0 1 40960 0
malloc-8192 8192 3 2 110 0 1 40960 0
malloc-512 512 57 23 2506 0 30 40960 0
pcpu-8 8 4403 717 5633 0 254 40960 0
malloc-64 64 415 215 23873 0 254 40320 0
Files 80 238 262 88633 0 126 40000 0
tcp_bbr_pcb 832 0 45 3183 0 16 37440 0
DIRHASH 1024 34 2 34 0 16 36864 0
malloc-512 512 10 62 5612 0 30 36864 0
malloc-64 64 458 109 833 0 254 36288 0
malloc-32768 32768 1 0 1 0 1 32768 0
malloc-32768 32768 0 1 112 0 1 32768 0
malloc-32768 32768 1 0 1 0 1 32768 0
malloc-32768 32768 1 0 1 0 1 32768 0
malloc-8192 8192 2 2 4 0 1 32768 0
mt_stats_zone 64 450 62 450 0 254 32768 0
16 Bucket 144 120 104 66730 0 62 32256 0
malloc-2048 2048 8 6 25 0 8 28672 0
malloc-512 512 52 4 64 0 30 28672 0
TURNSTILE 136 190 20 190 0 62 28560 0
KNOTE 160 28 147 336136 0 62 28000 0
8 Bucket 80 191 159 58761 0 126 28000 0
malloc-256 256 13 92 6631 0 62 26880 0
malloc-256 256 11 94 682 0 62 26880 0
malloc-8192 8192 3 0 3 0 1 24576 0
malloc-8192 8192 3 0 3 0 1 24576 0
malloc-8192 8192 1 2 5 0 1 24576 0
malloc-2048 2048 3 9 67 0 8 24576 0
sctp_stream_msg_out 112 24 192 5025 0 254 24192 0
ttyinq 160 135 15 300 0 62 24000 0
malloc-128 128 110 76 2031 0 126 23808 0
ttyoutq 256 72 18 160 0 62 23040 0
Mountpoints 2816 2 6 2 0 4 22528 0
malloc-1024 1024 17 3 38 0 16 20480 0
PWD 32 20 610 19662 0 254 20160 0
2 Bucket 32 79 551 25891 0 254 20160 0
SLEEPQUEUE 88 190 34 190 0 126 19712 0
ripcb 488 5 35 600 0 254 19520 0
malloc-16384 16384 1 0 1 0 1 16384 0
malloc-16384 16384 1 0 1 0 1 16384 0
malloc-4096 4096 3 1 6 0 2 16384 0
malloc-1024 1024 8 8 13 0 16 16384 0
malloc-1024 1024 4 12 226 0 16 16384 0
malloc-512 512 20 12 20 0 30 16384 0
malloc-64 64 52 200 22909 0 254 16128 0
malloc-64 64 85 167 20748 0 254 16128 0
vtnet_tx_hdr 24 0 668 2823875 0 254 16032 0
routing nhops 256 25 35 68 0 62 15360 0
malloc-256 256 36 24 581 0 62 15360 0
malloc-2048 2048 3 3 194 0 8 12288 0
malloc-512 512 21 3 21 0 30 12288 0
malloc-64 64 90 99 260 0 254 12096 0
malloc-64 64 87 102 238 0 254 12096 0
malloc-32 32 103 275 20052 0 254 12096 0
4 Bucket 48 7 245 10686 0 254 12096 0
udp_inpcb 488 2 22 546 0 254 11712 0
unpcb 256 20 25 1482 0 254 11520 0
malloc-8192 8192 1 0 1 0 1 8192 0
malloc-4096 4096 1 1 2 0 2 8192 0
malloc-2048 2048 3 1 3 0 8 8192 0
malloc-2048 2048 0 4 1237 0 8 8192 0
malloc-1024 1024 1 7 2505 0 16 8192 0
rtentry 176 32 14 68 0 62 8096 0
rl_entry 40 96 106 96 0 254 8080 0
udpcb 32 2 250 12709 0 254 8064 0
malloc-32 32 5 247 67693 0 254 8064 0
malloc-32 32 101 151 695 0 254 8064 0
malloc-32 32 85 167 12387 0 254 8064 0
malloc-32 32 43 209 21315 0 254 8064 0
malloc-32 32 19 233 1066 0 254 8064 0
malloc-16 16 29 471 7582 0 254 8000 0
malloc-16 16 43 457 22758 0 254 8000 0
malloc-16 16 196 304 17337 0 254 8000 0
malloc-16 16 27 473 80 0 254 8000 0
malloc-128 128 19 43 40 0 126 7936 0
procdesc 136 5 53 20 0 62 7888 0
KMAP ENTRY 96 12 69 12 0 126 7776 0
kenv 258 3 27 1027 0 30 7740 0
FPU_save_area 832 1 8 1 0 16 7488 0
cpuset 104 7 55 7 0 126 6448 0
epoch_record pcpu 256 4 12 4 0 62 4096 0
malloc-4096 4096 1 0 1 0 2 4096 0
malloc-2048 2048 1 1 1 0 8 4096 0
hostcache 96 1 41 1 0 254 4032 0
syncache 168 0 24 4 0 254 4032 0
UMA Slabs 1 176 10 12 10 0 62 3872 0
vmem 1856 1 1 1 0 8 3712 0
pcpu-4 4 34 478 34 0 254 2048 0
SMR CPU 32 2 29 2 0 254 992 0
SMR SHARED 24 2 29 2 0 254 744 0
FFS1 dinode 128 0 0 0 0 126 0 0
swblk 136 0 0 0 0 62 0 0
swpctrie 144 0 0 0 0 62 0 0
sctp_asconf_ack 48 0 0 0 0 254 0 0
sctp_asconf 40 0 0 0 0 254 0 0
pf state scrubs 40 0 0 0 0 254 0 0
pf frag entries 40 0 0 0 0 254 0 0
pf frags 248 0 0 0 0 62 0 0
pf table entries 160 0 0 0 0 62 0 0
pf table entry counters 64 0 0 0 0 254 0 0
pf source nodes 136 0 0 0 0 254 0 0
pf state keys 88 0 0 0 0 126 0 0
pf states 296 0 0 0 0 0 0 0
pf tags 104 0 0 0 0 126 0 0
pf mtags 48 0 0 0 0 254 0 0
tcp_log_node 120 0 0 0 0 126 0 0
tcp_log_bucket 176 0 0 0 0 62 0 0
tcpreass 48 0 0 0 0 254 0 0
tfo_ccache_entries 80 0 0 0 0 126 0 0
tfo 4 0 0 0 0 254 0 0
sackhole 32 0 0 0 0 254 0 0
tcptw 88 0 0 0 0 254 0 0
ipq 56 0 0 0 0 254 0 0
IPsec SA lft_c 16 0 0 0 0 254 0 0
itimer 352 0 0 0 0 30 0 0
AIOLIO 280 0 0 0 0 30 0 0
AIOCB 752 0 0 0 0 16 0 0
AIOP 32 0 0 0 0 254 0 0
AIO 208 0 0 0 0 62 0 0
NCLNODE 592 0 0 0 0 16 0 0
TMPFS node 224 0 0 0 0 62 0 0
LTS VFS Cache 360 0 0 0 0 30 0 0
L VFS Cache 320 0 0 0 0 30 0 0
STS VFS Cache 144 0 0 0 0 62 0 0
crypto_session 72 0 0 0 0 126 0 0
cryptop 280 0 0 0 0 30 0 0
IOMMU_MAP_ENTRY 120 0 0 0 0 126 0 0
ktls_session 192 0 0 0 0 62 0 0
mbuf_jumbo_16k 16384 0 0 0 0 254 0 0
mbuf_jumbo_9k 9216 0 0 0 0 254 0 0
audit_record 1280 0 0 0 0 8 0 0
domainset 40 0 0 0 0 254 0 0
MAC labels 40 0 0 0 0 254 0 0
vnpbuf 832 0 0 0 0 62 0 0
mdpbuf 832 0 0 0 0 4 0 0
nfspbuf 832 0 0 0 0 16 0 0
swwbuf 832 0 0 0 0 8 0 0
swrbuf 832 0 0 0 0 16 0 0
umtx_shm 88 0 0 0 0 126 0 0
umtx pi 96 0 0 0 0 126 0 0
rangeset pctrie nodes 144 0 0 0 0 62 0 0
malloc-65536 65536 0 0 0 0 1 0 0
malloc-65536 65536 0 0 0 0 1 0 0
malloc-65536 65536 0 0 0 0 1 0 0
malloc-32768 32768 0 0 0 0 1 0 0
malloc-32768 32768 0 0 0 0 1 0 0
malloc-32768 32768 0 0 0 0 1 0 0
malloc-16384 16384 0 0 0 0 1 0 0
malloc-16384 16384 0 0 0 0 1 0 0
malloc-16384 16384 0 0 0 0 1 0 0
malloc-4096 4096 0 0 0 0 2 0 0
malloc-1024 1024 0 0 0 0 16 0 0
malloc-16 16 0 0 0 0 254 0 0
fakepg 104 0 0 0 0 126 0 0
UMA Hash 256 0 0 0 0 62 0 0


---
This report is generated by a bot. It may contain errors.
See https://goo.gl/tpsmEJ for more information about syzbot.
syzbot engineers can be reached at syzk...@googlegroups.com.

syzbot will keep track of this issue. See:
https://goo.gl/tpsmEJ#status for how to communicate with syzbot.

syzbot

unread,
Nov 7, 2020, 11:42:22 AM11/7/20
to syzkaller-f...@googlegroups.com
syzbot has found a reproducer for the following issue on:

HEAD commit: c4f7f2c1 binmiscctl(8): miscellaneous cleanup
git tree: freebsd
console output: https://syzkaller.appspot.com/x/log.txt?x=16fb5134500000
dashboard link: https://syzkaller.appspot.com/bug?extid=341e9ebd9d24ca7dc62a
syz repro: https://syzkaller.appspot.com/x/repro.syz?x=11eb7114500000

IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+341e9e...@syzkaller.appspotmail.com

login: panic: Queues are not empty when handling SHUTDOWN-COMPLETE
cpuid = 1
time = 1604767127
rcx 0x80
rdx 0xffffffff818c5efd
rbx 0
rsp 0xfffffe00036381f0
rbp 0xfffffe0003638210
rsi 0x1
rdi 0
r8 0
r9 0xffffffff
r10 0xfffffe00036387dc
r11 0xbf
r12 0xffffffff820671a0 ddb_dbbe
r13 0
r14 0xffffffff8196df21
r15 0xffffffff8196df21
rip 0xffffffff810df7d7 kdb_enter+0x67
rflags 0x86
kdb_enter+0x67: movq $0,0x147ce26(%rip)
db> show proc
Process 12 (intr) at 0xfffff800042a2a40:
839 769 769 0 RE CPU 0 syz-executor.0
802 791 802 0 Ss select 0xfffff80031481ec0 dhclient
795 1 795 0 Ss select 0xfffff8001efab5c0 dhclient
791 784 424 65 S select 0xfffff80004bfc840 dhclient
784 424 424 0 S wait 0xfffff80031485a40 sh
769 767 769 0 Ss nanslp 0xffffffff8252fd71 syz-executor.0
767 765 765 0 S (threaded) syz-execprog
100092 S uwait 0xfffff80004926a80 syz-execprog
100107 S uwait 0xfffff80004b17380 syz-execprog
100108 S uwait 0xfffff80004b17480 syz-execprog
100109 S uwait 0xfffff80004b17580 syz-execprog
100110 S kqread 0xfffff8003102c800 syz-execprog
100111 S uwait 0xfffff80004b17680 syz-execprog
100112 S uwait 0xfffff800310bfe00 syz-execprog
765 763 765 0 Ss pause 0xfffff80004bdf5c8 csh
763 682 763 0 Ss select 0xfffff80004bfc7c0 sshd
742 1 742 0 Ss+ ttyin 0xfffff800046fd8b0 getty
741 1 741 0 Ss+ ttyin 0xfffff80004a04cb0 getty
740 1 740 0 Ss+ ttyin 0xfffff80004a004b0 getty
739 1 739 0 Ss+ ttyin 0xfffff80004a00cb0 getty
738 1 738 0 Ss+ ttyin 0xfffff800049fc4b0 getty
737 1 737 0 Ss+ ttyin 0xfffff800049fccb0 getty
736 1 736 0 Ss+ ttyin 0xfffff800049f84b0 getty
735 1 735 0 Ss+ ttyin 0xfffff800049f8cb0 getty
734 1 734 0 Ss+ ttyin 0xfffff800049f24b0 getty
732 730 24 0 S+ nanslp 0xffffffff8252fd70 sleep
731 1 24 0 S+ piperd 0xfffff80004b0b8e8 logger
730 1 24 0 S+ wait 0xfffff8003103e520 sh
686 1 686 0 Ss nanslp 0xffffffff8252fd71 cron
682 1 682 0 Ss select 0xfffff8001ef93c40 sshd
495 1 495 0 Ss select 0xfffff8001efabdc0 syslogd
424 1 424 0 Ss wait 0xfffff80004bd0000 devd
423 1 423 65 Ss select 0xfffff80004bfc040 dhclient
338 1 338 0 Ss select 0xfffff80004ab81c0 dhclient
335 1 335 0 Ss select 0xfffff80004ab8140 dhclient
23 0 0 0 DL syncer 0xffffffff8261d0f8 [syncer]
22 0 0 0 DL vlruwt 0xfffff80004a57a40 [vnlru]
21 0 0 0 DL (threaded) [bufdaemon]
100070 D qsleep 0xffffffff8261c1d0 [bufdaemon]
100077 D - 0xffffffff8200ac00 [bufspacedaemon-0]
100087 D sdflush 0xfffff800047068e8 [/ worker]
20 0 0 0 DL psleep 0xffffffff82643688 [vmdaemon]
19 0 0 0 DL (threaded) [pagedaemon]
100068 D psleep 0xffffffff82637af8 [dom0]
100075 D launds 0xffffffff82637b04 [laundry: dom0]
100076 D umarcl 0xffffffff814e7330 [uma]
18 0 0 0 DL - 0xffffffff823634f8 [rand_harvestq]
17 0 0 0 DL waiting 0xffffffff82d9f818 [sctp_iterator]
16 0 0 0 DL pftm 0xffffffff82c1e390 [pf purge]
15 0 0 0 DL - 0xffffffff8261b7a4 [soaiod4]
9 0 0 0 DL - 0xffffffff8261b7a4 [soaiod3]
8 0 0 0 DL - 0xffffffff8261b7a4 [soaiod2]
7 0 0 0 DL - 0xffffffff8261b7a4 [soaiod1]
6 0 0 0 DL (threaded) [cam]
100034 D - 0xffffffff8223b240 [doneq0]
100067 D - 0xffffffff8223b110 [scanner]
5 0 0 0 DL crypto_ 0xfffff80004329d90 [crypto returns 1]
4 0 0 0 DL crypto_ 0xfffff80004329d30 [crypto returns 0]
3 0 0 0 DL crypto_ 0xffffffff82634ff0 [crypto]
14 0 0 0 DL seqstat 0xfffff800042f6c88 [sequencer 00]
13 0 0 0 DL (threaded) [geom]
100025 D - 0xffffffff8250e8e0 [g_event]
100026 D - 0xffffffff8250e8e8 [g_up]
100027 D - 0xffffffff8250e8f0 [g_down]
2 0 0 0 DL (threaded) [KTLS]
100018 D - 0xfffff800042b2e00 [thr_0]
100019 D - 0xfffff800042b2e80 [thr_1]
1 0 1 0 SLs wait 0xfffff80004287520 [init]
10 0 0 0 DL audit_w 0xffffffff82635510 [audit]
0 0 0 0 DLs (threaded) [kernel]
100000 D swapin 0xffffffff8250ee70 [swapper]
100005 D - 0xfffff8000429fe00 [if_io_tqg_0]
100006 D - 0xfffff8000429fd00 [if_io_tqg_1]
100007 D - 0xfffff8000429fc00 [if_config_tqg_0]
100008 D - 0xfffff8000429fb00 [softirq_0]
100009 D - 0xfffff8000429fa00 [softirq_1]
100010 D - 0xfffff8000429f900 [inm_free taskq]
100011 D - 0xfffff8000429f800 [kqueue_ctx taskq]
100013 D - 0xfffff8000429f600 [aiod_kick taskq]
100015 D - 0xfffff8000429f400 [in6m_free taskq]
100016 D - 0xfffff8000429f300 [thread taskq]
100024 D - 0xfffff8000429f100 [firmware taskq]
100029 D - 0xfffff800042ec600 [crypto_0]
100030 D - 0xfffff800042ec600 [crypto_1]
100044 D - 0xfffff800046e7e00 [vtnet0 rxq 0]
100045 D - 0xfffff800046e7d00 [vtnet0 txq 0]
100046 D - 0xfffff800046e7c00 [vtnet0 rxq 1]
100047 D - 0xfffff800046e7b00 [vtnet0 txq 1]
100049 D vtbslp 0xfffff80004477980 [virtio_balloon]
100053 D - 0xfffff800046e7a00 [mca taskq]
100055 D - 0xffffffff81d15c41 [deadlkres]
100062 D - 0xfffff800042ec100 [acpi_task_0]
100063 D - 0xfffff800042ec100 [acpi_task_1]
100064 D - 0xfffff800042ec100 [acpi_task_2]
100066 D - 0xfffff800042ec000 [CAM taskq]
db> show all locks
Process 12 (intr) thread 0xfffffe00048b2a00 (100020)
exclusive sleep mutex sctp-tcb (tcb) r = 0 (0xfffffe002577bc70) locked @ /syzkaller/managers/main/kernel/sys/netinet/sctp_pcb.c:2143
db> show malloc
Type InUse MemUse Requests
pf_hash 5 11524K 5
devbuf 4214 4854K 4239
tcp_hpts 5 3201K 5
vtbuf 24 1968K 46
sysctloid 28272 1649K 28336
kobj 336 1344K 496
newblk 399 1124K 481
vfscache 3 1025K 3
inodedep 91 557K 120
pcb 34 547K 330
ufs_quota 1 512K 1
vfs_hash 1 512K 1
callout 2 512K 2
intr 4 472K 4
subproc 113 239K 901
acpica 1674 185K 52508
vnet_data 1 168K 1
pagedep 17 132K 63
tfo_ccache 1 128K 1
sem 4 106K 4
DEVFS1 102 102K 113
linker 254 99K 285
bus 979 79K 3033
mtx_pool 2 72K 2
syncache 1 68K 1
acpitask 1 64K 1
ddb_capture 1 64K 1
module 507 64K 507
filedesc 4 37K 99
BPF 19 36K 19
temp 23 33K 1627
hostcache 1 32K 1
shm 1 32K 1
umtx 252 32K 252
kdtrace 165 32K 1741
DEVFS3 121 31K 131
msg 4 30K 4
DEVFS_RULE 56 27K 56
gtaskqueue 18 26K 18
vmem 3 22K 5
kbdmux 6 22K 6
ufs_mount 5 17K 6
proc 3 17K 3
ifaddr 43 17K 43
tty 16 16K 16
tidhash 1 16K 1
ithread 99 16K 99
dirrem 58 15K 69
bus-sc 30 14K 1414
KTRACE 100 13K 100
kenv 92 12K 92
eventhandler 132 12K 132
pfs_nodes 20 10K 20
GEOM 60 10K 489
rman 82 10K 423
bmsafemap 4 9K 89
UART 12 9K 12
devstat 4 9K 4
rpc 2 8K 2
shmfd 1 8K 1
pfs_vncache 1 8K 1
audit_evclass 233 8K 291
sctp_timw 29 8K 29
lltable 20 7K 20
ifnet 4 7K 4
CAM DEV 3 6K 510
ether_multi 73 6K 83
cred 22 6K 239
kqueue 54 6K 844
vt 11 6K 11
freefile 41 6K 50
sglist 5 6K 5
CAM queue 5 6K 1528
taskqueue 48 6K 48
sctp_atcl 10 5K 336
in6_multi 41 5K 41
plimit 19 5K 344
ufs_dirhash 24 5K 24
memdesc 1 4K 1
MCA 32 4K 32
diradd 32 4K 85
evdev 4 4K 4
UMA 245 4K 245
routetbl 18 4K 18
pf_ifnet 7 4K 10
hhook 13 4K 13
session 23 3K 34
pgrp 23 3K 34
terminal 11 3K 11
acpisem 22 3K 22
proc-args 44 3K 505
selfd 37 3K 7506
uidinfo 3 3K 8
local_apic 1 2K 1
io_apic 1 2K 1
ipsec-saq 2 2K 2
lockf 19 2K 29
select 15 2K 15
CAM XPT 22 2K 543
Unitno 26 2K 40
ip6ndp 8 2K 9
ipsecpolicy 2 2K 2
acpidev 20 2K 20
msi 9 2K 9
mkdir 9 2K 104
clone 9 2K 9
sctp_ifa 8 1K 10
sctp_stro 1 1K 84
softdep 1 1K 1
indirdep 4 1K 4
sahead 1 1K 1
secasvar 1 1K 1
vnodemarker 2 1K 8
NFSD session 1 1K 1
CAM periph 4 1K 271
newdirblk 7 1K 52
ipsec 3 1K 3
in_multi 3 1K 5
nhops 6 1K 6
toponodes 6 1K 6
isadev 6 1K 6
mount 16 1K 89
pci_link 10 1K 10
encap_export_host 12 1K 12
crypto 3 1K 3
sctp_stri 1 1K 84
pfil 4 1K 4
chacha20random 1 1K 1
CAM SIM 2 1K 2
cdev 2 1K 2
sctp_atky 11 1K 378
sctp_ifn 3 1K 10
freework 2 1K 67
mld 3 1K 3
igmp 3 1K 3
tun 4 1K 4
osd 3 1K 9
DEVFSP 5 1K 5
freeblks 1 1K 66
vnodes 1 1K 1
ktls 1 1K 1
NFSD lckfile 1 1K 1
NFSD V4client 1 1K 1
DEVFS 9 1K 10
feeder 7 1K 7
inpcbpolicy 7 1K 145
loginclass 3 1K 7
prison 6 1K 6
sctp_athm 10 1K 336
CAM dev queue 2 1K 2
CAM I/O Scheduler 1 1K 1
apmdev 1 1K 1
atkbddev 2 1K 2
CAM path 4 1K 1034
tcpfunc 2 1K 2
pmchooks 1 1K 1
filecaps 5 1K 69
soname 4 1K 3200
nexusdev 5 1K 5
sctp_vrf 1 1K 1
entropy 2 1K 39
vnet 1 1K 1
pmc 1 1K 1
acpiintr 1 1K 1
sctp_map 2 1K 168
cpus 2 1K 2
vnet_data_free 1 1K 1
Per-cpu 1 1K 1
p1003.1b 1 1K 1
sctp_mcore 0 0K 0
sctp_socko 0 0K 0
sctp_iter 0 0K 5
sctp_mvrf 0 0K 0
sctp_cpal 0 0K 0
sctp_cmsg 0 0K 0
sctp_stre 0 0K 0
sctp_athi 0 0K 0
sctp_a_it 0 0K 5
sctp_aadr 0 0K 0
pf_table 0 0K 0
pf_rule 0 0K 0
tcp_log_dev 0 0K 0
midi buffers 0 0K 0
mixer 0 0K 0
vm_fictitious 0 0K 0
ac97 0 0K 0
hdacc 0 0K 0
hdac 0 0K 0
hdaa 0 0K 0
acpi_perf 0 0K 0
acpicmbat 0 0K 0
SIIS driver 0 0K 0
CAM CCB 0 0K 1773
UMAHash 0 0K 0
vm_pgdata 0 0K 0
jblocks 0 0K 0
savedino 0 0K 12
sentinel 0 0K 0
jfsync 0 0K 0
jtrunc 0 0K 0
sbdep 0 0K 2
jsegdep 0 0K 0
jseg 0 0K 0
jfreefrag 0 0K 0
jfreeblk 0 0K 0
jnewblk 0 0K 0
jmvref 0 0K 0
jremref 0 0K 0
jaddref 0 0K 0
freedep 0 0K 0
freefrag 0 0K 5
allocindir 0 0K 0
allocdirect 0 0K 0
ufs_trim 0 0K 0
mactemp 0 0K 0
audit_trigger 0 0K 0
audit_pipe_presel 0 0K 0
audit_pipeent 0 0K 0
audit_pipe 0 0K 0
audit_evname 0 0K 0
audit_bsm 0 0K 0
audit_gidset 0 0K 0
audit_text 0 0K 0
audit_path 0 0K 0
audit_data 0 0K 0
audit_cred 0 0K 0
xform 0 0K 0
NLM 0 0K 0
ipsec-spdcache 0 0K 0
ipsec-reg 0 0K 0
ipsec-misc 0 0K 0
ipsecrequest 0 0K 0
ip6opt 0 0K 3
ip6_msource 0 0K 0
ip6_moptions 0 0K 0
in6_mfilter 0 0K 0
frag6 0 0K 0
tcplog 0 0K 0
PUC 0 0K 0
LRO 0 0K 0
newreno data 0 0K 0
ip_msource 0 0K 0
ip_moptions 0 0K 0
in_mfilter 0 0K 0
ipid 0 0K 0
80211scan 0 0K 0
80211ratectl 0 0K 0
80211power 0 0K 0
80211nodeie 0 0K 0
80211node 0 0K 0
80211mesh_gt 0 0K 0
80211mesh_rt 0 0K 0
80211perr 0 0K 0
80211prep 0 0K 0
80211preq 0 0K 0
80211dfs 0 0K 0
80211crypto 0 0K 0
80211vap 0 0K 0
iflib 0 0K 0
vlan 0 0K 0
gif 0 0K 0
ifdescr 0 0K 0
zlib 0 0K 0
fadvise 0 0K 0
VN POLL 0 0K 0
ppbusdev 0 0K 0
statfs 0 0K 236
namei_tracker 0 0K 0
export_host 0 0K 0
cl_savebuf 0 0K 2
agtiapi_MemAlloc malloc 0 0K 0
osti_cacheable 0 0K 0
tempbuff 0 0K 0
tempbuff 0 0K 0
ag_tgt_map_t malloc 0 0K 0
ag_slr_map_t malloc 0 0K 0
lDevFlags * malloc 0 0K 0
tiDeviceHandle_t * malloc 0 0K 0
ag_portal_data_t malloc 0 0K 0
ag_device_t malloc 0 0K 0
STLock malloc 0 0K 0
CCB List 0 0K 0
sr_iov 0 0K 0
OCS 0 0K 0
OCS 0 0K 0
nvme 0 0K 0
nvd 0 0K 0
netmap 0 0K 0
mwldev 0 0K 0
MVS driver 0 0K 0
biobuf 0 0K 0
aios 0 0K 0
lio 0 0K 0
acl 0 0K 0
mbuf_tag 0 0K 50
accf 0 0K 0
pts 0 0K 0
iov 0 0K 13428
ioctlops 0 0K 89
Witness 0 0K 0
stack 0 0K 0
CAM ccb queue 0 0K 0
mrsasbuf 0 0K 0
mpt_user 0 0K 0
mps_user 0 0K 0
MPSSAS 0 0K 0
sbuf 0 0K 288
mps 0 0K 0
firmware 0 0K 0
compressor 0 0K 0
mpr_user 0 0K 0
SWAP 0 0K 0
MPRSAS 0 0K 0
mpr 0 0K 0
sysctltmp 0 0K 608
sysctl 0 0K 1
mfibuf 0 0K 0
ekcd 0 0K 0
dumper 0 0K 0
sendfile 0 0K 0
rctl 0 0K 0
md_sectors 0 0K 0
md_disk 0 0K 0
malodev 0 0K 0
LED 0 0K 0
cache 0 0K 0
ix_sriov 0 0K 0
kcovinfo 0 0K 0
prison_racct 0 0K 0
Fail Points 0 0K 0
sigio 0 0K 1
mbuf_cluster 2048 9443 1 9443 0 254 19341312 0
mbuf_packet 256 8194 1121 23294 0 254 2384640 0
malloc-512 512 4121 7 4122 0 30 2113536 0
BUF TRIE 144 164 13304 451 0 62 1939392 0
malloc-4096 4096 355 2 530 0 2 1462272 0
malloc-128 128 9312 50 9481 0 126 1198336 0
pbuf 832 0 969 0 0 2 806208 0
UMA Slabs 0 112 6073 8 6073 0 126 681072 0
RADIX NODE 144 2180 141 21356 0 62 334224 0
VNODE 496 538 54 591 0 30 293632 0
VM OBJECT 264 1006 59 13507 0 30 281160 0
malloc-65536 65536 4 0 4 0 1 262144 0
256 Bucket 2048 109 9 7056 0 8 241664 0
malloc-4096 4096 52 4 840 0 2 229376 0
THREAD 1792 118 8 118 0 8 225792 0
DEVCTL 1024 0 208 113 0 0 212992 0
malloc-65536 65536 2 1 112 0 1 196608 0
malloc-16 16 11813 187 11867 0 254 192000 0
malloc-64 64 2688 147 10165 0 254 181440 0
UMA Zones 768 220 2 220 0 16 170496 0
malloc-128 128 1199 72 24539 0 126 162688 0
malloc-256 256 581 49 950 0 62 161280 0
malloc-32 32 4600 188 4628 0 254 153216 0
mbuf 256 398 157 3974 0 254 142080 0
FFS2 dinode 256 507 18 557 0 62 134400 0
malloc-65536 65536 2 0 2 0 1 131072 0
malloc-65536 65536 0 2 61 0 1 131072 0
malloc-1024 1024 118 6 129 0 16 126976 0
MAP ENTRY 96 1030 272 39694 0 126 124992 0
ksiginfo 112 42 1002 60 0 126 116928 0
S VFS Cache 104 979 113 1066 0 126 113568 0
malloc-2048 2048 8 46 2545 0 8 110592 0
VMSPACE 2536 29 10 818 0 4 98904 0
malloc-16384 16384 2 4 185 0 1 98304 0
vmem btag 56 1615 101 1615 0 254 96096 0
FFS inode 160 507 68 558 0 62 92000 0
malloc-128 128 660 22 3599 0 126 87296 0
malloc-512 512 152 8 183 0 30 81920 0
UMA Kegs 384 206 0 206 0 30 79104 0
PROC 1312 51 9 839 0 8 78720 0
filedesc0 1080 52 18 840 0 8 75600 0
g_bio 408 0 180 4743 0 30 73440 0
malloc-65536 65536 1 0 1 0 1 65536 0
malloc-8192 8192 5 3 33 0 1 65536 0
128 Bucket 1024 36 23 695 0 16 60416 0
malloc-256 256 181 29 1088 0 62 53760 0
malloc-2048 2048 10 16 132 0 8 53248 0
malloc-16384 16384 3 0 3 0 1 49152 0
malloc-16384 16384 3 0 6 0 1 49152 0
malloc-128 128 331 41 406 0 126 47616 0
malloc-64 64 554 139 2050 0 254 44352 0
malloc-128 128 284 57 1065 0 126 43648 0
socket 960 20 24 1345 0 254 42240 0
malloc-256 256 141 24 408 0 62 42240 0
DIRHASH 1024 34 6 34 0 16 40960 0
mbuf_jumbo_page 4096 0 10 10 0 254 40960 0
clpbuf 832 0 48 99 0 16 39936 0
sctp_ep 1280 8 22 126 0 254 38400 0
32 Bucket 256 36 114 908 0 62 38400 0
NAMEI 1024 0 36 12186 0 16 36864 0
malloc-4096 4096 9 0 11 0 2 36864 0
pcpu-8 8 3906 702 3910 0 254 36864 0
malloc-64 64 455 112 664 0 254 36288 0
sctp_asoc 2288 1 14 84 0 254 34320 0
malloc-32768 32768 1 0 1 0 1 32768 0
malloc-32768 32768 0 1 112 0 1 32768 0
malloc-32768 32768 1 0 1 0 1 32768 0
malloc-32768 32768 1 0 1 0 1 32768 0
malloc-8192 8192 2 2 4 0 1 32768 0
malloc-8192 8192 3 1 92 0 1 32768 0
malloc-4096 4096 5 3 690 0 2 32768 0
malloc-512 512 57 7 689 0 30 32768 0
malloc-512 512 19 45 345 0 30 32768 0
mt_stats_zone 64 450 62 450 0 254 32768 0
64 Bucket 512 50 14 594 0 30 32768 0
malloc-256 256 88 17 1264 0 62 26880 0
malloc-8192 8192 3 0 3 0 1 24576 0
malloc-8192 8192 3 0 3 0 1 24576 0
sctp_raddr 736 3 30 252 0 254 24288 0
malloc-64 64 358 20 1213 0 254 24192 0
4 Bucket 48 12 492 3989 0 254 24192 0
ttyinq 160 135 15 300 0 62 24000 0
tcpcb 1048 3 19 7 0 254 23056 0
ttyoutq 256 72 18 160 0 62 23040 0
Mountpoints 2816 2 6 2 0 4 22528 0
malloc-1024 1024 17 3 31 0 16 20480 0
malloc-1024 1024 4 16 225 0 16 20480 0
8 Bucket 80 45 205 7198 0 126 20000 0
TURNSTILE 136 127 20 127 0 62 19992 0
malloc-128 128 101 54 599 0 126 19840 0
malloc-128 128 129 26 180 0 126 19840 0
malloc-16384 16384 1 0 1 0 1 16384 0
malloc-16384 16384 1 0 1 0 1 16384 0
malloc-8192 8192 2 0 2 0 1 16384 0
malloc-4096 4096 4 0 6 0 2 16384 0
malloc-1024 1024 4 12 48 0 16 16384 0
malloc-1024 1024 12 4 12 0 16 16384 0
malloc-512 512 26 6 27 0 30 16384 0
malloc-32 32 296 208 3336 0 254 16128 0
malloc-256 256 21 39 332 0 62 15360 0
pipe 760 12 8 293 0 16 15200 0
SLEEPQUEUE 88 127 33 127 0 126 14080 0
malloc-2048 2048 5 1 5 0 8 12288 0
malloc-2048 2048 3 3 194 0 8 12288 0
malloc-1024 1024 8 4 9 0 16 12288 0
malloc-512 512 21 3 21 0 30 12288 0
malloc-512 512 20 4 20 0 30 12288 0
malloc-64 64 74 115 899 0 254 12096 0
Files 80 98 52 6787 0 126 12000 0
udp_inpcb 488 2 22 133 0 254 11712 0
malloc-8192 8192 1 0 1 0 1 8192 0
malloc-8192 8192 1 0 1 0 1 8192 0
malloc-4096 4096 1 1 2 0 2 8192 0
malloc-2048 2048 3 1 17 0 8 8192 0
malloc-2048 2048 3 1 3 0 8 8192 0
malloc-1024 1024 1 7 912 0 16 8192 0
malloc-512 512 5 11 422 0 30 8192 0
rtentry 176 20 26 24 0 62 8096 0
rl_entry 40 33 169 33 0 254 8080 0
sctp_laddr 48 0 168 7 0 254 8064 0
udpcb 32 2 250 133 0 254 8064 0
PWD 32 12 240 143 0 254 8064 0
malloc-64 64 26 100 27 0 254 8064 0
malloc-64 64 52 74 13172 0 254 8064 0
malloc-64 64 11 115 25 0 254 8064 0
malloc-32 32 3 249 67 0 254 8064 0
malloc-32 32 101 151 128 0 254 8064 0
malloc-32 32 74 178 256 0 254 8064 0
malloc-32 32 19 233 1064 0 254 8064 0
16 Bucket 144 32 24 187 0 62 8064 0
2 Bucket 32 49 203 12062 0 254 8064 0
vtnet_tx_hdr 24 0 334 700 0 254 8016 0
KNOTE 160 8 42 267 0 62 8000 0
malloc-16 16 29 471 181 0 254 8000 0
malloc-16 16 42 458 673 0 254 8000 0
malloc-16 16 193 307 1248 0 254 8000 0
malloc-16 16 21 479 36 0 254 8000 0
malloc-16 16 260 240 24287 0 254 8000 0
malloc-16 16 18 482 230 0 254 8000 0
malloc-128 128 21 41 26 0 126 7936 0
sctp_chunk 152 3 49 252 0 254 7904 0
procdesc 136 2 56 8 0 62 7888 0
ripcb 488 2 14 5 0 254 7808 0
tcp_inpcb 488 3 13 7 0 254 7808 0
KMAP ENTRY 96 12 69 12 0 126 7776 0
kenv 258 3 27 1000 0 30 7740 0
routing nhops 256 16 14 24 0 62 7680 0
unpcb 256 11 19 1054 0 254 7680 0
malloc-256 256 15 15 27 0 62 7680 0
malloc-256 256 7 23 294 0 62 7680 0
malloc-256 256 14 16 60 0 62 7680 0
FPU_save_area 832 1 8 1 0 16 7488 0
cpuset 104 7 55 7 0 126 6448 0
epoch_record pcpu 256 4 12 4 0 62 4096 0
malloc-4096 4096 1 0 1 0 2 4096 0
malloc-2048 2048 1 1 1 0 8 4096 0
malloc-2048 2048 0 2 32 0 8 4096 0
sctp_stream_msg_out 112 0 36 2 0 254 4032 0
hostcache 96 1 41 1 0 254 4032 0
syncache 168 0 24 5 0 254 4032 0
malloc-32 32 55 71 843 0 254 4032 0
malloc-32 32 39 87 741 0 254 4032 0
UMA Slabs 1 176 9 13 9 0 62 3872 0
vmem 1856 1 1 1 0 8 3712 0
pcpu-4 4 34 478 34 0 254 2048 0
SMR CPU 32 2 29 2 0 254 992 0
SMR SHARED 24 2 29 2 0 254 744 0
FFS1 dinode 128 0 0 0 0 126 0 0
swblk 136 0 0 0 0 62 0 0
swpctrie 144 0 0 0 0 62 0 0
sctp_asconf_ack 48 0 0 0 0 254 0 0
sctp_asconf 40 0 0 0 0 254 0 0
sctp_readq 152 0 0 0 0 254 0 0
pf state scrubs 40 0 0 0 0 254 0 0
pf frag entries 40 0 0 0 0 254 0 0
pf frags 248 0 0 0 0 62 0 0
pf table entries 160 0 0 0 0 62 0 0
pf table entry counters 64 0 0 0 0 254 0 0
pf source nodes 136 0 0 0 0 254 0 0
pf state keys 88 0 0 0 0 126 0 0
pf states 296 0 0 0 0 254 0 0
pf tags 104 0 0 0 0 126 0 0
pf mtags 48 0 0 0 0 254 0 0
tcp_bbr_pcb 832 0 0 0 0 16 0 0
tcp_bbr_map 128 0 0 0 0 126 0 0
udplite_inpcb 488 0 0 0 0 254 0 0
tcp_log_node 120 0 0 0 0 126 0 0
tcp_log_bucket 176 0 0 0 0 62 0 0
tcp_log 416 0 0 0 0 254 0 0

syzbot

unread,
Apr 21, 2022, 1:22:31 AM4/21/22
to syzkaller-f...@googlegroups.com
syzbot has found a reproducer for the following issue on:

HEAD commit: b91a48693a53 ifconfig: Fix spelling error
git tree: freebsd-src
console output: https://syzkaller.appspot.com/x/log.txt?x=12b97830f00000
dashboard link: https://syzkaller.appspot.com/bug?extid=341e9ebd9d24ca7dc62a
syz repro: https://syzkaller.appspot.com/x/repro.syz?x=13f25768f00000
C reproducer: https://syzkaller.appspot.com/x/repro.c?x=143c9e0cf00000

IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+341e9e...@syzkaller.appspotmail.com

login: panic: Queues are not empty when handling SHUTDOWN-COMPLETE
cpuid = 0
time = 1650518396
KDB: stack backtrace:
db_trace_self_wrapper() at db_trace_self_wrapper+0xc7/frame 0xfffffe0053bf9e30
kdb_backtrace() at kdb_backtrace+0xd3/frame 0xfffffe0053bf9f90
vpanic() at vpanic+0x2b8/frame 0xfffffe0053bfa070
panic() at panic+0xb5/frame 0xfffffe0053bfa140
sctp_handle_shutdown_complete() at sctp_handle_shutdown_complete+0x1ab/frame 0xfffffe0053bfa170
sctp_process_control() at sctp_process_control+0x2fd3/frame 0xfffffe0053bfa640
sctp_common_input_processing() at sctp_common_input_processing+0xb35/frame 0xfffffe0053bfa8a0
sctp6_input_with_port() at sctp6_input_with_port+0x597/frame 0xfffffe0053bfaa70
sctp6_input() at sctp6_input+0x1f/frame 0xfffffe0053bfaa90
ip6_input() at ip6_input+0x1f40/frame 0xfffffe0053bfacf0
swi_net() at swi_net+0x2f0/frame 0xfffffe0053bfad90
ithread_loop() at ithread_loop+0x4f1/frame 0xfffffe0053bfaef0
fork_exit() at fork_exit+0xd0/frame 0xfffffe0053bfaf30
fork_trampoline() at fork_trampoline+0xe/frame 0xfffffe0053bfaf30
--- trap 0, rip = 0, rsp = 0, rbp = 0 ---
KDB: enter: panic
[ thread pid 12 tid 100029 ]
Stopped at kdb_enter+0x6b: movq $0,0x270578a(%rip)
db>
db> set $lines = 0
db> set $maxwidth = 0
db> show registers
cs 0x20
ds 0x3b
es 0x3b
fs 0x13
gs 0x1b
ss 0x28
rax 0x12
rcx 0xd5b0c8e962dfaf01
rdx 0xdffff7c000000000
rbx 0
rsp 0xfffffe0053bf9f70
rbp 0xfffffe0053bf9f90
rsi 0x1
rdi 0
r8 0x3
r9 0xffffffff
r10 0
r11 0xbf
r12 0xfffffe0053ec4ac0
r13 0xfffffe0053bf9f01
r14 0xffffffff82bc74a0 .str.26
r15 0xffffffff82bc74a0 .str.26
rip 0xffffffff81774c0b kdb_enter+0x6b
rflags 0x46
kdb_enter+0x6b: movq $0,0x270578a(%rip)
db> show proc
Process 12 (intr) at 0xfffffe0053ddb548:
state: NORMAL
uid: 0 gids: 0
parent: pid 0 at 0xffffffff83e1da40
ABI: null
flag: 0x10000284 flag2: 0
reaper: 0xffffffff83e1da40 reapsubtree: 12
sigparent: 20
vmspace: 0xffffffff83e1e9e0
(map 0xffffffff83e1e9e0)
(map.pmap 0xffffffff83e1eaa0)
(pmap 0xffffffff83e1eb08)
threads: 23
100010 I [swi6: Giant taskq]
100017 I [swi5: fast taskq]
100020 I [swi6: task queue]
100029 Run CPU 0 [swi1: netisr 0]
100032 I [swi3: busdma]
100033 I [swi1: hpts]
100034 I [swi1: hpts]
100047 I [irq24: virtio_pci0]
100048 I [irq25: virtio_pci0]
100049 I [irq26: virtio_pci0]
100050 I [irq27: virtio_pci0]
100051 I [irq28: virtio_pci1]
100052 I [irq29: virtio_pci1]
100053 I [irq30: virtio_pci1]
100054 I [irq31: virtio_pci1]
100055 I [irq32: virtio_pci1]
100060 I [irq33: virtio_pci2]
100061 I [irq34: virtio_pci2]
100062 I [irq35: virtio_pci2]
100064 I [irq1: atkbd0]
100065 I [irq12: psm0]
100066 I [swi0: uart uart++]
100070 I [swi1: pf send]
db> ps
pid ppid pgrp uid state wmesg wchan cmd
1197 779 777 0 RE CPU 1 syz-executor8581159
779 777 777 0 S nanslp 0xffffffff83e47a41 syz-executor8581159
777 775 777 0 Ss pause 0xfffffe0058bb75f8 csh
775 688 775 0 Ss select 0xfffffe0053dd22c0 sshd
754 1 754 0 Ss+ ttyin 0xfffffe0056feb4b0 getty
753 1 753 0 Ss+ ttyin 0xfffffe0056fe68b0 getty
752 1 752 0 Ss+ ttyin 0xfffffe0056fe6cb0 getty
751 1 751 0 Ss+ ttyin 0xfffffe0056fe70b0 getty
750 1 750 0 Ss+ ttyin 0xfffffe0056fe74b0 getty
749 1 749 0 Ss+ ttyin 0xfffffe0056fe78b0 getty
748 1 748 0 Ss+ ttyin 0xfffffe0056fe7cb0 getty
747 1 747 0 Ss+ ttyin 0xfffffe0056fe90b0 getty
746 1 746 0 Ss+ ttyin 0xfffffe0056fe94b0 getty
744 1 18 0 S+ piperd 0xfffffe0058b4f2e8 logger
743 742 18 0 S+ nanslp 0xffffffff83e47a40 sleep
742 1 18 0 S+ wait 0xfffffe0053ee9a90 sh
692 1 692 0 Ss nanslp 0xffffffff83e47a41 cron
688 1 688 0 Ss select 0xfffffe00570367c0 sshd
501 1 501 0 Ss select 0xfffffe00570368c0 syslogd
430 1 430 0 Ss select 0xfffffe00570110c0 devd
429 1 429 65 Ss select 0xfffffe0057036940 dhclient
344 1 344 0 Ss select 0xfffffe0057011040 dhclient
341 1 341 0 Ss select 0xfffffe0057036b40 dhclient
17 0 0 0 DL syncer 0xffffffff83f6d260 [syncer]
16 0 0 0 DL vlruwt 0xfffffe00587b6a90 [vnlru]
15 0 0 0 DL (threaded) [bufdaemon]
100080 D psleep 0xffffffff83f6b860 [bufdaemon]
100083 D - 0xffffffff83211f80 [bufspacedaemon-0]
100095 D sdflush 0xfffffe0053f698e8 [/ worker]
9 0 0 0 DL psleep 0xffffffff83f9f380 [vmdaemon]
8 0 0 0 DL (threaded) [pagedaemon]
100078 D psleep 0xffffffff83f93238 [dom0]
100081 D launds 0xffffffff83f93244 [laundry: dom0]
100082 D umarcl 0xffffffff81eafd30 [uma]
7 0 0 0 DL - 0xffffffff83c03788 [rand_harvestq]
6 0 0 0 DL pftm 0xffffffff84855530 [pf purge]
5 0 0 0 DL waiting 0xffffffff846904a0 [sctp_iterator]
4 0 0 0 DL (threaded) [cam]
100045 D - 0xffffffff83aa56c0 [doneq0]
100046 D - 0xffffffff83aa5640 [async]
100077 D - 0xffffffff83aa54c0 [scanner]
14 0 0 0 DL seqstat 0xfffffe0056f1ac88 [sequencer 00]
3 0 0 0 DL (threaded) [crypto]
100041 D crypto_ 0xffffffff83f8ea40 [crypto]
100042 D crypto_ 0xfffffe0053effd30 [crypto returns 0]
100043 D crypto_ 0xfffffe0053effd80 [crypto returns 1]
13 0 0 0 DL (threaded) [geom]
100036 D - 0xffffffff83e1d000 [g_event]
100037 D - 0xffffffff83e1d020 [g_up]
100038 D - 0xffffffff83e1d040 [g_down]
2 0 0 0 WL (threaded) [clock]
100030 I [clock (0)]
100031 I [clock (1)]
12 0 0 0 RL (threaded) [intr]
100010 I [swi6: Giant taskq]
100017 I [swi5: fast taskq]
100020 I [swi6: task queue]
100029 Run CPU 0 [swi1: netisr 0]
100032 I [swi3: busdma]
100033 I [swi1: hpts]
100034 I [swi1: hpts]
100047 I [irq24: virtio_pci0]
100048 I [irq25: virtio_pci0]
100049 I [irq26: virtio_pci0]
100050 I [irq27: virtio_pci0]
100051 I [irq28: virtio_pci1]
100052 I [irq29: virtio_pci1]
100053 I [irq30: virtio_pci1]
100054 I [irq31: virtio_pci1]
100055 I [irq32: virtio_pci1]
100060 I [irq33: virtio_pci2]
100061 I [irq34: virtio_pci2]
100062 I [irq35: virtio_pci2]
100064 I [irq1: atkbd0]
100065 I [irq12: psm0]
100066 I [swi0: uart uart++]
100070 I [swi1: pf send]
11 0 0 0 RL (threaded) [idle]
100003 CanRun [idle: cpu0]
100004 CanRun [idle: cpu1]
1 0 1 0 SLs wait 0xfffffe0053ddc000 [init]
10 0 0 0 DL audit_w 0xffffffff83f8f540 [audit]
0 0 0 0 DLs (threaded) [kernel]
100000 D swapin 0xffffffff83e1da40 [swapper]
100005 D - 0xfffffe0007973100 [softirq_0]
100006 D - 0xfffffe0007973000 [softirq_1]
100007 D - 0xfffffe0007972e00 [if_io_tqg_0]
100008 D - 0xfffffe0007972d00 [if_io_tqg_1]
100009 D - 0xfffffe0007972c00 [if_config_tqg_0]
100011 D - 0xfffffe0007972a00 [aiod_kick taskq]
100012 D - 0xfffffe0007972900 [inm_free taskq]
100013 D - 0xfffffe0007972800 [linuxkpi_irq_wq]
100014 D - 0xfffffe0007972700 [in6m_free taskq]
100015 D - 0xfffffe0007972600 [deferred_unmount ta]
100016 D - 0xfffffe0007972500 [thread taskq]
100018 D - 0xfffffe0007972300 [pci_hp taskq]
100019 D - 0xfffffe0007972200 [kqueue_ctx taskq]
100021 D - 0xfffffe0007972000 [linuxkpi_short_wq_0]
100022 D - 0xfffffe0007972000 [linuxkpi_short_wq_1]
100023 D - 0xfffffe0007972000 [linuxkpi_short_wq_2]
100024 D - 0xfffffe0007972000 [linuxkpi_short_wq_3]
100025 D - 0xfffffe0007971e00 [linuxkpi_long_wq_0]
100026 D - 0xfffffe0007971e00 [linuxkpi_long_wq_1]
100027 D - 0xfffffe0007971e00 [linuxkpi_long_wq_2]
100028 D - 0xfffffe0007971e00 [linuxkpi_long_wq_3]
100035 D - 0xfffffe0053f31300 [firmware taskq]
100039 D - 0xfffffe0053f31100 [crypto_0]
100040 D - 0xfffffe0053f31100 [crypto_1]
100056 D - 0xfffffe0053f2e000 [vtnet0 rxq 0]
100057 D - 0xfffffe0007974e00 [vtnet0 txq 0]
100058 D - 0xfffffe0007974d00 [vtnet0 rxq 1]
100059 D - 0xfffffe0007974c00 [vtnet0 txq 1]
100063 D vtbslp 0xfffffe0057011800 [virtio_balloon]
100067 D - 0xffffffff82bcd321 [deadlkres]
100071 D - 0xfffffe0007973200 [mca taskq]
100072 D - 0xfffffe00574c3200 [acpi_task_0]
100073 D - 0xfffffe00574c3200 [acpi_task_1]
100074 D - 0xfffffe00574c3200 [acpi_task_2]
100076 D - 0xfffffe0053f30e00 [CAM taskq]
db> show all locks
Process 12 (intr) thread 0xfffffe0053ec4ac0 (100029)
exclusive sleep mutex sctp-tcb (tcb) r = 0 (0xfffffe0092f56180) locked @ /syzkaller/managers/main/kernel/sys/netinet/sctp_pcb.c:2138
db> show malloc
Type InUse MemUse Requests
pf_hash 5 11524K 5
tcp_hpts 7 4801K 7
devbuf 4217 4323K 4242
sysctloid 35322 2081K 35393
vtbuf 24 1968K 46
kobj 328 1312K 489
newblk 707 1201K 719
vfscache 3 1025K 3
pcb 29 548K 2546
inodedep 48 530K 71
ufs_quota 1 512K 1
vfs_hash 1 512K 1
callout 2 512K 2
intr 4 472K 4
acpica 1674 184K 57552
subproc 90 183K 1247
vnet_data 1 168K 1
tidhash 3 141K 3
vmem 3 138K 4
linker 358 134K 386
pagedep 14 132K 18
tfo_ccache 1 128K 1
sem 4 106K 4
DEVFS1 105 105K 114
bus 994 81K 5207
mtx_pool 2 72K 2
syncache 1 68K 1
module 513 65K 513
acpitask 1 64K 1
ddb_capture 1 64K 1
temp 17 33K 1606
kdtrace 159 33K 1316
hostcache 1 32K 1
shm 1 32K 1
DEVFS3 124 31K 134
umtx 242 31K 242
msg 4 30K 4
gtaskqueue 18 26K 18
kbdmux 6 22K 6
DEVFS_RULE 56 20K 56
BPF 10 18K 10
sctp_timw 70 18K 70
ufs_mount 4 17K 5
proc 3 17K 3
tty 16 16K 16
ithread 100 16K 100
bus-sc 34 15K 1681
KTRACE 100 13K 100
kenv 95 12K 95
eventhandler 134 12K 134
ifaddr 30 12K 32
rman 88 11K 431
GEOM 61 11K 490
routetbl 50 11K 176
CAM queue 5 11K 1528
cred 36 9K 234
bmsafemap 4 9K 40
UART 12 9K 12
devstat 4 9K 4
ksem 1 8K 1
rpc 2 8K 2
shmfd 1 8K 1
pfs_vncache 1 8K 1
pfs_nodes 20 8K 20
audit_evclass 237 8K 296
taskqueue 63 7K 63
sglist 5 7K 5
CAM DEV 3 6K 510
ufs_dirhash 24 5K 24
UMA 272 5K 272
dirrem 17 5K 28
plimit 17 5K 322
vt 11 5K 11
ifnet 3 5K 3
memdesc 1 4K 1
MCA 32 4K 32
filedesc 1 4K 1
evdev 4 4K 4
acpisem 28 4K 28
hhook 15 4K 17
ether_multi 40 4K 50
diradd 25 4K 36
lltable 11 4K 11
pf_ifnet 5 3K 6
in6_multi 25 3K 25
terminal 11 3K 11
sctp_atcl 7 3K 3344
kqueue 41 3K 1200
session 20 3K 31
pwddesc 40 3K 1198
uidinfo 3 3K 8
proc-args 63 3K 2138
local_apic 1 2K 1
io_apic 1 2K 1
fpukern_ctx 2 2K 2
ipsec-saq 2 2K 2
selfd 27 2K 16425
Unitno 27 2K 39
CAM XPT 22 2K 543
lockf 15 2K 22
msi 12 2K 12
ipsecpolicy 2 2K 2
acpidev 20 2K 20
clone 9 2K 9
sctp_stro 1 1K 836
softdep 1 1K 1
sahead 1 1K 1
secasvar 1 1K 1
vnodemarker 2 1K 10
NFSD session 1 1K 1
CAM periph 4 1K 271
select 7 1K 29
ipsec 3 1K 3
indirdep 3 1K 3
nhops 6 1K 6
toponodes 6 1K 6
isadev 6 1K 6
mount 16 1K 89
pci_link 10 1K 10
sctp_ifa 5 1K 6
crypto 4 1K 4
ip6ndp 4 1K 5
encap_export_host 12 1K 12
sctp_stri 1 1K 836
newdirblk 4 1K 8
mkdir 4 1K 16
in_multi 2 1K 4
pfil 4 1K 4
cdev 2 1K 2
chacha20random 1 1K 1
osd 7 1K 18
sctp_atky 9 1K 3762
inpcbpolicy 10 1K 139
sctp_ifn 2 1K 6
NFSD lckfile 1 1K 1
NFSD V4client 1 1K 1
DEVFSP 4 1K 9
DEVFS 9 1K 10
freework 1 1K 26
mld 2 1K 2
igmp 2 1K 2
vnodes 1 1K 1
CAM SIM 2 1K 2
feeder 7 1K 7
tcpfunc 3 1K 3
CC Mem 3 1K 7
loginclass 3 1K 7
prison 6 1K 6
lkpikmalloc 5 1K 6
aesni_data 2 1K 2
cryptodev 2 1K 49
nexusdev 8 1K 8
apmdev 1 1K 1
atkbddev 2 1K 2
CAM dev queue 2 1K 2
CAM I/O Scheduler 1 1K 1
CAM path 4 1K 1034
procdesc 1 1K 6
pmchooks 1 1K 1
sctp_athm 7 1K 3344
soname 4 1K 4725
filecaps 4 1K 66
tun 3 1K 3
sctp_vrf 1 1K 1
vnet 1 1K 1
entropy 2 1K 35
pmc 1 1K 1
acpiintr 1 1K 1
sctp_map 2 1K 1672
cpus 2 1K 2
vnet_data_free 1 1K 1
Per-cpu 1 1K 1
p1003.1b 1 1K 1
ipcomp 0 0K 0
esp 0 0K 0
ah 0 0K 0
mqdata 0 0K 0
tcp_do 0 0K 0
tcp_fsb 0 0K 0
filemon 0 0K 0
pf_table 0 0K 0
pf_rule 0 0K 0
pf_altq 0 0K 0
pf_osfp 0 0K 0
pf_temp 0 0K 0
sctp_mcore 0 0K 0
sctp_socko 0 0K 0
sctp_iter 0 0K 4
sctp_mvrf 0 0K 0
sctp_cpal 0 0K 0
sctp_cmsg 0 0K 0
sctp_stre 0 0K 0
sctp_athi 0 0K 0
sctp_a_it 0 0K 4
sctp_aadr 0 0K 0
NFSCL sockreq 0 0K 0
NFSCL devinfo 0 0K 0
madt_table 0 0K 2
smartpqi 0 0K 0
NFSCL flayout 0 0K 0
NFSCL layout 0 0K 0
NFSD rollback 0 0K 0
ixl 0 0K 0
NFSCL diroff 0 0K 0
NEWdirectio 0 0K 0
NEWNFSnode 0 0K 0
NFSCL lck 0 0K 0
NFSCL lckown 0 0K 0
NFSCL client 0 0K 0
NFSCL deleg 0 0K 0
ice-resmgr 0 0K 0
ice-osdep 0 0K 0
ice 0 0K 0
iavf 0 0K 0
axgbe 0 0K 0
NFSCL open 0 0K 0
NFSCL owner 0 0K 0
NFS fh 0 0K 0
NFS req 0 0K 0
NFSD usrgroup 0 0K 0
NFSD string 0 0K 0
NFSD V4lock 0 0K 0
NFSD V4state 0 0K 0
xen_intr 0 0K 0
NFSD srvcache 0 0K 0
msdosfs_fat 0 0K 0
xen_hvm 0 0K 0
legacydrv 0 0K 0
bounce 0 0K 0
busdma 0 0K 0
qpidrv 0 0K 0
msdosfs_mount 0 0K 0
msdosfs_node 0 0K 0
dmar_idpgtbl 0 0K 0
dmar_dom 0 0K 0
dmar_ctx 0 0K 0
isci 0 0K 0
iommu_dmamap 0 0K 0
DEVFS4 0 0K 0
hyperv_socket 0 0K 0
bxe_ilt 0 0K 0
xenbus 0 0K 0
DEVFS2 0 0K 0
gntdev 0 0K 0
vm_fictitious 0 0K 0
privcmd_dev 0 0K 0
evtchn_dev 0 0K 0
xenstore 0 0K 0
scsi_pass 0 0K 0
ciss_data 0 0K 0
xnb 0 0K 0
xen_acpi 0 0K 0
xbbd 0 0K 0
xbd 0 0K 0
Balloon 0 0K 0
sysmouse 0 0K 0
UMAHash 0 0K 0
vtfont 0 0K 0
vm_pgdata 0 0K 0
jblocks 0 0K 0
savedino 0 0K 15
sentinel 0 0K 0
jfsync 0 0K 0
jtrunc 0 0K 0
sbdep 0 0K 3
jsegdep 0 0K 0
jseg 0 0K 0
jfreefrag 0 0K 0
jfreeblk 0 0K 0
jnewblk 0 0K 0
jmvref 0 0K 0
jremref 0 0K 0
jaddref 0 0K 0
freedep 0 0K 0
freefile 0 0K 9
freeblks 0 0K 25
freefrag 0 0K 1
allocindir 0 0K 0
allocdirect 0 0K 0
ufs_trim 0 0K 0
mactemp 0 0K 0
audit_trigger 0 0K 0
audit_pipe_presel 0 0K 0
audit_pipeent 0 0K 0
audit_pipe 0 0K 0
audit_evname 0 0K 0
audit_bsm 0 0K 0
audit_gidset 0 0K 0
audit_text 0 0K 0
audit_path 0 0K 0
audit_data 0 0K 0
audit_cred 0 0K 0
BACKLIGHT 0 0K 0
ath_hal 0 0K 0
athdev 0 0K 0
ata_pci 0 0K 0
ata_dma 0 0K 0
ata_generic 0 0K 0
pvscsi 0 0K 0
scsi_da 0 0K 69
ata_da 0 0K 0
scsi_ch 0 0K 0
scsi_cd 0 0K 0
ktls_ocf 0 0K 0
AHCI driver 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5E_TLS_RX 0 0K 0
MLX5EEPROM 0 0K 0
MLX5E_TLS 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EN 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5DUMP 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
seq_file 0 0K 0
lkpiskb 0 0K 0
radix 0 0K 0
idr 0 0K 0
lkpindev 0 0K 0
lkpifw 0 0K 0
lkpi80211 0 0K 0
NLM 0 0K 0
ipsec-spdcache 0 0K 0
ipsec-reg 0 0K 0
ipsec-misc 0 0K 0
ipsecrequest 0 0K 0
ip6opt 0 0K 3
ip6_msource 0 0K 0
ip6_moptions 0 0K 0
in6_mfilter 0 0K 0
frag6 0 0K 0
tcplog 0 0K 0
tcp_hwpace 0 0K 0
USBdev 0 0K 0
USB 0 0K 0
LRO 0 0K 0
ip_msource 0 0K 0
ip_moptions 0 0K 0
in_mfilter 0 0K 0
ipid 0 0K 0
80211scan 0 0K 0
80211ratectl 0 0K 0
80211power 0 0K 0
80211nodeie 0 0K 0
80211node 0 0K 0
80211mesh_gt 0 0K 0
80211mesh_rt 0 0K 0
80211perr 0 0K 0
80211prep 0 0K 0
80211preq 0 0K 0
80211dfs 0 0K 0
80211crypto 0 0K 0
80211vap 0 0K 0
iflib 0 0K 0
vlan 0 0K 0
gif 0 0K 0
ifdescr 0 0K 0
zlib 0 0K 0
fadvise 0 0K 0
VN POLL 0 0K 0
agp 0 0K 0
statfs 0 0K 195
namei_tracker 0 0K 0
export_host 0 0K 0
cl_savebuf 0 0K 4
nvme_da 0 0K 0
acpipwr 0 0K 0
acpi_perf 0 0K 0
twsbuf 0 0K 0
twe_commands 0 0K 0
tcp_log_dev 0 0K 0
midi buffers 0 0K 0
mixer 0 0K 0
ac97 0 0K 0
hdacc 0 0K 0
hdac 0 0K 0
hdaa 0 0K 0
acpicmbat 0 0K 0
SIIS driver 0 0K 0
CAM CCB 0 0K 523
biobuf 0 0K 0
aios 0 0K 0
lio 0 0K 0
acl 0 0K 0
mbuf_tag 0 0K 27
ktls 0 0K 0
PUC 0 0K 0
ppbusdev 0 0K 0
agtiapi_MemAlloc malloc 0 0K 0
osti_cacheable 0 0K 0
tempbuff 0 0K 0
tempbuff 0 0K 0
ag_tgt_map_t malloc 0 0K 0
ag_slr_map_t malloc 0 0K 0
lDevFlags * malloc 0 0K 0
tiDeviceHandle_t * malloc 0 0K 0
ag_portal_data_t malloc 0 0K 0
ag_device_t malloc 0 0K 0
STLock malloc 0 0K 0
CCB List 0 0K 0
sr_iov 0 0K 0
OCS 0 0K 0
OCS 0 0K 0
nvme 0 0K 0
nvd 0 0K 0
netmap 0 0K 0
mwldev 0 0K 0
MVS driver 0 0K 0
CAM ccb queue 0 0K 0
accf 0 0K 0
pts 0 0K 0
iov 0 0K 14046
ioctlops 0 0K 86
eventfd 0 0K 0
Witness 0 0K 0
stack 0 0K 0
mrsasbuf 0 0K 0
mpt_user 0 0K 0
mps_user 0 0K 0
MPSSAS 0 0K 0
mps 0 0K 0
sbuf 0 0K 288
mpr_user 0 0K 0
firmware 0 0K 0
compressor 0 0K 0
MPRSAS 0 0K 0
SWAP 0 0K 0
mpr 0 0K 0
mfibuf 0 0K 0
sysctltmp 0 0K 658
sysctl 0 0K 3
md_sectors 0 0K 0
ekcd 0 0K 0
dumper 0 0K 0
sendfile 0 0K 0
rctl 0 0K 0
md_disk 0 0K 0
malodev 0 0K 0
LED 0 0K 0
ix_sriov 0 0K 0
cache 0 0K 0
aacraidcam 0 0K 0
kcovinfo 0 0K 0
prison_racct 0 0K 0
Fail Points 0 0K 0
sigio 0 0K 1
filedesc_to_leader 0 0K 0
pwd 0 0K 0
tty console 0 0K 0
ix 0 0K 0
ipsbuf 0 0K 0
aacraid_buf 0 0K 0
aaccam 0 0K 0
boottrace 0 0K 0
aacbuf 0 0K 0
zstd 0 0K 0
XZ_DEC 0 0K 0
nvlist 0 0K 0
SCSI ENC 0 0K 0
SCSI sa 0 0K 0
isofs_node 0 0K 0
isofs_mount 0 0K 0
tr_raid5_data 0 0K 0
tr_raid1e_data 0 0K 0
tr_raid1_data 0 0K 0
tr_raid0_data 0 0K 0
tr_concat_data 0 0K 0
md_sii_data 0 0K 0
md_promise_data 0 0K 0
md_nvidia_data 0 0K 0
md_jmicron_data 0 0K 0
md_intel_data 0 0K 0
md_ddf_data 0 0K 0
raid_data 0 0K 72
geom_flashmap 0 0K 0
tmpfs dir 0 0K 0
tmpfs name 0 0K 0
tmpfs mount 0 0K 0
NFS FHA 0 0K 0
newnfsmnt 0 0K 0
newnfsclient_req 0 0K 0
NFSCL layrecall 0 0K 0
NFSCL session 0 0K 0
db> show uma
Zone Size Used Free Requests Sleeps Bucket Total Mem XFree
mbuf_jumbo_page 4096 8320 1078 14727 0 254 38494208 0
mbuf 256 8579 1083 29867 0 254 2473472 0
pbuf 2624 0 794 0 0 2 2083456 0
BUF TRIE 144 185 11603 500 0 62 1697472 0
malloc-384 384 4165 5 4165 0 30 1601280 0
malloc-4096 4096 370 2 1773 0 2 1523712 0
malloc-128 128 11636 82 11642 0 126 1499904 0
UMA Slabs 0 112 10595 19 10595 0 126 1188768 0
sctp_asoc 2256 1 509 836 0 254 1150560 0
mbuf_cluster 2048 508 0 508 0 254 1040384 0
vmem btag 56 16545 126 16545 0 254 933576 0
sctp_ep 1208 6 504 1254 0 254 616080 0
FFS inode 1160 499 19 508 0 8 600880 0
tcpcb 1104 3 508 7 0 254 564144 0
RADIX NODE 144 3346 205 24612 0 62 511344 0
socket 960 20 488 2589 0 254 487680 0
VM OBJECT 264 1418 82 27797 0 30 396000 0
lkpicurr 168 2 2350 2 0 62 395136 0
lkpimm 168 1 2327 1 0 62 391104 0
sctp_raddr 736 1 516 836 0 254 380512 0
malloc-65536 65536 5 0 5 0 1 327680 0
256 Bucket 2048 147 5 1024 0 8 311296 0
malloc-64 64 3866 229 3868 0 254 262080 0
VNODE 448 529 47 540 0 30 258048 0
malloc-16 16 14608 392 14668 0 254 240000 0
DEVCTL 1024 0 220 126 0 0 225280 0
THREAD 1808 117 4 117 0 8 218768 0
malloc-256 256 747 63 852 0 62 207360 0
malloc-65536 65536 3 0 3 0 1 196608 0
malloc-128 128 1324 195 27484 0 126 194432 0
MAP ENTRY 96 1580 436 92704 0 126 193536 0
UMA Zones 768 244 0 244 0 16 187392 0
malloc-32 32 5323 347 5332 0 254 181440 0
malloc-2048 2048 14 74 2536 0 8 180224 0
FFS2 dinode 256 499 71 508 0 62 145920 0
malloc-65536 65536 0 2 46 0 1 131072 0
malloc-65536 65536 0 2 144 0 1 131072 0
malloc-1024 1024 116 12 282 0 16 131072 0
unpcb 256 7 503 1179 0 254 130560 0
mbuf_packet 256 2 506 2928 0 254 130048 0
S VFS Cache 104 966 204 1007 0 126 121680 0
FPU_save_area 832 119 25 132 0 16 119808 0
ksiginfo 112 39 1005 55 0 126 116928 0
malloc-128 128 564 211 3870 0 126 99200 0
malloc-128 128 626 149 1164 0 126 99200 0
malloc-256 256 299 76 2173 0 62 96000 0
UMA Kegs 384 230 3 230 0 30 89472 0
128 Bucket 1024 45 38 478 0 16 84992 0
malloc-64 64 771 552 19093 0 254 84672 0
VMSPACE 2552 24 9 1182 0 4 84216 0
sctp_readq 152 1 519 418 0 254 79040 0
sctp_chunk 152 2 518 1672 0 254 79040 0
filedesc0 1072 41 29 1198 0 8 75040 0
malloc-8192 8192 9 0 9 0 1 73728 0
malloc-8192 8192 7 2 110 0 1 73728 0
64 Bucket 512 65 71 1869 0 30 69632 0
malloc-64 64 570 501 4507 0 254 68544 0
malloc-65536 65536 1 0 1 0 1 65536 0
malloc-32768 32768 0 2 120 0 1 65536 0
malloc-32768 32768 2 0 2 0 1 65536 0
malloc-16384 16384 4 0 4 0 1 65536 0
malloc-4096 4096 15 1 26 0 2 65536 0
malloc-1024 1024 21 43 546 0 16 65536 0
malloc-256 256 191 64 847 0 62 65280 0
PROC 1352 40 8 1197 0 8 64896 0
g_bio 408 0 150 4518 0 30 61200 0
sctp_stream_msg_out 112 0 540 799 0 254 60480 0
udp_inpcb 424 6 120 128 0 30 53424 0
32 Bucket 256 67 128 6988 0 62 49920 0
DIRHASH 1024 35 13 35 0 16 49152 0
NAMEI 1024 0 48 12227 0 16 49152 0
malloc-16384 16384 1 2 161 0 1 49152 0
malloc-4096 4096 10 2 553 0 2 49152 0
malloc-1024 1024 19 29 887 0 16 49152 0
malloc-1024 1024 3 45 842 0 16 49152 0
malloc-384 384 58 62 3735 0 30 46080 0
syncache 168 0 264 5 0 254 44352 0
clpbuf 2624 0 16 22 0 16 41984 0
Mountpoints 2752 2 12 2 0 4 38528 0
pcpu-8 8 4221 387 4249 0 254 36864 0
malloc-64 64 32 535 13602 0 254 36288 0
malloc-64 64 26 541 42 0 254 36288 0
malloc-64 64 116 451 141 0 254 36288 0
malloc-64 64 10 557 42 0 254 36288 0
malloc-64 64 48 519 1206 0 254 36288 0
malloc-128 128 28 251 157 0 126 35712 0
malloc-128 128 1 278 11 0 126 35712 0
malloc-128 128 95 184 492 0 126 35712 0
malloc-128 128 20 259 25 0 126 35712 0
routing nhops 256 10 125 17 0 62 34560 0
ttyoutq 256 72 63 160 0 62 34560 0
malloc-384 384 47 43 89 0 30 34560 0
malloc-256 256 23 112 863 0 62 34560 0
malloc-256 256 2 133 52 0 62 34560 0
malloc-256 256 6 129 288 0 62 34560 0
malloc-256 256 70 65 476 0 62 34560 0
malloc-256 256 35 100 40 0 62 34560 0
malloc-32768 32768 1 0 1 0 1 32768 0
malloc-16384 16384 2 0 17 0 1 32768 0
malloc-8192 8192 4 0 4 0 1 32768 0
malloc-2048 2048 11 5 12 0 8 32768 0
malloc-2048 2048 1 15 25 0 8 32768 0
malloc-2048 2048 2 14 11 0 8 32768 0
malloc-1024 1024 2 30 45 0 16 32768 0
malloc-1024 1024 4 28 5 0 16 32768 0
malloc-1024 1024 3 29 7 0 16 32768 0
malloc-512 512 0 64 118 0 30 32768 0
malloc-512 512 2 62 2 0 30 32768 0
malloc-512 512 3 61 11 0 30 32768 0
malloc-512 512 0 64 9 0 30 32768 0
malloc-512 512 10 54 60 0 30 32768 0
malloc-512 512 1 63 837 0 30 32768 0
malloc-512 512 3 61 3 0 30 32768 0
pcpu-64 64 493 19 493 0 254 32768 0
ttyinq 160 135 65 300 0 62 32000 0
cpuset 104 7 272 7 0 126 29016 0
sctp_laddr 48 2 586 840 0 254 28224 0
malloc-32 32 383 499 6565 0 254 28224 0
16 Bucket 144 50 146 241 0 62 28224 0
4 Bucket 48 6 582 58 0 254 28224 0
tcp_inpcb 424 3 60 7 0 30 26712 0
da_ccb 544 0 49 1250 0 16 26656 0
pipe 744 7 28 284 0 16 26040 0
TURNSTILE 136 122 67 122 0 62 25704 0
malloc-8192 8192 3 0 3 0 1 24576 0
malloc-4096 4096 6 0 6 0 2 24576 0
rtentry 176 13 125 17 0 62 24288 0
PGRP 88 20 256 31 0 126 24288 0
ertt_txseginfo 40 0 606 662 0 254 24240 0
rl_entry 40 32 574 32 0 254 24240 0
Files 80 73 227 7834 0 126 24000 0
8 Bucket 80 40 260 289 0 126 24000 0
malloc-384 384 10 50 13 0 30 23040 0
malloc-384 384 54 6 64 0 30 23040 0
SLEEPQUEUE 88 122 134 122 0 126 22528 0
hostcache 64 1 314 1 0 254 20160 0
udpcb 32 6 624 128 0 254 20160 0
udp_inpcb ports 32 3 627 40 0 254 20160 0
ertt 72 3 277 7 0 126 20160 0
PWD 32 10 620 100 0 254 20160 0
malloc-32 32 35 595 613 0 254 20160 0
malloc-32 32 7 623 60 0 254 20160 0
malloc-32 32 133 497 2646 0 254 20160 0
malloc-32 32 31 599 56 0 254 20160 0
malloc-32 32 29 601 31 0 254 20160 0
malloc-32 32 7 623 10 0 254 20160 0
2 Bucket 32 42 588 288 0 254 20160 0
epoch_record pcpu 256 4 60 4 0 62 16384 0
malloc-8192 8192 0 2 28 0 1 16384 0
malloc-8192 8192 2 0 2 0 1 16384 0
malloc-4096 4096 1 3 197 0 2 16384 0
malloc-2048 2048 0 8 12 0 8 16384 0
malloc-2048 2048 3 5 3 0 8 16384 0
malloc-2048 2048 2 6 2 0 8 16384 0
malloc-2048 2048 3 5 3 0 8 16384 0
malloc-1024 1024 1 15 1 0 16 16384 0
SMR CPU 32 7 504 7 0 254 16352 0
malloc-16 16 510 490 3505 0 254 16000 0
kenv 258 15 45 1037 0 30 15480 0
ripcb 424 1 35 4 0 30 15264 0
mqnode 416 3 33 3 0 30 14976 0
vmem 1856 1 7 1 0 8 14848 0
SMR SHARED 24 7 504 7 0 254 12264 0
tcp_inpcb ports 32 1 377 1 0 254 12096 0
vtnet_tx_hdr 24 0 501 2426 0 254 12024 0
KNOTE 160 0 75 8 0 62 12000 0
malloc-16 16 46 704 1356 0 254 12000 0
malloc-16 16 9 741 14 0 254 12000 0
malloc-16 16 16 734 65 0 254 12000 0
malloc-16 16 51 699 28164 0 254 12000 0
malloc-16 16 13 737 3352 0 254 12000 0
malloc-384 384 0 30 1 0 30 11520 0
malloc-384 384 11 19 11 0 30 11520 0
malloc-8192 8192 1 0 1 0 1 8192 0
malloc-4096 4096 0 2 2 0 2 8192 0
malloc-4096 4096 0 2 1 0 2 8192 0
pcpu-16 16 14 498 14 0 254 8192 0
malloc-16 16 0 500 2 0 254 8000 0
UMA Slabs 1 176 8 14 8 0 62 3872 0
KMAP ENTRY 96 12 27 14 0 0 3744 0
FFS1 dinode 128 0 0 0 0 126 0 0
ada_ccb 272 0 0 0 0 30 0 0
swblk 136 0 0 0 0 62 0 0
swpctrie 144 0 0 0 0 62 0 0
cdg_qdiffsample 16 0 0 0 0 254 0 0
pf state scrubs 40 0 0 0 0 254 0 0
pf frag entries 40 0 0 0 0 254 0 0
pf frags 248 0 0 0 0 62 0 0
pf table entries 160 0 0 0 0 254 0 0
pf table entry counters 64 0 0 0 0 254 0 0
pf source nodes 136 0 0 0 0 254 0 0
pf state keys 88 0 0 0 0 126 0 0
pf states 312 0 0 0 0 254 0 0
pf tags 104 0 0 0 0 126 0 0
pf mtags 56 0 0 0 0 254 0 0
tcp_bbr_pcb 832 0 0 0 0 16 0 0
tcp_bbr_map 128 0 0 0 0 126 0 0
tcp_rack_pcb 896 0 0 0 0 16 0 0
tcp_rack_map 120 0 0 0 0 126 0 0
ipq 56 0 0 0 0 254 0 0
tfo_ccache_entries 80 0 0 0 0 126 0 0
tfo 4 0 0 0 0 254 0 0
sackhole 32 0 0 0 0 254 0 0
tcptw 72 0 0 0 0 254 0 0
sctp_asconf_ack 48 0 0 0 0 254 0 0
sctp_asconf 40 0 0 0 0 254 0 0
tcp_log_id_node 120 0 0 0 0 126 0 0
tcp_log_id_bucket 176 0 0 0 0 62 0 0
tcp_log 416 0 0 0 0 254 0 0
tcpreass 48 0 0 0 0 254 0 0
ripcb ports 32 0 0 0 0 254 0 0
udplite_inpcb ports 32 0 0 0 0 254 0 0
udplite_inpcb 424 0 0 0 0 30 0 0
IPsec SA lft_c 16 0 0 0 0 254 0 0
itimer 352 0 0 0 0 30 0 0
AIOLIO 272 0 0 0 0 30 0 0
AIOCB 552 0 0 0 0 16 0 0
AIOP 32 0 0 0 0 254 0 0
AIO 208 0 0 0 0 62 0 0
mqnotifier 216 0 0 0 0 62 0 0
mvdata 64 0 0 0 0 254 0 0
mqueue 248 0 0 0 0 62 0 0
TMPFS node 224 0 0 0 0 62 0 0
NCLNODE 608 0 0 0 0 16 0 0
LTS VFS Cache 360 0 0 0 0 30 0 0
L VFS Cache 320 0 0 0 0 30 0 0
STS VFS Cache 144 0 0 0 0 62 0 0
cryptop 280 0 0 0 0 30 0 0
linux_dma_object 32 0 0 0 0 254 0 0
linux_dma_pctrie 144 0 0 0 0 62 0 0
IOMMU_MAP_ENTRY 120 0 0 0 0 126 0 0
mbuf_jumbo_16k 16384 0 0 0 0 254 0 0
mbuf_jumbo_9k 9216 0 0 0 0 254 0 0
audit_record 1280 0 0 0 0 8 0 0
domainset 40 0 0 0 0 254 0 0
MAC labels 40 0 0 0 0 254 0 0
vnpbuf 2624 0 0 0 0 64 0 0
mdpbuf 2624 0 0 0 0 3 0 0
nfspbuf 2624 0 0 0 0 16 0 0
swwbuf 2624 0 0 0 0 8 0 0
swrbuf 2624 0 0 0 0 16 0 0
Reply all
Reply to author
Forward
0 new messages