syzbot


Fatal trap 12: page fault in in6_unlink_ifa (2)

Status: closed as invalid on 2021/09/09 13:22
Reported-by: syzbot+3576cdb51f3125b671dd@syzkaller.appspotmail.com
First crash: 1433d, last: 1045d
Similar bugs (5)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
freebsd Fatal trap 12: page fault in in6_unlink_ifa 1 1621d 1621d 0/2 auto-closed as invalid on 2020/03/02 01:11
freebsd Fatal trap NUM: page fault in in6_unlink_ifa (4) 1 55d 55d 0/2 upstream: reported on 2024/03/16 21:09
freebsd Fatal trap NUM: page fault in in6_unlink_ifa 1 949d 949d 0/2 auto-closed as invalid on 2022/01/02 02:10
freebsd Fatal trap NUM: page fault in in6_unlink_ifa (3) 1 277d 277d 0/2 auto-obsoleted due to no activity on 2023/11/06 00:40
freebsd Fatal trap NUM: page fault in in6_unlink_ifa (2) 1 762d 762d 0/2 auto-closed as invalid on 2022/07/08 14:46

Sample crash report:
Fatal trap 12: page fault while in kernel mode
cpuid = 0; apic id = 00
fault virtual address	= 0xe0
fault code		= supervisor read data, page not present
instruction pointer	= 0x20:0xffffffff813703e0
stack pointer	        = 0x28:0xfffffe0025559540

frame pointer	        = 0x28:0xfffffe00255595a0
code segment		= base 0x0, limit 0xfffff, type 0x1b
			= DPL 0, pres 1, long 1, def32 0, gran 1
processor eflags	= interrupt enabled, resume, IOPL = 0
current process		= 4300 (syz-executor.0)
trap number		= 12
panic: page fault
cpuid = 0
time = 1605896107
KDB: stack backtrace:
db_trace_self_wrapper() at db_trace_self_wrapper+0x47/frame 0xfffffe00255591a0
vpanic() at vpanic+0x1c7/frame 0xfffffe0025559200
panic() at panic+0x43/frame 0xfffffe0025559260
trap_fatal() at trap_fatal+0x4cd/frame 0xfffffe00255592e0
trap_pfault() at trap_pfault+0xd4/frame 0xfffffe0025559350
trap() at trap+0x41d/frame 0xfffffe0025559470
calltrap() at calltrap+0x8/frame 0xfffffe0025559470
--- trap 0xc, rip = 0xffffffff813703e0, rsp = 0xfffffe0025559540, rbp = 0xfffffe00255595a0 ---
in6_unlink_ifa() at in6_unlink_ifa+0x120/frame 0xfffffe00255595a0
in6_purgeaddr() at in6_purgeaddr+0x5d6/frame 0xfffffe00255596b0
if_purgeaddrs() at if_purgeaddrs+0x1b4/frame 0xfffffe0025559770
tundtor() at tundtor+0x3ef/frame 0xfffffe00255597d0
devfs_destroy_cdevpriv() at devfs_destroy_cdevpriv+0xc4/frame 0xfffffe0025559800
devfs_close_f() at devfs_close_f+0x7a/frame 0xfffffe0025559830
_fdrop() at _fdrop+0x3a/frame 0xfffffe0025559860
closef() at closef+0x2a1/frame 0xfffffe00255598f0
fdescfree_fds() at fdescfree_fds+0x125/frame 0xfffffe0025559950
fdescfree() at fdescfree+0x585/frame 0xfffffe0025559a30
exit1() at exit1+0x6d5/frame 0xfffffe0025559aa0
sys_sys_exit() at sys_sys_exit+0xd/frame 0xfffffe0025559ab0
amd64_syscall() at amd64_syscall+0x247/frame 0xfffffe0025559bf0
fast_syscall_common() at fast_syscall_common+0xf8/frame 0xfffffe0025559bf0
--- syscall (1, FreeBSD ELF64, sys_sys_exit), rip = 0x2e523a, rsp = 0x7fffffffdf18, rbp = 0x7fffffffdf20 ---
KDB: enter: panic
[ thread pid 4300 tid 100097 ]
Stopped at      kdb_enter+0x67: movq    $0,0x14883c6(%rip)
db> set $lines = 0
db> set $maxwidth = 0
db> show registers
cs                        0x20
ds                        0x3b
es                        0x3b
fs                        0x13
gs                        0x1b
ss                        0x28
rax                       0x12
rcx                       0x80
rdx         0xffffffff818bcbbd
rbx                          0
rsp         0xfffffe0025559180
rbp         0xfffffe00255591a0
rsi                        0x1
rdi                          0
r8                           0
r9                  0xffffffff
r10                          0
r11                          0
r12         0xffffffff820671c0  ddb_dbbe
r13                          0
r14         0xffffffff81964445
r15         0xffffffff81964445
rip         0xffffffff810d3237  kdb_enter+0x67
rflags                    0x82
kdb_enter+0x67: movq    $0,0x14883c6(%rip)
db> show proc
Process 4300 (syz-executor.0) at 0xfffff80025f93a50:
 state: NORMAL
 uid: 0  gids: 0, 0, 5
 parent: pid 768 at 0xfffff80004b05528
 ABI: FreeBSD ELF64
 arguments: /root/syz-executor.0
 reaper: 0xfffff80004291528 reapsubtree: 1
 sigparent: 20
 vmspace: 0xfffffe00258079f0
   (map 0xfffffe00258079f0)
   (map.pmap 0xfffffe0025807ab0)
   (pmap 0xfffffe0025807b10)
 threads: 1
100097                   Run     CPU 0                       syz-executor.0
db> ps
  pid  ppid  pgrp   uid  state   wmesg   wchan               cmd
 4322  4321   424     0  L      *in6_ifa 0xfffff800048bf900  ifconfig
 4321  4113   424     0  S       wait    0xfffff80004ab1a50  sh
 4320  4310  4310     0  R       (threaded)                  syz-executor.3
100098                   RunQ                                syz-executor.3
100796                   RunQ                                syz-executor.3
 4310   768  4310     0  Rs                                  syz-executor.3
 4300   768  4300     0  REs     CPU 0                       syz-executor.0
 4296   768  4296     0  REs                                 syz-executor.2
 4119     1  4119     0  Ss      select  0xfffff80050775ec0  dhclient
 4113  4094   424     0  S       wait    0xfffff800504dd000  dhclient
 4094   424   424     0  S       wait    0xfffff8005049ba50  sh
  768   766   766     0  R       (threaded)                  syz-execprog
100085                   S       uwait   0xfffff80004a39300  syz-execprog
100110                   RunQ                                syz-execprog
100111                   S       uwait   0xfffff800500f0e80  syz-execprog
100112                   RunQ                                syz-execprog
100113                   D       biowr   0xfffffe0003e0a280  syz-execprog
100114                   S       uwait   0xfffff80050007100  syz-execprog
100115                   S       uwait   0xfffff80004a21400  syz-execprog
100116                   S       uwait   0xfffff80004a21500  syz-execprog
100117                   S       uwait   0xfffff80050007200  syz-execprog
100118                   S       uwait   0xfffff80050007300  syz-execprog
100149                   S       kqread  0xfffff80025f63500  syz-execprog
  766   764   766     0  Ss      pause   0xfffff80025f6bb00  csh
  764   682   764     0  Ss      select  0xfffff800500076c0  sshd
  742     1   742     0  Rs+     CPU 1                       getty
  741     1   741     0  Ss+     ttyin   0xfffff800049a48b0  getty
  740     1   740     0  Ss+     ttyin   0xfffff800049a4cb0  getty
  739     1   739     0  Ss+     ttyin   0xfffff8000499c0b0  getty
  738     1   738     0  Ss+     ttyin   0xfffff8000499c4b0  getty
  737     1   737     0  Ss+     ttyin   0xfffff8000499c8b0  getty
  736     1   736     0  Ss+     ttyin   0xfffff8000499ccb0  getty
  735     1   735     0  Ss+     ttyin   0xfffff800049390b0  getty
  734     1   734     0  Ss+     ttyin   0xfffff800049394b0  getty
  686     1   686     0  Ss      nanslp  0xffffffff8252ed90  cron
  682     1   682     0  Ss      select  0xfffff80025e813c0  sshd
  495     1   495     0  Rs                                  syslogd
  424     1   424     0  Ss      wait    0xfffff80004aaca50  devd
  423     1   423    65  Ss      select  0xfffff80025e815c0  dhclient
  338     1   338     0  Ss      select  0xfffff80025e81640  dhclient
  335     1   335     0  Ss      select  0xfffff80004ba4040  dhclient
   23     0     0     0  DL      vlruwt  0xfffff800049f3528  [vnlru]
   22     0     0     0  DL      syncer  0xffffffff8261c138  [syncer]
   21     0     0     0  DL      (threaded)                  [bufdaemon]
100070                   D       qsleep  0xffffffff8261b200  [bufdaemon]
100077                   D       -       0xffffffff8200ac80  [bufspacedaemon-0]
100089                   D       sdflush 0xfffff800041818e8  [/ worker]
   20     0     0     0  DL      psleep  0xffffffff826426c8  [vmdaemon]
   19     0     0     0  DL      (threaded)                  [pagedaemon]
100068                   D       psleep  0xffffffff82636b38  [dom0]
100075                   D       launds  0xffffffff82636b44  [laundry: dom0]
100076                   D       umarcl  0xffffffff814def20  [uma]
   18     0     0     0  RL                                  [rand_harvestq]
   17     0     0     0  DL      waiting 0xffffffff82ccc818  [sctp_iterator]
   16     0     0     0  DL      pftm    0xffffffff82dc5390  [pf purge]
   15     0     0     0  DL      -       0xffffffff8261a7dc  [soaiod4]
    9     0     0     0  DL      -       0xffffffff8261a7dc  [soaiod3]
    8     0     0     0  DL      -       0xffffffff8261a7dc  [soaiod2]
    7     0     0     0  DL      -       0xffffffff8261a7dc  [soaiod1]
    6     0     0     0  RL      (threaded)                  [cam]
100034                   RunQ                                [doneq0]
100067                   D       -       0xffffffff8223ae90  [scanner]
    5     0     0     0  DL      crypto_ 0xfffff80004189c90  [crypto returns 1]
    4     0     0     0  DL      crypto_ 0xfffff80004189c30  [crypto returns 0]
    3     0     0     0  DL      crypto_ 0xffffffff82634030  [crypto]
   14     0     0     0  DL      seqstat 0xfffff80004300488  [sequencer 00]
   13     0     0     0  DL      (threaded)                  [geom]
100025                   D       -       0xffffffff8250e620  [g_event]
100026                   D       -       0xffffffff8250e628  [g_up]
100027                   D       -       0xffffffff8250e630  [g_down]
    2     0     0     0  DL      (threaded)                  [KTLS]
100018                   D       -       0xfffff800042b3300  [thr_0]
100019                   D       -       0xfffff800042b3380  [thr_1]
   12     0     0     0  WL      (threaded)                  [intr]
100011                   I                                   [swi5: fast taskq]
100014                   I                                   [swi6: task queue]
100015                   I                                   [swi6: Giant taskq]
100020                   I                                   [swi1: netisr 0]
100021                   I                                   [swi4: clock (0)]
100022                   I                                   [swi4: clock (1)]
100023                   I                                   [swi3: vm]
100035                   I                                   [irq24: virtio_pci0]
100036                   I                                   [irq25: virtio_pci0]
100037                   I                                   [irq26: virtio_pci0]
100038                   I                                   [irq27: virtio_pci0]
100039                   I                                   [irq28: virtio_pci1]
100040                   I                                   [irq29: virtio_pci1]
100041                   I                                   [irq30: virtio_pci1]
100042                   I                                   [irq31: virtio_pci1]
100043                   I                                   [irq32: virtio_pci1]
100048                   I                                   [irq10: virtio_pci2]
100050                   I                                   [irq1: atkbd0]
100051                   I                                   [irq12: psm0]
100052                   I                                   [swi0: uart uart++]
100060                   I                                   [swi1: pf send]
100073                   I                                   [swi1: hpts]
100074                   I                                   [swi1: hpts]
   11     0     0     0  RL      (threaded)                  [idle]
100003                   CanRun                              [idle: cpu0]
100004                   CanRun                              [idle: cpu1]
    1     0     1     0  SLs     wait    0xfffff80004291528  [init]
   10     0     0     0  DL      audit_w 0xffffffff82634550  [audit]
    0     0     0     0  DLs     (threaded)                  [kernel]
100000                   D       swapin  0xffffffff8250ebb0  [swapper]
100005                   D       -       0xfffff800042b8e00  [if_io_tqg_0]
100006                   D       -       0xfffff800042b8d00  [if_io_tqg_1]
100007                   D       -       0xfffff800042b8c00  [if_config_tqg_0]
100008                   D       -       0xfffff800042b8b00  [softirq_0]
100009                   D       -       0xfffff800042b8a00  [softirq_1]
100010                   D       -       0xfffff80004183200  [in6m_free taskq]
100012                   D       -       0xfffff800042bcd00  [kqueue_ctx taskq]
100013                   D       -       0xfffff800042bcb00  [inm_free taskq]
100016                   D       -       0xfffff800042bc500  [aiod_kick taskq]
100017                   D       -       0xfffff800042bc300  [thread taskq]
100024                   D       -       0xfffff800042cda00  [firmware taskq]
100029                   D       -       0xfffff800042cd300  [crypto_0]
100030                   D       -       0xfffff800042cd300  [crypto_1]
100044                   D       -       0xfffff80004342300  [vtnet0 rxq 0]
100045                   D       -       0xfffff80004342200  [vtnet0 txq 0]
100046                   D       -       0xfffff80004342100  [vtnet0 rxq 1]
100047                   D       -       0xfffff80004342000  [vtnet0 txq 1]
100049                   D       vtbslp  0xfffff80004486880  [virtio_balloon]
100053                   D       -       0xfffff800046ade00  [mca taskq]
100056                   D       -       0xffffffff81d0b190  [deadlkres]
100062                   D       -       0xfffff800048c8200  [acpi_task_0]
100063                   D       -       0xfffff800048c8200  [acpi_task_1]
100064                   D       -       0xfffff800048c8200  [acpi_task_2]
100066                   D       -       0xfffff80004342b00  [CAM taskq]
db> show all locks
Process 4320 (syz-executor.3) thread 0xfffffe0025864100 (100796)
exclusive sleep mutex struct mount vlist mtx (struct mount vlist mtx) r = 0 (0xfffffe0003df9ab0) locked @ /syzkaller/managers/main/kernel/sys/kern/vfs_subr.c:6688
Process 4300 (syz-executor.0) thread 0xfffffe0023be1500 (100097)
exclusive rm in6_ifaddr_lock (in6_ifaddr_lock) r = 0 (0xffffffff82632750) locked @ /syzkaller/managers/main/kernel/sys/netinet6/in6.c:1338
Process 768 (syz-execprog) thread 0xfffffe0023b4aa00 (100113)
exclusive lockmgr bufwait (bufwait) r = 0 (0xfffffe0003e0a300) locked @ /syzkaller/managers/main/kernel/sys/kern/vfs_bio.c:3875
exclusive lockmgr ufs (ufs) r = 0 (0xfffff800500ffbe0) locked @ /syzkaller/managers/main/kernel/sys/kern/vfs_lookup.c:1047
Process 742 (getty) thread 0xfffffe00257f3700 (100108)
exclusive sleep mutex ttymtx (ttymtx) r = 0 (0xfffff800046a1c08) locked @ /syzkaller/managers/main/kernel/sys/kern/tty.c:218
db> show malloc
              Type        InUse        MemUse     Requests
           pf_hash            5        11524K            5
            devbuf         4214         4339K         4242
          tcp_hpts            5         3201K            5
             vtbuf           24         1968K           46
         sysctloid        29217         1704K        29281
              kobj          336         1344K          496
          vfscache            3         1025K            3
            newblk            1         1024K         1681
               pcb           25          541K         2397
          inodedep            2          513K         2215
         ufs_quota            1          512K            1
          vfs_hash            1          512K            1
           callout            2          512K            2
              intr            4          472K            4
           subproc          125          236K         4396
            acpica         1674          184K        52503
         vnet_data            1          168K            1
            ifaddr          464          168K         1210
           tidhash            3          141K            3
           pagedep            2          129K         2753
        tfo_ccache            1          128K            1
               sem            4          106K            4
            DEVFS1          105          105K          122
            linker          254           97K         1413
          filedesc           13           85K         6411
               bus          979           79K         3035
          mtx_pool            2           72K            2
          syncache            1           68K            1
          acpitask            1           64K            1
       ddb_capture            1           64K            1
            module          507           64K          507
              umtx          324           41K          324
              temp           35           33K        20142
           kdtrace          170           33K         9371
         hostcache            1           32K            1
               shm            1           32K            1
              vmem            3           32K            7
            DEVFS3          124           31K          134
               msg            4           30K            4
        gtaskqueue           18           26K           18
            kbdmux            6           22K            6
        DEVFS_RULE           56           20K           56
               BPF           14           19K          158
         ufs_mount            5           17K            6
              proc            3           17K            3
         sctp_timw           65           17K           65
               tty           16           16K           16
           ithread           99           16K           99
            bus-sc           30           14K         1416
            KTRACE          100           13K          100
             ifnet            7           13K            7
              kenv           92           12K           92
      eventhandler          132           12K          132
           lltable           36           11K         1539
       ether_multi          131           11K         7021
              GEOM           60           10K          489
              rman           82           10K          423
              UART           12            9K           12
           devstat            4            9K            4
               rpc            2            8K            2
         bmsafemap            1            8K         1656
             shmfd            1            8K            1
       pfs_vncache            1            8K            1
         in6_multi           58            8K         4960
         pfs_nodes           20            8K           20
     audit_evclass          233            8K          291
           CAM DEV            3            6K          510
            kqueue           54            6K         4331
       ufs_dirhash           27            6K           36
            sglist            5            6K            5
         CAM queue            5            6K         1528
         taskqueue           48            6K           48
            plimit           20            5K         3262
              cred           20            5K          357
          pf_ifnet           10            5K           19
                vt           11            5K           11
               UMA          254            5K          254
           memdesc            1            4K            1
               MCA           32            4K           32
             evdev            4            4K            4
          routetbl           17            4K          397
             hhook           13            4K           13
           pwddesc           50            4K         4323
           session           23            3K          452
              pgrp           23            3K          452
          terminal           11            3K           11
           acpisem           22            3K           22
            ip6ndp           15            3K          767
             lockf           23            3K          159
         proc-args           44            3K         5810
           uidinfo            3            3K            9
        local_apic            1            2K            1
           io_apic            1            2K            1
           CAM CCB            1            2K        15928
         ipsec-saq            2            2K            2
           CAM XPT           22            2K          543
            Unitno           27            2K           45
       vnodemarker            3            2K         1525
             selfd           23            2K        35807
          sctp_ifa           10            2K         1138
       ipsecpolicy            2            2K            2
           acpidev           20            2K           20
               msi            9            2K            9
             clone            9            2K            9
            select            9            2K          135
               tun            7            2K            7
           softdep            1            1K            1
            sahead            1            1K            1
          secasvar            1            1K            1
      NFSD session            1            1K            1
        CAM periph            4            1K          271
             nhops            6            1K          297
         sctp_atcl            2            1K         1508
             ipsec            3            1K            3
               mld            6            1K            6
          in_multi            3            1K          384
              igmp            6            1K            6
         toponodes            6            1K            6
            isadev            6            1K            6
             mount           16            1K           89
          pci_link           10            1K           10
 encap_export_host           12            1K           12
            crypto            3            1K            3
          sctp_ifn            4            1K         1138
              pfil            4            1K            4
           CAM SIM            2            1K            2
              cdev            2            1K            2
    chacha20random            1            1K            1
               osd            3            1K            9
            DEVFSP            5            1K          415
            vnodes            1            1K            1
              ktls            1            1K            1
          procdesc            2            1K           52
      NFSD lckfile            1            1K            1
     NFSD V4client            1            1K            1
             DEVFS            9            1K           10
            feeder            7            1K            7
       inpcbpolicy            7            1K         2957
        loginclass            3            1K            7
            prison            6            1K            6
     CAM dev queue            2            1K            2
 CAM I/O Scheduler            1            1K            1
            apmdev            1            1K            1
          atkbddev            2            1K            2
          CAM path            4            1K         1034
          freework            1            1K           44
            diradd            1            1K         1579
           tcpfunc            2            1K            2
          pmchooks            1            1K            1
            soname            4            1K         4186
          nexusdev            5            1K            5
          sctp_vrf            1            1K            1
         sctp_atky            2            1K         2262
           entropy            2            1K          432
              vnet            1            1K            1
               pmc            1            1K            1
          acpiintr            1            1K            1
         sctp_athm            2            1K         1508
              cpus            2            1K            2
    vnet_data_free            1            1K            1
           Per-cpu            1            1K            1
          p1003.1b            1            1K            1
          filecaps            1            1K          211
          pf_table            0            0K            0
           pf_rule            0            0K            0
           pf_altq            0            0K            0
           pf_osfp            0            0K            0
           pf_temp            0            0K            0
        sctp_mcore            0            0K            0
        sctp_socko            0            0K            0
         sctp_iter            0            0K          965
         sctp_mvrf            0            0K            0
         sctp_cpal            0            0K            0
         sctp_cmsg            0            0K            0
         sctp_stre            0            0K            0
         sctp_athi            0            0K            0
         sctp_a_it            0            0K          965
         sctp_aadr            0            0K            1
         sctp_stro            0            0K          754
         sctp_stri            0            0K            0
          sctp_map            0            0K         1508
            nvlist            0            0K            0
          SCSI ENC            0            0K            0
           SCSI sa            0            0K            0
        madt_table            0            0K            2
          smartpqi            0            0K            0
         scsi_pass            0            0K            0
         ciss_data            0            0K            0
            pvscsi            0            0K            0
           ath_hal            0            0K            0
            athdev            0            0K            0
           ata_pci            0            0K            0
           ata_dma            0            0K            0
       ata_generic            0            0K            0
              iavf            0            0K            0
               ixl            0            0K            0
               amr            0            0K            0
           scsi_da            0            0K           69
            ata_da            0            0K            0
           scsi_ch            0            0K            0
           scsi_cd            0            0K            0
            USBdev            0            0K            0
        ice-resmgr            0            0K            0
         ice-osdep            0            0K            0
               ice            0            0K            0
             axgbe            0            0K            0
       fpukern_ctx            0            0K            0
               USB            0            0K            0
          xen_intr            0            0K            0
       AHCI driver            0            0K            0
               agp            0            0K            0
           xen_hvm            0            0K            0
         legacydrv            0            0K            0
            qpidrv            0            0K            0
      dmar_idpgtbl            0            0K            0
          dmar_dom            0            0K            0
          dmar_ctx            0            0K            0
           nvme_da            0            0K            0
           acpipwr            0            0K            0
              isci            0            0K            0
      iommu_dmamap            0            0K            0
            twsbuf            0            0K            0
     hyperv_socket            0            0K            0
           bxe_ilt            0            0K            0
            xenbus            0            0K            0
      twe_commands            0            0K            0
      twa_commands            0            0K            0
       tcp_log_dev            0            0K            0
     vm_fictitious            0            0K            0
      midi buffers            0            0K            0
             mixer            0            0K            0
              ac97            0            0K            0
             hdacc            0            0K            0
              hdac            0            0K            0
              hdaa            0            0K            0
         acpi_perf            0            0K            0
         acpicmbat            0            0K            0
       SIIS driver            0            0K            0
           UMAHash            0            0K            0
         vm_pgdata            0            0K            0
           jblocks            0            0K            0
          savedino            0            0K         1192
          sentinel            0            0K            0
            jfsync            0            0K            0
            jtrunc            0            0K            0
             sbdep            0            0K          750
           jsegdep            0            0K            0
              jseg            0            0K            0
         jfreefrag            0            0K            0
          jfreeblk            0            0K            0
           jnewblk            0            0K            0
            jmvref            0            0K            0
           jremref            0            0K            0
           jaddref            0            0K            0
           freedep            0            0K            0
         newdirblk            0            0K         1142
            dirrem            0            0K           46
             mkdir            0            0K         2278
          freefile            0            0K           44
          freeblks            0            0K           43
          freefrag            0            0K           61
        allocindir            0            0K            0
          indirdep            0            0K           10
       allocdirect            0            0K            0
          ufs_trim            0            0K            0
           mactemp            0            0K            0
     audit_trigger            0            0K            0
 audit_pipe_presel            0            0K            0
     audit_pipeent            0            0K            0
        audit_pipe            0            0K            0
      audit_evname            0            0K            0
         audit_bsm            0            0K            0
      audit_gidset            0            0K            0
        audit_text            0            0K            0
        audit_path            0            0K            0
        audit_data            0            0K            0
        audit_cred            0            0K            0
             xform            0            0K            0
               NLM            0            0K            0
    ipsec-spdcache            0            0K            0
         ipsec-reg            0            0K            0
        ipsec-misc            0            0K            0
      ipsecrequest            0            0K            0
            ip6opt            0            0K            3
       ip6_msource            0            0K            0
      ip6_moptions            0            0K            0
       in6_mfilter            0            0K            0
             frag6            0            0K            0
            tcplog            0            0K            0
               LRO            0            0K            0
      newreno data            0            0K            0
        ip_msource            0            0K            0
       ip_moptions            0            0K            0
        in_mfilter            0            0K            0
              ipid            0            0K            0
         80211scan            0            0K            0
      80211ratectl            0            0K            0
        80211power            0            0K            0
       80211nodeie            0            0K            0
         80211node            0            0K            0
      80211mesh_gt            0            0K            0
      80211mesh_rt            0            0K            0
         80211perr            0            0K            0
         80211prep            0            0K            0
         80211preq            0            0K            0
          80211dfs            0            0K            0
       80211crypto            0            0K            0
          80211vap            0            0K            0
             iflib            0            0K            0
              vlan            0            0K            0
               gif            0            0K            0
           ifdescr            0            0K            0
              zlib            0            0K            0
           fadvise            0            0K            0
           VN POLL            0            0K            0
            statfs            0            0K          587
     namei_tracker            0            0K            0
       export_host            0            0K            0
        cl_savebuf            0            0K            6
               PUC            0            0K            0
          ppbusdev            0            0K            0
agtiapi_MemAlloc malloc            0            0K            0
    osti_cacheable            0            0K            0
          tempbuff            0            0K            0
          tempbuff            0            0K            0
ag_tgt_map_t malloc            0            0K            0
ag_slr_map_t malloc            0            0K            0
lDevFlags * malloc            0            0K            0
tiDeviceHandle_t * malloc            0            0K            0
ag_portal_data_t malloc            0            0K            0
ag_device_t malloc            0            0K            0
     STLock malloc            0            0K            0
          CCB List            0            0K            0
            sr_iov            0            0K            0
               OCS            0            0K            0
               OCS            0            0K            0
              nvme            0            0K            0
               nvd            0            0K            0
            netmap            0            0K            0
            mwldev            0            0K            0
            biobuf            0            0K            0
              aios            0            0K            0
               lio            0            0K            0
               acl            0            0K            0
        MVS driver            0            0K            0
          mbuf_tag            0            0K        10038
              accf            0            0K            0
               pts            0            0K            0
               iov            0            0K        41878
          ioctlops            0            0K          869
           Witness            0            0K            0
             stack            0            0K            0
     CAM ccb queue            0            0K            0
          mrsasbuf            0            0K            0
          mpt_user            0            0K            0
              sbuf            0            0K          288
          mps_user            0            0K            0
          firmware            0            0K            0
        compressor            0            0K            0
            MPSSAS            0            0K            0
              SWAP            0            0K            0
               mps            0            0K            0
          mpr_user            0            0K            0
         sysctltmp            0            0K          985
            sysctl            0            0K            1
            MPRSAS            0            0K            0
              ekcd            0            0K            0
            dumper            0            0K            0
          sendfile            0            0K            0
              rctl            0            0K            0
               mpr            0            0K            0
            mfibuf            0            0K            0
        md_sectors            0            0K            0
           md_disk            0            0K            0
           malodev            0            0K            0
               LED            0            0K            0
             cache            0            0K            0
          kcovinfo            0            0K            0
      prison_racct            0            0K            0
       Fail Points            0            0K            0
             sigio            0            0K            1
filedesc_to_leader            0            0K            0
               pwd            0            0K            0
       tty console            0            0K            0
          ix_sriov            0            0K            0
        aacraidcam            0            0K            0
                ix            0            0K            0
            ipsbuf            0            0K            0
            iirbuf            0            0K            0
       aacraid_buf            0            0K            0
            aaccam            0            0K            0
        isofs_node            0            0K            0
       isofs_mount            0            0K            0
     tr_raid5_data            0            0K            0
    tr_raid1e_data            0            0K            0
     tr_raid1_data            0            0K            0
     tr_raid0_data            0            0K            0
    tr_concat_data            0            0K            0
       md_sii_data            0            0K            0
   md_promise_data            0            0K            0
    md_nvidia_data            0            0K            0
   md_jmicron_data            0            0K            0
     md_intel_data            0            0K            0
       md_ddf_data            0            0K            0
         raid_data            0            0K           72
     geom_flashmap            0            0K            0
         tmpfs dir            0            0K            0
        tmpfs name            0            0K            0
       tmpfs mount            0            0K            0
           NFS FHA            0            0K            0
         newnfsmnt            0            0K            0
  newnfsclient_req            0            0K            0
   NFSCL layrecall            0            0K            0
     NFSCL session            0            0K            0
     NFSCL sockreq            0            0K            0
     NFSCL devinfo            0            0K            0
     NFSCL flayout            0            0K            0
      NFSCL layout            0            0K            0
     NFSD rollback            0            0K            0
NFSCL diroffdiroff            0            0K            0
       NEWdirectio            0            0K            0
        NEWNFSnode            0            0K            0
         NFSCL lck            0            0K            0
      NFSCL lckown            0            0K            0
      NFSCL client            0            0K            0
       NFSCL deleg            0            0K            0
        NFSCL open            0            0K            0
       NFSCL owner            0            0K            0
            NFS fh            0            0K            0
           NFS req            0            0K            0
     NFSD usrgroup            0            0K            0
       NFSD string            0            0K            0
       NFSD V4lock            0            0K            0
      NFSD V4state            0            0K            0
     NFSD srvcache            0            0K            0
       msdosfs_fat            0            0K            0
     msdosfs_mount            0            0K            0
      msdosfs_node            0            0K            0
            DEVFS4            0            0K            0
            DEVFS2            0            0K            0
            gntdev            0            0K            0
       privcmd_dev            0            0K            0
        evtchn_dev            0            0K            0
          xenstore            0            0K            0
            aacbuf            0            0K            0
               xnb            0            0K            0
              xbbd            0            0K            0
               xbd            0            0K            0
           Balloon            0            0K            0
          sysmouse            0            0K            0
            vtfont            0            0K            0
              zstd            0            0K            0
db> show uma
              Zone   Size    Used    Free    Requests  Sleeps  Bucket  Total Mem    XFree
      mbuf_cluster   2048    9368       0        9368       0     254   19185664        0
       mbuf_packet    256    8192    1048       25717       0     254    2365440        0
         FFS inode   1128    2008      15        2053       0       8    2281944        0
          BUF TRIE    144     175   13293        8069       0      62    1939392        0
        malloc-384    384    4138      12        4140       0      30    1593600        0
       malloc-4096   4096     336       1         496       0       2    1380352        0
        malloc-128    128   10470     101       13216       0     126    1353088        0
             VNODE    488    2043      53        2090       0      30    1022848        0
            DEVCTL   1024     717     103         872       0       0     839680        0
              pbuf    832       0     969           0       0       2     806208        0
         VM OBJECT    264    2503      47       88170       0      30     673200        0
       UMA Slabs 0    112    5682       3        5682       0     126     636720        0
       FFS2 dinode    256    2008      17        2052       0      62     518400        0
        RADIX NODE    144    2362     239      181673       0      62     374544        0
            THREAD   1792     138      24         797       0       8     290304        0
      malloc-65536  65536       4       0           4       0       1     262144        0
      malloc-65536  65536       3       1          11       0       1     262144        0
       malloc-4096   4096      55       8        4775       0       2     258048        0
              mbuf    256     400     545       45590       0     254     241920        0
        256 Bucket   2048     115       3        6826       0       8     241664        0
      malloc-16384  16384       5       8        3017       0       1     212992        0
       S VFS Cache    104    1754     235        4854       0     126     206856        0
         malloc-16     16   12218     282       14785       0     254     200000        0
      malloc-65536  65536       0       3        1207       0       1     196608        0
         malloc-64     64    2752      83        2913       0     254     181440        0
         vmem btag     56    3105      51        3105       0     254     176736        0
         UMA Zones    768     226       3         226       0      16     175872        0
         malloc-32     32    4773     519       10798       0     254     169344        0
        malloc-384    384     417      13        1163       0      30     165120        0
        malloc-128    128    1126      83       24452       0     126     154752        0
      malloc-65536  65536       2       0           2       0       1     131072        0
         MAP ENTRY     96    1029     315      319106       0     126     129024        0
       malloc-4096   4096      23       8         106       0       2     126976        0
       malloc-1024   1024     117       7         135       0      16     126976        0
          ksiginfo    112      57     987         740       0     126     116928        0
        malloc-256    256     104     331        2293       0      62     111360        0
           VMSPACE   2544      29      13        4301       0       4     106848        0
       malloc-2048   2048       4      48       16683       0       8     106496        0
              PROC   1320      51      21        4322       0       8      95040        0
         filedesc0   1072      52      25        4323       0       8      82544        0
          UMA Kegs    384     212       1         212       0      30      81792        0
             g_bio    408       4     196       61366       0      30      81600        0
        128 Bucket   1024      45      34        1980       0      16      80896        0
        malloc-256    256     186     129        6016       0      62      80640        0
        malloc-128    128     306     283        4633       0     126      75392        0
       malloc-8192   8192       6       3          34       0       1      73728        0
        malloc-256    256     152     133        8513       0      62      72960        0
         sctp_asoc   2288       0      30         754       0     254      68640        0
         malloc-64     64     546     525       43546       0     254      68544        0
      malloc-65536  65536       0       1         110       0       1      65536        0
      malloc-32768  32768       2       0           2       0       1      65536        0
            socket    944      21      43        7301       0     254      60416        0
        malloc-128    128     136     298       11140       0     126      55552        0
         64 Bucket    512      64      40       10990       0      30      53248        0
        malloc-128    128     125     278        2132       0     126      51584        0
           sctp_ep   1280       2      37         754       0     254      49920        0
         32 Bucket    256      59     136        7285       0      62      49920        0
      malloc-16384  16384       3       0           3       0       1      49152        0
      malloc-16384  16384       2       1           5       0       1      49152        0
       malloc-4096   4096       7       5         382       0       2      49152        0
            pcpu-8      8    5759     385       10148       0     254      49152        0
        malloc-384    384      55      65        1561       0      30      46080        0
           DIRHASH   1024      40       4          49       0      16      45056        0
       malloc-2048   2048       9      13         516       0       8      45056        0
         malloc-64     64     248     445       11529       0     254      44352        0
         malloc-64     64     525     168        1606       0     254      44352        0
        malloc-256    256      17     148        5383       0      62      42240        0
       malloc-8192   8192       4       1           6       0       1      40960        0
              pipe    744      14      41        2013       0      16      40920        0
            clpbuf    832       0      48         105       0      16      39936        0
        malloc-384    384      93       7         786       0      30      38400        0
             NAMEI   1024       1      35       97558       0      16      36864        0
       malloc-1024   1024       2      34         796       0      16      36864        0
      malloc-32768  32768       1       0           1       0       1      32768        0
      malloc-32768  32768       0       1         112       0       1      32768        0
           pcpu-64     64     452      60         452       0     254      32768        0
        sctp_raddr    736       0      44         754       0     254      32384        0
             Files     80     109     291       56406       0     126      32000        0
        malloc-384    384       1      79        2214       0      30      30720        0
        malloc-256    256      13     107        1776       0      62      30720        0
        malloc-256    256      65      55        4535       0      62      30720        0
          4 Bucket     48       7     581        7684       0     254      28224        0
             KNOTE    160      16     159       25305       0      62      28000        0
          8 Bucket     80      44     306       14612       0     126      28000        0
        malloc-384    384      13      57        1517       0      30      26880        0
         TURNSTILE    136     163      26         163       0      62      25704        0
       malloc-8192   8192       2       1          91       0       1      24576        0
       malloc-8192   8192       3       0           3       0       1      24576        0
           rtentry    176      19     119        1548       0      62      24288        0
               PWD     32      13     743        1250       0     254      24192        0
         malloc-64     64     256     122       36106       0     254      24192        0
         16 Bucket    144      48     120       11144       0      62      24192        0
            ttyinq    160     135      15         300       0      62      24000        0
        malloc-128    128     142      44         495       0     126      23808        0
             tcpcb   1048       3      19           7       0     254      23056        0
     routing nhops    256      15      75        1548       0      62      23040        0
           ttyoutq    256      72      18         160       0      62      23040        0
       malloc-4096   4096       3       2           8       0       2      20480        0
       malloc-2048   2048       5       5         261       0       8      20480        0
       malloc-1024   1024      18       2          18       0      16      20480        0
         malloc-32     32     300     330        5694       0     254      20160        0
          2 Bucket     32      64     566        8588       0     254      20160        0
        malloc-128    128      49     106        3591       0     126      19840        0
       Mountpoints   2752       2       5           2       0       4      19264        0
        malloc-256    256      49      26          60       0      62      19200        0
        malloc-256    256      59      16        1227       0      62      19200        0
        SLEEPQUEUE     88     163      29         163       0     126      16896        0
   mbuf_jumbo_page   4096       0       4          10       0     254      16384        0
      malloc-16384  16384       1       0           1       0       1      16384        0
      malloc-16384  16384       0       1         136       0       1      16384        0
      malloc-16384  16384       1       0           1       0       1      16384        0
       malloc-8192   8192       2       0           2       0       1      16384        0
       malloc-8192   8192       2       0           2       0       1      16384        0
       malloc-8192   8192       2       0           2       0       1      16384        0
       malloc-4096   4096       1       3         591       0       2      16384        0
       malloc-2048   2048       7       1           7       0       8      16384        0
       malloc-1024   1024       6      10       12558       0      16      16384        0
       malloc-1024   1024      14       2          14       0      16      16384        0
       malloc-2048   2048       3       3          15       0       8      12288        0
       malloc-2048   2048       2       4           7       0       8      12288        0
       malloc-2048   2048       3       3         194       0       8      12288        0
        malloc-512    512       1      23         119       0      30      12288        0
         udp_inpcb    488       3      21        2924       0     254      11712        0
             unpcb    256      11      34        2763       0     254      11520        0
       malloc-8192   8192       1       0           1       0       1       8192        0
       malloc-4096   4096       1       1           3       0       2       8192        0
       malloc-1024   1024       3       5           3       0      16       8192        0
       malloc-1024   1024       4       4         147       0      16       8192        0
       malloc-1024   1024       3       5          19       0      16       8192        0
        malloc-512    512       4      12          40       0      30       8192        0
        malloc-512    512       2      14         510       0      30       8192        0
        malloc-512    512       3      13        1525       0      30       8192        0
        malloc-512    512       9       7          12       0      30       8192        0
          rl_entry     40      54     148          54       0     254       8080        0
        sctp_laddr     48       0     168        2262       0     254       8064        0
             udpcb     32       3     249        2924       0     254       8064        0
         malloc-64     64      11     115          24       0     254       8064        0
         malloc-64     64       2     124          38       0     254       8064        0
         malloc-64     64      36      90        1205       0     254       8064        0
         malloc-32     32     100     152         137       0     254       8064        0
         malloc-32     32      65     187       13446       0     254       8064        0
         malloc-32     32      56     196         930       0     254       8064        0
         malloc-32     32       1     251         834       0     254       8064        0
         malloc-32     32      30     222        2657       0     254       8064        0
      vtnet_tx_hdr     24       0     334        1326       0     254       8016        0
         malloc-16     16      16     484          46       0     254       8000        0
         malloc-16     16      28     472        2605       0     254       8000        0
         malloc-16     16      58     442        2403       0     254       8000        0
         malloc-16     16     183     317        1238       0     254       8000        0
         malloc-16     16       8     492           8       0     254       8000        0
         malloc-16     16     256     244         259       0     254       8000        0
         malloc-16     16      27     473       23646       0     254       8000        0
        malloc-128    128      16      46         118       0     126       7936        0
             ripcb    488       1      15          26       0     254       7808        0
         tcp_inpcb    488       3      13           7       0     254       7808        0
              kenv    258       3      27        1048       0      30       7740        0
     FPU_save_area    832       1       8           1       0      16       7488        0
            cpuset    104       7      55           7       0     126       6448        0
 epoch_record pcpu    256       4      12           4       0      62       4096        0
       malloc-2048   2048       1       1          33       0       8       4096        0
        malloc-512    512       1       7           2       0      30       4096        0
        malloc-512    512       3       5          44       0      30       4096        0
           pcpu-16     16       7     249           7       0     254       4096        0
         hostcache     96       1      41           1       0     254       4032        0
          syncache    168       0      24           5       0     254       4032        0
         malloc-32     32       8     118          29       0     254       4032        0
       UMA Slabs 1    176      11      11          11       0      62       3872        0
        malloc-384    384       1       9           1       0      30       3840        0
        malloc-384    384       1       9           1       0      30       3840        0
        KMAP ENTRY     96      12      27          12       0       0       3744        0
              vmem   1856       1       1           1       0       8       3712        0
           SMR CPU     32       2      29           2       0     254        992        0
        SMR SHARED     24       2      29           2       0     254        744        0
       FFS1 dinode    128       0       0           0       0     126          0        0
             swblk    136       0       0           0       0      62          0        0
          swpctrie    144       0       0           0       0      62          0        0
   sctp_asconf_ack     48       0       0           0       0     254          0        0
       sctp_asconf     40       0       0           0       0     254          0        0
sctp_stream_msg_out    112       0       0           0       0     254          0        0
        sctp_readq    152       0       0           0       0     254          0        0
        sctp_chunk    152       0       0           0       0     254          0        0
   pf state scrubs     40       0       0           0       0     254          0        0
   pf frag entries     40       0       0           0       0     254          0        0
          pf frags    248       0       0           0       0      62          0        0
  pf table entries    160       0       0           0       0      62          0        0
pf table entry counters     64       0       0           0       0     254          0        0
   pf source nodes    136       0       0           0       0     254          0        0
     pf state keys     88       0       0           0       0     126          0        0
         pf states    296       0       0           0       0     254          0        0
           pf tags    104       0       0           0       0     126          0        0
          pf mtags     48       0       0           0       0     254          0        0
       tcp_bbr_pcb    832       0       0           0       0      16          0        0
       tcp_bbr_map    128       0       0           0       0     126          0        0
    IPsec SA lft_c     16       0       0           0       0     254          0        0
     udplite_inpcb    488       0       0           0       0     254          0        0
      tcp_log_node    120       0       0           0       0     126          0        0
    tcp_log_bucket    176       0       0           0       0      62          0        0
           tcp_log    416       0       0           0       0     254          0        0
          tcpreass     48       0       0           0       0     254          0        0
tfo_ccache_entries     80       0       0           0       0     126          0        0
               tfo      4       0       0           0       0     254          0        0
          sackhole     32       0       0           0       0     254          0        0
             tcptw     88       0       0           0       0     254          0        0
               ipq     56       0       0           0       0     254          0        0
            itimer    352       0       0           0       0      30          0        0
            AIOLIO    272       0       0           0       0      30          0        0
             AIOCB    744       0       0           0       0      16          0        0
              AIOP     32       0       0           0       0     254          0        0
               AIO    208       0       0           0       0      62          0        0
        TMPFS node    224       0       0           0       0      62          0        0
           NCLNODE    592       0       0           0       0      16          0        0
     LTS VFS Cache    360       0       0           0       0      30          0        0
       L VFS Cache    320       0       0           0       0      30          0        0
     STS VFS Cache    144       0       0           0       0      62          0        0
    crypto_session     72       0       0           0       0     126          0        0
           cryptop    280       0       0           0       0      30          0        0
   IOMMU_MAP_ENTRY    120       0       0           0       0     126          0        0
      ktls_session    192       0       0           0       0      62          0        0
    mbuf_jumbo_16k  16384       0       0           0       0     254          0        0
     mbuf_jumbo_9k   9216       0       0           0       0     254          0        0
      audit_record   1280       0       0           0       0       8          0        0
         domainset     40       0       0           0       0     254          0        0
        MAC labels     40       0       0           0       0     254          0        0
            vnpbuf    832       0       0           0       0      62          0        0
            mdpbuf    832       0       0           0       0       4          0        0
           nfspbuf    832       0       0           0       0      16          0        0
            swwbuf    832       0       0           0       0       8          0        0
            swrbuf    832       0       0           0       0      16          0        0
          umtx_shm     88       0       0           0       0     126          0        0
           umtx pi     96       0       0           0       0     126          0        0
rangeset pctrie nodes    144       0       0           0       0      62          0        0
      malloc-65536  65536       0       0           0       0       1          0        0
      malloc-65536  65536       0       0           0       0       1          0        0
      malloc-65536  65536       0       0           0       0       1          0        0
      malloc-32768  32768       0       0           0       0       1          0        0
      malloc-32768  32768       0       0           0       0       1          0        0
      malloc-32768  32768       0       0           0       0       1          0        0
      malloc-32768  32768       0       0           0       0       1          0        0
      malloc-32768  32768       0       0           0       0       1          0        0
      malloc-16384  16384       0       0           0       0       1          0        0
      malloc-16384  16384       0       0           0       0       1          0        0
       malloc-4096   4096       0       0           0       0       2          0        0
        malloc-512    512       0       0           0       0      30          0        0
           pcpu-32     32       0       0           0       0     254          0        0
            pcpu-4      4       0       0           0       0     254          0        0
            fakepg    104       0       0           0       0     126          0        0
          UMA Hash    256       0       0           0       0      62          0        0

Crashes (20):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2020/11/20 18:35 freebsd 5dc4ad3d38ab 740ff461 console log report syz ci-freebsd-main
2020/11/13 09:09 freebsd c6e5f27ea613 16fca0c8 console log report syz ci-freebsd-main
2020/10/30 23:20 freebsd 75e5305e4cb1 bde4231c console log report syz ci-freebsd-main
2020/10/09 02:25 freebsd 4a0365329481 92390980 console log report syz ci-freebsd-main
2020/10/08 14:43 freebsd 3a986d52b614 92390980 console log report syz ci-freebsd-main
2020/11/11 15:12 freebsd 4da935e1c50d cca87986 console log report syz ci-freebsd-i386
2020/10/05 11:28 freebsd 33583454c2ad 5ef9c291 console log report syz ci-freebsd-i386
2021/02/19 20:05 freebsd-src 4c0bef07be07 14052202 console log report ci-freebsd-main Fatal trap 12: page fault in in6_unlink_ifa
2021/06/30 03:48 freebsd-src f77697dd9f31 a4fccb01 console log report ci-freebsd-i386 Fatal trap 12: page fault in in6_unlink_ifa
2020/12/29 22:56 freebsd 9e4440ca5ba7 80910769 console log report ci-freebsd-main
2020/11/02 01:58 freebsd 7aa7d228a6f6 8bc4594f console log report ci-freebsd-main
2020/09/07 05:32 freebsd a08a9e6544b6 abf9ba4f console log report ci-freebsd-main
2020/09/05 12:39 freebsd fda96f32db8e abf9ba4f console log report ci-freebsd-main
2020/08/28 23:27 freebsd 13f6b9d84d01 d5a3ae1f console log report ci-freebsd-main
2020/08/25 23:52 freebsd f1b1d9510150 344da168 console log report ci-freebsd-main
2020/08/24 18:39 freebsd 4f1f3fbe7ef5 67b599d1 console log report ci-freebsd-main
2020/08/20 20:24 freebsd ae8b4695bb7d 70160577 console log report ci-freebsd-main
2020/06/27 00:39 freebsd 525ed724f548 349959fb console log report ci-freebsd-main
2020/06/07 10:31 freebsd 3e9c80660666 2c2b926c console log report ci-freebsd-main
2020/09/09 10:00 freebsd 953094c4e862 0ea7a887 console log report ci-freebsd-i386
* Struck through repros no longer work on HEAD.