syzbot


Fatal trap 12: page fault in knlist_remove_kq

Status: fixed on 2021/09/02 07:46
Reported-by: syzbot+a9c04bc76078a3b7dd8d@syzkaller.appspotmail.com
Fix commit: c511383de7a0 kevent: Fix races between timer detach and kqtimer_proc_continue()
First crash: 596d, last: 587d
similar bugs (1):
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
freebsd Fatal trap NUM: page fault in knlist_remove_kq 1 229d 229d 0/2 auto-obsoleted due to no activity on 2022/09/20 07:08

Sample crash report:
#12 0xffffffff810bb022 at sigexitFatal trap 12: page fault while in kernel mode
+0x162
#13 0xffffffff810bca71 acpuid = 1; apic id = 01
fault virtual address	= 0x8
fault code		= supervisor read data, page not present
instruction pointer	= 0x20:0xffffffff81039328
t postsig+0x231
#14 0xffffffff8stack pointer	        = 0x28:0xfffffe00517f94c0
frame pointer	        = 0x28:0xfffffe00517f94f0
code segment		= base 0x0, limit 0xfffff, type 0x1b
			= DPL 0, pres 1, long 1, def32 0, gran 1
processor eflags	= interrupt enabled, resume, IOPL = 0
current process		= 4062 (syz-executor.1)
trap number		= 12
panic: page fault
cpuid = 1
time = 1624886981
KDB: stack backtrace:
db_trace_self_wrapper() at db_trace_self_wrapper+0x47/frame 0xfffffe00517f9110
vpanic() at vpanic+0x1cc/frame 0xfffffe00517f9170
panic() at panic+0x43/frame 0xfffffe00517f91d0
trap_fatal() at trap_fatal+0x4cd/frame 0xfffffe00517f9250
trap_pfault() at trap_pfault+0xdb/frame 0xfffffe00517f92d0
trap() at trap+0x398/frame 0xfffffe00517f93f0
calltrap() at calltrap+0x8/frame 0xfffffe00517f93f0
--- trap 0xc, rip = 0xffffffff81039328, rsp = 0xfffffe00517f94c0, rbp = 0xfffffe00517f94f0 ---
knlist_remove_kq() at knlist_remove_kq+0xf8/frame 0xfffffe00517f94f0
kqueue_drain() at kqueue_drain+0x394/frame 0xfffffe00517f9540
kqueue_close() at kqueue_close+0x9d/frame 0xfffffe00517f9590
_fdrop() at _fdrop+0x3a/frame 0xfffffe00517f95c0
closef() at closef+0x28b/frame 0xfffffe00517f9650
fdescfree_fds() at fdescfree_fds+0x194/frame 0xfffffe00517f96b0
fdescfree() at fdescfree+0x5c2/frame 0xfffffe00517f9780
exit1() at exit1+0x731/frame 0xfffffe00517f97f0
sigexit() at sigexit+0x162/frame 0xfffffe00517f9ac0
postsig() at postsig+0x231/frame 0xfffffe00517f9b90
ast() at ast+0x91b/frame 0xfffffe00517f9bf0
doreti_ast() at doreti_ast+0x1f/frame 0x7fffdfffdf00
KDB: enter: panic
[ thread pid 4062 tid 101236 ]
Stopped at      kdb_enter+0x67: movq    $0,0x164086e(%rip)
db> 
db> set $lines = 0
db> set $maxwidth = 0
db> show registers
cs                        0x20
ds                        0x3b
es                        0x3b
fs                        0x13
gs                        0x1b
ss                        0x28
rax                       0x12
rcx         0xffffffff81132000  vprintf+0x140
rdx                        0x1
rbx                          0
rsp         0xfffffe00517f90f0
rbp         0xfffffe00517f9110
rsi                          0
rdi         0xffffffff81132036  vprintf+0x176
r8                           0
r9          0x8080808080808080
r10         0xfffffe00517f8fe0
r11              0x1ffaefff59c
r12         0xffffffff82267d30  ddb_dbbe
r13         0xffffffff81981b00
r14         0xffffffff81a7500b
r15         0xffffffff81a7500b
rip         0xffffffff81129097  kdb_enter+0x67
rflags                    0x86
kdb_enter+0x67: movq    $0,0x164086e(%rip)
db> show proc
Process 4062 (syz-executor.1) at 0xfffff8003caf0000:
 state: NORMAL
 uid: 0  gids: 0, 0, 5
 parent: pid 1 at 0xfffff80004bda530
 ABI: FreeBSD ELF64
 flag: 0x10002000  flag2: 0
 arguments: /root/syz-executor.1
 reaper: 0xfffff80004bda530 reapsubtree: 1
 sigparent: 20
 vmspace: 0xfffffe0095552000
   (map 0xfffffe0095552000)
   (map.pmap 0xfffffe00955520c0)
   (pmap 0xfffffe0095552120)
 threads: 1
101236                   Run     CPU 1                       syz-executor.1
db> ps
  pid  ppid  pgrp   uid  state   wmesg   wchan               cmd
17782   790   790     0  T       (threaded)                  syz-executor.2
128731                   s                                   syz-executor.2
128772                   RunQ                                syz-executor.2
128779                   RunQ                                syz-executor.2
17772   782   782     0  T       (threaded)                  syz-executor.0
128743                   s                                   syz-executor.0
128769                   RunQ                                syz-executor.0
128771                   RunQ                                syz-executor.0
17515     1 17512     0  RE+                                 sh
16616     1   783     0  T                                   syz-executor.1
16614     1   783     0  T                                   syz-executor.1
16612     1   783     0  T                                   syz-executor.1
16604     1   798     0  T                                   syz-executor.3
16601     1   782     0  T                                   syz-executor.0
16598     1   782     0  T                                   syz-executor.0
16597     1   798     0  T                                   syz-executor.3
16595     1   782     0  T                                   syz-executor.0
16590     1   798     0  T                                   syz-executor.3
16589     1   798     0  T                                   syz-executor.3
12628     1   798     0  RE                                  syz-executor.3
 7571     1   790     0  RE                                  syz-executor.2
 4062     1   783     0  RE      CPU 1                       syz-executor.1
 4057     1   783     0  RE      CPU 0                       syz-executor.1
 4054     1   783     0  R                                   syz-executor.1
 4052     1   783     0  R                                   syz-executor.1
 4050     1   783     0  R                                   syz-executor.1
 3509     1  3509     0  Rs                                  dhclient
 3490     1  3490    65  Rs                                  dhclient
 2914     1  2914     0  Rs                                  dhclient
 2895     1  2895    65  Rs                                  dhclient
 2254     1  2254     0  Rs                                  dhclient
 2251     1  2251     0  Rs                                  dhclient
 2223     1  2223    65  Rs                                  dhclient
 1685     1   798     0  R                                   syz-executor.3
 1674     1   798     0  R                                   syz-executor.3
 1669     1   782     0  R                                   syz-executor.0
 1663     1   790     0  R                                   syz-executor.2
 1656     1   798     0  R                                   syz-executor.3
 1653     1   782     0  R                                   syz-executor.0
 1649     1   790     0  R                                   syz-executor.2
 1646     1   783     0  R                                   syz-executor.1
 1644     1   798     0  R                                   syz-executor.3
 1641     1   782     0  R                                   syz-executor.0
 1637     1   790     0  R                                   syz-executor.2
 1634     1   783     0  R                                   syz-executor.1
 1632     1   798     0  R                                   syz-executor.3
 1629     1   782     0  R                                   syz-executor.0
 1625     1   790     0  R                                   syz-executor.2
 1622     1   783     0  R                                   syz-executor.1
 1620     1   798     0  R                                   syz-executor.3
 1617     1   782     0  R                                   syz-executor.0
 1612     1   790     0  R                                   syz-executor.2
 1609     1   783     0  R                                   syz-executor.1
 1607     1   798     0  R                                   syz-executor.3
 1605     1   782     0  R                                   syz-executor.0
 1600     1   790     0  R                                   syz-executor.2
 1596     1   783     0  R                                   syz-executor.1
 1593     1   798     0  R                                   syz-executor.3
 1586     1   783     0  R                                   syz-executor.1
 1583     1   798     0  R                                   syz-executor.3
 1576     1   798     0  R                                   syz-executor.3
 1570     1   798     0  R                                   syz-executor.3
 1222     1  1222     0  Rs                                  dhclient
 1219     1  1219     0  Rs                                  dhclient
 1131     0     0     0  DL      aiordy  0xfffff8003cb4e530  [aiod4]
 1130     0     0     0  DL      aiordy  0xfffff8003cf4fa60  [aiod3]
 1128     0     0     0  DL      aiordy  0xfffff8003cf4f530  [aiod2]
 1125     0     0     0  DL      aiordy  0xfffff8003cd9a000  [aiod1]
  798   780   798     0  Rs                                  syz-executor.3
  790   780   790     0  Rs                                  syz-executor.2
  783   780   783     0  Rs                                  syz-executor.1
  782   780   782     0  Rs                                  syz-executor.0
  780   778   778     0  R       (threaded)                  syz-fuzzer
100090                   RunQ                                syz-fuzzer
100118                   S       uwait   0xfffff80015da2b00  syz-fuzzer
100119                   S       kqread  0xfffff80015d9f900  syz-fuzzer
100120                   S       uwait   0xfffff80015da2f00  syz-fuzzer
100121                   S       uwait   0xfffff8003c5c2d00  syz-fuzzer
100122                   S       uwait   0xfffff80015ac3100  syz-fuzzer
100123                   S       uwait   0xfffff8003c5c2f00  syz-fuzzer
100124                   S       uwait   0xfffff8003c3e0100  syz-fuzzer
100126                   S       uwait   0xfffff8003c3e0300  syz-fuzzer
  778   776   778     0  Rs                                  csh
  776     1   776     0  Rs                                  sshd
  507     1   507     0  Rs                                  syslogd
  435     1   435    65  Rs                                  dhclient
  350     1   350     0  Rs                                  dhclient
  347     1   347     0  Rs                                  dhclient
   23     0     0     0  DL      vlruwt  0xfffff80015cd1530  [vnlru]
   22     0     0     0  DL      syncer  0xffffffff8282c450  [syncer]
   21     0     0     0  RL      (threaded)                  [bufdaemon]
100081                   RunQ                                [bufdaemon]
100088                   D       -       0xffffffff8220aec0  [bufspacedaemon-0]
100099                   D       sdflush 0xfffff80004ddd4e8  [/ worker]
   20     0     0     0  DL      psleep  0xffffffff82853388  [vmdaemon]
   19     0     0     0  RL      (threaded)                  [pagedaemon]
100079                   RunQ                                [dom0]
100086                   D       launds  0xffffffff82847804  [laundry: dom0]
100087                   D       umarcl  0xffffffff815c50e0  [uma]
   18     0     0     0  RL                                  [rand_harvestq]
   17     0     0     0  DL      waiting 0xffffffff82f328b8  [sctp_iterator]
   16     0     0     0  RL                                  [pf purge]
   15     0     0     0  DL      -       0xffffffff82828bdc  [soaiod4]
    9     0     0     0  DL      -       0xffffffff82828bdc  [soaiod3]
    8     0     0     0  DL      -       0xffffffff82828bdc  [soaiod2]
    7     0     0     0  DL      -       0xffffffff82828bdc  [soaiod1]
    6     0     0     0  DL      (threaded)                  [cam]
100044                   D       -       0xffffffff82448b40  [doneq0]
100045                   D       -       0xffffffff82448ac0  [async]
100078                   D       -       0xffffffff82448990  [scanner]
   14     0     0     0  DL      seqstat 0xfffff80004d8a488  [sequencer 00]
    5     0     0     0  DL      crypto_ 0xfffff80004d53d80  [crypto returns 1]
    4     0     0     0  DL      crypto_ 0xfffff80004d53d30  [crypto returns 0]
    3     0     0     0  DL      crypto_ 0xffffffff82844ce0  [crypto]
   13     0     0     0  DL      (threaded)                  [geom]
100035                   D       -       0xffffffff8271c8e0  [g_event]
100036                   D       -       0xffffffff8271c8e8  [g_up]
100037                   D       -       0xffffffff8271c8f0  [g_down]
    2     0     0     0  DL      (threaded)                  [KTLS]
100028                   D       -       0xfffff80004c69100  [thr_0]
100029                   D       -       0xfffff80004c69180  [thr_1]
   12     0     0     0  RL      (threaded)                  [intr]
100011                   I                                   [swi5: fast taskq]
100014                   I                                   [swi6: task queue]
100016                   I                                   [swi6: Giant taskq]
100030                   I                                   [swi3: vm]
100031                   RunQ                                [swi4: clock (0)]
100032                   I                                   [swi4: clock (1)]
100033                   I                                   [swi1: netisr 0]
100046                   I                                   [irq24: virtio_pci0]
100047                   I                                   [irq25: virtio_pci0]
100048                   I                                   [irq26: virtio_pci0]
100049                   I                                   [irq27: virtio_pci0]
100050                   I                                   [irq28: virtio_pci1]
100051                   I                                   [irq29: virtio_pci1]
100052                   I                                   [irq30: virtio_pci1]
100053                   I                                   [irq31: virtio_pci1]
100054                   I                                   [irq32: virtio_pci1]
100059                   I                                   [irq10: virtio_pci2]
100061                   I                                   [irq1: atkbd0]
100062                   I                                   [irq12: psm0]
100063                   I                                   [swi0: uart uart++]
100071                   I                                   [swi1: pf send]
100084                   RunQ                                [swi1: hpts]
100085                   RunQ                                [swi1: hpts]
   11     0     0     0  RL      (threaded)                  [idle]
100003                   CanRun                              [idle: cpu0]
100004                   CanRun                              [idle: cpu1]
    1     0     1     0  RLs                                 [init]
   10     0     0     0  DL      audit_w 0xffffffff828451f0  [audit]
    0     0     0     0  RLs     (threaded)                  [kernel]
100000                   D       swapin  0xffffffff8271ce70  [swapper]
100005                   D       -       0xfffff8000443b500  [if_io_tqg_0]
100006                   D       -       0xfffff8000443b100  [if_io_tqg_1]
100007                   D       -       0xfffff80004c78d00  [if_config_tqg_0]
100008                   RunQ                                [softirq_0]
100009                   RunQ                                [softirq_1]
100010                   D       -       0xfffff80004c78100  [aiod_kick taskq]
100012                   D       -       0xfffff80004c75900  [kqueue_ctx taskq]
100013                   D       -       0xfffff80004c75500  [pci_hp taskq]
100015                   D       -       0xfffff80004c6ed00  [inm_free taskq]
100017                   D       -       0xfffff80004c6e500  [linuxkpi_irq_wq]
100018                   D       -       0xfffff80004c6e100  [thread taskq]
100019                   D       -       0xfffff80004c69d00  [in6m_free taskq]
100020                   D       -       0xfffff80004c69900  [linuxkpi_short_wq_0]
100021                   D       -       0xfffff80004c69900  [linuxkpi_short_wq_1]
100022                   D       -       0xfffff80004c69900  [linuxkpi_short_wq_2]
100023                   D       -       0xfffff80004c69900  [linuxkpi_short_wq_3]
100024                   D       -       0xfffff80004c69500  [linuxkpi_long_wq_0]
100025                   D       -       0xfffff80004c69500  [linuxkpi_long_wq_1]
100026                   D       -       0xfffff80004c69500  [linuxkpi_long_wq_2]
100027                   D       -       0xfffff80004c69500  [linuxkpi_long_wq_3]
100034                   D       -       0xfffff80004cd3d00  [firmware taskq]
100038                   D       -       0xfffff80004cd3900  [crypto_0]
100039                   D       -       0xfffff80004cd3900  [crypto_1]
100055                   D       -       0xfffff800153ecd00  [vtnet0 rxq 0]
100056                   D       -       0xfffff800153ec900  [vtnet0 txq 0]
100057                   D       -       0xfffff800153ec500  [vtnet0 rxq 1]
100058                   D       -       0xfffff800153ec100  [vtnet0 txq 1]
100060                   D       vtbslp  0xfffff80015463700  [virtio_balloon]
100064                   D       -       0xfffff80015469900  [mca taskq]
100066                   D       -       0xffffffff81e218c1  [deadlkres]
100074                   D       -       0xfffff80015ac7100  [acpi_task_0]
100075                   D       -       0xfffff80015ac7100  [acpi_task_1]
100076                   D       -       0xfffff80015ac7100  [acpi_task_2]
100077                   D       -       0xfffff80004cd3500  [CAM taskq]
16386     1   782     0  Z                                   syz-executor.0
15400     1   782     0  Z                                   syz-executor.0
15407     1   782     0  Z                                   syz-executor.0
15410     1   782     0  Z                                   syz-executor.0
15413     1   790     0  Z                                   syz-executor.2
15418     1   782     0  Z                                   syz-executor.0
15421     1   790     0  Z                                   syz-executor.2
15423     1   790     0  Z                                   syz-executor.2
15427     1   782     0  Z                                   syz-executor.0
17483     1   790     0  Z                                   syz-executor.2
17490     1   790     0  Z                                   syz-executor.2
17494     1   790     0  Z                                   syz-executor.2
17497     1   783     0  Z                                   syz-executor.1
17503     1   790     0  Z                                   syz-executor.2
17504     1   782     0  Z                                   syz-executor.0
17506     1   783     0  Z                                   syz-executor.1
 4202     1  4202    65  Z                                   dhclient
11371     1   798     0  Z                                   syz-executor.3
11375     1   798     0  Z                                   syz-executor.3
17549     1   790     0  Z                                   syz-executor.2
17551     1   782     0  Z                                   syz-executor.0
17553     1   783     0  Z                                   syz-executor.1
10406     1   798     0  Z                                   syz-executor.3
 4264     1   783     0  Z                                   syz-executor.1
 4265     1   783     0  Z                                   syz-executor.1
10411     1   798     0  Z                                   syz-executor.3
 4271     1   783     0  Z                                   syz-executor.1
10420     1   798     0  Z                                   syz-executor.3
 4276     1   790     0  Z                                   syz-executor.2
 4278     1   783     0  Z                                   syz-executor.1
 4281     1   798     0  Z                                   syz-executor.3
10426     1   798     0  Z                                   syz-executor.3
 4285     1   790     0  Z                                   syz-executor.2
10430     1   798     0  Z                                   syz-executor.3
 4286     1   782     0  Z                                   syz-executor.0
 4288     1   798     0  Z                                   syz-executor.3
 4289     1   790     0  Z                                   syz-executor.2
 6338     1   782     0  Z                                   syz-executor.0
 4290     1   783     0  Z                                   syz-executor.1
 6340     1   782     0  Z                                   syz-executor.0
 4295     1   798     0  Z                                   syz-executor.3
 4301     1   782     0  Z                                   syz-executor.0
 4303     1   782     0  Z                                   syz-executor.0
17625     1   782     0  Z                                   syz-executor.0
12516     1   782     0  Z                                   syz-executor.0
12518     1   782     0  Z                                   syz-executor.0
12521     1   782     0  Z                                   syz-executor.0
12523     1   782     0  Z                                   syz-executor.0
12525     1   782     0  Z                                   syz-executor.0
 7437     1   782     0  Z                                   syz-executor.0
 7446     1   782     0  Z                                   syz-executor.0
16668     1   782     0  Z                                   syz-executor.0
16669     1   782     0  Z                                   syz-executor.0
 7456     1   782     0  Z                                   syz-executor.0
 7464     1   782     0  Z                                   syz-executor.0
 7475     1   782     0  Z                                   syz-executor.0
12605     1   798     0  Z                                   syz-executor.3
12606     1   798     0  Z                                   syz-executor.3
12607     1   798     0  Z                                   syz-executor.3
12608     1   798     0  Z                                   syz-executor.3
12616     1   798     0  Z                                   syz-executor.3
12619     1   798     0  Z                                   syz-executor.3
12620     1   790     0  Z                                   syz-executor.2
12621     1   790     0  Z                                   syz-executor.2
12630     1   798     0  Z                                   syz-executor.3
12632     1   790     0  Z                                   syz-executor.2
12633     1   790     0  Z                                   syz-executor.2
12642     1   798     0  Z                                   syz-executor.3
12644     1   790     0  Z                                   syz-executor.2
12645     1   798     0  Z                                   syz-executor.3
12646     1   790     0  Z                                   syz-executor.2
 7566     1   790     0  Z                                   syz-executor.2
 7567     1   790     0  Z                                   syz-executor.2
 7574     1   790     0  Z                                   syz-executor.2
 7577     1   790     0  Z                                   syz-executor.2
 3512     1  3512     0  Z                                   dhclient
 6625     1   783     0  Z                                   syz-executor.1
 6626     1   783     0  Z                                   syz-executor.1
 6633     1   783     0  Z                                   syz-executor.1
 6634     1   783     0  Z                                   syz-executor.1
 6637     1   783     0  Z                                   syz-executor.1
 6638     1   783     0  Z                                   syz-executor.1
12783     1   790     0  Z                                   syz-executor.2
12785     1   790     0  Z                                   syz-executor.2
12790     1   782     0  Z                                   syz-executor.0
 6647     1   798     0  Z                                   syz-executor.3
 6648     1   783     0  Z                                   syz-executor.1
 6649     1   798     0  Z                                   syz-executor.3
12794     1   790     0  Z                                   syz-executor.2
 6650     1   783     0  Z                                   syz-executor.1
12796     1   782     0  Z                                   syz-executor.0
12798     1   790     0  Z                                   syz-executor.2
 6655     1   782     0  Z                                   syz-executor.0
 6656     1   782     0  Z                                   syz-executor.0
 6657     1   798     0  Z                                   syz-executor.3
 6658     1   798     0  Z                                   syz-executor.3
 6659     1   783     0  Z                                   syz-executor.1
 6660     1   783     0  Z                                   syz-executor.1
12805     1   782     0  Z                                   syz-executor.0
12807     1   790     0  Z                                   syz-executor.2
 6663     1   782     0  Z                                   syz-executor.0
 6665     1   798     0  Z                                   syz-executor.3
 6666     1   790     0  Z                                   syz-executor.2
 6667     1   782     0  Z                                   syz-executor.0
 6668     1   798     0  Z                                   syz-executor.3
 6670     1   790     0  Z                                   syz-executor.2
 6674     1   790     0  Z                                   syz-executor.2
 6675     1   782     0  Z                                   syz-executor.0
 6677     1   782     0  Z                                   syz-executor.0
 6678     1   790     0  Z                                   syz-executor.2
 6687     1   790     0  Z                                   syz-executor.2
 6689     1   790     0  Z                                   syz-executor.2
10819     1   790     0  Z                                   syz-executor.2
10820     1   790     0  Z                                   syz-executor.2
10822     1   790     0  Z                                   syz-executor.2
10825     1   790     0  Z                                   syz-executor.2
10829     1   790     0  Z                                   syz-executor.2
 5847     1   790     0  Z                                   syz-executor.2
 5848     1   790     0  Z                                   syz-executor.2
10979     1   798     0  Z                                   syz-executor.3
 5859     1   790     0  Z                                   syz-executor.2
10980     1   798     0  Z                                   syz-executor.3
10982     1   798     0  Z                                   syz-executor.3
10984     1   798     0  Z                                   syz-executor.3
10986     1   798     0  Z                                   syz-executor.3
10989     1   798     0  Z                                   syz-executor.3
 5869     1   790     0  Z                                   syz-executor.2
10993     1   798     0  Z                                   syz-executor.3
10995     1   798     0  Z                                   syz-executor.3
 5879     1   790     0  Z                                   syz-executor.2
 9992     1   790     0  Z                                   syz-executor.2
 9993     1   790     0  Z                                   syz-executor.2
10002     1   790     0  Z                                   syz-executor.2
10003     1   782     0  Z                                   syz-executor.0
10012     1   790     0  Z                                   syz-executor.2
10013     1   782     0  Z                                   syz-executor.0
14114     1   790     0  Z                                   syz-executor.2
14116     1   790     0  Z                                   syz-executor.2
10022     1   782     0  Z                                   syz-executor.0
10023     1   790     0  Z                                   syz-executor.2
 2917     1  2917     0  Z                                   dhclient
16354     1   790     0  Z                                   syz-executor.2
16356     1   790     0  Z                                   syz-executor.2
16361     1   790     0  Z                                   syz-executor.2
16366     1   790     0  Z                                   syz-executor.2
16369     1   790     0  Z                                   syz-executor.2
16380     1   782     0  Z                                   syz-executor.0
16383     1   782     0  Z                                   syz-executor.0
db> show all locks
Process 12628 (syz-executor.3) thread 0xfffffe009db13e40 (118507)
exclusive lockmgr ufs (ufs) r = 0 (0xfffff8003ccbb230) locked @ /syzkaller/managers/main/kernel/sys/kern/vfs_subr.c:3251
Process 7571 (syz-executor.2) thread 0xfffffe009d92b720 (110874)
exclusive lockmgr ufs (ufs) r = 0 (0xfffff8003cf44e70) locked @ /syzkaller/managers/main/kernel/sys/kern/vfs_subr.c:3251
Process 4062 (syz-executor.1) thread 0xfffffe0095145740 (101236)
exclusive sleep mutex process lock (process lock) r = 0 (0xfffff8002f4e4658) locked @ /syzkaller/managers/main/kernel/sys/kern/kern_event.c:2457
Process 4057 (syz-executor.1) thread 0xfffffe009510ac80 (104531)
exclusive sleep mutex process lock (process lock) r = 0 (0xfffff8002fb0a128) locked @ /syzkaller/managers/main/kernel/sys/kern/kern_event.c:2457
db> show malloc
              Type        InUse        MemUse     Requests
         sysctloid        34288        12858K        34355
           pf_hash            5        11560K            5
            devbuf         4216         6982K         4244
          tcp_hpts            5         3219K            5
               pcb          508         2708K        44630
              kobj          326         2608K          486
           subproc          516         2231K        18095
             vtbuf           24         2064K           46
          filedesc          104         1668K        32945
            newblk            7         1035K        29720
          vfscache            3         1035K            3
            acpica         1674          649K        54806
          inodedep          124          643K        18119
           callout            2          528K            2
         ufs_quota            1          520K            1
          vfs_hash            1          520K            1
              intr            4          480K            4
           kdtrace          594          441K        46580
               bus          986          377K         3469
         sctp_atcl          376          376K        30910
               BPF           46          337K           98
              umtx          726          318K          726
         sctp_stro          144          288K         9169
            linker          348          270K          425
            DEVFS1          107          214K          124
         sctp_atky          520          195K        41631
            module          510          192K          510
         vnet_data            1          176K            1
           tidhash            3          164K            3
           pagedep           12          142K        16739
         sctp_athm          376          141K        31807
        tfo_ccache            1          136K            1
               sem            4          120K            4
            kqueue          261          115K        17990
              vmem            3          112K            7
          sctp_map          288          108K        18254
               UMA          270          102K          270
     audit_evclass          236           89K          294
              temp           36           81K         4145
          mtx_pool            2           80K            2
          routetbl          141           77K         1257
          syncache            1           76K            1
               msg            4           68K            4
            ifaddr           71           67K           73
          acpitask            1           64K            1
       ddb_capture            1           64K            1
            DEVFS3          126           63K          136
       ether_multi          157           59K          167
        gtaskqueue           18           57K           18
          freework          108           54K        21332
        DEVFS_RULE           56           54K           56
          freeblks          107           54K        17222
              kenv           95           52K           95
            DEVFSP          136           51K         2394
      eventhandler          133           50K          133
           lltable           52           46K          502
          freefile          121           46K        17207
           ithread           99           43K           99
              rman           84           42K          425
       inpcbpolicy          107           41K        12574
            KTRACE          103           39K        15975
         taskqueue           60           36K           60
           pwddesc           93           35K        17826
              proc            3           34K            3
         ufs_mount            5           34K            6
            bus-sc           33           34K         1684
           devstat            4           33K            4
         sctp_timw           64           32K           64
         hostcache            1           32K            1
               tty           16           32K           16
               shm            1           32K           66
              ksem           31           31K           99
         in6_multi           71           31K           71
              GEOM           60           29K          489
            kbdmux            6           28K            6
              cred           25           25K          624
             ifnet            7           25K            7
          kcovinfo           64           24K           68
             xform           61           23K         3958
         CAM queue            5           21K         1528
         pfs_nodes           20           20K           20
              UART           12           18K           12
           pf_osfp           46           18K           46
         bmsafemap            3           17K        17879
               rpc            2           16K            2
             shmfd            1           16K           50
       pfs_vncache            1           16K            1
         proc-args           41           16K          785
             selfd           41           16K       225921
       ufs_dirhash           24           14K           24
            plimit           14           14K          718
             lockf           36           14K          804
            sglist            5           13K            5
               MCA           32           12K           32
           CAM DEV            3           12K          510
           session           24           12K           65
                vt           11           11K           11
            Unitno           29           11K           67
           acpisem           28           11K           28
           CAM XPT           22           11K          543
            dirrem           20           10K        17360
          pf_ifnet           13           10K          391
           uidinfo            4           10K           78
               osd           23            9K         4639
          pf_table            2            8K          210
           memdesc            1            8K            1
         ipsec-saq            2            8K            2
             evdev            4            8K            4
           acpidev           20            8K           20
             hhook           15            8K           17
             mount           16            7K         1125
       fpukern_ctx            3            6K            3
          terminal           11            6K           11
          sctp_ifa           14            6K           15
            ip6ndp           12            6K           15
            select           14            6K          905
           tcp_fsb           13            5K         1067
       ipsecpolicy            2            5K            2
 encap_export_host           12            5K           12
             clone            9            5K            9
        local_apic            1            4K            1
           io_apic            1            4K            1
            sahead            1            4K            1
          secasvar            1            4K            1
             nhops            6            4K            8
          pci_link           10            4K           10
        ip_msource           10            4K           90
               msi            9            4K            9
             DEVFS            9            4K           10
               tun            7            4K            7
             ipsec            3            3K            3
          in_multi            6            3K            8
          nexusdev            7            3K            7
            feeder            7            3K            7
          procdesc            5            3K           18
          sctp_ifn            6            3K           15
            diradd            6            3K        17399
               mld            6            3K            6
              igmp            6            3K            6
         toponodes            6            3K            6
            prison            6            3K            6
            isadev            6            3K            6
           softdep            1            2K            1
       vnodemarker            2            2K          922
      NFSD session            1            2K            1
             linux            5            2K            6
        CAM periph            4            2K          271
            crypto            4            2K         1148
         newdirblk            4            2K        16514
             mkdir            4            2K        33028
       ip6_msource            4            2K           21
              pfil            4            2K            4
          CAM path            4            2K         1034
            soname            4            2K        24715
          filecaps            4            2K          150
           tcpfunc            3            2K            3
        loginclass            3            2K            6
filedesc_to_leader            3            2K           88
    chacha20random            1            1K            1
            vnodes            1            1K           12
           CAM SIM            2            1K            2
              ktls            1            1K            1
              cdev            2            1K            2
        aesni_data            2            1K            2
         sctp_aadr            2            1K          160
              cpus            2            1K            2
          atkbddev            2            1K            2
     CAM dev queue            2            1K            2
           entropy            2            1K           50
      NFSD lckfile            1            1K            1
     NFSD V4client            1            1K            1
          pmchooks            1            1K            1
          sctp_vrf            1            1K            1
           pf_rule            1            1K          372
            apmdev            1            1K            1
 CAM I/O Scheduler            1            1K            1
    vnet_data_free            1            1K            1
              vnet            1            1K            1
           Per-cpu            1            1K            1
          p1003.1b            1            1K            1
          acpiintr            1            1K            1
               pmc            1            1K            1
        vegas data            0            0K           40
         htcp data            0            0K           17
            tcp_do            0            0K            0
          cdg data            0            0K           28
            mqdata            0            0K            0
        dctcp data            0            0K           42
        cubic data            0            0K           24
          chd data            0            0K           15
        sctp_mcore            0            0K            0
        sctp_socko            0            0K        14817
         sctp_iter            0            0K           56
         sctp_mvrf            0            0K            0
         sctp_cpal            0            0K           53
         sctp_cmsg            0            0K            0
         sctp_stre            0            0K            0
         sctp_athi            0            0K            0
         sctp_a_it            0            0K            8
         sctp_stri            0            0K         1950
           pf_altq            0            0K            0
           pf_temp            0            0K            0
      NFSCL lckown            0            0K            0
      NFSCL client            0            0K            0
        madt_table            0            0K            2
          smartpqi            0            0K            0
       NFSCL deleg            0            0K            0
        NFSCL open            0            0K            0
       NFSCL owner            0            0K            0
            NFS fh            0            0K            0
           NFS req            0            0K            0
     NFSD usrgroup            0            0K            0
       NFSD string            0            0K            0
              iavf            0            0K            0
               ixl            0            0K            0
       NFSD V4lock            0            0K            0
      NFSD V4state            0            0K            0
     NFSD srvcache            0            0K            0
       msdosfs_fat            0            0K            0
     msdosfs_mount            0            0K            0
      msdosfs_node            0            0K            0
        ice-resmgr            0            0K            0
         ice-osdep            0            0K            0
               ice            0            0K            0
             axgbe            0            0K            0
            DEVFS4            0            0K            0
            DEVFS2            0            0K            0
            gntdev            0            0K            0
       privcmd_dev            0            0K            0
        evtchn_dev            0            0K            0
          xen_intr            0            0K            0
          xenstore            0            0K            0
         ciss_data            0            0K            0
           xen_hvm            0            0K            0
         legacydrv            0            0K            0
            qpidrv            0            0K            0
         BACKLIGHT            0            0K            0
               xnb            0            0K            0
      dmar_idpgtbl            0            0K            0
          dmar_dom            0            0K            0
          dmar_ctx            0            0K            0
              xbbd            0            0K            0
               xbd            0            0K            0
           Balloon            0            0K            0
              isci            0            0K            0
      iommu_dmamap            0            0K            0
          sysmouse            0            0K            0
     hyperv_socket            0            0K            0
           bxe_ilt            0            0K            0
            xenbus            0            0K            0
            vtfont            0            0K            0
     vm_fictitious            0            0K            0
           ath_hal            0            0K            0
            athdev            0            0K            0
           ata_pci            0            0K            0
           ata_dma            0            0K            0
       ata_generic            0            0K            0
               amr            0            0K            0
            pvscsi            0            0K            0
           scsi_da            0            0K           69
            ata_da            0            0K            0
           scsi_ch            0            0K            0
           UMAHash            0            0K            0
           scsi_cd            0            0K            0
       AHCI driver            0            0K            0
         vm_pgdata            0            0K            0
           jblocks            0            0K            0
          savedino            0            0K        12047
          sentinel            0            0K            0
            jfsync            0            0K            0
            jtrunc            0            0K            0
             sbdep            0            0K          461
           jsegdep            0            0K            0
              jseg            0            0K            0
         jfreefrag            0            0K            0
          jfreeblk            0            0K            0
           jnewblk            0            0K            0
            jmvref            0            0K            0
           jremref            0            0K            0
           jaddref            0            0K            0
           freedep            0            0K            0
          freefrag            0            0K           77
        allocindir            0            0K            0
          indirdep            0            0K         5112
       allocdirect            0            0K            0
          ufs_trim            0            0K            0
           mactemp            0            0K            0
     audit_trigger            0            0K            0
 audit_pipe_presel            0            0K            0
     audit_pipeent            0            0K            0
        audit_pipe            0            0K            0
      audit_evname            0            0K            0
         audit_bsm            0            0K            0
      audit_gidset            0            0K            0
        audit_text            0            0K            0
        audit_path            0            0K            0
        audit_data            0            0K            0
        audit_cred            0            0K            0
            USBdev            0            0K            0
               USB            0            0K            0
               agp            0            0K            0
           nvme_da            0            0K            0
           acpipwr            0            0K            0
         acpi_perf            0            0K            0
          ktls_ocf            0            0K            0
            twsbuf            0            0K            0
        MLX5EEPROM            0            0K            0
        MLX5EEPROM            0            0K            0
        MLX5EEPROM            0            0K            0
        MLX5EEPROM            0            0K            0
         MLX5E_TLS            0            0K            0
        MLX5EEPROM            0            0K            0
        MLX5EEPROM            0            0K            0
        MLX5EEPROM            0            0K            0
            MLX5EN            0            0K            0
        MLX5EEPROM            0            0K            0
        MLX5EEPROM            0            0K            0
        MLX5EEPROM            0            0K            0
          MLX5DUMP            0            0K            0
        MLX5EEPROM            0            0K            0
        MLX5EEPROM            0            0K            0
          seq_file            0            0K            0
             radix            0            0K            0
               idr            0            0K            0
            lkpifw            0            0K            0
               NLM            0            0K            0
    ipsec-spdcache            0            0K            0
         ipsec-reg            0            0K            0
        ipsec-misc            0            0K            0
      ipsecrequest            0            0K            0
            ip6opt            0            0K          164
      ip6_moptions            0            0K           22
       in6_mfilter            0            0K           53
             frag6            0            0K           26
            tcplog            0            0K            0
        tcp_hwpace            0            0K            0
      twe_commands            0            0K            0
               LRO            0            0K            0
      newreno data            0            0K            4
       ip_moptions            0            0K           61
        in_mfilter            0            0K          193
              ipid            0            0K            0
         80211scan            0            0K            0
      80211ratectl            0            0K            0
        80211power            0            0K            0
       80211nodeie            0            0K            0
         80211node            0            0K            0
      80211mesh_gt            0            0K            0
      80211mesh_rt            0            0K            0
         80211perr            0            0K            0
         80211prep            0            0K            0
         80211preq            0            0K            0
          80211dfs            0            0K            0
       80211crypto            0            0K            0
          80211vap            0            0K            0
             iflib            0            0K            0
              vlan            0            0K            0
               gif            0            0K            0
           ifdescr            0            0K            0
              zlib            0            0K            0
           fadvise            0            0K           54
           VN POLL            0            0K            9
      twa_commands            0            0K            0
            statfs            0            0K        16792
     namei_tracker            0            0K           54
       export_host            0            0K            0
        cl_savebuf            0            0K          209
       tcp_log_dev            0            0K          531
      midi buffers            0            0K            0
             mixer            0            0K            0
              ac97            0            0K            0
             hdacc            0            0K            0
              hdac            0            0K            0
              hdaa            0            0K            0
         acpicmbat            0            0K            0
       SIIS driver            0            0K            0
           CAM CCB            0            0K        47321
               PUC            0            0K            0
          ppbusdev            0            0K            0
agtiapi_MemAlloc malloc            0            0K            0
    osti_cacheable            0            0K            0
          tempbuff            0            0K            0
            biobuf            0            0K            0
              aios            0            0K           38
               lio            0            0K           23
               acl            0            0K            0
          tempbuff            0            0K            0
          mbuf_tag            0            0K          247
ag_tgt_map_t malloc            0            0K            0
ag_slr_map_t malloc            0            0K            0
lDevFlags * malloc            0            0K            0
tiDeviceHandle_t * malloc            0            0K            0
ag_portal_data_t malloc            0            0K            0
ag_device_t malloc            0            0K            0
     STLock malloc            0            0K            0
          CCB List            0            0K            0
            sr_iov            0            0K            0
               OCS            0            0K            0
               OCS            0            0K            0
              nvme            0            0K            0
               nvd            0            0K            0
            netmap            0            0K            0
            mwldev            0            0K            0
        MVS driver            0            0K            0
     CAM ccb queue            0            0K            0
          mrsasbuf            0            0K            0
          mpt_user            0            0K            0
          mps_user            0            0K            0
              accf            0            0K            0
               pts            0            0K            0
               iov            0            0K        29956
          ioctlops            0            0K         2042
           eventfd            0            0K            0
           Witness            0            0K            0
             stack            0            0K            0
            MPSSAS            0            0K            0
               mps            0            0K            0
          mpr_user            0            0K            0
            MPRSAS            0            0K            0
               mpr            0            0K            0
            mfibuf            0            0K            0
              sbuf            0            0K          408
        md_sectors            0            0K            0
          firmware            0            0K            0
        compressor            0            0K            0
           md_disk            0            0K            0
              SWAP            0            0K            0
           malodev            0            0K            0
               LED            0            0K            0
         sysctltmp            0            0K         1057
            sysctl            0            0K            3
              ekcd            0            0K            0
            dumper            0            0K            0
          sendfile            0            0K           20
              rctl            0            0K            0
          ix_sriov            0            0K            0
        aacraidcam            0            0K            0
       aacraid_buf            0            0K            0
                ix            0            0K            0
            ipsbuf            0            0K            0
             cache            0            0K            0
            iirbuf            0            0K            0
      prison_racct            0            0K            0
       Fail Points            0            0K            0
             sigio            0            0K           24
               pwd            0            0K            0
       tty console            0            0K            0
            aaccam            0            0K            0
            aacbuf            0            0K            0
              zstd            0            0K            0
            XZ_DEC            0            0K            0
            nvlist            0            0K            0
          SCSI ENC            0            0K            0
           SCSI sa            0            0K            0
         scsi_pass            0            0K            0
        isofs_node            0            0K            0
       isofs_mount            0            0K            0
     tr_raid5_data            0            0K            0
    tr_raid1e_data            0            0K            0
     tr_raid1_data            0            0K            0
     tr_raid0_data            0            0K            0
    tr_concat_data            0            0K            0
       md_sii_data            0            0K            0
   md_promise_data            0            0K            0
    md_nvidia_data            0            0K            0
   md_jmicron_data            0            0K            0
     md_intel_data            0            0K            0
       md_ddf_data            0            0K            0
         raid_data            0            0K           72
     geom_flashmap            0            0K            0
         tmpfs dir            0            0K            0
        tmpfs name            0            0K            0
       tmpfs mount            0            0K            0
           NFS FHA            0            0K            0
         newnfsmnt            0            0K            0
  newnfsclient_req            0            0K            0
   NFSCL layrecall            0            0K            0
     NFSCL session            0            0K            0
     NFSCL sockreq            0            0K            0
     NFSCL devinfo            0            0K            0
     NFSCL flayout            0            0K            0
      NFSCL layout            0            0K            0
     NFSD rollback            0            0K            0
      NFSCL diroff            0            0K            0
       NEWdirectio            0            0K            0
        NEWNFSnode            0            0K            0
         NFSCL lck            0            0K            0
db> show uma
              Zone   Size    Used    Free    Requests  Sleeps  Bucket  Total Mem    XFree
   mbuf_jumbo_page   4096   10140     914      309174       0     254   45277184        0
           tcp_log    416      32   35257      850062       0     254   14680224        0
        malloc-384    384   35791     279       57724       0      30   13850880        0
      malloc-32768  32768      53     149       16473       0       1    6619136        0
       malloc-1024   1024    4174      18        4462       0      16    4292608        0
              mbuf    256   11059    1751     3054150       0     254    3279360        0
       malloc-8192   8192     234     152       20614       0       1    3162112        0
       tcp_bbr_map    128       0   22475      696213       0     126    2876800        0
       malloc-8192   8192     328       2        1099       0       1    2703360        0
              pbuf   2624       0     941           0       0       2    2469184        0
       malloc-8192   8192     247      13       17800       0       1    2129920        0
        RADIX NODE    144    9461    4060      487329       0      62    1947024        0
          BUF TRIE    144     362   13106       27233       0      62    1939392        0
    ertt_txseginfo     40       0   46460     1956355       0     254    1858400        0
       UMA Slabs 0    112   15954      27       15956       0     126    1789872        0
      mbuf_cluster   2048     735       1         735       0     254    1507328        0
         MAP ENTRY     96    3585    8553     1044088       0     126    1165248        0
        malloc-384    384    2005     955      325956       0      30    1136640        0
         sctp_asoc   2288     144     351        9127       0     254    1132560        0
         VM OBJECT    264    1768    2207      264249       0      30    1049400        0
        256 Bucket   2048     423       1       28476       0       8     868352        0
       malloc-4096   4096       9     202       48492       0       2     864256        0
         FFS inode   1160     576     131       17842       0       8     820120        0
           sctp_ep   1280     232     380       20608       0     254     783360        0
       malloc-1024   1024     594     146       50806       0      16     757760        0
       malloc-1024   1024     381     343       32938       0      16     741376        0
        malloc-512    512      29    1347       32756       0      30     704512        0
        malloc-384    384    1729      61       54379       0      30     687360        0
       malloc-1024   1024     132     524       14147       0      16     671744        0
            THREAD   1808     348      15       28781       0       8     656304        0
      malloc-65536  65536       3       7        4544       0       1     655360        0
       malloc-1024   1024     201     415       19773       0      16     630784        0
           VMSPACE   2544      69     162       17756       0       4     587664        0
       malloc-2048   2048     146     122       10541       0       8     548864        0
            socket    944     138     366       36075       0     254     475776        0
      malloc-16384  16384      25       3          36       0       1     458752        0
        malloc-384    384     765     385       90655       0      30     441600        0
        sctp_raddr    736     144     417       11068       0     254     412896        0
            lkpimm    160       1    2324           1       0      62     372000        0
          lkpicurr    160       2    2323           2       0      62     372000        0
              PROC   1328     244      26       17797       0       8     358560        0
             VNODE    448     605     178       17882       0      30     350784        0
      malloc-65536  65536       5       0           5       0       1     327680        0
      malloc-65536  65536       0       5          47       0       1     327680        0
        malloc-512    512     162     478       18741       0      30     327680        0
        malloc-384    384     706     104       23350       0      30     311040        0
        malloc-384    384     712      78       13778       0      30     303360        0
       malloc-1024   1024     283       5         314       0      16     294912        0
        128 Bucket   1024     281       6        7516       0      16     293888        0
             g_bio    408       0     710      156542       0      30     289680        0
         filedesc0   1072      95     171       17826       0       8     285152        0
       malloc-2048   2048     125       5         157       0       8     266240        0
      malloc-65536  65536       2       2          47       0       1     262144        0
        malloc-384    384     559      71       87693       0      30     241920        0
       malloc-8192   8192      22       6          72       0       1     229376        0
         vmem btag     56    3946     146        4013       0     254     229152        0
            DEVCTL   1024       0     220         154       0       0     225280        0
        malloc-512    512     389      27       17274       0      30     212992        0
        malloc-512    512     403       5       41036       0      30     208896        0
             tcpcb   1080      19     170        4627       0     254     204120        0
      malloc-16384  16384      11       1         247       0       1     196608        0
       FFS2 dinode    256     576     174       17841       0      62     192000        0
       mbuf_packet    256     176     559       73428       0     254     188160        0
         UMA Zones    768     242       2         242       0      16     187392        0
            clpbuf   2624       0      64        2729       0      16     167936        0
       S VFS Cache    104    1060     305       18772       0     126     141960        0
         tcp_inpcb    488      90     182        4627       0     254     132736        0
      malloc-65536  65536       0       2         176       0       1     131072        0
       malloc-8192   8192       3      13          95       0       1     131072        0
        sctp_chunk    152     102     756        5926       0     254     130416        0
          ksiginfo    112     328     716        1363       0     126     116928        0
        malloc-512    512     139      77       18208       0      30     110592        0
      malloc-32768  32768       1       2         121       0       1      98304        0
      malloc-16384  16384       2       4          32       0       1      98304        0
      malloc-16384  16384       4       2          13       0       1      98304        0
          UMA Kegs    384     227       6         227       0      30      89472        0
         32 Bucket    256     287      58       27210       0      62      88320        0
      malloc-16384  16384       3       2          11       0       1      81920        0
       malloc-4096   4096      13       7         608       0       2      81920        0
             Files     80     411     489       68709       0     126      72000        0
        malloc-384    384     140      40       30116       0      30      69120        0
       tcp_bbr_pcb    832       1      80        2154       0      16      67392        0
      malloc-32768  32768       1       1           2       0       1      65536        0
      malloc-32768  32768       1       1          16       0       1      65536        0
      malloc-16384  16384       2       2           9       0       1      65536        0
       malloc-8192   8192       2       6       17290       0       1      65536        0
         64 Bucket    512     110      18       29585       0      30      65536        0
     udplite_inpcb    488       8     120        6884       0     254      62464        0
       malloc-2048   2048      15      15         561       0       8      61440        0
       malloc-4096   4096       7       7         277       0       2      57344        0
         TURNSTILE    136     364      35         364       0      62      54264        0
      malloc-16384  16384       3       0           3       0       1      49152        0
       malloc-2048   2048      16       8          92       0       8      49152        0
        malloc-512    512      78      18         532       0      30      49152        0
       malloc-4096   4096       6       5          37       0       2      45056        0
        malloc-512    512      27      61        1741       0      30      45056        0
            pcpu-8      8    4765     867       14591       0     254      45056        0
           DIRHASH   1024      34       6          34       0      16      40960        0
        malloc-512    512      34      46        1581       0      30      40960        0
         16 Bucket    144     175     105        4825       0      62      40320        0
      tcp_rack_pcb    832      13      32        1067       0      16      37440        0
              pipe    744      22      28        1082       0      16      37200        0
             NAMEI   1024       0      36       92237       0      16      36864        0
        SLEEPQUEUE     88     364      52         364       0     126      36608        0
      malloc-32768  32768       1       0           1       0       1      32768        0
      malloc-32768  32768       1       0           1       0       1      32768        0
       malloc-2048   2048       2      14         330       0       8      32768        0
           pcpu-64     64     487      25         487       0     254      32768        0
            itimer    352       0      88         324       0      30      30976        0
sctp_stream_msg_out    112      96     156        2088       0     254      28224        0
               PWD     32      58     824       16400       0     254      28224        0
             KNOTE    160      33     142      184351       0      62      28000        0
          8 Bucket     80      87     263        4358       0     126      28000        0
             unpcb    256      16      89        2782       0     254      26880        0
           ttyoutq    256       0     105         168       0      62      26880        0
       malloc-8192   8192       0       3          13       0       1      24576        0
       malloc-8192   8192       1       2         135       0       1      24576        0
       malloc-4096   4096       1       5          10       0       2      24576        0
       malloc-4096   4096       3       3         166       0       2      24576        0
       malloc-2048   2048       3       9         191       0       8      24576        0
        sctp_laddr     48     144     360        5723       0     254      24192        0
          2 Bucket     32     340     416       21182       0     254      24192        0
            ttyinq    160       0     150         315       0      62      24000        0
       malloc-4096   4096       2       3        1154       0       2      20480        0
         udp_inpcb    488       6      34         438       0     254      19520        0
       Mountpoints   2752       2       5           7       0       4      19264        0
      malloc-16384  16384       1       0           1       0       1      16384        0
      tcp_rack_map    112      41     103        2061       0     126      16128        0
              ertt     72      19     205        4627       0     126      16128        0
      vtnet_tx_hdr     24       0     668     1118416       0     254      16032        0
             ripcb    488       5      27         625       0     254      15616        0
             AIOCB    552       0      28         141       0      16      15456        0
       malloc-4096   4096       1       2          11       0       2      12288        0
       malloc-2048   2048       2       4           6       0       8      12288        0
          rl_entry     40     202     101         202       0     254      12120        0
              kenv    258      15      30        1044       0      30      11610        0
     routing nhops    256      27      18          35       0      62      11520        0
       malloc-2048   2048       4       0           4       0       8       8192        0
       malloc-1024   1024       1       7          11       0      16       8192        0
           pf tags    104       0      78          23       0     126       8112        0
           rtentry    176      31      15          35       0      62       8096        0
             tcptw     88       0      92          22       0     254       8096        0
              PGRP     88      24      68          76       0     126       8096        0
   sctp_asconf_ack     48       0     168          64       0     254       8064        0
         hostcache     64       2     124           2       0     254       8064        0
          syncache    168       0      48          16       0     254       8064        0
             udpcb     32       6     246        7322       0     254       8064        0
              AIOP     32       4     248           4       0     254       8064        0
          4 Bucket     48      44     124         515       0     254       8064        0
      tcp_log_node    120       0      66          19       0     126       7920        0
        sctp_readq    152       0      52         740       0     254       7904        0
               AIO    208       0      38         101       0      62       7904        0
           cryptop    280       0      28         243       0      30       7840        0
       L VFS Cache    320       0      24          21       0      30       7680        0
            AIOLIO    272       0      28          23       0      30       7616        0
     FPU_save_area    832       1       8           1       0      16       7488        0
            cpuset    104       7      55          66       0     126       6448        0
tfo_ccache_entries     80       2      62           2       0     126       5120        0
         domainset     40       0     126          54       0     254       5040        0
 epoch_record pcpu    256       4      12           4       0      62       4096        0
           pcpu-16     16       7     249           7       0     254       4096        0
    tcp_log_bucket    176       0      23           2       0      62       4048        0
          tcpreass     48       0      84           1       0     254       4032        0
       UMA Slabs 1    176      10      12          10       0      62       3872        0
            mqnode    416       3       6           3       0      30       3744        0
        KMAP ENTRY     96      12      27          12       0       0       3744        0
              vmem   1856       1       1           1       0       8       3712        0
           SMR CPU     32       3      60           3       0     254       2016        0
        SMR SHARED     24       3      60           3       0     254       1512        0
       FFS1 dinode    128       0       0           0       0     126          0        0
            da_ccb    544       0       0           0       0      16          0        0
           ada_ccb    272       0       0           0       0      30          0        0
             swblk    136       0       0           0       0      62          0        0
          swpctrie    144       0       0           0       0      62          0        0
       sctp_asconf     40       0       0           0       0     254          0        0
   cdg_qdiffsample     16       0       0           0       0     254          0        0
   pf state scrubs     40       0       0           0       0     254          0        0
   pf frag entries     40       0       0           0       0     254          0        0
          pf frags    248       0       0           0       0      62          0        0
  pf table entries    160       0       0           0       0      62          0        0
pf table entry counters     64       0       0           0       0     254          0        0
   pf source nodes    136       0       0           0       0     254          0        0
     pf state keys     88       0       0           0       0     126          0        0
         pf states    304       0       0           0       0       0          0        0
          pf mtags     48       0       0           0       0     254          0        0
               tfo      4       0       0           0       0     254          0        0
          sackhole     32       0       0           0       0     254          0        0
               ipq     56       0       0           0       0     254          0        0
    IPsec SA lft_c     16       0       0           0       0     254          0        0
        TMPFS node    224       0       0           0       0      62          0        0
        mqnotifier    216       0       0           0       0      62          0        0
            mvdata     64       0       0           0       0     254          0        0
            mqueue    248       0       0           0       0      62          0        0
           NCLNODE    584       0       0           0       0      16          0        0
     LTS VFS Cache    360       0       0           0       0      30          0        0
     STS VFS Cache    144       0       0           0       0      62          0        0
  linux_dma_object     24       0       0           0       0     254          0        0
  linux_dma_pctrie    144       0       0           0       0      62          0        0
   IOMMU_MAP_ENTRY    120       0       0           0       0     126          0        0
      ktls_session    128       0       0           0       0     126          0        0
    mbuf_jumbo_16k  16384       0       0           0       0     254          0        0
     mbuf_jumbo_9k   9216       0       0           0       0     254          0        0
      audit_record   1280       0       0           0       0       8          0        0
        MAC labels     40       0       0           0       0     254          0        0
            vnpbuf   2624       0       0           0       0      64          0        0
            mdpbuf   2624       0       0           0       0       3          0        0
           nfspbuf   2624       0       0           0       0      16          0        0
            swwbuf   2624       0       0           0       0       8          0        0
            swrbuf   2624       0       0           0       0      16          0        0
          umtx_shm     88       0       0           0       0     126          0        0
           umtx pi     96       0       0           0       0     126          0        0
rangeset pctrie nodes    144       0       0           0       0      62          0        0
      malloc-65536  65536       0       0           0       0       1          0        0
      malloc-65536  65536       0       0           0       0       1          0        0
      malloc-65536  65536       0       0           0       0       1          0        0
      malloc-32768  32768       0       0           0       0       1          0        0
      malloc-32768  32768       0       0           0       0       1          0        0
       malloc-1024   1024       0       0           0       0      16          0        0
        malloc-256    256       0       0           0       0      62          0        0
        malloc-256    256       0       0           0       0      62          0        0
        malloc-256    256       0       0           0       0      62          0        0
        malloc-256    256       0       0           0       0      62          0        0
        malloc-256    256       0       0           0       0      62          0        0
        malloc-256    256       0       0           0       0      62          0        0
        malloc-256    256       0       0           0       0      62          0        0
        malloc-256    256       0       0           0       0      62          0        0
        malloc-128    128       0       0           0       0     126          0        0
        malloc-128    128       0       0           0       0     126          0        0
        malloc-128    128       0       0           0       0     126          0        0
        malloc-128    128       0       0           0       0     126          0        0
        malloc-128    128       0       0           0       0     126          0        0
        malloc-128    128       0       0           0       0     126          0        0
        malloc-128    128       0       0           0       0     126          0        0
        malloc-128    128       0       0           0       0     126          0        0
         malloc-64     64       0       0           0       0     254          0        0
         malloc-64     64       0       0           0       0     254          0        0
         malloc-64     64       0       0           0       0     254          0        0
         malloc-64     64       0       0           0       0     254          0        0
         malloc-64     64       0       0           0       0     254          0        0
         malloc-64     64       0       0           0       0     254          0        0
         malloc-64     64       0       0           0       0     254          0        0
         malloc-64     64       0       0           0       0     254          0        0
         malloc-32     32       0       0           0       0     254          0        0
         malloc-32     32       0       0           0       0     254          0        0
         malloc-32     32       0       0           0       0     254          0        0
         malloc-32     32       0       0           0       0     254          0        0
         malloc-32     32       0       0           0       0     254          0        0
         malloc-32     32       0       0           0       0     254          0        0
         malloc-32     32       0       0           0       0     254          0        0
         malloc-32     32       0       0           0       0     254          0        0
         malloc-16     16       0       0           0       0     254          0        0
         malloc-16     16       0       0           0       0     254          0        0
         malloc-16     16       0       0           0       0     254          0        0
         malloc-16     16       0       0           0       0     254          0        0
         malloc-16     16       0       0           0       0     254          0        0
         malloc-16     16       0       0           0       0     254          0        0
         malloc-16     16       0       0           0       0     254          0        0
         malloc-16     16       0       0           0       0     254          0        0
           pcpu-32     32       0       0           0       0     254          0        0
            pcpu-4      4       0       0           0       0     254          0        0
            fakepg    104       0       0           0       0     126          0        0
          UMA Hash    256       0       0           0       0      62          0        0

Crashes (3):
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets Title
ci-freebsd-main 2021/06/28 13:30 freebsd-src e0893890eb60 9d2ab5df console log report Fatal trap 12: page fault in knlist_remove_kq
ci-freebsd-i386 2021/06/20 22:56 freebsd-src 13604fb0fd43 aba2b2fb console log report Fatal trap 12: page fault in knlist_remove_kq
ci-freebsd-i386 2021/06/20 09:41 freebsd-src 9d1cafb30497 aba2b2fb console log report Fatal trap 12: page fault in knlist_remove_kq
* Struck through repros no longer work on HEAD.