syzbot


panic: /syzkaller/managers/main/kernel/sys/netinet/in_pcb.c:LINE: in_pcbremlbgrouphash: Bad link elm ADDR next->prev !=

Status: upstream: reported on 2025/05/04 04:08
Reported-by: syzbot+f9eb900d111cc3660f8e@syzkaller.appspotmail.com
First crash: 6d01h, last: 6d01h

Sample crash report:
panic: /syzkaller/managers/main/kernel/sys/netinet/in_pcb.c:504: in_pcbremlbgrouphash: Bad link elm 0xfffffe00822dba80 next->prev != elm
cpuid = 0
time = 56
KDB: stack backtrace:
db_trace_self_wrapper() at db_trace_self_wrapper+0xc6/frame 0xfffffe00578b4f70
kdb_backtrace() at kdb_backtrace+0xd0/frame 0xfffffe00578b50d0
vpanic() at vpanic+0x257/frame 0xfffffe00578b5290
panic() at panic+0xb5/frame 0xfffffe00578b5350
in_pcbremlbgrouphash() at in_pcbremlbgrouphash+0x3fd/frame 0xfffffe00578b53b0
in_pcbremhash_locked() at in_pcbremhash_locked+0xb2/frame 0xfffffe00578b53f0
in_pcbdrop() at in_pcbdrop+0x98/frame 0xfffffe00578b5410
tcp_close() at tcp_close+0x177/frame 0xfffffe00578b54e0
tcp_disconnect() at tcp_disconnect+0x1ef/frame 0xfffffe00578b5510
tcp_usr_close() at tcp_usr_close+0x189/frame 0xfffffe00578b55f0
soclose() at soclose+0x3d0/frame 0xfffffe00578b56e0
_fdrop() at _fdrop+0x58/frame 0xfffffe00578b5710
closef() at closef+0x655/frame 0xfffffe00578b58f0
fdescfree() at fdescfree+0xa5e/frame 0xfffffe00578b5ad0
fork1() at fork1+0x833/frame 0xfffffe00578b5bf0
sys_rfork() at sys_rfork+0x1b7/frame 0xfffffe00578b5d10
amd64_syscall() at amd64_syscall+0x4af/frame 0xfffffe00578b5f30
fast_syscall_common() at fast_syscall_common+0xf8/frame 0xfffffe00578b5f30
--- syscall (198, FreeBSD ELF64, __syscall), rip = 0x3a197a, rsp = 0x8226e8f08, rbp = 0x8226e8f80 ---
KDB: enter: panic
[ thread pid 1794 tid 101661 ]
Stopped at      kdb_enter+0x6e: movq    $0,0x25bd7e7(%rip)
db> 
db> set $lines = 0
db> set $maxwidth = 0
db> show registers
cs                        0x20
ds                        0x3b
es                        0x3b
fs                        0x13
gs                        0x1b
ss                        0x28
rax                       0x12
rcx         0xfffffe0070800000
rdx                    0x7ffff
rbx         0xffffffff827a9840  .str.27
rsp         0xfffffe00578b50b0
rbp         0xfffffe00578b50d0
rsi                    0x80001
rdi         0xffffffff816133c9  printf+0x149
r8                           0
r9                  0xffffffff
r10                          0
r11                       0x85
r12         0xfffffe0081224000
r13         0xfffffffffffffffe
r14         0xffffffff827a9840  .str.27
r15                          0
rip         0xffffffff815fd9ae  kdb_enter+0x6e
rflags                    0x46
kdb_enter+0x6e: movq    $0,0x25bd7e7(%rip)
db> show proc
Process 1794 (syz-executor) at 0xfffffe008121b020:
 state: NORMAL
 uid: 0  gids: 0, 0, 5
 parent: pid 766 at 0xfffffe00548045a0
 ABI: FreeBSD ELF64
 flag: 0x10480080  flag2: 0
 arguments: ./syz-executor exec
 reaper: 0xfffffe0008007040 reapsubtree: 1
 sigparent: 20
 vmspace: 0xfffffe0081217db0
   (map 0xfffffe0081217db0)
   (map.pmap 0xfffffe0081217e50)
   (pmap 0xfffffe0081217ec0)
 threads: 3
101475                   s                                   syz-executor
101661                   Run     CPU 0                       syz-executor
101665                   s                                   syz-executor
db> ps
  pid  ppid  pgrp   uid  state   wmesg   wchan               cmd
 1795  1701  1701     0  R                                   syz-executor
 1794   766   766     0  T       (threaded)                  syz-executor
101475                   s                                   syz-executor
101661                   Run     CPU 0                       syz-executor
101665                   s                                   syz-executor
 1793     1  1701     0  S       uwait   0xfffffe007b391b80  syz-executor
 1792   765   765 60929  R       (threaded)                  syz-executor
101628                   RunQ                                syz-executor
101659                   S       sbwait  0xfffffe0080f83a0c  syz-executor
101663                   S       uwait   0xfffffe007b392000  syz-executor
 1791  1788  1507     0  S       uwait   0xfffffe006eb54680  syz-executor
 1788  1507  1507     0  R       (threaded)                  syz-executor
101646                   Run     CPU 1                       syz-executor
101649                   S       select  0xfffffe007ac48c40  syz-executor
101650                   S       uwait   0xfffffe007b390c00  syz-executor
101662                   S       uwait   0xfffffe007b391c80  syz-executor
 1785     1  1507     0  S       uwait   0xfffffe007b391780  syz-executor
 1779     1   765     0  S       uwait   0xfffffe008219ac80  syz-executor
 1769     1  1701     0  S       uwait   0xfffffe006eb51600  syz-executor
 1766     1  1701     0  S       uwait   0xfffffe007b392200  syz-executor
 1760     1  1507     0  S       uwait   0xfffffe006eb54580  syz-executor
 1754     0     0     0  DL      mdwait  0xfffffe0081f64000  [md14]
 1749     1  1507     0  S       uwait   0xfffffe006eb54e80  syz-executor
 1745     1   766     0  S       uwait   0xfffffe006eb52e80  syz-executor
 1737     1  1701     0  SV      uwait   0xfffffe008219ab80  syz-executor
 1733     1   766     0  S       uwait   0xfffffe008219ad80  syz-executor
 1725     0     0     0  DL      mdwait  0xfffffe008238e000  [md13]
 1714     1   766     0  S       uwait   0xfffffe006eb54d80  syz-executor
 1707     1   766     0  S       uwait   0xfffffe007abab200  syz-executor
 1701   763  1701     0  S       nanslp  0xffffffff83b9c500  syz-executor
 1700     1  1507     0  S       uwait   0xfffffe007b391680  syz-executor
 1696     1   765     0  S       uwait   0xfffffe007abacb80  syz-executor
 1692     1   766     0  S       uwait   0xfffffe008219b580  syz-executor
 1687     1   766     0  S       uwait   0xfffffe008219b480  syz-executor
 1686     1   766     0  S       uwait   0xfffffe008219b280  syz-executor
 1679     1   766     0  S       uwait   0xfffffe007abad000  syz-executor
 1677     0     0     0  DL      mdwait  0xfffffe007e714000  [md12]
 1672     1   766     0  S       uwait   0xfffffe007abab100  syz-executor
 1667     1   767     0  S       uwait   0xfffffe006eb54a80  syz-executor
 1664     1   767     0  S       uwait   0xfffffe005a371980  syz-executor
 1663     1   765     0  SV      uwait   0xfffffe007ababc80  syz-executor
 1660     1   767     0  S       uwait   0xfffffe007b392100  syz-executor
 1653     0     0     0  DL      mdwait  0xfffffe0081013000  [md11]
 1650     1   767     0  S       uwait   0xfffffe006eb54980  syz-executor
 1647     1   767     0  S       uwait   0xfffffe007b392300  syz-executor
 1641     1  1507 60928  S       uwait   0xfffffe007abacd80  syz-executor
 1640     1  1507     0  S       uwait   0xfffffe006eb54b80  syz-executor
 1634     1   766     0  S       uwait   0xfffffe006eb54c80  syz-executor
 1623     1   765     0  S       uwait   0xfffffe0054607d00  syz-executor
 1621     1   765     0  S       uwait   0xfffffe005a371a80  syz-executor
 1620     1   765     0  S       uwait   0xfffffe005a371580  syz-executor
 1597     1   766     0  T       uwait   0xfffffe0058cf9a80  syz-executor
 1591     0     0     0  DL      mdwait  0xfffffe0081014000  [md10]
 1583     1   766     0  T       uwait   0xfffffe0054607900  syz-executor
 1577     1  1507     0  T       uwait   0xfffffe0054607c00  syz-executor
 1571     1  1571     0  Ts+     ttyin   0xfffffe0058e360b0  getty
 1570     1  1570     0  Ts+     ttyin   0xfffffe0058e354b0  getty
 1569     1  1569     0  Ts+     ttyin   0xfffffe0058e34cb0  getty
 1568     1  1568     0  Ts+     ttyin   0xfffffe0058e35cb0  getty
 1567     1  1567     0  Ts+     ttyin   0xfffffe0058e358b0  getty
 1566     1  1566     0  Ts+     ttyin   0xfffffe0058e350b0  getty
 1565     1  1565     0  Ts+     ttyin   0xfffffe0058e348b0  getty
 1564     1  1564     0  Ts+     ttyin   0xfffffe0058e344b0  getty
 1563     1  1563     0  Ts+     ttyin   0xfffffe00082690b0  getty
 1560     1   767     0  S       uwait   0xfffffe007abad600  syz-executor
 1559     1   767     0  S       uwait   0xfffffe007abad200  syz-executor
 1550     1  1507     0  T       uwait   0xfffffe007ababe00  syz-executor
 1549     0     0     0  DL      mdwait  0xfffffe007b399000  [md9]
 1547     1  1507     0  T       uwait   0xfffffe006eb51900  syz-executor
 1532     1   765     0  T       uwait   0xfffffe005a371680  syz-executor
 1521     1  1507     0  T       uwait   0xfffffe007ababf00  syz-executor
 1507   763  1507     0  S       nanslp  0xffffffff83b9c500  syz-executor
 1502     1   766     0  T       uwait   0xfffffe007abac480  syz-executor
 1491     1   767     0  S       uwait   0xfffffe005a36e380  syz-executor
 1472     1   767     0  S       uwait   0xfffffe005a371780  syz-executor
 1463     1   765     0  T       uwait   0xfffffe0054607100  syz-executor
 1461     0     0     0  DL      mdwait  0xfffffe007e715000  [md8]
 1450     0     0     0  DL      mdwait  0xfffffe007dde1000  [md7]
 1447     1   766     0  T       uwait   0xfffffe007abac380  syz-executor
 1438     0     0     0  DL      mdwait  0xfffffe007dde2000  [md6]
 1435     1   767     0  S       uwait   0xfffffe006eb52700  syz-executor
 1434     1  1329     0  T       uwait   0xfffffe007abac180  syz-executor
 1426     1  1329     0  T       uwait   0xfffffe0054607500  syz-executor
 1424     1   767     0  S       uwait   0xfffffe005860c800  syz-executor
 1423     1   766     0  SV      uwait   0xfffffe005860f580  syz-executor
 1420     1   766     0  T       uwait   0xfffffe007abac280  syz-executor
 1419     1  1329     0  T       uwait   0xfffffe006eb51c00  syz-executor
 1410     1   765     0  T       uwait   0xfffffe007abad400  syz-executor
 1409     1  1329     0  T       uwait   0xfffffe007b392680  syz-executor
 1398     1  1398     0  T       uwait   0xfffffe007abaca80  syz-executor
 1397     1   766     0  T       uwait   0xfffffe007abac680  syz-executor
 1391     1   767     0  SV      uwait   0xfffffe007abac980  syz-executor
 1389     1   765     0  T       uwait   0xfffffe0058cfb780  syz-executor
 1380     1   765     0  T       uwait   0xfffffe007abad500  syz-executor
 1379     1   765     0  T       uwait   0xfffffe006eb52680  syz-executor
 1373     1   766     0  T       uwait   0xfffffe0058cfbe00  syz-executor
 1363     1   765     0  T       uwait   0xfffffe007abadd80  syz-executor
 1359     0     0     0  DL      mdwait  0xfffffe007a5f6000  [md5]
 1357     0     0     0  DL      mdwait  0xfffffe007b39a000  [md4]
 1354     1  1329     0  T       uwait   0xfffffe007abace80  syz-executor
 1352     1   766     0  T       uwait   0xfffffe005a36fd00  syz-executor
 1351     1   767     0  S       uwait   0xfffffe006eb51d00  syz-executor
 1349     1   767     0  S       uwait   0xfffffe005a36e780  syz-executor
 1333     0     0     0  DL      mdwait  0xfffffe007abaf000  [md3]
 1324     1   766     0  T       uwait   0xfffffe006eb52500  syz-executor
 1318     1   767     0  S       uwait   0xfffffe007abada00  syz-executor
 1314     1   908     0  T       uwait   0xfffffe006eb51800  syz-executor
 1312     1   766     0  T       uwait   0xfffffe006eb51a00  syz-executor
 1302     1   765 60928  SV      uwait   0xfffffe006eb51000  syz-executor
 1301     1   767     0  S       uwait   0xfffffe007abadb80  syz-executor
 1299     1   908     0  T       uwait   0xfffffe005a36ee00  syz-executor
 1298     1   767     0  S       uwait   0xfffffe006eb51200  syz-executor
 1297     1   908     0  T       uwait   0xfffffe006eb51300  syz-executor
 1291     1   765     0  T       uwait   0xfffffe0058cfb480  syz-executor
 1282  1281   908     0  S       uwait   0xfffffe005a36fc00  syz-executor
 1281     1   908     0  SV      uwait   0xfffffe006eb53100  syz-executor
 1280     1   908     0  T       uwait   0xfffffe007abae300  syz-executor
 1267     1   765 60928  T       uwait   0xfffffe006eb51700  syz-executor
 1266     1   765     0  T       uwait   0xfffffe005a36e880  syz-executor
 1261     0     0     0  DL      mdwait  0xfffffe007abb0000  [md2]
 1251     1   908     0  T       umtxn   0xfffffe006eb52200  syz-executor
 1249     1   908     0  T       uwait   0xfffffe005a36e680  syz-executor
 1242     1   765     0  T       uwait   0xfffffe006eb52000  syz-executor
 1235     1   908     0  T       uwait   0xfffffe006eb52100  syz-executor
 1234     1   908     0  T       uwait   0xfffffe005a36e980  syz-executor
 1230     1   767     0  S       uwait   0xfffffe0058cfb580  syz-executor
 1227     1   766     0  T       uwait   0xfffffe006eb52400  syz-executor
 1211     1   766     0  T                                   syz-executor
 1203     1   908     0  T       uwait   0xfffffe006eb51e80  syz-executor
 1202     1   908     0  T       uwait   0xfffffe005a36ec00  syz-executor
 1200     1   765 60929  SV      uwait   0xfffffe006eb52580  syz-executor
 1195     1   908     0  T       uwait   0xfffffe007abadc80  syz-executor
 1191     1   767     0  S       uwait   0xfffffe0058cf8f00  syz-executor
 1190     1   765     0  T       uwait   0xfffffe005a36f080  syz-executor
 1189     1   767     0  S       uwait   0xfffffe005860f780  syz-executor
 1181     1   765     0  T       uwait   0xfffffe007abae200  syz-executor
 1177     1   765     0  T       uwait   0xfffffe0058cfb680  syz-executor
 1174     1   908 60928  SV      uwait   0xfffffe007abade80  syz-executor
 1170     1   908 60929  T       umtxn   0xfffffe0058cf8b00  syz-executor
 1169     1   908 60929  T       uwait   0xfffffe0058cfb380  syz-executor
 1163     1   908     0  T       uwait   0xfffffe007abae580  syz-executor
 1161     1   908     0  T       uwait   0xfffffe0058cfbd00  syz-executor
 1159     1   765     0  T       uwait   0xfffffe0058cfb900  syz-executor
 1157     1   908     0  T       uwait   0xfffffe007abae480  syz-executor
 1153     1   765     0  T       uwait   0xfffffe0058cfba00  syz-executor
 1147     1   766     0  T       uwait   0xfffffe005a36e180  syz-executor
 1146     1   908     0  T       uwait   0xfffffe005860f480  syz-executor
 1141     1   766     0  T       uwait   0xfffffe005a370900  syz-executor
 1137     0     0     0  DL      mdwait  0xfffffe007a5f5000  [md0]
 1136     1   767     0  S       uwait   0xfffffe0058cfbb00  syz-executor
 1135     1   767     0  S       uwait   0xfffffe006eb52b80  syz-executor
 1133     1   767     0  S       uwait   0xfffffe005a36eb00  syz-executor
 1132     1   765 60928  T       uwait   0xfffffe005a370a00  syz-executor
 1122     1   765     0  T       uwait   0xfffffe006eb52d80  syz-executor
 1118     1   908 60928  T       uwait   0xfffffe005a36e480  syz-executor
 1117     1   908 60928  T       uwait   0xfffffe005a36f180  syz-executor
 1097     1   767     0  S       uwait   0xfffffe0058cf8e00  syz-executor
 1090     1   908     0  T       uwait   0xfffffe006eb53280  syz-executor
 1088  1082  1088     0  Ss      select  0xfffffe0059bebf40  dhclient
 1082  1070   424    65  S       select  0xfffffe0007f81640  dhclient
 1077     1   767     0  S       uwait   0xfffffe006eb53e00  syz-executor
 1070     1   424     0  T       wait    0xfffffe00548ef020  sh
 1066     1   766     0  T       uwait   0xfffffe0058cf8d00  syz-executor
 1043     1   767     0  S       uwait   0xfffffe005a36e580  syz-executor
 1027     1   767     0  S       uwait   0xfffffe006eb53700  syz-executor
 1025     1   766     0  T       uwait   0xfffffe005a36f600  syz-executor
 1017     1   767     0  S       uwait   0xfffffe0054607600  syz-executor
 1016     1   908     0  T       uwait   0xfffffe005a36fb00  syz-executor
  992     1   765     0  T       uwait   0xfffffe006eb53a00  syz-executor
  988     1   767     0  S       uwait   0xfffffe006eb53900  syz-executor
  986     1   767     0  S       uwait   0xfffffe006eb53f00  syz-executor
  983     0     0     0  DL      mdwait  0xfffffe0077d4e000  [md1]
  972     1   908     0  T       uwait   0xfffffe005a36fa00  syz-executor
  971     1   766     0  T       uwait   0xfffffe006eb53b00  syz-executor
  966     0     0     0  DL      (threaded)                  [KTLS]
100280                   D       -       0xfffffe0059bf7000  [thr_0]
100281                   D       -       0xfffffe0059bf7080  [thr_1]
100282                   D       -       0xffffffff83cadc28  [reclaim_0]
  965     1   765     0  T       uwait   0xfffffe006eb52c80  syz-executor
  956     1   951     0  T       uwait   0xfffffe005a370c80  syz-executor
  955     1   765     0  T       uwait   0xfffffe005860f680  syz-executor
  947     1   908     0  T       uwait   0xfffffe0054607300  syz-executor
  946     1   765     0  T       uwait   0xfffffe006eb53000  syz-executor
  937     1   765     0  T       uwait   0xfffffe006eb54080  syz-executor
  929     1   767     0  S       uwait   0xfffffe005860f880  syz-executor
  917     1   765     0  T       uwait   0xfffffe006eb53d00  syz-executor
  893     1   765     0  T       uwait   0xfffffe006eb53800  syz-executor
  871     1   764     0  SV      uwait   0xfffffe006eb53600  syz-executor
  870     0     0     0  DL      -       0xffffffff83cac400  [soaiod4]
  869     0     0     0  DL      -       0xffffffff83cac400  [soaiod3]
  868     0     0     0  DL      -       0xffffffff83cac400  [soaiod2]
  867     0     0     0  DL      -       0xffffffff83cac400  [soaiod1]
  865     1   764     0  T       uwait   0xfffffe006eb54180  syz-executor
  863     1   766    -1  T       uwait   0xfffffe005a371000  syz-executor
  846     1   827     0  T       uwait   0xfffffe005a370b80  syz-executor
  821     0     0     0  DL      aiordy  0xfffffe0054908040  [aiod4]
  820     0     0     0  DL      aiordy  0xfffffe00549085a0  [aiod3]
  819     0     0     0  DL      aiordy  0xfffffe0054908b00  [aiod2]
  818     0     0     0  DL      aiordy  0xfffffe00548c85a0  [aiod1]
  812     0     0     0  DL      (threaded)                  [so_splice]
100121                   D       -       0xfffffe0058cf8480  [thr_0]
100125                   D       -       0xfffffe0058cf84c0  [thr_1]
  808     1   767     0  S       uwait   0xfffffe0054607400  syz-executor
  766   763   766     0  S       nanslp  0xffffffff83b9c500  syz-executor
  765   763   765     0  S       nanslp  0xffffffff83b9c500  syz-executor
  763   761   761     0  S       select  0xfffffe0007f815c0  syz-executor
  761   759   761     0  Ss      pause   0xfffffe00549060b0  csh
  759   682   759     0  Ss      select  0xfffffe0007f81d40  sshd
  682     1   682     0  Ts                                  sshd
   17     0     0     0  DL      syncer  0xffffffff83cb9da0  [syncer]
   16     0     0     0  DL      vlruwt  0xfffffe0008026040  [vnlru]
   15     0     0     0  DL      (threaded)                  [bufdaemon]
100080                   D       psleep  0xffffffff83cb8360  [bufdaemon]
100083                   D       -       0xffffffff83002140  [bufspacedaemon-0]
100095                   D       sdflush 0xfffffe0059dd48e8  [/ worker]
    9     0     0     0  DL      psleep  0xffffffff83d03380  [vmdaemon]
    8     0     0     0  DL      (threaded)                  [pagedaemon]
100078                   D       psleep  0xffffffff83ce92f8  [dom0]
100081                   D       launds  0xffffffff83ce9304  [laundry: dom0]
100082                   D       umarcl  0xffffffff81dc7b80  [uma]
    7     0     0     0  DL      -       0xffffffff83919cd0  [rand_harvestq]
    6     0     0     0  DL      pftm    0xffffffff8442b850  [pf purge]
    5     0     0     0  DL      waiting 0xffffffff848ea6c0  [sctp_iterator]
    4     0     0     0  DL      (threaded)                  [cam]
100046                   D       -       0xffffffff838e4340  [doneq0]
100047                   D       -       0xffffffff838e42c0  [async]
100076                   D       -       0xffffffff838e4140  [scanner]
    3     0     0     0  DL      (threaded)                  [crypto]
100043                   D       crypto_ 0xffffffff83ce4b00  [crypto]
100044                   D       crypto_ 0xfffffe00546add30  [crypto returns 0]
100045                   D       crypto_ 0xfffffe00546add80  [crypto returns 1]
   14     0     0     0  DL      seqstat 0xfffffe0008bfa488  [sequencer 00]
   13     0     0     0  DL      (threaded)                  [geom]
100037                   D       -       0xffffffff83b44f00  [g_event]
100038                   D       -       0xffffffff83b44f20  [g_up]
100039                   D       -       0xffffffff83b44f40  [g_down]
    2     0     0     0  RL      (threaded)                  [clock]
100031                   I                                   [clock (0)]
100032                   RunQ                                [clock (1)]
   12     0     0     0  WL      (threaded)                  [intr]
100013                   I                                   [swi6: task queue]
100014                   I                                   [swi6: Giant taskq]
100016                   I                                   [swi5: fast taskq]
100033                   I                                   [swi1: netisr 0]
100034                   I                                   [swi1: hpts]
100035                   I                                   [swi1: hpts]
100048                   I                                   [irq24: virtio_pci0]
100049                   I                                   [irq25: virtio_pci0]
100050                   I                                   [irq26: virtio_pci0]
100051                   I                                   [irq27: virtio_pci0]
100052                   I                                   [irq28: virtio_pci1]
100053                   I                                   [irq29: virtio_pci1]
100054                   I                                   [irq30: virtio_pci1]
100055                   I                                   [irq31: virtio_pci1]
100056                   I                                   [irq32: virtio_pci1]
100061                   I                                   [irq10: virtio_pci2]
100063                   I                                   [irq1: atkbd0]
100064                   I                                   [irq12: psm0]
100065                   I                                   [swi0: uart uart++]
100069                   I                                   [swi1: pf send]
   11     0     0     0  RL      (threaded)                  [idle]
100003                   CanRun                              [idle: cpu0]
100004                   CanRun                              [idle: cpu1]
    1     0     1     0  SLs     wait    0xfffffe0008007040  [init]
   10     0     0     0  DL      audit_w 0xffffffff83ce55a0  [audit]
    0     0     0     0  DLs     (threaded)                  [kernel]
100000                   D       parked  0xffffffff84c2bff0  [swapper]
100005                   D       -       0xfffffe00546bd100  [softirq_0]
100006                   D       -       0xfffffe00546bd000  [softirq_1]
100007                   D       -       0xfffffe00546bce00  [if_io_tqg_0]
100008                   D       -       0xfffffe00546bcd00  [if_io_tqg_1]
100009                   D       -       0xfffffe00546bcc00  [if_config_tqg_0]
100010                   D       -       0xfffffe0008be3c00  [kqueue_ctx taskq]
100011                   D       -       0xfffffe0008be3a00  [jail_remove taskq]
100012                   D       -       0xfffffe0008be3800  [bus taskq]
100015                   D       -       0xfffffe0008be3200  [thread taskq]
100017                   D       -       0xfffffe0008be2d00  [aiod_kick taskq]
100018                   D       -       0xfffffe0008be2b00  [deferred_unmount ta]
100019                   D       -       0xfffffe0008be2900  [inm_free taskq]
100020                   D       -       0xfffffe0008be2700  [in6m_free taskq]
100021                   D       -       0xfffffe0008be2500  [linuxkpi_irq_wq]
100022                   D       -       0xfffffe0008be2300  [linuxkpi_short_wq_0]
100023                   D       -       0xfffffe0008be2300  [linuxkpi_short_wq_1]
100024                   D       -       0xfffffe0008be2300  [linuxkpi_short_wq_2]
100025                   D       -       0xfffffe0008be2300  [linuxkpi_short_wq_3]
100026                   D       -       0xfffffe0008be1d00  [linuxkpi_long_wq_0]
100027                   D       -       0xfffffe0008be1d00  [linuxkpi_long_wq_1]
100028                   D       -       0xfffffe0008be1d00  [linuxkpi_long_wq_2]
100029                   D       -       0xfffffe0008be1d00  [linuxkpi_long_wq_3]
100036                   D       -       0xfffffe0008be1200  [firmware taskq]
100041                   D       -       0xfffffe005476d100  [crypto_0]
100042                   D       -       0xfffffe005476d100  [crypto_1]
100057                   D       -       0xfffffe005476c300  [vtnet0 rxq 0]
100058                   D       -       0xfffffe005476c200  [vtnet0 txq 0]
100059                   D       -       0xfffffe005476c100  [vtnet0 rxq 1]
100060                   D       -       0xfffffe005476c000  [vtnet0 txq 1]
100062                   D       vtbslp  0xfffffe0007f83400  [virtio_balloon]
100066                   D       -       0xffffffff827aeb80  [deadlkres]
100070                   D       -       0xfffffe0058cfdd00  [acpi_task_0]
100071                   D       -       0xfffffe0058cfdd00  [acpi_task_1]
100072                   D       -       0xfffffe0058cfdd00  [acpi_task_2]
100074                   D       -       0xfffffe0008be4a00  [mca taskq]
100075                   D       -       0xfffffe005476ca00  [CAM taskq]
100077                   D       -       0xfffffe0058cfc700  [ipsec_offload]
100576                   D       -       0xfffffe007a496a00  [netlink_socket (PID]
100754                   D       -       0xfffffe007a496e00  [netlink_socket (PID]
100968                   D       -       0xfffffe007b388e00  [netlink_socket (PID]
101411                   D       -       0xfffffe0081acc700  [netlink_socket (PID]
101664                   D       -       0xfffffe007b387700  [netlink_socket (PID]
db> show all locks
Process 1794 (syz-executor) thread 0xfffffe0081224000 (101661)
exclusive sleep mutex tcphash (tcphash) r = 0 (0xfffffe0007fe7a70) locked @ /syzkaller/managers/main/kernel/sys/netinet/in_pcb.c:2717
exclusive rw tcpinp (tcpinp) r = 0 (0xfffffe00822dbaa0) locked @ /syzkaller/managers/main/kernel/sys/netinet/tcp_usrreq.c:1313
db> show malloc
              Type        InUse        MemUse     Requests
           pf_hash            6        12804K            6
         sctp_stro            8         6646K           23
            linker          400         5458K         1148
          tcp_hpts            7         4801K            7
            devbuf         4188         4324K         4232
          filedesc          301         2409K         1760
         sysctloid        36588         2156K        36780
             vtbuf           24         1968K           46
              kobj          331         1324K          645
             selfd        16724         1046K       212909
            newblk           32         1032K         5729
          vfscache            3         1025K            3
           subproc          449          936K         2043
               pcb          183          826K         1087
        md_sectors          156          624K          157
          inodedep           12          517K         1534
         ufs_quota            1          512K            1
          vfs_hash            1          512K            1
           callout            2          512K            2
              intr            4          472K            4
           filemon           35          280K           49
              vmem            5          276K            9
         vnet_data            2          224K            2
          acpitask            1          224K            1
            KTRACE          101          201K       109645
            acpica         1674          184K        54444
           tidhash            3          141K            3
           pagedep           10          131K          833
            DEVFS1          129          129K          157
        tfo_ccache            1          128K            1
          IP reass            1          128K            1
              temp           60          110K         3246
               sem            4          106K            4
        gtaskqueue           18           98K           18
           kdtrace          515           89K         3468
               bus         1006           82K         5090
              umtx          624           78K          624
          mtx_pool            3           74K            3
          syncache            1           68K            1
     NFSD srvcache            3           68K            3
            module          522           66K          530
           md_disk          171           65K          179
       ddb_capture            1           64K            1
            DEVFS3          148           37K          159
               LRO           36           37K           38
         hostcache            1           32K            1
               shm            1           32K           20
         sctp_atcl           80           30K          473
               msg            4           30K            4
            kbdmux            6           28K            6
            ifaddr          110           27K          114
              GEOM          166           26K          975
           lltable           82           26K           98
          routetbl          339           25K          873
               BPF           30           25K           76
            kqueue          239           23K         2871
             ifnet           12           23K           13
       ether_multi          272           22K          517
        DEVFS_RULE           56           20K           56
         ufs_mount            4           17K            5
              proc            3           17K            3
           devstat            8           17K            8
               tty           16           16K           16
           ithread           90           15K           90
         in6_multi          105           15K          118
            bus-sc           34           15K         1656
      eventhandler          163           14K          163
              cred           53           14K          441
           pwddesc          212           14K         1871
             shmfd           10           12K           42
              kenv           95           12K           95
            DEVFSP          171           11K          417
         CAM queue            5           11K         1528
            crypto           26           10K          143
            plimit           26           10K          567
              rman           82           10K          467
               rpc            8            9K            8
            CC Mem           71            9K          678
         taskqueue           84            9K          117
         bmsafemap            3            9K         1379
              UART           12            9K           12
              ksem            1            8K           11
       pfs_vncache            1            8K            1
     audit_evclass          239            8K          301
       inpcbpolicy          202            7K         1561
            sglist            6            7K            6
           CAM DEV            3            6K          510
          pf_ifnet           15            6K           34
         pfs_nodes           22            6K           22
       ufs_dirhash           24            5K           45
               UMA          281            5K          282
          kcovinfo           72            5K           81
         proc-args          211            5K         3028
      tcp_fsb_rack            2            5K           24
                vt           11            5K           11
           memdesc            1            4K            1
               MCA           32            4K           32
             evdev            4            4K            4
           acpisem           28            4K           28
         cryptodev           54            4K          528
               tun            9            4K            9
            ip6ndp           21            4K           24
         sctp_atky           88            4K          498
          in_multi           12            3K           60
         sctp_timw           11            3K           11
          sctp_ifa           22            3K           24
          terminal           11            3K           11
             lockf           26            3K          333
           uidinfo            6            3K           11
           acpidev           20            3K           20
            ip6opt           14            3K           86
             hhook            8            3K           10
             clone            9            3K            9
           pf_rule            1            2K            4
        local_apic            1            2K            1
           io_apic            1            2K            1
         ipsec-saq            2            2K            2
           session           16            2K           59
            Unitno           30            2K         1013
               osd           76            2K          693
           CAM XPT           22            2K          543
         sctp_stri            3            2K            8
             nhops            6            2K           10
              pfil           14            2K           14
         toponodes            6            2K            6
             mount           28            2K         3984
       ipsecpolicy            2            2K            2
               mld           11            2K           11
              igmp           11            2K           11
          sctp_ifn           10            2K           24
         sctp_athm           80            2K          477
          indirdep            5            2K          872
               msi            9            2K            9
           netlink            2            2K          159
           softdep            1            1K            1
            sahead            1            1K            1
          secasvar            1            1K            1
       vnodemarker            2            1K          204
      NFSD session            1            1K            1
        CAM periph            4            1K          271
             ipsec            3            1K            3
            select            6            1K          130
            isadev            6            1K           12
          pci_link           10            1K           10
              ktls            7            1K           57
            diradd            5            1K         1282
 encap_export_host           12            1K           12
        ip_msource           10            1K           36
         sctp_aadr            9            1K           11
         newdirblk            4            1K          762
             mkdir            4            1K         1524
           VN POLL            4            1K           18
              cdev            2            1K            2
       lkpikmalloc            8            1K            9
       ip6_msource            7            1K           24
       ip_moptions            7            1K           61
          ktls_ocf            3            1K           10
       in6_mfilter            6            1K           51
    chacha20random            1            1K            1
            biobuf            1            1K            1
           eventfd            3            1K           12
filedesc_to_leader            6            1K           12
            vnodes            2            1K           19
          sctp_map           16            1K           42
      tcp_pcm_rack            1            1K           12
            dirrem            1            1K         1253
      NFSD lckfile            1            1K            1
     NFSD V4client            1            1K            1
             DEVFS            9            1K           10
           CAM SIM            2            1K            2
        in_mfilter            4            1K          108
            feeder            7            1K            7
           tcpfunc            3            1K            3
        loginclass            3            1K            7
            prison            6            1K            6
          nexusdev            8            1K            8
            apmdev            1            1K            1
          atkbddev            2            1K            2
      ip6_moptions            4            1K           23
               aio            4            1K           49
          pmchooks            1            1K            1
          CAM path            4            1K         1034
     CAM dev queue            2            1K            2
 CAM I/O Scheduler            1            1K            1
          sctp_vrf            1            1K            1
              vnet            1            1K            1
           fadvise            2            1K            7
               pmc            1            1K            1
           entropy            2            1K           39
          acpiintr            1            1K            1
              cpus            2            1K            2
    vnet_data_free            1            1K            1
           Per-cpu            1            1K            1
          freework            1            1K         1650
          p1003.1b            1            1K            1
          filecaps            1            1K           94
        ext2_mount            0            0K            0
         ext2_node            0            0K            0
      ext2_extents            0            0K            0
        sctp_mcore            0            0K            0
        sctp_socko            0            0K          152
         sctp_iter            0            0K           24
         sctp_mvrf            0            0K            0
         sctp_cpal            0            0K            0
         sctp_cmsg            0            0K            0
         sctp_stre            0            0K            0
         sctp_athi            0            0K            0
         sctp_a_it            0            0K           24
       tcp_do_rack            0            0K            0
            ipcomp            0            0K            0
               esp            0            0K            0
                ah            0            0K            0
          pf_table            0            0K            0
           pf_altq            0            0K            0
           pf_osfp            0            0K            0
     pf_krule_item            0            0K            0
           pf_temp            0            0K         4054
            mqdata            0            0K            0
        madt_table            0            0K            2
          smartpqi            0            0K            0
               ixl            0            0K            0
        ice-resmgr            0            0K            0
         ice-osdep            0            0K            0
               ice            0            0K            0
              iavf            0            0K            0
             axgbe            0            0K            0
       fpukern_ctx            0            0K            0
          xen_intr            0            0K            0
           xen_hvm            0            0K            0
         legacydrv            0            0K            0
      NMI handlers            0            0K            0
            bounce            0            0K            0
            busdma            0            0K            0
            qpidrv            0            0K            0
      dmar_idpgtbl            0            0K            0
          dmar_dom            0            0K            0
          dmar_ctx            0            0K            0
      amdiommu_dom            0            0K            0
      amdiommu_ctx            0            0K            0
              isci            0            0K            0
      iommu_dmamap            0            0K            0
     hyperv_socket            0            0K            0
           bxe_ilt            0            0K            0
        aesni_data            0            0K            2
            xenbus            0            0K            0
     vm_fictitious            0            0K            0
           UMAHash            0            0K            0
         vm_pgdata            0            0K            0
           jblocks            0            0K            0
          savedino            0            0K          883
          sentinel            0            0K            0
            jfsync            0            0K            0
            jtrunc            0            0K            0
             sbdep            0            0K           59
           jsegdep            0            0K            0
              jseg            0            0K            0
         jfreefrag            0            0K            0
          jfreeblk            0            0K            0
           jnewblk            0            0K            0
            jmvref            0            0K            0
           jremref            0            0K            0
           jaddref            0            0K            0
           freedep            0            0K            0
          freefile            0            0K          997
          freeblks            0            0K          860
          freefrag            0            0K          600
        allocindir            0            0K            0
       allocdirect            0            0K            0
          ufs_trim            0            0K            0
           mactemp            0            0K            0
     audit_trigger            0            0K            0
 audit_pipe_presel            0            0K            0
     audit_pipeent            0            0K            0
        audit_pipe            0            0K            0
      audit_evname            0            0K            0
         audit_bsm            0            0K            0
      audit_gidset            0            0K            0
        audit_text            0            0K            0
        audit_path            0            0K            0
        audit_data            0            0K            0
        audit_cred            0            0K            0
        MLX5EEPROM            0            0K            0
        MLX5EEPROM            0            0K            0
        MLX5EEPROM            0            0K            0
        MLX5EEPROM            0            0K            0
        MLX5EEPROM            0            0K            0
      MLX5E_TLS_RX            0            0K            0
        MLX5EEPROM            0            0K            0
         MLX5E_TLS            0            0K            0
        MLX5EEPROM            0            0K            0
        MLX5EEPROM            0            0K            0
        MLX5EEPROM            0            0K            0
            MLX5EN            0            0K            0
        MLX5EEPROM            0            0K            0
        MLX5EEPROM            0            0K            0
        MLX5EEPROM            0            0K            0
        MLX5EEPROM            0            0K            0
        MLX5EEPROM            0            0K            0
        MLX5EEPROM            0            0K            0
        MLX5EEPROM            0            0K            0
          MLX5DUMP            0            0K            0
        MLX5EEPROM            0            0K            0
        MLX5EEPROM            0            0K            0
        MLX5EEPROM            0            0K            0
        MLX5EEPROM            0            0K            0
       simple_attr            0            0K            0
          seq_file            0            0K            0
           lkpiskb            0            0K            0
             radix            0            0K            0
               idr            0            0K            0
          lkpindev            0            0K            0
           lkpimhi            0            0K            0
            lkpifw            0            0K            0
         lkpi80211            0            0K            0
               NLM            0            0K            0
    ipsec-spdcache            0            0K            0
         ipsec-reg            0            0K            0
        ipsec-misc            0            0K            0
      ipsecrequest            0            0K            0
             frag6            0            0K            0
            tcplog            0            0K            0
        tcp_hwpace            0            0K            0
              ipid            0            0K            0
         80211scan            0            0K            0
      80211ratectl            0            0K            0
        80211power            0            0K            0
       80211nodeie            0            0K            0
         80211node            0            0K            0
      80211mesh_gt            0            0K            0
      80211mesh_rt            0            0K            0
         80211perr            0            0K            0
         80211prep            0            0K            0
         80211preq            0            0K            0
          80211dfs            0            0K            0
       80211crypto            0            0K            0
          80211vap            0            0K            0
             iflib            0            0K            0
              vlan            0            0K            0
               gif            0            0K            0
           ifdescr            0            0K            0
              zlib            0            0K           28
            statfs            0            0K          256
     namei_tracker            0            0K           38
       export_host            0            0K            0
        cl_savebuf            0            0K          247
               lio            0            0K           54
               acl            0            0K            0
            soname            0            0K         4329
          mbuf_tag            0            0K            0
              accf            0            0K            0
               pts            0            0K            0
           timerfd            0            0K            0
          procdesc            0            0K           12
               iov            0            0K        22431
          ioctlops            0            0K          444
           Witness            0            0K            0
             stack            0            0K            0
              sbuf            0            0K          690
          firmware            0            0K            0
        compressor            0            0K            0
              SWAP            0            0K            0
         sysctltmp            0            0K          674
            sysctl            0            0K            3
              ekcd            0            0K            0
            dumper            0            0K            0
          sendfile            0            0K           78
              rctl            0            0K            0
             cache            0            0K            0
      prison_racct            0            0K            0
       Fail Points            0            0K            0
             sigio            0            0K           55
               pwd            0            0K            0
       tty console            0            0K            0
         boottrace            0            0K            0
        isofs_node            0            0K            0
       isofs_mount            0            0K            0
     tr_raid5_data            0            0K            0
    tr_raid1e_data            0            0K            0
     tr_raid1_data            0            0K            0
     tr_raid0_data            0            0K            0
    tr_concat_data            0            0K            0
       md_sii_data            0            0K            0
   md_promise_data            0            0K            0
    md_nvidia_data            0            0K            0
   md_jmicron_data            0            0K            0
     md_intel_data            0            0K            0
       md_ddf_data            0            0K            0
         raid_data            0            0K          168
     geom_flashmap            0            0K            0
         tmpfs dir            0            0K            0
        tmpfs name            0            0K            0
       tmpfs mount            0            0K            0
     tmpfs extattr            0            0K            0
           NFS FHA            0            0K            0
         newnfsmnt            0            0K            0
  newnfsclient_req            0            0K            0
   NFSCL layrecall            0            0K            0
     NFSCL session            0            0K            0
     NFSCL sockreq            0            0K            0
     NFSCL devinfo            0            0K            0
     NFSCL flayout            0            0K            0
      NFSCL layout            0            0K            0
     NFSD rollback            0            0K            0
      NFSCL diroff            0            0K            0
        NEWNFSnode            0            0K            0
         NFSCL lck            0            0K            0
      NFSCL lckown            0            0K            0
      NFSCL client            0            0K            0
       NFSCL deleg            0            0K            0
        NFSCL open            0            0K            0
       NFSCL owner            0            0K            0
            NFS fh            0            0K            0
           NFS req            0            0K            0
     NFSD usrgroup            0            0K            0
       NFSD string            0            0K            0
       NFSD V4lock            0            0K            0
      NFSD V4state            0            0K            0
       msdosfs_fat            0            0K            0
     msdosfs_mount            0            0K            0
      msdosfs_node            0            0K            0
            DEVFS4            0            0K            0
            DEVFS2            0            0K            0
            gntdev            0            0K            0
       privcmd_dev            0            0K            0
        evtchn_dev            0            0K            0
          xenstore            0            0K            0
               xnb            0            0K            0
          xen_acpi            0            0K            0
              xbbd            0            0K            0
               xbd            0            0K            0
           Balloon            0            0K            0
          sysmouse            0            0K            0
            vtfont            0            0K            0
            pvscsi            0            0K            0
            USBdev            0            0K            0
               USB            0            0K            0
            twsbuf            0            0K            0
       tcp_log_dev            0            0K            8
      midi buffers            0            0K            0
             mixer            0            0K            0
              ac97            0            0K            0
             hdacc            0            0K            0
              hdac            0            0K            0
              hdaa            0            0K            0
       SIIS driver            0            0K            0
               PUC            0            0K            0
          ppbusdev            0            0K            0
            sr_iov            0            0K            0
               OCS            0            0K            0
               OCS            0            0K            0
              nvme            0            0K            0
               nvd            0            0K            0
            netmap            0            0K            0
            mwldev            0            0K            0
        MVS driver            0            0K            0
         mpi3mrbuf            0            0K            0
          mrsasbuf            0            0K            0
          mpt_user            0            0K            0
          mps_user            0            0K            0
            MPSSAS            0            0K            0
               mps            0            0K            0
          mpr_user            0            0K            0
            MPRSAS            0            0K            0
               mpr            0            0K            0
            mfibuf            0            0K            0
           malodev            0            0K            0
               LED            0            0K            0
          ix_sriov            0            0K            0
                ix            0            0K            0
            ipsbuf            0            0K            0
         ciss_data            0            0K            0
         BACKLIGHT            0            0K            0
           ath_hal            0            0K            0
            athdev            0            0K            0
           ata_pci            0            0K            0
           ata_dma            0            0K            0
       ata_generic            0            0K            0
       AHCI driver            0            0K            0
               agp            0            0K            0
           acpipwr            0            0K            0
         acpi_perf            0            0K            0
         acpicmbat            0            0K            0
        aacraidcam            0            0K            0
       aacraid_buf            0            0K            0
            aaccam            0            0K            0
            aacbuf            0            0K            0
              zstd            0            0K            0
            XZ_DEC            0            0K            0
            nvlist            0            0K         1750
          SCSI ENC            0            0K            0
           SCSI sa            0            0K            0
         scsi_pass            0            0K            0
           scsi_da            0            0K           69
            ata_da            0            0K            0
           scsi_ch            0            0K            0
           scsi_cd            0            0K            0
           nvme_da            0            0K            0
           CAM CCB            0            0K          523
     CAM ccb queue            0            0K            0
db> show uma
              Zone   Size    Used    Free    Requests  Sleeps  Bucket  Total Mem    XFree
   mbuf_jumbo_page   4096    8372    1026       19331       0     254   38494208        0
              mbuf    256   10561     361       85580       0     254    2796032        0
      malloc-16384  16384     152       2         886       0       1    2523136        0
       malloc-4096   4096     550       2        2917       0       2    2260992        0
        RADIX NODE    152   14590     121       66041       0      62    2236072        0
          BUF TRIE    152     330   11474        4368       0      62    1794208        0
        malloc-384    384    4350      30        4350       0      30    1681920        0
         malloc-64     64   17222    8482      217916       0     254    1645056        0
         vmem btag     56   28712      55       28713       0     254    1610952        0
      mbuf_cluster   2048     508     254         509       0     254    1560576        0
        malloc-128    128   12031      90       12205       0     126    1551488        0
    ertt_txseginfo     40   37113     762       51601       0     254    1515000        0
       UMA Slabs 0    112   11885      25       11885       0     126    1333920        0
         sctp_asoc   2256       8     502          21       0     254    1150560        0
         FFS inode   1168     722      27        1746       0       8     874832        0
      malloc-65536  65536      10       2          55       0       1     786432        0
            socket   1024     293     471        3629       0     254     782336        0
         VM OBJECT    264    2635      65       25436       0      30     712800        0
       malloc-4096   4096     170       2         366       0       2     704512        0
           sctp_ep   1152      69     442         448       0     254     588672        0
        256 Bucket   2048     203      79        2704       0       8     577536        0
            THREAD   1824     302      10        1665       0       8     569088        0
               md1  32768      16       0          16       0       1     524288        0
          lkpicurr    168       2    3094           2       0      62     520128        0
         MAP ENTRY     96    5298     120       90123       0     126     520128        0
              pbuf   2624       0     178           0       0       2     467072        0
      malloc-65536  65536       7       0           7       0       1     458752        0
             VNODE    440     765     108        1792       0      30     384120        0
        sctp_raddr    736       8     509          21       0     254     380512        0
       malloc-8192   8192      37       2          52       0       1     319488        0
              PROC   1376     211      20        1801       0       8     317856        0
      malloc-32768  32768       4       5          24       0       1     294912        0
         malloc-64     64    4301     298        5188       0     254     294336        0
     FPU_save_area    832     304      20        2447       0      16     269568        0
         filedesc0   1072     213      25        1871       0       8     255136        0
         malloc-16     16   15240     260       16016       0     254     248000        0
       malloc-2048   2048     104      16         581       0       8     245760        0
       malloc-2048   2048      73      47         607       0       8     245760        0
      malloc-32768  32768       1       6         677       0       1     229376        0
            DEVCTL   1024      89     131         216       0       0     225280        0
           tcp_log    416     197     316         283       0     254     213408        0
         malloc-32     32    6019     407        8278       0     254     205632        0
      malloc-65536  65536       0       3          89       0       1     196608        0
         UMA Zones    768     253       1         254       0      16     195072        0
       FFS2 dinode    256     722      28        1746       0      62     192000        0
        malloc-128    128    1151     244       30632       0     126     178560        0
            lkpimm     56       1    3095           1       0     254     173376        0
             unpcb    320      20     496        1539       0     254     165120        0
      malloc-32768  32768       3       2         132       0       1     163840        0
        malloc-256    256      94     536        8560       0      62     161280        0
       S VFS Cache    104    1063     458        2370       0     126     158184        0
         tcp_inpcb   1304      72      48         677       0       8     156480        0
       malloc-2048   2048       7      65        1136       0       8     147456        0
       malloc-1024   1024     134      10         162       0      16     147456        0
        malloc-256    256     498      72        2748       0      62     145920        0
              pipe    736     100      98         629       0      16     145728        0
       malloc-8192   8192      10       7          32       0       1     139264        0
      malloc-65536  65536       0       2           2       0       1     131072        0
      malloc-65536  65536       0       2         118       0       1     131072        0
        malloc-128    128     719     304        3095       0     126     130944        0
        malloc-128    128     837     186        1869       0     126     130944        0
       mbuf_packet    256      77     431        4981       0     254     130048        0
          ksiginfo    112     237     807         710       0     126     116928        0
           VMSPACE    584     170      26        1742       0      16     114464        0
       malloc-2048   2048      33      15         226       0       8      98304        0
          UMA Kegs    384     238       5         239       0      30      93312        0
             Files     80     915     235       14994       0     126      92000        0
       malloc-8192   8192       7       4         234       0       1      90112        0
          syncache    168       0     528           6       0     254      88704        0
         64 Bucket    512      98      70        6810       0      30      86016        0
             g_bio    408       0     210       22392       0      30      85680        0
        128 Bucket   1024      61      22         342       0      16      84992        0
       tcp_bbr_map    128     345     306        1921       0     126      83328        0
       malloc-4096   4096      16       4          35       0       2      81920        0
        malloc-384    384     115      95         584       0      30      80640        0
        malloc-256    256     157     158        1210       0      62      80640        0
        sctp_chunk    152      55     465          56       0     254      79040        0
       malloc-4096   4096      16       2          29       0       2      73728        0
         udp_inpcb    408      28     152         419       0      30      73440        0
         malloc-64     64     514     557       80321       0     254      68544        0
             ripcb    376      96      84         365       0      30      67680        0
        malloc-128    128     312     215        1862       0     126      67456        0
              md14      8    8192     192        8192       0     254      67072        0
              md12      8    8192     192        8192       0     254      67072        0
              md11      8    8192     192        8192       0     254      67072        0
              md10      8    8192     192        8192       0     254      67072        0
               md9      8    8192     192        8192       0     254      67072        0
               md8      8    8192     192        8192       0     254      67072        0
               md7      8    8192     192        8192       0     254      67072        0
               md5      8    8192     192        8192       0     254      67072        0
               md2      8    8192     192        8192       0     254      67072        0
           DIRHASH   1024      34      30          48       0      16      65536        0
      malloc-65536  65536       1       0           1       0       1      65536        0
      malloc-16384  16384       2       2         192       0       1      65536        0
       malloc-1024   1024      32      32          69       0      16      65536        0
        malloc-256    256     101     154        1292       0      62      65280        0
         32 Bucket    256      96     159        3238       0      62      65280        0
sctp_stream_msg_out    112       2     538           6       0     254      60480        0
         malloc-64     64     480     339         755       0     254      52416        0
        malloc-128    128     165     238        1892       0     126      51584        0
     udplite_inpcb    408       7     119         100       0      30      51408        0
         TURNSTILE    136     313      65         313       0      62      51408        0
           ttyoutq    256      72     123         304       0      62      49920        0
        malloc-256    256      19     176        1859       0      62      49920        0
        malloc-256    256     160      35         202       0      62      49920        0
        malloc-256    256      37     158        3359       0      62      49920        0
             NAMEI   1024       0      48       23301       0      16      49152        0
      malloc-16384  16384       3       0           3       0       1      49152        0
       malloc-2048   2048       7      17         123       0       8      49152        0
       malloc-1024   1024      13      35         564       0      16      49152        0
       malloc-1024   1024      14      34        1468       0      16      49152        0
           pcpu-64     64     499     269         499       0     254      49152        0
            pcpu-8      8    5463     681        6081       0     254      49152        0
        malloc-384    384      79      41         963       0      30      46080        0
        malloc-384    384      92      28         138       0      30      46080        0
        malloc-384    384      13     107        1557       0      30      46080        0
            da_ccb    544       0      84        5725       0      16      45696        0
            clpbuf   2624       0      16         282       0       4      41984        0
            vnpbuf   2624       0      16           2       0      16      41984        0
       malloc-8192   8192       4       1           5       0       1      40960        0
       malloc-4096   4096       5       5         106       0       2      40960        0
       malloc-4096   4096       3       7         361       0       2      40960        0
         hostcache     64       3     564           3       0     254      36288        0
         malloc-64     64      81     486         204       0     254      36288        0
         malloc-64     64     325     242         961       0     254      36288        0
         malloc-64     64     238     329        1921       0     254      36288        0
         malloc-64     64     126     441         572       0     254      36288        0
         16 Bucket    144      70     182         554       0      62      36288        0
      tcp_rack_map    128       0     279        1555       0     126      35712        0
        malloc-128    128       1     278         613       0     126      35712        0
        malloc-128    128      48     231         390       0     126      35712        0
      ktls_session    256       3     132          12       0      62      34560        0
     routing nhops    256      43      92          55       0      62      34560        0
        malloc-256    256      63      72        1739       0      62      34560        0
        SLEEPQUEUE     88     313      71         313       0     126      33792        0
      malloc-32768  32768       0       1           1       0       1      32768        0
      malloc-32768  32768       0       1           2       0       1      32768        0
       malloc-4096   4096       0       8         401       0       2      32768        0
       malloc-2048   2048       4      12           8       0       8      32768        0
       malloc-1024   1024       6      26         268       0      16      32768        0
       malloc-1024   1024      10      22          11       0      16      32768        0
       malloc-1024   1024       2      30        1418       0      16      32768        0
        malloc-512    512       2      62        4258       0      30      32768        0
        malloc-512    512       9      55         361       0      30      32768        0
        malloc-512    512       2      62          74       0      30      32768        0
        malloc-512    512      18      46         113       0      30      32768        0
        malloc-512    512      14      50          50       0      30      32768        0
        malloc-512    512       0      64          98       0      30      32768        0
        malloc-512    512       0      64          16       0      30      32768        0
               PWD     40     133     675         782       0     254      32320        0
            ttyinq    160     135      65         570       0      62      32000        0
   tcp_log_id_node    120       1     263           9       0     126      31680        0
              PGRP    120      26     238          78       0     126      31680        0
       L VFS Cache    320       0      96          70       0      30      30720        0
        sctp_laddr     48      19     569          54       0     254      28224        0
              ertt     72      71     321         677       0     126      28224        0
          rl_entry     48      13     575          30       0     254      28224        0
         malloc-32     32     373     509        1807       0     254      28224        0
         malloc-32     32     321     561        3063       0     254      28224        0
          4 Bucket     48       8     580          25       0     254      28224        0
               AIO    208       1     132         173       0      62      27664        0
             AIOCB    552       1      48         315       0      16      27048        0
            cpuset    200      12     116          81       0      62      25600        0
       malloc-8192   8192       1       2          29       0       1      24576        0
       malloc-8192   8192       1       2           4       0       1      24576        0
 tcp_log_id_bucket    176       1     137           9       0      62      24288        0
   pf frag entries     40       3     603           4       0     254      24240        0
           rtentry    168      46      98          55       0      62      24192        0
          8 Bucket     80      70     230         747       0     126      24000        0
            itimer    352       0      66          76       0      30      23232        0
            splice    184       0     126           3       0      62      23184        0
        malloc-384    384       2      58         215       0      30      23040        0
      tcp_rack_pcb   1088       1      20          12       0       8      22848        0
         domainset     40       1     566          85       0     254      22680        0
       Mountpoints   2816       2       6          35       0       4      22528        0
         malloc-32     32     165     465         213       0     254      20160        0
         malloc-32     32      84     546          97       0     254      20160        0
         malloc-32     32      43     587         813       0     254      20160        0
         malloc-32     32      84     546       30590       0     254      20160        0
          2 Bucket     32      78     552         891       0     254      20160        0
             KNOTE    160       8     117         525       0      62      20000        0
           cryptop    280       0      70          67       0      30      19600        0
          pf frags    256       1      74           1       0      62      19200        0
            AIOLIO    272       0      70          53       0      30      19040        0
              vmem   1856       2       7           2       0       8      16704        0
 epoch_record pcpu    256       4      60           4       0      62      16384        0
      malloc-16384  16384       1       0           1       0       1      16384        0
      malloc-16384  16384       1       0           1       0       1      16384        0
       malloc-8192   8192       0       2           3       0       1      16384        0
       malloc-8192   8192       1       1           3       0       1      16384        0
       malloc-4096   4096       1       3          25       0       2      16384        0
       malloc-2048   2048       2       6           2       0       8      16384        0
           SMR CPU     32       8     503           8       0     254      16352        0
           pf tags    104       1     155           1       0     126      16224        0
       tcp_bbr_pcb    896       6      12          31       0      16      16128        0
               ipq     56       0     288           3       0     254      16128        0
      vtnet_tx_hdr     24       0     668       44263       0     254      16032        0
         malloc-16     16     326     674         515       0     254      16000        0
            mqueue    248       1      63           1       0      62      15872        0
              kenv    258      17      43        1070       0      30      15480        0
            mqnode    416       4      32           4       0      30      14976        0
        SMR SHARED     24       8     503           8       0     254      12264        0
         malloc-32     32      41     337         128       0     254      12096        0
         malloc-16     16      74     676         750       0     254      12000        0
         malloc-16     16      18     732         325       0     254      12000        0
         malloc-16     16      65     685        1946       0     254      12000        0
         malloc-16     16     189     561        2923       0     254      12000        0
         malloc-16     16      13     737       48182       0     254      12000        0
         malloc-16     16     253     497        2955       0     254      12000        0
        malloc-384    384       1      29           2       0      30      11520        0
           pcpu-16     16       8     504           8       0     254       8192        0
       UMA Slabs 1    176      11      11          11       0      62       3872        0
        KMAP ENTRY     96      15      24          49       0       0       3744        0
              md13      8      15     241          15       0     254       2048        0
               tfo      4       1     492           3       0     254       1972        0
               md0      4       0       0           0       0     254          0        0
       FFS1 dinode    128       0       0           0       0     126          0        0
           ada_ccb    272       0       0           0       0      30          0        0
             swblk    136       0       0           0       0      62          0        0
          swpctrie    152       0       0           0       0      62          0        0
   cdg_qdiffsample     16       0       0           0       0     254          0        0
   pf state scrubs     40       0       0           0       0     254          0        0
  pf table entries    160       0       0           0       0     254          0        0
pf table entry counters     64       0       0           0       0     254          0        0
   pf UDP mappings    104       0       0           0       0     126          0        0
   pf source nodes    152       0       0           0       0     254          0        0
     pf state keys     88       0       0           0       0     126          0        0
         pf states    384       0       0           0       0     254          0        0
          pf mtags    184       0       0           0       0      62          0        0
tfo_ccache_entries     80       0       0           0       0     126          0        0
          sackhole     32       0       0           0       0     254          0        0
   sctp_asconf_ack     48       0       0           0       0     254          0        0
       sctp_asconf     40       0       0           0       0     254          0        0
        sctp_readq    152       0       0           0       0     254          0        0
          tcpreass     48       0       0           0       0     254          0        0
    IPsec SA lft_c     16       0       0           0       0     254          0        0
        mqnotifier    216       0       0           0       0      62          0        0
            mvdata     64       0       0           0       0     254          0        0
        TMPFS node    240       0       0           0       0      62          0        0
           NCLNODE    608       0       0           0       0      16          0        0
     LTS VFS Cache    360       0       0           0       0      30          0        0
     STS VFS Cache    144       0       0           0       0      62          0        0
  linux_dma_object     32       0       0           0       0     254          0        0
  linux_dma_pctrie    152       0       0           0       0      62          0        0
   IOMMU_MAP_ENTRY    112       0       0           0       0     126          0        0
            skbuff   1808       0       0           0       0       8          0        0
    mbuf_jumbo_16k  16384       0       0           0       0     254          0        0
     mbuf_jumbo_9k   9216       0       0           0       0     254          0        0
      audit_record   1280       0       0           0       0       8          0        0
        MAC labels     40       0       0           0       0     254          0        0
           nfspbuf   2624       0       0           0       0       4          0        0
            swwbuf   2624       0       0           0       0       2          0        0
            swrbuf   2624       0       0           0       0       4          0        0
          umtx_shm     88       0       0           0       0     126          0        0
           umtx pi     96       0       0           0       0     126          0        0
rangeset pctrie nodes    152       0       0           0       0      62          0        0
      malloc-65536  65536       0       0           0       0       1          0        0
      malloc-65536  65536       0       0           0       0       1          0        0
      malloc-32768  32768       0       0           0       0       1          0        0
      malloc-32768  32768       0       0           0       0       1          0        0
      malloc-32768  32768       0       0           0       0       1          0        0
      malloc-16384  16384       0       0           0       0       1          0        0
      malloc-16384  16384       0       0           0       0       1          0        0
      malloc-16384  16384       0       0           0       0       1          0        0
       malloc-2048   2048       0       0           0       0       8          0        0
       malloc-1024   1024       0       0           0       0      16          0        0
        malloc-512    512       0       0           0       0      30          0        0
        malloc-384    384       0       0           0       0      30          0        0
           pcpu-32     32       0       0           0       0     254          0        0
            pcpu-4      4       0       0           0       0     254          0        0
            fakepg    104       0       0           0       0     126          0        0
          UMA Hash    256       0       0           0       0      62          0        0

Crashes (1):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2025/05/04 04:08 freebsd-src 75d173a84836 b0714e37 console log report ci-freebsd-main panic: /syzkaller/managers/main/kernel/sys/netinet/in_pcb.c:LINE: in_pcbremlbgrouphash: Bad link elm ADDR next->prev !=
* Struck through repros no longer work on HEAD.