last executing test programs: 4.703636571s ago: executing program 1 (id=5437): open$dir(&(0x7f00000001c0)='./file0\x00', 0x80200, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0xaa480) truncate(&(0x7f0000000080)='./file0\x00', 0x80008) r0 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x12, r0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 4.554266406s ago: executing program 1 (id=5442): r0 = socket(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x10, 0x2, 0x2, @loopback}, 0x10) connect$inet(r0, &(0x7f00000000c0)={0xfffffffffffffe21, 0x2, 0x2, @loopback}, 0x10) sendto(r0, &(0x7f0000000100)="a774", 0x3fd8, 0x5, 0x0, 0x0) setsockopt$inet6_tcp_TCP_FUNCTION_BLK(r0, 0x6, 0x2000, &(0x7f0000000040)={'rack\x00'}, 0x24) read(r0, &(0x7f0000000280)=""/170, 0xaa) 4.517785313s ago: executing program 1 (id=5443): munmap(&(0x7f0000001000/0x2000)=nil, 0x2000) r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) shmat(r0, &(0x7f0000002000/0x2000)=nil, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) shmat(r0, &(0x7f0000002000/0x1000)=nil, 0x0) shmdt(0x0) 4.494763412s ago: executing program 1 (id=5444): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xc, &(0x7f0000000040)={0x2}, 0xb) sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000000280)=@in={0x10, 0x2, 0x1, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r0, 0x84, 0x1f, &(0x7f0000000240)=0x800, 0x4) shutdown(r0, 0x0) recvmsg(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/242, 0xf2}, 0x0) 4.424014827s ago: executing program 1 (id=5447): r0 = open$dir(&(0x7f0000000140)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000080)='./file0\x00', 0x0) mknodat(r0, &(0x7f0000000040)='./file0/file0\x00', 0xe004, 0x0) chown(&(0x7f0000000240)='./file0/file0/file0\x00', 0x0, 0x0) faccessat(r0, &(0x7f0000000180)='./file0/file0/file0\x00', 0x0, 0x0) freebsd11_stat(&(0x7f0000000280)='./file0/file0\x00', 0x0) 4.326516323s ago: executing program 1 (id=5449): open$dir(&(0x7f0000000180)='./file0\x00', 0x40000400000002c6, 0x0) r0 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) flock(r0, 0x1) r1 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) open$dir(&(0x7f0000000140)='./file0\x00', 0x8110, 0x0) flock(r1, 0x3) 3.469361447s ago: executing program 3 (id=5471): r0 = open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000200)="0e", 0x1}, {&(0x7f0000000380)="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", 0x341}], 0x2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) extattr_delete_fd(r0, 0x0, &(0x7f0000000100)='(:$@-!}-\xca\\-{}\x00') msync(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2) kmq_open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0) 3.452933804s ago: executing program 3 (id=5472): r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r0, &(0x7f0000000340)={0x1c, 0x1c, 0x1, 0x1ff, @local={0xfe, 0x80, '\x00', 0x0}, 0x6}, 0x1c) r1 = socket$inet6_sctp(0x1c, 0x5, 0x84) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x1c, 0x1c, 0x2, 0x0, @rand_addr="152bc64d9fe0fbacc02b56b6c56b6f57"}, 0x1c) getsockopt$inet6_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x105, &(0x7f00000000c0)={0x1, [0x0]}, &(0x7f0000000100)=0x8) getsockopt$inet6_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x900, &(0x7f0000000180)={r2}, &(0x7f00000001c0)=0x8) getsockopt$inet6_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x23, &(0x7f0000000740)={@in6={{0x1c, 0x1c, 0x0, 0x200, @empty, 0x12000}}, r3, 0x3ff, 0x0, 0x87}, &(0x7f0000000480)=0x90) 3.411467912s ago: executing program 3 (id=5473): r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000280)={0x10, 0x2, 0x3}, 0x10) setsockopt$sock_int(r0, 0xffff, 0x1002, &(0x7f0000000340)=0x101, 0x4) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xc, &(0x7f0000000180)={0x2, 0x80, 0x37, 0x9, 0xf8, 0xf8, 0x7, 0x3, 0x7, 0x23, 0xfe}, 0xb) connect$inet(r0, &(0x7f0000000000)={0x10, 0x2, 0x3, @loopback}, 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000002c00)="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", 0xb59}], 0x1}, 0x0) rfork(0x85000) 3.411071967s ago: executing program 3 (id=5474): syz_emit_ethernet(0x2d, &(0x7f0000000000)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "9ac9d0", 0x0, 0x0, 0x0, @rand_addr="03498c7d3c88732762c5bbfb418dbe5c", @rand_addr="b82957248c3701367c9909fa96bf7cb7"}}}}) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) r0 = socket(0x2, 0x3, 0x0) getsockopt(r0, 0x0, 0x67, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = socket(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f0000000000), 0x10) 2.519903649s ago: executing program 3 (id=5482): r0 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) symlinkat(&(0x7f0000000100)='./file2\x00', r0, &(0x7f0000000140)='./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r1 = open$dir(&(0x7f0000000280)='.\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000500)='./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mknodat(r0, &(0x7f00000009c0)='./file2\x00', 0xb6a0a5d5283be59a, 0x0) 2.430299733s ago: executing program 3 (id=5485): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) symlink(&(0x7f0000001600)='./file0\x00', &(0x7f0000001700)='./file1\x00') chroot(&(0x7f0000000080)='./file0\x00') mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0) chroot(&(0x7f0000000180)='./file1/../file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0/../file0/file0\x00', 0x0) 1.282629602s ago: executing program 2 (id=5496): r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) setsockopt$inet6_sctp_SCTP_REUSE_PORT(r0, 0x84, 0x1c, &(0x7f00000000c0), 0x4) bind$inet6(r0, &(0x7f0000000000)={0x1c, 0x1c, 0x1, 0x0, @empty, 0x2}, 0x1c) r1 = socket$inet6_sctp(0x1c, 0x1, 0x84) setsockopt$inet6_sctp_SCTP_REUSE_PORT(r1, 0x84, 0x1c, &(0x7f0000000080), 0x4) bind$inet6(r1, &(0x7f0000000040)={0x1c, 0x1c, 0x1, 0x0, @empty}, 0x1c) listen(r1, 0x0) 1.281348195s ago: executing program 0 (id=5497): r0 = socket(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x8, &(0x7f0000000000)=0x40, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x10, 0x2, 0x2, @loopback}, 0x10) connect$inet(r0, &(0x7f00000000c0)={0xfffffffffffffe21, 0x2, 0x2, @loopback}, 0x10) sendto(r0, 0x0, 0x0, 0x20005, &(0x7f00000004c0)=@in={0x10, 0x2, 0x0, @loopback}, 0x10) setsockopt$inet6_tcp_TCP_FUNCTION_BLK(r0, 0x6, 0x2000, &(0x7f0000000040)={'rack\x00'}, 0x24) sendmsg$unix(r0, &(0x7f0000002580)={0x0, 0x19, &(0x7f0000000100)=[{&(0x7f0000000140)="4640c719021399600f76aac84cf9aec359d5c9ce67f6453118a671000080e0c44ebc7bc3ef22bca56aa8f60468ba787ced0d999f926f54ab63ee1e", 0xfe22}], 0x1, 0x0, 0x0, 0x180}, 0x20104) 1.211404964s ago: executing program 2 (id=5498): socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) sysarch$I386_SET_LDT(0x1, &(0x7f0000000100)={0x0, &(0x7f00000000c0)}) r0 = socket$inet6_icmp(0x1c, 0x2, 0x3a) sendto$inet6(r0, &(0x7f0000000000)="4839b7c00076671998d594ac89ef1cb232951a9e95307c40b2eb76613eb8fd9ddd460b01332f", 0x26, 0x0, &(0x7f0000000080)={0x1c, 0x1c, 0x2, 0x8, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x19e}, 0x1c) sysarch$I386_SET_LDT(0x1, &(0x7f0000000040)={0x0, 0x0, 0x3}) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x1204, &(0x7f0000000100), &(0x7f0000000180)=0x8) 1.199515527s ago: executing program 2 (id=5499): rfork(0x85000) socket$inet6_sctp(0x1c, 0x5, 0x84) r0 = socket(0x2, 0x3, 0x0) r1 = socket(0x1c, 0x10000001, 0x84) setsockopt$inet_sctp_SCTP_AUTH_KEY(r1, 0x84, 0x1203, &(0x7f0000000580)=ANY=[@ANYRES32, @ANYRES64=r0], 0x3ef) sendmsg$inet6_sctp(r1, &(0x7f0000000080)={&(0x7f0000000180)=@in6={0x1c, 0x1c, 0x1, 0x0, @local={0xfe, 0x80, '\x00', 0x0}}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000001c0)='D', 0x1}], 0x1}, 0x0) sendmsg$inet6_sctp(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)="94", 0x1}], 0x1}, 0x0) 1.186686435s ago: executing program 2 (id=5500): r0 = open(&(0x7f00000000c0)='./file0\x00', 0x80000000000209, 0xfffffffffffffffc) sendmsg$inet6_sctp(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="a74e672ef6ee45db1890836f21edd4e47326c14ff92f795c46548d909244403dce6510b74c5ffc5b0d891b6d7d58f10336e8ce3bcdfb8c300245c62eabe3712acf249197e2a59507d63edc923d12d1cfc0218d9b9f24b9539aa70e31e98682d53bf4f02bb24e73ffbba53923949e681475c645dfc6be03886dd59202eb", 0x7d}], 0x1}, 0x0) freebsd11_getfsstat(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0}, 0x103, 0x1) chown(&(0x7f00000001c0)='./file0\x00', r1, 0x0) close(r0) truncate(&(0x7f0000000040)='./file0\x00', 0x3) execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000240)=[&(0x7f0000000140)='\x00'], 0x0) 1.144293923s ago: executing program 0 (id=5501): open(&(0x7f0000000080)='./file0\x00', 0x80000000000209, 0x0) r0 = open$dir(&(0x7f00000016c0)='./file0\x00', 0x1, 0x0) pwritev(r0, &(0x7f0000000280)=[{&(0x7f00000000c0)="e505", 0x2}], 0x1, 0x85f4) r1 = open(&(0x7f0000000480)='./file0\x00', 0x80400000000206, 0x181) mlockall(0x2) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x20011, r1, 0x0) sync() 1.1425551s ago: executing program 2 (id=5502): freebsd11_mknod(&(0x7f00000000c0)='./file0\x00', 0x1000, 0x0) r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x2, 0x0) r1 = open$dir(&(0x7f00000002c0)='./file0\x00', 0x1, 0x0) writev(r1, &(0x7f0000000340)=[{&(0x7f0000000180), 0x2000}], 0x1000000000000013) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000180), 0x81700}], 0x1000000000000013) execve(0x0, 0x0, 0x0) 1.095711057s ago: executing program 0 (id=5503): r0 = open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x0) r1 = open$dir(&(0x7f0000000240)='./file0\x00', 0x40000400000002c2, 0x0) r2 = kqueue() kevent(r2, &(0x7f0000000100)=[{0x3, 0xffffffffffffffff, 0x80a9}], 0x1, 0x0, 0x0, 0x0) lchflags(&(0x7f0000000000)='./file0\x00', 0x40700) pwritev(r1, &(0x7f0000000080)=[{&(0x7f00000006c0), 0x100000}], 0x1, 0x0) fspacectl(r0, 0x1, &(0x7f0000000040)={0x3ff, 0x94d}, 0x0, 0x0) 881.394376ms ago: executing program 0 (id=5504): r0 = socket(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x8, &(0x7f0000000000)=0x40, 0x4) setsockopt$inet_tcp_TCP_FUNCTION_BLK(r0, 0x6, 0x2000, &(0x7f0000000080)={'rack\x00'}, 0x24) bind$inet(r0, &(0x7f00000001c0)={0x10, 0x2, 0x2}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000000040)=0x2, 0x4) setsockopt$inet_tcp_buf(r0, 0x6, 0x25, &(0x7f0000000240)="b852cd4425e3b2d493800f3b26d8969d7f32a7cc9bfe978e99a0918471cefe7f1f73066f17d46905594e", 0x2a) connect$inet(r0, &(0x7f00000000c0)={0x10, 0x2, 0x2, @loopback}, 0x10) 866.304633ms ago: executing program 0 (id=5505): r0 = socket(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_FUNCTION_BLK(r0, 0x6, 0x2000, &(0x7f0000000080)={'bbr\x00'}, 0x24) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000000200)=0x3, 0x4) connect$inet(r0, &(0x7f0000000240)={0x10, 0x2, 0x2, @remote={0xac, 0x14, 0x0}}, 0x10) sendto(r0, &(0x7f0000003200)="1d77c57c16eb51", 0x7, 0x0, &(0x7f0000000480)=@in6={0x1c, 0x1c, 0x2, 0x109, @local={0xfe, 0x80, '\x00', 0x0}, 0xfbffffc0}, 0x1c) shutdown(r0, 0x1) 1.171809ms ago: executing program 0 (id=5506): r0 = socket(0x1c, 0x1, 0x0) setsockopt$sock_linger(r0, 0xffff, 0x80, &(0x7f0000000140)={0x80000001}, 0x8) bind$inet6(r0, &(0x7f0000000300)={0x1c, 0x1c, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet_tcp_TCP_FUNCTION_BLK(r0, 0x6, 0x2000, &(0x7f00000001c0)={'bbr\x00'}, 0x24) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x1c, 0x1c, 0x0, 0x0, @loopback, 0x801}, 0x1c) rfork(0x3060) 0s ago: executing program 2 (id=5512): __semctl$IPC_SET(0x0, 0x0, 0xa, &(0x7f0000000680)) setresgid(0x0, 0xee00, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x80000000800206, 0x0) r1 = getegid() setregid(0x0, 0x0) lchown(&(0x7f00000000c0)='./file0\x00', 0x0, r1) fchmod(r0, 0xffffffd) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.142' (ED25519) to the list of known hosts. UDP6: M_MCAST is set in a unicast packet. Sep 26 10:25:36 ci-freebsd-i386-2 kernel: attempted source route from 255.255.255.255 to 172.20.3.170 Jan 1 00:00:03 ci-freebsd-i386-2 kernel: nd6_na_input: duplicate IP6 address fe80:6::3aa if_delmulti_locked: detaching ifnet instance 0xfffffe006e4f7800 if_delmulti_locked: detaching ifnet instance 0xfffffe005872b000 Expensive callout(9) function: 0xffffffff8427b770(0xfffffe00750c0178) 0.007180777 s if_delmulti_locked: detaching ifnet instance 0xfffffe0054222000 Out of ktrace request objects. if_delmulti_locked: detaching ifnet instance 0xfffffe005872b000 ip6_pcbopts: all specified options are cleared. if_delmulti_locked: detaching ifnet instance 0xfffffe005872b000 if_delmulti_locked: detaching ifnet instance 0xfffffe0058728800 if_delmulti_locked: detaching ifnet instance 0xfffffe0058728800 if_delmulti_locked: detaching ifnet instance 0xfffffe0058728800 if_delmulti_locked: detaching ifnet instance 0xfffffe0058728800 if_delmulti_locked: detaching ifnet instance 0xfffffe0058728800 if_delmulti_locked: detaching ifnet instance 0xfffffe0058728800 if_delmulti_locked: detaching ifnet instance 0xfffffe0054222800 if_delmulti_locked: detaching ifnet instance 0xfffffe0054223000 if_delmulti_locked: detaching ifnet instance 0xfffffe0054223000 if_delmulti_locked: detaching ifnet instance 0xfffffe0054223000 Jan 1 00:01:08 ci-freebsd-i386-2 dhclient[862]: Interface tap0 is down, dhclient exiting if_delmulti_locked: detaching ifnet instance 0xfffffe0054222800 if_delmulti_locked: detaching ifnet instance 0xfffffe0054222800 if_delmulti_locked: detaching ifnet instance 0xfffffe0054222800 if_delmulti_locked: detaching ifnet instance 0xfffffe0054222800 if_delmulti_locked: detaching ifnet instance 0xfffffe0054222800 if_delmulti_locked: detaching ifnet instance 0xfffffe0054222800 lock order reversal: 1st 0xfffffe0059a4aac0 ufs (ufs, lockmgr) @ /syzkaller/managers/i386/kernel/sys/kern/vfs_subr.c:3365 2nd 0xffffffff82e01c40 proctree (proctree, sx) @ /syzkaller/managers/i386/kernel/sys/kern/subr_prf.c:188 lock order proctree -> ufs established at: #0 0xffffffff816125e9 at witness_checkorder+0x709 #1 0xffffffff81481b8a at lockmgr_lock_flags+0x1ea #2 0xffffffff81d2653b at ffs_lock+0x18b #3 0xffffffff822756e9 at VOP_LOCK1_APV+0x79 #4 0xffffffff8176d24e at _vn_lock+0x14e #5 0xffffffff8176daf8 at vn_close1+0x1e8 #6 0xffffffff8147375e at ktrops+0x40e #7 0xffffffff81472eed at sys_ktrace+0xa4d #8 0xffffffff82236a1a at ia32_syscall+0x4aa #9 0xffffffff8205a9df at int0x80_syscall_common+0x9c lock order ufs -> proctree attempted at: #0 0xffffffff81613529 at witness_checkorder+0x1649 #1 0xffffffff8150aa8a at _sx_slock_int+0x14a #2 0xffffffff815d045d at uprintf+0x14d #3 0xffffffff81d5296f at ufs_rmdir+0xdf #4 0xffffffff822744cf at VOP_RMDIR_APV+0xef #5 0xffffffff81762ab5 at kern_frmdirat+0x8b5 #6 0xffffffff82236a1a at ia32_syscall+0x4aa #7 0xffffffff8205a9df at int0x80_syscall_common+0x9c if_delmulti_locked: detaching ifnet instance 0xfffffe006e4f7800 if_delmulti_locked: detaching ifnet instance 0xfffffe005872b000 if_delmulti_locked: detaching ifnet instance 0xfffffe0058728000 Jan 1 00:01:23 ci-freebsd-i386-2 dhclient[4562]: send_packet: No buffer space available if_delmulti_locked: detaching ifnet instance 0xfffffe0054223000 if_delmulti_locked: detaching ifnet instance 0xfffffe005872b000 if_delmulti_locked: detaching ifnet instance 0xfffffe006e4f7800 ip6_pcbopts: all specified options are cleared. if_delmulti_locked: detaching ifnet instance 0xfffffe0054223000 if_delmulti_locked: detaching ifnet instance 0xfffffe0054223000 if_delmulti_locked: detaching ifnet instance 0xfffffe0054223000 if_delmulti_locked: detaching ifnet instance 0xfffffe0054223000 if_delmulti_locked: detaching ifnet instance 0xfffffe0054223000 if_delmulti_locked: detaching ifnet instance 0xfffffe005872b000 if_delmulti_locked: detaching ifnet instance 0xfffffe0054222000 Jan 1 00:01:53 ci-freebsd-i386-2 syslogd: last message repeated 2 times Jan 1 00:02:02 ci-freebsd-i386-2 syslogd: last message repeated 1 times Jan 1 00:02:09 ci-freebsd-i386-2 dhclient[6609]: send_packet: No buffer space available Jan 1 00:02:52 ci-freebsd-i386-2 syslogd: last message repeated 6 times Jan 1 00:03:02 ci-freebsd-i386-2 syslogd: last message repeated 1 times Jan 1 00:03:11 ci-freebsd-i386-2 dhclient[6639]: send_packet: No buffer space available Jan 1 00:03:50 ci-freebsd-i386-2 syslogd: last message repeated 4 times Jan 1 00:04:05 ci-freebsd-i386-2 syslogd: last message repeated 1 times Jan 1 00:04:11 ci-freebsd-i386-2 dhclient[6683]: send_packet: No buffer space available Kernel page fault with the following non-sleepable locks held: exclusive sleep mutex sctp-tcb (tcb) r = 0 (0xfffffe0075086180) locked @ /syzkaller/managers/i386/kernel/sys/netinet/sctputil.c:1776 stack backtrace: #0 0xffffffff81613f36 at witness_debugger+0x156 #1 0xffffffff816163e4 at witness_warn+0x894 #2 0xffffffff820b2d37 at trap_pfault+0x157 #3 0xffffffff820b14f8 at trap+0x648 #4 0xffffffff82059848 at calltrap+0x8 #5 0xffffffff841ebafc at sctp_lowlevel_chunk_output+0x1f0c #6 0xffffffff842065e9 at sctp_send_abort_tcb+0x569 #7 0xffffffff8427e99e at sctp_abort_an_association+0xbe #8 0xffffffff8427c702 at sctp_timeout_handler+0xf92 #9 0xffffffff815338e5 at softclock_call_cc+0x395 #10 0xffffffff81536c70 at softclock_thread+0x200 #11 0xffffffff8144e9dc at fork_exit+0xcc #12 0xffffffff8205a8ae at fork_trampoline+0xe Fatal trap 12: page fault while in kernel mode cpuid = 0; apic id = 00 fault virtual address = 0x10 fault code = supervisor read data, page not present instruction pointer = 0x20:0xffffffff81a24927 stack pointer = 0x0:0xfffffe0056c8a6c0 frame pointer = 0x0:0xfffffe0056c8a770 code segment = base 0x0, limit 0xfffff, type 0x1b = DPL 0, pres 1, long 1, def32 0, gran 1 processor eflags = interrupt enabled, resume, IOPL = 0 current process = 2 (clock (0)) SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) rdi: 0000000000000010 rsi: 0000000000000000 rdx: 000000000a844560 rcx: ff fffe00033eee30 r8: 0000000000000000 r9: 0000000000000001 r FreeBSD/amd64ax: fffffe00033eee30 rbx: 0000000000000000 rbp: fffffe0056c8a770 r10: 0100000000000000 r11: 000000000000001f r12: dffff7c000000000 r13: 1fffffc00ad914d8 r14: fffffe0054222800 r15: 000000000000ffff (ci-freebsd-i38trap number = 12 panic: page fault cpuid = 0 time = 263 KDB: stack backtrace: db_trace_self_wrapper() at db_trace_self_wrapper+0xc6/frame 0xfffffe0056c89df0 kdb_backtrace() at kdb_backtrace+0xd0/frame 0xfffffe0056c89f50 vpanic() at vpanic+0x280/frame 0xfffffe0056c8a110 panic() at panic+0xb5/frame 0xfffffe0056c8a1d0 trap_fatal() at trap_fatal+0x7f2/frame 0xfffffe0056c8a2f0 trap_pfault() at trap_pfault+0x179/frame 0xfffffe0056c8a410 trap() at trap+0x648/frame 0xfffffe0056c8a5f0 calltrap() at calltrap+0x8/frame 0xfffffe0056c8a5f0 --- trap 0xc, rip = 0xffffffff81a24927, rsp = 0xfffffe0056c8a6c0, rbp = 0xfffffe0056c8a770 --- in6_selecthlim() at in6_selecthlim+0xd7/frame 0xfffffe0056c8a770 sctp_lowlevel_chunk_output() at sctp_lowlevel_chunk_output+0x1f0c/frame 0xfffffe0056c8aa20 sctp_send_abort_tcb() at sctp_send_abort_tcb+0x569/frame 0xfffffe0056c8ab20 sctp_abort_an_association() at sctp_abort_an_association+0xbe/frame 0xfffffe0056c8ab70 sctp_timeout_handler() at sctp_timeout_handler+0xf92/frame 0xfffffe0056c8acb0 softclock_call_cc() at softclock_call_cc+0x395/frame 0xfffffe0056c8ae80 softclock_thread() at softclock_thread+0x200/frame 0xfffffe0056c8aef0 fork_exit() at fork_exit+0xcc/frame 0xfffffe0056c8af30 fork_trampoline() at fork_trampoline+0xe/frame 0xfffffe0056c8af30 --- trap 0, rip = 0, rsp = 0, rbp = 0 --- KDB: enter: panic [ thread pid 2 tid 100030 ] Stopped at kdb_enter+0x6e: movq $0,0x23e1eb7(%rip) db> set $lines = 0 db> set $maxwidth = 0 db> show registers cs 0x20 ds 0x3b es 0x3b fs 0x13 gs 0x1b ss 0 rax 0x12 rcx 0xfffffe00033eee30 rdx 0 rbx 0xffffffff82724700 .str.27 rsp 0xfffffe0056c89f30 rbp 0xfffffe0056c89f50 rsi 0 rdi 0xffffffff815d42b9 printf+0x149 r8 0 r9 0xffffffff r10 0 r11 0x17 r12 0xfffffe0007a19000 r13 0xfffffffffffffffe r14 0xffffffff82724700 .str.27 r15 0 rip 0xffffffff815be15e kdb_enter+0x6e rflags 0x46 kdb_enter+0x6e: movq $0,0x23e1eb7(%rip) db> show proc Process 2 (clock) at 0xfffffe0007a06020: state: NORMAL uid: 0 gids: 0 parent: pid 0 at 0xffffffff8392a740 ABI: null flag: 0x10020284 flag2: 0 reaper: 0xffffffff8392a740 reapsubtree: 2 sigparent: 20 vmspace: 0xffffffff8392b6e0 (map 0xffffffff8392b6e0) (map.pmap 0xffffffff8392b7a0) (pmap 0xffffffff8392b810) threads: 2 100030 Run CPU 0 [clock (0)] 100031 I [clock (1)] db> ps pid ppid pgrp uid state wmesg wchan cmd 6686 6680 6686 0 Ss select 0xfffffe0058711740 dhclient 6683 1 6683 0 Ss select 0xfffffe0058711f40 dhclient 6680 6673 424 65 S select 0xfffffe0058711bc0 dhclient 6673 424 424 0 S wait 0xfffffe005b73f560 sh 6650 1 6650 65 Ss select 0xfffffe005847f040 dhclient 6646 6645 6645 0 D ifnet_d 0xffffffff83a9f380 ifconfig 6645 763 6645 0 S wait 0xfffffe0007a07b00 syz-executor 6644 6643 6643 0 D ifnet_d 0xffffffff83a9f380 ifconfig 6643 763 6643 0 S wait 0xfffffe0007a24000 syz-executor 6642 1 6642 0 Ss select 0xfffffe0058712840 dhclient 6639 1 6639 0 Ss select 0xfffffe0058711dc0 dhclient 6620 1 6620 65 Ss select 0xfffffe00587128c0 dhclient 6616 1 6615 0 D ifnet_d 0xffffffff83a9f380 ifconfig 6614 1 6613 0 D ifnet_d 0xffffffff83a9f380 ifconfig 6612 1 6612 0 Ss select 0xfffffe005847c3c0 dhclient 6609 1 6609 0 Ss select 0xfffffe005847ca40 dhclient 6590 1 6590 65 Ss select 0xfffffe0058712040 dhclient 6586 1 6585 0 D ifnet_d 0xffffffff83a9f380 ifconfig 6584 1 6583 0 D ifnet_d 0xffffffff83a9f380 ifconfig 6560 1 6559 0 D ifnet_d 0xffffffff83a9f380 ifconfig 6532 1 4523 0 S umtxn 0xfffffe0074e72200 syz-executor 6531 1 4523 0 S uwait 0xfffffe0058480300 syz-executor 6521 1 6520 0 D tun_con 0xfffffe00598b76a8 ifconfig 6477 0 0 0 DL - 0xffffffff83a91200 [soaiod4] 6476 0 0 0 DL - 0xffffffff83a91200 [soaiod3] 6475 0 0 0 DL - 0xffffffff83a91200 [soaiod2] 6474 0 0 0 DL - 0xffffffff83a91200 [soaiod1] 6427 1 6426 0 S uwait 0xfffffe0074e70800 syz-executor 6354 1 4523 0 S uwait 0xfffffe0074e71200 syz-executor 6295 1 4523 0 S uwait 0xfffffe0075376d00 syz-executor 6275 1 766 0 S uwait 0xfffffe0075376800 syz-executor 6196 1 4523 0 S uwait 0xfffffe0075377380 syz-executor 6167 1 766 0 S uwait 0xfffffe0058481400 syz-executor 6140 1 766 0 S uwait 0xfffffe0074e70600 syz-executor 6122 1 4523 0 S uwait 0xfffffe0075377580 syz-executor 6095 1 4523 0 S uwait 0xfffffe00586faa80 syz-executor 6094 1 4523 0 S uwait 0xfffffe0075378c80 syz-executor 6093 6092 766 -1 S uwait 0xfffffe0075376b00 syz-executor 6092 1 766 -1 SV wait 0xfffffe005b7b4ac0 syz-executor 6043 1 6042 0 S uwait 0xfffffe0075376a00 syz-executor 6031 1 6030 0 S uwait 0xfffffe0074e71100 syz-executor 6028 1 766 0 S uwait 0xfffffe0075379280 syz-executor 6027 1 766 0 S uwait 0xfffffe0058481500 syz-executor 6001 1 6000 0 S uwait 0xfffffe0075377c00 syz-executor 5865 1 5864 0 S uwait 0xfffffe0058483500 syz-executor 5849 1 4523 0 SV uwait 0xfffffe0058483400 syz-executor 5830 1 766 0 SV uwait 0xfffffe0074e71000 syz-executor 5805 1 4523 0 SV uwait 0xfffffe005422ed80 syz-executor 5731 1 4523 0 S uwait 0xfffffe0075377900 syz-executor 5568 1 5568 0 SVs uwait 0xfffffe0075377a00 syz-executor 5496 1 4523 0 SV uwait 0xfffffe0075378e80 syz-executor 5418 1 766 -1 SV uwait 0xfffffe0075379180 syz-executor 5319 1 4523 60928 T uwait 0xfffffe0075377800 syz-executor 5218 1 4523 0 S uwait 0xfffffe005422e880 syz-executor 5217 1 4523 0 S uwait 0xfffffe005422e480 syz-executor 5206 1 4523 0 S uwait 0xfffffe0075379080 syz-executor 5204 1 4523 0 S uwait 0xfffffe0075377700 syz-executor 5173 1 766 0 S uwait 0xfffffe005422e580 syz-executor 5172 1 766 0 S uwait 0xfffffe0075378300 syz-executor 5150 1 4523 0 S uwait 0xfffffe0058480b80 syz-executor 5149 1 4523 0 S uwait 0xfffffe0074e71780 syz-executor 5125 1 766 0 SV uwait 0xfffffe0074e71d80 syz-executor 5124 1 4523 0 SV sigwait 0xfffffe005b77b0f0 syz-executor 5096 1 766 0 S uwait 0xfffffe00586fa380 syz-executor 5000 1 4523 0 SV uwait 0xfffffe005422e180 syz-executor 4998 1 4523 0 S uwait 0xfffffe0058481300 syz-executor 4984 1 766 0 S uwait 0xfffffe005422ee80 syz-executor 4975 0 0 0 DL mdwait 0xfffffe00079df000 [md2] 4950 1 4523 0 S uwait 0xfffffe0075379380 syz-executor 4774 1 4523 0 S uwait 0xfffffe0058483600 syz-executor 4691 1 4523 60928 S uwait 0xfffffe005422e380 syz-executor 4683 1 766 0 SV aiowc 0xfffffe005b742948 syz-executor 4675 1 766 0 S uwait 0xfffffe0058481980 syz-executor 4671 0 0 0 DL mdwait 0xfffffe0075398000 [md1] 4604 1 4523 0 S uwait 0xfffffe0074e71b80 syz-executor 4567 1 4567 0 Ss select 0xfffffe005847df40 dhclient 4562 1 4562 0 Ss select 0xfffffe005847d840 dhclient 4523 763 4523 0 R syz-executor 4197 1 766 -1 S uwait 0xfffffe0058482e00 syz-executor 4137 1 766 0 S uwait 0xfffffe0074e71980 syz-executor 4012 0 0 0 DL mdwait 0xfffffe0059831000 [md0] 3941 1 766 60928 S uwait 0xfffffe0058483300 syz-executor 3824 1 766 0 S uwait 0xfffffe005422e280 syz-executor 3495 1 766 0 S uwait 0xfffffe0075378880 syz-executor 3358 1 766 0 S uwait 0xfffffe0058480200 syz-executor 3208 0 0 0 DL (threaded) [so_splice] 100436 D - 0xfffffe0075378f00 [thr_0] 102649 D - 0xfffffe0075378f40 [thr_1] 3184 1 766 0 S uwait 0xfffffe005422e980 syz-executor 2998 1 766 0 S uwait 0xfffffe0058480c80 syz-executor 2863 1 766 0 S uwait 0xfffffe0058480880 syz-executor 2833 1 766 0 S uwait 0xfffffe0058480a80 syz-executor 2103 1 766 0 T uwait 0xfffffe0058481d80 syz-executor 1944 1 766 0 S uwait 0xfffffe00586fa280 syz-executor 1767 1 766 0 S uwait 0xfffffe0058483900 syz-executor 1179 1 766 0 S uwait 0xfffffe0058481100 syz-executor 1053 0 0 0 DL aiordy 0xfffffe005b704020 [aiod4] 1052 0 0 0 DL aiordy 0xfffffe005b6c55a0 [aiod3] 1051 0 0 0 DL aiordy 0xfffffe005b6c5040 [aiod2] 1050 0 0 0 DL aiordy 0xfffffe005b704580 [aiod1] 949 1 766 0 S uwait 0xfffffe00586fa780 syz-executor 766 763 766 0 R syz-executor 763 761 761 0 RE CPU 1 syz-executor 761 759 761 0 Ss pause 0xfffffe005b6c6670 csh 759 682 759 0 Ss select 0xfffffe005847e040 sshd 748 1 748 0 Rs+ getty 747 1 747 0 Ss+ ttyin 0xfffffe00596b94b0 getty 746 1 746 0 Ss+ ttyin 0xfffffe00596b9cb0 getty 745 1 745 0 Ss+ ttyin 0xfffffe00596ba4b0 getty 744 1 744 0 Ss+ ttyin 0xfffffe00596bacb0 getty 743 1 743 0 Ss+ ttyin 0xfffffe00543574b0 getty 742 1 742 0 Ss+ ttyin 0xfffffe0054357cb0 getty 741 1 741 0 Ss+ ttyin 0xfffffe00543584b0 getty 740 1 740 0 Ss+ ttyin 0xfffffe0054358cb0 getty 686 1 686 0 Ss nanslp 0xffffffff83981401 cron 682 1 682 0 Ss select 0xfffffe0058712ec0 sshd 495 1 495 0 Ss select 0xfffffe005847e8c0 syslogd 424 1 424 0 Ss wait 0xfffffe0007be7b00 devd 423 1 423 65 Ss select 0xfffffe005847edc0 dhclient 338 1 338 0 Ss select 0xfffffe005847ea40 dhclient 335 1 335 0 Ss select 0xfffffe00587136c0 dhclient 17 0 0 0 DL syncer 0xffffffff83a9ebe0 [syncer] 16 0 0 0 DL vlruwt 0xfffffe0007a27060 [vnlru] 15 0 0 0 RL (threaded) [bufdaemon] 100081 D psleep 0xffffffff83a9d1a0 [bufdaemon] 100084 RunQ [bufspacedaemon-0] 100097 D sdflush 0xfffffe00580144e8 [/ worker] 9 0 0 0 DL psleep 0xffffffff83ae88a0 [vmdaemon] 8 0 0 0 DL (threaded) [pagedaemon] 100079 D psleep 0xffffffff83ace838 [dom0] 100082 D launds 0xffffffff83ace844 [laundry: dom0] 100083 D umarcl 0xffffffff81d72d80 [uma] 7 0 0 0 DL - 0xffffffff836feb90 [rand_harvestq] 6 0 0 0 TL pftm 0xffffffff845389d0 [pf purge] 5 0 0 0 DL waiting 0xffffffff842c0a00 [sctp_iterator] 4 0 0 0 RL (threaded) [cam] 100045 RunQ [doneq0] 100046 D - 0xffffffff836c92c0 [async] 100077 D - 0xffffffff836c9140 [scanner] 3 0 0 0 DL (threaded) [crypto] 100042 D crypto_ 0xffffffff83aca020 [crypto] 100043 D crypto_ 0xfffffe0057f7b030 [crypto returns 0] 100044 D crypto_ 0xfffffe0057f7b080 [crypto returns 1] 14 0 0 0 DL seqstat 0xfffffe00085f6488 [sequencer 00] 13 0 0 0 DL (threaded) [geom] 100036 D - 0xffffffff83929d60 [g_event] 100037 D - 0xffffffff83929d80 [g_up] 100038 D - 0xffffffff83929da0 [g_down] 2 0 0 0 TL (threaded) [clock] 100030 Run CPU 0 [clock (0)] 100031 I [clock (1)] 12 0 0 0 WL (threaded) [intr] 100012 I [swi6: task queue] 100013 I [swi6: Giant taskq] 100015 I [swi5: fast taskq] 100032 I [swi1: netisr 0] 100033 I [swi1: hpts] 100034 I [swi1: hpts] 100047 I [irq24: virtio_pci0] 100048 I [irq25: virtio_pci0] 100049 I [irq26: virtio_pci0] 100050 I [irq27: virtio_pci0] 100051 I [irq28: virtio_pci1] 100052 I [irq29: virtio_pci1] 100053 I [irq30: virtio_pci1] 100054 I [irq31: virtio_pci1] 100055 I [irq32: virtio_pci1] 100060 I [irq33: virtio_pci2] 100061 I [irq34: virtio_pci2] 100062 I [irq35: virtio_pci2] 100064 I [irq1: atkbd0] 100065 I [irq12: psm0] 100066 I [swi0: uart uart++] 100070 I [swi1: pf send] 11 0 0 0 RL (threaded) [idle] 100003 CanRun [idle: cpu0] 100004 CanRun [idle: cpu1] 1 0 1 0 SLs wait 0xfffffe0007a07040 [init] 10 0 0 0 DL audit_w 0xffffffff83acaa80 [audit] 0 0 0 0 DLs (threaded) [kernel] 100000 D parked 0xffffffff84c1aff0 [swapper] 100005 D - 0xfffffe00085fba00 [softirq_0] 100006 D - 0xfffffe00085fb800 [softirq_1] 100007 D - 0xfffffe00085fb600 [if_io_tqg_0] 100008 D - 0xfffffe00085fb400 [if_io_tqg_1] 100009 D - 0xfffffe00085fb200 [if_config_tqg_0] 100010 D - 0xfffffe00085fb000 [pci_hp taskq] 100011 D - 0xfffffe00085fad00 [kqueue_ctx taskq] 100014 D - 0xfffffe00085fa700 [thread taskq] 100016 D - 0xfffffe00085fa300 [aiod_kick taskq] 100017 D - 0xfffffe00085fa100 [deferred_unmount ta] 100018 D - 0xfffffe00085f9e00 [inm_free taskq] 100019 D - 0xfffffe00085f9c00 [in6m_free taskq] 100020 D - 0xfffffe00085f9a00 [linuxkpi_irq_wq] 100021 D - 0xfffffe00085f9800 [linuxkpi_short_wq_0] 100022 D - 0xfffffe00085f9800 [linuxkpi_short_wq_1] 100023 D - 0xfffffe00085f9800 [linuxkpi_short_wq_2] 100024 D - 0xfffffe00085f9800 [linuxkpi_short_wq_3] 100025 D - 0xfffffe00085f9300 [linuxkpi_long_wq_0] 100026 D - 0xfffffe00085f9300 [linuxkpi_long_wq_1] 100027 D - 0xfffffe00085f9300 [linuxkpi_long_wq_2] 100028 D - 0xfffffe00085f9300 [linuxkpi_long_wq_3] 100035 D - 0xfffffe00085f8400 [firmware taskq] 100040 D - 0xfffffe0057f30200 [crypto_0] 100041 D - 0xfffffe0057f30200 [crypto_1] 100056 D - 0xfffffe00085fc300 [vtnet0 rxq 0] 100057 D - 0xfffffe00085fc200 [vtnet0 txq 0] 100058 D - 0xfffffe005836f500 [vtnet0 rxq 1] 100059 D - 0xfffffe005836f400 [vtnet0 txq 1] 100063 D vtbslp 0xfffffe0058353600 [virtio_balloon] 100067 D - 0xffffffff82729940 [deadlkres] 100071 D - 0xfffffe0058701300 [acpi_task_0] 100072 D - 0xfffffe0058701300 [acpi_task_1] 100073 D - 0xfffffe0058701300 [acpi_task_2] 100075 D - 0xfffffe00085fc100 [mca taskq] 100076 D - 0xfffffe0057f2fb00 [CAM taskq] 100078 D - 0xfffffe0057f30700 [ipsec_offload] 5419 5418 766 -1 Z syz-executor db> show all locks Process 6521 (ifconfig) thread 0xfffffe005b790740 (106400) exclusive sx ifnet_detach_sx (ifnet_detach_sx) r = 0 (0xffffffff83a9f380) locked @ /syzkaller/managers/i386/kernel/sys/net/if.c:3028 Process 763 (syz-executor) thread 0xfffffe0007a33000 (100090) exclusive sleep mutex pmap (pmap) r = 0 (0xffffffff835f35a0) locked @ /syzkaller/managers/i386/kernel/sys/amd64/amd64/pmap.c:6408 exclusive sx vm map (user) (vm map (user)) r = 0 (0xffffffff83acddc0) locked @ /syzkaller/managers/i386/kernel/sys/vm/vm_map.c:4108 Process 2 (clock) thread 0xfffffe0007a19000 (100030) exclusive sleep mutex sctp-tcb (tcb) r = 0 (0xfffffe0075086180) locked @ /syzkaller/managers/i386/kernel/sys/netinet/sctputil.c:1776 db> show malloc Type InUse MemUse Requests pf_hash 6 12804K 6 linker 375 5011K 595 tcp_hpts 7 4801K 7 devbuf 4192 4324K 4223 sysctloid 35147 2071K 35218 vtbuf 24 1968K 46 kobj 329 1316K 520 filedesc 148 1179K 11493 newblk 5 1025K 10833 vfscache 3 1025K 3 pcb 91 741K 3459 subproc 328 623K 6894 inodedep 5 514K 6786 ufs_quota 1 512K 1 vfs_hash 1 512K 1 callout 2 512K 2 intr 4 472K 4 vmem 5 276K 9 vnet_data 2 224K 2 acpitask 1 224K 1 KTRACE 101 201K 195122 acpica 1674 184K 61482 tidhash 3 141K 3 pagedep 5 129K 5795 tfo_ccache 1 128K 1 IP reass 1 128K 1 DEVFS1 114 114K 135 sem 4 106K 4 gtaskqueue 18 98K 18 BPF 47 89K 157 bus 995 82K 5165 mtx_pool 2 72K 2 kdtrace 387 71K 13233 syncache 1 68K 1 umtx 544 68K 544 NFSD srvcache 3 68K 3 module 518 65K 521 ddb_capture 1 64K 1 temp 36 40K 3228 DEVFS3 131 33K 143 hostcache 1 32K 1 shm 1 32K 13 sctp_stro 31 31K 691 LRO 30 31K 34 msg 4 30K 4 kbdmux 6 28K 6 sctp_atcl 63 24K 2382 routetbl 239 22K 875 ifaddr 72 21K 91 DEVFS_RULE 56 20K 56 ufs_mount 4 17K 5 proc 3 17K 3 filemon 2 16K 89 tty 16 16K 16 ithread 97 16K 97 bus-sc 34 15K 1687 ifnet 8 15K 9 GEOM 82 14K 606 eventhandler 163 14K 163 lltable 42 13K 145 tcp_fsb_rack 6 13K 474 plimit 33 13K 529 ether_multi 152 13K 306 md_disk 3 12K 9 kenv 95 12K 95 DEVFSP 175 11K 621 ksem 8 11K 56 rman 86 11K 451 CAM queue 5 11K 1528 kcovinfo 156 10K 182 shmfd 4 10K 20 cred 37 10K 528 kqueue 144 9K 6974 in6_multi 65 9K 88 sctp_timw 34 9K 34 pwddesc 136 9K 6890 bmsafemap 2 9K 6670 rpc 4 9K 4 devstat 4 9K 4 UART 12 9K 12 pfs_vncache 1 8K 1 audit_evclass 238 8K 300 taskqueue 66 7K 132 sglist 6 7K 6 CAM DEV 3 6K 510 pfs_nodes 22 6K 22 ufs_dirhash 24 5K 24 pf_ifnet 12 5K 66 proc-args 171 5K 8090 UMA 270 5K 270 vt 11 5K 11 pf_table 2 4K 42 memdesc 1 4K 1 MCA 32 4K 32 session 32 4K 75 evdev 4 4K 4 sctp_atky 94 4K 3228 acpisem 28 4K 28 lockf 32 4K 365 selfd 52 4K 229118 terminal 11 3K 11 uidinfo 5 3K 92 select 19 3K 144 hhook 8 3K 10 clone 9 3K 10 local_apic 1 2K 1 io_apic 1 2K 1 ipsec-saq 2 2K 2 CC Mem 8 2K 786 sctp_ifa 15 2K 18 ip6ndp 12 2K 17 Unitno 28 2K 86 CAM XPT 22 2K 543 msi 12 2K 12 in_multi 6 2K 29 pfil 14 2K 14 tun 4 2K 6 toponodes 6 2K 6 netlink 3 2K 226 ipsecpolicy 2 2K 2 mount 25 2K 1708 pf_osfp 11 2K 11 acpidev 20 2K 20 softdep 1 1K 1 sahead 1 1K 1 secasvar 1 1K 1 nhops 6 1K 8 vnodemarker 2 1K 90 NFSD session 1 1K 1 sctp_athm 63 1K 2482 sctp_map 62 1K 1374 CAM periph 4 1K 271 inpcbpolicy 27 1K 1492 tcp_pcm_rack 3 1K 237 ipsec 3 1K 3 sctp_ifn 6 1K 18 mld 6 1K 8 igmp 6 1K 8 isadev 6 1K 6 pci_link 10 1K 10 crypto 4 1K 253 encap_export_host 12 1K 12 procdesc 5 1K 16 ip_msource 8 1K 33 osd 13 1K 777 cdev 2 1K 2 lkpikmalloc 8 1K 9 diradd 3 1K 6450 chacha20random 1 1K 1 biobuf 1 1K 1 ip6opt 2 1K 167 savedino 1 1K 1694 newdirblk 2 1K 5719 mkdir 2 1K 11438 vnodes 1 1K 40 NFSD lckfile 1 1K 1 NFSD V4client 1 1K 1 DEVFS 9 1K 10 CAM SIM 2 1K 2 feeder 7 1K 7 sctp_aadr 3 1K 59 tcpfunc 3 1K 3 loginclass 3 1K 6 prison 6 1K 6 filedesc_to_leader 3 1K 23 pf_rule 1 1K 40 cryptodev 2 1K 745 nexusdev 8 1K 8 apmdev 1 1K 1 atkbddev 2 1K 2 aio 4 1K 13 iov 2 1K 44502 pmchooks 1 1K 1 CAM path 4 1K 1034 CAM dev queue 2 1K 2 CAM I/O Scheduler 1 1K 1 soname 4 1K 5525 filecaps 5 1K 114 sctp_vrf 1 1K 1 vnet 1 1K 1 pmc 1 1K 1 sigio 1 1K 8 entropy 2 1K 47 acpiintr 1 1K 1 cpus 2 1K 2 vnet_data_free 1 1K 1 Per-cpu 1 1K 1 freework 1 1K 7393 p1003.1b 1 1K 1 mqdata 0 0K 0 tcp_do_rack 0 0K 1 pf_altq 0 0K 0 pf_krule_item 0 0K 0 pf_temp 0 0K 1815 ipcomp 0 0K 0 esp 0 0K 0 ah 0 0K 0 sctp_mcore 0 0K 0 sctp_socko 0 0K 1146 sctp_iter 0 0K 21 sctp_mvrf 0 0K 0 sctp_cpal 0 0K 5 sctp_cmsg 0 0K 0 sctp_stre 0 0K 0 sctp_athi 0 0K 0 sctp_a_it 0 0K 17 sctp_stri 0 0K 190 madt_table 0 0K 2 smartpqi 0 0K 0 ixl 0 0K 0 ice-resmgr 0 0K 0 ice-osdep 0 0K 0 ice 0 0K 0 iavf 0 0K 0 axgbe 0 0K 0 fpukern_ctx 0 0K 0 xen_intr 0 0K 0 xen_hvm 0 0K 0 legacydrv 0 0K 0 bounce 0 0K 0 busdma 0 0K 0 qpidrv 0 0K 0 dmar_idpgtbl 0 0K 0 dmar_dom 0 0K 0 dmar_ctx 0 0K 0 isci 0 0K 0 iommu_dmamap 0 0K 0 hyperv_socket 0 0K 0 bxe_ilt 0 0K 0 aesni_data 0 0K 0 xenbus 0 0K 0 vm_fictitious 0 0K 0 UMAHash 0 0K 0 vm_pgdata 0 0K 0 jblocks 0 0K 0 sentinel 0 0K 0 jfsync 0 0K 0 jtrunc 0 0K 0 sbdep 0 0K 43 jsegdep 0 0K 0 jseg 0 0K 0 jfreefrag 0 0K 0 jfreeblk 0 0K 0 jnewblk 0 0K 0 jmvref 0 0K 0 jremref 0 0K 0 jaddref 0 0K 0 freedep 0 0K 0 dirrem 0 0K 6413 freefile 0 0K 6290 freeblks 0 0K 5995 freefrag 0 0K 367 allocindir 0 0K 0 indirdep 0 0K 1773 allocdirect 0 0K 0 ufs_trim 0 0K 0 mactemp 0 0K 0 audit_trigger 0 0K 0 audit_pipe_presel 0 0K 0 audit_pipeent 0 0K 0 audit_pipe 0 0K 0 audit_evname 0 0K 0 audit_bsm 0 0K 0 audit_gidset 0 0K 0 audit_text 0 0K 0 audit_path 0 0K 0 audit_data 0 0K 0 audit_cred 0 0K 0 ktls_ocf 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5E_TLS_RX 0 0K 0 MLX5EEPROM 0 0K 0 MLX5E_TLS 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EN 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5DUMP 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 simple_attr 0 0K 0 seq_file 0 0K 0 lkpiskb 0 0K 0 radix 0 0K 0 idr 0 0K 0 lkpindev 0 0K 0 lkpimhi 0 0K 0 lkpifw 0 0K 0 lkpi80211 0 0K 0 NLM 0 0K 0 ipsec-spdcache 0 0K 0 ipsec-reg 0 0K 0 ipsec-misc 0 0K 4 ipsecrequest 0 0K 0 ip6_msource 0 0K 0 ip6_moptions 0 0K 12 in6_mfilter 0 0K 5 frag6 0 0K 4 tcplog 0 0K 0 tcp_hwpace 0 0K 0 ip_moptions 0 0K 49 in_mfilter 0 0K 73 ipid 0 0K 0 80211scan 0 0K 0 80211ratectl 0 0K 0 80211power 0 0K 0 80211nodeie 0 0K 0 80211node 0 0K 0 80211mesh_gt 0 0K 0 80211mesh_rt 0 0K 0 80211perr 0 0K 0 80211prep 0 0K 0 80211preq 0 0K 0 80211dfs 0 0K 0 80211crypto 0 0K 0 80211vap 0 0K 0 iflib 0 0K 0 vlan 0 0K 0 gif 0 0K 0 ifdescr 0 0K 0 zlib 0 0K 22 fadvise 0 0K 0 VN POLL 0 0K 40 statfs 0 0K 209 namei_tracker 0 0K 21 export_host 0 0K 0 cl_savebuf 0 0K 150 lio 0 0K 102 acl 0 0K 0 mbuf_tag 0 0K 0 ktls 0 0K 0 accf 0 0K 0 pts 0 0K 0 timerfd 0 0K 0 ioctlops 0 0K 285 eventfd 0 0K 22 Witness 0 0K 0 stack 0 0K 0 sbuf 0 0K 510 firmware 0 0K 0 compressor 0 0K 0 SWAP 0 0K 0 sysctltmp 0 0K 926 sysctl 0 0K 3 ekcd 0 0K 0 dumper 0 0K 0 sendfile 0 0K 2 rctl 0 0K 0 cache 0 0K 0 prison_racct 0 0K 0 Fail Points 0 0K 0 pwd 0 0K 0 tty console 0 0K 0 boottrace 0 0K 0 isofs_node 0 0K 0 isofs_mount 0 0K 0 tr_raid5_data 0 0K 0 tr_raid1e_data 0 0K 0 tr_raid1_data 0 0K 0 tr_raid0_data 0 0K 0 tr_concat_data 0 0K 0 md_sii_data 0 0K 0 md_promise_data 0 0K 0 md_nvidia_data 0 0K 0 md_jmicron_data 0 0K 0 md_intel_data 0 0K 0 md_ddf_data 0 0K 0 raid_data 0 0K 90 geom_flashmap 0 0K 0 tmpfs dir 0 0K 0 tmpfs name 0 0K 0 tmpfs mount 0 0K 0 tmpfs extattr 0 0K 0 NFS FHA 0 0K 0 newnfsmnt 0 0K 0 newnfsclient_req 0 0K 0 NFSCL layrecall 0 0K 0 NFSCL session 0 0K 0 NFSCL sockreq 0 0K 0 NFSCL devinfo 0 0K 0 NFSCL flayout 0 0K 0 NFSCL layout 0 0K 0 NFSD rollback 0 0K 0 NFSCL diroff 0 0K 0 NEWNFSnode 0 0K 0 NFSCL lck 0 0K 0 NFSCL lckown 0 0K 0 NFSCL client 0 0K 0 NFSCL deleg 0 0K 0 NFSCL open 0 0K 0 NFSCL owner 0 0K 0 NFS fh 0 0K 0 NFS req 0 0K 0 NFSD usrgroup 0 0K 0 NFSD string 0 0K 0 NFSD V4lock 0 0K 0 NFSD V4state 0 0K 0 msdosfs_fat 0 0K 0 msdosfs_mount 0 0K 0 msdosfs_node 0 0K 0 DEVFS4 0 0K 0 DEVFS2 0 0K 0 gntdev 0 0K 0 privcmd_dev 0 0K 0 evtchn_dev 0 0K 0 xenstore 0 0K 0 xnb 0 0K 0 xen_acpi 0 0K 0 xbbd 0 0K 0 xbd 0 0K 0 Balloon 0 0K 0 sysmouse 0 0K 0 vtfont 0 0K 0 pvscsi 0 0K 0 USBdev 0 0K 0 USB 0 0K 0 twsbuf 0 0K 0 tcp_log_dev 0 0K 28 midi buffers 0 0K 0 mixer 0 0K 0 ac97 0 0K 0 hdacc 0 0K 0 hdac 0 0K 0 hdaa 0 0K 0 SIIS driver 0 0K 0 PUC 0 0K 0 ppbusdev 0 0K 0 sr_iov 0 0K 0 OCS 0 0K 0 OCS 0 0K 0 nvme 0 0K 0 nvd 0 0K 0 netmap 0 0K 0 mwldev 0 0K 0 MVS driver 0 0K 0 mrsasbuf 0 0K 0 mpt_user 0 0K 0 mps_user 0 0K 0 MPSSAS 0 0K 0 mps 0 0K 0 mpr_user 0 0K 0 MPRSAS 0 0K 0 mpr 0 0K 0 mfibuf 0 0K 0 md_sectors 0 0K 0 malodev 0 0K 0 LED 0 0K 0 ix_sriov 0 0K 0 ix 0 0K 0 ipsbuf 0 0K 0 ciss_data 0 0K 0 BACKLIGHT 0 0K 0 ath_hal 0 0K 0 athdev 0 0K 0 ata_pci 0 0K 0 ata_dma 0 0K 0 ata_generic 0 0K 0 AHCI driver 0 0K 0 agp 0 0K 0 acpipwr 0 0K 0 acpi_perf 0 0K 0 acpicmbat 0 0K 0 aacraidcam 0 0K 0 aacraid_buf 0 0K 0 aaccam 0 0K 0 aacbuf 0 0K 0 zstd 0 0K 0 XZ_DEC 0 0K 0 nvlist 0 0K 208 SCSI ENC 0 0K 0 SCSI sa 0 0K 0 scsi_pass 0 0K 0 scsi_da 0 0K 69 ata_da 0 0K 0 scsi_ch 0 0K 0 scsi_cd 0 0K 0 nvme_da 0 0K 0 CAM CCB 0 0K 523 CAM ccb queue 0 0K 0 db> show uma Zone Size Used Free Requests Sleeps Bucket Total Mem XFree mbuf_jumbo_page 4096 8776 1638 49340 0 254 42655744 0 mbuf 256 9297 8751 260047 0 254 4620288 0 mbuf_cluster 2048 762 254 765 0 254 2080768 0 malloc-16384 16384 73 46 5918 0 1 1949696 0 BUF TRIE 144 214 11574 5546 0 62 1697472 0 RADIX NODE 144 11552 175 128335 0 62 1688688 0 malloc-384 384 4174 56 4235 0 30 1624320 0 malloc-128 128 11880 117 12777 0 126 1535616 0 UMA Slabs 0 112 12677 25 12677 0 126 1422624 0 malloc-4096 4096 337 7 543 0 2 1409024 0 sctp_asoc 2256 31 479 684 0 254 1150560 0 vmem btag 56 19751 88 19751 0 254 1110984 0 malloc-65536 65536 11 2 17 0 1 851968 0 FFS inode 1168 600 65 6956 0 8 776720 0 malloc-4096 4096 146 40 7716 0 2 761856 0 VM OBJECT 264 2253 267 85413 0 30 665280 0 sctp_ep 1152 32 479 1603 0 254 588672 0 256 Bucket 2048 261 21 1824 0 8 577536 0 malloc-64 64 80 8866 272764 0 254 572544 0 socket 1024 55 453 4664 0 254 520192 0 lkpicurr 168 2 3094 2 0 62 520128 0 pbuf 2624 0 198 0 0 2 519552 0 THREAD 1824 248 24 6539 0 8 496128 0 MAP ENTRY 96 3693 1095 247104 0 126 459648 0 malloc-65536 65536 0 6 239 0 1 393216 0 sctp_raddr 736 37 480 900 0 254 380512 0 VNODE 440 640 116 7000 0 30 332640 0 sctp_chunk 152 31 2023 3720 0 254 312208 0 malloc-2048 2048 39 105 1632 0 8 294912 0 malloc-64 64 4436 163 11437 0 254 294336 0 malloc-384 384 6 744 6814 0 30 288000 0 malloc-65536 65536 4 0 4 0 1 262144 0 malloc-32768 32768 6 2 126 0 1 262144 0 malloc-2048 2048 111 17 433 0 8 262144 0 PROC 1376 137 50 6692 0 8 257312 0 malloc-16 16 14730 270 17777 0 254 240000 0 FPU_save_area 832 250 38 12119 0 16 239616 0 DEVCTL 1024 10 210 184 0 0 225280 0 malloc-256 256 506 364 39400 0 62 222720 0 tcp_log 416 0 513 1090 0 254 213408 0 filedesc0 1072 137 52 6890 0 8 202608 0 malloc-65536 65536 0 3 13 0 1 196608 0 malloc-32768 32768 0 6 1593 0 1 196608 0 mbuf_packet 256 101 661 66953 0 254 195072 0 malloc-128 128 1246 273 40315 0 126 194432 0 FFS2 dinode 256 600 150 6956 0 62 192000 0 malloc-256 256 44 706 9930 0 62 192000 0 malloc-32 32 5448 474 12034 0 254 189504 0 UMA Zones 768 242 2 242 0 16 187392 0 malloc-128 128 551 844 10590 0 126 178560 0 lkpimm 56 1 3095 1 0 254 173376 0 malloc-1024 1024 42 118 682 0 16 163840 0 S VFS Cache 104 1031 490 7442 0 126 158184 0 malloc-1024 1024 131 13 157 0 16 147456 0 malloc-256 256 3 567 1824 0 62 145920 0 malloc-65536 65536 0 2 118 0 1 131072 0 unpcb 256 22 488 1459 0 254 130560 0 malloc-384 384 127 203 3040 0 30 126720 0 128 Bucket 1024 74 41 461 0 16 117760 0 ksiginfo 112 173 871 521 0 126 116928 0 malloc-16384 16384 3 4 20 0 1 114688 0 VMSPACE 616 108 72 6608 0 16 110880 0 malloc-32768 32768 1 2 15 0 1 98304 0 malloc-4096 4096 21 3 2947 0 2 98304 0 malloc-2048 2048 3 45 1180 0 8 98304 0 g_bio 408 40 200 35234 0 30 97920 0 ertt_txseginfo 40 1 2322 26376 0 254 92920 0 malloc-4096 4096 21 1 90 0 2 90112 0 UMA Kegs 384 228 5 228 0 30 89472 0 64 Bucket 512 105 63 7409 0 30 86016 0 malloc-128 128 567 84 1376 0 126 83328 0 malloc-8192 8192 8 2 31 0 1 81920 0 malloc-384 384 188 22 537 0 30 80640 0 sctp_readq 152 0 520 81 0 254 79040 0 malloc-8192 8192 4 5 94 0 1 73728 0 malloc-8192 8192 7 2 90 0 1 73728 0 malloc-64 64 540 531 2032 0 254 68544 0 malloc-65536 65536 1 0 1 0 1 65536 0 malloc-65536 65536 1 0 1 0 1 65536 0 malloc-32768 32768 0 2 2 0 1 65536 0 malloc-32768 32768 0 2 11 0 1 65536 0 malloc-256 256 127 128 978 0 62 65280 0 32 Bucket 256 129 126 3930 0 62 65280 0 sctp_stream_msg_out 112 6 534 205 0 254 60480 0 tcp_inpcb 1320 8 34 762 0 8 55440 0 malloc-64 64 340 479 378 0 254 52416 0 tcp_bbr_map 128 0 403 4247 0 126 51584 0 malloc-128 128 2 401 6244 0 126 51584 0 malloc-128 128 116 287 7067 0 126 51584 0 malloc-256 256 62 133 1674 0 62 49920 0 malloc-256 256 22 173 8429 0 62 49920 0 DIRHASH 1024 35 13 35 0 16 49152 0 NAMEI 1024 0 48 41904 0 16 49152 0 malloc-2048 2048 16 8 24 0 8 49152 0 malloc-2048 2048 2 22 58 0 8 49152 0 malloc-1024 1024 10 38 970 0 16 49152 0 tcp_bbr_pcb 896 0 54 224 0 16 48384 0 pcpu-8 8 4942 690 6903 0 254 45056 0 syncache 168 0 264 3 0 254 44352 0 Files 80 349 201 19345 0 126 44000 0 TURNSTILE 136 273 42 273 0 62 42840 0 malloc-8192 8192 3 2 53 0 1 40960 0 pipe 736 42 13 523 0 16 40480 0 da_ccb 544 10 60 8906 0 16 38080 0 udp_inpcb 416 14 76 426 0 30 37440 0 hostcache 64 5 562 5 0 254 36288 0 malloc-64 64 218 349 667 0 254 36288 0 malloc-64 64 161 406 29561 0 254 36288 0 malloc-64 64 116 451 1211 0 254 36288 0 malloc-64 64 322 245 7635 0 254 36288 0 16 Bucket 144 80 172 659 0 62 36288 0 tcp_rack_map 128 8 271 456 0 126 35712 0 malloc-128 128 118 161 916 0 126 35712 0 malloc-128 128 78 201 88 0 126 35712 0 routing nhops 256 28 107 44 0 62 34560 0 ripcb 384 5 85 249 0 30 34560 0 ttyoutq 256 72 63 160 0 62 34560 0 malloc-384 384 49 41 78 0 30 34560 0 malloc-256 256 52 83 1004 0 62 34560 0 malloc-256 256 51 84 139 0 62 34560 0 SLEEPQUEUE 88 273 111 273 0 126 33792 0 malloc-32768 32768 1 0 1 0 1 32768 0 malloc-16384 16384 1 1 2 0 1 32768 0 malloc-16384 16384 0 2 4 0 1 32768 0 malloc-16384 16384 0 2 3 0 1 32768 0 malloc-16384 16384 2 0 2 0 1 32768 0 malloc-8192 8192 3 1 4 0 1 32768 0 malloc-4096 4096 3 5 20 0 2 32768 0 malloc-2048 2048 5 11 50 0 8 32768 0 malloc-2048 2048 3 13 196 0 8 32768 0 malloc-2048 2048 4 12 182 0 8 32768 0 malloc-1024 1024 0 32 52 0 16 32768 0 malloc-1024 1024 12 20 41 0 16 32768 0 malloc-1024 1024 5 27 196 0 16 32768 0 malloc-1024 1024 11 21 15 0 16 32768 0 malloc-1024 1024 1 31 1421 0 16 32768 0 malloc-512 512 0 64 8 0 30 32768 0 malloc-512 512 12 52 106 0 30 32768 0 malloc-512 512 6 58 317 0 30 32768 0 malloc-512 512 6 58 162 0 30 32768 0 malloc-512 512 8 56 9 0 30 32768 0 malloc-512 512 0 64 19 0 30 32768 0 pcpu-64 64 492 20 492 0 254 32768 0 PWD 40 78 730 5650 0 254 32320 0 tcp_rack_pcb 1152 3 25 237 0 8 32256 0 ttyinq 160 135 65 300 0 62 32000 0 PGRP 120 46 218 101 0 126 31680 0 clpbuf 2624 0 12 140 0 4 31488 0 L VFS Cache 320 0 96 72 0 30 30720 0 sctp_asconf_ack 48 0 588 5 0 254 28224 0 sctp_laddr 48 52 536 807 0 254 28224 0 rl_entry 48 30 558 266 0 254 28224 0 malloc-32 32 278 604 595 0 254 28224 0 4 Bucket 48 7 581 14 0 254 28224 0 2 Bucket 32 124 758 1378 0 254 28224 0 AIO 208 1 132 131 0 62 27664 0 udplite_inpcb 416 0 63 55 0 30 26208 0 cpuset 200 7 121 26 0 62 25600 0 malloc-4096 4096 1 5 18 0 2 24576 0 rtentry 168 30 114 44 0 62 24192 0 8 Bucket 80 85 215 1455 0 126 24000 0 itimer 352 1 65 19 0 30 23232 0 malloc-384 384 6 54 31 0 30 23040 0 malloc-384 384 0 60 1549 0 30 23040 0 malloc-384 384 2 58 2 0 30 23040 0 domainset 40 0 567 15 0 254 22680 0 Mountpoints 2816 2 6 29 0 4 22528 0 udplite_inpcb ports 32 0 630 9 0 254 20160 0 udp_inpcb ports 32 3 627 116 0 254 20160 0 tcp_inpcb ports 32 4 626 356 0 254 20160 0 ertt 72 8 272 762 0 126 20160 0 malloc-32 32 141 489 331 0 254 20160 0 malloc-32 32 301 329 2650 0 254 20160 0 malloc-32 32 54 576 299 0 254 20160 0 malloc-32 32 87 543 4616 0 254 20160 0 malloc-32 32 6 624 1143 0 254 20160 0 KNOTE 160 0 125 156 0 62 20000 0 cryptop 280 0 70 75 0 30 19600 0 AIOCB 552 0 35 94 0 16 19320 0 AIOLIO 272 0 70 51 0 30 19040 0 vmem 1856 2 7 2 0 8 16704 0 epoch_record pcpu 256 4 60 4 0 62 16384 0 malloc-16384 16384 1 0 1 0 1 16384 0 malloc-4096 4096 0 4 3 0 2 16384 0 malloc-512 512 1 31 663 0 30 16384 0 malloc-512 512 3 29 7 0 30 16384 0 SMR CPU 32 8 503 8 0 254 16352 0 ipq 56 0 288 3 0 254 16128 0 vtnet_tx_hdr 24 0 668 24429 0 254 16032 0 pf frags 248 0 64 2 0 62 15872 0 mqueue 248 1 63 1 0 62 15872 0 tcp_log_id_node 120 0 132 15 0 126 15840 0 mqnotifier 216 0 72 1 0 62 15552 0 kenv 258 17 43 1087 0 30 15480 0 mqnode 416 4 32 4 0 30 14976 0 SMR SHARED 24 8 503 8 0 254 12264 0 tcp_log_id_bucket 176 0 69 18 0 62 12144 0 malloc-32 32 10 368 83357 0 254 12096 0 malloc-16 16 123 627 7503 0 254 12000 0 malloc-16 16 43 707 1671 0 254 12000 0 malloc-16 16 19 731 84203 0 254 12000 0 malloc-16 16 88 662 3402 0 254 12000 0 malloc-16 16 37 713 68 0 254 12000 0 malloc-16 16 278 472 28447 0 254 12000 0 malloc-16 16 87 663 2489 0 254 12000 0 tfo_ccache_entries 80 2 126 2 0 126 10240 0 malloc-8192 8192 1 0 1 0 1 8192 0 malloc-8192 8192 1 0 1 0 1 8192 0 malloc-8192 8192 1 0 1 0 1 8192 0 malloc-4096 4096 1 1 1 0 2 8192 0 pcpu-16 16 8 504 8 0 254 8192 0 pf frag entries 40 0 101 5 0 8 4040 0 UMA Slabs 1 176 10 12 10 0 62 3872 0 KMAP ENTRY 96 12 27 23 0 0 3744 0 tfo 4 0 493 1 0 254 1972 0 splice 184 0 0 0 0 62 0 0 FFS1 dinode 128 0 0 0 0 126 0 0 ada_ccb 272 0 0 0 0 30 0 0 swblk 136 0 0 0 0 62 0 0 swpctrie 144 0 0 0 0 62 0 0 cdg_qdiffsample 16 0 0 0 0 254 0 0 pf state scrubs 40 0 0 0 0 254 0 0 pf table entries 160 0 0 0 0 254 0 0 pf table entry counters 64 0 0 0 0 254 0 0 pf UDP mappings 104 0 0 0 0 126 0 0 pf source nodes 152 0 0 0 0 254 0 0 pf state keys 88 0 0 0 0 126 0 0 pf states 368 0 0 0 0 254 0 0 pf tags 104 0 0 0 0 126 0 0 pf mtags 184 0 0 0 0 62 0 0 sackhole 32 0 0 0 0 254 0 0 sctp_asconf 40 0 0 0 0 254 0 0 tcpreass 48 0 0 0 0 254 0 0 ripcb ports 32 0 0 0 0 254 0 0 IPsec SA lft_c 16 0 0 0 0 254 0 0 mvdata 64 0 0 0 0 254 0 0 TMPFS node 240 0 0 0 0 62 0 0 NCLNODE 608 0 0 0 0 16 0 0 LTS VFS Cache 360 0 0 0 0 30 0 0 STS VFS Cache 144 0 0 0 0 62 0 0 linux_dma_object 32 0 0 0 0 254 0 0 linux_dma_pctrie 144 0 0 0 0 62 0 0 IOMMU_MAP_ENTRY 104 0 0 0 0 126 0 0 mbuf_jumbo_16k 16384 0 0 0 0 254 0 0 mbuf_jumbo_9k 9216 0 0 0 0 254 0 0 audit_record 1280 0 0 0 0 8 0 0 MAC labels 40 0 0 0 0 254 0 0 vnpbuf 2624 0 0 0 0 16 0 0 nfspbuf 2624 0 0 0 0 4 0 0 swwbuf 2624 0 0 0 0 2 0 0 swrbuf 2624 0 0 0 0 4 0 0 umtx_shm 88 0 0 0 0 126 0 0 umtx pi 96 0 0 0 0 126 0 0 rangeset pctrie nodes 144 0 0 0 0 62 0 0 malloc-65536 65536 0 0 0 0 1 0 0 malloc-32768 32768 0 0 0 0 1 0 0 malloc-32768 32768 0 0 0 0 1 0 0 malloc-16384 16384 0 0 0 0 1 0 0 pcpu-32 32 0 0 0 0 254 0 0 pcpu-4 4 0 0 0 0 254 0 0 fakepg 104 0 0 0 0 126 0 0 UMA Hash 256 0 0 0 0 62 0 0