panic: igmp_change_state: no igmp_ifsoftc for ifp ADDR

4 views
Skip to first unread message

syzbot

unread,
Jul 26, 2025, 8:53:34 AM7/26/25
to syzkaller-f...@googlegroups.com
Hello,

syzbot found the following issue on:

HEAD commit: fd186cd16eaf find: Fix items from the review I missed for ..
git tree: freebsd-src
console output: https://syzkaller.appspot.com/x/log.txt?x=136f8034580000
dashboard link: https://syzkaller.appspot.com/bug?extid=824920e7520ed67811d9

Unfortunately, I don't have any reproducer for this issue yet.

IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+824920...@syzkaller.appspotmail.com

panic: igmp_change_state: no igmp_ifsoftc for ifp 0xfffffe0077880800
cpuid = 0
time = 32904
KDB: stack backtrace:
db_trace_self_wrapper() at db_trace_self_wrapper+0xc6/frame 0xfffffe0056eb3050
kdb_backtrace() at kdb_backtrace+0xd0/frame 0xfffffe0056eb31b0
vpanic() at vpanic+0x257/frame 0xfffffe0056eb3370
panic() at panic+0xb5/frame 0xfffffe0056eb3440
igmp_change_state() at igmp_change_state+0xcdc/frame 0xfffffe0056eb3490
in_joingroup_locked() at in_joingroup_locked+0x3f6/frame 0xfffffe0056eb3660
in_joingroup() at in_joingroup+0x47/frame 0xfffffe0056eb3690
in_control_ioctl() at in_control_ioctl+0x18c2/frame 0xfffffe0056eb3870
ifioctl() at ifioctl+0xe51/frame 0xfffffe0056eb3ab0
kern_ioctl() at kern_ioctl+0x4ca/frame 0xfffffe0056eb3b90
sys_ioctl() at sys_ioctl+0x36e/frame 0xfffffe0056eb3d10
amd64_syscall() at amd64_syscall+0x4e2/frame 0xfffffe0056eb3f30
fast_syscall_common() at fast_syscall_common+0xf8/frame 0xfffffe0056eb3f30
--- syscall (54, FreeBSD ELF64, ioctl), rip = 0x8230672ca, rsp = 0x8208f2918, rbp = 0x8208f2960 ---
KDB: enter: panic
[ thread pid 1353 tid 100378 ]
Stopped at kdb_enter+0x6e: movq $0,0x25c5037(%rip)
db>
db> set $lines = 0
db> set $maxwidth = 0
db> show registers
cs 0x20
ds 0x3b
es 0x3b
fs 0x13
gs 0x1b
ss 0x28
rax 0x12
rcx 0xfffffe0002bf1850
rdx 0
rbx 0xffffffff827c9b00 .str.27
rsp 0xfffffe0056eb3190
rbp 0xfffffe0056eb31b0
rsi 0
rdi 0xffffffff81613f29 printf+0x149
r8 0
r9 0xffffffff
r10 0
r11 0x13
r12 0xfffffe0054140780
r13 0xfffffffffffffffe
r14 0xffffffff827c9b00 .str.27
r15 0
rip 0xffffffff815fda5e kdb_enter+0x6e
rflags 0x46
kdb_enter+0x6e: movq $0,0x25c5037(%rip)
db> show proc
Process 1353 (ifconfig) at 0xfffffe0054153ae0:
state: NORMAL
uid: 0 gids: 0, 0, 5
parent: pid 1346 at 0xfffffe00540aa5a0
ABI: FreeBSD ELF64
flag: 0x10004000 flag2: 0
arguments: ifconfig tap8 inet 172.20.8.170 netmask 255.255.255.0
reaper: 0xfffffe0007809040 reapsubtree: 1
sigparent: 20
vmspace: 0xfffffe00540b6248
(map 0xfffffe00540b6248)
(map.pmap 0xfffffe00540b62e8)
(pmap 0xfffffe00540b6358)
threads: 1
100378 Run CPU 0 ifconfig
db> ps
pid ppid pgrp uid state wmesg wchan cmd
1354 1294 0 0 NE syz-executor
1353 1346 1346 0 R CPU 0 ifconfig
1352 1350 1350 0 R sh
1351 1351 0 0 N syz-executor
1350 762 1350 0 S wait 0xfffffe00540e0060 syz-executor
1346 762 1346 0 S wait 0xfffffe00540aa5a0 syz-executor
1336 762 1336 0 R syz-executor
1334 1 1294 0 T (threaded) syz-executor
100859 s syz-executor
100862 s syz-executor
100863 s syz-executor
100865 D reapst 0xfffffe0056e27a08 syz-executor
100867 s syz-executor
100868 s syz-executor
100869 s syz-executor
100870 s syz-executor
100871 s syz-executor
1329 1 1280 0 SV uwait 0xfffffe0058502b80 syz-executor
1320 1 1280 0 S uwait 0xfffffe0058152380 syz-executor
1299 1 1298 0 TL tun_con 0xfffffe00596d5828 ifconfig
1287 1 765 0 SV uwait 0xfffffe0058150680 syz-executor
1280 762 1280 0 R syz-executor
1279 1 765 0 S uwait 0xfffffe006e53c000 syz-executor
1268 1 763 0 T (threaded) syz-executor
100088 s syz-executor
100766 RunQ syz-executor
1262 1 763 0 S uwait 0xfffffe0058152980 syz-executor
1254 1 766 0 S uwait 0xfffffe005814f000 syz-executor
1252 1 766 0 S uwait 0xfffffe0058151200 syz-executor
1245 1 765 0 S uwait 0xfffffe006e53d100 syz-executor
1239 1 766 0 S uwait 0xfffffe0058503100 syz-executor
1238 1 1238 0 Ss+ ttyin 0xfffffe00582a44b0 getty
1237 1 1237 0 Ss+ ttyin 0xfffffe00582a4cb0 getty
1236 1 1236 0 Ss+ ttyin 0xfffffe0053f69cb0 getty
1235 1 1235 0 Ss+ ttyin 0xfffffe00582798b0 getty
1234 1 1234 0 Ss+ ttyin 0xfffffe0059537cb0 getty
1233 1 1233 0 Ss+ ttyin 0xfffffe0053f694b0 getty
1232 1 1232 0 Ss+ ttyin 0xfffffe0053f6a4b0 getty
1231 1 1231 0 Ss+ ttyin 0xfffffe00582a54b0 getty
1230 1 1230 0 Ss+ ttyin 0xfffffe0053f6acb0 getty
1221 1 766 0 S uwait 0xfffffe0058150d80 syz-executor
1219 1 764 0 S uwait 0xfffffe0058502980 syz-executor
1215 1 764 0 S uwait 0xfffffe0058501900 syz-executor
1213 1 766 0 S uwait 0xfffffe0058502400 syz-executor
1212 1 763 0 S uwait 0xfffffe005814f380 syz-executor
1201 1 764 0 S uwait 0xfffffe006e53d200 syz-executor
1196 1 765 0 S uwait 0xfffffe005814f280 syz-executor
1188 1 765 0 S uwait 0xfffffe0058152600 syz-executor
1182 1181 764 0 S uwait 0xfffffe006e53c300 syz-executor
1181 1 764 0 SV wait 0xfffffe0054128560 syz-executor
1170 1 766 0 SV sigwait 0xfffffe0054003b90 syz-executor
1167 1 765 0 S uwait 0xfffffe005814fc00 syz-executor
1163 1 764 0 S uwait 0xfffffe006e53cd80 syz-executor
1158 1 766 0 S uwait 0xfffffe0058151500 syz-executor
1157 1 763 0 SV uwait 0xfffffe0058502580 syz-executor
1156 1 766 0 S uwait 0xfffffe0058152680 syz-executor
1140 1 765 0 S uwait 0xfffffe006e53d600 syz-executor
1120 1 765 0 S uwait 0xfffffe0058503200 syz-executor
1107 1 765 0 S uwait 0xfffffe006e53ca80 syz-executor
1098 1 765 0 S uwait 0xfffffe006e53c780 syz-executor
1092 1 763 0 S uwait 0xfffffe0058152a80 syz-executor
1086 1 764 0 SV uwait 0xfffffe006e53d680 syz-executor
1075 1 765 0 S uwait 0xfffffe006e53e080 syz-executor
1073 1 764 0 S uwait 0xfffffe0007771680 syz-executor
1069 1 766 0 SV uwait 0xfffffe0058501500 syz-executor
1067 1 763 0 SV uwait 0xfffffe006e53da00 syz-executor
1057 1 766 0 S uwait 0xfffffe0058501000 syz-executor
1056 1 765 0 S uwait 0xfffffe0058152880 syz-executor
1053 1 765 0 S uwait 0xfffffe006e53d400 syz-executor
1050 1 763 0 S uwait 0xfffffe006e53de00 syz-executor
1037 1 760 0 S uwait 0xfffffe0007771900 syz-executor
1036 1 764 0 S uwait 0xfffffe0058501180 syz-executor
1030 1 764 0 S uwait 0xfffffe0007771d80 syz-executor
1029 1 764 0 S uwait 0xfffffe0058152b80 syz-executor
1028 1 765 0 S uwait 0xfffffe0007771880 syz-executor
1003 1 763 0 S uwait 0xfffffe005814f780 syz-executor
981 1 763 0 S uwait 0xfffffe0007771e80 syz-executor
978 0 0 0 DL (threaded) [so_splice]
100148 D - 0xfffffe0059413480 [thr_0]
100349 D - 0xfffffe00594134c0 [thr_1]
969 1 765 0 S uwait 0xfffffe0058152e80 syz-executor
968 1 763 0 S uwait 0xfffffe0058501800 syz-executor
967 1 763 0 S uwait 0xfffffe0058501a00 syz-executor
945 1 763 0 S uwait 0xfffffe006e53dc00 syz-executor
942 1 766 0 SV uwait 0xfffffe0007771580 syz-executor
938 1 764 0 SV uwait 0xfffffe006e53df00 syz-executor
934 1 764 0 S uwait 0xfffffe0007771380 syz-executor
930 1 766 0 S uwait 0xfffffe006e53d300 syz-executor
927 1 766 0 S uwait 0xfffffe0058501c00 syz-executor
926 1 766 0 S uwait 0xfffffe0058501e00 syz-executor
915 1 763 0 S uwait 0xfffffe0058501700 syz-executor
910 1 764 0 S uwait 0xfffffe0058152c80 syz-executor
895 1 765 0 S uwait 0xfffffe0058501400 syz-executor
894 1 763 0 S uwait 0xfffffe0007771c80 syz-executor
892 1 765 0 S uwait 0xfffffe0058502600 syz-executor
889 0 0 0 DL (threaded) [KTLS]
100140 D - 0xfffffe0058772d00 [thr_0]
100185 D - 0xfffffe0058772d80 [thr_1]
100186 D - 0xffffffff83cb5528 [reclaim_0]
888 1 764 0 S uwait 0xfffffe0007771780 syz-executor
874 1 763 0 SV uwait 0xfffffe0058503000 syz-executor
855 1 765 0 S uwait 0xfffffe0058501600 syz-executor
820 1 765 0 S uwait 0xfffffe0058501300 syz-executor
818 0 0 0 DL aiordy 0xfffffe005410dae0 [aiod4]
817 0 0 0 DL aiordy 0xfffffe005410e040 [aiod3]
816 0 0 0 DL aiordy 0xfffffe005410e5a0 [aiod2]
814 0 0 0 DL aiordy 0xfffffe00540f4060 [aiod1]
804 1 763 0 S uwait 0xfffffe0058501d00 syz-executor
762 1 760 0 R syz-executor
758 681 758 0 Ss select 0xfffffe00077e5040 sshd
681 1 681 0 Ss select 0xfffffe00077e5640 sshd
16 0 0 0 DL syncer 0xffffffff83cc1720 [syncer]
15 0 0 0 DL vlruwt 0xfffffe000780a060 [vnlru]
14 0 0 0 DL (threaded) [bufdaemon]
100079 D psleep 0xffffffff83cbfc60 [bufdaemon]
100082 D - 0xffffffff83001ec0 [bufspacedaemon-0]
100094 D sdflush 0xfffffe00596fdce8 [/ worker]
9 0 0 0 DL psleep 0xffffffff83d0abc0 [vmdaemon]
8 0 0 0 RL (threaded) [pagedaemon]
100077 D psleep 0xffffffff83cf0c88 [dom0]
100080 D launds 0xffffffff83cf0c94 [laundry: dom0]
100081 RunQ [uma]
7 0 0 0 RL [rand_harvestq]
6 0 0 0 DL pftm 0xffffffff843c09e0 [pf purge]
5 0 0 0 DL waiting 0xffffffff84685700 [sctp_iterator]
4 0 0 0 DL (threaded) [cam]
100045 D - 0xffffffff838e6340 [doneq0]
100046 D - 0xffffffff838e62c0 [async]
100075 D - 0xffffffff838e6140 [scanner]
3 0 0 0 DL (threaded) [crypto]
100042 D crypto_ 0xffffffff83cec540 [crypto]
100043 D crypto_ 0xfffffe0053eb5a30 [crypto returns 0]
100044 D crypto_ 0xfffffe0053eb5a80 [crypto returns 1]
13 0 0 0 DL (threaded) [geom]
100037 D - 0xffffffff83b4c620 [g_event]
100038 D - 0xffffffff83b4c640 [g_up]
100039 D - 0xffffffff83b4c660 [g_down]
2 0 0 0 WL (threaded) [clock]
100031 I [clock (0)]
100032 I [clock (1)]
12 0 0 0 RL (threaded) [intr]
100013 I [swi6: task queue]
100014 I [swi6: Giant taskq]
100016 I [swi5: fast taskq]
100033 I [swi1: netisr 0]
100034 I [swi1: hpts]
100035 Run CPU 1 [swi1: hpts]
100047 I [irq24: virtio_pci0]
100048 I [irq25: virtio_pci0]
100049 I [irq26: virtio_pci0]
100050 I [irq27: virtio_pci0]
100051 I [irq28: virtio_pci1]
100052 I [irq29: virtio_pci1]
100053 I [irq30: virtio_pci1]
100054 I [irq31: virtio_pci1]
100055 I [irq32: virtio_pci1]
100060 I [irq10: virtio_pci2]
100062 I [irq1: atkbd0]
100063 I [irq12: psm0]
100064 I [swi0: uart uart++]
100068 I [swi1: pf send]
11 0 0 0 RL (threaded) [idle]
100003 CanRun [idle: cpu0]
100004 CanRun [idle: cpu1]
1 0 1 0 SLs wait 0xfffffe0007809040 [init]
10 0 0 0 DL audit_w 0xffffffff83cecfe0 [audit]
0 0 0 0 DLs (threaded) [kernel]
100000 D parked 0xffffffff84c3dff0 [swapper]
100005 D - 0xfffffe0053eb6100 [softirq_0]
100006 D - 0xfffffe0053eb6000 [softirq_1]
100007 D - 0xfffffe0053eb5e00 [if_io_tqg_0]
100008 D - 0xfffffe0053eb5d00 [if_io_tqg_1]
100009 D - 0xfffffe0053eb5c00 [if_config_tqg_0]
100010 D - 0xfffffe00083f7d00 [kqueue_ctx taskq]
100011 D - 0xfffffe00083f7c00 [jail_remove taskq]
100012 D - 0xfffffe00083f7b00 [bus taskq]
100015 s [thread taskq]
100017 D - 0xfffffe00083f7600 [aiod_kick taskq]
100018 D - 0xfffffe00083f7500 [deferred_unmount ta]
100019 D - 0xfffffe00083f7400 [inm_free taskq]
100020 D - 0xfffffe00083f7300 [in6m_free taskq]
100021 D - 0xfffffe00083f7200 [linuxkpi_irq_wq]
100022 D - 0xfffffe00083f7100 [linuxkpi_short_wq_0]
100023 D - 0xfffffe00083f7100 [linuxkpi_short_wq_1]
100024 D - 0xfffffe00083f7100 [linuxkpi_short_wq_2]
100025 D - 0xfffffe00083f7100 [linuxkpi_short_wq_3]
100026 D - 0xfffffe00083f7000 [linuxkpi_long_wq_0]
100027 D - 0xfffffe00083f7000 [linuxkpi_long_wq_1]
100028 D - 0xfffffe00083f7000 [linuxkpi_long_wq_2]
100029 D - 0xfffffe00083f7000 [linuxkpi_long_wq_3]
100036 D - 0xfffffe00083f6e00 [firmware taskq]
100040 D - 0xfffffe00083f6b00 [crypto_0]
100041 D - 0xfffffe00083f6b00 [crypto_1]
100056 D - 0xfffffe00083f6900 [vtnet0 rxq 0]
100057 D - 0xfffffe00083f6800 [vtnet0 txq 0]
100058 D - 0xfffffe00083f6700 [vtnet0 rxq 1]
100059 D - 0xfffffe00083f6600 [vtnet0 txq 1]
100061 D vtbslp 0xfffffe0057d7d700 [virtio_balloon]
100065 D - 0xffffffff827ceee1 [deadlkres]
100069 D - 0xfffffe005857c600 [acpi_task_0]
100070 D - 0xfffffe005857c600 [acpi_task_1]
100071 D - 0xfffffe005857c600 [acpi_task_2]
100073 D - 0xfffffe00083f8100 [mca taskq]
100074 D - 0xfffffe00083f6a00 [CAM taskq]
100076 D - 0xfffffe005857c400 [ipsec_offload]
100414 D - 0xfffffe00083f5800 [netlink_socket (PID]
100429 D - 0xfffffe00083f6100 [netlink_socket (PID]
db> show all locks
Process 1354 (syz-executor) thread 0xfffffe0054170780 (100510)
exclusive sleep mutex igmp_mtx (igmp_mtx) r = 0 (0xffffffff83cc6420) locked @ /syzkaller/managers/main/kernel/sys/netinet/igmp.c:2349
exclusive sleep mutex in_multi_list_mtx (in_multi_list_mtx) r = 0 (0xffffffff83cc6640) locked @ /syzkaller/managers/main/kernel/sys/netinet/in_mcast.c:1246
exclusive sx in_multi_sx (in_multi_sx) r = 0 (0xffffffff83cc6680) locked @ /syzkaller/managers/main/kernel/sys/netinet/in_mcast.c:1199
exclusive sx in_control (in_control) r = 0 (0xffffffff83cc6540) locked @ /syzkaller/managers/main/kernel/sys/netinet/in.c:367
Process 1353 (ifconfig) thread 0xfffffe0054140780 (100378)
exclusive sleep mutex igmp_mtx (igmp_mtx) r = 0 (0xffffffff83cc6420) locked @ /syzkaller/managers/main/kernel/sys/netinet/igmp.c:2349
exclusive sleep mutex in_multi_list_mtx (in_multi_list_mtx) r = 0 (0xffffffff83cc6640) locked @ /syzkaller/managers/main/kernel/sys/netinet/in_mcast.c:1246
exclusive sx in_multi_sx (in_multi_sx) r = 0 (0xffffffff83cc6680) locked @ /syzkaller/managers/main/kernel/sys/netinet/in_mcast.c:1199
exclusive sx in_control (in_control) r = 0 (0xffffffff83cc6540) locked @ /syzkaller/managers/main/kernel/sys/netinet/in.c:367
Process 1336 (syz-executor) thread 0xfffffe0054054780 (100087)
shared sx killpg racer (killpg racer) r = 0 (0xfffffe00540e37d8) locked @ /syzkaller/managers/main/kernel/sys/kern/kern_fork.c:977
Process 1334 (syz-executor) thread 0xfffffe0054179780 (100865)
exclusive sx sapblk (sapblk) r = 0 (0xffffffff83b91f60) locked @ /syzkaller/managers/main/kernel/sys/kern/kern_proc.c:3468
Process 1299 (ifconfig) thread 0xfffffe005416f780 (100643)
exclusive sx ifnet_detach_sx (ifnet_detach_sx) r = 0 (0xffffffff83cc1f00) locked @ /syzkaller/managers/main/kernel/sys/net/if.c:3000
Process 1280 (syz-executor) thread 0xfffffe00540d1000 (100110)
shared sx killpg racer (killpg racer) r = 0 (0xfffffe00540a7c10) locked @ /syzkaller/managers/main/kernel/sys/kern/kern_fork.c:977
Process 8 (pagedaemon) thread 0xfffffe0054058780 (100081)
shared rw UMA lock (UMA lock) r = 0 (0xffffffff830033c0) locked @ /syzkaller/managers/main/kernel/sys/vm/uma_core.c:3106
shared sx umareclaim (umareclaim) r = 0 (0xffffffff83cefd60) locked @ /syzkaller/managers/main/kernel/sys/vm/uma_core.c:5330
db> show malloc
Type InUse MemUse Requests
pf_hash 6 12804K 6
linker 418 5497K 753
tcp_hpts 7 4801K 7
sctp_stro 4 4611K 11
devbuf 4187 4323K 4212
sysctloid 35221 2075K 35296
vtbuf 24 1968K 46
kobj 330 1320K 494
filedesc 139 1111K 898
newblk 87 1046K 3698
vfscache 3 1025K 3
pcb 60 702K 589
inodedep 34 525K 915
ufs_quota 1 512K 1
vfs_hash 1 512K 1
callout 2 512K 2
subproc 234 490K 1484
intr 4 472K 4
vnet_data 2 224K 2
acpitask 1 224K 1
KTRACE 100 200K 29490
acpica 1674 184K 54426
vmem 5 146K 7
tidhash 3 141K 3
pagedep 29 135K 471
tfo_ccache 1 128K 1
IP reass 1 128K 1
DEVFS1 111 111K 138
sem 4 106K 4
gtaskqueue 18 98K 18
bus 997 82K 5063
mtx_pool 3 74K 3
syncache 1 68K 1
NFSD srvcache 3 68K 3
module 523 66K 528
ddb_capture 1 64K 1
kdtrace 315 58K 2237
umtx 424 53K 424
shm 6 42K 13
mount 80 38K 1734
routetbl 345 37K 856
LRO 34 35K 36
DEVFS3 131 33K 141
hostcache 1 32K 1
msg 4 30K 4
kbdmux 6 28K 6
ifaddr 109 27K 113
lltable 76 23K 89
ifnet 12 23K 13
temp 52 22K 3454
DEVFS_RULE 56 20K 56
ether_multi 243 20K 301
ufs_mount 4 17K 5
proc 3 17K 3
tty 16 16K 16
ithread 90 15K 90
bus-sc 34 15K 1647
eventhandler 163 14K 163
in6_multi 95 13K 106
tcp_fsb_rack 6 13K 28
kenv 95 12K 95
shmfd 7 11K 20
GEOM 49 11K 431
CAM queue 5 11K 1528
rman 82 10K 437
cred 38 10K 328
plimit 24 9K 685
rpc 8 9K 8
bmsafemap 3 9K 787
kqueue 121 9K 1922
devstat 4 9K 4
UART 12 9K 12
filemon 1 8K 10
ksem 1 8K 3
pfs_vncache 1 8K 1
taskqueue 75 8K 111
sctp_atcl 20 8K 240
audit_evclass 240 8K 303
pwddesc 111 7K 1424
DEVFSP 110 7K 206
crypto 17 7K 70
sglist 6 7K 6
CAM DEV 3 6K 510
kcovinfo 90 6K 99
pf_ifnet 15 6K 35
pfs_nodes 22 6K 22
UMA 269 5K 269
vt 11 5K 11
memdesc 1 4K 1
MCA 32 4K 32
ufs_dirhash 8 4K 33
evdev 4 4K 4
inpcbpolicy 114 4K 850
acpisem 28 4K 28
tun 9 4K 9
lockf 30 4K 519
proc-args 129 4K 2627
ip6ndp 20 3K 26
CC Mem 23 3K 315
in_multi 11 3K 17
terminal 11 3K 11
sctp_ifa 21 3K 23
newdirblk 20 3K 404
diradd 20 3K 738
uidinfo 5 3K 11
acpidev 20 3K 20
hhook 8 3K 10
clone 9 3K 9
mkdir 17 3K 808
pf_rule 1 2K 2
local_apic 1 2K 1
io_apic 1 2K 1
ipsec-saq 2 2K 2
Unitno 38 2K 379
session 13 2K 67
CAM XPT 22 2K 543
sctp_timw 6 2K 6
nhops 6 2K 10
toponodes 6 2K 6
ipsecpolicy 2 2K 2
mld 11 2K 11
BPF 11 2K 49
ip6opt 8 2K 46
sctp_ifn 10 2K 23
indirdep 5 2K 524
igmp 10 2K 10
msi 9 2K 9
netlink 2 2K 160
sctp_stri 2 1K 8
softdep 1 1K 1
sahead 1 1K 1
secasvar 1 1K 1
vnodemarker 2 1K 52
NFSD session 1 1K 1
sctp_atky 24 1K 257
osd 28 1K 329
CAM periph 4 1K 271
cryptodev 13 1K 169
tcp_pcm_rack 3 1K 14
ipsec 3 1K 3
dirrem 3 1K 703
pfil 6 1K 6
isadev 6 1K 6
pci_link 10 1K 10
encap_export_host 12 1K 12
selfd 10 1K 104675
ktls 7 1K 44
sctp_aadr 8 1K 10
select 4 1K 76
cdev 2 1K 2
lkpikmalloc 8 1K 9
ip_msource 7 1K 19
counter_rate 13 1K 13
ktls_ocf 3 1K 9
chacha20random 1 1K 1
biobuf 1 1K 1
eventfd 3 1K 11
sctp_athm 20 1K 244
freework 2 1K 1078
DEVFS 10 1K 11
freeblks 1 1K 464
in_mfilter 6 1K 32
inotify 1 1K 65
vnodes 1 1K 11
NFSD lckfile 1 1K 1
NFSD V4client 1 1K 1
CAM SIM 2 1K 2
feeder 7 1K 7
tcpfunc 3 1K 3
loginclass 3 1K 5
prison 6 1K 6
sctp_map 8 1K 22
nexusdev 8 1K 8
apmdev 1 1K 1
atkbddev 2 1K 2
freefile 1 1K 554
ip6_msource 2 1K 9
in6_mfilter 2 1K 18
ip_moptions 2 1K 12
VN POLL 1 1K 18
aio 4 1K 6
pmchooks 1 1K 1
filedesc_to_leader 2 1K 7
CAM path 4 1K 1034
CAM dev queue 2 1K 2
CAM I/O Scheduler 1 1K 1
ip6_moptions 3 1K 11
sctp_vrf 1 1K 1
vnet 1 1K 1
fadvise 2 1K 8
accf 1 1K 1
pmc 1 1K 1
sigio 1 1K 8
entropy 2 1K 42
acpiintr 1 1K 1
DEVFS4 2 1K 2
cpus 2 1K 2
vnet_data_free 1 1K 1
Per-cpu 1 1K 1
p1003.1b 1 1K 1
ext2_mount 0 0K 0
ext2_node 0 0K 0
ext2_extents 0 0K 0
tcp_do_rack 0 0K 0
ipcomp 0 0K 0
esp 0 0K 0
ah 0 0K 0
mqdata 0 0K 0
sctp_mcore 0 0K 0
sctp_socko 0 0K 59
sctp_iter 0 0K 19
sctp_mvrf 0 0K 0
sctp_cpal 0 0K 0
sctp_cmsg 0 0K 0
sctp_stre 0 0K 0
sctp_athi 0 0K 0
sctp_a_it 0 0K 19
pf_table 0 0K 0
pf_altq 0 0K 0
pf_osfp 0 0K 0
pf_krule_item 0 0K 0
pf_temp 0 0K 0
madt_table 0 0K 2
smartpqi 0 0K 0
ixl 0 0K 0
ice-resmgr 0 0K 0
ice-osdep 0 0K 0
ice 0 0K 0
iavf 0 0K 0
axgbe 0 0K 0
fpukern_ctx 0 0K 0
xen_intr 0 0K 0
xen_hvm 0 0K 0
legacydrv 0 0K 0
NMI handlers 0 0K 0
bounce 0 0K 0
busdma 0 0K 0
qpidrv 0 0K 0
dmar_idpgtbl 0 0K 0
dmar_dom 0 0K 0
dmar_ctx 0 0K 0
amdiommu_dom 0 0K 0
amdiommu_ctx 0 0K 0
isci 0 0K 0
iommu_dmamap 0 0K 0
hyperv_socket 0 0K 0
bxe_ilt 0 0K 0
aesni_data 0 0K 2
xenbus 0 0K 0
vm_fictitious 0 0K 0
UMAHash 0 0K 0
vm_pgdata 0 0K 0
jblocks 0 0K 0
savedino 0 0K 794
sentinel 0 0K 0
jfsync 0 0K 0
jtrunc 0 0K 0
sbdep 0 0K 25
jsegdep 0 0K 0
jseg 0 0K 0
jfreefrag 0 0K 0
jfreeblk 0 0K 0
jnewblk 0 0K 0
jmvref 0 0K 0
jremref 0 0K 0
jaddref 0 0K 0
freedep 0 0K 0
freefrag 0 0K 309
allocindir 0 0K 0
allocdirect 0 0K 0
ufs_trim 0 0K 0
mactemp 0 0K 0
audit_trigger 0 0K 0
audit_pipe_presel 0 0K 0
audit_pipeent 0 0K 0
audit_pipe 0 0K 0
audit_evname 0 0K 0
audit_bsm 0 0K 0
audit_gidset 0 0K 0
audit_text 0 0K 0
audit_path 0 0K 0
audit_data 0 0K 0
audit_cred 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5E_TLS_RX 0 0K 0
MLX5EEPROM 0 0K 0
MLX5E_TLS 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EN 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5DUMP 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
MLX5EEPROM 0 0K 0
simple_attr 0 0K 0
seq_file 0 0K 0
lkpiskb 0 0K 0
radix 0 0K 0
idr 0 0K 0
lkpindev 0 0K 0
lkpimhi 0 0K 0
lkpifw 0 0K 0
lkpi80211 0 0K 0
NLM 0 0K 0
ipsec-spdcache 0 0K 0
ipsec-reg 0 0K 0
ipsec-misc 0 0K 0
ipsecrequest 0 0K 0
frag6 0 0K 17
tcplog 0 0K 0
tcp_hwpace 0 0K 0
ipid 0 0K 0
80211scan 0 0K 0
80211ratectl 0 0K 0
80211power 0 0K 0
80211nodeie 0 0K 0
80211node 0 0K 0
80211mesh_gt 0 0K 0
80211mesh_rt 0 0K 0
80211perr 0 0K 0
80211prep 0 0K 0
80211preq 0 0K 0
80211dfs 0 0K 0
80211crypto 0 0K 0
80211vap 0 0K 0
iflib 0 0K 0
vlan 0 0K 0
gif 0 0K 0
ifdescr 0 0K 0
zlib 0 0K 26
statfs 0 0K 238
namei_tracker 0 0K 5
export_host 0 0K 0
cl_savebuf 0 0K 142
lio 0 0K 17
acl 0 0K 0
soname 0 0K 3809
mbuf_tag 0 0K 0
pts 0 0K 0
timerfd 0 0K 0
procdesc 0 0K 12
iov 0 0K 17809
ioctlops 0 0K 195
Witness 0 0K 0
stack 0 0K 0
sbuf 0 0K 460
firmware 0 0K 0
compressor 0 0K 0
SWAP 0 0K 0
sysctltmp 0 0K 692
sysctl 0 0K 3
ekcd 0 0K 0
dumper 0 0K 0
sendfile 0 0K 80
rctl 0 0K 0
cache 0 0K 0
prison_racct 0 0K 0
Fail Points 0 0K 0
filecaps 0 0K 94
pwd 0 0K 0
tty console 0 0K 0
boottrace 0 0K 0
isofs_node 0 0K 0
isofs_mount 0 0K 0
tr_raid5_data 0 0K 0
tr_raid1e_data 0 0K 0
tr_raid1_data 0 0K 0
tr_raid0_data 0 0K 0
tr_concat_data 0 0K 0
md_sii_data 0 0K 0
md_promise_data 0 0K 0
md_nvidia_data 0 0K 0
md_jmicron_data 0 0K 0
md_intel_data 0 0K 0
md_ddf_data 0 0K 0
raid_data 0 0K 72
geom_flashmap 0 0K 0
tmpfs dir 0 0K 0
tmpfs name 0 0K 0
tmpfs mount 0 0K 0
tmpfs extattr 0 0K 0
NFS FHA 0 0K 0
newnfsmnt 0 0K 0
newnfsclient_req 0 0K 0
NFSCL layrecall 0 0K 0
NFSCL session 0 0K 0
NFSCL sockreq 0 0K 0
NFSCL devinfo 0 0K 0
NFSCL flayout 0 0K 0
NFSCL layout 0 0K 0
NFSD rollback 0 0K 0
NFSCL diroff 0 0K 0
NEWNFSnode 0 0K 0
NFSCL lck 0 0K 0
NFSCL lckown 0 0K 0
NFSCL client 0 0K 0
NFSCL deleg 0 0K 0
NFSCL open 0 0K 0
NFSCL owner 0 0K 0
NFS fh 0 0K 0
NFS req 0 0K 0
NFSD usrgroup 0 0K 0
NFSD string 0 0K 0
NFSD V4lock 0 0K 0
NFSD V4state 0 0K 0
msdosfs_fat 0 0K 0
msdosfs_mount 0 0K 0
msdosfs_node 0 0K 0
DEVFS2 0 0K 0
gntdev 0 0K 0
privcmd_dev 0 0K 0
evtchn_dev 0 0K 0
xenstore 0 0K 0
xnb 0 0K 0
xen_acpi 0 0K 0
xbbd 0 0K 0
xbd 0 0K 0
Balloon 0 0K 0
sysmouse 0 0K 0
vtfont 0 0K 0
pvscsi 0 0K 0
USBdev 0 0K 0
USB 0 0K 0
twsbuf 0 0K 0
tcp_log_dev 0 0K 3
midi buffers 0 0K 0
mixer 0 0K 0
ac97 0 0K 0
hdacc 0 0K 0
hdac 0 0K 0
hdaa 0 0K 0
SIIS driver 0 0K 0
PUC 0 0K 0
ppbusdev 0 0K 0
sr_iov 0 0K 0
OCS 0 0K 0
OCS 0 0K 0
nvme 0 0K 0
nvd 0 0K 0
netmap 0 0K 0
mwldev 0 0K 0
MVS driver 0 0K 0
mpi3mrbuf 0 0K 0
mrsasbuf 0 0K 0
mpt_user 0 0K 0
mps_user 0 0K 0
MPSSAS 0 0K 0
mps 0 0K 0
mpr_user 0 0K 0
MPRSAS 0 0K 0
mpr 0 0K 0
mfibuf 0 0K 0
md_sectors 0 0K 0
md_disk 0 0K 5
malodev 0 0K 0
LED 0 0K 0
ix_sriov 0 0K 0
ix 0 0K 0
ipsbuf 0 0K 0
ciss_data 0 0K 0
BACKLIGHT 0 0K 0
ath_hal 0 0K 0
athdev 0 0K 0
ata_pci 0 0K 0
ata_dma 0 0K 0
ata_generic 0 0K 0
AHCI driver 0 0K 0
agp 0 0K 0
acpipwr 0 0K 0
acpi_perf 0 0K 0
acpicmbat 0 0K 0
aacraidcam 0 0K 0
aacraid_buf 0 0K 0
aaccam 0 0K 0
aacbuf 0 0K 0
zstd 0 0K 0
XZ_DEC 0 0K 0
nvlist 0 0K 371
SCSI ENC 0 0K 0
SCSI sa 0 0K 0
scsi_pass 0 0K 0
scsi_da 0 0K 70
ata_da 0 0K 0
scsi_ch 0 0K 0
scsi_cd 0 0K 0
nvme_da 0 0K 0
CAM CCB 0 0K 523
CAM ccb queue 0 0K 0
db> show uma
Zone Size Used Free Requests Sleeps Bucket Total Mem XFree
mbuf_jumbo_page 4096 8320 0 17385 0 2 34078720 0
RADIX NODE 152 12189 14066 548254 0 62 3990760 0
mbuf 256 9965 322 49819 0 254 2633472 0
BUF TRIE 152 365 11439 3204 0 62 1794208 0
malloc-384 384 4177 33 4446 0 30 1616640 0
malloc-128 128 11537 26 11594 0 126 1480064 0
malloc-4096 4096 339 0 1102 0 2 1388544 0
UMA Slabs 0 112 9357 1617 11733 0 126 1229088 0
malloc-16384 16384 70 0 442 0 1 1146880 0
malloc-65536 65536 16 0 25 0 1 1048576 0
vmem btag 56 15131 2908 18010 0 254 1010184 0
FFS inode 1168 628 23 1201 0 8 760368 0
pbuf 2624 0 210 0 0 2 551040 0
lkpicurr 168 2 3094 2 0 62 520128 0
malloc-4096 4096 111 0 1360 0 2 454656 0
VM OBJECT 248 1686 122 20353 0 62 448384 0
THREAD 1860 202 10 876 0 8 394320 0
tcp_log 416 847 8 56701 0 30 355680 0
VNODE 440 672 75 1248 0 30 328680 0
MAP ENTRY 96 2901 165 69524 0 126 294336 0
malloc-64 64 3871 161 3898 0 254 258048 0
malloc-16 16 14535 465 14922 0 254 240000 0
malloc-2048 2048 110 4 195 0 8 233472 0
malloc-32768 32768 7 0 7 0 1 229376 0
UMA Zones 768 241 3 241 0 16 187392 0
FPU_save_area 832 204 21 1245 0 16 187200 0
malloc-32 32 5447 349 6214 0 254 185472 0
FFS2 dinode 256 628 77 1201 0 62 180480 0
malloc-128 128 1324 71 26239 0 126 178560 0
lkpimm 56 1 3095 1 0 254 173376 0
PROC 1376 111 10 1359 0 8 166496 0
socket 1024 141 19 2508 0 16 163840 0
DEVCTL 1024 54 102 181 0 0 159744 0
malloc-1024 1024 148 4 219 0 16 155648 0
S VFS Cache 104 1052 391 1749 0 126 150072 0
filedesc0 1072 111 15 1424 0 8 135072 0
malloc-256 256 326 109 2332 0 62 111360 0
malloc-2048 2048 54 0 133 0 8 110592 0
malloc-128 128 683 92 1648 0 126 99200 0
malloc-16384 16384 6 0 7 0 1 98304 0
UMA Kegs 384 227 6 227 0 30 89472 0
malloc-256 256 266 79 1911 0 62 88320 0
malloc-128 128 474 208 1844 0 126 87296 0
malloc-2048 2048 21 15 1274 0 8 73728 0
VMSPACE 584 90 36 1321 0 16 73584 0
malloc-128 128 390 168 1946 0 126 71424 0
mbuf_cluster 2048 18 16 1054 0 8 69632 0
ertt_txseginfo 40 800 917 15530 0 254 68680 0
malloc-64 64 481 590 107251 0 254 68544 0
malloc-65536 65536 1 0 1 0 1 65536 0
malloc-65536 65536 1 0 9 0 1 65536 0
malloc-8192 8192 8 0 19 0 1 65536 0
malloc-384 384 146 24 841 0 30 65280 0
malloc-64 64 669 339 19054 0 254 64512 0
tcp_inpcb 1304 23 25 313 0 8 62592 0
malloc-256 256 87 153 4507 0 62 61440 0
malloc-64 64 593 352 2497 0 254 60480 0
malloc-8192 8192 7 0 14 0 1 57344 0
malloc-4096 4096 12 1 108 0 2 53248 0
Files 80 385 265 11434 0 126 52000 0
malloc-256 256 128 67 1889 0 62 49920 0
malloc-4096 4096 12 0 25 0 2 49152 0
ripcb 376 75 55 168 0 30 48880 0
pcpu-8 8 5234 398 5730 0 254 45056 0
pipe 736 28 27 416 0 16 40480 0
sctp_ep 1152 14 21 225 0 8 40320 0
malloc-384 384 33 67 916 0 30 38400 0
TURNSTILE 136 213 60 213 0 62 37128 0
PWD 40 71 838 450 0 254 36360 0
PGRP 120 23 274 81 0 126 35640 0
malloc-256 256 99 36 573 0 62 34560 0
udp_inpcb 408 12 69 344 0 30 33048 0
malloc-32768 32768 1 0 19 0 1 32768 0
malloc-16384 16384 2 0 2 0 1 32768 0
pcpu-64 64 501 11 501 0 254 32768 0
ksiginfo 112 112 176 353 0 126 32256 0
ttyinq 160 135 65 840 0 62 32000 0
malloc-128 128 66 182 484 0 126 31744 0
malloc-64 64 134 307 14953 0 254 28224 0
malloc-32 32 286 596 3042 0 254 28224 0
malloc-128 128 54 163 3885 0 126 27776 0
ttyoutq 256 72 33 448 0 62 26880 0
malloc-384 384 59 11 89 0 30 26880 0
malloc-384 384 65 5 89 0 30 26880 0
malloc-256 256 26 79 843 0 62 26880 0
32 Bucket 256 10 95 652172 0 62 26880 0
SLEEPQUEUE 88 213 75 213 0 126 25344 0
malloc-8192 8192 3 0 29 0 1 24576 0
malloc-4096 4096 6 0 309 0 2 24576 0
sctp_raddr 736 4 29 11 0 16 24288 0
malloc-64 64 112 266 394 0 254 24192 0
malloc-32 32 387 369 1276 0 254 24192 0
sctp_chunk 152 101 55 104 0 62 23712 0
routing nhops 256 42 48 54 0 62 23040 0
malloc-256 256 19 71 1084 0 62 23040 0
sctp_asoc 2256 4 6 11 0 4 22560 0
Mountpoints 2816 2 6 9 0 4 22528 0
256 Bucket 2048 5 5 434479 0 8 20480 0
rtentry 168 45 75 54 0 62 20160 0
malloc-64 64 124 191 1538 0 254 20160 0
malloc-32 32 81 549 8229 0 254 20160 0
malloc-256 256 22 53 149 0 62 19200 0
udplite_inpcb 408 4 41 25 0 30 18360 0
NAMEI 1024 8 8 18827 0 16 16384 0
malloc-16384 16384 1 0 1 0 1 16384 0
malloc-8192 8192 2 0 4 0 1 16384 0
malloc-8192 8192 2 0 2 0 1 16384 0
malloc-4096 4096 4 0 13 0 2 16384 0
malloc-1024 1024 8 8 1716 0 16 16384 0
malloc-1024 1024 12 4 173 0 16 16384 0
malloc-512 512 14 18 128 0 30 16384 0
64 Bucket 512 32 0 57318 0 30 16384 0
sctp_laddr 48 19 317 49 0 254 16128 0
ertt 72 23 201 313 0 126 16128 0
rl_entry 48 18 318 26 0 254 16128 0
malloc-32 32 87 417 183 0 254 16128 0
malloc-32 32 103 401 954 0 254 16128 0
malloc-32 32 157 347 1740 0 254 16128 0
malloc-32 32 32 472 188 0 254 16128 0
malloc-128 128 10 114 311 0 126 15872 0
unpcb 320 15 33 1368 0 30 15360 0
L VFS Cache 320 1 47 74 0 30 15360 0
malloc-2048 2048 4 2 196 0 8 12288 0
malloc-1024 1024 9 3 15 0 16 12288 0
malloc-64 64 9 180 45 0 254 12096 0
malloc-16 16 343 407 808 0 254 12000 0
malloc-16 16 94 656 1225 0 254 12000 0
malloc-16 16 15 735 6531 0 254 12000 0
malloc-16 16 277 473 5011 0 254 12000 0
malloc-16 16 38 712 24955 0 254 12000 0
8 Bucket 80 4 146 124290 0 126 12000 0
128 Bucket 1024 1 10 376 0 16 11264 0
vmem 1856 2 3 2 0 8 9280 0
malloc-8192 8192 1 0 1 0 1 8192 0
malloc-8192 8192 1 0 82 0 1 8192 0
malloc-8192 8192 1 0 28 0 1 8192 0
malloc-2048 2048 3 1 79 0 8 8192 0
malloc-1024 1024 3 5 43 0 16 8192 0
malloc-1024 1024 3 5 1802 0 16 8192 0
malloc-512 512 7 9 41 0 30 8192 0
malloc-512 512 3 13 112 0 30 8192 0
pcpu-16 16 8 504 8 0 254 8192 0
g_bio 408 0 20 16628 0 30 8160 0
tcp_bbr_pcb 896 1 8 14 0 16 8064 0
hostcache 64 4 122 4 0 254 8064 0
16 Bucket 144 1 55 19188 0 62 8064 0
malloc-16 16 15 485 155 0 254 8000 0
malloc-16 16 5 495 16 0 254 8000 0
tcp_rack_map 128 3 59 15 0 126 7936 0
kenv 258 17 13 1070 0 30 7740 0
ktls_session 256 3 27 10 0 62 7680 0
malloc-384 384 12 8 12 0 30 7680 0
malloc-384 384 2 18 346 0 30 7680 0
tcp_rack_pcb 1088 3 4 14 0 8 7616 0
mqnode 416 4 14 4 0 30 7488 0
cpuset 200 9 23 60 0 62 6400 0
mbuf_packet 256 18 0 2721 0 254 4608 0
epoch_record pcpu 256 4 12 4 0 62 4096 0
malloc-4096 4096 1 0 6 0 2 4096 0
malloc-2048 2048 1 1 13 0 8 4096 0
malloc-2048 2048 1 1 78 0 8 4096 0
malloc-1024 1024 4 0 4 0 16 4096 0
malloc-1024 1024 1 3 8 0 16 4096 0
malloc-512 512 1 7 111 0 30 4096 0
malloc-512 512 1 7 15 0 30 4096 0
malloc-512 512 2 6 52 0 30 4096 0
malloc-512 512 1 7 66 0 30 4096 0
pf tags 104 1 38 2 0 126 4056 0
vtnet_tx_hdr 24 0 167 6783 0 254 4008 0
KNOTE 160 2 23 146 0 62 4000 0
mqueue 248 1 15 1 0 62 3968 0
AIO 208 3 16 81 0 62 3952 0
itimer 352

---
This report is generated by a bot. It may contain errors.
See https://goo.gl/tpsmEJ for more information about syzbot.
syzbot engineers can be reached at syzk...@googlegroups.com.

syzbot will keep track of this issue. See:
https://goo.gl/tpsmEJ#status for how to communicate with syzbot.

If the report is already addressed, let syzbot know by replying with:
#syz fix: exact-commit-title

If you want to overwrite report's subsystems, reply with:
#syz set subsystems: new-subsystem
(See the list of subsystem names on the web dashboard)

If the report is a duplicate of another one, reply with:
#syz dup: exact-subject-of-another-report

If you want to undo deduplication, reply with:
#syz undup

syzbot

unread,
Dec 15, 2025, 5:31:20 AM12/15/25
to syzkaller-f...@googlegroups.com
Auto-closing this bug as obsolete.
Crashes did not happen for a while, no reproducer and no activity.
Reply all
Reply to author
Forward
0 new messages