syzbot


panic: mb_free_extpg: m ADDR is not multipage!

Status: upstream: reported on 2024/04/09 00:18
Reported-by: syzbot+0bab19f8e67dc79799aa@syzkaller.appspotmail.com
First crash: 23d, last: 23d

Sample crash report:
panic: mb_free_extpg: m 0xfffffe0074029740 is not multipage!
cpuid = 0
time = 1712621850
KDB: stack backtrace:
db_trace_self_wrapper() at db_trace_self_wrapper+0xc6/frame 0xfffffe006ab021f0
kdb_backtrace() at kdb_backtrace+0xd0/frame 0xfffffe006ab02350
vpanic() at vpanic+0x26a/frame 0xfffffe006ab02510
panic() at panic+0xb5/frame 0xfffffe006ab025d0
mb_free_extpg() at mb_free_extpg+0x318/frame 0xfffffe006ab02690
m_free() at m_free+0x219/frame 0xfffffe006ab026d0
m_freem() at m_freem+0x48/frame 0xfffffe006ab026f0
uipc_sosend_stream_or_seqpacket() at uipc_sosend_stream_or_seqpacket+0x126d/frame 0xfffffe006ab02960
sousrsend() at sousrsend+0x117/frame 0xfffffe006ab029f0
kern_sendit() at kern_sendit+0x4fc/frame 0xfffffe006ab02b50
freebsd32_sendmsg() at freebsd32_sendmsg+0x515/frame 0xfffffe006ab02d10
ia32_syscall() at ia32_syscall+0x4aa/frame 0xfffffe006ab02f30
int0x80_syscall_common() at int0x80_syscall_common+0x9c/frame 0xdfffcf9c
KDB: enter: panic
[ thread pid 857 tid 100150 ]
Stopped at      kdb_enter+0x6e: movq    $0,0x23c8477(%rip)
db> 
db> set $lines = 0
db> set $maxwidth = 0
db> show registers
cs                        0x20
ds                        0x3b
es                        0x3b
fs                        0x13
gs                        0x1b
ss                           0
rax                       0x12
rcx         0xfffffe006d800000
rdx                    0x3ffff
rbx         0xffffffff826ed680  .str.27
rsp         0xfffffe006ab02330
rbp         0xfffffe006ab02350
rsi                    0x40001
rdi         0xffffffff815c0059  printf+0x149
r8                           0
r9                  0xffffffff
r10                          0
r11                       0x1f
r12         0xfffffe0074029740
r13         0xfffffffffffffffe
r14         0xffffffff826ed680  .str.27
r15                          0
rip         0xffffffff815acc1e  kdb_enter+0x6e
rflags                    0x46
kdb_enter+0x6e: movq    $0,0x23c8477(%rip)
db> show proc
Process 857 (syz-executor.0) at 0xfffffe006d680b00:
 state: NORMAL
 uid: 0  gids: 0, 0, 5
 parent: pid 770 at 0xfffffe0007ce95a0
 ABI: FreeBSD ELF32
 flag: 0x10000080  flag2: 0
 arguments: /root/syz-executor.0 exec
 reaper: 0xfffffe005420b040 reapsubtree: 1
 sigparent: 20
 vmspace: 0xfffffe007405a738
   (map 0xfffffe007405a738)
   (map.pmap 0xfffffe007405a7f8)
   (pmap 0xfffffe007405a868)
 threads: 2
100124                   RunQ                                syz-executor.0
100150                   Run     CPU 0                       syz-executor.0
db> ps
  pid  ppid  pgrp   uid  state   wmesg   wchan               cmd
  864   860   424     0  R                                   sh
  863   771   771     0  RV      CPU 1                       syz-executor.1
  862   780   780     0  R       (threaded)                  syz-executor.2
100133                   RunQ                                syz-executor.2
100152                   RunQ                                syz-executor.2
  860   781   424     0  S       wait    0xfffffe0007ce9040  sh
  857   770   770     0  R       (threaded)                  syz-executor.0
100124                   RunQ                                syz-executor.0
100150                   Run     CPU 0                       syz-executor.0
  854   798   798     0  R       (threaded)                  syz-executor.3
100144                   RunQ                                syz-executor.3
100148                   S       sbwait  0xfffffe006a8551cc  syz-executor.3
100153                   RunQ                                syz-executor.3
  848     0     0     0  DL      aiordy  0xfffffe006d6a05a0  [aiod5]
  847     0     0     0  DL      aiordy  0xfffffe006d6a0040  [aiod4]
  843     0     0     0  DL      aiordy  0xfffffe006d6805a0  [aiod3]
  842     0     0     0  DL      aiordy  0xfffffe006d0365a0  [aiod2]
  839     0     0     0  DL      aiordy  0xfffffe006d036b00  [aiod1]
  798   768   798     0  Ss      nanslp  0xffffffff83956480  syz-executor.3
  781   774   424     0  S       piperd  0xfffffe0058ac63e8  sh
  780   768   780     0  Rs                                  syz-executor.2
  774   424   424     0  S       wait    0xfffffe006d67eac0  sh
  771   768   771     0  Ds      ppwait  0xfffffe006d67ea60  syz-executor.1
  770   768   770     0  Ss      nanslp  0xffffffff83956480  syz-executor.0
  768   766   766     0  S       (threaded)                  syz-fuzzer
100108                   S       uwait   0xfffffe00578cac00  syz-fuzzer
100110                   S       uwait   0xfffffe00578cae00  syz-fuzzer
100111                   S       kqread  0xfffffe0007c82b00  syz-fuzzer
100112                   S       wait    0xfffffe0007ce8ae0  syz-fuzzer
100113                   S       uwait   0xfffffe005736d080  syz-fuzzer
100114                   S       uwait   0xfffffe005736d180  syz-fuzzer
100115                   S       uwait   0xfffffe005736d280  syz-fuzzer
100116                   S       wait    0xfffffe0007ce8ae0  syz-fuzzer
100117                   S       wait    0xfffffe0007ce8ae0  syz-fuzzer
100123                   S       wait    0xfffffe0007ce8ae0  syz-fuzzer
100130                   S       uwait   0xfffffe0007980200  syz-fuzzer
100143                   S       uwait   0xfffffe0057370f00  syz-fuzzer
  766   764   766     0  Ss      pause   0xfffffe005420c670  csh
  764   682   764     0  Ss      select  0xfffffe00078773c0  sshd
  748     1   748     0  Ss+     ttyin   0xfffffe0007d1e4b0  getty
  747     1   747     0  Ss+     ttyin   0xfffffe005879c8b0  getty
  746     1   746     0  Ss+     ttyin   0xfffffe0056ec00b0  getty
  745     1   745     0  Ss+     ttyin   0xfffffe00574c18b0  getty
  744     1   744     0  Ss+     ttyin   0xfffffe0056ec08b0  getty
  743     1   743     0  Ss+     ttyin   0xfffffe00574c30b0  getty
  742     1   742     0  Ss+     ttyin   0xfffffe0056ec10b0  getty
  741     1   741     0  Ss+     ttyin   0xfffffe0056ec18b0  getty
  740     1   740     0  Ss+     ttyin   0xfffffe0056ec20b0  getty
  738     1    18     0  S+      piperd  0xfffffe0058abb888  logger
  737   736    18     0  S+      nanslp  0xffffffff83956481  sleep
  736     1    18     0  S+      wait    0xfffffe00579ee5a0  sh
  686     1   686     0  Ss      nanslp  0xffffffff83956480  cron
  682     1   682     0  Ss      select  0xfffffe006d03e1c0  sshd
  495     1   495     0  Ds      bo_wwai 0xfffffe006d21bbe8  syslogd
  424     1   424     0  Ss      wait    0xfffffe006d035ae0  devd
  423     1   423    65  Ss      select  0xfffffe0007877840  dhclient
  338     1   338     0  Ss      select  0xfffffe0007877940  dhclient
  335     1   335     0  Ss      select  0xfffffe0007877e40  dhclient
   17     0     0     0  DL      syncer  0xffffffff83a73ba0  [syncer]
   16     0     0     0  DL      vlruwt  0xfffffe0007cea060  [vnlru]
   15     0     0     0  DL      (threaded)                  [bufdaemon]
100079                   D       psleep  0xffffffff83a72180  [bufdaemon]
100082                   D       -       0xffffffff82e02140  [bufspacedaemon-0]
100092                   D       sdflush 0xfffffe005898ece8  [/ worker]
    9     0     0     0  DL      psleep  0xffffffff83abb680  [vmdaemon]
    8     0     0     0  DL      (threaded)                  [pagedaemon]
100077                   D       psleep  0xffffffff83aa34f8  [dom0]
100080                   D       launds  0xffffffff83aa3504  [laundry: dom0]
100081                   D       umarcl  0xffffffff81d508d0  [uma]
    7     0     0     0  RL                                  [rand_harvestq]
    6     0     0     0  DL      pftm    0xffffffff84767bb0  [pf purge]
    5     0     0     0  DL      waiting 0xffffffff84398760  [sctp_iterator]
    4     0     0     0  DL      (threaded)                  [cam]
100044                   D       -       0xffffffff8369e340  [doneq0]
100045                   D       -       0xffffffff8369e2c0  [async]
100076                   D       -       0xffffffff8369e140  [scanner]
    3     0     0     0  DL      (threaded)                  [crypto]
100041                   D       crypto_ 0xffffffff83a9ed20  [crypto]
100042                   D       crypto_ 0xfffffe0007c85030  [crypto returns 0]
100043                   D       crypto_ 0xfffffe0007c85080  [crypto returns 1]
   14     0     0     0  DL      seqstat 0xfffffe0056f60c88  [sequencer 00]
   13     0     0     0  DL      (threaded)                  [geom]
100035                   D       -       0xffffffff838fee00  [g_event]
100036                   D       -       0xffffffff838fee20  [g_up]
100037                   D       -       0xffffffff838fee40  [g_down]
    2     0     0     0  WL      (threaded)                  [clock]
100029                   I                                   [clock (0)]
100030                   I                                   [clock (1)]
   12     0     0     0  WL      (threaded)                  [intr]
100012                   I                                   [swi6: task queue]
100013                   I                                   [swi6: Giant taskq]
100015                   I                                   [swi5: fast taskq]
100031                   I                                   [swi1: netisr 0]
100032                   I                                   [swi1: hpts]
100033                   I                                   [swi1: hpts]
100046                   I                                   [irq24: virtio_pci0]
100047                   I                                   [irq25: virtio_pci0]
100048                   I                                   [irq26: virtio_pci0]
100049                   I                                   [irq27: virtio_pci0]
100050                   I                                   [irq28: virtio_pci1]
100051                   I                                   [irq29: virtio_pci1]
100052                   I                                   [irq30: virtio_pci1]
100053                   I                                   [irq31: virtio_pci1]
100054                   I                                   [irq32: virtio_pci1]
100059                   I                                   [irq33: virtio_pci2]
100060                   I                                   [irq34: virtio_pci2]
100061                   I                                   [irq35: virtio_pci2]
100063                   I                                   [irq1: atkbd0]
100064                   I                                   [irq12: psm0]
100065                   I                                   [swi0: uart uart++]
100069                   I                                   [swi1: pf send]
   11     0     0     0  RL      (threaded)                  [idle]
100003                   CanRun                              [idle: cpu0]
100004                   CanRun                              [idle: cpu1]
    1     0     1     0  SLs     wait    0xfffffe005420b040  [init]
   10     0     0     0  DL      audit_w 0xffffffff83a9f780  [audit]
    0     0     0     0  DLs     (threaded)                  [kernel]
100000                   D       swapin  0xffffffff838ff7e0  [swapper]
100005                   D       -       0xfffffe00085f7d00  [softirq_0]
100006                   D       -       0xfffffe00085f7c00  [softirq_1]
100007                   D       -       0xfffffe00085f7b00  [if_io_tqg_0]
100008                   D       -       0xfffffe00085f7a00  [if_io_tqg_1]
100009                   D       -       0xfffffe00085f7900  [if_config_tqg_0]
100010                   D       -       0xfffffe00085f7800  [pci_hp taskq]
100011                   D       -       0xfffffe00085f7700  [kqueue_ctx taskq]
100014                   D       -       0xfffffe00085f7400  [thread taskq]
100016                   D       -       0xfffffe00085f7200  [aiod_kick taskq]
100017                   D       -       0xfffffe00085f7100  [deferred_unmount ta]
100018                   D       -       0xfffffe00085f7000  [inm_free taskq]
100019                   D       -       0xfffffe00085f6e00  [in6m_free taskq]
100020                   D       -       0xfffffe00085f6d00  [linuxkpi_irq_wq]
100021                   D       -       0xfffffe00085f6c00  [linuxkpi_short_wq_0]
100022                   D       -       0xfffffe00085f6c00  [linuxkpi_short_wq_1]
100023                   D       -       0xfffffe00085f6c00  [linuxkpi_short_wq_2]
100024                   D       -       0xfffffe00085f6c00  [linuxkpi_short_wq_3]
100025                   D       -       0xfffffe00085f6b00  [linuxkpi_long_wq_0]
100026                   D       -       0xfffffe00085f6b00  [linuxkpi_long_wq_1]
100027                   D       -       0xfffffe00085f6b00  [linuxkpi_long_wq_2]
100028                   D       -       0xfffffe00085f6b00  [linuxkpi_long_wq_3]
100034                   D       -       0xfffffe00085f6a00  [firmware taskq]
100039                   D       -       0xfffffe00085f6700  [crypto_0]
100040                   D       -       0xfffffe00085f6700  [crypto_1]
100055                   D       -       0xfffffe00085f6500  [vtnet0 rxq 0]
100056                   D       -       0xfffffe00085f6400  [vtnet0 txq 0]
100057                   D       -       0xfffffe00085f6300  [vtnet0 rxq 1]
100058                   D       -       0xfffffe00085f6200  [vtnet0 txq 1]
100062                   D       vtbslp  0xfffffe0007cbc380  [virtio_balloon]
100066                   D       -       0xffffffff826f28c0  [deadlkres]
100070                   D       -       0xfffffe005797ab00  [acpi_task_0]
100071                   D       -       0xfffffe005797ab00  [acpi_task_1]
100072                   D       -       0xfffffe005797ab00  [acpi_task_2]
100074                   D       -       0xfffffe00085f8100  [mca taskq]
100075                   D       -       0xfffffe00085f6600  [CAM taskq]
db> show all locks
Process 854 (syz-executor.3) thread 0xfffffe0074029000 (100148)
exclusive sx so_rcv_sx (so_rcv_sx) r = 0 (0xfffffe006a855180) locked @ /syzkaller/managers/i386/kernel/sys/kern/uipc_socket.c:4029
Process 495 (syslogd) thread 0xfffffe006a622740 (100094)
exclusive lockmgr ufs (ufs) r = 0 (0xfffffe006d21baf0) locked @ /syzkaller/managers/i386/kernel/sys/kern/vfs_syscalls.c:3581
db> show malloc
              Type        InUse        MemUse     Requests
           pf_hash            5        11524K            5
            linker          371         4934K          481
          tcp_hpts            7         4801K            7
            devbuf         4192         4324K         4217
         sysctloid        34865         2055K        34936
             vtbuf           24         1968K           46
              kobj          326         1304K          488
            newblk          708         1201K          731
          vfscache            3         1025K            3
               pcb           29          675K           69
          inodedep           77          541K          100
         ufs_quota            1          512K            1
          vfs_hash            1          512K            1
           callout            2          512K            2
              intr            4          472K            4
           subproc          124          254K          932
         vnet_data            2          224K            2
          acpitask            1          224K            1
            KTRACE          100          200K          100
            acpica         1674          184K        60830
           tidhash            3          141K            3
          filedesc           18          137K           89
           pagedep           25          134K           38
              vmem            3          134K            4
        tfo_ccache            1          128K            1
          IP reass            1          128K            1
            DEVFS1          109          109K          126
               sem            4          106K            4
        gtaskqueue           18           98K           18
               bus          985           81K         5155
          mtx_pool            2           72K            2
          syncache            1           68K            1
     NFSD srvcache            3           68K            3
            module          513           65K          513
       ddb_capture            1           64K            1
           kdtrace          200           40K         1019
              temp           35           37K         1818
              umtx          288           36K          288
         hostcache            1           32K            1
               shm            1           32K            1
            DEVFS3          128           32K          138
               msg            4           30K            4
            kbdmux            6           28K            6
        DEVFS_RULE           56           20K           56
            ifaddr           66           19K           68
               BPF           14           19K           14
         ufs_mount            4           17K            5
              proc            3           17K            3
               LRO           16           17K           16
               tty           16           16K           16
           ithread           97           16K           97
          routetbl          124           16K          395
            bus-sc           34           15K         1687
      eventhandler          162           14K          162
           lltable           42           13K           42
             ifnet            7           13K            7
       ether_multi          152           13K          162
              kenv           95           12K           95
              GEOM           61           11K          481
              rman           86           11K          451
         CAM queue            5           11K         1528
         in6_multi           65            9K           65
         bmsafemap            2            9K           67
               rpc            4            9K            4
           devstat            4            9K            4
              UART           12            9K           12
              ksem            1            8K            1
             shmfd            1            8K            1
       pfs_vncache            1            8K            1
     audit_evclass          238            8K          300
         taskqueue           63            7K           63
            dirrem           26            7K           37
            sglist            6            7K            6
           CAM DEV            3            6K          510
            diradd           47            6K           67
            kqueue           59            6K          869
              cred           23            6K          227
         pfs_nodes           22            6K           22
            plimit           21            6K          333
             hhook           15            5K           17
       ufs_dirhash           24            5K           24
               UMA          267            5K          267
          pf_ifnet           10            5K           19
                vt           11            5K           11
           memdesc            1            4K            1
               MCA           32            4K           32
             evdev            4            4K            4
            DEVFSP           60            4K           66
           pwddesc           57            4K          865
           acpisem           28            4K           28
             mkdir           26            4K           56
          kcovinfo           52            4K           52
           session           24            3K           33
          terminal           11            3K           11
          indirdep           10            3K           10
         proc-args           78            3K         1901
             clone            9            3K            9
           uidinfo            3            3K            7
            ip6ndp           13            3K           14
        local_apic            1            2K            1
           io_apic            1            2K            1
         ipsec-saq            2            2K            2
         newdirblk           15            2K           28
            Unitno           29            2K           49
          sctp_ifa           13            2K           14
           CAM XPT           22            2K          543
             lockf           15            2K           22
         sctp_atcl            4            2K           13
               msi           12            2K           12
            CC Mem            6            2K           18
          in_multi            6            2K            8
               tun            4            2K            4
         toponodes            6            2K            6
       ipsecpolicy            2            2K            2
           acpidev           20            2K           20
             selfd           19            2K        11301
          freefile            9            2K           18
         sctp_stro            1            1K            3
           softdep            1            1K            1
            sahead            1            1K            1
          secasvar            1            1K            1
             nhops            6            1K            8
       vnodemarker            2            1K            8
      NFSD session            1            1K            1
            select            7            1K           26
        CAM periph            4            1K          271
             ipsec            3            1K            3
          sctp_ifn            6            1K           14
               mld            6            1K            6
              igmp            6            1K            6
              pfil            6            1K            6
            isadev            6            1K            6
             mount           16            1K           89
          pci_link           10            1K           10
            crypto            4            1K            4
 encap_export_host           12            1K           12
         sctp_timw            2            1K            2
           netlink            2            1K           27
              cdev            2            1K            2
               osd           11            1K           31
       lkpikmalloc            8            1K            9
       inpcbpolicy           13            1K          180
    chacha20random            1            1K            1
            biobuf            1            1K            1
            vnodes            1            1K            1
      NFSD lckfile            1            1K            1
     NFSD V4client            1            1K            1
             DEVFS            9            1K           10
           CAM SIM            2            1K            2
            feeder            7            1K            7
         sctp_atky            5            1K           17
           tcpfunc            3            1K            3
        loginclass            3            1K            6
            prison            6            1K            6
               aio            5            1K            5
         cryptodev            2            1K           43
          nexusdev            8            1K            8
            apmdev            1            1K            1
          atkbddev            2            1K            2
          freefrag            1            1K            2
          procdesc            1            1K            6
          pmchooks            1            1K            1
          CAM path            4            1K         1034
     CAM dev queue            2            1K            2
 CAM I/O Scheduler            1            1K            1
            soname            4            1K         3326
          filecaps            4            1K           66
          sctp_vrf            1            1K            1
         sctp_athm            4            1K           13
              vnet            1            1K            1
               pmc            1            1K            1
           entropy            2            1K           37
          acpiintr            1            1K            1
          sctp_map            2            1K            6
              cpus            2            1K            2
    vnet_data_free            1            1K            1
           Per-cpu            1            1K            1
          freework            1            1K           35
               iov            1            1K        13781
          p1003.1b            1            1K            1
            mqdata            0            0K            0
           filemon            0            0K            1
          pf_table            0            0K            0
           pf_rule            0            0K            0
           pf_altq            0            0K            0
           pf_osfp            0            0K            0
     pf_krule_item            0            0K            0
           pf_temp            0            0K            0
            ipcomp            0            0K            0
               esp            0            0K            0
                ah            0            0K            0
      tcp_pcm_rack            0            0K            4
       tcp_do_rack            0            0K            0
      tcp_fsb_rack            0            0K            8
        sctp_mcore            0            0K            0
        sctp_socko            0            0K            6
         sctp_iter            0            0K           12
         sctp_mvrf            0            0K            0
         sctp_cpal            0            0K            0
         sctp_cmsg            0            0K            0
         sctp_stre            0            0K            0
         sctp_athi            0            0K            0
         sctp_a_it            0            0K           12
         sctp_aadr            0            0K            2
         sctp_stri            0            0K            0
        madt_table            0            0K            2
          smartpqi            0            0K            0
               ixl            0            0K            0
        ice-resmgr            0            0K            0
         ice-osdep            0            0K            0
               ice            0            0K            0
              iavf            0            0K            0
             axgbe            0            0K            0
       fpukern_ctx            0            0K            0
          xen_intr            0            0K            0
           xen_hvm            0            0K            0
         legacydrv            0            0K            0
            bounce            0            0K            0
            busdma            0            0K            0
            qpidrv            0            0K            0
      dmar_idpgtbl            0            0K            0
          dmar_dom            0            0K            0
          dmar_ctx            0            0K            0
              isci            0            0K            0
      iommu_dmamap            0            0K            0
     hyperv_socket            0            0K            0
           bxe_ilt            0            0K            0
        aesni_data            0            0K            0
            xenbus            0            0K            0
     vm_fictitious            0            0K            0
           UMAHash            0            0K            0
         vm_pgdata            0            0K            0
           jblocks            0            0K            0
          savedino            0            0K           15
          sentinel            0            0K            0
            jfsync            0            0K            0
            jtrunc            0            0K            0
             sbdep            0            0K            2
           jsegdep            0            0K            0
              jseg            0            0K            0
         jfreefrag            0            0K            0
          jfreeblk            0            0K            0
           jnewblk            0            0K            0
            jmvref            0            0K            0
           jremref            0            0K            0
           jaddref            0            0K            0
           freedep            0            0K            0
          freeblks            0            0K           34
        allocindir            0            0K            0
       allocdirect            0            0K            0
          ufs_trim            0            0K            0
           mactemp            0            0K            0
     audit_trigger            0            0K            0
 audit_pipe_presel            0            0K            0
     audit_pipeent            0            0K            0
        audit_pipe            0            0K            0
      audit_evname            0            0K            0
         audit_bsm            0            0K            0
      audit_gidset            0            0K            0
        audit_text            0            0K            0
        audit_path            0            0K            0
        audit_data            0            0K            0
        audit_cred            0            0K            0
          ktls_ocf            0            0K            0
        MLX5EEPROM            0            0K            0
        MLX5EEPROM            0            0K            0
        MLX5EEPROM            0            0K            0
        MLX5EEPROM            0            0K            0
        MLX5EEPROM            0            0K            0
      MLX5E_TLS_RX            0            0K            0
        MLX5EEPROM            0            0K            0
         MLX5E_TLS            0            0K            0
        MLX5EEPROM            0            0K            0
        MLX5EEPROM            0            0K            0
        MLX5EEPROM            0            0K            0
            MLX5EN            0            0K            0
        MLX5EEPROM            0            0K            0
        MLX5EEPROM            0            0K            0
        MLX5EEPROM            0            0K            0
          MLX5DUMP            0            0K            0
        MLX5EEPROM            0            0K            0
        MLX5EEPROM            0            0K            0
        MLX5EEPROM            0            0K            0
       simple_attr            0            0K            0
          seq_file            0            0K            0
           lkpiskb            0            0K            0
             radix            0            0K            0
               idr            0            0K            0
          lkpindev            0            0K            0
           lkpimhi            0            0K            0
            lkpifw            0            0K            0
         lkpi80211            0            0K            0
               NLM            0            0K            0
    ipsec-spdcache            0            0K            0
         ipsec-reg            0            0K            0
        ipsec-misc            0            0K            0
      ipsecrequest            0            0K            0
            ip6opt            0            0K            3
       ip6_msource            0            0K            0
      ip6_moptions            0            0K            0
       in6_mfilter            0            0K            0
             frag6            0            0K            0
            tcplog            0            0K            0
        tcp_hwpace            0            0K            0
        ip_msource            0            0K            0
       ip_moptions            0            0K            0
        in_mfilter            0            0K            0
              ipid            0            0K            0
         80211scan            0            0K            0
      80211ratectl            0            0K            0
        80211power            0            0K            0
       80211nodeie            0            0K            0
         80211node            0            0K            0
      80211mesh_gt            0            0K            0
      80211mesh_rt            0            0K            0
         80211perr            0            0K            0
         80211prep            0            0K            0
         80211preq            0            0K            0
          80211dfs            0            0K            0
       80211crypto            0            0K            0
          80211vap            0            0K            0
             iflib            0            0K            0
              vlan            0            0K            0
               gif            0            0K            0
           ifdescr            0            0K            0
              zlib            0            0K           19
           fadvise            0            0K            0
           VN POLL            0            0K            0
            statfs            0            0K          192
     namei_tracker            0            0K            0
       export_host            0            0K            0
        cl_savebuf            0            0K            5
               lio            0            0K            4
               acl            0            0K            0
          mbuf_tag            0            0K            0
              ktls            0            0K            0
              accf            0            0K            0
               pts            0            0K            0
           timerfd            0            0K            0
          ioctlops            0            0K           95
           eventfd            0            0K            0
           Witness            0            0K            0
             stack            0            0K            0
              sbuf            0            0K          288
          firmware            0            0K            0
        compressor            0            0K            0
              SWAP            0            0K            0
         sysctltmp            0            0K          646
            sysctl            0            0K            3
              ekcd            0            0K            0
            dumper            0            0K            0
          sendfile            0            0K            0
              rctl            0            0K            0
             cache            0            0K            0
      prison_racct            0            0K            0
       Fail Points            0            0K            0
             sigio            0            0K            1
filedesc_to_leader            0            0K            0
               pwd            0            0K            0
       tty console            0            0K            0
         boottrace            0            0K            0
        isofs_node            0            0K            0
       isofs_mount            0            0K            0
     tr_raid5_data            0            0K            0
    tr_raid1e_data            0            0K            0
     tr_raid1_data            0            0K            0
     tr_raid0_data            0            0K            0
    tr_concat_data            0            0K            0
       md_sii_data            0            0K            0
   md_promise_data            0            0K            0
    md_nvidia_data            0            0K            0
   md_jmicron_data            0            0K            0
     md_intel_data            0            0K            0
       md_ddf_data            0            0K            0
         raid_data            0            0K           72
     geom_flashmap            0            0K            0
         tmpfs dir            0            0K            0
        tmpfs name            0            0K            0
       tmpfs mount            0            0K            0
     tmpfs extattr            0            0K            0
           NFS FHA            0            0K            0
         newnfsmnt            0            0K            0
  newnfsclient_req            0            0K            0
   NFSCL layrecall            0            0K            0
     NFSCL session            0            0K            0
     NFSCL sockreq            0            0K            0
     NFSCL devinfo            0            0K            0
     NFSCL flayout            0            0K            0
      NFSCL layout            0            0K            0
     NFSD rollback            0            0K            0
      NFSCL diroff            0            0K            0
       NEWdirectio            0            0K            0
        NEWNFSnode            0            0K            0
         NFSCL lck            0            0K            0
      NFSCL lckown            0            0K            0
      NFSCL client            0            0K            0
       NFSCL deleg            0            0K            0
        NFSCL open            0            0K            0
       NFSCL owner            0            0K            0
            NFS fh            0            0K            0
           NFS req            0            0K            0
     NFSD usrgroup            0            0K            0
       NFSD string            0            0K            0
       NFSD V4lock            0            0K            0
      NFSD V4state            0            0K            0
       msdosfs_fat            0            0K            0
     msdosfs_mount            0            0K            0
      msdosfs_node            0            0K            0
            DEVFS4            0            0K            0
            DEVFS2            0            0K            0
            gntdev            0            0K            0
       privcmd_dev            0            0K            0
        evtchn_dev            0            0K            0
          xenstore            0            0K            0
               xnb            0            0K            0
          xen_acpi            0            0K            0
              xbbd            0            0K            0
               xbd            0            0K            0
           Balloon            0            0K            0
          sysmouse            0            0K            0
            vtfont            0            0K            0
            pvscsi            0            0K            0
            USBdev            0            0K            0
               USB            0            0K            0
            twsbuf            0            0K            0
       tcp_log_dev            0            0K            0
      midi buffers            0            0K            0
             mixer            0            0K            0
              ac97            0            0K            0
             hdacc            0            0K            0
              hdac            0            0K            0
              hdaa            0            0K            0
       SIIS driver            0            0K            0
               PUC            0            0K            0
          ppbusdev            0            0K            0
            sr_iov            0            0K            0
               OCS            0            0K            0
               OCS            0            0K            0
              nvme            0            0K            0
               nvd            0            0K            0
            netmap            0            0K            0
            mwldev            0            0K            0
        MVS driver            0            0K            0
          mrsasbuf            0            0K            0
          mpt_user            0            0K            0
          mps_user            0            0K            0
            MPSSAS            0            0K            0
               mps            0            0K            0
          mpr_user            0            0K            0
            MPRSAS            0            0K            0
               mpr            0            0K            0
            mfibuf            0            0K            0
        md_sectors            0            0K            0
           md_disk            0            0K            0
           malodev            0            0K            0
               LED            0            0K            0
          ix_sriov            0            0K            0
                ix            0            0K            0
            ipsbuf            0            0K            0
         ciss_data            0            0K            0
         BACKLIGHT            0            0K            0
           ath_hal            0            0K            0
            athdev            0            0K            0
           ata_pci            0            0K            0
           ata_dma            0            0K            0
       ata_generic            0            0K            0
       AHCI driver            0            0K            0
               agp            0            0K            0
           acpipwr            0            0K            0
         acpi_perf            0            0K            0
         acpicmbat            0            0K            0
        aacraidcam            0            0K            0
       aacraid_buf            0            0K            0
            aaccam            0            0K            0
            aacbuf            0            0K            0
              zstd            0            0K            0
            XZ_DEC            0            0K            0
            nvlist            0            0K            0
          SCSI ENC            0            0K            0
           SCSI sa            0            0K            0
         scsi_pass            0            0K            0
           scsi_da            0            0K           69
            ata_da            0            0K            0
           scsi_ch            0            0K            0
           scsi_cd            0            0K            0
           nvme_da            0            0K            0
           CAM CCB            0            0K          523
     CAM ccb queue            0            0K            0
db> show uma
              Zone   Size    Used    Free    Requests  Sleeps  Bucket  Total Mem    XFree
   mbuf_jumbo_page   4096    8320    1078       18180       0     254   38494208        0
              mbuf    256    8607    1055       23604       0     254    2473472        0
          BUF TRIE    144     220   11568         526       0      62    1697472        0
        malloc-384    384    4223       7        4245       0      30    1624320        0
       malloc-4096   4096     389       5        1917       0       2    1613824        0
        malloc-128    128   11444     150       11505       0     126    1484032        0
       UMA Slabs 0    112   10742      16       10742       0     126    1204896        0
      malloc-65536  65536      15       1          18       0       1    1048576        0
      mbuf_cluster   2048     508       0         508       0     254    1040384        0
         vmem btag     56   15771     108       15771       0     254     889224        0
        RADIX NODE    144    5942     213       29574       0      62     886320        0
         FFS inode   1168     534      19         553       0       8     645904        0
         sctp_asoc   2256       1     254           3       0     254     575280        0
          lkpicurr    168       2    3094           2       0      62     520128        0
              pbuf   2624       0     198           0       0       2     519552        0
            socket    960      27     481        1392       0     254     487680        0
         VM OBJECT    264    1139      31       15513       0      30     308880        0
           sctp_ep   1144       3     256          10       0     254     296296        0
        256 Bucket   2048     125      19         998       0       8     294912        0
             VNODE    448     571      32         592       0      30     270144        0
            THREAD   1824     142       2         153       0       8     262656        0
         malloc-64     64    3855     240        3867       0     254     262080        0
      malloc-16384  16384      12       3          47       0       1     245760        0
       malloc-2048   2048     106      14         107       0       8     245760        0
         malloc-16     16   14406      94       14519       0     254     232000        0
            DEVCTL   1024      22     198         147       0       0     225280        0
        malloc-128    128    1307     212       28909       0     126     194432        0
        sctp_raddr    736       1     263           3       0     254     194304        0
        malloc-256    256     719      31         762       0      62     192000        0
         UMA Zones    768     239       0         239       0      16     183552        0
         malloc-32     32    5279     391        5310       0     254     181440        0
            lkpimm     56       1    3095           1       0     254     173376        0
       malloc-2048   2048      12      60        1110       0       8     147456        0
       malloc-1024   1024     138       6         176       0      16     147456        0
       FFS2 dinode    256     534      36         552       0      62     145920        0
         MAP ENTRY     96    1225     287       44519       0     126     145152        0
     FPU_save_area    832     144      18         788       0      16     134784        0
      malloc-65536  65536       0       2          64       0       1     131072        0
      malloc-65536  65536       0       2         110       0       1     131072        0
             unpcb    256      10     500        1178       0     254     130560        0
        malloc-256    256     409     101        1099       0      62     130560        0
       mbuf_packet    256       0     508         232       0     254     130048        0
       S VFS Cache    104    1016     154        1068       0     126     121680        0
          ksiginfo    112      50     994         692       0     126     116928        0
        malloc-128    128     664     235        1746       0     126     115072        0
      malloc-32768  32768       3       0           3       0       1      98304        0
              PROC   1376      56      10         864       0       8      90816        0
          UMA Kegs    384     226       7         226       0      30      89472        0
        128 Bucket   1024      46      37         256       0      16      84992        0
         filedesc0   1072      57      20         865       0       8      82544        0
       malloc-4096   4096      17       3          33       0       2      81920        0
       malloc-8192   8192       8       1          10       0       1      73728        0
             g_bio    408       4     176        4853       0      30      73440        0
         malloc-64     64     643     428       15212       0     254      68544        0
        malloc-128    128     380     147         415       0     126      67456        0
        malloc-128    128     308     219         481       0     126      67456        0
      malloc-65536  65536       1       0           1       0       1      65536        0
      malloc-65536  65536       1       0           1       0       1      65536        0
      malloc-32768  32768       2       0           2       0       1      65536        0
      malloc-32768  32768       1       1          12       0       1      65536        0
      malloc-32768  32768       2       0           2       0       1      65536        0
      malloc-32768  32768       0       2         120       0       1      65536        0
       malloc-8192   8192       6       1           8       0       1      57344        0
       malloc-4096   4096      10       4          22       0       2      57344        0
         64 Bucket    512      64      40        1559       0      30      53248        0
         malloc-64     64     399     420        2098       0     254      52416        0
         malloc-64     64     471     348         927       0     254      52416        0
        malloc-256    256      64     131         764       0      62      49920        0
        malloc-256    256      74     121         201       0      62      49920        0
        malloc-256    256      75     120         649       0      62      49920        0
         32 Bucket    256      56     139         617       0      62      49920        0
           DIRHASH   1024      35      13          35       0      16      49152        0
             NAMEI   1024       0      48       12979       0      16      49152        0
       malloc-2048   2048      15       9          31       0       8      49152        0
       malloc-1024   1024      10      38        1496       0      16      49152        0
          syncache    168       0     264           4       0     254      44352        0
            pcpu-8      8    4692     428        4848       0     254      40960        0
           VMSPACE    616      34      32         846       0      16      40656        0
              pipe    728      22      33         327       0      16      40040        0
        sctp_chunk    152       0     260           1       0     254      39520        0
         udp_inpcb    416       6      84         157       0      30      37440        0
         malloc-64     64      31     536       11337       0     254      36288        0
         malloc-64     64      99     468         794       0     254      36288        0
         malloc-64     64      71     496         889       0     254      36288        0
         malloc-64     64      25     542          29       0     254      36288        0
        malloc-128    128       5     274           6       0     126      35712        0
        malloc-128    128      42     237        3298       0     126      35712        0
        malloc-128    128      65     214          72       0     126      35712        0
     routing nhops    256      26     109          33       0      62      34560        0
           ttyoutq    256      72      63         160       0      62      34560        0
        malloc-384    384      89       1         112       0      30      34560        0
        malloc-384    384      68      22         411       0      30      34560        0
        malloc-256    256      62      73         203       0      62      34560        0
        malloc-256    256      11     124         125       0      62      34560        0
        malloc-256    256      23     112         369       0      62      34560        0
      malloc-16384  16384       2       0           2       0       1      32768        0
      malloc-16384  16384       0       2         160       0       1      32768        0
       malloc-8192   8192       3       1          29       0       1      32768        0
       malloc-2048   2048       4      12          16       0       8      32768        0
       malloc-2048   2048       0      16          40       0       8      32768        0
       malloc-2048   2048       3      13         194       0       8      32768        0
       malloc-2048   2048       5      11          12       0       8      32768        0
       malloc-1024   1024       2      30          42       0      16      32768        0
       malloc-1024   1024       1      31           4       0      16      32768        0
       malloc-1024   1024       5      27          10       0      16      32768        0
       malloc-1024   1024      10      22         175       0      16      32768        0
        malloc-512    512       9      55         127       0      30      32768        0
        malloc-512    512       3      61          38       0      30      32768        0
        malloc-512    512       4      60          14       0      30      32768        0
        malloc-512    512       4      60          55       0      30      32768        0
           pcpu-64     64     488      24         488       0     254      32768        0
            ttyinq    160     135      65         300       0      62      32000        0
              PGRP    120      24     240          33       0     126      31680        0
            clpbuf   2624       0      12          25       0       4      31488        0
         tcp_inpcb   1304       6      18          18       0       8      31296        0
        sctp_laddr     48       4     584          23       0     254      28224        0
         malloc-32     32     278     604        3289       0     254      28224        0
         16 Bucket    144      47     149         271       0      62      28224        0
          4 Bucket     48       6     582           9       0     254      28224        0
            da_ccb    544       1      48        1340       0      16      26656        0
         TURNSTILE    136     145      44         145       0      62      25704        0
            cpuset    200       7     121           7       0      62      25600        0
       malloc-8192   8192       1       2         102       0       1      24576        0
       malloc-8192   8192       1       2          20       0       1      24576        0
       malloc-8192   8192       3       0           3       0       1      24576        0
       malloc-4096   4096       2       4         194       0       2      24576        0
      tcp_rack_pcb   1216       0      20           4       0       8      24320        0
    ertt_txseginfo     40       0     606         373       0     254      24240        0
          rl_entry     40      38     568          38       0     254      24240        0
               PWD     40      17     589         115       0     254      24240        0
           rtentry    168      29     115          33       0      62      24192        0
             Files     80     177     123        7138       0     126      24000        0
          8 Bucket     80      50     250         308       0     126      24000        0
             ripcb    384       1      59           5       0      30      23040        0
        malloc-384    384      11      49          11       0      30      23040        0
        malloc-384    384       1      59           8       0      30      23040        0
        malloc-384    384       1      59          24       0      30      23040        0
        malloc-384    384      21      39          24       0      30      23040        0
        SLEEPQUEUE     88     145     111         145       0     126      22528        0
         hostcache     64       1     314           1       0     254      20160        0
   udp_inpcb ports     32       3     627          33       0     254      20160        0
              ertt     72       6     274          18       0     126      20160        0
         malloc-32     32      82     548          84       0     254      20160        0
         malloc-32     32     193     437        1686       0     254      20160        0
         malloc-32     32     101     529         249       0     254      20160        0
         malloc-32     32      19     611         231       0     254      20160        0
         malloc-32     32      58     572         945       0     254      20160        0
         malloc-32     32      29     601          57       0     254      20160        0
          2 Bucket     32      55     575         329       0     254      20160        0
             KNOTE    160      32      93         388       0      62      20000        0
            AIOLIO    272       0      70           2       0      30      19040        0
 epoch_record pcpu    256       4      60           4       0      62      16384        0
      malloc-16384  16384       1       0           1       0       1      16384        0
       malloc-8192   8192       2       0           2       0       1      16384        0
       malloc-4096   4096       3       1           3       0       2      16384        0
       malloc-1024   1024       8       8           8       0      16      16384        0
        malloc-512    512       1      31           1       0      30      16384        0
           SMR CPU     32       7     504           7       0     254      16352        0
               AIO    208       0      76           2       0      62      15808        0
              kenv    258      17      43        1071       0      30      15480        0
            mqnode    416       3      33           3       0      30      14976        0
              vmem   1856       1       7           1       0       8      14848        0
        SMR SHARED     24       7     504           7       0     254      12264        0
   tcp_inpcb ports     32       3     375           5       0     254      12096        0
         malloc-16     16      28     722          67       0     254      12000        0
         malloc-16     16     312     438         480       0     254      12000        0
         malloc-16     16      48     702         106       0     254      12000        0
         malloc-16     16       2     748          95       0     254      12000        0
         malloc-16     16     222     528        4492       0     254      12000        0
         malloc-16     16      29     721       27782       0     254      12000        0
         malloc-16     16      16     734          17       0     254      12000        0
       Mountpoints   2816       2       2           2       0       4      11264        0
       malloc-8192   8192       1       0           1       0       1       8192        0
       malloc-4096   4096       1       1           1       0       2       8192        0
      vtnet_tx_hdr     24       0     334        4195       0     254       8016        0
           pcpu-16     16       4     252           4       0     254       4096        0
       UMA Slabs 1    176       9      13           9       0      62       3872        0
        KMAP ENTRY     96      12      27          14       0       0       3744        0
       FFS1 dinode    128       0       0           0       0     126          0        0
           ada_ccb    272       0       0           0       0      30          0        0
             swblk    136       0       0           0       0      62          0        0
          swpctrie    144       0       0           0       0      62          0        0
   cdg_qdiffsample     16       0       0           0       0     254          0        0
   pf state scrubs     40       0       0           0       0     254          0        0
   pf frag entries     40       0       0           0       0     254          0        0
          pf frags    248       0       0           0       0      62          0        0
  pf table entries    160       0       0           0       0     254          0        0
pf table entry counters     64       0       0           0       0     254          0        0
   pf source nodes    152       0       0           0       0     254          0        0
     pf state keys     88       0       0           0       0     126          0        0
         pf states    360       0       0           0       0     254          0        0
           pf tags    104       0       0           0       0     126          0        0
          pf mtags    184       0       0           0       0      62          0        0
      tcp_rack_map    128       0       0           0       0     126          0        0
       tcp_bbr_pcb    832       0       0           0       0      16          0        0
       tcp_bbr_map    128       0       0           0       0     126          0        0
tfo_ccache_entries     80       0       0           0       0     126          0        0
               tfo      4       0       0           0       0     254          0        0
          sackhole     32       0       0           0       0     254          0        0
               ipq     56       0       0           0       0     254          0        0
   sctp_asconf_ack     48       0       0           0       0     254          0        0
       sctp_asconf     40       0       0           0       0     254          0        0
sctp_stream_msg_out    112       0       0           0       0     254          0        0
        sctp_readq    152       0       0           0       0     254          0        0
   tcp_log_id_node    120       0       0           0       0     126          0        0
 tcp_log_id_bucket    176       0       0           0       0      62          0        0
           tcp_log    416       0       0           0       0     254          0        0
          tcpreass     48       0       0           0       0     254          0        0
udplite_inpcb ports     32       0       0           0       0     254          0        0
     udplite_inpcb    416       0       0           0       0      30          0        0
       ripcb ports     32       0       0           0       0     254          0        0
    IPsec SA lft_c     16       0       0           0       0     254          0        0
            itimer    352       0       0           0       0      30          0        0
             AIOCB    552       0       0           0       0      16          0        0
        mqnotifier    216       0       0           0       0      62          0        0
            mvdata     64       0       0           0       0     254          0        0
            mqueue    248       0       0           0       0      62          0        0
        TMPFS node    232       0       0           0       0      62          0        0
           NCLNODE    608       0       0           0       0      16          0        0
     LTS VFS Cache    360       0       0           0       0      30          0        0
       L VFS Cache    320       0       0           0       0      30          0        0
     STS VFS Cache    144       0       0           0       0      62          0        0
           cryptop    280       0       0           0       0      30          0        0
  linux_dma_object     32       0       0           0       0     254          0        0
  linux_dma_pctrie    144       0       0           0       0      62          0        0
   IOMMU_MAP_ENTRY    104       0       0           0       0     126          0        0
    mbuf_jumbo_16k  16384       0       0           0       0     254          0        0
     mbuf_jumbo_9k   9216       0       0           0       0     254          0        0
      audit_record   1280       0       0           0       0       8          0        0
         domainset     40       0       0           0       0     254          0        0
        MAC labels     40       0       0           0       0     254          0        0
            vnpbuf   2624       0       0           0       0      16          0        0
           nfspbuf   2624       0       0           0       0       4          0        0
            swwbuf   2624       0       0           0       0       2          0        0
            swrbuf   2624       0       0           0       0       4          0        0
          umtx_shm     88       0       0           0       0     126          0        0
           umtx pi     96       0       0           0       0     126          0        0
rangeset pctrie nodes    144       0       0           0       0      62          0        0
      malloc-65536  65536       0       0           0       0       1          0        0
      malloc-65536  65536       0       0           0       0       1          0        0
      malloc-65536  65536       0       0           0       0       1          0        0
      malloc-32768  32768       0       0           0       0       1          0        0
      malloc-32768  32768       0       0           0       0       1          0        0
      malloc-32768  32768       0       0           0       0       1          0        0
      malloc-16384  16384       0       0           0       0       1          0        0
      malloc-16384  16384       0       0           0       0       1          0        0
      malloc-16384  16384       0       0           0       0       1          0        0
      malloc-16384  16384       0       0           0       0       1          0        0
       malloc-4096   4096       0       0           0       0       2          0        0
       malloc-4096   4096       0       0           0       0       2          0        0
       malloc-2048   2048       0       0           0       0       8          0        0
       malloc-1024   1024       0       0           0       0      16          0        0
        malloc-512    512       0       0           0       0      30          0        0
        malloc-512    512       0       0           0       0      30          0        0
        malloc-512    512       0       0           0       0      30          0        0
        malloc-384    384       0       0           0       0      30          0        0
           pcpu-32     32       0       0           0       0     254          0        0
            pcpu-4      4       0       0           0       0     254          0        0
            fakepg    104       0       0           0       0     126          0        0
          UMA Hash    256       0       0           0       0      62          0        0

Crashes (1):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2024/04/09 00:17 freebsd-src d80a97def9a1 f3234354 console log report ci-freebsd-i386 panic: mb_free_extpg: m ADDR is not multipage!
* Struck through repros no longer work on HEAD.