panic: pfi_dynaddr_setup: non-NULL dyn (2)
1 view
Skip to first unread message
syzbot
Jan 21, 2021, 5:01:28 PM1/21/21
to syzkaller-f...@googlegroups.com
Hello,
syzbot found the following issue on:
HEAD commit: ff751ee0 Remove FirstBurstLength limit for software iSCSI.
git tree: https://github.com/freebsd/freebsd-src.git main
console output: https://syzkaller.appspot.com/x/log.txt?x=13886bd0d00000
dashboard link: https://syzkaller.appspot.com/bug?extid=e9632d7ad17398f0bd8f
Unfortunately, I don't have any reproducer for this issue yet.
IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+e9632d...@syzkaller.appspotmail.com
panic: pfi_dynaddr_setup: dyn is 0x20000100
cpuid = 0
time = 469
KDB: stack backtrace:
db_trace_self_wrapper() at db_trace_self_wrapper+0x47/frame 0xfffffe0051f37100
vpanic() at vpanic+0x1c7/frame 0xfffffe0051f37160
panic() at panic+0x43/frame 0xfffffe0051f371c0
pfi_dynaddr_setup() at pfi_dynaddr_setup+0x580/frame 0xfffffe0051f37250
pfioctl() at pfioctl+0x8178/frame 0xfffffe0051f37780
devfs_ioctl() at devfs_ioctl+0x14e/frame 0xfffffe0051f377e0
VOP_IOCTL_APV() at VOP_IOCTL_APV+0x78/frame 0xfffffe0051f37810
vn_ioctl() at vn_ioctl+0x278/frame 0xfffffe0051f37930
devfs_ioctl_f() at devfs_ioctl_f+0x47/frame 0xfffffe0051f37970
kern_ioctl() at kern_ioctl+0x3cd/frame 0xfffffe0051f379e0
sys_ioctl() at sys_ioctl+0x265/frame 0xfffffe0051f37ab0
amd64_syscall() at amd64_syscall+0x247/frame 0xfffffe0051f37bf0
fast_syscall_common() at fast_syscall_common+0xf8/frame 0xfffffe0051f37bf0
--- syscall (198, FreeBSD ELF64, nosys), rip = 0x284cca, rsp = 0x7fffdfffdf08, rbp = 0x7fffdfffdf70 ---
KDB: enter: panic
[ thread pid 5304 tid 110701 ]
Stopped at kdb_enter+0x67: movq $0,0x14526ae(%rip)
db>
db> set $lines = 0
db> set $maxwidth = 0
db> show registers
cs 0x20
ds 0x3b
es 0x3b
fs 0x13
gs 0x1b
ss 0x28
rax 0x12
rcx 0xfffffe0095400000
rdx 0x3ffff
rbx 0
rsp 0xfffffe0051f370e0
rbp 0xfffffe0051f37100
rsi 0x40001
rdi 0xffffffff81116116 vprintf+0x176
r8 0
r9 0xffffffff
r10 0
r11 0xfffffe0094e1a310
r12 0xffffffff82067650 ddb_dbbe
r13 0
r14 0xffffffff819ba277
r15 0xffffffff819ba277
rip 0xffffffff8110d0d7 kdb_enter+0x67
rflags 0x82
kdb_enter+0x67: movq $0,0x14526ae(%rip)
db> show proc
Process 5304 (syz-executor.0) at 0xfffff80018e92a50:
state: NORMAL
uid: 0 gids: 0, 0, 5
parent: pid 783 at 0xfffff800183fc000
ABI: FreeBSD ELF64
flag: 0x10000080 flag2: 0
arguments: /root/syz-executor.0
reaper: 0xfffff80004489528 reapsubtree: 1
sigparent: 20
vmspace: 0xfffffe0094e17000
(map 0xfffffe0094e17000)
(map.pmap 0xfffffe0094e170c0)
(pmap 0xfffffe0094e17120)
threads: 2
100183 RunQ syz-executor.0
110701 Run CPU 0 syz-executor.0
db> ps
pid ppid pgrp uid state wmesg wchan cmd
5306 786 786 0 R syz-executor.2
5305 859 859 0 R (threaded) syz-executor.1
109369 Run CPU 1 syz-executor.1
110702 S sbwait 0xfffff8003934f574 syz-executor.1
5304 783 783 0 R (threaded) syz-executor.0
100183 RunQ syz-executor.0
110701 Run CPU 0 syz-executor.0
5300 856 856 0 S (threaded) syz-executor.3
108682 S nanslp 0xffffffff82532ee1 syz-executor.3
110692 S sbwait 0xfffff800391021c4 syz-executor.3
110695 S sbwait 0xfffff80039255574 syz-executor.3
110696 S uwait 0xfffff80018e00a80 syz-executor.3
110697 S pipdwt 0xfffff80039375d00 syz-executor.3
110698 S uwait 0xfffff80018eafd80 syz-executor.3
989 982 989 0 Ss select 0xfffff8001833fec0 dhclient
986 1 986 0 Ss select 0xfffff80004f53440 dhclient
982 975 436 65 S select 0xfffff80004f53a40 dhclient
975 436 436 0 S wait 0xfffff800185b7000 sh
859 780 859 0 Ss nanslp 0xffffffff82532ee1 syz-executor.1
856 780 856 0 Ss nanslp 0xffffffff82532ee1 syz-executor.3
786 780 786 0 Ss nanslp 0xffffffff82532ee0 syz-executor.2
783 780 783 0 Ss nanslp 0xffffffff82532ee0 syz-executor.0
780 778 778 0 S (threaded) syz-fuzzer
100105 S uwait 0xfffff800183fed80 syz-fuzzer
100106 S uwait 0xfffff800183fee80 syz-fuzzer
100107 S kqread 0xfffff80018428500 syz-fuzzer
100108 S uwait 0xfffff800183fe780 syz-fuzzer
100109 S uwait 0xfffff80004c04500 syz-fuzzer
100110 S uwait 0xfffff80004c04400 syz-fuzzer
100111 S uwait 0xfffff8001856ef00 syz-fuzzer
100112 S uwait 0xfffff800183fe080 syz-fuzzer
100113 S uwait 0xfffff800183fe180 syz-fuzzer
778 776 778 0 Ss pause 0xfffff80004ec80b0 csh
776 694 776 0 Ss select 0xfffff80018580e40 sshd
760 1 760 0 Ss+ ttyin 0xfffff800048d8cb0 getty
759 1 759 0 Ss+ ttyin 0xfffff80004c180b0 getty
758 1 758 0 Ss+ ttyin 0xfffff80004c184b0 getty
757 1 757 0 Ss+ ttyin 0xfffff80004c188b0 getty
756 1 756 0 Ss+ ttyin 0xfffff80004c18cb0 getty
755 1 755 0 Ss+ ttyin 0xfffff80004ba60b0 getty
754 1 754 0 Ss+ ttyin 0xfffff80004ba64b0 getty
753 1 753 0 Ss+ ttyin 0xfffff80004ba68b0 getty
752 1 752 0 Ss+ ttyin 0xfffff80004ba6cb0 getty
698 1 698 0 Ss nanslp 0xffffffff82532ee0 cron
694 1 694 0 Ss select 0xfffff80004f53140 sshd
507 1 507 0 Ss select 0xfffff80004f531c0 syslogd
436 1 436 0 Ss wait 0xfffff800183d2528 devd
435 1 435 65 Ss select 0xfffff80004f532c0 dhclient
350 1 350 0 Ss select 0xfffff80004f53340 dhclient
347 1 347 0 Ss select 0xfffff80004f53bc0 dhclient
23 0 0 0 DL vlruwt 0xfffff80004dbe528 [vnlru]
22 0 0 0 DL syncer 0xffffffff826223b8 [syncer]
21 0 0 0 DL (threaded) [bufdaemon]
100070 D qsleep 0xffffffff826214a0 [bufdaemon]
100075 D - 0xffffffff8200ac80 [bufspacedaemon-0]
100088 D sdflush 0xfffff800048d14e8 [/ worker]
20 0 0 0 DL psleep 0xffffffff82648988 [vmdaemon]
19 0 0 0 DL (threaded) [pagedaemon]
100068 D psleep 0xffffffff8263cdf8 [dom0]
100076 D launds 0xffffffff8263ce04 [laundry: dom0]
100077 D umarcl 0xffffffff81525ff0 [uma]
18 0 0 0 DL - 0xffffffff82367278 [rand_harvestq]
17 0 0 0 DL waiting 0xffffffff82c19818 [sctp_iterator]
16 0 0 0 DL pftm 0xffffffff82e72430 [pf purge]
15 0 0 0 DL - 0xffffffff8261ea5c [soaiod4]
9 0 0 0 DL - 0xffffffff8261ea5c [soaiod3]
8 0 0 0 DL - 0xffffffff8261ea5c [soaiod2]
7 0 0 0 DL - 0xffffffff8261ea5c [soaiod1]
6 0 0 0 DL (threaded) [cam]
100034 D - 0xffffffff8223efc0 [doneq0]
100067 D - 0xffffffff8223ee90 [scanner]
14 0 0 0 DL seqstat 0xfffff80004627488 [sequencer 00]
5 0 0 0 DL crypto_ 0xfffff8000445bb90 [crypto returns 1]
4 0 0 0 DL crypto_ 0xfffff8000445bb30 [crypto returns 0]
3 0 0 0 DL crypto_ 0xffffffff8263a310 [crypto]
13 0 0 0 DL (threaded) [geom]
100025 D - 0xffffffff82512720 [g_event]
100026 D - 0xffffffff82512728 [g_up]
100027 D - 0xffffffff82512730 [g_down]
2 0 0 0 DL (threaded) [KTLS]
100018 D - 0xfffff80004466900 [thr_0]
100019 D - 0xfffff80004466980 [thr_1]
12 0 0 0 WL (threaded) [intr]
100010 I [swi6: Giant taskq]
100013 I [swi5: fast taskq]
100016 I [swi6: task queue]
100020 I [swi4: clock (0)]
100021 I [swi4: clock (1)]
100022 I [swi1: netisr 0]
100023 I [swi3: vm]
100035 I [irq24: virtio_pci0]
100036 I [irq25: virtio_pci0]
100037 I [irq26: virtio_pci0]
100038 I [irq27: virtio_pci0]
100039 I [irq28: virtio_pci1]
100040 I [irq29: virtio_pci1]
100041 I [irq30: virtio_pci1]
100042 I [irq31: virtio_pci1]
100043 I [irq32: virtio_pci1]
100048 I [irq10: virtio_pci2]
100050 I [irq1: atkbd0]
100051 I [irq12: psm0]
100052 I [swi0: uart uart++]
100060 I [swi1: pf send]
100073 I [swi1: hpts]
100074 I [swi1: hpts]
11 0 0 0 RL (threaded) [idle]
100003 CanRun [idle: cpu0]
100004 CanRun [idle: cpu1]
1 0 1 0 SLs wait 0xfffff80004489528 [init]
10 0 0 0 DL audit_w 0xffffffff8263a830 [audit]
0 0 0 0 DLs (threaded) [kernel]
100000 D swapin 0xffffffff82512cb0 [swapper]
100005 D - 0xfffff8000446be00 [if_config_tqg_0]
100006 D - 0xfffff8000446bd00 [softirq_0]
100007 D - 0xfffff8000446bc00 [softirq_1]
100008 D - 0xfffff8000446bb00 [if_io_tqg_0]
100009 D - 0xfffff8000446ba00 [if_io_tqg_1]
100011 D - 0xfffff8000446b800 [thread taskq]
100012 D - 0xfffff8000446b700 [aiod_kick taskq]
100014 D - 0xfffff8000446b500 [kqueue_ctx taskq]
100015 D - 0xfffff8000446b400 [in6m_free taskq]
100017 D - 0xfffff8000446b200 [inm_free taskq]
100024 D - 0xfffff8000446b100 [firmware taskq]
100028 D - 0xfffff8000446b000 [crypto_0]
100029 D - 0xfffff8000446b000 [crypto_1]
100044 D - 0xfffff80004652d00 [vtnet0 rxq 0]
100045 D - 0xfffff80004652c00 [vtnet0 txq 0]
100046 D - 0xfffff80004652b00 [vtnet0 rxq 1]
100047 D - 0xfffff80004652a00 [vtnet0 txq 1]
100049 D vtbslp 0xfffff8000465cb00 [virtio_balloon]
100053 D - 0xfffff80004652900 [mca taskq]
100058 D - 0xffffffff81d620e1 [deadlkres]
100063 D - 0xfffff80004baae00 [acpi_task_0]
100064 D - 0xfffff80004baae00 [acpi_task_1]
100065 D - 0xfffff80004baae00 [acpi_task_2]
100066 D - 0xfffff80004652e00 [CAM taskq]
db> show all locks
Process 5304 (syz-executor.0) thread 0xfffffe0094e19e00 (110701)
exclusive rm pf rulesets (pf rulesets) r = 0 (0xffffffff82ec74a0) locked @ /syzkaller/managers/main/kernel/sys/netpfil/pf/pf_ioctl.c:2126
db> show malloc
Type InUse MemUse Requests
pf_hash 5 11524K 5
devbuf 4216 4340K 4244
tcp_hpts 5 3201K 5
vtbuf 24 1968K 46
sysctloid 30605 1795K 30671
kobj 329 1316K 490
newblk 5 1025K 28282
vfscache 3 1025K 3
pcb 27 539K 2299
inodedep 8 515K 8196
ufs_quota 1 512K 1
vfs_hash 1 512K 1
callout 2 512K 2
intr 4 472K 4
subproc 128 248K 5382
acpica 1674 184K 58097
vnet_data 1 168K 1
tidhash 3 141K 3
filedesc 18 137K 8835
pagedep 9 130K 10469
tfo_ccache 1 128K 1
sem 4 106K 4
DEVFS1 105 105K 122
linker 278 100K 313
bus 983 80K 3361
mtx_pool 2 72K 2
syncache 1 68K 1
acpitask 1 64K 1
ddb_capture 1 64K 1
module 503 63K 503
umtx 342 43K 342
kdtrace 198 40K 16010
BPF 22 36K 22
temp 35 33K 2406
hostcache 1 32K 1
shm 1 32K 11
DEVFS3 124 31K 134
msg 4 30K 4
vmem 3 26K 5
gtaskqueue 18 26K 18
kbdmux 6 22K 6
DEVFS_RULE 56 20K 56
ifaddr 69 20K 69
ufs_mount 5 17K 6
proc 3 17K 3
tty 16 16K 16
ithread 99 16K 99
ksem 19 16K 5103
bus-sc 32 14K 1595
lltable 43 14K 79
KTRACE 100 13K 100
ifnet 7 13K 7
ether_multi 152 13K 162
kenv 93 12K 93
eventhandler 129 11K 129
pf_rule 10 10K 113
GEOM 60 10K 491
rman 82 10K 423
in6_multi 65 9K 65
bmsafemap 2 9K 5935
UART 12 9K 12
devstat 4 9K 4
sctp_timw 32 8K 32
rpc 2 8K 2
shmfd 1 8K 7
pfs_vncache 1 8K 1
pfs_nodes 20 8K 20
audit_evclass 236 8K 294
cred 28 7K 443
sglist 5 7K 5
CAM DEV 3 6K 510
kqueue 57 6K 5315
plimit 21 6K 381
CAM queue 5 6K 1528
taskqueue 48 6K 48
ufs_dirhash 24 5K 24
pf_ifnet 11 5K 79
DEVFSP 72 5K 76
UMA 260 5K 260
vt 11 5K 11
memdesc 1 4K 1
MCA 32 4K 32
ioctlops 1 4K 406
kcovinfo 64 4K 68
evdev 4 4K 4
routetbl 24 4K 312
pwddesc 55 4K 5307
lockf 31 4K 78
hhook 13 4K 13
session 25 4K 40
terminal 11 3K 11
acpisem 22 3K 22
proc-args 44 3K 594
uidinfo 4 3K 14
local_apic 1 2K 1
io_apic 1 2K 1
fpukern_ctx 2 2K 2
ipsec-saq 2 2K 2
selfd 31 2K 90197
ip6ndp 12 2K 14
Unitno 29 2K 54
sctp_ifa 13 2K 14
CAM XPT 22 2K 543
in_multi 6 2K 8
ipsecpolicy 2 2K 2
acpidev 20 2K 20
select 10 2K 54
msi 9 2K 9
clone 9 2K 9
tun 7 2K 7
softdep 1 1K 1
sahead 1 1K 1
secasvar 1 1K 1
nhops 6 1K 8
vnodemarker 2 1K 64
NFSD session 1 1K 1
CAM periph 4 1K 271
ipsec 3 1K 3
sctp_ifn 6 1K 14
dirrem 3 1K 5212
mld 6 1K 6
igmp 6 1K 6
toponodes 6 1K 6
isadev 6 1K 6
mount 16 1K 89
pci_link 10 1K 10
mkdir 5 1K 8812
crypto 4 1K 4
encap_export_host 12 1K 12
newdirblk 4 1K 4406
diradd 4 1K 5245
inpcbpolicy 16 1K 8536
pfil 4 1K 4
CAM SIM 2 1K 2
cdev 2 1K 2
sctp_atcl 1 1K 1349
freefile 3 1K 5206
chacha20random 1 1K 1
osd 3 1K 10
vnodes 1 1K 1
ktls 1 1K 1
procdesc 2 1K 12
NFSD lckfile 1 1K 1
NFSD V4client 1 1K 1
DEVFS 9 1K 10
feeder 7 1K 7
tcpfunc 3 1K 3
loginclass 3 1K 6
prison 6 1K 6
aesni_data 2 1K 2
CAM dev queue 2 1K 2
CAM I/O Scheduler 1 1K 1
apmdev 1 1K 1
atkbddev 2 1K 2
CAM path 4 1K 1034
freework 1 1K 13730
pmchooks 1 1K 1
soname 4 1K 4191
nexusdev 6 1K 6
sctp_vrf 1 1K 1
entropy 2 1K 39
vnet 1 1K 1
pmc 1 1K 1
acpiintr 1 1K 1
sctp_atky 1 1K 1512
cpus 2 1K 2
vnet_data_free 1 1K 1
iov 2 1K 20708
Per-cpu 1 1K 1
filecaps 2 1K 92
sctp_athm 1 1K 1351
p1003.1b 1 1K 1
pf_table 0 0K 72
pf_altq 0 0K 0
pf_osfp 0 0K 0
pf_temp 0 0K 0
mqdata 0 0K 0
sctp_mcore 0 0K 0
sctp_socko 0 0K 561
sctp_iter 0 0K 9
sctp_mvrf 0 0K 0
sctp_cpal 0 0K 0
sctp_cmsg 0 0K 0
sctp_stre 0 0K 0
sctp_athi 0 0K 0
sctp_a_it 0 0K 9
sctp_aadr 0 0K 0
sctp_stro 0 0K 218
sctp_stri 0 0K 138
sctp_map 0 0K 436
ath_hal 0 0K 0
athdev 0 0K 0
ata_pci 0 0K 0
madt_table 0 0K 2
smartpqi 0 0K 0
ata_dma 0 0K 0
ata_generic 0 0K 0
pvscsi 0 0K 0
amr 0 0K 0
scsi_da 0 0K 69
ata_da 0 0K 0
scsi_ch 0 0K 0
iavf 0 0K 0
ixl 0 0K 0
scsi_cd 0 0K 0
USBdev 0 0K 0
USB 0 0K 0
AHCI driver 0 0K 0
agp 0 0K 0
ice-resmgr 0 0K 0
ice-osdep 0 0K 0
ice 0 0K 0
axgbe 0 0K 0
nvme_da 0 0K 0
xen_intr 0 0K 0
acpipwr 0 0K 0
xen_hvm 0 0K 0
legacydrv 0 0K 0
qpidrv 0 0K 0
twsbuf 0 0K 0
twe_commands 0 0K 0
dmar_idpgtbl 0 0K 0
dmar_dom 0 0K 0
dmar_ctx 0 0K 0
twa_commands 0 0K 0
tcp_log_dev 0 0K 2
midi buffers 0 0K 0
isci 0 0K 0
iommu_dmamap 0 0K 0
mixer 0 0K 0
hyperv_socket 0 0K 0
bxe_ilt 0 0K 0
xenbus 0 0K 0
ac97 0 0K 0
hdacc 0 0K 0
vm_fictitious 0 0K 0
hdac 0 0K 0
hdaa 0 0K 0
acpi_perf 0 0K 0
acpicmbat 0 0K 0
SIIS driver 0 0K 0
CAM CCB 0 0K 64620
UMAHash 0 0K 0
PUC 0 0K 0
ppbusdev 0 0K 0
vm_pgdata 0 0K 0
jblocks 0 0K 0
savedino 0 0K 15236
sentinel 0 0K 0
jfsync 0 0K 0
jtrunc 0 0K 0
sbdep 0 0K 29
jsegdep 0 0K 0
jseg 0 0K 0
jfreefrag 0 0K 0
jfreeblk 0 0K 0
jnewblk 0 0K 0
jmvref 0 0K 0
jremref 0 0K 0
jaddref 0 0K 0
freedep 0 0K 0
freeblks 0 0K 5761
freefrag 0 0K 9
allocindir 0 0K 0
indirdep 0 0K 14085
allocdirect 0 0K 0
ufs_trim 0 0K 0
mactemp 0 0K 0
audit_trigger 0 0K 0
audit_pipe_presel 0 0K 0
audit_pipeent 0 0K 0
audit_pipe 0 0K 0
audit_evname 0 0K 0
audit_bsm 0 0K 0
audit_gidset 0 0K 0
audit_text 0 0K 0
audit_path 0 0K 0
audit_data 0 0K 0
audit_cred 0 0K 0
xform 0 0K 0
agtiapi_MemAlloc malloc 0 0K 0
NLM 0 0K 0
ipsec-spdcache 0 0K 0
ipsec-reg 0 0K 0
ipsec-misc 0 0K 0
ipsecrequest 0 0K 0
ip6opt 0 0K 17
ip6_msource 0 0K 0
ip6_moptions 0 0K 0
in6_mfilter 0 0K 0
frag6 0 0K 0
tcplog 0 0K 0
tcp_hwpace 0 0K 0
osti_cacheable 0 0K 0
LRO 0 0K 0
newreno data 0 0K 0
ip_msource 0 0K 0
ip_moptions 0 0K 2
in_mfilter 0 0K 0
ipid 0 0K 0
80211scan 0 0K 0
80211ratectl 0 0K 0
80211power 0 0K 0
80211nodeie 0 0K 0
80211node 0 0K 0
80211mesh_gt 0 0K 0
80211mesh_rt 0 0K 0
80211perr 0 0K 0
80211prep 0 0K 0
80211preq 0 0K 0
80211dfs 0 0K 0
80211crypto 0 0K 0
80211vap 0 0K 0
iflib 0 0K 0
vlan 0 0K 0
gif 0 0K 0
ifdescr 0 0K 0
zlib 0 0K 0
fadvise 0 0K 0
VN POLL 0 0K 1
tempbuff 0 0K 0
statfs 0 0K 4591
namei_tracker 0 0K 8
export_host 0 0K 0
cl_savebuf 0 0K 5
tempbuff 0 0K 0
ag_tgt_map_t malloc 0 0K 0
ag_slr_map_t malloc 0 0K 0
lDevFlags * malloc 0 0K 0
tiDeviceHandle_t * malloc 0 0K 0
ag_portal_data_t malloc 0 0K 0
ag_device_t malloc 0 0K 0
STLock malloc 0 0K 0
CCB List 0 0K 0
sr_iov 0 0K 0
OCS 0 0K 0
OCS 0 0K 0
nvme 0 0K 0
nvd 0 0K 0
netmap 0 0K 0
mwldev 0 0K 0
MVS driver 0 0K 0
CAM ccb queue 0 0K 0
mrsasbuf 0 0K 0
biobuf 0 0K 0
aios 0 0K 0
lio 0 0K 0
acl 0 0K 0
mpt_user 0 0K 0
mbuf_tag 0 0K 127
accf 0 0K 0
pts 0 0K 0
eventfd 0 0K 0
Witness 0 0K 0
stack 0 0K 0
mps_user 0 0K 0
MPSSAS 0 0K 0
mps 0 0K 0
mpr_user 0 0K 0
MPRSAS 0 0K 0
sbuf 0 0K 288
mpr 0 0K 0
firmware 0 0K 0
compressor 0 0K 0
mfibuf 0 0K 0
SWAP 0 0K 0
md_sectors 0 0K 0
md_disk 0 0K 0
sysctltmp 0 0K 623
sysctl 0 0K 1
malodev 0 0K 0
ekcd 0 0K 0
dumper 0 0K 0
sendfile 0 0K 0
rctl 0 0K 0
LED 0 0K 0
ix_sriov 0 0K 0
aacraidcam 0 0K 0
cache 0 0K 0
ix 0 0K 0
ipsbuf 0 0K 0
prison_racct 0 0K 0
Fail Points 0 0K 0
sigio 0 0K 1
filedesc_to_leader 0 0K 0
pwd 0 0K 0
tty console 0 0K 0
iirbuf 0 0K 0
aacraid_buf 0 0K 0
aaccam 0 0K 0
aacbuf 0 0K 0
zstd 0 0K 0
nvlist 0 0K 0
SCSI ENC 0 0K 0
isofs_node 0 0K 0
isofs_mount 0 0K 0
tr_raid5_data 0 0K 0
tr_raid1e_data 0 0K 0
tr_raid1_data 0 0K 0
tr_raid0_data 0 0K 0
tr_concat_data 0 0K 0
md_sii_data 0 0K 0
md_promise_data 0 0K 0
md_nvidia_data 0 0K 0
md_jmicron_data 0 0K 0
md_intel_data 0 0K 0
md_ddf_data 0 0K 0
raid_data 0 0K 72
geom_flashmap 0 0K 0
tmpfs dir 0 0K 0
tmpfs name 0 0K 0
tmpfs mount 0 0K 0
NFS FHA 0 0K 0
newnfsmnt 0 0K 0
newnfsclient_req 0 0K 0
NFSCL layrecall 0 0K 0
NFSCL session 0 0K 0
NFSCL sockreq 0 0K 0
NFSCL devinfo 0 0K 0
NFSCL flayout 0 0K 0
NFSCL layout 0 0K 0
NFSD rollback 0 0K 0
NFSCL diroffdiroff 0 0K 0
NEWdirectio 0 0K 0
NEWNFSnode 0 0K 0
NFSCL lck 0 0K 0
NFSCL lckown 0 0K 0
NFSCL client 0 0K 0
NFSCL deleg 0 0K 0
NFSCL open 0 0K 0
NFSCL owner 0 0K 0
NFS fh 0 0K 0
NFS req 0 0K 0
NFSD usrgroup 0 0K 0
NFSD string 0 0K 0
NFSD V4lock 0 0K 0
NFSD V4state 0 0K 0
NFSD srvcache 0 0K 0
msdosfs_fat 0 0K 0
msdosfs_mount 0 0K 0
msdosfs_node 0 0K 0
DEVFS4 0 0K 0
DEVFS2 0 0K 0
gntdev 0 0K 0
privcmd_dev 0 0K 0
evtchn_dev 0 0K 0
xenstore 0 0K 0
SCSI sa 0 0K 0
scsi_pass 0 0K 0
xnb 0 0K 0
xbbd 0 0K 0
xbd 0 0K 0
Balloon 0 0K 0
sysmouse 0 0K 0
vtfont 0 0K 0
ciss_data 0 0K 0
db> show uma
Zone Size Used Free Requests Sleeps Bucket Total Mem XFree
mbuf_jumbo_page 4096 8320 986 1594041 0 254 38117376 0
RADIX NODE 144 18341 192 220965 0 62 2668752 0
pbuf 2632 0 973 0 0 2 2560936 0
mbuf 256 8674 896 2418045 0 254 2449920 0
BUF TRIE 144 229 13239 51516 0 62 1939392 0
malloc-384 384 4141 9 4142 0 30 1593600 0
malloc-4096 4096 332 5 1088 0 2 1380352 0
malloc-128 128 10574 59 11245 0 126 1361024 0
UMA Slabs 0 112 10526 19 10526 0 126 1181040 0
mbuf_cluster 2048 525 1 525 0 254 1077248 0
FFS inode 1128 511 28 5717 0 8 607992 0
socket 944 30 338 10658 0 254 347392 0
VM OBJECT 264 1150 80 83158 0 30 324720 0
256 Bucket 2048 139 17 18024 0 8 319488 0
VNODE 488 547 85 5755 0 30 308416 0
THREAD 1792 142 29 10702 0 8 306432 0
malloc-65536 65536 4 0 4 0 1 262144 0
malloc-16384 16384 12 4 4419 0 1 262144 0
malloc-4096 4096 56 6 5311 0 2 253952 0
malloc-2048 2048 2 120 64658 0 8 249856 0
malloc-32768 32768 0 7 42 0 1 229376 0
malloc-32768 32768 1 6 13327 0 1 229376 0
DEVCTL 1024 12 200 129 0 0 217088 0
malloc-64 64 3237 39 3270 0 254 209664 0
malloc-16 16 12688 312 12804 0 254 208000 0
malloc-65536 65536 3 0 3 0 1 196608 0
g_bio 408 0 480 255782 0 30 195840 0
UMA Zones 768 232 2 232 0 16 179712 0
udplite_inpcb 488 5 339 7108 0 254 167872 0
MAP ENTRY 96 1363 359 293381 0 126 165312 0
FFS2 dinode 256 511 134 5717 0 62 165120 0
malloc-256 256 27 603 28448 0 62 161280 0
malloc-128 128 1207 33 27523 0 126 158720 0
malloc-32 32 4805 109 4887 0 254 157248 0
S VFS Cache 104 1011 354 6360 0 126 141960 0
mbuf_packet 256 11 514 4566 0 254 134400 0
malloc-65536 65536 0 2 72 0 1 131072 0
malloc-1024 1024 122 6 141 0 16 131072 0
vmem btag 56 2132 88 2132 0 254 124320 0
ksiginfo 112 57 987 1350 0 126 116928 0
VMSPACE 2544 32 10 5285 0 4 106848 0
sctp_raddr 736 0 132 554 0 254 97152 0
malloc-256 256 231 144 26540 0 62 96000 0
PROC 1320 54 18 5306 0 8 95040 0
128 Bucket 1024 56 35 1083 0 16 93184 0
UMA Kegs 384 218 5 218 0 30 85632 0
clpbuf 2632 0 32 33 0 16 84224 0
filedesc0 1072 55 22 5307 0 8 82544 0
sctp_asoc 2288 0 35 218 0 254 80080 0
malloc-4096 4096 17 2 21 0 2 77824 0
64 Bucket 512 88 64 11381 0 30 77824 0
malloc-256 256 153 147 21643 0 62 76800 0
malloc-64 64 638 559 11354 0 254 76608 0
malloc-128 128 324 265 13132 0 126 75392 0
malloc-65536 65536 0 1 2 0 1 65536 0
malloc-65536 65536 1 0 1 0 1 65536 0
malloc-65536 65536 0 1 124 0 1 65536 0
malloc-65536 65536 1 0 1 0 1 65536 0
malloc-65536 65536 0 1 8 0 1 65536 0
malloc-128 128 192 273 10209 0 126 59520 0
tcpcb 1048 7 48 1177 0 254 57640 0
malloc-8192 8192 3 4 33 0 1 57344 0
malloc-256 256 89 121 1309 0 62 53760 0
malloc-4096 4096 12 1 23 0 2 53248 0
malloc-128 128 366 37 366 0 126 51584 0
malloc-256 256 62 133 16461 0 62 49920 0
32 Bucket 256 63 132 9855 0 62 49920 0
malloc-2048 2048 5 19 524 0 8 49152 0
sctp_ep 1280 1 35 928 0 254 46080 0
malloc-2048 2048 2 20 929 0 8 45056 0
pcpu-8 8 4644 988 7183 0 254 45056 0
malloc-64 64 567 126 1688 0 254 44352 0
malloc-384 384 30 80 9596 0 30 42240 0
NAMEI 1024 0 40 34332 0 16 40960 0
malloc-8192 8192 5 0 5 0 1 40960 0
malloc-8192 8192 4 1 97 0 1 40960 0
malloc-1024 1024 12 28 1680 0 16 40960 0
malloc-64 64 106 524 95527 0 254 40320 0
Files 80 198 302 28484 0 126 40000 0
tcp_inpcb 488 7 73 1177 0 254 39040 0
malloc-384 384 94 6 96 0 30 38400 0
malloc-256 256 7 143 6542 0 62 38400 0
DIRHASH 1024 34 2 34 0 16 36864 0
malloc-64 64 308 259 16528 0 254 36288 0
malloc-128 128 29 250 8495 0 126 35712 0
malloc-32768 32768 1 0 1 0 1 32768 0
malloc-32768 32768 1 0 1 0 1 32768 0
malloc-32768 32768 0 1 117 0 1 32768 0
malloc-16384 16384 2 0 8 0 1 32768 0
malloc-16384 16384 1 1 154 0 1 32768 0
malloc-8192 8192 4 0 4 0 1 32768 0
malloc-2048 2048 14 2 16 0 8 32768 0
pcpu-64 64 456 56 456 0 254 32768 0
malloc-384 384 53 27 197 0 30 30720 0
pipe 744 22 18 497 0 16 29760 0
16 Bucket 144 53 143 1291 0 62 28224 0
KNOTE 160 28 147 364193 0 62 28000 0
8 Bucket 80 62 288 4644 0 126 28000 0
TURNSTILE 136 172 17 172 0 62 25704 0
malloc-4096 4096 4 2 4793 0 2 24576 0
malloc-1024 1024 2 22 46 0 16 24576 0
malloc-1024 1024 16 8 22 0 16 24576 0
malloc-512 512 10 38 203 0 30 24576 0
PWD 32 18 738 4496 0 254 24192 0
ttyinq 160 135 15 300 0 62 24000 0
tcp_rack_pcb 704 1 32 549 0 16 23232 0
ttyoutq 256 72 18 160 0 62 23040 0
malloc-256 256 72 18 821 0 62 23040 0
malloc-2048 2048 5 5 206 0 8 20480 0
malloc-512 512 3 37 184 0 30 20480 0
malloc-32 32 43 587 5123 0 254 20160 0
2 Bucket 32 61 569 3801 0 254 20160 0
sctp_chunk 152 0 130 447 0 254 19760 0
SLEEPQUEUE 88 172 52 172 0 126 19712 0
Mountpoints 2752 2 5 2 0 4 19264 0
malloc-384 384 20 30 59 0 30 19200 0
malloc-256 256 31 44 80 0 62 19200 0
malloc-16384 16384 1 0 1 0 1 16384 0
malloc-8192 8192 2 0 2 0 1 16384 0
malloc-8192 8192 2 0 2 0 1 16384 0
malloc-8192 8192 2 0 2 0 1 16384 0
malloc-8192 8192 0 2 2 0 1 16384 0
malloc-2048 2048 2 6 521 0 8 16384 0
malloc-1024 1024 13 3 13 0 16 16384 0
malloc-1024 1024 11 5 1402 0 16 16384 0
udpcb 32 7 497 7299 0 254 16128 0
malloc-32 32 302 202 1244 0 254 16128 0
malloc-32 32 84 420 11428 0 254 16128 0
vtnet_tx_hdr 24 0 668 799532 0 254 16032 0
malloc-128 128 94 30 186 0 126 15872 0
tcp_bbr_pcb 832 0 18 185 0 16 14976 0
malloc-4096 4096 3 0 3 0 2 12288 0
malloc-2048 2048 3 3 102 0 8 12288 0
malloc-64 64 60 129 701 0 254 12096 0
4 Bucket 48 7 245 199 0 254 12096 0
malloc-128 128 64 29 157 0 126 11904 0
udp_inpcb 488 2 22 191 0 254 11712 0
unpcb 256 11 34 1167 0 254 11520 0
cpuset 104 8 85 79 0 126 9672 0
malloc-2048 2048 1 3 13 0 8 8192 0
malloc-1024 1024 8 0 8 0 16 8192 0
malloc-512 512 7 9 7 0 30 8192 0
malloc-512 512 2 14 510 0 30 8192 0
pf tags 104 1 77 6 0 126 8112 0
rtentry 176 30 16 33 0 62 8096 0
PGRP 88 25 67 40 0 126 8096 0
rl_entry 40 80 122 80 0 254 8080 0
sctp_stream_msg_out 112 0 72 14 0 254 8064 0
sctp_laddr 48 0 168 212 0 254 8064 0
syncache 168 0 48 4 0 254 8064 0
malloc-64 64 27 99 86 0 254 8064 0
malloc-64 64 18 108 397 0 254 8064 0
malloc-32 32 111 141 1863 0 254 8064 0
malloc-32 32 26 226 71 0 254 8064 0
malloc-32 32 75 177 1405 0 254 8064 0
malloc-16 16 21 479 512 0 254 8000 0
malloc-16 16 33 467 2971 0 254 8000 0
malloc-16 16 32 468 291 0 254 8000 0
malloc-16 16 207 293 1924 0 254 8000 0
malloc-16 16 4 496 6 0 254 8000 0
malloc-16 16 258 242 1623 0 254 8000 0
malloc-16 16 26 474 26330 0 254 8000 0
tcp_bbr_map 128 0 62 351 0 126 7936 0
tcp_rack_map 120 2 64 20 0 126 7920 0
sctp_readq 152 0 52 12 0 254 7904 0
ripcb 488 2 14 60 0 254 7808 0
itimer 352 0 22 4 0 30 7744 0
kenv 258 3 27 1042 0 30 7740 0
routing nhops 256 27 3 33 0 62 7680 0
FPU_save_area 832 1 8 1 0 16 7488 0
domainset 40 0 126 67 0 254 5040 0
epoch_record pcpu 256 4 12 4 0 62 4096 0
malloc-4096 4096 0 1 3 0 2 4096 0
malloc-1024 1024 1 3 7 0 16 4096 0
malloc-512 512 1 7 2 0 30 4096 0
pcpu-16 16 7 249 7 0 254 4096 0
tcp_log_bucket 176 0 23 3 0 62 4048 0
hostcache 96 1 41 1 0 254 4032 0
malloc-32 32 4 122 137 0 254 4032 0
tcp_log_node 120 0 33 4 0 126 3960 0
UMA Slabs 1 176 10 12 10 0 62 3872 0
malloc-384 384 0 10 309 0 30 3840 0
malloc-384 384 1 9 1 0 30 3840 0
tcp_log 416 0 9 2 0 254 3744 0
mqnode 416 3 6 3 0 30 3744 0
KMAP ENTRY 96 12 27 12 0 0 3744 0
vmem 1856 1 1 1 0 8 3712 0
SMR CPU 32 2 29 2 0 254 992 0
SMR SHARED 24 2 29 2 0 254 744 0
FFS1 dinode 128 0 0 0 0 126 0 0
swblk 136 0 0 0 0 62 0 0
swpctrie 144 0 0 0 0 62 0 0
sctp_asconf_ack 48 0 0 0 0 254 0 0
sctp_asconf 40 0 0 0 0 254 0 0
pf state scrubs 40 0 0 0 0 254 0 0
pf frag entries 40 0 0 0 0 254 0 0
pf frags 248 0 0 0 0 62 0 0
pf table entries 160 0 0 0 0 62 0 0
pf table entry counters 64 0 0 0 0 254 0 0
pf source nodes 136 0 0 0 0 254 0 0
pf state keys 88 0 0 0 0 126 0 0
pf states 296 0 0 0 0 254 0 0
pf mtags 48 0 0 0 0 254 0 0
IPsec SA lft_c 16 0 0 0 0 254 0 0
tcpreass 48 0 0 0 0 254 0 0
tfo_ccache_entries 80 0 0 0 0 126 0 0
tfo 4 0 0 0 0 254 0 0
sackhole 32 0 0 0 0 254 0 0
tcptw 88 0 0 0 0 254 0 0
ipq 56 0 0 0 0 254 0 0
AIOLIO 272 0 0 0 0 30 0 0
AIOCB 552 0 0 0 0 16 0 0
AIOP 32 0 0 0 0 254 0 0
AIO 208 0 0 0 0 62 0 0
NCLNODE 592 0 0 0 0 16 0 0
TMPFS node 224 0 0 0 0 62 0 0
mqnotifier 216 0 0 0 0 62 0 0
mvdata 64 0 0 0 0 254 0 0
mqueue 248 0 0 0 0 62 0 0
LTS VFS Cache 360 0 0 0 0 30 0 0
L VFS Cache 320 0 0 0 0 30 0 0
STS VFS Cache 144 0 0 0 0 62 0 0
cryptop 280 0 0 0 0 30 0 0
IOMMU_MAP_ENTRY 120 0 0 0 0 126 0 0
ktls_session 192 0 0 0 0 62 0 0
mbuf_jumbo_16k 16384 0 0 0 0 254 0 0
mbuf_jumbo_9k 9216 0 0 0 0 254 0 0
audit_record 1280 0 0 0 0 8 0 0
MAC labels 40 0 0 0 0 254 0 0
vnpbuf 2632 0 0 0 0 64 0 0
mdpbuf 2632 0 0 0 0 3 0 0
nfspbuf 2632 0 0 0 0 16 0 0
swwbuf 2632 0 0 0 0 8 0 0
swrbuf 2632 0 0 0 0 16 0 0
umtx_shm 88 0 0 0 0 126 0 0
umtx pi 96 0 0 0 0 126 0 0
rangeset pctrie nodes 144 0 0 0 0 62 0 0
malloc-32768 32768 0 0 0 0 1 0 0
malloc-32768 32768 0 0 0 0 1 0 0
malloc-32768 32768 0 0 0 0 1 0 0
malloc-16384 16384 0 0 0 0 1 0 0
malloc-16384 16384 0 0 0 0 1 0 0
malloc-16384 16384 0 0 0 0 1 0 0
malloc-16384 16384 0 0 0 0 1 0 0
malloc-4096 4096 0 0 0 0 2 0 0
malloc-512 512 0 0 0 0 30 0 0
malloc-512 512 0 0 0 0 30 0 0
malloc-512 512 0 0 0 0 30 0 0
malloc-384 384 0 0 0 0 30 0 0
pcpu-32 32 0 0 0 0 254 0 0
pcpu-4 4 0 0 0 0 254 0 0
fakepg 104 0 0 0 0 126 0 0
UMA Hash 256 0 0 0 0 62 0 0
---
This report is generated by a bot. It may contain errors.
See https://goo.gl/tpsmEJ for more information about syzbot.
syzbot engineers can be reached at syzk...@googlegroups.com.
syzbot will keep track of this issue. See:
https://goo.gl/tpsmEJ#status for how to communicate with syzbot.
syzbot found the following issue on:
HEAD commit: ff751ee0 Remove FirstBurstLength limit for software iSCSI.
git tree: https://github.com/freebsd/freebsd-src.git main
console output: https://syzkaller.appspot.com/x/log.txt?x=13886bd0d00000
dashboard link: https://syzkaller.appspot.com/bug?extid=e9632d7ad17398f0bd8f
Unfortunately, I don't have any reproducer for this issue yet.
IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+e9632d...@syzkaller.appspotmail.com
panic: pfi_dynaddr_setup: dyn is 0x20000100
cpuid = 0
time = 469
KDB: stack backtrace:
db_trace_self_wrapper() at db_trace_self_wrapper+0x47/frame 0xfffffe0051f37100
vpanic() at vpanic+0x1c7/frame 0xfffffe0051f37160
panic() at panic+0x43/frame 0xfffffe0051f371c0
pfi_dynaddr_setup() at pfi_dynaddr_setup+0x580/frame 0xfffffe0051f37250
pfioctl() at pfioctl+0x8178/frame 0xfffffe0051f37780
devfs_ioctl() at devfs_ioctl+0x14e/frame 0xfffffe0051f377e0
VOP_IOCTL_APV() at VOP_IOCTL_APV+0x78/frame 0xfffffe0051f37810
vn_ioctl() at vn_ioctl+0x278/frame 0xfffffe0051f37930
devfs_ioctl_f() at devfs_ioctl_f+0x47/frame 0xfffffe0051f37970
kern_ioctl() at kern_ioctl+0x3cd/frame 0xfffffe0051f379e0
sys_ioctl() at sys_ioctl+0x265/frame 0xfffffe0051f37ab0
amd64_syscall() at amd64_syscall+0x247/frame 0xfffffe0051f37bf0
fast_syscall_common() at fast_syscall_common+0xf8/frame 0xfffffe0051f37bf0
--- syscall (198, FreeBSD ELF64, nosys), rip = 0x284cca, rsp = 0x7fffdfffdf08, rbp = 0x7fffdfffdf70 ---
KDB: enter: panic
[ thread pid 5304 tid 110701 ]
Stopped at kdb_enter+0x67: movq $0,0x14526ae(%rip)
db>
db> set $lines = 0
db> set $maxwidth = 0
db> show registers
cs 0x20
ds 0x3b
es 0x3b
fs 0x13
gs 0x1b
ss 0x28
rax 0x12
rcx 0xfffffe0095400000
rdx 0x3ffff
rbx 0
rsp 0xfffffe0051f370e0
rbp 0xfffffe0051f37100
rsi 0x40001
rdi 0xffffffff81116116 vprintf+0x176
r8 0
r9 0xffffffff
r10 0
r11 0xfffffe0094e1a310
r12 0xffffffff82067650 ddb_dbbe
r13 0
r14 0xffffffff819ba277
r15 0xffffffff819ba277
rip 0xffffffff8110d0d7 kdb_enter+0x67
rflags 0x82
kdb_enter+0x67: movq $0,0x14526ae(%rip)
db> show proc
Process 5304 (syz-executor.0) at 0xfffff80018e92a50:
state: NORMAL
uid: 0 gids: 0, 0, 5
parent: pid 783 at 0xfffff800183fc000
ABI: FreeBSD ELF64
flag: 0x10000080 flag2: 0
arguments: /root/syz-executor.0
reaper: 0xfffff80004489528 reapsubtree: 1
sigparent: 20
vmspace: 0xfffffe0094e17000
(map 0xfffffe0094e17000)
(map.pmap 0xfffffe0094e170c0)
(pmap 0xfffffe0094e17120)
threads: 2
100183 RunQ syz-executor.0
110701 Run CPU 0 syz-executor.0
db> ps
pid ppid pgrp uid state wmesg wchan cmd
5306 786 786 0 R syz-executor.2
5305 859 859 0 R (threaded) syz-executor.1
109369 Run CPU 1 syz-executor.1
110702 S sbwait 0xfffff8003934f574 syz-executor.1
5304 783 783 0 R (threaded) syz-executor.0
100183 RunQ syz-executor.0
110701 Run CPU 0 syz-executor.0
5300 856 856 0 S (threaded) syz-executor.3
108682 S nanslp 0xffffffff82532ee1 syz-executor.3
110692 S sbwait 0xfffff800391021c4 syz-executor.3
110695 S sbwait 0xfffff80039255574 syz-executor.3
110696 S uwait 0xfffff80018e00a80 syz-executor.3
110697 S pipdwt 0xfffff80039375d00 syz-executor.3
110698 S uwait 0xfffff80018eafd80 syz-executor.3
989 982 989 0 Ss select 0xfffff8001833fec0 dhclient
986 1 986 0 Ss select 0xfffff80004f53440 dhclient
982 975 436 65 S select 0xfffff80004f53a40 dhclient
975 436 436 0 S wait 0xfffff800185b7000 sh
859 780 859 0 Ss nanslp 0xffffffff82532ee1 syz-executor.1
856 780 856 0 Ss nanslp 0xffffffff82532ee1 syz-executor.3
786 780 786 0 Ss nanslp 0xffffffff82532ee0 syz-executor.2
783 780 783 0 Ss nanslp 0xffffffff82532ee0 syz-executor.0
780 778 778 0 S (threaded) syz-fuzzer
100105 S uwait 0xfffff800183fed80 syz-fuzzer
100106 S uwait 0xfffff800183fee80 syz-fuzzer
100107 S kqread 0xfffff80018428500 syz-fuzzer
100108 S uwait 0xfffff800183fe780 syz-fuzzer
100109 S uwait 0xfffff80004c04500 syz-fuzzer
100110 S uwait 0xfffff80004c04400 syz-fuzzer
100111 S uwait 0xfffff8001856ef00 syz-fuzzer
100112 S uwait 0xfffff800183fe080 syz-fuzzer
100113 S uwait 0xfffff800183fe180 syz-fuzzer
778 776 778 0 Ss pause 0xfffff80004ec80b0 csh
776 694 776 0 Ss select 0xfffff80018580e40 sshd
760 1 760 0 Ss+ ttyin 0xfffff800048d8cb0 getty
759 1 759 0 Ss+ ttyin 0xfffff80004c180b0 getty
758 1 758 0 Ss+ ttyin 0xfffff80004c184b0 getty
757 1 757 0 Ss+ ttyin 0xfffff80004c188b0 getty
756 1 756 0 Ss+ ttyin 0xfffff80004c18cb0 getty
755 1 755 0 Ss+ ttyin 0xfffff80004ba60b0 getty
754 1 754 0 Ss+ ttyin 0xfffff80004ba64b0 getty
753 1 753 0 Ss+ ttyin 0xfffff80004ba68b0 getty
752 1 752 0 Ss+ ttyin 0xfffff80004ba6cb0 getty
698 1 698 0 Ss nanslp 0xffffffff82532ee0 cron
694 1 694 0 Ss select 0xfffff80004f53140 sshd
507 1 507 0 Ss select 0xfffff80004f531c0 syslogd
436 1 436 0 Ss wait 0xfffff800183d2528 devd
435 1 435 65 Ss select 0xfffff80004f532c0 dhclient
350 1 350 0 Ss select 0xfffff80004f53340 dhclient
347 1 347 0 Ss select 0xfffff80004f53bc0 dhclient
23 0 0 0 DL vlruwt 0xfffff80004dbe528 [vnlru]
22 0 0 0 DL syncer 0xffffffff826223b8 [syncer]
21 0 0 0 DL (threaded) [bufdaemon]
100070 D qsleep 0xffffffff826214a0 [bufdaemon]
100075 D - 0xffffffff8200ac80 [bufspacedaemon-0]
100088 D sdflush 0xfffff800048d14e8 [/ worker]
20 0 0 0 DL psleep 0xffffffff82648988 [vmdaemon]
19 0 0 0 DL (threaded) [pagedaemon]
100068 D psleep 0xffffffff8263cdf8 [dom0]
100076 D launds 0xffffffff8263ce04 [laundry: dom0]
100077 D umarcl 0xffffffff81525ff0 [uma]
18 0 0 0 DL - 0xffffffff82367278 [rand_harvestq]
17 0 0 0 DL waiting 0xffffffff82c19818 [sctp_iterator]
16 0 0 0 DL pftm 0xffffffff82e72430 [pf purge]
15 0 0 0 DL - 0xffffffff8261ea5c [soaiod4]
9 0 0 0 DL - 0xffffffff8261ea5c [soaiod3]
8 0 0 0 DL - 0xffffffff8261ea5c [soaiod2]
7 0 0 0 DL - 0xffffffff8261ea5c [soaiod1]
6 0 0 0 DL (threaded) [cam]
100034 D - 0xffffffff8223efc0 [doneq0]
100067 D - 0xffffffff8223ee90 [scanner]
14 0 0 0 DL seqstat 0xfffff80004627488 [sequencer 00]
5 0 0 0 DL crypto_ 0xfffff8000445bb90 [crypto returns 1]
4 0 0 0 DL crypto_ 0xfffff8000445bb30 [crypto returns 0]
3 0 0 0 DL crypto_ 0xffffffff8263a310 [crypto]
13 0 0 0 DL (threaded) [geom]
100025 D - 0xffffffff82512720 [g_event]
100026 D - 0xffffffff82512728 [g_up]
100027 D - 0xffffffff82512730 [g_down]
2 0 0 0 DL (threaded) [KTLS]
100018 D - 0xfffff80004466900 [thr_0]
100019 D - 0xfffff80004466980 [thr_1]
12 0 0 0 WL (threaded) [intr]
100010 I [swi6: Giant taskq]
100013 I [swi5: fast taskq]
100016 I [swi6: task queue]
100020 I [swi4: clock (0)]
100021 I [swi4: clock (1)]
100022 I [swi1: netisr 0]
100023 I [swi3: vm]
100035 I [irq24: virtio_pci0]
100036 I [irq25: virtio_pci0]
100037 I [irq26: virtio_pci0]
100038 I [irq27: virtio_pci0]
100039 I [irq28: virtio_pci1]
100040 I [irq29: virtio_pci1]
100041 I [irq30: virtio_pci1]
100042 I [irq31: virtio_pci1]
100043 I [irq32: virtio_pci1]
100048 I [irq10: virtio_pci2]
100050 I [irq1: atkbd0]
100051 I [irq12: psm0]
100052 I [swi0: uart uart++]
100060 I [swi1: pf send]
100073 I [swi1: hpts]
100074 I [swi1: hpts]
11 0 0 0 RL (threaded) [idle]
100003 CanRun [idle: cpu0]
100004 CanRun [idle: cpu1]
1 0 1 0 SLs wait 0xfffff80004489528 [init]
10 0 0 0 DL audit_w 0xffffffff8263a830 [audit]
0 0 0 0 DLs (threaded) [kernel]
100000 D swapin 0xffffffff82512cb0 [swapper]
100005 D - 0xfffff8000446be00 [if_config_tqg_0]
100006 D - 0xfffff8000446bd00 [softirq_0]
100007 D - 0xfffff8000446bc00 [softirq_1]
100008 D - 0xfffff8000446bb00 [if_io_tqg_0]
100009 D - 0xfffff8000446ba00 [if_io_tqg_1]
100011 D - 0xfffff8000446b800 [thread taskq]
100012 D - 0xfffff8000446b700 [aiod_kick taskq]
100014 D - 0xfffff8000446b500 [kqueue_ctx taskq]
100015 D - 0xfffff8000446b400 [in6m_free taskq]
100017 D - 0xfffff8000446b200 [inm_free taskq]
100024 D - 0xfffff8000446b100 [firmware taskq]
100028 D - 0xfffff8000446b000 [crypto_0]
100029 D - 0xfffff8000446b000 [crypto_1]
100044 D - 0xfffff80004652d00 [vtnet0 rxq 0]
100045 D - 0xfffff80004652c00 [vtnet0 txq 0]
100046 D - 0xfffff80004652b00 [vtnet0 rxq 1]
100047 D - 0xfffff80004652a00 [vtnet0 txq 1]
100049 D vtbslp 0xfffff8000465cb00 [virtio_balloon]
100053 D - 0xfffff80004652900 [mca taskq]
100058 D - 0xffffffff81d620e1 [deadlkres]
100063 D - 0xfffff80004baae00 [acpi_task_0]
100064 D - 0xfffff80004baae00 [acpi_task_1]
100065 D - 0xfffff80004baae00 [acpi_task_2]
100066 D - 0xfffff80004652e00 [CAM taskq]
db> show all locks
Process 5304 (syz-executor.0) thread 0xfffffe0094e19e00 (110701)
exclusive rm pf rulesets (pf rulesets) r = 0 (0xffffffff82ec74a0) locked @ /syzkaller/managers/main/kernel/sys/netpfil/pf/pf_ioctl.c:2126
db> show malloc
Type InUse MemUse Requests
pf_hash 5 11524K 5
devbuf 4216 4340K 4244
tcp_hpts 5 3201K 5
vtbuf 24 1968K 46
sysctloid 30605 1795K 30671
kobj 329 1316K 490
newblk 5 1025K 28282
vfscache 3 1025K 3
pcb 27 539K 2299
inodedep 8 515K 8196
ufs_quota 1 512K 1
vfs_hash 1 512K 1
callout 2 512K 2
intr 4 472K 4
subproc 128 248K 5382
acpica 1674 184K 58097
vnet_data 1 168K 1
tidhash 3 141K 3
filedesc 18 137K 8835
pagedep 9 130K 10469
tfo_ccache 1 128K 1
sem 4 106K 4
DEVFS1 105 105K 122
linker 278 100K 313
bus 983 80K 3361
mtx_pool 2 72K 2
syncache 1 68K 1
acpitask 1 64K 1
ddb_capture 1 64K 1
module 503 63K 503
umtx 342 43K 342
kdtrace 198 40K 16010
BPF 22 36K 22
temp 35 33K 2406
hostcache 1 32K 1
shm 1 32K 11
DEVFS3 124 31K 134
msg 4 30K 4
vmem 3 26K 5
gtaskqueue 18 26K 18
kbdmux 6 22K 6
DEVFS_RULE 56 20K 56
ifaddr 69 20K 69
ufs_mount 5 17K 6
proc 3 17K 3
tty 16 16K 16
ithread 99 16K 99
ksem 19 16K 5103
bus-sc 32 14K 1595
lltable 43 14K 79
KTRACE 100 13K 100
ifnet 7 13K 7
ether_multi 152 13K 162
kenv 93 12K 93
eventhandler 129 11K 129
pf_rule 10 10K 113
GEOM 60 10K 491
rman 82 10K 423
in6_multi 65 9K 65
bmsafemap 2 9K 5935
UART 12 9K 12
devstat 4 9K 4
sctp_timw 32 8K 32
rpc 2 8K 2
shmfd 1 8K 7
pfs_vncache 1 8K 1
pfs_nodes 20 8K 20
audit_evclass 236 8K 294
cred 28 7K 443
sglist 5 7K 5
CAM DEV 3 6K 510
kqueue 57 6K 5315
plimit 21 6K 381
CAM queue 5 6K 1528
taskqueue 48 6K 48
ufs_dirhash 24 5K 24
pf_ifnet 11 5K 79
DEVFSP 72 5K 76
UMA 260 5K 260
vt 11 5K 11
memdesc 1 4K 1
MCA 32 4K 32
ioctlops 1 4K 406
kcovinfo 64 4K 68
evdev 4 4K 4
routetbl 24 4K 312
pwddesc 55 4K 5307
lockf 31 4K 78
hhook 13 4K 13
session 25 4K 40
terminal 11 3K 11
acpisem 22 3K 22
proc-args 44 3K 594
uidinfo 4 3K 14
local_apic 1 2K 1
io_apic 1 2K 1
fpukern_ctx 2 2K 2
ipsec-saq 2 2K 2
selfd 31 2K 90197
ip6ndp 12 2K 14
Unitno 29 2K 54
sctp_ifa 13 2K 14
CAM XPT 22 2K 543
in_multi 6 2K 8
ipsecpolicy 2 2K 2
acpidev 20 2K 20
select 10 2K 54
msi 9 2K 9
clone 9 2K 9
tun 7 2K 7
softdep 1 1K 1
sahead 1 1K 1
secasvar 1 1K 1
nhops 6 1K 8
vnodemarker 2 1K 64
NFSD session 1 1K 1
CAM periph 4 1K 271
ipsec 3 1K 3
sctp_ifn 6 1K 14
dirrem 3 1K 5212
mld 6 1K 6
igmp 6 1K 6
toponodes 6 1K 6
isadev 6 1K 6
mount 16 1K 89
pci_link 10 1K 10
mkdir 5 1K 8812
crypto 4 1K 4
encap_export_host 12 1K 12
newdirblk 4 1K 4406
diradd 4 1K 5245
inpcbpolicy 16 1K 8536
pfil 4 1K 4
CAM SIM 2 1K 2
cdev 2 1K 2
sctp_atcl 1 1K 1349
freefile 3 1K 5206
chacha20random 1 1K 1
osd 3 1K 10
vnodes 1 1K 1
ktls 1 1K 1
procdesc 2 1K 12
NFSD lckfile 1 1K 1
NFSD V4client 1 1K 1
DEVFS 9 1K 10
feeder 7 1K 7
tcpfunc 3 1K 3
loginclass 3 1K 6
prison 6 1K 6
aesni_data 2 1K 2
CAM dev queue 2 1K 2
CAM I/O Scheduler 1 1K 1
apmdev 1 1K 1
atkbddev 2 1K 2
CAM path 4 1K 1034
freework 1 1K 13730
pmchooks 1 1K 1
soname 4 1K 4191
nexusdev 6 1K 6
sctp_vrf 1 1K 1
entropy 2 1K 39
vnet 1 1K 1
pmc 1 1K 1
acpiintr 1 1K 1
sctp_atky 1 1K 1512
cpus 2 1K 2
vnet_data_free 1 1K 1
iov 2 1K 20708
Per-cpu 1 1K 1
filecaps 2 1K 92
sctp_athm 1 1K 1351
p1003.1b 1 1K 1
pf_table 0 0K 72
pf_altq 0 0K 0
pf_osfp 0 0K 0
pf_temp 0 0K 0
mqdata 0 0K 0
sctp_mcore 0 0K 0
sctp_socko 0 0K 561
sctp_iter 0 0K 9
sctp_mvrf 0 0K 0
sctp_cpal 0 0K 0
sctp_cmsg 0 0K 0
sctp_stre 0 0K 0
sctp_athi 0 0K 0
sctp_a_it 0 0K 9
sctp_aadr 0 0K 0
sctp_stro 0 0K 218
sctp_stri 0 0K 138
sctp_map 0 0K 436
ath_hal 0 0K 0
athdev 0 0K 0
ata_pci 0 0K 0
madt_table 0 0K 2
smartpqi 0 0K 0
ata_dma 0 0K 0
ata_generic 0 0K 0
pvscsi 0 0K 0
amr 0 0K 0
scsi_da 0 0K 69
ata_da 0 0K 0
scsi_ch 0 0K 0
iavf 0 0K 0
ixl 0 0K 0
scsi_cd 0 0K 0
USBdev 0 0K 0
USB 0 0K 0
AHCI driver 0 0K 0
agp 0 0K 0
ice-resmgr 0 0K 0
ice-osdep 0 0K 0
ice 0 0K 0
axgbe 0 0K 0
nvme_da 0 0K 0
xen_intr 0 0K 0
acpipwr 0 0K 0
xen_hvm 0 0K 0
legacydrv 0 0K 0
qpidrv 0 0K 0
twsbuf 0 0K 0
twe_commands 0 0K 0
dmar_idpgtbl 0 0K 0
dmar_dom 0 0K 0
dmar_ctx 0 0K 0
twa_commands 0 0K 0
tcp_log_dev 0 0K 2
midi buffers 0 0K 0
isci 0 0K 0
iommu_dmamap 0 0K 0
mixer 0 0K 0
hyperv_socket 0 0K 0
bxe_ilt 0 0K 0
xenbus 0 0K 0
ac97 0 0K 0
hdacc 0 0K 0
vm_fictitious 0 0K 0
hdac 0 0K 0
hdaa 0 0K 0
acpi_perf 0 0K 0
acpicmbat 0 0K 0
SIIS driver 0 0K 0
CAM CCB 0 0K 64620
UMAHash 0 0K 0
PUC 0 0K 0
ppbusdev 0 0K 0
vm_pgdata 0 0K 0
jblocks 0 0K 0
savedino 0 0K 15236
sentinel 0 0K 0
jfsync 0 0K 0
jtrunc 0 0K 0
sbdep 0 0K 29
jsegdep 0 0K 0
jseg 0 0K 0
jfreefrag 0 0K 0
jfreeblk 0 0K 0
jnewblk 0 0K 0
jmvref 0 0K 0
jremref 0 0K 0
jaddref 0 0K 0
freedep 0 0K 0
freeblks 0 0K 5761
freefrag 0 0K 9
allocindir 0 0K 0
indirdep 0 0K 14085
allocdirect 0 0K 0
ufs_trim 0 0K 0
mactemp 0 0K 0
audit_trigger 0 0K 0
audit_pipe_presel 0 0K 0
audit_pipeent 0 0K 0
audit_pipe 0 0K 0
audit_evname 0 0K 0
audit_bsm 0 0K 0
audit_gidset 0 0K 0
audit_text 0 0K 0
audit_path 0 0K 0
audit_data 0 0K 0
audit_cred 0 0K 0
xform 0 0K 0
agtiapi_MemAlloc malloc 0 0K 0
NLM 0 0K 0
ipsec-spdcache 0 0K 0
ipsec-reg 0 0K 0
ipsec-misc 0 0K 0
ipsecrequest 0 0K 0
ip6opt 0 0K 17
ip6_msource 0 0K 0
ip6_moptions 0 0K 0
in6_mfilter 0 0K 0
frag6 0 0K 0
tcplog 0 0K 0
tcp_hwpace 0 0K 0
osti_cacheable 0 0K 0
LRO 0 0K 0
newreno data 0 0K 0
ip_msource 0 0K 0
ip_moptions 0 0K 2
in_mfilter 0 0K 0
ipid 0 0K 0
80211scan 0 0K 0
80211ratectl 0 0K 0
80211power 0 0K 0
80211nodeie 0 0K 0
80211node 0 0K 0
80211mesh_gt 0 0K 0
80211mesh_rt 0 0K 0
80211perr 0 0K 0
80211prep 0 0K 0
80211preq 0 0K 0
80211dfs 0 0K 0
80211crypto 0 0K 0
80211vap 0 0K 0
iflib 0 0K 0
vlan 0 0K 0
gif 0 0K 0
ifdescr 0 0K 0
zlib 0 0K 0
fadvise 0 0K 0
VN POLL 0 0K 1
tempbuff 0 0K 0
statfs 0 0K 4591
namei_tracker 0 0K 8
export_host 0 0K 0
cl_savebuf 0 0K 5
tempbuff 0 0K 0
ag_tgt_map_t malloc 0 0K 0
ag_slr_map_t malloc 0 0K 0
lDevFlags * malloc 0 0K 0
tiDeviceHandle_t * malloc 0 0K 0
ag_portal_data_t malloc 0 0K 0
ag_device_t malloc 0 0K 0
STLock malloc 0 0K 0
CCB List 0 0K 0
sr_iov 0 0K 0
OCS 0 0K 0
OCS 0 0K 0
nvme 0 0K 0
nvd 0 0K 0
netmap 0 0K 0
mwldev 0 0K 0
MVS driver 0 0K 0
CAM ccb queue 0 0K 0
mrsasbuf 0 0K 0
biobuf 0 0K 0
aios 0 0K 0
lio 0 0K 0
acl 0 0K 0
mpt_user 0 0K 0
mbuf_tag 0 0K 127
accf 0 0K 0
pts 0 0K 0
eventfd 0 0K 0
Witness 0 0K 0
stack 0 0K 0
mps_user 0 0K 0
MPSSAS 0 0K 0
mps 0 0K 0
mpr_user 0 0K 0
MPRSAS 0 0K 0
sbuf 0 0K 288
mpr 0 0K 0
firmware 0 0K 0
compressor 0 0K 0
mfibuf 0 0K 0
SWAP 0 0K 0
md_sectors 0 0K 0
md_disk 0 0K 0
sysctltmp 0 0K 623
sysctl 0 0K 1
malodev 0 0K 0
ekcd 0 0K 0
dumper 0 0K 0
sendfile 0 0K 0
rctl 0 0K 0
LED 0 0K 0
ix_sriov 0 0K 0
aacraidcam 0 0K 0
cache 0 0K 0
ix 0 0K 0
ipsbuf 0 0K 0
prison_racct 0 0K 0
Fail Points 0 0K 0
sigio 0 0K 1
filedesc_to_leader 0 0K 0
pwd 0 0K 0
tty console 0 0K 0
iirbuf 0 0K 0
aacraid_buf 0 0K 0
aaccam 0 0K 0
aacbuf 0 0K 0
zstd 0 0K 0
nvlist 0 0K 0
SCSI ENC 0 0K 0
isofs_node 0 0K 0
isofs_mount 0 0K 0
tr_raid5_data 0 0K 0
tr_raid1e_data 0 0K 0
tr_raid1_data 0 0K 0
tr_raid0_data 0 0K 0
tr_concat_data 0 0K 0
md_sii_data 0 0K 0
md_promise_data 0 0K 0
md_nvidia_data 0 0K 0
md_jmicron_data 0 0K 0
md_intel_data 0 0K 0
md_ddf_data 0 0K 0
raid_data 0 0K 72
geom_flashmap 0 0K 0
tmpfs dir 0 0K 0
tmpfs name 0 0K 0
tmpfs mount 0 0K 0
NFS FHA 0 0K 0
newnfsmnt 0 0K 0
newnfsclient_req 0 0K 0
NFSCL layrecall 0 0K 0
NFSCL session 0 0K 0
NFSCL sockreq 0 0K 0
NFSCL devinfo 0 0K 0
NFSCL flayout 0 0K 0
NFSCL layout 0 0K 0
NFSD rollback 0 0K 0
NFSCL diroffdiroff 0 0K 0
NEWdirectio 0 0K 0
NEWNFSnode 0 0K 0
NFSCL lck 0 0K 0
NFSCL lckown 0 0K 0
NFSCL client 0 0K 0
NFSCL deleg 0 0K 0
NFSCL open 0 0K 0
NFSCL owner 0 0K 0
NFS fh 0 0K 0
NFS req 0 0K 0
NFSD usrgroup 0 0K 0
NFSD string 0 0K 0
NFSD V4lock 0 0K 0
NFSD V4state 0 0K 0
NFSD srvcache 0 0K 0
msdosfs_fat 0 0K 0
msdosfs_mount 0 0K 0
msdosfs_node 0 0K 0
DEVFS4 0 0K 0
DEVFS2 0 0K 0
gntdev 0 0K 0
privcmd_dev 0 0K 0
evtchn_dev 0 0K 0
xenstore 0 0K 0
SCSI sa 0 0K 0
scsi_pass 0 0K 0
xnb 0 0K 0
xbbd 0 0K 0
xbd 0 0K 0
Balloon 0 0K 0
sysmouse 0 0K 0
vtfont 0 0K 0
ciss_data 0 0K 0
db> show uma
Zone Size Used Free Requests Sleeps Bucket Total Mem XFree
mbuf_jumbo_page 4096 8320 986 1594041 0 254 38117376 0
RADIX NODE 144 18341 192 220965 0 62 2668752 0
pbuf 2632 0 973 0 0 2 2560936 0
mbuf 256 8674 896 2418045 0 254 2449920 0
BUF TRIE 144 229 13239 51516 0 62 1939392 0
malloc-384 384 4141 9 4142 0 30 1593600 0
malloc-4096 4096 332 5 1088 0 2 1380352 0
malloc-128 128 10574 59 11245 0 126 1361024 0
UMA Slabs 0 112 10526 19 10526 0 126 1181040 0
mbuf_cluster 2048 525 1 525 0 254 1077248 0
FFS inode 1128 511 28 5717 0 8 607992 0
socket 944 30 338 10658 0 254 347392 0
VM OBJECT 264 1150 80 83158 0 30 324720 0
256 Bucket 2048 139 17 18024 0 8 319488 0
VNODE 488 547 85 5755 0 30 308416 0
THREAD 1792 142 29 10702 0 8 306432 0
malloc-65536 65536 4 0 4 0 1 262144 0
malloc-16384 16384 12 4 4419 0 1 262144 0
malloc-4096 4096 56 6 5311 0 2 253952 0
malloc-2048 2048 2 120 64658 0 8 249856 0
malloc-32768 32768 0 7 42 0 1 229376 0
malloc-32768 32768 1 6 13327 0 1 229376 0
DEVCTL 1024 12 200 129 0 0 217088 0
malloc-64 64 3237 39 3270 0 254 209664 0
malloc-16 16 12688 312 12804 0 254 208000 0
malloc-65536 65536 3 0 3 0 1 196608 0
g_bio 408 0 480 255782 0 30 195840 0
UMA Zones 768 232 2 232 0 16 179712 0
udplite_inpcb 488 5 339 7108 0 254 167872 0
MAP ENTRY 96 1363 359 293381 0 126 165312 0
FFS2 dinode 256 511 134 5717 0 62 165120 0
malloc-256 256 27 603 28448 0 62 161280 0
malloc-128 128 1207 33 27523 0 126 158720 0
malloc-32 32 4805 109 4887 0 254 157248 0
S VFS Cache 104 1011 354 6360 0 126 141960 0
mbuf_packet 256 11 514 4566 0 254 134400 0
malloc-65536 65536 0 2 72 0 1 131072 0
malloc-1024 1024 122 6 141 0 16 131072 0
vmem btag 56 2132 88 2132 0 254 124320 0
ksiginfo 112 57 987 1350 0 126 116928 0
VMSPACE 2544 32 10 5285 0 4 106848 0
sctp_raddr 736 0 132 554 0 254 97152 0
malloc-256 256 231 144 26540 0 62 96000 0
PROC 1320 54 18 5306 0 8 95040 0
128 Bucket 1024 56 35 1083 0 16 93184 0
UMA Kegs 384 218 5 218 0 30 85632 0
clpbuf 2632 0 32 33 0 16 84224 0
filedesc0 1072 55 22 5307 0 8 82544 0
sctp_asoc 2288 0 35 218 0 254 80080 0
malloc-4096 4096 17 2 21 0 2 77824 0
64 Bucket 512 88 64 11381 0 30 77824 0
malloc-256 256 153 147 21643 0 62 76800 0
malloc-64 64 638 559 11354 0 254 76608 0
malloc-128 128 324 265 13132 0 126 75392 0
malloc-65536 65536 0 1 2 0 1 65536 0
malloc-65536 65536 1 0 1 0 1 65536 0
malloc-65536 65536 0 1 124 0 1 65536 0
malloc-65536 65536 1 0 1 0 1 65536 0
malloc-65536 65536 0 1 8 0 1 65536 0
malloc-128 128 192 273 10209 0 126 59520 0
tcpcb 1048 7 48 1177 0 254 57640 0
malloc-8192 8192 3 4 33 0 1 57344 0
malloc-256 256 89 121 1309 0 62 53760 0
malloc-4096 4096 12 1 23 0 2 53248 0
malloc-128 128 366 37 366 0 126 51584 0
malloc-256 256 62 133 16461 0 62 49920 0
32 Bucket 256 63 132 9855 0 62 49920 0
malloc-2048 2048 5 19 524 0 8 49152 0
sctp_ep 1280 1 35 928 0 254 46080 0
malloc-2048 2048 2 20 929 0 8 45056 0
pcpu-8 8 4644 988 7183 0 254 45056 0
malloc-64 64 567 126 1688 0 254 44352 0
malloc-384 384 30 80 9596 0 30 42240 0
NAMEI 1024 0 40 34332 0 16 40960 0
malloc-8192 8192 5 0 5 0 1 40960 0
malloc-8192 8192 4 1 97 0 1 40960 0
malloc-1024 1024 12 28 1680 0 16 40960 0
malloc-64 64 106 524 95527 0 254 40320 0
Files 80 198 302 28484 0 126 40000 0
tcp_inpcb 488 7 73 1177 0 254 39040 0
malloc-384 384 94 6 96 0 30 38400 0
malloc-256 256 7 143 6542 0 62 38400 0
DIRHASH 1024 34 2 34 0 16 36864 0
malloc-64 64 308 259 16528 0 254 36288 0
malloc-128 128 29 250 8495 0 126 35712 0
malloc-32768 32768 1 0 1 0 1 32768 0
malloc-32768 32768 1 0 1 0 1 32768 0
malloc-32768 32768 0 1 117 0 1 32768 0
malloc-16384 16384 2 0 8 0 1 32768 0
malloc-16384 16384 1 1 154 0 1 32768 0
malloc-8192 8192 4 0 4 0 1 32768 0
malloc-2048 2048 14 2 16 0 8 32768 0
pcpu-64 64 456 56 456 0 254 32768 0
malloc-384 384 53 27 197 0 30 30720 0
pipe 744 22 18 497 0 16 29760 0
16 Bucket 144 53 143 1291 0 62 28224 0
KNOTE 160 28 147 364193 0 62 28000 0
8 Bucket 80 62 288 4644 0 126 28000 0
TURNSTILE 136 172 17 172 0 62 25704 0
malloc-4096 4096 4 2 4793 0 2 24576 0
malloc-1024 1024 2 22 46 0 16 24576 0
malloc-1024 1024 16 8 22 0 16 24576 0
malloc-512 512 10 38 203 0 30 24576 0
PWD 32 18 738 4496 0 254 24192 0
ttyinq 160 135 15 300 0 62 24000 0
tcp_rack_pcb 704 1 32 549 0 16 23232 0
ttyoutq 256 72 18 160 0 62 23040 0
malloc-256 256 72 18 821 0 62 23040 0
malloc-2048 2048 5 5 206 0 8 20480 0
malloc-512 512 3 37 184 0 30 20480 0
malloc-32 32 43 587 5123 0 254 20160 0
2 Bucket 32 61 569 3801 0 254 20160 0
sctp_chunk 152 0 130 447 0 254 19760 0
SLEEPQUEUE 88 172 52 172 0 126 19712 0
Mountpoints 2752 2 5 2 0 4 19264 0
malloc-384 384 20 30 59 0 30 19200 0
malloc-256 256 31 44 80 0 62 19200 0
malloc-16384 16384 1 0 1 0 1 16384 0
malloc-8192 8192 2 0 2 0 1 16384 0
malloc-8192 8192 2 0 2 0 1 16384 0
malloc-8192 8192 2 0 2 0 1 16384 0
malloc-8192 8192 0 2 2 0 1 16384 0
malloc-2048 2048 2 6 521 0 8 16384 0
malloc-1024 1024 13 3 13 0 16 16384 0
malloc-1024 1024 11 5 1402 0 16 16384 0
udpcb 32 7 497 7299 0 254 16128 0
malloc-32 32 302 202 1244 0 254 16128 0
malloc-32 32 84 420 11428 0 254 16128 0
vtnet_tx_hdr 24 0 668 799532 0 254 16032 0
malloc-128 128 94 30 186 0 126 15872 0
tcp_bbr_pcb 832 0 18 185 0 16 14976 0
malloc-4096 4096 3 0 3 0 2 12288 0
malloc-2048 2048 3 3 102 0 8 12288 0
malloc-64 64 60 129 701 0 254 12096 0
4 Bucket 48 7 245 199 0 254 12096 0
malloc-128 128 64 29 157 0 126 11904 0
udp_inpcb 488 2 22 191 0 254 11712 0
unpcb 256 11 34 1167 0 254 11520 0
cpuset 104 8 85 79 0 126 9672 0
malloc-2048 2048 1 3 13 0 8 8192 0
malloc-1024 1024 8 0 8 0 16 8192 0
malloc-512 512 7 9 7 0 30 8192 0
malloc-512 512 2 14 510 0 30 8192 0
pf tags 104 1 77 6 0 126 8112 0
rtentry 176 30 16 33 0 62 8096 0
PGRP 88 25 67 40 0 126 8096 0
rl_entry 40 80 122 80 0 254 8080 0
sctp_stream_msg_out 112 0 72 14 0 254 8064 0
sctp_laddr 48 0 168 212 0 254 8064 0
syncache 168 0 48 4 0 254 8064 0
malloc-64 64 27 99 86 0 254 8064 0
malloc-64 64 18 108 397 0 254 8064 0
malloc-32 32 111 141 1863 0 254 8064 0
malloc-32 32 26 226 71 0 254 8064 0
malloc-32 32 75 177 1405 0 254 8064 0
malloc-16 16 21 479 512 0 254 8000 0
malloc-16 16 33 467 2971 0 254 8000 0
malloc-16 16 32 468 291 0 254 8000 0
malloc-16 16 207 293 1924 0 254 8000 0
malloc-16 16 4 496 6 0 254 8000 0
malloc-16 16 258 242 1623 0 254 8000 0
malloc-16 16 26 474 26330 0 254 8000 0
tcp_bbr_map 128 0 62 351 0 126 7936 0
tcp_rack_map 120 2 64 20 0 126 7920 0
sctp_readq 152 0 52 12 0 254 7904 0
ripcb 488 2 14 60 0 254 7808 0
itimer 352 0 22 4 0 30 7744 0
kenv 258 3 27 1042 0 30 7740 0
routing nhops 256 27 3 33 0 62 7680 0
FPU_save_area 832 1 8 1 0 16 7488 0
domainset 40 0 126 67 0 254 5040 0
epoch_record pcpu 256 4 12 4 0 62 4096 0
malloc-4096 4096 0 1 3 0 2 4096 0
malloc-1024 1024 1 3 7 0 16 4096 0
malloc-512 512 1 7 2 0 30 4096 0
pcpu-16 16 7 249 7 0 254 4096 0
tcp_log_bucket 176 0 23 3 0 62 4048 0
hostcache 96 1 41 1 0 254 4032 0
malloc-32 32 4 122 137 0 254 4032 0
tcp_log_node 120 0 33 4 0 126 3960 0
UMA Slabs 1 176 10 12 10 0 62 3872 0
malloc-384 384 0 10 309 0 30 3840 0
malloc-384 384 1 9 1 0 30 3840 0
tcp_log 416 0 9 2 0 254 3744 0
mqnode 416 3 6 3 0 30 3744 0
KMAP ENTRY 96 12 27 12 0 0 3744 0
vmem 1856 1 1 1 0 8 3712 0
SMR CPU 32 2 29 2 0 254 992 0
SMR SHARED 24 2 29 2 0 254 744 0
FFS1 dinode 128 0 0 0 0 126 0 0
swblk 136 0 0 0 0 62 0 0
swpctrie 144 0 0 0 0 62 0 0
sctp_asconf_ack 48 0 0 0 0 254 0 0
sctp_asconf 40 0 0 0 0 254 0 0
pf state scrubs 40 0 0 0 0 254 0 0
pf frag entries 40 0 0 0 0 254 0 0
pf frags 248 0 0 0 0 62 0 0
pf table entries 160 0 0 0 0 62 0 0
pf table entry counters 64 0 0 0 0 254 0 0
pf source nodes 136 0 0 0 0 254 0 0
pf state keys 88 0 0 0 0 126 0 0
pf states 296 0 0 0 0 254 0 0
pf mtags 48 0 0 0 0 254 0 0
IPsec SA lft_c 16 0 0 0 0 254 0 0
tcpreass 48 0 0 0 0 254 0 0
tfo_ccache_entries 80 0 0 0 0 126 0 0
tfo 4 0 0 0 0 254 0 0
sackhole 32 0 0 0 0 254 0 0
tcptw 88 0 0 0 0 254 0 0
ipq 56 0 0 0 0 254 0 0
AIOLIO 272 0 0 0 0 30 0 0
AIOCB 552 0 0 0 0 16 0 0
AIOP 32 0 0 0 0 254 0 0
AIO 208 0 0 0 0 62 0 0
NCLNODE 592 0 0 0 0 16 0 0
TMPFS node 224 0 0 0 0 62 0 0
mqnotifier 216 0 0 0 0 62 0 0
mvdata 64 0 0 0 0 254 0 0
mqueue 248 0 0 0 0 62 0 0
LTS VFS Cache 360 0 0 0 0 30 0 0
L VFS Cache 320 0 0 0 0 30 0 0
STS VFS Cache 144 0 0 0 0 62 0 0
cryptop 280 0 0 0 0 30 0 0
IOMMU_MAP_ENTRY 120 0 0 0 0 126 0 0
ktls_session 192 0 0 0 0 62 0 0
mbuf_jumbo_16k 16384 0 0 0 0 254 0 0
mbuf_jumbo_9k 9216 0 0 0 0 254 0 0
audit_record 1280 0 0 0 0 8 0 0
MAC labels 40 0 0 0 0 254 0 0
vnpbuf 2632 0 0 0 0 64 0 0
mdpbuf 2632 0 0 0 0 3 0 0
nfspbuf 2632 0 0 0 0 16 0 0
swwbuf 2632 0 0 0 0 8 0 0
swrbuf 2632 0 0 0 0 16 0 0
umtx_shm 88 0 0 0 0 126 0 0
umtx pi 96 0 0 0 0 126 0 0
rangeset pctrie nodes 144 0 0 0 0 62 0 0
malloc-32768 32768 0 0 0 0 1 0 0
malloc-32768 32768 0 0 0 0 1 0 0
malloc-32768 32768 0 0 0 0 1 0 0
malloc-16384 16384 0 0 0 0 1 0 0
malloc-16384 16384 0 0 0 0 1 0 0
malloc-16384 16384 0 0 0 0 1 0 0
malloc-16384 16384 0 0 0 0 1 0 0
malloc-4096 4096 0 0 0 0 2 0 0
malloc-512 512 0 0 0 0 30 0 0
malloc-512 512 0 0 0 0 30 0 0
malloc-512 512 0 0 0 0 30 0 0
malloc-384 384 0 0 0 0 30 0 0
pcpu-32 32 0 0 0 0 254 0 0
pcpu-4 4 0 0 0 0 254 0 0
fakepg 104 0 0 0 0 126 0 0
UMA Hash 256 0 0 0 0 62 0 0
---
This report is generated by a bot. It may contain errors.
See https://goo.gl/tpsmEJ for more information about syzbot.
syzbot engineers can be reached at syzk...@googlegroups.com.
syzbot will keep track of this issue. See:
https://goo.gl/tpsmEJ#status for how to communicate with syzbot.
syzbot
Jan 21, 2021, 5:18:20 PM1/21/21
to syzkaller-f...@googlegroups.com
syzbot has found a reproducer for the following issue on:
HEAD commit: ff751ee0 Remove FirstBurstLength limit for software iSCSI.
git tree: https://github.com/freebsd/freebsd-src.git main
console output: https://syzkaller.appspot.com/x/log.txt?x=1629d7e7500000
dashboard link: https://syzkaller.appspot.com/bug?extid=e9632d7ad17398f0bd8f
syz repro: https://syzkaller.appspot.com/x/repro.syz?x=13eac0a4d00000
C reproducer: https://syzkaller.appspot.com/x/repro.c?x=11920358d00000
IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+e9632d...@syzkaller.appspotmail.com
panic: pfi_dynaddr_setup: dyn is 0x20000100
cpuid = 0
time = 1611267335
KDB: stack backtrace:
db_trace_self_wrapper() at db_trace_self_wrapper+0x47/frame 0xfffffe005d7a0100
vpanic() at vpanic+0x1c7/frame 0xfffffe005d7a0160
panic() at panic+0x43/frame 0xfffffe005d7a01c0
pfi_dynaddr_setup() at pfi_dynaddr_setup+0x580/frame 0xfffffe005d7a0250
pfioctl() at pfioctl+0x8178/frame 0xfffffe005d7a0780
devfs_ioctl() at devfs_ioctl+0x14e/frame 0xfffffe005d7a07e0
VOP_IOCTL_APV() at VOP_IOCTL_APV+0x78/frame 0xfffffe005d7a0810
vn_ioctl() at vn_ioctl+0x278/frame 0xfffffe005d7a0930
devfs_ioctl_f() at devfs_ioctl_f+0x47/frame 0xfffffe005d7a0970
kern_ioctl() at kern_ioctl+0x3cd/frame 0xfffffe005d7a09e0
sys_ioctl() at sys_ioctl+0x265/frame 0xfffffe005d7a0ab0
amd64_syscall() at amd64_syscall+0x247/frame 0xfffffe005d7a0bf0
fast_syscall_common() at fast_syscall_common+0xf8/frame 0xfffffe005d7a0bf0
--- syscall (0, FreeBSD ELF64, nosys), rip = 0x2b3d8a, rsp = 0x7fffffffea58, rbp = 0x7fffffffea80 ---
KDB: enter: panic
[ thread pid 785 tid 100108 ]
rdx 0xffffffff81911ddf
rbx 0
rsp 0xfffffe005d7a00e0
rbp 0xfffffe005d7a0100
rsi 0x1
rdi 0
ABI: FreeBSD ELF64
flag: 0x10004000 flag2: 0
arguments: ./syz-executor321611379
(map 0xfffffe0094e463e0)
(map.pmap 0xfffffe0094e464a0)
(pmap 0xfffffe0094e46500)
threads: 1
100108 Run CPU 0 syz-executor3216113
783 781 783 0 Ss pause 0xfffff800185c2b00 csh
781 694 781 0 Ss select 0xfffff80004f6a240 sshd
749 748 24 0 S+ nanslp 0xffffffff82532ee0 sleep
748 1 24 0 S+ wait 0xfffff80004ee4528 sh
698 1 698 0 Ss nanslp 0xffffffff82532ee1 cron
694 1 694 0 Ss select 0xfffff80004f6a5c0 sshd
507 1 507 0 Ss select 0xfffff80004e7edc0 syslogd
436 1 436 0 Ss select 0xfffff80004f6a740 devd
435 1 435 65 Ss select 0xfffff80004f6a640 dhclient
350 1 350 0 Ss select 0xfffff80004f6a6c0 dhclient
347 1 347 0 Ss select 0xfffff80004e7ec40 dhclient
16 0 0 0 DL pftm 0xffffffff82cb0430 [pf purge]
100004 Run CPU 1 [idle: cpu1]
exclusive rm pf rulesets (pf rulesets) r = 0 (0xffffffff82d054a0) locked @ /syzkaller/managers/main/kernel/sys/netpfil/pf/pf_ioctl.c:2126
vfscache 3 1025K 3
pcb 23 539K 77
inodedep 20 520K 85
linker 278 100K 301
msg 4 30K 4
DEVFS3 120 30K 130
umtx 216 27K 216
KTRACE 100 13K 100
ifaddr 32 12K 32
rpc 2 8K 2
shmfd 1 8K 1
UMA 260 5K 260
ifnet 3 5K 3
filedesc 1 4K 1
evdev 4 4K 4
routetbl 15 4K 15
hhook 13 4K 13
ether_multi 40 4K 50
lltable 11 4K 11
pf_ifnet 5 3K 6
in6_multi 25 3K 25
kqueue 46 3K 788
pwddesc 46 3K 786
uidinfo 3 3K 8
proc-args 39 2K 489
lockf 15 2K 22
ipsec 3 1K 3
diradd 6 1K 36
indirdep 3 1K 3
nhops 6 1K 6
crypto 4 1K 4
ip6ndp 4 1K 5
encap_export_host 12 1K 12
in_multi 2 1K 4
dirrem 1 1K 28
mld 2 1K 2
igmp 2 1K 2
tcpfunc 3 1K 3
loginclass 3 1K 7
procdesc 1 1K 6
pmchooks 1 1K 1
DEVFSP 2 1K 2
soname 4 1K 3159
filecaps 4 1K 66
nexusdev 6 1K 6
tun 3 1K 3
sctp_vrf 1 1K 1
entropy 2 1K 35
sctp_athm 1 1K 1
p1003.1b 1 1K 1
sctp_mcore 0 0K 0
sctp_socko 0 0K 1
sctp_iter 0 0K 3
sctp_mvrf 0 0K 0
sctp_timw 0 0K 0
sctp_aadr 0 0K 0
sctp_stro 0 0K 0
sctp_stri 0 0K 0
sctp_map 0 0K 0
pf_table 0 0K 0
tcp_log_dev 0 0K 0
mkdir 0 0K 16
freefile 0 0K 25
freeblks 0 0K 25
freefrag 0 0K 7
allocindir 0 0K 0
tempbuff 0 0K 0
statfs 0 0K 195
namei_tracker 0 0K 0
export_host 0 0K 0
cl_savebuf 0 0K 6
mbuf_jumbo_page 4096 8320 548 13264 0 254 36323328 0
pbuf 2632 0 989 0 0 2 2603048 0
mbuf 256 8578 572 15073 0 254 2342400 0
BUF TRIE 144 175 13293 515 0 62 1939392 0
malloc-128 128 10567 35 11112 0 126 1357056 0
UMA Slabs 0 112 9655 26 9655 0 126 1084272 0
FFS inode 1128 483 14 509 0 8 560616 0
RADIX NODE 144 2068 169 20070 0 62 322128 0
VNODE 488 513 39 541 0 30 269376 0
256 Bucket 2048 100 16 9855 0 8 237568 0
DEVCTL 1024 0 212 113 0 0 217088 0
malloc-64 64 3236 40 3262 0 254 209664 0
malloc-4096 4096 47 3 790 0 2 204800 0
malloc-16 16 12672 78 12774 0 254 204000 0
malloc-128 128 1164 45 27448 0 126 154752 0
malloc-256 256 572 13 744 0 62 149760 0
malloc-65536 65536 0 2 46 0 1 131072 0
malloc-65536 65536 0 2 124 0 1 131072 0
malloc-65536 65536 0 2 8 0 1 131072 0
FFS2 dinode 256 483 27 508 0 62 130560 0
malloc-1024 1024 118 6 129 0 16 126976 0
ksiginfo 112 38 1006 53 0 126 116928 0
MAP ENTRY 96 836 382 38037 0 126 116928 0
vmem btag 56 1888 44 1888 0 254 108192 0
S VFS Cache 104 965 49 1004 0 126 105456 0
malloc-2048 2048 2 40 1930 0 8 86016 0
PROC 1320 45 9 785 0 8 71280 0
filedesc0 1072 46 17 786 0 8 67536 0
mbuf_cluster 2048 30 2 30 0 254 65536 0
malloc-16384 16384 4 0 4 0 1 65536 0
g_bio 408 0 150 5041 0 30 61200 0
128 Bucket 1024 37 22 559 0 16 60416 0
malloc-256 256 190 20 508 0 62 53760 0
malloc-4096 4096 12 1 13 0 2 53248 0
malloc-8192 8192 4 2 97 0 1 49152 0
malloc-2048 2048 4 20 512 0 8 49152 0
malloc-256 256 140 40 490 0 62 46080 0
malloc-64 64 550 143 2238 0 254 44352 0
malloc-64 64 523 170 1640 0 254 44352 0
malloc-128 128 301 40 526 0 126 43648 0
32 Bucket 256 45 120 3373 0 62 42240 0
clpbuf 2632 0 16 18 0 16 42112 0
malloc-8192 8192 3 2 31 0 1 40960 0
pcpu-8 8 4129 479 4148 0 254 36864 0
64 Bucket 512 56 16 1343 0 30 36864 0
malloc-128 128 189 59 574 0 126 31744 0
malloc-384 384 76 4 76 0 30 30720 0
malloc-384 384 29 51 113 0 30 30720 0
malloc-256 256 43 77 138 0 62 30720 0
malloc-384 384 53 17 53 0 30 26880 0
malloc-2048 2048 10 2 10 0 8 24576 0
socket 944 15 9 1224 0 254 22656 0
malloc-4096 4096 4 1 200 0 2 20480 0
malloc-64 64 234 81 13435 0 254 20160 0
malloc-64 64 93 159 12015 0 254 16128 0
malloc-32 32 282 222 1123 0 254 16128 0
8 Bucket 80 41 159 458 0 126 16000 0
malloc-128 128 90 34 154 0 126 15872 0
pipe 744 7 13 284 0 16 14880 0
malloc-2048 2048 3 3 4 0 8 12288 0
malloc-2048 2048 2 4 449 0 8 12288 0
malloc-64 64 48 141 278 0 254 12096 0
Files 80 71 79 6479 0 126 12000 0
malloc-128 128 48 45 111 0 126 11904 0
malloc-256 256 24 21 728 0 62 11520 0
malloc-256 256 23 22 27 0 62 11520 0
SLEEPQUEUE 88 109 19 109 0 126 11264 0
malloc-4096 4096 0 2 3 0 2 8192 0
malloc-1024 1024 2 6 900 0 16 8192 0
malloc-1024 1024 6 2 160 0 16 8192 0
rtentry 176 13 33 16 0 62 8096 0
PGRP 88 20 72 31 0 126 8096 0
rl_entry 40 31 171 31 0 254 8080 0
sctp_laddr 48 0 168 4 0 254 8064 0
udpcb 32 2 250 120 0 254 8064 0
PWD 32 10 242 100 0 254 8064 0
malloc-64 64 22 104 61 0 254 8064 0
malloc-64 64 15 111 54 0 254 8064 0
malloc-32 32 38 214 114 0 254 8064 0
malloc-32 32 69 183 220 0 254 8064 0
malloc-32 32 54 198 3005 0 254 8064 0
16 Bucket 144 33 23 199 0 62 8064 0
4 Bucket 48 5 163 53 0 254 8064 0
2 Bucket 32 48 204 504 0 254 8064 0
malloc-16 16 21 479 90 0 254 8000 0
malloc-16 16 30 470 233 0 254 8000 0
malloc-16 16 22 478 26325 0 254 8000 0
malloc-128 128 20 42 3056 0 126 7936 0
ripcb 488 1 15 4 0 254 7808 0
tcp_inpcb 488 3 13 7 0 254 7808 0
udp_inpcb 488 2 14 120 0 254 7808 0
kenv 258 3 27 1035 0 30 7740 0
routing nhops 256 10 20 16 0 62 7680 0
unpcb 256 7 23 1075 0 254 7680 0
mbuf_packet 256 0 30 93 0 254 7680 0
malloc-384 384 4 16 5 0 30 7680 0
malloc-384 384 0 20 309 0 30 7680 0
malloc-256 256 5 25 287 0 62 7680 0
malloc-32 32 4 122 27 0 254 4032 0
vtnet_tx_hdr 24 0 167 989 0 254 4008 0
KNOTE 160 0 25 8 0 62 4000 0
UMA Slabs 1 176 8 14 8 0 62 3872 0
sctp_ep 1280 1 2 1 0 254 3840 0
sctp_readq 152 0 0 0 0 254 0 0
sctp_chunk 152 0 0 0 0 254 0 0
sctp_raddr 736 0 0 0 0 254 0 0
sctp_asoc 2288 0 0 0 0 254 0 0
tcp_rack_map 120 0 0 0 0 126 0 0
tcp_bbr_pcb 832 0 0 0 0 16 0 0
tcp_bbr_map 128 0 0 0 0 126 0 0
tcp_log_node 120 0 0 0 0 126 0 0
tcp_log_bucket 176 0 0 0 0 62 0 0
tcp_log 416 0 0 0 0 254 0 0
HEAD commit: ff751ee0 Remove FirstBurstLength limit for software iSCSI.
git tree: https://github.com/freebsd/freebsd-src.git main
dashboard link: https://syzkaller.appspot.com/bug?extid=e9632d7ad17398f0bd8f
syz repro: https://syzkaller.appspot.com/x/repro.syz?x=13eac0a4d00000
C reproducer: https://syzkaller.appspot.com/x/repro.c?x=11920358d00000
IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+e9632d...@syzkaller.appspotmail.com
panic: pfi_dynaddr_setup: dyn is 0x20000100
cpuid = 0
KDB: stack backtrace:
db_trace_self_wrapper() at db_trace_self_wrapper+0x47/frame 0xfffffe005d7a0100
vpanic() at vpanic+0x1c7/frame 0xfffffe005d7a0160
panic() at panic+0x43/frame 0xfffffe005d7a01c0
pfi_dynaddr_setup() at pfi_dynaddr_setup+0x580/frame 0xfffffe005d7a0250
pfioctl() at pfioctl+0x8178/frame 0xfffffe005d7a0780
devfs_ioctl() at devfs_ioctl+0x14e/frame 0xfffffe005d7a07e0
VOP_IOCTL_APV() at VOP_IOCTL_APV+0x78/frame 0xfffffe005d7a0810
vn_ioctl() at vn_ioctl+0x278/frame 0xfffffe005d7a0930
devfs_ioctl_f() at devfs_ioctl_f+0x47/frame 0xfffffe005d7a0970
kern_ioctl() at kern_ioctl+0x3cd/frame 0xfffffe005d7a09e0
sys_ioctl() at sys_ioctl+0x265/frame 0xfffffe005d7a0ab0
amd64_syscall() at amd64_syscall+0x247/frame 0xfffffe005d7a0bf0
fast_syscall_common() at fast_syscall_common+0xf8/frame 0xfffffe005d7a0bf0
--- syscall (0, FreeBSD ELF64, nosys), rip = 0x2b3d8a, rsp = 0x7fffffffea58, rbp = 0x7fffffffea80 ---
KDB: enter: panic
[ thread pid 785 tid 100108 ]
Stopped at kdb_enter+0x67: movq $0,0x14526ae(%rip)
db>
db> set $lines = 0
db> set $maxwidth = 0
db> show registers
cs 0x20
ds 0x3b
es 0x3b
fs 0x13
gs 0x1b
ss 0x28
rax 0x12
rcx 0x80
db>
db> set $lines = 0
db> set $maxwidth = 0
db> show registers
cs 0x20
ds 0x3b
es 0x3b
fs 0x13
gs 0x1b
ss 0x28
rax 0x12
rdx 0xffffffff81911ddf
rbx 0
rsp 0xfffffe005d7a00e0
rbp 0xfffffe005d7a0100
rsi 0x1
rdi 0
r8 0
r9 0xffffffff
r10 0
r11 0xfffffe0094e34d10
r9 0xffffffff
r10 0
r12 0xffffffff82067650 ddb_dbbe
r13 0
r14 0xffffffff819ba277
r15 0xffffffff819ba277
rip 0xffffffff8110d0d7 kdb_enter+0x67
rflags 0x82
kdb_enter+0x67: movq $0,0x14526ae(%rip)
db> show proc
Process 785 (syz-executor3216113) at 0xfffff800185c2000:
r13 0
r14 0xffffffff819ba277
r15 0xffffffff819ba277
rip 0xffffffff8110d0d7 kdb_enter+0x67
rflags 0x82
kdb_enter+0x67: movq $0,0x14526ae(%rip)
db> show proc
state: NORMAL
uid: 0 gids: 0, 0, 5
parent: pid 783 at 0xfffff800185c2a50
uid: 0 gids: 0, 0, 5
ABI: FreeBSD ELF64
flag: 0x10004000 flag2: 0
arguments: ./syz-executor321611379
reaper: 0xfffff80004489528 reapsubtree: 1
sigparent: 20
vmspace: 0xfffffe0094e463e0
sigparent: 20
(map 0xfffffe0094e463e0)
(map.pmap 0xfffffe0094e464a0)
(pmap 0xfffffe0094e46500)
threads: 1
100108 Run CPU 0 syz-executor3216113
db> ps
pid ppid pgrp uid state wmesg wchan cmd
785 783 783 0 R CPU 0 syz-executor3216113
pid ppid pgrp uid state wmesg wchan cmd
783 781 783 0 Ss pause 0xfffff800185c2b00 csh
781 694 781 0 Ss select 0xfffff80004f6a240 sshd
760 1 760 0 Ss+ ttyin 0xfffff800048d8cb0 getty
759 1 759 0 Ss+ ttyin 0xfffff80004c180b0 getty
758 1 758 0 Ss+ ttyin 0xfffff80004c184b0 getty
757 1 757 0 Ss+ ttyin 0xfffff80004c188b0 getty
756 1 756 0 Ss+ ttyin 0xfffff80004c18cb0 getty
755 1 755 0 Ss+ ttyin 0xfffff80004ba60b0 getty
754 1 754 0 Ss+ ttyin 0xfffff80004ba64b0 getty
753 1 753 0 Ss+ ttyin 0xfffff80004ba68b0 getty
752 1 752 0 Ss+ ttyin 0xfffff80004ba6cb0 getty
750 1 24 0 S+ piperd 0xfffff80004e73ba0 logger
759 1 759 0 Ss+ ttyin 0xfffff80004c180b0 getty
758 1 758 0 Ss+ ttyin 0xfffff80004c184b0 getty
757 1 757 0 Ss+ ttyin 0xfffff80004c188b0 getty
756 1 756 0 Ss+ ttyin 0xfffff80004c18cb0 getty
755 1 755 0 Ss+ ttyin 0xfffff80004ba60b0 getty
754 1 754 0 Ss+ ttyin 0xfffff80004ba64b0 getty
753 1 753 0 Ss+ ttyin 0xfffff80004ba68b0 getty
752 1 752 0 Ss+ ttyin 0xfffff80004ba6cb0 getty
749 748 24 0 S+ nanslp 0xffffffff82532ee0 sleep
748 1 24 0 S+ wait 0xfffff80004ee4528 sh
698 1 698 0 Ss nanslp 0xffffffff82532ee1 cron
694 1 694 0 Ss select 0xfffff80004f6a5c0 sshd
507 1 507 0 Ss select 0xfffff80004e7edc0 syslogd
436 1 436 0 Ss select 0xfffff80004f6a740 devd
435 1 435 65 Ss select 0xfffff80004f6a640 dhclient
350 1 350 0 Ss select 0xfffff80004f6a6c0 dhclient
347 1 347 0 Ss select 0xfffff80004e7ec40 dhclient
23 0 0 0 DL vlruwt 0xfffff80004dbe528 [vnlru]
22 0 0 0 DL syncer 0xffffffff826223b8 [syncer]
21 0 0 0 DL (threaded) [bufdaemon]
100070 D qsleep 0xffffffff826214a0 [bufdaemon]
100075 D - 0xffffffff8200ac80 [bufspacedaemon-0]
100087 D sdflush 0xfffff800048d14e8 [/ worker]
22 0 0 0 DL syncer 0xffffffff826223b8 [syncer]
21 0 0 0 DL (threaded) [bufdaemon]
100070 D qsleep 0xffffffff826214a0 [bufdaemon]
100075 D - 0xffffffff8200ac80 [bufspacedaemon-0]
20 0 0 0 DL psleep 0xffffffff82648988 [vmdaemon]
19 0 0 0 DL (threaded) [pagedaemon]
100068 D psleep 0xffffffff8263cdf8 [dom0]
100076 D launds 0xffffffff8263ce04 [laundry: dom0]
100077 D umarcl 0xffffffff81525ff0 [uma]
18 0 0 0 DL - 0xffffffff82367278 [rand_harvestq]
17 0 0 0 DL waiting 0xffffffff82e42818 [sctp_iterator]
19 0 0 0 DL (threaded) [pagedaemon]
100068 D psleep 0xffffffff8263cdf8 [dom0]
100076 D launds 0xffffffff8263ce04 [laundry: dom0]
100077 D umarcl 0xffffffff81525ff0 [uma]
18 0 0 0 DL - 0xffffffff82367278 [rand_harvestq]
16 0 0 0 DL pftm 0xffffffff82cb0430 [pf purge]
1 0 1 0 SLs wait 0xfffff80004489528 [init]
10 0 0 0 DL audit_w 0xffffffff8263a830 [audit]
0 0 0 0 DLs (threaded) [kernel]
100000 D swapin 0xffffffff82512cb0 [swapper]
100005 D - 0xfffff8000446be00 [if_config_tqg_0]
100006 D - 0xfffff8000446bd00 [softirq_0]
100007 D - 0xfffff8000446bc00 [softirq_1]
100008 D - 0xfffff8000446bb00 [if_io_tqg_0]
100009 D - 0xfffff8000446ba00 [if_io_tqg_1]
100011 D - 0xfffff8000446b800 [thread taskq]
100012 D - 0xfffff8000446b700 [aiod_kick taskq]
100014 D - 0xfffff8000446b500 [kqueue_ctx taskq]
100015 D - 0xfffff8000446b400 [in6m_free taskq]
100017 D - 0xfffff8000446b200 [inm_free taskq]
100024 D - 0xfffff8000446b100 [firmware taskq]
100028 D - 0xfffff8000446b000 [crypto_0]
100029 D - 0xfffff8000446b000 [crypto_1]
100044 D - 0xfffff80004652d00 [vtnet0 rxq 0]
100045 D - 0xfffff80004652c00 [vtnet0 txq 0]
100046 D - 0xfffff80004652b00 [vtnet0 rxq 1]
100047 D - 0xfffff80004652a00 [vtnet0 txq 1]
100049 D vtbslp 0xfffff8000465cb00 [virtio_balloon]
100053 D - 0xfffff80004652900 [mca taskq]
100058 D - 0xffffffff81d620e0 [deadlkres]
10 0 0 0 DL audit_w 0xffffffff8263a830 [audit]
0 0 0 0 DLs (threaded) [kernel]
100000 D swapin 0xffffffff82512cb0 [swapper]
100005 D - 0xfffff8000446be00 [if_config_tqg_0]
100006 D - 0xfffff8000446bd00 [softirq_0]
100007 D - 0xfffff8000446bc00 [softirq_1]
100008 D - 0xfffff8000446bb00 [if_io_tqg_0]
100009 D - 0xfffff8000446ba00 [if_io_tqg_1]
100011 D - 0xfffff8000446b800 [thread taskq]
100012 D - 0xfffff8000446b700 [aiod_kick taskq]
100014 D - 0xfffff8000446b500 [kqueue_ctx taskq]
100015 D - 0xfffff8000446b400 [in6m_free taskq]
100017 D - 0xfffff8000446b200 [inm_free taskq]
100024 D - 0xfffff8000446b100 [firmware taskq]
100028 D - 0xfffff8000446b000 [crypto_0]
100029 D - 0xfffff8000446b000 [crypto_1]
100044 D - 0xfffff80004652d00 [vtnet0 rxq 0]
100045 D - 0xfffff80004652c00 [vtnet0 txq 0]
100046 D - 0xfffff80004652b00 [vtnet0 rxq 1]
100047 D - 0xfffff80004652a00 [vtnet0 txq 1]
100049 D vtbslp 0xfffff8000465cb00 [virtio_balloon]
100053 D - 0xfffff80004652900 [mca taskq]
100063 D - 0xfffff80004baae00 [acpi_task_0]
100064 D - 0xfffff80004baae00 [acpi_task_1]
100065 D - 0xfffff80004baae00 [acpi_task_2]
100066 D - 0xfffff80004652e00 [CAM taskq]
db> show all locks
Process 785 (syz-executor3216113) thread 0xfffffe0094e34800 (100108)
100064 D - 0xfffff80004baae00 [acpi_task_1]
100065 D - 0xfffff80004baae00 [acpi_task_2]
100066 D - 0xfffff80004652e00 [CAM taskq]
db> show all locks
exclusive rm pf rulesets (pf rulesets) r = 0 (0xffffffff82d054a0) locked @ /syzkaller/managers/main/kernel/sys/netpfil/pf/pf_ioctl.c:2126
db> show malloc
Type InUse MemUse Requests
pf_hash 5 11524K 5
devbuf 4216 4340K 4241
Type InUse MemUse Requests
pf_hash 5 11524K 5
tcp_hpts 5 3201K 5
vtbuf 24 1968K 46
sysctloid 30605 1795K 30671
kobj 329 1316K 490
newblk 550 1162K 598
vtbuf 24 1968K 46
sysctloid 30605 1795K 30671
kobj 329 1316K 490
vfscache 3 1025K 3
pcb 23 539K 77
inodedep 20 520K 85
ufs_quota 1 512K 1
vfs_hash 1 512K 1
callout 2 512K 2
intr 4 472K 4
subproc 101 205K 841
vfs_hash 1 512K 1
callout 2 512K 2
intr 4 472K 4
acpica 1674 184K 58097
vnet_data 1 168K 1
tidhash 3 141K 3
pagedep 10 131K 61
vnet_data 1 168K 1
tidhash 3 141K 3
tfo_ccache 1 128K 1
sem 4 106K 4
DEVFS1 101 101K 110
sem 4 106K 4
linker 278 100K 301
bus 983 80K 3361
mtx_pool 2 72K 2
syncache 1 68K 1
acpitask 1 64K 1
ddb_capture 1 64K 1
module 503 63K 503
temp 18 33K 1575
mtx_pool 2 72K 2
syncache 1 68K 1
acpitask 1 64K 1
ddb_capture 1 64K 1
module 503 63K 503
hostcache 1 32K 1
shm 1 32K 1
kdtrace 155 31K 895
shm 1 32K 1
msg 4 30K 4
DEVFS3 120 30K 130
umtx 216 27K 216
vmem 3 26K 5
gtaskqueue 18 26K 18
kbdmux 6 22K 6
DEVFS_RULE 56 20K 56
BPF 10 18K 10
gtaskqueue 18 26K 18
kbdmux 6 22K 6
DEVFS_RULE 56 20K 56
ufs_mount 5 17K 6
proc 3 17K 3
tty 16 16K 16
ithread 99 16K 99
bus-sc 32 14K 1595
proc 3 17K 3
tty 16 16K 16
ithread 99 16K 99
KTRACE 100 13K 100
ifaddr 32 12K 32
kenv 93 12K 93
eventhandler 129 11K 129
eventhandler 129 11K 129
GEOM 60 10K 491
rman 82 10K 423
bmsafemap 3 9K 43
rman 82 10K 423
UART 12 9K 12
devstat 4 9K 4
ksem 1 8K 1
devstat 4 9K 4
rpc 2 8K 2
shmfd 1 8K 1
pfs_vncache 1 8K 1
pfs_nodes 20 8K 20
audit_evclass 236 8K 294
pfs_nodes 20 8K 20
audit_evclass 236 8K 294
sglist 5 7K 5
CAM DEV 3 6K 510
cred 21 6K 234
CAM DEV 3 6K 510
CAM queue 5 6K 1528
taskqueue 48 6K 48
ufs_dirhash 24 5K 24
plimit 17 5K 322
taskqueue 48 6K 48
ufs_dirhash 24 5K 24
UMA 260 5K 260
ifnet 3 5K 3
vt 11 5K 11
memdesc 1 4K 1
MCA 32 4K 32
ioctlops 1 4K 88
memdesc 1 4K 1
MCA 32 4K 32
filedesc 1 4K 1
evdev 4 4K 4
routetbl 15 4K 15
hhook 13 4K 13
ether_multi 40 4K 50
lltable 11 4K 11
pf_ifnet 5 3K 6
in6_multi 25 3K 25
kqueue 46 3K 788
pwddesc 46 3K 786
terminal 11 3K 11
acpisem 22 3K 22
session 20 3K 31
acpisem 22 3K 22
uidinfo 3 3K 8
local_apic 1 2K 1
io_apic 1 2K 1
fpukern_ctx 2 2K 2
ipsec-saq 2 2K 2
selfd 27 2K 11206
io_apic 1 2K 1
fpukern_ctx 2 2K 2
ipsec-saq 2 2K 2
proc-args 39 2K 489
CAM XPT 22 2K 543
Unitno 26 2K 38
lockf 15 2K 22
ipsecpolicy 2 2K 2
acpidev 20 2K 20
acpidev 20 2K 20
msi 9 2K 9
clone 9 2K 9
pf_rule 1 1K 1
clone 9 2K 9
softdep 1 1K 1
sahead 1 1K 1
secasvar 1 1K 1
vnodemarker 2 1K 8
sahead 1 1K 1
secasvar 1 1K 1
NFSD session 1 1K 1
CAM periph 4 1K 271
select 7 1K 29
CAM periph 4 1K 271
ipsec 3 1K 3
diradd 6 1K 36
indirdep 3 1K 3
nhops 6 1K 6
toponodes 6 1K 6
isadev 6 1K 6
mount 16 1K 89
pci_link 10 1K 10
sctp_ifa 5 1K 6
isadev 6 1K 6
mount 16 1K 89
pci_link 10 1K 10
crypto 4 1K 4
ip6ndp 4 1K 5
encap_export_host 12 1K 12
in_multi 2 1K 4
pfil 4 1K 4
CAM SIM 2 1K 2
cdev 2 1K 2
sctp_atcl 1 1K 1
CAM SIM 2 1K 2
cdev 2 1K 2
sctp_atcl 1 1K 1
chacha20random 1 1K 1
osd 3 1K 10
sctp_ifn 2 1K 6
osd 3 1K 10
dirrem 1 1K 28
mld 2 1K 2
igmp 2 1K 2
vnodes 1 1K 1
ktls 1 1K 1
ktls 1 1K 1
NFSD lckfile 1 1K 1
NFSD V4client 1 1K 1
DEVFS 9 1K 10
feeder 7 1K 7
inpcbpolicy 6 1K 131
NFSD V4client 1 1K 1
DEVFS 9 1K 10
feeder 7 1K 7
tcpfunc 3 1K 3
loginclass 3 1K 7
prison 6 1K 6
aesni_data 2 1K 2
CAM dev queue 2 1K 2
CAM I/O Scheduler 1 1K 1
apmdev 1 1K 1
atkbddev 2 1K 2
CAM path 4 1K 1034
freework 1 1K 26
aesni_data 2 1K 2
CAM dev queue 2 1K 2
CAM I/O Scheduler 1 1K 1
apmdev 1 1K 1
atkbddev 2 1K 2
CAM path 4 1K 1034
procdesc 1 1K 6
pmchooks 1 1K 1
DEVFSP 2 1K 2
soname 4 1K 3159
filecaps 4 1K 66
nexusdev 6 1K 6
tun 3 1K 3
sctp_vrf 1 1K 1
entropy 2 1K 35
vnet 1 1K 1
pmc 1 1K 1
acpiintr 1 1K 1
sctp_atky 1 1K 1
pmc 1 1K 1
acpiintr 1 1K 1
sctp_atky 1 1K 1
cpus 2 1K 2
vnet_data_free 1 1K 1
Per-cpu 1 1K 1
vnet_data_free 1 1K 1
sctp_athm 1 1K 1
p1003.1b 1 1K 1
sctp_mcore 0 0K 0
sctp_socko 0 0K 1
sctp_iter 0 0K 3
sctp_mvrf 0 0K 0
sctp_timw 0 0K 0
sctp_cpal 0 0K 0
sctp_cmsg 0 0K 0
sctp_stre 0 0K 0
sctp_athi 0 0K 0
sctp_a_it 0 0K 3
sctp_cmsg 0 0K 0
sctp_stre 0 0K 0
sctp_athi 0 0K 0
sctp_aadr 0 0K 0
sctp_stro 0 0K 0
sctp_stri 0 0K 0
sctp_map 0 0K 0
pf_table 0 0K 0
pf_altq 0 0K 0
pf_osfp 0 0K 0
pf_temp 0 0K 0
mqdata 0 0K 0
pf_osfp 0 0K 0
pf_temp 0 0K 0
mqdata 0 0K 0
midi buffers 0 0K 0
isci 0 0K 0
iommu_dmamap 0 0K 0
mixer 0 0K 0
hyperv_socket 0 0K 0
bxe_ilt 0 0K 0
xenbus 0 0K 0
ac97 0 0K 0
hdacc 0 0K 0
vm_fictitious 0 0K 0
hdac 0 0K 0
hdaa 0 0K 0
acpi_perf 0 0K 0
acpicmbat 0 0K 0
SIIS driver 0 0K 0
CAM CCB 0 0K 1892
isci 0 0K 0
iommu_dmamap 0 0K 0
mixer 0 0K 0
hyperv_socket 0 0K 0
bxe_ilt 0 0K 0
xenbus 0 0K 0
ac97 0 0K 0
hdacc 0 0K 0
vm_fictitious 0 0K 0
hdac 0 0K 0
hdaa 0 0K 0
acpi_perf 0 0K 0
acpicmbat 0 0K 0
SIIS driver 0 0K 0
UMAHash 0 0K 0
PUC 0 0K 0
ppbusdev 0 0K 0
vm_pgdata 0 0K 0
jblocks 0 0K 0
savedino 0 0K 7
PUC 0 0K 0
ppbusdev 0 0K 0
vm_pgdata 0 0K 0
jblocks 0 0K 0
sentinel 0 0K 0
jfsync 0 0K 0
jtrunc 0 0K 0
sbdep 0 0K 2
jfsync 0 0K 0
jtrunc 0 0K 0
sbdep 0 0K 2
jsegdep 0 0K 0
jseg 0 0K 0
jfreefrag 0 0K 0
jfreeblk 0 0K 0
jnewblk 0 0K 0
jmvref 0 0K 0
jremref 0 0K 0
jaddref 0 0K 0
freedep 0 0K 0
newdirblk 0 0K 8
jseg 0 0K 0
jfreefrag 0 0K 0
jfreeblk 0 0K 0
jnewblk 0 0K 0
jmvref 0 0K 0
jremref 0 0K 0
jaddref 0 0K 0
freedep 0 0K 0
mkdir 0 0K 16
freefile 0 0K 25
freeblks 0 0K 25
freefrag 0 0K 7
allocindir 0 0K 0
allocdirect 0 0K 0
ufs_trim 0 0K 0
mactemp 0 0K 0
audit_trigger 0 0K 0
audit_pipe_presel 0 0K 0
audit_pipeent 0 0K 0
audit_pipe 0 0K 0
audit_evname 0 0K 0
audit_bsm 0 0K 0
audit_gidset 0 0K 0
audit_text 0 0K 0
audit_path 0 0K 0
audit_data 0 0K 0
audit_cred 0 0K 0
xform 0 0K 0
agtiapi_MemAlloc malloc 0 0K 0
NLM 0 0K 0
ipsec-spdcache 0 0K 0
ipsec-reg 0 0K 0
ipsec-misc 0 0K 0
ipsecrequest 0 0K 0
ip6opt 0 0K 3
ufs_trim 0 0K 0
mactemp 0 0K 0
audit_trigger 0 0K 0
audit_pipe_presel 0 0K 0
audit_pipeent 0 0K 0
audit_pipe 0 0K 0
audit_evname 0 0K 0
audit_bsm 0 0K 0
audit_gidset 0 0K 0
audit_text 0 0K 0
audit_path 0 0K 0
audit_data 0 0K 0
audit_cred 0 0K 0
xform 0 0K 0
agtiapi_MemAlloc malloc 0 0K 0
NLM 0 0K 0
ipsec-spdcache 0 0K 0
ipsec-reg 0 0K 0
ipsec-misc 0 0K 0
ipsecrequest 0 0K 0
ip6_msource 0 0K 0
ip6_moptions 0 0K 0
in6_mfilter 0 0K 0
frag6 0 0K 0
tcplog 0 0K 0
tcp_hwpace 0 0K 0
osti_cacheable 0 0K 0
LRO 0 0K 0
newreno data 0 0K 0
ip_msource 0 0K 0
ip_moptions 0 0K 0
ip6_moptions 0 0K 0
in6_mfilter 0 0K 0
frag6 0 0K 0
tcplog 0 0K 0
tcp_hwpace 0 0K 0
osti_cacheable 0 0K 0
LRO 0 0K 0
newreno data 0 0K 0
ip_msource 0 0K 0
in_mfilter 0 0K 0
ipid 0 0K 0
80211scan 0 0K 0
80211ratectl 0 0K 0
80211power 0 0K 0
80211nodeie 0 0K 0
80211node 0 0K 0
80211mesh_gt 0 0K 0
80211mesh_rt 0 0K 0
80211perr 0 0K 0
80211prep 0 0K 0
80211preq 0 0K 0
80211dfs 0 0K 0
80211crypto 0 0K 0
80211vap 0 0K 0
iflib 0 0K 0
vlan 0 0K 0
gif 0 0K 0
ifdescr 0 0K 0
zlib 0 0K 0
fadvise 0 0K 0
VN POLL 0 0K 0
ipid 0 0K 0
80211scan 0 0K 0
80211ratectl 0 0K 0
80211power 0 0K 0
80211nodeie 0 0K 0
80211node 0 0K 0
80211mesh_gt 0 0K 0
80211mesh_rt 0 0K 0
80211perr 0 0K 0
80211prep 0 0K 0
80211preq 0 0K 0
80211dfs 0 0K 0
80211crypto 0 0K 0
80211vap 0 0K 0
iflib 0 0K 0
vlan 0 0K 0
gif 0 0K 0
ifdescr 0 0K 0
zlib 0 0K 0
fadvise 0 0K 0
tempbuff 0 0K 0
statfs 0 0K 195
namei_tracker 0 0K 0
export_host 0 0K 0
cl_savebuf 0 0K 6
tempbuff 0 0K 0
ag_tgt_map_t malloc 0 0K 0
ag_slr_map_t malloc 0 0K 0
lDevFlags * malloc 0 0K 0
tiDeviceHandle_t * malloc 0 0K 0
ag_portal_data_t malloc 0 0K 0
ag_device_t malloc 0 0K 0
STLock malloc 0 0K 0
CCB List 0 0K 0
sr_iov 0 0K 0
OCS 0 0K 0
OCS 0 0K 0
nvme 0 0K 0
nvd 0 0K 0
netmap 0 0K 0
mwldev 0 0K 0
MVS driver 0 0K 0
CAM ccb queue 0 0K 0
mrsasbuf 0 0K 0
biobuf 0 0K 0
aios 0 0K 0
lio 0 0K 0
acl 0 0K 0
mpt_user 0 0K 0
mbuf_tag 0 0K 26
ag_tgt_map_t malloc 0 0K 0
ag_slr_map_t malloc 0 0K 0
lDevFlags * malloc 0 0K 0
tiDeviceHandle_t * malloc 0 0K 0
ag_portal_data_t malloc 0 0K 0
ag_device_t malloc 0 0K 0
STLock malloc 0 0K 0
CCB List 0 0K 0
sr_iov 0 0K 0
OCS 0 0K 0
OCS 0 0K 0
nvme 0 0K 0
nvd 0 0K 0
netmap 0 0K 0
mwldev 0 0K 0
MVS driver 0 0K 0
CAM ccb queue 0 0K 0
mrsasbuf 0 0K 0
biobuf 0 0K 0
aios 0 0K 0
lio 0 0K 0
acl 0 0K 0
mpt_user 0 0K 0
accf 0 0K 0
pts 0 0K 0
iov 0 0K 13502
pts 0 0K 0
eventfd 0 0K 0
Witness 0 0K 0
stack 0 0K 0
mps_user 0 0K 0
MPSSAS 0 0K 0
mps 0 0K 0
mpr_user 0 0K 0
MPRSAS 0 0K 0
sbuf 0 0K 288
mpr 0 0K 0
firmware 0 0K 0
compressor 0 0K 0
mfibuf 0 0K 0
SWAP 0 0K 0
md_sectors 0 0K 0
md_disk 0 0K 0
sysctltmp 0 0K 606
Witness 0 0K 0
stack 0 0K 0
mps_user 0 0K 0
MPSSAS 0 0K 0
mps 0 0K 0
mpr_user 0 0K 0
MPRSAS 0 0K 0
sbuf 0 0K 288
mpr 0 0K 0
firmware 0 0K 0
compressor 0 0K 0
mfibuf 0 0K 0
SWAP 0 0K 0
md_sectors 0 0K 0
md_disk 0 0K 0
sysctl 0 0K 1
malodev 0 0K 0
ekcd 0 0K 0
dumper 0 0K 0
sendfile 0 0K 0
rctl 0 0K 0
LED 0 0K 0
ix_sriov 0 0K 0
aacraidcam 0 0K 0
cache 0 0K 0
ix 0 0K 0
ipsbuf 0 0K 0
kcovinfo 0 0K 0
malodev 0 0K 0
ekcd 0 0K 0
dumper 0 0K 0
sendfile 0 0K 0
rctl 0 0K 0
LED 0 0K 0
ix_sriov 0 0K 0
aacraidcam 0 0K 0
cache 0 0K 0
ix 0 0K 0
ipsbuf 0 0K 0
pbuf 2632 0 989 0 0 2 2603048 0
mbuf 256 8578 572 15073 0 254 2342400 0
BUF TRIE 144 175 13293 515 0 62 1939392 0
malloc-384 384 4141 9 4142 0 30 1593600 0
malloc-4096 4096 332 4 1088 0 2 1376256 0
malloc-128 128 10567 35 11112 0 126 1357056 0
UMA Slabs 0 112 9655 26 9655 0 126 1084272 0
FFS inode 1128 483 14 509 0 8 560616 0
RADIX NODE 144 2068 169 20070 0 62 322128 0
VNODE 488 513 39 541 0 30 269376 0
malloc-65536 65536 4 0 4 0 1 262144 0
VM OBJECT 264 887 58 12702 0 30 249480 0
256 Bucket 2048 100 16 9855 0 8 237568 0
DEVCTL 1024 0 212 113 0 0 217088 0
malloc-64 64 3236 40 3262 0 254 209664 0
malloc-4096 4096 47 3 790 0 2 204800 0
malloc-16 16 12672 78 12774 0 254 204000 0
malloc-65536 65536 3 0 3 0 1 196608 0
THREAD 1792 108 0 108 0 8 193536 0
UMA Zones 768 232 2 232 0 16 179712 0
malloc-32 32 4805 109 4878 0 254 157248 0
malloc-128 128 1164 45 27448 0 126 154752 0
malloc-256 256 572 13 744 0 62 149760 0
malloc-65536 65536 0 2 46 0 1 131072 0
malloc-65536 65536 0 2 124 0 1 131072 0
malloc-65536 65536 0 2 8 0 1 131072 0
FFS2 dinode 256 483 27 508 0 62 130560 0
malloc-1024 1024 118 6 129 0 16 126976 0
ksiginfo 112 38 1006 53 0 126 116928 0
MAP ENTRY 96 836 382 38037 0 126 116928 0
vmem btag 56 1888 44 1888 0 254 108192 0
S VFS Cache 104 965 49 1004 0 126 105456 0
malloc-2048 2048 2 40 1930 0 8 86016 0
UMA Kegs 384 218 5 218 0 30 85632 0
VMSPACE 2544 23 7 764 0 4 76320 0
PROC 1320 45 9 785 0 8 71280 0
filedesc0 1072 46 17 786 0 8 67536 0
mbuf_cluster 2048 30 2 30 0 254 65536 0
malloc-65536 65536 1 0 1 0 1 65536 0
malloc-65536 65536 1 0 1 0 1 65536 0
malloc-32768 32768 0 2 117 0 1 65536 0
malloc-65536 65536 1 0 1 0 1 65536 0
malloc-16384 16384 4 0 4 0 1 65536 0
g_bio 408 0 150 5041 0 30 61200 0
128 Bucket 1024 37 22 559 0 16 60416 0
malloc-256 256 190 20 508 0 62 53760 0
malloc-4096 4096 12 1 13 0 2 53248 0
malloc-4096 4096 12 1 23 0 2 53248 0
malloc-16384 16384 1 2 154 0 1 49152 0
malloc-8192 8192 4 2 97 0 1 49152 0
malloc-2048 2048 4 20 512 0 8 49152 0
malloc-256 256 140 40 490 0 62 46080 0
malloc-64 64 550 143 2238 0 254 44352 0
malloc-64 64 523 170 1640 0 254 44352 0
malloc-128 128 301 40 526 0 126 43648 0
32 Bucket 256 45 120 3373 0 62 42240 0
clpbuf 2632 0 16 18 0 16 42112 0
malloc-8192 8192 3 2 31 0 1 40960 0
malloc-8192 8192 5 0 5 0 1 40960 0
DIRHASH 1024 34 2 34 0 16 36864 0
NAMEI 1024 0 36 11917 0 16 36864 0
pcpu-8 8 4129 479 4148 0 254 36864 0
64 Bucket 512 56 16 1343 0 30 36864 0
malloc-32768 32768 1 0 1 0 1 32768 0
malloc-32768 32768 1 0 1 0 1 32768 0
malloc-32768 32768 1 0 1 0 1 32768 0
malloc-32768 32768 1 0 1 0 1 32768 0
malloc-32768 32768 1 0 1 0 1 32768 0
malloc-16384 16384 2 0 8 0 1 32768 0
malloc-8192 8192 4 0 4 0 1 32768 0
pcpu-64 64 456 56 456 0 254 32768 0
malloc-128 128 240 8 240 0 126 31744 0
malloc-128 128 189 59 574 0 126 31744 0
malloc-384 384 76 4 76 0 30 30720 0
malloc-384 384 29 51 113 0 30 30720 0
malloc-256 256 43 77 138 0 62 30720 0
malloc-384 384 53 17 53 0 30 26880 0
malloc-2048 2048 10 2 10 0 8 24576 0
malloc-1024 1024 2 22 46 0 16 24576 0
malloc-1024 1024 16 8 20 0 16 24576 0
ttyinq 160 135 15 300 0 62 24000 0
tcpcb 1048 3 19 7 0 254 23056 0
ttyoutq 256 72 18 160 0 62 23040 0
malloc-256 256 74 16 460 0 62 23040 0
socket 944 15 9 1224 0 254 22656 0
malloc-4096 4096 4 1 200 0 2 20480 0
malloc-64 64 234 81 13435 0 254 20160 0
Mountpoints 2752 2 5 2 0 4 19264 0
TURNSTILE 136 109 17 109 0 62 17136 0
malloc-16384 16384 1 0 1 0 1 16384 0
malloc-8192 8192 2 0 2 0 1 16384 0
malloc-8192 8192 2 0 2 0 1 16384 0
malloc-8192 8192 2 0 2 0 1 16384 0
malloc-8192 8192 2 0 2 0 1 16384 0
malloc-8192 8192 2 0 2 0 1 16384 0
malloc-8192 8192 2 0 2 0 1 16384 0
malloc-1024 1024 13 3 13 0 16 16384 0
malloc-512 512 3 29 128 0 30 16384 0
malloc-64 64 93 159 12015 0 254 16128 0
malloc-32 32 282 222 1123 0 254 16128 0
8 Bucket 80 41 159 458 0 126 16000 0
malloc-128 128 90 34 154 0 126 15872 0
pipe 744 7 13 284 0 16 14880 0
malloc-4096 4096 3 0 3 0 2 12288 0
malloc-2048 2048 5 1 6 0 8 12288 0
malloc-2048 2048 3 3 4 0 8 12288 0
malloc-2048 2048 2 4 449 0 8 12288 0
malloc-64 64 48 141 278 0 254 12096 0
Files 80 71 79 6479 0 126 12000 0
malloc-128 128 48 45 111 0 126 11904 0
malloc-256 256 24 21 728 0 62 11520 0
malloc-256 256 23 22 27 0 62 11520 0
SLEEPQUEUE 88 109 19 109 0 126 11264 0
malloc-4096 4096 0 2 3 0 2 8192 0
malloc-2048 2048 1 3 13 0 8 8192 0
malloc-2048 2048 2 2 2 0 8 8192 0
malloc-1024 1024 2 6 900 0 16 8192 0
malloc-1024 1024 6 2 160 0 16 8192 0
malloc-1024 1024 8 0 8 0 16 8192 0
malloc-512 512 5 11 5 0 30 8192 0
malloc-512 512 2 14 510 0 30 8192 0
malloc-512 512 10 6 65 0 30 8192 0
rtentry 176 13 33 16 0 62 8096 0
PGRP 88 20 72 31 0 126 8096 0
rl_entry 40 31 171 31 0 254 8080 0
sctp_laddr 48 0 168 4 0 254 8064 0
udpcb 32 2 250 120 0 254 8064 0
PWD 32 10 242 100 0 254 8064 0
malloc-64 64 22 104 61 0 254 8064 0
malloc-64 64 15 111 54 0 254 8064 0
malloc-32 32 38 214 114 0 254 8064 0
malloc-32 32 111 141 1863 0 254 8064 0
malloc-32 32 17 235 38 0 254 8064 0
malloc-32 32 69 183 220 0 254 8064 0
malloc-32 32 54 198 3005 0 254 8064 0
16 Bucket 144 33 23 199 0 62 8064 0
4 Bucket 48 5 163 53 0 254 8064 0
2 Bucket 32 48 204 504 0 254 8064 0
malloc-16 16 21 479 90 0 254 8000 0
malloc-16 16 30 470 233 0 254 8000 0
malloc-16 16 32 468 291 0 254 8000 0
malloc-16 16 207 293 1488 0 254 8000 0
malloc-16 16 4 496 6 0 254 8000 0
malloc-16 16 254 246 263 0 254 8000 0
malloc-16 16 22 478 26325 0 254 8000 0
malloc-128 128 20 42 3056 0 126 7936 0
ripcb 488 1 15 4 0 254 7808 0
tcp_inpcb 488 3 13 7 0 254 7808 0
udp_inpcb 488 2 14 120 0 254 7808 0
kenv 258 3 27 1035 0 30 7740 0
routing nhops 256 10 20 16 0 62 7680 0
unpcb 256 7 23 1075 0 254 7680 0
mbuf_packet 256 0 30 93 0 254 7680 0
malloc-384 384 4 16 5 0 30 7680 0
malloc-384 384 0 20 309 0 30 7680 0
malloc-256 256 5 25 287 0 62 7680 0
FPU_save_area 832 1 8 1 0 16 7488 0
cpuset 104 7 55 7 0 126 6448 0
epoch_record pcpu 256 4 12 4 0 62 4096 0
malloc-1024 1024 1 3 1 0 16 4096 0
malloc-512 512 1 7 2 0 30 4096 0
pcpu-16 16 7 249 7 0 254 4096 0
pcpu-16 16 7 249 7 0 254 4096 0
hostcache 96 1 41 1 0 254 4032 0
syncache 168 0 24 5 0 254 4032 0
malloc-32 32 4 122 27 0 254 4032 0
vtnet_tx_hdr 24 0 167 989 0 254 4008 0
KNOTE 160 0 25 8 0 62 4000 0
UMA Slabs 1 176 8 14 8 0 62 3872 0
sctp_ep 1280 1 2 1 0 254 3840 0
malloc-384 384 1 9 1 0 30 3840 0
mqnode 416 3 6 3 0 30 3744 0
KMAP ENTRY 96 12 27 12 0 0 3744 0
vmem 1856 1 1 1 0 8 3712 0
SMR CPU 32 2 29 2 0 254 992 0
SMR SHARED 24 2 29 2 0 254 744 0
FFS1 dinode 128 0 0 0 0 126 0 0
swblk 136 0 0 0 0 62 0 0
swpctrie 144 0 0 0 0 62 0 0
sctp_asconf_ack 48 0 0 0 0 254 0 0
sctp_asconf 40 0 0 0 0 254 0 0
sctp_stream_msg_out 112 0 0 0 0 254 0 0
KMAP ENTRY 96 12 27 12 0 0 3744 0
vmem 1856 1 1 1 0 8 3712 0
SMR CPU 32 2 29 2 0 254 992 0
SMR SHARED 24 2 29 2 0 254 744 0
FFS1 dinode 128 0 0 0 0 126 0 0
swblk 136 0 0 0 0 62 0 0
swpctrie 144 0 0 0 0 62 0 0
sctp_asconf_ack 48 0 0 0 0 254 0 0
sctp_asconf 40 0 0 0 0 254 0 0
sctp_readq 152 0 0 0 0 254 0 0
sctp_chunk 152 0 0 0 0 254 0 0
sctp_raddr 736 0 0 0 0 254 0 0
sctp_asoc 2288 0 0 0 0 254 0 0
pf state scrubs 40 0 0 0 0 254 0 0
pf frag entries 40 0 0 0 0 254 0 0
pf frags 248 0 0 0 0 62 0 0
pf table entries 160 0 0 0 0 62 0 0
pf table entry counters 64 0 0 0 0 254 0 0
pf source nodes 136 0 0 0 0 254 0 0
pf state keys 88 0 0 0 0 126 0 0
pf states 296 0 0 0 0 254 0 0
pf tags 104 0 0 0 0 126 0 0
pf frag entries 40 0 0 0 0 254 0 0
pf frags 248 0 0 0 0 62 0 0
pf table entries 160 0 0 0 0 62 0 0
pf table entry counters 64 0 0 0 0 254 0 0
pf source nodes 136 0 0 0 0 254 0 0
pf state keys 88 0 0 0 0 126 0 0
pf states 296 0 0 0 0 254 0 0
pf mtags 48 0 0 0 0 254 0 0
tcp_rack_pcb 704 0 0 0 0 16 0 0
tcp_rack_map 120 0 0 0 0 126 0 0
tcp_bbr_pcb 832 0 0 0 0 16 0 0
tcp_bbr_map 128 0 0 0 0 126 0 0
IPsec SA lft_c 16 0 0 0 0 254 0 0
udplite_inpcb 488 0 0 0 0 254 0 0
tcp_log_node 120 0 0 0 0 126 0 0
tcp_log_bucket 176 0 0 0 0 62 0 0
tcp_log 416 0 0 0 0 254 0 0
tcpreass 48 0 0 0 0 254 0 0
tfo_ccache_entries 80 0 0 0 0 126 0 0
tfo 4 0 0 0 0 254 0 0
sackhole 32 0 0 0 0 254 0 0
tcptw 88 0 0 0 0 254 0 0
ipq 56 0 0 0 0 254 0 0
itimer 352 0 0 0 0 30 0 0
tfo_ccache_entries 80 0 0 0 0 126 0 0
tfo 4 0 0 0 0 254 0 0
sackhole 32 0 0 0 0 254 0 0
tcptw 88 0 0 0 0 254 0 0
ipq 56 0 0 0 0 254 0 0
AIOLIO 272 0 0 0 0 30 0 0
AIOCB 552 0 0 0 0 16 0 0
AIOP 32 0 0 0 0 254 0 0
AIO 208 0 0 0 0 62 0 0
AIOCB 552 0 0 0 0 16 0 0
AIOP 32 0 0 0 0 254 0 0
AIO 208 0 0 0 0 62 0 0
mqnotifier 216 0 0 0 0 62 0 0
mvdata 64 0 0 0 0 254 0 0
mqueue 248 0 0 0 0 62 0 0
NCLNODE 592 0 0 0 0 16 0 0
TMPFS node 224 0 0 0 0 62 0 0
LTS VFS Cache 360 0 0 0 0 30 0 0
L VFS Cache 320 0 0 0 0 30 0 0
STS VFS Cache 144 0 0 0 0 62 0 0
cryptop 280 0 0 0 0 30 0 0
IOMMU_MAP_ENTRY 120 0 0 0 0 126 0 0
ktls_session 192 0 0 0 0 62 0 0
mbuf_jumbo_16k 16384 0 0 0 0 254 0 0
mbuf_jumbo_9k 9216 0 0 0 0 254 0 0
audit_record 1280 0 0 0 0 8 0 0
domainset 40 0 0 0 0 254 0 0
mvdata 64 0 0 0 0 254 0 0
mqueue 248 0 0 0 0 62 0 0
NCLNODE 592 0 0 0 0 16 0 0
TMPFS node 224 0 0 0 0 62 0 0
LTS VFS Cache 360 0 0 0 0 30 0 0
L VFS Cache 320 0 0 0 0 30 0 0
STS VFS Cache 144 0 0 0 0 62 0 0
cryptop 280 0 0 0 0 30 0 0
IOMMU_MAP_ENTRY 120 0 0 0 0 126 0 0
ktls_session 192 0 0 0 0 62 0 0
mbuf_jumbo_16k 16384 0 0 0 0 254 0 0
mbuf_jumbo_9k 9216 0 0 0 0 254 0 0
audit_record 1280 0 0 0 0 8 0 0
MAC labels 40 0 0 0 0 254 0 0
vnpbuf 2632 0 0 0 0 64 0 0
mdpbuf 2632 0 0 0 0 3 0 0
nfspbuf 2632 0 0 0 0 16 0 0
swwbuf 2632 0 0 0 0 8 0 0
swrbuf 2632 0 0 0 0 16 0 0
umtx_shm 88 0 0 0 0 126 0 0
umtx pi 96 0 0 0 0 126 0 0
rangeset pctrie nodes 144 0 0 0 0 62 0 0
malloc-65536 65536 0 0 0 0 1 0 0
vnpbuf 2632 0 0 0 0 64 0 0
mdpbuf 2632 0 0 0 0 3 0 0
nfspbuf 2632 0 0 0 0 16 0 0
swwbuf 2632 0 0 0 0 8 0 0
swrbuf 2632 0 0 0 0 16 0 0
umtx_shm 88 0 0 0 0 126 0 0
umtx pi 96 0 0 0 0 126 0 0
rangeset pctrie nodes 144 0 0 0 0 62 0 0
malloc-32768 32768 0 0 0 0 1 0 0
malloc-32768 32768 0 0 0 0 1 0 0
malloc-32768 32768 0 0 0 0 1 0 0
malloc-32768 32768 0 0 0 0 1 0 0
malloc-16384 16384 0 0 0 0 1 0 0
malloc-16384 16384 0 0 0 0 1 0 0
malloc-16384 16384 0 0 0 0 1 0 0
malloc-16384 16384 0 0 0 0 1 0 0
malloc-8192 8192 0 0 0 0 1 0 0
malloc-32768 32768 0 0 0 0 1 0 0
malloc-32768 32768 0 0 0 0 1 0 0
malloc-32768 32768 0 0 0 0 1 0 0
malloc-16384 16384 0 0 0 0 1 0 0
malloc-16384 16384 0 0 0 0 1 0 0
malloc-16384 16384 0 0 0 0 1 0 0
malloc-16384 16384 0 0 0 0 1 0 0
Reply all
Reply to author
Forward
0 new messages