Fatal trap NUM: page fault in __mtx_lock_flags (5)
3 views
Skip to first unread message
syzbot
Sep 30, 2025, 11:16:29 PMSep 30
to syzkaller-f...@googlegroups.com
Hello,
syzbot found the following issue on:
HEAD commit: c2900b6e8255 tcp: apply rate limits to challenge ACKs
git tree: freebsd-src
console output: https://syzkaller.appspot.com/x/log.txt?x=15dec092580000
dashboard link: https://syzkaller.appspot.com/bug?extid=a62883292a5c257703be
Unfortunately, I don't have any reproducer for this issue yet.
IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+a62883...@syzkaller.appspotmail.com
Fatal trap 12: page fault while in kernel mode
cpuid = 1; apic id = 01
fault virtual address = 0x30
fault code = supervisor read data, page not present
instruction pointer = 0x20:0xffffffff815087f6
stack pointer = 0x28:0xfffffe0056a0dae0
frame pointer = 0x28:0xfffffe0056a0dbc0
code segment = base 0x0, limit 0xfffff, type 0x1b
Expensive callout(9) function: 0xffffffff81496af0(0xfffffe006de03280) 0.012365630 s
= DPL 0, pres 1, long 1, def32 0, gran 1
processor eflags = interrupt enabled, resume, IOPL = 0
current process = 0 (thread taskq)
rdi: 0000000000000030 rsi: 0000000000000000 rdx: 0000000000000000
rcx: fffffe0002bf1850 r8: 0000000000000000 r9: 0000000000000001
rax: fffffe0000000000 rbx: 0000000000000000 rbp: fffffe0056a0dbc0
r10: 0000000000000005 r11: 0000000000000004 r12: 1fffffc00ad41b64
r13: 0000000000000030 r14: fffffe0007812780 r15: ffffffff8284d4e0
trap number = 12
panic: page fault
cpuid = 1
time = 20
KDB: stack backtrace:
db_trace_self_wrapper() at db_trace_self_wrapper+0xc6/frame 0xfffffe0056a0d310
kdb_backtrace() at kdb_backtrace+0xd0/frame 0xfffffe0056a0d470
vpanic() at vpanic+0x257/frame 0xfffffe0056a0d630
panic() at panic+0xb5/frame 0xfffffe0056a0d6f0
trap_pfault() at trap_pfault+0xaf2/frame 0xfffffe0056a0d830
trap() at trap+0x78e/frame 0xfffffe0056a0da10
calltrap() at calltrap+0x8/frame 0xfffffe0056a0da10
--- trap 0xc, rip = 0xffffffff815087f6, rsp = 0xfffffe0056a0dae0, rbp = 0xfffffe0056a0dbc0 ---
__mtx_lock_flags() at __mtx_lock_flags+0x106/frame 0xfffffe0056a0dbc0
sorwakeup_locked() at sorwakeup_locked+0x13e/frame 0xfffffe0056a0dc00
socantrcvmore() at socantrcvmore+0xa3/frame 0xfffffe0056a0dc30
unp_gc() at unp_gc+0xe65/frame 0xfffffe0056a0dd30
taskqueue_run_locked() at taskqueue_run_locked+0x3ed/frame 0xfffffe0056a0dea0
taskqueue_thread_loop() at taskqueue_thread_loop+0x118/frame 0xfffffe0056a0def0
fork_exit() at fork_exit+0xcc/frame 0xfffffe0056a0df30
fork_trampoline() at fork_trampoline+0xe/frame 0xfffffe0056a0df30
--- trap 0, rip = 0, rsp = 0, rbp = 0 ---
KDB: enter: panic
[ thread pid 0 tid 100015 ]
Stopped at kdb_enter+0x6e: movq $0,0x259e447(%rip)
db> set $lines = 0
db> set $maxwidth = 0
db> show registers
cs 0x20
ds 0x3b
es 0x3b
fs 0x13
gs 0x1b
ss 0x28
rax 0x12
rcx 0xfffffe0002bf1850
rdx 0
rbx 0xffffffff8280aba0 .str.27
rsp 0xfffffe0056a0d450
rbp 0xfffffe0056a0d470
rsi 0
rdi 0xffffffff81645369 printf+0x149
r8 0
r9 0xffffffff
r10 0
r11 0x17
r12 0xfffffe0007812780
r13 0xfffffffffffffffd
r14 0xffffffff8280aba0 .str.27
r15 0
rip 0xffffffff8162e74e kdb_enter+0x6e
rflags 0x46
kdb_enter+0x6e: movq $0,0x259e447(%rip)
db> show proc
Process 0 (kernel) at 0xffffffff83b57080:
state: NORMAL
uid: 0 gid: 0 supp gids: 0
ABI: null
flag: 0x10000284 flag2: 0
reaper: 0xffffffff83b57080 reapsubtree: 0
sigparent: 0
vmspace: 0xffffffff83b58060
(map 0xffffffff83b58060)
(map.pmap 0xffffffff83b58100)
(pmap 0xffffffff83b58170)
threads: 39
100000 D parked 0xffffffff84c55ff0 [swapper]
100005 D - 0xfffffe0053ebf100 [softirq_0]
100006 D - 0xfffffe0053ebf000 [softirq_1]
100007 D - 0xfffffe0053ebee00 [if_io_tqg_0]
100008 D - 0xfffffe0053ebed00 [if_io_tqg_1]
100009 D - 0xfffffe0053ebec00 [if_config_tqg_0]
100010 D - 0xfffffe00077dc700 [kqueue_ctx taskq]
100011 D - 0xfffffe00077dc600 [jail_remove taskq]
100012 D - 0xfffffe00077dc500 [bus taskq]
100015 Run CPU 1 [thread taskq]
100017 D - 0xfffffe00077dbc00 [aiod_kick taskq]
100018 D - 0xfffffe00077dbb00 [deferred_unmount ta]
100019 D - 0xfffffe00077dba00 [inm_free taskq]
100020 D - 0xfffffe00077db900 [in6m_free taskq]
100021 D - 0xfffffe00077db800 [linuxkpi_irq_wq]
100022 D - 0xfffffe00077db700 [linuxkpi_short_wq_0]
100023 D - 0xfffffe00077db700 [linuxkpi_short_wq_1]
100024 D - 0xfffffe00077db700 [linuxkpi_short_wq_2]
100025 D - 0xfffffe00077db700 [linuxkpi_short_wq_3]
100026 D - 0xfffffe00077db600 [linuxkpi_long_wq_0]
100027 D - 0xfffffe00077db600 [linuxkpi_long_wq_1]
100028 D - 0xfffffe00077db600 [linuxkpi_long_wq_2]
100029 D - 0xfffffe00077db600 [linuxkpi_long_wq_3]
100036 D - 0xfffffe00077db100 [firmware taskq]
100040 D - 0xfffffe00083ff600 [crypto_0]
100041 D - 0xfffffe00083ff600 [crypto_1]
100056 D - 0xfffffe0057e08e00 [vtnet0 rxq 0]
100057 D - 0xfffffe0057e08d00 [vtnet0 txq 0]
100058 D - 0xfffffe0057e08c00 [vtnet0 rxq 1]
100059 D - 0xfffffe0057e08b00 [vtnet0 txq 1]
100061 D vtbslp 0xfffffe0057d73d80 [virtio_balloon]
100065 D - 0xffffffff8280f281 [deadlkres]
100069 D - 0xfffffe00083ff200 [acpi_task_0]
100070 D - 0xfffffe00083ff200 [acpi_task_1]
100071 D - 0xfffffe00083ff200 [acpi_task_2]
100073 D - 0xfffffe00077de100 [mca taskq]
100074 D - 0xfffffe00083ff000 [CAM taskq]
100076 D - 0xfffffe0057e08000 [ipsec_offload]
100403 D - 0xfffffe0059b0d300 [netlink_socket (PID]
db> ps
pid ppid pgrp uid state wmesg wchan cmd
1197 924 924 0 R (threaded) syz-executor
100450 RunQ syz-executor
100600 RunQ syz-executor
100601 RunQ syz-executor
1196 1191 765 0 S uwait 0xfffffe00582d2b80 syz-executor
1195 1194 993 0 S uwait 0xfffffe00776f1680 syz-executor
1194 993 993 0 R (threaded) syz-executor
100568 RunQ syz-executor
100597 S uwait 0xfffffe00776f1a80 syz-executor
1192 1 924 0 S uwait 0xfffffe006e4e7900 syz-executor
1191 765 765 0 R (threaded) syz-executor
100572 RunQ syz-executor
100594 RunQ syz-executor
100595 D ranged1 0xfffffe0079d41870 syz-executor
1188 1 924 0 S uwait 0xfffffe00776f2180 syz-executor
1185 1 765 0 SV uwait 0xfffffe00776f1e00 syz-executor
1181 1 993 0 S uwait 0xfffffe006e4e7680 syz-executor
1177 1 924 0 S uwait 0xfffffe007e613c80 syz-executor
1170 1 993 0 S uwait 0xfffffe00776f1780 syz-executor
1166 0 0 0 DL mdwait 0xfffffe006e4b6000 [md1]
1158 1 924 0 S uwait 0xfffffe006e4e8700 syz-executor
1144 1 993 0 S uwait 0xfffffe006e4e6d00 syz-executor
1143 1 993 0 S uwait 0xfffffe0058517600 syz-executor
1142 1 993 0 S uwait 0xfffffe006e4e7080 syz-executor
1139 0 0 0 DL mdwait 0xfffffe006e4b5000 [md0]
1122 1 924 0 S uwait 0xfffffe006e4e8e00 syz-executor
1107 1 924 0 S uwait 0xfffffe00582d2980 syz-executor
1100 1 924 0 S uwait 0xfffffe006e4e8480 syz-executor
1095 1 993 0 S uwait 0xfffffe0058518280 syz-executor
1092 1 993 0 S uwait 0xfffffe006e4e8380 syz-executor
1082 1080 1080 0 S tun_con 0xfffffe006df230a8 ifconfig
1080 762 1080 0 S wait 0xfffffe00540f4018 syz-executor
1078 1064 1078 0 Ss select 0xfffffe006dd64440 dhclient
1076 1 924 60928 S uwait 0xfffffe0057dc8780 syz-executor
1075 1 924 60928 S uwait 0xfffffe00582d2880 syz-executor
1073 1 993 0 S uwait 0xfffffe006e4e8180 syz-executor
1071 1 1071 0 Ss select 0xfffffe006dc40bc0 dhclient
1070 1 924 0 S uwait 0xfffffe006e4e8900 syz-executor
1064 1048 423 65 S select 0xfffffe006dd62540 dhclient
1062 1 763 0 S uwait 0xfffffe00582d2c80 syz-executor
1061 1 993 0 S uwait 0xfffffe0058517700 syz-executor
1055 1 765 0 S uwait 0xfffffe006e4e7c00 syz-executor
1054 1 993 0 S uwait 0xfffffe00582d0e80 syz-executor
1048 423 423 0 S wait 0xfffffe00540f3568 sh
1033 1 765 0 S uwait 0xfffffe006e4e8c80 syz-executor
997 1 765 0 S uwait 0xfffffe0058517d00 syz-executor
996 1 765 0 S uwait 0xfffffe006e4e7b00 syz-executor
993 762 993 0 R syz-executor
992 0 0 0 DL mdwait 0xfffffe006e4c4000 [md32]
991 1 924 0 S uwait 0xfffffe006e4e7f00 syz-executor
990 1 924 0 S uwait 0xfffffe006e4e7e00 syz-executor
984 1 765 0 S uwait 0xfffffe0058517c00 syz-executor
983 1 765 0 S uwait 0xfffffe0057dc8e80 syz-executor
978 1 764 0 S uwait 0xfffffe006e4e8b00 syz-executor
975 1 763 0 SV uwait 0xfffffe0058517500 syz-executor
969 1 764 0 S uwait 0xfffffe0057dc8c80 syz-executor
959 0 0 0 DL (threaded) [KTLS]
100173 D - 0xfffffe0053ebde00 [thr_0]
100297 D - 0xfffffe0053ebde80 [thr_1]
100298 D - 0xffffffff83ccf628 [reclaim_0]
957 1 763 0 S uwait 0xfffffe006e4e7800 syz-executor
955 1 763 0 S uwait 0xfffffe006e4e8300 syz-executor
951 1 765 60928 S uwait 0xfffffe0058517400 syz-executor
946 1 764 0 S uwait 0xfffffe006e4e8800 syz-executor
924 762 924 0 R syz-executor
911 1 763 0 S uwait 0xfffffe00582d1200 syz-executor
910 1 763 0 S uwait 0xfffffe006e4e7d00 syz-executor
909 1 763 0 S uwait 0xfffffe0058517e00 syz-executor
906 1 763 0 S uwait 0xfffffe0058519280 syz-executor
900 1 765 0 S uwait 0xfffffe00582d0200 syz-executor
896 1 760 0 S uwait 0xfffffe006e4e8a00 syz-executor
894 1 766 0 S uwait 0xfffffe00582d1100 syz-executor
889 1 764 0 S uwait 0xfffffe0057dc8880 syz-executor
886 1 765 0 S uwait 0xfffffe0058519480 syz-executor
874 0 0 0 DL - 0xffffffff83ccde00 [soaiod4]
873 0 0 0 DL - 0xffffffff83ccde00 [soaiod3]
872 0 0 0 DL - 0xffffffff83ccde00 [soaiod2]
871 0 0 0 DL - 0xffffffff83ccde00 [soaiod1]
858 0 0 0 DL - 0xffffffff83b58520 [accounting]
847 0 0 0 DL (threaded) [so_splice]
100119 D - 0xfffffe0058517a00 [thr_0]
100151 D - 0xfffffe0058517a40 [thr_1]
805 0 0 0 DL aiordy 0xfffffe00540ddab0 [aiod4]
804 0 0 0 DL aiordy 0xfffffe0054005570 [aiod3]
803 0 0 0 DL aiordy 0xfffffe00540f2560 [aiod2]
802 0 0 0 DL aiordy 0xfffffe00540fbac0 [aiod1]
765 762 765 0 R syz-executor
762 1 760 0 R syz-executor
758 681 758 0 Ss select 0xfffffe006dd65140 sshd
747 1 747 0 Ts+ getty
746 1 746 0 Ts+ ttyin 0xfffffe00594dc0b0 getty
745 1 745 0 Ts+ ttyin 0xfffffe00582c3cb0 getty
744 1 744 0 Ts+ ttyin 0xfffffe00594dc8b0 getty
743 1 743 0 Ts+ ttyin 0xfffffe0053f660b0 getty
742 1 742 0 Ts+ ttyin 0xfffffe00582c44b0 getty
741 1 741 0 Ts+ ttyin 0xfffffe0053f668b0 getty
740 1 740 0 Ts+ ttyin 0xfffffe0053f670b0 getty
739 1 739 0 Ts+ ttyin 0xfffffe0053f678b0 getty
737 1 17 0 S+ piperd 0xfffffe00596ed8a0 logger
736 735 17 0 S+ nanslp 0xffffffff83badc41 sleep
735 1 17 0 S+ wait 0xfffffe005409dab0 sh
685 1 685 0 Ss nanslp 0xffffffff83badc40 cron
681 1 681 0 Ss select 0xfffffe006dc42540 sshd
494 1 494 0 Ds biowr 0xfffffe0007c1ce30 syslogd
423 1 423 0 Ss wait 0xfffffe0054003ab8 devd
422 1 422 65 Ss select 0xfffffe006dd65840 dhclient
337 1 337 0 Ss select 0xfffffe006dd65940 dhclient
334 1 334 0 Ss select 0xfffffe006dc426c0 dhclient
16 0 0 0 DL syncer 0xffffffff83cdb820 [syncer]
15 0 0 0 DL vlruwt 0xfffffe000780a018 [vnlru]
14 0 0 0 DL (threaded) [bufdaemon]
100079 D psleep 0xffffffff83cd9d60 [bufdaemon]
100082 D - 0xffffffff83001ec0 [bufspacedaemon-0]
100094 D sdflush 0xfffffe00597b8ce8 [/ worker]
9 0 0 0 DL psleep 0xffffffff83d24cc0 [vmdaemon]
8 0 0 0 DL (threaded) [pagedaemon]
100077 D psleep 0xffffffff83d0ad88 [dom0]
100080 D launds 0xffffffff83d0ad94 [laundry: dom0]
100081 D umarcl 0xffffffff81e15a40 [uma]
7 0 0 0 RL [rand_harvestq]
6 0 0 0 DL pftm 0xffffffff8447ef20 [pf purge]
5 0 0 0 DL waiting 0xffffffff8485a700 [sctp_iterator]
4 0 0 0 RL (threaded) [cam]
100045 RunQ [doneq0]
100046 D - 0xffffffff838f02c0 [async]
100075 D - 0xffffffff838f0140 [scanner]
3 0 0 0 DL (threaded) [crypto]
100042 D crypto_ 0xffffffff83d06660 [crypto]
100043 D crypto_ 0xfffffe0057d60030 [crypto returns 0]
100044 D crypto_ 0xfffffe0057d60080 [crypto returns 1]
13 0 0 0 DL (threaded) [geom]
100037 D - 0xffffffff83b56640 [g_event]
100038 D - 0xffffffff83b56660 [g_up]
100039 D - 0xffffffff83b56680 [g_down]
2 0 0 0 RL (threaded) [clock]
100031 Run CPU 0 [clock (0)]
100032 I [clock (1)]
12 0 0 0 WL (threaded) [intr]
100013 I [swi6: task queue]
100014 I [swi6: Giant taskq]
100016 I [swi5: fast taskq]
100033 I [swi1: netisr 0]
100034 I [swi1: hpts]
100035 I [swi1: hpts]
100047 I [irq24: virtio_pci0]
100048 I [irq25: virtio_pci0]
100049 I [irq26: virtio_pci0]
100050 I [irq27: virtio_pci0]
100051 I [irq28: virtio_pci1]
100052 I [irq29: virtio_pci1]
100053 I [irq30: virtio_pci1]
100054 I [irq31: virtio_pci1]
100055 I [irq32: virtio_pci1]
100060 I [irq10: virtio_pci2]
100062 I [irq1: atkbd0]
100063 I [irq12: psm0]
100064 I [swi0: uart uart++]
100068 I [swi1: pf send]
11 0 0 0 RL (threaded) [idle]
100003 CanRun [idle: cpu0]
100004 CanRun [idle: cpu1]
1 0 1 0 SLs wait 0xfffffe0007809010 [init]
10 0 0 0 DL audit_w 0xffffffff83d07100 [audit]
0 0 0 0 RLs (threaded) [kernel]
100000 D parked 0xffffffff84c55ff0 [swapper]
100005 D - 0xfffffe0053ebf100 [softirq_0]
100006 D - 0xfffffe0053ebf000 [softirq_1]
100007 D - 0xfffffe0053ebee00 [if_io_tqg_0]
100008 D - 0xfffffe0053ebed00 [if_io_tqg_1]
100009 D - 0xfffffe0053ebec00 [if_config_tqg_0]
100010 D - 0xfffffe00077dc700 [kqueue_ctx taskq]
100011 D - 0xfffffe00077dc600 [jail_remove taskq]
100012 D - 0xfffffe00077dc500 [bus taskq]
100015 Run CPU 1 [thread taskq]
100017 D - 0xfffffe00077dbc00 [aiod_kick taskq]
100018 D - 0xfffffe00077dbb00 [deferred_unmount ta]
100019 D - 0xfffffe00077dba00 [inm_free taskq]
100020 D - 0xfffffe00077db900 [in6m_free taskq]
100021 D - 0xfffffe00077db800 [linuxkpi_irq_wq]
100022 D - 0xfffffe00077db700 [linuxkpi_short_wq_0]
100023 D - 0xfffffe00077db700 [linuxkpi_short_wq_1]
100024 D - 0xfffffe00077db700 [linuxkpi_short_wq_2]
100025 D - 0xfffffe00077db700 [linuxkpi_short_wq_3]
100026 D - 0xfffffe00077db600 [linuxkpi_long_wq_0]
100027 D - 0xfffffe00077db600 [linuxkpi_long_wq_1]
100028 D - 0xfffffe00077db600 [linuxkpi_long_wq_2]
100029 D - 0xfffffe00077db600 [linuxkpi_long_wq_3]
100036 D - 0xfffffe00077db100 [firmware taskq]
100040 D - 0xfffffe00083ff600 [crypto_0]
100041 D - 0xfffffe00083ff600 [crypto_1]
100056 D - 0xfffffe0057e08e00 [vtnet0 rxq 0]
100057 D - 0xfffffe0057e08d00 [vtnet0 txq 0]
100058 D - 0xfffffe0057e08c00 [vtnet0 rxq 1]
100059 D - 0xfffffe0057e08b00 [vtnet0 txq 1]
100061 D vtbslp 0xfffffe0057d73d80 [virtio_balloon]
100065 D - 0xffffffff8280f281 [deadlkres]
100069 D - 0xfffffe00083ff200 [acpi_task_0]
100070 D - 0xfffffe00083ff200 [acpi_task_1]
100071 D - 0xfffffe00083ff200 [acpi_task_2]
100073 D - 0xfffffe00077de100 [mca taskq]
100074 D - 0xfffffe00083ff000 [CAM taskq]
100076 D - 0xfffffe0057e08000 [ipsec_offload]
100403 D - 0xfffffe0059b0d300 [netlink_socket (PID]
1193 1191 765 0 Z syz-executor
db> show all locks
Process 1197 (syz-executor) thread 0xfffffe0054182780 (100600)
shared sx vm map (user) (vm map (user)) r = 0 (0xfffffe005415cbc8) locked @ /syzkaller/managers/main/kernel/sys/vm/vm_map.c:4998
Process 1191 (syz-executor) thread 0xfffffe0054173000 (100594)
exclusive lockmgr bufwait (bufwait) r = 0 (0xfffffe0007e771f0) locked @ /syzkaller/managers/main/kernel/sys/kern/vfs_bio.c:1752
exclusive lockmgr bufwait (bufwait) r = 0 (0xfffffe0007e71838) locked @ /syzkaller/managers/main/kernel/sys/kern/vfs_bio.c:4022
exclusive lockmgr ufs (ufs) r = 0 (0xfffffe0079d41750) locked @ /syzkaller/managers/main/kernel/sys/kern/vfs_vnops.c:1313
Process 1082 (ifconfig) thread 0xfffffe005411e780 (100372)
exclusive sx ifnet_detach_sx (ifnet_detach_sx) r = 0 (0xffffffff83cdc000) locked @ /syzkaller/managers/main/kernel/sys/net/if.c:3006
Process 762 (syz-executor) thread 0xfffffe00540be000 (100093)
exclusive sleep mutex process lock (process lock) r = 0 (0xfffffe005409fbe8) locked @ /syzkaller/managers/main/kernel/sys/kern/subr_trap.c:105
Process 494 (syslogd) thread 0xfffffe00540db000 (100102)
exclusive lockmgr bufwait (bufwait) r = 0 (0xfffffe0007c1ceb0) locked @ /syzkaller/managers/main/kernel/sys/kern/vfs_bio.c:4022
exclusive lockmgr ufs (ufs) r = 0 (0xfffffe006df30598) locked @ /syzkaller/managers/main/kernel/sys/kern/vfs_syscalls.c:3676
Process 0 (kernel) thread 0xfffffe0007812780 (100015)
exclusive sleep mutex so_rcv (so_rcv) r = 0 (0xfffffe00599c95e0) locked @ /syzkaller/managers/main/kernel/sys/kern/uipc_sockbuf.c:411
db> show malloc
Type InUse MemUse Requests
pf_hash 6 12804K 6
linker 384 5188K 647
tcp_hpts 7 4801K 7
devbuf 4187 4324K 4215
sysctloid 35572 2096K 35647
vtbuf 24 1968K 46
kobj 331 1324K 524
newblk 70 1042K 2175
vfscache 3 1025K 3
filedesc 112 890K 626
pcb 39 683K 262
inodedep 28 523K 638
ufs_quota 1 512K 1
vfs_hash 1 512K 1
callout 2 512K 2
subproc 236 498K 1331
intr 4 472K 4
vnet_data 2 224K 2
acpitask 1 224K 1
KTRACE 101 201K 7728
acpica 1674 184K 54450
vmem 5 144K 7
tidhash 3 141K 3
pagedep 14 132K 314
tfo_ccache 1 128K 1
IP reass 1 128K 1
DEVFS1 111 111K 132
sem 4 106K 4
gtaskqueue 18 98K 18
LRO 30 93K 30
bus 1005 82K 5097
mtx_pool 3 74K 3
syncache 1 68K 1
NFSD srvcache 3 68K 3
md_sectors 17 68K 17
module 523 66K 526
ddb_capture 1 64K 1
kdtrace 304 55K 1802
umtx 400 50K 400
BPF 29 38K 46
DEVFS3 130 33K 141
hostcache 1 32K 1
shm 1 32K 8
msg 4 30K 4
kbdmux 6 28K 6
ifaddr 96 25K 99
lltable 72 22K 78
temp 48 22K 2235
routetbl 196 21K 560
ifnet 11 21K 12
DEVFS_RULE 56 20K 56
ether_multi 208 17K 238
ufs_mount 4 17K 5
proc 3 17K 3
tty 16 16K 16
ithread 90 15K 90
cred 38 15K 292
bus-sc 34 15K 1660
eventhandler 163 14K 163
GEOM 64 14K 509
md_disk 20 13K 21
in6_multi 85 12K 88
kenv 95 12K 95
shmfd 7 11K 16
plimit 28 11K 366
CAM queue 5 11K 1528
rman 82 10K 447
rpc 8 9K 8
iov 8 9K 16196
ksem 3 9K 4
bmsafemap 2 9K 546
kqueue 119 9K 1490
devstat 4 9K 4
UART 12 9K 12
pfs_vncache 1 8K 1
audit_evclass 240 8K 306
taskqueue 72 8K 87
pwddesc 112 7K 1278
sglist 6 7K 6
CAM DEV 3 6K 510
pf_ifnet 15 6K 33
pfs_nodes 22 6K 22
DEVFSP 80 5K 127
ufs_dirhash 24 5K 39
filecaps 8 5K 96
UMA 272 5K 272
vt 11 5K 11
memdesc 1 4K 1
MCA 32 4K 32
evdev 4 4K 4
kcovinfo 63 4K 63
lockf 36 4K 234
crypto 11 4K 55
acpisem 28 4K 28
proc-args 132 4K 2352
mount 23 4K 606
terminal 11 3K 11
session 22 3K 44
sctp_atcl 7 3K 46
ip6ndp 18 3K 20
uidinfo 5 3K 19
acpidev 20 3K 20
hhook 8 3K 10
CC Mem 18 3K 371
tun 6 3K 6
clone 9 3K 9
sctp_ifa 17 3K 18
netlink 2 3K 107
local_apic 1 2K 1
io_apic 1 2K 1
dirrem 8 2K 480
ipsec-saq 2 2K 2
in_multi 8 2K 11
Unitno 30 2K 91
CAM XPT 22 2K 543
nhops 6 2K 10
selfd 24 2K 33226
toponodes 6 2K 6
ipsecpolicy 2 2K 2
select 11 2K 67
inpcbpolicy 42 2K 765
mld 10 2K 10
igmp 10 2K 10
msi 9 2K 9
newdirblk 9 2K 279
sctp_ifn 8 1K 18
sctp_stro 1 1K 2
softdep 1 1K 1
mkdir 8 1K 556
diradd 8 1K 507
sahead 1 1K 1
secasvar 1 1K 1
vnodemarker 2 1K 46
NFSD session 1 1K 1
CAM periph 4 1K 271
freework 4 1K 565
osd 23 1K 387
ipsec 3 1K 3
freefile 6 1K 379
freeblks 3 1K 320
pfil 6 1K 6
isadev 6 1K 8
pci_link 10 1K 10
encap_export_host 12 1K 12
ip6opt 4 1K 26
ip_msource 9 1K 16
indirdep 2 1K 334
cdev 2 1K 2
lkpikmalloc 8 1K 9
cryptodev 6 1K 106
counter_rate 13 1K 13
freefrag 3 1K 111
frag6 4 1K 5
chacha20random 1 1K 1
biobuf 1 1K 1
ip6_msource 5 1K 8
sctp_atky 8 1K 48
ktls 3 1K 31
sctp_timw 1 1K 1
in6_mfilter 4 1K 16
ip_moptions 4 1K 12
gif 2 1K 2
vnodes 1 1K 5
procdesc 2 1K 12
NFSD lckfile 1 1K 1
NFSD V4client 1 1K 1
DEVFS 9 1K 11
CAM SIM 2 1K 2
feeder 7 1K 7
tcpfunc 3 1K 3
loginclass 3 1K 5
prison 6 1K 6
filedesc_to_leader 3 1K 8
soname 6 1K 3695
nexusdev 8 1K 8
apmdev 1 1K 1
atkbddev 2 1K 2
ktls_ocf 1 1K 7
in_mfilter 3 1K 27
VN POLL 1 1K 14
aio 4 1K 7
pmchooks 1 1K 1
CAM path 4 1K 1034
CAM dev queue 2 1K 2
CAM I/O Scheduler 1 1K 1
sctp_athm 7 1K 46
sctp_vrf 1 1K 1
vnet 1 1K 1
pmc 1 1K 1
entropy 2 1K 37
acpiintr 1 1K 1
sctp_map 2 1K 4
cpus 2 1K 2
ip6_moptions 1 1K 7
vnet_data_free 1 1K 1
Per-cpu 1 1K 1
p1003.1b 1 1K 1
mqdata 0 0K 0
sctp_mcore 0 0K 0
sctp_socko 0 0K 9
sctp_iter 0 0K 14
sctp_mvrf 0 0K 0
sctp_cpal 0 0K 0
sctp_cmsg 0 0K 0
sctp_stre 0 0K 0
sctp_athi 0 0K 0
sctp_a_it 0 0K 14
sctp_aadr 0 0K 0
sctp_stri 0 0K 1
tcp_pcm_rack 0 0K 4
tcp_do_rack 0 0K 0
tcp_fsb_rack 0 0K 8
pf_table 0 0K 0
pf 0 0K 0
pf_rule 0 0K 0
pf_altq 0 0K 0
pf_osfp 0 0K 0
pf_krule_item 0 0K 0
pf_temp 0 0K 0
filemon 0 0K 3
ipcomp 0 0K 0
esp 0 0K 0
ah 0 0K 0
madt_table 0 0K 2
smartpqi 0 0K 0
ixl 0 0K 0
ice-resmgr 0 0K 0
ice-osdep 0 0K 0
ice 0 0K 0
iavf 0 0K 0
axgbe 0 0K 0
fpukern_ctx 0 0K 0
xen_intr 0 0K 0
xen_hvm 0 0K 0
legacydrv 0 0K 0
NMI handlers 0 0K 0
bounce 0 0K 0
busdma 0 0K 0
qpidrv 0 0K 0
dmar_idpgtbl 0 0K 0
dmar_dom 0 0K 0
dmar_ctx 0 0K 0
amdiommu_dom 0 0K 0
amdiommu_ctx 0 0K 0
isci 0 0K 0
iommu_dmamap 0 0K 0
hyperv_socket 0 0K 0
bxe_ilt 0 0K 0
aesni_data 0 0K 8
xenbus 0 0K 0
vm_fictitious 0 0K 0
UMAHash 0 0K 0
vm_pgdata 0 0K 0
jblocks 0 0K 0
savedino 0 0K 374
sentinel 0 0K 0
jfsync 0 0K 0
jtrunc 0 0K 0
sbdep 0 0K 22
jsegdep 0 0K 0
jseg 0 0K 0
jfreefrag 0 0K 0
jfreeblk 0 0K 0
jnewblk 0 0K 0
jmvref 0 0K 0
jremref 0 0K 0
jaddref 0 0K 0
freedep 0 0K 0
allocindir 0 0K 0
allocdirect 0 0K 0
ufs_trim 0 0K 0
mactemp 0 0K 0
audit_trigger 0 0K 0
audit_pipe_presel 0 0K 0
audit_pipeent 0 0K 0
audit_pipe 0 0K 0
audit_evname 0 0K 0
audit_bsm 0 0K 0
audit_gidset 0 0K 0
audit_text 0 0K 0
audit_path 0 0K 0
audit_data 0 0K 0
audit_cred 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5E_TLS_RX 0 0K 0
MLX5EEPROM 0 0K 0
MLX5E_TLS 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EN 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5DUMP 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
simple_attr 0 0K 0
seq_file 0 0K 0
lkpiskb 0 0K 0
radix 0 0K 0
idr 0 0K 0
lkpindev 0 0K 0
lkpimhi 0 0K 0
lkpifw 0 0K 0
lkpi80211 0 0K 0
NLM 0 0K 0
ipsec-spdcache 0 0K 0
ipsec-reg 0 0K 0
ipsec-misc 0 0K 0
ipsecrequest 0 0K 0
tcplog 0 0K 0
tcp_hwpace 0 0K 0
ipid 0 0K 0
80211scan 0 0K 0
80211ratectl 0 0K 0
80211power 0 0K 0
80211nodeie 0 0K 0
80211node 0 0K 0
80211mesh_gt 0 0K 0
80211mesh_rt 0 0K 0
80211perr 0 0K 0
80211prep 0 0K 0
80211preq 0 0K 0
80211dfs 0 0K 0
80211crypto 0 0K 0
80211vap 0 0K 0
iflib 0 0K 0
vlan 0 0K 0
ifdescr 0 0K 0
zlib 0 0K 23
fadvise 0 0K 4
statfs 0 0K 194
namei_tracker 0 0K 69
inotify 0 0K 92
export_host 0 0K 0
cl_savebuf 0 0K 65
lio 0 0K 6
acl 0 0K 0
mbuf_tag 0 0K 0
accf 0 0K 0
pts 0 0K 0
timerfd 0 0K 0
ioctlops 0 0K 135
eventfd 0 0K 5
Witness 0 0K 0
stack 0 0K 0
sbuf 0 0K 218
firmware 0 0K 0
compressor 0 0K 0
SWAP 0 0K 0
sysctltmp 0 0K 653
sysctl 0 0K 3
ekcd 0 0K 0
dumper 0 0K 0
sendfile 0 0K 20
rctl 0 0K 0
cache 0 0K 0
jaildesc 0 0K 0
prison_racct 0 0K 0
Fail Points 0 0K 0
sigio 0 0K 1
pwd 0 0K 0
tty console 0 0K 0
boottrace 0 0K 0
isofs_node 0 0K 0
isofs_mount 0 0K 0
tr_raid5_data 0 0K 0
tr_raid1e_data 0 0K 0
tr_raid1_data 0 0K 0
tr_raid0_data 0 0K 0
tr_concat_data 0 0K 0
md_sii_data 0 0K 0
md_promise_data 0 0K 0
md_nvidia_data 0 0K 0
md_jmicron_data 0 0K 0
md_intel_data 0 0K 0
md_ddf_data 0 0K 0
raid_data 0 0K 90
geom_flashmap 0 0K 0
tmpfs dir 0 0K 0
tmpfs name 0 0K 0
tmpfs mount 0 0K 0
tmpfs extattr 0 0K 0
NFS FHA 0 0K 0
newnfsmnt 0 0K 0
newnfsclient_req 0 0K 0
NFSCL layrecall 0 0K 0
NFSCL session 0 0K 0
NFSCL sockreq 0 0K 0
NFSCL devinfo 0 0K 0
NFSCL flayout 0 0K 0
NFSCL layout 0 0K 0
NFSD rollback 0 0K 0
NFSCL diroff 0 0K 0
NEWNFSnode 0 0K 0
NFSCL lck 0 0K 0
NFSCL lckown 0 0K 0
NFSCL client 0 0K 0
NFSCL deleg 0 0K 0
NFSCL open 0 0K 0
NFSCL owner 0 0K 0
NFS fh 0 0K 0
NFS req 0 0K 0
NFSD usrgroup 0 0K 0
NFSD string 0 0K 0
NFSD V4lock 0 0K 0
NFSD V4state 0 0K 0
msdosfs_fat 0 0K 0
msdosfs_mount 0 0K 0
msdosfs_node 0 0K 0
DEVFS4 0 0K 2
DEVFS2 0 0K 0
gntdev 0 0K 0
privcmd_dev 0 0K 0
evtchn_dev 0 0K 0
xenstore 0 0K 0
xnb 0 0K 0
xen_acpi 0 0K 0
xbbd 0 0K 0
xbd 0 0K 0
Balloon 0 0K 0
sysmouse 0 0K 0
vtfont 0 0K 0
pvscsi 0 0K 0
USBdev 0 0K 0
USB 0 0K 0
ufshci 0 0K 0
twsbuf 0 0K 0
tcp_log_dev 0 0K 2
midi buffers 0 0K 0
mixer 0 0K 0
ac97 0 0K 0
hdacc 0 0K 0
hdac 0 0K 0
hdaa 0 0K 0
SIIS driver 0 0K 0
PUC 0 0K 0
ppbusdev 0 0K 0
sr_iov 0 0K 0
OCS 0 0K 0
OCS 0 0K 0
nvme 0 0K 0
nvd 0 0K 0
netmap 0 0K 0
mwldev 0 0K 0
MVS driver 0 0K 0
mpi3mrbuf 0 0K 0
mrsasbuf 0 0K 0
mpt_user 0 0K 0
mps_user 0 0K 0
MPSSAS 0 0K 0
mps 0 0K 0
mpr_user 0 0K 0
MPRSAS 0 0K 0
mpr 0 0K 0
mfibuf 0 0K 0
malodev 0 0K 0
LED 0 0K 0
ix_sriov 0 0K 0
ix 0 0K 0
ipsbuf 0 0K 0
ciss_data 0 0K 0
BACKLIGHT 0 0K 0
ath_hal 0 0K 0
athdev 0 0K 0
ata_pci 0 0K 0
ata_dma 0 0K 0
ata_generic 0 0K 0
AHCI driver 0 0K 0
agp 0 0K 0
acpipwr 0 0K 0
acpi_perf 0 0K 0
acpicmbat 0 0K 0
aacraidcam 0 0K 0
aacraid_buf 0 0K 0
aaccam 0 0K 0
aacbuf 0 0K 0
zstd 0 0K 0
XZ_DEC 0 0K 0
nvlist 0 0K 877
SCSI ENC 0 0K 0
SCSI sa 0 0K 0
scsi_pass 0 0K 0
scsi_da 0 0K 70
ata_da 0 0K 0
scsi_ch 0 0K 0
scsi_cd 0 0K 0
nvme_da 0 0K 0
CAM CCB 0 0K 523
CAM ccb queue 0 0K 0
db> show uma
Zone Size Used Free Requests Sleeps Bucket Total Mem XFree
mbuf_jumbo_page 4096 8337 1061 22254 0 254 38494208 0
mbuf 256 8826 836 28652 0 254 2473472 0
tcp_log 416 4573 260 9557 0 254 2010528 0
RADIX NODE 152 11824 105 46022 0 62 1813208 0
BUF TRIE 152 393 11411 2087 0 62 1794208 0
malloc-384 384 4143 87 4767 0 30 1624320 0
malloc-128 128 11689 184 12530 0 126 1519744 0
malloc-4096 4096 334 4 545 0 2 1384448 0
UMA Slabs 0 112 11129 25 11129 0 126 1249248 0
mbuf_cluster 2048 508 0 508 0 254 1040384 0
vmem btag 56 18265 134 18265 0 254 1030344 0
malloc-16384 16384 56 0 310 0 1 917504 0
malloc-65536 65536 9 2 14 0 1 720896 0
FFS inode 1168 591 18 980 0 8 711312 0
sctp_ep 1152 6 505 43 0 254 588672 0
sctp_asoc 2256 1 254 2 0 254 575280 0
malloc-65536 65536 6 2 8 0 1 524288 0
socket 1024 76 432 2157 0 254 520192 0
lkpicurr 168 2 3094 2 0 62 520128 0
malloc-4096 4096 122 2 1220 0 2 507904 0
VM OBJECT 248 1681 63 18058 0 62 432512 0
pbuf 2624 0 162 0 0 2 425088 0
THREAD 1860 190 10 601 0 8 372000 0
256 Bucket 2048 152 8 1281 0 8 327680 0
VNODE 440 632 88 1024 0 30 316800 0
tcp_inpcb 1304 18 207 370 0 8 293400 0
MAP ENTRY 96 2682 90 59798 0 126 266112 0
malloc-32768 32768 2 6 263 0 1 262144 0
malloc-64 64 3911 184 4046 0 254 262080 0
malloc-16 16 14688 562 15493 0 254 244000 0
malloc-64 64 357 3234 37876 0 254 229824 0
malloc-2048 2048 103 9 248 0 8 229376 0
DEVCTL 1024 41 179 168 0 0 225280 0
malloc-128 128 1160 359 6167 0 126 194432 0
sctp_raddr 736 1 263 2 0 254 194304 0
malloc-256 256 295 455 2543 0 62 192000 0
malloc-32 32 5432 490 6339 0 254 189504 0
UMA Zones 768 244 0 244 0 16 187392 0
FPU_save_area 832 192 33 833 0 16 187200 0
malloc-128 128 1189 206 25367 0 126 178560 0
lkpimm 56 1 3095 1 0 254 173376 0
PROC 1368 112 9 1199 0 8 165528 0
unpcb 320 26 490 1296 0 254 165120 0
malloc-32768 32768 2 3 24 0 1 163840 0
malloc-2048 2048 7 73 515 0 8 163840 0
malloc-1024 1024 138 22 159 0 16 163840 0
FFS2 dinode 256 591 39 980 0 62 161280 0
S VFS Cache 104 1043 361 1516 0 126 146016 0
filedesc0 1072 112 14 1278 0 8 135072 0
malloc-65536 65536 0 2 78 0 1 131072 0
malloc-65536 65536 2 0 2 0 1 131072 0
malloc-65536 65536 0 2 110 0 1 131072 0
malloc-4096 4096 31 1 48 0 2 131072 0
mbuf_packet 256 20 488 421 0 254 130048 0
ksiginfo 112 105 939 245 0 126 116928 0
malloc-384 384 245 55 528 0 30 115200 0
malloc-32768 32768 3 0 3 0 1 98304 0
malloc-32768 32768 0 3 14 0 1 98304 0
malloc-8192 8192 9 3 16 0 1 98304 0
malloc-256 256 235 140 1400 0 62 96000 0
UMA Kegs 384 230 3 230 0 30 89472 0
128 Bucket 1024 54 29 281 0 16 84992 0
vnpbuf 2624 0 32 3 0 16 83968 0
malloc-128 128 374 277 1370 0 126 83328 0
64 Bucket 512 92 68 3042 0 30 81920 0
g_bio 408 8 172 12312 0 30 73440 0
malloc-64 64 630 441 2791 0 254 68544 0
md1 8 8192 192 8192 0 254 67072 0
DIRHASH 1024 34 30 45 0 16 65536 0
malloc-65536 65536 0 1 8 0 1 65536 0
malloc-32768 32768 2 0 2 0 1 65536 0
malloc-32768 32768 0 2 120 0 1 65536 0
malloc-16384 16384 1 3 6 0 1 65536 0
malloc-2048 2048 16 16 83 0 8 65536 0
malloc-2048 2048 13 19 74 0 8 65536 0
32 Bucket 256 85 170 1420 0 62 65280 0
malloc-4096 4096 12 2 30 0 2 57344 0
VMSPACE 584 82 16 1165 0 16 57232 0
ripcb 376 12 138 136 0 30 56400 0
malloc-64 64 547 272 1037 0 254 52416 0
Files 80 319 331 9532 0 126 52000 0
malloc-128 128 62 341 318 0 126 51584 0
malloc-256 256 117 78 1214 0 62 49920 0
malloc-256 256 92 103 1046 0 62 49920 0
NAMEI 1024 0 48 16515 0 16 49152 0
malloc-16384 16384 3 0 3 0 1 49152 0
malloc-8192 8192 3 3 64 0 1 49152 0
malloc-2048 2048 0 24 573 0 8 49152 0
malloc-1024 1024 5 43 1748 0 16 49152 0
syncache 176 1 275 4 0 254 48576 0
pipe 736 28 38 396 0 16 48576 0
pcpu-8 8 5190 442 5603 0 254 45056 0
TURNSTILE 136 201 114 201 0 62 42840 0
malloc-8192 8192 3 2 26 0 1 40960 0
malloc-4096 4096 5 5 126 0 2 40960 0
sctp_chunk 152 1 259 2 0 254 39520 0
da_ccb 544 2 68 3204 0 16 38080 0
udp_inpcb 408 11 79 239 0 30 36720 0
malloc-64 64 63 504 441 0 254 36288 0
malloc-64 64 17 550 15460 0 254 36288 0
malloc-64 64 244 323 297 0 254 36288 0
malloc-64 64 215 352 274 0 254 36288 0
tcp_bbr_map 128 0 279 11 0 126 35712 0
tcp_rack_map 128 0 279 11 0 126 35712 0
malloc-128 128 50 229 325 0 126 35712 0
malloc-128 128 38 241 93 0 126 35712 0
malloc-128 128 39 240 671 0 126 35712 0
ktls_session 256 1 134 8 0 62 34560 0
routing nhops 256 36 99 44 0 62 34560 0
ttyoutq 256 72 63 160 0 62 34560 0
malloc-384 384 52 38 131 0 30 34560 0
malloc-256 256 16 119 262 0 62 34560 0
malloc-256 256 31 104 694 0 62 34560 0
malloc-256 256 34 101 392 0 62 34560 0
malloc-256 256 16 119 1445 0 62 34560 0
SLEEPQUEUE 88 201 183 201 0 126 33792 0
malloc-16384 16384 1 1 2 0 1 32768 0
malloc-16384 16384 0 2 190 0 1 32768 0
malloc-8192 8192 2 2 83 0 1 32768 0
malloc-4096 4096 5 3 72 0 2 32768 0
malloc-2048 2048 14 2 15 0 8 32768 0
malloc-2048 2048 6 10 197 0 8 32768 0
malloc-2048 2048 2 14 4 0 8 32768 0
malloc-1024 1024 7 25 34 0 16 32768 0
malloc-1024 1024 12 20 14 0 16 32768 0
malloc-1024 1024 3 29 3 0 16 32768 0
malloc-1024 1024 3 29 171 0 16 32768 0
malloc-1024 1024 11 21 16 0 16 32768 0
malloc-1024 1024 3 29 28 0 16 32768 0
malloc-512 512 2 62 48 0 30 32768 0
malloc-512 512 17 47 33 0 30 32768 0
malloc-512 512 1 63 211 0 30 32768 0
malloc-512 512 2 62 50 0 30 32768 0
malloc-512 512 6 58 55 0 30 32768 0
malloc-512 512 10 54 16 0 30 32768 0
pcpu-64 64 501 11 501 0 254 32768 0
ttyinq 160 135 65 300 0 62 32000 0
PGRP 120 29 235 56 0 126 31680 0
clpbuf 2624 1 11 111 0 4 31488 0
L VFS Cache 320 1 95 67 0 30 30720 0
sctp_laddr 48 6 582 23 0 254 28224 0
rl_entry 48 11 577 18 0 254 282
---
This report is generated by a bot. It may contain errors.
See https://goo.gl/tpsmEJ for more information about syzbot.
syzbot engineers can be reached at syzk...@googlegroups.com.
syzbot will keep track of this issue. See:
https://goo.gl/tpsmEJ#status for how to communicate with syzbot.
If the report is already addressed, let syzbot know by replying with:
#syz fix: exact-commit-title
If you want to overwrite report's subsystems, reply with:
#syz set subsystems: new-subsystem
(See the list of subsystem names on the web dashboard)
If the report is a duplicate of another one, reply with:
#syz dup: exact-subject-of-another-report
If you want to undo deduplication, reply with:
#syz undup
syzbot found the following issue on:
HEAD commit: c2900b6e8255 tcp: apply rate limits to challenge ACKs
git tree: freebsd-src
console output: https://syzkaller.appspot.com/x/log.txt?x=15dec092580000
dashboard link: https://syzkaller.appspot.com/bug?extid=a62883292a5c257703be
Unfortunately, I don't have any reproducer for this issue yet.
IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+a62883...@syzkaller.appspotmail.com
Fatal trap 12: page fault while in kernel mode
cpuid = 1; apic id = 01
fault virtual address = 0x30
fault code = supervisor read data, page not present
instruction pointer = 0x20:0xffffffff815087f6
stack pointer = 0x28:0xfffffe0056a0dae0
frame pointer = 0x28:0xfffffe0056a0dbc0
code segment = base 0x0, limit 0xfffff, type 0x1b
Expensive callout(9) function: 0xffffffff81496af0(0xfffffe006de03280) 0.012365630 s
= DPL 0, pres 1, long 1, def32 0, gran 1
processor eflags = interrupt enabled, resume, IOPL = 0
current process = 0 (thread taskq)
rdi: 0000000000000030 rsi: 0000000000000000 rdx: 0000000000000000
rcx: fffffe0002bf1850 r8: 0000000000000000 r9: 0000000000000001
rax: fffffe0000000000 rbx: 0000000000000000 rbp: fffffe0056a0dbc0
r10: 0000000000000005 r11: 0000000000000004 r12: 1fffffc00ad41b64
r13: 0000000000000030 r14: fffffe0007812780 r15: ffffffff8284d4e0
trap number = 12
panic: page fault
cpuid = 1
time = 20
KDB: stack backtrace:
db_trace_self_wrapper() at db_trace_self_wrapper+0xc6/frame 0xfffffe0056a0d310
kdb_backtrace() at kdb_backtrace+0xd0/frame 0xfffffe0056a0d470
vpanic() at vpanic+0x257/frame 0xfffffe0056a0d630
panic() at panic+0xb5/frame 0xfffffe0056a0d6f0
trap_pfault() at trap_pfault+0xaf2/frame 0xfffffe0056a0d830
trap() at trap+0x78e/frame 0xfffffe0056a0da10
calltrap() at calltrap+0x8/frame 0xfffffe0056a0da10
--- trap 0xc, rip = 0xffffffff815087f6, rsp = 0xfffffe0056a0dae0, rbp = 0xfffffe0056a0dbc0 ---
__mtx_lock_flags() at __mtx_lock_flags+0x106/frame 0xfffffe0056a0dbc0
sorwakeup_locked() at sorwakeup_locked+0x13e/frame 0xfffffe0056a0dc00
socantrcvmore() at socantrcvmore+0xa3/frame 0xfffffe0056a0dc30
unp_gc() at unp_gc+0xe65/frame 0xfffffe0056a0dd30
taskqueue_run_locked() at taskqueue_run_locked+0x3ed/frame 0xfffffe0056a0dea0
taskqueue_thread_loop() at taskqueue_thread_loop+0x118/frame 0xfffffe0056a0def0
fork_exit() at fork_exit+0xcc/frame 0xfffffe0056a0df30
fork_trampoline() at fork_trampoline+0xe/frame 0xfffffe0056a0df30
--- trap 0, rip = 0, rsp = 0, rbp = 0 ---
KDB: enter: panic
[ thread pid 0 tid 100015 ]
Stopped at kdb_enter+0x6e: movq $0,0x259e447(%rip)
db> set $lines = 0
db> set $maxwidth = 0
db> show registers
cs 0x20
ds 0x3b
es 0x3b
fs 0x13
gs 0x1b
ss 0x28
rax 0x12
rcx 0xfffffe0002bf1850
rdx 0
rbx 0xffffffff8280aba0 .str.27
rsp 0xfffffe0056a0d450
rbp 0xfffffe0056a0d470
rsi 0
rdi 0xffffffff81645369 printf+0x149
r8 0
r9 0xffffffff
r10 0
r11 0x17
r12 0xfffffe0007812780
r13 0xfffffffffffffffd
r14 0xffffffff8280aba0 .str.27
r15 0
rip 0xffffffff8162e74e kdb_enter+0x6e
rflags 0x46
kdb_enter+0x6e: movq $0,0x259e447(%rip)
db> show proc
Process 0 (kernel) at 0xffffffff83b57080:
state: NORMAL
uid: 0 gid: 0 supp gids: 0
ABI: null
flag: 0x10000284 flag2: 0
reaper: 0xffffffff83b57080 reapsubtree: 0
sigparent: 0
vmspace: 0xffffffff83b58060
(map 0xffffffff83b58060)
(map.pmap 0xffffffff83b58100)
(pmap 0xffffffff83b58170)
threads: 39
100000 D parked 0xffffffff84c55ff0 [swapper]
100005 D - 0xfffffe0053ebf100 [softirq_0]
100006 D - 0xfffffe0053ebf000 [softirq_1]
100007 D - 0xfffffe0053ebee00 [if_io_tqg_0]
100008 D - 0xfffffe0053ebed00 [if_io_tqg_1]
100009 D - 0xfffffe0053ebec00 [if_config_tqg_0]
100010 D - 0xfffffe00077dc700 [kqueue_ctx taskq]
100011 D - 0xfffffe00077dc600 [jail_remove taskq]
100012 D - 0xfffffe00077dc500 [bus taskq]
100015 Run CPU 1 [thread taskq]
100017 D - 0xfffffe00077dbc00 [aiod_kick taskq]
100018 D - 0xfffffe00077dbb00 [deferred_unmount ta]
100019 D - 0xfffffe00077dba00 [inm_free taskq]
100020 D - 0xfffffe00077db900 [in6m_free taskq]
100021 D - 0xfffffe00077db800 [linuxkpi_irq_wq]
100022 D - 0xfffffe00077db700 [linuxkpi_short_wq_0]
100023 D - 0xfffffe00077db700 [linuxkpi_short_wq_1]
100024 D - 0xfffffe00077db700 [linuxkpi_short_wq_2]
100025 D - 0xfffffe00077db700 [linuxkpi_short_wq_3]
100026 D - 0xfffffe00077db600 [linuxkpi_long_wq_0]
100027 D - 0xfffffe00077db600 [linuxkpi_long_wq_1]
100028 D - 0xfffffe00077db600 [linuxkpi_long_wq_2]
100029 D - 0xfffffe00077db600 [linuxkpi_long_wq_3]
100036 D - 0xfffffe00077db100 [firmware taskq]
100040 D - 0xfffffe00083ff600 [crypto_0]
100041 D - 0xfffffe00083ff600 [crypto_1]
100056 D - 0xfffffe0057e08e00 [vtnet0 rxq 0]
100057 D - 0xfffffe0057e08d00 [vtnet0 txq 0]
100058 D - 0xfffffe0057e08c00 [vtnet0 rxq 1]
100059 D - 0xfffffe0057e08b00 [vtnet0 txq 1]
100061 D vtbslp 0xfffffe0057d73d80 [virtio_balloon]
100065 D - 0xffffffff8280f281 [deadlkres]
100069 D - 0xfffffe00083ff200 [acpi_task_0]
100070 D - 0xfffffe00083ff200 [acpi_task_1]
100071 D - 0xfffffe00083ff200 [acpi_task_2]
100073 D - 0xfffffe00077de100 [mca taskq]
100074 D - 0xfffffe00083ff000 [CAM taskq]
100076 D - 0xfffffe0057e08000 [ipsec_offload]
100403 D - 0xfffffe0059b0d300 [netlink_socket (PID]
db> ps
pid ppid pgrp uid state wmesg wchan cmd
1197 924 924 0 R (threaded) syz-executor
100450 RunQ syz-executor
100600 RunQ syz-executor
100601 RunQ syz-executor
1196 1191 765 0 S uwait 0xfffffe00582d2b80 syz-executor
1195 1194 993 0 S uwait 0xfffffe00776f1680 syz-executor
1194 993 993 0 R (threaded) syz-executor
100568 RunQ syz-executor
100597 S uwait 0xfffffe00776f1a80 syz-executor
1192 1 924 0 S uwait 0xfffffe006e4e7900 syz-executor
1191 765 765 0 R (threaded) syz-executor
100572 RunQ syz-executor
100594 RunQ syz-executor
100595 D ranged1 0xfffffe0079d41870 syz-executor
1188 1 924 0 S uwait 0xfffffe00776f2180 syz-executor
1185 1 765 0 SV uwait 0xfffffe00776f1e00 syz-executor
1181 1 993 0 S uwait 0xfffffe006e4e7680 syz-executor
1177 1 924 0 S uwait 0xfffffe007e613c80 syz-executor
1170 1 993 0 S uwait 0xfffffe00776f1780 syz-executor
1166 0 0 0 DL mdwait 0xfffffe006e4b6000 [md1]
1158 1 924 0 S uwait 0xfffffe006e4e8700 syz-executor
1144 1 993 0 S uwait 0xfffffe006e4e6d00 syz-executor
1143 1 993 0 S uwait 0xfffffe0058517600 syz-executor
1142 1 993 0 S uwait 0xfffffe006e4e7080 syz-executor
1139 0 0 0 DL mdwait 0xfffffe006e4b5000 [md0]
1122 1 924 0 S uwait 0xfffffe006e4e8e00 syz-executor
1107 1 924 0 S uwait 0xfffffe00582d2980 syz-executor
1100 1 924 0 S uwait 0xfffffe006e4e8480 syz-executor
1095 1 993 0 S uwait 0xfffffe0058518280 syz-executor
1092 1 993 0 S uwait 0xfffffe006e4e8380 syz-executor
1082 1080 1080 0 S tun_con 0xfffffe006df230a8 ifconfig
1080 762 1080 0 S wait 0xfffffe00540f4018 syz-executor
1078 1064 1078 0 Ss select 0xfffffe006dd64440 dhclient
1076 1 924 60928 S uwait 0xfffffe0057dc8780 syz-executor
1075 1 924 60928 S uwait 0xfffffe00582d2880 syz-executor
1073 1 993 0 S uwait 0xfffffe006e4e8180 syz-executor
1071 1 1071 0 Ss select 0xfffffe006dc40bc0 dhclient
1070 1 924 0 S uwait 0xfffffe006e4e8900 syz-executor
1064 1048 423 65 S select 0xfffffe006dd62540 dhclient
1062 1 763 0 S uwait 0xfffffe00582d2c80 syz-executor
1061 1 993 0 S uwait 0xfffffe0058517700 syz-executor
1055 1 765 0 S uwait 0xfffffe006e4e7c00 syz-executor
1054 1 993 0 S uwait 0xfffffe00582d0e80 syz-executor
1048 423 423 0 S wait 0xfffffe00540f3568 sh
1033 1 765 0 S uwait 0xfffffe006e4e8c80 syz-executor
997 1 765 0 S uwait 0xfffffe0058517d00 syz-executor
996 1 765 0 S uwait 0xfffffe006e4e7b00 syz-executor
993 762 993 0 R syz-executor
992 0 0 0 DL mdwait 0xfffffe006e4c4000 [md32]
991 1 924 0 S uwait 0xfffffe006e4e7f00 syz-executor
990 1 924 0 S uwait 0xfffffe006e4e7e00 syz-executor
984 1 765 0 S uwait 0xfffffe0058517c00 syz-executor
983 1 765 0 S uwait 0xfffffe0057dc8e80 syz-executor
978 1 764 0 S uwait 0xfffffe006e4e8b00 syz-executor
975 1 763 0 SV uwait 0xfffffe0058517500 syz-executor
969 1 764 0 S uwait 0xfffffe0057dc8c80 syz-executor
959 0 0 0 DL (threaded) [KTLS]
100173 D - 0xfffffe0053ebde00 [thr_0]
100297 D - 0xfffffe0053ebde80 [thr_1]
100298 D - 0xffffffff83ccf628 [reclaim_0]
957 1 763 0 S uwait 0xfffffe006e4e7800 syz-executor
955 1 763 0 S uwait 0xfffffe006e4e8300 syz-executor
951 1 765 60928 S uwait 0xfffffe0058517400 syz-executor
946 1 764 0 S uwait 0xfffffe006e4e8800 syz-executor
924 762 924 0 R syz-executor
911 1 763 0 S uwait 0xfffffe00582d1200 syz-executor
910 1 763 0 S uwait 0xfffffe006e4e7d00 syz-executor
909 1 763 0 S uwait 0xfffffe0058517e00 syz-executor
906 1 763 0 S uwait 0xfffffe0058519280 syz-executor
900 1 765 0 S uwait 0xfffffe00582d0200 syz-executor
896 1 760 0 S uwait 0xfffffe006e4e8a00 syz-executor
894 1 766 0 S uwait 0xfffffe00582d1100 syz-executor
889 1 764 0 S uwait 0xfffffe0057dc8880 syz-executor
886 1 765 0 S uwait 0xfffffe0058519480 syz-executor
874 0 0 0 DL - 0xffffffff83ccde00 [soaiod4]
873 0 0 0 DL - 0xffffffff83ccde00 [soaiod3]
872 0 0 0 DL - 0xffffffff83ccde00 [soaiod2]
871 0 0 0 DL - 0xffffffff83ccde00 [soaiod1]
858 0 0 0 DL - 0xffffffff83b58520 [accounting]
847 0 0 0 DL (threaded) [so_splice]
100119 D - 0xfffffe0058517a00 [thr_0]
100151 D - 0xfffffe0058517a40 [thr_1]
805 0 0 0 DL aiordy 0xfffffe00540ddab0 [aiod4]
804 0 0 0 DL aiordy 0xfffffe0054005570 [aiod3]
803 0 0 0 DL aiordy 0xfffffe00540f2560 [aiod2]
802 0 0 0 DL aiordy 0xfffffe00540fbac0 [aiod1]
765 762 765 0 R syz-executor
762 1 760 0 R syz-executor
758 681 758 0 Ss select 0xfffffe006dd65140 sshd
747 1 747 0 Ts+ getty
746 1 746 0 Ts+ ttyin 0xfffffe00594dc0b0 getty
745 1 745 0 Ts+ ttyin 0xfffffe00582c3cb0 getty
744 1 744 0 Ts+ ttyin 0xfffffe00594dc8b0 getty
743 1 743 0 Ts+ ttyin 0xfffffe0053f660b0 getty
742 1 742 0 Ts+ ttyin 0xfffffe00582c44b0 getty
741 1 741 0 Ts+ ttyin 0xfffffe0053f668b0 getty
740 1 740 0 Ts+ ttyin 0xfffffe0053f670b0 getty
739 1 739 0 Ts+ ttyin 0xfffffe0053f678b0 getty
737 1 17 0 S+ piperd 0xfffffe00596ed8a0 logger
736 735 17 0 S+ nanslp 0xffffffff83badc41 sleep
735 1 17 0 S+ wait 0xfffffe005409dab0 sh
685 1 685 0 Ss nanslp 0xffffffff83badc40 cron
681 1 681 0 Ss select 0xfffffe006dc42540 sshd
494 1 494 0 Ds biowr 0xfffffe0007c1ce30 syslogd
423 1 423 0 Ss wait 0xfffffe0054003ab8 devd
422 1 422 65 Ss select 0xfffffe006dd65840 dhclient
337 1 337 0 Ss select 0xfffffe006dd65940 dhclient
334 1 334 0 Ss select 0xfffffe006dc426c0 dhclient
16 0 0 0 DL syncer 0xffffffff83cdb820 [syncer]
15 0 0 0 DL vlruwt 0xfffffe000780a018 [vnlru]
14 0 0 0 DL (threaded) [bufdaemon]
100079 D psleep 0xffffffff83cd9d60 [bufdaemon]
100082 D - 0xffffffff83001ec0 [bufspacedaemon-0]
100094 D sdflush 0xfffffe00597b8ce8 [/ worker]
9 0 0 0 DL psleep 0xffffffff83d24cc0 [vmdaemon]
8 0 0 0 DL (threaded) [pagedaemon]
100077 D psleep 0xffffffff83d0ad88 [dom0]
100080 D launds 0xffffffff83d0ad94 [laundry: dom0]
100081 D umarcl 0xffffffff81e15a40 [uma]
7 0 0 0 RL [rand_harvestq]
6 0 0 0 DL pftm 0xffffffff8447ef20 [pf purge]
5 0 0 0 DL waiting 0xffffffff8485a700 [sctp_iterator]
4 0 0 0 RL (threaded) [cam]
100045 RunQ [doneq0]
100046 D - 0xffffffff838f02c0 [async]
100075 D - 0xffffffff838f0140 [scanner]
3 0 0 0 DL (threaded) [crypto]
100042 D crypto_ 0xffffffff83d06660 [crypto]
100043 D crypto_ 0xfffffe0057d60030 [crypto returns 0]
100044 D crypto_ 0xfffffe0057d60080 [crypto returns 1]
13 0 0 0 DL (threaded) [geom]
100037 D - 0xffffffff83b56640 [g_event]
100038 D - 0xffffffff83b56660 [g_up]
100039 D - 0xffffffff83b56680 [g_down]
2 0 0 0 RL (threaded) [clock]
100031 Run CPU 0 [clock (0)]
100032 I [clock (1)]
12 0 0 0 WL (threaded) [intr]
100013 I [swi6: task queue]
100014 I [swi6: Giant taskq]
100016 I [swi5: fast taskq]
100033 I [swi1: netisr 0]
100034 I [swi1: hpts]
100035 I [swi1: hpts]
100047 I [irq24: virtio_pci0]
100048 I [irq25: virtio_pci0]
100049 I [irq26: virtio_pci0]
100050 I [irq27: virtio_pci0]
100051 I [irq28: virtio_pci1]
100052 I [irq29: virtio_pci1]
100053 I [irq30: virtio_pci1]
100054 I [irq31: virtio_pci1]
100055 I [irq32: virtio_pci1]
100060 I [irq10: virtio_pci2]
100062 I [irq1: atkbd0]
100063 I [irq12: psm0]
100064 I [swi0: uart uart++]
100068 I [swi1: pf send]
11 0 0 0 RL (threaded) [idle]
100003 CanRun [idle: cpu0]
100004 CanRun [idle: cpu1]
1 0 1 0 SLs wait 0xfffffe0007809010 [init]
10 0 0 0 DL audit_w 0xffffffff83d07100 [audit]
0 0 0 0 RLs (threaded) [kernel]
100000 D parked 0xffffffff84c55ff0 [swapper]
100005 D - 0xfffffe0053ebf100 [softirq_0]
100006 D - 0xfffffe0053ebf000 [softirq_1]
100007 D - 0xfffffe0053ebee00 [if_io_tqg_0]
100008 D - 0xfffffe0053ebed00 [if_io_tqg_1]
100009 D - 0xfffffe0053ebec00 [if_config_tqg_0]
100010 D - 0xfffffe00077dc700 [kqueue_ctx taskq]
100011 D - 0xfffffe00077dc600 [jail_remove taskq]
100012 D - 0xfffffe00077dc500 [bus taskq]
100015 Run CPU 1 [thread taskq]
100017 D - 0xfffffe00077dbc00 [aiod_kick taskq]
100018 D - 0xfffffe00077dbb00 [deferred_unmount ta]
100019 D - 0xfffffe00077dba00 [inm_free taskq]
100020 D - 0xfffffe00077db900 [in6m_free taskq]
100021 D - 0xfffffe00077db800 [linuxkpi_irq_wq]
100022 D - 0xfffffe00077db700 [linuxkpi_short_wq_0]
100023 D - 0xfffffe00077db700 [linuxkpi_short_wq_1]
100024 D - 0xfffffe00077db700 [linuxkpi_short_wq_2]
100025 D - 0xfffffe00077db700 [linuxkpi_short_wq_3]
100026 D - 0xfffffe00077db600 [linuxkpi_long_wq_0]
100027 D - 0xfffffe00077db600 [linuxkpi_long_wq_1]
100028 D - 0xfffffe00077db600 [linuxkpi_long_wq_2]
100029 D - 0xfffffe00077db600 [linuxkpi_long_wq_3]
100036 D - 0xfffffe00077db100 [firmware taskq]
100040 D - 0xfffffe00083ff600 [crypto_0]
100041 D - 0xfffffe00083ff600 [crypto_1]
100056 D - 0xfffffe0057e08e00 [vtnet0 rxq 0]
100057 D - 0xfffffe0057e08d00 [vtnet0 txq 0]
100058 D - 0xfffffe0057e08c00 [vtnet0 rxq 1]
100059 D - 0xfffffe0057e08b00 [vtnet0 txq 1]
100061 D vtbslp 0xfffffe0057d73d80 [virtio_balloon]
100065 D - 0xffffffff8280f281 [deadlkres]
100069 D - 0xfffffe00083ff200 [acpi_task_0]
100070 D - 0xfffffe00083ff200 [acpi_task_1]
100071 D - 0xfffffe00083ff200 [acpi_task_2]
100073 D - 0xfffffe00077de100 [mca taskq]
100074 D - 0xfffffe00083ff000 [CAM taskq]
100076 D - 0xfffffe0057e08000 [ipsec_offload]
100403 D - 0xfffffe0059b0d300 [netlink_socket (PID]
1193 1191 765 0 Z syz-executor
db> show all locks
Process 1197 (syz-executor) thread 0xfffffe0054182780 (100600)
shared sx vm map (user) (vm map (user)) r = 0 (0xfffffe005415cbc8) locked @ /syzkaller/managers/main/kernel/sys/vm/vm_map.c:4998
Process 1191 (syz-executor) thread 0xfffffe0054173000 (100594)
exclusive lockmgr bufwait (bufwait) r = 0 (0xfffffe0007e771f0) locked @ /syzkaller/managers/main/kernel/sys/kern/vfs_bio.c:1752
exclusive lockmgr bufwait (bufwait) r = 0 (0xfffffe0007e71838) locked @ /syzkaller/managers/main/kernel/sys/kern/vfs_bio.c:4022
exclusive lockmgr ufs (ufs) r = 0 (0xfffffe0079d41750) locked @ /syzkaller/managers/main/kernel/sys/kern/vfs_vnops.c:1313
Process 1082 (ifconfig) thread 0xfffffe005411e780 (100372)
exclusive sx ifnet_detach_sx (ifnet_detach_sx) r = 0 (0xffffffff83cdc000) locked @ /syzkaller/managers/main/kernel/sys/net/if.c:3006
Process 762 (syz-executor) thread 0xfffffe00540be000 (100093)
exclusive sleep mutex process lock (process lock) r = 0 (0xfffffe005409fbe8) locked @ /syzkaller/managers/main/kernel/sys/kern/subr_trap.c:105
Process 494 (syslogd) thread 0xfffffe00540db000 (100102)
exclusive lockmgr bufwait (bufwait) r = 0 (0xfffffe0007c1ceb0) locked @ /syzkaller/managers/main/kernel/sys/kern/vfs_bio.c:4022
exclusive lockmgr ufs (ufs) r = 0 (0xfffffe006df30598) locked @ /syzkaller/managers/main/kernel/sys/kern/vfs_syscalls.c:3676
Process 0 (kernel) thread 0xfffffe0007812780 (100015)
exclusive sleep mutex so_rcv (so_rcv) r = 0 (0xfffffe00599c95e0) locked @ /syzkaller/managers/main/kernel/sys/kern/uipc_sockbuf.c:411
db> show malloc
Type InUse MemUse Requests
pf_hash 6 12804K 6
linker 384 5188K 647
tcp_hpts 7 4801K 7
devbuf 4187 4324K 4215
sysctloid 35572 2096K 35647
vtbuf 24 1968K 46
kobj 331 1324K 524
newblk 70 1042K 2175
vfscache 3 1025K 3
filedesc 112 890K 626
pcb 39 683K 262
inodedep 28 523K 638
ufs_quota 1 512K 1
vfs_hash 1 512K 1
callout 2 512K 2
subproc 236 498K 1331
intr 4 472K 4
vnet_data 2 224K 2
acpitask 1 224K 1
KTRACE 101 201K 7728
acpica 1674 184K 54450
vmem 5 144K 7
tidhash 3 141K 3
pagedep 14 132K 314
tfo_ccache 1 128K 1
IP reass 1 128K 1
DEVFS1 111 111K 132
sem 4 106K 4
gtaskqueue 18 98K 18
LRO 30 93K 30
bus 1005 82K 5097
mtx_pool 3 74K 3
syncache 1 68K 1
NFSD srvcache 3 68K 3
md_sectors 17 68K 17
module 523 66K 526
ddb_capture 1 64K 1
kdtrace 304 55K 1802
umtx 400 50K 400
BPF 29 38K 46
DEVFS3 130 33K 141
hostcache 1 32K 1
shm 1 32K 8
msg 4 30K 4
kbdmux 6 28K 6
ifaddr 96 25K 99
lltable 72 22K 78
temp 48 22K 2235
routetbl 196 21K 560
ifnet 11 21K 12
DEVFS_RULE 56 20K 56
ether_multi 208 17K 238
ufs_mount 4 17K 5
proc 3 17K 3
tty 16 16K 16
ithread 90 15K 90
cred 38 15K 292
bus-sc 34 15K 1660
eventhandler 163 14K 163
GEOM 64 14K 509
md_disk 20 13K 21
in6_multi 85 12K 88
kenv 95 12K 95
shmfd 7 11K 16
plimit 28 11K 366
CAM queue 5 11K 1528
rman 82 10K 447
rpc 8 9K 8
iov 8 9K 16196
ksem 3 9K 4
bmsafemap 2 9K 546
kqueue 119 9K 1490
devstat 4 9K 4
UART 12 9K 12
pfs_vncache 1 8K 1
audit_evclass 240 8K 306
taskqueue 72 8K 87
pwddesc 112 7K 1278
sglist 6 7K 6
CAM DEV 3 6K 510
pf_ifnet 15 6K 33
pfs_nodes 22 6K 22
DEVFSP 80 5K 127
ufs_dirhash 24 5K 39
filecaps 8 5K 96
UMA 272 5K 272
vt 11 5K 11
memdesc 1 4K 1
MCA 32 4K 32
evdev 4 4K 4
kcovinfo 63 4K 63
lockf 36 4K 234
crypto 11 4K 55
acpisem 28 4K 28
proc-args 132 4K 2352
mount 23 4K 606
terminal 11 3K 11
session 22 3K 44
sctp_atcl 7 3K 46
ip6ndp 18 3K 20
uidinfo 5 3K 19
acpidev 20 3K 20
hhook 8 3K 10
CC Mem 18 3K 371
tun 6 3K 6
clone 9 3K 9
sctp_ifa 17 3K 18
netlink 2 3K 107
local_apic 1 2K 1
io_apic 1 2K 1
dirrem 8 2K 480
ipsec-saq 2 2K 2
in_multi 8 2K 11
Unitno 30 2K 91
CAM XPT 22 2K 543
nhops 6 2K 10
selfd 24 2K 33226
toponodes 6 2K 6
ipsecpolicy 2 2K 2
select 11 2K 67
inpcbpolicy 42 2K 765
mld 10 2K 10
igmp 10 2K 10
msi 9 2K 9
newdirblk 9 2K 279
sctp_ifn 8 1K 18
sctp_stro 1 1K 2
softdep 1 1K 1
mkdir 8 1K 556
diradd 8 1K 507
sahead 1 1K 1
secasvar 1 1K 1
vnodemarker 2 1K 46
NFSD session 1 1K 1
CAM periph 4 1K 271
freework 4 1K 565
osd 23 1K 387
ipsec 3 1K 3
freefile 6 1K 379
freeblks 3 1K 320
pfil 6 1K 6
isadev 6 1K 8
pci_link 10 1K 10
encap_export_host 12 1K 12
ip6opt 4 1K 26
ip_msource 9 1K 16
indirdep 2 1K 334
cdev 2 1K 2
lkpikmalloc 8 1K 9
cryptodev 6 1K 106
counter_rate 13 1K 13
freefrag 3 1K 111
frag6 4 1K 5
chacha20random 1 1K 1
biobuf 1 1K 1
ip6_msource 5 1K 8
sctp_atky 8 1K 48
ktls 3 1K 31
sctp_timw 1 1K 1
in6_mfilter 4 1K 16
ip_moptions 4 1K 12
gif 2 1K 2
vnodes 1 1K 5
procdesc 2 1K 12
NFSD lckfile 1 1K 1
NFSD V4client 1 1K 1
DEVFS 9 1K 11
CAM SIM 2 1K 2
feeder 7 1K 7
tcpfunc 3 1K 3
loginclass 3 1K 5
prison 6 1K 6
filedesc_to_leader 3 1K 8
soname 6 1K 3695
nexusdev 8 1K 8
apmdev 1 1K 1
atkbddev 2 1K 2
ktls_ocf 1 1K 7
in_mfilter 3 1K 27
VN POLL 1 1K 14
aio 4 1K 7
pmchooks 1 1K 1
CAM path 4 1K 1034
CAM dev queue 2 1K 2
CAM I/O Scheduler 1 1K 1
sctp_athm 7 1K 46
sctp_vrf 1 1K 1
vnet 1 1K 1
pmc 1 1K 1
entropy 2 1K 37
acpiintr 1 1K 1
sctp_map 2 1K 4
cpus 2 1K 2
ip6_moptions 1 1K 7
vnet_data_free 1 1K 1
Per-cpu 1 1K 1
p1003.1b 1 1K 1
mqdata 0 0K 0
sctp_mcore 0 0K 0
sctp_socko 0 0K 9
sctp_iter 0 0K 14
sctp_mvrf 0 0K 0
sctp_cpal 0 0K 0
sctp_cmsg 0 0K 0
sctp_stre 0 0K 0
sctp_athi 0 0K 0
sctp_a_it 0 0K 14
sctp_aadr 0 0K 0
sctp_stri 0 0K 1
tcp_pcm_rack 0 0K 4
tcp_do_rack 0 0K 0
tcp_fsb_rack 0 0K 8
pf_table 0 0K 0
pf 0 0K 0
pf_rule 0 0K 0
pf_altq 0 0K 0
pf_osfp 0 0K 0
pf_krule_item 0 0K 0
pf_temp 0 0K 0
filemon 0 0K 3
ipcomp 0 0K 0
esp 0 0K 0
ah 0 0K 0
madt_table 0 0K 2
smartpqi 0 0K 0
ixl 0 0K 0
ice-resmgr 0 0K 0
ice-osdep 0 0K 0
ice 0 0K 0
iavf 0 0K 0
axgbe 0 0K 0
fpukern_ctx 0 0K 0
xen_intr 0 0K 0
xen_hvm 0 0K 0
legacydrv 0 0K 0
NMI handlers 0 0K 0
bounce 0 0K 0
busdma 0 0K 0
qpidrv 0 0K 0
dmar_idpgtbl 0 0K 0
dmar_dom 0 0K 0
dmar_ctx 0 0K 0
amdiommu_dom 0 0K 0
amdiommu_ctx 0 0K 0
isci 0 0K 0
iommu_dmamap 0 0K 0
hyperv_socket 0 0K 0
bxe_ilt 0 0K 0
aesni_data 0 0K 8
xenbus 0 0K 0
vm_fictitious 0 0K 0
UMAHash 0 0K 0
vm_pgdata 0 0K 0
jblocks 0 0K 0
savedino 0 0K 374
sentinel 0 0K 0
jfsync 0 0K 0
jtrunc 0 0K 0
sbdep 0 0K 22
jsegdep 0 0K 0
jseg 0 0K 0
jfreefrag 0 0K 0
jfreeblk 0 0K 0
jnewblk 0 0K 0
jmvref 0 0K 0
jremref 0 0K 0
jaddref 0 0K 0
freedep 0 0K 0
allocindir 0 0K 0
allocdirect 0 0K 0
ufs_trim 0 0K 0
mactemp 0 0K 0
audit_trigger 0 0K 0
audit_pipe_presel 0 0K 0
audit_pipeent 0 0K 0
audit_pipe 0 0K 0
audit_evname 0 0K 0
audit_bsm 0 0K 0
audit_gidset 0 0K 0
audit_text 0 0K 0
audit_path 0 0K 0
audit_data 0 0K 0
audit_cred 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5E_TLS_RX 0 0K 0
MLX5EEPROM 0 0K 0
MLX5E_TLS 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EN 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5DUMP 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
simple_attr 0 0K 0
seq_file 0 0K 0
lkpiskb 0 0K 0
radix 0 0K 0
idr 0 0K 0
lkpindev 0 0K 0
lkpimhi 0 0K 0
lkpifw 0 0K 0
lkpi80211 0 0K 0
NLM 0 0K 0
ipsec-spdcache 0 0K 0
ipsec-reg 0 0K 0
ipsec-misc 0 0K 0
ipsecrequest 0 0K 0
tcplog 0 0K 0
tcp_hwpace 0 0K 0
ipid 0 0K 0
80211scan 0 0K 0
80211ratectl 0 0K 0
80211power 0 0K 0
80211nodeie 0 0K 0
80211node 0 0K 0
80211mesh_gt 0 0K 0
80211mesh_rt 0 0K 0
80211perr 0 0K 0
80211prep 0 0K 0
80211preq 0 0K 0
80211dfs 0 0K 0
80211crypto 0 0K 0
80211vap 0 0K 0
iflib 0 0K 0
vlan 0 0K 0
ifdescr 0 0K 0
zlib 0 0K 23
fadvise 0 0K 4
statfs 0 0K 194
namei_tracker 0 0K 69
inotify 0 0K 92
export_host 0 0K 0
cl_savebuf 0 0K 65
lio 0 0K 6
acl 0 0K 0
mbuf_tag 0 0K 0
accf 0 0K 0
pts 0 0K 0
timerfd 0 0K 0
ioctlops 0 0K 135
eventfd 0 0K 5
Witness 0 0K 0
stack 0 0K 0
sbuf 0 0K 218
firmware 0 0K 0
compressor 0 0K 0
SWAP 0 0K 0
sysctltmp 0 0K 653
sysctl 0 0K 3
ekcd 0 0K 0
dumper 0 0K 0
sendfile 0 0K 20
rctl 0 0K 0
cache 0 0K 0
jaildesc 0 0K 0
prison_racct 0 0K 0
Fail Points 0 0K 0
sigio 0 0K 1
pwd 0 0K 0
tty console 0 0K 0
boottrace 0 0K 0
isofs_node 0 0K 0
isofs_mount 0 0K 0
tr_raid5_data 0 0K 0
tr_raid1e_data 0 0K 0
tr_raid1_data 0 0K 0
tr_raid0_data 0 0K 0
tr_concat_data 0 0K 0
md_sii_data 0 0K 0
md_promise_data 0 0K 0
md_nvidia_data 0 0K 0
md_jmicron_data 0 0K 0
md_intel_data 0 0K 0
md_ddf_data 0 0K 0
raid_data 0 0K 90
geom_flashmap 0 0K 0
tmpfs dir 0 0K 0
tmpfs name 0 0K 0
tmpfs mount 0 0K 0
tmpfs extattr 0 0K 0
NFS FHA 0 0K 0
newnfsmnt 0 0K 0
newnfsclient_req 0 0K 0
NFSCL layrecall 0 0K 0
NFSCL session 0 0K 0
NFSCL sockreq 0 0K 0
NFSCL devinfo 0 0K 0
NFSCL flayout 0 0K 0
NFSCL layout 0 0K 0
NFSD rollback 0 0K 0
NFSCL diroff 0 0K 0
NEWNFSnode 0 0K 0
NFSCL lck 0 0K 0
NFSCL lckown 0 0K 0
NFSCL client 0 0K 0
NFSCL deleg 0 0K 0
NFSCL open 0 0K 0
NFSCL owner 0 0K 0
NFS fh 0 0K 0
NFS req 0 0K 0
NFSD usrgroup 0 0K 0
NFSD string 0 0K 0
NFSD V4lock 0 0K 0
NFSD V4state 0 0K 0
msdosfs_fat 0 0K 0
msdosfs_mount 0 0K 0
msdosfs_node 0 0K 0
DEVFS4 0 0K 2
DEVFS2 0 0K 0
gntdev 0 0K 0
privcmd_dev 0 0K 0
evtchn_dev 0 0K 0
xenstore 0 0K 0
xnb 0 0K 0
xen_acpi 0 0K 0
xbbd 0 0K 0
xbd 0 0K 0
Balloon 0 0K 0
sysmouse 0 0K 0
vtfont 0 0K 0
pvscsi 0 0K 0
USBdev 0 0K 0
USB 0 0K 0
ufshci 0 0K 0
twsbuf 0 0K 0
tcp_log_dev 0 0K 2
midi buffers 0 0K 0
mixer 0 0K 0
ac97 0 0K 0
hdacc 0 0K 0
hdac 0 0K 0
hdaa 0 0K 0
SIIS driver 0 0K 0
PUC 0 0K 0
ppbusdev 0 0K 0
sr_iov 0 0K 0
OCS 0 0K 0
OCS 0 0K 0
nvme 0 0K 0
nvd 0 0K 0
netmap 0 0K 0
mwldev 0 0K 0
MVS driver 0 0K 0
mpi3mrbuf 0 0K 0
mrsasbuf 0 0K 0
mpt_user 0 0K 0
mps_user 0 0K 0
MPSSAS 0 0K 0
mps 0 0K 0
mpr_user 0 0K 0
MPRSAS 0 0K 0
mpr 0 0K 0
mfibuf 0 0K 0
malodev 0 0K 0
LED 0 0K 0
ix_sriov 0 0K 0
ix 0 0K 0
ipsbuf 0 0K 0
ciss_data 0 0K 0
BACKLIGHT 0 0K 0
ath_hal 0 0K 0
athdev 0 0K 0
ata_pci 0 0K 0
ata_dma 0 0K 0
ata_generic 0 0K 0
AHCI driver 0 0K 0
agp 0 0K 0
acpipwr 0 0K 0
acpi_perf 0 0K 0
acpicmbat 0 0K 0
aacraidcam 0 0K 0
aacraid_buf 0 0K 0
aaccam 0 0K 0
aacbuf 0 0K 0
zstd 0 0K 0
XZ_DEC 0 0K 0
nvlist 0 0K 877
SCSI ENC 0 0K 0
SCSI sa 0 0K 0
scsi_pass 0 0K 0
scsi_da 0 0K 70
ata_da 0 0K 0
scsi_ch 0 0K 0
scsi_cd 0 0K 0
nvme_da 0 0K 0
CAM CCB 0 0K 523
CAM ccb queue 0 0K 0
db> show uma
Zone Size Used Free Requests Sleeps Bucket Total Mem XFree
mbuf_jumbo_page 4096 8337 1061 22254 0 254 38494208 0
mbuf 256 8826 836 28652 0 254 2473472 0
tcp_log 416 4573 260 9557 0 254 2010528 0
RADIX NODE 152 11824 105 46022 0 62 1813208 0
BUF TRIE 152 393 11411 2087 0 62 1794208 0
malloc-384 384 4143 87 4767 0 30 1624320 0
malloc-128 128 11689 184 12530 0 126 1519744 0
malloc-4096 4096 334 4 545 0 2 1384448 0
UMA Slabs 0 112 11129 25 11129 0 126 1249248 0
mbuf_cluster 2048 508 0 508 0 254 1040384 0
vmem btag 56 18265 134 18265 0 254 1030344 0
malloc-16384 16384 56 0 310 0 1 917504 0
malloc-65536 65536 9 2 14 0 1 720896 0
FFS inode 1168 591 18 980 0 8 711312 0
sctp_ep 1152 6 505 43 0 254 588672 0
sctp_asoc 2256 1 254 2 0 254 575280 0
malloc-65536 65536 6 2 8 0 1 524288 0
socket 1024 76 432 2157 0 254 520192 0
lkpicurr 168 2 3094 2 0 62 520128 0
malloc-4096 4096 122 2 1220 0 2 507904 0
VM OBJECT 248 1681 63 18058 0 62 432512 0
pbuf 2624 0 162 0 0 2 425088 0
THREAD 1860 190 10 601 0 8 372000 0
256 Bucket 2048 152 8 1281 0 8 327680 0
VNODE 440 632 88 1024 0 30 316800 0
tcp_inpcb 1304 18 207 370 0 8 293400 0
MAP ENTRY 96 2682 90 59798 0 126 266112 0
malloc-32768 32768 2 6 263 0 1 262144 0
malloc-64 64 3911 184 4046 0 254 262080 0
malloc-16 16 14688 562 15493 0 254 244000 0
malloc-64 64 357 3234 37876 0 254 229824 0
malloc-2048 2048 103 9 248 0 8 229376 0
DEVCTL 1024 41 179 168 0 0 225280 0
malloc-128 128 1160 359 6167 0 126 194432 0
sctp_raddr 736 1 263 2 0 254 194304 0
malloc-256 256 295 455 2543 0 62 192000 0
malloc-32 32 5432 490 6339 0 254 189504 0
UMA Zones 768 244 0 244 0 16 187392 0
FPU_save_area 832 192 33 833 0 16 187200 0
malloc-128 128 1189 206 25367 0 126 178560 0
lkpimm 56 1 3095 1 0 254 173376 0
PROC 1368 112 9 1199 0 8 165528 0
unpcb 320 26 490 1296 0 254 165120 0
malloc-32768 32768 2 3 24 0 1 163840 0
malloc-2048 2048 7 73 515 0 8 163840 0
malloc-1024 1024 138 22 159 0 16 163840 0
FFS2 dinode 256 591 39 980 0 62 161280 0
S VFS Cache 104 1043 361 1516 0 126 146016 0
filedesc0 1072 112 14 1278 0 8 135072 0
malloc-65536 65536 0 2 78 0 1 131072 0
malloc-65536 65536 2 0 2 0 1 131072 0
malloc-65536 65536 0 2 110 0 1 131072 0
malloc-4096 4096 31 1 48 0 2 131072 0
mbuf_packet 256 20 488 421 0 254 130048 0
ksiginfo 112 105 939 245 0 126 116928 0
malloc-384 384 245 55 528 0 30 115200 0
malloc-32768 32768 3 0 3 0 1 98304 0
malloc-32768 32768 0 3 14 0 1 98304 0
malloc-8192 8192 9 3 16 0 1 98304 0
malloc-256 256 235 140 1400 0 62 96000 0
UMA Kegs 384 230 3 230 0 30 89472 0
128 Bucket 1024 54 29 281 0 16 84992 0
vnpbuf 2624 0 32 3 0 16 83968 0
malloc-128 128 374 277 1370 0 126 83328 0
64 Bucket 512 92 68 3042 0 30 81920 0
g_bio 408 8 172 12312 0 30 73440 0
malloc-64 64 630 441 2791 0 254 68544 0
md1 8 8192 192 8192 0 254 67072 0
DIRHASH 1024 34 30 45 0 16 65536 0
malloc-65536 65536 0 1 8 0 1 65536 0
malloc-32768 32768 2 0 2 0 1 65536 0
malloc-32768 32768 0 2 120 0 1 65536 0
malloc-16384 16384 1 3 6 0 1 65536 0
malloc-2048 2048 16 16 83 0 8 65536 0
malloc-2048 2048 13 19 74 0 8 65536 0
32 Bucket 256 85 170 1420 0 62 65280 0
malloc-4096 4096 12 2 30 0 2 57344 0
VMSPACE 584 82 16 1165 0 16 57232 0
ripcb 376 12 138 136 0 30 56400 0
malloc-64 64 547 272 1037 0 254 52416 0
Files 80 319 331 9532 0 126 52000 0
malloc-128 128 62 341 318 0 126 51584 0
malloc-256 256 117 78 1214 0 62 49920 0
malloc-256 256 92 103 1046 0 62 49920 0
NAMEI 1024 0 48 16515 0 16 49152 0
malloc-16384 16384 3 0 3 0 1 49152 0
malloc-8192 8192 3 3 64 0 1 49152 0
malloc-2048 2048 0 24 573 0 8 49152 0
malloc-1024 1024 5 43 1748 0 16 49152 0
syncache 176 1 275 4 0 254 48576 0
pipe 736 28 38 396 0 16 48576 0
pcpu-8 8 5190 442 5603 0 254 45056 0
TURNSTILE 136 201 114 201 0 62 42840 0
malloc-8192 8192 3 2 26 0 1 40960 0
malloc-4096 4096 5 5 126 0 2 40960 0
sctp_chunk 152 1 259 2 0 254 39520 0
da_ccb 544 2 68 3204 0 16 38080 0
udp_inpcb 408 11 79 239 0 30 36720 0
malloc-64 64 63 504 441 0 254 36288 0
malloc-64 64 17 550 15460 0 254 36288 0
malloc-64 64 244 323 297 0 254 36288 0
malloc-64 64 215 352 274 0 254 36288 0
tcp_bbr_map 128 0 279 11 0 126 35712 0
tcp_rack_map 128 0 279 11 0 126 35712 0
malloc-128 128 50 229 325 0 126 35712 0
malloc-128 128 38 241 93 0 126 35712 0
malloc-128 128 39 240 671 0 126 35712 0
ktls_session 256 1 134 8 0 62 34560 0
routing nhops 256 36 99 44 0 62 34560 0
ttyoutq 256 72 63 160 0 62 34560 0
malloc-384 384 52 38 131 0 30 34560 0
malloc-256 256 16 119 262 0 62 34560 0
malloc-256 256 31 104 694 0 62 34560 0
malloc-256 256 34 101 392 0 62 34560 0
malloc-256 256 16 119 1445 0 62 34560 0
SLEEPQUEUE 88 201 183 201 0 126 33792 0
malloc-16384 16384 1 1 2 0 1 32768 0
malloc-16384 16384 0 2 190 0 1 32768 0
malloc-8192 8192 2 2 83 0 1 32768 0
malloc-4096 4096 5 3 72 0 2 32768 0
malloc-2048 2048 14 2 15 0 8 32768 0
malloc-2048 2048 6 10 197 0 8 32768 0
malloc-2048 2048 2 14 4 0 8 32768 0
malloc-1024 1024 7 25 34 0 16 32768 0
malloc-1024 1024 12 20 14 0 16 32768 0
malloc-1024 1024 3 29 3 0 16 32768 0
malloc-1024 1024 3 29 171 0 16 32768 0
malloc-1024 1024 11 21 16 0 16 32768 0
malloc-1024 1024 3 29 28 0 16 32768 0
malloc-512 512 2 62 48 0 30 32768 0
malloc-512 512 17 47 33 0 30 32768 0
malloc-512 512 1 63 211 0 30 32768 0
malloc-512 512 2 62 50 0 30 32768 0
malloc-512 512 6 58 55 0 30 32768 0
malloc-512 512 10 54 16 0 30 32768 0
pcpu-64 64 501 11 501 0 254 32768 0
ttyinq 160 135 65 300 0 62 32000 0
PGRP 120 29 235 56 0 126 31680 0
clpbuf 2624 1 11 111 0 4 31488 0
L VFS Cache 320 1 95 67 0 30 30720 0
sctp_laddr 48 6 582 23 0 254 28224 0
rl_entry 48 11 577 18 0 254 282
---
This report is generated by a bot. It may contain errors.
See https://goo.gl/tpsmEJ for more information about syzbot.
syzbot engineers can be reached at syzk...@googlegroups.com.
syzbot will keep track of this issue. See:
https://goo.gl/tpsmEJ#status for how to communicate with syzbot.
If the report is already addressed, let syzbot know by replying with:
#syz fix: exact-commit-title
If you want to overwrite report's subsystems, reply with:
#syz set subsystems: new-subsystem
(See the list of subsystem names on the web dashboard)
If the report is a duplicate of another one, reply with:
#syz dup: exact-subject-of-another-report
If you want to undo deduplication, reply with:
#syz undup
syzbot
Oct 1, 2025, 7:08:42 AMOct 1
to syzkaller-f...@googlegroups.com
syzbot has found a reproducer for the following issue on:
HEAD commit: c2900b6e8255 tcp: apply rate limits to challenge ACKs
git tree: freebsd-src
console output: https://syzkaller.appspot.com/x/log.txt?x=177aa334580000
dashboard link: https://syzkaller.appspot.com/bug?extid=a62883292a5c257703be
syz repro: https://syzkaller.appspot.com/x/repro.syz?x=1464e6e2580000
C reproducer: https://syzkaller.appspot.com/x/repro.c?x=116596e2580000
IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+a62883...@syzkaller.appspotmail.com
Fatal trap 12: page fault while in kernel mode
cpuid = 0; apic id = 00
frame pointer = 0x0:0xfffffe0056a0dbc0
time = 1759316873
rax 0x12
rcx 0xfffffe0002bf1850
rdx 0xdffff7c000000000
100125 RunQ syz-executor
100156 S uwait 0xfffffe0058517880 syz-executor
913 871 871 0 R (threaded) syz-executor
100146 RunQ syz-executor
100157 RunQ syz-executor
904 877 877 0 RV syz-executor
902 875 875 0 R sh
887 799 423 0 S nanslp 0xffffffff83badc41 sleep
877 773 877 0 D ppwait 0xfffffe00540e4518 syz-executor
875 773 875 0 S wait 0xfffffe00540daab8 syz-executor
871 773 871 0 R syz-executor
827 773 827 0 R syz-executor
799 789 423 0 S wait 0xfffffe005410c000 sh
789 423 423 0 S wait 0xfffffe00540e4570 sh
773 772 770 0 R syz-executor
772 770 770 0 S (threaded) syz-execprog
100114 S uwait 0xfffffe0058519580 syz-execprog
100115 S uwait 0xfffffe0058519680 syz-execprog
100116 S uwait 0xfffffe0058518600 syz-execprog
100117 S kqread 0xfffffe00596d5200 syz-execprog
100118 S uwait 0xfffffe0058518800 syz-execprog
100119 S uwait 0xfffffe0058518900 syz-execprog
100120 S uwait 0xfffffe0058518a00 syz-execprog
100121 S uwait 0xfffffe0058518b00 syz-execprog
770 768 770 0 Ss sigsusp 0xfffffe00540d9b60 csh
768 681 768 0 Ss select 0xfffffe005968fcc0 sshd
747 1 747 0 Rs+ CPU 1 getty
746 1 746 0 Ss+ ttyin 0xfffffe00594ac0b0 getty
745 1 745 0 Ss+ ttyin 0xfffffe00594ac8b0 getty
744 1 744 0 Ss+ ttyin 0xfffffe00594ad0b0 getty
743 1 743 0 Ss+ ttyin 0xfffffe00594ad8b0 getty
742 1 742 0 Ss+ ttyin 0xfffffe0053f660b0 getty
741 1 741 0 Ss+ ttyin 0xfffffe0053f668b0 getty
740 1 740 0 Ss+ ttyin 0xfffffe0053f670b0 getty
739 1 739 0 Ss+ ttyin 0xfffffe0053f678b0 getty
737 1 17 0 S+ piperd 0xfffffe0059872420 logger
494 1 494 0 Ss select 0xfffffe006dc1f440 syslogd
337 1 337 0 Ss select 0xfffffe00596ae740 dhclient
334 1 334 0 Ss select 0xfffffe006dc1f540 dhclient
6 0 0 0 DL pftm 0xffffffff843c0f20 [pf purge]
5 0 0 0 DL waiting 0xffffffff84914700 [sctp_iterator]
4 0 0 0 DL (threaded) [cam]
100045 D - 0xffffffff838f0340 [doneq0]
100031 I [clock (0)]
100015 Run CPU 0 [thread taskq]
db> show all locks
Process 913 (syz-executor) thread 0xfffffe005411e000 (100157)
exclusive lockmgr ufs (ufs) r = 0 (0xfffffe006e662750) locked @ /syzkaller/managers/main/kernel/sys/ufs/ffs/ffs_vfsops.c:1751
exclusive lockmgr ufs (ufs) r = 0 (0xfffffe006e662e30) locked @ /syzkaller/managers/main/kernel/sys/kern/vfs_cache.c:4899
Process 902 (sh) thread 0xfffffe0054055780 (100085)
exclusive rw vmobject (vmobject) r = 0 (0xfffffe00541031f0) locked @ /syzkaller/managers/main/kernel/sys/vm/vm_object.c:647
shared sx vm map (user) (vm map (user)) r = 0 (0xfffffe000780f738) locked @ /syzkaller/managers/main/kernel/sys/vm/vm_map.c:4998
Process 747 (getty) thread 0xfffffe00540ce780 (100102)
exclusive sleep mutex ttymtx (ttymtx) r = 0 (0xfffffe00582b8008) locked @ /syzkaller/managers/main/kernel/sys/kern/tty.c:216
tcp_hpts 7 4801K 7
devbuf 4187 4324K 4212
sysctloid 35125 2070K 35200
vtbuf 24 1968K 46
newblk 1893 1497K 1985
kobj 331 1324K 495
vfscache 3 1025K 3
pcb 23 669K 53
inodedep 122 558K 145
subproc 118 230K 982
acpica 1674 184K 54444
filedesc 18 137K 165
DEVFS1 106 106K 126
gtaskqueue 18 98K 18
LRO 22 85K 24
bus 1000 82K 5086
ddb_capture 1 64K 1
kdtrace 186 37K 1073
umtx 288 36K 288
hostcache 1 32K 1
shm 1 32K 1
DEVFS3 125 32K 136
DEVFS_RULE 56 20K 56
filecaps 16 19K 90
BPF 14 19K 15
ifaddr 65 18K 78
eventhandler 163 14K 163
ifnet 7 13K 8
lltable 40 12K 50
kenv 95 12K 95
ether_multi 129 11K 185
GEOM 49 11K 431
dirrem 36 9K 64
mkdir 72 9K 122
cred 24 9K 279
rpc 8 9K 8
bmsafemap 3 9K 111
plimit 22 9K 444
shmfd 1 8K 1
pfs_vncache 1 8K 1
diradd 60 8K 107
audit_evclass 240 8K 306
in6_multi 55 8K 79
taskqueue 69 8K 69
sglist 6 7K 6
kqueue 55 6K 923
newdirblk 38 5K 61
ufs_dirhash 24 5K 24
pf_ifnet 11 5K 24
UMA 268 5K 268
pwddesc 51 4K 915
proc-args 83 4K 2032
terminal 11 3K 11
selfd 41 3K 28033
indirdep 10 3K 10
session 20 3K 51
acpidev 20 3K 20
freefile 19 3K 28
hhook 8 3K 10
clone 9 3K 9
uidinfo 3 3K 9
netlink 2 3K 94
ip6ndp 13 3K 18
Unitno 30 2K 56
sctp_ifa 12 2K 17
in_multi 6 2K 9
tun 4 2K 5
softdep 1 1K 1
vnodemarker 2 1K 8
select 8 1K 36
ipsec 3 1K 3
mld 6 1K 7
CC Mem 6 1K 13
igmp 6 1K 7
pfil 6 1K 6
isadev 6 1K 6
mount 16 1K 89
pci_link 10 1K 10
crypto 4 1K 4
encap_export_host 12 1K 12
osd 11 1K 30
cdev 2 1K 2
DEVFSP 8 1K 44
lkpikmalloc 8 1K 9
inpcbpolicy 13 1K 194
counter_rate 13 1K 13
vnodes 1 1K 1
prison 6 1K 6
cryptodev 2 1K 49
freework 1 1K 45
acpiintr 1 1K 1
cpus 2 1K 2
sctp_socko 0 0K 0
sctp_atky 0 0K 0
sctp_atcl 0 0K 0
sctp_stri 0 0K 0
sctp_map 0 0K 0
tcp_do_rack 0 0K 0
tcp_fsb_rack 0 0K 0
mqdata 0 0K 0
filemon 0 0K 0
aesni_data 0 0K 0
freefrag 0 0K 48
ipsec-misc 0 0K 2
ipsecrequest 0 0K 0
ip6opt 0 0K 3
ip6_msource 0 0K 0
ip6_moptions 0 0K 0
in6_mfilter 0 0K 0
frag6 0 0K 0
ip_moptions 0 0K 0
in_mfilter 0 0K 0
ifdescr 0 0K 0
zlib 0 0K 20
fadvise 0 0K 0
VN POLL 0 0K 0
statfs 0 0K 201
namei_tracker 0 0K 0
inotify 0 0K 0
export_host 0 0K 0
cl_savebuf 0 0K 34
aio 0 0K 0
lio 0 0K 0
ioctlops 0 0K 96
eventfd 0 0K 0
DEVFS4 0 0K 0
md_sectors 0 0K 0
md_disk 0 0K 0
mbuf 256 8621 1041 57325 0 254 2473472 0
tcp_log 416 901 4184 8894 0 254 2115360 0
BUF TRIE 152 309 11495 1046 0 62 1794208 0
malloc-384 384 4235 25 4260 0 30 1635840 0
malloc-128 128 11584 134 11678 0 126 1499904 0
malloc-4096 4096 333 3 500 0 2 1376256 0
UMA Slabs 0 112 10904 34 10904 0 126 1225056 0
RADIX NODE 152 4549 984 29649 0 62 841016 0
FFS inode 1168 571 24 599 0 8 694960 0
malloc-65536 65536 9 1 12 0 1 655360 0
malloc-256 256 2115 60 2339 0 62 556800 0
socket 1024 51 457 1446 0 254 520192 0
malloc-65536 65536 6 0 6 0 1 393216 0
256 Bucket 2048 132 14 1183 0 8 299008 0
VM OBJECT 248 1060 124 14716 0 62 293632 0
VNODE 440 607 59 638 0 30 293040 0
THREAD 1860 134 10 157 0 8 267840 0
malloc-4096 4096 60 4 931 0 2 262144 0
malloc-64 64 3857 238 3881 0 254 262080 0
malloc-16 16 14481 269 14561 0 254 236000 0
malloc-2048 2048 104 8 167 0 8 229376 0
DEVCTL 1024 37 183 162 0 0 225280 0
malloc-16384 16384 9 3 74 0 1 196608 0
UMA Zones 768 240 4 240 0 16 187392 0
malloc-32 32 5346 324 5543 0 254 181440 0
malloc-128 128 1187 208 25368 0 126 178560 0
FFS2 dinode 256 571 59 599 0 62 161280 0
malloc-1024 1024 133 11 153 0 16 147456 0
malloc-128 128 997 150 5252 0 126 146816 0
S VFS Cache 104 1019 268 1088 0 126 133848 0
MAP ENTRY 96 1125 261 46205 0 126 133056 0
malloc-65536 65536 0 2 60 0 1 131072 0
FPU_save_area 832 136 8 1092 0 16 119808 0
ksiginfo 112 49 995 953 0 126 116928 0
PROC 1368 50 16 914 0 8 90288 0
UMA Kegs 384 227 6 227 0 30 89472 0
128 Bucket 1024 44 39 249 0 16 84992 0
malloc-8192 8192 9 1 12 0 1 81920 0
filedesc0 1072 51 19 915 0 8 75040 0
malloc-384 384 150 30 430 0 30 69120 0
malloc-64 64 480 591 974 0 254 68544 0
malloc-64 64 563 508 2482 0 254 68544 0
malloc-128 128 457 70 697 0 126 67456 0
g_bio 408 0 150 5187 0 30 61200 0
malloc-256 256 135 60 326 0 62 49920 0
malloc-256 256 164 31 551 0 62 49920 0
32 Bucket 256 56 139 15641 0 62 49920 0
DIRHASH 1024 34 14 34 0 16 49152 0
NAMEI 1024 1 47 13534 0 16 49152 0
malloc-1024 1024 5 43 1599 0 16 49152 0
64 Bucket 512 70 26 2298 0 30 49152 0
syncache 176 0 276 6 0 254 48576 0
clpbuf 2624 0 16 72 0 4 41984 0
malloc-8192 8192 3 2 23 0 1 40960 0
pcpu-8 8 4722 398 5035 0 254 40960 0
VMSPACE 584 34 36 899 0 16 40880 0
pipe 736 21 34 393 0 16 40480 0
da_ccb 544 0 70 1527 0 16 38080 0
udp_inpcb 408 6 84 175 0 30 36720 0
malloc-64 64 56 511 201 0 254 36288 0
malloc-64 64 8 559 14873 0 254 36288 0
malloc-64 64 211 356 30538 0 254 36288 0
malloc-64 64 231 336 271 0 254 36288 0
malloc-64 64 128 439 171 0 254 36288 0
malloc-128 128 31 248 207 0 126 35712 0
malloc-128 128 29 250 46 0 126 35712 0
malloc-128 128 47 232 212 0 126 35712 0
malloc-128 128 62 217 318 0 126 35712 0
routing nhops 256 24 111 38 0 62 34560 0
malloc-256 256 7 128 185 0 62 34560 0
malloc-256 256 31 104 382 0 62 34560 0
malloc-256 256 65 70 98 0 62 34560 0
malloc-256 256 55 80 166 0 62 34560 0
malloc-256 256 16 119 1015 0 62 34560 0
malloc-32768 32768 0 1 11 0 1 32768 0
malloc-4096 4096 6 2 6 0 2 32768 0
malloc-4096 4096 2 6 78 0 2 32768 0
malloc-2048 2048 10 6 11 0 8 32768 0
malloc-2048 2048 7 9 24 0 8 32768 0
malloc-1024 1024 4 28 16 0 16 32768 0
malloc-1024 1024 12 20 13 0 16 32768 0
malloc-1024 1024 11 21 15 0 16 32768 0
malloc-1024 1024 1 31 16 0 16 32768 0
malloc-512 512 2 62 30 0 30 32768 0
malloc-512 512 12 52 12 0 30 32768 0
malloc-512 512 1 63 129 0 30 32768 0
malloc-512 512 2 62 49 0 30 32768 0
malloc-512 512 6 58 17 0 30 32768 0
sctp_laddr 48 0 588 19 0 254 28224 0
malloc-32 32 322 560 4183 0 254 28224 0
16 Bucket 144 51 145 346 0 62 28224 0
4 Bucket 48 8 580 13 0 254 28224 0
TURNSTILE 136 145 44 145 0 62 25704 0
cpuset 200 7 121 7 0 62 25600 0
malloc-8192 8192 2 1 83 0 1 24576 0
malloc-8192 8192 3 0 3 0 1 24576 0
malloc-4096 4096 5 1 9 0 2 24576 0
ertt_txseginfo 40 1 605 631 0 254 24240 0
PWD 40 16 590 142 0 254 24240 0
rtentry 168 27 117 38 0 62 24192 0
Files 80 150 150 7605 0 126 24000 0
8 Bucket 80 48 252 303 0 126 24000 0
tcp_inpcb 1304 6 12 13 0 8 23472 0
malloc-384 384 1 59 26 0 30 23040 0
malloc-384 384 36 24 459 0 30 23040 0
malloc-384 384 0 60 343 0 30 23040 0
malloc-384 384 7 53 7 0 30 23040 0
ripcb 376 1 59 6 0 30 22560 0
Mountpoints 2816 2 6 2 0 4 22528 0
SLEEPQUEUE 88 145 111 145 0 126 22528 0
hostcache 64 1 314 1 0 254 20160 0
ertt 72 6 274 13 0 126 20160 0
malloc-32 32 129 501 207 0 254 20160 0
malloc-32 32 174 456 677 0 254 20160 0
malloc-32 32 63 567 958 0 254 20160 0
malloc-32 32 52 578 101 0 254 20160 0
malloc-32 32 21 609 26 0 254 20160 0
2 Bucket 32 59 571 339 0 254 20160 0
vmem 1856 2 7 2 0 8 16704 0
epoch_record pcpu 256 4 60 4 0 62 16384 0
malloc-16384 16384 1 0 1 0 1 16384 0
malloc-16384 16384 1 0 1 0 1 16384 0
malloc-16384 16384 1 0 3 0 1 16384 0
malloc-16384 16384 1 0 1 0 1 16384 0
malloc-8192 8192 2 0 2 0 1 16384 0
malloc-4096 4096 2 2 757 0 2 16384 0
malloc-2048 2048 2 6 4 0 8 16384 0
malloc-512 512 1 31 1 0 30 16384 0
malloc-512 512 8 24 9 0 30 16384 0
SMR CPU 32 8 503 8 0 254 16352 0
kenv 258 17 43 1066 0 30 15480 0
mqnode 416 3 33 3 0 30 14976 0
SMR SHARED 24 8 503 8 0 254 12264 0
malloc-32 32 17 361 59 0 254 12096 0
KNOTE 160 6 69 142 0 62 12000 0
malloc-16 16 19 731 60 0 254 12000 0
malloc-16 16 7 743 90 0 254 12000 0
malloc-16 16 89 661 271 0 254 12000 0
malloc-16 16 228 522 4491 0 254 12000 0
malloc-16 16 37 713 121 0 254 12000 0
malloc-16 16 274 476 25073 0 254 12000 0
malloc-16 16 11 739 15 0 254 12000 0
malloc-384 384 1 29 1 0 30 11520 0
malloc-8192 8192 1 0 1 0 1 8192 0
pcpu-16 16 8 504 8 0 254 8192 0
vtnet_tx_hdr 24 0 334 4239 0 254 8016 0
UMA Slabs 1 176 9 13 9 0 62 3872 0
KMAP ENTRY 96 12 27 14 0 0 3744 0
FFS1 dinode 128 0 0 0 0 126 0 0
ada_ccb 272 0 0 0 0 30 0 0
swblk 136 0 0 0 0 62 0 0
swpctrie 152 0 0 0 0 62 0 0
cdg_qdiffsample 16 0 0 0 0 254 0 0
pf state scrubs 40 0 0 0 0 254 0 0
pf frag entries 40 0 0 0 0 254 0 0
pf fragment node 72 0 0 0 0 126 0 0
pf frags 232 0 0 0 0 62 0 0
pf table entries 160 0 0 0 0 254 0 0
pf table entry counters 64 0 0 0 0 254 0 0
pf Ethernet anchors 1240 0 0 0 0 64 0 0
pf anchors 1664 0 0 0 0 64 0 0
pf UDP mappings 104 0 0 0 0 126 0 0
pf source nodes 152 0 0 0 0 254 0 0
pf state keys 88 0 0 0 0 126 0 0
pf states 384 0 0 0 0 254 0 0
pf tags 104 0 0 0 0 126 0 0
pf mtags 184 0 0 0 0 62 0 0
tcp_bbr_pcb 896 0 0 0 0 16 0 0
tcp_bbr_map 128 0 0 0 0 126 0 0
tcp_rack_pcb 1088 0 0 0 0 8 0 0
tcp_rack_map 128 0 0 0 0
---
If you want syzbot to run the reproducer, reply with:
#syz test: git://repo/address.git branch-or-commit-hash
If you attach or paste a git patch, syzbot will apply it before testing.
HEAD commit: c2900b6e8255 tcp: apply rate limits to challenge ACKs
git tree: freebsd-src
dashboard link: https://syzkaller.appspot.com/bug?extid=a62883292a5c257703be
syz repro: https://syzkaller.appspot.com/x/repro.syz?x=1464e6e2580000
C reproducer: https://syzkaller.appspot.com/x/repro.c?x=116596e2580000
IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+a62883...@syzkaller.appspotmail.com
Fatal trap 12: page fault while in kernel mode
fault virtual address = 0x30
fault code = supervisor read data, page not present
instruction pointer = 0x20:0xffffffff815087f6
stack pointer = 0x0:0xfffffe0056a0dae0
fault code = supervisor read data, page not present
instruction pointer = 0x20:0xffffffff815087f6
frame pointer = 0x0:0xfffffe0056a0dbc0
code segment = base 0x0, limit 0xfffff, type 0x1b
= DPL 0, pres 1, long 1, def32 0, gran 1
processor eflags = interrupt enabled, resume, IOPL = 0
current process = 0 (thread taskq)
rdi: 0000000000000030 rsi: 0000000000000000 rdx: fffffe000781288b
processor eflags = interrupt enabled, resume, IOPL = 0
current process = 0 (thread taskq)
rcx: fffffe0002bf1850 r8: 0000000000000000 r9: 0000000000000001
rax: fffffe0000000000 rbx: 0000000000000000 rbp: fffffe0056a0dbc0
r10: 0000000000000003 r11: 0000000000000002 r12: 1fffffc00ad41b64
rax: fffffe0000000000 rbx: 0000000000000000 rbp: fffffe0056a0dbc0
r13: 0000000000000030 r14: fffffe0007812780 r15: ffffffff8284d4e0
trap number
= 12
panic: page fault
cpuid = 0
trap number
= 12
panic: page fault
time = 1759316873
rcx 0xfffffe0002bf1850
rdx 0xdffff7c000000000
rbx 0xffffffff8280aba0 .str.27
rsp 0xfffffe0056a0d450
rbp 0xfffffe0056a0d470
rsi 0
rdi 0xffffffff830004e8 panicstr
rsp 0xfffffe0056a0d450
rbp 0xfffffe0056a0d470
rsi 0
r8 0
r9 0xffffffff
r10 0
r11 0x17
r12 0xfffffe0007812780
r13 0xfffffffffffffffe
r9 0xffffffff
r10 0
r11 0x17
r12 0xfffffe0007812780
r14 0xffffffff8280aba0 .str.27
r15 0
rip 0xffffffff8162e74e kdb_enter+0x6e
rflags 0x46
kdb_enter+0x6e: movq $0,0x259e447(%rip)
db> show proc
Process 0 (kernel) at 0xffffffff83b57080:
state: NORMAL
uid: 0 gid: 0 supp gids: 0
ABI: null
flag: 0x10000284 flag2: 0
reaper: 0xffffffff83b57080 reapsubtree: 0
sigparent: 0
vmspace: 0xffffffff83b58060
(map 0xffffffff83b58060)
(map.pmap 0xffffffff83b58100)
(pmap 0xffffffff83b58170)
threads: 38
r15 0
rip 0xffffffff8162e74e kdb_enter+0x6e
rflags 0x46
kdb_enter+0x6e: movq $0,0x259e447(%rip)
db> show proc
Process 0 (kernel) at 0xffffffff83b57080:
state: NORMAL
uid: 0 gid: 0 supp gids: 0
ABI: null
flag: 0x10000284 flag2: 0
reaper: 0xffffffff83b57080 reapsubtree: 0
sigparent: 0
vmspace: 0xffffffff83b58060
(map 0xffffffff83b58060)
(map.pmap 0xffffffff83b58100)
(pmap 0xffffffff83b58170)
100000 D parked 0xffffffff84c55ff0 [swapper]
100005 D - 0xfffffe0053ebf100 [softirq_0]
100006 D - 0xfffffe0053ebf000 [softirq_1]
100007 D - 0xfffffe0053ebee00 [if_io_tqg_0]
100008 D - 0xfffffe0053ebed00 [if_io_tqg_1]
100009 D - 0xfffffe0053ebec00 [if_config_tqg_0]
100010 D - 0xfffffe00077dc700 [kqueue_ctx taskq]
100011 D - 0xfffffe00077dc600 [jail_remove taskq]
100012 D - 0xfffffe00077dc500 [bus taskq]
100015 Run CPU 0 [thread taskq]
100005 D - 0xfffffe0053ebf100 [softirq_0]
100006 D - 0xfffffe0053ebf000 [softirq_1]
100007 D - 0xfffffe0053ebee00 [if_io_tqg_0]
100008 D - 0xfffffe0053ebed00 [if_io_tqg_1]
100009 D - 0xfffffe0053ebec00 [if_config_tqg_0]
100010 D - 0xfffffe00077dc700 [kqueue_ctx taskq]
100011 D - 0xfffffe00077dc600 [jail_remove taskq]
100012 D - 0xfffffe00077dc500 [bus taskq]
100017 D - 0xfffffe00077dbc00 [aiod_kick taskq]
100018 D - 0xfffffe00077dbb00 [deferred_unmount ta]
100019 D - 0xfffffe00077dba00 [inm_free taskq]
100020 D - 0xfffffe00077db900 [in6m_free taskq]
100021 D - 0xfffffe00077db800 [linuxkpi_irq_wq]
100022 D - 0xfffffe00077db700 [linuxkpi_short_wq_0]
100023 D - 0xfffffe00077db700 [linuxkpi_short_wq_1]
100024 D - 0xfffffe00077db700 [linuxkpi_short_wq_2]
100025 D - 0xfffffe00077db700 [linuxkpi_short_wq_3]
100026 D - 0xfffffe00077db600 [linuxkpi_long_wq_0]
100027 D - 0xfffffe00077db600 [linuxkpi_long_wq_1]
100028 D - 0xfffffe00077db600 [linuxkpi_long_wq_2]
100029 D - 0xfffffe00077db600 [linuxkpi_long_wq_3]
100036 D - 0xfffffe00077db100 [firmware taskq]
100040 D - 0xfffffe00083ff600 [crypto_0]
100041 D - 0xfffffe00083ff600 [crypto_1]
100056 D - 0xfffffe0057e08e00 [vtnet0 rxq 0]
100057 D - 0xfffffe0057e08d00 [vtnet0 txq 0]
100058 D - 0xfffffe0057e08c00 [vtnet0 rxq 1]
100059 D - 0xfffffe0057e08b00 [vtnet0 txq 1]
100061 D vtbslp 0xfffffe0057d73d80 [virtio_balloon]
100065 D - 0xffffffff8280f280 [deadlkres]
100018 D - 0xfffffe00077dbb00 [deferred_unmount ta]
100019 D - 0xfffffe00077dba00 [inm_free taskq]
100020 D - 0xfffffe00077db900 [in6m_free taskq]
100021 D - 0xfffffe00077db800 [linuxkpi_irq_wq]
100022 D - 0xfffffe00077db700 [linuxkpi_short_wq_0]
100023 D - 0xfffffe00077db700 [linuxkpi_short_wq_1]
100024 D - 0xfffffe00077db700 [linuxkpi_short_wq_2]
100025 D - 0xfffffe00077db700 [linuxkpi_short_wq_3]
100026 D - 0xfffffe00077db600 [linuxkpi_long_wq_0]
100027 D - 0xfffffe00077db600 [linuxkpi_long_wq_1]
100028 D - 0xfffffe00077db600 [linuxkpi_long_wq_2]
100029 D - 0xfffffe00077db600 [linuxkpi_long_wq_3]
100036 D - 0xfffffe00077db100 [firmware taskq]
100040 D - 0xfffffe00083ff600 [crypto_0]
100041 D - 0xfffffe00083ff600 [crypto_1]
100056 D - 0xfffffe0057e08e00 [vtnet0 rxq 0]
100057 D - 0xfffffe0057e08d00 [vtnet0 txq 0]
100058 D - 0xfffffe0057e08c00 [vtnet0 rxq 1]
100059 D - 0xfffffe0057e08b00 [vtnet0 txq 1]
100061 D vtbslp 0xfffffe0057d73d80 [virtio_balloon]
100069 D - 0xfffffe00083ff200 [acpi_task_0]
100070 D - 0xfffffe00083ff200 [acpi_task_1]
100071 D - 0xfffffe00083ff200 [acpi_task_2]
100073 D - 0xfffffe00077de100 [mca taskq]
100074 D - 0xfffffe00083ff000 [CAM taskq]
100076 D - 0xfffffe00077db000 [ipsec_offload]
100070 D - 0xfffffe00083ff200 [acpi_task_1]
100071 D - 0xfffffe00083ff200 [acpi_task_2]
100073 D - 0xfffffe00077de100 [mca taskq]
100074 D - 0xfffffe00083ff000 [CAM taskq]
db> ps
pid ppid pgrp uid state wmesg wchan cmd
914 827 827 0 R (threaded) syz-executor
pid ppid pgrp uid state wmesg wchan cmd
100125 RunQ syz-executor
100156 S uwait 0xfffffe0058517880 syz-executor
913 871 871 0 R (threaded) syz-executor
100146 RunQ syz-executor
100157 RunQ syz-executor
904 877 877 0 RV syz-executor
902 875 875 0 R sh
887 799 423 0 S nanslp 0xffffffff83badc41 sleep
877 773 877 0 D ppwait 0xfffffe00540e4518 syz-executor
875 773 875 0 S wait 0xfffffe00540daab8 syz-executor
871 773 871 0 R syz-executor
827 773 827 0 R syz-executor
799 789 423 0 S wait 0xfffffe005410c000 sh
789 423 423 0 S wait 0xfffffe00540e4570 sh
773 772 770 0 R syz-executor
772 770 770 0 S (threaded) syz-execprog
100114 S uwait 0xfffffe0058519580 syz-execprog
100115 S uwait 0xfffffe0058519680 syz-execprog
100116 S uwait 0xfffffe0058518600 syz-execprog
100117 S kqread 0xfffffe00596d5200 syz-execprog
100118 S uwait 0xfffffe0058518800 syz-execprog
100119 S uwait 0xfffffe0058518900 syz-execprog
100120 S uwait 0xfffffe0058518a00 syz-execprog
100121 S uwait 0xfffffe0058518b00 syz-execprog
770 768 770 0 Ss sigsusp 0xfffffe00540d9b60 csh
768 681 768 0 Ss select 0xfffffe005968fcc0 sshd
747 1 747 0 Rs+ CPU 1 getty
746 1 746 0 Ss+ ttyin 0xfffffe00594ac0b0 getty
745 1 745 0 Ss+ ttyin 0xfffffe00594ac8b0 getty
744 1 744 0 Ss+ ttyin 0xfffffe00594ad0b0 getty
743 1 743 0 Ss+ ttyin 0xfffffe00594ad8b0 getty
742 1 742 0 Ss+ ttyin 0xfffffe0053f660b0 getty
741 1 741 0 Ss+ ttyin 0xfffffe0053f668b0 getty
740 1 740 0 Ss+ ttyin 0xfffffe0053f670b0 getty
739 1 739 0 Ss+ ttyin 0xfffffe0053f678b0 getty
737 1 17 0 S+ piperd 0xfffffe0059872420 logger
736 735 17 0 S+ nanslp 0xffffffff83badc41 sleep
735 1 17 0 S+ wait 0xfffffe00540aa010 sh
685 1 685 0 Ss nanslp 0xffffffff83badc40 cron
681 1 681 0 Ss select 0xfffffe00596ae340 sshd
494 1 494 0 Ss select 0xfffffe006dc1f440 syslogd
423 1 423 0 Ss wait 0xfffffe0054003ab8 devd
422 1 422 65 Ss select 0xfffffe006dc1f4c0 dhclient
337 1 337 0 Ss select 0xfffffe00596ae740 dhclient
334 1 334 0 Ss select 0xfffffe006dc1f540 dhclient
16 0 0 0 DL syncer 0xffffffff83cdb820 [syncer]
15 0 0 0 DL vlruwt 0xfffffe000780a018 [vnlru]
14 0 0 0 DL (threaded) [bufdaemon]
100079 D psleep 0xffffffff83cd9d60 [bufdaemon]
100082 D - 0xffffffff83001ec0 [bufspacedaemon-0]
100092 D sdflush 0xfffffe0059937ce8 [/ worker]
15 0 0 0 DL vlruwt 0xfffffe000780a018 [vnlru]
14 0 0 0 DL (threaded) [bufdaemon]
100079 D psleep 0xffffffff83cd9d60 [bufdaemon]
100082 D - 0xffffffff83001ec0 [bufspacedaemon-0]
9 0 0 0 DL psleep 0xffffffff83d24cc0 [vmdaemon]
8 0 0 0 DL (threaded) [pagedaemon]
100077 D psleep 0xffffffff83d0ad88 [dom0]
100080 D launds 0xffffffff83d0ad94 [laundry: dom0]
100081 D umarcl 0xffffffff81e15a40 [uma]
7 0 0 0 DL - 0xffffffff839265f8 [rand_harvestq]
8 0 0 0 DL (threaded) [pagedaemon]
100077 D psleep 0xffffffff83d0ad88 [dom0]
100080 D launds 0xffffffff83d0ad94 [laundry: dom0]
100081 D umarcl 0xffffffff81e15a40 [uma]
6 0 0 0 DL pftm 0xffffffff843c0f20 [pf purge]
5 0 0 0 DL waiting 0xffffffff84914700 [sctp_iterator]
4 0 0 0 DL (threaded) [cam]
100045 D - 0xffffffff838f0340 [doneq0]
100046 D - 0xffffffff838f02c0 [async]
100075 D - 0xffffffff838f0140 [scanner]
3 0 0 0 DL (threaded) [crypto]
100042 D crypto_ 0xffffffff83d06660 [crypto]
100043 D crypto_ 0xfffffe0057d60030 [crypto returns 0]
100044 D crypto_ 0xfffffe0057d60080 [crypto returns 1]
13 0 0 0 DL (threaded) [geom]
100037 D - 0xffffffff83b56640 [g_event]
100038 D - 0xffffffff83b56660 [g_up]
100039 D - 0xffffffff83b56680 [g_down]
2 0 0 0 WL (threaded) [clock]
100075 D - 0xffffffff838f0140 [scanner]
3 0 0 0 DL (threaded) [crypto]
100042 D crypto_ 0xffffffff83d06660 [crypto]
100043 D crypto_ 0xfffffe0057d60030 [crypto returns 0]
100044 D crypto_ 0xfffffe0057d60080 [crypto returns 1]
13 0 0 0 DL (threaded) [geom]
100037 D - 0xffffffff83b56640 [g_event]
100038 D - 0xffffffff83b56660 [g_up]
100039 D - 0xffffffff83b56680 [g_down]
100031 I [clock (0)]
100017 D - 0xfffffe00077dbc00 [aiod_kick taskq]
100018 D - 0xfffffe00077dbb00 [deferred_unmount ta]
100019 D - 0xfffffe00077dba00 [inm_free taskq]
100020 D - 0xfffffe00077db900 [in6m_free taskq]
100021 D - 0xfffffe00077db800 [linuxkpi_irq_wq]
100022 D - 0xfffffe00077db700 [linuxkpi_short_wq_0]
100023 D - 0xfffffe00077db700 [linuxkpi_short_wq_1]
100024 D - 0xfffffe00077db700 [linuxkpi_short_wq_2]
100025 D - 0xfffffe00077db700 [linuxkpi_short_wq_3]
100026 D - 0xfffffe00077db600 [linuxkpi_long_wq_0]
100027 D - 0xfffffe00077db600 [linuxkpi_long_wq_1]
100028 D - 0xfffffe00077db600 [linuxkpi_long_wq_2]
100029 D - 0xfffffe00077db600 [linuxkpi_long_wq_3]
100036 D - 0xfffffe00077db100 [firmware taskq]
100040 D - 0xfffffe00083ff600 [crypto_0]
100041 D - 0xfffffe00083ff600 [crypto_1]
100056 D - 0xfffffe0057e08e00 [vtnet0 rxq 0]
100057 D - 0xfffffe0057e08d00 [vtnet0 txq 0]
100058 D - 0xfffffe0057e08c00 [vtnet0 rxq 1]
100059 D - 0xfffffe0057e08b00 [vtnet0 txq 1]
100061 D vtbslp 0xfffffe0057d73d80 [virtio_balloon]
100065 D - 0xffffffff8280f280 [deadlkres]
100018 D - 0xfffffe00077dbb00 [deferred_unmount ta]
100019 D - 0xfffffe00077dba00 [inm_free taskq]
100020 D - 0xfffffe00077db900 [in6m_free taskq]
100021 D - 0xfffffe00077db800 [linuxkpi_irq_wq]
100022 D - 0xfffffe00077db700 [linuxkpi_short_wq_0]
100023 D - 0xfffffe00077db700 [linuxkpi_short_wq_1]
100024 D - 0xfffffe00077db700 [linuxkpi_short_wq_2]
100025 D - 0xfffffe00077db700 [linuxkpi_short_wq_3]
100026 D - 0xfffffe00077db600 [linuxkpi_long_wq_0]
100027 D - 0xfffffe00077db600 [linuxkpi_long_wq_1]
100028 D - 0xfffffe00077db600 [linuxkpi_long_wq_2]
100029 D - 0xfffffe00077db600 [linuxkpi_long_wq_3]
100036 D - 0xfffffe00077db100 [firmware taskq]
100040 D - 0xfffffe00083ff600 [crypto_0]
100041 D - 0xfffffe00083ff600 [crypto_1]
100056 D - 0xfffffe0057e08e00 [vtnet0 rxq 0]
100057 D - 0xfffffe0057e08d00 [vtnet0 txq 0]
100058 D - 0xfffffe0057e08c00 [vtnet0 rxq 1]
100059 D - 0xfffffe0057e08b00 [vtnet0 txq 1]
100061 D vtbslp 0xfffffe0057d73d80 [virtio_balloon]
100069 D - 0xfffffe00083ff200 [acpi_task_0]
100070 D - 0xfffffe00083ff200 [acpi_task_1]
100071 D - 0xfffffe00083ff200 [acpi_task_2]
100073 D - 0xfffffe00077de100 [mca taskq]
100074 D - 0xfffffe00083ff000 [CAM taskq]
100076 D - 0xfffffe00077db000 [ipsec_offload]
100070 D - 0xfffffe00083ff200 [acpi_task_1]
100071 D - 0xfffffe00083ff200 [acpi_task_2]
100073 D - 0xfffffe00077de100 [mca taskq]
100074 D - 0xfffffe00083ff000 [CAM taskq]
db> show all locks
Process 913 (syz-executor) thread 0xfffffe005411e000 (100157)
exclusive lockmgr ufs (ufs) r = 0 (0xfffffe006e662750) locked @ /syzkaller/managers/main/kernel/sys/ufs/ffs/ffs_vfsops.c:1751
exclusive lockmgr ufs (ufs) r = 0 (0xfffffe006e662e30) locked @ /syzkaller/managers/main/kernel/sys/kern/vfs_cache.c:4899
Process 902 (sh) thread 0xfffffe0054055780 (100085)
exclusive rw vmobject (vmobject) r = 0 (0xfffffe00541031f0) locked @ /syzkaller/managers/main/kernel/sys/vm/vm_object.c:647
shared sx vm map (user) (vm map (user)) r = 0 (0xfffffe000780f738) locked @ /syzkaller/managers/main/kernel/sys/vm/vm_map.c:4998
Process 747 (getty) thread 0xfffffe00540ce780 (100102)
exclusive sleep mutex ttymtx (ttymtx) r = 0 (0xfffffe00582b8008) locked @ /syzkaller/managers/main/kernel/sys/kern/tty.c:216
Process 0 (kernel) thread 0xfffffe0007812780 (100015)
exclusive sleep mutex so_rcv (so_rcv) r = 0 (0xfffffe006b7441e0) locked @ /syzkaller/managers/main/kernel/sys/kern/uipc_sockbuf.c:411
db> show malloc
Type InUse MemUse Requests
pf_hash 6 12804K 6
linker 384 5188K 498
Type InUse MemUse Requests
pf_hash 6 12804K 6
tcp_hpts 7 4801K 7
devbuf 4187 4324K 4212
sysctloid 35125 2070K 35200
vtbuf 24 1968K 46
newblk 1893 1497K 1985
kobj 331 1324K 495
vfscache 3 1025K 3
pcb 23 669K 53
inodedep 122 558K 145
ufs_quota 1 512K 1
vfs_hash 1 512K 1
callout 2 512K 2
intr 4 472K 4
vfs_hash 1 512K 1
callout 2 512K 2
subproc 118 230K 982
vnet_data 2 224K 2
acpitask 1 224K 1
KTRACE 100 200K 100
acpitask 1 224K 1
acpica 1674 184K 54444
vmem 5 144K 7
tidhash 3 141K 3
pagedep 48 140K 71
tidhash 3 141K 3
filedesc 18 137K 165
tfo_ccache 1 128K 1
IP reass 1 128K 1
sem 4 106K 4
IP reass 1 128K 1
DEVFS1 106 106K 126
gtaskqueue 18 98K 18
LRO 22 85K 24
bus 1000 82K 5086
mtx_pool 3 74K 3
syncache 1 68K 1
NFSD srvcache 3 68K 3
module 523 66K 523
syncache 1 68K 1
NFSD srvcache 3 68K 3
ddb_capture 1 64K 1
kdtrace 186 37K 1073
umtx 288 36K 288
hostcache 1 32K 1
shm 1 32K 1
DEVFS3 125 32K 136
msg 4 30K 4
kbdmux 6 28K 6
temp 33 21K 1943
kbdmux 6 28K 6
DEVFS_RULE 56 20K 56
filecaps 16 19K 90
BPF 14 19K 15
ifaddr 65 18K 78
ufs_mount 4 17K 5
proc 3 17K 3
routetbl 152 17K 542
proc 3 17K 3
tty 16 16K 16
ithread 90 15K 90
bus-sc 34 15K 1657
ithread 90 15K 90
eventhandler 163 14K 163
ifnet 7 13K 8
lltable 40 12K 50
kenv 95 12K 95
ether_multi 129 11K 185
GEOM 49 11K 431
CAM queue 5 11K 1528
rman 82 10K 437
dirrem 36 9K 64
mkdir 72 9K 122
cred 24 9K 279
rpc 8 9K 8
bmsafemap 3 9K 111
plimit 22 9K 444
devstat 4 9K 4
UART 12 9K 12
ksem 1 8K 1
UART 12 9K 12
shmfd 1 8K 1
pfs_vncache 1 8K 1
diradd 60 8K 107
audit_evclass 240 8K 306
in6_multi 55 8K 79
taskqueue 69 8K 69
sglist 6 7K 6
kqueue 55 6K 923
CAM DEV 3 6K 510
pfs_nodes 22 6K 22
newdirblk 38 5K 61
ufs_dirhash 24 5K 24
pf_ifnet 11 5K 24
UMA 268 5K 268
vt 11 5K 11
memdesc 1 4K 1
MCA 32 4K 32
evdev 4 4K 4
acpisem 28 4K 28
memdesc 1 4K 1
MCA 32 4K 32
evdev 4 4K 4
pwddesc 51 4K 915
proc-args 83 4K 2032
terminal 11 3K 11
selfd 41 3K 28033
indirdep 10 3K 10
session 20 3K 51
acpidev 20 3K 20
freefile 19 3K 28
hhook 8 3K 10
clone 9 3K 9
uidinfo 3 3K 9
netlink 2 3K 94
ip6ndp 13 3K 18
local_apic 1 2K 1
io_apic 1 2K 1
ipsec-saq 2 2K 2
io_apic 1 2K 1
Unitno 30 2K 56
CAM XPT 22 2K 543
lockf 15 2K 22
sctp_ifa 12 2K 17
in_multi 6 2K 9
tun 4 2K 5
toponodes 6 2K 6
ipsecpolicy 2 2K 2
msi 9 2K 9
ipsecpolicy 2 2K 2
softdep 1 1K 1
sahead 1 1K 1
secasvar 1 1K 1
nhops 6 1K 8
secasvar 1 1K 1
vnodemarker 2 1K 8
select 8 1K 36
NFSD session 1 1K 1
CAM periph 4 1K 271
sctp_ifn 6 1K 17
CAM periph 4 1K 271
ipsec 3 1K 3
mld 6 1K 7
CC Mem 6 1K 13
igmp 6 1K 7
pfil 6 1K 6
isadev 6 1K 6
mount 16 1K 89
pci_link 10 1K 10
crypto 4 1K 4
encap_export_host 12 1K 12
osd 11 1K 30
cdev 2 1K 2
DEVFSP 8 1K 44
lkpikmalloc 8 1K 9
inpcbpolicy 13 1K 194
counter_rate 13 1K 13
chacha20random 1 1K 1
biobuf 1 1K 1
soname 15 1K 3362
biobuf 1 1K 1
vnodes 1 1K 1
NFSD lckfile 1 1K 1
NFSD V4client 1 1K 1
DEVFS 9 1K 10
NFSD V4client 1 1K 1
CAM SIM 2 1K 2
feeder 7 1K 7
tcpfunc 3 1K 3
loginclass 3 1K 7
feeder 7 1K 7
tcpfunc 3 1K 3
prison 6 1K 6
cryptodev 2 1K 49
nexusdev 8 1K 8
apmdev 1 1K 1
atkbddev 2 1K 2
procdesc 1 1K 10
apmdev 1 1K 1
atkbddev 2 1K 2
pmchooks 1 1K 1
CAM path 4 1K 1034
CAM dev queue 2 1K 2
CAM I/O Scheduler 1 1K 1
sctp_vrf 1 1K 1
CAM path 4 1K 1034
CAM dev queue 2 1K 2
CAM I/O Scheduler 1 1K 1
freework 1 1K 45
vnet 1 1K 1
pmc 1 1K 1
entropy 2 1K 57
pmc 1 1K 1
acpiintr 1 1K 1
cpus 2 1K 2
vnet_data_free 1 1K 1
Per-cpu 1 1K 1
p1003.1b 1 1K 1
sctp_mcore 0 0K 0
Per-cpu 1 1K 1
p1003.1b 1 1K 1
sctp_socko 0 0K 0
sctp_iter 0 0K 14
sctp_mvrf 0 0K 0
sctp_timw 0 0K 0
sctp_mvrf 0 0K 0
sctp_cpal 0 0K 0
sctp_cmsg 0 0K 0
sctp_stre 0 0K 0
sctp_athi 0 0K 0
sctp_athm 0 0K 0
sctp_cmsg 0 0K 0
sctp_stre 0 0K 0
sctp_athi 0 0K 0
sctp_atky 0 0K 0
sctp_atcl 0 0K 0
sctp_a_it 0 0K 14
sctp_aadr 0 0K 0
sctp_stro 0 0K 0
sctp_aadr 0 0K 0
sctp_stri 0 0K 0
sctp_map 0 0K 0
ipcomp 0 0K 0
esp 0 0K 0
ah 0 0K 0
tcp_pcm_rack 0 0K 0
esp 0 0K 0
ah 0 0K 0
tcp_do_rack 0 0K 0
tcp_fsb_rack 0 0K 0
mqdata 0 0K 0
filemon 0 0K 0
pf_table 0 0K 0
pf 0 0K 0
pf_rule 0 0K 0
pf_altq 0 0K 0
pf_osfp 0 0K 0
pf_krule_item 0 0K 0
pf_temp 0 0K 0
pf 0 0K 0
pf_rule 0 0K 0
pf_altq 0 0K 0
pf_osfp 0 0K 0
pf_krule_item 0 0K 0
pf_temp 0 0K 0
xenbus 0 0K 0
vm_fictitious 0 0K 0
UMAHash 0 0K 0
vm_pgdata 0 0K 0
jblocks 0 0K 0
savedino 0 0K 16
vm_fictitious 0 0K 0
UMAHash 0 0K 0
vm_pgdata 0 0K 0
jblocks 0 0K 0
sentinel 0 0K 0
jfsync 0 0K 0
jtrunc 0 0K 0
sbdep 0 0K 2
jfsync 0 0K 0
jtrunc 0 0K 0
sbdep 0 0K 2
jsegdep 0 0K 0
jseg 0 0K 0
jfreefrag 0 0K 0
jfreeblk 0 0K 0
jnewblk 0 0K 0
jmvref 0 0K 0
jremref 0 0K 0
jaddref 0 0K 0
freedep 0 0K 0
freeblks 0 0K 44
jseg 0 0K 0
jfreefrag 0 0K 0
jfreeblk 0 0K 0
jnewblk 0 0K 0
jmvref 0 0K 0
jremref 0 0K 0
jaddref 0 0K 0
freedep 0 0K 0
freefrag 0 0K 48
allocindir 0 0K 0
allocdirect 0 0K 0
ufs_trim 0 0K 0
mactemp 0 0K 0
audit_trigger 0 0K 0
audit_pipe_presel 0 0K 0
audit_pipeent 0 0K 0
audit_pipe 0 0K 0
audit_evname 0 0K 0
audit_bsm 0 0K 0
audit_gidset 0 0K 0
audit_text 0 0K 0
audit_path 0 0K 0
audit_data 0 0K 0
audit_cred 0 0K 0
ktls_ocf 0 0K 0
allocdirect 0 0K 0
ufs_trim 0 0K 0
mactemp 0 0K 0
audit_trigger 0 0K 0
audit_pipe_presel 0 0K 0
audit_pipeent 0 0K 0
audit_pipe 0 0K 0
audit_evname 0 0K 0
audit_bsm 0 0K 0
audit_gidset 0 0K 0
audit_text 0 0K 0
audit_path 0 0K 0
audit_data 0 0K 0
audit_cred 0 0K 0
ipsecrequest 0 0K 0
ip6opt 0 0K 3
ip6_msource 0 0K 0
ip6_moptions 0 0K 0
in6_mfilter 0 0K 0
frag6 0 0K 0
tcplog 0 0K 0
tcp_hwpace 0 0K 0
ip_msource 0 0K 0
tcp_hwpace 0 0K 0
ip_moptions 0 0K 0
in_mfilter 0 0K 0
ipid 0 0K 0
80211scan 0 0K 0
80211ratectl 0 0K 0
80211power 0 0K 0
80211nodeie 0 0K 0
80211node 0 0K 0
80211mesh_gt 0 0K 0
80211mesh_rt 0 0K 0
80211perr 0 0K 0
80211prep 0 0K 0
80211preq 0 0K 0
80211dfs 0 0K 0
80211crypto 0 0K 0
80211vap 0 0K 0
iflib 0 0K 0
vlan 0 0K 0
gif 0 0K 0
80211scan 0 0K 0
80211ratectl 0 0K 0
80211power 0 0K 0
80211nodeie 0 0K 0
80211node 0 0K 0
80211mesh_gt 0 0K 0
80211mesh_rt 0 0K 0
80211perr 0 0K 0
80211prep 0 0K 0
80211preq 0 0K 0
80211dfs 0 0K 0
80211crypto 0 0K 0
80211vap 0 0K 0
iflib 0 0K 0
vlan 0 0K 0
ifdescr 0 0K 0
zlib 0 0K 20
fadvise 0 0K 0
VN POLL 0 0K 0
statfs 0 0K 201
namei_tracker 0 0K 0
inotify 0 0K 0
export_host 0 0K 0
cl_savebuf 0 0K 34
aio 0 0K 0
lio 0 0K 0
acl 0 0K 0
mbuf_tag 0 0K 0
ktls 0 0K 0
mbuf_tag 0 0K 0
accf 0 0K 0
pts 0 0K 0
timerfd 0 0K 0
iov 0 0K 15265
pts 0 0K 0
timerfd 0 0K 0
ioctlops 0 0K 96
eventfd 0 0K 0
Witness 0 0K 0
stack 0 0K 0
sbuf 0 0K 190
stack 0 0K 0
firmware 0 0K 0
compressor 0 0K 0
SWAP 0 0K 0
sysctltmp 0 0K 657
compressor 0 0K 0
SWAP 0 0K 0
sysctl 0 0K 3
ekcd 0 0K 0
dumper 0 0K 0
sendfile 0 0K 0
ekcd 0 0K 0
dumper 0 0K 0
rctl 0 0K 0
cache 0 0K 0
kcovinfo 0 0K 30
cache 0 0K 0
jaildesc 0 0K 0
prison_racct 0 0K 0
Fail Points 0 0K 0
sigio 0 0K 1
filedesc_to_leader 0 0K 0
prison_racct 0 0K 0
Fail Points 0 0K 0
sigio 0 0K 1
pwd 0 0K 0
tty console 0 0K 0
boottrace 0 0K 0
isofs_node 0 0K 0
isofs_mount 0 0K 0
tr_raid5_data 0 0K 0
tr_raid1e_data 0 0K 0
tr_raid1_data 0 0K 0
tr_raid0_data 0 0K 0
tr_concat_data 0 0K 0
md_sii_data 0 0K 0
md_promise_data 0 0K 0
md_nvidia_data 0 0K 0
md_jmicron_data 0 0K 0
md_intel_data 0 0K 0
md_ddf_data 0 0K 0
raid_data 0 0K 72
tty console 0 0K 0
boottrace 0 0K 0
isofs_node 0 0K 0
isofs_mount 0 0K 0
tr_raid5_data 0 0K 0
tr_raid1e_data 0 0K 0
tr_raid1_data 0 0K 0
tr_raid0_data 0 0K 0
tr_concat_data 0 0K 0
md_sii_data 0 0K 0
md_promise_data 0 0K 0
md_nvidia_data 0 0K 0
md_jmicron_data 0 0K 0
md_intel_data 0 0K 0
md_ddf_data 0 0K 0
DEVFS2 0 0K 0
gntdev 0 0K 0
privcmd_dev 0 0K 0
evtchn_dev 0 0K 0
xenstore 0 0K 0
xnb 0 0K 0
xen_acpi 0 0K 0
xbbd 0 0K 0
xbd 0 0K 0
Balloon 0 0K 0
sysmouse 0 0K 0
vtfont 0 0K 0
pvscsi 0 0K 0
USBdev 0 0K 0
USB 0 0K 0
ufshci 0 0K 0
twsbuf 0 0K 0
tcp_log_dev 0 0K 0
gntdev 0 0K 0
privcmd_dev 0 0K 0
evtchn_dev 0 0K 0
xenstore 0 0K 0
xnb 0 0K 0
xen_acpi 0 0K 0
xbbd 0 0K 0
xbd 0 0K 0
Balloon 0 0K 0
sysmouse 0 0K 0
vtfont 0 0K 0
pvscsi 0 0K 0
USBdev 0 0K 0
USB 0 0K 0
ufshci 0 0K 0
twsbuf 0 0K 0
md_disk 0 0K 0
malodev 0 0K 0
LED 0 0K 0
ix_sriov 0 0K 0
ix 0 0K 0
ipsbuf 0 0K 0
ciss_data 0 0K 0
BACKLIGHT 0 0K 0
ath_hal 0 0K 0
athdev 0 0K 0
ata_pci 0 0K 0
ata_dma 0 0K 0
ata_generic 0 0K 0
AHCI driver 0 0K 0
agp 0 0K 0
acpipwr 0 0K 0
acpi_perf 0 0K 0
acpicmbat 0 0K 0
aacraidcam 0 0K 0
aacraid_buf 0 0K 0
aaccam 0 0K 0
aacbuf 0 0K 0
zstd 0 0K 0
XZ_DEC 0 0K 0
nvlist 0 0K 0
LED 0 0K 0
ix_sriov 0 0K 0
ix 0 0K 0
ipsbuf 0 0K 0
ciss_data 0 0K 0
BACKLIGHT 0 0K 0
ath_hal 0 0K 0
athdev 0 0K 0
ata_pci 0 0K 0
ata_dma 0 0K 0
ata_generic 0 0K 0
AHCI driver 0 0K 0
agp 0 0K 0
acpipwr 0 0K 0
acpi_perf 0 0K 0
acpicmbat 0 0K 0
aacraidcam 0 0K 0
aacraid_buf 0 0K 0
aaccam 0 0K 0
aacbuf 0 0K 0
zstd 0 0K 0
XZ_DEC 0 0K 0
SCSI ENC 0 0K 0
SCSI sa 0 0K 0
scsi_pass 0 0K 0
scsi_da 0 0K 70
ata_da 0 0K 0
scsi_ch 0 0K 0
scsi_cd 0 0K 0
nvme_da 0 0K 0
CAM CCB 0 0K 523
CAM ccb queue 0 0K 0
db> show uma
Zone Size Used Free Requests Sleeps Bucket Total Mem XFree
mbuf_jumbo_page 4096 8320 1078 51198 0 254 38494208 0
SCSI sa 0 0K 0
scsi_pass 0 0K 0
scsi_da 0 0K 70
ata_da 0 0K 0
scsi_ch 0 0K 0
scsi_cd 0 0K 0
nvme_da 0 0K 0
CAM CCB 0 0K 523
CAM ccb queue 0 0K 0
db> show uma
Zone Size Used Free Requests Sleeps Bucket Total Mem XFree
mbuf 256 8621 1041 57325 0 254 2473472 0
tcp_log 416 901 4184 8894 0 254 2115360 0
BUF TRIE 152 309 11495 1046 0 62 1794208 0
malloc-384 384 4235 25 4260 0 30 1635840 0
malloc-128 128 11584 134 11678 0 126 1499904 0
malloc-4096 4096 333 3 500 0 2 1376256 0
UMA Slabs 0 112 10904 34 10904 0 126 1225056 0
mbuf_cluster 2048 508 0 508 0 254 1040384 0
vmem btag 56 16332 51 16332 0 254 917448 0
RADIX NODE 152 4549 984 29649 0 62 841016 0
FFS inode 1168 571 24 599 0 8 694960 0
malloc-65536 65536 9 1 12 0 1 655360 0
malloc-256 256 2115 60 2339 0 62 556800 0
socket 1024 51 457 1446 0 254 520192 0
lkpicurr 168 2 3094 2 0 62 520128 0
pbuf 2624 0 194 0 0 2 509056 0
malloc-65536 65536 6 0 6 0 1 393216 0
256 Bucket 2048 132 14 1183 0 8 299008 0
VM OBJECT 248 1060 124 14716 0 62 293632 0
VNODE 440 607 59 638 0 30 293040 0
THREAD 1860 134 10 157 0 8 267840 0
malloc-4096 4096 60 4 931 0 2 262144 0
malloc-64 64 3857 238 3881 0 254 262080 0
malloc-16 16 14481 269 14561 0 254 236000 0
malloc-2048 2048 104 8 167 0 8 229376 0
DEVCTL 1024 37 183 162 0 0 225280 0
malloc-16384 16384 9 3 74 0 1 196608 0
UMA Zones 768 240 4 240 0 16 187392 0
malloc-32 32 5346 324 5543 0 254 181440 0
malloc-128 128 1187 208 25368 0 126 178560 0
lkpimm 56 1 3095 1 0 254 173376 0
unpcb 320 37 479 1226 0 254 165120 0
FFS2 dinode 256 571 59 599 0 62 161280 0
malloc-1024 1024 133 11 153 0 16 147456 0
malloc-128 128 997 150 5252 0 126 146816 0
S VFS Cache 104 1019 268 1088 0 126 133848 0
MAP ENTRY 96 1125 261 46205 0 126 133056 0
malloc-65536 65536 0 2 60 0 1 131072 0
malloc-65536 65536 2 0 2 0 1 131072 0
malloc-65536 65536 0 2 110 0 1 131072 0
mbuf_packet 256 10 498 201 0 254 130048 0
malloc-65536 65536 0 2 110 0 1 131072 0
FPU_save_area 832 136 8 1092 0 16 119808 0
ksiginfo 112 49 995 953 0 126 116928 0
malloc-32768 32768 3 0 3 0 1 98304 0
malloc-2048 2048 7 41 514 0 8 98304 0
PROC 1368 50 16 914 0 8 90288 0
UMA Kegs 384 227 6 227 0 30 89472 0
128 Bucket 1024 44 39 249 0 16 84992 0
malloc-8192 8192 9 1 12 0 1 81920 0
filedesc0 1072 51 19 915 0 8 75040 0
malloc-384 384 150 30 430 0 30 69120 0
malloc-64 64 480 591 974 0 254 68544 0
malloc-64 64 563 508 2482 0 254 68544 0
malloc-128 128 457 70 697 0 126 67456 0
malloc-65536 65536 0 1 8 0 1 65536 0
malloc-32768 32768 2 0 2 0 1 65536 0
malloc-32768 32768 2 0 2 0 1 65536 0
malloc-32768 32768 2 0 2 0 1 65536 0
malloc-32768 32768 0 2 120 0 1 65536 0
malloc-4096 4096 14 2 26 0 2 65536 0
malloc-32768 32768 2 0 2 0 1 65536 0
malloc-32768 32768 2 0 2 0 1 65536 0
malloc-32768 32768 2 0 2 0 1 65536 0
malloc-32768 32768 0 2 120 0 1 65536 0
g_bio 408 0 150 5187 0 30 61200 0
malloc-256 256 135 60 326 0 62 49920 0
malloc-256 256 164 31 551 0 62 49920 0
32 Bucket 256 56 139 15641 0 62 49920 0
DIRHASH 1024 34 14 34 0 16 49152 0
NAMEI 1024 1 47 13534 0 16 49152 0
malloc-16384 16384 3 0 3 0 1 49152 0
malloc-2048 2048 12 12 50 0 8 49152 0
malloc-2048 2048 0 24 573 0 8 49152 0
malloc-2048 2048 13 11 204 0 8 49152 0
malloc-1024 1024 5 43 1599 0 16 49152 0
64 Bucket 512 70 26 2298 0 30 49152 0
syncache 176 0 276 6 0 254 48576 0
clpbuf 2624 0 16 72 0 4 41984 0
malloc-8192 8192 3 2 23 0 1 40960 0
pcpu-8 8 4722 398 5035 0 254 40960 0
VMSPACE 584 34 36 899 0 16 40880 0
pipe 736 21 34 393 0 16 40480 0
da_ccb 544 0 70 1527 0 16 38080 0
udp_inpcb 408 6 84 175 0 30 36720 0
malloc-64 64 56 511 201 0 254 36288 0
malloc-64 64 8 559 14873 0 254 36288 0
malloc-64 64 211 356 30538 0 254 36288 0
malloc-64 64 231 336 271 0 254 36288 0
malloc-64 64 128 439 171 0 254 36288 0
malloc-128 128 31 248 207 0 126 35712 0
malloc-128 128 29 250 46 0 126 35712 0
malloc-128 128 47 232 212 0 126 35712 0
malloc-128 128 62 217 318 0 126 35712 0
routing nhops 256 24 111 38 0 62 34560 0
ttyoutq 256 72 63 160 0 62 34560 0
malloc-384 384 52 38 53 0 30 34560 0
malloc-256 256 7 128 185 0 62 34560 0
malloc-256 256 31 104 382 0 62 34560 0
malloc-256 256 65 70 98 0 62 34560 0
malloc-256 256 55 80 166 0 62 34560 0
malloc-256 256 16 119 1015 0 62 34560 0
malloc-32768 32768 0 1 11 0 1 32768 0
malloc-16384 16384 0 2 190 0 1 32768 0
malloc-8192 8192 3 1 29 0 1 32768 0
malloc-4096 4096 6 2 6 0 2 32768 0
malloc-4096 4096 2 6 78 0 2 32768 0
malloc-2048 2048 10 6 11 0 8 32768 0
malloc-2048 2048 7 9 24 0 8 32768 0
malloc-1024 1024 4 28 16 0 16 32768 0
malloc-1024 1024 12 20 13 0 16 32768 0
malloc-1024 1024 3 29 3 0 16 32768 0
malloc-1024 1024 3 29 170 0 16 32768 0
malloc-1024 1024 11 21 15 0 16 32768 0
malloc-1024 1024 1 31 16 0 16 32768 0
malloc-512 512 2 62 30 0 30 32768 0
malloc-512 512 12 52 12 0 30 32768 0
malloc-512 512 1 63 129 0 30 32768 0
malloc-512 512 2 62 49 0 30 32768 0
malloc-512 512 6 58 17 0 30 32768 0
pcpu-64 64 501 11 501 0 254 32768 0
ttyinq 160 135 65 300 0 62 32000 0
PGRP 120 24 240 70 0 126 31680 0
ttyinq 160 135 65 300 0 62 32000 0
sctp_laddr 48 0 588 19 0 254 28224 0
malloc-32 32 322 560 4183 0 254 28224 0
16 Bucket 144 51 145 346 0 62 28224 0
4 Bucket 48 8 580 13 0 254 28224 0
TURNSTILE 136 145 44 145 0 62 25704 0
cpuset 200 7 121 7 0 62 25600 0
malloc-8192 8192 2 1 83 0 1 24576 0
malloc-8192 8192 3 0 3 0 1 24576 0
malloc-4096 4096 5 1 9 0 2 24576 0
ertt_txseginfo 40 1 605 631 0 254 24240 0
PWD 40 16 590 142 0 254 24240 0
rtentry 168 27 117 38 0 62 24192 0
Files 80 150 150 7605 0 126 24000 0
8 Bucket 80 48 252 303 0 126 24000 0
tcp_inpcb 1304 6 12 13 0 8 23472 0
malloc-384 384 1 59 26 0 30 23040 0
malloc-384 384 36 24 459 0 30 23040 0
malloc-384 384 0 60 343 0 30 23040 0
malloc-384 384 7 53 7 0 30 23040 0
ripcb 376 1 59 6 0 30 22560 0
Mountpoints 2816 2 6 2 0 4 22528 0
SLEEPQUEUE 88 145 111 145 0 126 22528 0
hostcache 64 1 314 1 0 254 20160 0
ertt 72 6 274 13 0 126 20160 0
malloc-32 32 129 501 207 0 254 20160 0
malloc-32 32 174 456 677 0 254 20160 0
malloc-32 32 63 567 958 0 254 20160 0
malloc-32 32 52 578 101 0 254 20160 0
malloc-32 32 21 609 26 0 254 20160 0
2 Bucket 32 59 571 339 0 254 20160 0
vmem 1856 2 7 2 0 8 16704 0
epoch_record pcpu 256 4 60 4 0 62 16384 0
malloc-16384 16384 1 0 1 0 1 16384 0
malloc-16384 16384 1 0 1 0 1 16384 0
malloc-16384 16384 1 0 3 0 1 16384 0
malloc-16384 16384 1 0 1 0 1 16384 0
malloc-8192 8192 2 0 2 0 1 16384 0
malloc-4096 4096 2 2 757 0 2 16384 0
malloc-2048 2048 2 6 4 0 8 16384 0
malloc-512 512 1 31 1 0 30 16384 0
malloc-512 512 8 24 9 0 30 16384 0
SMR CPU 32 8 503 8 0 254 16352 0
kenv 258 17 43 1066 0 30 15480 0
mqnode 416 3 33 3 0 30 14976 0
SMR SHARED 24 8 503 8 0 254 12264 0
malloc-32 32 17 361 59 0 254 12096 0
KNOTE 160 6 69 142 0 62 12000 0
malloc-16 16 19 731 60 0 254 12000 0
malloc-16 16 7 743 90 0 254 12000 0
malloc-16 16 89 661 271 0 254 12000 0
malloc-16 16 228 522 4491 0 254 12000 0
malloc-16 16 37 713 121 0 254 12000 0
malloc-16 16 274 476 25073 0 254 12000 0
malloc-16 16 11 739 15 0 254 12000 0
malloc-384 384 1 29 1 0 30 11520 0
malloc-8192 8192 1 0 1 0 1 8192 0
pcpu-16 16 8 504 8 0 254 8192 0
vtnet_tx_hdr 24 0 334 4239 0 254 8016 0
UMA Slabs 1 176 9 13 9 0 62 3872 0
KMAP ENTRY 96 12 27 14 0 0 3744 0
FFS1 dinode 128 0 0 0 0 126 0 0
ada_ccb 272 0 0 0 0 30 0 0
swblk 136 0 0 0 0 62 0 0
swpctrie 152 0 0 0 0 62 0 0
cdg_qdiffsample 16 0 0 0 0 254 0 0
pf state scrubs 40 0 0 0 0 254 0 0
pf frag entries 40 0 0 0 0 254 0 0
pf fragment node 72 0 0 0 0 126 0 0
pf frags 232 0 0 0 0 62 0 0
pf table entries 160 0 0 0 0 254 0 0
pf table entry counters 64 0 0 0 0 254 0 0
pf Ethernet anchors 1240 0 0 0 0 64 0 0
pf anchors 1664 0 0 0 0 64 0 0
pf UDP mappings 104 0 0 0 0 126 0 0
pf source nodes 152 0 0 0 0 254 0 0
pf state keys 88 0 0 0 0 126 0 0
pf states 384 0 0 0 0 254 0 0
pf tags 104 0 0 0 0 126 0 0
pf mtags 184 0 0 0 0 62 0 0
tcp_bbr_pcb 896 0 0 0 0 16 0 0
tcp_bbr_map 128 0 0 0 0 126 0 0
tcp_rack_pcb 1088 0 0 0 0 8 0 0
tcp_rack_map 128 0 0 0 0
---
If you want syzbot to run the reproducer, reply with:
#syz test: git://repo/address.git branch-or-commit-hash
If you attach or paste a git patch, syzbot will apply it before testing.
Reply all
Reply to author
Forward
0 new messages