syzbot


panic: /syzkaller/managers/main/kernel/sys/kern/kern_timeout.c:LINE: _callout_stop_safe: Bad link elm ADDR prev->next !=

Status: upstream: reported on 2025/05/12 11:48
Reported-by: syzbot+c0cc5646a14707f4470b@syzkaller.appspotmail.com
First crash: 111d, last: 79d

Sample crash report:
panic: /syzkaller/managers/main/kernel/sys/kern/kern_timeout.c:1323: _callout_stop_safe: Bad link elm 0xfffffe0077b32e70 prev->next != elm
cpuid = 1
time = 82
KDB: stack backtrace:
db_trace_self_wrapper() at db_trace_self_wrapper+0xc6/frame 0xfffffe0056b4ebf0
kdb_backtrace() at kdb_backtrace+0xd0/frame 0xfffffe0056b4ed50
vpanic() at vpanic+0x257/frame 0xfffffe0056b4ef10
panic() at panic+0xb5/frame 0xfffffe0056b4efd0
_callout_stop_safe() at _callout_stop_safe+0xc62/frame 0xfffffe0056b4f100
sctp_timer_stop() at sctp_timer_stop+0x4be/frame 0xfffffe0056b4f160
sctp_stop_association_timers() at sctp_stop_association_timers+0x186/frame 0xfffffe0056b4f190
sctp_free_assoc() at sctp_free_assoc+0x37d/frame 0xfffffe0056b4f2e0
sctp_handle_abort() at sctp_handle_abort+0x153/frame 0xfffffe0056b4f310
sctp_process_control() at sctp_process_control+0x2254/frame 0xfffffe0056b4f7e0
sctp_common_input_processing() at sctp_common_input_processing+0x87d/frame 0xfffffe0056b4fa20
sctp_input_with_port() at sctp_input_with_port+0x46e/frame 0xfffffe0056b4fbb0
sctp_input() at sctp_input+0x29/frame 0xfffffe0056b4fbd0
ip_input() at ip_input+0xaa2/frame 0xfffffe0056b4fcf0
swi_net() at swi_net+0x2b8/frame 0xfffffe0056b4fd90
ithread_loop() at ithread_loop+0x4ec/frame 0xfffffe0056b4fef0
fork_exit() at fork_exit+0xcc/frame 0xfffffe0056b4ff30
fork_trampoline() at fork_trampoline+0xe/frame 0xfffffe0056b4ff30
--- trap 0, rip = 0, rsp = 0, rbp = 0 ---
KDB: enter: panic
[ thread pid 12 tid 100033 ]
Stopped at      kdb_enter+0x6e: movq    $0,0x25bb717(%rip)
db> 
db> set $lines = 0
db> set $maxwidth = 0
db> show registers
cs                        0x20
ds                        0x3b
es                        0x3b
fs                        0x13
gs                        0x1b
ss                        0x28
rax                       0x12
rcx         0xfffffe0002bf1850
rdx                          0
rbx         0xffffffff827b7ac0  .str.27
rsp         0xfffffe0056b4ed30
rbp         0xfffffe0056b4ed50
rsi                          0
rdi         0xffffffff81615ad9  printf+0x149
r8                           0
r9                  0xffffffff
r10                          0
r11                       0xbf
r12         0xfffffe0007821780
r13         0xfffffffffffffffd
r14         0xffffffff827b7ac0  .str.27
r15                          0
rip         0xffffffff815ffc7e  kdb_enter+0x6e
rflags                    0x46
kdb_enter+0x6e: movq    $0,0x25bb717(%rip)
db> show proc
Process 12 (intr) at 0xfffffe0007808580:
 state: NORMAL
 uid: 0  gids: 0
 parent: pid 0 at 0xffffffff83b458e0
 ABI: null
 flag: 0x10000284  flag2: 0
 reaper: 0xffffffff83b458e0 reapsubtree: 12
 sigparent: 20
 vmspace: 0xffffffff83b468c0
   (map 0xffffffff83b468c0)
   (map.pmap 0xffffffff83b46960)
   (pmap 0xffffffff83b469d0)
 threads: 20
100013                   I                                   [swi6: task queue]
100014                   I                                   [swi6: Giant taskq]
100016                   I                                   [swi5: fast taskq]
100033                   Run     CPU 1                       [swi1: netisr 0]
100034                   I                                   [swi1: hpts]
100035                   I                                   [swi1: hpts]
100048                   I                                   [irq24: virtio_pci0]
100049                   I                                   [irq25: virtio_pci0]
100050                   I                                   [irq26: virtio_pci0]
100051                   I                                   [irq27: virtio_pci0]
100052                   I                                   [irq28: virtio_pci1]
100053                   I                                   [irq29: virtio_pci1]
100054                   I                                   [irq30: virtio_pci1]
100055                   I                                   [irq31: virtio_pci1]
100056                   I                                   [irq32: virtio_pci1]
100061                   I                                   [irq10: virtio_pci2]
100063                   I                                   [irq1: atkbd0]
100064                   I                                   [irq12: psm0]
100065                   I                                   [swi0: uart uart++]
100069                   I                                   [swi1: pf send]
db> ps
  pid  ppid  pgrp   uid  state   wmesg   wchan               cmd
 1484  1327  1327     0  R                                   syz-executor
 1483  1481  1436     0  S       uwait   0xfffffe0080455180  syz-executor
 1482  1395  1482     0  Rs      (threaded)                  syz-executor
101147                   D       mbusy   0xfffffe0080a2c2f8  syz-executor
101262                   RunQ                                syz-executor
 1481  1436  1436     0  R       (threaded)                  syz-executor
101167                   RunQ                                syz-executor
101260                   RunQ                                syz-executor
101261                   S       uwait   0xfffffe0080456000  syz-executor
 1478     1  1436     0  S       uwait   0xfffffe0080464d80  syz-executor
 1477     1  1436     0  S       uwait   0xfffffe007a60a680  syz-executor
 1472     1  1436     0  S       uwait   0xfffffe0080464b80  syz-executor
 1465     1  1395     0  S       uwait   0xfffffe0080465900  syz-executor
 1464     1  1395     0  S       uwait   0xfffffe0080455280  syz-executor
 1463     1  1327     0  S       uwait   0xfffffe007a60b480  syz-executor
 1459     1  1395     0  S       uwait   0xfffffe007a60a980  syz-executor
 1456     1  1436     0  S       uwait   0xfffffe0080455e80  syz-executor
 1453     1  1449     0  S       uwait   0xfffffe0080465a00  syz-executor
 1452  1451  1451     0  D       ifnet_d 0xffffffff83cba780  ifconfig
 1451   763  1451     0  S       wait    0xfffffe0007826000  syz-executor
 1445     1  1327     0  S       uwait   0xfffffe0080454e00  syz-executor
 1440     1  1395     0  S       uwait   0xfffffe0077645b80  syz-executor
 1436   763  1436     0  S       nanslp  0xffffffff83b9c541  syz-executor
 1423     1  1327     0  S       uwait   0xfffffe0080454d00  syz-executor
 1422     1  1327     0  S       uwait   0xfffffe007a60a580  syz-executor
 1413     1  1327     0  S       uwait   0xfffffe0080454a00  syz-executor
 1406     1  1327     0  S       uwait   0xfffffe0077647c80  syz-executor
 1400     1  1327     0  S       uwait   0xfffffe0080456100  syz-executor
 1398     1  1327     0  S       uwait   0xfffffe0080467500  syz-executor
 1395   763  1395     0  R                                   syz-executor
 1387     1  1327     0  S       uwait   0xfffffe0080454c00  syz-executor
 1386     1  1327     0  S       uwait   0xfffffe006e496c80  syz-executor
 1381     1  1149     0  S       uwait   0xfffffe0058251380  syz-executor
 1377     1   767     0  S       uwait   0xfffffe0080467400  syz-executor
 1376     1  1149     0  S       uwait   0xfffffe0077646280  syz-executor
 1374     1  1327     0  S       uwait   0xfffffe007a60b680  syz-executor
 1367     1  1357     0  D       tun_con 0xfffffe0077791ca8  ifconfig
 1363     1  1149     0  S       uwait   0xfffffe0080466d80  syz-executor
 1362     1  1149     0  S       uwait   0xfffffe0080467600  syz-executor
 1358     0     0     0  DL      mdwait  0xfffffe0080802000  [md6]
 1353     0     0     0  DL      mdwait  0xfffffe0077f39000  [md5]
 1350     1  1149     0  S       uwait   0xfffffe0080467300  syz-executor
 1347     1   767     0  S       uwait   0xfffffe0077647b80  syz-executor
 1345     1   767     0  S       uwait   0xfffffe007a609300  syz-executor
 1344     1   767     0  S       uwait   0xfffffe0077646480  syz-executor
 1341     1   767     0  S       uwait   0xfffffe007a609200  syz-executor
 1340  1339  1233 60929  SV      uwait   0xfffffe007a60ad00  syz-executor
 1339  1337  1233 60929  DV      ppwait  0xfffffe0054195a80  syz-executor
 1338     1   767     0  S       uwait   0xfffffe0077646200  syz-executor
 1337     1  1233 60929  DV      ppwait  0xfffffe00541e6500  syz-executor
 1332     1  1233     0  S       uwait   0xfffffe0077647e80  syz-executor
 1331     1  1233     0  S       uwait   0xfffffe0077647d80  syz-executor
 1327   763  1327     0  R                                   syz-executor
 1326     1   767     0  S       uwait   0xfffffe0058251600  syz-executor
 1325     1   767     0  S       uwait   0xfffffe0058251500  syz-executor
 1320     1  1149     0  S       uwait   0xfffffe0077645180  syz-executor
 1318     1   767     0  S       uwait   0xfffffe0077645980  syz-executor
 1317     1   767     0  S       uwait   0xfffffe0077645780  syz-executor
 1315     1   767     0  S       uwait   0xfffffe0077646180  syz-executor
 1311     1  1233     0  S       uwait   0xfffffe0077646100  syz-executor
 1310     1  1233     0  S       uwait   0xfffffe0077645900  syz-executor
 1298     1   767     0  S       uwait   0xfffffe00584e6400  syz-executor
 1297     1   767     0  S       uwait   0xfffffe0058251280  syz-executor
 1291     0     0     0  DL      mdwait  0xfffffe0059672000  [md4]
 1286     1   767     0  SV      uwait   0xfffffe0077645380  syz-executor
 1285     1  1149     0  SV      sigwait 0xfffffe00541a5bb0  syz-executor
 1281     1   767     0  S       uwait   0xfffffe0077647280  syz-executor
 1280     1   767     0  S       uwait   0xfffffe007a60c080  syz-executor
 1275     1  1149     0  S       uwait   0xfffffe0077645080  syz-executor
 1268     1   767     0  S       uwait   0xfffffe007a60c500  syz-executor
 1267     1   767     0  S       uwait   0xfffffe0077647080  syz-executor
 1266     1   767     0  S       uwait   0xfffffe007a60c800  syz-executor
 1263     1   765     0  S       uwait   0xfffffe0058251b80  syz-executor
 1262     1   765     0  S       uwait   0xfffffe0077647200  syz-executor
 1259     1  1149     0  S       uwait   0xfffffe00584e6380  syz-executor
 1255     1   767     0  S       uwait   0xfffffe006e494080  syz-executor
 1254     1   765     0  S       uwait   0xfffffe00584e5500  syz-executor
 1245     1   765     0  SV      uwait   0xfffffe0058251300  syz-executor
 1243     1   765     0  S       uwait   0xfffffe0077645880  syz-executor
 1241     1   765     0  S       uwait   0xfffffe0077645680  syz-executor
 1230     1  1149     0  S       uwait   0xfffffe007a60c600  syz-executor
 1228     1  1149     0  S       uwait   0xfffffe0077647380  syz-executor
 1224     1   764     0  S       uwait   0xfffffe007a60c400  syz-executor
 1219     1   764     0  S       uwait   0xfffffe006e495380  syz-executor
 1208     0     0     0  DL      mdwait  0xfffffe0059673000  [md3]
 1204     1   765     0  S       uwait   0xfffffe00584e5480  syz-executor
 1203     1   767     0  S       uwait   0xfffffe0077645580  syz-executor
 1202     1   767     0  S       uwait   0xfffffe006e495680  syz-executor
 1196     1   764     0  S       uwait   0xfffffe00584e6480  syz-executor
 1194     1  1149     0  S       uwait   0xfffffe007a60c700  syz-executor
 1190     1   767     0  S       uwait   0xfffffe006e495500  syz-executor
 1187     1  1149     0  S       uwait   0xfffffe000778ae80  syz-executor
 1172     1   765     0  S       uwait   0xfffffe006e493180  syz-executor
 1171     1   765     0  S       uwait   0xfffffe00584e6c80  syz-executor
 1167     1   764     0  S       uwait   0xfffffe0077646880  syz-executor
 1164     1   764     0  S       uwait   0xfffffe00584e6180  syz-executor
 1160     1  1160     0  Ss+     ttyin   0xfffffe0007a728b0  getty
 1159     1  1159     0  Ss+     ttyin   0xfffffe0058736cb0  getty
 1158     1  1158     0  Ss+     ttyin   0xfffffe00587378b0  getty
 1157     1  1157     0  Ss+     ttyin   0xfffffe0058737cb0  getty
 1156     1  1156     0  Ss+     ttyin   0xfffffe00587380b0  getty
 1155     1  1155     0  Ss+     ttyin   0xfffffe00587384b0  getty
 1154     1  1154     0  Ss+     ttyin   0xfffffe00587388b0  getty
 1153     1  1153     0  Ss+     ttyin   0xfffffe00587370b0  getty
 1152     1  1152     0  Ss+     ttyin   0xfffffe00587374b0  getty
 1148     0     0     0  DL      mdwait  0xfffffe00778c7000  [md2]
 1144     0     0     0  DL      mdwait  0xfffffe0077f38000  [md1]
 1139     1   767     0  S       uwait   0xfffffe0058251880  syz-executor
 1137     1   765     0  S       uwait   0xfffffe0077647600  syz-executor
 1136     1   765     0  S       uwait   0xfffffe006e493d80  syz-executor
 1131     1   766     0  S       uwait   0xfffffe00584e8980  syz-executor
 1120     1   767     0  S       uwait   0xfffffe006e494100  syz-executor
 1118     1   766     0  SV      uwait   0xfffffe0058255600  syz-executor
 1114     1   766     0  S       uwait   0xfffffe0058255c00  syz-executor
 1109     1   767     0  S       uwait   0xfffffe006e493a00  syz-executor
 1106     1   767     0  S       uwait   0xfffffe00584e8e00  syz-executor
 1102     1   767     0  S       uwait   0xfffffe0058255b00  syz-executor
 1097     1   767     0  S       uwait   0xfffffe0077647400  syz-executor
 1093     1   765     0  S       uwait   0xfffffe000778a580  syz-executor
 1085     1   766     0  S       uwait   0xfffffe0058253380  syz-executor
 1081     1   767     0  S       uwait   0xfffffe00584e8c80  syz-executor
 1076     1   766     0  S       uwait   0xfffffe006e493f00  syz-executor
 1075     1   766     0  S       uwait   0xfffffe0077647700  syz-executor
 1072     1   765     0  S       uwait   0xfffffe0058251c00  syz-executor
 1069     1   765     0  S       uwait   0xfffffe006e494c80  syz-executor
 1064     1   766     0  S       uwait   0xfffffe0077647480  syz-executor
 1054     1   765     0  S       uwait   0xfffffe00584e6000  syz-executor
 1052     1   766     0  S       uwait   0xfffffe006e494680  syz-executor
 1046     1   765     0  S       uwait   0xfffffe006e493980  syz-executor
 1042     1   767     0  S       uwait   0xfffffe0058252a80  syz-executor
 1037     1   766 60928  S       uwait   0xfffffe006e493780  syz-executor
 1032     1   764     0  S       uwait   0xfffffe006e493880  syz-executor
 1031     1   764     0  S       uwait   0xfffffe006e493280  syz-executor
 1028     1   764     0  S       uwait   0xfffffe006e494780  syz-executor
 1024     1   764     0  S       uwait   0xfffffe0058253a80  syz-executor
 1021     1   764     0  S       uwait   0xfffffe006e494580  syz-executor
 1020     1   764     0  S       uwait   0xfffffe006e493400  syz-executor
 1016     1   766     0  S       uwait   0xfffffe006e495100  syz-executor
 1015     1   766     0  S       uwait   0xfffffe006e495000  syz-executor
 1010     1   765     0  S       uwait   0xfffffe006e494880  syz-executor
 1009     1   765     0  S       uwait   0xfffffe006e494480  syz-executor
 1002     1   766     0  S       uwait   0xfffffe006e495580  syz-executor
  997     1   764     0  SV      uwait   0xfffffe0058252e00  syz-executor
  995     1   766     0  S       uwait   0xfffffe006e493380  syz-executor
  980     1   976     0  S       uwait   0xfffffe006e494d80  syz-executor
  979     1   976     0  S       uwait   0xfffffe006e493c00  syz-executor
  975     1   767     0  S       uwait   0xfffffe0058255e00  syz-executor
  971     0     0     0  DL      mdwait  0xfffffe00778c8000  [md0]
  968     1   766     0  S       uwait   0xfffffe0058252700  syz-executor
  967     1   764     0  S       uwait   0xfffffe0058252500  syz-executor
  963     1   766     0  S       uwait   0xfffffe006e495780  syz-executor
  961     1   766     0  S       uwait   0xfffffe0058253480  syz-executor
  959     0     0     0  DL      (threaded)                  [so_splice]
100280                   D       -       0xfffffe005857fd80  [thr_0]
100281                   D       -       0xfffffe005857fdc0  [thr_1]
  956     1   766     0  S       uwait   0xfffffe006e495700  syz-executor
  948     0     0     0  DL      (threaded)                  [KTLS]
100261                   D       -       0xfffffe006e4b6100  [thr_0]
100262                   D       -       0xfffffe006e4b6180  [thr_1]
100263                   D       -       0xffffffff83cade28  [reclaim_0]
  941     1   765     0  SV      uwait   0xfffffe00584e7300  syz-executor
  938     1   767    -1  S       uwait   0xfffffe0058252400  syz-executor
  935     1   766     0  S       uwait   0xfffffe0058252300  syz-executor
  932     1   766     0  S       uwait   0xfffffe0058255d00  syz-executor
  917     1   765     0  S       uwait   0xfffffe000778ad80  syz-executor
  906     1   765     0  S       uwait   0xfffffe0058255f00  syz-executor
  902     1   897     0  S       uwait   0xfffffe006e496580  syz-executor
  888   786   424     0  S       kqread  0xfffffe006e455a00  rtsol
  885     1   767     0  S       uwait   0xfffffe006e494280  syz-executor
  884     1   767     0  S       uwait   0xfffffe006e496480  syz-executor
  881     1   764     0  S       uwait   0xfffffe0058255a00  syz-executor
  861     0     0     0  DL      -       0xffffffff83cac600  [soaiod4]
  860     0     0     0  DL      -       0xffffffff83cac600  [soaiod3]
  859     0     0     0  DL      -       0xffffffff83cac600  [soaiod2]
  858     0     0     0  DL      -       0xffffffff83cac600  [soaiod1]
  841     1   765     0  S       uwait   0xfffffe0058255800  syz-executor
  840     1   765     0  S       uwait   0xfffffe00584e7400  syz-executor
  830     1   764     0  S       uwait   0xfffffe006e496280  syz-executor
  816     0     0     0  DL      aiordy  0xfffffe0054105580  [aiod4]
  815     0     0     0  DL      aiordy  0xfffffe00540d7b00  [aiod3]
  814     0     0     0  DL      aiordy  0xfffffe0054105ae0  [aiod2]
  813     0     0     0  DL      aiordy  0xfffffe00541065a0  [aiod1]
  786     1   424     0  S       wait    0xfffffe0054107060  sh
  763   761   761     0  S       select  0xfffffe0057ffd540  syz-executor
  761   759   761     0  Ss      sigsusp 0xfffffe00541050d0  csh
  759   682   759     0  Ss      select  0xfffffe0057ffd6c0  sshd
  682     1   682     0  Ss      select  0xfffffe0057fe0bc0  sshd
   17     0     0     0  DL      syncer  0xffffffff83cb9fa0  [syncer]
   16     0     0     0  DL      vlruwt  0xfffffe0007828040  [vnlru]
   15     0     0     0  DL      (threaded)                  [bufdaemon]
100080                   D       psleep  0xffffffff83cb8560  [bufdaemon]
100083                   D       -       0xffffffff83001ec0  [bufspacedaemon-0]
100094                   D       sdflush 0xfffffe0057e90ce8  [/ worker]
    9     0     0     0  DL      psleep  0xffffffff83d03380  [vmdaemon]
    8     0     0     0  DL      (threaded)                  [pagedaemon]
100078                   D       psleep  0xffffffff83ce9488  [dom0]
100081                   D       launds  0xffffffff83ce9494  [laundry: dom0]
100082                   D       umarcl  0xffffffff81dd5b50  [uma]
    7     0     0     0  DL      -       0xffffffff83919cd0  [rand_harvestq]
    6     0     0     0  DL      pftm    0xffffffff846ec850  [pf purge]
    5     0     0     0  DL      waiting 0xffffffff84499700  [sctp_iterator]
    4     0     0     0  DL      (threaded)                  [cam]
100046                   D       -       0xffffffff838e4340  [doneq0]
100047                   D       -       0xffffffff838e42c0  [async]
100076                   D       -       0xffffffff838e4140  [scanner]
    3     0     0     0  DL      (threaded)                  [crypto]
100043                   D       crypto_ 0xffffffff83ce4d40  [crypto]
100044                   D       crypto_ 0xfffffe0007a89e30  [crypto returns 0]
100045                   D       crypto_ 0xfffffe0007a89e80  [crypto returns 1]
   14     0     0     0  DL      seqstat 0xfffffe0007766c88  [sequencer 00]
   13     0     0     0  DL      (threaded)                  [geom]
100037                   D       -       0xffffffff83b44f00  [g_event]
100038                   D       -       0xffffffff83b44f20  [g_up]
100039                   D       -       0xffffffff83b44f40  [g_down]
    2     0     0     0  RL      (threaded)                  [clock]
100031                   Run     CPU 0                       [clock (0)]
100032                   RunQ                                [clock (1)]
   12     0     0     0  RL      (threaded)                  [intr]
100013                   I                                   [swi6: task queue]
100014                   I                                   [swi6: Giant taskq]
100016                   I                                   [swi5: fast taskq]
100033                   Run     CPU 1                       [swi1: netisr 0]
100034                   I                                   [swi1: hpts]
100035                   I                                   [swi1: hpts]
100048                   I                                   [irq24: virtio_pci0]
100049                   I                                   [irq25: virtio_pci0]
100050                   I                                   [irq26: virtio_pci0]
100051                   I                                   [irq27: virtio_pci0]
100052                   I                                   [irq28: virtio_pci1]
100053                   I                                   [irq29: virtio_pci1]
100054                   I                                   [irq30: virtio_pci1]
100055                   I                                   [irq31: virtio_pci1]
100056                   I                                   [irq32: virtio_pci1]
100061                   I                                   [irq10: virtio_pci2]
100063                   I                                   [irq1: atkbd0]
100064                   I                                   [irq12: psm0]
100065                   I                                   [swi0: uart uart++]
100069                   I                                   [swi1: pf send]
   11     0     0     0  RL      (threaded)                  [idle]
100003                   CanRun                              [idle: cpu0]
100004                   CanRun                              [idle: cpu1]
    1     0     1     0  SLs     wait    0xfffffe0007809040  [init]
   10     0     0     0  DL      audit_w 0xffffffff83ce57e0  [audit]
    0     0     0     0  DLs     (threaded)                  [kernel]
100000                   D       parked  0xffffffff84c33ff0  [swapper]
100005                   D       -       0xfffffe0007773900  [softirq_0]
100006                   D       -       0xfffffe0007773800  [softirq_1]
100007                   D       -       0xfffffe0007773700  [if_io_tqg_0]
100008                   D       -       0xfffffe0007773600  [if_io_tqg_1]
100009                   D       -       0xfffffe0007773500  [if_config_tqg_0]
100010                   D       -       0xfffffe0007773400  [kqueue_ctx taskq]
100011                   D       -       0xfffffe0007773300  [jail_remove taskq]
100012                   D       -       0xfffffe0007773200  [bus taskq]
100015                   D       -       0xfffffe0007772e00  [thread taskq]
100017                   D       -       0xfffffe0007772c00  [aiod_kick taskq]
100018                   D       -       0xfffffe0007772b00  [deferred_unmount ta]
100019                   D       -       0xfffffe0007772a00  [inm_free taskq]
100020                   D       -       0xfffffe0007772900  [in6m_free taskq]
100021                   D       -       0xfffffe0007772800  [linuxkpi_irq_wq]
100022                   D       -       0xfffffe0007772700  [linuxkpi_short_wq_0]
100023                   D       -       0xfffffe0007772700  [linuxkpi_short_wq_1]
100024                   D       -       0xfffffe0007772700  [linuxkpi_short_wq_2]
100025                   D       -       0xfffffe0007772700  [linuxkpi_short_wq_3]
100026                   D       -       0xfffffe0007772600  [linuxkpi_long_wq_0]
100027                   D       -       0xfffffe0007772600  [linuxkpi_long_wq_1]
100028                   D       -       0xfffffe0007772600  [linuxkpi_long_wq_2]
100029                   D       -       0xfffffe0007772600  [linuxkpi_long_wq_3]
100036                   D       -       0xfffffe0007772400  [firmware taskq]
100041                   D       -       0xfffffe0007772100  [crypto_0]
100042                   D       -       0xfffffe0007772100  [crypto_1]
100057                   D       -       0xfffffe0057fe9500  [vtnet0 rxq 0]
100058                   D       -       0xfffffe0057fe9400  [vtnet0 txq 0]
100059                   D       -       0xfffffe0057fe9300  [vtnet0 rxq 1]
100060                   D       -       0xfffffe0057fe9200  [vtnet0 txq 1]
100062                   D       vtbslp  0xfffffe0057fe0580  [virtio_balloon]
100066                   D       -       0xffffffff827bce01  [deadlkres]
100070                   D       -       0xfffffe00593ce400  [acpi_task_0]
100071                   D       -       0xfffffe00593ce400  [acpi_task_1]
100072                   D       -       0xfffffe00593ce400  [acpi_task_2]
100074                   D       -       0xfffffe0007773c00  [mca taskq]
100075                   D       -       0xfffffe0007771e00  [CAM taskq]
100077                   D       -       0xfffffe005843bc00  [ipsec_offload]
100230                   D       -       0xfffffe00593cd900  [netlink_socket (PID]
100972                   D       -       0xfffffe00593cc900  [system_taskq_0]
100973                   D       -       0xfffffe00593cc900  [system_taskq_1]
100974                   D       -       0xfffffe00593cb000  [system_delay_taskq_]
100975                   D       -       0xfffffe00593cb000  [system_delay_taskq_]
100976                   D       -       0xfffffe0058439300  [zvol_tq-0_0]
100977                   D       -       0xfffffe0058439300  [zvol_tq-0_1]
100978                   D       -       0xfffffe0058439300  [zvol_tq-0_2]
100979                   D       -       0xfffffe0058439300  [zvol_tq-0_3]
100980                   D       -       0xfffffe0058439300  [zvol_tq-0_4]
100981                   D       -       0xfffffe0058439300  [zvol_tq-0_5]
100982                   D       -       0xfffffe0058439300  [zvol_tq-0_6]
100983                   D       -       0xfffffe0058439300  [zvol_tq-0_7]
100984                   D       -       0xfffffe0058439300  [zvol_tq-0_8]
100985                   D       -       0xfffffe0058439300  [zvol_tq-0_9]
100986                   D       -       0xfffffe0058439300  [zvol_tq-0_10]
100987                   D       -       0xfffffe0058439300  [zvol_tq-0_11]
100988                   D       -       0xfffffe0058439300  [zvol_tq-0_12]
100989                   D       -       0xfffffe0058439300  [zvol_tq-0_13]
100990                   D       -       0xfffffe0058439300  [zvol_tq-0_14]
100991                   D       -       0xfffffe0058439300  [zvol_tq-0_15]
100992                   D       -       0xfffffe0058439300  [zvol_tq-0_16]
100993                   D       -       0xfffffe0058439300  [zvol_tq-0_17]
100994                   D       -       0xfffffe0058439300  [zvol_tq-0_18]
100995                   D       -       0xfffffe0058439300  [zvol_tq-0_19]
100996                   D       -       0xfffffe0058439300  [zvol_tq-0_20]
100997                   D       -       0xfffffe0058439300  [zvol_tq-0_21]
100998                   D       -       0xfffffe0058439300  [zvol_tq-0_22]
100999                   D       -       0xfffffe0058439300  [zvol_tq-0_23]
101000                   D       -       0xfffffe0058439300  [zvol_tq-0_24]
101001                   D       -       0xfffffe0058439300  [zvol_tq-0_25]
101002                   D       -       0xfffffe0058439300  [zvol_tq-0_26]
101003                   D       -       0xfffffe0058439300  [zvol_tq-0_27]
101004                   D       -       0xfffffe0058439300  [zvol_tq-0_28]
101005                   D       -       0xfffffe0058439300  [zvol_tq-0_29]
101006                   D       -       0xfffffe0058439300  [zvol_tq-0_30]
101007                   D       -       0xfffffe0058439300  [zvol_tq-0_31]
101009                   D       -       0xfffffe005843ca00  [arc_prune]
101010                   D       -       0xfffffe005843c800  [arc_flush_0]
101011                   D       -       0xfffffe005843c800  [arc_flush_1]
101020                   D       -       0xfffffe005843c900  [dbu_evict]
101046                   D       -       0xfffffe006e454900  [z_vdev_file_0]
101047                   D       -       0xfffffe006e454900  [z_vdev_file_1]
101048                   D       -       0xfffffe006e454900  [z_vdev_file_2]
101049                   D       -       0xfffffe006e454900  [z_vdev_file_3]
101050                   D       -       0xfffffe006e454900  [z_vdev_file_4]
101051                   D       -       0xfffffe006e454900  [z_vdev_file_5]
101052                   D       -       0xfffffe006e454900  [z_vdev_file_6]
101053                   D       -       0xfffffe006e454900  [z_vdev_file_7]
101054                   D       -       0xfffffe006e454900  [z_vdev_file_8]
101055                   D       -       0xfffffe006e454900  [z_vdev_file_9]
101056                   D       -       0xfffffe006e454900  [z_vdev_file_10]
101057                   D       -       0xfffffe006e454900  [z_vdev_file_11]
101058                   D       -       0xfffffe006e454900  [z_vdev_file_12]
101059                   D       -       0xfffffe006e454900  [z_vdev_file_13]
101060                   D       -       0xfffffe006e454900  [z_vdev_file_14]
101061                   D       -       0xfffffe006e454900  [z_vdev_file_15]
101075                   D       -       0xfffffe0077dd9800  [zfsvfs]
  922     1   764     0  Z                                   syz-executor
db> show all locks
Process 1482 (syz-executor) thread 0xfffffe0080a1e780 (101262)
exclusive sleep mutex pmap (pmap) r = 0 (0xfffffe0080a2c358) locked @ /syzkaller/managers/main/kernel/sys/amd64/amd64/pmap.c:7252
shared sx vm map (user) (vm map (user)) r = 0 (0xfffffe0080a2c2a8) locked @ /syzkaller/managers/main/kernel/sys/vm/vm_map.c:4993
Process 1481 (syz-executor) thread 0xfffffe00541f1780 (101260)
exclusive rw vmobject (vmobject) r = 0 (0xfffffe0080a341f0) locked @ /syzkaller/managers/main/kernel/sys/vm/vm_fault.c:358
shared sx vm map (user) (vm map (user)) r = 0 (0xfffffe0080a2c4f0) locked @ /syzkaller/managers/main/kernel/sys/vm/vm_map.c:4993
Process 1367 (ifconfig) thread 0xfffffe00541b0780 (100886)
exclusive sx ifnet_detach_sx (ifnet_detach_sx) r = 0 (0xffffffff83cba780) locked @ /syzkaller/managers/main/kernel/sys/net/if.c:3014
Process 12 (intr) thread 0xfffffe0007821780 (100033)
exclusive sleep mutex sctp-tcb (tcb) r = 0 (0xfffffe0077b058b0) locked @ /syzkaller/managers/main/kernel/sys/netinet/sctp_pcb.c:1046
db> show malloc
              Type        InUse        MemUse     Requests
           pf_hash            6        12804K            6
            linker          419        12302K          735
          tcp_hpts            7         4801K            7
         sctp_stro            5         4619K           12
            devbuf         4188         4324K         4221
           solaris         2246         3597K         4472
         sysctloid        45261         2659K        45373
          filedesc          279         2233K         1227
             vtbuf           24         1968K           46
              kobj          331         1324K          558
            newblk           33         1032K         3343
          vfscache            3         1025K            3
           subproc          408          864K         1699
               pcb           80          715K          499
          inodedep           29          523K          971
         ufs_quota            1          512K            1
          vfs_hash            1          512K            1
           callout            2          512K            2
              intr            4          472K            4
              vmem            5          276K            9
         vnet_data            2          224K            2
          acpitask            1          224K            1
            KTRACE          102          201K       100268
            acpica         1674          184K        54426
        md_sectors           36          144K           36
           tidhash            3          141K            3
           pagedep           14          132K          546
        tfo_ccache            1          128K            1
          IP reass            1          128K            1
            DEVFS1          123          123K          152
               sem            4          106K            4
        gtaskqueue           18           98K           18
           kdtrace          526           95K         2750
              umtx          688           86K          688
               bus          997           82K         5063
          mtx_pool            3           74K            3
           filemon            9           72K           23
          syncache            1           68K            1
     NFSD srvcache            3           68K            3
            module          526           66K          529
       ddb_capture            1           64K            1
              temp           59           40K         2575
               LRO           38           39K           40
               shm            3           36K           19
            DEVFS3          142           36K          152
         hostcache            1           32K            1
               msg            4           30K            4
          routetbl          411           30K          982
           md_disk           43           30K           45
            ifaddr          118           29K          122
            kbdmux            6           28K            6
           lltable           88           27K          104
             ifnet           13           25K           14
       ether_multi          294           24K          369
        DEVFS_RULE           56           20K           56
        kstat_data           19           19K           19
              GEOM          110           18K          700
            kqueue          207           17K         2157
         ufs_mount            4           17K            5
              proc            3           17K            3
               tty           16           16K           16
         in6_multi          115           16K          126
           ithread           90           15K           90
            bus-sc           34           15K         1647
      eventhandler          166           14K          166
           pwddesc          195           13K         1534
           devstat            6           13K            6
             shmfd           10           12K           19
            plimit           31           12K          686
              kenv           95           12K           95
         sctp_atcl           28           11K          175
         taskqueue           96           11K          153
         CAM queue            5           11K         1528
              rman           82           10K          437
              cred           37           10K          307
               rpc            8            9K            8
            DEVFSP          137            9K          231
         bmsafemap            2            9K          888
              UART           12            9K           12
              ksem            1            8K            2
       pfs_vncache            1            8K            1
     audit_evclass          239            8K          301
            CC Mem           53            7K          297
          pf_ifnet           19            7K           42
          kcovinfo           99            7K          108
               UMA          343            7K          343
            sglist            6            7K            6
           CAM DEV            3            6K          510
         pfs_nodes           22            6K           22
               BPF           19            5K           44
       ufs_dirhash           24            5K           36
         proc-args          205            5K         2711
                vt           11            5K           11
          pf_table            2            4K            3
           memdesc            1            4K            1
               MCA           32            4K           32
             evdev            4            4K            4
               tun           10            4K           10
            ip6ndp           23            4K           26
           acpisem           28            4K           28
       inpcbpolicy           98            4K          807
          sctp_ifa           24            3K           26
            dirrem           12            3K          792
            crypto           10            3K           83
          in_multi           12            3K           22
             lockf           28            3K          286
          terminal           11            3K           11
           uidinfo            5            3K           21
           acpidev           20            3K           20
               osd          115            3K          378
             hhook            8            3K           10
             clone            9            3K            9
           session           18            3K           69
        local_apic            1            2K            1
           io_apic            1            2K            1
         ipsec-saq            2            2K            2
         sctp_atky           37            2K          190
             selfd           28            2K       187397
            Unitno           29            2K          928
           CAM XPT           22            2K          543
          freefile           12            2K          608
               mld           12            2K           12
              igmp           12            2K           12
             nhops            6            2K           10
              pfil           14            2K           14
       vnodemarker            3            2K           73
         toponodes            6            2K            6
          sctp_ifn           11            2K           26
       ipsecpolicy            2            2K            2
         sctp_timw            5            2K            5
               msi            9            2K            9
         newdirblk            9            2K          493
           netlink            2            2K          211
         sctp_stri            2            1K            2
           softdep            1            1K            1
            sahead            1            1K            1
          secasvar            1            1K            1
      NFSD session            1            1K            1
             mount           19            1K          977
        CAM periph            4            1K          271
         cryptodev           13            1K          172
             ipsec            3            1K            3
             mkdir            6            1K          986
           eventfd            6            1K           10
            isadev            6            1K            6
          pci_link           10            1K           10
 encap_export_host           12            1K           12
            ip6opt            3            1K           44
          freework            3            1K         1039
         sctp_aadr            8            1K           16
          freeblks            2            1K          513
            select            4            1K           65
              cdev            2            1K            2
       lkpikmalloc            8            1K            9
         sctp_athm           28            1K          175
            diradd            3            1K          829
    chacha20random            1            1K            1
            biobuf            1            1K            1
filedesc_to_leader            6            1K           15
              ktls            4            1K           39
            vnodes            2            1K           15
          indirdep            1            1K          519
          ktls_ocf            2            1K            9
       ip_moptions            4            1K           18
      NFSD lckfile            1            1K            1
     NFSD V4client            1            1K            1
             DEVFS            9            1K           10
           CAM SIM            2            1K            2
            prison            8            1K            8
            feeder            7            1K            7
             taskq            2            1K            2
           tcpfunc            3            1K            3
        ip_msource            3            1K           14
        loginclass            3            1K            7
             sigio            3            1K           10
          sctp_map           10            1K           24
           pf_rule            1            1K            3
          nexusdev            8            1K            8
            apmdev            1            1K            1
          atkbddev            2            1K            2
       ip6_msource            2            1K           14
           VN POLL            1            1K            7
               aio            4            1K            9
          pmchooks            1            1K            1
          CAM path            4            1K         1034
     CAM dev queue            2            1K            2
 CAM I/O Scheduler            1            1K            1
        in_mfilter            2            1K           27
            soname            5            1K         3715
          sctp_vrf            1            1K            1
              vnet            1            1K            1
              accf            1            1K            1
               pmc            1            1K            1
           entropy            2            1K           41
          acpiintr            1            1K            1
              cpus            2            1K            2
      ip6_moptions            1            1K           12
    vnet_data_free            1            1K            1
           Per-cpu            1            1K            1
          p1003.1b            1            1K            1
         sfs_nodes            0            0K            0
        zones_data            0            0K            0
            mqdata            0            0K            0
      tcp_pcm_rack            0            0K            4
       tcp_do_rack            0            0K            0
      tcp_fsb_rack            0            0K            8
           pf_altq            0            0K            0
           pf_osfp            0            0K            0
     pf_krule_item            0            0K            0
           pf_temp            0            0K           32
            ipcomp            0            0K            0
               esp            0            0K            0
                ah            0            0K            0
        sctp_mcore            0            0K            0
        sctp_socko            0            0K          112
         sctp_iter            0            0K           24
         sctp_mvrf            0            0K            0
         sctp_cpal            0            0K            0
         sctp_cmsg            0            0K            0
         sctp_stre            0            0K            0
         sctp_athi            0            0K            0
         sctp_a_it            0            0K           24
        madt_table            0            0K            2
          smartpqi            0            0K            0
               ixl            0            0K            0
        ice-resmgr            0            0K            0
         ice-osdep            0            0K            0
               ice            0            0K            0
              iavf            0            0K            0
             axgbe            0            0K            0
       fpukern_ctx            0            0K            0
          xen_intr            0            0K            0
           xen_hvm            0            0K            0
         legacydrv            0            0K            0
      NMI handlers            0            0K            0
            bounce            0            0K            0
            busdma            0            0K            0
            qpidrv            0            0K            0
      dmar_idpgtbl            0            0K            0
          dmar_dom            0            0K            0
          dmar_ctx            0            0K            0
      amdiommu_dom            0            0K            0
      amdiommu_ctx            0            0K            0
              isci            0            0K            0
      iommu_dmamap            0            0K            0
     hyperv_socket            0            0K            0
           bxe_ilt            0            0K            0
        aesni_data            0            0K            1
            xenbus            0            0K            0
     vm_fictitious            0            0K            0
           UMAHash            0            0K            0
         vm_pgdata            0            0K            0
           jblocks            0            0K            0
          savedino            0            0K          413
          sentinel            0            0K            0
            jfsync            0            0K            0
            jtrunc            0            0K            0
             sbdep            0            0K           41
           jsegdep            0            0K            0
              jseg            0            0K            0
         jfreefrag            0            0K            0
          jfreeblk            0            0K            0
           jnewblk            0            0K            0
            jmvref            0            0K            0
           jremref            0            0K            0
           jaddref            0            0K            0
           freedep            0            0K            0
          freefrag            0            0K          175
        allocindir            0            0K            0
       allocdirect            0            0K            0
          ufs_trim            0            0K            0
           mactemp            0            0K            0
     audit_trigger            0            0K            0
 audit_pipe_presel            0            0K            0
     audit_pipeent            0            0K            0
        audit_pipe            0            0K            0
      audit_evname            0            0K            0
         audit_bsm            0            0K            0
      audit_gidset            0            0K            0
        audit_text            0            0K            0
        audit_path            0            0K            0
        audit_data            0            0K            0
        audit_cred            0            0K            0
        MLX5EEPROM            0            0K            0
        MLX5EEPROM            0            0K            0
        MLX5EEPROM            0            0K            0
        MLX5EEPROM            0            0K            0
        MLX5EEPROM            0            0K            0
      MLX5E_TLS_RX            0            0K            0
        MLX5EEPROM            0            0K            0
         MLX5E_TLS            0            0K            0
        MLX5EEPROM            0            0K            0
        MLX5EEPROM            0            0K            0
        MLX5EEPROM            0            0K            0
            MLX5EN            0            0K            0
        MLX5EEPROM            0            0K            0
        MLX5EEPROM            0            0K            0
        MLX5EEPROM            0            0K            0
        MLX5EEPROM            0            0K            0
        MLX5EEPROM            0            0K            0
        MLX5EEPROM            0            0K            0
        MLX5EEPROM            0            0K            0
          MLX5DUMP            0            0K            0
        MLX5EEPROM            0            0K            0
        MLX5EEPROM            0            0K            0
        MLX5EEPROM            0            0K            0
        MLX5EEPROM            0            0K            0
       simple_attr            0            0K            0
          seq_file            0            0K            0
           lkpiskb            0            0K            0
             radix            0            0K            0
               idr            0            0K            0
          lkpindev            0            0K            0
           lkpimhi            0            0K            0
            lkpifw            0            0K            0
         lkpi80211            0            0K            0
               NLM            0            0K            0
    ipsec-spdcache            0            0K            0
         ipsec-reg            0            0K            0
        ipsec-misc            0            0K            0
      ipsecrequest            0            0K            0
       in6_mfilter            0            0K           21
             frag6            0            0K            8
            tcplog            0            0K            0
        tcp_hwpace            0            0K            0
              ipid            0            0K            0
         80211scan            0            0K            0
      80211ratectl            0            0K            0
        80211power            0            0K            0
       80211nodeie            0            0K            0
         80211node            0            0K            0
      80211mesh_gt            0            0K            0
      80211mesh_rt            0            0K            0
         80211perr            0            0K            0
         80211prep            0            0K            0
         80211preq            0            0K            0
          80211dfs            0            0K            0
       80211crypto            0            0K            0
          80211vap            0            0K            0
             iflib            0            0K            0
              vlan            0            0K            0
               gif            0            0K            0
           ifdescr            0            0K            0
              zlib            0            0K           24
           fadvise            0            0K            1
            statfs            0            0K          201
     namei_tracker            0            0K            5
       export_host            0            0K            0
        cl_savebuf            0            0K          103
               lio            0            0K           24
               acl            0            0K            0
          mbuf_tag            0            0K            0
               pts            0            0K            0
           timerfd            0            0K            0
          procdesc            0            0K           10
               iov            0            0K        26656
          ioctlops            0            0K          173
           Witness            0            0K            0
             stack            0            0K            0
              sbuf            0            0K          468
          firmware            0            0K            0
        compressor            0            0K            0
              SWAP            0            0K            0
         sysctltmp            0            0K          671
            sysctl            0            0K            3
              ekcd            0            0K            0
            dumper            0            0K            0
          sendfile            0            0K           58
              rctl            0            0K            0
             cache            0            0K            0
      prison_racct            0            0K            0
       Fail Points            0            0K            0
          filecaps            0            0K           81
               pwd            0            0K            0
       tty console            0            0K            0
         boottrace            0            0K            0
        isofs_node            0            0K            0
       isofs_mount            0            0K            0
     tr_raid5_data            0            0K            0
    tr_raid1e_data            0            0K            0
     tr_raid1_data            0            0K            0
     tr_raid0_data            0            0K            0
    tr_concat_data            0            0K            0
       md_sii_data            0            0K            0
   md_promise_data            0            0K            0
    md_nvidia_data            0            0K            0
   md_jmicron_data            0            0K            0
     md_intel_data            0            0K            0
       md_ddf_data            0            0K            0
         raid_data            0            0K          114
     geom_flashmap            0            0K            0
         tmpfs dir            0            0K            0
        tmpfs name            0            0K            0
       tmpfs mount            0            0K            0
     tmpfs extattr            0            0K            0
           NFS FHA            0            0K            0
         newnfsmnt            0            0K            0
  newnfsclient_req            0            0K            0
   NFSCL layrecall            0            0K            0
     NFSCL session            0            0K            0
     NFSCL sockreq            0            0K            0
     NFSCL devinfo            0            0K            0
     NFSCL flayout            0            0K            0
      NFSCL layout            0            0K            0
     NFSD rollback            0            0K            0
      NFSCL diroff            0            0K            0
        NEWNFSnode            0            0K            0
         NFSCL lck            0            0K            0
      NFSCL lckown            0            0K            0
      NFSCL client            0            0K            0
       NFSCL deleg            0            0K            0
        NFSCL open            0            0K            0
       NFSCL owner            0            0K            0
            NFS fh            0            0K            0
           NFS req            0            0K            0
     NFSD usrgroup            0            0K            0
       NFSD string            0            0K            0
       NFSD V4lock            0            0K            0
      NFSD V4state            0            0K            0
       msdosfs_fat            0            0K            0
     msdosfs_mount            0            0K            0
      msdosfs_node            0            0K            0
            DEVFS4            0            0K            0
            DEVFS2            0            0K            0
            gntdev            0            0K            0
       privcmd_dev            0            0K            0
        evtchn_dev            0            0K            0
          xenstore            0            0K            0
               xnb            0            0K            0
          xen_acpi            0            0K            0
              xbbd            0            0K            0
               xbd            0            0K            0
           Balloon            0            0K            0
          sysmouse            0            0K            0
            vtfont            0            0K            0
            pvscsi            0            0K            0
            USBdev            0            0K            0
               USB            0            0K            0
            twsbuf            0            0K            0
       tcp_log_dev            0            0K            6
      midi buffers            0            0K            0
             mixer            0            0K            0
              ac97            0            0K            0
             hdacc            0            0K            0
              hdac            0            0K            0
              hdaa            0            0K            0
       SIIS driver            0            0K            0
               PUC            0            0K            0
          ppbusdev            0            0K            0
            sr_iov            0            0K            0
               OCS            0            0K            0
               OCS            0            0K            0
              nvme            0            0K            0
               nvd            0            0K            0
            netmap            0            0K            0
            mwldev            0            0K            0
        MVS driver            0            0K            0
         mpi3mrbuf            0            0K            0
          mrsasbuf            0            0K            0
          mpt_user            0            0K            0
          mps_user            0            0K            0
            MPSSAS            0            0K            0
               mps            0            0K            0
          mpr_user            0            0K            0
            MPRSAS            0            0K            0
               mpr            0            0K            0
            mfibuf            0            0K            0
           malodev            0            0K            0
               LED            0            0K            0
          ix_sriov            0            0K            0
                ix            0            0K            0
            ipsbuf            0            0K            0
         ciss_data            0            0K            0
         BACKLIGHT            0            0K            0
           ath_hal            0            0K            0
            athdev            0            0K            0
           ata_pci            0            0K            0
           ata_dma            0            0K            0
       ata_generic            0            0K            0
       AHCI driver            0            0K            0
               agp            0            0K            0
           acpipwr            0            0K            0
         acpi_perf            0            0K            0
         acpicmbat            0            0K            0
        aacraidcam            0            0K            0
       aacraid_buf            0            0K            0
            aaccam            0            0K            0
            aacbuf            0            0K            0
              zstd            0            0K            0
            XZ_DEC            0            0K            0
            nvlist            0            0K          702
          SCSI ENC            0            0K            0
           SCSI sa            0            0K            0
         scsi_pass            0            0K            0
           scsi_da            0            0K           70
            ata_da            0            0K            0
           scsi_ch            0            0K            0
           scsi_cd            0            0K            0
           nvme_da            0            0K            0
           CAM CCB            0            0K          523
     CAM ccb queue            0            0K            0
db> show uma
              Zone   Size    Used    Free    Requests  Sleeps  Bucket  Total Mem    XFree
   mbuf_jumbo_page   4096    8330    1068       16032       0     254   38494208        0
           tcp_log    416    5452    4970       30164       0     254    4335552        0
        RADIX NODE    152   17322     665       60553       0      62    2734024        0
              mbuf    256    9098     564       33279       0     254    2473472        0
      malloc-16384  16384     140       2         798       0       1    2326528        0
       malloc-4096   4096     529       3        2064       0       2    2179072        0
        malloc-128    128   14828     176       15364       0     126    1920512        0
          BUF TRIE    152     389   11415        2944       0      62    1794208        0
        malloc-384    384    4187     103        5155       0      30    1647360        0
       UMA Slabs 0    112   11441       1       11441       0     126    1281504        0
         vmem btag     56   21514      53       21514       0     254    1207752        0
      malloc-65536  65536      13       5         115       0       1    1179648        0
         sctp_asoc   2256       5     505          12       0     254    1150560        0
         malloc-64     64    1057   16772      190694       0     254    1141056        0
zio_buf_comb_1048576 1048576       0       1          15       0       1    1048576        0
      mbuf_cluster   2048     508       0         508       0     254    1040384        0
         FFS inode   1168     678      29        1312       0       8     825776        0
        malloc-256    256    2668     122        7188       0      62     714240        0
         VM OBJECT    248    2572     100       21764       0      62     662656        0
            THREAD   1872     329      15        1262       0       8     643968        0
           sctp_ep   1152      21     490         160       0     254     588672        0
               md1  32768      16       0          16       0       1     524288        0
               md0  32768      16       0          16       0       1     524288        0
          lkpicurr    168       2    3118           2       0      62     524160        0
            socket   1024     140     368        2472       0     254     520192        0
         MAP ENTRY     96    5150     268       75557       0     126     520128        0
              pbuf   2624       0     198           0       0       2     519552        0
        256 Bucket   2048     239      11        1715       0       8     512000        0
        sctp_raddr    736      14     503          24       0     254     380512        0
             VNODE    440     722      61        1359       0      30     344520        0
         malloc-64     64    4836     519        4846       0     254     342720        0
      malloc-32768  32768       3       7         433       0       1     327680        0
       malloc-2048   2048     127      33         749       0       8     327680        0
     FPU_save_area    832     331      38        1765       0      16     307008        0
         malloc-16     16   18489     511       18644       0     254     304000        0
              PROC   1376     195      14        1486       0       8     287584        0
         malloc-32     32    7224     462        7239       0     254     245952        0
         UMA Zones    768     315       4         315       0      16     244992        0
            DEVCTL   1024      77     143         202       0       0     225280        0
         filedesc0   1072     195      15        1534       0       8     225120        0
       malloc-4096   4096      49       3         149       0       2     212992        0
      malloc-65536  65536       3       0           3       0       1     196608        0
        malloc-128    128    1400     119        3400       0     126     194432        0
        malloc-128    128    1209     310       27631       0     126     194432        0
       FFS2 dinode    256     678      72        1311       0      62     192000        0
       malloc-1024   1024     134      42        8046       0      16     180224        0
            lkpimm     56       1    3095           1       0     254     173376        0
             unpcb    320      21     495        1407       0     254     165120        0
      malloc-32768  32768       0       5          18       0       1     163840        0
       S VFS Cache    104    1072     332        1907       0     126     146016        0
zio_buf_comb_131072 131072       0       1           1       0       1     131072        0
      malloc-65536  65536       1       1           2       0       1     131072        0
      malloc-65536  65536       0       2         110       0       1     131072        0
      malloc-32768  32768       2       2         122       0       1     131072        0
      malloc-16384  16384       8       0           9       0       1     131072        0
       mbuf_packet    256       6     502        2174       0     254     130048        0
         tcp_inpcb   1304      53      43         295       0       8     125184        0
          ksiginfo    112     188     856         630       0     126     116928        0
          UMA Kegs    384     301       2         301       0      30     116352        0
        malloc-384    384     263      37         264       0      30     115200        0
       malloc-8192   8192      13       1          22       0       1     114688        0
           VMSPACE    584     159      23        1437       0      16     106288        0
       malloc-2048   2048      17      31        1222       0       8      98304        0
        malloc-256    256     225     150        2856       0      62      96000        0
       malloc-8192   8192      10       1          24       0       1      90112        0
       malloc-4096   4096      18       4         518       0       2      90112        0
        128 Bucket   1024      54      29         340       0      16      84992        0
    ertt_txseginfo     40       4    2117        5179       0     254      84840        0
       tcp_bbr_map    128       0     651         435       0     126      83328        0
        malloc-128    128     457     194        5300       0     126      83328        0
         64 Bucket    512      99      61        6728       0      30      81920        0
        malloc-256    256     178     137        2154       0      62      80640        0
        sctp_chunk    152      10     510          12       0     254      79040        0
             g_bio    408       0     180       15826       0      30      73440        0
         malloc-64     64     620     451        3410       0     254      68544        0
         malloc-64     64     664     407       25592       0     254      68544        0
               md4      8    8192     192        8192       0     254      67072        0
               md3      8    8192     192        8192       0     254      67072        0
      malloc-65536  65536       1       0           1       0       1      65536        0
      malloc-32768  32768       2       0           2       0       1      65536        0
       malloc-1024   1024      20      44        1776       0      16      65536        0
       malloc-1024   1024      38      26        2186       0      16      65536        0
         32 Bucket    256      90     165         930       0      62      65280        0
         udp_inpcb    408      17     136         370       0      30      62424        0
sctp_stream_msg_out    112       0     540           5       0     254      60480        0
       malloc-8192   8192       5       2         103       0       1      57344        0
            pcpu-8      8    5996     660        6534       0     254      53248        0
         TURNSTILE    136     345      33         345       0      62      51408        0
           ttyoutq    256      72     123         448       0      62      49920        0
        malloc-256    256       1     194         414       0      62      49920        0
        malloc-256    256      18     177        1471       0      62      49920        0
zio_data_buf_16384  16384       0       3           9       0       1      49152        0
           DIRHASH   1024      34      14          42       0      16      49152        0
             NAMEI   1024       0      48       18841       0      16      49152        0
       malloc-8192   8192       3       3          71       0       1      49152        0
       malloc-4096   4096       7       5          32       0       2      49152        0
       malloc-2048   2048       4      20          54       0       8      49152        0
       malloc-2048   2048      19       5          46       0       8      49152        0
           pcpu-64     64     501     267         501       0     254      49152        0
        malloc-384    384      76      44         102       0      30      46080        0
             ripcb    376      22      98         112       0      30      45120        0
          syncache    168       0     264           4       0     254      44352        0
             Files     80     416     134       11166       0     126      44000        0
       malloc-4096   4096       3       7         447       0       2      40960        0
              pipe    736      29      26         413       0      16      40480        0
            ttyinq    160     135     115         840       0      62      40000        0
            cpuset    200     101      91         356       0      62      38400        0
            da_ccb    544       0      70        4126       0      16      38080        0
         hostcache     64       3     564           3       0     254      36288        0
         malloc-64     64      35     532       26902       0     254      36288        0
         malloc-64     64     136     431         159       0     254      36288        0
         malloc-64     64      12     555         131       0     254      36288        0
         malloc-64     64       9     558          38       0     254      36288        0
         16 Bucket    144      61     191         549       0      62      36288        0
        malloc-128    128      53     226         439       0     126      35712        0
        malloc-128    128      44     235          62       0     126      35712        0
        malloc-128    128      12     267         257       0     126      35712        0
        malloc-128    128      94     185         108       0     126      35712        0
      ktls_session    256       2     133          10       0      62      34560        0
     routing nhops    256      47      88          91       0      62      34560        0
        malloc-384    384      30      60         661       0      30      34560        0
        malloc-256    256      58      77        1123       0      62      34560        0
        malloc-256    256      12     123         899       0      62      34560        0
        malloc-256    256      53      82         155       0      62      34560        0
        SLEEPQUEUE     88     345      39         345       0     126      33792        0
     zio_buf_16384  16384       0       2          10       0       1      32768        0
       malloc-8192   8192       3       1           4       0       1      32768        0
       malloc-4096   4096       2       6          20       0       2      32768        0
       malloc-2048   2048      12       4          12       0       8      32768        0
       malloc-2048   2048       7       9          22       0       8      32768        0
       malloc-2048   2048       2      14          36       0       8      32768        0
       malloc-1024   1024       3      29          86       0      16      32768        0
       malloc-1024   1024      13      19          23       0      16      32768        0
       malloc-1024   1024       3      29          17       0      16      32768        0
        malloc-512    512       1      63         154       0      30      32768        0
        malloc-512    512       9      55         224       0      30      32768        0
        malloc-512    512       2      62           8       0      30      32768        0
        malloc-512    512      11      53          98       0      30      32768        0
        malloc-512    512       8      56          58       0      30      32768        0
        malloc-512    512      10      54          53       0      30      32768        0
               PWD     40     111     697         496       0     254      32320        0
       tcp_bbr_pcb    896       1      35          14       0      16      32256        0
              PGRP    120      29     235          81       0     126      31680        0
            clpbuf   2624       0      12         206       0       4      31488        0
        sctp_laddr     48      30     558          82       0     254      28224        0
          rl_entry     48      16     572          31       0     254      28224        0
         malloc-32     32     376     506        1531       0     254      28224        0
          4 Bucket     48       7     581          18       0     254      28224        0
     udplite_inpcb    408       6      57          30       0      30      25704        0
       malloc-8192   8192       1       2          25       0       1      24576        0
       malloc-4096   4096       3       3         204       0       2      24576        0
           rtentry    168      50      94          91       0      62      24192        0
          8 Bucket     80      59     241         526       0     126      24000        0
            itimer    352       1      65          21       0      30      23232        0
        malloc-384    384       0      60          31       0      30      23040        0
        malloc-384    384      11      49          11       0      30      23040        0
        malloc-384    384      32      28         687       0      30      23040        0
        malloc-384    384       6      54          40       0      30      23040        0
         domainset     40       1     566         337       0     254      22680        0
       Mountpoints   2816       2       6          10       0       4      22528        0
              ertt     72      53     227         295       0     126      20160        0
         malloc-32     32      78     552         331       0     254      20160        0
         malloc-32     32      81     549         991       0     254      20160        0
         malloc-32     32     199     431        1841       0     254      20160        0
         malloc-32     32     316     314       44052       0     254      20160        0
         malloc-32     32     371     259         375       0     254      20160        0
         malloc-32     32      23     607          77       0     254      20160        0
          2 Bucket     32      72     558         707       0     254      20160        0
             KNOTE    160       5     120         497       0      62      20000        0
      tcp_rack_map    128       0     155           6       0     126      19840        0
           cryptop    280       0      70          16       0      30      19600        0
       L VFS Cache    320       0      60          62       0      30      19200        0
            AIOLIO    272       0      70          23       0      30      19040        0
              vmem   1856       2       7           2       0       8      16704        0
 epoch_record pcpu    256       4      60           4       0      62      16384        0
      malloc-16384  16384       1       0           1       0       1      16384        0
       malloc-8192   8192       2       0           2       0       1      16384        0
       malloc-2048   2048       1       7           1       0       8      16384        0
       malloc-1024   1024       5      11           5       0      16      16384        0
       malloc-1024   1024       4      12           4       0      16      16384        0
        malloc-512    512       1      31           1       0      30      16384        0
           SMR CPU     32       8     503           8       0     254      16352        0
               ipq     56       0     288           2       0     254      16128        0
   sctp_asconf_ack     48       1     335           6       0     254      16128        0
      vtnet_tx_hdr     24       0     668        4622       0     254      16032        0
         malloc-16     16     606     394        4075       0     254      16000        0
   tcp_log_id_node    120       0     132           1       0     126      15840        0
               AIO    208       5      71          83       0      62      15808        0
              kenv    258      17      43        1074       0      30      15480        0
      tcp_rack_pcb   1088       0      14           4       0       8      15232        0
            mqnode    416       3      33           3       0      30      14976        0
        SMR SHARED     24       8     503           8       0     254      12264        0
arc_buf_hdr_t_full    368       4      29           4       0      30      12144        0
 tcp_log_id_bucket    176       0      69           1       0      62      12144        0
         malloc-16     16     202     548        2849       0     254      12000        0
         malloc-16     16      38     712          94       0     254      12000        0
         malloc-16     16     143     607       52028       0     254      12000        0
         malloc-16     16      25     725          30       0     254      12000        0
         malloc-16     16      28     722         190       0     254      12000        0
            splice    184       0      63           2       0      62      11592        0
             AIOCB    552       0      21         105       0      16      11592        0
tfo_ccache_entries     80       1     127           1       0     126      10240        0
       malloc-4096   4096       0       2           1       0       2       8192        0
           pcpu-16     16       8     504           8       0     254       8192        0
         malloc-16     16      15     485          15       0     254       8000        0
       UMA Slabs 1    176      12      10          12       0      62       3872        0
        KMAP ENTRY     96      18      21          38       0       0       3744        0
               tfo      4       0     493           1       0     254       1972        0
   zfs_znode_cache    464       0       0           0       0      30          0        0
zap_attr_long_cache   1056       0       0           0       0       8          0        0
     zap_name_long   1096       0       0           0       0       8          0        0
    zap_attr_cache    288       0       0           0       0      30          0        0
          zap_name    328       0       0           0       0      30          0        0
       sio_cache_2    168       0       0           0       0      62          0        0
       sio_cache_1    152       0       0           0       0      62          0        0
       sio_cache_0    136       0       0           0       0      62          0        0
     zil_zcw_cache     80       0       0           0       0     126          0        0
     zil_lwb_cache    376       0       0           0       0      30          0        0
dbuf_dirty_record_t    368       0       0           0       0      30          0        0
    dmu_buf_impl_t    376       0       0           0       0      30          0        0
         arc_buf_t     32       0       0           0       0     254          0        0
arc_buf_hdr_t_l2only     96       0       0           0       0     126          0        0
           dnode_t    968       0       0           0       0      16          0        0
          sa_cache    272       0       0           0       0      30          0        0
         abd_chunk   4096       0       0           0       0       2          0        0
zio_buf_comb_16777216 16777216       0       0           0       0       1          0        0
zio_buf_comb_12582912 12582912       0       0           0       0       1          0        0
zio_buf_comb_8388608 8388608       0       0           0       0       1          0        0
zio_buf_comb_6291456 6291456       0       0           0       0       1          0        0
zio_buf_comb_4194304 4194304       0       0           0       0       1          0        0
zio_buf_comb_3145728 3145728       0       0           0       0       1          0        0
zio_buf_comb_2097152 2097152       0       0           0       0       1          0        0
zio_buf_comb_1572864 1572864       0       0           0       0       1          0        0
zio_buf_comb_786432 786432       0       0           0       0       1          0        0
zio_buf_comb_524288 524288       0       0           0       0       1          0        0
zio_buf_comb_393216 393216       0       0           0       0       1          0        0
zio_buf_comb_262144 262144       0       0           0       0       1          0        0
zio_buf_comb_196608 196608       0       0           0       0       1          0        0
zio_buf_comb_98304  98304       0       0           0       0       1          0        0
zio_buf_comb_65536  65536       0       0           0       0       1          0        0
zio_buf_comb_49152  49152       0       0           0       0       1          0        0
zio_buf_comb_32768  32768       0       0           0       0       1          0        0
zio_buf_comb_24576  24576       0       0           0       0       1          0        0
zio_data_buf_12288  12288       0       0           0       0       1          0        0
     zio_buf_12288  12288       0       0           0       0       1          0        0
 zio_data_buf_8192   8192       0       0           0       0       1          0        0
      zio_buf_8192   8192       0       0           0       0       1          0        0
 zio_data_buf_6144   6144       0       0           0       0       1          0        0
      zio_buf_6144   6144       0       0           0       0       1          0        0
 zio_data_buf_4096   4096       0       0           0       0       2          0        0
      zio_buf_4096   4096       0       0           0       0       2          0        0
 zio_data_buf_3072   3072       0       0           0       0       4          0        0
      zio_buf_3072   3072       0       0           0       0       4          0        0
 zio_data_buf_2048   2048       0       0           0       0       8          0        0
      zio_buf_2048   2048       0       0           0       0       8          0        0
 zio_data_buf_1536   1536       0       0           0       0       8          0        0
      zio_buf_1536   1536       0       0           0       0       8          0        0
 zio_data_buf_1024   1024       0       0           0       0      16          0        0
      zio_buf_1024   1024       0       0           0       0      16          0        0
  zio_data_buf_512    512       0       0           0       0      30          0        0
       zio_buf_512    512       0       0           0       0      30          0        0
    zio_link_cache     48       0       0           0       0     254          0        0
         zio_cache   1216       0       0           0       0       8          0        0
ddt_log_entry_trad_cache    328       0       0           0       0      30          0        0
ddt_log_entry_flat_cache    144       0       0           0       0      62          0        0
ddt_entry_trad_cache    368       0       0           0       0      30          0        0
ddt_entry_flat_cache    184       0       0           0       0      62          0        0
         ddt_cache  29240       0       0           0       0       1          0        0
   brt_entry_cache    168       0       0           0       0      62          0        0
metaslab_alloc_trace_cache     72       0       0           0       0     126          0        0
zfs_btree_leaf_cache   4096       0       0           0       0       2          0        0
   reference_cache     48       0       0           0       0     254          0        0
        taskq_zone    160       0       0           0       0      62          0        0
       FFS1 dinode    128       0       0           0       0     126          0        0
           ada_ccb    272       0       0           0       0      30          0        0
             swblk    136       0       0           0       0      62          0        0
          swpctrie    152       0       0           0       0      62          0        0
   cdg_qdiffsample     16       0       0           0       0     254          0        0
   pf state scrubs     40       0       0           0       0     254          0        0
   pf frag entries     40       0       0           0       0     254          0        0
  pf fragment node     72       0       0           0       0     126          0        0
          pf frags    232       0       0           0       0      62          0        0
  pf table entries    160       0       0           0       0     254          0        0
pf table entry counters     64       0       0           0       0     254          0        0
   pf UDP mappings    104       0       0           0       0     126          0        0
   pf source nodes    152       0       0           0       0     254          0        0
     pf state keys     88       0       0           0       0     126          0        0
         pf states    384       0       0           0       0       0          0        0
           pf tags    104       0       0           0       0     126          0        0
          pf mtags    184       0       0           0       0      62          0        0
          sackhole     32       0       0           0       0     254          0        0
       sctp_asconf     40       0       0           0       0     254          0        0
        sctp_readq    152       0       0           0       0     254          0        0
          tcpreass     48       0       0           0       0     254          0        0
    IPsec SA lft_c     16       0       0           0       0     254          0        0
        mqnotifier    216       0       0           0       0      62          0        0
            mvdata     64       0       0           0       0     254          0        0
            mqueue    248       0       0           0       0      62          0        0
        TMPFS node    240       0       0           0       0      62          0        0
           NCLNODE    608       0       0           0       0      16          0        0
     LTS VFS Cache    360       0       0           0       0      30          0        0
     STS VFS Cache    144       0       0           0       0      62          0        0
  linux_dma_object     32       0       0           0       0     254          0        0
  linux_dma_pctrie    152       0       0           0       0      62          0        0
   IOMMU_MAP_ENTRY    112       0       0           0       0     126          0        0
            skbuff   1808       0       0           0       0       8          0        0
    mbuf_jumbo_16k  16384       0       0           0       0     254          0        0
     mbuf_jumbo_9k   9216       0       0           0       0     254          0        0
      audit_record   1280       0       0           0       0       8          0        0
        MAC labels     40       0       0           0       0     254          0        0
            vnpbuf   2624       0       0           0       0      16          0        0
           nfspbuf   2624       0       0           0       0       4          0        0
            swwbuf   2624       0       0           0       0       2          0        0
            swrbuf   2624       0       0           0       0       4          0        0
          umtx_shm     88       0       0           0       0     126          0        0
           umtx pi     96       0       0           0       0     126          0        0
rangeset pctrie nodes    152       0       0           0       0      62          0        0
      malloc-65536  65536       0       0           0       0       1          0        0
      malloc-65536  65536       0       0           0       0       1          0        0
      malloc-65536  65536       0       0           0       0       1          0        0
      malloc-32768  32768       0       0           0       0       1          0        0
      malloc-32768  32768       0       0           0       0       1          0        0
      malloc-32768  32768       0       0           0       0       1          0        0
      malloc-32768  32768       0       0           0       0       1          0        0
      malloc-16384  16384       0       0           0       0       1          0        0
      malloc-16384  16384       0       0           0       0       1          0        0
      malloc-16384  16384       0       0           0       0       1          0        0
      malloc-16384  16384       0       0           0       0       1          0        0
      malloc-16384  16384       0       0           0       0       1          0        0
       malloc-8192   8192       0       0           0       0       1          0        0
        malloc-512    512       0       0           0       0      30          0        0
           pcpu-32     32       0       0           0       0     254          0        0
            pcpu-4      4       0       0           0       0     254          0        0
            fakepg     88       0       0           0       0     126          0        0
          UMA Hash    256       0       0           0       0      62          0        0
db> show all tcpcbs/l

Crashes (2):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2025/06/14 05:07 freebsd-src c82662dc7123 0e8da31f console log report ci-freebsd-main panic: /syzkaller/managers/main/kernel/sys/kern/kern_timeout.c:LINE: _callout_stop_safe: Bad link elm ADDR prev->next !=
2025/05/12 11:47 freebsd-src 79e70e12f5c9 77908e5f console log report ci-freebsd-main panic: /syzkaller/managers/main/kernel/sys/kern/kern_timeout.c:LINE: _callout_stop_safe: Bad link elm ADDR prev->next !=
* Struck through repros no longer work on HEAD.