panic: mb_free_extpg: m ADDR is not multipage!

0 views
Skip to first unread message

syzbot

unread,
Apr 8, 2024, 8:18:29 PMApr 8
to syzkaller-f...@googlegroups.com
Hello,

syzbot found the following issue on:

HEAD commit: d80a97def9a1 unix: new implementation of unix/stream & uni..
git tree: freebsd-src
console output: https://syzkaller.appspot.com/x/log.txt?x=1445a483180000
dashboard link: https://syzkaller.appspot.com/bug?extid=0bab19f8e67dc79799aa
userspace arch: i386

Unfortunately, I don't have any reproducer for this issue yet.

IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+0bab19...@syzkaller.appspotmail.com

panic: mb_free_extpg: m 0xfffffe0074029740 is not multipage!
cpuid = 0
time = 1712621850
KDB: stack backtrace:
db_trace_self_wrapper() at db_trace_self_wrapper+0xc6/frame 0xfffffe006ab021f0
kdb_backtrace() at kdb_backtrace+0xd0/frame 0xfffffe006ab02350
vpanic() at vpanic+0x26a/frame 0xfffffe006ab02510
panic() at panic+0xb5/frame 0xfffffe006ab025d0
mb_free_extpg() at mb_free_extpg+0x318/frame 0xfffffe006ab02690
m_free() at m_free+0x219/frame 0xfffffe006ab026d0
m_freem() at m_freem+0x48/frame 0xfffffe006ab026f0
uipc_sosend_stream_or_seqpacket() at uipc_sosend_stream_or_seqpacket+0x126d/frame 0xfffffe006ab02960
sousrsend() at sousrsend+0x117/frame 0xfffffe006ab029f0
kern_sendit() at kern_sendit+0x4fc/frame 0xfffffe006ab02b50
freebsd32_sendmsg() at freebsd32_sendmsg+0x515/frame 0xfffffe006ab02d10
ia32_syscall() at ia32_syscall+0x4aa/frame 0xfffffe006ab02f30
int0x80_syscall_common() at int0x80_syscall_common+0x9c/frame 0xdfffcf9c
KDB: enter: panic
[ thread pid 857 tid 100150 ]
Stopped at kdb_enter+0x6e: movq $0,0x23c8477(%rip)
db>
db> set $lines = 0
db> set $maxwidth = 0
db> show registers
cs 0x20
ds 0x3b
es 0x3b
fs 0x13
gs 0x1b
ss 0
rax 0x12
rcx 0xfffffe006d800000
rdx 0x3ffff
rbx 0xffffffff826ed680 .str.27
rsp 0xfffffe006ab02330
rbp 0xfffffe006ab02350
rsi 0x40001
rdi 0xffffffff815c0059 printf+0x149
r8 0
r9 0xffffffff
r10 0
r11 0x1f
r12 0xfffffe0074029740
r13 0xfffffffffffffffe
r14 0xffffffff826ed680 .str.27
r15 0
rip 0xffffffff815acc1e kdb_enter+0x6e
rflags 0x46
kdb_enter+0x6e: movq $0,0x23c8477(%rip)
db> show proc
Process 857 (syz-executor.0) at 0xfffffe006d680b00:
state: NORMAL
uid: 0 gids: 0, 0, 5
parent: pid 770 at 0xfffffe0007ce95a0
ABI: FreeBSD ELF32
flag: 0x10000080 flag2: 0
arguments: /root/syz-executor.0 exec
reaper: 0xfffffe005420b040 reapsubtree: 1
sigparent: 20
vmspace: 0xfffffe007405a738
(map 0xfffffe007405a738)
(map.pmap 0xfffffe007405a7f8)
(pmap 0xfffffe007405a868)
threads: 2
100124 RunQ syz-executor.0
100150 Run CPU 0 syz-executor.0
db> ps
pid ppid pgrp uid state wmesg wchan cmd
864 860 424 0 R sh
863 771 771 0 RV CPU 1 syz-executor.1
862 780 780 0 R (threaded) syz-executor.2
100133 RunQ syz-executor.2
100152 RunQ syz-executor.2
860 781 424 0 S wait 0xfffffe0007ce9040 sh
857 770 770 0 R (threaded) syz-executor.0
100124 RunQ syz-executor.0
100150 Run CPU 0 syz-executor.0
854 798 798 0 R (threaded) syz-executor.3
100144 RunQ syz-executor.3
100148 S sbwait 0xfffffe006a8551cc syz-executor.3
100153 RunQ syz-executor.3
848 0 0 0 DL aiordy 0xfffffe006d6a05a0 [aiod5]
847 0 0 0 DL aiordy 0xfffffe006d6a0040 [aiod4]
843 0 0 0 DL aiordy 0xfffffe006d6805a0 [aiod3]
842 0 0 0 DL aiordy 0xfffffe006d0365a0 [aiod2]
839 0 0 0 DL aiordy 0xfffffe006d036b00 [aiod1]
798 768 798 0 Ss nanslp 0xffffffff83956480 syz-executor.3
781 774 424 0 S piperd 0xfffffe0058ac63e8 sh
780 768 780 0 Rs syz-executor.2
774 424 424 0 S wait 0xfffffe006d67eac0 sh
771 768 771 0 Ds ppwait 0xfffffe006d67ea60 syz-executor.1
770 768 770 0 Ss nanslp 0xffffffff83956480 syz-executor.0
768 766 766 0 S (threaded) syz-fuzzer
100108 S uwait 0xfffffe00578cac00 syz-fuzzer
100110 S uwait 0xfffffe00578cae00 syz-fuzzer
100111 S kqread 0xfffffe0007c82b00 syz-fuzzer
100112 S wait 0xfffffe0007ce8ae0 syz-fuzzer
100113 S uwait 0xfffffe005736d080 syz-fuzzer
100114 S uwait 0xfffffe005736d180 syz-fuzzer
100115 S uwait 0xfffffe005736d280 syz-fuzzer
100116 S wait 0xfffffe0007ce8ae0 syz-fuzzer
100117 S wait 0xfffffe0007ce8ae0 syz-fuzzer
100123 S wait 0xfffffe0007ce8ae0 syz-fuzzer
100130 S uwait 0xfffffe0007980200 syz-fuzzer
100143 S uwait 0xfffffe0057370f00 syz-fuzzer
766 764 766 0 Ss pause 0xfffffe005420c670 csh
764 682 764 0 Ss select 0xfffffe00078773c0 sshd
748 1 748 0 Ss+ ttyin 0xfffffe0007d1e4b0 getty
747 1 747 0 Ss+ ttyin 0xfffffe005879c8b0 getty
746 1 746 0 Ss+ ttyin 0xfffffe0056ec00b0 getty
745 1 745 0 Ss+ ttyin 0xfffffe00574c18b0 getty
744 1 744 0 Ss+ ttyin 0xfffffe0056ec08b0 getty
743 1 743 0 Ss+ ttyin 0xfffffe00574c30b0 getty
742 1 742 0 Ss+ ttyin 0xfffffe0056ec10b0 getty
741 1 741 0 Ss+ ttyin 0xfffffe0056ec18b0 getty
740 1 740 0 Ss+ ttyin 0xfffffe0056ec20b0 getty
738 1 18 0 S+ piperd 0xfffffe0058abb888 logger
737 736 18 0 S+ nanslp 0xffffffff83956481 sleep
736 1 18 0 S+ wait 0xfffffe00579ee5a0 sh
686 1 686 0 Ss nanslp 0xffffffff83956480 cron
682 1 682 0 Ss select 0xfffffe006d03e1c0 sshd
495 1 495 0 Ds bo_wwai 0xfffffe006d21bbe8 syslogd
424 1 424 0 Ss wait 0xfffffe006d035ae0 devd
423 1 423 65 Ss select 0xfffffe0007877840 dhclient
338 1 338 0 Ss select 0xfffffe0007877940 dhclient
335 1 335 0 Ss select 0xfffffe0007877e40 dhclient
17 0 0 0 DL syncer 0xffffffff83a73ba0 [syncer]
16 0 0 0 DL vlruwt 0xfffffe0007cea060 [vnlru]
15 0 0 0 DL (threaded) [bufdaemon]
100079 D psleep 0xffffffff83a72180 [bufdaemon]
100082 D - 0xffffffff82e02140 [bufspacedaemon-0]
100092 D sdflush 0xfffffe005898ece8 [/ worker]
9 0 0 0 DL psleep 0xffffffff83abb680 [vmdaemon]
8 0 0 0 DL (threaded) [pagedaemon]
100077 D psleep 0xffffffff83aa34f8 [dom0]
100080 D launds 0xffffffff83aa3504 [laundry: dom0]
100081 D umarcl 0xffffffff81d508d0 [uma]
7 0 0 0 RL [rand_harvestq]
6 0 0 0 DL pftm 0xffffffff84767bb0 [pf purge]
5 0 0 0 DL waiting 0xffffffff84398760 [sctp_iterator]
4 0 0 0 DL (threaded) [cam]
100044 D - 0xffffffff8369e340 [doneq0]
100045 D - 0xffffffff8369e2c0 [async]
100076 D - 0xffffffff8369e140 [scanner]
3 0 0 0 DL (threaded) [crypto]
100041 D crypto_ 0xffffffff83a9ed20 [crypto]
100042 D crypto_ 0xfffffe0007c85030 [crypto returns 0]
100043 D crypto_ 0xfffffe0007c85080 [crypto returns 1]
14 0 0 0 DL seqstat 0xfffffe0056f60c88 [sequencer 00]
13 0 0 0 DL (threaded) [geom]
100035 D - 0xffffffff838fee00 [g_event]
100036 D - 0xffffffff838fee20 [g_up]
100037 D - 0xffffffff838fee40 [g_down]
2 0 0 0 WL (threaded) [clock]
100029 I [clock (0)]
100030 I [clock (1)]
12 0 0 0 WL (threaded) [intr]
100012 I [swi6: task queue]
100013 I [swi6: Giant taskq]
100015 I [swi5: fast taskq]
100031 I [swi1: netisr 0]
100032 I [swi1: hpts]
100033 I [swi1: hpts]
100046 I [irq24: virtio_pci0]
100047 I [irq25: virtio_pci0]
100048 I [irq26: virtio_pci0]
100049 I [irq27: virtio_pci0]
100050 I [irq28: virtio_pci1]
100051 I [irq29: virtio_pci1]
100052 I [irq30: virtio_pci1]
100053 I [irq31: virtio_pci1]
100054 I [irq32: virtio_pci1]
100059 I [irq33: virtio_pci2]
100060 I [irq34: virtio_pci2]
100061 I [irq35: virtio_pci2]
100063 I [irq1: atkbd0]
100064 I [irq12: psm0]
100065 I [swi0: uart uart++]
100069 I [swi1: pf send]
11 0 0 0 RL (threaded) [idle]
100003 CanRun [idle: cpu0]
100004 CanRun [idle: cpu1]
1 0 1 0 SLs wait 0xfffffe005420b040 [init]
10 0 0 0 DL audit_w 0xffffffff83a9f780 [audit]
0 0 0 0 DLs (threaded) [kernel]
100000 D swapin 0xffffffff838ff7e0 [swapper]
100005 D - 0xfffffe00085f7d00 [softirq_0]
100006 D - 0xfffffe00085f7c00 [softirq_1]
100007 D - 0xfffffe00085f7b00 [if_io_tqg_0]
100008 D - 0xfffffe00085f7a00 [if_io_tqg_1]
100009 D - 0xfffffe00085f7900 [if_config_tqg_0]
100010 D - 0xfffffe00085f7800 [pci_hp taskq]
100011 D - 0xfffffe00085f7700 [kqueue_ctx taskq]
100014 D - 0xfffffe00085f7400 [thread taskq]
100016 D - 0xfffffe00085f7200 [aiod_kick taskq]
100017 D - 0xfffffe00085f7100 [deferred_unmount ta]
100018 D - 0xfffffe00085f7000 [inm_free taskq]
100019 D - 0xfffffe00085f6e00 [in6m_free taskq]
100020 D - 0xfffffe00085f6d00 [linuxkpi_irq_wq]
100021 D - 0xfffffe00085f6c00 [linuxkpi_short_wq_0]
100022 D - 0xfffffe00085f6c00 [linuxkpi_short_wq_1]
100023 D - 0xfffffe00085f6c00 [linuxkpi_short_wq_2]
100024 D - 0xfffffe00085f6c00 [linuxkpi_short_wq_3]
100025 D - 0xfffffe00085f6b00 [linuxkpi_long_wq_0]
100026 D - 0xfffffe00085f6b00 [linuxkpi_long_wq_1]
100027 D - 0xfffffe00085f6b00 [linuxkpi_long_wq_2]
100028 D - 0xfffffe00085f6b00 [linuxkpi_long_wq_3]
100034 D - 0xfffffe00085f6a00 [firmware taskq]
100039 D - 0xfffffe00085f6700 [crypto_0]
100040 D - 0xfffffe00085f6700 [crypto_1]
100055 D - 0xfffffe00085f6500 [vtnet0 rxq 0]
100056 D - 0xfffffe00085f6400 [vtnet0 txq 0]
100057 D - 0xfffffe00085f6300 [vtnet0 rxq 1]
100058 D - 0xfffffe00085f6200 [vtnet0 txq 1]
100062 D vtbslp 0xfffffe0007cbc380 [virtio_balloon]
100066 D - 0xffffffff826f28c0 [deadlkres]
100070 D - 0xfffffe005797ab00 [acpi_task_0]
100071 D - 0xfffffe005797ab00 [acpi_task_1]
100072 D - 0xfffffe005797ab00 [acpi_task_2]
100074 D - 0xfffffe00085f8100 [mca taskq]
100075 D - 0xfffffe00085f6600 [CAM taskq]
db> show all locks
Process 854 (syz-executor.3) thread 0xfffffe0074029000 (100148)
exclusive sx so_rcv_sx (so_rcv_sx) r = 0 (0xfffffe006a855180) locked @ /syzkaller/managers/i386/kernel/sys/kern/uipc_socket.c:4029
Process 495 (syslogd) thread 0xfffffe006a622740 (100094)
exclusive lockmgr ufs (ufs) r = 0 (0xfffffe006d21baf0) locked @ /syzkaller/managers/i386/kernel/sys/kern/vfs_syscalls.c:3581
db> show malloc
Type InUse MemUse Requests
pf_hash 5 11524K 5
linker 371 4934K 481
tcp_hpts 7 4801K 7
devbuf 4192 4324K 4217
sysctloid 34865 2055K 34936
vtbuf 24 1968K 46
kobj 326 1304K 488
newblk 708 1201K 731
vfscache 3 1025K 3
pcb 29 675K 69
inodedep 77 541K 100
ufs_quota 1 512K 1
vfs_hash 1 512K 1
callout 2 512K 2
intr 4 472K 4
subproc 124 254K 932
vnet_data 2 224K 2
acpitask 1 224K 1
KTRACE 100 200K 100
acpica 1674 184K 60830
tidhash 3 141K 3
filedesc 18 137K 89
pagedep 25 134K 38
vmem 3 134K 4
tfo_ccache 1 128K 1
IP reass 1 128K 1
DEVFS1 109 109K 126
sem 4 106K 4
gtaskqueue 18 98K 18
bus 985 81K 5155
mtx_pool 2 72K 2
syncache 1 68K 1
NFSD srvcache 3 68K 3
module 513 65K 513
ddb_capture 1 64K 1
kdtrace 200 40K 1019
temp 35 37K 1818
umtx 288 36K 288
hostcache 1 32K 1
shm 1 32K 1
DEVFS3 128 32K 138
msg 4 30K 4
kbdmux 6 28K 6
DEVFS_RULE 56 20K 56
ifaddr 66 19K 68
BPF 14 19K 14
ufs_mount 4 17K 5
proc 3 17K 3
LRO 16 17K 16
tty 16 16K 16
ithread 97 16K 97
routetbl 124 16K 395
bus-sc 34 15K 1687
eventhandler 162 14K 162
lltable 42 13K 42
ifnet 7 13K 7
ether_multi 152 13K 162
kenv 95 12K 95
GEOM 61 11K 481
rman 86 11K 451
CAM queue 5 11K 1528
in6_multi 65 9K 65
bmsafemap 2 9K 67
rpc 4 9K 4
devstat 4 9K 4
UART 12 9K 12
ksem 1 8K 1
shmfd 1 8K 1
pfs_vncache 1 8K 1
audit_evclass 238 8K 300
taskqueue 63 7K 63
dirrem 26 7K 37
sglist 6 7K 6
CAM DEV 3 6K 510
diradd 47 6K 67
kqueue 59 6K 869
cred 23 6K 227
pfs_nodes 22 6K 22
plimit 21 6K 333
hhook 15 5K 17
ufs_dirhash 24 5K 24
UMA 267 5K 267
pf_ifnet 10 5K 19
vt 11 5K 11
memdesc 1 4K 1
MCA 32 4K 32
evdev 4 4K 4
DEVFSP 60 4K 66
pwddesc 57 4K 865
acpisem 28 4K 28
mkdir 26 4K 56
kcovinfo 52 4K 52
session 24 3K 33
terminal 11 3K 11
indirdep 10 3K 10
proc-args 78 3K 1901
clone 9 3K 9
uidinfo 3 3K 7
ip6ndp 13 3K 14
local_apic 1 2K 1
io_apic 1 2K 1
ipsec-saq 2 2K 2
newdirblk 15 2K 28
Unitno 29 2K 49
sctp_ifa 13 2K 14
CAM XPT 22 2K 543
lockf 15 2K 22
sctp_atcl 4 2K 13
msi 12 2K 12
CC Mem 6 2K 18
in_multi 6 2K 8
tun 4 2K 4
toponodes 6 2K 6
ipsecpolicy 2 2K 2
acpidev 20 2K 20
selfd 19 2K 11301
freefile 9 2K 18
sctp_stro 1 1K 3
softdep 1 1K 1
sahead 1 1K 1
secasvar 1 1K 1
nhops 6 1K 8
vnodemarker 2 1K 8
NFSD session 1 1K 1
select 7 1K 26
CAM periph 4 1K 271
ipsec 3 1K 3
sctp_ifn 6 1K 14
mld 6 1K 6
igmp 6 1K 6
pfil 6 1K 6
isadev 6 1K 6
mount 16 1K 89
pci_link 10 1K 10
crypto 4 1K 4
encap_export_host 12 1K 12
sctp_timw 2 1K 2
netlink 2 1K 27
cdev 2 1K 2
osd 11 1K 31
lkpikmalloc 8 1K 9
inpcbpolicy 13 1K 180
chacha20random 1 1K 1
biobuf 1 1K 1
vnodes 1 1K 1
NFSD lckfile 1 1K 1
NFSD V4client 1 1K 1
DEVFS 9 1K 10
CAM SIM 2 1K 2
feeder 7 1K 7
sctp_atky 5 1K 17
tcpfunc 3 1K 3
loginclass 3 1K 6
prison 6 1K 6
aio 5 1K 5
cryptodev 2 1K 43
nexusdev 8 1K 8
apmdev 1 1K 1
atkbddev 2 1K 2
freefrag 1 1K 2
procdesc 1 1K 6
pmchooks 1 1K 1
CAM path 4 1K 1034
CAM dev queue 2 1K 2
CAM I/O Scheduler 1 1K 1
soname 4 1K 3326
filecaps 4 1K 66
sctp_vrf 1 1K 1
sctp_athm 4 1K 13
vnet 1 1K 1
pmc 1 1K 1
entropy 2 1K 37
acpiintr 1 1K 1
sctp_map 2 1K 6
cpus 2 1K 2
vnet_data_free 1 1K 1
Per-cpu 1 1K 1
freework 1 1K 35
iov 1 1K 13781
p1003.1b 1 1K 1
mqdata 0 0K 0
filemon 0 0K 1
pf_table 0 0K 0
pf_rule 0 0K 0
pf_altq 0 0K 0
pf_osfp 0 0K 0
pf_krule_item 0 0K 0
pf_temp 0 0K 0
ipcomp 0 0K 0
esp 0 0K 0
ah 0 0K 0
tcp_pcm_rack 0 0K 4
tcp_do_rack 0 0K 0
tcp_fsb_rack 0 0K 8
sctp_mcore 0 0K 0
sctp_socko 0 0K 6
sctp_iter 0 0K 12
sctp_mvrf 0 0K 0
sctp_cpal 0 0K 0
sctp_cmsg 0 0K 0
sctp_stre 0 0K 0
sctp_athi 0 0K 0
sctp_a_it 0 0K 12
sctp_aadr 0 0K 2
sctp_stri 0 0K 0
madt_table 0 0K 2
smartpqi 0 0K 0
ixl 0 0K 0
ice-resmgr 0 0K 0
ice-osdep 0 0K 0
ice 0 0K 0
iavf 0 0K 0
axgbe 0 0K 0
fpukern_ctx 0 0K 0
xen_intr 0 0K 0
xen_hvm 0 0K 0
legacydrv 0 0K 0
bounce 0 0K 0
busdma 0 0K 0
qpidrv 0 0K 0
dmar_idpgtbl 0 0K 0
dmar_dom 0 0K 0
dmar_ctx 0 0K 0
isci 0 0K 0
iommu_dmamap 0 0K 0
hyperv_socket 0 0K 0
bxe_ilt 0 0K 0
aesni_data 0 0K 0
xenbus 0 0K 0
vm_fictitious 0 0K 0
UMAHash 0 0K 0
vm_pgdata 0 0K 0
jblocks 0 0K 0
savedino 0 0K 15
sentinel 0 0K 0
jfsync 0 0K 0
jtrunc 0 0K 0
sbdep 0 0K 2
jsegdep 0 0K 0
jseg 0 0K 0
jfreefrag 0 0K 0
jfreeblk 0 0K 0
jnewblk 0 0K 0
jmvref 0 0K 0
jremref 0 0K 0
jaddref 0 0K 0
freedep 0 0K 0
freeblks 0 0K 34
allocindir 0 0K 0
allocdirect 0 0K 0
ufs_trim 0 0K 0
mactemp 0 0K 0
audit_trigger 0 0K 0
audit_pipe_presel 0 0K 0
audit_pipeent 0 0K 0
audit_pipe 0 0K 0
audit_evname 0 0K 0
audit_bsm 0 0K 0
audit_gidset 0 0K 0
audit_text 0 0K 0
audit_path 0 0K 0
audit_data 0 0K 0
audit_cred 0 0K 0
ktls_ocf 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5E_TLS_RX 0 0K 0
MLX5EEPROM 0 0K 0
MLX5E_TLS 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EN 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5DUMP 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
simple_attr 0 0K 0
seq_file 0 0K 0
lkpiskb 0 0K 0
radix 0 0K 0
idr 0 0K 0
lkpindev 0 0K 0
lkpimhi 0 0K 0
lkpifw 0 0K 0
lkpi80211 0 0K 0
NLM 0 0K 0
ipsec-spdcache 0 0K 0
ipsec-reg 0 0K 0
ipsec-misc 0 0K 0
ipsecrequest 0 0K 0
ip6opt 0 0K 3
ip6_msource 0 0K 0
ip6_moptions 0 0K 0
in6_mfilter 0 0K 0
frag6 0 0K 0
tcplog 0 0K 0
tcp_hwpace 0 0K 0
ip_msource 0 0K 0
ip_moptions 0 0K 0
in_mfilter 0 0K 0
ipid 0 0K 0
80211scan 0 0K 0
80211ratectl 0 0K 0
80211power 0 0K 0
80211nodeie 0 0K 0
80211node 0 0K 0
80211mesh_gt 0 0K 0
80211mesh_rt 0 0K 0
80211perr 0 0K 0
80211prep 0 0K 0
80211preq 0 0K 0
80211dfs 0 0K 0
80211crypto 0 0K 0
80211vap 0 0K 0
iflib 0 0K 0
vlan 0 0K 0
gif 0 0K 0
ifdescr 0 0K 0
zlib 0 0K 19
fadvise 0 0K 0
VN POLL 0 0K 0
statfs 0 0K 192
namei_tracker 0 0K 0
export_host 0 0K 0
cl_savebuf 0 0K 5
lio 0 0K 4
acl 0 0K 0
mbuf_tag 0 0K 0
ktls 0 0K 0
accf 0 0K 0
pts 0 0K 0
timerfd 0 0K 0
ioctlops 0 0K 95
eventfd 0 0K 0
Witness 0 0K 0
stack 0 0K 0
sbuf 0 0K 288
firmware 0 0K 0
compressor 0 0K 0
SWAP 0 0K 0
sysctltmp 0 0K 646
sysctl 0 0K 3
ekcd 0 0K 0
dumper 0 0K 0
sendfile 0 0K 0
rctl 0 0K 0
cache 0 0K 0
prison_racct 0 0K 0
Fail Points 0 0K 0
sigio 0 0K 1
filedesc_to_leader 0 0K 0
pwd 0 0K 0
tty console 0 0K 0
boottrace 0 0K 0
isofs_node 0 0K 0
isofs_mount 0 0K 0
tr_raid5_data 0 0K 0
tr_raid1e_data 0 0K 0
tr_raid1_data 0 0K 0
tr_raid0_data 0 0K 0
tr_concat_data 0 0K 0
md_sii_data 0 0K 0
md_promise_data 0 0K 0
md_nvidia_data 0 0K 0
md_jmicron_data 0 0K 0
md_intel_data 0 0K 0
md_ddf_data 0 0K 0
raid_data 0 0K 72
geom_flashmap 0 0K 0
tmpfs dir 0 0K 0
tmpfs name 0 0K 0
tmpfs mount 0 0K 0
tmpfs extattr 0 0K 0
NFS FHA 0 0K 0
newnfsmnt 0 0K 0
newnfsclient_req 0 0K 0
NFSCL layrecall 0 0K 0
NFSCL session 0 0K 0
NFSCL sockreq 0 0K 0
NFSCL devinfo 0 0K 0
NFSCL flayout 0 0K 0
NFSCL layout 0 0K 0
NFSD rollback 0 0K 0
NFSCL diroff 0 0K 0
NEWdirectio 0 0K 0
NEWNFSnode 0 0K 0
NFSCL lck 0 0K 0
NFSCL lckown 0 0K 0
NFSCL client 0 0K 0
NFSCL deleg 0 0K 0
NFSCL open 0 0K 0
NFSCL owner 0 0K 0
NFS fh 0 0K 0
NFS req 0 0K 0
NFSD usrgroup 0 0K 0
NFSD string 0 0K 0
NFSD V4lock 0 0K 0
NFSD V4state 0 0K 0
msdosfs_fat 0 0K 0
msdosfs_mount 0 0K 0
msdosfs_node 0 0K 0
DEVFS4 0 0K 0
DEVFS2 0 0K 0
gntdev 0 0K 0
privcmd_dev 0 0K 0
evtchn_dev 0 0K 0
xenstore 0 0K 0
xnb 0 0K 0
xen_acpi 0 0K 0
xbbd 0 0K 0
xbd 0 0K 0
Balloon 0 0K 0
sysmouse 0 0K 0
vtfont 0 0K 0
pvscsi 0 0K 0
USBdev 0 0K 0
USB 0 0K 0
twsbuf 0 0K 0
tcp_log_dev 0 0K 0
midi buffers 0 0K 0
mixer 0 0K 0
ac97 0 0K 0
hdacc 0 0K 0
hdac 0 0K 0
hdaa 0 0K 0
SIIS driver 0 0K 0
PUC 0 0K 0
ppbusdev 0 0K 0
sr_iov 0 0K 0
OCS 0 0K 0
OCS 0 0K 0
nvme 0 0K 0
nvd 0 0K 0
netmap 0 0K 0
mwldev 0 0K 0
MVS driver 0 0K 0
mrsasbuf 0 0K 0
mpt_user 0 0K 0
mps_user 0 0K 0
MPSSAS 0 0K 0
mps 0 0K 0
mpr_user 0 0K 0
MPRSAS 0 0K 0
mpr 0 0K 0
mfibuf 0 0K 0
md_sectors 0 0K 0
md_disk 0 0K 0
malodev 0 0K 0
LED 0 0K 0
ix_sriov 0 0K 0
ix 0 0K 0
ipsbuf 0 0K 0
ciss_data 0 0K 0
BACKLIGHT 0 0K 0
ath_hal 0 0K 0
athdev 0 0K 0
ata_pci 0 0K 0
ata_dma 0 0K 0
ata_generic 0 0K 0
AHCI driver 0 0K 0
agp 0 0K 0
acpipwr 0 0K 0
acpi_perf 0 0K 0
acpicmbat 0 0K 0
aacraidcam 0 0K 0
aacraid_buf 0 0K 0
aaccam 0 0K 0
aacbuf 0 0K 0
zstd 0 0K 0
XZ_DEC 0 0K 0
nvlist 0 0K 0
SCSI ENC 0 0K 0
SCSI sa 0 0K 0
scsi_pass 0 0K 0
scsi_da 0 0K 69
ata_da 0 0K 0
scsi_ch 0 0K 0
scsi_cd 0 0K 0
nvme_da 0 0K 0
CAM CCB 0 0K 523
CAM ccb queue 0 0K 0
db> show uma
Zone Size Used Free Requests Sleeps Bucket Total Mem XFree
mbuf_jumbo_page 4096 8320 1078 18180 0 254 38494208 0
mbuf 256 8607 1055 23604 0 254 2473472 0
BUF TRIE 144 220 11568 526 0 62 1697472 0
malloc-384 384 4223 7 4245 0 30 1624320 0
malloc-4096 4096 389 5 1917 0 2 1613824 0
malloc-128 128 11444 150 11505 0 126 1484032 0
UMA Slabs 0 112 10742 16 10742 0 126 1204896 0
malloc-65536 65536 15 1 18 0 1 1048576 0
mbuf_cluster 2048 508 0 508 0 254 1040384 0
vmem btag 56 15771 108 15771 0 254 889224 0
RADIX NODE 144 5942 213 29574 0 62 886320 0
FFS inode 1168 534 19 553 0 8 645904 0
sctp_asoc 2256 1 254 3 0 254 575280 0
lkpicurr 168 2 3094 2 0 62 520128 0
pbuf 2624 0 198 0 0 2 519552 0
socket 960 27 481 1392 0 254 487680 0
VM OBJECT 264 1139 31 15513 0 30 308880 0
sctp_ep 1144 3 256 10 0 254 296296 0
256 Bucket 2048 125 19 998 0 8 294912 0
VNODE 448 571 32 592 0 30 270144 0
THREAD 1824 142 2 153 0 8 262656 0
malloc-64 64 3855 240 3867 0 254 262080 0
malloc-16384 16384 12 3 47 0 1 245760 0
malloc-2048 2048 106 14 107 0 8 245760 0
malloc-16 16 14406 94 14519 0 254 232000 0
DEVCTL 1024 22 198 147 0 0 225280 0
malloc-128 128 1307 212 28909 0 126 194432 0
sctp_raddr 736 1 263 3 0 254 194304 0
malloc-256 256 719 31 762 0 62 192000 0
UMA Zones 768 239 0 239 0 16 183552 0
malloc-32 32 5279 391 5310 0 254 181440 0
lkpimm 56 1 3095 1 0 254 173376 0
malloc-2048 2048 12 60 1110 0 8 147456 0
malloc-1024 1024 138 6 176 0 16 147456 0
FFS2 dinode 256 534 36 552 0 62 145920 0
MAP ENTRY 96 1225 287 44519 0 126 145152 0
FPU_save_area 832 144 18 788 0 16 134784 0
malloc-65536 65536 0 2 64 0 1 131072 0
malloc-65536 65536 0 2 110 0 1 131072 0
unpcb 256 10 500 1178 0 254 130560 0
malloc-256 256 409 101 1099 0 62 130560 0
mbuf_packet 256 0 508 232 0 254 130048 0
S VFS Cache 104 1016 154 1068 0 126 121680 0
ksiginfo 112 50 994 692 0 126 116928 0
malloc-128 128 664 235 1746 0 126 115072 0
malloc-32768 32768 3 0 3 0 1 98304 0
PROC 1376 56 10 864 0 8 90816 0
UMA Kegs 384 226 7 226 0 30 89472 0
128 Bucket 1024 46 37 256 0 16 84992 0
filedesc0 1072 57 20 865 0 8 82544 0
malloc-4096 4096 17 3 33 0 2 81920 0
malloc-8192 8192 8 1 10 0 1 73728 0
g_bio 408 4 176 4853 0 30 73440 0
malloc-64 64 643 428 15212 0 254 68544 0
malloc-128 128 380 147 415 0 126 67456 0
malloc-128 128 308 219 481 0 126 67456 0
malloc-65536 65536 1 0 1 0 1 65536 0
malloc-65536 65536 1 0 1 0 1 65536 0
malloc-32768 32768 2 0 2 0 1 65536 0
malloc-32768 32768 1 1 12 0 1 65536 0
malloc-32768 32768 2 0 2 0 1 65536 0
malloc-32768 32768 0 2 120 0 1 65536 0
malloc-8192 8192 6 1 8 0 1 57344 0
malloc-4096 4096 10 4 22 0 2 57344 0
64 Bucket 512 64 40 1559 0 30 53248 0
malloc-64 64 399 420 2098 0 254 52416 0
malloc-64 64 471 348 927 0 254 52416 0
malloc-256 256 64 131 764 0 62 49920 0
malloc-256 256 74 121 201 0 62 49920 0
malloc-256 256 75 120 649 0 62 49920 0
32 Bucket 256 56 139 617 0 62 49920 0
DIRHASH 1024 35 13 35 0 16 49152 0
NAMEI 1024 0 48 12979 0 16 49152 0
malloc-2048 2048 15 9 31 0 8 49152 0
malloc-1024 1024 10 38 1496 0 16 49152 0
syncache 168 0 264 4 0 254 44352 0
pcpu-8 8 4692 428 4848 0 254 40960 0
VMSPACE 616 34 32 846 0 16 40656 0
pipe 728 22 33 327 0 16 40040 0
sctp_chunk 152 0 260 1 0 254 39520 0
udp_inpcb 416 6 84 157 0 30 37440 0
malloc-64 64 31 536 11337 0 254 36288 0
malloc-64 64 99 468 794 0 254 36288 0
malloc-64 64 71 496 889 0 254 36288 0
malloc-64 64 25 542 29 0 254 36288 0
malloc-128 128 5 274 6 0 126 35712 0
malloc-128 128 42 237 3298 0 126 35712 0
malloc-128 128 65 214 72 0 126 35712 0
routing nhops 256 26 109 33 0 62 34560 0
ttyoutq 256 72 63 160 0 62 34560 0
malloc-384 384 89 1 112 0 30 34560 0
malloc-384 384 68 22 411 0 30 34560 0
malloc-256 256 62 73 203 0 62 34560 0
malloc-256 256 11 124 125 0 62 34560 0
malloc-256 256 23 112 369 0 62 34560 0
malloc-16384 16384 2 0 2 0 1 32768 0
malloc-16384 16384 0 2 160 0 1 32768 0
malloc-8192 8192 3 1 29 0 1 32768 0
malloc-2048 2048 4 12 16 0 8 32768 0
malloc-2048 2048 0 16 40 0 8 32768 0
malloc-2048 2048 3 13 194 0 8 32768 0
malloc-2048 2048 5 11 12 0 8 32768 0
malloc-1024 1024 2 30 42 0 16 32768 0
malloc-1024 1024 1 31 4 0 16 32768 0
malloc-1024 1024 5 27 10 0 16 32768 0
malloc-1024 1024 10 22 175 0 16 32768 0
malloc-512 512 9 55 127 0 30 32768 0
malloc-512 512 3 61 38 0 30 32768 0
malloc-512 512 4 60 14 0 30 32768 0
malloc-512 512 4 60 55 0 30 32768 0
pcpu-64 64 488 24 488 0 254 32768 0
ttyinq 160 135 65 300 0 62 32000 0
PGRP 120 24 240 33 0 126 31680 0
clpbuf 2624 0 12 25 0 4 31488 0
tcp_inpcb 1304 6 18 18 0 8 31296 0
sctp_laddr 48 4 584 23 0 254 28224 0
malloc-32 32 278 604 3289 0 254 28224 0
16 Bucket 144 47 149 271 0 62 28224 0
4 Bucket 48 6 582 9 0 254 28224 0
da_ccb 544 1 48 1340 0 16 26656 0
TURNSTILE 136 145 44 145 0 62 25704 0
cpuset 200 7 121 7 0 62 25600 0
malloc-8192 8192 1 2 102 0 1 24576 0
malloc-8192 8192 1 2 20 0 1 24576 0
malloc-8192 8192 3 0 3 0 1 24576 0
malloc-4096 4096 2 4 194 0 2 24576 0
tcp_rack_pcb 1216 0 20 4 0 8 24320 0
ertt_txseginfo 40 0 606 373 0 254 24240 0
rl_entry 40 38 568 38 0 254 24240 0
PWD 40 17 589 115 0 254 24240 0
rtentry 168 29 115 33 0 62 24192 0
Files 80 177 123 7138 0 126 24000 0
8 Bucket 80 50 250 308 0 126 24000 0
ripcb 384 1 59 5 0 30 23040 0
malloc-384 384 11 49 11 0 30 23040 0
malloc-384 384 1 59 8 0 30 23040 0
malloc-384 384 1 59 24 0 30 23040 0
malloc-384 384 21 39 24 0 30 23040 0
SLEEPQUEUE 88 145 111 145 0 126 22528 0
hostcache 64 1 314 1 0 254 20160 0
udp_inpcb ports 32 3 627 33 0 254 20160 0
ertt 72 6 274 18 0 126 20160 0
malloc-32 32 82 548 84 0 254 20160 0
malloc-32 32 193 437 1686 0 254 20160 0
malloc-32 32 101 529 249 0 254 20160 0
malloc-32 32 19 611 231 0 254 20160 0
malloc-32 32 58 572 945 0 254 20160 0
malloc-32 32 29 601 57 0 254 20160 0
2 Bucket 32 55 575 329 0 254 20160 0
KNOTE 160 32 93 388 0 62 20000 0
AIOLIO 272 0 70 2 0 30 19040 0
epoch_record pcpu 256 4 60 4 0 62 16384 0
malloc-16384 16384 1 0 1 0 1 16384 0
malloc-8192 8192 2 0 2 0 1 16384 0
malloc-4096 4096 3 1 3 0 2 16384 0
malloc-1024 1024 8 8 8 0 16 16384 0
malloc-512 512 1 31 1 0 30 16384 0
SMR CPU 32 7 504 7 0 254 16352 0
AIO 208 0 76 2 0 62 15808 0
kenv 258 17 43 1071 0 30 15480 0
mqnode 416 3 33 3 0 30 14976 0
vmem 1856 1 7 1 0 8 14848 0
SMR SHARED 24 7 504 7 0 254 12264 0
tcp_inpcb ports 32 3 375 5 0 254 12096 0
malloc-16 16 28 722 67 0 254 12000 0
malloc-16 16 312 438 480 0 254 12000 0
malloc-16 16 48 702 106 0 254 12000 0
malloc-16 16 2 748 95 0 254 12000 0
malloc-16 16 222 528 4492 0 254 12000 0
malloc-16 16 29 721 27782 0 254 12000 0
malloc-16 16 16 734 17 0 254 12000 0
Mountpoints 2816 2 2 2 0 4 11264 0
malloc-8192 8192 1 0 1 0 1 8192 0
malloc-4096 4096 1 1 1 0 2 8192 0
vtnet_tx_hdr 24 0 334 4195 0 254 8016 0
pcpu-16 16 4 252 4 0 254 4096 0
UMA Slabs 1 176 9 13 9 0 62 3872 0
KMAP ENTRY 96 12 27 14 0 0 3744 0
FFS1 dinode 128 0 0 0 0 126 0 0
ada_ccb 272 0 0 0 0 30 0 0
swblk 136 0 0 0 0 62 0 0
swpctrie 144 0 0 0 0 62 0 0
cdg_qdiffsample 16 0 0 0 0 254 0 0
pf state scrubs 40 0 0 0 0 254 0 0
pf frag entries 40 0 0 0 0 254 0 0
pf frags 248 0 0 0 0 62 0 0
pf table entries 160 0 0 0 0 254 0 0
pf table entry counters 64 0 0 0 0 254 0 0
pf source nodes 152 0 0 0 0 254 0 0
pf state keys 88 0 0 0 0 126 0 0
pf states 360 0 0 0 0 254 0 0
pf tags 104 0 0 0 0 126 0 0
pf mtags 184 0 0 0 0 62 0 0
tcp_rack_map 128 0 0 0 0 126 0 0
tcp_bbr_pcb 832 0 0 0 0 16 0 0
tcp_bbr_map 128 0 0 0 0 126 0 0
tfo_ccache_entries 80 0 0 0 0 126 0 0
tfo 4 0 0 0 0 254 0 0
sackhole 32 0 0 0 0 254 0 0
ipq 56 0 0 0 0 254 0 0
sctp_asconf_ack 48 0 0 0 0 254 0 0
sctp_asconf 40 0 0 0 0 254 0 0
sctp_stream_msg_out 112 0 0 0 0 254 0 0
sctp_readq 152 0 0 0 0 254 0 0
tcp_log_id_node 120 0 0 0 0 126 0 0
tcp_log_id_bucket 176 0 0 0 0 62 0 0
tcp_log 416 0 0 0 0 254 0 0
tcpreass 48 0 0 0 0 254 0 0
udplite_inpcb ports 32 0 0 0 0 254 0 0
udplite_inpcb 416 0 0 0 0 30 0 0
ripcb ports 32 0 0 0 0 254 0 0
IPsec SA lft_c 16 0 0 0 0 254 0 0
itimer 352 0 0 0 0 30 0 0
AIOCB 552 0 0 0 0 16 0 0
mqnotifier 216 0 0 0 0 62 0 0
mvdata 64 0 0 0 0 254 0 0
mqueue 248 0 0 0 0 62 0 0
TMPFS node 232 0 0 0 0 62 0 0
NCLNODE 608 0 0 0 0 16 0 0
LTS VFS Cache 360 0 0 0 0 30 0 0
L VFS Cache 320 0 0 0 0 30 0 0
STS VFS Cache 144 0 0 0 0 62 0 0
cryptop 280 0 0 0 0 30 0 0
linux_dma_object 32 0 0 0 0 254 0 0
linux_dma_pctrie 144 0 0 0 0 62 0 0
IOMMU_MAP_ENTRY 104 0 0 0 0 126 0 0
mbuf_jumbo_16k 16384 0 0 0 0 254 0 0
mbuf_jumbo_9k 9216 0 0 0 0 254 0 0
audit_record 1280 0 0 0 0 8 0 0
domainset 40 0 0 0 0 254 0 0
MAC labels 40 0 0 0 0 254 0 0
vnpbuf 2624 0 0 0 0 16 0 0
nfspbuf 2624 0 0 0 0 4 0 0
swwbuf 2624 0 0 0 0 2 0 0
swrbuf 2624 0 0 0 0 4 0 0
umtx_shm 88 0 0 0 0 126 0 0
umtx pi 96 0 0 0 0 126 0 0
rangeset pctrie nodes 144 0 0 0 0 62 0 0
malloc-65536 65536 0 0 0 0 1 0 0
malloc-65536 65536 0 0 0 0 1 0 0
malloc-65536 65536 0 0 0 0 1 0 0
malloc-32768 32768 0 0 0 0 1 0 0
malloc-32768 32768 0 0 0 0 1 0 0
malloc-32768 32768 0 0 0 0 1 0 0
malloc-16384 16384 0 0 0 0 1 0 0
malloc-16384 16384 0 0 0 0 1 0 0
malloc-16384 16384 0 0 0 0 1 0 0
malloc-16384 16384 0 0 0

---
This report is generated by a bot. It may contain errors.
See https://goo.gl/tpsmEJ for more information about syzbot.
syzbot engineers can be reached at syzk...@googlegroups.com.

syzbot will keep track of this issue. See:
https://goo.gl/tpsmEJ#status for how to communicate with syzbot.

If the report is already addressed, let syzbot know by replying with:
#syz fix: exact-commit-title

If you want to overwrite report's subsystems, reply with:
#syz set subsystems: new-subsystem
(See the list of subsystem names on the web dashboard)

If the report is a duplicate of another one, reply with:
#syz dup: exact-subject-of-another-report

If you want to undo deduplication, reply with:
#syz undup
Reply all
Reply to author
Forward
0 new messages