Fatal trap 12: page fault while in kernel mode cpuid = 0; apic id = 00 fault virtual address = 0x0 fault code = supervisor read data, page not present instruction pointer = 0x20:0xffffffff81536022 stack pointer = 0x0:0xfffffe0057623980 frame pointer = 0x0:0xfffffe0057623ac0 code segment = base 0x0, limit 0xfffff, type 0x1b = DPL 0, pres 1, long 1, def32 0, gran 1 processor eflags = resume, IOPL = 0 current process = 1053 (syz-executor) rdi: 0000000000000000 rsi: 0000000000000000 rdx: 0000000000000000 rcx: fffffe00033eee30 r8: 0000000000000000 r9: 0000000000000001 rax: fffffe00033eee30 rbx: fffffe0054931f40 rbp: fffffe0057623ac0 r10: 57ba24e7562217b7 r11: 0000000000000017 r12: 0000000000000000 r13: 000000375801d393 r14: 0000000000000000 r15: fffffe0054931f38 trap number = 12 NMI/cpu0 ... going to debugger timeout stopping cpus panic: page fault cpuid = 0 time = 1745725529[ tKDhrBe:a sdt paickd b10ack53t ratcide :10 0218 ] Stopped at db_trace_self_wrapper() at timercb+0x75db_trace_self_wrapper+0xc6/: f ra m e 0 xf f f ff e 0 05 7 62 3 1 b0 leaq 0x40(%rsp),%rbx db> db> set $lines = 0 db> set $maxwidth = 0 db> show registers cs 0x20 ds 0x3b es 0x3b fs 0x13 gs 0x1b ss 0 rax 0xfffffe0054947740kdb_backtrace() at rcx 0 rdx 0x7ffffkdb_backtrace+0xd0/frame 0xfffffe0057623310 rbx 0xdffff7c000000000 rsp 0xfffffe005771f540vpanic() at rbp 0xfffffe005771f600vpanic+0x257/frame 0xfffffe00576234d0 rsi 0 rdi 0xffffffff813ebc98 timercb+0x68 r8 0 r 9 pa n i c( ) a t 0xc0 r10 0 r11 0x17 r12 0xfffffe0054947de0panic+0xb5/frame 0xfffffe0057623590 r13 0xfffffe0054947740 r14 0x1fffffc00aee3eactrap_pfault() at r15 0xffffffff83b1f380trap_pfault+0xaec/frame 0xfffffe00576236d0 lapic_et rip 0xffffffff813ebca5 timercb+0x75 rflags 0x2 trap() at timercb+0x75trap+0x78e/frame 0xfffffe00576238b0 : leaq 0x40(%rsp),%rbx db> show proc Process 1053 (syz-executor) at 0xfffffe00549275c0: state: NORMAL uid: 0 gids: 0, 0, 5 parecnat:ll t ra p ( ) at pid 765 at 0xfffffe00548d8b00 ABI: FreeBSD ELF32 flag: 0x10000080 flag2: 0 arguments: ./syz-executor exec reaper: 0xfffffe0008007040 reapsubtree: 1 sigparent: 20 vmspace: 0xfffffe005492a920 (map 0xcafflflftfrea0p+0504x892/fa 92r0)ame 0 x f f f(ffmae0p0.p57ma6p2 308xbff0ff f-e0-05-4 t9ra2ap 90cx0c), r ip = 0 xf ff ff f f f 8 15 3 60 22 , r sp = 0 x f(pffmaffpe 0005xf7f6f2f3f98e00,05 4 9 2a a 3 0 ) r b p = 0x ff f f f e0 0 5 76 2 3 a c 0 - -- threads: 2 100218 Run CPU 0 syz-executor 100311 Run CPU 1 syz-executor db> ps pid ppid pgrp uid state wmescga l lo u t_ p r o c es s () a t wchan cmd 1054 1053 765 0 S uwait 0xfffffe006ebd1600 syz-executor 1053 765 765 0 R (threaded) syz-executor 100218 Run CcaP Ul l0o ut _ p ro c e s s+ 0 x 4 5 2 /f ra m e 0 xf f f f f e0 05 7 6 23 ac 0 syz-executor 100311 Run CPU 1 syz-executor 1037 1 765 0 S uwait 0xfffffe0058ce7d00 syz-executor 1036 0 0 0 DL mdwait 0xfffffe0054638000 [md2] 1033 786 424 0 S nanslp 0xffffffff83990401 sleep 1029 1 765 0 S uwait 0xfffffe007a247480 syz-executor 1027 1 765 0 S u w ai t 0x f ff f f e 00 59 e 7 3d 8 0 s yz - e x e cu t o r 10h2a2n d l e e v e n t s( ) a t 1 765 0 S uwait 0xfffffe006e3f7300 syz-executor 1019 1 765 0 S uwait 0xfffffe0059ec0080 syz-executor 1017 1 765 0 S uwait 0xfffffe0059ebf10h0 an d l ee ve nt s +0 x 3e e /f r a m e s0xyzf-fexffefcue0t0or57 6 2 3b103105 1 765 0 S uwait 0xfffffe006ebd2c00 syz-executor 1014 0 0 0 DL mdwait 0xfffffe007a243000 [md1] 1012 1 765 0 S uwait 0xfffffe005a0e9e00 syz-executor 1010 1 765 0 S uwait 0xfffffe006ebd2000 syz-executor 1006 1 765 0 S uwait 0xfffffe0059ec3e80 syz-executor 1002 1 765 0 S uwait 0xfffffe006et3fim8cer8c0 b( ) a t syz-executor 1000 0 0 0 DL - 0xffffffff8393ac20 [accounting] 998 0 0 0 DL mdwait 0xfffffe0054639000 [md0] 992 1 991 0 S uwait 0xffftifmfeer00cb5+80cex37ccb0/0 f ra m e 0 x ff f f f e0 0 57 6 23 b f 0 syz-executor 979 1 765 0 S uwait 0xfffffe006e3f8a80 syz-executor 966 962 962 0 D ifnet_d 0xffffffff83aae480 ifconfig 962 763 962 0 S wait 0xfffffe005490a000 syz-executor 960 956 956 0 D ifnet_d 0xffffffff83aae480 ifconfig 956 763 956 0 S wait 0xfffffe0054931560 syz-executor 949 947 947 0 D tun_con 0xfffffe006e618ca8la p i c _h a n d l e _t ime r () at ifconfig 947 763 947 0 S wait 0xfffffe00548d9060 syz-executor 864 1 764 0 S uwait 0xfffffe0059bfed80 syz-executor 853 0 0 0 DL - 0xffffffff83laa a03 0 0 [ s oa i o d 4 ] p ic _ h a n dl8e52_t i me r + 0x 1 7 f/ f ra m e 0 x ff f ff e 0 05 7 62 3 c3 0 0 0 0 DL - 0xffffffff83aa0300 [soaiod3] 851 0 0 0 DL - 0xffffffff83aa0300 [soaiod2] 850 0 0 0 DL - 0xffffffff83aa0300 [soaiod1] 844 1X ti m e r in t( ) a t 764 0 S uwait 0xfffffe0059ebfa00 syz-executor 822 0 0 0 DL (threaded) [so_splice] 100132 D - 0xfffffe0007e87000 [thr_0] 100133 D - 0 x ff f f f e 00 0 7 e 87 0 4 0 [ th r _ 1 ] X ti m e ri n t + 0 xb 1 / f r am e 0 x f8ff2f0 fe 0 0 57 6 2 3 c 3 0 - 0- - in t e rr up t , r i p = 0 xf f ff f f f f81 54 2 bc6 , r sp = 0x f f ff fe 0 0 57 6 2 3 d 0 8, r b p = 0 xf f ff fe 0 0 5 76 2 3 d1 0 -- - 0 0 DL aiordy 0xfffffe005490c5a0 [aiod4] 819 0 0 0 DL aiordy 0xfffffe005490cb00 [aiod3] 818 0 0 0 DL aiordy 0xfffffe00548e5580 [aiod2] 817 0 0fr e e b s d 32 _ _ u mt x _ o p( ) a t 0 DL aiordy 0xfffffe00548e5ae0 [aiod1] 807 1 765 0 S uwait 0xfffffe006e3f9100 syz-executor 786 776 424 0 S wait 0xfffffe00548e65a0 sh 776 424 4f24r e e b s d3 2 _ _ u mt x _ op + 0 x6 / f r a m e 0x f f f f fe 00 5 7 62 3 d 1 0 0 S wait 0xfffffe00548e6b00 sh 765 763 765 0 R syz-executor 763 761 761 0 S select 0xfffffe006e3f89c0 syz-executor 761 759 761 0 Ss pause 0xfffffe0008024610 csh 759 682 759 0 Ss select 0xfffffe0059ebf940 sshd 748 1 748 0 Ss+ ttyin 0xfffffe0007ff98b0 getty 747 1 747 0 Ss+ ttyin 0xfiffa3f2fe0_0s5y8sdcd14ab0 ll () at getty 746 1 746 0 Ss+ ttyin 0xfffffe0058dd18b0 getty 745 1 745 0 Ss+ ttyin 0xfffffe0058dd1cb0 getty 744 1 744 0 Ss+ ttyin 0xfffffe0058dd20b0 getty 743 i1a 3 2_ s y s c a ll + 0 x 4 8e / f r am e 0 x f ff f f e0 05 7 6 23 f 3 0 743 0 Ss+ ttyin 0xfffffe0058dd24b0 getty 742 1 742 0 Ss+ ttyin 0xfffffe0058dd28b0 getty 741 1 741 0 Ss+ ttyin 0xfffffe0058dd2cb0 getty 740 1 740 0 Ss+ ttyin 0xfffffe0058dd30b0 getty 738 1 18 0 S+ piperd 0xfffffe0059ff45c0 logger 737 736 18 0 S+ nanslp 0xffffffff83990401 sleep 736 1 18 0 S+ wait 0 xfinfftf0fx8e000_s5y48sdca6l56l0_c o mm o n ( ) a t sh 686 1 686 0 Ss nanslp 0xffffffff83990401 cron 682 1 682 0 Ss select 0xfffffe006e3f99c0 sshd 495 1 495 0 Ss select 0xfffffe006e3f9ac0 syslogd 424 1 4 2 4 0i n t0 x 8 0_ s y sc a l l _ co m m o n+ 0 x 9 c/ fr a m e 0 x f f ff d a 80Ss pwanaiitc: m t0xx_flfofckf_fse0p0in5:48 dr7eaceu0 rs ededv don n o n42-r3e c u rs i1v e 4m2u3t ex c6al5 lo Sust @ / sy zsekalleclte r/ m0axnffafgferfse0/0i5389e6c/0ke2rcn0 el /dhsycsl/iekenrnt/k e r3n3_t8i me o ut1. c :353768 c 0 pu Sisd = 0 s teliemect = 017x4f5ff72ff5e520906 e3KDf9Bc:c 0s tdhacclkie nbatc kt ra33c5e: 1 335 0 Ss select 0xfffffe0059ec0240 dhclient 17 0 0 0 DL syncer 0xffffffff83aadca0 [syncer] 16 0 0 0 DL vlruwt 0xfffffe0008026040 [ vdnblr_ut]ra c e_ s el f _ wr ap pe r ( ) a t 15 0 0 0 DL (threaded) [bufdaemon] 100080 D psleep 0xffffffff83aac260 [bufdaemon] 100081 D - 0xfdbf_fftfrf f acf82ee_0s2e1l4f_0 wr a pp e r+ 0x c 6/ f ra m e 0x f ff f f e 00[5bu76fs2p2a c ce d5ae0mo n-0] 100093 D sdflush 0xfffffe0059e888e8 [/ worker] 9 0 0 0 DL psleep 0xffffffff83af7280 [vmdaemon] 8 0 0 0 DL (threaded) [pagedaemon] 100078 D psleep 0xffffffff83add1f8 [dom0] 100082 D launds 0xffffffff83add204 [laundry: dom0] 100083 D umarcl 0xkfdbfff_bffacffk8t1dra8bced9()0 a[utma] 7 0 0 0 DL - 0xffffffff8370dbd0 [rand_harvestq] 6 0 0 0 DL pftm 0xffffffff844bb710 [pf purge] 5 0 0 0 DL waiting 0xffffffff84kd29b_45ba8c0 kt r a ce +0 x d0 / f ra me 0x ff f ff e 00 57 6 22 d b0 [sctp_iterator] 4 0 0 0 DL (threaded) [cam] 100046 D - 0xffffffff836d8340 [doneq0] 100047 D - 0xffffffff836d82c0 [async] 100076 D - 0xffffffff836d8140 [scanner] 3 0 0 0 DL (threaded) [crypto] 100043 D crypto_ 0xffffvffpafnf8ic(3)ad 8 a 00 [ c ry p to ] 1at00044 D crypto_ 0xfffffe0058570030 [crypto returns 0] 100045 D crypto_ 0xfffffe0058570080 [crypto returns 1] 14 0 0 0 DL seqstat 0xfffffvepa00ni5c4+70fx2850878/f r am e 0 x ff f ff e 00 5 76 2 2 f7 0 [sequencer 00] 13 0 0 0 DL (threaded) [geom] 100037 D - 0xffffffff83938de0 [g_event] 100038 D - 0xffffffff83938e00 [g_up] 100039 D - 0xffffffff83938e20 [g_down] 2 0 0 0 WL (threaded) [clock] 100031 I [ cl oc k ( 0 )] 1 0 0 0 32p aniI c( ) a t [clock (1)] 12 0 0 0 WL (threaded) [intr] 100013 I [swi6: task queue] 100014 Ip a ni c+ 0x b 5 /f r am e 0x ff f ff e0 0 5 7 6 23 0 3 0 [swi6: Giant taskq] 100016 I [swi5: fast taskq] 100033 I [swi1: netisr 0] 100034 I [swi1: hpts] 100035 I [swi1: hpts] 100048 I [irq24: virtio_pci0]_ _1mt0x0_04l9o c k _ sp i n _f l ag s ( ) a t I [irq25: virtio_pci0] 100050 I [irq26: virtio_pci0] 100051 I [ i r q 2 7: vi r t io _ p ci 0] 1 0__00mt52x _ l o c k_ s p in _ f la g s + 0 x 2 8b / fr a me 0 x ff f f f e0 0 5 76 2 3 0 f0 I [irq28: virtio_pci1] 100053 I [irq29: virtio_pci1] 100054 I [irq30: virtio_pci1] 100055 I [irq31: virtio_pci1] 100056 I [irq32: virtio_pci1] 100061 I [ i rq 1 0: v i r ti o_ p c i 2 ] 1 0 0 0 63 _cI a ll o u t_ s to p _ s a fe ( ) at [irq1: atkbd0] 100064 I [irq12: psm0] 100065 I [swi0: uart uart+_+]ca l1lo00u0t_69sto p _s a f e + 0x 2 62/ f ra m e 0x ff f f fe 00 57 6 2 3 22 0 I [swi1: pf send] 11 0 0 0 RL (threaded) [idle] 100003 CanRun [idle: cpu0] 100004 CanRun [idle: cpu1] 1 0 1 0 SLs wait 0xfffffe0008007040 [init] 10 0 0 0 DL audit_w 0xffffffff83ad94a0 [asuhutdidtown]_ r e s et t o d r ( ) a t 0 0 0 0 DLs (threaded) [kernel] 100000 D parked 0xffffffff84a16ff0 [swapper] 100005 D - 0xfffffe0008bf9d00 [ssohfuttidr q _0o]wn_ 1r0es00et06t o dr + 0x 21 / f r am e 0x f f ff f e 00 57 62 32 5 0 D - 0xfffffe0008bf9c00 [softirq_1] 100007 D - 0xfffffe0008bf9b00 [if_io_tqg_0] 100008 D - 0xfffffe0008bf9a00 [if_io_tqg_1] 100009 D - 0xfffffe0008bf9900 [if_config_tqg_0] 100010 D - 0xfffffe0008bf9800 [kqueue_ctx taskq] 100011 D - 0xfffffe0ke00rn8_bfre9b70o0 ot () a t [jail_remove taskq] 100012 D - 0xfffffe0008bf9600 [bus taskq] 100015 D - 0xfffffe0008bf9300 [thread taskq] 100017 D - 0 x f f f f f e 00 0 8 b f9 10 0 [a i od _ k ic k t as k q ] 1 00k0er1n8_ re bo ot + 0 x5 4 e /f r a m e 0x ff f f f e0 0 57 62 3 31 0 D - 0xfffffe0008bf9000 [deferred_unmount ta] 100019 D - 0xfffffe0008bf8e00 [inm_free taskq] 100020 D - 0xfffffe0008bf8d00 [in6m_free taskq] 100021 D - 0xfffffe0008bf8c00 [linuxkpi_irq_wq] 100022 D - 0xfffffe0008bf8b00 [linuxkpi_short_wq_0] 100023 D - 0 xf f f ff e 0 0 0 8 bf8 b 00 [l i n u xk pi _ s ho r t_ w q _ 1 ] 1 0 0 02vp4 an ic () at D - 0xfffffe0008bf8b00 [linuxkpi_short_wq_2] 100025 D - 0xfffffe0008bf8b00 [linuxkpi_short_wq_3] 100026 D - 0xffffvpfaen0i0c08+b0fx8 a 0033 8 / fr am e 0 x ff f ffe 0 0 576 2 34 d 0 [linuxkpi_long_wq_0] 100027 D - 0xfffffe0008bf8a00 [linuxkpi_long_wq_1] 100028 D - 0xfffffe0008bf8a00 [linuxkpi_long_wq_2] 100029 D - 0xfffffe0008bf8a00 [linuxkpi_long_wq_3] 100036 D - 0xfffffe0008bf8900 [firmware taskq] 100041 D - 0xfffffe0008bf8600 [cryptpaon_0i]c( ) 1a0t0042 D - 0xfffffe0008bf8600 [crypto_1] 100057 D - 0xfffffe0008bf8400 [vtnet0 rxq 0] 100058 D - 0xfffffe0008bf8300 [ v tpneatn0i c+t0xqx b05]/ f1r0am0e0 59 D 0 x ff f ff e 00 5 7 62 3 59 0 - 0xfffffe0008bf8200 [vtnet0 rxq 1] 100060 D - 0xfffffe0008bf8100 [vtnet0 txq 1] 100062 D vtbslp 0xfffffe0058589700 [virtio_balloon] 100066 D - 0xffffffff8275c8e0 [deadlkres] 100070 D - 0xfffffe0058f5bb00 [acpi_task_0] 100071 D - 0xfffffe0058f5bb00 [acpi_task_1] 100072 D - 0 xf f f ff e0 0 5 8 f5 b b 00 [ actrpia_pt_apsfak_ul2t]() 10at0074 D - 0xfffffe0008bfa100 [mca taskq] 100075 D - 0xfffffe0008bf8500 [CAM taskq] 100077 D - 0xfffffe0008bf7e00 [ipsec_offlotraadp]_p fdabu> ltsh+o0wx aaecll/f rlaomcek s0 xfPfr o ceffssfe 00 57 62 3 6 d0 1053 (syz-executor) thread 0xfffffe0054947740 (100311) shared sx vm map (user) (vm map (user)) r = 0 (0xfffffe005492a980) locked @ /syzkaller/managers/i386/kernel/sys/vm/vm_map.c:4993 Process 949 (ifconfig) thread 0xfffffe0054921740 (100150) exclusive sx ifnet_detach_sx (ifnet_detach_sx) r = 0 (0xffffffff83aae480) locked @ /syzkaller/managers/i386/kernel/sys/net/if.c:3027 db> show malloc Type InUse Me mU s e Re q ue s ts t ra p () a t pf_hash 6 12804K 6 linker 376 5023K 486 tcp_hpts 7 4801K 7 devbuf 4188 4 3 24 K 4 2 1 6 t r a p+ 0x 7 8e / f ra m e 0 xf f ff f e 0 057 6 23 8 b0 sysctloid 35205 2074K 35280 vtbuf 24 1968K 46 kobj 330 1320K 521 newblk 414 11c2a8llK tr ap ( ) at 1060 vfscache 3 1025K 3 pcb 43 691K 297 inodedep 130 561K 313 ufs_quoctala l tr ap + 0x 8 /f ra m e 0 x ff f ff e 00 5 76 23 8 b0 - -- t r ap 1 5 102Kx c , r i p = 0x f ff ff f ff 81 53 6 0 22 , rs p = 0 x ff ff f e0 0 5 7 6 23 98 0 , rbp = 0 x f f f f f e0 0 5 76 2 3a c0 - -- 1 vfs_hash 1 512K 1 callout 2 512K 2 intr 4 472K 4 filedecascll o ut _p r o ce ss ( ) a t 52 409K 431 subproc 172 358K 1162 vnet_data 2 224K 2 acpitask 1 c22al4Klo u t _ p ro ce s s+ 0 x4 52 /fr a me 0x ff f ff e 00 5 76 23 a c 0 1 KTRACE 101 201K 631 acpica 1674 184K 54408 vmem 5 144K 7 tidhash 3 141K 3 pagedep 45 139K 181 tfo_ccache 1 128K 1 IP reass 1 1 2 8K 1 h an d le e v e nt s ( ) a t DEVFS1 117 117K 144 sem 4 106K 4 gtaskqueue 18 98K 18 bus 994 8h1aKnd l e ev e nt s +0 x 3e e / f ra m e 0 xf ff f f e0 0 5 7 62 3b 30 5040 mtx_pool 3 74K 3 syncache 1 68K 1 NFSD srvcache 3 68K 3 module 520 65K 520 ddb_capture 1 64K 1 kdtrace 234 44K 1367 umtx 336 4 2 K 33 6 t i me r c b () at temp 36 38K 2229 DEVFS3 131 33K 146 hostcache 1 32K 1 shm 1 3 2 K 2 t i m e rc b +0 x 3 c b / fr a m e 0x ff ff fe 0 0 5 7 6 2 3b f0 msg 4 30K 4 kbdmux 6 28K 6 LRO 22 23K 36 routetbl 390 22K 1179 DEVFS_RULE 56 20K 56 BPF 16 20K 23 ifaddr 61 17K 113 ufs_mount 4 17 K 5 la p i c _ ha n dle _ t im e r( ) at proc 3 17K 3 tty 16 16K 16 dirrem 63 16K 234 ithread 90 1 5 K 9 0 la pi c_ h a n d le _t im e r + 0 x 1 7f / f ra m e 0 x f ff f f e 00 5 7 62 3 c 30 bus-sc 34 15K 1637 GEOM 82 14K 608 eventhandler 163 14K 163 ifnet 7 13K 1 2 Xt i me r in t ( ) at md_disk 5 13K 5 kenv 95 12K 95 lltable 37 11K 83 CAM queue 5 1 1 K 1 5 28 X t i m er in t + 0x b1 / f r am e 0 xf f ff f e0 0 57 6 2 3 c3 0 - - - rminante r r up t , ri p = 0x f ff f fff f 8 15 4 2b c 6, r s p = 0 x f ff ff e 00 57 6 2 3 d0 8 , r b p = 0x f ff f f e0 0 57 62 3 d 1 0 - - - 82 10K 437 kqueue 89 10K 1140 rpc 8 9K 8 plimit 23 9K 3 7 9 f re eb s d 3 2_ _u m tx _ op () at bmsafemap 2 9K 284 devstat 4 9K 4 UART 12 9K 12 ksem 1 8K 1 fr ee b sd 3 2 __ um t x_o p + 0x 6 / f r a m e 0 x f f f f f e0 0 57 62 3 d1 0 shmfd 1 8K 4 pfs_vncache 1 8K 1 md_sectors 2 8K 2 ether_multi 96 8K 302 audit_evclass 239 8K 301 taskqueue 69 8K 69 cred 26 7K 208 sglist 6 7 K 6 i a 32 _s y sc a l l ( ) a t CAM DEV 3 6K 510 in6_multi 45 6K 115 pf_ifnet 15 6K 45 pfs_nodes 22 6 K 2 2 i a 32 _sy s ca l l + 0 x4 8e / f ra m e 0 x f f ff f e 0 05 7 623 f 30 freefile 41 6K 185 pwddesc 81 6K 1061 newdirblk 40 5K 162 indirdep 19 5K 119 ufs_dirhash 24 5K 24 UMA 269 5K 269 vt 11 5K 11 memdesc 1 4 K 1 i nt 0 x 8 0_ s y sc al l _ c om m o n () a t MCA 32 4K 32 evdev 4 4K 4 sctp_atcl 10 4K 62 diradd 3 0 i nt 0x 8 0 _s ys c a l l _ c o m mo n+ 0x 9 c /f ra m e 0 x f f ff da 8 0 p a n4icK : m t x_ l oc k _26sp5in : re c ur s ed o n m nkodnir- re c ur si v e m29ut e x ca l lo u t 4@K / s y z ka l l e r/3m2an4a g er s/ i 3 8 6 / kefrreneewl/orsyk s /k er n /k e r n _t i15me ou t. c :5 7 6 4 K c pu id = 0 3t2im1e = 1 7 45 7 2a55c2p9is emKD B : s ta c k b 2ac8k t ra c e : 4K 28 DEVFSP 54 4K 155 proc-args 101 3K 2247 kcovinfo 45 3K 1 08 db _t r a c e_ se l f_ wr a pp e r( ) a t terminal 11 3K 11 CC Mem 21 3K 326 session 21 3K 44 se l fd 41 3 K 8 02 5 0 d b _ t ra c e_ s e lf _w ra pp e r + 0x c 6 /fr a m e 0 x ff ff f e 0 0 57 6 2 2 6f 0 acpidev 20 3K 20 hhook 8 3K 10 clone 9 3K 9 uidinfo 3 3K 12 pf_rule 1 2K 10 local_apic 1 2K 1 io_apic 1 2K 1 i p s e c - s a q 2 2K 2 k d b_ ba c kt r ac e ( ) a t Unitno 28 2K 70 lockf 16 2K 46 CAM XPT 22 2K 543 tun 4 2 K 9 kd b_ b ac k tr a ce + 0 x d0 / f ra me 0 x f f f ff e 0 0 5 7 6 2 2 85 0 toponodes 6 2K 6 ipsecpolicy 2 2K 2 ip6ndp 10 2K 24 sctp_ifa 9 2K 24 msi 9 2K 9 netlink 2 2K 183 inpcbpolicy 34 2K 609 v p a n i c ( ) a t softdep 1 1K 1 sahead 1 1K 1 secasvar 1 1K 1 in_multi 4 1 K 13 vp a n i c+ 0 x 2 5 7 / fr a m e 0 xf f ff f e0 0 5 7 6 2 2a 1 0 nhops 6 1K 8 vnodemarker 2 1K 12 select 8 1K 36 NFSD session 1 1K 1 CAM periph 4 1K 271 osd 26 1K 342 ipsec 3 1K 3 pa n i c( ) a t mld 6 1K 11 igmp 6 1K 11 pfil 6 1K 6 isadev 6 1K 6 p a n i c+0 x b 5/ f r a m e 0 xf f f f fe 00 5 76 22 ad0 mount 16 1K 388 pci_link 10 1K 10 crypto 4 1K 23 encap_export_host 12 1K 12 sctp_ifn 4 1K 24 freeblks 2 1K 181 cdev 2 1K 2 _ _ m tx _l oc k_ sp i n _f l a gs ( ) at lkpikmalloc 8 1K 9 chacha20random 1 1K 1 biobuf 1 1K 1 sctp_atky 1_0 _m tx _ lo c k _s p in _ f l ag s +0 x2 8b /f r a m e 0 xf fff f e0 05 7 6 22 b 90 1K 63 sctp_timw 1 1K 1 vnodes 1 1K 18 NFSD lckfile 1 1K 1 NFSD V4client 1 1K 1 DEVFS 9 1K 10 CAM SIM 2 1K 2 feeder 7 1 K 7 _ c a ll o u t_ st op _ s af e ( ) a t filecaps 7 1K 81 cryptodev 3 1K 81 tcpfunc 3 1K 3 loginclass 3 1K 5 _ ca l lo ut _ st o p_ s a fe +0 x 26 2/ f r am e 0 xf f f ff e 0 05 7 6 22 c c 0 prison 6 1K 6 sctp_athm 10 1K 62 nexusdev 8 1K 8 apmdev 1 1K 1 atkbddev 2 1K 2 aio 4 1K 5 procdesc 1 1K 1sh0 u t do wn _ r es et t o d r ( ) at pmchooks 1 1K 1 CAM path 4 1K 1034 CAM dev queue 2 1K 2 CAM I/O Scheduler 1 1K 1 s h u t do w n_ r e se t t o d r+ 0x 2 1 / fr a m e 0 x ff f f fe 00 57 6 22 c f 0 soname 4 1K 3518 sctp_vrf 1 1K 1 vnet 1 1K 1 pmc 1 1K 1 filedesc_to_leader 1 1K 2 entropy 2 1K 41 acpiintr 1 1K 1 c pu s 2 1 K 2 ke r n_ r e bo o t( ) at vnet_data_free 1 1K 1 Per-cpu 1 1K 1 p1003.1b 1 1K 1 mqdata 0 0 K 0 k er n_ r e bo o t+ 0 x 5 4e / f ra m e 0 x f f f ff e0 0 5 7 62 2 d b0 ipcomp 0 0K 0 esp 0 0K 0 ah 0 0K 0 filemon 0 0K 4 pf_table 0 0K 0 pf_altq 0 0K 0 pf_osfp 0 0K 0 pvpfan_kirc(ul) ea _it tem 0 0K 0 pf_temp 0 0K 0 tcp_pcm_rack 0 0K 1 tcp_do_rack 0 0 K 0 v pa n i c +0 x 33 8 / f ra m e 0 x f f ff f e 00 57 6 2 2 f 7 0t cp_fsb_rack 0 0K 2 sctp_mcore 0 0K 0 sctp_socko 0 0K 3 sctp_iter 0 0K 32 sctp_mvrf 0 0K 0 sctp_cpal 0 0K 0 sctp_cmsg 0 0K 0 p a ni c () a t sctp_stre 0 0K 0 sctp_athi 0 0K 0 sctp_a_it 0 0K 32 sctp_aadr 0 0 K 0 p a ni c +0 x b5 / f ra m e 0 x ff ff f e0 0 57 62 30 30 sctp_stro 0 0K 1 sctp_stri 0 0K 0 sctp_map 0 0K 2 madt_table 0 0K 2 smartpqi 0 0K 0 ixl 0 0K 0 ice-resmgr 0 0K 0 __ m t x _ l o c k _s pi n_ fl a g s( ) at ice-osdep 0 0K 0 ice 0 0K 0 iavf 0 0K 0 axgbe 0 0K 0 _ _ m t x_ lo c k _ s p in _ fl a g s + 0x 2 8 b / f r a m e 0 xf ff f f e0 05 7 6 2 30 f 0 fpukern_ctx 0 0K 0 xen_intr 0 0K 0 xen_hvm 0 0K 0 legacydrv 0 0K 0 NMI handlers 0 0K 0 bounce 0 0K 0 busdma 0 0K 0_ c a l l ou t _ s t o p _ s a f e ( ) at qpidrv 0 0K 0 dmar_idpgtbl 0 0K 0 dmar_dom 0 0K 0 dmar_ctx 0_ c a ll ou t _s t o p _ sa f e +0 x2 6 2/ f ra m e 0x f ff f f e0 0 5 76 2 32 2 0 0K 0 amdiommu_dom 0 0K 0 amdiommu_ctx 0 0K 0 isci 0 0K 0 iommu_dmamap 0 0K 0 hyperv_socket 0 0K 0 bxe_ilt 0 0K 0 aesni_data 0 0K 0 sh ut d o wn _r e se t t od r () a t xenbus 0 0K 0 vm_fictitious 0 0K 0 UMAHash 0 0K 0 vm_pgdata 0 0 K 0 sh ut do w n_ r e se t t o d r+ 0 x 21 / f ra m e 0x f ff f f e0 0 5 7 6 23 2 5 0 jblocks 0 0K 0 savedino 0 0K 66 sentinel 0 0K 0 jfsync 0 0K 0 jtrunc 0 0K 0 sbdep 0 0K 4 jsegdep 0 0K 0k e rn _ r eb o o t ( ) a t jseg 0 0K 0 jfreefrag 0 0K 0 jfreeblk 0 0K 0 jnewblk 0 0K 0 k er n _ r e bo o t+ 0 x 5 4e / f r a me 0 xf f f ff e 00 5 76 2 3 31 0 jmvref 0 0K 0 jremref 0 0K 0 jaddref 0 0K 0 freedep 0 0K 0 freefrag 0 0K 42 allocindir 0 0K 0 allocdirect 0 0K 0 u fvspa_ntr i m i c( ) at 0 0K 0 mactemp 0 0K 0 audit_trigger 0 0K 0 audit_pipe_presel 0 0 K 0 a udvpit_apniicp+ee0ntx 33 8/ f r a me 0 x f f ff f e 00 5 76 2 34 d0 0 0K 0 audit_pipe 0 0K 0 audit_evname 0 0K 0 audit_bsm 0 0K 0 audit_gidset 0 0K 0 audit_text 0 0K 0 audit_path 0 0K 0 audit_data 0p a ni c ( ) at 0K 0 audit_cred 0 0K 0 ktls_ocf 0 0K 0 MLX5EEPROM 0 0K p0an ic + 0 x b5 /f r am e 0 x f ff f f e0 0 5 76 2 3 5 9 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5E_TLS_RX 0 0K 0 MLX5EEPROM 0 0K 0 MLX5E_TLS 0 0K 0 MLX5EEPROM 0t r ap _p f a u lt () a t 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EN 0 0K 0 M LX 5E EP RO M 0 0K 0 t r ap _ p f a ul t + 0 x ae c / fr a m e 0x f f f ff e 00 5 76 2 3 6d 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5DUMP 0 0K 0 MLX5EEPROM 0 0 K 0 t ra p () a t MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 simple_attr 0 0 K 0 t r a p + 0 x 78e / f ra m e 0x f f f ff e 00 5 76 2 3 8b 0 seq_file 0 0K 0 lkpiskb 0 0K 0 radix 0 0K 0 idr 0 0 K 0 c a ll t ra p ( ) at lkpindev 0 0K 0 lkpimhi 0 0K 0 lkpifw 0 0K 0 lkpi80211 0 0K 0 ca l l t r ap + 0x 8/ f r a m e 0 x f f f ff e 0 0 57 6 2 3 8b 0 -N--LM 0 0 K 0 t r a p 0x c, r i p = 0 xf f f ff f f f 81 5 36 0 2 2, r sp = 0x f f f f f e0 05 7 6 23 9 8 0 , r bp = 0 x f ff f fe 0 0 5 76 2 3a c 0 -- - ipsec-spdcache 0 0K 0 ipsec-reg 0 0K 0 ipsec-misc 0 0K 10 ipsecrequest 0 0 K 0 c al l o u t _p ro c es s ( ) at ip6opt 0 0K 20 ip6_msource 0 0K 0 ip6_moptions 0 0K 0 in6_mfilter 0 0 K 0 c a ll o ut _ pr o ce s s+ 0 x4 52 / f r a me 0 x ff f f f e 0 05 7 62 3 ac 0 frag6 0 0K 0 tcplog 0 0K 0 tcp_hwpace 0 0K 0 ip_msource 0 0K 0 ip_moptions 0 0K 11 in_mfilter 0 0K 0 ipid 0 0K h0an dl e ev e nt s( ) at 80211scan 0 0K 0 80211ratectl 0 0K 0 80211power 0 0K 0 80211nodeie 0 0 K 0 h a nd l e ev e nt s +0 x3 ee/fr a m e 0 x f ff ff e 0 05 76 2 3 b3 0 80211node 0 0K 0 80211mesh_gt 0 0K 0 80211mesh_rt 0 0K 0 80211perr 0 0K 0 80211prep 0 0K 0 80211preq 0 0K 0 80211dfs 0 0K 0 t i8me02r1c1 cb(ry) patto 0 0K 0 80211vap 0 0K 0 iflib 0 0K 0 vlan 0 0 K 0 ti m e r c b+ 0x 3c b / fr a me 0 x f f ff f e 0 05 76 2 3b f 0 gif 0 0K 0 ifdescr 0 0K 0 zlib 0 0K 19 fadvise 0 0K 0 VN POLL 0 0K 2 statfs 0 0K 191 namei_tracker 0 0K 0 export_host 0 l ap i c _h a nd l e _ t i me r ( ) a t 0K 0 cl_savebuf 0 0K 23 lio 0 0K 10 acl 0 0K 0 mblaufp_tiac_g h an d le _t i me r +0x 1 7 f/ f ra m e 0 xf f ff f e0 0 57 6 2 3 c 30 0 0K 0 ktls 0 0K 0 accf 0 0K 0 pts 0 0K 0 Xt i m e ri n t( ) a t timerfd 0 0K 0 iov 0 0K 14239 ioctlops 0 0K 123 eventfd 0 0 K 0 X t im e r i n t+ 0x b 1/ fr a m e 0x f ff f f e0 0 5 7 6 2 3c 3 0 -- - i nWteirtnerusps t, ri p = 0 x ff f ff ff f 81 54 2b c 6 , r s p = 0 xf ff f f e0 05 7 62 3 d 08 , r b p = 0 x ff ff fe 0 05 7 62 3 d1 0 - - - 0 0K 0 stack 0 0K 0 sbuf 0 0K 362 firmware 0 0K 0 fr e e b s d 3 2 __ u m tx _ op ( ) a t compressor 0 0K 0 SWAP 0 0K 0 sysctltmp 0 0K 639 sysctl 0 0frK e eb s d 3 2 _ _ u m tx _ o p +0 x 6 / fr a me 0x ff f ff e0 0 5 76 2 3 d1 0 3 ekcd 0 0K 0 dumper 0 0K 0 sendfile 0 0K 3 rctl 0 0K 0 cache 0 0K 0 prison_racct 0 0K 0 Fail Points 0 0K 0 sigio 0 0K 1 ia 32 _s y s c al l( ) a t pwd 0 0K 0 tty console 0 0K 0 boottrace 0 0K 0 isofs_node 0 0 K 0 i a 32 _ s y s ca l l +0 x4 8 e / fr am e 0 x f ff f f e 0 05 76 2 3 f 30 isofs_mount 0 0K 0 tr_raid5_data 0 0K 0 tr_raid1e_data 0 0K 0 tr_raid1_data 0 0K 0 tr_raid0_data 0 0K 0 tr_concat_data 0 0K 0 md_sii_data 0 0K 0 md_promise_data 0 0K 0 i nt 0 x 8 0_ s y sc a ll _ co mm o n ( ) a t md_nvidia_data 0 0K 0 md_jmicron_data 0 0K 0 md_intel_data 0 0K 0 md_ddf_data 0 0 K 0 i nt 0x 80 _ sy s c al l _c o m mo n+ 0x 9 c/ f ra m e 0 x ff ff d a 80 praaindi_c:d atma t x _ l o ck _s p i n0 : r e c ur s e d o n 0noKn- r e cu rs iv e 9mu0te x c a lgloeuotm @_f /lsayshzmakpa l le r /m an a g er s0 /i 3 86 / ker n el /0syK s/ k e r n / ke r n_t i0m eo u t .c :5 7 6tmp f s cpduiir d = 0 t im e 0 = 1 7 4 5 72 5 52 09K KD B: s t a ck b0a c ktr a c e : tmpfs name 0 0K 0 tmpfs mount 0 0K 0 tmpfs extattr 0 0K 0 NFS FHA 0 0 K 0 d b_ tr a ce _s e l f _ w r ap p e r( ) a t newnfsmnt 0 0K 0 newnfsclient_req 0 0K 0 NFSCL layrecall 0 0K 0 NFSCL sdbe_sstrioacn e_ se l f _w r ap p er +0 xc 6/ f r a me 0x f f ff f e 0 05 76 22 1 9 0 0 0K 0 NFSCL sockreq 0 0K 0 NFSCL devinfo 0 0K 0 NFSCL flayout 0 0K 0 NFSCL layout 0 0K 0 NFSD rollback 0 0K 0 NFSCL diroff 0 0K 0 NEWNFSnokde d b _ b a ck tr ac e () at 0 0K 0 NFSCL lck 0 0K 0 NFSCL lckown 0 0K 0 NFSCL client 0 0kKd b _b a c kt r a c e + 0 x d0 /f r a me 0 xf f f ff e 0 0 5 76 2 22 f 0 0 NFSCL deleg 0 0K 0 NFSCL open 0 0K 0 NFSCL owner 0 0K 0 NFS fh 0 0K 0 NFS req 0 0K 0 NFSD usrgroup 0 0K 0 NFSD string 0 0 K 0 vNpaFSnDi c ( ) a t V4lock 0 0K 0 NFSD V4state 0 0K 0 msdosfs_fat 0 0K 0 msdosfs_mount 0 vp0Ka n i c + 0 x 25 7 / fr am e 0 x f ff f f e0 05 7 62 2 4 b 0 0 msdosfs_node 0 0K 0 DEVFS4 0 0K 0 DEVFS2 0 0K 0 gntdev 0 0K 0 privcmd_dev 0 0K 0 evtchn_dev 0 0K 0 xenstore 0 0 K 0 p an i c ( ) a t xnb 0 0K 0 xen_acpi 0 0K 0 xbbd 0 0K 0 xbd 0 p0Ka ni c +0 xb5 /f r am e 0 x ff f f fe 00 5 7 62 25 7 0 0 Balloon 0 0K 0 sysmouse 0 0K 0 vtfont 0 0K 0 pvscsi 0 0K 0 USBdev 0 0K 0 USB 0 0K 0 twsbuf 0 0K 0__ m tx_ lo c k _ s p in _ fl ag s ( ) at tcp_log_dev 0 0K 0 midi buffers 0 0K 0 mixer 0 0K 0 ac97 0 0K 0 __m t x _ l oc k _s pin _f la gs + 0x 2 8b /f r am e 0 x f f ff fe 00 5 76 2 2 6 3 0 hdacc 0 0K 0 hdac 0 0K 0 hdaa 0 0K 0 SIIS driver 0 0K 0 PUC 0 0K 0 ppbusdev 0 0K 0 sr_iov 0 0K 0 _c al lo u t _ s to p _ sa fe ( ) a t OCS 0 0K 0 OCS 0 0K 0 nvme 0 0K 0 nvd 0 0 K 0 _ c al lo u t _ s to p _s a fe +0 x 2 62 /fr a m e 0 xf f ff f e0 0 57 6 22 7 6 0 netmap 0 0K 0 mwldev 0 0K 0 MVS driver 0 0K 0 mrsasbuf 0 0K 0 mpt_user 0 0K 0 mps_user 0 0K 0 MPSSAS 0 0K 0shu t d o w n_ r es e t t od r ( ) a t mps 0 0K 0 mpr_user 0 0K 0 MPRSAS 0 0K 0 mpr 0 0 K 0 s hu t d ow n _r es e t t od r+0 x 2 1/ fr am e 0 x ff f ff e 00 5 76 2 2 79 0 mfibuf 0 0K 0 malodev 0 0K 0 LED 0 0K 0 ix_sriov 0 0K 0 ix 0 0K 0 ipsbuf 0 0K 0 ciss_data 0 0K k0e rn _ re b oo t ( ) a t BACKLIGHT 0 0K 0 ath_hal 0 0K 0 athdev 0 0K 0 ata_pci 0 0 K 0ker n _r e b oo t+ 0 x5 4 e / fr a me 0x f ff f f e0 0 57 6 2 2 85 0 ata_dma 0 0K 0 ata_generic 0 0K 0 AHCI driver 0 0K 0 agp 0 0K 0 acpipwr 0 0K 0 acpi_perf 0 0K 0 acpicmbat 0 0K 0v p a ni c ( ) a t aacraidcam 0 0K 0 aacraid_buf 0 0K 0 aaccam 0 0K 0 aacbuf 0 0 K 0 vp a ni c +0 x 3 3 8 / f ram e 0 x ff f ff e 0 05 76 22 a1 0 zstd 0 0K 0 XZ_DEC 0 0K 0 nvlist 0 0K 0 SCSI ENC 0 0K 0 SCSI sa 0 0K 0 scsi_pass 0 0K 0 scsi_da 0 0K 69 a ta _d a 0 0 K 0 pa n i c ( ) at scsi_ch 0 0K 0 scsi_cd 0 0K 0 nvme_da 0 0K 0 CAM CCB 0 0 K 5 23 p a n i c+ 0 x b 5/ fra m e 0 x ff f ff e 0 05 7 62 2a d 0 CAM ccb queue 0 0K 0 db> show uma Zone Size Used Free Requests Sleeps Bucket Total Mem XFree mbuf_jumbo_page 4096 8320 1078 14298 0 254 38494208 0 mbuf 256 8606 1821 23804 0 254 2669312 0 BUF TRIE 152 227 11577 997 0 62 1 79 42 0 8 0 __m tx _ lo ck _ s pi n _ f la gs ( ) a t malloc-128 128 12493 124 12760 0 126 1614976 0 malloc-384 384 4157 43 4179 0 30 1612800 0 malloc-4096_ _ mt x _l o c k_ s p in _fl a gs +0 x 2 8 b /f ra me 0 x f ff f f e0 05 7 6 22 b9 0 4096 332 4 593 0 2 1376256 0 UMA Slabs 0 112 11154 0 11154 0 126 1249248 0 RADIX NODE 152 7519 380 39349 0 62 1200648 0 mbuf_cluster 2048 508 0 508 0 254 1040384 0 vmem btag 56 16406 121 1640_6 c a ll o u t_ s t op _ sa f e ( ) a t 0 254 925512 0 malloc-65536 65536 13 0 16 0 1 851968 0 FFS inode 1168 567 28 770 0 8 6_ c a9l4lo96ut0_ s to p_ sa fe +0 x 26 2/ fr a me 0 x ff ff f e 00 57 62 2c c0 0 sctp_ep 1152 10 501 61 0 254 588672 0 sctp_asoc 2256 0 255 1 0 254 575280 0 socket 1024 55 453 2060 0 254 520192 0 lkpicurr 168 2 3094 2 0 62 520128 0 pbuf s2h62ut4 d own _ re se t to dr () at 0 198 0 0 2 519552 0 malloc-16384 16384 25 3 389 0 1 458752 0 malloc-4096 4096 100 4 12 10 0 2 4 25 98 4 0 sh u td o w n _ re se tt o dr +0 x 21 / fr a m e 0 x ff f f fe 0 0 57 6 22 c f0 VM OBJECT 264 1347 63 16540 0 30 372240 0 malloc-32768 32768 5 6 87 0 1 360448 0 THREAD 1824 152 16 311 0 8 306432 0 VNODE 440 607 86 817 0 30 304920 0 md2 4096 73 1 7 3 0 2 3 0 3 1 04 0 k e r n_ r e b o o t( ) a t md1 4096 73 1 73 0 2 303104 0 256 Bucket 2048 133 11 1023 0 8 294912 0 malloc-204k8er n _r e b oo t + 0x 54 e / fr a m e 0 x ff f f f e0 05 7 6 22 d b0 2048 114 14 227 0 8 262144 0 malloc-64 64 3983 112 5044 0 254 262080 0 malloc-16 16 14534 216 14939 0 254 236000 0 DEVCTL 1024 95 125 221 0 0 225280 0 malloc-65536 65536 3 0 3 0 1v pan i c( ) a t 196608 0 sctp_raddr 736 0 264 1 0 254 194304 0 MAP ENTRY 96 1747 269 54115 0 126 193536 0 vpan i c+ 0 x 3 3 8/ fr a m e 0 x ff f f fe 0 0 57 6 22 f 7 0 UMA Zones 768 241 3 241 0 16 187392 0 malloc-32 32 5376 294 6454 0 254 181440 0 malloc-128 128 1150 245 25578 0 126 178560 0 FFS2 dinode 256 567 123 770 0 62 176640 0 lkpimm 56 1 30pa95ni c () at 1 0 254 173376 0 unpcb 320 10 506 1267 0 254 165120 0 FPU_save_area 832 154 44 450 0 16 1 6 4 7 36 0 pa n i c +0 x b 5/ f r am e 0 xf f f f f e 0 0 57 62 3 0 3 0 malloc-2048 2048 6 74 1039 0 8 163840 0 malloc-1024 1024 129 15 168 0 16 147456 0 S VFS Cache 104 1010 394 1310 0 126 146016 0 malloc-256 256 446 124 1221 0 62 145920 0 malloc-65536 65536 0 2 6__4 mt x _l oc k _s pi n _ f l a g s () a t 0 1 131072 0 malloc-65536 65536 0 2 110 0 1 131072 0 malloc-65536 65536 0 2 8 0 1 1 31__07mt2x _ l oc k _ s pi n_ fl a g s + 0 x 28 b / fr a me 0 x f f f ff e0 05 7 6 23 0 f 0 0 malloc-32768 32768 2 2 13 0 1 131072 0 mbuf_packet 256 0 508 805 0 254 130048 0 PROC 1376 80 8 1054 0 8 121088 0 ksiginfo 112 74 970 118 0 126 116928 0 g__bcioal lo u t _ s to p _s a f e( ) a t 408 0 270 6877 0 30 110160 0 filedesc0 1072 81 17 1061 0 8 105056 0 malloc-384 384 218 2 2 4 1 5 0 3 0 9 2 16 0 0 _ca l l o u t_ s to p _ s af e+ 0 x2 6 2 /f r a me 0 xf f f f f e0 0 5 7 6 2 32 2 0 UMA Kegs 384 227 6 227 0 30 89472 0 malloc-4096 4096 14 6 41 0 2 81920 0 malloc-256 256 224 91 415 0 62 80640 0 128 Bucket 1024 52 15 257 0 16 68608 0 malloc-64 64 5s1h4u t do w n _re s et to dr ( ) a t 557 1584 0 254 68544 0 malloc-128 128 393 134 731 0 126 67456 0 malloc-128 128 174 353 11sh52ut do w n _r e se t to d r+ 0x 2 1 / fr a me 0x f f ff fe 0 05 7 62 3 2 50 0 126 67456 0 malloc-65536 65536 1 0 1 0 1 65536 0 malloc-32768 32768 0 2 120 0 1 65536 0 malloc-16384 16384 4 0 5 0 1 65536 0 malloc-8192 8192 8 0 9 0 1 65536 0 ker n _ re b o o t () a t malloc-256 256 166 89 702 0 62 65280 0 malloc-256 256 98 157 435 0 62 65280 0 tcp_inpckeb r n_ re bo o t +0 x5 4e /f r am e 0x f ff f fe 0 0 57 62 3 3 10 1304 21 27 326 0 8 62592 0 64 Bucket 512 75 29 4159 0 30 53248 0 malloc-64 64 384 435 94613 0 254 52416 0 malloc-64 64 491 328 995 0 254 52416 0 malloc-256 256 97 98 4v9p5a ni c( ) at 0 62 49920 0 malloc-256 256 91 104 855 0 62 49920 0 32 Bucket 256 81 114 8732 0 62v pa n i c + 0 x3 3 8 /f ra m e 0 x f f f f f e0 05 7 6 23 4d 0 49920 0 DIRHASH 1024 34 14 34 0 16 49152 0 NAMEI 1024 0 48 14961 0 16 49152 0 malloc-16384 16384 1 2 3 0 1 49152 0 malloc-8192 8192 4 2 54 0 1 49152 0 pmaanllicoc()- 81 9 2 at 8192 5 1 7 0 1 49152 0 malloc-2048 2048 14 10 34 0 8 49152 0 malloc-2048 2048 9 1 5 pa n ic + 0x b 5 /f r a m e 0x f ff f fe 0 05 7 62 35 9 0 47 0 8 49152 0 malloc-2048 2048 11 13 99 0 8 49152 0 malloc-1024 1024 7 41 1659 0 16 49152 0 malloc-384 384 77 43 155 0 30 46080 0 da_ccb 544 0 84 1797 0 16 45696 0 sy n c ac h e 1 68 0 2 6 4 3 0 2 5 4 4 4 35 2 0 tr ap _ p f au lt ( ) a t malloc-4096 4096 4 6 569 0 2 40960 0 pcpu-8 8 4796 324 5835 0 254 40960 0 VMSPACE 584 51 1 9 10t2ra6p _p f a u lt +0 x a ec /f r a m e 0 x f f f ff e0 0 57 6 23 6 d 0 0 16 40880 0 pipe 736 23 32 419 0 16 40480 0 udp_inpcb 408 11 79 213 0 30 36720 0 malloc-64 64 95 472 1088 0 254 36288 0 malloc-64 64 199 368 1870 0 254 36288 0 malloc-64 6 4 8 5 5 9 2 7 7 0 2 5 4 36 28 8 0 tra p( ) a t malloc-64 64 40 527 52 0 254 36288 0 tcp_bbr_map 128 0 279 21 0 126 35712 0 malloc-128 128 2 4 2 5 5 8 6 t r a p+ 0x 7 8e /f r am e 0 xff f f fe 0 0 57 62 3 8b 0 0 126 35712 0 malloc-128 128 55 224 3353 0 126 35712 0 malloc-128 128 85 194 951 0 126 35712 c0a lltr a p( ) at malloc-128 128 46 233 616 0 126 35712 0 routing nhops 256 18 117 53 0 62 34560 0 ttyoutq 256 7 2 6 3 1c60a l lt r ap + 0 x8 /f r a m e 0 xf f f ff e 00 5 76 2 3 8b 0 -0- - tr ap 0x c , r i p = 0 xf ff f ff f f8 1 5 3 60 2 2, r s p = 0 xf f f f fe 00 57 6 2 39 80 , r bp = 0 x f f f ff e0 0 5 76 23 a c 0 -- - 62 34560 0 malloc-256 256 91 44 594 0 62 34560 0 malloc-256 256 8 127 1233 0 62 34560 0 c a ll o u t _p r oc e s s( ) a t ripcb 376 2 88 67 0 30 33840 0 malloc-2048 2048 0 16 50 0 8 32768 0 malloc-10ca2ll4 ou t _p r o ce ss + 0x 45 2 /f r am e 0x f f f f fe 00 5 76 2 3 a c 0 1024 3 29 56 0 16 32768 0 malloc-1024 1024 3 29 160 0 16 32768 0 malloc-1024 1024 18 14 43 0 16 32768 0 malloc-1024 1024 20 12 21 0 16 32768 0 malloc-1024 1024 2 30 22 0 1 6 3 27 68 0 ha n dl e ev en t s( ) a t malloc-512 512 1 63 122 0 30 32768 0 malloc-512 512 17 47 39 0 30 32768 0 malloch-an5d1l2 e e ve nt s +0 x 3 e e / f ra m e 0 x f ff f fe 00 57 6 2 3b 3 0 512 2 62 28 0 30 32768 0 malloc-512 512 2 62 49 0 30 32768 0 malloc-512 512 2 62 71 0 30 32768 0 malloc-512 512 1 63 4 0 30 32768 0 pcpu-64 64 495 17 495 0t i m er cb ( ) at 254 32768 0 tcp_bbr_pcb 896 0 36 4 0 16 32256 0 ttyinq 160 135 65 300 0 62 3 20 00 0 tim e rc b +0 x 3c b /f r a me 0 x f f ff f e 0 0 5 7 62 3 b f0 Files 80 217 183 8848 0 126 32000 0 PGRP 120 26 238 56 0 126 31680 0 clpbuf 2624 0 12 33 0 4 31488 0 pf tags 104 1 272 4 0 126 28392 0 sctp_laddr 48 0 588 36 0 2l5ap4 i c_ h a nd l e_ t i m er ( ) a t 28224 0 rl_entry 48 4 584 4 0 254 28224 0 malloc-32 32 402 480 1231 0 254 28224 0 16 B u ck e t 14 4 63 13 3 30 2 0 62 2 8 2 2 4 0 l ap ic _ ha n d le _ ti m e r+ 0 x1 7f / f r ame 0 x ff f ff e 0 0 57 6 23 c3 0 4 Bucket 48 7 581 10 0 254 28224 0 AIO 208 1 132 44 0 62 27664 0 TURNSTILE 136 169 Xt2i0m e ri n t( ) a t 169 0 62 25704 0 cpuset 200 7 121 7 0 62 25600 0 malloc-8192 8192 3 0 3 0 1 X ti m e ri nt + 0 x b1 / fr a me 0x ff f f f e0 0 57 6 2 3 c 3 0 - --2 45 7 6 0 int er r up t , r ip = 0 xf f f ff f f f8 15 4 2 b c 6 , r sp = 0x f ff f fe 0 05 7 62 3d 0 8 , rb p = 0x f ff f fe 0 05 7 62 3 d 1 0 - - - malloc-8192 8192 1 2 82 0 1 24576 0 ertt_txseginfo 40 0 606 1245 0 254 24240 0 PWD 40fr e e b s d 3 2 __ um t x_ op ( ) at 31 575 227 0 254 24240 0 rtentry 168 21 123 53 0 62 24192 0 8 Bucket 80 54 246fr e e b s d3 2 _ _u mt x _o p +0 x6 / f r am e 0 x ff ff f e 00 57 6 23 d 10 387 0 126 24000 0 itimer 352 0 66 7 0 30 23232 0 malloc-384 384 7 53 7 0 30 23040 0 malloc-384 384 0 60 343 0 30 23040 0 malloc-384 384 2 58 3 0 30 23040 0 m al l o c - 38 4 3 8 4 3 8 2 2 4 1 7 0 3 0 2 30 4 0 0 i a 32 _ sy sc al l( ) a t malloc-384 384 2 58 33 0 30 23040 0 Mountpoints 2816 2 6 6 0 4 22528 0 SLEEPQUEUE 88 169ia 3 2_ s ys c a l l+ 0 x 48 e / f ra me 0 x f ff ff e00 5 7 62 3 f 3 0 87 169 0 126 22528 0 hostcache 64 2 313 2 0 254 20160 0 ertt 72 21 259 326 0 126 20160 0 malloc-32 32 44 586 473 0 254 20160 0 malloc-32 32 88 542 1157 0 254 20160 0 i nt 0 x 80 _ s y s c al l_ c om m o n( ) at malloc-32 32 359 271 531 0 254 20160 0 malloc-32 32 83 547 233 0 254 20160 0 malloc-32 32 2in7 t 0x 80 _ sy s ca l l_ c om m o n+ 0 x 9 c /f r am e 0 xf f f f d a 80 p6a03n i c : m t x2_l7o0ck4_ s p in : r0 ec ur s2e5d 4 o n n on 2-r01ec6u0 r si v e m u 0t ex ca l lo u t @ / 2s yBzkucaklelet r/ m a n32a ge r s/ i3668 6/ ke r n56el4 / s y s /k er n49/k9e r n _t i m 0e ou t . c2:55476 c p20ui16d 0 = 0 t im e0 = 1 7 45 7 25 5 2 9 AKDIOBCB: s t a c55k2 ba c kt r ac0e : 35 76 0 16 19320 0 L VFS Cache 320 0 60 24 0 30 19200 0 vmem 1856 2 7 2 0 8 1 67 0 4 0 db_ treapocec_hs_relefc_owrdr appcpepur (2)5 6 4 60 4 0 6 2 16 3 84 0 at malloc-16384 16384 1 0 1 0 1 16384 0 malloc-16384 16384 1 0 1 0 1 16384 0 ma l l o c - 1 6 3 8 4 1 6 38 4 1 0 1 0 1 1 6 38 4 0 d b_ t r ac e _ s e lf _w r a p p er + 0 x c6 /f r a m e 0 xf f ff fe 0 05 7 62 1 c3 0 malloc-8192 8192 2 0 2 0 1 16384 0 malloc-8192 8192 0 2 23 0 1 16384 0 malloc-8192 8192 2 0 2 0 1 16384 0 malloc-4096 4096 1 3 32 0 2 16384 0 malloc-4096 4096 3 1 5 0 2 16 38 4 0 kdb _ ba c k tr a c e () a t malloc-4096 4096 1 3 192 0 2 16384 0 malloc-4096 4096 0 4 13 0 2 16384 0 malloc-2048 2kd04b_8 b a ck t ra ce + 0 x d 0/ f ra me 0 x f ff ff e0 0 5 762 1 d9 0 4 4 4 0 8 16384 0 malloc-2048 2048 1 7 192 0 8 16384 0 malloc-1024 1024 1 15 1 0 16 16384 0 malloc-512 512 1 31 1 0 30 16384 0 malloc-512 512 0 32 1 0 30 1v63pa 84n i c () a t 0 SMR CPU 32 8 503 8 0 254 16352 0 kenv 258 17 43 1065 0 30 15480 0 vp an i c+ 0x2 5 7/ f r a me 0 xff ff f e 00 5 7 62 1 f 5 0 tcp_rack_pcb 1088 0 14 1 0 8 15232 0 mqnode 416 3 33 3 0 30 14976 0 udplite_inpcb 408 0 36 3 0 30 14688 0 SMR SHARED 24 8 503 8 0 254 12264 0 malloc-32 32 13 p36a5ni c ( ) a t 50 0 254 12096 0 KNOTE 160 2 73 190 0 62 12000 0 malloc-16 16 28 722 82 0 2 54 12 0 00 0 pa ni c + 0 x b5 / f r a me 0 xf f ff f e 00 5 7 6 22 0 1 0 malloc-16 16 74 676 621 0 254 12000 0 malloc-16 16 71 679 403 0 254 12000 0 malloc-16 16 239 511 4654 0 254 12000 0 malloc-16 16 9 741 273 0 254 12000 0 malloc-16 16 265 48 5 2 73 0 2 5 4 12 0 0 0 0 _ _ m t x_ l oc k _s pi n_ f la gs ( ) at malloc-16 16 14 736 24796 0 254 12000 0 cryptop 280 0 42 1 0 30 11760 0 AIOLI_O_ m27t2x_ l o c k _ sp i n _ fl ag s + 0 x 28 b /f r am e 0 x ff f f f e 0 05 7 62 2 0 d 0 0 42 5 0 30 11424 0 pcpu-16 16 8 504 8 0 254 8192 0 vtnet_tx_hdr 24 0 334 1584 0 254 8016 0 UMA Slabs 1 176 9 13 9 0 62 3872 0 KMAP ENTRY 96 12 27 14 0 0 3 7 4 4 0 _cal lo ut _s to p _s af e( ) a t splice 184 0 0 0 0 62 0 0 FFS1 dinode 128 0 0 0 0 126 0 0 ada_cc_b c a l lo ut _ st o p _ sa f e +0 x2 6 2/ f r a me 0x f f ff f e 0 05 7 62 22 0 0 272 0 0 0 0 30 0 0 swblk 136 0 0 0 0 62 0 0 swpctrie 152 0 0 0 0 62 0 0 cdg_qdiffsample 16 0 0 0 0 254 0 0 pf state scrubs 40 0 0 0 0 25 4 0 sh u t do wn _r e s et t o dr () a t 0 pf frag entries 40 0 0 0 0 254 0 0 pf frags 256 0 0 0 0 62 0 0 pf tshaubtled ow n_ r es e t t od r + 0 x2en1t/rfriaes 1 6m0 e 0 x ff f ff e 0 05 7 62 22 3 0 0 0 0 0 254 0 0 pf table entry counters 64 0 0 0 0 254 0 0 pf UDP mappings 104 0 0 0 0 126 0 0 pf source nodes 152 0 0 0 0 254 0 0 pf state keys 88 0 0 0 0 1 2 6 0 0 k e r n_ reb oo t( ) a t pf states 384 0 0 0 0 254 0 0 pf mtags 184 0 0 0 0 62 0 0 tcp_rackke_rmna_p re b oo t + 0x 54 e/ f ra me 0 x f ff f fe 00 5 76 2 2 2f 0 128 0 0 0 0 126 0 0 tfo_ccache_entries 80 0 0 0 0 126 0 0 tfo 4 0 0 0 0 254 0 0 sackhole 32 0 0 0 0 254 0 0 ipq 56 0 0 0 0 2 5 4 0 0 vpa n ic ( ) at sctp_asconf_ack 48 0 0 0 0 254 0 0 sctp_asconf 40 0 0 0 0 254 0 0 sctp_stream_msg_voputan i c + 0 x 3 38 /f r am e 0 xf ff f f e 0 01571262 24 b 0 0 0 0 0 254 0 0 sctp_readq 152 0 0 0 0 254 0 0 sctp_chunk 152 0 0 0 0 254 0 0 tcp_log_id_node 120 0 0 0 0 126 0 0 tcp_log_id_bucket 176 0 0 0 0 6 2 0 0 p a ni c () a t tcp_log 416 0 0 0 0 254 0 0 tcpreass 48 0 0 0 0 254 0 0 IPsec SA lftp_acni c + 0 xb 5/ fr a m e 0 x f f f ff e 00 5 7 62 2 57 0 16 0 0 0 0 254 0 0 mqnotifier 216 0 0 0 0 62 0 0 mvdata 64 0 0 0 0 254 0 0 mqueue 248 0 0 0 0 62 0 0 TMPFS node 240 0 0 0 0 _ _ m t x_ lo c k _ sp i n _ f l a g s( ) at 62 0 0 NCLNODE 608 0 0 0 0 16 0 0 LTS VFS Cache 360 0 0 0 0 30 0 0 _ _m tx _l o c k _s pi n _ f l a gs + 0 x2 8 b /f r a me 0x ff f ff e 00 5 7 6 2 2 6 3 0 STS VFS Cache 144 0 0 0 0 62 0 0 linux_dma_object 32 0 0 0 0 254 0 0 linux_dma_pctrie 152 0 0 0 0 62 0 0 IOMMU_MAP_ENTRY 112 0 0 0 0 126 0 0 skbuff 1808 0 0 0 0 8 0 0 _ c a ll ou t _ s to p _s a f e () a t mbuf_jumbo_16k 16384 0 0 0 0 254 0 0 mbuf_jumbo_9k 9216 0 0 0 0 254 0 0 audit_re_ccoraldl o u t_ st o p _s a fe + 0 x 26 2/ f r a m e 0x f f ff f e0 0 57 6 2 2 76 0 1280 0 0 0 0 8 0 0 domainset 40 0 0 0 0 254 0 0 MAC labels 40 0 0 0 0 254 0 0 vnpbuf 2624 0 0 0 0 16 0 0 nfspbuf 2624 0 0 0 0 4 0 0 sh ut do w n _ r e se t t o d r () a t swwbuf 2624 0 0 0 0 2 0 0 swrbuf 2624 0 0 0 0 4 0 0 umtx_sshhmu td o wn _ re se t t od r+ 0x 2 1/ f r a m e 0 xf f f ff e 0 05 76 2 2 79 0 88 0 0 0 0 126 0 0 umtx pi 96 0 0 0 0 126 0 0 rangeset pctrie nodes 152 0 0 0 0 62 0 0 malloc-65536 65536 0 0 0 0 1 0 0 malloc-65536 65536 0 0 0 0k er n _r e bo o t( ) a t 1 0 0 malloc-32768 32768 0 0 0 0 1 0 0 malloc-32768 32768 0 0 0 0 1 0 0 k e rn _ re b oo t+ 0 x 5 4e / fr a m e 0 xf f f ff e 00 5 7 6 22 8 50 malloc-32768 32768 0 0 0 0 1 0 0 malloc-32768 32768 0 0 0 0 1 0 0 malloc-32768 32768 0 0 0 0 1 0 0 malloc-16384 16384 0 0 0 0 1 0 0 malloc-16384 16384 0 0 0 0 1 0 0 vp a ni c ( ) a t pcpu-32 32 0 0 0 0 254 0 0 pcpu-4 4 0 0 0 0 254 0 0 fakepg 1vp04a n ic + 0 x3 3 8/ f ra m e 0x ff f ff e 0 05 7 62 2a 1 0 0 0 0 0 126 0 0 UMA Hash 256 0 0 0 0 62 0 0 db> panic() at panic+0xb5/frame 0xfffffe0057622ad0 __mtx_lock_spin_flags() at __mtx_lock_spin_flags+0x28b/frame 0xfffffe0057622b90 _callout_stop_safe() at _callout_stop_safe+0x262/frame 0xfffffe0057622cc0 shutdown_resettodr() at shutdown_resettodr+0x21/frame 0xfffffe0057622cf0 kern_reboot() at kern_reboot+0x54e/frame 0xfffffe0057622db0 vpanic() at vpanic+0x338/frame 0xfffffe0057622f70 panic() at panic+0xb5/frame 0xfffffe0057623030 __mtx_lock_spin_flags() at __mtx_lock_spin_flags+0x28b/frame 0xfffffe00576230f0 _callout_stop_safe() at _callout_stop_safe+0x262/frame 0xfffffe0057623220 shutdown_resettodr() at shutdown_resettodr+0x21/frame 0xfffffe0057623250 kern_reboot() at kern_reboot+0x54e/frame 0xfffffe0057623310 vpanic() at vpanic+0x338/frame 0xfffffe00576234d0 panic() at panic+0xb5/frame 0xfffffe0057623590 trap_pfault() at trap_pfault+0xaec/frame 0xfffffe00576236d0 trap() at trap+0x78e/frame 0xfffffe00576238b0 calltrap() at calltrap+0x8/frame 0xfffffe00576238b0 --- trap 0xc, rip = 0xffffffff81536022, rsp = 0xfffffe0057623980, rbp = 0xfffffe0057623ac0 --- callout_process() at callout_process+0x452/frame 0xfffffe0057623ac0 handleevents() at handleevents+0x3ee/frame 0xfffffe0057623b30 timercb() at timercb+0x3cb/frame 0xfffffe0057623bf0 lapic_handle_timer() at lapic_handle_timer+0x17f/frame 0xfffffe0057623c30 Xtimerint() at Xtimerint+0xb1/frame 0xfffffe0057623c30 --- interrupt, rip = 0xffffffff81542bc6, rsp = 0xfffffe0057623d08, rbp = 0xfffffe0057623d10 --- freebsd32__umtx_op() at freebsd32__umtx_op+0x6/frame 0xfffffe0057623d10 ia32_syscall() at ia32_syscall+0x48e/frame 0xfffffe0057623f30 int0x80_syscall_common() at int0x80_syscall_common+0x9c/frame 0xffffda80 panic: mtx_lock_spin: recursed on non-recursive mutex callout @ /syzkaller/managers/i386/kernel/sys/kern/kern_timeout.c:576 cpuid = 0 time = 1745725529 KDB: stack backtrace: db_trace_self_wrapper() at db_trace_self_wrapper+0xc6/frame 0xfffffe00576216d0 kdb_backtrace() at kdb_backtrace+0xd0/frame 0xfffffe0057621830 vpanic() at vpanic+0x257/frame 0xfffffe00576219f0 panic() at panic+0xb5/frame 0xfffffe0057621ab0 __mtx_lock_spin_flags() at __mtx_lock_spin_flags+0x28b/frame 0xfffffe0057621b70 _callout_stop_safe() at _callout_stop_safe+0x262/frame 0xfffffe0057621ca0 shutdown_resettodr() at shutdown_resettodr+0x21/frame 0xfffffe0057621cd0 kern_reboot() at kern_reboot+0x54e/frame 0xfffffe0057621d90 vpanic() at vpanic+0x338/frame 0xfffffe0057621f50 panic() at panic+0xb5/frame 0xfffffe0057622010 __mtx_lock_spin_flags() at __mtx_lock_spin_flags+0x28b/frame 0xfffffe00576220d0 _callout_stop_safe() at _callout_stop_safe+0x262/frame 0xfffffe0057622200 shutdown_resettodr() at shutdown_resettodr+0x21/frame 0xfffffe0057622230 kern_reboot() at kern_reboot+0x54e/frame 0xfffffe00576222f0 vpanic() at vpanic+0x338/frame 0xfffffe00576224b0 panic() at panic+0xb5/frame 0xfffffe0057622570 __mtx_lock_spin_flags() at __mtx_lock_spin_flags+0x28b/frame 0xfffffe0057622630 _callout_stop_safe() at _callout_stop_safe+0x262/frame 0xfffffe0057622760 shutdown_resettodr() at shutdown_resettodr+0x21/frame 0xfffffe0057622790 kern_reboot() at kern_reboot+0x54e/frame 0xfffffe0057622850 vpanic() at vpanic+0x338/frame 0xfffffe0057622a10 panic() at panic+0xb5/frame 0xfffffe0057622ad0