syzbot


Fatal trap 9: general protection fault in itimer_proc_continue

Status: fixed on 2021/09/01 04:22
Reported-by: syzbot+c40aa8bf54fe333fc50b@syzkaller.appspotmail.com
Fix commit: 3138392a46a4 itimer: Serialize access to the p_itimers array
First crash: 1062d, last: 1062d

Sample crash report:
Fatal trap 9: general protection fault while in kernel mode
cpuid = 0; apic id = 00
instruction pointer	= 0x20:0xffffffff810e50ca
stack pointer	        = 0x28:0xfffffe000377e800
frame pointer	        = 0x28:0xfffffe000377e850
code segment		= base 0x0, limit 0xfffff, type 0x1b
			= DPL 0, pres 1, long 1, def32 0, gran 1
processor eflags	= interrupt enabled, resume, IOPL = 0
current process		= 12 (swi4: clock (0))
trap number		= 9
panic: general protection fault
cpuid = 0
time = 1622374122
KDB: stack backtrace:
db_trace_self_wrapper() at db_trace_self_wrapper+0x47/frame 0xfffffe000377e4d0
vpanic() at vpanic+0x1c7/frame 0xfffffe000377e530
panic() at panic+0x43/frame 0xfffffe000377e590
trap_fatal() at trap_fatal+0x4cd/frame 0xfffffe000377e610
trap() at trap+0xf7/frame 0xfffffe000377e730
calltrap() at calltrap+0x8/frame 0xfffffe000377e730
--- trap 0x9, rip = 0xffffffff810e50ca, rsp = 0xfffffe000377e800, rbp = 0xfffffe000377e850 ---
itimer_proc_continue() at itimer_proc_continue+0x23a/frame 0xfffffe000377e850
tdsendsignal() at tdsendsignal+0x9ee/frame 0xfffffe000377e900
kern_psignal() at kern_psignal+0x9f/frame 0xfffffe000377e990
realitexpire() at realitexpire+0x26/frame 0xfffffe000377ea00
softclock_call_cc() at softclock_call_cc+0x1f7/frame 0xfffffe000377ead0
softclock() at softclock+0xb0/frame 0xfffffe000377eb10
ithread_loop() at ithread_loop+0x33f/frame 0xfffffe000377ebb0
fork_exit() at fork_exit+0xb3/frame 0xfffffe000377ebf0
fork_trampoline() at fork_trampoline+0xe/frame 0xfffffe000377ebf0
--- trap 0, rip = 0, rsp = 0, rbp = 0 ---
KDB: enter: panic
[ thread pid 12 tid 100031 ]
Stopped at      kdb_enter+0x67: movq    $0,0x1636bde(%rip)
db> 
db> set $lines = 0
db> set $maxwidth = 0
db> show registers
cs                        0x20
ds                        0x3b
es                        0x3b
fs                        0x13
gs                        0x1b
ss                        0x28
rax                       0x12
rcx                       0x80
rdx         0xffffffff819c9b1f
rbx                          0
rsp         0xfffffe000377e4b0
rbp         0xfffffe000377e4d0
rsi                        0x1
rdi                          0
r8                           0
r9          0x8080808080808080
r10         0xfffffe000377e3a0
r11              0x1fffcfff59c
r12         0xffffffff82267b90  ddb_dbbe
r13                          0
r14         0xffffffff81a7b763
r15         0xffffffff81a7b763
rip         0xffffffff811325a7  kdb_enter+0x67
rflags                    0x82
kdb_enter+0x67: movq    $0,0x1636bde(%rip)
db> show proc
Process 12 (intr) at 0xfffff80004c70a60:
 state: NORMAL
 uid: 0  gids: 0
 parent: pid 0 at 0xffffffff8271c6b0
 ABI: null
 flag: 0x10000284  flag2: 0
 reaper: 0xffffffff8271c6b0 reapsubtree: 12
 sigparent: 20
 vmspace: 0xffffffff8271d310
   (map 0xffffffff8271d310)
   (map.pmap 0xffffffff8271d3d0)
   (pmap 0xffffffff8271d430)
 threads: 23
100011                   I                                   [swi5: fast taskq]
100014                   I                                   [swi6: task queue]
100016                   I                                   [swi6: Giant taskq]
100030                   I                                   [swi3: vm]
100031                   Run     CPU 0                       [swi4: clock (0)]
100032                   I                                   [swi4: clock (1)]
100033                   I                                   [swi1: netisr 0]
100046                   I                                   [irq24: virtio_pci0]
100047                   I                                   [irq25: virtio_pci0]
100048                   I                                   [irq26: virtio_pci0]
100049                   I                                   [irq27: virtio_pci0]
100050                   I                                   [irq28: virtio_pci1]
100051                   I                                   [irq29: virtio_pci1]
100052                   I                                   [irq30: virtio_pci1]
100053                   I                                   [irq31: virtio_pci1]
100054                   I                                   [irq32: virtio_pci1]
100059                   I                                   [irq10: virtio_pci2]
100061                   I                                   [irq1: atkbd0]
100062                   I                                   [irq12: psm0]
100063                   I                                   [swi0: uart uart++]
100071                   I                                   [swi1: pf send]
100084                   I                                   [swi1: hpts]
100085                   I                                   [swi1: hpts]
db> ps
  pid  ppid  pgrp   uid  state   wmesg   wchan               cmd
 2074   792   792     0  RE      CPU 1                       syz-executor.1
 2072   787   787     0  R       (threaded)                  syz-executor.0
100233                   RunQ                                syz-executor.0
101418                   RunQ                                syz-executor.0
  973     1   973     0  Ss      select  0xfffff8003ba48a40  rtsol
  968     1   968     0  Ss      select  0xfffff8003bb16ec0  rtsol
  965     1   965     0  Ss      select  0xfffff8003ba7e2c0  rtsol
  960   810   436     0  S       kqread  0xfffff8003ba30500  rtsol
  810   801   436     0  S       wait    0xfffff80015daaa60  sh
  801   436   436     0  S       wait    0xfffff8003b5f3530  sh
  792   785   792     0  Rs                                  syz-executor.1
  789   785   789     0  Rs                                  syz-executor.2
  788   785   788     0  Rs                                  syz-executor.3
  787   785   787     0  Rs                                  syz-executor.0
  785   783   783     0  R       (threaded)                  syz-execprog
100119                   S       uwait   0xfffff8003b5f0300  syz-execprog
100120                   RunQ                                syz-execprog
100121                   S       uwait   0xfffff80015d8ff00  syz-execprog
100122                   RunQ                                syz-execprog
100124                   S       uwait   0xfffff8003b5f0700  syz-execprog
100125                   S       uwait   0xfffff8003b5f0900  syz-execprog
100126                   S       uwait   0xfffff8003b5fad00  syz-execprog
100127                   S       uwait   0xfffff8003b5faf00  syz-execprog
100128                   S       uwait   0xfffff8003b5f0100  syz-execprog
100129                   S       uwait   0xfffff8003b5f0b00  syz-execprog
  783   781   783     0  Ss      pause   0xfffff8003b573b10  csh
  781   694   781     0  Ss      select  0xfffff8003b413140  sshd
  760     1   760     0  Ss+     ttyin   0xfffff800154a3cb0  getty
  759     1   759     0  Ss+     ttyin   0xfffff80015b2a4b0  getty
  758     1   758     0  Ss+     ttyin   0xfffff80015b2acb0  getty
  757     1   757     0  Ss+     ttyin   0xfffff80015b2e4b0  getty
  756     1   756     0  Ss+     ttyin   0xfffff80015b2ecb0  getty
  755     1   755     0  Ss+     ttyin   0xfffff80015ab64b0  getty
  754     1   754     0  Ss+     ttyin   0xfffff80015ab6cb0  getty
  753     1   753     0  Ss+     ttyin   0xfffff80015aba4b0  getty
  752     1   752     0  Ss+     ttyin   0xfffff80015abacb0  getty
  750     1    24     0  S+      piperd  0xfffff80015dfe2e8  logger
  749   748    24     0  S+      nanslp  0xffffffff8273c8e0  sleep
  748     1    24     0  S+      wait    0xfffff8003b308a60  sh
  698     1   698     0  Ss      nanslp  0xffffffff8273c8e0  cron
  694     1   694     0  Ss      select  0xfffff80015f5e740  sshd
  507     1   507     0  Ss      select  0xfffff8003b3ea5c0  syslogd
  436     1   436     0  Ss      wait    0xfffff80015dff000  devd
  435     1   435    65  Ss      select  0xfffff8003b3aed40  dhclient
  350     1   350     0  Ss      select  0xfffff80015d83740  dhclient
  347     1   347     0  Ss      select  0xfffff80015dfa2c0  dhclient
   23     0     0     0  DL      vlruwt  0xfffff80015ccb530  [vnlru]
   22     0     0     0  DL      syncer  0xffffffff8282bcd0  [syncer]
   21     0     0     0  DL      (threaded)                  [bufdaemon]
100081                   D       qsleep  0xffffffff8282ada0  [bufdaemon]
100086                   D       -       0xffffffff8220ae80  [bufspacedaemon-0]
100099                   D       sdflush 0xfffff80015ebdce8  [/ worker]
   20     0     0     0  DL      psleep  0xffffffff82852c08  [vmdaemon]
   19     0     0     0  DL      (threaded)                  [pagedaemon]
100079                   D       psleep  0xffffffff82847078  [dom0]
100087                   D       launds  0xffffffff82847084  [laundry: dom0]
100088                   D       umarcl  0xffffffff815cfd40  [uma]
   18     0     0     0  DL      -       0xffffffff82570c88  [rand_harvestq]
   17     0     0     0  DL      waiting 0xffffffff82ff2828  [sctp_iterator]
   16     0     0     0  DL      pftm    0xffffffff830ec3c0  [pf purge]
   15     0     0     0  DL      -       0xffffffff8282845c  [soaiod4]
    9     0     0     0  DL      -       0xffffffff8282845c  [soaiod3]
    8     0     0     0  DL      -       0xffffffff8282845c  [soaiod2]
    7     0     0     0  DL      -       0xffffffff8282845c  [soaiod1]
    6     0     0     0  DL      (threaded)                  [cam]
100044                   D       -       0xffffffff82448140  [doneq0]
100045                   D       -       0xffffffff824480c0  [async]
100078                   D       -       0xffffffff82447f90  [scanner]
   14     0     0     0  DL      seqstat 0xfffff80004dec488  [sequencer 00]
    5     0     0     0  DL      crypto_ 0xfffff80004db6f80  [crypto returns 1]
    4     0     0     0  DL      crypto_ 0xfffff80004db6f30  [crypto returns 0]
    3     0     0     0  DL      crypto_ 0xffffffff82844560  [crypto]
   13     0     0     0  DL      (threaded)                  [geom]
100035                   D       -       0xffffffff8271c120  [g_event]
100036                   D       -       0xffffffff8271c128  [g_up]
100037                   D       -       0xffffffff8271c130  [g_down]
    2     0     0     0  DL      (threaded)                  [KTLS]
100028                   D       -       0xfffff80004440900  [thr_0]
100029                   D       -       0xfffff80004440980  [thr_1]
   12     0     0     0  RL      (threaded)                  [intr]
100011                   I                                   [swi5: fast taskq]
100014                   I                                   [swi6: task queue]
100016                   I                                   [swi6: Giant taskq]
100030                   I                                   [swi3: vm]
100031                   Run     CPU 0                       [swi4: clock (0)]
100032                   I                                   [swi4: clock (1)]
100033                   I                                   [swi1: netisr 0]
100046                   I                                   [irq24: virtio_pci0]
100047                   I                                   [irq25: virtio_pci0]
100048                   I                                   [irq26: virtio_pci0]
100049                   I                                   [irq27: virtio_pci0]
100050                   I                                   [irq28: virtio_pci1]
100051                   I                                   [irq29: virtio_pci1]
100052                   I                                   [irq30: virtio_pci1]
100053                   I                                   [irq31: virtio_pci1]
100054                   I                                   [irq32: virtio_pci1]
100059                   I                                   [irq10: virtio_pci2]
100061                   I                                   [irq1: atkbd0]
100062                   I                                   [irq12: psm0]
100063                   I                                   [swi0: uart uart++]
100071                   I                                   [swi1: pf send]
100084                   I                                   [swi1: hpts]
100085                   I                                   [swi1: hpts]
   11     0     0     0  RL      (threaded)                  [idle]
100003                   CanRun                              [idle: cpu0]
100004                   CanRun                              [idle: cpu1]
    1     0     1     0  SLs     wait    0xfffff80004bd7530  [init]
   10     0     0     0  DL      audit_w 0xffffffff82844a70  [audit]
    0     0     0     0  DLs     (threaded)                  [kernel]
100000                   D       swapin  0xffffffff8271c6b0  [swapper]
100005                   D       -       0xfffff80004c76d00  [if_io_tqg_0]
100006                   D       -       0xfffff80004c76900  [if_io_tqg_1]
100007                   D       -       0xfffff80004c76500  [if_config_tqg_0]
100008                   D       -       0xfffff80004c76100  [softirq_0]
100009                   D       -       0xfffff80004c73d00  [softirq_1]
100010                   D       -       0xfffff80004c72d00  [aiod_kick taskq]
100012                   D       -       0xfffff80004c72500  [kqueue_ctx taskq]
100013                   D       -       0xfffff80004c72100  [pci_hp taskq]
100015                   D       -       0xfffff80004c6a900  [inm_free taskq]
100017                   D       -       0xfffff80004c6a100  [linuxkpi_irq_wq]
100018                   D       -       0xfffff80004c65d00  [thread taskq]
100019                   D       -       0xfffff80004c65900  [in6m_free taskq]
100020                   D       -       0xfffff80004c65500  [linuxkpi_short_wq_0]
100021                   D       -       0xfffff80004c65500  [linuxkpi_short_wq_1]
100022                   D       -       0xfffff80004c65500  [linuxkpi_short_wq_2]
100023                   D       -       0xfffff80004c65500  [linuxkpi_short_wq_3]
100024                   D       -       0xfffff80004c65100  [linuxkpi_long_wq_0]
100025                   D       -       0xfffff80004c65100  [linuxkpi_long_wq_1]
100026                   D       -       0xfffff80004c65100  [linuxkpi_long_wq_2]
100027                   D       -       0xfffff80004c65100  [linuxkpi_long_wq_3]
100034                   D       -       0xfffff80004cccd00  [firmware taskq]
100038                   D       -       0xfffff80004ccc900  [crypto_0]
100039                   D       -       0xfffff80004ccc900  [crypto_1]
100055                   D       -       0xfffff80004ccc100  [vtnet0 rxq 0]
100056                   D       -       0xfffff800153e1d00  [vtnet0 txq 0]
100057                   D       -       0xfffff800153e1900  [vtnet0 rxq 1]
100058                   D       -       0xfffff800153e1500  [vtnet0 txq 1]
100060                   D       vtbslp  0xfffff8001545eb00  [virtio_balloon]
100064                   D       -       0xfffff800153e1100  [mca taskq]
100069                   D       -       0xffffffff81e283d0  [deadlkres]
100074                   D       -       0xfffff80015abcd00  [acpi_task_0]
100075                   D       -       0xfffff80015abcd00  [acpi_task_1]
100076                   D       -       0xfffff80015abcd00  [acpi_task_2]
100077                   D       -       0xfffff80004ccc500  [CAM taskq]
db> show all locks
Process 789 (syz-executor.2) thread 0xfffffe005570ee40 (100113)
exclusive lockmgr ufs (ufs) r = 0 (0xfffff8003bc3de70) locked @ /syzkaller/managers/main/kernel/sys/kern/vfs_subr.c:3008
exclusive lockmgr ufs (ufs) r = 0 (0xfffff8003ba085b0) locked @ /syzkaller/managers/main/kernel/sys/kern/vfs_cache.c:4463
Process 12 (intr) thread 0xfffffe00042be740 (100031)
exclusive sleep mutex process lock (process lock) r = 0 (0xfffff8003ba8c128) locked @ /syzkaller/managers/main/kernel/sys/kern/kern_mutex.c:211
db> show malloc
              Type        InUse        MemUse     Requests
         sysctloid        34288        12858K        34355
           pf_hash            5        11560K            5
            devbuf         4216         6982K         4241
          tcp_hpts            5         3219K            5
              kobj          328         2624K          488
             vtbuf           24         2064K           46
          inodedep         1240         1759K         1285
            newblk          447         1255K         1695
          vfscache            3         1035K            3
            acpica         1674          649K        54692
               pcb           31          632K         3301
            dirrem         1199          600K         1221
           subproc          135          541K         3347
           callout            2          528K            2
         ufs_quota            1          520K            1
          vfs_hash            1          520K            1
              intr            4          480K            4
          freefile         1204          452K         1213
               bus          990          378K         3485
            linker          348          270K          409
            DEVFS1          107          214K          124
          filedesc           14          211K         2454
            module          512          192K          512
         vnet_data            1          176K            1
           kdtrace          210          174K         3496
           tidhash            3          164K            3
              umtx          352          154K          352
           pagedep           21          146K         1223
        tfo_ccache            1          136K            1
               sem            4          120K            4
               UMA          270          102K          270
     audit_evclass          236           89K          294
          mtx_pool            2           80K            2
              temp           35           77K         1899
          syncache            1           76K            1
               BPF           14           70K           14
               msg            4           68K            4
          routetbl          120           66K          383
          acpitask            1           64K            1
       ddb_capture            1           64K            1
            DEVFS3          126           63K          136
            ifaddr           66           62K           68
       ether_multi          152           57K          162
        gtaskqueue           18           57K           18
              vmem            3           56K            4
        DEVFS_RULE           56           54K           56
              kenv           95           52K           95
      eventhandler          133           50K          133
           ithread           99           43K           99
              rman           84           42K          425
            kqueue           62           39K         2081
            KTRACE          100           38K          100
           lltable           43           37K           43
         taskqueue           60           36K           60
              proc            3           34K            3
         ufs_mount            5           34K            6
            bus-sc           33           34K         1696
           devstat            4           33K            4
         hostcache            1           32K            1
               tty           16           32K           16
               shm            1           32K            1
              GEOM           60           29K          489
         in6_multi           65           29K           65
            kbdmux            6           28K            6
             ifnet            7           25K            7
              cred           24           24K          235
           pwddesc           58           22K         2075
            plimit           21           21K          350
         CAM queue            5           21K         1528
         pfs_nodes           20           20K           20
         proc-args           49           19K          562
              UART           12           18K           12
         bmsafemap            2           17K         1256
              ksem            1           16K            1
               rpc            2           16K            2
             shmfd            1           16K            1
       pfs_vncache            1           16K            1
       ufs_dirhash           24           14K           24
           session           27           14K           38
            sglist            5           13K            5
               MCA           32           12K           32
            diradd           32           12K         1253
           CAM DEV            3           12K          510
             selfd           32           12K         7615
            Unitno           31           12K           47
                vt           11           11K           11
           acpisem           28           11K           28
           CAM XPT           22           11K          543
             mkdir           24            9K         2426
           uidinfo            3            9K            8
          pf_ifnet           10            9K           19
           memdesc            1            8K            1
         ipsec-saq            2            8K            2
             evdev            4            8K            4
           acpidev           20            8K           20
             hhook           15            8K           17
             mount           16            7K           90
       inpcbpolicy           17            7K          189
       fpukern_ctx            3            6K            3
         newdirblk           16            6K         1213
             lockf           15            6K           22
          terminal           11            6K           11
            ip6ndp           12            6K           14
          indirdep           10            5K           10
          sctp_ifa           13            5K           14
       ipsecpolicy            2            5K            2
 encap_export_host           12            5K           12
             clone            9            5K            9
               osd           11            5K           19
            select           11            5K           35
        local_apic            1            4K            1
           io_apic            1            4K            1
            sahead            1            4K            1
          secasvar            1            4K            1
             nhops            6            4K            8
          pci_link           10            4K           10
               msi            9            4K            9
             DEVFS            9            4K           10
               tun            7            4K            7
             ipsec            3            3K            3
            DEVFSP            8            3K           13
          in_multi            6            3K            8
          nexusdev            7            3K            7
            feeder            7            3K            7
          sctp_ifn            6            3K           14
               mld            6            3K            6
              igmp            6            3K            6
         toponodes            6            3K            6
            prison            6            3K            6
            isadev            6            3K            6
         sctp_atcl            2            2K         1606
           softdep            1            2K            1
       vnodemarker            2            2K           10
          procdesc            4            2K           10
      NFSD session            1            2K            1
             linux            5            2K            6
        CAM periph            4            2K          271
            crypto            4            2K            4
              pfil            4            2K            4
          CAM path            4            2K         1034
            soname            4            2K         3245
          filecaps            4            2K           78
           tcpfunc            3            2K            3
        loginclass            3            2K            7
    chacha20random            1            1K            1
            vnodes            1            1K            1
           CAM SIM            2            1K            2
              ktls            1            1K            1
              cdev            2            1K            2
        aesni_data            2            1K            2
         sctp_athm            2            1K         1606
         sctp_atky            2            1K         1606
              cpus            2            1K            2
          atkbddev            2            1K            2
     CAM dev queue            2            1K            2
             xform            2            1K           49
           entropy            2            1K           42
      NFSD lckfile            1            1K            1
     NFSD V4client            1            1K            1
          pmchooks            1            1K            1
          sctp_vrf            1            1K            1
            apmdev            1            1K            1
          freework            1            1K         1219
 CAM I/O Scheduler            1            1K            1
    vnet_data_free            1            1K            1
              vnet            1            1K            1
           Per-cpu            1            1K            1
          p1003.1b            1            1K            1
          acpiintr            1            1K            1
               pmc            1            1K            1
          pf_table            0            0K            0
           pf_rule            0            0K            0
           pf_altq            0            0K            0
           pf_osfp            0            0K            0
           pf_temp            0            0K            0
        sctp_mcore            0            0K            0
        sctp_socko            0            0K            0
         sctp_iter            0            0K            6
         sctp_mvrf            0            0K            0
         sctp_timw            0            0K            0
         sctp_cpal            0            0K            0
         sctp_cmsg            0            0K            0
         sctp_stre            0            0K            0
         sctp_athi            0            0K            0
         sctp_a_it            0            0K            6
         sctp_aadr            0            0K            0
         sctp_stro            0            0K            0
         sctp_stri            0            0K            0
          sctp_map            0            0K            0
            mqdata            0            0K            0
         htcp data            0            0K            0
        vegas data            0            0K            0
        dctcp data            0            0K            0
        cubic data            0            0K            0
          cdg data            0            0K            0
          chd data            0            0K            0
            tcp_do            0            0K            0
           tcp_fsb            0            0K            0
      NFSCL lckown            0            0K            0
      NFSCL client            0            0K            0
        madt_table            0            0K            2
          smartpqi            0            0K            0
       NFSCL deleg            0            0K            0
        NFSCL open            0            0K            0
       NFSCL owner            0            0K            0
            NFS fh            0            0K            0
           NFS req            0            0K            0
     NFSD usrgroup            0            0K            0
       NFSD string            0            0K            0
              iavf            0            0K            0
               ixl            0            0K            0
       NFSD V4lock            0            0K            0
      NFSD V4state            0            0K            0
     NFSD srvcache            0            0K            0
       msdosfs_fat            0            0K            0
     msdosfs_mount            0            0K            0
      msdosfs_node            0            0K            0
        ice-resmgr            0            0K            0
         ice-osdep            0            0K            0
               ice            0            0K            0
             axgbe            0            0K            0
            DEVFS4            0            0K            0
            DEVFS2            0            0K            0
            gntdev            0            0K            0
       privcmd_dev            0            0K            0
        evtchn_dev            0            0K            0
          xen_intr            0            0K            0
          xenstore            0            0K            0
         ciss_data            0            0K            0
           xen_hvm            0            0K            0
         legacydrv            0            0K            0
            qpidrv            0            0K            0
         BACKLIGHT            0            0K            0
               xnb            0            0K            0
      dmar_idpgtbl            0            0K            0
          dmar_dom            0            0K            0
          dmar_ctx            0            0K            0
              xbbd            0            0K            0
               xbd            0            0K            0
           Balloon            0            0K            0
              isci            0            0K            0
      iommu_dmamap            0            0K            0
          sysmouse            0            0K            0
     hyperv_socket            0            0K            0
           bxe_ilt            0            0K            0
            xenbus            0            0K            0
            vtfont            0            0K            0
     vm_fictitious            0            0K            0
           ath_hal            0            0K            0
            athdev            0            0K            0
           ata_pci            0            0K            0
           ata_dma            0            0K            0
       ata_generic            0            0K            0
               amr            0            0K            0
            pvscsi            0            0K            0
           scsi_da            0            0K           69
            ata_da            0            0K            0
           scsi_ch            0            0K            0
           UMAHash            0            0K            0
           scsi_cd            0            0K            0
       AHCI driver            0            0K            0
         vm_pgdata            0            0K            0
           jblocks            0            0K            0
          savedino            0            0K           24
          sentinel            0            0K            0
            jfsync            0            0K            0
            jtrunc            0            0K            0
             sbdep            0            0K            3
           jsegdep            0            0K            0
              jseg            0            0K            0
         jfreefrag            0            0K            0
          jfreeblk            0            0K            0
           jnewblk            0            0K            0
            jmvref            0            0K            0
           jremref            0            0K            0
           jaddref            0            0K            0
           freedep            0            0K            0
          freeblks            0            0K         1218
          freefrag            0            0K            5
        allocindir            0            0K            0
       allocdirect            0            0K            0
          ufs_trim            0            0K            0
           mactemp            0            0K            0
     audit_trigger            0            0K            0
 audit_pipe_presel            0            0K            0
     audit_pipeent            0            0K            0
        audit_pipe            0            0K            0
      audit_evname            0            0K            0
         audit_bsm            0            0K            0
      audit_gidset            0            0K            0
        audit_text            0            0K            0
        audit_path            0            0K            0
        audit_data            0            0K            0
        audit_cred            0            0K            0
            USBdev            0            0K            0
               USB            0            0K            0
               agp            0            0K            0
           nvme_da            0            0K            0
           acpipwr            0            0K            0
         acpi_perf            0            0K            0
          ktls_ocf            0            0K            0
            twsbuf            0            0K            0
        MLX5EEPROM            0            0K            0
        MLX5EEPROM            0            0K            0
        MLX5EEPROM            0            0K            0
        MLX5EEPROM            0            0K            0
         MLX5E_TLS            0            0K            0
        MLX5EEPROM            0            0K            0
        MLX5EEPROM            0            0K            0
        MLX5EEPROM            0            0K            0
            MLX5EN            0            0K            0
        MLX5EEPROM            0            0K            0
        MLX5EEPROM            0            0K            0
        MLX5EEPROM            0            0K            0
          MLX5DUMP            0            0K            0
        MLX5EEPROM            0            0K            0
        MLX5EEPROM            0            0K            0
          seq_file            0            0K            0
             radix            0            0K            0
               idr            0            0K            0
            lkpifw            0            0K            0
               NLM            0            0K            0
    ipsec-spdcache            0            0K            0
         ipsec-reg            0            0K            0
        ipsec-misc            0            0K            0
      ipsecrequest            0            0K            0
            ip6opt            0            0K            4
       ip6_msource            0            0K            0
      ip6_moptions            0            0K            0
       in6_mfilter            0            0K            0
             frag6            0            0K            0
            tcplog            0            0K            0
        tcp_hwpace            0            0K            0
      twe_commands            0            0K            0
               LRO            0            0K            0
      newreno data            0            0K            0
        ip_msource            0            0K            0
       ip_moptions            0            0K            0
        in_mfilter            0            0K            0
              ipid            0            0K            0
         80211scan            0            0K            0
      80211ratectl            0            0K            0
        80211power            0            0K            0
       80211nodeie            0            0K            0
         80211node            0            0K            0
      80211mesh_gt            0            0K            0
      80211mesh_rt            0            0K            0
         80211perr            0            0K            0
         80211prep            0            0K            0
         80211preq            0            0K            0
          80211dfs            0            0K            0
       80211crypto            0            0K            0
          80211vap            0            0K            0
             iflib            0            0K            0
              vlan            0            0K            0
               gif            0            0K            0
           ifdescr            0            0K            0
              zlib            0            0K            0
           fadvise            0            0K            0
           VN POLL            0            0K            0
      twa_commands            0            0K            0
            statfs            0            0K         1394
     namei_tracker            0            0K            0
       export_host            0            0K            0
        cl_savebuf            0            0K            4
       tcp_log_dev            0            0K            0
      midi buffers            0            0K            0
             mixer            0            0K            0
              ac97            0            0K            0
             hdacc            0            0K            0
              hdac            0            0K            0
              hdaa            0            0K            0
         acpicmbat            0            0K            0
       SIIS driver            0            0K            0
           CAM CCB            0            0K         1806
               PUC            0            0K            0
          ppbusdev            0            0K            0
agtiapi_MemAlloc malloc            0            0K            0
    osti_cacheable            0            0K            0
          tempbuff            0            0K            0
            biobuf            0            0K            0
              aios            0            0K            0
               lio            0            0K            0
               acl            0            0K            0
          tempbuff            0            0K            0
          mbuf_tag            0            0K           95
ag_tgt_map_t malloc            0            0K            0
ag_slr_map_t malloc            0            0K            0
lDevFlags * malloc            0            0K            0
tiDeviceHandle_t * malloc            0            0K            0
ag_portal_data_t malloc            0            0K            0
ag_device_t malloc            0            0K            0
     STLock malloc            0            0K            0
          CCB List            0            0K            0
            sr_iov            0            0K            0
               OCS            0            0K            0
               OCS            0            0K            0
              nvme            0            0K            0
               nvd            0            0K            0
            netmap            0            0K            0
            mwldev            0            0K            0
        MVS driver            0            0K            0
     CAM ccb queue            0            0K            0
          mrsasbuf            0            0K            0
          mpt_user            0            0K            0
          mps_user            0            0K            0
              accf            0            0K            0
               pts            0            0K            0
               iov            0            0K        13902
          ioctlops            0            0K           99
           eventfd            0            0K            0
           Witness            0            0K            0
             stack            0            0K            0
            MPSSAS            0            0K            0
               mps            0            0K            0
          mpr_user            0            0K            0
            MPRSAS            0            0K            0
               mpr            0            0K            0
            mfibuf            0            0K            0
              sbuf            0            0K          288
        md_sectors            0            0K            0
          firmware            0            0K            0
        compressor            0            0K            0
           md_disk            0            0K            0
              SWAP            0            0K            0
           malodev            0            0K            0
               LED            0            0K            0
         sysctltmp            0            0K          630
            sysctl            0            0K            3
              ekcd            0            0K            0
            dumper            0            0K            0
          sendfile            0            0K            0
              rctl            0            0K            0
          ix_sriov            0            0K            0
        aacraidcam            0            0K            0
       aacraid_buf            0            0K            0
                ix            0            0K            0
            ipsbuf            0            0K            0
             cache            0            0K            0
            iirbuf            0            0K            0
          kcovinfo            0            0K            0
      prison_racct            0            0K            0
       Fail Points            0            0K            0
             sigio            0            0K            1
filedesc_to_leader            0            0K            0
               pwd            0            0K            0
       tty console            0            0K            0
            aaccam            0            0K            0
            aacbuf            0            0K            0
              zstd            0            0K            0
            XZ_DEC            0            0K            0
            nvlist            0            0K            0
          SCSI ENC            0            0K            0
           SCSI sa            0            0K            0
         scsi_pass            0            0K            0
        isofs_node            0            0K            0
       isofs_mount            0            0K            0
     tr_raid5_data            0            0K            0
    tr_raid1e_data            0            0K            0
     tr_raid1_data            0            0K            0
     tr_raid0_data            0            0K            0
    tr_concat_data            0            0K            0
       md_sii_data            0            0K            0
   md_promise_data            0            0K            0
    md_nvidia_data            0            0K            0
   md_jmicron_data            0            0K            0
     md_intel_data            0            0K            0
       md_ddf_data            0            0K            0
         raid_data            0            0K           72
     geom_flashmap            0            0K            0
         tmpfs dir            0            0K            0
        tmpfs name            0            0K            0
       tmpfs mount            0            0K            0
           NFS FHA            0            0K            0
         newnfsmnt            0            0K            0
  newnfsclient_req            0            0K            0
   NFSCL layrecall            0            0K            0
     NFSCL session            0            0K            0
     NFSCL sockreq            0            0K            0
     NFSCL devinfo            0            0K            0
     NFSCL flayout            0            0K            0
      NFSCL layout            0            0K            0
     NFSD rollback            0            0K            0
      NFSCL diroff            0            0K            0
       NEWdirectio            0            0K            0
        NEWNFSnode            0            0K            0
         NFSCL lck            0            0K            0
db> show uma
              Zone   Size    Used    Free    Requests  Sleeps  Bucket  Total Mem    XFree
   mbuf_jumbo_page   4096    8320     797       12174       0     254   37343232        0
        malloc-384    384   34523      67       46606       0      30   13282560        0
       malloc-1024   1024    4178       2        4598       0      16    4280320        0
       malloc-8192   8192     329       3         492       0       1    2719744        0
              pbuf   2624       0     973           0       0       2    2553152        0
              mbuf    256    8631     744       14278       0     254    2400000        0
          BUF TRIE    144     176   13292         419       0      62    1939392        0
       UMA Slabs 0    112   11822      19       11822       0     126    1326192        0
       malloc-1024   1024    1280       4        1327       0      16    1314816        0
        malloc-384    384    2042       8       54292       0      30     787200        0
        malloc-384    384    1926      14        5406       0      30     744960        0
        malloc-512    512    1230      10        1540       0      30     634880        0
         FFS inode   1160     509      30        1723       0       8     625240        0
       malloc-8192   8192      62       6        2079       0       1     557056        0
        malloc-512    512     982      26        4197       0      30     516096        0
        malloc-384    384    1330      10        3769       0      30     514560        0
      malloc-32768  32768       7       6        1225       0       1     425984        0
        RADIX NODE    144    2534     207       54334       0      62     394704        0
      malloc-65536  65536       4       2         181       0       1     393216        0
            lkpimm    160       1    2324           1       0      62     372000        0
          lkpicurr    160       2    2323           2       0      62     372000        0
            THREAD   1808     151      25        1420       0       8     318208        0
         VM OBJECT    264    1088      82       31100       0      30     308880        0
             VNODE    448     544      95        1760       0      30     286272        0
      malloc-16384  16384      14       3         276       0       1     278528        0
        malloc-384    384     642      68       20837       0      30     272640        0
       malloc-2048   2048     119       9        1451       0       8     262144        0
        malloc-384    384     506      84        8399       0      30     226560        0
            DEVCTL   1024      13     203         132       0       0     221184        0
       malloc-1024   1024     177      35        1657       0      16     217088        0
         UMA Zones    768     242       2         242       0      16     187392        0
       malloc-4096   4096       5      34        2574       0       2     159744        0
         vmem btag     56    2476     104        2476       0     254     144480        0
        256 Bucket   2048      60      10        9966       0       8     143360        0
         MAP ENTRY     96    1172     298       66174       0     126     141120        0
       FFS2 dinode    256     509      16        1722       0      62     134400        0
       S VFS Cache    104    1002     285        2235       0     126     133848        0
      malloc-65536  65536       2       0           2       0       1     131072        0
      malloc-16384  16384       8       0           8       0       1     131072        0
       malloc-1024   1024      81      35        1278       0      16     118784        0
          ksiginfo    112      60     984         695       0     126     116928        0
       malloc-8192   8192      12       2          24       0       1     114688        0
           VMSPACE   2544      35      10        2053       0       4     114480        0
       malloc-8192   8192      11       2          16       0       1     106496        0
              PROC   1328      57      18        2074       0       8      99600        0
      malloc-32768  32768       2       1         147       0       1      98304        0
       malloc-1024   1024      87       5         112       0      16      94208        0
          UMA Kegs    384     227       6         227       0      30      89472        0
        malloc-384    384     225       5         243       0      30      88320        0
            clpbuf   2624       0      32          15       0      16      83968        0
         filedesc0   1072      58      19        2075       0       8      82544        0
       malloc-8192   8192       3       7        1607       0       1      81920        0
       malloc-8192   8192       5       4         659       0       1      73728        0
            socket    944      35      37        2955       0     254      67968        0
      mbuf_cluster   2048      30       2          30       0     254      65536        0
      malloc-65536  65536       1       0           1       0       1      65536        0
      malloc-65536  65536       1       0           1       0       1      65536        0
      malloc-65536  65536       1       0           1       0       1      65536        0
      malloc-32768  32768       2       0           2       0       1      65536        0
      malloc-32768  32768       2       0           2       0       1      65536        0
      malloc-16384  16384       3       1          10       0       1      65536        0
      malloc-16384  16384       4       0           4       0       1      65536        0
       malloc-2048   2048      15      17         523       0       8      65536        0
             g_bio    408       0     160        4725       0      30      65280        0
       malloc-1024   1024      19      37        1712       0      16      57344        0
           sctp_ep   1280       2      40        1606       0     254      53760        0
        128 Bucket   1024      23      28         186       0      16      52224        0
       malloc-4096   4096       4       8          26       0       2      49152        0
       malloc-4096   4096      10       2         201       0       2      49152        0
         32 Bucket    256      72     108       15920       0      62      46080        0
       malloc-2048   2048      21       1          21       0       8      45056        0
       malloc-1024   1024      10      34        1616       0      16      45056        0
           DIRHASH   1024      34       6          34       0      16      40960        0
       malloc-4096   4096       5       5          86       0       2      40960        0
       malloc-1024   1024      35       5         975       0      16      40960        0
        malloc-512    512      50      30        2505       0      30      40960        0
            pcpu-8      8    4628     492        4784       0     254      40960        0
             NAMEI   1024       0      36       17900       0      16      36864        0
        malloc-512    512      41      31         572       0      30      36864        0
        malloc-512    512      14      58         270       0      30      36864        0
      malloc-16384  16384       2       0           2       0       1      32768        0
      malloc-16384  16384       2       0           2       0       1      32768        0
       malloc-8192   8192       1       3        1395       0       1      32768        0
           pcpu-64     64     487      25         487       0     254      32768        0
       malloc-4096   4096       7       0           7       0       2      28672        0
         64 Bucket    512      42      14        2334       0      30      28672        0
         TURNSTILE    136     177      12         177       0      62      25704        0
       malloc-4096   4096       6       0           6       0       2      24576        0
        malloc-512    512      40       8        1305       0      30      24576        0
               PWD     32      16     740        1304       0     254      24192        0
            ttyinq    160     135      15         300       0      62      24000        0
           ttyoutq    256      72      18         160       0      62      23040        0
              pipe    744      20      10         342       0      16      22320        0
          2 Bucket     32      85     545        1419       0     254      20160        0
            itimer    352       1      54        1889       0      30      19360        0
       Mountpoints   2752       2       5           2       0       4      19264        0
        SLEEPQUEUE     88     177      15         177       0     126      16896        0
      malloc-16384  16384       1       0           1       0       1      16384        0
      malloc-16384  16384       1       0           1       0       1      16384        0
        malloc-512    512      29       3         931       0      30      16384        0
             Files     80     132      68       10141       0     126      16000        0
        malloc-384    384      31       9          36       0      30      15360        0
             tcpcb   1064       7       7           7       0     254      14896        0
       malloc-2048   2048       2       4          11       0       8      12288        0
             KNOTE    160      29      46        7830       0      62      12000        0
          8 Bucket     80      37     113         559       0     126      12000        0
         udp_inpcb    488       6      18         175       0     254      11712        0
              kenv    258      15      30        1034       0      30      11610        0
             unpcb    256      14      31        1134       0     254      11520        0
       malloc-8192   8192       1       0           1       0       1       8192        0
       malloc-4096   4096       0       2          16       0       2       8192        0
       malloc-4096   4096       2       0           2       0       2       8192        0
       malloc-2048   2048       3       1           3       0       8       8192        0
        malloc-512    512       3      13           3       0      30       8192        0
           rtentry    176      29      17          33       0      62       8096        0
              PGRP     88      27      65          38       0     126       8096        0
    ertt_txseginfo     40       0     202         175       0     254       8080        0
          rl_entry     40      41     161          41       0     254       8080        0
        sctp_laddr     48       0     168          12       0     254       8064        0
             udpcb     32       6     246         175       0     254       8064        0
              ertt     72       7     105           7       0     126       8064        0
         16 Bucket    144      49       7        1676       0      62       8064        0
          4 Bucket     48       6     162          82       0     254       8064        0
      vtnet_tx_hdr     24       0     334         967       0     254       8016        0
             ripcb    488       4      12           7       0     254       7808        0
         tcp_inpcb    488       7       9           7       0     254       7808        0
     routing nhops    256      26       4          33       0      62       7680        0
       mbuf_packet    256       0      30         121       0     254       7680        0
     FPU_save_area    832       1       8           1       0      16       7488        0
            cpuset    104       7      55           7       0     126       6448        0
 epoch_record pcpu    256       4      12           4       0      62       4096        0
       malloc-2048   2048       2       0           2       0       8       4096        0
       malloc-2048   2048       2       0           2       0       8       4096        0
           pcpu-16     16       7     249           7       0     254       4096        0
          syncache    168       0      24           5       0     254       4032        0
       UMA Slabs 1    176       9      13           9       0      62       3872        0
            mqnode    416       3       6           3       0      30       3744        0
        KMAP ENTRY     96      12      27          12       0       0       3744        0
              vmem   1856       1       1           1       0       8       3712        0
           SMR CPU     32       3      60           3       0     254       2016        0
        SMR SHARED     24       3      60           3       0     254       1512        0
       FFS1 dinode    128       0       0           0       0     126          0        0
            da_ccb    544       0       0           0       0      16          0        0
           ada_ccb    272       0       0           0       0      30          0        0
             swblk    136       0       0           0       0      62          0        0
          swpctrie    144       0       0           0       0      62          0        0
   sctp_asconf_ack     48       0       0           0       0     254          0        0
       sctp_asconf     40       0       0           0       0     254          0        0
sctp_stream_msg_out    112       0       0           0       0     254          0        0
        sctp_readq    152       0       0           0       0     254          0        0
        sctp_chunk    152       0       0           0       0     254          0        0
        sctp_raddr    736       0       0           0       0     254          0        0
         sctp_asoc   2288       0       0           0       0     254          0        0
   cdg_qdiffsample     16       0       0           0       0     254          0        0
   pf state scrubs     40       0       0           0       0     254          0        0
   pf frag entries     40       0       0           0       0     254          0        0
          pf frags    248       0       0           0       0      62          0        0
  pf table entries    160       0       0           0       0      62          0        0
pf table entry counters     64       0       0           0       0     254          0        0
   pf source nodes    136       0       0           0       0     254          0        0
     pf state keys     88       0       0           0       0     126          0        0
         pf states    304       0       0           0       0     254          0        0
           pf tags    104       0       0           0       0     126          0        0
          pf mtags     48       0       0           0       0     254          0        0
      tcp_rack_pcb    832       0       0           0       0      16          0        0
      tcp_rack_map    112       0       0           0       0     126          0        0
       tcp_bbr_pcb    832       0       0           0       0      16          0        0
       tcp_bbr_map    128       0       0           0       0     126          0        0
     udplite_inpcb    488       0       0           0       0     254          0        0
      tcp_log_node    120       0       0           0       0     126          0        0
    tcp_log_bucket    176       0       0           0       0      62          0        0
           tcp_log    416       0       0           0       0     254          0        0
          tcpreass     48       0       0           0       0     254          0        0
tfo_ccache_entries     80       0       0           0       0     126          0        0
               tfo      4       0       0           0       0     254          0        0
          sackhole     32       0       0           0       0     254          0        0
         hostcache     64       0       0           0       0     254          0        0
             tcptw     88       0       0           0       0     254          0        0
               ipq     56       0       0           0       0     254          0        0
    IPsec SA lft_c     16       0       0           0       0     254          0        0
            AIOLIO    272       0       0           0       0      30          0        0
             AIOCB    552       0       0           0       0      16          0        0
              AIOP     32       0       0           0       0     254          0        0
               AIO    208       0       0           0       0      62          0        0
           NCLNODE    584       0       0           0       0      16          0        0
        TMPFS node    224       0       0           0       0      62          0        0
        mqnotifier    216       0       0           0       0      62          0        0
            mvdata     64       0       0           0       0     254          0        0
            mqueue    248       0       0           0       0      62          0        0
     LTS VFS Cache    360       0       0           0       0      30          0        0
       L VFS Cache    320       0       0           0       0      30          0        0
     STS VFS Cache    144       0       0           0       0      62          0        0
           cryptop    280       0       0           0       0      30          0        0
  linux_dma_object     24       0       0           0       0     254          0        0
  linux_dma_pctrie    144       0       0           0       0      62          0        0
   IOMMU_MAP_ENTRY    120       0       0           0       0     126          0        0
      ktls_session    128       0       0           0       0     126          0        0
    mbuf_jumbo_16k  16384       0       0           0       0     254          0        0
     mbuf_jumbo_9k   9216       0       0           0       0     254          0        0
      audit_record   1280       0       0           0       0       8          0        0
         domainset     40       0       0           0       0     254          0        0
        MAC labels     40       0       0           0       0     254          0        0
            vnpbuf   2624       0       0           0       0      64          0        0
            mdpbuf   2624       0       0           0       0       3          0        0
           nfspbuf   2624       0       0           0       0      16          0        0
            swwbuf   2624       0       0           0       0       8          0        0
            swrbuf   2624       0       0           0       0      16          0        0
          umtx_shm     88       0       0           0       0     126          0        0
           umtx pi     96       0       0           0       0     126          0        0
rangeset pctrie nodes    144       0       0           0       0      62          0        0
      malloc-65536  65536       0       0           0       0       1          0        0
      malloc-65536  65536       0       0           0       0       1          0        0
      malloc-65536  65536       0       0           0       0       1          0        0
      malloc-32768  32768       0       0           0       0       1          0        0
      malloc-32768  32768       0       0           0       0       1          0        0
      malloc-32768  32768       0       0           0       0       1          0        0
      malloc-32768  32768       0       0           0       0       1          0        0
       malloc-2048   2048       0       0           0       0       8          0        0
        malloc-256    256       0       0           0       0      62          0        0
        malloc-256    256       0       0           0       0      62          0        0
        malloc-256    256       0       0           0       0      62          0        0
        malloc-256    256       0       0           0       0      62          0        0
        malloc-256    256       0       0           0       0      62          0        0
        malloc-256    256       0       0           0       0      62          0        0
        malloc-256    256       0       0           0       0      62          0        0
        malloc-256    256       0       0           0       0      62          0        0
        malloc-128    128       0       0           0       0     126          0        0
        malloc-128    128       0       0           0       0     126          0        0
        malloc-128    128       0       0           0       0     126          0        0
        malloc-128    128       0       0           0       0     126          0        0
        malloc-128    128       0       0           0       0     126          0        0
        malloc-128    128       0       0           0       0     126          0        0
        malloc-128    128       0       0           0       0     126          0        0
        malloc-128    128       0       0           0       0     126          0        0
         malloc-64     64       0       0           0       0     254          0        0
         malloc-64     64       0       0           0       0     254          0        0
         malloc-64     64       0       0           0       0     254          0        0
         malloc-64     64       0       0           0       0     254          0        0
         malloc-64     64       0       0           0       0     254          0        0
         malloc-64     64       0       0           0       0     254          0        0
         malloc-64     64       0       0           0       0     254          0        0
         malloc-64     64       0       0           0       0     254          0        0
         malloc-32     32       0       0           0       0     254          0        0
         malloc-32     32       0       0           0       0     254          0        0
         malloc-32     32       0       0           0       0     254          0        0
         malloc-32     32       0       0           0       0     254          0        0
         malloc-32     32       0       0           0       0     254          0        0
         malloc-32     32       0       0           0       0     254          0        0
         malloc-32     32       0       0           0       0     254          0        0
         malloc-32     32       0       0           0       0     254          0        0
         malloc-16     16       0       0           0       0     254          0        0
         malloc-16     16       0       0           0       0     254          0        0
         malloc-16     16       0       0           0       0     254          0        0
         malloc-16     16       0       0           0       0     254          0        0
         malloc-16     16       0       0           0       0     254          0        0
         malloc-16     16       0       0           0       0     254          0        0
         malloc-16     16       0       0           0       0     254          0        0
         malloc-16     16       0       0           0       0     254          0        0
           pcpu-32     32       0       0           0       0     254          0        0
            pcpu-4      4       0       0           0       0     254          0        0
            fakepg    104       0       0           0       0     126          0        0
          UMA Hash    256       0       0           0       0      62          0        0

Crashes (2):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2021/05/30 11:32 freebsd-src 2b9a828c9949 325a8dab console log report syz ci-freebsd-main Fatal trap 9: general protection fault in itimer_proc_continue
2021/05/30 11:17 freebsd-src 2b9a828c9949 325a8dab console log report ci-freebsd-main Fatal trap 9: general protection fault in itimer_proc_continue
* Struck through repros no longer work on HEAD.