Fatal trap NUM: page fault in pfi_kkif_update (4)
1 view
Skip to first unread message
syzbot
Sep 21, 2025, 6:31:25 AM (12 days ago) Sep 21
to syzkaller-f...@googlegroups.com
Hello,
syzbot found the following issue on:
HEAD commit: 4c3a868d13c0 fcntl(F_SETFL): only allow one thread to perf..
git tree: freebsd-src
console output: https://syzkaller.appspot.com/x/log.txt?x=15f5f0e2580000
dashboard link: https://syzkaller.appspot.com/bug?extid=78ac7d6a45abfdcff28d
userspace arch: i386
Unfortunately, I don't have any reproducer for this issue yet.
IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+78ac7d...@syzkaller.appspotmail.com
Fatal trap 12: page fault while in kernel mode
cpuid = 1; apic id = 01
fault virtual address = 0xd0
fault code = supervisor read data, page not present
instruction pointer = 0x20:0xffffffff848750f8
stack pointer = 0x28:0xfffffe0056cd0320
frame pointer = 0x28:0xfffffe0056cd03f0
code segment = base 0x0, limit 0xfffff, type 0x1b
= DPL 0, pres 1, long 1, def32 0, gran 1
processor eflags = interrupt enabled, resume, IOPL = 0
current process = 773 (ifconfig)
rdi: 00000000000000d0 rsi: 0000000000000000 rdx: 0000000000000000
rcx: fffffe0002bf1850 r8: 0000000000000000 r9: 0000000000000001
rax: fffffe0000000000 rbx: fffffe000767f000 rbp: fffffe0056cd03f0
FreeBSD/amd64r10: 000100000000010f r11: 0000000000000013 r12: fffffe00541046c0
r13: fffffe00593e5d00 r14: 0000000000000000 r15: 0000000000000000
trap number = 12
panic: page fault
cpuid = 1
time = 1758450626
KDB: stack backtrace:
db_trace_self_wrapper() at db_trace_self_wrapper+0xc6/frame 0xfffffe0056ccfb50
kdb_backtrace() at kdb_backtrace+0xd0/frame 0xfffffe0056ccfcb0
vpanic() at vpanic+0x257/frame 0xfffffe0056ccfe70
panic() at panic+0xb5/frame 0xfffffe0056ccff30
trap_pfault() at trap_pfault+0xaf2/frame 0xfffffe0056cd0070
trap() at trap+0x78e/frame 0xfffffe0056cd0250
calltrap() at calltrap+0x8/frame 0xfffffe0056cd0250
--- trap 0xc, rip = 0xffffffff848750f8, rsp = 0xfffffe0056cd0320, rbp = 0xfffffe0056cd03f0 ---
pfi_kkif_update() at pfi_kkif_update+0xe8/frame 0xfffffe0056cd03f0
pfi_kkif_update() at pfi_kkif_update+0x4cd/frame 0xfffffe0056cd04d0
pfi_ifaddr_event() at pfi_ifaddr_event+0x16c/frame 0xfffffe0056cd0590
srcaddr_change_event() at srcaddr_change_event+0x16e/frame 0xfffffe0056cd0670
in_control_ioctl() at in_control_ioctl+0x1a30/frame 0xfffffe0056cd0870
ifioctl() at ifioctl+0xe51/frame 0xfffffe0056cd0ab0
kern_ioctl() at kern_ioctl+0x4ca/frame 0xfffffe0056cd0b90
sys_ioctl() at sys_ioctl+0x36e/frame 0xfffffe0056cd0d10
amd64_syscall() at amd64_syscall+0x4e2/frame 0xfffffe0056cd0f30
fast_syscall_common() at fast_syscall_common+0xf8/frame 0xfffffe0056cd0f30
--- syscall (54, FreeBSD ELF64, ioctl), rip = 0x8241aa2ca, rsp = 0x820f63d58, rbp = 0x820f63da0 ---
KDB: enter: panic
[ thread pid 773 tid 100114 ]
Stopped at kdb_enter+0x6e: movq $0,0x259e0f7(%rip)
db> set $lines = 0
db> set $maxwidth = 0
db> show registers
cs 0x20
ds 0x3b
es 0x3b
fs 0x13
gs 0x1b
ss 0x28
rax 0x12
rcx 0xfffffe0002bf1850
rdx 0
rbx 0xffffffff828086a0 .str.27
rsp 0xfffffe0056ccfc90
rbp 0xfffffe0056ccfcb0
rsi 0
rdi 0xffffffff81644349 printf+0x149
r8 0
r9 0xffffffff
r10 0
r11 0x17
r12 0xfffffe0054104000
r13 0xfffffffffffffffd
r14 0xffffffff828086a0 .str.27
r15 0
rip 0xffffffff8162da9e kdb_enter+0x6e
rflags 0x46
kdb_enter+0x6e: movq $0,0x259e0f7(%rip)
db> show proc
Process 773 (ifconfig) at 0xfffffe00540d6000:
state: NORMAL
uid: 0 gid: 0 supp gids: 0, 5
parent: pid 764 at 0xfffffe00540d9570
ABI: FreeBSD ELF64
flag: 0x10004000 flag2: 0
arguments: ifconfig tap1 inet 172.20.1.170 netmask 255.255.255.0
reaper: 0xfffffe0007809010 reapsubtree: 1
sigparent: 20
vmspace: 0xfffffe00540bf248
(map 0xfffffe00540bf248)
(map.pmap 0xfffffe00540bf2e8)
(pmap 0xfffffe00540bf358)
threads: 1
100114 Run CPU 1 ifconfig
db> ps
pid ppid pgrp uid state wmesg wchan cmd
774 772 423 0 D devfs 0xfffffe0059651908 sh
773 764 764 0 R CPU 1 ifconfig
772 423 423 0 S wait 0xfffffe005400d570 sh
766 762 766 0 D devfs 0xfffffe0059651908 syz-executor
765 762 765 0 D devfs 0xfffffe0059651908 syz-executor
764 762 764 0 S wait 0xfffffe00540d9570 syz-executor
763 762 763 0 L *pf rule 0xfffffe00079f9e40 syz-executor
762 760 760 0 R syz-executor
760 758 760 0 Ss sigsusp 0xfffffe0007809b70 csh
758 681 758 0 Ss select 0xfffffe0057df7940 sshd
747 1 747 0 Rs+ CPU 0 getty
746 1 746 0 Ss+ ttyin 0xfffffe005862f0b0 getty
745 1 745 0 Ss+ ttyin 0xfffffe005862f4b0 getty
744 1 744 0 Ss+ ttyin 0xfffffe005862f8b0 getty
743 1 743 0 Ss+ ttyin 0xfffffe005862fcb0 getty
742 1 742 0 Ss+ ttyin 0xfffffe00586300b0 getty
741 1 741 0 Ss+ ttyin 0xfffffe00586304b0 getty
740 1 740 0 Ss+ ttyin 0xfffffe00586308b0 getty
739 1 739 0 Ss+ ttyin 0xfffffe0058630cb0 getty
737 1 17 0 S+ piperd 0xfffffe006b4495c0 logger
736 735 17 0 S+ nanslp 0xffffffff83bacc41 sleep
735 1 17 0 S+ wait 0xfffffe0054004568 sh
685 1 685 0 Ss nanslp 0xffffffff83bacc40 cron
681 1 681 0 Ss select 0xfffffe0057ddbcc0 sshd
494 1 494 0 Ds biowr 0xfffffe0007c1d0e8 syslogd
423 1 423 0 Ss wait 0xfffffe005400c568 devd
422 1 422 65 Ss select 0xfffffe0057ddbe40 dhclient
337 1 337 0 Ss select 0xfffffe0057de0140 dhclient
334 1 334 0 Ss select 0xfffffe0058613840 dhclient
16 0 0 0 DL syncer 0xffffffff83cca820 [syncer]
15 0 0 0 DL vlruwt 0xfffffe0054002558 [vnlru]
14 0 0 0 DL (threaded) [bufdaemon]
100079 D psleep 0xffffffff83cc8d60 [bufdaemon]
100082 D - 0xffffffff83001ec0 [bufspacedaemon-0]
100093 D sdflush 0xfffffe005862dce8 [/ worker]
9 0 0 0 DL psleep 0xffffffff83d13cc0 [vmdaemon]
8 0 0 0 DL (threaded) [pagedaemon]
100077 D psleep 0xffffffff83cf9d88 [dom0]
100080 D launds 0xffffffff83cf9d94 [laundry: dom0]
100081 D umarcl 0xffffffff81e13ce0 [uma]
7 0 0 0 RL [rand_harvestq]
6 0 0 0 DL pftm 0xffffffff8483ff20 [pf purge]
5 0 0 0 DL waiting 0xffffffff8453c700 [sctp_iterator]
4 0 0 0 DL (threaded) [cam]
100045 D - 0xffffffff838ef340 [doneq0]
100046 D - 0xffffffff838ef2c0 [async]
100075 D - 0xffffffff838ef140 [scanner]
3 0 0 0 DL (threaded) [crypto]
100042 D crypto_ 0xffffffff83cf5660 [crypto]
100043 D crypto_ 0xfffffe0053ee4d30 [crypto returns 0]
100044 D crypto_ 0xfffffe0053ee4d80 [crypto returns 1]
13 0 0 0 DL (threaded) [geom]
100037 D - 0xffffffff83b55640 [g_event]
100038 D - 0xffffffff83b55660 [g_up]
100039 D - 0xffffffff83b55680 [g_down]
2 0 0 0 WL (threaded) [clock]
100031 I [clock (0)]
100032 I [clock (1)]
12 0 0 0 WL (threaded) [intr]
100013 I [swi6: task queue]
100014 I [swi6: Giant taskq]
100016 I [swi5: fast taskq]
100033 I [swi1: netisr 0]
100034 I [swi1: hpts]
100035 I [swi1: hpts]
100047 I [irq24: virtio_pci0]
100048 I [irq25: virtio_pci0]
100049 I [irq26: virtio_pci0]
100050 I [irq27: virtio_pci0]
100051 I [irq28: virtio_pci1]
100052 I [irq29: virtio_pci1]
100053 I [irq30: virtio_pci1]
100054 I [irq31: virtio_pci1]
100055 I [irq32: virtio_pci1]
100060 I [irq10: virtio_pci2]
100062 I [irq1: atkbd0]
100063 I [irq12: psm0]
100064 I [swi0: uart uart++]
100068 I [swi1: pf send]
11 0 0 0 RL (threaded) [idle]
100003 CanRun [idle: cpu0]
100004 CanRun [idle: cpu1]
1 0 1 0 SLs wait 0xfffffe0007809010 [init]
10 0 0 0 DL audit_w 0xffffffff83cf6100 [audit]
0 0 0 0 DLs (threaded) [kernel]
100000 D parked 0xffffffff84c51ff0 [swapper]
100005 D - 0xfffffe0053ea0100 [softirq_0]
100006 D - 0xfffffe0053ea0000 [softirq_1]
100007 D - 0xfffffe0053e9fe00 [if_io_tqg_0]
100008 D - 0xfffffe0053e9fd00 [if_io_tqg_1]
100009 D - 0xfffffe0053e9fc00 [if_config_tqg_0]
100010 D - 0xfffffe000776aa00 [kqueue_ctx taskq]
100011 D - 0xfffffe000776a900 [jail_remove taskq]
100012 D - 0xfffffe000776a800 [bus taskq]
100015 D - 0xfffffe000776a500 [thread taskq]
100017 D - 0xfffffe000776a300 [aiod_kick taskq]
100018 D - 0xfffffe000776a200 [deferred_unmount ta]
100019 D - 0xfffffe000776a100 [inm_free taskq]
100020 D - 0xfffffe000776a000 [in6m_free taskq]
100021 D - 0xfffffe0007769e00 [linuxkpi_irq_wq]
100022 D - 0xfffffe0007769d00 [linuxkpi_short_wq_0]
100023 D - 0xfffffe0007769d00 [linuxkpi_short_wq_1]
100024 D - 0xfffffe0007769d00 [linuxkpi_short_wq_2]
100025 D - 0xfffffe0007769d00 [linuxkpi_short_wq_3]
100026 D - 0xfffffe0007769c00 [linuxkpi_long_wq_0]
100027 D - 0xfffffe0007769c00 [linuxkpi_long_wq_1]
100028 D - 0xfffffe0007769c00 [linuxkpi_long_wq_2]
100029 D - 0xfffffe0007769c00 [linuxkpi_long_wq_3]
100036 D - 0xfffffe0007769a00 [firmware taskq]
100040 D - 0xfffffe0007769900 [crypto_0]
100041 D - 0xfffffe0007769900 [crypto_1]
100056 D - 0xfffffe0057de6d00 [vtnet0 rxq 0]
100057 D - 0xfffffe0057de6c00 [vtnet0 txq 0]
100058 D - 0xfffffe0057de6b00 [vtnet0 rxq 1]
100059 D - 0xfffffe0057de6a00 [vtnet0 txq 1]
100061 D vtbslp 0xfffffe0057de0380 [virtio_balloon]
100065 D - 0xffffffff8280cd80 [deadlkres]
100069 D - 0xfffffe00593fd500 [acpi_task_0]
100070 D - 0xfffffe00593fd500 [acpi_task_1]
100071 D - 0xfffffe00593fd500 [acpi_task_2]
100073 D - 0xfffffe000776ab00 [mca taskq]
100074 D - 0xfffffe0007769700 [CAM taskq]
100076 D - 0xfffffe00593fd400 [ipsec_offload]
db> show all locks
Process 773 (ifconfig) thread 0xfffffe0054104000 (100114)
exclusive rm pf rulesets (pf rulesets) r = 0 (0xfffffe00077e0c50) locked @ /syzkaller/managers/i386/kernel/sys/netpfil/pf/pf_if.c:1180
exclusive sx in_control (in_control) r = 0 (0xffffffff83ccf660) locked @ /syzkaller/managers/i386/kernel/sys/netinet/in.c:367
Process 763 (syz-executor) thread 0xfffffe00540cf780 (100102)
shared lockmgr devfs (devfs) r = 0 (0xfffffe0059651908) locked @ /syzkaller/managers/i386/kernel/sys/fs/devfs/devfs_vnops.c:375
Process 747 (getty) thread 0xfffffe00540eb780 (100108)
exclusive sleep mutex ttymtx (ttymtx) r = 0 (0xfffffe0058279c08) locked @ /syzkaller/managers/i386/kernel/sys/kern/tty.c:216
Process 494 (syslogd) thread 0xfffffe00540ba000 (100091)
exclusive lockmgr bufwait (bufwait) r = 0 (0xfffffe0007c1d168) locked @ /syzkaller/managers/i386/kernel/sys/kern/vfs_bio.c:4022
exclusive lockmgr ufs (ufs) r = 0 (0xfffffe006de15070) locked @ /syzkaller/managers/i386/kernel/sys/kern/vfs_syscalls.c:3676
db> show malloc
Type InUse MemUse Requests
pf_hash 6 12804K 6
linker 384 5188K 498
tcp_hpts 7 4801K 7
devbuf 4187 4324K 4212
sysctloid 35125 2069K 35200
vtbuf 24 1968K 46
kobj 331 1324K 495
newblk 324 1105K 340
vfscache 3 1025K 3
pcb 23 669K 41
inodedep 62 535K 84
ufs_quota 1 512K 1
vfs_hash 1 512K 1
callout 2 512K 2
intr 4 472K 4
vnet_data 2 224K 2
acpitask 1 224K 1
subproc 102 205K 831
KTRACE 100 200K 100
acpica 1674 184K 54444
vmem 5 144K 7
tidhash 3 141K 3
pagedep 18 133K 22
tfo_ccache 1 128K 1
IP reass 1 128K 1
sem 4 106K 4
DEVFS1 104 104K 117
gtaskqueue 18 98K 18
filedesc 12 89K 25
bus 1000 82K 5086
mtx_pool 3 74K 3
syncache 1 68K 1
NFSD srvcache 3 68K 3
module 523 66K 523
ddb_capture 1 64K 1
hostcache 1 32K 1
shm 1 32K 1
kdtrace 162 32K 892
DEVFS3 123 31K 133
msg 4 30K 4
umtx 240 30K 240
kbdmux 6 28K 6
temp 23 21K 1653
DEVFS_RULE 56 20K 56
BPF 12 18K 12
ufs_mount 4 17K 5
proc 3 17K 3
tty 16 16K 16
ithread 90 15K 90
routetbl 54 15K 162
bus-sc 34 15K 1657
eventhandler 163 14K 163
ifaddr 44 14K 46
kenv 95 12K 95
GEOM 49 11K 431
CAM queue 5 11K 1528
rman 82 10K 437
rpc 8 9K 8
cred 23 9K 180
bmsafemap 2 9K 51
plimit 22 9K 317
ifnet 5 9K 5
devstat 4 9K 4
UART 12 9K 12
ksem 1 8K 1
shmfd 1 8K 1
pfs_vncache 1 8K 1
audit_evclass 240 8K 306
taskqueue 69 8K 69
sglist 6 7K 6
CAM DEV 3 6K 510
pfs_nodes 22 6K 22
dirrem 21 6K 37
lltable 19 6K 19
ufs_dirhash 24 5K 24
UMA 268 5K 268
vt 11 5K 11
pf_ifnet 9 4K 12
memdesc 1 4K 1
MCA 32 4K 32
evdev 4 4K 4
acpisem 28 4K 28
diradd 27 4K 47
kqueue 47 3K 778
pwddesc 46 3K 775
terminal 11 3K 11
DEVFSP 41 3K 44
indirdep 10 3K 10
session 20 3K 31
acpidev 20 3K 20
proc-args 75 3K 1709
hhook 8 3K 10
clone 9 3K 9
uidinfo 3 3K 6
kcovinfo 36 3K 36
netlink 2 3K 34
LRO 2 3K 2
local_apic 1 2K 1
io_apic 1 2K 1
ipsec-saq 2 2K 2
Unitno 30 2K 46
ether_multi 22 2K 32
CAM XPT 22 2K 543
in6_multi 15 2K 15
lockf 15 2K 22
toponodes 6 2K 6
ipsecpolicy 2 2K 2
selfd 19 2K 5603
msi 9 2K 9
softdep 1 1K 1
newdirblk 8 1K 12
mkdir 8 1K 24
sahead 1 1K 1
secasvar 1 1K 1
vnodemarker 2 1K 8
select 8 1K 24
NFSD session 1 1K 1
CAM periph 4 1K 271
ipsec 3 1K 3
in_multi 3 1K 5
nhops 6 1K 6
pfil 6 1K 6
tun 2 1K 2
isadev 6 1K 6
mount 16 1K 89
pci_link 10 1K 10
sctp_ifa 5 1K 6
crypto 4 1K 4
encap_export_host 12 1K 12
osd 9 1K 23
freefile 4 1K 9
ip6ndp 5 1K 5
mld 4 1K 4
CC Mem 4 1K 6
igmp 4 1K 4
cdev 2 1K 2
lkpikmalloc 8 1K 9
counter_rate 13 1K 13
sctp_ifn 3 1K 6
inpcbpolicy 12 1K 115
chacha20random 1 1K 1
biobuf 1 1K 1
vnodes 1 1K 1
NFSD lckfile 1 1K 1
NFSD V4client 1 1K 1
DEVFS 9 1K 10
CAM SIM 2 1K 2
feeder 7 1K 7
tcpfunc 3 1K 3
loginclass 3 1K 5
prison 6 1K 6
cryptodev 2 1K 35
nexusdev 8 1K 8
apmdev 1 1K 1
atkbddev 2 1K 2
freefrag 1 1K 6
procdesc 1 1K 6
pmchooks 1 1K 1
CAM path 4 1K 1034
CAM dev queue 2 1K 2
CAM I/O Scheduler 1 1K 1
soname 4 1K 3269
filecaps 4 1K 66
sctp_vrf 1 1K 1
freework 1 1K 26
vnet 1 1K 1
pmc 1 1K 1
entropy 2 1K 31
acpiintr 1 1K 1
cpus 2 1K 2
vnet_data_free 1 1K 1
Per-cpu 1 1K 1
p1003.1b 1 1K 1
pf_table 0 0K 0
pf 0 0K 0
pf_rule 0 0K 0
pf_altq 0 0K 0
pf_osfp 0 0K 0
pf_krule_item 0 0K 0
pf_temp 0 0K 0
tcp_pcm_rack 0 0K 0
tcp_do_rack 0 0K 0
tcp_fsb_rack 0 0K 0
ipcomp 0 0K 0
esp 0 0K 0
ah 0 0K 0
filemon 0 0K 0
mqdata 0 0K 0
sctp_mcore 0 0K 0
sctp_socko 0 0K 0
sctp_iter 0 0K 4
sctp_mvrf 0 0K 0
sctp_timw 0 0K 0
sctp_cpal 0 0K 0
sctp_cmsg 0 0K 0
sctp_stre 0 0K 0
sctp_athi 0 0K 0
sctp_athm 0 0K 0
sctp_atky 0 0K 0
sctp_atcl 0 0K 0
sctp_a_it 0 0K 4
sctp_aadr 0 0K 0
sctp_stro 0 0K 0
sctp_stri 0 0K 0
sctp_map 0 0K 0
madt_table 0 0K 2
smartpqi 0 0K 0
ixl 0 0K 0
ice-resmgr 0 0K 0
ice-osdep 0 0K 0
ice 0 0K 0
iavf 0 0K 0
axgbe 0 0K 0
fpukern_ctx 0 0K 0
xen_intr 0 0K 0
xen_hvm 0 0K 0
legacydrv 0 0K 0
NMI handlers 0 0K 0
bounce 0 0K 0
busdma 0 0K 0
qpidrv 0 0K 0
dmar_idpgtbl 0 0K 0
dmar_dom 0 0K 0
dmar_ctx 0 0K 0
amdiommu_dom 0 0K 0
amdiommu_ctx 0 0K 0
isci 0 0K 0
iommu_dmamap 0 0K 0
hyperv_socket 0 0K 0
bxe_ilt 0 0K 0
aesni_data 0 0K 0
xenbus 0 0K 0
vm_fictitious 0 0K 0
UMAHash 0 0K 0
vm_pgdata 0 0K 0
jblocks 0 0K 0
savedino 0 0K 9
sentinel 0 0K 0
jfsync 0 0K 0
jtrunc 0 0K 0
sbdep 0 0K 2
jsegdep 0 0K 0
jseg 0 0K 0
jfreefrag 0 0K 0
jfreeblk 0 0K 0
jnewblk 0 0K 0
jmvref 0 0K 0
jremref 0 0K 0
jaddref 0 0K 0
freedep 0 0K 0
freeblks 0 0K 25
allocindir 0 0K 0
allocdirect 0 0K 0
ufs_trim 0 0K 0
mactemp 0 0K 0
audit_trigger 0 0K 0
audit_pipe_presel 0 0K 0
audit_pipeent 0 0K 0
audit_pipe 0 0K 0
audit_evname 0 0K 0
audit_bsm 0 0K 0
audit_gidset 0 0K 0
audit_text 0 0K 0
audit_path 0 0K 0
audit_data 0 0K 0
audit_cred 0 0K 0
ktls_ocf 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5E_TLS_RX 0 0K 0
MLX5EEPROM 0 0K 0
MLX5E_TLS 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EN 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5DUMP 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
simple_attr 0 0K 0
seq_file 0 0K 0
lkpiskb 0 0K 0
radix 0 0K 0
idr 0 0K 0
lkpindev 0 0K 0
lkpimhi 0 0K 0
lkpifw 0 0K 0
lkpi80211 0 0K 0
NLM 0 0K 0
ipsec-spdcache 0 0K 0
ipsec-reg 0 0K 0
ipsec-misc 0 0K 0
ipsecrequest 0 0K 0
ip6opt 0 0K 0
ip6_msource 0 0K 0
ip6_moptions 0 0K 0
in6_mfilter 0 0K 0
frag6 0 0K 0
tcplog 0 0K 0
tcp_hwpace 0 0K 0
ip_msource 0 0K 0
ip_moptions 0 0K 0
in_mfilter 0 0K 0
ipid 0 0K 0
80211scan 0 0K 0
80211ratectl 0 0K 0
80211power 0 0K 0
80211nodeie 0 0K 0
80211node 0 0K 0
80211mesh_gt 0 0K 0
80211mesh_rt 0 0K 0
80211perr 0 0K 0
80211prep 0 0K 0
80211preq 0 0K 0
80211dfs 0 0K 0
80211crypto 0 0K 0
80211vap 0 0K 0
iflib 0 0K 0
vlan 0 0K 0
gif 0 0K 0
ifdescr 0 0K 0
zlib 0 0K 20
fadvise 0 0K 0
VN POLL 0 0K 0
statfs 0 0K 181
namei_tracker 0 0K 0
inotify 0 0K 0
export_host 0 0K 0
cl_savebuf 0 0K 7
aio 0 0K 0
lio 0 0K 0
acl 0 0K 0
mbuf_tag 0 0K 0
ktls 0 0K 0
accf 0 0K 0
pts 0 0K 0
timerfd 0 0K 0
iov 0 0K 13052
ioctlops 0 0K 79
eventfd 0 0K 0
Witness 0 0K 0
stack 0 0K 0
sbuf 0 0K 190
firmware 0 0K 0
compressor 0 0K 0
SWAP 0 0K 0
sysctltmp 0 0K 635
sysctl 0 0K 3
ekcd 0 0K 0
dumper 0 0K 0
sendfile 0 0K 0
rctl 0 0K 0
cache 0 0K 0
jaildesc 0 0K 0
prison_racct 0 0K 0
Fail Points 0 0K 0
sigio 0 0K 1
filedesc_to_leader 0 0K 0
pwd 0 0K 0
tty console 0 0K 0
boottrace 0 0K 0
isofs_node 0 0K 0
isofs_mount 0 0K 0
tr_raid5_data 0 0K 0
tr_raid1e_data 0 0K 0
tr_raid1_data 0 0K 0
tr_raid0_data 0 0K 0
tr_concat_data 0 0K 0
md_sii_data 0 0K 0
md_promise_data 0 0K 0
md_nvidia_data 0 0K 0
md_jmicron_data 0 0K 0
md_intel_data 0 0K 0
md_ddf_data 0 0K 0
raid_data 0 0K 72
geom_flashmap 0 0K 0
tmpfs dir 0 0K 0
tmpfs name 0 0K 0
tmpfs mount 0 0K 0
tmpfs extattr 0 0K 0
NFS FHA 0 0K 0
newnfsmnt 0 0K 0
newnfsclient_req 0 0K 0
NFSCL layrecall 0 0K 0
NFSCL session 0 0K 0
NFSCL sockreq 0 0K 0
NFSCL devinfo 0 0K 0
NFSCL flayout 0 0K 0
NFSCL layout 0 0K 0
NFSD rollback 0 0K 0
NFSCL diroff 0 0K 0
NEWNFSnode 0 0K 0
NFSCL lck 0 0K 0
NFSCL lckown 0 0K 0
NFSCL client 0 0K 0
NFSCL deleg 0 0K 0
NFSCL open 0 0K 0
NFSCL owner 0 0K 0
NFS fh 0 0K 0
NFS req 0 0K 0
NFSD usrgroup 0 0K 0
NFSD string 0 0K 0
NFSD V4lock 0 0K 0
NFSD V4state 0 0K 0
msdosfs_fat 0 0K 0
msdosfs_mount 0 0K 0
msdosfs_node 0 0K 0
DEVFS4 0 0K 0
DEVFS2 0 0K 0
gntdev 0 0K 0
privcmd_dev 0 0K 0
evtchn_dev 0 0K 0
xenstore 0 0K 0
xnb 0 0K 0
xen_acpi 0 0K 0
xbbd 0 0K 0
xbd 0 0K 0
Balloon 0 0K 0
sysmouse 0 0K 0
vtfont 0 0K 0
pvscsi 0 0K 0
USBdev 0 0K 0
USB 0 0K 0
ufshci 0 0K 0
twsbuf 0 0K 0
tcp_log_dev 0 0K 0
midi buffers 0 0K 0
mixer 0 0K 0
ac97 0 0K 0
hdacc 0 0K 0
hdac 0 0K 0
hdaa 0 0K 0
SIIS driver 0 0K 0
PUC 0 0K 0
ppbusdev 0 0K 0
sr_iov 0 0K 0
OCS 0 0K 0
OCS 0 0K 0
nvme 0 0K 0
nvd 0 0K 0
netmap 0 0K 0
mwldev 0 0K 0
MVS driver 0 0K 0
mpi3mrbuf 0 0K 0
mrsasbuf 0 0K 0
mpt_user 0 0K 0
mps_user 0 0K 0
MPSSAS 0 0K 0
mps 0 0K 0
mpr_user 0 0K 0
MPRSAS 0 0K 0
mpr 0 0K 0
mfibuf 0 0K 0
md_sectors 0 0K 0
md_disk 0 0K 0
malodev 0 0K 0
LED 0 0K 0
ix_sriov 0 0K 0
ix 0 0K 0
ipsbuf 0 0K 0
ciss_data 0 0K 0
BACKLIGHT 0 0K 0
ath_hal 0 0K 0
athdev 0 0K 0
ata_pci 0 0K 0
ata_dma 0 0K 0
ata_generic 0 0K 0
AHCI driver 0 0K 0
agp 0 0K 0
acpipwr 0 0K 0
acpi_perf 0 0K 0
acpicmbat 0 0K 0
aacraidcam 0 0K 0
aacraid_buf 0 0K 0
aaccam 0 0K 0
aacbuf 0 0K 0
zstd 0 0K 0
XZ_DEC 0 0K 0
nvlist 0 0K 0
SCSI ENC 0 0K 0
SCSI sa 0 0K 0
scsi_pass 0 0K 0
scsi_da 0 0K 70
ata_da 0 0K 0
scsi_ch 0 0K 0
scsi_cd 0 0K 0
nvme_da 0 0K 0
CAM CCB 0 0K 523
CAM ccb queue 0 0K 0
db> show uma
Zone Size Used Free Requests Sleeps Bucket Total Mem XFree
mbuf_jumbo_page 4096 8320 1078 12023 0 254 38494208 0
mbuf 256 8578 1084 13577 0 254 2473472 0
BUF TRIE 152 188 11616 368 0 62 1794208 0
malloc-384 384 4138 32 4150 0 30 1601280 0
malloc-128 128 11543 175 11553 0 126 1499904 0
malloc-4096 4096 334 4 577 0 2 1384448 0
UMA Slabs 0 112 10880 22 10880 0 126 1221024 0
tcp_log 416 558 1989 2940 0 254 1059552 0
mbuf_cluster 2048 508 0 508 0 254 1040384 0
malloc-65536 65536 14 0 17 0 1 917504 0
RADIX NODE 152 5753 144 24585 0 62 896344 0
vmem btag 56 15839 112 15839 0 254 893256 0
FFS inode 1168 527 19 536 0 8 637728 0
socket 1024 21 487 1266 0 254 520192 0
lkpicurr 168 2 3094 2 0 62 520128 0
pbuf 2624 0 198 0 0 2 519552 0
VM OBJECT 248 1023 97 12440 0 62 277760 0
VNODE 440 559 44 570 0 30 265320 0
256 Bucket 2048 121 7 990 0 8 262144 0
malloc-64 64 3855 240 3859 0 254 262080 0
malloc-2048 2048 107 13 348 0 8 245760 0
malloc-16 16 14471 279 14533 0 254 236000 0
THREAD 1860 115 5 116 0 8 223200 0
DEVCTL 1024 5 211 130 0 0 221184 0
malloc-4096 4096 52 2 781 0 2 221184 0
UMA Zones 768 240 4 240 0 16 187392 0
malloc-32 32 5321 349 5365 0 254 181440 0
malloc-128 128 1211 184 25546 0 126 178560 0
lkpimm 56 1 3095 1 0 254 173376 0
unpcb 320 8 508 1134 0 254 165120 0
malloc-1024 1024 115 29 295 0 16 147456 0
FFS2 dinode 256 527 43 536 0 62 145920 0
malloc-65536 65536 0 2 44 0 1 131072 0
malloc-65536 65536 0 2 110 0 1 131072 0
malloc-65536 65536 2 0 2 0 1 131072 0
malloc-65536 65536 1 1 9 0 1 131072 0
malloc-32768 32768 2 2 13 0 1 131072 0
mbuf_packet 256 0 508 92 0 254 130048 0
S VFS Cache 104 989 181 1024 0 126 121680 0
MAP ENTRY 96 1089 171 38153 0 126 120960 0
ksiginfo 112 39 1005 54 0 126 116928 0
malloc-16384 16384 5 2 10 0 1 114688 0
FPU_save_area 832 117 18 124 0 16 112320 0
malloc-256 256 353 82 471 0 62 111360 0
malloc-128 128 582 193 3799 0 126 99200 0
malloc-128 128 634 141 1221 0 126 99200 0
malloc-32768 32768 3 0 3 0 1 98304 0
malloc-8192 8192 9 2 92 0 1 90112 0
UMA Kegs 384 227 6 227 0 30 89472 0
128 Bucket 1024 41 42 242 0 16 84992 0
malloc-16384 16384 5 0 7 0 1 81920 0
malloc-2048 2048 6 34 1038 0 8 81920 0
PROC 1368 45 10 774 0 8 75240 0
malloc-4096 4096 15 3 211 0 2 73728 0
g_bio 408 4 176 4733 0 30 73440 0
malloc-64 64 739 332 2288 0 254 68544 0
malloc-64 64 619 452 7252 0 254 68544 0
malloc-32768 32768 0 2 120 0 1 65536 0
malloc-32768 32768 2 0 2 0 1 65536 0
malloc-8192 8192 8 0 9 0 1 65536 0
malloc-1024 1024 26 38 557 0 16 65536 0
malloc-256 256 166 89 811 0 62 65280 0
malloc-256 256 147 108 527 0 62 65280 0
malloc-256 256 162 93 186 0 62 65280 0
filedesc0 1072 46 10 775 0 8 60032 0
malloc-4096 4096 12 2 495 0 2 57344 0
malloc-128 128 25 378 284 0 126 51584 0
32 Bucket 256 56 139 458 0 62 49920 0
DIRHASH 1024 34 14 34 0 16 49152 0
NAMEI 1024 4 44 11898 0 16 49152 0
malloc-16384 16384 1 2 191 0 1 49152 0
malloc-2048 2048 9 15 27 0 8 49152 0
64 Bucket 512 64 32 1547 0 30 49152 0
malloc-384 384 86 34 415 0 30 46080 0
syncache 168 0 264 3 0 254 44352 0
da_ccb 544 1 69 1274 0 16 38080 0
pcpu-8 8 4505 103 4565 0 254 36864 0
udp_inpcb 408 7 83 106 0 30 36720 0
malloc-64 64 20 547 12943 0 254 36288 0
malloc-64 64 31 536 47 0 254 36288 0
malloc-64 64 195 372 952 0 254 36288 0
malloc-64 64 56 511 827 0 254 36288 0
malloc-128 128 19 260 142 0 126 35712 0
malloc-128 128 11 268 21 0 126 35712 0
malloc-128 128 124 155 519 0 126 35712 0
routing nhops 256 10 125 17 0 62 34560 0
ttyoutq 256 72 63 160 0 62 34560 0
malloc-384 384 61 29 69 0 30 34560 0
malloc-384 384 62 28 62 0 30 34560 0
malloc-256 256 27 108 490 0 62 34560 0
malloc-256 256 1 134 51 0 62 34560 0
malloc-256 256 34 101 181 0 62 34560 0
malloc-256 256 15 120 273 0 62 34560 0
malloc-2048 2048 0 16 12 0 8 32768 0
malloc-2048 2048 2 14 2 0 8 32768 0
malloc-2048 2048 3 13 29 0 8 32768 0
malloc-2048 2048 4 12 12 0 8 32768 0
malloc-2048 2048 6 10 6 0 8 32768 0
malloc-1024 1024 3 29 43 0 16 32768 0
malloc-1024 1024 17 15 888 0 16 32768 0
malloc-1024 1024 3 29 6 0 16 32768 0
malloc-1024 1024 3 29 7 0 16 32768 0
malloc-1024 1024 2 30 2 0 16 32768 0
malloc-512 512 0 64 110 0 30 32768 0
malloc-512 512 12 52 17 0 30 32768 0
malloc-512 512 0 64 11 0 30 32768 0
malloc-512 512 2 62 49 0 30 32768 0
malloc-512 512 9 55 17 0 30 32768 0
malloc-512 512 2 62 8 0 30 32768 0
malloc-512 512 3 61 4 0 30 32768 0
pcpu-64 64 501 11 501 0 254 32768 0
ttyinq 160 135 65 300 0 62 32000 0
PGRP 120 24 240 35 0 126 31680 0
clpbuf 2624 0 12 15 0 4 31488 0
VMSPACE 584 30 19 761 0 16 28616 0
sctp_laddr 48 0 588 4 0 254 28224 0
malloc-32 32 130 752 1317 0 254 28224 0
malloc-32 32 351 531 4173 0 254 28224 0
16 Bucket 144 48 148 244 0 62 28224 0
4 Bucket 48 5 583 7 0 254 28224 0
TURNSTILE 136 121 68 121 0 62 25704 0
cpuset 200 7 121 7 0 62 25600 0
malloc-8192 8192 3 0 3 0 1 24576 0
malloc-4096 4096 3 3 23 0 2 24576 0
pipe 736 19 14 280 0 16 24288 0
PWD 40 14 592 95 0 254 24240 0
rtentry 168 13 131 17 0 62 24192 0
Files 80 150 150 6273 0 126 24000 0
8 Bucket 80 40 260 274 0 126 24000 0
malloc-384 384 1 59 2 0 30 23040 0
malloc-384 384 12 48 12 0 30 23040 0
malloc-384 384 25 35 525 0 30 23040 0
ripcb 376 1 59 3 0 30 22560 0
SLEEPQUEUE 88 121 135 121 0 126 22528 0
hostcache 64 1 314 1 0 254 20160 0
malloc-64 64 3 312 3 0 254 20160 0
malloc-32 32 54 576 293 0 254 20160 0
malloc-32 32 14 616 76 0 254 20160 0
malloc-32 32 33 597 58 0 254 20160 0
malloc-32 32 49 581 57 0 254 20160 0
malloc-32 32 16 614 17 0 254 20160 0
2 Bucket 32 49 581 316 0 254 20160 0
vmem 1856 2 7 2 0 8 16704 0
epoch_record pcpu 256 4 60 4 0 62 16384 0
malloc-16384 16384 1 0 1 0 1 16384 0
malloc-16384 16384 1 0 1 0 1 16384 0
malloc-8192 8192 0 2 20 0 1 16384 0
malloc-8192 8192 2 0 2 0 1 16384 0
malloc-1024 1024 0 16 2 0 16 16384 0
malloc-512 512 2 30 2 0 30 16384 0
SMR CPU 32 8 503 8 0 254 16352 0
malloc-16 16 505 495 3379 0 254 16000 0
kenv 258 17 43 1064 0 30 15480 0
mqnode 416 3 33 3 0 30 14976 0
SMR SHARED 24 8 503 8 0 254 12264 0
ertt_txseginfo 40 0 303 124 0 254 12120 0
ertt 72 4 164 6 0 126 12096 0
KNOTE 160 0 75 2 0 62 12000 0
malloc-16 16 35 715 1265 0 254 12000 0
malloc-16 16 9 741 14 0 254 12000 0
malloc-16 16 31 719 81 0 254 12000 0
malloc-16 16 43 707 25016 0 254 12000 0
malloc-16 16 8 742 9 0 254 12000 0
malloc-16 16 7 743 9 0 254 12000 0
tcp_inpcb 1304 4 5 6 0 8 11736 0
malloc-384 384 1 29 2 0 30 11520 0
Mountpoints 2816 2 2 2 0 4 11264 0
malloc-8192 8192 0 1 26 0 1 8192 0
malloc-8192 8192 1 0 1 0 1 8192 0
malloc-4096 4096 0 2 4 0 2 8192 0
malloc-4096 4096 0 2 3 0 2 8192 0
vtnet_tx_hdr 24 0 334 866 0 254 8016 0
pcpu-16 16 4 252 4 0 254 4096 0
UMA Slabs 1 176 8 14 8 0 62 3872 0
KMAP ENTRY 96 12 27 14 0 0 3744 0
FFS1 dinode 128 0 0 0 0 126 0 0
ada_ccb 272 0 0 0 0 30 0 0
swblk 136 0 0 0 0 62 0 0
swpctrie 152 0 0 0 0 62 0 0
cdg_qdiffsample 16 0 0 0 0 254 0 0
pf state scrubs 40 0 0 0 0 254 0 0
pf frag entries 40 0 0 0 0 254 0 0
pf fragment node 72 0 0 0 0 126 0 0
pf frags 232 0 0 0 0 62 0 0
pf table entries 160 0 0 0 0 254 0 0
pf table entry counters 64 0 0 0 0 254 0 0
pf Ethernet anchors 1240 0 0 0 0 64 0 0
pf anchors 1664 0 0 0 0 64 0 0
pf UDP mappings 104 0 0 0 0 126 0 0
pf source nodes 152 0 0 0 0 254 0 0
pf state keys 88 0 0 0 0 126 0 0
pf states 384 0 0 0 0 254 0 0
pf tags 104 0 0 0 0 126 0 0
pf mtags 184 0 0 0 0 62 0 0
tcp_rack_pcb 1088 0 0 0 0 8 0 0
tcp_rack_map 128 0 0 0 0 126 0 0
tcp_bbr_pcb 896 0 0 0 0 16 0 0
tcp_bbr_map 128 0 0 0 0 126 0 0
tfo_ccache_entries 80 0 0 0 0 126 0 0
tfo 4 0 0 0 0 254 0 0
sackhole 32 0 0 0 0 254 0 0
ipq 56 0 0 0 0 254 0 0
sctp_asconf_ack 48 0 0 0 0 254 0 0
sctp_asconf 40 0 0 0 0 254 0 0
sctp_stream_msg_out 112 0 0 0 0 254 0 0
sctp_readq 152 0 0 0 0 254 0 0
sctp_chunk 152 0 0 0 0 254 0 0
sctp_raddr 736 0 0 0 0 254 0 0
sctp_asoc 2256 0 0 0 0 254 0 0
sctp_ep 1152 0 0 0 0 254 0 0
tcp_log_id_node 120 0 0 0 0 126 0 0
tcp_log_id_bucket 176 0 0 0 0 62 0 0
tcpreass 48 0 0 0 0 254 0 0
udplite_inpcb 408 0 0 0 0 30 0 0
IPsec SA lft_c 16 0 0 0 0 254 0 0
itimer 352 0 0 0 0 30 0 0
AIOLIO 272 0 0 0 0 30 0 0
AIOCB 552 0 0 0 0 16 0 0
AIO 208 0 0 0 0 62 0 0
mqnotifier 216 0 0 0 0 62 0 0
mvdata 64 0 0 0 0 254 0 0
mqueue 248 0 0 0 0 62 0 0
TMPFS node 240 0 0 0 0 62 0 0
NCLNODE 608 0 0 0 0 16 0 0
LTS VFS Cache 360 0 0 0 0 30 0 0
L VFS Cache 320 0 0 0 0 30 0 0
STS VFS Cache 144 0 0 0 0 62 0 0
cryptop 280 0 0 0 0 30 0 0
linux_dma_object 32 0 0 0 0 254 0 0
linux_dma_pctrie 152 0 0 0 0 62 0 0
IOMMU_MAP_ENTRY 112 0 0 0 0 126 0 0
skbuff 1808 0 0 0 0 8 0 0
mbuf_jumbo_16k 16384 0 0 0 0 254 0 0
mbuf_jumbo_9k 9216 0 0 0 0 254 0 0
audit_record 1280 0 0 0 0 8 0 0
domainset 40 0 0 0 0 254 0 0
MAC labels 40 0 0 0 0 254 0 0
vnpbuf 2624 0 0 0 0 16 0 0
nfspbuf 2624 0 0 0 0 4 0 0
swwbuf 2624 0 0 0 0 2 0 0
swrbuf 2624 0 0 0 0 4 0 0
umtx_shm 88 0 0 0 0 126 0 0
umtx pi 96 0 0 0 0 126 0 0
rangeset pctrie nodes 152 0 0 0
---
This report is generated by a bot. It may contain errors.
See https://goo.gl/tpsmEJ for more information about syzbot.
syzbot engineers can be reached at syzk...@googlegroups.com.
syzbot will keep track of this issue. See:
https://goo.gl/tpsmEJ#status for how to communicate with syzbot.
If the report is already addressed, let syzbot know by replying with:
#syz fix: exact-commit-title
If you want to overwrite report's subsystems, reply with:
#syz set subsystems: new-subsystem
(See the list of subsystem names on the web dashboard)
If the report is a duplicate of another one, reply with:
#syz dup: exact-subject-of-another-report
If you want to undo deduplication, reply with:
#syz undup
syzbot found the following issue on:
HEAD commit: 4c3a868d13c0 fcntl(F_SETFL): only allow one thread to perf..
git tree: freebsd-src
console output: https://syzkaller.appspot.com/x/log.txt?x=15f5f0e2580000
dashboard link: https://syzkaller.appspot.com/bug?extid=78ac7d6a45abfdcff28d
userspace arch: i386
Unfortunately, I don't have any reproducer for this issue yet.
IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+78ac7d...@syzkaller.appspotmail.com
Fatal trap 12: page fault while in kernel mode
cpuid = 1; apic id = 01
fault virtual address = 0xd0
fault code = supervisor read data, page not present
instruction pointer = 0x20:0xffffffff848750f8
stack pointer = 0x28:0xfffffe0056cd0320
frame pointer = 0x28:0xfffffe0056cd03f0
code segment = base 0x0, limit 0xfffff, type 0x1b
= DPL 0, pres 1, long 1, def32 0, gran 1
processor eflags = interrupt enabled, resume, IOPL = 0
current process = 773 (ifconfig)
rdi: 00000000000000d0 rsi: 0000000000000000 rdx: 0000000000000000
rcx: fffffe0002bf1850 r8: 0000000000000000 r9: 0000000000000001
rax: fffffe0000000000 rbx: fffffe000767f000 rbp: fffffe0056cd03f0
FreeBSD/amd64r10: 000100000000010f r11: 0000000000000013 r12: fffffe00541046c0
r13: fffffe00593e5d00 r14: 0000000000000000 r15: 0000000000000000
trap number = 12
panic: page fault
cpuid = 1
time = 1758450626
KDB: stack backtrace:
db_trace_self_wrapper() at db_trace_self_wrapper+0xc6/frame 0xfffffe0056ccfb50
kdb_backtrace() at kdb_backtrace+0xd0/frame 0xfffffe0056ccfcb0
vpanic() at vpanic+0x257/frame 0xfffffe0056ccfe70
panic() at panic+0xb5/frame 0xfffffe0056ccff30
trap_pfault() at trap_pfault+0xaf2/frame 0xfffffe0056cd0070
trap() at trap+0x78e/frame 0xfffffe0056cd0250
calltrap() at calltrap+0x8/frame 0xfffffe0056cd0250
--- trap 0xc, rip = 0xffffffff848750f8, rsp = 0xfffffe0056cd0320, rbp = 0xfffffe0056cd03f0 ---
pfi_kkif_update() at pfi_kkif_update+0xe8/frame 0xfffffe0056cd03f0
pfi_kkif_update() at pfi_kkif_update+0x4cd/frame 0xfffffe0056cd04d0
pfi_ifaddr_event() at pfi_ifaddr_event+0x16c/frame 0xfffffe0056cd0590
srcaddr_change_event() at srcaddr_change_event+0x16e/frame 0xfffffe0056cd0670
in_control_ioctl() at in_control_ioctl+0x1a30/frame 0xfffffe0056cd0870
ifioctl() at ifioctl+0xe51/frame 0xfffffe0056cd0ab0
kern_ioctl() at kern_ioctl+0x4ca/frame 0xfffffe0056cd0b90
sys_ioctl() at sys_ioctl+0x36e/frame 0xfffffe0056cd0d10
amd64_syscall() at amd64_syscall+0x4e2/frame 0xfffffe0056cd0f30
fast_syscall_common() at fast_syscall_common+0xf8/frame 0xfffffe0056cd0f30
--- syscall (54, FreeBSD ELF64, ioctl), rip = 0x8241aa2ca, rsp = 0x820f63d58, rbp = 0x820f63da0 ---
KDB: enter: panic
[ thread pid 773 tid 100114 ]
Stopped at kdb_enter+0x6e: movq $0,0x259e0f7(%rip)
db> set $lines = 0
db> set $maxwidth = 0
db> show registers
cs 0x20
ds 0x3b
es 0x3b
fs 0x13
gs 0x1b
ss 0x28
rax 0x12
rcx 0xfffffe0002bf1850
rdx 0
rbx 0xffffffff828086a0 .str.27
rsp 0xfffffe0056ccfc90
rbp 0xfffffe0056ccfcb0
rsi 0
rdi 0xffffffff81644349 printf+0x149
r8 0
r9 0xffffffff
r10 0
r11 0x17
r12 0xfffffe0054104000
r13 0xfffffffffffffffd
r14 0xffffffff828086a0 .str.27
r15 0
rip 0xffffffff8162da9e kdb_enter+0x6e
rflags 0x46
kdb_enter+0x6e: movq $0,0x259e0f7(%rip)
db> show proc
Process 773 (ifconfig) at 0xfffffe00540d6000:
state: NORMAL
uid: 0 gid: 0 supp gids: 0, 5
parent: pid 764 at 0xfffffe00540d9570
ABI: FreeBSD ELF64
flag: 0x10004000 flag2: 0
arguments: ifconfig tap1 inet 172.20.1.170 netmask 255.255.255.0
reaper: 0xfffffe0007809010 reapsubtree: 1
sigparent: 20
vmspace: 0xfffffe00540bf248
(map 0xfffffe00540bf248)
(map.pmap 0xfffffe00540bf2e8)
(pmap 0xfffffe00540bf358)
threads: 1
100114 Run CPU 1 ifconfig
db> ps
pid ppid pgrp uid state wmesg wchan cmd
774 772 423 0 D devfs 0xfffffe0059651908 sh
773 764 764 0 R CPU 1 ifconfig
772 423 423 0 S wait 0xfffffe005400d570 sh
766 762 766 0 D devfs 0xfffffe0059651908 syz-executor
765 762 765 0 D devfs 0xfffffe0059651908 syz-executor
764 762 764 0 S wait 0xfffffe00540d9570 syz-executor
763 762 763 0 L *pf rule 0xfffffe00079f9e40 syz-executor
762 760 760 0 R syz-executor
760 758 760 0 Ss sigsusp 0xfffffe0007809b70 csh
758 681 758 0 Ss select 0xfffffe0057df7940 sshd
747 1 747 0 Rs+ CPU 0 getty
746 1 746 0 Ss+ ttyin 0xfffffe005862f0b0 getty
745 1 745 0 Ss+ ttyin 0xfffffe005862f4b0 getty
744 1 744 0 Ss+ ttyin 0xfffffe005862f8b0 getty
743 1 743 0 Ss+ ttyin 0xfffffe005862fcb0 getty
742 1 742 0 Ss+ ttyin 0xfffffe00586300b0 getty
741 1 741 0 Ss+ ttyin 0xfffffe00586304b0 getty
740 1 740 0 Ss+ ttyin 0xfffffe00586308b0 getty
739 1 739 0 Ss+ ttyin 0xfffffe0058630cb0 getty
737 1 17 0 S+ piperd 0xfffffe006b4495c0 logger
736 735 17 0 S+ nanslp 0xffffffff83bacc41 sleep
735 1 17 0 S+ wait 0xfffffe0054004568 sh
685 1 685 0 Ss nanslp 0xffffffff83bacc40 cron
681 1 681 0 Ss select 0xfffffe0057ddbcc0 sshd
494 1 494 0 Ds biowr 0xfffffe0007c1d0e8 syslogd
423 1 423 0 Ss wait 0xfffffe005400c568 devd
422 1 422 65 Ss select 0xfffffe0057ddbe40 dhclient
337 1 337 0 Ss select 0xfffffe0057de0140 dhclient
334 1 334 0 Ss select 0xfffffe0058613840 dhclient
16 0 0 0 DL syncer 0xffffffff83cca820 [syncer]
15 0 0 0 DL vlruwt 0xfffffe0054002558 [vnlru]
14 0 0 0 DL (threaded) [bufdaemon]
100079 D psleep 0xffffffff83cc8d60 [bufdaemon]
100082 D - 0xffffffff83001ec0 [bufspacedaemon-0]
100093 D sdflush 0xfffffe005862dce8 [/ worker]
9 0 0 0 DL psleep 0xffffffff83d13cc0 [vmdaemon]
8 0 0 0 DL (threaded) [pagedaemon]
100077 D psleep 0xffffffff83cf9d88 [dom0]
100080 D launds 0xffffffff83cf9d94 [laundry: dom0]
100081 D umarcl 0xffffffff81e13ce0 [uma]
7 0 0 0 RL [rand_harvestq]
6 0 0 0 DL pftm 0xffffffff8483ff20 [pf purge]
5 0 0 0 DL waiting 0xffffffff8453c700 [sctp_iterator]
4 0 0 0 DL (threaded) [cam]
100045 D - 0xffffffff838ef340 [doneq0]
100046 D - 0xffffffff838ef2c0 [async]
100075 D - 0xffffffff838ef140 [scanner]
3 0 0 0 DL (threaded) [crypto]
100042 D crypto_ 0xffffffff83cf5660 [crypto]
100043 D crypto_ 0xfffffe0053ee4d30 [crypto returns 0]
100044 D crypto_ 0xfffffe0053ee4d80 [crypto returns 1]
13 0 0 0 DL (threaded) [geom]
100037 D - 0xffffffff83b55640 [g_event]
100038 D - 0xffffffff83b55660 [g_up]
100039 D - 0xffffffff83b55680 [g_down]
2 0 0 0 WL (threaded) [clock]
100031 I [clock (0)]
100032 I [clock (1)]
12 0 0 0 WL (threaded) [intr]
100013 I [swi6: task queue]
100014 I [swi6: Giant taskq]
100016 I [swi5: fast taskq]
100033 I [swi1: netisr 0]
100034 I [swi1: hpts]
100035 I [swi1: hpts]
100047 I [irq24: virtio_pci0]
100048 I [irq25: virtio_pci0]
100049 I [irq26: virtio_pci0]
100050 I [irq27: virtio_pci0]
100051 I [irq28: virtio_pci1]
100052 I [irq29: virtio_pci1]
100053 I [irq30: virtio_pci1]
100054 I [irq31: virtio_pci1]
100055 I [irq32: virtio_pci1]
100060 I [irq10: virtio_pci2]
100062 I [irq1: atkbd0]
100063 I [irq12: psm0]
100064 I [swi0: uart uart++]
100068 I [swi1: pf send]
11 0 0 0 RL (threaded) [idle]
100003 CanRun [idle: cpu0]
100004 CanRun [idle: cpu1]
1 0 1 0 SLs wait 0xfffffe0007809010 [init]
10 0 0 0 DL audit_w 0xffffffff83cf6100 [audit]
0 0 0 0 DLs (threaded) [kernel]
100000 D parked 0xffffffff84c51ff0 [swapper]
100005 D - 0xfffffe0053ea0100 [softirq_0]
100006 D - 0xfffffe0053ea0000 [softirq_1]
100007 D - 0xfffffe0053e9fe00 [if_io_tqg_0]
100008 D - 0xfffffe0053e9fd00 [if_io_tqg_1]
100009 D - 0xfffffe0053e9fc00 [if_config_tqg_0]
100010 D - 0xfffffe000776aa00 [kqueue_ctx taskq]
100011 D - 0xfffffe000776a900 [jail_remove taskq]
100012 D - 0xfffffe000776a800 [bus taskq]
100015 D - 0xfffffe000776a500 [thread taskq]
100017 D - 0xfffffe000776a300 [aiod_kick taskq]
100018 D - 0xfffffe000776a200 [deferred_unmount ta]
100019 D - 0xfffffe000776a100 [inm_free taskq]
100020 D - 0xfffffe000776a000 [in6m_free taskq]
100021 D - 0xfffffe0007769e00 [linuxkpi_irq_wq]
100022 D - 0xfffffe0007769d00 [linuxkpi_short_wq_0]
100023 D - 0xfffffe0007769d00 [linuxkpi_short_wq_1]
100024 D - 0xfffffe0007769d00 [linuxkpi_short_wq_2]
100025 D - 0xfffffe0007769d00 [linuxkpi_short_wq_3]
100026 D - 0xfffffe0007769c00 [linuxkpi_long_wq_0]
100027 D - 0xfffffe0007769c00 [linuxkpi_long_wq_1]
100028 D - 0xfffffe0007769c00 [linuxkpi_long_wq_2]
100029 D - 0xfffffe0007769c00 [linuxkpi_long_wq_3]
100036 D - 0xfffffe0007769a00 [firmware taskq]
100040 D - 0xfffffe0007769900 [crypto_0]
100041 D - 0xfffffe0007769900 [crypto_1]
100056 D - 0xfffffe0057de6d00 [vtnet0 rxq 0]
100057 D - 0xfffffe0057de6c00 [vtnet0 txq 0]
100058 D - 0xfffffe0057de6b00 [vtnet0 rxq 1]
100059 D - 0xfffffe0057de6a00 [vtnet0 txq 1]
100061 D vtbslp 0xfffffe0057de0380 [virtio_balloon]
100065 D - 0xffffffff8280cd80 [deadlkres]
100069 D - 0xfffffe00593fd500 [acpi_task_0]
100070 D - 0xfffffe00593fd500 [acpi_task_1]
100071 D - 0xfffffe00593fd500 [acpi_task_2]
100073 D - 0xfffffe000776ab00 [mca taskq]
100074 D - 0xfffffe0007769700 [CAM taskq]
100076 D - 0xfffffe00593fd400 [ipsec_offload]
db> show all locks
Process 773 (ifconfig) thread 0xfffffe0054104000 (100114)
exclusive rm pf rulesets (pf rulesets) r = 0 (0xfffffe00077e0c50) locked @ /syzkaller/managers/i386/kernel/sys/netpfil/pf/pf_if.c:1180
exclusive sx in_control (in_control) r = 0 (0xffffffff83ccf660) locked @ /syzkaller/managers/i386/kernel/sys/netinet/in.c:367
Process 763 (syz-executor) thread 0xfffffe00540cf780 (100102)
shared lockmgr devfs (devfs) r = 0 (0xfffffe0059651908) locked @ /syzkaller/managers/i386/kernel/sys/fs/devfs/devfs_vnops.c:375
Process 747 (getty) thread 0xfffffe00540eb780 (100108)
exclusive sleep mutex ttymtx (ttymtx) r = 0 (0xfffffe0058279c08) locked @ /syzkaller/managers/i386/kernel/sys/kern/tty.c:216
Process 494 (syslogd) thread 0xfffffe00540ba000 (100091)
exclusive lockmgr bufwait (bufwait) r = 0 (0xfffffe0007c1d168) locked @ /syzkaller/managers/i386/kernel/sys/kern/vfs_bio.c:4022
exclusive lockmgr ufs (ufs) r = 0 (0xfffffe006de15070) locked @ /syzkaller/managers/i386/kernel/sys/kern/vfs_syscalls.c:3676
db> show malloc
Type InUse MemUse Requests
pf_hash 6 12804K 6
linker 384 5188K 498
tcp_hpts 7 4801K 7
devbuf 4187 4324K 4212
sysctloid 35125 2069K 35200
vtbuf 24 1968K 46
kobj 331 1324K 495
newblk 324 1105K 340
vfscache 3 1025K 3
pcb 23 669K 41
inodedep 62 535K 84
ufs_quota 1 512K 1
vfs_hash 1 512K 1
callout 2 512K 2
intr 4 472K 4
vnet_data 2 224K 2
acpitask 1 224K 1
subproc 102 205K 831
KTRACE 100 200K 100
acpica 1674 184K 54444
vmem 5 144K 7
tidhash 3 141K 3
pagedep 18 133K 22
tfo_ccache 1 128K 1
IP reass 1 128K 1
sem 4 106K 4
DEVFS1 104 104K 117
gtaskqueue 18 98K 18
filedesc 12 89K 25
bus 1000 82K 5086
mtx_pool 3 74K 3
syncache 1 68K 1
NFSD srvcache 3 68K 3
module 523 66K 523
ddb_capture 1 64K 1
hostcache 1 32K 1
shm 1 32K 1
kdtrace 162 32K 892
DEVFS3 123 31K 133
msg 4 30K 4
umtx 240 30K 240
kbdmux 6 28K 6
temp 23 21K 1653
DEVFS_RULE 56 20K 56
BPF 12 18K 12
ufs_mount 4 17K 5
proc 3 17K 3
tty 16 16K 16
ithread 90 15K 90
routetbl 54 15K 162
bus-sc 34 15K 1657
eventhandler 163 14K 163
ifaddr 44 14K 46
kenv 95 12K 95
GEOM 49 11K 431
CAM queue 5 11K 1528
rman 82 10K 437
rpc 8 9K 8
cred 23 9K 180
bmsafemap 2 9K 51
plimit 22 9K 317
ifnet 5 9K 5
devstat 4 9K 4
UART 12 9K 12
ksem 1 8K 1
shmfd 1 8K 1
pfs_vncache 1 8K 1
audit_evclass 240 8K 306
taskqueue 69 8K 69
sglist 6 7K 6
CAM DEV 3 6K 510
pfs_nodes 22 6K 22
dirrem 21 6K 37
lltable 19 6K 19
ufs_dirhash 24 5K 24
UMA 268 5K 268
vt 11 5K 11
pf_ifnet 9 4K 12
memdesc 1 4K 1
MCA 32 4K 32
evdev 4 4K 4
acpisem 28 4K 28
diradd 27 4K 47
kqueue 47 3K 778
pwddesc 46 3K 775
terminal 11 3K 11
DEVFSP 41 3K 44
indirdep 10 3K 10
session 20 3K 31
acpidev 20 3K 20
proc-args 75 3K 1709
hhook 8 3K 10
clone 9 3K 9
uidinfo 3 3K 6
kcovinfo 36 3K 36
netlink 2 3K 34
LRO 2 3K 2
local_apic 1 2K 1
io_apic 1 2K 1
ipsec-saq 2 2K 2
Unitno 30 2K 46
ether_multi 22 2K 32
CAM XPT 22 2K 543
in6_multi 15 2K 15
lockf 15 2K 22
toponodes 6 2K 6
ipsecpolicy 2 2K 2
selfd 19 2K 5603
msi 9 2K 9
softdep 1 1K 1
newdirblk 8 1K 12
mkdir 8 1K 24
sahead 1 1K 1
secasvar 1 1K 1
vnodemarker 2 1K 8
select 8 1K 24
NFSD session 1 1K 1
CAM periph 4 1K 271
ipsec 3 1K 3
in_multi 3 1K 5
nhops 6 1K 6
pfil 6 1K 6
tun 2 1K 2
isadev 6 1K 6
mount 16 1K 89
pci_link 10 1K 10
sctp_ifa 5 1K 6
crypto 4 1K 4
encap_export_host 12 1K 12
osd 9 1K 23
freefile 4 1K 9
ip6ndp 5 1K 5
mld 4 1K 4
CC Mem 4 1K 6
igmp 4 1K 4
cdev 2 1K 2
lkpikmalloc 8 1K 9
counter_rate 13 1K 13
sctp_ifn 3 1K 6
inpcbpolicy 12 1K 115
chacha20random 1 1K 1
biobuf 1 1K 1
vnodes 1 1K 1
NFSD lckfile 1 1K 1
NFSD V4client 1 1K 1
DEVFS 9 1K 10
CAM SIM 2 1K 2
feeder 7 1K 7
tcpfunc 3 1K 3
loginclass 3 1K 5
prison 6 1K 6
cryptodev 2 1K 35
nexusdev 8 1K 8
apmdev 1 1K 1
atkbddev 2 1K 2
freefrag 1 1K 6
procdesc 1 1K 6
pmchooks 1 1K 1
CAM path 4 1K 1034
CAM dev queue 2 1K 2
CAM I/O Scheduler 1 1K 1
soname 4 1K 3269
filecaps 4 1K 66
sctp_vrf 1 1K 1
freework 1 1K 26
vnet 1 1K 1
pmc 1 1K 1
entropy 2 1K 31
acpiintr 1 1K 1
cpus 2 1K 2
vnet_data_free 1 1K 1
Per-cpu 1 1K 1
p1003.1b 1 1K 1
pf_table 0 0K 0
pf 0 0K 0
pf_rule 0 0K 0
pf_altq 0 0K 0
pf_osfp 0 0K 0
pf_krule_item 0 0K 0
pf_temp 0 0K 0
tcp_pcm_rack 0 0K 0
tcp_do_rack 0 0K 0
tcp_fsb_rack 0 0K 0
ipcomp 0 0K 0
esp 0 0K 0
ah 0 0K 0
filemon 0 0K 0
mqdata 0 0K 0
sctp_mcore 0 0K 0
sctp_socko 0 0K 0
sctp_iter 0 0K 4
sctp_mvrf 0 0K 0
sctp_timw 0 0K 0
sctp_cpal 0 0K 0
sctp_cmsg 0 0K 0
sctp_stre 0 0K 0
sctp_athi 0 0K 0
sctp_athm 0 0K 0
sctp_atky 0 0K 0
sctp_atcl 0 0K 0
sctp_a_it 0 0K 4
sctp_aadr 0 0K 0
sctp_stro 0 0K 0
sctp_stri 0 0K 0
sctp_map 0 0K 0
madt_table 0 0K 2
smartpqi 0 0K 0
ixl 0 0K 0
ice-resmgr 0 0K 0
ice-osdep 0 0K 0
ice 0 0K 0
iavf 0 0K 0
axgbe 0 0K 0
fpukern_ctx 0 0K 0
xen_intr 0 0K 0
xen_hvm 0 0K 0
legacydrv 0 0K 0
NMI handlers 0 0K 0
bounce 0 0K 0
busdma 0 0K 0
qpidrv 0 0K 0
dmar_idpgtbl 0 0K 0
dmar_dom 0 0K 0
dmar_ctx 0 0K 0
amdiommu_dom 0 0K 0
amdiommu_ctx 0 0K 0
isci 0 0K 0
iommu_dmamap 0 0K 0
hyperv_socket 0 0K 0
bxe_ilt 0 0K 0
aesni_data 0 0K 0
xenbus 0 0K 0
vm_fictitious 0 0K 0
UMAHash 0 0K 0
vm_pgdata 0 0K 0
jblocks 0 0K 0
savedino 0 0K 9
sentinel 0 0K 0
jfsync 0 0K 0
jtrunc 0 0K 0
sbdep 0 0K 2
jsegdep 0 0K 0
jseg 0 0K 0
jfreefrag 0 0K 0
jfreeblk 0 0K 0
jnewblk 0 0K 0
jmvref 0 0K 0
jremref 0 0K 0
jaddref 0 0K 0
freedep 0 0K 0
freeblks 0 0K 25
allocindir 0 0K 0
allocdirect 0 0K 0
ufs_trim 0 0K 0
mactemp 0 0K 0
audit_trigger 0 0K 0
audit_pipe_presel 0 0K 0
audit_pipeent 0 0K 0
audit_pipe 0 0K 0
audit_evname 0 0K 0
audit_bsm 0 0K 0
audit_gidset 0 0K 0
audit_text 0 0K 0
audit_path 0 0K 0
audit_data 0 0K 0
audit_cred 0 0K 0
ktls_ocf 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5E_TLS_RX 0 0K 0
MLX5EEPROM 0 0K 0
MLX5E_TLS 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EN 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5DUMP 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
simple_attr 0 0K 0
seq_file 0 0K 0
lkpiskb 0 0K 0
radix 0 0K 0
idr 0 0K 0
lkpindev 0 0K 0
lkpimhi 0 0K 0
lkpifw 0 0K 0
lkpi80211 0 0K 0
NLM 0 0K 0
ipsec-spdcache 0 0K 0
ipsec-reg 0 0K 0
ipsec-misc 0 0K 0
ipsecrequest 0 0K 0
ip6opt 0 0K 0
ip6_msource 0 0K 0
ip6_moptions 0 0K 0
in6_mfilter 0 0K 0
frag6 0 0K 0
tcplog 0 0K 0
tcp_hwpace 0 0K 0
ip_msource 0 0K 0
ip_moptions 0 0K 0
in_mfilter 0 0K 0
ipid 0 0K 0
80211scan 0 0K 0
80211ratectl 0 0K 0
80211power 0 0K 0
80211nodeie 0 0K 0
80211node 0 0K 0
80211mesh_gt 0 0K 0
80211mesh_rt 0 0K 0
80211perr 0 0K 0
80211prep 0 0K 0
80211preq 0 0K 0
80211dfs 0 0K 0
80211crypto 0 0K 0
80211vap 0 0K 0
iflib 0 0K 0
vlan 0 0K 0
gif 0 0K 0
ifdescr 0 0K 0
zlib 0 0K 20
fadvise 0 0K 0
VN POLL 0 0K 0
statfs 0 0K 181
namei_tracker 0 0K 0
inotify 0 0K 0
export_host 0 0K 0
cl_savebuf 0 0K 7
aio 0 0K 0
lio 0 0K 0
acl 0 0K 0
mbuf_tag 0 0K 0
ktls 0 0K 0
accf 0 0K 0
pts 0 0K 0
timerfd 0 0K 0
iov 0 0K 13052
ioctlops 0 0K 79
eventfd 0 0K 0
Witness 0 0K 0
stack 0 0K 0
sbuf 0 0K 190
firmware 0 0K 0
compressor 0 0K 0
SWAP 0 0K 0
sysctltmp 0 0K 635
sysctl 0 0K 3
ekcd 0 0K 0
dumper 0 0K 0
sendfile 0 0K 0
rctl 0 0K 0
cache 0 0K 0
jaildesc 0 0K 0
prison_racct 0 0K 0
Fail Points 0 0K 0
sigio 0 0K 1
filedesc_to_leader 0 0K 0
pwd 0 0K 0
tty console 0 0K 0
boottrace 0 0K 0
isofs_node 0 0K 0
isofs_mount 0 0K 0
tr_raid5_data 0 0K 0
tr_raid1e_data 0 0K 0
tr_raid1_data 0 0K 0
tr_raid0_data 0 0K 0
tr_concat_data 0 0K 0
md_sii_data 0 0K 0
md_promise_data 0 0K 0
md_nvidia_data 0 0K 0
md_jmicron_data 0 0K 0
md_intel_data 0 0K 0
md_ddf_data 0 0K 0
raid_data 0 0K 72
geom_flashmap 0 0K 0
tmpfs dir 0 0K 0
tmpfs name 0 0K 0
tmpfs mount 0 0K 0
tmpfs extattr 0 0K 0
NFS FHA 0 0K 0
newnfsmnt 0 0K 0
newnfsclient_req 0 0K 0
NFSCL layrecall 0 0K 0
NFSCL session 0 0K 0
NFSCL sockreq 0 0K 0
NFSCL devinfo 0 0K 0
NFSCL flayout 0 0K 0
NFSCL layout 0 0K 0
NFSD rollback 0 0K 0
NFSCL diroff 0 0K 0
NEWNFSnode 0 0K 0
NFSCL lck 0 0K 0
NFSCL lckown 0 0K 0
NFSCL client 0 0K 0
NFSCL deleg 0 0K 0
NFSCL open 0 0K 0
NFSCL owner 0 0K 0
NFS fh 0 0K 0
NFS req 0 0K 0
NFSD usrgroup 0 0K 0
NFSD string 0 0K 0
NFSD V4lock 0 0K 0
NFSD V4state 0 0K 0
msdosfs_fat 0 0K 0
msdosfs_mount 0 0K 0
msdosfs_node 0 0K 0
DEVFS4 0 0K 0
DEVFS2 0 0K 0
gntdev 0 0K 0
privcmd_dev 0 0K 0
evtchn_dev 0 0K 0
xenstore 0 0K 0
xnb 0 0K 0
xen_acpi 0 0K 0
xbbd 0 0K 0
xbd 0 0K 0
Balloon 0 0K 0
sysmouse 0 0K 0
vtfont 0 0K 0
pvscsi 0 0K 0
USBdev 0 0K 0
USB 0 0K 0
ufshci 0 0K 0
twsbuf 0 0K 0
tcp_log_dev 0 0K 0
midi buffers 0 0K 0
mixer 0 0K 0
ac97 0 0K 0
hdacc 0 0K 0
hdac 0 0K 0
hdaa 0 0K 0
SIIS driver 0 0K 0
PUC 0 0K 0
ppbusdev 0 0K 0
sr_iov 0 0K 0
OCS 0 0K 0
OCS 0 0K 0
nvme 0 0K 0
nvd 0 0K 0
netmap 0 0K 0
mwldev 0 0K 0
MVS driver 0 0K 0
mpi3mrbuf 0 0K 0
mrsasbuf 0 0K 0
mpt_user 0 0K 0
mps_user 0 0K 0
MPSSAS 0 0K 0
mps 0 0K 0
mpr_user 0 0K 0
MPRSAS 0 0K 0
mpr 0 0K 0
mfibuf 0 0K 0
md_sectors 0 0K 0
md_disk 0 0K 0
malodev 0 0K 0
LED 0 0K 0
ix_sriov 0 0K 0
ix 0 0K 0
ipsbuf 0 0K 0
ciss_data 0 0K 0
BACKLIGHT 0 0K 0
ath_hal 0 0K 0
athdev 0 0K 0
ata_pci 0 0K 0
ata_dma 0 0K 0
ata_generic 0 0K 0
AHCI driver 0 0K 0
agp 0 0K 0
acpipwr 0 0K 0
acpi_perf 0 0K 0
acpicmbat 0 0K 0
aacraidcam 0 0K 0
aacraid_buf 0 0K 0
aaccam 0 0K 0
aacbuf 0 0K 0
zstd 0 0K 0
XZ_DEC 0 0K 0
nvlist 0 0K 0
SCSI ENC 0 0K 0
SCSI sa 0 0K 0
scsi_pass 0 0K 0
scsi_da 0 0K 70
ata_da 0 0K 0
scsi_ch 0 0K 0
scsi_cd 0 0K 0
nvme_da 0 0K 0
CAM CCB 0 0K 523
CAM ccb queue 0 0K 0
db> show uma
Zone Size Used Free Requests Sleeps Bucket Total Mem XFree
mbuf_jumbo_page 4096 8320 1078 12023 0 254 38494208 0
mbuf 256 8578 1084 13577 0 254 2473472 0
BUF TRIE 152 188 11616 368 0 62 1794208 0
malloc-384 384 4138 32 4150 0 30 1601280 0
malloc-128 128 11543 175 11553 0 126 1499904 0
malloc-4096 4096 334 4 577 0 2 1384448 0
UMA Slabs 0 112 10880 22 10880 0 126 1221024 0
tcp_log 416 558 1989 2940 0 254 1059552 0
mbuf_cluster 2048 508 0 508 0 254 1040384 0
malloc-65536 65536 14 0 17 0 1 917504 0
RADIX NODE 152 5753 144 24585 0 62 896344 0
vmem btag 56 15839 112 15839 0 254 893256 0
FFS inode 1168 527 19 536 0 8 637728 0
socket 1024 21 487 1266 0 254 520192 0
lkpicurr 168 2 3094 2 0 62 520128 0
pbuf 2624 0 198 0 0 2 519552 0
VM OBJECT 248 1023 97 12440 0 62 277760 0
VNODE 440 559 44 570 0 30 265320 0
256 Bucket 2048 121 7 990 0 8 262144 0
malloc-64 64 3855 240 3859 0 254 262080 0
malloc-2048 2048 107 13 348 0 8 245760 0
malloc-16 16 14471 279 14533 0 254 236000 0
THREAD 1860 115 5 116 0 8 223200 0
DEVCTL 1024 5 211 130 0 0 221184 0
malloc-4096 4096 52 2 781 0 2 221184 0
UMA Zones 768 240 4 240 0 16 187392 0
malloc-32 32 5321 349 5365 0 254 181440 0
malloc-128 128 1211 184 25546 0 126 178560 0
lkpimm 56 1 3095 1 0 254 173376 0
unpcb 320 8 508 1134 0 254 165120 0
malloc-1024 1024 115 29 295 0 16 147456 0
FFS2 dinode 256 527 43 536 0 62 145920 0
malloc-65536 65536 0 2 44 0 1 131072 0
malloc-65536 65536 0 2 110 0 1 131072 0
malloc-65536 65536 2 0 2 0 1 131072 0
malloc-65536 65536 1 1 9 0 1 131072 0
malloc-32768 32768 2 2 13 0 1 131072 0
mbuf_packet 256 0 508 92 0 254 130048 0
S VFS Cache 104 989 181 1024 0 126 121680 0
MAP ENTRY 96 1089 171 38153 0 126 120960 0
ksiginfo 112 39 1005 54 0 126 116928 0
malloc-16384 16384 5 2 10 0 1 114688 0
FPU_save_area 832 117 18 124 0 16 112320 0
malloc-256 256 353 82 471 0 62 111360 0
malloc-128 128 582 193 3799 0 126 99200 0
malloc-128 128 634 141 1221 0 126 99200 0
malloc-32768 32768 3 0 3 0 1 98304 0
malloc-8192 8192 9 2 92 0 1 90112 0
UMA Kegs 384 227 6 227 0 30 89472 0
128 Bucket 1024 41 42 242 0 16 84992 0
malloc-16384 16384 5 0 7 0 1 81920 0
malloc-2048 2048 6 34 1038 0 8 81920 0
PROC 1368 45 10 774 0 8 75240 0
malloc-4096 4096 15 3 211 0 2 73728 0
g_bio 408 4 176 4733 0 30 73440 0
malloc-64 64 739 332 2288 0 254 68544 0
malloc-64 64 619 452 7252 0 254 68544 0
malloc-32768 32768 0 2 120 0 1 65536 0
malloc-32768 32768 2 0 2 0 1 65536 0
malloc-8192 8192 8 0 9 0 1 65536 0
malloc-1024 1024 26 38 557 0 16 65536 0
malloc-256 256 166 89 811 0 62 65280 0
malloc-256 256 147 108 527 0 62 65280 0
malloc-256 256 162 93 186 0 62 65280 0
filedesc0 1072 46 10 775 0 8 60032 0
malloc-4096 4096 12 2 495 0 2 57344 0
malloc-128 128 25 378 284 0 126 51584 0
32 Bucket 256 56 139 458 0 62 49920 0
DIRHASH 1024 34 14 34 0 16 49152 0
NAMEI 1024 4 44 11898 0 16 49152 0
malloc-16384 16384 1 2 191 0 1 49152 0
malloc-2048 2048 9 15 27 0 8 49152 0
64 Bucket 512 64 32 1547 0 30 49152 0
malloc-384 384 86 34 415 0 30 46080 0
syncache 168 0 264 3 0 254 44352 0
da_ccb 544 1 69 1274 0 16 38080 0
pcpu-8 8 4505 103 4565 0 254 36864 0
udp_inpcb 408 7 83 106 0 30 36720 0
malloc-64 64 20 547 12943 0 254 36288 0
malloc-64 64 31 536 47 0 254 36288 0
malloc-64 64 195 372 952 0 254 36288 0
malloc-64 64 56 511 827 0 254 36288 0
malloc-128 128 19 260 142 0 126 35712 0
malloc-128 128 11 268 21 0 126 35712 0
malloc-128 128 124 155 519 0 126 35712 0
routing nhops 256 10 125 17 0 62 34560 0
ttyoutq 256 72 63 160 0 62 34560 0
malloc-384 384 61 29 69 0 30 34560 0
malloc-384 384 62 28 62 0 30 34560 0
malloc-256 256 27 108 490 0 62 34560 0
malloc-256 256 1 134 51 0 62 34560 0
malloc-256 256 34 101 181 0 62 34560 0
malloc-256 256 15 120 273 0 62 34560 0
malloc-2048 2048 0 16 12 0 8 32768 0
malloc-2048 2048 2 14 2 0 8 32768 0
malloc-2048 2048 3 13 29 0 8 32768 0
malloc-2048 2048 4 12 12 0 8 32768 0
malloc-2048 2048 6 10 6 0 8 32768 0
malloc-1024 1024 3 29 43 0 16 32768 0
malloc-1024 1024 17 15 888 0 16 32768 0
malloc-1024 1024 3 29 6 0 16 32768 0
malloc-1024 1024 3 29 7 0 16 32768 0
malloc-1024 1024 2 30 2 0 16 32768 0
malloc-512 512 0 64 110 0 30 32768 0
malloc-512 512 12 52 17 0 30 32768 0
malloc-512 512 0 64 11 0 30 32768 0
malloc-512 512 2 62 49 0 30 32768 0
malloc-512 512 9 55 17 0 30 32768 0
malloc-512 512 2 62 8 0 30 32768 0
malloc-512 512 3 61 4 0 30 32768 0
pcpu-64 64 501 11 501 0 254 32768 0
ttyinq 160 135 65 300 0 62 32000 0
PGRP 120 24 240 35 0 126 31680 0
clpbuf 2624 0 12 15 0 4 31488 0
VMSPACE 584 30 19 761 0 16 28616 0
sctp_laddr 48 0 588 4 0 254 28224 0
malloc-32 32 130 752 1317 0 254 28224 0
malloc-32 32 351 531 4173 0 254 28224 0
16 Bucket 144 48 148 244 0 62 28224 0
4 Bucket 48 5 583 7 0 254 28224 0
TURNSTILE 136 121 68 121 0 62 25704 0
cpuset 200 7 121 7 0 62 25600 0
malloc-8192 8192 3 0 3 0 1 24576 0
malloc-4096 4096 3 3 23 0 2 24576 0
pipe 736 19 14 280 0 16 24288 0
PWD 40 14 592 95 0 254 24240 0
rtentry 168 13 131 17 0 62 24192 0
Files 80 150 150 6273 0 126 24000 0
8 Bucket 80 40 260 274 0 126 24000 0
malloc-384 384 1 59 2 0 30 23040 0
malloc-384 384 12 48 12 0 30 23040 0
malloc-384 384 25 35 525 0 30 23040 0
ripcb 376 1 59 3 0 30 22560 0
SLEEPQUEUE 88 121 135 121 0 126 22528 0
hostcache 64 1 314 1 0 254 20160 0
malloc-64 64 3 312 3 0 254 20160 0
malloc-32 32 54 576 293 0 254 20160 0
malloc-32 32 14 616 76 0 254 20160 0
malloc-32 32 33 597 58 0 254 20160 0
malloc-32 32 49 581 57 0 254 20160 0
malloc-32 32 16 614 17 0 254 20160 0
2 Bucket 32 49 581 316 0 254 20160 0
vmem 1856 2 7 2 0 8 16704 0
epoch_record pcpu 256 4 60 4 0 62 16384 0
malloc-16384 16384 1 0 1 0 1 16384 0
malloc-16384 16384 1 0 1 0 1 16384 0
malloc-8192 8192 0 2 20 0 1 16384 0
malloc-8192 8192 2 0 2 0 1 16384 0
malloc-1024 1024 0 16 2 0 16 16384 0
malloc-512 512 2 30 2 0 30 16384 0
SMR CPU 32 8 503 8 0 254 16352 0
malloc-16 16 505 495 3379 0 254 16000 0
kenv 258 17 43 1064 0 30 15480 0
mqnode 416 3 33 3 0 30 14976 0
SMR SHARED 24 8 503 8 0 254 12264 0
ertt_txseginfo 40 0 303 124 0 254 12120 0
ertt 72 4 164 6 0 126 12096 0
KNOTE 160 0 75 2 0 62 12000 0
malloc-16 16 35 715 1265 0 254 12000 0
malloc-16 16 9 741 14 0 254 12000 0
malloc-16 16 31 719 81 0 254 12000 0
malloc-16 16 43 707 25016 0 254 12000 0
malloc-16 16 8 742 9 0 254 12000 0
malloc-16 16 7 743 9 0 254 12000 0
tcp_inpcb 1304 4 5 6 0 8 11736 0
malloc-384 384 1 29 2 0 30 11520 0
Mountpoints 2816 2 2 2 0 4 11264 0
malloc-8192 8192 0 1 26 0 1 8192 0
malloc-8192 8192 1 0 1 0 1 8192 0
malloc-4096 4096 0 2 4 0 2 8192 0
malloc-4096 4096 0 2 3 0 2 8192 0
vtnet_tx_hdr 24 0 334 866 0 254 8016 0
pcpu-16 16 4 252 4 0 254 4096 0
UMA Slabs 1 176 8 14 8 0 62 3872 0
KMAP ENTRY 96 12 27 14 0 0 3744 0
FFS1 dinode 128 0 0 0 0 126 0 0
ada_ccb 272 0 0 0 0 30 0 0
swblk 136 0 0 0 0 62 0 0
swpctrie 152 0 0 0 0 62 0 0
cdg_qdiffsample 16 0 0 0 0 254 0 0
pf state scrubs 40 0 0 0 0 254 0 0
pf frag entries 40 0 0 0 0 254 0 0
pf fragment node 72 0 0 0 0 126 0 0
pf frags 232 0 0 0 0 62 0 0
pf table entries 160 0 0 0 0 254 0 0
pf table entry counters 64 0 0 0 0 254 0 0
pf Ethernet anchors 1240 0 0 0 0 64 0 0
pf anchors 1664 0 0 0 0 64 0 0
pf UDP mappings 104 0 0 0 0 126 0 0
pf source nodes 152 0 0 0 0 254 0 0
pf state keys 88 0 0 0 0 126 0 0
pf states 384 0 0 0 0 254 0 0
pf tags 104 0 0 0 0 126 0 0
pf mtags 184 0 0 0 0 62 0 0
tcp_rack_pcb 1088 0 0 0 0 8 0 0
tcp_rack_map 128 0 0 0 0 126 0 0
tcp_bbr_pcb 896 0 0 0 0 16 0 0
tcp_bbr_map 128 0 0 0 0 126 0 0
tfo_ccache_entries 80 0 0 0 0 126 0 0
tfo 4 0 0 0 0 254 0 0
sackhole 32 0 0 0 0 254 0 0
ipq 56 0 0 0 0 254 0 0
sctp_asconf_ack 48 0 0 0 0 254 0 0
sctp_asconf 40 0 0 0 0 254 0 0
sctp_stream_msg_out 112 0 0 0 0 254 0 0
sctp_readq 152 0 0 0 0 254 0 0
sctp_chunk 152 0 0 0 0 254 0 0
sctp_raddr 736 0 0 0 0 254 0 0
sctp_asoc 2256 0 0 0 0 254 0 0
sctp_ep 1152 0 0 0 0 254 0 0
tcp_log_id_node 120 0 0 0 0 126 0 0
tcp_log_id_bucket 176 0 0 0 0 62 0 0
tcpreass 48 0 0 0 0 254 0 0
udplite_inpcb 408 0 0 0 0 30 0 0
IPsec SA lft_c 16 0 0 0 0 254 0 0
itimer 352 0 0 0 0 30 0 0
AIOLIO 272 0 0 0 0 30 0 0
AIOCB 552 0 0 0 0 16 0 0
AIO 208 0 0 0 0 62 0 0
mqnotifier 216 0 0 0 0 62 0 0
mvdata 64 0 0 0 0 254 0 0
mqueue 248 0 0 0 0 62 0 0
TMPFS node 240 0 0 0 0 62 0 0
NCLNODE 608 0 0 0 0 16 0 0
LTS VFS Cache 360 0 0 0 0 30 0 0
L VFS Cache 320 0 0 0 0 30 0 0
STS VFS Cache 144 0 0 0 0 62 0 0
cryptop 280 0 0 0 0 30 0 0
linux_dma_object 32 0 0 0 0 254 0 0
linux_dma_pctrie 152 0 0 0 0 62 0 0
IOMMU_MAP_ENTRY 112 0 0 0 0 126 0 0
skbuff 1808 0 0 0 0 8 0 0
mbuf_jumbo_16k 16384 0 0 0 0 254 0 0
mbuf_jumbo_9k 9216 0 0 0 0 254 0 0
audit_record 1280 0 0 0 0 8 0 0
domainset 40 0 0 0 0 254 0 0
MAC labels 40 0 0 0 0 254 0 0
vnpbuf 2624 0 0 0 0 16 0 0
nfspbuf 2624 0 0 0 0 4 0 0
swwbuf 2624 0 0 0 0 2 0 0
swrbuf 2624 0 0 0 0 4 0 0
umtx_shm 88 0 0 0 0 126 0 0
umtx pi 96 0 0 0 0 126 0 0
rangeset pctrie nodes 152 0 0 0
---
This report is generated by a bot. It may contain errors.
See https://goo.gl/tpsmEJ for more information about syzbot.
syzbot engineers can be reached at syzk...@googlegroups.com.
syzbot will keep track of this issue. See:
https://goo.gl/tpsmEJ#status for how to communicate with syzbot.
If the report is already addressed, let syzbot know by replying with:
#syz fix: exact-commit-title
If you want to overwrite report's subsystems, reply with:
#syz set subsystems: new-subsystem
(See the list of subsystem names on the web dashboard)
If the report is a duplicate of another one, reply with:
#syz dup: exact-subject-of-another-report
If you want to undo deduplication, reply with:
#syz undup
Reply all
Reply to author
Forward
0 new messages