panic: proc_dtor: non-empty p_ktr (2)
2 views
Skip to first unread message
syzbot
Dec 9, 2025, 11:02:31 PM (3 days ago) Dec 9
to syzkaller-f...@googlegroups.com
Hello,
syzbot found the following issue on:
HEAD commit: cc1e4aae5a67 rc.d/ipfilter: ipfilter must be enabled for o..
git tree: freebsd-src
console output: https://syzkaller.appspot.com/x/log.txt?x=137ba1c2580000
dashboard link: https://syzkaller.appspot.com/bug?extid=25dabe4046a645a0566c
Unfortunately, I don't have any reproducer for this issue yet.
IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+25dabe...@syzkaller.appspotmail.com
panic: proc_dtor: non-empty p_ktr
cpuid = 0
time = 1765339291
KDB: stack backtrace:
db_trace_self_wrapper() at db_trace_self_wrapper+0xc6/frame 0xfffffe0056c6e350
kdb_backtrace() at kdb_backtrace+0xd0/frame 0xfffffe0056c6e4b0
vpanic() at vpanic+0x257/frame 0xfffffe0056c6e670
panic() at panic+0xb5/frame 0xfffffe0056c6e730
proc_dtor() at proc_dtor+0x532/frame 0xfffffe0056c6e780
item_dtor() at item_dtor+0xc3/frame 0xfffffe0056c6e7d0
uma_zfree_arg() at uma_zfree_arg+0x10a/frame 0xfffffe0056c6e870
proc_reap() at proc_reap+0x831/frame 0xfffffe0056c6e8d0
proc_to_reap() at proc_to_reap+0x6d8/frame 0xfffffe0056c6e930
kern_wait6() at kern_wait6+0x34b/frame 0xfffffe0056c6ea10
sys_wait4() at sys_wait4+0x1c4/frame 0xfffffe0056c6ed10
amd64_syscall() at amd64_syscall+0x4e2/frame 0xfffffe0056c6ef30
fast_syscall_common() at fast_syscall_common+0xf8/frame 0xfffffe0056c6ef30
--- syscall (7, FreeBSD ELF64, wait4), rip = 0x2b10ca, rsp = 0x8205ab358, rbp = 0x8205ab3c0 ---
KDB: enter: panic
[ thread pid 1 tid 100002 ]
Stopped at kdb_enter+0x6e: movq $0,0x258a057(%rip)
db>
db> set $lines = 0
db> set $maxwidth = 0
db> show registers
cs 0x20
ds 0x3b
es 0x3b
fs 0x13
gs 0x1b
ss 0x28
rax 0x12
rcx 0xfffffe0002bf1850
rdx 0
rbx 0xffffffff82836a20 .str.27
rsp 0xfffffe0056c6e490
rbp 0xfffffe0056c6e4b0
rsi 0
rdi 0xffffffff8165fb59 printf+0x149
r8 0
r9 0xffffffff
r10 0x1
r11 0x17
r12 0xfffffe000780e000
r13 0xfffffffffffffffe
r14 0xffffffff82836a20 .str.27
r15 0
rip 0xffffffff81648f3e kdb_enter+0x6e
rflags 0x46
kdb_enter+0x6e: movq $0,0x258a057(%rip)
db> show proc
Process 1 (init) at 0xfffffe0007809010:
state: NORMAL
uid: 0 gid: 0 supp gids: 0
parent: pid 0 at 0xffffffff83b5d020
ABI: FreeBSD ELF64
flag: 0x10004200 flag2: 0
arguments: /sbin/init
reaper: 0xffffffff83b5d020 reapsubtree: 1
sigparent: 20
vmspace: 0xfffffe0007811000
(map 0xfffffe0007811000)
(map.pmap 0xfffffe00078110a0)
(pmap 0xfffffe0007811110)
threads: 1
100002 Run CPU 0 [init]
db> ps
pid ppid pgrp uid state wmesg wchan cmd
2284 2280 766 0 S uwait 0xfffffe00781e9c00 syz-executor
2282 765 765 0 R (threaded) syz-executor
101304 Run CPU 1 syz-executor
101966 RunQ syz-executor
2281 763 763 0 R (threaded) syz-executor
101858 RunQ syz-executor
101964 S uwait 0xfffffe007865f780 syz-executor
101965 S uwait 0xfffffe007879b900 syz-executor
2280 766 766 0 R (threaded) syz-executor
101303 RunQ syz-executor
101961 S umtxn 0xfffffe007865f580 syz-executor
101962 S uwait 0xfffffe00781e9180 syz-executor
101963 S uwait 0xfffffe0078660a00 syz-executor
2276 1 764 0 SV uwait 0xfffffe0078662280 syz-executor
2275 1 764 0 S uwait 0xfffffe0078662180 syz-executor
2258 1 764 0 SV uwait 0xfffffe00781ea580 syz-executor
2238 1 765 0 SV uwait 0xfffffe0078660600 syz-executor
2223 2215 2223 0 Ss select 0xfffffe007879aac0 dhclient
2218 1 2218 0 Ss select 0xfffffe007879ac40 dhclient
2215 2201 423 65 S select 0xfffffe0078660040 dhclient
2205 1 763 0 SV uwait 0xfffffe0077cab500 syz-executor
2201 423 423 0 S wait 0xfffffe0078494ab8 sh
2190 1 2190 65 Ss select 0xfffffe007879ad40 dhclient
2184 2183 763 0 S uwait 0xfffffe0078661a00 syz-executor
2183 1 763 0 SV wait 0xfffffe0078496018 syz-executor
2181 1 763 0 S uwait 0xfffffe007879b500 syz-executor
2176 1 764 0 SV uwait 0xfffffe00781e8d00 syz-executor
2174 1 764 0 S uwait 0xfffffe007879b800 syz-executor
2164 1 765 0 S uwait 0xfffffe0078661b00 syz-executor
2163 1 765 0 SV uwait 0xfffffe0078662580 syz-executor
2162 1 765 0 S uwait 0xfffffe00781e8580 syz-executor
2159 1 763 0 SV uwait 0xfffffe0078660b00 syz-executor
2158 1 763 0 S uwait 0xfffffe0078660280 syz-executor
2155 2153 766 0 S uwait 0xfffffe007879bb00 syz-executor
2153 1 766 0 SV wait 0xfffffe0078495568 syz-executor
2152 1 766 0 S uwait 0xfffffe0078660800 syz-executor
2142 1 765 0 SV uwait 0xfffffe0078662880 syz-executor
2140 1 765 0 S uwait 0xfffffe00781e8500 syz-executor
2128 2127 766 0 S uwait 0xfffffe00781e9680 syz-executor
2127 1 766 0 SV wait 0xfffffe0078493000 syz-executor
2126 1 766 0 S uwait 0xfffffe00781e9800 syz-executor
2125 2124 765 0 S uwait 0xfffffe00781ea080 syz-executor
2124 1 765 0 SV wait 0xfffffe0078494008 syz-executor
2123 1 765 0 S uwait 0xfffffe0077cab700 syz-executor
2122 1 763 0 S uwait 0xfffffe00781e9d80 syz-executor
2119 1 763 0 S uwait 0xfffffe007865fd80 syz-executor
2115 1 766 0 SV uwait 0xfffffe0077caee00 syz-executor
2114 1 766 0 S uwait 0xfffffe00781e9780 syz-executor
2099 1 763 0 S uwait 0xfffffe0078662b00 syz-executor
2097 1 763 0 S uwait 0xfffffe0078661280 syz-executor
2092 1 764 0 SV uwait 0xfffffe0077caef00 syz-executor
2091 1 764 0 S uwait 0xfffffe00781ea780 syz-executor
2089 2088 766 0 S uwait 0xfffffe0077cac980 syz-executor
2088 1 766 0 SV wait 0xfffffe0078467018 syz-executor
2087 1 766 0 S uwait 0xfffffe0078660200 syz-executor
2077 1 765 0 S uwait 0xfffffe0078660c80 syz-executor
2076 1 765 0 S uwait 0xfffffe0077cab880 syz-executor
2062 2061 766 0 S uwait 0xfffffe00781e8700 syz-executor
2061 1 766 0 SV wait 0xfffffe007845e010 syz-executor
2060 1 766 0 S uwait 0xfffffe0078660e00 syz-executor
2052 2051 763 0 S uwait 0xfffffe0077cae500 syz-executor
2051 1 763 0 SV wait 0xfffffe0078464ab0 syz-executor
2050 1 763 0 S uwait 0xfffffe0078662780 syz-executor
2037 2036 766 0 S uwait 0xfffffe00781ea280 syz-executor
2036 1 766 0 SV wait 0xfffffe0078434ab8 syz-executor
2033 1 766 0 S uwait 0xfffffe00781e8080 syz-executor
1979 1978 766 0 S uwait 0xfffffe0077caed00 syz-executor
1978 1 766 0 SV wait 0xfffffe007845d560 syz-executor
1977 1 766 0 S uwait 0xfffffe00781e8180 syz-executor
1966 1 764 0 S uwait 0xfffffe0078662380 syz-executor
1951 1 765 0 SV uwait 0xfffffe0078660f00 syz-executor
1950 1 765 0 S uwait 0xfffffe00781e9a00 syz-executor
1932 1 765 0 S uwait 0xfffffe00781eb380 syz-executor
1918 1 766 0 S uwait 0xfffffe00781e8280 syz-executor
1899 1 766 0 SV uwait 0xfffffe00781eb600 syz-executor
1897 1 766 0 S uwait 0xfffffe00781e8a00 syz-executor
1874 1872 766 0 S uwait 0xfffffe0077cab780 syz-executor
1872 1 766 0 SV uwait 0xfffffe0077cab380 syz-executor
1871 1 766 0 S uwait 0xfffffe00781e8b00 syz-executor
1869 1 765 0 SV uwait 0xfffffe00781e9e80 syz-executor
1867 1 765 0 S uwait 0xfffffe00781e9900 syz-executor
1859 1 763 0 S uwait 0xfffffe0077cac380 syz-executor
1858 1 763 0 S uwait 0xfffffe00781e9c80 syz-executor
1853 1 765 0 S uwait 0xfffffe00781e8800 syz-executor
1852 1 765 0 S uwait 0xfffffe00781ea380 syz-executor
1830 1 764 0 S uwait 0xfffffe0077cac680 syz-executor
1829 1 764 0 S uwait 0xfffffe0077cab300 syz-executor
1815 1814 765 0 S uwait 0xfffffe007793ce00 syz-executor
1814 1 765 0 SV umtxn 0xfffffe006df46c80 syz-executor
1813 1 765 0 S uwait 0xfffffe00781eaa00 syz-executor
1766 1 763 0 T syz-executor
1763 1 1763 0 Ss select 0xfffffe00781e8ec0 dhclient
1757 1 1757 0 Ss select 0xfffffe00781e92c0 dhclient
1745 1 766 0 T uwait 0xfffffe006df47d80 syz-executor
1716 1 1716 65 Ss select 0xfffffe00781e9140 dhclient
1708 1 763 0 SV uwait 0xfffffe00781ea800 syz-executor
1707 1 763 0 S uwait 0xfffffe0077cab080 syz-executor
1687 1 765 0 SV uwait 0xfffffe0077cace80 syz-executor
1686 1 765 0 S uwait 0xfffffe005830ca80 syz-executor
1683 1682 763 0 S uwait 0xfffffe005830d500 syz-executor
1682 1 763 0 SV wait 0xfffffe0078430ab8 syz-executor
1679 1 763 0 S uwait 0xfffffe0077939600 syz-executor
1671 1 765 0 S uwait 0xfffffe00781ea180 syz-executor
1670 1 766 0 S uwait 0xfffffe0077939700 syz-executor
1669 1 765 0 S uwait 0xfffffe006df47c00 syz-executor
1668 1 765 0 S uwait 0xfffffe006df47a00 syz-executor
1662 1 763 0 S uwait 0xfffffe006df47e80 syz-executor
1651 1650 766 0 S uwait 0xfffffe0077caba80 syz-executor
1650 1 766 0 SV wait 0xfffffe00587e9018 syz-executor
1649 1 766 0 S uwait 0xfffffe00781eab00 syz-executor
1644 1643 765 0 S uwait 0xfffffe007793ae80 syz-executor
1643 1 765 0 SV wait 0xfffffe00587f6560 syz-executor
1640 1 765 0 S uwait 0xfffffe00781eb080 syz-executor
1608 1 765 0 S uwait 0xfffffe0077cacb80 syz-executor
1582 1581 766 0 S uwait 0xfffffe0077cab980 syz-executor
1581 1 766 0 SV wait 0xfffffe0058774008 syz-executor
1580 1 766 0 S uwait 0xfffffe00781eaf00 syz-executor
1556 1555 763 0 S uwait 0xfffffe00781ead00 syz-executor
1555 1 763 0 SV wait 0xfffffe0078400000 syz-executor
1553 1 763 0 S uwait 0xfffffe0077cad980 syz-executor
1544 1543 766 0 S uwait 0xfffffe00781ea900 syz-executor
1543 1 766 0 SV wait 0xfffffe00587d3008 syz-executor
1542 1 766 0 S uwait 0xfffffe0077cabe80 syz-executor
1528 1527 763 0 S uwait 0xfffffe0077cac180 syz-executor
1527 1 763 0 SV wait 0xfffffe00587d5018 syz-executor
1526 1 763 0 S uwait 0xfffffe007793a580 syz-executor
1519 1518 766 0 S uwait 0xfffffe0077939f00 syz-executor
1518 1 766 0 SV wait 0xfffffe00587f5ab0 syz-executor
1517 1 766 0 S uwait 0xfffffe0077cac000 syz-executor
1515 1514 765 0 S uwait 0xfffffe0077cabb80 syz-executor
1514 1 765 0 SV wait 0xfffffe00587d0568 syz-executor
1513 1 765 0 S uwait 0xfffffe0077939800 syz-executor
1512 1511 764 0 S uwait 0xfffffe005830f900 syz-executor
1511 1 764 0 SV wait 0xfffffe00587e6ab0 syz-executor
1510 1 764 0 S uwait 0xfffffe0077cac780 syz-executor
1491 1490 766 0 S uwait 0xfffffe0077cac580 syz-executor
1490 1 766 0 SV wait 0xfffffe00587e7ab8 syz-executor
1488 1 766 0 S uwait 0xfffffe0077cacd80 syz-executor
1484 1483 763 0 S uwait 0xfffffe0077cac280 syz-executor
1483 1 763 0 SV wait 0xfffffe00587d0010 syz-executor
1482 1 763 0 S uwait 0xfffffe007793ae00 syz-executor
1466 1465 764 0 S uwait 0xfffffe0077caca80 syz-executor
1465 1 764 0 SV wait 0xfffffe00587d1570 syz-executor
1464 1 764 0 S uwait 0xfffffe00781eb780 syz-executor
1451 1450 766 0 S uwait 0xfffffe005830cf00 syz-executor
1450 1 766 0 SV wait 0xfffffe000780a570 syz-executor
1449 1 766 0 S uwait 0xfffffe00781eba00 syz-executor
1447 1445 763 0 S uwait 0xfffffe0077939a00 syz-executor
1445 1 763 0 SV wait 0xfffffe00587a9018 syz-executor
1444 1 763 0 S uwait 0xfffffe007793c680 syz-executor
1427 1426 765 0 S uwait 0xfffffe0077939b00 syz-executor
1426 1 765 0 SV wait 0xfffffe00587ceab0 syz-executor
1425 1 765 0 S uwait 0xfffffe007793bc00 syz-executor
1423 1422 766 0 S uwait 0xfffffe006df44780 syz-executor
1422 1 766 0 SV wait 0xfffffe0058797570 syz-executor
1421 1 766 0 S uwait 0xfffffe0077cad680 syz-executor
1420 1417 764 0 S uwait 0xfffffe007793b080 syz-executor
1417 1 764 0 SV wait 0xfffffe0058797018 syz-executor
1415 1 764 0 S uwait 0xfffffe0077939900 syz-executor
1396 1 766 0 S uwait 0xfffffe006df47900 syz-executor
1395 1 766 0 S uwait 0xfffffe00781ebb00 syz-executor
1387 1386 764 0 S uwait 0xfffffe007793ba80 syz-executor
1386 1 764 0 SV wait 0xfffffe0058795ab8 syz-executor
1385 1 764 0 S uwait 0xfffffe005830f880 syz-executor
1382 1381 763 0 S uwait 0xfffffe007793ad00 syz-executor
1381 1 763 0 SV wait 0xfffffe0058796568 syz-executor
1380 1377 765 0 S uwait 0xfffffe007793a480 syz-executor
1377 1 765 0 SV wait 0xfffffe0058774560 syz-executor
1376 1 765 0 S uwait 0xfffffe0077cad400 syz-executor
1374 1 763 0 S uwait 0xfffffe0077cadb80 syz-executor
1350 1349 766 0 S uwait 0xfffffe007793a380 syz-executor
1349 1 766 0 SV wait 0xfffffe0058773ab0 syz-executor
1348 1347 763 0 S uwait 0xfffffe005830fd00 syz-executor
1347 1 763 0 SV wait 0xfffffe00587a6000 syz-executor
1346 1 766 0 S uwait 0xfffffe006df44480 syz-executor
1345 1 763 0 S uwait 0xfffffe007793c980 syz-executor
1309 1307 766 0 S uwait 0xfffffe0077cae700 syz-executor
1308 1306 763 0 S uwait 0xfffffe006df44880 syz-executor
1307 1 766 0 SV wait 0xfffffe0058794000 syz-executor
1306 1 763 0 SV wait 0xfffffe005878dab8 syz-executor
1305 1 766 0 S uwait 0xfffffe005830f700 syz-executor
1303 1 763 0 S uwait 0xfffffe007793bd80 syz-executor
1274 1273 763 0 S uwait 0xfffffe0077cad880 syz-executor
1273 1 763 0 SV wait 0xfffffe005878f570 syz-executor
1272 1 763 0 S uwait 0xfffffe007793a780 syz-executor
1268 1267 765 0 S uwait 0xfffffe007793b700 syz-executor
1267 1 765 0 SV wait 0xfffffe005878c000 syz-executor
1266 1 765 0 S uwait 0xfffffe007793c580 syz-executor
1261 1260 766 0 S uwait 0xfffffe007793be00 syz-executor
1260 1 766 0 SV wait 0xfffffe0058794ab0 syz-executor
1256 1 766 0 S uwait 0xfffffe007793b480 syz-executor
1242 1 764 0 S uwait 0xfffffe007793a880 syz-executor
1236 1 765 0 S uwait 0xfffffe007793aa00 syz-executor
1234 0 0 0 DL mdwait 0xfffffe0007aa2000 [md58027]
1229 1228 763 0 S uwait 0xfffffe0077cae400 syz-executor
1228 1 763 0 SV wait 0xfffffe005876cab8 syz-executor
1227 1 763 0 S uwait 0xfffffe006df45b80 syz-executor
1223 1221 766 0 S uwait 0xfffffe0077cae900 syz-executor
1221 1 766 0 SV wait 0xfffffe0058776018 syz-executor
1219 1 766 0 S uwait 0xfffffe005830f800 syz-executor
1202 1 766 0 S uwait 0xfffffe0077cae300 syz-executor
1201 1 766 0 S uwait 0xfffffe006df44800 syz-executor
1197 1196 763 0 S uwait 0xfffffe005830fb80 syz-executor
1196 1 763 0 SV wait 0xfffffe005876b558 syz-executor
1195 1 763 0 S uwait 0xfffffe0077cae800 syz-executor
1182 1181 765 0 S uwait 0xfffffe007793c480 syz-executor
1181 1 765 0 SV wait 0xfffffe005876b000 syz-executor
1180 1 765 0 S uwait 0xfffffe007793c700 syz-executor
1169 1168 763 0 S uwait 0xfffffe006df47000 syz-executor
1168 1 763 0 SV wait 0xfffffe0058754010 syz-executor
1167 1 763 0 S uwait 0xfffffe0058570d80 syz-executor
1162 1161 764 0 S uwait 0xfffffe007793b600 syz-executor
1161 1 764 0 SV wait 0xfffffe0058728010 syz-executor
1160 1 764 0 S uwait 0xfffffe006df44000 syz-executor
1135 1134 765 0 S uwait 0xfffffe0058570e80 syz-executor
1134 1 765 0 SV wait 0xfffffe005876c560 syz-executor
1133 1 765 0 S uwait 0xfffffe006df44200 syz-executor
1107 1106 763 0 S uwait 0xfffffe005856f380 syz-executor
1106 1 763 0 SV wait 0xfffffe0058738560 syz-executor
1105 1 763 0 S uwait 0xfffffe007793c380 syz-executor
1092 1091 764 0 S uwait 0xfffffe005830fc80 syz-executor
1091 1 764 0 SV wait 0xfffffe0058728568 syz-executor
1090 1 764 0 S uwait 0xfffffe007793c180 syz-executor
1072 1071 763 0 S uwait 0xfffffe006df45300 syz-executor
1071 1 763 0 SV wait 0xfffffe00586f4ac0 syz-executor
1070 1 763 0 S uwait 0xfffffe0058570a80 syz-executor
1069 1 766 0 SV uwait 0xfffffe006df45600 syz-executor
1067 1 766 0 S uwait 0xfffffe005830d180 syz-executor
1064 1 1064 0 Ss select 0xfffffe007793bec0 dhclient
1060 1 1060 0 Ss select 0xfffffe005856e640 dhclient
1004 1003 763 0 S uwait 0xfffffe005830fa80 syz-executor
1003 1 763 0 SV wait 0xfffffe005870a560 syz-executor
1002 1 763 0 S uwait 0xfffffe006df45500 syz-executor
983 982 764 0 S uwait 0xfffffe006df44300 syz-executor
982 1 764 0 SV wait 0xfffffe0058726000 syz-executor
981 1 764 0 S uwait 0xfffffe006df45180 syz-executor
963 961 763 0 S uwait 0xfffffe006df44c80 syz-executor
961 1 763 0 SV wait 0xfffffe0058728ac0 syz-executor
960 1 763 0 S uwait 0xfffffe0058570c80 syz-executor
954 953 765 0 S uwait 0xfffffe005830d680 syz-executor
953 1 765 0 SV wait 0xfffffe0058709ab0 syz-executor
952 1 765 0 S uwait 0xfffffe006df45e80 syz-executor
932 931 766 0 S uwait 0xfffffe0058570a00 syz-executor
931 1 766 0 SV wait 0xfffffe0058737558 syz-executor
930 1 766 0 S uwait 0xfffffe006df46e80 syz-executor
911 909 763 0 S uwait 0xfffffe005830d480 syz-executor
909 1 763 0 SV wait 0xfffffe0058727008 syz-executor
908 1 763 0 S uwait 0xfffffe006df44d80 syz-executor
901 0 0 0 DL (threaded) [KTLS]
100166 D - 0xfffffe00598f0700 [thr_0]
100186 D - 0xfffffe00598f0780 [thr_1]
100187 D - 0xffffffff83cd59e8 [reclaim_0]
893 891 766 0 S uwait 0xfffffe005830d880 syz-executor
891 1 766 0 SV wait 0xfffffe0058709000 syz-executor
890 1 766 0 S uwait 0xfffffe006df46b80 syz-executor
869 1 763 0 S uwait 0xfffffe005830d380 syz-executor
859 1 763 0 S uwait 0xfffffe006df44a80 syz-executor
855 1 764 0 S uwait 0xfffffe006df45a00 syz-executor
819 1 766 0 S uwait 0xfffffe005830d780 syz-executor
813 0 0 0 DL aiordy 0xfffffe005870b568 [aiod4]
812 0 0 0 DL aiordy 0xfffffe005870bac0 [aiod3]
811 0 0 0 DL aiordy 0xfffffe005860c010 [aiod2]
810 0 0 0 DL aiordy 0xfffffe005860cac0 [aiod1]
766 762 766 0 S nanslp 0xffffffff83bb4001 syz-executor
765 762 765 0 R syz-executor
764 762 764 0 R syz-executor
763 762 763 0 R syz-executor
762 760 760 0 S select 0xfffffe006df47340 syz-executor
760 758 760 0 Ss sigsusp 0xfffffe0058603b68 csh
758 681 758 0 Ss select 0xfffffe006df47140 sshd
747 1 747 0 Ss+ ttyin 0xfffffe00541bb4b0 getty
746 1 746 0 Ss+ ttyin 0xfffffe00542a68b0 getty
745 1 745 0 Ss+ ttyin 0xfffffe00542a6cb0 getty
744 1 744 0 Ss+ ttyin 0xfffffe00542a70b0 getty
743 1 743 0 Ss+ ttyin 0xfffffe00542a74b0 getty
742 1 742 0 Ss+ ttyin 0xfffffe00542a78b0 getty
741 1 741 0 Ss+ ttyin 0xfffffe00542a7cb0 getty
740 1 740 0 Ss+ ttyin 0xfffffe00542a80b0 getty
739 1 739 0 Ss+ ttyin 0xfffffe00542a84b0 getty
685 1 685 0 Ss nanslp 0xffffffff83bb4001 cron
681 1 681 0 Ss select 0xfffffe005856e440 sshd
494 1 494 0 Ss select 0xfffffe005856eac0 syslogd
423 1 423 0 Ss wait 0xfffffe00586c9000 devd
422 1 422 65 Ss select 0xfffffe005830c0c0 dhclient
337 1 337 0 Ss select 0xfffffe0007b56d40 dhclient
334 1 334 0 Ss select 0xfffffe0007b56e40 dhclient
16 0 0 0 DL syncer 0xffffffff83ce1be0 [syncer]
15 0 0 0 DL vlruwt 0xfffffe0058602558 [vnlru]
14 0 0 0 DL (threaded) [bufdaemon]
100079 D psleep 0xffffffff83ce0120 [bufdaemon]
100082 D - 0xffffffff83001ec0 [bufspacedaemon-0]
100094 D sdflush 0xfffffe00598a2ce8 [/ worker]
9 0 0 0 DL psleep 0xffffffff83d21480 [vmdaemon]
8 0 0 0 DL (threaded) [pagedaemon]
100077 D psleep 0xffffffff83d07548 [dom0]
100080 D launds 0xffffffff83d07554 [laundry: dom0]
100081 D umarcl 0xffffffff81e33330 [uma]
7 0 0 0 DL - 0xffffffff8392c5b0 [rand_harvestq]
6 0 0 0 DL pftm 0xffffffff845f2f80 [pf purge]
5 0 0 0 DL waiting 0xffffffff848e6700 [sctp_iterator]
4 0 0 0 DL (threaded) [cam]
100045 D - 0xffffffff838f6340 [doneq0]
100046 D - 0xffffffff838f62c0 [async]
100075 D - 0xffffffff838f6140 [scanner]
3 0 0 0 DL (threaded) [crypto]
100042 D crypto_ 0xffffffff83d02de0 [crypto]
100043 D crypto_ 0xfffffe0007b6ad30 [crypto returns 0]
100044 D crypto_ 0xfffffe0007b6ad80 [crypto returns 1]
13 0 0 0 DL (threaded) [geom]
100037 D - 0xffffffff83b5c5e0 [g_event]
100038 D - 0xffffffff83b5c600 [g_up]
100039 D - 0xffffffff83b5c620 [g_down]
2 0 0 0 WL (threaded) [clock]
100031 I [clock (0)]
100032 I [clock (1)]
12 0 0 0 WL (threaded) [intr]
100013 I [swi6: task queue]
100014 I [swi6: Giant taskq]
100016 I [swi5: fast taskq]
100033 I [swi1: netisr 0]
100034 I [swi1: hpts]
100035 I [swi1: hpts]
100047 I [irq24: virtio_pci0]
100048 I [irq25: virtio_pci0]
100049 I [irq26: virtio_pci0]
100050 I [irq27: virtio_pci0]
100051 I [irq28: virtio_pci1]
100052 I [irq29: virtio_pci1]
100053 I [irq30: virtio_pci1]
100054 I [irq31: virtio_pci1]
100055 I [irq32: virtio_pci1]
100060 I [irq10: virtio_pci2]
100062 I [irq1: atkbd0]
100063 I [irq12: psm0]
100064 I [swi0: uart uart++]
100068 I [swi1: pf send]
11 0 0 0 RL (threaded) [idle]
100003 CanRun [idle: cpu0]
100004 CanRun [idle: cpu1]
1 0 1 0 RLs CPU 0 [init]
10 0 0 0 DL audit_w 0xffffffff83d03880 [audit]
0 0 0 0 DLs (threaded) [kernel]
100000 D - 0xffffffff84c59ff0 [kernel]
100005 D - 0xfffffe0007aa1000 [softirq_0]
100006 D - 0xfffffe0007aa0e00 [softirq_1]
100007 D - 0xfffffe0007aa0d00 [if_io_tqg_0]
100008 D - 0xfffffe0007aa0c00 [if_io_tqg_1]
100009 D - 0xfffffe0007aa0b00 [if_config_tqg_0]
100010 D - 0xfffffe000776fb00 [kqueue_ctx taskq]
100011 D - 0xfffffe000776fa00 [jail_remove taskq]
100012 D - 0xfffffe000776f900 [bus taskq]
100015 D - 0xfffffe000776f600 [thread taskq]
100017 D - 0xfffffe000776f400 [aiod_kick taskq]
100018 D - 0xfffffe000776f300 [deferred_unmount ta]
100019 D - 0xfffffe000776f200 [inm_free taskq]
100020 D - 0xfffffe000776f100 [in6m_free taskq]
100021 D - 0xfffffe000776f000 [linuxkpi_irq_wq]
100022 D - 0xfffffe000776ee00 [linuxkpi_short_wq_0]
100023 D - 0xfffffe000776ee00 [linuxkpi_short_wq_1]
100024 D - 0xfffffe000776ee00 [linuxkpi_short_wq_2]
100025 D - 0xfffffe000776ee00 [linuxkpi_short_wq_3]
100026 D - 0xfffffe000776ed00 [linuxkpi_long_wq_0]
100027 D - 0xfffffe000776ed00 [linuxkpi_long_wq_1]
100028 D - 0xfffffe000776ed00 [linuxkpi_long_wq_2]
100029 D - 0xfffffe000776ed00 [linuxkpi_long_wq_3]
100036 D - 0xfffffe000776ec00 [firmware taskq]
100040 D - 0xfffffe000776ea00 [crypto_0]
100041 D - 0xfffffe000776ea00 [crypto_1]
100056 D - 0xfffffe000776e800 [vtnet0 rxq 0]
100057 D - 0xfffffe000776e700 [vtnet0 txq 0]
100058 D - 0xfffffe000776e600 [vtnet0 rxq 1]
100059 D - 0xfffffe000776e500 [vtnet0 txq 1]
100061 D vtbslp 0xfffffe0007785d00 [virtio_balloon]
100065 D - 0xffffffff8283b100 [deadlkres]
100069 D - 0xfffffe00585efa00 [acpi_task_0]
100070 D - 0xfffffe00585efa00 [acpi_task_1]
100071 D - 0xfffffe00585efa00 [acpi_task_2]
100073 D - 0xfffffe000776fd00 [mca taskq]
100074 D - 0xfffffe000776e900 [CAM taskq]
100076 D - 0xfffffe000776e300 [ipsec_offload]
2279 764 764 0 RE syz-executor
db> show all locks
db> show malloc
Type InUse MemUse Requests
pf_hash 6 12804K 6
linker 384 5207K 901
tcp_hpts 8 4865K 8
devbuf 4187 4324K 4216
filedesc 440 3519K 2495
sysctloid 35270 2078K 35345
vtbuf 24 1968K 46
kobj 335 1340K 508
subproc 606 1280K 2559
newblk 69 1041K 24488
vfscache 3 1025K 3
pcb 37 680K 560
inodedep 21 520K 3192
ufs_quota 1 512K 1
vfs_hash 1 512K 1
callout 2 512K 2
intr 4 472K 4
vmem 5 284K 10
vnet_data 2 224K 2
acpitask 1 224K 1
KTRACE 100 200K 29996
acpica 1674 184K 56977
tidhash 3 141K 3
pagedep 10 131K 1200
tfo_ccache 1 128K 1
IP reass 1 128K 1
kdtrace 664 112K 4254
DEVFS1 107 107K 124
sem 4 106K 4
umtx 784 98K 784
gtaskqueue 18 98K 18
LRO 26 89K 26
bus 1011 83K 5163
mtx_pool 3 74K 3
BPF 41 72K 281
syncache 1 68K 1
NFSD srvcache 3 68K 3
module 527 66K 529
ddb_capture 1 64K 1
hostcache 1 32K 1
shm 1 32K 1
DEVFS3 127 32K 137
msg 4 30K 4
kbdmux 6 28K 6
kqueue 309 25K 4152
temp 31 21K 3124
DEVFS_RULE 56 20K 56
ifaddr 69 20K 71
pwddesc 288 18K 2370
ufs_mount 4 17K 5
proc 3 17K 3
routetbl 137 17K 427
tty 16 16K 16
ithread 90 15K 90
bus-sc 34 15K 1690
eventhandler 163 14K 163
ether_multi 157 13K 197
lltable 41 13K 46
cred 33 13K 696
ifnet 7 13K 7
kenv 95 12K 95
GEOM 54 12K 457
freework 45 12K 6905
shmfd 7 11K 38
CAM queue 5 11K 1528
rman 75 10K 430
plimit 24 9K 426
rpc 8 9K 8
CC Mem 70 9K 428
in6_multi 65 9K 66
bmsafemap 3 9K 2417
devstat 4 9K 4
UART 12 9K 12
ksem 1 8K 137
pfs_vncache 1 8K 1
audit_evclass 240 8K 306
taskqueue 69 8K 81
proc-args 319 7K 3437
sglist 6 7K 6
CAM DEV 3 6K 510
pfs_nodes 22 6K 22
ufs_dirhash 24 5K 42
pf_ifnet 11 5K 20
UMA 270 5K 270
vt 11 5K 11
memdesc 1 4K 1
MCA 32 4K 32
md_disk 1 4K 93
evdev 4 4K 4
selfd 62 4K 116005
acpisem 28 4K 28
session 27 4K 46
DEVFSP 53 4K 673
mount 20 4K 3174
lockf 28 3K 179
terminal 11 3K 11
inpcbpolicy 81 3K 910
acpidev 20 3K 20
uidinfo 4 3K 23
hhook 8 3K 10
clone 9 3K 9
kcovinfo 36 3K 36
netlink 2 3K 112
select 17 3K 64
pf_rule 1 2K 2
local_apic 1 2K 1
io_apic 1 2K 1
ipsec-saq 2 2K 2
sctp_atcl 5 2K 210
ip6ndp 12 2K 14
Unitno 32 2K 250
dirrem 7 2K 1968
in_multi 7 2K 14
sctp_ifa 13 2K 14
crypto 5 2K 197
osd 75 2K 445
CAM XPT 22 2K 543
freeblks 6 2K 1605
tun 4 2K 4
toponodes 6 2K 6
ipsecpolicy 2 2K 2
indirdep 5 2K 3217
msi 9 2K 9
softdep 1 1K 1
mkdir 8 1K 1912
sahead 1 1K 1
secasvar 1 1K 1
nhops 6 1K 8
vnodemarker 2 1K 300
NFSD session 1 1K 1
diradd 7 1K 1993
CAM periph 4 1K 271
sctp_ifn 6 1K 14
ipsec 3 1K 3
mld 6 1K 6
igmp 6 1K 6
pfil 6 1K 6
isadev 6 1K 6
pci_link 10 1K 10
encap_export_host 12 1K 12
frag6 6 1K 20
filedesc_to_leader 9 1K 18
newdirblk 4 1K 959
freefile 4 1K 1763
procdesc 4 1K 16
cdev 2 1K 2
lkpikmalloc 8 1K 9
counter_rate 13 1K 13
chacha20random 1 1K 1
biobuf 1 1K 1
cryptodev 5 1K 860
ip_msource 5 1K 16
vnodes 2 1K 3
DEVFS 10 1K 11
ktls 1 1K 32
NFSD lckfile 1 1K 1
NFSD V4client 1 1K 1
CAM SIM 2 1K 2
tcpfunc 3 1K 3
loginclass 3 1K 5
prison 6 1K 6
sctp_atky 5 1K 210
nexusdev 8 1K 8
apmdev 1 1K 1
atkbddev 2 1K 2
freefrag 1 1K 350
aio 4 1K 13
pmchooks 1 1K 1
CAM path 4 1K 1034
CAM dev queue 2 1K 2
CAM I/O Scheduler 1 1K 1
soname 4 1K 4085
in_mfilter 2 1K 27
sctp_athm 5 1K 210
sctp_vrf 1 1K 1
ip_moptions 1 1K 10
vnet 1 1K 1
pmc 1 1K 1
filecaps 4 1K 108
entropy 2 1K 38
acpiintr 1 1K 1
cpus 2 1K 2
vnet_data_free 1 1K 1
Per-cpu 1 1K 1
pf 1 1K 1
p1003.1b 1 1K 1
sctp_mcore 0 0K 0
sctp_socko 0 0K 100
sctp_iter 0 0K 10
sctp_mvrf 0 0K 0
sctp_timw 0 0K 0
sctp_cpal 0 0K 0
sctp_cmsg 0 0K 0
sctp_stre 0 0K 0
sctp_athi 0 0K 0
sctp_a_it 0 0K 10
sctp_aadr 0 0K 0
sctp_stro 0 0K 0
sctp_stri 0 0K 0
sctp_map 0 0K 0
filemon 0 0K 0
pf_table 0 0K 0
pf_altq 0 0K 0
pf_osfp 0 0K 0
pf_krule_item 0 0K 0
pf_temp 0 0K 0
ipcomp 0 0K 0
esp 0 0K 0
ah 0 0K 0
tcp_pcm_rack 0 0K 0
tcp_do_rack 0 0K 0
tcp_fsb_rack 0 0K 0
mqdata 0 0K 0
madt_table 0 0K 2
smartpqi 0 0K 0
ixl 0 0K 0
ice-resmgr 0 0K 0
ice-osdep 0 0K 0
ice 0 0K 0
iavf 0 0K 0
axgbe 0 0K 0
fpukern_ctx 0 0K 0
xen_intr 0 0K 0
xen_hvm 0 0K 0
legacydrv 0 0K 0
NMI handlers 0 0K 0
bounce 0 0K 0
busdma 0 0K 0
qpidrv 0 0K 0
dmar_idpgtbl 0 0K 0
dmar_dom 0 0K 0
dmar_ctx 0 0K 0
amdiommu_dom 0 0K 0
amdiommu_ctx 0 0K 0
isci 0 0K 0
iommu_dmamap 0 0K 0
hyperv_socket 0 0K 0
bxe_ilt 0 0K 0
aesni_data 0 0K 8
xenbus 0 0K 0
vm_fictitious 0 0K 0
UMAHash 0 0K 0
vm_pgdata 0 0K 0
jblocks 0 0K 0
savedino 0 0K 2393
sentinel 0 0K 0
jfsync 0 0K 0
jtrunc 0 0K 0
sbdep 0 0K 166
jsegdep 0 0K 0
jseg 0 0K 0
jfreefrag 0 0K 0
jfreeblk 0 0K 0
jnewblk 0 0K 0
jmvref 0 0K 0
jremref 0 0K 0
jaddref 0 0K 0
freedep 0 0K 0
allocindir 0 0K 0
allocdirect 0 0K 0
ufs_trim 0 0K 0
mactemp 0 0K 0
audit_trigger 0 0K 0
audit_pipe_presel 0 0K 0
audit_pipeent 0 0K 0
audit_pipe 0 0K 0
audit_evname 0 0K 0
audit_bsm 0 0K 0
audit_gidset 0 0K 0
audit_text 0 0K 0
audit_path 0 0K 0
audit_data 0 0K 0
audit_cred 0 0K 0
ktls_ocf 0 0K 5
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5E_TLS_RX 0 0K 0
MLX5EEPROM 0 0K 0
MLX5E_TLS 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EN 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5DUMP 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
simple_attr 0 0K 0
seq_file 0 0K 0
lkpiskb 0 0K 0
radix 0 0K 0
idr 0 0K 0
lkpindev 0 0K 0
lkpimhi 0 0K 0
lkpifw 0 0K 0
lkpi80211 0 0K 0
NLM 0 0K 0
ipsec-spdcache 0 0K 0
ipsec-reg 0 0K 0
ipsec-misc 0 0K 0
ipsecrequest 0 0K 0
ip6opt 0 0K 26
ip6_msource 0 0K 1
ip6_moptions 0 0K 1
in6_mfilter 0 0K 2
tcplog 0 0K 0
tcp_hwpace 0 0K 0
ipid 0 0K 0
80211scan 0 0K 0
80211ratectl 0 0K 0
80211power 0 0K 0
80211nodeie 0 0K 0
80211node 0 0K 0
80211mesh_gt 0 0K 0
80211mesh_rt 0 0K 0
80211perr 0 0K 0
80211prep 0 0K 0
80211preq 0 0K 0
80211dfs 0 0K 0
80211crypto 0 0K 0
80211vap 0 0K 0
iflib 0 0K 0
vlan 0 0K 0
gif 0 0K 0
ifdescr 0 0K 0
zlib 0 0K 22
fadvise 0 0K 0
VN POLL 0 0K 1
statfs 0 0K 274
namei_tracker 0 0K 0
inotify 0 0K 0
export_host 0 0K 0
cl_savebuf 0 0K 141
lio 0 0K 118
acl 0 0K 0
mbuf_tag 0 0K 0
accf 0 0K 0
pts 0 0K 0
timerfd 0 0K 0
iov 0 0K 17802
ioctlops 0 0K 230
eventfd 0 0K 0
Witness 0 0K 0
stack 0 0K 0
sbuf 0 0K 194
firmware 0 0K 0
compressor 0 0K 0
SWAP 0 0K 0
sysctltmp 0 0K 718
sysctl 0 0K 3
ekcd 0 0K 0
dumper 0 0K 0
sendfile 0 0K 12982
rctl 0 0K 0
cache 0 0K 0
kexec 0 0K 0
jaildesc 0 0K 0
prison_racct 0 0K 0
Fail Points 0 0K 0
sigio 0 0K 1
pwd 0 0K 0
tty console 0 0K 0
boottrace 0 0K 0
isofs_node 0 0K 0
isofs_mount 0 0K 0
tr_raid5_data 0 0K 0
tr_raid1e_data 0 0K 0
tr_raid1_data 0 0K 0
tr_raid0_data 0 0K 0
tr_concat_data 0 0K 0
md_sii_data 0 0K 0
md_promise_data 0 0K 0
md_nvidia_data 0 0K 0
md_jmicron_data 0 0K 0
md_intel_data 0 0K 0
md_ddf_data 0 0K 0
raid_data 0 0K 78
geom_flashmap 0 0K 0
tmpfs dir 0 0K 0
tmpfs name 0 0K 0
tmpfs mount 0 0K 0
tmpfs extattr 0 0K 0
NFS FHA 0 0K 0
newnfsmnt 0 0K 0
newnfsclient_req 0 0K 0
NFSCL layrecall 0 0K 0
NFSCL session 0 0K 0
NFSCL sockreq 0 0K 0
NFSCL devinfo 0 0K 0
NFSCL flayout 0 0K 0
NFSCL layout 0 0K 0
NFSD rollback 0 0K 0
NFSCL diroff 0 0K 0
NEWNFSnode 0 0K 0
NFSCL lck 0 0K 0
NFSCL lckown 0 0K 0
NFSCL client 0 0K 0
NFSCL deleg 0 0K 0
NFSCL open 0 0K 0
NFSCL owner 0 0K 0
NFS fh 0 0K 0
NFS req 0 0K 0
NFSD usrgroup 0 0K 0
NFSD string 0 0K 0
NFSD V4lock 0 0K 0
NFSD V4state 0 0K 0
msdosfs_fat 0 0K 0
msdosfs_mount 0 0K 0
msdosfs_node 0 0K 0
DEVFS4 0 0K 0
DEVFS2 0 0K 0
gntdev 0 0K 0
privcmd_dev 0 0K 0
evtchn_dev 0 0K 0
xenstore 0 0K 0
xnb 0 0K 0
xen_acpi 0 0K 0
xbbd 0 0K 0
xbd 0 0K 0
Balloon 0 0K 0
sysmouse 0 0K 0
vtfont 0 0K 0
pvscsi 0 0K 0
USBdev 0 0K 0
USB 0 0K 0
ufshci 0 0K 0
twsbuf 0 0K 0
tpm_buffer 0 0K 0
tcp_log_dev 0 0K 9
midi buffers 0 0K 0
mixer 0 0K 0
feeder 0 0K 0
ac97 0 0K 0
hdacc 0 0K 0
hdac 0 0K 0
hdaa 0 0K 0
SIIS driver 0 0K 0
PUC 0 0K 0
ppbusdev 0 0K 0
sr_iov 0 0K 0
OCS 0 0K 0
OCS 0 0K 0
nvme 0 0K 0
nvd 0 0K 0
netmap 0 0K 0
mwldev 0 0K 0
MVS driver 0 0K 0
mpi3mrbuf 0 0K 0
mrsasbuf 0 0K 0
mpt_user 0 0K 0
mps_user 0 0K 0
MPSSAS 0 0K 0
mps 0 0K 0
mpr_user 0 0K 0
MPRSAS 0 0K 0
mpr 0 0K 0
mfibuf 0 0K 0
md_sectors 0 0K 0
malodev 0 0K 0
LED 0 0K 0
ix_sriov 0 0K 0
ix 0 0K 0
ipsbuf 0 0K 0
ciss_data 0 0K 0
BACKLIGHT 0 0K 0
ath_hal 0 0K 0
athdev 0 0K 0
ata_pci 0 0K 0
ata_dma 0 0K 0
ata_generic 0 0K 0
AHCI driver 0 0K 0
agp 0 0K 0
acpipwr 0 0K 0
acpi_perf 0 0K 0
acpicmbat 0 0K 0
aacraidcam 0 0K 0
aacraid_buf 0 0K 0
aaccam 0 0K 0
aacbuf 0 0K 0
zstd 0 0K 0
XZ_DEC 0 0K 0
nvlist 0 0K 175
SCSI ENC 0 0K 0
SCSI sa 0 0K 0
scsi_pass 0 0K 0
scsi_da 0 0K 70
ata_da 0 0K 0
scsi_ch 0 0K 0
scsi_cd 0 0K 0
nvme_da 0 0K 0
CAM CCB 0 0K 523
CAM ccb queue 0 0K 0
db> show uma
Zone Size Used Free Requests Sleeps Bucket Total Mem XFree
mbuf_jumbo_page 4096 8320 1332 43034 0 254 39534592 0
tcp_log 416 7434 6543 175139 0 254 5814432 0
malloc-16384 16384 223 3 1439 0 1 3702784 0
mbuf 256 8699 1218 141498 0 254 2538752 0
BUF TRIE 152 230 11574 23647 0 62 1794208 0
RADIX NODE 152 10820 719 102765 0 62 1753928 0
malloc-384 384 4143 57 4797 0 30 1612800 0
malloc-128 128 11607 266 12013 0 126 1519744 0
malloc-4096 4096 335 3 513 0 2 1384448 0
UMA Slabs 0 112 11762 4 11762 0 126 1317792 0
malloc-4096 4096 301 3 2309 0 2 1245184 0
vmem btag 56 19531 92 19531 0 254 1098888 0
mbuf_cluster 2048 508 0 508 0 254 1040384 0
VM OBJECT 248 3709 147 30142 0 62 956288 0
FFS inode 1168 716 33 2598 0 8 874832 0
MAP ENTRY 96 8077 239 110077 0 126 798336 0
THREAD 1860 370 22 1966 0 8 729120 0
malloc-65536 65536 9 2 14 0 1 720896 0
sctp_ep 1152 5 506 210 0 254 588672 0
malloc-64 64 4172 4522 120476 0 254 556416 0
pbuf 2664 0 198 0 0 2 527472 0
socket 1024 110 398 2579 0 254 520192 0
lkpicurr 168 2 3094 2 0 62 520128 0
256 Bucket 2048 188 12 1932 0 8 409600 0
PROC 1368 292 5 2286 0 8 406296 0
malloc-2048 2048 114 78 1352 0 8 393216 0
VNODE 440 756 90 2640 0 30 372240 0
FPU_save_area 832 372 51 2853 0 16 351936 0
filedesc0 1072 288 20 2370 0 8 330176 0
malloc-32768 32768 3 6 2095 0 1 294912 0
malloc-65536 65536 4 0 4 0 1 262144 0
malloc-16 16 14854 146 17620 0 254 240000 0
malloc-128 128 1658 109 5785 0 126 226176 0
DEVCTL 1024 17 203 152 0 0 225280 0
FFS2 dinode 256 716 94 2598 0 62 207360 0
malloc-65536 65536 1 2 67 0 1 196608 0
malloc-128 128 1170 349 34737 0 126 194432 0
malloc-32 32 5424 498 5961 0 254 189504 0
UMA Zones 768 242 2 242 0 16 187392 0
malloc-256 256 138 552 26525 0 62 176640 0
lkpimm 56 1 3095 1 0 254 173376 0
VMSPACE 584 269 25 2164 0 16 171696 0
unpcb 320 20 496 1379 0 254 165120 0
malloc-256 256 475 155 4915 0 62 161280 0
S VFS Cache 104 1066 338 3183 0 126 146016 0
malloc-384 384 323 37 1083 0 30 138240 0
malloc-65536 65536 2 0 2 0 1 131072 0
malloc-65536 65536 0 2 238 0 1 131072 0
malloc-1024 1024 108 20 125 0 16 131072 0
mbuf_packet 256 39 469 14747 0 254 130048 0
tcp_inpcb 1304 70 20 428 0 8 117360 0
ksiginfo 112 287 757 735 0 126 116928 0
malloc-32768 32768 0 3 130 0 1 98304 0
malloc-32768 32768 1 2 14 0 1 98304 0
malloc-32768 32768 3 0 3 0 1 98304 0
malloc-32768 32768 2 1 3 0
---
This report is generated by a bot. It may contain errors.
See https://goo.gl/tpsmEJ for more information about syzbot.
syzbot engineers can be reached at syzk...@googlegroups.com.
syzbot will keep track of this issue. See:
https://goo.gl/tpsmEJ#status for how to communicate with syzbot.
If the report is already addressed, let syzbot know by replying with:
#syz fix: exact-commit-title
If you want to overwrite report's subsystems, reply with:
#syz set subsystems: new-subsystem
(See the list of subsystem names on the web dashboard)
If the report is a duplicate of another one, reply with:
#syz dup: exact-subject-of-another-report
If you want to undo deduplication, reply with:
#syz undup
syzbot found the following issue on:
HEAD commit: cc1e4aae5a67 rc.d/ipfilter: ipfilter must be enabled for o..
git tree: freebsd-src
console output: https://syzkaller.appspot.com/x/log.txt?x=137ba1c2580000
dashboard link: https://syzkaller.appspot.com/bug?extid=25dabe4046a645a0566c
Unfortunately, I don't have any reproducer for this issue yet.
IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+25dabe...@syzkaller.appspotmail.com
panic: proc_dtor: non-empty p_ktr
cpuid = 0
time = 1765339291
KDB: stack backtrace:
db_trace_self_wrapper() at db_trace_self_wrapper+0xc6/frame 0xfffffe0056c6e350
kdb_backtrace() at kdb_backtrace+0xd0/frame 0xfffffe0056c6e4b0
vpanic() at vpanic+0x257/frame 0xfffffe0056c6e670
panic() at panic+0xb5/frame 0xfffffe0056c6e730
proc_dtor() at proc_dtor+0x532/frame 0xfffffe0056c6e780
item_dtor() at item_dtor+0xc3/frame 0xfffffe0056c6e7d0
uma_zfree_arg() at uma_zfree_arg+0x10a/frame 0xfffffe0056c6e870
proc_reap() at proc_reap+0x831/frame 0xfffffe0056c6e8d0
proc_to_reap() at proc_to_reap+0x6d8/frame 0xfffffe0056c6e930
kern_wait6() at kern_wait6+0x34b/frame 0xfffffe0056c6ea10
sys_wait4() at sys_wait4+0x1c4/frame 0xfffffe0056c6ed10
amd64_syscall() at amd64_syscall+0x4e2/frame 0xfffffe0056c6ef30
fast_syscall_common() at fast_syscall_common+0xf8/frame 0xfffffe0056c6ef30
--- syscall (7, FreeBSD ELF64, wait4), rip = 0x2b10ca, rsp = 0x8205ab358, rbp = 0x8205ab3c0 ---
KDB: enter: panic
[ thread pid 1 tid 100002 ]
Stopped at kdb_enter+0x6e: movq $0,0x258a057(%rip)
db>
db> set $lines = 0
db> set $maxwidth = 0
db> show registers
cs 0x20
ds 0x3b
es 0x3b
fs 0x13
gs 0x1b
ss 0x28
rax 0x12
rcx 0xfffffe0002bf1850
rdx 0
rbx 0xffffffff82836a20 .str.27
rsp 0xfffffe0056c6e490
rbp 0xfffffe0056c6e4b0
rsi 0
rdi 0xffffffff8165fb59 printf+0x149
r8 0
r9 0xffffffff
r10 0x1
r11 0x17
r12 0xfffffe000780e000
r13 0xfffffffffffffffe
r14 0xffffffff82836a20 .str.27
r15 0
rip 0xffffffff81648f3e kdb_enter+0x6e
rflags 0x46
kdb_enter+0x6e: movq $0,0x258a057(%rip)
db> show proc
Process 1 (init) at 0xfffffe0007809010:
state: NORMAL
uid: 0 gid: 0 supp gids: 0
parent: pid 0 at 0xffffffff83b5d020
ABI: FreeBSD ELF64
flag: 0x10004200 flag2: 0
arguments: /sbin/init
reaper: 0xffffffff83b5d020 reapsubtree: 1
sigparent: 20
vmspace: 0xfffffe0007811000
(map 0xfffffe0007811000)
(map.pmap 0xfffffe00078110a0)
(pmap 0xfffffe0007811110)
threads: 1
100002 Run CPU 0 [init]
db> ps
pid ppid pgrp uid state wmesg wchan cmd
2284 2280 766 0 S uwait 0xfffffe00781e9c00 syz-executor
2282 765 765 0 R (threaded) syz-executor
101304 Run CPU 1 syz-executor
101966 RunQ syz-executor
2281 763 763 0 R (threaded) syz-executor
101858 RunQ syz-executor
101964 S uwait 0xfffffe007865f780 syz-executor
101965 S uwait 0xfffffe007879b900 syz-executor
2280 766 766 0 R (threaded) syz-executor
101303 RunQ syz-executor
101961 S umtxn 0xfffffe007865f580 syz-executor
101962 S uwait 0xfffffe00781e9180 syz-executor
101963 S uwait 0xfffffe0078660a00 syz-executor
2276 1 764 0 SV uwait 0xfffffe0078662280 syz-executor
2275 1 764 0 S uwait 0xfffffe0078662180 syz-executor
2258 1 764 0 SV uwait 0xfffffe00781ea580 syz-executor
2238 1 765 0 SV uwait 0xfffffe0078660600 syz-executor
2223 2215 2223 0 Ss select 0xfffffe007879aac0 dhclient
2218 1 2218 0 Ss select 0xfffffe007879ac40 dhclient
2215 2201 423 65 S select 0xfffffe0078660040 dhclient
2205 1 763 0 SV uwait 0xfffffe0077cab500 syz-executor
2201 423 423 0 S wait 0xfffffe0078494ab8 sh
2190 1 2190 65 Ss select 0xfffffe007879ad40 dhclient
2184 2183 763 0 S uwait 0xfffffe0078661a00 syz-executor
2183 1 763 0 SV wait 0xfffffe0078496018 syz-executor
2181 1 763 0 S uwait 0xfffffe007879b500 syz-executor
2176 1 764 0 SV uwait 0xfffffe00781e8d00 syz-executor
2174 1 764 0 S uwait 0xfffffe007879b800 syz-executor
2164 1 765 0 S uwait 0xfffffe0078661b00 syz-executor
2163 1 765 0 SV uwait 0xfffffe0078662580 syz-executor
2162 1 765 0 S uwait 0xfffffe00781e8580 syz-executor
2159 1 763 0 SV uwait 0xfffffe0078660b00 syz-executor
2158 1 763 0 S uwait 0xfffffe0078660280 syz-executor
2155 2153 766 0 S uwait 0xfffffe007879bb00 syz-executor
2153 1 766 0 SV wait 0xfffffe0078495568 syz-executor
2152 1 766 0 S uwait 0xfffffe0078660800 syz-executor
2142 1 765 0 SV uwait 0xfffffe0078662880 syz-executor
2140 1 765 0 S uwait 0xfffffe00781e8500 syz-executor
2128 2127 766 0 S uwait 0xfffffe00781e9680 syz-executor
2127 1 766 0 SV wait 0xfffffe0078493000 syz-executor
2126 1 766 0 S uwait 0xfffffe00781e9800 syz-executor
2125 2124 765 0 S uwait 0xfffffe00781ea080 syz-executor
2124 1 765 0 SV wait 0xfffffe0078494008 syz-executor
2123 1 765 0 S uwait 0xfffffe0077cab700 syz-executor
2122 1 763 0 S uwait 0xfffffe00781e9d80 syz-executor
2119 1 763 0 S uwait 0xfffffe007865fd80 syz-executor
2115 1 766 0 SV uwait 0xfffffe0077caee00 syz-executor
2114 1 766 0 S uwait 0xfffffe00781e9780 syz-executor
2099 1 763 0 S uwait 0xfffffe0078662b00 syz-executor
2097 1 763 0 S uwait 0xfffffe0078661280 syz-executor
2092 1 764 0 SV uwait 0xfffffe0077caef00 syz-executor
2091 1 764 0 S uwait 0xfffffe00781ea780 syz-executor
2089 2088 766 0 S uwait 0xfffffe0077cac980 syz-executor
2088 1 766 0 SV wait 0xfffffe0078467018 syz-executor
2087 1 766 0 S uwait 0xfffffe0078660200 syz-executor
2077 1 765 0 S uwait 0xfffffe0078660c80 syz-executor
2076 1 765 0 S uwait 0xfffffe0077cab880 syz-executor
2062 2061 766 0 S uwait 0xfffffe00781e8700 syz-executor
2061 1 766 0 SV wait 0xfffffe007845e010 syz-executor
2060 1 766 0 S uwait 0xfffffe0078660e00 syz-executor
2052 2051 763 0 S uwait 0xfffffe0077cae500 syz-executor
2051 1 763 0 SV wait 0xfffffe0078464ab0 syz-executor
2050 1 763 0 S uwait 0xfffffe0078662780 syz-executor
2037 2036 766 0 S uwait 0xfffffe00781ea280 syz-executor
2036 1 766 0 SV wait 0xfffffe0078434ab8 syz-executor
2033 1 766 0 S uwait 0xfffffe00781e8080 syz-executor
1979 1978 766 0 S uwait 0xfffffe0077caed00 syz-executor
1978 1 766 0 SV wait 0xfffffe007845d560 syz-executor
1977 1 766 0 S uwait 0xfffffe00781e8180 syz-executor
1966 1 764 0 S uwait 0xfffffe0078662380 syz-executor
1951 1 765 0 SV uwait 0xfffffe0078660f00 syz-executor
1950 1 765 0 S uwait 0xfffffe00781e9a00 syz-executor
1932 1 765 0 S uwait 0xfffffe00781eb380 syz-executor
1918 1 766 0 S uwait 0xfffffe00781e8280 syz-executor
1899 1 766 0 SV uwait 0xfffffe00781eb600 syz-executor
1897 1 766 0 S uwait 0xfffffe00781e8a00 syz-executor
1874 1872 766 0 S uwait 0xfffffe0077cab780 syz-executor
1872 1 766 0 SV uwait 0xfffffe0077cab380 syz-executor
1871 1 766 0 S uwait 0xfffffe00781e8b00 syz-executor
1869 1 765 0 SV uwait 0xfffffe00781e9e80 syz-executor
1867 1 765 0 S uwait 0xfffffe00781e9900 syz-executor
1859 1 763 0 S uwait 0xfffffe0077cac380 syz-executor
1858 1 763 0 S uwait 0xfffffe00781e9c80 syz-executor
1853 1 765 0 S uwait 0xfffffe00781e8800 syz-executor
1852 1 765 0 S uwait 0xfffffe00781ea380 syz-executor
1830 1 764 0 S uwait 0xfffffe0077cac680 syz-executor
1829 1 764 0 S uwait 0xfffffe0077cab300 syz-executor
1815 1814 765 0 S uwait 0xfffffe007793ce00 syz-executor
1814 1 765 0 SV umtxn 0xfffffe006df46c80 syz-executor
1813 1 765 0 S uwait 0xfffffe00781eaa00 syz-executor
1766 1 763 0 T syz-executor
1763 1 1763 0 Ss select 0xfffffe00781e8ec0 dhclient
1757 1 1757 0 Ss select 0xfffffe00781e92c0 dhclient
1745 1 766 0 T uwait 0xfffffe006df47d80 syz-executor
1716 1 1716 65 Ss select 0xfffffe00781e9140 dhclient
1708 1 763 0 SV uwait 0xfffffe00781ea800 syz-executor
1707 1 763 0 S uwait 0xfffffe0077cab080 syz-executor
1687 1 765 0 SV uwait 0xfffffe0077cace80 syz-executor
1686 1 765 0 S uwait 0xfffffe005830ca80 syz-executor
1683 1682 763 0 S uwait 0xfffffe005830d500 syz-executor
1682 1 763 0 SV wait 0xfffffe0078430ab8 syz-executor
1679 1 763 0 S uwait 0xfffffe0077939600 syz-executor
1671 1 765 0 S uwait 0xfffffe00781ea180 syz-executor
1670 1 766 0 S uwait 0xfffffe0077939700 syz-executor
1669 1 765 0 S uwait 0xfffffe006df47c00 syz-executor
1668 1 765 0 S uwait 0xfffffe006df47a00 syz-executor
1662 1 763 0 S uwait 0xfffffe006df47e80 syz-executor
1651 1650 766 0 S uwait 0xfffffe0077caba80 syz-executor
1650 1 766 0 SV wait 0xfffffe00587e9018 syz-executor
1649 1 766 0 S uwait 0xfffffe00781eab00 syz-executor
1644 1643 765 0 S uwait 0xfffffe007793ae80 syz-executor
1643 1 765 0 SV wait 0xfffffe00587f6560 syz-executor
1640 1 765 0 S uwait 0xfffffe00781eb080 syz-executor
1608 1 765 0 S uwait 0xfffffe0077cacb80 syz-executor
1582 1581 766 0 S uwait 0xfffffe0077cab980 syz-executor
1581 1 766 0 SV wait 0xfffffe0058774008 syz-executor
1580 1 766 0 S uwait 0xfffffe00781eaf00 syz-executor
1556 1555 763 0 S uwait 0xfffffe00781ead00 syz-executor
1555 1 763 0 SV wait 0xfffffe0078400000 syz-executor
1553 1 763 0 S uwait 0xfffffe0077cad980 syz-executor
1544 1543 766 0 S uwait 0xfffffe00781ea900 syz-executor
1543 1 766 0 SV wait 0xfffffe00587d3008 syz-executor
1542 1 766 0 S uwait 0xfffffe0077cabe80 syz-executor
1528 1527 763 0 S uwait 0xfffffe0077cac180 syz-executor
1527 1 763 0 SV wait 0xfffffe00587d5018 syz-executor
1526 1 763 0 S uwait 0xfffffe007793a580 syz-executor
1519 1518 766 0 S uwait 0xfffffe0077939f00 syz-executor
1518 1 766 0 SV wait 0xfffffe00587f5ab0 syz-executor
1517 1 766 0 S uwait 0xfffffe0077cac000 syz-executor
1515 1514 765 0 S uwait 0xfffffe0077cabb80 syz-executor
1514 1 765 0 SV wait 0xfffffe00587d0568 syz-executor
1513 1 765 0 S uwait 0xfffffe0077939800 syz-executor
1512 1511 764 0 S uwait 0xfffffe005830f900 syz-executor
1511 1 764 0 SV wait 0xfffffe00587e6ab0 syz-executor
1510 1 764 0 S uwait 0xfffffe0077cac780 syz-executor
1491 1490 766 0 S uwait 0xfffffe0077cac580 syz-executor
1490 1 766 0 SV wait 0xfffffe00587e7ab8 syz-executor
1488 1 766 0 S uwait 0xfffffe0077cacd80 syz-executor
1484 1483 763 0 S uwait 0xfffffe0077cac280 syz-executor
1483 1 763 0 SV wait 0xfffffe00587d0010 syz-executor
1482 1 763 0 S uwait 0xfffffe007793ae00 syz-executor
1466 1465 764 0 S uwait 0xfffffe0077caca80 syz-executor
1465 1 764 0 SV wait 0xfffffe00587d1570 syz-executor
1464 1 764 0 S uwait 0xfffffe00781eb780 syz-executor
1451 1450 766 0 S uwait 0xfffffe005830cf00 syz-executor
1450 1 766 0 SV wait 0xfffffe000780a570 syz-executor
1449 1 766 0 S uwait 0xfffffe00781eba00 syz-executor
1447 1445 763 0 S uwait 0xfffffe0077939a00 syz-executor
1445 1 763 0 SV wait 0xfffffe00587a9018 syz-executor
1444 1 763 0 S uwait 0xfffffe007793c680 syz-executor
1427 1426 765 0 S uwait 0xfffffe0077939b00 syz-executor
1426 1 765 0 SV wait 0xfffffe00587ceab0 syz-executor
1425 1 765 0 S uwait 0xfffffe007793bc00 syz-executor
1423 1422 766 0 S uwait 0xfffffe006df44780 syz-executor
1422 1 766 0 SV wait 0xfffffe0058797570 syz-executor
1421 1 766 0 S uwait 0xfffffe0077cad680 syz-executor
1420 1417 764 0 S uwait 0xfffffe007793b080 syz-executor
1417 1 764 0 SV wait 0xfffffe0058797018 syz-executor
1415 1 764 0 S uwait 0xfffffe0077939900 syz-executor
1396 1 766 0 S uwait 0xfffffe006df47900 syz-executor
1395 1 766 0 S uwait 0xfffffe00781ebb00 syz-executor
1387 1386 764 0 S uwait 0xfffffe007793ba80 syz-executor
1386 1 764 0 SV wait 0xfffffe0058795ab8 syz-executor
1385 1 764 0 S uwait 0xfffffe005830f880 syz-executor
1382 1381 763 0 S uwait 0xfffffe007793ad00 syz-executor
1381 1 763 0 SV wait 0xfffffe0058796568 syz-executor
1380 1377 765 0 S uwait 0xfffffe007793a480 syz-executor
1377 1 765 0 SV wait 0xfffffe0058774560 syz-executor
1376 1 765 0 S uwait 0xfffffe0077cad400 syz-executor
1374 1 763 0 S uwait 0xfffffe0077cadb80 syz-executor
1350 1349 766 0 S uwait 0xfffffe007793a380 syz-executor
1349 1 766 0 SV wait 0xfffffe0058773ab0 syz-executor
1348 1347 763 0 S uwait 0xfffffe005830fd00 syz-executor
1347 1 763 0 SV wait 0xfffffe00587a6000 syz-executor
1346 1 766 0 S uwait 0xfffffe006df44480 syz-executor
1345 1 763 0 S uwait 0xfffffe007793c980 syz-executor
1309 1307 766 0 S uwait 0xfffffe0077cae700 syz-executor
1308 1306 763 0 S uwait 0xfffffe006df44880 syz-executor
1307 1 766 0 SV wait 0xfffffe0058794000 syz-executor
1306 1 763 0 SV wait 0xfffffe005878dab8 syz-executor
1305 1 766 0 S uwait 0xfffffe005830f700 syz-executor
1303 1 763 0 S uwait 0xfffffe007793bd80 syz-executor
1274 1273 763 0 S uwait 0xfffffe0077cad880 syz-executor
1273 1 763 0 SV wait 0xfffffe005878f570 syz-executor
1272 1 763 0 S uwait 0xfffffe007793a780 syz-executor
1268 1267 765 0 S uwait 0xfffffe007793b700 syz-executor
1267 1 765 0 SV wait 0xfffffe005878c000 syz-executor
1266 1 765 0 S uwait 0xfffffe007793c580 syz-executor
1261 1260 766 0 S uwait 0xfffffe007793be00 syz-executor
1260 1 766 0 SV wait 0xfffffe0058794ab0 syz-executor
1256 1 766 0 S uwait 0xfffffe007793b480 syz-executor
1242 1 764 0 S uwait 0xfffffe007793a880 syz-executor
1236 1 765 0 S uwait 0xfffffe007793aa00 syz-executor
1234 0 0 0 DL mdwait 0xfffffe0007aa2000 [md58027]
1229 1228 763 0 S uwait 0xfffffe0077cae400 syz-executor
1228 1 763 0 SV wait 0xfffffe005876cab8 syz-executor
1227 1 763 0 S uwait 0xfffffe006df45b80 syz-executor
1223 1221 766 0 S uwait 0xfffffe0077cae900 syz-executor
1221 1 766 0 SV wait 0xfffffe0058776018 syz-executor
1219 1 766 0 S uwait 0xfffffe005830f800 syz-executor
1202 1 766 0 S uwait 0xfffffe0077cae300 syz-executor
1201 1 766 0 S uwait 0xfffffe006df44800 syz-executor
1197 1196 763 0 S uwait 0xfffffe005830fb80 syz-executor
1196 1 763 0 SV wait 0xfffffe005876b558 syz-executor
1195 1 763 0 S uwait 0xfffffe0077cae800 syz-executor
1182 1181 765 0 S uwait 0xfffffe007793c480 syz-executor
1181 1 765 0 SV wait 0xfffffe005876b000 syz-executor
1180 1 765 0 S uwait 0xfffffe007793c700 syz-executor
1169 1168 763 0 S uwait 0xfffffe006df47000 syz-executor
1168 1 763 0 SV wait 0xfffffe0058754010 syz-executor
1167 1 763 0 S uwait 0xfffffe0058570d80 syz-executor
1162 1161 764 0 S uwait 0xfffffe007793b600 syz-executor
1161 1 764 0 SV wait 0xfffffe0058728010 syz-executor
1160 1 764 0 S uwait 0xfffffe006df44000 syz-executor
1135 1134 765 0 S uwait 0xfffffe0058570e80 syz-executor
1134 1 765 0 SV wait 0xfffffe005876c560 syz-executor
1133 1 765 0 S uwait 0xfffffe006df44200 syz-executor
1107 1106 763 0 S uwait 0xfffffe005856f380 syz-executor
1106 1 763 0 SV wait 0xfffffe0058738560 syz-executor
1105 1 763 0 S uwait 0xfffffe007793c380 syz-executor
1092 1091 764 0 S uwait 0xfffffe005830fc80 syz-executor
1091 1 764 0 SV wait 0xfffffe0058728568 syz-executor
1090 1 764 0 S uwait 0xfffffe007793c180 syz-executor
1072 1071 763 0 S uwait 0xfffffe006df45300 syz-executor
1071 1 763 0 SV wait 0xfffffe00586f4ac0 syz-executor
1070 1 763 0 S uwait 0xfffffe0058570a80 syz-executor
1069 1 766 0 SV uwait 0xfffffe006df45600 syz-executor
1067 1 766 0 S uwait 0xfffffe005830d180 syz-executor
1064 1 1064 0 Ss select 0xfffffe007793bec0 dhclient
1060 1 1060 0 Ss select 0xfffffe005856e640 dhclient
1004 1003 763 0 S uwait 0xfffffe005830fa80 syz-executor
1003 1 763 0 SV wait 0xfffffe005870a560 syz-executor
1002 1 763 0 S uwait 0xfffffe006df45500 syz-executor
983 982 764 0 S uwait 0xfffffe006df44300 syz-executor
982 1 764 0 SV wait 0xfffffe0058726000 syz-executor
981 1 764 0 S uwait 0xfffffe006df45180 syz-executor
963 961 763 0 S uwait 0xfffffe006df44c80 syz-executor
961 1 763 0 SV wait 0xfffffe0058728ac0 syz-executor
960 1 763 0 S uwait 0xfffffe0058570c80 syz-executor
954 953 765 0 S uwait 0xfffffe005830d680 syz-executor
953 1 765 0 SV wait 0xfffffe0058709ab0 syz-executor
952 1 765 0 S uwait 0xfffffe006df45e80 syz-executor
932 931 766 0 S uwait 0xfffffe0058570a00 syz-executor
931 1 766 0 SV wait 0xfffffe0058737558 syz-executor
930 1 766 0 S uwait 0xfffffe006df46e80 syz-executor
911 909 763 0 S uwait 0xfffffe005830d480 syz-executor
909 1 763 0 SV wait 0xfffffe0058727008 syz-executor
908 1 763 0 S uwait 0xfffffe006df44d80 syz-executor
901 0 0 0 DL (threaded) [KTLS]
100166 D - 0xfffffe00598f0700 [thr_0]
100186 D - 0xfffffe00598f0780 [thr_1]
100187 D - 0xffffffff83cd59e8 [reclaim_0]
893 891 766 0 S uwait 0xfffffe005830d880 syz-executor
891 1 766 0 SV wait 0xfffffe0058709000 syz-executor
890 1 766 0 S uwait 0xfffffe006df46b80 syz-executor
869 1 763 0 S uwait 0xfffffe005830d380 syz-executor
859 1 763 0 S uwait 0xfffffe006df44a80 syz-executor
855 1 764 0 S uwait 0xfffffe006df45a00 syz-executor
819 1 766 0 S uwait 0xfffffe005830d780 syz-executor
813 0 0 0 DL aiordy 0xfffffe005870b568 [aiod4]
812 0 0 0 DL aiordy 0xfffffe005870bac0 [aiod3]
811 0 0 0 DL aiordy 0xfffffe005860c010 [aiod2]
810 0 0 0 DL aiordy 0xfffffe005860cac0 [aiod1]
766 762 766 0 S nanslp 0xffffffff83bb4001 syz-executor
765 762 765 0 R syz-executor
764 762 764 0 R syz-executor
763 762 763 0 R syz-executor
762 760 760 0 S select 0xfffffe006df47340 syz-executor
760 758 760 0 Ss sigsusp 0xfffffe0058603b68 csh
758 681 758 0 Ss select 0xfffffe006df47140 sshd
747 1 747 0 Ss+ ttyin 0xfffffe00541bb4b0 getty
746 1 746 0 Ss+ ttyin 0xfffffe00542a68b0 getty
745 1 745 0 Ss+ ttyin 0xfffffe00542a6cb0 getty
744 1 744 0 Ss+ ttyin 0xfffffe00542a70b0 getty
743 1 743 0 Ss+ ttyin 0xfffffe00542a74b0 getty
742 1 742 0 Ss+ ttyin 0xfffffe00542a78b0 getty
741 1 741 0 Ss+ ttyin 0xfffffe00542a7cb0 getty
740 1 740 0 Ss+ ttyin 0xfffffe00542a80b0 getty
739 1 739 0 Ss+ ttyin 0xfffffe00542a84b0 getty
685 1 685 0 Ss nanslp 0xffffffff83bb4001 cron
681 1 681 0 Ss select 0xfffffe005856e440 sshd
494 1 494 0 Ss select 0xfffffe005856eac0 syslogd
423 1 423 0 Ss wait 0xfffffe00586c9000 devd
422 1 422 65 Ss select 0xfffffe005830c0c0 dhclient
337 1 337 0 Ss select 0xfffffe0007b56d40 dhclient
334 1 334 0 Ss select 0xfffffe0007b56e40 dhclient
16 0 0 0 DL syncer 0xffffffff83ce1be0 [syncer]
15 0 0 0 DL vlruwt 0xfffffe0058602558 [vnlru]
14 0 0 0 DL (threaded) [bufdaemon]
100079 D psleep 0xffffffff83ce0120 [bufdaemon]
100082 D - 0xffffffff83001ec0 [bufspacedaemon-0]
100094 D sdflush 0xfffffe00598a2ce8 [/ worker]
9 0 0 0 DL psleep 0xffffffff83d21480 [vmdaemon]
8 0 0 0 DL (threaded) [pagedaemon]
100077 D psleep 0xffffffff83d07548 [dom0]
100080 D launds 0xffffffff83d07554 [laundry: dom0]
100081 D umarcl 0xffffffff81e33330 [uma]
7 0 0 0 DL - 0xffffffff8392c5b0 [rand_harvestq]
6 0 0 0 DL pftm 0xffffffff845f2f80 [pf purge]
5 0 0 0 DL waiting 0xffffffff848e6700 [sctp_iterator]
4 0 0 0 DL (threaded) [cam]
100045 D - 0xffffffff838f6340 [doneq0]
100046 D - 0xffffffff838f62c0 [async]
100075 D - 0xffffffff838f6140 [scanner]
3 0 0 0 DL (threaded) [crypto]
100042 D crypto_ 0xffffffff83d02de0 [crypto]
100043 D crypto_ 0xfffffe0007b6ad30 [crypto returns 0]
100044 D crypto_ 0xfffffe0007b6ad80 [crypto returns 1]
13 0 0 0 DL (threaded) [geom]
100037 D - 0xffffffff83b5c5e0 [g_event]
100038 D - 0xffffffff83b5c600 [g_up]
100039 D - 0xffffffff83b5c620 [g_down]
2 0 0 0 WL (threaded) [clock]
100031 I [clock (0)]
100032 I [clock (1)]
12 0 0 0 WL (threaded) [intr]
100013 I [swi6: task queue]
100014 I [swi6: Giant taskq]
100016 I [swi5: fast taskq]
100033 I [swi1: netisr 0]
100034 I [swi1: hpts]
100035 I [swi1: hpts]
100047 I [irq24: virtio_pci0]
100048 I [irq25: virtio_pci0]
100049 I [irq26: virtio_pci0]
100050 I [irq27: virtio_pci0]
100051 I [irq28: virtio_pci1]
100052 I [irq29: virtio_pci1]
100053 I [irq30: virtio_pci1]
100054 I [irq31: virtio_pci1]
100055 I [irq32: virtio_pci1]
100060 I [irq10: virtio_pci2]
100062 I [irq1: atkbd0]
100063 I [irq12: psm0]
100064 I [swi0: uart uart++]
100068 I [swi1: pf send]
11 0 0 0 RL (threaded) [idle]
100003 CanRun [idle: cpu0]
100004 CanRun [idle: cpu1]
1 0 1 0 RLs CPU 0 [init]
10 0 0 0 DL audit_w 0xffffffff83d03880 [audit]
0 0 0 0 DLs (threaded) [kernel]
100000 D - 0xffffffff84c59ff0 [kernel]
100005 D - 0xfffffe0007aa1000 [softirq_0]
100006 D - 0xfffffe0007aa0e00 [softirq_1]
100007 D - 0xfffffe0007aa0d00 [if_io_tqg_0]
100008 D - 0xfffffe0007aa0c00 [if_io_tqg_1]
100009 D - 0xfffffe0007aa0b00 [if_config_tqg_0]
100010 D - 0xfffffe000776fb00 [kqueue_ctx taskq]
100011 D - 0xfffffe000776fa00 [jail_remove taskq]
100012 D - 0xfffffe000776f900 [bus taskq]
100015 D - 0xfffffe000776f600 [thread taskq]
100017 D - 0xfffffe000776f400 [aiod_kick taskq]
100018 D - 0xfffffe000776f300 [deferred_unmount ta]
100019 D - 0xfffffe000776f200 [inm_free taskq]
100020 D - 0xfffffe000776f100 [in6m_free taskq]
100021 D - 0xfffffe000776f000 [linuxkpi_irq_wq]
100022 D - 0xfffffe000776ee00 [linuxkpi_short_wq_0]
100023 D - 0xfffffe000776ee00 [linuxkpi_short_wq_1]
100024 D - 0xfffffe000776ee00 [linuxkpi_short_wq_2]
100025 D - 0xfffffe000776ee00 [linuxkpi_short_wq_3]
100026 D - 0xfffffe000776ed00 [linuxkpi_long_wq_0]
100027 D - 0xfffffe000776ed00 [linuxkpi_long_wq_1]
100028 D - 0xfffffe000776ed00 [linuxkpi_long_wq_2]
100029 D - 0xfffffe000776ed00 [linuxkpi_long_wq_3]
100036 D - 0xfffffe000776ec00 [firmware taskq]
100040 D - 0xfffffe000776ea00 [crypto_0]
100041 D - 0xfffffe000776ea00 [crypto_1]
100056 D - 0xfffffe000776e800 [vtnet0 rxq 0]
100057 D - 0xfffffe000776e700 [vtnet0 txq 0]
100058 D - 0xfffffe000776e600 [vtnet0 rxq 1]
100059 D - 0xfffffe000776e500 [vtnet0 txq 1]
100061 D vtbslp 0xfffffe0007785d00 [virtio_balloon]
100065 D - 0xffffffff8283b100 [deadlkres]
100069 D - 0xfffffe00585efa00 [acpi_task_0]
100070 D - 0xfffffe00585efa00 [acpi_task_1]
100071 D - 0xfffffe00585efa00 [acpi_task_2]
100073 D - 0xfffffe000776fd00 [mca taskq]
100074 D - 0xfffffe000776e900 [CAM taskq]
100076 D - 0xfffffe000776e300 [ipsec_offload]
2279 764 764 0 RE syz-executor
db> show all locks
db> show malloc
Type InUse MemUse Requests
pf_hash 6 12804K 6
linker 384 5207K 901
tcp_hpts 8 4865K 8
devbuf 4187 4324K 4216
filedesc 440 3519K 2495
sysctloid 35270 2078K 35345
vtbuf 24 1968K 46
kobj 335 1340K 508
subproc 606 1280K 2559
newblk 69 1041K 24488
vfscache 3 1025K 3
pcb 37 680K 560
inodedep 21 520K 3192
ufs_quota 1 512K 1
vfs_hash 1 512K 1
callout 2 512K 2
intr 4 472K 4
vmem 5 284K 10
vnet_data 2 224K 2
acpitask 1 224K 1
KTRACE 100 200K 29996
acpica 1674 184K 56977
tidhash 3 141K 3
pagedep 10 131K 1200
tfo_ccache 1 128K 1
IP reass 1 128K 1
kdtrace 664 112K 4254
DEVFS1 107 107K 124
sem 4 106K 4
umtx 784 98K 784
gtaskqueue 18 98K 18
LRO 26 89K 26
bus 1011 83K 5163
mtx_pool 3 74K 3
BPF 41 72K 281
syncache 1 68K 1
NFSD srvcache 3 68K 3
module 527 66K 529
ddb_capture 1 64K 1
hostcache 1 32K 1
shm 1 32K 1
DEVFS3 127 32K 137
msg 4 30K 4
kbdmux 6 28K 6
kqueue 309 25K 4152
temp 31 21K 3124
DEVFS_RULE 56 20K 56
ifaddr 69 20K 71
pwddesc 288 18K 2370
ufs_mount 4 17K 5
proc 3 17K 3
routetbl 137 17K 427
tty 16 16K 16
ithread 90 15K 90
bus-sc 34 15K 1690
eventhandler 163 14K 163
ether_multi 157 13K 197
lltable 41 13K 46
cred 33 13K 696
ifnet 7 13K 7
kenv 95 12K 95
GEOM 54 12K 457
freework 45 12K 6905
shmfd 7 11K 38
CAM queue 5 11K 1528
rman 75 10K 430
plimit 24 9K 426
rpc 8 9K 8
CC Mem 70 9K 428
in6_multi 65 9K 66
bmsafemap 3 9K 2417
devstat 4 9K 4
UART 12 9K 12
ksem 1 8K 137
pfs_vncache 1 8K 1
audit_evclass 240 8K 306
taskqueue 69 8K 81
proc-args 319 7K 3437
sglist 6 7K 6
CAM DEV 3 6K 510
pfs_nodes 22 6K 22
ufs_dirhash 24 5K 42
pf_ifnet 11 5K 20
UMA 270 5K 270
vt 11 5K 11
memdesc 1 4K 1
MCA 32 4K 32
md_disk 1 4K 93
evdev 4 4K 4
selfd 62 4K 116005
acpisem 28 4K 28
session 27 4K 46
DEVFSP 53 4K 673
mount 20 4K 3174
lockf 28 3K 179
terminal 11 3K 11
inpcbpolicy 81 3K 910
acpidev 20 3K 20
uidinfo 4 3K 23
hhook 8 3K 10
clone 9 3K 9
kcovinfo 36 3K 36
netlink 2 3K 112
select 17 3K 64
pf_rule 1 2K 2
local_apic 1 2K 1
io_apic 1 2K 1
ipsec-saq 2 2K 2
sctp_atcl 5 2K 210
ip6ndp 12 2K 14
Unitno 32 2K 250
dirrem 7 2K 1968
in_multi 7 2K 14
sctp_ifa 13 2K 14
crypto 5 2K 197
osd 75 2K 445
CAM XPT 22 2K 543
freeblks 6 2K 1605
tun 4 2K 4
toponodes 6 2K 6
ipsecpolicy 2 2K 2
indirdep 5 2K 3217
msi 9 2K 9
softdep 1 1K 1
mkdir 8 1K 1912
sahead 1 1K 1
secasvar 1 1K 1
nhops 6 1K 8
vnodemarker 2 1K 300
NFSD session 1 1K 1
diradd 7 1K 1993
CAM periph 4 1K 271
sctp_ifn 6 1K 14
ipsec 3 1K 3
mld 6 1K 6
igmp 6 1K 6
pfil 6 1K 6
isadev 6 1K 6
pci_link 10 1K 10
encap_export_host 12 1K 12
frag6 6 1K 20
filedesc_to_leader 9 1K 18
newdirblk 4 1K 959
freefile 4 1K 1763
procdesc 4 1K 16
cdev 2 1K 2
lkpikmalloc 8 1K 9
counter_rate 13 1K 13
chacha20random 1 1K 1
biobuf 1 1K 1
cryptodev 5 1K 860
ip_msource 5 1K 16
vnodes 2 1K 3
DEVFS 10 1K 11
ktls 1 1K 32
NFSD lckfile 1 1K 1
NFSD V4client 1 1K 1
CAM SIM 2 1K 2
tcpfunc 3 1K 3
loginclass 3 1K 5
prison 6 1K 6
sctp_atky 5 1K 210
nexusdev 8 1K 8
apmdev 1 1K 1
atkbddev 2 1K 2
freefrag 1 1K 350
aio 4 1K 13
pmchooks 1 1K 1
CAM path 4 1K 1034
CAM dev queue 2 1K 2
CAM I/O Scheduler 1 1K 1
soname 4 1K 4085
in_mfilter 2 1K 27
sctp_athm 5 1K 210
sctp_vrf 1 1K 1
ip_moptions 1 1K 10
vnet 1 1K 1
pmc 1 1K 1
filecaps 4 1K 108
entropy 2 1K 38
acpiintr 1 1K 1
cpus 2 1K 2
vnet_data_free 1 1K 1
Per-cpu 1 1K 1
pf 1 1K 1
p1003.1b 1 1K 1
sctp_mcore 0 0K 0
sctp_socko 0 0K 100
sctp_iter 0 0K 10
sctp_mvrf 0 0K 0
sctp_timw 0 0K 0
sctp_cpal 0 0K 0
sctp_cmsg 0 0K 0
sctp_stre 0 0K 0
sctp_athi 0 0K 0
sctp_a_it 0 0K 10
sctp_aadr 0 0K 0
sctp_stro 0 0K 0
sctp_stri 0 0K 0
sctp_map 0 0K 0
filemon 0 0K 0
pf_table 0 0K 0
pf_altq 0 0K 0
pf_osfp 0 0K 0
pf_krule_item 0 0K 0
pf_temp 0 0K 0
ipcomp 0 0K 0
esp 0 0K 0
ah 0 0K 0
tcp_pcm_rack 0 0K 0
tcp_do_rack 0 0K 0
tcp_fsb_rack 0 0K 0
mqdata 0 0K 0
madt_table 0 0K 2
smartpqi 0 0K 0
ixl 0 0K 0
ice-resmgr 0 0K 0
ice-osdep 0 0K 0
ice 0 0K 0
iavf 0 0K 0
axgbe 0 0K 0
fpukern_ctx 0 0K 0
xen_intr 0 0K 0
xen_hvm 0 0K 0
legacydrv 0 0K 0
NMI handlers 0 0K 0
bounce 0 0K 0
busdma 0 0K 0
qpidrv 0 0K 0
dmar_idpgtbl 0 0K 0
dmar_dom 0 0K 0
dmar_ctx 0 0K 0
amdiommu_dom 0 0K 0
amdiommu_ctx 0 0K 0
isci 0 0K 0
iommu_dmamap 0 0K 0
hyperv_socket 0 0K 0
bxe_ilt 0 0K 0
aesni_data 0 0K 8
xenbus 0 0K 0
vm_fictitious 0 0K 0
UMAHash 0 0K 0
vm_pgdata 0 0K 0
jblocks 0 0K 0
savedino 0 0K 2393
sentinel 0 0K 0
jfsync 0 0K 0
jtrunc 0 0K 0
sbdep 0 0K 166
jsegdep 0 0K 0
jseg 0 0K 0
jfreefrag 0 0K 0
jfreeblk 0 0K 0
jnewblk 0 0K 0
jmvref 0 0K 0
jremref 0 0K 0
jaddref 0 0K 0
freedep 0 0K 0
allocindir 0 0K 0
allocdirect 0 0K 0
ufs_trim 0 0K 0
mactemp 0 0K 0
audit_trigger 0 0K 0
audit_pipe_presel 0 0K 0
audit_pipeent 0 0K 0
audit_pipe 0 0K 0
audit_evname 0 0K 0
audit_bsm 0 0K 0
audit_gidset 0 0K 0
audit_text 0 0K 0
audit_path 0 0K 0
audit_data 0 0K 0
audit_cred 0 0K 0
ktls_ocf 0 0K 5
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5E_TLS_RX 0 0K 0
MLX5EEPROM 0 0K 0
MLX5E_TLS 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EN 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5DUMP 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
simple_attr 0 0K 0
seq_file 0 0K 0
lkpiskb 0 0K 0
radix 0 0K 0
idr 0 0K 0
lkpindev 0 0K 0
lkpimhi 0 0K 0
lkpifw 0 0K 0
lkpi80211 0 0K 0
NLM 0 0K 0
ipsec-spdcache 0 0K 0
ipsec-reg 0 0K 0
ipsec-misc 0 0K 0
ipsecrequest 0 0K 0
ip6opt 0 0K 26
ip6_msource 0 0K 1
ip6_moptions 0 0K 1
in6_mfilter 0 0K 2
tcplog 0 0K 0
tcp_hwpace 0 0K 0
ipid 0 0K 0
80211scan 0 0K 0
80211ratectl 0 0K 0
80211power 0 0K 0
80211nodeie 0 0K 0
80211node 0 0K 0
80211mesh_gt 0 0K 0
80211mesh_rt 0 0K 0
80211perr 0 0K 0
80211prep 0 0K 0
80211preq 0 0K 0
80211dfs 0 0K 0
80211crypto 0 0K 0
80211vap 0 0K 0
iflib 0 0K 0
vlan 0 0K 0
gif 0 0K 0
ifdescr 0 0K 0
zlib 0 0K 22
fadvise 0 0K 0
VN POLL 0 0K 1
statfs 0 0K 274
namei_tracker 0 0K 0
inotify 0 0K 0
export_host 0 0K 0
cl_savebuf 0 0K 141
lio 0 0K 118
acl 0 0K 0
mbuf_tag 0 0K 0
accf 0 0K 0
pts 0 0K 0
timerfd 0 0K 0
iov 0 0K 17802
ioctlops 0 0K 230
eventfd 0 0K 0
Witness 0 0K 0
stack 0 0K 0
sbuf 0 0K 194
firmware 0 0K 0
compressor 0 0K 0
SWAP 0 0K 0
sysctltmp 0 0K 718
sysctl 0 0K 3
ekcd 0 0K 0
dumper 0 0K 0
sendfile 0 0K 12982
rctl 0 0K 0
cache 0 0K 0
kexec 0 0K 0
jaildesc 0 0K 0
prison_racct 0 0K 0
Fail Points 0 0K 0
sigio 0 0K 1
pwd 0 0K 0
tty console 0 0K 0
boottrace 0 0K 0
isofs_node 0 0K 0
isofs_mount 0 0K 0
tr_raid5_data 0 0K 0
tr_raid1e_data 0 0K 0
tr_raid1_data 0 0K 0
tr_raid0_data 0 0K 0
tr_concat_data 0 0K 0
md_sii_data 0 0K 0
md_promise_data 0 0K 0
md_nvidia_data 0 0K 0
md_jmicron_data 0 0K 0
md_intel_data 0 0K 0
md_ddf_data 0 0K 0
raid_data 0 0K 78
geom_flashmap 0 0K 0
tmpfs dir 0 0K 0
tmpfs name 0 0K 0
tmpfs mount 0 0K 0
tmpfs extattr 0 0K 0
NFS FHA 0 0K 0
newnfsmnt 0 0K 0
newnfsclient_req 0 0K 0
NFSCL layrecall 0 0K 0
NFSCL session 0 0K 0
NFSCL sockreq 0 0K 0
NFSCL devinfo 0 0K 0
NFSCL flayout 0 0K 0
NFSCL layout 0 0K 0
NFSD rollback 0 0K 0
NFSCL diroff 0 0K 0
NEWNFSnode 0 0K 0
NFSCL lck 0 0K 0
NFSCL lckown 0 0K 0
NFSCL client 0 0K 0
NFSCL deleg 0 0K 0
NFSCL open 0 0K 0
NFSCL owner 0 0K 0
NFS fh 0 0K 0
NFS req 0 0K 0
NFSD usrgroup 0 0K 0
NFSD string 0 0K 0
NFSD V4lock 0 0K 0
NFSD V4state 0 0K 0
msdosfs_fat 0 0K 0
msdosfs_mount 0 0K 0
msdosfs_node 0 0K 0
DEVFS4 0 0K 0
DEVFS2 0 0K 0
gntdev 0 0K 0
privcmd_dev 0 0K 0
evtchn_dev 0 0K 0
xenstore 0 0K 0
xnb 0 0K 0
xen_acpi 0 0K 0
xbbd 0 0K 0
xbd 0 0K 0
Balloon 0 0K 0
sysmouse 0 0K 0
vtfont 0 0K 0
pvscsi 0 0K 0
USBdev 0 0K 0
USB 0 0K 0
ufshci 0 0K 0
twsbuf 0 0K 0
tpm_buffer 0 0K 0
tcp_log_dev 0 0K 9
midi buffers 0 0K 0
mixer 0 0K 0
feeder 0 0K 0
ac97 0 0K 0
hdacc 0 0K 0
hdac 0 0K 0
hdaa 0 0K 0
SIIS driver 0 0K 0
PUC 0 0K 0
ppbusdev 0 0K 0
sr_iov 0 0K 0
OCS 0 0K 0
OCS 0 0K 0
nvme 0 0K 0
nvd 0 0K 0
netmap 0 0K 0
mwldev 0 0K 0
MVS driver 0 0K 0
mpi3mrbuf 0 0K 0
mrsasbuf 0 0K 0
mpt_user 0 0K 0
mps_user 0 0K 0
MPSSAS 0 0K 0
mps 0 0K 0
mpr_user 0 0K 0
MPRSAS 0 0K 0
mpr 0 0K 0
mfibuf 0 0K 0
md_sectors 0 0K 0
malodev 0 0K 0
LED 0 0K 0
ix_sriov 0 0K 0
ix 0 0K 0
ipsbuf 0 0K 0
ciss_data 0 0K 0
BACKLIGHT 0 0K 0
ath_hal 0 0K 0
athdev 0 0K 0
ata_pci 0 0K 0
ata_dma 0 0K 0
ata_generic 0 0K 0
AHCI driver 0 0K 0
agp 0 0K 0
acpipwr 0 0K 0
acpi_perf 0 0K 0
acpicmbat 0 0K 0
aacraidcam 0 0K 0
aacraid_buf 0 0K 0
aaccam 0 0K 0
aacbuf 0 0K 0
zstd 0 0K 0
XZ_DEC 0 0K 0
nvlist 0 0K 175
SCSI ENC 0 0K 0
SCSI sa 0 0K 0
scsi_pass 0 0K 0
scsi_da 0 0K 70
ata_da 0 0K 0
scsi_ch 0 0K 0
scsi_cd 0 0K 0
nvme_da 0 0K 0
CAM CCB 0 0K 523
CAM ccb queue 0 0K 0
db> show uma
Zone Size Used Free Requests Sleeps Bucket Total Mem XFree
mbuf_jumbo_page 4096 8320 1332 43034 0 254 39534592 0
tcp_log 416 7434 6543 175139 0 254 5814432 0
malloc-16384 16384 223 3 1439 0 1 3702784 0
mbuf 256 8699 1218 141498 0 254 2538752 0
BUF TRIE 152 230 11574 23647 0 62 1794208 0
RADIX NODE 152 10820 719 102765 0 62 1753928 0
malloc-384 384 4143 57 4797 0 30 1612800 0
malloc-128 128 11607 266 12013 0 126 1519744 0
malloc-4096 4096 335 3 513 0 2 1384448 0
UMA Slabs 0 112 11762 4 11762 0 126 1317792 0
malloc-4096 4096 301 3 2309 0 2 1245184 0
vmem btag 56 19531 92 19531 0 254 1098888 0
mbuf_cluster 2048 508 0 508 0 254 1040384 0
VM OBJECT 248 3709 147 30142 0 62 956288 0
FFS inode 1168 716 33 2598 0 8 874832 0
MAP ENTRY 96 8077 239 110077 0 126 798336 0
THREAD 1860 370 22 1966 0 8 729120 0
malloc-65536 65536 9 2 14 0 1 720896 0
sctp_ep 1152 5 506 210 0 254 588672 0
malloc-64 64 4172 4522 120476 0 254 556416 0
pbuf 2664 0 198 0 0 2 527472 0
socket 1024 110 398 2579 0 254 520192 0
lkpicurr 168 2 3094 2 0 62 520128 0
256 Bucket 2048 188 12 1932 0 8 409600 0
PROC 1368 292 5 2286 0 8 406296 0
malloc-2048 2048 114 78 1352 0 8 393216 0
VNODE 440 756 90 2640 0 30 372240 0
FPU_save_area 832 372 51 2853 0 16 351936 0
filedesc0 1072 288 20 2370 0 8 330176 0
malloc-32768 32768 3 6 2095 0 1 294912 0
malloc-65536 65536 4 0 4 0 1 262144 0
malloc-16 16 14854 146 17620 0 254 240000 0
malloc-128 128 1658 109 5785 0 126 226176 0
DEVCTL 1024 17 203 152 0 0 225280 0
FFS2 dinode 256 716 94 2598 0 62 207360 0
malloc-65536 65536 1 2 67 0 1 196608 0
malloc-128 128 1170 349 34737 0 126 194432 0
malloc-32 32 5424 498 5961 0 254 189504 0
UMA Zones 768 242 2 242 0 16 187392 0
malloc-256 256 138 552 26525 0 62 176640 0
lkpimm 56 1 3095 1 0 254 173376 0
VMSPACE 584 269 25 2164 0 16 171696 0
unpcb 320 20 496 1379 0 254 165120 0
malloc-256 256 475 155 4915 0 62 161280 0
S VFS Cache 104 1066 338 3183 0 126 146016 0
malloc-384 384 323 37 1083 0 30 138240 0
malloc-65536 65536 2 0 2 0 1 131072 0
malloc-65536 65536 0 2 238 0 1 131072 0
malloc-1024 1024 108 20 125 0 16 131072 0
mbuf_packet 256 39 469 14747 0 254 130048 0
tcp_inpcb 1304 70 20 428 0 8 117360 0
ksiginfo 112 287 757 735 0 126 116928 0
malloc-32768 32768 0 3 130 0 1 98304 0
malloc-32768 32768 1 2 14 0 1 98304 0
malloc-32768 32768 3 0 3 0 1 98304 0
malloc-32768 32768 2 1 3 0
---
This report is generated by a bot. It may contain errors.
See https://goo.gl/tpsmEJ for more information about syzbot.
syzbot engineers can be reached at syzk...@googlegroups.com.
syzbot will keep track of this issue. See:
https://goo.gl/tpsmEJ#status for how to communicate with syzbot.
If the report is already addressed, let syzbot know by replying with:
#syz fix: exact-commit-title
If you want to overwrite report's subsystems, reply with:
#syz set subsystems: new-subsystem
(See the list of subsystem names on the web dashboard)
If the report is a duplicate of another one, reply with:
#syz dup: exact-subject-of-another-report
If you want to undo deduplication, reply with:
#syz undup
syzbot
Dec 10, 2025, 12:54:32 AM (3 days ago) Dec 10
to syzkaller-f...@googlegroups.com
syzbot has found a reproducer for the following issue on:
HEAD commit: cc1e4aae5a67 rc.d/ipfilter: ipfilter must be enabled for o..
git tree: freebsd-src
console output: https://syzkaller.appspot.com/x/log.txt?x=138d6a1a580000
dashboard link: https://syzkaller.appspot.com/bug?extid=25dabe4046a645a0566c
syz repro: https://syzkaller.appspot.com/x/repro.syz?x=166861c2580000
C reproducer: https://syzkaller.appspot.com/x/repro.c?x=154d5eb4580000
IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+25dabe...@syzkaller.appspotmail.com
panic: proc_dtor: non-empty p_ktr
cpuid = 1
time = 1765346011
r12 0xfffffe000780e000
r13 0xfffffffffffffffd
3455 837 837 0 R syz-executor
3452 829 829 60928 R syz-executor
3448 831 831 60928 RE CPU 0 syz-executor
2498 2469 2498 0 Ss select 0xfffffe006ea0c7c0 dhclient
2480 1 2480 0 Ss select 0xfffffe0058570f40 dhclient
2469 2416 423 65 S select 0xfffffe006ea0c740 dhclient
2416 423 423 0 S wait 0xfffffe00586cbac0 sh
837 773 837 0 S nanslp 0xffffffff83bb4001 syz-executor
835 773 835 0 R syz-executor
831 773 831 0 R syz-executor
829 773 829 0 R syz-executor
773 772 770 0 S select 0xfffffe006ea0f1c0 syz-executor
772 770 770 0 S (threaded) syz-execprog
100106 S uwait 0xfffffe005856ed80 syz-execprog
100112 S uwait 0xfffffe005830c480 syz-execprog
100113 S uwait 0xfffffe005856f100 syz-execprog
100114 S kqread 0xfffffe0059782700 syz-execprog
100115 S uwait 0xfffffe005856da80 syz-execprog
100116 S uwait 0xfffffe006ea0f480 syz-execprog
100117 S uwait 0xfffffe005856db80 syz-execprog
100159 S uwait 0xfffffe006ea67080 syz-execprog
770 768 770 0 Ss sigsusp 0xfffffe0058604b70 csh
768 681 768 0 Ss select 0xfffffe0007b56ac0 sshd
745 1 745 0 Ss+ ttyin 0xfffffe00542a74b0 getty
744 1 744 0 Ss+ ttyin 0xfffffe00541ba0b0 getty
743 1 743 0 Ss+ ttyin 0xfffffe00541ba4b0 getty
736 735 17 0 S+ nanslp 0xffffffff83bb4001 sleep
735 1 17 0 S+ wait 0xfffffe00586caab8 sh
494 1 494 0 Ss select 0xfffffe005856e6c0 syslogd
423 1 423 0 Ss wait 0xfffffe00586ca560 devd
422 1 422 65 Ss select 0xfffffe005856e740 dhclient
337 1 337 0 Ss select 0xfffffe0007b56e40 dhclient
334 1 334 0 Ss select 0xfffffe005830c440 dhclient
5 0 0 0 DL waiting 0xffffffff844d0700 [sctp_iterator]
100031 RunQ [clock (0)]
1 0 1 0 RLs CPU 1 [init]
100011 D - 0xfffffe000776ba00 [jail_remove taskq]
100012 D - 0xfffffe000776b900 [bus taskq]
100015 D - 0xfffffe000776b600 [thread taskq]
100017 D - 0xfffffe000776b400 [aiod_kick taskq]
100018 D - 0xfffffe000776b300 [deferred_unmount ta]
100019 D - 0xfffffe000776b200 [inm_free taskq]
100020 D - 0xfffffe000776b100 [in6m_free taskq]
100021 D - 0xfffffe000776b000 [linuxkpi_irq_wq]
100022 D - 0xfffffe000776ae00 [linuxkpi_short_wq_0]
100023 D - 0xfffffe000776ae00 [linuxkpi_short_wq_1]
100024 D - 0xfffffe000776ae00 [linuxkpi_short_wq_2]
100025 D - 0xfffffe000776ae00 [linuxkpi_short_wq_3]
100026 D - 0xfffffe000776ad00 [linuxkpi_long_wq_0]
100027 D - 0xfffffe000776ad00 [linuxkpi_long_wq_1]
100028 D - 0xfffffe000776ad00 [linuxkpi_long_wq_2]
100029 D - 0xfffffe000776ad00 [linuxkpi_long_wq_3]
100036 D - 0xfffffe000776ac00 [firmware taskq]
100040 D - 0xfffffe000776aa00 [crypto_0]
100041 D - 0xfffffe000776aa00 [crypto_1]
100056 D - 0xfffffe000776a800 [vtnet0 rxq 0]
100057 D - 0xfffffe000776a700 [vtnet0 txq 0]
100058 D - 0xfffffe000776a600 [vtnet0 rxq 1]
100059 D - 0xfffffe000776a500 [vtnet0 txq 1]
100074 D - 0xfffffe000776a900 [CAM taskq]
100076 D - 0xfffffe00585ef900 [ipsec_offload]
3451 835 835 60928 Z syz-executor
3454 3448 831 60928 Z syz-executor
db> show all locks
Process 3448 (syz-executor) thread 0xfffffe0058706000 (100122)
exclusive rw vmobject (vmobject) r = 0 (0xfffffe005872b3e0) locked @ /syzkaller/managers/main/kernel/sys/vm/vm_object.c:864
exclusive rw vmobject (vmobject) r = 0 (0xfffffe0058700ba0) locked @ /syzkaller/managers/main/kernel/sys/vm/vm_object.c:578
tcp_hpts 8 4865K 8
devbuf 4187 4324K 4212
sysctloid 35057 2066K 35132
vtbuf 24 1968K 46
newblk 1908 1501K 5826
kobj 335 1340K 499
vfscache 3 1025K 3
pcb 24 669K 57
inodedep 215 593K 2641
subproc 130 238K 2278
sem 4 106K 4
DEVFS1 106 106K 126
gtaskqueue 18 98K 18
LRO 24 87K 26
ddb_capture 1 64K 1
kdtrace 203 41K 3619
umtx 304 38K 304
BPF 25 37K 1280
dirrem 142 36K 2555
DEVFS_RULE 56 20K 56
freefile 154 20K 2541
ifaddr 67 19K 78
ifnet 7 13K 8
ether_multi 152 13K 190
kenv 95 12K 95
cred 27 11K 1543
GEOM 49 11K 431
plimit 23 9K 459
in6_multi 65 9K 75
bmsafemap 3 9K 2608
ksem 2 9K 1258
taskqueue 69 8K 69
mkdir 44 6K 2618
pfs_nodes 22 6K 22
newdirblk 40 5K 1309
ufs_dirhash 24 5K 24
UMA 268 5K 268
pf_ifnet 10 5K 25
acpisem 28 4K 28
pwddesc 51 4K 3457
proc-args 84 4K 4649
selfd 48 3K 69036
terminal 11 3K 11
session 22 3K 53
indirdep 10 3K 10
acpidev 20 3K 20
uidinfo 4 3K 158
ip6ndp 12 2K 16
freework 8 2K 2533
freeblks 7 2K 2520
Unitno 28 2K 56
sctp_ifa 13 2K 16
tun 4 2K 5
sctp_ifn 6 1K 16
mld 6 1K 7
CC Mem 6 1K 13
igmp 6 1K 7
pci_link 10 1K 10
DEVFSP 11 1K 1303
freefrag 5 1K 485
crypto 4 1K 4
encap_export_host 12 1K 12
osd 11 1K 30
procdesc 2 1K 12
prison 6 1K 6
cryptodev 2 1K 49
filecaps 5 1K 90
sctp_vrf 1 1K 1
pf 0 0K 0
pf_rule 0 0K 0
sctp_socko 0 0K 0
sctp_iter 0 0K 16
sctp_atky 0 0K 0
sctp_atcl 0 0K 0
sctp_a_it 0 0K 16
aesni_data 0 0K 0
ipsec-misc 0 0K 2
ipsecrequest 0 0K 0
ip6opt 0 0K 6
ip6_msource 0 0K 0
ip6_moptions 0 0K 0
in6_mfilter 0 0K 0
frag6 0 0K 0
ip_moptions 0 0K 0
in_mfilter 0 0K 0
fadvise 0 0K 0
VN POLL 0 0K 0
statfs 0 0K 203
aio 0 0K 0
lio 0 0K 0
ioctlops 0 0K 103
tcp_log_dev 0 0K 0
md_disk 0 0K 0
tcp_log 416 10187 487 17957 0 254 4440384 0
mbuf 256 8632 1795 62903 0 254 2669312 0
BUF TRIE 152 310 11494 1111 0 62 1794208 0
malloc-384 384 4137 63 5653 0 30 1612800 0
malloc-128 128 11537 181 12895 0 126 1499904 0
malloc-4096 4096 335 3 500 0 2 1384448 0
UMA Slabs 0 112 11738 28 11738 0 126 1317792 0
RADIX NODE 152 4821 1388 71593 0 62 943768 0
malloc-256 256 2110 1055 8448 0 62 810240 0
FFS inode 1168 554 41 3095 0 8 694960 0
malloc-65536 65536 9 0 12 0 1 589824 0
malloc-2048 2048 114 174 1442 0 8 589824 0
malloc-128 128 1359 1183 36320 0 126 325376 0
VM OBJECT 248 1101 211 38946 0 62 325376 0
256 Bucket 2048 132 20 1374 0 8 311296 0
malloc-64 64 4128 723 73444 0 254 310464 0
VNODE 440 590 103 3134 0 30 304920 0
THREAD 1860 147 5 161 0 8 282720 0
malloc-16384 16384 10 7 2771 0 1 278528 0
malloc-4096 4096 60 8 2361 0 2 278528 0
DEVCTL 1024 33 187 160 0 0 225280 0
UMA Zones 768 240 4 240 0 16 187392 0
malloc-32 32 5399 271 5623 0 254 181440 0
FFS2 dinode 256 554 136 3095 0 62 176640 0
malloc-256 256 57 633 5952 0 62 176640 0
malloc-128 128 1130 141 6154 0 126 162688 0
MAP ENTRY 96 1198 440 93419 0 126 157248 0
S VFS Cache 104 1024 380 3582 0 126 146016 0
FPU_save_area 832 149 13 7362 0 16 134784 0
malloc-65536 65536 0 2 8 0 1 131072 0
malloc-1024 1024 107 21 127 0 16 131072 0
mbuf_packet 256 2 506 2704 0 254 130048 0
ksiginfo 112 64 980 7275 0 126 116928 0
PROC 1368 54 23 3456 0 8 105336 0
128 Bucket 1024 56 27 359 0 16 84992 0
filedesc0 1072 51 26 3457 0 8 82544 0
64 Bucket 512 105 55 3355 0 30 81920 0
malloc-256 256 256 59 2907 0 62 80640 0
g_bio 440 0 180 5480 0 30 79200 0
malloc-64 64 512 559 25374 0 254 68544 0
malloc-128 128 312 215 889 0 126 67456 0
malloc-65536 65536 1 0 1 0 1 65536 0
malloc-65536 65536 1 0 1 0 1 65536 0
malloc-65536 65536 1 0 1 0 1 65536 0
malloc-32768 32768 0 2 120 0 1 65536 0
malloc-32768 32768 1 1 12 0 1 65536 0
malloc-32768 32768 2 0 2 0 1 65536 0
malloc-4096 4096 12 4 26 0 2 65536 0
malloc-256 256 153 102 189 0 62 65280 0
malloc-384 384 102 48 896 0 30 57600 0
malloc-8192 8192 5 2 112 0 1 57344 0
malloc-8192 8192 7 0 8 0 1 57344 0
malloc-64 64 467 352 684 0 254 52416 0
malloc-256 256 38 157 3122 0 62 49920 0
malloc-256 256 43 152 742 0 62 49920 0
32 Bucket 256 97 98 4964 0 62 49920 0
DIRHASH 1024 34 14 34 0 16 49152 0
NAMEI 1024 0 48 29546 0 16 49152 0
malloc-16384 16384 3 0 3 0 1 49152 0
malloc-4096 4096 10 2 15 0 2 49152 0
malloc-4096 4096 11 1 490 0 2 49152 0
malloc-2048 2048 12 12 45 0 8 49152 0
malloc-1024 1024 11 37 1821 0 16 49152 0
malloc-1024 1024 10 38 518 0 16 49152 0
VMSPACE 584 36 48 3442 0 16 49056 0
pipe 736 21 45 1654 0 16 48576 0
syncache 168 0 264 6 0 254 44352 0
pcpu-8 8 4765 355 13877 0 254 40960 0
udp_inpcb 408 6 84 189 0 30 36720 0
malloc-64 64 58 509 3469 0 254 36288 0
malloc-64 64 20 547 1397 0 254 36288 0
malloc-64 64 132 435 3606 0 254 36288 0
malloc-64 64 232 335 3708 0 254 36288 0
malloc-64 64 5 562 592 0 254 36288 0
malloc-128 128 7 272 9 0 126 35712 0
malloc-128 128 10 269 22 0 126 35712 0
malloc-128 128 166 113 1602 0 126 35712 0
routing nhops 256 27 108 38 0 62 34560 0
ttyoutq 256 72 63 160 0 62 34560 0
malloc-384 384 53 37 82 0 30 34560 0
malloc-384 384 35 55 47 0 30 34560 0
malloc-256 256 65 70 2664 0 62 34560 0
malloc-256 256 5 130 21 0 62 34560 0
malloc-8192 8192 2 2 4 0 1 32768 0
malloc-8192 8192 4 0 4 0 1 32768 0
malloc-2048 2048 3 13 3 0 8 32768 0
malloc-2048 2048 6 10 153 0 8 32768 0
malloc-2048 2048 5 11 22 0 8 32768 0
malloc-1024 1024 1 31 7 0 16 32768 0
malloc-1024 1024 12 20 1302 0 16 32768 0
malloc-1024 1024 20 12 24 0 16 32768 0
malloc-1024 1024 5 27 25 0 16 32768 0
malloc-1024 1024 8 24 9 0 16 32768 0
malloc-512 512 2 62 10 0 30 32768 0
malloc-512 512 12 52 1453 0 30 32768 0
malloc-512 512 2 62 27 0 30 32768 0
malloc-512 512 4 60 9 0 30 32768 0
malloc-512 512 17 47 1271 0 30 32768 0
malloc-512 512 0 64 52 0 30 32768 0
pcpu-64 64 503 9 503 0 254 32768 0
ertt_txseginfo 40 0 808 2656 0 254 32320 0
PWD 40 16 792 1389 0 254 32320 0
ttyinq 160 135 65 300 0 62 32000 0
Files 80 136 264 17906 0 126 32000 0
clpbuf 2664 0 12 74 0 4 31968 0
PGRP 120 26 238 72 0 126 31680 0
tcp_inpcb 1304 6 18 13 0 8 31296 0
malloc-32 32 386 496 495 0 254 28224 0
16 Bucket 144 55 141 367 0 62 28224 0
4 Bucket 48 6 582 8 0 254 28224 0
da_ccb 544 0 49 1604 0 16 26656 0
TURNSTILE 136 153 36 153 0 62 25704 0
cpuset 200 7 121 7 0 62 25600 0
malloc-8192 8192 3 0 3 0 1 24576 0
rtentry 168 30 114 38 0 62 24192 0
8 Bucket 80 61 239 701 0 126 24000 0
malloc-384 384 2 58 682 0 30 23040 0
malloc-384 384 7 53 7 0 30 23040 0
ripcb 376 2 58 8 0 30 22560 0
SLEEPQUEUE 88 153 103 153 0 126 22528 0
hostcache 64 1 314 1 0 254 20160 0
ertt 72 6 274 13 0 126 20160 0
malloc-32 32 36 594 50 0 254 20160 0
malloc-32 32 3 627 16 0 254 20160 0
malloc-32 32 142 488 2818 0 254 20160 0
malloc-32 32 37 593 756 0 254 20160 0
malloc-32 32 81 549 7382 0 254 20160 0
malloc-32 32 5 625 496 0 254 20160 0
2 Bucket 32 61 569 683 0 254 20160 0
KNOTE 160 7 118 3373 0 62 20000 0
malloc-128 128 1 154 1 0 126 19840 0
vmem 1856 2 7 2 0 8 16704 0
epoch_record pcpu 256 4 60 4 0 62 16384 0
malloc-16384 16384 1 0 3 0 1 16384 0
malloc-16384 16384 1 0 1 0 1 16384 0
malloc-8192 8192 0 2 20 0 1 16384 0
malloc-8192 8192 2 0 2 0 1 16384 0
malloc-4096 4096 2 2 208 0 2 16384 0
malloc-4096 4096 0 4 6 0 2 16384 0
malloc-2048 2048 3 5 3 0 8 16384 0
malloc-2048 2048 2 6 2 0 8 16384 0
malloc-2048 2048 2 6 2 0 8 16384 0
malloc-512 512 1 31 1 0 30 16384 0
SMR CPU 32 8 503 8 0 254 16352 0
sctp_laddr 48 0 336 16 0 254 16128 0
kenv 258 17 43 1071 0 30 15480 0
mqnode 416 3 33 3 0 30 14976 0
SMR SHARED 24 8 503 8 0 254 12264 0
malloc-16 16 8 742 17 0 254 12000 0
malloc-16 16 1 749 2 0 254 12000 0
malloc-16 16 322 428 530 0 254 12000 0
malloc-16 16 36 714 41 0 254 12000 0
malloc-16 16 187 563 3033 0 254 12000 0
malloc-16 16 31 719 36869 0 254 12000 0
malloc-16 16 10 740 45 0 254 12000 0
malloc-384 384 0 30 1 0 30 11520 0
Mountpoints 2816 2 2 2 0 4 11264 0
malloc-4096 4096 1 1 1 0 2 8192 0
vtnet_tx_hdr 24 0 334 2745 0 254 8016 0
pcpu-16 16 4 252 4 0 254 4096 0
UMA Slabs 1 176 9 13 9 0 62 3872 0
KMAP ENTRY 96 12 27 14 0 0 3744 0
FFS1 dinode 128 0 0 0 0 126 0 0
ada_ccb 272 0 0 0 0 30 0 0
swblk 136 0 0 0 0 62 0 0
swpctrie 152 0 0 0 0 62 0 0
cdg_qdiffsample 16 0 0 0 0 254 0 0
pf state scrubs 40 0 0 0 0 254 0 0
pf frag entries 40 0 0 0 0 254 0 0
pf fragment node 72 0 0 0 0 126 0 0
pf frags 232 0 0 0 0 62 0 0
pf table entries 160 0 0 0 0 254 0 0
pf table entry counters 64 0 0 0 0 254 0 0
pf Ethernet anchors 1240 0 0 0 0 64 0 0
pf anchors 1664 0 0 0 0 64 0 0
pf UDP mappings 104 0 0 0 0 126 0 0
pf source nodes 152 0 0 0 0 254 0 0
pf state keys 88 0 0 0 0 126 0 0
pf states 384 0 0 0 0 254 0 0
pf tags 104 0 0 0 0 126 0 0
pf mtags 184 0 0 0 0 62 0 0
tcp_bbr_pcb 896 0 0 0 0 16 0 0
tcp_bbr_map 128 0 0 0 0 126 0 0
tcp_rack_pcb 1088 0 0 0 0 8 0 0
tcp_rack_map 128 0 0 0 0 126 0 0
tfo_ccache_entries 80 0 0 0 0 126 0 0
tfo 4 0 0 0 0 254 0 0
sackhole 32 0 0 0 0 254 0 0
ipq 56 0 0 0 0 254 0 0
sctp_asconf_ack 48 0 0 0 0 254 0 0
sctp_asconf 40 0 0 0 0 254 0 0
sctp_stream_msg_out 112 0 0 0 0 254 0 0
sctp_readq 152 0 0 0 0 254 0 0
sctp_chunk 152 0 0 0 0 254 0 0
sctp_raddr 736 0 0 0 0 254 0 0
sctp_asoc 2256 0 0 0 0 254 0 0
sctp_ep 1152 0 0 0 0 254 0 0
tcp_log_id_node 120 0 0 0 0 126 0 0
tcp_log_id_bucket 176 0 0 0 0 62 0 0
tcpreass 48 0 0 0 0 254 0 0
udplite_inpcb 408 0 0 0 0 30 0 0
IPsec SA lft_c 16 0 0 0 0 254 0 0
itimer 352 0 0 0 0 30 0 0
AIOLIO 272 0 0 0 0 30 0 0
AIOCB 552 0 0 0 0 16 0 0
AIO 208 0 0 0 0 62 0 0
mqnotifier 216 0 0 0 0 62 0 0
mvdata 64 0 0 0 0 254 0 0
mqueue 248 0 0 0 0 62 0 0
TMPFS node 240 0 0 0 0 62 0 0
NCLNODE 608 0 0 0 0 16 0 0
LTS VFS Cache 360 0 0 0 0 30 0 0
L VFS Cache 320 0 0 0 0 30 0 0
STS VFS Cache 144 0 0 0 0 62 0 0
cryptop 280 0 0 0 0 30 0 0
linux_dma_object 32 0 0 0 0 254 0 0
linux_dma_pctrie 152 0 0 0 0 62 0 0
IOMMU_MAP_ENTRY 112 0 0 0 0 126 0 0
skbuff 1808 0 0 0 0 8 0 0
mbuf_jumbo_16k 16384 0 0 0 0 254 0 0
mbuf_jumbo_9k 9216 0 0 0 0 254 0 0
audit_record 1280 0 0 0 0 8 0 0
domainset 40 0 0 0 0 254 0 0
MAC labels 40 0 0 0 0 254 0 0
vnpbuf 2664 0 0 0 0 16 0 0
nfspbuf 2664 0 0 0 0 4 0 0
swwbuf 2664 0 0 0 0 2 0 0
swrbuf 2664 0 0 0 0 4 0 0
umtx_shm 88 0 0 0 0 126 0 0
umtx pi 96 0 0 0 0 126 0 0
rangeset pctrie nodes 152 0 0 0 0 62 0 0
rl_entry 48 0 0 0 0 254 0 0
malloc-32768 32768 0 0 0 0 1 0 0
malloc-32768 32768 0 0 0 0 1 0 0
malloc-32768 32768 0 0 0 0
---
If you want syzbot to run the reproducer, reply with:
#syz test: git://repo/address.git branch-or-commit-hash
If you attach or paste a git patch, syzbot will apply it before testing.
HEAD commit: cc1e4aae5a67 rc.d/ipfilter: ipfilter must be enabled for o..
git tree: freebsd-src
dashboard link: https://syzkaller.appspot.com/bug?extid=25dabe4046a645a0566c
syz repro: https://syzkaller.appspot.com/x/repro.syz?x=166861c2580000
C reproducer: https://syzkaller.appspot.com/x/repro.c?x=154d5eb4580000
IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+25dabe...@syzkaller.appspotmail.com
panic: proc_dtor: non-empty p_ktr
time = 1765346011
KDB: stack backtrace:
db_trace_self_wrapper() at db_trace_self_wrapper+0xc6/frame 0xfffffe0056c6e350
kdb_backtrace() at kdb_backtrace+0xd0/frame 0xfffffe0056c6e4b0
vpanic() at vpanic+0x257/frame 0xfffffe0056c6e670
panic() at panic+0xb5/frame 0xfffffe0056c6e730
proc_dtor() at proc_dtor+0x532/frame 0xfffffe0056c6e780
item_dtor() at item_dtor+0xc3/frame 0xfffffe0056c6e7d0
uma_zfree_arg() at uma_zfree_arg+0x10a/frame 0xfffffe0056c6e870
proc_reap() at proc_reap+0x831/frame 0xfffffe0056c6e8d0
proc_to_reap() at proc_to_reap+0x6d8/frame 0xfffffe0056c6e930
kern_wait6() at kern_wait6+0x34b/frame 0xfffffe0056c6ea10
sys_wait4() at sys_wait4+0x1c4/frame 0xfffffe0056c6ed10
amd64_syscall() at amd64_syscall+0x4e2/frame 0xfffffe0056c6ef30
fast_syscall_common() at fast_syscall_common+0xf8/frame 0xfffffe0056c6ef30
--- syscall (7, FreeBSD ELF64, wait4), rip = 0x2b10ca, rsp = 0x8212fbfe8, rbp = 0x8212fc050 ---
db_trace_self_wrapper() at db_trace_self_wrapper+0xc6/frame 0xfffffe0056c6e350
kdb_backtrace() at kdb_backtrace+0xd0/frame 0xfffffe0056c6e4b0
vpanic() at vpanic+0x257/frame 0xfffffe0056c6e670
panic() at panic+0xb5/frame 0xfffffe0056c6e730
proc_dtor() at proc_dtor+0x532/frame 0xfffffe0056c6e780
item_dtor() at item_dtor+0xc3/frame 0xfffffe0056c6e7d0
uma_zfree_arg() at uma_zfree_arg+0x10a/frame 0xfffffe0056c6e870
proc_reap() at proc_reap+0x831/frame 0xfffffe0056c6e8d0
proc_to_reap() at proc_to_reap+0x6d8/frame 0xfffffe0056c6e930
kern_wait6() at kern_wait6+0x34b/frame 0xfffffe0056c6ea10
sys_wait4() at sys_wait4+0x1c4/frame 0xfffffe0056c6ed10
amd64_syscall() at amd64_syscall+0x4e2/frame 0xfffffe0056c6ef30
fast_syscall_common() at fast_syscall_common+0xf8/frame 0xfffffe0056c6ef30
KDB: enter: panic
[ thread pid 1 tid 100002 ]
Stopped at kdb_enter+0x6e: movq $0,0x258a057(%rip)
db>
db> set $lines = 0
db> set $maxwidth = 0
db> show registers
cs 0x20
ds 0x3b
es 0x3b
fs 0x13
gs 0x1b
ss 0x28
rax 0x12
rcx 0xfffffe0002bf1850
rdx 0xdffff7c000000000
[ thread pid 1 tid 100002 ]
Stopped at kdb_enter+0x6e: movq $0,0x258a057(%rip)
db>
db> set $lines = 0
db> set $maxwidth = 0
db> show registers
cs 0x20
ds 0x3b
es 0x3b
fs 0x13
gs 0x1b
ss 0x28
rax 0x12
rcx 0xfffffe0002bf1850
rbx 0xffffffff82836a20 .str.27
rsp 0xfffffe0056c6e490
rbp 0xfffffe0056c6e4b0
rsi 0
rdi 0xffffffff830004e0 panicstr
rsp 0xfffffe0056c6e490
rbp 0xfffffe0056c6e4b0
rsi 0
r8 0
r9 0xffffffff
r10 0
r11 0xfffffe0058707cd0
r9 0xffffffff
r10 0
r12 0xfffffe000780e000
r13 0xfffffffffffffffd
r14 0xffffffff82836a20 .str.27
r15 0
rip 0xffffffff81648f3e kdb_enter+0x6e
rflags 0x46
kdb_enter+0x6e: movq $0,0x258a057(%rip)
db> show proc
Process 1 (init) at 0xfffffe0007809010:
state: NORMAL
uid: 0 gid: 0 supp gids: 0
parent: pid 0 at 0xffffffff83b5d020
ABI: FreeBSD ELF64
flag: 0x10004200 flag2: 0
arguments: /sbin/init
reaper: 0xffffffff83b5d020 reapsubtree: 1
sigparent: 20
vmspace: 0xfffffe0007811000
(map 0xfffffe0007811000)
(map.pmap 0xfffffe00078110a0)
(pmap 0xfffffe0007811110)
threads: 1
100002 Run CPU 1 [init]
r15 0
rip 0xffffffff81648f3e kdb_enter+0x6e
rflags 0x46
kdb_enter+0x6e: movq $0,0x258a057(%rip)
db> show proc
Process 1 (init) at 0xfffffe0007809010:
state: NORMAL
uid: 0 gid: 0 supp gids: 0
parent: pid 0 at 0xffffffff83b5d020
ABI: FreeBSD ELF64
flag: 0x10004200 flag2: 0
arguments: /sbin/init
reaper: 0xffffffff83b5d020 reapsubtree: 1
sigparent: 20
vmspace: 0xfffffe0007811000
(map 0xfffffe0007811000)
(map.pmap 0xfffffe00078110a0)
(pmap 0xfffffe0007811110)
threads: 1
db> ps
pid ppid pgrp uid state wmesg wchan cmd
3456 3452 829 60928 R syz-executor
pid ppid pgrp uid state wmesg wchan cmd
3455 837 837 0 R syz-executor
3452 829 829 60928 R syz-executor
3448 831 831 60928 RE CPU 0 syz-executor
2498 2469 2498 0 Ss select 0xfffffe006ea0c7c0 dhclient
2480 1 2480 0 Ss select 0xfffffe0058570f40 dhclient
2469 2416 423 65 S select 0xfffffe006ea0c740 dhclient
2416 423 423 0 S wait 0xfffffe00586cbac0 sh
837 773 837 0 S nanslp 0xffffffff83bb4001 syz-executor
835 773 835 0 R syz-executor
831 773 831 0 R syz-executor
829 773 829 0 R syz-executor
773 772 770 0 S select 0xfffffe006ea0f1c0 syz-executor
772 770 770 0 S (threaded) syz-execprog
100106 S uwait 0xfffffe005856ed80 syz-execprog
100112 S uwait 0xfffffe005830c480 syz-execprog
100113 S uwait 0xfffffe005856f100 syz-execprog
100114 S kqread 0xfffffe0059782700 syz-execprog
100115 S uwait 0xfffffe005856da80 syz-execprog
100116 S uwait 0xfffffe006ea0f480 syz-execprog
100117 S uwait 0xfffffe005856db80 syz-execprog
100159 S uwait 0xfffffe006ea67080 syz-execprog
770 768 770 0 Ss sigsusp 0xfffffe0058604b70 csh
768 681 768 0 Ss select 0xfffffe0007b56ac0 sshd
747 1 747 0 Ss+ ttyin 0xfffffe00541bb4b0 getty
746 1 746 0 Ss+ ttyin 0xfffffe00542a70b0 getty
745 1 745 0 Ss+ ttyin 0xfffffe00542a74b0 getty
744 1 744 0 Ss+ ttyin 0xfffffe00541ba0b0 getty
743 1 743 0 Ss+ ttyin 0xfffffe00541ba4b0 getty
742 1 742 0 Ss+ ttyin 0xfffffe00542a78b0 getty
741 1 741 0 Ss+ ttyin 0xfffffe00542a7cb0 getty
740 1 740 0 Ss+ ttyin 0xfffffe00542a80b0 getty
739 1 739 0 Ss+ ttyin 0xfffffe00542a84b0 getty
737 1 17 0 S+ piperd 0xfffffe00598778a0 logger
741 1 741 0 Ss+ ttyin 0xfffffe00542a7cb0 getty
740 1 740 0 Ss+ ttyin 0xfffffe00542a80b0 getty
739 1 739 0 Ss+ ttyin 0xfffffe00542a84b0 getty
736 735 17 0 S+ nanslp 0xffffffff83bb4001 sleep
735 1 17 0 S+ wait 0xfffffe00586caab8 sh
685 1 685 0 Ss nanslp 0xffffffff83bb4001 cron
681 1 681 0 Ss select 0xfffffe0007b56d40 sshd
494 1 494 0 Ss select 0xfffffe005856e6c0 syslogd
423 1 423 0 Ss wait 0xfffffe00586ca560 devd
422 1 422 65 Ss select 0xfffffe005856e740 dhclient
337 1 337 0 Ss select 0xfffffe0007b56e40 dhclient
334 1 334 0 Ss select 0xfffffe005830c440 dhclient
16 0 0 0 DL syncer 0xffffffff83ce1be0 [syncer]
15 0 0 0 DL vlruwt 0xfffffe0058602558 [vnlru]
14 0 0 0 DL (threaded) [bufdaemon]
100079 D psleep 0xffffffff83ce0120 [bufdaemon]
100082 D - 0xffffffff83001ec0 [bufspacedaemon-0]
100094 D sdflush 0xfffffe0059930ce8 [/ worker]
15 0 0 0 DL vlruwt 0xfffffe0058602558 [vnlru]
14 0 0 0 DL (threaded) [bufdaemon]
100079 D psleep 0xffffffff83ce0120 [bufdaemon]
100082 D - 0xffffffff83001ec0 [bufspacedaemon-0]
9 0 0 0 DL psleep 0xffffffff83d21480 [vmdaemon]
8 0 0 0 DL (threaded) [pagedaemon]
100077 D psleep 0xffffffff83d07548 [dom0]
100080 D launds 0xffffffff83d07554 [laundry: dom0]
100081 D umarcl 0xffffffff81e33330 [uma]
7 0 0 0 DL - 0xffffffff8392c5b0 [rand_harvestq]
6 0 0 0 DL pftm 0xffffffff84607f80 [pf purge]
8 0 0 0 DL (threaded) [pagedaemon]
100077 D psleep 0xffffffff83d07548 [dom0]
100080 D launds 0xffffffff83d07554 [laundry: dom0]
100081 D umarcl 0xffffffff81e33330 [uma]
7 0 0 0 DL - 0xffffffff8392c5b0 [rand_harvestq]
5 0 0 0 DL waiting 0xffffffff844d0700 [sctp_iterator]
4 0 0 0 DL (threaded) [cam]
100045 D - 0xffffffff838f6340 [doneq0]
100046 D - 0xffffffff838f62c0 [async]
100075 D - 0xffffffff838f6140 [scanner]
3 0 0 0 DL (threaded) [crypto]
100042 D crypto_ 0xffffffff83d02de0 [crypto]
100043 D crypto_ 0xfffffe0007b6ad30 [crypto returns 0]
100044 D crypto_ 0xfffffe0007b6ad80 [crypto returns 1]
13 0 0 0 DL (threaded) [geom]
100037 D - 0xffffffff83b5c5e0 [g_event]
100038 D - 0xffffffff83b5c600 [g_up]
100039 D - 0xffffffff83b5c620 [g_down]
2 0 0 0 RL (threaded) [clock]
100045 D - 0xffffffff838f6340 [doneq0]
100046 D - 0xffffffff838f62c0 [async]
100075 D - 0xffffffff838f6140 [scanner]
3 0 0 0 DL (threaded) [crypto]
100042 D crypto_ 0xffffffff83d02de0 [crypto]
100043 D crypto_ 0xfffffe0007b6ad30 [crypto returns 0]
100044 D crypto_ 0xfffffe0007b6ad80 [crypto returns 1]
13 0 0 0 DL (threaded) [geom]
100037 D - 0xffffffff83b5c5e0 [g_event]
100038 D - 0xffffffff83b5c600 [g_up]
100039 D - 0xffffffff83b5c620 [g_down]
100031 RunQ [clock (0)]
10 0 0 0 DL audit_w 0xffffffff83d03880 [audit]
0 0 0 0 DLs (threaded) [kernel]
100000 D - 0xffffffff84c59ff0 [kernel]
100005 D - 0xfffffe0007aa1000 [softirq_0]
100006 D - 0xfffffe0007aa0e00 [softirq_1]
100007 D - 0xfffffe0007aa0d00 [if_io_tqg_0]
100008 D - 0xfffffe0007aa0c00 [if_io_tqg_1]
100009 D - 0xfffffe0007aa0b00 [if_config_tqg_0]
100010 D - 0xfffffe000776bb00 [kqueue_ctx taskq]
0 0 0 0 DLs (threaded) [kernel]
100000 D - 0xffffffff84c59ff0 [kernel]
100005 D - 0xfffffe0007aa1000 [softirq_0]
100006 D - 0xfffffe0007aa0e00 [softirq_1]
100007 D - 0xfffffe0007aa0d00 [if_io_tqg_0]
100008 D - 0xfffffe0007aa0c00 [if_io_tqg_1]
100009 D - 0xfffffe0007aa0b00 [if_config_tqg_0]
100011 D - 0xfffffe000776ba00 [jail_remove taskq]
100012 D - 0xfffffe000776b900 [bus taskq]
100015 D - 0xfffffe000776b600 [thread taskq]
100017 D - 0xfffffe000776b400 [aiod_kick taskq]
100018 D - 0xfffffe000776b300 [deferred_unmount ta]
100019 D - 0xfffffe000776b200 [inm_free taskq]
100020 D - 0xfffffe000776b100 [in6m_free taskq]
100021 D - 0xfffffe000776b000 [linuxkpi_irq_wq]
100022 D - 0xfffffe000776ae00 [linuxkpi_short_wq_0]
100023 D - 0xfffffe000776ae00 [linuxkpi_short_wq_1]
100024 D - 0xfffffe000776ae00 [linuxkpi_short_wq_2]
100025 D - 0xfffffe000776ae00 [linuxkpi_short_wq_3]
100026 D - 0xfffffe000776ad00 [linuxkpi_long_wq_0]
100027 D - 0xfffffe000776ad00 [linuxkpi_long_wq_1]
100028 D - 0xfffffe000776ad00 [linuxkpi_long_wq_2]
100029 D - 0xfffffe000776ad00 [linuxkpi_long_wq_3]
100036 D - 0xfffffe000776ac00 [firmware taskq]
100040 D - 0xfffffe000776aa00 [crypto_0]
100041 D - 0xfffffe000776aa00 [crypto_1]
100056 D - 0xfffffe000776a800 [vtnet0 rxq 0]
100057 D - 0xfffffe000776a700 [vtnet0 txq 0]
100058 D - 0xfffffe000776a600 [vtnet0 rxq 1]
100059 D - 0xfffffe000776a500 [vtnet0 txq 1]
100061 D vtbslp 0xfffffe0007785d00 [virtio_balloon]
100065 D - 0xffffffff8283b101 [deadlkres]
100069 D - 0xfffffe00585efa00 [acpi_task_0]
100070 D - 0xfffffe00585efa00 [acpi_task_1]
100071 D - 0xfffffe00585efa00 [acpi_task_2]
100073 D - 0xfffffe000776bd00 [mca taskq]
100070 D - 0xfffffe00585efa00 [acpi_task_1]
100071 D - 0xfffffe00585efa00 [acpi_task_2]
100074 D - 0xfffffe000776a900 [CAM taskq]
100076 D - 0xfffffe00585ef900 [ipsec_offload]
3451 835 835 60928 Z syz-executor
3454 3448 831 60928 Z syz-executor
db> show all locks
Process 3448 (syz-executor) thread 0xfffffe0058706000 (100122)
exclusive rw vmobject (vmobject) r = 0 (0xfffffe005872b3e0) locked @ /syzkaller/managers/main/kernel/sys/vm/vm_object.c:864
exclusive rw vmobject (vmobject) r = 0 (0xfffffe0058700ba0) locked @ /syzkaller/managers/main/kernel/sys/vm/vm_object.c:578
db> show malloc
Type InUse MemUse Requests
pf_hash 6 12804K 6
linker 384 5207K 498
Type InUse MemUse Requests
pf_hash 6 12804K 6
tcp_hpts 8 4865K 8
devbuf 4187 4324K 4212
sysctloid 35057 2066K 35132
vtbuf 24 1968K 46
newblk 1908 1501K 5826
kobj 335 1340K 499
vfscache 3 1025K 3
pcb 24 669K 57
inodedep 215 593K 2641
ufs_quota 1 512K 1
vfs_hash 1 512K 1
callout 2 512K 2
intr 4 472K 4
vmem 5 272K 8
vfs_hash 1 512K 1
callout 2 512K 2
intr 4 472K 4
subproc 130 238K 2278
vnet_data 2 224K 2
acpitask 1 224K 1
KTRACE 101 201K 20032
acpitask 1 224K 1
acpica 1674 184K 56977
tidhash 3 141K 3
pagedep 44 139K 1320
tidhash 3 141K 3
tfo_ccache 1 128K 1
IP reass 1 128K 1
filedesc 16 121K 5175
IP reass 1 128K 1
sem 4 106K 4
DEVFS1 106 106K 126
gtaskqueue 18 98K 18
LRO 24 87K 26
bus 1011 83K 5163
mtx_pool 3 74K 3
mtx_pool 3 74K 3
syncache 1 68K 1
NFSD srvcache 3 68K 3
module 527 66K 527
NFSD srvcache 3 68K 3
ddb_capture 1 64K 1
kdtrace 203 41K 3619
umtx 304 38K 304
BPF 25 37K 1280
dirrem 142 36K 2555
hostcache 1 32K 1
shm 1 32K 1
DEVFS3 125 32K 136
shm 1 32K 1
msg 4 30K 4
kbdmux 6 28K 6
temp 31 21K 2045
kbdmux 6 28K 6
DEVFS_RULE 56 20K 56
freefile 154 20K 2541
ifaddr 67 19K 78
ufs_mount 4 17K 5
proc 3 17K 3
routetbl 147 17K 497
proc 3 17K 3
tty 16 16K 16
ithread 90 15K 90
bus-sc 34 15K 1690
eventhandler 163 14K 163
lltable 43 14K 51
ithread 90 15K 90
bus-sc 34 15K 1690
eventhandler 163 14K 163
ifnet 7 13K 8
ether_multi 152 13K 190
kenv 95 12K 95
cred 27 11K 1543
GEOM 49 11K 431
CAM queue 5 11K 1528
rman 75 10K 430
rpc 8 9K 8
rman 75 10K 430
plimit 23 9K 459
in6_multi 65 9K 75
bmsafemap 3 9K 2608
ksem 2 9K 1258
devstat 4 9K 4
UART 12 9K 12
shmfd 1 8K 1
UART 12 9K 12
pfs_vncache 1 8K 1
audit_evclass 240 8K 306
kqueue 62 8K 8493
audit_evclass 240 8K 306
taskqueue 69 8K 69
sglist 6 7K 6
CAM DEV 3 6K 510
diradd 46 6K 2604
CAM DEV 3 6K 510
mkdir 44 6K 2618
pfs_nodes 22 6K 22
newdirblk 40 5K 1309
ufs_dirhash 24 5K 24
UMA 268 5K 268
pf_ifnet 10 5K 25
vt 11 5K 11
memdesc 1 4K 1
MCA 32 4K 32
evdev 4 4K 4
memdesc 1 4K 1
MCA 32 4K 32
acpisem 28 4K 28
pwddesc 51 4K 3457
proc-args 84 4K 4649
selfd 48 3K 69036
terminal 11 3K 11
session 22 3K 53
indirdep 10 3K 10
acpidev 20 3K 20
uidinfo 4 3K 158
hhook 8 3K 10
clone 9 3K 9
netlink 2 3K 94
clone 9 3K 9
local_apic 1 2K 1
io_apic 1 2K 1
ipsec-saq 2 2K 2
lockf 19 2K 29
io_apic 1 2K 1
ipsec-saq 2 2K 2
ip6ndp 12 2K 16
freework 8 2K 2533
freeblks 7 2K 2520
Unitno 28 2K 56
sctp_ifa 13 2K 16
CAM XPT 22 2K 543
in_multi 6 2K 9
tun 4 2K 5
toponodes 6 2K 6
ipsecpolicy 2 2K 2
select 11 2K 41
ipsecpolicy 2 2K 2
msi 9 2K 9
softdep 1 1K 1
softdep 1 1K 1
sahead 1 1K 1
secasvar 1 1K 1
nhops 6 1K 8
vnodemarker 2 1K 10
secasvar 1 1K 1
nhops 6 1K 8
NFSD session 1 1K 1
CAM periph 4 1K 271
ipsec 3 1K 3
sctp_ifn 6 1K 16
mld 6 1K 7
CC Mem 6 1K 13
igmp 6 1K 7
pfil 6 1K 6
isadev 6 1K 6
mount 16 1K 89
isadev 6 1K 6
pci_link 10 1K 10
DEVFSP 11 1K 1303
freefrag 5 1K 485
crypto 4 1K 4
encap_export_host 12 1K 12
osd 11 1K 30
cdev 2 1K 2
lkpikmalloc 8 1K 9
inpcbpolicy 14 1K 210
lkpikmalloc 8 1K 9
counter_rate 13 1K 13
chacha20random 1 1K 1
biobuf 1 1K 1
vnodes 1 1K 1
chacha20random 1 1K 1
biobuf 1 1K 1
procdesc 2 1K 12
NFSD lckfile 1 1K 1
NFSD V4client 1 1K 1
DEVFS 9 1K 10
NFSD V4client 1 1K 1
CAM SIM 2 1K 2
tcpfunc 3 1K 3
loginclass 3 1K 7
tcpfunc 3 1K 3
prison 6 1K 6
cryptodev 2 1K 49
nexusdev 8 1K 8
apmdev 1 1K 1
atkbddev 2 1K 2
pmchooks 1 1K 1
apmdev 1 1K 1
atkbddev 2 1K 2
filecaps 5 1K 90
CAM path 4 1K 1034
CAM dev queue 2 1K 2
CAM I/O Scheduler 1 1K 1
soname 4 1K 3359
CAM dev queue 2 1K 2
CAM I/O Scheduler 1 1K 1
sctp_vrf 1 1K 1
vnet 1 1K 1
pmc 1 1K 1
entropy 2 1K 59
pmc 1 1K 1
acpiintr 1 1K 1
cpus 2 1K 2
vnet_data_free 1 1K 1
Per-cpu 1 1K 1
p1003.1b 1 1K 1
cpus 2 1K 2
vnet_data_free 1 1K 1
Per-cpu 1 1K 1
ipcomp 0 0K 0
esp 0 0K 0
ah 0 0K 0
mqdata 0 0K 0
esp 0 0K 0
ah 0 0K 0
tcp_pcm_rack 0 0K 0
tcp_do_rack 0 0K 0
tcp_fsb_rack 0 0K 0
pf_table 0 0K 0
tcp_do_rack 0 0K 0
tcp_fsb_rack 0 0K 0
pf 0 0K 0
pf_rule 0 0K 0
pf_altq 0 0K 0
pf_osfp 0 0K 0
pf_krule_item 0 0K 0
pf_temp 0 0K 0
sctp_mcore 0 0K 0
pf_osfp 0 0K 0
pf_krule_item 0 0K 0
pf_temp 0 0K 0
sctp_socko 0 0K 0
sctp_iter 0 0K 16
sctp_mvrf 0 0K 0
sctp_timw 0 0K 0
sctp_cpal 0 0K 0
sctp_cmsg 0 0K 0
sctp_stre 0 0K 0
sctp_athi 0 0K 0
sctp_athm 0 0K 0
sctp_timw 0 0K 0
sctp_cpal 0 0K 0
sctp_cmsg 0 0K 0
sctp_stre 0 0K 0
sctp_athi 0 0K 0
sctp_atky 0 0K 0
sctp_atcl 0 0K 0
sctp_a_it 0 0K 16
sctp_aadr 0 0K 0
sctp_stro 0 0K 0
sctp_stri 0 0K 0
sctp_map 0 0K 0
filemon 0 0K 0
sctp_stro 0 0K 0
sctp_stri 0 0K 0
sctp_map 0 0K 0
filemon 0 0K 0
xenbus 0 0K 0
vm_fictitious 0 0K 0
UMAHash 0 0K 0
vm_pgdata 0 0K 0
jblocks 0 0K 0
savedino 0 0K 667
vm_fictitious 0 0K 0
UMAHash 0 0K 0
vm_pgdata 0 0K 0
jblocks 0 0K 0
sentinel 0 0K 0
jfsync 0 0K 0
jtrunc 0 0K 0
sbdep 0 0K 3
jfsync 0 0K 0
jtrunc 0 0K 0
jsegdep 0 0K 0
jseg 0 0K 0
jfreefrag 0 0K 0
jfreeblk 0 0K 0
jnewblk 0 0K 0
jmvref 0 0K 0
jremref 0 0K 0
jaddref 0 0K 0
freedep 0 0K 0
allocindir 0 0K 0
allocdirect 0 0K 0
ufs_trim 0 0K 0
mactemp 0 0K 0
audit_trigger 0 0K 0
audit_pipe_presel 0 0K 0
audit_pipeent 0 0K 0
audit_pipe 0 0K 0
audit_evname 0 0K 0
audit_bsm 0 0K 0
audit_gidset 0 0K 0
audit_text 0 0K 0
audit_path 0 0K 0
audit_data 0 0K 0
audit_cred 0 0K 0
ktls_ocf 0 0K 0
jseg 0 0K 0
jfreefrag 0 0K 0
jfreeblk 0 0K 0
jnewblk 0 0K 0
jmvref 0 0K 0
jremref 0 0K 0
jaddref 0 0K 0
freedep 0 0K 0
allocindir 0 0K 0
allocdirect 0 0K 0
ufs_trim 0 0K 0
mactemp 0 0K 0
audit_trigger 0 0K 0
audit_pipe_presel 0 0K 0
audit_pipeent 0 0K 0
audit_pipe 0 0K 0
audit_evname 0 0K 0
audit_bsm 0 0K 0
audit_gidset 0 0K 0
audit_text 0 0K 0
audit_path 0 0K 0
audit_data 0 0K 0
audit_cred 0 0K 0
ipsecrequest 0 0K 0
ip6opt 0 0K 6
ip6_msource 0 0K 0
ip6_moptions 0 0K 0
in6_mfilter 0 0K 0
frag6 0 0K 0
tcplog 0 0K 0
tcp_hwpace 0 0K 0
ip_msource 0 0K 0
tcp_hwpace 0 0K 0
ip_moptions 0 0K 0
in_mfilter 0 0K 0
ipid 0 0K 0
80211scan 0 0K 0
80211ratectl 0 0K 0
80211power 0 0K 0
80211nodeie 0 0K 0
80211node 0 0K 0
80211mesh_gt 0 0K 0
80211mesh_rt 0 0K 0
80211perr 0 0K 0
80211prep 0 0K 0
80211preq 0 0K 0
80211dfs 0 0K 0
80211crypto 0 0K 0
80211vap 0 0K 0
iflib 0 0K 0
vlan 0 0K 0
gif 0 0K 0
ifdescr 0 0K 0
zlib 0 0K 20
80211scan 0 0K 0
80211ratectl 0 0K 0
80211power 0 0K 0
80211nodeie 0 0K 0
80211node 0 0K 0
80211mesh_gt 0 0K 0
80211mesh_rt 0 0K 0
80211perr 0 0K 0
80211prep 0 0K 0
80211preq 0 0K 0
80211dfs 0 0K 0
80211crypto 0 0K 0
80211vap 0 0K 0
iflib 0 0K 0
vlan 0 0K 0
gif 0 0K 0
ifdescr 0 0K 0
fadvise 0 0K 0
VN POLL 0 0K 0
statfs 0 0K 203
namei_tracker 0 0K 0
inotify 0 0K 0
export_host 0 0K 0
cl_savebuf 0 0K 32
inotify 0 0K 0
export_host 0 0K 0
aio 0 0K 0
lio 0 0K 0
acl 0 0K 0
mbuf_tag 0 0K 0
ktls 0 0K 0
mbuf_tag 0 0K 0
accf 0 0K 0
pts 0 0K 0
timerfd 0 0K 0
iov 0 0K 22629
pts 0 0K 0
timerfd 0 0K 0
ioctlops 0 0K 103
eventfd 0 0K 0
Witness 0 0K 0
stack 0 0K 0
sbuf 0 0K 190
Witness 0 0K 0
stack 0 0K 0
firmware 0 0K 0
compressor 0 0K 0
SWAP 0 0K 0
sysctltmp 0 0K 673
compressor 0 0K 0
SWAP 0 0K 0
sysctl 0 0K 3
ekcd 0 0K 0
dumper 0 0K 0
sendfile 0 0K 0
ekcd 0 0K 0
dumper 0 0K 0
rctl 0 0K 0
cache 0 0K 0
kexec 0 0K 0
kcovinfo 0 0K 30
cache 0 0K 0
kexec 0 0K 0
jaildesc 0 0K 0
prison_racct 0 0K 0
Fail Points 0 0K 0
sigio 0 0K 1
filedesc_to_leader 0 0K 0
prison_racct 0 0K 0
Fail Points 0 0K 0
sigio 0 0K 1
pwd 0 0K 0
tty console 0 0K 0
boottrace 0 0K 0
isofs_node 0 0K 0
isofs_mount 0 0K 0
tr_raid5_data 0 0K 0
tr_raid1e_data 0 0K 0
tr_raid1_data 0 0K 0
tr_raid0_data 0 0K 0
tr_concat_data 0 0K 0
md_sii_data 0 0K 0
md_promise_data 0 0K 0
md_nvidia_data 0 0K 0
md_jmicron_data 0 0K 0
md_intel_data 0 0K 0
md_ddf_data 0 0K 0
raid_data 0 0K 72
tty console 0 0K 0
boottrace 0 0K 0
isofs_node 0 0K 0
isofs_mount 0 0K 0
tr_raid5_data 0 0K 0
tr_raid1e_data 0 0K 0
tr_raid1_data 0 0K 0
tr_raid0_data 0 0K 0
tr_concat_data 0 0K 0
md_sii_data 0 0K 0
md_promise_data 0 0K 0
md_nvidia_data 0 0K 0
md_jmicron_data 0 0K 0
md_intel_data 0 0K 0
md_ddf_data 0 0K 0
malodev 0 0K 0
LED 0 0K 0
ix_sriov 0 0K 0
ix 0 0K 0
ipsbuf 0 0K 0
ciss_data 0 0K 0
BACKLIGHT 0 0K 0
ath_hal 0 0K 0
athdev 0 0K 0
ata_pci 0 0K 0
ata_dma 0 0K 0
ata_generic 0 0K 0
AHCI driver 0 0K 0
agp 0 0K 0
acpipwr 0 0K 0
acpi_perf 0 0K 0
acpicmbat 0 0K 0
aacraidcam 0 0K 0
aacraid_buf 0 0K 0
aaccam 0 0K 0
aacbuf 0 0K 0
zstd 0 0K 0
XZ_DEC 0 0K 0
nvlist 0 0K 0
LED 0 0K 0
ix_sriov 0 0K 0
ix 0 0K 0
ipsbuf 0 0K 0
ciss_data 0 0K 0
BACKLIGHT 0 0K 0
ath_hal 0 0K 0
athdev 0 0K 0
ata_pci 0 0K 0
ata_dma 0 0K 0
ata_generic 0 0K 0
AHCI driver 0 0K 0
agp 0 0K 0
acpipwr 0 0K 0
acpi_perf 0 0K 0
acpicmbat 0 0K 0
aacraidcam 0 0K 0
aacraid_buf 0 0K 0
aaccam 0 0K 0
aacbuf 0 0K 0
zstd 0 0K 0
XZ_DEC 0 0K 0
SCSI ENC 0 0K 0
SCSI sa 0 0K 0
scsi_pass 0 0K 0
scsi_da 0 0K 70
ata_da 0 0K 0
scsi_ch 0 0K 0
scsi_cd 0 0K 0
nvme_da 0 0K 0
CAM CCB 0 0K 523
CAM ccb queue 0 0K 0
db> show uma
Zone Size Used Free Requests Sleeps Bucket Total Mem XFree
mbuf_jumbo_page 4096 8320 1840 51898 0 254 41615360 0
SCSI sa 0 0K 0
scsi_pass 0 0K 0
scsi_da 0 0K 70
ata_da 0 0K 0
scsi_ch 0 0K 0
scsi_cd 0 0K 0
nvme_da 0 0K 0
CAM CCB 0 0K 523
CAM ccb queue 0 0K 0
db> show uma
Zone Size Used Free Requests Sleeps Bucket Total Mem XFree
tcp_log 416 10187 487 17957 0 254 4440384 0
mbuf 256 8632 1795 62903 0 254 2669312 0
BUF TRIE 152 310 11494 1111 0 62 1794208 0
malloc-384 384 4137 63 5653 0 30 1612800 0
malloc-128 128 11537 181 12895 0 126 1499904 0
malloc-4096 4096 335 3 500 0 2 1384448 0
UMA Slabs 0 112 11738 28 11738 0 126 1317792 0
mbuf_cluster 2048 508 0 508 0 254 1040384 0
vmem btag 56 18272 127 18272 0 254 1030344 0
RADIX NODE 152 4821 1388 71593 0 62 943768 0
malloc-256 256 2110 1055 8448 0 62 810240 0
FFS inode 1168 554 41 3095 0 8 694960 0
malloc-65536 65536 9 0 12 0 1 589824 0
malloc-2048 2048 114 174 1442 0 8 589824 0
pbuf 2664 0 198 0 0 2 527472 0
socket 1024 27 481 1447 0 254 520192 0
lkpicurr 168 2 3094 2 0 62 520128 0
malloc-384 384 269 1021 2706 0 30 495360 0
malloc-128 128 1359 1183 36320 0 126 325376 0
VM OBJECT 248 1101 211 38946 0 62 325376 0
256 Bucket 2048 132 20 1374 0 8 311296 0
malloc-64 64 4128 723 73444 0 254 310464 0
VNODE 440 590 103 3134 0 30 304920 0
THREAD 1860 147 5 161 0 8 282720 0
malloc-16384 16384 10 7 2771 0 1 278528 0
malloc-4096 4096 60 8 2361 0 2 278528 0
malloc-65536 65536 4 0 4 0 1 262144 0
malloc-16 16 14528 472 18606 0 254 240000 0
DEVCTL 1024 33 187 160 0 0 225280 0
UMA Zones 768 240 4 240 0 16 187392 0
malloc-32 32 5399 271 5623 0 254 181440 0
FFS2 dinode 256 554 136 3095 0 62 176640 0
malloc-256 256 57 633 5952 0 62 176640 0
lkpimm 56 1 3095 1 0 254 173376 0
unpcb 320 11 505 1208 0 254 165120 0
malloc-128 128 1130 141 6154 0 126 162688 0
MAP ENTRY 96 1198 440 93419 0 126 157248 0
S VFS Cache 104 1024 380 3582 0 126 146016 0
FPU_save_area 832 149 13 7362 0 16 134784 0
malloc-65536 65536 2 0 2 0 1 131072 0
malloc-65536 65536 0 2 178 0 1 131072 0
malloc-65536 65536 0 2 8 0 1 131072 0
malloc-1024 1024 107 21 127 0 16 131072 0
mbuf_packet 256 2 506 2704 0 254 130048 0
ksiginfo 112 64 980 7275 0 126 116928 0
PROC 1368 54 23 3456 0 8 105336 0
malloc-32768 32768 3 0 3 0 1 98304 0
malloc-32768 32768 3 0 3 0 1 98304 0
UMA Kegs 384 227 6 227 0 30 89472 0
malloc-32768 32768 3 0 3 0 1 98304 0
128 Bucket 1024 56 27 359 0 16 84992 0
filedesc0 1072 51 26 3457 0 8 82544 0
64 Bucket 512 105 55 3355 0 30 81920 0
malloc-256 256 256 59 2907 0 62 80640 0
g_bio 440 0 180 5480 0 30 79200 0
malloc-64 64 512 559 25374 0 254 68544 0
malloc-128 128 312 215 889 0 126 67456 0
malloc-65536 65536 1 0 1 0 1 65536 0
malloc-65536 65536 1 0 1 0 1 65536 0
malloc-65536 65536 1 0 1 0 1 65536 0
malloc-32768 32768 0 2 120 0 1 65536 0
malloc-32768 32768 1 1 12 0 1 65536 0
malloc-32768 32768 2 0 2 0 1 65536 0
malloc-4096 4096 12 4 26 0 2 65536 0
malloc-256 256 153 102 189 0 62 65280 0
malloc-384 384 102 48 896 0 30 57600 0
malloc-8192 8192 5 2 112 0 1 57344 0
malloc-8192 8192 7 0 8 0 1 57344 0
malloc-64 64 467 352 684 0 254 52416 0
malloc-256 256 38 157 3122 0 62 49920 0
malloc-256 256 43 152 742 0 62 49920 0
32 Bucket 256 97 98 4964 0 62 49920 0
DIRHASH 1024 34 14 34 0 16 49152 0
NAMEI 1024 0 48 29546 0 16 49152 0
malloc-16384 16384 3 0 3 0 1 49152 0
malloc-4096 4096 10 2 15 0 2 49152 0
malloc-4096 4096 11 1 490 0 2 49152 0
malloc-2048 2048 12 12 45 0 8 49152 0
malloc-1024 1024 11 37 1821 0 16 49152 0
malloc-1024 1024 10 38 518 0 16 49152 0
VMSPACE 584 36 48 3442 0 16 49056 0
pipe 736 21 45 1654 0 16 48576 0
syncache 168 0 264 6 0 254 44352 0
pcpu-8 8 4765 355 13877 0 254 40960 0
udp_inpcb 408 6 84 189 0 30 36720 0
malloc-64 64 58 509 3469 0 254 36288 0
malloc-64 64 20 547 1397 0 254 36288 0
malloc-64 64 132 435 3606 0 254 36288 0
malloc-64 64 232 335 3708 0 254 36288 0
malloc-64 64 5 562 592 0 254 36288 0
malloc-128 128 7 272 9 0 126 35712 0
malloc-128 128 10 269 22 0 126 35712 0
malloc-128 128 166 113 1602 0 126 35712 0
routing nhops 256 27 108 38 0 62 34560 0
ttyoutq 256 72 63 160 0 62 34560 0
malloc-384 384 53 37 82 0 30 34560 0
malloc-384 384 35 55 47 0 30 34560 0
malloc-256 256 65 70 2664 0 62 34560 0
malloc-256 256 5 130 21 0 62 34560 0
malloc-8192 8192 2 2 4 0 1 32768 0
malloc-8192 8192 4 0 4 0 1 32768 0
malloc-2048 2048 3 13 3 0 8 32768 0
malloc-2048 2048 6 10 153 0 8 32768 0
malloc-2048 2048 5 11 22 0 8 32768 0
malloc-1024 1024 1 31 7 0 16 32768 0
malloc-1024 1024 12 20 1302 0 16 32768 0
malloc-1024 1024 20 12 24 0 16 32768 0
malloc-1024 1024 5 27 25 0 16 32768 0
malloc-1024 1024 8 24 9 0 16 32768 0
malloc-512 512 2 62 10 0 30 32768 0
malloc-512 512 12 52 1453 0 30 32768 0
malloc-512 512 2 62 27 0 30 32768 0
malloc-512 512 4 60 9 0 30 32768 0
malloc-512 512 17 47 1271 0 30 32768 0
malloc-512 512 0 64 52 0 30 32768 0
pcpu-64 64 503 9 503 0 254 32768 0
ertt_txseginfo 40 0 808 2656 0 254 32320 0
PWD 40 16 792 1389 0 254 32320 0
ttyinq 160 135 65 300 0 62 32000 0
Files 80 136 264 17906 0 126 32000 0
clpbuf 2664 0 12 74 0 4 31968 0
PGRP 120 26 238 72 0 126 31680 0
tcp_inpcb 1304 6 18 13 0 8 31296 0
malloc-32 32 386 496 495 0 254 28224 0
16 Bucket 144 55 141 367 0 62 28224 0
4 Bucket 48 6 582 8 0 254 28224 0
da_ccb 544 0 49 1604 0 16 26656 0
TURNSTILE 136 153 36 153 0 62 25704 0
cpuset 200 7 121 7 0 62 25600 0
malloc-8192 8192 3 0 3 0 1 24576 0
rtentry 168 30 114 38 0 62 24192 0
8 Bucket 80 61 239 701 0 126 24000 0
malloc-384 384 2 58 682 0 30 23040 0
malloc-384 384 7 53 7 0 30 23040 0
ripcb 376 2 58 8 0 30 22560 0
SLEEPQUEUE 88 153 103 153 0 126 22528 0
hostcache 64 1 314 1 0 254 20160 0
ertt 72 6 274 13 0 126 20160 0
malloc-32 32 36 594 50 0 254 20160 0
malloc-32 32 3 627 16 0 254 20160 0
malloc-32 32 142 488 2818 0 254 20160 0
malloc-32 32 37 593 756 0 254 20160 0
malloc-32 32 81 549 7382 0 254 20160 0
malloc-32 32 5 625 496 0 254 20160 0
2 Bucket 32 61 569 683 0 254 20160 0
KNOTE 160 7 118 3373 0 62 20000 0
malloc-128 128 1 154 1 0 126 19840 0
vmem 1856 2 7 2 0 8 16704 0
epoch_record pcpu 256 4 60 4 0 62 16384 0
malloc-16384 16384 1 0 3 0 1 16384 0
malloc-16384 16384 1 0 1 0 1 16384 0
malloc-8192 8192 0 2 20 0 1 16384 0
malloc-8192 8192 2 0 2 0 1 16384 0
malloc-4096 4096 2 2 208 0 2 16384 0
malloc-4096 4096 0 4 6 0 2 16384 0
malloc-2048 2048 3 5 3 0 8 16384 0
malloc-2048 2048 2 6 2 0 8 16384 0
malloc-2048 2048 2 6 2 0 8 16384 0
malloc-512 512 1 31 1 0 30 16384 0
SMR CPU 32 8 503 8 0 254 16352 0
sctp_laddr 48 0 336 16 0 254 16128 0
kenv 258 17 43 1071 0 30 15480 0
mqnode 416 3 33 3 0 30 14976 0
SMR SHARED 24 8 503 8 0 254 12264 0
malloc-16 16 8 742 17 0 254 12000 0
malloc-16 16 1 749 2 0 254 12000 0
malloc-16 16 322 428 530 0 254 12000 0
malloc-16 16 36 714 41 0 254 12000 0
malloc-16 16 187 563 3033 0 254 12000 0
malloc-16 16 31 719 36869 0 254 12000 0
malloc-16 16 10 740 45 0 254 12000 0
malloc-384 384 0 30 1 0 30 11520 0
Mountpoints 2816 2 2 2 0 4 11264 0
malloc-4096 4096 1 1 1 0 2 8192 0
vtnet_tx_hdr 24 0 334 2745 0 254 8016 0
pcpu-16 16 4 252 4 0 254 4096 0
UMA Slabs 1 176 9 13 9 0 62 3872 0
KMAP ENTRY 96 12 27 14 0 0 3744 0
FFS1 dinode 128 0 0 0 0 126 0 0
ada_ccb 272 0 0 0 0 30 0 0
swblk 136 0 0 0 0 62 0 0
swpctrie 152 0 0 0 0 62 0 0
cdg_qdiffsample 16 0 0 0 0 254 0 0
pf state scrubs 40 0 0 0 0 254 0 0
pf frag entries 40 0 0 0 0 254 0 0
pf fragment node 72 0 0 0 0 126 0 0
pf frags 232 0 0 0 0 62 0 0
pf table entries 160 0 0 0 0 254 0 0
pf table entry counters 64 0 0 0 0 254 0 0
pf Ethernet anchors 1240 0 0 0 0 64 0 0
pf anchors 1664 0 0 0 0 64 0 0
pf UDP mappings 104 0 0 0 0 126 0 0
pf source nodes 152 0 0 0 0 254 0 0
pf state keys 88 0 0 0 0 126 0 0
pf states 384 0 0 0 0 254 0 0
pf tags 104 0 0 0 0 126 0 0
pf mtags 184 0 0 0 0 62 0 0
tcp_bbr_pcb 896 0 0 0 0 16 0 0
tcp_bbr_map 128 0 0 0 0 126 0 0
tcp_rack_pcb 1088 0 0 0 0 8 0 0
tcp_rack_map 128 0 0 0 0 126 0 0
tfo_ccache_entries 80 0 0 0 0 126 0 0
tfo 4 0 0 0 0 254 0 0
sackhole 32 0 0 0 0 254 0 0
ipq 56 0 0 0 0 254 0 0
sctp_asconf_ack 48 0 0 0 0 254 0 0
sctp_asconf 40 0 0 0 0 254 0 0
sctp_stream_msg_out 112 0 0 0 0 254 0 0
sctp_readq 152 0 0 0 0 254 0 0
sctp_chunk 152 0 0 0 0 254 0 0
sctp_raddr 736 0 0 0 0 254 0 0
sctp_asoc 2256 0 0 0 0 254 0 0
sctp_ep 1152 0 0 0 0 254 0 0
tcp_log_id_node 120 0 0 0 0 126 0 0
tcp_log_id_bucket 176 0 0 0 0 62 0 0
tcpreass 48 0 0 0 0 254 0 0
udplite_inpcb 408 0 0 0 0 30 0 0
IPsec SA lft_c 16 0 0 0 0 254 0 0
itimer 352 0 0 0 0 30 0 0
AIOLIO 272 0 0 0 0 30 0 0
AIOCB 552 0 0 0 0 16 0 0
AIO 208 0 0 0 0 62 0 0
mqnotifier 216 0 0 0 0 62 0 0
mvdata 64 0 0 0 0 254 0 0
mqueue 248 0 0 0 0 62 0 0
TMPFS node 240 0 0 0 0 62 0 0
NCLNODE 608 0 0 0 0 16 0 0
LTS VFS Cache 360 0 0 0 0 30 0 0
L VFS Cache 320 0 0 0 0 30 0 0
STS VFS Cache 144 0 0 0 0 62 0 0
cryptop 280 0 0 0 0 30 0 0
linux_dma_object 32 0 0 0 0 254 0 0
linux_dma_pctrie 152 0 0 0 0 62 0 0
IOMMU_MAP_ENTRY 112 0 0 0 0 126 0 0
skbuff 1808 0 0 0 0 8 0 0
mbuf_jumbo_16k 16384 0 0 0 0 254 0 0
mbuf_jumbo_9k 9216 0 0 0 0 254 0 0
audit_record 1280 0 0 0 0 8 0 0
domainset 40 0 0 0 0 254 0 0
MAC labels 40 0 0 0 0 254 0 0
vnpbuf 2664 0 0 0 0 16 0 0
nfspbuf 2664 0 0 0 0 4 0 0
swwbuf 2664 0 0 0 0 2 0 0
swrbuf 2664 0 0 0 0 4 0 0
umtx_shm 88 0 0 0 0 126 0 0
umtx pi 96 0 0 0 0 126 0 0
rangeset pctrie nodes 152 0 0 0 0 62 0 0
rl_entry 48 0 0 0 0 254 0 0
malloc-32768 32768 0 0 0 0 1 0 0
malloc-32768 32768 0 0 0 0 1 0 0
malloc-32768 32768 0 0 0 0
---
If you want syzbot to run the reproducer, reply with:
#syz test: git://repo/address.git branch-or-commit-hash
If you attach or paste a git patch, syzbot will apply it before testing.
Reply all
Reply to author
Forward
0 new messages