syzbot


panic: About to free ctl:ADDR so:ADDR and its in 1

Status: closed as invalid on 2023/01/30 19:00
Reported-by: syzbot+b2d3e3f439385340e35f@syzkaller.appspotmail.com
First crash: 1463d, last: 1020d
Last patch testing requests (2)
Created Duration User Patch Repo Result
2022/08/26 14:27 0m retest repro freebsd error
2022/08/26 14:27 0m retest repro freebsd error

Sample crash report:
login: panic: About to free ctl:0xfffff8003f430ab0 so:0xfffff8003f438000 and its in 1
cpuid = 1
time = 1605767578
KDB: stack backtrace:
db_trace_self_wrapper() at db_trace_self_wrapper+0x47/frame 0xfffffe0025595590
vpanic() at vpanic+0x1c7/frame 0xfffffe00255955f0
panic() at panic+0x43/frame 0xfffffe0025595650
sctp_sorecvmsg() at sctp_sorecvmsg+0x1735/frame 0xfffffe0025595790
sctp_soreceive() at sctp_soreceive+0x25f/frame 0xfffffe00255959a0
soreceive() at soreceive+0xb9/frame 0xfffffe0025595a00
dofileread() at dofileread+0xd3/frame 0xfffffe0025595a60
sys_readv() at sys_readv+0x98/frame 0xfffffe0025595ab0
amd64_syscall() at amd64_syscall+0x247/frame 0xfffffe0025595bf0
fast_syscall_common() at fast_syscall_common+0xf8/frame 0xfffffe0025595bf0
--- syscall (0, FreeBSD ELF64, nosys), rip = 0x2b455a, rsp = 0x7fffdfffdf78, rbp = 0x7fffdfffdfb0 ---
KDB: enter: panic
[ thread pid 830 tid 100223 ]
Stopped at      kdb_enter+0x67: movq    $0,0x147bae6(%rip)
db> 
db> set $lines = 0
db> set $maxwidth = 0
db> show registers
cs                        0x20
ds                        0x3b
es                        0x3b
fs                        0x13
gs                        0x1b
ss                        0x28
rax                       0x12
rcx                       0x80
rdx         0xffffffff818cc279
rbx                          0
rsp         0xfffffe0025595570
rbp         0xfffffe0025595590
rsi                        0x1
rdi                          0
r8                           0
r9                  0xffffffff
r10                    0xf4240
r11         0xfffffe0025817110
r12         0xffffffff820671c0  ddb_dbbe
r13                          0
r14         0xffffffff81974571
r15         0xffffffff81974571
rip         0xffffffff810e0a97  kdb_enter+0x67
rflags                    0x82
kdb_enter+0x67: movq    $0,0x147bae6(%rip)
db> show proc
Process 830 (syz-executor2866438) at 0xfffff80026eba000:
 state: NORMAL
 uid: 0  gids: 0, 0, 5
 parent: pid 775 at 0xfffff80004b34a50
 ABI: FreeBSD ELF64
 arguments: ./syz-executor286643842
 reaper: 0xfffff80004291528 reapsubtree: 1
 sigparent: 20
 vmspace: 0xfffffe00049a53e0
   (map 0xfffffe00049a53e0)
   (map.pmap 0xfffffe00049a54a0)
   (pmap 0xfffffe00049a5500)
 threads: 3
100095                   RunQ                                syz-executor2866438
100223                   Run     CPU 1                       syz-executor2866438
100227                   Run     CPU 0                       syz-executor2866438
db> ps
  pid  ppid  pgrp   uid  state   wmesg   wchan               cmd
  833   770   766     0  R       (threaded)                  syz-executor2866438
100104                   RunQ                                syz-executor2866438
100226                   S       sbwait  0xfffff8003f438574  syz-executor2866438
  832   769   766     0  R       (threaded)                  syz-executor2866438
100105                   RunQ                                syz-executor2866438
100225                   S       uwait   0xfffff80026ea6800  syz-executor2866438
  831   772   766     0  R       (threaded)                  syz-executor2866438
100089                   RunQ                                syz-executor2866438
100224                   RunQ                                syz-executor2866438
  830   775   766     0  R       (threaded)                  syz-executor2866438
100095                   RunQ                                syz-executor2866438
100223                   Run     CPU 1                       syz-executor2866438
100227                   Run     CPU 0                       syz-executor2866438
  775   768   766     0  S       nanslp  0xffffffff8252fce0  syz-executor2866438
  772   768   766     0  S       nanslp  0xffffffff8252fce1  syz-executor2866438
  770   768   766     0  S       nanslp  0xffffffff8252fce0  syz-executor2866438
  769   768   766     0  S       nanslp  0xffffffff8252fce0  syz-executor2866438
  768   766   766     0  S       nanslp  0xffffffff8252fce1  syz-executor2866438
  766   764   766     0  Ss      pause   0xfffff80026ef90b0  csh
  764   682   764     0  Ss      select  0xfffff8003f0cadc0  sshd
  742     1   742     0  Ss+     ttyin   0xfffff800046a1cb0  getty
  741     1   741     0  Ss+     ttyin   0xfffff8000499f0b0  getty
  740     1   740     0  Ss+     ttyin   0xfffff8000499f4b0  getty
  739     1   739     0  Ss+     ttyin   0xfffff8000499f8b0  getty
  738     1   738     0  Ss+     ttyin   0xfffff8000499fcb0  getty
  737     1   737     0  Ss+     ttyin   0xfffff800049950b0  getty
  736     1   736     0  Ss+     ttyin   0xfffff800049954b0  getty
  735     1   735     0  Ss+     ttyin   0xfffff800049958b0  getty
  734     1   734     0  Ss+     ttyin   0xfffff80004995cb0  getty
  686     1   686     0  Ss      nanslp  0xffffffff8252fce0  cron
  682     1   682     0  Ss      select  0xfffff80026eeea40  sshd
  495     1   495     0  Ss      select  0xfffff80026eeeac0  syslogd
  424     1   424     0  Ss      select  0xfffff80026ea6dc0  devd
  423     1   423    65  Ss      select  0xfffff80026eeec40  dhclient
  338     1   338     0  Ss      select  0xfffff80026eeecc0  dhclient
  335     1   335     0  Ss      select  0xfffff80026eeed40  dhclient
   23     0     0     0  DL      syncer  0xffffffff8261d0b8  [syncer]
   22     0     0     0  DL      vlruwt  0xfffff800049b3000  [vnlru]
   21     0     0     0  DL      (threaded)                  [bufdaemon]
100070                   D       qsleep  0xffffffff8261c180  [bufdaemon]
100077                   D       -       0xffffffff8200acc0  [bufspacedaemon-0]
100087                   D       sdflush 0xfffff800041818e8  [/ worker]
   20     0     0     0  DL      psleep  0xffffffff82643648  [vmdaemon]
   19     0     0     0  DL      (threaded)                  [pagedaemon]
100068                   D       psleep  0xffffffff82637ab8  [dom0]
100075                   D       launds  0xffffffff82637ac4  [laundry: dom0]
100076                   D       umarcl  0xffffffff814ec100  [uma]
   18     0     0     0  DL      -       0xffffffff823644f8  [rand_harvestq]
   17     0     0     0  DL      waiting 0xffffffff82c57818  [sctp_iterator]
   16     0     0     0  DL      pftm    0xffffffff82e47390  [pf purge]
   15     0     0     0  DL      -       0xffffffff8261b75c  [soaiod4]
    9     0     0     0  DL      -       0xffffffff8261b75c  [soaiod3]
    8     0     0     0  DL      -       0xffffffff8261b75c  [soaiod2]
    7     0     0     0  DL      -       0xffffffff8261b75c  [soaiod1]
    6     0     0     0  DL      (threaded)                  [cam]
100034                   D       -       0xffffffff8223c240  [doneq0]
100067                   D       -       0xffffffff8223c110  [scanner]
    5     0     0     0  DL      crypto_ 0xfffff80004189c90  [crypto returns 1]
    4     0     0     0  DL      crypto_ 0xfffff80004189c30  [crypto returns 0]
    3     0     0     0  DL      crypto_ 0xffffffff82634fb0  [crypto]
   14     0     0     0  DL      seqstat 0xfffff80004300488  [sequencer 00]
   13     0     0     0  DL      (threaded)                  [geom]
100025                   D       -       0xffffffff8250f8a0  [g_event]
100026                   D       -       0xffffffff8250f8a8  [g_up]
100027                   D       -       0xffffffff8250f8b0  [g_down]
    2     0     0     0  DL      (threaded)                  [KTLS]
100018                   D       -       0xfffff800042b3300  [thr_0]
100019                   D       -       0xfffff800042b3380  [thr_1]
   12     0     0     0  WL      (threaded)                  [intr]
100011                   I                                   [swi6: task queue]
100012                   I                                   [swi6: Giant taskq]
100016                   I                                   [swi5: fast taskq]
100020                   I                                   [swi1: netisr 0]
100021                   I                                   [swi4: clock (0)]
100022                   I                                   [swi4: clock (1)]
100023                   I                                   [swi3: vm]
100035                   I                                   [irq24: virtio_pci0]
100036                   I                                   [irq25: virtio_pci0]
100037                   I                                   [irq26: virtio_pci0]
100038                   I                                   [irq27: virtio_pci0]
100039                   I                                   [irq28: virtio_pci1]
100040                   I                                   [irq29: virtio_pci1]
100041                   I                                   [irq30: virtio_pci1]
100042                   I                                   [irq31: virtio_pci1]
100043                   I                                   [irq32: virtio_pci1]
100048                   I                                   [irq10: virtio_pci2]
100050                   I                                   [irq1: atkbd0]
100051                   I                                   [irq12: psm0]
100052                   I                                   [swi0: uart uart++]
100060                   I                                   [swi1: pf send]
100073                   I                                   [swi1: hpts]
100074                   I                                   [swi1: hpts]
   11     0     0     0  RL      (threaded)                  [idle]
100003                   CanRun                              [idle: cpu0]
100004                   CanRun                              [idle: cpu1]
    1     0     1     0  SLs     wait    0xfffff80004291528  [init]
   10     0     0     0  DL      audit_w 0xffffffff826354d0  [audit]
    0     0     0     0  DLs     (threaded)                  [kernel]
100000                   D       swapin  0xffffffff8250fe30  [swapper]
100005                   D       -       0xfffff800042b8e00  [if_io_tqg_0]
100006                   D       -       0xfffff800042b8d00  [if_io_tqg_1]
100007                   D       -       0xfffff800042b8c00  [if_config_tqg_0]
100008                   D       -       0xfffff800042b8b00  [softirq_0]
100009                   D       -       0xfffff800042b8a00  [softirq_1]
100010                   D       -       0xfffff80004183200  [inm_free taskq]
100013                   D       -       0xfffff800042bcb00  [aiod_kick taskq]
100014                   D       -       0xfffff800042bc900  [thread taskq]
100015                   D       -       0xfffff800042bc700  [in6m_free taskq]
100017                   D       -       0xfffff800042bc300  [kqueue_ctx taskq]
100024                   D       -       0xfffff800042cda00  [firmware taskq]
100029                   D       -       0xfffff800042cd300  [crypto_0]
100030                   D       -       0xfffff800042cd300  [crypto_1]
100044                   D       -       0xfffff80004340300  [vtnet0 rxq 0]
100045                   D       -       0xfffff80004340200  [vtnet0 txq 0]
100046                   D       -       0xfffff80004340100  [vtnet0 rxq 1]
100047                   D       -       0xfffff80004340000  [vtnet0 txq 1]
100049                   D       vtbslp  0xfffff80004486880  [virtio_balloon]
100053                   D       -       0xfffff800046ade00  [mca taskq]
100056                   D       -       0xffffffff81d1c4c0  [deadlkres]
100062                   D       -       0xfffff8000498fd00  [acpi_task_0]
100063                   D       -       0xfffff8000498fd00  [acpi_task_1]
100064                   D       -       0xfffff8000498fd00  [acpi_task_2]
100066                   D       -       0xfffff80004340b00  [CAM taskq]
db> show all locks
Process 833 (syz-executor2866438) thread 0xfffffe0025815000 (100226)
exclusive sx so_rcv_sx (so_rcv_sx) r = 0 (0xfffff8003f438518) locked @ /syzkaller/managers/main/kernel/sys/kern/uipc_sockbuf.c:467
Process 830 (syz-executor2866438) thread 0xfffffe0025816c00 (100223)
exclusive sleep mutex sctp-read (inpr) r = 0 (0xfffff8003f2d9ea8) locked @ /syzkaller/managers/main/kernel/sys/netinet/sctputil.c:6001
exclusive sx so_rcv_sx (so_rcv_sx) r = 0 (0xfffff8003f438168) locked @ /syzkaller/managers/main/kernel/sys/kern/uipc_sockbuf.c:467
db> show malloc
              Type        InUse        MemUse     Requests
           pf_hash            5        11524K            5
            devbuf         4214         4339K         4242
          tcp_hpts            5         3201K            5
             vtbuf           24         1968K           46
         sysctloid        29217         1704K        29281
              kobj          336         1344K          496
            newblk          501         1149K          562
          vfscache            3         1025K            3
               pcb           29          546K          197
          inodedep            4          514K           85
         ufs_quota            1          512K            1
          vfs_hash            1          512K            1
           callout            2          512K            2
              intr            4          472K            4
           subproc          106          225K          889
            acpica         1674          184K        52377
         vnet_data            1          168K            1
           tidhash            3          141K            3
           pagedep            2          129K           61
        tfo_ccache            1          128K            1
               sem            4          106K            4
            DEVFS1          101          101K          110
            linker          254           97K          282
               bus          979           79K         3034
          mtx_pool            2           72K            2
          syncache            1           68K            1
          acpitask            1           64K            1
       ddb_capture            1           64K            1
            module          507           64K          507
              umtx          270           34K          270
              temp           18           33K         1513
         hostcache            1           32K            1
               shm            1           32K            1
           kdtrace          162           31K         1842
               msg            4           30K            4
            DEVFS3          120           30K          130
        gtaskqueue           18           26K           18
              vmem            3           22K            4
            kbdmux            6           22K            6
        DEVFS_RULE           56           20K           56
               BPF           10           18K           10
         ufs_mount            5           17K            6
              proc            3           17K            3
               tty           16           16K           16
           ithread           99           16K           99
            bus-sc           30           14K         1415
            KTRACE          100           13K          100
            ifaddr           32           12K           32
              kenv           92           12K           92
      eventhandler          132           12K          132
              GEOM           60           10K          489
              rman           82           10K          423
              UART           12            9K           12
           devstat            4            9K            4
               rpc            2            8K            2
         bmsafemap            1            8K           43
             shmfd            1            8K            1
       pfs_vncache            1            8K            1
         pfs_nodes           20            8K           20
     audit_evclass          233            8K          291
         sctp_timw           26            7K           26
           CAM DEV            3            6K          510
            sglist            5            6K            5
         CAM queue            5            6K         1528
         taskqueue           48            6K           48
              cred           20            5K          233
       ufs_dirhash           24            5K           24
             ifnet            3            5K            3
                vt           11            5K           11
               UMA          254            5K          254
           memdesc            1            4K            1
               MCA           32            4K           32
            plimit           16            4K          323
          filedesc            1            4K            1
             evdev            4            4K            4
          routetbl           15            4K           15
             hhook           13            4K           13
            kqueue           51            4K          836
           pwddesc           51            4K          834
       ether_multi           40            4K           50
           lltable           11            4K           11
          pf_ifnet            5            3K            6
         sctp_atcl            8            3K          179
         in6_multi           25            3K           25
          terminal           11            3K           11
           acpisem           22            3K           22
           session           19            3K           31
              pgrp           19            3K           31
           uidinfo            3            3K            8
         sctp_stro            2            2K           59
        local_apic            1            2K            1
           io_apic            1            2K            1
         ipsec-saq            2            2K            2
             selfd           27            2K         9899
           CAM XPT           22            2K          543
             lockf           15            2K           22
         proc-args           36            2K          471
            Unitno           25            2K           37
       ipsecpolicy            2            2K            2
           acpidev           20            2K           20
               msi            9            2K            9
             clone            9            2K            9
         sctp_stri            2            1K          118
           softdep            1            1K            1
            sahead            1            1K            1
          secasvar            1            1K            1
       vnodemarker            2            1K           14
      NFSD session            1            1K            1
        CAM periph            4            1K          271
            select            7            1K           29
             ipsec            3            1K            3
          indirdep            3            1K            3
             nhops            6            1K            6
         toponodes            6            1K            6
            isadev            6            1K            6
             mount           16            1K           89
          pci_link           10            1K           10
          sctp_ifa            5            1K            7
            ip6ndp            4            1K            5
 encap_export_host           12            1K           12
            crypto            3            1K            3
          in_multi            2            1K            4
              pfil            4            1K            4
           CAM SIM            2            1K            2
              cdev            2            1K            2
         sctp_atky           10            1K          297
    chacha20random            1            1K            1
               osd            3            1K            9
          sctp_ifn            2            1K            7
               mld            2            1K            2
              igmp            2            1K            2
            vnodes            1            1K            1
              ktls            1            1K            1
               iov            2            1K        13141
      NFSD lckfile            1            1K            1
     NFSD V4client            1            1K            1
             DEVFS            9            1K           10
            feeder            7            1K            7
       inpcbpolicy            6            1K          131
        loginclass            3            1K            7
            prison            6            1K            6
         sctp_athm            8            1K          238
     CAM dev queue            2            1K            2
 CAM I/O Scheduler            1            1K            1
            apmdev            1            1K            1
          atkbddev            2            1K            2
          CAM path            4            1K         1034
          freework            1            1K           26
            diradd            1            1K           36
           tcpfunc            2            1K            2
          procdesc            1            1K            6
          pmchooks            1            1K            1
            DEVFSP            2            1K            2
            soname            4            1K         3169
               tun            3            1K            3
          nexusdev            5            1K            5
          sctp_vrf            1            1K            1
          sctp_map            4            1K          118
           entropy            2            1K           35
              vnet            1            1K            1
               pmc            1            1K            1
          acpiintr            1            1K            1
              cpus            2            1K            2
    vnet_data_free            1            1K            1
           Per-cpu            1            1K            1
          p1003.1b            1            1K            1
          filecaps            1            1K           63
          pf_table            0            0K            0
           pf_rule            0            0K            0
           pf_altq            0            0K            0
           pf_osfp            0            0K            0
           pf_temp            0            0K            0
        sctp_mcore            0            0K            0
        sctp_socko            0            0K          117
         sctp_iter            0            0K            3
         sctp_mvrf            0            0K            0
         sctp_cpal            0            0K            0
         sctp_cmsg            0            0K            0
         sctp_stre            0            0K            0
         sctp_athi            0            0K            0
         sctp_a_it            0            0K            3
         sctp_aadr            0            0K            0
            nvlist            0            0K            0
          SCSI ENC            0            0K            0
           SCSI sa            0            0K            0
        madt_table            0            0K            2
         scsi_pass            0            0K            0
         ciss_data            0            0K            0
          smartpqi            0            0K            0
            pvscsi            0            0K            0
           ath_hal            0            0K            0
            athdev            0            0K            0
           ata_pci            0            0K            0
           ata_dma            0            0K            0
       ata_generic            0            0K            0
               amr            0            0K            0
           scsi_da            0            0K           69
              iavf            0            0K            0
               ixl            0            0K            0
            ata_da            0            0K            0
           scsi_ch            0            0K            0
           scsi_cd            0            0K            0
            USBdev            0            0K            0
               USB            0            0K            0
       AHCI driver            0            0K            0
        ice-resmgr            0            0K            0
         ice-osdep            0            0K            0
               ice            0            0K            0
             axgbe            0            0K            0
       fpukern_ctx            0            0K            0
               agp            0            0K            0
          xen_intr            0            0K            0
           xen_hvm            0            0K            0
         legacydrv            0            0K            0
            qpidrv            0            0K            0
           nvme_da            0            0K            0
      dmar_idpgtbl            0            0K            0
          dmar_dom            0            0K            0
          dmar_ctx            0            0K            0
           acpipwr            0            0K            0
            twsbuf            0            0K            0
      twe_commands            0            0K            0
              isci            0            0K            0
      iommu_dmamap            0            0K            0
      twa_commands            0            0K            0
     hyperv_socket            0            0K            0
           bxe_ilt            0            0K            0
            xenbus            0            0K            0
       tcp_log_dev            0            0K            0
      midi buffers            0            0K            0
             mixer            0            0K            0
     vm_fictitious            0            0K            0
              ac97            0            0K            0
             hdacc            0            0K            0
              hdac            0            0K            0
              hdaa            0            0K            0
         acpi_perf            0            0K            0
         acpicmbat            0            0K            0
       SIIS driver            0            0K            0
           CAM CCB            0            0K         2031
           UMAHash            0            0K            0
         vm_pgdata            0            0K            0
           jblocks            0            0K            0
          savedino            0            0K           10
          sentinel            0            0K            0
            jfsync            0            0K            0
            jtrunc            0            0K            0
             sbdep            0            0K            4
           jsegdep            0            0K            0
              jseg            0            0K            0
         jfreefrag            0            0K            0
          jfreeblk            0            0K            0
           jnewblk            0            0K            0
            jmvref            0            0K            0
           jremref            0            0K            0
           jaddref            0            0K            0
           freedep            0            0K            0
         newdirblk            0            0K            8
            dirrem            0            0K           28
             mkdir            0            0K           16
          freefile            0            0K           26
          freeblks            0            0K           25
          freefrag            0            0K            7
        allocindir            0            0K            0
       allocdirect            0            0K            0
          ufs_trim            0            0K            0
           mactemp            0            0K            0
     audit_trigger            0            0K            0
 audit_pipe_presel            0            0K            0
     audit_pipeent            0            0K            0
        audit_pipe            0            0K            0
      audit_evname            0            0K            0
         audit_bsm            0            0K            0
      audit_gidset            0            0K            0
        audit_text            0            0K            0
        audit_path            0            0K            0
        audit_data            0            0K            0
        audit_cred            0            0K            0
             xform            0            0K            0
               NLM            0            0K            0
    ipsec-spdcache            0            0K            0
         ipsec-reg            0            0K            0
        ipsec-misc            0            0K            0
      ipsecrequest            0            0K            0
            ip6opt            0            0K            3
       ip6_msource            0            0K            0
      ip6_moptions            0            0K            0
       in6_mfilter            0            0K            0
             frag6            0            0K            0
            tcplog            0            0K            0
               PUC            0            0K            0
               LRO            0            0K            0
      newreno data            0            0K            0
        ip_msource            0            0K            0
       ip_moptions            0            0K            0
        in_mfilter            0            0K            0
              ipid            0            0K            0
         80211scan            0            0K            0
      80211ratectl            0            0K            0
        80211power            0            0K            0
       80211nodeie            0            0K            0
         80211node            0            0K            0
      80211mesh_gt            0            0K            0
      80211mesh_rt            0            0K            0
         80211perr            0            0K            0
         80211prep            0            0K            0
         80211preq            0            0K            0
          80211dfs            0            0K            0
       80211crypto            0            0K            0
          80211vap            0            0K            0
             iflib            0            0K            0
              vlan            0            0K            0
               gif            0            0K            0
           ifdescr            0            0K            0
              zlib            0            0K            0
           fadvise            0            0K            0
           VN POLL            0            0K            0
          ppbusdev            0            0K            0
            statfs            0            0K          197
     namei_tracker            0            0K            0
       export_host            0            0K            0
        cl_savebuf            0            0K            3
agtiapi_MemAlloc malloc            0            0K            0
    osti_cacheable            0            0K            0
          tempbuff            0            0K            0
          tempbuff            0            0K            0
ag_tgt_map_t malloc            0            0K            0
ag_slr_map_t malloc            0            0K            0
lDevFlags * malloc            0            0K            0
tiDeviceHandle_t * malloc            0            0K            0
ag_portal_data_t malloc            0            0K            0
ag_device_t malloc            0            0K            0
     STLock malloc            0            0K            0
          CCB List            0            0K            0
            sr_iov            0            0K            0
               OCS            0            0K            0
               OCS            0            0K            0
              nvme            0            0K            0
               nvd            0            0K            0
            netmap            0            0K            0
            mwldev            0            0K            0
        MVS driver            0            0K            0
            biobuf            0            0K            0
              aios            0            0K            0
               lio            0            0K            0
               acl            0            0K            0
          mbuf_tag            0            0K           27
              accf            0            0K            0
               pts            0            0K            0
          ioctlops            0            0K           84
           Witness            0            0K            0
             stack            0            0K            0
     CAM ccb queue            0            0K            0
          mrsasbuf            0            0K            0
          mpt_user            0            0K            0
          mps_user            0            0K            0
            MPSSAS            0            0K            0
              sbuf            0            0K          288
               mps            0            0K            0
          firmware            0            0K            0
        compressor            0            0K            0
          mpr_user            0            0K            0
              SWAP            0            0K            0
            MPRSAS            0            0K            0
               mpr            0            0K            0
         sysctltmp            0            0K          586
            sysctl            0            0K            1
            mfibuf            0            0K            0
              ekcd            0            0K            0
            dumper            0            0K            0
          sendfile            0            0K            0
              rctl            0            0K            0
        md_sectors            0            0K            0
           md_disk            0            0K            0
           malodev            0            0K            0
               LED            0            0K            0
             cache            0            0K            0
          ix_sriov            0            0K            0
          kcovinfo            0            0K            0
      prison_racct            0            0K            0
       Fail Points            0            0K            0
             sigio            0            0K            1
filedesc_to_leader            0            0K            0
               pwd            0            0K            0
       tty console            0            0K            0
        aacraidcam            0            0K            0
                ix            0            0K            0
            ipsbuf            0            0K            0
            iirbuf            0            0K            0
       aacraid_buf            0            0K            0
            aaccam            0            0K            0
        isofs_node            0            0K            0
       isofs_mount            0            0K            0
     tr_raid5_data            0            0K            0
    tr_raid1e_data            0            0K            0
     tr_raid1_data            0            0K            0
     tr_raid0_data            0            0K            0
    tr_concat_data            0            0K            0
       md_sii_data            0            0K            0
   md_promise_data            0            0K            0
    md_nvidia_data            0            0K            0
   md_jmicron_data            0            0K            0
     md_intel_data            0            0K            0
       md_ddf_data            0            0K            0
         raid_data            0            0K           72
     geom_flashmap            0            0K            0
         tmpfs dir            0            0K            0
        tmpfs name            0            0K            0
       tmpfs mount            0            0K            0
           NFS FHA            0            0K            0
         newnfsmnt            0            0K            0
  newnfsclient_req            0            0K            0
   NFSCL layrecall            0            0K            0
     NFSCL session            0            0K            0
     NFSCL sockreq            0            0K            0
     NFSCL devinfo            0            0K            0
     NFSCL flayout            0            0K            0
      NFSCL layout            0            0K            0
     NFSD rollback            0            0K            0
NFSCL diroffdiroff            0            0K            0
       NEWdirectio            0            0K            0
        NEWNFSnode            0            0K            0
         NFSCL lck            0            0K            0
      NFSCL lckown            0            0K            0
      NFSCL client            0            0K            0
       NFSCL deleg            0            0K            0
        NFSCL open            0            0K            0
       NFSCL owner            0            0K            0
            NFS fh            0            0K            0
           NFS req            0            0K            0
     NFSD usrgroup            0            0K            0
       NFSD string            0            0K            0
       NFSD V4lock            0            0K            0
      NFSD V4state            0            0K            0
     NFSD srvcache            0            0K            0
       msdosfs_fat            0            0K            0
     msdosfs_mount            0            0K            0
      msdosfs_node            0            0K            0
            DEVFS4            0            0K            0
            DEVFS2            0            0K            0
            gntdev            0            0K            0
       privcmd_dev            0            0K            0
        evtchn_dev            0            0K            0
          xenstore            0            0K            0
            aacbuf            0            0K            0
               xnb            0            0K            0
              xbbd            0            0K            0
               xbd            0            0K            0
           Balloon            0            0K            0
          sysmouse            0            0K            0
            vtfont            0            0K            0
              zstd            0            0K            0
db> show uma
              Zone   Size    Used    Free    Requests  Sleeps  Bucket  Total Mem    XFree
      mbuf_cluster   2048    9398       2        9398       0     254   19251200        0
       mbuf_packet    256    8192    1078       25823       0     254    2373120        0
          BUF TRIE    144     167   13301         661       0      62    1939392        0
        malloc-384    384    4138       2        4140       0      30    1589760        0
       malloc-4096   4096     336       1         496       0       2    1380352        0
        malloc-128    128   10396      51       10691       0     126    1337216        0
              pbuf    832       0     985           0       0       2     819520        0
       UMA Slabs 0    112    5490      15        5490       0     126     616560        0
         FFS inode   1128     483      14         510       0       8     560616        0
        RADIX NODE    144    2051     186       20206       0      62     322128        0
             VNODE    488     512      40         541       0      30     269376        0
      malloc-65536  65536       4       0           4       0       1     262144        0
      malloc-65536  65536       3       1          11       0       1     262144        0
         VM OBJECT    264     909      51       13126       0      30     253440        0
        256 Bucket   2048     112      10        6147       0       8     249856        0
            THREAD   1792     113      22         227       0       8     241920        0
       malloc-4096   4096      54       0        1286       0       2     221184        0
            DEVCTL   1024       0     208         109       0       0     212992        0
         malloc-16     16   12222     278       12397       0     254     200000        0
         malloc-64     64    2751      84        2775       0     254     181440        0
         UMA Zones    768     226       3         226       0      16     175872        0
        malloc-128    128    1126      83       24391       0     126     154752        0
              mbuf    256     385     215        3788       0     254     153600        0
         malloc-32     32    4768      20        4944       0     254     153216        0
        malloc-256    256     559      26         742       0      62     149760        0
      malloc-65536  65536       0       2          45       0       1     131072        0
      malloc-65536  65536       2       0           2       0       1     131072        0
       FFS2 dinode    256     483      12         509       0      62     126720        0
       malloc-1024   1024     113       3         123       0      16     118784        0
          ksiginfo    112      38    1006          55       0     126     116928        0
         MAP ENTRY     96     863     313       38061       0     126     112896        0
       S VFS Cache    104     966      87        1011       0     126     109512        0
       malloc-2048   2048       5      47        2093       0       8     106496        0
         vmem btag     56    1669      47        1669       0     254      96096        0
       malloc-4096   4096      23       0          34       0       2      94208        0
           VMSPACE   2544      28       5         812       0       4      83952        0
          UMA Kegs    384     212       1         212       0      30      81792        0
       malloc-8192   8192       6       3          34       0       1      73728        0
             g_bio    408       0     180        5778       0      30      73440        0
              PROC   1320      50       4         833       0       8      71280        0
      malloc-65536  65536       0       1         110       0       1      65536        0
      malloc-32768  32768       2       0           2       0       1      65536        0
         filedesc0   1072      51       5         834       0       8      60032        0
        malloc-256    256     162      63        1370       0      62      57600        0
      malloc-16384  16384       3       0           3       0       1      49152        0
      malloc-16384  16384       2       1           5       0       1      49152        0
       malloc-2048   2048       9      15         516       0       8      49152        0
        128 Bucket   1024      36      11        1252       0      16      48128        0
        malloc-128    128     305      67         435       0     126      47616        0
         32 Bucket    256      48     132         841       0      62      46080        0
         malloc-64     64     547     146       11626       0     254      44352        0
         malloc-64     64     523     170        1604       0     254      44352        0
        malloc-256    256     136      29         443       0      62      42240        0
           DIRHASH   1024      34       6          34       0      16      40960        0
   mbuf_jumbo_page   4096       0      10          10       0     254      40960        0
             NAMEI   1024       0      36       11551       0      16      36864        0
        malloc-384    384      61      29         232       0      30      34560        0
        malloc-384    384      75      15         366       0      30      34560        0
      malloc-32768  32768       1       0           1       0       1      32768        0
      malloc-32768  32768       0       1         112       0       1      32768        0
           pcpu-64     64     452      60         452       0     254      32768        0
            pcpu-8      8    3859     237        3863       0     254      32768        0
         64 Bucket    512      48       8         563       0      30      28672        0
        malloc-384    384       3      67          84       0      30      26880        0
        malloc-256    256      17      88         681       0      62      26880        0
            clpbuf    832       0      32         133       0      16      26624        0
            socket    944      18      10        1248       0     254      26432        0
       malloc-8192   8192       2       1           4       0       1      24576        0
       malloc-8192   8192       2       1          91       0       1      24576        0
       malloc-8192   8192       3       0           3       0       1      24576        0
            ttyinq    160     135      15         300       0      62      24000        0
        malloc-128    128     142      44         494       0     126      23808        0
             tcpcb   1048       3      19           7       0     254      23056        0
           ttyoutq    256      72      18         160       0      62      23040        0
         sctp_asoc   2288       2       8          59       0     254      22880        0
         TURNSTILE    136     136      32         136       0      62      22848        0
       malloc-4096   4096       4       1           7       0       2      20480        0
       malloc-2048   2048       5       5         261       0       8      20480        0
       malloc-1024   1024      18       2          18       0      16      20480        0
         malloc-64     64     249      66       12961       0     254      20160        0
         malloc-64     64     209     106        1833       0     254      20160        0
          8 Bucket     80      51     199        2936       0     126      20000        0
        malloc-128    128     121      34         168       0     126      19840        0
       Mountpoints   2752       2       5           2       0       4      19264        0
        malloc-256    256      52      23          53       0      62      19200        0
        malloc-256    256      57      18         471       0      62      19200        0
        malloc-256    256      35      40         423       0      62      19200        0
      malloc-16384  16384       1       0           1       0       1      16384        0
      malloc-16384  16384       1       0           1       0       1      16384        0
      malloc-16384  16384       0       1         136       0       1      16384        0
      malloc-16384  16384       1       0           1       0       1      16384        0
       malloc-8192   8192       2       0           2       0       1      16384        0
       malloc-8192   8192       2       0           2       0       1      16384        0
       malloc-8192   8192       2       0           2       0       1      16384        0
       malloc-4096   4096       3       1           4       0       2      16384        0
       malloc-4096   4096       1       3         201       0       2      16384        0
       malloc-1024   1024       4      12         101       0      16      16384        0
       malloc-1024   1024       6      10         857       0      16      16384        0
       malloc-1024   1024      14       2          14       0      16      16384        0
        sctp_raddr    736       2      20          59       0     254      16192        0
         malloc-32     32     283     221         524       0     254      16128        0
          4 Bucket     48       9     327       12596       0     254      16128        0
        malloc-128    128      95      29         775       0     126      15872        0
           sctp_ep   1280       4       8          61       0     254      15360        0
              pipe    744       6      14         278       0      16      14880        0
        SLEEPQUEUE     88     136      24         136       0     126      14080        0
       malloc-2048   2048       3       3          15       0       8      12288        0
       malloc-2048   2048       2       4           4       0       8      12288        0
       malloc-2048   2048       3       3         194       0       8      12288        0
        malloc-512    512       1      23         119       0      30      12288        0
          2 Bucket     32      50     328       10979       0     254      12096        0
             Files     80      69      81        6379       0     126      12000        0
         udp_inpcb    488       2      22         120       0     254      11712        0
             unpcb    256       7      38        1039       0     254      11520        0
        malloc-256    256      15      30         103       0      62      11520        0
       malloc-8192   8192       1       0           1       0       1       8192        0
       malloc-4096   4096       1       1           3       0       2       8192        0
       malloc-2048   2048       3       1           3       0       8       8192        0
       malloc-1024   1024       3       5           3       0      16       8192        0
       malloc-1024   1024       4       4         141       0      16       8192        0
       malloc-1024   1024       3       5          17       0      16       8192        0
        malloc-512    512       4      12           4       0      30       8192        0
        malloc-512    512       2      14         510       0      30       8192        0
        malloc-512    512       2      14          14       0      30       8192        0
        malloc-512    512       2      14         118       0      30       8192        0
        malloc-512    512       8       8           8       0      30       8192        0
           rtentry    176      14      32          18       0      62       8096        0
          rl_entry     40      31     171          31       0     254       8080        0
sctp_stream_msg_out    112       0      72          58       0     254       8064        0
             udpcb     32       2     250         120       0     254       8064        0
               PWD     32      10     242          98       0     254       8064        0
         malloc-64     64      11     115          24       0     254       8064        0
         malloc-64     64       2     124          37       0     254       8064        0
         malloc-64     64      32      94         225       0     254       8064        0
         malloc-32     32     100     152         255       0     254       8064        0
         malloc-32     32      46     206        1888       0     254       8064        0
         malloc-32     32      55     197         806       0     254       8064        0
         malloc-32     32       1     251          20       0     254       8064        0
         malloc-32     32      30     222        2646       0     254       8064        0
         16 Bucket    144      34      22         188       0      62       8064        0
      vtnet_tx_hdr     24       0     334        1365       0     254       8016        0
         malloc-16     16      16     484          46       0     254       8000        0
         malloc-16     16      28     472         286       0     254       8000        0
         malloc-16     16      47     453         733       0     254       8000        0
         malloc-16     16     183     317        1355       0     254       8000        0
         malloc-16     16       8     492           8       0     254       8000        0
         malloc-16     16     252     248         254       0     254       8000        0
         malloc-16     16      27     473       23586       0     254       8000        0
        malloc-128    128      15      47          71       0     126       7936        0
        malloc-128    128      44      18        3005       0     126       7936        0
        sctp_readq    152       1      51          58       0     254       7904        0
        sctp_chunk    152       3      49         117       0     254       7904        0
             ripcb    488       1      15           4       0     254       7808        0
         tcp_inpcb    488       3      13           7       0     254       7808        0
              kenv    258       3      27         997       0      30       7740        0
     routing nhops    256      11      19          18       0      62       7680        0
        malloc-384    384       4      16           5       0      30       7680        0
        malloc-384    384       9      11           9       0      30       7680        0
     FPU_save_area    832       1       8           1       0      16       7488        0
            cpuset    104       7      55           7       0     126       6448        0
 epoch_record pcpu    256       4      12           4       0      62       4096        0
       malloc-2048   2048       1       1          33       0       8       4096        0
        malloc-512    512       1       7           2       0      30       4096        0
        malloc-512    512       3       5          44       0      30       4096        0
           pcpu-16     16       7     249           7       0     254       4096        0
        sctp_laddr     48       0      84           4       0     254       4032        0
         hostcache     96       1      41           1       0     254       4032        0
          syncache    168       0      24           5       0     254       4032        0
         malloc-32     32       8     118          29       0     254       4032        0
             KNOTE    160       0      25           8       0      62       4000        0
       UMA Slabs 1    176       7      15           7       0      62       3872        0
        malloc-384    384       1       9           1       0      30       3840        0
        malloc-384    384       1       9           1       0      30       3840        0
        KMAP ENTRY     96      12      27          12       0       0       3744        0
              vmem   1856       1       1           1       0       8       3712        0
           SMR CPU     32       2      29           2       0     254        992        0
        SMR SHARED     24       2      29           2       0     254        744        0
       FFS1 dinode    128       0       0           0       0     126          0        0
             swblk    136       0       0           0       0      62          0        0
          swpctrie    144       0       0           0       0      62          0        0
   sctp_asconf_ack     48       0       0           0       0     254          0        0
       sctp_asconf     40       0       0           0       0     254          0        0
   pf state scrubs     40       0       0           0       0     254          0        0
   pf frag entries     40       0       0           0       0     254          0        0
          pf frags    248       0       0           0       0      62          0        0
  pf table entries    160       0       0           0       0      62          0        0
pf table entry counters     64       0       0           0       0     254          0        0
   pf source nodes    136       0       0           0       0     254          0        0
     pf state keys     88       0       0           0       0     126          0        0
         pf states    296       0       0           0       0     254          0        0
           pf tags    104       0       0           0       0     126          0        0
          pf mtags     48       0       0           0       0     254          0        0
       tcp_bbr_pcb    832       0       0           0       0      16          0        0
       tcp_bbr_map    128       0       0           0       0     126          0        0
     udplite_inpcb    488       0       0           0       0     254          0        0
      tcp_log_node    120       0       0           0       0     126          0        0
    tcp_log_bucket    176       0       0           0       0      62          0        0
           tcp_log    416       0       0           0       0     254          0        0
          tcpreass     48       0       0           0       0     254          0        0
tfo_ccache_entries     80       0       0           0       0     126          0        0
               tfo      4       0       0           0       0     254          0        0
          sackhole     32       0       0           0       0     254          0        0
             tcptw     88       0       0           0       0     254          0        0
               ipq     56       0       0           0       0     254          0        0
    IPsec SA lft_c     16       0       0           0       0     254          0        0
            itimer    352       0       0           0       0      30          0        0
            AIOLIO    272       0       0           0       0      30          0        0
             AIOCB    744       0       0           0       0      16          0        0
              AIOP     32       0       0           0       0     254          0        0
               AIO    208       0       0           0       0      62          0        0
        TMPFS node    224       0       0           0       0      62          0        0
           NCLNODE    592       0       0           0       0      16          0        0
     LTS VFS Cache    360       0       0           0       0      30          0        0
       L VFS Cache    320       0       0           0       0      30          0        0
     STS VFS Cache    144       0       0           0       0      62          0        0
    crypto_session     72       0       0           0       0     126          0        0
           cryptop    280       0       0           0       0      30          0        0
   IOMMU_MAP_ENTRY    120       0       0           0       0     126          0        0
      ktls_session    192       0       0           0       0      62          0        0
    mbuf_jumbo_16k  16384       0       0           0       0     254          0        0
     mbuf_jumbo_9k   9216       0       0           0       0     254          0        0
      audit_record   1280       0       0           0       0       8          0        0
         domainset     40       0       0           0       0     254          0        0
        MAC labels     40       0       0           0       0     254          0        0
            vnpbuf    832       0       0           0       0      62          0        0
            mdpbuf    832       0       0           0       0       4          0        0
           nfspbuf    832       0       0           0       0      16          0        0
            swwbuf    832       0       0           0       0       8          0        0
            swrbuf    832       0       0           0       0      16          0        0
          umtx_shm     88       0       0           0       0     126          0        0
           umtx pi     96       0       0           0       0     126          0        0
rangeset pctrie nodes    144       0       0           0       0      62          0        0
      malloc-65536  65536       0       0           0       0       1          0        0
      malloc-65536  65536       0       0           0       0       1          0        0
      malloc-65536  65536       0       0           0       0       1          0        0
      malloc-32768  32768       0       0           0       0       1          0        0
      malloc-32768  32768       0       0           0       0       1          0        0
      malloc-32768  32768       0       0           0       0       1          0        0
      malloc-32768  32768       0       0           0       0       1          0        0
      malloc-32768  32768       0       0           0       0       1          0        0
      malloc-16384  16384       0       0           0       0       1          0        0
      malloc-16384  16384       0       0           0       0       1          0        0
       malloc-4096   4096       0       0           0       0       2          0        0
           pcpu-32     32       0       0           0       0     254          0        0
            pcpu-4      4       0       0           0       0     254          0        0
            fakepg    104       0       0           0       0     126          0        0
          UMA Hash    256       0       0           0       0      62          0        0

Crashes (20):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2020/11/19 06:35 freebsd 7b82af2e8801 0767f13f console log report syz C ci-freebsd-main
2020/11/19 06:59 freebsd 7b82af2e8801 0767f13f console log report syz C ci-freebsd-i386
2021/07/02 05:35 freebsd-src 858937bea459 658ebc66 console log report ci-freebsd-main panic: About to free ctl:ADDR so:ADDR and its in 1
2021/06/24 03:47 freebsd-src f13da24715a7 fe4ab389 console log report ci-freebsd-main panic: About to free ctl:ADDR so:ADDR and its in 1
2021/06/14 14:32 freebsd-src efec757b2042 1ba81399 console log report ci-freebsd-main panic: About to free ctl:ADDR so:ADDR and its in 1
2021/03/30 05:52 freebsd-src 4d5460a720c5 6a81331a console log report ci-freebsd-main panic: About to free ctl:ADDR so:ADDR and its in 1
2021/02/19 07:52 freebsd-src 2f48313ab26e 14052202 console log report ci-freebsd-main panic: About to free ctl:ADDR so:ADDR and its in 1
2021/02/01 05:22 freebsd-src af885c57d65d fc9fd31e console log report ci-freebsd-main panic: About to free ctl:ADDR so:ADDR and its in 1
2021/07/05 05:21 freebsd-src 4060e77f49d1 55aa55c2 console log report ci-freebsd-i386 panic: About to free ctl:ADDR so:ADDR and its in 1
2021/06/22 09:09 freebsd-src d98a4eb807e9 aba2b2fb console log report ci-freebsd-i386 panic: About to free ctl:ADDR so:ADDR and its in 1
2021/06/22 04:46 freebsd-src d98a4eb807e9 aba2b2fb console log report ci-freebsd-i386 panic: About to free ctl:ADDR so:ADDR and its in 1
2020/12/14 07:12 freebsd 5bc600ddc13d b22a7ec3 console log report ci-freebsd-main
2020/12/12 12:34 freebsd 2aa5fca1f724 bca53db9 console log report ci-freebsd-main
2020/11/19 06:14 freebsd 7b82af2e8801 0767f13f console log report ci-freebsd-main
2022/02/05 18:19 freebsd-src 610b97ebaa91 a7dab638 console log report ci-freebsd-main panic: About to free ctl:ADDR so:ADDR and its in NUM
2022/01/27 06:01 freebsd-src d35991d32774 2cbffd88 console log report ci-freebsd-main panic: About to free ctl:ADDR so:ADDR and its in NUM
2022/01/10 23:41 freebsd-src ae13829ddce0 ddb0ab8c console log report ci-freebsd-main panic: About to free ctl:ADDR so:ADDR and its in NUM
2021/11/10 15:55 freebsd-src 2de49deeca0b 75b04091 console log report ci-freebsd-main panic: About to free ctl:ADDR so:ADDR and its in NUM
2021/10/16 20:02 freebsd-src 899a3b38f517 0c5d9412 console log report ci-freebsd-main panic: About to free ctl:ADDR so:ADDR and its in NUM
2021/01/15 06:07 freebsd-src 8818758a6ea7 65a7a854 console log report ci-freebsd-main
* Struck through repros no longer work on HEAD.