syzbot


Fatal trap NUM: page fault in sctp_notify_stream_reset_tsn

Status: fixed on 2023/02/03 04:36
Reported-by: syzbot+eb888d3a5a6c54413de5@syzkaller.appspotmail.com
Fix commit: 7b2f1a7fe944 sctp: improve delivery of stream reset notifications
First crash: 457d, last: 457d

Sample crash report:
Fatal trap 12: page fault while in kernel mode
cpuid = 0; apic id = 00
fault virtual address	= 0x1dc
fault code		= supervisor read data, page not present
instruction pointer	= 0x20:0xffffffff849bcf4c
stack pointer	        = 0x28:0xfffffe00077fed90
frame pointer	        = 0x28:0xfffffe00077fedd0
code segment		= base 0x0, limit 0xfffff, type 0x1b
			= DPL 0, pres 1, long 1, def32 0, gran 1
processor eflags	= interrupt enabled, resume, IOPL = 0
current process		= 12 (swi1: netisr 0)
rdi:              1dc rsi: fffffe0092b0481b rdx:                0
rcx: fffffe00033eee30  r8: fffff78000000000  r9:      20000000000
rax: fffffe00033eee30 rbx:                0 rbp: fffffe00077fedd0
r10:                0 r11:                0 r12: fffffe0092b04818
r13: fffffe0092d9b8d0 r14: fffffe0092b04800 r15:                4
trap number		= 12
panic: page fault
cpuid = 0
time = 1675335385
KDB: stack backtrace:
db_trace_self_wrapper() at db_trace_self_wrapper+0xc7/frame 0xfffffe00077fe570
kdb_backtrace() at kdb_backtrace+0xd3/frame 0xfffffe00077fe6d0
vpanic() at vpanic+0x254/frame 0xfffffe00077fe7b0
panic() at panic+0xb5/frame 0xfffffe00077fe870
trap_fatal() at trap_fatal+0x7ed/frame 0xfffffe00077fe990
trap_pfault() at trap_pfault+0x182/frame 0xfffffe00077fead0
trap() at trap+0x5e1/frame 0xfffffe00077fecc0
calltrap() at calltrap+0x8/frame 0xfffffe00077fecc0
--- trap 0xc, rip = 0xffffffff849bcf4c, rsp = 0xfffffe00077fed90, rbp = 0xfffffe00077fedd0 ---
sctp_notify_stream_reset_tsn() at sctp_notify_stream_reset_tsn+0x17c/frame 0xfffffe00077fedd0
sctp_handle_stream_reset_response() at sctp_handle_stream_reset_response+0x1431/frame 0xfffffe00077feef0
sctp_handle_stream_reset() at sctp_handle_stream_reset+0xa17/frame 0xfffffe00077ff2f0
sctp_process_control() at sctp_process_control+0x1bf8/frame 0xfffffe00077ff7c0
sctp_common_input_processing() at sctp_common_input_processing+0xb35/frame 0xfffffe00077ffa20
sctp_input_with_port() at sctp_input_with_port+0x57d/frame 0xfffffe00077ffbb0
sctp_input() at sctp_input+0x32/frame 0xfffffe00077ffbd0
ip_input() at ip_input+0x7c5/frame 0xfffffe00077ffcf0
swi_net() at swi_net+0x2ed/frame 0xfffffe00077ffd90
ithread_loop() at ithread_loop+0x4ee/frame 0xfffffe00077ffef0
fork_exit() at fork_exit+0xd0/frame 0xfffffe00077fff30
fork_trampoline() at fork_trampoline+0xe/frame 0xfffffe00077fff30
--- trap 0, rip = 0, rsp = 0, rbp = 0 ---
KDB: enter: panic
[ thread pid 12 tid 100029 ]
Stopped at      kdb_enter+0x6b: movq    $0,0x276a1ca(%rip)
db> 
db> set $lines = 0
db> set $maxwidth = 0
db> show registers
cs                        0x20
ds                        0x3b
es                        0x3b
fs                        0x13
gs                        0x1b
ss                        0x28
rax                       0x12
rcx         0xfffffe00033eee30
rdx         0xdffff7c000000000
rbx                          0
rsp         0xfffffe00077fe6b0
rbp         0xfffffe00077fe6d0
rsi                        0x1
rdi                          0
r8                         0x3
r9                  0xffffffff
r10                          0
r11                          0
r12                          0
r13         0xfffffe0007a9e3a0
r14         0xffffffff82bb76e0  .str.26
r15         0xffffffff82bb76e0  .str.26
rip         0xffffffff817310cb  kdb_enter+0x6b
rflags                    0x46
kdb_enter+0x6b: movq    $0,0x276a1ca(%rip)
db> show proc
Process 12 (intr) at 0xfffffe00541db560:
 state: NORMAL
 uid: 0  gids: 0
 parent: pid 0 at 0xffffffff83e3e8a0
 ABI: null
 flag: 0x10000284  flag2: 0
 reaper: 0xffffffff83e3e8a0 reapsubtree: 12
 sigparent: 20
 vmspace: 0xffffffff83e3f840
   (map 0xffffffff83e3f840)
   (map.pmap 0xffffffff83e3f900)
   (pmap 0xffffffff83e3f970)
 threads: 22
100011                   I                                   [swi5: fast taskq]
100018                   I                                   [swi6: task queue]
100019                   I                                   [swi6: Giant taskq]
100029                   Run     CPU 0                       [swi1: netisr 0]
100032                   I                                   [swi1: hpts]
100033                   I                                   [swi1: hpts]
100046                   I                                   [irq24: virtio_pci0]
100047                   I                                   [irq25: virtio_pci0]
100048                   I                                   [irq26: virtio_pci0]
100049                   I                                   [irq27: virtio_pci0]
100050                   I                                   [irq28: virtio_pci1]
100051                   I                                   [irq29: virtio_pci1]
100052                   I                                   [irq30: virtio_pci1]
100053                   I                                   [irq31: virtio_pci1]
100054                   I                                   [irq32: virtio_pci1]
100059                   I                                   [irq33: virtio_pci2]
100060                   I                                   [irq34: virtio_pci2]
100061                   I                                   [irq35: virtio_pci2]
100063                   I                                   [irq1: atkbd0]
100064                   I                                   [irq12: psm0]
100065                   I                                   [swi0: uart uart++]
100069                   I                                   [swi1: pf send]
db> ps
  pid  ppid  pgrp   uid  state   wmesg   wchan               cmd
  889   781   781     0  S       connec  0xfffffe0058c51c1a  syz-executor.0
  887     1   887     0  Ss      select  0xfffffe008ff06740  rtsol
  885     1   885     0  Ss      select  0xfffffe00578818c0  rtsol
  884     1   884     0  Ss      select  0xfffffe008ff067c0  rtsol
  878   790   430     0  S       kqread  0xfffffe005406f600  rtsol
  790   784   430     0  S       wait    0xfffffe00541dd018  sh
  784   430   430     0  S       wait    0xfffffe0056f86558  sh
  781   779   781     0  Ss      nanslp  0xffffffff83e689c1  syz-executor.0
  779   777   777     0  S       (threaded)                  syz-execprog
100107                   S       uwait   0xfffffe000798ce00  syz-execprog
100117                   S       uwait   0xfffffe0057883600  syz-execprog
100118                   S       uwait   0xfffffe0057883700  syz-execprog
100119                   S       kqread  0xfffffe0054070300  syz-execprog
100120                   S       uwait   0xfffffe0057318080  syz-execprog
100121                   S       uwait   0xfffffe0057318180  syz-execprog
100122                   S       wait    0xfffffe0058d61000  syz-execprog
100123                   S       uwait   0xfffffe008ff07c80  syz-execprog
  777   775   777     0  Ss      pause   0xfffffe00541dd620  csh
  775   688   775     0  Ss      select  0xfffffe008ff074c0  sshd
  754     1   754     0  Ss+     ttyin   0xfffffe00540668b0  getty
  753     1   753     0  Ss+     ttyin   0xfffffe00579500b0  getty
  752     1   752     0  Ss+     ttyin   0xfffffe00579504b0  getty
  751     1   751     0  Ss+     ttyin   0xfffffe00579508b0  getty
  750     1   750     0  Ss+     ttyin   0xfffffe0057950cb0  getty
  749     1   749     0  Ss+     ttyin   0xfffffe00540658b0  getty
  748     1   748     0  Ss+     ttyin   0xfffffe00579520b0  getty
  747     1   747     0  Ss+     ttyin   0xfffffe00579524b0  getty
  746     1   746     0  Ss+     ttyin   0xfffffe00579528b0  getty
  744     1    18     0  S+      piperd  0xfffffe0058ba4110  logger
  743   742    18     0  S+      nanslp  0xffffffff83e689c0  sleep
  742     1    18     0  S+      wait    0xfffffe005799f570  sh
  692     1   692     0  Ss      nanslp  0xffffffff83e689c1  cron
  688     1   688     0  Ss      select  0xfffffe008ff07640  sshd
  501     1   501     0  Ss      select  0xfffffe008ff07740  syslogd
  430     1   430     0  Ss      wait    0xfffffe0058d61ab0  devd
  429     1   429    65  Ss      select  0xfffffe008ff078c0  dhclient
  344     1   344     0  Ss      select  0xfffffe008ff079c0  dhclient
  341     1   341     0  Ss      select  0xfffffe0057883940  dhclient
   17     0     0     0  DL      vlruwt  0xfffffe0056f87ab8  [vnlru]
   16     0     0     0  DL      syncer  0xffffffff83f8dea0  [syncer]
   15     0     0     0  DL      (threaded)                  [bufdaemon]
100079                   D       psleep  0xffffffff83f8c4c0  [bufdaemon]
100082                   D       -       0xffffffff83212180  [bufspacedaemon-0]
100095                   D       sdflush 0xfffffe00589d64e8  [/ worker]
    9     0     0     0  DL      psleep  0xffffffff83fc3700  [vmdaemon]
    8     0     0     0  DL      (threaded)                  [pagedaemon]
100077                   D       psleep  0xffffffff83fb75b8  [dom0]
100080                   D       launds  0xffffffff83fb75c4  [laundry: dom0]
100081                   D       umarcl  0xffffffff81e9dd50  [uma]
    7     0     0     0  DL      -       0xffffffff83c24e48  [rand_harvestq]
    6     0     0     0  DL      pftm    0xffffffff84bc02e0  [pf purge]
    5     0     0     0  DL      waiting 0xffffffff849faf80  [sctp_iterator]
    4     0     0     0  DL      (threaded)                  [cam]
100044                   D       -       0xffffffff83ac7340  [doneq0]
100045                   D       -       0xffffffff83ac72c0  [async]
100076                   D       -       0xffffffff83ac7140  [scanner]
   14     0     0     0  DL      seqstat 0xfffffe0007ba8088  [sequencer 00]
    3     0     0     0  DL      (threaded)                  [crypto]
100040                   D       crypto_ 0xffffffff83fb2d20  [crypto]
100041                   D       crypto_ 0xfffffe0054081e30  [crypto returns 0]
100042                   D       crypto_ 0xfffffe0054081e80  [crypto returns 1]
   13     0     0     0  DL      (threaded)                  [geom]
100035                   D       -       0xffffffff83e3de80  [g_event]
100036                   D       -       0xffffffff83e3dea0  [g_up]
100037                   D       -       0xffffffff83e3dec0  [g_down]
    2     0     0     0  WL      (threaded)                  [clock]
100030                   I                                   [clock (0)]
100031                   I                                   [clock (1)]
   12     0     0     0  RL      (threaded)                  [intr]
100011                   I                                   [swi5: fast taskq]
100018                   I                                   [swi6: task queue]
100019                   I                                   [swi6: Giant taskq]
100029                   Run     CPU 0                       [swi1: netisr 0]
100032                   I                                   [swi1: hpts]
100033                   I                                   [swi1: hpts]
100046                   I                                   [irq24: virtio_pci0]
100047                   I                                   [irq25: virtio_pci0]
100048                   I                                   [irq26: virtio_pci0]
100049                   I                                   [irq27: virtio_pci0]
100050                   I                                   [irq28: virtio_pci1]
100051                   I                                   [irq29: virtio_pci1]
100052                   I                                   [irq30: virtio_pci1]
100053                   I                                   [irq31: virtio_pci1]
100054                   I                                   [irq32: virtio_pci1]
100059                   I                                   [irq33: virtio_pci2]
100060                   I                                   [irq34: virtio_pci2]
100061                   I                                   [irq35: virtio_pci2]
100063                   I                                   [irq1: atkbd0]
100064                   I                                   [irq12: psm0]
100065                   I                                   [swi0: uart uart++]
100069                   I                                   [swi1: pf send]
   11     0     0     0  RL      (threaded)                  [idle]
100003                   CanRun                              [idle: cpu0]
100004                   Run     CPU 1                       [idle: cpu1]
    1     0     1     0  SLs     wait    0xfffffe00541dc010  [init]
   10     0     0     0  DL      audit_w 0xffffffff83fb38a0  [audit]
    0     0     0     0  DLs     (threaded)                  [kernel]
100000                   D       swapin  0xffffffff83e3e8a0  [swapper]
100005                   D       -       0xfffffe0054070e00  [if_config_tqg_0]
100006                   D       -       0xfffffe0054070d00  [softirq_0]
100007                   D       -       0xfffffe0054070c00  [softirq_1]
100008                   D       -       0xfffffe0054070b00  [if_io_tqg_0]
100009                   D       -       0xfffffe0054070a00  [if_io_tqg_1]
100010                   D       -       0xfffffe00085f4000  [thread taskq]
100012                   D       -       0xfffffe00085f3d00  [kqueue_ctx taskq]
100013                   D       -       0xfffffe00085f3c00  [pci_hp taskq]
100014                   D       -       0xfffffe00085f3b00  [inm_free taskq]
100015                   D       -       0xfffffe00085f3a00  [aiod_kick taskq]
100016                   D       -       0xfffffe00085f3900  [in6m_free taskq]
100017                   D       -       0xfffffe00085f3800  [deferred_unmount ta]
100020                   D       -       0xfffffe00085f3500  [linuxkpi_irq_wq]
100021                   D       -       0xfffffe00085f3400  [linuxkpi_short_wq_0]
100022                   D       -       0xfffffe00085f3400  [linuxkpi_short_wq_1]
100023                   D       -       0xfffffe00085f3400  [linuxkpi_short_wq_2]
100024                   D       -       0xfffffe00085f3400  [linuxkpi_short_wq_3]
100025                   D       -       0xfffffe00085f3300  [linuxkpi_long_wq_0]
100026                   D       -       0xfffffe00085f3300  [linuxkpi_long_wq_1]
100027                   D       -       0xfffffe00085f3300  [linuxkpi_long_wq_2]
100028                   D       -       0xfffffe00085f3300  [linuxkpi_long_wq_3]
100034                   D       -       0xfffffe00085f3200  [firmware taskq]
100038                   D       -       0xfffffe00085f3000  [crypto_0]
100039                   D       -       0xfffffe00085f3000  [crypto_1]
100055                   D       -       0xfffffe005700d000  [vtnet0 rxq 0]
100056                   D       -       0xfffffe005700ce00  [vtnet0 txq 0]
100057                   D       -       0xfffffe005700cd00  [vtnet0 rxq 1]
100058                   D       -       0xfffffe005700cc00  [vtnet0 txq 1]
100062                   D       vtbslp  0xfffffe0057331e00  [virtio_balloon]
100066                   D       -       0xffffffff82bbd8c1  [deadlkres]
100070                   D       -       0xfffffe00085f4100  [mca taskq]
100072                   D       -       0xfffffe0057930400  [acpi_task_0]
100073                   D       -       0xfffffe0057930400  [acpi_task_1]
100074                   D       -       0xfffffe0057930400  [acpi_task_2]
100075                   D       -       0xfffffe00085f2d00  [CAM taskq]
db> show all locks
Process 12 (intr) thread 0xfffffe0007a9e3a0 (100029)
exclusive sleep mutex sctp-tcb (tcb) r = 0 (0xfffffe0092d9c180) locked @ /syzkaller/managers/main/kernel/sys/netinet/sctp_pcb.c:2138
db> show malloc
              Type        InUse        MemUse     Requests
           pf_hash            5        11524K            5
          tcp_hpts            7         4801K            7
            devbuf         4216         4323K         4241
         sysctloid        34753         2047K        34824
             vtbuf           24         1968K           46
              kobj          330         1320K          493
            newblk          682         1195K          733
          vfscache            3         1025K            3
          inodedep           92          547K          114
               pcb           26          541K          119
         ufs_quota            1          512K            1
          vfs_hash            1          512K            1
           callout            2          512K            2
              intr            4          472K            4
           subproc          115          218K          957
            acpica         1674          184K        58126
           tidhash            3          141K            3
              vmem            3          138K            4
           pagedep           17          132K           58
            linker          324          130K          353
        tfo_ccache            1          128K            1
          IP reass            1          128K            1
         vnet_data            1          112K            1
            DEVFS1          106          106K          117
               sem            4          106K            4
               bus         1000           82K         5215
          mtx_pool            2           72K            2
          syncache            1           68K            1
            module          513           65K          513
          acpitask            1           64K            1
       ddb_capture            1           64K            1
          filedesc            5           37K           91
              umtx          286           36K          286
           kdtrace          179           36K         1021
              temp           22           33K         1725
         hostcache            1           32K            1
               shm            1           32K            1
            DEVFS3          125           32K          135
               msg            4           30K            4
        gtaskqueue           18           26K           18
            kbdmux            6           24K            6
        DEVFS_RULE           56           20K           56
               BPF           11           18K           11
         ufs_mount            4           17K            5
              proc            3           17K            3
               tty           16           16K           16
           ithread           97           16K           97
            bus-sc           34           15K         1682
            dirrem           54           14K           65
            ifaddr           39           13K           41
      eventhandler          154           13K          154
            KTRACE          100           13K          100
              kenv           95           12K           95
          routetbl           62           11K          222
              rman           88           11K          431
              GEOM           61           11K          481
         CAM queue            5           11K         1528
         bmsafemap            3            9K           82
              UART           12            9K           12
           devstat            4            9K            4
              ksem            1            8K            1
               rpc            2            8K            2
             shmfd            1            8K            1
       pfs_vncache            1            8K            1
              cred           31            8K          235
            kqueue           52            8K          896
         pfs_nodes           20            8K           20
     audit_evclass          237            8K          296
         taskqueue           63            7K           63
             ifnet            4            7K            4
            sglist            5            7K            5
           CAM DEV            3            6K          510
           lltable           19            6K           19
       ether_multi           68            6K           78
         sctp_timw           19            5K           19
       ufs_dirhash           24            5K           24
          freefile           37            5K           46
            plimit           18            5K          329
         in6_multi           35            5K           35
               UMA          267            5K          267
                vt           11            5K           11
           memdesc            1            4K            1
               MCA           32            4K           32
             evdev            4            4K            4
            diradd           31            4K           79
          pf_ifnet            7            4K           10
           acpisem           28            4K           28
             hhook           15            4K           17
           session           24            3K           35
           pwddesc           48            3K          890
         proc-args           77            3K         1898
          terminal           11            3K           11
             clone            9            3K            9
           uidinfo            3            3K            8
         sctp_stro            2            2K           38
        local_apic            1            2K            1
           io_apic            1            2K            1
       fpukern_ctx            2            2K            2
         ipsec-saq            2            2K            2
             selfd           32            2K        10873
         sctp_atcl            5            2K          113
            Unitno           27            2K           43
           CAM XPT           22            2K          543
             lockf           15            2K           22
               msi           12            2K           12
            select           11            2K           35
             mkdir           10            2K           96
       ipsecpolicy            2            2K            2
           acpidev           20            2K           20
      NFSD session            1            1K            1
           softdep            1            1K            1
          indirdep            4            1K            4
            sahead            1            1K            1
          secasvar            1            1K            1
       vnodemarker            2            1K            8
            ip6ndp            6            1K            7
          sctp_ifa            7            1K            8
         newdirblk            7            1K           48
        CAM periph            4            1K          271
             ipsec            3            1K            3
          in_multi            3            1K            5
             nhops            6            1K            6
         toponodes            6            1K            6
            isadev            6            1K            6
             mount           16            1K           89
          pci_link           10            1K           10
            crypto            4            1K            4
 encap_export_host           12            1K           12
         sctp_stri            1            1K           74
              pfil            4            1K            4
          procdesc            4            1K           10
              cdev            2            1K            2
          sctp_ifn            3            1K            8
       inpcbpolicy           12            1K          165
               mld            3            1K            3
            CC Mem            3            1K            7
              igmp            3            1K            3
    chacha20random            1            1K            1
               osd            7            1K           18
               tun            4            1K            4
         sctp_atky            7            1K          188
            DEVFSP            5            1K           10
      NFSD lckfile            1            1K            1
     NFSD V4client            1            1K            1
             DEVFS            9            1K           10
            vnodes            1            1K            1
           CAM SIM            2            1K            2
            feeder            7            1K            7
           tcpfunc            3            1K            3
        loginclass            3            1K            7
            prison            6            1K            6
       lkpikmalloc            5            1K            6
        aesni_data            2            1K            2
         cryptodev            2            1K           49
          nexusdev            8            1K            8
            apmdev            1            1K            1
          atkbddev            2            1K            2
     CAM dev queue            2            1K            2
           netlink            1            1K            1
 CAM I/O Scheduler            1            1K            1
          CAM path            4            1K         1034
            soname            5            1K         3508
          pmchooks            1            1K            1
          filecaps            4            1K           78
         sctp_athm            5            1K          150
          sctp_vrf            1            1K            1
          sctp_map            4            1K           76
              vnet            1            1K            1
           entropy            2            1K           39
               pmc            1            1K            1
          acpiintr            1            1K            1
              cpus            2            1K            2
          freework            1            1K           63
    vnet_data_free            1            1K            1
           Per-cpu            1            1K            1
          p1003.1b            1            1K            1
            ipcomp            0            0K            0
               esp            0            0K            0
                ah            0            0K            0
           filemon            0            0K            0
          pf_table            0            0K            0
           pf_rule            0            0K            0
           pf_altq            0            0K            0
           pf_osfp            0            0K            0
           pf_temp            0            0K            0
        sctp_mcore            0            0K            0
        sctp_socko            0            0K           74
         sctp_iter            0            0K            6
         sctp_mvrf            0            0K            0
         sctp_cpal            0            0K            0
         sctp_cmsg            0            0K            0
         sctp_stre            0            0K            0
         sctp_athi            0            0K            0
         sctp_a_it            0            0K            6
         sctp_aadr            0            0K            0
            mqdata            0            0K            0
            tcp_do            0            0K            0
           tcp_fsb            0            0K            0
   NFSCL layrecall            0            0K            0
        madt_table            0            0K            2
          smartpqi            0            0K            0
     NFSCL session            0            0K            0
     NFSCL sockreq            0            0K            0
     NFSCL devinfo            0            0K            0
               ixl            0            0K            0
     NFSCL flayout            0            0K            0
      NFSCL layout            0            0K            0
     NFSD rollback            0            0K            0
      NFSCL diroff            0            0K            0
       NEWdirectio            0            0K            0
        NEWNFSnode            0            0K            0
         NFSCL lck            0            0K            0
        ice-resmgr            0            0K            0
         ice-osdep            0            0K            0
               ice            0            0K            0
              iavf            0            0K            0
             axgbe            0            0K            0
      NFSCL lckown            0            0K            0
      NFSCL client            0            0K            0
       NFSCL deleg            0            0K            0
        NFSCL open            0            0K            0
       NFSCL owner            0            0K            0
            NFS fh            0            0K            0
           NFS req            0            0K            0
     NFSD usrgroup            0            0K            0
       NFSD string            0            0K            0
          xen_intr            0            0K            0
       NFSD V4lock            0            0K            0
      NFSD V4state            0            0K            0
           xen_hvm            0            0K            0
         legacydrv            0            0K            0
            bounce            0            0K            0
            busdma            0            0K            0
            qpidrv            0            0K            0
     NFSD srvcache            0            0K            0
      dmar_idpgtbl            0            0K            0
          dmar_dom            0            0K            0
          dmar_ctx            0            0K            0
       msdosfs_fat            0            0K            0
     msdosfs_mount            0            0K            0
      msdosfs_node            0            0K            0
              isci            0            0K            0
      iommu_dmamap            0            0K            0
     hyperv_socket            0            0K            0
           bxe_ilt            0            0K            0
            xenbus            0            0K            0
            DEVFS4            0            0K            0
     vm_fictitious            0            0K            0
            DEVFS2            0            0K            0
            gntdev            0            0K            0
       privcmd_dev            0            0K            0
        evtchn_dev            0            0K            0
          xenstore            0            0K            0
         scsi_pass            0            0K            0
         ciss_data            0            0K            0
               xnb            0            0K            0
          xen_acpi            0            0K            0
              xbbd            0            0K            0
           UMAHash            0            0K            0
               xbd            0            0K            0
           Balloon            0            0K            0
         vm_pgdata            0            0K            0
           jblocks            0            0K            0
          savedino            0            0K           15
          sentinel            0            0K            0
            jfsync            0            0K            0
            jtrunc            0            0K            0
             sbdep            0            0K            2
           jsegdep            0            0K            0
              jseg            0            0K            0
         jfreefrag            0            0K            0
          jfreeblk            0            0K            0
           jnewblk            0            0K            0
            jmvref            0            0K            0
           jremref            0            0K            0
           jaddref            0            0K            0
           freedep            0            0K            0
          freeblks            0            0K           62
          freefrag            0            0K            1
        allocindir            0            0K            0
       allocdirect            0            0K            0
          ufs_trim            0            0K            0
           mactemp            0            0K            0
     audit_trigger            0            0K            0
 audit_pipe_presel            0            0K            0
     audit_pipeent            0            0K            0
        audit_pipe            0            0K            0
      audit_evname            0            0K            0
         audit_bsm            0            0K            0
      audit_gidset            0            0K            0
        audit_text            0            0K            0
        audit_path            0            0K            0
        audit_data            0            0K            0
        audit_cred            0            0K            0
          sysmouse            0            0K            0
            vtfont            0            0K            0
         BACKLIGHT            0            0K            0
           ath_hal            0            0K            0
            athdev            0            0K            0
           ata_pci            0            0K            0
           ata_dma            0            0K            0
       ata_generic            0            0K            0
            pvscsi            0            0K            0
           scsi_da            0            0K           69
            ata_da            0            0K            0
           scsi_ch            0            0K            0
           scsi_cd            0            0K            0
          ktls_ocf            0            0K            0
       AHCI driver            0            0K            0
        MLX5EEPROM            0            0K            0
        MLX5EEPROM            0            0K            0
        MLX5EEPROM            0            0K            0
        MLX5EEPROM            0            0K            0
        MLX5EEPROM            0            0K            0
      MLX5E_TLS_RX            0            0K            0
        MLX5EEPROM            0            0K            0
         MLX5E_TLS            0            0K            0
        MLX5EEPROM            0            0K            0
        MLX5EEPROM            0            0K            0
        MLX5EEPROM            0            0K            0
            MLX5EN            0            0K            0
        MLX5EEPROM            0            0K            0
        MLX5EEPROM            0            0K            0
        MLX5EEPROM            0            0K            0
          MLX5DUMP            0            0K            0
        MLX5EEPROM            0            0K            0
        MLX5EEPROM            0            0K            0
        MLX5EEPROM            0            0K            0
       simple_attr            0            0K            0
          seq_file            0            0K            0
           lkpiskb            0            0K            0
             radix            0            0K            0
               idr            0            0K            0
          lkpindev            0            0K            0
            lkpifw            0            0K            0
         lkpi80211            0            0K            0
               NLM            0            0K            0
    ipsec-spdcache            0            0K            0
         ipsec-reg            0            0K            0
        ipsec-misc            0            0K            0
      ipsecrequest            0            0K            0
            ip6opt            0            0K            3
       ip6_msource            0            0K            0
      ip6_moptions            0            0K            0
       in6_mfilter            0            0K            0
             frag6            0            0K            0
            tcplog            0            0K            0
        tcp_hwpace            0            0K            0
            USBdev            0            0K            0
               USB            0            0K            0
               LRO            0            0K            0
        ip_msource            0            0K            0
       ip_moptions            0            0K            0
        in_mfilter            0            0K            0
              ipid            0            0K            0
         80211scan            0            0K            0
      80211ratectl            0            0K            0
        80211power            0            0K            0
       80211nodeie            0            0K            0
         80211node            0            0K            0
      80211mesh_gt            0            0K            0
      80211mesh_rt            0            0K            0
         80211perr            0            0K            0
         80211prep            0            0K            0
         80211preq            0            0K            0
          80211dfs            0            0K            0
       80211crypto            0            0K            0
          80211vap            0            0K            0
             iflib            0            0K            0
              vlan            0            0K            0
               gif            0            0K            0
           ifdescr            0            0K            0
              zlib            0            0K            0
           fadvise            0            0K            0
           VN POLL            0            0K            0
               agp            0            0K            0
            statfs            0            0K          237
     namei_tracker            0            0K            0
       export_host            0            0K            0
        cl_savebuf            0            0K            2
           nvme_da            0            0K            0
           acpipwr            0            0K            0
         acpi_perf            0            0K            0
            twsbuf            0            0K            0
      twe_commands            0            0K            0
       tcp_log_dev            0            0K            0
      midi buffers            0            0K            0
             mixer            0            0K            0
              ac97            0            0K            0
             hdacc            0            0K            0
              hdac            0            0K            0
              hdaa            0            0K            0
         acpicmbat            0            0K            0
       SIIS driver            0            0K            0
           CAM CCB            0            0K          523
            biobuf            0            0K            0
               aio            0            0K            0
               lio            0            0K            0
               acl            0            0K            0
          mbuf_tag            0            0K            0
              ktls            0            0K            0
               PUC            0            0K            0
          ppbusdev            0            0K            0
agtiapi_MemAlloc malloc            0            0K            0
    osti_cacheable            0            0K            0
          tempbuff            0            0K            0
          tempbuff            0            0K            0
ag_tgt_map_t malloc            0            0K            0
ag_slr_map_t malloc            0            0K            0
lDevFlags * malloc            0            0K            0
tiDeviceHandle_t * malloc            0            0K            0
ag_portal_data_t malloc            0            0K            0
ag_device_t malloc            0            0K            0
     STLock malloc            0            0K            0
          CCB List            0            0K            0
            sr_iov            0            0K            0
               OCS            0            0K            0
               OCS            0            0K            0
              nvme            0            0K            0
               nvd            0            0K            0
            netmap            0            0K            0
            mwldev            0            0K            0
        MVS driver            0            0K            0
     CAM ccb queue            0            0K            0
              accf            0            0K            0
               pts            0            0K            0
               iov            0            0K        13998
          ioctlops            0            0K           91
           eventfd            0            0K            0
           Witness            0            0K            0
             stack            0            0K            0
          mrsasbuf            0            0K            0
          mpt_user            0            0K            0
          mps_user            0            0K            0
            MPSSAS            0            0K            0
               mps            0            0K            0
              sbuf            0            0K          288
          mpr_user            0            0K            0
          firmware            0            0K            0
        compressor            0            0K            0
            MPRSAS            0            0K            0
              SWAP            0            0K            0
               mpr            0            0K            0
            mfibuf            0            0K            0
         sysctltmp            0            0K          658
            sysctl            0            0K            3
        md_sectors            0            0K            0
              ekcd            0            0K            0
            dumper            0            0K            0
          sendfile            0            0K            0
              rctl            0            0K            0
           md_disk            0            0K            0
           malodev            0            0K            0
               LED            0            0K            0
          ix_sriov            0            0K            0
             cache            0            0K            0
        aacraidcam            0            0K            0
          kcovinfo            0            0K            0
      prison_racct            0            0K            0
       Fail Points            0            0K            0
             sigio            0            0K            1
filedesc_to_leader            0            0K            0
               pwd            0            0K            0
       tty console            0            0K            0
                ix            0            0K            0
            ipsbuf            0            0K            0
       aacraid_buf            0            0K            0
            aaccam            0            0K            0
         boottrace            0            0K            0
            aacbuf            0            0K            0
              zstd            0            0K            0
            XZ_DEC            0            0K            0
            nvlist            0            0K            0
          SCSI ENC            0            0K            0
           SCSI sa            0            0K            0
        isofs_node            0            0K            0
       isofs_mount            0            0K            0
     tr_raid5_data            0            0K            0
    tr_raid1e_data            0            0K            0
     tr_raid1_data            0            0K            0
     tr_raid0_data            0            0K            0
    tr_concat_data            0            0K            0
       md_sii_data            0            0K            0
   md_promise_data            0            0K            0
    md_nvidia_data            0            0K            0
   md_jmicron_data            0            0K            0
     md_intel_data            0            0K            0
       md_ddf_data            0            0K            0
         raid_data            0            0K           72
     geom_flashmap            0            0K            0
         tmpfs dir            0            0K            0
        tmpfs name            0            0K            0
       tmpfs mount            0            0K            0
     tmpfs extattr            0            0K            0
           NFS FHA            0            0K            0
         newnfsmnt            0            0K            0
  newnfsclient_req            0            0K            0
db> show uma
              Zone   Size    Used    Free    Requests  Sleeps  Bucket  Total Mem    XFree
   mbuf_jumbo_page   4096    8320    1078       14277       0     254   38494208        0
              mbuf    256    8592    1070       19084       0     254    2473472        0
              pbuf   2624       0     778           0       0       2    2041472        0
          BUF TRIE    144     182   11578         471       0      62    1693440        0
        malloc-384    384    4149      21        4151       0      30    1601280        0
        malloc-128    128   11718     155       11800       0     126    1519744        0
       malloc-4096   4096     330       2         493       0       2    1359872        0
       UMA Slabs 0    112   10625      25       10625       0     126    1192800        0
         sctp_asoc   2256       2     508          38       0     254    1150560        0
      mbuf_cluster   2048     508       0         508       0     254    1040384        0
         vmem btag     56   16528      71       16528       0     254     929544        0
         FFS inode   1160     505      27         551       0       8     617120        0
           sctp_ep   1208       2     508          38       0     254     616080        0
        RADIX NODE    144    3722     137       22196       0      62     555696        0
            socket    960      29     479        1409       0     254     487680        0
         VM OBJECT    264    1748      52       27064       0      30     475200        0
            lkpimm    168       1    2327           1       0      62     391104        0
          lkpicurr    168       2    2326           2       0      62     391104        0
        sctp_raddr    736       4     513         112       0     254     380512        0
        256 Bucket   2048     134      14        1031       0       8     303104        0
         malloc-64     64    4269     330        4486       0     254     294336        0
       malloc-4096   4096      65       3         920       0       2     278528        0
       malloc-2048   2048       6     130        1038       0       8     278528        0
             VNODE    448     537      66         585       0      30     270144        0
      malloc-65536  65536       4       0           4       0       1     262144        0
            THREAD   1824     130      13         130       0       8     260832        0
         MAP ENTRY     96    2145     375       95467       0     126     241920        0
         malloc-16     16   14569     431       17622       0     254     240000        0
            DEVCTL   1024       4     216         130       0       0     225280        0
      malloc-65536  65536       1       2         137       0       1     196608        0
        malloc-256    256     719      31         901       0      62     192000        0
         UMA Zones    768     239       0         239       0      16     183552        0
        malloc-128    128    1140     255       27063       0     126     178560        0
         malloc-32     32    5311     107        6288       0     254     173376        0
       malloc-1024   1024     116      28         131       0      16     147456        0
       FFS2 dinode    256     505      65         551       0      62     145920        0
     FPU_save_area    832     132      30         171       0      16     134784        0
       S VFS Cache    104     982     305        1059       0     126     133848        0
      malloc-65536  65536       0       2          56       0       1     131072        0
      malloc-65536  65536       2       0           2       0       1     131072        0
      malloc-65536  65536       0       2           8       0       1     131072        0
        malloc-128    128     910     113         948       0     126     130944        0
             unpcb    256      14     496        1186       0     254     130560        0
       mbuf_packet    256       3     505         408       0     254     130048        0
          ksiginfo    112      46     998          91       0     126     116928        0
      malloc-32768  32768       1       2         121       0       1      98304        0
      malloc-16384  16384       2       4         205       0       1      98304        0
           VMSPACE   2560      31       5         874       0       4      92160        0
              PROC   1368      47      19         889       0       8      90288        0
          UMA Kegs    384     225       8         225       0      30      89472        0
        128 Bucket   1024      43      40         510       0      16      84992        0
            clpbuf   2624       0      32          21       0      16      83968        0
        malloc-384    384     158      52         181       0      30      80640        0
        sctp_chunk    152       3     517         111       0     254      79040        0
         filedesc0   1072      48      22         890       0       8      75040        0
       malloc-8192   8192       8       1          10       0       1      73728        0
             g_bio    408       0     180        4488       0      30      73440        0
         malloc-64     64     512     559        1642       0     254      68544        0
      malloc-65536  65536       1       0           1       0       1      65536        0
      malloc-65536  65536       1       0           1       0       1      65536        0
        malloc-256    256     173      82         500       0      62      65280        0
        malloc-256    256     212      43         220       0      62      65280        0
        malloc-256    256      89     166        1004       0      62      65280        0
       malloc-4096   4096      11       3          14       0       2      57344        0
         malloc-64     64     292     527       24839       0     254      52416        0
        malloc-128    128     146     257         257       0     126      51584        0
        malloc-128    128     163     240         863       0     126      51584        0
         32 Bucket    256      60     135        9450       0      62      49920        0
           DIRHASH   1024      35      13          35       0      16      49152        0
             NAMEI   1024       0      48       12889       0      16      49152        0
      malloc-16384  16384       3       0           3       0       1      49152        0
       malloc-8192   8192       6       0           6       0       1      49152        0
       malloc-8192   8192       4       2         105       0       1      49152        0
        malloc-384    384      65      55         173       0      30      46080        0
          syncache    168       0     264           5       0     254      44352        0
         udp_inpcb    456       6      90         152       0      30      43776        0
       malloc-8192   8192       4       1          30       0       1      40960        0
       Mountpoints   2752       2      12           2       0       4      38528        0
            da_ccb    544       0      70        1242       0      16      38080        0
            pcpu-8      8    4324     284        4384       0     254      36864        0
         64 Bucket    512      63       9        1755       0      30      36864        0
         malloc-64     64      82     485        1180       0     254      36288        0
         malloc-64     64     160     407        1537       0     254      36288        0
         malloc-64     64      80     487        1036       0     254      36288        0
         malloc-64     64       7     560          41       0     254      36288        0
         malloc-64     64      35     532          41       0     254      36288        0
        malloc-128    128      25     254         185       0     126      35712        0
        malloc-128    128      42     237        3315       0     126      35712        0
        malloc-128    128      79     200         770       0     126      35712        0
     routing nhops    256      14     121          21       0      62      34560        0
           ttyoutq    256      72      63         160       0      62      34560        0
        malloc-256    256      54      81         312       0      62      34560        0
        malloc-256    256      59      76         201       0      62      34560        0
        malloc-256    256      55      80         710       0      62      34560        0
        malloc-256    256       6     129         327       0      62      34560        0
      malloc-32768  32768       1       0           1       0       1      32768        0
      malloc-32768  32768       1       0           1       0       1      32768        0
      malloc-16384  16384       1       1          11       0       1      32768        0
       malloc-2048   2048       2      14          14       0       8      32768        0
       malloc-2048   2048       9       7           9       0       8      32768        0
       malloc-2048   2048       8       8          39       0       8      32768        0
       malloc-2048   2048       0      16          50       0       8      32768        0
       malloc-2048   2048       5      11          54       0       8      32768        0
       malloc-1024   1024       3      29          43       0      16      32768        0
       malloc-1024   1024       6      26        1448       0      16      32768        0
       malloc-1024   1024       5      27          41       0      16      32768        0
       malloc-1024   1024       6      26         180       0      16      32768        0
       malloc-1024   1024      16      16          20       0      16      32768        0
       malloc-1024   1024      18      14          18       0      16      32768        0
       malloc-1024   1024       1      31           6       0      16      32768        0
        malloc-512    512       1      63         119       0      30      32768        0
        malloc-512    512       2      62          19       0      30      32768        0
        malloc-512    512       1      63          74       0      30      32768        0
        malloc-512    512      11      53          60       0      30      32768        0
           pcpu-64     64     497      15         497       0     254      32768        0
            ttyinq    160     135      65         300       0      62      32000        0
            cpuset    104       7     272           7       0     126      29016        0
         malloc-32     32     286     596        1449       0     254      28224        0
         16 Bucket    144      48     148         233       0      62      28224        0
          4 Bucket     48       6     582          51       0     254      28224        0
             ripcb    424       3      60           6       0      30      26712        0
         TURNSTILE    136     144      45         144       0      62      25704        0
       malloc-4096   4096       3       3         627       0       2      24576        0
              PGRP     88      24     252          35       0     126      24288        0
    ertt_txseginfo     40       0     606         244       0     254      24240        0
          rl_entry     40      37     569          37       0     254      24240        0
           rtentry    168      17     127          21       0      62      24192        0
              pipe    728      11      22         330       0      16      24024        0
             Files     80     103     197        7138       0     126      24000        0
          8 Bucket     80      53     247         266       0     126      24000        0
         tcp_inpcb   1296       3      15           7       0       8      23328        0
        malloc-384    384      20      40         365       0      30      23040        0
        malloc-384    384       3      57          15       0      30      23040        0
        malloc-384    384      10      50          12       0      30      23040        0
        malloc-384    384       1      59          23       0      30      23040        0
        SLEEPQUEUE     88     144     112         144       0     126      22528        0
         hostcache     64       1     314           1       0     254      20160        0
   udp_inpcb ports     32       3     627          40       0     254      20160        0
              ertt     72       3     277           7       0     126      20160        0
               PWD     32      12     618         140       0     254      20160        0
         malloc-32     32      34     596         195       0     254      20160        0
         malloc-32     32     141     489         191       0     254      20160        0
         malloc-32     32      17     613         553       0     254      20160        0
         malloc-32     32      38     592          59       0     254      20160        0
         malloc-32     32      46     584         103       0     254      20160        0
          2 Bucket     32      49     581         309       0     254      20160        0
             KNOTE    160      11     114         262       0      62      20000        0
 epoch_record pcpu    256       4      60           4       0      62      16384        0
      malloc-16384  16384       1       0           1       0       1      16384        0
      malloc-16384  16384       1       0           1       0       1      16384        0
      malloc-16384  16384       1       0           1       0       1      16384        0
       malloc-8192   8192       2       0           2       0       1      16384        0
       malloc-8192   8192       2       0           2       0       1      16384        0
       malloc-4096   4096       1       3         238       0       2      16384        0
       malloc-2048   2048       4       4           4       0       8      16384        0
       malloc-2048   2048       1       7         192       0       8      16384        0
        malloc-512    512       3      29           3       0      30      16384        0
        malloc-512    512       0      32           1       0      30      16384        0
        malloc-512    512       0      32           1       0      30      16384        0
        malloc-512    512       1      31           1       0      30      16384        0
           SMR CPU     32       7     504           7       0     254      16352        0
        sctp_laddr     48       0     336           6       0     254      16128        0
              kenv    258      15      45        1040       0      30      15480        0
            mqnode    416       3      33           3       0      30      14976        0
              vmem   1856       1       7           1       0       8      14848        0
        SMR SHARED     24       7     504           7       0     254      12264        0
   tcp_inpcb ports     32       1     377           1       0     254      12096        0
         malloc-32     32      24     354        2849       0     254      12096        0
         malloc-16     16      45     705        1426       0     254      12000        0
         malloc-16     16      64     686         405       0     254      12000        0
         malloc-16     16      29     721         192       0     254      12000        0
         malloc-16     16      17     733         178       0     254      12000        0
         malloc-16     16       8     742           8       0     254      12000        0
         malloc-16     16     263     487         350       0     254      12000        0
         malloc-16     16      14     736       26485       0     254      12000        0
       malloc-4096   4096       1       1           1       0       2       8192        0
       malloc-4096   4096       1       1           2       0       2       8192        0
           pcpu-16     16      14     498          14       0     254       8192        0
      vtnet_tx_hdr     24       0     334        2143       0     254       8016        0
       UMA Slabs 1    176       8      14           8       0      62       3872        0
        KMAP ENTRY     96      12      27          14       0       0       3744        0
       FFS1 dinode    128       0       0           0       0     126          0        0
           ada_ccb    272       0       0           0       0      30          0        0
             swblk    136       0       0           0       0      62          0        0
          swpctrie    144       0       0           0       0      62          0        0
   pf state scrubs     40       0       0           0       0     254          0        0
   pf frag entries     40       0       0           0       0     254          0        0
          pf frags    248       0       0           0       0      62          0        0
  pf table entries    160       0       0           0       0     254          0        0
pf table entry counters     64       0       0           0       0     254          0        0
   pf source nodes    136       0       0           0       0     254          0        0
     pf state keys     88       0       0           0       0     126          0        0
         pf states    312       0       0           0       0     254          0        0
           pf tags    104       0       0           0       0     126          0        0
          pf mtags    184       0       0           0       0      62          0        0
       tcp_bbr_pcb    832       0       0           0       0      16          0        0
       tcp_bbr_map    128       0       0           0       0     126          0        0
      tcp_rack_pcb    896       0       0           0       0      16          0        0
      tcp_rack_map    120       0       0           0       0     126          0        0
               ipq     56       0       0           0       0     254          0        0
tfo_ccache_entries     80       0       0           0       0     126          0        0
               tfo      4       0       0           0       0     254          0        0
          sackhole     32       0       0           0       0     254          0        0
   sctp_asconf_ack     48       0       0           0       0     254          0        0
       sctp_asconf     40       0       0           0       0     254          0        0
sctp_stream_msg_out    112       0       0           0       0     254          0        0
        sctp_readq    152       0       0           0       0     254          0        0
   tcp_log_id_node    120       0       0           0       0     126          0        0
 tcp_log_id_bucket    176       0       0           0       0      62          0        0
           tcp_log    416       0       0           0       0     254          0        0
          tcpreass     48       0       0           0       0     254          0        0
       ripcb ports     32       0       0           0       0     254          0        0
udplite_inpcb ports     32       0       0           0       0     254          0        0
     udplite_inpcb    456       0       0           0       0      30          0        0
    IPsec SA lft_c     16       0       0           0       0     254          0        0
            itimer    352       0       0           0       0      30          0        0
            AIOLIO    272       0       0           0       0      30          0        0
             AIOCB    552       0       0           0       0      16          0        0
               AIO    208       0       0           0       0      62          0        0
        TMPFS node    232       0       0           0       0      62          0        0
        mqnotifier    216       0       0           0       0      62          0        0
            mvdata     64       0       0           0       0     254          0        0
            mqueue    248       0       0           0       0      62          0        0
           NCLNODE    608       0       0           0       0      16          0        0
     LTS VFS Cache    360       0       0           0       0      30          0        0
       L VFS Cache    320       0       0           0       0      30          0        0
     STS VFS Cache    144       0       0           0       0      62          0        0
           cryptop    280       0       0           0       0      30          0        0
  linux_dma_object     32       0       0           0       0     254          0        0
  linux_dma_pctrie    144       0       0           0       0      62          0        0
   IOMMU_MAP_ENTRY    104       0       0           0       0     126          0        0
    mbuf_jumbo_16k  16384       0       0           0       0     254          0        0
     mbuf_jumbo_9k   9216       0       0           0       0     254          0        0
      audit_record   1280       0       0           0       0       8          0        0
         domainset     40       0       0           0       0     254          0        0
        MAC labels     40       0       0           0       0     254          0        0
            vnpbuf   2624       0       0           0       0      64          0        0
            mdpbuf   2624       0       0           0       0       3          0        0
           nfspbuf   2624       0       0           0       0      16          0        0
            swwbuf   2624       0       0           0       0       8          0        0
            swrbuf   2624       0       0           0       0      16          0        0
          umtx_shm     88       0       0           0       0     126          0        0
           umtx pi     96       0       0           0       0     126          0        0
rangeset pctrie nodes    144       0       0           0       0      62          0        0
      malloc-65536  65536       0       0           0       0       1          0        0
      malloc-32768  32768       0       0           0       0       1          0        0
      malloc-32768  32768       0       0           0       0       1          0        0
      malloc-32768  32768       0       0           0       0       1          0        0
      malloc-32768  32768       0       0           0       0       1          0        0
      malloc-32768  32768       0       0           0       0       1          0        0
      malloc-16384  16384       0       0           0       0       1          0        0
      malloc-16384  16384       0       0           0       0       1          0        0
       malloc-8192   8192       0       0           0       0       1          0        0
       malloc-8192   8192       0       0           0       0       1          0        0
       malloc-4096   4096       0       0           0       0       2          0        0
        malloc-384    384       0       0           0       0      30          0        0
           pcpu-32     32       0       0           0       0     254          0        0
            pcpu-4      4       0       0           0       0     254          0        0
            fakepg    104       0       0           0       0     126          0        0
          UMA Hash    256       0       0           0       0      62          0        0

Crashes (2):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2023/02/02 10:59 freebsd-src 99187c3a44c2 16d19e30 console log report syz ci-freebsd-main Fatal trap NUM: page fault in sctp_notify_stream_reset_tsn
2023/02/02 10:43 freebsd-src 99187c3a44c2 16d19e30 console log report ci-freebsd-main Fatal trap NUM: page fault in sctp_notify_stream_reset_tsn
* Struck through repros no longer work on HEAD.