syzbot


panic: condition vp->v_type == VDIR || VN_IS_DOOMED(vp) not met at /syzkaller/managers/i386/kernel/sys/kern/vfs_cache.c:

Status: fixed on 2021/10/27 23:11
Reported-by: syzbot+9aa5439dd9c708aeb1a8@syzkaller.appspotmail.com
Fix commit: 628c3b307fb2 cache: only let non-dir descriptors through when doing EMPTYPATH lookups
First crash: 473d, last: 473d

Sample crash report:
panic: condition vp->v_type == VDIR || VN_IS_DOOMED(vp) not met at /syzkaller/managers/i386/kernel/sys/kern/vfs_cache.c:3315 (vn_fullpath_dir)
cpuid = 1
time = 1634864351
KDB: stack backtrace:
db_trace_self_wrapper() at db_trace_self_wrapper+0xc7/frame 0xfffffe00a1e7d710
kdb_backtrace() at kdb_backtrace+0xd3/frame 0xfffffe00a1e7d870
vpanic() at vpanic+0x2c5/frame 0xfffffe00a1e7d950
panic() at panic+0xb5/frame 0xfffffe00a1e7da10
vn_fullpath_dir() at vn_fullpath_dir+0x898/frame 0xfffffe00a1e7db10
sys___realpathat() at sys___realpathat+0x6a8/frame 0xfffffe00a1e7dd30
ia32_syscall() at ia32_syscall+0x41f/frame 0xfffffe00a1e7df30
int0x80_syscall_common() at int0x80_syscall_common+0x9c/frame 0xfbffcf78
KDB: enter: panic
[ thread pid 91354 tid 183661 ]
Stopped at      kdb_enter+0x6b: movq    $0,0x28df99a(%rip)
db> 
db> set $lines = 0
db> set $maxwidth = 0
db> show registers
cs                        0x20
ds                        0x3b
es                        0x3b
fs                        0x13
gs                        0x1b
ss                           0
rax                       0x12
rcx         0x43785692df8b406c
rdx                    0x3ffff
rbx                          0
rsp         0xfffffe00a1e7d850
rbp         0xfffffe00a1e7d870
rsi                    0x40001
rdi         0xffffffff817c07aa  vprintf+0x35a
r8                           0
r9          0xfffffe00a1e7d388
r10                          0
r11         0xfffffe00a729ec50
r12         0xfffffe00a729e740
r13         0xfffffe00a1e7d801
r14         0xffffffff82c86460  .str.18
r15         0xffffffff82c86460  .str.18
rip         0xffffffff817b411b  kdb_enter+0x6b
rflags                0x200046  kernload+0x46
kdb_enter+0x6b: movq    $0,0x28df99a(%rip)
db> show proc
Process 91354 (syz-executor.0) at 0xfffffe00a7329538:
 state: NORMAL
 uid: 0  gids: 0, 0, 5
 parent: pid 87779 at 0xfffffe00a7380538
 ABI: FreeBSD ELF32
 flag: 0x10000080  flag2: 0
 arguments: /root/syz-executor.0 exec
 reaper: 0xfffffe0053d5c538 reapsubtree: 1
 sigparent: 20
 vmspace: 0xfffffe00a7e9a9f8
   (map 0xfffffe00a7e9a9f8)
   (map.pmap 0xfffffe00a7e9aab8)
   (pmap 0xfffffe00a7e9ab20)
 threads: 2
168834                   RunQ                                syz-executor.0
183661                   Run     CPU 1                       syz-executor.0
db> ps
  pid  ppid  pgrp   uid  state   wmesg   wchan               cmd
91355 84750 84750     0  R       (threaded)                  syz-executor.1
168588                   Run     CPU 0                       syz-executor.1
183663                   RunQ                                syz-executor.1
91354 87779 87779     0  R       (threaded)                  syz-executor.0
168834                   RunQ                                syz-executor.0
183661                   Run     CPU 1                       syz-executor.0
91353 90603 90603     0  S       (threaded)                  syz-executor.3
169850                   S       nanslp  0xffffffff84060980  syz-executor.3
183660                   S       pause   0xfffffe00a75810b0  syz-executor.3
183662                   S       uwait   0xfffffe005883d100  syz-executor.3
90795 90789 90795     0  Ss      select  0xfffffe00a7f52b40  dhclient
90792     1 90792     0  Ss      select  0xfffffe009e3ce6c0  dhclient
90789 90773   431    65  S       select  0xfffffe00a7f2ec40  dhclient
90773   431   431     0  S       wait    0xfffffe00a733a000  sh
90603   779 90603     0  Ss      nanslp  0xffffffff84060980  syz-executor.3
87779   779 87779     0  Rs                                  syz-executor.0
86684     1 86684    65  Ss      select  0xfffffe00a7f142c0  dhclient
84830     1 84830     0  Ss      select  0xfffffe00a7f525c0  dhclient
84827     1 84827     0  Ss      select  0xfffffe00a7ecf940  dhclient
84750   779 84750     0  Rs                                  syz-executor.1
31322     0     0     0  DL      -       0xffffffff84181c80  [soaiod4]
31321     0     0     0  DL      -       0xffffffff84181c80  [soaiod3]
31320     0     0     0  DL      -       0xffffffff84181c80  [soaiod2]
31319     0     0     0  DL      -       0xffffffff84181c80  [soaiod1]
  831     0     0     0  DL      aiordy  0xfffffe00a7245538  [aiod4]
  830     0     0     0  DL      aiordy  0xfffffe00a7245a70  [aiod3]
  829     0     0     0  DL      aiordy  0xfffffe00a7214000  [aiod2]
  828     0     0     0  DL      aiordy  0xfffffe00a7202000  [aiod1]
  779   777   777     0  R       (threaded)                  syz-fuzzer
100103                   S       uwait   0xfffffe005883d980  syz-fuzzer
100114                   RunQ                                syz-fuzzer
100115                   S       kqread  0xfffffe0058881d00  syz-fuzzer
100116                   S       uwait   0xfffffe0057404300  syz-fuzzer
100117                   S       uwait   0xfffffe0058839e00  syz-fuzzer
100118                   S       uwait   0xfffffe0058839500  syz-fuzzer
100119                   S       uwait   0xfffffe0058839400  syz-fuzzer
100120                   S       uwait   0xfffffe0058839d00  syz-fuzzer
100121                   S       uwait   0xfffffe0058839c00  syz-fuzzer
131073                   S       uwait   0xfffffe0058830000  syz-fuzzer
  777   775   777     0  Ss      pause   0xfffffe0058b28b20  csh
  775   689   775     0  Ss      select  0xfffffe009e466640  sshd
  755     1   755     0  Ss+     ttyin   0xfffffe00570040b0  getty
  754     1   754     0  Ss+     ttyin   0xfffffe00583e10b0  getty
  753     1   753     0  Ss+     ttyin   0xfffffe00583e18b0  getty
  752     1   752     0  Ss+     ttyin   0xfffffe00575fc0b0  getty
  751     1   751     0  Ss+     ttyin   0xfffffe00575fc8b0  getty
  750     1   750     0  Ss+     ttyin   0xfffffe00575f80b0  getty
  749     1   749     0  Ss+     ttyin   0xfffffe00575f88b0  getty
  748     1   748     0  Ss+     ttyin   0xfffffe00575cb0b0  getty
  747     1   747     0  Ss+     ttyin   0xfffffe00575cb8b0  getty
  693     1   693     0  Ss      nanslp  0xffffffff84060980  cron
  689     1   689     0  Ss      select  0xfffffe009e466a40  sshd
  502     1   502     0  Ss      select  0xfffffe009e3f98c0  syslogd
  431     1   431     0  Ss      wait    0xfffffe0058b28538  devd
  430     1   430    65  Ss      select  0xfffffe005888cbc0  dhclient
  345     1   345     0  Ss      select  0xfffffe00588580c0  dhclient
  342     1   342     0  Ss      select  0xfffffe009e2fe040  dhclient
   18     0     0     0  DL      syncer  0xffffffff84188de0  [syncer]
   17     0     0     0  DL      vlruwt  0xfffffe0058769a70  [vnlru]
   16     0     0     0  DL      (threaded)                  [bufdaemon]
100078                   D       qsleep  0xffffffff84186ae0  [bufdaemon]
100081                   D       -       0xffffffff83411f80  [bufspacedaemon-0]
100092                   D       sdflush 0xfffffe0058895ce8  [/ worker]
   15     0     0     0  DL      psleep  0xffffffff841bf040  [vmdaemon]
    9     0     0     0  DL      (threaded)                  [pagedaemon]
100076                   D       psleep  0xffffffff841b2b38  [dom0]
100082                   D       launds  0xffffffff841b2b44  [laundry: dom0]
100083                   D       umarcl  0xffffffff81eb8520  [uma]
    8     0     0     0  DL      -       0xffffffff83e16be0  [rand_harvestq]
    7     0     0     0  DL      waiting 0xffffffff84f0a760  [sctp_iterator]
    6     0     0     0  DL      pftm    0xffffffff849652f0  [pf purge]
    5     0     0     0  DL      (threaded)                  [cam]
100045                   D       -       0xffffffff83c9c3c0  [doneq0]
100046                   D       -       0xffffffff83c9c340  [async]
100075                   D       -       0xffffffff83c9c1c0  [scanner]
   14     0     0     0  DL      seqstat 0xfffffe0056ab3c88  [sequencer 00]
    4     0     0     0  DL      crypto_ 0xfffffe00541bed80  [crypto returns 1]
    3     0     0     0  DL      crypto_ 0xfffffe00541bed30  [crypto returns 0]
    2     0     0     0  DL      crypto_ 0xffffffff841acbe0  [crypto]
   13     0     0     0  DL      (threaded)                  [geom]
100036                   D       -       0xffffffff84033b40  [g_event]
100037                   D       -       0xffffffff84033b80  [g_up]
100038                   D       -       0xffffffff84033bc0  [g_down]
   12     0     0     0  WL      (threaded)                  [intr]
100012                   I                                   [swi5: fast taskq]
100016                   I                                   [swi6: task queue]
100017                   I                                   [swi6: Giant taskq]
100029                   I                                   [swi1: netisr 0]
100030                   I                                   [swi4: clock (0)]
100031                   I                                   [swi4: clock (1)]
100032                   I                                   [swi3: vm]
100033                   I                                   [swi1: hpts]
100034                   I                                   [swi1: hpts]
100047                   I                                   [irq24: virtio_pci0]
100048                   I                                   [irq25: virtio_pci0]
100049                   I                                   [irq26: virtio_pci0]
100050                   I                                   [irq27: virtio_pci0]
100051                   I                                   [irq28: virtio_pci1]
100052                   I                                   [irq29: virtio_pci1]
100053                   I                                   [irq30: virtio_pci1]
100054                   I                                   [irq31: virtio_pci1]
100055                   I                                   [irq32: virtio_pci1]
100060                   I                                   [irq10: virtio_pci2]
100062                   I                                   [irq1: atkbd0]
100063                   I                                   [irq12: psm0]
100064                   I                                   [swi0: uart uart++]
100068                   I                                   [swi1: pf send]
   11     0     0     0  RL      (threaded)                  [idle]
100003                   CanRun                              [idle: cpu0]
100004                   CanRun                              [idle: cpu1]
    1     0     1     0  SLs     wait    0xfffffe0053d5c538  [init]
   10     0     0     0  DL      audit_w 0xffffffff841adb80  [audit]
    0     0     0     0  DLs     (threaded)                  [kernel]
100000                   D       swapin  0xffffffff84034a40  [swapper]
100005                   D       -       0xfffffe0053df0600  [softirq_0]
100006                   D       -       0xfffffe0053df0500  [softirq_1]
100007                   D       -       0xfffffe0053df0400  [if_io_tqg_0]
100008                   D       -       0xfffffe0053df0300  [if_io_tqg_1]
100009                   D       -       0xfffffe0053df0200  [if_config_tqg_0]
100010                   D       -       0xfffffe0053df0100  [deferred_unmount ta]
100011                   D       -       0xfffffe0053df0000  [thread taskq]
100013                   D       -       0xfffffe0053dfac00  [pci_hp taskq]
100014                   D       -       0xfffffe0053dfab00  [kqueue_ctx taskq]
100015                   D       -       0xfffffe0053dfaa00  [linuxkpi_irq_wq]
100018                   D       -       0xfffffe0053dfa500  [aiod_kick taskq]
100019                   D       -       0xfffffe0053dfa400  [inm_free taskq]
100020                   D       -       0xfffffe0053dfa300  [in6m_free taskq]
100021                   D       -       0xfffffe0053dfa200  [linuxkpi_short_wq_0]
100022                   D       -       0xfffffe0053dfa200  [linuxkpi_short_wq_1]
100023                   D       -       0xfffffe0053dfa200  [linuxkpi_short_wq_2]
100024                   D       -       0xfffffe0053dfa200  [linuxkpi_short_wq_3]
100025                   D       -       0xfffffe0053dfa100  [linuxkpi_long_wq_0]
100026                   D       -       0xfffffe0053dfa100  [linuxkpi_long_wq_1]
100027                   D       -       0xfffffe0053dfa100  [linuxkpi_long_wq_2]
100028                   D       -       0xfffffe0053dfa100  [linuxkpi_long_wq_3]
100035                   D       -       0xfffffe0053e2a800  [firmware taskq]
100039                   D       -       0xfffffe0054199d00  [crypto_0]
100040                   D       -       0xfffffe0054199d00  [crypto_1]
100056                   D       -       0xfffffe0054199200  [vtnet0 rxq 0]
100057                   D       -       0xfffffe0054199100  [vtnet0 txq 0]
100058                   D       -       0xfffffe0054199000  [vtnet0 rxq 1]
100059                   D       -       0xfffffe0056ee2e00  [vtnet0 txq 1]
100061                   D       vtbslp  0xfffffe0056b94980  [virtio_balloon]
100065                   D       -       0xfffffe0056ee2700  [mca taskq]
100066                   D       -       0xffffffff82c8d421  [deadlkres]
100070                   D       -       0xfffffe0054199a00  [acpi_task_0]
100071                   D       -       0xfffffe0054199a00  [acpi_task_1]
100072                   D       -       0xfffffe0054199a00  [acpi_task_2]
100074                   D       -       0xfffffe0054199700  [CAM taskq]
db> show all locks
db> show malloc
              Type        InUse        MemUse     Requests
           pf_hash            5        11524K            5
            devbuf         4213         4323K         4241
          tcp_hpts            6         3201K            6
         sysctloid        34962         2059K        35033
             vtbuf           24         1968K           46
              kobj          326         1304K          485
          routetbl        34981         1105K       111393
            newblk           30         1032K        91080
          vfscache            3         1025K            3
               pcb           41          538K        25836
          inodedep           42          528K       108142
         ufs_quota            1          512K            1
          vfs_hash            1          512K            1
           callout            2          512K            2
              intr            4          472K            4
              vmem            3          288K            8
           subproc          144          268K        91441
            acpica         1674          184K        55237
         vnet_data            1          168K            1
           tidhash            3          141K            3
            linker          355          140K          383
           pagedep           14          132K        82962
        tfo_ccache            1          128K            1
            DEVFS1          108          108K         2564
               sem            4          106K            4
          filedesc           14          105K       161324
               bus          986           80K         3474
          mtx_pool            2           72K            2
          syncache            1           68K            1
          acpitask            1           64K            1
       ddb_capture            1           64K            1
            module          509           64K          509
               BPF           30           53K         1475
              umtx          374           47K          374
           kdtrace          223           45K       175020
              temp           35           33K        80960
         hostcache            1           32K            1
               shm            1           32K         2803
            DEVFS3          127           32K          950
               msg            4           30K            4
        gtaskqueue           18           26K           18
            kbdmux            6           22K            6
             sigio          318           20K          699
        DEVFS_RULE           56           20K           56
            ip6ndp           78           19K         1779
            ifaddr           66           19K         7534
         ufs_mount            4           17K            5
              proc            3           17K            3
               tty           16           16K           16
           ithread           99           16K           99
            bus-sc           34           15K         1691
            KTRACE          103           13K     47854444
             ifnet            7           13K          820
           lltable           40           12K         6639
              kenv           95           12K           95
      eventhandler          133           12K          133
       ether_multi          139           12K        24029
         CAM queue            5           11K         1528
              GEOM           61           10K          490
              rman           84           10K          425
              ksem            4           10K        13098
         bmsafemap            3            9K       105449
              UART           12            9K           12
           devstat            4            9K            4
         sctp_timw           32            8K           32
               rpc            2            8K            2
             shmfd            1            8K            1
       pfs_vncache            1            8K            1
         in6_multi           58            8K         8767
         pfs_nodes           20            8K           20
     audit_evclass          237            8K          295
         taskqueue           63            7K           63
            sglist            5            7K            5
           CAM DEV            3            6K          510
              cred           24            6K         1030
            kqueue           61            6K        91498
       ufs_dirhash           27            6K           36
          freework           22            6K        83205
            plimit           21            6K         7495
          freeblks           20            5K        82587
               UMA          268            5K          268
          pf_ifnet           10            5K         4084
            dirrem           17            5K       103052
                vt           11            5K           11
          sctp_ifa           32            4K         1707
           memdesc            1            4K            1
               MCA           32            4K           32
             evdev            4            4K            4
            DEVFSP           59            4K        14926
           pwddesc           59            4K        91356
           acpisem           28            4K           28
           session           27            4K         3603
             hhook           15            4K           17
          freefile           24            3K       102807
          kcovinfo           48            3K        13939
             lockf           27            3K          676
          terminal           11            3K           11
         proc-args           46            3K        18208
             selfd           38            3K      1161873
           uidinfo            3            3K           21
        local_apic            1            2K            1
           io_apic            1            2K            1
       fpukern_ctx            2            2K            2
         ipsec-saq            2            2K            2
            select           13            2K          874
            Unitno           27            2K         4925
           CAM XPT           22            2K          543
            diradd           12            2K       104496
             mkdir           10            2K       164052
       ipsecpolicy            2            2K            2
          in_multi            5            2K          831
           acpidev           20            2K           20
               msi            9            2K            9
             clone            9            2K            9
               tun            7            2K          820
           softdep            1            1K            1
            sahead            1            1K            1
          secasvar            1            1K            1
             nhops            6            1K          220
       vnodemarker            2            1K          196
      NFSD session            1            1K            1
       inpcbpolicy           29            1K        23921
        CAM periph            4            1K          271
             ipsec            3            1K            3
         newdirblk            6            1K        82029
               mld            6            1K          819
              igmp            6            1K          819
         toponodes            6            1K            6
            isadev            6            1K            6
             mount           16            1K           89
          pci_link           10            1K           10
               osd           24            1K         6651
          sctp_ifn            5            1K         1707
            crypto            4            1K            4
 encap_export_host           12            1K           12
              pfil            4            1K            4
              cdev            2            1K            2
    chacha20random            1            1K            1
          procdesc            3            1K          448
      NFSD lckfile            1            1K            1
     NFSD V4client            1            1K            1
             DEVFS            9            1K           10
            vnodes            1            1K            1
           CAM SIM            2            1K            2
            feeder            7            1K            7
           tcpfunc            3            1K            3
        loginclass            3            1K            6
            prison            6            1K            6
       lkpikmalloc            5            1K            6
        aesni_data            2            1K            2
          nexusdev            8            1K            8
            apmdev            1            1K            1
          atkbddev            2            1K            2
     CAM dev queue            2            1K            2
             xform            2            1K           42
 CAM I/O Scheduler            1            1K            1
          CAM path            4            1K         1034
          pmchooks            1            1K            1
            soname            4            1K        42684
          sctp_vrf            1            1K            1
              vnet            1            1K            1
           entropy            2            1K          946
          acpiintr            1            1K            1
               pmc            1            1K            1
          filecaps            3            1K         2687
              cpus            2            1K            2
    vnet_data_free            1            1K            1
           Per-cpu            1            1K            1
          p1003.1b            1            1K            1
        sctp_mcore            0            0K            0
        sctp_socko            0            0K         7215
         sctp_iter            0            0K         2980
         sctp_mvrf            0            0K            0
         sctp_cpal            0            0K            0
         sctp_cmsg            0            0K            0
         sctp_stre            0            0K            0
         sctp_athi            0            0K            0
         sctp_athm            0            0K        12314
         sctp_atky            0            0K        14005
         sctp_atcl            0            0K        12156
         sctp_a_it            0            0K         2980
         sctp_aadr            0            0K           36
         sctp_stro            0            0K         1849
         sctp_stri            0            0K            0
          sctp_map            0            0K         3698
        dctcp data            0            0K           13
            tcp_do            0            0K            0
           tcp_fsb            0            0K          502
          chd data            0            0K           26
          cdg data            0            0K           18
        cubic data            0            0K            8
            mqdata            0            0K            0
        vegas data            0            0K           23
         htcp data            0            0K            8
          pf_table            0            0K            0
           pf_rule            0            0K            0
           pf_altq            0            0K            0
           pf_osfp            0            0K            0
           pf_temp            0            0K            0
     NFSD rollback            0            0K            0
      NFSCL diroff            0            0K            0
        madt_table            0            0K            2
          smartpqi            0            0K            0
       NEWdirectio            0            0K            0
        NEWNFSnode            0            0K            0
         NFSCL lck            0            0K            0
      NFSCL lckown            0            0K            0
      NFSCL client            0            0K            0
       NFSCL deleg            0            0K            0
        NFSCL open            0            0K            0
       NFSCL owner            0            0K            0
              iavf            0            0K            0
               ixl            0            0K            0
            NFS fh            0            0K            0
           NFS req            0            0K            0
     NFSD usrgroup            0            0K            0
       NFSD string            0            0K            0
       NFSD V4lock            0            0K            0
      NFSD V4state            0            0K            0
        ice-resmgr            0            0K            0
         ice-osdep            0            0K            0
               ice            0            0K            0
             axgbe            0            0K            0
     NFSD srvcache            0            0K            0
       msdosfs_fat            0            0K            0
     msdosfs_mount            0            0K            0
      msdosfs_node            0            0K            0
            DEVFS4            0            0K            0
          xen_intr            0            0K            0
            DEVFS2            0            0K            0
           xen_hvm            0            0K            0
         legacydrv            0            0K            0
            qpidrv            0            0K            0
            gntdev            0            0K            0
       privcmd_dev            0            0K            0
      dmar_idpgtbl            0            0K            0
          dmar_dom            0            0K            0
          dmar_ctx            0            0K            0
        evtchn_dev            0            0K            0
          xenstore            0            0K            0
         ciss_data            0            0K            0
              isci            0            0K            0
      iommu_dmamap            0            0K            0
         BACKLIGHT            0            0K            0
     hyperv_socket            0            0K            0
           bxe_ilt            0            0K            0
               xnb            0            0K            0
            xenbus            0            0K            0
              xbbd            0            0K            0
               xbd            0            0K            0
           Balloon            0            0K            0
     vm_fictitious            0            0K            0
          sysmouse            0            0K            0
            vtfont            0            0K            0
           ath_hal            0            0K            0
            athdev            0            0K            0
           ata_pci            0            0K            0
           ata_dma            0            0K            0
       ata_generic            0            0K            0
               amr            0            0K            0
            pvscsi            0            0K            0
           UMAHash            0            0K            0
           scsi_da            0            0K           69
         vm_pgdata            0            0K            0
           jblocks            0            0K            0
          savedino            0            0K        29652
          sentinel            0            0K            0
            jfsync            0            0K            0
            jtrunc            0            0K            0
             sbdep            0            0K           96
           jsegdep            0            0K            0
              jseg            0            0K            0
         jfreefrag            0            0K            0
          jfreeblk            0            0K            0
           jnewblk            0            0K            0
            jmvref            0            0K            0
           jremref            0            0K            0
           jaddref            0            0K            0
           freedep            0            0K            0
          freefrag            0            0K         1397
        allocindir            0            0K            0
          indirdep            0            0K         1355
       allocdirect            0            0K            0
          ufs_trim            0            0K            0
           mactemp            0            0K            0
     audit_trigger            0            0K            0
 audit_pipe_presel            0            0K            0
     audit_pipeent            0            0K            0
        audit_pipe            0            0K            0
      audit_evname            0            0K            0
         audit_bsm            0            0K            0
      audit_gidset            0            0K            0
        audit_text            0            0K            0
        audit_path            0            0K            0
        audit_data            0            0K            0
        audit_cred            0            0K            0
            ata_da            0            0K            0
           scsi_ch            0            0K            0
           scsi_cd            0            0K            0
       AHCI driver            0            0K            0
            USBdev            0            0K            0
               USB            0            0K            0
               agp            0            0K            0
          ktls_ocf            0            0K            0
           nvme_da            0            0K            0
        MLX5EEPROM            0            0K            0
        MLX5EEPROM            0            0K            0
        MLX5EEPROM            0            0K            0
        MLX5EEPROM            0            0K            0
         MLX5E_TLS            0            0K            0
        MLX5EEPROM            0            0K            0
        MLX5EEPROM            0            0K            0
        MLX5EEPROM            0            0K            0
            MLX5EN            0            0K            0
        MLX5EEPROM            0            0K            0
        MLX5EEPROM            0            0K            0
        MLX5EEPROM            0            0K            0
          MLX5DUMP            0            0K            0
        MLX5EEPROM            0            0K            0
        MLX5EEPROM            0            0K            0
          seq_file            0            0K            0
             radix            0            0K            0
               idr            0            0K            0
            lkpifw            0            0K            0
               NLM            0            0K            0
    ipsec-spdcache            0            0K            0
         ipsec-reg            0            0K            0
        ipsec-misc            0            0K            0
      ipsecrequest            0            0K            0
            ip6opt            0            0K          104
       ip6_msource            0            0K            0
      ip6_moptions            0            0K            0
       in6_mfilter            0            0K            0
             frag6            0            0K            0
            tcplog            0            0K            0
        tcp_hwpace            0            0K            0
           acpipwr            0            0K            0
               LRO            0            0K            0
      newreno data            0            0K           82
        ip_msource            0            0K            0
       ip_moptions            0            0K           33
        in_mfilter            0            0K            9
              ipid            0            0K            0
         80211scan            0            0K            0
      80211ratectl            0            0K            0
        80211power            0            0K            0
       80211nodeie            0            0K            0
         80211node            0            0K            0
      80211mesh_gt            0            0K            0
      80211mesh_rt            0            0K            0
         80211perr            0            0K            0
         80211prep            0            0K            0
         80211preq            0            0K            0
          80211dfs            0            0K            0
       80211crypto            0            0K            0
          80211vap            0            0K            0
             iflib            0            0K            0
              vlan            0            0K            0
               gif            0            0K            0
           ifdescr            0            0K            0
              zlib            0            0K            0
           fadvise            0            0K            0
           VN POLL            0            0K            0
         acpi_perf            0            0K            0
            statfs            0            0K        82316
     namei_tracker            0            0K          939
       export_host            0            0K            0
        cl_savebuf            0            0K          295
            twsbuf            0            0K            0
      twe_commands            0            0K            0
      twa_commands            0            0K            0
       tcp_log_dev            0            0K            0
      midi buffers            0            0K            0
             mixer            0            0K            0
              ac97            0            0K            0
             hdacc            0            0K            0
              hdac            0            0K            0
              hdaa            0            0K            0
         acpicmbat            0            0K            0
       SIIS driver            0            0K            0
           CAM CCB            0            0K          523
               PUC            0            0K            0
          ppbusdev            0            0K            0
            biobuf            0            0K            0
              aios            0            0K         4618
               lio            0            0K        11734
               acl            0            0K            0
agtiapi_MemAlloc malloc            0            0K            0
          mbuf_tag            0            0K        25302
              ktls            0            0K            0
    osti_cacheable            0            0K            0
          tempbuff            0            0K            0
          tempbuff            0            0K            0
ag_tgt_map_t malloc            0            0K            0
ag_slr_map_t malloc            0            0K            0
lDevFlags * malloc            0            0K            0
tiDeviceHandle_t * malloc            0            0K            0
ag_portal_data_t malloc            0            0K            0
ag_device_t malloc            0            0K            0
     STLock malloc            0            0K            0
          CCB List            0            0K            0
            sr_iov            0            0K            0
               OCS            0            0K            0
               OCS            0            0K            0
              nvme            0            0K            0
               nvd            0            0K            0
            netmap            0            0K            0
            mwldev            0            0K            0
        MVS driver            0            0K            0
     CAM ccb queue            0            0K            0
          mrsasbuf            0            0K            0
          mpt_user            0            0K            0
          mps_user            0            0K            0
              accf            0            0K            0
               pts            0            0K            0
               iov            0            0K      1088270
          ioctlops            0            0K         3482
           eventfd            0            0K            0
           Witness            0            0K            0
             stack            0            0K            0
            MPSSAS            0            0K            0
               mps            0            0K            0
          mpr_user            0            0K            0
            MPRSAS            0            0K            0
               mpr            0            0K            0
            mfibuf            0            0K            0
              sbuf            0            0K          288
        md_sectors            0            0K            0
          firmware            0            0K            0
        compressor            0            0K            0
           md_disk            0            0K            0
              SWAP            0            0K            0
           malodev            0            0K            0
               LED            0            0K            0
         sysctltmp            0            0K        15159
            sysctl            0            0K            3
              ekcd            0            0K            0
            dumper            0            0K            0
          sendfile            0            0K            0
              rctl            0            0K            0
          ix_sriov            0            0K            0
        aacraidcam            0            0K            0
       aacraid_buf            0            0K            0
                ix            0            0K            0
            ipsbuf            0            0K            0
             cache            0            0K            0
            iirbuf            0            0K            0
      prison_racct            0            0K            0
       Fail Points            0            0K            0
filedesc_to_leader            0            0K            0
               pwd            0            0K            0
       tty console            0            0K            0
            aaccam            0            0K            0
            aacbuf            0            0K            0
              zstd            0            0K            0
            XZ_DEC            0            0K            0
            nvlist            0            0K            0
          SCSI ENC            0            0K            0
           SCSI sa            0            0K            0
         scsi_pass            0            0K            0
        isofs_node            0            0K            0
       isofs_mount            0            0K            0
     tr_raid5_data            0            0K            0
    tr_raid1e_data            0            0K            0
     tr_raid1_data            0            0K            0
     tr_raid0_data            0            0K            0
    tr_concat_data            0            0K            0
       md_sii_data            0            0K            0
   md_promise_data            0            0K            0
    md_nvidia_data            0            0K            0
   md_jmicron_data            0            0K            0
     md_intel_data            0            0K            0
       md_ddf_data            0            0K            0
         raid_data            0            0K           72
     geom_flashmap            0            0K            0
         tmpfs dir            0            0K            0
        tmpfs name            0            0K            0
       tmpfs mount            0            0K            0
           NFS FHA            0            0K            0
         newnfsmnt            0            0K            0
  newnfsclient_req            0            0K            0
   NFSCL layrecall            0            0K            0
     NFSCL session            0            0K            0
     NFSCL sockreq            0            0K            0
     NFSCL devinfo            0            0K            0
     NFSCL flayout            0            0K            0
      NFSCL layout            0            0K            0
db> show uma
              Zone   Size    Used    Free    Requests  Sleeps  Bucket  Total Mem    XFree
   mbuf_jumbo_page   4096    8320     979      112333       0     254   38088704        0
              pbuf   2624       0     989           0       0       2    2595136        0
              mbuf    256    8665     905      692098       0     254    2449920        0
         FFS inode   1160    1925      70      104732       0       9    2314200        0
          BUF TRIE    144     615   11145        7852       0      62    1693440        0
        malloc-384    384      42    4338      109723       0      30    1681920        0
       malloc-4096   4096     393      13       91849       0       2    1662976        0
        malloc-384    384    4117      13        4171       0      30    1585920        0
        malloc-128    128   11494     751      150838       0     126    1567360        0
         malloc-32     32   40458     114       42268       0     254    1298304        0
       UMA Slabs 0    112   10790       7       10790       0     126    1209264        0
        RADIX NODE    144    7327    1068     3262380       0      66    1208880        0
      mbuf_cluster   2048     585       1         585       0     254    1200128        0
         vmem btag     56   20620      91       21790       0     254    1159816        0
        malloc-256    256     114    4371      328472       0      62    1148160        0
            DEVCTL   1024     514     586        3682       0       0    1126400        0
             VNODE    448    1962     108      105584       0      30     927360        0
         VM OBJECT    264    2570     160     1401638       0      30     720720        0
        malloc-128    128     743    4248      241644       0     126     638848        0
       FFS2 dinode    256    1925     130      104732       0      62     526080        0
        malloc-256    256      34    1631       30738       0      62     426240        0
            lkpimm    168       1    2327           1       0      62     391104        0
          lkpicurr    168       2    2326           2       0      62     391104        0
            socket    960      46     346       66675       0     254     376320        0
        256 Bucket   2048     156      18       13005       0       8     356352        0
            THREAD   1808     163      24       83663       0       8     338096        0
      malloc-65536  65536       1       4          67       0       1     327680        0
         malloc-64     64    3888     522     1179601       0     254     282240        0
      malloc-65536  65536       4       0           4       0       1     262144        0
        malloc-256    256     281     739      260070       0      62     261120        0
         malloc-16     16   14473     527       24169       0     254     240000        0
      malloc-65536  65536       1       2         137       0       1     196608        0
      malloc-16384  16384       6       6       80413       0       2     196608        0
         MAP ENTRY     96    1368     648     5202487       0     126     193536        0
         UMA Zones    768     240       4         240       0      16     187392        0
       S VFS Cache    104    1415     379      120346       0     126     186576        0
        malloc-128    128    1226     200       31075       0     126     182528        0
     FPU_save_area    832     165      42      141815       0      16     172224        0
             tcpcb   1096      20     134        6640       0     254     168784        0
       malloc-1024   1024     127      29        2583       0      16     159744        0
        malloc-256    256      84     516      109497       0      62     153600        0
           VMSPACE   2552      33      27       92149       0       5     153120        0
        128 Bucket   1024     110      37       34206       0      16     150528        0
       mbuf_packet    256       8     577       93403       0     254     149760        0
       malloc-4096   4096      25      11        1086       0       2     147456        0
         64 Bucket    512     186      78      272769       0      30     135168        0
      malloc-65536  65536       2       0           2       0       1     131072        0
      malloc-65536  65536       0       2        4050       0       1     131072        0
          ksiginfo    112      76     968       59602       0     126     116928        0
         tcp_inpcb    496      20     212        6640       0     254     115072        0
             g_bio    408       0     280       99838       0      30     114240        0
              PROC   1336      58      26       91355       0       8     112224        0
        malloc-128    128     340     497       88543       0     126     107136        0
         32 Bucket    256     180     225       65651       0      62     103680        0
           sctp_ep   1272       0      81       10307       0     254     103032        0
         sctp_asoc   2288       0      45        1849       0     254     102960        0
         filedesc0   1072      59      25       91356       0       8      90048        0
          UMA Kegs    384     226       7         226       0      30      89472        0
        malloc-256    256      81     264      126215       0      62      88320        0
        malloc-384    384     154      66        6091       0      30      84480        0
        malloc-256    256     198     132       88878       0      62      84480        0
        malloc-128    128      83     568      164125       0     126      83328        0
       malloc-2048   2048      14      20        5898       0       8      69632        0
      malloc-65536  65536       1       0           1       0       1      65536        0
      malloc-32768  32768       2       0           2       0       1      65536        0
      malloc-32768  32768       0       2         130       0       1      65536        0
       malloc-8192   8192       5       3          34       0       1      65536        0
             unpcb    256      14     241       30465       0     254      65280        0
        malloc-128    128     387     109       19876       0     126      63488        0
       malloc-2048   2048       8      22       10315       0       8      61440        0
         malloc-64     64     573     309       94807       0     254      56448        0
         malloc-64     64     397     422       17937       0     254      52416        0
      malloc-16384  16384       3       0           3       0       1      49152        0
       malloc-8192   8192       6       0           6       0       1      49152        0
         malloc-64     64     189     567    15057533       0     254      48384        0
        malloc-256    256      47     133       18212       0      62      46080        0
       malloc-2048   2048       2      20       18062       0       8      45056        0
       malloc-2048   2048       1      21         800       0       8      45056        0
            pcpu-8      8    4659     973      138420       0     254      45056        0
              pipe    744      18      42       18106       0      16      44640        0
         malloc-64     64     468     225       14995       0     254      44352        0
            clpbuf   2624       0      16          44       0      16      41984        0
            da_ccb    544       0      77       25080       0      16      41888        0
           DIRHASH   1024      40       0          49       0      16      40960        0
       malloc-4096   4096       3       7       30888       0       2      40960        0
       malloc-4096   4096       4       6       83964       0       2      40960        0
       malloc-1024   1024       6      34      114174       0      16      40960        0
        sctp_raddr    736       0      55        1849       0     254      40480        0
             Files     80     184     316      409016       0     126      40000        0
      tcp_rack_pcb    832       0      45         502       0      16      37440        0
             NAMEI   1024       1      35      758117       0      16      36864        0
       malloc-4096   4096       3       6        1972       0       2      36864        0
       malloc-1024   1024       0      36        1851       0      16      36864        0
         malloc-64     64     326     241        4273       0     254      36288        0
         16 Bucket    144      78     174        4307       0      62      36288        0
         udp_inpcb    496       6      66       13576       0     254      35712        0
        malloc-128    128       2     277        1508       0     126      35712        0
        malloc-384    384      15      75       19088       0      30      34560        0
      malloc-32768  32768       1       0           1       0       1      32768        0
      malloc-16384  16384       2       0           2       0       1      32768        0
      malloc-16384  16384       2       0          17       0       1      32768        0
       malloc-8192   8192       4       0           4       0       1      32768        0
       malloc-8192   8192       3       1         104       0       1      32768        0
           pcpu-64     64     487      25         487       0     254      32768        0
         malloc-64     64      76     428       17718       0     254      32256        0
       tcp_bbr_pcb    832       0      36         742       0      16      29952        0
       malloc-1024   1024      12      16         409       0      16      28672        0
         TURNSTILE    136     188      22         188       0      62      28560        0
               PWD     32      18     864       77247       0     254      28224        0
         malloc-64     64      49     392     1048462       0     254      28224        0
             KNOTE    160      22     153      669752       0      62      28000        0
             ripcb    496       3      53        2905       0     254      27776        0
        malloc-128    128     129      88        6123       0     126      27776        0
        malloc-384    384      52      18       22665       0      30      26880        0
        malloc-256    256      12      93       25707       0      62      26880        0
       malloc-8192   8192       1       2          20       0       1      24576        0
       malloc-8192   8192       3       0           3       0       1      24576        0
    ertt_txseginfo     40       0     606      110251       0     254      24240        0
            ttyinq    160     135      15         300       0      62      24000        0
          8 Bucket     80      49     251       10306       0     126      24000        0
               AIO    208       1     113       22732       0      62      23712        0
     routing nhops    256      23      67        3480       0      62      23040        0
           ttyoutq    256      72      18         160       0      62      23040        0
       malloc-1024   1024      13       7         141       0      16      20480        0
        malloc-512    512       7      33         225       0      30      20480        0
        sctp_laddr     48       0     420       10178       0     254      20160        0
         malloc-32     32      91     539     5586055       0     254      20160        0
         malloc-32     32      96     534      108379       0     254      20160        0
       tcp_bbr_map    128       0     155         904       0     126      19840        0
     udplite_inpcb    496       0      40         800       0     254      19840        0
      tcp_log_node    120       0     165         215       0     126      19800        0
        SLEEPQUEUE     88     188      36         188       0     126      19712        0
             AIOCB    552       0      35       49035       0      16      19320        0
       Mountpoints   2752       2       5           2       0       4      19264        0
      malloc-16384  16384       1       0           1       0       1      16384        0
      malloc-16384  16384       1       0           1       0       1      16384        0
       malloc-8192   8192       2       0           2       0       1      16384        0
       malloc-2048   2048       3       5        3628       0       8      16384        0
       malloc-1024   1024       1      15       37308       0      16      16384        0
        malloc-512    512       1      31       12782       0      30      16384        0
           rtentry    176      26      66        3480       0      62      16192        0
              ertt     72      20     204        6640       0     126      16128        0
          2 Bucket     32      69     435       10255       0     254      16128        0
      vtnet_tx_hdr     24       0     668      115966       0     254      16032        0
        malloc-384    384      22      18        2096       0      30      15360        0
            cpuset    104       7     117         499       0     126      12896        0
       malloc-4096   4096       1       2           9       0       2      12288        0
       malloc-2048   2048       2       4         442       0       8      12288        0
       malloc-2048   2048       3       3         194       0       8      12288        0
       malloc-1024   1024       4       8         508       0      16      12288        0
       malloc-1024   1024       8       4           8       0      16      12288        0
              PGRP     88      27     111        7274       0     126      12144        0
      tcp_rack_map    112       0     108         628       0     126      12096        0
         malloc-32     32      23     355        3401       0     254      12096        0
              kenv    258      15      30        2051       0      30      11610        0
       malloc-8192   8192       1       0           1       0       1       8192        0
        malloc-512    512       9       7          12       0      30       8192        0
        malloc-512    512       3      13         198       0      30       8192        0
        malloc-512    512       3      13          62       0      30       8192        0
    tcp_log_bucket    176       0      46          29       0      62       8096        0
          rl_entry     40      94     108          94       0     254       8080        0
             udpcb     32       6     246       14376       0     254       8064        0
         malloc-32     32       9     243       34323       0     254       8064        0
         malloc-32     32     101     151         849       0     254       8064        0
         malloc-32     32      53     199        3786       0     254       8064        0
         malloc-32     32      61     191       20278       0     254       8064        0
          4 Bucket     48       1     167        1292       0     254       8064        0
         malloc-16     16       7     493       11354       0     254       8000        0
         malloc-16     16      24     476       11616       0     254       8000        0
         malloc-16     16      39     461    26928640       0     254       8000        0
         malloc-16     16     211     289        2592       0     254       8000        0
         malloc-16     16      39     461         865       0     254       8000        0
         malloc-16     16     275     225       25445       0     254       8000        0
         malloc-16     16      28     472       11790       0     254       8000        0
            AIOLIO    272       0      28        5858       0      30       7616        0
         domainset     40       0     126         492       0     254       5040        0
 epoch_record pcpu    256       4      12           4       0      62       4096        0
       malloc-2048   2048       1       1           1       0       8       4096        0
        malloc-512    512       4       4           4       0      30       4096        0
        malloc-512    512       0       8         894       0      30       4096        0
           pcpu-16     16       7     249           7       0     254       4096        0
          sackhole     32       0     126           1       0     254       4032        0
         hostcache     64       1      62           1       0     254       4032        0
          syncache    168       0      24           4       0     254       4032        0
              AIOP     32       4     122           4       0     254       4032        0
       UMA Slabs 1    176      10      12          10       0      62       3872        0
       L VFS Cache    320       0      12           1       0      30       3840        0
        malloc-384    384       0      10           2       0      30       3840        0
        malloc-384    384       1       9           1       0      30       3840        0
            mqnode    416       3       6           3       0      30       3744        0
        KMAP ENTRY     96      12      27          14       0       0       3744        0
              vmem   1856       1       1           1       0       8       3712        0
           SMR CPU     32       3      60           3       0     254       2016        0
        SMR SHARED     24       3      60           3       0     254       1512        0
       FFS1 dinode    128       0       0           0       0     126          0        0
           ada_ccb    272       0       0           0       0      30          0        0
             swblk    136       0       0           0       0      62          0        0
          swpctrie    144       0       0           0       0      62          0        0
   sctp_asconf_ack     48       0       0           0       0     254          0        0
       sctp_asconf     40       0       0           0       0     254          0        0
sctp_stream_msg_out    112       0       0           0       0     254          0        0
        sctp_readq    152       0       0           0       0     254          0        0
        sctp_chunk    152       0       0           0       0     254          0        0
   cdg_qdiffsample     16       0       0           0       0     254          0        0
   pf state scrubs     40       0       0           0       0     254          0        0
   pf frag entries     40       0       0           0       0     254          0        0
          pf frags    248       0       0           0       0      62          0        0
  pf table entries    160       0       0           0       0      62          0        0
pf table entry counters     64       0       0           0       0     254          0        0
   pf source nodes    136       0       0           0       0     254          0        0
     pf state keys     88       0       0           0       0     126          0        0
         pf states    312       0       0           0       0     254          0        0
           pf tags    104       0       0           0       0     126          0        0
          pf mtags     48       0       0           0       0     254          0        0
           tcp_log    416       0       0           0       0     254          0        0
          tcpreass     48       0       0           0       0     254          0        0
tfo_ccache_entries     80       0       0           0       0     126          0        0
               tfo      4       0       0           0       0     254          0        0
             tcptw     88       0       0           0       0     254          0        0
               ipq     56       0       0           0       0     254          0        0
    IPsec SA lft_c     16       0       0           0       0     254          0        0
            itimer    352       0       0           0       0      30          0        0
        TMPFS node    224       0       0           0       0      62          0        0
           NCLNODE    592       0       0           0       0      16          0        0
        mqnotifier    216       0       0           0       0      62          0        0
            mvdata     64       0       0           0       0     254          0        0
            mqueue    248       0       0           0       0      62          0        0
     LTS VFS Cache    360       0       0           0       0      30          0        0
     STS VFS Cache    144       0       0           0       0      62          0        0
           cryptop    280       0       0           0       0      30          0        0
  linux_dma_object     32       0       0           0       0     254          0        0
  linux_dma_pctrie    144       0       0           0       0      62          0        0
   IOMMU_MAP_ENTRY    120       0       0           0       0     126          0        0
    mbuf_jumbo_16k  16384       0       0           0       0     254          0        0
     mbuf_jumbo_9k   9216       0       0           0       0     254          0        0
      audit_record   1280       0       0           0       0       8          0        0
        MAC labels     40       0       0           0       0     254          0        0
            vnpbuf   2624       0       0           0       0      64          0        0
            mdpbuf   2624       0       0           0       0       3          0        0
           nfspbuf   2624       0       0           0       0      16          0        0
            swwbuf   2624       0       0           0       0       8          0        0
            swrbuf   2624       0       0           0       0      16          0        0
          umtx_shm     88       0       0           0       0     126          0        0
           umtx pi     96       0       0           0       0     126          0        0
rangeset pctrie nodes    144       0       0           0       0      62          0        0
      malloc-65536  65536       0       0           0       0       1          0        0
      malloc-65536  65536       0       0           0       0       1          0        0
      malloc-32768  32768       0       0           0       0       1          0        0
      malloc-32768  32768       0       0           0       0       1          0        0
      malloc-32768  32768       0       0           0       0       1          0        0
      malloc-32768  32768       0       0           0       0       1          0        0
      malloc-32768  32768       0       0           0       0       1          0        0
      malloc-16384  16384       0       0           0       0       1          0        0
      malloc-16384  16384       0       0           0       0       1          0        0
       malloc-4096   4096       0       0           0       0       2          0        0
       malloc-4096   4096       0       0           0       0       2          0        0
        malloc-512    512       0       0           0       0      30          0        0
           pcpu-32     32       0       0           0       0     254          0        0
            pcpu-4      4       0       0           0       0     254          0        0
            fakepg    104       0       0           0       0     126          0        0
          UMA Hash    256       0       0           0       0      62          0        0

Crashes (1):
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets Title
ci-freebsd-i386 2021/10/22 00:57 freebsd-src 01593a0ff9f1 c5cb7da8 console log report panic: condition vp->v_type == VDIR || VN_IS_DOOMED(vp) not met at /syzkaller/managers/i386/kernel/sys/kern/vfs_cache.c:
* Struck through repros no longer work on HEAD.