syzbot


Fatal trap NUM: page fault in pfi_kkif_update (4)

Status: upstream: reported on 2025/09/21 10:31
Reported-by: syzbot+78ac7d6a45abfdcff28d@syzkaller.appspotmail.com
First crash: 11d, last: 11d
Similar bugs (3)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
freebsd Fatal trap NUM: page fault in pfi_kkif_update -1 1 1463d 1463d 0/2 auto-closed as invalid on 2021/12/29 19:37
freebsd Fatal trap NUM: page fault in pfi_kkif_update (2) -1 1 1356d 1356d 0/2 auto-closed as invalid on 2022/04/15 20:45
freebsd Fatal trap NUM: page fault in pfi_kkif_update (3) -1 1 1190d 1190d 0/2 auto-obsoleted due to no activity on 2022/09/28 21:36

Sample crash report:
Fatal trap 12: page fault while in kernel mode
cpuid = 1; apic id = 01
fault virtual address	= 0xd0
fault code		= supervisor read data, page not present
instruction pointer	= 0x20:0xffffffff848750f8
stack pointer	        = 0x28:0xfffffe0056cd0320
frame pointer	        = 0x28:0xfffffe0056cd03f0
code segment		= base 0x0, limit 0xfffff, type 0x1b
			= DPL 0, pres 1, long 1, def32 0, gran 1
processor eflags	= interrupt enabled, resume, IOPL = 0
current process		= 773 (ifconfig)
rdi: 00000000000000d0 rsi: 0000000000000000 rdx: 0000000000000000

rcx: fffffe0002bf1850  r8: 0000000000000000  r9: 0000000000000001
rax: fffffe0000000000 rbx: fffffe000767f000 rbp: fffffe0056cd03f0

FreeBSD/amd64r10: 000100000000010f r11: 0000000000000013 r12: fffffe00541046c0
r13: fffffe00593e5d00 r14: 0000000000000000 r15: 0000000000000000
trap number		= 12
panic: page fault
cpuid = 1
time = 1758450626
KDB: stack backtrace:
db_trace_self_wrapper() at db_trace_self_wrapper+0xc6/frame 0xfffffe0056ccfb50
kdb_backtrace() at kdb_backtrace+0xd0/frame 0xfffffe0056ccfcb0
vpanic() at vpanic+0x257/frame 0xfffffe0056ccfe70
panic() at panic+0xb5/frame 0xfffffe0056ccff30
trap_pfault() at trap_pfault+0xaf2/frame 0xfffffe0056cd0070
trap() at trap+0x78e/frame 0xfffffe0056cd0250
calltrap() at calltrap+0x8/frame 0xfffffe0056cd0250
--- trap 0xc, rip = 0xffffffff848750f8, rsp = 0xfffffe0056cd0320, rbp = 0xfffffe0056cd03f0 ---
pfi_kkif_update() at pfi_kkif_update+0xe8/frame 0xfffffe0056cd03f0
pfi_kkif_update() at pfi_kkif_update+0x4cd/frame 0xfffffe0056cd04d0
pfi_ifaddr_event() at pfi_ifaddr_event+0x16c/frame 0xfffffe0056cd0590
srcaddr_change_event() at srcaddr_change_event+0x16e/frame 0xfffffe0056cd0670
in_control_ioctl() at in_control_ioctl+0x1a30/frame 0xfffffe0056cd0870
ifioctl() at ifioctl+0xe51/frame 0xfffffe0056cd0ab0
kern_ioctl() at kern_ioctl+0x4ca/frame 0xfffffe0056cd0b90
sys_ioctl() at sys_ioctl+0x36e/frame 0xfffffe0056cd0d10
amd64_syscall() at amd64_syscall+0x4e2/frame 0xfffffe0056cd0f30
fast_syscall_common() at fast_syscall_common+0xf8/frame 0xfffffe0056cd0f30
--- syscall (54, FreeBSD ELF64, ioctl), rip = 0x8241aa2ca, rsp = 0x820f63d58, rbp = 0x820f63da0 ---
KDB: enter: panic
[ thread pid 773 tid 100114 ]
Stopped at      kdb_enter+0x6e: movq    $0,0x259e0f7(%rip)
db> set $lines = 0
db> set $maxwidth = 0
db> show registers
cs                        0x20
ds                        0x3b
es                        0x3b
fs                        0x13
gs                        0x1b
ss                        0x28
rax                       0x12
rcx         0xfffffe0002bf1850
rdx                          0
rbx         0xffffffff828086a0  .str.27
rsp         0xfffffe0056ccfc90
rbp         0xfffffe0056ccfcb0
rsi                          0
rdi         0xffffffff81644349  printf+0x149
r8                           0
r9                  0xffffffff
r10                          0
r11                       0x17
r12         0xfffffe0054104000
r13         0xfffffffffffffffd
r14         0xffffffff828086a0  .str.27
r15                          0
rip         0xffffffff8162da9e  kdb_enter+0x6e
rflags                    0x46
kdb_enter+0x6e: movq    $0,0x259e0f7(%rip)
db> show proc
Process 773 (ifconfig) at 0xfffffe00540d6000:
 state: NORMAL
 uid: 0 gid: 0 supp gids: 0, 5
 parent: pid 764 at 0xfffffe00540d9570
 ABI: FreeBSD ELF64
 flag: 0x10004000  flag2: 0
 arguments: ifconfig tap1 inet 172.20.1.170 netmask 255.255.255.0
 reaper: 0xfffffe0007809010 reapsubtree: 1
 sigparent: 20
 vmspace: 0xfffffe00540bf248
   (map 0xfffffe00540bf248)
   (map.pmap 0xfffffe00540bf2e8)
   (pmap 0xfffffe00540bf358)
 threads: 1
100114                   Run     CPU 1                       ifconfig
db> ps
  pid  ppid  pgrp   uid  state   wmesg   wchan               cmd
  774   772   423     0  D       devfs   0xfffffe0059651908  sh
  773   764   764     0  R       CPU 1                       ifconfig
  772   423   423     0  S       wait    0xfffffe005400d570  sh
  766   762   766     0  D       devfs   0xfffffe0059651908  syz-executor
  765   762   765     0  D       devfs   0xfffffe0059651908  syz-executor
  764   762   764     0  S       wait    0xfffffe00540d9570  syz-executor
  763   762   763     0  L      *pf rule 0xfffffe00079f9e40  syz-executor
  762   760   760     0  R                                   syz-executor
  760   758   760     0  Ss      sigsusp 0xfffffe0007809b70  csh
  758   681   758     0  Ss      select  0xfffffe0057df7940  sshd
  747     1   747     0  Rs+     CPU 0                       getty
  746     1   746     0  Ss+     ttyin   0xfffffe005862f0b0  getty
  745     1   745     0  Ss+     ttyin   0xfffffe005862f4b0  getty
  744     1   744     0  Ss+     ttyin   0xfffffe005862f8b0  getty
  743     1   743     0  Ss+     ttyin   0xfffffe005862fcb0  getty
  742     1   742     0  Ss+     ttyin   0xfffffe00586300b0  getty
  741     1   741     0  Ss+     ttyin   0xfffffe00586304b0  getty
  740     1   740     0  Ss+     ttyin   0xfffffe00586308b0  getty
  739     1   739     0  Ss+     ttyin   0xfffffe0058630cb0  getty
  737     1    17     0  S+      piperd  0xfffffe006b4495c0  logger
  736   735    17     0  S+      nanslp  0xffffffff83bacc41  sleep
  735     1    17     0  S+      wait    0xfffffe0054004568  sh
  685     1   685     0  Ss      nanslp  0xffffffff83bacc40  cron
  681     1   681     0  Ss      select  0xfffffe0057ddbcc0  sshd
  494     1   494     0  Ds      biowr   0xfffffe0007c1d0e8  syslogd
  423     1   423     0  Ss      wait    0xfffffe005400c568  devd
  422     1   422    65  Ss      select  0xfffffe0057ddbe40  dhclient
  337     1   337     0  Ss      select  0xfffffe0057de0140  dhclient
  334     1   334     0  Ss      select  0xfffffe0058613840  dhclient
   16     0     0     0  DL      syncer  0xffffffff83cca820  [syncer]
   15     0     0     0  DL      vlruwt  0xfffffe0054002558  [vnlru]
   14     0     0     0  DL      (threaded)                  [bufdaemon]
100079                   D       psleep  0xffffffff83cc8d60  [bufdaemon]
100082                   D       -       0xffffffff83001ec0  [bufspacedaemon-0]
100093                   D       sdflush 0xfffffe005862dce8  [/ worker]
    9     0     0     0  DL      psleep  0xffffffff83d13cc0  [vmdaemon]
    8     0     0     0  DL      (threaded)                  [pagedaemon]
100077                   D       psleep  0xffffffff83cf9d88  [dom0]
100080                   D       launds  0xffffffff83cf9d94  [laundry: dom0]
100081                   D       umarcl  0xffffffff81e13ce0  [uma]
    7     0     0     0  RL                                  [rand_harvestq]
    6     0     0     0  DL      pftm    0xffffffff8483ff20  [pf purge]
    5     0     0     0  DL      waiting 0xffffffff8453c700  [sctp_iterator]
    4     0     0     0  DL      (threaded)                  [cam]
100045                   D       -       0xffffffff838ef340  [doneq0]
100046                   D       -       0xffffffff838ef2c0  [async]
100075                   D       -       0xffffffff838ef140  [scanner]
    3     0     0     0  DL      (threaded)                  [crypto]
100042                   D       crypto_ 0xffffffff83cf5660  [crypto]
100043                   D       crypto_ 0xfffffe0053ee4d30  [crypto returns 0]
100044                   D       crypto_ 0xfffffe0053ee4d80  [crypto returns 1]
   13     0     0     0  DL      (threaded)                  [geom]
100037                   D       -       0xffffffff83b55640  [g_event]
100038                   D       -       0xffffffff83b55660  [g_up]
100039                   D       -       0xffffffff83b55680  [g_down]
    2     0     0     0  WL      (threaded)                  [clock]
100031                   I                                   [clock (0)]
100032                   I                                   [clock (1)]
   12     0     0     0  WL      (threaded)                  [intr]
100013                   I                                   [swi6: task queue]
100014                   I                                   [swi6: Giant taskq]
100016                   I                                   [swi5: fast taskq]
100033                   I                                   [swi1: netisr 0]
100034                   I                                   [swi1: hpts]
100035                   I                                   [swi1: hpts]
100047                   I                                   [irq24: virtio_pci0]
100048                   I                                   [irq25: virtio_pci0]
100049                   I                                   [irq26: virtio_pci0]
100050                   I                                   [irq27: virtio_pci0]
100051                   I                                   [irq28: virtio_pci1]
100052                   I                                   [irq29: virtio_pci1]
100053                   I                                   [irq30: virtio_pci1]
100054                   I                                   [irq31: virtio_pci1]
100055                   I                                   [irq32: virtio_pci1]
100060                   I                                   [irq10: virtio_pci2]
100062                   I                                   [irq1: atkbd0]
100063                   I                                   [irq12: psm0]
100064                   I                                   [swi0: uart uart++]
100068                   I                                   [swi1: pf send]
   11     0     0     0  RL      (threaded)                  [idle]
100003                   CanRun                              [idle: cpu0]
100004                   CanRun                              [idle: cpu1]
    1     0     1     0  SLs     wait    0xfffffe0007809010  [init]
   10     0     0     0  DL      audit_w 0xffffffff83cf6100  [audit]
    0     0     0     0  DLs     (threaded)                  [kernel]
100000                   D       parked  0xffffffff84c51ff0  [swapper]
100005                   D       -       0xfffffe0053ea0100  [softirq_0]
100006                   D       -       0xfffffe0053ea0000  [softirq_1]
100007                   D       -       0xfffffe0053e9fe00  [if_io_tqg_0]
100008                   D       -       0xfffffe0053e9fd00  [if_io_tqg_1]
100009                   D       -       0xfffffe0053e9fc00  [if_config_tqg_0]
100010                   D       -       0xfffffe000776aa00  [kqueue_ctx taskq]
100011                   D       -       0xfffffe000776a900  [jail_remove taskq]
100012                   D       -       0xfffffe000776a800  [bus taskq]
100015                   D       -       0xfffffe000776a500  [thread taskq]
100017                   D       -       0xfffffe000776a300  [aiod_kick taskq]
100018                   D       -       0xfffffe000776a200  [deferred_unmount ta]
100019                   D       -       0xfffffe000776a100  [inm_free taskq]
100020                   D       -       0xfffffe000776a000  [in6m_free taskq]
100021                   D       -       0xfffffe0007769e00  [linuxkpi_irq_wq]
100022                   D       -       0xfffffe0007769d00  [linuxkpi_short_wq_0]
100023                   D       -       0xfffffe0007769d00  [linuxkpi_short_wq_1]
100024                   D       -       0xfffffe0007769d00  [linuxkpi_short_wq_2]
100025                   D       -       0xfffffe0007769d00  [linuxkpi_short_wq_3]
100026                   D       -       0xfffffe0007769c00  [linuxkpi_long_wq_0]
100027                   D       -       0xfffffe0007769c00  [linuxkpi_long_wq_1]
100028                   D       -       0xfffffe0007769c00  [linuxkpi_long_wq_2]
100029                   D       -       0xfffffe0007769c00  [linuxkpi_long_wq_3]
100036                   D       -       0xfffffe0007769a00  [firmware taskq]
100040                   D       -       0xfffffe0007769900  [crypto_0]
100041                   D       -       0xfffffe0007769900  [crypto_1]
100056                   D       -       0xfffffe0057de6d00  [vtnet0 rxq 0]
100057                   D       -       0xfffffe0057de6c00  [vtnet0 txq 0]
100058                   D       -       0xfffffe0057de6b00  [vtnet0 rxq 1]
100059                   D       -       0xfffffe0057de6a00  [vtnet0 txq 1]
100061                   D       vtbslp  0xfffffe0057de0380  [virtio_balloon]
100065                   D       -       0xffffffff8280cd80  [deadlkres]
100069                   D       -       0xfffffe00593fd500  [acpi_task_0]
100070                   D       -       0xfffffe00593fd500  [acpi_task_1]
100071                   D       -       0xfffffe00593fd500  [acpi_task_2]
100073                   D       -       0xfffffe000776ab00  [mca taskq]
100074                   D       -       0xfffffe0007769700  [CAM taskq]
100076                   D       -       0xfffffe00593fd400  [ipsec_offload]
db> show all locks
Process 773 (ifconfig) thread 0xfffffe0054104000 (100114)
exclusive rm pf rulesets (pf rulesets) r = 0 (0xfffffe00077e0c50) locked @ /syzkaller/managers/i386/kernel/sys/netpfil/pf/pf_if.c:1180
exclusive sx in_control (in_control) r = 0 (0xffffffff83ccf660) locked @ /syzkaller/managers/i386/kernel/sys/netinet/in.c:367
Process 763 (syz-executor) thread 0xfffffe00540cf780 (100102)
shared lockmgr devfs (devfs) r = 0 (0xfffffe0059651908) locked @ /syzkaller/managers/i386/kernel/sys/fs/devfs/devfs_vnops.c:375
Process 747 (getty) thread 0xfffffe00540eb780 (100108)
exclusive sleep mutex ttymtx (ttymtx) r = 0 (0xfffffe0058279c08) locked @ /syzkaller/managers/i386/kernel/sys/kern/tty.c:216
Process 494 (syslogd) thread 0xfffffe00540ba000 (100091)
exclusive lockmgr bufwait (bufwait) r = 0 (0xfffffe0007c1d168) locked @ /syzkaller/managers/i386/kernel/sys/kern/vfs_bio.c:4022
exclusive lockmgr ufs (ufs) r = 0 (0xfffffe006de15070) locked @ /syzkaller/managers/i386/kernel/sys/kern/vfs_syscalls.c:3676
db> show malloc
              Type        InUse        MemUse     Requests
           pf_hash            6        12804K            6
            linker          384         5188K          498
          tcp_hpts            7         4801K            7
            devbuf         4187         4324K         4212
         sysctloid        35125         2069K        35200
             vtbuf           24         1968K           46
              kobj          331         1324K          495
            newblk          324         1105K          340
          vfscache            3         1025K            3
               pcb           23          669K           41
          inodedep           62          535K           84
         ufs_quota            1          512K            1
          vfs_hash            1          512K            1
           callout            2          512K            2
              intr            4          472K            4
         vnet_data            2          224K            2
          acpitask            1          224K            1
           subproc          102          205K          831
            KTRACE          100          200K          100
            acpica         1674          184K        54444
              vmem            5          144K            7
           tidhash            3          141K            3
           pagedep           18          133K           22
        tfo_ccache            1          128K            1
          IP reass            1          128K            1
               sem            4          106K            4
            DEVFS1          104          104K          117
        gtaskqueue           18           98K           18
          filedesc           12           89K           25
               bus         1000           82K         5086
          mtx_pool            3           74K            3
          syncache            1           68K            1
     NFSD srvcache            3           68K            3
            module          523           66K          523
       ddb_capture            1           64K            1
         hostcache            1           32K            1
               shm            1           32K            1
           kdtrace          162           32K          892
            DEVFS3          123           31K          133
               msg            4           30K            4
              umtx          240           30K          240
            kbdmux            6           28K            6
              temp           23           21K         1653
        DEVFS_RULE           56           20K           56
               BPF           12           18K           12
         ufs_mount            4           17K            5
              proc            3           17K            3
               tty           16           16K           16
           ithread           90           15K           90
          routetbl           54           15K          162
            bus-sc           34           15K         1657
      eventhandler          163           14K          163
            ifaddr           44           14K           46
              kenv           95           12K           95
              GEOM           49           11K          431
         CAM queue            5           11K         1528
              rman           82           10K          437
               rpc            8            9K            8
              cred           23            9K          180
         bmsafemap            2            9K           51
            plimit           22            9K          317
             ifnet            5            9K            5
           devstat            4            9K            4
              UART           12            9K           12
              ksem            1            8K            1
             shmfd            1            8K            1
       pfs_vncache            1            8K            1
     audit_evclass          240            8K          306
         taskqueue           69            8K           69
            sglist            6            7K            6
           CAM DEV            3            6K          510
         pfs_nodes           22            6K           22
            dirrem           21            6K           37
           lltable           19            6K           19
       ufs_dirhash           24            5K           24
               UMA          268            5K          268
                vt           11            5K           11
          pf_ifnet            9            4K           12
           memdesc            1            4K            1
               MCA           32            4K           32
             evdev            4            4K            4
           acpisem           28            4K           28
            diradd           27            4K           47
            kqueue           47            3K          778
           pwddesc           46            3K          775
          terminal           11            3K           11
            DEVFSP           41            3K           44
          indirdep           10            3K           10
           session           20            3K           31
           acpidev           20            3K           20
         proc-args           75            3K         1709
             hhook            8            3K           10
             clone            9            3K            9
           uidinfo            3            3K            6
          kcovinfo           36            3K           36
           netlink            2            3K           34
               LRO            2            3K            2
        local_apic            1            2K            1
           io_apic            1            2K            1
         ipsec-saq            2            2K            2
            Unitno           30            2K           46
       ether_multi           22            2K           32
           CAM XPT           22            2K          543
         in6_multi           15            2K           15
             lockf           15            2K           22
         toponodes            6            2K            6
       ipsecpolicy            2            2K            2
             selfd           19            2K         5603
               msi            9            2K            9
           softdep            1            1K            1
         newdirblk            8            1K           12
             mkdir            8            1K           24
            sahead            1            1K            1
          secasvar            1            1K            1
       vnodemarker            2            1K            8
            select            8            1K           24
      NFSD session            1            1K            1
        CAM periph            4            1K          271
             ipsec            3            1K            3
          in_multi            3            1K            5
             nhops            6            1K            6
              pfil            6            1K            6
               tun            2            1K            2
            isadev            6            1K            6
             mount           16            1K           89
          pci_link           10            1K           10
          sctp_ifa            5            1K            6
            crypto            4            1K            4
 encap_export_host           12            1K           12
               osd            9            1K           23
          freefile            4            1K            9
            ip6ndp            5            1K            5
               mld            4            1K            4
            CC Mem            4            1K            6
              igmp            4            1K            4
              cdev            2            1K            2
       lkpikmalloc            8            1K            9
      counter_rate           13            1K           13
          sctp_ifn            3            1K            6
       inpcbpolicy           12            1K          115
    chacha20random            1            1K            1
            biobuf            1            1K            1
            vnodes            1            1K            1
      NFSD lckfile            1            1K            1
     NFSD V4client            1            1K            1
             DEVFS            9            1K           10
           CAM SIM            2            1K            2
            feeder            7            1K            7
           tcpfunc            3            1K            3
        loginclass            3            1K            5
            prison            6            1K            6
         cryptodev            2            1K           35
          nexusdev            8            1K            8
            apmdev            1            1K            1
          atkbddev            2            1K            2
          freefrag            1            1K            6
          procdesc            1            1K            6
          pmchooks            1            1K            1
          CAM path            4            1K         1034
     CAM dev queue            2            1K            2
 CAM I/O Scheduler            1            1K            1
            soname            4            1K         3269
          filecaps            4            1K           66
          sctp_vrf            1            1K            1
          freework            1            1K           26
              vnet            1            1K            1
               pmc            1            1K            1
           entropy            2            1K           31
          acpiintr            1            1K            1
              cpus            2            1K            2
    vnet_data_free            1            1K            1
           Per-cpu            1            1K            1
          p1003.1b            1            1K            1
          pf_table            0            0K            0
                pf            0            0K            0
           pf_rule            0            0K            0
           pf_altq            0            0K            0
           pf_osfp            0            0K            0
     pf_krule_item            0            0K            0
           pf_temp            0            0K            0
      tcp_pcm_rack            0            0K            0
       tcp_do_rack            0            0K            0
      tcp_fsb_rack            0            0K            0
            ipcomp            0            0K            0
               esp            0            0K            0
                ah            0            0K            0
           filemon            0            0K            0
            mqdata            0            0K            0
        sctp_mcore            0            0K            0
        sctp_socko            0            0K            0
         sctp_iter            0            0K            4
         sctp_mvrf            0            0K            0
         sctp_timw            0            0K            0
         sctp_cpal            0            0K            0
         sctp_cmsg            0            0K            0
         sctp_stre            0            0K            0
         sctp_athi            0            0K            0
         sctp_athm            0            0K            0
         sctp_atky            0            0K            0
         sctp_atcl            0            0K            0
         sctp_a_it            0            0K            4
         sctp_aadr            0            0K            0
         sctp_stro            0            0K            0
         sctp_stri            0            0K            0
          sctp_map            0            0K            0
        madt_table            0            0K            2
          smartpqi            0            0K            0
               ixl            0            0K            0
        ice-resmgr            0            0K            0
         ice-osdep            0            0K            0
               ice            0            0K            0
              iavf            0            0K            0
             axgbe            0            0K            0
       fpukern_ctx            0            0K            0
          xen_intr            0            0K            0
           xen_hvm            0            0K            0
         legacydrv            0            0K            0
      NMI handlers            0            0K            0
            bounce            0            0K            0
            busdma            0            0K            0
            qpidrv            0            0K            0
      dmar_idpgtbl            0            0K            0
          dmar_dom            0            0K            0
          dmar_ctx            0            0K            0
      amdiommu_dom            0            0K            0
      amdiommu_ctx            0            0K            0
              isci            0            0K            0
      iommu_dmamap            0            0K            0
     hyperv_socket            0            0K            0
           bxe_ilt            0            0K            0
        aesni_data            0            0K            0
            xenbus            0            0K            0
     vm_fictitious            0            0K            0
           UMAHash            0            0K            0
         vm_pgdata            0            0K            0
           jblocks            0            0K            0
          savedino            0            0K            9
          sentinel            0            0K            0
            jfsync            0            0K            0
            jtrunc            0            0K            0
             sbdep            0            0K            2
           jsegdep            0            0K            0
              jseg            0            0K            0
         jfreefrag            0            0K            0
          jfreeblk            0            0K            0
           jnewblk            0            0K            0
            jmvref            0            0K            0
           jremref            0            0K            0
           jaddref            0            0K            0
           freedep            0            0K            0
          freeblks            0            0K           25
        allocindir            0            0K            0
       allocdirect            0            0K            0
          ufs_trim            0            0K            0
           mactemp            0            0K            0
     audit_trigger            0            0K            0
 audit_pipe_presel            0            0K            0
     audit_pipeent            0            0K            0
        audit_pipe            0            0K            0
      audit_evname            0            0K            0
         audit_bsm            0            0K            0
      audit_gidset            0            0K            0
        audit_text            0            0K            0
        audit_path            0            0K            0
        audit_data            0            0K            0
        audit_cred            0            0K            0
          ktls_ocf            0            0K            0
        MLX5EEPROM            0            0K            0
        MLX5EEPROM            0            0K            0
        MLX5EEPROM            0            0K            0
        MLX5EEPROM            0            0K            0
        MLX5EEPROM            0            0K            0
      MLX5E_TLS_RX            0            0K            0
        MLX5EEPROM            0            0K            0
         MLX5E_TLS            0            0K            0
        MLX5EEPROM            0            0K            0
        MLX5EEPROM            0            0K            0
        MLX5EEPROM            0            0K            0
            MLX5EN            0            0K            0
        MLX5EEPROM            0            0K            0
        MLX5EEPROM            0            0K            0
        MLX5EEPROM            0            0K            0
        MLX5EEPROM            0            0K            0
        MLX5EEPROM            0            0K            0
        MLX5EEPROM            0            0K            0
        MLX5EEPROM            0            0K            0
          MLX5DUMP            0            0K            0
        MLX5EEPROM            0            0K            0
        MLX5EEPROM            0            0K            0
        MLX5EEPROM            0            0K            0
        MLX5EEPROM            0            0K            0
       simple_attr            0            0K            0
          seq_file            0            0K            0
           lkpiskb            0            0K            0
             radix            0            0K            0
               idr            0            0K            0
          lkpindev            0            0K            0
           lkpimhi            0            0K            0
            lkpifw            0            0K            0
         lkpi80211            0            0K            0
               NLM            0            0K            0
    ipsec-spdcache            0            0K            0
         ipsec-reg            0            0K            0
        ipsec-misc            0            0K            0
      ipsecrequest            0            0K            0
            ip6opt            0            0K            0
       ip6_msource            0            0K            0
      ip6_moptions            0            0K            0
       in6_mfilter            0            0K            0
             frag6            0            0K            0
            tcplog            0            0K            0
        tcp_hwpace            0            0K            0
        ip_msource            0            0K            0
       ip_moptions            0            0K            0
        in_mfilter            0            0K            0
              ipid            0            0K            0
         80211scan            0            0K            0
      80211ratectl            0            0K            0
        80211power            0            0K            0
       80211nodeie            0            0K            0
         80211node            0            0K            0
      80211mesh_gt            0            0K            0
      80211mesh_rt            0            0K            0
         80211perr            0            0K            0
         80211prep            0            0K            0
         80211preq            0            0K            0
          80211dfs            0            0K            0
       80211crypto            0            0K            0
          80211vap            0            0K            0
             iflib            0            0K            0
              vlan            0            0K            0
               gif            0            0K            0
           ifdescr            0            0K            0
              zlib            0            0K           20
           fadvise            0            0K            0
           VN POLL            0            0K            0
            statfs            0            0K          181
     namei_tracker            0            0K            0
           inotify            0            0K            0
       export_host            0            0K            0
        cl_savebuf            0            0K            7
               aio            0            0K            0
               lio            0            0K            0
               acl            0            0K            0
          mbuf_tag            0            0K            0
              ktls            0            0K            0
              accf            0            0K            0
               pts            0            0K            0
           timerfd            0            0K            0
               iov            0            0K        13052
          ioctlops            0            0K           79
           eventfd            0            0K            0
           Witness            0            0K            0
             stack            0            0K            0
              sbuf            0            0K          190
          firmware            0            0K            0
        compressor            0            0K            0
              SWAP            0            0K            0
         sysctltmp            0            0K          635
            sysctl            0            0K            3
              ekcd            0            0K            0
            dumper            0            0K            0
          sendfile            0            0K            0
              rctl            0            0K            0
             cache            0            0K            0
          jaildesc            0            0K            0
      prison_racct            0            0K            0
       Fail Points            0            0K            0
             sigio            0            0K            1
filedesc_to_leader            0            0K            0
               pwd            0            0K            0
       tty console            0            0K            0
         boottrace            0            0K            0
        isofs_node            0            0K            0
       isofs_mount            0            0K            0
     tr_raid5_data            0            0K            0
    tr_raid1e_data            0            0K            0
     tr_raid1_data            0            0K            0
     tr_raid0_data            0            0K            0
    tr_concat_data            0            0K            0
       md_sii_data            0            0K            0
   md_promise_data            0            0K            0
    md_nvidia_data            0            0K            0
   md_jmicron_data            0            0K            0
     md_intel_data            0            0K            0
       md_ddf_data            0            0K            0
         raid_data            0            0K           72
     geom_flashmap            0            0K            0
         tmpfs dir            0            0K            0
        tmpfs name            0            0K            0
       tmpfs mount            0            0K            0
     tmpfs extattr            0            0K            0
           NFS FHA            0            0K            0
         newnfsmnt            0            0K            0
  newnfsclient_req            0            0K            0
   NFSCL layrecall            0            0K            0
     NFSCL session            0            0K            0
     NFSCL sockreq            0            0K            0
     NFSCL devinfo            0            0K            0
     NFSCL flayout            0            0K            0
      NFSCL layout            0            0K            0
     NFSD rollback            0            0K            0
      NFSCL diroff            0            0K            0
        NEWNFSnode            0            0K            0
         NFSCL lck            0            0K            0
      NFSCL lckown            0            0K            0
      NFSCL client            0            0K            0
       NFSCL deleg            0            0K            0
        NFSCL open            0            0K            0
       NFSCL owner            0            0K            0
            NFS fh            0            0K            0
           NFS req            0            0K            0
     NFSD usrgroup            0            0K            0
       NFSD string            0            0K            0
       NFSD V4lock            0            0K            0
      NFSD V4state            0            0K            0
       msdosfs_fat            0            0K            0
     msdosfs_mount            0            0K            0
      msdosfs_node            0            0K            0
            DEVFS4            0            0K            0
            DEVFS2            0            0K            0
            gntdev            0            0K            0
       privcmd_dev            0            0K            0
        evtchn_dev            0            0K            0
          xenstore            0            0K            0
               xnb            0            0K            0
          xen_acpi            0            0K            0
              xbbd            0            0K            0
               xbd            0            0K            0
           Balloon            0            0K            0
          sysmouse            0            0K            0
            vtfont            0            0K            0
            pvscsi            0            0K            0
            USBdev            0            0K            0
               USB            0            0K            0
            ufshci            0            0K            0
            twsbuf            0            0K            0
       tcp_log_dev            0            0K            0
      midi buffers            0            0K            0
             mixer            0            0K            0
              ac97            0            0K            0
             hdacc            0            0K            0
              hdac            0            0K            0
              hdaa            0            0K            0
       SIIS driver            0            0K            0
               PUC            0            0K            0
          ppbusdev            0            0K            0
            sr_iov            0            0K            0
               OCS            0            0K            0
               OCS            0            0K            0
              nvme            0            0K            0
               nvd            0            0K            0
            netmap            0            0K            0
            mwldev            0            0K            0
        MVS driver            0            0K            0
         mpi3mrbuf            0            0K            0
          mrsasbuf            0            0K            0
          mpt_user            0            0K            0
          mps_user            0            0K            0
            MPSSAS            0            0K            0
               mps            0            0K            0
          mpr_user            0            0K            0
            MPRSAS            0            0K            0
               mpr            0            0K            0
            mfibuf            0            0K            0
        md_sectors            0            0K            0
           md_disk            0            0K            0
           malodev            0            0K            0
               LED            0            0K            0
          ix_sriov            0            0K            0
                ix            0            0K            0
            ipsbuf            0            0K            0
         ciss_data            0            0K            0
         BACKLIGHT            0            0K            0
           ath_hal            0            0K            0
            athdev            0            0K            0
           ata_pci            0            0K            0
           ata_dma            0            0K            0
       ata_generic            0            0K            0
       AHCI driver            0            0K            0
               agp            0            0K            0
           acpipwr            0            0K            0
         acpi_perf            0            0K            0
         acpicmbat            0            0K            0
        aacraidcam            0            0K            0
       aacraid_buf            0            0K            0
            aaccam            0            0K            0
            aacbuf            0            0K            0
              zstd            0            0K            0
            XZ_DEC            0            0K            0
            nvlist            0            0K            0
          SCSI ENC            0            0K            0
           SCSI sa            0            0K            0
         scsi_pass            0            0K            0
           scsi_da            0            0K           70
            ata_da            0            0K            0
           scsi_ch            0            0K            0
           scsi_cd            0            0K            0
           nvme_da            0            0K            0
           CAM CCB            0            0K          523
     CAM ccb queue            0            0K            0
db> show uma
              Zone   Size    Used    Free    Requests  Sleeps  Bucket  Total Mem    XFree
   mbuf_jumbo_page   4096    8320    1078       12023       0     254   38494208        0
              mbuf    256    8578    1084       13577       0     254    2473472        0
          BUF TRIE    152     188   11616         368       0      62    1794208        0
        malloc-384    384    4138      32        4150       0      30    1601280        0
        malloc-128    128   11543     175       11553       0     126    1499904        0
       malloc-4096   4096     334       4         577       0       2    1384448        0
       UMA Slabs 0    112   10880      22       10880       0     126    1221024        0
           tcp_log    416     558    1989        2940       0     254    1059552        0
      mbuf_cluster   2048     508       0         508       0     254    1040384        0
      malloc-65536  65536      14       0          17       0       1     917504        0
        RADIX NODE    152    5753     144       24585       0      62     896344        0
         vmem btag     56   15839     112       15839       0     254     893256        0
         FFS inode   1168     527      19         536       0       8     637728        0
            socket   1024      21     487        1266       0     254     520192        0
          lkpicurr    168       2    3094           2       0      62     520128        0
              pbuf   2624       0     198           0       0       2     519552        0
         VM OBJECT    248    1023      97       12440       0      62     277760        0
             VNODE    440     559      44         570       0      30     265320        0
        256 Bucket   2048     121       7         990       0       8     262144        0
         malloc-64     64    3855     240        3859       0     254     262080        0
       malloc-2048   2048     107      13         348       0       8     245760        0
         malloc-16     16   14471     279       14533       0     254     236000        0
            THREAD   1860     115       5         116       0       8     223200        0
            DEVCTL   1024       5     211         130       0       0     221184        0
       malloc-4096   4096      52       2         781       0       2     221184        0
         UMA Zones    768     240       4         240       0      16     187392        0
         malloc-32     32    5321     349        5365       0     254     181440        0
        malloc-128    128    1211     184       25546       0     126     178560        0
            lkpimm     56       1    3095           1       0     254     173376        0
             unpcb    320       8     508        1134       0     254     165120        0
       malloc-1024   1024     115      29         295       0      16     147456        0
       FFS2 dinode    256     527      43         536       0      62     145920        0
      malloc-65536  65536       0       2          44       0       1     131072        0
      malloc-65536  65536       0       2         110       0       1     131072        0
      malloc-65536  65536       2       0           2       0       1     131072        0
      malloc-65536  65536       1       1           9       0       1     131072        0
      malloc-32768  32768       2       2          13       0       1     131072        0
       mbuf_packet    256       0     508          92       0     254     130048        0
       S VFS Cache    104     989     181        1024       0     126     121680        0
         MAP ENTRY     96    1089     171       38153       0     126     120960        0
          ksiginfo    112      39    1005          54       0     126     116928        0
      malloc-16384  16384       5       2          10       0       1     114688        0
     FPU_save_area    832     117      18         124       0      16     112320        0
        malloc-256    256     353      82         471       0      62     111360        0
        malloc-128    128     582     193        3799       0     126      99200        0
        malloc-128    128     634     141        1221       0     126      99200        0
      malloc-32768  32768       3       0           3       0       1      98304        0
       malloc-8192   8192       9       2          92       0       1      90112        0
          UMA Kegs    384     227       6         227       0      30      89472        0
        128 Bucket   1024      41      42         242       0      16      84992        0
      malloc-16384  16384       5       0           7       0       1      81920        0
       malloc-2048   2048       6      34        1038       0       8      81920        0
              PROC   1368      45      10         774       0       8      75240        0
       malloc-4096   4096      15       3         211       0       2      73728        0
             g_bio    408       4     176        4733       0      30      73440        0
         malloc-64     64     739     332        2288       0     254      68544        0
         malloc-64     64     619     452        7252       0     254      68544        0
      malloc-32768  32768       0       2         120       0       1      65536        0
      malloc-32768  32768       2       0           2       0       1      65536        0
       malloc-8192   8192       8       0           9       0       1      65536        0
       malloc-1024   1024      26      38         557       0      16      65536        0
        malloc-256    256     166      89         811       0      62      65280        0
        malloc-256    256     147     108         527       0      62      65280        0
        malloc-256    256     162      93         186       0      62      65280        0
         filedesc0   1072      46      10         775       0       8      60032        0
       malloc-4096   4096      12       2         495       0       2      57344        0
        malloc-128    128      25     378         284       0     126      51584        0
         32 Bucket    256      56     139         458       0      62      49920        0
           DIRHASH   1024      34      14          34       0      16      49152        0
             NAMEI   1024       4      44       11898       0      16      49152        0
      malloc-16384  16384       1       2         191       0       1      49152        0
       malloc-2048   2048       9      15          27       0       8      49152        0
         64 Bucket    512      64      32        1547       0      30      49152        0
        malloc-384    384      86      34         415       0      30      46080        0
          syncache    168       0     264           3       0     254      44352        0
            da_ccb    544       1      69        1274       0      16      38080        0
            pcpu-8      8    4505     103        4565       0     254      36864        0
         udp_inpcb    408       7      83         106       0      30      36720        0
         malloc-64     64      20     547       12943       0     254      36288        0
         malloc-64     64      31     536          47       0     254      36288        0
         malloc-64     64     195     372         952       0     254      36288        0
         malloc-64     64      56     511         827       0     254      36288        0
        malloc-128    128      19     260         142       0     126      35712        0
        malloc-128    128      11     268          21       0     126      35712        0
        malloc-128    128     124     155         519       0     126      35712        0
     routing nhops    256      10     125          17       0      62      34560        0
           ttyoutq    256      72      63         160       0      62      34560        0
        malloc-384    384      61      29          69       0      30      34560        0
        malloc-384    384      62      28          62       0      30      34560        0
        malloc-256    256      27     108         490       0      62      34560        0
        malloc-256    256       1     134          51       0      62      34560        0
        malloc-256    256      34     101         181       0      62      34560        0
        malloc-256    256      15     120         273       0      62      34560        0
       malloc-2048   2048       0      16          12       0       8      32768        0
       malloc-2048   2048       2      14           2       0       8      32768        0
       malloc-2048   2048       3      13          29       0       8      32768        0
       malloc-2048   2048       4      12          12       0       8      32768        0
       malloc-2048   2048       6      10           6       0       8      32768        0
       malloc-1024   1024       3      29          43       0      16      32768        0
       malloc-1024   1024      17      15         888       0      16      32768        0
       malloc-1024   1024       3      29           6       0      16      32768        0
       malloc-1024   1024       3      29           7       0      16      32768        0
       malloc-1024   1024       2      30           2       0      16      32768        0
        malloc-512    512       0      64         110       0      30      32768        0
        malloc-512    512      12      52          17       0      30      32768        0
        malloc-512    512       0      64          11       0      30      32768        0
        malloc-512    512       2      62          49       0      30      32768        0
        malloc-512    512       9      55          17       0      30      32768        0
        malloc-512    512       2      62           8       0      30      32768        0
        malloc-512    512       3      61           4       0      30      32768        0
           pcpu-64     64     501      11         501       0     254      32768        0
            ttyinq    160     135      65         300       0      62      32000        0
              PGRP    120      24     240          35       0     126      31680        0
            clpbuf   2624       0      12          15       0       4      31488        0
           VMSPACE    584      30      19         761       0      16      28616        0
        sctp_laddr     48       0     588           4       0     254      28224        0
         malloc-32     32     130     752        1317       0     254      28224        0
         malloc-32     32     351     531        4173       0     254      28224        0
         16 Bucket    144      48     148         244       0      62      28224        0
          4 Bucket     48       5     583           7       0     254      28224        0
         TURNSTILE    136     121      68         121       0      62      25704        0
            cpuset    200       7     121           7       0      62      25600        0
       malloc-8192   8192       3       0           3       0       1      24576        0
       malloc-4096   4096       3       3          23       0       2      24576        0
              pipe    736      19      14         280       0      16      24288        0
               PWD     40      14     592          95       0     254      24240        0
           rtentry    168      13     131          17       0      62      24192        0
             Files     80     150     150        6273       0     126      24000        0
          8 Bucket     80      40     260         274       0     126      24000        0
        malloc-384    384       1      59           2       0      30      23040        0
        malloc-384    384      12      48          12       0      30      23040        0
        malloc-384    384      25      35         525       0      30      23040        0
             ripcb    376       1      59           3       0      30      22560        0
        SLEEPQUEUE     88     121     135         121       0     126      22528        0
         hostcache     64       1     314           1       0     254      20160        0
         malloc-64     64       3     312           3       0     254      20160        0
         malloc-32     32      54     576         293       0     254      20160        0
         malloc-32     32      14     616          76       0     254      20160        0
         malloc-32     32      33     597          58       0     254      20160        0
         malloc-32     32      49     581          57       0     254      20160        0
         malloc-32     32      16     614          17       0     254      20160        0
          2 Bucket     32      49     581         316       0     254      20160        0
              vmem   1856       2       7           2       0       8      16704        0
 epoch_record pcpu    256       4      60           4       0      62      16384        0
      malloc-16384  16384       1       0           1       0       1      16384        0
      malloc-16384  16384       1       0           1       0       1      16384        0
       malloc-8192   8192       0       2          20       0       1      16384        0
       malloc-8192   8192       2       0           2       0       1      16384        0
       malloc-1024   1024       0      16           2       0      16      16384        0
        malloc-512    512       2      30           2       0      30      16384        0
           SMR CPU     32       8     503           8       0     254      16352        0
         malloc-16     16     505     495        3379       0     254      16000        0
              kenv    258      17      43        1064       0      30      15480        0
            mqnode    416       3      33           3       0      30      14976        0
        SMR SHARED     24       8     503           8       0     254      12264        0
    ertt_txseginfo     40       0     303         124       0     254      12120        0
              ertt     72       4     164           6       0     126      12096        0
             KNOTE    160       0      75           2       0      62      12000        0
         malloc-16     16      35     715        1265       0     254      12000        0
         malloc-16     16       9     741          14       0     254      12000        0
         malloc-16     16      31     719          81       0     254      12000        0
         malloc-16     16      43     707       25016       0     254      12000        0
         malloc-16     16       8     742           9       0     254      12000        0
         malloc-16     16       7     743           9       0     254      12000        0
         tcp_inpcb   1304       4       5           6       0       8      11736        0
        malloc-384    384       1      29           2       0      30      11520        0
       Mountpoints   2816       2       2           2       0       4      11264        0
       malloc-8192   8192       0       1          26       0       1       8192        0
       malloc-8192   8192       1       0           1       0       1       8192        0
       malloc-4096   4096       0       2           4       0       2       8192        0
       malloc-4096   4096       0       2           3       0       2       8192        0
      vtnet_tx_hdr     24       0     334         866       0     254       8016        0
           pcpu-16     16       4     252           4       0     254       4096        0
       UMA Slabs 1    176       8      14           8       0      62       3872        0
        KMAP ENTRY     96      12      27          14       0       0       3744        0
       FFS1 dinode    128       0       0           0       0     126          0        0
           ada_ccb    272       0       0           0       0      30          0        0
             swblk    136       0       0           0       0      62          0        0
          swpctrie    152       0       0           0       0      62          0        0
   cdg_qdiffsample     16       0       0           0       0     254          0        0
   pf state scrubs     40       0       0           0       0     254          0        0
   pf frag entries     40       0       0           0       0     254          0        0
  pf fragment node     72       0       0           0       0     126          0        0
          pf frags    232       0       0           0       0      62          0        0
  pf table entries    160       0       0           0       0     254          0        0
pf table entry counters     64       0       0           0       0     254          0        0
pf Ethernet anchors   1240       0       0           0       0      64          0        0
        pf anchors   1664       0       0           0       0      64          0        0
   pf UDP mappings    104       0       0           0       0     126          0        0
   pf source nodes    152       0       0           0       0     254          0        0
     pf state keys     88       0       0           0       0     126          0        0
         pf states    384       0       0           0       0     254          0        0
           pf tags    104       0       0           0       0     126          0        0
          pf mtags    184       0       0           0       0      62          0        0
      tcp_rack_pcb   1088       0       0           0       0       8          0        0
      tcp_rack_map    128       0       0           0       0     126          0        0
       tcp_bbr_pcb    896       0       0           0       0      16          0        0
       tcp_bbr_map    128       0       0           0       0     126          0        0
tfo_ccache_entries     80       0       0           0       0     126          0        0
               tfo      4       0       0           0       0     254          0        0
          sackhole     32       0       0           0       0     254          0        0
               ipq     56       0       0           0       0     254          0        0
   sctp_asconf_ack     48       0       0           0       0     254          0        0
       sctp_asconf     40       0       0           0       0     254          0        0
sctp_stream_msg_out    112       0       0           0       0     254          0        0
        sctp_readq    152       0       0           0       0     254          0        0
        sctp_chunk    152       0       0           0       0     254          0        0
        sctp_raddr    736       0       0           0       0     254          0        0
         sctp_asoc   2256       0       0           0       0     254          0        0
           sctp_ep   1152       0       0           0       0     254          0        0
   tcp_log_id_node    120       0       0           0       0     126          0        0
 tcp_log_id_bucket    176       0       0           0       0      62          0        0
          tcpreass     48       0       0           0       0     254          0        0
     udplite_inpcb    408       0       0           0       0      30          0        0
    IPsec SA lft_c     16       0       0           0       0     254          0        0
            itimer    352       0       0           0       0      30          0        0
            AIOLIO    272       0       0           0       0      30          0        0
             AIOCB    552       0       0           0       0      16          0        0
               AIO    208       0       0           0       0      62          0        0
        mqnotifier    216       0       0           0       0      62          0        0
            mvdata     64       0       0           0       0     254          0        0
            mqueue    248       0       0           0       0      62          0        0
        TMPFS node    240       0       0           0       0      62          0        0
           NCLNODE    608       0       0           0       0      16          0        0
     LTS VFS Cache    360       0       0           0       0      30          0        0
       L VFS Cache    320       0       0           0       0      30          0        0
     STS VFS Cache    144       0       0           0       0      62          0        0
           cryptop    280       0       0           0       0      30          0        0
  linux_dma_object     32       0       0           0       0     254          0        0
  linux_dma_pctrie    152       0       0           0       0      62          0        0
   IOMMU_MAP_ENTRY    112       0       0           0       0     126          0        0
            skbuff   1808       0       0           0       0       8          0        0
    mbuf_jumbo_16k  16384       0       0           0       0     254          0        0
     mbuf_jumbo_9k   9216       0       0           0       0     254          0        0
      audit_record   1280       0       0           0       0       8          0        0
         domainset     40       0       0           0       0     254          0        0
        MAC labels     40       0       0           0       0     254          0        0
            vnpbuf   2624       0       0           0       0      16          0        0
           nfspbuf   2624       0       0           0       0       4          0        0
            swwbuf   2624       0       0           0       0       2          0        0
            swrbuf   2624       0       0           0       0       4          0        0
          umtx_shm     88       0       0           0       0     126          0        0
           umtx pi     96       0       0           0       0     126          0        0
rangeset pctrie nodes    152       0       0           0       0      62          0        0
          rl_entry     48       0       0           0       0     254          0        0
      malloc-65536  65536       0       0           0       0       1          0        0
      malloc-65536  65536       0       0           0       0       1          0        0
      malloc-65536  65536       0       0           0       0       1          0        0
      malloc-32768  32768       0       0           0       0       1          0        0
      malloc-32768  32768       0       0           0       0       1          0        0
      malloc-32768  32768       0       0           0       0       1          0        0
      malloc-32768  32768       0       0           0       0       1          0        0
      malloc-16384  16384       0       0           0       0       1          0        0
      malloc-16384  16384       0       0           0       0       1          0        0
      malloc-16384  16384       0       0           0       0       1          0        0
       malloc-8192   8192       0       0           0       0       1          0        0
       malloc-4096   4096       0       0           0       0       2          0        0
           pcpu-32     32       0       0           0       0     254          0        0
            pcpu-4      4       0       0           0       0     254          0        0
            fakepg     88       0       0           0       0     126          0        0
          UMA Hash    256       0       0           0       0      62          0        0
db> show all tcpcbs/bl

Crashes (1):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2025/09/21 10:30 freebsd-src 4c3a868d13c0 67c37560 console log report ci-freebsd-i386 Fatal trap NUM: page fault in pfi_kkif_update
* Struck through repros no longer work on HEAD.