panic: /syzkaller/managers/main/kernel/sys/netinet/in_pcb.c:LINE: in_pcblbgroup_insert: Bad list head ADDR first->prev !
0 views
Skip to first unread message
syzbot
May 4, 2025, 5:46:29 AMMay 4
to syzkaller-f...@googlegroups.com
Hello,
syzbot found the following issue on:
HEAD commit: 75d173a84836 netinet: Make in_systm.h self-contained
git tree: freebsd-src
console output: https://syzkaller.appspot.com/x/log.txt?x=150a1a70580000
dashboard link: https://syzkaller.appspot.com/bug?extid=880f3a35135a853c89b2
Unfortunately, I don't have any reproducer for this issue yet.
IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+880f3a...@syzkaller.appspotmail.com
panic: /syzkaller/managers/main/kernel/sys/netinet/in_pcb.c:341: in_pcblbgroup_insert: Bad list head 0xfffffe0059be9510 first->prev != head
cpuid = 0
time = 8
KDB: stack backtrace:
db_trace_self_wrapper() at db_trace_self_wrapper+0xc6/frame 0xfffffe0057853550
kdb_backtrace() at kdb_backtrace+0xd0/frame 0xfffffe00578536b0
vpanic() at vpanic+0x257/frame 0xfffffe0057853870
panic() at panic+0xb5/frame 0xfffffe0057853940
in_pcblbgroup_insert() at in_pcblbgroup_insert+0x1f8/frame 0xfffffe0057853980
in_pcbinslbgrouphash() at in_pcbinslbgrouphash+0x576/frame 0xfffffe00578539f0
in_pcbinshash() at in_pcbinshash+0x414/frame 0xfffffe0057853a60
in6_pcbbind() at in6_pcbbind+0x36b/frame 0xfffffe0057853ad0
tcp6_usr_bind() at tcp6_usr_bind+0x2ed/frame 0xfffffe0057853bc0
sobind() at sobind+0xc3/frame 0xfffffe0057853c10
kern_bindat() at kern_bindat+0x2c6/frame 0xfffffe0057853cd0
sys_bind() at sys_bind+0xf5/frame 0xfffffe0057853d10
amd64_syscall() at amd64_syscall+0x4af/frame 0xfffffe0057853f30
fast_syscall_common() at fast_syscall_common+0xf8/frame 0xfffffe0057853f30
--- syscall (198, FreeBSD ELF64, __syscall), rip = 0x3a197a, rsp = 0x8267c3f08, rbp = 0x8267c3f80 ---
KDB: enter: panic
[ thread pid 1087 tid 100625 ]
Stopped at kdb_enter+0x6e: movq $0,0x25bd7e7(%rip)
db>
db> set $lines = 0
db> set $maxwidth = 0
db> show registers
cs 0x20
ds 0x3b
es 0x3b
fs 0x13
gs 0x1b
ss 0x28
rax 0x12
rcx 0xfffffe00033eee30
rdx 0
rbx 0xffffffff827a9840 .str.27
rsp 0xfffffe0057853690
rbp 0xfffffe00578536b0
rsi 0
rdi 0xffffffff816133c9 printf+0x149
r8 0
r9 0xffffffff
r10 0
r11 0xfffffe00549bdc60
r12 0xfffffe00549bd740
r13 0xfffffffffffffffe
r14 0xffffffff827a9840 .str.27
r15 0
rip 0xffffffff815fd9ae kdb_enter+0x6e
rflags 0x46
kdb_enter+0x6e: movq $0,0x25bd7e7(%rip)
db> show proc
Process 1087 (syz-executor) at 0xfffffe00549a0040:
state: NORMAL
uid: 0 gids: 0, 0, 5
parent: pid 766 at 0xfffffe00080085c0
ABI: FreeBSD ELF64
flag: 0x10100080 flag2: 0x1
arguments: ./syz-executor exec
reaper: 0xfffffe0008007040 reapsubtree: 1
sigparent: 20
vmspace: 0xfffffe005497e6d8
(map 0xfffffe005497e6d8)
(map.pmap 0xfffffe005497e778)
(pmap 0xfffffe005497e7e8)
threads: 3
100609 RunQ syz-executor
100625 Run CPU 0 syz-executor
100627 S connec 0xfffffe005a0558da syz-executor
db> ps
pid ppid pgrp uid state wmesg wchan cmd
1096 767 767 0 T (threaded) syz-executor
100631 RunQ syz-executor
1088 764 764 0 R (threaded) syz-executor
100478 Run CPU 1 syz-executor
100626 D biowr 0xfffffe00085d0bc8 syz-executor
1087 766 766 0 R (threaded) syz-executor
100609 RunQ syz-executor
100625 Run CPU 0 syz-executor
100627 S connec 0xfffffe005a0558da syz-executor
1084 1 766 0 S uwait 0xfffffe007cb96c80 syz-executor
1083 1 766 0 S uwait 0xfffffe0071f0e200 syz-executor
1076 0 0 0 DL (threaded) [so_splice]
100605 D - 0xfffffe007cb95f00 [thr_0]
100606 D - 0xfffffe007cb95f40 [thr_1]
1064 1 766 0 S uwait 0xfffffe007cb96a80 syz-executor
1063 1 766 0 S uwait 0xfffffe005a386a80 syz-executor
1050 1 766 0 SV uwait 0xfffffe0071f0d980 syz-executor
1049 1 766 0 S uwait 0xfffffe0071f0dd80 syz-executor
1045 1 764 0 S uwait 0xfffffe005a386100 syz-executor
1044 1 764 0 S uwait 0xfffffe0058cfba80 syz-executor
1043 1 764 0 S uwait 0xfffffe005a385d00 syz-executor
1042 1 764 0 S uwait 0xfffffe0071f0e700 syz-executor
1041 1 764 0 S uwait 0xfffffe0058cfbe00 syz-executor
1038 1 765 0 SV uwait 0xfffffe005a385d80 syz-executor
1028 1 765 0 S uwait 0xfffffe0058cfb880 syz-executor
1027 1 764 0 S uwait 0xfffffe005a385a80 syz-executor
1024 1 765 0 S uwait 0xfffffe0071f0f000 syz-executor
1021 0 0 0 DL mdwait 0xfffffe007c84b000 [md3]
1014 1 765 0 S uwait 0xfffffe0071f0e900 syz-executor
1010 1 766 0 S uwait 0xfffffe0071f0ee80 syz-executor
1009 1 766 0 S uwait 0xfffffe0071f0f100 syz-executor
1007 1 766 0 S uwait 0xfffffe005a385b80 syz-executor
991 0 0 0 DL mdwait 0xfffffe007bf75000 [md2]
986 1 766 0 S uwait 0xfffffe0071f0e300 syz-executor
985 1 766 0 S uwait 0xfffffe005a385880 syz-executor
984 0 0 0 DL mdwait 0xfffffe007bf3a000 [md0]
980 1 765 0 S uwait 0xfffffe005860f700 syz-executor
974 1 764 0 S uwait 0xfffffe005a387000 syz-executor
967 1 766 0 S uwait 0xfffffe005a385480 syz-executor
965 964 765 0 S uwait 0xfffffe005a385380 syz-executor
964 1 765 0 SV uwait 0xfffffe005a385280 syz-executor
963 1 766 0 S uwait 0xfffffe005a385080 syz-executor
959 1 764 0 SV uwait 0xfffffe005860f600 syz-executor
958 1 764 0 S uwait 0xfffffe005a386200 syz-executor
957 1 767 0 SV sigwait 0xfffffe00549530f0 syz-executor
954 1 764 0 S uwait 0xfffffe005a386000 syz-executor
953 1 767 0 S uwait 0xfffffe0058cf8800 syz-executor
952 1 767 0 S uwait 0xfffffe0071f0f400 syz-executor
950 1 764 0 S uwait 0xfffffe005a385e80 syz-executor
938 1 767 0 S uwait 0xfffffe005a386880 syz-executor
935 1 764 0 S uwait 0xfffffe005a388300 syz-executor
934 1 764 0 S uwait 0xfffffe0058cf8200 syz-executor
925 0 0 0 DL mdwait 0xfffffe007b6fa000 [md1]
924 1 767 0 S uwait 0xfffffe005a385580 syz-executor
920 1 766 0 S uwait 0xfffffe005a387b00 syz-executor
919 1 766 0 S uwait 0xfffffe005a386980 syz-executor
918 1 766 0 S uwait 0xfffffe005a386500 syz-executor
917 1 766 0 S uwait 0xfffffe005860f800 syz-executor
916 1 766 0 S uwait 0xfffffe0071f0f300 syz-executor
913 1 767 60928 T syz-executor
912 1 767 60928 S uwait 0xfffffe005a387800 syz-executor
911 1 767 0 S uwait 0xfffffe0054607900 syz-executor
904 1 764 0 SV uwait 0xfffffe005a387b80 syz-executor
900 1 764 0 S uwait 0xfffffe0071f0f200 syz-executor
899 1 764 0 S uwait 0xfffffe005a388200 syz-executor
896 1 767 0 S uwait 0xfffffe005a386400 syz-executor
895 1 764 0 S uwait 0xfffffe0054607d00 syz-executor
879 1 767 60928 S uwait 0xfffffe0058cf9700 syz-executor
878 1 767 0 S uwait 0xfffffe005860f300 syz-executor
867 1 764 0 S uwait 0xfffffe0058cf8980 syz-executor
864 1 864 0 Ss+ ttyin 0xfffffe0058e360b0 getty
863 1 863 0 Ss+ ttyin 0xfffffe0058e35cb0 getty
862 1 862 0 Ss+ ttyin 0xfffffe0058e358b0 getty
861 1 861 0 Ss+ ttyin 0xfffffe0058e354b0 getty
860 1 860 0 Ss+ ttyin 0xfffffe0058e350b0 getty
859 1 859 0 Ss+ ttyin 0xfffffe0058e34cb0 getty
858 1 858 0 Ss+ ttyin 0xfffffe0058e348b0 getty
857 1 857 0 Ss+ ttyin 0xfffffe0058e344b0 getty
856 1 856 0 Ss+ ttyin 0xfffffe00082690b0 getty
848 1 766 0 S uwait 0xfffffe0058cf9e80 syz-executor
846 0 0 0 DL (threaded) [KTLS]
100174 D - 0xfffffe0007f5e400 [thr_0]
100175 D - 0xfffffe0007f5e480 [thr_1]
100176 D - 0xffffffff83cadc28 [reclaim_0]
842 1 765 0 SV lockf 0xfffffe0058d9ff00 syz-executor
841 0 0 0 DL - 0xffffffff83cac400 [soaiod4]
840 0 0 0 DL - 0xffffffff83cac400 [soaiod3]
839 0 0 0 DL - 0xffffffff83cac400 [soaiod2]
838 0 0 0 DL - 0xffffffff83cac400 [soaiod1]
830 1 765 0 S uwait 0xfffffe0058cf9d80 syz-executor
827 1 764 0 S uwait 0xfffffe005860f400 syz-executor
823 1 765 0 S uwait 0xfffffe0058cf8700 syz-executor
822 1 767 -1 S uwait 0xfffffe0058cf8500 syz-executor
820 810 820 0 Ss select 0xfffffe0059bec740 dhclient
810 788 424 65 S select 0xfffffe0059beb4c0 dhclient
809 0 0 0 DL aiordy 0xfffffe00548fcb00 [aiod4]
808 0 0 0 DL aiordy 0xfffffe00548fd060 [aiod3]
807 0 0 0 DL aiordy 0xfffffe005490f5c0 [aiod2]
806 0 0 0 DL aiordy 0xfffffe005490e040 [aiod1]
788 1 424 0 S wait 0xfffffe005490c000 sh
767 763 767 0 S nanslp 0xffffffff83b9c500 syz-executor
766 763 766 0 S nanslp 0xffffffff83b9c501 syz-executor
765 763 765 0 R syz-executor
764 763 764 0 S nanslp 0xffffffff83b9c501 syz-executor
763 761 761 0 S select 0xfffffe0059bec440 syz-executor
761 759 761 0 Ss pause 0xfffffe0008024b70 csh
759 682 759 0 Ss select 0xfffffe0059bec3c0 sshd
737 1 18 0 S+ nanslp 0xffffffff83b9c501 sleep
682 1 682 0 Ss select 0xfffffe0059bec1c0 sshd
17 0 0 0 DL syncer 0xffffffff83cb9da0 [syncer]
16 0 0 0 DL vlruwt 0xfffffe0008026040 [vnlru]
15 0 0 0 DL (threaded) [bufdaemon]
100080 D psleep 0xffffffff83cb8360 [bufdaemon]
100083 D - 0xffffffff83002140 [bufspacedaemon-0]
100094 D sdflush 0xfffffe005a0aa8e8 [/ worker]
9 0 0 0 DL psleep 0xffffffff83d03380 [vmdaemon]
8 0 0 0 DL (threaded) [pagedaemon]
100078 D psleep 0xffffffff83ce92f8 [dom0]
100084 D launds 0xffffffff83ce9304 [laundry: dom0]
100085 D umarcl 0xffffffff81dc7b80 [uma]
7 0 0 0 DL - 0xffffffff83919cd0 [rand_harvestq]
6 0 0 0 DL pftm 0xffffffff8457e850 [pf purge]
5 0 0 0 DL waiting 0xffffffff848ca6c0 [sctp_iterator]
4 0 0 0 DL (threaded) [cam]
100046 D - 0xffffffff838e4340 [doneq0]
100047 D - 0xffffffff838e42c0 [async]
100076 D - 0xffffffff838e4140 [scanner]
3 0 0 0 DL (threaded) [crypto]
100043 D crypto_ 0xffffffff83ce4b00 [crypto]
100044 D crypto_ 0xfffffe00546add30 [crypto returns 0]
100045 D crypto_ 0xfffffe00546add80 [crypto returns 1]
14 0 0 0 DL seqstat 0xfffffe0008bfa488 [sequencer 00]
13 0 0 0 DL (threaded) [geom]
100037 D - 0xffffffff83b44f00 [g_event]
100038 D - 0xffffffff83b44f20 [g_up]
100039 D - 0xffffffff83b44f40 [g_down]
2 0 0 0 WL (threaded) [clock]
100031 I [clock (0)]
100032 I [clock (1)]
12 0 0 0 WL (threaded) [intr]
100013 I [swi6: task queue]
100014 I [swi6: Giant taskq]
100016 I [swi5: fast taskq]
100033 I [swi1: netisr 0]
100034 I [swi1: hpts]
100035 I [swi1: hpts]
100048 I [irq24: virtio_pci0]
100049 I [irq25: virtio_pci0]
100050 I [irq26: virtio_pci0]
100051 I [irq27: virtio_pci0]
100052 I [irq28: virtio_pci1]
100053 I [irq29: virtio_pci1]
100054 I [irq30: virtio_pci1]
100055 I [irq31: virtio_pci1]
100056 I [irq32: virtio_pci1]
100061 I [irq10: virtio_pci2]
100063 I [irq1: atkbd0]
100064 I [irq12: psm0]
100065 I [swi0: uart uart++]
100069 I [swi1: pf send]
11 0 0 0 RL (threaded) [idle]
100003 CanRun [idle: cpu0]
100004 CanRun [idle: cpu1]
1 0 1 0 SLs wait 0xfffffe0008007040 [init]
10 0 0 0 DL audit_w 0xffffffff83ce55a0 [audit]
0 0 0 0 DLs (threaded) [kernel]
100000 D parked 0xffffffff84c2bff0 [swapper]
100005 D - 0xfffffe00546bd100 [softirq_0]
100006 D - 0xfffffe00546bd000 [softirq_1]
100007 D - 0xfffffe00546bce00 [if_io_tqg_0]
100008 D - 0xfffffe00546bcd00 [if_io_tqg_1]
100009 D - 0xfffffe00546bcc00 [if_config_tqg_0]
100010 D - 0xfffffe0008be3c00 [kqueue_ctx taskq]
100011 D - 0xfffffe0008be3a00 [jail_remove taskq]
100012 D - 0xfffffe0008be3800 [bus taskq]
100015 D - 0xfffffe0008be3200 [thread taskq]
100017 D - 0xfffffe0008be2d00 [aiod_kick taskq]
100018 D - 0xfffffe0008be2b00 [deferred_unmount ta]
100019 D - 0xfffffe0008be2900 [inm_free taskq]
100020 D - 0xfffffe0008be2700 [in6m_free taskq]
100021 D - 0xfffffe0008be2500 [linuxkpi_irq_wq]
100022 D - 0xfffffe0008be2300 [linuxkpi_short_wq_0]
100023 D - 0xfffffe0008be2300 [linuxkpi_short_wq_1]
100024 D - 0xfffffe0008be2300 [linuxkpi_short_wq_2]
100025 D - 0xfffffe0008be2300 [linuxkpi_short_wq_3]
100026 D - 0xfffffe0008be1d00 [linuxkpi_long_wq_0]
100027 D - 0xfffffe0008be1d00 [linuxkpi_long_wq_1]
100028 D - 0xfffffe0008be1d00 [linuxkpi_long_wq_2]
100029 D - 0xfffffe0008be1d00 [linuxkpi_long_wq_3]
100036 D - 0xfffffe0008be1200 [firmware taskq]
100041 D - 0xfffffe005476d000 [crypto_0]
100042 D - 0xfffffe005476d000 [crypto_1]
100057 D - 0xfffffe005476c300 [vtnet0 rxq 0]
100058 D - 0xfffffe005476c200 [vtnet0 txq 0]
100059 D - 0xfffffe005476c100 [vtnet0 rxq 1]
100060 D - 0xfffffe005476c000 [vtnet0 txq 1]
100062 D vtbslp 0xfffffe0007f83400 [virtio_balloon]
100066 D - 0xffffffff827aeb81 [deadlkres]
100070 D - 0xfffffe0058cfdd00 [acpi_task_0]
100071 D - 0xfffffe0058cfdd00 [acpi_task_1]
100072 D - 0xfffffe0058cfdd00 [acpi_task_2]
100074 D - 0xfffffe0008be4a00 [mca taskq]
100075 D - 0xfffffe005476ca00 [CAM taskq]
100077 D - 0xfffffe005476ab00 [ipsec_offload]
100349 D - 0xfffffe0071efc700 [netlink_socket (PID]
100480 D - 0xfffffe0071ef2500 [system_taskq_0]
100481 D - 0xfffffe0071ef2500 [system_taskq_1]
100482 D - 0xfffffe0071ef2900 [system_delay_taskq_]
100483 D - 0xfffffe0071ef2900 [system_delay_taskq_]
100487 D - 0xfffffe0071ef3b00 [arc_prune]
100488 D - 0xfffffe007cb6cd00 [arc_flush_0]
100489 D - 0xfffffe007cb6cd00 [arc_flush_1]
100491 D - 0xfffffe0071efc500 [netlink_socket (PID]
100520 D - 0xfffffe007cb6c800 [dbu_evict]
100552 D - 0xfffffe007cb6ba00 [z_vdev_file_0]
100553 D - 0xfffffe007cb6ba00 [z_vdev_file_1]
100554 D - 0xfffffe007cb6ba00 [z_vdev_file_2]
100555 D - 0xfffffe007cb6ba00 [z_vdev_file_3]
100556 D - 0xfffffe007cb6ba00 [z_vdev_file_4]
100557 D - 0xfffffe007cb6ba00 [z_vdev_file_5]
100558 D - 0xfffffe007cb6ba00 [z_vdev_file_6]
100559 D - 0xfffffe007cb6ba00 [z_vdev_file_7]
100560 D - 0xfffffe007cb6ba00 [z_vdev_file_8]
100561 D - 0xfffffe007cb6ba00 [z_vdev_file_9]
100562 D - 0xfffffe007cb6ba00 [z_vdev_file_10]
100563 D - 0xfffffe007cb6ba00 [z_vdev_file_11]
100564 D - 0xfffffe007cb6ba00 [z_vdev_file_12]
100565 D - 0xfffffe007cb6ba00 [z_vdev_file_13]
100566 D - 0xfffffe007cb6ba00 [z_vdev_file_14]
100567 D - 0xfffffe007cb6ba00 [z_vdev_file_15]
100607 D - 0xfffffe007cb6b900 [zfsvfs]
db> show all locks
Process 1088 (syz-executor) thread 0xfffffe00549bc740 (100626)
exclusive lockmgr bufwait (bufwait) r = 0 (0xfffffe00085d0c48) locked @ /syzkaller/managers/main/kernel/sys/kern/vfs_bio.c:1752
exclusive lockmgr ufs (ufs) r = 0 (0xfffffe0071ebd070) locked @ /syzkaller/managers/main/kernel/sys/kern/vfs_vnops.c:1240
Process 1087 (syz-executor) thread 0xfffffe00549bd740 (100625)
exclusive sleep mutex tcphash (tcphash) r = 0 (0xfffffe0007fe7a70) locked @ /syzkaller/managers/main/kernel/sys/netinet/tcp_usrreq.c:313
exclusive rw tcpinp (tcpinp) r = 0 (0xfffffe0071a8b020) locked @ /syzkaller/managers/main/kernel/sys/netinet/tcp_usrreq.c:286
db> show malloc
Type InUse MemUse Requests
pf_hash 6 12804K 6
linker 420 12251K 753
tcp_hpts 7 4801K 7
sctp_stro 6 4760K 11
devbuf 4188 4324K 4219
solaris 2244 3597K 4470
sysctloid 44990 2643K 45102
vtbuf 24 1968K 46
kobj 331 1324K 542
newblk 44 1035K 2154
filedesc 129 1030K 555
vfscache 3 1025K 3
pcb 76 715K 302
inodedep 29 523K 504
subproc 249 514K 1241
ufs_quota 1 512K 1
vfs_hash 1 512K 1
callout 2 512K 2
intr 4 472K 4
vnet_data 2 224K 2
acpitask 1 224K 1
KTRACE 101 201K 23036
acpica 1674 184K 54432
vmem 5 144K 6
tidhash 3 141K 3
pagedep 18 133K 253
tfo_ccache 1 128K 1
IP reass 1 128K 1
DEVFS1 114 114K 132
sem 4 106K 4
gtaskqueue 18 98K 18
bus 1002 82K 5074
mtx_pool 3 74K 3
syncache 1 68K 1
NFSD srvcache 3 68K 3
module 526 66K 529
ddb_capture 1 64K 1
kdtrace 342 64K 1734
umtx 464 58K 464
shm 7 44K 13
temp 36 38K 2178
DEVFS3 133 34K 144
hostcache 1 32K 1
msg 4 30K 4
kbdmux 6 28K 6
DEVFS_RULE 56 20K 56
BPF 17 20K 43
kstat_data 19 19K 19
ifaddr 67 19K 69
LRO 18 19K 18
ufs_mount 4 17K 5
proc 3 17K 3
md_disk 6 17K 14
tty 16 16K 16
routetbl 130 16K 410
ithread 90 15K 90
GEOM 89 15K 681
lltable 46 15K 50
bus-sc 34 15K 1650
eventhandler 166 14K 166
ifnet 7 13K 7
ether_multi 152 13K 174
kenv 95 12K 95
sctp_atcl 28 11K 104
CAM queue 5 11K 1528
taskqueue 96 10K 99
rman 82 10K 447
cred 38 10K 261
shmfd 4 10K 10
rpc 8 9K 8
in6_multi 65 9K 65
ksem 3 9K 5
bmsafemap 2 9K 449
plimit 22 9K 494
devstat 4 9K 4
UART 12 9K 12
filemon 1 8K 5
pfs_vncache 1 8K 1
md_sectors 2 8K 2
kqueue 119 8K 1419
audit_evclass 239 8K 301
freework 30 8K 513
pwddesc 116 8K 1111
UMA 341 7K 341
sglist 6 7K 6
CAM DEV 3 6K 510
pfs_nodes 22 6K 22
ufs_dirhash 24 5K 24
pf_ifnet 10 5K 19
tcp_fsb_rack 2 5K 12
vt 11 5K 11
memdesc 1 4K 1
MCA 32 4K 32
crypto 12 4K 42
evdev 4 4K 4
CC Mem 30 4K 246
DEVFSP 60 4K 112
acpisem 28 4K 28
proc-args 123 3K 2140
terminal 11 3K 11
uidinfo 5 3K 13
acpidev 20 3K 20
lockf 24 3K 696
hhook 8 3K 10
clone 9 3K 9
kcovinfo 36 3K 36
local_apic 1 2K 1
io_apic 1 2K 1
dirrem 8 2K 411
ipsec-saq 2 2K 2
selfd 32 2K 51092
session 16 2K 43
inpcbpolicy 62 2K 728
ip6ndp 12 2K 13
Unitno 29 2K 86
sctp_ifa 13 2K 14
newdirblk 13 2K 223
osd 60 2K 292
CAM XPT 22 2K 543
in_multi 6 2K 11
tun 4 2K 4
vnodemarker 3 2K 35
toponodes 6 2K 6
ipsecpolicy 2 2K 2
ip6opt 8 2K 26
sctp_atky 34 2K 119
sctp_timw 5 2K 5
freeblks 5 2K 268
cryptodev 18 2K 124
msi 9 2K 9
netlink 2 2K 80
sctp_stri 2 1K 8
softdep 1 1K 1
mkdir 8 1K 446
sahead 1 1K 1
secasvar 1 1K 1
nhops 6 1K 8
NFSD session 1 1K 1
freefile 7 1K 307
CAM periph 4 1K 271
sctp_ifn 6 1K 14
ipsec 3 1K 3
diradd 6 1K 429
indirdep 3 1K 186
mld 6 1K 6
igmp 6 1K 6
pfil 6 1K 6
select 6 1K 49
isadev 6 1K 8
mount 16 1K 586
pci_link 10 1K 10
encap_export_host 12 1K 12
cdev 2 1K 2
lkpikmalloc 8 1K 9
sctp_athm 28 1K 108
ktls 3 1K 21
frag6 4 1K 5
chacha20random 1 1K 1
biobuf 1 1K 1
tcp_pcm_rack 1 1K 6
vnodes 1 1K 7
NFSD lckfile 1 1K 1
NFSD V4client 1 1K 1
DEVFS 9 1K 10
CAM SIM 2 1K 2
prison 8 1K 8
feeder 7 1K 7
taskq 2 1K 2
sctp_map 12 1K 24
tcpfunc 3 1K 3
loginclass 3 1K 5
filedesc_to_leader 3 1K 6
nexusdev 8 1K 8
apmdev 1 1K 1
atkbddev 2 1K 2
ktls_ocf 1 1K 3
ip6_msource 2 1K 3
ip_msource 2 1K 2
ip_moptions 2 1K 10
VN POLL 1 1K 9
aio 4 1K 8
iov 2 1K 15225
pmchooks 1 1K 1
CAM path 4 1K 1034
CAM dev queue 2 1K 2
CAM I/O Scheduler 1 1K 1
filecaps 4 1K 73
sctp_vrf 1 1K 1
vnet 1 1K 1
accf 1 1K 1
pmc 1 1K 1
entropy 2 1K 33
acpiintr 1 1K 1
soname 2 1K 3757
cpus 2 1K 2
vnet_data_free 1 1K 1
Per-cpu 1 1K 1
p1003.1b 1 1K 1
sfs_nodes 0 0K 0
zones_data 0 0K 0
mqdata 0 0K 0
sctp_mcore 0 0K 0
sctp_socko 0 0K 34
sctp_iter 0 0K 11
sctp_mvrf 0 0K 0
sctp_cpal 0 0K 0
sctp_cmsg 0 0K 0
sctp_stre 0 0K 0
sctp_athi 0 0K 0
sctp_a_it 0 0K 11
sctp_aadr 0 0K 0
pf_table 0 0K 0
pf_rule 0 0K 0
pf_altq 0 0K 0
pf_osfp 0 0K 0
pf_krule_item 0 0K 0
pf_temp 0 0K 0
ipcomp 0 0K 0
esp 0 0K 0
ah 0 0K 0
tcp_do_rack 0 0K 0
madt_table 0 0K 2
smartpqi 0 0K 0
ixl 0 0K 0
ice-resmgr 0 0K 0
ice-osdep 0 0K 0
ice 0 0K 0
iavf 0 0K 0
axgbe 0 0K 0
fpukern_ctx 0 0K 0
xen_intr 0 0K 0
xen_hvm 0 0K 0
legacydrv 0 0K 0
NMI handlers 0 0K 0
bounce 0 0K 0
busdma 0 0K 0
qpidrv 0 0K 0
dmar_idpgtbl 0 0K 0
dmar_dom 0 0K 0
dmar_ctx 0 0K 0
amdiommu_dom 0 0K 0
amdiommu_ctx 0 0K 0
isci 0 0K 0
iommu_dmamap 0 0K 0
hyperv_socket 0 0K 0
bxe_ilt 0 0K 0
aesni_data 0 0K 0
xenbus 0 0K 0
vm_fictitious 0 0K 0
UMAHash 0 0K 0
vm_pgdata 0 0K 0
jblocks 0 0K 0
savedino 0 0K 403
sentinel 0 0K 0
jfsync 0 0K 0
jtrunc 0 0K 0
sbdep 0 0K 15
jsegdep 0 0K 0
jseg 0 0K 0
jfreefrag 0 0K 0
jfreeblk 0 0K 0
jnewblk 0 0K 0
jmvref 0 0K 0
jremref 0 0K 0
jaddref 0 0K 0
freedep 0 0K 0
freefrag 0 0K 83
allocindir 0 0K 0
allocdirect 0 0K 0
ufs_trim 0 0K 0
mactemp 0 0K 0
audit_trigger 0 0K 0
audit_pipe_presel 0 0K 0
audit_pipeent 0 0K 0
audit_pipe 0 0K 0
audit_evname 0 0K 0
audit_bsm 0 0K 0
audit_gidset 0 0K 0
audit_text 0 0K 0
audit_path 0 0K 0
audit_data 0 0K 0
audit_cred 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5E_TLS_RX 0 0K 0
MLX5EEPROM 0 0K 0
MLX5E_TLS 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EN 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5DUMP 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
simple_attr 0 0K 0
seq_file 0 0K 0
lkpiskb 0 0K 0
radix 0 0K 0
idr 0 0K 0
lkpindev 0 0K 0
lkpimhi 0 0K 0
lkpifw 0 0K 0
lkpi80211 0 0K 0
NLM 0 0K 0
ipsec-spdcache 0 0K 0
ipsec-reg 0 0K 0
ipsec-misc 0 0K 0
ipsecrequest 0 0K 0
ip6_moptions 0 0K 5
in6_mfilter 0 0K 6
tcplog 0 0K 0
tcp_hwpace 0 0K 0
in_mfilter 0 0K 7
ipid 0 0K 0
80211scan 0 0K 0
80211ratectl 0 0K 0
80211power 0 0K 0
80211nodeie 0 0K 0
80211node 0 0K 0
80211mesh_gt 0 0K 0
80211mesh_rt 0 0K 0
80211perr 0 0K 0
80211prep 0 0K 0
80211preq 0 0K 0
80211dfs 0 0K 0
80211crypto 0 0K 0
80211vap 0 0K 0
iflib 0 0K 0
vlan 0 0K 0
gif 0 0K 0
ifdescr 0 0K 0
zlib 0 0K 24
fadvise 0 0K 3
statfs 0 0K 192
namei_tracker 0 0K 2
export_host 0 0K 0
cl_savebuf 0 0K 55
lio 0 0K 13
acl 0 0K 0
mbuf_tag 0 0K 0
pts 0 0K 0
timerfd 0 0K 0
procdesc 0 0K 8
ioctlops 0 0K 298
eventfd 0 0K 2
Witness 0 0K 0
stack 0 0K 0
sbuf 0 0K 398
firmware 0 0K 0
compressor 0 0K 0
SWAP 0 0K 0
sysctltmp 0 0K 668
sysctl 0 0K 3
ekcd 0 0K 0
dumper 0 0K 0
sendfile 0 0K 10
rctl 0 0K 0
cache 0 0K 0
prison_racct 0 0K 0
Fail Points 0 0K 0
sigio 0 0K 2
pwd 0 0K 0
tty console 0 0K 0
boottrace 0 0K 0
isofs_node 0 0K 0
isofs_mount 0 0K 0
tr_raid5_data 0 0K 0
tr_raid1e_data 0 0K 0
tr_raid1_data 0 0K 0
tr_raid0_data 0 0K 0
tr_concat_data 0 0K 0
md_sii_data 0 0K 0
md_promise_data 0 0K 0
md_nvidia_data 0 0K 0
md_jmicron_data 0 0K 0
md_intel_data 0 0K 0
md_ddf_data 0 0K 0
raid_data 0 0K 102
geom_flashmap 0 0K 0
tmpfs dir 0 0K 0
tmpfs name 0 0K 0
tmpfs mount 0 0K 0
tmpfs extattr 0 0K 0
NFS FHA 0 0K 0
newnfsmnt 0 0K 0
newnfsclient_req 0 0K 0
NFSCL layrecall 0 0K 0
NFSCL session 0 0K 0
NFSCL sockreq 0 0K 0
NFSCL devinfo 0 0K 0
NFSCL flayout 0 0K 0
NFSCL layout 0 0K 0
NFSD rollback 0 0K 0
NFSCL diroff 0 0K 0
NEWNFSnode 0 0K 0
NFSCL lck 0 0K 0
NFSCL lckown 0 0K 0
NFSCL client 0 0K 0
NFSCL deleg 0 0K 0
NFSCL open 0 0K 0
NFSCL owner 0 0K 0
NFS fh 0 0K 0
NFS req 0 0K 0
NFSD usrgroup 0 0K 0
NFSD string 0 0K 0
NFSD V4lock 0 0K 0
NFSD V4state 0 0K 0
msdosfs_fat 0 0K 0
msdosfs_mount 0 0K 0
msdosfs_node 0 0K 0
DEVFS4 0 0K 0
DEVFS2 0 0K 0
gntdev 0 0K 0
privcmd_dev 0 0K 0
evtchn_dev 0 0K 0
xenstore 0 0K 0
xnb 0 0K 0
xen_acpi 0 0K 0
xbbd 0 0K 0
xbd 0 0K 0
Balloon 0 0K 0
sysmouse 0 0K 0
vtfont 0 0K 0
pvscsi 0 0K 0
USBdev 0 0K 0
USB 0 0K 0
twsbuf 0 0K 0
tcp_log_dev 0 0K 1
midi buffers 0 0K 0
mixer 0 0K 0
ac97 0 0K 0
hdacc 0 0K 0
hdac 0 0K 0
hdaa 0 0K 0
SIIS driver 0 0K 0
PUC 0 0K 0
ppbusdev 0 0K 0
sr_iov 0 0K 0
OCS 0 0K 0
OCS 0 0K 0
nvme 0 0K 0
nvd 0 0K 0
netmap 0 0K 0
mwldev 0 0K 0
MVS driver 0 0K 0
mpi3mrbuf 0 0K 0
mrsasbuf 0 0K 0
mpt_user 0 0K 0
mps_user 0 0K 0
MPSSAS 0 0K 0
mps 0 0K 0
mpr_user 0 0K 0
MPRSAS 0 0K 0
mpr 0 0K 0
mfibuf 0 0K 0
malodev 0 0K 0
LED 0 0K 0
ix_sriov 0 0K 0
ix 0 0K 0
ipsbuf 0 0K 0
ciss_data 0 0K 0
BACKLIGHT 0 0K 0
ath_hal 0 0K 0
athdev 0 0K 0
ata_pci 0 0K 0
ata_dma 0 0K 0
ata_generic 0 0K 0
AHCI driver 0 0K 0
agp 0 0K 0
acpipwr 0 0K 0
acpi_perf 0 0K 0
acpicmbat 0 0K 0
aacraidcam 0 0K 0
aacraid_buf 0 0K 0
aaccam 0 0K 0
aacbuf 0 0K 0
zstd 0 0K 0
XZ_DEC 0 0K 0
nvlist 0 0K 352
SCSI ENC 0 0K 0
SCSI sa 0 0K 0
scsi_pass 0 0K 0
scsi_da 0 0K 69
ata_da 0 0K 0
scsi_ch 0 0K 0
scsi_cd 0 0K 0
nvme_da 0 0K 0
CAM CCB 0 0K 523
CAM ccb queue 0 0K 0
db> show uma
Zone Size Used Free Requests Sleeps Bucket Total Mem XFree
mbuf_jumbo_page 4096 8321 1077 14190 0 254 38494208 0
mbuf 256 8937 18245 41931 0 254 6958592 0
malloc-128 128 14704 176 14772 0 126 1904640 0
malloc-4096 4096 454 6 2127 0 2 1884160 0
BUF TRIE 152 355 11449 1936 0 62 1794208 0
malloc-384 384 4251 9 4251 0 30 1635840 0
RADIX NODE 152 9415 330 38658 0 62 1481240 0
UMA Slabs 0 112 11251 11 11251 0 126 1261344 0
malloc-16384 16384 67 4 281 0 1 1163264 0
sctp_asoc 2256 6 504 11 0 254 1150560 0
malloc-64 64 387 16938 53681 0 254 1108800 0
vmem btag 56 18897 150 18897 0 254 1066632 0
zio_buf_comb_1048576 1048576 0 1 15 0 1 1048576 0
mbuf_cluster 2048 508 0 508 0 254 1040384 0
FFS inode 1168 589 20 905 0 8 711312 0
malloc-65536 65536 9 1 16 0 1 655360 0
malloc-256 256 2505 45 3310 0 62 652800 0
256 Bucket 2048 294 12 1532 0 8 626688 0
pbuf 2624 0 229 0 0 2 600896 0
sctp_ep 1152 20 491 89 0 254 588672 0
sctp_chunk 152 5 3557 3271 0 254 541424 0
md3 32768 16 0 16 0 1 524288 0
socket 1024 122 386 2238 0 254 520192 0
lkpicurr 168 2 3094 2 0 62 520128 0
malloc-65536 65536 7 0 7 0 1 458752 0
VM OBJECT 264 1618 62 16507 0 30 443520 0
THREAD 1824 225 7 634 0 8 423168 0
sctp_raddr 736 6 511 11 0 254 380512 0
malloc-64 64 5046 309 5763 0 254 342720 0
VNODE 440 627 93 946 0 30 316800 0
malloc-16 16 18453 547 18812 0 254 304000 0
MAP ENTRY 96 2743 281 54306 0 126 290304 0
malloc-2048 2048 7 129 1125 0 8 278528 0
malloc-65536 65536 0 4 70 0 1 262144 0
malloc-32 32 7561 377 8500 0 254 254016 0
malloc-2048 2048 104 16 358 0 8 245760 0
UMA Zones 768 313 1 313 0 16 241152 0
DEVCTL 1024 34 186 161 0 0 225280 0
tcp_log 416 10 503 14 0 254 213408 0
FPU_save_area 832 227 16 834 0 16 202176 0
malloc-32768 32768 3 3 17 0 1 196608 0
malloc-32768 32768 1 5 151 0 1 196608 0
PROC 1376 115 17 1098 0 8 181632 0
malloc-128 128 1144 251 29120 0 126 178560 0
FFS2 dinode 256 589 101 904 0 62 176640 0
malloc-256 256 111 579 3157 0 62 176640 0
lkpimm 56 1 3095 1 0 254 173376 0
unpcb 320 40 476 1380 0 254 165120 0
malloc-32768 32768 3 2 132 0 1 163840 0
S VFS Cache 104 1014 390 1433 0 126 146016 0
filedesc0 1072 116 17 1111 0 8 142576 0
zio_buf_comb_131072 131072 0 1 1 0 1 131072 0
malloc-65536 65536 0 2 118 0 1 131072 0
malloc-65536 65536 2 0 2 0 1 131072 0
malloc-1024 1024 119 9 137 0 16 131072 0
mbuf_packet 256 9 499 484 0 254 130048 0
tcp_inpcb 1304 31 65 244 0 8 125184 0
malloc-8192 8192 11 4 18 0 1 122880 0
g_bio 408 4 296 9853 0 30 122400 0
ksiginfo 112 113 931 230 0 126 116928 0
UMA Kegs 384 298 5 298 0 30 116352 0
malloc-128 128 655 244 1660 0 126 115072 0
malloc-128 128 616 159 1341 0 126 99200 0
128 Bucket 1024 60 23 315 0 16 84992 0
ertt_txseginfo 40 2 2119 4401 0 254 84840 0
malloc-8192 8192 7 3 147 0 1 81920 0
malloc-4096 4096 17 3 74 0 2 81920 0
malloc-2048 2048 23 17 78 0 8 81920 0
udplite_inpcb 408 4 176 152 0 30 73440 0
64 Bucket 512 94 42 2289 0 30 69632 0
malloc-64 64 517 554 26524 0 254 68544 0
tcp_bbr_map 128 0 527 687 0 126 67456 0
malloc-128 128 311 216 767 0 126 67456 0
malloc-16384 16384 2 2 192 0 1 65536 0
malloc-4096 4096 14 2 27 0 2 65536 0
malloc-2048 2048 22 10 144 0 8 65536 0
VMSPACE 584 85 27 1054 0 16 65408 0
32 Bucket 256 93 162 1720 0 62 65280 0
Files 80 366 434 9714 0 126 64000 0
malloc-64 64 473 346 684 0 254 52416 0
malloc-128 128 166 237 1284 0 126 51584 0
udp_inpcb 408 12 114 230 0 30 51408 0
ttyoutq 256 72 123 304 0 62 49920 0
malloc-256 256 23 172 680 0 62 49920 0
malloc-256 256 141 54 169 0 62 49920 0
malloc-256 256 61 134 767 0 62 49920 0
malloc-256 256 68 127 1575 0 62 49920 0
malloc-256 256 99 96 616 0 62 49920 0
zio_data_buf_16384 16384 0 3 9 0 1 49152 0
DIRHASH 1024 34 14 34 0 16 49152 0
NAMEI 1024 0 48 16194 0 16 49152 0
malloc-16384 16384 3 0 3 0 1 49152 0
malloc-2048 2048 17 7 55 0 8 49152 0
malloc-1024 1024 30 18 2178 0 16 49152 0
malloc-1024 1024 12 36 553 0 16 49152 0
malloc-384 384 75 45 890 0 30 46080 0
malloc-384 384 29 91 510 0 30 46080 0
da_ccb 544 1 83 2629 0 16 45696 0
pcpu-8 8 5268 364 5529 0 254 45056 0
syncache 168 0 264 3 0 254 44352 0
TURNSTILE 136 233 82 233 0 62 42840 0
clpbuf 2624 0 16 148 0 4 41984 0
vnpbuf 2624 0 16 5 0 16 41984 0
malloc-8192 8192 4 1 9 0 1 40960 0
malloc-4096 4096 5 5 18 0 2 40960 0
pipe 736 22 33 317 0 16 40480 0
sctp_readq 152 0 260 1 0 254 39520 0
hostcache 64 3 564 3 0 254 36288 0
malloc-64 64 40 527 56 0 254 36288 0
malloc-64 64 206 361 656 0 254 36288 0
malloc-64 64 130 437 1122 0 254 36288 0
malloc-64 64 79 488 388 0 254 36288 0
16 Bucket 144 78 174 500 0 62 36288 0
tcp_rack_map 128 0 279 10 0 126 35712 0
malloc-128 128 2 277 93 0 126 35712 0
malloc-128 128 64 215 213 0 126 35712 0
ktls_session 256 1 134 4 0 62 34560 0
routing nhops 256 27 108 34 0 62 34560 0
malloc-384 384 58 32 71 0 30 34560 0
malloc-384 384 65 25 187 0 30 34560 0
malloc-256 256 37 98 514 0 62 34560 0
ripcb 376 16 74 102 0 30 33840 0
SLEEPQUEUE 88 233 151 233 0 126 33792 0
zio_buf_16384 16384 0 2 10 0 1 32768 0
malloc-16384 16384 0 2 2 0 1 32768 0
malloc-8192 8192 4 0 4 0 1 32768 0
malloc-2048 2048 3 13 3 0 8 32768 0
malloc-1024 1024 6 26 225 0 16 32768 0
malloc-1024 1024 10 22 11 0 16 32768 0
malloc-1024 1024 21 11 124 0 16 32768 0
malloc-1024 1024 10 22 1076 0 16 32768 0
malloc-512 512 4 60 248 0 30 32768 0
malloc-512 512 4 60 32 0 30 32768 0
malloc-512 512 14 50 175 0 30 32768 0
malloc-512 512 6 58 21 0 30 32768 0
malloc-512 512 0 64 23 0 30 32768 0
malloc-512 512 0 64 17 0 30 32768 0
pcpu-64 64 501 11 501 0 254 32768 0
tcp_bbr_pcb 896 1 35 6 0 16 32256 0
sctp_stream_msg_out 112 1 287 2 0 254 32256 0
ttyinq 160 135 65 570 0 62 32000 0
PGRP 120 20 244 48 0 126 31680 0
sctp_laddr 48 13 575 27 0 254 28224 0
rl_entry 48 7 581 73 0 254 28224 0
4 Bucket 48 8 580 20 0 254 28224 0
AIO 208 0 133 52 0 62 27664 0
cpuset 200 9 119 60 0 62 25600 0
malloc-8192 8192 1 2 3 0 1 24576 0
malloc-8192 8192 1 2 25 0 1 24576 0
malloc-4096 4096 3 3 91 0 2 24576 0
malloc-4096 4096 2 4 243 0 2 24576 0
malloc-4096 4096 0 6 57 0 2 24576 0
PWD 40 52 554 285 0 254 24240 0
rtentry 168 30 114 34 0 62 24192 0
8 Bucket 80 67 233 498 0 126 24000 0
itimer 352 0 66 11 0 30 23232 0
malloc-384 384 2 58 54 0 30 23040 0
tcp_rack_pcb 1088 1 20 6 0 8 22848 0
Mountpoints 2816 2 6 3 0 4 22528 0
ertt 72 30 250 244 0 126 20160 0
malloc-32 32 6 624 23 0 254 20160 0
malloc-32 32 82 548 95 0 254 20160 0
malloc-32 32 81 549 169 0 254 20160 0
malloc-32 32 152 478 298 0 254 20160 0
malloc-32 32 42 588 748 0 254 20160 0
malloc-32 32 65 565 9061 0 254 20160 0
malloc-32 32 153 477 2085 0 254 20160 0
2 Bucket 32 72 558 514 0 254
---
This report is generated by a bot. It may contain errors.
See https://goo.gl/tpsmEJ for more information about syzbot.
syzbot engineers can be reached at syzk...@googlegroups.com.
syzbot will keep track of this issue. See:
https://goo.gl/tpsmEJ#status for how to communicate with syzbot.
If the report is already addressed, let syzbot know by replying with:
#syz fix: exact-commit-title
If you want to overwrite report's subsystems, reply with:
#syz set subsystems: new-subsystem
(See the list of subsystem names on the web dashboard)
If the report is a duplicate of another one, reply with:
#syz dup: exact-subject-of-another-report
If you want to undo deduplication, reply with:
#syz undup
syzbot found the following issue on:
HEAD commit: 75d173a84836 netinet: Make in_systm.h self-contained
git tree: freebsd-src
console output: https://syzkaller.appspot.com/x/log.txt?x=150a1a70580000
dashboard link: https://syzkaller.appspot.com/bug?extid=880f3a35135a853c89b2
Unfortunately, I don't have any reproducer for this issue yet.
IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+880f3a...@syzkaller.appspotmail.com
panic: /syzkaller/managers/main/kernel/sys/netinet/in_pcb.c:341: in_pcblbgroup_insert: Bad list head 0xfffffe0059be9510 first->prev != head
cpuid = 0
time = 8
KDB: stack backtrace:
db_trace_self_wrapper() at db_trace_self_wrapper+0xc6/frame 0xfffffe0057853550
kdb_backtrace() at kdb_backtrace+0xd0/frame 0xfffffe00578536b0
vpanic() at vpanic+0x257/frame 0xfffffe0057853870
panic() at panic+0xb5/frame 0xfffffe0057853940
in_pcblbgroup_insert() at in_pcblbgroup_insert+0x1f8/frame 0xfffffe0057853980
in_pcbinslbgrouphash() at in_pcbinslbgrouphash+0x576/frame 0xfffffe00578539f0
in_pcbinshash() at in_pcbinshash+0x414/frame 0xfffffe0057853a60
in6_pcbbind() at in6_pcbbind+0x36b/frame 0xfffffe0057853ad0
tcp6_usr_bind() at tcp6_usr_bind+0x2ed/frame 0xfffffe0057853bc0
sobind() at sobind+0xc3/frame 0xfffffe0057853c10
kern_bindat() at kern_bindat+0x2c6/frame 0xfffffe0057853cd0
sys_bind() at sys_bind+0xf5/frame 0xfffffe0057853d10
amd64_syscall() at amd64_syscall+0x4af/frame 0xfffffe0057853f30
fast_syscall_common() at fast_syscall_common+0xf8/frame 0xfffffe0057853f30
--- syscall (198, FreeBSD ELF64, __syscall), rip = 0x3a197a, rsp = 0x8267c3f08, rbp = 0x8267c3f80 ---
KDB: enter: panic
[ thread pid 1087 tid 100625 ]
Stopped at kdb_enter+0x6e: movq $0,0x25bd7e7(%rip)
db>
db> set $lines = 0
db> set $maxwidth = 0
db> show registers
cs 0x20
ds 0x3b
es 0x3b
fs 0x13
gs 0x1b
ss 0x28
rax 0x12
rcx 0xfffffe00033eee30
rdx 0
rbx 0xffffffff827a9840 .str.27
rsp 0xfffffe0057853690
rbp 0xfffffe00578536b0
rsi 0
rdi 0xffffffff816133c9 printf+0x149
r8 0
r9 0xffffffff
r10 0
r11 0xfffffe00549bdc60
r12 0xfffffe00549bd740
r13 0xfffffffffffffffe
r14 0xffffffff827a9840 .str.27
r15 0
rip 0xffffffff815fd9ae kdb_enter+0x6e
rflags 0x46
kdb_enter+0x6e: movq $0,0x25bd7e7(%rip)
db> show proc
Process 1087 (syz-executor) at 0xfffffe00549a0040:
state: NORMAL
uid: 0 gids: 0, 0, 5
parent: pid 766 at 0xfffffe00080085c0
ABI: FreeBSD ELF64
flag: 0x10100080 flag2: 0x1
arguments: ./syz-executor exec
reaper: 0xfffffe0008007040 reapsubtree: 1
sigparent: 20
vmspace: 0xfffffe005497e6d8
(map 0xfffffe005497e6d8)
(map.pmap 0xfffffe005497e778)
(pmap 0xfffffe005497e7e8)
threads: 3
100609 RunQ syz-executor
100625 Run CPU 0 syz-executor
100627 S connec 0xfffffe005a0558da syz-executor
db> ps
pid ppid pgrp uid state wmesg wchan cmd
1096 767 767 0 T (threaded) syz-executor
100631 RunQ syz-executor
1088 764 764 0 R (threaded) syz-executor
100478 Run CPU 1 syz-executor
100626 D biowr 0xfffffe00085d0bc8 syz-executor
1087 766 766 0 R (threaded) syz-executor
100609 RunQ syz-executor
100625 Run CPU 0 syz-executor
100627 S connec 0xfffffe005a0558da syz-executor
1084 1 766 0 S uwait 0xfffffe007cb96c80 syz-executor
1083 1 766 0 S uwait 0xfffffe0071f0e200 syz-executor
1076 0 0 0 DL (threaded) [so_splice]
100605 D - 0xfffffe007cb95f00 [thr_0]
100606 D - 0xfffffe007cb95f40 [thr_1]
1064 1 766 0 S uwait 0xfffffe007cb96a80 syz-executor
1063 1 766 0 S uwait 0xfffffe005a386a80 syz-executor
1050 1 766 0 SV uwait 0xfffffe0071f0d980 syz-executor
1049 1 766 0 S uwait 0xfffffe0071f0dd80 syz-executor
1045 1 764 0 S uwait 0xfffffe005a386100 syz-executor
1044 1 764 0 S uwait 0xfffffe0058cfba80 syz-executor
1043 1 764 0 S uwait 0xfffffe005a385d00 syz-executor
1042 1 764 0 S uwait 0xfffffe0071f0e700 syz-executor
1041 1 764 0 S uwait 0xfffffe0058cfbe00 syz-executor
1038 1 765 0 SV uwait 0xfffffe005a385d80 syz-executor
1028 1 765 0 S uwait 0xfffffe0058cfb880 syz-executor
1027 1 764 0 S uwait 0xfffffe005a385a80 syz-executor
1024 1 765 0 S uwait 0xfffffe0071f0f000 syz-executor
1021 0 0 0 DL mdwait 0xfffffe007c84b000 [md3]
1014 1 765 0 S uwait 0xfffffe0071f0e900 syz-executor
1010 1 766 0 S uwait 0xfffffe0071f0ee80 syz-executor
1009 1 766 0 S uwait 0xfffffe0071f0f100 syz-executor
1007 1 766 0 S uwait 0xfffffe005a385b80 syz-executor
991 0 0 0 DL mdwait 0xfffffe007bf75000 [md2]
986 1 766 0 S uwait 0xfffffe0071f0e300 syz-executor
985 1 766 0 S uwait 0xfffffe005a385880 syz-executor
984 0 0 0 DL mdwait 0xfffffe007bf3a000 [md0]
980 1 765 0 S uwait 0xfffffe005860f700 syz-executor
974 1 764 0 S uwait 0xfffffe005a387000 syz-executor
967 1 766 0 S uwait 0xfffffe005a385480 syz-executor
965 964 765 0 S uwait 0xfffffe005a385380 syz-executor
964 1 765 0 SV uwait 0xfffffe005a385280 syz-executor
963 1 766 0 S uwait 0xfffffe005a385080 syz-executor
959 1 764 0 SV uwait 0xfffffe005860f600 syz-executor
958 1 764 0 S uwait 0xfffffe005a386200 syz-executor
957 1 767 0 SV sigwait 0xfffffe00549530f0 syz-executor
954 1 764 0 S uwait 0xfffffe005a386000 syz-executor
953 1 767 0 S uwait 0xfffffe0058cf8800 syz-executor
952 1 767 0 S uwait 0xfffffe0071f0f400 syz-executor
950 1 764 0 S uwait 0xfffffe005a385e80 syz-executor
938 1 767 0 S uwait 0xfffffe005a386880 syz-executor
935 1 764 0 S uwait 0xfffffe005a388300 syz-executor
934 1 764 0 S uwait 0xfffffe0058cf8200 syz-executor
925 0 0 0 DL mdwait 0xfffffe007b6fa000 [md1]
924 1 767 0 S uwait 0xfffffe005a385580 syz-executor
920 1 766 0 S uwait 0xfffffe005a387b00 syz-executor
919 1 766 0 S uwait 0xfffffe005a386980 syz-executor
918 1 766 0 S uwait 0xfffffe005a386500 syz-executor
917 1 766 0 S uwait 0xfffffe005860f800 syz-executor
916 1 766 0 S uwait 0xfffffe0071f0f300 syz-executor
913 1 767 60928 T syz-executor
912 1 767 60928 S uwait 0xfffffe005a387800 syz-executor
911 1 767 0 S uwait 0xfffffe0054607900 syz-executor
904 1 764 0 SV uwait 0xfffffe005a387b80 syz-executor
900 1 764 0 S uwait 0xfffffe0071f0f200 syz-executor
899 1 764 0 S uwait 0xfffffe005a388200 syz-executor
896 1 767 0 S uwait 0xfffffe005a386400 syz-executor
895 1 764 0 S uwait 0xfffffe0054607d00 syz-executor
879 1 767 60928 S uwait 0xfffffe0058cf9700 syz-executor
878 1 767 0 S uwait 0xfffffe005860f300 syz-executor
867 1 764 0 S uwait 0xfffffe0058cf8980 syz-executor
864 1 864 0 Ss+ ttyin 0xfffffe0058e360b0 getty
863 1 863 0 Ss+ ttyin 0xfffffe0058e35cb0 getty
862 1 862 0 Ss+ ttyin 0xfffffe0058e358b0 getty
861 1 861 0 Ss+ ttyin 0xfffffe0058e354b0 getty
860 1 860 0 Ss+ ttyin 0xfffffe0058e350b0 getty
859 1 859 0 Ss+ ttyin 0xfffffe0058e34cb0 getty
858 1 858 0 Ss+ ttyin 0xfffffe0058e348b0 getty
857 1 857 0 Ss+ ttyin 0xfffffe0058e344b0 getty
856 1 856 0 Ss+ ttyin 0xfffffe00082690b0 getty
848 1 766 0 S uwait 0xfffffe0058cf9e80 syz-executor
846 0 0 0 DL (threaded) [KTLS]
100174 D - 0xfffffe0007f5e400 [thr_0]
100175 D - 0xfffffe0007f5e480 [thr_1]
100176 D - 0xffffffff83cadc28 [reclaim_0]
842 1 765 0 SV lockf 0xfffffe0058d9ff00 syz-executor
841 0 0 0 DL - 0xffffffff83cac400 [soaiod4]
840 0 0 0 DL - 0xffffffff83cac400 [soaiod3]
839 0 0 0 DL - 0xffffffff83cac400 [soaiod2]
838 0 0 0 DL - 0xffffffff83cac400 [soaiod1]
830 1 765 0 S uwait 0xfffffe0058cf9d80 syz-executor
827 1 764 0 S uwait 0xfffffe005860f400 syz-executor
823 1 765 0 S uwait 0xfffffe0058cf8700 syz-executor
822 1 767 -1 S uwait 0xfffffe0058cf8500 syz-executor
820 810 820 0 Ss select 0xfffffe0059bec740 dhclient
810 788 424 65 S select 0xfffffe0059beb4c0 dhclient
809 0 0 0 DL aiordy 0xfffffe00548fcb00 [aiod4]
808 0 0 0 DL aiordy 0xfffffe00548fd060 [aiod3]
807 0 0 0 DL aiordy 0xfffffe005490f5c0 [aiod2]
806 0 0 0 DL aiordy 0xfffffe005490e040 [aiod1]
788 1 424 0 S wait 0xfffffe005490c000 sh
767 763 767 0 S nanslp 0xffffffff83b9c500 syz-executor
766 763 766 0 S nanslp 0xffffffff83b9c501 syz-executor
765 763 765 0 R syz-executor
764 763 764 0 S nanslp 0xffffffff83b9c501 syz-executor
763 761 761 0 S select 0xfffffe0059bec440 syz-executor
761 759 761 0 Ss pause 0xfffffe0008024b70 csh
759 682 759 0 Ss select 0xfffffe0059bec3c0 sshd
737 1 18 0 S+ nanslp 0xffffffff83b9c501 sleep
682 1 682 0 Ss select 0xfffffe0059bec1c0 sshd
17 0 0 0 DL syncer 0xffffffff83cb9da0 [syncer]
16 0 0 0 DL vlruwt 0xfffffe0008026040 [vnlru]
15 0 0 0 DL (threaded) [bufdaemon]
100080 D psleep 0xffffffff83cb8360 [bufdaemon]
100083 D - 0xffffffff83002140 [bufspacedaemon-0]
100094 D sdflush 0xfffffe005a0aa8e8 [/ worker]
9 0 0 0 DL psleep 0xffffffff83d03380 [vmdaemon]
8 0 0 0 DL (threaded) [pagedaemon]
100078 D psleep 0xffffffff83ce92f8 [dom0]
100084 D launds 0xffffffff83ce9304 [laundry: dom0]
100085 D umarcl 0xffffffff81dc7b80 [uma]
7 0 0 0 DL - 0xffffffff83919cd0 [rand_harvestq]
6 0 0 0 DL pftm 0xffffffff8457e850 [pf purge]
5 0 0 0 DL waiting 0xffffffff848ca6c0 [sctp_iterator]
4 0 0 0 DL (threaded) [cam]
100046 D - 0xffffffff838e4340 [doneq0]
100047 D - 0xffffffff838e42c0 [async]
100076 D - 0xffffffff838e4140 [scanner]
3 0 0 0 DL (threaded) [crypto]
100043 D crypto_ 0xffffffff83ce4b00 [crypto]
100044 D crypto_ 0xfffffe00546add30 [crypto returns 0]
100045 D crypto_ 0xfffffe00546add80 [crypto returns 1]
14 0 0 0 DL seqstat 0xfffffe0008bfa488 [sequencer 00]
13 0 0 0 DL (threaded) [geom]
100037 D - 0xffffffff83b44f00 [g_event]
100038 D - 0xffffffff83b44f20 [g_up]
100039 D - 0xffffffff83b44f40 [g_down]
2 0 0 0 WL (threaded) [clock]
100031 I [clock (0)]
100032 I [clock (1)]
12 0 0 0 WL (threaded) [intr]
100013 I [swi6: task queue]
100014 I [swi6: Giant taskq]
100016 I [swi5: fast taskq]
100033 I [swi1: netisr 0]
100034 I [swi1: hpts]
100035 I [swi1: hpts]
100048 I [irq24: virtio_pci0]
100049 I [irq25: virtio_pci0]
100050 I [irq26: virtio_pci0]
100051 I [irq27: virtio_pci0]
100052 I [irq28: virtio_pci1]
100053 I [irq29: virtio_pci1]
100054 I [irq30: virtio_pci1]
100055 I [irq31: virtio_pci1]
100056 I [irq32: virtio_pci1]
100061 I [irq10: virtio_pci2]
100063 I [irq1: atkbd0]
100064 I [irq12: psm0]
100065 I [swi0: uart uart++]
100069 I [swi1: pf send]
11 0 0 0 RL (threaded) [idle]
100003 CanRun [idle: cpu0]
100004 CanRun [idle: cpu1]
1 0 1 0 SLs wait 0xfffffe0008007040 [init]
10 0 0 0 DL audit_w 0xffffffff83ce55a0 [audit]
0 0 0 0 DLs (threaded) [kernel]
100000 D parked 0xffffffff84c2bff0 [swapper]
100005 D - 0xfffffe00546bd100 [softirq_0]
100006 D - 0xfffffe00546bd000 [softirq_1]
100007 D - 0xfffffe00546bce00 [if_io_tqg_0]
100008 D - 0xfffffe00546bcd00 [if_io_tqg_1]
100009 D - 0xfffffe00546bcc00 [if_config_tqg_0]
100010 D - 0xfffffe0008be3c00 [kqueue_ctx taskq]
100011 D - 0xfffffe0008be3a00 [jail_remove taskq]
100012 D - 0xfffffe0008be3800 [bus taskq]
100015 D - 0xfffffe0008be3200 [thread taskq]
100017 D - 0xfffffe0008be2d00 [aiod_kick taskq]
100018 D - 0xfffffe0008be2b00 [deferred_unmount ta]
100019 D - 0xfffffe0008be2900 [inm_free taskq]
100020 D - 0xfffffe0008be2700 [in6m_free taskq]
100021 D - 0xfffffe0008be2500 [linuxkpi_irq_wq]
100022 D - 0xfffffe0008be2300 [linuxkpi_short_wq_0]
100023 D - 0xfffffe0008be2300 [linuxkpi_short_wq_1]
100024 D - 0xfffffe0008be2300 [linuxkpi_short_wq_2]
100025 D - 0xfffffe0008be2300 [linuxkpi_short_wq_3]
100026 D - 0xfffffe0008be1d00 [linuxkpi_long_wq_0]
100027 D - 0xfffffe0008be1d00 [linuxkpi_long_wq_1]
100028 D - 0xfffffe0008be1d00 [linuxkpi_long_wq_2]
100029 D - 0xfffffe0008be1d00 [linuxkpi_long_wq_3]
100036 D - 0xfffffe0008be1200 [firmware taskq]
100041 D - 0xfffffe005476d000 [crypto_0]
100042 D - 0xfffffe005476d000 [crypto_1]
100057 D - 0xfffffe005476c300 [vtnet0 rxq 0]
100058 D - 0xfffffe005476c200 [vtnet0 txq 0]
100059 D - 0xfffffe005476c100 [vtnet0 rxq 1]
100060 D - 0xfffffe005476c000 [vtnet0 txq 1]
100062 D vtbslp 0xfffffe0007f83400 [virtio_balloon]
100066 D - 0xffffffff827aeb81 [deadlkres]
100070 D - 0xfffffe0058cfdd00 [acpi_task_0]
100071 D - 0xfffffe0058cfdd00 [acpi_task_1]
100072 D - 0xfffffe0058cfdd00 [acpi_task_2]
100074 D - 0xfffffe0008be4a00 [mca taskq]
100075 D - 0xfffffe005476ca00 [CAM taskq]
100077 D - 0xfffffe005476ab00 [ipsec_offload]
100349 D - 0xfffffe0071efc700 [netlink_socket (PID]
100480 D - 0xfffffe0071ef2500 [system_taskq_0]
100481 D - 0xfffffe0071ef2500 [system_taskq_1]
100482 D - 0xfffffe0071ef2900 [system_delay_taskq_]
100483 D - 0xfffffe0071ef2900 [system_delay_taskq_]
100487 D - 0xfffffe0071ef3b00 [arc_prune]
100488 D - 0xfffffe007cb6cd00 [arc_flush_0]
100489 D - 0xfffffe007cb6cd00 [arc_flush_1]
100491 D - 0xfffffe0071efc500 [netlink_socket (PID]
100520 D - 0xfffffe007cb6c800 [dbu_evict]
100552 D - 0xfffffe007cb6ba00 [z_vdev_file_0]
100553 D - 0xfffffe007cb6ba00 [z_vdev_file_1]
100554 D - 0xfffffe007cb6ba00 [z_vdev_file_2]
100555 D - 0xfffffe007cb6ba00 [z_vdev_file_3]
100556 D - 0xfffffe007cb6ba00 [z_vdev_file_4]
100557 D - 0xfffffe007cb6ba00 [z_vdev_file_5]
100558 D - 0xfffffe007cb6ba00 [z_vdev_file_6]
100559 D - 0xfffffe007cb6ba00 [z_vdev_file_7]
100560 D - 0xfffffe007cb6ba00 [z_vdev_file_8]
100561 D - 0xfffffe007cb6ba00 [z_vdev_file_9]
100562 D - 0xfffffe007cb6ba00 [z_vdev_file_10]
100563 D - 0xfffffe007cb6ba00 [z_vdev_file_11]
100564 D - 0xfffffe007cb6ba00 [z_vdev_file_12]
100565 D - 0xfffffe007cb6ba00 [z_vdev_file_13]
100566 D - 0xfffffe007cb6ba00 [z_vdev_file_14]
100567 D - 0xfffffe007cb6ba00 [z_vdev_file_15]
100607 D - 0xfffffe007cb6b900 [zfsvfs]
db> show all locks
Process 1088 (syz-executor) thread 0xfffffe00549bc740 (100626)
exclusive lockmgr bufwait (bufwait) r = 0 (0xfffffe00085d0c48) locked @ /syzkaller/managers/main/kernel/sys/kern/vfs_bio.c:1752
exclusive lockmgr ufs (ufs) r = 0 (0xfffffe0071ebd070) locked @ /syzkaller/managers/main/kernel/sys/kern/vfs_vnops.c:1240
Process 1087 (syz-executor) thread 0xfffffe00549bd740 (100625)
exclusive sleep mutex tcphash (tcphash) r = 0 (0xfffffe0007fe7a70) locked @ /syzkaller/managers/main/kernel/sys/netinet/tcp_usrreq.c:313
exclusive rw tcpinp (tcpinp) r = 0 (0xfffffe0071a8b020) locked @ /syzkaller/managers/main/kernel/sys/netinet/tcp_usrreq.c:286
db> show malloc
Type InUse MemUse Requests
pf_hash 6 12804K 6
linker 420 12251K 753
tcp_hpts 7 4801K 7
sctp_stro 6 4760K 11
devbuf 4188 4324K 4219
solaris 2244 3597K 4470
sysctloid 44990 2643K 45102
vtbuf 24 1968K 46
kobj 331 1324K 542
newblk 44 1035K 2154
filedesc 129 1030K 555
vfscache 3 1025K 3
pcb 76 715K 302
inodedep 29 523K 504
subproc 249 514K 1241
ufs_quota 1 512K 1
vfs_hash 1 512K 1
callout 2 512K 2
intr 4 472K 4
vnet_data 2 224K 2
acpitask 1 224K 1
KTRACE 101 201K 23036
acpica 1674 184K 54432
vmem 5 144K 6
tidhash 3 141K 3
pagedep 18 133K 253
tfo_ccache 1 128K 1
IP reass 1 128K 1
DEVFS1 114 114K 132
sem 4 106K 4
gtaskqueue 18 98K 18
bus 1002 82K 5074
mtx_pool 3 74K 3
syncache 1 68K 1
NFSD srvcache 3 68K 3
module 526 66K 529
ddb_capture 1 64K 1
kdtrace 342 64K 1734
umtx 464 58K 464
shm 7 44K 13
temp 36 38K 2178
DEVFS3 133 34K 144
hostcache 1 32K 1
msg 4 30K 4
kbdmux 6 28K 6
DEVFS_RULE 56 20K 56
BPF 17 20K 43
kstat_data 19 19K 19
ifaddr 67 19K 69
LRO 18 19K 18
ufs_mount 4 17K 5
proc 3 17K 3
md_disk 6 17K 14
tty 16 16K 16
routetbl 130 16K 410
ithread 90 15K 90
GEOM 89 15K 681
lltable 46 15K 50
bus-sc 34 15K 1650
eventhandler 166 14K 166
ifnet 7 13K 7
ether_multi 152 13K 174
kenv 95 12K 95
sctp_atcl 28 11K 104
CAM queue 5 11K 1528
taskqueue 96 10K 99
rman 82 10K 447
cred 38 10K 261
shmfd 4 10K 10
rpc 8 9K 8
in6_multi 65 9K 65
ksem 3 9K 5
bmsafemap 2 9K 449
plimit 22 9K 494
devstat 4 9K 4
UART 12 9K 12
filemon 1 8K 5
pfs_vncache 1 8K 1
md_sectors 2 8K 2
kqueue 119 8K 1419
audit_evclass 239 8K 301
freework 30 8K 513
pwddesc 116 8K 1111
UMA 341 7K 341
sglist 6 7K 6
CAM DEV 3 6K 510
pfs_nodes 22 6K 22
ufs_dirhash 24 5K 24
pf_ifnet 10 5K 19
tcp_fsb_rack 2 5K 12
vt 11 5K 11
memdesc 1 4K 1
MCA 32 4K 32
crypto 12 4K 42
evdev 4 4K 4
CC Mem 30 4K 246
DEVFSP 60 4K 112
acpisem 28 4K 28
proc-args 123 3K 2140
terminal 11 3K 11
uidinfo 5 3K 13
acpidev 20 3K 20
lockf 24 3K 696
hhook 8 3K 10
clone 9 3K 9
kcovinfo 36 3K 36
local_apic 1 2K 1
io_apic 1 2K 1
dirrem 8 2K 411
ipsec-saq 2 2K 2
selfd 32 2K 51092
session 16 2K 43
inpcbpolicy 62 2K 728
ip6ndp 12 2K 13
Unitno 29 2K 86
sctp_ifa 13 2K 14
newdirblk 13 2K 223
osd 60 2K 292
CAM XPT 22 2K 543
in_multi 6 2K 11
tun 4 2K 4
vnodemarker 3 2K 35
toponodes 6 2K 6
ipsecpolicy 2 2K 2
ip6opt 8 2K 26
sctp_atky 34 2K 119
sctp_timw 5 2K 5
freeblks 5 2K 268
cryptodev 18 2K 124
msi 9 2K 9
netlink 2 2K 80
sctp_stri 2 1K 8
softdep 1 1K 1
mkdir 8 1K 446
sahead 1 1K 1
secasvar 1 1K 1
nhops 6 1K 8
NFSD session 1 1K 1
freefile 7 1K 307
CAM periph 4 1K 271
sctp_ifn 6 1K 14
ipsec 3 1K 3
diradd 6 1K 429
indirdep 3 1K 186
mld 6 1K 6
igmp 6 1K 6
pfil 6 1K 6
select 6 1K 49
isadev 6 1K 8
mount 16 1K 586
pci_link 10 1K 10
encap_export_host 12 1K 12
cdev 2 1K 2
lkpikmalloc 8 1K 9
sctp_athm 28 1K 108
ktls 3 1K 21
frag6 4 1K 5
chacha20random 1 1K 1
biobuf 1 1K 1
tcp_pcm_rack 1 1K 6
vnodes 1 1K 7
NFSD lckfile 1 1K 1
NFSD V4client 1 1K 1
DEVFS 9 1K 10
CAM SIM 2 1K 2
prison 8 1K 8
feeder 7 1K 7
taskq 2 1K 2
sctp_map 12 1K 24
tcpfunc 3 1K 3
loginclass 3 1K 5
filedesc_to_leader 3 1K 6
nexusdev 8 1K 8
apmdev 1 1K 1
atkbddev 2 1K 2
ktls_ocf 1 1K 3
ip6_msource 2 1K 3
ip_msource 2 1K 2
ip_moptions 2 1K 10
VN POLL 1 1K 9
aio 4 1K 8
iov 2 1K 15225
pmchooks 1 1K 1
CAM path 4 1K 1034
CAM dev queue 2 1K 2
CAM I/O Scheduler 1 1K 1
filecaps 4 1K 73
sctp_vrf 1 1K 1
vnet 1 1K 1
accf 1 1K 1
pmc 1 1K 1
entropy 2 1K 33
acpiintr 1 1K 1
soname 2 1K 3757
cpus 2 1K 2
vnet_data_free 1 1K 1
Per-cpu 1 1K 1
p1003.1b 1 1K 1
sfs_nodes 0 0K 0
zones_data 0 0K 0
mqdata 0 0K 0
sctp_mcore 0 0K 0
sctp_socko 0 0K 34
sctp_iter 0 0K 11
sctp_mvrf 0 0K 0
sctp_cpal 0 0K 0
sctp_cmsg 0 0K 0
sctp_stre 0 0K 0
sctp_athi 0 0K 0
sctp_a_it 0 0K 11
sctp_aadr 0 0K 0
pf_table 0 0K 0
pf_rule 0 0K 0
pf_altq 0 0K 0
pf_osfp 0 0K 0
pf_krule_item 0 0K 0
pf_temp 0 0K 0
ipcomp 0 0K 0
esp 0 0K 0
ah 0 0K 0
tcp_do_rack 0 0K 0
madt_table 0 0K 2
smartpqi 0 0K 0
ixl 0 0K 0
ice-resmgr 0 0K 0
ice-osdep 0 0K 0
ice 0 0K 0
iavf 0 0K 0
axgbe 0 0K 0
fpukern_ctx 0 0K 0
xen_intr 0 0K 0
xen_hvm 0 0K 0
legacydrv 0 0K 0
NMI handlers 0 0K 0
bounce 0 0K 0
busdma 0 0K 0
qpidrv 0 0K 0
dmar_idpgtbl 0 0K 0
dmar_dom 0 0K 0
dmar_ctx 0 0K 0
amdiommu_dom 0 0K 0
amdiommu_ctx 0 0K 0
isci 0 0K 0
iommu_dmamap 0 0K 0
hyperv_socket 0 0K 0
bxe_ilt 0 0K 0
aesni_data 0 0K 0
xenbus 0 0K 0
vm_fictitious 0 0K 0
UMAHash 0 0K 0
vm_pgdata 0 0K 0
jblocks 0 0K 0
savedino 0 0K 403
sentinel 0 0K 0
jfsync 0 0K 0
jtrunc 0 0K 0
sbdep 0 0K 15
jsegdep 0 0K 0
jseg 0 0K 0
jfreefrag 0 0K 0
jfreeblk 0 0K 0
jnewblk 0 0K 0
jmvref 0 0K 0
jremref 0 0K 0
jaddref 0 0K 0
freedep 0 0K 0
freefrag 0 0K 83
allocindir 0 0K 0
allocdirect 0 0K 0
ufs_trim 0 0K 0
mactemp 0 0K 0
audit_trigger 0 0K 0
audit_pipe_presel 0 0K 0
audit_pipeent 0 0K 0
audit_pipe 0 0K 0
audit_evname 0 0K 0
audit_bsm 0 0K 0
audit_gidset 0 0K 0
audit_text 0 0K 0
audit_path 0 0K 0
audit_data 0 0K 0
audit_cred 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5E_TLS_RX 0 0K 0
MLX5EEPROM 0 0K 0
MLX5E_TLS 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EN 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5DUMP 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
simple_attr 0 0K 0
seq_file 0 0K 0
lkpiskb 0 0K 0
radix 0 0K 0
idr 0 0K 0
lkpindev 0 0K 0
lkpimhi 0 0K 0
lkpifw 0 0K 0
lkpi80211 0 0K 0
NLM 0 0K 0
ipsec-spdcache 0 0K 0
ipsec-reg 0 0K 0
ipsec-misc 0 0K 0
ipsecrequest 0 0K 0
ip6_moptions 0 0K 5
in6_mfilter 0 0K 6
tcplog 0 0K 0
tcp_hwpace 0 0K 0
in_mfilter 0 0K 7
ipid 0 0K 0
80211scan 0 0K 0
80211ratectl 0 0K 0
80211power 0 0K 0
80211nodeie 0 0K 0
80211node 0 0K 0
80211mesh_gt 0 0K 0
80211mesh_rt 0 0K 0
80211perr 0 0K 0
80211prep 0 0K 0
80211preq 0 0K 0
80211dfs 0 0K 0
80211crypto 0 0K 0
80211vap 0 0K 0
iflib 0 0K 0
vlan 0 0K 0
gif 0 0K 0
ifdescr 0 0K 0
zlib 0 0K 24
fadvise 0 0K 3
statfs 0 0K 192
namei_tracker 0 0K 2
export_host 0 0K 0
cl_savebuf 0 0K 55
lio 0 0K 13
acl 0 0K 0
mbuf_tag 0 0K 0
pts 0 0K 0
timerfd 0 0K 0
procdesc 0 0K 8
ioctlops 0 0K 298
eventfd 0 0K 2
Witness 0 0K 0
stack 0 0K 0
sbuf 0 0K 398
firmware 0 0K 0
compressor 0 0K 0
SWAP 0 0K 0
sysctltmp 0 0K 668
sysctl 0 0K 3
ekcd 0 0K 0
dumper 0 0K 0
sendfile 0 0K 10
rctl 0 0K 0
cache 0 0K 0
prison_racct 0 0K 0
Fail Points 0 0K 0
sigio 0 0K 2
pwd 0 0K 0
tty console 0 0K 0
boottrace 0 0K 0
isofs_node 0 0K 0
isofs_mount 0 0K 0
tr_raid5_data 0 0K 0
tr_raid1e_data 0 0K 0
tr_raid1_data 0 0K 0
tr_raid0_data 0 0K 0
tr_concat_data 0 0K 0
md_sii_data 0 0K 0
md_promise_data 0 0K 0
md_nvidia_data 0 0K 0
md_jmicron_data 0 0K 0
md_intel_data 0 0K 0
md_ddf_data 0 0K 0
raid_data 0 0K 102
geom_flashmap 0 0K 0
tmpfs dir 0 0K 0
tmpfs name 0 0K 0
tmpfs mount 0 0K 0
tmpfs extattr 0 0K 0
NFS FHA 0 0K 0
newnfsmnt 0 0K 0
newnfsclient_req 0 0K 0
NFSCL layrecall 0 0K 0
NFSCL session 0 0K 0
NFSCL sockreq 0 0K 0
NFSCL devinfo 0 0K 0
NFSCL flayout 0 0K 0
NFSCL layout 0 0K 0
NFSD rollback 0 0K 0
NFSCL diroff 0 0K 0
NEWNFSnode 0 0K 0
NFSCL lck 0 0K 0
NFSCL lckown 0 0K 0
NFSCL client 0 0K 0
NFSCL deleg 0 0K 0
NFSCL open 0 0K 0
NFSCL owner 0 0K 0
NFS fh 0 0K 0
NFS req 0 0K 0
NFSD usrgroup 0 0K 0
NFSD string 0 0K 0
NFSD V4lock 0 0K 0
NFSD V4state 0 0K 0
msdosfs_fat 0 0K 0
msdosfs_mount 0 0K 0
msdosfs_node 0 0K 0
DEVFS4 0 0K 0
DEVFS2 0 0K 0
gntdev 0 0K 0
privcmd_dev 0 0K 0
evtchn_dev 0 0K 0
xenstore 0 0K 0
xnb 0 0K 0
xen_acpi 0 0K 0
xbbd 0 0K 0
xbd 0 0K 0
Balloon 0 0K 0
sysmouse 0 0K 0
vtfont 0 0K 0
pvscsi 0 0K 0
USBdev 0 0K 0
USB 0 0K 0
twsbuf 0 0K 0
tcp_log_dev 0 0K 1
midi buffers 0 0K 0
mixer 0 0K 0
ac97 0 0K 0
hdacc 0 0K 0
hdac 0 0K 0
hdaa 0 0K 0
SIIS driver 0 0K 0
PUC 0 0K 0
ppbusdev 0 0K 0
sr_iov 0 0K 0
OCS 0 0K 0
OCS 0 0K 0
nvme 0 0K 0
nvd 0 0K 0
netmap 0 0K 0
mwldev 0 0K 0
MVS driver 0 0K 0
mpi3mrbuf 0 0K 0
mrsasbuf 0 0K 0
mpt_user 0 0K 0
mps_user 0 0K 0
MPSSAS 0 0K 0
mps 0 0K 0
mpr_user 0 0K 0
MPRSAS 0 0K 0
mpr 0 0K 0
mfibuf 0 0K 0
malodev 0 0K 0
LED 0 0K 0
ix_sriov 0 0K 0
ix 0 0K 0
ipsbuf 0 0K 0
ciss_data 0 0K 0
BACKLIGHT 0 0K 0
ath_hal 0 0K 0
athdev 0 0K 0
ata_pci 0 0K 0
ata_dma 0 0K 0
ata_generic 0 0K 0
AHCI driver 0 0K 0
agp 0 0K 0
acpipwr 0 0K 0
acpi_perf 0 0K 0
acpicmbat 0 0K 0
aacraidcam 0 0K 0
aacraid_buf 0 0K 0
aaccam 0 0K 0
aacbuf 0 0K 0
zstd 0 0K 0
XZ_DEC 0 0K 0
nvlist 0 0K 352
SCSI ENC 0 0K 0
SCSI sa 0 0K 0
scsi_pass 0 0K 0
scsi_da 0 0K 69
ata_da 0 0K 0
scsi_ch 0 0K 0
scsi_cd 0 0K 0
nvme_da 0 0K 0
CAM CCB 0 0K 523
CAM ccb queue 0 0K 0
db> show uma
Zone Size Used Free Requests Sleeps Bucket Total Mem XFree
mbuf_jumbo_page 4096 8321 1077 14190 0 254 38494208 0
mbuf 256 8937 18245 41931 0 254 6958592 0
malloc-128 128 14704 176 14772 0 126 1904640 0
malloc-4096 4096 454 6 2127 0 2 1884160 0
BUF TRIE 152 355 11449 1936 0 62 1794208 0
malloc-384 384 4251 9 4251 0 30 1635840 0
RADIX NODE 152 9415 330 38658 0 62 1481240 0
UMA Slabs 0 112 11251 11 11251 0 126 1261344 0
malloc-16384 16384 67 4 281 0 1 1163264 0
sctp_asoc 2256 6 504 11 0 254 1150560 0
malloc-64 64 387 16938 53681 0 254 1108800 0
vmem btag 56 18897 150 18897 0 254 1066632 0
zio_buf_comb_1048576 1048576 0 1 15 0 1 1048576 0
mbuf_cluster 2048 508 0 508 0 254 1040384 0
FFS inode 1168 589 20 905 0 8 711312 0
malloc-65536 65536 9 1 16 0 1 655360 0
malloc-256 256 2505 45 3310 0 62 652800 0
256 Bucket 2048 294 12 1532 0 8 626688 0
pbuf 2624 0 229 0 0 2 600896 0
sctp_ep 1152 20 491 89 0 254 588672 0
sctp_chunk 152 5 3557 3271 0 254 541424 0
md3 32768 16 0 16 0 1 524288 0
socket 1024 122 386 2238 0 254 520192 0
lkpicurr 168 2 3094 2 0 62 520128 0
malloc-65536 65536 7 0 7 0 1 458752 0
VM OBJECT 264 1618 62 16507 0 30 443520 0
THREAD 1824 225 7 634 0 8 423168 0
sctp_raddr 736 6 511 11 0 254 380512 0
malloc-64 64 5046 309 5763 0 254 342720 0
VNODE 440 627 93 946 0 30 316800 0
malloc-16 16 18453 547 18812 0 254 304000 0
MAP ENTRY 96 2743 281 54306 0 126 290304 0
malloc-2048 2048 7 129 1125 0 8 278528 0
malloc-65536 65536 0 4 70 0 1 262144 0
malloc-32 32 7561 377 8500 0 254 254016 0
malloc-2048 2048 104 16 358 0 8 245760 0
UMA Zones 768 313 1 313 0 16 241152 0
DEVCTL 1024 34 186 161 0 0 225280 0
tcp_log 416 10 503 14 0 254 213408 0
FPU_save_area 832 227 16 834 0 16 202176 0
malloc-32768 32768 3 3 17 0 1 196608 0
malloc-32768 32768 1 5 151 0 1 196608 0
PROC 1376 115 17 1098 0 8 181632 0
malloc-128 128 1144 251 29120 0 126 178560 0
FFS2 dinode 256 589 101 904 0 62 176640 0
malloc-256 256 111 579 3157 0 62 176640 0
lkpimm 56 1 3095 1 0 254 173376 0
unpcb 320 40 476 1380 0 254 165120 0
malloc-32768 32768 3 2 132 0 1 163840 0
S VFS Cache 104 1014 390 1433 0 126 146016 0
filedesc0 1072 116 17 1111 0 8 142576 0
zio_buf_comb_131072 131072 0 1 1 0 1 131072 0
malloc-65536 65536 0 2 118 0 1 131072 0
malloc-65536 65536 2 0 2 0 1 131072 0
malloc-1024 1024 119 9 137 0 16 131072 0
mbuf_packet 256 9 499 484 0 254 130048 0
tcp_inpcb 1304 31 65 244 0 8 125184 0
malloc-8192 8192 11 4 18 0 1 122880 0
g_bio 408 4 296 9853 0 30 122400 0
ksiginfo 112 113 931 230 0 126 116928 0
UMA Kegs 384 298 5 298 0 30 116352 0
malloc-128 128 655 244 1660 0 126 115072 0
malloc-128 128 616 159 1341 0 126 99200 0
128 Bucket 1024 60 23 315 0 16 84992 0
ertt_txseginfo 40 2 2119 4401 0 254 84840 0
malloc-8192 8192 7 3 147 0 1 81920 0
malloc-4096 4096 17 3 74 0 2 81920 0
malloc-2048 2048 23 17 78 0 8 81920 0
udplite_inpcb 408 4 176 152 0 30 73440 0
64 Bucket 512 94 42 2289 0 30 69632 0
malloc-64 64 517 554 26524 0 254 68544 0
tcp_bbr_map 128 0 527 687 0 126 67456 0
malloc-128 128 311 216 767 0 126 67456 0
malloc-16384 16384 2 2 192 0 1 65536 0
malloc-4096 4096 14 2 27 0 2 65536 0
malloc-2048 2048 22 10 144 0 8 65536 0
VMSPACE 584 85 27 1054 0 16 65408 0
32 Bucket 256 93 162 1720 0 62 65280 0
Files 80 366 434 9714 0 126 64000 0
malloc-64 64 473 346 684 0 254 52416 0
malloc-128 128 166 237 1284 0 126 51584 0
udp_inpcb 408 12 114 230 0 30 51408 0
ttyoutq 256 72 123 304 0 62 49920 0
malloc-256 256 23 172 680 0 62 49920 0
malloc-256 256 141 54 169 0 62 49920 0
malloc-256 256 61 134 767 0 62 49920 0
malloc-256 256 68 127 1575 0 62 49920 0
malloc-256 256 99 96 616 0 62 49920 0
zio_data_buf_16384 16384 0 3 9 0 1 49152 0
DIRHASH 1024 34 14 34 0 16 49152 0
NAMEI 1024 0 48 16194 0 16 49152 0
malloc-16384 16384 3 0 3 0 1 49152 0
malloc-2048 2048 17 7 55 0 8 49152 0
malloc-1024 1024 30 18 2178 0 16 49152 0
malloc-1024 1024 12 36 553 0 16 49152 0
malloc-384 384 75 45 890 0 30 46080 0
malloc-384 384 29 91 510 0 30 46080 0
da_ccb 544 1 83 2629 0 16 45696 0
pcpu-8 8 5268 364 5529 0 254 45056 0
syncache 168 0 264 3 0 254 44352 0
TURNSTILE 136 233 82 233 0 62 42840 0
clpbuf 2624 0 16 148 0 4 41984 0
vnpbuf 2624 0 16 5 0 16 41984 0
malloc-8192 8192 4 1 9 0 1 40960 0
malloc-4096 4096 5 5 18 0 2 40960 0
pipe 736 22 33 317 0 16 40480 0
sctp_readq 152 0 260 1 0 254 39520 0
hostcache 64 3 564 3 0 254 36288 0
malloc-64 64 40 527 56 0 254 36288 0
malloc-64 64 206 361 656 0 254 36288 0
malloc-64 64 130 437 1122 0 254 36288 0
malloc-64 64 79 488 388 0 254 36288 0
16 Bucket 144 78 174 500 0 62 36288 0
tcp_rack_map 128 0 279 10 0 126 35712 0
malloc-128 128 2 277 93 0 126 35712 0
malloc-128 128 64 215 213 0 126 35712 0
ktls_session 256 1 134 4 0 62 34560 0
routing nhops 256 27 108 34 0 62 34560 0
malloc-384 384 58 32 71 0 30 34560 0
malloc-384 384 65 25 187 0 30 34560 0
malloc-256 256 37 98 514 0 62 34560 0
ripcb 376 16 74 102 0 30 33840 0
SLEEPQUEUE 88 233 151 233 0 126 33792 0
zio_buf_16384 16384 0 2 10 0 1 32768 0
malloc-16384 16384 0 2 2 0 1 32768 0
malloc-8192 8192 4 0 4 0 1 32768 0
malloc-2048 2048 3 13 3 0 8 32768 0
malloc-1024 1024 6 26 225 0 16 32768 0
malloc-1024 1024 10 22 11 0 16 32768 0
malloc-1024 1024 21 11 124 0 16 32768 0
malloc-1024 1024 10 22 1076 0 16 32768 0
malloc-512 512 4 60 248 0 30 32768 0
malloc-512 512 4 60 32 0 30 32768 0
malloc-512 512 14 50 175 0 30 32768 0
malloc-512 512 6 58 21 0 30 32768 0
malloc-512 512 0 64 23 0 30 32768 0
malloc-512 512 0 64 17 0 30 32768 0
pcpu-64 64 501 11 501 0 254 32768 0
tcp_bbr_pcb 896 1 35 6 0 16 32256 0
sctp_stream_msg_out 112 1 287 2 0 254 32256 0
ttyinq 160 135 65 570 0 62 32000 0
PGRP 120 20 244 48 0 126 31680 0
sctp_laddr 48 13 575 27 0 254 28224 0
rl_entry 48 7 581 73 0 254 28224 0
4 Bucket 48 8 580 20 0 254 28224 0
AIO 208 0 133 52 0 62 27664 0
cpuset 200 9 119 60 0 62 25600 0
malloc-8192 8192 1 2 3 0 1 24576 0
malloc-8192 8192 1 2 25 0 1 24576 0
malloc-4096 4096 3 3 91 0 2 24576 0
malloc-4096 4096 2 4 243 0 2 24576 0
malloc-4096 4096 0 6 57 0 2 24576 0
PWD 40 52 554 285 0 254 24240 0
rtentry 168 30 114 34 0 62 24192 0
8 Bucket 80 67 233 498 0 126 24000 0
itimer 352 0 66 11 0 30 23232 0
malloc-384 384 2 58 54 0 30 23040 0
tcp_rack_pcb 1088 1 20 6 0 8 22848 0
Mountpoints 2816 2 6 3 0 4 22528 0
ertt 72 30 250 244 0 126 20160 0
malloc-32 32 6 624 23 0 254 20160 0
malloc-32 32 82 548 95 0 254 20160 0
malloc-32 32 81 549 169 0 254 20160 0
malloc-32 32 152 478 298 0 254 20160 0
malloc-32 32 42 588 748 0 254 20160 0
malloc-32 32 65 565 9061 0 254 20160 0
malloc-32 32 153 477 2085 0 254 20160 0
2 Bucket 32 72 558 514 0 254
---
This report is generated by a bot. It may contain errors.
See https://goo.gl/tpsmEJ for more information about syzbot.
syzbot engineers can be reached at syzk...@googlegroups.com.
syzbot will keep track of this issue. See:
https://goo.gl/tpsmEJ#status for how to communicate with syzbot.
If the report is already addressed, let syzbot know by replying with:
#syz fix: exact-commit-title
If you want to overwrite report's subsystems, reply with:
#syz set subsystems: new-subsystem
(See the list of subsystem names on the web dashboard)
If the report is a duplicate of another one, reply with:
#syz dup: exact-subject-of-another-report
If you want to undo deduplication, reply with:
#syz undup
syzbot
Sep 8, 2025, 9:51:15 AMSep 8
to syzkaller-f...@googlegroups.com
Auto-closing this bug as obsolete.
Crashes did not happen for a while, no reproducer and no activity.
Crashes did not happen for a while, no reproducer and no activity.
Reply all
Reply to author
Forward
0 new messages