syzbot


panic: ASan: Invalid access, NUM-byte write at ADDR, StackRight(f3)

Status: fixed on 2022/04/02 08:59
Reported-by: syzbot+71e7e33dfc3cc39a6bd0@syzkaller.appspotmail.com
Fix commit: 39a22011bbb8 sctp: clear pointer to stack when returning from function.
First crash: 970d, last: 967d

Sample crash report:
panic: ASan: Invalid access, 4-byte write at 0xfffffe009019c620, StackRight(f3)
cpuid = 1
time = 82
KDB: stack backtrace:
db_trace_self_wrapper() at db_trace_self_wrapper+0xc7/frame 0xfffffe0053bf55b0
kdb_backtrace() at kdb_backtrace+0xd3/frame 0xfffffe0053bf5710
vpanic() at vpanic+0x2b8/frame 0xfffffe0053bf57f0
panic() at panic+0xb5/frame 0xfffffe0053bf58c0
kasan_report() at kasan_report+0xdc/frame 0xfffffe0053bf5990
sctp_free_assoc() at sctp_free_assoc+0x727/frame 0xfffffe0053bf5af0
sctp_threshold_management() at sctp_threshold_management+0x443/frame 0xfffffe0053bf5b40
sctp_t1init_timer() at sctp_t1init_timer+0xa9/frame 0xfffffe0053bf5b90
sctp_timeout_handler() at sctp_timeout_handler+0x6e6/frame 0xfffffe0053bf5cd0
softclock_call_cc() at softclock_call_cc+0x3d7/frame 0xfffffe0053bf5e80
softclock_thread() at softclock_thread+0x1ff/frame 0xfffffe0053bf5ef0
fork_exit() at fork_exit+0xd0/frame 0xfffffe0053bf5f30
fork_trampoline() at fork_trampoline+0xe/frame 0xfffffe0053bf5f30
--- trap 0, rip = 0, rsp = 0, rbp = 0 ---
KDB: enter: panic
[ thread pid 2 tid 100030 ]
Stopped at      kdb_enter+0x6b: movq    $0,0x270981a(%rip)
db> 
db> set $lines = 0
db> set $maxwidth = 0
db> show registers
cs                        0x20
ds                        0x3b
es                        0x3b
fs                        0x13
gs                        0x1b
ss                        0x28
rax                       0x12
rcx         0x16e2d97cba8ec905
rdx         0xdffff7c000000000
rbx                          0
rsp         0xfffffe0053bf56f0
rbp         0xfffffe0053bf5710
rsi                        0x1
rdi                          0
r8                         0x3
r9                  0xffffffff
r10                          0
r11                          0
r12         0xfffffe0053ec43a0
r13         0xfffffe0053bf5701
r14         0xffffffff82bbb060  .str.26
r15         0xffffffff82bbb060  .str.26
rip         0xffffffff8176e9fb  kdb_enter+0x6b
rflags                    0x46
kdb_enter+0x6b: movq    $0,0x270981a(%rip)
db> show proc
Process 2 (clock) at 0xfffffe0053ee9000:
 state: NORMAL
 uid: 0  gids: 0
 parent: pid 0 at 0xffffffff83e1b8c0
 ABI: null
 flag: 0x10000284  flag2: 0
 reaper: 0xffffffff83e1b8c0 reapsubtree: 2
 sigparent: 20
 vmspace: 0xffffffff83e1c860
   (map 0xffffffff83e1c860)
   (map.pmap 0xffffffff83e1c920)
   (pmap 0xffffffff83e1c988)
 threads: 2
100030                   Run     CPU 1                       [clock (0)]
100031                   I                                   [clock (1)]
db> ps
  pid  ppid  pgrp   uid  state   wmesg   wchan               cmd
21334   781   781     0  R       (threaded)                  syz-executor.1
127909                   RunQ                                syz-executor.1
127988                   RunQ                                syz-executor.1
21333   779   779     0  R       (threaded)                  syz-executor.0
127442                   Run     CPU 0                       syz-executor.0
127987                   RunQ                                syz-executor.0
21293     1   781     0  S       uwait   0xfffffe0057a75b00  syz-executor.1
21287     1   781     0  S       uwait   0xfffffe009b154200  syz-executor.1
21143     1   780     0  S       uwait   0xfffffe009b12be00  syz-executor.2
21134     1   780     0  S       uwait   0xfffffe0057a72000  syz-executor.2
20005     1   790     0  S       uwait   0xfffffe009b12c380  syz-executor.3
19963     1   790     0  S       uwait   0xfffffe009b12ba80  syz-executor.3
19568     1   790     0  S       uwait   0xfffffe009b156f00  syz-executor.3
19563     1   790     0  S       uwait   0xfffffe009b12b880  syz-executor.3
19559     1   790     0  S       uwait   0xfffffe009b12ca00  syz-executor.3
19469     1   779     0  S       uwait   0xfffffe009b157280  syz-executor.0
19468     1   779     0  S       uwait   0xfffffe009b12b280  syz-executor.0
19463     1   779     0  S       uwait   0xfffffe009b153180  syz-executor.0
19462     1   779     0  S       uwait   0xfffffe009b154100  syz-executor.0
19459     1   779     0  S       uwait   0xfffffe009b12b580  syz-executor.0
19140     1   790     0  SV      uwait   0xfffffe009b154600  syz-executor.3
19128     1   790     0  SV      uwait   0xfffffe009b154c80  syz-executor.3
19119     1   790     0  SV      uwait   0xfffffe009b12c580  syz-executor.3
18947     1   790     0  S       uwait   0xfffffe009b157680  syz-executor.3
18945     1   790     0  T                                   syz-executor.3
18943     1   790     0  T                                   syz-executor.3
18936     1   790     0  S       uwait   0xfffffe0058c1d380  syz-executor.3
18934     1   790     0  S       uwait   0xfffffe009b154700  syz-executor.3
18933     1   790     0  T                                   syz-executor.3
18931     1   790     0  T                                   syz-executor.3
18924     1   790     0  T       uwait   0xfffffe0057a73480  syz-executor.3
18922     1   790     0  T       uwait   0xfffffe009b156a00  syz-executor.3
18089     1   779     0  T       uwait   0xfffffe009b12c180  syz-executor.0
18083     1   781     0  T       uwait   0xfffffe009b154500  syz-executor.1
18082     1   779     0  T       uwait   0xfffffe009b12bf00  syz-executor.0
18076     1   779     0  T       uwait   0xfffffe009b154800  syz-executor.0
17307     1   781     0  T                                   syz-executor.1
17298     1   790     0  T                                   syz-executor.3
17288     1   790     0  T       uwait   0xfffffe009b12d580  syz-executor.3
17141     1   779     0  S       uwait   0xfffffe009b156900  syz-executor.0
17138     1   779     0  T                                   syz-executor.0
17133     1   779     0  T                                   syz-executor.0
17127     1   779     0  T                                   syz-executor.0
15401     1   779     0  T       uwait   0xfffffe009b156280  syz-executor.0
15395     1   779     0  T                                   syz-executor.0
15388     1   779     0  T                                   syz-executor.0
14695     1   780     0  T       uwait   0xfffffe0058c1d880  syz-executor.2
14693     1   790     0  T       uwait   0xfffffe009b12cc00  syz-executor.3
14671     1   790     0  T       uwait   0xfffffe009b156180  syz-executor.3
13858     1   780     0  S       uwait   0xfffffe009b12c480  syz-executor.2
13804     1   780     0  S       uwait   0xfffffe009b156480  syz-executor.2
11636     0     0     0  DL      -       0xffffffff83e1d680  [accounting]
11091     0     0     0  DL      (threaded)                  [KTLS]
111790                   D       -       0xfffffe0099c65b00  [thr_0]
113236                   D       -       0xfffffe0099c65b80  [thr_1]
113237                   D       -       0xffffffff83f66328  [alloc_0]
10983     1   781     0  SV      uwait   0xfffffe009b156d00  syz-executor.1
10831     1   781     0  S       uwait   0xfffffe009b156c00  syz-executor.1
10825     1   781     0  S       uwait   0xfffffe009b156080  syz-executor.1
10821     1   781     0  S       uwait   0xfffffe0057a75e00  syz-executor.1
10818     1   781     0  S       uwait   0xfffffe0058c1e480  syz-executor.1
 9737     1   779     0  S       uwait   0xfffffe0056f43980  syz-executor.0
 9736     1   790     0  S       uwait   0xfffffe0056f43780  syz-executor.3
 9727     1   779     0  S       uwait   0xfffffe009b157580  syz-executor.0
 9726     1   790     0  S       uwait   0xfffffe0057a72100  syz-executor.3
 9720     1   779     0  S       uwait   0xfffffe0056f43480  syz-executor.0
 9718     1   790     0  S       uwait   0xfffffe009b12cb80  syz-executor.3
 9716     1   780     0  S       uwait   0xfffffe0056f43680  syz-executor.2
 9706     1   790     0  S       uwait   0xfffffe0058c1e980  syz-executor.3
 8517     1   779     0  S       uwait   0xfffffe009b156e00  syz-executor.0
 7989     1   780     0  T       uwait   0xfffffe0056f43800  syz-executor.2
 7980     1   780     0  T       uwait   0xfffffe009b156b00  syz-executor.2
 7971     1   780     0  T       uwait   0xfffffe0057a75c00  syz-executor.2
 7958     1   780     0  T       uwait   0xfffffe0057a75900  syz-executor.2
 6883     1   779     0  SV      uwait   0xfffffe0057a72480  syz-executor.0
 6817     1   790     0  S       uwait   0xfffffe0057a75580  syz-executor.3
 6816     1   779     0  S       uwait   0xfffffe009b157080  syz-executor.0
 6807     1   790     0  S       uwait   0xfffffe009b12d080  syz-executor.3
 6805     1   779     0  S       uwait   0xfffffe009b12d180  syz-executor.0
 6797     1   779     0  S       uwait   0xfffffe0058c1d980  syz-executor.0
 6796     1   790     0  S       uwait   0xfffffe0056f43580  syz-executor.3
 6787     1   779     0  S       uwait   0xfffffe009b12ce00  syz-executor.0
 5307     1   779     0  S       uwait   0xfffffe0057a75f00  syz-executor.0
 5305     1   779     0  S       uwait   0xfffffe0057a72600  syz-executor.0
 5302     1   781     0  S       uwait   0xfffffe009b12cd00  syz-executor.1
 5300     1   781     0  S       uwait   0xfffffe0057a75600  syz-executor.1
 5299     1   779     0  S       uwait   0xfffffe0056f43e80  syz-executor.0
 5297     1   781     0  S       uwait   0xfffffe0058c1e380  syz-executor.1
 5295     1   781     0  S       uwait   0xfffffe0058c1d080  syz-executor.1
 5294     1   779     0  S       uwait   0xfffffe0058c1d280  syz-executor.0
 5290     1   781     0  S       uwait   0xfffffe0058c1d780  syz-executor.1
 5289     1   779     0  S       uwait   0xfffffe009b12d380  syz-executor.0
 5288     1   781     0  S       uwait   0xfffffe0057a74280  syz-executor.1
 5286     1   779     0  S       uwait   0xfffffe0058c1eb80  syz-executor.0
 5283     1   780     0  S       uwait   0xfffffe0058c20100  syz-executor.2
 5282     1   780     0  S       uwait   0xfffffe0058c1df00  syz-executor.2
 5277     1   780     0  S       uwait   0xfffffe0056f43d80  syz-executor.2
 5276     1   780     0  S       uwait   0xfffffe0058c1e580  syz-executor.2
 5271     1   780     0  S       uwait   0xfffffe0056f43c80  syz-executor.2
 5270     1   780     0  S       uwait   0xfffffe009b12d480  syz-executor.2
 5264     1   780     0  S       uwait   0xfffffe0058c1e280  syz-executor.2
 5263     1   780     0  S       uwait   0xfffffe0057a73180  syz-executor.2
 4738     1  4738    65  Ss      select  0xfffffe0053dd0040  dhclient
 4629     1   781     0  S       uwait   0xfffffe0057a75700  syz-executor.1
 4627     1   781     0  S       uwait   0xfffffe0058c1dd00  syz-executor.1
 4623     1   781     0  S       uwait   0xfffffe0058c1fc80  syz-executor.1
 4621     1   781     0  S       uwait   0xfffffe0057a72800  syz-executor.1
 4617     1   781     0  S       uwait   0xfffffe0057a75800  syz-executor.1
 4615     1   781     0  S       uwait   0xfffffe0058c20000  syz-executor.1
 4611     1   781     0  S       uwait   0xfffffe0057a75d00  syz-executor.1
 4609     1   781     0  S       uwait   0xfffffe0057a72700  syz-executor.1
 4539     1   780     0  S       uwait   0xfffffe0058c1da80  syz-executor.2
 3840     1   790     0  SV      uwait   0xfffffe0058c1d580  syz-executor.3
 3829     1  3829     0  Ss      select  0xfffffe0053dd0640  dhclient
 3826     1  3826     0  Ss      select  0xfffffe0053dd0840  dhclient
 3807     1  3807    65  Ss      select  0xfffffe0053dd0440  dhclient
 3090     1   779     0  S       uwait   0xfffffe0058c1fe80  syz-executor.0
 3088     1   779     0  S       uwait   0xfffffe0057a73280  syz-executor.0
 3086     1   779     0  S       uwait   0xfffffe0058c1d680  syz-executor.0
 3077     1   780     0  S       uwait   0xfffffe0057a73080  syz-executor.2
 3073     1   790     0  S       uwait   0xfffffe0058c1ed80  syz-executor.3
 3072     1   780     0  S       uwait   0xfffffe0057a72900  syz-executor.2
 3069     1   790     0  S       uwait   0xfffffe0058c1de00  syz-executor.3
 3066     1   780     0  S       uwait   0xfffffe0057a73680  syz-executor.2
 3065     1   790     0  S       uwait   0xfffffe0058c1e180  syz-executor.3
 3058     1   780     0  S       uwait   0xfffffe0058c1f000  syz-executor.2
 3023     1  3023     0  Ss      select  0xfffffe0053dd11c0  dhclient
 3020     1  3020     0  Ss      select  0xfffffe0053dd0a40  dhclient
 3001     1  3001    65  Ss      select  0xfffffe0053dd1140  dhclient
 2729  2727   781     0  S       uwait   0xfffffe0058c20300  syz-executor.1
 2727     1   781     0  SV      wait    0xfffffe0099eb5a90  syz-executor.1
 1898     1  1898     0  Ss      select  0xfffffe0053dd10c0  dhclient
 1889     1  1889     0  Ss      select  0xfffffe0053dd08c0  dhclient
 1870     1  1870    65  Ss      select  0xfffffe0053dd0b40  dhclient
 1262     1   781     0  S       uwait   0xfffffe0057a73380  syz-executor.1
 1256     1   790     0  S       uwait   0xfffffe0057a74f00  syz-executor.3
 1247     1   781     0  S       uwait   0xfffffe0057a72a00  syz-executor.1
 1246     1   790     0  S       uwait   0xfffffe0058c1ee80  syz-executor.3
 1241     1   781     0  S       uwait   0xfffffe0057a72f00  syz-executor.1
 1240     1   790     0  S       uwait   0xfffffe0058c1fd80  syz-executor.3
 1237     1   779     0  S       uwait   0xfffffe0057a72b00  syz-executor.0
 1236     1   780     0  S       uwait   0xfffffe0007975400  syz-executor.2
 1231     1   779     0  S       uwait   0xfffffe0007976380  syz-executor.0
 1230     1   780     0  S       uwait   0xfffffe0058c1f300  syz-executor.2
 1225     1   779     0  S       uwait   0xfffffe0007975700  syz-executor.0
 1224     1   780     0  S       uwait   0xfffffe0057a73580  syz-executor.2
 1216     1   780     0  S       uwait   0xfffffe0057a74380  syz-executor.2
 1152     1  1152     0  Ss      select  0xfffffe0057036bc0  dhclient
 1149     1  1149     0  Ss      select  0xfffffe0053dd1040  dhclient
 1100     0     0     0  DL      -       0xffffffff83f655c0  [soaiod4]
 1099     0     0     0  DL      -       0xffffffff83f655c0  [soaiod3]
 1098     0     0     0  DL      -       0xffffffff83f655c0  [soaiod2]
 1097     0     0     0  DL      -       0xffffffff83f655c0  [soaiod1]
 1094     0     0     0  DL      aiordy  0xfffffe0092865a90  [aiod4]
 1092     0     0     0  DL      aiordy  0xfffffe0092d9ea90  [aiod3]
 1091     0     0     0  DL      aiordy  0xfffffe0058b48548  [aiod2]
 1090     0     0     0  DL      aiordy  0xfffffe0092d9e000  [aiod1]
  790   774   790     0  Rs                                  syz-executor.3
  781   774   781     0  Rs                                  syz-executor.1
  780   774   780     0  Rs                                  syz-executor.2
  779   774   779     0  Rs                                  syz-executor.0
  774   772   772     0  S       (threaded)                  syz-fuzzer
100095                   S       uwait   0xfffffe0007975600  syz-fuzzer
100118                   S       uwait   0xfffffe0057a74680  syz-fuzzer
100119                   S       uwait   0xfffffe0057a74780  syz-fuzzer
100120                   S       uwait   0xfffffe0058c1f380  syz-fuzzer
100121                   S       uwait   0xfffffe0058c1fa80  syz-fuzzer
100122                   S       uwait   0xfffffe0058c1f880  syz-fuzzer
100123                   S       kqread  0xfffffe0007971d00  syz-fuzzer
100125                   S       uwait   0xfffffe0057a73c80  syz-fuzzer
101918                   S       uwait   0xfffffe0057a73980  syz-fuzzer
  772   770   772     0  Ss      pause   0xfffffe008fe1a5f8  csh
  770   688   770     0  Ss      select  0xfffffe0053dd1740  sshd
  754     1   754     0  Ss+     ttyin   0xfffffe0056fe74b0  getty
  753     1   753     0  Ss+     ttyin   0xfffffe0056fe48b0  getty
  752     1   752     0  Ss+     ttyin   0xfffffe0056fe4cb0  getty
  751     1   751     0  Ss+     ttyin   0xfffffe0056fe50b0  getty
  750     1   750     0  Ss+     ttyin   0xfffffe0056fe54b0  getty
  749     1   749     0  Ss+     ttyin   0xfffffe0056fe58b0  getty
  748     1   748     0  Ss+     ttyin   0xfffffe0056fe5cb0  getty
  747     1   747     0  Ss+     ttyin   0xfffffe0056fe60b0  getty
  746     1   746     0  Ss+     ttyin   0xfffffe0056fe64b0  getty
  692     1   692     0  Ss      nanslp  0xffffffff83e458c0  cron
  688     1   688     0  Ss      select  0xfffffe0053dd1cc0  sshd
  501     1   501     0  Ss      select  0xfffffe0053dd21c0  syslogd
  430     1   430     0  Ss      select  0xfffffe0053dd2240  devd
  429     1   429    65  Ss      select  0xfffffe0053dd24c0  dhclient
  344     1   344     0  Ss      select  0xfffffe005700e4c0  dhclient
  341     1   341     0  Ss      select  0xfffffe0053dd22c0  dhclient
   17     0     0     0  DL      syncer  0xffffffff83f6b0e0  [syncer]
   16     0     0     0  DL      vlruwt  0xfffffe0053ddb000  [vnlru]
   15     0     0     0  DL      (threaded)                  [bufdaemon]
100080                   D       psleep  0xffffffff83f696e0  [bufdaemon]
100083                   D       -       0xffffffff83211f80  [bufspacedaemon-0]
100094                   D       sdflush 0xfffffe0053f6a8e8  [/ worker]
    9     0     0     0  DL      psleep  0xffffffff83f9d180  [vmdaemon]
    8     0     0     0  DL      (threaded)                  [pagedaemon]
100078                   D       psleep  0xffffffff83f91038  [dom0]
100081                   D       launds  0xffffffff83f91044  [laundry: dom0]
100082                   D       umarcl  0xffffffff81ea5990  [uma]
    7     0     0     0  DL      -       0xffffffff83c01688  [rand_harvestq]
    6     0     0     0  DL      pftm    0xffffffff84654530  [pf purge]
    5     0     0     0  DL      waiting 0xffffffff849634e0  [sctp_iterator]
    4     0     0     0  DL      (threaded)                  [cam]
100045                   D       -       0xffffffff83aa35c0  [doneq0]
100046                   D       -       0xffffffff83aa3540  [async]
100077                   D       -       0xffffffff83aa33c0  [scanner]
   14     0     0     0  DL      seqstat 0xfffffe0056f1ac88  [sequencer 00]
    3     0     0     0  DL      (threaded)                  [crypto]
100041                   D       crypto_ 0xffffffff83f8c840  [crypto]
100042                   D       crypto_ 0xfffffe0053effd30  [crypto returns 0]
100043                   D       crypto_ 0xfffffe0053effd80  [crypto returns 1]
   13     0     0     0  DL      (threaded)                  [geom]
100036                   D       -       0xffffffff83e1ae80  [g_event]
100037                   D       -       0xffffffff83e1aea0  [g_up]
100038                   D       -       0xffffffff83e1aec0  [g_down]
    2     0     0     0  RL      (threaded)                  [clock]
100030                   Run     CPU 1                       [clock (0)]
100031                   I                                   [clock (1)]
   12     0     0     0  WL      (threaded)                  [intr]
100010                   I                                   [swi6: Giant taskq]
100017                   I                                   [swi5: fast taskq]
100020                   I                                   [swi6: task queue]
100029                   I                                   [swi1: netisr 0]
100032                   I                                   [swi3: busdma]
100033                   I                                   [swi1: hpts]
100034                   I                                   [swi1: hpts]
100047                   I                                   [irq24: virtio_pci0]
100048                   I                                   [irq25: virtio_pci0]
100049                   I                                   [irq26: virtio_pci0]
100050                   I                                   [irq27: virtio_pci0]
100051                   I                                   [irq28: virtio_pci1]
100052                   I                                   [irq29: virtio_pci1]
100053                   I                                   [irq30: virtio_pci1]
100054                   I                                   [irq31: virtio_pci1]
100055                   I                                   [irq32: virtio_pci1]
100060                   I                                   [irq33: virtio_pci2]
100061                   I                                   [irq34: virtio_pci2]
100062                   I                                   [irq35: virtio_pci2]
100064                   I                                   [irq1: atkbd0]
100065                   I                                   [irq12: psm0]
100066                   I                                   [swi0: uart uart++]
100070                   I                                   [swi1: pf send]
   11     0     0     0  RL      (threaded)                  [idle]
100003                   CanRun                              [idle: cpu0]
100004                   CanRun                              [idle: cpu1]
    1     0     1     0  SLs     wait    0xfffffe0053ddc000  [init]
   10     0     0     0  DL      audit_w 0xffffffff83f8d340  [audit]
    0     0     0     0  DLs     (threaded)                  [kernel]
100000                   D       swapin  0xffffffff83e1b8c0  [swapper]
100005                   D       -       0xfffffe0007973100  [softirq_0]
100006                   D       -       0xfffffe0007973000  [softirq_1]
100007                   D       -       0xfffffe0007972e00  [if_io_tqg_0]
100008                   D       -       0xfffffe0007972d00  [if_io_tqg_1]
100009                   D       -       0xfffffe0007972c00  [if_config_tqg_0]
100011                   D       -       0xfffffe0007972a00  [aiod_kick taskq]
100012                   D       -       0xfffffe0007972900  [inm_free taskq]
100013                   D       -       0xfffffe0007972800  [linuxkpi_irq_wq]
100014                   D       -       0xfffffe0007972700  [in6m_free taskq]
100015                   D       -       0xfffffe0007972600  [deferred_unmount ta]
100016                   D       -       0xfffffe0007972500  [thread taskq]
100018                   D       -       0xfffffe0007972300  [kqueue_ctx taskq]
100019                   D       -       0xfffffe0007972200  [pci_hp taskq]
100021                   D       -       0xfffffe0007972000  [linuxkpi_short_wq_0]
100022                   D       -       0xfffffe0007972000  [linuxkpi_short_wq_1]
100023                   D       -       0xfffffe0007972000  [linuxkpi_short_wq_2]
100024                   D       -       0xfffffe0007972000  [linuxkpi_short_wq_3]
100025                   D       -       0xfffffe0007971e00  [linuxkpi_long_wq_0]
100026                   D       -       0xfffffe0007971e00  [linuxkpi_long_wq_1]
100027                   D       -       0xfffffe0007971e00  [linuxkpi_long_wq_2]
100028                   D       -       0xfffffe0007971e00  [linuxkpi_long_wq_3]
100035                   D       -       0xfffffe0053f21300  [firmware taskq]
100039                   D       -       0xfffffe0053f21100  [crypto_0]
100040                   D       -       0xfffffe0053f21100  [crypto_1]
100056                   D       -       0xfffffe0053f1e000  [vtnet0 rxq 0]
100057                   D       -       0xfffffe0007974e00  [vtnet0 txq 0]
100058                   D       -       0xfffffe0007974d00  [vtnet0 rxq 1]
100059                   D       -       0xfffffe0007974c00  [vtnet0 txq 1]
100063                   D       vtbslp  0xfffffe005700e800  [virtio_balloon]
100067                   D       -       0xffffffff82bc0ee1  [deadlkres]
100071                   D       -       0xfffffe0007973200  [mca taskq]
100073                   D       -       0xfffffe00574c1200  [acpi_task_0]
100074                   D       -       0xfffffe00574c1200  [acpi_task_1]
100075                   D       -       0xfffffe00574c1200  [acpi_task_2]
100076                   D       -       0xfffffe0053f20e00  [CAM taskq]
db> show all locks
Process 2 (clock) thread 0xfffffe0053ec43a0 (100030)
exclusive sleep mutex sctp-tcb (tcb) r = 0 (0xfffffe009490b8b0) locked @ /syzkaller/managers/main/kernel/sys/netinet/sctputil.c:1777
db> show malloc
              Type        InUse        MemUse     Requests
           pf_hash            5        11524K            5
          tcp_hpts            6         4801K            6
            devbuf         4217         4323K         4245
         sysctloid        35519         2093K        35590
          filedesc          262         2093K        40698
             vtbuf           24         1968K           46
               pcb         1180         1837K        52657
              kobj          327         1308K          488
            newblk           20         1029K        41713
          vfscache            3         1025K            3
           subproc          403          844K        21550
            linker          380          572K          461
          inodedep          117          556K        21606
         ufs_quota            1          512K            1
          vfs_hash            1          512K            1
           callout            2          512K            2
         sctp_stro          501          501K        10386
              intr            4          472K            4
         sctp_atcl         1096          411K        38677
              vmem            3          276K            7
            acpica         1674          184K        56014
         vnet_data            1          168K            1
           tidhash            3          141K            3
           pagedep           15          132K        20326
        tfo_ccache            1          128K            1
            DEVFS1          109          109K          126
               sem            4          106K            4
           filemon           11           88K          173
               BPF           46           88K           87
           kdtrace          481           85K        49324
               bus          991           81K         5140
              umtx          638           80K          638
          mtx_pool            2           72K            2
          syncache            1           68K            1
         sctp_atky         1597           67K        52381
            module          513           65K          513
          acpitask            1           64K            1
       ddb_capture            1           64K            1
         sctp_timw          140           35K          140
              temp           34           33K         5957
            DEVFS3          128           32K          138
         hostcache            1           32K            1
               shm            1           32K           59
               msg            4           30K            4
            dirrem          106           27K        21227
        gtaskqueue           18           26K           18
            kbdmux            6           22K            6
            ifaddr           71           21K           73
        DEVFS_RULE           56           20K           56
         sctp_athm         1096           18K        40780
         ufs_mount            4           17K            5
              proc            3           17K            3
               tty           16           16K           16
           ithread          100           16K          100
           lltable           50           16K          549
          routetbl          135           16K         1339
              ksem           30           16K         2109
          sctp_map         1002           16K        20668
            kqueue          193           15K        21422
            bus-sc           34           15K         1651
          freefile          102           13K        21067
            KTRACE          102           13K        12681
       ether_multi          157           13K          167
             ifnet            7           13K            7
           pwddesc          191           12K        21870
              kenv           95           12K           95
      eventhandler          134           12K          134
              rman           88           11K          429
              GEOM           61           11K          490
         CAM queue            5           11K         1528
         in6_multi           71            9K           71
         sctp_stri           17            9K         4247
         bmsafemap            2            9K        21785
              UART           12            9K           12
           devstat            4            9K            4
               rpc            2            8K            2
             shmfd            1            8K           38
       pfs_vncache            1            8K            1
              cred           30            8K          410
         pfs_nodes           20            8K           20
     audit_evclass          237            8K          296
            DEVFSP          114            8K         1242
         taskqueue           63            7K           63
         sctp_aadr          103            7K          220
            sglist            5            7K            5
           CAM DEV            3            6K          510
            plimit           24            6K          484
         proc-args          216            6K        22671
          pf_ifnet           12            5K          242
       ufs_dirhash           24            5K           24
               UMA          274            5K          274
           session           35            5K           65
           tcp_fsb           45            5K         2955
            CC Mem           69            5K         7756
                vt           11            5K           11
           memdesc            1            4K            1
               MCA           32            4K           32
             evdev            4            4K            4
             lockf           34            4K          264
       inpcbpolicy          115            4K         9513
           acpisem           28            4K           28
             selfd           55            4K       355230
             hhook           15            4K           17
          kcovinfo           52            4K           52
          terminal           11            3K           11
            select           19            3K          160
         cryptodev           37            3K         1747
           uidinfo            3            3K           36
           pf_osfp           20            2K           20
        local_apic            1            2K            1
           io_apic            1            2K            1
       fpukern_ctx            2            2K            2
         ipsec-saq            2            2K            2
            ip6ndp           12            2K           15
            Unitno           33            2K          533
          sctp_ifa           14            2K           15
           CAM XPT           22            2K          543
               msi           12            2K           12
          in_multi            6            2K            8
               osd           73            2K         7501
          freework            5            2K        28215
         newdirblk           10            2K        20204
       ipsecpolicy            2            2K            2
           acpidev           20            2K           20
             clone            9            2K            9
               tun            7            2K            7
           softdep            1            1K            1
             mkdir            8            1K        40408
          freeblks            4            1K        21320
            sahead            1            1K            1
          secasvar            1            1K            1
             nhops            6            1K            8
       vnodemarker            2            1K          564
      NFSD session            1            1K            1
        CAM periph            4            1K          271
             ipsec            3            1K            3
          sctp_ifn            6            1K           15
               mld            6            1K            6
              igmp            6            1K            6
         toponodes            6            1K            6
            isadev            6            1K            6
             mount           16            1K          176
          pci_link           10            1K           10
            crypto            4            1K          491
 encap_export_host           12            1K           12
          procdesc            5            1K           18
            diradd            4            1K        21267
              pfil            4            1K            4
              cdev            2            1K            2
    chacha20random            1            1K            1
        ip_msource            5            1K            5
      NFSD lckfile            1            1K            1
     NFSD V4client            1            1K            1
             DEVFS            9            1K           10
          indirdep            1            1K        10885
            vnodes            1            1K            4
              ktls            1            1K            4
           CAM SIM            2            1K            2
            feeder            7            1K            7
           tcpfunc            3            1K            3
        loginclass            3            1K            6
            prison            6            1K            6
       lkpikmalloc            5            1K            6
        aesni_data            2            1K            2
          nexusdev            8            1K            8
            apmdev            1            1K            1
          atkbddev            2            1K            2
     CAM dev queue            2            1K            2
       ip6_msource            2            1K            2
 CAM I/O Scheduler            1            1K            1
          CAM path            4            1K         1034
           eventfd            1            1K           60
          pmchooks            1            1K            1
            soname            4            1K        42613
          filecaps            5            1K          120
          sctp_vrf            1            1K            1
              vnet            1            1K            1
           entropy            2            1K           44
               pmc            1            1K            1
          acpiintr            1            1K            1
              cpus            2            1K            2
    vnet_data_free            1            1K            1
           Per-cpu            1            1K            1
          p1003.1b            1            1K            1
        ext2_mount            0            0K            0
         ext2_node            0            0K            0
      ext2_extents            0            0K            0
            ipcomp            0            0K            0
               esp            0            0K            0
                ah            0            0K            0
            mqdata            0            0K            0
        sctp_mcore            0            0K            0
        sctp_socko            0            0K        22659
         sctp_iter            0            0K           61
         sctp_mvrf            0            0K            0
         sctp_cpal            0            0K           49
         sctp_cmsg            0            0K            0
         sctp_stre            0            0K            0
         sctp_athi            0            0K            0
         sctp_a_it            0            0K           12
          pf_table            0            0K          228
           pf_rule            0            0K          180
           pf_altq            0            0K            0
           pf_temp            0            0K            0
     NFSCL session            0            0K            0
     NFSCL sockreq            0            0K            0
        madt_table            0            0K            2
          smartpqi            0            0K            0
     NFSCL devinfo            0            0K            0
     NFSCL flayout            0            0K            0
      NFSCL layout            0            0K            0
               ixl            0            0K            0
     NFSD rollback            0            0K            0
      NFSCL diroff            0            0K            0
       NEWdirectio            0            0K            0
        NEWNFSnode            0            0K            0
         NFSCL lck            0            0K            0
      NFSCL lckown            0            0K            0
      NFSCL client            0            0K            0
        ice-resmgr            0            0K            0
         ice-osdep            0            0K            0
               ice            0            0K            0
              iavf            0            0K            0
             axgbe            0            0K            0
       NFSCL deleg            0            0K            0
        NFSCL open            0            0K            0
       NFSCL owner            0            0K            0
            NFS fh            0            0K            0
           NFS req            0            0K            0
     NFSD usrgroup            0            0K            0
       NFSD string            0            0K            0
       NFSD V4lock            0            0K            0
      NFSD V4state            0            0K            0
          xen_intr            0            0K            0
     NFSD srvcache            0            0K            0
           xen_hvm            0            0K            0
         legacydrv            0            0K            0
            bounce            0            0K            0
            busdma            0            0K            0
            qpidrv            0            0K            0
       msdosfs_fat            0            0K            0
     msdosfs_mount            0            0K            0
      dmar_idpgtbl            0            0K            0
          dmar_dom            0            0K            0
          dmar_ctx            0            0K            0
      msdosfs_node            0            0K            0
              isci            0            0K            0
      iommu_dmamap            0            0K            0
     hyperv_socket            0            0K            0
           bxe_ilt            0            0K            0
            DEVFS4            0            0K            0
            xenbus            0            0K            0
            DEVFS2            0            0K            0
     vm_fictitious            0            0K            0
            gntdev            0            0K            0
       privcmd_dev            0            0K            0
        evtchn_dev            0            0K            0
          xenstore            0            0K            0
         scsi_pass            0            0K            0
         ciss_data            0            0K            0
               xnb            0            0K            0
              xbbd            0            0K            0
               xbd            0            0K            0
           Balloon            0            0K            0
          sysmouse            0            0K            0
           UMAHash            0            0K            0
            vtfont            0            0K            0
         vm_pgdata            0            0K            0
           jblocks            0            0K            0
          savedino            0            0K        16926
          sentinel            0            0K            0
            jfsync            0            0K            0
            jtrunc            0            0K            0
             sbdep            0            0K          277
           jsegdep            0            0K            0
              jseg            0            0K            0
         jfreefrag            0            0K            0
          jfreeblk            0            0K            0
           jnewblk            0            0K            0
            jmvref            0            0K            0
           jremref            0            0K            0
           jaddref            0            0K            0
           freedep            0            0K            0
          freefrag            0            0K          143
        allocindir            0            0K            0
       allocdirect            0            0K            0
          ufs_trim            0            0K            0
           mactemp            0            0K            0
     audit_trigger            0            0K            0
 audit_pipe_presel            0            0K            0
     audit_pipeent            0            0K            0
        audit_pipe            0            0K            0
      audit_evname            0            0K            0
         audit_bsm            0            0K            0
      audit_gidset            0            0K            0
        audit_text            0            0K            0
        audit_path            0            0K            0
        audit_data            0            0K            0
        audit_cred            0            0K            0
         BACKLIGHT            0            0K            0
           ath_hal            0            0K            0
            athdev            0            0K            0
           ata_pci            0            0K            0
           ata_dma            0            0K            0
       ata_generic            0            0K            0
            pvscsi            0            0K            0
           scsi_da            0            0K           69
            ata_da            0            0K            0
           scsi_ch            0            0K            0
           scsi_cd            0            0K            0
          ktls_ocf            0            0K            0
       AHCI driver            0            0K            0
        MLX5EEPROM            0            0K            0
        MLX5EEPROM            0            0K            0
        MLX5EEPROM            0            0K            0
        MLX5EEPROM            0            0K            0
        MLX5EEPROM            0            0K            0
      MLX5E_TLS_RX            0            0K            0
        MLX5EEPROM            0            0K            0
         MLX5E_TLS            0            0K            0
        MLX5EEPROM            0            0K            0
        MLX5EEPROM            0            0K            0
        MLX5EEPROM            0            0K            0
            MLX5EN            0            0K            0
        MLX5EEPROM            0            0K            0
        MLX5EEPROM            0            0K            0
        MLX5EEPROM            0            0K            0
          MLX5DUMP            0            0K            0
        MLX5EEPROM            0            0K            0
        MLX5EEPROM            0            0K            0
        MLX5EEPROM            0            0K            0
          seq_file            0            0K            0
           lkpiskb            0            0K            0
             radix            0            0K            0
               idr            0            0K            0
          lkpindev            0            0K            0
            lkpifw            0            0K            0
         lkpi80211            0            0K            0
               NLM            0            0K            0
    ipsec-spdcache            0            0K            0
         ipsec-reg            0            0K            0
        ipsec-misc            0            0K            0
      ipsecrequest            0            0K            0
            ip6opt            0            0K          184
      ip6_moptions            0            0K            1
       in6_mfilter            0            0K            4
             frag6            0            0K            0
            tcplog            0            0K            0
        tcp_hwpace            0            0K            0
            USBdev            0            0K            0
               USB            0            0K            0
               LRO            0            0K            0
       ip_moptions            0            0K           11
        in_mfilter            0            0K            9
              ipid            0            0K            0
         80211scan            0            0K            0
      80211ratectl            0            0K            0
        80211power            0            0K            0
       80211nodeie            0            0K            0
         80211node            0            0K            0
      80211mesh_gt            0            0K            0
      80211mesh_rt            0            0K            0
         80211perr            0            0K            0
         80211prep            0            0K            0
         80211preq            0            0K            0
          80211dfs            0            0K            0
       80211crypto            0            0K            0
          80211vap            0            0K            0
             iflib            0            0K            0
              vlan            0            0K            0
               gif            0            0K            0
           ifdescr            0            0K            0
              zlib            0            0K            0
           fadvise            0            0K            0
           VN POLL            0            0K            1
               agp            0            0K            0
            statfs            0            0K        20564
     namei_tracker            0            0K           41
       export_host            0            0K            0
        cl_savebuf            0            0K           19
           nvme_da            0            0K            0
           acpipwr            0            0K            0
         acpi_perf            0            0K            0
            twsbuf            0            0K            0
      twe_commands            0            0K            0
       tcp_log_dev            0            0K          531
      midi buffers            0            0K            0
             mixer            0            0K            0
              ac97            0            0K            0
             hdacc            0            0K            0
              hdac            0            0K            0
              hdaa            0            0K            0
         acpicmbat            0            0K            0
       SIIS driver            0            0K            0
           CAM CCB            0            0K          523
            biobuf            0            0K            0
              aios            0            0K            9
               lio            0            0K           17
               acl            0            0K            0
          mbuf_tag            0            0K          178
               PUC            0            0K            0
          ppbusdev            0            0K            0
agtiapi_MemAlloc malloc            0            0K            0
    osti_cacheable            0            0K            0
          tempbuff            0            0K            0
          tempbuff            0            0K            0
ag_tgt_map_t malloc            0            0K            0
ag_slr_map_t malloc            0            0K            0
lDevFlags * malloc            0            0K            0
tiDeviceHandle_t * malloc            0            0K            0
ag_portal_data_t malloc            0            0K            0
ag_device_t malloc            0            0K            0
     STLock malloc            0            0K            0
          CCB List            0            0K            0
            sr_iov            0            0K            0
               OCS            0            0K            0
               OCS            0            0K            0
              nvme            0            0K            0
               nvd            0            0K            0
            netmap            0            0K            0
            mwldev            0            0K            0
        MVS driver            0            0K            0
     CAM ccb queue            0            0K            0
              accf            0            0K            0
               pts            0            0K            0
               iov            0            0K        27630
          ioctlops            0            0K         2242
           Witness            0            0K            0
             stack            0            0K            0
          mrsasbuf            0            0K            0
          mpt_user            0            0K            0
          mps_user            0            0K            0
            MPSSAS            0            0K            0
               mps            0            0K            0
              sbuf            0            0K          290
          mpr_user            0            0K            0
          firmware            0            0K            0
        compressor            0            0K            0
            MPRSAS            0            0K            0
              SWAP            0            0K            0
               mpr            0            0K            0
            mfibuf            0            0K            0
         sysctltmp            0            0K          846
            sysctl            0            0K            3
        md_sectors            0            0K            0
              ekcd            0            0K            0
            dumper            0            0K            0
          sendfile            0            0K            4
              rctl            0            0K            0
           md_disk            0            0K            1
           malodev            0            0K            0
               LED            0            0K            0
          ix_sriov            0            0K            0
             cache            0            0K            0
        aacraidcam            0            0K            0
      prison_racct            0            0K            0
       Fail Points            0            0K            0
             sigio            0            0K            2
filedesc_to_leader            0            0K            0
               pwd            0            0K            0
       tty console            0            0K            0
                ix            0            0K            0
            ipsbuf            0            0K            0
       aacraid_buf            0            0K            0
            aaccam            0            0K            0
         boottrace            0            0K            0
            aacbuf            0            0K            0
              zstd            0            0K            0
            XZ_DEC            0            0K            0
            nvlist            0            0K            0
          SCSI ENC            0            0K            0
           SCSI sa            0            0K            0
        isofs_node            0            0K            0
       isofs_mount            0            0K            0
     tr_raid5_data            0            0K            0
    tr_raid1e_data            0            0K            0
     tr_raid1_data            0            0K            0
     tr_raid0_data            0            0K            0
    tr_concat_data            0            0K            0
       md_sii_data            0            0K            0
   md_promise_data            0            0K            0
    md_nvidia_data            0            0K            0
   md_jmicron_data            0            0K            0
     md_intel_data            0            0K            0
       md_ddf_data            0            0K            0
         raid_data            0            0K           72
     geom_flashmap            0            0K            0
         tmpfs dir            0            0K            0
        tmpfs name            0            0K            0
       tmpfs mount            0            0K            0
           NFS FHA            0            0K            0
         newnfsmnt            0            0K            0
  newnfsclient_req            0            0K            0
   NFSCL layrecall            0            0K            0
db> show uma
              Zone   Size    Used    Free    Requests  Sleeps  Bucket  Total Mem    XFree
   mbuf_jumbo_page   4096    8428     970     1250789       0     254   38494208        0
           tcp_log    416   10014   17418      853230       0     254   11411712        0
              mbuf    256    9930    7100     6023353       0     254    4359680        0
      mbuf_cluster   2048    1270       0        1270       0     254    2600960        0
        RADIX NODE    144   17445     386      392947       0      63    2567664        0
      malloc-16384  16384     131       6       20347       0       1    2244608        0
       malloc-4096   4096     519       5       21911       0       2    2146304        0
              pbuf   2624       0     762           0       0       2    1999488        0
    ertt_txseginfo     40   40075    4163     1897466       0     254    1769520        0
         sctp_asoc   2288     501     264       10293       0     254    1750320        0
          BUF TRIE    144     388   11400       21105       0      62    1697472        0
        malloc-384    384    4168       2        4168       0      30    1601280        0
       tcp_bbr_map    128    4918    7575      634789       0     127    1599104        0
        malloc-128    128   11705     168       11711       0     126    1519744        0
       malloc-2048   2048     587     133       27459       0       8    1474560        0
         vmem btag     56   24976      47       24976       0     254    1401288        0
         VM OBJECT    264    5053     107      469055       0      30    1362240        0
       UMA Slabs 0    112   12025      29       12025       0     126    1350048        0
           sctp_ep   1208     578     442       26174       0     254    1232160        0
         malloc-64     64    1055   15703      386623       0     254    1072512        0
        256 Bucket   2048     393      63       16390       0       8     933888        0
         MAP ENTRY     96    8898     636     1166742       0     127     915264        0
         FFS inode   1160     663      30       21740       0       8     803880        0
            socket    960     228     536       37169       0     254     733440        0
            THREAD   1808     289      30       27988       0       8     576752        0
        malloc-256    256    1044    1191       72199       0      62     572160        0
        sctp_raddr    736     541     229       10836       0     254     566720        0
             tcpcb   1104      69     442        7490       0     254     564144        0
        malloc-384    384    1309     131       39325       0      30     552960        0
      malloc-65536  65536       6       2           9       0       1     524288        0
       malloc-1024   1024     503       9       10175       0      16     524288        0
        malloc-384    384     116    1054       21680       0      30     449280        0
           VMSPACE   2552     164      10       21301       0       4     444048        0
          lkpicurr    168       2    2350           2       0      62     395136        0
      malloc-65536  65536       0       6         279       0       1     393216        0
            lkpimm    168       1    2327           1       0      62     391104        0
        malloc-256    256     357    1083       22947       0      62     368640        0
             VNODE    448     704      79       21783       0      30     350784        0
      malloc-65536  65536       0       5         254       0       1     327680        0
       mbuf_packet    256     512     758       77018       0     254     325120        0
     FPU_save_area    832     291      51       36767       0      16     284544        0
              PROC   1352     190      20       21334       0       8     283920        0
        sctp_chunk    152     563    1231       34216       0     254     272688        0
      malloc-65536  65536       1       3           4       0       1     262144        0
         malloc-64     64    3889     206        3899       0     254     262080        0
         malloc-16     16   14698      52       14779       0     254     236000        0
      malloc-32768  32768       0       7       10223       0       1     229376        0
            DEVCTL   1024       0     220         155       0       0     225280        0
         filedesc0   1072     191      19       21870       0       8     225120        0
        malloc-128    128    1387     256       69206       0     126     210304        0
      malloc-65536  65536       0       3         148       0       1     196608        0
      malloc-65536  65536       3       0           3       0       1     196608        0
      malloc-32768  32768       0       6          10       0       1     196608        0
       FFS2 dinode    256     663      87       21740       0      62     192000        0
        malloc-256    256     109     641       42171       0      62     192000        0
         UMA Zones    768     246       3         246       0      16     191232        0
         malloc-32     32    5342     328        5398       0     254     181440        0
        128 Bucket   1024      73      90        4731       0      16     166912        0
        malloc-128    128     103    1168       21212       0     126     162688        0
       S VFS Cache    104    1042     479       22720       0     126     158184        0
       malloc-8192   8192       7      12         148       0       1     155648        0
       malloc-8192   8192      13       5         176       0       1     147456        0
       malloc-1024   1024     125      19         663       0      16     147456        0
        malloc-128    128     962     185        4952       0     126     146816        0
      malloc-32768  32768       2       2          10       0       1     131072        0
      malloc-32768  32768       0       4           8       0       1     131072        0
        malloc-128    128     692     331       45847       0     126     130944        0
             unpcb    256      20     490        1426       0     254     130560        0
            clpbuf   2624       0      48         500       0      16     125952        0
          ksiginfo    112     199     845        9361       0     126     116928        0
         malloc-64     64    1405     422       40612       0     254     116928        0
         tcp_inpcb    424      69     174        7490       0      30     103032        0
         64 Bucket    512     136      64       28159       0      30     102400        0
      malloc-16384  16384       6       0           6       0       1      98304        0
       malloc-4096   4096      22       0          22       0       2      90112        0
          UMA Kegs    384     231       2         231       0      30      89472        0
          syncache    168       0     528          15       0     254      88704        0
sctp_stream_msg_out    112     200     592        2708       0     254      88704        0
              pipe    744      33      82         922       0      16      85560        0
         32 Bucket    256     140     175       28712       0      62      80640        0
        sctp_readq    152       4     516        1167       0     254      79040        0
             ripcb    424      40     140         862       0      30      76320        0
       malloc-8192   8192       9       0           9       0       1      73728        0
       malloc-4096   4096      15       3          51       0       2      73728        0
             g_bio    408       0     180      163245       0      30      73440        0
             Files     80     502     398       75134       0     126      72000        0
         malloc-32     32    1567     575       56779       0     254      68544        0
      malloc-32768  32768       0       2         120       0       1      65536        0
      malloc-32768  32768       2       0           2       0       1      65536        0
      malloc-16384  16384       1       3         161       0       1      65536        0
       malloc-2048   2048      13      19          29       0       8      65536        0
        malloc-256    256      10     245       49536       0      62      65280        0
        malloc-256    256      77     178       23223       0      62      65280        0
      tcp_rack_pcb    896      31      41        2941       0      16      64512        0
       tcp_bbr_pcb    832      21      51        1954       0      16      59904        0
     udplite_inpcb    424       0     126         635       0      30      53424        0
         TURNSTILE    136     320      58         320       0      62      51408        0
        malloc-256    256      49     146       20656       0      62      49920        0
           DIRHASH   1024      34      14          34       0      16      49152        0
             NAMEI   1024       0      48      105066       0      16      49152        0
       malloc-4096   4096      11       1         556       0       2      49152        0
       malloc-2048   2048       3      21         350       0       8      49152        0
       malloc-1024   1024      22      26         548       0      16      49152        0
       malloc-1024   1024      19      29        1482       0      16      49152        0
        malloc-512    512      17      79        4248       0      30      49152        0
      tcp_rack_map    120      51     345        5453       0     126      47520        0
        malloc-384    384      50      70         597       0      30      46080        0
        malloc-384    384      55      65         533       0      30      46080        0
        SLEEPQUEUE     88     320     192         320       0     126      45056        0
            pcpu-8      8    4745     887       10912       0     254      45056        0
             AIOCB    552       0      70         268       0      16      38640        0
       Mountpoints   2752       2      12           3       0       4      38528        0
         udp_inpcb    424       6      84         526       0      30      38160        0
            da_ccb    544       0      70       41162       0      16      38080        0
         hostcache     64       5     562           5       0     254      36288        0
               PWD     32     122    1012       20278       0     254      36288        0
         malloc-64     64      45     522       18991       0     254      36288        0
         malloc-64     64      26     541          82       0     254      36288        0
         malloc-64     64     278     289        3068       0     254      36288        0
         malloc-64     64      11     556          74       0     254      36288        0
         malloc-64     64     207     360       21889       0     254      36288        0
         16 Bucket    144      85     167        2212       0      62      36288        0
        malloc-128    128      43     236        1152       0     126      35712        0
        malloc-128    128      98     181         852       0     126      35712        0
        malloc-128    128      42     237         257       0     126      35712        0
      ktls_session    256       3     132           3       0      62      34560        0
     routing nhops    256      27     108          35       0      62      34560        0
           ttyoutq    256      72      63         160       0      62      34560        0
        malloc-256    256      25     110        4324       0      62      34560        0
        malloc-256    256       7     128         775       0      62      34560        0
      malloc-16384  16384       0       2           3       0       1      32768        0
      malloc-16384  16384       2       0          17       0       1      32768        0
      malloc-16384  16384       0       2           4       0       1      32768        0
       malloc-8192   8192       4       0           4       0       1      32768        0
       malloc-4096   4096       3       5       20572       0       2      32768        0
       malloc-2048   2048       0      16          29       0       8      32768        0
       malloc-2048   2048       6      10          10       0       8      32768        0
       malloc-2048   2048       1      15         415       0       8      32768        0
       malloc-2048   2048       1      15          25       0       8      32768        0
       malloc-2048   2048       2      14        1738       0       8      32768        0
       malloc-1024   1024       2      30         193       0      16      32768        0
       malloc-1024   1024       4      28           5       0      16      32768        0
       malloc-1024   1024       3      29          12       0      16      32768        0
       malloc-1024   1024       1      31          38       0      16      32768        0
        malloc-512    512       0      64         126       0      30      32768        0
        malloc-512    512       2      62           2       0      30      32768        0
        malloc-512    512       5      59         579       0      30      32768        0
        malloc-512    512       0      64          21       0      30      32768        0
        malloc-512    512      10      54          92       0      30      32768        0
        malloc-512    512       0      64          21       0      30      32768        0
        malloc-512    512      11      53          48       0      30      32768        0
           pcpu-64     64     495      17         495       0     254      32768        0
             KNOTE    160      28     172      208816       0      62      32000        0
            ttyinq    160     135      65         300       0      62      32000        0
            cpuset    104       9     270        1014       0     126      29016        0
        sctp_laddr     48      88     500        7234       0     254      28224        0
   tcp_inpcb ports     32      21     861        3444       0     254      28224        0
              ertt     72      69     323        7490       0     126      28224        0
          4 Bucket     48       6     582         483       0     254      28224        0
          2 Bucket     32      89     793        4212       0     254      28224        0
         malloc-16     16    1117     633       59313       0     254      28000        0
         malloc-16     16    1102     648       40790       0     254      28000        0
               AIO    208       0     133         137       0      62      27664        0
       malloc-8192   8192       0       3          58       0       1      24576        0
           rtentry    176      31     107          35       0      62      24288        0
              PGRP     88      35     241          66       0     126      24288        0
          rl_entry     40     192     414         196       0     254      24240        0
          8 Bucket     80      70     230        5196       0     126      24000        0
            itimer    352       1      65          19       0      30      23232        0
        malloc-384    384       0      60          11       0      30      23040        0
         domainset     40       0     567         765       0     254      22680        0
tfo_ccache_entries     80       3     253           3       0     126      20480        0
             udpcb     32       6     624        1161       0     254      20160        0
udplite_inpcb ports     32       0     630          35       0     254      20160        0
   udp_inpcb ports     32       3     627          51       0     254      20160        0
              AIOP     32       4     626           4       0     254      20160        0
         malloc-32     32      35     595        1180       0     254      20160        0
         malloc-32     32     140     490       20909       0     254      20160        0
         malloc-32     32     134     496       15103       0     254      20160        0
         malloc-32     32      81     549         209       0     254      20160        0
         malloc-32     32     108     522         110       0     254      20160        0
         malloc-32     32       7     623          43       0     254      20160        0
           cryptop    280       0      70          85       0      30      19600        0
            AIOLIO    272       0      70          17       0      30      19040        0
 epoch_record pcpu    256       4      60           4       0      62      16384        0
       malloc-8192   8192       2       0           2       0       1      16384        0
       malloc-8192   8192       0       2           7       0       1      16384        0
       malloc-4096   4096       0       4           8       0       2      16384        0
       malloc-4096   4096       1       3           4       0       2      16384        0
       malloc-4096   4096       0       4         211       0       2      16384        0
           SMR CPU     32       7     504           7       0     254      16352        0
               ipq     56       0     288           1       0     254      16128        0
   sctp_asconf_ack     48       0     336           4       0     254      16128        0
      vtnet_tx_hdr     24       0     668     1254816       0     254      16032        0
         malloc-16     16     514     486       29378       0     254      16000        0
      tcp_log_node    120       0     132           1       0     126      15840        0
              kenv    258      15      45        1039       0      30      15480        0
            mqnode    416       3      33           3       0      30      14976        0
              vmem   1856       1       7           1       0       8      14848        0
        SMR SHARED     24       7     504           7       0     254      12264        0
    tcp_log_bucket    176       0      69           1       0      62      12144        0
         malloc-16     16     188     562       47573       0     254      12000        0
         malloc-16     16      39     711         278       0     254      12000        0
       L VFS Cache    320       0      36           3       0      30      11520        0
        malloc-384    384      11      19          11       0      30      11520        0
       malloc-8192   8192       1       0           1       0       1       8192        0
           pcpu-16     16      14     498          14       0     254       8192        0
         malloc-16     16      13     487          27       0     254       8000        0
         malloc-16     16       0     500           2       0     254       8000        0
       UMA Slabs 1    176      10      12          10       0      62       3872        0
        KMAP ENTRY     96      15      24          20       0       0       3744        0
               tfo      4       0     493           1       0     254       1972        0
       FFS1 dinode    128       0       0           0       0     126          0        0
           ada_ccb    272       0       0           0       0      30          0        0
             swblk    136       0       0           0       0      62          0        0
          swpctrie    144       0       0           0       0      62          0        0
   cdg_qdiffsample     16       0       0           0       0     254          0        0
   pf state scrubs     40       0       0           0       0     254          0        0
   pf frag entries     40       0       0           0       0     254          0        0
          pf frags    248       0       0           0       0      62          0        0
  pf table entries    160       0       0           0       0     254          0        0
pf table entry counters     64       0       0           0       0     254          0        0
   pf source nodes    136       0       0           0       0     254          0        0
     pf state keys     88       0       0           0       0     126          0        0
         pf states    312       0       0           0       0     254          0        0
           pf tags    104       0       0           0       0     126          0        0
          pf mtags     56       0       0           0       0     254          0        0
          sackhole     32       0       0           0       0     254          0        0
             tcptw     72       0       0           0       0     254          0        0
          tcpreass     48       0       0           0       0     254          0        0
       sctp_asconf     40       0       0           0       0     254          0        0
       ripcb ports     32       0       0           0       0     254          0        0
    IPsec SA lft_c     16       0       0           0       0     254          0        0
        TMPFS node    224       0       0           0       0      62          0        0
           NCLNODE    608       0       0           0       0      16          0        0
        mqnotifier    216       0       0           0       0      62          0        0
            mvdata     64       0       0           0       0     254          0        0
            mqueue    248       0       0           0       0      62          0        0
     LTS VFS Cache    360       0       0           0       0      30          0        0
     STS VFS Cache    144       0       0           0       0      62          0        0
  linux_dma_object     32       0       0           0       0     254          0        0
  linux_dma_pctrie    144       0       0           0       0      62          0        0
   IOMMU_MAP_ENTRY    120       0       0           0       0     126          0        0
    mbuf_jumbo_16k  16384       0       0           0       0     254          0        0
     mbuf_jumbo_9k   9216       0       0           0       0     254          0        0
      audit_record   1280       0       0           0       0       8          0        0
        MAC labels     40       0       0           0       0     254          0        0
            vnpbuf   2624       0       0           0       0      64          0        0
            mdpbuf   2624       0       0           0       0       3          0        0
           nfspbuf   2624       0       0           0       0      16          0        0
            swwbuf   2624       0       0           0       0       8          0        0
            swrbuf   2624       0       0           0       0      16          0        0
          umtx_shm     88       0       0           0       0     126          0        0
           umtx pi     96       0       0           0       0     126          0        0
rangeset pctrie nodes    144       0       0           0       0      62          0        0
      malloc-65536  65536       0       0           0       0       1          0        0
      malloc-65536  65536       0       0           0       0       1          0        0
      malloc-32768  32768       0       0           0       0       1          0        0
      malloc-32768  32768       0       0           0       0       1          0        0
      malloc-16384  16384       0       0           0       0       1          0        0
      malloc-16384  16384       0       0           0       0       1          0        0
        malloc-384    384       0       0           0       0      30          0        0
           pcpu-32     32       0       0           0       0     254          0        0
            pcpu-4      4       0       0           0       0     254          0        0
            fakepg    104       0       0           0       0     126          0        0
          UMA Hash    256       0       0           0       0      62          0        0

Crashes (102):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2022/04/01 21:11 freebsd-src c4a08ef2af6f 7c337266 console log report ci-freebsd-main panic: ASan: Invalid access, NUM-byte write at ADDR, StackRight(f3)
2022/04/01 20:21 freebsd-src c4a08ef2af6f 7c337266 console log report ci-freebsd-main panic: ASan: Invalid access, NUM-byte write at ADDR, StackRight(f3)
2022/03/31 20:29 freebsd-src 5533c5046ada 7c337266 console log report ci-freebsd-main panic: ASan: Invalid access, NUM-byte write at ADDR, StackRight(f3)
2022/03/31 17:48 freebsd-src 5533c5046ada 7c337266 console log report ci-freebsd-main panic: ASan: Invalid access, NUM-byte write at ADDR, StackRight(f3)
2022/03/31 16:37 freebsd-src 5533c5046ada 7c337266 console log report ci-freebsd-main panic: ASan: Invalid access, NUM-byte write at ADDR, StackRight(f3)
2022/03/31 03:25 freebsd-src 27ac4281fddd 7c337266 console log report ci-freebsd-main panic: ASan: Invalid access, NUM-byte write at ADDR, StackRight(f3)
2022/03/30 18:08 freebsd-src d27c9f5bc38e 7c337266 console log report ci-freebsd-main panic: ASan: Invalid access, NUM-byte write at ADDR, StackRight(f3)
2022/03/30 13:58 freebsd-src d27c9f5bc38e 7c337266 console log report ci-freebsd-main panic: ASan: Invalid access, NUM-byte write at ADDR, StackRight(f3)
2022/03/30 13:09 freebsd-src d27c9f5bc38e 7c337266 console log report ci-freebsd-main panic: ASan: Invalid access, NUM-byte write at ADDR, StackRight(f3)
2022/03/30 13:09 freebsd-src d27c9f5bc38e 7c337266 console log report ci-freebsd-main panic: ASan: Invalid access, NUM-byte write at ADDR, StackRight(f3)
2022/03/30 13:03 freebsd-src d27c9f5bc38e 7c337266 console log report ci-freebsd-main panic: ASan: Invalid access, NUM-byte write at ADDR, StackRight(f3)
2022/03/30 13:01 freebsd-src d27c9f5bc38e 7c337266 console log report ci-freebsd-main panic: ASan: Invalid access, NUM-byte write at ADDR, StackRight(f3)
2022/03/30 12:55 freebsd-src d27c9f5bc38e 7c337266 console log report ci-freebsd-main panic: ASan: Invalid access, NUM-byte write at ADDR, StackRight(f3)
2022/03/30 00:46 freebsd-src 868c1b8431f2 7c337266 console log report ci-freebsd-main panic: ASan: Invalid access, NUM-byte write at ADDR, StackRight(f3)
2022/03/30 00:45 freebsd-src 868c1b8431f2 7c337266 console log report ci-freebsd-main panic: ASan: Invalid access, NUM-byte write at ADDR, StackRight(f3)
2022/03/30 00:38 freebsd-src 868c1b8431f2 7c337266 console log report ci-freebsd-main panic: ASan: Invalid access, NUM-byte write at ADDR, StackRight(f3)
2022/03/30 00:12 freebsd-src 868c1b8431f2 7c337266 console log report ci-freebsd-main panic: ASan: Invalid access, NUM-byte write at ADDR, StackRight(f3)
2022/03/30 00:09 freebsd-src 868c1b8431f2 7c337266 console log report ci-freebsd-main panic: ASan: Invalid access, NUM-byte write at ADDR, StackRight(f3)
2022/03/29 23:47 freebsd-src 868c1b8431f2 7c337266 console log report ci-freebsd-main panic: ASan: Invalid access, NUM-byte write at ADDR, StackRight(f3)
2022/03/29 23:44 freebsd-src 868c1b8431f2 7c337266 console log report ci-freebsd-main panic: ASan: Invalid access, NUM-byte write at ADDR, StackRight(f3)
2022/03/29 23:29 freebsd-src 868c1b8431f2 7c337266 console log report ci-freebsd-main panic: ASan: Invalid access, NUM-byte write at ADDR, StackRight(f3)
2022/03/29 23:26 freebsd-src 868c1b8431f2 7c337266 console log report ci-freebsd-main panic: ASan: Invalid access, NUM-byte write at ADDR, StackRight(f3)
2022/03/29 23:25 freebsd-src 868c1b8431f2 7c337266 console log report ci-freebsd-main panic: ASan: Invalid access, NUM-byte write at ADDR, StackRight(f3)
2022/03/29 11:00 freebsd-src ae6aa2d43daa 7c337266 console log report ci-freebsd-main panic: ASan: Invalid access, NUM-byte write at ADDR, StackRight(f3)
2022/03/29 10:57 freebsd-src ae6aa2d43daa 7c337266 console log report ci-freebsd-main panic: ASan: Invalid access, NUM-byte write at ADDR, StackRight(f3)
2022/03/29 10:41 freebsd-src ae6aa2d43daa 7c337266 console log report ci-freebsd-main panic: ASan: Invalid access, NUM-byte write at ADDR, StackRight(f3)
2022/03/29 10:34 freebsd-src ae6aa2d43daa 7c337266 console log report ci-freebsd-main panic: ASan: Invalid access, NUM-byte write at ADDR, StackRight(f3)
2022/03/29 09:35 freebsd-src ae6aa2d43daa 7c337266 console log report ci-freebsd-main panic: ASan: Invalid access, NUM-byte write at ADDR, StackRight(f3)
2022/04/01 19:09 freebsd-src b3b462229f97 7c337266 console log report ci-freebsd-i386 panic: ASan: Invalid access, NUM-byte write at ADDR, StackRight(f3)
2022/04/01 08:15 freebsd-src 58e6bbc5acb2 7c337266 console log report ci-freebsd-i386 panic: ASan: Invalid access, NUM-byte write at ADDR, StackRight(f3)
2022/04/01 06:51 freebsd-src 58e6bbc5acb2 7c337266 console log report ci-freebsd-i386 panic: ASan: Invalid access, NUM-byte write at ADDR, StackRight(f3)
2022/04/01 05:49 freebsd-src 58e6bbc5acb2 7c337266 console log report ci-freebsd-i386 panic: ASan: Invalid access, NUM-byte write at ADDR, StackRight(f3)
2022/03/31 15:33 freebsd-src ab8ac4c28574 7c337266 console log report ci-freebsd-i386 panic: ASan: Invalid access, NUM-byte write at ADDR, StackRight(f3)
2022/03/31 14:11 freebsd-src 27ac4281fddd 7c337266 console log report ci-freebsd-i386 panic: ASan: Invalid access, NUM-byte write at ADDR, StackRight(f3)
2022/03/31 02:23 freebsd-src 27ac4281fddd 7c337266 console log report ci-freebsd-i386 panic: ASan: Invalid access, NUM-byte write at ADDR, StackRight(f3)
2022/03/30 13:45 freebsd-src d27c9f5bc38e 7c337266 console log report ci-freebsd-i386 panic: ASan: Invalid access, NUM-byte write at ADDR, StackRight(f3)
2022/03/30 13:31 freebsd-src d27c9f5bc38e 7c337266 console log report ci-freebsd-i386 panic: ASan: Invalid access, NUM-byte write at ADDR, StackRight(f3)
2022/03/30 12:57 freebsd-src d27c9f5bc38e 7c337266 console log report ci-freebsd-i386 panic: ASan: Invalid access, NUM-byte write at ADDR, StackRight(f3)
2022/03/30 00:40 freebsd-src 868c1b8431f2 7c337266 console log report ci-freebsd-i386 panic: ASan: Invalid access, NUM-byte write at ADDR, StackRight(f3)
2022/03/30 00:27 freebsd-src 868c1b8431f2 7c337266 console log report ci-freebsd-i386 panic: ASan: Invalid access, NUM-byte write at ADDR, StackRight(f3)
2022/03/30 00:25 freebsd-src 868c1b8431f2 7c337266 console log report ci-freebsd-i386 panic: ASan: Invalid access, NUM-byte write at ADDR, StackRight(f3)
2022/03/30 00:01 freebsd-src 868c1b8431f2 7c337266 console log report ci-freebsd-i386 panic: ASan: Invalid access, NUM-byte write at ADDR, StackRight(f3)
2022/03/29 23:04 freebsd-src 868c1b8431f2 7c337266 console log report ci-freebsd-i386 panic: ASan: Invalid access, NUM-byte write at ADDR, StackRight(f3)
2022/03/29 22:36 freebsd-src 868c1b8431f2 7c337266 console log report ci-freebsd-i386 panic: ASan: Invalid access, NUM-byte write at ADDR, StackRight(f3)
* Struck through repros no longer work on HEAD.