syzbot


Fatal trap NUM: page fault in m_tag_delete_chain

Status: upstream: reported on 2024/04/09 00:51
Reported-by: syzbot+ca2d480ae4e862834166@syzkaller.appspotmail.com
First crash: 23d, last: 23d

Sample crash report:
Fatal trap 12: page fault while in kernel mode
pid 1725 (syz-executor.2), jid 0, uid 0: exited on signal 7 (no core dump - too large)
cpuid = 0; apic id = 00
fault virtual address	= 0xffffffffffffffff
fault code		= supervisor read data, page not present
instruction pointer	= 0x20:0xffffffff8167135d
stack pointer	        = 0x28:0xfffffe0076eca6a0
frame pointer	        = 0x28:0xfffffe0076eca6d0
code segment		= base 0x0, limit 0xfffff, type 0x1b
			= DPL 0, pres 1, long 1, def32 0, gran 1
processor eflags	= interrupt enabled, resume, IOPL = 0
current process		= 1723 (syz-executor.3)
rdi: ffffffffffffffff rsi: 00000000000001ac rdx: 00000000000001ab
rcx: fffffe00033eee30  r8: 0000000000000000  r9: 0000000000000009

rax: fffffe00033eee30 rbx: fffffe0077447740 rbp: fffffe0076eca6d0
r10: 0000000000000000 r11: fffffe0077447c60 r12: ffffffff84bf5400

FreeBSD/amd64r13: fffffe0076eca8b0 r14: ffffffffffffffff r15: fffffe007744775c
 (ci-freebsd-maitrap number		= 12
panic: page fault
cpuid = 0
time = 1712655005
KDB: stack backtrace:
db_trace_self_wrapper() at db_trace_self_wrapper+0xc6/frame 0xfffffe0076ec9dd0
kdb_backtrace() at kdb_backtrace+0xd0/frame 0xfffffe0076ec9f30
vpanic() at vpanic+0x26a/frame 0xfffffe0076eca0f0
panic() at panic+0xb5/frame 0xfffffe0076eca1b0
trap_fatal() at trap_fatal+0x7f2/frame 0xfffffe0076eca2d0
trap_pfault() at trap_pfault+0x5c7/frame 0xfffffe0076eca3f0
trap() at trap+0x648/frame 0xfffffe0076eca5d0
calltrap() at calltrap+0x8/frame 0xfffffe0076eca5d0
--- trap 0xc, rip = 0xffffffff8167135d, rsp = 0xfffffe0076eca6a0, rbp = 0xfffffe0076eca6d0 ---
m_tag_delete_chain() at m_tag_delete_chain+0x5d/frame 0xfffffe0076eca6d0
m_free() at m_free+0x82/frame 0xfffffe0076eca710
m_freem() at m_freem+0x48/frame 0xfffffe0076eca730
uipc_sosend_stream_or_seqpacket() at uipc_sosend_stream_or_seqpacket+0x126d/frame 0xfffffe0076eca9a0
sousrsend() at sousrsend+0x117/frame 0xfffffe0076ecaa30
kern_sendit() at kern_sendit+0x4fc/frame 0xfffffe0076ecab90
sendit() at sendit+0x15f/frame 0xfffffe0076ecabf0
sys_sendmsg() at sys_sendmsg+0x181/frame 0xfffffe0076ecad10
amd64_syscall() at amd64_syscall+0x4cb/frame 0xfffffe0076ecaf30
fast_syscall_common() at fast_syscall_common+0xf8/frame 0xfffffe0076ecaf30
--- syscall (198, FreeBSD ELF64, __syscall), rip = 0x2aeb2a, rsp = 0x825af0f08, rbp = 0x825af0f80 ---
KDB: enter: panic
[ thread pid 1723 tid 100822 ]
Stopped at      kdb_enter+0x6e: movq    $0,0x23c8477(%rip)
db> set $lines = 0
db> set $maxwidth = 0
db> show registers
cs                        0x20
ds                        0x3b
es                        0x3b
fs                        0x13
gs                        0x1b
ss                        0x28
rax                       0x12
rcx         0xfffffe0072600000
rdx                    0x3ffff
rbx         0xffffffff826ed680  .str.27
rsp         0xfffffe0076ec9f10
rbp         0xfffffe0076ec9f30
rsi                    0x40001
rdi         0xffffffff815c0059  printf+0x149
r8                           0
r9                  0xffffffff
r10                          0
r11                       0x17
r12         0xfffffe0077447740
r13         0xfffffffffffffffe
r14         0xffffffff826ed680  .str.27
r15                          0
rip         0xffffffff815acc1e  kdb_enter+0x6e
rflags                    0x46
kdb_enter+0x6e: movq    $0,0x23c8477(%rip)
db> show proc
Process 1723 (syz-executor.3) at 0xfffffe0074408020:
 state: NORMAL
 uid: 0  gids: 0, 0, 5
 parent: pid 776 at 0xfffffe006d079060
 ABI: FreeBSD ELF64
 flag: 0x10000080  flag2: 0
 arguments: /root/syz-executor.3 exec
 reaper: 0xfffffe005420b040 reapsubtree: 1
 sigparent: 20
 vmspace: 0xfffffe0076c539a0
   (map 0xfffffe0076c539a0)
   (map.pmap 0xfffffe0076c53a60)
   (pmap 0xfffffe0076c53ad0)
 threads: 2
100693                   RunQ                                syz-executor.3
100822                   Run     CPU 0                       syz-executor.3
db> ps
  pid  ppid  pgrp   uid  state   wmesg   wchan               cmd
 1724  1723   776     0  S       uwait   0xfffffe0074177300  syz-executor.3
 1723   776   776     0  R       (threaded)                  syz-executor.3
100693                   RunQ                                syz-executor.3
100822                   Run     CPU 0                       syz-executor.3
 1722   773   773     0  R       (threaded)                  syz-executor.2
100813                   RunQ                                syz-executor.2
100821                   Run     CPU 1                       syz-executor.2
100823                   S       uwait   0xfffffe0076d4f500  syz-executor.2
 1717     1   773     0  S       uwait   0xfffffe006d682a00  syz-executor.2
 1711  1710   771     0  S       uwait   0xfffffe0074177d00  syz-executor.1
 1710  1709   771     0  SV      connec  0xfffffe006a81c85a  syz-executor.1
 1709   771   771     0  R       (threaded)                  syz-executor.1
100721                   RunQ                                syz-executor.1
100810                   D       ppwait  0xfffffe007649b000  syz-executor.1
100811                   S       uwait   0xfffffe0076d4f380  syz-executor.1
 1708     1   771     0  S       uwait   0xfffffe0076d50480  syz-executor.1
 1706     1   771     0  S       uwait   0xfffffe0076d4f280  syz-executor.1
 1701     1   771     0  S       uwait   0xfffffe0074177500  syz-executor.1
 1699     1   771     0  S       umtxn   0xfffffe0076d4f080  syz-executor.1
 1693     1   776     0  S       uwait   0xfffffe006d681280  syz-executor.3
 1690     1   776     0  S       uwait   0xfffffe0076d4ee00  syz-executor.3
 1683     1   773     0  S       uwait   0xfffffe0076d4f880  syz-executor.2
 1675     1   776     0  S       uwait   0xfffffe0074177680  syz-executor.3
 1669     1   771     0  SV      uwait   0xfffffe005736de80  syz-executor.1
 1615     1   776     0  SV      uwait   0xfffffe0074177100  syz-executor.3
 1587     1   771     0  SV      uwait   0xfffffe0076d4ef00  syz-executor.1
 1581     0     0     0  DL      -       0xffffffff83a662c0  [soaiod4]
 1580     0     0     0  DL      -       0xffffffff83a662c0  [soaiod3]
 1579     0     0     0  DL      -       0xffffffff83a662c0  [soaiod2]
 1578     0     0     0  DL      -       0xffffffff83a662c0  [soaiod1]
 1571     1   776     0  SV      uwait   0xfffffe0076d4f980  syz-executor.3
 1564     1   771     0  SV      uwait   0xfffffe0076d50280  syz-executor.1
 1550     1   776     0  SV      uwait   0xfffffe0076d4fa80  syz-executor.3
 1539     1   771     0  SV      uwait   0xfffffe0076d4ed00  syz-executor.1
 1537     1   776     0  SV      uwait   0xfffffe0076d4fb80  syz-executor.3
 1531     1   773     0  SV      fifoor  0xfffffe0058923048  syz-executor.2
 1521  1520   776     0  SV      uwait   0xfffffe0076d50380  syz-executor.3
 1520     1   776     0  DV      ppwait  0xfffffe0076d9faa0  syz-executor.3
 1515     1   771     0  SV      uwait   0xfffffe00578c9580  syz-executor.1
 1502  1501   776     0  SV      uwait   0xfffffe0074177b00  syz-executor.3
 1501  1500   776     0  DV      ppwait  0xfffffe0076d5faa0  syz-executor.3
 1500  1499   776     0  DV      ppwait  0xfffffe0076da0000  syz-executor.3
 1499  1498   776     0  DV      ppwait  0xfffffe0076d60000  syz-executor.3
 1498  1497   776     0  DV      ppwait  0xfffffe0076da0560  syz-executor.3
 1497  1496   776     0  DV      ppwait  0xfffffe0076d60560  syz-executor.3
 1496  1495   776     0  DV      ppwait  0xfffffe0076da0ac0  syz-executor.3
 1495  1494   776     0  DV      ppwait  0xfffffe0076d60ac0  syz-executor.3
 1494  1493   776     0  DV      ppwait  0xfffffe0076cf3560  syz-executor.3
 1493  1492   776     0  DV      ppwait  0xfffffe0076d9d500  syz-executor.3
 1492  1491   776     0  DV      ppwait  0xfffffe0076cf3ac0  syz-executor.3
 1491  1490   776     0  DV      ppwait  0xfffffe0076d9da60  syz-executor.3
 1490  1489   776     0  DV      ppwait  0xfffffe0076d5d500  syz-executor.3
 1489  1488   776     0  DV      ppwait  0xfffffe0076d9dfc0  syz-executor.3
 1488  1487   776     0  DV      ppwait  0xfffffe0076d5da60  syz-executor.3
 1487  1486   776     0  DV      ppwait  0xfffffe0076cf0a60  syz-executor.3
 1486  1485   776     0  DV      ppwait  0xfffffe0076d5dfc0  syz-executor.3
 1485  1484   776     0  DV      ppwait  0xfffffe0076cf0fc0  syz-executor.3
 1484  1483   776     0  DV      ppwait  0xfffffe0076cf1520  syz-executor.3
 1483  1482   776     0  DV      ppwait  0xfffffe0076d5e520  syz-executor.3
 1482  1481   776     0  DV      ppwait  0xfffffe0076cf1a80  syz-executor.3
 1481  1480   776     0  DV      ppwait  0xfffffe0076d5ea80  syz-executor.3
 1480  1479   776     0  DV      ppwait  0xfffffe0076cf1fe0  syz-executor.3
 1479  1478   776     0  DV      ppwait  0xfffffe0076d5efe0  syz-executor.3
 1478  1477   776     0  DV      ppwait  0xfffffe0076cf2540  syz-executor.3
 1477  1476   776     0  DV      ppwait  0xfffffe0076ccda80  syz-executor.3
 1476  1475   776     0  DV      ppwait  0xfffffe0076cf2aa0  syz-executor.3
 1475  1474   776     0  DV      ppwait  0xfffffe0076ccdfe0  syz-executor.3
 1474  1473   776     0  DV      ppwait  0xfffffe0076cf3000  syz-executor.3
 1473  1472   776     0  DV      ppwait  0xfffffe0076cce540  syz-executor.3
 1472  1471   776     0  DV      ppwait  0xfffffe0076c8aaa0  syz-executor.3
 1471  1470   776     0  DV      ppwait  0xfffffe0076cceaa0  syz-executor.3
 1470  1469   776     0  DV      ppwait  0xfffffe0076c8b000  syz-executor.3
 1469  1468   776     0  DV      ppwait  0xfffffe0076ccf000  syz-executor.3
 1468  1467   776     0  DV      ppwait  0xfffffe0076c8b560  syz-executor.3
 1467  1466   776     0  DV      ppwait  0xfffffe0076ccf560  syz-executor.3
 1466  1465   776     0  DV      ppwait  0xfffffe0076c8bac0  syz-executor.3
 1465  1464   776     0  DV      ppwait  0xfffffe0076ccfac0  syz-executor.3
 1464  1463   776     0  DV      ppwait  0xfffffe0076ccc500  syz-executor.3
 1463  1462   776     0  DV      ppwait  0xfffffe0076cf0500  syz-executor.3
 1462  1461   776     0  DV      ppwait  0xfffffe0076ccca60  syz-executor.3
 1461  1460   776     0  DV      ppwait  0xfffffe00767fbac0  syz-executor.3
 1460  1459   776     0  DV      ppwait  0xfffffe0076cccfc0  syz-executor.3
 1459  1458   776     0  DV      ppwait  0xfffffe0076c88500  syz-executor.3
 1458  1457   776     0  DV      ppwait  0xfffffe0076ccd520  syz-executor.3
 1457  1456   776     0  DV      ppwait  0xfffffe0076c88a60  syz-executor.3
 1456  1455   776     0  DV      ppwait  0xfffffe00767d7fe0  syz-executor.3
 1455  1454   776     0  DV      ppwait  0xfffffe0076c88fc0  syz-executor.3
 1454  1453   776     0  DV      ppwait  0xfffffe00767d9560  syz-executor.3
 1453  1452   776     0  DV      ppwait  0xfffffe0076c89520  syz-executor.3
 1452  1451   776     0  DV      ppwait  0xfffffe00767f8a60  syz-executor.3
 1451  1450   776     0  DV      ppwait  0xfffffe0076c89a80  syz-executor.3
 1450  1449   776     0  DV      ppwait  0xfffffe006a84f540  syz-executor.3
 1449  1448   776     0  DV      ppwait  0xfffffe0076c89fe0  syz-executor.3
 1448  1447   776     0  DV      ppwait  0xfffffe0076678500  syz-executor.3
 1447  1446   776     0  DV      ppwait  0xfffffe0076c8a540  syz-executor.3
 1446  1445   776     0  DV      ppwait  0xfffffe00767d7520  syz-executor.3
 1445  1444   776     0  DV      ppwait  0xfffffe00767f8fc0  syz-executor.3
 1444  1443   776     0  DV      ppwait  0xfffffe007667b000  syz-executor.3
 1443  1442   776     0  DV      ppwait  0xfffffe00767f9520  syz-executor.3
 1442  1441   776     0  DV      ppwait  0xfffffe00767fb560  syz-executor.3
 1441  1440   776     0  DV      ppwait  0xfffffe00767f9a80  syz-executor.3
 1440  1439   776     0  DV      ppwait  0xfffffe00767d6fc0  syz-executor.3
 1439  1438   776     0  DV      ppwait  0xfffffe00767d6500  syz-executor.3
 1438     1   776     0  DV      ppwait  0xfffffe00767f9fe0  syz-executor.3
 1416  1415   776     0  SV      uwait   0xfffffe0074178900  syz-executor.3
 1415     1   776     0  DV      ppwait  0xfffffe00767f8500  syz-executor.3
 1408     1   773     0  SV      fifoor  0xfffffe0058923028  syz-executor.2
 1406  1405   771     0  S       uwait   0xfffffe0074178c80  syz-executor.1
 1405     1   771     0  SV      uwait   0xfffffe0074179980  syz-executor.1
 1394     1   776    -1  SV      uwait   0xfffffe0074178e80  syz-executor.3
 1382     1   773     0  SV      uwait   0xfffffe007417a480  syz-executor.2
 1361     1   776    -1  SV      uwait   0xfffffe006d682580  syz-executor.3
 1355  1354   773     0  SV      uwait   0xfffffe0074178b00  syz-executor.2
 1354     1   773     0  DV      ppwait  0xfffffe00767d9000  syz-executor.2
 1345     1   771    -1  SV      uwait   0xfffffe006d681e00  syz-executor.1
 1293  1292   776     0  SV      uwait   0xfffffe006d681c00  syz-executor.3
 1292     1   776     0  DV      ppwait  0xfffffe007440a000  syz-executor.3
 1283     1   776     0  S       uwait   0xfffffe006d682080  syz-executor.3
 1268     1   771     0  S       uwait   0xfffffe006d682280  syz-executor.1
 1255     1   773     0  S       uwait   0xfffffe0074179880  syz-executor.2
 1245     1   771     0  S       uwait   0xfffffe005736ec00  syz-executor.1
 1238     1   776     0  SV      uwait   0xfffffe0057370580  syz-executor.3
 1211     1   773     0  S       uwait   0xfffffe005736ed00  syz-executor.2
 1181     1   776     0  S       uwait   0xfffffe0007980300  syz-executor.3
 1176  1175   773     0  SV      uwait   0xfffffe005736dd80  syz-executor.2
 1175     1   773     0  DV      ppwait  0xfffffe00579ecfc0  syz-executor.2
 1168     1  1168     0  SVs     uwait   0xfffffe005736e400  syz-executor.1
 1149     1   771 60928  SV      uwait   0xfffffe005736ee00  syz-executor.1
 1145     1   771     0  S       uwait   0xfffffe00578c9a80  syz-executor.1
 1120     1  1120     0  SVs     uwait   0xfffffe0057370280  syz-executor.2
 1119     1  1119     0  Ss+     ttyin   0xfffffe0007d1e4b0  getty
 1118     1  1118     0  Ss+     ttyin   0xfffffe005874a8b0  getty
 1117     1  1117     0  Ss+     ttyin   0xfffffe005874b0b0  getty
 1116     1  1116     0  Ss+     ttyin   0xfffffe005874b8b0  getty
 1115     1  1115     0  Ss+     ttyin   0xfffffe0056ec00b0  getty
 1114     1  1114     0  Ss+     ttyin   0xfffffe0056ec08b0  getty
 1113     1  1113     0  Ss+     ttyin   0xfffffe0056ec10b0  getty
 1112     1  1112     0  Ss+     ttyin   0xfffffe0056ec18b0  getty
 1111     1  1111     0  Ss+     ttyin   0xfffffe0056ec20b0  getty
 1106     1   776     0  S       uwait   0xfffffe005736e200  syz-executor.3
 1101     1   773     0  S       uwait   0xfffffe005736e000  syz-executor.2
 1095     1   771     0  S       uwait   0xfffffe0057370380  syz-executor.1
 1080     1  1080     0  SVs     uwait   0xfffffe006d682880  syz-executor.3
 1078     1   776     0  S       uwait   0xfffffe006d682680  syz-executor.3
 1075     1   776     0  S       uwait   0xfffffe0074179e00  syz-executor.3
 1070     1   771     0  SV      uwait   0xfffffe007417a080  syz-executor.1
 1067     1   771     0  S       uwait   0xfffffe0007980500  syz-executor.1
 1064     1   771     0  S       umtxn   0xfffffe006d681b00  syz-executor.1
 1055     1  1055     0  SVs     uwait   0xfffffe0074179480  syz-executor.3
 1051     1   771     0  SV      uwait   0xfffffe0057370680  syz-executor.1
 1048     1   773     0  SV      uwait   0xfffffe0074179380  syz-executor.2
 1040     1   776     0  SV      uwait   0xfffffe006d682480  syz-executor.3
 1008     1  1008     0  SVs     uwait   0xfffffe006d682780  syz-executor.2
  963     1   773     0  SV      uwait   0xfffffe00578c9280  syz-executor.2
  945     1   776     0  S       uwait   0xfffffe0057370480  syz-executor.3
  933     1   933     0  SVs     uwait   0xfffffe0074179c00  syz-executor.3
  926     1   773     0  S       uwait   0xfffffe00578c9d80  syz-executor.2
  920     1   920     0  SVs     uwait   0xfffffe0057370980  syz-executor.1
  919     1   919     0  SVs     uwait   0xfffffe0057370880  syz-executor.2
  916   915   915     0  D       tun_con 0xfffffe006cf196a8  ifconfig
  915   768   915     0  Ss      wait    0xfffffe00579ee5a0  syz-executor.0
  914     1   914     0  SVs     uwait   0xfffffe005736f680  syz-executor.3
  908     1   773     0  S       uwait   0xfffffe006d682380  syz-executor.2
  903     1   903     0  SVs     uwait   0xfffffe005736e700  syz-executor.3
  901     1   901     0  SVs     uwait   0xfffffe007417a280  syz-executor.1
  900     1   900     0  SVs     uwait   0xfffffe007417a180  syz-executor.2
  897     1   897     0  SVs     uwait   0xfffffe0074179d00  syz-executor.0
  880     1   773     0  S       uwait   0xfffffe0007980c80  syz-executor.2
  846     1   846     0  SVs     uwait   0xfffffe00578c9180  syz-executor.3
  822     0     0     0  DL      aiordy  0xfffffe006d695040  [aiod4]
  821     0     0     0  DL      aiordy  0xfffffe006d6955a0  [aiod3]
  820     0     0     0  DL      aiordy  0xfffffe006d695b00  [aiod2]
  819     0     0     0  DL      aiordy  0xfffffe006d077580  [aiod1]
  818     1   818     0  SVs     uwait   0xfffffe00578c9e80  syz-executor.2
  776   768   776     0  Rs                                  syz-executor.3
  773   768   773     0  Rs                                  syz-executor.2
  771   768   771     0  Rs                                  syz-executor.1
  768   766   766     0  S       (threaded)                  syz-fuzzer
100112                   S       wait    0xfffffe0007ce8ae0  syz-fuzzer
100113                   S       uwait   0xfffffe0007980e80  syz-fuzzer
100114                   S       uwait   0xfffffe005736d000  syz-fuzzer
100115                   S       uwait   0xfffffe005736d100  syz-fuzzer
100116                   S       uwait   0xfffffe006d683200  syz-fuzzer
100117                   S       uwait   0xfffffe006d683300  syz-fuzzer
100118                   S       kqread  0xfffffe0007c82a00  syz-fuzzer
100119                   S       wait    0xfffffe0007ce8ae0  syz-fuzzer
100120                   S       wait    0xfffffe0007ce8ae0  syz-fuzzer
100122                   S       wait    0xfffffe0007ce8ae0  syz-fuzzer
100130                   S       uwait   0xfffffe00578c9b80  syz-fuzzer
100147                   S       uwait   0xfffffe00578c9380  syz-fuzzer
  766   764   766     0  Ss      pause   0xfffffe0007ce9650  csh
  764   682   764     0  Ss      select  0xfffffe0007877040  sshd
  682     1   682     0  Ss      select  0xfffffe00078776c0  sshd
  423     1   423    65  Ss      select  0xfffffe00078779c0  dhclient
   17     0     0     0  DL      syncer  0xffffffff83a73ba0  [syncer]
   16     0     0     0  DL      vlruwt  0xfffffe0007cea060  [vnlru]
   15     0     0     0  DL      (threaded)                  [bufdaemon]
100079                   D       psleep  0xffffffff83a72180  [bufdaemon]
100082                   D       -       0xffffffff82e02140  [bufspacedaemon-0]
100093                   D       sdflush 0xfffffe005897bce8  [/ worker]
    9     0     0     0  DL      psleep  0xffffffff83abb680  [vmdaemon]
    8     0     0     0  DL      (threaded)                  [pagedaemon]
100077                   D       psleep  0xffffffff83aa34f8  [dom0]
100080                   D       launds  0xffffffff83aa3504  [laundry: dom0]
100081                   D       umarcl  0xffffffff81d508d0  [uma]
    7     0     0     0  DL      -       0xffffffff836d3cb0  [rand_harvestq]
    6     0     0     0  DL      pftm    0xffffffff841b1bb0  [pf purge]
    5     0     0     0  DL      waiting 0xffffffff844f4760  [sctp_iterator]
    4     0     0     0  DL      (threaded)                  [cam]
100044                   D       -       0xffffffff8369e340  [doneq0]
100045                   D       -       0xffffffff8369e2c0  [async]
100076                   D       -       0xffffffff8369e140  [scanner]
    3     0     0     0  DL      (threaded)                  [crypto]
100041                   D       crypto_ 0xffffffff83a9ed20  [crypto]
100042                   D       crypto_ 0xfffffe0007c85030  [crypto returns 0]
100043                   D       crypto_ 0xfffffe0007c85080  [crypto returns 1]
   14     0     0     0  DL      seqstat 0xfffffe0056f60c88  [sequencer 00]
   13     0     0     0  DL      (threaded)                  [geom]
100035                   D       -       0xffffffff838fee00  [g_event]
100036                   D       -       0xffffffff838fee20  [g_up]
100037                   D       -       0xffffffff838fee40  [g_down]
    2     0     0     0  WL      (threaded)                  [clock]
100029                   I                                   [clock (0)]
100030                   I                                   [clock (1)]
   12     0     0     0  WL      (threaded)                  [intr]
100012                   I                                   [swi6: task queue]
100013                   I                                   [swi6: Giant taskq]
100015                   I                                   [swi5: fast taskq]
100031                   I                                   [swi1: netisr 0]
100032                   I                                   [swi1: hpts]
100033                   I                                   [swi1: hpts]
100046                   I                                   [irq24: virtio_pci0]
100047                   I                                   [irq25: virtio_pci0]
100048                   I                                   [irq26: virtio_pci0]
100049                   I                                   [irq27: virtio_pci0]
100050                   I                                   [irq28: virtio_pci1]
100051                   I                                   [irq29: virtio_pci1]
100052                   I                                   [irq30: virtio_pci1]
100053                   I                                   [irq31: virtio_pci1]
100054                   I                                   [irq32: virtio_pci1]
100059                   I                                   [irq33: virtio_pci2]
100060                   I                                   [irq34: virtio_pci2]
100061                   I                                   [irq35: virtio_pci2]
100063                   I                                   [irq1: atkbd0]
100064                   I                                   [irq12: psm0]
100065                   I                                   [swi0: uart uart++]
100069                   I                                   [swi1: pf send]
   11     0     0     0  RL      (threaded)                  [idle]
100003                   CanRun                              [idle: cpu0]
100004                   CanRun                              [idle: cpu1]
    1     0     1     0  SLs     wait    0xfffffe005420b040  [init]
   10     0     0     0  DL      audit_w 0xffffffff83a9f780  [audit]
    0     0     0     0  DLs     (threaded)                  [kernel]
100000                   D       swapin  0xffffffff838ff7e0  [swapper]
100005                   D       -       0xfffffe00085f7d00  [softirq_0]
100006                   D       -       0xfffffe00085f7c00  [softirq_1]
100007                   D       -       0xfffffe00085f7b00  [if_io_tqg_0]
100008                   D       -       0xfffffe00085f7a00  [if_io_tqg_1]
100009                   D       -       0xfffffe00085f7900  [if_config_tqg_0]
100010                   D       -       0xfffffe00085f7800  [pci_hp taskq]
100011                   D       -       0xfffffe00085f7700  [kqueue_ctx taskq]
100014                   D       -       0xfffffe00085f7400  [thread taskq]
100016                   D       -       0xfffffe00085f7200  [aiod_kick taskq]
100017                   D       -       0xfffffe00085f7100  [deferred_unmount ta]
100018                   D       -       0xfffffe00085f7000  [inm_free taskq]
100019                   D       -       0xfffffe00085f6e00  [in6m_free taskq]
100020                   D       -       0xfffffe00085f6d00  [linuxkpi_irq_wq]
100021                   D       -       0xfffffe00085f6c00  [linuxkpi_short_wq_0]
100022                   D       -       0xfffffe00085f6c00  [linuxkpi_short_wq_1]
100023                   D       -       0xfffffe00085f6c00  [linuxkpi_short_wq_2]
100024                   D       -       0xfffffe00085f6c00  [linuxkpi_short_wq_3]
100025                   D       -       0xfffffe00085f6b00  [linuxkpi_long_wq_0]
100026                   D       -       0xfffffe00085f6b00  [linuxkpi_long_wq_1]
100027                   D       -       0xfffffe00085f6b00  [linuxkpi_long_wq_2]
100028                   D       -       0xfffffe00085f6b00  [linuxkpi_long_wq_3]
100034                   D       -       0xfffffe00085f6a00  [firmware taskq]
100039                   D       -       0xfffffe00085f6700  [crypto_0]
100040                   D       -       0xfffffe00085f6700  [crypto_1]
100055                   D       -       0xfffffe00085f6500  [vtnet0 rxq 0]
100056                   D       -       0xfffffe00085f6400  [vtnet0 txq 0]
100057                   D       -       0xfffffe00085f6300  [vtnet0 rxq 1]
100058                   D       -       0xfffffe00085f6200  [vtnet0 txq 1]
100062                   D       vtbslp  0xfffffe0007cbc380  [virtio_balloon]
100066                   D       -       0xffffffff826f28c1  [deadlkres]
100070                   D       -       0xfffffe005797ab00  [acpi_task_0]
100071                   D       -       0xfffffe005797ab00  [acpi_task_1]
100072                   D       -       0xfffffe005797ab00  [acpi_task_2]
100074                   D       -       0xfffffe00085f8100  [mca taskq]
100075                   D       -       0xfffffe00085f6600  [CAM taskq]
100547                   D       -       0xfffffe0057978500  [netlink_socket (PID]
 1041  1040   776     0  Z                                   syz-executor.3
 1052  1051   771     0  Z                                   syz-executor.1
 1239  1238   776     0  Z                                   syz-executor.3
 1383  1382   773     0  Z                                   syz-executor.2
 1725  1722   773     0  Z                                   syz-executor.2
  823   818   818     0  Z                                   syz-executor.2
  964   963   773     0  Z                                   syz-executor.2
db> show all locks
Process 1722 (syz-executor.2) thread 0xfffffe0076dc4740 (100821)
shared lockmgr ufs (ufs) r = 0 (0xfffffe006d030230) locked @ /syzkaller/managers/main/kernel/sys/kern/vfs_subr.c:3298
exclusive sx kernel linker (kernel linker) r = 0 (0xffffffff83902ec0) locked @ /syzkaller/managers/main/kernel/sys/kern/kern_linker.c:370
Process 916 (ifconfig) thread 0xfffffe006d760000 (100140)
exclusive sx ifnet_detach_sx (ifnet_detach_sx) r = 0 (0xffffffff83a74340) locked @ /syzkaller/managers/main/kernel/sys/net/if.c:3039
db> show malloc
              Type        InUse        MemUse     Requests
         sctp_stro           57        35267K          229
           pf_hash            5        11524K            5
            linker          395         5064K          589
          tcp_hpts            7         4801K            7
            devbuf         4192         4324K         4217
          filedesc          303         2425K         1696
         sysctloid        34865         2055K        34936
             vtbuf           24         1968K           46
               pcb          663         1385K         2128
              kobj          326         1304K          488
            newblk          825         1230K         1387
          vfscache            3         1025K            3
           subproc          409          875K         1937
          inodedep          158          571K          601
         ufs_quota            1          512K            1
          vfs_hash            1          512K            1
           callout            2          512K            2
              intr            4          472K            4
         vnet_data            2          224K            2
          acpitask            1          224K            1
            KTRACE          100          200K          270
            acpica         1674          184K        60830
           pagedep           90          151K          482
         sctp_atcl          379          143K         1288
           tidhash            3          141K            3
              vmem            3          138K            5
        tfo_ccache            1          128K            1
          IP reass            1          128K            1
            DEVFS1          109          109K          126
               sem            4          106K            4
        gtaskqueue           18           98K           18
           kdtrace          487           85K         2550
               bus          985           81K         5155
              umtx          576           72K          576
          mtx_pool            2           72K            2
          syncache            1           68K            1
     NFSD srvcache            3           68K            3
            module          514           65K          514
       ddb_capture            1           64K            1
           filemon            6           48K           42
              temp           35           39K         2060
               shm            2           34K            6
         hostcache            1           32K            1
            DEVFS3          128           32K          138
               msg            4           30K            4
            kbdmux            6           28K            6
      tcp_fsb_rack           10           21K          120
        DEVFS_RULE           56           20K           56
          routetbl          132           19K          503
            ifaddr           66           19K           68
         ufs_mount            4           17K            5
              proc            3           17K            3
               LRO           16           17K           16
               tty           16           16K           16
           ithread           97           16K           97
         sctp_atky          436           16K         1559
            kqueue          201           15K         1759
            bus-sc           34           15K         1687
      eventhandler          162           14K          162
           lltable           43           14K           43
       ether_multi          157           13K          179
             ifnet            7           13K            7
           pwddesc          192           12K         1743
            dirrem           46           12K          536
              kenv           95           12K           95
         newdirblk           86           11K          472
              GEOM           61           11K          481
              cred           41           11K          320
              rman           86           11K          451
         CAM queue            5           11K         1528
               BPF           10           10K          154
         in6_multi           65            9K           65
         bmsafemap            2            9K          574
               rpc            4            9K            4
           devstat            4            9K            4
              UART           12            9K           12
              ksem            1            8K           11
         sctp_timw           32            8K           32
              zlib            1            8K           20
             shmfd            1            8K           15
       pfs_vncache            1            8K            1
     audit_evclass          238            8K          300
         taskqueue           66            7K           66
          freefile           49            7K          422
            sglist            6            7K            6
           CAM DEV            3            6K          510
         sctp_athm          379            6K         1324
            CC Mem           24            6K          349
         pfs_nodes           22            6K           22
          pf_ifnet           15            6K           38
            DEVFSP           84            6K          274
             hhook           15            5K           17
       ufs_dirhash           24            5K           24
            plimit           18            5K          629
               UMA          267            5K          267
         proc-args          202            5K         2846
           session           33            5K           92
                vt           11            5K           11
          kcovinfo           65            5K           65
          pf_table            2            4K           27
           memdesc            1            4K            1
               MCA           32            4K           32
             evdev            4            4K            4
            diradd           29            4K          566
           acpisem           28            4K           28
          terminal           11            3K           11
           uidinfo            6            3K           14
          indirdep           10            3K           82
             mkdir           18            3K          944
             clone            9            3K            9
          freework            9            3K          456
         sctp_stri            4            2K           70
        local_apic            1            2K            1
           io_apic            1            2K            1
          freeblks            8            2K          415
         ipsec-saq            2            2K            2
            ip6ndp           12            2K           14
          sctp_map          114            2K          446
          in_multi            7            2K           12
            Unitno           30            2K           59
       inpcbpolicy           53            2K          759
          sctp_ifa           13            2K           14
           CAM XPT           22            2K          543
               msi           12            2K           12
               tun            4            2K            4
         toponodes            6            2K            6
      tcp_pcm_rack            5            2K           60
       ipsecpolicy            2            2K            2
           acpidev           20            2K           20
           softdep            1            1K            1
            sahead            1            1K            1
          secasvar            1            1K            1
             nhops            6            1K            8
       vnodemarker            2            1K           10
             lockf            9            1K          138
      NFSD session            1            1K            1
             selfd           14            1K        18203
        CAM periph            4            1K          271
             ipsec            3            1K            3
          sctp_ifn            6            1K           14
           netlink            3            1K           29
               mld            6            1K            6
              igmp            6            1K            6
              pfil            6            1K            6
               osd           29            1K          340
            isadev            6            1K            6
             mount           16            1K          358
          pci_link           10            1K           10
            crypto            4            1K           42
 encap_export_host           12            1K           12
        in_mfilter           12            1K           15
         cryptodev            8            1K          245
            select            4            1K           43
              cdev            2            1K            2
       lkpikmalloc            8            1K            9
       ip_moptions            6            1K           10
    chacha20random            1            1K            1
            biobuf            1            1K            1
            vnodes            3            1K            6
      NFSD lckfile            1            1K            1
     NFSD V4client            1            1K            1
             DEVFS            9            1K           10
           CAM SIM            2            1K            2
            feeder            7            1K            7
           tcpfunc            3            1K            3
        loginclass            3            1K            6
            prison            6            1K            6
           pf_rule            1            1K           44
          nexusdev            8            1K            8
            apmdev            1            1K            1
          atkbddev            2            1K            2
       ip6_msource            2            1K            4
               aio            4            1K            4
          pmchooks            1            1K            1
          CAM path            4            1K         1034
     CAM dev queue            2            1K            2
 CAM I/O Scheduler            1            1K            1
          sctp_vrf            1            1K            1
        ip_msource            1            1K            1
              vnet            1            1K            1
               pmc            1            1K            1
           entropy            2            1K           39
          acpiintr            1            1K            1
              cpus            2            1K            2
    vnet_data_free            1            1K            1
            soname            2            1K         4139
               iov            1            1K        15013
           Per-cpu            1            1K            1
          p1003.1b            1            1K            1
          filecaps            1            1K           86
            ipcomp            0            0K            0
               esp            0            0K            0
                ah            0            0K            0
       tcp_do_rack            0            0K            1
            mqdata            0            0K            0
        sctp_mcore            0            0K            0
        sctp_socko            0            0K          604
         sctp_iter            0            0K           10
         sctp_mvrf            0            0K            0
         sctp_cpal            0            0K            0
         sctp_cmsg            0            0K            0
         sctp_stre            0            0K            0
         sctp_athi            0            0K            0
         sctp_a_it            0            0K           10
         sctp_aadr            0            0K            0
           pf_altq            0            0K            0
           pf_osfp            0            0K            0
     pf_krule_item            0            0K            0
           pf_temp            0            0K            0
        madt_table            0            0K            2
          smartpqi            0            0K            0
               ixl            0            0K            0
        ice-resmgr            0            0K            0
         ice-osdep            0            0K            0
               ice            0            0K            0
              iavf            0            0K            0
             axgbe            0            0K            0
       fpukern_ctx            0            0K            0
          xen_intr            0            0K            0
           xen_hvm            0            0K            0
         legacydrv            0            0K            0
            bounce            0            0K            0
            busdma            0            0K            0
            qpidrv            0            0K            0
      dmar_idpgtbl            0            0K            0
          dmar_dom            0            0K            0
          dmar_ctx            0            0K            0
              isci            0            0K            0
      iommu_dmamap            0            0K            0
     hyperv_socket            0            0K            0
           bxe_ilt            0            0K            0
        aesni_data            0            0K            0
            xenbus            0            0K            0
     vm_fictitious            0            0K            0
           UMAHash            0            0K            0
         vm_pgdata            0            0K            0
           jblocks            0            0K            0
          savedino            0            0K          263
          sentinel            0            0K            0
            jfsync            0            0K            0
            jtrunc            0            0K            0
             sbdep            0            0K            3
           jsegdep            0            0K            0
              jseg            0            0K            0
         jfreefrag            0            0K            0
          jfreeblk            0            0K            0
           jnewblk            0            0K            0
            jmvref            0            0K            0
           jremref            0            0K            0
           jaddref            0            0K            0
           freedep            0            0K            0
          freefrag            0            0K            6
        allocindir            0            0K            0
       allocdirect            0            0K            0
          ufs_trim            0            0K            0
           mactemp            0            0K            0
     audit_trigger            0            0K            0
 audit_pipe_presel            0            0K            0
     audit_pipeent            0            0K            0
        audit_pipe            0            0K            0
      audit_evname            0            0K            0
         audit_bsm            0            0K            0
      audit_gidset            0            0K            0
        audit_text            0            0K            0
        audit_path            0            0K            0
        audit_data            0            0K            0
        audit_cred            0            0K            0
          ktls_ocf            0            0K            0
        MLX5EEPROM            0            0K            0
        MLX5EEPROM            0            0K            0
        MLX5EEPROM            0            0K            0
        MLX5EEPROM            0            0K            0
        MLX5EEPROM            0            0K            0
      MLX5E_TLS_RX            0            0K            0
        MLX5EEPROM            0            0K            0
         MLX5E_TLS            0            0K            0
        MLX5EEPROM            0            0K            0
        MLX5EEPROM            0            0K            0
        MLX5EEPROM            0            0K            0
            MLX5EN            0            0K            0
        MLX5EEPROM            0            0K            0
        MLX5EEPROM            0            0K            0
        MLX5EEPROM            0            0K            0
          MLX5DUMP            0            0K            0
        MLX5EEPROM            0            0K            0
        MLX5EEPROM            0            0K            0
        MLX5EEPROM            0            0K            0
       simple_attr            0            0K            0
          seq_file            0            0K            0
           lkpiskb            0            0K            0
             radix            0            0K            0
               idr            0            0K            0
          lkpindev            0            0K            0
           lkpimhi            0            0K            0
            lkpifw            0            0K            0
         lkpi80211            0            0K            0
               NLM            0            0K            0
    ipsec-spdcache            0            0K            0
         ipsec-reg            0            0K            0
        ipsec-misc            0            0K            0
      ipsecrequest            0            0K            0
            ip6opt            0            0K           11
      ip6_moptions            0            0K            3
       in6_mfilter            0            0K           12
             frag6            0            0K            0
            tcplog            0            0K            0
        tcp_hwpace            0            0K            0
              ipid            0            0K            0
         80211scan            0            0K            0
      80211ratectl            0            0K            0
        80211power            0            0K            0
       80211nodeie            0            0K            0
         80211node            0            0K            0
      80211mesh_gt            0            0K            0
      80211mesh_rt            0            0K            0
         80211perr            0            0K            0
         80211prep            0            0K            0
         80211preq            0            0K            0
          80211dfs            0            0K            0
       80211crypto            0            0K            0
          80211vap            0            0K            0
             iflib            0            0K            0
              vlan            0            0K            0
               gif            0            0K            0
           ifdescr            0            0K            0
           fadvise            0            0K            0
           VN POLL            0            0K            0
            statfs            0            0K          204
     namei_tracker            0            0K            0
       export_host            0            0K            0
        cl_savebuf            0            0K            4
               lio            0            0K          327
               acl            0            0K            0
          mbuf_tag            0            0K            0
              ktls            0            0K            0
              accf            0            0K            0
               pts            0            0K            0
           timerfd            0            0K            0
          procdesc            0            0K           10
          ioctlops            0            0K          352
           eventfd            0            0K            0
           Witness            0            0K            0
             stack            0            0K            0
              sbuf            0            0K          330
          firmware            0            0K            0
        compressor            0            0K            0
              SWAP            0            0K            0
         sysctltmp            0            0K          683
            sysctl            0            0K            3
              ekcd            0            0K            0
            dumper            0            0K            0
          sendfile            0            0K            0
              rctl            0            0K            0
             cache            0            0K            0
      prison_racct            0            0K            0
       Fail Points            0            0K            0
             sigio            0            0K            1
filedesc_to_leader            0            0K            0
               pwd            0            0K            0
       tty console            0            0K            0
         boottrace            0            0K            0
        isofs_node            0            0K            0
       isofs_mount            0            0K            0
     tr_raid5_data            0            0K            0
    tr_raid1e_data            0            0K            0
     tr_raid1_data            0            0K            0
     tr_raid0_data            0            0K            0
    tr_concat_data            0            0K            0
       md_sii_data            0            0K            0
   md_promise_data            0            0K            0
    md_nvidia_data            0            0K            0
   md_jmicron_data            0            0K            0
     md_intel_data            0            0K            0
       md_ddf_data            0            0K            0
         raid_data            0            0K           72
     geom_flashmap            0            0K            0
         tmpfs dir            0            0K            0
        tmpfs name            0            0K            0
       tmpfs mount            0            0K            0
     tmpfs extattr            0            0K            0
           NFS FHA            0            0K            0
         newnfsmnt            0            0K            0
  newnfsclient_req            0            0K            0
   NFSCL layrecall            0            0K            0
     NFSCL session            0            0K            0
     NFSCL sockreq            0            0K            0
     NFSCL devinfo            0            0K            0
     NFSCL flayout            0            0K            0
      NFSCL layout            0            0K            0
     NFSD rollback            0            0K            0
      NFSCL diroff            0            0K            0
       NEWdirectio            0            0K            0
        NEWNFSnode            0            0K            0
         NFSCL lck            0            0K            0
      NFSCL lckown            0            0K            0
      NFSCL client            0            0K            0
       NFSCL deleg            0            0K            0
        NFSCL open            0            0K            0
       NFSCL owner            0            0K            0
            NFS fh            0            0K            0
           NFS req            0            0K            0
     NFSD usrgroup            0            0K            0
       NFSD string            0            0K            0
       NFSD V4lock            0            0K            0
      NFSD V4state            0            0K            0
       msdosfs_fat            0            0K            0
     msdosfs_mount            0            0K            0
      msdosfs_node            0            0K            0
            DEVFS4            0            0K            0
            DEVFS2            0            0K            0
            gntdev            0            0K            0
       privcmd_dev            0            0K            0
        evtchn_dev            0            0K            0
          xenstore            0            0K            0
               xnb            0            0K            0
          xen_acpi            0            0K            0
              xbbd            0            0K            0
               xbd            0            0K            0
           Balloon            0            0K            0
          sysmouse            0            0K            0
            vtfont            0            0K            0
            pvscsi            0            0K            0
            USBdev            0            0K            0
               USB            0            0K            0
            twsbuf            0            0K            0
       tcp_log_dev            0            0K            0
      midi buffers            0            0K            0
             mixer            0            0K            0
              ac97            0            0K            0
             hdacc            0            0K            0
              hdac            0            0K            0
              hdaa            0            0K            0
       SIIS driver            0            0K            0
               PUC            0            0K            0
          ppbusdev            0            0K            0
            sr_iov            0            0K            0
               OCS            0            0K            0
               OCS            0            0K            0
              nvme            0            0K            0
               nvd            0            0K            0
            netmap            0            0K            0
            mwldev            0            0K            0
        MVS driver            0            0K            0
          mrsasbuf            0            0K            0
          mpt_user            0            0K            0
          mps_user            0            0K            0
            MPSSAS            0            0K            0
               mps            0            0K            0
          mpr_user            0            0K            0
            MPRSAS            0            0K            0
               mpr            0            0K            0
            mfibuf            0            0K            0
        md_sectors            0            0K            0
           md_disk            0            0K            0
           malodev            0            0K            0
               LED            0            0K            0
          ix_sriov            0            0K            0
                ix            0            0K            0
            ipsbuf            0            0K            0
         ciss_data            0            0K            0
         BACKLIGHT            0            0K            0
           ath_hal            0            0K            0
            athdev            0            0K            0
           ata_pci            0            0K            0
           ata_dma            0            0K            0
       ata_generic            0            0K            0
       AHCI driver            0            0K            0
               agp            0            0K            0
           acpipwr            0            0K            0
         acpi_perf            0            0K            0
         acpicmbat            0            0K            0
        aacraidcam            0            0K            0
       aacraid_buf            0            0K            0
            aaccam            0            0K            0
            aacbuf            0            0K            0
              zstd            0            0K            0
            XZ_DEC            0            0K            0
            nvlist            0            0K            0
          SCSI ENC            0            0K            0
           SCSI sa            0            0K            0
         scsi_pass            0            0K            0
           scsi_da            0            0K           69
            ata_da            0            0K            0
           scsi_ch            0            0K            0
           scsi_cd            0            0K            0
           nvme_da            0            0K            0
           CAM CCB            0            0K          523
     CAM ccb queue            0            0K            0
db> show uma
              Zone   Size    Used    Free    Requests  Sleeps  Bucket  Total Mem    XFree
   mbuf_jumbo_page   4096    8320    1078       36937       0     254   38494208        0
      malloc-16384  16384     156       1         851       0       1    2572288        0
              mbuf    256    8796     867       70998       0     254    2473728        0
       malloc-4096   4096     534       4        2834       0       2    2203648        0
        malloc-384    384    4602      48        5524       0      30    1785600        0
          BUF TRIE    144     234   11554         829       0      62    1697472        0
      mbuf_cluster   2048     762       0         762       0     254    1560576        0
        malloc-128    128   11445     149       11562       0     126    1484032        0
        RADIX NODE    144    9014     109       43422       0      62    1313712        0
       UMA Slabs 0    112   11391      15       11391       0     126    1277472        0
         sctp_asoc   2256      57     453         223       0     254    1150560        0
      malloc-65536  65536      16       0          19       0       1    1048576        0
         vmem btag     56   17462      73       17462       0     254     981960        0
         FFS inode   1168     629      22        1057       0       8     760368        0
       malloc-2048   2048     320       8        1032       0       8     671744        0
           sctp_ep   1144     318     193        1030       0     254     584584        0
            THREAD   1824     287       1         823       0       8     525312        0
          lkpicurr    168       2    3094           2       0      62     520128        0
              pbuf   2624       0     198           0       0       2     519552        0
         VM OBJECT    264    1816      44       21725       0      30     491040        0
            socket    960     361     147        3027       0     254     487680        0
        sctp_raddr    736      63     454         234       0     254     380512        0
        256 Bucket   2048     154      22        1167       0       8     360448        0
             VNODE    448     667      89        1098       0      30     338688        0
         MAP ENTRY     96    2981     169       63742       0     126     302400        0
              PROC   1376     198      11        1725       0       8     287584        0
        malloc-256    256     836     229        1678       0      62     272640        0
         malloc-64     64    3870     225        3896       0     254     262080        0
     FPU_save_area    832     289      17        1175       0      16     254592        0
       malloc-2048   2048     107      13         367       0       8     245760        0
         malloc-16     16   14424     326       14826       0     254     236000        0
            DEVCTL   1024      22     198         147       0       0     225280        0
         filedesc0   1072     192      11        1743       0       8     217616        0
           tcp_log    416      12     501          74       0     254     213408        0
       malloc-1024   1024     179      29         386       0      16     212992        0
      malloc-32768  32768       2       4          73       0       1     196608        0
       mbuf_packet    256     114     648        9265       0     254     195072        0
        malloc-128    128    1299     220       29847       0     126     194432        0
        malloc-256    256     576     174        2321       0      62     192000        0
         UMA Zones    768     239       0         239       0      16     183552        0
         malloc-32     32    5279     391        5311       0     254     181440        0
       FFS2 dinode    256     629      61        1056       0      62     176640        0
            lkpimm     56       1    3095           1       0     254     173376        0
       S VFS Cache    104    1022     382        1590       0     126     146016        0
      malloc-65536  65536       0       2          76       0       1     131072        0
      malloc-65536  65536       0       2         110       0       1     131072        0
        malloc-128    128     706     317        2257       0     126     130944        0
             unpcb    256       6     504        1211       0     254     130560        0
        malloc-384    384     170     160         613       0      30     126720        0
          ksiginfo    112     193     851        1152       0     126     116928        0
       malloc-2048   2048      13      43        1140       0       8     114688        0
        malloc-256    256     388      47        1967       0      62     111360        0
       malloc-8192   8192      12       1          49       0       1     106496        0
        malloc-128    128     661     114        1243       0     126      99200        0
      malloc-32768  32768       3       0           3       0       1      98304        0
        malloc-384    384     211      29         554       0      30      92160        0
          UMA Kegs    384     226       7         226       0      30      89472        0
             g_bio    408       0     210        6340       0      30      85680        0
        128 Bucket   1024      56      27         299       0      16      84992        0
       malloc-8192   8192       9       1          11       0       1      81920        0
       malloc-4096   4096      16       4          33       0       2      81920        0
        sctp_readq    152       0     520           8       0     254      79040        0
        sctp_chunk    152      28     492          71       0     254      79040        0
           VMSPACE    616      97      17        1359       0      16      70224        0
         64 Bucket    512      78      58        2254       0      30      69632        0
         malloc-64     64     768     303        4508       0     254      68544        0
         malloc-64     64     643     428       16120       0     254      68544        0
        malloc-128    128     384     143         983       0     126      67456        0
      malloc-65536  65536       1       0           1       0       1      65536        0
      malloc-65536  65536       0       1           1       0       1      65536        0
      malloc-65536  65536       1       0           1       0       1      65536        0
      malloc-32768  32768       2       0           2       0       1      65536        0
      malloc-32768  32768       2       0           2       0       1      65536        0
      malloc-32768  32768       0       2         120       0       1      65536        0
       malloc-4096   4096      12       4          26       0       2      65536        0
             Files     80     542     258       11182       0     126      64000        0
         udp_inpcb    416      14     139         283       0      30      63648        0
         tcp_inpcb   1304      24      24         327       0       8      62592        0
sctp_stream_msg_out    112      11     529          55       0     254      60480        0
         malloc-64     64     467     352         961       0     254      52416        0
       tcp_bbr_map    128       0     403         542       0     126      51584        0
        malloc-256    256     132      63         661       0      62      49920        0
        malloc-256    256     108      87        2280       0      62      49920        0
        malloc-256    256      73     122         202       0      62      49920        0
         32 Bucket    256      82     113        1834       0      62      49920        0
           DIRHASH   1024      35      13          35       0      16      49152        0
             NAMEI   1024       2      46       16745       0      16      49152        0
       malloc-2048   2048      17       7          35       0       8      49152        0
       malloc-1024   1024      10      38        1589       0      16      49152        0
             ripcb    384       6     114         122       0      30      46080        0
          syncache    168       0     264           4       0     254      44352        0
         TURNSTILE    136     289      26         289       0      62      42840        0
            pcpu-8      8    4832     288        5497       0     254      40960        0
              pipe    728      23      32         389       0      16      40040        0
            da_ccb    544       0      70        1718       0      16      38080        0
         hostcache     64       2     565           2       0     254      36288        0
         malloc-64     64      26     541       18321       0     254      36288        0
         malloc-64     64     113     454         792       0     254      36288        0
         malloc-64     64     211     356        1939       0     254      36288        0
         malloc-64     64      25     542          29       0     254      36288        0
         malloc-32     32     617     517        2413       0     254      36288        0
        malloc-128    128       5     274          12       0     126      35712        0
        malloc-128    128      46     233        3466       0     126      35712        0
        malloc-128    128      65     214          72       0     126      35712        0
     routing nhops    256      26     109          33       0      62      34560        0
           ttyoutq    256      72      63         448       0      62      34560        0
        malloc-256    256      27     108         577       0      62      34560        0
        malloc-256    256      52      83         502       0      62      34560        0
        SLEEPQUEUE     88     289      95         289       0     126      33792        0
      malloc-16384  16384       2       0           2       0       1      32768        0
      malloc-16384  16384       0       2         160       0       1      32768        0
       malloc-8192   8192       3       1          29       0       1      32768        0
       malloc-2048   2048       6      10          43       0       8      32768        0
       malloc-2048   2048       0      16           6       0       8      32768        0
       malloc-2048   2048       0      16          40       0       8      32768        0
       malloc-2048   2048       3      13         194       0       8      32768        0
       malloc-1024   1024       2      30          42       0      16      32768        0
       malloc-1024   1024       1      31          18       0      16      32768        0
       malloc-1024   1024       5      27          19       0      16      32768        0
       malloc-1024   1024      10      22         175       0      16      32768        0
        malloc-512    512       9      55         127       0      30      32768        0
        malloc-512    512       0      64           5       0      30      32768        0
        malloc-512    512       7      57          92       0      30      32768        0
        malloc-512    512       8      56          86       0      30      32768        0
        malloc-512    512       1      63           3       0      30      32768        0
        malloc-512    512       3      61          63       0      30      32768        0
           pcpu-64     64     488      24         488       0     254      32768        0
    ertt_txseginfo     40       0     808       10354       0     254      32320        0
               PWD     40      85     723         536       0     254      32320        0
             KNOTE    160      32     168        7768       0      62      32000        0
            ttyinq    160     135      65         840       0      62      32000        0
              PGRP    120      33     231          98       0     126      31680        0
            clpbuf   2624       0      12          28       0       4      31488        0
       tcp_bbr_pcb    832       6      30          52       0      16      29952        0
        sctp_laddr     48      47     541         137       0     254      28224        0
         malloc-32     32     278     604        3314       0     254      28224        0
         16 Bucket    144      60     136         326       0      62      28224        0
          4 Bucket     48       5     583           8       0     254      28224        0
               AIO    208      32     101         313       0      62      27664        0
     udplite_inpcb    416       9      54          27       0      30      26208        0
            cpuset    200      15     113          22       0      62      25600        0
       malloc-8192   8192       1       2         102       0       1      24576        0
       malloc-8192   8192       2       1          21       0       1      24576        0
       malloc-8192   8192       3       0           3       0       1      24576        0
       malloc-4096   4096       2       4         208       0       2      24576        0
      tcp_rack_pcb   1216       5      15          60       0       8      24320        0
          rl_entry     40      50     556          50       0     254      24240        0
           rtentry    168      29     115          33       0      62      24192        0
          8 Bucket     80      54     246         511       0     126      24000        0
        malloc-384    384      11      49          16       0      30      23040        0
        malloc-384    384       1      59           3       0      30      23040        0
        malloc-384    384       1      59          33       0      30      23040        0
        malloc-384    384      21      39          24       0      30      23040        0
         domainset     40       0     567          10       0     254      22680        0
udplite_inpcb ports     32       2     628           2       0     254      20160        0
   udp_inpcb ports     32       2     628          42       0     254      20160        0
   tcp_inpcb ports     32       5     625          45       0     254      20160        0
              ertt     72      24     256         327       0     126      20160        0
         malloc-32     32      84     546         107       0     254      20160        0
         malloc-32     32     201     429        1743       0     254      20160        0
         malloc-32     32      57     573        1241       0     254      20160        0
         malloc-32     32      54     576        1085       0     254      20160        0
         malloc-32     32      32     598          77       0     254      20160        0
          2 Bucket     32      60     570         660       0     254      20160        0
      tcp_rack_map    128       0     155          57       0     126      19840        0
           cryptop    280       0      70           8       0      30      19600        0
             AIOCB    552       0      35         110       0      16      19320        0
            AIOLIO    272       0      70         325       0      30      19040        0
 epoch_record pcpu    256       4      60           4       0      62      16384        0
      malloc-16384  16384       1       0           1       0       1      16384        0
       malloc-8192   8192       2       0           2       0       1      16384        0
       malloc-8192   8192       1       1           2       0       1      16384        0
       malloc-4096   4096       3       1           3       0       2      16384        0
       malloc-1024   1024       8       8           8       0      16      16384        0
           SMR CPU     32       7     504           7       0     254      16352        0
      vtnet_tx_hdr     24       0     668       20025       0     254      16032        0
         malloc-16     16     537     463        2181       0     254      16000        0
         malloc-16     16     354     646        5393       0     254      16000        0
              kenv    258      17      43        1074       0      30      15480        0
            mqnode    416       3      33           3       0      30      14976        0
              vmem   1856       1       7           1       0       8      14848        0
        SMR SHARED     24       7     504           7       0     254      12264        0
         malloc-16     16      28     722         202       0     254      12000        0
         malloc-16     16     313     437         527       0     254      12000        0
         malloc-16     16       3     747        1005       0     254      12000        0
         malloc-16     16      28     722       27933       0     254      12000        0
         malloc-16     16      16     734          17       0     254      12000        0
            itimer    352       0      33           1       0      30      11616        0
       Mountpoints   2816       2       2           2       0       4      11264        0
       malloc-4096   4096       1       1           1       0       2       8192        0
           pcpu-16     16       4     252           4       0     254       4096        0
       UMA Slabs 1    176       9      13           9       0      62       3872        0
        KMAP ENTRY     96      15      24          17       0       0       3744        0
       FFS1 dinode    128       0       0           0       0     126          0        0
           ada_ccb    272       0       0           0       0      30          0        0
             swblk    136       0       0           0       0      62          0        0
          swpctrie    144       0       0           0       0      62          0        0
   cdg_qdiffsample     16       0       0           0       0     254          0        0
   pf state scrubs     40       0       0           0       0     254          0        0
   pf frag entries     40       0       0           0       0     254          0        0
          pf frags    248       0       0           0       0      62          0        0
  pf table entries    160       0       0           0       0     254          0        0
pf table entry counters     64       0       0           0       0     254          0        0
   pf source nodes    152       0       0           0       0     254          0        0
     pf state keys     88       0       0           0       0     126          0        0
         pf states    360       0       0           0       0     254          0        0
           pf tags    104       0       0           0       0     126          0        0
          pf mtags    184       0       0           0       0      62          0        0
tfo_ccache_entries     80       0       0           0       0     126          0        0
               tfo      4       0       0           0       0     254          0        0
          sackhole     32       0       0           0       0     254          0        0
               ipq     56       0       0           0       0     254          0        0
   sctp_asconf_ack     48       0       0           0       0     254          0        0
       sctp_asconf     40       0       0           0       0     254          0        0
   tcp_log_id_node    120       0       0           0       0     126          0        0
 tcp_log_id_bucket    176       0       0           0       0      62          0        0
          tcpreass     48       0       0           0       0     254          0        0
       ripcb ports     32       0       0           0       0     254          0        0
    IPsec SA lft_c     16       0       0           0       0     254          0        0
        mqnotifier    216       0       0           0       0      62          0        0
            mvdata     64       0       0           0       0     254          0        0
            mqueue    248       0       0           0       0      62          0        0
        TMPFS node    232       0       0           0       0      62          0        0
           NCLNODE    608       0       0           0       0      16          0        0
     LTS VFS Cache    360       0       0           0       0      30          0        0
       L VFS Cache    320       0       0           0       0      30          0        0
     STS VFS Cache    144       0       0           0       0      62          0        0
  linux_dma_object     32       0       0           0       0     254          0        0
  linux_dma_pctrie    144       0       0           0       0      62          0        0
   IOMMU_MAP_ENTRY    104       0       0           0       0     126          0        0
    mbuf_jumbo_16k  16384       0       0           0       0     254          0        0
     mbuf_jumbo_9k   9216       0       0           0       0     254          0        0
      audit_record   1280       0       0           0       0       8          0        0
        MAC labels     40       0       0           0       0     254          0        0
            vnpbuf   2624       0       0           0       0      16          0        0
           nfspbuf   2624       0       0           0       0       4          0        0
            swwbuf   2624       0       0           0       0       2          0        0
            swrbuf   2624       0       0           0       0       4          0        0
          umtx_shm     88       0       0           0       0     126          0        0
           umtx pi     96       0       0           0       0     126          0        0
rangeset pctrie nodes    144       0       0           0       0      62          0        0
      malloc-65536  65536       0       0           0       0       1          0        0
      malloc-65536  65536       0       0           0       0       1          0        0
      malloc-32768  32768       0       0           0       0       1          0        0
      malloc-32768  32768       0       0           0       0       1          0        0
      malloc-32768  32768       0       0           0       0       1          0        0
      malloc-16384  16384       0       0           0       0       1          0        0
      malloc-16384  16384       0       0           0       0       1          0        0
      malloc-16384  16384       0       0           0       0       1          0        0
      malloc-16384  16384       0       0           0       0       1          0        0
       malloc-4096   4096       0       0           0       0       2          0        0
       malloc-4096   4096       0       0           0       0       2          0        0
       malloc-1024   1024       0       0           0       0      16          0        0
        malloc-512    512       0       0           0       0      30          0        0
        malloc-512    512       0       0           0       0      30          0        0
        malloc-384    384       0       0           0       0      30          0        0
           pcpu-32     32       0       0           0       0     254          0        0
            pcpu-4      4       0       0           0       0     254          0        0
            fakepg    104       0       0           0       0     126          0        0
          UMA Hash    256       0       0           0       0      62          0        0

Crashes (21):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2024/04/09 09:30 freebsd-src d80a97def9a1 f3234354 console log report ci-freebsd-main Fatal trap NUM: page fault in m_tag_delete_chain
2024/04/09 08:41 freebsd-src d80a97def9a1 f3234354 console log report ci-freebsd-main Fatal trap NUM: page fault in m_tag_delete_chain
2024/04/09 08:11 freebsd-src d80a97def9a1 f3234354 console log report ci-freebsd-main Fatal trap NUM: page fault in m_tag_delete_chain
2024/04/09 07:59 freebsd-src d80a97def9a1 f3234354 console log report ci-freebsd-main Fatal trap NUM: page fault in m_tag_delete_chain
2024/04/09 07:57 freebsd-src d80a97def9a1 f3234354 console log report ci-freebsd-main Fatal trap NUM: page fault in m_tag_delete_chain
2024/04/09 07:42 freebsd-src d80a97def9a1 f3234354 console log report ci-freebsd-main Fatal trap NUM: page fault in m_tag_delete_chain
2024/04/09 07:32 freebsd-src d80a97def9a1 f3234354 console log report ci-freebsd-main Fatal trap NUM: page fault in m_tag_delete_chain
2024/04/09 07:28 freebsd-src d80a97def9a1 f3234354 console log report ci-freebsd-main Fatal trap NUM: page fault in m_tag_delete_chain
2024/04/09 05:27 freebsd-src d80a97def9a1 f3234354 console log report ci-freebsd-main Fatal trap NUM: page fault in m_tag_delete_chain
2024/04/09 05:16 freebsd-src d80a97def9a1 f3234354 console log report ci-freebsd-main Fatal trap NUM: page fault in m_tag_delete_chain
2024/04/09 05:03 freebsd-src d80a97def9a1 f3234354 console log report ci-freebsd-main Fatal trap NUM: page fault in m_tag_delete_chain
2024/04/09 05:02 freebsd-src d80a97def9a1 f3234354 console log report ci-freebsd-main Fatal trap NUM: page fault in m_tag_delete_chain
2024/04/09 04:26 freebsd-src d80a97def9a1 f3234354 console log report ci-freebsd-main Fatal trap NUM: page fault in m_tag_delete_chain
2024/04/09 03:17 freebsd-src d80a97def9a1 f3234354 console log report ci-freebsd-main Fatal trap NUM: page fault in m_tag_delete_chain
2024/04/09 01:27 freebsd-src d80a97def9a1 f3234354 console log report ci-freebsd-main Fatal trap NUM: page fault in m_tag_delete_chain
2024/04/09 01:27 freebsd-src d80a97def9a1 f3234354 console log report ci-freebsd-main Fatal trap NUM: page fault in m_tag_delete_chain
2024/04/09 00:51 freebsd-src d80a97def9a1 f3234354 console log report ci-freebsd-main Fatal trap NUM: page fault in m_tag_delete_chain
2024/04/09 09:20 freebsd-src d80a97def9a1 f3234354 console log report ci-freebsd-i386 Fatal trap NUM: page fault in m_tag_delete_chain
2024/04/09 08:19 freebsd-src d80a97def9a1 f3234354 console log report ci-freebsd-i386 Fatal trap NUM: page fault in m_tag_delete_chain
2024/04/09 07:45 freebsd-src d80a97def9a1 f3234354 console log report ci-freebsd-i386 Fatal trap NUM: page fault in m_tag_delete_chain
2024/04/09 06:41 freebsd-src d80a97def9a1 f3234354 console log report ci-freebsd-i386 Fatal trap NUM: page fault in m_tag_delete_chain
* Struck through repros no longer work on HEAD.