panic: hold_tcblock is false
0 views
Skip to first unread message
syzbot
Feb 19, 2022, 9:13:19 PM2/19/22
to syzkaller-f...@googlegroups.com
Hello,
syzbot found the following issue on:
HEAD commit: a4a31271cc7a sctp: cleanup sctp_lower_sosend
git tree: freebsd-src
console output: https://syzkaller.appspot.com/x/log.txt?x=120ab08e700000
dashboard link: https://syzkaller.appspot.com/bug?extid=cd3c1dd64861b8c200bd
Unfortunately, I don't have any reproducer for this issue yet.
IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+cd3c1d...@syzkaller.appspotmail.com
panic: hold_tcblock is false
cpuid = 1
time = 1645323166
KDB: stack backtrace:
db_trace_self_wrapper() at db_trace_self_wrapper+0xc7/frame 0xfffffe008fddd050
kdb_backtrace() at kdb_backtrace+0xd3/frame 0xfffffe008fddd1b0
vpanic() at vpanic+0x2b8/frame 0xfffffe008fddd290
panic() at panic+0xb5/frame 0xfffffe008fddd350
sctp_lower_sosend() at sctp_lower_sosend+0x5976/frame 0xfffffe008fddd740
sctp_sosend() at sctp_sosend+0x72c/frame 0xfffffe008fddd9e0
sosend() at sosend+0xfc/frame 0xfffffe008fddda50
kern_sendit() at kern_sendit+0x58a/frame 0xfffffe008fdddbc0
sendit() at sendit+0x2b0/frame 0xfffffe008fdddc10
sys_sendto() at sys_sendto+0x182/frame 0xfffffe008fdddd30
amd64_syscall() at amd64_syscall+0x40c/frame 0xfffffe008fdddf30
fast_syscall_common() at fast_syscall_common+0xf8/frame 0xfffffe008fdddf30
--- syscall (198, FreeBSD ELF64, nosys), rip = 0x28a42a, rsp = 0x831151f08, rbp = 0x831151f70 ---
KDB: enter: panic
[ thread pid 1330 tid 100654 ]
Stopped at kdb_enter+0x6b: movq $0,0x2708c3a(%rip)
db>
db> set $lines = 0
db> set $maxwidth = 0
db> show registers
cs 0x20
ds 0x3b
es 0x3b
fs 0x13
gs 0x1b
ss 0x28
rax 0x12
rcx 0x6f5333bd6cd2062d
rdx 0x3ffff
rbx 0
rsp 0xfffffe008fddd190
rbp 0xfffffe008fddd1b0
rsi 0x40001
rdi 0xffffffff817721da vprintf+0x35a
r8 0
r9 0xffffffff
r10 0
r11 0xfffffe0092d84e10
r12 0xfffffe0092d84900
r13 0xfffffe008fddd201
r14 0xffffffff82ba1cc0 .str.18
r15 0xffffffff82ba1cc0 .str.18
rip 0xffffffff8176575b kdb_enter+0x6b
rflags 0x46
kdb_enter+0x6b: movq $0,0x2708c3a(%rip)
db> show proc
Process 1330 (syz-executor.1) at 0xfffffe009274a548:
state: NORMAL
uid: 0 gids: 0, 0, 5
parent: pid 777 at 0xfffffe008fe8fa90
ABI: FreeBSD ELF64
flag: 0x10000080 flag2: 0
arguments: /root/syz-executor.1 exec
reaper: 0xfffffe0053dda000 reapsubtree: 1
sigparent: 20
vmspace: 0xfffffe00996013f0
(map 0xfffffe00996013f0)
(map.pmap 0xfffffe00996014b0)
(pmap 0xfffffe0099601518)
threads: 2
100116 RunQ syz-executor.1
100654 Run CPU 1 syz-executor.1
db> ps
pid ppid pgrp uid state wmesg wchan cmd
1330 777 777 0 R (threaded) syz-executor.1
100116 RunQ syz-executor.1
100654 Run CPU 1 syz-executor.1
1329 779 779 0 R (threaded) syz-executor.2
100095 RunQ syz-executor.2
100653 S connec 0xfffffe008fe7285a syz-executor.2
100655 RunQ syz-executor.2
1328 776 776 0 R (threaded) syz-executor.0
100602 RunQ syz-executor.0
100652 S uwait 0xfffffe008feb3600 syz-executor.0
1271 0 0 0 DL aiordy 0xfffffe0056f7a000 [aiod4]
1270 0 0 0 DL aiordy 0xfffffe0092dd5a90 [aiod3]
1269 0 0 0 DL aiordy 0xfffffe0092dd4a90 [aiod2]
1268 0 0 0 DL aiordy 0xfffffe0058c31000 [aiod1]
1081 1072 1081 0 Ss select 0xfffffe0057446c40 dhclient
1078 1 1078 0 Ss select 0xfffffe008feb2340 dhclient
1072 1038 430 65 S select 0xfffffe008feb22c0 dhclient
1038 430 430 0 S wait 0xfffffe0092749000 sh
787 774 787 0 Rs CPU 0 syz-executor.3
779 774 779 0 Ss nanslp 0xffffffff83e3ba80 syz-executor.2
777 774 777 0 Ss nanslp 0xffffffff83e3ba80 syz-executor.1
776 774 776 0 Rs syz-executor.0
774 772 772 0 S (threaded) syz-fuzzer
100101 S uwait 0xfffffe0057443400 syz-fuzzer
100121 S uwait 0xfffffe0057877880 syz-fuzzer
100122 S uwait 0xfffffe0057877980 syz-fuzzer
100123 S uwait 0xfffffe0057877a80 syz-fuzzer
100124 S uwait 0xfffffe008feb3900 syz-fuzzer
100125 S uwait 0xfffffe008feb3a00 syz-fuzzer
100126 S kqread 0xfffffe005787c100 syz-fuzzer
100127 S uwait 0xfffffe008feb3c00 syz-fuzzer
100130 S uwait 0xfffffe0057877480 syz-fuzzer
772 770 772 0 Ss pause 0xfffffe0056f790b0 csh
770 688 770 0 Ss select 0xfffffe008feb3d40 sshd
754 1 754 0 Ss+ ttyin 0xfffffe0057466cb0 getty
753 1 753 0 Ss+ ttyin 0xfffffe00579aa0b0 getty
752 1 752 0 Ss+ ttyin 0xfffffe00579aa4b0 getty
751 1 751 0 Ss+ ttyin 0xfffffe00574658b0 getty
750 1 750 0 Ss+ ttyin 0xfffffe00579aa8b0 getty
749 1 749 0 Ss+ ttyin 0xfffffe00579aacb0 getty
748 1 748 0 Ss+ ttyin 0xfffffe0057465cb0 getty
747 1 747 0 Ss+ ttyin 0xfffffe00579ab0b0 getty
746 1 746 0 Ss+ ttyin 0xfffffe00579ab4b0 getty
744 1 18 0 S+ piperd 0xfffffe0058b67000 logger
743 742 18 0 S+ nanslp 0xffffffff83e3ba80 sleep
742 1 18 0 S+ wait 0xfffffe0056f7b548 sh
692 1 692 0 Ss nanslp 0xffffffff83e3ba80 cron
688 1 688 0 Ss select 0xfffffe008feb41c0 sshd
501 1 501 0 Ss select 0xfffffe008feb4640 syslogd
430 1 430 0 Ss wait 0xfffffe0058c30000 devd
429 1 429 65 Ss select 0xfffffe008feb45c0 dhclient
344 1 344 0 Ss select 0xfffffe0057878640 dhclient
341 1 341 0 Ss select 0xfffffe0057878540 dhclient
17 0 0 0 DL syncer 0xffffffff83f61260 [syncer]
16 0 0 0 DL vlruwt 0xfffffe0056f7aa90 [vnlru]
15 0 0 0 DL (threaded) [bufdaemon]
100080 D psleep 0xffffffff83f5f860 [bufdaemon]
100083 D - 0xffffffff83211f80 [bufspacedaemon-0]
100093 D sdflush 0xfffffe00574650e8 [/ worker]
9 0 0 0 DL psleep 0xffffffff83f932c0 [vmdaemon]
8 0 0 0 RL (threaded) [pagedaemon]
100078 RunQ [dom0]
100081 D launds 0xffffffff83f87184 [laundry: dom0]
100082 D umarcl 0xffffffff81e9b4a0 [uma]
7 0 0 0 DL - 0xffffffff83bf7a08 [rand_harvestq]
6 0 0 0 DL pftm 0xffffffff848b1530 [pf purge]
5 0 0 0 DL waiting 0xffffffff84689560 [sctp_iterator]
4 0 0 0 DL (threaded) [cam]
100045 D - 0xffffffff83a99940 [doneq0]
100046 D - 0xffffffff83a998c0 [async]
100077 D - 0xffffffff83a99740 [scanner]
14 0 0 0 DL seqstat 0xfffffe0053f88c88 [sequencer 00]
3 0 0 0 DL (threaded) [crypto]
100041 D crypto_ 0xffffffff83f829a0 [crypto]
100042 D crypto_ 0xfffffe0053c8ad30 [crypto returns 0]
100043 D crypto_ 0xfffffe0053c8ad80 [crypto returns 1]
13 0 0 0 DL (threaded) [geom]
100036 D - 0xffffffff83e111c0 [g_event]
100037 D - 0xffffffff83e111e0 [g_up]
100038 D - 0xffffffff83e11200 [g_down]
2 0 0 0 WL (threaded) [clock]
100030 I [clock (0)]
100031 I [clock (1)]
12 0 0 0 WL (threaded) [intr]
100010 I [swi6: task queue]
100011 I [swi6: Giant taskq]
100018 I [swi5: fast taskq]
100029 I [swi1: netisr 0]
100032 I [swi3: busdma]
100033 I [swi1: hpts]
100034 I [swi1: hpts]
100047 I [irq24: virtio_pci0]
100048 I [irq25: virtio_pci0]
100049 I [irq26: virtio_pci0]
100050 I [irq27: virtio_pci0]
100051 I [irq28: virtio_pci1]
100052 I [irq29: virtio_pci1]
100053 I [irq30: virtio_pci1]
100054 I [irq31: virtio_pci1]
100055 I [irq32: virtio_pci1]
100060 I [irq33: virtio_pci2]
100061 I [irq34: virtio_pci2]
100062 I [irq35: virtio_pci2]
100064 I [irq1: atkbd0]
100065 I [irq12: psm0]
100066 I [swi0: uart uart++]
100070 I [swi1: pf send]
11 0 0 0 RL (threaded) [idle]
100003 CanRun [idle: cpu0]
100004 CanRun [idle: cpu1]
1 0 1 0 SLs wait 0xfffffe0053dda000 [init]
10 0 0 0 DL audit_w 0xffffffff83f834a0 [audit]
0 0 0 0 DLs (threaded) [kernel]
100000 D swapin 0xffffffff83e11c00 [swapper]
100005 D - 0xfffffe0053e01000 [if_config_tqg_0]
100006 D - 0xfffffe0053e00e00 [softirq_0]
100007 D - 0xfffffe0053e00d00 [softirq_1]
100008 D - 0xfffffe0053e00c00 [if_io_tqg_0]
100009 D - 0xfffffe0053e00b00 [if_io_tqg_1]
100012 D - 0xfffffe000796d200 [aiod_kick taskq]
100013 D - 0xfffffe000796d000 [inm_free taskq]
100014 D - 0xfffffe000796cd00 [linuxkpi_irq_wq]
100015 D - 0xfffffe000796cb00 [in6m_free taskq]
100016 D - 0xfffffe000796c900 [deferred_unmount ta]
100017 D - 0xfffffe000796c700 [thread taskq]
100019 D - 0xfffffe000796c300 [kqueue_ctx taskq]
100020 D - 0xfffffe000796c100 [pci_hp taskq]
100021 D - 0xfffffe000796be00 [linuxkpi_short_wq_0]
100022 D - 0xfffffe000796be00 [linuxkpi_short_wq_1]
100023 D - 0xfffffe000796be00 [linuxkpi_short_wq_2]
100024 D - 0xfffffe000796be00 [linuxkpi_short_wq_3]
100025 D - 0xfffffe000796b900 [linuxkpi_long_wq_0]
100026 D - 0xfffffe000796b900 [linuxkpi_long_wq_1]
100027 D - 0xfffffe000796b900 [linuxkpi_long_wq_2]
100028 D - 0xfffffe000796b900 [linuxkpi_long_wq_3]
100035 D - 0xfffffe0053ed0200 [firmware taskq]
100039 D - 0xfffffe0053ecfc00 [crypto_0]
100040 D - 0xfffffe0053ecfc00 [crypto_1]
100056 D - 0xfffffe0053eced00 [vtnet0 rxq 0]
100057 D - 0xfffffe0053ecec00 [vtnet0 txq 0]
100058 D - 0xfffffe0053eceb00 [vtnet0 rxq 1]
100059 D - 0xfffffe0053ecea00 [vtnet0 txq 1]
100063 D vtbslp 0xfffffe0053fde400 [virtio_balloon]
100067 D - 0xffffffff82ba77a1 [deadlkres]
100071 D - 0xfffffe005787d100 [acpi_task_0]
100072 D - 0xfffffe005787d100 [acpi_task_1]
100073 D - 0xfffffe005787d100 [acpi_task_2]
100074 D - 0xfffffe000796e200 [mca taskq]
100076 D - 0xfffffe0053ecf500 [CAM taskq]
db> show all locks
Process 787 (syz-executor.3) thread 0xfffffe009273a1e0 (100115)
exclusive lockmgr bufwait (bufwait) r = 0 (0xfffffe0007aa5768) locked @ /syzkaller/managers/main/kernel/sys/kern/vfs_bio.c:3984
exclusive lockmgr bufwait (bufwait) r = 0 (0xfffffe0007aa5f90) locked @ /syzkaller/managers/main/kernel/sys/kern/vfs_bio.c:3984
exclusive lockmgr ufs (ufs) r = 1 (0xfffffe0099874af0) locked @ /syzkaller/managers/main/kernel/sys/kern/vfs_subr.c:2993
exclusive lockmgr ufs (ufs) r = 0 (0xfffffe009268d070) locked @ /syzkaller/managers/main/kernel/sys/kern/vfs_cache.c:4500
db> show malloc
Type InUse MemUse Requests
pf_hash 5 11524K 5
tcp_hpts 6 4801K 6
devbuf 4217 4323K 4242
sysctloid 35306 2080K 35377
vtbuf 24 1968K 46
kobj 326 1304K 487
newblk 611 1177K 1060
vfscache 3 1025K 3
inodedep 428 673K 561
pcb 37 555K 1385
ufs_quota 1 512K 1
vfs_hash 1 512K 1
callout 2 512K 2
intr 4 472K 4
vmem 3 274K 6
subproc 122 246K 1398
acpica 1674 184K 56396
vnet_data 1 168K 1
tidhash 3 141K 3
pagedep 26 135K 445
linker 358 134K 386
tfo_ccache 1 128K 1
filedesc 16 121K 897
DEVFS1 109 109K 126
sem 4 106K 4
dirrem 375 94K 482
bus 988 81K 3441
mtx_pool 2 72K 2
syncache 1 68K 1
acpitask 1 64K 1
ddb_capture 1 64K 1
module 511 64K 511
freefile 358 45K 462
umtx 330 42K 330
kdtrace 201 40K 1987
BPF 22 36K 22
temp 34 33K 1984
DEVFS3 128 32K 138
hostcache 1 32K 1
shm 1 32K 1
msg 4 30K 4
gtaskqueue 18 26K 18
kbdmux 6 22K 6
DEVFS_RULE 56 20K 56
ifaddr 67 19K 69
ufs_mount 4 17K 5
proc 3 17K 3
tty 16 16K 16
ithread 100 16K 100
routetbl 130 16K 410
pf_rule 14 15K 14
bus-sc 34 15K 1651
lltable 44 14K 44
KTRACE 100 13K 100
ifnet 7 13K 7
ether_multi 152 13K 162
kenv 95 12K 95
eventhandler 133 12K 133
rman 88 11K 429
GEOM 61 11K 489
CAM queue 5 11K 1528
in6_multi 65 9K 65
bmsafemap 3 9K 525
UART 12 9K 12
devstat 4 9K 4
ksem 1 8K 1
sctp_timw 32 8K 32
rpc 2 8K 2
shmfd 1 8K 1
pfs_vncache 1 8K 1
pfs_nodes 20 8K 20
audit_evclass 237 8K 296
taskqueue 63 7K 63
cred 25 7K 204
sglist 5 7K 5
diradd 48 6K 514
CAM DEV 3 6K 510
kqueue 57 6K 1337
sctp_atcl 15 6K 968
plimit 22 6K 348
pf_ifnet 12 5K 36
ufs_dirhash 24 5K 24
UMA 272 5K 272
vt 11 5K 11
sctp_stro 4 4K 252
memdesc 1 4K 1
MCA 32 4K 32
evdev 4 4K 4
DEVFSP 62 4K 110
acpisem 28 4K 28
pwddesc 55 4K 1353
hhook 15 4K 17
mkdir 26 4K 868
session 26 4K 38
kcovinfo 52 4K 52
proc-args 81 4K 2469
terminal 11 3K 11
indirdep 10 3K 10
uidinfo 3 3K 7
local_apic 1 2K 1
io_apic 1 2K 1
fpukern_ctx 2 2K 2
newdirblk 16 2K 434
ipsec-saq 2 2K 2
lockf 19 2K 29
selfd 31 2K 15254
ip6ndp 12 2K 14
sctp_ifa 13 2K 14
Unitno 27 2K 47
CAM XPT 22 2K 543
msi 12 2K 12
in_multi 6 2K 8
ipsecpolicy 2 2K 2
acpidev 20 2K 20
select 10 2K 37
clone 9 2K 9
tun 7 2K 7
freework 5 2K 440
sctp_stri 2 1K 94
softdep 1 1K 1
freeblks 4 1K 439
sahead 1 1K 1
secasvar 1 1K 1
nhops 6 1K 8
vnodemarker 2 1K 10
NFSD session 1 1K 1
CAM periph 4 1K 271
sctp_atky 19 1K 1265
ipsec 3 1K 3
sctp_ifn 6 1K 14
mld 6 1K 6
igmp 6 1K 6
toponodes 6 1K 6
isadev 6 1K 6
mount 16 1K 89
pci_link 10 1K 10
crypto 4 1K 22
encap_export_host 12 1K 12
pf_osfp 5 1K 5
pfil 4 1K 4
cdev 2 1K 2
osd 8 1K 125
inpcbpolicy 12 1K 330
chacha20random 1 1K 1
NFSD lckfile 1 1K 1
NFSD V4client 1 1K 1
DEVFS 9 1K 10
CC Mem 4 1K 114
vnodes 1 1K 1
CAM SIM 2 1K 2
procdesc 2 1K 12
sctp_athm 15 1K 1018
feeder 7 1K 7
tcpfunc 3 1K 3
loginclass 3 1K 6
prison 6 1K 6
lkpikmalloc 5 1K 6
aesni_data 2 1K 2
soname 5 1K 4056
cryptodev 2 1K 90
sctp_map 8 1K 504
nexusdev 8 1K 8
apmdev 1 1K 1
atkbddev 2 1K 2
CAM dev queue 2 1K 2
CAM I/O Scheduler 1 1K 1
CAM path 4 1K 1034
pmchooks 1 1K 1
filecaps 5 1K 90
sctp_vrf 1 1K 1
vnet 1 1K 1
entropy 2 1K 39
pmc 1 1K 1
acpiintr 1 1K 1
cpus 2 1K 2
vnet_data_free 1 1K 1
Per-cpu 1 1K 1
p1003.1b 1 1K 1
tcp_do 0 0K 0
tcp_fsb 0 0K 27
ipcomp 0 0K 0
esp 0 0K 0
ah 0 0K 0
pf_table 0 0K 0
pf_altq 0 0K 0
pf_temp 0 0K 0
mqdata 0 0K 0
filemon 0 0K 22
sctp_mcore 0 0K 0
sctp_socko 0 0K 477
sctp_iter 0 0K 11
sctp_mvrf 0 0K 0
sctp_cpal 0 0K 0
sctp_cmsg 0 0K 0
sctp_stre 0 0K 0
sctp_athi 0 0K 0
sctp_a_it 0 0K 11
sctp_aadr 0 0K 0
NFSCL flayout 0 0K 0
NFSCL layout 0 0K 0
madt_table 0 0K 2
smartpqi 0 0K 0
NFSD rollback 0 0K 0
NFSCL diroff 0 0K 0
NEWdirectio 0 0K 0
ixl 0 0K 0
NEWNFSnode 0 0K 0
NFSCL lck 0 0K 0
NFSCL lckown 0 0K 0
NFSCL client 0 0K 0
NFSCL deleg 0 0K 0
NFSCL open 0 0K 0
NFSCL owner 0 0K 0
ice-resmgr 0 0K 0
ice-osdep 0 0K 0
ice 0 0K 0
iavf 0 0K 0
axgbe 0 0K 0
NFS fh 0 0K 0
NFS req 0 0K 0
NFSD usrgroup 0 0K 0
NFSD string 0 0K 0
NFSD V4lock 0 0K 0
NFSD V4state 0 0K 0
NFSD srvcache 0 0K 0
msdosfs_fat 0 0K 0
xen_intr 0 0K 0
msdosfs_mount 0 0K 0
msdosfs_node 0 0K 0
xen_hvm 0 0K 0
legacydrv 0 0K 0
bounce 0 0K 0
busdma 0 0K 0
qpidrv 0 0K 0
dmar_idpgtbl 0 0K 0
dmar_dom 0 0K 0
dmar_ctx 0 0K 0
DEVFS4 0 0K 0
isci 0 0K 0
iommu_dmamap 0 0K 0
hyperv_socket 0 0K 0
bxe_ilt 0 0K 0
DEVFS2 0 0K 0
xenbus 0 0K 0
gntdev 0 0K 0
privcmd_dev 0 0K 0
evtchn_dev 0 0K 0
vm_fictitious 0 0K 0
xenstore 0 0K 0
scsi_pass 0 0K 0
ciss_data 0 0K 0
xnb 0 0K 0
xbbd 0 0K 0
xbd 0 0K 0
Balloon 0 0K 0
sysmouse 0 0K 0
vtfont 0 0K 0
UMAHash 0 0K 0
BACKLIGHT 0 0K 0
ath_hal 0 0K 0
vm_pgdata 0 0K 0
jblocks 0 0K 0
savedino 0 0K 15
sentinel 0 0K 0
jfsync 0 0K 0
jtrunc 0 0K 0
sbdep 0 0K 3
jsegdep 0 0K 0
jseg 0 0K 0
jfreefrag 0 0K 0
jfreeblk 0 0K 0
jnewblk 0 0K 0
jmvref 0 0K 0
jremref 0 0K 0
jaddref 0 0K 0
freedep 0 0K 0
freefrag 0 0K 2
allocindir 0 0K 0
allocdirect 0 0K 0
ufs_trim 0 0K 0
mactemp 0 0K 0
audit_trigger 0 0K 0
audit_pipe_presel 0 0K 0
audit_pipeent 0 0K 0
audit_pipe 0 0K 0
audit_evname 0 0K 0
audit_bsm 0 0K 0
audit_gidset 0 0K 0
audit_text 0 0K 0
audit_path 0 0K 0
audit_data 0 0K 0
audit_cred 0 0K 0
athdev 0 0K 0
ata_pci 0 0K 0
ata_dma 0 0K 0
ata_generic 0 0K 0
pvscsi 0 0K 0
scsi_da 0 0K 69
ata_da 0 0K 0
scsi_ch 0 0K 0
scsi_cd 0 0K 0
AHCI driver 0 0K 0
USBdev 0 0K 0
USB 0 0K 0
ktls_ocf 0 0K 0
agp 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5E_TLS_RX 0 0K 0
MLX5EEPROM 0 0K 0
MLX5E_TLS 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EN 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5DUMP 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
seq_file 0 0K 0
lkpiskb 0 0K 0
radix 0 0K 0
idr 0 0K 0
lkpindev 0 0K 0
lkpifw 0 0K 0
lkpi80211 0 0K 0
NLM 0 0K 0
ipsec-spdcache 0 0K 0
ipsec-reg 0 0K 0
ipsec-misc 0 0K 0
ipsecrequest 0 0K 0
ip6opt 0 0K 6
ip6_msource 0 0K 0
ip6_moptions 0 0K 0
in6_mfilter 0 0K 0
frag6 0 0K 0
tcplog 0 0K 0
tcp_hwpace 0 0K 0
LRO 0 0K 0
ip_msource 0 0K 0
ip_moptions 0 0K 0
in_mfilter 0 0K 0
ipid 0 0K 0
80211scan 0 0K 0
80211ratectl 0 0K 0
80211power 0 0K 0
80211nodeie 0 0K 0
80211node 0 0K 0
80211mesh_gt 0 0K 0
80211mesh_rt 0 0K 0
80211perr 0 0K 0
80211prep 0 0K 0
80211preq 0 0K 0
80211dfs 0 0K 0
80211crypto 0 0K 0
80211vap 0 0K 0
iflib 0 0K 0
vlan 0 0K 0
gif 0 0K 0
ifdescr 0 0K 0
zlib 0 0K 0
fadvise 0 0K 0
VN POLL 0 0K 0
nvme_da 0 0K 0
statfs 0 0K 609
namei_tracker 0 0K 26
export_host 0 0K 0
cl_savebuf 0 0K 3
acpipwr 0 0K 0
acpi_perf 0 0K 0
twsbuf 0 0K 0
twe_commands 0 0K 0
tcp_log_dev 0 0K 31
midi buffers 0 0K 0
mixer 0 0K 0
ac97 0 0K 0
hdacc 0 0K 0
hdac 0 0K 0
hdaa 0 0K 0
acpicmbat 0 0K 0
SIIS driver 0 0K 0
CAM CCB 0 0K 523
PUC 0 0K 0
biobuf 0 0K 0
aios 0 0K 0
lio 0 0K 4
acl 0 0K 0
ppbusdev 0 0K 0
mbuf_tag 0 0K 97
ktls 0 0K 0
agtiapi_MemAlloc malloc 0 0K 0
osti_cacheable 0 0K 0
tempbuff 0 0K 0
tempbuff 0 0K 0
ag_tgt_map_t malloc 0 0K 0
ag_slr_map_t malloc 0 0K 0
lDevFlags * malloc 0 0K 0
tiDeviceHandle_t * malloc 0 0K 0
ag_portal_data_t malloc 0 0K 0
ag_device_t malloc 0 0K 0
STLock malloc 0 0K 0
CCB List 0 0K 0
sr_iov 0 0K 0
OCS 0 0K 0
OCS 0 0K 0
nvme 0 0K 0
nvd 0 0K 0
netmap 0 0K 0
mwldev 0 0K 0
MVS driver 0 0K 0
CAM ccb queue 0 0K 0
mrsasbuf 0 0K 0
mpt_user 0 0K 0
accf 0 0K 0
pts 0 0K 0
iov 0 0K 14779
ioctlops 0 0K 180
eventfd 0 0K 0
Witness 0 0K 0
stack 0 0K 0
mps_user 0 0K 0
MPSSAS 0 0K 0
mps 0 0K 0
mpr_user 0 0K 0
MPRSAS 0 0K 0
mpr 0 0K 0
sbuf 0 0K 288
mfibuf 0 0K 0
firmware 0 0K 0
compressor 0 0K 0
md_sectors 0 0K 0
SWAP 0 0K 0
md_disk 0 0K 0
malodev 0 0K 0
sysctltmp 0 0K 672
sysctl 0 0K 3
LED 0 0K 0
ekcd 0 0K 0
dumper 0 0K 0
sendfile 0 0K 0
rctl 0 0K 0
ix_sriov 0 0K 0
aacraidcam 0 0K 0
ix 0 0K 0
cache 0 0K 0
ipsbuf 0 0K 0
aacraid_buf 0 0K 0
prison_racct 0 0K 0
Fail Points 0 0K 0
sigio 0 0K 1
filedesc_to_leader 0 0K 0
pwd 0 0K 0
tty console 0 0K 0
aaccam 0 0K 0
aacbuf 0 0K 0
zstd 0 0K 0
XZ_DEC 0 0K 0
nvlist 0 0K 0
SCSI ENC 0 0K 0
SCSI sa 0 0K 0
isofs_node 0 0K 0
isofs_mount 0 0K 0
tr_raid5_data 0 0K 0
tr_raid1e_data 0 0K 0
tr_raid1_data 0 0K 0
tr_raid0_data 0 0K 0
tr_concat_data 0 0K 0
md_sii_data 0 0K 0
md_promise_data 0 0K 0
md_nvidia_data 0 0K 0
md_jmicron_data 0 0K 0
md_intel_data 0 0K 0
md_ddf_data 0 0K 0
raid_data 0 0K 72
geom_flashmap 0 0K 0
tmpfs dir 0 0K 0
tmpfs name 0 0K 0
tmpfs mount 0 0K 0
NFS FHA 0 0K 0
newnfsmnt 0 0K 0
newnfsclient_req 0 0K 0
NFSCL layrecall 0 0K 0
NFSCL session 0 0K 0
NFSCL sockreq 0 0K 0
NFSCL devinfo 0 0K 0
db> show uma
Zone Size Used Free Requests Sleeps Bucket Total Mem XFree
mbuf_jumbo_page 4096 8775 623 19972 0 254 38494208 0
mbuf 256 9274 644 65323 0 254 2539008 0
pbuf 2624 0 778 0 0 2 2041472 0
tcp_log 416 0 4833 34072 0 254 2010528 0
BUF TRIE 144 188 11600 527 0 62 1697472 0
malloc-384 384 4117 53 4458 0 30 1601280 0
mbuf_cluster 2048 762 0 762 0 254 1560576 0
malloc-128 128 11689 184 11822 0 126 1519744 0
malloc-4096 4096 326 2 497 0 2 1343488 0
UMA Slabs 0 112 10775 19 10775 0 126 1208928 0
sctp_asoc 2288 4 506 252 0 254 1166880 0
vmem btag 56 17871 96 17871 0 254 1006152 0
RADIX NODE 144 5853 190 34473 0 62 870192 0
FFS inode 1160 521 25 984 0 8 633360 0
sctp_ep 1208 9 501 667 0 254 616080 0
tcp_bbr_map 128 0 4557 33342 0 126 583296 0
tcpcb 1104 4 507 114 0 254 564144 0
VM OBJECT 264 1820 190 37119 0 30 530640 0
socket 960 34 474 2253 0 254 487680 0
malloc-65536 65536 4 3 210 0 1 458752 0
256 Bucket 2048 193 9 1388 0 8 413696 0
lkpimm 168 1 2327 1 0 62 391104 0
lkpicurr 168 2 2326 2 0 62 391104 0
sctp_raddr 736 4 513 252 0 254 380512 0
THREAD 1808 145 20 655 0 8 298320 0
VNODE 448 559 71 1024 0 30 282240 0
malloc-16384 16384 12 5 626 0 1 278528 0
malloc-64 64 3871 224 3960 0 254 262080 0
malloc-256 256 911 94 1671 0 62 257280 0
MAP ENTRY 96 2256 390 121837 0 126 254016 0
malloc-4096 4096 55 5 1333 0 2 245760 0
malloc-16 16 14613 137 14698 0 254 236000 0
DEVCTL 1024 21 199 151 0 0 225280 0
malloc-65536 65536 1 2 19 0 1 196608 0
mbuf_packet 256 40 722 2462 0 254 195072 0
ertt_txseginfo 40 0 4848 35767 0 254 193920 0
UMA Zones 768 244 0 244 0 16 187392 0
malloc-384 384 442 38 596 0 30 184320 0
malloc-32 32 5392 278 5526 0 254 181440 0
malloc-128 128 1222 173 26339 0 126 178560 0
malloc-256 256 563 67 1197 0 62 161280 0
FPU_save_area 832 147 33 1380 0 16 149760 0
malloc-1024 1024 125 19 1393 0 16 147456 0
S VFS Cache 104 1001 403 1514 0 126 146016 0
FFS2 dinode 256 521 49 983 0 62 145920 0
malloc-65536 65536 2 0 2 0 1 131072 0
malloc-128 128 837 186 2014 0 126 130944 0
unpcb 256 11 499 1229 0 254 130560 0
128 Bucket 1024 92 23 827 0 16 117760 0
ksiginfo 112 55 989 797 0 126 116928 0
VMSPACE 2552 34 11 1311 0 4 114840 0
malloc-128 128 518 257 3841 0 126 99200 0
malloc-32768 32768 0 3 120 0 1 98304 0
malloc-8192 8192 6 5 158 0 1 90112 0
malloc-4096 4096 18 4 656 0 2 90112 0
UMA Kegs 384 230 3 230 0 30 89472 0
PROC 1352 54 12 1330 0 8 89232 0
clpbuf 2624 0 32 20 0 16 83968 0
malloc-128 128 517 134 2368 0 126 83328 0
filedesc0 1072 55 22 1353 0 8 82544 0
malloc-2048 2048 4 36 535 0 8 81920 0
malloc-2048 2048 11 29 1384 0 8 81920 0
sctp_readq 152 0 520 110 0 254 79040 0
sctp_chunk 152 2 518 137 0 254 79040 0
malloc-8192 8192 9 0 9 0 1 73728 0
g_bio 408 0 180 4773 0 30 73440 0
malloc-64 64 697 374 2550 0 254 68544 0
malloc-64 64 523 548 1725 0 254 68544 0
malloc-65536 65536 1 0 1 0 1 65536 0
malloc-65536 65536 1 0 1 0 1 65536 0
sctp_stream_msg_out 112 1 539 67 0 254 60480 0
64 Bucket 512 71 41 2538 0 30 57344 0
malloc-64 64 326 493 3425 0 254 52416 0
32 Bucket 256 73 122 11024 0 62 49920 0
DIRHASH 1024 34 14 34 0 16 49152 0
NAMEI 1024 0 48 15635 0 16 49152 0
malloc-2048 2048 16 8 134 0 8 49152 0
malloc-1024 1024 14 34 522 0 16 49152 0
malloc-384 384 92 28 94 0 30 46080 0
malloc-384 384 88 32 88 0 30 46080 0
syncache 168 0 264 4 0 254 44352 0
malloc-8192 8192 5 0 5 0 1 40960 0
malloc-4096 4096 10 0 10 0 2 40960 0
pcpu-8 8 4735 385 5131 0 254 40960 0
Mountpoints 2752 2 12 2 0 4 38528 0
tcp_inpcb 424 4 86 114 0 30 38160 0
udp_inpcb 424 6 84 174 0 30 38160 0
pipe 744 21 29 353 0 16 37200 0
malloc-64 64 6 561 14682 0 254 36288 0
malloc-64 64 228 339 15475 0 254 36288 0
malloc-64 64 4 563 21 0 254 36288 0
malloc-64 64 6 561 14 0 254 36288 0
malloc-128 128 77 202 109 0 126 35712 0
malloc-128 128 2 277 144 0 126 35712 0
malloc-128 128 19 260 280 0 126 35712 0
routing nhops 256 27 108 34 0 62 34560 0
ttyoutq 256 72 63 160 0 62 34560 0
malloc-384 384 15 75 998 0 30 34560 0
malloc-256 256 50 85 1010 0 62 34560 0
malloc-256 256 40 95 591 0 62 34560 0
malloc-256 256 73 62 1954 0 62 34560 0
malloc-256 256 17 118 678 0 62 34560 0
malloc-256 256 51 84 239 0 62 34560 0
malloc-256 256 17 118 610 0 62 34560 0
malloc-32768 32768 1 0 1 0 1 32768 0
malloc-32768 32768 1 0 1 0 1 32768 0
malloc-32768 32768 1 0 1 0 1 32768 0
malloc-4096 4096 3 5 615 0 2 32768 0
malloc-4096 4096 6 2 6 0 2 32768 0
malloc-2048 2048 3 13 63 0 8 32768 0
malloc-2048 2048 3 13 3 0 8 32768 0
malloc-2048 2048 10 6 12 0 8 32768 0
malloc-2048 2048 1 15 3 0 8 32768 0
malloc-1024 1024 5 27 259 0 16 32768 0
malloc-1024 1024 4 28 7 0 16 32768 0
malloc-1024 1024 19 13 40 0 16 32768 0
malloc-1024 1024 1 31 5 0 16 32768 0
malloc-512 512 2 62 94 0 30 32768 0
malloc-512 512 4 60 185 0 30 32768 0
malloc-512 512 9 55 9 0 30 32768 0
malloc-512 512 2 62 10 0 30 32768 0
malloc-512 512 4 60 5 0 30 32768 0
pcpu-64 64 491 21 491 0 254 32768 0
ttyinq 160 135 65 300 0 62 32000 0
tcp_rack_map 120 0 264 72 0 126 31680 0
tcp_bbr_pcb 832 0 36 47 0 16 29952 0
cpuset 104 7 272 7 0 126 29016 0
sctp_laddr 48 6 582 194 0 254 28224 0
PWD 32 18 864 523 0 254 28224 0
malloc-32 32 273 609 1977 0 254 28224 0
malloc-32 32 274 608 1621 0 254 28224 0
16 Bucket 144 56 140 250 0 62 28224 0
4 Bucket 48 6 582 63 0 254 28224 0
ripcb 424 2 61 42 0 30 26712 0
da_ccb 544 0 49 1307 0 16 26656 0
TURNSTILE 136 166 23 166 0 62 25704 0
malloc-8192 8192 2 1 4 0 1 24576 0
rtentry 176 30 108 34 0 62 24288 0
PGRP 88 26 250 38 0 126 24288 0
rl_entry 40 47 559 47 0 254 24240 0
Files 80 190 110 9067 0 126 24000 0
8 Bucket 80 45 255 339 0 126 24000 0
malloc-384 384 27 33 27 0 30 23040 0
SLEEPQUEUE 88 166 90 166 0 126 22528 0
hostcache 64 2 313 2 0 254 20160 0
udpcb 32 6 624 174 0 254 20160 0
tcp_inpcb ports 32 2 628 84 0 254 20160 0
udp_inpcb ports 32 3 627 33 0 254 20160 0
ertt 72 4 276 114 0 126 20160 0
malloc-32 32 13 617 35 0 254 20160 0
malloc-32 32 31 599 2781 0 254 20160 0
malloc-32 32 12 618 25 0 254 20160 0
malloc-32 32 68 562 1664 0 254 20160 0
malloc-32 32 14 616 23 0 254 20160 0
2 Bucket 32 52 578 367 0 254 20160 0
KNOTE 160 28 97 5193 0 62 20000 0
epoch_record pcpu 256 4 60 4 0 62 16384 0
malloc-16384 16384 1 0 1 0 1 16384 0
malloc-16384 16384 1 0 1 0 1 16384 0
malloc-16384 16384 1 0 1 0 1 16384 0
malloc-8192 8192 2 0 2 0 1 16384 0
malloc-2048 2048 2 6 2 0 8 16384 0
malloc-1024 1024 8 8 8 0 16 16384 0
malloc-512 512 0 32 1 0 30 16384 0
malloc-512 512 1 31 1 0 30 16384 0
SMR CPU 32 7 504 7 0 254 16352 0
pf tags 104 1 155 1 0 126 16224 0
tcp_rack_pcb 896 0 18 27 0 16 16128 0
malloc-16 16 546 454 4167 0 254 16000 0
AIO 208 0 76 4 0 62 15808 0
kenv 258 15 45 1036 0 30 15480 0
mqnode 416 3 33 3 0 30 14976 0
vmem 1856 1 7 1 0 8 14848 0
SMR SHARED 24 7 504 7 0 254 12264 0
AIOP 32 4 374 4 0 254 12096 0
vtnet_tx_hdr 24 0 501 39394 0 254 12024 0
malloc-16 16 16 734 1577 0 254 12000 0
malloc-16 16 25 725 64 0 254 12000 0
malloc-16 16 27 723 25757 0 254 12000 0
malloc-16 16 8 742 127 0 254 12000 0
malloc-16 16 60 690 87 0 254 12000 0
malloc-16 16 5 745 388 0 254 12000 0
AIOCB 552 0 21 8 0 16 11592 0
malloc-384 384 1 29 1 0 30 11520 0
AIOLIO 272 0 42 4 0 30 11424 0
malloc-8192 8192 1 0 1 0 1 8192 0
malloc-4096 4096 1 1 1 0 2 8192 0
malloc-4096 4096 1 1 1 0 2 8192 0
pcpu-16 16 14 498 14 0 254 8192 0
UMA Slabs 1 176 9 13 9 0 62 3872 0
KMAP ENTRY 96 12 27 14 0 0 3744 0
FFS1 dinode 128 0 0 0 0 126 0 0
ada_ccb 272 0 0 0 0 30 0 0
swblk 136 0 0 0 0 62 0 0
swpctrie 144 0 0 0 0 62 0 0
cdg_qdiffsample 16 0 0 0 0 254 0 0
pf state scrubs 40 0 0 0 0 254 0 0
pf frag entries 40 0 0 0 0 254 0 0
pf frags 248 0 0 0 0 62 0 0
pf table entries 160 0 0 0 0 62 0 0
pf table entry counters 64 0 0 0 0 254 0 0
pf source nodes 136 0 0 0 0 254 0 0
pf state keys 88 0 0 0 0 126 0 0
pf states 312 0 0 0 0 254 0 0
pf mtags 48 0 0 0 0 254 0 0
tfo_ccache_entries 80 0 0 0 0 126 0 0
tfo 4 0 0 0 0 254 0 0
sackhole 32 0 0 0 0 254 0 0
tcptw 72 0 0 0 0 254 0 0
ipq 56 0 0 0 0 254 0 0
sctp_asconf_ack 48 0 0 0 0 254 0 0
sctp_asconf 40 0 0 0 0 254 0 0
tcp_log_node 120 0 0 0 0 126 0 0
tcp_log_bucket 176 0 0 0 0 62 0 0
tcpreass 48 0 0 0 0 254 0 0
ripcb ports 32 0 0 0 0 254 0 0
udplite_inpcb ports 32 0 0 0 0 254 0 0
udplite_inpcb 424 0 0 0 0 30 0 0
IPsec SA lft_c 16 0 0 0 0 254 0 0
itimer 352 0 0 0 0 30 0 0
NCLNODE 608 0 0 0 0 16 0 0
TMPFS node 224 0 0 0 0 62 0 0
mqnotifier 216 0 0 0 0 62 0 0
mvdata 64 0 0 0 0 254 0 0
mqueue 248 0 0 0 0 62 0 0
LTS VFS Cache 360 0 0 0 0 30 0 0
L VFS Cache 320 0 0 0 0 30 0 0
STS VFS Cache 144 0 0 0 0 62 0 0
cryptop 280 0 0 0 0 30 0 0
linux_dma_object 32 0 0 0 0 254 0 0
linux_dma_pctrie 144 0 0 0 0 62 0 0
IOMMU_MAP_ENTRY 120 0 0 0 0 126 0 0
mbuf_jumbo_16k 16384 0 0 0 0 254 0 0
mbuf_jumbo_9k 9216 0 0 0 0 254 0 0
audit_record 1280 0 0 0 0 8 0 0
domainset 40 0 0 0 0 254 0 0
MAC labels 40 0 0 0 0 254 0 0
vnpbuf 2624 0 0 0 0 64 0 0
mdpbuf 2624 0 0 0 0 3 0 0
nfspbuf 2624 0 0 0 0 16 0 0
swwbuf 2624 0 0 0 0 8 0 0
swrbuf 2624 0 0 0 0 16 0 0
umtx_shm 88 0 0 0 0 126 0 0
umtx pi 96 0 0 0 0 126 0 0
rangeset pctrie nodes 144 0 0 0 0 62 0 0
malloc-65536 65536 0 0 0 0 1 0 0
malloc-65536 65536 0 0 0
---
This report is generated by a bot. It may contain errors.
See https://goo.gl/tpsmEJ for more information about syzbot.
syzbot engineers can be reached at syzk...@googlegroups.com.
syzbot will keep track of this issue. See:
https://goo.gl/tpsmEJ#status for how to communicate with syzbot.
syzbot found the following issue on:
HEAD commit: a4a31271cc7a sctp: cleanup sctp_lower_sosend
git tree: freebsd-src
console output: https://syzkaller.appspot.com/x/log.txt?x=120ab08e700000
dashboard link: https://syzkaller.appspot.com/bug?extid=cd3c1dd64861b8c200bd
Unfortunately, I don't have any reproducer for this issue yet.
IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+cd3c1d...@syzkaller.appspotmail.com
panic: hold_tcblock is false
cpuid = 1
time = 1645323166
KDB: stack backtrace:
db_trace_self_wrapper() at db_trace_self_wrapper+0xc7/frame 0xfffffe008fddd050
kdb_backtrace() at kdb_backtrace+0xd3/frame 0xfffffe008fddd1b0
vpanic() at vpanic+0x2b8/frame 0xfffffe008fddd290
panic() at panic+0xb5/frame 0xfffffe008fddd350
sctp_lower_sosend() at sctp_lower_sosend+0x5976/frame 0xfffffe008fddd740
sctp_sosend() at sctp_sosend+0x72c/frame 0xfffffe008fddd9e0
sosend() at sosend+0xfc/frame 0xfffffe008fddda50
kern_sendit() at kern_sendit+0x58a/frame 0xfffffe008fdddbc0
sendit() at sendit+0x2b0/frame 0xfffffe008fdddc10
sys_sendto() at sys_sendto+0x182/frame 0xfffffe008fdddd30
amd64_syscall() at amd64_syscall+0x40c/frame 0xfffffe008fdddf30
fast_syscall_common() at fast_syscall_common+0xf8/frame 0xfffffe008fdddf30
--- syscall (198, FreeBSD ELF64, nosys), rip = 0x28a42a, rsp = 0x831151f08, rbp = 0x831151f70 ---
KDB: enter: panic
[ thread pid 1330 tid 100654 ]
Stopped at kdb_enter+0x6b: movq $0,0x2708c3a(%rip)
db>
db> set $lines = 0
db> set $maxwidth = 0
db> show registers
cs 0x20
ds 0x3b
es 0x3b
fs 0x13
gs 0x1b
ss 0x28
rax 0x12
rcx 0x6f5333bd6cd2062d
rdx 0x3ffff
rbx 0
rsp 0xfffffe008fddd190
rbp 0xfffffe008fddd1b0
rsi 0x40001
rdi 0xffffffff817721da vprintf+0x35a
r8 0
r9 0xffffffff
r10 0
r11 0xfffffe0092d84e10
r12 0xfffffe0092d84900
r13 0xfffffe008fddd201
r14 0xffffffff82ba1cc0 .str.18
r15 0xffffffff82ba1cc0 .str.18
rip 0xffffffff8176575b kdb_enter+0x6b
rflags 0x46
kdb_enter+0x6b: movq $0,0x2708c3a(%rip)
db> show proc
Process 1330 (syz-executor.1) at 0xfffffe009274a548:
state: NORMAL
uid: 0 gids: 0, 0, 5
parent: pid 777 at 0xfffffe008fe8fa90
ABI: FreeBSD ELF64
flag: 0x10000080 flag2: 0
arguments: /root/syz-executor.1 exec
reaper: 0xfffffe0053dda000 reapsubtree: 1
sigparent: 20
vmspace: 0xfffffe00996013f0
(map 0xfffffe00996013f0)
(map.pmap 0xfffffe00996014b0)
(pmap 0xfffffe0099601518)
threads: 2
100116 RunQ syz-executor.1
100654 Run CPU 1 syz-executor.1
db> ps
pid ppid pgrp uid state wmesg wchan cmd
1330 777 777 0 R (threaded) syz-executor.1
100116 RunQ syz-executor.1
100654 Run CPU 1 syz-executor.1
1329 779 779 0 R (threaded) syz-executor.2
100095 RunQ syz-executor.2
100653 S connec 0xfffffe008fe7285a syz-executor.2
100655 RunQ syz-executor.2
1328 776 776 0 R (threaded) syz-executor.0
100602 RunQ syz-executor.0
100652 S uwait 0xfffffe008feb3600 syz-executor.0
1271 0 0 0 DL aiordy 0xfffffe0056f7a000 [aiod4]
1270 0 0 0 DL aiordy 0xfffffe0092dd5a90 [aiod3]
1269 0 0 0 DL aiordy 0xfffffe0092dd4a90 [aiod2]
1268 0 0 0 DL aiordy 0xfffffe0058c31000 [aiod1]
1081 1072 1081 0 Ss select 0xfffffe0057446c40 dhclient
1078 1 1078 0 Ss select 0xfffffe008feb2340 dhclient
1072 1038 430 65 S select 0xfffffe008feb22c0 dhclient
1038 430 430 0 S wait 0xfffffe0092749000 sh
787 774 787 0 Rs CPU 0 syz-executor.3
779 774 779 0 Ss nanslp 0xffffffff83e3ba80 syz-executor.2
777 774 777 0 Ss nanslp 0xffffffff83e3ba80 syz-executor.1
776 774 776 0 Rs syz-executor.0
774 772 772 0 S (threaded) syz-fuzzer
100101 S uwait 0xfffffe0057443400 syz-fuzzer
100121 S uwait 0xfffffe0057877880 syz-fuzzer
100122 S uwait 0xfffffe0057877980 syz-fuzzer
100123 S uwait 0xfffffe0057877a80 syz-fuzzer
100124 S uwait 0xfffffe008feb3900 syz-fuzzer
100125 S uwait 0xfffffe008feb3a00 syz-fuzzer
100126 S kqread 0xfffffe005787c100 syz-fuzzer
100127 S uwait 0xfffffe008feb3c00 syz-fuzzer
100130 S uwait 0xfffffe0057877480 syz-fuzzer
772 770 772 0 Ss pause 0xfffffe0056f790b0 csh
770 688 770 0 Ss select 0xfffffe008feb3d40 sshd
754 1 754 0 Ss+ ttyin 0xfffffe0057466cb0 getty
753 1 753 0 Ss+ ttyin 0xfffffe00579aa0b0 getty
752 1 752 0 Ss+ ttyin 0xfffffe00579aa4b0 getty
751 1 751 0 Ss+ ttyin 0xfffffe00574658b0 getty
750 1 750 0 Ss+ ttyin 0xfffffe00579aa8b0 getty
749 1 749 0 Ss+ ttyin 0xfffffe00579aacb0 getty
748 1 748 0 Ss+ ttyin 0xfffffe0057465cb0 getty
747 1 747 0 Ss+ ttyin 0xfffffe00579ab0b0 getty
746 1 746 0 Ss+ ttyin 0xfffffe00579ab4b0 getty
744 1 18 0 S+ piperd 0xfffffe0058b67000 logger
743 742 18 0 S+ nanslp 0xffffffff83e3ba80 sleep
742 1 18 0 S+ wait 0xfffffe0056f7b548 sh
692 1 692 0 Ss nanslp 0xffffffff83e3ba80 cron
688 1 688 0 Ss select 0xfffffe008feb41c0 sshd
501 1 501 0 Ss select 0xfffffe008feb4640 syslogd
430 1 430 0 Ss wait 0xfffffe0058c30000 devd
429 1 429 65 Ss select 0xfffffe008feb45c0 dhclient
344 1 344 0 Ss select 0xfffffe0057878640 dhclient
341 1 341 0 Ss select 0xfffffe0057878540 dhclient
17 0 0 0 DL syncer 0xffffffff83f61260 [syncer]
16 0 0 0 DL vlruwt 0xfffffe0056f7aa90 [vnlru]
15 0 0 0 DL (threaded) [bufdaemon]
100080 D psleep 0xffffffff83f5f860 [bufdaemon]
100083 D - 0xffffffff83211f80 [bufspacedaemon-0]
100093 D sdflush 0xfffffe00574650e8 [/ worker]
9 0 0 0 DL psleep 0xffffffff83f932c0 [vmdaemon]
8 0 0 0 RL (threaded) [pagedaemon]
100078 RunQ [dom0]
100081 D launds 0xffffffff83f87184 [laundry: dom0]
100082 D umarcl 0xffffffff81e9b4a0 [uma]
7 0 0 0 DL - 0xffffffff83bf7a08 [rand_harvestq]
6 0 0 0 DL pftm 0xffffffff848b1530 [pf purge]
5 0 0 0 DL waiting 0xffffffff84689560 [sctp_iterator]
4 0 0 0 DL (threaded) [cam]
100045 D - 0xffffffff83a99940 [doneq0]
100046 D - 0xffffffff83a998c0 [async]
100077 D - 0xffffffff83a99740 [scanner]
14 0 0 0 DL seqstat 0xfffffe0053f88c88 [sequencer 00]
3 0 0 0 DL (threaded) [crypto]
100041 D crypto_ 0xffffffff83f829a0 [crypto]
100042 D crypto_ 0xfffffe0053c8ad30 [crypto returns 0]
100043 D crypto_ 0xfffffe0053c8ad80 [crypto returns 1]
13 0 0 0 DL (threaded) [geom]
100036 D - 0xffffffff83e111c0 [g_event]
100037 D - 0xffffffff83e111e0 [g_up]
100038 D - 0xffffffff83e11200 [g_down]
2 0 0 0 WL (threaded) [clock]
100030 I [clock (0)]
100031 I [clock (1)]
12 0 0 0 WL (threaded) [intr]
100010 I [swi6: task queue]
100011 I [swi6: Giant taskq]
100018 I [swi5: fast taskq]
100029 I [swi1: netisr 0]
100032 I [swi3: busdma]
100033 I [swi1: hpts]
100034 I [swi1: hpts]
100047 I [irq24: virtio_pci0]
100048 I [irq25: virtio_pci0]
100049 I [irq26: virtio_pci0]
100050 I [irq27: virtio_pci0]
100051 I [irq28: virtio_pci1]
100052 I [irq29: virtio_pci1]
100053 I [irq30: virtio_pci1]
100054 I [irq31: virtio_pci1]
100055 I [irq32: virtio_pci1]
100060 I [irq33: virtio_pci2]
100061 I [irq34: virtio_pci2]
100062 I [irq35: virtio_pci2]
100064 I [irq1: atkbd0]
100065 I [irq12: psm0]
100066 I [swi0: uart uart++]
100070 I [swi1: pf send]
11 0 0 0 RL (threaded) [idle]
100003 CanRun [idle: cpu0]
100004 CanRun [idle: cpu1]
1 0 1 0 SLs wait 0xfffffe0053dda000 [init]
10 0 0 0 DL audit_w 0xffffffff83f834a0 [audit]
0 0 0 0 DLs (threaded) [kernel]
100000 D swapin 0xffffffff83e11c00 [swapper]
100005 D - 0xfffffe0053e01000 [if_config_tqg_0]
100006 D - 0xfffffe0053e00e00 [softirq_0]
100007 D - 0xfffffe0053e00d00 [softirq_1]
100008 D - 0xfffffe0053e00c00 [if_io_tqg_0]
100009 D - 0xfffffe0053e00b00 [if_io_tqg_1]
100012 D - 0xfffffe000796d200 [aiod_kick taskq]
100013 D - 0xfffffe000796d000 [inm_free taskq]
100014 D - 0xfffffe000796cd00 [linuxkpi_irq_wq]
100015 D - 0xfffffe000796cb00 [in6m_free taskq]
100016 D - 0xfffffe000796c900 [deferred_unmount ta]
100017 D - 0xfffffe000796c700 [thread taskq]
100019 D - 0xfffffe000796c300 [kqueue_ctx taskq]
100020 D - 0xfffffe000796c100 [pci_hp taskq]
100021 D - 0xfffffe000796be00 [linuxkpi_short_wq_0]
100022 D - 0xfffffe000796be00 [linuxkpi_short_wq_1]
100023 D - 0xfffffe000796be00 [linuxkpi_short_wq_2]
100024 D - 0xfffffe000796be00 [linuxkpi_short_wq_3]
100025 D - 0xfffffe000796b900 [linuxkpi_long_wq_0]
100026 D - 0xfffffe000796b900 [linuxkpi_long_wq_1]
100027 D - 0xfffffe000796b900 [linuxkpi_long_wq_2]
100028 D - 0xfffffe000796b900 [linuxkpi_long_wq_3]
100035 D - 0xfffffe0053ed0200 [firmware taskq]
100039 D - 0xfffffe0053ecfc00 [crypto_0]
100040 D - 0xfffffe0053ecfc00 [crypto_1]
100056 D - 0xfffffe0053eced00 [vtnet0 rxq 0]
100057 D - 0xfffffe0053ecec00 [vtnet0 txq 0]
100058 D - 0xfffffe0053eceb00 [vtnet0 rxq 1]
100059 D - 0xfffffe0053ecea00 [vtnet0 txq 1]
100063 D vtbslp 0xfffffe0053fde400 [virtio_balloon]
100067 D - 0xffffffff82ba77a1 [deadlkres]
100071 D - 0xfffffe005787d100 [acpi_task_0]
100072 D - 0xfffffe005787d100 [acpi_task_1]
100073 D - 0xfffffe005787d100 [acpi_task_2]
100074 D - 0xfffffe000796e200 [mca taskq]
100076 D - 0xfffffe0053ecf500 [CAM taskq]
db> show all locks
Process 787 (syz-executor.3) thread 0xfffffe009273a1e0 (100115)
exclusive lockmgr bufwait (bufwait) r = 0 (0xfffffe0007aa5768) locked @ /syzkaller/managers/main/kernel/sys/kern/vfs_bio.c:3984
exclusive lockmgr bufwait (bufwait) r = 0 (0xfffffe0007aa5f90) locked @ /syzkaller/managers/main/kernel/sys/kern/vfs_bio.c:3984
exclusive lockmgr ufs (ufs) r = 1 (0xfffffe0099874af0) locked @ /syzkaller/managers/main/kernel/sys/kern/vfs_subr.c:2993
exclusive lockmgr ufs (ufs) r = 0 (0xfffffe009268d070) locked @ /syzkaller/managers/main/kernel/sys/kern/vfs_cache.c:4500
db> show malloc
Type InUse MemUse Requests
pf_hash 5 11524K 5
tcp_hpts 6 4801K 6
devbuf 4217 4323K 4242
sysctloid 35306 2080K 35377
vtbuf 24 1968K 46
kobj 326 1304K 487
newblk 611 1177K 1060
vfscache 3 1025K 3
inodedep 428 673K 561
pcb 37 555K 1385
ufs_quota 1 512K 1
vfs_hash 1 512K 1
callout 2 512K 2
intr 4 472K 4
vmem 3 274K 6
subproc 122 246K 1398
acpica 1674 184K 56396
vnet_data 1 168K 1
tidhash 3 141K 3
pagedep 26 135K 445
linker 358 134K 386
tfo_ccache 1 128K 1
filedesc 16 121K 897
DEVFS1 109 109K 126
sem 4 106K 4
dirrem 375 94K 482
bus 988 81K 3441
mtx_pool 2 72K 2
syncache 1 68K 1
acpitask 1 64K 1
ddb_capture 1 64K 1
module 511 64K 511
freefile 358 45K 462
umtx 330 42K 330
kdtrace 201 40K 1987
BPF 22 36K 22
temp 34 33K 1984
DEVFS3 128 32K 138
hostcache 1 32K 1
shm 1 32K 1
msg 4 30K 4
gtaskqueue 18 26K 18
kbdmux 6 22K 6
DEVFS_RULE 56 20K 56
ifaddr 67 19K 69
ufs_mount 4 17K 5
proc 3 17K 3
tty 16 16K 16
ithread 100 16K 100
routetbl 130 16K 410
pf_rule 14 15K 14
bus-sc 34 15K 1651
lltable 44 14K 44
KTRACE 100 13K 100
ifnet 7 13K 7
ether_multi 152 13K 162
kenv 95 12K 95
eventhandler 133 12K 133
rman 88 11K 429
GEOM 61 11K 489
CAM queue 5 11K 1528
in6_multi 65 9K 65
bmsafemap 3 9K 525
UART 12 9K 12
devstat 4 9K 4
ksem 1 8K 1
sctp_timw 32 8K 32
rpc 2 8K 2
shmfd 1 8K 1
pfs_vncache 1 8K 1
pfs_nodes 20 8K 20
audit_evclass 237 8K 296
taskqueue 63 7K 63
cred 25 7K 204
sglist 5 7K 5
diradd 48 6K 514
CAM DEV 3 6K 510
kqueue 57 6K 1337
sctp_atcl 15 6K 968
plimit 22 6K 348
pf_ifnet 12 5K 36
ufs_dirhash 24 5K 24
UMA 272 5K 272
vt 11 5K 11
sctp_stro 4 4K 252
memdesc 1 4K 1
MCA 32 4K 32
evdev 4 4K 4
DEVFSP 62 4K 110
acpisem 28 4K 28
pwddesc 55 4K 1353
hhook 15 4K 17
mkdir 26 4K 868
session 26 4K 38
kcovinfo 52 4K 52
proc-args 81 4K 2469
terminal 11 3K 11
indirdep 10 3K 10
uidinfo 3 3K 7
local_apic 1 2K 1
io_apic 1 2K 1
fpukern_ctx 2 2K 2
newdirblk 16 2K 434
ipsec-saq 2 2K 2
lockf 19 2K 29
selfd 31 2K 15254
ip6ndp 12 2K 14
sctp_ifa 13 2K 14
Unitno 27 2K 47
CAM XPT 22 2K 543
msi 12 2K 12
in_multi 6 2K 8
ipsecpolicy 2 2K 2
acpidev 20 2K 20
select 10 2K 37
clone 9 2K 9
tun 7 2K 7
freework 5 2K 440
sctp_stri 2 1K 94
softdep 1 1K 1
freeblks 4 1K 439
sahead 1 1K 1
secasvar 1 1K 1
nhops 6 1K 8
vnodemarker 2 1K 10
NFSD session 1 1K 1
CAM periph 4 1K 271
sctp_atky 19 1K 1265
ipsec 3 1K 3
sctp_ifn 6 1K 14
mld 6 1K 6
igmp 6 1K 6
toponodes 6 1K 6
isadev 6 1K 6
mount 16 1K 89
pci_link 10 1K 10
crypto 4 1K 22
encap_export_host 12 1K 12
pf_osfp 5 1K 5
pfil 4 1K 4
cdev 2 1K 2
osd 8 1K 125
inpcbpolicy 12 1K 330
chacha20random 1 1K 1
NFSD lckfile 1 1K 1
NFSD V4client 1 1K 1
DEVFS 9 1K 10
CC Mem 4 1K 114
vnodes 1 1K 1
CAM SIM 2 1K 2
procdesc 2 1K 12
sctp_athm 15 1K 1018
feeder 7 1K 7
tcpfunc 3 1K 3
loginclass 3 1K 6
prison 6 1K 6
lkpikmalloc 5 1K 6
aesni_data 2 1K 2
soname 5 1K 4056
cryptodev 2 1K 90
sctp_map 8 1K 504
nexusdev 8 1K 8
apmdev 1 1K 1
atkbddev 2 1K 2
CAM dev queue 2 1K 2
CAM I/O Scheduler 1 1K 1
CAM path 4 1K 1034
pmchooks 1 1K 1
filecaps 5 1K 90
sctp_vrf 1 1K 1
vnet 1 1K 1
entropy 2 1K 39
pmc 1 1K 1
acpiintr 1 1K 1
cpus 2 1K 2
vnet_data_free 1 1K 1
Per-cpu 1 1K 1
p1003.1b 1 1K 1
tcp_do 0 0K 0
tcp_fsb 0 0K 27
ipcomp 0 0K 0
esp 0 0K 0
ah 0 0K 0
pf_table 0 0K 0
pf_altq 0 0K 0
pf_temp 0 0K 0
mqdata 0 0K 0
filemon 0 0K 22
sctp_mcore 0 0K 0
sctp_socko 0 0K 477
sctp_iter 0 0K 11
sctp_mvrf 0 0K 0
sctp_cpal 0 0K 0
sctp_cmsg 0 0K 0
sctp_stre 0 0K 0
sctp_athi 0 0K 0
sctp_a_it 0 0K 11
sctp_aadr 0 0K 0
NFSCL flayout 0 0K 0
NFSCL layout 0 0K 0
madt_table 0 0K 2
smartpqi 0 0K 0
NFSD rollback 0 0K 0
NFSCL diroff 0 0K 0
NEWdirectio 0 0K 0
ixl 0 0K 0
NEWNFSnode 0 0K 0
NFSCL lck 0 0K 0
NFSCL lckown 0 0K 0
NFSCL client 0 0K 0
NFSCL deleg 0 0K 0
NFSCL open 0 0K 0
NFSCL owner 0 0K 0
ice-resmgr 0 0K 0
ice-osdep 0 0K 0
ice 0 0K 0
iavf 0 0K 0
axgbe 0 0K 0
NFS fh 0 0K 0
NFS req 0 0K 0
NFSD usrgroup 0 0K 0
NFSD string 0 0K 0
NFSD V4lock 0 0K 0
NFSD V4state 0 0K 0
NFSD srvcache 0 0K 0
msdosfs_fat 0 0K 0
xen_intr 0 0K 0
msdosfs_mount 0 0K 0
msdosfs_node 0 0K 0
xen_hvm 0 0K 0
legacydrv 0 0K 0
bounce 0 0K 0
busdma 0 0K 0
qpidrv 0 0K 0
dmar_idpgtbl 0 0K 0
dmar_dom 0 0K 0
dmar_ctx 0 0K 0
DEVFS4 0 0K 0
isci 0 0K 0
iommu_dmamap 0 0K 0
hyperv_socket 0 0K 0
bxe_ilt 0 0K 0
DEVFS2 0 0K 0
xenbus 0 0K 0
gntdev 0 0K 0
privcmd_dev 0 0K 0
evtchn_dev 0 0K 0
vm_fictitious 0 0K 0
xenstore 0 0K 0
scsi_pass 0 0K 0
ciss_data 0 0K 0
xnb 0 0K 0
xbbd 0 0K 0
xbd 0 0K 0
Balloon 0 0K 0
sysmouse 0 0K 0
vtfont 0 0K 0
UMAHash 0 0K 0
BACKLIGHT 0 0K 0
ath_hal 0 0K 0
vm_pgdata 0 0K 0
jblocks 0 0K 0
savedino 0 0K 15
sentinel 0 0K 0
jfsync 0 0K 0
jtrunc 0 0K 0
sbdep 0 0K 3
jsegdep 0 0K 0
jseg 0 0K 0
jfreefrag 0 0K 0
jfreeblk 0 0K 0
jnewblk 0 0K 0
jmvref 0 0K 0
jremref 0 0K 0
jaddref 0 0K 0
freedep 0 0K 0
freefrag 0 0K 2
allocindir 0 0K 0
allocdirect 0 0K 0
ufs_trim 0 0K 0
mactemp 0 0K 0
audit_trigger 0 0K 0
audit_pipe_presel 0 0K 0
audit_pipeent 0 0K 0
audit_pipe 0 0K 0
audit_evname 0 0K 0
audit_bsm 0 0K 0
audit_gidset 0 0K 0
audit_text 0 0K 0
audit_path 0 0K 0
audit_data 0 0K 0
audit_cred 0 0K 0
athdev 0 0K 0
ata_pci 0 0K 0
ata_dma 0 0K 0
ata_generic 0 0K 0
pvscsi 0 0K 0
scsi_da 0 0K 69
ata_da 0 0K 0
scsi_ch 0 0K 0
scsi_cd 0 0K 0
AHCI driver 0 0K 0
USBdev 0 0K 0
USB 0 0K 0
ktls_ocf 0 0K 0
agp 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5E_TLS_RX 0 0K 0
MLX5EEPROM 0 0K 0
MLX5E_TLS 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EN 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5DUMP 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
seq_file 0 0K 0
lkpiskb 0 0K 0
radix 0 0K 0
idr 0 0K 0
lkpindev 0 0K 0
lkpifw 0 0K 0
lkpi80211 0 0K 0
NLM 0 0K 0
ipsec-spdcache 0 0K 0
ipsec-reg 0 0K 0
ipsec-misc 0 0K 0
ipsecrequest 0 0K 0
ip6opt 0 0K 6
ip6_msource 0 0K 0
ip6_moptions 0 0K 0
in6_mfilter 0 0K 0
frag6 0 0K 0
tcplog 0 0K 0
tcp_hwpace 0 0K 0
LRO 0 0K 0
ip_msource 0 0K 0
ip_moptions 0 0K 0
in_mfilter 0 0K 0
ipid 0 0K 0
80211scan 0 0K 0
80211ratectl 0 0K 0
80211power 0 0K 0
80211nodeie 0 0K 0
80211node 0 0K 0
80211mesh_gt 0 0K 0
80211mesh_rt 0 0K 0
80211perr 0 0K 0
80211prep 0 0K 0
80211preq 0 0K 0
80211dfs 0 0K 0
80211crypto 0 0K 0
80211vap 0 0K 0
iflib 0 0K 0
vlan 0 0K 0
gif 0 0K 0
ifdescr 0 0K 0
zlib 0 0K 0
fadvise 0 0K 0
VN POLL 0 0K 0
nvme_da 0 0K 0
statfs 0 0K 609
namei_tracker 0 0K 26
export_host 0 0K 0
cl_savebuf 0 0K 3
acpipwr 0 0K 0
acpi_perf 0 0K 0
twsbuf 0 0K 0
twe_commands 0 0K 0
tcp_log_dev 0 0K 31
midi buffers 0 0K 0
mixer 0 0K 0
ac97 0 0K 0
hdacc 0 0K 0
hdac 0 0K 0
hdaa 0 0K 0
acpicmbat 0 0K 0
SIIS driver 0 0K 0
CAM CCB 0 0K 523
PUC 0 0K 0
biobuf 0 0K 0
aios 0 0K 0
lio 0 0K 4
acl 0 0K 0
ppbusdev 0 0K 0
mbuf_tag 0 0K 97
ktls 0 0K 0
agtiapi_MemAlloc malloc 0 0K 0
osti_cacheable 0 0K 0
tempbuff 0 0K 0
tempbuff 0 0K 0
ag_tgt_map_t malloc 0 0K 0
ag_slr_map_t malloc 0 0K 0
lDevFlags * malloc 0 0K 0
tiDeviceHandle_t * malloc 0 0K 0
ag_portal_data_t malloc 0 0K 0
ag_device_t malloc 0 0K 0
STLock malloc 0 0K 0
CCB List 0 0K 0
sr_iov 0 0K 0
OCS 0 0K 0
OCS 0 0K 0
nvme 0 0K 0
nvd 0 0K 0
netmap 0 0K 0
mwldev 0 0K 0
MVS driver 0 0K 0
CAM ccb queue 0 0K 0
mrsasbuf 0 0K 0
mpt_user 0 0K 0
accf 0 0K 0
pts 0 0K 0
iov 0 0K 14779
ioctlops 0 0K 180
eventfd 0 0K 0
Witness 0 0K 0
stack 0 0K 0
mps_user 0 0K 0
MPSSAS 0 0K 0
mps 0 0K 0
mpr_user 0 0K 0
MPRSAS 0 0K 0
mpr 0 0K 0
sbuf 0 0K 288
mfibuf 0 0K 0
firmware 0 0K 0
compressor 0 0K 0
md_sectors 0 0K 0
SWAP 0 0K 0
md_disk 0 0K 0
malodev 0 0K 0
sysctltmp 0 0K 672
sysctl 0 0K 3
LED 0 0K 0
ekcd 0 0K 0
dumper 0 0K 0
sendfile 0 0K 0
rctl 0 0K 0
ix_sriov 0 0K 0
aacraidcam 0 0K 0
ix 0 0K 0
cache 0 0K 0
ipsbuf 0 0K 0
aacraid_buf 0 0K 0
prison_racct 0 0K 0
Fail Points 0 0K 0
sigio 0 0K 1
filedesc_to_leader 0 0K 0
pwd 0 0K 0
tty console 0 0K 0
aaccam 0 0K 0
aacbuf 0 0K 0
zstd 0 0K 0
XZ_DEC 0 0K 0
nvlist 0 0K 0
SCSI ENC 0 0K 0
SCSI sa 0 0K 0
isofs_node 0 0K 0
isofs_mount 0 0K 0
tr_raid5_data 0 0K 0
tr_raid1e_data 0 0K 0
tr_raid1_data 0 0K 0
tr_raid0_data 0 0K 0
tr_concat_data 0 0K 0
md_sii_data 0 0K 0
md_promise_data 0 0K 0
md_nvidia_data 0 0K 0
md_jmicron_data 0 0K 0
md_intel_data 0 0K 0
md_ddf_data 0 0K 0
raid_data 0 0K 72
geom_flashmap 0 0K 0
tmpfs dir 0 0K 0
tmpfs name 0 0K 0
tmpfs mount 0 0K 0
NFS FHA 0 0K 0
newnfsmnt 0 0K 0
newnfsclient_req 0 0K 0
NFSCL layrecall 0 0K 0
NFSCL session 0 0K 0
NFSCL sockreq 0 0K 0
NFSCL devinfo 0 0K 0
db> show uma
Zone Size Used Free Requests Sleeps Bucket Total Mem XFree
mbuf_jumbo_page 4096 8775 623 19972 0 254 38494208 0
mbuf 256 9274 644 65323 0 254 2539008 0
pbuf 2624 0 778 0 0 2 2041472 0
tcp_log 416 0 4833 34072 0 254 2010528 0
BUF TRIE 144 188 11600 527 0 62 1697472 0
malloc-384 384 4117 53 4458 0 30 1601280 0
mbuf_cluster 2048 762 0 762 0 254 1560576 0
malloc-128 128 11689 184 11822 0 126 1519744 0
malloc-4096 4096 326 2 497 0 2 1343488 0
UMA Slabs 0 112 10775 19 10775 0 126 1208928 0
sctp_asoc 2288 4 506 252 0 254 1166880 0
vmem btag 56 17871 96 17871 0 254 1006152 0
RADIX NODE 144 5853 190 34473 0 62 870192 0
FFS inode 1160 521 25 984 0 8 633360 0
sctp_ep 1208 9 501 667 0 254 616080 0
tcp_bbr_map 128 0 4557 33342 0 126 583296 0
tcpcb 1104 4 507 114 0 254 564144 0
VM OBJECT 264 1820 190 37119 0 30 530640 0
socket 960 34 474 2253 0 254 487680 0
malloc-65536 65536 4 3 210 0 1 458752 0
256 Bucket 2048 193 9 1388 0 8 413696 0
lkpimm 168 1 2327 1 0 62 391104 0
lkpicurr 168 2 2326 2 0 62 391104 0
sctp_raddr 736 4 513 252 0 254 380512 0
THREAD 1808 145 20 655 0 8 298320 0
VNODE 448 559 71 1024 0 30 282240 0
malloc-16384 16384 12 5 626 0 1 278528 0
malloc-64 64 3871 224 3960 0 254 262080 0
malloc-256 256 911 94 1671 0 62 257280 0
MAP ENTRY 96 2256 390 121837 0 126 254016 0
malloc-4096 4096 55 5 1333 0 2 245760 0
malloc-16 16 14613 137 14698 0 254 236000 0
DEVCTL 1024 21 199 151 0 0 225280 0
malloc-65536 65536 1 2 19 0 1 196608 0
mbuf_packet 256 40 722 2462 0 254 195072 0
ertt_txseginfo 40 0 4848 35767 0 254 193920 0
UMA Zones 768 244 0 244 0 16 187392 0
malloc-384 384 442 38 596 0 30 184320 0
malloc-32 32 5392 278 5526 0 254 181440 0
malloc-128 128 1222 173 26339 0 126 178560 0
malloc-256 256 563 67 1197 0 62 161280 0
FPU_save_area 832 147 33 1380 0 16 149760 0
malloc-1024 1024 125 19 1393 0 16 147456 0
S VFS Cache 104 1001 403 1514 0 126 146016 0
FFS2 dinode 256 521 49 983 0 62 145920 0
malloc-65536 65536 2 0 2 0 1 131072 0
malloc-128 128 837 186 2014 0 126 130944 0
unpcb 256 11 499 1229 0 254 130560 0
128 Bucket 1024 92 23 827 0 16 117760 0
ksiginfo 112 55 989 797 0 126 116928 0
VMSPACE 2552 34 11 1311 0 4 114840 0
malloc-128 128 518 257 3841 0 126 99200 0
malloc-32768 32768 0 3 120 0 1 98304 0
malloc-8192 8192 6 5 158 0 1 90112 0
malloc-4096 4096 18 4 656 0 2 90112 0
UMA Kegs 384 230 3 230 0 30 89472 0
PROC 1352 54 12 1330 0 8 89232 0
clpbuf 2624 0 32 20 0 16 83968 0
malloc-128 128 517 134 2368 0 126 83328 0
filedesc0 1072 55 22 1353 0 8 82544 0
malloc-2048 2048 4 36 535 0 8 81920 0
malloc-2048 2048 11 29 1384 0 8 81920 0
sctp_readq 152 0 520 110 0 254 79040 0
sctp_chunk 152 2 518 137 0 254 79040 0
malloc-8192 8192 9 0 9 0 1 73728 0
g_bio 408 0 180 4773 0 30 73440 0
malloc-64 64 697 374 2550 0 254 68544 0
malloc-64 64 523 548 1725 0 254 68544 0
malloc-65536 65536 1 0 1 0 1 65536 0
malloc-65536 65536 1 0 1 0 1 65536 0
sctp_stream_msg_out 112 1 539 67 0 254 60480 0
64 Bucket 512 71 41 2538 0 30 57344 0
malloc-64 64 326 493 3425 0 254 52416 0
32 Bucket 256 73 122 11024 0 62 49920 0
DIRHASH 1024 34 14 34 0 16 49152 0
NAMEI 1024 0 48 15635 0 16 49152 0
malloc-2048 2048 16 8 134 0 8 49152 0
malloc-1024 1024 14 34 522 0 16 49152 0
malloc-384 384 92 28 94 0 30 46080 0
malloc-384 384 88 32 88 0 30 46080 0
syncache 168 0 264 4 0 254 44352 0
malloc-8192 8192 5 0 5 0 1 40960 0
malloc-4096 4096 10 0 10 0 2 40960 0
pcpu-8 8 4735 385 5131 0 254 40960 0
Mountpoints 2752 2 12 2 0 4 38528 0
tcp_inpcb 424 4 86 114 0 30 38160 0
udp_inpcb 424 6 84 174 0 30 38160 0
pipe 744 21 29 353 0 16 37200 0
malloc-64 64 6 561 14682 0 254 36288 0
malloc-64 64 228 339 15475 0 254 36288 0
malloc-64 64 4 563 21 0 254 36288 0
malloc-64 64 6 561 14 0 254 36288 0
malloc-128 128 77 202 109 0 126 35712 0
malloc-128 128 2 277 144 0 126 35712 0
malloc-128 128 19 260 280 0 126 35712 0
routing nhops 256 27 108 34 0 62 34560 0
ttyoutq 256 72 63 160 0 62 34560 0
malloc-384 384 15 75 998 0 30 34560 0
malloc-256 256 50 85 1010 0 62 34560 0
malloc-256 256 40 95 591 0 62 34560 0
malloc-256 256 73 62 1954 0 62 34560 0
malloc-256 256 17 118 678 0 62 34560 0
malloc-256 256 51 84 239 0 62 34560 0
malloc-256 256 17 118 610 0 62 34560 0
malloc-32768 32768 1 0 1 0 1 32768 0
malloc-32768 32768 1 0 1 0 1 32768 0
malloc-32768 32768 1 0 1 0 1 32768 0
malloc-4096 4096 3 5 615 0 2 32768 0
malloc-4096 4096 6 2 6 0 2 32768 0
malloc-2048 2048 3 13 63 0 8 32768 0
malloc-2048 2048 3 13 3 0 8 32768 0
malloc-2048 2048 10 6 12 0 8 32768 0
malloc-2048 2048 1 15 3 0 8 32768 0
malloc-1024 1024 5 27 259 0 16 32768 0
malloc-1024 1024 4 28 7 0 16 32768 0
malloc-1024 1024 19 13 40 0 16 32768 0
malloc-1024 1024 1 31 5 0 16 32768 0
malloc-512 512 2 62 94 0 30 32768 0
malloc-512 512 4 60 185 0 30 32768 0
malloc-512 512 9 55 9 0 30 32768 0
malloc-512 512 2 62 10 0 30 32768 0
malloc-512 512 4 60 5 0 30 32768 0
pcpu-64 64 491 21 491 0 254 32768 0
ttyinq 160 135 65 300 0 62 32000 0
tcp_rack_map 120 0 264 72 0 126 31680 0
tcp_bbr_pcb 832 0 36 47 0 16 29952 0
cpuset 104 7 272 7 0 126 29016 0
sctp_laddr 48 6 582 194 0 254 28224 0
PWD 32 18 864 523 0 254 28224 0
malloc-32 32 273 609 1977 0 254 28224 0
malloc-32 32 274 608 1621 0 254 28224 0
16 Bucket 144 56 140 250 0 62 28224 0
4 Bucket 48 6 582 63 0 254 28224 0
ripcb 424 2 61 42 0 30 26712 0
da_ccb 544 0 49 1307 0 16 26656 0
TURNSTILE 136 166 23 166 0 62 25704 0
malloc-8192 8192 2 1 4 0 1 24576 0
rtentry 176 30 108 34 0 62 24288 0
PGRP 88 26 250 38 0 126 24288 0
rl_entry 40 47 559 47 0 254 24240 0
Files 80 190 110 9067 0 126 24000 0
8 Bucket 80 45 255 339 0 126 24000 0
malloc-384 384 27 33 27 0 30 23040 0
SLEEPQUEUE 88 166 90 166 0 126 22528 0
hostcache 64 2 313 2 0 254 20160 0
udpcb 32 6 624 174 0 254 20160 0
tcp_inpcb ports 32 2 628 84 0 254 20160 0
udp_inpcb ports 32 3 627 33 0 254 20160 0
ertt 72 4 276 114 0 126 20160 0
malloc-32 32 13 617 35 0 254 20160 0
malloc-32 32 31 599 2781 0 254 20160 0
malloc-32 32 12 618 25 0 254 20160 0
malloc-32 32 68 562 1664 0 254 20160 0
malloc-32 32 14 616 23 0 254 20160 0
2 Bucket 32 52 578 367 0 254 20160 0
KNOTE 160 28 97 5193 0 62 20000 0
epoch_record pcpu 256 4 60 4 0 62 16384 0
malloc-16384 16384 1 0 1 0 1 16384 0
malloc-16384 16384 1 0 1 0 1 16384 0
malloc-16384 16384 1 0 1 0 1 16384 0
malloc-8192 8192 2 0 2 0 1 16384 0
malloc-2048 2048 2 6 2 0 8 16384 0
malloc-1024 1024 8 8 8 0 16 16384 0
malloc-512 512 0 32 1 0 30 16384 0
malloc-512 512 1 31 1 0 30 16384 0
SMR CPU 32 7 504 7 0 254 16352 0
pf tags 104 1 155 1 0 126 16224 0
tcp_rack_pcb 896 0 18 27 0 16 16128 0
malloc-16 16 546 454 4167 0 254 16000 0
AIO 208 0 76 4 0 62 15808 0
kenv 258 15 45 1036 0 30 15480 0
mqnode 416 3 33 3 0 30 14976 0
vmem 1856 1 7 1 0 8 14848 0
SMR SHARED 24 7 504 7 0 254 12264 0
AIOP 32 4 374 4 0 254 12096 0
vtnet_tx_hdr 24 0 501 39394 0 254 12024 0
malloc-16 16 16 734 1577 0 254 12000 0
malloc-16 16 25 725 64 0 254 12000 0
malloc-16 16 27 723 25757 0 254 12000 0
malloc-16 16 8 742 127 0 254 12000 0
malloc-16 16 60 690 87 0 254 12000 0
malloc-16 16 5 745 388 0 254 12000 0
AIOCB 552 0 21 8 0 16 11592 0
malloc-384 384 1 29 1 0 30 11520 0
AIOLIO 272 0 42 4 0 30 11424 0
malloc-8192 8192 1 0 1 0 1 8192 0
malloc-4096 4096 1 1 1 0 2 8192 0
malloc-4096 4096 1 1 1 0 2 8192 0
pcpu-16 16 14 498 14 0 254 8192 0
UMA Slabs 1 176 9 13 9 0 62 3872 0
KMAP ENTRY 96 12 27 14 0 0 3744 0
FFS1 dinode 128 0 0 0 0 126 0 0
ada_ccb 272 0 0 0 0 30 0 0
swblk 136 0 0 0 0 62 0 0
swpctrie 144 0 0 0 0 62 0 0
cdg_qdiffsample 16 0 0 0 0 254 0 0
pf state scrubs 40 0 0 0 0 254 0 0
pf frag entries 40 0 0 0 0 254 0 0
pf frags 248 0 0 0 0 62 0 0
pf table entries 160 0 0 0 0 62 0 0
pf table entry counters 64 0 0 0 0 254 0 0
pf source nodes 136 0 0 0 0 254 0 0
pf state keys 88 0 0 0 0 126 0 0
pf states 312 0 0 0 0 254 0 0
pf mtags 48 0 0 0 0 254 0 0
tfo_ccache_entries 80 0 0 0 0 126 0 0
tfo 4 0 0 0 0 254 0 0
sackhole 32 0 0 0 0 254 0 0
tcptw 72 0 0 0 0 254 0 0
ipq 56 0 0 0 0 254 0 0
sctp_asconf_ack 48 0 0 0 0 254 0 0
sctp_asconf 40 0 0 0 0 254 0 0
tcp_log_node 120 0 0 0 0 126 0 0
tcp_log_bucket 176 0 0 0 0 62 0 0
tcpreass 48 0 0 0 0 254 0 0
ripcb ports 32 0 0 0 0 254 0 0
udplite_inpcb ports 32 0 0 0 0 254 0 0
udplite_inpcb 424 0 0 0 0 30 0 0
IPsec SA lft_c 16 0 0 0 0 254 0 0
itimer 352 0 0 0 0 30 0 0
NCLNODE 608 0 0 0 0 16 0 0
TMPFS node 224 0 0 0 0 62 0 0
mqnotifier 216 0 0 0 0 62 0 0
mvdata 64 0 0 0 0 254 0 0
mqueue 248 0 0 0 0 62 0 0
LTS VFS Cache 360 0 0 0 0 30 0 0
L VFS Cache 320 0 0 0 0 30 0 0
STS VFS Cache 144 0 0 0 0 62 0 0
cryptop 280 0 0 0 0 30 0 0
linux_dma_object 32 0 0 0 0 254 0 0
linux_dma_pctrie 144 0 0 0 0 62 0 0
IOMMU_MAP_ENTRY 120 0 0 0 0 126 0 0
mbuf_jumbo_16k 16384 0 0 0 0 254 0 0
mbuf_jumbo_9k 9216 0 0 0 0 254 0 0
audit_record 1280 0 0 0 0 8 0 0
domainset 40 0 0 0 0 254 0 0
MAC labels 40 0 0 0 0 254 0 0
vnpbuf 2624 0 0 0 0 64 0 0
mdpbuf 2624 0 0 0 0 3 0 0
nfspbuf 2624 0 0 0 0 16 0 0
swwbuf 2624 0 0 0 0 8 0 0
swrbuf 2624 0 0 0 0 16 0 0
umtx_shm 88 0 0 0 0 126 0 0
umtx pi 96 0 0 0 0 126 0 0
rangeset pctrie nodes 144 0 0 0 0 62 0 0
malloc-65536 65536 0 0 0 0 1 0 0
malloc-65536 65536 0 0 0
---
This report is generated by a bot. It may contain errors.
See https://goo.gl/tpsmEJ for more information about syzbot.
syzbot engineers can be reached at syzk...@googlegroups.com.
syzbot will keep track of this issue. See:
https://goo.gl/tpsmEJ#status for how to communicate with syzbot.
syzbot
Feb 20, 2022, 2:14:17 AM2/20/22
to syzkaller-f...@googlegroups.com
syzbot has found a reproducer for the following issue on:
HEAD commit: a4a31271cc7a sctp: cleanup sctp_lower_sosend
git tree: freebsd-src
console output: https://syzkaller.appspot.com/x/log.txt?x=12b2e232700000
dashboard link: https://syzkaller.appspot.com/bug?extid=cd3c1dd64861b8c200bd
syz repro: https://syzkaller.appspot.com/x/repro.syz?x=175a20a6700000
C reproducer: https://syzkaller.appspot.com/x/repro.c?x=149b97ce700000
IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+cd3c1d...@syzkaller.appspotmail.com
panic: hold_tcblock is false
cpuid = 0
time = 1645341097
KDB: stack backtrace:
db_trace_self_wrapper() at db_trace_self_wrapper+0xc7/frame 0xfffffe008fdfc050
kdb_backtrace() at kdb_backtrace+0xd3/frame 0xfffffe008fdfc1b0
vpanic() at vpanic+0x2b8/frame 0xfffffe008fdfc290
panic() at panic+0xb5/frame 0xfffffe008fdfc350
sctp_lower_sosend() at sctp_lower_sosend+0x5976/frame 0xfffffe008fdfc740
sctp_sosend() at sctp_sosend+0x72c/frame 0xfffffe008fdfc9e0
sosend() at sosend+0xfc/frame 0xfffffe008fdfca50
kern_sendit() at kern_sendit+0x58a/frame 0xfffffe008fdfcbc0
sendit() at sendit+0x2b0/frame 0xfffffe008fdfcc10
sys_sendto() at sys_sendto+0x182/frame 0xfffffe008fdfcd30
amd64_syscall() at amd64_syscall+0x40c/frame 0xfffffe008fdfcf30
fast_syscall_common() at fast_syscall_common+0xf8/frame 0xfffffe008fdfcf30
--- syscall (0, FreeBSD ELF64, nosys), rip = 0x2b3d1a, rsp = 0x8211aa9b8, rbp = 0x8211aa9d0 ---
KDB: enter: panic
[ thread pid 779 tid 100105 ]
rdx 0xdffff7c000000000
rbx 0
rsp 0xfffffe008fdfc190
rbp 0xfffffe008fdfc1b0
rsi 0x1
rdi 0
r8 0x3
r9 0xffffffff
r10 0
r11 0xfffffe0058c276f0
r12 0xfffffe0058c271e0
r13 0xfffffe008fdfc201
ABI: FreeBSD ELF64
flag: 0x10004000 flag2: 0
arguments: ./syz-executor989531287
(map 0xfffffe0092d75000)
(map.pmap 0xfffffe0092d750c0)
(pmap 0xfffffe0092d75128)
threads: 1
100105 Run CPU 0 syz-executor9895312
777 775 777 0 Ss pause 0xfffffe008fed00b0 csh
775 688 775 0 Ss select 0xfffffe0092651740 sshd
752 1 752 0 Ss+ ttyin 0xfffffe0057465cb0 getty
751 1 751 0 Ss+ ttyin 0xfffffe00579a70b0 getty
750 1 750 0 Ss+ ttyin 0xfffffe00579a74b0 getty
749 1 749 0 Ss+ ttyin 0xfffffe00579a78b0 getty
748 1 748 0 Ss+ ttyin 0xfffffe00579a7cb0 getty
747 1 747 0 Ss+ ttyin 0xfffffe00579a80b0 getty
746 1 746 0 Ss+ ttyin 0xfffffe00579a84b0 getty
744 1 18 0 S+ piperd 0xfffffe0058b4f000 logger
743 742 18 0 S+ nanslp 0xffffffff83e3ba81 sleep
742 1 18 0 S+ wait 0xfffffe009294da90 sh
692 1 692 0 Ss nanslp 0xffffffff83e3ba81 cron
688 1 688 0 Ss select 0xfffffe0092652340 sshd
501 1 501 0 Ss select 0xfffffe00926524c0 syslogd
430 1 430 0 Ss select 0xfffffe00578776c0 devd
429 1 429 65 Ss select 0xfffffe0057877640 dhclient
344 1 344 0 Ss select 0xfffffe0057877a40 dhclient
341 1 341 0 Ss select 0xfffffe00926526c0 dhclient
100078 D psleep 0xffffffff83f87178 [dom0]
5 0 0 0 DL waiting 0xffffffff8490d560 [sctp_iterator]
100004 Run CPU 1 [idle: cpu1]
100067 D - 0xffffffff82ba77a0 [deadlkres]
vfscache 3 1025K 3
pcb 24 541K 44
inodedep 49 530K 71
subproc 98 182K 838
vnet_data 1 168K 1
vmem 3 146K 5
tidhash 3 141K 3
linker 358 134K 386
pagedep 14 132K 18
tfo_ccache 1 128K 1
sem 4 106K 4
DEVFS1 105 105K 114
umtx 264 33K 264
temp 17 33K 1606
KTRACE 100 13K 100
rman 88 11K 429
GEOM 61 11K 490
routetbl 50 11K 176
plimit 17 5K 322
vt 11 5K 11
ifnet 3 5K 3
evdev 4 4K 4
acpisem 28 4K 28
hhook 15 4K 17
ether_multi 40 4K 50
diradd 25 4K 36
lltable 11 4K 11
pf_ifnet 5 3K 6
in6_multi 25 3K 25
terminal 11 3K 11
sctp_atcl 7 3K 8
session 20 3K 31
kqueue 40 3K 782
pwddesc 40 3K 780
uidinfo 3 3K 8
proc-args 62 3K 1720
sctp_stro 2 2K 2
selfd 27 2K 11040
Unitno 27 2K 39
msi 12 2K 12
sctp_stri 2 1K 2
softdep 1 1K 1
ipsec 3 1K 3
indirdep 3 1K 3
nhops 6 1K 6
crypto 4 1K 4
ip6ndp 4 1K 5
encap_export_host 12 1K 12
newdirblk 4 1K 8
mkdir 4 1K 16
in_multi 2 1K 4
chacha20random 1 1K 1
osd 7 1K 18
inpcbpolicy 10 1K 139
sctp_ifn 2 1K 6
DEVFS 9 1K 10
mld 2 1K 2
igmp 2 1K 2
loginclass 3 1K 7
pmchooks 1 1K 1
sctp_athm 7 1K 8
soname 4 1K 3473
filecaps 4 1K 66
tun 3 1K 3
sctp_vrf 1 1K 1
sctp_map 4 1K 4
vnet 1 1K 1
entropy 2 1K 35
pf_altq 0 0K 0
pf_osfp 0 0K 0
pf_temp 0 0K 0
sctp_mcore 0 0K 0
sctp_socko 0 0K 1
sctp_iter 0 0K 4
sctp_mvrf 0 0K 0
sctp_timw 0 0K 0
sctp_aadr 0 0K 0
mqdata 0 0K 0
tcp_do 0 0K 0
tcp_fsb 0 0K 0
filemon 0 0K 0
sbdep 0 0K 2
freeblks 0 0K 25
freefrag 0 0K 1
ip6opt 0 0K 3
statfs 0 0K 195
namei_tracker 0 0K 0
export_host 0 0K 0
cl_savebuf 0 0K 4
iov 0 0K 13627
ioctlops 0 0K 86
mbuf_jumbo_page 4096 8775 623 15067 0 254 38494208 0
mbuf 256 9033 629 18103 0 254 2473472 0
pbuf 2624 0 794 0 0 2 2083456 0
BUF TRIE 144 183 11605 513 0 62 1697472 0
malloc-4096 4096 326 2 490 0 2 1343488 0
UMA Slabs 0 112 10539 3 10539 0 126 1180704 0
sctp_asoc 2288 2 508 2 0 254 1166880 0
mbuf_cluster 2048 508 0 508 0 254 1040384 0
vmem btag 56 16465 62 16465 0 254 925512 0
sctp_ep 1208 3 507 3 0 254 616080 0
FFS inode 1160 499 19 508 0 8 600880 0
tcpcb 1104 3 508 7 0 254 564144 0
RADIX NODE 144 3368 183 20099 0 62 511344 0
socket 960 21 487 1338 0 254 487680 0
malloc-65536 65536 4 3 186 0 1 458752 0
VM OBJECT 264 1411 119 24452 0 30 403920 0
256 Bucket 2048 130 18 1023 0 8 303104 0
malloc-64 64 3870 225 3909 0 254 262080 0
VNODE 448 529 47 540 0 30 258048 0
malloc-256 256 976 29 1289 0 62 257280 0
malloc-16 16 14613 387 14685 0 254 240000 0
THREAD 1808 122 10 122 0 8 238656 0
DEVCTL 1024 0 220 126 0 0 225280 0
MAP ENTRY 96 1560 456 84326 0 126 193536 0
malloc-4096 4096 40 4 782 0 2 180224 0
malloc-128 128 1215 180 26330 0 126 178560 0
malloc-1024 1024 121 23 1193 0 16 147456 0
FFS2 dinode 256 499 71 508 0 62 145920 0
unpcb 256 7 503 1179 0 254 130560 0
mbuf_packet 256 1 507 83 0 254 130048 0
S VFS Cache 104 966 204 1006 0 126 121680 0
FPU_save_area 832 124 20 136 0 16 119808 0
ksiginfo 112 44 1000 59 0 126 116928 0
malloc-128 128 716 183 1760 0 126 115072 0
malloc-16384 16384 5 2 180 0 1 114688 0
malloc-128 128 514 261 3837 0 126 99200 0
VMSPACE 2552 23 10 764 0 4 84216 0
malloc-8192 8192 6 4 136 0 1 81920 0
malloc-4096 4096 17 3 652 0 2 81920 0
PROC 1352 39 18 779 0 8 77064 0
malloc-64 64 574 497 1771 0 254 68544 0
malloc-64 64 520 551 1615 0 254 68544 0
malloc-256 256 181 74 208 0 62 65280 0
filedesc0 1072 40 16 780 0 8 60032 0
64 Bucket 512 64 40 1636 0 30 53248 0
malloc-64 64 296 523 2308 0 254 52416 0
32 Bucket 256 59 136 7143 0 62 49920 0
malloc-2048 2048 5 19 720 0 8 49152 0
clpbuf 2624 0 16 22 0 16 41984 0
pcpu-8 8 4220 388 4248 0 254 36864 0
malloc-64 64 4 563 13328 0 254 36288 0
malloc-64 64 164 403 11201 0 254 36288 0
malloc-128 128 77 202 83 0 126 35712 0
malloc-128 128 2 277 143 0 126 35712 0
malloc-128 128 84 195 136 0 126 35712 0
malloc-128 128 16 263 275 0 126 35712 0
routing nhops 256 10 125 17 0 62 34560 0
malloc-384 384 62 28 94 0 30 34560 0
malloc-384 384 62 28 62 0 30 34560 0
malloc-256 256 14 121 472 0 62 34560 0
malloc-256 256 26 109 68 0 62 34560 0
malloc-256 256 40 95 1034 0 62 34560 0
malloc-256 256 11 124 15 0 62 34560 0
malloc-256 256 41 94 246 0 62 34560 0
malloc-256 256 10 125 521 0 62 34560 0
malloc-2048 2048 9 7 10 0 8 32768 0
malloc-1024 1024 3 29 7 0 16 32768 0
malloc-512 512 4 60 180 0 30 32768 0
16 Bucket 144 40 156 233 0 62 28224 0
4 Bucket 48 6 582 49 0 254 28224 0
tcp_inpcb 424 3 60 7 0 30 26712 0
ripcb 424 1 62 4 0 30 26712 0
da_ccb 544 0 49 1240 0 16 26656 0
pipe 744 7 28 284 0 16 26040 0
TURNSTILE 136 133 56 133 0 62 25704 0
malloc-4096 4096 2 4 198 0 2 24576 0
malloc-4096 4096 6 0 6 0 2 24576 0
malloc-4096 4096 6 0 6 0 2 24576 0
rtentry 176 13 125 17 0 62 24288 0
PGRP 88 20 256 31 0 126 24288 0
ertt_txseginfo 40 1 605 250 0 254 24240 0
rl_entry 40 36 570 36 0 254 24240 0
Files 80 73 227 6582 0 126 24000 0
8 Bucket 80 35 265 228 0 126 24000 0
malloc-384 384 7 53 28 0 30 23040 0
SLEEPQUEUE 88 133 123 133 0 126 22528 0
hostcache 64 1 314 1 0 254 20160 0
udpcb 32 6 624 128 0 254 20160 0
udp_inpcb ports 32 3 627 40 0 254 20160 0
ertt 72 3 277 7 0 126 20160 0
PWD 32 10 620 100 0 254 20160 0
malloc-32 32 9 621 23 0 254 20160 0
malloc-32 32 227 403 1126 0 254 20160 0
malloc-32 32 30 600 2768 0 254 20160 0
malloc-32 32 14 616 20 0 254 20160 0
2 Bucket 32 49 581 294 0 254 20160 0
malloc-16 16 510 740 2990 0 254 20000 0
malloc-512 512 2 30 2 0 30 16384 0
kenv 258 15 45 1029 0 30 15480 0
KNOTE 160 0 75 8 0 62 12000 0
malloc-16 16 8 742 201 0 254 12000 0
malloc-16 16 21 729 60 0 254 12000 0
malloc-16 16 26 724 25650 0 254 12000 0
malloc-16 16 8 742 120 0 254 12000 0
malloc-16 16 59 691 81 0 254 12000 0
vtnet_tx_hdr 24 0 167 2106 0 254 4008 0
UMA Slabs 1 176 8 14 8 0 62 3872 0
tcp_rack_map 120 0 0 0 0 126 0 0
tcp_bbr_pcb 832 0 0 0 0 16 0 0
tcp_bbr_map 128 0 0 0 0 126 0 0
AIOCB 552 0 0 0 0 16 0 0
AIOP 32 0 0 0 0 254 0 0
AIO 208 0 0 0 0 62 0 0
malloc-32768 32768 0 0 0 0 1 0 0
malloc-32768 32768 0 0 0 0 1 0 0
malloc-32768 32768 0 0 0 0 1 0 0
malloc-32768 32768 0 0 0 0 1 0 0
malloc-16384 16384 0 0 0 0 1 0 0
malloc-16384 16384 0 0 0 0 1 0 0
malloc-16384 16384 0 0 0 0 1 0 0
malloc-16384 16384 0 0 0 0 1 0 0
malloc-8192 8192 0 0 0 0 1 0 0
malloc-8192 8192 0 0 0 0 1 0 0
malloc-1024 1024 0 0 0 0 16 0 0
malloc-512 512 0 0 0 0 30 0 0
malloc-384 384 0 0 0 0 30 0 0
pcpu-32 32 0 0 0 0 254 0 0
pcpu-4 4 0 0 0 0 254 0 0
fakepg 104 0 0 0 0 126 0 0
UMA Hash 256 0 0 0 0 62 0 0
HEAD commit: a4a31271cc7a sctp: cleanup sctp_lower_sosend
git tree: freebsd-src
dashboard link: https://syzkaller.appspot.com/bug?extid=cd3c1dd64861b8c200bd
syz repro: https://syzkaller.appspot.com/x/repro.syz?x=175a20a6700000
C reproducer: https://syzkaller.appspot.com/x/repro.c?x=149b97ce700000
IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+cd3c1d...@syzkaller.appspotmail.com
panic: hold_tcblock is false
time = 1645341097
KDB: stack backtrace:
db_trace_self_wrapper() at db_trace_self_wrapper+0xc7/frame 0xfffffe008fdfc050
kdb_backtrace() at kdb_backtrace+0xd3/frame 0xfffffe008fdfc1b0
vpanic() at vpanic+0x2b8/frame 0xfffffe008fdfc290
panic() at panic+0xb5/frame 0xfffffe008fdfc350
sctp_lower_sosend() at sctp_lower_sosend+0x5976/frame 0xfffffe008fdfc740
sctp_sosend() at sctp_sosend+0x72c/frame 0xfffffe008fdfc9e0
sosend() at sosend+0xfc/frame 0xfffffe008fdfca50
kern_sendit() at kern_sendit+0x58a/frame 0xfffffe008fdfcbc0
sendit() at sendit+0x2b0/frame 0xfffffe008fdfcc10
sys_sendto() at sys_sendto+0x182/frame 0xfffffe008fdfcd30
amd64_syscall() at amd64_syscall+0x40c/frame 0xfffffe008fdfcf30
fast_syscall_common() at fast_syscall_common+0xf8/frame 0xfffffe008fdfcf30
--- syscall (0, FreeBSD ELF64, nosys), rip = 0x2b3d1a, rsp = 0x8211aa9b8, rbp = 0x8211aa9d0 ---
KDB: enter: panic
[ thread pid 779 tid 100105 ]
Stopped at kdb_enter+0x6b: movq $0,0x2708c3a(%rip)
db>
db> set $lines = 0
db> set $maxwidth = 0
db> show registers
cs 0x20
ds 0x3b
es 0x3b
fs 0x13
gs 0x1b
ss 0x28
rax 0x12
rcx 0x5352406408ae3323
db>
db> set $lines = 0
db> set $maxwidth = 0
db> show registers
cs 0x20
ds 0x3b
es 0x3b
fs 0x13
gs 0x1b
ss 0x28
rax 0x12
rdx 0xdffff7c000000000
rbx 0
rsp 0xfffffe008fdfc190
rbp 0xfffffe008fdfc1b0
rsi 0x1
rdi 0
r8 0x3
r9 0xffffffff
r10 0
r11 0xfffffe0058c276f0
r12 0xfffffe0058c271e0
r13 0xfffffe008fdfc201
r14 0xffffffff82ba1cc0 .str.18
r15 0xffffffff82ba1cc0 .str.18
rip 0xffffffff8176575b kdb_enter+0x6b
rflags 0x46
kdb_enter+0x6b: movq $0,0x2708c3a(%rip)
db> show proc
Process 779 (syz-executor9895312) at 0xfffffe008fed4000:
r15 0xffffffff82ba1cc0 .str.18
rip 0xffffffff8176575b kdb_enter+0x6b
rflags 0x46
kdb_enter+0x6b: movq $0,0x2708c3a(%rip)
db> show proc
state: NORMAL
uid: 0 gids: 0, 0, 5
parent: pid 777 at 0xfffffe008fed0000
uid: 0 gids: 0, 0, 5
ABI: FreeBSD ELF64
flag: 0x10004000 flag2: 0
arguments: ./syz-executor989531287
reaper: 0xfffffe0053dda000 reapsubtree: 1
sigparent: 20
vmspace: 0xfffffe0092d75000
sigparent: 20
(map 0xfffffe0092d75000)
(map.pmap 0xfffffe0092d750c0)
(pmap 0xfffffe0092d75128)
threads: 1
100105 Run CPU 0 syz-executor9895312
db> ps
pid ppid pgrp uid state wmesg wchan cmd
779 777 777 0 R CPU 0 syz-executor9895312
pid ppid pgrp uid state wmesg wchan cmd
777 775 777 0 Ss pause 0xfffffe008fed00b0 csh
775 688 775 0 Ss select 0xfffffe0092651740 sshd
754 1 754 0 Ss+ ttyin 0xfffffe0057466cb0 getty
753 1 753 0 Ss+ ttyin 0xfffffe00579a6cb0 getty
752 1 752 0 Ss+ ttyin 0xfffffe0057465cb0 getty
751 1 751 0 Ss+ ttyin 0xfffffe00579a70b0 getty
750 1 750 0 Ss+ ttyin 0xfffffe00579a74b0 getty
749 1 749 0 Ss+ ttyin 0xfffffe00579a78b0 getty
748 1 748 0 Ss+ ttyin 0xfffffe00579a7cb0 getty
747 1 747 0 Ss+ ttyin 0xfffffe00579a80b0 getty
746 1 746 0 Ss+ ttyin 0xfffffe00579a84b0 getty
744 1 18 0 S+ piperd 0xfffffe0058b4f000 logger
743 742 18 0 S+ nanslp 0xffffffff83e3ba81 sleep
742 1 18 0 S+ wait 0xfffffe009294da90 sh
692 1 692 0 Ss nanslp 0xffffffff83e3ba81 cron
688 1 688 0 Ss select 0xfffffe0092652340 sshd
501 1 501 0 Ss select 0xfffffe00926524c0 syslogd
430 1 430 0 Ss select 0xfffffe00578776c0 devd
429 1 429 65 Ss select 0xfffffe0057877640 dhclient
344 1 344 0 Ss select 0xfffffe0057877a40 dhclient
341 1 341 0 Ss select 0xfffffe00926526c0 dhclient
17 0 0 0 DL syncer 0xffffffff83f61260 [syncer]
16 0 0 0 DL vlruwt 0xfffffe0056f7ba90 [vnlru]
15 0 0 0 DL (threaded) [bufdaemon]
100080 D psleep 0xffffffff83f5f860 [bufdaemon]
100083 D - 0xffffffff83211f80 [bufspacedaemon-0]
100096 D sdflush 0xfffffe0057464ce8 [/ worker]
100080 D psleep 0xffffffff83f5f860 [bufdaemon]
100083 D - 0xffffffff83211f80 [bufspacedaemon-0]
9 0 0 0 DL psleep 0xffffffff83f932c0 [vmdaemon]
8 0 0 0 DL (threaded) [pagedaemon]
100078 D psleep 0xffffffff83f87178 [dom0]
100081 D launds 0xffffffff83f87184 [laundry: dom0]
100082 D umarcl 0xffffffff81e9b4a0 [uma]
7 0 0 0 DL - 0xffffffff83bf7a08 [rand_harvestq]
6 0 0 0 DL pftm 0xffffffff84ad2530 [pf purge]
100082 D umarcl 0xffffffff81e9b4a0 [uma]
7 0 0 0 DL - 0xffffffff83bf7a08 [rand_harvestq]
5 0 0 0 DL waiting 0xffffffff8490d560 [sctp_iterator]
100071 D - 0xfffffe005787d100 [acpi_task_0]
100072 D - 0xfffffe005787d100 [acpi_task_1]
100073 D - 0xfffffe005787d100 [acpi_task_2]
100074 D - 0xfffffe000796e200 [mca taskq]
100076 D - 0xfffffe0053ecf500 [CAM taskq]
db> show all locks
100072 D - 0xfffffe005787d100 [acpi_task_1]
100073 D - 0xfffffe005787d100 [acpi_task_2]
100074 D - 0xfffffe000796e200 [mca taskq]
100076 D - 0xfffffe0053ecf500 [CAM taskq]
db> show all locks
db> show malloc
Type InUse MemUse Requests
pf_hash 5 11524K 5
tcp_hpts 6 4801K 6
devbuf 4217 4323K 4242
sysctloid 35306 2080K 35377
vtbuf 24 1968K 46
kobj 326 1304K 487
newblk 706 1201K 718
Type InUse MemUse Requests
pf_hash 5 11524K 5
tcp_hpts 6 4801K 6
devbuf 4217 4323K 4242
sysctloid 35306 2080K 35377
vtbuf 24 1968K 46
kobj 326 1304K 487
vfscache 3 1025K 3
pcb 24 541K 44
inodedep 49 530K 71
ufs_quota 1 512K 1
vfs_hash 1 512K 1
callout 2 512K 2
intr 4 472K 4
acpica 1674 184K 56396
vfs_hash 1 512K 1
callout 2 512K 2
intr 4 472K 4
subproc 98 182K 838
vnet_data 1 168K 1
vmem 3 146K 5
tidhash 3 141K 3
linker 358 134K 386
pagedep 14 132K 18
tfo_ccache 1 128K 1
sem 4 106K 4
DEVFS1 105 105K 114
bus 988 81K 3441
mtx_pool 2 72K 2
syncache 1 68K 1
acpitask 1 64K 1
ddb_capture 1 64K 1
module 511 64K 511
kdtrace 163 34K 903
mtx_pool 2 72K 2
syncache 1 68K 1
acpitask 1 64K 1
ddb_capture 1 64K 1
module 511 64K 511
umtx 264 33K 264
temp 17 33K 1606
hostcache 1 32K 1
shm 1 32K 1
DEVFS3 124 31K 134
shm 1 32K 1
msg 4 30K 4
gtaskqueue 18 26K 18
kbdmux 6 22K 6
DEVFS_RULE 56 20K 56
BPF 10 18K 10
gtaskqueue 18 26K 18
kbdmux 6 22K 6
DEVFS_RULE 56 20K 56
ufs_mount 4 17K 5
proc 3 17K 3
tty 16 16K 16
ithread 100 16K 100
bus-sc 34 15K 1651
proc 3 17K 3
tty 16 16K 16
ithread 100 16K 100
KTRACE 100 13K 100
kenv 95 12K 95
eventhandler 133 12K 133
ifaddr 30 12K 32
eventhandler 133 12K 133
rman 88 11K 429
GEOM 61 11K 490
routetbl 50 11K 176
CAM queue 5 11K 1528
bmsafemap 4 9K 40
UART 12 9K 12
devstat 4 9K 4
ksem 1 8K 1
devstat 4 9K 4
ksem 1 8K 1
rpc 2 8K 2
shmfd 1 8K 1
pfs_vncache 1 8K 1
cred 31 8K 234
shmfd 1 8K 1
pfs_vncache 1 8K 1
pfs_nodes 20 8K 20
audit_evclass 237 8K 296
taskqueue 63 7K 63
sglist 5 7K 5
audit_evclass 237 8K 296
taskqueue 63 7K 63
CAM DEV 3 6K 510
ufs_dirhash 24 5K 24
UMA 272 5K 272
dirrem 17 5K 28
UMA 272 5K 272
plimit 17 5K 322
vt 11 5K 11
ifnet 3 5K 3
memdesc 1 4K 1
MCA 32 4K 32
filedesc 1 4K 1
MCA 32 4K 32
evdev 4 4K 4
acpisem 28 4K 28
hhook 15 4K 17
ether_multi 40 4K 50
diradd 25 4K 36
lltable 11 4K 11
pf_ifnet 5 3K 6
in6_multi 25 3K 25
terminal 11 3K 11
sctp_atcl 7 3K 8
session 20 3K 31
kqueue 40 3K 782
pwddesc 40 3K 780
uidinfo 3 3K 8
proc-args 62 3K 1720
sctp_stro 2 2K 2
local_apic 1 2K 1
io_apic 1 2K 1
fpukern_ctx 2 2K 2
ipsec-saq 2 2K 2
io_apic 1 2K 1
fpukern_ctx 2 2K 2
selfd 27 2K 11040
Unitno 27 2K 39
CAM XPT 22 2K 543
lockf 15 2K 22
msi 12 2K 12
ipsecpolicy 2 2K 2
acpidev 20 2K 20
clone 9 2K 9
acpidev 20 2K 20
sctp_stri 2 1K 2
softdep 1 1K 1
sahead 1 1K 1
secasvar 1 1K 1
vnodemarker 2 1K 8
secasvar 1 1K 1
NFSD session 1 1K 1
CAM periph 4 1K 271
select 7 1K 29
CAM periph 4 1K 271
ipsec 3 1K 3
indirdep 3 1K 3
nhops 6 1K 6
toponodes 6 1K 6
isadev 6 1K 6
mount 16 1K 89
pci_link 10 1K 10
sctp_ifa 5 1K 6
isadev 6 1K 6
mount 16 1K 89
pci_link 10 1K 10
crypto 4 1K 4
ip6ndp 4 1K 5
encap_export_host 12 1K 12
newdirblk 4 1K 8
mkdir 4 1K 16
in_multi 2 1K 4
pfil 4 1K 4
cdev 2 1K 2
sctp_atky 9 1K 9
cdev 2 1K 2
chacha20random 1 1K 1
osd 7 1K 18
inpcbpolicy 10 1K 139
sctp_ifn 2 1K 6
NFSD lckfile 1 1K 1
NFSD V4client 1 1K 1
DEVFSP 4 1K 9
NFSD V4client 1 1K 1
DEVFS 9 1K 10
mld 2 1K 2
igmp 2 1K 2
vnodes 1 1K 1
CAM SIM 2 1K 2
CAM SIM 2 1K 2
feeder 7 1K 7
tcpfunc 3 1K 3
CC Mem 3 1K 7
tcpfunc 3 1K 3
loginclass 3 1K 7
prison 6 1K 6
lkpikmalloc 5 1K 6
aesni_data 2 1K 2
cryptodev 2 1K 49
lkpikmalloc 5 1K 6
aesni_data 2 1K 2
nexusdev 8 1K 8
apmdev 1 1K 1
atkbddev 2 1K 2
CAM dev queue 2 1K 2
CAM I/O Scheduler 1 1K 1
CAM path 4 1K 1034
procdesc 1 1K 6
apmdev 1 1K 1
atkbddev 2 1K 2
CAM dev queue 2 1K 2
CAM I/O Scheduler 1 1K 1
CAM path 4 1K 1034
pmchooks 1 1K 1
sctp_athm 7 1K 8
soname 4 1K 3473
filecaps 4 1K 66
tun 3 1K 3
sctp_vrf 1 1K 1
sctp_map 4 1K 4
vnet 1 1K 1
entropy 2 1K 35
pmc 1 1K 1
acpiintr 1 1K 1
cpus 2 1K 2
freework 1 1K 26
acpiintr 1 1K 1
cpus 2 1K 2
vnet_data_free 1 1K 1
Per-cpu 1 1K 1
p1003.1b 1 1K 1
Per-cpu 1 1K 1
p1003.1b 1 1K 1
ipcomp 0 0K 0
esp 0 0K 0
ah 0 0K 0
pf_table 0 0K 0
pf_rule 0 0K 0
esp 0 0K 0
ah 0 0K 0
pf_table 0 0K 0
pf_altq 0 0K 0
pf_osfp 0 0K 0
pf_temp 0 0K 0
sctp_mcore 0 0K 0
sctp_socko 0 0K 1
sctp_iter 0 0K 4
sctp_mvrf 0 0K 0
sctp_timw 0 0K 0
sctp_cpal 0 0K 0
sctp_cmsg 0 0K 0
sctp_stre 0 0K 0
sctp_athi 0 0K 0
sctp_a_it 0 0K 4
sctp_cmsg 0 0K 0
sctp_stre 0 0K 0
sctp_athi 0 0K 0
sctp_aadr 0 0K 0
mqdata 0 0K 0
tcp_do 0 0K 0
tcp_fsb 0 0K 0
filemon 0 0K 0
jsegdep 0 0K 0
jseg 0 0K 0
jfreefrag 0 0K 0
jfreeblk 0 0K 0
jnewblk 0 0K 0
jmvref 0 0K 0
jremref 0 0K 0
jaddref 0 0K 0
freedep 0 0K 0
freefile 0 0K 9
jseg 0 0K 0
jfreefrag 0 0K 0
jfreeblk 0 0K 0
jnewblk 0 0K 0
jmvref 0 0K 0
jremref 0 0K 0
jaddref 0 0K 0
freedep 0 0K 0
freeblks 0 0K 25
freefrag 0 0K 1
namei_tracker 0 0K 0
export_host 0 0K 0
cl_savebuf 0 0K 4
acpipwr 0 0K 0
acpi_perf 0 0K 0
twsbuf 0 0K 0
twe_commands 0 0K 0
tcp_log_dev 0 0K 0
acpi_perf 0 0K 0
twsbuf 0 0K 0
twe_commands 0 0K 0
midi buffers 0 0K 0
mixer 0 0K 0
ac97 0 0K 0
hdacc 0 0K 0
hdac 0 0K 0
hdaa 0 0K 0
acpicmbat 0 0K 0
SIIS driver 0 0K 0
CAM CCB 0 0K 523
PUC 0 0K 0
biobuf 0 0K 0
aios 0 0K 0
lio 0 0K 0
mixer 0 0K 0
ac97 0 0K 0
hdacc 0 0K 0
hdac 0 0K 0
hdaa 0 0K 0
acpicmbat 0 0K 0
SIIS driver 0 0K 0
CAM CCB 0 0K 523
PUC 0 0K 0
biobuf 0 0K 0
aios 0 0K 0
acl 0 0K 0
ppbusdev 0 0K 0
mbuf_tag 0 0K 27
ppbusdev 0 0K 0
ioctlops 0 0K 86
eventfd 0 0K 0
Witness 0 0K 0
stack 0 0K 0
mps_user 0 0K 0
MPSSAS 0 0K 0
mps 0 0K 0
mpr_user 0 0K 0
MPRSAS 0 0K 0
mpr 0 0K 0
sbuf 0 0K 288
mfibuf 0 0K 0
firmware 0 0K 0
compressor 0 0K 0
md_sectors 0 0K 0
SWAP 0 0K 0
md_disk 0 0K 0
malodev 0 0K 0
sysctltmp 0 0K 658
Witness 0 0K 0
stack 0 0K 0
mps_user 0 0K 0
MPSSAS 0 0K 0
mps 0 0K 0
mpr_user 0 0K 0
MPRSAS 0 0K 0
mpr 0 0K 0
sbuf 0 0K 288
mfibuf 0 0K 0
firmware 0 0K 0
compressor 0 0K 0
md_sectors 0 0K 0
SWAP 0 0K 0
md_disk 0 0K 0
malodev 0 0K 0
sysctl 0 0K 3
LED 0 0K 0
ekcd 0 0K 0
dumper 0 0K 0
sendfile 0 0K 0
rctl 0 0K 0
ix_sriov 0 0K 0
aacraidcam 0 0K 0
ix 0 0K 0
cache 0 0K 0
ipsbuf 0 0K 0
aacraid_buf 0 0K 0
kcovinfo 0 0K 0
LED 0 0K 0
ekcd 0 0K 0
dumper 0 0K 0
sendfile 0 0K 0
rctl 0 0K 0
ix_sriov 0 0K 0
aacraidcam 0 0K 0
ix 0 0K 0
cache 0 0K 0
ipsbuf 0 0K 0
aacraid_buf 0 0K 0
mbuf 256 9033 629 18103 0 254 2473472 0
pbuf 2624 0 794 0 0 2 2083456 0
BUF TRIE 144 183 11605 513 0 62 1697472 0
malloc-384 384 4117 53 4458 0 30 1601280 0
malloc-128 128 11682 191 11735 0 126 1519744 0
malloc-4096 4096 326 2 490 0 2 1343488 0
UMA Slabs 0 112 10539 3 10539 0 126 1180704 0
sctp_asoc 2288 2 508 2 0 254 1166880 0
mbuf_cluster 2048 508 0 508 0 254 1040384 0
vmem btag 56 16465 62 16465 0 254 925512 0
sctp_ep 1208 3 507 3 0 254 616080 0
FFS inode 1160 499 19 508 0 8 600880 0
tcpcb 1104 3 508 7 0 254 564144 0
RADIX NODE 144 3368 183 20099 0 62 511344 0
socket 960 21 487 1338 0 254 487680 0
malloc-65536 65536 4 3 186 0 1 458752 0
VM OBJECT 264 1411 119 24452 0 30 403920 0
lkpimm 168 1 2327 1 0 62 391104 0
lkpicurr 168 2 2326 2 0 62 391104 0
sctp_raddr 736 2 515 2 0 254 380512 0
lkpicurr 168 2 2326 2 0 62 391104 0
256 Bucket 2048 130 18 1023 0 8 303104 0
malloc-64 64 3870 225 3909 0 254 262080 0
VNODE 448 529 47 540 0 30 258048 0
malloc-256 256 976 29 1289 0 62 257280 0
malloc-16 16 14613 387 14685 0 254 240000 0
THREAD 1808 122 10 122 0 8 238656 0
DEVCTL 1024 0 220 126 0 0 225280 0
MAP ENTRY 96 1560 456 84326 0 126 193536 0
UMA Zones 768 244 0 244 0 16 187392 0
malloc-32 32 5318 352 5386 0 254 181440 0
malloc-4096 4096 40 4 782 0 2 180224 0
malloc-128 128 1215 180 26330 0 126 178560 0
malloc-1024 1024 121 23 1193 0 16 147456 0
FFS2 dinode 256 499 71 508 0 62 145920 0
malloc-65536 65536 2 0 2 0 1 131072 0
malloc-65536 65536 1 1 9 0 1 131072 0
unpcb 256 7 503 1179 0 254 130560 0
mbuf_packet 256 1 507 83 0 254 130048 0
S VFS Cache 104 966 204 1006 0 126 121680 0
FPU_save_area 832 124 20 136 0 16 119808 0
ksiginfo 112 44 1000 59 0 126 116928 0
malloc-128 128 716 183 1760 0 126 115072 0
malloc-16384 16384 5 2 180 0 1 114688 0
malloc-128 128 514 261 3837 0 126 99200 0
malloc-32768 32768 0 3 120 0 1 98304 0
UMA Kegs 384 230 3 230 0 30 89472 0
128 Bucket 1024 45 38 481 0 16 84992 0
VMSPACE 2552 23 10 764 0 4 84216 0
malloc-8192 8192 6 4 136 0 1 81920 0
malloc-4096 4096 17 3 652 0 2 81920 0
PROC 1352 39 18 779 0 8 77064 0
malloc-8192 8192 9 0 9 0 1 73728 0
g_bio 408 0 180 4478 0 30 73440 0
malloc-64 64 574 497 1771 0 254 68544 0
malloc-64 64 520 551 1615 0 254 68544 0
malloc-65536 65536 1 0 1 0 1 65536 0
malloc-65536 65536 1 0 1 0 1 65536 0
malloc-2048 2048 5 27 521 0 8 65536 0
malloc-65536 65536 1 0 1 0 1 65536 0
malloc-256 256 181 74 208 0 62 65280 0
filedesc0 1072 40 16 780 0 8 60032 0
64 Bucket 512 64 40 1636 0 30 53248 0
malloc-64 64 296 523 2308 0 254 52416 0
32 Bucket 256 59 136 7143 0 62 49920 0
DIRHASH 1024 34 14 34 0 16 49152 0
NAMEI 1024 0 48 12227 0 16 49152 0
malloc-2048 2048 5 19 720 0 8 49152 0
malloc-1024 1024 14 34 522 0 16 49152 0
syncache 168 0 264 5 0 254 44352 0
clpbuf 2624 0 16 22 0 16 41984 0
malloc-8192 8192 5 0 5 0 1 40960 0
sctp_chunk 152 2 258 2 0 254 39520 0
Mountpoints 2752 2 12 2 0 4 38528 0
udp_inpcb 424 6 84 128 0 30 38160 0
pcpu-8 8 4220 388 4248 0 254 36864 0
malloc-64 64 4 563 13328 0 254 36288 0
malloc-64 64 164 403 11201 0 254 36288 0
malloc-64 64 4 563 21 0 254 36288 0
malloc-64 64 2 565 6 0 254 36288 0
malloc-128 128 77 202 83 0 126 35712 0
malloc-128 128 2 277 143 0 126 35712 0
malloc-128 128 84 195 136 0 126 35712 0
malloc-128 128 16 263 275 0 126 35712 0
routing nhops 256 10 125 17 0 62 34560 0
ttyoutq 256 72 63 160 0 62 34560 0
malloc-384 384 79 11 81 0 30 34560 0
malloc-384 384 62 28 94 0 30 34560 0
malloc-384 384 62 28 62 0 30 34560 0
malloc-256 256 14 121 472 0 62 34560 0
malloc-256 256 26 109 68 0 62 34560 0
malloc-256 256 40 95 1034 0 62 34560 0
malloc-256 256 11 124 15 0 62 34560 0
malloc-256 256 41 94 246 0 62 34560 0
malloc-256 256 10 125 521 0 62 34560 0
malloc-32768 32768 1 0 1 0 1 32768 0
malloc-32768 32768 1 0 1 0 1 32768 0
malloc-32768 32768 1 0 1 0 1 32768 0
malloc-8192 8192 2 2 4 0 1 32768 0
malloc-32768 32768 1 0 1 0 1 32768 0
malloc-32768 32768 1 0 1 0 1 32768 0
malloc-2048 2048 3 13 3 0 8 32768 0
malloc-2048 2048 5 11 91 0 8 32768 0
malloc-2048 2048 9 7 10 0 8 32768 0
malloc-1024 1024 3 29 7 0 16 32768 0
malloc-1024 1024 4 28 7 0 16 32768 0
malloc-1024 1024 19 13 39 0 16 32768 0
malloc-512 512 4 60 180 0 30 32768 0
malloc-512 512 9 55 9 0 30 32768 0
malloc-512 512 2 62 3 0 30 32768 0
pcpu-64 64 491 21 491 0 254 32768 0
sctp_stream_msg_out 112 1 287 1 0 254 32256 0
ttyinq 160 135 65 300 0 62 32000 0
cpuset 104 7 272 7 0 126 29016 0
malloc-32 32 262 620 517 0 254 28224 0
16 Bucket 144 40 156 233 0 62 28224 0
4 Bucket 48 6 582 49 0 254 28224 0
tcp_inpcb 424 3 60 7 0 30 26712 0
ripcb 424 1 62 4 0 30 26712 0
da_ccb 544 0 49 1240 0 16 26656 0
pipe 744 7 28 284 0 16 26040 0
TURNSTILE 136 133 56 133 0 62 25704 0
malloc-4096 4096 2 4 198 0 2 24576 0
malloc-4096 4096 6 0 6 0 2 24576 0
malloc-4096 4096 6 0 6 0 2 24576 0
rtentry 176 13 125 17 0 62 24288 0
PGRP 88 20 256 31 0 126 24288 0
ertt_txseginfo 40 1 605 250 0 254 24240 0
rl_entry 40 36 570 36 0 254 24240 0
Files 80 73 227 6582 0 126 24000 0
8 Bucket 80 35 265 228 0 126 24000 0
malloc-384 384 7 53 28 0 30 23040 0
SLEEPQUEUE 88 133 123 133 0 126 22528 0
hostcache 64 1 314 1 0 254 20160 0
udpcb 32 6 624 128 0 254 20160 0
udp_inpcb ports 32 3 627 40 0 254 20160 0
ertt 72 3 277 7 0 126 20160 0
PWD 32 10 620 100 0 254 20160 0
malloc-32 32 9 621 23 0 254 20160 0
malloc-32 32 227 403 1126 0 254 20160 0
malloc-32 32 30 600 2768 0 254 20160 0
malloc-32 32 12 618 25 0 254 20160 0
malloc-32 32 68 562 1658 0 254 20160 0
malloc-32 32 14 616 20 0 254 20160 0
2 Bucket 32 49 581 294 0 254 20160 0
malloc-16 16 510 740 2990 0 254 20000 0
epoch_record pcpu 256 4 60 4 0 62 16384 0
malloc-16384 16384 1 0 1 0 1 16384 0
malloc-16384 16384 1 0 1 0 1 16384 0
malloc-16384 16384 1 0 1 0 1 16384 0
malloc-8192 8192 2 0 2 0 1 16384 0
malloc-2048 2048 3 5 3 0 8 16384 0
malloc-16384 16384 1 0 1 0 1 16384 0
malloc-16384 16384 1 0 1 0 1 16384 0
malloc-16384 16384 1 0 1 0 1 16384 0
malloc-8192 8192 2 0 2 0 1 16384 0
malloc-2048 2048 2 6 2 0 8 16384 0
malloc-2048 2048 1 7 3 0 8 16384 0
malloc-1024 1024 8 8 8 0 16 16384 0
malloc-1024 1024 1 15 1 0 16 16384 0
malloc-512 512 2 30 2 0 30 16384 0
malloc-512 512 0 32 1 0 30 16384 0
malloc-512 512 1 31 1 0 30 16384 0
malloc-512 512 2 30 8 0 30 16384 0
malloc-512 512 1 31 1 0 30 16384 0
SMR CPU 32 7 504 7 0 254 16352 0
sctp_laddr 48 2 334 6 0 254 16128 0
kenv 258 15 45 1029 0 30 15480 0
mqnode 416 3 33 3 0 30 14976 0
vmem 1856 1 7 1 0 8 14848 0
SMR SHARED 24 7 504 7 0 254 12264 0
tcp_inpcb ports 32 1 377 1 0 254 12096 0
vmem 1856 1 7 1 0 8 14848 0
SMR SHARED 24 7 504 7 0 254 12264 0
KNOTE 160 0 75 8 0 62 12000 0
malloc-16 16 8 742 201 0 254 12000 0
malloc-16 16 21 729 60 0 254 12000 0
malloc-16 16 26 724 25650 0 254 12000 0
malloc-16 16 8 742 120 0 254 12000 0
malloc-16 16 59 691 81 0 254 12000 0
malloc-384 384 1 29 1 0 30 11520 0
malloc-384 384 27 3 27 0 30 11520 0
malloc-8192 8192 1 0 1 0 1 8192 0
malloc-4096 4096 1 1 1 0 2 8192 0
malloc-4096 4096 1 1 1 0 2 8192 0
pcpu-16 16 14 498 14 0 254 8192 0
malloc-16 16 5 495 7 0 254 8000 0
malloc-4096 4096 1 1 1 0 2 8192 0
malloc-4096 4096 1 1 1 0 2 8192 0
pcpu-16 16 14 498 14 0 254 8192 0
vtnet_tx_hdr 24 0 167 2106 0 254 4008 0
UMA Slabs 1 176 8 14 8 0 62 3872 0
KMAP ENTRY 96 12 27 14 0 0 3744 0
FFS1 dinode 128 0 0 0 0 126 0 0
ada_ccb 272 0 0 0 0 30 0 0
swblk 136 0 0 0 0 62 0 0
swpctrie 144 0 0 0 0 62 0 0
cdg_qdiffsample 16 0 0 0 0 254 0 0
pf state scrubs 40 0 0 0 0 254 0 0
pf frag entries 40 0 0 0 0 254 0 0
pf frags 248 0 0 0 0 62 0 0
pf table entries 160 0 0 0 0 62 0 0
pf table entry counters 64 0 0 0 0 254 0 0
pf source nodes 136 0 0 0 0 254 0 0
pf state keys 88 0 0 0 0 126 0 0
pf states 312 0 0 0 0 254 0 0
pf tags 104 0 0 0 0 126 0 0
FFS1 dinode 128 0 0 0 0 126 0 0
ada_ccb 272 0 0 0 0 30 0 0
swblk 136 0 0 0 0 62 0 0
swpctrie 144 0 0 0 0 62 0 0
cdg_qdiffsample 16 0 0 0 0 254 0 0
pf state scrubs 40 0 0 0 0 254 0 0
pf frag entries 40 0 0 0 0 254 0 0
pf frags 248 0 0 0 0 62 0 0
pf table entries 160 0 0 0 0 62 0 0
pf table entry counters 64 0 0 0 0 254 0 0
pf source nodes 136 0 0 0 0 254 0 0
pf state keys 88 0 0 0 0 126 0 0
pf states 312 0 0 0 0 254 0 0
pf mtags 48 0 0 0 0 254 0 0
tcp_rack_pcb 896 0 0 0 0 16 0 0
tcp_rack_map 120 0 0 0 0 126 0 0
tcp_bbr_pcb 832 0 0 0 0 16 0 0
tcp_bbr_map 128 0 0 0 0 126 0 0
ipq 56 0 0 0 0 254 0 0
tfo_ccache_entries 80 0 0 0 0 126 0 0
tfo 4 0 0 0 0 254 0 0
sackhole 32 0 0 0 0 254 0 0
tcptw 72 0 0 0 0 254 0 0
tfo_ccache_entries 80 0 0 0 0 126 0 0
tfo 4 0 0 0 0 254 0 0
sackhole 32 0 0 0 0 254 0 0
tcptw 72 0 0 0 0 254 0 0
tcp_log_node 120 0 0 0 0 126 0 0
tcp_log_bucket 176 0 0 0 0 62 0 0
tcp_log 416 0 0 0 0 254 0 0
tcp_log_bucket 176 0 0 0 0 62 0 0
tcpreass 48 0 0 0 0 254 0 0
sctp_asconf_ack 48 0 0 0 0 254 0 0
sctp_asconf 40 0 0 0 0 254 0 0
sctp_readq 152 0 0 0 0 254 0 0
sctp_asconf 40 0 0 0 0 254 0 0
ripcb ports 32 0 0 0 0 254 0 0
udplite_inpcb ports 32 0 0 0 0 254 0 0
udplite_inpcb 424 0 0 0 0 30 0 0
IPsec SA lft_c 16 0 0 0 0 254 0 0
itimer 352 0 0 0 0 30 0 0
AIOLIO 272 0 0 0 0 30 0 0
udplite_inpcb ports 32 0 0 0 0 254 0 0
udplite_inpcb 424 0 0 0 0 30 0 0
IPsec SA lft_c 16 0 0 0 0 254 0 0
itimer 352 0 0 0 0 30 0 0
AIOCB 552 0 0 0 0 16 0 0
AIOP 32 0 0 0 0 254 0 0
AIO 208 0 0 0 0 62 0 0
mqnotifier 216 0 0 0 0 62 0 0
mvdata 64 0 0 0 0 254 0 0
mqueue 248 0 0 0 0 62 0 0
TMPFS node 224 0 0 0 0 62 0 0
mvdata 64 0 0 0 0 254 0 0
mqueue 248 0 0 0 0 62 0 0
TMPFS node 224 0 0 0 0 62 0 0
NCLNODE 608 0 0 0 0 16 0 0
LTS VFS Cache 360 0 0 0 0 30 0 0
L VFS Cache 320 0 0 0 0 30 0 0
STS VFS Cache 144 0 0 0 0 62 0 0
cryptop 280 0 0 0 0 30 0 0
linux_dma_object 32 0 0 0 0 254 0 0
linux_dma_pctrie 144 0 0 0 0 62 0 0
IOMMU_MAP_ENTRY 120 0 0 0 0 126 0 0
mbuf_jumbo_16k 16384 0 0 0 0 254 0 0
mbuf_jumbo_9k 9216 0 0 0 0 254 0 0
audit_record 1280 0 0 0 0 8 0 0
domainset 40 0 0 0 0 254 0 0
MAC labels 40 0 0 0 0 254 0 0
vnpbuf 2624 0 0 0 0 64 0 0
mdpbuf 2624 0 0 0 0 3 0 0
nfspbuf 2624 0 0 0 0 16 0 0
swwbuf 2624 0 0 0 0 8 0 0
swrbuf 2624 0 0 0 0 16 0 0
umtx_shm 88 0 0 0 0 126 0 0
umtx pi 96 0 0 0 0 126 0 0
rangeset pctrie nodes 144 0 0 0 0 62 0 0
malloc-65536 65536 0 0 0 0 1 0 0
malloc-65536 65536 0 0 0 0 1 0 0
malloc-65536 65536 0 0 0 0 1 0 0
L VFS Cache 320 0 0 0 0 30 0 0
STS VFS Cache 144 0 0 0 0 62 0 0
cryptop 280 0 0 0 0 30 0 0
linux_dma_object 32 0 0 0 0 254 0 0
linux_dma_pctrie 144 0 0 0 0 62 0 0
IOMMU_MAP_ENTRY 120 0 0 0 0 126 0 0
mbuf_jumbo_16k 16384 0 0 0 0 254 0 0
mbuf_jumbo_9k 9216 0 0 0 0 254 0 0
audit_record 1280 0 0 0 0 8 0 0
domainset 40 0 0 0 0 254 0 0
MAC labels 40 0 0 0 0 254 0 0
vnpbuf 2624 0 0 0 0 64 0 0
mdpbuf 2624 0 0 0 0 3 0 0
nfspbuf 2624 0 0 0 0 16 0 0
swwbuf 2624 0 0 0 0 8 0 0
swrbuf 2624 0 0 0 0 16 0 0
umtx_shm 88 0 0 0 0 126 0 0
umtx pi 96 0 0 0 0 126 0 0
rangeset pctrie nodes 144 0 0 0 0 62 0 0
malloc-65536 65536 0 0 0 0 1 0 0
malloc-65536 65536 0 0 0 0 1 0 0
malloc-32768 32768 0 0 0 0 1 0 0
malloc-32768 32768 0 0 0 0 1 0 0
malloc-32768 32768 0 0 0 0 1 0 0
malloc-32768 32768 0 0 0 0 1 0 0
malloc-16384 16384 0 0 0 0 1 0 0
malloc-16384 16384 0 0 0 0 1 0 0
malloc-16384 16384 0 0 0 0 1 0 0
malloc-16384 16384 0 0 0 0 1 0 0
malloc-8192 8192 0 0 0 0 1 0 0
malloc-8192 8192 0 0 0 0 1 0 0
malloc-1024 1024 0 0 0 0 16 0 0
malloc-512 512 0 0 0 0 30 0 0
malloc-384 384 0 0 0 0 30 0 0
pcpu-32 32 0 0 0 0 254 0 0
pcpu-4 4 0 0 0 0 254 0 0
fakepg 104 0 0 0 0 126 0 0
UMA Hash 256 0 0 0 0 62 0 0
Reply all
Reply to author
Forward
0 new messages