panic: Assertion v != tid failed at /syzkaller/managers/main/kernel/sys/kern/kern_mutex.c:LINE

5 views

Skip to first unread message

syzbot

unread,

Sep 10, 2020, 3:54:18 PM9/10/20

to syzkaller-f...@googlegroups.com

Hello,

syzbot found the following issue on:

HEAD commit: 6639b962 ice_ddp: Fix 1.3.16.0 package
git tree: freebsd
console output: https://syzkaller.appspot.com/x/log.txt?x=141effcd900000
dashboard link: https://syzkaller.appspot.com/bug?extid=b6ce0aec16f5fdab3282

Unfortunately, I don't have any reproducer for this issue yet.

IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+b6ce0a...@syzkaller.appspotmail.com

panic: Assertion v != tid failed at /syzkaller/managers/main/kernel/sys/kern/kern_mutex.c:914
cpuid = 0
time = 1599767619
KDB: stack backtrace:
db_trace_self_wrapper() at db_trace_self_wrapper+0x47/frame 0xfffffe000364b5c0
vpanic() at vpanic+0x1c7/frame 0xfffffe000364b620
panic() at panic+0x43/frame 0xfffffe000364b680
thread_lock_flags_() at thread_lock_flags_+0x3a5/frame 0xfffffe000364b700
propagate_priority() at propagate_priority+0x9a/frame 0xfffffe000364b750
turnstile_wait() at turnstile_wait+0x408/frame 0xfffffe000364b7b0
__rw_wlock_hard() at __rw_wlock_hard+0x8d0/frame 0xfffffe000364b860
_rw_wlock_cookie() at _rw_wlock_cookie+0x118/frame 0xfffffe000364b8b0
sctp_free_assoc() at sctp_free_assoc+0x75c/frame 0xfffffe000364b940
sctp_load_addresses_from_init() at sctp_load_addresses_from_init+0x1170/frame 0xfffffe000364c2c0
sctp_process_control() at sctp_process_control+0x926d/frame 0xfffffe000364c750
sctp_common_input_processing() at sctp_common_input_processing+0x7db/frame 0xfffffe000364c8e0
sctp_input_with_port() at sctp_input_with_port+0x308/frame 0xfffffe000364c9d0
sctp_input() at sctp_input+0x1f/frame 0xfffffe000364c9f0
ip_input() at ip_input+0x388/frame 0xfffffe000364ca90
swi_net() at swi_net+0x20d/frame 0xfffffe000364cb10
ithread_loop() at ithread_loop+0x33f/frame 0xfffffe000364cbb0
fork_exit() at fork_exit+0xb3/frame 0xfffffe000364cbf0
fork_trampoline() at fork_trampoline+0xe/frame 0xfffffe000364cbf0
--- trap 0, rip = 0, rsp = 0, rbp = 0 ---
KDB: enter: panic
[ thread pid 12 tid 100020 ]
Stopped at kdb_enter+0x67: movq $0,0x1487b66(%rip)
db>
db> set $lines = 0
db> set $maxwidth = 0
db> show registers
cs 0x20
ds 0x3b ll+0x1a
es 0x3b ll+0x1a
fs 0x13
gs 0x1b
ss 0
rax 0x12
rcx 0xffffffff810da6e0 vprintf+0x140
rdx 0x1
rbx 0
rsp 0xfffffe000364b5a0
rbp 0xfffffe000364b5c0
rsi 0
rdi 0xffffffff810da716 vprintf+0x176
r8 0
r9 0xffffffff
r10 0
r11 0x2f4e ll+0x2f2d
r12 0xffffffff82068ef0 ddb_dbbe
r13 0
r14 0xffffffff819339e4
r15 0xffffffff819339e4
rip 0xffffffff810cf317 kdb_enter+0x67
rflags 0x86 ll+0x65
kdb_enter+0x67: movq $0,0x1487b66(%rip)
db> show proc
Process 12 (intr) at 0xfffff80004304520:
state: NORMAL
uid: 0 gids: 0
parent: pid 0 at 0xffffffff82509af0
ABI: null
reaper: 0xffffffff82509af0 reapsubtree: 12
sigparent: 20
vmspace: 0xffffffff8250a740
(map 0xffffffff8250a740)
(map.pmap 0xffffffff8250a800)
(pmap 0xffffffff8250a860)
threads: 23
100011 I [swi5: fast taskq]
100015 I [swi6: task queue]
100016 I [swi6: Giant taskq]
100020 L *sctp-in 0xfffff8000493cf00 [swi1: netisr 0]
100021 I [swi3: vm]
100022 I [swi4: clock (0)]
100023 I [swi4: clock (1)]
100035 I [irq24: virtio_pci0]
100036 I [irq25: virtio_pci0]
100037 I [irq26: virtio_pci0]
100038 I [irq27: virtio_pci0]
100039 I [irq28: virtio_pci1]
100040 I [irq29: virtio_pci1]
100041 I [irq30: virtio_pci1]
100042 I [irq31: virtio_pci1]
100043 I [irq32: virtio_pci1]
100048 I [irq10: virtio_pci2]
100050 I [irq1: atkbd0]
100051 I [irq12: psm0]
100052 I [swi0: uart uart++]
100060 I [swi1: pf send]
100073 I [swi1: hpts]
100074 I [swi1: hpts]
db> ps
pid ppid pgrp uid state wmesg wchan cmd
4425 766 766 0 LE *sctp-tc 0xfffff8000493ce40 syz-executor.3
4423 778 778 0 R (threaded) syz-executor.2
101186 Run CPU 1 syz-executor.2
100639 S sbwait 0xfffff80004f31594 syz-executor.2
100632 L *sctp-in 0xfffff8000493cf00 syz-executor.2
100643 L *sctp-in 0xfffff8000493cf00 syz-executor.2
100645 S sbwait 0xfffff80004f37594 syz-executor.2
4422 770 770 0 R (threaded) syz-executor.1
100913 RunQ syz-executor.1
100636 S sbwait 0xfffff80004f34594 syz-executor.1
100637 S sbwait 0xfffff80004f31954 syz-executor.1
3286 1 3286 65 Ss select 0xfffff80004664840 dhclient
2666 1 2666 0 Ss select 0xfffff80004683440 dhclient
2661 1 2661 0 Ss select 0xfffff80004bb5840 dhclient
2640 1 2640 65 Ss select 0xfffff80004bb5c40 dhclient
2093 1 2093 0 Ss select 0xfffff800049432c0 dhclient
2090 1 2090 0 Ss select 0xfffff800046834c0 dhclient
2068 1 2068 65 Ss select 0xfffff80004bb5940 dhclient
1458 1 1458 0 Ss select 0xfffff80004bb4840 dhclient
1455 1 1455 0 Ss select 0xfffff80004943240 dhclient
1436 1 1436 65 Ss select 0xfffff80004943540 dhclient
811 1 811 0 Ss select 0xfffff80004bb4b40 dhclient
805 1 805 0 Ss select 0xfffff80004bb42c0 dhclient
778 762 778 0 Ss nanslp 0xffffffff8252a5e1 syz-executor.2
770 762 770 0 Ss nanslp 0xffffffff8252a5e1 syz-executor.1
766 762 766 0 Rs syz-executor.3
765 762 765 0 Rs syz-executor.0
762 760 760 0 S (threaded) syz-fuzzer
100080 S uwait 0xfffff80004b9d080 syz-fuzzer
100102 S uwait 0xfffff80004e57700 syz-fuzzer
100103 S uwait 0xfffff80004e57800 syz-fuzzer
100104 S uwait 0xfffff80004e57900 syz-fuzzer
100105 S uwait 0xfffff80004b9a000 syz-fuzzer
100106 S uwait 0xfffff80004e55080 syz-fuzzer
100107 S kqread 0xfffff80004e12b00 syz-fuzzer
100109 S uwait 0xfffff80004e55280 syz-fuzzer
100110 S uwait 0xfffff80004e55380 syz-fuzzer
100111 S uwait 0xfffff80004e79800 syz-fuzzer
760 758 760 0 Ss pause 0xfffff80004e96ae8 csh
758 682 758 0 Ss select 0xfffff80004bb4ac0 sshd
742 1 742 0 Ss+ ttyin 0xfffff80004962cb0 getty
741 1 741 0 Ss+ ttyin 0xfffff80004cb30b0 getty
740 1 740 0 Ss+ ttyin 0xfffff80004cb34b0 getty
739 1 739 0 Ss+ ttyin 0xfffff80004cb38b0 getty
738 1 738 0 Ss+ ttyin 0xfffff80004cb3cb0 getty
737 1 737 0 Ss+ ttyin 0xfffff80004cb20b0 getty
736 1 736 0 Ss+ ttyin 0xfffff80004cb24b0 getty
735 1 735 0 Ss+ ttyin 0xfffff80004cb28b0 getty
734 1 734 0 Ss+ ttyin 0xfffff80004cb2cb0 getty
686 1 686 0 Ss nanslp 0xffffffff8252a5e0 cron
682 1 682 0 Ss select 0xfffff80004bb4c40 sshd
495 1 495 0 Ss select 0xfffff80004bb4cc0 syslogd
424 1 424 0 Ss select 0xfffff80004bb44c0 devd
423 1 423 65 Ss select 0xfffff80004943840 dhclient
338 1 338 0 Ss select 0xfffff80004bb45c0 dhclient
335 1 335 0 Ss select 0xfffff80004bb43c0 dhclient
23 0 0 0 DL syncer 0xffffffff826176e8 [syncer]
22 0 0 0 DL vlruwt 0xfffff800044c3a40 [vnlru]
21 0 0 0 DL (threaded) [bufdaemon]
100070 D qsleep 0xffffffff82616a50 [bufdaemon]
100077 D - 0xffffffff8200aa00 [bufspacedaemon-0]
100087 D sdflush 0xfffff80004963ce8 [/ worker]
20 0 0 0 DL psleep 0xffffffff8263dc48 [vmdaemon]
19 0 0 0 DL (threaded) [pagedaemon]
100068 D psleep 0xffffffff826320f8 [dom0]
100075 D launds 0xffffffff82632104 [laundry: dom0]
100076 D umarcl 0xffffffff814d46c0 [uma]
18 0 0 0 DL - 0xffffffff8235e208 [rand_harvestq]
17 0 0 0 DL waiting 0xffffffff82cd62f8 [sctp_iterator]
16 0 0 0 DL pftm 0xffffffff82b55390 [pf purge]
15 0 0 0 DL - 0xffffffff8261602c [soaiod4]
9 0 0 0 DL - 0xffffffff8261602c [soaiod3]
8 0 0 0 DL - 0xffffffff8261602c [soaiod2]
7 0 0 0 DL - 0xffffffff8261602c [soaiod1]
6 0 0 0 DL (threaded) [cam]
100034 D - 0xffffffff82235f40 [doneq0]
100067 D - 0xffffffff82235e10 [scanner]
5 0 0 0 DL crypto_ 0xfffff80004350e90 [crypto returns 1]
4 0 0 0 DL crypto_ 0xfffff80004350e30 [crypto returns 0]
3 0 0 0 DL crypto_ 0xffffffff8262f5e0 [crypto]
14 0 0 0 DL seqstat 0xfffff800040d2888 [sequencer 00]
13 0 0 0 DL (threaded) [geom]
100025 D - 0xffffffff82509550 [g_event]
100026 D - 0xffffffff82509558 [g_up]
100027 D - 0xffffffff82509560 [g_down]
2 0 0 0 DL (threaded) [KTLS]
100018 D - 0xfffff80004353100 [thr_0]
100019 D - 0xfffff80004353180 [thr_1]
12 0 0 0 LL (threaded) [intr]
100011 I [swi5: fast taskq]
100015 I [swi6: task queue]
100016 I [swi6: Giant taskq]
100020 L *sctp-in 0xfffff8000493cf00 [swi1: netisr 0]
100021 I [swi3: vm]
100022 I [swi4: clock (0)]
100023 I [swi4: clock (1)]
100035 I [irq24: virtio_pci0]
100036 I [irq25: virtio_pci0]
100037 I [irq26: virtio_pci0]
100038 I [irq27: virtio_pci0]
100039 I [irq28: virtio_pci1]
100040 I [irq29: virtio_pci1]
100041 I [irq30: virtio_pci1]
100042 I [irq31: virtio_pci1]
100043 I [irq32: virtio_pci1]
100048 I [irq10: virtio_pci2]
100050 I [irq1: atkbd0]
100051 I [irq12: psm0]
100052 I [swi0: uart uart++]
100060 I [swi1: pf send]
100073 I [swi1: hpts]
100074 I [swi1: hpts]
11 0 0 0 RL (threaded) [idle]
100003 CanRun [idle: cpu0]
100004 CanRun [idle: cpu1]
1 0 1 0 SLs wait 0xfffff80004307000 [init]
10 0 0 0 DL audit_w 0xffffffff8262fb00 [audit]
0 0 0 0 DLs (threaded) [kernel]
100000 D swapin 0xffffffff82509af0 [swapper]
100005 D - 0xfffff80004328000 [if_io_tqg_0]
100006 D - 0xfffff80004329e00 [if_io_tqg_1]
100007 D - 0xfffff80004329d00 [if_config_tqg_0]
100008 D - 0xfffff80004329c00 [softirq_0]
100009 D - 0xfffff80004329b00 [softirq_1]
100010 D - 0xfffff8000420f500 [thread taskq]
100012 D - 0xfffff8000420f100 [inm_free taskq]
100013 D - 0xfffff8000420ee00 [kqueue_ctx taskq]
100014 D - 0xfffff8000420ec00 [aiod_kick taskq]
100017 D - 0xfffff8000420e600 [in6m_free taskq]
100024 D - 0xfffff8000420dd00 [firmware taskq]
100029 D - 0xfffff8000420d700 [crypto_0]
100030 D - 0xfffff8000420d700 [crypto_1]
100044 D - 0xfffff8000420ca00 [vtnet0 rxq 0]
100045 D - 0xfffff8000420c900 [vtnet0 txq 0]
100046 D - 0xfffff8000420c800 [vtnet0 rxq 1]
100047 D - 0xfffff8000420c700 [vtnet0 txq 1]
100049 D vtbslp 0xfffff80004683f00 [virtio_balloon]
100053 D - 0xfffff80004925b00 [mca taskq]
100057 D - 0xffffffff81cd9591 [deadlkres]
100062 D - 0xfffff80004ba1100 [acpi_task_0]
100063 D - 0xfffff80004ba1100 [acpi_task_1]
100064 D - 0xfffff80004ba1100 [acpi_task_2]
100066 D - 0xfffff8000420d100 [CAM taskq]
db> show all locks
Process 4425 (syz-executor.3) thread 0xfffffe0026719100 (101179)
exclusive sleep mutex sctp-inp (inp) r = 0 (0xfffff8006b13d968) locked @ /syzkaller/managers/main/kernel/sys/netinet/sctp_pcb.c:3333
exclusive rw sctp-info (sctp-info) r = 0 (0xfffffe00049405b8) locked @ /syzkaller/managers/main/kernel/sys/netinet/sctp_pcb.c:3331
exclusive sleep mutex sctp-create (inp_create) r = 0 (0xfffff8006b13d988) locked @ /syzkaller/managers/main/kernel/sys/netinet/sctp_pcb.c:3330
Process 4422 (syz-executor.1) thread 0xfffffe0026702e00 (100636)
exclusive sx so_rcv_sx (so_rcv_sx) r = 0 (0xfffff80004f34538) locked @ /syzkaller/managers/main/kernel/sys/kern/uipc_sockbuf.c:467
Process 765 (syz-executor.0) thread 0xfffffe001d08ea00 (100079)
exclusive sleep mutex pmap (pmap) r = 0 (0xfffffe00264364f0) locked @ /syzkaller/managers/main/kernel/sys/amd64/amd64/pmap.c:8158
shared rw vm object (vm object) r = 0 (0xfffff8006b372000) locked @ /syzkaller/managers/main/kernel/sys/vm/vm_fault.c:1302
shared sx vm map (user) (vm map (user)) r = 0 (0xfffffe0026436430) locked @ /syzkaller/managers/main/kernel/sys/vm/vm_map.c:4841
Process 12 (intr) thread 0xfffffe00049cee00 (100020)
exclusive sleep mutex sctp-tcb (tcb) r = 0 (0xfffffe00266d2a90) locked @ /syzkaller/managers/main/kernel/sys/netinet/sctp_pcb.c:1473
db> show malloc
Type InUse MemUse Requests
pf_hash 5 11524K 5
devbuf 4214 4854K 4242
tcp_hpts 5 3201K 5
vtbuf 24 1968K 46
sysctloid 28170 1644K 28234
kobj 335 1340K 494
newblk 8 1026K 4832
vfscache 4 1025K 4
pcb 302 848K 14489
inodedep 13 518K 3746
ufs_quota 1 512K 1
vfs_hash 1 512K 1
callout 2 512K 2
intr 4 472K 4
subproc 144 289K 4508
acpica 1674 185K 52414
vnet_data 1 168K 1
sctp_atcl 278 139K 9118
sctp_stro 139 139K 1486
filedesc 19 133K 7115
pagedep 9 130K 3577
tfo_ccache 1 128K 1
sem 4 106K 4
DEVFS1 105 105K 122
linker 254 99K 294
BPF 46 88K 46
bus 975 79K 3020
mtx_pool 2 72K 2
syncache 1 68K 1
acpitask 1 64K 1
ddb_capture 1 64K 1
module 505 64K 505
umtx 360 45K 360
kdtrace 194 37K 16688
temp 35 33K 2176
hostcache 1 32K 1
shm 1 32K 4
DEVFS3 124 31K 134
msg 4 30K 4
DEVFS_RULE 56 27K 56
vmem 3 26K 4
ifaddr 76 26K 76
gtaskqueue 18 26K 18
kbdmux 6 22K 6
cred 75 19K 504
sctp_atky 416 18K 11086
ufs_mount 5 17K 6
proc 3 17K 3
lltable 44 16K 49
tty 16 16K 16
tidhash 1 16K 1
ithread 99 16K 99
ether_multi 172 14K 177
bus-sc 30 14K 1405
KTRACE 100 13K 100
ifnet 7 13K 7
sctp_timw 47 12K 47
lockf 113 12K 389
kenv 92 12K 92
eventhandler 132 12K 132
in6_multi 89 11K 89
pfs_nodes 20 10K 20
GEOM 60 10K 489
rman 82 10K 423
select 71 9K 71
bmsafemap 2 9K 3700
UART 12 9K 12
devstat 4 9K 4
rpc 2 8K 2
shmfd 1 8K 15
pfs_vncache 1 8K 1
audit_evclass 233 8K 291
kqueue 64 7K 4430
CAM DEV 3 6K 510
plimit 24 6K 423
vt 11 6K 11
sglist 5 6K 5
CAM queue 5 6K 1528
taskqueue 48 6K 48
DEVFSP 78 5K 82
ufs_dirhash 24 5K 24
session 35 5K 46
pgrp 35 5K 48
sctp_athm 278 5K 9602
sctp_map 278 5K 2972
pf_ifnet 10 5K 26
UMA 251 5K 251
memdesc 1 4K 1
MCA 32 4K 32
evdev 4 4K 4
kcovinfo 64 4K 68
routetbl 24 4K 48
hhook 13 4K 13
proc-args 52 3K 621
acpisem 22 3K 22
terminal 11 3K 11
uidinfo 3 3K 12
sctp_ifa 17 3K 19
local_apic 1 2K 1
io_apic 1 2K 1
ipsec-saq 2 2K 2
ip6ndp 12 2K 21
Unitno 34 2K 13532
CAM XPT 22 2K 543
in_multi 6 2K 7
ipsecpolicy 2 2K 2
acpidev 20 2K 20
msi 9 2K 9
clone 9 2K 9
tun 7 2K 7
softdep 1 1K 1
sahead 1 1K 1
secasvar 1 1K 1
nhops 6 1K 8
vnodemarker 2 1K 82
NFSD session 1 1K 1
CAM periph 4 1K 271
freework 4 1K 3644
mkdir 7 1K 7100
ipsec 3 1K 3
sctp_ifn 6 1K 19
dirrem 3 1K 3638
freeblks 3 1K 3569
mld 6 1K 6
igmp 6 1K 6
toponodes 6 1K 6
isadev 6 1K 6
mount 16 1K 89
pci_link 10 1K 10
inpcbpolicy 21 1K 4797
encap_export_host 12 1K 12
crypto 3 1K 3
sctp_stri 1 1K 940
newdirblk 4 1K 3550
diradd 4 1K 3677
freefile 4 1K 3610
pfil 4 1K 4
chacha20random 1 1K 1
CAM SIM 2 1K 2
cdev 2 1K 2
osd 3 1K 9
iov 2 1K 18921
vnodes 1 1K 1
ktls 1 1K 1
NFSD lckfile 1 1K 1
NFSD V4client 1 1K 1
DEVFS 9 1K 10
feeder 7 1K 7
loginclass 3 1K 6
prison 6 1K 6
CAM dev queue 2 1K 2
CAM I/O Scheduler 1 1K 1
apmdev 1 1K 1
atkbddev 2 1K 2
CAM path 4 1K 1034
tcpfunc 2 1K 2
pmchooks 1 1K 1
soname 4 1K 9391
nexusdev 5 1K 5
filecaps 5 1K 96
sctp_vrf 1 1K 1
entropy 2 1K 42
vnet 1 1K 1
acpiintr 1 1K 1
pmc 1 1K 1
cpus 2 1K 2
vnet_data_free 1 1K 1
Per-cpu 1 1K 1
p1003.1b 1 1K 1
sctp_mcore 0 0K 0
sctp_socko 0 0K 3994
sctp_iter 0 0K 10
sctp_mvrf 0 0K 0
sctp_cpal 0 0K 0
sctp_cmsg 0 0K 0
sctp_stre 0 0K 0
sctp_athi 0 0K 0
sctp_a_it 0 0K 10
sctp_aadr 0 0K 0
pf_table 0 0K 6
pf_rule 0 0K 7
pf_altq 0 0K 0
pf_osfp 0 0K 0
pf_temp 0 0K 0
vtfont 0 0K 0
madt_table 0 0K 2
ath_hal 0 0K 0
athdev 0 0K 0
ata_pci 0 0K 0
ata_dma 0 0K 0
ata_generic 0 0K 0
amr 0 0K 0
scsi_da 0 0K 69
pvscsi 0 0K 0
smartpqi 0 0K 0
ata_da 0 0K 0
scsi_ch 0 0K 0
scsi_cd 0 0K 0
USBdev 0 0K 0
USB 0 0K 0
AHCI driver 0 0K 0
agp 0 0K 0
iavf 0 0K 0
ixl 0 0K 0
nvme_da 0 0K 0
acpipwr 0 0K 0
twsbuf 0 0K 0
twe_commands 0 0K 0
twa_commands 0 0K 0
ice-resmgr 0 0K 0
ice-osdep 0 0K 0
ice 0 0K 0
fpukern_ctx 0 0K 0
tcp_log_dev 0 0K 0
xen_intr 0 0K 0
midi buffers 0 0K 0
mixer 0 0K 0
xen_hvm 0 0K 0
legacydrv 0 0K 0
qpidrv 0 0K 0
ac97 0 0K 0
dmar_idpgtbl 0 0K 0
dmar_dom 0 0K 0
dmar_ctx 0 0K 0
hdacc 0 0K 0
hdac 0 0K 0
hdaa 0 0K 0
isci 0 0K 0
iommu_dmamap 0 0K 0
acpi_perf 0 0K 0
hyperv_socket 0 0K 0
bxe_ilt 0 0K 0
xenbus 0 0K 0
acpicmbat 0 0K 0
SIIS driver 0 0K 0
vm_fictitious 0 0K 0
CAM CCB 0 0K 3278
PUC 0 0K 0
ppbusdev 0 0K 0
agtiapi_MemAlloc malloc 0 0K 0
osti_cacheable 0 0K 0
tempbuff 0 0K 0
tempbuff 0 0K 0
UMAHash 0 0K 0
ag_tgt_map_t malloc 0 0K 0
ag_slr_map_t malloc 0 0K 0
vm_pgdata 0 0K 0
jblocks 0 0K 0
savedino 0 0K 2875
sentinel 0 0K 0
jfsync 0 0K 0
jtrunc 0 0K 0
sbdep 0 0K 41
jsegdep 0 0K 0
jseg 0 0K 0
jfreefrag 0 0K 0
jfreeblk 0 0K 0
jnewblk 0 0K 0
jmvref 0 0K 0
jremref 0 0K 0
jaddref 0 0K 0
freedep 0 0K 0
freefrag 0 0K 6
allocindir 0 0K 0
indirdep 0 0K 95
allocdirect 0 0K 0
ufs_trim 0 0K 0
mactemp 0 0K 0
audit_trigger 0 0K 0
audit_pipe_presel 0 0K 0
audit_pipeent 0 0K 0
audit_pipe 0 0K 0
audit_evname 0 0K 0
audit_bsm 0 0K 0
audit_gidset 0 0K 0
audit_text 0 0K 0
audit_path 0 0K 0
audit_data 0 0K 0
audit_cred 0 0K 0
xform 0 0K 0
lDevFlags * malloc 0 0K 0
NLM 0 0K 0
ipsec-spdcache 0 0K 0
ipsec-reg 0 0K 0
ipsec-misc 0 0K 0
ipsecrequest 0 0K 0
ip6opt 0 0K 22
ip6_msource 0 0K 0
ip6_moptions 0 0K 0
in6_mfilter 0 0K 0
frag6 0 0K 0
tcplog 0 0K 0
tiDeviceHandle_t * malloc 0 0K 0
LRO 0 0K 0
newreno data 0 0K 0
ip_msource 0 0K 0
ip_moptions 0 0K 0
in_mfilter 0 0K 0
ipid 0 0K 0
80211scan 0 0K 0
80211ratectl 0 0K 0
80211power 0 0K 0
80211nodeie 0 0K 0
80211node 0 0K 0
80211mesh_gt 0 0K 0
80211mesh_rt 0 0K 0
80211perr 0 0K 0
80211prep 0 0K 0
80211preq 0 0K 0
80211dfs 0 0K 0
80211crypto 0 0K 0
80211vap 0 0K 0
iflib 0 0K 0
vlan 0 0K 0
gif 0 0K 0
ifdescr 0 0K 0
zlib 0 0K 0
fadvise 0 0K 0
ag_portal_data_t malloc 0 0K 0
statfs 0 0K 3728
export_host 0 0K 0
cl_savebuf 0 0K 2
ag_device_t malloc 0 0K 0
STLock malloc 0 0K 0
CCB List 0 0K 0
sr_iov 0 0K 0
OCS 0 0K 0
OCS 0 0K 0
nvme 0 0K 0
nvd 0 0K 0
netmap 0 0K 0
mwldev 0 0K 0
MVS driver 0 0K 0
CAM ccb queue 0 0K 0
mrsasbuf 0 0K 0
mpt_user 0 0K 0
mps_user 0 0K 0
biobuf 0 0K 0
aios 0 0K 0
lio 0 0K 0
acl 0 0K 0
MPSSAS 0 0K 0
mbuf_tag 0 0K 127
accf 0 0K 0
pts 0 0K 0
ioctlops 0 0K 290
Witness 0 0K 0
stack 0 0K 0
mps 0 0K 0
mpr_user 0 0K 0
MPRSAS 0 0K 0
mpr 0 0K 0
mfibuf 0 0K 0
md_sectors 0 0K 0
sbuf 0 0K 288
md_disk 0 0K 0
firmware 0 0K 0
compressor 0 0K 0
malodev 0 0K 0
SWAP 0 0K 0
LED 0 0K 0
sysctltmp 0 0K 701
sysctl 0 0K 1
ekcd 0 0K 0
dumper 0 0K 0
sendfile 0 0K 0
rctl 0 0K 0
ix_sriov 0 0K 0
aacraidcam 0 0K 0
ix 0 0K 0
ipsbuf 0 0K 0
iirbuf 0 0K 0
cache 0 0K 0
aacraid_buf 0 0K 0
prison_racct 0 0K 0
Fail Points 0 0K 0
sigio 0 0K 1
filedesc_to_leader 0 0K 0
pwd 0 0K 0
tty console 0 0K 0
aaccam 0 0K 0
aacbuf 0 0K 0
zstd 0 0K 0
nvlist 0 0K 0
SCSI ENC 0 0K 0
SCSI sa 0 0K 0
isofs_node 0 0K 0
isofs_mount 0 0K 0
tr_raid5_data 0 0K 0
tr_raid1e_data 0 0K 0
tr_raid1_data 0 0K 0
tr_raid0_data 0 0K 0
tr_concat_data 0 0K 0
md_sii_data 0 0K 0
md_promise_data 0 0K 0
md_nvidia_data 0 0K 0
md_jmicron_data 0 0K 0
md_intel_data 0 0K 0
md_ddf_data 0 0K 0
raid_data 0 0K 72
geom_flashmap 0 0K 0
tmpfs name 0 0K 0
tmpfs mount 0 0K 0
NFS FHA 0 0K 0
newnfsmnt 0 0K 0
newnfsclient_req 0 0K 0
NFSCL layrecall 0 0K 0
NFSCL session 0 0K 0
NFSCL sockreq 0 0K 0
NFSCL devinfo 0 0K 0
NFSCL flayout 0 0K 0
NFSCL layout 0 0K 0
NFSD rollback 0 0K 0
NFSCL diroffdiroff 0 0K 0
NEWdirectio 0 0K 0
NEWNFSnode 0 0K 0
NFSCL lck 0 0K 0
NFSCL lckown 0 0K 0
NFSCL client 0 0K 0
NFSCL deleg 0 0K 0
NFSCL open 0 0K 0
NFSCL owner 0 0K 0
NFS fh 0 0K 0
NFS req 0 0K 0
NFSD usrgroup 0 0K 0
NFSD string 0 0K 0
NFSD V4lock 0 0K 0
NFSD V4state 0 0K 0
NFSD srvcache 0 0K 0
msdosfs_fat 0 0K 0
msdosfs_mount 0 0K 0
msdosfs_node 0 0K 0
DEVFS4 0 0K 0
DEVFS2 0 0K 0
gntdev 0 0K 0
privcmd_dev 0 0K 0
evtchn_dev 0 0K 0
xenstore 0 0K 0
scsi_pass 0 0K 0
ciss_data 0 0K 0
xnb 0 0K 0
xbbd 0 0K 0
xbd 0 0K 0
Balloon 0 0K 0
sysmouse 0 0K 0
db> show uma
Zone Size Used Free Requests Sleeps Bucket Total Mem XFree
mbuf_cluster 2048 9780 126 9780 0 254 20287488 0
65536 65536 0 110 110 0 1 7208960 0
32768 32768 0 112 112 0 1 3670016 0
mbuf_packet 256 8226 1426 1018520 0 254 2470912 0
RADIX NODE 144 15699 258 172443 0 62 2297808 0
16384 16384 1 135 137 0 1 2228224 0
512 512 4131 45 4145 0 30 2138112 0
mbuf_jumbo_page 4096 2 506 178 0 254 2080768 0
BUF TRIE 144 222 13246 1713 0 62 1939392 0
4096 4096 397 7 4920 0 2 1654784 0
128 128 9325 130 9694 0 126 1210240 0
sctp_asoc 2288 139 371 1486 0 254 1166880 0
DEVCTL 1024 0 1000 125 0 16 1024000 0
UMA Slabs 0 112 7907 7 7907 0 126 886368 0
pbuf 832 0 953 0 0 2 792896 0
8192 8192 9 77 90 0 1 704512 0
sctp_ep 1280 138 372 7161 0 254 652800 0
tcpcb 1040 4 513 83 0 254 537680 0
socket 960 50 458 13155 0 254 487680 0
2048 2048 143 57 10755 0 8 409600 0
256 Bucket 2048 171 23 1248 0 8 397312 0
65536 65536 4 2 173 0 1 393216 0
sctp_raddr 736 143 374 3451 0 254 380512 0
VM OBJECT 264 1307 103 68295 0 30 372240 0
VNODE 496 570 94 4184 0 30 329344 0
mbuf 256 626 657 537920 0 254 328448 0
THREAD 1792 150 30 7916 0 8 322560 0
1024 1024 255 57 1759 0 16 319488 0
4096 4096 1 64 84 0 2 266240 0
ripcb 488 7 505 62 0 254 249856 0
udplite_inpcb 488 8 504 4452 0 254 249856 0
tcp_inpcb 488 4 508 83 0 254 249856 0
udp_inpcb 488 2 510 200 0 254 249856 0
512 512 343 121 10501 0 30 237568 0
128 128 1374 207 24652 0 126 202368 0
64 64 2769 318 7141 0 254 197568 0
65536 65536 2 1 10 0 1 196608 0
16384 16384 7 5 3555 0 1 196608 0
16 16 11848 402 12157 0 254 196000 0
MAP ENTRY 96 1637 379 243037 0 126 193536 0
g_bio 408 0 450 10766 0 30 183600 0
256 256 38 652 8465 0 62 176640 0
UMA Zones 768 226 1 226 0 16 174336 0
512 512 15 321 3983 0 30 172032 0
32 32 4687 479 5527 0 254 165312 0
32768 32768 0 5 74 0 1 163840 0
vmem btag 56 2425 227 2425 0 254 148512 0
128 128 908 239 4597 0 126 146816 0
FFS2 dinode 256 534 36 4146 0 62 145920 0
256 256 199 371 15252 0 62 145920 0
VMSPACE 2536 39 15 4404 0 4 136944 0
256 256 343 182 7581 0 62 134400 0
65536 65536 0 2 1154 0 1 131072 0
65536 65536 2 0 2 0 1 131072 0
unpcb 256 20 490 1158 0 254 130560 0
ksiginfo 112 65 979 1186 0 126 116928 0
128 128 406 493 14105 0 126 115072 0
FFS inode 160 534 166 4146 0 62 112000 0
256 256 35 400 2910 0 62 111360 0
PROC 1312 61 20 4425 0 8 106272 0
S VFS Cache 104 620 394 4927 0 126 105456 0
128 Bucket 1024 53 46 542 0 16 101376 0
16384 16384 6 0 9 0 1 98304 0
filedesc0 1080 62 22 4426 0 8 90720 0
4096 4096 22 0 22 0 2 90112 0
64 64 823 500 5418 0 254 84672 0
UMA Kegs 384 212 4 212 0 30 82944 0
256 256 173 142 13426 0 62 80640 0
sctp_readq 152 0 520 274 0 254 79040 0
sctp_chunk 152 134 386 2227 0 254 79040 0
64 Bucket 512 88 48 6368 0 30 69632 0
64 64 740 331 4182 0 254 68544 0
65536 65536 1 0 1 0 1 65536 0
4096 4096 12 4 3752 0 2 65536 0
2048 2048 11 21 523 0 8 65536 0
512 512 102 18 107 0 30 61440 0
sctp_stream_msg_out 112 2 538 431 0 254 60480 0
4096 4096 10 4 396 0 2 57344 0
clpbuf 832 0 64 339 0 16 53248 0
32 Bucket 256 64 131 927 0 62 49920 0
DIRHASH 1024 34 14 34 0 16 49152 0
NAMEI 1024 0 48 28437 0 16 49152 0
8192 8192 2 4 34 0 1 49152 0
8192 8192 5 1 7 0 1 49152 0
2048 2048 11 13 31 0 8 49152 0
syncache 168 0 264 4 0 254 44352 0
Files 80 245 305 23846 0 126 44000 0
4096 4096 8 2 8 0 2 40960 0
pipe 760 23 27 424 0 16 38000 0
64 pcpu 8 4201 407 4308 0 254 36864 0
selfd 64 122 445 28928 0 254 36288 0
64 64 83 484 14952 0 254 36288 0
64 64 82 485 247 0 254 36288 0
64 64 45 522 102 0 254 36288 0
64 64 24 543 332 0 254 36288 0
64 64 64 503 70 0 254 36288 0
128 128 19 260 492 0 126 35712 0
128 128 71 208 194 0 126 35712 0
128 128 42 237 7236 0 126 35712 0
128 128 86 193 388 0 126 35712 0
routing nhops 256 27 108 39 0 62 34560 0
ttyoutq 256 72 63 160 0 62 34560 0
256 256 37 98 1479 0 62 34560 0
256 256 37 98 54 0 62 34560 0
256 256 12 123 285 0 62 34560 0
TURNSTILE 136 181 71 181 0 62 34272 0
32768 32768 1 0 1 0 1 32768 0
32768 32768 1 0 1 0 1 32768 0
32768 32768 1 0 1 0 1 32768 0
2048 2048 1 15 260 0 8 32768 0
1024 1024 15 17 1187 0 16 32768 0
1024 1024 17 15 34 0 16 32768 0
1024 1024 1 31 15 0 16 32768 0
512 512 32 32 32 0 30 32768 0
512 512 29 35 29 0 30 32768 0
512 512 2 62 510 0 30 32768 0
512 512 11 53 12 0 30 32768 0
mt_stats_zone 64 445 67 445 0 254 32768 0
KNOTE 160 28 172 78001 0 62 32000 0
ttyinq 160 135 65 300 0 62 32000 0
tcp_bbr_pcb 832 0 36 25 0 16 29952 0
cpuset 104 7 272 7 0 126 29016 0
sctp_laddr 48 1 587 138 0 254 28224 0
tcpreass 48 0 588 7 0 254 28224 0
hostcache 96 1 293 1 0 254 28224 0
PWD 32 20 862 3635 0 254 28224 0
4 Bucket 48 7 581 10367 0 254 28224 0
8192 8192 3 0 3 0 1 24576 0
rtentry 176 35 103 39 0 62 24288 0
rl_entry 40 57 549 57 0 254 24240 0
vtnet_tx_hdr 24 0 1002 500452 0 254 24048 0
8 Bucket 80 51 249 24045 0 126 24000 0
Mountpoints 2816 2 6 2 0 4 22528 0
SLEEPQUEUE 88 181 75 181 0 126 22528 0
udpcb 32 8 622 4652 0 254 20160 0
32 32 136 494 13634 0 254 20160 0
32 32 113 517 2573 0 254 20160 0
32 32 16 614 3607 0 254 20160 0
32 32 324 306 11450 0 254 20160 0
32 32 26 604 177 0 254 20160 0
32 32 69 561 4853 0 254 20160 0
16 Bucket 144 65 75 8045 0 62 20160 0
2 Bucket 32 314 316 11631 0 254 20160 0
tcp_bbr_map 128 0 155 57 0 126 19840 0
procdesc 136 5 140 14 0 62 19720 0
epoch_record pcpu 256 4 60 4 0 62 16384 0
16384 16384 1 0 1 0 1 16384 0
4096 4096 0 4 6 0 2 16384 0
2048 2048 1 7 24 0 8 16384 0
2048 2048 1 7 1 0 8 16384 0
2048 2048 2 6 2 0 8 16384 0
1024 1024 3 13 151 0 16 16384 0
1024 1024 4 12 4 0 16 16384 0
1024 1024 8 8 8 0 16 16384 0
1024 1024 2 14 2 0 16 16384 0
pf tags 104 0 156 6 0 126 16224 0
rentr 24 0 668 8 0 254 16032 0
mt_zone 24 445 223 445 0 254 16032 0
16 16 464 536 4497 0 254 16000 0
KMAP ENTRY 96 12 153 12 0 126 15840 0
kenv 258 3 57 1008 0 30 15480 0
FPU_save_area 832 1 17 1 0 16 14976 0
vmem 1856 1 7 1 0 8 14848 0
32 32 16 362 647 0 254 12096 0
16 16 12 738 4560 0 254 12000 0
16 16 298 452 3043 0 254 12000 0
16 16 323 427 33421 0 254 12000 0
16 16 4 746 9 0 254 12000 0
16 16 14 736 16 0 254 12000 0
L VFS Cache 320 0 36 1 0 30 11520 0
8192 8192 1 0 1 0 1 8192 0
8192 8192 1 0 1 0 1 8192 0
4096 4096 1 1 1 0 2 8192 0
SMR CPU 32 2 253 2 0 254 8160 0
16 16 10 490 10 0 254 8000 0
SMR SHARED 24 2 253 2 0 254 6120 0
UMA Slabs 1 176 9 13 9 0 62 3872 0
int pcpu 4 34 478 34 0 254 2048 0
FFS1 dinode 128 0 0 0 0 126 0 0
swblk 136 0 0 0 0 62 0 0
swpctrie 144 0 0 0 0 62 0 0
sctp_asconf_ack 48 0 0 0 0 254 0 0
sctp_asconf 40 0 0 0 0 254 0 0
pf state scrubs 40 0 0 0 0 254 0 0
pf frag entries 40 0 0 0 0 254 0 0
pf frags 248 0 0 0 0 62 0 0
pf table entries 160 0 0 0 0 62 0 0
pf table entry counters 64 0 0 0 0 254 0 0
pf source nodes 136 0 0 0 0 254 0 0
pf state keys 88 0 0 0 0 126 0 0
pf states 296 0 0 0 0 254 0 0
pf mtags 48 0 0 0 0 254 0 0
tcp_log_node 120 0 0 0 0 126 0 0
tcp_log_bucket 176 0 0 0 0 62 0 0
tcp_log 416 0 0 0 0 254 0 0
tfo_ccache_entries 80 0 0 0 0 126 0 0
tfo 4 0 0 0 0 254 0 0
sackhole 32 0 0 0 0 254 0 0
tcptw 88 0 0 0 0 254 0 0
ipq 56 0 0 0 0 254 0 0
IPsec SA lft_c 16 0 0 0 0 254 0 0
itimer 352 0 0 0 0 30 0 0
AIOLIO 280 0 0 0 0 30 0 0
AIOCB 752 0 0 0 0 16 0 0
AIOP 32 0 0 0 0 254 0 0
AIO 208 0 0 0 0 62 0 0
TMPFS node 232 0 0 0 0 62 0 0
TMPFS dirent 64 0 0 0 0 254 0 0
NCLNODE 592 0 0 0 0 16 0 0
LTS VFS Cache 360 0 0 0 0 30 0 0
STS VFS Cache 144 0 0 0 0 62 0 0
VNODEPOLL 120 0 0 0 0 126 0 0
crypto_session 72 0 0 0 0 126 0 0
cryptop 280 0 0 0 0 30 0 0
nvme_request 128 0 0 0 0 126 0 0
IOMMU_MAP_ENTRY 120 0 0 0 0 126 0 0
ktls_session 192 0 0 0 0 62 0 0
mbuf_jumbo_16k 16384 0 0 0 0 254 0 0
mbuf_jumbo_9k 9216 0 0 0 0 254 0 0
audit_record 1280 0 0 0 0 8 0 0
domainset 40 0 0 0 0 254 0 0
MAC labels 40 0 0 0 0 254 0 0
vnpbuf 832 0 0 0 0 62 0 0
mdpbuf 832 0 0 0 0 4 0 0
nfspbuf 832 0 0 0 0 16 0 0
swwbuf 832 0 0 0 0 8 0 0
swrbuf 832 0 0 0 0 16 0 0
umtx_shm 88 0 0 0 0 126 0 0
umtx pi 96 0 0 0 0 126 0 0
rangeset pctrie nodes 144 0 0 0 0 62 0 0
65536 65536 0 0 0 0 1 0 0
65536 65536 0 0 0 0 1 0 0
32768 32768 0 0 0 0 1 0 0
32768 32768 0 0 0 0 1 0 0
32768 32768 0 0 0 0 1 0 0
16384 16384 0 0 0 0 1 0 0
16384 16384 0 0 0 0 1 0 0
16384 16384 0 0 0 0 1 0 0
16384 16384 0 0 0 0 1 0 0
8192 8192 0 0 0 0 1 0 0
8192 8192 0 0 0 0 1 0 0
2048 2048 0 0 0 0 8 0 0
fakepg 104 0 0 0 0 126 0 0
UMA Hash 256 0 0 0 0 62 0 0

---
This report is generated by a bot. It may contain errors.
See https://goo.gl/tpsmEJ for more information about syzbot.
syzbot engineers can be reached at syzk...@googlegroups.com.

syzbot will keep track of this issue. See:
https://goo.gl/tpsmEJ#status for how to communicate with syzbot.

syzbot

unread,

Oct 6, 2020, 3:55:22 PM10/6/20

to syzkaller-f...@googlegroups.com

syzbot has found a reproducer for the following issue on:

HEAD commit: 659ec70c Reset delayed SACK state when restarting an SCTP ..
git tree: freebsd
console output: https://syzkaller.appspot.com/x/log.txt?x=14a3ce3b900000
dashboard link: https://syzkaller.appspot.com/bug?extid=b6ce0aec16f5fdab3282
syz repro: https://syzkaller.appspot.com/x/repro.syz?x=12a8408b900000

IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+b6ce0a...@syzkaller.appspotmail.com

panic: Assertion v != tid failed at /syzkaller/managers/main/kernel/sys/kern/kern_mutex.c:914
cpuid = 0

time = 1602012866
KDB: stack backtrace:
db_trace_self_wrapper() at db_trace_self_wrapper+0x47/frame 0xfffffe000364b5b0
vpanic() at vpanic+0x1c7/frame 0xfffffe000364b610
panic() at panic+0x43/frame 0xfffffe000364b670
thread_lock_flags_() at thread_lock_flags_+0x3a5/frame 0xfffffe000364b6f0
propagate_priority() at propagate_priority+0x9a/frame 0xfffffe000364b740
turnstile_wait() at turnstile_wait+0x408/frame 0xfffffe000364b7a0
__rw_wlock_hard() at __rw_wlock_hard+0x8d0/frame 0xfffffe000364b850
_rw_wlock_cookie() at _rw_wlock_cookie+0x118/frame 0xfffffe000364b8a0
sctp_free_assoc() at sctp_free_assoc+0x75c/frame 0xfffffe000364b930
sctp_load_addresses_from_init() at sctp_load_addresses_from_init+0x1201/frame 0xfffffe000364c2c0
sctp_process_control() at sctp_process_control+0x6735/frame 0xfffffe000364c750

sctp_common_input_processing() at sctp_common_input_processing+0x7db/frame 0xfffffe000364c8e0
sctp_input_with_port() at sctp_input_with_port+0x308/frame 0xfffffe000364c9d0
sctp_input() at sctp_input+0x1f/frame 0xfffffe000364c9f0
ip_input() at ip_input+0x388/frame 0xfffffe000364ca90
swi_net() at swi_net+0x20d/frame 0xfffffe000364cb10
ithread_loop() at ithread_loop+0x33f/frame 0xfffffe000364cbb0
fork_exit() at fork_exit+0xb3/frame 0xfffffe000364cbf0
fork_trampoline() at fork_trampoline+0xe/frame 0xfffffe000364cbf0
--- trap 0, rip = 0, rsp = 0, rbp = 0 ---
KDB: enter: panic
[ thread pid 12 tid 100020 ]

Stopped at kdb_enter+0x67: movq $0,0x14808d6(%rip)

db>
db> set $lines = 0
db> set $maxwidth = 0
db> show registers
cs 0x20
ds 0x3b ll+0x1a
es 0x3b ll+0x1a
fs 0x13
gs 0x1b

ss 0x28 ll+0x7
rax 0x12
rcx 0x80 ll+0x5f
rdx 0xffffffff818928f7
rbx 0
rsp 0xfffffe000364b590
rbp 0xfffffe000364b5b0
rsi 0x1
rdi 0

r8 0
r9 0xffffffff
r10 0
r11 0x2f4e ll+0x2f2d

r12 0xffffffff82066ae0 ddb_dbbe
r13 0
r14 0xffffffff81937806
r15 0xffffffff81937806
rip 0xffffffff810d17a7 kdb_enter+0x67
rflags 0x86 ll+0x65
kdb_enter+0x67: movq $0,0x14808d6(%rip)
db> show proc
Process 12 (intr) at 0xfffff8000431b520:

state: NORMAL
uid: 0 gids: 0

parent: pid 0 at 0xffffffff82504d10
ABI: null
reaper: 0xffffffff82504d10 reapsubtree: 12
sigparent: 20
vmspace: 0xffffffff82505960
(map 0xffffffff82505960)
(map.pmap 0xffffffff82505a20)
(pmap 0xffffffff82505a80)

threads: 23
100011 I [swi5: fast taskq]
100015 I [swi6: task queue]
100016 I [swi6: Giant taskq]

100020 L *sctp-in 0xfffff800047e0300 [swi1: netisr 0]

100021 I [swi3: vm]
100022 I [swi4: clock (0)]
100023 I [swi4: clock (1)]
100035 I [irq24: virtio_pci0]
100036 I [irq25: virtio_pci0]
100037 I [irq26: virtio_pci0]

100038 Run CPU 1 [irq27: virtio_pci0]

100039 I [irq28: virtio_pci1]
100040 I [irq29: virtio_pci1]
100041 I [irq30: virtio_pci1]
100042 I [irq31: virtio_pci1]
100043 I [irq32: virtio_pci1]
100048 I [irq10: virtio_pci2]
100050 I [irq1: atkbd0]
100051 I [irq12: psm0]
100052 I [swi0: uart uart++]
100060 I [swi1: pf send]
100073 I [swi1: hpts]
100074 I [swi1: hpts]
db> ps
pid ppid pgrp uid state wmesg wchan cmd

837 776 776 0 L (threaded) syz-executor.1
100119 S nanslp 0xffffffff82525801 syz-executor.1
100134 L *sctp-in 0xfffff800047e0300 syz-executor.1
100135 S uwait 0xfffff80004321a80 syz-executor.1
836 791 424 0 R sh
835 775 775 0 R (threaded) syz-executor.2
100117 RunQ syz-executor.2
100136 L *sctp-in 0xfffff800047e0300 syz-executor.2
832 782 782 0 LE *sctp-tc 0xfffff80004a20840 syz-executor.3
831 774 774 0 R (threaded) syz-executor.0
100090 RunQ syz-executor.0
100131 RunQ syz-executor.0
791 779 424 0 S piperd 0xfffff80004c8b8e8 sh
782 772 782 0 Ss nanslp 0xffffffff82525801 syz-executor.3
779 424 424 0 S wait 0xfffff80004c70520 sh
776 772 776 0 Ss nanslp 0xffffffff82525801 syz-executor.1
775 772 775 0 Ss nanslp 0xffffffff82525801 syz-executor.2
774 772 774 0 Ss nanslp 0xffffffff82525801 syz-executor.0
772 770 770 0 S (threaded) syz-execprog
100106 S uwait 0xfffff800047c9380 syz-execprog
100107 S uwait 0xfffff80004a25a80 syz-execprog
100108 S uwait 0xfffff80004a25b80 syz-execprog
100109 S uwait 0xfffff80004a25c80 syz-execprog
100110 S uwait 0xfffff80004a25e80 syz-execprog
100111 S uwait 0xfffff80004321280 syz-execprog
100112 S kqread 0xfffff80004bea100 syz-execprog
100113 S uwait 0xfffff800047c9580 syz-execprog
100114 S uwait 0xfffff80004321180 syz-execprog
100115 S uwait 0xfffff8001d4ac100 syz-execprog
770 768 770 0 Ss pause 0xfffff80004d00ae8 csh
768 682 768 0 Ss select 0xfffff800041e9040 sshd
742 1 742 0 Ss+ ttyin 0xfffff800047f04b0 getty
741 1 741 0 Ss+ ttyin 0xfffff80004aa54b0 getty
740 1 740 0 Ss+ ttyin 0xfffff80004aa58b0 getty
739 1 739 0 Ss+ ttyin 0xfffff80004aa5cb0 getty
738 1 738 0 Ss+ ttyin 0xfffff80004aa40b0 getty
737 1 737 0 Ss+ ttyin 0xfffff80004aa44b0 getty
736 1 736 0 Ss+ ttyin 0xfffff80004aa48b0 getty
735 1 735 0 Ss+ ttyin 0xfffff80004aa4cb0 getty
734 1 734 0 Ss+ ttyin 0xfffff80004aa70b0 getty
686 1 686 0 Ss nanslp 0xffffffff82525801 cron
682 1 682 0 Ss select 0xfffff800041e8c40 sshd
495 1 495 0 Ds biowr 0xfffffe0003e0fd80 syslogd
424 1 424 0 Ss wait 0xfffff80004d00000 devd
423 1 423 65 Ss select 0xfffff80004a61840 dhclient
338 1 338 0 Ss select 0xfffff800041e8f40 dhclient
335 1 335 0 Ss select 0xfffff80004a61bc0 dhclient
23 0 0 0 DL syncer 0xffffffff826128e8 [syncer]
22 0 0 0 DL vlruwt 0xfffff8000440ba40 [vnlru]

21 0 0 0 DL (threaded) [bufdaemon]

100070 D qsleep 0xffffffff82611c50 [bufdaemon]
100077 D - 0xffffffff8200ae00 [bufspacedaemon-0]
100087 D sdflush 0xfffff80004be4ce8 [/ worker]
20 0 0 0 DL psleep 0xffffffff82638ec8 [vmdaemon]

19 0 0 0 DL (threaded) [pagedaemon]

100068 D psleep 0xffffffff8262d2f8 [dom0]
100075 D launds 0xffffffff8262d304 [laundry: dom0]
100076 D umarcl 0xffffffff814d68a0 [uma]
18 0 0 0 DL - 0xffffffff82359388 [rand_harvestq]
17 0 0 0 DL waiting 0xffffffff82c101d8 [sctp_iterator]
16 0 0 0 DL pftm 0xffffffff82e42390 [pf purge]
15 0 0 0 DL - 0xffffffff8261122c [soaiod4]
9 0 0 0 DL - 0xffffffff8261122c [soaiod3]
8 0 0 0 DL - 0xffffffff8261122c [soaiod2]
7 0 0 0 DL - 0xffffffff8261122c [soaiod1]

6 0 0 0 DL (threaded) [cam]

100034 D - 0xffffffff822310c0 [doneq0]
100067 D - 0xffffffff82230f90 [scanner]
5 0 0 0 DL crypto_ 0xfffff8000434cd90 [crypto returns 1]
4 0 0 0 DL crypto_ 0xfffff8000434cd30 [crypto returns 0]
3 0 0 0 DL crypto_ 0xffffffff8262a7e0 [crypto]
14 0 0 0 DL seqstat 0xfffff800043dbc88 [sequencer 00]

13 0 0 0 DL (threaded) [geom]

100025 D - 0xffffffff82504770 [g_event]
100026 D - 0xffffffff82504778 [g_up]
100027 D - 0xffffffff82504780 [g_down]

2 0 0 0 DL (threaded) [KTLS]

100018 D - 0xfffff800040dae00 [thr_0]
100019 D - 0xfffff800040dae80 [thr_1]
12 0 0 0 RL (threaded) [intr]

100011 I [swi5: fast taskq]
100015 I [swi6: task queue]
100016 I [swi6: Giant taskq]

100020 L *sctp-in 0xfffff800047e0300 [swi1: netisr 0]

100021 I [swi3: vm]
100022 I [swi4: clock (0)]
100023 I [swi4: clock (1)]
100035 I [irq24: virtio_pci0]
100036 I [irq25: virtio_pci0]
100037 I [irq26: virtio_pci0]

100038 Run CPU 1 [irq27: virtio_pci0]

1 0 1 0 SLs wait 0xfffff8000431a000 [init]
10 0 0 0 DL audit_w 0xffffffff8262ad00 [audit]

0 0 0 0 DLs (threaded) [kernel]

100000 D swapin 0xffffffff82504d10 [swapper]
100005 D - 0xfffff8000421e000 [if_io_tqg_0]
100006 D - 0xfffff8000421de00 [if_io_tqg_1]
100007 D - 0xfffff8000421dd00 [if_config_tqg_0]
100008 D - 0xfffff8000421dc00 [softirq_0]
100009 D - 0xfffff8000421db00 [softirq_1]
100010 D - 0xfffff8000421da00 [thread taskq]
100012 D - 0xfffff8000421d800 [inm_free taskq]
100013 D - 0xfffff8000421d700 [kqueue_ctx taskq]
100014 D - 0xfffff8000421d600 [aiod_kick taskq]
100017 D - 0xfffff8000421d300 [in6m_free taskq]
100024 D - 0xfffff8000421d200 [firmware taskq]
100029 D - 0xfffff8000421c700 [crypto_0]
100030 D - 0xfffff8000421c700 [crypto_1]
100044 D - 0xfffff8000421ba00 [vtnet0 rxq 0]
100045 D - 0xfffff8000421b900 [vtnet0 txq 0]
100046 D - 0xfffff8000421b800 [vtnet0 rxq 1]
100047 D - 0xfffff8000421b700 [vtnet0 txq 1]
100049 D vtbslp 0xfffff800041e9b80 [virtio_balloon]
100053 D - 0xfffff8000421b500 [mca taskq]
100056 D - 0xffffffff81cdd561 [deadlkres]
100062 D - 0xfffff8000421c200 [acpi_task_0]
100063 D - 0xfffff8000421c200 [acpi_task_1]
100064 D - 0xfffff8000421c200 [acpi_task_2]
100066 D - 0xfffff8000421c100 [CAM taskq]
db> show all locks
Process 832 (syz-executor.3) thread 0xfffffe00257ec000 (100116)
exclusive sleep mutex sctp-inp (inp) r = 0 (0xfffff8001d9b4e68) locked @ /syzkaller/managers/main/kernel/sys/netinet/sctp_pcb.c:3333
exclusive rw sctp-info (sctp-info) r = 0 (0xfffffe000493d2d8) locked @ /syzkaller/managers/main/kernel/sys/netinet/sctp_pcb.c:3331
exclusive sleep mutex sctp-create (inp_create) r = 0 (0xfffff8001d9b4e88) locked @ /syzkaller/managers/main/kernel/sys/netinet/sctp_pcb.c:3330
Process 831 (syz-executor.0) thread 0xfffffe00257f3100 (100131)
exclusive sleep mutex sctp-create (inp_create) r = 0 (0xfffff8001d9b4988) locked @ /syzkaller/managers/main/kernel/sys/netinet/sctp_usrreq.c:7002
Process 495 (syslogd) thread 0xfffffe0023b51100 (100099)
exclusive lockmgr bufwait (bufwait) r = 0 (0xfffffe0003e0fe00) locked @ /syzkaller/managers/main/kernel/sys/kern/vfs_bio.c:3870
exclusive lockmgr ufs (ufs) r = 0 (0xfffff8001d242830) locked @ /syzkaller/managers/main/kernel/sys/kern/vfs_syscalls.c:3491

Process 12 (intr) thread 0xfffffe00049cee00 (100020)

exclusive sleep mutex sctp-tcb (tcb) r = 0 (0xfffffe00258bb380) locked @ /syzkaller/managers/main/kernel/sys/netinet/sctp_pcb.c:1473
Process 12 (intr) thread 0xfffffe00049e5100 (100038)
exclusive sleep mutex vtscsi0 (VTSCSI Lock) r = 0 (0xfffff8000421bc08) locked @ /syzkaller/managers/main/kernel/sys/dev/virtio/scsi/virtio_scsi.c:2231

db> show malloc
Type InUse MemUse Requests
pf_hash 5 11524K 5
devbuf 4214 4854K 4242
tcp_hpts 5 3201K 5
vtbuf 24 1968K 46
sysctloid 28170 1644K 28234
kobj 335 1340K 494

newblk 31 1032K 471
vfscache 4 1025K 4
pcb 29 546K 129
inodedep 35 529K 105

ufs_quota 1 512K 1
vfs_hash 1 512K 1
callout 2 512K 2
intr 4 472K 4

subproc 121 250K 905

acpica 1674 185K 52414
vnet_data 1 168K 1

filedesc 22 153K 90
pagedep 14 132K 42

tfo_ccache 1 128K 1
sem 4 106K 4
DEVFS1 105 105K 122
linker 254 99K 294

bus 975 79K 3020
mtx_pool 2 72K 2
syncache 1 68K 1
acpitask 1 64K 1
ddb_capture 1 64K 1
module 505 64K 505

umtx 288 36K 288
kdtrace 176 34K 1756
temp 35 33K 1783
hostcache 1 32K 1
shm 1 32K 1

DEVFS3 124 31K 134
msg 4 30K 4
DEVFS_RULE 56 27K 56

gtaskqueue 18 26K 18
ifaddr 72 24K 72
vmem 3 22K 5
kbdmux 6 22K 6
BPF 14 19K 14
lltable 47 18K 47

ufs_mount 5 17K 6
proc 3 17K 3

tty 16 16K 16
tidhash 1 16K 1
ithread 99 16K 99
ether_multi 172 14K 177
bus-sc 30 14K 1405
KTRACE 100 13K 100
ifnet 7 13K 7

kenv 92 12K 92
eventhandler 132 12K 132
in6_multi 89 11K 89
pfs_nodes 20 10K 20
GEOM 60 10K 489
rman 82 10K 423

UART 12 9K 12
devstat 4 9K 4
rpc 2 8K 2

bmsafemap 1 8K 75
shmfd 1 8K 1

pfs_vncache 1 8K 1
audit_evclass 233 8K 291

sctp_atcl 13 7K 69
sctp_stro 6 6K 34

CAM DEV 3 6K 510

kqueue 56 6K 842

vt 11 6K 11
sglist 5 6K 5
CAM queue 5 6K 1528
taskqueue 48 6K 48

plimit 20 5K 366
cred 20 5K 242
sctp_timw 19 5K 19
ufs_dirhash 24 5K 24
pf_ifnet 10 5K 19

UMA 251 5K 251
memdesc 1 4K 1
MCA 32 4K 32
evdev 4 4K 4

ip6ndp 20 4K 21
routetbl 24 4K 24
hhook 13 4K 13
diradd 25 4K 71
mkdir 23 3K 60
session 23 3K 36
pgrp 23 3K 36

acpisem 22 3K 22
terminal 11 3K 11

dirrem 10 3K 38
proc-args 42 3K 542
uidinfo 3 3K 9

sctp_ifa 17 3K 19
local_apic 1 2K 1
io_apic 1 2K 1

CAM CCB 1 2K 1878
indirdep 8 2K 10
ipsec-saq 2 2K 2
select 15 2K 15
Unitno 29 2K 46

CAM XPT 22 2K 543

lockf 15 2K 22
sctp_stri 3 2K 24
newdirblk 12 2K 30
in_multi 6 2K 7
freefile 10 2K 36

ipsecpolicy 2 2K 2
acpidev 20 2K 20
msi 9 2K 9
clone 9 2K 9
tun 7 2K 7
softdep 1 1K 1
sahead 1 1K 1
secasvar 1 1K 1
nhops 6 1K 8

vnodemarker 2 1K 18

NFSD session 1 1K 1

sctp_atky 19 1K 114

CAM periph 4 1K 271

ipsec 3 1K 3
sctp_ifn 6 1K 19

mld 6 1K 6
igmp 6 1K 6
toponodes 6 1K 6
isadev 6 1K 6
mount 16 1K 89
pci_link 10 1K 10

encap_export_host 12 1K 12
crypto 3 1K 3

pfil 4 1K 4
chacha20random 1 1K 1
CAM SIM 2 1K 2
cdev 2 1K 2

DEVFSP 6 1K 6
osd 3 1K 9
inpcbpolicy 8 1K 170

vnodes 1 1K 1
ktls 1 1K 1
NFSD lckfile 1 1K 1
NFSD V4client 1 1K 1
DEVFS 9 1K 10
feeder 7 1K 7

sctp_athm 13 1K 81
sctp_map 12 1K 68
loginclass 3 1K 7

prison 6 1K 6
CAM dev queue 2 1K 2
CAM I/O Scheduler 1 1K 1
apmdev 1 1K 1
atkbddev 2 1K 2
CAM path 4 1K 1034

freework 1 1K 36
freefrag 1 1K 6
tcpfunc 2 1K 2
soname 5 1K 3132
pmchooks 1 1K 1
nexusdev 5 1K 5

sctp_vrf 1 1K 1
entropy 2 1K 42
vnet 1 1K 1
acpiintr 1 1K 1
pmc 1 1K 1
cpus 2 1K 2
vnet_data_free 1 1K 1
Per-cpu 1 1K 1
p1003.1b 1 1K 1

filecaps 1 1K 67
pf_table 0 0K 0
pf_rule 0 0K 0

pf_altq 0 0K 0
pf_osfp 0 0K 0
pf_temp 0 0K 0

sctp_mcore 0 0K 0
sctp_socko 0 0K 0
sctp_iter 0 0K 6

sctp_mvrf 0 0K 0
sctp_cpal 0 0K 0
sctp_cmsg 0 0K 0
sctp_stre 0 0K 0
sctp_athi 0 0K 0

sctp_a_it 0 0K 6
sctp_aadr 0 0K 0

PUC 0 0K 0
ppbusdev 0 0K 0
agtiapi_MemAlloc malloc 0 0K 0
osti_cacheable 0 0K 0
tempbuff 0 0K 0
tempbuff 0 0K 0
UMAHash 0 0K 0
ag_tgt_map_t malloc 0 0K 0
ag_slr_map_t malloc 0 0K 0
vm_pgdata 0 0K 0
jblocks 0 0K 0

savedino 0 0K 14

sentinel 0 0K 0
jfsync 0 0K 0
jtrunc 0 0K 0

sbdep 0 0K 7

jsegdep 0 0K 0
jseg 0 0K 0
jfreefrag 0 0K 0
jfreeblk 0 0K 0
jnewblk 0 0K 0
jmvref 0 0K 0
jremref 0 0K 0
jaddref 0 0K 0
freedep 0 0K 0

freeblks 0 0K 35
allocindir 0 0K 0

allocdirect 0 0K 0
ufs_trim 0 0K 0
mactemp 0 0K 0
audit_trigger 0 0K 0
audit_pipe_presel 0 0K 0
audit_pipeent 0 0K 0
audit_pipe 0 0K 0
audit_evname 0 0K 0
audit_bsm 0 0K 0
audit_gidset 0 0K 0
audit_text 0 0K 0
audit_path 0 0K 0
audit_data 0 0K 0
audit_cred 0 0K 0
xform 0 0K 0
lDevFlags * malloc 0 0K 0
NLM 0 0K 0
ipsec-spdcache 0 0K 0
ipsec-reg 0 0K 0
ipsec-misc 0 0K 0
ipsecrequest 0 0K 0

ip6opt 0 0K 3

statfs 0 0K 209

export_host 0 0K 0
cl_savebuf 0 0K 2
ag_device_t malloc 0 0K 0
STLock malloc 0 0K 0
CCB List 0 0K 0
sr_iov 0 0K 0
OCS 0 0K 0
OCS 0 0K 0
nvme 0 0K 0
nvd 0 0K 0
netmap 0 0K 0
mwldev 0 0K 0
MVS driver 0 0K 0
CAM ccb queue 0 0K 0
mrsasbuf 0 0K 0
mpt_user 0 0K 0
mps_user 0 0K 0
biobuf 0 0K 0
aios 0 0K 0
lio 0 0K 0
acl 0 0K 0
MPSSAS 0 0K 0

mbuf_tag 0 0K 109

accf 0 0K 0
pts 0 0K 0

iov 0 0K 13493
ioctlops 0 0K 94

Witness 0 0K 0
stack 0 0K 0
mps 0 0K 0
mpr_user 0 0K 0
MPRSAS 0 0K 0
mpr 0 0K 0
mfibuf 0 0K 0
md_sectors 0 0K 0
sbuf 0 0K 288
md_disk 0 0K 0
firmware 0 0K 0
compressor 0 0K 0
malodev 0 0K 0
SWAP 0 0K 0
LED 0 0K 0

sysctltmp 0 0K 595

sysctl 0 0K 1
ekcd 0 0K 0
dumper 0 0K 0
sendfile 0 0K 0
rctl 0 0K 0
ix_sriov 0 0K 0
aacraidcam 0 0K 0
ix 0 0K 0
ipsbuf 0 0K 0
iirbuf 0 0K 0
cache 0 0K 0
aacraid_buf 0 0K 0

kcovinfo 0 0K 0

mbuf_cluster 2048 9526 126 9526 0 254 19767296 0
mbuf_packet 256 8197 1201 23337 0 254 2405888 0
512 512 4188 44 4204 0 30 2166784 0
BUF TRIE 144 168 13300 513 0 62 1939392 0
4096 4096 396 2 1723 0 2 1630208 0
128 128 9207 124 9219 0 126 1194368 0
sctp_asoc 2288 6 504 34 0 254 1166880 0
mbuf_jumbo_page 4096 0 254 10 0 254 1040384 0
pbuf 832 0 985 0 0 2 819520 0
UMA Slabs 0 112 6527 19 6527 0 126 733152 0
sctp_ep 1280 4 506 23 0 254 652800 0
tcpcb 1040 3 514 7 0 254 537680 0
socket 960 20 488 1283 0 254 487680 0
65536 65536 6 0 6 0 1 393216 0
sctp_raddr 736 21 496 94 0 254 380512 0
RADIX NODE 144 2244 189 21661 0 62 350352 0
VNODE 496 540 60 578 0 30 297600 0
256 Bucket 2048 134 10 367 0 8 294912 0
VM OBJECT 264 996 54 13653 0 30 277200 0
mbuf 256 457 570 2905 0 254 262912 0
THREAD 1792 124 20 136 0 8 258048 0
tcp_inpcb 488 3 509 7 0 254 249856 0
udp_inpcb 488 4 508 159 0 254 249856 0
DEVCTL 1024 14 194 125 0 0 212992 0
64 64 2707 380 2710 0 254 197568 0
128 128 1266 253 27437 0 126 194432 0
16 16 11828 172 11886 0 254 192000 0

UMA Zones 768 226 1 226 0 16 174336 0

16384 16384 8 2 42 0 1 163840 0
32 32 4432 482 4553 0 254 157248 0
FFS2 dinode 256 506 64 542 0 62 145920 0
65536 65536 0 2 118 0 1 131072 0

65536 65536 2 0 2 0 1 131072 0

65536 65536 0 2 57 0 1 131072 0
1024 1024 110 18 127 0 16 131072 0
unpcb 256 8 502 1063 0 254 130560 0
256 256 93 417 583 0 62 130560 0
ripcb 488 1 255 4 0 254 124928 0
MAP ENTRY 96 1013 247 41273 0 126 120960 0
ksiginfo 112 41 1003 64 0 126 116928 0
vmem btag 56 1858 218 1858 0 254 116256 0
128 128 679 220 1064 0 126 115072 0
VMSPACE 2536 31 11 816 0 4 106512 0
FFS inode 160 506 119 542 0 62 100000 0
32768 32768 3 0 3 0 1 98304 0
2048 2048 9 39 2695 0 8 98304 0
S VFS Cache 104 612 285 1166 0 126 93288 0
8192 8192 8 3 117 0 1 90112 0
PROC 1312 53 13 837 0 8 86592 0
128 Bucket 1024 44 39 244 0 16 84992 0

UMA Kegs 384 212 4 212 0 30 82944 0

256 256 240 75 1848 0 62 80640 0
512 512 96 56 173 0 30 77824 0
filedesc0 1080 54 16 838 0 8 75600 0
4096 4096 14 4 27 0 2 73728 0
g_bio 408 4 176 5166 0 30 73440 0
64 64 512 559 14700 0 254 68544 0
128 128 327 200 463 0 126 67456 0
128 128 377 150 958 0 126 67456 0

65536 65536 1 0 1 0 1 65536 0

16384 16384 3 1 139 0 1 65536 0
4096 4096 14 0 14 0 2 57344 0
64 Bucket 512 62 42 448 0 30 53248 0
64 64 505 314 957 0 254 52416 0
256 256 140 55 153 0 62 49920 0
32 Bucket 256 37 158 402 0 62 49920 0

DIRHASH 1024 34 14 34 0 16 49152 0

NAMEI 1024 0 48 12663 0 16 49152 0
16384 16384 3 0 3 0 1 49152 0
2048 2048 5 19 25 0 8 49152 0
1024 1024 34 14 79 0 16 49152 0
512 512 59 37 997 0 30 49152 0
512 512 42 54 113 0 30 49152 0
syncache 168 0 264 5 0 254 44352 0
sctp_chunk 152 11 249 56 0 254 39520 0
pipe 760 20 30 311 0 16 38000 0
64 pcpu 8 4133 475 4137 0 254 36864 0
selfd 64 26 541 3866 0 254 36288 0
64 64 114 453 135 0 254 36288 0
64 64 135 432 934 0 254 36288 0
64 64 106 461 989 0 254 36288 0
64 64 31 536 87 0 254 36288 0
8 Bucket 80 49 401 7063 0 126 36000 0
128 128 140 139 638 0 126 35712 0
128 128 36 243 44 0 126 35712 0
128 128 40 239 56 0 126 35712 0
routing nhops 256 27 108 38 0 62 34560 0

ttyoutq 256 72 63 160 0 62 34560 0

256 256 14 121 56 0 62 34560 0
256 256 74 61 695 0 62 34560 0
256 256 32 103 201 0 62 34560 0
256 256 26 109 398 0 62 34560 0
256 256 62 73 384 0 62 34560 0
32768 32768 0 1 112 0 1 32768 0
16384 16384 1 1 4 0 1 32768 0
8192 8192 4 0 4 0 1 32768 0
2048 2048 3 13 3 0 8 32768 0
2048 2048 9 7 9 0 8 32768 0
2048 2048 6 10 6 0 8 32768 0
1024 1024 6 26 180 0 16 32768 0
1024 1024 7 25 12 0 16 32768 0
1024 1024 8 24 9 0 16 32768 0
1024 1024 6 26 1009 0 16 32768 0
512 512 13 51 38 0 30 32768 0

mt_stats_zone 64 445 67 445 0 254 32768 0

ttyinq 160 135 65 300 0 62 32000 0

cpuset 104 7 272 7 0 126 29016 0

sctp_laddr 48 0 588 16 0 254 28224 0

hostcache 96 1 293 1 0 254 28224 0

32 32 343 539 645 0 254 28224 0
4 Bucket 48 11 577 5485 0 254 28224 0
KMAP ENTRY 96 12 279 12 0 126 27936 0
clpbuf 832 0 32 101 0 16 26624 0
TURNSTILE 136 145 44 145 0 62 25704 0

8192 8192 3 0 3 0 1 24576 0

4096 4096 4 2 73 0 2 24576 0
rtentry 176 34 104 38 0 62 24288 0
rl_entry 40 37 569 37 0 254 24240 0
Files 80 114 186 7003 0 126 24000 0

Mountpoints 2816 2 6 2 0 4 22528 0

SLEEPQUEUE 88 145 111 145 0 126 22528 0
udpcb 32 2 628 159 0 254 20160 0
PWD 32 17 613 122 0 254 20160 0
64 64 189 126 218 0 254 20160 0
32 32 79 551 92 0 254 20160 0
32 32 89 541 942 0 254 20160 0
32 32 27 603 149 0 254 20160 0
32 32 65 565 757 0 254 20160 0
32 32 26 604 2654 0 254 20160 0
32 32 34 596 1107 0 254 20160 0
16 Bucket 144 37 103 135 0 62 20160 0
2 Bucket 32 44 586 7904 0 254 20160 0
procdesc 136 1 144 6 0 62 19720 0

epoch_record pcpu 256 4 60 4 0 62 16384 0
16384 16384 1 0 1 0 1 16384 0

8192 8192 1 1 3 0 1 16384 0
8192 8192 2 0 2 0 1 16384 0
8192 8192 2 0 2 0 1 16384 0
4096 4096 1 3 214 0 2 16384 0

2048 2048 2 6 2 0 8 16384 0

2048 2048 3 5 194 0 8 16384 0
1024 1024 1 15 1 0 16 16384 0
512 512 2 30 3 0 30 16384 0
vtnet_tx_hdr 24 0 668 1081 0 254 16032 0

mt_zone 24 445 223 445 0 254 16032 0

kenv 258 3 57 998 0 30 15480 0

FPU_save_area 832 1 17 1 0 16 14976 0
vmem 1856 1 7 1 0 8 14848 0

KNOTE 160 26 49 182 0 62 12000 0
16 16 15 735 128 0 254 12000 0
16 16 290 460 692 0 254 12000 0
16 16 32 718 141 0 254 12000 0
16 16 28 722 56 0 254 12000 0
16 16 181 569 1122 0 254 12000 0
16 16 15 735 23945 0 254 12000 0
16 16 49 701 155 0 254 12000 0

SMR CPU 32 2 253 2 0 254 8160 0

SMR SHARED 24 2 253 2 0 254 6120 0
UMA Slabs 1 176 9 13 9 0 62 3872 0
int pcpu 4 34 478 34 0 254 2048 0
FFS1 dinode 128 0 0 0 0 126 0 0
swblk 136 0 0 0 0 62 0 0
swpctrie 144 0 0 0 0 62 0 0
sctp_asconf_ack 48 0 0 0 0 254 0 0
sctp_asconf 40 0 0 0 0 254 0 0

sctp_stream_msg_out 112 0 0 0 0 254 0 0
sctp_readq 152 0 0 0 0 254 0 0

pf state scrubs 40 0 0 0 0 254 0 0
pf frag entries 40 0 0 0 0 254 0 0
pf frags 248 0 0 0 0 62 0 0
pf table entries 160 0 0 0 0 62 0 0
pf table entry counters 64 0 0 0 0 254 0 0
pf source nodes 136 0 0 0 0 254 0 0
pf state keys 88 0 0 0 0 126 0 0
pf states 296 0 0 0 0 254 0 0

pf tags 104 0 0 0 0 126 0 0

pf mtags 48 0 0 0 0 254 0 0

tcp_bbr_pcb 832 0 0 0 0 16 0 0
tcp_bbr_map 128 0 0 0 0 126 0 0
udplite_inpcb 488 0 0 0 0 254 0 0

tcp_log_node 120 0 0 0 0 126 0 0
tcp_log_bucket 176 0 0 0 0 62 0 0
tcp_log 416 0 0 0 0 254 0 0

tcpreass 48 0 0 0 0 254 0 0

tfo_ccache_entries 80 0 0 0 0 126 0 0
tfo 4 0 0 0 0 254 0 0
sackhole 32 0 0 0 0 254 0 0
tcptw 88 0 0 0 0 254 0 0
ipq 56 0 0 0 0 254 0 0
IPsec SA lft_c 16 0 0 0 0 254 0 0
itimer 352 0 0 0 0 30 0 0
AIOLIO 280 0 0 0 0 30 0 0
AIOCB 752 0 0 0 0 16 0 0
AIOP 32 0 0 0 0 254 0 0
AIO 208 0 0 0 0 62 0 0
TMPFS node 232 0 0 0 0 62 0 0
TMPFS dirent 64 0 0 0 0 254 0 0
NCLNODE 592 0 0 0 0 16 0 0

rentr 24 0 0 0 0 254 0 0

LTS VFS Cache 360 0 0 0 0 30 0 0

L VFS Cache 320 0 0 0 0 30 0 0

8192 8192 0 0 0 0 1 0 0
8192 8192 0 0 0 0 1 0 0

4096 4096 0 0 0 0 2 0 0
4096 4096 0 0 0 0 2 0 0
4096 4096 0 0 0 0 2 0 0

2048 2048 0 0 0 0 8 0 0

1024 1024 0 0 0 0 16 0 0
512 512 0 0 0 0 30 0 0
512 512 0 0 0 0 30 0 0

syzbot

unread,

May 21, 2022, 7:51:21 PM5/21/22

to syzkaller-f...@googlegroups.com

syzbot has found a reproducer for the following issue on:

HEAD commit: 58c63d5e37cb bsdinstall netconfig_ipv6: Replace dialog wit..
git tree: freebsd-src
console output: https://syzkaller.appspot.com/x/log.txt?x=1554ed55f00000
dashboard link: https://syzkaller.appspot.com/bug?extid=b6ce0aec16f5fdab3282
syz repro: https://syzkaller.appspot.com/x/repro.syz?x=116b575ef00000
C reproducer: https://syzkaller.appspot.com/x/repro.c?x=142b9e61f00000

IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+b6ce0a...@syzkaller.appspotmail.com

panic: Assertion v != tid failed at /syzkaller/managers/main/kernel/sys/kern/kern_mutex.c:920
cpuid = 0
time = 1653176938
KDB: stack backtrace:
db_trace_self_wrapper() at db_trace_self_wrapper+0xc7/frame 0xfffffe00541893d0
kdb_backtrace() at kdb_backtrace+0xd3/frame 0xfffffe0054189530
vpanic() at vpanic+0x2b8/frame 0xfffffe0054189610
panic() at panic+0xb5/frame 0xfffffe00541896d0
thread_lock_flags_() at thread_lock_flags_+0x3f2/frame 0xfffffe00541897f0
propagate_priority() at propagate_priority+0xde/frame 0xfffffe0054189840
turnstile_wait() at turnstile_wait+0x66d/frame 0xfffffe00541898b0
__rw_wlock_hard() at __rw_wlock_hard+0x93b/frame 0xfffffe0054189a10
_rw_wlock_cookie() at _rw_wlock_cookie+0x1d7/frame 0xfffffe0054189ad0
rip6_bind() at rip6_bind+0x3cb/frame 0xfffffe0054189bc0
sobind() at sobind+0xd5/frame 0xfffffe0054189c10
kern_bindat() at kern_bindat+0x25e/frame 0xfffffe0054189cf0
sys_bind() at sys_bind+0xfb/frame 0xfffffe0054189d30
amd64_syscall() at amd64_syscall+0x410/frame 0xfffffe0054189f30
fast_syscall_common() at fast_syscall_common+0xf8/frame 0xfffffe0054189f30
--- syscall (0, FreeBSD ELF64, nosys), rip = 0x2b423a, rsp = 0x828d23f78, rbp = 0x828d23fb0 ---
KDB: enter: panic
[ thread pid 791 tid 100114 ]
Stopped at kdb_enter+0x6b: movq $0,0x275a77a(%rip)

db>
db> set $lines = 0
db> set $maxwidth = 0
db> show registers
cs 0x20
ds 0x3b

es 0x3b
fs 0x13
gs 0x1b
ss 0x28
rax 0x12
rcx 0xfffffe00033eee30
rdx 0xdffff7c000000000
rbx 0
rsp 0xfffffe0054189510
rbp 0xfffffe0054189530
rsi 0x1
rdi 0
r8 0x3
r9 0xffffffff
r10 0
r11 0xfffffe0058becc50
r12 0xfffffe0058bec740
r13 0xfffffe0054189501
r14 0xffffffff82b50e00 .str.26
r15 0xffffffff82b50e00 .str.26
rip 0xffffffff8171991b kdb_enter+0x6b
rflags 0x46
kdb_enter+0x6b: movq $0,0x275a77a(%rip)
db> show proc
Process 791 (syz-executor2302483) at 0xfffffe0092d95548:
state: NORMAL
uid: 0 gids: 0, 0, 5
parent: pid 790 at 0xfffffe00579ac000
ABI: FreeBSD ELF64
flag: 0x10000080 flag2: 0
arguments: ./syz-executor2302483953
reaper: 0xfffffe0053de1000 reapsubtree: 1
sigparent: 20
vmspace: 0xfffffe009265e000
(map 0xfffffe009265e000)
(map.pmap 0xfffffe009265e0c0)
(pmap 0xfffffe009265e128)
threads: 3
100113 S nanslp 0xffffffff83e41701 syz-executor2302483
100114 L *rawinp 0xfffffe005732c9c0 syz-executor2302483
100115 L *rip 0xfffffe005732ca80 syz-executor2302483

db> ps
pid ppid pgrp uid state wmesg wchan cmd

791 790 788 0 L (threaded) syz-executor2302483
100113 S nanslp 0xffffffff83e41701 syz-executor2302483
100114 L *rawinp 0xfffffe005732c9c0 syz-executor2302483
100115 L *rip 0xfffffe005732ca80 syz-executor2302483
790 788 788 0 S nanslp 0xffffffff83e41701 syz-executor2302483
788 786 788 0 Ss pause 0xfffffe008fed15f8 csh
786 688 786 0 Ss select 0xfffffe0056f6a840 sshd
754 1 754 0 Ss+ ttyin 0xfffffe00574764b0 getty
753 1 753 0 Ss+ ttyin 0xfffffe0057472cb0 getty
752 1 752 0 Ss+ ttyin 0xfffffe0057a78cb0 getty
751 1 751 0 Ss+ ttyin 0xfffffe0057a790b0 getty
750 1 750 0 Ss+ ttyin 0xfffffe0057a794b0 getty
749 1 749 0 Ss+ ttyin 0xfffffe0057a798b0 getty
748 1 748 0 Ss+ ttyin 0xfffffe0057a79cb0 getty
747 1 747 0 Ss+ ttyin 0xfffffe0057a7a0b0 getty
746 1 746 0 Ss+ ttyin 0xfffffe0057a7a4b0 getty
692 1 692 0 Ss nanslp 0xffffffff83e41700 cron
688 1 688 0 Ss select 0xfffffe0056f6ab40 sshd
501 1 501 0 Ds bo_wwai 0xfffffe008fe9ada8 syslogd
430 1 430 0 Ss select 0xfffffe0056f6b140 devd
429 1 429 65 Ss select 0xfffffe0056f6aec0 dhclient
344 1 344 0 Ss select 0xfffffe0056f6b040 dhclient
341 1 341 0 Ss select 0xfffffe0056f6b940 dhclient
17 0 0 0 DL syncer 0xffffffff83f66f60 [syncer]
16 0 0 0 DL vlruwt 0xfffffe00579aca90 [vnlru]
15 0 0 0 DL (threaded) [bufdaemon]
100079 D psleep 0xffffffff83f65560 [bufdaemon]
100082 D - 0xffffffff83211f80 [bufspacedaemon-0]
100094 D sdflush 0xfffffe00574720e8 [/ worker]
9 0 0 0 DL psleep 0xffffffff83f99000 [vmdaemon]
8 0 0 0 DL (threaded) [pagedaemon]
100077 D psleep 0xffffffff83f8ceb8 [dom0]
100080 D launds 0xffffffff83f8cec4 [laundry: dom0]
100081 D umarcl 0xffffffff81e471e0 [uma]
7 0 0 0 DL - 0xffffffff83bfdd28 [rand_harvestq]
6 0 0 0 DL pftm 0xffffffff84969550 [pf purge]
5 0 0 0 DL waiting 0xffffffff847a44a0 [sctp_iterator]
4 0 0 0 DL (threaded) [cam]
100044 D - 0xffffffff83aa0cc0 [doneq0]
100045 D - 0xffffffff83aa0c40 [async]
100076 D - 0xffffffff83aa0ac0 [scanner]
14 0 0 0 DL seqstat 0xfffffe0053fd7488 [sequencer 00]
3 0 0 0 DL (threaded) [crypto]
100040 D crypto_ 0xffffffff83f886e0 [crypto]
100041 D crypto_ 0xfffffe0053ecd830 [crypto returns 0]
100042 D crypto_ 0xfffffe0053ecd880 [crypto returns 1]

13 0 0 0 DL (threaded) [geom]

100035 D - 0xffffffff83e16d00 [g_event]
100036 D - 0xffffffff83e16d20 [g_up]
100037 D - 0xffffffff83e16d40 [g_down]
2 0 0 0 WL (threaded) [clock]
100029 I [clock (0)]
100030 I [clock (1)]
12 0 0 0 WL (threaded) [intr]
100015 I [swi5: fast taskq]
100018 I [swi6: task queue]
100019 I [swi6: Giant taskq]
100031 I [swi1: netisr 0]
100032 I [swi1: hpts]
100033 I [swi1: hpts]
100046 I [irq24: virtio_pci0]
100047 I [irq25: virtio_pci0]
100048 I [irq26: virtio_pci0]
100049 I [irq27: virtio_pci0]
100050 I [irq28: virtio_pci1]
100051 I [irq29: virtio_pci1]
100052 I [irq30: virtio_pci1]
100053 I [irq31: virtio_pci1]
100054 I [irq32: virtio_pci1]
100059 I [irq33: virtio_pci2]
100060 I [irq34: virtio_pci2]
100061 I [irq35: virtio_pci2]
100063 I [irq1: atkbd0]
100064 I [irq12: psm0]
100065 I [swi0: uart uart++]
100069 I [swi1: pf send]

11 0 0 0 RL (threaded) [idle]
100003 CanRun [idle: cpu0]

100004 Run CPU 1 [idle: cpu1]
1 0 1 0 SLs wait 0xfffffe0053de1000 [init]
10 0 0 0 DL audit_w 0xffffffff83f891c0 [audit]

0 0 0 0 DLs (threaded) [kernel]

100000 D swapin 0xffffffff83e17700 [swapper]
100005 D - 0xfffffe0053e84100 [if_config_tqg_0]
100006 D - 0xfffffe0053e84000 [softirq_0]
100007 D - 0xfffffe0053e83e00 [softirq_1]
100008 D - 0xfffffe0053e83d00 [if_io_tqg_0]
100009 D - 0xfffffe0053e83c00 [if_io_tqg_1]
100010 D - 0xfffffe000795a100 [inm_free taskq]
100011 D - 0xfffffe000795a000 [linuxkpi_irq_wq]
100012 D - 0xfffffe0007959e00 [in6m_free taskq]
100013 D - 0xfffffe0007959d00 [deferred_unmount ta]
100014 D - 0xfffffe0007959c00 [thread taskq]
100016 D - 0xfffffe0007959a00 [kqueue_ctx taskq]
100017 D - 0xfffffe0007959900 [pci_hp taskq]
100020 D - 0xfffffe0007959600 [aiod_kick taskq]
100021 D - 0xfffffe0007959500 [linuxkpi_short_wq_0]
100022 D - 0xfffffe0007959500 [linuxkpi_short_wq_1]
100023 D - 0xfffffe0007959500 [linuxkpi_short_wq_2]
100024 D - 0xfffffe0007959500 [linuxkpi_short_wq_3]
100025 D - 0xfffffe0007959400 [linuxkpi_long_wq_0]
100026 D - 0xfffffe0007959400 [linuxkpi_long_wq_1]
100027 D - 0xfffffe0007959400 [linuxkpi_long_wq_2]
100028 D - 0xfffffe0007959400 [linuxkpi_long_wq_3]
100034 D - 0xfffffe0007959300 [firmware taskq]
100038 D - 0xfffffe0007959200 [crypto_0]
100039 D - 0xfffffe0007959200 [crypto_1]
100055 D - 0xfffffe0007959000 [vtnet0 rxq 0]
100056 D - 0xfffffe0007958e00 [vtnet0 txq 0]
100057 D - 0xfffffe0007958d00 [vtnet0 rxq 1]
100058 D - 0xfffffe0007958c00 [vtnet0 txq 1]
100062 D vtbslp 0xfffffe0056f6c000 [virtio_balloon]
100066 D - 0xffffffff82b56c81 [deadlkres]
100070 D - 0xfffffe000795a200 [mca taskq]
100071 D - 0xfffffe00585ef600 [acpi_task_0]
100072 D - 0xfffffe00585ef600 [acpi_task_1]
100073 D - 0xfffffe00585ef600 [acpi_task_2]
100075 D - 0xfffffe0007959100 [CAM taskq]
db> show all locks
Process 791 (syz-executor2302483) thread 0xfffffe0058bec740 (100114)
exclusive sleep mutex rip (rip) r = 0 (0xfffffe0053c2ba18) locked @ /syzkaller/managers/main/kernel/sys/netinet6/raw_ip6.c:763
Process 791 (syz-executor2302483) thread 0xfffffe0058bec020 (100115)
exclusive rw rawinp (rawinp) r = 0 (0xfffffe00925136b0) locked @ /syzkaller/managers/main/kernel/sys/netinet6/raw_ip6.c:803
Process 501 (syslogd) thread 0xfffffe008fea0c80 (100097)
exclusive lockmgr ufs (ufs) r = 0 (0xfffffe008fe9acb0) locked @ /syzkaller/managers/main/kernel/sys/kern/vfs_syscalls.c:3562

db> show malloc
Type InUse MemUse Requests
pf_hash 5 11524K 5

tcp_hpts 7 4801K 7
devbuf 4217 4323K 4245
sysctloid 35322 2081K 35393
vtbuf 24 1968K 46
kobj 328 1312K 490
newblk 131 1057K 593
vfscache 3 1025K 3
pcb 20 537K 41
inodedep 3 513K 73

ufs_quota 1 512K 1
vfs_hash 1 512K 1
callout 2 512K 2
intr 4 472K 4

acpica 1674 184K 57552
subproc 96 174K 850
vnet_data 1 168K 1
tidhash 3 141K 3
vmem 3 138K 4
linker 358 134K 386
pagedep 2 129K 20

tfo_ccache 1 128K 1
sem 4 106K 4

DEVFS1 105 105K 114
bus 995 81K 5208

mtx_pool 2 72K 2
syncache 1 68K 1

module 514 65K 514

acpitask 1 64K 1
ddb_capture 1 64K 1

temp 17 33K 1645
hostcache 1 32K 1
shm 1 32K 1
kdtrace 154 32K 908
DEVFS3 124 31K 134
umtx 242 31K 242
msg 4 30K 4

gtaskqueue 18 26K 18
kbdmux 6 22K 6

DEVFS_RULE 56 20K 56
BPF 10 18K 10
ufs_mount 4 17K 5

proc 3 17K 3
tty 16 16K 16

ithread 97 16K 97
bus-sc 34 15K 1681
KTRACE 100 13K 100
eventhandler 136 12K 136
kenv 95 12K 95
ifaddr 30 12K 32
rman 88 11K 431
GEOM 61 11K 490
routetbl 50 11K 176
CAM queue 5 11K 1528
cred 35 9K 273
bmsafemap 2 9K 42

UART 12 9K 12
devstat 4 9K 4

ksem 1 8K 1
rpc 2 8K 2

shmfd 1 8K 1
pfs_vncache 1 8K 1

pfs_nodes 20 8K 20
audit_evclass 237 8K 296
taskqueue 63 7K 63
sglist 5 7K 5

CAM DEV 3 6K 510

ufs_dirhash 24 5K 24
UMA 272 5K 272
vt 11 5K 11
ifnet 3 5K 3

memdesc 1 4K 1
MCA 32 4K 32

plimit 16 4K 383
filedesc 1 4K 1
evdev 4 4K 4
acpisem 28 4K 28
hhook 15 4K 17
ether_multi 40 4K 50
lltable 11 4K 11
pf_ifnet 5 3K 6
in6_multi 25 3K 25
terminal 11 3K 11
session 19 3K 35
kqueue 38 3K 794
pwddesc 38 3K 792
uidinfo 3 3K 12

local_apic 1 2K 1
io_apic 1 2K 1

fpukern_ctx 2 2K 2
ipsec-saq 2 2K 2
proc-args 57 2K 1763
lockf 16 2K 32
Unitno 27 2K 39

CAM XPT 22 2K 543

msi 12 2K 12
selfd 22 2K 9282

ipsecpolicy 2 2K 2
acpidev 20 2K 20

clone 9 2K 9

softdep 1 1K 1
sahead 1 1K 1
secasvar 1 1K 1

vnodemarker 2 1K 70

NFSD session 1 1K 1
CAM periph 4 1K 271

select 7 1K 29
ipsec 3 1K 3
nhops 6 1K 6

toponodes 6 1K 6
isadev 6 1K 6
mount 16 1K 89
pci_link 10 1K 10

sctp_ifa 5 1K 6
crypto 4 1K 4
ip6ndp 4 1K 5
encap_export_host 12 1K 12
in_multi 2 1K 4
pfil 4 1K 4
cdev 2 1K 2
chacha20random 1 1K 1
osd 7 1K 18
inpcbpolicy 11 1K 140
sctp_ifn 2 1K 6

NFSD lckfile 1 1K 1
NFSD V4client 1 1K 1

DEVFSP 4 1K 9
DEVFS 9 1K 10
freework 1 1K 26
indirdep 1 1K 3
mld 2 1K 2
igmp 2 1K 2
vnodes 1 1K 1

CAM SIM 2 1K 2

feeder 7 1K 7
tcpfunc 3 1K 3
CC Mem 3 1K 7

loginclass 3 1K 7
prison 6 1K 6

lkpikmalloc 5 1K 6
soname 6 1K 3481
aesni_data 2 1K 2
cryptodev 2 1K 49
nexusdev 8 1K 8

apmdev 1 1K 1
atkbddev 2 1K 2

diradd 1 1K 37
freefrag 1 1K 2

CAM dev queue 2 1K 2
CAM I/O Scheduler 1 1K 1

CAM path 4 1K 1034

procdesc 1 1K 6
pmchooks 1 1K 1
tun 3 1K 3
sctp_vrf 1 1K 1
vnet 1 1K 1
entropy 2 1K 36
pmc 1 1K 1
acpiintr 1 1K 1

cpus 2 1K 2
vnet_data_free 1 1K 1
Per-cpu 1 1K 1
p1003.1b 1 1K 1

filecaps 1 1K 70
mqdata 0 0K 0
filemon 0 0K 0
ipcomp 0 0K 0
esp 0 0K 0
ah 0 0K 0

pf_table 0 0K 0
pf_rule 0 0K 0

pf_altq 0 0K 0
pf_osfp 0 0K 0
pf_temp 0 0K 0

sctp_mcore 0 0K 0
sctp_socko 0 0K 0
sctp_iter 0 0K 4
sctp_mvrf 0 0K 0
sctp_timw 0 0K 0

sctp_cpal 0 0K 0
sctp_cmsg 0 0K 0
sctp_stre 0 0K 0
sctp_athi 0 0K 0

sctp_athm 0 0K 1
sctp_atky 0 0K 1
sctp_atcl 0 0K 1
sctp_a_it 0 0K 4
sctp_aadr 0 0K 0
sctp_stro 0 0K 0
sctp_stri 0 0K 0
sctp_map 0 0K 0
tcp_do 0 0K 0
tcp_fsb 0 0K 0

NFSCL layrecall 0 0K 0
NFSCL session 0 0K 0

madt_table 0 0K 2
smartpqi 0 0K 0

NFSCL sockreq 0 0K 0
NFSCL devinfo 0 0K 0
NFSCL flayout 0 0K 0

ixl 0 0K 0

NFSCL layout 0 0K 0
NFSD rollback 0 0K 0

NFSCL diroff 0 0K 0

NEWdirectio 0 0K 0
NEWNFSnode 0 0K 0
NFSCL lck 0 0K 0
NFSCL lckown 0 0K 0

ice-resmgr 0 0K 0
ice-osdep 0 0K 0
ice 0 0K 0

iavf 0 0K 0
axgbe 0 0K 0

NFSCL client 0 0K 0
NFSCL deleg 0 0K 0
NFSCL open 0 0K 0
NFSCL owner 0 0K 0
NFS fh 0 0K 0
NFS req 0 0K 0
NFSD usrgroup 0 0K 0
NFSD string 0 0K 0
NFSD V4lock 0 0K 0

xen_intr 0 0K 0

NFSD V4state 0 0K 0

xen_hvm 0 0K 0
legacydrv 0 0K 0

bounce 0 0K 0
busdma 0 0K 0
qpidrv 0 0K 0

NFSD srvcache 0 0K 0
msdosfs_fat 0 0K 0

dmar_idpgtbl 0 0K 0
dmar_dom 0 0K 0
dmar_ctx 0 0K 0

msdosfs_mount 0 0K 0
msdosfs_node 0 0K 0

isci 0 0K 0
iommu_dmamap 0 0K 0

hyperv_socket 0 0K 0
bxe_ilt 0 0K 0
xenbus 0 0K 0

DEVFS4 0 0K 0
vm_fictitious 0 0K 0

DEVFS2 0 0K 0
gntdev 0 0K 0
privcmd_dev 0 0K 0
evtchn_dev 0 0K 0
xenstore 0 0K 0
scsi_pass 0 0K 0
ciss_data 0 0K 0
xnb 0 0K 0

xen_acpi 0 0K 0

xbbd 0 0K 0
xbd 0 0K 0

UMAHash 0 0K 0

Balloon 0 0K 0
sysmouse 0 0K 0

vm_pgdata 0 0K 0
jblocks 0 0K 0

savedino 0 0K 18

sentinel 0 0K 0
jfsync 0 0K 0
jtrunc 0 0K 0

sbdep 0 0K 6

jsegdep 0 0K 0
jseg 0 0K 0
jfreefrag 0 0K 0
jfreeblk 0 0K 0
jnewblk 0 0K 0
jmvref 0 0K 0
jremref 0 0K 0
jaddref 0 0K 0
freedep 0 0K 0

newdirblk 0 0K 8
dirrem 0 0K 28
mkdir 0 0K 16
freefile 0 0K 26
freeblks 0 0K 25
allocindir 0 0K 0

vtfont 0 0K 0
BACKLIGHT 0 0K 0

ath_hal 0 0K 0
athdev 0 0K 0
ata_pci 0 0K 0
ata_dma 0 0K 0
ata_generic 0 0K 0

pvscsi 0 0K 0
scsi_da 0 0K 69

ata_da 0 0K 0
scsi_ch 0 0K 0
scsi_cd 0 0K 0

ktls_ocf 0 0K 0

AHCI driver 0 0K 0

MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5E_TLS_RX 0 0K 0
MLX5EEPROM 0 0K 0
MLX5E_TLS 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EN 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5DUMP 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
seq_file 0 0K 0
lkpiskb 0 0K 0
radix 0 0K 0
idr 0 0K 0
lkpindev 0 0K 0
lkpifw 0 0K 0
lkpi80211 0 0K 0

NLM 0 0K 0
ipsec-spdcache 0 0K 0
ipsec-reg 0 0K 0
ipsec-misc 0 0K 0
ipsecrequest 0 0K 0

ip6opt 0 0K 3

ip6_msource 0 0K 0
ip6_moptions 0 0K 0
in6_mfilter 0 0K 0
frag6 0 0K 0
tcplog 0 0K 0

tcp_hwpace 0 0K 0

USBdev 0 0K 0
USB 0 0K 0

LRO 0 0K 0

ip_msource 0 0K 0
ip_moptions 0 0K 0
in_mfilter 0 0K 0
ipid 0 0K 0
80211scan 0 0K 0
80211ratectl 0 0K 0
80211power 0 0K 0
80211nodeie 0 0K 0
80211node 0 0K 0
80211mesh_gt 0 0K 0
80211mesh_rt 0 0K 0
80211perr 0 0K 0
80211prep 0 0K 0
80211preq 0 0K 0
80211dfs 0 0K 0
80211crypto 0 0K 0
80211vap 0 0K 0
iflib 0 0K 0
vlan 0 0K 0
gif 0 0K 0
ifdescr 0 0K 0
zlib 0 0K 0
fadvise 0 0K 0

VN POLL 0 0K 0
agp 0 0K 0
statfs 0 0K 215
namei_tracker 0 0K 0
export_host 0 0K 0
cl_savebuf 0 0K 3

nvme_da 0 0K 0
acpipwr 0 0K 0

acpi_perf 0 0K 0

twsbuf 0 0K 0
twe_commands 0 0K 0

tcp_log_dev 0 0K 0

midi buffers 0 0K 0
mixer 0 0K 0

ac97 0 0K 0

hdacc 0 0K 0
hdac 0 0K 0
hdaa 0 0K 0

acpicmbat 0 0K 0
SIIS driver 0 0K 0

CAM CCB 0 0K 523

biobuf 0 0K 0
aios 0 0K 0
lio 0 0K 0
acl 0 0K 0

mbuf_tag 0 0K 27
ktls 0 0K 0

PUC 0 0K 0
ppbusdev 0 0K 0
agtiapi_MemAlloc malloc 0 0K 0
osti_cacheable 0 0K 0
tempbuff 0 0K 0
tempbuff 0 0K 0

ag_tgt_map_t malloc 0 0K 0
ag_slr_map_t malloc 0 0K 0

lDevFlags * malloc 0 0K 0

tiDeviceHandle_t * malloc 0 0K 0

ag_portal_data_t malloc 0 0K 0

ag_device_t malloc 0 0K 0
STLock malloc 0 0K 0
CCB List 0 0K 0
sr_iov 0 0K 0
OCS 0 0K 0
OCS 0 0K 0
nvme 0 0K 0
nvd 0 0K 0
netmap 0 0K 0
mwldev 0 0K 0
MVS driver 0 0K 0
CAM ccb queue 0 0K 0

accf 0 0K 0
pts 0 0K 0

iov 0 0K 13669
ioctlops 0 0K 86
eventfd 0 0K 0

Witness 0 0K 0
stack 0 0K 0

mrsasbuf 0 0K 0
mpt_user 0 0K 0
mps_user 0 0K 0

MPSSAS 0 0K 0
mps 0 0K 0
sbuf 0 0K 288
mpr_user 0 0K 0

firmware 0 0K 0
compressor 0 0K 0

MPRSAS 0 0K 0
SWAP 0 0K 0

mpr 0 0K 0
mfibuf 0 0K 0

sysctltmp 0 0K 662
sysctl 0 0K 3
md_sectors 0 0K 0

ekcd 0 0K 0
dumper 0 0K 0
sendfile 0 0K 0
rctl 0 0K 0

md_disk 0 0K 0
malodev 0 0K 0
LED 0 0K 0
ix_sriov 0 0K 0
cache 0 0K 0
aacraidcam 0 0K 0
kcovinfo 0 0K 0

prison_racct 0 0K 0
Fail Points 0 0K 0
sigio 0 0K 1
filedesc_to_leader 0 0K 0
pwd 0 0K 0
tty console 0 0K 0

ix 0 0K 0
ipsbuf 0 0K 0

aacraid_buf 0 0K 0
aaccam 0 0K 0
boottrace 0 0K 0

aacbuf 0 0K 0
zstd 0 0K 0

XZ_DEC 0 0K 0

nvlist 0 0K 0
SCSI ENC 0 0K 0
SCSI sa 0 0K 0
isofs_node 0 0K 0
isofs_mount 0 0K 0
tr_raid5_data 0 0K 0
tr_raid1e_data 0 0K 0
tr_raid1_data 0 0K 0
tr_raid0_data 0 0K 0
tr_concat_data 0 0K 0
md_sii_data 0 0K 0
md_promise_data 0 0K 0
md_nvidia_data 0 0K 0
md_jmicron_data 0 0K 0
md_intel_data 0 0K 0
md_ddf_data 0 0K 0
raid_data 0 0K 72
geom_flashmap 0 0K 0

tmpfs dir 0 0K 0

tmpfs name 0 0K 0
tmpfs mount 0 0K 0
NFS FHA 0 0K 0
newnfsmnt 0 0K 0
newnfsclient_req 0 0K 0

db> show uma
Zone Size Used Free Requests Sleeps Bucket Total Mem XFree

mbuf_jumbo_page 4096 8320 1078 13387 0 254 38494208 0
mbuf 256 8577 1085 15781 0 254 2473472 0
pbuf 2624 0 778 0 0 2 2041472 0
BUF TRIE 144 169 11619 503 0 62 1697472 0
malloc-384 384 4169 31 4509 0 30 1612800 0
malloc-128 128 11623 95 11686 0 126 1499904 0
malloc-4096 4096 328 2 494 0 2 1351680 0
UMA Slabs 0 112 10543 35 10543 0 126 1184736 0
mbuf_cluster 2048 508 0 508 0 254 1040384 0
vmem btag 56 16240 71 16240 0 254 913416 0
FFS inode 1160 488 30 515 0 8 600880 0
tcpcb 1104 3 508 7 0 254 564144 0
malloc-65536 65536 4 4 140 0 1 524288 0
RADIX NODE 144 3165 274 20313 0 62 495216 0
socket 960 19 489 1341 0 254 487680 0
VM OBJECT 264 1326 204 24851 0 30 403920 0
lkpicurr 168 2 2350 2 0 62 395136 0
lkpimm 168 1 2327 1 0 62 391104 0
sctp_ep 1208 0 260 1 0 254 314080 0
256 Bucket 2048 125 19 991 0 8 294912 0
malloc-64 64 4111 236 5384 0 254 278208 0
VNODE 448 518 58 547 0 30 258048 0
malloc-16 16 14655 345 14729 0 254 240000 0
DEVCTL 1024 0 220 126 0 0 225280 0
THREAD 1808 115 6 115 0 8 218768 0
malloc-4096 4096 44 6 798 0 2 204800 0
MAP ENTRY 96 1433 583 85396 0 126 193536 0
malloc-256 256 363 387 1197 0 62 192000 0
UMA Zones 768 244 0 244 0 16 187392 0
malloc-32 32 5361 309 5938 0 254 181440 0
malloc-128 128 1202 193 26874 0 126 178560 0
malloc-32768 32768 0 5 120 0 1 163840 0
malloc-1024 1024 117 27 325 0 16 147456 0
FFS2 dinode 256 488 82 514 0 62 145920 0
malloc-65536 65536 2 0 2 0 1 131072 0
malloc-65536 65536 0 2 54 0 1 131072 0
unpcb 256 7 503 1183 0 254 130560 0
mbuf_packet 256 0 508 77 0 254 130048 0
S VFS Cache 104 982 188 1022 0 126 121680 0
ksiginfo 112 36 1008 82 0 126 116928 0
malloc-16384 16384 3 4 163 0 1 114688 0
FPU_save_area 832 117 18 164 0 16 112320 0
malloc-128 128 525 250 3840 0 126 99200 0
UMA Kegs 384 230 3 230 0 30 89472 0
128 Bucket 1024 48 35 489 0 16 84992 0
clpbuf 2624 0 32 20 0 16 83968 0
malloc-2048 2048 5 35 1061 0 8 81920 0
PROC 1352 37 20 791 0 8 77064 0
VMSPACE 2552 21 9 776 0 4 76560 0
malloc-8192 8192 7 2 136 0 1 73728 0
g_bio 408 4 176 4948 0 30 73440 0
64 Bucket 512 69 67 1645 0 30 69632 0
malloc-128 128 327 200 498 0 126 67456 0
malloc-128 128 266 261 1056 0 126 67456 0
malloc-65536 65536 1 0 1 0 1 65536 0
malloc-65536 65536 1 0 1 0 1 65536 0
malloc-65536 65536 1 0 1 0 1 65536 0
malloc-4096 4096 13 3 27 0 2 65536 0
malloc-256 256 162 93 175 0 62 65280 0
filedesc0 1072 38 11 792 0 8 52528 0
malloc-64 64 504 315 740 0 254 52416 0
malloc-64 64 520 299 1614 0 254 52416 0
malloc-128 128 153 250 646 0 126 51584 0
malloc-256 256 54 141 802 0 62 49920 0
32 Bucket 256 69 126 4329 0 62 49920 0
DIRHASH 1024 35 13 35 0 16 49152 0
NAMEI 1024 0 48 12550 0 16 49152 0
malloc-8192 8192 6 0 6 0 1 49152 0
malloc-1024 1024 27 21 38 0 16 49152 0
malloc-1024 1024 6 42 530 0 16 49152 0
syncache 168 0 264 5 0 254 44352 0
malloc-8192 8192 4 1 6 0 1 40960 0
malloc-8192 8192 5 0 5 0 1 40960 0
udp_inpcb 424 6 84 128 0 30 38160 0
da_ccb 544 1 69 1350 0 16 38080 0
pipe 744 6 44 293 0 16 37200 0
pcpu-8 8 4223 385 4251 0 254 36864 0
malloc-64 64 0 567 13303 0 254 36288 0
malloc-64 64 136 431 158 0 254 36288 0
malloc-64 64 83 484 10153 0 254 36288 0
malloc-64 64 58 509 1072 0 254 36288 0
malloc-64 64 13 554 31 0 254 36288 0
malloc-128 128 137 142 189 0 126 35712 0
malloc-128 128 31 248 112 0 126 35712 0
routing nhops 256 10 125 17 0 62 34560 0

ttyoutq 256 72 63 160 0 62 34560 0

malloc-384 384 15 75 114 0 30 34560 0
malloc-384 384 58 32 59 0 30 34560 0
malloc-256 256 2 133 331 0 62 34560 0
malloc-256 256 18 117 23 0 62 34560 0
malloc-256 256 55 80 755 0 62 34560 0
malloc-256 256 20 115 27 0 62 34560 0
malloc-256 256 10 125 565 0 62 34560 0
malloc-32768 32768 1 0 1 0 1 32768 0
malloc-32768 32768 1 0 1 0 1 32768 0
malloc-32768 32768 1 0 1 0 1 32768 0
malloc-16384 16384 2 0 17 0 1 32768 0
malloc-4096 4096 4 4 630 0 2 32768 0
malloc-2048 2048 3 13 65 0 8 32768 0
malloc-2048 2048 4 12 13 0 8 32768 0
malloc-2048 2048 4 12 196 0 8 32768 0
malloc-2048 2048 9 7 10 0 8 32768 0
malloc-1024 1024 7 25 7 0 16 32768 0
malloc-1024 1024 6 26 900 0 16 32768 0
malloc-512 512 11 53 79 0 30 32768 0
malloc-512 512 3 61 170 0 30 32768 0
malloc-512 512 2 62 12 0 30 32768 0
pcpu-64 64 493 19 493 0 254 32768 0

ttyinq 160 135 65 300 0 62 32000 0

cpuset 104 7 272 7 0 126 29016 0

sctp_laddr 48 0 588 4 0 254 28224 0
malloc-32 32 266 616 3094 0 254 28224 0
16 Bucket 144 45 151 231 0 62 28224 0
4 Bucket 48 5 583 48 0 254 28224 0
tcp_inpcb 424 3 60 7 0 30 26712 0
ripcb 424 2 61 5 0 30 26712 0
TURNSTILE 136 122 67 122 0 62 25704 0
malloc-4096 4096 6 0 6 0 2 24576 0
rtentry 176 13 125 17 0 62 24288 0
PGRP 88 19 257 35 0 126 24288 0
rl_entry 40 28 578 28 0 254 24240 0
Files 80 68 232 6729 0 126 24000 0
8 Bucket 80 37 263 231 0 126 24000 0
malloc-384 384 27 33 29 0 30 23040 0
malloc-384 384 2 58 3 0 30 23040 0
malloc-384 384 30 30 30 0 30 23040 0
SLEEPQUEUE 88 122 134 122 0 126 22528 0
hostcache 64 1 314 1 0 254 20160 0
udpcb 32 6 624 128 0 254 20160 0
udp_inpcb ports 32 3 627 40 0 254 20160 0
ertt 72 3 277 7 0 126 20160 0
PWD 32 10 620 108 0 254 20160 0
malloc-32 32 7 623 15 0 254 20160 0
malloc-32 32 117 513 298 0 254 20160 0
malloc-32 32 33 597 35 0 254 20160 0
malloc-32 32 54 576 243 0 254 20160 0
malloc-32 32 23 607 1072 0 254 20160 0
2 Bucket 32 52 578 300 0 254 20160 0
Mountpoints 2752 2 5 2 0 4 19264 0

epoch_record pcpu 256 4 60 4 0 62 16384 0

malloc-16384 16384 1 0 1 0 1 16384 0
malloc-16384 16384 1 0 1 0 1 16384 0
malloc-8192 8192 2 0 2 0 1 16384 0
malloc-4096 4096 1 3 216 0 2 16384 0
malloc-4096 4096 3 1 3 0 2 16384 0
malloc-2048 2048 3 5 3 0 8 16384 0
malloc-2048 2048 1 7 1 0 8 16384 0
malloc-2048 2048 2 6 2 0 8 16384 0
malloc-1024 1024 4 12 4 0 16 16384 0
malloc-1024 1024 1 15 1 0 16 16384 0
malloc-512 512 0 32 1 0 30 16384 0
malloc-512 512 2 30 2 0 30 16384 0
SMR CPU 32 7 504 7 0 254 16352 0
malloc-16 16 478 522 3441 0 254 16000 0
kenv 258 15 45 1037 0 30 15480 0
mqnode 416 3 33 3 0 30 14976 0

vmem 1856 1 7 1 0 8 14848 0

SMR SHARED 24 7 504 7 0 254 12264 0
ertt_txseginfo 40 0 303 210 0 254 12120 0
tcp_inpcb ports 32 1 377 1 0 254 12096 0
malloc-32 32 78 300 896 0 254 12096 0
KNOTE 160 0 75 8 0 62 12000 0
malloc-16 16 9 741 198 0 254 12000 0
malloc-16 16 18 732 131 0 254 12000 0
malloc-16 16 16 734 56 0 254 12000 0
malloc-16 16 34 716 26253 0 254 12000 0
malloc-16 16 20 730 1276 0 254 12000 0
malloc-16 16 11 739 59 0 254 12000 0
malloc-384 384 0 30 1 0 30 11520 0
malloc-384 384 1 29 1 0 30 11520 0
malloc-8192 8192 1 0 1 0 1 8192 0
malloc-8192 8192 1 0 1 0 1 8192 0
vtnet_tx_hdr 24 0 334 1524 0 254 8016 0
pcpu-16 16 7 249 7 0 254 4096 0

UMA Slabs 1 176 9 13 9 0 62 3872 0

KMAP ENTRY 96 12 27 14 0 0 3744 0
pcpu-4 4 1 511 1 0 254 2048 0

FFS1 dinode 128 0 0 0 0 126 0 0

ada_ccb 272 0 0 0 0 30 0 0

swblk 136 0 0 0 0 62 0 0
swpctrie 144 0 0 0 0 62 0 0

cdg_qdiffsample 16 0 0 0 0 254 0 0

pf state scrubs 40 0 0 0 0 254 0 0
pf frag entries 40 0 0 0 0 254 0 0
pf frags 248 0 0 0 0 62 0 0

pf table entries 160 0 0 0 0 254 0 0

pf table entry counters 64 0 0 0 0 254 0 0
pf source nodes 136 0 0 0 0 254 0 0
pf state keys 88 0 0 0 0 126 0 0

pf states 312 0 0 0 0 254 0 0
pf tags 104 0 0 0 0 126 0 0
pf mtags 184 0 0 0 0 62 0 0
tcp_rack_pcb 896 0 0 0 0 16 0 0
tcp_rack_map 120 0 0 0 0 126 0 0
tcp_bbr_pcb 832 0 0 0 0 16 0 0
tcp_bbr_map 128 0 0 0 0 126 0 0

ipq 56 0 0 0 0 254 0 0

tfo_ccache_entries 80 0 0 0 0 126 0 0
tfo 4 0 0 0 0 254 0 0
sackhole 32 0 0 0 0 254 0 0

tcptw 72 0 0 0 0 254 0 0

sctp_asconf_ack 48 0 0 0 0 254 0 0
sctp_asconf 40 0 0 0 0 254 0 0

sctp_stream_msg_out 112 0 0 0 0 254 0 0
sctp_readq 152 0 0 0 0 254 0 0
sctp_chunk 152 0 0 0 0 254 0 0
sctp_raddr 736 0 0 0 0 254 0 0
sctp_asoc 2256 0 0 0 0 254 0 0
tcp_log_id_node 120 0 0 0 0 126 0 0
tcp_log_id_bucket 176 0 0 0 0 62 0 0

tcp_log 416 0 0 0 0 254 0 0

tcpreass 48 0 0 0 0 254 0 0
udplite_inpcb ports 32 0 0 0 0 254 0 0
udplite_inpcb 424 0 0 0 0 30 0 0
ripcb ports 32 0 0 0 0 254 0 0

IPsec SA lft_c 16 0 0 0 0 254 0 0
itimer 352 0 0 0 0 30 0 0

AIOLIO 272 0 0 0 0 30 0 0
AIOCB 552 0 0 0 0 16 0 0

AIOP 32 0 0 0 0 254 0 0
AIO 208 0 0 0 0 62 0 0

TMPFS node 224 0 0 0 0 62 0 0
mqnotifier 216 0 0 0 0 62 0 0
mvdata 64 0 0 0 0 254 0 0
mqueue 248 0 0 0 0 62 0 0
NCLNODE 608 0 0 0 0 16 0 0

LTS VFS Cache 360 0 0 0 0 30 0 0

L VFS Cache 320 0 0 0 0 30 0 0

STS VFS Cache 144 0 0 0 0 62 0 0

cryptop 280 0 0 0 0 30 0 0

linux_dma_object 32 0 0 0 0 254 0 0
linux_dma_pctrie 144 0 0 0 0 62 0 0

IOMMU_MAP_ENTRY 120 0 0 0 0 126 0 0

mbuf_jumbo_16k 16384 0 0 0 0 254 0 0
mbuf_jumbo_9k 9216 0 0 0 0 254 0 0
audit_record 1280 0 0 0 0 8 0 0
domainset 40 0 0 0 0 254 0 0
MAC labels 40 0 0 0 0 254 0 0

vnpbuf 2624 0 0 0 0 64 0 0
mdpbuf 2624 0 0 0 0 3 0 0
nfspbuf 2624 0 0 0 0 16 0 0
swwbuf 2624 0 0 0 0 8 0 0
swrbuf 2624 0 0 0 0 16 0 0

umtx_shm 88 0 0 0 0 126 0 0
umtx pi 96 0 0 0 0 126 0 0
rangeset pctrie nodes 144 0 0 0 0 62 0 0

malloc-65536 65536 0 0 0 0 1 0 0
malloc-65536 65536 0 0 0 0 1 0 0
malloc-32768 32768 0 0 0 0 1 0 0
malloc-32768 32768 0 0 0 0 1 0 0
malloc-32768 32768 0 0 0 0 1 0 0
malloc-32768 32768 0 0 0 0 1 0 0
malloc-16384 16384 0 0 0 0 1 0 0
malloc-16384 16384 0 0 0 0 1 0 0
malloc-16384 16384 0 0 0 0 1 0 0
malloc-16384 16384 0 0 0 0 1 0 0
malloc-8192 8192 0 0 0 0 1 0 0
malloc-4096 4096 0 0 0 0 2 0 0
malloc-1024 1024 0 0 0 0 16 0 0
malloc-512 512 0 0 0 0 30 0 0
malloc-512 512 0 0 0 0 30 0 0
malloc-512 512 0 0 0 0 30 0 0
pcpu-32 32 0 0 0 0 254 0 0

Reply all

Reply to author

Forward

0 new messages