syzbot


panic: handle_workitem_remove: file ino ADDR negative i_nlink -NUM

Status: fixed on 2025/07/29 23:20
Reported-by: syzbot+02cb048d48b51bcd9c41@syzkaller.appspotmail.com
Fix commit: 2bc355c0182a ufs: Pass the new parent inode number to ufs_dirrewrite()
First crash: 47d, last: 47d

Sample crash report:
panic: handle_workitem_remove: file ino 198646 negative i_nlink -1
cpuid = 0
time = 65553
KDB: stack backtrace:
db_trace_self_wrapper() at db_trace_self_wrapper+0xc6/frame 0xfffffe0056c597d0
kdb_backtrace() at kdb_backtrace+0xd0/frame 0xfffffe0056c59930
vpanic() at vpanic+0x257/frame 0xfffffe0056c59af0
panic() at panic+0xb5/frame 0xfffffe0056c59bb0
handle_workitem_remove() at handle_workitem_remove+0xd45/frame 0xfffffe0056c59cf0
process_worklist_item() at process_worklist_item+0x525/frame 0xfffffe0056c59e40
softdep_process_worklist() at softdep_process_worklist+0xfd/frame 0xfffffe0056c59e90
softdep_flush() at softdep_flush+0x1a4/frame 0xfffffe0056c59ef0
fork_exit() at fork_exit+0xcc/frame 0xfffffe0056c59f30
fork_trampoline() at fork_trampoline+0xe/frame 0xfffffe0056c59f30
--- trap 0, rip = 0, rsp = 0, rbp = 0 ---
KDB: enter: panic
[ thread pid 14 tid 100093 ]
Stopped at      kdb_enter+0x6e: movq    $0,0x25c45c7(%rip)
db> 
db> set $lines = 0
db> set $maxwidth = 0
db> show registers
cs                        0x20
ds                        0x3b
es                        0x3b
fs                        0x13
gs                        0x1b
ss                        0x28
rax                       0x12
rcx         0xfffffe0002bf1850
rdx                          0
rbx         0xffffffff827cb4c0  .str.27
rsp         0xfffffe0056c59910
rbp         0xfffffe0056c59930
rsi                          0
rdi         0xffffffff81614a99  printf+0x149
r8                           0
r9                  0xffffffff
r10         0x8c57daa690bc01a4
r11                       0x17
r12         0xfffffe00540c2780
r13         0xfffffffffffffffe
r14         0xffffffff827cb4c0  .str.27
r15                          0
rip         0xffffffff815fe5ce  kdb_enter+0x6e
rflags                    0x46
kdb_enter+0x6e: movq    $0,0x25c45c7(%rip)
db> show proc
Process 14 (bufdaemon) at 0xfffffe000780a5c0:
 state: NORMAL
 uid: 0  gids: 0
 parent: pid 0 at 0xffffffff83b4d060
 ABI: null
 flag: 0x10000284  flag2: 0
 reaper: 0xffffffff83b4d060 reapsubtree: 14
 sigparent: 20
 vmspace: 0xffffffff83b4e040
   (map 0xffffffff83b4e040)
   (map.pmap 0xffffffff83b4e0e0)
   (pmap 0xffffffff83b4e150)
 threads: 3
100079                   D       psleep  0xffffffff83cbfd60  [bufdaemon]
100082                   D       -       0xffffffff83001ec0  [bufspacedaemon-0]
100093                   Run     CPU 0                       [/ worker]
db> ps
  pid  ppid  pgrp   uid  state   wmesg   wchan               cmd
 2704   765   765     0  R       (threaded)                  syz-executor
103428                   RunQ                                syz-executor
103430                   RunQ                                syz-executor
 2703   763   763     0  R       (threaded)                  syz-executor
103407                   RunQ                                syz-executor
103429                   RunQ                                syz-executor
 2702  2586  2586     0  R       (threaded)                  syz-executor
103418                   RunQ                                syz-executor
103427                   S       uwait   0xfffffe006dd9d700  syz-executor
 2701   766   766     0  R       (threaded)                  syz-executor
103425                   RunQ                                syz-executor
103426                   S       uwait   0xfffffe006dd9d300  syz-executor
 2700     1  2586     0  S       uwait   0xfffffe006dd9d800  syz-executor
 2687     1  2586     0  S       uwait   0xfffffe007b231300  syz-executor
 2673     1   766     0  S       uwait   0xfffffe00791f1900  syz-executor
 2671     1  2586     0  S       uwait   0xfffffe007b230480  syz-executor
 2667     1  2586     0  S       uwait   0xfffffe006dd9db80  syz-executor
 2662     1   763     0  S       uwait   0xfffffe006dd9e900  syz-executor
 2661     1  2586     0  S       uwait   0xfffffe0080219280  syz-executor
 2643     1  2586     0  S       uwait   0xfffffe006dd9de80  syz-executor
 2636     0     0     0  DL      -       0xffffffff83b4e500  [accounting]
 2631     1   765     0  S       uwait   0xfffffe0080219c80  syz-executor
 2628  2617  2628     0  Ss      select  0xfffffe0086996440  dhclient
 2624     1  2624     0  Ss      select  0xfffffe0086996dc0  dhclient
 2618     1  2586     0  S       uwait   0xfffffe007b230c80  syz-executor
 2617  2605   423    65  S       select  0xfffffe00593eb1c0  dhclient
 2606     1   765     0  S       uwait   0xfffffe008021b300  syz-executor
 2605   423   423     0  S       wait    0xfffffe0082c85ac0  sh
 2586   762  2586     0  S       nanslp  0xffffffff83ba3c41  syz-executor
 2568     0     0     0  DL      mdwait  0xfffffe006dde6000  [md2]
 2559     1  2557     0  S       uwait   0xfffffe0080219780  syz-executor
 2554     1   765     0  S       uwait   0xfffffe007b230a80  syz-executor
 2543     1   766 60929  S       uwait   0xfffffe006dd9dc80  syz-executor
 2539     1   766     0  S       uwait   0xfffffe0080219980  syz-executor
 2533     1   763 60928  S       uwait   0xfffffe006dd9e700  syz-executor
 2525     1   766     0  S       uwait   0xfffffe007b231000  syz-executor
 2524     1   765     0  SV      uwait   0xfffffe007b230380  syz-executor
 2516     1   763     0  S       uwait   0xfffffe006dd9e400  syz-executor
 2489     1   766     0  S       uwait   0xfffffe006dd9e300  syz-executor
 2475     0     0     0  DL      (threaded)                  [so_splice]
103029                   D       -       0xfffffe007b230080  [thr_0]
103097                   D       -       0xfffffe007b2300c0  [thr_1]
 2471     1   764     0  S       uwait   0xfffffe006dd9ea00  syz-executor
 2468     1   763     0  S       uwait   0xfffffe008021b600  syz-executor
 2456     0     0     0  DL      mdwait  0xfffffe0078350000  [md1]
 2449     1   765     0  S       uwait   0xfffffe006dd9f080  syz-executor
 2432     1   765     0  S       uwait   0xfffffe007b231200  syz-executor
 2419     0     0     0  DL      mdwait  0xfffffe0078102000  [md0]
 2410     1   763     0  S       uwait   0xfffffe007b231100  syz-executor
 2409     1   765     0  S       uwait   0xfffffe007b231700  syz-executor
 2403     1   765     0  S       uwait   0xfffffe0080219380  syz-executor
 2392     1   765     0  S       uwait   0xfffffe00791f1b00  syz-executor
 2388     1   763     0  S       uwait   0xfffffe0059624e80  syz-executor
 2387     1   766     0  S       uwait   0xfffffe008021ae00  syz-executor
 2381     1   766     0  S       uwait   0xfffffe0059624680  syz-executor
 2379     1   766     0  S       uwait   0xfffffe00791f1f00  syz-executor
 2364     1   765     0  S       uwait   0xfffffe007b231500  syz-executor
 2172     1   764 60928  S       uwait   0xfffffe0059624580  syz-executor
 2159     1   765 60928  S       uwait   0xfffffe00791f1500  syz-executor
 2103     1   765 60928  S       uwait   0xfffffe006dd9ee00  syz-executor
 2067     1  2058     0  SV      uwait   0xfffffe0080219480  syz-executor
 2064     1  2058     0  S       uwait   0xfffffe00791ee600  syz-executor
 2063     1   765 60928  S       uwait   0xfffffe00791f1800  syz-executor
 2054     1  2050     0  SV      uwait   0xfffffe0059624480  syz-executor
 2053     1  2050     0  S       uwait   0xfffffe00791f1c00  syz-executor
 2021     1  2017     0  SV      uwait   0xfffffe0080219580  syz-executor
 2020     1  2017     0  S       uwait   0xfffffe0080219a80  syz-executor
 2005     1  2000     0  S       uwait   0xfffffe008021b500  syz-executor
 1991     1   763     0  SV      uwait   0xfffffe006dd9e600  syz-executor
 1990     1  1985     0  S       uwait   0xfffffe00791f0580  syz-executor
 1981     1   763     0  SV      uwait   0xfffffe008021a900  syz-executor
 1979     1  1977     0  S       uwait   0xfffffe0059624b80  syz-executor
 1974     1  1973     0  S       uwait   0xfffffe006dd9ef00  syz-executor
 1897     1  1894     0  S       uwait   0xfffffe0080219880  syz-executor
 1876     1  1873     0  S       uwait   0xfffffe006dd9f380  syz-executor
 1870     1  1867     0  S       uwait   0xfffffe006dd9f280  syz-executor
 1854     1  1851     0  S       uwait   0xfffffe008021b900  syz-executor
 1841     1  1840     0  S       uwait   0xfffffe00791ee700  syz-executor
 1836     1  1836    65  Ss      select  0xfffffe0057d69d40  dhclient
 1814     1  1811     0  S       uwait   0xfffffe008021a500  syz-executor
 1809     1  1804     0  S       uwait   0xfffffe008021aa00  syz-executor
 1807     1  1805     0  S       uwait   0xfffffe006dd9f180  syz-executor
 1802     1  1799     0  S       uwait   0xfffffe0053e0e580  syz-executor
 1788     1  1780     0  S       uwait   0xfffffe008021ab00  syz-executor
 1781     1  1778     0  S       uwait   0xfffffe008021af00  syz-executor
 1777     1  1773     0  SV      uwait   0xfffffe0059624780  syz-executor
 1775     1  1773     0  S       uwait   0xfffffe00791ef900  syz-executor
 1769     1  1768     0  S       uwait   0xfffffe008021a300  syz-executor
 1757     1  1755     0  S       uwait   0xfffffe006dd9f480  syz-executor
 1752     1  1749     0  S       uwait   0xfffffe008021b200  syz-executor
 1732     1  1730     0  S       uwait   0xfffffe00791ee200  syz-executor
 1726     1  1724     0  S       uwait   0xfffffe008021c080  syz-executor
 1721     1  1717     0  S       uwait   0xfffffe008021b700  syz-executor
 1700     1  1699     0  S       uwait   0xfffffe008021ba00  syz-executor
 1695     1  1690     0  S       uwait   0xfffffe00791ee100  syz-executor
 1666     1  1665     0  S       uwait   0xfffffe00791ee500  syz-executor
 1663     1  1663     0  Ss      select  0xfffffe0057d69f40  dhclient
 1657     1  1657     0  Ss      select  0xfffffe00593ea140  dhclient
 1628     1  1628    65  Ss      select  0xfffffe006e4df440  dhclient
 1619     1  1616     0  S       uwait   0xfffffe0059624a80  syz-executor
 1617     1  1614     0  S       uwait   0xfffffe0053e0e280  syz-executor
 1607     1  1605     0  S       uwait   0xfffffe0053e0e680  syz-executor
 1590     1  1588     0  S       uwait   0xfffffe008021c480  syz-executor
 1585     1  1583     0  S       uwait   0xfffffe008021c580  syz-executor
 1579     1  1577     0  S       uwait   0xfffffe008021bb00  syz-executor
 1563     1  1560     0  S       uwait   0xfffffe0059624c80  syz-executor
 1556     1  1553     0  S       uwait   0xfffffe00791ee800  syz-executor
 1537     1  1531     0  S       uwait   0xfffffe00791ee900  syz-executor
 1534     1  1530     0  S       uwait   0xfffffe00791eea00  syz-executor
 1520     1  1517     0  S       uwait   0xfffffe0053e0e180  syz-executor
 1518     1  1515     0  S       uwait   0xfffffe0053e0ea80  syz-executor
 1511     1   763 60928  S       uwait   0xfffffe0058257a00  syz-executor
 1503     1  1500     0  S       uwait   0xfffffe0053e0ee80  syz-executor
 1502     1  1499     0  SV      uwait   0xfffffe00791f0780  syz-executor
 1501     1  1499     0  S       uwait   0xfffffe00791ef800  syz-executor
 1496     1   764     0  S       uwait   0xfffffe0053e0eb80  syz-executor
 1480     1  1477     0  S       uwait   0xfffffe0058257300  syz-executor
 1473     1  1468     0  S       uwait   0xfffffe00791f0880  syz-executor
 1464     1  1461     0  S       uwait   0xfffffe0053e0e480  syz-executor
 1458     1  1452     0  S       uwait   0xfffffe00791ef700  syz-executor
 1454     1  1447     0  S       uwait   0xfffffe00791ef400  syz-executor
 1449     1  1449     0  Ss      select  0xfffffe00593ec0c0  dhclient
 1448     1  1433     0  S       uwait   0xfffffe0058257f00  syz-executor
 1442     1  1442     0  Ss      select  0xfffffe00593ebf40  dhclient
 1419     1  1405     0  S       uwait   0xfffffe00598f8a80  syz-executor
 1412     1  1412    65  Ss      select  0xfffffe00593ec2c0  dhclient
 1408     1  1406     0  S       uwait   0xfffffe00791f0380  syz-executor
 1392     1   766     0  S       uwait   0xfffffe0058258180  syz-executor
 1382     1  1381     0  S       uwait   0xfffffe00791f1380  syz-executor
 1380     1  1377     0  SV      uwait   0xfffffe00791efd00  syz-executor
 1378     1  1377     0  S       uwait   0xfffffe00791efe00  syz-executor
 1376     1  1373     0  SV      uwait   0xfffffe0058257700  syz-executor
 1374     1  1373     0  S       umtxn   0xfffffe0053e0ed80  syz-executor
 1371     1  1365     0  S       uwait   0xfffffe0058258c80  syz-executor
 1370     1  1367     0  SV      uwait   0xfffffe0058258080  syz-executor
 1369     1  1367     0  S       uwait   0xfffffe00584eb880  syz-executor
 1350     1   766     0  S       uwait   0xfffffe0058257800  syz-executor
 1337     1  1330     0  S       uwait   0xfffffe0058257d00  syz-executor
 1333     1  1329     0  S       uwait   0xfffffe00791eff00  syz-executor
 1326     1  1321     0  SV      uwait   0xfffffe00598f6e80  syz-executor
 1324     1  1321     0  S       uwait   0xfffffe0058257c00  syz-executor
 1293     1  1291     0  S       uwait   0xfffffe00584eec00  syz-executor
 1285     1  1280     0  S       uwait   0xfffffe00584ec500  syz-executor
 1259     1  1249     0  SV      uwait   0xfffffe00791f0480  syz-executor
 1256     1  1249     0  S       uwait   0xfffffe00584ec400  syz-executor
 1255     1   766     0  S       uwait   0xfffffe0058257600  syz-executor
 1254     1  1246     0  SV      uwait   0xfffffe00584ebc00  syz-executor
 1252     1  1246     0  S       uwait   0xfffffe00791f1080  syz-executor
 1250     1   765 60928  S       uwait   0xfffffe0058257b00  syz-executor
 1247     1  1242     0  S       uwait   0xfffffe00791f1180  syz-executor
 1239     1  1236     0  S       uwait   0xfffffe0058258d80  syz-executor
 1237     1  1237     0  Ss      select  0xfffffe00593ebc40  dhclient
 1231     1  1231     0  Ss      select  0xfffffe006e4ded40  dhclient
 1214     1  1205     0  S       uwait   0xfffffe00598f6d80  syz-executor
 1210     1  1207     0  S       uwait   0xfffffe00791f0e00  syz-executor
 1193     1  1193    65  Ss      select  0xfffffe006e4df0c0  dhclient
 1185     1  1182     0  S       uwait   0xfffffe00598f7600  syz-executor
 1179     1  1175     0  S       uwait   0xfffffe0058258280  syz-executor
 1169     1  1167     0  S       uwait   0xfffffe005825a500  syz-executor
 1159     1  1156     0  S       uwait   0xfffffe0058259a80  syz-executor
 1147     1  1137     0  SV      uwait   0xfffffe0058258a80  syz-executor
 1144     1  1137     0  S       uwait   0xfffffe00584ee500  syz-executor
 1143     1  1136     0  S       uwait   0xfffffe00584ece00  syz-executor
 1139     1  1134     0  S       uwait   0xfffffe00584ec000  syz-executor
 1133     1  1130     0  S       uwait   0xfffffe00584ec600  syz-executor
 1120     1  1115     0  S       uwait   0xfffffe00584ec200  syz-executor
 1119     1  1117     0  S       uwait   0xfffffe0058258780  syz-executor
 1113     1  1107     0  S       uwait   0xfffffe0058259300  syz-executor
 1111     1  1102     0  SV      uwait   0xfffffe005825a800  syz-executor
 1110     1  1106     0  S       uwait   0xfffffe00584eb980  syz-executor
 1109     1  1102     0  S       uwait   0xfffffe0058259000  syz-executor
 1099     1  1093     0  S       uwait   0xfffffe00584ec900  syz-executor
 1094     1  1091     0  S       uwait   0xfffffe00584ec300  syz-executor
 1085     1  1080     0  SV      uwait   0xfffffe00584eb080  syz-executor
 1083     1  1080     0  S       uwait   0xfffffe00598f8b80  syz-executor
 1076     1  1066     0  S       uwait   0xfffffe00584ee700  syz-executor
 1073     1  1069     0  S       uwait   0xfffffe00584eb380  syz-executor
 1071     1  1067     0  S       uwait   0xfffffe005825a700  syz-executor
 1068     1  1064     0  S       uwait   0xfffffe0059624100  syz-executor
 1046     1  1037     0  S       uwait   0xfffffe00584ed080  syz-executor
 1038     1  1034     0  S       uwait   0xfffffe00598f6780  syz-executor
 1029     1  1026     0  S       uwait   0xfffffe00598f6680  syz-executor
 1005     1  1002     0  S       uwait   0xfffffe00584ee300  syz-executor
 1004     1  1001     0  S       uwait   0xfffffe00598f6180  syz-executor
 1000     1   998     0  SV      uwait   0xfffffe00584ee800  syz-executor
  999     1   998     0  S       uwait   0xfffffe00584ebd00  syz-executor
  988     1   988     0  Ss      select  0xfffffe00593ec440  dhclient
  981     1   981     0  Ss      select  0xfffffe006e4df040  dhclient
  979     1   766     0  S       uwait   0xfffffe0058259b80  syz-executor
  943     1   933     0  SV      uwait   0xfffffe00584eee00  syz-executor
  940     1   933     0  S       uwait   0xfffffe00598f8e80  syz-executor
  911     1   909     0  S       uwait   0xfffffe00598f6080  syz-executor
  904     0     0     0  DL      (threaded)                  [KTLS]
100154                   D       -       0xfffffe0053e1eb00  [thr_0]
100208                   D       -       0xfffffe0053e1eb80  [thr_1]
100209                   D       -       0xffffffff83cb5628  [reclaim_0]
  898     1   763     0  S       uwait   0xfffffe005825a300  syz-executor
  895     1   890     0  S       uwait   0xfffffe0058259c00  syz-executor
  891     1   888     0  S       uwait   0xfffffe0059624000  syz-executor
  842     0     0     0  DL      -       0xffffffff83cb3e00  [soaiod4]
  841     0     0     0  DL      -       0xffffffff83cb3e00  [soaiod3]
  840     0     0     0  DL      -       0xffffffff83cb3e00  [soaiod2]
  839     0     0     0  DL      -       0xffffffff83cb3e00  [soaiod1]
  838     1   763 60928  S       uwait   0xfffffe005825aa00  syz-executor
  832     1   812     0  SV      uwait   0xfffffe005825ab00  syz-executor
  830     1   812     0  S       uwait   0xfffffe005825ac00  syz-executor
  820     0     0     0  DL      aiordy  0xfffffe00540eaae0  [aiod4]
  819     0     0     0  DL      aiordy  0xfffffe00540eb040  [aiod3]
  817     0     0     0  DL      aiordy  0xfffffe00540eb5a0  [aiod2]
  816     0     0     0  DL      aiordy  0xfffffe00540ec060  [aiod1]
  815     1   802     0  S       uwait   0xfffffe00598f8780  syz-executor
  814     1   764     0  S       uwait   0xfffffe00598f8980  syz-executor
  766   762   766     0  S       nanslp  0xffffffff83ba3c40  syz-executor
  765   762   765     0  S       nanslp  0xffffffff83ba3c40  syz-executor
  763   762   763     0  S       nanslp  0xffffffff83ba3c40  syz-executor
  762   760   760     0  S       select  0xfffffe00593ed040  syz-executor
  760   758   760     0  Ss      sigsusp 0xfffffe00540ad670  csh
  758   681   758     0  Ss      select  0xfffffe00593ed240  sshd
  748     1   748     0  Ss+     ttyin   0xfffffe00582904b0  getty
  747     1   747     0  Ss+     ttyin   0xfffffe00585cd0b0  getty
  746     1   746     0  Ss+     ttyin   0xfffffe00585cd4b0  getty
  745     1   745     0  Ss+     ttyin   0xfffffe00585cd8b0  getty
  744     1   744     0  Ss+     ttyin   0xfffffe005828d4b0  getty
  743     1   743     0  Ss+     ttyin   0xfffffe005828d8b0  getty
  742     1   742     0  Ss+     ttyin   0xfffffe005828dcb0  getty
  741     1   741     0  Ss+     ttyin   0xfffffe00585cdcb0  getty
  740     1   740     0  Ss+     ttyin   0xfffffe00585ce0b0  getty
  685     1   685     0  Ss      nanslp  0xffffffff83ba3c40  cron
  681     1   681     0  Ss      select  0xfffffe00593ecd40  sshd
  494     1   494     0  Ss      select  0xfffffe0053ffbb40  syslogd
  423     1   423     0  Ss      wait    0xfffffe00540d0560  devd
  422     1   422    65  Ss      select  0xfffffe00593ecf40  dhclient
  337     1   337     0  Ss      select  0xfffffe0053ffba40  dhclient
  334     1   334     0  Ss      select  0xfffffe00593ed140  dhclient
   16     0     0     0  DL      syncer  0xffffffff83cc1820  [syncer]
   15     0     0     0  DL      vlruwt  0xfffffe000780a060  [vnlru]
   14     0     0     0  RL      (threaded)                  [bufdaemon]
100079                   D       psleep  0xffffffff83cbfd60  [bufdaemon]
100082                   D       -       0xffffffff83001ec0  [bufspacedaemon-0]
100093                   Run     CPU 0                       [/ worker]
    9     0     0     0  DL      psleep  0xffffffff83d0acc0  [vmdaemon]
    8     0     0     0  DL      (threaded)                  [pagedaemon]
100077                   D       psleep  0xffffffff83cf0d88  [dom0]
100080                   D       launds  0xffffffff83cf0d94  [laundry: dom0]
100081                   D       umarcl  0xffffffff81de0e10  [uma]
    7     0     0     0  DL      -       0xffffffff8391c5d8  [rand_harvestq]
    6     0     0     0  DL      pftm    0xffffffff8476b9e0  [pf purge]
    5     0     0     0  DL      waiting 0xffffffff8449b700  [sctp_iterator]
    4     0     0     0  RL      (threaded)                  [cam]
100045                   RunQ                                [doneq0]
100046                   D       -       0xffffffff838e62c0  [async]
100075                   D       -       0xffffffff838e6140  [scanner]
    3     0     0     0  DL      (threaded)                  [crypto]
100042                   D       crypto_ 0xffffffff83cec640  [crypto]
100043                   D       crypto_ 0xfffffe0057d43030  [crypto returns 0]
100044                   D       crypto_ 0xfffffe0057d43080  [crypto returns 1]
   13     0     0     0  DL      (threaded)                  [geom]
100037                   D       -       0xffffffff83b4c620  [g_event]
100038                   D       -       0xffffffff83b4c640  [g_up]
100039                   D       -       0xffffffff83b4c660  [g_down]
    2     0     0     0  WL      (threaded)                  [clock]
100031                   I                                   [clock (0)]
100032                   I                                   [clock (1)]
   12     0     0     0  WL      (threaded)                  [intr]
100013                   I                                   [swi6: task queue]
100014                   I                                   [swi6: Giant taskq]
100016                   I                                   [swi5: fast taskq]
100033                   I                                   [swi1: netisr 0]
100034                   I                                   [swi1: hpts]
100035                   I                                   [swi1: hpts]
100047                   I                                   [irq24: virtio_pci0]
100048                   I                                   [irq25: virtio_pci0]
100049                   I                                   [irq26: virtio_pci0]
100050                   I                                   [irq27: virtio_pci0]
100051                   I                                   [irq28: virtio_pci1]
100052                   I                                   [irq29: virtio_pci1]
100053                   I                                   [irq30: virtio_pci1]
100054                   I                                   [irq31: virtio_pci1]
100055                   I                                   [irq32: virtio_pci1]
100060                   I                                   [irq10: virtio_pci2]
100062                   I                                   [irq1: atkbd0]
100063                   I                                   [irq12: psm0]
100064                   I                                   [swi0: uart uart++]
100068                   I                                   [swi1: pf send]
   11     0     0     0  RL      (threaded)                  [idle]
100003                   CanRun                              [idle: cpu0]
100004                   CanRun                              [idle: cpu1]
    1     0     1     0  SLs     wait    0xfffffe0007809040  [init]
   10     0     0     0  DL      audit_w 0xffffffff83ced0e0  [audit]
    0     0     0     0  DLs     (threaded)                  [kernel]
100000                   D       parked  0xffffffff84c3dff0  [swapper]
100005                   D       -       0xfffffe000776cd00  [softirq_0]
100006                   D       -       0xfffffe000776cb00  [softirq_1]
100007                   D       -       0xfffffe000776c900  [if_io_tqg_0]
100008                   D       -       0xfffffe000776c700  [if_io_tqg_1]
100009                   D       -       0xfffffe000776c500  [if_config_tqg_0]
100010                   D       -       0xfffffe00083db100  [kqueue_ctx taskq]
100011                   D       -       0xfffffe00083db000  [jail_remove taskq]
100012                   D       -       0xfffffe00083dae00  [bus taskq]
100015                   D       -       0xfffffe00083da900  [thread taskq]
100017                   D       -       0xfffffe00083da600  [aiod_kick taskq]
100018                   D       -       0xfffffe00083da500  [deferred_unmount ta]
100019                   D       -       0xfffffe00083da400  [inm_free taskq]
100020                   D       -       0xfffffe00083da300  [in6m_free taskq]
100021                   D       -       0xfffffe00083da200  [linuxkpi_irq_wq]
100022                   D       -       0xfffffe00083da100  [linuxkpi_short_wq_0]
100023                   D       -       0xfffffe00083da100  [linuxkpi_short_wq_1]
100024                   D       -       0xfffffe00083da100  [linuxkpi_short_wq_2]
100025                   D       -       0xfffffe00083da100  [linuxkpi_short_wq_3]
100026                   D       -       0xfffffe00083da000  [linuxkpi_long_wq_0]
100027                   D       -       0xfffffe00083da000  [linuxkpi_long_wq_1]
100028                   D       -       0xfffffe00083da000  [linuxkpi_long_wq_2]
100029                   D       -       0xfffffe00083da000  [linuxkpi_long_wq_3]
100036                   D       -       0xfffffe00083d9900  [firmware taskq]
100040                   D       -       0xfffffe0057d47300  [crypto_0]
100041                   D       -       0xfffffe0057d47300  [crypto_1]
100056                   D       -       0xfffffe00083dd200  [vtnet0 rxq 0]
100057                   D       -       0xfffffe0058145500  [vtnet0 txq 0]
100058                   D       -       0xfffffe0058145400  [vtnet0 rxq 1]
100059                   D       -       0xfffffe0058145300  [vtnet0 txq 1]
100061                   D       vtbslp  0xfffffe0057d67400  [virtio_balloon]
100065                   D       -       0xffffffff827cfba0  [deadlkres]
100069                   D       -       0xfffffe0057d46e00  [acpi_task_0]
100070                   D       -       0xfffffe0057d46e00  [acpi_task_1]
100071                   D       -       0xfffffe0057d46e00  [acpi_task_2]
100073                   D       -       0xfffffe00083dca00  [mca taskq]
100074                   D       -       0xfffffe0057d46b00  [CAM taskq]
100076                   D       -       0xfffffe0057d47000  [ipsec_offload]
100124                   D       -       0xfffffe006e48f300  [netlink_socket (PID]
100128                   D       -       0xfffffe006e48ec00  [netlink_socket (PID]
100178                   D       -       0xfffffe005965c600  [netlink_socket (PID]
100185                   D       -       0xfffffe005965c500  [netlink_socket (PID]
100220                   D       -       0xfffffe006e48b800  [netlink_socket (PID]
100249                   D       -       0xfffffe006e48e700  [netlink_socket (PID]
100306                   D       -       0xfffffe006e48ba00  [netlink_socket (PID]
100313                   D       -       0xfffffe006e48b900  [netlink_socket (PID]
100317                   D       -       0xfffffe0059659800  [netlink_socket (PID]
100361                   D       -       0xfffffe006e490400  [netlink_socket (PID]
100374                   D       -       0xfffffe006e490200  [netlink_socket (PID]
100382                   D       -       0xfffffe0059659e00  [netlink_socket (PID]
100420                   D       -       0xfffffe005965c300  [netlink_socket (PID]
100429                   D       -       0xfffffe006e48fe00  [netlink_socket (PID]
100431                   D       -       0xfffffe005965bd00  [netlink_socket (PID]
100434                   D       -       0xfffffe006e48fd00  [netlink_socket (PID]
100448                   D       -       0xfffffe005965c900  [netlink_socket (PID]
100470                   D       -       0xfffffe006e48f800  [netlink_socket (PID]
100475                   D       -       0xfffffe005965c100  [netlink_socket (PID]
100495                   D       -       0xfffffe005965c200  [netlink_socket (PID]
100500                   D       -       0xfffffe005965b800  [netlink_socket (PID]
100504                   D       -       0xfffffe005965bc00  [netlink_socket (PID]
100519                   D       -       0xfffffe005965b600  [netlink_socket (PID]
100520                   D       -       0xfffffe006e48e000  [netlink_socket (PID]
100543                   D       -       0xfffffe00598c8600  [netlink_socket (PID]
100549                   D       -       0xfffffe006e48dc00  [netlink_socket (PID]
100553                   D       -       0xfffffe005965a100  [netlink_socket (PID]
100554                   D       -       0xfffffe006e48db00  [netlink_socket (PID]
100582                   D       -       0xfffffe005965a300  [netlink_socket (PID]
100612                   D       -       0xfffffe006e48d700  [netlink_socket (PID]
100626                   D       -       0xfffffe006e490800  [netlink_socket (PID]
100646                   D       -       0xfffffe006e48d400  [netlink_socket (PID]
100649                   D       -       0xfffffe006e48d300  [netlink_socket (PID]
100683                   D       -       0xfffffe006e48d000  [netlink_socket (PID]
100690                   D       -       0xfffffe006e48d100  [netlink_socket (PID]
100702                   D       -       0xfffffe006e3ba600  [netlink_socket (PID]
100707                   D       -       0xfffffe006e48cd00  [netlink_socket (PID]
100769                   D       -       0xfffffe00598c8200  [netlink_socket (PID]
100790                   D       -       0xfffffe006e360800  [netlink_socket (PID]
100840                   D       -       0xfffffe006e3ba700  [netlink_socket (PID]
100859                   D       -       0xfffffe006e3ba800  [netlink_socket (PID]
100921                   D       -       0xfffffe006e48c900  [netlink_socket (PID]
100924                   D       -       0xfffffe006e48ca00  [netlink_socket (PID]
100936                   D       -       0xfffffe006e48f700  [netlink_socket (PID]
100946                   D       -       0xfffffe006e490100  [netlink_socket (PID]
100952                   D       -       0xfffffe006e490000  [netlink_socket (PID]
100998                   D       -       0xfffffe005965be00  [netlink_socket (PID]
101002                   D       -       0xfffffe006e48fb00  [netlink_socket (PID]
101023                   D       -       0xfffffe006e35fd00  [netlink_socket (PID]
101033                   D       -       0xfffffe006e35fe00  [netlink_socket (PID]
101036                   D       -       0xfffffe006e48e300  [netlink_socket (PID]
101051                   D       -       0xfffffe006e48e100  [netlink_socket (PID]
101064                   D       -       0xfffffe006e48dd00  [netlink_socket (PID]
101083                   D       -       0xfffffe006e37e200  [netlink_socket (PID]
101123                   D       -       0xfffffe006e3ba900  [netlink_socket (PID]
101129                   D       -       0xfffffe006e35fa00  [netlink_socket (PID]
101157                   D       -       0xfffffe006e35f800  [netlink_socket (PID]
101159                   D       -       0xfffffe006e490a00  [netlink_socket (PID]
101194                   D       -       0xfffffe006e48d600  [netlink_socket (PID]
101196                   D       -       0xfffffe006e48ce00  [netlink_socket (PID]
101240                   D       -       0xfffffe00598c8300  [netlink_socket (PID]
101259                   D       -       0xfffffe006e360700  [netlink_socket (PID]
101296                   D       -       0xfffffe006e490500  [netlink_socket (PID]
101312                   D       -       0xfffffe006e490900  [netlink_socket (PID]
101325                   D       -       0xfffffe00598cba00  [netlink_socket (PID]
101361                   D       -       0xfffffe006e37dd00  [netlink_socket (PID]
101377                   D       -       0xfffffe006e37db00  [netlink_socket (PID]
101381                   D       -       0xfffffe006e35f400  [netlink_socket (PID]
101429                   D       -       0xfffffe006e3bac00  [netlink_socket (PID]
101482                   D       -       0xfffffe006e3ba500  [netlink_socket (PID]
101495                   D       -       0xfffffe006e48bc00  [netlink_socket (PID]
101538                   D       -       0xfffffe00083d9700  [netlink_socket (PID]
101554                   D       -       0xfffffe00598c7e00  [netlink_socket (PID]
101573                   D       -       0xfffffe00598c8a00  [netlink_socket (PID]
101627                   D       -       0xfffffe006e37da00  [netlink_socket (PID]
101637                   D       -       0xfffffe006e48de00  [netlink_socket (PID]
101658                   D       -       0xfffffe005965b400  [netlink_socket (PID]
101670                   D       -       0xfffffe00083d9500  [netlink_socket (PID]
101684                   D       -       0xfffffe00598c9000  [netlink_socket (PID]
101689                   D       -       0xfffffe00598c8100  [netlink_socket (PID]
101732                   D       -       0xfffffe006e35f900  [netlink_socket (PID]
101744                   D       -       0xfffffe006e37e000  [netlink_socket (PID]
101747                   D       -       0xfffffe006e48f900  [netlink_socket (PID]
101753                   D       -       0xfffffe00598c7c00  [netlink_socket (PID]
101811                   D       -       0xfffffe006e490700  [netlink_socket (PID]
101841                   D       -       0xfffffe006e48d900  [netlink_socket (PID]
101867                   D       -       0xfffffe006e35f500  [netlink_socket (PID]
101884                   D       -       0xfffffe006e490300  [netlink_socket (PID]
101923                   D       -       0xfffffe006e360000  [netlink_socket (PID]
102091                   D       -       0xfffffe005965bb00  [netlink_socket (PID]
102105                   D       -       0xfffffe00598c7a00  [netlink_socket (PID]
102121                   D       -       0xfffffe006e48cb00  [netlink_socket (PID]
102148                   D       -       0xfffffe006e37d900  [netlink_socket (PID]
102187                   D       -       0xfffffe006e48bb00  [netlink_socket (PID]
102256                   D       -       0xfffffe006e35f300  [netlink_socket (PID]
102274                   D       -       0xfffffe00083d9600  [netlink_socket (PID]
db> show all locks
Process 14 (bufdaemon) thread 0xfffffe00540c2780 (100093)
exclusive rw SUrw (SUrw) r = 0 (0xfffffe0059871c00) locked @ /syzkaller/managers/main/kernel/sys/ufs/ffs/ffs_softdep.c:10022
exclusive lockmgr ufs (ufs) r = 0 (0xfffffe0080d5c598) locked @ /syzkaller/managers/main/kernel/sys/kern/vfs_subr.c:3384
db> show malloc
              Type        InUse        MemUse     Requests
         sctp_stro          113       382592K          205
           pf_hash            6        12804K            6
            linker          376         5079K          921
          tcp_hpts            7         4801K            7
            devbuf         4187         4323K         4218
          filedesc          342         2734K         3266
         sysctloid        35338         2082K        35413
             vtbuf           24         1968K           46
              kobj          330         1320K          523
               pcb          684         1315K         1980
           subproc          492         1048K         3086
            newblk           26         1031K         3914
          vfscache            3         1025K            3
          inodedep           38          526K         2549
         ufs_quota            1          512K            1
          vfs_hash            1          512K            1
           callout            2          512K            2
              intr            4          472K            4
              vmem            5          284K           10
         vnet_data            2          224K            2
          acpitask            1          224K            1
            KTRACE          102          201K        17014
            acpica         1674          184K        54432
         sctp_atcl          391          147K         1001
           tidhash            3          141K            3
           pagedep           28          135K         1470
        tfo_ccache            1          128K            1
          IP reass            1          128K            1
           kdtrace          652          119K         6283
            DEVFS1          110          110K          129
              umtx          864          108K          864
               sem            4          106K            4
               BPF           55          106K           95
        gtaskqueue           18           98K           18
               bus         1002           82K         5074
          mtx_pool            3           74K            3
          syncache            1           68K            1
     NFSD srvcache            3           68K            3
            module          521           66K          524
       ddb_capture            1           64K            1
               shm           12           54K           29
            plimit          133           50K          691
         taskqueue          357           36K          435
            DEVFS3          129           33K          139
         hostcache            1           32K            1
               LRO           30           31K           30
               msg            4           30K            4
            kbdmux            6           28K            6
            kqueue          388           25K         6504
            ifaddr           80           22K           82
              temp           36           21K         3636
        DEVFS_RULE           56           20K           56
         sctp_atky          506           20K         1209
             mount           54           20K         1180
          routetbl          169           20K          502
         ufs_mount            4           17K            5
              proc            3           17K            3
               tty           16           16K           16
           lltable           50           16K           58
       ether_multi          190           16K          755
           pwddesc          238           15K         2882
           ithread           90           15K           90
            bus-sc           34           15K         1650
             ifnet            8           15K            8
            crypto           38           14K          463
      eventhandler          163           14K          163
              GEOM           64           14K          510
           md_disk            4           13K           78
              kenv           95           12K           95
              cred           43           11K          717
         in6_multi           76           11K           76
         CAM queue            5           11K         1528
              rman           82           10K          447
             shmfd            4           10K          101
               rpc            8            9K            8
         bmsafemap            2            9K         2506
           devstat            4            9K            4
              UART           12            9K           12
              ksem            1            8K            5
       pfs_vncache            1            8K            1
         sctp_timw           30            8K           30
     audit_evclass          240            8K          303
         sctp_aadr          110            7K          117
         sctp_athm          391            7K         1003
            sglist            6            7K            6
           CAM DEV            3            6K          510
         proc-args          265            6K         3997
         pfs_nodes           22            6K           22
            DEVFSP           84            6K          787
             selfd           76            5K      2083635
       ufs_dirhash           24            5K           30
          pf_ifnet           11            5K           22
             lockf           41            5K          341
               UMA          270            5K          270
          freework           18            5K         1766
            CC Mem           34            5K         1378
           session           34            5K           55
      tcp_fsb_rack            2            5K          124
                vt           11            5K           11
           memdesc            1            4K            1
               MCA           32            4K           32
        md_sectors            1            4K            1
             evdev            4            4K            4
       in6_mfilter           58            4K         1170
          sctp_map          226            4K          410
           acpisem           28            4K           28
            dirrem           12            3K         2388
            select           23            3K          327
          kcovinfo           45            3K           45
       inpcbpolicy           89            3K         3370
          terminal           11            3K           11
         newdirblk           21            3K         1407
           uidinfo            5            3K           30
           acpidev           20            3K           20
             hhook            8            3K           10
             clone            9            3K            9
            ip6ndp           14            3K           16
        local_apic            1            2K            1
           io_apic            1            2K            1
         ipsec-saq            2            2K            2
          in_multi            8            2K          121
          sctp_ifa           15            2K           16
            diradd           15            2K         2423
               tun            5            2K            5
         cryptodev           26            2K         1654
            Unitno           26            2K         1046
           CAM XPT           22            2K          543
         toponodes            6            2K            6
             mkdir           11            2K         2814
       ipsecpolicy            2            2K            2
          savedino            5            2K         1260
               msi            9            2K            9
          freefile            9            2K         2173
           netlink            2            2K          182
               osd           39            2K         1356
         sctp_stri            2            1K            6
           softdep            1            1K            1
          freeblks            4            1K         1407
            sahead            1            1K            1
          secasvar            1            1K            1
             nhops            6            1K            8
       vnodemarker            2            1K           60
           eventfd            8            1K           15
      NFSD session            1            1K            1
      ip6_moptions           30            1K          586
          sctp_ifn            7            1K           16
          ktls_ocf            7            1K           70
               mld            7            1K            7
              igmp            7            1K            7
        CAM periph            4            1K          271
            ip6opt            5            1K          183
             ipsec            3            1K            3
              pfil            6            1K            6
          procdesc            6            1K           20
            isadev            6            1K            8
          pci_link           10            1K           10
 encap_export_host           12            1K           12
        ip_msource            8            1K          195
              cdev            2            1K            2
              ktls           15            1K          242
       lkpikmalloc            8            1K            9
      counter_rate           13            1K           13
             frag6            4            1K            7
    chacha20random            1            1K            1
            biobuf            1            1K            1
        in_mfilter            7            1K          545
      tcp_pcm_rack            1            1K           62
       ip6_msource            4            1K          247
           inotify            1            1K           25
            vnodes            1            1K            3
      NFSD lckfile            1            1K            1
     NFSD V4client            1            1K            1
             DEVFS            9            1K           10
           CAM SIM            2            1K            2
            feeder            7            1K            7
           tcpfunc            3            1K            3
       ip_moptions            3            1K          229
        loginclass            3            1K            5
            prison            6            1K            6
          nexusdev            8            1K            8
            apmdev            1            1K            1
          atkbddev            2            1K            2
               aio            4            1K            5
          pmchooks            1            1K            1
          CAM path            4            1K         1034
     CAM dev queue            2            1K            2
 CAM I/O Scheduler            1            1K            1
            soname            4            1K         5666
          filecaps            6            1K          124
          sctp_vrf            1            1K            1
              vnet            1            1K            1
               pmc            1            1K            1
             sigio            1            1K            4
           entropy            2            1K           41
          acpiintr            1            1K            1
              cpus            2            1K            2
    vnet_data_free            1            1K            1
           Per-cpu            1            1K            1
          p1003.1b            1            1K            1
            mqdata            0            0K            0
          pf_table            0            0K            0
           pf_rule            0            0K            0
           pf_altq            0            0K            0
           pf_osfp            0            0K            0
     pf_krule_item            0            0K            0
           pf_temp            0            0K            0
           filemon            0            0K            5
       tcp_do_rack            0            0K            0
            ipcomp            0            0K            0
               esp            0            0K            0
                ah            0            0K            0
        sctp_mcore            0            0K            0
        sctp_socko            0            0K          276
         sctp_iter            0            0K           13
         sctp_mvrf            0            0K            0
         sctp_cpal            0            0K            0
         sctp_cmsg            0            0K            0
         sctp_stre            0            0K            0
         sctp_athi            0            0K            0
         sctp_a_it            0            0K           13
        madt_table            0            0K            2
          smartpqi            0            0K            0
               ixl            0            0K            0
        ice-resmgr            0            0K            0
         ice-osdep            0            0K            0
               ice            0            0K            0
              iavf            0            0K            0
             axgbe            0            0K            0
       fpukern_ctx            0            0K            0
          xen_intr            0            0K            0
           xen_hvm            0            0K            0
         legacydrv            0            0K            0
      NMI handlers            0            0K            0
            bounce            0            0K            0
            busdma            0            0K            0
            qpidrv            0            0K            0
      dmar_idpgtbl            0            0K            0
          dmar_dom            0            0K            0
          dmar_ctx            0            0K            0
      amdiommu_dom            0            0K            0
      amdiommu_ctx            0            0K            0
              isci            0            0K            0
      iommu_dmamap            0            0K            0
     hyperv_socket            0            0K            0
           bxe_ilt            0            0K            0
        aesni_data            0            0K           10
            xenbus            0            0K            0
     vm_fictitious            0            0K            0
           UMAHash            0            0K            0
         vm_pgdata            0            0K            0
           jblocks            0            0K            0
          sentinel            0            0K            0
            jfsync            0            0K            0
            jtrunc            0            0K            0
             sbdep            0            0K           30
           jsegdep            0            0K            0
              jseg            0            0K            0
         jfreefrag            0            0K            0
          jfreeblk            0            0K            0
           jnewblk            0            0K            0
            jmvref            0            0K            0
           jremref            0            0K            0
           jaddref            0            0K            0
           freedep            0            0K            0
          freefrag            0            0K          104
        allocindir            0            0K            0
          indirdep            0            0K          313
       allocdirect            0            0K            0
          ufs_trim            0            0K            0
           mactemp            0            0K            0
     audit_trigger            0            0K            0
 audit_pipe_presel            0            0K            0
     audit_pipeent            0            0K            0
        audit_pipe            0            0K            0
      audit_evname            0            0K            0
         audit_bsm            0            0K            0
      audit_gidset            0            0K            0
        audit_text            0            0K            0
        audit_path            0            0K            0
        audit_data            0            0K            0
        audit_cred            0            0K            0
        MLX5EEPROM            0            0K            0
        MLX5EEPROM            0            0K            0
        MLX5EEPROM            0            0K            0
        MLX5EEPROM            0            0K            0
        MLX5EEPROM            0            0K            0
      MLX5E_TLS_RX            0            0K            0
        MLX5EEPROM            0            0K            0
         MLX5E_TLS            0            0K            0
        MLX5EEPROM            0            0K            0
        MLX5EEPROM            0            0K            0
        MLX5EEPROM            0            0K            0
            MLX5EN            0            0K            0
        MLX5EEPROM            0            0K            0
        MLX5EEPROM            0            0K            0
        MLX5EEPROM            0            0K            0
        MLX5EEPROM            0            0K            0
        MLX5EEPROM            0            0K            0
        MLX5EEPROM            0            0K            0
        MLX5EEPROM            0            0K            0
          MLX5DUMP            0            0K            0
        MLX5EEPROM            0            0K            0
        MLX5EEPROM            0            0K            0
        MLX5EEPROM            0            0K            0
        MLX5EEPROM            0            0K            0
       simple_attr            0            0K            0
          seq_file            0            0K            0
           lkpiskb            0            0K            0
             radix            0            0K            0
               idr            0            0K            0
          lkpindev            0            0K            0
           lkpimhi            0            0K            0
            lkpifw            0            0K            0
         lkpi80211            0            0K            0
               NLM            0            0K            0
    ipsec-spdcache            0            0K            0
         ipsec-reg            0            0K            0
        ipsec-misc            0            0K            0
      ipsecrequest            0            0K            0
            tcplog            0            0K            0
        tcp_hwpace            0            0K            0
              ipid            0            0K            0
         80211scan            0            0K            0
      80211ratectl            0            0K            0
        80211power            0            0K            0
       80211nodeie            0            0K            0
         80211node            0            0K            0
      80211mesh_gt            0            0K            0
      80211mesh_rt            0            0K            0
         80211perr            0            0K            0
         80211prep            0            0K            0
         80211preq            0            0K            0
          80211dfs            0            0K            0
       80211crypto            0            0K            0
          80211vap            0            0K            0
             iflib            0            0K            0
              vlan            0            0K            0
               gif            0            0K            0
           ifdescr            0            0K            0
              zlib            0            0K           22
           fadvise            0            0K            2
           VN POLL            0            0K           12
            statfs            0            0K          221
     namei_tracker            0            0K            3
       export_host            0            0K            0
        cl_savebuf            0            0K           39
               lio            0            0K          371
               acl            0            0K            0
          mbuf_tag            0            0K            0
              accf            0            0K            0
               pts            0            0K            0
           timerfd            0            0K            0
               iov            0            0K        21420
          ioctlops            0            0K          311
           Witness            0            0K            0
             stack            0            0K            0
              sbuf            0            0K          350
          firmware            0            0K            0
        compressor            0            0K            0
              SWAP            0            0K            0
         sysctltmp            0            0K          874
            sysctl            0            0K            3
              ekcd            0            0K            0
            dumper            0            0K            0
          sendfile            0            0K          165
              rctl            0            0K            0
             cache            0            0K            0
      prison_racct            0            0K            0
       Fail Points            0            0K            0
filedesc_to_leader            0            0K            3
               pwd            0            0K            0
       tty console            0            0K            0
         boottrace            0            0K            0
        isofs_node            0            0K            0
       isofs_mount            0            0K            0
     tr_raid5_data            0            0K            0
    tr_raid1e_data            0            0K            0
     tr_raid1_data            0            0K            0
     tr_raid0_data            0            0K            0
    tr_concat_data            0            0K            0
       md_sii_data            0            0K            0
   md_promise_data            0            0K            0
    md_nvidia_data            0            0K            0
   md_jmicron_data            0            0K            0
     md_intel_data            0            0K            0
       md_ddf_data            0            0K            0
         raid_data            0            0K           90
     geom_flashmap            0            0K            0
         tmpfs dir            0            0K            0
        tmpfs name            0            0K            0
       tmpfs mount            0            0K            0
     tmpfs extattr            0            0K            0
           NFS FHA            0            0K            0
         newnfsmnt            0            0K            0
  newnfsclient_req            0            0K            0
   NFSCL layrecall            0            0K            0
     NFSCL session            0            0K            0
     NFSCL sockreq            0            0K            0
     NFSCL devinfo            0            0K            0
     NFSCL flayout            0            0K            0
      NFSCL layout            0            0K            0
     NFSD rollback            0            0K            0
      NFSCL diroff            0            0K            0
        NEWNFSnode            0            0K            0
         NFSCL lck            0            0K            0
      NFSCL lckown            0            0K            0
      NFSCL client            0            0K            0
       NFSCL deleg            0            0K            0
        NFSCL open            0            0K            0
       NFSCL owner            0            0K            0
            NFS fh            0            0K            0
           NFS req            0            0K            0
     NFSD usrgroup            0            0K            0
       NFSD string            0            0K            0
       NFSD V4lock            0            0K            0
      NFSD V4state            0            0K            0
       msdosfs_fat            0            0K            0
     msdosfs_mount            0            0K            0
      msdosfs_node            0            0K            0
            DEVFS4            0            0K            0
            DEVFS2            0            0K            0
            gntdev            0            0K            0
       privcmd_dev            0            0K            0
        evtchn_dev            0            0K            0
          xenstore            0            0K            0
               xnb            0            0K            0
          xen_acpi            0            0K            0
              xbbd            0            0K            0
               xbd            0            0K            0
           Balloon            0            0K            0
          sysmouse            0            0K            0
            vtfont            0            0K            0
            pvscsi            0            0K            0
            USBdev            0            0K            0
               USB            0            0K            0
            twsbuf            0            0K            0
       tcp_log_dev            0            0K          119
      midi buffers            0            0K            0
             mixer            0            0K            0
              ac97            0            0K            0
             hdacc            0            0K            0
              hdac            0            0K            0
              hdaa            0            0K            0
       SIIS driver            0            0K            0
               PUC            0            0K            0
          ppbusdev            0            0K            0
            sr_iov            0            0K            0
               OCS            0            0K            0
               OCS            0            0K            0
              nvme            0            0K            0
               nvd            0            0K            0
            netmap            0            0K            0
            mwldev            0            0K            0
        MVS driver            0            0K            0
         mpi3mrbuf            0            0K            0
          mrsasbuf            0            0K            0
          mpt_user            0            0K            0
          mps_user            0            0K            0
            MPSSAS            0            0K            0
               mps            0            0K            0
          mpr_user            0            0K            0
            MPRSAS            0            0K            0
               mpr            0            0K            0
            mfibuf            0            0K            0
           malodev            0            0K            0
               LED            0            0K            0
          ix_sriov            0            0K            0
                ix            0            0K            0
            ipsbuf            0            0K            0
         ciss_data            0            0K            0
         BACKLIGHT            0            0K            0
           ath_hal            0            0K            0
            athdev            0            0K            0
           ata_pci            0            0K            0
           ata_dma            0            0K            0
       ata_generic            0            0K            0
       AHCI driver            0            0K            0
               agp            0            0K            0
           acpipwr            0            0K            0
         acpi_perf            0            0K            0
         acpicmbat            0            0K            0
        aacraidcam            0            0K            0
       aacraid_buf            0            0K            0
            aaccam            0            0K            0
            aacbuf            0            0K            0
              zstd            0            0K            0
            XZ_DEC            0            0K            0
            nvlist            0            0K         2975
          SCSI ENC            0            0K            0
           SCSI sa            0            0K            0
         scsi_pass            0            0K            0
           scsi_da            0            0K           70
            ata_da            0            0K            0
           scsi_ch            0            0K            0
           scsi_cd            0            0K            0
           nvme_da            0            0K            0
           CAM CCB            0            0K          523
     CAM ccb queue            0            0K            0
db> show uma
              Zone   Size    Used    Free    Requests  Sleeps  Bucket  Total Mem    XFree
   mbuf_jumbo_page   4096    8320    1078       79153       0     254   38494208        0
           tcp_log    416    5335    5339       28439       0     254    4440384        0
      malloc-16384  16384     171       3        1631       0       1    2850816        0
        RADIX NODE    152   17939     620       94415       0      62    2820968        0
              mbuf    256    9081     582      156227       0     254    2473728        0
       malloc-4096   4096     568       4        3227       0       2    2342912        0
      mbuf_cluster   2048     762     254        3299       0     254    2080768        0
         malloc-64     64     710   31294     2085449       0     254    2048256        0
          BUF TRIE    152     249   11555        3205       0      62    1794208        0
        malloc-384    384    4122      48        4468       0      30    1601280        0
        malloc-128    128   11642     355       15154       0     126    1535616        0
       UMA Slabs 0    112   12023      31       12023       0     126    1350048        0
         vmem btag     56   20531     100       20531       0     254    1155336        0
         sctp_asoc   2256     113     397         205       0     254    1150560        0
            socket   1024     563     453        6959       0     254    1040384        0
           sctp_ep   1152     276     487         791       0     254     878976        0
         FFS inode   1168     711      31        2995       0       8     866656        0
         VM OBJECT    248    3320      40       35877       0      62     833280        0
            THREAD   1860     413      19        3430       0       8     803520        0
         MAP ENTRY     96    7121     313      158145       0     126     713664        0
       malloc-2048   2048     280      48        1514       0       8     671744        0
      malloc-65536  65536       9       1          13       0       1     655360        0
        256 Bucket   2048     295      11        9173       0       8     626688        0
               md1  32768      16       0          16       0       1     524288        0
          lkpicurr    168       2    3094           2       0      62     520128        0
      malloc-65536  65536       4       3         234       0       1     458752        0
              pbuf   2624       0     166           0       0       2     435584        0
        sctp_raddr    736     114     403         206       0     254     380512        0
     FPU_save_area    832     415      35        5032       0      16     374400        0
             VNODE    440     752      94        3038       0      30     372240        0
              PROC   1376     237      16        2851       0       8     348128        0
      malloc-32768  32768       4       6         317       0       1     327680        0
       malloc-2048   2048     105      47         750       0       8     311296        0
         malloc-64     64    4720     131       10295       0     254     310464        0
         filedesc0   1072     238      14        2882       0       8     270144        0
         malloc-16     16   14591     409       14935       0     254     240000        0
            DEVCTL   1024       3     217         164       0       0     225280        0
       FFS2 dinode    256     711      99        2995       0      62     207360        0
        malloc-256    256     481     329        5855       0      62     207360        0
      malloc-32768  32768       3       3          17       0       1     196608        0
        malloc-384    384     393     117        1044       0      30     195840        0
       mbuf_packet    256      28     734        3893       0     254     195072        0
         malloc-32     32    5394     528        6105       0     254     189504        0
         UMA Zones    768     242       2         242       0      16     187392        0
        malloc-128    128    1251     144       26731       0     126     178560        0
            lkpimm     56       1    3095           1       0     254     173376        0
             unpcb    320     177     339        2592       0     254     165120        0
       malloc-1024   1024     128      32         887       0      16     163840        0
        malloc-256    256     463     167       10005       0      62     161280        0
       S VFS Cache    104    1076     445        3603       0     126     158184        0
        malloc-256    256     412     158        4184       0      62     145920        0
           VMSPACE    584     208      37        2651       0      16     143080        0
      malloc-65536  65536       2       0           2       0       1     131072        0
      malloc-65536  65536       2       0           2       0       1     131072        0
      malloc-65536  65536       0       2         213       0       1     131072        0
        malloc-128    128     893     130        2002       0     126     130944        0
        malloc-384    384     277      53         346       0      30     126720        0
       malloc-4096   4096      28       2         151       0       2     122880        0
          ksiginfo    112     234     810         879       0     126     116928        0
        malloc-128    128     522     253        4202       0     126      99200        0
        malloc-128    128     477     298        6415       0     126      99200        0
       malloc-8192   8192       7       4          12       0       1      90112        0
          UMA Kegs    384     228       5         228       0      30      89472        0
          syncache    168       0     528           3       0     254      88704        0
         tcp_inpcb   1304      38      28        1338       0       8      86064        0
             g_bio    408      73     137       16569       0      30      85680        0
        128 Bucket   1024      60      23         371       0      16      84992        0
             Files     80     809     241       20776       0     126      84000        0
            vnpbuf   2624       0      32          16       0      16      83968        0
         64 Bucket    512     104      56       13397       0      30      81920        0
        sctp_chunk    152     160     360         229       0     254      79040        0
    ertt_txseginfo     40       0    1818       13572       0     254      72720        0
        malloc-384    384     147      33         776       0      30      69120        0
         TURNSTILE    136     433      71         433       0      62      68544        0
         malloc-64     64     895     176        6832       0     254      68544        0
       tcp_bbr_map    128       0     527         363       0     126      67456        0
      malloc-65536  65536       0       1           1       0       1      65536        0
      malloc-65536  65536       0       1           1       0       1      65536        0
      malloc-32768  32768       0       2         129       0       1      65536        0
      malloc-16384  16384       4       0         194       0       1      65536        0
      malloc-16384  16384       2       2           6       0       1      65536        0
       malloc-4096   4096      13       3          44       0       2      65536        0
       malloc-4096   4096      11       5         148       0       2      65536        0
       malloc-2048   2048      13      19         157       0       8      65536        0
       malloc-1024   1024      28      36         959       0      16      65536        0
       malloc-1024   1024      27      37         263       0      16      65536        0
         32 Bucket    256      90     165        4581       0      62      65280        0
sctp_stream_msg_out    112       0     540           2       0     254      60480        0
        malloc-384    384      43     107        2555       0      30      57600        0
       malloc-8192   8192       3       4         132       0       1      57344        0
       malloc-8192   8192       7       0           7       0       1      57344        0
        malloc-128    128     163     240        1656       0     126      51584        0
         udp_inpcb    408      41      85        1026       0      30      51408        0
            cpuset    200       9     247         315       0      62      51200        0
        malloc-256    256       6     189        2358       0      62      49920        0
        malloc-256    256     136      59        2654       0      62      49920        0
           DIRHASH   1024      34      14          38       0      16      49152        0
             NAMEI   1024       5      43       27507       0      16      49152        0
       malloc-2048   2048      11      13         128       0       8      49152        0
       malloc-2048   2048      16       8          16       0       8      49152        0
        SLEEPQUEUE     88     433      79         433       0     126      45056        0
            pcpu-8      8    5064     568        5534       0     254      45056        0
               PWD     40     167     944        1466       0     254      44440        0
       malloc-4096   4096       7       3         645       0       2      40960        0
              pipe    736      25      30         803       0      16      40480        0
        sctp_laddr     48     551     289         928       0     254      40320        0
        sctp_readq    152       0     260           1       0     254      39520        0
            da_ccb    544      18      52        4307       0      16      38080        0
     udplite_inpcb    408       1      89         223       0      30      36720        0
         hostcache     64       4     563           4       0     254      36288        0
         malloc-64     64      90     477       20417       0     254      36288        0
         malloc-64     64     164     403         481       0     254      36288        0
         malloc-64     64     189     378        4680       0     254      36288        0
         malloc-64     64      15     552          41       0     254      36288        0
         malloc-32     32     831     303        6040       0     254      36288        0
        malloc-128    128     105     174        2145       0     126      35712        0
        malloc-128    128      15     264          55       0     126      35712        0
      ktls_session    256       7     128          70       0      62      34560        0
     routing nhops    256      33     102          48       0      62      34560        0
           ttyoutq    256      72      63         160       0      62      34560        0
        malloc-384    384      52      38          66       0      30      34560        0
        malloc-256    256      20     115         128       0      62      34560        0
        malloc-256    256      40      95         261       0      62      34560        0
        malloc-256    256      21     114         633       0      62      34560        0
             ripcb    376      13      77         783       0      30      33840        0
      malloc-32768  32768       0       1           1       0       1      32768        0
       malloc-8192   8192       3       1           5       0       1      32768        0
       malloc-4096   4096       1       7         101       0       2      32768        0
       malloc-4096   4096       4       4         407       0       2      32768        0
       malloc-4096   4096       4       4          30       0       2      32768        0
       malloc-2048   2048       2      14           2       0       8      32768        0
       malloc-2048   2048      12       4         269       0       8      32768        0
       malloc-1024   1024       0      32          10       0      16      32768        0
       malloc-1024   1024      10      22         117       0      16      32768        0
       malloc-1024   1024       8      24         141       0      16      32768        0
       malloc-1024   1024       0      32        1330       0      16      32768        0
        malloc-512    512       4      60         165       0      30      32768        0
        malloc-512    512       2      62          61       0      30      32768        0
        malloc-512    512       1      63         168       0      30      32768        0
        malloc-512    512       4      60          66       0      30      32768        0
        malloc-512    512       3      61        1079       0      30      32768        0
        malloc-512    512      20      44          77       0      30      32768        0
           pcpu-64     64     498      14         498       0     254      32768        0
       tcp_bbr_pcb    896       0      36           6       0      16      32256        0
            ttyinq    160     135      65         300       0      62      32000        0
   tcp_log_id_node    120       4     260          22       0     126      31680        0
              PGRP    120     137     127         238       0     126      31680        0
            clpbuf   2624       0      12         332       0       4      31488        0
       L VFS Cache    320       0      96         136       0      30      30720        0
          rl_entry     48     143     445         380       0     254      28224        0
         malloc-32     32     298     584       10522       0     254      28224        0
         16 Bucket    144      76     120         548       0      62      28224        0
          4 Bucket     48       7     581          40       0     254      28224        0
               AIO    208       1     132         489       0      62      27664        0
       malloc-8192   8192       1       2          18       0       1      24576        0
       malloc-8192   8192       1       2          23       0       1      24576        0
           rtentry    168      36     108          48       0      62      24192        0
          8 Bucket     80      60     240        1814       0     126      24000        0
            itimer    352       0      66         141       0      30      23232        0
        malloc-384    384      27      33          29       0      30      23040        0
        malloc-384    384      26      34          46       0      30      23040        0
      tcp_rack_pcb   1088       1      20          62       0       8      22848        0
       Mountpoints   2816       2       6           3       0       4      22528        0
              ertt     72      34     246        1338       0     126      20160        0
         malloc-64     64       3     312           4       0     254      20160        0
         malloc-32     32      57     573         966       0     254      20160        0
         malloc-32     32      89     541        1668       0     254      20160        0
         malloc-32     32     268     362        1898       0     254      20160        0
         malloc-32     32      28     602        1115       0     254      20160        0
          2 Bucket     32      69     561         821       0     254      20160        0
             KNOTE    160       1     124        1358       0      62      20000        0
         malloc-16     16     654     596        1863       0     254      20000        0
           cryptop    280       0      70         214       0      30      19600        0
             AIOCB    552       0      35        2048       0      16      19320        0
            AIOLIO    272       0      70         371       0      30      19040        0
              vmem   1856       2       7           2       0       8      16704        0
 epoch_record pcpu    256       4      60           4       0      62      16384        0
      malloc-16384  16384       1       0           1       0       1      16384        0
      malloc-16384  16384       1       0           1       0       1      16384        0
       malloc-2048   2048       4       4           4       0       8      16384        0
        malloc-512    512       1      31           1       0      30      16384        0
           SMR CPU     32       8     503           8       0     254      16352        0
   sctp_asconf_ack     48       1     335           1       0     254      16128        0
         malloc-16     16     583     417        4099       0     254      16000        0
              kenv    258      17      43        1082       0      30      15480        0
            mqnode    416       3      33           3       0      30      14976        0
         domainset     40       0     315         270       0     254      12600        0
        SMR SHARED     24       8     503           8       0     254      12264        0
 tcp_log_id_bucket    176       2      67           2       0      62      12144        0
         malloc-32     32       7     371           7       0     254      12096        0
      vtnet_tx_hdr     24       0     501       16680       0     254      12024        0
         malloc-16     16     209     541        5610       0     254      12000        0
         malloc-16     16      24     726        1358       0     254      12000        0
         malloc-16     16      17     733        5461       0     254      12000        0
         malloc-16     16      84     666       26569       0     254      12000        0
         malloc-16     16      17     733          18       0     254      12000        0
            splice    184       0      63           1       0      62      11592        0
       malloc-8192   8192       0       1           2       0       1       8192        0
           pcpu-16     16       8     504           8       0     254       8192        0
       UMA Slabs 1    176      10      12          10       0      62       3872        0
        KMAP ENTRY     96      12      27          25       0       0       3744        0
               tfo      4       0     493           1       0     254       1972        0
       FFS1 dinode    128       0       0           0       0     126          0        0
           ada_ccb    272       0       0           0       0      30          0        0
             swblk    136       0       0           0       0      62          0        0
          swpctrie    152       0       0           0       0      62          0        0
   cdg_qdiffsample     16       0       0           0       0     254          0        0
   pf state scrubs     40       0       0           0       0     254          0        0
   pf frag entries     40       0       0           0       0     254          0        0
  pf fragment node     72       0       0           0       0     126          0        0
          pf frags    232       0       0           0       0      62          0        0
  pf table entries    160       0       0           0       0     254          0        0
pf table entry counters     64       0       0           0       0     254          0        0
   pf UDP mappings    104       0       0           0       0     126          0        0
   pf source nodes    152       0       0           0       0     254          0        0
     pf state keys     88       0       0           0       0     126          0        0
         pf states    384       0       0           0       0     254          0        0
           pf tags    104       0       0           0       0     126          0        0
          pf mtags    184       0       0           0       0      62          0        0
      tcp_rack_map    128       0       0           0       0     126          0        0
tfo_ccache_entries     80       0       0           0       0     126          0        0
          sackhole     32       0       0           0       0     254          0        0
               ipq     56       0       0           0       0     254          0        0
       sctp_asconf     40       0       0           0       0     254          0        0
          tcpreass     48       0       0           0       0     254          0        0
    IPsec SA lft_c     16       0       0           0       0     254          0        0
        mqnotifier    216       0       0           0       0      62          0        0
            mvdata     64       0       0           0       0     254          0        0
            mqueue    248       0       0           0       0      62          0        0
        TMPFS node    240       0       0           0       0      62          0        0
           NCLNODE    608       0       0           0       0      16          0        0
     LTS VFS Cache    360       0       0           0       0      30          0        0
     STS VFS Cache    144       0       0           0       0      62          0        0
  linux_dma_object     32       0       0           0       0     254          0        0
  linux_dma_pctrie    152       0       0           0       0      62          0        0
   IOMMU_MAP_ENTRY    112       0       0           0       0     126          0        0
            skbuff   1808       0       0           0       0       8          0        0
    mbuf_jumbo_16k  16384       0       0           0       0     254          0        0
     mbuf_jumbo_9k   9216       0       0           0       0     254          0        0
      audit_record   1280       0       0           0       0       8          0        0
        MAC labels     40       0       0           0       0     254          0        0
           nfspbuf   2624       0       0           0       0       4          0        0
            swwbuf   2624       0       0           0       0       2          0        0
            swrbuf   2624       0       0           0       0       4          0        0
          umtx_shm     88       0       0           0       0     126          0        0
           umtx pi     96       0       0           0       0     126          0        0
rangeset pctrie nodes    152       0       0           0       0      62          0        0
      malloc-65536  65536       0       0           0       0       1          0        0
      malloc-32768  32768       0       0           0       0       1          0        0
      malloc-32768  32768       0       0           0       0       1          0        0
      malloc-32768  32768       0       0           0       0       1          0        0
      malloc-32768  32768       0       0           0       0       1          0        0
      malloc-16384  16384       0       0           0       0       1          0        0
      malloc-16384  16384       0       0           0       0       1          0        0
      malloc-16384  16384       0       0           0       0       1          0        0
       malloc-8192   8192       0       0           0       0       1          0        0
       malloc-1024   1024       0       0           0       0      16          0        0
        malloc-512    512       0       0           0       0      30          0        0
           pcpu-32     32       0       0           0       0     254          0        0
            pcpu-4      4       0       0           0       0     254          0        0
            fakepg     88       0       0           0       0     126          0        0
          UMA Hash    256       0       0           0       0      62          0        0
db> show all tcpcbs/bl

Crashes (1):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2025/07/29 11:14 freebsd-src 0ded4647215c 8e9d1dc1 console log report ci-freebsd-main panic: handle_workitem_remove: file ino ADDR negative i_nlink -NUM
* Struck through repros no longer work on HEAD.