syzbot


panic: negative vmsize for uid -NUM

Status: upstream: reported on 2025/05/17 04:05
Reported-by: syzbot+a797e67c6f6b21ef3287@syzkaller.appspotmail.com
First crash: 14d, last: 14d

Sample crash report:
panic: negative vmsize for uid -1

cpuid = 1
time = 1747454692
KDB: stack backtrace:
db_trace_self_wrapper() at db_trace_self_wrapper+0xc6/frame 0xfffffe00575b3310
kdb_backtrace() at kdb_backtrace+0xd0/frame 0xfffffe00575b3470
vpanic() at vpanic+0x257/frame 0xfffffe00575b3630
panic() at panic+0xb5/frame 0xfffffe00575b36f0
swap_release_by_cred() at swap_release_by_cred+0x14f/frame 0xfffffe00575b3730
vm_map_entry_delete() at vm_map_entry_delete+0xca/frame 0xfffffe00575b37b0
vm_map_delete() at vm_map_delete+0x530/frame 0xfffffe00575b38f0
vm_map_fixed() at vm_map_fixed+0x181/frame 0xfffffe00575b39d0
vm_mmap_object() at vm_mmap_object+0x324/frame 0xfffffe00575b3a70
kern_mmap() at kern_mmap+0xb1a/frame 0xfffffe00575b3c10
sys_mmap() at sys_mmap+0x153/frame 0xfffffe00575b3d10
amd64_syscall() at amd64_syscall+0x4af/frame 0xfffffe00575b3f30
fast_syscall_common() at fast_syscall_common+0xf8/frame 0xfffffe00575b3f30
--- syscall (198, FreeBSD ELF64, __syscall), rip = 0x3a197a, rsp = 0x82651ff08, rbp = 0x82651ff80 ---
KDB: enter: panic
[ thread pid 810 tid 100128 ]
Stopped at      kdb_enter+0x6e: movq    $0,0x25bd887(%rip)
db> 
db> set $lines = 0
db> set $maxwidth = 0
db> show registers
cs                        0x20
ds                        0x3b
es                        0x3b
fs                        0x13
gs                        0x1b
ss                        0x28
rax                       0x12
rcx         0xfffffe0071800000
rdx                    0x7ffff
rbx         0xffffffff827b0040  .str.27
rsp         0xfffffe00575b3450
rbp         0xfffffe00575b3470
rsi                    0x80001
rdi         0xffffffff81614779  printf+0x149
r8                           0
r9                  0xffffffff
r10                          0
r11                        0xb
r12         0xfffffe005491a740
r13         0xfffffffffffffffd
r14         0xffffffff827b0040  .str.27
r15                          0
rip         0xffffffff815fe90e  kdb_enter+0x6e
rflags                    0x46
kdb_enter+0x6e: movq    $0,0x25bd887(%rip)
db> show proc
Process 810 (syz-executor) at 0xfffffe0054807020:
 state: NORMAL
 uid: -1  gids: 0, 0, 5
 parent: pid 766 at 0xfffffe005490c000
 ABI: FreeBSD ELF64
 flag: 0x10000180  flag2: 0
 arguments: ./syz-executor exec
 reaper: 0xfffffe0008009040 reapsubtree: 1
 sigparent: 20
 vmspace: 0xfffffe00548eb6d8
   (map 0xfffffe00548eb6d8)
   (map.pmap 0xfffffe00548eb778)
   (pmap 0xfffffe00548eb7e8)
 threads: 3
100100                   RunQ                                syz-executor
100126                   RunQ                                syz-executor
100128                   Run     CPU 1                       syz-executor
db> ps
  pid  ppid  pgrp   uid  state   wmesg   wchan               cmd
  822   764   764     0  R       (threaded)                  syz-executor
100119                   Run     CPU 0                       syz-executor
100136                   S       uwait   0xfffffe0058a5ac00  syz-executor
  820   808   820     0  Ss      select  0xfffffe006eb3fe40  dhclient
  819   765   765     0  R       (threaded)                  syz-executor
100102                   RunQ                                syz-executor
100133                   S       sbwait  0xfffffe005a2f320c  syz-executor
100135                   S       uwait   0xfffffe0058cf7680  syz-executor
  816   767   767     0  T       (threaded)                  syz-executor
100099                   RunQ                                syz-executor
  814     1   814     0  Ss      select  0xfffffe0059daa540  dhclient
  810   766   766    -1  R       (threaded)                  syz-executor
100100                   RunQ                                syz-executor
100126                   RunQ                                syz-executor
100128                   Run     CPU 1                       syz-executor
  808   783   424    65  S       select  0xfffffe0059daa4c0  dhclient
  783   424   424     0  S       wait    0xfffffe00548f4060  sh
  767   763   767     0  R                                   syz-executor
  766   763   766     0  R                                   syz-executor
  765   763   765     0  R                                   syz-executor
  764   763   764     0  R                                   syz-executor
  763   761   761     0  S       select  0xfffffe0059dab240  syz-executor
  761   759   761     0  Ss      pause   0xfffffe0008009bb0  csh
  759   682   759     0  Ss      select  0xfffffe0059daaf40  sshd
  748     1   748     0  Ss+     ttyin   0xfffffe0058a974b0  getty
  747     1   747     0  Ss+     ttyin   0xfffffe0058e28cb0  getty
  746     1   746     0  Ss+     ttyin   0xfffffe0058e290b0  getty
  745     1   745     0  Ss+     ttyin   0xfffffe0058a94cb0  getty
  744     1   744     0  Ss+     ttyin   0xfffffe0058e294b0  getty
  743     1   743     0  Ss+     ttyin   0xfffffe0058e298b0  getty
  742     1   742     0  Ss+     ttyin   0xfffffe0058e29cb0  getty
  741     1   741     0  Ss+     ttyin   0xfffffe0058e2a0b0  getty
  740     1   740     0  Ss+     ttyin   0xfffffe0058e2a4b0  getty
  738     1    18     0  S+      piperd  0xfffffe005a01cb80  logger
  737   736    18     0  S+      nanslp  0xffffffff83b9d500  sleep
  736     1    18     0  S+      wait    0xfffffe00548f1ac0  sh
  686     1   686     0  Ss      nanslp  0xffffffff83b9d500  cron
  682     1   682     0  Ss      select  0xfffffe00547f97c0  sshd
  495     1   495     0  Ss      select  0xfffffe00547f9bc0  syslogd
  424     1   424     0  Ss      wait    0xfffffe00548ccac0  devd
  423     1   423    65  Ss      select  0xfffffe0059dab0c0  dhclient
  338     1   338     0  Ss      select  0xfffffe00547f9d40  dhclient
  335     1   335     0  Ss      select  0xfffffe0059dab040  dhclient
   17     0     0     0  DL      syncer  0xffffffff83cbada0  [syncer]
   16     0     0     0  DL      vlruwt  0xfffffe0008028040  [vnlru]
   15     0     0     0  DL      (threaded)                  [bufdaemon]
100080                   D       psleep  0xffffffff83cb9360  [bufdaemon]
100083                   D       -       0xffffffff83002140  [bufspacedaemon-0]
100095                   D       sdflush 0xfffffe0058e36ce8  [/ worker]
    9     0     0     0  DL      psleep  0xffffffff83d04380  [vmdaemon]
    8     0     0     0  DL      (threaded)                  [pagedaemon]
100078                   D       psleep  0xffffffff83cea2f8  [dom0]
100081                   D       launds  0xffffffff83cea304  [laundry: dom0]
100082                   D       umarcl  0xffffffff81dcf8c0  [uma]
    7     0     0     0  DL      -       0xffffffff8391acd0  [rand_harvestq]
    6     0     0     0  DL      pftm    0xffffffff8485d850  [pf purge]
    5     0     0     0  DL      waiting 0xffffffff844a8700  [sctp_iterator]
    4     0     0     0  DL      (threaded)                  [cam]
100046                   D       -       0xffffffff838e5340  [doneq0]
100047                   D       -       0xffffffff838e52c0  [async]
100076                   D       -       0xffffffff838e5140  [scanner]
    3     0     0     0  DL      (threaded)                  [crypto]
100043                   D       crypto_ 0xffffffff83ce5b40  [crypto]
100044                   D       crypto_ 0xfffffe0058556030  [crypto returns 0]
100045                   D       crypto_ 0xfffffe0058556080  [crypto returns 1]
   14     0     0     0  DL      seqstat 0xfffffe00547d9088  [sequencer 00]
   13     0     0     0  DL      (threaded)                  [geom]
100037                   D       -       0xffffffff83b45f00  [g_event]
100038                   D       -       0xffffffff83b45f20  [g_up]
100039                   D       -       0xffffffff83b45f40  [g_down]
    2     0     0     0  WL      (threaded)                  [clock]
100031                   I                                   [clock (0)]
100032                   I                                   [clock (1)]
   12     0     0     0  WL      (threaded)                  [intr]
100013                   I                                   [swi6: task queue]
100014                   I                                   [swi6: Giant taskq]
100016                   I                                   [swi5: fast taskq]
100033                   I                                   [swi1: netisr 0]
100034                   I                                   [swi1: hpts]
100035                   I                                   [swi1: hpts]
100048                   I                                   [irq24: virtio_pci0]
100049                   I                                   [irq25: virtio_pci0]
100050                   I                                   [irq26: virtio_pci0]
100051                   I                                   [irq27: virtio_pci0]
100052                   I                                   [irq28: virtio_pci1]
100053                   I                                   [irq29: virtio_pci1]
100054                   I                                   [irq30: virtio_pci1]
100055                   I                                   [irq31: virtio_pci1]
100056                   I                                   [irq32: virtio_pci1]
100061                   I                                   [irq10: virtio_pci2]
100063                   I                                   [irq1: atkbd0]
100064                   I                                   [irq12: psm0]
100065                   I                                   [swi0: uart uart++]
100069                   I                                   [swi1: pf send]
   11     0     0     0  RL      (threaded)                  [idle]
100003                   CanRun                              [idle: cpu0]
100004                   CanRun                              [idle: cpu1]
    1     0     1     0  SLs     wait    0xfffffe0008009040  [init]
   10     0     0     0  DL      audit_w 0xffffffff83ce65e0  [audit]
    0     0     0     0  DLs     (threaded)                  [kernel]
100000                   D       parked  0xffffffff84c2dff0  [swapper]
100005                   D       -       0xfffffe005462a000  [softirq_0]
100006                   D       -       0xfffffe0054629e00  [softirq_1]
100007                   D       -       0xfffffe0054629d00  [if_io_tqg_0]
100008                   D       -       0xfffffe0054629c00  [if_io_tqg_1]
100009                   D       -       0xfffffe0054629b00  [if_config_tqg_0]
100010                   D       -       0xfffffe0007f66200  [kqueue_ctx taskq]
100011                   D       -       0xfffffe0007f66100  [jail_remove taskq]
100012                   D       -       0xfffffe0007f66000  [bus taskq]
100015                   D       -       0xfffffe0007f65c00  [thread taskq]
100017                   D       -       0xfffffe0007f65a00  [aiod_kick taskq]
100018                   D       -       0xfffffe0007f65900  [deferred_unmount ta]
100019                   D       -       0xfffffe0007f65800  [inm_free taskq]
100020                   D       -       0xfffffe0007f65700  [in6m_free taskq]
100021                   D       -       0xfffffe0007f65600  [linuxkpi_irq_wq]
100022                   D       -       0xfffffe0007f65500  [linuxkpi_short_wq_0]
100023                   D       -       0xfffffe0007f65500  [linuxkpi_short_wq_1]
100024                   D       -       0xfffffe0007f65500  [linuxkpi_short_wq_2]
100025                   D       -       0xfffffe0007f65500  [linuxkpi_short_wq_3]
100026                   D       -       0xfffffe0007f65400  [linuxkpi_long_wq_0]
100027                   D       -       0xfffffe0007f65400  [linuxkpi_long_wq_1]
100028                   D       -       0xfffffe0007f65400  [linuxkpi_long_wq_2]
100029                   D       -       0xfffffe0007f65400  [linuxkpi_long_wq_3]
100036                   D       -       0xfffffe0007f65300  [firmware taskq]
100041                   D       -       0xfffffe0007f65100  [crypto_0]
100042                   D       -       0xfffffe0007f65100  [crypto_1]
100057                   D       -       0xfffffe0007f64e00  [vtnet0 rxq 0]
100058                   D       -       0xfffffe0007f64d00  [vtnet0 txq 0]
100059                   D       -       0xfffffe0007f64c00  [vtnet0 rxq 1]
100060                   D       -       0xfffffe0007f64b00  [vtnet0 txq 1]
100062                   D       vtbslp  0xfffffe005856dd00  [virtio_balloon]
100066                   D       -       0xffffffff827b5380  [deadlkres]
100070                   D       -       0xfffffe0059be2000  [acpi_task_0]
100071                   D       -       0xfffffe0059be2000  [acpi_task_1]
100072                   D       -       0xfffffe0059be2000  [acpi_task_2]
100074                   D       -       0xfffffe0007f66e00  [mca taskq]
100075                   D       -       0xfffffe0007f65000  [CAM taskq]
100077                   D       -       0xfffffe0007f64a00  [ipsec_offload]
db> show all locks
Process 822 (syz-executor) thread 0xfffffe00548fa740 (100119)
exclusive sx vm map (user) (vm map (user)) r = 0 (0xfffffe00548b7e10) locked @ /syzkaller/managers/main/kernel/sys/vm/vm_map.c:2808
Process 819 (syz-executor) thread 0xfffffe00548a1740 (100133)
exclusive sx so_rcv_sx (so_rcv_sx) r = 0 (0xfffffe005a2f31c0) locked @ /syzkaller/managers/main/kernel/sys/kern/uipc_socket.c:4840
Process 810 (syz-executor) thread 0xfffffe005491b740 (100126)
exclusive sx vm map (user) (vm map (user)) r = 0 (0xfffffe00548ebe10) locked @ /syzkaller/managers/main/kernel/sys/vm/vm_map.c:4368
shared sx killpg racer (killpg racer) r = 0 (0xfffffe00548de508) locked @ /syzkaller/managers/main/kernel/sys/kern/kern_fork.c:958
Process 810 (syz-executor) thread 0xfffffe005491a740 (100128)
exclusive sx vm map (user) (vm map (user)) r = 0 (0xfffffe00548eb738) locked @ /syzkaller/managers/main/kernel/sys/vm/vm_map.c:1970
db> show malloc
              Type        InUse        MemUse     Requests
           pf_hash            6        12804K            6
            linker          376         5063K          486
          tcp_hpts            7         4801K            7
            devbuf         4188         4324K         4213
         sysctloid        34774         2049K        34849
             vtbuf           24         1968K           46
              kobj          331         1324K          495
            newblk          409         1126K          444
          vfscache            3         1025K            3
               pcb           30          675K           75
          inodedep           69          538K          101
         ufs_quota            1          512K            1
          vfs_hash            1          512K            1
           callout            2          512K            2
              intr            4          472K            4
           subproc          119          234K          890
         vnet_data            2          224K            2
          acpitask            1          224K            1
            KTRACE          100          200K          100
            acpica         1674          184K        54426
              vmem            5          144K            6
           tidhash            3          141K            3
           pagedep           24          134K           36
        tfo_ccache            1          128K            1
          IP reass            1          128K            1
          filedesc           16          121K           77
            DEVFS1          109          109K          126
               sem            4          106K            4
        gtaskqueue           18           98K           18
               bus          997           82K         5063
          mtx_pool            3           74K            3
          syncache            1           68K            1
     NFSD srvcache            3           68K            3
            module          521           66K          521
       ddb_capture            1           64K            1
              temp           35           37K         1833
               BPF           25           37K           25
              umtx          288           36K          288
           kdtrace          182           36K          961
         hostcache            1           32K            1
               shm            1           32K            2
            DEVFS3          128           32K          138
               msg            4           30K            4
            kbdmux            6           28K            6
        DEVFS_RULE           56           20K           56
            ifaddr           67           19K           69
               LRO           18           19K           18
         ufs_mount            4           17K            5
              proc            3           17K            3
               tty           16           16K           16
          routetbl          130           16K          410
           ithread           90           15K           90
            bus-sc           34           15K         1647
      eventhandler          163           14K          163
           lltable           43           14K           43
             ifnet            7           13K            7
       ether_multi          152           13K          162
              kenv           95           12K           95
              GEOM           61           11K          477
         CAM queue            5           11K         1528
              rman           82           10K          437
               rpc            8            9K            8
            plimit           23            9K          332
         in6_multi           65            9K           65
         bmsafemap            3            9K           68
           devstat            4            9K            4
              UART           12            9K           12
              ksem            1            8K            1
             shmfd            1            8K            1
       pfs_vncache            1            8K            1
     audit_evclass          239            8K          301
         taskqueue           69            8K           69
              cred           25            7K          190
            sglist            6            7K            6
           CAM DEV            3            6K          510
         pfs_nodes           22            6K           22
            kqueue           58            5K          846
       ufs_dirhash           24            5K           24
            dirrem           18            5K           43
            diradd           35            5K           64
               UMA          265            5K          265
          pf_ifnet           10            5K           19
                vt           11            5K           11
           memdesc            1            4K            1
               MCA           32            4K           32
             evdev            4            4K            4
           acpisem           28            4K           28
           pwddesc           52            4K          824
             selfd           50            4K         7504
            DEVFSP           47            3K           50
          terminal           11            3K           11
           session           22            3K           33
         proc-args           82            3K         1870
          indirdep           10            3K           10
           acpidev           20            3K           20
           uidinfo            4            3K            9
             hhook            8            3K           10
             clone            9            3K            9
          kcovinfo           36            3K           36
             mkdir           17            3K           48
        local_apic            1            2K            1
           io_apic            1            2K            1
         ipsec-saq            2            2K            2
             lockf           19            2K           29
            ip6ndp           12            2K           13
            Unitno           30            2K           50
          sctp_ifa           13            2K           14
           CAM XPT           22            2K          543
         newdirblk           12            2K           24
          in_multi            6            2K            8
               tun            4            2K            4
            select           12            2K           30
         toponodes            6            2K            6
       ipsecpolicy            2            2K            2
         sctp_atcl            3            2K           11
               msi            9            2K            9
           netlink            2            2K           72
           softdep            1            1K            1
            sahead            1            1K            1
          secasvar            1            1K            1
             nhops            6            1K            8
       vnodemarker            2            1K            8
      NFSD session            1            1K            1
            CC Mem            7            1K           12
        CAM periph            4            1K          271
             ipsec            3            1K            3
          sctp_ifn            6            1K           14
               mld            6            1K            6
              igmp            6            1K            6
              pfil            6            1K            6
            isadev            6            1K            6
             mount           16            1K          140
          pci_link           10            1K           10
               osd           12            1K           28
            crypto            4            1K            4
 encap_export_host           12            1K           12
       inpcbpolicy           17            1K          168
              cdev            2            1K            2
       lkpikmalloc            8            1K            9
    chacha20random            1            1K            1
            biobuf            1            1K            1
          freework            2            1K           31
          freefile            2            1K           15
          freeblks            1            1K           30
            vnodes            1            1K            1
          procdesc            2            1K            8
      NFSD lckfile            1            1K            1
     NFSD V4client            1            1K            1
             DEVFS            9            1K           10
           CAM SIM            2            1K            2
            feeder            7            1K            7
           tcpfunc            3            1K            3
        loginclass            3            1K            5
            prison            6            1K            6
         cryptodev            2            1K           35
          nexusdev            8            1K            8
            apmdev            1            1K            1
          atkbddev            2            1K            2
          pmchooks            1            1K            1
          filecaps            5            1K           72
          CAM path            4            1K         1034
     CAM dev queue            2            1K            2
 CAM I/O Scheduler            1            1K            1
            soname            4            1K         3318
         sctp_atky            3            1K           11
        in_mfilter            2            1K            2
          sctp_vrf            1            1K            1
        ip_msource            1            1K            1
       ip_moptions            1            1K            1
              vnet            1            1K            1
               pmc            1            1K            1
           entropy            2            1K           33
          acpiintr            1            1K            1
         sctp_athm            3            1K           11
              cpus            2            1K            2
    vnet_data_free            1            1K            1
           Per-cpu            1            1K            1
          p1003.1b            1            1K            1
          pf_table            0            0K            0
           pf_rule            0            0K            0
           pf_altq            0            0K            0
           pf_osfp            0            0K            0
     pf_krule_item            0            0K            0
           pf_temp            0            0K            0
      tcp_pcm_rack            0            0K            0
       tcp_do_rack            0            0K            0
      tcp_fsb_rack            0            0K            0
            mqdata            0            0K            0
            ipcomp            0            0K            0
               esp            0            0K            0
                ah            0            0K            0
           filemon            0            0K            0
        sctp_mcore            0            0K            0
        sctp_socko            0            0K            5
         sctp_iter            0            0K           12
         sctp_mvrf            0            0K            0
         sctp_timw            0            0K            0
         sctp_cpal            0            0K            0
         sctp_cmsg            0            0K            0
         sctp_stre            0            0K            0
         sctp_athi            0            0K            0
         sctp_a_it            0            0K           12
         sctp_aadr            0            0K            0
         sctp_stro            0            0K            0
         sctp_stri            0            0K            0
          sctp_map            0            0K            0
        madt_table            0            0K            2
          smartpqi            0            0K            0
               ixl            0            0K            0
        ice-resmgr            0            0K            0
         ice-osdep            0            0K            0
               ice            0            0K            0
              iavf            0            0K            0
             axgbe            0            0K            0
       fpukern_ctx            0            0K            0
          xen_intr            0            0K            0
           xen_hvm            0            0K            0
         legacydrv            0            0K            0
      NMI handlers            0            0K            0
            bounce            0            0K            0
            busdma            0            0K            0
            qpidrv            0            0K            0
      dmar_idpgtbl            0            0K            0
          dmar_dom            0            0K            0
          dmar_ctx            0            0K            0
      amdiommu_dom            0            0K            0
      amdiommu_ctx            0            0K            0
              isci            0            0K            0
      iommu_dmamap            0            0K            0
     hyperv_socket            0            0K            0
           bxe_ilt            0            0K            0
        aesni_data            0            0K            0
            xenbus            0            0K            0
     vm_fictitious            0            0K            0
           UMAHash            0            0K            0
         vm_pgdata            0            0K            0
           jblocks            0            0K            0
          savedino            0            0K           21
          sentinel            0            0K            0
            jfsync            0            0K            0
            jtrunc            0            0K            0
             sbdep            0            0K            2
           jsegdep            0            0K            0
              jseg            0            0K            0
         jfreefrag            0            0K            0
          jfreeblk            0            0K            0
           jnewblk            0            0K            0
            jmvref            0            0K            0
           jremref            0            0K            0
           jaddref            0            0K            0
           freedep            0            0K            0
          freefrag            0            0K            2
        allocindir            0            0K            0
       allocdirect            0            0K            0
          ufs_trim            0            0K            0
           mactemp            0            0K            0
     audit_trigger            0            0K            0
 audit_pipe_presel            0            0K            0
     audit_pipeent            0            0K            0
        audit_pipe            0            0K            0
      audit_evname            0            0K            0
         audit_bsm            0            0K            0
      audit_gidset            0            0K            0
        audit_text            0            0K            0
        audit_path            0            0K            0
        audit_data            0            0K            0
        audit_cred            0            0K            0
          ktls_ocf            0            0K            0
        MLX5EEPROM            0            0K            0
        MLX5EEPROM            0            0K            0
        MLX5EEPROM            0            0K            0
        MLX5EEPROM            0            0K            0
        MLX5EEPROM            0            0K            0
      MLX5E_TLS_RX            0            0K            0
        MLX5EEPROM            0            0K            0
         MLX5E_TLS            0            0K            0
        MLX5EEPROM            0            0K            0
        MLX5EEPROM            0            0K            0
        MLX5EEPROM            0            0K            0
            MLX5EN            0            0K            0
        MLX5EEPROM            0            0K            0
        MLX5EEPROM            0            0K            0
        MLX5EEPROM            0            0K            0
        MLX5EEPROM            0            0K            0
        MLX5EEPROM            0            0K            0
        MLX5EEPROM            0            0K            0
        MLX5EEPROM            0            0K            0
          MLX5DUMP            0            0K            0
        MLX5EEPROM            0            0K            0
        MLX5EEPROM            0            0K            0
        MLX5EEPROM            0            0K            0
        MLX5EEPROM            0            0K            0
       simple_attr            0            0K            0
          seq_file            0            0K            0
           lkpiskb            0            0K            0
             radix            0            0K            0
               idr            0            0K            0
          lkpindev            0            0K            0
           lkpimhi            0            0K            0
            lkpifw            0            0K            0
         lkpi80211            0            0K            0
               NLM            0            0K            0
    ipsec-spdcache            0            0K            0
         ipsec-reg            0            0K            0
        ipsec-misc            0            0K            0
      ipsecrequest            0            0K            0
            ip6opt            0            0K            3
       ip6_msource            0            0K            0
      ip6_moptions            0            0K            0
       in6_mfilter            0            0K            0
             frag6            0            0K            0
            tcplog            0            0K            0
        tcp_hwpace            0            0K            0
              ipid            0            0K            0
         80211scan            0            0K            0
      80211ratectl            0            0K            0
        80211power            0            0K            0
       80211nodeie            0            0K            0
         80211node            0            0K            0
      80211mesh_gt            0            0K            0
      80211mesh_rt            0            0K            0
         80211perr            0            0K            0
         80211prep            0            0K            0
         80211preq            0            0K            0
          80211dfs            0            0K            0
       80211crypto            0            0K            0
          80211vap            0            0K            0
             iflib            0            0K            0
              vlan            0            0K            0
               gif            0            0K            0
           ifdescr            0            0K            0
              zlib            0            0K           19
           fadvise            0            0K            0
           VN POLL            0            0K            0
            statfs            0            0K          181
     namei_tracker            0            0K            0
       export_host            0            0K            0
        cl_savebuf            0            0K            1
               aio            0            0K            0
               lio            0            0K            0
               acl            0            0K            0
          mbuf_tag            0            0K            0
              ktls            0            0K            0
              accf            0            0K            0
               pts            0            0K            0
           timerfd            0            0K            0
               iov            0            0K        13590
          ioctlops            0            0K           96
           eventfd            0            0K            1
           Witness            0            0K            0
             stack            0            0K            0
              sbuf            0            0K          296
          firmware            0            0K            0
        compressor            0            0K            0
              SWAP            0            0K            0
         sysctltmp            0            0K          649
            sysctl            0            0K            3
              ekcd            0            0K            0
            dumper            0            0K            0
          sendfile            0            0K            0
              rctl            0            0K            0
             cache            0            0K            0
      prison_racct            0            0K            0
       Fail Points            0            0K            0
             sigio            0            0K            1
filedesc_to_leader            0            0K            2
               pwd            0            0K            0
       tty console            0            0K            0
         boottrace            0            0K            0
        isofs_node            0            0K            0
       isofs_mount            0            0K            0
     tr_raid5_data            0            0K            0
    tr_raid1e_data            0            0K            0
     tr_raid1_data            0            0K            0
     tr_raid0_data            0            0K            0
    tr_concat_data            0            0K            0
       md_sii_data            0            0K            0
   md_promise_data            0            0K            0
    md_nvidia_data            0            0K            0
   md_jmicron_data            0            0K            0
     md_intel_data            0            0K            0
       md_ddf_data            0            0K            0
         raid_data            0            0K           72
     geom_flashmap            0            0K            0
         tmpfs dir            0            0K            0
        tmpfs name            0            0K            0
       tmpfs mount            0            0K            0
     tmpfs extattr            0            0K            0
           NFS FHA            0            0K            0
         newnfsmnt            0            0K            0
  newnfsclient_req            0            0K            0
   NFSCL layrecall            0            0K            0
     NFSCL session            0            0K            0
     NFSCL sockreq            0            0K            0
     NFSCL devinfo            0            0K            0
     NFSCL flayout            0            0K            0
      NFSCL layout            0            0K            0
     NFSD rollback            0            0K            0
      NFSCL diroff            0            0K            0
        NEWNFSnode            0            0K            0
         NFSCL lck            0            0K            0
      NFSCL lckown            0            0K            0
      NFSCL client            0            0K            0
       NFSCL deleg            0            0K            0
        NFSCL open            0            0K            0
       NFSCL owner            0            0K            0
            NFS fh            0            0K            0
           NFS req            0            0K            0
     NFSD usrgroup            0            0K            0
       NFSD string            0            0K            0
       NFSD V4lock            0            0K            0
      NFSD V4state            0            0K            0
       msdosfs_fat            0            0K            0
     msdosfs_mount            0            0K            0
      msdosfs_node            0            0K            0
            DEVFS4            0            0K            0
            DEVFS2            0            0K            0
            gntdev            0            0K            0
       privcmd_dev            0            0K            0
        evtchn_dev            0            0K            0
          xenstore            0            0K            0
               xnb            0            0K            0
          xen_acpi            0            0K            0
              xbbd            0            0K            0
               xbd            0            0K            0
           Balloon            0            0K            0
          sysmouse            0            0K            0
            vtfont            0            0K            0
            pvscsi            0            0K            0
            USBdev            0            0K            0
               USB            0            0K            0
            twsbuf            0            0K            0
       tcp_log_dev            0            0K            0
      midi buffers            0            0K            0
             mixer            0            0K            0
              ac97            0            0K            0
             hdacc            0            0K            0
              hdac            0            0K            0
              hdaa            0            0K            0
       SIIS driver            0            0K            0
               PUC            0            0K            0
          ppbusdev            0            0K            0
            sr_iov            0            0K            0
               OCS            0            0K            0
               OCS            0            0K            0
              nvme            0            0K            0
               nvd            0            0K            0
            netmap            0            0K            0
            mwldev            0            0K            0
        MVS driver            0            0K            0
         mpi3mrbuf            0            0K            0
          mrsasbuf            0            0K            0
          mpt_user            0            0K            0
          mps_user            0            0K            0
            MPSSAS            0            0K            0
               mps            0            0K            0
          mpr_user            0            0K            0
            MPRSAS            0            0K            0
               mpr            0            0K            0
            mfibuf            0            0K            0
        md_sectors            0            0K            0
           md_disk            0            0K            0
           malodev            0            0K            0
               LED            0            0K            0
          ix_sriov            0            0K            0
                ix            0            0K            0
            ipsbuf            0            0K            0
         ciss_data            0            0K            0
         BACKLIGHT            0            0K            0
           ath_hal            0            0K            0
            athdev            0            0K            0
           ata_pci            0            0K            0
           ata_dma            0            0K            0
       ata_generic            0            0K            0
       AHCI driver            0            0K            0
               agp            0            0K            0
           acpipwr            0            0K            0
         acpi_perf            0            0K            0
         acpicmbat            0            0K            0
        aacraidcam            0            0K            0
       aacraid_buf            0            0K            0
            aaccam            0            0K            0
            aacbuf            0            0K            0
              zstd            0            0K            0
            XZ_DEC            0            0K            0
            nvlist            0            0K            0
          SCSI ENC            0            0K            0
           SCSI sa            0            0K            0
         scsi_pass            0            0K            0
           scsi_da            0            0K           70
            ata_da            0            0K            0
           scsi_ch            0            0K            0
           scsi_cd            0            0K            0
           nvme_da            0            0K            0
           CAM CCB            0            0K          523
     CAM ccb queue            0            0K            0
db> show uma
              Zone   Size    Used    Free    Requests  Sleeps  Bucket  Total Mem    XFree
   mbuf_jumbo_page   4096    8320    1078       12207       0     254   38494208        0
              mbuf    256    8615    1047       15185       0     254    2473472        0
          BUF TRIE    152     214   11590         438       0      62    1794208        0
        malloc-384    384    4141      29        4484       0      30    1601280        0
        malloc-128    128   11433     161       11811       0     126    1484032        0
       malloc-4096   4096     331       3         495       0       2    1368064        0
       UMA Slabs 0    112   10870      32       10870       0     126    1221024        0
      mbuf_cluster   2048     508       0         508       0     254    1040384        0
        RADIX NODE    152    6284     185       26602       0      62     983288        0
         vmem btag     56   15697     110       15697       0     254     885192        0
      malloc-65536  65536       9       1          12       0       1     655360        0
         FFS inode   1168     538      15         553       0       8     645904        0
           sctp_ep   1152       3     508          11       0     254     588672        0
              pbuf   2624       0     202           0       0       2     530048        0
            socket   1024      35     473        1377       0     254     520192        0
          lkpicurr    168       2    3094           2       0      62     520128        0
      malloc-65536  65536       4       2         114       0       1     393216        0
         VM OBJECT    248    1127     121       13391       0      62     309504        0
             VNODE    440     574      29         591       0      30     265320        0
            THREAD   1824     128      16         136       0       8     262656        0
        256 Bucket   2048     117      11         970       0       8     262144        0
         malloc-64     64    3823     272        3890       0     254     262080        0
       malloc-4096   4096      54       4         866       0       2     237568        0
         malloc-16     16   14323     177       14392       0     254     232000        0
       malloc-2048   2048     101      11         127       0       8     229376        0
            DEVCTL   1024      21     199         148       0       0     225280        0
        malloc-256    256     827      43        1198       0      62     222720        0
      malloc-65536  65536       1       2          61       0       1     196608        0
      malloc-16384  16384      10       2         229       0       1     196608        0
         malloc-32     32    5406     516        5441       0     254     189504        0
         UMA Zones    768     237       2         237       0      16     183552        0
        malloc-128    128    1195     200       25338       0     126     178560        0
            lkpimm     56       1    3095           1       0     254     173376        0
             unpcb    320      13     503        1172       0     254     165120        0
       FFS2 dinode    256     538      92         553       0      62     161280        0
       malloc-1024   1024     126      18         342       0      16     147456        0
       S VFS Cache    104     999     288        1047       0     126     133848        0
         MAP ENTRY     96    1290      96       41751       0     126     133056        0
      malloc-65536  65536       2       0           2       0       1     131072        0
      malloc-32768  32768       4       0           4       0       1     131072        0
       mbuf_packet    256      38     470         649       0     254     130048        0
     FPU_save_area    832     130      14         149       0      16     119808        0
          ksiginfo    112      44    1000          62       0     126     116928        0
        malloc-128    128     529     246        3776       0     126      99200        0
      malloc-32768  32768       2       1         122       0       1      98304        0
              PROC   1376      52      14         823       0       8      90816        0
       malloc-4096   4096      19       3         592       0       2      90112        0
          UMA Kegs    384     224       9         224       0      30      89472        0
        malloc-128    128     422     229         660       0     126      83328        0
       malloc-2048   2048       4      36         512       0       8      81920        0
             g_bio    408       0     180        4807       0      30      73440        0
        128 Bucket   1024      40      27         230       0      16      68608        0
         malloc-64     64     643     428        1912       0     254      68544        0
         malloc-64     64     575     496        2376       0     254      68544        0
      malloc-65536  65536       1       0           1       0       1      65536        0
      malloc-65536  65536       0       1           8       0       1      65536        0
         64 Bucket    512      65      63        1758       0      30      65536        0
         filedesc0   1072      52       4         824       0       8      60032        0
       malloc-8192   8192       5       2         112       0       1      57344        0
       malloc-8192   8192       7       0           7       0       1      57344        0
        malloc-128    128     182     221         693       0     126      51584        0
        malloc-128    128     329      74         909       0     126      51584        0
        malloc-256    256      73     122        1238       0      62      49920        0
        malloc-256    256      82     113         158       0      62      49920        0
         32 Bucket    256      60     135         922       0      62      49920        0
           DIRHASH   1024      34      14          34       0      16      49152        0
             NAMEI   1024       0      48       12670       0      16      49152        0
       malloc-8192   8192       6       0           7       0       1      49152        0
       malloc-4096   4096      11       1          11       0       2      49152        0
       malloc-2048   2048      10      14         533       0       8      49152        0
       malloc-1024   1024       7      41         519       0      16      49152        0
        malloc-384    384      72      48          75       0      30      46080        0
        malloc-384    384     103      17         469       0      30      46080        0
          syncache    168       0     264           3       0     254      44352        0
       malloc-4096   4096       8       2          16       0       2      40960        0
            pcpu-8      8    4712     408        4868       0     254      40960        0
         udp_inpcb    408       7      83         146       0      30      36720        0
         hostcache     64       2     565           2       0     254      36288        0
         malloc-64     64       8     559       13268       0     254      36288        0
         malloc-64     64     252     315        7762       0     254      36288        0
         malloc-64     64       6     561           6       0     254      36288        0
         malloc-64     64     274     293        1734       0     254      36288        0
         malloc-64     64      13     554          35       0     254      36288        0
        malloc-128    128       2     277           2       0     126      35712        0
        malloc-128    128      83     196         159       0     126      35712        0
     routing nhops    256      27     108          34       0      62      34560        0
           ttyoutq    256      72      63         160       0      62      34560        0
        malloc-384    384      69      21          69       0      30      34560        0
        malloc-256    256       2     133         345       0      62      34560        0
        malloc-256    256      55      80         129       0      62      34560        0
        malloc-256    256      11     124          52       0      62      34560        0
        malloc-256    256      40      95         354       0      62      34560        0
      malloc-32768  32768       0       1          11       0       1      32768        0
      malloc-32768  32768       1       0           1       0       1      32768        0
      malloc-16384  16384       2       0           2       0       1      32768        0
       malloc-8192   8192       3       1           5       0       1      32768        0
       malloc-2048   2048       5      11           5       0       8      32768        0
       malloc-2048   2048      11       5          73       0       8      32768        0
       malloc-2048   2048       8       8         207       0       8      32768        0
       malloc-2048   2048       6      10          25       0       8      32768        0
       malloc-2048   2048       2      14          48       0       8      32768        0
       malloc-1024   1024       0      32           3       0      16      32768        0
       malloc-1024   1024      26       6          50       0      16      32768        0
       malloc-1024   1024      12      20          12       0      16      32768        0
       malloc-1024   1024       2      30         986       0      16      32768        0
        malloc-512    512       4      60         161       0      30      32768        0
        malloc-512    512       2      62          24       0      30      32768        0
        malloc-512    512       8      56           8       0      30      32768        0
        malloc-512    512       6      58          20       0      30      32768        0
        malloc-512    512       5      59          19       0      30      32768        0
           pcpu-64     64     496      16         496       0     254      32768        0
            ttyinq    160     135      65         300       0      62      32000        0
              PGRP    120      26     238          37       0     126      31680        0
           VMSPACE    584      36      13         807       0      16      28616        0
        sctp_laddr     48       0     588          12       0     254      28224        0
         malloc-32     32     267     615        2991       0     254      28224        0
         16 Bucket    144      47     149         249       0      62      28224        0
          4 Bucket     48       5     583           6       0     254      28224        0
            da_ccb    544       0      49        1303       0      16      26656        0
         TURNSTILE    136     145      44         145       0      62      25704        0
            cpuset    200       7     121           7       0      62      25600        0
       malloc-8192   8192       1       2          20       0       1      24576        0
              pipe    736      20      13         289       0      16      24288        0
    ertt_txseginfo     40       0     606         706       0     254      24240        0
               PWD     40      19     587         105       0     254      24240        0
           rtentry    168      30     114          34       0      62      24192        0
             Files     80     180     120        6833       0     126      24000        0
          8 Bucket     80      46     254         292       0     126      24000        0
         tcp_inpcb   1304       7      11          12       0       8      23472        0
        malloc-384    384      10      50          19       0      30      23040        0
        malloc-384    384      26      34          37       0      30      23040        0
             ripcb    376       3      57           8       0      30      22560        0
       Mountpoints   2816       2       6           3       0       4      22528        0
        SLEEPQUEUE     88     145     111         145       0     126      22528        0
            clpbuf   2624       0       8          15       0       4      20992        0
              ertt     72       7     273          12       0     126      20160        0
         malloc-32     32      32     598         217       0     254      20160        0
         malloc-32     32      91     539         131       0     254      20160        0
         malloc-32     32     174     456        1132       0     254      20160        0
         malloc-32     32      11     619          11       0     254      20160        0
         malloc-32     32      65     565         493       0     254      20160        0
         malloc-32     32       7     623        1056       0     254      20160        0
          2 Bucket     32      51     579         323       0     254      20160        0
             KNOTE    160       2     123          16       0      62      20000        0
        malloc-256    256       2      73           2       0      62      19200        0
              vmem   1856       2       7           2       0       8      16704        0
 epoch_record pcpu    256       4      60           4       0      62      16384        0
      malloc-16384  16384       1       0           1       0       1      16384        0
      malloc-16384  16384       1       0           1       0       1      16384        0
      malloc-16384  16384       1       0           2       0       1      16384        0
       malloc-8192   8192       2       0           2       0       1      16384        0
       malloc-4096   4096       1       3           3       0       2      16384        0
       malloc-4096   4096       3       1         187       0       2      16384        0
       malloc-1024   1024       1      15           1       0      16      16384        0
       malloc-1024   1024       1      15           1       0      16      16384        0
        malloc-512    512       0      32           1       0      30      16384        0
        malloc-512    512       2      30           2       0      30      16384        0
           SMR CPU     32       8     503           8       0     254      16352        0
               ipq     56       1     287           1       0     254      16128        0
         malloc-16     16     507     493        4683       0     254      16000        0
              kenv    258      17      43        1066       0      30      15480        0
            mqnode    416       3      33           3       0      30      14976        0
     udplite_inpcb    408       0      36           2       0      30      14688        0
        SMR SHARED     24       8     503           8       0     254      12264        0
         malloc-16     16      33     717         214       0     254      12000        0
         malloc-16     16      33     717       24823       0     254      12000        0
         malloc-16     16      17     733          17       0     254      12000        0
         malloc-16     16      50     700          70       0     254      12000        0
         malloc-16     16      26     724          83       0     254      12000        0
       L VFS Cache    320       1      35           1       0      30      11520        0
        malloc-384    384       1      29           1       0      30      11520        0
        malloc-384    384       0      30           1       0      30      11520        0
       malloc-8192   8192       1       0           1       0       1       8192        0
           pcpu-16     16       8     504           8       0     254       8192        0
      vtnet_tx_hdr     24       0     334         765       0     254       8016        0
         malloc-16     16      12     488         150       0     254       8000        0
       UMA Slabs 1    176       9      13           9       0      62       3872        0
        KMAP ENTRY     96      12      27          14       0       0       3744        0
       FFS1 dinode    128       0       0           0       0     126          0        0
           ada_ccb    272       0       0           0       0      30          0        0
             swblk    136       0       0           0       0      62          0        0
          swpctrie    152       0       0           0       0      62          0        0
   cdg_qdiffsample     16       0       0           0       0     254          0        0
   pf state scrubs     40       0       0           0       0     254          0        0
   pf frag entries     40       0       0           0       0     254          0        0
          pf frags    256       0       0           0       0      62          0        0
  pf table entries    160       0       0           0       0     254          0        0
pf table entry counters     64       0       0           0       0     254          0        0
   pf UDP mappings    104       0       0           0       0     126          0        0
   pf source nodes    152       0       0           0       0     254          0        0
     pf state keys     88       0       0           0       0     126          0        0
         pf states    384       0       0           0       0     254          0        0
           pf tags    104       0       0           0       0     126          0        0
          pf mtags    184       0       0           0       0      62          0        0
      tcp_rack_pcb   1088       0       0           0       0       8          0        0
      tcp_rack_map    128       0       0           0       0     126          0        0
       tcp_bbr_pcb    896       0       0           0       0      16          0        0
       tcp_bbr_map    128       0       0           0       0     126          0        0
tfo_ccache_entries     80       0       0           0       0     126          0        0
               tfo      4       0       0           0       0     254          0        0
          sackhole     32       0       0           0       0     254          0        0
   sctp_asconf_ack     48       0       0           0       0     254          0        0
       sctp_asconf     40       0       0           0       0     254          0        0
sctp_stream_msg_out    112       0       0           0       0     254          0        0
        sctp_readq    152       0       0           0       0     254          0        0
        sctp_chunk    152       0       0           0       0     254          0        0
        sctp_raddr    736       0       0           0       0     254          0        0
         sctp_asoc   2256       0       0           0       0     254          0        0
   tcp_log_id_node    120       0       0           0       0     126          0        0
 tcp_log_id_bucket    176       0       0           0       0      62          0        0
           tcp_log    416       0       0           0       0     254          0        0
          tcpreass     48       0       0           0       0     254          0        0
    IPsec SA lft_c     16       0       0           0       0     254          0        0
            itimer    352       0       0           0       0      30          0        0
            AIOLIO    272       0       0           0       0      30          0        0
             AIOCB    552       0       0           0       0      16          0        0
               AIO    208       0       0           0       0      62          0        0
        mqnotifier    216       0       0           0       0      62          0        0
            mvdata     64       0       0           0       0     254          0        0
            mqueue    248       0       0           0       0      62          0        0
        TMPFS node    240       0       0           0       0      62          0        0
           NCLNODE    608       0       0           0       0      16          0        0
     LTS VFS Cache    360       0       0           0       0      30          0        0
     STS VFS Cache    144       0       0           0       0      62          0        0
           cryptop    280       0       0           0       0      30          0        0
  linux_dma_object     32       0       0           0       0     254          0        0
  linux_dma_pctrie    152       0       0           0       0      62          0        0
   IOMMU_MAP_ENTRY    112       0       0           0       0     126          0        0
            skbuff   1808       0       0           0       0       8          0        0
    mbuf_jumbo_16k  16384       0       0           0       0     254          0        0
     mbuf_jumbo_9k   9216       0       0           0       0     254          0        0
      audit_record   1280       0       0           0       0       8          0        0
         domainset     40       0       0           0       0     254          0        0
        MAC labels     40       0       0           0       0     254          0        0
            vnpbuf   2624       0       0           0       0      16          0        0
           nfspbuf   2624       0       0           0       0       4          0        0
            swwbuf   2624       0       0           0       0       2          0        0
            swrbuf   2624       0       0           0       0       4          0        0
          umtx_shm     88       0       0           0       0     126          0        0
           umtx pi     96       0       0           0       0     126          0        0
rangeset pctrie nodes    152       0       0           0       0      62          0        0
          rl_entry     48       0       0           0       0     254          0        0
      malloc-65536  65536       0       0           0       0       1          0        0
      malloc-65536  65536       0       0           0       0       1          0        0
      malloc-32768  32768       0       0           0       0       1          0        0
      malloc-32768  32768       0       0           0       0       1          0        0
      malloc-32768  32768       0       0           0       0       1          0        0
      malloc-32768  32768       0       0           0       0       1          0        0
      malloc-16384  16384       0       0           0       0       1          0        0
      malloc-16384  16384       0       0           0       0       1          0        0
      malloc-16384  16384       0       0           0       0       1          0        0
       malloc-8192   8192       0       0           0       0       1          0        0
       malloc-4096   4096       0       0           0       0       2          0        0
        malloc-512    512       0       0           0       0      30          0        0
           pcpu-32     32       0       0           0       0     254          0        0
            pcpu-4      4       0       0           0       0     254          0        0
            fakepg    104       0       0           0       0     126          0        0
          UMA Hash    256       0       0           0       0      62          0        0

Crashes (1):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2025/05/17 04:05 freebsd-src 4dbe268d2e7a f41472b0 console log report ci-freebsd-main panic: negative vmsize for uid -NUM
* Struck through repros no longer work on HEAD.