Fatal trap NUM: page fault in sctp_notify_stream_reset_tsn
4 views
Skip to first unread message
syzbot
Feb 2, 2023, 5:43:43 AM2/2/23
to syzkaller-f...@googlegroups.com
Hello,
syzbot found the following issue on:
HEAD commit: 99187c3a44c2 prison_check_nfsd: Add check for enforce_stat..
git tree: freebsd-src
console output: https://syzkaller.appspot.com/x/log.txt?x=110a158b480000
dashboard link: https://syzkaller.appspot.com/bug?extid=eb888d3a5a6c54413de5
Unfortunately, I don't have any reproducer for this issue yet.
IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+eb888d...@syzkaller.appspotmail.com
Fatal trap 12: page fault while in kernel mode
cpuid = 0; apic id = 00
fault virtual address = 0x1dc
fault code = supervisor read data, page not present
instruction pointer = 0x20:0xffffffff84b7ef4c
stack pointer = 0x28:0xfffffe00077fed90
frame pointer = 0x28:0xfffffe00077fedd0
code segment = base 0x0, limit 0xfffff, type 0x1b
= DPL 0, pres 1, long 1, def32 0, gran 1
processor eflags = interrupt enabled, resume, IOPL = 0
current process = 12 (swi1: netisr 0)
rdi: 1dc rsi: fffffe009035ee1b rdx: 0
rcx: fffffe00033eee30 r8: fffff78000000000 r9: 20000000000
rax: fffffe00033eee30 rbx: 0 rbp: fffffe00077fedd0
r10: 0 r11: 0 r12: fffffe009035ee18
r13: fffffe00995dea70 r14: fffffe009035ee00 r15: 4
trap number = 12
panic: page fault
cpuid = 0
time = 1675334569
KDB: stack backtrace:
db_trace_self_wrapper() at db_trace_self_wrapper+0xc7/frame 0xfffffe00077fe570
kdb_backtrace() at kdb_backtrace+0xd3/frame 0xfffffe00077fe6d0
vpanic() at vpanic+0x254/frame 0xfffffe00077fe7b0
panic() at panic+0xb5/frame 0xfffffe00077fe870
trap_fatal() at trap_fatal+0x7ed/frame 0xfffffe00077fe990
trap_pfault() at trap_pfault+0x182/frame 0xfffffe00077fead0
trap() at trap+0x5e1/frame 0xfffffe00077fecc0
calltrap() at calltrap+0x8/frame 0xfffffe00077fecc0
--- trap 0xc, rip = 0xffffffff84b7ef4c, rsp = 0xfffffe00077fed90, rbp = 0xfffffe00077fedd0 ---
sctp_notify_stream_reset_tsn() at sctp_notify_stream_reset_tsn+0x17c/frame 0xfffffe00077fedd0
sctp_handle_stream_reset_response() at sctp_handle_stream_reset_response+0x1431/frame 0xfffffe00077feef0
sctp_handle_stream_reset() at sctp_handle_stream_reset+0xa17/frame 0xfffffe00077ff2f0
sctp_process_control() at sctp_process_control+0x1bf8/frame 0xfffffe00077ff7c0
sctp_common_input_processing() at sctp_common_input_processing+0xb35/frame 0xfffffe00077ffa20
sctp_input_with_port() at sctp_input_with_port+0x57d/frame 0xfffffe00077ffbb0
sctp_input() at sctp_input+0x32/frame 0xfffffe00077ffbd0
ip_input() at ip_input+0x7c5/frame 0xfffffe00077ffcf0
swi_net() at swi_net+0x2ed/frame 0xfffffe00077ffd90
ithread_loop() at ithread_loop+0x4ee/frame 0xfffffe00077ffef0
fork_exit() at fork_exit+0xd0/frame 0xfffffe00077fff30
fork_trampoline() at fork_trampoline+0xe/frame 0xfffffe00077fff30
--- trap 0, rip = 0, rsp = 0, rbp = 0 ---
KDB: enter: panic
[ thread pid 12 tid 100029 ]
Stopped at kdb_enter+0x6b: movq $0,0x276a1ca(%rip)
db> set $lines = 0
db> set $maxwidth = 0
db> show registers
cs 0x20
ds 0x3b
es 0x3b
fs 0x13
gs 0x1b
ss 0x28
rax 0x12
rcx 0xffffffff817414c6 printf+0xf6
rdx 0x1
rbx 0
rsp 0xfffffe00077fe6b0
rbp 0xfffffe00077fe6d0
rsi 0
rdi 0xffffffff81741528 printf+0x158
r8 0
r9 0xffffffff
r10 0
r11 0
r12 0
r13 0xfffffe0007a9e3a0
r14 0xffffffff82bb76e0 .str.26
r15 0xffffffff82bb76e0 .str.26
rip 0xffffffff817310cb kdb_enter+0x6b
rflags 0x46
kdb_enter+0x6b: movq $0,0x276a1ca(%rip)
db> show proc
Process 12 (intr) at 0xfffffe00541db560:
state: NORMAL
uid: 0 gids: 0
parent: pid 0 at 0xffffffff83e3e8a0
ABI: null
flag: 0x10000284 flag2: 0
reaper: 0xffffffff83e3e8a0 reapsubtree: 12
sigparent: 20
vmspace: 0xffffffff83e3f840
(map 0xffffffff83e3f840)
(map.pmap 0xffffffff83e3f900)
(pmap 0xffffffff83e3f970)
threads: 22
100011 I [swi5: fast taskq]
100018 I [swi6: task queue]
100019 I [swi6: Giant taskq]
100029 Run CPU 0 [swi1: netisr 0]
100032 I [swi1: hpts]
100033 I [swi1: hpts]
100046 I [irq24: virtio_pci0]
100047 I [irq25: virtio_pci0]
100048 I [irq26: virtio_pci0]
100049 I [irq27: virtio_pci0]
100050 I [irq28: virtio_pci1]
100051 I [irq29: virtio_pci1]
100052 I [irq30: virtio_pci1]
100053 I [irq31: virtio_pci1]
100054 I [irq32: virtio_pci1]
100059 I [irq33: virtio_pci2]
100060 I [irq34: virtio_pci2]
100061 I [irq35: virtio_pci2]
100063 I [irq1: atkbd0]
100064 I [irq12: psm0]
100065 I [swi0: uart uart++]
100069 I [swi1: pf send]
db> ps
pid ppid pgrp uid state wmesg wchan cmd
12409 778 778 0 R (threaded) syz-executor.1
111405 Run CPU 1 syz-executor.1
112681 S connec 0xfffffe0099c290da syz-executor.1
12408 777 777 0 R (threaded) syz-executor.0
112676 RunQ syz-executor.0
112678 S uwait 0xfffffe0099684a80 syz-executor.0
112679 S connec 0xfffffe0058a62c1a syz-executor.0
12406 795 795 0 R (threaded) syz-executor.3
112640 S nanslp 0xffffffff83e689c1 syz-executor.3
112672 RunQ syz-executor.3
112680 S uwait 0xfffffe0099bd5280 syz-executor.3
12404 788 788 0 R (threaded) syz-executor.2
112488 RunQ syz-executor.2
112670 S connec 0xfffffe0099bee85a syz-executor.2
112677 S uwait 0xfffffe0099b8a580 syz-executor.2
8992 1 8992 65 Ss select 0xfffffe0099bbadc0 dhclient
7129 1 7129 0 Ss select 0xfffffe0099ce93c0 dhclient
7126 1 7126 0 Ss select 0xfffffe0099cbc840 dhclient
7107 1 7107 65 Ss select 0xfffffe0099ce9540 dhclient
5304 1 5304 0 Ss select 0xfffffe00996d9240 dhclient
5301 1 5301 0 Ss select 0xfffffe0099ce9b40 dhclient
5282 1 5282 65 Ss select 0xfffffe0099ce8dc0 dhclient
3525 1 3525 0 Ss select 0xfffffe00997d8b40 dhclient
3522 1 3522 0 Ss select 0xfffffe00997d8cc0 dhclient
3495 1 3495 65 Ss select 0xfffffe0099a64740 dhclient
2889 0 0 0 DL aiordy 0xfffffe008fe1e000 [aiod4]
2888 0 0 0 DL aiordy 0xfffffe00926a7018 [aiod3]
2887 0 0 0 DL aiordy 0xfffffe00926a5560 [aiod2]
2886 0 0 0 DL aiordy 0xfffffe00926a7570 [aiod1]
808 1 808 0 Ss select 0xfffffe00578822c0 dhclient
805 1 805 0 Ss select 0xfffffe00578821c0 dhclient
795 774 795 0 Ss nanslp 0xffffffff83e689c1 syz-executor.3
788 774 788 0 Ss nanslp 0xffffffff83e689c1 syz-executor.2
778 774 778 0 Ss nanslp 0xffffffff83e689c1 syz-executor.1
777 774 777 0 Rs syz-executor.0
774 772 772 0 S (threaded) syz-fuzzer
100098 S uwait 0xfffffe0057318800 syz-fuzzer
100117 S uwait 0xfffffe0057884280 syz-fuzzer
100118 S uwait 0xfffffe0057884380 syz-fuzzer
100119 S wait 0xfffffe008fe1f560 syz-fuzzer
100120 S uwait 0xfffffe000798c500 syz-fuzzer
100121 S uwait 0xfffffe0057882f00 syz-fuzzer
100122 S wait 0xfffffe008fe1f560 syz-fuzzer
100123 S wait 0xfffffe008fe1f560 syz-fuzzer
100124 S wait 0xfffffe008fe1f560 syz-fuzzer
100125 S uwait 0xfffffe0092595a00 syz-fuzzer
100141 S uwait 0xfffffe000798cd80 syz-fuzzer
100142 S kqread 0xfffffe005406f200 syz-fuzzer
772 770 772 0 Ss pause 0xfffffe008fe1f0b8 csh
770 688 770 0 Ss select 0xfffffe00578833c0 sshd
756 1 756 0 Ss+ ttyin 0xfffffe00540668b0 getty
755 1 755 0 Ss+ ttyin 0xfffffe005794fcb0 getty
754 1 754 0 Ss+ ttyin 0xfffffe00579500b0 getty
753 1 753 0 Ss+ ttyin 0xfffffe00579504b0 getty
752 1 752 0 Ss+ ttyin 0xfffffe00579508b0 getty
751 1 751 0 Ss+ ttyin 0xfffffe0057950cb0 getty
750 1 750 0 Ss+ ttyin 0xfffffe00579520b0 getty
749 1 749 0 Ss+ ttyin 0xfffffe00579524b0 getty
748 1 748 0 Ss+ ttyin 0xfffffe00579528b0 getty
692 1 692 0 Ss nanslp 0xffffffff83e689c0 cron
688 1 688 0 Ss select 0xfffffe0092595cc0 sshd
501 1 501 0 Rs syslogd
430 1 430 0 Ss select 0xfffffe0092596040 devd
429 1 429 65 Ss select 0xfffffe0092595dc0 dhclient
344 1 344 0 Ss select 0xfffffe0092595ec0 dhclient
341 1 341 0 Ss select 0xfffffe000798cac0 dhclient
17 0 0 0 DL vlruwt 0xfffffe00541dd570 [vnlru]
16 0 0 0 DL syncer 0xffffffff83f8dea0 [syncer]
15 0 0 0 DL (threaded) [bufdaemon]
100079 D psleep 0xffffffff83f8c4c0 [bufdaemon]
100082 D - 0xffffffff83212180 [bufspacedaemon-0]
100094 D sdflush 0xfffffe00589348e8 [/ worker]
9 0 0 0 DL psleep 0xffffffff83fc3700 [vmdaemon]
8 0 0 0 DL (threaded) [pagedaemon]
100077 D psleep 0xffffffff83fb75b8 [dom0]
100080 D launds 0xffffffff83fb75c4 [laundry: dom0]
100081 D umarcl 0xffffffff81e9dd50 [uma]
7 0 0 0 DL - 0xffffffff83c24e48 [rand_harvestq]
6 0 0 0 DL pftm 0xffffffff848a02e0 [pf purge]
5 0 0 0 DL waiting 0xffffffff84bbcf80 [sctp_iterator]
4 0 0 0 DL (threaded) [cam]
100044 D - 0xffffffff83ac7340 [doneq0]
100045 D - 0xffffffff83ac72c0 [async]
100076 D - 0xffffffff83ac7140 [scanner]
14 0 0 0 DL seqstat 0xfffffe0007ba8088 [sequencer 00]
3 0 0 0 DL (threaded) [crypto]
100040 D crypto_ 0xffffffff83fb2d20 [crypto]
100041 D crypto_ 0xfffffe0054081e30 [crypto returns 0]
100042 D crypto_ 0xfffffe0054081e80 [crypto returns 1]
13 0 0 0 DL (threaded) [geom]
100035 D - 0xffffffff83e3de80 [g_event]
100036 D - 0xffffffff83e3dea0 [g_up]
100037 D - 0xffffffff83e3dec0 [g_down]
2 0 0 0 WL (threaded) [clock]
100030 I [clock (0)]
100031 I [clock (1)]
12 0 0 0 RL (threaded) [intr]
100011 I [swi5: fast taskq]
100018 I [swi6: task queue]
100019 I [swi6: Giant taskq]
100029 Run CPU 0 [swi1: netisr 0]
100032 I [swi1: hpts]
100033 I [swi1: hpts]
100046 I [irq24: virtio_pci0]
100047 I [irq25: virtio_pci0]
100048 I [irq26: virtio_pci0]
100049 I [irq27: virtio_pci0]
100050 I [irq28: virtio_pci1]
100051 I [irq29: virtio_pci1]
100052 I [irq30: virtio_pci1]
100053 I [irq31: virtio_pci1]
100054 I [irq32: virtio_pci1]
100059 I [irq33: virtio_pci2]
100060 I [irq34: virtio_pci2]
100061 I [irq35: virtio_pci2]
100063 I [irq1: atkbd0]
100064 I [irq12: psm0]
100065 I [swi0: uart uart++]
100069 I [swi1: pf send]
11 0 0 0 RL (threaded) [idle]
100003 CanRun [idle: cpu0]
100004 CanRun [idle: cpu1]
1 0 1 0 SLs wait 0xfffffe00541dc010 [init]
10 0 0 0 DL audit_w 0xffffffff83fb38a0 [audit]
0 0 0 0 DLs (threaded) [kernel]
100000 D swapin 0xffffffff83e3e8a0 [swapper]
100005 D - 0xfffffe0054070e00 [if_config_tqg_0]
100006 D - 0xfffffe0054070d00 [softirq_0]
100007 D - 0xfffffe0054070c00 [softirq_1]
100008 D - 0xfffffe0054070b00 [if_io_tqg_0]
100009 D - 0xfffffe0054070a00 [if_io_tqg_1]
100010 D - 0xfffffe00085f4000 [thread taskq]
100012 D - 0xfffffe00085f3d00 [kqueue_ctx taskq]
100013 D - 0xfffffe00085f3c00 [pci_hp taskq]
100014 D - 0xfffffe00085f3b00 [inm_free taskq]
100015 D - 0xfffffe00085f3a00 [aiod_kick taskq]
100016 D - 0xfffffe00085f3900 [in6m_free taskq]
100017 D - 0xfffffe00085f3800 [deferred_unmount ta]
100020 D - 0xfffffe00085f3500 [linuxkpi_irq_wq]
100021 D - 0xfffffe00085f3400 [linuxkpi_short_wq_0]
100022 D - 0xfffffe00085f3400 [linuxkpi_short_wq_1]
100023 D - 0xfffffe00085f3400 [linuxkpi_short_wq_2]
100024 D - 0xfffffe00085f3400 [linuxkpi_short_wq_3]
100025 D - 0xfffffe00085f3300 [linuxkpi_long_wq_0]
100026 D - 0xfffffe00085f3300 [linuxkpi_long_wq_1]
100027 D - 0xfffffe00085f3300 [linuxkpi_long_wq_2]
100028 D - 0xfffffe00085f3300 [linuxkpi_long_wq_3]
100034 D - 0xfffffe00085f3200 [firmware taskq]
100038 D - 0xfffffe00085f3000 [crypto_0]
100039 D - 0xfffffe00085f3000 [crypto_1]
100055 D - 0xfffffe005700d000 [vtnet0 rxq 0]
100056 D - 0xfffffe005700ce00 [vtnet0 txq 0]
100057 D - 0xfffffe005700cd00 [vtnet0 rxq 1]
100058 D - 0xfffffe005700cc00 [vtnet0 txq 1]
100062 D vtbslp 0xfffffe0057331e00 [virtio_balloon]
100066 D - 0xffffffff82bbd8c1 [deadlkres]
100070 D - 0xfffffe00085f4100 [mca taskq]
100072 D - 0xfffffe0057932400 [acpi_task_0]
100073 D - 0xfffffe0057932400 [acpi_task_1]
100074 D - 0xfffffe0057932400 [acpi_task_2]
100075 D - 0xfffffe00085f2d00 [CAM taskq]
db> show all locks
Process 12406 (syz-executor.3) thread 0xfffffe0092b4d1e0 (112672)
exclusive sleep mutex sctp-create (inp_create) r = 0 (0xfffffe009a5c7db0) locked @ /syzkaller/managers/main/kernel/sys/netinet/sctp_usrreq.c:6981
Process 501 (syslogd) thread 0xfffffe008fe15020 (100106)
exclusive lockmgr ufs (ufs) r = 0 (0xfffffe00925ba5b0) locked @ /syzkaller/managers/main/kernel/sys/kern/vfs_syscalls.c:3560
Process 12 (intr) thread 0xfffffe0007a9e3a0 (100029)
exclusive sleep mutex sctp-tcb (tcb) r = 0 (0xfffffe00995df320) locked @ /syzkaller/managers/main/kernel/sys/netinet/sctp_pcb.c:2138
db> show malloc
Type InUse MemUse Requests
pf_hash 5 11524K 5
tcp_hpts 7 4801K 7
devbuf 4216 4323K 4244
pcb 1593 2303K 39002
sysctloid 34753 2047K 34824
vtbuf 24 1968K 46
kobj 330 1320K 493
newblk 10 1027K 12236
vfscache 3 1025K 3
inodedep 666 762K 11608
sctp_stro 714 714K 5875
sctp_atcl 1501 563K 27200
ufs_quota 1 512K 1
vfs_hash 1 512K 1
callout 2 512K 2
intr 4 472K 4
subproc 150 278K 12502
vmem 3 274K 6
acpica 1674 184K 58126
dirrem 656 164K 11525
tidhash 3 141K 3
filedesc 18 137K 23052
pagedep 9 130K 11529
linker 324 130K 353
tfo_ccache 1 128K 1
IP reass 1 128K 1
vnet_data 1 112K 1
DEVFS1 109 109K 126
sem 4 106K 4
sctp_atky 2215 92K 35004
BPF 46 88K 75
freefile 656 82K 11523
bus 1000 82K 5215
mtx_pool 2 72K 2
syncache 1 68K 1
module 513 65K 513
acpitask 1 64K 1
ddb_capture 1 64K 1
umtx 374 47K 374
kdtrace 228 46K 25092
temp 34 33K 3342
DEVFS3 128 32K 138
hostcache 1 32K 1
shm 1 32K 1
sctp_timw 125 32K 125
msg 4 30K 4
gtaskqueue 18 26K 18
sctp_athm 1501 24K 29061
kbdmux 6 24K 6
sctp_map 1428 23K 11750
ifaddr 70 20K 72
DEVFS_RULE 56 20K 56
ufs_mount 4 17K 5
proc 3 17K 3
tty 16 16K 16
ithread 97 16K 97
routetbl 128 16K 411
lltable 47 15K 75
bus-sc 34 15K 1682
eventhandler 154 13K 154
KTRACE 100 13K 100
ifnet 7 13K 7
ether_multi 152 13K 162
kenv 95 12K 95
rman 88 11K 431
GEOM 61 11K 481
CAM queue 5 11K 1528
in6_multi 65 9K 65
UART 12 9K 12
devstat 4 9K 4
ksem 1 8K 1
rpc 2 8K 2
bmsafemap 1 8K 11582
shmfd 1 8K 108
pfs_vncache 1 8K 1
pfs_nodes 20 8K 20
audit_evclass 237 8K 296
taskqueue 63 7K 63
cred 26 7K 229
sglist 5 7K 5
kqueue 63 7K 12414
CAM DEV 3 6K 510
plimit 24 6K 409
ufs_dirhash 24 5K 24
session 35 5K 49
UMA 267 5K 267
pf_ifnet 10 5K 19
DEVFSP 68 5K 268
vt 11 5K 11
memdesc 1 4K 1
MCA 32 4K 32
evdev 4 4K 4
pwddesc 61 4K 12410
acpisem 28 4K 28
lockf 32 4K 54
proc-args 92 4K 13666
hhook 15 4K 17
kcovinfo 52 4K 52
selfd 50 4K 177662
terminal 11 3K 11
select 19 3K 53
clone 9 3K 9
uidinfo 3 3K 8
local_apic 1 2K 1
io_apic 1 2K 1
fpukern_ctx 2 2K 2
ipsec-saq 2 2K 2
ip6ndp 12 2K 13
Unitno 30 2K 49
sctp_ifa 13 2K 14
CAM XPT 22 2K 543
msi 12 2K 12
in_multi 6 2K 8
ipsecpolicy 2 2K 2
acpidev 20 2K 20
tun 7 2K 7
freework 5 2K 11521
sctp_stri 2 1K 3723
NFSD session 1 1K 1
softdep 1 1K 1
mkdir 8 1K 23022
freeblks 4 1K 11520
sahead 1 1K 1
secasvar 1 1K 1
nhops 6 1K 8
vnodemarker 2 1K 40
CAM periph 4 1K 271
ipsec 3 1K 3
sctp_ifn 6 1K 14
mld 6 1K 6
CC Mem 6 1K 4838
igmp 6 1K 6
toponodes 6 1K 6
isadev 6 1K 6
mount 16 1K 89
pci_link 10 1K 10
crypto 4 1K 4
encap_export_host 12 1K 12
procdesc 5 1K 14
inpcbpolicy 17 1K 5926
newdirblk 4 1K 11511
diradd 4 1K 11564
pfil 4 1K 4
cdev 2 1K 2
osd 10 1K 4849
chacha20random 1 1K 1
NFSD lckfile 1 1K 1
NFSD V4client 1 1K 1
DEVFS 9 1K 10
vnodes 1 1K 1
CAM SIM 2 1K 2
feeder 7 1K 7
tcpfunc 3 1K 3
loginclass 3 1K 6
prison 6 1K 6
lkpikmalloc 5 1K 6
soname 8 1K 33223
aesni_data 2 1K 2
cryptodev 2 1K 200
nexusdev 8 1K 8
apmdev 1 1K 1
atkbddev 2 1K 2
CAM dev queue 2 1K 2
netlink 1 1K 1
CAM I/O Scheduler 1 1K 1
CAM path 4 1K 1034
aio 4 1K 4
pmchooks 1 1K 1
filecaps 5 1K 98
sctp_vrf 1 1K 1
vnet 1 1K 1
entropy 2 1K 41
pmc 1 1K 1
acpiintr 1 1K 1
cpus 2 1K 2
vnet_data_free 1 1K 1
Per-cpu 1 1K 1
p1003.1b 1 1K 1
mqdata 0 0K 0
ipcomp 0 0K 0
esp 0 0K 0
ah 0 0K 0
sctp_mcore 0 0K 0
sctp_socko 0 0K 12328
sctp_iter 0 0K 11
sctp_mvrf 0 0K 0
sctp_cpal 0 0K 0
sctp_cmsg 0 0K 0
sctp_stre 0 0K 0
sctp_athi 0 0K 0
sctp_a_it 0 0K 11
sctp_aadr 0 0K 0
pf_table 0 0K 0
pf_rule 0 0K 0
pf_altq 0 0K 0
pf_osfp 0 0K 0
pf_temp 0 0K 0
tcp_do 0 0K 0
tcp_fsb 0 0K 1406
filemon 0 0K 9
NFSCL layrecall 0 0K 0
madt_table 0 0K 2
smartpqi 0 0K 0
NFSCL session 0 0K 0
NFSCL sockreq 0 0K 0
NFSCL devinfo 0 0K 0
ixl 0 0K 0
NFSCL flayout 0 0K 0
NFSCL layout 0 0K 0
NFSD rollback 0 0K 0
NFSCL diroff 0 0K 0
NEWdirectio 0 0K 0
NEWNFSnode 0 0K 0
NFSCL lck 0 0K 0
ice-resmgr 0 0K 0
ice-osdep 0 0K 0
ice 0 0K 0
iavf 0 0K 0
axgbe 0 0K 0
NFSCL lckown 0 0K 0
NFSCL client 0 0K 0
NFSCL deleg 0 0K 0
NFSCL open 0 0K 0
NFSCL owner 0 0K 0
NFS fh 0 0K 0
NFS req 0 0K 0
NFSD usrgroup 0 0K 0
NFSD string 0 0K 0
xen_intr 0 0K 0
NFSD V4lock 0 0K 0
NFSD V4state 0 0K 0
xen_hvm 0 0K 0
legacydrv 0 0K 0
bounce 0 0K 0
busdma 0 0K 0
qpidrv 0 0K 0
NFSD srvcache 0 0K 0
dmar_idpgtbl 0 0K 0
dmar_dom 0 0K 0
dmar_ctx 0 0K 0
msdosfs_fat 0 0K 0
msdosfs_mount 0 0K 0
msdosfs_node 0 0K 0
isci 0 0K 0
iommu_dmamap 0 0K 0
hyperv_socket 0 0K 0
bxe_ilt 0 0K 0
xenbus 0 0K 0
DEVFS4 0 0K 0
vm_fictitious 0 0K 0
DEVFS2 0 0K 0
gntdev 0 0K 0
privcmd_dev 0 0K 0
evtchn_dev 0 0K 0
xenstore 0 0K 0
scsi_pass 0 0K 0
ciss_data 0 0K 0
xnb 0 0K 0
xen_acpi 0 0K 0
xbbd 0 0K 0
UMAHash 0 0K 0
xbd 0 0K 0
Balloon 0 0K 0
vm_pgdata 0 0K 0
jblocks 0 0K 0
savedino 0 0K 9252
sentinel 0 0K 0
jfsync 0 0K 0
jtrunc 0 0K 0
sbdep 0 0K 18
jsegdep 0 0K 0
jseg 0 0K 0
jfreefrag 0 0K 0
jfreeblk 0 0K 0
jnewblk 0 0K 0
jmvref 0 0K 0
jremref 0 0K 0
jaddref 0 0K 0
freedep 0 0K 0
freefrag 0 0K 1
allocindir 0 0K 0
indirdep 0 0K 10
allocdirect 0 0K 0
ufs_trim 0 0K 0
mactemp 0 0K 0
audit_trigger 0 0K 0
audit_pipe_presel 0 0K 0
audit_pipeent 0 0K 0
audit_pipe 0 0K 0
audit_evname 0 0K 0
audit_bsm 0 0K 0
audit_gidset 0 0K 0
audit_text 0 0K 0
audit_path 0 0K 0
audit_data 0 0K 0
audit_cred 0 0K 0
sysmouse 0 0K 0
vtfont 0 0K 0
BACKLIGHT 0 0K 0
ath_hal 0 0K 0
athdev 0 0K 0
ata_pci 0 0K 0
ata_dma 0 0K 0
ata_generic 0 0K 0
pvscsi 0 0K 0
scsi_da 0 0K 69
ata_da 0 0K 0
scsi_ch 0 0K 0
scsi_cd 0 0K 0
ktls_ocf 0 0K 0
AHCI driver 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5E_TLS_RX 0 0K 0
MLX5EEPROM 0 0K 0
MLX5E_TLS 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EN 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5DUMP 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
simple_attr 0 0K 0
seq_file 0 0K 0
lkpiskb 0 0K 0
radix 0 0K 0
idr 0 0K 0
lkpindev 0 0K 0
lkpifw 0 0K 0
lkpi80211 0 0K 0
NLM 0 0K 0
ipsec-spdcache 0 0K 0
ipsec-reg 0 0K 0
ipsec-misc 0 0K 0
ipsecrequest 0 0K 0
ip6opt 0 0K 3
ip6_msource 0 0K 0
ip6_moptions 0 0K 0
in6_mfilter 0 0K 0
frag6 0 0K 0
tcplog 0 0K 0
tcp_hwpace 0 0K 0
USBdev 0 0K 0
USB 0 0K 0
LRO 0 0K 0
ip_msource 0 0K 0
ip_moptions 0 0K 41
in_mfilter 0 0K 0
ipid 0 0K 0
80211scan 0 0K 0
80211ratectl 0 0K 0
80211power 0 0K 0
80211nodeie 0 0K 0
80211node 0 0K 0
80211mesh_gt 0 0K 0
80211mesh_rt 0 0K 0
80211perr 0 0K 0
80211prep 0 0K 0
80211preq 0 0K 0
80211dfs 0 0K 0
80211crypto 0 0K 0
80211vap 0 0K 0
iflib 0 0K 0
vlan 0 0K 0
gif 0 0K 0
ifdescr 0 0K 0
zlib 0 0K 0
fadvise 0 0K 0
VN POLL 0 0K 0
agp 0 0K 0
statfs 0 0K 11688
namei_tracker 0 0K 0
export_host 0 0K 0
cl_savebuf 0 0K 2
nvme_da 0 0K 0
acpipwr 0 0K 0
acpi_perf 0 0K 0
twsbuf 0 0K 0
twe_commands 0 0K 0
tcp_log_dev 0 0K 1667
midi buffers 0 0K 0
mixer 0 0K 0
ac97 0 0K 0
hdacc 0 0K 0
hdac 0 0K 0
hdaa 0 0K 0
acpicmbat 0 0K 0
SIIS driver 0 0K 0
CAM CCB 0 0K 523
biobuf 0 0K 0
lio 0 0K 0
acl 0 0K 0
mbuf_tag 0 0K 0
ktls 0 0K 0
PUC 0 0K 0
ppbusdev 0 0K 0
agtiapi_MemAlloc malloc 0 0K 0
osti_cacheable 0 0K 0
tempbuff 0 0K 0
tempbuff 0 0K 0
ag_tgt_map_t malloc 0 0K 0
ag_slr_map_t malloc 0 0K 0
lDevFlags * malloc 0 0K 0
tiDeviceHandle_t * malloc 0 0K 0
ag_portal_data_t malloc 0 0K 0
ag_device_t malloc 0 0K 0
STLock malloc 0 0K 0
CCB List 0 0K 0
sr_iov 0 0K 0
OCS 0 0K 0
OCS 0 0K 0
nvme 0 0K 0
nvd 0 0K 0
netmap 0 0K 0
mwldev 0 0K 0
MVS driver 0 0K 0
CAM ccb queue 0 0K 0
accf 0 0K 0
pts 0 0K 0
iov 0 0K 24047
ioctlops 0 0K 119
eventfd 0 0K 156
Witness 0 0K 0
stack 0 0K 0
mrsasbuf 0 0K 0
mpt_user 0 0K 0
mps_user 0 0K 0
MPSSAS 0 0K 0
mps 0 0K 0
sbuf 0 0K 288
mpr_user 0 0K 0
firmware 0 0K 0
compressor 0 0K 0
MPRSAS 0 0K 0
SWAP 0 0K 0
mpr 0 0K 0
mfibuf 0 0K 0
sysctltmp 0 0K 821
sysctl 0 0K 3
md_sectors 0 0K 0
ekcd 0 0K 0
dumper 0 0K 0
sendfile 0 0K 0
rctl 0 0K 0
md_disk 0 0K 0
malodev 0 0K 0
LED 0 0K 0
ix_sriov 0 0K 0
cache 0 0K 0
aacraidcam 0 0K 0
prison_racct 0 0K 0
Fail Points 0 0K 0
sigio 0 0K 1
filedesc_to_leader 0 0K 0
pwd 0 0K 0
tty console 0 0K 0
ix 0 0K 0
ipsbuf 0 0K 0
aacraid_buf 0 0K 0
aaccam 0 0K 0
boottrace 0 0K 0
aacbuf 0 0K 0
zstd 0 0K 0
XZ_DEC 0 0K 0
nvlist 0 0K 0
SCSI ENC 0 0K 0
SCSI sa 0 0K 0
isofs_node 0 0K 0
isofs_mount 0 0K 0
tr_raid5_data 0 0K 0
tr_raid1e_data 0 0K 0
tr_raid1_data 0 0K 0
tr_raid0_data 0 0K 0
tr_concat_data 0 0K 0
md_sii_data 0 0K 0
md_promise_data 0 0K 0
md_nvidia_data 0 0K 0
md_jmicron_data 0 0K 0
md_intel_data 0 0K 0
md_ddf_data 0 0K 0
raid_data 0 0K 72
geom_flashmap 0 0K 0
tmpfs dir 0 0K 0
tmpfs name 0 0K 0
tmpfs mount 0 0K 0
tmpfs extattr 0 0K 0
NFS FHA 0 0K 0
newnfsmnt 0 0K 0
newnfsclient_req 0 0K 0
db> show uma
Zone Size Used Free Requests Sleeps Bucket Total Mem XFree
mbuf_jumbo_page 4096 8320 1078 1819765 0 254 38494208 0
RADIX NODE 144 18928 359 270798 0 63 2777328 0
mbuf 256 9537 636 2953769 0 254 2604288 0
sctp_asoc 2256 714 306 5875 0 254 2301120 0
tcp_log 416 16 5321 57304 0 254 2220192 0
pbuf 2624 0 794 0 0 2 2083456 0
malloc-2048 2048 787 69 19489 0 8 1753088 0
BUF TRIE 144 200 11560 895 0 62 1693440 0
malloc-384 384 4149 21 4151 0 30 1601280 0
mbuf_cluster 2048 762 0 762 0 254 1560576 0
sctp_ep 1208 785 485 19463 0 254 1534160 0
malloc-128 128 11732 141 13245 0 126 1519744 0
malloc-4096 4096 331 3 496 0 2 1368064 0
UMA Slabs 0 112 11457 21 11457 0 126 1285536 0
vmem btag 56 19748 91 19748 0 254 1110984 0
sctp_raddr 736 724 552 15185 0 254 939136 0
malloc-384 384 754 1346 11697 0 30 806400 0
malloc-1024 1024 717 51 5878 0 16 786432 0
socket 960 117 647 27565 0 254 733440 0
VM OBJECT 264 2374 146 248875 0 30 665280 0
malloc-384 384 1577 103 27304 0 30 645120 0
FFS inode 1160 514 32 12037 0 8 633360 0
malloc-256 256 201 2034 10135 0 62 572160 0
malloc-256 256 1449 726 42570 0 62 556800 0
256 Bucket 2048 224 18 6661 0 8 495616 0
malloc-128 128 1661 1501 12568 0 126 404736 0
ertt_txseginfo 40 1 9998 79250 0 254 399960 0
lkpimm 168 1 2327 1 0 62 391104 0
lkpicurr 168 2 2326 2 0 62 391104 0
malloc-4096 4096 78 6 12440 0 2 344064 0
THREAD 1824 166 21 12681 0 8 341088 0
MAP ENTRY 96 2908 368 673712 0 126 314496 0
tcp_bbr_map 128 0 2418 21678 0 126 309504 0
VNODE 448 555 111 12080 0 30 298368 0
malloc-64 64 4273 326 5205 0 254 294336 0
malloc-65536 65536 4 0 4 0 1 262144 0
malloc-16 16 14569 181 28361 0 254 236000 0
DEVCTL 1024 0 220 152 0 0 225280 0
malloc-256 256 47 763 12407 0 62 207360 0
malloc-65536 65536 1 2 137 0 1 196608 0
malloc-16384 16384 8 4 11683 0 1 196608 0
mbuf_packet 256 163 599 35029 0 254 195072 0
sctp_chunk 152 716 558 10056 0 254 193648 0
malloc-32 32 5322 600 23891 0 254 189504 0
UMA Zones 768 239 0 239 0 16 183552 0
FPU_save_area 832 168 48 23901 0 16 179712 0
malloc-128 128 1141 254 31894 0 126 178560 0
malloc-2048 2048 6 66 1038 0 8 147456 0
malloc-1024 1024 119 25 247 0 16 147456 0
S VFS Cache 104 1017 387 13078 0 126 146016 0
FFS2 dinode 256 514 56 12037 0 62 145920 0
VMSPACE 2560 40 14 12390 0 4 138240 0
128 Bucket 1024 96 35 3204 0 16 134144 0
malloc-65536 65536 0 2 182 0 1 131072 0
malloc-65536 65536 2 0 2 0 1 131072 0
malloc-65536 65536 0 2 8 0 1 131072 0
unpcb 256 20 490 2139 0 254 130560 0
malloc-256 256 369 141 12922 0 62 130560 0
PROC 1368 60 28 12409 0 8 120384 0
ksiginfo 112 71 973 11362 0 126 116928 0
tcp_inpcb 1296 6 84 4838 0 8 116640 0
malloc-4096 4096 27 1 30 0 2 114688 0
pipe 728 23 131 746 0 16 112112 0
64 Bucket 512 119 81 4874 0 30 102400 0
malloc-32768 32768 1 2 121 0 1 98304 0
filedesc0 1072 61 23 12410 0 8 90048 0
UMA Kegs 384 225 8 225 0 30 89472 0
sctp_readq 152 0 520 484 0 254 79040 0
malloc-32 32 1796 598 26763 0 254 76608 0
malloc-8192 8192 7 2 10 0 1 73728 0
g_bio 408 0 180 6566 0 30 73440 0
malloc-64 64 839 232 22075 0 254 68544 0
malloc-64 64 512 559 1646 0 254 68544 0
malloc-65536 65536 1 0 1 0 1 65536 0
malloc-65536 65536 1 0 1 0 1 65536 0
malloc-256 256 91 164 24549 0 62 65280 0
32 Bucket 256 131 124 9073 0 62 65280 0
sctp_stream_msg_out 112 0 540 1495 0 254 60480 0
ripcb 424 5 121 631 0 30 53424 0
malloc-64 64 428 391 196520 0 254 52416 0
Files 80 297 353 50621 0 126 52000 0
malloc-128 128 121 282 11800 0 126 51584 0
malloc-128 128 161 242 23789 0 126 51584 0
DIRHASH 1024 35 13 35 0 16 49152 0
NAMEI 1024 0 48 65163 0 16 49152 0
malloc-16384 16384 3 0 3 0 1 49152 0
malloc-8192 8192 6 0 6 0 1 49152 0
malloc-8192 8192 4 2 109 0 1 49152 0
malloc-1024 1024 6 42 1669 0 16 49152 0
malloc-512 512 2 94 3723 0 30 49152 0
tcp_rack_pcb 896 0 54 1406 0 16 48384 0
tcp_bbr_pcb 832 0 54 2164 0 16 44928 0
syncache 168 0 264 4 0 254 44352 0
udplite_inpcb 456 0 96 204 0 30 43776 0
udp_inpcb 456 6 90 253 0 30 43776 0
clpbuf 2624 0 16 40 0 16 41984 0
malloc-8192 8192 4 1 30 0 1 40960 0
pcpu-8 8 4691 429 5050 0 254 40960 0
da_ccb 544 0 70 1766 0 16 38080 0
PWD 32 22 1112 11605 0 254 36288 0
malloc-64 64 100 467 12769 0 254 36288 0
malloc-64 64 173 394 13094 0 254 36288 0
malloc-64 64 8 559 65 0 254 36288 0
malloc-64 64 41 526 204 0 254 36288 0
malloc-16 16 1519 731 33929 0 254 36000 0
malloc-16 16 1690 560 12025 0 254 36000 0
8 Bucket 80 72 378 3853 0 126 36000 0
malloc-128 128 22 257 11674 0 126 35712 0
malloc-128 128 58 221 3750 0 126 35712 0
malloc-128 128 93 186 919 0 126 35712 0
routing nhops 256 27 108 34 0 62 34560 0
ttyoutq 256 72 63 160 0 62 34560 0
malloc-256 256 47 88 2004 0 62 34560 0
malloc-256 256 59 76 12267 0 62 34560 0
malloc-256 256 8 127 332 0 62 34560 0
TURNSTILE 136 188 64 188 0 62 34272 0
malloc-32768 32768 1 0 1 0 1 32768 0
malloc-32768 32768 1 0 1 0 1 32768 0
malloc-16384 16384 2 0 12 0 1 32768 0
malloc-2048 2048 2 14 14 0 8 32768 0
malloc-2048 2048 9 7 14 0 8 32768 0
malloc-2048 2048 10 6 74 0 8 32768 0
malloc-2048 2048 0 16 50 0 8 32768 0
malloc-2048 2048 1 15 207 0 8 32768 0
malloc-1024 1024 3 29 43 0 16 32768 0
malloc-1024 1024 6 26 180 0 16 32768 0
malloc-1024 1024 16 16 20 0 16 32768 0
malloc-1024 1024 18 14 18 0 16 32768 0
malloc-1024 1024 1 31 9 0 16 32768 0
malloc-512 512 1 63 119 0 30 32768 0
malloc-512 512 11 53 40 0 30 32768 0
malloc-512 512 2 62 54 0 30 32768 0
malloc-512 512 11 53 60 0 30 32768 0
pcpu-64 64 497 15 497 0 254 32768 0
KNOTE 160 28 172 131662 0 62 32000 0
ttyinq 160 135 65 300 0 62 32000 0
tcp_rack_map 120 0 264 2026 0 126 31680 0
cpuset 104 7 272 7 0 126 29016 0
sctp_laddr 48 0 588 3591 0 254 28224 0
tcp_inpcb ports 32 3 879 3215 0 254 28224 0
16 Bucket 144 75 121 407 0 62 28224 0
4 Bucket 48 6 582 273 0 254 28224 0
malloc-8192 8192 0 3 4 0 1 24576 0
malloc-4096 4096 4 2 632 0 2 24576 0
PGRP 88 35 241 49 0 126 24288 0
rl_entry 40 51 555 51 0 254 24240 0
rtentry 168 30 114 34 0 62 24192 0
itimer 352 0 66 3 0 30 23232 0
malloc-384 384 20 40 365 0 30 23040 0
malloc-384 384 4 56 25 0 30 23040 0
malloc-384 384 23 37 25 0 30 23040 0
malloc-384 384 1 59 34 0 30 23040 0
SLEEPQUEUE 88 188 68 188 0 126 22528 0
hostcache 64 1 314 1 0 254 20160 0
udplite_inpcb ports 32 0 630 2 0 254 20160 0
udp_inpcb ports 32 3 627 36 0 254 20160 0
ertt 72 6 274 4838 0 126 20160 0
malloc-32 32 39 591 219 0 254 20160 0
malloc-32 32 156 474 7066 0 254 20160 0
malloc-32 32 17 613 523 0 254 20160 0
malloc-32 32 100 530 150 0 254 20160 0
malloc-32 32 52 578 108 0 254 20160 0
malloc-32 32 21 609 2849 0 254 20160 0
2 Bucket 32 57 573 1342 0 254 20160 0
Mountpoints 2752 2 5 2 0 4 19264 0
epoch_record pcpu 256 4 60 4 0 62 16384 0
malloc-16384 16384 1 0 1 0 1 16384 0
malloc-16384 16384 1 0 1 0 1 16384 0
malloc-16384 16384 1 0 1 0 1 16384 0
malloc-8192 8192 2 0 2 0 1 16384 0
malloc-8192 8192 0 2 9 0 1 16384 0
malloc-8192 8192 2 0 2 0 1 16384 0
malloc-4096 4096 1 3 11689 0 2 16384 0
malloc-2048 2048 4 4 4 0 8 16384 0
malloc-512 512 0 32 1 0 30 16384 0
malloc-512 512 0 32 1 0 30 16384 0
malloc-512 512 1 31 1 0 30 16384 0
SMR CPU 32 7 504 7 0 254 16352 0
vtnet_tx_hdr 24 0 668 916557 0 254 16032 0
AIO 208 0 76 6 0 62 15808 0
kenv 258 15 45 1050 0 30 15480 0
mqnode 416 3 33 3 0 30 14976 0
vmem 1856 1 7 1 0 8 14848 0
SMR SHARED 24 7 504 7 0 254 12264 0
malloc-16 16 54 696 13076 0 254 12000 0
malloc-16 16 67 683 28141 0 254 12000 0
malloc-16 16 41 709 1289 0 254 12000 0
malloc-16 16 8 742 8 0 254 12000 0
malloc-16 16 18 732 26497 0 254 12000 0
AIOCB 552 0 21 5 0 16 11592 0
malloc-4096 4096 1 1 1 0 2 8192 0
malloc-4096 4096 1 1 2 0 2 8192 0
pcpu-16 16 7 249 7 0 254 4096 0
UMA Slabs 1 176 9 13 9 0 62 3872 0
KMAP ENTRY 96 12 27 14 0 0 3744 0
FFS1 dinode 128 0 0 0 0 126 0 0
ada_ccb 272 0 0 0 0 30 0 0
swblk 136 0 0 0 0 62 0 0
swpctrie 144 0 0 0 0 62 0 0
pf state scrubs
---
This report is generated by a bot. It may contain errors.
See https://goo.gl/tpsmEJ for more information about syzbot.
syzbot engineers can be reached at syzk...@googlegroups.com.
syzbot will keep track of this issue. See:
https://goo.gl/tpsmEJ#status for how to communicate with syzbot.
syzbot found the following issue on:
HEAD commit: 99187c3a44c2 prison_check_nfsd: Add check for enforce_stat..
git tree: freebsd-src
console output: https://syzkaller.appspot.com/x/log.txt?x=110a158b480000
dashboard link: https://syzkaller.appspot.com/bug?extid=eb888d3a5a6c54413de5
Unfortunately, I don't have any reproducer for this issue yet.
IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+eb888d...@syzkaller.appspotmail.com
Fatal trap 12: page fault while in kernel mode
cpuid = 0; apic id = 00
fault virtual address = 0x1dc
fault code = supervisor read data, page not present
instruction pointer = 0x20:0xffffffff84b7ef4c
stack pointer = 0x28:0xfffffe00077fed90
frame pointer = 0x28:0xfffffe00077fedd0
code segment = base 0x0, limit 0xfffff, type 0x1b
= DPL 0, pres 1, long 1, def32 0, gran 1
processor eflags = interrupt enabled, resume, IOPL = 0
current process = 12 (swi1: netisr 0)
rdi: 1dc rsi: fffffe009035ee1b rdx: 0
rcx: fffffe00033eee30 r8: fffff78000000000 r9: 20000000000
rax: fffffe00033eee30 rbx: 0 rbp: fffffe00077fedd0
r10: 0 r11: 0 r12: fffffe009035ee18
r13: fffffe00995dea70 r14: fffffe009035ee00 r15: 4
trap number = 12
panic: page fault
cpuid = 0
time = 1675334569
KDB: stack backtrace:
db_trace_self_wrapper() at db_trace_self_wrapper+0xc7/frame 0xfffffe00077fe570
kdb_backtrace() at kdb_backtrace+0xd3/frame 0xfffffe00077fe6d0
vpanic() at vpanic+0x254/frame 0xfffffe00077fe7b0
panic() at panic+0xb5/frame 0xfffffe00077fe870
trap_fatal() at trap_fatal+0x7ed/frame 0xfffffe00077fe990
trap_pfault() at trap_pfault+0x182/frame 0xfffffe00077fead0
trap() at trap+0x5e1/frame 0xfffffe00077fecc0
calltrap() at calltrap+0x8/frame 0xfffffe00077fecc0
--- trap 0xc, rip = 0xffffffff84b7ef4c, rsp = 0xfffffe00077fed90, rbp = 0xfffffe00077fedd0 ---
sctp_notify_stream_reset_tsn() at sctp_notify_stream_reset_tsn+0x17c/frame 0xfffffe00077fedd0
sctp_handle_stream_reset_response() at sctp_handle_stream_reset_response+0x1431/frame 0xfffffe00077feef0
sctp_handle_stream_reset() at sctp_handle_stream_reset+0xa17/frame 0xfffffe00077ff2f0
sctp_process_control() at sctp_process_control+0x1bf8/frame 0xfffffe00077ff7c0
sctp_common_input_processing() at sctp_common_input_processing+0xb35/frame 0xfffffe00077ffa20
sctp_input_with_port() at sctp_input_with_port+0x57d/frame 0xfffffe00077ffbb0
sctp_input() at sctp_input+0x32/frame 0xfffffe00077ffbd0
ip_input() at ip_input+0x7c5/frame 0xfffffe00077ffcf0
swi_net() at swi_net+0x2ed/frame 0xfffffe00077ffd90
ithread_loop() at ithread_loop+0x4ee/frame 0xfffffe00077ffef0
fork_exit() at fork_exit+0xd0/frame 0xfffffe00077fff30
fork_trampoline() at fork_trampoline+0xe/frame 0xfffffe00077fff30
--- trap 0, rip = 0, rsp = 0, rbp = 0 ---
KDB: enter: panic
[ thread pid 12 tid 100029 ]
Stopped at kdb_enter+0x6b: movq $0,0x276a1ca(%rip)
db> set $lines = 0
db> set $maxwidth = 0
db> show registers
cs 0x20
ds 0x3b
es 0x3b
fs 0x13
gs 0x1b
ss 0x28
rax 0x12
rcx 0xffffffff817414c6 printf+0xf6
rdx 0x1
rbx 0
rsp 0xfffffe00077fe6b0
rbp 0xfffffe00077fe6d0
rsi 0
rdi 0xffffffff81741528 printf+0x158
r8 0
r9 0xffffffff
r10 0
r11 0
r12 0
r13 0xfffffe0007a9e3a0
r14 0xffffffff82bb76e0 .str.26
r15 0xffffffff82bb76e0 .str.26
rip 0xffffffff817310cb kdb_enter+0x6b
rflags 0x46
kdb_enter+0x6b: movq $0,0x276a1ca(%rip)
db> show proc
Process 12 (intr) at 0xfffffe00541db560:
state: NORMAL
uid: 0 gids: 0
parent: pid 0 at 0xffffffff83e3e8a0
ABI: null
flag: 0x10000284 flag2: 0
reaper: 0xffffffff83e3e8a0 reapsubtree: 12
sigparent: 20
vmspace: 0xffffffff83e3f840
(map 0xffffffff83e3f840)
(map.pmap 0xffffffff83e3f900)
(pmap 0xffffffff83e3f970)
threads: 22
100011 I [swi5: fast taskq]
100018 I [swi6: task queue]
100019 I [swi6: Giant taskq]
100029 Run CPU 0 [swi1: netisr 0]
100032 I [swi1: hpts]
100033 I [swi1: hpts]
100046 I [irq24: virtio_pci0]
100047 I [irq25: virtio_pci0]
100048 I [irq26: virtio_pci0]
100049 I [irq27: virtio_pci0]
100050 I [irq28: virtio_pci1]
100051 I [irq29: virtio_pci1]
100052 I [irq30: virtio_pci1]
100053 I [irq31: virtio_pci1]
100054 I [irq32: virtio_pci1]
100059 I [irq33: virtio_pci2]
100060 I [irq34: virtio_pci2]
100061 I [irq35: virtio_pci2]
100063 I [irq1: atkbd0]
100064 I [irq12: psm0]
100065 I [swi0: uart uart++]
100069 I [swi1: pf send]
db> ps
pid ppid pgrp uid state wmesg wchan cmd
12409 778 778 0 R (threaded) syz-executor.1
111405 Run CPU 1 syz-executor.1
112681 S connec 0xfffffe0099c290da syz-executor.1
12408 777 777 0 R (threaded) syz-executor.0
112676 RunQ syz-executor.0
112678 S uwait 0xfffffe0099684a80 syz-executor.0
112679 S connec 0xfffffe0058a62c1a syz-executor.0
12406 795 795 0 R (threaded) syz-executor.3
112640 S nanslp 0xffffffff83e689c1 syz-executor.3
112672 RunQ syz-executor.3
112680 S uwait 0xfffffe0099bd5280 syz-executor.3
12404 788 788 0 R (threaded) syz-executor.2
112488 RunQ syz-executor.2
112670 S connec 0xfffffe0099bee85a syz-executor.2
112677 S uwait 0xfffffe0099b8a580 syz-executor.2
8992 1 8992 65 Ss select 0xfffffe0099bbadc0 dhclient
7129 1 7129 0 Ss select 0xfffffe0099ce93c0 dhclient
7126 1 7126 0 Ss select 0xfffffe0099cbc840 dhclient
7107 1 7107 65 Ss select 0xfffffe0099ce9540 dhclient
5304 1 5304 0 Ss select 0xfffffe00996d9240 dhclient
5301 1 5301 0 Ss select 0xfffffe0099ce9b40 dhclient
5282 1 5282 65 Ss select 0xfffffe0099ce8dc0 dhclient
3525 1 3525 0 Ss select 0xfffffe00997d8b40 dhclient
3522 1 3522 0 Ss select 0xfffffe00997d8cc0 dhclient
3495 1 3495 65 Ss select 0xfffffe0099a64740 dhclient
2889 0 0 0 DL aiordy 0xfffffe008fe1e000 [aiod4]
2888 0 0 0 DL aiordy 0xfffffe00926a7018 [aiod3]
2887 0 0 0 DL aiordy 0xfffffe00926a5560 [aiod2]
2886 0 0 0 DL aiordy 0xfffffe00926a7570 [aiod1]
808 1 808 0 Ss select 0xfffffe00578822c0 dhclient
805 1 805 0 Ss select 0xfffffe00578821c0 dhclient
795 774 795 0 Ss nanslp 0xffffffff83e689c1 syz-executor.3
788 774 788 0 Ss nanslp 0xffffffff83e689c1 syz-executor.2
778 774 778 0 Ss nanslp 0xffffffff83e689c1 syz-executor.1
777 774 777 0 Rs syz-executor.0
774 772 772 0 S (threaded) syz-fuzzer
100098 S uwait 0xfffffe0057318800 syz-fuzzer
100117 S uwait 0xfffffe0057884280 syz-fuzzer
100118 S uwait 0xfffffe0057884380 syz-fuzzer
100119 S wait 0xfffffe008fe1f560 syz-fuzzer
100120 S uwait 0xfffffe000798c500 syz-fuzzer
100121 S uwait 0xfffffe0057882f00 syz-fuzzer
100122 S wait 0xfffffe008fe1f560 syz-fuzzer
100123 S wait 0xfffffe008fe1f560 syz-fuzzer
100124 S wait 0xfffffe008fe1f560 syz-fuzzer
100125 S uwait 0xfffffe0092595a00 syz-fuzzer
100141 S uwait 0xfffffe000798cd80 syz-fuzzer
100142 S kqread 0xfffffe005406f200 syz-fuzzer
772 770 772 0 Ss pause 0xfffffe008fe1f0b8 csh
770 688 770 0 Ss select 0xfffffe00578833c0 sshd
756 1 756 0 Ss+ ttyin 0xfffffe00540668b0 getty
755 1 755 0 Ss+ ttyin 0xfffffe005794fcb0 getty
754 1 754 0 Ss+ ttyin 0xfffffe00579500b0 getty
753 1 753 0 Ss+ ttyin 0xfffffe00579504b0 getty
752 1 752 0 Ss+ ttyin 0xfffffe00579508b0 getty
751 1 751 0 Ss+ ttyin 0xfffffe0057950cb0 getty
750 1 750 0 Ss+ ttyin 0xfffffe00579520b0 getty
749 1 749 0 Ss+ ttyin 0xfffffe00579524b0 getty
748 1 748 0 Ss+ ttyin 0xfffffe00579528b0 getty
692 1 692 0 Ss nanslp 0xffffffff83e689c0 cron
688 1 688 0 Ss select 0xfffffe0092595cc0 sshd
501 1 501 0 Rs syslogd
430 1 430 0 Ss select 0xfffffe0092596040 devd
429 1 429 65 Ss select 0xfffffe0092595dc0 dhclient
344 1 344 0 Ss select 0xfffffe0092595ec0 dhclient
341 1 341 0 Ss select 0xfffffe000798cac0 dhclient
17 0 0 0 DL vlruwt 0xfffffe00541dd570 [vnlru]
16 0 0 0 DL syncer 0xffffffff83f8dea0 [syncer]
15 0 0 0 DL (threaded) [bufdaemon]
100079 D psleep 0xffffffff83f8c4c0 [bufdaemon]
100082 D - 0xffffffff83212180 [bufspacedaemon-0]
100094 D sdflush 0xfffffe00589348e8 [/ worker]
9 0 0 0 DL psleep 0xffffffff83fc3700 [vmdaemon]
8 0 0 0 DL (threaded) [pagedaemon]
100077 D psleep 0xffffffff83fb75b8 [dom0]
100080 D launds 0xffffffff83fb75c4 [laundry: dom0]
100081 D umarcl 0xffffffff81e9dd50 [uma]
7 0 0 0 DL - 0xffffffff83c24e48 [rand_harvestq]
6 0 0 0 DL pftm 0xffffffff848a02e0 [pf purge]
5 0 0 0 DL waiting 0xffffffff84bbcf80 [sctp_iterator]
4 0 0 0 DL (threaded) [cam]
100044 D - 0xffffffff83ac7340 [doneq0]
100045 D - 0xffffffff83ac72c0 [async]
100076 D - 0xffffffff83ac7140 [scanner]
14 0 0 0 DL seqstat 0xfffffe0007ba8088 [sequencer 00]
3 0 0 0 DL (threaded) [crypto]
100040 D crypto_ 0xffffffff83fb2d20 [crypto]
100041 D crypto_ 0xfffffe0054081e30 [crypto returns 0]
100042 D crypto_ 0xfffffe0054081e80 [crypto returns 1]
13 0 0 0 DL (threaded) [geom]
100035 D - 0xffffffff83e3de80 [g_event]
100036 D - 0xffffffff83e3dea0 [g_up]
100037 D - 0xffffffff83e3dec0 [g_down]
2 0 0 0 WL (threaded) [clock]
100030 I [clock (0)]
100031 I [clock (1)]
12 0 0 0 RL (threaded) [intr]
100011 I [swi5: fast taskq]
100018 I [swi6: task queue]
100019 I [swi6: Giant taskq]
100029 Run CPU 0 [swi1: netisr 0]
100032 I [swi1: hpts]
100033 I [swi1: hpts]
100046 I [irq24: virtio_pci0]
100047 I [irq25: virtio_pci0]
100048 I [irq26: virtio_pci0]
100049 I [irq27: virtio_pci0]
100050 I [irq28: virtio_pci1]
100051 I [irq29: virtio_pci1]
100052 I [irq30: virtio_pci1]
100053 I [irq31: virtio_pci1]
100054 I [irq32: virtio_pci1]
100059 I [irq33: virtio_pci2]
100060 I [irq34: virtio_pci2]
100061 I [irq35: virtio_pci2]
100063 I [irq1: atkbd0]
100064 I [irq12: psm0]
100065 I [swi0: uart uart++]
100069 I [swi1: pf send]
11 0 0 0 RL (threaded) [idle]
100003 CanRun [idle: cpu0]
100004 CanRun [idle: cpu1]
1 0 1 0 SLs wait 0xfffffe00541dc010 [init]
10 0 0 0 DL audit_w 0xffffffff83fb38a0 [audit]
0 0 0 0 DLs (threaded) [kernel]
100000 D swapin 0xffffffff83e3e8a0 [swapper]
100005 D - 0xfffffe0054070e00 [if_config_tqg_0]
100006 D - 0xfffffe0054070d00 [softirq_0]
100007 D - 0xfffffe0054070c00 [softirq_1]
100008 D - 0xfffffe0054070b00 [if_io_tqg_0]
100009 D - 0xfffffe0054070a00 [if_io_tqg_1]
100010 D - 0xfffffe00085f4000 [thread taskq]
100012 D - 0xfffffe00085f3d00 [kqueue_ctx taskq]
100013 D - 0xfffffe00085f3c00 [pci_hp taskq]
100014 D - 0xfffffe00085f3b00 [inm_free taskq]
100015 D - 0xfffffe00085f3a00 [aiod_kick taskq]
100016 D - 0xfffffe00085f3900 [in6m_free taskq]
100017 D - 0xfffffe00085f3800 [deferred_unmount ta]
100020 D - 0xfffffe00085f3500 [linuxkpi_irq_wq]
100021 D - 0xfffffe00085f3400 [linuxkpi_short_wq_0]
100022 D - 0xfffffe00085f3400 [linuxkpi_short_wq_1]
100023 D - 0xfffffe00085f3400 [linuxkpi_short_wq_2]
100024 D - 0xfffffe00085f3400 [linuxkpi_short_wq_3]
100025 D - 0xfffffe00085f3300 [linuxkpi_long_wq_0]
100026 D - 0xfffffe00085f3300 [linuxkpi_long_wq_1]
100027 D - 0xfffffe00085f3300 [linuxkpi_long_wq_2]
100028 D - 0xfffffe00085f3300 [linuxkpi_long_wq_3]
100034 D - 0xfffffe00085f3200 [firmware taskq]
100038 D - 0xfffffe00085f3000 [crypto_0]
100039 D - 0xfffffe00085f3000 [crypto_1]
100055 D - 0xfffffe005700d000 [vtnet0 rxq 0]
100056 D - 0xfffffe005700ce00 [vtnet0 txq 0]
100057 D - 0xfffffe005700cd00 [vtnet0 rxq 1]
100058 D - 0xfffffe005700cc00 [vtnet0 txq 1]
100062 D vtbslp 0xfffffe0057331e00 [virtio_balloon]
100066 D - 0xffffffff82bbd8c1 [deadlkres]
100070 D - 0xfffffe00085f4100 [mca taskq]
100072 D - 0xfffffe0057932400 [acpi_task_0]
100073 D - 0xfffffe0057932400 [acpi_task_1]
100074 D - 0xfffffe0057932400 [acpi_task_2]
100075 D - 0xfffffe00085f2d00 [CAM taskq]
db> show all locks
Process 12406 (syz-executor.3) thread 0xfffffe0092b4d1e0 (112672)
exclusive sleep mutex sctp-create (inp_create) r = 0 (0xfffffe009a5c7db0) locked @ /syzkaller/managers/main/kernel/sys/netinet/sctp_usrreq.c:6981
Process 501 (syslogd) thread 0xfffffe008fe15020 (100106)
exclusive lockmgr ufs (ufs) r = 0 (0xfffffe00925ba5b0) locked @ /syzkaller/managers/main/kernel/sys/kern/vfs_syscalls.c:3560
Process 12 (intr) thread 0xfffffe0007a9e3a0 (100029)
exclusive sleep mutex sctp-tcb (tcb) r = 0 (0xfffffe00995df320) locked @ /syzkaller/managers/main/kernel/sys/netinet/sctp_pcb.c:2138
db> show malloc
Type InUse MemUse Requests
pf_hash 5 11524K 5
tcp_hpts 7 4801K 7
devbuf 4216 4323K 4244
pcb 1593 2303K 39002
sysctloid 34753 2047K 34824
vtbuf 24 1968K 46
kobj 330 1320K 493
newblk 10 1027K 12236
vfscache 3 1025K 3
inodedep 666 762K 11608
sctp_stro 714 714K 5875
sctp_atcl 1501 563K 27200
ufs_quota 1 512K 1
vfs_hash 1 512K 1
callout 2 512K 2
intr 4 472K 4
subproc 150 278K 12502
vmem 3 274K 6
acpica 1674 184K 58126
dirrem 656 164K 11525
tidhash 3 141K 3
filedesc 18 137K 23052
pagedep 9 130K 11529
linker 324 130K 353
tfo_ccache 1 128K 1
IP reass 1 128K 1
vnet_data 1 112K 1
DEVFS1 109 109K 126
sem 4 106K 4
sctp_atky 2215 92K 35004
BPF 46 88K 75
freefile 656 82K 11523
bus 1000 82K 5215
mtx_pool 2 72K 2
syncache 1 68K 1
module 513 65K 513
acpitask 1 64K 1
ddb_capture 1 64K 1
umtx 374 47K 374
kdtrace 228 46K 25092
temp 34 33K 3342
DEVFS3 128 32K 138
hostcache 1 32K 1
shm 1 32K 1
sctp_timw 125 32K 125
msg 4 30K 4
gtaskqueue 18 26K 18
sctp_athm 1501 24K 29061
kbdmux 6 24K 6
sctp_map 1428 23K 11750
ifaddr 70 20K 72
DEVFS_RULE 56 20K 56
ufs_mount 4 17K 5
proc 3 17K 3
tty 16 16K 16
ithread 97 16K 97
routetbl 128 16K 411
lltable 47 15K 75
bus-sc 34 15K 1682
eventhandler 154 13K 154
KTRACE 100 13K 100
ifnet 7 13K 7
ether_multi 152 13K 162
kenv 95 12K 95
rman 88 11K 431
GEOM 61 11K 481
CAM queue 5 11K 1528
in6_multi 65 9K 65
UART 12 9K 12
devstat 4 9K 4
ksem 1 8K 1
rpc 2 8K 2
bmsafemap 1 8K 11582
shmfd 1 8K 108
pfs_vncache 1 8K 1
pfs_nodes 20 8K 20
audit_evclass 237 8K 296
taskqueue 63 7K 63
cred 26 7K 229
sglist 5 7K 5
kqueue 63 7K 12414
CAM DEV 3 6K 510
plimit 24 6K 409
ufs_dirhash 24 5K 24
session 35 5K 49
UMA 267 5K 267
pf_ifnet 10 5K 19
DEVFSP 68 5K 268
vt 11 5K 11
memdesc 1 4K 1
MCA 32 4K 32
evdev 4 4K 4
pwddesc 61 4K 12410
acpisem 28 4K 28
lockf 32 4K 54
proc-args 92 4K 13666
hhook 15 4K 17
kcovinfo 52 4K 52
selfd 50 4K 177662
terminal 11 3K 11
select 19 3K 53
clone 9 3K 9
uidinfo 3 3K 8
local_apic 1 2K 1
io_apic 1 2K 1
fpukern_ctx 2 2K 2
ipsec-saq 2 2K 2
ip6ndp 12 2K 13
Unitno 30 2K 49
sctp_ifa 13 2K 14
CAM XPT 22 2K 543
msi 12 2K 12
in_multi 6 2K 8
ipsecpolicy 2 2K 2
acpidev 20 2K 20
tun 7 2K 7
freework 5 2K 11521
sctp_stri 2 1K 3723
NFSD session 1 1K 1
softdep 1 1K 1
mkdir 8 1K 23022
freeblks 4 1K 11520
sahead 1 1K 1
secasvar 1 1K 1
nhops 6 1K 8
vnodemarker 2 1K 40
CAM periph 4 1K 271
ipsec 3 1K 3
sctp_ifn 6 1K 14
mld 6 1K 6
CC Mem 6 1K 4838
igmp 6 1K 6
toponodes 6 1K 6
isadev 6 1K 6
mount 16 1K 89
pci_link 10 1K 10
crypto 4 1K 4
encap_export_host 12 1K 12
procdesc 5 1K 14
inpcbpolicy 17 1K 5926
newdirblk 4 1K 11511
diradd 4 1K 11564
pfil 4 1K 4
cdev 2 1K 2
osd 10 1K 4849
chacha20random 1 1K 1
NFSD lckfile 1 1K 1
NFSD V4client 1 1K 1
DEVFS 9 1K 10
vnodes 1 1K 1
CAM SIM 2 1K 2
feeder 7 1K 7
tcpfunc 3 1K 3
loginclass 3 1K 6
prison 6 1K 6
lkpikmalloc 5 1K 6
soname 8 1K 33223
aesni_data 2 1K 2
cryptodev 2 1K 200
nexusdev 8 1K 8
apmdev 1 1K 1
atkbddev 2 1K 2
CAM dev queue 2 1K 2
netlink 1 1K 1
CAM I/O Scheduler 1 1K 1
CAM path 4 1K 1034
aio 4 1K 4
pmchooks 1 1K 1
filecaps 5 1K 98
sctp_vrf 1 1K 1
vnet 1 1K 1
entropy 2 1K 41
pmc 1 1K 1
acpiintr 1 1K 1
cpus 2 1K 2
vnet_data_free 1 1K 1
Per-cpu 1 1K 1
p1003.1b 1 1K 1
mqdata 0 0K 0
ipcomp 0 0K 0
esp 0 0K 0
ah 0 0K 0
sctp_mcore 0 0K 0
sctp_socko 0 0K 12328
sctp_iter 0 0K 11
sctp_mvrf 0 0K 0
sctp_cpal 0 0K 0
sctp_cmsg 0 0K 0
sctp_stre 0 0K 0
sctp_athi 0 0K 0
sctp_a_it 0 0K 11
sctp_aadr 0 0K 0
pf_table 0 0K 0
pf_rule 0 0K 0
pf_altq 0 0K 0
pf_osfp 0 0K 0
pf_temp 0 0K 0
tcp_do 0 0K 0
tcp_fsb 0 0K 1406
filemon 0 0K 9
NFSCL layrecall 0 0K 0
madt_table 0 0K 2
smartpqi 0 0K 0
NFSCL session 0 0K 0
NFSCL sockreq 0 0K 0
NFSCL devinfo 0 0K 0
ixl 0 0K 0
NFSCL flayout 0 0K 0
NFSCL layout 0 0K 0
NFSD rollback 0 0K 0
NFSCL diroff 0 0K 0
NEWdirectio 0 0K 0
NEWNFSnode 0 0K 0
NFSCL lck 0 0K 0
ice-resmgr 0 0K 0
ice-osdep 0 0K 0
ice 0 0K 0
iavf 0 0K 0
axgbe 0 0K 0
NFSCL lckown 0 0K 0
NFSCL client 0 0K 0
NFSCL deleg 0 0K 0
NFSCL open 0 0K 0
NFSCL owner 0 0K 0
NFS fh 0 0K 0
NFS req 0 0K 0
NFSD usrgroup 0 0K 0
NFSD string 0 0K 0
xen_intr 0 0K 0
NFSD V4lock 0 0K 0
NFSD V4state 0 0K 0
xen_hvm 0 0K 0
legacydrv 0 0K 0
bounce 0 0K 0
busdma 0 0K 0
qpidrv 0 0K 0
NFSD srvcache 0 0K 0
dmar_idpgtbl 0 0K 0
dmar_dom 0 0K 0
dmar_ctx 0 0K 0
msdosfs_fat 0 0K 0
msdosfs_mount 0 0K 0
msdosfs_node 0 0K 0
isci 0 0K 0
iommu_dmamap 0 0K 0
hyperv_socket 0 0K 0
bxe_ilt 0 0K 0
xenbus 0 0K 0
DEVFS4 0 0K 0
vm_fictitious 0 0K 0
DEVFS2 0 0K 0
gntdev 0 0K 0
privcmd_dev 0 0K 0
evtchn_dev 0 0K 0
xenstore 0 0K 0
scsi_pass 0 0K 0
ciss_data 0 0K 0
xnb 0 0K 0
xen_acpi 0 0K 0
xbbd 0 0K 0
UMAHash 0 0K 0
xbd 0 0K 0
Balloon 0 0K 0
vm_pgdata 0 0K 0
jblocks 0 0K 0
savedino 0 0K 9252
sentinel 0 0K 0
jfsync 0 0K 0
jtrunc 0 0K 0
sbdep 0 0K 18
jsegdep 0 0K 0
jseg 0 0K 0
jfreefrag 0 0K 0
jfreeblk 0 0K 0
jnewblk 0 0K 0
jmvref 0 0K 0
jremref 0 0K 0
jaddref 0 0K 0
freedep 0 0K 0
freefrag 0 0K 1
allocindir 0 0K 0
indirdep 0 0K 10
allocdirect 0 0K 0
ufs_trim 0 0K 0
mactemp 0 0K 0
audit_trigger 0 0K 0
audit_pipe_presel 0 0K 0
audit_pipeent 0 0K 0
audit_pipe 0 0K 0
audit_evname 0 0K 0
audit_bsm 0 0K 0
audit_gidset 0 0K 0
audit_text 0 0K 0
audit_path 0 0K 0
audit_data 0 0K 0
audit_cred 0 0K 0
sysmouse 0 0K 0
vtfont 0 0K 0
BACKLIGHT 0 0K 0
ath_hal 0 0K 0
athdev 0 0K 0
ata_pci 0 0K 0
ata_dma 0 0K 0
ata_generic 0 0K 0
pvscsi 0 0K 0
scsi_da 0 0K 69
ata_da 0 0K 0
scsi_ch 0 0K 0
scsi_cd 0 0K 0
ktls_ocf 0 0K 0
AHCI driver 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5E_TLS_RX 0 0K 0
MLX5EEPROM 0 0K 0
MLX5E_TLS 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EN 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5DUMP 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
simple_attr 0 0K 0
seq_file 0 0K 0
lkpiskb 0 0K 0
radix 0 0K 0
idr 0 0K 0
lkpindev 0 0K 0
lkpifw 0 0K 0
lkpi80211 0 0K 0
NLM 0 0K 0
ipsec-spdcache 0 0K 0
ipsec-reg 0 0K 0
ipsec-misc 0 0K 0
ipsecrequest 0 0K 0
ip6opt 0 0K 3
ip6_msource 0 0K 0
ip6_moptions 0 0K 0
in6_mfilter 0 0K 0
frag6 0 0K 0
tcplog 0 0K 0
tcp_hwpace 0 0K 0
USBdev 0 0K 0
USB 0 0K 0
LRO 0 0K 0
ip_msource 0 0K 0
ip_moptions 0 0K 41
in_mfilter 0 0K 0
ipid 0 0K 0
80211scan 0 0K 0
80211ratectl 0 0K 0
80211power 0 0K 0
80211nodeie 0 0K 0
80211node 0 0K 0
80211mesh_gt 0 0K 0
80211mesh_rt 0 0K 0
80211perr 0 0K 0
80211prep 0 0K 0
80211preq 0 0K 0
80211dfs 0 0K 0
80211crypto 0 0K 0
80211vap 0 0K 0
iflib 0 0K 0
vlan 0 0K 0
gif 0 0K 0
ifdescr 0 0K 0
zlib 0 0K 0
fadvise 0 0K 0
VN POLL 0 0K 0
agp 0 0K 0
statfs 0 0K 11688
namei_tracker 0 0K 0
export_host 0 0K 0
cl_savebuf 0 0K 2
nvme_da 0 0K 0
acpipwr 0 0K 0
acpi_perf 0 0K 0
twsbuf 0 0K 0
twe_commands 0 0K 0
tcp_log_dev 0 0K 1667
midi buffers 0 0K 0
mixer 0 0K 0
ac97 0 0K 0
hdacc 0 0K 0
hdac 0 0K 0
hdaa 0 0K 0
acpicmbat 0 0K 0
SIIS driver 0 0K 0
CAM CCB 0 0K 523
biobuf 0 0K 0
lio 0 0K 0
acl 0 0K 0
mbuf_tag 0 0K 0
ktls 0 0K 0
PUC 0 0K 0
ppbusdev 0 0K 0
agtiapi_MemAlloc malloc 0 0K 0
osti_cacheable 0 0K 0
tempbuff 0 0K 0
tempbuff 0 0K 0
ag_tgt_map_t malloc 0 0K 0
ag_slr_map_t malloc 0 0K 0
lDevFlags * malloc 0 0K 0
tiDeviceHandle_t * malloc 0 0K 0
ag_portal_data_t malloc 0 0K 0
ag_device_t malloc 0 0K 0
STLock malloc 0 0K 0
CCB List 0 0K 0
sr_iov 0 0K 0
OCS 0 0K 0
OCS 0 0K 0
nvme 0 0K 0
nvd 0 0K 0
netmap 0 0K 0
mwldev 0 0K 0
MVS driver 0 0K 0
CAM ccb queue 0 0K 0
accf 0 0K 0
pts 0 0K 0
iov 0 0K 24047
ioctlops 0 0K 119
eventfd 0 0K 156
Witness 0 0K 0
stack 0 0K 0
mrsasbuf 0 0K 0
mpt_user 0 0K 0
mps_user 0 0K 0
MPSSAS 0 0K 0
mps 0 0K 0
sbuf 0 0K 288
mpr_user 0 0K 0
firmware 0 0K 0
compressor 0 0K 0
MPRSAS 0 0K 0
SWAP 0 0K 0
mpr 0 0K 0
mfibuf 0 0K 0
sysctltmp 0 0K 821
sysctl 0 0K 3
md_sectors 0 0K 0
ekcd 0 0K 0
dumper 0 0K 0
sendfile 0 0K 0
rctl 0 0K 0
md_disk 0 0K 0
malodev 0 0K 0
LED 0 0K 0
ix_sriov 0 0K 0
cache 0 0K 0
aacraidcam 0 0K 0
prison_racct 0 0K 0
Fail Points 0 0K 0
sigio 0 0K 1
filedesc_to_leader 0 0K 0
pwd 0 0K 0
tty console 0 0K 0
ix 0 0K 0
ipsbuf 0 0K 0
aacraid_buf 0 0K 0
aaccam 0 0K 0
boottrace 0 0K 0
aacbuf 0 0K 0
zstd 0 0K 0
XZ_DEC 0 0K 0
nvlist 0 0K 0
SCSI ENC 0 0K 0
SCSI sa 0 0K 0
isofs_node 0 0K 0
isofs_mount 0 0K 0
tr_raid5_data 0 0K 0
tr_raid1e_data 0 0K 0
tr_raid1_data 0 0K 0
tr_raid0_data 0 0K 0
tr_concat_data 0 0K 0
md_sii_data 0 0K 0
md_promise_data 0 0K 0
md_nvidia_data 0 0K 0
md_jmicron_data 0 0K 0
md_intel_data 0 0K 0
md_ddf_data 0 0K 0
raid_data 0 0K 72
geom_flashmap 0 0K 0
tmpfs dir 0 0K 0
tmpfs name 0 0K 0
tmpfs mount 0 0K 0
tmpfs extattr 0 0K 0
NFS FHA 0 0K 0
newnfsmnt 0 0K 0
newnfsclient_req 0 0K 0
db> show uma
Zone Size Used Free Requests Sleeps Bucket Total Mem XFree
mbuf_jumbo_page 4096 8320 1078 1819765 0 254 38494208 0
RADIX NODE 144 18928 359 270798 0 63 2777328 0
mbuf 256 9537 636 2953769 0 254 2604288 0
sctp_asoc 2256 714 306 5875 0 254 2301120 0
tcp_log 416 16 5321 57304 0 254 2220192 0
pbuf 2624 0 794 0 0 2 2083456 0
malloc-2048 2048 787 69 19489 0 8 1753088 0
BUF TRIE 144 200 11560 895 0 62 1693440 0
malloc-384 384 4149 21 4151 0 30 1601280 0
mbuf_cluster 2048 762 0 762 0 254 1560576 0
sctp_ep 1208 785 485 19463 0 254 1534160 0
malloc-128 128 11732 141 13245 0 126 1519744 0
malloc-4096 4096 331 3 496 0 2 1368064 0
UMA Slabs 0 112 11457 21 11457 0 126 1285536 0
vmem btag 56 19748 91 19748 0 254 1110984 0
sctp_raddr 736 724 552 15185 0 254 939136 0
malloc-384 384 754 1346 11697 0 30 806400 0
malloc-1024 1024 717 51 5878 0 16 786432 0
socket 960 117 647 27565 0 254 733440 0
VM OBJECT 264 2374 146 248875 0 30 665280 0
malloc-384 384 1577 103 27304 0 30 645120 0
FFS inode 1160 514 32 12037 0 8 633360 0
malloc-256 256 201 2034 10135 0 62 572160 0
malloc-256 256 1449 726 42570 0 62 556800 0
256 Bucket 2048 224 18 6661 0 8 495616 0
malloc-128 128 1661 1501 12568 0 126 404736 0
ertt_txseginfo 40 1 9998 79250 0 254 399960 0
lkpimm 168 1 2327 1 0 62 391104 0
lkpicurr 168 2 2326 2 0 62 391104 0
malloc-4096 4096 78 6 12440 0 2 344064 0
THREAD 1824 166 21 12681 0 8 341088 0
MAP ENTRY 96 2908 368 673712 0 126 314496 0
tcp_bbr_map 128 0 2418 21678 0 126 309504 0
VNODE 448 555 111 12080 0 30 298368 0
malloc-64 64 4273 326 5205 0 254 294336 0
malloc-65536 65536 4 0 4 0 1 262144 0
malloc-16 16 14569 181 28361 0 254 236000 0
DEVCTL 1024 0 220 152 0 0 225280 0
malloc-256 256 47 763 12407 0 62 207360 0
malloc-65536 65536 1 2 137 0 1 196608 0
malloc-16384 16384 8 4 11683 0 1 196608 0
mbuf_packet 256 163 599 35029 0 254 195072 0
sctp_chunk 152 716 558 10056 0 254 193648 0
malloc-32 32 5322 600 23891 0 254 189504 0
UMA Zones 768 239 0 239 0 16 183552 0
FPU_save_area 832 168 48 23901 0 16 179712 0
malloc-128 128 1141 254 31894 0 126 178560 0
malloc-2048 2048 6 66 1038 0 8 147456 0
malloc-1024 1024 119 25 247 0 16 147456 0
S VFS Cache 104 1017 387 13078 0 126 146016 0
FFS2 dinode 256 514 56 12037 0 62 145920 0
VMSPACE 2560 40 14 12390 0 4 138240 0
128 Bucket 1024 96 35 3204 0 16 134144 0
malloc-65536 65536 0 2 182 0 1 131072 0
malloc-65536 65536 2 0 2 0 1 131072 0
malloc-65536 65536 0 2 8 0 1 131072 0
unpcb 256 20 490 2139 0 254 130560 0
malloc-256 256 369 141 12922 0 62 130560 0
PROC 1368 60 28 12409 0 8 120384 0
ksiginfo 112 71 973 11362 0 126 116928 0
tcp_inpcb 1296 6 84 4838 0 8 116640 0
malloc-4096 4096 27 1 30 0 2 114688 0
pipe 728 23 131 746 0 16 112112 0
64 Bucket 512 119 81 4874 0 30 102400 0
malloc-32768 32768 1 2 121 0 1 98304 0
filedesc0 1072 61 23 12410 0 8 90048 0
UMA Kegs 384 225 8 225 0 30 89472 0
sctp_readq 152 0 520 484 0 254 79040 0
malloc-32 32 1796 598 26763 0 254 76608 0
malloc-8192 8192 7 2 10 0 1 73728 0
g_bio 408 0 180 6566 0 30 73440 0
malloc-64 64 839 232 22075 0 254 68544 0
malloc-64 64 512 559 1646 0 254 68544 0
malloc-65536 65536 1 0 1 0 1 65536 0
malloc-65536 65536 1 0 1 0 1 65536 0
malloc-256 256 91 164 24549 0 62 65280 0
32 Bucket 256 131 124 9073 0 62 65280 0
sctp_stream_msg_out 112 0 540 1495 0 254 60480 0
ripcb 424 5 121 631 0 30 53424 0
malloc-64 64 428 391 196520 0 254 52416 0
Files 80 297 353 50621 0 126 52000 0
malloc-128 128 121 282 11800 0 126 51584 0
malloc-128 128 161 242 23789 0 126 51584 0
DIRHASH 1024 35 13 35 0 16 49152 0
NAMEI 1024 0 48 65163 0 16 49152 0
malloc-16384 16384 3 0 3 0 1 49152 0
malloc-8192 8192 6 0 6 0 1 49152 0
malloc-8192 8192 4 2 109 0 1 49152 0
malloc-1024 1024 6 42 1669 0 16 49152 0
malloc-512 512 2 94 3723 0 30 49152 0
tcp_rack_pcb 896 0 54 1406 0 16 48384 0
tcp_bbr_pcb 832 0 54 2164 0 16 44928 0
syncache 168 0 264 4 0 254 44352 0
udplite_inpcb 456 0 96 204 0 30 43776 0
udp_inpcb 456 6 90 253 0 30 43776 0
clpbuf 2624 0 16 40 0 16 41984 0
malloc-8192 8192 4 1 30 0 1 40960 0
pcpu-8 8 4691 429 5050 0 254 40960 0
da_ccb 544 0 70 1766 0 16 38080 0
PWD 32 22 1112 11605 0 254 36288 0
malloc-64 64 100 467 12769 0 254 36288 0
malloc-64 64 173 394 13094 0 254 36288 0
malloc-64 64 8 559 65 0 254 36288 0
malloc-64 64 41 526 204 0 254 36288 0
malloc-16 16 1519 731 33929 0 254 36000 0
malloc-16 16 1690 560 12025 0 254 36000 0
8 Bucket 80 72 378 3853 0 126 36000 0
malloc-128 128 22 257 11674 0 126 35712 0
malloc-128 128 58 221 3750 0 126 35712 0
malloc-128 128 93 186 919 0 126 35712 0
routing nhops 256 27 108 34 0 62 34560 0
ttyoutq 256 72 63 160 0 62 34560 0
malloc-256 256 47 88 2004 0 62 34560 0
malloc-256 256 59 76 12267 0 62 34560 0
malloc-256 256 8 127 332 0 62 34560 0
TURNSTILE 136 188 64 188 0 62 34272 0
malloc-32768 32768 1 0 1 0 1 32768 0
malloc-32768 32768 1 0 1 0 1 32768 0
malloc-16384 16384 2 0 12 0 1 32768 0
malloc-2048 2048 2 14 14 0 8 32768 0
malloc-2048 2048 9 7 14 0 8 32768 0
malloc-2048 2048 10 6 74 0 8 32768 0
malloc-2048 2048 0 16 50 0 8 32768 0
malloc-2048 2048 1 15 207 0 8 32768 0
malloc-1024 1024 3 29 43 0 16 32768 0
malloc-1024 1024 6 26 180 0 16 32768 0
malloc-1024 1024 16 16 20 0 16 32768 0
malloc-1024 1024 18 14 18 0 16 32768 0
malloc-1024 1024 1 31 9 0 16 32768 0
malloc-512 512 1 63 119 0 30 32768 0
malloc-512 512 11 53 40 0 30 32768 0
malloc-512 512 2 62 54 0 30 32768 0
malloc-512 512 11 53 60 0 30 32768 0
pcpu-64 64 497 15 497 0 254 32768 0
KNOTE 160 28 172 131662 0 62 32000 0
ttyinq 160 135 65 300 0 62 32000 0
tcp_rack_map 120 0 264 2026 0 126 31680 0
cpuset 104 7 272 7 0 126 29016 0
sctp_laddr 48 0 588 3591 0 254 28224 0
tcp_inpcb ports 32 3 879 3215 0 254 28224 0
16 Bucket 144 75 121 407 0 62 28224 0
4 Bucket 48 6 582 273 0 254 28224 0
malloc-8192 8192 0 3 4 0 1 24576 0
malloc-4096 4096 4 2 632 0 2 24576 0
PGRP 88 35 241 49 0 126 24288 0
rl_entry 40 51 555 51 0 254 24240 0
rtentry 168 30 114 34 0 62 24192 0
itimer 352 0 66 3 0 30 23232 0
malloc-384 384 20 40 365 0 30 23040 0
malloc-384 384 4 56 25 0 30 23040 0
malloc-384 384 23 37 25 0 30 23040 0
malloc-384 384 1 59 34 0 30 23040 0
SLEEPQUEUE 88 188 68 188 0 126 22528 0
hostcache 64 1 314 1 0 254 20160 0
udplite_inpcb ports 32 0 630 2 0 254 20160 0
udp_inpcb ports 32 3 627 36 0 254 20160 0
ertt 72 6 274 4838 0 126 20160 0
malloc-32 32 39 591 219 0 254 20160 0
malloc-32 32 156 474 7066 0 254 20160 0
malloc-32 32 17 613 523 0 254 20160 0
malloc-32 32 100 530 150 0 254 20160 0
malloc-32 32 52 578 108 0 254 20160 0
malloc-32 32 21 609 2849 0 254 20160 0
2 Bucket 32 57 573 1342 0 254 20160 0
Mountpoints 2752 2 5 2 0 4 19264 0
epoch_record pcpu 256 4 60 4 0 62 16384 0
malloc-16384 16384 1 0 1 0 1 16384 0
malloc-16384 16384 1 0 1 0 1 16384 0
malloc-16384 16384 1 0 1 0 1 16384 0
malloc-8192 8192 2 0 2 0 1 16384 0
malloc-8192 8192 0 2 9 0 1 16384 0
malloc-8192 8192 2 0 2 0 1 16384 0
malloc-4096 4096 1 3 11689 0 2 16384 0
malloc-2048 2048 4 4 4 0 8 16384 0
malloc-512 512 0 32 1 0 30 16384 0
malloc-512 512 0 32 1 0 30 16384 0
malloc-512 512 1 31 1 0 30 16384 0
SMR CPU 32 7 504 7 0 254 16352 0
vtnet_tx_hdr 24 0 668 916557 0 254 16032 0
AIO 208 0 76 6 0 62 15808 0
kenv 258 15 45 1050 0 30 15480 0
mqnode 416 3 33 3 0 30 14976 0
vmem 1856 1 7 1 0 8 14848 0
SMR SHARED 24 7 504 7 0 254 12264 0
malloc-16 16 54 696 13076 0 254 12000 0
malloc-16 16 67 683 28141 0 254 12000 0
malloc-16 16 41 709 1289 0 254 12000 0
malloc-16 16 8 742 8 0 254 12000 0
malloc-16 16 18 732 26497 0 254 12000 0
AIOCB 552 0 21 5 0 16 11592 0
malloc-4096 4096 1 1 1 0 2 8192 0
malloc-4096 4096 1 1 2 0 2 8192 0
pcpu-16 16 7 249 7 0 254 4096 0
UMA Slabs 1 176 9 13 9 0 62 3872 0
KMAP ENTRY 96 12 27 14 0 0 3744 0
FFS1 dinode 128 0 0 0 0 126 0 0
ada_ccb 272 0 0 0 0 30 0 0
swblk 136 0 0 0 0 62 0 0
swpctrie 144 0 0 0 0 62 0 0
pf state scrubs
---
This report is generated by a bot. It may contain errors.
See https://goo.gl/tpsmEJ for more information about syzbot.
syzbot engineers can be reached at syzk...@googlegroups.com.
syzbot will keep track of this issue. See:
https://goo.gl/tpsmEJ#status for how to communicate with syzbot.
syzbot
Feb 2, 2023, 5:59:50 AM2/2/23
to syzkaller-f...@googlegroups.com
syzbot has found a reproducer for the following issue on:
HEAD commit: 99187c3a44c2 prison_check_nfsd: Add check for enforce_stat..
git tree: freebsd-src
console output: https://syzkaller.appspot.com/x/log.txt?x=154ba08d480000
dashboard link: https://syzkaller.appspot.com/bug?extid=eb888d3a5a6c54413de5
syz repro: https://syzkaller.appspot.com/x/repro.syz?x=1624f69d480000
IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+eb888d...@syzkaller.appspotmail.com
Fatal trap 12: page fault while in kernel mode
cpuid = 0; apic id = 00
fault virtual address = 0x1dc
fault code = supervisor read data, page not present
instruction pointer = 0x20:0xffffffff849bcf4c
r13: fffffe0092d9b8d0 r14: fffffe0092b04800 r15: 4
rcx 0xfffffe00033eee30
rdx 0xdffff7c000000000
rdi 0
r8 0x3
889 781 781 0 S connec 0xfffffe0058c51c1a syz-executor.0
887 1 887 0 Ss select 0xfffffe008ff06740 rtsol
885 1 885 0 Ss select 0xfffffe00578818c0 rtsol
884 1 884 0 Ss select 0xfffffe008ff067c0 rtsol
878 790 430 0 S kqread 0xfffffe005406f600 rtsol
790 784 430 0 S wait 0xfffffe00541dd018 sh
784 430 430 0 S wait 0xfffffe0056f86558 sh
781 779 781 0 Ss nanslp 0xffffffff83e689c1 syz-executor.0
779 777 777 0 S (threaded) syz-execprog
100107 S uwait 0xfffffe000798ce00 syz-execprog
100117 S uwait 0xfffffe0057883600 syz-execprog
100118 S uwait 0xfffffe0057883700 syz-execprog
100119 S kqread 0xfffffe0054070300 syz-execprog
100120 S uwait 0xfffffe0057318080 syz-execprog
100121 S uwait 0xfffffe0057318180 syz-execprog
100122 S wait 0xfffffe0058d61000 syz-execprog
100123 S uwait 0xfffffe008ff07c80 syz-execprog
777 775 777 0 Ss pause 0xfffffe00541dd620 csh
775 688 775 0 Ss select 0xfffffe008ff074c0 sshd
754 1 754 0 Ss+ ttyin 0xfffffe00540668b0 getty
753 1 753 0 Ss+ ttyin 0xfffffe00579500b0 getty
752 1 752 0 Ss+ ttyin 0xfffffe00579504b0 getty
751 1 751 0 Ss+ ttyin 0xfffffe00579508b0 getty
750 1 750 0 Ss+ ttyin 0xfffffe0057950cb0 getty
749 1 749 0 Ss+ ttyin 0xfffffe00540658b0 getty
748 1 748 0 Ss+ ttyin 0xfffffe00579520b0 getty
747 1 747 0 Ss+ ttyin 0xfffffe00579524b0 getty
746 1 746 0 Ss+ ttyin 0xfffffe00579528b0 getty
744 1 18 0 S+ piperd 0xfffffe0058ba4110 logger
743 742 18 0 S+ nanslp 0xffffffff83e689c0 sleep
742 1 18 0 S+ wait 0xfffffe005799f570 sh
692 1 692 0 Ss nanslp 0xffffffff83e689c1 cron
688 1 688 0 Ss select 0xfffffe008ff07640 sshd
501 1 501 0 Ss select 0xfffffe008ff07740 syslogd
430 1 430 0 Ss wait 0xfffffe0058d61ab0 devd
429 1 429 65 Ss select 0xfffffe008ff078c0 dhclient
344 1 344 0 Ss select 0xfffffe008ff079c0 dhclient
341 1 341 0 Ss select 0xfffffe0057883940 dhclient
17 0 0 0 DL vlruwt 0xfffffe0056f87ab8 [vnlru]
5 0 0 0 DL waiting 0xffffffff849faf80 [sctp_iterator]
100004 Run CPU 1 [idle: cpu1]
100072 D - 0xfffffe0057930400 [acpi_task_0]
100073 D - 0xfffffe0057930400 [acpi_task_1]
100074 D - 0xfffffe0057930400 [acpi_task_2]
vfscache 3 1025K 3
inodedep 92 547K 114
pcb 26 541K 119
acpica 1674 184K 58126
tidhash 3 141K 3
vmem 3 138K 4
pagedep 17 132K 58
sem 4 106K 4
umtx 286 36K 286
kdtrace 179 36K 1021
temp 22 33K 1725
DEVFS_RULE 56 20K 56
BPF 11 18K 11
dirrem 54 14K 65
ifaddr 39 13K 41
routetbl 62 11K 222
pfs_vncache 1 8K 1
cred 31 8K 235
kqueue 52 8K 896
sglist 5 7K 5
ether_multi 68 6K 78
sctp_timw 19 5K 19
ufs_dirhash 24 5K 24
freefile 37 5K 46
plimit 18 5K 329
in6_multi 35 5K 35
UMA 267 5K 267
pf_ifnet 7 4K 10
acpisem 28 4K 28
hhook 15 4K 17
session 24 3K 35
pwddesc 48 3K 890
proc-args 77 3K 1898
terminal 11 3K 11
sctp_atcl 5 2K 113
Unitno 27 2K 43
msi 12 2K 12
select 11 2K 35
mkdir 10 2K 96
ip6ndp 6 1K 7
sctp_ifa 7 1K 8
newdirblk 7 1K 48
nhops 6 1K 6
pfil 4 1K 4
procdesc 4 1K 10
cdev 2 1K 2
sctp_ifn 3 1K 8
inpcbpolicy 12 1K 165
mld 3 1K 3
CC Mem 3 1K 7
igmp 3 1K 3
chacha20random 1 1K 1
osd 7 1K 18
tun 4 1K 4
sctp_atky 7 1K 188
DEVFSP 5 1K 10
cryptodev 2 1K 49
pmchooks 1 1K 1
filecaps 4 1K 78
sctp_athm 5 1K 150
sctp_vrf 1 1K 1
sctp_map 4 1K 76
vnet 1 1K 1
entropy 2 1K 39
sctp_socko 0 0K 74
sctp_iter 0 0K 6
sctp_aadr 0 0K 0
mqdata 0 0K 0
tcp_do 0 0K 0
tcp_fsb 0 0K 0
savedino 0 0K 15
ip_moptions 0 0K 0
iov 0 0K 13998
ioctlops 0 0K 91
eventfd 0 0K 0
mbuf_jumbo_page 4096 8320 1078 14277 0 254 38494208 0
mbuf 256 8592 1070 19084 0 254 2473472 0
pbuf 2624 0 778 0 0 2 2041472 0
BUF TRIE 144 182 11578 471 0 62 1693440 0
malloc-4096 4096 330 2 493 0 2 1359872 0
UMA Slabs 0 112 10625 25 10625 0 126 1192800 0
sctp_asoc 2256 2 508 38 0 254 1150560 0
mbuf_cluster 2048 508 0 508 0 254 1040384 0
vmem btag 56 16528 71 16528 0 254 929544 0
FFS inode 1160 505 27 551 0 8 617120 0
sctp_ep 1208 2 508 38 0 254 616080 0
RADIX NODE 144 3722 137 22196 0 62 555696 0
socket 960 29 479 1409 0 254 487680 0
VM OBJECT 264 1748 52 27064 0 30 475200 0
256 Bucket 2048 134 14 1031 0 8 303104 0
malloc-64 64 4269 330 4486 0 254 294336 0
malloc-4096 4096 65 3 920 0 2 278528 0
malloc-2048 2048 6 130 1038 0 8 278528 0
VNODE 448 537 66 585 0 30 270144 0
MAP ENTRY 96 2145 375 95467 0 126 241920 0
malloc-16 16 14569 431 17622 0 254 240000 0
DEVCTL 1024 4 216 130 0 0 225280 0
malloc-32 32 5311 107 6288 0 254 173376 0
malloc-1024 1024 116 28 131 0 16 147456 0
FFS2 dinode 256 505 65 551 0 62 145920 0
FPU_save_area 832 132 30 171 0 16 134784 0
S VFS Cache 104 982 305 1059 0 126 133848 0
malloc-65536 65536 0 2 56 0 1 131072 0
unpcb 256 14 496 1186 0 254 130560 0
mbuf_packet 256 3 505 408 0 254 130048 0
ksiginfo 112 46 998 91 0 126 116928 0
VMSPACE 2560 31 5 874 0 4 92160 0
PROC 1368 47 19 889 0 8 90288 0
clpbuf 2624 0 32 21 0 16 83968 0
malloc-384 384 158 52 181 0 30 80640 0
sctp_chunk 152 3 517 111 0 254 79040 0
filedesc0 1072 48 22 890 0 8 75040 0
malloc-8192 8192 8 1 10 0 1 73728 0
g_bio 408 0 180 4488 0 30 73440 0
malloc-64 64 512 559 1642 0 254 68544 0
malloc-256 256 212 43 220 0 62 65280 0
malloc-256 256 89 166 1004 0 62 65280 0
malloc-4096 4096 11 3 14 0 2 57344 0
malloc-64 64 292 527 24839 0 254 52416 0
malloc-128 128 146 257 257 0 126 51584 0
malloc-128 128 163 240 863 0 126 51584 0
32 Bucket 256 60 135 9450 0 62 49920 0
malloc-384 384 65 55 173 0 30 46080 0
syncache 168 0 264 5 0 254 44352 0
udp_inpcb 456 6 90 152 0 30 43776 0
da_ccb 544 0 70 1242 0 16 38080 0
pcpu-8 8 4324 284 4384 0 254 36864 0
64 Bucket 512 63 9 1755 0 30 36864 0
malloc-64 64 82 485 1180 0 254 36288 0
malloc-64 64 160 407 1537 0 254 36288 0
malloc-64 64 80 487 1036 0 254 36288 0
malloc-64 64 7 560 41 0 254 36288 0
malloc-64 64 35 532 41 0 254 36288 0
malloc-128 128 25 254 185 0 126 35712 0
malloc-128 128 42 237 3315 0 126 35712 0
malloc-128 128 79 200 770 0 126 35712 0
routing nhops 256 14 121 21 0 62 34560 0
malloc-256 256 59 76 201 0 62 34560 0
malloc-256 256 55 80 710 0 62 34560 0
malloc-256 256 6 129 327 0 62 34560 0
malloc-2048 2048 8 8 39 0 8 32768 0
malloc-1024 1024 5 27 41 0 16 32768 0
malloc-512 512 1 63 74 0 30 32768 0
16 Bucket 144 48 148 233 0 62 28224 0
4 Bucket 48 6 582 51 0 254 28224 0
ripcb 424 3 60 6 0 30 26712 0
TURNSTILE 136 144 45 144 0 62 25704 0
malloc-4096 4096 3 3 627 0 2 24576 0
PGRP 88 24 252 35 0 126 24288 0
ertt_txseginfo 40 0 606 244 0 254 24240 0
rl_entry 40 37 569 37 0 254 24240 0
rtentry 168 17 127 21 0 62 24192 0
pipe 728 11 22 330 0 16 24024 0
Files 80 103 197 7138 0 126 24000 0
8 Bucket 80 53 247 266 0 126 24000 0
tcp_inpcb 1296 3 15 7 0 8 23328 0
malloc-384 384 10 50 12 0 30 23040 0
malloc-384 384 1 59 23 0 30 23040 0
SLEEPQUEUE 88 144 112 144 0 126 22528 0
ertt 72 3 277 7 0 126 20160 0
PWD 32 12 618 140 0 254 20160 0
malloc-32 32 34 596 195 0 254 20160 0
malloc-32 32 141 489 191 0 254 20160 0
malloc-32 32 17 613 553 0 254 20160 0
malloc-32 32 38 592 59 0 254 20160 0
malloc-32 32 46 584 103 0 254 20160 0
2 Bucket 32 49 581 309 0 254 20160 0
KNOTE 160 11 114 262 0 62 20000 0
malloc-512 512 3 29 3 0 30 16384 0
kenv 258 15 45 1040 0 30 15480 0
malloc-32 32 24 354 2849 0 254 12096 0
malloc-16 16 45 705 1426 0 254 12000 0
malloc-16 16 64 686 405 0 254 12000 0
malloc-16 16 29 721 192 0 254 12000 0
malloc-16 16 17 733 178 0 254 12000 0
malloc-16 16 14 736 26485 0 254 12000 0
vtnet_tx_hdr 24 0 334 2143 0 254 8016 0
UMA Slabs 1 176 8 14 8 0 62 3872 0
pf frag entries 40 0 0 0 0 254 0 0
pf frags 248 0 0 0 0 62 0 0
pf table entries 160 0 0 0 0 254 0 0
pf table entry counters 64 0 0 0 0 254 0 0
pf source nodes 136 0 0 0 0 254 0 0
pf state keys 88 0 0 0 0 126 0 0
pf states 312 0 0 0 0 254 0 0
pf tags 104 0 0 0 0 126 0 0
pf mtags 184 0 0 0 0 62 0 0
tcp_bbr_pcb 832 0 0 0 0 16 0 0
tcp_bbr_map 128 0 0 0 0 126 0 0
tcp_rack_pcb 896 0 0 0 0 16 0 0
tcp_rack_map 120 0 0 0 0 126 0 0
ipq 56 0 0 0 0 254 0 0
tfo_ccache_entries 80 0 0 0 0 126 0 0
tfo 4 0 0 0 0 254 0 0
sackhole 32 0 0 0 0 254 0 0
sctp_asconf_ack 48 0 0 0 0 254 0 0
sctp_asconf 40 0 0 0 0 254 0 0
sctp_stream_msg_out 112 0 0 0 0 254 0 0
sctp_readq 152 0 0 0 0 254 0 0
tcp_log_id_node 120 0 0 0 0 126 0 0
tcp_log_id_bucket 176 0 0 0 0 62 0 0
tcp_log 416 0 0 0 0 254 0 0
tcpreass 48 0 0 0 0 254 0 0
ripcb ports 32 0 0 0 0 254 0 0
udplite_inpcb ports 32 0 0 0 0 254 0 0
udplite_inpcb 456 0 0 0 0 30 0 0
IPsec SA lft_c 16 0 0 0 0 254 0 0
itimer 352 0 0 0 0 30 0 0
AIOLIO 272 0 0 0 0 30 0 0
AIOCB 552 0 0 0 0 16 0 0
AIO 208 0 0 0 0 62 0 0
TMPFS node 232 0 0 0 0 62 0 0
mqnotifier 216 0 0 0 0 62 0 0
mvdata 64 0 0 0 0 254 0 0
mqueue 248 0 0 0 0 62 0 0
NCLNODE 608 0 0 0 0 16 0 0
LTS VFS Cache 360 0 0 0 0 30 0 0
L VFS Cache 320 0 0 0 0 30 0 0
STS VFS Cache 144 0 0 0 0 62 0
HEAD commit: 99187c3a44c2 prison_check_nfsd: Add check for enforce_stat..
git tree: freebsd-src
dashboard link: https://syzkaller.appspot.com/bug?extid=eb888d3a5a6c54413de5
syz repro: https://syzkaller.appspot.com/x/repro.syz?x=1624f69d480000
IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+eb888d...@syzkaller.appspotmail.com
Fatal trap 12: page fault while in kernel mode
cpuid = 0; apic id = 00
fault virtual address = 0x1dc
fault code = supervisor read data, page not present
stack pointer = 0x28:0xfffffe00077fed90
frame pointer = 0x28:0xfffffe00077fedd0
code segment = base 0x0, limit 0xfffff, type 0x1b
= DPL 0, pres 1, long 1, def32 0, gran 1
processor eflags = interrupt enabled, resume, IOPL = 0
current process = 12 (swi1: netisr 0)
rdi: 1dc rsi: fffffe0092b0481b rdx: 0
frame pointer = 0x28:0xfffffe00077fedd0
code segment = base 0x0, limit 0xfffff, type 0x1b
= DPL 0, pres 1, long 1, def32 0, gran 1
processor eflags = interrupt enabled, resume, IOPL = 0
current process = 12 (swi1: netisr 0)
rcx: fffffe00033eee30 r8: fffff78000000000 r9: 20000000000
rax: fffffe00033eee30 rbx: 0 rbp: fffffe00077fedd0
r10: 0 r11: 0 r12: fffffe0092b04818
rax: fffffe00033eee30 rbx: 0 rbp: fffffe00077fedd0
r13: fffffe0092d9b8d0 r14: fffffe0092b04800 r15: 4
trap number = 12
panic: page fault
cpuid = 0
time = 1675335385
panic: page fault
cpuid = 0
KDB: stack backtrace:
db_trace_self_wrapper() at db_trace_self_wrapper+0xc7/frame 0xfffffe00077fe570
kdb_backtrace() at kdb_backtrace+0xd3/frame 0xfffffe00077fe6d0
vpanic() at vpanic+0x254/frame 0xfffffe00077fe7b0
panic() at panic+0xb5/frame 0xfffffe00077fe870
trap_fatal() at trap_fatal+0x7ed/frame 0xfffffe00077fe990
trap_pfault() at trap_pfault+0x182/frame 0xfffffe00077fead0
trap() at trap+0x5e1/frame 0xfffffe00077fecc0
calltrap() at calltrap+0x8/frame 0xfffffe00077fecc0
--- trap 0xc, rip = 0xffffffff849bcf4c, rsp = 0xfffffe00077fed90, rbp = 0xfffffe00077fedd0 ---
db_trace_self_wrapper() at db_trace_self_wrapper+0xc7/frame 0xfffffe00077fe570
kdb_backtrace() at kdb_backtrace+0xd3/frame 0xfffffe00077fe6d0
vpanic() at vpanic+0x254/frame 0xfffffe00077fe7b0
panic() at panic+0xb5/frame 0xfffffe00077fe870
trap_fatal() at trap_fatal+0x7ed/frame 0xfffffe00077fe990
trap_pfault() at trap_pfault+0x182/frame 0xfffffe00077fead0
trap() at trap+0x5e1/frame 0xfffffe00077fecc0
calltrap() at calltrap+0x8/frame 0xfffffe00077fecc0
rdx 0xdffff7c000000000
rbx 0
rsp 0xfffffe00077fe6b0
rbp 0xfffffe00077fe6d0
rsi 0x1
rsp 0xfffffe00077fe6b0
rbp 0xfffffe00077fe6d0
rdi 0
r8 0x3
887 1 887 0 Ss select 0xfffffe008ff06740 rtsol
885 1 885 0 Ss select 0xfffffe00578818c0 rtsol
884 1 884 0 Ss select 0xfffffe008ff067c0 rtsol
878 790 430 0 S kqread 0xfffffe005406f600 rtsol
790 784 430 0 S wait 0xfffffe00541dd018 sh
784 430 430 0 S wait 0xfffffe0056f86558 sh
781 779 781 0 Ss nanslp 0xffffffff83e689c1 syz-executor.0
779 777 777 0 S (threaded) syz-execprog
100107 S uwait 0xfffffe000798ce00 syz-execprog
100117 S uwait 0xfffffe0057883600 syz-execprog
100118 S uwait 0xfffffe0057883700 syz-execprog
100119 S kqread 0xfffffe0054070300 syz-execprog
100120 S uwait 0xfffffe0057318080 syz-execprog
100121 S uwait 0xfffffe0057318180 syz-execprog
100122 S wait 0xfffffe0058d61000 syz-execprog
100123 S uwait 0xfffffe008ff07c80 syz-execprog
777 775 777 0 Ss pause 0xfffffe00541dd620 csh
775 688 775 0 Ss select 0xfffffe008ff074c0 sshd
754 1 754 0 Ss+ ttyin 0xfffffe00540668b0 getty
753 1 753 0 Ss+ ttyin 0xfffffe00579500b0 getty
752 1 752 0 Ss+ ttyin 0xfffffe00579504b0 getty
751 1 751 0 Ss+ ttyin 0xfffffe00579508b0 getty
750 1 750 0 Ss+ ttyin 0xfffffe0057950cb0 getty
749 1 749 0 Ss+ ttyin 0xfffffe00540658b0 getty
748 1 748 0 Ss+ ttyin 0xfffffe00579520b0 getty
747 1 747 0 Ss+ ttyin 0xfffffe00579524b0 getty
746 1 746 0 Ss+ ttyin 0xfffffe00579528b0 getty
744 1 18 0 S+ piperd 0xfffffe0058ba4110 logger
743 742 18 0 S+ nanslp 0xffffffff83e689c0 sleep
742 1 18 0 S+ wait 0xfffffe005799f570 sh
692 1 692 0 Ss nanslp 0xffffffff83e689c1 cron
688 1 688 0 Ss select 0xfffffe008ff07640 sshd
501 1 501 0 Ss select 0xfffffe008ff07740 syslogd
430 1 430 0 Ss wait 0xfffffe0058d61ab0 devd
429 1 429 65 Ss select 0xfffffe008ff078c0 dhclient
344 1 344 0 Ss select 0xfffffe008ff079c0 dhclient
341 1 341 0 Ss select 0xfffffe0057883940 dhclient
17 0 0 0 DL vlruwt 0xfffffe0056f87ab8 [vnlru]
16 0 0 0 DL syncer 0xffffffff83f8dea0 [syncer]
15 0 0 0 DL (threaded) [bufdaemon]
100079 D psleep 0xffffffff83f8c4c0 [bufdaemon]
100082 D - 0xffffffff83212180 [bufspacedaemon-0]
100095 D sdflush 0xfffffe00589d64e8 [/ worker]
15 0 0 0 DL (threaded) [bufdaemon]
100079 D psleep 0xffffffff83f8c4c0 [bufdaemon]
100082 D - 0xffffffff83212180 [bufspacedaemon-0]
9 0 0 0 DL psleep 0xffffffff83fc3700 [vmdaemon]
8 0 0 0 DL (threaded) [pagedaemon]
100077 D psleep 0xffffffff83fb75b8 [dom0]
100080 D launds 0xffffffff83fb75c4 [laundry: dom0]
100081 D umarcl 0xffffffff81e9dd50 [uma]
7 0 0 0 DL - 0xffffffff83c24e48 [rand_harvestq]
6 0 0 0 DL pftm 0xffffffff84bc02e0 [pf purge]
8 0 0 0 DL (threaded) [pagedaemon]
100077 D psleep 0xffffffff83fb75b8 [dom0]
100080 D launds 0xffffffff83fb75c4 [laundry: dom0]
100081 D umarcl 0xffffffff81e9dd50 [uma]
7 0 0 0 DL - 0xffffffff83c24e48 [rand_harvestq]
5 0 0 0 DL waiting 0xffffffff849faf80 [sctp_iterator]
100073 D - 0xfffffe0057930400 [acpi_task_1]
100074 D - 0xfffffe0057930400 [acpi_task_2]
100075 D - 0xfffffe00085f2d00 [CAM taskq]
db> show all locks
db> show all locks
Process 12 (intr) thread 0xfffffe0007a9e3a0 (100029)
exclusive sleep mutex sctp-tcb (tcb) r = 0 (0xfffffe0092d9c180) locked @ /syzkaller/managers/main/kernel/sys/netinet/sctp_pcb.c:2138
db> show malloc
Type InUse MemUse Requests
pf_hash 5 11524K 5
tcp_hpts 7 4801K 7
devbuf 4216 4323K 4241
Type InUse MemUse Requests
pf_hash 5 11524K 5
tcp_hpts 7 4801K 7
sysctloid 34753 2047K 34824
vtbuf 24 1968K 46
kobj 330 1320K 493
newblk 682 1195K 733
vtbuf 24 1968K 46
kobj 330 1320K 493
vfscache 3 1025K 3
inodedep 92 547K 114
pcb 26 541K 119
ufs_quota 1 512K 1
vfs_hash 1 512K 1
callout 2 512K 2
intr 4 472K 4
subproc 115 218K 957
vfs_hash 1 512K 1
callout 2 512K 2
intr 4 472K 4
acpica 1674 184K 58126
tidhash 3 141K 3
vmem 3 138K 4
pagedep 17 132K 58
linker 324 130K 353
tfo_ccache 1 128K 1
IP reass 1 128K 1
vnet_data 1 112K 1
DEVFS1 106 106K 117
tfo_ccache 1 128K 1
IP reass 1 128K 1
vnet_data 1 112K 1
sem 4 106K 4
bus 1000 82K 5215
mtx_pool 2 72K 2
syncache 1 68K 1
module 513 65K 513
acpitask 1 64K 1
ddb_capture 1 64K 1
filedesc 5 37K 91
mtx_pool 2 72K 2
syncache 1 68K 1
module 513 65K 513
acpitask 1 64K 1
ddb_capture 1 64K 1
umtx 286 36K 286
kdtrace 179 36K 1021
temp 22 33K 1725
hostcache 1 32K 1
shm 1 32K 1
DEVFS3 125 32K 135
shm 1 32K 1
msg 4 30K 4
gtaskqueue 18 26K 18
kbdmux 6 24K 6
gtaskqueue 18 26K 18
DEVFS_RULE 56 20K 56
BPF 11 18K 11
ufs_mount 4 17K 5
proc 3 17K 3
tty 16 16K 16
ithread 97 16K 97
bus-sc 34 15K 1682
proc 3 17K 3
tty 16 16K 16
ithread 97 16K 97
dirrem 54 14K 65
ifaddr 39 13K 41
eventhandler 154 13K 154
KTRACE 100 13K 100
kenv 95 12K 95
KTRACE 100 13K 100
routetbl 62 11K 222
rman 88 11K 431
GEOM 61 11K 481
CAM queue 5 11K 1528
bmsafemap 3 9K 82
GEOM 61 11K 481
CAM queue 5 11K 1528
UART 12 9K 12
devstat 4 9K 4
ksem 1 8K 1
rpc 2 8K 2
shmfd 1 8K 1
devstat 4 9K 4
ksem 1 8K 1
rpc 2 8K 2
pfs_vncache 1 8K 1
cred 31 8K 235
kqueue 52 8K 896
pfs_nodes 20 8K 20
audit_evclass 237 8K 296
taskqueue 63 7K 63
ifnet 4 7K 4
audit_evclass 237 8K 296
taskqueue 63 7K 63
sglist 5 7K 5
CAM DEV 3 6K 510
lltable 19 6K 19
ether_multi 68 6K 78
sctp_timw 19 5K 19
ufs_dirhash 24 5K 24
freefile 37 5K 46
plimit 18 5K 329
in6_multi 35 5K 35
UMA 267 5K 267
vt 11 5K 11
memdesc 1 4K 1
MCA 32 4K 32
evdev 4 4K 4
diradd 31 4K 79
memdesc 1 4K 1
MCA 32 4K 32
evdev 4 4K 4
pf_ifnet 7 4K 10
acpisem 28 4K 28
hhook 15 4K 17
session 24 3K 35
pwddesc 48 3K 890
proc-args 77 3K 1898
terminal 11 3K 11
clone 9 3K 9
uidinfo 3 3K 8
sctp_stro 2 2K 38
uidinfo 3 3K 8
local_apic 1 2K 1
io_apic 1 2K 1
fpukern_ctx 2 2K 2
ipsec-saq 2 2K 2
selfd 32 2K 10873
io_apic 1 2K 1
fpukern_ctx 2 2K 2
ipsec-saq 2 2K 2
sctp_atcl 5 2K 113
Unitno 27 2K 43
CAM XPT 22 2K 543
lockf 15 2K 22
msi 12 2K 12
select 11 2K 35
mkdir 10 2K 96
ipsecpolicy 2 2K 2
acpidev 20 2K 20
acpidev 20 2K 20
NFSD session 1 1K 1
softdep 1 1K 1
indirdep 4 1K 4
softdep 1 1K 1
sahead 1 1K 1
secasvar 1 1K 1
vnodemarker 2 1K 8
secasvar 1 1K 1
ip6ndp 6 1K 7
sctp_ifa 7 1K 8
newdirblk 7 1K 48
CAM periph 4 1K 271
ipsec 3 1K 3
in_multi 3 1K 5
ipsec 3 1K 3
nhops 6 1K 6
toponodes 6 1K 6
isadev 6 1K 6
mount 16 1K 89
pci_link 10 1K 10
crypto 4 1K 4
encap_export_host 12 1K 12
sctp_stri 1 1K 74
isadev 6 1K 6
mount 16 1K 89
pci_link 10 1K 10
crypto 4 1K 4
encap_export_host 12 1K 12
pfil 4 1K 4
procdesc 4 1K 10
cdev 2 1K 2
sctp_ifn 3 1K 8
inpcbpolicy 12 1K 165
mld 3 1K 3
CC Mem 3 1K 7
igmp 3 1K 3
chacha20random 1 1K 1
osd 7 1K 18
tun 4 1K 4
sctp_atky 7 1K 188
DEVFSP 5 1K 10
NFSD lckfile 1 1K 1
NFSD V4client 1 1K 1
DEVFS 9 1K 10
vnodes 1 1K 1
CAM SIM 2 1K 2
feeder 7 1K 7
tcpfunc 3 1K 3
loginclass 3 1K 7
NFSD V4client 1 1K 1
DEVFS 9 1K 10
vnodes 1 1K 1
CAM SIM 2 1K 2
feeder 7 1K 7
tcpfunc 3 1K 3
prison 6 1K 6
lkpikmalloc 5 1K 6
aesni_data 2 1K 2
lkpikmalloc 5 1K 6
cryptodev 2 1K 49
nexusdev 8 1K 8
apmdev 1 1K 1
atkbddev 2 1K 2
CAM dev queue 2 1K 2
netlink 1 1K 1
CAM I/O Scheduler 1 1K 1
CAM path 4 1K 1034
soname 5 1K 3508
apmdev 1 1K 1
atkbddev 2 1K 2
CAM dev queue 2 1K 2
netlink 1 1K 1
CAM I/O Scheduler 1 1K 1
CAM path 4 1K 1034
pmchooks 1 1K 1
filecaps 4 1K 78
sctp_athm 5 1K 150
sctp_vrf 1 1K 1
sctp_map 4 1K 76
vnet 1 1K 1
entropy 2 1K 39
pmc 1 1K 1
acpiintr 1 1K 1
cpus 2 1K 2
freework 1 1K 63
acpiintr 1 1K 1
cpus 2 1K 2
vnet_data_free 1 1K 1
Per-cpu 1 1K 1
p1003.1b 1 1K 1
Per-cpu 1 1K 1
p1003.1b 1 1K 1
ipcomp 0 0K 0
esp 0 0K 0
ah 0 0K 0
filemon 0 0K 0
esp 0 0K 0
ah 0 0K 0
pf_table 0 0K 0
pf_rule 0 0K 0
pf_altq 0 0K 0
pf_osfp 0 0K 0
pf_temp 0 0K 0
sctp_mcore 0 0K 0
pf_rule 0 0K 0
pf_altq 0 0K 0
pf_osfp 0 0K 0
pf_temp 0 0K 0
sctp_socko 0 0K 74
sctp_iter 0 0K 6
sctp_mvrf 0 0K 0
sctp_cpal 0 0K 0
sctp_cmsg 0 0K 0
sctp_stre 0 0K 0
sctp_athi 0 0K 0
sctp_a_it 0 0K 6
sctp_cpal 0 0K 0
sctp_cmsg 0 0K 0
sctp_stre 0 0K 0
sctp_athi 0 0K 0
sctp_aadr 0 0K 0
mqdata 0 0K 0
tcp_do 0 0K 0
tcp_fsb 0 0K 0
sentinel 0 0K 0
jfsync 0 0K 0
jtrunc 0 0K 0
sbdep 0 0K 2
jfsync 0 0K 0
jtrunc 0 0K 0
jsegdep 0 0K 0
jseg 0 0K 0
jfreefrag 0 0K 0
jfreeblk 0 0K 0
jnewblk 0 0K 0
jmvref 0 0K 0
jremref 0 0K 0
jaddref 0 0K 0
freedep 0 0K 0
freeblks 0 0K 62
jseg 0 0K 0
jfreefrag 0 0K 0
jfreeblk 0 0K 0
jnewblk 0 0K 0
jmvref 0 0K 0
jremref 0 0K 0
jaddref 0 0K 0
freedep 0 0K 0
freefrag 0 0K 1
allocindir 0 0K 0
allocindir 0 0K 0
in_mfilter 0 0K 0
ipid 0 0K 0
80211scan 0 0K 0
80211ratectl 0 0K 0
80211power 0 0K 0
80211nodeie 0 0K 0
80211node 0 0K 0
80211mesh_gt 0 0K 0
80211mesh_rt 0 0K 0
80211perr 0 0K 0
80211prep 0 0K 0
80211preq 0 0K 0
80211dfs 0 0K 0
80211crypto 0 0K 0
80211vap 0 0K 0
iflib 0 0K 0
vlan 0 0K 0
gif 0 0K 0
ifdescr 0 0K 0
zlib 0 0K 0
fadvise 0 0K 0
VN POLL 0 0K 0
agp 0 0K 0
statfs 0 0K 237
ipid 0 0K 0
80211scan 0 0K 0
80211ratectl 0 0K 0
80211power 0 0K 0
80211nodeie 0 0K 0
80211node 0 0K 0
80211mesh_gt 0 0K 0
80211mesh_rt 0 0K 0
80211perr 0 0K 0
80211prep 0 0K 0
80211preq 0 0K 0
80211dfs 0 0K 0
80211crypto 0 0K 0
80211vap 0 0K 0
iflib 0 0K 0
vlan 0 0K 0
gif 0 0K 0
ifdescr 0 0K 0
zlib 0 0K 0
fadvise 0 0K 0
VN POLL 0 0K 0
agp 0 0K 0
namei_tracker 0 0K 0
export_host 0 0K 0
cl_savebuf 0 0K 2
nvme_da 0 0K 0
acpipwr 0 0K 0
acpi_perf 0 0K 0
twsbuf 0 0K 0
twe_commands 0 0K 0
tcp_log_dev 0 0K 0
export_host 0 0K 0
cl_savebuf 0 0K 2
nvme_da 0 0K 0
acpipwr 0 0K 0
acpi_perf 0 0K 0
twsbuf 0 0K 0
twe_commands 0 0K 0
midi buffers 0 0K 0
mixer 0 0K 0
ac97 0 0K 0
hdacc 0 0K 0
hdac 0 0K 0
hdaa 0 0K 0
acpicmbat 0 0K 0
SIIS driver 0 0K 0
CAM CCB 0 0K 523
biobuf 0 0K 0
aio 0 0K 0
mixer 0 0K 0
ac97 0 0K 0
hdacc 0 0K 0
hdac 0 0K 0
hdaa 0 0K 0
acpicmbat 0 0K 0
SIIS driver 0 0K 0
CAM CCB 0 0K 523
biobuf 0 0K 0
ioctlops 0 0K 91
eventfd 0 0K 0
Witness 0 0K 0
stack 0 0K 0
mrsasbuf 0 0K 0
mpt_user 0 0K 0
mps_user 0 0K 0
MPSSAS 0 0K 0
mps 0 0K 0
sbuf 0 0K 288
mpr_user 0 0K 0
firmware 0 0K 0
compressor 0 0K 0
MPRSAS 0 0K 0
SWAP 0 0K 0
mpr 0 0K 0
mfibuf 0 0K 0
sysctltmp 0 0K 658
stack 0 0K 0
mrsasbuf 0 0K 0
mpt_user 0 0K 0
mps_user 0 0K 0
MPSSAS 0 0K 0
mps 0 0K 0
sbuf 0 0K 288
mpr_user 0 0K 0
firmware 0 0K 0
compressor 0 0K 0
MPRSAS 0 0K 0
SWAP 0 0K 0
mpr 0 0K 0
mfibuf 0 0K 0
sysctl 0 0K 3
md_sectors 0 0K 0
ekcd 0 0K 0
dumper 0 0K 0
sendfile 0 0K 0
rctl 0 0K 0
md_disk 0 0K 0
malodev 0 0K 0
LED 0 0K 0
ix_sriov 0 0K 0
cache 0 0K 0
aacraidcam 0 0K 0
kcovinfo 0 0K 0
md_sectors 0 0K 0
ekcd 0 0K 0
dumper 0 0K 0
sendfile 0 0K 0
rctl 0 0K 0
md_disk 0 0K 0
malodev 0 0K 0
LED 0 0K 0
ix_sriov 0 0K 0
cache 0 0K 0
aacraidcam 0 0K 0
mbuf 256 8592 1070 19084 0 254 2473472 0
pbuf 2624 0 778 0 0 2 2041472 0
BUF TRIE 144 182 11578 471 0 62 1693440 0
malloc-384 384 4149 21 4151 0 30 1601280 0
malloc-128 128 11718 155 11800 0 126 1519744 0
malloc-4096 4096 330 2 493 0 2 1359872 0
UMA Slabs 0 112 10625 25 10625 0 126 1192800 0
sctp_asoc 2256 2 508 38 0 254 1150560 0
mbuf_cluster 2048 508 0 508 0 254 1040384 0
vmem btag 56 16528 71 16528 0 254 929544 0
FFS inode 1160 505 27 551 0 8 617120 0
sctp_ep 1208 2 508 38 0 254 616080 0
RADIX NODE 144 3722 137 22196 0 62 555696 0
socket 960 29 479 1409 0 254 487680 0
VM OBJECT 264 1748 52 27064 0 30 475200 0
lkpimm 168 1 2327 1 0 62 391104 0
lkpicurr 168 2 2326 2 0 62 391104 0
sctp_raddr 736 4 513 112 0 254 380512 0
lkpicurr 168 2 2326 2 0 62 391104 0
256 Bucket 2048 134 14 1031 0 8 303104 0
malloc-64 64 4269 330 4486 0 254 294336 0
malloc-4096 4096 65 3 920 0 2 278528 0
malloc-2048 2048 6 130 1038 0 8 278528 0
VNODE 448 537 66 585 0 30 270144 0
malloc-65536 65536 4 0 4 0 1 262144 0
THREAD 1824 130 13 130 0 8 260832 0
MAP ENTRY 96 2145 375 95467 0 126 241920 0
malloc-16 16 14569 431 17622 0 254 240000 0
DEVCTL 1024 4 216 130 0 0 225280 0
malloc-65536 65536 1 2 137 0 1 196608 0
malloc-256 256 719 31 901 0 62 192000 0
UMA Zones 768 239 0 239 0 16 183552 0
malloc-128 128 1140 255 27063 0 126 178560 0
malloc-32 32 5311 107 6288 0 254 173376 0
malloc-1024 1024 116 28 131 0 16 147456 0
FFS2 dinode 256 505 65 551 0 62 145920 0
FPU_save_area 832 132 30 171 0 16 134784 0
S VFS Cache 104 982 305 1059 0 126 133848 0
malloc-65536 65536 0 2 56 0 1 131072 0
malloc-65536 65536 2 0 2 0 1 131072 0
malloc-65536 65536 0 2 8 0 1 131072 0
malloc-128 128 910 113 948 0 126 130944 0
malloc-65536 65536 0 2 8 0 1 131072 0
unpcb 256 14 496 1186 0 254 130560 0
mbuf_packet 256 3 505 408 0 254 130048 0
ksiginfo 112 46 998 91 0 126 116928 0
malloc-32768 32768 1 2 121 0 1 98304 0
malloc-16384 16384 2 4 205 0 1 98304 0
VMSPACE 2560 31 5 874 0 4 92160 0
PROC 1368 47 19 889 0 8 90288 0
UMA Kegs 384 225 8 225 0 30 89472 0
128 Bucket 1024 43 40 510 0 16 84992 0
clpbuf 2624 0 32 21 0 16 83968 0
malloc-384 384 158 52 181 0 30 80640 0
sctp_chunk 152 3 517 111 0 254 79040 0
filedesc0 1072 48 22 890 0 8 75040 0
malloc-8192 8192 8 1 10 0 1 73728 0
g_bio 408 0 180 4488 0 30 73440 0
malloc-64 64 512 559 1642 0 254 68544 0
malloc-65536 65536 1 0 1 0 1 65536 0
malloc-65536 65536 1 0 1 0 1 65536 0
malloc-256 256 173 82 500 0 62 65280 0
malloc-65536 65536 1 0 1 0 1 65536 0
malloc-256 256 212 43 220 0 62 65280 0
malloc-256 256 89 166 1004 0 62 65280 0
malloc-4096 4096 11 3 14 0 2 57344 0
malloc-64 64 292 527 24839 0 254 52416 0
malloc-128 128 146 257 257 0 126 51584 0
malloc-128 128 163 240 863 0 126 51584 0
32 Bucket 256 60 135 9450 0 62 49920 0
DIRHASH 1024 35 13 35 0 16 49152 0
NAMEI 1024 0 48 12889 0 16 49152 0
malloc-16384 16384 3 0 3 0 1 49152 0
malloc-8192 8192 6 0 6 0 1 49152 0
malloc-8192 8192 4 2 105 0 1 49152 0
malloc-8192 8192 6 0 6 0 1 49152 0
malloc-384 384 65 55 173 0 30 46080 0
syncache 168 0 264 5 0 254 44352 0
udp_inpcb 456 6 90 152 0 30 43776 0
malloc-8192 8192 4 1 30 0 1 40960 0
Mountpoints 2752 2 12 2 0 4 38528 0
da_ccb 544 0 70 1242 0 16 38080 0
pcpu-8 8 4324 284 4384 0 254 36864 0
64 Bucket 512 63 9 1755 0 30 36864 0
malloc-64 64 82 485 1180 0 254 36288 0
malloc-64 64 160 407 1537 0 254 36288 0
malloc-64 64 80 487 1036 0 254 36288 0
malloc-64 64 7 560 41 0 254 36288 0
malloc-64 64 35 532 41 0 254 36288 0
malloc-128 128 25 254 185 0 126 35712 0
malloc-128 128 42 237 3315 0 126 35712 0
malloc-128 128 79 200 770 0 126 35712 0
routing nhops 256 14 121 21 0 62 34560 0
ttyoutq 256 72 63 160 0 62 34560 0
malloc-256 256 54 81 312 0 62 34560 0
malloc-256 256 59 76 201 0 62 34560 0
malloc-256 256 55 80 710 0 62 34560 0
malloc-256 256 6 129 327 0 62 34560 0
malloc-32768 32768 1 0 1 0 1 32768 0
malloc-32768 32768 1 0 1 0 1 32768 0
malloc-16384 16384 1 1 11 0 1 32768 0
malloc-32768 32768 1 0 1 0 1 32768 0
malloc-2048 2048 2 14 14 0 8 32768 0
malloc-2048 2048 9 7 9 0 8 32768 0
malloc-2048 2048 8 8 39 0 8 32768 0
malloc-2048 2048 0 16 50 0 8 32768 0
malloc-2048 2048 5 11 54 0 8 32768 0
malloc-1024 1024 3 29 43 0 16 32768 0
malloc-1024 1024 6 26 1448 0 16 32768 0
malloc-1024 1024 5 27 41 0 16 32768 0
malloc-1024 1024 6 26 180 0 16 32768 0
malloc-1024 1024 16 16 20 0 16 32768 0
malloc-1024 1024 18 14 18 0 16 32768 0
malloc-1024 1024 1 31 6 0 16 32768 0
malloc-1024 1024 16 16 20 0 16 32768 0
malloc-1024 1024 18 14 18 0 16 32768 0
malloc-512 512 1 63 119 0 30 32768 0
malloc-512 512 2 62 19 0 30 32768 0
malloc-512 512 1 63 74 0 30 32768 0
malloc-512 512 11 53 60 0 30 32768 0
pcpu-64 64 497 15 497 0 254 32768 0
pcpu-64 64 497 15 497 0 254 32768 0
ttyinq 160 135 65 300 0 62 32000 0
cpuset 104 7 272 7 0 126 29016 0
malloc-32 32 286 596 1449 0 254 28224 0
16 Bucket 144 48 148 233 0 62 28224 0
4 Bucket 48 6 582 51 0 254 28224 0
ripcb 424 3 60 6 0 30 26712 0
TURNSTILE 136 144 45 144 0 62 25704 0
malloc-4096 4096 3 3 627 0 2 24576 0
PGRP 88 24 252 35 0 126 24288 0
ertt_txseginfo 40 0 606 244 0 254 24240 0
rl_entry 40 37 569 37 0 254 24240 0
rtentry 168 17 127 21 0 62 24192 0
pipe 728 11 22 330 0 16 24024 0
Files 80 103 197 7138 0 126 24000 0
8 Bucket 80 53 247 266 0 126 24000 0
tcp_inpcb 1296 3 15 7 0 8 23328 0
malloc-384 384 20 40 365 0 30 23040 0
malloc-384 384 3 57 15 0 30 23040 0
malloc-384 384 10 50 12 0 30 23040 0
malloc-384 384 1 59 23 0 30 23040 0
SLEEPQUEUE 88 144 112 144 0 126 22528 0
hostcache 64 1 314 1 0 254 20160 0
udp_inpcb ports 32 3 627 40 0 254 20160 0
ertt 72 3 277 7 0 126 20160 0
PWD 32 12 618 140 0 254 20160 0
malloc-32 32 34 596 195 0 254 20160 0
malloc-32 32 141 489 191 0 254 20160 0
malloc-32 32 17 613 553 0 254 20160 0
malloc-32 32 38 592 59 0 254 20160 0
malloc-32 32 46 584 103 0 254 20160 0
2 Bucket 32 49 581 309 0 254 20160 0
KNOTE 160 11 114 262 0 62 20000 0
epoch_record pcpu 256 4 60 4 0 62 16384 0
malloc-16384 16384 1 0 1 0 1 16384 0
malloc-16384 16384 1 0 1 0 1 16384 0
malloc-16384 16384 1 0 1 0 1 16384 0
malloc-8192 8192 2 0 2 0 1 16384 0
malloc-16384 16384 1 0 1 0 1 16384 0
malloc-16384 16384 1 0 1 0 1 16384 0
malloc-16384 16384 1 0 1 0 1 16384 0
malloc-8192 8192 2 0 2 0 1 16384 0
malloc-8192 8192 2 0 2 0 1 16384 0
malloc-4096 4096 1 3 238 0 2 16384 0
malloc-2048 2048 4 4 4 0 8 16384 0
malloc-2048 2048 1 7 192 0 8 16384 0
malloc-512 512 3 29 3 0 30 16384 0
malloc-512 512 0 32 1 0 30 16384 0
malloc-512 512 0 32 1 0 30 16384 0
malloc-512 512 1 31 1 0 30 16384 0
SMR CPU 32 7 504 7 0 254 16352 0
sctp_laddr 48 0 336 6 0 254 16128 0
malloc-512 512 0 32 1 0 30 16384 0
malloc-512 512 1 31 1 0 30 16384 0
SMR CPU 32 7 504 7 0 254 16352 0
kenv 258 15 45 1040 0 30 15480 0
mqnode 416 3 33 3 0 30 14976 0
vmem 1856 1 7 1 0 8 14848 0
SMR SHARED 24 7 504 7 0 254 12264 0
tcp_inpcb ports 32 1 377 1 0 254 12096 0
vmem 1856 1 7 1 0 8 14848 0
SMR SHARED 24 7 504 7 0 254 12264 0
malloc-32 32 24 354 2849 0 254 12096 0
malloc-16 16 45 705 1426 0 254 12000 0
malloc-16 16 64 686 405 0 254 12000 0
malloc-16 16 29 721 192 0 254 12000 0
malloc-16 16 17 733 178 0 254 12000 0
malloc-16 16 8 742 8 0 254 12000 0
malloc-16 16 263 487 350 0 254 12000 0
malloc-16 16 14 736 26485 0 254 12000 0
malloc-4096 4096 1 1 1 0 2 8192 0
malloc-4096 4096 1 1 2 0 2 8192 0
pcpu-16 16 14 498 14 0 254 8192 0
malloc-4096 4096 1 1 2 0 2 8192 0
vtnet_tx_hdr 24 0 334 2143 0 254 8016 0
UMA Slabs 1 176 8 14 8 0 62 3872 0
KMAP ENTRY 96 12 27 14 0 0 3744 0
FFS1 dinode 128 0 0 0 0 126 0 0
ada_ccb 272 0 0 0 0 30 0 0
swblk 136 0 0 0 0 62 0 0
swpctrie 144 0 0 0 0 62 0 0
pf state scrubs 40 0 0 0 0 254 0 0
FFS1 dinode 128 0 0 0 0 126 0 0
ada_ccb 272 0 0 0 0 30 0 0
swblk 136 0 0 0 0 62 0 0
swpctrie 144 0 0 0 0 62 0 0
pf frag entries 40 0 0 0 0 254 0 0
pf frags 248 0 0 0 0 62 0 0
pf table entries 160 0 0 0 0 254 0 0
pf table entry counters 64 0 0 0 0 254 0 0
pf source nodes 136 0 0 0 0 254 0 0
pf state keys 88 0 0 0 0 126 0 0
pf states 312 0 0 0 0 254 0 0
pf tags 104 0 0 0 0 126 0 0
pf mtags 184 0 0 0 0 62 0 0
tcp_bbr_pcb 832 0 0 0 0 16 0 0
tcp_bbr_map 128 0 0 0 0 126 0 0
tcp_rack_pcb 896 0 0 0 0 16 0 0
tcp_rack_map 120 0 0 0 0 126 0 0
ipq 56 0 0 0 0 254 0 0
tfo_ccache_entries 80 0 0 0 0 126 0 0
tfo 4 0 0 0 0 254 0 0
sackhole 32 0 0 0 0 254 0 0
sctp_asconf_ack 48 0 0 0 0 254 0 0
sctp_asconf 40 0 0 0 0 254 0 0
sctp_stream_msg_out 112 0 0 0 0 254 0 0
sctp_readq 152 0 0 0 0 254 0 0
tcp_log_id_node 120 0 0 0 0 126 0 0
tcp_log_id_bucket 176 0 0 0 0 62 0 0
tcp_log 416 0 0 0 0 254 0 0
tcpreass 48 0 0 0 0 254 0 0
ripcb ports 32 0 0 0 0 254 0 0
udplite_inpcb ports 32 0 0 0 0 254 0 0
udplite_inpcb 456 0 0 0 0 30 0 0
IPsec SA lft_c 16 0 0 0 0 254 0 0
itimer 352 0 0 0 0 30 0 0
AIOLIO 272 0 0 0 0 30 0 0
AIOCB 552 0 0 0 0 16 0 0
AIO 208 0 0 0 0 62 0 0
TMPFS node 232 0 0 0 0 62 0 0
mqnotifier 216 0 0 0 0 62 0 0
mvdata 64 0 0 0 0 254 0 0
mqueue 248 0 0 0 0 62 0 0
NCLNODE 608 0 0 0 0 16 0 0
LTS VFS Cache 360 0 0 0 0 30 0 0
L VFS Cache 320 0 0 0 0 30 0 0
STS VFS Cache 144 0 0 0 0 62 0
Reply all
Reply to author
Forward
0 new messages