panic: ip6_deletefraghdr: ext headers not contigous in mbuf ADDR m_len NUM >= offset NUM + NUM
4 views
Skip to first unread message
syzbot
Apr 18, 2025, 6:51:25 AM4/18/25
to syzkaller-f...@googlegroups.com
Hello,
syzbot found the following issue on:
HEAD commit: 7121e9414f29 wg: Improve wg_peer_alloc() to simplify the c..
git tree: freebsd-src
console output: https://syzkaller.appspot.com/x/log.txt?x=11bc5470580000
dashboard link: https://syzkaller.appspot.com/bug?extid=d6f7e1299095275ef6ce
Unfortunately, I don't have any reproducer for this issue yet.
IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+d6f7e1...@syzkaller.appspotmail.com
lock type ufs: EXCL by thread 0xfffffe00549bf000 panic: ip6_deletefraghdr: ext headers not contigous in mbuf 0xfffffe006c906200 m_len 40 >= offset 48 + 8
cpuid = 1
time = 15
KDB: stack backtrace:
db_trace_self_wrapper() at db_trace_self_wrapper+0xc6/frame 0xfffffe0057351ed0
kdb_backtrace() at kdb_backtrace+0xd0/frame 0xfffffe0057352030
vpanic() at vpanic+0x257/frame 0xfffffe00573521f0
panic() at panic+0xb5/frame 0xfffffe00573522b0
frag6_input() at frag6_input/frame 0xfffffe00573522f0
pf_normalize_ip6() at pf_normalize_ip6+0xd8b/frame 0xfffffe0057352450
pf_test() at pf_test+0xbc5/frame 0xfffffe0057352a00
pf_check6_in() at pf_check6_in+0xac/frame 0xfffffe0057352a50
pfil_mbuf_in() at pfil_mbuf_in+0x8c/frame 0xfffffe0057352a90
ip6_input() at ip6_input+0x16dd/frame 0xfffffe0057352cf0
swi_net() at swi_net+0x2b8/frame 0xfffffe0057352d90
ithread_loop() at ithread_loop+0x4ec/frame 0xfffffe0057352ef0
fork_exit() at fork_exit+0xcc/frame 0xfffffe0057352f30
fork_trampoline() at fork_trampoline+0xe/frame 0xfffffe0057352f30
--- trap 0, rip = 0, rsp = 0, rbp = 0 ---
KDB: enter: panic
[ thread pid 12 tid 100033 ]
Stopped at kdb_enter+0x6e: movq $0,0x23e7bb7(%rip)
db>
db> set $lines = 0
db> set $maxwidth = 0
db> show registers
cs 0x20
ds 0x3b
es 0x3b
fs 0x13
gs 0x1b
ss 0x28
rax 0x12
rcx 0xfffffe00033eee30
rdx 0
rbx 0xffffffff82752f40 .str.27
rsp 0xfffffe0057352010
rbp 0xfffffe0057352030
rsi 0
rdi 0xffffffff815dbb59 printf+0x149
r8 0
r9 0xffffffff
r10 0x100000000000000
r11 0x4
r12 0xfffffe000801f740
r13 0xfffffffffffffffd
r14 0xffffffff82752f40 .str.27
r15 0
rip 0xffffffff815c64de kdb_enter+0x6e
rflags 0x46
kdb_enter+0x6e: movq $0,0x23e7bb7(%rip)
db> show proc
Process 12 (intr) at 0xfffffe0008006580:
state: NORMAL
uid: 0 gids: 0
parent: pid 0 at 0xffffffff839387c0
ABI: null
flag: 0x10000284 flag2: 0
reaper: 0xffffffff839387c0 reapsubtree: 12
sigparent: 20
vmspace: 0xffffffff83939760
(map 0xffffffff83939760)
(map.pmap 0xffffffff83939800)
(pmap 0xffffffff83939870)
threads: 20
100013 I [swi6: task queue]
100014 I [swi6: Giant taskq]
100016 I [swi5: fast taskq]
100033 Run CPU 1 [swi1: netisr 0]
100034 I [swi1: hpts]
100035 I [swi1: hpts]
100048 I [irq24: virtio_pci0]
100049 I [irq25: virtio_pci0]
100050 I [irq26: virtio_pci0]
100051 I [irq27: virtio_pci0]
100052 I [irq28: virtio_pci1]
100053 I [irq29: virtio_pci1]
100054 I [irq30: virtio_pci1]
100055 I [irq31: virtio_pci1]
100056 I [irq32: virtio_pci1]
100061 I [irq10: virtio_pci2]
100063 I [irq1: atkbd0]
100064 I [irq12: psm0]
100065 I [swi0: uart uart++]
100069 I [swi1: pf send]
db> ps
pid ppid pgrp uid state wmesg wchan cmd
1758 766 766 0 R (threaded) syz-executor
101250 RunQ syz-executor
101251 RunQ syz-executor
101253 D ranged1 0xfffffe00781a0500 syz-executor
1757 767 767 0 R (threaded) syz-executor
101154 RunQ syz-executor
101249 D ufs 0xfffffe006eb2f228 syz-executor
101252 Run CPU 0 syz-executor
1756 1357 1357 0 R (threaded) syz-executor
101009 RunQ syz-executor
101248 S sbwait 0xfffffe005a0946dc syz-executor
101254 RunQ syz-executor
1754 1 767 0 S uwait 0xfffffe0078073a80 syz-executor
1749 764 764 0 R (threaded) syz-executor
101095 RunQ syz-executor
101237 S connec 0xfffffe005a0960da syz-executor
101239 S uwait 0xfffffe0078186000 syz-executor
1738 1 766 0 S uwait 0xfffffe0078187380 syz-executor
1728 1 764 0 S uwait 0xfffffe0058cef300 syz-executor
1718 1 1357 0 S uwait 0xfffffe0058cef280 syz-executor
1715 1 766 0 SV lockf 0xfffffe0058e1a880 syz-executor
1714 0 0 0 DL mdwait 0xfffffe006eae4000 [md2]
1698 1 767 0 S uwait 0xfffffe0078186a00 syz-executor
1695 1 764 0 SV uwait 0xfffffe0078187800 syz-executor
1685 1 766 0 S uwait 0xfffffe006ead0180 syz-executor
1680 1 1357 0 S uwait 0xfffffe0078186b00 syz-executor
1677 1 1357 0 S uwait 0xfffffe0078074580 syz-executor
1676 1 1357 0 S uwait 0xfffffe0058a9d500 syz-executor
1663 1 764 0 S uwait 0xfffffe0078187280 syz-executor
1647 1 764 0 S uwait 0xfffffe0058a9d800 syz-executor
1646 1 764 0 S uwait 0xfffffe006ead1c80 syz-executor
1638 1 766 0 SV uwait 0xfffffe0058a9d900 syz-executor
1636 1 1357 0 S uwait 0xfffffe0078186f00 syz-executor
1629 1 766 0 S uwait 0xfffffe0058cf2680 syz-executor
1588 1 767 0 S uwait 0xfffffe0058a9d600 syz-executor
1585 1 766 0 S uwait 0xfffffe0058cefb00 syz-executor
1583 1 767 0 S uwait 0xfffffe0058a9d700 syz-executor
1580 1 766 0 S uwait 0xfffffe0078074100 syz-executor
1573 1 1357 0 SV uwait 0xfffffe006ead0580 syz-executor
1561 1 764 0 S uwait 0xfffffe0078187180 syz-executor
1559 1 764 0 S uwait 0xfffffe0078187700 syz-executor
1555 1 767 0 S uwait 0xfffffe006ead1180 syz-executor
1544 1 764 0 S uwait 0xfffffe006ead1080 syz-executor
1539 1 767 0 S uwait 0xfffffe0078074680 syz-executor
1531 1 766 0 S uwait 0xfffffe0058cf2780 syz-executor
1530 1 766 0 S uwait 0xfffffe0078074200 syz-executor
1523 1 767 0 SV uwait 0xfffffe0058cef700 syz-executor
1507 1 1357 0 SV uwait 0xfffffe0058cf2880 syz-executor
1495 1 1357 0 S uwait 0xfffffe006ead1700 syz-executor
1478 0 0 0 DL mdwait 0xfffffe006eade000 [md1]
1464 1 1357 0 S uwait 0xfffffe0058cef500 syz-executor
1454 1 767 0 S uwait 0xfffffe0078073c80 syz-executor
1451 1 1357 0 S uwait 0xfffffe0078073d80 syz-executor
1434 1 1357 0 S uwait 0xfffffe0058a9d280 syz-executor
1421 1 1357 0 S uwait 0xfffffe006ead0880 syz-executor
1408 0 0 0 DL mdwait 0xfffffe0059dbf000 [md0]
1397 1 764 0 S uwait 0xfffffe0058cf2e00 syz-executor
1396 1 764 0 S uwait 0xfffffe006ead0480 syz-executor
1357 763 1357 0 R syz-executor
1351 1 766 0 SV uwait 0xfffffe006ead0780 syz-executor
1329 1 767 0 S uwait 0xfffffe006ead0d00 syz-executor
1327 1 1137 0 SV uwait 0xfffffe005859c500 syz-executor
1312 1 764 0 S uwait 0xfffffe006ead0f00 syz-executor
1305 1 767 0 S uwait 0xfffffe0058a9d480 syz-executor
1296 1 1137 0 S uwait 0xfffffe005859ce00 syz-executor
1294 1 1137 0 S uwait 0xfffffe006ead0280 syz-executor
1275 1266 1275 0 Ss piperd 0xfffffe0059ffdb80 dhclient
1270 1 1270 0 Ss select 0xfffffe0058a9dcc0 dhclient
1266 1258 424 65 S select 0xfffffe0058cefe40 dhclient
1258 424 424 0 S wait 0xfffffe00548ccb00 sh
1242 0 0 0 DL - 0xffffffff83939c20 [accounting]
1213 1 1137 0 S uwait 0xfffffe0058cf2f00 syz-executor
1195 1 767 0 S uwait 0xfffffe0058a9ac80 syz-executor
1193 1 1137 0 S uwait 0xfffffe006ead0680 syz-executor
1191 1 764 0 S uwait 0xfffffe0058cf0600 syz-executor
1179 1 1177 0 S uwait 0xfffffe0058cf2a00 syz-executor
1178 1 767 0 S uwait 0xfffffe0058cf0300 syz-executor
1172 1 766 0 SV uwait 0xfffffe006ead1d80 syz-executor
1165 1 1137 0 S uwait 0xfffffe006ead2300 syz-executor
1160 1 764 0 S uwait 0xfffffe0058cf0d80 syz-executor
1136 1 767 0 S uwait 0xfffffe0058cef800 syz-executor
1127 1 766 0 S uwait 0xfffffe006ead0e00 syz-executor
1120 1 767 60929 S uwait 0xfffffe006ead1200 syz-executor
1113 1 1111 0 S uwait 0xfffffe0058cef900 syz-executor
1075 1 765 0 S uwait 0xfffffe006ead1400 syz-executor
1070 1 765 0 S uwait 0xfffffe006ead0080 syz-executor
1066 1 766 0 S uwait 0xfffffe0058cf2c00 syz-executor
1065 1 766 0 S uwait 0xfffffe0058cf2b00 syz-executor
1047 1 765 60929 SV uwait 0xfffffe006ead0a00 syz-executor
1044 1 765 0 S uwait 0xfffffe006ead2200 syz-executor
1036 1 764 0 S uwait 0xfffffe0058cef600 syz-executor
1028 1 764 0 S uwait 0xfffffe005859cc00 syz-executor
1021 1 764 0 S uwait 0xfffffe0058cf0500 syz-executor
1016 1 767 60929 SV uwait 0xfffffe006ead1800 syz-executor
1006 1 765 0 S uwait 0xfffffe006ead0c00 syz-executor
1003 1 765 0 S uwait 0xfffffe006ead0b00 syz-executor
982 0 0 0 DL - 0xffffffff83a9f300 [soaiod4]
981 0 0 0 DL - 0xffffffff83a9f300 [soaiod3]
980 0 0 0 DL - 0xffffffff83a9f300 [soaiod2]
979 0 0 0 DL - 0xffffffff83a9f300 [soaiod1]
974 1 766 0 S uwait 0xfffffe0058cefe80 syz-executor
962 1 764 0 S uwait 0xfffffe006ead1300 syz-executor
945 0 0 0 DL (threaded) [KTLS]
100168 D - 0xfffffe0054752b00 [thr_0]
100226 D - 0xfffffe0054752b80 [thr_1]
100227 D - 0xffffffff83aa0b28 [reclaim_0]
941 1 766 0 SV uwait 0xfffffe0058cf0100 syz-executor
928 1 766 0 S uwait 0xfffffe0058cf0400 syz-executor
925 0 0 0 DL (threaded) [so_splice]
100197 D - 0xfffffe0058cefc80 [thr_0]
100204 D - 0xfffffe0058cefcc0 [thr_1]
905 1 767 0 S uwait 0xfffffe005859c900 syz-executor
884 1 766 0 S uwait 0xfffffe005859c700 syz-executor
826 1 767 0 S uwait 0xfffffe0058cf0000 syz-executor
825 0 0 0 DL aiordy 0xfffffe00548f25a0 [aiod4]
824 0 0 0 DL aiordy 0xfffffe00548f3060 [aiod3]
823 0 0 0 DL aiordy 0xfffffe00548f2b00 [aiod2]
821 0 0 0 DL aiordy 0xfffffe0054910b00 [aiod1]
767 763 767 0 S nanslp 0xffffffff8398f401 syz-executor
766 763 766 0 S nanslp 0xffffffff8398f401 syz-executor
764 763 764 0 S nanslp 0xffffffff8398f401 syz-executor
763 761 761 0 S select 0xfffffe006ead36c0 syz-executor
761 759 761 0 Ss pause 0xfffffe0054803630 csh
759 682 759 0 Ss select 0xfffffe005859c4c0 sshd
748 1 748 0 Ss+ ttyin 0xfffffe000826d8b0 getty
747 1 747 0 Ss+ ttyin 0xfffffe0058e218b0 getty
746 1 746 0 Ss+ ttyin 0xfffffe0058e21cb0 getty
745 1 745 0 Ss+ ttyin 0xfffffe0058e220b0 getty
744 1 744 0 Ss+ ttyin 0xfffffe0058e224b0 getty
743 1 743 0 Ss+ ttyin 0xfffffe0058e228b0 getty
742 1 742 0 Ss+ ttyin 0xfffffe0058e22cb0 getty
741 1 741 0 Ss+ ttyin 0xfffffe0058e230b0 getty
740 1 740 0 Ss+ ttyin 0xfffffe0058e234b0 getty
738 1 18 0 S+ piperd 0xfffffe0059ffe700 logger
737 736 18 0 S+ nanslp 0xffffffff8398f400 sleep
736 1 18 0 S+ wait 0xfffffe0008024560 sh
686 1 686 0 Ss nanslp 0xffffffff8398f400 cron
682 1 682 0 Ss select 0xfffffe0058a9a840 sshd
495 1 495 0 Ss select 0xfffffe0058a9ab40 syslogd
424 1 424 0 Ss wait 0xfffffe00548045a0 devd
423 1 423 65 Ss select 0xfffffe0058a9abc0 dhclient
338 1 338 0 Ss piperd 0xfffffe0059ffe420 dhclient
335 1 335 0 Ss select 0xfffffe0058cf1140 dhclient
17 0 0 0 DL syncer 0xffffffff83aacca0 [syncer]
16 0 0 0 DL vlruwt 0xfffffe0008026040 [vnlru]
15 0 0 0 DL (threaded) [bufdaemon]
100080 D psleep 0xffffffff83aab260 [bufdaemon]
100083 D - 0xffffffff82e02140 [bufspacedaemon-0]
100096 D sdflush 0xfffffe005a0b1ce8 [/ worker]
9 0 0 0 DL psleep 0xffffffff83af6240 [vmdaemon]
8 0 0 0 DL (threaded) [pagedaemon]
100078 D psleep 0xffffffff83adc1b8 [dom0]
100081 D launds 0xffffffff83adc1c4 [laundry: dom0]
100082 D umarcl 0xffffffff81d89660 [uma]
7 0 0 0 DL - 0xffffffff8370cbd0 [rand_harvestq]
6 0 0 0 DL pftm 0xffffffff84536710 [pf purge]
5 0 0 0 DL waiting 0xffffffff84404580 [sctp_iterator]
4 0 0 0 DL (threaded) [cam]
100046 D - 0xffffffff836d7340 [doneq0]
100047 D - 0xffffffff836d72c0 [async]
100076 D - 0xffffffff836d7140 [scanner]
3 0 0 0 DL (threaded) [crypto]
100043 D crypto_ 0xffffffff83ad79e0 [crypto]
100044 D crypto_ 0xfffffe0008278d30 [crypto returns 0]
100045 D crypto_ 0xfffffe0008278d80 [crypto returns 1]
14 0 0 0 DL seqstat 0xfffffe00584cb488 [sequencer 00]
13 0 0 0 DL (threaded) [geom]
100037 D - 0xffffffff83937de0 [g_event]
100038 D - 0xffffffff83937e00 [g_up]
100039 D - 0xffffffff83937e20 [g_down]
2 0 0 0 WL (threaded) [clock]
100031 I [clock (0)]
100032 I [clock (1)]
12 0 0 0 RL (threaded) [intr]
100013 I [swi6: task queue]
100014 I [swi6: Giant taskq]
100016 I [swi5: fast taskq]
100033 Run CPU 1 [swi1: netisr 0]
100034 I [swi1: hpts]
100035 I [swi1: hpts]
100048 I [irq24: virtio_pci0]
100049 I [irq25: virtio_pci0]
100050 I [irq26: virtio_pci0]
100051 I [irq27: virtio_pci0]
100052 I [irq28: virtio_pci1]
100053 I [irq29: virtio_pci1]
100054 I [irq30: virtio_pci1]
100055 I [irq31: virtio_pci1]
100056 I [irq32: virtio_pci1]
100061 I [irq10: virtio_pci2]
100063 I [irq1: atkbd0]
100064 I [irq12: psm0]
100065 I [swi0: uart uart++]
100069 I [swi1: pf send]
11 0 0 0 RL (threaded) [idle]
100003 CanRun [idle: cpu0]
100004 CanRun [idle: cpu1]
1 0 1 0 SLs wait 0xfffffe0008007040 [init]
10 0 0 0 DL audit_w 0xffffffff83ad8480 [audit]
0 0 0 0 DLs (threaded) [kernel]
100000 D parked 0xffffffff84a16ff0 [swapper]
100005 D - 0xfffffe0008bde900 [softirq_0]
100006 D - 0xfffffe0008bde800 [softirq_1]
100007 D - 0xfffffe0008bde700 [if_io_tqg_0]
100008 D - 0xfffffe0008bde600 [if_io_tqg_1]
100009 D - 0xfffffe0008bde500 [if_config_tqg_0]
100010 D - 0xfffffe0008bde400 [kqueue_ctx taskq]
100011 D - 0xfffffe0008bde300 [jail_remove taskq]
100012 D - 0xfffffe0008bde200 [bus taskq]
100015 D - 0xfffffe0008bdde00 [thread taskq]
100017 D - 0xfffffe0008bddc00 [aiod_kick taskq]
100018 D - 0xfffffe0008bddb00 [deferred_unmount ta]
100019 D - 0xfffffe0008bdda00 [inm_free taskq]
100020 D - 0xfffffe0008bdd900 [in6m_free taskq]
100021 D - 0xfffffe0008bdd800 [linuxkpi_irq_wq]
100022 D - 0xfffffe0008bdd700 [linuxkpi_short_wq_0]
100023 D - 0xfffffe0008bdd700 [linuxkpi_short_wq_1]
100024 D - 0xfffffe0008bdd700 [linuxkpi_short_wq_2]
100025 D - 0xfffffe0008bdd700 [linuxkpi_short_wq_3]
100026 D - 0xfffffe0008bdd600 [linuxkpi_long_wq_0]
100027 D - 0xfffffe0008bdd600 [linuxkpi_long_wq_1]
100028 D - 0xfffffe0008bdd600 [linuxkpi_long_wq_2]
100029 D - 0xfffffe0008bdd600 [linuxkpi_long_wq_3]
100036 D - 0xfffffe0008bdd400 [firmware taskq]
100041 D - 0xfffffe0008bdc800 [crypto_0]
100042 D - 0xfffffe0008bdc800 [crypto_1]
100057 D - 0xfffffe00585ea100 [vtnet0 rxq 0]
100058 D - 0xfffffe00585ea000 [vtnet0 txq 0]
100059 D - 0xfffffe00585e9e00 [vtnet0 rxq 1]
100060 D - 0xfffffe00585e9d00 [vtnet0 txq 1]
100062 D vtbslp 0xfffffe0058599680 [virtio_balloon]
100066 D - 0xffffffff82758280 [deadlkres]
100070 D - 0xfffffe0008bdc300 [acpi_task_0]
100071 D - 0xfffffe0008bdc300 [acpi_task_1]
100072 D - 0xfffffe0008bdc300 [acpi_task_2]
100074 D - 0xfffffe0008bdea00 [mca taskq]
100075 D - 0xfffffe0008bdc100 [CAM taskq]
100077 D - 0xfffffe0058c45a00 [ipsec_offload]
100968 D - 0xfffffe006e9aab00 [netlink_socket (PID]
db> show all locks
Process 1758 (syz-executor) thread 0xfffffe005497b000 (101251)
exclusive lockmgr bufwait (bufwait) r = 0 (0xfffffe0008630c60) locked @ /syzkaller/managers/main/kernel/sys/kern/vfs_bio.c:1752
exclusive lockmgr bufwait (bufwait) r = 0 (0xfffffe0008643200) locked @ /syzkaller/managers/main/kernel/sys/kern/vfs_bio.c:4023
exclusive lockmgr ufs (ufs) r = 0 (0xfffffe00781a03e0) locked @ /syzkaller/managers/main/kernel/sys/kern/vfs_vnops.c:1236
Process 1757 (syz-executor) thread 0xfffffe00549bf000 (101252)
exclusive lockmgr ufs (ufs) r = 0 (0xfffffe006eb2f228) locked @ /syzkaller/managers/main/kernel/sys/vm/vm_object.c:1222
Process 1756 (syz-executor) thread 0xfffffe00549a9740 (101248)
exclusive sx so_snd_sx (so_snd_sx) r = 0 (0xfffffe005a094580) locked @ /syzkaller/managers/main/kernel/sys/kern/uipc_socket.c:4830
Process 12 (intr) thread 0xfffffe000801f740 (100033)
shared rm pf rulesets (pf rulesets) r = 0 (0xfffffe0007fe4c10) locked @ /syzkaller/managers/main/kernel/sys/netpfil/pf/pf.c:10247
db> show malloc
Type InUse MemUse Requests
pf_hash 6 12804K 6
linker 376 5023K 494
tcp_hpts 7 4801K 7
devbuf 4188 4324K 4216
md_sectors 531 2124K 531
sysctloid 35184 2073K 35259
vtbuf 24 1968K 46
filedesc 166 1339K 1729
kobj 330 1320K 521
newblk 168 1066K 7062
vfscache 3 1025K 3
pcb 54 695K 283
subproc 300 635K 1913
vmem 5 530K 9
inodedep 21 520K 1466
ufs_quota 1 512K 1
vfs_hash 1 512K 1
callout 2 512K 2
intr 4 472K 4
vnet_data 2 224K 2
acpitask 1 224K 1
KTRACE 101 201K 59613
acpica 1674 184K 54408
tidhash 3 141K 3
pagedep 14 132K 880
tfo_ccache 1 128K 1
IP reass 1 128K 1
DEVFS1 114 114K 135
sem 4 106K 4
gtaskqueue 18 98K 18
bus 994 81K 5040
mtx_pool 3 74K 3
syncache 1 68K 1
NFSD srvcache 3 68K 3
kdtrace 370 66K 3015
module 520 65K 520
ddb_capture 1 64K 1
umtx 480 60K 480
temp 45 40K 2319
BPF 26 37K 50
shm 2 34K 18
DEVFS3 133 34K 143
hostcache 1 32K 1
msg 4 30K 4
md_disk 534 29K 534
kbdmux 6 28K 6
LRO 26 27K 26
routetbl 197 24K 557
ifaddr 85 23K 88
DEVFS_RULE 56 20K 56
lltable 61 19K 61
ether_multi 208 17K 280
ufs_mount 4 17K 5
proc 3 17K 3
ifnet 9 17K 10
tty 16 16K 16
ithread 90 15K 90
bus-sc 34 15K 1637
GEOM 82 14K 570
eventhandler 163 14K 163
in6_multi 85 12K 85
kenv 95 12K 95
kqueue 147 12K 1989
shmfd 7 11K 15
plimit 27 11K 362
CAM queue 5 11K 1528
rman 82 10K 437
ksem 5 10K 8
pwddesc 144 9K 1822
rpc 8 9K 8
bmsafemap 3 9K 1427
devstat 4 9K 4
UART 12 9K 12
filemon 1 8K 11
pfs_vncache 1 8K 1
sctp_atcl 21 8K 143
cred 30 8K 286
audit_evclass 239 8K 301
taskqueue 72 8K 84
lockf 70 8K 645
sglist 6 7K 6
sctp_stro 6 6K 28
CAM DEV 3 6K 510
pfs_nodes 22 6K 22
pf_ifnet 15 6K 28
ufs_dirhash 24 5K 45
UMA 269 5K 269
DEVFSP 69 5K 130
vt 11 5K 11
pf_table 2 4K 3
memdesc 1 4K 1
MCA 32 4K 32
evdev 4 4K 4
proc-args 162 4K 2921
freework 16 4K 2173
sctp_timw 14 4K 14
acpisem 28 4K 28
kcovinfo 54 4K 54
session 23 3K 45
selfd 44 3K 261424
terminal 11 3K 11
indirdep 10 3K 1214
ip6ndp 16 3K 18
acpidev 20 3K 20
uidinfo 4 3K 32
hhook 8 3K 10
tun 6 3K 6
clone 9 3K 10
sctp_ifa 17 3K 18
sctp_stri 4 2K 26
local_apic 1 2K 1
io_apic 1 2K 1
ipsec-saq 2 2K 2
in_multi 8 2K 24
Unitno 30 2K 711
ip6opt 10 2K 40
CC Mem 13 2K 181
CAM XPT 22 2K 543
pfil 14 2K 14
toponodes 6 2K 6
ipsecpolicy 2 2K 2
select 11 2K 84
nhops 6 2K 9
sctp_atky 27 2K 180
msi 9 2K 9
newdirblk 9 2K 834
netlink 2 2K 99
sctp_ifn 8 1K 18
softdep 1 1K 1
sahead 1 1K 1
secasvar 1 1K 1
mld 8 1K 8
igmp 8 1K 8
vnodemarker 2 1K 44
NFSD session 1 1K 1
diradd 7 1K 1330
CAM periph 4 1K 271
inpcbpolicy 26 1K 505
ipsec 3 1K 3
isadev 6 1K 6
osd 18 1K 196
mount 16 1K 969
pci_link 10 1K 10
mkdir 5 1K 1668
crypto 4 1K 32
encap_export_host 12 1K 12
dirrem 2 1K 1304
freefile 4 1K 1118
freeblks 2 1K 1025
cdev 2 1K 2
lkpikmalloc 8 1K 9
frag6 4 1K 40
chacha20random 1 1K 1
biobuf 1 1K 1
iov 6 1K 20534
sctp_athm 21 1K 153
ip_msource 5 1K 55
filedesc_to_leader 5 1K 11
vnodes 1 1K 6
ktls 1 1K 11
procdesc 2 1K 12
NFSD lckfile 1 1K 1
NFSD V4client 1 1K 1
DEVFS 9 1K 10
CAM SIM 2 1K 2
feeder 7 1K 7
pf_osfp 2 1K 2
sctp_map 12 1K 56
tcpfunc 3 1K 3
loginclass 3 1K 5
prison 6 1K 6
pf_rule 1 1K 1
cryptodev 2 1K 126
nexusdev 8 1K 8
apmdev 1 1K 1
atkbddev 2 1K 2
ip6_msource 2 1K 12
VN POLL 1 1K 33
aio 4 1K 8
soname 5 1K 3631
pmchooks 1 1K 1
filecaps 5 1K 92
CAM path 4 1K 1034
CAM dev queue 2 1K 2
CAM I/O Scheduler 1 1K 1
sctp_vrf 1 1K 1
sctp_aadr 1 1K 3
vnet 1 1K 1
pmc 1 1K 1
entropy 2 1K 38
acpiintr 1 1K 1
cpus 2 1K 2
vnet_data_free 1 1K 1
Per-cpu 1 1K 1
p1003.1b 1 1K 1
tcp_pcm_rack 0 0K 13
tcp_do_rack 0 0K 0
tcp_fsb_rack 0 0K 26
mqdata 0 0K 0
pf_altq 0 0K 0
pf_krule_item 0 0K 0
pf_temp 0 0K 16
sctp_mcore 0 0K 0
sctp_socko 0 0K 28
sctp_iter 0 0K 16
sctp_mvrf 0 0K 0
sctp_cpal 0 0K 0
sctp_cmsg 0 0K 0
sctp_stre 0 0K 0
sctp_athi 0 0K 0
sctp_a_it 0 0K 16
ipcomp 0 0K 0
esp 0 0K 0
ah 0 0K 0
madt_table 0 0K 2
smartpqi 0 0K 0
ixl 0 0K 0
ice-resmgr 0 0K 0
ice-osdep 0 0K 0
ice 0 0K 0
iavf 0 0K 0
axgbe 0 0K 0
fpukern_ctx 0 0K 0
xen_intr 0 0K 0
xen_hvm 0 0K 0
legacydrv 0 0K 0
NMI handlers 0 0K 0
bounce 0 0K 0
busdma 0 0K 0
qpidrv 0 0K 0
dmar_idpgtbl 0 0K 0
dmar_dom 0 0K 0
dmar_ctx 0 0K 0
amdiommu_dom 0 0K 0
amdiommu_ctx 0 0K 0
isci 0 0K 0
iommu_dmamap 0 0K 0
hyperv_socket 0 0K 0
bxe_ilt 0 0K 0
aesni_data 0 0K 0
xenbus 0 0K 0
vm_fictitious 0 0K 0
UMAHash 0 0K 0
vm_pgdata 0 0K 0
jblocks 0 0K 0
savedino 0 0K 1013
sentinel 0 0K 0
jfsync 0 0K 0
jtrunc 0 0K 0
sbdep 0 0K 22
jsegdep 0 0K 0
jseg 0 0K 0
jfreefrag 0 0K 0
jfreeblk 0 0K 0
jnewblk 0 0K 0
jmvref 0 0K 0
jremref 0 0K 0
jaddref 0 0K 0
freedep 0 0K 0
freefrag 0 0K 344
allocindir 0 0K 0
allocdirect 0 0K 0
ufs_trim 0 0K 0
mactemp 0 0K 0
audit_trigger 0 0K 0
audit_pipe_presel 0 0K 0
audit_pipeent 0 0K 0
audit_pipe 0 0K 0
audit_evname 0 0K 0
audit_bsm 0 0K 0
audit_gidset 0 0K 0
audit_text 0 0K 0
audit_path 0 0K 0
audit_data 0 0K 0
audit_cred 0 0K 0
ktls_ocf 0 0K 2
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5E_TLS_RX 0 0K 0
MLX5EEPROM 0 0K 0
MLX5E_TLS 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EN 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5DUMP 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
simple_attr 0 0K 0
seq_file 0 0K 0
lkpiskb 0 0K 0
radix 0 0K 0
idr 0 0K 0
lkpindev 0 0K 0
lkpimhi 0 0K 0
lkpifw 0 0K 0
lkpi80211 0 0K 0
NLM 0 0K 0
ipsec-spdcache 0 0K 0
ipsec-reg 0 0K 0
ipsec-misc 0 0K 0
ipsecrequest 0 0K 0
ip6_moptions 0 0K 5
in6_mfilter 0 0K 18
tcplog 0 0K 0
tcp_hwpace 0 0K 0
ip_moptions 0 0K 31
in_mfilter 0 0K 92
ipid 0 0K 0
80211scan 0 0K 0
80211ratectl 0 0K 0
80211power 0 0K 0
80211nodeie 0 0K 0
80211node 0 0K 0
80211mesh_gt 0 0K 0
80211mesh_rt 0 0K 0
80211perr 0 0K 0
80211prep 0 0K 0
80211preq 0 0K 0
80211dfs 0 0K 0
80211crypto 0 0K 0
80211vap 0 0K 0
iflib 0 0K 0
vlan 0 0K 0
gif 0 0K 0
ifdescr 0 0K 0
zlib 0 0K 19
fadvise 0 0K 1
statfs 0 0K 193
namei_tracker 0 0K 7
export_host 0 0K 0
cl_savebuf 0 0K 175
lio 0 0K 21
acl 0 0K 0
mbuf_tag 0 0K 0
accf 0 0K 0
pts 0 0K 0
timerfd 0 0K 0
ioctlops 0 0K 133
eventfd 0 0K 4
Witness 0 0K 0
stack 0 0K 0
sbuf 0 0K 436
firmware 0 0K 0
compressor 0 0K 0
SWAP 0 0K 0
sysctltmp 0 0K 655
sysctl 0 0K 3
ekcd 0 0K 0
dumper 0 0K 0
sendfile 0 0K 37
rctl 0 0K 0
cache 0 0K 0
prison_racct 0 0K 0
Fail Points 0 0K 0
sigio 0 0K 6
pwd 0 0K 0
tty console 0 0K 0
boottrace 0 0K 0
isofs_node 0 0K 0
isofs_mount 0 0K 0
tr_raid5_data 0 0K 0
tr_raid1e_data 0 0K 0
tr_raid1_data 0 0K 0
tr_raid0_data 0 0K 0
tr_concat_data 0 0K 0
md_sii_data 0 0K 0
md_promise_data 0 0K 0
md_nvidia_data 0 0K 0
md_jmicron_data 0 0K 0
md_intel_data 0 0K 0
md_ddf_data 0 0K 0
raid_data 0 0K 90
geom_flashmap 0 0K 0
tmpfs dir 0 0K 0
tmpfs name 0 0K 0
tmpfs mount 0 0K 0
tmpfs extattr 0 0K 0
NFS FHA 0 0K 0
newnfsmnt 0 0K 0
newnfsclient_req 0 0K 0
NFSCL layrecall 0 0K 0
NFSCL session 0 0K 0
NFSCL sockreq 0 0K 0
NFSCL devinfo 0 0K 0
NFSCL flayout 0 0K 0
NFSCL layout 0 0K 0
NFSD rollback 0 0K 0
NFSCL diroff 0 0K 0
NEWNFSnode 0 0K 0
NFSCL lck 0 0K 0
NFSCL lckown 0 0K 0
NFSCL client 0 0K 0
NFSCL deleg 0 0K 0
NFSCL open 0 0K 0
NFSCL owner 0 0K 0
NFS fh 0 0K 0
NFS req 0 0K 0
NFSD usrgroup 0 0K 0
NFSD string 0 0K 0
NFSD V4lock 0 0K 0
NFSD V4state 0 0K 0
msdosfs_fat 0 0K 0
msdosfs_mount 0 0K 0
msdosfs_node 0 0K 0
DEVFS4 0 0K 0
DEVFS2 0 0K 0
gntdev 0 0K 0
privcmd_dev 0 0K 0
evtchn_dev 0 0K 0
xenstore 0 0K 0
xnb 0 0K 0
xen_acpi 0 0K 0
xbbd 0 0K 0
xbd 0 0K 0
Balloon 0 0K 0
sysmouse 0 0K 0
vtfont 0 0K 0
pvscsi 0 0K 0
USBdev 0 0K 0
USB 0 0K 0
twsbuf 0 0K 0
tcp_log_dev 0 0K 5
midi buffers 0 0K 0
mixer 0 0K 0
ac97 0 0K 0
hdacc 0 0K 0
hdac 0 0K 0
hdaa 0 0K 0
SIIS driver 0 0K 0
PUC 0 0K 0
ppbusdev 0 0K 0
sr_iov 0 0K 0
OCS 0 0K 0
OCS 0 0K 0
nvme 0 0K 0
nvd 0 0K 0
netmap 0 0K 0
mwldev 0 0K 0
MVS driver 0 0K 0
mrsasbuf 0 0K 0
mpt_user 0 0K 0
mps_user 0 0K 0
MPSSAS 0 0K 0
mps 0 0K 0
mpr_user 0 0K 0
MPRSAS 0 0K 0
mpr 0 0K 0
mfibuf 0 0K 0
malodev 0 0K 0
LED 0 0K 0
ix_sriov 0 0K 0
ix 0 0K 0
ipsbuf 0 0K 0
ciss_data 0 0K 0
BACKLIGHT 0 0K 0
ath_hal 0 0K 0
athdev 0 0K 0
ata_pci 0 0K 0
ata_dma 0 0K 0
ata_generic 0 0K 0
AHCI driver 0 0K 0
agp 0 0K 0
acpipwr 0 0K 0
acpi_perf 0 0K 0
acpicmbat 0 0K 0
aacraidcam 0 0K 0
aacraid_buf 0 0K 0
aaccam 0 0K 0
aacbuf 0 0K 0
zstd 0 0K 0
XZ_DEC 0 0K 0
nvlist 0 0K 525
SCSI ENC 0 0K 0
SCSI sa 0 0K 0
scsi_pass 0 0K 0
scsi_da 0 0K 69
ata_da 0 0K 0
scsi_ch 0 0K 0
scsi_cd 0 0K 0
nvme_da 0 0K 0
CAM CCB 0 0K 523
CAM ccb queue 0 0K 0
db> show uma
Zone Size Used Free Requests Sleeps Bucket Total Mem XFree
mbuf_jumbo_page 4096 8337 1061 22859 0 254 38494208 0
malloc-4096 4096 861 5 1074 0 2 3547136 0
vmem btag 56 52298 85 52298 0 254 2933448 0
RADIX NODE 152 16274 413 68858 0 62 2536424 0
mbuf 256 8912 750 43072 0 254 2473472 0
md1 8 270336 176 270336 0 254 2164096 0
BUF TRIE 152 349 11455 4852 0 62 1794208 0
malloc-384 384 4175 25 4534 0 30 1612800 0
mbuf_cluster 2048 508 254 509 0 254 1560576 0
malloc-128 128 11645 73 14161 0 126 1499904 0
malloc-16384 16384 85 2 1043 0 1 1425408 0
UMA Slabs 0 112 11840 34 11840 0 126 1329888 0
sctp_asoc 2256 6 504 28 0 254 1150560 0
malloc-64 64 59 17014 281321 0 254 1092672 0
FFS inode 1168 640 32 1768 0 8 784896 0
malloc-4096 4096 145 3 1761 0 2 606208 0
malloc-65536 65536 9 0 12 0 1 589824 0
sctp_ep 1152 11 500 96 0 254 588672 0
VM OBJECT 264 1997 43 24435 0 30 538560 0
socket 1024 47 461 1927 0 254 520192 0
lkpicurr 168 2 3094 2 0 62 520128 0
pbuf 2624 0 182 0 0 2 477568 0
256 Bucket 2048 213 19 3944 0 8 475136 0
THREAD 1824 225 15 1254 0 8 437760 0
malloc-65536 65536 4 2 196 0 1 393216 0
sctp_raddr 736 6 511 58 0 254 380512 0
MAP ENTRY 96 3548 232 78584 0 126 362880 0
VNODE 440 681 102 1811 0 30 344520 0
malloc-32768 32768 4 5 191 0 1 294912 0
malloc-64 64 4228 119 6011 0 254 278208 0
malloc-256 256 471 594 8355 0 62 272640 0
malloc-16 16 14533 217 14651 0 254 236000 0
malloc-2048 2048 100 12 200 0 8 229376 0
DEVCTL 1024 39 181 166 0 0 225280 0
FPU_save_area 832 227 34 2015 0 16 217152 0
tcp_log 416 0 513 161 0 254 213408 0
PROC 1376 143 11 1759 0 8 211904 0
malloc-32768 32768 0 6 981 0 1 196608 0
UMA Zones 768 241 3 241 0 16 187392 0
malloc-32 32 5413 257 7000 0 254 181440 0
malloc-128 128 1264 131 26113 0 126 178560 0
FFS2 dinode 256 640 50 1768 0 62 176640 0
lkpimm 56 1 3095 1 0 254 173376 0
unpcb 320 13 503 1285 0 254 165120 0
filedesc0 1072 144 10 1822 0 8 165088 0
malloc-1024 1024 131 29 2042 0 16 163840 0
malloc-128 128 983 164 2268 0 126 146816 0
S VFS Cache 104 1017 387 2287 0 126 146016 0
malloc-65536 65536 2 0 2 0 1 131072 0
malloc-65536 65536 0 2 9 0 1 131072 0
mbuf_packet 256 13 495 737 0 254 130048 0
ksiginfo 112 138 906 368 0 126 116928 0
malloc-2048 2048 18 38 1326 0 8 114688 0
malloc-128 128 533 242 3882 0 126 99200 0
malloc-32768 32768 2 1 4 0 1 98304 0
malloc-384 384 88 152 2180 0 30 92160 0
malloc-384 384 178 62 300 0 30 92160 0
UMA Kegs 384 226 7 226 0 30 89472 0
syncache 168 0 528 5 0 254 88704 0
64 Bucket 512 99 69 6690 0 30 86016 0
g_bio 408 0 210 25042 0 30 85680 0
malloc-256 256 251 64 1687 0 62 80640 0
sctp_chunk 152 60 460 102 0 254 79040 0
VMSPACE 584 113 20 1708 0 16 77672 0
malloc-8192 8192 7 2 140 0 1 73728 0
128 Bucket 1024 57 10 296 0 16 68608 0
malloc-64 64 698 373 3695 0 254 68544 0
DIRHASH 1024 34 30 48 0 16 65536 0
malloc-65536 65536 1 0 1 0 1 65536 0
malloc-65536 65536 1 0 1 0 1 65536 0
malloc-32768 32768 2 0 2 0 1 65536 0
malloc-4096 4096 12 4 585 0 2 65536 0
malloc-4096 4096 13 3 27 0 2 65536 0
malloc-256 256 109 146 2160 0 62 65280 0
malloc-256 256 67 188 4190 0 62 65280 0
32 Bucket 256 98 157 2469 0 62 65280 0
sctp_stream_msg_out 112 0 540 15 0 254 60480 0
malloc-4096 4096 10 4 16 0 2 57344 0
malloc-64 64 637 182 1893 0 254 52416 0
malloc-128 128 34 369 2875 0 126 51584 0
malloc-256 256 25 170 3148 0 62 49920 0
NAMEI 1024 0 48 19096 0 16 49152 0
malloc-8192 8192 3 3 13 0 1 49152 0
malloc-8192 8192 6 0 7 0 1 49152 0
malloc-2048 2048 16 8 18 0 8 49152 0
pcpu-8 8 5059 573 5391 0 254 45056 0
PWD 40 91 1020 846 0 254 44440 0
malloc-32 32 1078 308 3269 0 254 44352 0
tcp_inpcb 1304 13 20 180 0 8 43032 0
TURNSTILE 136 241 74 241 0 62 42840 0
vnpbuf 2624 0 16 1 0 16 41984 0
malloc-8192 8192 5 0 5 0 1 40960 0
malloc-8192 8192 3 2 5 0 1 40960 0
malloc-4096 4096 4 6 702 0 2 40960 0
malloc-4096 4096 8 2 13 0 2 40960 0
pipe 736 24 31 401 0 16 40480 0
sctp_readq 152 0 260 9 0 254 39520 0
da_ccb 544 0 70 6507 0 16 38080 0
udp_inpcb 408 7 83 238 0 30 36720 0
hostcache 64 3 564 3 0 254 36288 0
malloc-64 64 24 543 19798 0 254 36288 0
malloc-64 64 217 350 265 0 254 36288 0
malloc-64 64 7 560 162 0 254 36288 0
malloc-64 64 164 403 1848 0 254 36288 0
16 Bucket 144 66 186 783 0 62 36288 0
tcp_rack_map 128 0 279 42 0 126 35712 0
tcp_bbr_map 128 0 279 37 0 126 35712 0
malloc-128 128 74 205 258 0 126 35712 0
malloc-128 128 0 279 619 0 126 35712 0
malloc-128 128 13 266 13 0 126 35712 0
routing nhops 256 35 100 42 0 62 34560 0
ttyoutq 256 72 63 160 0 62 34560 0
malloc-256 256 43 92 118 0 62 34560 0
malloc-256 256 32 103 332 0 62 34560 0
malloc-256 256 33 102 914 0 62 34560 0
ripcb 376 4 86 63 0 30 33840 0
SLEEPQUEUE 88 241 143 241 0 126 33792 0
malloc-32768 32768 0 1 11 0 1 32768 0
malloc-16384 16384 0 2 3 0 1 32768 0
malloc-2048 2048 4 12 9 0 8 32768 0
malloc-2048 2048 10 6 10 0 8 32768 0
malloc-2048 2048 6 10 158 0 8 32768 0
malloc-2048 2048 6 10 62 0 8 32768 0
malloc-2048 2048 4 12 20 0 8 32768 0
malloc-1024 1024 0 32 13 0 16 32768 0
malloc-1024 1024 3 29 3 0 16 32768 0
malloc-1024 1024 23 9 491 0 16 32768 0
malloc-1024 1024 10 22 10 0 16 32768 0
malloc-1024 1024 7 25 32 0 16 32768 0
malloc-1024 1024 15 17 19 0 16 32768 0
malloc-512 512 1 63 18 0 30 32768 0
malloc-512 512 3 61 45 0 30 32768 0
malloc-512 512 11 53 204 0 30 32768 0
malloc-512 512 6 58 239 0 30 32768 0
malloc-512 512 5 59 27 0 30 32768 0
malloc-512 512 2 62 44 0 30 32768 0
malloc-512 512 6 58 37 0 30 32768 0
pcpu-64 64 495 17 495 0 254 32768 0
ertt_txseginfo 40 1 807 3091 0 254 32320 0
ttyinq 160 135 65 300 0 62 32000 0
Files 80 259 141 10071 0 126 32000 0
PGRP 120 30 234 56 0 126 31680 0
clpbuf 2624 0 12 260 0 4 31488 0
L VFS Cache 320 0 96 54 0 30 30720 0
rl_entry 48 27 561 66 0 254 28224 0
4 Bucket 48 7 581 28 0 254 28224 0
AIO 208 1 132 96 0 62 27664 0
udplite_inpcb 408 2 61 24 0 30 25704 0
cpuset 200 9 119 11 0 62 25600 0
r
---
This report is generated by a bot. It may contain errors.
See https://goo.gl/tpsmEJ for more information about syzbot.
syzbot engineers can be reached at syzk...@googlegroups.com.
syzbot will keep track of this issue. See:
https://goo.gl/tpsmEJ#status for how to communicate with syzbot.
If the report is already addressed, let syzbot know by replying with:
#syz fix: exact-commit-title
If you want to overwrite report's subsystems, reply with:
#syz set subsystems: new-subsystem
(See the list of subsystem names on the web dashboard)
If the report is a duplicate of another one, reply with:
#syz dup: exact-subject-of-another-report
If you want to undo deduplication, reply with:
#syz undup
syzbot found the following issue on:
HEAD commit: 7121e9414f29 wg: Improve wg_peer_alloc() to simplify the c..
git tree: freebsd-src
console output: https://syzkaller.appspot.com/x/log.txt?x=11bc5470580000
dashboard link: https://syzkaller.appspot.com/bug?extid=d6f7e1299095275ef6ce
Unfortunately, I don't have any reproducer for this issue yet.
IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+d6f7e1...@syzkaller.appspotmail.com
lock type ufs: EXCL by thread 0xfffffe00549bf000 panic: ip6_deletefraghdr: ext headers not contigous in mbuf 0xfffffe006c906200 m_len 40 >= offset 48 + 8
cpuid = 1
time = 15
KDB: stack backtrace:
db_trace_self_wrapper() at db_trace_self_wrapper+0xc6/frame 0xfffffe0057351ed0
kdb_backtrace() at kdb_backtrace+0xd0/frame 0xfffffe0057352030
vpanic() at vpanic+0x257/frame 0xfffffe00573521f0
panic() at panic+0xb5/frame 0xfffffe00573522b0
frag6_input() at frag6_input/frame 0xfffffe00573522f0
pf_normalize_ip6() at pf_normalize_ip6+0xd8b/frame 0xfffffe0057352450
pf_test() at pf_test+0xbc5/frame 0xfffffe0057352a00
pf_check6_in() at pf_check6_in+0xac/frame 0xfffffe0057352a50
pfil_mbuf_in() at pfil_mbuf_in+0x8c/frame 0xfffffe0057352a90
ip6_input() at ip6_input+0x16dd/frame 0xfffffe0057352cf0
swi_net() at swi_net+0x2b8/frame 0xfffffe0057352d90
ithread_loop() at ithread_loop+0x4ec/frame 0xfffffe0057352ef0
fork_exit() at fork_exit+0xcc/frame 0xfffffe0057352f30
fork_trampoline() at fork_trampoline+0xe/frame 0xfffffe0057352f30
--- trap 0, rip = 0, rsp = 0, rbp = 0 ---
KDB: enter: panic
[ thread pid 12 tid 100033 ]
Stopped at kdb_enter+0x6e: movq $0,0x23e7bb7(%rip)
db>
db> set $lines = 0
db> set $maxwidth = 0
db> show registers
cs 0x20
ds 0x3b
es 0x3b
fs 0x13
gs 0x1b
ss 0x28
rax 0x12
rcx 0xfffffe00033eee30
rdx 0
rbx 0xffffffff82752f40 .str.27
rsp 0xfffffe0057352010
rbp 0xfffffe0057352030
rsi 0
rdi 0xffffffff815dbb59 printf+0x149
r8 0
r9 0xffffffff
r10 0x100000000000000
r11 0x4
r12 0xfffffe000801f740
r13 0xfffffffffffffffd
r14 0xffffffff82752f40 .str.27
r15 0
rip 0xffffffff815c64de kdb_enter+0x6e
rflags 0x46
kdb_enter+0x6e: movq $0,0x23e7bb7(%rip)
db> show proc
Process 12 (intr) at 0xfffffe0008006580:
state: NORMAL
uid: 0 gids: 0
parent: pid 0 at 0xffffffff839387c0
ABI: null
flag: 0x10000284 flag2: 0
reaper: 0xffffffff839387c0 reapsubtree: 12
sigparent: 20
vmspace: 0xffffffff83939760
(map 0xffffffff83939760)
(map.pmap 0xffffffff83939800)
(pmap 0xffffffff83939870)
threads: 20
100013 I [swi6: task queue]
100014 I [swi6: Giant taskq]
100016 I [swi5: fast taskq]
100033 Run CPU 1 [swi1: netisr 0]
100034 I [swi1: hpts]
100035 I [swi1: hpts]
100048 I [irq24: virtio_pci0]
100049 I [irq25: virtio_pci0]
100050 I [irq26: virtio_pci0]
100051 I [irq27: virtio_pci0]
100052 I [irq28: virtio_pci1]
100053 I [irq29: virtio_pci1]
100054 I [irq30: virtio_pci1]
100055 I [irq31: virtio_pci1]
100056 I [irq32: virtio_pci1]
100061 I [irq10: virtio_pci2]
100063 I [irq1: atkbd0]
100064 I [irq12: psm0]
100065 I [swi0: uart uart++]
100069 I [swi1: pf send]
db> ps
pid ppid pgrp uid state wmesg wchan cmd
1758 766 766 0 R (threaded) syz-executor
101250 RunQ syz-executor
101251 RunQ syz-executor
101253 D ranged1 0xfffffe00781a0500 syz-executor
1757 767 767 0 R (threaded) syz-executor
101154 RunQ syz-executor
101249 D ufs 0xfffffe006eb2f228 syz-executor
101252 Run CPU 0 syz-executor
1756 1357 1357 0 R (threaded) syz-executor
101009 RunQ syz-executor
101248 S sbwait 0xfffffe005a0946dc syz-executor
101254 RunQ syz-executor
1754 1 767 0 S uwait 0xfffffe0078073a80 syz-executor
1749 764 764 0 R (threaded) syz-executor
101095 RunQ syz-executor
101237 S connec 0xfffffe005a0960da syz-executor
101239 S uwait 0xfffffe0078186000 syz-executor
1738 1 766 0 S uwait 0xfffffe0078187380 syz-executor
1728 1 764 0 S uwait 0xfffffe0058cef300 syz-executor
1718 1 1357 0 S uwait 0xfffffe0058cef280 syz-executor
1715 1 766 0 SV lockf 0xfffffe0058e1a880 syz-executor
1714 0 0 0 DL mdwait 0xfffffe006eae4000 [md2]
1698 1 767 0 S uwait 0xfffffe0078186a00 syz-executor
1695 1 764 0 SV uwait 0xfffffe0078187800 syz-executor
1685 1 766 0 S uwait 0xfffffe006ead0180 syz-executor
1680 1 1357 0 S uwait 0xfffffe0078186b00 syz-executor
1677 1 1357 0 S uwait 0xfffffe0078074580 syz-executor
1676 1 1357 0 S uwait 0xfffffe0058a9d500 syz-executor
1663 1 764 0 S uwait 0xfffffe0078187280 syz-executor
1647 1 764 0 S uwait 0xfffffe0058a9d800 syz-executor
1646 1 764 0 S uwait 0xfffffe006ead1c80 syz-executor
1638 1 766 0 SV uwait 0xfffffe0058a9d900 syz-executor
1636 1 1357 0 S uwait 0xfffffe0078186f00 syz-executor
1629 1 766 0 S uwait 0xfffffe0058cf2680 syz-executor
1588 1 767 0 S uwait 0xfffffe0058a9d600 syz-executor
1585 1 766 0 S uwait 0xfffffe0058cefb00 syz-executor
1583 1 767 0 S uwait 0xfffffe0058a9d700 syz-executor
1580 1 766 0 S uwait 0xfffffe0078074100 syz-executor
1573 1 1357 0 SV uwait 0xfffffe006ead0580 syz-executor
1561 1 764 0 S uwait 0xfffffe0078187180 syz-executor
1559 1 764 0 S uwait 0xfffffe0078187700 syz-executor
1555 1 767 0 S uwait 0xfffffe006ead1180 syz-executor
1544 1 764 0 S uwait 0xfffffe006ead1080 syz-executor
1539 1 767 0 S uwait 0xfffffe0078074680 syz-executor
1531 1 766 0 S uwait 0xfffffe0058cf2780 syz-executor
1530 1 766 0 S uwait 0xfffffe0078074200 syz-executor
1523 1 767 0 SV uwait 0xfffffe0058cef700 syz-executor
1507 1 1357 0 SV uwait 0xfffffe0058cf2880 syz-executor
1495 1 1357 0 S uwait 0xfffffe006ead1700 syz-executor
1478 0 0 0 DL mdwait 0xfffffe006eade000 [md1]
1464 1 1357 0 S uwait 0xfffffe0058cef500 syz-executor
1454 1 767 0 S uwait 0xfffffe0078073c80 syz-executor
1451 1 1357 0 S uwait 0xfffffe0078073d80 syz-executor
1434 1 1357 0 S uwait 0xfffffe0058a9d280 syz-executor
1421 1 1357 0 S uwait 0xfffffe006ead0880 syz-executor
1408 0 0 0 DL mdwait 0xfffffe0059dbf000 [md0]
1397 1 764 0 S uwait 0xfffffe0058cf2e00 syz-executor
1396 1 764 0 S uwait 0xfffffe006ead0480 syz-executor
1357 763 1357 0 R syz-executor
1351 1 766 0 SV uwait 0xfffffe006ead0780 syz-executor
1329 1 767 0 S uwait 0xfffffe006ead0d00 syz-executor
1327 1 1137 0 SV uwait 0xfffffe005859c500 syz-executor
1312 1 764 0 S uwait 0xfffffe006ead0f00 syz-executor
1305 1 767 0 S uwait 0xfffffe0058a9d480 syz-executor
1296 1 1137 0 S uwait 0xfffffe005859ce00 syz-executor
1294 1 1137 0 S uwait 0xfffffe006ead0280 syz-executor
1275 1266 1275 0 Ss piperd 0xfffffe0059ffdb80 dhclient
1270 1 1270 0 Ss select 0xfffffe0058a9dcc0 dhclient
1266 1258 424 65 S select 0xfffffe0058cefe40 dhclient
1258 424 424 0 S wait 0xfffffe00548ccb00 sh
1242 0 0 0 DL - 0xffffffff83939c20 [accounting]
1213 1 1137 0 S uwait 0xfffffe0058cf2f00 syz-executor
1195 1 767 0 S uwait 0xfffffe0058a9ac80 syz-executor
1193 1 1137 0 S uwait 0xfffffe006ead0680 syz-executor
1191 1 764 0 S uwait 0xfffffe0058cf0600 syz-executor
1179 1 1177 0 S uwait 0xfffffe0058cf2a00 syz-executor
1178 1 767 0 S uwait 0xfffffe0058cf0300 syz-executor
1172 1 766 0 SV uwait 0xfffffe006ead1d80 syz-executor
1165 1 1137 0 S uwait 0xfffffe006ead2300 syz-executor
1160 1 764 0 S uwait 0xfffffe0058cf0d80 syz-executor
1136 1 767 0 S uwait 0xfffffe0058cef800 syz-executor
1127 1 766 0 S uwait 0xfffffe006ead0e00 syz-executor
1120 1 767 60929 S uwait 0xfffffe006ead1200 syz-executor
1113 1 1111 0 S uwait 0xfffffe0058cef900 syz-executor
1075 1 765 0 S uwait 0xfffffe006ead1400 syz-executor
1070 1 765 0 S uwait 0xfffffe006ead0080 syz-executor
1066 1 766 0 S uwait 0xfffffe0058cf2c00 syz-executor
1065 1 766 0 S uwait 0xfffffe0058cf2b00 syz-executor
1047 1 765 60929 SV uwait 0xfffffe006ead0a00 syz-executor
1044 1 765 0 S uwait 0xfffffe006ead2200 syz-executor
1036 1 764 0 S uwait 0xfffffe0058cef600 syz-executor
1028 1 764 0 S uwait 0xfffffe005859cc00 syz-executor
1021 1 764 0 S uwait 0xfffffe0058cf0500 syz-executor
1016 1 767 60929 SV uwait 0xfffffe006ead1800 syz-executor
1006 1 765 0 S uwait 0xfffffe006ead0c00 syz-executor
1003 1 765 0 S uwait 0xfffffe006ead0b00 syz-executor
982 0 0 0 DL - 0xffffffff83a9f300 [soaiod4]
981 0 0 0 DL - 0xffffffff83a9f300 [soaiod3]
980 0 0 0 DL - 0xffffffff83a9f300 [soaiod2]
979 0 0 0 DL - 0xffffffff83a9f300 [soaiod1]
974 1 766 0 S uwait 0xfffffe0058cefe80 syz-executor
962 1 764 0 S uwait 0xfffffe006ead1300 syz-executor
945 0 0 0 DL (threaded) [KTLS]
100168 D - 0xfffffe0054752b00 [thr_0]
100226 D - 0xfffffe0054752b80 [thr_1]
100227 D - 0xffffffff83aa0b28 [reclaim_0]
941 1 766 0 SV uwait 0xfffffe0058cf0100 syz-executor
928 1 766 0 S uwait 0xfffffe0058cf0400 syz-executor
925 0 0 0 DL (threaded) [so_splice]
100197 D - 0xfffffe0058cefc80 [thr_0]
100204 D - 0xfffffe0058cefcc0 [thr_1]
905 1 767 0 S uwait 0xfffffe005859c900 syz-executor
884 1 766 0 S uwait 0xfffffe005859c700 syz-executor
826 1 767 0 S uwait 0xfffffe0058cf0000 syz-executor
825 0 0 0 DL aiordy 0xfffffe00548f25a0 [aiod4]
824 0 0 0 DL aiordy 0xfffffe00548f3060 [aiod3]
823 0 0 0 DL aiordy 0xfffffe00548f2b00 [aiod2]
821 0 0 0 DL aiordy 0xfffffe0054910b00 [aiod1]
767 763 767 0 S nanslp 0xffffffff8398f401 syz-executor
766 763 766 0 S nanslp 0xffffffff8398f401 syz-executor
764 763 764 0 S nanslp 0xffffffff8398f401 syz-executor
763 761 761 0 S select 0xfffffe006ead36c0 syz-executor
761 759 761 0 Ss pause 0xfffffe0054803630 csh
759 682 759 0 Ss select 0xfffffe005859c4c0 sshd
748 1 748 0 Ss+ ttyin 0xfffffe000826d8b0 getty
747 1 747 0 Ss+ ttyin 0xfffffe0058e218b0 getty
746 1 746 0 Ss+ ttyin 0xfffffe0058e21cb0 getty
745 1 745 0 Ss+ ttyin 0xfffffe0058e220b0 getty
744 1 744 0 Ss+ ttyin 0xfffffe0058e224b0 getty
743 1 743 0 Ss+ ttyin 0xfffffe0058e228b0 getty
742 1 742 0 Ss+ ttyin 0xfffffe0058e22cb0 getty
741 1 741 0 Ss+ ttyin 0xfffffe0058e230b0 getty
740 1 740 0 Ss+ ttyin 0xfffffe0058e234b0 getty
738 1 18 0 S+ piperd 0xfffffe0059ffe700 logger
737 736 18 0 S+ nanslp 0xffffffff8398f400 sleep
736 1 18 0 S+ wait 0xfffffe0008024560 sh
686 1 686 0 Ss nanslp 0xffffffff8398f400 cron
682 1 682 0 Ss select 0xfffffe0058a9a840 sshd
495 1 495 0 Ss select 0xfffffe0058a9ab40 syslogd
424 1 424 0 Ss wait 0xfffffe00548045a0 devd
423 1 423 65 Ss select 0xfffffe0058a9abc0 dhclient
338 1 338 0 Ss piperd 0xfffffe0059ffe420 dhclient
335 1 335 0 Ss select 0xfffffe0058cf1140 dhclient
17 0 0 0 DL syncer 0xffffffff83aacca0 [syncer]
16 0 0 0 DL vlruwt 0xfffffe0008026040 [vnlru]
15 0 0 0 DL (threaded) [bufdaemon]
100080 D psleep 0xffffffff83aab260 [bufdaemon]
100083 D - 0xffffffff82e02140 [bufspacedaemon-0]
100096 D sdflush 0xfffffe005a0b1ce8 [/ worker]
9 0 0 0 DL psleep 0xffffffff83af6240 [vmdaemon]
8 0 0 0 DL (threaded) [pagedaemon]
100078 D psleep 0xffffffff83adc1b8 [dom0]
100081 D launds 0xffffffff83adc1c4 [laundry: dom0]
100082 D umarcl 0xffffffff81d89660 [uma]
7 0 0 0 DL - 0xffffffff8370cbd0 [rand_harvestq]
6 0 0 0 DL pftm 0xffffffff84536710 [pf purge]
5 0 0 0 DL waiting 0xffffffff84404580 [sctp_iterator]
4 0 0 0 DL (threaded) [cam]
100046 D - 0xffffffff836d7340 [doneq0]
100047 D - 0xffffffff836d72c0 [async]
100076 D - 0xffffffff836d7140 [scanner]
3 0 0 0 DL (threaded) [crypto]
100043 D crypto_ 0xffffffff83ad79e0 [crypto]
100044 D crypto_ 0xfffffe0008278d30 [crypto returns 0]
100045 D crypto_ 0xfffffe0008278d80 [crypto returns 1]
14 0 0 0 DL seqstat 0xfffffe00584cb488 [sequencer 00]
13 0 0 0 DL (threaded) [geom]
100037 D - 0xffffffff83937de0 [g_event]
100038 D - 0xffffffff83937e00 [g_up]
100039 D - 0xffffffff83937e20 [g_down]
2 0 0 0 WL (threaded) [clock]
100031 I [clock (0)]
100032 I [clock (1)]
12 0 0 0 RL (threaded) [intr]
100013 I [swi6: task queue]
100014 I [swi6: Giant taskq]
100016 I [swi5: fast taskq]
100033 Run CPU 1 [swi1: netisr 0]
100034 I [swi1: hpts]
100035 I [swi1: hpts]
100048 I [irq24: virtio_pci0]
100049 I [irq25: virtio_pci0]
100050 I [irq26: virtio_pci0]
100051 I [irq27: virtio_pci0]
100052 I [irq28: virtio_pci1]
100053 I [irq29: virtio_pci1]
100054 I [irq30: virtio_pci1]
100055 I [irq31: virtio_pci1]
100056 I [irq32: virtio_pci1]
100061 I [irq10: virtio_pci2]
100063 I [irq1: atkbd0]
100064 I [irq12: psm0]
100065 I [swi0: uart uart++]
100069 I [swi1: pf send]
11 0 0 0 RL (threaded) [idle]
100003 CanRun [idle: cpu0]
100004 CanRun [idle: cpu1]
1 0 1 0 SLs wait 0xfffffe0008007040 [init]
10 0 0 0 DL audit_w 0xffffffff83ad8480 [audit]
0 0 0 0 DLs (threaded) [kernel]
100000 D parked 0xffffffff84a16ff0 [swapper]
100005 D - 0xfffffe0008bde900 [softirq_0]
100006 D - 0xfffffe0008bde800 [softirq_1]
100007 D - 0xfffffe0008bde700 [if_io_tqg_0]
100008 D - 0xfffffe0008bde600 [if_io_tqg_1]
100009 D - 0xfffffe0008bde500 [if_config_tqg_0]
100010 D - 0xfffffe0008bde400 [kqueue_ctx taskq]
100011 D - 0xfffffe0008bde300 [jail_remove taskq]
100012 D - 0xfffffe0008bde200 [bus taskq]
100015 D - 0xfffffe0008bdde00 [thread taskq]
100017 D - 0xfffffe0008bddc00 [aiod_kick taskq]
100018 D - 0xfffffe0008bddb00 [deferred_unmount ta]
100019 D - 0xfffffe0008bdda00 [inm_free taskq]
100020 D - 0xfffffe0008bdd900 [in6m_free taskq]
100021 D - 0xfffffe0008bdd800 [linuxkpi_irq_wq]
100022 D - 0xfffffe0008bdd700 [linuxkpi_short_wq_0]
100023 D - 0xfffffe0008bdd700 [linuxkpi_short_wq_1]
100024 D - 0xfffffe0008bdd700 [linuxkpi_short_wq_2]
100025 D - 0xfffffe0008bdd700 [linuxkpi_short_wq_3]
100026 D - 0xfffffe0008bdd600 [linuxkpi_long_wq_0]
100027 D - 0xfffffe0008bdd600 [linuxkpi_long_wq_1]
100028 D - 0xfffffe0008bdd600 [linuxkpi_long_wq_2]
100029 D - 0xfffffe0008bdd600 [linuxkpi_long_wq_3]
100036 D - 0xfffffe0008bdd400 [firmware taskq]
100041 D - 0xfffffe0008bdc800 [crypto_0]
100042 D - 0xfffffe0008bdc800 [crypto_1]
100057 D - 0xfffffe00585ea100 [vtnet0 rxq 0]
100058 D - 0xfffffe00585ea000 [vtnet0 txq 0]
100059 D - 0xfffffe00585e9e00 [vtnet0 rxq 1]
100060 D - 0xfffffe00585e9d00 [vtnet0 txq 1]
100062 D vtbslp 0xfffffe0058599680 [virtio_balloon]
100066 D - 0xffffffff82758280 [deadlkres]
100070 D - 0xfffffe0008bdc300 [acpi_task_0]
100071 D - 0xfffffe0008bdc300 [acpi_task_1]
100072 D - 0xfffffe0008bdc300 [acpi_task_2]
100074 D - 0xfffffe0008bdea00 [mca taskq]
100075 D - 0xfffffe0008bdc100 [CAM taskq]
100077 D - 0xfffffe0058c45a00 [ipsec_offload]
100968 D - 0xfffffe006e9aab00 [netlink_socket (PID]
db> show all locks
Process 1758 (syz-executor) thread 0xfffffe005497b000 (101251)
exclusive lockmgr bufwait (bufwait) r = 0 (0xfffffe0008630c60) locked @ /syzkaller/managers/main/kernel/sys/kern/vfs_bio.c:1752
exclusive lockmgr bufwait (bufwait) r = 0 (0xfffffe0008643200) locked @ /syzkaller/managers/main/kernel/sys/kern/vfs_bio.c:4023
exclusive lockmgr ufs (ufs) r = 0 (0xfffffe00781a03e0) locked @ /syzkaller/managers/main/kernel/sys/kern/vfs_vnops.c:1236
Process 1757 (syz-executor) thread 0xfffffe00549bf000 (101252)
exclusive lockmgr ufs (ufs) r = 0 (0xfffffe006eb2f228) locked @ /syzkaller/managers/main/kernel/sys/vm/vm_object.c:1222
Process 1756 (syz-executor) thread 0xfffffe00549a9740 (101248)
exclusive sx so_snd_sx (so_snd_sx) r = 0 (0xfffffe005a094580) locked @ /syzkaller/managers/main/kernel/sys/kern/uipc_socket.c:4830
Process 12 (intr) thread 0xfffffe000801f740 (100033)
shared rm pf rulesets (pf rulesets) r = 0 (0xfffffe0007fe4c10) locked @ /syzkaller/managers/main/kernel/sys/netpfil/pf/pf.c:10247
db> show malloc
Type InUse MemUse Requests
pf_hash 6 12804K 6
linker 376 5023K 494
tcp_hpts 7 4801K 7
devbuf 4188 4324K 4216
md_sectors 531 2124K 531
sysctloid 35184 2073K 35259
vtbuf 24 1968K 46
filedesc 166 1339K 1729
kobj 330 1320K 521
newblk 168 1066K 7062
vfscache 3 1025K 3
pcb 54 695K 283
subproc 300 635K 1913
vmem 5 530K 9
inodedep 21 520K 1466
ufs_quota 1 512K 1
vfs_hash 1 512K 1
callout 2 512K 2
intr 4 472K 4
vnet_data 2 224K 2
acpitask 1 224K 1
KTRACE 101 201K 59613
acpica 1674 184K 54408
tidhash 3 141K 3
pagedep 14 132K 880
tfo_ccache 1 128K 1
IP reass 1 128K 1
DEVFS1 114 114K 135
sem 4 106K 4
gtaskqueue 18 98K 18
bus 994 81K 5040
mtx_pool 3 74K 3
syncache 1 68K 1
NFSD srvcache 3 68K 3
kdtrace 370 66K 3015
module 520 65K 520
ddb_capture 1 64K 1
umtx 480 60K 480
temp 45 40K 2319
BPF 26 37K 50
shm 2 34K 18
DEVFS3 133 34K 143
hostcache 1 32K 1
msg 4 30K 4
md_disk 534 29K 534
kbdmux 6 28K 6
LRO 26 27K 26
routetbl 197 24K 557
ifaddr 85 23K 88
DEVFS_RULE 56 20K 56
lltable 61 19K 61
ether_multi 208 17K 280
ufs_mount 4 17K 5
proc 3 17K 3
ifnet 9 17K 10
tty 16 16K 16
ithread 90 15K 90
bus-sc 34 15K 1637
GEOM 82 14K 570
eventhandler 163 14K 163
in6_multi 85 12K 85
kenv 95 12K 95
kqueue 147 12K 1989
shmfd 7 11K 15
plimit 27 11K 362
CAM queue 5 11K 1528
rman 82 10K 437
ksem 5 10K 8
pwddesc 144 9K 1822
rpc 8 9K 8
bmsafemap 3 9K 1427
devstat 4 9K 4
UART 12 9K 12
filemon 1 8K 11
pfs_vncache 1 8K 1
sctp_atcl 21 8K 143
cred 30 8K 286
audit_evclass 239 8K 301
taskqueue 72 8K 84
lockf 70 8K 645
sglist 6 7K 6
sctp_stro 6 6K 28
CAM DEV 3 6K 510
pfs_nodes 22 6K 22
pf_ifnet 15 6K 28
ufs_dirhash 24 5K 45
UMA 269 5K 269
DEVFSP 69 5K 130
vt 11 5K 11
pf_table 2 4K 3
memdesc 1 4K 1
MCA 32 4K 32
evdev 4 4K 4
proc-args 162 4K 2921
freework 16 4K 2173
sctp_timw 14 4K 14
acpisem 28 4K 28
kcovinfo 54 4K 54
session 23 3K 45
selfd 44 3K 261424
terminal 11 3K 11
indirdep 10 3K 1214
ip6ndp 16 3K 18
acpidev 20 3K 20
uidinfo 4 3K 32
hhook 8 3K 10
tun 6 3K 6
clone 9 3K 10
sctp_ifa 17 3K 18
sctp_stri 4 2K 26
local_apic 1 2K 1
io_apic 1 2K 1
ipsec-saq 2 2K 2
in_multi 8 2K 24
Unitno 30 2K 711
ip6opt 10 2K 40
CC Mem 13 2K 181
CAM XPT 22 2K 543
pfil 14 2K 14
toponodes 6 2K 6
ipsecpolicy 2 2K 2
select 11 2K 84
nhops 6 2K 9
sctp_atky 27 2K 180
msi 9 2K 9
newdirblk 9 2K 834
netlink 2 2K 99
sctp_ifn 8 1K 18
softdep 1 1K 1
sahead 1 1K 1
secasvar 1 1K 1
mld 8 1K 8
igmp 8 1K 8
vnodemarker 2 1K 44
NFSD session 1 1K 1
diradd 7 1K 1330
CAM periph 4 1K 271
inpcbpolicy 26 1K 505
ipsec 3 1K 3
isadev 6 1K 6
osd 18 1K 196
mount 16 1K 969
pci_link 10 1K 10
mkdir 5 1K 1668
crypto 4 1K 32
encap_export_host 12 1K 12
dirrem 2 1K 1304
freefile 4 1K 1118
freeblks 2 1K 1025
cdev 2 1K 2
lkpikmalloc 8 1K 9
frag6 4 1K 40
chacha20random 1 1K 1
biobuf 1 1K 1
iov 6 1K 20534
sctp_athm 21 1K 153
ip_msource 5 1K 55
filedesc_to_leader 5 1K 11
vnodes 1 1K 6
ktls 1 1K 11
procdesc 2 1K 12
NFSD lckfile 1 1K 1
NFSD V4client 1 1K 1
DEVFS 9 1K 10
CAM SIM 2 1K 2
feeder 7 1K 7
pf_osfp 2 1K 2
sctp_map 12 1K 56
tcpfunc 3 1K 3
loginclass 3 1K 5
prison 6 1K 6
pf_rule 1 1K 1
cryptodev 2 1K 126
nexusdev 8 1K 8
apmdev 1 1K 1
atkbddev 2 1K 2
ip6_msource 2 1K 12
VN POLL 1 1K 33
aio 4 1K 8
soname 5 1K 3631
pmchooks 1 1K 1
filecaps 5 1K 92
CAM path 4 1K 1034
CAM dev queue 2 1K 2
CAM I/O Scheduler 1 1K 1
sctp_vrf 1 1K 1
sctp_aadr 1 1K 3
vnet 1 1K 1
pmc 1 1K 1
entropy 2 1K 38
acpiintr 1 1K 1
cpus 2 1K 2
vnet_data_free 1 1K 1
Per-cpu 1 1K 1
p1003.1b 1 1K 1
tcp_pcm_rack 0 0K 13
tcp_do_rack 0 0K 0
tcp_fsb_rack 0 0K 26
mqdata 0 0K 0
pf_altq 0 0K 0
pf_krule_item 0 0K 0
pf_temp 0 0K 16
sctp_mcore 0 0K 0
sctp_socko 0 0K 28
sctp_iter 0 0K 16
sctp_mvrf 0 0K 0
sctp_cpal 0 0K 0
sctp_cmsg 0 0K 0
sctp_stre 0 0K 0
sctp_athi 0 0K 0
sctp_a_it 0 0K 16
ipcomp 0 0K 0
esp 0 0K 0
ah 0 0K 0
madt_table 0 0K 2
smartpqi 0 0K 0
ixl 0 0K 0
ice-resmgr 0 0K 0
ice-osdep 0 0K 0
ice 0 0K 0
iavf 0 0K 0
axgbe 0 0K 0
fpukern_ctx 0 0K 0
xen_intr 0 0K 0
xen_hvm 0 0K 0
legacydrv 0 0K 0
NMI handlers 0 0K 0
bounce 0 0K 0
busdma 0 0K 0
qpidrv 0 0K 0
dmar_idpgtbl 0 0K 0
dmar_dom 0 0K 0
dmar_ctx 0 0K 0
amdiommu_dom 0 0K 0
amdiommu_ctx 0 0K 0
isci 0 0K 0
iommu_dmamap 0 0K 0
hyperv_socket 0 0K 0
bxe_ilt 0 0K 0
aesni_data 0 0K 0
xenbus 0 0K 0
vm_fictitious 0 0K 0
UMAHash 0 0K 0
vm_pgdata 0 0K 0
jblocks 0 0K 0
savedino 0 0K 1013
sentinel 0 0K 0
jfsync 0 0K 0
jtrunc 0 0K 0
sbdep 0 0K 22
jsegdep 0 0K 0
jseg 0 0K 0
jfreefrag 0 0K 0
jfreeblk 0 0K 0
jnewblk 0 0K 0
jmvref 0 0K 0
jremref 0 0K 0
jaddref 0 0K 0
freedep 0 0K 0
freefrag 0 0K 344
allocindir 0 0K 0
allocdirect 0 0K 0
ufs_trim 0 0K 0
mactemp 0 0K 0
audit_trigger 0 0K 0
audit_pipe_presel 0 0K 0
audit_pipeent 0 0K 0
audit_pipe 0 0K 0
audit_evname 0 0K 0
audit_bsm 0 0K 0
audit_gidset 0 0K 0
audit_text 0 0K 0
audit_path 0 0K 0
audit_data 0 0K 0
audit_cred 0 0K 0
ktls_ocf 0 0K 2
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5E_TLS_RX 0 0K 0
MLX5EEPROM 0 0K 0
MLX5E_TLS 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EN 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5DUMP 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
simple_attr 0 0K 0
seq_file 0 0K 0
lkpiskb 0 0K 0
radix 0 0K 0
idr 0 0K 0
lkpindev 0 0K 0
lkpimhi 0 0K 0
lkpifw 0 0K 0
lkpi80211 0 0K 0
NLM 0 0K 0
ipsec-spdcache 0 0K 0
ipsec-reg 0 0K 0
ipsec-misc 0 0K 0
ipsecrequest 0 0K 0
ip6_moptions 0 0K 5
in6_mfilter 0 0K 18
tcplog 0 0K 0
tcp_hwpace 0 0K 0
ip_moptions 0 0K 31
in_mfilter 0 0K 92
ipid 0 0K 0
80211scan 0 0K 0
80211ratectl 0 0K 0
80211power 0 0K 0
80211nodeie 0 0K 0
80211node 0 0K 0
80211mesh_gt 0 0K 0
80211mesh_rt 0 0K 0
80211perr 0 0K 0
80211prep 0 0K 0
80211preq 0 0K 0
80211dfs 0 0K 0
80211crypto 0 0K 0
80211vap 0 0K 0
iflib 0 0K 0
vlan 0 0K 0
gif 0 0K 0
ifdescr 0 0K 0
zlib 0 0K 19
fadvise 0 0K 1
statfs 0 0K 193
namei_tracker 0 0K 7
export_host 0 0K 0
cl_savebuf 0 0K 175
lio 0 0K 21
acl 0 0K 0
mbuf_tag 0 0K 0
accf 0 0K 0
pts 0 0K 0
timerfd 0 0K 0
ioctlops 0 0K 133
eventfd 0 0K 4
Witness 0 0K 0
stack 0 0K 0
sbuf 0 0K 436
firmware 0 0K 0
compressor 0 0K 0
SWAP 0 0K 0
sysctltmp 0 0K 655
sysctl 0 0K 3
ekcd 0 0K 0
dumper 0 0K 0
sendfile 0 0K 37
rctl 0 0K 0
cache 0 0K 0
prison_racct 0 0K 0
Fail Points 0 0K 0
sigio 0 0K 6
pwd 0 0K 0
tty console 0 0K 0
boottrace 0 0K 0
isofs_node 0 0K 0
isofs_mount 0 0K 0
tr_raid5_data 0 0K 0
tr_raid1e_data 0 0K 0
tr_raid1_data 0 0K 0
tr_raid0_data 0 0K 0
tr_concat_data 0 0K 0
md_sii_data 0 0K 0
md_promise_data 0 0K 0
md_nvidia_data 0 0K 0
md_jmicron_data 0 0K 0
md_intel_data 0 0K 0
md_ddf_data 0 0K 0
raid_data 0 0K 90
geom_flashmap 0 0K 0
tmpfs dir 0 0K 0
tmpfs name 0 0K 0
tmpfs mount 0 0K 0
tmpfs extattr 0 0K 0
NFS FHA 0 0K 0
newnfsmnt 0 0K 0
newnfsclient_req 0 0K 0
NFSCL layrecall 0 0K 0
NFSCL session 0 0K 0
NFSCL sockreq 0 0K 0
NFSCL devinfo 0 0K 0
NFSCL flayout 0 0K 0
NFSCL layout 0 0K 0
NFSD rollback 0 0K 0
NFSCL diroff 0 0K 0
NEWNFSnode 0 0K 0
NFSCL lck 0 0K 0
NFSCL lckown 0 0K 0
NFSCL client 0 0K 0
NFSCL deleg 0 0K 0
NFSCL open 0 0K 0
NFSCL owner 0 0K 0
NFS fh 0 0K 0
NFS req 0 0K 0
NFSD usrgroup 0 0K 0
NFSD string 0 0K 0
NFSD V4lock 0 0K 0
NFSD V4state 0 0K 0
msdosfs_fat 0 0K 0
msdosfs_mount 0 0K 0
msdosfs_node 0 0K 0
DEVFS4 0 0K 0
DEVFS2 0 0K 0
gntdev 0 0K 0
privcmd_dev 0 0K 0
evtchn_dev 0 0K 0
xenstore 0 0K 0
xnb 0 0K 0
xen_acpi 0 0K 0
xbbd 0 0K 0
xbd 0 0K 0
Balloon 0 0K 0
sysmouse 0 0K 0
vtfont 0 0K 0
pvscsi 0 0K 0
USBdev 0 0K 0
USB 0 0K 0
twsbuf 0 0K 0
tcp_log_dev 0 0K 5
midi buffers 0 0K 0
mixer 0 0K 0
ac97 0 0K 0
hdacc 0 0K 0
hdac 0 0K 0
hdaa 0 0K 0
SIIS driver 0 0K 0
PUC 0 0K 0
ppbusdev 0 0K 0
sr_iov 0 0K 0
OCS 0 0K 0
OCS 0 0K 0
nvme 0 0K 0
nvd 0 0K 0
netmap 0 0K 0
mwldev 0 0K 0
MVS driver 0 0K 0
mrsasbuf 0 0K 0
mpt_user 0 0K 0
mps_user 0 0K 0
MPSSAS 0 0K 0
mps 0 0K 0
mpr_user 0 0K 0
MPRSAS 0 0K 0
mpr 0 0K 0
mfibuf 0 0K 0
malodev 0 0K 0
LED 0 0K 0
ix_sriov 0 0K 0
ix 0 0K 0
ipsbuf 0 0K 0
ciss_data 0 0K 0
BACKLIGHT 0 0K 0
ath_hal 0 0K 0
athdev 0 0K 0
ata_pci 0 0K 0
ata_dma 0 0K 0
ata_generic 0 0K 0
AHCI driver 0 0K 0
agp 0 0K 0
acpipwr 0 0K 0
acpi_perf 0 0K 0
acpicmbat 0 0K 0
aacraidcam 0 0K 0
aacraid_buf 0 0K 0
aaccam 0 0K 0
aacbuf 0 0K 0
zstd 0 0K 0
XZ_DEC 0 0K 0
nvlist 0 0K 525
SCSI ENC 0 0K 0
SCSI sa 0 0K 0
scsi_pass 0 0K 0
scsi_da 0 0K 69
ata_da 0 0K 0
scsi_ch 0 0K 0
scsi_cd 0 0K 0
nvme_da 0 0K 0
CAM CCB 0 0K 523
CAM ccb queue 0 0K 0
db> show uma
Zone Size Used Free Requests Sleeps Bucket Total Mem XFree
mbuf_jumbo_page 4096 8337 1061 22859 0 254 38494208 0
malloc-4096 4096 861 5 1074 0 2 3547136 0
vmem btag 56 52298 85 52298 0 254 2933448 0
RADIX NODE 152 16274 413 68858 0 62 2536424 0
mbuf 256 8912 750 43072 0 254 2473472 0
md1 8 270336 176 270336 0 254 2164096 0
BUF TRIE 152 349 11455 4852 0 62 1794208 0
malloc-384 384 4175 25 4534 0 30 1612800 0
mbuf_cluster 2048 508 254 509 0 254 1560576 0
malloc-128 128 11645 73 14161 0 126 1499904 0
malloc-16384 16384 85 2 1043 0 1 1425408 0
UMA Slabs 0 112 11840 34 11840 0 126 1329888 0
sctp_asoc 2256 6 504 28 0 254 1150560 0
malloc-64 64 59 17014 281321 0 254 1092672 0
FFS inode 1168 640 32 1768 0 8 784896 0
malloc-4096 4096 145 3 1761 0 2 606208 0
malloc-65536 65536 9 0 12 0 1 589824 0
sctp_ep 1152 11 500 96 0 254 588672 0
VM OBJECT 264 1997 43 24435 0 30 538560 0
socket 1024 47 461 1927 0 254 520192 0
lkpicurr 168 2 3094 2 0 62 520128 0
pbuf 2624 0 182 0 0 2 477568 0
256 Bucket 2048 213 19 3944 0 8 475136 0
THREAD 1824 225 15 1254 0 8 437760 0
malloc-65536 65536 4 2 196 0 1 393216 0
sctp_raddr 736 6 511 58 0 254 380512 0
MAP ENTRY 96 3548 232 78584 0 126 362880 0
VNODE 440 681 102 1811 0 30 344520 0
malloc-32768 32768 4 5 191 0 1 294912 0
malloc-64 64 4228 119 6011 0 254 278208 0
malloc-256 256 471 594 8355 0 62 272640 0
malloc-16 16 14533 217 14651 0 254 236000 0
malloc-2048 2048 100 12 200 0 8 229376 0
DEVCTL 1024 39 181 166 0 0 225280 0
FPU_save_area 832 227 34 2015 0 16 217152 0
tcp_log 416 0 513 161 0 254 213408 0
PROC 1376 143 11 1759 0 8 211904 0
malloc-32768 32768 0 6 981 0 1 196608 0
UMA Zones 768 241 3 241 0 16 187392 0
malloc-32 32 5413 257 7000 0 254 181440 0
malloc-128 128 1264 131 26113 0 126 178560 0
FFS2 dinode 256 640 50 1768 0 62 176640 0
lkpimm 56 1 3095 1 0 254 173376 0
unpcb 320 13 503 1285 0 254 165120 0
filedesc0 1072 144 10 1822 0 8 165088 0
malloc-1024 1024 131 29 2042 0 16 163840 0
malloc-128 128 983 164 2268 0 126 146816 0
S VFS Cache 104 1017 387 2287 0 126 146016 0
malloc-65536 65536 2 0 2 0 1 131072 0
malloc-65536 65536 0 2 9 0 1 131072 0
mbuf_packet 256 13 495 737 0 254 130048 0
ksiginfo 112 138 906 368 0 126 116928 0
malloc-2048 2048 18 38 1326 0 8 114688 0
malloc-128 128 533 242 3882 0 126 99200 0
malloc-32768 32768 2 1 4 0 1 98304 0
malloc-384 384 88 152 2180 0 30 92160 0
malloc-384 384 178 62 300 0 30 92160 0
UMA Kegs 384 226 7 226 0 30 89472 0
syncache 168 0 528 5 0 254 88704 0
64 Bucket 512 99 69 6690 0 30 86016 0
g_bio 408 0 210 25042 0 30 85680 0
malloc-256 256 251 64 1687 0 62 80640 0
sctp_chunk 152 60 460 102 0 254 79040 0
VMSPACE 584 113 20 1708 0 16 77672 0
malloc-8192 8192 7 2 140 0 1 73728 0
128 Bucket 1024 57 10 296 0 16 68608 0
malloc-64 64 698 373 3695 0 254 68544 0
DIRHASH 1024 34 30 48 0 16 65536 0
malloc-65536 65536 1 0 1 0 1 65536 0
malloc-65536 65536 1 0 1 0 1 65536 0
malloc-32768 32768 2 0 2 0 1 65536 0
malloc-4096 4096 12 4 585 0 2 65536 0
malloc-4096 4096 13 3 27 0 2 65536 0
malloc-256 256 109 146 2160 0 62 65280 0
malloc-256 256 67 188 4190 0 62 65280 0
32 Bucket 256 98 157 2469 0 62 65280 0
sctp_stream_msg_out 112 0 540 15 0 254 60480 0
malloc-4096 4096 10 4 16 0 2 57344 0
malloc-64 64 637 182 1893 0 254 52416 0
malloc-128 128 34 369 2875 0 126 51584 0
malloc-256 256 25 170 3148 0 62 49920 0
NAMEI 1024 0 48 19096 0 16 49152 0
malloc-8192 8192 3 3 13 0 1 49152 0
malloc-8192 8192 6 0 7 0 1 49152 0
malloc-2048 2048 16 8 18 0 8 49152 0
pcpu-8 8 5059 573 5391 0 254 45056 0
PWD 40 91 1020 846 0 254 44440 0
malloc-32 32 1078 308 3269 0 254 44352 0
tcp_inpcb 1304 13 20 180 0 8 43032 0
TURNSTILE 136 241 74 241 0 62 42840 0
vnpbuf 2624 0 16 1 0 16 41984 0
malloc-8192 8192 5 0 5 0 1 40960 0
malloc-8192 8192 3 2 5 0 1 40960 0
malloc-4096 4096 4 6 702 0 2 40960 0
malloc-4096 4096 8 2 13 0 2 40960 0
pipe 736 24 31 401 0 16 40480 0
sctp_readq 152 0 260 9 0 254 39520 0
da_ccb 544 0 70 6507 0 16 38080 0
udp_inpcb 408 7 83 238 0 30 36720 0
hostcache 64 3 564 3 0 254 36288 0
malloc-64 64 24 543 19798 0 254 36288 0
malloc-64 64 217 350 265 0 254 36288 0
malloc-64 64 7 560 162 0 254 36288 0
malloc-64 64 164 403 1848 0 254 36288 0
16 Bucket 144 66 186 783 0 62 36288 0
tcp_rack_map 128 0 279 42 0 126 35712 0
tcp_bbr_map 128 0 279 37 0 126 35712 0
malloc-128 128 74 205 258 0 126 35712 0
malloc-128 128 0 279 619 0 126 35712 0
malloc-128 128 13 266 13 0 126 35712 0
routing nhops 256 35 100 42 0 62 34560 0
ttyoutq 256 72 63 160 0 62 34560 0
malloc-256 256 43 92 118 0 62 34560 0
malloc-256 256 32 103 332 0 62 34560 0
malloc-256 256 33 102 914 0 62 34560 0
ripcb 376 4 86 63 0 30 33840 0
SLEEPQUEUE 88 241 143 241 0 126 33792 0
malloc-32768 32768 0 1 11 0 1 32768 0
malloc-16384 16384 0 2 3 0 1 32768 0
malloc-2048 2048 4 12 9 0 8 32768 0
malloc-2048 2048 10 6 10 0 8 32768 0
malloc-2048 2048 6 10 158 0 8 32768 0
malloc-2048 2048 6 10 62 0 8 32768 0
malloc-2048 2048 4 12 20 0 8 32768 0
malloc-1024 1024 0 32 13 0 16 32768 0
malloc-1024 1024 3 29 3 0 16 32768 0
malloc-1024 1024 23 9 491 0 16 32768 0
malloc-1024 1024 10 22 10 0 16 32768 0
malloc-1024 1024 7 25 32 0 16 32768 0
malloc-1024 1024 15 17 19 0 16 32768 0
malloc-512 512 1 63 18 0 30 32768 0
malloc-512 512 3 61 45 0 30 32768 0
malloc-512 512 11 53 204 0 30 32768 0
malloc-512 512 6 58 239 0 30 32768 0
malloc-512 512 5 59 27 0 30 32768 0
malloc-512 512 2 62 44 0 30 32768 0
malloc-512 512 6 58 37 0 30 32768 0
pcpu-64 64 495 17 495 0 254 32768 0
ertt_txseginfo 40 1 807 3091 0 254 32320 0
ttyinq 160 135 65 300 0 62 32000 0
Files 80 259 141 10071 0 126 32000 0
PGRP 120 30 234 56 0 126 31680 0
clpbuf 2624 0 12 260 0 4 31488 0
L VFS Cache 320 0 96 54 0 30 30720 0
rl_entry 48 27 561 66 0 254 28224 0
4 Bucket 48 7 581 28 0 254 28224 0
AIO 208 1 132 96 0 62 27664 0
udplite_inpcb 408 2 61 24 0 30 25704 0
cpuset 200 9 119 11 0 62 25600 0
r
---
This report is generated by a bot. It may contain errors.
See https://goo.gl/tpsmEJ for more information about syzbot.
syzbot engineers can be reached at syzk...@googlegroups.com.
syzbot will keep track of this issue. See:
https://goo.gl/tpsmEJ#status for how to communicate with syzbot.
If the report is already addressed, let syzbot know by replying with:
#syz fix: exact-commit-title
If you want to overwrite report's subsystems, reply with:
#syz set subsystems: new-subsystem
(See the list of subsystem names on the web dashboard)
If the report is a duplicate of another one, reply with:
#syz dup: exact-subject-of-another-report
If you want to undo deduplication, reply with:
#syz undup
syzbot
Jul 26, 2025, 3:53:19 PM7/26/25
to syzkaller-f...@googlegroups.com
Auto-closing this bug as obsolete.
Crashes did not happen for a while, no reproducer and no activity.
Crashes did not happen for a while, no reproducer and no activity.
Reply all
Reply to author
Forward
0 new messages