panic: ASan: Invalid access, NUM-byte read at ADDR, UMAUseAfterFree(fd) (2)
4 views
Skip to first unread message
syzbot
Apr 17, 2022, 5:18:20 PM4/17/22
to syzkaller-f...@googlegroups.com
Hello,
syzbot found the following issue on:
HEAD commit: b85b9c88eb02 contrib/bc: import version 5.2.4
git tree: freebsd-src
console output: https://syzkaller.appspot.com/x/log.txt?x=15c03a7cf00000
dashboard link: https://syzkaller.appspot.com/bug?extid=66ede232c3d1271c6226
userspace arch: i386
Unfortunately, I don't have any reproducer for this issue yet.
IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+66ede2...@syzkaller.appspotmail.com
panic: ASan: Invalid access, 8-byte read at 0xfffffe0096854da8, UMAUseAfterFree(fd)
cpuid = 0
time = 1650230229
KDB: stack backtrace:
db_trace_self_wrapper() at db_trace_self_wrapper+0xc7/frame 0xfffffe005414e890
kdb_backtrace() at kdb_backtrace+0xd3/frame 0xfffffe005414e9f0
vpanic() at vpanic+0x2b8/frame 0xfffffe005414ead0
panic() at panic+0xb5/frame 0xfffffe005414eba0
kasan_report() at kasan_report+0xdc/frame 0xfffffe005414ec70
__mtx_lock_flags() at __mtx_lock_flags+0x125/frame 0xfffffe005414ed50
sctp_sendall_completes() at sctp_sendall_completes+0x41/frame 0xfffffe005414ed70
sctp_iterator_worker() at sctp_iterator_worker+0xff4/frame 0xfffffe005414eed0
sctp_iterator_thread() at sctp_iterator_thread+0x5e/frame 0xfffffe005414eef0
fork_exit() at fork_exit+0xd0/frame 0xfffffe005414ef30
fork_trampoline() at fork_trampoline+0xe/frame 0xfffffe005414ef30
--- trap 0, rip = 0, rsp = 0, rbp = 0 ---
KDB: enter: panic
[ thread pid 5 tid 100068 ]
Stopped at kdb_enter+0x6b: movq $0,0x27059ea(%rip)
db>
db> set $lines = 0
db> set $maxwidth = 0
db> show registers
cs 0x20
ds 0x3b
es 0x3b
fs 0x13
gs 0x1b
ss 0
rax 0x12
rcx 0x540abd858e19a6fb
rdx 0x1
rbx 0
rsp 0xfffffe005414e9d0
rbp 0xfffffe005414e9f0
rsi 0
rdi 0xffffffff8178143a vprintf+0x35a
r8 0
r9 0xffffffff
r10 0
r11 0
r12 0xfffffe005787e720
r13 0xfffffe005414ea01
r14 0xffffffff82bc6400 .str.26
r15 0xffffffff82bc6400 .str.26
rip 0xffffffff817749ab kdb_enter+0x6b
rflags 0x46
kdb_enter+0x6b: movq $0,0x27059ea(%rip)
db> show proc
Process 5 (sctp_iterator) at 0xfffffe00579a9a90:
state: NORMAL
uid: 0 gids: 0
parent: pid 0 at 0xffffffff83e1da00
ABI: null
flag: 0x10000204 flag2: 0
reaper: 0xffffffff83e1da00 reapsubtree: 5
sigparent: 20
vmspace: 0xffffffff83e1e9a0
(map 0xffffffff83e1e9a0)
(map.pmap 0xffffffff83e1ea60)
(pmap 0xffffffff83e1eac8)
threads: 1
100068 Run CPU 0 [sctp_iterator]
db> ps
pid ppid pgrp uid state wmesg wchan cmd
20697 787 787 0 R (threaded) syz-executor.3
120313 RunQ syz-executor.3
122992 RunQ syz-executor.3
122994 S uwait 0xfffffe009a667880 syz-executor.3
20696 778 778 0 R (threaded) syz-executor.1
122903 RunQ syz-executor.1
122991 S connec 0xfffffe0058c180da syz-executor.1
122993 S sbwait 0xfffffe0058c18204 syz-executor.1
122997 S uwait 0xfffffe009a3c5f00 syz-executor.1
20694 780 780 0 R (threaded) syz-executor.2
122356 RunQ syz-executor.2
122989 S connec 0xfffffe0058c25c1a syz-executor.2
122995 S uwait 0xfffffe009a3e7000 syz-executor.2
18424 1 787 0 S uwait 0xfffffe009a3e8180 syz-executor.3
18421 1 787 0 S uwait 0xfffffe009a3e7f00 syz-executor.3
18415 1 787 0 S uwait 0xfffffe009a3c6480 syz-executor.3
18412 1 787 0 S uwait 0xfffffe009a3c6780 syz-executor.3
18409 1 787 0 S uwait 0xfffffe009a3e8680 syz-executor.3
18405 1 787 0 S uwait 0xfffffe009a3c6680 syz-executor.3
18404 1 787 0 S uwait 0xfffffe009a3e9700 syz-executor.3
18399 1 787 0 S uwait 0xfffffe009a3c6380 syz-executor.3
18398 1 787 0 S uwait 0xfffffe009a3c7200 syz-executor.3
18394 1 787 0 S uwait 0xfffffe009a3c6180 syz-executor.3
18393 1 787 0 S uwait 0xfffffe009a3e9300 syz-executor.3
18387 1 787 0 S uwait 0xfffffe009a3e7d00 syz-executor.3
18386 1 787 0 S uwait 0xfffffe009a3c7300 syz-executor.3
18383 1 787 0 S uwait 0xfffffe009a3c6a80 syz-executor.3
18381 1 787 0 S umtxn 0xfffffe009a3c6980 syz-executor.3
18378 1 787 0 S uwait 0xfffffe009a3e8a80 syz-executor.3
18377 1 787 0 S uwait 0xfffffe009a3c7000 syz-executor.3
18374 1 787 0 S uwait 0xfffffe009a3e8980 syz-executor.3
18373 1 787 0 S uwait 0xfffffe009a3e8880 syz-executor.3
18370 1 787 0 S uwait 0xfffffe009a3e8d80 syz-executor.3
18367 1 787 0 S uwait 0xfffffe009a3e8780 syz-executor.3
18364 1 787 0 S uwait 0xfffffe009a3e8c80 syz-executor.3
18362 1 787 0 S uwait 0xfffffe009a3e9600 syz-executor.3
18357 1 787 0 S uwait 0xfffffe009a3e8b80 syz-executor.3
18356 1 787 0 S uwait 0xfffffe009a3e8480 syz-executor.3
18354 1 787 0 S uwait 0xfffffe009a3c6e80 syz-executor.3
18353 1 787 0 S umtxn 0xfffffe0056f48c80 syz-executor.3
18349 1 787 0 S umtxn 0xfffffe009a3e8e80 syz-executor.3
18343 1 777 0 S uwait 0xfffffe009a3e8580 syz-executor.0
18342 1 787 0 S uwait 0xfffffe009a3e9100 syz-executor.3
18338 1 777 0 S uwait 0xfffffe009a3e9200 syz-executor.0
18337 1 787 0 S uwait 0xfffffe009a3e9000 syz-executor.3
18332 1 787 0 S uwait 0xfffffe005788d680 syz-executor.3
18331 1 787 0 S uwait 0xfffffe009a3c7a00 syz-executor.3
18328 1 777 0 S uwait 0xfffffe009a3c6b80 syz-executor.0
18325 1 787 0 S uwait 0xfffffe009a3e9e00 syz-executor.3
18324 1 787 0 S uwait 0xfffffe009a3c6d80 syz-executor.3
18323 1 777 0 S uwait 0xfffffe009a3c6c80 syz-executor.0
18318 1 787 0 S uwait 0xfffffe009a3ea580 syz-executor.3
18317 1 787 0 S umtxn 0xfffffe009a3e9800 syz-executor.3
18316 1 777 0 S uwait 0xfffffe009a3e9900 syz-executor.0
18314 1 777 0 S uwait 0xfffffe009a3e9500 syz-executor.0
18310 1 787 0 S uwait 0xfffffe009a3c7500 syz-executor.3
18309 1 777 0 S umtxn 0xfffffe009a3c7400 syz-executor.0
18308 1 787 0 S uwait 0xfffffe009a3e9400 syz-executor.3
18307 1 777 0 S uwait 0xfffffe009a3c7600 syz-executor.0
18302 1 787 0 S uwait 0xfffffe0056f48980 syz-executor.3
18301 1 777 0 S uwait 0xfffffe009a3c7800 syz-executor.0
18300 1 777 0 S umtxn 0xfffffe009a3e9d00 syz-executor.0
18299 1 787 0 S uwait 0xfffffe008fe06500 syz-executor.3
18296 1 787 0 S uwait 0xfffffe009a3ea380 syz-executor.3
18295 1 777 0 S uwait 0xfffffe009a3c7700 syz-executor.0
18294 1 787 0 S uwait 0xfffffe009a3ea280 syz-executor.3
18293 1 777 0 S uwait 0xfffffe009a3c8480 syz-executor.0
18289 1 787 0 S uwait 0xfffffe009a3e9a00 syz-executor.3
18288 1 777 0 S uwait 0xfffffe009a3ea180 syz-executor.0
18287 1 777 0 S uwait 0xfffffe009a3e9c00 syz-executor.0
18282 1 777 0 S uwait 0xfffffe009a3e9b00 syz-executor.0
18281 1 777 0 S uwait 0xfffffe008fe05700 syz-executor.0
18278 1 787 0 S uwait 0xfffffe009a3c8080 syz-executor.3
18275 1 777 0 S uwait 0xfffffe009a3e9f00 syz-executor.0
18273 1 787 0 S uwait 0xfffffe009a3c8380 syz-executor.3
18272 1 777 0 S uwait 0xfffffe0056f48a80 syz-executor.0
18266 1 777 0 S uwait 0xfffffe009a3c7f00 syz-executor.0
18265 1 777 0 S uwait 0xfffffe009a3c7e00 syz-executor.0
18263 1 777 0 S uwait 0xfffffe009a3c7d00 syz-executor.0
18262 1 777 0 S uwait 0xfffffe009a3c7c00 syz-executor.0
18261 1 777 0 S uwait 0xfffffe009a3c7b00 syz-executor.0
18259 1 787 0 S umtxn 0xfffffe005788a200 syz-executor.3
18257 1 777 0 S uwait 0xfffffe009a3c7900 syz-executor.0
18256 1 777 0 S uwait 0xfffffe009a3c8580 syz-executor.0
18254 1 777 0 S uwait 0xfffffe009a3c8280 syz-executor.0
18249 1 787 0 S uwait 0xfffffe009a3ea080 syz-executor.3
18248 1 787 0 S uwait 0xfffffe005788a300 syz-executor.3
18247 1 777 0 S uwait 0xfffffe009a3c8180 syz-executor.0
18243 1 777 0 S umtxn 0xfffffe005788d880 syz-executor.0
18242 1 787 0 S uwait 0xfffffe005788d580 syz-executor.3
18241 1 787 0 S uwait 0xfffffe0056f48880 syz-executor.3
18240 1 777 0 S umtxn 0xfffffe009a3ea680 syz-executor.0
18234 1 777 0 S uwait 0xfffffe009a3ea780 syz-executor.0
18233 1 787 0 S uwait 0xfffffe0056f48780 syz-executor.3
18232 1 777 0 S uwait 0xfffffe005788da80 syz-executor.0
18231 1 787 0 S uwait 0xfffffe005788a100 syz-executor.3
18230 1 777 0 S uwait 0xfffffe005788a000 syz-executor.0
18228 1 787 0 S uwait 0xfffffe0056f48680 syz-executor.3
18227 1 787 0 S uwait 0xfffffe0056f48580 syz-executor.3
18223 1 787 0 S uwait 0xfffffe0056f48480 syz-executor.3
18222 1 777 0 S uwait 0xfffffe009a3c8680 syz-executor.0
18220 1 777 0 S uwait 0xfffffe0056f48b80 syz-executor.0
18219 1 787 0 S umtxn 0xfffffe008fe05500 syz-executor.3
18216 1 777 0 S uwait 0xfffffe005788a580 syz-executor.0
18214 1 787 0 S uwait 0xfffffe005788a780 syz-executor.3
18212 1 787 0 S uwait 0xfffffe0056f48e80 syz-executor.3
18211 1 777 0 S uwait 0xfffffe0056f48d80 syz-executor.0
18208 1 777 0 S uwait 0xfffffe008fe06800 syz-executor.0
18207 1 787 0 S uwait 0xfffffe005788dc80 syz-executor.3
18206 1 787 0 S uwait 0xfffffe005788db80 syz-executor.3
18204 1 777 0 S uwait 0xfffffe008fe05400 syz-executor.0
18203 1 787 0 S uwait 0xfffffe005788d980 syz-executor.3
18202 1 777 0 S uwait 0xfffffe005788d780 syz-executor.0
18196 1 780 0 S uwait 0xfffffe008fe05300 syz-executor.2
18195 1 787 0 S uwait 0xfffffe005788a400 syz-executor.3
18194 1 780 0 S uwait 0xfffffe005788dd80 syz-executor.2
18193 1 787 0 S uwait 0xfffffe008fe06300 syz-executor.3
18192 1 787 0 S uwait 0xfffffe005788a980 syz-executor.3
18190 1 787 0 S uwait 0xfffffe005788b700 syz-executor.3
18187 1 787 0 S uwait 0xfffffe008fe05200 syz-executor.3
18186 1 780 0 S uwait 0xfffffe008fe05100 syz-executor.2
18184 1 787 0 S uwait 0xfffffe005788b900 syz-executor.3
18180 1 787 0 S uwait 0xfffffe008fe05c00 syz-executor.3
18179 1 787 0 S uwait 0xfffffe008fe05000 syz-executor.3
18178 1 787 0 S uwait 0xfffffe005788de80 syz-executor.3
18173 1 787 0 S uwait 0xfffffe005788bc00 syz-executor.3
18172 1 787 0 S uwait 0xfffffe008fe05a00 syz-executor.3
18171 1 787 0 S uwait 0xfffffe008fe06c00 syz-executor.3
18168 1 787 0 S uwait 0xfffffe005788b200 syz-executor.3
18167 1 787 0 S uwait 0xfffffe0056f45300 syz-executor.3
18164 1 787 0 S umtxn 0xfffffe008fe06200 syz-executor.3
18159 1 787 0 S uwait 0xfffffe005788c280 syz-executor.3
18158 1 787 0 S uwait 0xfffffe008fe05800 syz-executor.3
18157 1 787 0 S umtxn 0xfffffe005788c380 syz-executor.3
18153 1 787 0 S uwait 0xfffffe005788a500 syz-executor.3
18152 1 787 0 S uwait 0xfffffe008fe05b00 syz-executor.3
18150 1 787 0 S uwait 0xfffffe005788ad80 syz-executor.3
18145 1 787 0 S uwait 0xfffffe008fe05900 syz-executor.3
18142 1 787 0 S uwait 0xfffffe005788ba00 syz-executor.3
18140 1 787 0 S uwait 0xfffffe008fe07e00 syz-executor.3
18133 1 787 0 S uwait 0xfffffe008fe05600 syz-executor.3
18131 1 787 0 S uwait 0xfffffe005788b500 syz-executor.3
18130 1 787 0 S uwait 0xfffffe008fe07280 syz-executor.3
18125 1 787 0 S uwait 0xfffffe005788c180 syz-executor.3
18123 1 787 0 S uwait 0xfffffe008fe06100 syz-executor.3
18121 1 787 0 S uwait 0xfffffe005788b000 syz-executor.3
18117 1 787 0 S uwait 0xfffffe0056f45600 syz-executor.3
18116 1 787 0 S uwait 0xfffffe005788a680 syz-executor.3
18112 1 787 0 S uwait 0xfffffe008fe06600 syz-executor.3
18111 1 787 0 S uwait 0xfffffe005788ab80 syz-executor.3
18103 1 787 0 S uwait 0xfffffe005788c680 syz-executor.3
18101 1 787 0 S umtxn 0xfffffe005788aa80 syz-executor.3
18095 1 787 0 S uwait 0xfffffe008fe06000 syz-executor.3
18094 1 787 0 S uwait 0xfffffe008fe05e80 syz-executor.3
18093 1 787 0 S uwait 0xfffffe008fe06400 syz-executor.3
18091 1 787 0 S uwait 0xfffffe005788ac80 syz-executor.3
18090 1 787 0 S uwait 0xfffffe005788b800 syz-executor.3
18089 1 787 0 S umtxn 0xfffffe008fe06f00 syz-executor.3
18086 1 787 0 S uwait 0xfffffe008fe06900 syz-executor.3
18085 1 787 0 S uwait 0xfffffe008fe05d80 syz-executor.3
18084 1 787 0 S uwait 0xfffffe005788b300 syz-executor.3
18076 1 787 0 S uwait 0xfffffe005788b100 syz-executor.3
18073 1 787 0 S uwait 0xfffffe005788bb00 syz-executor.3
18071 1 787 0 S uwait 0xfffffe005788bd00 syz-executor.3
18062 1 787 0 S uwait 0xfffffe008fe06700 syz-executor.3
18061 1 787 0 S uwait 0xfffffe005788a880 syz-executor.3
18058 1 787 0 S uwait 0xfffffe005788bf00 syz-executor.3
18050 1 787 0 S uwait 0xfffffe008fe07180 syz-executor.3
18049 1 787 0 S uwait 0xfffffe005788b600 syz-executor.3
18048 1 787 0 S uwait 0xfffffe0053ff2e80 syz-executor.3
8385 1 8385 65 Ss select 0xfffffe0056fed6c0 dhclient
7769 1 7769 0 Ss select 0xfffffe0056fc4bc0 dhclient
7766 1 7766 0 Ss select 0xfffffe0056fee5c0 dhclient
7747 1 7747 65 Ss select 0xfffffe0056fed3c0 dhclient
7082 1 7082 0 Ss select 0xfffffe0056fef540 dhclient
7079 1 7079 0 Ss select 0xfffffe0056fedac0 dhclient
7060 1 7060 65 Ss select 0xfffffe0056fed740 dhclient
5374 1 5374 0 Ss select 0xfffffe0056feddc0 dhclient
5371 1 5371 0 Ss select 0xfffffe0056fedb40 dhclient
5351 1 5351 65 Ss select 0xfffffe0056fee140 dhclient
2745 1 2745 0 Ss select 0xfffffe00578a3940 dhclient
2736 1 2736 0 Ss select 0xfffffe0056fee940 dhclient
787 774 787 0 Rs syz-executor.3
780 774 780 0 Ss nanslp 0xffffffff83e47a01 syz-executor.2
778 774 778 0 Ss nanslp 0xffffffff83e47a01 syz-executor.1
777 774 777 0 Rs syz-executor.0
774 772 772 0 S (threaded) syz-fuzzer
100094 S uwait 0xfffffe0056f45400 syz-fuzzer
100113 S uwait 0xfffffe008fe07900 syz-fuzzer
100114 S uwait 0xfffffe008fe07a00 syz-fuzzer
100115 S uwait 0xfffffe008fe07b00 syz-fuzzer
100116 S uwait 0xfffffe008fe07c00 syz-fuzzer
100117 S uwait 0xfffffe008fe07d00 syz-fuzzer
100118 S uwait 0xfffffe008fe06d00 syz-fuzzer
100120 S uwait 0xfffffe008fe06e00 syz-fuzzer
100121 S uwait 0xfffffe008fe07f00 syz-fuzzer
114864 S kqread 0xfffffe0007974700 syz-fuzzer
772 770 772 0 Ss pause 0xfffffe0056f935f8 csh
770 688 770 0 Ss select 0xfffffe0056fef2c0 sshd
754 1 754 0 Ss+ ttyin 0xfffffe00081f10b0 getty
753 1 753 0 Ss+ ttyin 0xfffffe0057a810b0 getty
752 1 752 0 Ss+ ttyin 0xfffffe0057a814b0 getty
751 1 751 0 Ss+ ttyin 0xfffffe0057a818b0 getty
750 1 750 0 Ss+ ttyin 0xfffffe0057a81cb0 getty
749 1 749 0 Ss+ ttyin 0xfffffe0057a820b0 getty
748 1 748 0 Ss+ ttyin 0xfffffe0057a824b0 getty
747 1 747 0 Ss+ ttyin 0xfffffe0057a828b0 getty
746 1 746 0 Ss+ ttyin 0xfffffe0057a82cb0 getty
692 1 692 0 Ss nanslp 0xffffffff83e47a00 cron
688 1 688 0 Ss select 0xfffffe00578a4240 sshd
501 1 501 0 Ss select 0xfffffe00578a44c0 syslogd
430 1 430 0 Ss select 0xfffffe00578a43c0 devd
429 1 429 65 Ss select 0xfffffe00578a4a40 dhclient
344 1 344 0 Ss select 0xfffffe00578a45c0 dhclient
341 1 341 0 Ss select 0xfffffe0056fc4dc0 dhclient
17 0 0 0 DL syncer 0xffffffff83f6d260 [syncer]
16 0 0 0 DL vlruwt 0xfffffe0056f95a90 [vnlru]
15 0 0 0 DL (threaded) [bufdaemon]
100080 D psleep 0xffffffff83f6b860 [bufdaemon]
100083 D - 0xffffffff83211f80 [bufspacedaemon-0]
100095 D sdflush 0xfffffe0058aec4e8 [/ worker]
9 0 0 0 DL psleep 0xffffffff83f9f380 [vmdaemon]
8 0 0 0 DL (threaded) [pagedaemon]
100078 D psleep 0xffffffff83f93238 [dom0]
100081 D launds 0xffffffff83f93244 [laundry: dom0]
100082 D umarcl 0xffffffff81eafad0 [uma]
7 0 0 0 DL - 0xffffffff83c03788 [rand_harvestq]
6 0 0 0 DL pftm 0xffffffff84a20530 [pf purge]
5 0 0 0 RL CPU 0 [sctp_iterator]
4 0 0 0 DL (threaded) [cam]
100045 D - 0xffffffff83aa56c0 [doneq0]
100046 D - 0xffffffff83aa5640 [async]
100077 D - 0xffffffff83aa54c0 [scanner]
14 0 0 0 DL seqstat 0xfffffe0007967888 [sequencer 00]
3 0 0 0 DL (threaded) [crypto]
100041 D crypto_ 0xffffffff83f8ea40 [crypto]
100042 D crypto_ 0xfffffe0053eb5d30 [crypto returns 0]
100043 D crypto_ 0xfffffe0053eb5d80 [crypto returns 1]
13 0 0 0 DL (threaded) [geom]
100036 D - 0xffffffff83e1cfc0 [g_event]
100037 D - 0xffffffff83e1cfe0 [g_up]
100038 D - 0xffffffff83e1d000 [g_down]
2 0 0 0 WL (threaded) [clock]
100030 I [clock (0)]
100031 I [clock (1)]
12 0 0 0 WL (threaded) [intr]
100010 I [swi6: Giant taskq]
100017 I [swi5: fast taskq]
100020 I [swi6: task queue]
100029 I [swi1: netisr 0]
100032 I [swi3: busdma]
100033 I [swi1: hpts]
100034 I [swi1: hpts]
100047 I [irq24: virtio_pci0]
100048 I [irq25: virtio_pci0]
100049 I [irq26: virtio_pci0]
100050 I [irq27: virtio_pci0]
100051 I [irq28: virtio_pci1]
100052 I [irq29: virtio_pci1]
100053 I [irq30: virtio_pci1]
100054 I [irq31: virtio_pci1]
100055 I [irq32: virtio_pci1]
100060 I [irq33: virtio_pci2]
100061 I [irq34: virtio_pci2]
100062 I [irq35: virtio_pci2]
100064 I [irq1: atkbd0]
100065 I [irq12: psm0]
100066 I [swi0: uart uart++]
100070 I [swi1: pf send]
11 0 0 0 RL (threaded) [idle]
100003 CanRun [idle: cpu0]
100004 CanRun [idle: cpu1]
1 0 1 0 SLs wait 0xfffffe0053ddc000 [init]
10 0 0 0 DL audit_w 0xffffffff83f8f540 [audit]
0 0 0 0 DLs (threaded) [kernel]
100000 D swapin 0xffffffff83e1da00 [swapper]
100005 D - 0xfffffe0007973100 [softirq_0]
100006 D - 0xfffffe0007973000 [softirq_1]
100007 D - 0xfffffe0007972e00 [if_io_tqg_0]
100008 D - 0xfffffe0007972d00 [if_io_tqg_1]
100009 D - 0xfffffe0007972c00 [if_config_tqg_0]
100011 D - 0xfffffe0007972a00 [aiod_kick taskq]
100012 D - 0xfffffe0007972900 [inm_free taskq]
100013 D - 0xfffffe0007972800 [linuxkpi_irq_wq]
100014 D - 0xfffffe0007972700 [in6m_free taskq]
100015 D - 0xfffffe0007972600 [deferred_unmount ta]
100016 D - 0xfffffe0007972500 [thread taskq]
100018 D - 0xfffffe0007972300 [pci_hp taskq]
100019 D - 0xfffffe0007972200 [kqueue_ctx taskq]
100021 D - 0xfffffe0007972000 [linuxkpi_short_wq_0]
100022 D - 0xfffffe0007972000 [linuxkpi_short_wq_1]
100023 D - 0xfffffe0007972000 [linuxkpi_short_wq_2]
100024 D - 0xfffffe0007972000 [linuxkpi_short_wq_3]
100025 D - 0xfffffe0007971e00 [linuxkpi_long_wq_0]
100026 D - 0xfffffe0007971e00 [linuxkpi_long_wq_1]
100027 D - 0xfffffe0007971e00 [linuxkpi_long_wq_2]
100028 D - 0xfffffe0007971e00 [linuxkpi_long_wq_3]
100035 D - 0xfffffe0007971d00 [firmware taskq]
100039 D - 0xfffffe0007971b00 [crypto_0]
100040 D - 0xfffffe0007971b00 [crypto_1]
100056 D - 0xfffffe0056fcae00 [vtnet0 rxq 0]
100057 D - 0xfffffe0056fcad00 [vtnet0 txq 0]
100058 D - 0xfffffe0056fcac00 [vtnet0 rxq 1]
100059 D - 0xfffffe0056fcab00 [vtnet0 txq 1]
100063 D vtbslp 0xfffffe0056fc5000 [virtio_balloon]
100067 D - 0xffffffff82bcc280 [deadlkres]
100071 D - 0xfffffe0007973200 [mca taskq]
100072 D - 0xfffffe0058604500 [acpi_task_0]
100073 D - 0xfffffe0058604500 [acpi_task_1]
100074 D - 0xfffffe0058604500 [acpi_task_2]
100076 D - 0xfffffe0007971900 [CAM taskq]
20698 777 777 0 Z syz-executor.0
db> show all locks
Process 20697 (syz-executor.3) thread 0xfffffe009a64cc80 (122992)
exclusive lockmgr bufwait (bufwait) r = 0 (0xfffffe00079a2948) locked @ /syzkaller/managers/i386/kernel/sys/kern/vfs_bio.c:3988
exclusive lockmgr ufs (ufs) r = 0 (0xfffffe009a5e05b0) locked @ /syzkaller/managers/i386/kernel/sys/kern/vfs_vnops.c:1166
Process 20696 (syz-executor.1) thread 0xfffffe009a660c80 (122993)
exclusive sx so_rcv_sx (so_rcv_sx) r = 0 (0xfffffe0058c18180) locked @ /syzkaller/managers/i386/kernel/sys/kern/uipc_socket.c:4193
db> show malloc
Type InUse MemUse Requests
pf_hash 5 11524K 5
tcp_hpts 7 4801K 7
devbuf 4217 4323K 4245
sysctloid 35322 2081K 35393
vtbuf 24 1968K 46
kobj 328 1312K 489
filedesc 162 1291K 39073
newblk 7 1026K 31309
vfscache 3 1025K 3
pcb 403 964K 35359
subproc 449 945K 20867
inodedep 6 514K 20728
ufs_quota 1 512K 1
vfs_hash 1 512K 1
callout 2 512K 2
intr 4 472K 4
vmem 3 274K 6
sctp_stro 187 187K 6136
acpica 1674 184K 57552
vnet_data 1 168K 1
sctp_atcl 377 142K 23951
tidhash 3 141K 3
linker 358 134K 386
pagedep 9 130K 19637
tfo_ccache 1 128K 1
DEVFS1 109 109K 126
sem 4 106K 4
kdtrace 531 93K 43697
BPF 46 88K 95
umtx 682 86K 682
bus 994 81K 5207
mtx_pool 2 72K 2
syncache 1 68K 1
module 513 65K 513
acpitask 1 64K 1
ddb_capture 1 64K 1
temp 34 33K 12534
DEVFS3 128 32K 138
hostcache 1 32K 1
shm 1 32K 4
msg 4 30K 4
gtaskqueue 18 26K 18
sctp_atky 564 24K 30526
sctp_timw 89 23K 89
kbdmux 6 22K 6
ifaddr 71 21K 73
DEVFS_RULE 56 20K 56
ufs_mount 4 17K 5
proc 3 17K 3
tty 16 16K 16
ithread 100 16K 100
routetbl 135 16K 427
kqueue 216 16K 20738
bus-sc 34 15K 1681
lltable 43 14K 98
KTRACE 103 13K 416
ether_multi 157 13K 167
ifnet 7 13K 7
ksem 31 12K 455
kenv 95 12K 95
eventhandler 134 12K 134
pwddesc 178 12K 20963
rman 88 11K 431
GEOM 61 11K 490
CAM queue 5 11K 1528
in6_multi 71 9K 71
bmsafemap 2 9K 20725
UART 12 9K 12
devstat 4 9K 4
rpc 2 8K 2
shmfd 1 8K 1
pfs_vncache 1 8K 1
pfs_nodes 20 8K 20
audit_evclass 237 8K 296
taskqueue 63 7K 63
cred 26 7K 1220
filedesc_to_leader 103 7K 185
sglist 5 7K 5
CAM DEV 3 6K 510
plimit 24 6K 506
sctp_athm 377 6K 24157
proc-args 248 6K 22119
sctp_map 374 6K 12220
ufs_dirhash 24 5K 24
UMA 272 5K 272
session 35 5K 55
pf_ifnet 10 5K 19
DEVFSP 68 5K 488
vt 11 5K 11
memdesc 1 4K 1
MCA 32 4K 32
evdev 4 4K 4
lockf 33 4K 610
acpisem 28 4K 28
selfd 55 4K 288254
hhook 15 4K 17
kcovinfo 52 4K 52
terminal 11 3K 11
select 19 3K 393
uidinfo 3 3K 13
local_apic 1 2K 1
io_apic 1 2K 1
fpukern_ctx 2 2K 2
ipsec-saq 2 2K 2
ip6ndp 12 2K 15
sctp_ifa 14 2K 15
Unitno 31 2K 47
CAM XPT 22 2K 543
msi 12 2K 12
in_multi 6 2K 8
ipsecpolicy 2 2K 2
acpidev 20 2K 20
clone 9 2K 9
tun 7 2K 7
tcp_fsb 8 1K 1342
softdep 1 1K 1
sahead 1 1K 1
secasvar 1 1K 1
nhops 6 1K 8
vnodemarker 2 1K 100
NFSD session 1 1K 1
CC Mem 14 1K 10665
CAM periph 4 1K 271
inpcbpolicy 26 1K 11784
pf_osfp 7 1K 7
sctp_ifn 6 1K 15
ipsec 3 1K 3
mld 6 1K 6
igmp 6 1K 6
toponodes 6 1K 6
isadev 6 1K 6
mount 16 1K 89
pci_link 10 1K 10
diradd 5 1K 20425
crypto 4 1K 4
encap_export_host 12 1K 12
procdesc 5 1K 18
osd 18 1K 10595
newdirblk 4 1K 19538
mkdir 4 1K 39076
pfil 4 1K 4
cdev 2 1K 2
chacha20random 1 1K 1
sctp_iter 1 1K 25
sctp_cpal 1 1K 13
NFSD lckfile 1 1K 1
NFSD V4client 1 1K 1
DEVFS 9 1K 10
freework 1 1K 23116
vnodes 1 1K 1
CAM SIM 2 1K 2
feeder 7 1K 7
tcpfunc 3 1K 3
loginclass 3 1K 6
prison 6 1K 6
lkpikmalloc 5 1K 6
soname 6 1K 36043
aesni_data 2 1K 2
cryptodev 2 1K 428
nexusdev 8 1K 8
apmdev 1 1K 1
atkbddev 2 1K 2
CAM dev queue 2 1K 2
CAM I/O Scheduler 1 1K 1
CAM path 4 1K 1034
iov 2 1K 27920
pmchooks 1 1K 1
filecaps 5 1K 120
sctp_vrf 1 1K 1
vnet 1 1K 1
entropy 2 1K 49
pmc 1 1K 1
acpiintr 1 1K 1
cpus 2 1K 2
vnet_data_free 1 1K 1
Per-cpu 1 1K 1
p1003.1b 1 1K 1
tcp_do 0 0K 0
mqdata 0 0K 0
pf_table 0 0K 0
pf_rule 0 0K 0
pf_altq 0 0K 0
pf_temp 0 0K 0
sctp_mcore 0 0K 0
sctp_socko 0 0K 8170
sctp_mvrf 0 0K 0
sctp_cmsg 0 0K 0
sctp_stre 0 0K 0
sctp_athi 0 0K 0
sctp_a_it 0 0K 12
sctp_aadr 0 0K 102
sctp_stri 0 0K 412
ipcomp 0 0K 0
esp 0 0K 0
ah 0 0K 0
filemon 0 0K 24
NFSCL sockreq 0 0K 0
NFSCL devinfo 0 0K 0
madt_table 0 0K 2
smartpqi 0 0K 0
NFSCL flayout 0 0K 0
NFSCL layout 0 0K 0
NFSD rollback 0 0K 0
ixl 0 0K 0
NFSCL diroff 0 0K 0
NEWdirectio 0 0K 0
NEWNFSnode 0 0K 0
NFSCL lck 0 0K 0
NFSCL lckown 0 0K 0
NFSCL client 0 0K 0
NFSCL deleg 0 0K 0
ice-resmgr 0 0K 0
ice-osdep 0 0K 0
ice 0 0K 0
iavf 0 0K 0
axgbe 0 0K 0
NFSCL open 0 0K 0
NFSCL owner 0 0K 0
NFS fh 0 0K 0
NFS req 0 0K 0
NFSD usrgroup 0 0K 0
NFSD string 0 0K 0
NFSD V4lock 0 0K 0
NFSD V4state 0 0K 0
xen_intr 0 0K 0
NFSD srvcache 0 0K 0
msdosfs_fat 0 0K 0
xen_hvm 0 0K 0
legacydrv 0 0K 0
bounce 0 0K 0
busdma 0 0K 0
qpidrv 0 0K 0
msdosfs_mount 0 0K 0
msdosfs_node 0 0K 0
dmar_idpgtbl 0 0K 0
dmar_dom 0 0K 0
dmar_ctx 0 0K 0
isci 0 0K 0
iommu_dmamap 0 0K 0
DEVFS4 0 0K 0
hyperv_socket 0 0K 0
bxe_ilt 0 0K 0
xenbus 0 0K 0
DEVFS2 0 0K 0
gntdev 0 0K 0
vm_fictitious 0 0K 0
privcmd_dev 0 0K 0
evtchn_dev 0 0K 0
xenstore 0 0K 0
scsi_pass 0 0K 0
ciss_data 0 0K 0
xnb 0 0K 0
xen_acpi 0 0K 0
xbbd 0 0K 0
xbd 0 0K 0
Balloon 0 0K 0
sysmouse 0 0K 0
UMAHash 0 0K 0
vtfont 0 0K 0
vm_pgdata 0 0K 0
jblocks 0 0K 0
savedino 0 0K 20102
sentinel 0 0K 0
jfsync 0 0K 0
jtrunc 0 0K 0
sbdep 0 0K 47
jsegdep 0 0K 0
jseg 0 0K 0
jfreefrag 0 0K 0
jfreeblk 0 0K 0
jnewblk 0 0K 0
jmvref 0 0K 0
jremref 0 0K 0
jaddref 0 0K 0
freedep 0 0K 0
dirrem 0 0K 20382
freefile 0 0K 20302
freeblks 0 0K 20001
freefrag 0 0K 54
allocindir 0 0K 0
indirdep 0 0K 4280
allocdirect 0 0K 0
ufs_trim 0 0K 0
mactemp 0 0K 0
audit_trigger 0 0K 0
audit_pipe_presel 0 0K 0
audit_pipeent 0 0K 0
audit_pipe 0 0K 0
audit_evname 0 0K 0
audit_bsm 0 0K 0
audit_gidset 0 0K 0
audit_text 0 0K 0
audit_path 0 0K 0
audit_data 0 0K 0
audit_cred 0 0K 0
BACKLIGHT 0 0K 0
ath_hal 0 0K 0
athdev 0 0K 0
ata_pci 0 0K 0
ata_dma 0 0K 0
ata_generic 0 0K 0
pvscsi 0 0K 0
scsi_da 0 0K 69
ata_da 0 0K 0
scsi_ch 0 0K 0
scsi_cd 0 0K 0
ktls_ocf 0 0K 0
AHCI driver 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5E_TLS_RX 0 0K 0
MLX5EEPROM 0 0K 0
MLX5E_TLS 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EN 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5DUMP 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
seq_file 0 0K 0
lkpiskb 0 0K 0
radix 0 0K 0
idr 0 0K 0
lkpindev 0 0K 0
lkpifw 0 0K 0
lkpi80211 0 0K 0
NLM 0 0K 0
ipsec-spdcache 0 0K 0
ipsec-reg 0 0K 0
ipsec-misc 0 0K 0
ipsecrequest 0 0K 0
ip6opt 0 0K 6
ip6_msource 0 0K 0
ip6_moptions 0 0K 0
in6_mfilter 0 0K 0
frag6 0 0K 2
tcplog 0 0K 0
tcp_hwpace 0 0K 0
USBdev 0 0K 0
USB 0 0K 0
LRO 0 0K 0
ip_msource 0 0K 0
ip_moptions 0 0K 1
in_mfilter 0 0K 0
ipid 0 0K 0
80211scan 0 0K 0
80211ratectl 0 0K 0
80211power 0 0K 0
80211nodeie 0 0K 0
80211node 0 0K 0
80211mesh_gt 0 0K 0
80211mesh_rt 0 0K 0
80211perr 0 0K 0
80211prep 0 0K 0
80211preq 0 0K 0
80211dfs 0 0K 0
80211crypto 0 0K 0
80211vap 0 0K 0
iflib 0 0K 0
vlan 0 0K 0
gif 0 0K 0
ifdescr 0 0K 0
zlib 0 0K 0
fadvise 0 0K 0
VN POLL 0 0K 0
agp 0 0K 0
statfs 0 0K 20711
namei_tracker 0 0K 1
export_host 0 0K 0
cl_savebuf 0 0K 12
nvme_da 0 0K 0
acpipwr 0 0K 0
acpi_perf 0 0K 0
twsbuf 0 0K 0
twe_commands 0 0K 0
tcp_log_dev 0 0K 3716
midi buffers 0 0K 0
mixer 0 0K 0
ac97 0 0K 0
hdacc 0 0K 0
hdac 0 0K 0
hdaa 0 0K 0
acpicmbat 0 0K 0
SIIS driver 0 0K 0
CAM CCB 0 0K 523
biobuf 0 0K 0
aios 0 0K 0
lio 0 0K 0
acl 0 0K 0
mbuf_tag 0 0K 143
ktls 0 0K 0
PUC 0 0K 0
ppbusdev 0 0K 0
agtiapi_MemAlloc malloc 0 0K 0
osti_cacheable 0 0K 0
tempbuff 0 0K 0
tempbuff 0 0K 0
ag_tgt_map_t malloc 0 0K 0
ag_slr_map_t malloc 0 0K 0
lDevFlags * malloc 0 0K 0
tiDeviceHandle_t * malloc 0 0K 0
ag_portal_data_t malloc 0 0K 0
ag_device_t malloc 0 0K 0
STLock malloc 0 0K 0
CCB List 0 0K 0
sr_iov 0 0K 0
OCS 0 0K 0
OCS 0 0K 0
nvme 0 0K 0
nvd 0 0K 0
netmap 0 0K 0
mwldev 0 0K 0
MVS driver 0 0K 0
CAM ccb queue 0 0K 0
accf 0 0K 0
pts 0 0K 0
ioctlops 0 0K 197
eventfd 0 0K 1
Witness 0 0K 0
stack 0 0K 0
mrsasbuf 0 0K 0
mpt_user 0 0K 0
mps_user 0 0K 0
MPSSAS 0 0K 0
mps 0 0K 0
sbuf 0 0K 288
mpr_user 0 0K 0
firmware 0 0K 0
compressor 0 0K 0
MPRSAS 0 0K 0
SWAP 0 0K 0
mpr 0 0K 0
mfibuf 0 0K 0
sysctltmp 0 0K 932
sysctl 0 0K 3
md_sectors 0 0K 0
ekcd 0 0K 0
dumper 0 0K 0
sendfile 0 0K 0
rctl 0 0K 0
md_disk 0 0K 0
malodev 0 0K 0
LED 0 0K 0
ix_sriov 0 0K 0
cache 0 0K 0
aacraidcam 0 0K 0
prison_racct 0 0K 0
Fail Points 0 0K 0
sigio 0 0K 1
pwd 0 0K 0
tty console 0 0K 0
ix 0 0K 0
ipsbuf 0 0K 0
aacraid_buf 0 0K 0
aaccam 0 0K 0
boottrace 0 0K 0
aacbuf 0 0K 0
zstd 0 0K 0
XZ_DEC 0 0K 0
nvlist 0 0K 0
SCSI ENC 0 0K 0
SCSI sa 0 0K 0
isofs_node 0 0K 0
isofs_mount 0 0K 0
tr_raid5_data 0 0K 0
tr_raid1e_data 0 0K 0
tr_raid1_data 0 0K 0
tr_raid0_data 0 0K 0
tr_concat_data 0 0K 0
md_sii_data 0 0K 0
md_promise_data 0 0K 0
md_nvidia_data 0 0K 0
md_jmicron_data 0 0K 0
md_intel_data 0 0K 0
md_ddf_data 0 0K 0
raid_data 0 0K 72
geom_flashmap 0 0K 0
tmpfs dir 0 0K 0
tmpfs name 0 0K 0
tmpfs mount 0 0K 0
NFS FHA 0 0K 0
newnfsmnt 0 0K 0
newnfsclient_req 0 0K 0
NFSCL layrecall 0 0K 0
NFSCL session 0 0K 0
db> show uma
Zone Size Used Free Requests Sleeps Bucket Total Mem XFree
mbuf_jumbo_page 4096 8320 1078 1096200 0 254 38494208 0
mbuf 256 9055 1118 3477574 0 254 2604288 0
malloc-4096 4096 543 5 21207 0 2 2244608 0
tcp_log 416 21 5316 126395 0 254 2220192 0
RADIX NODE 144 14099 232 567659 0 62 2063664 0
pbuf 2624 0 762 0 0 2 1999488 0
sctp_asoc 2256 187 578 6110 0 254 1725840 0
BUF TRIE 144 201 11587 11041 0 62 1697472 0
malloc-384 384 4165 35 4165 0 30 1612800 0
mbuf_cluster 2048 762 0 762 0 254 1560576 0
malloc-128 128 11640 78 11646 0 126 1499904 0
malloc-16384 16384 81 5 19535 0 1 1409024 0
UMA Slabs 0 112 11379 27 11379 0 126 1277472 0
vmem btag 56 19962 93 19962 0 254 1123080 0
VM OBJECT 264 3815 85 310462 0 30 1029600 0
sctp_ep 1208 190 580 17635 0 254 930160 0
malloc-2048 2048 199 217 18917 0 8 851968 0
malloc-384 384 5 2065 20766 0 30 794880 0
FFS inode 1160 595 35 20897 0 8 730800 0
MAP ENTRY 96 6849 333 677736 0 126 689472 0
malloc-256 256 677 1753 62511 0 62 622080 0
THREAD 1808 316 25 22997 0 8 616528 0
malloc-256 256 199 2036 25257 0 62 572160 0
sctp_raddr 736 187 583 6489 0 254 566720 0
tcpcb 1104 14 497 10584 0 254 564144 0
VMSPACE 2552 196 14 20680 0 4 535920 0
256 Bucket 2048 229 19 12162 0 8 507904 0
socket 960 55 453 30966 0 254 487680 0
malloc-1024 1024 189 227 6116 0 16 425984 0
lkpimm 168 1 2327 1 0 62 391104 0
lkpicurr 168 2 2326 2 0 62 391104 0
malloc-384 384 614 286 24528 0 30 345600 0
ertt_txseginfo 40 2 8381 1615572 0 254 335320 0
malloc-65536 65536 5 0 5 0 1 327680 0
VNODE 448 635 85 20939 0 30 322560 0
PROC 1352 213 21 20698 0 8 316368 0
FPU_save_area 832 318 42 29256 0 16 299520 0
malloc-128 128 1 2169 20357 0 126 277760 0
malloc-64 64 3866 229 3868 0 254 262080 0
malloc-16 16 14609 141 14677 0 254 236000 0
DEVCTL 1024 0 220 155 0 0 225280 0
filedesc0 1072 178 25 20963 0 8 217616 0
malloc-128 128 1394 249 67381 0 126 210304 0
malloc-65536 65536 3 0 3 0 1 196608 0
malloc-32768 32768 0 6 3843 0 1 196608 0
mbuf_packet 256 126 636 33800 0 254 195072 0
tcp_bbr_map 128 0 1519 194201 0 126 194432 0
UMA Zones 768 244 0 244 0 16 187392 0
malloc-32 32 5322 348 5332 0 254 181440 0
FFS2 dinode 256 595 95 20897 0 62 176640 0
malloc-256 256 96 594 33421 0 62 176640 0
S VFS Cache 104 1066 455 23016 0 126 158184 0
malloc-1024 1024 120 24 317 0 16 147456 0
malloc-128 128 1004 143 4398 0 126 146816 0
128 Bucket 1024 90 41 2236 0 16 134144 0
malloc-65536 65536 0 2 342 0 1 131072 0
malloc-65536 65536 0 2 144 0 1 131072 0
malloc-128 128 664 359 44216 0 126 130944 0
unpcb 256 20 490 1497 0 254 130560 0
clpbuf 2624 0 48 295 0 16 125952 0
64 Bucket 512 145 87 17699 0 30 118784 0
ksiginfo 112 221 823 6985 0 126 116928 0
malloc-4096 4096 22 4 32 0 2 106496 0
malloc-64 64 1086 489 321551 0 254 100800 0
malloc-64 64 1044 531 29389 0 254 100800 0
g_bio 408 0 240 69733 0 30 97920 0
UMA Kegs 384 230 3 230 0 30 89472 0
32 Bucket 256 152 163 7445 0 62 80640 0
sctp_readq 152 0 520 207 0 254 79040 0
sctp_chunk 152 165 355 1735 0 254 79040 0
malloc-8192 8192 9 0 9 0 1 73728 0
malloc-8192 8192 7 2 110 0 1 73728 0
malloc-65536 65536 1 0 1 0 1 65536 0
malloc-32768 32768 0 2 120 0 1 65536 0
malloc-32768 32768 2 0 2 0 1 65536 0
malloc-16384 16384 4 0 4 0 1 65536 0
malloc-4096 4096 15 1 26 0 2 65536 0
malloc-1024 1024 21 43 547 0 16 65536 0
malloc-256 256 77 178 21818 0 62 65280 0
sctp_stream_msg_out 112 81 459 954 0 254 60480 0
malloc-4096 4096 10 4 555 0 2 57344 0
tcp_inpcb 424 14 112 10584 0 30 53424 0
malloc-32 32 776 862 40250 0 254 52416 0
TURNSTILE 136 342 36 342 0 62 51408 0
malloc-256 256 2 193 43118 0 62 49920 0
malloc-256 256 41 154 19678 0 62 49920 0
DIRHASH 1024 34 14 34 0 16 49152 0
NAMEI 1024 0 48 101888 0 16 49152 0
malloc-16384 16384 1 2 161 0 1 49152 0
malloc-8192 8192 2 4 27 0 1 49152 0
malloc-2048 2048 12 12 20 0 8 49152 0
pipe 744 23 42 765 0 16 48360 0
da_ccb 544 0 84 17841 0 16 45696 0
tcp_bbr_pcb 832 1 53 5562 0 16 44928 0
syncache 168 0 264 4 0 254 44352 0
Files 80 258 292 63944 0 126 44000 0
pcpu-8 8 4706 414 5128 0 254 40960 0
sctp_laddr 48 332 508 6407 0 254 40320 0
Mountpoints 2752 2 12 2 0 4 38528 0
ripcb 424 6 84 764 0 30 38160 0
udplite_inpcb 424 0 90 142 0 30 38160 0
udp_inpcb 424 6 84 294 0 30 38160 0
malloc-64 64 47 520 19367 0 254 36288 0
malloc-64 64 26 541 71 0 254 36288 0
malloc-64 64 175 392 3658 0 254 36288 0
malloc-64 64 11 556 75 0 254 36288 0
malloc-64 64 188 379 20973 0 254 36288 0
16 Bucket 144 84 168 1341 0 62 36288 0
malloc-128 128 42 237 2781 0 126 35712 0
malloc-128 128 98 181 615 0 126
---
This report is generated by a bot. It may contain errors.
See https://goo.gl/tpsmEJ for more information about syzbot.
syzbot engineers can be reached at syzk...@googlegroups.com.
syzbot will keep track of this issue. See:
https://goo.gl/tpsmEJ#status for how to communicate with syzbot.
syzbot found the following issue on:
HEAD commit: b85b9c88eb02 contrib/bc: import version 5.2.4
git tree: freebsd-src
console output: https://syzkaller.appspot.com/x/log.txt?x=15c03a7cf00000
dashboard link: https://syzkaller.appspot.com/bug?extid=66ede232c3d1271c6226
userspace arch: i386
Unfortunately, I don't have any reproducer for this issue yet.
IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+66ede2...@syzkaller.appspotmail.com
panic: ASan: Invalid access, 8-byte read at 0xfffffe0096854da8, UMAUseAfterFree(fd)
cpuid = 0
time = 1650230229
KDB: stack backtrace:
db_trace_self_wrapper() at db_trace_self_wrapper+0xc7/frame 0xfffffe005414e890
kdb_backtrace() at kdb_backtrace+0xd3/frame 0xfffffe005414e9f0
vpanic() at vpanic+0x2b8/frame 0xfffffe005414ead0
panic() at panic+0xb5/frame 0xfffffe005414eba0
kasan_report() at kasan_report+0xdc/frame 0xfffffe005414ec70
__mtx_lock_flags() at __mtx_lock_flags+0x125/frame 0xfffffe005414ed50
sctp_sendall_completes() at sctp_sendall_completes+0x41/frame 0xfffffe005414ed70
sctp_iterator_worker() at sctp_iterator_worker+0xff4/frame 0xfffffe005414eed0
sctp_iterator_thread() at sctp_iterator_thread+0x5e/frame 0xfffffe005414eef0
fork_exit() at fork_exit+0xd0/frame 0xfffffe005414ef30
fork_trampoline() at fork_trampoline+0xe/frame 0xfffffe005414ef30
--- trap 0, rip = 0, rsp = 0, rbp = 0 ---
KDB: enter: panic
[ thread pid 5 tid 100068 ]
Stopped at kdb_enter+0x6b: movq $0,0x27059ea(%rip)
db>
db> set $lines = 0
db> set $maxwidth = 0
db> show registers
cs 0x20
ds 0x3b
es 0x3b
fs 0x13
gs 0x1b
ss 0
rax 0x12
rcx 0x540abd858e19a6fb
rdx 0x1
rbx 0
rsp 0xfffffe005414e9d0
rbp 0xfffffe005414e9f0
rsi 0
rdi 0xffffffff8178143a vprintf+0x35a
r8 0
r9 0xffffffff
r10 0
r11 0
r12 0xfffffe005787e720
r13 0xfffffe005414ea01
r14 0xffffffff82bc6400 .str.26
r15 0xffffffff82bc6400 .str.26
rip 0xffffffff817749ab kdb_enter+0x6b
rflags 0x46
kdb_enter+0x6b: movq $0,0x27059ea(%rip)
db> show proc
Process 5 (sctp_iterator) at 0xfffffe00579a9a90:
state: NORMAL
uid: 0 gids: 0
parent: pid 0 at 0xffffffff83e1da00
ABI: null
flag: 0x10000204 flag2: 0
reaper: 0xffffffff83e1da00 reapsubtree: 5
sigparent: 20
vmspace: 0xffffffff83e1e9a0
(map 0xffffffff83e1e9a0)
(map.pmap 0xffffffff83e1ea60)
(pmap 0xffffffff83e1eac8)
threads: 1
100068 Run CPU 0 [sctp_iterator]
db> ps
pid ppid pgrp uid state wmesg wchan cmd
20697 787 787 0 R (threaded) syz-executor.3
120313 RunQ syz-executor.3
122992 RunQ syz-executor.3
122994 S uwait 0xfffffe009a667880 syz-executor.3
20696 778 778 0 R (threaded) syz-executor.1
122903 RunQ syz-executor.1
122991 S connec 0xfffffe0058c180da syz-executor.1
122993 S sbwait 0xfffffe0058c18204 syz-executor.1
122997 S uwait 0xfffffe009a3c5f00 syz-executor.1
20694 780 780 0 R (threaded) syz-executor.2
122356 RunQ syz-executor.2
122989 S connec 0xfffffe0058c25c1a syz-executor.2
122995 S uwait 0xfffffe009a3e7000 syz-executor.2
18424 1 787 0 S uwait 0xfffffe009a3e8180 syz-executor.3
18421 1 787 0 S uwait 0xfffffe009a3e7f00 syz-executor.3
18415 1 787 0 S uwait 0xfffffe009a3c6480 syz-executor.3
18412 1 787 0 S uwait 0xfffffe009a3c6780 syz-executor.3
18409 1 787 0 S uwait 0xfffffe009a3e8680 syz-executor.3
18405 1 787 0 S uwait 0xfffffe009a3c6680 syz-executor.3
18404 1 787 0 S uwait 0xfffffe009a3e9700 syz-executor.3
18399 1 787 0 S uwait 0xfffffe009a3c6380 syz-executor.3
18398 1 787 0 S uwait 0xfffffe009a3c7200 syz-executor.3
18394 1 787 0 S uwait 0xfffffe009a3c6180 syz-executor.3
18393 1 787 0 S uwait 0xfffffe009a3e9300 syz-executor.3
18387 1 787 0 S uwait 0xfffffe009a3e7d00 syz-executor.3
18386 1 787 0 S uwait 0xfffffe009a3c7300 syz-executor.3
18383 1 787 0 S uwait 0xfffffe009a3c6a80 syz-executor.3
18381 1 787 0 S umtxn 0xfffffe009a3c6980 syz-executor.3
18378 1 787 0 S uwait 0xfffffe009a3e8a80 syz-executor.3
18377 1 787 0 S uwait 0xfffffe009a3c7000 syz-executor.3
18374 1 787 0 S uwait 0xfffffe009a3e8980 syz-executor.3
18373 1 787 0 S uwait 0xfffffe009a3e8880 syz-executor.3
18370 1 787 0 S uwait 0xfffffe009a3e8d80 syz-executor.3
18367 1 787 0 S uwait 0xfffffe009a3e8780 syz-executor.3
18364 1 787 0 S uwait 0xfffffe009a3e8c80 syz-executor.3
18362 1 787 0 S uwait 0xfffffe009a3e9600 syz-executor.3
18357 1 787 0 S uwait 0xfffffe009a3e8b80 syz-executor.3
18356 1 787 0 S uwait 0xfffffe009a3e8480 syz-executor.3
18354 1 787 0 S uwait 0xfffffe009a3c6e80 syz-executor.3
18353 1 787 0 S umtxn 0xfffffe0056f48c80 syz-executor.3
18349 1 787 0 S umtxn 0xfffffe009a3e8e80 syz-executor.3
18343 1 777 0 S uwait 0xfffffe009a3e8580 syz-executor.0
18342 1 787 0 S uwait 0xfffffe009a3e9100 syz-executor.3
18338 1 777 0 S uwait 0xfffffe009a3e9200 syz-executor.0
18337 1 787 0 S uwait 0xfffffe009a3e9000 syz-executor.3
18332 1 787 0 S uwait 0xfffffe005788d680 syz-executor.3
18331 1 787 0 S uwait 0xfffffe009a3c7a00 syz-executor.3
18328 1 777 0 S uwait 0xfffffe009a3c6b80 syz-executor.0
18325 1 787 0 S uwait 0xfffffe009a3e9e00 syz-executor.3
18324 1 787 0 S uwait 0xfffffe009a3c6d80 syz-executor.3
18323 1 777 0 S uwait 0xfffffe009a3c6c80 syz-executor.0
18318 1 787 0 S uwait 0xfffffe009a3ea580 syz-executor.3
18317 1 787 0 S umtxn 0xfffffe009a3e9800 syz-executor.3
18316 1 777 0 S uwait 0xfffffe009a3e9900 syz-executor.0
18314 1 777 0 S uwait 0xfffffe009a3e9500 syz-executor.0
18310 1 787 0 S uwait 0xfffffe009a3c7500 syz-executor.3
18309 1 777 0 S umtxn 0xfffffe009a3c7400 syz-executor.0
18308 1 787 0 S uwait 0xfffffe009a3e9400 syz-executor.3
18307 1 777 0 S uwait 0xfffffe009a3c7600 syz-executor.0
18302 1 787 0 S uwait 0xfffffe0056f48980 syz-executor.3
18301 1 777 0 S uwait 0xfffffe009a3c7800 syz-executor.0
18300 1 777 0 S umtxn 0xfffffe009a3e9d00 syz-executor.0
18299 1 787 0 S uwait 0xfffffe008fe06500 syz-executor.3
18296 1 787 0 S uwait 0xfffffe009a3ea380 syz-executor.3
18295 1 777 0 S uwait 0xfffffe009a3c7700 syz-executor.0
18294 1 787 0 S uwait 0xfffffe009a3ea280 syz-executor.3
18293 1 777 0 S uwait 0xfffffe009a3c8480 syz-executor.0
18289 1 787 0 S uwait 0xfffffe009a3e9a00 syz-executor.3
18288 1 777 0 S uwait 0xfffffe009a3ea180 syz-executor.0
18287 1 777 0 S uwait 0xfffffe009a3e9c00 syz-executor.0
18282 1 777 0 S uwait 0xfffffe009a3e9b00 syz-executor.0
18281 1 777 0 S uwait 0xfffffe008fe05700 syz-executor.0
18278 1 787 0 S uwait 0xfffffe009a3c8080 syz-executor.3
18275 1 777 0 S uwait 0xfffffe009a3e9f00 syz-executor.0
18273 1 787 0 S uwait 0xfffffe009a3c8380 syz-executor.3
18272 1 777 0 S uwait 0xfffffe0056f48a80 syz-executor.0
18266 1 777 0 S uwait 0xfffffe009a3c7f00 syz-executor.0
18265 1 777 0 S uwait 0xfffffe009a3c7e00 syz-executor.0
18263 1 777 0 S uwait 0xfffffe009a3c7d00 syz-executor.0
18262 1 777 0 S uwait 0xfffffe009a3c7c00 syz-executor.0
18261 1 777 0 S uwait 0xfffffe009a3c7b00 syz-executor.0
18259 1 787 0 S umtxn 0xfffffe005788a200 syz-executor.3
18257 1 777 0 S uwait 0xfffffe009a3c7900 syz-executor.0
18256 1 777 0 S uwait 0xfffffe009a3c8580 syz-executor.0
18254 1 777 0 S uwait 0xfffffe009a3c8280 syz-executor.0
18249 1 787 0 S uwait 0xfffffe009a3ea080 syz-executor.3
18248 1 787 0 S uwait 0xfffffe005788a300 syz-executor.3
18247 1 777 0 S uwait 0xfffffe009a3c8180 syz-executor.0
18243 1 777 0 S umtxn 0xfffffe005788d880 syz-executor.0
18242 1 787 0 S uwait 0xfffffe005788d580 syz-executor.3
18241 1 787 0 S uwait 0xfffffe0056f48880 syz-executor.3
18240 1 777 0 S umtxn 0xfffffe009a3ea680 syz-executor.0
18234 1 777 0 S uwait 0xfffffe009a3ea780 syz-executor.0
18233 1 787 0 S uwait 0xfffffe0056f48780 syz-executor.3
18232 1 777 0 S uwait 0xfffffe005788da80 syz-executor.0
18231 1 787 0 S uwait 0xfffffe005788a100 syz-executor.3
18230 1 777 0 S uwait 0xfffffe005788a000 syz-executor.0
18228 1 787 0 S uwait 0xfffffe0056f48680 syz-executor.3
18227 1 787 0 S uwait 0xfffffe0056f48580 syz-executor.3
18223 1 787 0 S uwait 0xfffffe0056f48480 syz-executor.3
18222 1 777 0 S uwait 0xfffffe009a3c8680 syz-executor.0
18220 1 777 0 S uwait 0xfffffe0056f48b80 syz-executor.0
18219 1 787 0 S umtxn 0xfffffe008fe05500 syz-executor.3
18216 1 777 0 S uwait 0xfffffe005788a580 syz-executor.0
18214 1 787 0 S uwait 0xfffffe005788a780 syz-executor.3
18212 1 787 0 S uwait 0xfffffe0056f48e80 syz-executor.3
18211 1 777 0 S uwait 0xfffffe0056f48d80 syz-executor.0
18208 1 777 0 S uwait 0xfffffe008fe06800 syz-executor.0
18207 1 787 0 S uwait 0xfffffe005788dc80 syz-executor.3
18206 1 787 0 S uwait 0xfffffe005788db80 syz-executor.3
18204 1 777 0 S uwait 0xfffffe008fe05400 syz-executor.0
18203 1 787 0 S uwait 0xfffffe005788d980 syz-executor.3
18202 1 777 0 S uwait 0xfffffe005788d780 syz-executor.0
18196 1 780 0 S uwait 0xfffffe008fe05300 syz-executor.2
18195 1 787 0 S uwait 0xfffffe005788a400 syz-executor.3
18194 1 780 0 S uwait 0xfffffe005788dd80 syz-executor.2
18193 1 787 0 S uwait 0xfffffe008fe06300 syz-executor.3
18192 1 787 0 S uwait 0xfffffe005788a980 syz-executor.3
18190 1 787 0 S uwait 0xfffffe005788b700 syz-executor.3
18187 1 787 0 S uwait 0xfffffe008fe05200 syz-executor.3
18186 1 780 0 S uwait 0xfffffe008fe05100 syz-executor.2
18184 1 787 0 S uwait 0xfffffe005788b900 syz-executor.3
18180 1 787 0 S uwait 0xfffffe008fe05c00 syz-executor.3
18179 1 787 0 S uwait 0xfffffe008fe05000 syz-executor.3
18178 1 787 0 S uwait 0xfffffe005788de80 syz-executor.3
18173 1 787 0 S uwait 0xfffffe005788bc00 syz-executor.3
18172 1 787 0 S uwait 0xfffffe008fe05a00 syz-executor.3
18171 1 787 0 S uwait 0xfffffe008fe06c00 syz-executor.3
18168 1 787 0 S uwait 0xfffffe005788b200 syz-executor.3
18167 1 787 0 S uwait 0xfffffe0056f45300 syz-executor.3
18164 1 787 0 S umtxn 0xfffffe008fe06200 syz-executor.3
18159 1 787 0 S uwait 0xfffffe005788c280 syz-executor.3
18158 1 787 0 S uwait 0xfffffe008fe05800 syz-executor.3
18157 1 787 0 S umtxn 0xfffffe005788c380 syz-executor.3
18153 1 787 0 S uwait 0xfffffe005788a500 syz-executor.3
18152 1 787 0 S uwait 0xfffffe008fe05b00 syz-executor.3
18150 1 787 0 S uwait 0xfffffe005788ad80 syz-executor.3
18145 1 787 0 S uwait 0xfffffe008fe05900 syz-executor.3
18142 1 787 0 S uwait 0xfffffe005788ba00 syz-executor.3
18140 1 787 0 S uwait 0xfffffe008fe07e00 syz-executor.3
18133 1 787 0 S uwait 0xfffffe008fe05600 syz-executor.3
18131 1 787 0 S uwait 0xfffffe005788b500 syz-executor.3
18130 1 787 0 S uwait 0xfffffe008fe07280 syz-executor.3
18125 1 787 0 S uwait 0xfffffe005788c180 syz-executor.3
18123 1 787 0 S uwait 0xfffffe008fe06100 syz-executor.3
18121 1 787 0 S uwait 0xfffffe005788b000 syz-executor.3
18117 1 787 0 S uwait 0xfffffe0056f45600 syz-executor.3
18116 1 787 0 S uwait 0xfffffe005788a680 syz-executor.3
18112 1 787 0 S uwait 0xfffffe008fe06600 syz-executor.3
18111 1 787 0 S uwait 0xfffffe005788ab80 syz-executor.3
18103 1 787 0 S uwait 0xfffffe005788c680 syz-executor.3
18101 1 787 0 S umtxn 0xfffffe005788aa80 syz-executor.3
18095 1 787 0 S uwait 0xfffffe008fe06000 syz-executor.3
18094 1 787 0 S uwait 0xfffffe008fe05e80 syz-executor.3
18093 1 787 0 S uwait 0xfffffe008fe06400 syz-executor.3
18091 1 787 0 S uwait 0xfffffe005788ac80 syz-executor.3
18090 1 787 0 S uwait 0xfffffe005788b800 syz-executor.3
18089 1 787 0 S umtxn 0xfffffe008fe06f00 syz-executor.3
18086 1 787 0 S uwait 0xfffffe008fe06900 syz-executor.3
18085 1 787 0 S uwait 0xfffffe008fe05d80 syz-executor.3
18084 1 787 0 S uwait 0xfffffe005788b300 syz-executor.3
18076 1 787 0 S uwait 0xfffffe005788b100 syz-executor.3
18073 1 787 0 S uwait 0xfffffe005788bb00 syz-executor.3
18071 1 787 0 S uwait 0xfffffe005788bd00 syz-executor.3
18062 1 787 0 S uwait 0xfffffe008fe06700 syz-executor.3
18061 1 787 0 S uwait 0xfffffe005788a880 syz-executor.3
18058 1 787 0 S uwait 0xfffffe005788bf00 syz-executor.3
18050 1 787 0 S uwait 0xfffffe008fe07180 syz-executor.3
18049 1 787 0 S uwait 0xfffffe005788b600 syz-executor.3
18048 1 787 0 S uwait 0xfffffe0053ff2e80 syz-executor.3
8385 1 8385 65 Ss select 0xfffffe0056fed6c0 dhclient
7769 1 7769 0 Ss select 0xfffffe0056fc4bc0 dhclient
7766 1 7766 0 Ss select 0xfffffe0056fee5c0 dhclient
7747 1 7747 65 Ss select 0xfffffe0056fed3c0 dhclient
7082 1 7082 0 Ss select 0xfffffe0056fef540 dhclient
7079 1 7079 0 Ss select 0xfffffe0056fedac0 dhclient
7060 1 7060 65 Ss select 0xfffffe0056fed740 dhclient
5374 1 5374 0 Ss select 0xfffffe0056feddc0 dhclient
5371 1 5371 0 Ss select 0xfffffe0056fedb40 dhclient
5351 1 5351 65 Ss select 0xfffffe0056fee140 dhclient
2745 1 2745 0 Ss select 0xfffffe00578a3940 dhclient
2736 1 2736 0 Ss select 0xfffffe0056fee940 dhclient
787 774 787 0 Rs syz-executor.3
780 774 780 0 Ss nanslp 0xffffffff83e47a01 syz-executor.2
778 774 778 0 Ss nanslp 0xffffffff83e47a01 syz-executor.1
777 774 777 0 Rs syz-executor.0
774 772 772 0 S (threaded) syz-fuzzer
100094 S uwait 0xfffffe0056f45400 syz-fuzzer
100113 S uwait 0xfffffe008fe07900 syz-fuzzer
100114 S uwait 0xfffffe008fe07a00 syz-fuzzer
100115 S uwait 0xfffffe008fe07b00 syz-fuzzer
100116 S uwait 0xfffffe008fe07c00 syz-fuzzer
100117 S uwait 0xfffffe008fe07d00 syz-fuzzer
100118 S uwait 0xfffffe008fe06d00 syz-fuzzer
100120 S uwait 0xfffffe008fe06e00 syz-fuzzer
100121 S uwait 0xfffffe008fe07f00 syz-fuzzer
114864 S kqread 0xfffffe0007974700 syz-fuzzer
772 770 772 0 Ss pause 0xfffffe0056f935f8 csh
770 688 770 0 Ss select 0xfffffe0056fef2c0 sshd
754 1 754 0 Ss+ ttyin 0xfffffe00081f10b0 getty
753 1 753 0 Ss+ ttyin 0xfffffe0057a810b0 getty
752 1 752 0 Ss+ ttyin 0xfffffe0057a814b0 getty
751 1 751 0 Ss+ ttyin 0xfffffe0057a818b0 getty
750 1 750 0 Ss+ ttyin 0xfffffe0057a81cb0 getty
749 1 749 0 Ss+ ttyin 0xfffffe0057a820b0 getty
748 1 748 0 Ss+ ttyin 0xfffffe0057a824b0 getty
747 1 747 0 Ss+ ttyin 0xfffffe0057a828b0 getty
746 1 746 0 Ss+ ttyin 0xfffffe0057a82cb0 getty
692 1 692 0 Ss nanslp 0xffffffff83e47a00 cron
688 1 688 0 Ss select 0xfffffe00578a4240 sshd
501 1 501 0 Ss select 0xfffffe00578a44c0 syslogd
430 1 430 0 Ss select 0xfffffe00578a43c0 devd
429 1 429 65 Ss select 0xfffffe00578a4a40 dhclient
344 1 344 0 Ss select 0xfffffe00578a45c0 dhclient
341 1 341 0 Ss select 0xfffffe0056fc4dc0 dhclient
17 0 0 0 DL syncer 0xffffffff83f6d260 [syncer]
16 0 0 0 DL vlruwt 0xfffffe0056f95a90 [vnlru]
15 0 0 0 DL (threaded) [bufdaemon]
100080 D psleep 0xffffffff83f6b860 [bufdaemon]
100083 D - 0xffffffff83211f80 [bufspacedaemon-0]
100095 D sdflush 0xfffffe0058aec4e8 [/ worker]
9 0 0 0 DL psleep 0xffffffff83f9f380 [vmdaemon]
8 0 0 0 DL (threaded) [pagedaemon]
100078 D psleep 0xffffffff83f93238 [dom0]
100081 D launds 0xffffffff83f93244 [laundry: dom0]
100082 D umarcl 0xffffffff81eafad0 [uma]
7 0 0 0 DL - 0xffffffff83c03788 [rand_harvestq]
6 0 0 0 DL pftm 0xffffffff84a20530 [pf purge]
5 0 0 0 RL CPU 0 [sctp_iterator]
4 0 0 0 DL (threaded) [cam]
100045 D - 0xffffffff83aa56c0 [doneq0]
100046 D - 0xffffffff83aa5640 [async]
100077 D - 0xffffffff83aa54c0 [scanner]
14 0 0 0 DL seqstat 0xfffffe0007967888 [sequencer 00]
3 0 0 0 DL (threaded) [crypto]
100041 D crypto_ 0xffffffff83f8ea40 [crypto]
100042 D crypto_ 0xfffffe0053eb5d30 [crypto returns 0]
100043 D crypto_ 0xfffffe0053eb5d80 [crypto returns 1]
13 0 0 0 DL (threaded) [geom]
100036 D - 0xffffffff83e1cfc0 [g_event]
100037 D - 0xffffffff83e1cfe0 [g_up]
100038 D - 0xffffffff83e1d000 [g_down]
2 0 0 0 WL (threaded) [clock]
100030 I [clock (0)]
100031 I [clock (1)]
12 0 0 0 WL (threaded) [intr]
100010 I [swi6: Giant taskq]
100017 I [swi5: fast taskq]
100020 I [swi6: task queue]
100029 I [swi1: netisr 0]
100032 I [swi3: busdma]
100033 I [swi1: hpts]
100034 I [swi1: hpts]
100047 I [irq24: virtio_pci0]
100048 I [irq25: virtio_pci0]
100049 I [irq26: virtio_pci0]
100050 I [irq27: virtio_pci0]
100051 I [irq28: virtio_pci1]
100052 I [irq29: virtio_pci1]
100053 I [irq30: virtio_pci1]
100054 I [irq31: virtio_pci1]
100055 I [irq32: virtio_pci1]
100060 I [irq33: virtio_pci2]
100061 I [irq34: virtio_pci2]
100062 I [irq35: virtio_pci2]
100064 I [irq1: atkbd0]
100065 I [irq12: psm0]
100066 I [swi0: uart uart++]
100070 I [swi1: pf send]
11 0 0 0 RL (threaded) [idle]
100003 CanRun [idle: cpu0]
100004 CanRun [idle: cpu1]
1 0 1 0 SLs wait 0xfffffe0053ddc000 [init]
10 0 0 0 DL audit_w 0xffffffff83f8f540 [audit]
0 0 0 0 DLs (threaded) [kernel]
100000 D swapin 0xffffffff83e1da00 [swapper]
100005 D - 0xfffffe0007973100 [softirq_0]
100006 D - 0xfffffe0007973000 [softirq_1]
100007 D - 0xfffffe0007972e00 [if_io_tqg_0]
100008 D - 0xfffffe0007972d00 [if_io_tqg_1]
100009 D - 0xfffffe0007972c00 [if_config_tqg_0]
100011 D - 0xfffffe0007972a00 [aiod_kick taskq]
100012 D - 0xfffffe0007972900 [inm_free taskq]
100013 D - 0xfffffe0007972800 [linuxkpi_irq_wq]
100014 D - 0xfffffe0007972700 [in6m_free taskq]
100015 D - 0xfffffe0007972600 [deferred_unmount ta]
100016 D - 0xfffffe0007972500 [thread taskq]
100018 D - 0xfffffe0007972300 [pci_hp taskq]
100019 D - 0xfffffe0007972200 [kqueue_ctx taskq]
100021 D - 0xfffffe0007972000 [linuxkpi_short_wq_0]
100022 D - 0xfffffe0007972000 [linuxkpi_short_wq_1]
100023 D - 0xfffffe0007972000 [linuxkpi_short_wq_2]
100024 D - 0xfffffe0007972000 [linuxkpi_short_wq_3]
100025 D - 0xfffffe0007971e00 [linuxkpi_long_wq_0]
100026 D - 0xfffffe0007971e00 [linuxkpi_long_wq_1]
100027 D - 0xfffffe0007971e00 [linuxkpi_long_wq_2]
100028 D - 0xfffffe0007971e00 [linuxkpi_long_wq_3]
100035 D - 0xfffffe0007971d00 [firmware taskq]
100039 D - 0xfffffe0007971b00 [crypto_0]
100040 D - 0xfffffe0007971b00 [crypto_1]
100056 D - 0xfffffe0056fcae00 [vtnet0 rxq 0]
100057 D - 0xfffffe0056fcad00 [vtnet0 txq 0]
100058 D - 0xfffffe0056fcac00 [vtnet0 rxq 1]
100059 D - 0xfffffe0056fcab00 [vtnet0 txq 1]
100063 D vtbslp 0xfffffe0056fc5000 [virtio_balloon]
100067 D - 0xffffffff82bcc280 [deadlkres]
100071 D - 0xfffffe0007973200 [mca taskq]
100072 D - 0xfffffe0058604500 [acpi_task_0]
100073 D - 0xfffffe0058604500 [acpi_task_1]
100074 D - 0xfffffe0058604500 [acpi_task_2]
100076 D - 0xfffffe0007971900 [CAM taskq]
20698 777 777 0 Z syz-executor.0
db> show all locks
Process 20697 (syz-executor.3) thread 0xfffffe009a64cc80 (122992)
exclusive lockmgr bufwait (bufwait) r = 0 (0xfffffe00079a2948) locked @ /syzkaller/managers/i386/kernel/sys/kern/vfs_bio.c:3988
exclusive lockmgr ufs (ufs) r = 0 (0xfffffe009a5e05b0) locked @ /syzkaller/managers/i386/kernel/sys/kern/vfs_vnops.c:1166
Process 20696 (syz-executor.1) thread 0xfffffe009a660c80 (122993)
exclusive sx so_rcv_sx (so_rcv_sx) r = 0 (0xfffffe0058c18180) locked @ /syzkaller/managers/i386/kernel/sys/kern/uipc_socket.c:4193
db> show malloc
Type InUse MemUse Requests
pf_hash 5 11524K 5
tcp_hpts 7 4801K 7
devbuf 4217 4323K 4245
sysctloid 35322 2081K 35393
vtbuf 24 1968K 46
kobj 328 1312K 489
filedesc 162 1291K 39073
newblk 7 1026K 31309
vfscache 3 1025K 3
pcb 403 964K 35359
subproc 449 945K 20867
inodedep 6 514K 20728
ufs_quota 1 512K 1
vfs_hash 1 512K 1
callout 2 512K 2
intr 4 472K 4
vmem 3 274K 6
sctp_stro 187 187K 6136
acpica 1674 184K 57552
vnet_data 1 168K 1
sctp_atcl 377 142K 23951
tidhash 3 141K 3
linker 358 134K 386
pagedep 9 130K 19637
tfo_ccache 1 128K 1
DEVFS1 109 109K 126
sem 4 106K 4
kdtrace 531 93K 43697
BPF 46 88K 95
umtx 682 86K 682
bus 994 81K 5207
mtx_pool 2 72K 2
syncache 1 68K 1
module 513 65K 513
acpitask 1 64K 1
ddb_capture 1 64K 1
temp 34 33K 12534
DEVFS3 128 32K 138
hostcache 1 32K 1
shm 1 32K 4
msg 4 30K 4
gtaskqueue 18 26K 18
sctp_atky 564 24K 30526
sctp_timw 89 23K 89
kbdmux 6 22K 6
ifaddr 71 21K 73
DEVFS_RULE 56 20K 56
ufs_mount 4 17K 5
proc 3 17K 3
tty 16 16K 16
ithread 100 16K 100
routetbl 135 16K 427
kqueue 216 16K 20738
bus-sc 34 15K 1681
lltable 43 14K 98
KTRACE 103 13K 416
ether_multi 157 13K 167
ifnet 7 13K 7
ksem 31 12K 455
kenv 95 12K 95
eventhandler 134 12K 134
pwddesc 178 12K 20963
rman 88 11K 431
GEOM 61 11K 490
CAM queue 5 11K 1528
in6_multi 71 9K 71
bmsafemap 2 9K 20725
UART 12 9K 12
devstat 4 9K 4
rpc 2 8K 2
shmfd 1 8K 1
pfs_vncache 1 8K 1
pfs_nodes 20 8K 20
audit_evclass 237 8K 296
taskqueue 63 7K 63
cred 26 7K 1220
filedesc_to_leader 103 7K 185
sglist 5 7K 5
CAM DEV 3 6K 510
plimit 24 6K 506
sctp_athm 377 6K 24157
proc-args 248 6K 22119
sctp_map 374 6K 12220
ufs_dirhash 24 5K 24
UMA 272 5K 272
session 35 5K 55
pf_ifnet 10 5K 19
DEVFSP 68 5K 488
vt 11 5K 11
memdesc 1 4K 1
MCA 32 4K 32
evdev 4 4K 4
lockf 33 4K 610
acpisem 28 4K 28
selfd 55 4K 288254
hhook 15 4K 17
kcovinfo 52 4K 52
terminal 11 3K 11
select 19 3K 393
uidinfo 3 3K 13
local_apic 1 2K 1
io_apic 1 2K 1
fpukern_ctx 2 2K 2
ipsec-saq 2 2K 2
ip6ndp 12 2K 15
sctp_ifa 14 2K 15
Unitno 31 2K 47
CAM XPT 22 2K 543
msi 12 2K 12
in_multi 6 2K 8
ipsecpolicy 2 2K 2
acpidev 20 2K 20
clone 9 2K 9
tun 7 2K 7
tcp_fsb 8 1K 1342
softdep 1 1K 1
sahead 1 1K 1
secasvar 1 1K 1
nhops 6 1K 8
vnodemarker 2 1K 100
NFSD session 1 1K 1
CC Mem 14 1K 10665
CAM periph 4 1K 271
inpcbpolicy 26 1K 11784
pf_osfp 7 1K 7
sctp_ifn 6 1K 15
ipsec 3 1K 3
mld 6 1K 6
igmp 6 1K 6
toponodes 6 1K 6
isadev 6 1K 6
mount 16 1K 89
pci_link 10 1K 10
diradd 5 1K 20425
crypto 4 1K 4
encap_export_host 12 1K 12
procdesc 5 1K 18
osd 18 1K 10595
newdirblk 4 1K 19538
mkdir 4 1K 39076
pfil 4 1K 4
cdev 2 1K 2
chacha20random 1 1K 1
sctp_iter 1 1K 25
sctp_cpal 1 1K 13
NFSD lckfile 1 1K 1
NFSD V4client 1 1K 1
DEVFS 9 1K 10
freework 1 1K 23116
vnodes 1 1K 1
CAM SIM 2 1K 2
feeder 7 1K 7
tcpfunc 3 1K 3
loginclass 3 1K 6
prison 6 1K 6
lkpikmalloc 5 1K 6
soname 6 1K 36043
aesni_data 2 1K 2
cryptodev 2 1K 428
nexusdev 8 1K 8
apmdev 1 1K 1
atkbddev 2 1K 2
CAM dev queue 2 1K 2
CAM I/O Scheduler 1 1K 1
CAM path 4 1K 1034
iov 2 1K 27920
pmchooks 1 1K 1
filecaps 5 1K 120
sctp_vrf 1 1K 1
vnet 1 1K 1
entropy 2 1K 49
pmc 1 1K 1
acpiintr 1 1K 1
cpus 2 1K 2
vnet_data_free 1 1K 1
Per-cpu 1 1K 1
p1003.1b 1 1K 1
tcp_do 0 0K 0
mqdata 0 0K 0
pf_table 0 0K 0
pf_rule 0 0K 0
pf_altq 0 0K 0
pf_temp 0 0K 0
sctp_mcore 0 0K 0
sctp_socko 0 0K 8170
sctp_mvrf 0 0K 0
sctp_cmsg 0 0K 0
sctp_stre 0 0K 0
sctp_athi 0 0K 0
sctp_a_it 0 0K 12
sctp_aadr 0 0K 102
sctp_stri 0 0K 412
ipcomp 0 0K 0
esp 0 0K 0
ah 0 0K 0
filemon 0 0K 24
NFSCL sockreq 0 0K 0
NFSCL devinfo 0 0K 0
madt_table 0 0K 2
smartpqi 0 0K 0
NFSCL flayout 0 0K 0
NFSCL layout 0 0K 0
NFSD rollback 0 0K 0
ixl 0 0K 0
NFSCL diroff 0 0K 0
NEWdirectio 0 0K 0
NEWNFSnode 0 0K 0
NFSCL lck 0 0K 0
NFSCL lckown 0 0K 0
NFSCL client 0 0K 0
NFSCL deleg 0 0K 0
ice-resmgr 0 0K 0
ice-osdep 0 0K 0
ice 0 0K 0
iavf 0 0K 0
axgbe 0 0K 0
NFSCL open 0 0K 0
NFSCL owner 0 0K 0
NFS fh 0 0K 0
NFS req 0 0K 0
NFSD usrgroup 0 0K 0
NFSD string 0 0K 0
NFSD V4lock 0 0K 0
NFSD V4state 0 0K 0
xen_intr 0 0K 0
NFSD srvcache 0 0K 0
msdosfs_fat 0 0K 0
xen_hvm 0 0K 0
legacydrv 0 0K 0
bounce 0 0K 0
busdma 0 0K 0
qpidrv 0 0K 0
msdosfs_mount 0 0K 0
msdosfs_node 0 0K 0
dmar_idpgtbl 0 0K 0
dmar_dom 0 0K 0
dmar_ctx 0 0K 0
isci 0 0K 0
iommu_dmamap 0 0K 0
DEVFS4 0 0K 0
hyperv_socket 0 0K 0
bxe_ilt 0 0K 0
xenbus 0 0K 0
DEVFS2 0 0K 0
gntdev 0 0K 0
vm_fictitious 0 0K 0
privcmd_dev 0 0K 0
evtchn_dev 0 0K 0
xenstore 0 0K 0
scsi_pass 0 0K 0
ciss_data 0 0K 0
xnb 0 0K 0
xen_acpi 0 0K 0
xbbd 0 0K 0
xbd 0 0K 0
Balloon 0 0K 0
sysmouse 0 0K 0
UMAHash 0 0K 0
vtfont 0 0K 0
vm_pgdata 0 0K 0
jblocks 0 0K 0
savedino 0 0K 20102
sentinel 0 0K 0
jfsync 0 0K 0
jtrunc 0 0K 0
sbdep 0 0K 47
jsegdep 0 0K 0
jseg 0 0K 0
jfreefrag 0 0K 0
jfreeblk 0 0K 0
jnewblk 0 0K 0
jmvref 0 0K 0
jremref 0 0K 0
jaddref 0 0K 0
freedep 0 0K 0
dirrem 0 0K 20382
freefile 0 0K 20302
freeblks 0 0K 20001
freefrag 0 0K 54
allocindir 0 0K 0
indirdep 0 0K 4280
allocdirect 0 0K 0
ufs_trim 0 0K 0
mactemp 0 0K 0
audit_trigger 0 0K 0
audit_pipe_presel 0 0K 0
audit_pipeent 0 0K 0
audit_pipe 0 0K 0
audit_evname 0 0K 0
audit_bsm 0 0K 0
audit_gidset 0 0K 0
audit_text 0 0K 0
audit_path 0 0K 0
audit_data 0 0K 0
audit_cred 0 0K 0
BACKLIGHT 0 0K 0
ath_hal 0 0K 0
athdev 0 0K 0
ata_pci 0 0K 0
ata_dma 0 0K 0
ata_generic 0 0K 0
pvscsi 0 0K 0
scsi_da 0 0K 69
ata_da 0 0K 0
scsi_ch 0 0K 0
scsi_cd 0 0K 0
ktls_ocf 0 0K 0
AHCI driver 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5E_TLS_RX 0 0K 0
MLX5EEPROM 0 0K 0
MLX5E_TLS 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EN 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5DUMP 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
seq_file 0 0K 0
lkpiskb 0 0K 0
radix 0 0K 0
idr 0 0K 0
lkpindev 0 0K 0
lkpifw 0 0K 0
lkpi80211 0 0K 0
NLM 0 0K 0
ipsec-spdcache 0 0K 0
ipsec-reg 0 0K 0
ipsec-misc 0 0K 0
ipsecrequest 0 0K 0
ip6opt 0 0K 6
ip6_msource 0 0K 0
ip6_moptions 0 0K 0
in6_mfilter 0 0K 0
frag6 0 0K 2
tcplog 0 0K 0
tcp_hwpace 0 0K 0
USBdev 0 0K 0
USB 0 0K 0
LRO 0 0K 0
ip_msource 0 0K 0
ip_moptions 0 0K 1
in_mfilter 0 0K 0
ipid 0 0K 0
80211scan 0 0K 0
80211ratectl 0 0K 0
80211power 0 0K 0
80211nodeie 0 0K 0
80211node 0 0K 0
80211mesh_gt 0 0K 0
80211mesh_rt 0 0K 0
80211perr 0 0K 0
80211prep 0 0K 0
80211preq 0 0K 0
80211dfs 0 0K 0
80211crypto 0 0K 0
80211vap 0 0K 0
iflib 0 0K 0
vlan 0 0K 0
gif 0 0K 0
ifdescr 0 0K 0
zlib 0 0K 0
fadvise 0 0K 0
VN POLL 0 0K 0
agp 0 0K 0
statfs 0 0K 20711
namei_tracker 0 0K 1
export_host 0 0K 0
cl_savebuf 0 0K 12
nvme_da 0 0K 0
acpipwr 0 0K 0
acpi_perf 0 0K 0
twsbuf 0 0K 0
twe_commands 0 0K 0
tcp_log_dev 0 0K 3716
midi buffers 0 0K 0
mixer 0 0K 0
ac97 0 0K 0
hdacc 0 0K 0
hdac 0 0K 0
hdaa 0 0K 0
acpicmbat 0 0K 0
SIIS driver 0 0K 0
CAM CCB 0 0K 523
biobuf 0 0K 0
aios 0 0K 0
lio 0 0K 0
acl 0 0K 0
mbuf_tag 0 0K 143
ktls 0 0K 0
PUC 0 0K 0
ppbusdev 0 0K 0
agtiapi_MemAlloc malloc 0 0K 0
osti_cacheable 0 0K 0
tempbuff 0 0K 0
tempbuff 0 0K 0
ag_tgt_map_t malloc 0 0K 0
ag_slr_map_t malloc 0 0K 0
lDevFlags * malloc 0 0K 0
tiDeviceHandle_t * malloc 0 0K 0
ag_portal_data_t malloc 0 0K 0
ag_device_t malloc 0 0K 0
STLock malloc 0 0K 0
CCB List 0 0K 0
sr_iov 0 0K 0
OCS 0 0K 0
OCS 0 0K 0
nvme 0 0K 0
nvd 0 0K 0
netmap 0 0K 0
mwldev 0 0K 0
MVS driver 0 0K 0
CAM ccb queue 0 0K 0
accf 0 0K 0
pts 0 0K 0
ioctlops 0 0K 197
eventfd 0 0K 1
Witness 0 0K 0
stack 0 0K 0
mrsasbuf 0 0K 0
mpt_user 0 0K 0
mps_user 0 0K 0
MPSSAS 0 0K 0
mps 0 0K 0
sbuf 0 0K 288
mpr_user 0 0K 0
firmware 0 0K 0
compressor 0 0K 0
MPRSAS 0 0K 0
SWAP 0 0K 0
mpr 0 0K 0
mfibuf 0 0K 0
sysctltmp 0 0K 932
sysctl 0 0K 3
md_sectors 0 0K 0
ekcd 0 0K 0
dumper 0 0K 0
sendfile 0 0K 0
rctl 0 0K 0
md_disk 0 0K 0
malodev 0 0K 0
LED 0 0K 0
ix_sriov 0 0K 0
cache 0 0K 0
aacraidcam 0 0K 0
prison_racct 0 0K 0
Fail Points 0 0K 0
sigio 0 0K 1
pwd 0 0K 0
tty console 0 0K 0
ix 0 0K 0
ipsbuf 0 0K 0
aacraid_buf 0 0K 0
aaccam 0 0K 0
boottrace 0 0K 0
aacbuf 0 0K 0
zstd 0 0K 0
XZ_DEC 0 0K 0
nvlist 0 0K 0
SCSI ENC 0 0K 0
SCSI sa 0 0K 0
isofs_node 0 0K 0
isofs_mount 0 0K 0
tr_raid5_data 0 0K 0
tr_raid1e_data 0 0K 0
tr_raid1_data 0 0K 0
tr_raid0_data 0 0K 0
tr_concat_data 0 0K 0
md_sii_data 0 0K 0
md_promise_data 0 0K 0
md_nvidia_data 0 0K 0
md_jmicron_data 0 0K 0
md_intel_data 0 0K 0
md_ddf_data 0 0K 0
raid_data 0 0K 72
geom_flashmap 0 0K 0
tmpfs dir 0 0K 0
tmpfs name 0 0K 0
tmpfs mount 0 0K 0
NFS FHA 0 0K 0
newnfsmnt 0 0K 0
newnfsclient_req 0 0K 0
NFSCL layrecall 0 0K 0
NFSCL session 0 0K 0
db> show uma
Zone Size Used Free Requests Sleeps Bucket Total Mem XFree
mbuf_jumbo_page 4096 8320 1078 1096200 0 254 38494208 0
mbuf 256 9055 1118 3477574 0 254 2604288 0
malloc-4096 4096 543 5 21207 0 2 2244608 0
tcp_log 416 21 5316 126395 0 254 2220192 0
RADIX NODE 144 14099 232 567659 0 62 2063664 0
pbuf 2624 0 762 0 0 2 1999488 0
sctp_asoc 2256 187 578 6110 0 254 1725840 0
BUF TRIE 144 201 11587 11041 0 62 1697472 0
malloc-384 384 4165 35 4165 0 30 1612800 0
mbuf_cluster 2048 762 0 762 0 254 1560576 0
malloc-128 128 11640 78 11646 0 126 1499904 0
malloc-16384 16384 81 5 19535 0 1 1409024 0
UMA Slabs 0 112 11379 27 11379 0 126 1277472 0
vmem btag 56 19962 93 19962 0 254 1123080 0
VM OBJECT 264 3815 85 310462 0 30 1029600 0
sctp_ep 1208 190 580 17635 0 254 930160 0
malloc-2048 2048 199 217 18917 0 8 851968 0
malloc-384 384 5 2065 20766 0 30 794880 0
FFS inode 1160 595 35 20897 0 8 730800 0
MAP ENTRY 96 6849 333 677736 0 126 689472 0
malloc-256 256 677 1753 62511 0 62 622080 0
THREAD 1808 316 25 22997 0 8 616528 0
malloc-256 256 199 2036 25257 0 62 572160 0
sctp_raddr 736 187 583 6489 0 254 566720 0
tcpcb 1104 14 497 10584 0 254 564144 0
VMSPACE 2552 196 14 20680 0 4 535920 0
256 Bucket 2048 229 19 12162 0 8 507904 0
socket 960 55 453 30966 0 254 487680 0
malloc-1024 1024 189 227 6116 0 16 425984 0
lkpimm 168 1 2327 1 0 62 391104 0
lkpicurr 168 2 2326 2 0 62 391104 0
malloc-384 384 614 286 24528 0 30 345600 0
ertt_txseginfo 40 2 8381 1615572 0 254 335320 0
malloc-65536 65536 5 0 5 0 1 327680 0
VNODE 448 635 85 20939 0 30 322560 0
PROC 1352 213 21 20698 0 8 316368 0
FPU_save_area 832 318 42 29256 0 16 299520 0
malloc-128 128 1 2169 20357 0 126 277760 0
malloc-64 64 3866 229 3868 0 254 262080 0
malloc-16 16 14609 141 14677 0 254 236000 0
DEVCTL 1024 0 220 155 0 0 225280 0
filedesc0 1072 178 25 20963 0 8 217616 0
malloc-128 128 1394 249 67381 0 126 210304 0
malloc-65536 65536 3 0 3 0 1 196608 0
malloc-32768 32768 0 6 3843 0 1 196608 0
mbuf_packet 256 126 636 33800 0 254 195072 0
tcp_bbr_map 128 0 1519 194201 0 126 194432 0
UMA Zones 768 244 0 244 0 16 187392 0
malloc-32 32 5322 348 5332 0 254 181440 0
FFS2 dinode 256 595 95 20897 0 62 176640 0
malloc-256 256 96 594 33421 0 62 176640 0
S VFS Cache 104 1066 455 23016 0 126 158184 0
malloc-1024 1024 120 24 317 0 16 147456 0
malloc-128 128 1004 143 4398 0 126 146816 0
128 Bucket 1024 90 41 2236 0 16 134144 0
malloc-65536 65536 0 2 342 0 1 131072 0
malloc-65536 65536 0 2 144 0 1 131072 0
malloc-128 128 664 359 44216 0 126 130944 0
unpcb 256 20 490 1497 0 254 130560 0
clpbuf 2624 0 48 295 0 16 125952 0
64 Bucket 512 145 87 17699 0 30 118784 0
ksiginfo 112 221 823 6985 0 126 116928 0
malloc-4096 4096 22 4 32 0 2 106496 0
malloc-64 64 1086 489 321551 0 254 100800 0
malloc-64 64 1044 531 29389 0 254 100800 0
g_bio 408 0 240 69733 0 30 97920 0
UMA Kegs 384 230 3 230 0 30 89472 0
32 Bucket 256 152 163 7445 0 62 80640 0
sctp_readq 152 0 520 207 0 254 79040 0
sctp_chunk 152 165 355 1735 0 254 79040 0
malloc-8192 8192 9 0 9 0 1 73728 0
malloc-8192 8192 7 2 110 0 1 73728 0
malloc-65536 65536 1 0 1 0 1 65536 0
malloc-32768 32768 0 2 120 0 1 65536 0
malloc-32768 32768 2 0 2 0 1 65536 0
malloc-16384 16384 4 0 4 0 1 65536 0
malloc-4096 4096 15 1 26 0 2 65536 0
malloc-1024 1024 21 43 547 0 16 65536 0
malloc-256 256 77 178 21818 0 62 65280 0
sctp_stream_msg_out 112 81 459 954 0 254 60480 0
malloc-4096 4096 10 4 555 0 2 57344 0
tcp_inpcb 424 14 112 10584 0 30 53424 0
malloc-32 32 776 862 40250 0 254 52416 0
TURNSTILE 136 342 36 342 0 62 51408 0
malloc-256 256 2 193 43118 0 62 49920 0
malloc-256 256 41 154 19678 0 62 49920 0
DIRHASH 1024 34 14 34 0 16 49152 0
NAMEI 1024 0 48 101888 0 16 49152 0
malloc-16384 16384 1 2 161 0 1 49152 0
malloc-8192 8192 2 4 27 0 1 49152 0
malloc-2048 2048 12 12 20 0 8 49152 0
pipe 744 23 42 765 0 16 48360 0
da_ccb 544 0 84 17841 0 16 45696 0
tcp_bbr_pcb 832 1 53 5562 0 16 44928 0
syncache 168 0 264 4 0 254 44352 0
Files 80 258 292 63944 0 126 44000 0
pcpu-8 8 4706 414 5128 0 254 40960 0
sctp_laddr 48 332 508 6407 0 254 40320 0
Mountpoints 2752 2 12 2 0 4 38528 0
ripcb 424 6 84 764 0 30 38160 0
udplite_inpcb 424 0 90 142 0 30 38160 0
udp_inpcb 424 6 84 294 0 30 38160 0
malloc-64 64 47 520 19367 0 254 36288 0
malloc-64 64 26 541 71 0 254 36288 0
malloc-64 64 175 392 3658 0 254 36288 0
malloc-64 64 11 556 75 0 254 36288 0
malloc-64 64 188 379 20973 0 254 36288 0
16 Bucket 144 84 168 1341 0 62 36288 0
malloc-128 128 42 237 2781 0 126 35712 0
malloc-128 128 98 181 615 0 126
---
This report is generated by a bot. It may contain errors.
See https://goo.gl/tpsmEJ for more information about syzbot.
syzbot engineers can be reached at syzk...@googlegroups.com.
syzbot will keep track of this issue. See:
https://goo.gl/tpsmEJ#status for how to communicate with syzbot.
syzbot
Apr 18, 2022, 8:22:26 AM4/18/22
to syzkaller-f...@googlegroups.com
syzbot has found a reproducer for the following issue on:
HEAD commit: eb45bc682915 ssh-agent: move -x description to correct spo..
git tree: freebsd-src
console output: https://syzkaller.appspot.com/x/log.txt?x=14387e7cf00000
dashboard link: https://syzkaller.appspot.com/bug?extid=66ede232c3d1271c6226
syz repro: https://syzkaller.appspot.com/x/repro.syz?x=1428e804f00000
C reproducer: https://syzkaller.appspot.com/x/repro.c?x=1682c3f0f00000
IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+66ede2...@syzkaller.appspotmail.com
login: panic: ASan: Invalid access, 1-byte read at 0xfffffe000799c161, UMAUseAfterFree(fd)
cpuid = 0
time = 1650284354
KDB: stack backtrace:
db_trace_self_wrapper() at db_trace_self_wrapper+0xc7/frame 0xfffffe0054129c70
kdb_backtrace() at kdb_backtrace+0xd3/frame 0xfffffe0054129dd0
vpanic() at vpanic+0x2b8/frame 0xfffffe0054129eb0
panic() at panic+0xb5/frame 0xfffffe0054129f80
kasan_report() at kasan_report+0xdc/frame 0xfffffe005412a050
ip6_output() at ip6_output+0x5a8/frame 0xfffffe005412a5f0
sctp_lowlevel_chunk_output() at sctp_lowlevel_chunk_output+0x2015/frame 0xfffffe005412a8a0
sctp_send_initiate() at sctp_send_initiate+0x14c3/frame 0xfffffe005412aa30
sctp6_connect() at sctp6_connect+0x971/frame 0xfffffe005412abb0
soconnectat() at soconnectat+0x1d6/frame 0xfffffe005412ac10
kern_connectat() at kern_connectat+0x28a/frame 0xfffffe005412acf0
sys_connect() at sys_connect+0xfb/frame 0xfffffe005412ad30
amd64_syscall() at amd64_syscall+0x40c/frame 0xfffffe005412af30
fast_syscall_common() at fast_syscall_common+0xf8/frame 0xfffffe005412af30
--- syscall (0, FreeBSD ELF64, nosys), rip = 0x2b43ca, rsp = 0x82803af78, rbp = 0x82803afb0 ---
KDB: enter: panic
[ thread pid 2463 tid 103479 ]
rax 0x12
rcx 0xfaea1a92ba9d605
rdx 0xdffff7c000000000
rbx 0
rsp 0xfffffe0054129db0
rbp 0xfffffe0054129dd0
rsi 0x1
rdi 0
r8 0x3
r9 0xffffffff
r10 0
r11 0x7335d837
r12 0xfffffe0092e8e000
r13 0xfffffe0054129e01
state: NORMAL
uid: 0 gids: 0, 0, 5
parent: pid 780 at 0xfffffe0053dda548
ABI: FreeBSD ELF64
flag: 0x10000080 flag2: 0
arguments: ./syz-executor431365642
reaper: 0xfffffe0053ddc000 reapsubtree: 1
sigparent: 20
vmspace: 0xfffffe0092449000
(map 0xfffffe0092449000)
(map.pmap 0xfffffe00924490c0)
(pmap 0xfffffe0092449128)
threads: 3
100102 RunQ syz-executor4313656
103478 Run CPU 1 syz-executor4313656
103479 Run CPU 0 syz-executor4313656
100102 RunQ syz-executor4313656
103478 Run CPU 1 syz-executor4313656
103479 Run CPU 0 syz-executor4313656
780 778 778 0 S nanslp 0xffffffff83e47a01 syz-executor4313656
778 776 778 0 Ss pause 0xfffffe008fe09b40 csh
776 688 776 0 Ss select 0xfffffe0007852dc0 sshd
754 1 754 0 Ss+ ttyin 0xfffffe0056feb4b0 getty
753 1 753 0 Ss+ ttyin 0xfffffe0056fe70b0 getty
752 1 752 0 Ss+ ttyin 0xfffffe00081f14b0 getty
751 1 751 0 Ss+ ttyin 0xfffffe00081f18b0 getty
750 1 750 0 Ss+ ttyin 0xfffffe0056fe74b0 getty
749 1 749 0 Ss+ ttyin 0xfffffe0056fe78b0 getty
748 1 748 0 Ss+ ttyin 0xfffffe0056fe7cb0 getty
747 1 747 0 Ss+ ttyin 0xfffffe0056fe90b0 getty
746 1 746 0 Ss+ ttyin 0xfffffe0056fe94b0 getty
501 1 501 0 Ss select 0xfffffe0053dd07c0 syslogd
430 1 430 0 Ss select 0xfffffe0053dd0940 devd
429 1 429 65 Ss select 0xfffffe0053dd0840 dhclient
344 1 344 0 Ss select 0xfffffe0053dd1240 dhclient
341 1 341 0 Ss select 0xfffffe0053dd09c0 dhclient
5 0 0 0 DL waiting 0xffffffff846a14a0 [sctp_iterator]
100043 D crypto_ 0xfffffe0053effd80 [crypto returns 1]
100035 D - 0xfffffe0053f31300 [firmware taskq]
100039 D - 0xfffffe0053f31100 [crypto_0]
100040 D - 0xfffffe0053f31100 [crypto_1]
100056 D - 0xfffffe0053f2e000 [vtnet0 rxq 0]
100057 D - 0xfffffe0007974e00 [vtnet0 txq 0]
100058 D - 0xfffffe0007974d00 [vtnet0 rxq 1]
100059 D - 0xfffffe0007974c00 [vtnet0 txq 1]
100063 D vtbslp 0xfffffe0057011800 [virtio_balloon]
100073 D - 0xfffffe00574c3200 [acpi_task_1]
100074 D - 0xfffffe00574c3200 [acpi_task_2]
100076 D - 0xfffffe0053f30e00 [CAM taskq]
db> show all locks
Process 2463 (syz-executor4313656) thread 0xfffffe0092e8e000 (103479)
exclusive sleep mutex sctp-tcb (tcb) r = 0 (0xfffffe0092f55320) locked @ /syzkaller/managers/main/kernel/sys/netinet/sctp_pcb.c:4340
vfscache 3 1025K 3
pcb 21 539K 3404
inodedep 9 515K 71
subproc 96 174K 2522
vnet_data 1 168K 1
vmem 3 146K 5
tfo_ccache 1 128K 1
sem 4 106K 4
DEVFS1 105 105K 114
temp 17 33K 1615
kdtrace 158 33K 5944
hostcache 1 32K 1
shm 1 32K 1
sctp_timw 127 32K 127
DEVFS3 124 31K 134
DEVFS_RULE 56 20K 56
BPF 10 18K 10
KTRACE 100 13K 100
cred 34 9K 234
vt 11 5K 11
ifnet 3 5K 3
evdev 4 4K 4
acpisem 28 4K 28
hhook 15 4K 17
ether_multi 40 4K 50
lltable 11 4K 11
pf_ifnet 5 3K 6
in6_multi 25 3K 25
terminal 11 3K 11
session 19 3K 31
kqueue 38 3K 2466
pwddesc 38 3K 2464
uidinfo 3 3K 8
selfd 27 2K 32863
Unitno 27 2K 39
msi 12 2K 12
ipsec 3 1K 3
sctp_atcl 2 1K 3366
indirdep 3 1K 3
nhops 6 1K 6
crypto 4 1K 4
ip6ndp 4 1K 5
encap_export_host 12 1K 12
in_multi 2 1K 4
inpcbpolicy 10 1K 139
ip6opt 2 1K 111051
sctp_ifn 2 1K 6
DEVFS 9 1K 10
freework 1 1K 26
mld 2 1K 2
igmp 2 1K 2
loginclass 3 1K 7
soname 5 1K 6837
cryptodev 2 1K 49
sctp_atky 3 1K 5049
pmchooks 1 1K 1
tun 3 1K 3
sctp_map 2 1K 3366
tcp_fsb 0 0K 0
mqdata 0 0K 0
filemon 0 0K 0
sctp_iter 0 0K 4
sctp_mvrf 0 0K 0
sctp_cpal 0 0K 0
sctp_aadr 0 0K 0
sctp_stri 0 0K 0
savedino 0 0K 17
dirrem 0 0K 28
mkdir 0 0K 16
freefile 0 0K 26
freeblks 0 0K 25
freefrag 0 0K 1
allocindir 0 0K 0
namei_tracker 0 0K 0
export_host 0 0K 0
cl_savebuf 0 0K 3
iov 0 0K 13639
ioctlops 0 0K 86
eventfd 0 0K 0
mbuf_jumbo_page 4096 8320 1078 15393 0 254 38494208 0
mbuf 256 8579 1083 26656 0 254 2473472 0
pbuf 2624 0 778 0 0 2 2041472 0
BUF TRIE 144 179 11609 553 0 62 1697472 0
malloc-384 384 4165 5 4165 0 30 1601280 0
malloc-4096 4096 367 5 3039 0 2 1523712 0
malloc-128 128 11636 237 11642 0 126 1519744 0
UMA Slabs 0 112 10576 2 10576 0 126 1184736 0
sctp_asoc 2256 1 509 1683 0 254 1150560 0
mbuf_cluster 2048 508 0 508 0 254 1040384 0
vmem btag 56 16534 65 16534 0 254 929544 0
sctp_ep 1208 1 509 1683 0 254 616080 0
FFS inode 1160 483 42 509 0 8 609000 0
tcpcb 1104 3 508 7 0 254 564144 0
RADIX NODE 144 3272 223 43608 0 62 503280 0
socket 960 19 489 3018 0 254 487680 0
VM OBJECT 264 1320 180 56443 0 30 396000 0
lkpicurr 168 2 2350 2 0 62 395136 0
VNODE 448 513 63 541 0 30 258048 0
malloc-16 16 14609 141 14669 0 254 236000 0
DEVCTL 1024 0 220 126 0 0 225280 0
malloc-256 256 704 106 852 0 62 207360 0
MAP ENTRY 96 1432 584 128186 0 126 193536 0
FFS2 dinode 256 483 87 509 0 62 145920 0
FPU_save_area 832 121 41 3495 0 16 134784 0
S VFS Cache 104 970 317 1010 0 126 133848 0
malloc-65536 65536 0 2 46 0 1 131072 0
malloc-1024 1024 116 12 282 0 16 131072 0
unpcb 256 7 503 1179 0 254 130560 0
mbuf_packet 256 1 507 1760 0 254 130048 0
ksiginfo 112 39 1005 56 0 126 116928 0
malloc-256 256 295 140 5966 0 62 111360 0
malloc-128 128 608 167 3914 0 126 99200 0
malloc-128 128 604 171 1167 0 126 99200 0
malloc-2048 2048 10 38 2965 0 8 98304 0
VMSPACE 2552 21 12 2448 0 4 84216 0
clpbuf 2624 0 32 24 0 16 83968 0
malloc-256 256 231 84 903 0 62 80640 0
PROC 1352 37 20 2463 0 8 77064 0
malloc-64 64 768 303 36794 0 254 68544 0
malloc-64 64 566 505 5784 0 254 68544 0
malloc-65536 65536 0 1 144 0 1 65536 0
g_bio 408 0 150 4784 0 30 61200 0
filedesc0 1072 38 18 2464 0 8 60032 0
malloc-384 384 62 88 3766 0 30 57600 0
malloc-256 256 25 170 1723 0 62 49920 0
32 Bucket 256 70 125 9416 0 62 49920 0
malloc-1024 1024 19 29 893 0 16 49152 0
malloc-1024 1024 3 45 1689 0 16 49152 0
syncache 168 0 264 5 0 254 44352 0
pcpu-8 8 4221 387 4249 0 254 36864 0
malloc-64 64 31 536 13614 0 254 36288 0
malloc-64 64 26 541 42 0 254 36288 0
malloc-64 64 116 451 141 0 254 36288 0
malloc-64 64 10 557 42 0 254 36288 0
malloc-64 64 46 521 2472 0 254 36288 0
malloc-32 32 378 756 7841 0 254 36288 0
malloc-128 128 28 251 157 0 126 35712 0
malloc-128 128 1 278 28 0 126 35712 0
malloc-128 128 95 184 493 0 126 35712 0
malloc-128 128 20 259 25 0 126 35712 0
routing nhops 256 10 125 17 0 62 34560 0
ttyoutq 256 72 63 160 0 62 34560 0
malloc-384 384 8 82 89 0 30 34560 0
malloc-256 256 23 112 445 0 62 34560 0
malloc-256 256 2 133 52 0 62 34560 0
malloc-256 256 6 129 288 0 62 34560 0
malloc-256 256 69 66 483 0 62 34560 0
TURNSTILE 136 144 108 144 0 62 34272 0
malloc-32768 32768 1 0 1 0 1 32768 0
malloc-16384 16384 2 0 17 0 1 32768 0
malloc-8192 8192 4 0 4 0 1 32768 0
malloc-2048 2048 3 13 3 0 8 32768 0
malloc-2048 2048 11 5 12 0 8 32768 0
malloc-2048 2048 1 15 25 0 8 32768 0
malloc-2048 2048 2 14 11 0 8 32768 0
malloc-1024 1024 2 30 45 0 16 32768 0
malloc-1024 1024 4 28 5 0 16 32768 0
malloc-1024 1024 3 29 7 0 16 32768 0
malloc-512 512 0 64 118 0 30 32768 0
malloc-512 512 2 62 2 0 30 32768 0
malloc-512 512 3 61 15 0 30 32768 0
malloc-512 512 0 64 9 0 30 32768 0
malloc-512 512 10 54 60 0 30 32768 0
malloc-512 512 3 61 3 0 30 32768 0
pcpu-64 64 493 19 493 0 254 32768 0
ttyinq 160 135 65 300 0 62 32000 0
cpuset 104 7 272 7 0 126 29016 0
sctp_laddr 48 1 587 1687 0 254 28224 0
16 Bucket 144 56 140 556 0 62 28224 0
4 Bucket 48 7 581 352 0 254 28224 0
tcp_inpcb 424 3 60 7 0 30 26712 0
ripcb 424 1 62 4 0 30 26712 0
da_ccb 544 0 49 1321 0 16 26656 0
pipe 744 6 29 284 0 16 26040 0
malloc-8192 8192 2 1 3 0 1 24576 0
malloc-4096 4096 6 0 6 0 2 24576 0
rtentry 176 13 125 17 0 62 24288 0
PGRP 88 19 257 31 0 126 24288 0
ertt_txseginfo 40 1 605 1925 0 254 24240 0
rl_entry 40 32 574 32 0 254 24240 0
Files 80 68 232 9963 0 126 24000 0
8 Bucket 80 40 260 816 0 126 24000 0
malloc-384 384 11 49 11 0 30 23040 0
malloc-384 384 10 50 13 0 30 23040 0
malloc-384 384 54 6 64 0 30 23040 0
SLEEPQUEUE 88 144 112 144 0 126 22528 0
hostcache 64 1 314 1 0 254 20160 0
udpcb 32 6 624 128 0 254 20160 0
udp_inpcb ports 32 3 627 40 0 254 20160 0
ertt 72 3 277 7 0 126 20160 0
PWD 32 10 620 100 0 254 20160 0
malloc-32 32 33 597 1880 0 254 20160 0
malloc-32 32 4 626 60 0 254 20160 0
malloc-32 32 133 497 4761 0 254 20160 0
malloc-32 32 31 599 56 0 254 20160 0
malloc-32 32 29 601 31 0 254 20160 0
malloc-32 32 7 623 10 0 254 20160 0
2 Bucket 32 42 588 284 0 254 20160 0
epoch_record pcpu 256 4 60 4 0 62 16384 0
malloc-16384 16384 1 0 1 0 1 16384 0
malloc-8192 8192 0 2 28 0 1 16384 0
malloc-8192 8192 2 0 2 0 1 16384 0
malloc-4096 4096 1 3 200 0 2 16384 0
malloc-2048 2048 0 8 12 0 8 16384 0
malloc-2048 2048 2 6 2 0 8 16384 0
malloc-2048 2048 3 5 3 0 8 16384 0
malloc-1024 1024 1 15 1 0 16 16384 0
malloc-512 512 0 32 1 0 30 16384 0
SMR CPU 32 7 504 7 0 254 16352 0
vtnet_tx_hdr 24 0 668 3627 0 254 16032 0
malloc-16 16 511 489 3508 0 254 16000 0
malloc-16 16 9 991 112739 0 254 16000 0
kenv 258 15 45 1037 0 30 15480 0
mqnode 416 3 33 3 0 30 14976 0
vmem 1856 1 7 1 0 8 14848 0
SMR SHARED 24 7 504 7 0 254 12264 0
tcp_inpcb ports 32 1 377 1 0 254 12096 0
KNOTE 160 0 75 8 0 62 12000 0
malloc-16 16 43 707 1360 0 254 12000 0
malloc-16 16 9 741 14 0 254 12000 0
malloc-16 16 16 734 65 0 254 12000 0
malloc-16 16 51 699 29858 0 254 12000 0
malloc-384 384 0 30 1 0 30 11520 0
malloc-8192 8192 1 0 1 0 1 8192 0
malloc-4096 4096 0 2 2 0 2 8192 0
malloc-4096 4096 0 2 1 0 2 8192 0
pcpu-16 16 14 498 14 0 254 8192 0
malloc-16 16 0 500 2 0 254 8000 0
UMA Slabs 1 176 8 14 8 0 62 3872 0
KMAP ENTRY 96 12 27 14 0 0 3744 0
FFS1 dinode 128 0 0 0 0 126 0 0
ada_ccb 272 0 0 0 0 30 0 0
swblk 136 0 0 0 0 62 0 0
swpctrie 144 0 0 0 0 62 0 0
cdg_qdiffsample 16 0 0 0 0 254 0 0
pf state scrubs 40 0 0 0 0 254 0 0
pf frag entries 40 0 0 0 0 254 0 0
pf frags 248 0 0 0 0 62 0 0
pf table entries 160 0 0 0 0 254 0 0
pf table entry counters 64 0 0 0 0 254 0 0
pf source nodes 136 0 0 0 0 254 0 0
pf state keys 88 0 0 0 0 126 0 0
pf states 312 0 0 0 0 254 0 0
pf tags 104 0 0 0 0 126 0 0
pf mtags 56 0 0 0 0 254 0 0
tcp_rack_pcb 896 0 0 0 0 16 0 0
tcp_rack_map 120 0 0 0 0 126 0 0
tcp_bbr_pcb 832 0 0 0 0 16 0 0
tcp_bbr_map 128 0 0 0 0 126 0 0
ipq 56 0 0 0 0 254 0 0
tfo_ccache_entries 80 0 0 0 0 126 0 0
tfo 4 0 0 0 0 254 0 0
sackhole 32 0 0 0 0 254 0 0
tcptw 72 0 0 0 0 254 0 0
sctp_asconf_ack 48 0 0 0 0 254 0 0
sctp_asconf 40 0 0 0 0 254 0 0
sctp_stream_msg_out 112 0 0 0 0 254 0 0
sctp_readq 152 0 0 0 0 254 0 0
sctp_chunk 152 0 0 0 0 254 0 0
tcp_log_node 120 0 0 0 0 126 0 0
tcp_log_bucket 176 0 0 0 0 62 0 0
tcp_log 416 0 0 0 0 254 0 0
tcpreass 48 0 0 0 0 254 0 0
ripcb ports 32 0 0 0 0 254 0 0
udplite_inpcb ports 32 0 0 0 0 254 0 0
udplite_inpcb 424 0 0 0 0 30 0 0
IPsec SA lft_c 16 0 0 0 0 254 0 0
itimer 352 0 0 0 0 30 0 0
AIOLIO 272 0 0 0 0 30 0 0
AIOCB 552 0 0 0 0 16 0 0
AIOP 32 0 0 0 0 254 0 0
AIO 208 0 0 0 0 62 0 0
TMPFS node 224 0 0 0 0 62 0 0
mqnotifier 216 0 0 0 0 62 0 0
mvdata 64 0 0 0 0 254 0 0
mqueue 248 0 0 0 0 62 0 0
NCLNODE 608 0 0 0 0 16 0 0
LTS VFS Cache 360 0 0 0 0 30 0 0
L VFS Cache 320 0 0 0 0 30 0 0
STS VFS Cache 144 0 0 0 0 62 0 0
cryptop 280 0 0 0 0 30 0 0
linux_dma_object 32 0 0 0 0 254 0 0
linux_dma_pctrie 144 0 0 0 0 62 0 0
IOMMU_MAP_ENTRY 120 0 0 0 0 126 0 0
mbuf_jumbo_16k 16384 0 0 0 0 254 0 0
mbuf_jumbo_9k 9216 0 0 0 0 254 0 0
audit_record 1280 0 0 0 0 8 0 0
domainset 40 0 0 0 0 254 0 0
MAC labels 40 0 0 0 0 254 0 0
vnpbuf 2624 0 0 0 0 64 0 0
mdpbuf 2624 0 0 0 0 3 0 0
nfspbuf 2624 0 0 0 0 16 0 0
swwbuf 2624 0 0 0 0 8 0 0
swrbuf 2624 0 0 0 0 16 0 0
umtx_shm 88 0 0 0 0 126 0 0
umtx pi 96 0 0 0 0 126 0 0
rangeset pctrie nodes 144 0 0 0 0 62 0 0
malloc-65536 65536 0 0 0 0 1 0 0
malloc-65536 65536 0 0 0 0 1 0 0
malloc-65536 65536 0 0 0 0 1 0 0
malloc-32768 32768 0 0 0 0 1 0 0
malloc-32768 32768 0 0 0 0 1 0 0
malloc-32768 32768 0 0 0 0 1 0 0
malloc-32768 32768 0 0 0 0 1 0 0
malloc-32768 32768 0 0 0 0 1 0 0
malloc-16384 16384 0 0 0 0 1 0 0
malloc-16384 16384 0 0 0 0 1 0 0
malloc-16384 16384 0 0 0 0 1 0 0
malloc-16384 16384 0 0 0 0 1 0 0
malloc-8192 8192 0 0 0 0 1 0 0
malloc-4096 4096 0 0 0 0 2 0 0
malloc-512 512 0 0 0 0 30 0 0
malloc-384 384 0 0 0 0 30 0 0
pcpu-32 32 0 0 0 0 254 0 0
pcpu-4 4 0 0 0 0 254 0 0
fakepg 104 0 0 0 0 126 0 0
UMA Hash 256 0 0 0 0 62 0 0
db>
HEAD commit: eb45bc682915 ssh-agent: move -x description to correct spo..
git tree: freebsd-src
console output: https://syzkaller.appspot.com/x/log.txt?x=14387e7cf00000
dashboard link: https://syzkaller.appspot.com/bug?extid=66ede232c3d1271c6226
syz repro: https://syzkaller.appspot.com/x/repro.syz?x=1428e804f00000
C reproducer: https://syzkaller.appspot.com/x/repro.c?x=1682c3f0f00000
IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+66ede2...@syzkaller.appspotmail.com
cpuid = 0
time = 1650284354
KDB: stack backtrace:
db_trace_self_wrapper() at db_trace_self_wrapper+0xc7/frame 0xfffffe0054129c70
kdb_backtrace() at kdb_backtrace+0xd3/frame 0xfffffe0054129dd0
vpanic() at vpanic+0x2b8/frame 0xfffffe0054129eb0
panic() at panic+0xb5/frame 0xfffffe0054129f80
kasan_report() at kasan_report+0xdc/frame 0xfffffe005412a050
ip6_output() at ip6_output+0x5a8/frame 0xfffffe005412a5f0
sctp_lowlevel_chunk_output() at sctp_lowlevel_chunk_output+0x2015/frame 0xfffffe005412a8a0
sctp_send_initiate() at sctp_send_initiate+0x14c3/frame 0xfffffe005412aa30
sctp6_connect() at sctp6_connect+0x971/frame 0xfffffe005412abb0
soconnectat() at soconnectat+0x1d6/frame 0xfffffe005412ac10
kern_connectat() at kern_connectat+0x28a/frame 0xfffffe005412acf0
sys_connect() at sys_connect+0xfb/frame 0xfffffe005412ad30
amd64_syscall() at amd64_syscall+0x40c/frame 0xfffffe005412af30
fast_syscall_common() at fast_syscall_common+0xf8/frame 0xfffffe005412af30
--- syscall (0, FreeBSD ELF64, nosys), rip = 0x2b43ca, rsp = 0x82803af78, rbp = 0x82803afb0 ---
KDB: enter: panic
[ thread pid 2463 tid 103479 ]
Stopped at kdb_enter+0x6b: movq $0,0x27059ea(%rip)
db>
db> set $lines = 0
db> set $maxwidth = 0
db> show registers
cs 0x20
ds 0x3b
es 0x3b
fs 0x13
gs 0x1b
ss 0x28
db>
db> set $lines = 0
db> set $maxwidth = 0
db> show registers
cs 0x20
ds 0x3b
es 0x3b
fs 0x13
gs 0x1b
rax 0x12
rcx 0xfaea1a92ba9d605
rdx 0xdffff7c000000000
rbx 0
rsp 0xfffffe0054129db0
rbp 0xfffffe0054129dd0
rsi 0x1
rdi 0
r8 0x3
r9 0xffffffff
r10 0
r11 0x7335d837
r12 0xfffffe0092e8e000
r13 0xfffffe0054129e01
r14 0xffffffff82bc6400 .str.26
r15 0xffffffff82bc6400 .str.26
rip 0xffffffff817749ab kdb_enter+0x6b
rflags 0x46
kdb_enter+0x6b: movq $0,0x27059ea(%rip)
db> show proc
Process 2463 (syz-executor4313656) at 0xfffffe008fe09000:
r15 0xffffffff82bc6400 .str.26
rip 0xffffffff817749ab kdb_enter+0x6b
rflags 0x46
kdb_enter+0x6b: movq $0,0x27059ea(%rip)
db> show proc
state: NORMAL
uid: 0 gids: 0, 0, 5
parent: pid 780 at 0xfffffe0053dda548
ABI: FreeBSD ELF64
flag: 0x10000080 flag2: 0
arguments: ./syz-executor431365642
reaper: 0xfffffe0053ddc000 reapsubtree: 1
sigparent: 20
vmspace: 0xfffffe0092449000
(map 0xfffffe0092449000)
(map.pmap 0xfffffe00924490c0)
(pmap 0xfffffe0092449128)
threads: 3
100102 RunQ syz-executor4313656
103478 Run CPU 1 syz-executor4313656
103479 Run CPU 0 syz-executor4313656
db> ps
pid ppid pgrp uid state wmesg wchan cmd
2463 780 778 0 R (threaded) syz-executor4313656
pid ppid pgrp uid state wmesg wchan cmd
100102 RunQ syz-executor4313656
103478 Run CPU 1 syz-executor4313656
103479 Run CPU 0 syz-executor4313656
780 778 778 0 S nanslp 0xffffffff83e47a01 syz-executor4313656
778 776 778 0 Ss pause 0xfffffe008fe09b40 csh
776 688 776 0 Ss select 0xfffffe0007852dc0 sshd
754 1 754 0 Ss+ ttyin 0xfffffe0056feb4b0 getty
753 1 753 0 Ss+ ttyin 0xfffffe0056fe70b0 getty
752 1 752 0 Ss+ ttyin 0xfffffe00081f14b0 getty
751 1 751 0 Ss+ ttyin 0xfffffe00081f18b0 getty
750 1 750 0 Ss+ ttyin 0xfffffe0056fe74b0 getty
749 1 749 0 Ss+ ttyin 0xfffffe0056fe78b0 getty
748 1 748 0 Ss+ ttyin 0xfffffe0056fe7cb0 getty
747 1 747 0 Ss+ ttyin 0xfffffe0056fe90b0 getty
746 1 746 0 Ss+ ttyin 0xfffffe0056fe94b0 getty
692 1 692 0 Ss nanslp 0xffffffff83e47a00 cron
688 1 688 0 Ss select 0xfffffe0053dd1340 sshd
501 1 501 0 Ss select 0xfffffe0053dd07c0 syslogd
430 1 430 0 Ss select 0xfffffe0053dd0940 devd
429 1 429 65 Ss select 0xfffffe0053dd0840 dhclient
344 1 344 0 Ss select 0xfffffe0053dd1240 dhclient
341 1 341 0 Ss select 0xfffffe0053dd09c0 dhclient
17 0 0 0 DL syncer 0xffffffff83f6d260 [syncer]
16 0 0 0 DL vlruwt 0xfffffe00587b6a90 [vnlru]
15 0 0 0 DL (threaded) [bufdaemon]
100080 D psleep 0xffffffff83f6b860 [bufdaemon]
100083 D - 0xffffffff83211f80 [bufspacedaemon-0]
100095 D sdflush 0xfffffe0053f674e8 [/ worker]
100080 D psleep 0xffffffff83f6b860 [bufdaemon]
100083 D - 0xffffffff83211f80 [bufspacedaemon-0]
9 0 0 0 DL psleep 0xffffffff83f9f380 [vmdaemon]
8 0 0 0 DL (threaded) [pagedaemon]
100078 D psleep 0xffffffff83f93238 [dom0]
100081 D launds 0xffffffff83f93244 [laundry: dom0]
100082 D umarcl 0xffffffff81eafad0 [uma]
7 0 0 0 DL - 0xffffffff83c03788 [rand_harvestq]
6 0 0 0 DL pftm 0xffffffff8486d530 [pf purge]
8 0 0 0 DL (threaded) [pagedaemon]
100078 D psleep 0xffffffff83f93238 [dom0]
100081 D launds 0xffffffff83f93244 [laundry: dom0]
100082 D umarcl 0xffffffff81eafad0 [uma]
7 0 0 0 DL - 0xffffffff83c03788 [rand_harvestq]
5 0 0 0 DL waiting 0xffffffff846a14a0 [sctp_iterator]
4 0 0 0 DL (threaded) [cam]
100045 D - 0xffffffff83aa56c0 [doneq0]
100046 D - 0xffffffff83aa5640 [async]
100077 D - 0xffffffff83aa54c0 [scanner]
14 0 0 0 DL seqstat 0xfffffe0056f1ac88 [sequencer 00]
100045 D - 0xffffffff83aa56c0 [doneq0]
100046 D - 0xffffffff83aa5640 [async]
100077 D - 0xffffffff83aa54c0 [scanner]
3 0 0 0 DL (threaded) [crypto]
100041 D crypto_ 0xffffffff83f8ea40 [crypto]
100042 D crypto_ 0xfffffe0053effd30 [crypto returns 0]
100041 D crypto_ 0xffffffff83f8ea40 [crypto]
100043 D crypto_ 0xfffffe0053effd80 [crypto returns 1]
100039 D - 0xfffffe0053f31100 [crypto_0]
100040 D - 0xfffffe0053f31100 [crypto_1]
100056 D - 0xfffffe0053f2e000 [vtnet0 rxq 0]
100057 D - 0xfffffe0007974e00 [vtnet0 txq 0]
100058 D - 0xfffffe0007974d00 [vtnet0 rxq 1]
100059 D - 0xfffffe0007974c00 [vtnet0 txq 1]
100063 D vtbslp 0xfffffe0057011800 [virtio_balloon]
100067 D - 0xffffffff82bcc280 [deadlkres]
100071 D - 0xfffffe0007973200 [mca taskq]
100072 D - 0xfffffe00574c3200 [acpi_task_0]
100071 D - 0xfffffe0007973200 [mca taskq]
100073 D - 0xfffffe00574c3200 [acpi_task_1]
100074 D - 0xfffffe00574c3200 [acpi_task_2]
100076 D - 0xfffffe0053f30e00 [CAM taskq]
db> show all locks
Process 2463 (syz-executor4313656) thread 0xfffffe0092e8e000 (103479)
exclusive sleep mutex sctp-tcb (tcb) r = 0 (0xfffffe0092f55320) locked @ /syzkaller/managers/main/kernel/sys/netinet/sctp_pcb.c:4340
db> show malloc
Type InUse MemUse Requests
pf_hash 5 11524K 5
tcp_hpts 7 4801K 7
devbuf 4217 4323K 4245
sysctloid 35322 2081K 35393
vtbuf 24 1968K 46
kobj 328 1312K 489
newblk 664 1190K 719
Type InUse MemUse Requests
pf_hash 5 11524K 5
tcp_hpts 7 4801K 7
devbuf 4217 4323K 4245
sysctloid 35322 2081K 35393
vtbuf 24 1968K 46
kobj 328 1312K 489
vfscache 3 1025K 3
pcb 21 539K 3404
inodedep 9 515K 71
ufs_quota 1 512K 1
vfs_hash 1 512K 1
callout 2 512K 2
intr 4 472K 4
acpica 1674 184K 57552
vfs_hash 1 512K 1
callout 2 512K 2
intr 4 472K 4
subproc 96 174K 2522
vnet_data 1 168K 1
vmem 3 146K 5
tidhash 3 141K 3
linker 358 134K 386
pagedep 3 129K 18
linker 358 134K 386
tfo_ccache 1 128K 1
sem 4 106K 4
DEVFS1 105 105K 114
bus 994 81K 5207
mtx_pool 2 72K 2
syncache 1 68K 1
module 513 65K 513
acpitask 1 64K 1
ddb_capture 1 64K 1
umtx 286 36K 286
mtx_pool 2 72K 2
syncache 1 68K 1
module 513 65K 513
acpitask 1 64K 1
ddb_capture 1 64K 1
temp 17 33K 1615
kdtrace 158 33K 5944
hostcache 1 32K 1
shm 1 32K 1
sctp_timw 127 32K 127
DEVFS3 124 31K 134
msg 4 30K 4
gtaskqueue 18 26K 18
kbdmux 6 22K 6
gtaskqueue 18 26K 18
DEVFS_RULE 56 20K 56
BPF 10 18K 10
ufs_mount 4 17K 5
proc 3 17K 3
tty 16 16K 16
ithread 100 16K 100
bus-sc 34 15K 1681
proc 3 17K 3
tty 16 16K 16
ithread 100 16K 100
KTRACE 100 13K 100
kenv 95 12K 95
eventhandler 134 12K 134
ifaddr 30 12K 32
eventhandler 134 12K 134
rman 88 11K 431
GEOM 61 11K 490
routetbl 50 11K 176
GEOM 61 11K 490
CAM queue 5 11K 1528
bmsafemap 3 9K 40
cred 34 9K 234
UART 12 9K 12
devstat 4 9K 4
ksem 1 8K 1
devstat 4 9K 4
rpc 2 8K 2
shmfd 1 8K 1
pfs_vncache 1 8K 1
pfs_nodes 20 8K 20
audit_evclass 237 8K 296
taskqueue 63 7K 63
shmfd 1 8K 1
pfs_vncache 1 8K 1
pfs_nodes 20 8K 20
audit_evclass 237 8K 296
taskqueue 63 7K 63
sglist 5 7K 5
CAM DEV 3 6K 510
CAM DEV 3 6K 510
ufs_dirhash 24 5K 24
UMA 272 5K 272
plimit 17 5K 329
UMA 272 5K 272
vt 11 5K 11
ifnet 3 5K 3
memdesc 1 4K 1
MCA 32 4K 32
filedesc 1 4K 1
MCA 32 4K 32
evdev 4 4K 4
acpisem 28 4K 28
hhook 15 4K 17
ether_multi 40 4K 50
lltable 11 4K 11
pf_ifnet 5 3K 6
in6_multi 25 3K 25
terminal 11 3K 11
session 19 3K 31
kqueue 38 3K 2466
pwddesc 38 3K 2464
uidinfo 3 3K 8
local_apic 1 2K 1
io_apic 1 2K 1
fpukern_ctx 2 2K 2
ipsec-saq 2 2K 2
proc-args 57 2K 3410
io_apic 1 2K 1
fpukern_ctx 2 2K 2
ipsec-saq 2 2K 2
selfd 27 2K 32863
Unitno 27 2K 39
CAM XPT 22 2K 543
lockf 15 2K 22
msi 12 2K 12
ipsecpolicy 2 2K 2
acpidev 20 2K 20
clone 9 2K 9
sctp_stro 1 1K 1683
acpidev 20 2K 20
clone 9 2K 9
softdep 1 1K 1
sahead 1 1K 1
secasvar 1 1K 1
vnodemarker 2 1K 14
sahead 1 1K 1
secasvar 1 1K 1
NFSD session 1 1K 1
diradd 7 1K 36
CAM periph 4 1K 271
select 7 1K 29
ipsec 3 1K 3
sctp_atcl 2 1K 3366
indirdep 3 1K 3
nhops 6 1K 6
toponodes 6 1K 6
isadev 6 1K 6
mount 16 1K 89
pci_link 10 1K 10
sctp_ifa 5 1K 6
isadev 6 1K 6
mount 16 1K 89
pci_link 10 1K 10
crypto 4 1K 4
ip6ndp 4 1K 5
encap_export_host 12 1K 12
in_multi 2 1K 4
pfil 4 1K 4
cdev 2 1K 2
chacha20random 1 1K 1
osd 7 1K 18
cdev 2 1K 2
chacha20random 1 1K 1
inpcbpolicy 10 1K 139
ip6opt 2 1K 111051
sctp_ifn 2 1K 6
NFSD lckfile 1 1K 1
NFSD V4client 1 1K 1
DEVFSP 4 1K 9
NFSD V4client 1 1K 1
DEVFS 9 1K 10
freework 1 1K 26
mld 2 1K 2
igmp 2 1K 2
vnodes 1 1K 1
CAM SIM 2 1K 2
feeder 7 1K 7
tcpfunc 3 1K 3
CC Mem 3 1K 7
CAM SIM 2 1K 2
feeder 7 1K 7
tcpfunc 3 1K 3
loginclass 3 1K 7
prison 6 1K 6
lkpikmalloc 5 1K 6
aesni_data 2 1K 2
lkpikmalloc 5 1K 6
soname 5 1K 6837
cryptodev 2 1K 49
sctp_atky 3 1K 5049
nexusdev 8 1K 8
apmdev 1 1K 1
atkbddev 2 1K 2
CAM dev queue 2 1K 2
CAM I/O Scheduler 1 1K 1
CAM path 4 1K 1034
procdesc 1 1K 6
apmdev 1 1K 1
atkbddev 2 1K 2
CAM dev queue 2 1K 2
CAM I/O Scheduler 1 1K 1
CAM path 4 1K 1034
pmchooks 1 1K 1
tun 3 1K 3
sctp_vrf 1 1K 1
vnet 1 1K 1
entropy 2 1K 35
vnet 1 1K 1
pmc 1 1K 1
acpiintr 1 1K 1
sctp_athm 2 1K 3366
acpiintr 1 1K 1
sctp_map 2 1K 3366
cpus 2 1K 2
vnet_data_free 1 1K 1
Per-cpu 1 1K 1
p1003.1b 1 1K 1
filecaps 1 1K 66
vnet_data_free 1 1K 1
Per-cpu 1 1K 1
p1003.1b 1 1K 1
ipcomp 0 0K 0
esp 0 0K 0
ah 0 0K 0
tcp_do 0 0K 0
esp 0 0K 0
ah 0 0K 0
tcp_fsb 0 0K 0
mqdata 0 0K 0
filemon 0 0K 0
pf_table 0 0K 0
pf_rule 0 0K 0
pf_altq 0 0K 0
pf_osfp 0 0K 0
pf_rule 0 0K 0
pf_altq 0 0K 0
pf_temp 0 0K 0
sctp_mcore 0 0K 0
sctp_socko 0 0K 0
sctp_mcore 0 0K 0
sctp_iter 0 0K 4
sctp_mvrf 0 0K 0
sctp_cpal 0 0K 0
sctp_cmsg 0 0K 0
sctp_stre 0 0K 0
sctp_athi 0 0K 0
sctp_a_it 0 0K 4
sctp_stre 0 0K 0
sctp_athi 0 0K 0
sctp_aadr 0 0K 0
sctp_stri 0 0K 0
sentinel 0 0K 0
jfsync 0 0K 0
jtrunc 0 0K 0
sbdep 0 0K 4
jfsync 0 0K 0
jtrunc 0 0K 0
sbdep 0 0K 4
jsegdep 0 0K 0
jseg 0 0K 0
jfreefrag 0 0K 0
jfreeblk 0 0K 0
jnewblk 0 0K 0
jmvref 0 0K 0
jremref 0 0K 0
jaddref 0 0K 0
freedep 0 0K 0
newdirblk 0 0K 8
jseg 0 0K 0
jfreefrag 0 0K 0
jfreeblk 0 0K 0
jnewblk 0 0K 0
jmvref 0 0K 0
jremref 0 0K 0
jaddref 0 0K 0
freedep 0 0K 0
dirrem 0 0K 28
mkdir 0 0K 16
freefile 0 0K 26
freeblks 0 0K 25
freefrag 0 0K 1
allocindir 0 0K 0
ip6_msource 0 0K 0
ip6_moptions 0 0K 0
in6_mfilter 0 0K 0
frag6 0 0K 0
ip6_moptions 0 0K 0
in6_mfilter 0 0K 0
tcplog 0 0K 0
tcp_hwpace 0 0K 0
USBdev 0 0K 0
USB 0 0K 0
LRO 0 0K 0
ip_msource 0 0K 0
ip_moptions 0 0K 0
tcp_hwpace 0 0K 0
USBdev 0 0K 0
USB 0 0K 0
LRO 0 0K 0
ip_msource 0 0K 0
in_mfilter 0 0K 0
ipid 0 0K 0
80211scan 0 0K 0
80211ratectl 0 0K 0
80211power 0 0K 0
80211nodeie 0 0K 0
80211node 0 0K 0
80211mesh_gt 0 0K 0
80211mesh_rt 0 0K 0
80211perr 0 0K 0
80211prep 0 0K 0
80211preq 0 0K 0
80211dfs 0 0K 0
80211crypto 0 0K 0
80211vap 0 0K 0
iflib 0 0K 0
vlan 0 0K 0
gif 0 0K 0
ifdescr 0 0K 0
zlib 0 0K 0
fadvise 0 0K 0
VN POLL 0 0K 0
agp 0 0K 0
statfs 0 0K 198
ipid 0 0K 0
80211scan 0 0K 0
80211ratectl 0 0K 0
80211power 0 0K 0
80211nodeie 0 0K 0
80211node 0 0K 0
80211mesh_gt 0 0K 0
80211mesh_rt 0 0K 0
80211perr 0 0K 0
80211prep 0 0K 0
80211preq 0 0K 0
80211dfs 0 0K 0
80211crypto 0 0K 0
80211vap 0 0K 0
iflib 0 0K 0
vlan 0 0K 0
gif 0 0K 0
ifdescr 0 0K 0
zlib 0 0K 0
fadvise 0 0K 0
VN POLL 0 0K 0
agp 0 0K 0
namei_tracker 0 0K 0
export_host 0 0K 0
cl_savebuf 0 0K 3
nvme_da 0 0K 0
acpipwr 0 0K 0
acpi_perf 0 0K 0
twsbuf 0 0K 0
twe_commands 0 0K 0
tcp_log_dev 0 0K 0
acpipwr 0 0K 0
acpi_perf 0 0K 0
twsbuf 0 0K 0
twe_commands 0 0K 0
midi buffers 0 0K 0
mixer 0 0K 0
ac97 0 0K 0
hdacc 0 0K 0
hdac 0 0K 0
hdaa 0 0K 0
acpicmbat 0 0K 0
SIIS driver 0 0K 0
CAM CCB 0 0K 523
biobuf 0 0K 0
aios 0 0K 0
lio 0 0K 0
acl 0 0K 0
mbuf_tag 0 0K 27
mixer 0 0K 0
ac97 0 0K 0
hdacc 0 0K 0
hdac 0 0K 0
hdaa 0 0K 0
acpicmbat 0 0K 0
SIIS driver 0 0K 0
CAM CCB 0 0K 523
biobuf 0 0K 0
aios 0 0K 0
lio 0 0K 0
acl 0 0K 0
ioctlops 0 0K 86
eventfd 0 0K 0
Witness 0 0K 0
stack 0 0K 0
mrsasbuf 0 0K 0
mpt_user 0 0K 0
mps_user 0 0K 0
MPSSAS 0 0K 0
mps 0 0K 0
sbuf 0 0K 288
mpr_user 0 0K 0
firmware 0 0K 0
compressor 0 0K 0
MPRSAS 0 0K 0
SWAP 0 0K 0
mpr 0 0K 0
mfibuf 0 0K 0
sysctltmp 0 0K 658
stack 0 0K 0
mrsasbuf 0 0K 0
mpt_user 0 0K 0
mps_user 0 0K 0
MPSSAS 0 0K 0
mps 0 0K 0
sbuf 0 0K 288
mpr_user 0 0K 0
firmware 0 0K 0
compressor 0 0K 0
MPRSAS 0 0K 0
SWAP 0 0K 0
mpr 0 0K 0
mfibuf 0 0K 0
sysctl 0 0K 3
md_sectors 0 0K 0
ekcd 0 0K 0
dumper 0 0K 0
sendfile 0 0K 0
rctl 0 0K 0
md_disk 0 0K 0
malodev 0 0K 0
LED 0 0K 0
ix_sriov 0 0K 0
cache 0 0K 0
aacraidcam 0 0K 0
kcovinfo 0 0K 0
md_sectors 0 0K 0
ekcd 0 0K 0
dumper 0 0K 0
sendfile 0 0K 0
rctl 0 0K 0
md_disk 0 0K 0
malodev 0 0K 0
LED 0 0K 0
ix_sriov 0 0K 0
cache 0 0K 0
aacraidcam 0 0K 0
prison_racct 0 0K 0
Fail Points 0 0K 0
sigio 0 0K 1
filedesc_to_leader 0 0K 0
Fail Points 0 0K 0
sigio 0 0K 1
mbuf 256 8579 1083 26656 0 254 2473472 0
pbuf 2624 0 778 0 0 2 2041472 0
BUF TRIE 144 179 11609 553 0 62 1697472 0
malloc-384 384 4165 5 4165 0 30 1601280 0
malloc-4096 4096 367 5 3039 0 2 1523712 0
malloc-128 128 11636 237 11642 0 126 1519744 0
UMA Slabs 0 112 10576 2 10576 0 126 1184736 0
sctp_asoc 2256 1 509 1683 0 254 1150560 0
mbuf_cluster 2048 508 0 508 0 254 1040384 0
vmem btag 56 16534 65 16534 0 254 929544 0
sctp_ep 1208 1 509 1683 0 254 616080 0
FFS inode 1160 483 42 509 0 8 609000 0
tcpcb 1104 3 508 7 0 254 564144 0
RADIX NODE 144 3272 223 43608 0 62 503280 0
socket 960 19 489 3018 0 254 487680 0
VM OBJECT 264 1320 180 56443 0 30 396000 0
lkpicurr 168 2 2350 2 0 62 395136 0
lkpimm 168 1 2327 1 0 62 391104 0
sctp_raddr 736 1 516 1683 0 254 380512 0
malloc-65536 65536 5 0 5 0 1 327680 0
256 Bucket 2048 147 7 1046 0 8 315392 0
malloc-64 64 3866 229 3868 0 254 262080 0
THREAD 1808 119 24 3479 0 8 258544 0
VNODE 448 513 63 541 0 30 258048 0
malloc-16 16 14609 141 14669 0 254 236000 0
DEVCTL 1024 0 220 126 0 0 225280 0
malloc-256 256 704 106 852 0 62 207360 0
malloc-65536 65536 3 0 3 0 1 196608 0
malloc-128 128 1319 200 27484 0 126 194432 0
MAP ENTRY 96 1432 584 128186 0 126 193536 0
UMA Zones 768 244 0 244 0 16 187392 0
malloc-32 32 5322 348 5331 0 254 181440 0
FFS2 dinode 256 483 87 509 0 62 145920 0
FPU_save_area 832 121 41 3495 0 16 134784 0
S VFS Cache 104 970 317 1010 0 126 133848 0
malloc-65536 65536 0 2 46 0 1 131072 0
malloc-1024 1024 116 12 282 0 16 131072 0
unpcb 256 7 503 1179 0 254 130560 0
mbuf_packet 256 1 507 1760 0 254 130048 0
ksiginfo 112 39 1005 56 0 126 116928 0
malloc-256 256 295 140 5966 0 62 111360 0
malloc-128 128 608 167 3914 0 126 99200 0
malloc-128 128 604 171 1167 0 126 99200 0
malloc-2048 2048 10 38 2965 0 8 98304 0
UMA Kegs 384 230 3 230 0 30 89472 0
128 Bucket 1024 45 38 668 0 16 84992 0
VMSPACE 2552 21 12 2448 0 4 84216 0
clpbuf 2624 0 32 24 0 16 83968 0
malloc-256 256 231 84 903 0 62 80640 0
PROC 1352 37 20 2463 0 8 77064 0
malloc-8192 8192 9 0 9 0 1 73728 0
malloc-8192 8192 7 2 110 0 1 73728 0
64 Bucket 512 67 69 2714 0 30 69632 0
malloc-8192 8192 7 2 110 0 1 73728 0
malloc-64 64 768 303 36794 0 254 68544 0
malloc-64 64 566 505 5784 0 254 68544 0
malloc-65536 65536 0 1 144 0 1 65536 0
malloc-65536 65536 1 0 1 0 1 65536 0
malloc-32768 32768 0 2 120 0 1 65536 0
malloc-32768 32768 2 0 2 0 1 65536 0
malloc-16384 16384 4 0 4 0 1 65536 0
malloc-4096 4096 15 1 26 0 2 65536 0
malloc-1024 1024 21 43 546 0 16 65536 0
malloc-32768 32768 0 2 120 0 1 65536 0
malloc-32768 32768 2 0 2 0 1 65536 0
malloc-16384 16384 4 0 4 0 1 65536 0
malloc-4096 4096 15 1 26 0 2 65536 0
g_bio 408 0 150 4784 0 30 61200 0
filedesc0 1072 38 18 2464 0 8 60032 0
malloc-384 384 62 88 3766 0 30 57600 0
malloc-256 256 25 170 1723 0 62 49920 0
32 Bucket 256 70 125 9416 0 62 49920 0
DIRHASH 1024 34 14 34 0 16 49152 0
NAMEI 1024 0 48 13956 0 16 49152 0
malloc-16384 16384 1 2 161 0 1 49152 0
malloc-4096 4096 10 2 553 0 2 49152 0
malloc-1024 1024 19 29 893 0 16 49152 0
malloc-1024 1024 3 45 1689 0 16 49152 0
syncache 168 0 264 5 0 254 44352 0
Mountpoints 2752 2 12 2 0 4 38528 0
udp_inpcb 424 6 84 128 0 30 38160 0
pcpu-8 8 4221 387 4249 0 254 36864 0
malloc-64 64 31 536 13614 0 254 36288 0
malloc-64 64 26 541 42 0 254 36288 0
malloc-64 64 116 451 141 0 254 36288 0
malloc-64 64 10 557 42 0 254 36288 0
malloc-64 64 46 521 2472 0 254 36288 0
malloc-32 32 378 756 7841 0 254 36288 0
malloc-128 128 28 251 157 0 126 35712 0
malloc-128 128 1 278 28 0 126 35712 0
malloc-128 128 95 184 493 0 126 35712 0
malloc-128 128 20 259 25 0 126 35712 0
routing nhops 256 10 125 17 0 62 34560 0
ttyoutq 256 72 63 160 0 62 34560 0
malloc-384 384 8 82 89 0 30 34560 0
malloc-256 256 23 112 445 0 62 34560 0
malloc-256 256 2 133 52 0 62 34560 0
malloc-256 256 6 129 288 0 62 34560 0
malloc-256 256 69 66 483 0 62 34560 0
TURNSTILE 136 144 108 144 0 62 34272 0
malloc-32768 32768 1 0 1 0 1 32768 0
malloc-16384 16384 2 0 17 0 1 32768 0
malloc-8192 8192 4 0 4 0 1 32768 0
malloc-2048 2048 3 13 3 0 8 32768 0
malloc-2048 2048 11 5 12 0 8 32768 0
malloc-2048 2048 1 15 25 0 8 32768 0
malloc-2048 2048 2 14 11 0 8 32768 0
malloc-1024 1024 2 30 45 0 16 32768 0
malloc-1024 1024 4 28 5 0 16 32768 0
malloc-1024 1024 3 29 7 0 16 32768 0
malloc-512 512 0 64 118 0 30 32768 0
malloc-512 512 2 62 2 0 30 32768 0
malloc-512 512 3 61 15 0 30 32768 0
malloc-512 512 0 64 9 0 30 32768 0
malloc-512 512 10 54 60 0 30 32768 0
malloc-512 512 3 61 3 0 30 32768 0
pcpu-64 64 493 19 493 0 254 32768 0
ttyinq 160 135 65 300 0 62 32000 0
cpuset 104 7 272 7 0 126 29016 0
sctp_laddr 48 1 587 1687 0 254 28224 0
16 Bucket 144 56 140 556 0 62 28224 0
4 Bucket 48 7 581 352 0 254 28224 0
tcp_inpcb 424 3 60 7 0 30 26712 0
ripcb 424 1 62 4 0 30 26712 0
da_ccb 544 0 49 1321 0 16 26656 0
pipe 744 6 29 284 0 16 26040 0
malloc-8192 8192 2 1 3 0 1 24576 0
malloc-4096 4096 6 0 6 0 2 24576 0
rtentry 176 13 125 17 0 62 24288 0
PGRP 88 19 257 31 0 126 24288 0
ertt_txseginfo 40 1 605 1925 0 254 24240 0
rl_entry 40 32 574 32 0 254 24240 0
Files 80 68 232 9963 0 126 24000 0
8 Bucket 80 40 260 816 0 126 24000 0
malloc-384 384 11 49 11 0 30 23040 0
malloc-384 384 10 50 13 0 30 23040 0
malloc-384 384 54 6 64 0 30 23040 0
SLEEPQUEUE 88 144 112 144 0 126 22528 0
hostcache 64 1 314 1 0 254 20160 0
udpcb 32 6 624 128 0 254 20160 0
udp_inpcb ports 32 3 627 40 0 254 20160 0
ertt 72 3 277 7 0 126 20160 0
PWD 32 10 620 100 0 254 20160 0
malloc-32 32 33 597 1880 0 254 20160 0
malloc-32 32 4 626 60 0 254 20160 0
malloc-32 32 133 497 4761 0 254 20160 0
malloc-32 32 31 599 56 0 254 20160 0
malloc-32 32 29 601 31 0 254 20160 0
malloc-32 32 7 623 10 0 254 20160 0
2 Bucket 32 42 588 284 0 254 20160 0
epoch_record pcpu 256 4 60 4 0 62 16384 0
malloc-16384 16384 1 0 1 0 1 16384 0
malloc-8192 8192 0 2 28 0 1 16384 0
malloc-8192 8192 2 0 2 0 1 16384 0
malloc-4096 4096 1 3 200 0 2 16384 0
malloc-2048 2048 0 8 12 0 8 16384 0
malloc-2048 2048 2 6 2 0 8 16384 0
malloc-2048 2048 3 5 3 0 8 16384 0
malloc-1024 1024 1 15 1 0 16 16384 0
malloc-512 512 0 32 1 0 30 16384 0
SMR CPU 32 7 504 7 0 254 16352 0
vtnet_tx_hdr 24 0 668 3627 0 254 16032 0
malloc-16 16 511 489 3508 0 254 16000 0
malloc-16 16 9 991 112739 0 254 16000 0
kenv 258 15 45 1037 0 30 15480 0
mqnode 416 3 33 3 0 30 14976 0
vmem 1856 1 7 1 0 8 14848 0
SMR SHARED 24 7 504 7 0 254 12264 0
tcp_inpcb ports 32 1 377 1 0 254 12096 0
KNOTE 160 0 75 8 0 62 12000 0
malloc-16 16 43 707 1360 0 254 12000 0
malloc-16 16 9 741 14 0 254 12000 0
malloc-16 16 16 734 65 0 254 12000 0
malloc-16 16 51 699 29858 0 254 12000 0
malloc-384 384 0 30 1 0 30 11520 0
malloc-8192 8192 1 0 1 0 1 8192 0
malloc-4096 4096 0 2 2 0 2 8192 0
malloc-4096 4096 0 2 1 0 2 8192 0
pcpu-16 16 14 498 14 0 254 8192 0
malloc-16 16 0 500 2 0 254 8000 0
UMA Slabs 1 176 8 14 8 0 62 3872 0
KMAP ENTRY 96 12 27 14 0 0 3744 0
FFS1 dinode 128 0 0 0 0 126 0 0
ada_ccb 272 0 0 0 0 30 0 0
swblk 136 0 0 0 0 62 0 0
swpctrie 144 0 0 0 0 62 0 0
cdg_qdiffsample 16 0 0 0 0 254 0 0
pf state scrubs 40 0 0 0 0 254 0 0
pf frag entries 40 0 0 0 0 254 0 0
pf frags 248 0 0 0 0 62 0 0
pf table entries 160 0 0 0 0 254 0 0
pf table entry counters 64 0 0 0 0 254 0 0
pf source nodes 136 0 0 0 0 254 0 0
pf state keys 88 0 0 0 0 126 0 0
pf states 312 0 0 0 0 254 0 0
pf tags 104 0 0 0 0 126 0 0
pf mtags 56 0 0 0 0 254 0 0
tcp_rack_pcb 896 0 0 0 0 16 0 0
tcp_rack_map 120 0 0 0 0 126 0 0
tcp_bbr_pcb 832 0 0 0 0 16 0 0
tcp_bbr_map 128 0 0 0 0 126 0 0
ipq 56 0 0 0 0 254 0 0
tfo_ccache_entries 80 0 0 0 0 126 0 0
tfo 4 0 0 0 0 254 0 0
sackhole 32 0 0 0 0 254 0 0
tcptw 72 0 0 0 0 254 0 0
sctp_asconf_ack 48 0 0 0 0 254 0 0
sctp_asconf 40 0 0 0 0 254 0 0
sctp_stream_msg_out 112 0 0 0 0 254 0 0
sctp_readq 152 0 0 0 0 254 0 0
sctp_chunk 152 0 0 0 0 254 0 0
tcp_log_node 120 0 0 0 0 126 0 0
tcp_log_bucket 176 0 0 0 0 62 0 0
tcp_log 416 0 0 0 0 254 0 0
tcpreass 48 0 0 0 0 254 0 0
ripcb ports 32 0 0 0 0 254 0 0
udplite_inpcb ports 32 0 0 0 0 254 0 0
udplite_inpcb 424 0 0 0 0 30 0 0
IPsec SA lft_c 16 0 0 0 0 254 0 0
itimer 352 0 0 0 0 30 0 0
AIOLIO 272 0 0 0 0 30 0 0
AIOCB 552 0 0 0 0 16 0 0
AIOP 32 0 0 0 0 254 0 0
AIO 208 0 0 0 0 62 0 0
TMPFS node 224 0 0 0 0 62 0 0
mqnotifier 216 0 0 0 0 62 0 0
mvdata 64 0 0 0 0 254 0 0
mqueue 248 0 0 0 0 62 0 0
NCLNODE 608 0 0 0 0 16 0 0
LTS VFS Cache 360 0 0 0 0 30 0 0
L VFS Cache 320 0 0 0 0 30 0 0
STS VFS Cache 144 0 0 0 0 62 0 0
cryptop 280 0 0 0 0 30 0 0
linux_dma_object 32 0 0 0 0 254 0 0
linux_dma_pctrie 144 0 0 0 0 62 0 0
IOMMU_MAP_ENTRY 120 0 0 0 0 126 0 0
mbuf_jumbo_16k 16384 0 0 0 0 254 0 0
mbuf_jumbo_9k 9216 0 0 0 0 254 0 0
audit_record 1280 0 0 0 0 8 0 0
domainset 40 0 0 0 0 254 0 0
MAC labels 40 0 0 0 0 254 0 0
vnpbuf 2624 0 0 0 0 64 0 0
mdpbuf 2624 0 0 0 0 3 0 0
nfspbuf 2624 0 0 0 0 16 0 0
swwbuf 2624 0 0 0 0 8 0 0
swrbuf 2624 0 0 0 0 16 0 0
umtx_shm 88 0 0 0 0 126 0 0
umtx pi 96 0 0 0 0 126 0 0
rangeset pctrie nodes 144 0 0 0 0 62 0 0
malloc-65536 65536 0 0 0 0 1 0 0
malloc-65536 65536 0 0 0 0 1 0 0
malloc-65536 65536 0 0 0 0 1 0 0
malloc-32768 32768 0 0 0 0 1 0 0
malloc-32768 32768 0 0 0 0 1 0 0
malloc-32768 32768 0 0 0 0 1 0 0
malloc-32768 32768 0 0 0 0 1 0 0
malloc-32768 32768 0 0 0 0 1 0 0
malloc-16384 16384 0 0 0 0 1 0 0
malloc-16384 16384 0 0 0 0 1 0 0
malloc-16384 16384 0 0 0 0 1 0 0
malloc-16384 16384 0 0 0 0 1 0 0
malloc-8192 8192 0 0 0 0 1 0 0
malloc-4096 4096 0 0 0 0 2 0 0
malloc-512 512 0 0 0 0 30 0 0
malloc-384 384 0 0 0 0 30 0 0
pcpu-32 32 0 0 0 0 254 0 0
pcpu-4 4 0 0 0 0 254 0 0
fakepg 104 0 0 0 0 126 0 0
UMA Hash 256 0 0 0 0 62 0 0
db>
Reply all
Reply to author
Forward
0 new messages