syzbot


panic: sbcut_internal: no next, len NUM

Status: fixed on 2023/08/24 15:41
Reported-by: syzbot+291f6581cecb77097b16@syzkaller.appspotmail.com
Fix commit: 847fa61fad5e sctp: improve handling of socket shutdown for reading
First crash: 394d, last: 394d

Sample crash report:
panic: sbcut_internal: no next, len 16316
cpuid = 0
time = 1691715650
KDB: stack backtrace:
db_trace_self_wrapper() at db_trace_self_wrapper+0xc6/frame 0xfffffe0007b1a710
kdb_backtrace() at kdb_backtrace+0xd0/frame 0xfffffe0007b1a870
vpanic() at vpanic+0x271/frame 0xfffffe0007b1aa10
panic() at panic+0xb5/frame 0xfffffe0007b1aad0
sbcut_internal() at sbcut_internal+0x69a/frame 0xfffffe0007b1ab60
sbrelease_internal() at sbrelease_internal+0x6f/frame 0xfffffe0007b1abc0
sbrelease() at sbrelease+0x6c/frame 0xfffffe0007b1abf0
sorflush() at sorflush+0xcb/frame 0xfffffe0007b1ac20
soshutdown() at soshutdown+0x281/frame 0xfffffe0007b1ac70
kern_shutdown() at kern_shutdown+0x13d/frame 0xfffffe0007b1ad30
amd64_syscall() at amd64_syscall+0x423/frame 0xfffffe0007b1af30
fast_syscall_common() at fast_syscall_common+0xf8/frame 0xfffffe0007b1af30
--- syscall (0, FreeBSD ELF64, syscall), rip = 0x23420a, rsp = 0x82083b268, rbp = 0x82083b2c0 ---
KDB: enter: panic
[ thread pid 1877 tid 100094 ]
Stopped at      kdb_enter+0x6e: movq    $0,0x217c377(%rip)
db> 
db> set $lines = 0
db> set $maxwidth = 0
db> show registers
cs                        0x20
ds                        0x3b
es                        0x3b
fs                        0x13
gs                        0x1b
ss                        0x28
rax                       0x12
rcx         0xfffffe00033eee30
rdx         0xdffff7c000000000
rbx         0xffffffff826c7940  .str.28
rsp         0xfffffe0007b1a850
rbp         0xfffffe0007b1a870
rsi                        0x1
rdi                          0
r8                           0
r9                  0xffffffff
r10                          0
r11         0xfffffe0058b01360
r12                          0
r13         0xfffffe0058b00e40
r14         0xffffffff826c7940  .str.28
r15                          0
rip         0xffffffff815c151e  kdb_enter+0x6e
rflags                    0x46
kdb_enter+0x6e: movq    $0,0x217c377(%rip)
db> show proc
Process 1877 (syz-executor2591854) at 0xfffffe0007c14b00:
 state: NORMAL
 uid: 0  gids: 0, 0, 5
 parent: pid 778 at 0xfffffe006a3f0ae0
 ABI: FreeBSD ELF64
 flag: 0x10000000  flag2: 0
 arguments: ./syz-executor2591854985
 reaper: 0xfffffe0054225040 reapsubtree: 1
 sigparent: 20
 vmspace: 0xfffffe0058a8cc08
   (map 0xfffffe0058a8cc08)
   (map.pmap 0xfffffe0058a8ccc8)
   (pmap 0xfffffe0058a8cd38)
 threads: 1
100094                   Run     CPU 0                       syz-executor2591854
db> ps
  pid  ppid  pgrp   uid  state   wmesg   wchan               cmd
 1886   780   771     0  S       connec  0xfffffe0058b4049a  syz-executor2591854
 1885   775   771     0  S       connec  0xfffffe0058b3ec1a  syz-executor2591854
 1883   774   771     0  S       connec  0xfffffe0058b3e85a  syz-executor2591854
 1877   778   771     0  R       CPU 0                       syz-executor2591854
  780   773   771     0  S       nanslp  0xffffffff8371ec80  syz-executor2591854
  778   773   771     0  S       nanslp  0xffffffff8371ec80  syz-executor2591854
  775   773   771     0  S       nanslp  0xffffffff8371ec80  syz-executor2591854
  774   773   771     0  S       nanslp  0xffffffff8371ec80  syz-executor2591854
  773   771   771     0  S       nanslp  0xffffffff8371ec81  syz-executor2591854
  771   769   771     0  Ss      pause   0xfffffe006cdd4630  csh
  769   682   769     0  Ss      select  0xfffffe006ca3f0c0  sshd
  748     1   748     0  Ss+     ttyin   0xfffffe00572328b0  getty
  747     1   747     0  Ss+     ttyin   0xfffffe00587f38b0  getty
  746     1   746     0  Ss+     ttyin   0xfffffe00587f40b0  getty
  745     1   745     0  Ss+     ttyin   0xfffffe00587f48b0  getty
  744     1   744     0  Ss+     ttyin   0xfffffe00543980b0  getty
  743     1   743     0  Ss+     ttyin   0xfffffe00543988b0  getty
  742     1   742     0  Ss+     ttyin   0xfffffe00543990b0  getty
  741     1   741     0  Ss+     ttyin   0xfffffe00543998b0  getty
  740     1   740     0  Ss+     ttyin   0xfffffe005439a0b0  getty
  738     1    18     0  S+      piperd  0xfffffe0058a8a888  logger
  737   736    18     0  S+      nanslp  0xffffffff8371ec80  sleep
  736     1    18     0  S+      wait    0xfffffe0054225b00  sh
  686     1   686     0  Ss      nanslp  0xffffffff8371ec80  cron
  682     1   682     0  Ss      select  0xfffffe006ca40340  sshd
  495     1   495     0  Ss      select  0xfffffe006ca3fe40  syslogd
  424     1   424     0  Ss      select  0xfffffe006ca3f9c0  devd
  423     1   423    65  Ss      select  0xfffffe006ca3fac0  dhclient
  338     1   338     0  Ss      select  0xfffffe006ca3fbc0  dhclient
  335     1   335     0  Ss      select  0xfffffe006ca40440  dhclient
   17     0     0     0  DL      vlruwt  0xfffffe00571fcae0  [vnlru]
   16     0     0     0  DL      syncer  0xffffffff8383c2e0  [syncer]
   15     0     0     0  DL      (threaded)                  [bufdaemon]
100079                   D       psleep  0xffffffff8383a900  [bufdaemon]
100082                   D       -       0xffffffff82c0a140  [bufspacedaemon-0]
100092                   D       sdflush 0xfffffe0058a1b4e8  [/ worker]
    9     0     0     0  DL      psleep  0xffffffff838ad440  [vmdaemon]
    8     0     0     0  DL      (threaded)                  [pagedaemon]
100077                   D       psleep  0xffffffff838952f8  [dom0]
100080                   D       launds  0xffffffff83895304  [laundry: dom0]
100081                   D       umarcl  0xffffffff81d45f80  [uma]
    7     0     0     0  DL      -       0xffffffff834b3c28  [rand_harvestq]
    6     0     0     0  DL      pftm    0xffffffff841af3d0  [pf purge]
    5     0     0     0  DL      waiting 0xffffffff8455e300  [sctp_iterator]
    4     0     0     0  DL      (threaded)                  [cam]
100044                   D       -       0xffffffff8347e340  [doneq0]
100045                   D       -       0xffffffff8347e2c0  [async]
100076                   D       -       0xffffffff8347e140  [scanner]
   14     0     0     0  DL      seqstat 0xfffffe00543f6c88  [sequencer 00]
    3     0     0     0  DL      (threaded)                  [crypto]
100040                   D       crypto_ 0xffffffff83890b60  [crypto]
100041                   D       crypto_ 0xfffffe00542cca30  [crypto returns 0]
100042                   D       crypto_ 0xfffffe00542cca80  [crypto returns 1]
   13     0     0     0  DL      (threaded)                  [geom]
100035                   D       -       0xffffffff836c75e0  [g_event]
100036                   D       -       0xffffffff836c7600  [g_up]
100037                   D       -       0xffffffff836c7620  [g_down]
    2     0     0     0  WL      (threaded)                  [clock]
100030                   I                                   [clock (0)]
100031                   I                                   [clock (1)]
   12     0     0     0  RL      (threaded)                  [intr]
100011                   I                                   [swi6: Giant taskq]
100017                   I                                   [swi5: fast taskq]
100020                   I                                   [swi6: task queue]
100029                   Run     CPU 1                       [swi1: netisr 0]
100032                   I                                   [swi1: hpts]
100033                   I                                   [swi1: hpts]
100046                   I                                   [irq24: virtio_pci0]
100047                   I                                   [irq25: virtio_pci0]
100048                   I                                   [irq26: virtio_pci0]
100049                   I                                   [irq27: virtio_pci0]
100050                   I                                   [irq28: virtio_pci1]
100051                   I                                   [irq29: virtio_pci1]
100052                   I                                   [irq30: virtio_pci1]
100053                   I                                   [irq31: virtio_pci1]
100054                   I                                   [irq32: virtio_pci1]
100059                   I                                   [irq33: virtio_pci2]
100060                   I                                   [irq34: virtio_pci2]
100061                   I                                   [irq35: virtio_pci2]
100063                   I                                   [irq1: atkbd0]
100064                   I                                   [irq12: psm0]
100065                   I                                   [swi0: uart uart++]
100069                   I                                   [swi1: pf send]
   11     0     0     0  RL      (threaded)                  [idle]
100003                   CanRun                              [idle: cpu0]
100004                   CanRun                              [idle: cpu1]
    1     0     1     0  SLs     wait    0xfffffe0054225040  [init]
   10     0     0     0  DL      audit_w 0xffffffff838915a0  [audit]
    0     0     0     0  DLs     (threaded)                  [kernel]
100000                   D       swapin  0xffffffff836c8000  [swapper]
100005                   D       -       0xfffffe00542cd100  [softirq_0]
100006                   D       -       0xfffffe00542cd000  [softirq_1]
100007                   D       -       0xfffffe00542cce00  [if_io_tqg_0]
100008                   D       -       0xfffffe00542ccd00  [if_io_tqg_1]
100009                   D       -       0xfffffe00542ccc00  [if_config_tqg_0]
100010                   D       -       0xfffffe00079a6b00  [linuxkpi_irq_wq]
100012                   D       -       0xfffffe00079a6900  [inm_free taskq]
100013                   D       -       0xfffffe00079a6800  [thread taskq]
100014                   D       -       0xfffffe00079a6700  [aiod_kick taskq]
100015                   D       -       0xfffffe00079a6600  [in6m_free taskq]
100016                   D       -       0xfffffe00079a6500  [deferred_unmount ta]
100018                   D       -       0xfffffe00079a6300  [kqueue_ctx taskq]
100019                   D       -       0xfffffe00079a6200  [pci_hp taskq]
100021                   D       -       0xfffffe00079a6000  [linuxkpi_short_wq_0]
100022                   D       -       0xfffffe00079a6000  [linuxkpi_short_wq_1]
100023                   D       -       0xfffffe00079a6000  [linuxkpi_short_wq_2]
100024                   D       -       0xfffffe00079a6000  [linuxkpi_short_wq_3]
100025                   D       -       0xfffffe00079a5e00  [linuxkpi_long_wq_0]
100026                   D       -       0xfffffe00079a5e00  [linuxkpi_long_wq_1]
100027                   D       -       0xfffffe00079a5e00  [linuxkpi_long_wq_2]
100028                   D       -       0xfffffe00079a5e00  [linuxkpi_long_wq_3]
100034                   D       -       0xfffffe00079a5b00  [firmware taskq]
100038                   D       -       0xfffffe00079a5a00  [crypto_0]
100039                   D       -       0xfffffe00079a5a00  [crypto_1]
100055                   D       -       0xfffffe00079a5500  [vtnet0 rxq 0]
100056                   D       -       0xfffffe00079a5400  [vtnet0 txq 0]
100057                   D       -       0xfffffe00079a5300  [vtnet0 rxq 1]
100058                   D       -       0xfffffe00079a5200  [vtnet0 txq 1]
100062                   D       vtbslp  0xfffffe00571c8a80  [virtio_balloon]
100066                   D       -       0xffffffff826cca80  [deadlkres]
100070                   D       -       0xfffffe00079a6c00  [mca taskq]
100071                   D       -       0xfffffe0058760300  [acpi_task_0]
100072                   D       -       0xfffffe0058760300  [acpi_task_1]
100073                   D       -       0xfffffe0058760300  [acpi_task_2]
100075                   D       -       0xfffffe00079a5900  [CAM taskq]
db> show all locks
Process 1877 (syz-executor2591854) thread 0xfffffe0058b00e40 (100094)
exclusive sleep mutex so_rcv (so_rcv) r = 0 (0xfffffe0058b3f560) locked @ /syzkaller/managers/main/kernel/sys/kern/uipc_sockbuf.c:781
exclusive sx so_rcv_sx (so_rcv_sx) r = 0 (0xfffffe0058b3f540) locked @ /syzkaller/managers/main/kernel/sys/kern/uipc_socket.c:4024
Process 12 (intr) thread 0xfffffe00542f03a0 (100029)
exclusive sleep mutex sctp-tcb (tcb) r = 0 (0xfffffe006d2c1190) locked @ /syzkaller/managers/main/kernel/sys/netinet/sctp_pcb.c:2138
db> show malloc
              Type        InUse        MemUse     Requests
           pf_hash            5        11524K            5
          tcp_hpts            7         4801K            7
            devbuf         4218         4326K         4243
         sysctloid        34926         2058K        34997
             vtbuf           24         1968K           46
              kobj          326         1304K          488
            newblk          849         1236K          861
          vfscache            3         1025K            3
               pcb           37          684K         2260
          inodedep           49          530K           71
         ufs_quota            1          512K            1
          vfs_hash            1          512K            1
           callout            2          512K            2
              intr            4          472K            4
          acpitask            1          224K            1
           subproc          115          218K         1954
            acpica         1674          184K        57212
           tidhash            3          141K            3
              vmem            3          134K            4
           pagedep           14          132K           18
            linker          352          130K          385
        tfo_ccache            1          128K            1
          IP reass            1          128K            1
         vnet_data            1          112K            1
               sem            4          106K            4
            DEVFS1          105          105K          114
        gtaskqueue           18           98K           18
               bus          985           81K         5069
          mtx_pool            2           72K            2
     NFSD srvcache            3           68K            3
          syncache            1           68K            1
            module          512           64K          512
       ddb_capture            1           64K            1
              temp           19           53K         1581
              umtx          286           36K          286
           kdtrace          172           34K         2011
         hostcache            1           32K            1
               shm            1           32K            1
            DEVFS3          124           31K          134
               msg            4           30K            4
            kbdmux            6           28K            6
         sctp_timw           88           22K           88
        DEVFS_RULE           56           20K           56
               BPF           10           18K           10
         ufs_mount            4           17K            5
              proc            3           17K            3
               tty           16           16K           16
           ithread           97           16K           97
            bus-sc           34           15K         1648
      eventhandler          157           13K          157
            KTRACE          100           13K          100
              kenv           95           12K           95
            ifaddr           30           12K           32
              rman           88           11K          431
              GEOM           61           11K          481
          routetbl           50           11K          176
         CAM queue            5           11K         1528
         bmsafemap            3            9K           39
               rpc            4            9K            4
              UART           12            9K           12
           devstat            4            9K            4
              ksem            1            8K            1
       pfs_vncache            1            8K            1
             shmfd            1            8K            1
     audit_evclass          237            8K          297
         taskqueue           63            7K           63
            sglist            5            7K            5
         sctp_atcl           16            6K         2386
         sctp_stro            6            6K         1109
           CAM DEV            3            6K          510
              cred           23            6K          274
         pfs_nodes           20            5K           20
             hhook           15            5K           17
       ufs_dirhash           24            5K           24
               UMA          268            5K          268
            dirrem           17            5K           28
            plimit           17            5K          322
                vt           11            5K           11
             ifnet            3            5K            3
           memdesc            1            4K            1
               MCA           32            4K           32
          filedesc            1            4K            1
             evdev            4            4K            4
           acpisem           28            4K           28
       ether_multi           40            4K           50
            diradd           25            4K           36
           lltable           11            4K           11
          pf_ifnet            5            3K            6
            kqueue           48            3K         1889
           pwddesc           48            3K         1887
         in6_multi           25            3K           25
          terminal           11            3K           11
           session           20            3K           31
         proc-args           70            3K         2809
             clone            9            3K            9
           uidinfo            3            3K            8
        local_apic            1            2K            1
           io_apic            1            2K            1
       fpukern_ctx            2            2K            2
         ipsec-saq            2            2K            2
             selfd           27            2K        27718
            Unitno           27            2K           41
           CAM XPT           22            2K          543
             lockf           15            2K           22
         sctp_stri            3            2K          336
               msi           12            2K           12
         toponodes            6            2K            6
       ipsecpolicy            2            2K            2
           acpidev           20            2K           20
      NFSD session            1            1K            1
           softdep            1            1K            1
            sahead            1            1K            1
          secasvar            1            1K            1
       vnodemarker            2            1K            8
         sctp_atky           22            1K         3663
        CAM periph            4            1K          271
            select            7            1K           29
             ipsec            3            1K            3
          indirdep            3            1K            3
            CC Mem            3            1K            7
             nhops            6            1K            6
              pfil            6            1K            6
            isadev            6            1K            6
             mount           16            1K           89
          pci_link           10            1K           10
          sctp_ifa            5            1K            6
            crypto            4            1K            4
            ip6ndp            4            1K            5
 encap_export_host           12            1K           12
         newdirblk            4            1K            8
             mkdir            4            1K           16
          in_multi            2            1K            4
              cdev            2            1K            2
               osd            8            1K           20
    chacha20random            1            1K            1
            biobuf            1            1K            1
       inpcbpolicy           10            1K          139
          sctp_ifn            2            1K            6
         sctp_athm           16            1K         2554
      NFSD lckfile            1            1K            1
     NFSD V4client            1            1K            1
            DEVFSP            4            1K            9
             DEVFS            9            1K           10
               mld            2            1K            2
              igmp            2            1K            2
            vnodes            1            1K            1
           CAM SIM            2            1K            2
            feeder            7            1K            7
            soname            7            1K         5621
          sctp_map           12            1K         2218
           tcpfunc            3            1K            3
        loginclass            3            1K            7
            prison            6            1K            6
       lkpikmalloc            5            1K            6
        aesni_data            2            1K            2
         cryptodev            2            1K           49
          nexusdev            8            1K            8
            apmdev            1            1K            1
          atkbddev            2            1K            2
           netlink            1            1K            1
     CAM dev queue            2            1K            2
 CAM I/O Scheduler            1            1K            1
          CAM path            4            1K         1034
          procdesc            1            1K            6
          pmchooks            1            1K            1
          filecaps            4            1K           66
               tun            3            1K            3
          sctp_vrf            1            1K            1
              vnet            1            1K            1
           entropy            2            1K           35
               pmc            1            1K            1
          acpiintr            1            1K            1
              cpus            2            1K            2
    vnet_data_free            1            1K            1
           Per-cpu            1            1K            1
          freework            1            1K           26
          p1003.1b            1            1K            1
            mqdata            0            0K            0
        sctp_mcore            0            0K            0
        sctp_socko            0            0K         1106
         sctp_iter            0            0K            4
         sctp_mvrf            0            0K            0
         sctp_cpal            0            0K            0
         sctp_cmsg            0            0K            0
         sctp_stre            0            0K            0
         sctp_athi            0            0K            0
         sctp_a_it            0            0K            4
         sctp_aadr            0            0K            0
            ipcomp            0            0K            0
               esp            0            0K            0
                ah            0            0K            0
          pf_table            0            0K            0
           pf_rule            0            0K            0
           pf_altq            0            0K            0
           pf_osfp            0            0K            0
     pf_krule_item            0            0K            0
           pf_temp            0            0K            0
           filemon            0            0K            0
            tcp_do            0            0K            0
           tcp_fsb            0            0K            0
     md_intel_data            0            0K            0
       md_ddf_data            0            0K            0
        madt_table            0            0K            2
          smartpqi            0            0K            0
         raid_data            0            0K           72
     geom_flashmap            0            0K            0
               ixl            0            0K            0
         tmpfs dir            0            0K            0
        tmpfs name            0            0K            0
       tmpfs mount            0            0K            0
     tmpfs extattr            0            0K            0
           NFS FHA            0            0K            0
        ice-resmgr            0            0K            0
         ice-osdep            0            0K            0
               ice            0            0K            0
              iavf            0            0K            0
             axgbe            0            0K            0
         newnfsmnt            0            0K            0
  newnfsclient_req            0            0K            0
   NFSCL layrecall            0            0K            0
     NFSCL session            0            0K            0
     NFSCL sockreq            0            0K            0
     NFSCL devinfo            0            0K            0
     NFSCL flayout            0            0K            0
      NFSCL layout            0            0K            0
     NFSD rollback            0            0K            0
          xen_intr            0            0K            0
      NFSCL diroff            0            0K            0
       NEWdirectio            0            0K            0
           xen_hvm            0            0K            0
         legacydrv            0            0K            0
            bounce            0            0K            0
            busdma            0            0K            0
            qpidrv            0            0K            0
        NEWNFSnode            0            0K            0
         NFSCL lck            0            0K            0
      dmar_idpgtbl            0            0K            0
          dmar_dom            0            0K            0
          dmar_ctx            0            0K            0
      NFSCL lckown            0            0K            0
      NFSCL client            0            0K            0
       NFSCL deleg            0            0K            0
              isci            0            0K            0
      iommu_dmamap            0            0K            0
        NFSCL open            0            0K            0
     hyperv_socket            0            0K            0
           bxe_ilt            0            0K            0
       NFSCL owner            0            0K            0
            xenbus            0            0K            0
            NFS fh            0            0K            0
           NFS req            0            0K            0
     NFSD usrgroup            0            0K            0
     vm_fictitious            0            0K            0
       NFSD string            0            0K            0
       NFSD V4lock            0            0K            0
      NFSD V4state            0            0K            0
       msdosfs_fat            0            0K            0
     msdosfs_mount            0            0K            0
      msdosfs_node            0            0K            0
           UMAHash            0            0K            0
            DEVFS4            0            0K            0
         vm_pgdata            0            0K            0
           jblocks            0            0K            0
          savedino            0            0K           15
          sentinel            0            0K            0
            jfsync            0            0K            0
            jtrunc            0            0K            0
             sbdep            0            0K            2
           jsegdep            0            0K            0
              jseg            0            0K            0
         jfreefrag            0            0K            0
          jfreeblk            0            0K            0
           jnewblk            0            0K            0
            jmvref            0            0K            0
           jremref            0            0K            0
           jaddref            0            0K            0
           freedep            0            0K            0
          freefile            0            0K            9
          freeblks            0            0K           25
          freefrag            0            0K            1
        allocindir            0            0K            0
       allocdirect            0            0K            0
          ufs_trim            0            0K            0
           mactemp            0            0K            0
     audit_trigger            0            0K            0
 audit_pipe_presel            0            0K            0
     audit_pipeent            0            0K            0
        audit_pipe            0            0K            0
      audit_evname            0            0K            0
         audit_bsm            0            0K            0
      audit_gidset            0            0K            0
        audit_text            0            0K            0
        audit_path            0            0K            0
        audit_data            0            0K            0
        audit_cred            0            0K            0
            DEVFS2            0            0K            0
            gntdev            0            0K            0
       privcmd_dev            0            0K            0
        evtchn_dev            0            0K            0
          xenstore            0            0K            0
         scsi_pass            0            0K            0
         ciss_data            0            0K            0
               xnb            0            0K            0
          xen_acpi            0            0K            0
              xbbd            0            0K            0
               xbd            0            0K            0
           Balloon            0            0K            0
          sysmouse            0            0K            0
            vtfont            0            0K            0
          ktls_ocf            0            0K            0
        MLX5EEPROM            0            0K            0
        MLX5EEPROM            0            0K            0
        MLX5EEPROM            0            0K            0
        MLX5EEPROM            0            0K            0
        MLX5EEPROM            0            0K            0
      MLX5E_TLS_RX            0            0K            0
        MLX5EEPROM            0            0K            0
         MLX5E_TLS            0            0K            0
        MLX5EEPROM            0            0K            0
        MLX5EEPROM            0            0K            0
        MLX5EEPROM            0            0K            0
            MLX5EN            0            0K            0
        MLX5EEPROM            0            0K            0
        MLX5EEPROM            0            0K            0
        MLX5EEPROM            0            0K            0
          MLX5DUMP            0            0K            0
        MLX5EEPROM            0            0K            0
        MLX5EEPROM            0            0K            0
        MLX5EEPROM            0            0K            0
       simple_attr            0            0K            0
          seq_file            0            0K            0
           lkpiskb            0            0K            0
             radix            0            0K            0
               idr            0            0K            0
          lkpindev            0            0K            0
           lkpimhi            0            0K            0
            lkpifw            0            0K            0
         lkpi80211            0            0K            0
               NLM            0            0K            0
    ipsec-spdcache            0            0K            0
         ipsec-reg            0            0K            0
        ipsec-misc            0            0K            0
      ipsecrequest            0            0K            0
            ip6opt            0            0K            3
       ip6_msource            0            0K            0
      ip6_moptions            0            0K            0
       in6_mfilter            0            0K            0
             frag6            0            0K            0
            tcplog            0            0K            0
        tcp_hwpace            0            0K            0
         BACKLIGHT            0            0K            0
               LRO            0            0K            0
        ip_msource            0            0K            0
       ip_moptions            0            0K            0
        in_mfilter            0            0K            0
              ipid            0            0K            0
         80211scan            0            0K            0
      80211ratectl            0            0K            0
        80211power            0            0K            0
       80211nodeie            0            0K            0
         80211node            0            0K            0
      80211mesh_gt            0            0K            0
      80211mesh_rt            0            0K            0
         80211perr            0            0K            0
         80211prep            0            0K            0
         80211preq            0            0K            0
          80211dfs            0            0K            0
       80211crypto            0            0K            0
          80211vap            0            0K            0
             iflib            0            0K            0
              vlan            0            0K            0
               gif            0            0K            0
           ifdescr            0            0K            0
              zlib            0            0K            0
           fadvise            0            0K            0
           VN POLL            0            0K            0
           ath_hal            0            0K            0
            statfs            0            0K          195
     namei_tracker            0            0K            0
       export_host            0            0K            0
        cl_savebuf            0            0K            3
            athdev            0            0K            0
           ata_pci            0            0K            0
           ata_dma            0            0K            0
       ata_generic            0            0K            0
            pvscsi            0            0K            0
           scsi_da            0            0K           69
            ata_da            0            0K            0
           scsi_ch            0            0K            0
           scsi_cd            0            0K            0
       AHCI driver            0            0K            0
            USBdev            0            0K            0
               USB            0            0K            0
               agp            0            0K            0
           nvme_da            0            0K            0
           acpipwr            0            0K            0
         acpi_perf            0            0K            0
            twsbuf            0            0K            0
       tcp_log_dev            0            0K            0
               aio            0            0K            0
               lio            0            0K            0
               acl            0            0K            0
      midi buffers            0            0K            0
          mbuf_tag            0            0K            0
              ktls            0            0K            0
             mixer            0            0K            0
              ac97            0            0K            0
             hdacc            0            0K            0
              hdac            0            0K            0
              hdaa            0            0K            0
         acpicmbat            0            0K            0
       SIIS driver            0            0K            0
           CAM CCB            0            0K          523
               PUC            0            0K            0
          ppbusdev            0            0K            0
            sr_iov            0            0K            0
               OCS            0            0K            0
               OCS            0            0K            0
              nvme            0            0K            0
               nvd            0            0K            0
            netmap            0            0K            0
            mwldev            0            0K            0
        MVS driver            0            0K            0
     CAM ccb queue            0            0K            0
              accf            0            0K            0
               pts            0            0K            0
               iov            0            0K        13580
          ioctlops            0            0K           86
           eventfd            0            0K            0
           Witness            0            0K            0
             stack            0            0K            0
          mrsasbuf            0            0K            0
          mpt_user            0            0K            0
          mps_user            0            0K            0
            MPSSAS            0            0K            0
               mps            0            0K            0
              sbuf            0            0K          288
          mpr_user            0            0K            0
          firmware            0            0K            0
        compressor            0            0K            0
            MPRSAS            0            0K            0
              SWAP            0            0K            0
               mpr            0            0K            0
            mfibuf            0            0K            0
         sysctltmp            0            0K          649
            sysctl            0            0K            3
        md_sectors            0            0K            0
              ekcd            0            0K            0
            dumper            0            0K            0
          sendfile            0            0K            0
              rctl            0            0K            0
           md_disk            0            0K            0
           malodev            0            0K            0
               LED            0            0K            0
          ix_sriov            0            0K            0
             cache            0            0K            0
        aacraidcam            0            0K            0
          kcovinfo            0            0K            0
      prison_racct            0            0K            0
       Fail Points            0            0K            0
             sigio            0            0K            1
filedesc_to_leader            0            0K            0
               pwd            0            0K            0
       tty console            0            0K            0
                ix            0            0K            0
            ipsbuf            0            0K            0
       aacraid_buf            0            0K            0
            aaccam            0            0K            0
         boottrace            0            0K            0
            aacbuf            0            0K            0
              zstd            0            0K            0
            XZ_DEC            0            0K            0
            nvlist            0            0K            0
          SCSI ENC            0            0K            0
           SCSI sa            0            0K            0
        isofs_node            0            0K            0
       isofs_mount            0            0K            0
     tr_raid5_data            0            0K            0
    tr_raid1e_data            0            0K            0
     tr_raid1_data            0            0K            0
     tr_raid0_data            0            0K            0
    tr_concat_data            0            0K            0
       md_sii_data            0            0K            0
   md_promise_data            0            0K            0
    md_nvidia_data            0            0K            0
   md_jmicron_data            0            0K            0
db> show uma
              Zone   Size    Used    Free    Requests  Sleeps  Bucket  Total Mem    XFree
   mbuf_jumbo_page   4096    9685    1237       92834       0     254   44736512        0
              mbuf    256   12039    1688      218913       0     254    3514112        0
          BUF TRIE    144     193   11623         547       0      62    1701504        0
        malloc-384    384    4144      56        4145       0      30    1612800        0
        malloc-128    128   11578     140       14850       0     126    1499904        0
       malloc-4096   4096     332       2        1047       0       2    1368064        0
       UMA Slabs 0    112   12098      28       12098       0     126    1358112        0
         sctp_asoc   2264       6     504        1109       0     254    1154640        0
      mbuf_cluster   2048     508       0         508       0     254    1040384        0
         vmem btag     56   17547      60       17547       0     254     985992        0
         FFS inode   1160     499      26         509       0       8     609000        0
           sctp_ep   1176       7     503        1109       0     254     599760        0
        RADIX NODE    144    3486     261       31377       0      62     539568        0
            lkpimm    168       1    3095           1       0      62     520128        0
          lkpicurr    168       2    3094           2       0      62     520128        0
              pbuf   2624       0     198           0       0       2     519552        0
            socket    960      22     486        2423       0     254     487680        0
      malloc-65536  65536       6       0           6       0       1     393216        0
        sctp_raddr    736       6     511        1109       0     254     380512        0
        256 Bucket   2048     146      22        1520       0       8     344064        0
         malloc-64     64    3867     480        7663       0     254     278208        0
         VM OBJECT    264     977      73       23003       0      30     277200        0
            THREAD   1824     123      20         123       0       8     260832        0
             VNODE    448     529      47         541       0      30     258048        0
         malloc-16     16   14448     302       17230       0     254     236000        0
            DEVCTL   1024       0     220         123       0       0     225280        0
        malloc-256    256     849      21         876       0      62     222720        0
       malloc-4096   4096      48       4        1887       0       2     212992        0
        malloc-128    128    1307     212       27147       0     126     194432        0
         malloc-32     32    5308     614       10411       0     254     189504        0
         UMA Zones    768     240       4         240       0      16     187392        0
       malloc-1024   1024     133      27         146       0      16     163840        0
       FFS2 dinode    256     499      71         508       0      62     145920        0
      malloc-65536  65536       2       0           2       0       1     131072        0
      malloc-65536  65536       0       2          46       0       1     131072        0
      malloc-65536  65536       0       2         110       0       1     131072        0
      malloc-32768  32768       4       0           4       0       1     131072        0
             unpcb    256       7     503        1158       0     254     130560        0
       mbuf_packet    256       5     503        2066       0     254     130048        0
       S VFS Cache    104     966     204        1005       0     126     121680        0
         MAP ENTRY     96     989     271       53638       0     126     120960        0
     FPU_save_area    832     125      19         137       0      16     119808        0
          ksiginfo    112      46     998          61       0     126     116928        0
       malloc-2048   2048      14      42        2148       0       8     114688        0
        malloc-128    128     578     197        1221       0     126      99200        0
              PROC   1376      47      19        1886       0       8      90816        0
          UMA Kegs    384     227       6         227       0      30      89472        0
        malloc-256    256     236      79         482       0      62      80640        0
        sctp_readq    152       3     517         150       0     254      79040        0
        sctp_chunk    152      83     437        4049       0     254      79040        0
         filedesc0   1072      48      22        1887       0       8      75040        0
             g_bio    408       0     180        4516       0      30      73440        0
        128 Bucket   1024      42      25         251       0      16      68608        0
         malloc-64     64     648     423       14986       0     254      68544        0
        malloc-128    128     335     192         357       0     126      67456        0
        malloc-128    128     337     190         473       0     126      67456        0
      malloc-65536  65536       0       1           8       0       1      65536        0
      malloc-32768  32768       2       0           2       0       1      65536        0
      malloc-32768  32768       0       2         120       0       1      65536        0
      malloc-16384  16384       3       1          17       0       1      65536        0
        malloc-256    256     195      60         224       0      62      65280        0
sctp_stream_msg_out    112       3     537         168       0     254      60480        0
        malloc-384    384      82      68        2452       0      30      57600        0
       malloc-8192   8192       6       1           8       0       1      57344        0
       malloc-4096   4096      13       1          24       0       2      57344        0
         malloc-64     64     329     490       29898       0     254      52416        0
         malloc-64     64     507     312        2592       0     254      52416        0
         32 Bucket    256      59     136        3898       0      62      49920        0
           DIRHASH   1024      35      13          35       0      16      49152        0
             NAMEI   1024       0      48       12073       0      16      49152        0
      malloc-16384  16384       3       0           3       0       1      49152        0
       malloc-1024   1024      12      36        1638       0      16      49152        0
        malloc-384    384      67      53          86       0      30      46080        0
          syncache    168       0     264           5       0     254      44352        0
       malloc-8192   8192       4       1          30       0       1      40960        0
       malloc-8192   8192       5       0           5       0       1      40960        0
           VMSPACE    616      31      35        1871       0      16      40656        0
         udp_inpcb    424       6      84         128       0      30      38160        0
            pcpu-8      8    4291     317        4319       0     254      36864        0
         64 Bucket    512      64       8        1247       0      30      36864        0
         malloc-64     64       8     559          20       0     254      36288        0
         malloc-64     64      18     549          24       0     254      36288        0
         malloc-64     64      41     526          76       0     254      36288        0
         malloc-64     64      26     541         274       0     254      36288        0
        malloc-128    128      20     259          70       0     126      35712        0
        malloc-128    128      30     249          44       0     126      35712        0
        malloc-128    128       9     270         330       0     126      35712        0
     routing nhops    256      10     125          17       0      62      34560        0
           ttyoutq    256      72      63         160       0      62      34560        0
        malloc-384    384      48      42          71       0      30      34560        0
        malloc-256    256      23     112         140       0      62      34560        0
        malloc-256    256      56      79         356       0      62      34560        0
        malloc-256    256     103      32         760       0      62      34560        0
        malloc-256    256      36      99         368       0      62      34560        0
        malloc-256    256      50      85        2043       0      62      34560        0
      malloc-32768  32768       1       0           1       0       1      32768        0
      malloc-32768  32768       1       0           1       0       1      32768        0
      malloc-16384  16384       0       2         160       0       1      32768        0
       malloc-8192   8192       2       2         103       0       1      32768        0
       malloc-4096   4096       8       0           8       0       2      32768        0
       malloc-4096   4096       5       3         200       0       2      32768        0
       malloc-2048   2048       3      13          27       0       8      32768        0
       malloc-2048   2048       9       7           9       0       8      32768        0
       malloc-2048   2048       5      11           6       0       8      32768        0
       malloc-2048   2048       2      14          61       0       8      32768        0
       malloc-2048   2048       4      12         195       0       8      32768        0
       malloc-1024   1024       2      30          42       0      16      32768        0
       malloc-1024   1024       2      30         855       0      16      32768        0
       malloc-1024   1024      12      20         163       0      16      32768        0
       malloc-1024   1024       9      23          13       0      16      32768        0
        malloc-512    512       9      55         127       0      30      32768        0
        malloc-512    512       1      63          10       0      30      32768        0
        malloc-512    512       3      61         336       0      30      32768        0
        malloc-512    512       5      59          64       0      30      32768        0
           pcpu-64     64     486      26         486       0     254      32768        0
            ttyinq    160     135      65         300       0      62      32000        0
              PGRP    120      20     244          31       0     126      31680        0
            clpbuf   2624       0      12          28       0       4      31488        0
        sctp_laddr     48       5     583         173       0     254      28224        0
         16 Bucket    144      47     149         257       0      62      28224        0
          4 Bucket     48       6     582           9       0     254      28224        0
            da_ccb    544       0      49        1264       0      16      26656        0
         TURNSTILE    136     144      45         144       0      62      25704        0
            cpuset    200       7     121           7       0      62      25600        0
             ripcb    392       1      62           4       0      30      24696        0
       malloc-4096   4096       3       3           6       0       2      24576        0
    ertt_txseginfo     40       0     606        1399       0     254      24240        0
          rl_entry     40      37     569          37       0     254      24240        0
               PWD     40      10     596          99       0     254      24240        0
           rtentry    168      13     131          17       0      62      24192        0
              pipe    728       7      26         282       0      16      24024        0
             Files     80      75     225        7622       0     126      24000        0
          8 Bucket     80      41     259         539       0     126      24000        0
         tcp_inpcb   1304       3      15           7       0       8      23472        0
        malloc-384    384      12      48          12       0      30      23040        0
        malloc-384    384       2      58         345       0      30      23040        0
        malloc-384    384      11      49          14       0      30      23040        0
       Mountpoints   2816       2       6           2       0       4      22528        0
        SLEEPQUEUE     88     144     112         144       0     126      22528        0
         hostcache     64       1     314           1       0     254      20160        0
   udp_inpcb ports     32       3     627          40       0     254      20160        0
              ertt     72       3     277           7       0     126      20160        0
         malloc-32     32     318     312         378       0     254      20160        0
         malloc-32     32      27     603          67       0     254      20160        0
         malloc-32     32      80     550        1137       0     254      20160        0
         malloc-32     32      79     551         825       0     254      20160        0
         malloc-32     32      46     584        2823       0     254      20160        0
         malloc-32     32      61     569        1364       0     254      20160        0
          2 Bucket     32      49     581         294       0     254      20160        0
 epoch_record pcpu    256       4      60           4       0      62      16384        0
      malloc-16384  16384       1       0           1       0       1      16384        0
      malloc-16384  16384       1       0           1       0       1      16384        0
       malloc-8192   8192       2       0           2       0       1      16384        0
       malloc-8192   8192       2       0           2       0       1      16384        0
       malloc-2048   2048       0       8          12       0       8      16384        0
       malloc-1024   1024       4      12           4       0      16      16384        0
       malloc-1024   1024       3      13           3       0      16      16384        0
        malloc-512    512       4      28          10       0      30      16384        0
        malloc-512    512       1      31           2       0      30      16384        0
           SMR CPU     32       7     504           7       0     254      16352        0
      vtnet_tx_hdr     24       1     667        2962       0     254      16032        0
              kenv    258      16      44        1033       0      30      15480        0
            mqnode    416       3      33           3       0      30      14976        0
              vmem   1856       1       7           1       0       8      14848        0
        SMR SHARED     24       7     504           7       0     254      12264        0
          sackhole     32       0     378           1       0     254      12096        0
   tcp_inpcb ports     32       1     377           1       0     254      12096        0
         malloc-32     32       9     369          31       0     254      12096        0
             KNOTE    160       0      75           8       0      62      12000        0
         malloc-16     16      23     727        1166       0     254      12000        0
         malloc-16     16     277     473         438       0     254      12000        0
         malloc-16     16      62     688         119       0     254      12000        0
         malloc-16     16     188     562        3054       0     254      12000        0
         malloc-16     16      31     719       28302       0     254      12000        0
         malloc-16     16      28     722        1232       0     254      12000        0
       malloc-8192   8192       1       0           1       0       1       8192        0
       malloc-8192   8192       1       0           1       0       1       8192        0
       malloc-4096   4096       0       2           1       0       2       8192        0
       malloc-4096   4096       1       1           1       0       2       8192        0
           pcpu-16     16       8     504           8       0     254       8192        0
         malloc-16     16      15     485          15       0     254       8000        0
       UMA Slabs 1    176       8      14           8       0      62       3872        0
        KMAP ENTRY     96      12      27          14       0       0       3744        0
       FFS1 dinode    128       0       0           0       0     126          0        0
           ada_ccb    272       0       0           0       0      30          0        0
             swblk    136       0       0           0       0      62          0        0
          swpctrie    144       0       0           0       0      62          0        0
   cdg_qdiffsample     16       0       0           0       0     254          0        0
   pf state scrubs     40       0       0           0       0     254          0        0
   pf frag entries     40       0       0           0       0     254          0        0
          pf frags    248       0       0           0       0      62          0        0
  pf table entries    160       0       0           0       0     254          0        0
pf table entry counters     64       0       0           0       0     254          0        0
   pf source nodes    152       0       0           0       0     254          0        0
     pf state keys     88       0       0           0       0     126          0        0
         pf states    352       0       0           0       0     254          0        0
           pf tags    104       0       0           0       0     126          0        0
          pf mtags    184       0       0           0       0      62          0        0
       tcp_bbr_pcb    832       0       0           0       0      16          0        0
       tcp_bbr_map    128       0       0           0       0     126          0        0
      tcp_rack_pcb   1024       0       0           0       0      16          0        0
      tcp_rack_map    128       0       0           0       0     126          0        0
tfo_ccache_entries     80       0       0           0       0     126          0        0
               tfo      4       0       0           0       0     254          0        0
               ipq     56       0       0           0       0     254          0        0
   tcp_log_id_node    120       0       0           0       0     126          0        0
 tcp_log_id_bucket    176       0       0           0       0      62          0        0
           tcp_log    416       0       0           0       0     254          0        0
          tcpreass     48       0       0           0       0     254          0        0
   sctp_asconf_ack     48       0       0           0       0     254          0        0
       sctp_asconf     40       0       0           0       0     254          0        0
       ripcb ports     32       0       0           0       0     254          0        0
udplite_inpcb ports     32       0       0           0       0     254          0        0
     udplite_inpcb    424       0       0           0       0      30          0        0
    IPsec SA lft_c     16       0       0           0       0     254          0        0
           netlink   2048       0       0           0       0       8          0        0
            itimer    352       0       0           0       0      30          0        0
            AIOLIO    272       0       0           0       0      30          0        0
             AIOCB    552       0       0           0       0      16          0        0
               AIO    208       0       0           0       0      62          0        0
        mqnotifier    216       0       0           0       0      62          0        0
            mvdata     64       0       0           0       0     254          0        0
            mqueue    248       0       0           0       0      62          0        0
           NCLNODE    608       0       0           0       0      16          0        0
        TMPFS node    232       0       0           0       0      62          0        0
     LTS VFS Cache    360       0       0           0       0      30          0        0
       L VFS Cache    320       0       0           0       0      30          0        0
     STS VFS Cache    144       0       0           0       0      62          0        0
           cryptop    280       0       0           0       0      30          0        0
  linux_dma_object     32       0       0           0       0     254          0        0
  linux_dma_pctrie    144       0       0           0       0      62          0        0
   IOMMU_MAP_ENTRY    104       0       0           0       0     126          0        0
    mbuf_jumbo_16k  16384       0       0           0       0     254          0        0
     mbuf_jumbo_9k   9216       0       0           0       0     254          0        0
      audit_record   1280       0       0           0       0       8          0        0
         domainset     40       0       0           0       0     254          0        0
        MAC labels     40       0       0           0       0     254          0        0
            vnpbuf   2624       0       0           0       0      16          0        0
           nfspbuf   2624       0       0           0       0       4          0        0
            swwbuf   2624       0       0           0       0       2          0        0
            swrbuf   2624       0       0           0       0       4          0        0
          umtx_shm     88       0       0           0       0     126          0        0
           umtx pi     96       0       0           0       0     126          0        0
rangeset pctrie nodes    144       0       0           0       0      62          0        0
      malloc-65536  65536       0       0           0       0       1          0        0
      malloc-65536  65536       0       0           0       0       1          0        0
      malloc-65536  65536       0       0           0       0       1          0        0
      malloc-32768  32768       0       0           0       0       1          0        0
      malloc-32768  32768       0       0           0       0       1          0        0
      malloc-32768  32768       0       0           0       0       1          0        0
      malloc-16384  16384       0       0           0       0       1          0        0
      malloc-16384  16384       0       0           0       0       1          0        0
      malloc-16384  16384       0       0           0       0       1          0        0
       malloc-2048   2048       0       0           0       0       8          0        0
        malloc-512    512       0       0           0       0      30          0        0
        malloc-512    512       0       0           0       0      30          0        0
        malloc-384    384       0       0           0       0      30          0        0
           pcpu-32     32       0       0           0       0     254          0        0
            pcpu-4      4       0       0           0       0     254          0        0
            fakepg    104       0       0           0       0     126          0        0
          UMA Hash    256       0       0           0       0      62          0        0

Crashes (2):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2023/08/11 01:02 freebsd-src 2409231121ba da3c3ef8 console log report syz C ci-freebsd-main panic: sbcut_internal: no next, len NUM
2023/08/10 23:20 freebsd-src 2409231121ba da3c3ef8 console log report ci-freebsd-main panic: sbcut_internal: no next, len NUM
* Struck through repros no longer work on HEAD.