syzbot


panic: prefix ADDR has referencing addresses (6)

Status: upstream: reported on 2024/08/01 00:25
Reported-by: syzbot+fa81ba7a0d24c1d4182e@syzkaller.appspotmail.com
First crash: 46d, last: 46d
Similar bugs (5)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
freebsd panic: prefix ADDR has referencing addresses (2) 3 869d 978d 0/2 auto-closed as invalid on 2022/07/29 22:49
freebsd panic: prefix ADDR has referencing addresses 1 1072d 1072d 0/2 auto-closed as invalid on 2022/01/08 14:25
freebsd panic: prefix ADDR has referencing addresses (5) 4 166d 204d 0/2 auto-obsoleted due to no activity on 2024/07/02 17:02
freebsd panic: prefix ADDR has referencing addresses (3) 1 659d 659d 0/2 auto-obsoleted due to no activity on 2023/02/25 09:22
freebsd panic: prefix ADDR has referencing addresses (4) 2 315d 369d 0/2 auto-obsoleted due to no activity on 2024/02/04 05:57

Sample crash report:
e tap0 no longerpanic: prefix 0xfffffe006e0c1900 has referencing addresses
cpuid = 0
time = 1722495806
KDB: stack backtrace:
db_trace_self_wrapper() at db_trace_self_wrapper+0xc6/frame 0xfffffe0056fdfff0
kdb_backtrace() at kdb_backtrace+0xd0/frame 0xfffffe0056fe0150
vpanic() at vpanic+0x280/frame 0xfffffe0056fe0310
panic() at panic+0xb5/frame 0xfffffe0056fe03d0
nd6_prefix_del() at nd6_prefix_del+0x414/frame 0xfffffe0056fe04d0
nd6_purge() at nd6_purge+0x2b2/frame 0xfffffe0056fe0590
_in6_ifdetach() at _in6_ifdetach+0x2b2/frame 0xfffffe0056fe0670
if_detach_internal() at if_detach_internal+0x3b5/frame 0xfffffe0056fe0740
if_detach() at if_detach+0xbe/frame 0xfffffe0056fe0780
tun_destroy() at tun_destroy+0x1bc/frame 0xfffffe0056fe07d0
tun_clone_destroy() at tun_clone_destroy+0x112/frame 0xfffffe0056fe0800
if_clone_destroyif_flags() at if_clone_destroyif_flags+0xd0/frame 0xfffffe0056fe0850
if_clone_destroy() at if_clone_destroy+0x1f6/frame 0xfffffe0056fe0890
ifioctl() at ifioctl+0x13a2/frame 0xfffffe0056fe0ad0
kern_ioctl() at kern_ioctl+0x4ca/frame 0xfffffe0056fe0bb0
sys_ioctl() at sys_ioctl+0x367/frame 0xfffffe0056fe0d10
amd64_syscall() at amd64_syscall+0x4cb/frame 0xfffffe0056fe0f30
fast_syscall_common() at fast_syscall_common+0xf8/frame 0xfffffe0056fe0f30
--- syscall (54, FreeBSD ELF64, ioctl), rip = 0x8252a82ca, rsp = 0x820ef1ab8, rbp = 0x820ef1ad0 ---
KDB: enter: panic
[ thread pid 1120 tid 100203 ]
Stopped at      kdb_enter+0x6e: movq    $0,0x23db5b7(%rip)
db> 
db> set $lines = 0
db> set $maxwidth = 0
db> show registers
cs                        0x20
ds                        0x3b
es                        0x3b
fs                        0x13
gs                        0x1b
ss                        0x28
rax                       0x12
rcx         0xfffffe00033eee30
rdx                          0
rbx         0xffffffff826fe0a0  .str.27
rsp         0xfffffe0056fe0130
rbp         0xfffffe0056fe0150
rsi                          0
rdi         0xffffffff815cac69  printf+0x149
r8                           0
r9                  0xffffffff
r10            0x100000000010f
r11                       0x1f
r12         0xfffffe006e0df000
r13         0xfffffffffffffffe
r14         0xffffffff826fe0a0  .str.27
r15                          0
rip         0xffffffff815b69de  kdb_enter+0x6e
rflags                    0x46
kdb_enter+0x6e: movq    $0,0x23db5b7(%rip)
db> show proc
Process 1120 (ifconfig) at 0xfffffe00749d6580:
 state: NORMAL
 uid: 0  gids: 0, 0, 5
 parent: pid 1118 at 0xfffffe006dc4e040
 ABI: FreeBSD ELF64
 flag: 0x10004000  flag2: 0
 arguments: ifconfig tap0 destroy
 reaper: 0xfffffe005421d040 reapsubtree: 1
 sigparent: 20
 vmspace: 0xfffffe005974f000
   (map 0xfffffe005974f000)
   (map.pmap 0xfffffe005974f0c0)
   (pmap 0xfffffe005974f130)
 threads: 1
100203                   Run     CPU 0                       ifconfig
db> ps
  pid  ppid  pgrp   uid  state   wmesg   wchan               cmd
 1123  1101   424     0  R                                   logger
 1122   763  1122     0  R       CPU 1                       syz-executor
 1121  1119  1119     0  D       ifnet_d 0xffffffff83a91200  ifconfig
 1120  1118  1118     0  R       CPU 0                       ifconfig
 1119   763  1119     0  S       wait    0xfffffe005421e060  syz-executor
 1118   763  1118     0  S       wait    0xfffffe006dc4e040  syz-executor
 1101   424   424     0  S       wait    0xfffffe006dc4f5c0  sh
 1034   763  1034     0  RE                                  syz-executor
  875     0     0     0  DL      aiordy  0xfffffe006dc4e5a0  [aiod4]
  874     0     0     0  DL      aiordy  0xfffffe006dc4eb00  [aiod3]
  873     0     0     0  DL      aiordy  0xfffffe0057fe9040  [aiod2]
  872     0     0     0  DL      aiordy  0xfffffe00585f4b00  [aiod1]
  763   761   761     0  R                                   syz-executor
  761   759   761     0  Ss      pause   0xfffffe0057fe8b90  csh
  759   682   759     0  Ss      select  0xfffffe006b498d40  sshd
  748     1   748     0  Rs+                                 getty
  747     1   747     0  Ss+     ttyin   0xfffffe00586078b0  getty
  746     1   746     0  Ss+     ttyin   0xfffffe0058607cb0  getty
  745     1   745     0  Ss+     ttyin   0xfffffe00586080b0  getty
  744     1   744     0  Ss+     ttyin   0xfffffe00586084b0  getty
  743     1   743     0  Ss+     ttyin   0xfffffe00586088b0  getty
  742     1   742     0  Ss+     ttyin   0xfffffe0058608cb0  getty
  741     1   741     0  Ss+     ttyin   0xfffffe00586090b0  getty
  740     1   740     0  Ss+     ttyin   0xfffffe00586094b0  getty
  686     1   686     0  Ss      nanslp  0xffffffff83973380  cron
  682     1   682     0  Ss      select  0xfffffe0007c88bc0  sshd
  495     1   495     0  Ds      getbuf  0xfffffe0007e47bcc  syslogd
  424     1   424     0  Ss      wait    0xfffffe00585f3020  devd
  423     1   423    65  Ss      select  0xfffffe006b49a2c0  dhclient
  338     1   338     0  Ss      select  0xfffffe006b4996c0  dhclient
  335     1   335     0  Ss      select  0xfffffe0007c89040  dhclient
   17     0     0     0  DL      syncer  0xffffffff83a90a60  [syncer]
   16     0     0     0  DL      vlruwt  0xfffffe0057fea060  [vnlru]
   15     0     0     0  DL      (threaded)                  [bufdaemon]
100080                   D       psleep  0xffffffff83a8f040  [bufdaemon]
100083                   D       -       0xffffffff82e02140  [bufspacedaemon-0]
100094                   D       sdflush 0xfffffe005859c0e8  [/ worker]
    9     0     0     0  DL      psleep  0xffffffff83ada600  [vmdaemon]
    8     0     0     0  DL      (threaded)                  [pagedaemon]
100078                   D       psleep  0xffffffff83ac04f8  [dom0]
100081                   D       launds  0xffffffff83ac0504  [laundry: dom0]
100082                   D       umarcl  0xffffffff81d4eff0  [uma]
    7     0     0     0  DL      -       0xffffffff836f0b70  [rand_harvestq]
    6     0     0     0  DL      pftm    0xffffffff84559fd0  [pf purge]
    5     0     0     0  DL      waiting 0xffffffff843869c0  [sctp_iterator]
    4     0     0     0  DL      (threaded)                  [cam]
100045                   D       -       0xffffffff836bb340  [doneq0]
100046                   D       -       0xffffffff836bb2c0  [async]
100077                   D       -       0xffffffff836bb140  [scanner]
    3     0     0     0  DL      (threaded)                  [crypto]
100042                   D       crypto_ 0xffffffff83abbd00  [crypto]
100043                   D       crypto_ 0xfffffe0054304d30  [crypto returns 0]
100044                   D       crypto_ 0xfffffe0054304d80  [crypto returns 1]
   14     0     0     0  DL      seqstat 0xfffffe00085f6488  [sequencer 00]
   13     0     0     0  DL      (threaded)                  [geom]
100036                   D       -       0xffffffff8391bd20  [g_event]
100037                   D       -       0xffffffff8391bd40  [g_up]
100038                   D       -       0xffffffff8391bd60  [g_down]
    2     0     0     0  WL      (threaded)                  [clock]
100030                   I                                   [clock (0)]
100031                   I                                   [clock (1)]
   12     0     0     0  WL      (threaded)                  [intr]
100012                   I                                   [swi6: task queue]
100013                   I                                   [swi6: Giant taskq]
100015                   I                                   [swi5: fast taskq]
100032                   I                                   [swi1: netisr 0]
100033                   I                                   [swi1: hpts]
100034                   I                                   [swi1: hpts]
100047                   I                                   [irq24: virtio_pci0]
100048                   I                                   [irq25: virtio_pci0]
100049                   I                                   [irq26: virtio_pci0]
100050                   I                                   [irq27: virtio_pci0]
100051                   I                                   [irq28: virtio_pci1]
100052                   I                                   [irq29: virtio_pci1]
100053                   I                                   [irq30: virtio_pci1]
100054                   I                                   [irq31: virtio_pci1]
100055                   I                                   [irq32: virtio_pci1]
100060                   I                                   [irq33: virtio_pci2]
100061                   I                                   [irq34: virtio_pci2]
100062                   I                                   [irq35: virtio_pci2]
100064                   I                                   [irq1: atkbd0]
100065                   I                                   [irq12: psm0]
100066                   I                                   [swi0: uart uart++]
100070                   I                                   [swi1: pf send]
   11     0     0     0  RL      (threaded)                  [idle]
100003                   CanRun                              [idle: cpu0]
100004                   CanRun                              [idle: cpu1]
    1     0     1     0  SLs     wait    0xfffffe005421d040  [init]
   10     0     0     0  DL      audit_w 0xffffffff83abc760  [audit]
    0     0     0     0  DLs     (threaded)                  [kernel]
100000                   D       swapin  0xffffffff8391c700  [swapper]
100005                   D       -       0xfffffe00085e0900  [softirq_0]
100006                   D       -       0xfffffe00085e0800  [softirq_1]
100007                   D       -       0xfffffe00085e0700  [if_io_tqg_0]
100008                   D       -       0xfffffe00085e0600  [if_io_tqg_1]
100009                   D       -       0xfffffe00085e0500  [if_config_tqg_0]
100010                   D       -       0xfffffe00085e0400  [pci_hp taskq]
100011                   D       -       0xfffffe00085e0300  [kqueue_ctx taskq]
100014                   D       -       0xfffffe00085e0000  [thread taskq]
100016                   D       -       0xfffffe00085dfd00  [aiod_kick taskq]
100017                   D       -       0xfffffe00085dfc00  [deferred_unmount ta]
100018                   D       -       0xfffffe00085dfb00  [inm_free taskq]
100019                   D       -       0xfffffe00085dfa00  [in6m_free taskq]
100020                   D       -       0xfffffe00085df900  [linuxkpi_irq_wq]
100021                   D       -       0xfffffe00085df800  [linuxkpi_short_wq_0]
100022                   D       -       0xfffffe00085df800  [linuxkpi_short_wq_1]
100023                   D       -       0xfffffe00085df800  [linuxkpi_short_wq_2]
100024                   D       -       0xfffffe00085df800  [linuxkpi_short_wq_3]
100025                   D       -       0xfffffe00085df700  [linuxkpi_long_wq_0]
100026                   D       -       0xfffffe00085df700  [linuxkpi_long_wq_1]
100027                   D       -       0xfffffe00085df700  [linuxkpi_long_wq_2]
100028                   D       -       0xfffffe00085df700  [linuxkpi_long_wq_3]
100035                   D       -       0xfffffe00085df600  [firmware taskq]
100040                   D       -       0xfffffe00085df300  [crypto_0]
100041                   D       -       0xfffffe00085df300  [crypto_1]
100056                   D       -       0xfffffe00085df100  [vtnet0 rxq 0]
100057                   D       -       0xfffffe00085df000  [vtnet0 txq 0]
100058                   D       -       0xfffffe00085dee00  [vtnet0 rxq 1]
100059                   D       -       0xfffffe00085ded00  [vtnet0 txq 1]
100063                   D       vtbslp  0xfffffe0007c8b480  [virtio_balloon]
100067                   D       -       0xffffffff827032e0  [deadlkres]
100071                   D       -       0xfffffe005853bb00  [acpi_task_0]
100072                   D       -       0xfffffe005853bb00  [acpi_task_1]
100073                   D       -       0xfffffe005853bb00  [acpi_task_2]
100075                   D       -       0xfffffe00085e0a00  [mca taskq]
100076                   D       -       0xfffffe00085df200  [CAM taskq]
db> show all locks
Process 1122 (syz-executor) thread 0xfffffe006b44b000 (100103)
exclusive rw vmobject (vmobject) r = 0 (0xfffffe006e091b58) locked @ /syzkaller/managers/main/kernel/sys/kern/kern_kcov.c:381
Process 1120 (ifconfig) thread 0xfffffe006e0df000 (100203)
exclusive sx ifnet_detach_sx (ifnet_detach_sx) r = 1 (0xffffffff83a91200) locked @ /syzkaller/managers/main/kernel/sys/net/if.c:1098
Process 495 (syslogd) thread 0xfffffe006b209740 (100096)
exclusive lockmgr ufs (ufs) r = 0 (0xfffffe006db48230) locked @ /syzkaller/managers/main/kernel/sys/kern/vfs_syscalls.c:3581
db> show malloc
              Type        InUse        MemUse     Requests
           pf_hash            5        11524K            5
            linker          375         4959K          485
          tcp_hpts            7         4801K            7
            devbuf         4192         4324K         4220
         sysctloid        34953         2060K        35024
             vtbuf           24         1968K           46
              kobj          329         1316K          493
            newblk           25         1030K          553
          vfscache            3         1025K            3
               pcb           23          669K          531
          inodedep           39          527K          217
         ufs_quota            1          512K            1
          vfs_hash            1          512K            1
           callout            2          512K            2
              intr            4          472K            4
           subproc          127          226K         1195
         vnet_data            2          224K            2
          acpitask            1          224K            1
            KTRACE          100          200K          100
            acpica         1674          184K        61482
           tidhash            3          141K            3
              vmem            4          136K            6
           pagedep           29          135K          140
        tfo_ccache            1          128K            1
          IP reass            1          128K            1
            DEVFS1          121          121K          162
               sem            4          106K            4
          filedesc           14          105K          422
        gtaskqueue           18           98K           18
               bus          995           82K         5165
          mtx_pool            2           72K            2
          syncache            1           68K            1
     NFSD srvcache            3           68K            3
            module          518           65K          518
       ddb_capture            1           64K            1
               LRO           40           41K           72
              temp           31           37K         2711
           kdtrace          184           37K         1355
              umtx          288           36K          288
         hostcache            1           32K            1
               shm            1           32K            1
            DEVFS3          127           32K          150
               msg            4           30K            4
          routetbl          661           30K         2289
            kbdmux            6           28K            6
        DEVFS_RULE           56           20K           56
               BPF           13           18K           42
         ufs_mount            4           17K            5
              proc            3           17K            3
            ifaddr           60           17K          181
               tty           16           16K           16
           ithread           97           16K           97
            bus-sc           34           15K         1687
      eventhandler          162           14K          162
             ifnet            7           13K           19
              kenv           95           12K           95
              GEOM           61           11K          477
              rman           86           11K          451
         CAM queue            5           11K         1528
           lltable           31            9K          143
         bmsafemap            3            9K          171
               rpc            4            9K            4
           devstat            4            9K            4
              UART           12            9K           12
              ksem            1            8K            1
             shmfd            1            8K            1
       pfs_vncache            1            8K            1
     audit_evclass          238            8K          300
          pf_ifnet           22            8K           81
         sctp_timw           29            8K           29
       ether_multi           88            8K          539
         taskqueue           63            7K           63
            sglist            6            7K            6
           CAM DEV            3            6K          510
              cred           22            6K          241
         pfs_nodes           22            6K           22
            plimit           21            6K          522
         in6_multi           34            6K          208
       ufs_dirhash           24            5K           24
               UMA          268            5K          268
                vt           11            5K           11
           memdesc            1            4K            1
               MCA           32            4K           32
             evdev            4            4K            4
           acpisem           28            4K           28
            diradd           26            4K          165
            kqueue           49            4K         1210
            DEVFSP           49            4K          302
           pwddesc           48            3K         1144
             mkdir           23            3K          240
          kcovinfo           46            3K          242
          terminal           11            3K           11
         proc-args           72            3K         2656
         newdirblk           19            3K          120
           session           19            3K           57
             hhook            8            3K           10
             clone            9            3K            9
           uidinfo            3            3K           10
        local_apic            1            2K            1
           io_apic            1            2K            1
         ipsec-saq            2            2K            2
             lockf           18            2K           45
            Unitno           28            2K           98
            ip6ndp           11            2K           43
           CAM XPT           22            2K          543
               msi           12            2K           12
            dirrem            6            2K          119
               tun            4            2K           16
         toponodes            6            2K            6
          sctp_ifa           11            2K           41
       ipsecpolicy            2            2K            2
           acpidev           20            2K           20
             selfd           19            2K        15302
           netlink            2            2K          135
           softdep            1            1K            1
            sahead            1            1K            1
          secasvar            1            1K            1
            CC Mem            4            1K           35
       vnodemarker            2            1K           28
            select            8            1K           40
      NFSD session            1            1K            1
        CAM periph            4            1K          271
          freework            4            1K          105
             ipsec            3            1K            3
          freefile            6            1K          105
          freeblks            3            1K          104
               mld            6            1K           18
              igmp            6            1K           18
             nhops            6            1K           22
              pfil            6            1K            6
            isadev            6            1K            6
             mount           16            1K           89
          pci_link           10            1K           10
            crypto            4            1K            4
 encap_export_host           12            1K           12
          in_multi            2            1K           21
              cdev            2            1K            2
       lkpikmalloc            8            1K            9
               osd            9            1K           48
       inpcbpolicy           13            1K          316
    chacha20random            1            1K            1
            biobuf            1            1K            1
          sctp_ifn            2            1K           41
            vnodes            1            1K            1
      NFSD lckfile            1            1K            1
     NFSD V4client            1            1K            1
             DEVFS            9            1K           10
           CAM SIM            2            1K            2
            feeder            7            1K            7
           tcpfunc            3            1K            3
        loginclass            3            1K            5
            prison            6            1K            6
         cryptodev            2            1K           35
          nexusdev            8            1K            8
            apmdev            1            1K            1
          atkbddev            2            1K            2
               aio            4            1K            4
          procdesc            1            1K           14
          pmchooks            1            1K            1
          CAM path            4            1K         1034
     CAM dev queue            2            1K            2
 CAM I/O Scheduler            1            1K            1
            soname            4            1K         3580
          sctp_vrf            1            1K            1
              vnet            1            1K            1
               pmc            1            1K            1
           entropy            2            1K           52
          acpiintr            1            1K            1
              cpus            2            1K            2
    vnet_data_free            1            1K            1
           Per-cpu            1            1K            1
          p1003.1b            1            1K            1
          filecaps            1            1K          104
           filemon            0            0K           33
      tcp_pcm_rack            0            0K            1
       tcp_do_rack            0            0K            0
      tcp_fsb_rack            0            0K            2
          pf_table            0            0K            0
           pf_rule            0            0K            0
           pf_altq            0            0K            0
           pf_osfp            0            0K            0
     pf_krule_item            0            0K            0
           pf_temp            0            0K            0
        sctp_mcore            0            0K            0
        sctp_socko            0            0K           91
         sctp_iter            0            0K           51
         sctp_mvrf            0            0K            0
         sctp_cpal            0            0K            0
         sctp_cmsg            0            0K            0
         sctp_stre            0            0K            0
         sctp_athi            0            0K            0
         sctp_athm            0            0K          296
         sctp_atky            0            0K          367
         sctp_atcl            0            0K          296
         sctp_a_it            0            0K           51
         sctp_aadr            0            0K            6
         sctp_stro            0            0K           71
         sctp_stri            0            0K            0
          sctp_map            0            0K          142
            mqdata            0            0K            0
            ipcomp            0            0K            0
               esp            0            0K            0
                ah            0            0K            0
        madt_table            0            0K            2
          smartpqi            0            0K            0
               ixl            0            0K            0
        ice-resmgr            0            0K            0
         ice-osdep            0            0K            0
               ice            0            0K            0
              iavf            0            0K            0
             axgbe            0            0K            0
       fpukern_ctx            0            0K            0
          xen_intr            0            0K            0
           xen_hvm            0            0K            0
         legacydrv            0            0K            0
            bounce            0            0K            0
            busdma            0            0K            0
            qpidrv            0            0K            0
      dmar_idpgtbl            0            0K            0
          dmar_dom            0            0K            0
          dmar_ctx            0            0K            0
              isci            0            0K            0
      iommu_dmamap            0            0K            0
     hyperv_socket            0            0K            0
           bxe_ilt            0            0K            0
        aesni_data            0            0K            0
            xenbus            0            0K            0
     vm_fictitious            0            0K            0
           UMAHash            0            0K            0
         vm_pgdata            0            0K            0
           jblocks            0            0K            0
          savedino            0            0K          127
          sentinel            0            0K            0
            jfsync            0            0K            0
            jtrunc            0            0K            0
             sbdep            0            0K           12
           jsegdep            0            0K            0
              jseg            0            0K            0
         jfreefrag            0            0K            0
          jfreeblk            0            0K            0
           jnewblk            0            0K            0
            jmvref            0            0K            0
           jremref            0            0K            0
           jaddref            0            0K            0
           freedep            0            0K            0
          freefrag            0            0K           11
        allocindir            0            0K            0
          indirdep            0            0K           10
       allocdirect            0            0K            0
          ufs_trim            0            0K            0
           mactemp            0            0K            0
     audit_trigger            0            0K            0
 audit_pipe_presel            0            0K            0
     audit_pipeent            0            0K            0
        audit_pipe            0            0K            0
      audit_evname            0            0K            0
         audit_bsm            0            0K            0
      audit_gidset            0            0K            0
        audit_text            0            0K            0
        audit_path            0            0K            0
        audit_data            0            0K            0
        audit_cred            0            0K            0
          ktls_ocf            0            0K            0
        MLX5EEPROM            0            0K            0
        MLX5EEPROM            0            0K            0
        MLX5EEPROM            0            0K            0
        MLX5EEPROM            0            0K            0
        MLX5EEPROM            0            0K            0
      MLX5E_TLS_RX            0            0K            0
        MLX5EEPROM            0            0K            0
         MLX5E_TLS            0            0K            0
        MLX5EEPROM            0            0K            0
        MLX5EEPROM            0            0K            0
        MLX5EEPROM            0            0K            0
            MLX5EN            0            0K            0
        MLX5EEPROM            0            0K            0
        MLX5EEPROM            0            0K            0
        MLX5EEPROM            0            0K            0
          MLX5DUMP            0            0K            0
        MLX5EEPROM            0            0K            0
        MLX5EEPROM            0            0K            0
        MLX5EEPROM            0            0K            0
       simple_attr            0            0K            0
          seq_file            0            0K            0
           lkpiskb            0            0K            0
             radix            0            0K            0
               idr            0            0K            0
          lkpindev            0            0K            0
           lkpimhi            0            0K            0
            lkpifw            0            0K            0
         lkpi80211            0            0K            0
               NLM            0            0K            0
    ipsec-spdcache            0            0K            0
         ipsec-reg            0            0K            0
        ipsec-misc            0            0K            0
      ipsecrequest            0            0K            0
            ip6opt            0            0K            3
       ip6_msource            0            0K            0
      ip6_moptions            0            0K            0
       in6_mfilter            0            0K            0
             frag6            0            0K            0
            tcplog            0            0K            0
        tcp_hwpace            0            0K            0
        ip_msource            0            0K            0
       ip_moptions            0            0K            0
        in_mfilter            0            0K            0
              ipid            0            0K            0
         80211scan            0            0K            0
      80211ratectl            0            0K            0
        80211power            0            0K            0
       80211nodeie            0            0K            0
         80211node            0            0K            0
      80211mesh_gt            0            0K            0
      80211mesh_rt            0            0K            0
         80211perr            0            0K            0
         80211prep            0            0K            0
         80211preq            0            0K            0
          80211dfs            0            0K            0
       80211crypto            0            0K            0
          80211vap            0            0K            0
             iflib            0            0K            0
              vlan            0            0K            0
               gif            0            0K            0
           ifdescr            0            0K            0
              zlib            0            0K           19
           fadvise            0            0K            0
           VN POLL            0            0K            0
            statfs            0            0K          203
     namei_tracker            0            0K            0
       export_host            0            0K            0
        cl_savebuf            0            0K           10
               lio            0            0K            0
               acl            0            0K            0
          mbuf_tag            0            0K            0
              ktls            0            0K            0
              accf            0            0K            0
               pts            0            0K            0
           timerfd            0            0K            0
               iov            0            0K        15659
          ioctlops            0            0K          157
           eventfd            0            0K            0
           Witness            0            0K            0
             stack            0            0K            0
              sbuf            0            0K          288
          firmware            0            0K            0
        compressor            0            0K            0
              SWAP            0            0K            0
         sysctltmp            0            0K          692
            sysctl            0            0K            3
              ekcd            0            0K            0
            dumper            0            0K            0
          sendfile            0            0K            0
              rctl            0            0K            0
             cache            0            0K            0
      prison_racct            0            0K            0
       Fail Points            0            0K            0
             sigio            0            0K            1
filedesc_to_leader            0            0K            0
               pwd            0            0K            0
       tty console            0            0K            0
         boottrace            0            0K            0
        isofs_node            0            0K            0
       isofs_mount            0            0K            0
     tr_raid5_data            0            0K            0
    tr_raid1e_data            0            0K            0
     tr_raid1_data            0            0K            0
     tr_raid0_data            0            0K            0
    tr_concat_data            0            0K            0
       md_sii_data            0            0K            0
   md_promise_data            0            0K            0
    md_nvidia_data            0            0K            0
   md_jmicron_data            0            0K            0
     md_intel_data            0            0K            0
       md_ddf_data            0            0K            0
         raid_data            0            0K           72
     geom_flashmap            0            0K            0
         tmpfs dir            0            0K            0
        tmpfs name            0            0K            0
       tmpfs mount            0            0K            0
     tmpfs extattr            0            0K            0
           NFS FHA            0            0K            0
         newnfsmnt            0            0K            0
  newnfsclient_req            0            0K            0
   NFSCL layrecall            0            0K            0
     NFSCL session            0            0K            0
     NFSCL sockreq            0            0K            0
     NFSCL devinfo            0            0K            0
     NFSCL flayout            0            0K            0
      NFSCL layout            0            0K            0
     NFSD rollback            0            0K            0
      NFSCL diroff            0            0K            0
        NEWNFSnode            0            0K            0
         NFSCL lck            0            0K            0
      NFSCL lckown            0            0K            0
      NFSCL client            0            0K            0
       NFSCL deleg            0            0K            0
        NFSCL open            0            0K            0
       NFSCL owner            0            0K            0
            NFS fh            0            0K            0
           NFS req            0            0K            0
     NFSD usrgroup            0            0K            0
       NFSD string            0            0K            0
       NFSD V4lock            0            0K            0
      NFSD V4state            0            0K            0
       msdosfs_fat            0            0K            0
     msdosfs_mount            0            0K            0
      msdosfs_node            0            0K            0
            DEVFS4            0            0K            0
            DEVFS2            0            0K            0
            gntdev            0            0K            0
       privcmd_dev            0            0K            0
        evtchn_dev            0            0K            0
          xenstore            0            0K            0
               xnb            0            0K            0
          xen_acpi            0            0K            0
              xbbd            0            0K            0
               xbd            0            0K            0
           Balloon            0            0K            0
          sysmouse            0            0K            0
            vtfont            0            0K            0
            pvscsi            0            0K            0
            USBdev            0            0K            0
               USB            0            0K            0
            twsbuf            0            0K            0
       tcp_log_dev            0            0K            0
      midi buffers            0            0K            0
             mixer            0            0K            0
              ac97            0            0K            0
             hdacc            0            0K            0
              hdac            0            0K            0
              hdaa            0            0K            0
       SIIS driver            0            0K            0
               PUC            0            0K            0
          ppbusdev            0            0K            0
            sr_iov            0            0K            0
               OCS            0            0K            0
               OCS            0            0K            0
              nvme            0            0K            0
               nvd            0            0K            0
            netmap            0            0K            0
            mwldev            0            0K            0
        MVS driver            0            0K            0
          mrsasbuf            0            0K            0
          mpt_user            0            0K            0
          mps_user            0            0K            0
            MPSSAS            0            0K            0
               mps            0            0K            0
          mpr_user            0            0K            0
            MPRSAS            0            0K            0
               mpr            0            0K            0
            mfibuf            0            0K            0
        md_sectors            0            0K            0
           md_disk            0            0K            0
           malodev            0            0K            0
               LED            0            0K            0
          ix_sriov            0            0K            0
                ix            0            0K            0
            ipsbuf            0            0K            0
         ciss_data            0            0K            0
         BACKLIGHT            0            0K            0
           ath_hal            0            0K            0
            athdev            0            0K            0
           ata_pci            0            0K            0
           ata_dma            0            0K            0
       ata_generic            0            0K            0
       AHCI driver            0            0K            0
               agp            0            0K            0
           acpipwr            0            0K            0
         acpi_perf            0            0K            0
         acpicmbat            0            0K            0
        aacraidcam            0            0K            0
       aacraid_buf            0            0K            0
            aaccam            0            0K            0
            aacbuf            0            0K            0
              zstd            0            0K            0
            XZ_DEC            0            0K            0
            nvlist            0            0K            0
          SCSI ENC            0            0K            0
           SCSI sa            0            0K            0
         scsi_pass            0            0K            0
           scsi_da            0            0K           69
            ata_da            0            0K            0
           scsi_ch            0            0K            0
           scsi_cd            0            0K            0
           nvme_da            0            0K            0
           CAM CCB            0            0K          523
     CAM ccb queue            0            0K            0
db> show uma
              Zone   Size    Used    Free    Requests  Sleeps  Bucket  Total Mem    XFree
   mbuf_jumbo_page   4096    8335    1063       16879       0     254   38494208        0
              mbuf    256    8601    1061       61767       0     254    2473472        0
          BUF TRIE    144     218   11570         563       0      62    1697472        0
        malloc-384    384    4118      52        4118       0      30    1601280        0
       malloc-4096   4096     378      12        1640       0       2    1597440        0
    ertt_txseginfo     40       0   39188       39651       0     254    1567520        0
        malloc-128    128   11492     102       11716       0     126    1484032        0
       UMA Slabs 0    112   10915      23       10915       0     126    1225056        0
         sctp_asoc   2256       0     510          71       0     254    1150560        0
      mbuf_cluster   2048     508       0         508       0     254    1040384        0
         vmem btag     56   16529     142       16533       0     254     933576        0
        RADIX NODE    144    5026     569       41162       0      62     805680        0
         FFS inode   1168     552      29         659       0       8     678608        0
        256 Bucket   2048     292       4        1380       0       8     606208        0
      malloc-65536  65536       9       0          12       0       1     589824        0
           sctp_ep   1152       0     511         225       0     254     588672        0
          lkpicurr    168       2    3094           2       0      62     520128        0
              pbuf   2624       0     198           0       0       2     519552        0
            socket    960      22     486        1856       0     254     487680        0
        sctp_raddr    736       0     517          71       0     254     380512        0
         VM OBJECT    264    1021     179       18326       0      30     316800        0
            DEVCTL   1024     189     103         320       0       0     299008        0
             VNODE    448     589      77         711       0      30     298368        0
         malloc-64     64    4121     478        7042       0     254     294336        0
            THREAD   1824     134      10         230       0       8     262656        0
      malloc-65536  65536       4       0           4       0       1     262144        0
         malloc-16     16   14443     307       14939       0     254     236000        0
      malloc-16384  16384       9       5         364       0       1     229376        0
       malloc-2048   2048     105       7         296       0       8     229376        0
         UMA Zones    768     240       4         240       0      16     187392        0
         malloc-32     32    5321     349        6037       0     254     181440        0
       malloc-2048   2048       7      81         665       0       8     180224        0
        malloc-128    128    1208     187       32246       0     126     178560        0
            lkpimm     56       1    3095           1       0     254     173376        0
      malloc-32768  32768       5       0           5       0       1     163840        0
       FFS2 dinode    256     552      78         657       0      62     161280        0
        malloc-256    256     110     520        1195       0      62     161280        0
       malloc-1024   1024     127      17         168       0      16     147456        0
        malloc-128    128    1036     111        2579       0     126     146816        0
       S VFS Cache    104    1073     331        1229       0     126     146016        0
         MAP ENTRY     96    1036     476       58353       0     126     145152        0
      malloc-65536  65536       2       0           2       0       1     131072        0
      malloc-65536  65536       0       2         204       0       1     131072        0
      malloc-65536  65536       1       1           9       0       1     131072        0
             unpcb    256       8     502        1261       0     254     130560        0
       mbuf_packet    256       0     508         609       0     254     130048        0
     FPU_save_area    832     136       8         343       0      16     119808        0
          ksiginfo    112      57     987         101       0     126     116928        0
             g_bio    408       4     266        5867       0      30     110160        0
              PROC   1376      48      29        1123       0       8     105952        0
      malloc-32768  32768       2       1          13       0       1      98304        0
       malloc-4096   4096      14       8         256       0       2      90112        0
          UMA Kegs    384     226       7         226       0      30      89472        0
         64 Bucket    512      84      84        4548       0      30      86016        0
        128 Bucket   1024      49      34         264       0      16      84992        0
       tcp_bbr_map    128       0     651         613       0     126      83328        0
         filedesc0   1072      49      28        1144       0       8      82544        0
       malloc-8192   8192       8       2         135       0       1      81920        0
       malloc-2048   2048       2      38         229       0       8      81920        0
        sctp_chunk    152       0     520          13       0     254      79040        0
       malloc-8192   8192       9       0          10       0       1      73728        0
         malloc-64     64     514     557       16669       0     254      68544        0
        malloc-128    128     301     226         491       0     126      67456        0
      malloc-65536  65536       1       0           1       0       1      65536        0
      malloc-32768  32768       0       2         120       0       1      65536        0
       malloc-2048   2048      22      10         136       0       8      65536        0
        malloc-256    256     164      91         399       0      62      65280        0
        malloc-256    256     183      72        1022       0      62      65280        0
sctp_stream_msg_out    112       0     540          13       0     254      60480        0
        malloc-384    384      74      76         378       0      30      57600        0
       malloc-4096   4096       5       9         105       0       2      57344        0
       malloc-4096   4096      10       4          15       0       2      57344        0
       malloc-4096   4096       7       7         494       0       2      57344        0
         malloc-64     64     464     355         686       0     254      52416        0
        malloc-128    128      14     389         441       0     126      51584        0
        malloc-256    256      91     104         633       0      62      49920        0
        malloc-256    256      69     126        1122       0      62      49920        0
         32 Bucket    256      65     130       25148       0      62      49920        0
           DIRHASH   1024      35      13          35       0      16      49152        0
             NAMEI   1024       0      48       16732       0      16      49152        0
      malloc-16384  16384       3       0           3       0       1      49152        0
       malloc-8192   8192       1       5          34       0       1      49152        0
       malloc-2048   2048       7      17         546       0       8      49152        0
       malloc-1024   1024       5      43         601       0      16      49152        0
        malloc-384    384      79      41         120       0      30      46080        0
            da_ccb    544       1      83        1564       0      16      45696        0
          syncache    168       0     264           3       0     254      44352        0
            pcpu-8      8    4848     272        6879       0     254      40960        0
           VMSPACE    616      28      38        1104       0      16      40656        0
         udp_inpcb    416       8      82         272       0      30      37440        0
         malloc-64     64      22     545          57       0     254      36288        0
         malloc-64     64     107     460         568       0     254      36288        0
         malloc-64     64     138     429       16713       0     254      36288        0
         malloc-64     64     158     409         491       0     254      36288        0
         malloc-64     64      21     546         426       0     254      36288        0
         malloc-32     32     676     458         825       0     254      36288        0
        malloc-128    128      39     240         110       0     126      35712        0
        malloc-128    128      29     250         137       0     126      35712        0
        malloc-128    128      81     198         771       0     126      35712        0
     routing nhops    256      12     123          88       0      62      34560        0
           ttyoutq    256      72      63         160       0      62      34560        0
        malloc-384    384      53      37         357       0      30      34560        0
        malloc-384    384      25      65         333       0      30      34560        0
        malloc-256    256       5     130         190       0      62      34560        0
        malloc-256    256      85      50        1088       0      62      34560        0
        malloc-256    256      31     104         548       0      62      34560        0
      malloc-32768  32768       1       0           1       0       1      32768        0
      malloc-16384  16384       1       1           2       0       1      32768        0
       malloc-8192   8192       3       1           5       0       1      32768        0
       malloc-2048   2048       8       8          20       0       8      32768        0
       malloc-1024   1024       1      31          11       0      16      32768        0
       malloc-1024   1024       7      25        1660       0      16      32768        0
       malloc-1024   1024      19      13          47       0      16      32768        0
       malloc-1024   1024       9      23          10       0      16      32768        0
       malloc-1024   1024      11      21          11       0      16      32768        0
        malloc-512    512       3      61         197       0      30      32768        0
        malloc-512    512       2      62         147       0      30      32768        0
        malloc-512    512      12      52          16       0      30      32768        0
        malloc-512    512       2      62          28       0      30      32768        0
           pcpu-64     64     487      25         487       0     254      32768        0
       tcp_bbr_pcb    896       0      36          13       0      16      32256        0
            ttyinq    160     135      65         300       0      62      32000        0
             Files     80     149     251        9822       0     126      32000        0
         tcp_inpcb   1320       4      20          35       0       8      31680        0
              PGRP    120      23     241          76       0     126      31680        0
            clpbuf   2624       0      12          19       0       4      31488        0
        sctp_laddr     48       0     588          89       0     254      28224        0
         malloc-32     32     312     570        4664       0     254      28224        0
         16 Bucket    144      55     141         269       0      62      28224        0
          4 Bucket     48       5     583           8       0     254      28224        0
               AIO    208       0     133           8       0      62      27664        0
         TURNSTILE    136     145      44         145       0      62      25704        0
            cpuset    200       7     121           7       0      62      25600        0
       malloc-8192   8192       3       0           3       0       1      24576        0
          rl_entry     40      45     561          45       0     254      24240        0
               PWD     40      14     592         205       0     254      24240        0
           rtentry    168      14     130          88       0      62      24192        0
              pipe    728      18      15         435       0      16      24024        0
          8 Bucket     80      56     244         359       0     126      24000        0
             ripcb    384       1      59           9       0      30      23040        0
        SLEEPQUEUE     88     145     111         145       0     126      22528        0
         hostcache     64       1     314           1       0     254      20160        0
   udp_inpcb ports     32       3     627          26       0     254      20160        0
   tcp_inpcb ports     32       2     628          13       0     254      20160        0
              ertt     72       4     276          35       0     126      20160        0
         malloc-32     32      19     611         330       0     254      20160        0
         malloc-32     32     129     501         509       0     254      20160        0
         malloc-32     32      45     585         768       0     254      20160        0
         malloc-32     32      46     584         282       0     254      20160        0
          2 Bucket     32      65     565         374       0     254      20160        0
             KNOTE    160       0     125          30       0      62      20000        0
             AIOCB    552       0      35           8       0      16      19320        0
 epoch_record pcpu    256       4      60           4       0      62      16384        0
       malloc-8192   8192       0       2          19       0       1      16384        0
       malloc-4096   4096       2       2           4       0       2      16384        0
       malloc-4096   4096       0       4           5       0       2      16384        0
       malloc-2048   2048       1       7           1       0       8      16384        0
       malloc-2048   2048       2       6           2       0       8      16384        0
       malloc-1024   1024       8       8           8       0      16      16384        0
        malloc-512    512       4      28           8       0      30      16384        0
        malloc-512    512       0      32           1       0      30      16384        0
           SMR CPU     32       7     504           7       0     254      16352        0
      vtnet_tx_hdr     24       0     668       41332       0     254      16032        0
         malloc-16     16     318     682         765       0     254      16000        0
              kenv    258      17      43        1079       0      30      15480        0
            mqnode    416       3      33           3       0      30      14976        0
              vmem   1856       2       6           2       0       8      14848        0
        SMR SHARED     24       7     504           7       0     254      12264        0
         malloc-16     16      16     734          88       0     254      12000        0
         malloc-16     16      54     696          83       0     254      12000        0
         malloc-16     16     189     561        3113       0     254      12000        0
         malloc-16     16      29     721       28357       0     254      12000        0
         malloc-16     16      38     712        1893       0     254      12000        0
      tcp_rack_pcb   1280       0       9           1       0       8      11520        0
        malloc-384    384       2      28           3       0      30      11520        0
        malloc-384    384       6      24           6       0      30      11520        0
       Mountpoints   2816       2       2           2       0       4      11264        0
       malloc-8192   8192       1       0           1       0       1       8192        0
         malloc-16     16       1     499           1       0     254       8000        0
           pcpu-16     16       4     252           4       0     254       4096        0
       UMA Slabs 1    176       9      13           9       0      62       3872        0
        KMAP ENTRY     96      12      27          14       0       0       3744        0
       FFS1 dinode    128       0       0           0       0     126          0        0
           ada_ccb    272       0       0           0       0      30          0        0
             swblk    136       0       0           0       0      62          0        0
          swpctrie    144       0       0           0       0      62          0        0
   cdg_qdiffsample     16       0       0           0       0     254          0        0
   pf state scrubs     40       0       0           0       0     254          0        0
   pf frag entries     40       0       0           0       0     254          0        0
          pf frags    248       0       0           0       0      62          0        0
  pf table entries    160       0       0           0       0     254          0        0
pf table entry counters     64       0       0           0       0     254          0        0
   pf source nodes    152       0       0           0       0     254          0        0
     pf state keys     88       0       0           0       0     126          0        0
         pf states    360       0       0           0       0     254          0        0
           pf tags    104       0       0           0       0     126          0        0
          pf mtags    184       0       0           0       0      62          0        0
      tcp_rack_map    128       0       0           0       0     126          0        0
tfo_ccache_entries     80       0       0           0       0     126          0        0
               tfo      4       0       0           0       0     254          0        0
          sackhole     32       0       0           0       0     254          0        0
               ipq     56       0       0           0       0     254          0        0
   sctp_asconf_ack     48       0       0           0       0     254          0        0
       sctp_asconf     40       0       0           0       0     254          0        0
        sctp_readq    152       0       0           0       0     254          0        0
   tcp_log_id_node    120       0       0           0       0     126          0        0
 tcp_log_id_bucket    176       0       0           0       0      62          0        0
           tcp_log    416       0       0           0       0     254          0        0
          tcpreass     48       0       0           0       0     254          0        0
udplite_inpcb ports     32       0       0           0       0     254          0        0
     udplite_inpcb    416       0       0           0       0      30          0        0
       ripcb ports     32       0       0           0       0     254          0        0
    IPsec SA lft_c     16       0       0           0       0     254          0        0
            itimer    352       0       0           0       0      30          0        0
            AIOLIO    272       0       0           0       0      30          0        0
        mqnotifier    216       0       0           0       0      62          0        0
            mvdata     64       0       0           0       0     254          0        0
            mqueue    248       0       0           0       0      62          0        0
        TMPFS node    232       0       0           0       0      62          0        0
           NCLNODE    608       0       0           0       0      16          0        0
     LTS VFS Cache    360       0       0           0       0      30          0        0
       L VFS Cache    320       0       0           0       0      30          0        0
     STS VFS Cache    144       0       0           0       0      62          0        0
           cryptop    280       0       0           0       0      30          0        0
  linux_dma_object     32       0       0           0       0     254          0        0
  linux_dma_pctrie    144       0       0           0       0      62          0        0
   IOMMU_MAP_ENTRY    104       0       0           0       0     126          0        0
    mbuf_jumbo_16k  16384       0       0           0       0     254          0        0
     mbuf_jumbo_9k   9216       0       0           0       0     254          0        0
      audit_record   1280       0       0           0       0       8          0        0
         domainset     40       0       0           0       0     254          0        0
        MAC labels     40       0       0           0       0     254          0        0
            vnpbuf   2624       0       0           0       0      16          0        0
           nfspbuf   2624       0       0           0       0       4          0        0
            swwbuf   2624       0       0           0       0       2          0        0
            swrbuf   2624       0       0           0       0       4          0        0
          umtx_shm     88       0       0           0       0     126          0        0
           umtx pi     96       0       0           0       0     126          0        0
rangeset pctrie nodes    144       0       0           0       0      62          0        0
      malloc-65536  65536       0       0           0       0       1          0        0
      malloc-65536  65536       0       0           0       0       1          0        0
      malloc-32768  32768       0       0           0       0       1          0        0
      malloc-32768  32768       0       0           0       0       1          0        0
      malloc-32768  32768       0       0           0       0       1          0        0
      malloc-32768  32768       0       0           0       0       1          0        0
      malloc-16384  16384       0       0           0       0       1          0        0
      malloc-16384  16384       0       0           0       0       1          0        0
      malloc-16384  16384       0       0           0       0       1          0        0
      malloc-16384  16384       0       0           0       0       1          0        0
      malloc-16384  16384       0       0           0       0       1          0        0
       malloc-8192   8192       0       0           0       0       1          0        0
       malloc-4096   4096       0       0           0       0       2          0        0
        malloc-512    512       0       0           0       0      30          0        0
        malloc-512    512       0       0           0       0      30          0        0
        malloc-384    384       0       0           0       0      30          0        0
         malloc-32     32       0       0           0       0     254          0        0
           pcpu-32     32       0       0           0       0     254          0        0
            pcpu-4      4       0       0           0       0     254          0        0
            fakepg    104       0       0           0       0     126          0        0
          UMA Hash    256       0       0           0       0      62          0        0

Crashes (2):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2024/08/01 07:03 freebsd-src feda329622bc 1e9c4cf3 console log report ci-freebsd-main panic: prefix ADDR has referencing addresses
2024/08/01 00:24 freebsd-src f5c894479e59 1e9c4cf3 console log report ci-freebsd-i386 panic: prefix ADDR has referencing addresses
* Struck through repros no longer work on HEAD.