syzbot


panic: refcount ADDR wraparound (4)

Status: fixed on 2022/02/09 04:03
Reported-by: syzbot+01c0459408f896a5933a@syzkaller.appspotmail.com
Fix commit: 300cfb96fc22 file: Make fget*() and getvnode*() consistent about initializing *fpp
First crash: 1096d, last: 1028d
Similar bugs (3)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
freebsd panic: refcount ADDR wraparound C 6 1752d 1752d 2/2 fixed on 2020/03/20 00:05
freebsd panic: refcount ADDR wraparound (3) C 9 1278d 1278d 2/2 fixed on 2021/05/23 21:08
freebsd panic: refcount ADDR wraparound (2) 3883 1670d 1671d 0/2 auto-closed as invalid on 2020/06/25 21:25

Sample crash report:
panic: refcount 0xfffffe00999bdaa4 wraparound
cpuid = 1
time = 1643346257
KDB: stack backtrace:
db_trace_self_wrapper() at db_trace_self_wrapper+0xc7/frame 0xfffffe009c3415b0
kdb_backtrace() at kdb_backtrace+0xd3/frame 0xfffffe009c341710
vpanic() at vpanic+0x2b8/frame 0xfffffe009c3417f0
panic() at panic+0xb5/frame 0xfffffe009c3418b0
closef() at closef+0x73e/frame 0xfffffe009c341a90
fdescfree() at fdescfree+0xab7/frame 0xfffffe009c341c80
exit1() at exit1+0x8bf/frame 0xfffffe009c341d10
sys_exit() at sys_exit+0x28/frame 0xfffffe009c341d30
amd64_syscall() at amd64_syscall+0x410/frame 0xfffffe009c341f30
fast_syscall_common() at fast_syscall_common+0xf8/frame 0xfffffe009c341f30
--- syscall (1, FreeBSD ELF64, sys_exit), rip = 0x2ebdaa, rsp = 0x820612e08, rbp = 0x820612e10 ---
KDB: enter: panic
[ thread pid 11873 tid 113165 ]
Stopped at      kdb_enter+0x6b: movq    $0,0x270753a(%rip)
db> 
db> set $lines = 0
db> set $maxwidth = 0
db> show registers
cs                        0x20
ds                        0x3b
es                        0x3b
fs                        0x13
gs                        0x1b
ss                        0x28
rax                       0x12
rcx         0xdb5ab1660b87be0f
rdx                        0x1
rbx                          0
rsp         0xfffffe009c3416f0
rbp         0xfffffe009c341710
rsi                          0
rdi         0xffffffff817708da  vprintf+0x35a
r8                           0
r9                  0xffffffff
r10                          0
r11         0xfffffe009a8228b0
r12         0xfffffe009a8223a0
r13         0xfffffe009c341701
r14         0xffffffff82b92ba0  .str.18
r15         0xffffffff82b92ba0  .str.18
rip         0xffffffff81763e5b  kdb_enter+0x6b
rflags                    0x46
kdb_enter+0x6b: movq    $0,0x270753a(%rip)
db> show proc
Process 11873 (syz-executor.0) at 0xfffffe009b800a90:
 state: NORMAL
 uid: 0  gids: 0, 0, 5
 parent: pid 776 at 0xfffffe0058da7548
 ABI: FreeBSD ELF64
 flag: 0x10002000  flag2: 0
 arguments: /root/syz-executor.0 exec
 reaper: 0xfffffe0053df0000 reapsubtree: 1
 sigparent: 20
 vmspace: 0xfffffe009c1463f0
   (map 0xfffffe009c1463f0)
   (map.pmap 0xfffffe009c1464b0)
   (pmap 0xfffffe009c146518)
 threads: 1
113165                   Run     CPU 1                       syz-executor.0
db> ps
  pid  ppid  pgrp   uid  state   wmesg   wchan               cmd
11873   776   776     0  RE      CPU 1                       syz-executor.0
11871   778   778     0  R       (threaded)                  syz-executor.2
114111                   RunQ                                syz-executor.2
114262                   S       connec  0xfffffe0058d6449a  syz-executor.2
11869   777   777     0  R       (threaded)                  syz-executor.1
112467                   RunQ                                syz-executor.1
114260                   S       connec  0xfffffe0058d620da  syz-executor.1
11600     1 11599     0  S       uwait   0xfffffe009b44cd00  syz-executor.1
11598     1 11597     0  S       uwait   0xfffffe009c0bb180  syz-executor.1
11593     1 11592     0  S       uwait   0xfffffe009b1f2980  syz-executor.1
11590     1 11589     0  S       uwait   0xfffffe009b1f2c80  syz-executor.1
10970     1 10970     0  S       uwait   0xfffffe009c0bb580  syz-executor.0
10963     1 10963     0  S       uwait   0xfffffe009b1ef580  syz-executor.0
10952     1 10952     0  S       uwait   0xfffffe009b1efa80  syz-executor.0
10948     1 10948     0  S       uwait   0xfffffe0058c54100  syz-executor.0
10477     0     0     0  DL      mdwait  0xfffffe005791e000  [md3]
10473     0     0     0  DL      mdwait  0xfffffe009c05f000  [md2]
10469     0     0     0  DL      mdwait  0xfffffe009c1ba000  [md1]
10466     0     0     0  DL      mdwait  0xfffffe009c05e000  [md0]
10387     1   778     0  S       uwait   0xfffffe009b1f2d80  syz-executor.2
10385     1   776     0  S       uwait   0xfffffe009c0bb680  syz-executor.0
10384     1   776     0  S       uwait   0xfffffe009b1f1180  syz-executor.0
10383     1   778     0  S       uwait   0xfffffe009b1f0c80  syz-executor.2
10373     1   778     0  S       uwait   0xfffffe009b44b400  syz-executor.2
10372     1   782     0  S       uwait   0xfffffe009b1f0a80  syz-executor.3
10371     1   778     0  S       uwait   0xfffffe009b44b900  syz-executor.2
10370     1   782     0  S       uwait   0xfffffe009b1f0680  syz-executor.3
10365     1   776     0  S       uwait   0xfffffe009b1f0880  syz-executor.0
10364     1   782     0  S       uwait   0xfffffe009b1f2680  syz-executor.3
10363     1   776     0  S       uwait   0xfffffe009b1f0e80  syz-executor.0
10361     1   782     0  S       uwait   0xfffffe009b1f1680  syz-executor.3
10359     1   778     0  S       uwait   0xfffffe009c0bb780  syz-executor.2
10357     1   776     0  S       uwait   0xfffffe009b44be00  syz-executor.0
10355     1   778     0  S       uwait   0xfffffe009b44c280  syz-executor.2
10354     1   776     0  S       uwait   0xfffffe009b1f0480  syz-executor.0
10353     1   782     0  S       uwait   0xfffffe009b1f1980  syz-executor.3
10351     1   782     0  S       uwait   0xfffffe009b1f1780  syz-executor.3
10343     1   776     0  S       uwait   0xfffffe009b1f2880  syz-executor.0
10342     1   776     0  S       uwait   0xfffffe009b44b100  syz-executor.0
10329     1   778     0  S       uwait   0xfffffe009b44b200  syz-executor.2
10327     1   778     0  S       uwait   0xfffffe0058c54380  syz-executor.2
10325     1   778     0  S       umtxn   0xfffffe009b1f1880  syz-executor.2
10321     1   778     0  S       uwait   0xfffffe009b1f1080  syz-executor.2
10319     1   778     0  S       uwait   0xfffffe009b1f2a00  syz-executor.2
10316     1   778     0  S       uwait   0xfffffe009b1f2b80  syz-executor.2
10312     1   778     0  S       uwait   0xfffffe009b44b700  syz-executor.2
10220     1   778     0  S       uwait   0xfffffe009b1f0580  syz-executor.2
10210     1   778     0  S       uwait   0xfffffe0058c57d80  syz-executor.2
10205     1   778     0  S       uwait   0xfffffe009b1f0b80  syz-executor.2
10200     1   778     0  S       uwait   0xfffffe009a210280  syz-executor.2
 9642     1   778     0  SV      uwait   0xfffffe009b44b500  syz-executor.2
 9634     1   778     0  SV      uwait   0xfffffe009b44c900  syz-executor.2
 9624     1   778     0  SV      uwait   0xfffffe009a210300  syz-executor.2
 9615     1   778     0  SV      uwait   0xfffffe009b44bd00  syz-executor.2
 9462     1   782     0  S       uwait   0xfffffe009b44b600  syz-executor.3
 9457     1   782     0  S       uwait   0xfffffe009b1f1380  syz-executor.3
 9452     1   782     0  S       uwait   0xfffffe0057507680  syz-executor.3
 9447     1   782     0  S       uwait   0xfffffe009b44cb00  syz-executor.3
 9435     1   782     0  S       uwait   0xfffffe009b44ce00  syz-executor.3
 9434     1   778     0  S       umtxn   0xfffffe009b44e000  syz-executor.2
 9433     1   782     0  S       uwait   0xfffffe009b44bb00  syz-executor.3
 9431     1   778     0  S       uwait   0xfffffe009b1f1280  syz-executor.2
 9429     1   777     0  S       uwait   0xfffffe009b1f1580  syz-executor.1
 9428     1   776     0  S       uwait   0xfffffe009b44bf00  syz-executor.0
 9427     1   777     0  S       uwait   0xfffffe009b1f1a80  syz-executor.1
 9425     1   776     0  S       uwait   0xfffffe009b1f1480  syz-executor.0
 9423     1   778     0  S       uwait   0xfffffe009a210200  syz-executor.2
 9421     1   778     0  S       uwait   0xfffffe009b44e600  syz-executor.2
 9419     1   777     0  S       umtxn   0xfffffe009b44d880  syz-executor.1
 9418     1   776     0  S       uwait   0xfffffe009b44c500  syz-executor.0
 9417     1   777     0  S       uwait   0xfffffe009b44bc00  syz-executor.1
 9415     1   776     0  S       uwait   0xfffffe009b44c480  syz-executor.0
 9413     1   778     0  S       uwait   0xfffffe009b44c380  syz-executor.2
 9412     1   778     0  S       uwait   0xfffffe009b44d280  syz-executor.2
 9409     1   777     0  S       uwait   0xfffffe009b44cc00  syz-executor.1
 9408     1   776     0  S       uwait   0xfffffe009b44c600  syz-executor.0
 9407     1   777     0  S       uwait   0xfffffe009b44c700  syz-executor.1
 9403     1   776     0  S       uwait   0xfffffe009b1f1d80  syz-executor.0
 9397     1   776     0  S       uwait   0xfffffe009b44e200  syz-executor.0
 9391     1   777     0  S       uwait   0xfffffe009b44d380  syz-executor.1
 9390     1   776     0  S       uwait   0xfffffe009b44d780  syz-executor.0
 9387     1   777     0  S       uwait   0xfffffe009b1f1c00  syz-executor.1
 9383     1   777     0  S       uwait   0xfffffe009b44d580  syz-executor.1
 9382     1   782     0  S       uwait   0xfffffe009b44c800  syz-executor.3
 9378     1   777     0  S       uwait   0xfffffe009a212e00  syz-executor.1
 9375     1   782     0  S       uwait   0xfffffe009b44c200  syz-executor.3
 9373     1   777     0  S       uwait   0xfffffe009b44d480  syz-executor.1
 9371     1   782     0  S       uwait   0xfffffe009b44db00  syz-executor.3
 9370     1   777     0  S       uwait   0xfffffe0057507c80  syz-executor.1
 9367     1   782     0  S       uwait   0xfffffe0058c57c80  syz-executor.3
 9366     1   777     0  S       uwait   0xfffffe009b44d680  syz-executor.1
 9361     1   782     0  S       uwait   0xfffffe009b44d080  syz-executor.3
 9360     1   777     0  S       uwait   0xfffffe009a210e80  syz-executor.1
 9358     1   782     0  S       uwait   0xfffffe009a210380  syz-executor.3
 9356     1   777     0  S       uwait   0xfffffe0058c54400  syz-executor.1
 9352     1   777     0  S       uwait   0xfffffe009b44e300  syz-executor.1
 9191     1   776     0  S       uwait   0xfffffe009b1f2500  syz-executor.0
 9190     1   777     0  S       uwait   0xfffffe009b44ca00  syz-executor.1
 9188     1   776     0  S       uwait   0xfffffe0057507600  syz-executor.0
 9187     1   777     0  S       uwait   0xfffffe009b44de80  syz-executor.1
 9182     1   776     0  S       uwait   0xfffffe009b44cf00  syz-executor.0
 9181     1   776     0  S       uwait   0xfffffe0058c57480  syz-executor.0
 9178     1   777     0  S       uwait   0xfffffe009b44e400  syz-executor.1
 9177     1   776     0  S       uwait   0xfffffe009a210480  syz-executor.0
 9176     1   777     0  S       uwait   0xfffffe009b44dd80  syz-executor.1
 9174     1   776     0  S       uwait   0xfffffe009b44da80  syz-executor.0
 9170     1   777     0  S       uwait   0xfffffe0058c57980  syz-executor.1
 9169     1   777     0  S       uwait   0xfffffe009b44db80  syz-executor.1
 9166     1   777     0  S       uwait   0xfffffe009a211300  syz-executor.1
 9165     1   777     0  S       uwait   0xfffffe009b44d980  syz-executor.1
 8883     1   776     0  T                                   syz-executor.0
 8880     1   776     0  T                                   syz-executor.0
 8875     1   776     0  T                                   syz-executor.0
 8873     1   777     0  T                                   syz-executor.1
 8871     1   776     0  T                                   syz-executor.0
 8869     1   776     0  T                                   syz-executor.0
 8867     1   777     0  T                                   syz-executor.1
 8866     1   776     0  T                                   syz-executor.0
 8861     1   777     0  T                                   syz-executor.1
 8858     1   777     0  T                                   syz-executor.1
 8313     1   782     0  S       uwait   0xfffffe0053ee6600  syz-executor.3
 8309     1   778     0  S       uwait   0xfffffe0058c57b80  syz-executor.2
 8308     1   782     0  S       uwait   0xfffffe0058c57680  syz-executor.3
 8305     1   776     0  S       uwait   0xfffffe009a210880  syz-executor.0
 8304     1   782     0  S       uwait   0xfffffe009b1f2000  syz-executor.3
 8302     1   776     0  S       uwait   0xfffffe009b1f1e80  syz-executor.0
 8301     1   778     0  S       uwait   0xfffffe009b1f2400  syz-executor.2
 8296     1   776     0  S       uwait   0xfffffe0058c57a80  syz-executor.0
 8293     1   778     0  S       uwait   0xfffffe009b1f2200  syz-executor.2
 8289     1   778     0  S       uwait   0xfffffe009b44e500  syz-executor.2
 8216     1   776     0  S       uwait   0xfffffe0058c54480  syz-executor.0
 8212     1   776     0  S       uwait   0xfffffe0058c57880  syz-executor.0
 8210     1   776     0  S       uwait   0xfffffe009a210680  syz-executor.0
 8206     1   776     0  S       uwait   0xfffffe009a210100  syz-executor.0
 7440     1   777     0  S       uwait   0xfffffe0058c54780  syz-executor.1
 7439     1   776     0  S       uwait   0xfffffe0057507780  syz-executor.0
 7431     1   777     0  S       uwait   0xfffffe009a211500  syz-executor.1
 7430     1   776     0  S       uwait   0xfffffe0057507400  syz-executor.0
 7427     1   782     0  S       uwait   0xfffffe0057507a80  syz-executor.3
 7421     1   777     0  S       uwait   0xfffffe009a210000  syz-executor.1
 7420     1   776     0  S       uwait   0xfffffe009a212e80  syz-executor.0
 7418     1   782     0  S       uwait   0xfffffe009a211800  syz-executor.3
 7410     1   782     0  S       uwait   0xfffffe0058c54880  syz-executor.3
 7397     1   782     0  S       uwait   0xfffffe0057506100  syz-executor.3
 7271     1  7269     0  S       uwait   0xfffffe0057507500  syz-executor.1
 7267     1  7264     0  S       uwait   0xfffffe0058c54980  syz-executor.1
 7263     1  7260     0  S       uwait   0xfffffe0058c54580  syz-executor.1
 7257     1  7256     0  S       uwait   0xfffffe0057507e80  syz-executor.1
 6760     1   777     0  S       uwait   0xfffffe0057507d80  syz-executor.1
 6758     1   777     0  S       uwait   0xfffffe009a212a00  syz-executor.1
 6756     1   777     0  S       uwait   0xfffffe009a211900  syz-executor.1
 6752     1   778     0  S       uwait   0xfffffe0058c56180  syz-executor.2
 6750     1   777     0  S       uwait   0xfffffe0058c54000  syz-executor.1
 6748     1   778     0  S       uwait   0xfffffe0057507980  syz-executor.2
 6744     1   777     0  S       uwait   0xfffffe0057505000  syz-executor.1
 6742     1   778     0  S       uwait   0xfffffe0057507b80  syz-executor.2
 6739     1   777     0  S       uwait   0xfffffe0058c54680  syz-executor.1
 6729     1   777     0  S       uwait   0xfffffe009a210a80  syz-executor.1
 6669     1   777     0  S       uwait   0xfffffe0058c55700  syz-executor.1
 6664     1   777     0  S       uwait   0xfffffe0008176180  syz-executor.1
 6655     1   777     0  S       uwait   0xfffffe009a211100  syz-executor.1
 6652     1   777     0  S       uwait   0xfffffe009a211c00  syz-executor.1
 6642     1   776     0  S       uwait   0xfffffe009a212980  syz-executor.0
 6641     1   776     0  S       umtxn   0xfffffe009a211200  syz-executor.0
 6637     1   777     0  S       uwait   0xfffffe0058c54c00  syz-executor.1
 6636     1   777     0  S       uwait   0xfffffe0053ee6200  syz-executor.1
 6634     1   782     0  S       uwait   0xfffffe009a212200  syz-executor.3
 6633     1   776     0  S       uwait   0xfffffe0058c55900  syz-executor.0
 6632     1   782     0  S       uwait   0xfffffe0057504a80  syz-executor.3
 6630     1   778     0  S       uwait   0xfffffe0057504680  syz-executor.2
 6629     1   776     0  S       uwait   0xfffffe009a210c80  syz-executor.0
 6627     1   778     0  S       uwait   0xfffffe009a211b00  syz-executor.2
 6625     1   777     0  S       uwait   0xfffffe009a211000  syz-executor.1
 6624     1   777     0  S       uwait   0xfffffe0058c54d00  syz-executor.1
 6622     1   782     0  S       uwait   0xfffffe009a210980  syz-executor.3
 6621     1   778     0  S       uwait   0xfffffe009a211c80  syz-executor.2
 6620     1   782     0  S       uwait   0xfffffe009a210780  syz-executor.3
 6618     1   776     0  S       uwait   0xfffffe0057505100  syz-executor.0
 6617     1   777     0  S       uwait   0xfffffe009a212100  syz-executor.1
 6616     1   776     0  S       uwait   0xfffffe009a210580  syz-executor.0
 6614     1   778     0  S       uwait   0xfffffe009a210b80  syz-executor.2
 6612     1   777     0  S       uwait   0xfffffe009a212700  syz-executor.1
 6609     1   782     0  S       uwait   0xfffffe009a212400  syz-executor.3
 6608     1   777     0  S       uwait   0xfffffe009a210d80  syz-executor.1
 6607     1   782     0  S       uwait   0xfffffe009a212d80  syz-executor.3
 6606     1   778     0  S       uwait   0xfffffe009a211400  syz-executor.2
 6604     1   778     0  S       uwait   0xfffffe009a212500  syz-executor.2
 6602     1   777     0  S       uwait   0xfffffe009a211600  syz-executor.1
 6589     1   777     0  S       uwait   0xfffffe009a211a00  syz-executor.1
 6587     1   777     0  S       uwait   0xfffffe0057504980  syz-executor.1
 6191     1   776     0  S       uwait   0xfffffe009a212600  syz-executor.0
 6189     1   777     0  S       uwait   0xfffffe0053ee6680  syz-executor.1
 6185     1   782     0  S       uwait   0xfffffe009a212800  syz-executor.3
 6181     1   776     0  S       uwait   0xfffffe0053ee6300  syz-executor.0
 6180     1   777     0  S       uwait   0xfffffe0008176480  syz-executor.1
 6174     1   782     0  S       uwait   0xfffffe0058c55600  syz-executor.3
 6167     1   776     0  S       uwait   0xfffffe0053ee6500  syz-executor.0
 6165     1   777     0  S       uwait   0xfffffe0057505980  syz-executor.1
 6163     1   782     0  S       uwait   0xfffffe0058c54e00  syz-executor.3
 6156     1   782     0  S       uwait   0xfffffe009a210f00  syz-executor.3
 5271     1   778     0  S       uwait   0xfffffe009a211e80  syz-executor.2
 5259     1   778     0  S       uwait   0xfffffe0057504d80  syz-executor.2
 5257     1   776     0  S       uwait   0xfffffe009a213300  syz-executor.0
 5251     1   777     0  S       uwait   0xfffffe0058c55100  syz-executor.1
 5245     1   778     0  S       uwait   0xfffffe0057505680  syz-executor.2
 5244     1   782     0  S       uwait   0xfffffe0057504400  syz-executor.3
 5243     1   776     0  S       uwait   0xfffffe0057505780  syz-executor.0
 5239     1   777     0  S       uwait   0xfffffe0053ee6800  syz-executor.1
 5234     1   782     0  S       uwait   0xfffffe009a213100  syz-executor.3
 5230     1   776     0  S       uwait   0xfffffe0058c54b00  syz-executor.0
 5225     1   777     0  S       uwait   0xfffffe009a212300  syz-executor.1
 5224     1   782     0  S       uwait   0xfffffe009a212000  syz-executor.3
 5219     1   777     0  S       uwait   0xfffffe0057506000  syz-executor.1
 4972     1   777     0  S       uwait   0xfffffe0053ee6b00  syz-executor.1
 4338     1  4338    65  Ss      select  0xfffffe0053c9e640  dhclient
 4333     1   782     0  SV      uwait   0xfffffe0057504b80  syz-executor.3
 4326     1   778     0  SV      uwait   0xfffffe0057504580  syz-executor.2
 4323     1   777     0  SV      uwait   0xfffffe0058c54f00  syz-executor.1
 4322     1   782     0  SV      uwait   0xfffffe0053ee6900  syz-executor.3
 4317     1   778     0  SV      uwait   0xfffffe0058c55800  syz-executor.2
 4313     1   777     0  SV      uwait   0xfffffe0057504300  syz-executor.1
 4312     1   782     0  SV      uwait   0xfffffe009a213000  syz-executor.3
 4306     1   778     0  SV      uwait   0xfffffe0053ee6c00  syz-executor.2
 4302     1   777     0  SV      uwait   0xfffffe0057504280  syz-executor.1
 4294     1   777     0  SV      uwait   0xfffffe0057504180  syz-executor.1
 3854     0     0     0  DL      -       0xffffffff83f58740  [soaiod4]
 3853     0     0     0  DL      -       0xffffffff83f58740  [soaiod3]
 3852     0     0     0  DL      -       0xffffffff83f58740  [soaiod2]
 3851     0     0     0  DL      -       0xffffffff83f58740  [soaiod1]
 3525     1  3525     0  Ss      select  0xfffffe0053c9e340  dhclient
 3521     1  3521     0  Ss      select  0xfffffe0053c9e3c0  dhclient
 3495     1  3495    65  Ss      select  0xfffffe0053c9f040  dhclient
 2652     1  2652     0  Ss      select  0xfffffe0053f5b940  dhclient
 2649     1  2649     0  Ss      select  0xfffffe0053c9e440  dhclient
 2627     1  2627    65  Ss      select  0xfffffe0053f5bcc0  dhclient
 1836     1  1833     0  S       uwait   0xfffffe0058c56080  syz-executor.2
 1829     1  1828     0  S       uwait   0xfffffe0053ee6a00  syz-executor.2
 1827     1  1826     0  S       uwait   0xfffffe0057505d80  syz-executor.2
 1825     1  1824     0  S       uwait   0xfffffe0053ee6f00  syz-executor.2
 1823     1  1822     0  S       uwait   0xfffffe0058c56980  syz-executor.2
 1821     1  1820     0  S       uwait   0xfffffe0053ee6e00  syz-executor.2
 1819     1  1818     0  S       uwait   0xfffffe0057505e80  syz-executor.2
 1743     1  1743     0  Ss      select  0xfffffe0053c9e6c0  dhclient
 1740     1  1740     0  Ss      select  0xfffffe0053c9e540  dhclient
 1701     1  1701    65  Ss      select  0xfffffe0053f5c240  dhclient
 1522     0     0     0  DL      aiordy  0xfffffe009279a000  [aiod4]
 1521     0     0     0  DL      aiordy  0xfffffe0092d9c000  [aiod3]
 1520     0     0     0  DL      aiordy  0xfffffe0099863548  [aiod2]
 1519     0     0     0  DL      aiordy  0xfffffe0099864000  [aiod1]
  851     1   851     0  Ss      select  0xfffffe0053f5c340  dhclient
  835     1   835     0  Ss      select  0xfffffe0053c9fac0  dhclient
  782   774   782     0  Rs                                  syz-executor.3
  778   774   778     0  Ss      nanslp  0xffffffff83e38a41  syz-executor.2
  777   774   777     0  Ss      nanslp  0xffffffff83e38a41  syz-executor.1
  776   774   776     0  Ss      nanslp  0xffffffff83e38a41  syz-executor.0
  774   772   772     0  S       (threaded)                  syz-fuzzer
100111                   S       uwait   0xfffffe0057506800  syz-fuzzer
100113                   S       uwait   0xfffffe0058c56280  syz-fuzzer
100114                   S       uwait   0xfffffe0058c56380  syz-fuzzer
100115                   S       uwait   0xfffffe0058c56480  syz-fuzzer
100116                   S       uwait   0xfffffe0058c55a00  syz-fuzzer
100117                   S       uwait   0xfffffe0058c56580  syz-fuzzer
100118                   S       uwait   0xfffffe0058c56680  syz-fuzzer
100119                   S       uwait   0xfffffe0058c55b00  syz-fuzzer
100121                   S       kqread  0xfffffe0058b12300  syz-fuzzer
  772   770   772     0  Ss      pause   0xfffffe0053f0c5f8  csh
  770   688   770     0  Ss      select  0xfffffe0053c9eec0  sshd
  754     1   754     0  Ss+     ttyin   0xfffffe00574f80b0  getty
  753     1   753     0  Ss+     ttyin   0xfffffe0053f8d8b0  getty
  752     1   752     0  Ss+     ttyin   0xfffffe00586ac0b0  getty
  751     1   751     0  Ss+     ttyin   0xfffffe00586ac8b0  getty
  750     1   750     0  Ss+     ttyin   0xfffffe005794e0b0  getty
  749     1   749     0  Ss+     ttyin   0xfffffe005794e8b0  getty
  748     1   748     0  Ss+     ttyin   0xfffffe005794f0b0  getty
  747     1   747     0  Ss+     ttyin   0xfffffe005794f8b0  getty
  746     1   746     0  Ss+     ttyin   0xfffffe00579500b0  getty
  692     1   692     0  Ss      nanslp  0xffffffff83e38a40  cron
  688     1   688     0  Ss      select  0xfffffe0053c9f440  sshd
  501     1   501     0  Ss      select  0xfffffe0053f5c1c0  syslogd
  430     1   430     0  Ss      select  0xfffffe0053c9fbc0  devd
  429     1   429    65  Ss      select  0xfffffe0053f5c3c0  dhclient
  344     1   344     0  Ss      select  0xfffffe0053f5cb40  dhclient
  341     1   341     0  Ss      select  0xfffffe0053f5c9c0  dhclient
   17     0     0     0  DL      vlruwt  0xfffffe0053deea90  [vnlru]
   16     0     0     0  DL      syncer  0xffffffff83f5e280  [syncer]
   15     0     0     0  DL      (threaded)                  [bufdaemon]
100078                   D       psleep  0xffffffff83f5c860  [bufdaemon]
100081                   D       -       0xffffffff83211f80  [bufspacedaemon-0]
100092                   D       sdflush 0xfffffe0056f4f8e8  [/ worker]
    9     0     0     0  DL      psleep  0xffffffff83f8fe00  [vmdaemon]
    8     0     0     0  DL      (threaded)                  [pagedaemon]
100076                   D       psleep  0xffffffff83f83cb8  [dom0]
100079                   D       launds  0xffffffff83f83cc4  [laundry: dom0]
100080                   D       umarcl  0xffffffff81e8d640  [uma]
    7     0     0     0  DL      -       0xffffffff83bf4988  [rand_harvestq]
    6     0     0     0  DL      pftm    0xffffffff84b6c530  [pf purge]
    5     0     0     0  DL      waiting 0xffffffff846874a0  [sctp_iterator]
    4     0     0     0  DL      (threaded)                  [cam]
100045                   D       -       0xffffffff83a968c0  [doneq0]
100046                   D       -       0xffffffff83a96840  [async]
100075                   D       -       0xffffffff83a966c0  [scanner]
   14     0     0     0  DL      seqstat 0xfffffe0056f52c88  [sequencer 00]
    3     0     0     0  DL      (threaded)                  [crypto]
100041                   D       crypto_ 0xffffffff83f7f500  [crypto]
100042                   D       crypto_ 0xfffffe0053f23d30  [crypto returns 0]
100043                   D       crypto_ 0xfffffe0053f23d80  [crypto returns 1]
   13     0     0     0  DL      (threaded)                  [geom]
100036                   D       -       0xffffffff83e0e140  [g_event]
100037                   D       -       0xffffffff83e0e160  [g_up]
100038                   D       -       0xffffffff83e0e180  [g_down]
    2     0     0     0  WL      (threaded)                  [clock]
100030                   I                                   [clock (0)]
100031                   I                                   [clock (1)]
   12     0     0     0  RL      (threaded)                  [intr]
100012                   I                                   [swi5: fast taskq]
100015                   I                                   [swi6: task queue]
100016                   I                                   [swi6: Giant taskq]
100029                   I                                   [swi1: netisr 0]
100032                   I                                   [swi1: hpts]
100033                   Run     CPU 0                       [swi1: hpts]
100034                   I                                   [swi3: busdma]
100047                   I                                   [irq24: virtio_pci0]
100048                   I                                   [irq25: virtio_pci0]
100049                   I                                   [irq26: virtio_pci0]
100050                   I                                   [irq27: virtio_pci0]
100051                   I                                   [irq28: virtio_pci1]
100052                   RunQ                                [irq29: virtio_pci1]
100053                   RunQ                                [irq30: virtio_pci1]
100054                   I                                   [irq31: virtio_pci1]
100055                   I                                   [irq32: virtio_pci1]
100060                   I                                   [irq10: virtio_pci2]
100062                   I                                   [irq1: atkbd0]
100063                   I                                   [irq12: psm0]
100064                   I                                   [swi0: uart uart++]
100068                   I                                   [swi1: pf send]
   11     0     0     0  RL      (threaded)                  [idle]
100003                   CanRun                              [idle: cpu0]
100004                   CanRun                              [idle: cpu1]
    1     0     1     0  SLs     wait    0xfffffe0053df0000  [init]
   10     0     0     0  DL      audit_w 0xffffffff83f7ffe0  [audit]
    0     0     0     0  DLs     (threaded)                  [kernel]
100000                   D       swapin  0xffffffff83e0eba0  [swapper]
100005                   D       -       0xfffffe0053c9a800  [softirq_0]
100006                   D       -       0xfffffe0053c9a600  [softirq_1]
100007                   D       -       0xfffffe0053c9a400  [if_io_tqg_0]
100008                   D       -       0xfffffe0053c9a200  [if_io_tqg_1]
100009                   D       -       0xfffffe0053c9a000  [if_config_tqg_0]
100010                   D       -       0xfffffe000818f000  [deferred_unmount ta]
100011                   D       -       0xfffffe000818ee00  [thread taskq]
100013                   D       -       0xfffffe000818ec00  [kqueue_ctx taskq]
100014                   D       -       0xfffffe000818eb00  [pci_hp taskq]
100017                   D       -       0xfffffe000818e800  [aiod_kick taskq]
100018                   D       -       0xfffffe000818e700  [linuxkpi_irq_wq]
100019                   D       -       0xfffffe000818e600  [inm_free taskq]
100020                   D       -       0xfffffe000818e500  [in6m_free taskq]
100021                   D       -       0xfffffe000818e400  [linuxkpi_short_wq_0]
100022                   D       -       0xfffffe000818e400  [linuxkpi_short_wq_1]
100023                   D       -       0xfffffe000818e400  [linuxkpi_short_wq_2]
100024                   D       -       0xfffffe000818e400  [linuxkpi_short_wq_3]
100025                   D       -       0xfffffe000818e300  [linuxkpi_long_wq_0]
100026                   D       -       0xfffffe000818e300  [linuxkpi_long_wq_1]
100027                   D       -       0xfffffe000818e300  [linuxkpi_long_wq_2]
100028                   D       -       0xfffffe000818e300  [linuxkpi_long_wq_3]
100035                   D       -       0xfffffe0053f59300  [firmware taskq]
100039                   D       -       0xfffffe0053f59100  [crypto_0]
100040                   D       -       0xfffffe0053f59100  [crypto_1]
100056                   D       -       0xfffffe000818fc00  [vtnet0 rxq 0]
100057                   D       -       0xfffffe000818fb00  [vtnet0 txq 0]
100058                   D       -       0xfffffe000818fa00  [vtnet0 rxq 1]
100059                   D       -       0xfffffe000818f900  [vtnet0 txq 1]
100061                   D       vtbslp  0xfffffe0057092680  [virtio_balloon]
100065                   D       -       0xffffffff82b98680  [deadlkres]
100069                   D       -       0xfffffe000818f100  [mca taskq]
100070                   D       -       0xfffffe00574f0900  [acpi_task_0]
100071                   D       -       0xfffffe00574f0900  [acpi_task_1]
100072                   D       -       0xfffffe00574f0900  [acpi_task_2]
100074                   D       -       0xfffffe0053f58e00  [CAM taskq]
db> show all locks
Process 11869 (syz-executor.1) thread 0xfffffe009bf32e40 (112467)
exclusive sleep mutex umtxql (umtxql) r = 0 (0xffffffff83e5ff00) locked @ /syzkaller/managers/main/kernel/sys/kern/kern_umtx.c:1246
db> show malloc
              Type        InUse        MemUse     Requests
           pf_hash            5        11524K            5
          tcp_hpts            6         4801K            6
            devbuf         4213         4323K         4245
          filedesc          436         3487K        21769
         sysctloid        35454         2089K        35525
             vtbuf           24         1968K           46
              kobj          326         1304K          523
           subproc          595         1268K        12222
            newblk          150         1062K        37716
               pcb          464         1027K        22171
          vfscache            3         1025K            3
          inodedep          112          554K        12342
         ufs_quota            1          512K            1
          vfs_hash            1          512K            1
           callout            2          512K            2
              intr            4          472K            4
              vmem            3          276K            7
         sctp_stro          211          211K         4973
           filemon           26          208K          236
            acpica         1674          184K        56376
         sctp_atcl          456          171K        16542
         vnet_data            1          168K            1
           tidhash            3          141K            3
            linker          357          134K          385
           pagedep           18          133K        11009
        tfo_ccache            1          128K            1
            DEVFS1          113          113K          130
           kdtrace          663          112K        26140
               sem            4          106K            4
              umtx          814          102K          814
               BPF           46           88K           61
               bus          984           81K         3437
          mtx_pool            2           72K            2
          syncache            1           68K            1
          acpitask            1           64K            1
       ddb_capture            1           64K            1
            module          511           64K          511
            DEVFS3          132           33K          142
              temp           34           33K        11098
         hostcache            1           32K            1
               shm            1           32K           82
               msg            4           30K            4
         sctp_atky          675           29K        22374
        gtaskqueue           18           26K           18
            dirrem           90           23K        11912
            kbdmux            6           22K            6
          freework           86           22K        21098
            kqueue          290           21K        11960
            ifaddr           70           20K           72
        DEVFS_RULE           56           20K           56
           pwddesc          287           18K        11946
         ufs_mount            4           17K            5
              proc            3           17K            3
         sctp_timw           65           17K           65
               tty           16           16K           16
           md_disk            4           16K            8
          routetbl          130           16K          830
           lltable           49           16K          434
           ithread           93           15K           93
              GEOM           89           15K          674
            bus-sc           34           15K         1651
            KTRACE          101           13K        19552
             ifnet            7           13K            7
       ether_multi          152           13K          180
          freefile           93           12K        11600
              ksem           10           12K          383
              kenv           95           12K           95
      eventhandler          133           12K          133
         sctp_stri           21           11K         1052
         CAM queue            5           11K         1528
              rman           84           10K          425
         in6_multi           65            9K           67
         bmsafemap            2            9K        12461
              UART           12            9K           12
           devstat            4            9K            4
               rpc            2            8K            2
             shmfd            1            8K           57
       pfs_vncache            1            8K            1
         pfs_nodes           20            8K           20
     audit_evclass          237            8K          296
         sctp_athm          456            8K        17057
            plimit           28            7K          540
         proc-args          311            7K        13191
          sctp_map          422            7K         9880
         taskqueue           63            7K           63
              cred           26            7K          359
            DEVFSP          102            7K         1375
           session           50            7K          103
            sglist            5            7K            5
           CAM DEV            3            6K          510
       ufs_dirhash           24            5K           24
          pf_ifnet           11            5K          149
               UMA          272            5K          272
                vt           11            5K           11
           memdesc            1            4K            1
               MCA           32            4K           32
             evdev            4            4K            4
             lockf           33            4K          105
           acpisem           28            4K           28
             selfd           55            4K       180138
            CC Mem           53            4K         3588
             hhook           15            4K           17
          freeblks           13            4K        11932
          kcovinfo           52            4K           52
           pf_osfp           27            3K           27
          terminal           11            3K           11
filedesc_to_leader           40            3K           80
            select           19            3K          197
           uidinfo            3            3K           67
        local_apic            1            2K            1
           io_apic            1            2K            1
       fpukern_ctx            2            2K            2
         ipsec-saq            2            2K            2
       inpcbpolicy           64            2K         4469
            ip6opt           14            2K          221
            ip6ndp           12            2K           13
            Unitno           28            2K          273
          sctp_ifa           13            2K           14
         newdirblk           13            2K        10830
           CAM XPT           22            2K          543
          indirdep            6            2K        12285
          in_multi            6            2K           12
             mkdir           10            2K        21660
       ipsecpolicy            2            2K            2
           acpidev           20            2K           20
               osd           57            2K         3486
               msi            9            2K            9
             clone            9            2K            9
               tun            7            2K            7
           softdep            1            1K            1
            sahead            1            1K            1
          secasvar            1            1K            1
             nhops            6            1K            8
       vnodemarker            2            1K          564
      NFSD session            1            1K            1
        CAM periph            4            1K          271
             ipsec            3            1K            3
          sctp_ifn            6            1K           14
            diradd            6            1K        11960
               mld            6            1K            6
              igmp            6            1K            6
         toponodes            6            1K            6
            isadev            6            1K            6
             mount           16            1K          405
          pci_link           10            1K           10
         cryptodev           10            1K         1955
           tcp_fsb            5            1K         1055
            crypto            4            1K          485
 encap_export_host           12            1K           12
          procdesc            5            1K           14
              pfil            4            1K            4
              cdev            2            1K            2
    chacha20random            1            1K            1
            vnodes            2            1K           32
      NFSD lckfile            1            1K            1
     NFSD V4client            1            1K            1
             DEVFS            9            1K           10
           CAM SIM            2            1K            2
             sigio            4            1K            9
            feeder            7            1K            7
           tcpfunc            3            1K            3
        loginclass            3            1K            6
            prison            6            1K            6
       lkpikmalloc            5            1K            6
        aesni_data            2            1K            2
            soname            6            1K        16859
          nexusdev            8            1K            8
            apmdev            1            1K            1
          atkbddev            2            1K            2
     CAM dev queue            2            1K            2
 CAM I/O Scheduler            1            1K            1
          CAM path            4            1K         1034
          pmchooks            1            1K            1
          filecaps            5            1K          102
          sctp_vrf            1            1K            1
         sctp_aadr            1            1K          113
       ip6_msource            1            1K            1
              vnet            1            1K            1
           entropy            2            1K           48
               pmc            1            1K            1
          acpiintr            1            1K            1
              cpus            2            1K            2
    vnet_data_free            1            1K            1
           Per-cpu            1            1K            1
          p1003.1b            1            1K            1
          pf_table            0            0K          105
           pf_rule            0            0K          149
           pf_altq            0            0K            0
           pf_temp            0            0K            0
            mqdata            0            0K            0
            tcp_do            0            0K            0
            ipcomp            0            0K            0
               esp            0            0K            0
                ah            0            0K            0
        sctp_mcore            0            0K            0
        sctp_socko            0            0K         7868
         sctp_iter            0            0K           19
         sctp_mvrf            0            0K            0
         sctp_cpal            0            0K            8
         sctp_cmsg            0            0K            0
         sctp_stre            0            0K            0
         sctp_athi            0            0K            0
         sctp_a_it            0            0K           11
     NFSCL flayout            0            0K            0
      NFSCL layout            0            0K            0
        madt_table            0            0K            2
          smartpqi            0            0K            0
     NFSD rollback            0            0K            0
      NFSCL diroff            0            0K            0
       NEWdirectio            0            0K            0
               ixl            0            0K            0
        NEWNFSnode            0            0K            0
         NFSCL lck            0            0K            0
      NFSCL lckown            0            0K            0
      NFSCL client            0            0K            0
       NFSCL deleg            0            0K            0
        NFSCL open            0            0K            0
       NFSCL owner            0            0K            0
        ice-resmgr            0            0K            0
         ice-osdep            0            0K            0
               ice            0            0K            0
              iavf            0            0K            0
             axgbe            0            0K            0
            NFS fh            0            0K            0
           NFS req            0            0K            0
     NFSD usrgroup            0            0K            0
       NFSD string            0            0K            0
       NFSD V4lock            0            0K            0
      NFSD V4state            0            0K            0
     NFSD srvcache            0            0K            0
       msdosfs_fat            0            0K            0
          xen_intr            0            0K            0
     msdosfs_mount            0            0K            0
      msdosfs_node            0            0K            0
           xen_hvm            0            0K            0
         legacydrv            0            0K            0
            bounce            0            0K            0
            busdma            0            0K            0
            qpidrv            0            0K            0
      dmar_idpgtbl            0            0K            0
          dmar_dom            0            0K            0
          dmar_ctx            0            0K            0
            DEVFS4            0            0K            0
              isci            0            0K            0
      iommu_dmamap            0            0K            0
     hyperv_socket            0            0K            0
           bxe_ilt            0            0K            0
            DEVFS2            0            0K            0
            xenbus            0            0K            0
            gntdev            0            0K            0
       privcmd_dev            0            0K            0
        evtchn_dev            0            0K            0
     vm_fictitious            0            0K            0
          xenstore            0            0K            0
         scsi_pass            0            0K            0
         ciss_data            0            0K            0
               xnb            0            0K            0
              xbbd            0            0K            0
               xbd            0            0K            0
           Balloon            0            0K            0
          sysmouse            0            0K            0
            vtfont            0            0K            0
           UMAHash            0            0K            0
         BACKLIGHT            0            0K            0
           ath_hal            0            0K            0
         vm_pgdata            0            0K            0
           jblocks            0            0K            0
          savedino            0            0K        10403
          sentinel            0            0K            0
            jfsync            0            0K            0
            jtrunc            0            0K            0
             sbdep            0            0K          274
           jsegdep            0            0K            0
              jseg            0            0K            0
         jfreefrag            0            0K            0
          jfreeblk            0            0K            0
           jnewblk            0            0K            0
            jmvref            0            0K            0
           jremref            0            0K            0
           jaddref            0            0K            0
           freedep            0            0K            0
          freefrag            0            0K          103
        allocindir            0            0K            0
       allocdirect            0            0K            0
          ufs_trim            0            0K            0
           mactemp            0            0K            0
     audit_trigger            0            0K            0
 audit_pipe_presel            0            0K            0
     audit_pipeent            0            0K            0
        audit_pipe            0            0K            0
      audit_evname            0            0K            0
         audit_bsm            0            0K            0
      audit_gidset            0            0K            0
        audit_text            0            0K            0
        audit_path            0            0K            0
        audit_data            0            0K            0
        audit_cred            0            0K            0
            athdev            0            0K            0
           ata_pci            0            0K            0
           ata_dma            0            0K            0
       ata_generic            0            0K            0
            pvscsi            0            0K            0
           scsi_da            0            0K           69
            ata_da            0            0K            0
           scsi_ch            0            0K            0
           scsi_cd            0            0K            0
       AHCI driver            0            0K            0
            USBdev            0            0K            0
               USB            0            0K            0
          ktls_ocf            0            0K            0
               agp            0            0K            0
        MLX5EEPROM            0            0K            0
        MLX5EEPROM            0            0K            0
        MLX5EEPROM            0            0K            0
        MLX5EEPROM            0            0K            0
         MLX5E_TLS            0            0K            0
        MLX5EEPROM            0            0K            0
        MLX5EEPROM            0            0K            0
        MLX5EEPROM            0            0K            0
            MLX5EN            0            0K            0
        MLX5EEPROM            0            0K            0
        MLX5EEPROM            0            0K            0
        MLX5EEPROM            0            0K            0
          MLX5DUMP            0            0K            0
        MLX5EEPROM            0            0K            0
        MLX5EEPROM            0            0K            0
          seq_file            0            0K            0
           lkpiskb            0            0K            0
             radix            0            0K            0
               idr            0            0K            0
          lkpindev            0            0K            0
            lkpifw            0            0K            0
         lkpi80211            0            0K            0
               NLM            0            0K            0
    ipsec-spdcache            0            0K            0
         ipsec-reg            0            0K            0
        ipsec-misc            0            0K            0
      ipsecrequest            0            0K            0
      ip6_moptions            0            0K           24
       in6_mfilter            0            0K           32
             frag6            0            0K            0
            tcplog            0            0K            0
        tcp_hwpace            0            0K            0
               LRO            0            0K            0
        ip_msource            0            0K            0
       ip_moptions            0            0K           17
        in_mfilter            0            0K            4
              ipid            0            0K            0
         80211scan            0            0K            0
      80211ratectl            0            0K            0
        80211power            0            0K            0
       80211nodeie            0            0K            0
         80211node            0            0K            0
      80211mesh_gt            0            0K            0
      80211mesh_rt            0            0K            0
         80211perr            0            0K            0
         80211prep            0            0K            0
         80211preq            0            0K            0
          80211dfs            0            0K            0
       80211crypto            0            0K            0
          80211vap            0            0K            0
             iflib            0            0K            0
              vlan            0            0K            0
               gif            0            0K            0
           ifdescr            0            0K            0
              zlib            0            0K            0
           fadvise            0            0K           14
           VN POLL            0            0K            0
           nvme_da            0            0K            0
            statfs            0            0K        11050
     namei_tracker            0            0K            1
       export_host            0            0K            0
        cl_savebuf            0            0K           47
           acpipwr            0            0K            0
         acpi_perf            0            0K            0
            twsbuf            0            0K            0
      twe_commands            0            0K            0
       tcp_log_dev            0            0K          552
      midi buffers            0            0K            0
             mixer            0            0K            0
              ac97            0            0K            0
             hdacc            0            0K            0
              hdac            0            0K            0
              hdaa            0            0K            0
         acpicmbat            0            0K            0
       SIIS driver            0            0K            0
           CAM CCB            0            0K          523
               PUC            0            0K            0
            biobuf            0            0K            0
              aios            0            0K            4
               lio            0            0K           79
               acl            0            0K            0
          ppbusdev            0            0K            0
          mbuf_tag            0            0K          255
              ktls            0            0K            0
agtiapi_MemAlloc malloc            0            0K            0
    osti_cacheable            0            0K            0
          tempbuff            0            0K            0
          tempbuff            0            0K            0
ag_tgt_map_t malloc            0            0K            0
ag_slr_map_t malloc            0            0K            0
lDevFlags * malloc            0            0K            0
tiDeviceHandle_t * malloc            0            0K            0
ag_portal_data_t malloc            0            0K            0
ag_device_t malloc            0            0K            0
     STLock malloc            0            0K            0
          CCB List            0            0K            0
            sr_iov            0            0K            0
               OCS            0            0K            0
               OCS            0            0K            0
              nvme            0            0K            0
               nvd            0            0K            0
            netmap            0            0K            0
            mwldev            0            0K            0
        MVS driver            0            0K            0
     CAM ccb queue            0            0K            0
          mrsasbuf            0            0K            0
          mpt_user            0            0K            0
              accf            0            0K            0
               pts            0            0K            0
               iov            0            0K        28864
          ioctlops            0            0K         1155
           eventfd            0            0K           17
           Witness            0            0K            0
             stack            0            0K            0
          mps_user            0            0K            0
            MPSSAS            0            0K            0
               mps            0            0K            0
          mpr_user            0            0K            0
            MPRSAS            0            0K            0
               mpr            0            0K            0
              sbuf            0            0K          344
            mfibuf            0            0K            0
          firmware            0            0K            0
        compressor            0            0K            0
        md_sectors            0            0K            0
              SWAP            0            0K            0
           malodev            0            0K            0
         sysctltmp            0            0K          932
            sysctl            0            0K            3
               LED            0            0K            0
              ekcd            0            0K            0
            dumper            0            0K            0
          sendfile            0            0K            0
              rctl            0            0K            0
          ix_sriov            0            0K            0
        aacraidcam            0            0K            0
                ix            0            0K            0
             cache            0            0K            0
            ipsbuf            0            0K            0
       aacraid_buf            0            0K            0
      prison_racct            0            0K            0
       Fail Points            0            0K            0
               pwd            0            0K            0
       tty console            0            0K            0
            aaccam            0            0K            0
            aacbuf            0            0K            0
              zstd            0            0K            0
            XZ_DEC            0            0K            0
            nvlist            0            0K            0
          SCSI ENC            0            0K            0
           SCSI sa            0            0K            0
        isofs_node            0            0K            0
       isofs_mount            0            0K            0
     tr_raid5_data            0            0K            0
    tr_raid1e_data            0            0K            0
     tr_raid1_data            0            0K            0
     tr_raid0_data            0            0K            0
    tr_concat_data            0            0K            0
       md_sii_data            0            0K            0
   md_promise_data            0            0K            0
    md_nvidia_data            0            0K            0
   md_jmicron_data            0            0K            0
     md_intel_data            0            0K            0
       md_ddf_data            0            0K            0
         raid_data            0            0K           96
     geom_flashmap            0            0K            0
         tmpfs dir            0            0K            0
        tmpfs name            0            0K            0
       tmpfs mount            0            0K            0
           NFS FHA            0            0K            0
         newnfsmnt            0            0K            0
  newnfsclient_req            0            0K            0
   NFSCL layrecall            0            0K            0
     NFSCL session            0            0K            0
     NFSCL sockreq            0            0K            0
     NFSCL devinfo            0            0K            0
db> show uma
              Zone   Size    Used    Free    Requests  Sleeps  Bucket  Total Mem    XFree
   mbuf_jumbo_page   4096    8398    1508       88088       0     254   40574976        0
           tcp_log    416     574   20261      980664       0     254    8667360        0
              mbuf    256   10349    7444     2879270       0     254    4555008        0
      malloc-16384  16384     218       5       10883       0       1    3653632        0
    ertt_txseginfo     40   69568   20625     1968910       0     254    3607720        0
       tcp_bbr_map    128   15056    7109      590839       0     127    2837120        0
       malloc-4096   4096     621       5       12384       0       2    2564096        0
              pbuf   2624       0     762           0       0       2    1999488        0
        RADIX NODE    144   13181     534      261251       0      63    1974960        0
         VM OBJECT    264    6981      69      264876       0      30    1861200        0
          BUF TRIE    144     442   11346       25687       0      63    1697472        0
        malloc-384    384    4117      53        4152       0      30    1601280        0
        malloc-128    128   11956     289       33771       0     126    1567360        0
      mbuf_cluster   2048     762       0         762       0     254    1560576        0
         vmem btag     56   24914     109       24914       0     254    1401288        0
       UMA Slabs 0    112   12121       5       12121       0     126    1358112        0
         MAP ENTRY     96   13272     336      692945       0     126    1306368        0
         sctp_asoc   2288     211     299        4930       0     254    1166880        0
        256 Bucket   2048     408      32       14009       0       8     901120        0
         FFS inode   1160     727      29       12366       0       8     876960        0
            THREAD   1808     374      33       14265       0       8     735856        0
           VMSPACE   2552     259      11       11828       0       4     689040        0
           sctp_ep   1208     224     286       10997       0     254     616080        0
       malloc-2048   2048     225      63       11005       0       8     589824        0
             tcpcb   1096      53     458        3475       0     254     560056        0
            socket    960     106     402       16856       0     254     487680        0
        malloc-384    384     606     594       29577       0      30     460800        0
              PROC   1352     287      19       11873       0       8     413712        0
          lkpicurr    168       2    2350           2       0      62     395136        0
             VNODE    448     767     106       12408       0      30     391104        0
            lkpimm    168       1    2327           1       0      62     391104        0
        sctp_raddr    736     239     278        5320       0     254     380512        0
     FPU_save_area    832     376      47       15572       0      16     351936        0
        sctp_chunk    152     634    1654       10260       0     254     347776        0
         filedesc0   1072     288      20       11946       0       8     330176        0
       malloc-1024   1024     223      65        4907       0      16     294912        0
         malloc-64     64    4318     281        4539       0     254     294336        0
       malloc-8192   8192      29       4         247       0       1     270336        0
      malloc-65536  65536       4       0           4       0       1     262144        0
        malloc-256    256     243     762       58604       0      62     257280        0
         malloc-16     16   14847     153       21918       0     254     240000        0
        malloc-256    256     370     560       52893       0      62     238080        0
      malloc-32768  32768       0       7       11361       0       1     229376        0
            DEVCTL   1024       0     220         162       0       0     225280        0
       FFS2 dinode    256     727      83       12366       0      62     207360        0
      malloc-65536  65536       1       2         242       0       1     196608        0
      malloc-65536  65536       1       2          13       0       1     196608        0
      malloc-65536  65536       0       3         440       0       1     196608        0
       mbuf_packet    256     131     631       52731       0     254     195072        0
         UMA Zones    768     244       0         244       0      16     187392        0
         malloc-32     32    5399     271        6554       0     254     181440        0
        malloc-128    128     742     653       16492       0     126     178560        0
        malloc-128    128    1166     229       26582       0     126     178560        0
        malloc-256    256     536     154       16480       0      62     176640        0
       S VFS Cache    104    1072     449       13382       0     126     158184        0
        128 Bucket   1024      76      71        4557       0      16     150528        0
        malloc-384    384     357      33         359       0      30     149760        0
       malloc-1024   1024     130      14         147       0      16     147456        0
      malloc-65536  65536       2       0           2       0       1     131072        0
      malloc-32768  32768       1       3         121       0       1     131072        0
      malloc-32768  32768       0       4          44       0       1     131072        0
        malloc-128    128     914     109        2671       0     126     130944        0
             unpcb    256      20     490        1330       0     254     130560        0
            clpbuf   2624       0      48         652       0      16     125952        0
          ksiginfo    112     296     748        1949       0     126     116928        0
       malloc-4096   4096      23       1          25       0       2      98304        0
        malloc-256    256     255     120       11089       0      62      96000        0
          UMA Kegs    384     230       3         230       0      30      89472        0
          syncache    168       0     528           8       0     254      88704        0
         64 Bucket    512      90      78       16328       0      30      86016        0
             g_bio    408       0     210      188513       0      30      85680        0
       malloc-2048   2048       5      35        1279       0       8      81920        0
        sctp_readq    152       0     520         470       0     254      79040        0
       malloc-4096   4096      13       5         146       0       2      73728        0
         malloc-64     64     826     245       30065       0     254      68544        0
         malloc-64     64     527     544        2844       0     254      68544        0
      malloc-65536  65536       1       0           1       0       1      65536        0
      malloc-65536  65536       0       1           8       0       1      65536        0
      malloc-16384  16384       0       4         160       0       1      65536        0
       malloc-8192   8192       6       2         112       0       1      65536        0
         32 Bucket    256     109     146       12249       0      62      65280        0
         tcp_inpcb    424      53     100        3475       0      30      64872        0
sctp_stream_msg_out    112      70     470        1148       0     254      60480        0
         TURNSTILE    136     408      33         408       0      62      59976        0
       tcp_bbr_pcb    832      34      38        1707       0      16      59904        0
             ripcb    424       5     121         313       0      30      53424        0
         malloc-64     64     409     410      199030       0     254      52416        0
         malloc-64     64     367     452         380       0     254      52416        0
             Files     80     386     264       40177       0     126      52000        0
        malloc-128    128     135     268         429       0     126      51584        0
        malloc-256    256      24     171       11363       0      62      49920        0
           DIRHASH   1024      34      14          34       0      16      49152        0
             NAMEI   1024       0      48       65581       0      16      49152        0
      malloc-16384  16384       3       0           3       0       1      49152        0
      malloc-16384  16384       2       1          17       0       1      49152        0
       malloc-8192   8192       6       0           6       0       1      49152        0
       malloc-2048   2048       5      19         105       0       8      49152        0
       malloc-2048   2048       5      19         896       0       8      49152        0
       malloc-1024   1024       9      39         880       0      16      49152        0
      tcp_rack_pcb    896       5      49        1055       0      16      48384        0
              pipe    744      24      41         610       0      16      48360        0
        SLEEPQUEUE     88     408     104         408       0     126      45056        0
            pcpu-8      8    4750     882        8100       0     254      45056        0
       malloc-8192   8192       2       3          63       0       1      40960        0
       Mountpoints   2752       2      12           6       0       4      38528        0
     udplite_inpcb    424       0      90         170       0      30      38160        0
         udp_inpcb    424       6      84         511       0      30      38160        0
            da_ccb    544       0      70       48195       0      16      38080        0
         hostcache     64       6     561           6       0     254      36288        0
               PWD     32     194     940       10827       0     254      36288        0
         malloc-64     64     116     451         701       0     254      36288        0
         malloc-64     64      91     476       25013       0     254      36288        0
         malloc-64     64     137     430        9455       0     254      36288        0
         malloc-32     32     566     568       16384       0     254      36288        0
         16 Bucket    144      94     158        2441       0      62      36288        0
        malloc-128    128      61     218       11150       0     126      35712        0
        malloc-128    128     105     174         985       0     126      35712        0
        malloc-128    128      64     215       12522       0     126      35712        0
            itimer    352       0      99         620       0      30      34848        0
     routing nhops    256      27     108          38       0      62      34560        0
           ttyoutq    256      72      63         160       0      62      34560        0
        malloc-384    384      52      38         352       0      30      34560        0
        malloc-256    256      44      91         817       0      62      34560        0
        malloc-256    256      20     115        1366       0      62      34560        0
        malloc-256    256      67      68         139       0      62      34560        0
      malloc-32768  32768       1       0           1       0       1      32768        0
      malloc-32768  32768       1       0           1       0       1      32768        0
       malloc-4096   4096       6       2         371       0       2      32768        0
       malloc-2048   2048       7       9           7       0       8      32768        0
       malloc-2048   2048       0      16          50       0       8      32768        0
       malloc-2048   2048       2      14         282       0       8      32768        0
       malloc-1024   1024       0      32          58       0      16      32768        0
       malloc-1024   1024       8      24           8       0      16      32768        0
       malloc-1024   1024       1      31        1366       0      16      32768        0
        malloc-512    512      11      53          19       0      30      32768        0
        malloc-512    512      29      35        1090       0      30      32768        0
        malloc-512    512       5      59          54       0      30      32768        0
        malloc-512    512       0      64          14       0      30      32768        0
           pcpu-64     64     487      25         487       0     254      32768        0
             KNOTE    160      28     172      104667       0      62      32000        0
            ttyinq    160     135      65         300       0      62      32000        0
      tcp_rack_map    120      11     253        2972       0     126      31680        0
            cpuset    104      39     240         978       0     126      29016        0
   sctp_asconf_ack     48       0     588          16       0     254      28224        0
        sctp_laddr     48     262     326        5509       0     254      28224        0
   tcp_inpcb ports     32       8     874        2624       0     254      28224        0
          4 Bucket     48       6     582         326       0     254      28224        0
          2 Bucket     32      74     808        3307       0     254      28224        0
               AIO    208       0     133         116       0      62      27664        0
       malloc-8192   8192       2       1           4       0       1      24576        0
       malloc-8192   8192       3       0           3       0       1      24576        0
       malloc-4096   4096       5       1           9       0       2      24576        0
       malloc-4096   4096       2       4       11678       0       2      24576        0
           rtentry    176      30     108          38       0      62      24288        0
              PGRP     88      54     222         111       0     126      24288        0
          rl_entry     40     213     393         220       0     254      24240        0
          8 Bucket     80      57     243        3179       0     126      24000        0
        malloc-384    384       0      60          43       0      30      23040        0
        malloc-384    384      20      40         370       0      30      23040        0
        malloc-384    384       2      58           2       0      30      23040        0
         domainset     40       0     567         862       0     254      22680        0
tfo_ccache_entries     80       3     253           3       0     126      20480        0
             udpcb     32       6     624         681       0     254      20160        0
udplite_inpcb ports     32       0     630           5       0     254      20160        0
   udp_inpcb ports     32       3     627          82       0     254      20160        0
              ertt     72      53     227        3475       0     126      20160        0
         malloc-32     32      30     600         512       0     254      20160        0
         malloc-32     32     138     492         915       0     254      20160        0
         malloc-32     32     239     391       21923       0     254      20160        0
         malloc-32     32     149     481        4712       0     254      20160        0
         malloc-32     32     269     361        3160       0     254      20160        0
         malloc-32     32      28     602        1076       0     254      20160        0
         malloc-16     16     526     724       20619       0     254      20000        0
           cryptop    280       0      70         136       0      30      19600        0
             AIOCB    552       0      35         276       0      16      19320        0
            AIOLIO    272       0      70          79       0      30      19040        0
 epoch_record pcpu    256       4      60           4       0      62      16384        0
      malloc-16384  16384       1       0           1       0       1      16384        0
      malloc-16384  16384       1       0           1       0       1      16384        0
       malloc-8192   8192       2       0           2       0       1      16384        0
       malloc-4096   4096       0       4          15       0       2      16384        0
       malloc-2048   2048       2       6         193       0       8      16384        0
       malloc-1024   1024      14       2          15       0      16      16384        0
       malloc-1024   1024       5      11         245       0      16      16384        0
        malloc-512    512       0      32           8       0      30      16384        0
        malloc-512    512       2      30        1109       0      30      16384        0
           SMR CPU     32       7     504           7       0     254      16352        0
          tcpreass     48       0     336          10       0     254      16128        0
      vtnet_tx_hdr     24       1     667      696148       0     254      16032        0
         malloc-16     16     449     551       10020       0     254      16000        0
              kenv    258      15      45        1041       0      30      15480        0
            mqnode    416       3      33           3       0      30      14976        0
              vmem   1856       1       7           1       0       8      14848        0
        SMR SHARED     24       7     504           7       0     254      12264        0
              AIOP     32       4     374           4       0     254      12096        0
         malloc-16     16     276     474       12735       0     254      12000        0
         malloc-16     16      16     734        2473       0     254      12000        0
         malloc-16     16      47     703       15503       0     254      12000        0
         malloc-16     16      44     706          63       0     254      12000        0
         malloc-16     16     274     476       26206       0     254      12000        0
        malloc-384    384       1      29           2       0      30      11520        0
       malloc-8192   8192       1       0           1       0       1       8192        0
       malloc-4096   4096       0       2           1       0       2       8192        0
           pcpu-16     16      14     498          14       0     254       8192        0
       UMA Slabs 1    176      10      12          10       0      62       3872        0
        KMAP ENTRY     96      12      27          14       0       0       3744        0
       FFS1 dinode    128       0       0           0       0     126          0        0
           ada_ccb    272       0       0           0       0      30          0        0
             swblk    136       0       0           0       0      62          0        0
          swpctrie    144       0       0           0       0      62          0        0
   cdg_qdiffsample     16       0       0           0       0     254          0        0
   pf state scrubs     40       0       0           0       0     254          0        0
   pf frag entries     40       0       0           0       0     254          0        0
          pf frags    248       0       0           0       0      62          0        0
  pf table entries    160       0       0           0       0      62          0        0
pf table entry counters     64       0       0           0       0     254          0        0
   pf source nodes    136       0       0           0       0     254          0        0
     pf state keys     88       0       0           0       0     126          0        0
         pf states    312       0       0           0       0       0          0        0
           pf tags    104       0       0           0       0     126          0        0
          pf mtags     48       0       0           0       0     254          0        0
               ipq     56       0       0           0       0     254          0        0
               tfo      4       0       0           0       0     254          0        0
          sackhole     32       0       0           0       0     254          0        0
             tcptw     72       0       0           0       0     254          0        0
      tcp_log_node    120       0       0           0       0     126          0        0
    tcp_log_bucket    176       0       0           0       0      62          0        0
       sctp_asconf     40       0       0           0       0     254          0        0
       ripcb ports     32       0       0           0       0     254          0        0
    IPsec SA lft_c     16       0       0           0       0     254          0        0
        TMPFS node    224       0       0           0       0      62          0        0
        mqnotifier    216       0       0           0       0      62          0        0
            mvdata     64       0       0           0       0     254          0        0
            mqueue    248       0       0           0       0      62          0        0
           NCLNODE    608       0       0           0       0      16          0        0
     LTS VFS Cache    360       0       0           0       0      30          0        0
       L VFS Cache    320       0       0           0       0      30          0        0
     STS VFS Cache    144       0       0           0       0      62          0        0
  linux_dma_object     32       0       0           0       0     254          0        0
  linux_dma_pctrie    144       0       0           0       0      62          0        0
   IOMMU_MAP_ENTRY    120       0       0           0       0     126          0        0
    mbuf_jumbo_16k  16384       0       0           0       0     254          0        0
     mbuf_jumbo_9k   9216       0       0           0       0     254          0        0
      audit_record   1280       0       0           0       0       8          0        0
        MAC labels     40       0       0           0       0     254          0        0
            vnpbuf   2624       0       0           0       0      64          0        0
            mdpbuf   2624       0       0           0       0       3          0        0
           nfspbuf   2624       0       0           0       0      16          0        0
            swwbuf   2624       0       0           0       0       8          0        0
            swrbuf   2624       0       0           0       0      16          0        0
          umtx_shm     88       0       0           0       0     126          0        0
           umtx pi     96       0       0           0       0     126          0        0
rangeset pctrie nodes    144       0       0           0       0      62          0        0
      malloc-65536  65536       0       0           0       0       1          0        0
      malloc-32768  32768       0       0           0       0       1          0        0
      malloc-32768  32768       0       0           0       0       1          0        0
      malloc-32768  32768       0       0           0       0       1          0        0
      malloc-16384  16384       0       0           0       0       1          0        0
      malloc-16384  16384       0       0           0       0       1          0        0
        malloc-512    512       0       0           0       0      30          0        0
        malloc-512    512       0       0           0       0      30          0        0
           pcpu-32     32       0       0           0       0     254          0        0
            pcpu-4      4       0       0           0       0     254          0        0
            fakepg    104       0       0           0       0     126          0        0
          UMA Hash    256       0       0           0       0      62          0        0

Crashes (21):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2022/01/28 05:04 freebsd-src 140db0be99f1 495e00c5 console log report ci-freebsd-main panic: refcount ADDR wraparound
2022/01/18 19:59 freebsd-src a3af69fa81d2 731a2d23 console log report ci-freebsd-main panic: refcount ADDR wraparound
2022/01/04 14:38 freebsd-src 6b54d2f4c529 7f723fbe console log report ci-freebsd-main panic: refcount ADDR wraparound
2022/01/01 22:15 freebsd-src 18f20d5d967a e1768e9c console log report ci-freebsd-main panic: refcount ADDR wraparound
2021/12/19 09:48 freebsd-src 9a8cf950b259 44068e19 console log report ci-freebsd-main panic: refcount ADDR wraparound
2021/12/17 16:46 freebsd-src 266cbbfc6526 44068e19 console log report ci-freebsd-main panic: refcount ADDR wraparound
2021/12/16 08:18 freebsd-src b214fcceacad 572bcb40 console log report ci-freebsd-main panic: refcount ADDR wraparound
2021/12/14 23:29 freebsd-src bfd451210e59 d018dd31 console log report ci-freebsd-main panic: refcount ADDR wraparound
2021/12/13 12:58 freebsd-src dabd8bf9145a 0304899b console log report ci-freebsd-main panic: refcount ADDR wraparound
2021/12/11 02:22 freebsd-src dabd8bf9145a 49ca1f59 console log report ci-freebsd-main panic: refcount ADDR wraparound
2021/12/10 13:21 freebsd-src dabd8bf9145a 15439f16 console log report ci-freebsd-main panic: refcount ADDR wraparound
2021/12/09 23:04 freebsd-src dabd8bf9145a 4d4ce9bc console log report ci-freebsd-main panic: refcount ADDR wraparound
2021/12/09 10:33 freebsd-src dabd8bf9145a a4a2a501 console log report ci-freebsd-main panic: refcount ADDR wraparound
2021/12/06 11:30 freebsd-src dabd8bf9145a 579a8754 console log report ci-freebsd-main panic: refcount ADDR wraparound
2021/12/04 02:02 freebsd-src dabd8bf9145a a617004c console log report ci-freebsd-main panic: refcount ADDR wraparound
2021/12/04 01:34 freebsd-src dabd8bf9145a a617004c console log report ci-freebsd-main panic: refcount ADDR wraparound
2021/12/01 08:39 freebsd-src 4f924a786ae0 5fa3eacc console log report ci-freebsd-main panic: refcount ADDR wraparound
2021/12/10 13:01 freebsd-src fa5af3219fab 15439f16 console log report ci-freebsd-i386 panic: refcount ADDR wraparound
2021/12/02 12:23 freebsd-src f89f6f9581bd 61f86278 console log report ci-freebsd-i386 panic: refcount ADDR wraparound
2021/11/29 06:52 freebsd-src d109559ddbf7 63eeac02 console log report ci-freebsd-i386 panic: refcount ADDR wraparound
2021/11/21 21:50 freebsd-src 8ec4c5dae327 4eb20a4e console log report ci-freebsd-i386 panic: refcount ADDR wraparound
* Struck through repros no longer work on HEAD.