panic: ASan: Invalid access, NUM-byte read in g_label_ext2fs_taste
3 views
Skip to first unread message
syzbot
Sep 4, 2021, 1:04:29 AM9/4/21
to syzkaller-f...@googlegroups.com
Hello,
syzbot found the following issue on:
HEAD commit: cd85b97e0e70 rt(4): Replace Giant callout+task with timeou..
git tree: https://github.com/freebsd/freebsd-src.git main
console output: https://syzkaller.appspot.com/x/log.txt?x=152e9333300000
dashboard link: https://syzkaller.appspot.com/bug?extid=2dc016d5cf0bb265b971
Unfortunately, I don't have any reproducer for this issue yet.
IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+2dc016...@syzkaller.appspotmail.com
panic: ASan: Invalid access, 2-byte read at 0xfffffe0058852f08, MallocRedZone(fb)
cpuid = 1
time = 1630732000
KDB: stack backtrace:
db_trace_self_wrapper() at db_trace_self_wrapper+0xc7/frame 0xfffffe0053b38590
kdb_backtrace() at kdb_backtrace+0xd3/frame 0xfffffe0053b386f0
vpanic() at vpanic+0x2c5/frame 0xfffffe0053b387d0
panic() at panic+0xb5/frame 0xfffffe0053b38890
__asan_load2_noabort() at __asan_load2_noabort+0x16e/frame 0xfffffe0053b38950
g_label_ext2fs_taste() at g_label_ext2fs_taste+0xb3/frame 0xfffffe0053b38990
g_label_taste() at g_label_taste+0x320/frame 0xfffffe0053b38b10
g_new_provider_event() at g_new_provider_event+0x40e/frame 0xfffffe0053b38b50
g_run_events() at g_run_events+0x1c3/frame 0xfffffe0053b38bb0
fork_exit() at fork_exit+0xd0/frame 0xfffffe0053b38bf0
fork_trampoline() at fork_trampoline+0xe/frame 0xfffffe0053b38bf0
--- trap 0, rip = 0, rsp = 0, rbp = 0 ---
KDB: enter: panic
[ thread pid 13 tid 100039 ]
Stopped at kdb_enter+0x6b: movq $0,0x28e30fa(%rip)
db>
db> set $lines = 0
db> set $maxwidth = 0
db> show registers
cs 0x20
ds 0x3b
es 0x3b
fs 0x13
gs 0x1b
ss 0x28
rax 0x12
rcx 0xb12e08b0a4634de8
rdx 0x1
rbx 0
rsp 0xfffffe0053b386d0
rbp 0xfffffe0053b386f0
rsi 0
rdi 0xffffffff817b7609 vprintf+0x319
r8 0x3
r9 0xfffffe0053b38208
r10 0
r11 0
r12 0xfffffe0053e23e40
r13 0xfffffe0053b38701
r14 0xffffffff82c74de0 .str.18
r15 0xffffffff82c74de0 .str.18
rip 0xffffffff817aafbb kdb_enter+0x6b
rflags 0x46
kdb_enter+0x6b: movq $0,0x28e30fa(%rip)
db> show proc
Process 13 (geom) at 0xfffffe0053df0000:
state: NORMAL
uid: 0 gids: 0
parent: pid 0 at 0xffffffff8402f440
ABI: null
flag: 0x10000284 flag2: 0
reaper: 0xffffffff8402f440 reapsubtree: 13
sigparent: 20
vmspace: 0xffffffff840303c0
(map 0xffffffff840303c0)
(map.pmap 0xffffffff84030480)
(pmap 0xffffffff840304e0)
threads: 3
100039 Run CPU 1 [g_event]
100040 D - 0xffffffff8402e580 [g_up]
100041 D - 0xffffffff8402e5c0 [g_down]
db> ps
pid ppid pgrp uid state wmesg wchan cmd
16069 0 0 0 DL mdwait 0xfffffe00a78a3000 [md2]
16068 11442 11442 0 R (threaded) syz-executor.0
142373 RunQ syz-executor.0
222293 RunQ syz-executor.0
16067 7179 7179 0 R (threaded) syz-executor.2
213030 Run CPU 0 syz-executor.2
222292 RunQ syz-executor.2
16066 10220 10220 0 R (threaded) syz-executor.1
100165 RunQ syz-executor.1
222291 S uwait 0xfffffe009e502680 syz-executor.1
14687 14681 14687 0 Ss select 0xfffffe00a295fec0 dhclient
14684 1 14684 0 Ss select 0xfffffe00a295fbc0 dhclient
14681 14673 436 65 S select 0xfffffe00a295f9c0 dhclient
14673 436 436 0 S wait 0xfffffe00a2922538 sh
14521 1 14521 65 Ss select 0xfffffe00a295fa40 dhclient
13646 0 0 0 DL mdwait 0xfffffe00a78c0000 [md1]
13004 780 13004 0 Rs syz-executor.3
12994 0 0 0 DL mdwait 0xfffffe00a7b70000 [md0]
11442 780 11442 0 Rs syz-executor.0
10712 1 10712 0 Ss select 0xfffffe00ab22bb40 dhclient
10709 1 10709 0 Ss select 0xfffffe0056b8d040 dhclient
10685 1 10685 65 Ss select 0xfffffe00ab22b9c0 dhclient
10220 780 10220 0 Rs syz-executor.1
9019 1 9019 0 Ss select 0xfffffe005740a140 dhclient
9008 1 9008 0 Ss select 0xfffffe00ab22b640 dhclient
7179 780 7179 0 Rs syz-executor.2
780 778 778 0 S (threaded) syz-fuzzer
100117 S uwait 0xfffffe009e502b80 syz-fuzzer
100119 S uwait 0xfffffe0058764d80 syz-fuzzer
100120 S uwait 0xfffffe0058764e80 syz-fuzzer
100121 S uwait 0xfffffe005834d000 syz-fuzzer
100122 S uwait 0xfffffe005834d100 syz-fuzzer
100123 S uwait 0xfffffe005834d200 syz-fuzzer
100124 S kqread 0xfffffe0058b14a00 syz-fuzzer
100125 S uwait 0xfffffe009e502780 syz-fuzzer
100126 S uwait 0xfffffe009e502880 syz-fuzzer
131298 S uwait 0xfffffe00a7371e80 syz-fuzzer
778 776 778 0 Ss pause 0xfffffe005875c0b0 csh
776 694 776 0 Ss select 0xfffffe0056b8b8c0 sshd
760 1 760 0 Ss+ ttyin 0xfffffe0056ff8cb0 getty
759 1 759 0 Ss+ ttyin 0xfffffe00575f6cb0 getty
758 1 758 0 Ss+ ttyin 0xfffffe00583eb0b0 getty
757 1 757 0 Ss+ ttyin 0xfffffe00583eb4b0 getty
756 1 756 0 Ss+ ttyin 0xfffffe00583eb8b0 getty
755 1 755 0 Ss+ ttyin 0xfffffe00583ebcb0 getty
754 1 754 0 Ss+ ttyin 0xfffffe00574740b0 getty
753 1 753 0 Ss+ ttyin 0xfffffe00574744b0 getty
752 1 752 0 Ss+ ttyin 0xfffffe00574748b0 getty
698 1 698 0 Ss nanslp 0xffffffff8405af81 cron
694 1 694 0 Ss select 0xfffffe0056b8ba40 sshd
507 1 507 0 Ss select 0xfffffe0056b8bbc0 syslogd
436 1 436 0 Ss wait 0xfffffe0058b4ba70 devd
435 1 435 65 Ss select 0xfffffe005740ac40 dhclient
350 1 350 0 Ss select 0xfffffe0056b8bd40 dhclient
347 1 347 0 Ss select 0xfffffe0056b8bcc0 dhclient
23 0 0 0 DL vlruwt 0xfffffe005875c538 [vnlru]
22 0 0 0 DL syncer 0xffffffff84183360 [syncer]
21 0 0 0 DL (threaded) [bufdaemon]
100085 D qsleep 0xffffffff84181060 [bufdaemon]
100088 D - 0xffffffff83411f80 [bufspacedaemon-0]
100097 D sdflush 0xfffffe00575fe8e8 [/ worker]
20 0 0 0 DL psleep 0xffffffff841b9580 [vmdaemon]
19 0 0 0 DL (threaded) [pagedaemon]
100083 D psleep 0xffffffff841ad0b8 [dom0]
100089 D launds 0xffffffff841ad0c4 [laundry: dom0]
100090 D umarcl 0xffffffff81eaa680 [uma]
18 0 0 0 DL - 0xffffffff83e120a0 [rand_harvestq]
17 0 0 0 DL waiting 0xffffffff84d0a560 [sctp_iterator]
16 0 0 0 DL pftm 0xffffffff848dce20 [pf purge]
15 0 0 0 DL - 0xffffffff8417c280 [soaiod4]
9 0 0 0 DL - 0xffffffff8417c280 [soaiod3]
8 0 0 0 DL - 0xffffffff8417c280 [soaiod2]
7 0 0 0 DL - 0xffffffff8417c280 [soaiod1]
6 0 0 0 DL (threaded) [cam]
100048 D - 0xffffffff83c97840 [doneq0]
100049 D - 0xffffffff83c977c0 [async]
100082 D - 0xffffffff83c97640 [scanner]
14 0 0 0 DL seqstat 0xfffffe000791a888 [sequencer 00]
5 0 0 0 DL crypto_ 0xfffffe00541b1d80 [crypto returns 1]
4 0 0 0 DL crypto_ 0xfffffe00541b1d30 [crypto returns 0]
3 0 0 0 DL crypto_ 0xffffffff841a7160 [crypto]
13 0 0 0 RL (threaded) [geom]
100039 Run CPU 1 [g_event]
100040 D - 0xffffffff8402e580 [g_up]
100041 D - 0xffffffff8402e5c0 [g_down]
2 0 0 0 DL (threaded) [KTLS]
100029 D - 0xfffffe00081ecb00 [thr_0]
100030 D - 0xfffffe00081ecb80 [thr_1]
100031 D - 0xffffffff8417d608 [alloc_0]
12 0 0 0 WL (threaded) [intr]
100012 I [swi6: task queue]
100013 I [swi6: Giant taskq]
100015 I [swi5: fast taskq]
100032 I [swi4: clock (0)]
100033 I [swi4: clock (1)]
100034 I [swi1: netisr 0]
100035 I [swi3: vm]
100036 I [swi1: hpts]
100037 I [swi1: hpts]
100050 I [irq24: virtio_pci0]
100051 I [irq25: virtio_pci0]
100052 I [irq26: virtio_pci0]
100053 I [irq27: virtio_pci0]
100054 I [irq28: virtio_pci1]
100055 I [irq29: virtio_pci1]
100056 I [irq30: virtio_pci1]
100057 I [irq31: virtio_pci1]
100058 I [irq32: virtio_pci1]
100063 I [irq10: virtio_pci2]
100065 I [irq1: atkbd0]
100066 I [irq12: psm0]
100067 I [swi0: uart uart++]
100075 I [swi1: pf send]
11 0 0 0 RL (threaded) [idle]
100003 CanRun [idle: cpu0]
100004 CanRun [idle: cpu1]
1 0 1 0 SLs wait 0xfffffe0053d52538 [init]
10 0 0 0 DL audit_w 0xffffffff841a8100 [audit]
0 0 0 0 DLs (threaded) [kernel]
100000 D swapin 0xffffffff8402f440 [swapper]
100005 D - 0xfffffe00081f4800 [if_config_tqg_0]
100006 D - 0xfffffe00081f4600 [softirq_0]
100007 D - 0xfffffe00081f4400 [softirq_1]
100008 D - 0xfffffe00081f4200 [if_io_tqg_0]
100009 D - 0xfffffe00081f4000 [if_io_tqg_1]
100010 D - 0xfffffe0053deed00 [in6m_free taskq]
100011 D - 0xfffffe0053deeb00 [deferred_unmount ta]
100014 D - 0xfffffe0053dee500 [thread taskq]
100016 D - 0xfffffe0053dee100 [linuxkpi_irq_wq]
100017 D - 0xfffffe0053df8e00 [kqueue_ctx taskq]
100018 D - 0xfffffe0053df8c00 [pci_hp taskq]
100019 D - 0xfffffe0053df8a00 [aiod_kick taskq]
100020 D - 0xfffffe0053df8800 [inm_free taskq]
100021 D - 0xfffffe0053df8600 [linuxkpi_short_wq_0]
100022 D - 0xfffffe0053df8600 [linuxkpi_short_wq_1]
100023 D - 0xfffffe0053df8600 [linuxkpi_short_wq_2]
100024 D - 0xfffffe0053df8600 [linuxkpi_short_wq_3]
100025 D - 0xfffffe0053df8100 [linuxkpi_long_wq_0]
100026 D - 0xfffffe0053df8100 [linuxkpi_long_wq_1]
100027 D - 0xfffffe0053df8100 [linuxkpi_long_wq_2]
100028 D - 0xfffffe0053df8100 [linuxkpi_long_wq_3]
100038 D - 0xfffffe0053e00200 [firmware taskq]
100042 D - 0xfffffe0054188c00 [crypto_0]
100043 D - 0xfffffe0054188c00 [crypto_1]
100059 D - 0xfffffe0056eabd00 [vtnet0 rxq 0]
100060 D - 0xfffffe0056eabc00 [vtnet0 txq 0]
100061 D - 0xfffffe0056eabb00 [vtnet0 rxq 1]
100062 D - 0xfffffe0056eaba00 [vtnet0 txq 1]
100064 D vtbslp 0xfffffe0056b8be80 [virtio_balloon]
100068 D - 0xfffffe0056feaa00 [mca taskq]
100073 D - 0xffffffff82c7bd61 [deadlkres]
100078 D - 0xfffffe0057400900 [acpi_task_0]
100079 D - 0xfffffe0057400900 [acpi_task_1]
100080 D - 0xfffffe0057400900 [acpi_task_2]
100081 D - 0xfffffe0054188500 [CAM taskq]
db> show all locks
Process 16068 (syz-executor.0) thread 0xfffffe00a2855e40 (142373)
exclusive sleep mutex umtxql (umtxql) r = 0 (0xffffffff8407edd0) locked @ /syzkaller/managers/main/kernel/sys/kern/kern_umtx.c:1247
Process 16067 (syz-executor.2) thread 0xfffffe00a728fc80 (213030)
exclusive sleep mutex umtxql (umtxql) r = 0 (0xffffffff8407bbd0) locked @ /syzkaller/managers/main/kernel/sys/kern/kern_umtx.c:1247
db> show malloc
Type InUse MemUse Requests
pf_hash 5 11524K 5
devbuf 4217 4339K 4248
tcp_hpts 6 3201K 6
sysctloid 34617 2045K 34688
vtbuf 24 1968K 46
kobj 326 1304K 512
newblk 19 1029K 111690
vfscache 3 1025K 3
inodedep 963 873K 115773
pcb 49 562K 162699
ufs_quota 1 512K 1
vfs_hash 1 512K 1
callout 2 512K 2
intr 4 472K 4
vmem 3 304K 8
subproc 157 288K 116110
dirrem 934 234K 115468
acpica 1674 184K 55752
vnet_data 1 168K 1
tidhash 3 141K 3
linker 355 140K 383
pagedep 26 135K 110901
tfo_ccache 1 128K 1
filedesc 16 121K 222181
freefile 934 117K 115446
DEVFS1 111 111K 248
sem 4 106K 4
bus 986 80K 3487
mtx_pool 2 72K 2
routetbl 1869 71K 5952
BPF 38 71K 10198
syncache 1 68K 1
acpitask 1 64K 1
ddb_capture 1 64K 1
module 509 64K 509
umtx 396 50K 396
kdtrace 237 48K 238310
sctp_timw 160 40K 160
temp 35 33K 9611
DEVFS3 129 33K 179
hostcache 1 32K 1
shm 1 32K 499
msg 4 30K 4
gtaskqueue 18 26K 18
ufs_dirhash 108 25K 108
kbdmux 6 22K 6
DEVFS_RULE 56 20K 56
ifaddr 69 20K 445
ufs_mount 4 17K 5
proc 3 17K 3
tty 16 16K 16
ithread 99 16K 99
bus-sc 34 15K 1693
GEOM 87 14K 607
lltable 42 13K 615
KTRACE 100 13K 100
ifnet 7 13K 47
ether_multi 152 13K 1336
md_disk 5 13K 2965
kenv 95 12K 95
eventhandler 133 12K 133
sctp_stro 11 11K 12700
ksem 7 11K 1668
CAM queue 5 11K 1528
rman 84 10K 425
in6_multi 65 9K 491
sctp_atcl 22 9K 89519
bmsafemap 2 9K 115736
UART 12 9K 12
devstat 4 9K 4
rpc 2 8K 2
shmfd 1 8K 1057
md_sectors 2 8K 2
pfs_vncache 1 8K 1
pfs_nodes 20 8K 20
audit_evclass 237 8K 295
taskqueue 63 7K 63
kqueue 66 7K 126894
sctp_ifa 50 7K 97
cred 25 7K 958
sglist 5 7K 5
CAM DEV 3 6K 510
plimit 23 6K 1157
DEVFSP 78 5K 8474
UMA 272 5K 272
pf_ifnet 10 5K 219
vt 11 5K 11
memdesc 1 4K 1
MCA 32 4K 32
evdev 4 4K 4
kcovinfo 64 4K 748
pwddesc 63 4K 116016
session 31 4K 148
lockf 34 4K 760
acpisem 28 4K 28
hhook 15 4K 17
diradd 26 4K 115675
selfd 45 3K 1457004
terminal 11 3K 11
proc-args 50 3K 1971
ip6ndp 15 3K 99
mkdir 20 3K 221716
uidinfo 3 3K 193
local_apic 1 2K 1
io_apic 1 2K 1
fpukern_ctx 2 2K 2
newdirblk 16 2K 110858
ipsec-saq 2 2K 2
select 16 2K 140
CAM XPT 22 2K 543
Unitno 25 2K 10853
in_multi 6 2K 49
sctp_atky 33 2K 104456
ipsecpolicy 2 2K 2
acpidev 20 2K 20
msi 9 2K 9
clone 9 2K 9
tun 7 2K 47
softdep 1 1K 1
sahead 1 1K 1
secasvar 1 1K 1
nhops 6 1K 20
vnodemarker 2 1K 232
NFSD session 1 1K 1
CAM periph 4 1K 271
ipsec 3 1K 3
sctp_ifn 6 1K 97
mld 6 1K 46
igmp 6 1K 46
toponodes 6 1K 6
isadev 6 1K 6
mount 16 1K 89
pci_link 10 1K 10
crypto 4 1K 4
encap_export_host 12 1K 12
pfil 4 1K 4
procdesc 4 1K 58
cdev 2 1K 2
inpcbpolicy 14 1K 33846
osd 8 1K 5742
chacha20random 1 1K 1
sctp_athm 22 1K 89519
sctp_map 22 1K 25400
NFSD lckfile 1 1K 1
NFSD V4client 1 1K 1
DEVFS 9 1K 10
vnodes 1 1K 1
CAM SIM 2 1K 2
ktls 1 1K 1
feeder 7 1K 7
tcpfunc 3 1K 3
loginclass 3 1K 6
prison 6 1K 6
lkpikmalloc 5 1K 6
aesni_data 2 1K 2
nexusdev 8 1K 8
apmdev 1 1K 1
atkbddev 2 1K 2
CAM dev queue 2 1K 2
xform 2 1K 49
CAM I/O Scheduler 1 1K 1
CAM path 4 1K 1034
eventfd 1 1K 3850
pmchooks 1 1K 1
soname 4 1K 66695
sctp_vrf 1 1K 1
vnet 1 1K 1
entropy 2 1K 112
acpiintr 1 1K 1
pmc 1 1K 1
filecaps 4 1K 298
cpus 2 1K 2
vnet_data_free 1 1K 1
Per-cpu 1 1K 1
freework 1 1K 110810
p1003.1b 1 1K 1
sctp_mcore 0 0K 0
sctp_socko 0 0K 70923
sctp_iter 0 0K 158
sctp_mvrf 0 0K 0
sctp_cpal 0 0K 0
sctp_cmsg 0 0K 0
sctp_stre 0 0K 0
sctp_athi 0 0K 0
sctp_a_it 0 0K 158
sctp_aadr 0 0K 290
sctp_stri 0 0K 0
mqdata 0 0K 0
pf_table 0 0K 0
pf_rule 0 0K 0
pf_altq 0 0K 0
pf_osfp 0 0K 0
pf_temp 0 0K 0
vegas data 0 0K 31
cdg data 0 0K 42
chd data 0 0K 38
cubic data 0 0K 233
dctcp data 0 0K 57
tcp_do 0 0K 0
tcp_fsb 0 0K 0
htcp data 0 0K 62
NEWdirectio 0 0K 0
NEWNFSnode 0 0K 0
madt_table 0 0K 2
smartpqi 0 0K 0
NFSCL lck 0 0K 0
NFSCL lckown 0 0K 0
NFSCL client 0 0K 0
NFSCL deleg 0 0K 0
NFSCL open 0 0K 0
NFSCL owner 0 0K 0
NFS fh 0 0K 0
NFS req 0 0K 0
iavf 0 0K 0
ixl 0 0K 0
NFSD usrgroup 0 0K 0
NFSD string 0 0K 0
NFSD V4lock 0 0K 0
NFSD V4state 0 0K 0
NFSD srvcache 0 0K 0
ice-resmgr 0 0K 0
ice-osdep 0 0K 0
ice 0 0K 0
axgbe 0 0K 0
msdosfs_fat 0 0K 0
msdosfs_mount 0 0K 0
msdosfs_node 0 0K 0
DEVFS4 0 0K 0
DEVFS2 0 0K 0
xen_intr 0 0K 0
gntdev 0 0K 0
privcmd_dev 0 0K 0
xen_hvm 0 0K 0
legacydrv 0 0K 0
qpidrv 0 0K 0
evtchn_dev 0 0K 0
xenstore 0 0K 0
dmar_idpgtbl 0 0K 0
dmar_dom 0 0K 0
dmar_ctx 0 0K 0
ciss_data 0 0K 0
BACKLIGHT 0 0K 0
xnb 0 0K 0
isci 0 0K 0
iommu_dmamap 0 0K 0
xbbd 0 0K 0
hyperv_socket 0 0K 0
bxe_ilt 0 0K 0
xenbus 0 0K 0
xbd 0 0K 0
Balloon 0 0K 0
sysmouse 0 0K 0
vm_fictitious 0 0K 0
vtfont 0 0K 0
ath_hal 0 0K 0
athdev 0 0K 0
ata_pci 0 0K 0
ata_dma 0 0K 0
ata_generic 0 0K 0
amr 0 0K 0
pvscsi 0 0K 0
scsi_da 0 0K 69
UMAHash 0 0K 0
ata_da 0 0K 0
vm_pgdata 0 0K 0
jblocks 0 0K 0
savedino 0 0K 97120
sentinel 0 0K 0
jfsync 0 0K 0
jtrunc 0 0K 0
sbdep 0 0K 114
jsegdep 0 0K 0
jseg 0 0K 0
jfreefrag 0 0K 0
jfreeblk 0 0K 0
jnewblk 0 0K 0
jmvref 0 0K 0
jremref 0 0K 0
jaddref 0 0K 0
freedep 0 0K 0
freeblks 0 0K 110773
freefrag 0 0K 25
allocindir 0 0K 0
indirdep 0 0K 11
allocdirect 0 0K 0
ufs_trim 0 0K 0
mactemp 0 0K 0
audit_trigger 0 0K 0
audit_pipe_presel 0 0K 0
audit_pipeent 0 0K 0
audit_pipe 0 0K 0
audit_evname 0 0K 0
audit_bsm 0 0K 0
audit_gidset 0 0K 0
audit_text 0 0K 0
audit_path 0 0K 0
audit_data 0 0K 0
audit_cred 0 0K 0
scsi_ch 0 0K 0
scsi_cd 0 0K 0
AHCI driver 0 0K 0
USBdev 0 0K 0
USB 0 0K 0
agp 0 0K 0
nvme_da 0 0K 0
ktls_ocf 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5E_TLS 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EN 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5DUMP 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
seq_file 0 0K 0
radix 0 0K 0
idr 0 0K 0
lkpifw 0 0K 0
NLM 0 0K 0
ipsec-spdcache 0 0K 0
ipsec-reg 0 0K 0
ipsec-misc 0 0K 0
ipsecrequest 0 0K 0
ip6opt 0 0K 2880
ip6_msource 0 0K 1
ip6_moptions 0 0K 387
in6_mfilter 0 0K 270
frag6 0 0K 142
tcplog 0 0K 0
tcp_hwpace 0 0K 0
acpipwr 0 0K 0
acpi_perf 0 0K 0
LRO 0 0K 0
newreno data 0 0K 0
ip_msource 0 0K 0
ip_moptions 0 0K 0
in_mfilter 0 0K 0
ipid 0 0K 0
80211scan 0 0K 0
80211ratectl 0 0K 0
80211power 0 0K 0
80211nodeie 0 0K 0
80211node 0 0K 0
80211mesh_gt 0 0K 0
80211mesh_rt 0 0K 0
80211perr 0 0K 0
80211prep 0 0K 0
80211preq 0 0K 0
80211dfs 0 0K 0
80211crypto 0 0K 0
80211vap 0 0K 0
iflib 0 0K 0
vlan 0 0K 0
gif 0 0K 0
ifdescr 0 0K 0
zlib 0 0K 0
fadvise 0 0K 0
VN POLL 0 0K 0
twsbuf 0 0K 0
statfs 0 0K 114413
namei_tracker 0 0K 273
export_host 0 0K 0
cl_savebuf 0 0K 11
twe_commands 0 0K 0
twa_commands 0 0K 0
tcp_log_dev 0 0K 0
midi buffers 0 0K 0
mixer 0 0K 0
ac97 0 0K 0
hdacc 0 0K 0
hdac 0 0K 0
hdaa 0 0K 0
acpicmbat 0 0K 0
SIIS driver 0 0K 0
CAM CCB 0 0K 523
PUC 0 0K 0
ppbusdev 0 0K 0
agtiapi_MemAlloc malloc 0 0K 0
biobuf 0 0K 0
aios 0 0K 0
lio 0 0K 0
acl 0 0K 0
osti_cacheable 0 0K 0
mbuf_tag 0 0K 1552
tempbuff 0 0K 0
tempbuff 0 0K 0
ag_tgt_map_t malloc 0 0K 0
ag_slr_map_t malloc 0 0K 0
lDevFlags * malloc 0 0K 0
tiDeviceHandle_t * malloc 0 0K 0
ag_portal_data_t malloc 0 0K 0
ag_device_t malloc 0 0K 0
STLock malloc 0 0K 0
CCB List 0 0K 0
sr_iov 0 0K 0
OCS 0 0K 0
OCS 0 0K 0
nvme 0 0K 0
nvd 0 0K 0
netmap 0 0K 0
mwldev 0 0K 0
MVS driver 0 0K 0
CAM ccb queue 0 0K 0
mrsasbuf 0 0K 0
mpt_user 0 0K 0
mps_user 0 0K 0
accf 0 0K 0
pts 0 0K 0
iov 0 0K 79660
ioctlops 0 0K 12790
Witness 0 0K 0
stack 0 0K 0
MPSSAS 0 0K 0
mps 0 0K 0
mpr_user 0 0K 0
MPRSAS 0 0K 0
mpr 0 0K 0
mfibuf 0 0K 0
sbuf 0 0K 340
firmware 0 0K 0
compressor 0 0K 0
SWAP 0 0K 0
malodev 0 0K 0
LED 0 0K 0
sysctltmp 0 0K 2141
sysctl 0 0K 3
ekcd 0 0K 0
dumper 0 0K 0
sendfile 0 0K 0
rctl 0 0K 0
ix_sriov 0 0K 0
aacraidcam 0 0K 0
aacraid_buf 0 0K 0
ix 0 0K 0
ipsbuf 0 0K 0
cache 0 0K 0
iirbuf 0 0K 0
prison_racct 0 0K 0
Fail Points 0 0K 0
sigio 0 0K 1
filedesc_to_leader 0 0K 0
pwd 0 0K 0
tty console 0 0K 0
aaccam 0 0K 0
aacbuf 0 0K 0
zstd 0 0K 0
XZ_DEC 0 0K 0
nvlist 0 0K 0
SCSI ENC 0 0K 0
SCSI sa 0 0K 0
scsi_pass 0 0K 0
isofs_node 0 0K 0
isofs_mount 0 0K 0
tr_raid5_data 0 0K 0
tr_raid1e_data 0 0K 0
tr_raid1_data 0 0K 0
tr_raid0_data 0 0K 0
tr_concat_data 0 0K 0
md_sii_data 0 0K 0
md_promise_data 0 0K 0
md_nvidia_data 0 0K 0
md_jmicron_data 0 0K 0
md_intel_data 0 0K 0
md_ddf_data 0 0K 0
raid_data 0 0K 90
geom_flashmap 0 0K 0
tmpfs dir 0 0K 0
tmpfs name 0 0K 0
tmpfs mount 0 0K 0
NFS FHA 0 0K 0
newnfsmnt 0 0K 0
newnfsclient_req 0 0K 0
NFSCL layrecall 0 0K 0
NFSCL session 0 0K 0
NFSCL sockreq 0 0K 0
NFSCL devinfo 0 0K 0
NFSCL flayout 0 0K 0
NFSCL layout 0 0K 0
NFSD rollback 0 0K 0
NFSCL diroff 0 0K 0
db> show uma
Zone Size Used Free Requests Sleeps Bucket Total Mem XFree
mbuf_jumbo_page 4096 8321 1528 139107 0 254 40341504 0
FFS inode 1160 22580 23 140692 0 8 26219480 0
VNODE 448 22618 89 140772 0 30 10172736 0
FFS2 dinode 256 22580 55 140692 0 62 5794560 0
sctp_asoc 2288 11 1644 12700 0 254 3786640 0
S VFS Cache 104 33584 385 155602 0 126 3532776 0
mbuf 256 8814 4716 576938 0 254 3463680 0
malloc-2048 2048 18 1386 77590 0 8 2875392 0
pbuf 2624 0 989 0 0 2 2595136 0
mbuf_cluster 2048 1110 2 1110 0 254 2277376 0
sctp_ep 1280 11 1699 76819 0 254 2188800 0
VM OBJECT 264 7961 64 1600373 0 30 2118600 0
vmem btag 56 32261 114 32330 0 254 1813000 0
BUF TRIE 144 257 11503 2622 0 62 1693440 0
malloc-1024 1024 133 1491 14165 0 16 1662976 0
malloc-384 384 4152 18 4152 0 30 1601280 0
malloc-128 128 11364 44 11572 0 126 1460224 0
UMA Slabs 0 112 12672 105 12831 0 126 1431024 0
malloc-4096 4096 327 3 606 0 2 1351680 0
RADIX NODE 144 8419 480 3020841 0 65 1281456 0
sctp_raddr 736 11 1650 12700 0 254 1222496 0
malloc-384 384 23 3047 89857 0 30 1178880 0
malloc-256 256 342 3753 175883 0 62 1048320 0
malloc-384 384 962 1608 115901 0 30 986880 0
malloc-256 256 1059 1626 238100 0 62 687360 0
256 Bucket 2048 261 21 17404 0 8 577536 0
malloc-65536 65536 0 8 16 0 1 524288 0
DEVCTL 1024 336 164 672 0 0 512000 0
lkpimm 168 1 2327 1 0 62 391104 0
lkpicurr 168 2 2326 2 0 62 391104 0
malloc-4096 4096 76 19 116138 0 2 389120 0
THREAD 1808 173 25 122293 0 8 357984 0
socket 944 35 341 134280 0 254 354944 0
malloc-128 128 938 1635 115665 0 126 329344 0
malloc-65536 65536 5 0 5 0 1 327680 0
DIRHASH 1024 311 1 311 0 16 319488 0
sctp_laddr 48 8 5956 18937 0 254 286272 0
mbuf_packet 256 89 1021 161355 0 254 284160 0
malloc-64 64 3931 416 120545 0 254 278208 0
sctp_chunk 152 15 1649 3388 0 254 252928 0
malloc-16384 16384 8 6 111070 0 1 229376 0
malloc-16 16 14125 125 14185 0 254 228000 0
MAP ENTRY 96 1532 820 6113798 0 127 225792 0
malloc-65536 65536 1 2 1424 0 1 196608 0
malloc-65536 65536 3 0 3 0 1 196608 0
malloc-256 256 79 656 234015 0 62 188160 0
UMA Zones 768 244 0 244 0 16 187392 0
malloc-32 32 5592 204 6151 0 254 185472 0
malloc-128 128 1404 22 27935 0 126 182528 0
VMSPACE 2544 37 26 113031 0 4 160272 0
malloc-64 64 689 1705 27127 0 254 153216 0
sctp_stream_msg_out 112 1 1331 6793 0 254 149184 0
malloc-65536 65536 0 2 136 0 1 131072 0
PROC 1336 62 31 116015 0 8 124248 0
malloc-4096 4096 18 12 104 0 2 122880 0
malloc-128 128 816 114 117373 0 126 119040 0
malloc-128 128 618 312 345123 0 126 119040 0
64 Bucket 512 161 71 54557 0 30 118784 0
g_bio 408 0 290 45776 0 30 118320 0
ksiginfo 112 78 966 22833 0 126 116928 0
malloc-32 32 137 3391 101402 0 254 112896 0
malloc-16 16 87 6913 146499 0 254 112000 0
malloc-8192 8192 7 6 140 0 1 106496 0
128 Bucket 1024 65 38 25926 0 16 105472 0
filedesc0 1072 63 35 116016 0 8 105056 0
32 Bucket 256 208 182 30519 0 62 99840 0
malloc-32768 32768 1 2 3 0 1 98304 0
malloc-256 256 230 130 125805 0 62 92160 0
UMA Kegs 384 229 4 229 0 30 89472 0
malloc-64 64 873 513 233671 0 254 88704 0
udp_inpcb 496 6 170 14225 0 254 87296 0
tcpcb 1080 4 73 5731 0 254 83160 0
unpcb 256 17 253 23400 0 254 69120 0
malloc-32768 32768 0 2 130 0 1 65536 0
malloc-16384 16384 4 0 4 0 1 65536 0
malloc-16384 16384 0 4 4 0 1 65536 0
malloc-32 32 1867 23 2306 0 254 60480 0
malloc-384 384 115 35 895 0 30 57600 0
malloc-8192 8192 7 0 7 0 1 57344 0
malloc-512 512 46 66 7754 0 30 57344 0
malloc-4096 4096 11 2 551 0 2 53248 0
malloc-2048 2048 4 22 911 0 8 53248 0
malloc-16384 16384 1 2 161 0 1 49152 0
malloc-2048 2048 11 13 189 0 8 49152 0
malloc-64 64 178 578 1458068 0 254 48384 0
pcpu-8 8 4704 928 65078 0 254 45056 0
malloc-256 256 31 134 221824 0 62 42240 0
clpbuf 2624 0 16 31 0 16 41984 0
da_ccb 544 0 77 11549 0 16 41888 0
malloc-8192 8192 5 0 5 0 1 40960 0
malloc-1024 1024 4 36 566 0 16 40960 0
Files 80 223 277 328015 0 126 40000 0
ripcb 496 4 76 11224 0 254 39680 0
tcp_inpcb 496 4 76 5731 0 254 39680 0
NAMEI 1024 0 36 598889 0 16 36864 0
malloc-2048 2048 2 16 532 0 8 36864 0
malloc-384 384 83 7 83 0 30 34560 0
pipe 744 22 23 1021 0 16 33480 0
malloc-32768 32768 1 0 1 0 1 32768 0
malloc-32768 32768 1 0 1 0 1 32768 0
malloc-32768 32768 1 0 1 0 1 32768 0
malloc-16384 16384 0 2 175 0 1 32768 0
malloc-16384 16384 1 1 16 0 1 32768 0
malloc-8192 8192 0 4 70 0 1 32768 0
malloc-8192 8192 2 2 274 0 1 32768 0
malloc-4096 4096 2 6 114460 0 2 32768 0
malloc-512 512 5 59 3962 0 30 32768 0
malloc-512 512 0 64 12526 0 30 32768 0
pcpu-64 64 487 25 487 0 254 32768 0
malloc-4096 4096 3 4 2963 0 2 28672 0
malloc-2048 2048 7 7 48 0 8 28672 0
malloc-1024 1024 22 6 3630 0 16 28672 0
TURNSTILE 136 199 11 199 0 62 28560 0
16 Bucket 144 131 65 2187 0 62 28224 0
KNOTE 160 28 147 954093 0 62 28000 0
8 Bucket 80 206 144 22312 0 126 28000 0
udplite_inpcb 496 0 56 2666 0 254 27776 0
L VFS Cache 320 71 13 71 0 30 26880 0
malloc-256 256 34 71 1709 0 62 26880 0
malloc-8192 8192 2 1 6 0 1 24576 0
malloc-2048 2048 1 11 253 0 8 24576 0
malloc-1024 1024 18 6 1078 0 16 24576 0
ertt_txseginfo 40 1 605 145370 0 254 24240 0
PWD 32 20 736 115252 0 254 24192 0
ttyinq 160 135 15 300 0 62 24000 0
malloc-128 128 34 152 549 0 126 23808 0
ttyoutq 256 72 18 160 0 62 23040 0
malloc-4096 4096 3 2 8 0 2 20480 0
malloc-1024 1024 4 16 66 0 16 20480 0
malloc-64 64 27 288 45166 0 254 20160 0
malloc-32 32 43 587 122254 0 254 20160 0
SLEEPQUEUE 88 199 25 199 0 126 19712 0
Mountpoints 2752 2 5 2 0 4 19264 0
malloc-256 256 48 27 2852 0 62 19200 0
malloc-16384 16384 1 0 1 0 1 16384 0
malloc-8192 8192 2 0 2 0 1 16384 0
vtnet_tx_hdr 24 0 668 154146 0 254 16032 0
malloc-128 128 89 35 1866 0 126 15872 0
routing nhops 256 27 33 207 0 62 15360 0
malloc-384 384 24 16 273 0 30 15360 0
malloc-256 256 17 43 3014 0 62 15360 0
cpuset 104 8 116 303 0 126 12896 0
malloc-4096 4096 2 1 99 0 2 12288 0
malloc-1024 1024 2 10 27 0 16 12288 0
malloc-1024 1024 6 6 20 0 16 12288 0
malloc-512 512 0 24 147 0 30 12288 0
ertt 72 4 164 5731 0 126 12096 0
malloc-64 64 30 159 2126 0 254 12096 0
malloc-32 32 149 229 23791 0 254 12096 0
malloc-32 32 24 354 41736 0 254 12096 0
4 Bucket 48 10 242 2441 0 254 12096 0
2 Bucket 32 87 291 11579 0 254 12096 0
malloc-16 16 501 249 42430 0 254 12000 0
malloc-128 128 35 58 5337 0 126 11904 0
kenv 258 15 30 1104 0 30 11610 0
malloc-2048 2048 0 4 48 0 8 8192 0
malloc-512 512 0 16 21 0 30 8192 0
malloc-512 512 2 14 61 0 30 8192 0
malloc-512 512 2 14 233 0 30 8192 0
rtentry 176 30 16 207 0 62 8096 0
PGRP 88 31 61 149 0 126 8096 0
rl_entry 40 94 108 94 0 254 8080 0
udpcb 32 6 246 16891 0 254 8064 0
ipq 56 0 144 6 0 254 8064 0
malloc-64 64 30 96 174 0 254 8064 0
malloc-64 64 10 116 451 0 254 8064 0
malloc-32 32 30 222 1881 0 254 8064 0
malloc-16 16 19 481 24164 0 254 8000 0
malloc-16 16 21 479 65 0 254 8000 0
malloc-16 16 36 464 52038 0 254 8000 0
malloc-16 16 0 500 8 0 254 8000 0
malloc-16 16 42 458 62 0 254 8000 0
malloc-384 384 0 20 7 0 30 7680 0
malloc-384 384 2 18 10 0 30 7680 0
FPU_save_area 832 1 8 1 0 16 7488 0
domainset 40 0 126 295 0 254 5040 0
epoch_record pcpu 256 4 12 4 0 62 4096 0
malloc-2048 2048 2 0 2 0 8 4096 0
malloc-1024 1024 0 4 1 0 16 4096 0
malloc-512 512 2 6 2 0 30 4096 0
pcpu-16 16 7 249 7 0 254 4096 0
hostcache 64 1 62 1 0 254 4032 0
syncache 168 0 24 4 0 254 4032 0
malloc-32 32 18 108 2490 0 254 4032 0
UMA Slabs 1 176 10 12 10 0 62 3872 0
mqnode 416 3 6 3 0 30 3744 0
KMAP ENTRY 96 12 27 14 0 0 3744 0
vmem 1856 1 1 1 0 8 3712 0
SMR CPU 32 3 60 3 0 254 2016 0
SMR SHARED 24 3 60 3 0 254 1512 0
md1 512 0 0 0 0 30 0 0
md0 512 0 0 0 0 30 0 0
FFS1 dinode 128 0 0 0 0 126 0 0
ada_ccb 272 0 0 0 0 30 0 0
swblk 136 0 0 0 0 62 0 0
swpctrie 144 0 0 0 0 62 0 0
sctp_asconf_ack 48 0 0 0 0 254 0 0
sctp_asconf 40 0 0 0 0 254 0 0
sctp_readq 152 0 0 0 0 254 0 0
cdg_qdiffsample 16 0 0 0 0 254 0 0
pf state scrubs 40 0 0 0 0 254 0 0
pf frag entries 40 0 0 0 0 254 0 0
pf frags 248 0 0 0 0 62 0 0
pf table entries 160 0 0 0 0 62 0 0
pf table entry counters 64 0 0 0 0 254 0 0
pf source nodes 136 0 0 0 0 254 0 0
pf state keys 88 0 0 0 0 126 0 0
pf states 312 0 0 0 0 254 0 0
pf tags 104 0 0 0 0 126 0 0
pf mtags 48 0 0 0 0 254 0 0
tcp_bbr_pcb 832 0 0 0 0 16 0 0
tcp_bbr_map 128 0 0 0 0 126 0 0
tcp_rack_pcb 832 0 0 0 0 16 0 0
tcp_rack_map 112 0 0 0 0 126 0 0
tcp_log_node 120 0 0 0 0 126 0 0
tcp_log_bucket 176 0 0 0 0 62 0 0
tcp_log 416 0 0 0 0 254 0 0
tcpreass 48 0 0 0 0 254 0 0
tfo_ccache_entries 80 0 0 0 0 126 0 0
tfo 4 0 0 0 0 254 0 0
sackhole 32 0 0 0 0 254 0 0
tcptw 88 0 0 0 0 254 0 0
IPsec SA lft_c 16 0 0 0 0 254 0 0
itimer 352 0 0 0 0 30 0 0
AIOLIO 272 0 0 0 0 30 0 0
AIOCB 552 0 0 0 0 16 0 0
AIOP 32 0 0 0 0 254 0 0
AIO 208 0 0 0 0 62 0 0
mqnotifier 216 0 0 0 0 62 0 0
mvdata 64 0 0 0 0 254 0 0
mqueue 248 0 0 0 0 62 0 0
TMPFS node 224 0 0 0 0 62 0 0
NCLNODE 592 0 0 0 0 16 0 0
LTS VFS Cache 360 0 0 0 0 30 0 0
STS VFS Cache 144 0 0 0 0 62 0 0
cryptop 280 0 0 0 0 30 0 0
linux_dma_object 24 0 0 0 0 254 0 0
linux_dma_pctrie 144 0 0 0 0 62 0 0
IOMMU_MAP_ENTRY 120 0 0 0 0 126 0 0
ktls_session 192 0 0 0 0 62 0 0
mbuf_jumbo_16k 16384 0 0 0 0 254 0 0
mbuf_jumbo_9k 9216 0 0 0 0 254 0 0
audit_record 1280 0 0 0 0 8 0 0
MAC labels 40 0 0 0 0 254 0 0
vnpbuf 2624 0 0 0 0 64 0 0
mdpbuf 2624 0 0 0 0 3 0 0
nfspbuf 2624 0 0 0 0 16 0
---
This report is generated by a bot. It may contain errors.
See https://goo.gl/tpsmEJ for more information about syzbot.
syzbot engineers can be reached at syzk...@googlegroups.com.
syzbot will keep track of this issue. See:
https://goo.gl/tpsmEJ#status for how to communicate with syzbot.
syzbot found the following issue on:
HEAD commit: cd85b97e0e70 rt(4): Replace Giant callout+task with timeou..
git tree: https://github.com/freebsd/freebsd-src.git main
console output: https://syzkaller.appspot.com/x/log.txt?x=152e9333300000
dashboard link: https://syzkaller.appspot.com/bug?extid=2dc016d5cf0bb265b971
Unfortunately, I don't have any reproducer for this issue yet.
IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+2dc016...@syzkaller.appspotmail.com
panic: ASan: Invalid access, 2-byte read at 0xfffffe0058852f08, MallocRedZone(fb)
cpuid = 1
time = 1630732000
KDB: stack backtrace:
db_trace_self_wrapper() at db_trace_self_wrapper+0xc7/frame 0xfffffe0053b38590
kdb_backtrace() at kdb_backtrace+0xd3/frame 0xfffffe0053b386f0
vpanic() at vpanic+0x2c5/frame 0xfffffe0053b387d0
panic() at panic+0xb5/frame 0xfffffe0053b38890
__asan_load2_noabort() at __asan_load2_noabort+0x16e/frame 0xfffffe0053b38950
g_label_ext2fs_taste() at g_label_ext2fs_taste+0xb3/frame 0xfffffe0053b38990
g_label_taste() at g_label_taste+0x320/frame 0xfffffe0053b38b10
g_new_provider_event() at g_new_provider_event+0x40e/frame 0xfffffe0053b38b50
g_run_events() at g_run_events+0x1c3/frame 0xfffffe0053b38bb0
fork_exit() at fork_exit+0xd0/frame 0xfffffe0053b38bf0
fork_trampoline() at fork_trampoline+0xe/frame 0xfffffe0053b38bf0
--- trap 0, rip = 0, rsp = 0, rbp = 0 ---
KDB: enter: panic
[ thread pid 13 tid 100039 ]
Stopped at kdb_enter+0x6b: movq $0,0x28e30fa(%rip)
db>
db> set $lines = 0
db> set $maxwidth = 0
db> show registers
cs 0x20
ds 0x3b
es 0x3b
fs 0x13
gs 0x1b
ss 0x28
rax 0x12
rcx 0xb12e08b0a4634de8
rdx 0x1
rbx 0
rsp 0xfffffe0053b386d0
rbp 0xfffffe0053b386f0
rsi 0
rdi 0xffffffff817b7609 vprintf+0x319
r8 0x3
r9 0xfffffe0053b38208
r10 0
r11 0
r12 0xfffffe0053e23e40
r13 0xfffffe0053b38701
r14 0xffffffff82c74de0 .str.18
r15 0xffffffff82c74de0 .str.18
rip 0xffffffff817aafbb kdb_enter+0x6b
rflags 0x46
kdb_enter+0x6b: movq $0,0x28e30fa(%rip)
db> show proc
Process 13 (geom) at 0xfffffe0053df0000:
state: NORMAL
uid: 0 gids: 0
parent: pid 0 at 0xffffffff8402f440
ABI: null
flag: 0x10000284 flag2: 0
reaper: 0xffffffff8402f440 reapsubtree: 13
sigparent: 20
vmspace: 0xffffffff840303c0
(map 0xffffffff840303c0)
(map.pmap 0xffffffff84030480)
(pmap 0xffffffff840304e0)
threads: 3
100039 Run CPU 1 [g_event]
100040 D - 0xffffffff8402e580 [g_up]
100041 D - 0xffffffff8402e5c0 [g_down]
db> ps
pid ppid pgrp uid state wmesg wchan cmd
16069 0 0 0 DL mdwait 0xfffffe00a78a3000 [md2]
16068 11442 11442 0 R (threaded) syz-executor.0
142373 RunQ syz-executor.0
222293 RunQ syz-executor.0
16067 7179 7179 0 R (threaded) syz-executor.2
213030 Run CPU 0 syz-executor.2
222292 RunQ syz-executor.2
16066 10220 10220 0 R (threaded) syz-executor.1
100165 RunQ syz-executor.1
222291 S uwait 0xfffffe009e502680 syz-executor.1
14687 14681 14687 0 Ss select 0xfffffe00a295fec0 dhclient
14684 1 14684 0 Ss select 0xfffffe00a295fbc0 dhclient
14681 14673 436 65 S select 0xfffffe00a295f9c0 dhclient
14673 436 436 0 S wait 0xfffffe00a2922538 sh
14521 1 14521 65 Ss select 0xfffffe00a295fa40 dhclient
13646 0 0 0 DL mdwait 0xfffffe00a78c0000 [md1]
13004 780 13004 0 Rs syz-executor.3
12994 0 0 0 DL mdwait 0xfffffe00a7b70000 [md0]
11442 780 11442 0 Rs syz-executor.0
10712 1 10712 0 Ss select 0xfffffe00ab22bb40 dhclient
10709 1 10709 0 Ss select 0xfffffe0056b8d040 dhclient
10685 1 10685 65 Ss select 0xfffffe00ab22b9c0 dhclient
10220 780 10220 0 Rs syz-executor.1
9019 1 9019 0 Ss select 0xfffffe005740a140 dhclient
9008 1 9008 0 Ss select 0xfffffe00ab22b640 dhclient
7179 780 7179 0 Rs syz-executor.2
780 778 778 0 S (threaded) syz-fuzzer
100117 S uwait 0xfffffe009e502b80 syz-fuzzer
100119 S uwait 0xfffffe0058764d80 syz-fuzzer
100120 S uwait 0xfffffe0058764e80 syz-fuzzer
100121 S uwait 0xfffffe005834d000 syz-fuzzer
100122 S uwait 0xfffffe005834d100 syz-fuzzer
100123 S uwait 0xfffffe005834d200 syz-fuzzer
100124 S kqread 0xfffffe0058b14a00 syz-fuzzer
100125 S uwait 0xfffffe009e502780 syz-fuzzer
100126 S uwait 0xfffffe009e502880 syz-fuzzer
131298 S uwait 0xfffffe00a7371e80 syz-fuzzer
778 776 778 0 Ss pause 0xfffffe005875c0b0 csh
776 694 776 0 Ss select 0xfffffe0056b8b8c0 sshd
760 1 760 0 Ss+ ttyin 0xfffffe0056ff8cb0 getty
759 1 759 0 Ss+ ttyin 0xfffffe00575f6cb0 getty
758 1 758 0 Ss+ ttyin 0xfffffe00583eb0b0 getty
757 1 757 0 Ss+ ttyin 0xfffffe00583eb4b0 getty
756 1 756 0 Ss+ ttyin 0xfffffe00583eb8b0 getty
755 1 755 0 Ss+ ttyin 0xfffffe00583ebcb0 getty
754 1 754 0 Ss+ ttyin 0xfffffe00574740b0 getty
753 1 753 0 Ss+ ttyin 0xfffffe00574744b0 getty
752 1 752 0 Ss+ ttyin 0xfffffe00574748b0 getty
698 1 698 0 Ss nanslp 0xffffffff8405af81 cron
694 1 694 0 Ss select 0xfffffe0056b8ba40 sshd
507 1 507 0 Ss select 0xfffffe0056b8bbc0 syslogd
436 1 436 0 Ss wait 0xfffffe0058b4ba70 devd
435 1 435 65 Ss select 0xfffffe005740ac40 dhclient
350 1 350 0 Ss select 0xfffffe0056b8bd40 dhclient
347 1 347 0 Ss select 0xfffffe0056b8bcc0 dhclient
23 0 0 0 DL vlruwt 0xfffffe005875c538 [vnlru]
22 0 0 0 DL syncer 0xffffffff84183360 [syncer]
21 0 0 0 DL (threaded) [bufdaemon]
100085 D qsleep 0xffffffff84181060 [bufdaemon]
100088 D - 0xffffffff83411f80 [bufspacedaemon-0]
100097 D sdflush 0xfffffe00575fe8e8 [/ worker]
20 0 0 0 DL psleep 0xffffffff841b9580 [vmdaemon]
19 0 0 0 DL (threaded) [pagedaemon]
100083 D psleep 0xffffffff841ad0b8 [dom0]
100089 D launds 0xffffffff841ad0c4 [laundry: dom0]
100090 D umarcl 0xffffffff81eaa680 [uma]
18 0 0 0 DL - 0xffffffff83e120a0 [rand_harvestq]
17 0 0 0 DL waiting 0xffffffff84d0a560 [sctp_iterator]
16 0 0 0 DL pftm 0xffffffff848dce20 [pf purge]
15 0 0 0 DL - 0xffffffff8417c280 [soaiod4]
9 0 0 0 DL - 0xffffffff8417c280 [soaiod3]
8 0 0 0 DL - 0xffffffff8417c280 [soaiod2]
7 0 0 0 DL - 0xffffffff8417c280 [soaiod1]
6 0 0 0 DL (threaded) [cam]
100048 D - 0xffffffff83c97840 [doneq0]
100049 D - 0xffffffff83c977c0 [async]
100082 D - 0xffffffff83c97640 [scanner]
14 0 0 0 DL seqstat 0xfffffe000791a888 [sequencer 00]
5 0 0 0 DL crypto_ 0xfffffe00541b1d80 [crypto returns 1]
4 0 0 0 DL crypto_ 0xfffffe00541b1d30 [crypto returns 0]
3 0 0 0 DL crypto_ 0xffffffff841a7160 [crypto]
13 0 0 0 RL (threaded) [geom]
100039 Run CPU 1 [g_event]
100040 D - 0xffffffff8402e580 [g_up]
100041 D - 0xffffffff8402e5c0 [g_down]
2 0 0 0 DL (threaded) [KTLS]
100029 D - 0xfffffe00081ecb00 [thr_0]
100030 D - 0xfffffe00081ecb80 [thr_1]
100031 D - 0xffffffff8417d608 [alloc_0]
12 0 0 0 WL (threaded) [intr]
100012 I [swi6: task queue]
100013 I [swi6: Giant taskq]
100015 I [swi5: fast taskq]
100032 I [swi4: clock (0)]
100033 I [swi4: clock (1)]
100034 I [swi1: netisr 0]
100035 I [swi3: vm]
100036 I [swi1: hpts]
100037 I [swi1: hpts]
100050 I [irq24: virtio_pci0]
100051 I [irq25: virtio_pci0]
100052 I [irq26: virtio_pci0]
100053 I [irq27: virtio_pci0]
100054 I [irq28: virtio_pci1]
100055 I [irq29: virtio_pci1]
100056 I [irq30: virtio_pci1]
100057 I [irq31: virtio_pci1]
100058 I [irq32: virtio_pci1]
100063 I [irq10: virtio_pci2]
100065 I [irq1: atkbd0]
100066 I [irq12: psm0]
100067 I [swi0: uart uart++]
100075 I [swi1: pf send]
11 0 0 0 RL (threaded) [idle]
100003 CanRun [idle: cpu0]
100004 CanRun [idle: cpu1]
1 0 1 0 SLs wait 0xfffffe0053d52538 [init]
10 0 0 0 DL audit_w 0xffffffff841a8100 [audit]
0 0 0 0 DLs (threaded) [kernel]
100000 D swapin 0xffffffff8402f440 [swapper]
100005 D - 0xfffffe00081f4800 [if_config_tqg_0]
100006 D - 0xfffffe00081f4600 [softirq_0]
100007 D - 0xfffffe00081f4400 [softirq_1]
100008 D - 0xfffffe00081f4200 [if_io_tqg_0]
100009 D - 0xfffffe00081f4000 [if_io_tqg_1]
100010 D - 0xfffffe0053deed00 [in6m_free taskq]
100011 D - 0xfffffe0053deeb00 [deferred_unmount ta]
100014 D - 0xfffffe0053dee500 [thread taskq]
100016 D - 0xfffffe0053dee100 [linuxkpi_irq_wq]
100017 D - 0xfffffe0053df8e00 [kqueue_ctx taskq]
100018 D - 0xfffffe0053df8c00 [pci_hp taskq]
100019 D - 0xfffffe0053df8a00 [aiod_kick taskq]
100020 D - 0xfffffe0053df8800 [inm_free taskq]
100021 D - 0xfffffe0053df8600 [linuxkpi_short_wq_0]
100022 D - 0xfffffe0053df8600 [linuxkpi_short_wq_1]
100023 D - 0xfffffe0053df8600 [linuxkpi_short_wq_2]
100024 D - 0xfffffe0053df8600 [linuxkpi_short_wq_3]
100025 D - 0xfffffe0053df8100 [linuxkpi_long_wq_0]
100026 D - 0xfffffe0053df8100 [linuxkpi_long_wq_1]
100027 D - 0xfffffe0053df8100 [linuxkpi_long_wq_2]
100028 D - 0xfffffe0053df8100 [linuxkpi_long_wq_3]
100038 D - 0xfffffe0053e00200 [firmware taskq]
100042 D - 0xfffffe0054188c00 [crypto_0]
100043 D - 0xfffffe0054188c00 [crypto_1]
100059 D - 0xfffffe0056eabd00 [vtnet0 rxq 0]
100060 D - 0xfffffe0056eabc00 [vtnet0 txq 0]
100061 D - 0xfffffe0056eabb00 [vtnet0 rxq 1]
100062 D - 0xfffffe0056eaba00 [vtnet0 txq 1]
100064 D vtbslp 0xfffffe0056b8be80 [virtio_balloon]
100068 D - 0xfffffe0056feaa00 [mca taskq]
100073 D - 0xffffffff82c7bd61 [deadlkres]
100078 D - 0xfffffe0057400900 [acpi_task_0]
100079 D - 0xfffffe0057400900 [acpi_task_1]
100080 D - 0xfffffe0057400900 [acpi_task_2]
100081 D - 0xfffffe0054188500 [CAM taskq]
db> show all locks
Process 16068 (syz-executor.0) thread 0xfffffe00a2855e40 (142373)
exclusive sleep mutex umtxql (umtxql) r = 0 (0xffffffff8407edd0) locked @ /syzkaller/managers/main/kernel/sys/kern/kern_umtx.c:1247
Process 16067 (syz-executor.2) thread 0xfffffe00a728fc80 (213030)
exclusive sleep mutex umtxql (umtxql) r = 0 (0xffffffff8407bbd0) locked @ /syzkaller/managers/main/kernel/sys/kern/kern_umtx.c:1247
db> show malloc
Type InUse MemUse Requests
pf_hash 5 11524K 5
devbuf 4217 4339K 4248
tcp_hpts 6 3201K 6
sysctloid 34617 2045K 34688
vtbuf 24 1968K 46
kobj 326 1304K 512
newblk 19 1029K 111690
vfscache 3 1025K 3
inodedep 963 873K 115773
pcb 49 562K 162699
ufs_quota 1 512K 1
vfs_hash 1 512K 1
callout 2 512K 2
intr 4 472K 4
vmem 3 304K 8
subproc 157 288K 116110
dirrem 934 234K 115468
acpica 1674 184K 55752
vnet_data 1 168K 1
tidhash 3 141K 3
linker 355 140K 383
pagedep 26 135K 110901
tfo_ccache 1 128K 1
filedesc 16 121K 222181
freefile 934 117K 115446
DEVFS1 111 111K 248
sem 4 106K 4
bus 986 80K 3487
mtx_pool 2 72K 2
routetbl 1869 71K 5952
BPF 38 71K 10198
syncache 1 68K 1
acpitask 1 64K 1
ddb_capture 1 64K 1
module 509 64K 509
umtx 396 50K 396
kdtrace 237 48K 238310
sctp_timw 160 40K 160
temp 35 33K 9611
DEVFS3 129 33K 179
hostcache 1 32K 1
shm 1 32K 499
msg 4 30K 4
gtaskqueue 18 26K 18
ufs_dirhash 108 25K 108
kbdmux 6 22K 6
DEVFS_RULE 56 20K 56
ifaddr 69 20K 445
ufs_mount 4 17K 5
proc 3 17K 3
tty 16 16K 16
ithread 99 16K 99
bus-sc 34 15K 1693
GEOM 87 14K 607
lltable 42 13K 615
KTRACE 100 13K 100
ifnet 7 13K 47
ether_multi 152 13K 1336
md_disk 5 13K 2965
kenv 95 12K 95
eventhandler 133 12K 133
sctp_stro 11 11K 12700
ksem 7 11K 1668
CAM queue 5 11K 1528
rman 84 10K 425
in6_multi 65 9K 491
sctp_atcl 22 9K 89519
bmsafemap 2 9K 115736
UART 12 9K 12
devstat 4 9K 4
rpc 2 8K 2
shmfd 1 8K 1057
md_sectors 2 8K 2
pfs_vncache 1 8K 1
pfs_nodes 20 8K 20
audit_evclass 237 8K 295
taskqueue 63 7K 63
kqueue 66 7K 126894
sctp_ifa 50 7K 97
cred 25 7K 958
sglist 5 7K 5
CAM DEV 3 6K 510
plimit 23 6K 1157
DEVFSP 78 5K 8474
UMA 272 5K 272
pf_ifnet 10 5K 219
vt 11 5K 11
memdesc 1 4K 1
MCA 32 4K 32
evdev 4 4K 4
kcovinfo 64 4K 748
pwddesc 63 4K 116016
session 31 4K 148
lockf 34 4K 760
acpisem 28 4K 28
hhook 15 4K 17
diradd 26 4K 115675
selfd 45 3K 1457004
terminal 11 3K 11
proc-args 50 3K 1971
ip6ndp 15 3K 99
mkdir 20 3K 221716
uidinfo 3 3K 193
local_apic 1 2K 1
io_apic 1 2K 1
fpukern_ctx 2 2K 2
newdirblk 16 2K 110858
ipsec-saq 2 2K 2
select 16 2K 140
CAM XPT 22 2K 543
Unitno 25 2K 10853
in_multi 6 2K 49
sctp_atky 33 2K 104456
ipsecpolicy 2 2K 2
acpidev 20 2K 20
msi 9 2K 9
clone 9 2K 9
tun 7 2K 47
softdep 1 1K 1
sahead 1 1K 1
secasvar 1 1K 1
nhops 6 1K 20
vnodemarker 2 1K 232
NFSD session 1 1K 1
CAM periph 4 1K 271
ipsec 3 1K 3
sctp_ifn 6 1K 97
mld 6 1K 46
igmp 6 1K 46
toponodes 6 1K 6
isadev 6 1K 6
mount 16 1K 89
pci_link 10 1K 10
crypto 4 1K 4
encap_export_host 12 1K 12
pfil 4 1K 4
procdesc 4 1K 58
cdev 2 1K 2
inpcbpolicy 14 1K 33846
osd 8 1K 5742
chacha20random 1 1K 1
sctp_athm 22 1K 89519
sctp_map 22 1K 25400
NFSD lckfile 1 1K 1
NFSD V4client 1 1K 1
DEVFS 9 1K 10
vnodes 1 1K 1
CAM SIM 2 1K 2
ktls 1 1K 1
feeder 7 1K 7
tcpfunc 3 1K 3
loginclass 3 1K 6
prison 6 1K 6
lkpikmalloc 5 1K 6
aesni_data 2 1K 2
nexusdev 8 1K 8
apmdev 1 1K 1
atkbddev 2 1K 2
CAM dev queue 2 1K 2
xform 2 1K 49
CAM I/O Scheduler 1 1K 1
CAM path 4 1K 1034
eventfd 1 1K 3850
pmchooks 1 1K 1
soname 4 1K 66695
sctp_vrf 1 1K 1
vnet 1 1K 1
entropy 2 1K 112
acpiintr 1 1K 1
pmc 1 1K 1
filecaps 4 1K 298
cpus 2 1K 2
vnet_data_free 1 1K 1
Per-cpu 1 1K 1
freework 1 1K 110810
p1003.1b 1 1K 1
sctp_mcore 0 0K 0
sctp_socko 0 0K 70923
sctp_iter 0 0K 158
sctp_mvrf 0 0K 0
sctp_cpal 0 0K 0
sctp_cmsg 0 0K 0
sctp_stre 0 0K 0
sctp_athi 0 0K 0
sctp_a_it 0 0K 158
sctp_aadr 0 0K 290
sctp_stri 0 0K 0
mqdata 0 0K 0
pf_table 0 0K 0
pf_rule 0 0K 0
pf_altq 0 0K 0
pf_osfp 0 0K 0
pf_temp 0 0K 0
vegas data 0 0K 31
cdg data 0 0K 42
chd data 0 0K 38
cubic data 0 0K 233
dctcp data 0 0K 57
tcp_do 0 0K 0
tcp_fsb 0 0K 0
htcp data 0 0K 62
NEWdirectio 0 0K 0
NEWNFSnode 0 0K 0
madt_table 0 0K 2
smartpqi 0 0K 0
NFSCL lck 0 0K 0
NFSCL lckown 0 0K 0
NFSCL client 0 0K 0
NFSCL deleg 0 0K 0
NFSCL open 0 0K 0
NFSCL owner 0 0K 0
NFS fh 0 0K 0
NFS req 0 0K 0
iavf 0 0K 0
ixl 0 0K 0
NFSD usrgroup 0 0K 0
NFSD string 0 0K 0
NFSD V4lock 0 0K 0
NFSD V4state 0 0K 0
NFSD srvcache 0 0K 0
ice-resmgr 0 0K 0
ice-osdep 0 0K 0
ice 0 0K 0
axgbe 0 0K 0
msdosfs_fat 0 0K 0
msdosfs_mount 0 0K 0
msdosfs_node 0 0K 0
DEVFS4 0 0K 0
DEVFS2 0 0K 0
xen_intr 0 0K 0
gntdev 0 0K 0
privcmd_dev 0 0K 0
xen_hvm 0 0K 0
legacydrv 0 0K 0
qpidrv 0 0K 0
evtchn_dev 0 0K 0
xenstore 0 0K 0
dmar_idpgtbl 0 0K 0
dmar_dom 0 0K 0
dmar_ctx 0 0K 0
ciss_data 0 0K 0
BACKLIGHT 0 0K 0
xnb 0 0K 0
isci 0 0K 0
iommu_dmamap 0 0K 0
xbbd 0 0K 0
hyperv_socket 0 0K 0
bxe_ilt 0 0K 0
xenbus 0 0K 0
xbd 0 0K 0
Balloon 0 0K 0
sysmouse 0 0K 0
vm_fictitious 0 0K 0
vtfont 0 0K 0
ath_hal 0 0K 0
athdev 0 0K 0
ata_pci 0 0K 0
ata_dma 0 0K 0
ata_generic 0 0K 0
amr 0 0K 0
pvscsi 0 0K 0
scsi_da 0 0K 69
UMAHash 0 0K 0
ata_da 0 0K 0
vm_pgdata 0 0K 0
jblocks 0 0K 0
savedino 0 0K 97120
sentinel 0 0K 0
jfsync 0 0K 0
jtrunc 0 0K 0
sbdep 0 0K 114
jsegdep 0 0K 0
jseg 0 0K 0
jfreefrag 0 0K 0
jfreeblk 0 0K 0
jnewblk 0 0K 0
jmvref 0 0K 0
jremref 0 0K 0
jaddref 0 0K 0
freedep 0 0K 0
freeblks 0 0K 110773
freefrag 0 0K 25
allocindir 0 0K 0
indirdep 0 0K 11
allocdirect 0 0K 0
ufs_trim 0 0K 0
mactemp 0 0K 0
audit_trigger 0 0K 0
audit_pipe_presel 0 0K 0
audit_pipeent 0 0K 0
audit_pipe 0 0K 0
audit_evname 0 0K 0
audit_bsm 0 0K 0
audit_gidset 0 0K 0
audit_text 0 0K 0
audit_path 0 0K 0
audit_data 0 0K 0
audit_cred 0 0K 0
scsi_ch 0 0K 0
scsi_cd 0 0K 0
AHCI driver 0 0K 0
USBdev 0 0K 0
USB 0 0K 0
agp 0 0K 0
nvme_da 0 0K 0
ktls_ocf 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5E_TLS 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EN 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5DUMP 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
seq_file 0 0K 0
radix 0 0K 0
idr 0 0K 0
lkpifw 0 0K 0
NLM 0 0K 0
ipsec-spdcache 0 0K 0
ipsec-reg 0 0K 0
ipsec-misc 0 0K 0
ipsecrequest 0 0K 0
ip6opt 0 0K 2880
ip6_msource 0 0K 1
ip6_moptions 0 0K 387
in6_mfilter 0 0K 270
frag6 0 0K 142
tcplog 0 0K 0
tcp_hwpace 0 0K 0
acpipwr 0 0K 0
acpi_perf 0 0K 0
LRO 0 0K 0
newreno data 0 0K 0
ip_msource 0 0K 0
ip_moptions 0 0K 0
in_mfilter 0 0K 0
ipid 0 0K 0
80211scan 0 0K 0
80211ratectl 0 0K 0
80211power 0 0K 0
80211nodeie 0 0K 0
80211node 0 0K 0
80211mesh_gt 0 0K 0
80211mesh_rt 0 0K 0
80211perr 0 0K 0
80211prep 0 0K 0
80211preq 0 0K 0
80211dfs 0 0K 0
80211crypto 0 0K 0
80211vap 0 0K 0
iflib 0 0K 0
vlan 0 0K 0
gif 0 0K 0
ifdescr 0 0K 0
zlib 0 0K 0
fadvise 0 0K 0
VN POLL 0 0K 0
twsbuf 0 0K 0
statfs 0 0K 114413
namei_tracker 0 0K 273
export_host 0 0K 0
cl_savebuf 0 0K 11
twe_commands 0 0K 0
twa_commands 0 0K 0
tcp_log_dev 0 0K 0
midi buffers 0 0K 0
mixer 0 0K 0
ac97 0 0K 0
hdacc 0 0K 0
hdac 0 0K 0
hdaa 0 0K 0
acpicmbat 0 0K 0
SIIS driver 0 0K 0
CAM CCB 0 0K 523
PUC 0 0K 0
ppbusdev 0 0K 0
agtiapi_MemAlloc malloc 0 0K 0
biobuf 0 0K 0
aios 0 0K 0
lio 0 0K 0
acl 0 0K 0
osti_cacheable 0 0K 0
mbuf_tag 0 0K 1552
tempbuff 0 0K 0
tempbuff 0 0K 0
ag_tgt_map_t malloc 0 0K 0
ag_slr_map_t malloc 0 0K 0
lDevFlags * malloc 0 0K 0
tiDeviceHandle_t * malloc 0 0K 0
ag_portal_data_t malloc 0 0K 0
ag_device_t malloc 0 0K 0
STLock malloc 0 0K 0
CCB List 0 0K 0
sr_iov 0 0K 0
OCS 0 0K 0
OCS 0 0K 0
nvme 0 0K 0
nvd 0 0K 0
netmap 0 0K 0
mwldev 0 0K 0
MVS driver 0 0K 0
CAM ccb queue 0 0K 0
mrsasbuf 0 0K 0
mpt_user 0 0K 0
mps_user 0 0K 0
accf 0 0K 0
pts 0 0K 0
iov 0 0K 79660
ioctlops 0 0K 12790
Witness 0 0K 0
stack 0 0K 0
MPSSAS 0 0K 0
mps 0 0K 0
mpr_user 0 0K 0
MPRSAS 0 0K 0
mpr 0 0K 0
mfibuf 0 0K 0
sbuf 0 0K 340
firmware 0 0K 0
compressor 0 0K 0
SWAP 0 0K 0
malodev 0 0K 0
LED 0 0K 0
sysctltmp 0 0K 2141
sysctl 0 0K 3
ekcd 0 0K 0
dumper 0 0K 0
sendfile 0 0K 0
rctl 0 0K 0
ix_sriov 0 0K 0
aacraidcam 0 0K 0
aacraid_buf 0 0K 0
ix 0 0K 0
ipsbuf 0 0K 0
cache 0 0K 0
iirbuf 0 0K 0
prison_racct 0 0K 0
Fail Points 0 0K 0
sigio 0 0K 1
filedesc_to_leader 0 0K 0
pwd 0 0K 0
tty console 0 0K 0
aaccam 0 0K 0
aacbuf 0 0K 0
zstd 0 0K 0
XZ_DEC 0 0K 0
nvlist 0 0K 0
SCSI ENC 0 0K 0
SCSI sa 0 0K 0
scsi_pass 0 0K 0
isofs_node 0 0K 0
isofs_mount 0 0K 0
tr_raid5_data 0 0K 0
tr_raid1e_data 0 0K 0
tr_raid1_data 0 0K 0
tr_raid0_data 0 0K 0
tr_concat_data 0 0K 0
md_sii_data 0 0K 0
md_promise_data 0 0K 0
md_nvidia_data 0 0K 0
md_jmicron_data 0 0K 0
md_intel_data 0 0K 0
md_ddf_data 0 0K 0
raid_data 0 0K 90
geom_flashmap 0 0K 0
tmpfs dir 0 0K 0
tmpfs name 0 0K 0
tmpfs mount 0 0K 0
NFS FHA 0 0K 0
newnfsmnt 0 0K 0
newnfsclient_req 0 0K 0
NFSCL layrecall 0 0K 0
NFSCL session 0 0K 0
NFSCL sockreq 0 0K 0
NFSCL devinfo 0 0K 0
NFSCL flayout 0 0K 0
NFSCL layout 0 0K 0
NFSD rollback 0 0K 0
NFSCL diroff 0 0K 0
db> show uma
Zone Size Used Free Requests Sleeps Bucket Total Mem XFree
mbuf_jumbo_page 4096 8321 1528 139107 0 254 40341504 0
FFS inode 1160 22580 23 140692 0 8 26219480 0
VNODE 448 22618 89 140772 0 30 10172736 0
FFS2 dinode 256 22580 55 140692 0 62 5794560 0
sctp_asoc 2288 11 1644 12700 0 254 3786640 0
S VFS Cache 104 33584 385 155602 0 126 3532776 0
mbuf 256 8814 4716 576938 0 254 3463680 0
malloc-2048 2048 18 1386 77590 0 8 2875392 0
pbuf 2624 0 989 0 0 2 2595136 0
mbuf_cluster 2048 1110 2 1110 0 254 2277376 0
sctp_ep 1280 11 1699 76819 0 254 2188800 0
VM OBJECT 264 7961 64 1600373 0 30 2118600 0
vmem btag 56 32261 114 32330 0 254 1813000 0
BUF TRIE 144 257 11503 2622 0 62 1693440 0
malloc-1024 1024 133 1491 14165 0 16 1662976 0
malloc-384 384 4152 18 4152 0 30 1601280 0
malloc-128 128 11364 44 11572 0 126 1460224 0
UMA Slabs 0 112 12672 105 12831 0 126 1431024 0
malloc-4096 4096 327 3 606 0 2 1351680 0
RADIX NODE 144 8419 480 3020841 0 65 1281456 0
sctp_raddr 736 11 1650 12700 0 254 1222496 0
malloc-384 384 23 3047 89857 0 30 1178880 0
malloc-256 256 342 3753 175883 0 62 1048320 0
malloc-384 384 962 1608 115901 0 30 986880 0
malloc-256 256 1059 1626 238100 0 62 687360 0
256 Bucket 2048 261 21 17404 0 8 577536 0
malloc-65536 65536 0 8 16 0 1 524288 0
DEVCTL 1024 336 164 672 0 0 512000 0
lkpimm 168 1 2327 1 0 62 391104 0
lkpicurr 168 2 2326 2 0 62 391104 0
malloc-4096 4096 76 19 116138 0 2 389120 0
THREAD 1808 173 25 122293 0 8 357984 0
socket 944 35 341 134280 0 254 354944 0
malloc-128 128 938 1635 115665 0 126 329344 0
malloc-65536 65536 5 0 5 0 1 327680 0
DIRHASH 1024 311 1 311 0 16 319488 0
sctp_laddr 48 8 5956 18937 0 254 286272 0
mbuf_packet 256 89 1021 161355 0 254 284160 0
malloc-64 64 3931 416 120545 0 254 278208 0
sctp_chunk 152 15 1649 3388 0 254 252928 0
malloc-16384 16384 8 6 111070 0 1 229376 0
malloc-16 16 14125 125 14185 0 254 228000 0
MAP ENTRY 96 1532 820 6113798 0 127 225792 0
malloc-65536 65536 1 2 1424 0 1 196608 0
malloc-65536 65536 3 0 3 0 1 196608 0
malloc-256 256 79 656 234015 0 62 188160 0
UMA Zones 768 244 0 244 0 16 187392 0
malloc-32 32 5592 204 6151 0 254 185472 0
malloc-128 128 1404 22 27935 0 126 182528 0
VMSPACE 2544 37 26 113031 0 4 160272 0
malloc-64 64 689 1705 27127 0 254 153216 0
sctp_stream_msg_out 112 1 1331 6793 0 254 149184 0
malloc-65536 65536 0 2 136 0 1 131072 0
PROC 1336 62 31 116015 0 8 124248 0
malloc-4096 4096 18 12 104 0 2 122880 0
malloc-128 128 816 114 117373 0 126 119040 0
malloc-128 128 618 312 345123 0 126 119040 0
64 Bucket 512 161 71 54557 0 30 118784 0
g_bio 408 0 290 45776 0 30 118320 0
ksiginfo 112 78 966 22833 0 126 116928 0
malloc-32 32 137 3391 101402 0 254 112896 0
malloc-16 16 87 6913 146499 0 254 112000 0
malloc-8192 8192 7 6 140 0 1 106496 0
128 Bucket 1024 65 38 25926 0 16 105472 0
filedesc0 1072 63 35 116016 0 8 105056 0
32 Bucket 256 208 182 30519 0 62 99840 0
malloc-32768 32768 1 2 3 0 1 98304 0
malloc-256 256 230 130 125805 0 62 92160 0
UMA Kegs 384 229 4 229 0 30 89472 0
malloc-64 64 873 513 233671 0 254 88704 0
udp_inpcb 496 6 170 14225 0 254 87296 0
tcpcb 1080 4 73 5731 0 254 83160 0
unpcb 256 17 253 23400 0 254 69120 0
malloc-32768 32768 0 2 130 0 1 65536 0
malloc-16384 16384 4 0 4 0 1 65536 0
malloc-16384 16384 0 4 4 0 1 65536 0
malloc-32 32 1867 23 2306 0 254 60480 0
malloc-384 384 115 35 895 0 30 57600 0
malloc-8192 8192 7 0 7 0 1 57344 0
malloc-512 512 46 66 7754 0 30 57344 0
malloc-4096 4096 11 2 551 0 2 53248 0
malloc-2048 2048 4 22 911 0 8 53248 0
malloc-16384 16384 1 2 161 0 1 49152 0
malloc-2048 2048 11 13 189 0 8 49152 0
malloc-64 64 178 578 1458068 0 254 48384 0
pcpu-8 8 4704 928 65078 0 254 45056 0
malloc-256 256 31 134 221824 0 62 42240 0
clpbuf 2624 0 16 31 0 16 41984 0
da_ccb 544 0 77 11549 0 16 41888 0
malloc-8192 8192 5 0 5 0 1 40960 0
malloc-1024 1024 4 36 566 0 16 40960 0
Files 80 223 277 328015 0 126 40000 0
ripcb 496 4 76 11224 0 254 39680 0
tcp_inpcb 496 4 76 5731 0 254 39680 0
NAMEI 1024 0 36 598889 0 16 36864 0
malloc-2048 2048 2 16 532 0 8 36864 0
malloc-384 384 83 7 83 0 30 34560 0
pipe 744 22 23 1021 0 16 33480 0
malloc-32768 32768 1 0 1 0 1 32768 0
malloc-32768 32768 1 0 1 0 1 32768 0
malloc-32768 32768 1 0 1 0 1 32768 0
malloc-16384 16384 0 2 175 0 1 32768 0
malloc-16384 16384 1 1 16 0 1 32768 0
malloc-8192 8192 0 4 70 0 1 32768 0
malloc-8192 8192 2 2 274 0 1 32768 0
malloc-4096 4096 2 6 114460 0 2 32768 0
malloc-512 512 5 59 3962 0 30 32768 0
malloc-512 512 0 64 12526 0 30 32768 0
pcpu-64 64 487 25 487 0 254 32768 0
malloc-4096 4096 3 4 2963 0 2 28672 0
malloc-2048 2048 7 7 48 0 8 28672 0
malloc-1024 1024 22 6 3630 0 16 28672 0
TURNSTILE 136 199 11 199 0 62 28560 0
16 Bucket 144 131 65 2187 0 62 28224 0
KNOTE 160 28 147 954093 0 62 28000 0
8 Bucket 80 206 144 22312 0 126 28000 0
udplite_inpcb 496 0 56 2666 0 254 27776 0
L VFS Cache 320 71 13 71 0 30 26880 0
malloc-256 256 34 71 1709 0 62 26880 0
malloc-8192 8192 2 1 6 0 1 24576 0
malloc-2048 2048 1 11 253 0 8 24576 0
malloc-1024 1024 18 6 1078 0 16 24576 0
ertt_txseginfo 40 1 605 145370 0 254 24240 0
PWD 32 20 736 115252 0 254 24192 0
ttyinq 160 135 15 300 0 62 24000 0
malloc-128 128 34 152 549 0 126 23808 0
ttyoutq 256 72 18 160 0 62 23040 0
malloc-4096 4096 3 2 8 0 2 20480 0
malloc-1024 1024 4 16 66 0 16 20480 0
malloc-64 64 27 288 45166 0 254 20160 0
malloc-32 32 43 587 122254 0 254 20160 0
SLEEPQUEUE 88 199 25 199 0 126 19712 0
Mountpoints 2752 2 5 2 0 4 19264 0
malloc-256 256 48 27 2852 0 62 19200 0
malloc-16384 16384 1 0 1 0 1 16384 0
malloc-8192 8192 2 0 2 0 1 16384 0
vtnet_tx_hdr 24 0 668 154146 0 254 16032 0
malloc-128 128 89 35 1866 0 126 15872 0
routing nhops 256 27 33 207 0 62 15360 0
malloc-384 384 24 16 273 0 30 15360 0
malloc-256 256 17 43 3014 0 62 15360 0
cpuset 104 8 116 303 0 126 12896 0
malloc-4096 4096 2 1 99 0 2 12288 0
malloc-1024 1024 2 10 27 0 16 12288 0
malloc-1024 1024 6 6 20 0 16 12288 0
malloc-512 512 0 24 147 0 30 12288 0
ertt 72 4 164 5731 0 126 12096 0
malloc-64 64 30 159 2126 0 254 12096 0
malloc-32 32 149 229 23791 0 254 12096 0
malloc-32 32 24 354 41736 0 254 12096 0
4 Bucket 48 10 242 2441 0 254 12096 0
2 Bucket 32 87 291 11579 0 254 12096 0
malloc-16 16 501 249 42430 0 254 12000 0
malloc-128 128 35 58 5337 0 126 11904 0
kenv 258 15 30 1104 0 30 11610 0
malloc-2048 2048 0 4 48 0 8 8192 0
malloc-512 512 0 16 21 0 30 8192 0
malloc-512 512 2 14 61 0 30 8192 0
malloc-512 512 2 14 233 0 30 8192 0
rtentry 176 30 16 207 0 62 8096 0
PGRP 88 31 61 149 0 126 8096 0
rl_entry 40 94 108 94 0 254 8080 0
udpcb 32 6 246 16891 0 254 8064 0
ipq 56 0 144 6 0 254 8064 0
malloc-64 64 30 96 174 0 254 8064 0
malloc-64 64 10 116 451 0 254 8064 0
malloc-32 32 30 222 1881 0 254 8064 0
malloc-16 16 19 481 24164 0 254 8000 0
malloc-16 16 21 479 65 0 254 8000 0
malloc-16 16 36 464 52038 0 254 8000 0
malloc-16 16 0 500 8 0 254 8000 0
malloc-16 16 42 458 62 0 254 8000 0
malloc-384 384 0 20 7 0 30 7680 0
malloc-384 384 2 18 10 0 30 7680 0
FPU_save_area 832 1 8 1 0 16 7488 0
domainset 40 0 126 295 0 254 5040 0
epoch_record pcpu 256 4 12 4 0 62 4096 0
malloc-2048 2048 2 0 2 0 8 4096 0
malloc-1024 1024 0 4 1 0 16 4096 0
malloc-512 512 2 6 2 0 30 4096 0
pcpu-16 16 7 249 7 0 254 4096 0
hostcache 64 1 62 1 0 254 4032 0
syncache 168 0 24 4 0 254 4032 0
malloc-32 32 18 108 2490 0 254 4032 0
UMA Slabs 1 176 10 12 10 0 62 3872 0
mqnode 416 3 6 3 0 30 3744 0
KMAP ENTRY 96 12 27 14 0 0 3744 0
vmem 1856 1 1 1 0 8 3712 0
SMR CPU 32 3 60 3 0 254 2016 0
SMR SHARED 24 3 60 3 0 254 1512 0
md1 512 0 0 0 0 30 0 0
md0 512 0 0 0 0 30 0 0
FFS1 dinode 128 0 0 0 0 126 0 0
ada_ccb 272 0 0 0 0 30 0 0
swblk 136 0 0 0 0 62 0 0
swpctrie 144 0 0 0 0 62 0 0
sctp_asconf_ack 48 0 0 0 0 254 0 0
sctp_asconf 40 0 0 0 0 254 0 0
sctp_readq 152 0 0 0 0 254 0 0
cdg_qdiffsample 16 0 0 0 0 254 0 0
pf state scrubs 40 0 0 0 0 254 0 0
pf frag entries 40 0 0 0 0 254 0 0
pf frags 248 0 0 0 0 62 0 0
pf table entries 160 0 0 0 0 62 0 0
pf table entry counters 64 0 0 0 0 254 0 0
pf source nodes 136 0 0 0 0 254 0 0
pf state keys 88 0 0 0 0 126 0 0
pf states 312 0 0 0 0 254 0 0
pf tags 104 0 0 0 0 126 0 0
pf mtags 48 0 0 0 0 254 0 0
tcp_bbr_pcb 832 0 0 0 0 16 0 0
tcp_bbr_map 128 0 0 0 0 126 0 0
tcp_rack_pcb 832 0 0 0 0 16 0 0
tcp_rack_map 112 0 0 0 0 126 0 0
tcp_log_node 120 0 0 0 0 126 0 0
tcp_log_bucket 176 0 0 0 0 62 0 0
tcp_log 416 0 0 0 0 254 0 0
tcpreass 48 0 0 0 0 254 0 0
tfo_ccache_entries 80 0 0 0 0 126 0 0
tfo 4 0 0 0 0 254 0 0
sackhole 32 0 0 0 0 254 0 0
tcptw 88 0 0 0 0 254 0 0
IPsec SA lft_c 16 0 0 0 0 254 0 0
itimer 352 0 0 0 0 30 0 0
AIOLIO 272 0 0 0 0 30 0 0
AIOCB 552 0 0 0 0 16 0 0
AIOP 32 0 0 0 0 254 0 0
AIO 208 0 0 0 0 62 0 0
mqnotifier 216 0 0 0 0 62 0 0
mvdata 64 0 0 0 0 254 0 0
mqueue 248 0 0 0 0 62 0 0
TMPFS node 224 0 0 0 0 62 0 0
NCLNODE 592 0 0 0 0 16 0 0
LTS VFS Cache 360 0 0 0 0 30 0 0
STS VFS Cache 144 0 0 0 0 62 0 0
cryptop 280 0 0 0 0 30 0 0
linux_dma_object 24 0 0 0 0 254 0 0
linux_dma_pctrie 144 0 0 0 0 62 0 0
IOMMU_MAP_ENTRY 120 0 0 0 0 126 0 0
ktls_session 192 0 0 0 0 62 0 0
mbuf_jumbo_16k 16384 0 0 0 0 254 0 0
mbuf_jumbo_9k 9216 0 0 0 0 254 0 0
audit_record 1280 0 0 0 0 8 0 0
MAC labels 40 0 0 0 0 254 0 0
vnpbuf 2624 0 0 0 0 64 0 0
mdpbuf 2624 0 0 0 0 3 0 0
nfspbuf 2624 0 0 0 0 16 0
---
This report is generated by a bot. It may contain errors.
See https://goo.gl/tpsmEJ for more information about syzbot.
syzbot engineers can be reached at syzk...@googlegroups.com.
syzbot will keep track of this issue. See:
https://goo.gl/tpsmEJ#status for how to communicate with syzbot.
syzbot
Sep 4, 2021, 1:16:36 AM9/4/21
to syzkaller-f...@googlegroups.com
syzbot has found a reproducer for the following issue on:
HEAD commit: cd85b97e0e70 rt(4): Replace Giant callout+task with timeou..
git tree: https://github.com/freebsd/freebsd-src.git main
console output: https://syzkaller.appspot.com/x/log.txt?x=14043115300000
dashboard link: https://syzkaller.appspot.com/bug?extid=2dc016d5cf0bb265b971
syz repro: https://syzkaller.appspot.com/x/repro.syz?x=13098ea3300000
C reproducer: https://syzkaller.appspot.com/x/repro.c?x=113892cd300000
IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+2dc016...@syzkaller.appspotmail.com
panic: ASan: Invalid access, 2-byte read at 0xfffffe0007942f98, MallocRedZone(fb)
cpuid = 0
time = 1630732400
rcx 0xa798e9d9833c6395
rdx 0xdffff7c000000000
rdi 0xffffffff8408b740 cov_trace_pc
785 783 783 0 D g_waiti 0xffffffff8402e180 syz-executor9727899
783 781 783 0 Ss pause 0xfffffe009e9d0b20 csh
781 694 781 0 Ss select 0xfffffe0056b8b7c0 sshd
749 748 24 0 S+ nanslp 0xffffffff8405af81 sleep
748 1 24 0 S+ wait 0xfffffe009e455000 sh
507 1 507 0 Rs syslogd
436 1 436 0 Rs CPU 1 devd
435 1 435 65 Ss select 0xfffffe0056b8bdc0 dhclient
350 1 350 0 Ss select 0xfffffe0056b8bb40 dhclient
347 1 347 0 Ss select 0xfffffe0056b8be40 dhclient
16 0 0 0 DL pftm 0xffffffff84c68e20 [pf purge]
Process 436 (devd) thread 0xfffffe005892c000 (100102)
exclusive sleep mutex select mtxpool (select mtxpool) r = 0 (0xfffffe00584d8b20) locked @ /syzkaller/managers/main/kernel/sys/kern/sys_generic.c:1945
exclusive sleep mutex so_rcv (so_rcv) r = 0 (0xfffffe0058b368a8) locked @ /syzkaller/managers/main/kernel/sys/kern/uipc_usrreq.c:1056
exclusive sleep mutex unp (unp) r = 0 (0xfffffe0058b57900) locked @ /syzkaller/managers/main/kernel/sys/kern/uipc_usrreq.c:392
exclusive sleep mutex unp (unp) r = 0 (0xfffffe0058b5a900) locked @ /syzkaller/managers/main/kernel/sys/kern/uipc_usrreq.c:1032
exclusive sx so_snd_sx (so_snd_sx) r = 0 (0xfffffe009e39b630) locked @ /syzkaller/managers/main/kernel/sys/kern/uipc_sockbuf.c:491
tcp_hpts 6 3201K 6
sysctloid 34389 2031K 34460
vtbuf 24 1968K 46
kobj 326 1304K 494
newblk 709 1201K 721
vfscache 3 1025K 3
pcb 23 537K 77
inodedep 49 530K 71
tfo_ccache 1 128K 1
sem 4 106K 4
DEVFS1 105 105K 114
umtx 264 33K 264
temp 18 33K 1615
hostcache 1 32K 1
shm 1 32K 1
DEVFS3 123 31K 133
GEOM 73 12K 521
routetbl 50 11K 176
ufs_dirhash 24 5K 24
UMA 270 5K 270
dirrem 17 5K 28
plimit 17 5K 322
vt 11 5K 11
ifnet 3 5K 3
evdev 4 4K 4
filedesc 1 4K 1
diradd 25 4K 36
lltable 11 4K 11
pf_ifnet 5 3K 6
in6_multi 25 3K 25
kqueue 47 3K 789
pwddesc 47 3K 787
terminal 11 3K 11
session 20 3K 31
uidinfo 3 3K 8
proc-args 39 2K 489
Unitno 27 2K 39
selfd 24 2K 11006
ipsec 3 1K 3
indirdep 3 1K 3
nhops 6 1K 6
crypto 4 1K 4
ip6ndp 4 1K 5
encap_export_host 12 1K 12
newdirblk 4 1K 8
mkdir 4 1K 16
in_multi 2 1K 4
pfil 4 1K 4
cdev 2 1K 2
chacha20random 1 1K 1
osd 7 1K 18
inpcbpolicy 10 1K 135
sctp_ifn 2 1K 6
DEVFS 9 1K 10
mld 2 1K 2
igmp 2 1K 2
pmchooks 1 1K 1
soname 4 1K 3479
filecaps 4 1K 66
tun 3 1K 3
p1003.1b 1 1K 1
cdg data 0 0K 0
cubic data 0 0K 0
dctcp data 0 0K 0
sctp_mcore 0 0K 0
sctp_socko 0 0K 0
sctp_iter 0 0K 4
sctp_mvrf 0 0K 0
sctp_timw 0 0K 0
sctp_atky 0 0K 0
sctp_atcl 0 0K 0
sctp_a_it 0 0K 4
sctp_aadr 0 0K 0
sctp_stro 0 0K 0
sctp_stri 0 0K 0
sctp_map 0 0K 0
htcp data 0 0K 0
vegas data 0 0K 0
savedino 0 0K 15
freeblks 0 0K 25
freefrag 0 0K 1
allocindir 0 0K 0
ip6opt 0 0K 3
ip6_msource 0 0K 0
ip6_moptions 0 0K 0
in6_mfilter 0 0K 0
frag6 0 0K 0
statfs 0 0K 195
namei_tracker 0 0K 0
export_host 0 0K 0
cl_savebuf 0 0K 3
ioctlops 0 0K 86
eventfd 0 0K 0
md_sectors 0 0K 0
raid_data 0 0K 78
BUF TRIE 144 184 11576 503 0 62 1693440 0
malloc-384 384 4152 8 4152 0 30 1597440 0
malloc-128 128 11273 42 11303 0 126 1448320 0
malloc-4096 4096 327 3 588 0 2 1351680 0
UMA Slabs 0 112 10120 29 10120 0 126 1136688 0
vmem btag 56 15412 43 15412 0 254 865480 0
FFS inode 1160 499 12 508 0 8 592760 0
RADIX NODE 144 3046 141 21152 0 62 458928 0
malloc-4096 4096 59 2 810 0 2 249856 0
256 Bucket 2048 107 15 10816 0 8 249856 0
VM OBJECT 264 892 53 12698 0 30 249480 0
VNODE 448 530 19 541 0 30 245952 0
THREAD 1808 126 6 126 0 8 238656 0
malloc-16 16 14029 221 14089 0 254 228000 0
DEVCTL 1024 0 220 128 0 0 225280 0
malloc-65536 65536 1 2 45 0 1 196608 0
malloc-32 32 5560 362 6128 0 254 189504 0
UMA Zones 768 242 2 242 0 16 187392 0
malloc-128 128 1329 35 26369 0 126 174592 0
FFS2 dinode 256 499 26 508 0 62 134400 0
malloc-1024 1024 114 6 283 0 16 122880 0
ksiginfo 112 43 1001 58 0 126 116928 0
MAP ENTRY 96 836 382 38042 0 126 116928 0
S VFS Cache 104 966 48 1005 0 126 105456 0
UMA Kegs 384 227 6 227 0 30 89472 0
malloc-128 128 628 54 3944 0 126 87296 0
malloc-8192 8192 7 3 110 0 1 81920 0
g_bio 408 0 200 4500 0 30 81600 0
PROC 1336 46 14 786 0 8 80160 0
malloc-128 128 596 24 1136 0 126 79360 0
malloc-2048 2048 4 32 535 0 8 73728 0
VMSPACE 2544 23 4 764 0 4 68688 0
mbuf_cluster 2048 30 2 30 0 254 65536 0
malloc-64 64 797 148 2509 0 254 60480 0
filedesc0 1072 47 9 787 0 8 60032 0
malloc-256 256 163 32 517 0 62 49920 0
malloc-256 256 176 4 1237 0 62 46080 0
32 Bucket 256 50 130 4146 0 62 46080 0
malloc-64 64 533 160 1674 0 254 44352 0
malloc-256 256 138 27 451 0 62 42240 0
clpbuf 2624 0 16 22 0 16 41984 0
DIRHASH 1024 34 2 34 0 16 36864 0
NAMEI 1024 0 36 12233 0 16 36864 0
pcpu-8 8 4233 375 4261 0 254 36864 0
malloc-128 128 21 227 280 0 126 31744 0
malloc-1024 1024 22 6 890 0 16 28672 0
malloc-384 384 66 4 76 0 30 26880 0
malloc-384 384 48 22 88 0 30 26880 0
malloc-4096 4096 6 0 6 0 2 24576 0
malloc-1024 1024 18 6 22 0 16 24576 0
malloc-2048 2048 10 0 11 0 8 20480 0
malloc-1024 1024 4 16 48 0 16 20480 0
TURNSTILE 136 133 14 133 0 62 19992 0
SLEEPQUEUE 88 133 59 133 0 126 16896 0
16 Bucket 144 40 72 308 0 62 16128 0
malloc-128 128 90 34 541 0 126 15872 0
malloc-256 256 11 49 61 0 62 15360 0
tcpcb 1080 3 11 7 0 254 15120 0
pipe 744 7 13 284 0 16 14880 0
malloc-4096 4096 1 2 197 0 2 12288 0
malloc-4096 4096 3 0 4 0 2 12288 0
malloc-2048 2048 2 4 4 0 8 12288 0
malloc-512 512 0 24 118 0 30 12288 0
malloc-512 512 11 13 12 0 30 12288 0
malloc-32 32 112 266 3925 0 254 12096 0
Files 80 73 77 6580 0 126 12000 0
malloc-16 16 495 255 1838 0 254 12000 0
8 Bucket 80 38 112 646 0 126 12000 0
udp_inpcb 496 6 18 124 0 254 11904 0
kenv 258 15 30 1026 0 30 11610 0
malloc-256 256 11 34 51 0 62 11520 0
malloc-4096 4096 0 2 5 0 2 8192 0
malloc-2048 2048 4 0 4 0 8 8192 0
malloc-2048 2048 2 2 11 0 8 8192 0
malloc-1024 1024 2 6 6 0 16 8192 0
malloc-1024 1024 3 5 3 0 16 8192 0
malloc-512 512 5 11 5 0 30 8192 0
malloc-512 512 0 16 9 0 30 8192 0
rtentry 176 13 33 17 0 62 8096 0
PGRP 88 20 72 31 0 126 8096 0
ertt_txseginfo 40 1 201 271 0 254 8080 0
rl_entry 40 35 167 35 0 254 8080 0
udpcb 32 6 246 124 0 254 8064 0
ertt 72 3 109 7 0 126 8064 0
PWD 32 10 242 100 0 254 8064 0
malloc-64 64 25 101 13383 0 254 8064 0
malloc-64 64 30 96 46 0 254 8064 0
malloc-64 64 21 105 278 0 254 8064 0
malloc-32 32 21 231 74 0 254 8064 0
malloc-32 32 129 123 840 0 254 8064 0
malloc-32 32 16 236 154 0 254 8064 0
malloc-32 32 53 199 192 0 254 8064 0
malloc-32 32 19 233 23 0 254 8064 0
4 Bucket 48 5 163 46 0 254 8064 0
2 Bucket 32 51 201 503 0 254 8064 0
vtnet_tx_hdr 24 0 334 2297 0 254 8016 0
KNOTE 160 0 50 7 0 62 8000 0
malloc-16 16 15 485 92 0 254 8000 0
malloc-16 16 18 482 24 0 254 8000 0
malloc-16 16 16 484 67 0 254 8000 0
malloc-16 16 42 458 25600 0 254 8000 0
malloc-16 16 14 486 14 0 254 8000 0
tcp_inpcb 496 3 13 7 0 254 7936 0
malloc-128 128 35 27 94 0 126 7936 0
malloc-128 128 4 58 19 0 126 7936 0
routing nhops 256 10 20 17 0 62 7680 0
unpcb 256 8 22 1180 0 254 7680 0
mbuf_packet 256 1 29 101 0 254 7680 0
malloc-384 384 9 11 12 0 30 7680 0
malloc-384 384 1 19 338 0 30 7680 0
malloc-256 256 8 22 264 0 62 7680 0
malloc-2048 2048 0 2 12 0 8 4096 0
malloc-64 64 2 61 2 0 254 4032 0
malloc-32 32 18 108 112 0 254 4032 0
malloc-16 16 0 250 6 0 254 4000 0
ripcb 496 1 7 4 0 254 3968 0
UMA Slabs 1 176 8 14 8 0 62 3872 0
malloc-384 384 0 10 1 0 30 3840 0
malloc-384 384 1 9 1 0 30 3840 0
sctp_raddr 736 0 0 0 0 254 0 0
sctp_asoc 2288 0 0 0 0 254 0 0
sctp_ep 1280 0 0 0 0 254 0 0
swwbuf 2624 0 0 0 0 8 0 0
swrbuf 2624 0 0 0 0 16 0 0
umtx_shm 88 0 0 0 0 126 0 0
umtx pi 96 0 0 0 0 126 0 0
rangeset pctrie nodes 144 0 0 0 0 62 0 0
malloc-65536 65536 0 0 0 0 1 0 0
malloc-65536 65536 0 0 0 0 1 0 0
malloc-65536 65536 0 0 0 0 1 0 0
malloc-32768 32768 0 0 0 0 1 0 0
malloc-32768 32768 0 0 0 0 1 0 0
malloc-32768 32768 0 0 0 0 1 0 0
malloc-32768 32768 0 0 0 0 1 0 0
malloc-16384 16384 0 0 0 0 1 0 0
malloc-16384 16384 0 0 0 0 1 0 0
malloc-16384 16384 0 0 0 0 1 0 0
malloc-8192 8192 0 0 0 0 1 0 0
pcpu-32 32 0 0 0 0 254 0 0
pcpu-4 4 0 0 0 0 254 0 0
fakepg 104 0 0 0 0 126 0 0
UMA Hash 256 0 0 0 0 62 0 0
HEAD commit: cd85b97e0e70 rt(4): Replace Giant callout+task with timeou..
git tree: https://github.com/freebsd/freebsd-src.git main
dashboard link: https://syzkaller.appspot.com/bug?extid=2dc016d5cf0bb265b971
syz repro: https://syzkaller.appspot.com/x/repro.syz?x=13098ea3300000
C reproducer: https://syzkaller.appspot.com/x/repro.c?x=113892cd300000
IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+2dc016...@syzkaller.appspotmail.com
cpuid = 0
time = 1630732400
rdx 0xdffff7c000000000
rbx 0
rsp 0xfffffe0053b386d0
rbp 0xfffffe0053b386f0
rsi 0x1
rsp 0xfffffe0053b386d0
rbp 0xfffffe0053b386f0
rdi 0xffffffff8408b740 cov_trace_pc
r8 0x3
r9 0xfffffe0053b38208
r10 0
r11 0xfffffe005892e8b0
r9 0xfffffe0053b38208
r10 0
r12 0xfffffe0053e23e40
r13 0xfffffe0053b38701
r14 0xffffffff82c74de0 .str.18
r15 0xffffffff82c74de0 .str.18
rip 0xffffffff817aafbb kdb_enter+0x6b
rflags 0x46
kdb_enter+0x6b: movq $0,0x28e30fa(%rip)
db> show proc
Process 13 (geom) at 0xfffffe0053df0000:
state: NORMAL
uid: 0 gids: 0
parent: pid 0 at 0xffffffff8402f440
ABI: null
flag: 0x10000284 flag2: 0
reaper: 0xffffffff8402f440 reapsubtree: 13
sigparent: 20
vmspace: 0xffffffff840303c0
(map 0xffffffff840303c0)
(map.pmap 0xffffffff84030480)
(pmap 0xffffffff840304e0)
threads: 3
100039 Run CPU 0 [g_event]
r13 0xfffffe0053b38701
r14 0xffffffff82c74de0 .str.18
r15 0xffffffff82c74de0 .str.18
rip 0xffffffff817aafbb kdb_enter+0x6b
rflags 0x46
kdb_enter+0x6b: movq $0,0x28e30fa(%rip)
db> show proc
Process 13 (geom) at 0xfffffe0053df0000:
state: NORMAL
uid: 0 gids: 0
parent: pid 0 at 0xffffffff8402f440
ABI: null
flag: 0x10000284 flag2: 0
reaper: 0xffffffff8402f440 reapsubtree: 13
sigparent: 20
vmspace: 0xffffffff840303c0
(map 0xffffffff840303c0)
(map.pmap 0xffffffff84030480)
(pmap 0xffffffff840304e0)
threads: 3
100040 D - 0xffffffff8402e580 [g_up]
100041 D - 0xffffffff8402e5c0 [g_down]
db> ps
pid ppid pgrp uid state wmesg wchan cmd
786 0 0 0 DL mdwait 0xfffffe009e9f6000 [md0]
100041 D - 0xffffffff8402e5c0 [g_down]
db> ps
pid ppid pgrp uid state wmesg wchan cmd
785 783 783 0 D g_waiti 0xffffffff8402e180 syz-executor9727899
783 781 783 0 Ss pause 0xfffffe009e9d0b20 csh
781 694 781 0 Ss select 0xfffffe0056b8b7c0 sshd
760 1 760 0 Ss+ ttyin 0xfffffe0056ff8cb0 getty
759 1 759 0 Ss+ ttyin 0xfffffe00575f6cb0 getty
758 1 758 0 Ss+ ttyin 0xfffffe00583eb0b0 getty
757 1 757 0 Ss+ ttyin 0xfffffe00583eb4b0 getty
756 1 756 0 Ss+ ttyin 0xfffffe00583eb8b0 getty
755 1 755 0 Ss+ ttyin 0xfffffe00583ebcb0 getty
754 1 754 0 Ss+ ttyin 0xfffffe00574740b0 getty
753 1 753 0 Ss+ ttyin 0xfffffe00574744b0 getty
752 1 752 0 Ss+ ttyin 0xfffffe00574748b0 getty
750 1 24 0 S+ piperd 0xfffffe00588bdba0 logger
759 1 759 0 Ss+ ttyin 0xfffffe00575f6cb0 getty
758 1 758 0 Ss+ ttyin 0xfffffe00583eb0b0 getty
757 1 757 0 Ss+ ttyin 0xfffffe00583eb4b0 getty
756 1 756 0 Ss+ ttyin 0xfffffe00583eb8b0 getty
755 1 755 0 Ss+ ttyin 0xfffffe00583ebcb0 getty
754 1 754 0 Ss+ ttyin 0xfffffe00574740b0 getty
753 1 753 0 Ss+ ttyin 0xfffffe00574744b0 getty
752 1 752 0 Ss+ ttyin 0xfffffe00574748b0 getty
749 748 24 0 S+ nanslp 0xffffffff8405af81 sleep
748 1 24 0 S+ wait 0xfffffe009e455000 sh
698 1 698 0 Ss nanslp 0xffffffff8405af81 cron
694 1 694 0 Ss select 0xfffffe0056b8b9c0 sshd
507 1 507 0 Rs syslogd
436 1 436 0 Rs CPU 1 devd
435 1 435 65 Ss select 0xfffffe0056b8bdc0 dhclient
350 1 350 0 Ss select 0xfffffe0056b8bb40 dhclient
347 1 347 0 Ss select 0xfffffe0056b8be40 dhclient
23 0 0 0 DL vlruwt 0xfffffe005875c538 [vnlru]
22 0 0 0 DL syncer 0xffffffff84183360 [syncer]
21 0 0 0 DL (threaded) [bufdaemon]
100085 D qsleep 0xffffffff84181060 [bufdaemon]
100088 D - 0xffffffff83411f80 [bufspacedaemon-0]
100098 D sdflush 0xfffffe00575fe8e8 [/ worker]
22 0 0 0 DL syncer 0xffffffff84183360 [syncer]
21 0 0 0 DL (threaded) [bufdaemon]
100085 D qsleep 0xffffffff84181060 [bufdaemon]
100088 D - 0xffffffff83411f80 [bufspacedaemon-0]
20 0 0 0 DL psleep 0xffffffff841b9580 [vmdaemon]
19 0 0 0 DL (threaded) [pagedaemon]
100083 D psleep 0xffffffff841ad0b8 [dom0]
100089 D launds 0xffffffff841ad0c4 [laundry: dom0]
100090 D umarcl 0xffffffff81eaa680 [uma]
18 0 0 0 DL - 0xffffffff83e120a0 [rand_harvestq]
17 0 0 0 DL waiting 0xffffffff84a3b560 [sctp_iterator]
19 0 0 0 DL (threaded) [pagedaemon]
100083 D psleep 0xffffffff841ad0b8 [dom0]
100089 D launds 0xffffffff841ad0c4 [laundry: dom0]
100090 D umarcl 0xffffffff81eaa680 [uma]
18 0 0 0 DL - 0xffffffff83e120a0 [rand_harvestq]
16 0 0 0 DL pftm 0xffffffff84c68e20 [pf purge]
15 0 0 0 DL - 0xffffffff8417c280 [soaiod4]
9 0 0 0 DL - 0xffffffff8417c280 [soaiod3]
8 0 0 0 DL - 0xffffffff8417c280 [soaiod2]
7 0 0 0 DL - 0xffffffff8417c280 [soaiod1]
6 0 0 0 DL (threaded) [cam]
100048 D - 0xffffffff83c97840 [doneq0]
100049 D - 0xffffffff83c977c0 [async]
100082 D - 0xffffffff83c97640 [scanner]
14 0 0 0 DL seqstat 0xfffffe000791a888 [sequencer 00]
5 0 0 0 DL crypto_ 0xfffffe00541b1d80 [crypto returns 1]
4 0 0 0 DL crypto_ 0xfffffe00541b1d30 [crypto returns 0]
3 0 0 0 DL crypto_ 0xffffffff841a7160 [crypto]
13 0 0 0 RL (threaded) [geom]
100039 Run CPU 0 [g_event]
9 0 0 0 DL - 0xffffffff8417c280 [soaiod3]
8 0 0 0 DL - 0xffffffff8417c280 [soaiod2]
7 0 0 0 DL - 0xffffffff8417c280 [soaiod1]
6 0 0 0 DL (threaded) [cam]
100048 D - 0xffffffff83c97840 [doneq0]
100049 D - 0xffffffff83c977c0 [async]
100082 D - 0xffffffff83c97640 [scanner]
14 0 0 0 DL seqstat 0xfffffe000791a888 [sequencer 00]
5 0 0 0 DL crypto_ 0xfffffe00541b1d80 [crypto returns 1]
4 0 0 0 DL crypto_ 0xfffffe00541b1d30 [crypto returns 0]
3 0 0 0 DL crypto_ 0xffffffff841a7160 [crypto]
13 0 0 0 RL (threaded) [geom]
exclusive sleep mutex select mtxpool (select mtxpool) r = 0 (0xfffffe00584d8b20) locked @ /syzkaller/managers/main/kernel/sys/kern/sys_generic.c:1945
exclusive sleep mutex so_rcv (so_rcv) r = 0 (0xfffffe0058b368a8) locked @ /syzkaller/managers/main/kernel/sys/kern/uipc_usrreq.c:1056
exclusive sleep mutex unp (unp) r = 0 (0xfffffe0058b57900) locked @ /syzkaller/managers/main/kernel/sys/kern/uipc_usrreq.c:392
exclusive sleep mutex unp (unp) r = 0 (0xfffffe0058b5a900) locked @ /syzkaller/managers/main/kernel/sys/kern/uipc_usrreq.c:1032
exclusive sx so_snd_sx (so_snd_sx) r = 0 (0xfffffe009e39b630) locked @ /syzkaller/managers/main/kernel/sys/kern/uipc_sockbuf.c:491
db> show malloc
Type InUse MemUse Requests
pf_hash 5 11524K 5
devbuf 4217 4339K 4243
Type InUse MemUse Requests
pf_hash 5 11524K 5
tcp_hpts 6 3201K 6
sysctloid 34389 2031K 34460
vtbuf 24 1968K 46
kobj 326 1304K 494
newblk 709 1201K 721
vfscache 3 1025K 3
pcb 23 537K 77
inodedep 49 530K 71
ufs_quota 1 512K 1
vfs_hash 1 512K 1
callout 2 512K 2
intr 4 472K 4
subproc 108 211K 848
vfs_hash 1 512K 1
callout 2 512K 2
intr 4 472K 4
acpica 1674 184K 55752
vnet_data 1 168K 1
vmem 3 146K 4
vnet_data 1 168K 1
tidhash 3 141K 3
linker 355 140K 383
pagedep 14 132K 18
linker 355 140K 383
tfo_ccache 1 128K 1
sem 4 106K 4
DEVFS1 105 105K 114
bus 986 80K 3487
mtx_pool 2 72K 2
mtx_pool 2 72K 2
syncache 1 68K 1
acpitask 1 64K 1
ddb_capture 1 64K 1
module 509 64K 509
kdtrace 174 35K 914
acpitask 1 64K 1
ddb_capture 1 64K 1
module 509 64K 509
umtx 264 33K 264
temp 18 33K 1615
hostcache 1 32K 1
shm 1 32K 1
DEVFS3 123 31K 133
msg 4 30K 4
gtaskqueue 18 26K 18
gtaskqueue 18 26K 18
kbdmux 6 22K 6
DEVFS_RULE 56 20K 56
BPF 10 18K 10
DEVFS_RULE 56 20K 56
ufs_mount 4 17K 5
proc 3 17K 3
tty 16 16K 16
ithread 99 16K 99
bus-sc 34 15K 1693
KTRACE 100 13K 100
proc 3 17K 3
tty 16 16K 16
ithread 99 16K 99
bus-sc 34 15K 1693
GEOM 73 12K 521
kenv 95 12K 95
eventhandler 133 12K 133
ifaddr 30 12K 32
eventhandler 133 12K 133
routetbl 50 11K 176
CAM queue 5 11K 1528
rman 84 10K 425
bmsafemap 4 9K 40
rman 84 10K 425
UART 12 9K 12
devstat 4 9K 4
ksem 1 8K 1
devstat 4 9K 4
rpc 2 8K 2
shmfd 1 8K 1
shmfd 1 8K 1
pfs_vncache 1 8K 1
pfs_nodes 20 8K 20
audit_evclass 237 8K 295
taskqueue 63 7K 63
pfs_nodes 20 8K 20
audit_evclass 237 8K 295
taskqueue 63 7K 63
sglist 5 7K 5
CAM DEV 3 6K 510
cred 23 6K 234
CAM DEV 3 6K 510
ufs_dirhash 24 5K 24
UMA 270 5K 270
dirrem 17 5K 28
plimit 17 5K 322
vt 11 5K 11
ifnet 3 5K 3
memdesc 1 4K 1
MCA 32 4K 32
md_disk 1 4K 1
MCA 32 4K 32
evdev 4 4K 4
filedesc 1 4K 1
acpisem 28 4K 28
hhook 15 4K 17
ether_multi 40 4K 50
hhook 15 4K 17
diradd 25 4K 36
lltable 11 4K 11
pf_ifnet 5 3K 6
in6_multi 25 3K 25
kqueue 47 3K 789
pwddesc 47 3K 787
terminal 11 3K 11
session 20 3K 31
uidinfo 3 3K 8
local_apic 1 2K 1
io_apic 1 2K 1
fpukern_ctx 2 2K 2
ipsec-saq 2 2K 2
io_apic 1 2K 1
fpukern_ctx 2 2K 2
proc-args 39 2K 489
Unitno 27 2K 39
CAM XPT 22 2K 543
lockf 15 2K 22
selfd 24 2K 11006
ipsecpolicy 2 2K 2
acpidev 20 2K 20
msi 9 2K 9
clone 9 2K 9
acpidev 20 2K 20
msi 9 2K 9
clone 9 2K 9
softdep 1 1K 1
sahead 1 1K 1
secasvar 1 1K 1
vnodemarker 2 1K 8
sahead 1 1K 1
secasvar 1 1K 1
NFSD session 1 1K 1
CAM periph 4 1K 271
select 7 1K 29
CAM periph 4 1K 271
ipsec 3 1K 3
indirdep 3 1K 3
nhops 6 1K 6
toponodes 6 1K 6
isadev 6 1K 6
mount 16 1K 89
pci_link 10 1K 10
sctp_ifa 5 1K 6
isadev 6 1K 6
mount 16 1K 89
pci_link 10 1K 10
crypto 4 1K 4
ip6ndp 4 1K 5
encap_export_host 12 1K 12
newdirblk 4 1K 8
mkdir 4 1K 16
in_multi 2 1K 4
pfil 4 1K 4
cdev 2 1K 2
chacha20random 1 1K 1
osd 7 1K 18
inpcbpolicy 10 1K 135
sctp_ifn 2 1K 6
NFSD lckfile 1 1K 1
NFSD V4client 1 1K 1
DEVFSP 4 1K 9
NFSD V4client 1 1K 1
DEVFS 9 1K 10
mld 2 1K 2
igmp 2 1K 2
vnodes 1 1K 1
CAM SIM 2 1K 2
ktls 1 1K 1
feeder 7 1K 7
tcpfunc 3 1K 3
loginclass 3 1K 7
CAM SIM 2 1K 2
ktls 1 1K 1
feeder 7 1K 7
tcpfunc 3 1K 3
prison 6 1K 6
lkpikmalloc 5 1K 6
aesni_data 2 1K 2
nexusdev 8 1K 8
apmdev 1 1K 1
atkbddev 2 1K 2
CAM dev queue 2 1K 2
xform 2 1K 49
CAM I/O Scheduler 1 1K 1
CAM path 4 1K 1034
procdesc 1 1K 6
lkpikmalloc 5 1K 6
aesni_data 2 1K 2
nexusdev 8 1K 8
apmdev 1 1K 1
atkbddev 2 1K 2
CAM dev queue 2 1K 2
xform 2 1K 49
CAM I/O Scheduler 1 1K 1
CAM path 4 1K 1034
pmchooks 1 1K 1
soname 4 1K 3479
filecaps 4 1K 66
tun 3 1K 3
sctp_vrf 1 1K 1
vnet 1 1K 1
entropy 2 1K 35
vnet 1 1K 1
acpiintr 1 1K 1
pmc 1 1K 1
pmc 1 1K 1
cpus 2 1K 2
vnet_data_free 1 1K 1
Per-cpu 1 1K 1
freework 1 1K 26
vnet_data_free 1 1K 1
Per-cpu 1 1K 1
p1003.1b 1 1K 1
pf_table 0 0K 0
pf_rule 0 0K 0
pf_altq 0 0K 0
pf_osfp 0 0K 0
pf_temp 0 0K 0
mqdata 0 0K 0
pf_rule 0 0K 0
pf_altq 0 0K 0
pf_osfp 0 0K 0
pf_temp 0 0K 0
cdg data 0 0K 0
cubic data 0 0K 0
dctcp data 0 0K 0
sctp_mcore 0 0K 0
sctp_socko 0 0K 0
sctp_iter 0 0K 4
sctp_mvrf 0 0K 0
sctp_timw 0 0K 0
sctp_cpal 0 0K 0
sctp_cmsg 0 0K 0
sctp_stre 0 0K 0
sctp_athi 0 0K 0
sctp_athm 0 0K 0
sctp_cmsg 0 0K 0
sctp_stre 0 0K 0
sctp_athi 0 0K 0
sctp_atky 0 0K 0
sctp_atcl 0 0K 0
sctp_a_it 0 0K 4
sctp_aadr 0 0K 0
sctp_stro 0 0K 0
sctp_stri 0 0K 0
sctp_map 0 0K 0
htcp data 0 0K 0
vegas data 0 0K 0
tcp_do 0 0K 0
tcp_fsb 0 0K 0
chd data 0 0K 0
tcp_fsb 0 0K 0
sentinel 0 0K 0
jfsync 0 0K 0
jtrunc 0 0K 0
sbdep 0 0K 2
jfsync 0 0K 0
jtrunc 0 0K 0
jsegdep 0 0K 0
jseg 0 0K 0
jfreefrag 0 0K 0
jfreeblk 0 0K 0
jnewblk 0 0K 0
jmvref 0 0K 0
jremref 0 0K 0
jaddref 0 0K 0
freedep 0 0K 0
freefile 0 0K 9
jseg 0 0K 0
jfreefrag 0 0K 0
jfreeblk 0 0K 0
jnewblk 0 0K 0
jmvref 0 0K 0
jremref 0 0K 0
jaddref 0 0K 0
freedep 0 0K 0
freeblks 0 0K 25
freefrag 0 0K 1
allocindir 0 0K 0
ip6_msource 0 0K 0
ip6_moptions 0 0K 0
in6_mfilter 0 0K 0
frag6 0 0K 0
namei_tracker 0 0K 0
export_host 0 0K 0
cl_savebuf 0 0K 3
twe_commands 0 0K 0
twa_commands 0 0K 0
tcp_log_dev 0 0K 0
midi buffers 0 0K 0
mixer 0 0K 0
ac97 0 0K 0
hdacc 0 0K 0
hdac 0 0K 0
hdaa 0 0K 0
acpicmbat 0 0K 0
SIIS driver 0 0K 0
CAM CCB 0 0K 523
PUC 0 0K 0
ppbusdev 0 0K 0
agtiapi_MemAlloc malloc 0 0K 0
biobuf 0 0K 0
aios 0 0K 0
lio 0 0K 0
acl 0 0K 0
osti_cacheable 0 0K 0
mbuf_tag 0 0K 27
twa_commands 0 0K 0
tcp_log_dev 0 0K 0
midi buffers 0 0K 0
mixer 0 0K 0
ac97 0 0K 0
hdacc 0 0K 0
hdac 0 0K 0
hdaa 0 0K 0
acpicmbat 0 0K 0
SIIS driver 0 0K 0
CAM CCB 0 0K 523
PUC 0 0K 0
ppbusdev 0 0K 0
agtiapi_MemAlloc malloc 0 0K 0
biobuf 0 0K 0
aios 0 0K 0
lio 0 0K 0
acl 0 0K 0
osti_cacheable 0 0K 0
tempbuff 0 0K 0
tempbuff 0 0K 0
ag_tgt_map_t malloc 0 0K 0
ag_slr_map_t malloc 0 0K 0
lDevFlags * malloc 0 0K 0
tiDeviceHandle_t * malloc 0 0K 0
ag_portal_data_t malloc 0 0K 0
ag_device_t malloc 0 0K 0
STLock malloc 0 0K 0
CCB List 0 0K 0
sr_iov 0 0K 0
OCS 0 0K 0
OCS 0 0K 0
nvme 0 0K 0
nvd 0 0K 0
netmap 0 0K 0
mwldev 0 0K 0
MVS driver 0 0K 0
CAM ccb queue 0 0K 0
mrsasbuf 0 0K 0
mpt_user 0 0K 0
mps_user 0 0K 0
accf 0 0K 0
pts 0 0K 0
iov 0 0K 13646
tempbuff 0 0K 0
ag_tgt_map_t malloc 0 0K 0
ag_slr_map_t malloc 0 0K 0
lDevFlags * malloc 0 0K 0
tiDeviceHandle_t * malloc 0 0K 0
ag_portal_data_t malloc 0 0K 0
ag_device_t malloc 0 0K 0
STLock malloc 0 0K 0
CCB List 0 0K 0
sr_iov 0 0K 0
OCS 0 0K 0
OCS 0 0K 0
nvme 0 0K 0
nvd 0 0K 0
netmap 0 0K 0
mwldev 0 0K 0
MVS driver 0 0K 0
CAM ccb queue 0 0K 0
mrsasbuf 0 0K 0
mpt_user 0 0K 0
mps_user 0 0K 0
accf 0 0K 0
pts 0 0K 0
ioctlops 0 0K 86
eventfd 0 0K 0
Witness 0 0K 0
stack 0 0K 0
MPSSAS 0 0K 0
mps 0 0K 0
mpr_user 0 0K 0
MPRSAS 0 0K 0
mpr 0 0K 0
mfibuf 0 0K 0
sbuf 0 0K 300
stack 0 0K 0
MPSSAS 0 0K 0
mps 0 0K 0
mpr_user 0 0K 0
MPRSAS 0 0K 0
mpr 0 0K 0
mfibuf 0 0K 0
md_sectors 0 0K 0
firmware 0 0K 0
compressor 0 0K 0
SWAP 0 0K 0
malodev 0 0K 0
LED 0 0K 0
sysctltmp 0 0K 666
compressor 0 0K 0
SWAP 0 0K 0
malodev 0 0K 0
LED 0 0K 0
sysctl 0 0K 3
ekcd 0 0K 0
dumper 0 0K 0
sendfile 0 0K 0
rctl 0 0K 0
ix_sriov 0 0K 0
aacraidcam 0 0K 0
aacraid_buf 0 0K 0
ix 0 0K 0
ipsbuf 0 0K 0
cache 0 0K 0
iirbuf 0 0K 0
kcovinfo 0 0K 0
ekcd 0 0K 0
dumper 0 0K 0
sendfile 0 0K 0
rctl 0 0K 0
ix_sriov 0 0K 0
aacraidcam 0 0K 0
aacraid_buf 0 0K 0
ix 0 0K 0
ipsbuf 0 0K 0
cache 0 0K 0
iirbuf 0 0K 0
geom_flashmap 0 0K 0
tmpfs dir 0 0K 0
tmpfs name 0 0K 0
tmpfs mount 0 0K 0
NFS FHA 0 0K 0
newnfsmnt 0 0K 0
newnfsclient_req 0 0K 0
NFSCL layrecall 0 0K 0
NFSCL session 0 0K 0
NFSCL sockreq 0 0K 0
NFSCL devinfo 0 0K 0
NFSCL flayout 0 0K 0
NFSCL layout 0 0K 0
NFSD rollback 0 0K 0
NFSCL diroff 0 0K 0
db> show uma
Zone Size Used Free Requests Sleeps Bucket Total Mem XFree
mbuf_jumbo_page 4096 8320 991 14727 0 254 38137856 0
tmpfs dir 0 0K 0
tmpfs name 0 0K 0
tmpfs mount 0 0K 0
NFS FHA 0 0K 0
newnfsmnt 0 0K 0
newnfsclient_req 0 0K 0
NFSCL layrecall 0 0K 0
NFSCL session 0 0K 0
NFSCL sockreq 0 0K 0
NFSCL devinfo 0 0K 0
NFSCL flayout 0 0K 0
NFSCL layout 0 0K 0
NFSD rollback 0 0K 0
NFSCL diroff 0 0K 0
db> show uma
Zone Size Used Free Requests Sleeps Bucket Total Mem XFree
pbuf 2624 0 989 0 0 2 2595136 0
mbuf 256 8579 991 17924 0 254 2449920 0
BUF TRIE 144 184 11576 503 0 62 1693440 0
malloc-384 384 4152 8 4152 0 30 1597440 0
malloc-128 128 11273 42 11303 0 126 1448320 0
malloc-4096 4096 327 3 588 0 2 1351680 0
UMA Slabs 0 112 10120 29 10120 0 126 1136688 0
vmem btag 56 15412 43 15412 0 254 865480 0
FFS inode 1160 499 12 508 0 8 592760 0
RADIX NODE 144 3046 141 21152 0 62 458928 0
lkpimm 168 1 2327 1 0 62 391104 0
lkpicurr 168 2 2326 2 0 62 391104 0
lkpicurr 168 2 2326 2 0 62 391104 0
malloc-65536 65536 5 0 5 0 1 327680 0
malloc-64 64 3889 395 5163 0 254 274176 0
malloc-4096 4096 59 2 810 0 2 249856 0
256 Bucket 2048 107 15 10816 0 8 249856 0
VM OBJECT 264 892 53 12698 0 30 249480 0
VNODE 448 530 19 541 0 30 245952 0
THREAD 1808 126 6 126 0 8 238656 0
malloc-16 16 14029 221 14089 0 254 228000 0
DEVCTL 1024 0 220 128 0 0 225280 0
malloc-65536 65536 1 2 45 0 1 196608 0
malloc-65536 65536 3 0 3 0 1 196608 0
malloc-256 256 742 8 803 0 62 192000 0
malloc-32 32 5560 362 6128 0 254 189504 0
UMA Zones 768 242 2 242 0 16 187392 0
malloc-128 128 1329 35 26369 0 126 174592 0
FFS2 dinode 256 499 26 508 0 62 134400 0
malloc-65536 65536 0 2 136 0 1 131072 0
malloc-65536 65536 0 2 8 0 1 131072 0
malloc-1024 1024 114 6 283 0 16 122880 0
ksiginfo 112 43 1001 58 0 126 116928 0
MAP ENTRY 96 836 382 38042 0 126 116928 0
S VFS Cache 104 966 48 1005 0 126 105456 0
UMA Kegs 384 227 6 227 0 30 89472 0
malloc-128 128 628 54 3944 0 126 87296 0
malloc-8192 8192 7 3 110 0 1 81920 0
g_bio 408 0 200 4500 0 30 81600 0
PROC 1336 46 14 786 0 8 80160 0
malloc-128 128 596 24 1136 0 126 79360 0
malloc-2048 2048 4 32 535 0 8 73728 0
VMSPACE 2544 23 4 764 0 4 68688 0
mbuf_cluster 2048 30 2 30 0 254 65536 0
malloc-32768 32768 0 2 130 0 1 65536 0
malloc-16384 16384 4 0 4 0 1 65536 0
128 Bucket 1024 39 24 613 0 16 64512 0
malloc-16384 16384 4 0 4 0 1 65536 0
malloc-64 64 797 148 2509 0 254 60480 0
filedesc0 1072 47 9 787 0 8 60032 0
malloc-8192 8192 7 0 7 0 1 57344 0
malloc-2048 2048 7 21 771 0 8 57344 0
malloc-256 256 163 32 517 0 62 49920 0
malloc-16384 16384 1 2 161 0 1 49152 0
malloc-4096 4096 11 1 551 0 2 49152 0
malloc-256 256 176 4 1237 0 62 46080 0
32 Bucket 256 50 130 4146 0 62 46080 0
malloc-64 64 533 160 1674 0 254 44352 0
malloc-256 256 138 27 451 0 62 42240 0
clpbuf 2624 0 16 22 0 16 41984 0
malloc-8192 8192 5 0 5 0 1 40960 0
malloc-1024 1024 4 36 532 0 16 40960 0
DIRHASH 1024 34 2 34 0 16 36864 0
NAMEI 1024 0 36 12233 0 16 36864 0
pcpu-8 8 4233 375 4261 0 254 36864 0
malloc-384 384 83 7 83 0 30 34560 0
da_ccb 544 0 63 1241 0 16 34272 0
malloc-32768 32768 1 0 1 0 1 32768 0
malloc-32768 32768 1 0 1 0 1 32768 0
malloc-32768 32768 1 0 1 0 1 32768 0
malloc-32768 32768 1 0 1 0 1 32768 0
malloc-32768 32768 1 0 1 0 1 32768 0
malloc-16384 16384 1 1 16 0 1 32768 0
malloc-8192 8192 0 4 36 0 1 32768 0
pcpu-64 64 487 25 487 0 254 32768 0
64 Bucket 512 56 8 1260 0 30 32768 0
malloc-128 128 21 227 280 0 126 31744 0
malloc-1024 1024 22 6 890 0 16 28672 0
malloc-384 384 66 4 76 0 30 26880 0
malloc-384 384 48 22 88 0 30 26880 0
malloc-4096 4096 6 0 6 0 2 24576 0
malloc-1024 1024 18 6 22 0 16 24576 0
ttyinq 160 135 15 300 0 62 24000 0
ttyoutq 256 72 18 160 0 62 23040 0
socket 944 19 5 1332 0 254 22656 0
malloc-2048 2048 10 0 11 0 8 20480 0
malloc-1024 1024 4 16 48 0 16 20480 0
TURNSTILE 136 133 14 133 0 62 19992 0
Mountpoints 2752 2 5 2 0 4 19264 0
malloc-256 256 40 35 489 0 62 19200 0
SLEEPQUEUE 88 133 59 133 0 126 16896 0
malloc-16384 16384 1 0 1 0 1 16384 0
malloc-16384 16384 1 0 1 0 1 16384 0
malloc-8192 8192 2 0 2 0 1 16384 0
malloc-8192 8192 2 0 2 0 1 16384 0
malloc-8192 8192 2 0 2 0 1 16384 0
malloc-64 64 144 108 11143 0 254 16128 0
malloc-16384 16384 1 0 1 0 1 16384 0
malloc-8192 8192 2 0 2 0 1 16384 0
malloc-8192 8192 2 0 2 0 1 16384 0
malloc-8192 8192 2 0 2 0 1 16384 0
16 Bucket 144 40 72 308 0 62 16128 0
malloc-128 128 90 34 541 0 126 15872 0
malloc-256 256 11 49 61 0 62 15360 0
tcpcb 1080 3 11 7 0 254 15120 0
pipe 744 7 13 284 0 16 14880 0
malloc-4096 4096 1 2 197 0 2 12288 0
malloc-4096 4096 3 0 4 0 2 12288 0
malloc-2048 2048 2 4 4 0 8 12288 0
malloc-512 512 0 24 118 0 30 12288 0
malloc-512 512 11 13 12 0 30 12288 0
malloc-32 32 112 266 3925 0 254 12096 0
Files 80 73 77 6580 0 126 12000 0
malloc-16 16 495 255 1838 0 254 12000 0
8 Bucket 80 38 112 646 0 126 12000 0
udp_inpcb 496 6 18 124 0 254 11904 0
kenv 258 15 30 1026 0 30 11610 0
malloc-256 256 11 34 51 0 62 11520 0
malloc-4096 4096 0 2 5 0 2 8192 0
malloc-2048 2048 4 0 4 0 8 8192 0
malloc-2048 2048 2 2 11 0 8 8192 0
malloc-1024 1024 2 6 6 0 16 8192 0
malloc-1024 1024 3 5 3 0 16 8192 0
malloc-512 512 5 11 5 0 30 8192 0
malloc-512 512 0 16 9 0 30 8192 0
malloc-512 512 2 14 61 0 30 8192 0
malloc-512 512 2 14 9 0 30 8192 0
rtentry 176 13 33 17 0 62 8096 0
PGRP 88 20 72 31 0 126 8096 0
ertt_txseginfo 40 1 201 271 0 254 8080 0
rl_entry 40 35 167 35 0 254 8080 0
udpcb 32 6 246 124 0 254 8064 0
ertt 72 3 109 7 0 126 8064 0
PWD 32 10 242 100 0 254 8064 0
malloc-64 64 25 101 13383 0 254 8064 0
malloc-64 64 30 96 46 0 254 8064 0
malloc-64 64 21 105 278 0 254 8064 0
malloc-32 32 21 231 74 0 254 8064 0
malloc-32 32 129 123 840 0 254 8064 0
malloc-32 32 16 236 154 0 254 8064 0
malloc-32 32 53 199 192 0 254 8064 0
malloc-32 32 19 233 23 0 254 8064 0
4 Bucket 48 5 163 46 0 254 8064 0
2 Bucket 32 51 201 503 0 254 8064 0
vtnet_tx_hdr 24 0 334 2297 0 254 8016 0
KNOTE 160 0 50 7 0 62 8000 0
malloc-16 16 15 485 92 0 254 8000 0
malloc-16 16 18 482 24 0 254 8000 0
malloc-16 16 16 484 67 0 254 8000 0
malloc-16 16 42 458 25600 0 254 8000 0
malloc-16 16 14 486 14 0 254 8000 0
tcp_inpcb 496 3 13 7 0 254 7936 0
malloc-128 128 35 27 94 0 126 7936 0
malloc-128 128 4 58 19 0 126 7936 0
routing nhops 256 10 20 17 0 62 7680 0
unpcb 256 8 22 1180 0 254 7680 0
mbuf_packet 256 1 29 101 0 254 7680 0
malloc-384 384 9 11 12 0 30 7680 0
malloc-384 384 1 19 338 0 30 7680 0
malloc-256 256 8 22 264 0 62 7680 0
FPU_save_area 832 1 8 1 0 16 7488 0
cpuset 104 8 54 8 0 126 6448 0
epoch_record pcpu 256 4 12 4 0 62 4096 0
malloc-4096 4096 1 0 1 0 2 4096 0
malloc-2048 2048 0 2 12 0 8 4096 0
malloc-2048 2048 2 0 2 0 8 4096 0
malloc-1024 1024 0 4 1 0 16 4096 0
malloc-512 512 2 6 2 0 30 4096 0
malloc-512 512 0 8 1 0 30 4096 0
malloc-1024 1024 0 4 1 0 16 4096 0
malloc-512 512 2 6 2 0 30 4096 0
pcpu-16 16 7 249 7 0 254 4096 0
sctp_laddr 48 0 84 4 0 254 4032 0
hostcache 64 1 62 1 0 254 4032 0
syncache 168 0 24 5 0 254 4032 0
malloc-64 64 2 61 2 0 254 4032 0
malloc-32 32 18 108 112 0 254 4032 0
malloc-16 16 0 250 6 0 254 4000 0
ripcb 496 1 7 4 0 254 3968 0
UMA Slabs 1 176 8 14 8 0 62 3872 0
malloc-384 384 0 10 1 0 30 3840 0
malloc-384 384 1 9 1 0 30 3840 0
mqnode 416 3 6 3 0 30 3744 0
KMAP ENTRY 96 12 27 14 0 0 3744 0
vmem 1856 1 1 1 0 8 3712 0
SMR CPU 32 3 60 3 0 254 2016 0
SMR SHARED 24 3 60 3 0 254 1512 0
KMAP ENTRY 96 12 27 14 0 0 3744 0
vmem 1856 1 1 1 0 8 3712 0
SMR CPU 32 3 60 3 0 254 2016 0
SMR SHARED 24 3 60 3 0 254 1512 0
FFS1 dinode 128 0 0 0 0 126 0 0
ada_ccb 272 0 0 0 0 30 0 0
swblk 136 0 0 0 0 62 0 0
swpctrie 144 0 0 0 0 62 0 0
ada_ccb 272 0 0 0 0 30 0 0
swblk 136 0 0 0 0 62 0 0
swpctrie 144 0 0 0 0 62 0 0
cdg_qdiffsample 16 0 0 0 0 254 0 0
sctp_asconf_ack 48 0 0 0 0 254 0 0
sctp_asconf 40 0 0 0 0 254 0 0
sctp_stream_msg_out 112 0 0 0 0 254 0 0
sctp_asconf 40 0 0 0 0 254 0 0
sctp_readq 152 0 0 0 0 254 0 0
sctp_chunk 152 0 0 0 0 254 0 0
sctp_raddr 736 0 0 0 0 254 0 0
sctp_asoc 2288 0 0 0 0 254 0 0
sctp_ep 1280 0 0 0 0 254 0 0
pf state scrubs 40 0 0 0 0 254 0 0
pf frag entries 40 0 0 0 0 254 0 0
pf frags 248 0 0 0 0 62 0 0
pf table entries 160 0 0 0 0 62 0 0
pf table entry counters 64 0 0 0 0 254 0 0
pf source nodes 136 0 0 0 0 254 0 0
pf state keys 88 0 0 0 0 126 0 0
pf states 312 0 0 0 0 254 0 0
pf tags 104 0 0 0 0 126 0 0
pf mtags 48 0 0 0 0 254 0 0
tcp_bbr_pcb 832 0 0 0 0 16 0 0
tcp_bbr_map 128 0 0 0 0 126 0 0
tcp_rack_pcb 832 0 0 0 0 16 0 0
tcp_rack_map 112 0 0 0 0 126 0 0
udplite_inpcb 496 0 0 0 0 254 0 0
pf frag entries 40 0 0 0 0 254 0 0
pf frags 248 0 0 0 0 62 0 0
pf table entries 160 0 0 0 0 62 0 0
pf table entry counters 64 0 0 0 0 254 0 0
pf source nodes 136 0 0 0 0 254 0 0
pf state keys 88 0 0 0 0 126 0 0
pf states 312 0 0 0 0 254 0 0
pf tags 104 0 0 0 0 126 0 0
pf mtags 48 0 0 0 0 254 0 0
tcp_bbr_pcb 832 0 0 0 0 16 0 0
tcp_bbr_map 128 0 0 0 0 126 0 0
tcp_rack_pcb 832 0 0 0 0 16 0 0
tcp_rack_map 112 0 0 0 0 126 0 0
tcp_log_node 120 0 0 0 0 126 0 0
tcp_log_bucket 176 0 0 0 0 62 0 0
tcp_log 416 0 0 0 0 254 0 0
tcpreass 48 0 0 0 0 254 0 0
tfo_ccache_entries 80 0 0 0 0 126 0 0
tfo 4 0 0 0 0 254 0 0
sackhole 32 0 0 0 0 254 0 0
tcptw 88 0 0 0 0 254 0 0
ipq 56 0 0 0 0 254 0 0
tcp_log_bucket 176 0 0 0 0 62 0 0
tcp_log 416 0 0 0 0 254 0 0
tcpreass 48 0 0 0 0 254 0 0
tfo_ccache_entries 80 0 0 0 0 126 0 0
tfo 4 0 0 0 0 254 0 0
sackhole 32 0 0 0 0 254 0 0
tcptw 88 0 0 0 0 254 0 0
IPsec SA lft_c 16 0 0 0 0 254 0 0
itimer 352 0 0 0 0 30 0 0
AIOLIO 272 0 0 0 0 30 0 0
AIOCB 552 0 0 0 0 16 0 0
AIOP 32 0 0 0 0 254 0 0
AIO 208 0 0 0 0 62 0 0
itimer 352 0 0 0 0 30 0 0
AIOLIO 272 0 0 0 0 30 0 0
AIOCB 552 0 0 0 0 16 0 0
AIOP 32 0 0 0 0 254 0 0
AIO 208 0 0 0 0 62 0 0
NCLNODE 592 0 0 0 0 16 0 0
mqnotifier 216 0 0 0 0 62 0 0
mvdata 64 0 0 0 0 254 0 0
mqueue 248 0 0 0 0 62 0 0
TMPFS node 224 0 0 0 0 62 0 0
LTS VFS Cache 360 0 0 0 0 30 0 0
L VFS Cache 320 0 0 0 0 30 0 0
mqnotifier 216 0 0 0 0 62 0 0
mvdata 64 0 0 0 0 254 0 0
mqueue 248 0 0 0 0 62 0 0
TMPFS node 224 0 0 0 0 62 0 0
LTS VFS Cache 360 0 0 0 0 30 0 0
STS VFS Cache 144 0 0 0 0 62 0 0
cryptop 280 0 0 0 0 30 0 0
linux_dma_object 24 0 0 0 0 254 0 0
linux_dma_pctrie 144 0 0 0 0 62 0 0
IOMMU_MAP_ENTRY 120 0 0 0 0 126 0 0
ktls_session 192 0 0 0 0 62 0 0
mbuf_jumbo_16k 16384 0 0 0 0 254 0 0
mbuf_jumbo_9k 9216 0 0 0 0 254 0 0
audit_record 1280 0 0 0 0 8 0 0
domainset 40 0 0 0 0 254 0 0
cryptop 280 0 0 0 0 30 0 0
linux_dma_object 24 0 0 0 0 254 0 0
linux_dma_pctrie 144 0 0 0 0 62 0 0
IOMMU_MAP_ENTRY 120 0 0 0 0 126 0 0
ktls_session 192 0 0 0 0 62 0 0
mbuf_jumbo_16k 16384 0 0 0 0 254 0 0
mbuf_jumbo_9k 9216 0 0 0 0 254 0 0
audit_record 1280 0 0 0 0 8 0 0
MAC labels 40 0 0 0 0 254 0 0
vnpbuf 2624 0 0 0 0 64 0 0
mdpbuf 2624 0 0 0 0 3 0 0
nfspbuf 2624 0 0 0 0 16 0 0
vnpbuf 2624 0 0 0 0 64 0 0
mdpbuf 2624 0 0 0 0 3 0 0
swwbuf 2624 0 0 0 0 8 0 0
swrbuf 2624 0 0 0 0 16 0 0
umtx_shm 88 0 0 0 0 126 0 0
umtx pi 96 0 0 0 0 126 0 0
rangeset pctrie nodes 144 0 0 0 0 62 0 0
malloc-65536 65536 0 0 0 0 1 0 0
malloc-65536 65536 0 0 0 0 1 0 0
malloc-65536 65536 0 0 0 0 1 0 0
malloc-32768 32768 0 0 0 0 1 0 0
malloc-32768 32768 0 0 0 0 1 0 0
malloc-32768 32768 0 0 0 0 1 0 0
malloc-32768 32768 0 0 0 0 1 0 0
malloc-16384 16384 0 0 0 0 1 0 0
malloc-16384 16384 0 0 0 0 1 0 0
malloc-16384 16384 0 0 0 0 1 0 0
malloc-8192 8192 0 0 0 0 1 0 0
pcpu-32 32 0 0 0 0 254 0 0
pcpu-4 4 0 0 0 0 254 0 0
fakepg 104 0 0 0 0 126 0 0
UMA Hash 256 0 0 0 0 62 0 0
Mark Johnston
Sep 7, 2021, 5:41:34 PM9/7/21
to syzbot, syzkaller-f...@googlegroups.com
Reply all
Reply to author
Forward
0 new messages