panic: ASan: Invalid access, 2-byte read at 0xfffffe00a4c705e6, UMAUseAfterFree(fd) cpuid = 1 time = 1629113264 KDB: stack backtrace: db_trace_self_wrapper() at db_trace_self_wrapper+0xc7/frame 0xfffffe00a5d94950 kdb_backtrace() at kdb_backtrace+0xd3/frame 0xfffffe00a5d94ab0 vpanic() at vpanic+0x2c5/frame 0xfffffe00a5d94b90 panic() at panic+0xb5/frame 0xfffffe00a5d94c50 __asan_load2_noabort() at __asan_load2_noabort+0x16e/frame 0xfffffe00a5d94d10 sctp_inpcb_bind() at sctp_inpcb_bind+0x67d/frame 0xfffffe00a5d94e50 sctp_aloc_assoc() at sctp_aloc_assoc+0x4d6/frame 0xfffffe00a5d94ef0 sctp_lower_sosend() at sctp_lower_sosend+0x28dd/frame 0xfffffe00a5d95400 sctp_sosend() at sctp_sosend+0x716/frame 0xfffffe00a5d956a0 sosend() at sosend+0x11e/frame 0xfffffe00a5d95710 kern_sendit() at kern_sendit+0x58d/frame 0xfffffe00a5d95880 sendit() at sendit+0x2b0/frame 0xfffffe00a5d958d0 sys_sendto() at sys_sendto+0x182/frame 0xfffffe00a5d959f0 amd64_syscall() at amd64_syscall+0x425/frame 0xfffffe00a5d95bf0 fast_syscall_common() at fast_syscall_common+0xf8/frame 0xfffffe00a5d95bf0 --- syscall (198, FreeBSD ELF64, nosys), rip = 0x287eda, rsp = 0x7fffdfffdf08, rbp = 0x7fffdfffdf70 --- KDB: enter: panic [ thread pid 5602 tid 107537 ] Stopped at kdb_enter+0x6b: movq $0,0x28ea9ca(%rip) db> db> set $lines = 0 db> set $maxwidth = 0 db> show registers cs 0x20 ds 0x3b es 0x3b fs 0x13 gs 0x1b ss 0x28 rax 0x12 rcx 0xf41affe9c7bd8c4 rdx 0x40001 rbx 0 rsp 0xfffffe00a5d94a90 rbp 0xfffffe00a5d94ab0 rsi 0 rdi 0xfffffe009e458e68 r8 0x3 r9 0xfffffe00a5d945c8 r10 0 r11 0xfffffe00a783cc50 r12 0xfffffe00a783c740 r13 0xfffffe00a5d94b01 r14 0xffffffff82c65780 .str.18 r15 0xffffffff82c65780 .str.18 rip 0xffffffff817a096b kdb_enter+0x6b rflags 0x46 kdb_enter+0x6b: movq $0,0x28ea9ca(%rip) db> show proc Process 5602 (syz-executor.0) at 0xfffffe00a768ca70: state: NORMAL uid: 0 gids: 0, 0, 5 parent: pid 782 at 0xfffffe005891fa70 ABI: FreeBSD ELF64 flag: 0x10000080 flag2: 0 arguments: /root/syz-executor.0 reaper: 0xfffffe0053d54538 reapsubtree: 1 sigparent: 20 vmspace: 0xfffffe009e3bb000 (map 0xfffffe009e3bb000) (map.pmap 0xfffffe009e3bb0c0) (pmap 0xfffffe009e3bb120) threads: 2 106612 RunQ syz-executor.0 107537 Run CPU 1 syz-executor.0 db> ps pid ppid pgrp uid state wmesg wchan cmd 5602 782 782 0 R (threaded) syz-executor.0 106612 RunQ syz-executor.0 107537 Run CPU 1 syz-executor.0 5601 786 786 0 R (threaded) syz-executor.2 106362 RunQ syz-executor.2 107536 RunQ syz-executor.2 5282 0 0 0 DL - 0xffffffff8402e4c0 [accounting] 4294 1 782 0 T syz-executor.0 4293 1 807 0 T syz-executor.3 4288 1 807 0 T syz-executor.3 4286 1 782 0 T syz-executor.0 4281 1 782 0 T syz-executor.0 4280 1 807 0 T syz-executor.3 4275 1 782 0 T syz-executor.0 4274 1 782 0 T syz-executor.0 2107 1 2107 65 Ss select 0xfffffe00a79be7c0 dhclient 1992 1 783 0 S uwait 0xfffffe009e4db080 syz-executor.1 1986 1 783 0 S uwait 0xfffffe00a4d43800 syz-executor.1 1982 1 807 0 S uwait 0xfffffe00a4cccd80 syz-executor.3 1980 1 807 0 S uwait 0xfffffe00a4d43280 syz-executor.3 1978 1 807 0 S uwait 0xfffffe00a4c5cd00 syz-executor.3 1976 1 783 0 S uwait 0xfffffe00a7912900 syz-executor.1 1971 1 783 0 S uwait 0xfffffe00a4c5cf00 syz-executor.1 1969 1 783 0 S uwait 0xfffffe00a7912d00 syz-executor.1 1911 1 1911 0 Ss select 0xfffffe00a4c5c6c0 dhclient 1908 1 1908 0 Ss select 0xfffffe00a717f3c0 dhclient 1889 1 1889 65 Ss select 0xfffffe00a71504c0 dhclient 1627 1 1627 0 Ss select 0xfffffe009e4db6c0 dhclient 1614 1 1614 0 Ss select 0xfffffe00a70dcac0 dhclient 1595 1 1595 65 Ss select 0xfffffe00a4cf2ec0 dhclient 1390 0 0 0 DL aiordy 0xfffffe00a70cea70 [aiod4] 1389 0 0 0 DL aiordy 0xfffffe00a70c2000 [aiod3] 1388 0 0 0 DL aiordy 0xfffffe00a70c2538 [aiod2] 1387 0 0 0 DL aiordy 0xfffffe00a70c2a70 [aiod1] 1368 1 786 0 S uwait 0xfffffe00a4ccca80 syz-executor.2 1366 1 807 0 S uwait 0xfffffe009e3f7400 syz-executor.3 1364 1 783 0 S uwait 0xfffffe0058888000 syz-executor.1 1361 1 786 0 S uwait 0xfffffe00a7912e00 syz-executor.2 1359 1 807 0 S uwait 0xfffffe00a4ccc780 syz-executor.3 1357 1 783 0 S uwait 0xfffffe009e2f8200 syz-executor.1 1354 1 786 0 S uwait 0xfffffe0058927e80 syz-executor.2 1352 1 807 0 S uwait 0xfffffe00a4ccc880 syz-executor.3 1350 1 783 0 S uwait 0xfffffe009e4db600 syz-executor.1 1349 1 782 0 S uwait 0xfffffe0058b69e80 syz-executor.0 1346 1 786 0 S uwait 0xfffffe009e4dbb80 syz-executor.2 1343 1 782 0 S uwait 0xfffffe009e3f7200 syz-executor.0 1340 1 786 0 S uwait 0xfffffe009e3f7600 syz-executor.2 1337 1 782 0 S uwait 0xfffffe009e3f7000 syz-executor.0 1334 1 786 0 S uwait 0xfffffe009e3f7300 syz-executor.2 1331 1 786 0 S uwait 0xfffffe009e3f7b00 syz-executor.2 1324 1 786 0 S uwait 0xfffffe009e2f8000 syz-executor.2 1234 1 1234 0 Ss select 0xfffffe00a4ccc140 dhclient 1231 1 1231 0 Ss select 0xfffffe00a7942bc0 dhclient 1217 1 1217 65 Ss select 0xfffffe00a4d31bc0 dhclient 1070 1 1070 0 Ss select 0xfffffe00a4c5c940 dhclient 1067 1 1067 0 Ss select 0xfffffe00a4cbf7c0 dhclient 807 780 807 0 Rs syz-executor.3 786 780 786 0 Rs syz-executor.2 783 780 783 0 Rs CPU 0 syz-executor.1 782 780 782 0 Rs syz-executor.0 780 778 778 0 S (threaded) syz-fuzzer 100114 S uwait 0xfffffe0058b69980 syz-fuzzer 100120 S uwait 0xfffffe00584db000 syz-fuzzer 100121 S uwait 0xfffffe00584db100 syz-fuzzer 100122 S uwait 0xfffffe00584db200 syz-fuzzer 100123 S kqread 0xfffffe0058883400 syz-fuzzer 100124 S uwait 0xfffffe00584db400 syz-fuzzer 100125 S uwait 0xfffffe009e4db780 syz-fuzzer 100126 S uwait 0xfffffe009e4db880 syz-fuzzer 100127 S uwait 0xfffffe009e4db980 syz-fuzzer 778 776 778 0 Ss pause 0xfffffe009e45a0b0 csh 776 694 776 0 Ss select 0xfffffe009e4db5c0 sshd 760 1 760 0 Ss+ ttyin 0xfffffe0057000cb0 getty 759 1 759 0 Ss+ ttyin 0xfffffe00575ee4b0 getty 758 1 758 0 Ss+ ttyin 0xfffffe00575ee8b0 getty 757 1 757 0 Ss+ ttyin 0xfffffe00575eecb0 getty 756 1 756 0 Ss+ ttyin 0xfffffe00583bd0b0 getty 755 1 755 0 Ss+ ttyin 0xfffffe00583bd4b0 getty 754 1 754 0 Ss+ ttyin 0xfffffe00583bd8b0 getty 753 1 753 0 Ss+ ttyin 0xfffffe00583bdcb0 getty 752 1 752 0 Ss+ ttyin 0xfffffe005746e0b0 getty 698 1 698 0 Ss nanslp 0xffffffff84058200 cron 694 1 694 0 Ss select 0xfffffe0058927440 sshd 507 1 507 0 Ss select 0xfffffe009e2f8440 syslogd 436 1 436 0 Ss select 0xfffffe009e2f87c0 devd 435 1 435 65 Ss select 0xfffffe0058818040 dhclient 350 1 350 0 Ss select 0xfffffe009e2f86c0 dhclient 347 1 347 0 Ss select 0xfffffe00588180c0 dhclient 23 0 0 0 DL syncer 0xffffffff84180380 [syncer] 22 0 0 0 DL vlruwt 0xfffffe005875ea70 [vnlru] 21 0 0 0 DL (threaded) [bufdaemon] 100085 D qsleep 0xffffffff8417e1a0 [bufdaemon] 100088 D - 0xffffffff83411f80 [bufspacedaemon-0] 100098 D sdflush 0xfffffe005887e4e8 [/ worker] 20 0 0 0 DL psleep 0xffffffff841b65c0 [vmdaemon] 19 0 0 0 DL (threaded) [pagedaemon] 100083 D psleep 0xffffffff841aa0f8 [dom0] 100089 D launds 0xffffffff841aa104 [laundry: dom0] 100090 D umarcl 0xffffffff81e9c450 [uma] 18 0 0 0 DL - 0xffffffff83e0f320 [rand_harvestq] 17 0 0 0 DL waiting 0xffffffff84cfe460 [sctp_iterator] 16 0 0 0 DL pftm 0xffffffff84778e20 [pf purge] 15 0 0 0 DL - 0xffffffff841794c0 [soaiod4] 9 0 0 0 DL - 0xffffffff841794c0 [soaiod3] 8 0 0 0 DL - 0xffffffff841794c0 [soaiod2] 7 0 0 0 DL - 0xffffffff841794c0 [soaiod1] 6 0 0 0 DL (threaded) [cam] 100048 D - 0xffffffff83c94ac0 [doneq0] 100049 D - 0xffffffff83c94a40 [async] 100082 D - 0xffffffff83c948c0 [scanner] 14 0 0 0 DL seqstat 0xfffffe0056abc888 [sequencer 00] 5 0 0 0 DL crypto_ 0xfffffe0053c0cc80 [crypto returns 1] 4 0 0 0 DL crypto_ 0xfffffe0053c0cc30 [crypto returns 0] 3 0 0 0 DL crypto_ 0xffffffff841a41a0 [crypto] 13 0 0 0 DL (threaded) [geom] 100039 D - 0xffffffff8402b7c0 [g_event] 100040 D - 0xffffffff8402b800 [g_up] 100041 D - 0xffffffff8402b840 [g_down] 2 0 0 0 DL (threaded) [KTLS] 100029 D - 0xfffffe0053dff000 [thr_0] 100030 D - 0xfffffe0053dff080 [thr_1] 100031 D - 0xffffffff8417a748 [alloc_0] 12 0 0 0 WL (threaded) [intr] 100012 I [swi6: task queue] 100013 I [swi6: Giant taskq] 100015 I [swi5: fast taskq] 100032 I [swi4: clock (0)] 100033 I [swi4: clock (1)] 100034 I [swi1: netisr 0] 100035 I [swi3: vm] 100036 I [swi1: hpts] 100037 I [swi1: hpts] 100050 I [irq24: virtio_pci0] 100051 I [irq25: virtio_pci0] 100052 I [irq26: virtio_pci0] 100053 I [irq27: virtio_pci0] 100054 I [irq28: virtio_pci1] 100055 I [irq29: virtio_pci1] 100056 I [irq30: virtio_pci1] 100057 I [irq31: virtio_pci1] 100058 I [irq32: virtio_pci1] 100063 I [irq10: virtio_pci2] 100065 I [irq1: atkbd0] 100066 I [irq12: psm0] 100067 I [swi0: uart uart++] 100075 I [swi1: pf send] 11 0 0 0 RL (threaded) [idle] 100003 CanRun [idle: cpu0] 100004 CanRun [idle: cpu1] 1 0 1 0 SLs wait 0xfffffe0053d54538 [init] 10 0 0 0 DL audit_w 0xffffffff841a5140 [audit] 0 0 0 0 DLs (threaded) [kernel] 100000 D swapin 0xffffffff8402c6c0 [swapper] 100005 D - 0xfffffe0053df0e00 [if_config_tqg_0] 100006 D - 0xfffffe0053df0d00 [softirq_0] 100007 D - 0xfffffe0053df0c00 [softirq_1] 100008 D - 0xfffffe0053df0b00 [if_io_tqg_0] 100009 D - 0xfffffe0053df0a00 [if_io_tqg_1] 100010 D - 0xfffffe0053c07c00 [in6m_free taskq] 100011 D - 0xfffffe0053c07b00 [deferred_unmount ta] 100014 D - 0xfffffe0053c07800 [thread taskq] 100016 D - 0xfffffe0053c07600 [linuxkpi_irq_wq] 100017 D - 0xfffffe0053c07500 [kqueue_ctx taskq] 100018 D - 0xfffffe0053c07400 [aiod_kick taskq] 100019 D - 0xfffffe0053c07300 [pci_hp taskq] 100020 D - 0xfffffe0053c07200 [inm_free taskq] 100021 D - 0xfffffe0053c07100 [linuxkpi_short_wq_0] 100022 D - 0xfffffe0053c07100 [linuxkpi_short_wq_1] 100023 D - 0xfffffe0053c07100 [linuxkpi_short_wq_2] 100024 D - 0xfffffe0053c07100 [linuxkpi_short_wq_3] 100025 D - 0xfffffe0053c07000 [linuxkpi_long_wq_0] 100026 D - 0xfffffe0053c07000 [linuxkpi_long_wq_1] 100027 D - 0xfffffe0053c07000 [linuxkpi_long_wq_2] 100028 D - 0xfffffe0053c07000 [linuxkpi_long_wq_3] 100038 D - 0xfffffe0054189e00 [firmware taskq] 100042 D - 0xfffffe0054189d00 [crypto_0] 100043 D - 0xfffffe0054189d00 [crypto_1] 100059 D - 0xfffffe0054189900 [vtnet0 rxq 0] 100060 D - 0xfffffe0054189800 [vtnet0 txq 0] 100061 D - 0xfffffe0054189700 [vtnet0 rxq 1] 100062 D - 0xfffffe0054189600 [vtnet0 txq 1] 100064 D vtbslp 0xfffffe0056b20a00 [virtio_balloon] 100068 D - 0xfffffe0054189400 [mca taskq] 100073 D - 0xffffffff82c6c700 [deadlkres] 100078 D - 0xfffffe0058345b00 [acpi_task_0] 100079 D - 0xfffffe0058345b00 [acpi_task_1] 100080 D - 0xfffffe0058345b00 [acpi_task_2] 100081 D - 0xfffffe0054189a00 [CAM taskq] db> show all locks Process 5602 (syz-executor.0) thread 0xfffffe00a783c740 (107537) exclusive sleep mutex sctp-inp (inp) r = 0 (0xfffffe00a7ac1468) locked @ /syzkaller/managers/main/kernel/sys/netinet/sctp_pcb.c:2919 exclusive rw sctp-info (sctp-info) r = 0 (0xfffffe00081b37e0) locked @ /syzkaller/managers/main/kernel/sys/netinet/sctp_pcb.c:2918 exclusive sleep mutex sctp-create (inp_create) r = 0 (0xfffffe00a7ac1488) locked @ /syzkaller/managers/main/kernel/sys/netinet/sctp_output.c:12643 Process 783 (syz-executor.1) thread 0xfffffe0058923560 (100099) exclusive sleep mutex pmap (pmap) r = 0 (0xfffffe00a768ab10) locked @ /syzkaller/managers/main/kernel/sys/amd64/amd64/pmap.c:7834 exclusive sleep mutex pmap (pmap) r = 0 (0xfffffe009e4fb500) locked @ /syzkaller/managers/main/kernel/sys/amd64/amd64/pmap.c:7833 exclusive sx vm map (user) (vm map (user)) r = 0 (0xfffffe00a768aa50) locked @ /syzkaller/managers/main/kernel/sys/vm/vm_map.c:4272 exclusive sx vm map (user) (vm map (user)) r = 0 (0xfffffe009e4fb440) locked @ /syzkaller/managers/main/kernel/sys/vm/vm_map.c:4268 db> show malloc Type InUse MemUse Requests pf_hash 5 11524K 5 devbuf 4217 4339K 4245 tcp_hpts 6 3201K 6 sysctloid 34385 2031K 34456 vtbuf 24 1968K 46 kobj 327 1308K 486 newblk 11 1027K 13155 vfscache 3 1025K 3 pcb 150 674K 12816 filedesc 80 634K 9147 inodedep 126 559K 5032 ufs_quota 1 512K 1 vfs_hash 1 512K 1 callout 2 512K 2 intr 4 472K 4 subproc 217 441K 5726 vmem 3 274K 5 acpica 1674 184K 55752 vnet_data 1 168K 1 tidhash 3 141K 3 linker 356 140K 396 pagedep 9 130K 4553 tfo_ccache 1 128K 1 DEVFS1 108 108K 125 sem 4 106K 4 BPF 46 88K 76 bus 989 81K 3490 mtx_pool 2 72K 2 syncache 1 68K 1 acpitask 1 64K 1 ddb_capture 1 64K 1 module 510 64K 510 kdtrace 296 56K 13144 umtx 440 55K 440 sctp_stro 42 42K 2396 sctp_atcl 104 39K 8353 temp 35 33K 2873 hostcache 1 32K 1 shm 1 32K 16 DEVFS3 127 32K 137 msg 4 30K 4 dirrem 116 29K 4839 gtaskqueue 18 26K 18 kbdmux 6 22K 6 ifaddr 70 20K 72 DEVFS_RULE 56 20K 56 ufs_mount 4 17K 5 proc 3 17K 3 routetbl 132 17K 469 tty 16 16K 16 ithread 99 16K 99 bus-sc 34 15K 1693 lltable 45 14K 240 freefile 107 14K 4796 KTRACE 100 13K 100 ifnet 7 13K 7 ether_multi 152 13K 162 kenv 95 12K 95 eventhandler 133 12K 133 ksem 18 11K 191 CAM queue 5 11K 1528 GEOM 61 10K 489 rman 84 10K 425 in6_multi 65 9K 65 kqueue 101 9K 5665 bmsafemap 2 9K 5073 UART 12 9K 12 devstat 4 9K 4 sctp_timw 32 8K 32 rpc 2 8K 2 shmfd 1 8K 75 pfs_vncache 1 8K 1 pfs_nodes 20 8K 20 audit_evclass 237 8K 295 DEVFSP 114 8K 1184 taskqueue 63 7K 63 cred 26 7K 301 pwddesc 99 7K 5627 sctp_atky 148 7K 11252 sglist 5 7K 5 CAM DEV 3 6K 510 plimit 24 6K 503 pf_ifnet 12 5K 67 ufs_dirhash 24 5K 24 UMA 270 5K 270 session 35 5K 56 vt 11 5K 11 memdesc 1 4K 1 MCA 32 4K 32 evdev 4 4K 4 kcovinfo 64 4K 68 acpisem 28 4K 28 selfd 55 4K 70784 lockf 32 4K 183 hhook 15 4K 17 proc-args 52 3K 720 terminal 11 3K 11 select 19 3K 183 xform 36 3K 1878 uidinfo 3 3K 17 local_apic 1 2K 1 io_apic 1 2K 1 fpukern_ctx 2 2K 2 ipsec-saq 2 2K 2 ip6ndp 12 2K 13 Unitno 29 2K 47 sctp_ifa 13 2K 14 sctp_athm 104 2K 8634 CAM XPT 22 2K 543 in_multi 6 2K 8 sctp_map 84 2K 4694 ipsecpolicy 2 2K 2 acpidev 20 2K 20 msi 9 2K 9 clone 9 2K 9 tun 7 2K 7 freework 5 2K 7908 softdep 1 1K 1 mkdir 8 1K 9050 freeblks 4 1K 4923 sahead 1 1K 1 secasvar 1 1K 1 nhops 6 1K 8 vnodemarker 2 1K 122 NFSD session 1 1K 1 CAM periph 4 1K 271 ipsec 3 1K 3 sctp_ifn 6 1K 14 mld 6 1K 6 igmp 6 1K 6 toponodes 6 1K 6 isadev 6 1K 6 mount 16 1K 119 pci_link 10 1K 10 crypto 4 1K 591 encap_export_host 12 1K 12 procdesc 5 1K 18 sctp_stri 1 1K 564 newdirblk 4 1K 4525 diradd 4 1K 4880 pfil 4 1K 4 cdev 2 1K 2 inpcbpolicy 15 1K 3563 osd 8 1K 1885 chacha20random 1 1K 1 NFSD lckfile 1 1K 1 NFSD V4client 1 1K 1 DEVFS 9 1K 10 vnodes 1 1K 1 CAM SIM 2 1K 2 ktls 1 1K 1 feeder 7 1K 7 pf_osfp 2 1K 2 tcpfunc 3 1K 3 loginclass 3 1K 6 prison 6 1K 6 lkpikmalloc 5 1K 6 aesni_data 2 1K 2 nexusdev 8 1K 8 apmdev 1 1K 1 atkbddev 2 1K 2 CAM dev queue 2 1K 2 CAM I/O Scheduler 1 1K 1 ip6_msource 2 1K 6 CAM path 4 1K 1034 soname 5 1K 10595 pmchooks 1 1K 1 filecaps 5 1K 120 sctp_vrf 1 1K 1 vnet 1 1K 1 entropy 2 1K 48 acpiintr 1 1K 1 pmc 1 1K 1 cpus 2 1K 2 vnet_data_free 1 1K 1 Per-cpu 1 1K 1 p1003.1b 1 1K 1 sctp_mcore 0 0K 0 sctp_socko 0 0K 3931 sctp_iter 0 0K 17 sctp_mvrf 0 0K 0 sctp_cpal 0 0K 5 sctp_cmsg 0 0K 0 sctp_stre 0 0K 0 sctp_athi 0 0K 0 sctp_a_it 0 0K 12 sctp_aadr 0 0K 14 tcp_do 0 0K 0 tcp_fsb 0 0K 517 chd data 0 0K 26 cdg data 0 0K 43 dctcp data 0 0K 7 htcp data 0 0K 15 vegas data 0 0K 25 pf_table 0 0K 12 pf_rule 0 0K 73 pf_altq 0 0K 0 pf_temp 0 0K 0 mqdata 0 0K 0 cubic data 0 0K 12 NEWdirectio 0 0K 0 NEWNFSnode 0 0K 0 madt_table 0 0K 2 smartpqi 0 0K 0 NFSCL lck 0 0K 0 NFSCL lckown 0 0K 0 NFSCL client 0 0K 0 NFSCL deleg 0 0K 0 NFSCL open 0 0K 0 NFSCL owner 0 0K 0 NFS fh 0 0K 0 NFS req 0 0K 0 iavf 0 0K 0 ixl 0 0K 0 NFSD usrgroup 0 0K 0 NFSD string 0 0K 0 NFSD V4lock 0 0K 0 NFSD V4state 0 0K 0 NFSD srvcache 0 0K 0 ice-resmgr 0 0K 0 ice-osdep 0 0K 0 ice 0 0K 0 axgbe 0 0K 0 msdosfs_fat 0 0K 0 msdosfs_mount 0 0K 0 msdosfs_node 0 0K 0 DEVFS4 0 0K 0 DEVFS2 0 0K 0 xen_intr 0 0K 0 gntdev 0 0K 0 privcmd_dev 0 0K 0 xen_hvm 0 0K 0 legacydrv 0 0K 0 qpidrv 0 0K 0 evtchn_dev 0 0K 0 xenstore 0 0K 0 dmar_idpgtbl 0 0K 0 dmar_dom 0 0K 0 dmar_ctx 0 0K 0 ciss_data 0 0K 0 BACKLIGHT 0 0K 0 xnb 0 0K 0 isci 0 0K 0 iommu_dmamap 0 0K 0 xbbd 0 0K 0 hyperv_socket 0 0K 0 bxe_ilt 0 0K 0 xenbus 0 0K 0 xbd 0 0K 0 Balloon 0 0K 0 sysmouse 0 0K 0 vm_fictitious 0 0K 0 vtfont 0 0K 0 ath_hal 0 0K 0 athdev 0 0K 0 ata_pci 0 0K 0 ata_dma 0 0K 0 ata_generic 0 0K 0 amr 0 0K 0 pvscsi 0 0K 0 scsi_da 0 0K 69 UMAHash 0 0K 0 ata_da 0 0K 0 vm_pgdata 0 0K 0 jblocks 0 0K 0 savedino 0 0K 5013 sentinel 0 0K 0 jfsync 0 0K 0 jtrunc 0 0K 0 sbdep 0 0K 61 jsegdep 0 0K 0 jseg 0 0K 0 jfreefrag 0 0K 0 jfreeblk 0 0K 0 jnewblk 0 0K 0 jmvref 0 0K 0 jremref 0 0K 0 jaddref 0 0K 0 freedep 0 0K 0 freefrag 0 0K 6 allocindir 0 0K 0 indirdep 0 0K 2795 allocdirect 0 0K 0 ufs_trim 0 0K 0 mactemp 0 0K 0 audit_trigger 0 0K 0 audit_pipe_presel 0 0K 0 audit_pipeent 0 0K 0 audit_pipe 0 0K 0 audit_evname 0 0K 0 audit_bsm 0 0K 0 audit_gidset 0 0K 0 audit_text 0 0K 0 audit_path 0 0K 0 audit_data 0 0K 0 audit_cred 0 0K 0 scsi_ch 0 0K 0 scsi_cd 0 0K 0 AHCI driver 0 0K 0 USBdev 0 0K 0 USB 0 0K 0 agp 0 0K 0 nvme_da 0 0K 0 ktls_ocf 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5E_TLS 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EN 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5DUMP 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 seq_file 0 0K 0 radix 0 0K 0 idr 0 0K 0 lkpifw 0 0K 0 NLM 0 0K 0 ipsec-spdcache 0 0K 0 ipsec-reg 0 0K 0 ipsec-misc 0 0K 0 ipsecrequest 0 0K 0 ip6opt 0 0K 71 ip6_moptions 0 0K 8 in6_mfilter 0 0K 24 frag6 0 0K 0 tcplog 0 0K 0 tcp_hwpace 0 0K 0 acpipwr 0 0K 0 acpi_perf 0 0K 0 LRO 0 0K 0 newreno data 0 0K 0 ip_msource 0 0K 0 ip_moptions 0 0K 9 in_mfilter 0 0K 0 ipid 0 0K 0 80211scan 0 0K 0 80211ratectl 0 0K 0 80211power 0 0K 0 80211nodeie 0 0K 0 80211node 0 0K 0 80211mesh_gt 0 0K 0 80211mesh_rt 0 0K 0 80211perr 0 0K 0 80211prep 0 0K 0 80211preq 0 0K 0 80211dfs 0 0K 0 80211crypto 0 0K 0 80211vap 0 0K 0 iflib 0 0K 0 vlan 0 0K 0 gif 0 0K 0 ifdescr 0 0K 0 zlib 0 0K 0 fadvise 0 0K 5 VN POLL 0 0K 0 twsbuf 0 0K 0 statfs 0 0K 4741 namei_tracker 0 0K 0 export_host 0 0K 0 cl_savebuf 0 0K 14 twe_commands 0 0K 0 twa_commands 0 0K 0 tcp_log_dev 0 0K 297 midi buffers 0 0K 0 mixer 0 0K 0 ac97 0 0K 0 hdacc 0 0K 0 hdac 0 0K 0 hdaa 0 0K 0 acpicmbat 0 0K 0 SIIS driver 0 0K 0 CAM CCB 0 0K 523 PUC 0 0K 0 ppbusdev 0 0K 0 agtiapi_MemAlloc malloc 0 0K 0 biobuf 0 0K 0 aios 0 0K 0 lio 0 0K 0 acl 0 0K 0 osti_cacheable 0 0K 0 mbuf_tag 0 0K 187 tempbuff 0 0K 0 tempbuff 0 0K 0 ag_tgt_map_t malloc 0 0K 0 ag_slr_map_t malloc 0 0K 0 lDevFlags * malloc 0 0K 0 tiDeviceHandle_t * malloc 0 0K 0 ag_portal_data_t malloc 0 0K 0 ag_device_t malloc 0 0K 0 STLock malloc 0 0K 0 CCB List 0 0K 0 sr_iov 0 0K 0 OCS 0 0K 0 OCS 0 0K 0 nvme 0 0K 0 nvd 0 0K 0 netmap 0 0K 0 mwldev 0 0K 0 MVS driver 0 0K 0 CAM ccb queue 0 0K 0 mrsasbuf 0 0K 0 mpt_user 0 0K 0 mps_user 0 0K 0 accf 0 0K 0 pts 0 0K 0 iov 0 0K 19639 ioctlops 0 0K 662 eventfd 0 0K 5 Witness 0 0K 0 stack 0 0K 0 MPSSAS 0 0K 0 mps 0 0K 0 mpr_user 0 0K 0 MPRSAS 0 0K 0 mpr 0 0K 0 mfibuf 0 0K 0 sbuf 0 0K 288 md_sectors 0 0K 0 firmware 0 0K 0 compressor 0 0K 0 md_disk 0 0K 0 SWAP 0 0K 0 malodev 0 0K 0 LED 0 0K 0 sysctltmp 0 0K 955 sysctl 0 0K 3 ekcd 0 0K 0 dumper 0 0K 0 sendfile 0 0K 0 rctl 0 0K 0 ix_sriov 0 0K 0 aacraidcam 0 0K 0 aacraid_buf 0 0K 0 ix 0 0K 0 ipsbuf 0 0K 0 cache 0 0K 0 iirbuf 0 0K 0 prison_racct 0 0K 0 Fail Points 0 0K 0 sigio 0 0K 1 filedesc_to_leader 0 0K 13 pwd 0 0K 0 tty console 0 0K 0 aaccam 0 0K 0 aacbuf 0 0K 0 zstd 0 0K 0 XZ_DEC 0 0K 0 nvlist 0 0K 0 SCSI ENC 0 0K 0 SCSI sa 0 0K 0 scsi_pass 0 0K 0 isofs_node 0 0K 0 isofs_mount 0 0K 0 tr_raid5_data 0 0K 0 tr_raid1e_data 0 0K 0 tr_raid1_data 0 0K 0 tr_raid0_data 0 0K 0 tr_concat_data 0 0K 0 md_sii_data 0 0K 0 md_promise_data 0 0K 0 md_nvidia_data 0 0K 0 md_jmicron_data 0 0K 0 md_intel_data 0 0K 0 md_ddf_data 0 0K 0 raid_data 0 0K 72 geom_flashmap 0 0K 0 tmpfs dir 0 0K 0 tmpfs name 0 0K 0 tmpfs mount 0 0K 0 NFS FHA 0 0K 0 newnfsmnt 0 0K 0 newnfsclient_req 0 0K 0 NFSCL layrecall 0 0K 0 NFSCL session 0 0K 0 NFSCL sockreq 0 0K 0 NFSCL devinfo 0 0K 0 NFSCL flayout 0 0K 0 NFSCL layout 0 0K 0 NFSD rollback 0 0K 0 NFSCL diroff 0 0K 0 db> show uma Zone Size Used Free Requests Sleeps Bucket Total Mem XFree mbuf_jumbo_page 4096 8321 984 179869 0 254 38113280 0 tcp_log 416 0 15120 403746 0 254 6289920 0 pbuf 2624 0 957 0 0 2 2511168 0 mbuf 256 8925 750 1471874 0 254 2476800 0 malloc-4096 4096 427 6 6093 0 2 1773568 0 BUF TRIE 144 356 11404 7225 0 62 1693440 0 malloc-128 128 12358 321 17349 0 126 1622912 0 malloc-384 384 4162 18 4174 0 30 1605120 0 RADIX NODE 144 9335 1440 145830 0 62 1551600 0 mbuf_cluster 2048 705 1 705 0 254 1445888 0 UMA Slabs 0 112 10777 20 10777 0 126 1209264 0 vmem btag 56 19065 62 19065 0 254 1071112 0 malloc-16384 16384 39 6 4731 0 1 737280 0 ertt_txseginfo 40 1 18179 904048 0 254 727200 0 FFS inode 1160 558 23 5354 0 8 673960 0 256 Bucket 2048 291 19 19786 0 8 634880 0 tcp_bbr_map 128 0 4061 243905 0 127 519808 0 VM OBJECT 264 1720 95 83673 0 30 479160 0 THREAD 1808 195 25 7538 0 8 397760 0 lkpimm 168 1 2327 1 0 62 391104 0 lkpicurr 168 2 2326 2 0 62 391104 0 MAP ENTRY 96 3356 424 329976 0 126 362880 0 malloc-32768 32768 2 8 2520 0 1 327680 0 sctp_asoc 2288 42 98 2347 0 254 320320 0 VNODE 448 596 79 5394 0 30 302400 0 malloc-64 64 4055 103 15200 0 254 266112 0 malloc-65536 65536 4 0 4 0 1 262144 0 malloc-2048 2048 63 59 5732 0 8 249856 0 malloc-16 16 14022 228 15964 0 254 228000 0 sctp_ep 1280 61 116 5705 0 254 226560 0 DEVCTL 1024 0 220 154 0 0 225280 0 VMSPACE 2544 72 9 5578 0 4 206064 0 socket 944 59 157 10772 0 254 203904 0 malloc-65536 65536 1 2 195 0 1 196608 0 malloc-256 256 78 657 18181 0 62 188160 0 UMA Zones 768 242 2 242 0 16 187392 0 mbuf_packet 256 153 552 22823 0 254 180480 0 malloc-4096 4096 42 2 64 0 2 180224 0 malloc-32 32 5302 242 6391 0 254 177408 0 malloc-128 128 1184 56 26800 0 126 158720 0 PROC 1336 99 18 5604 0 8 156312 0 FFS2 dinode 256 558 42 5354 0 62 153600 0 S VFS Cache 104 1027 338 6042 0 126 141960 0 malloc-65536 65536 0 2 420 0 1 131072 0 malloc-65536 65536 2 0 2 0 1 131072 0 malloc-65536 65536 0 2 8 0 1 131072 0 malloc-1024 1024 118 10 150 0 16 131072 0 filedesc0 1072 99 20 5627 0 8 127568 0 clpbuf 2624 0 48 216 0 16 125952 0 sctp_raddr 736 47 118 2889 0 254 121440 0 ksiginfo 112 110 934 1898 0 126 116928 0 malloc-384 384 180 110 8624 0 30 111360 0 malloc-256 256 158 277 5780 0 62 111360 0 malloc-256 256 189 231 18579 0 62 107520 0 malloc-384 384 125 145 5032 0 30 103680 0 128 Bucket 1024 52 47 1333 0 16 101376 0 malloc-1024 1024 44 52 2406 0 16 98304 0 UMA Kegs 384 227 6 227 0 30 89472 0 malloc-256 256 229 101 7579 0 62 84480 0 malloc-8192 8192 7 3 35 0 1 81920 0 g_bio 408 0 170 54835 0 30 69360 0 malloc-65536 65536 1 0 1 0 1 65536 0 malloc-65536 65536 1 0 1 0 1 65536 0 malloc-32768 32768 0 2 130 0 1 65536 0 malloc-32768 32768 0 2 8 0 1 65536 0 malloc-64 64 527 481 71854 0 254 64512 0 malloc-2048 2048 7 23 1182 0 8 61440 0 64 Bucket 512 93 27 6854 0 30 61440 0 malloc-128 128 346 88 5125 0 126 55552 0 malloc-256 256 73 137 6076 0 62 53760 0 32 Bucket 256 70 140 12624 0 62 53760 0 tcpcb 1080 4 45 1874 0 254 52920 0 malloc-384 384 121 9 171 0 30 49920 0 malloc-16384 16384 3 0 3 0 1 49152 0 malloc-16384 16384 2 1 17 0 1 49152 0 malloc-8192 8192 6 0 6 0 1 49152 0 malloc-8192 8192 4 2 6 0 1 49152 0 pipe 744 31 34 690 0 16 48360 0 tcp_inpcb 496 4 92 1874 0 254 47616 0 malloc-1024 1024 6 38 1864 0 16 45056 0 malloc-64 64 571 122 2829 0 254 44352 0 malloc-256 256 61 104 6220 0 62 42240 0 DIRHASH 1024 34 6 34 0 16 40960 0 NAMEI 1024 0 40 36823 0 16 40960 0 pcpu-8 8 4742 378 5921 0 254 40960 0 Files 80 318 182 25910 0 126 40000 0 malloc-64 64 200 367 6290 0 254 36288 0 malloc-128 128 85 194 10457 0 126 35712 0 da_ccb 544 0 63 14391 0 16 34272 0 TURNSTILE 136 221 31 221 0 62 34272 0 malloc-32768 32768 1 0 1 0 1 32768 0 malloc-16384 16384 2 0 2 0 1 32768 0 malloc-1024 1024 19 13 97 0 16 32768 0 pcpu-64 64 487 25 487 0 254 32768 0 malloc-64 64 429 75 18348 0 254 32256 0 16 Bucket 144 79 145 1043 0 62 32256 0 udplite_inpcb 496 0 64 1201 0 254 31744 0 malloc-256 256 82 38 875 0 62 30720 0 tcp_bbr_pcb 832 0 36 849 0 16 29952 0 tcp_rack_pcb 832 0 36 517 0 16 29952 0 malloc-2048 2048 7 7 21 0 8 28672 0 KNOTE 160 28 147 50223 0 62 28000 0 malloc-128 128 117 100 5090 0 126 27776 0 itimer 352 0 77 24 0 30 27104 0 malloc-256 256 66 39 1023 0 62 26880 0 malloc-8192 8192 2 1 103 0 1 24576 0 malloc-4096 4096 4 2 638 0 2 24576 0 malloc-2048 2048 7 5 28 0 8 24576 0 malloc-2048 2048 7 5 19 0 8 24576 0 malloc-1024 1024 18 6 22 0 16 24576 0 PWD 32 50 706 4597 0 254 24192 0 ttyinq 160 135 15 300 0 62 24000 0 malloc-128 128 143 43 664 0 126 23808 0 sctp_chunk 152 43 113 1141 0 254 23712 0 ttyoutq 256 72 18 160 0 62 23040 0 SLEEPQUEUE 88 221 35 221 0 126 22528 0 malloc-4096 4096 3 2 13 0 2 20480 0 malloc-512 512 9 31 592 0 30 20480 0 malloc-32 32 49 581 585 0 254 20160 0 8 Bucket 80 54 196 1891 0 126 20000 0 malloc-128 128 66 89 3937 0 126 19840 0 Mountpoints 2752 2 5 2 0 4 19264 0 unpcb 256 20 55 1444 0 254 19200 0 malloc-16384 16384 1 0 1 0 1 16384 0 malloc-8192 8192 2 0 2 0 1 16384 0 malloc-8192 8192 2 0 2 0 1 16384 0 malloc-8192 8192 2 0 2 0 1 16384 0 malloc-4096 4096 1 3 4742 0 2 16384 0 malloc-2048 2048 4 4 51 0 8 16384 0 malloc-512 512 15 17 50 0 30 16384 0 sctp_laddr 48 36 300 1892 0 254 16128 0 malloc-64 64 86 166 2972 0 254 16128 0 malloc-32 32 336 168 6091 0 254 16128 0 2 Bucket 32 61 443 1441 0 254 16128 0 vtnet_tx_hdr 24 0 668 602213 0 254 16032 0 malloc-16 16 358 642 5082 0 254 16000 0 udp_inpcb 496 6 26 357 0 254 15872 0 malloc-128 128 74 50 162 0 126 15872 0 malloc-384 384 20 20 370 0 30 15360 0 malloc-2048 2048 1 5 557 0 8 12288 0 malloc-512 512 1 23 119 0 30 12288 0 rtentry 176 30 39 34 0 62 12144 0 malloc-32 32 177 201 8519 0 254 12096 0 sctp_readq 152 2 76 357 0 254 11856 0 kenv 258 15 30 1042 0 30 11610 0 routing nhops 256 27 18 34 0 62 11520 0 malloc-384 384 24 6 67 0 30 11520 0 malloc-4096 4096 1 1 3 0 2 8192 0 malloc-4096 4096 0 2 6 0 2 8192 0 malloc-4096 4096 0 2 78 0 2 8192 0 malloc-2048 2048 0 4 40 0 8 8192 0 malloc-1024 1024 3 5 267 0 16 8192 0 malloc-1024 1024 2 6 28 0 16 8192 0 malloc-512 512 2 14 144 0 30 8192 0 malloc-512 512 2 14 61 0 30 8192 0 malloc-512 512 1 15 6 0 30 8192 0 tcptw 88 0 92 18 0 254 8096 0 PGRP 88 35 57 79 0 126 8096 0 rl_entry 40 109 93 109 0 254 8080 0 sctp_stream_msg_out 112 22 50 617 0 254 8064 0 tcp_rack_map 112 0 72 1255 0 126 8064 0 syncache 168 0 48 4 0 254 8064 0 udpcb 32 6 246 1558 0 254 8064 0 ertt 72 4 108 1874 0 126 8064 0 malloc-64 64 75 51 105 0 254 8064 0 malloc-64 64 13 113 1363 0 254 8064 0 malloc-32 32 42 210 63 0 254 8064 0 malloc-32 32 128 124 3483 0 254 8064 0 malloc-32 32 104 148 205 0 254 8064 0 malloc-32 32 61 191 6470 0 254 8064 0 4 Bucket 48 6 162 137 0 254 8064 0 malloc-16 16 22 478 54 0 254 8000 0 malloc-16 16 52 448 5755 0 254 8000 0 malloc-16 16 171 329 8950 0 254 8000 0 malloc-16 16 191 309 4365 0 254 8000 0 malloc-16 16 9 491 9 0 254 8000 0 malloc-16 16 18 482 25643 0 254 8000 0 ripcb 496 5 11 131 0 254 7936 0 cryptop 280 0 28 70 0 30 7840 0 malloc-384 384 1 19 47 0 30 7680 0 FPU_save_area 832 1 8 1 0 16 7488 0 cpuset 104 8 54 8 0 126 6448 0 epoch_record pcpu 256 4 12 4 0 62 4096 0 malloc-1024 1024 2 2 2 0 16 4096 0 malloc-512 512 1 7 1 0 30 4096 0 malloc-512 512 0 8 1 0 30 4096 0 pcpu-16 16 7 249 7 0 254 4096 0 sackhole 32 0 126 4 0 254 4032 0 hostcache 64 1 62 1 0 254 4032 0 AIOP 32 4 122 4 0 254 4032 0 AIO 208 0 19 12 0 62 3952 0 UMA Slabs 1 176 9 13 9 0 62 3872 0 AIOCB 552 0 7 15 0 16 3864 0 mqnode 416 3 6 3 0 30 3744 0 KMAP ENTRY 96 12 27 14 0 0 3744 0 vmem 1856 1 1 1 0 8 3712 0 SMR CPU 32 3 60 3 0 254 2016 0 SMR SHARED 24 3 60 3 0 254 1512 0 FFS1 dinode 128 0 0 0 0 126 0 0 ada_ccb 272 0 0 0 0 30 0 0 swblk 136 0 0 0 0 62 0 0 swpctrie 144 0 0 0 0 62 0 0 sctp_asconf_ack 48 0 0 0 0 254 0 0 sctp_asconf 40 0 0 0 0 254 0 0 cdg_qdiffsample 16 0 0 0 0 254 0 0 pf state scrubs 40 0 0 0 0 254 0 0 pf frag entries 40 0 0 0 0 254 0 0 pf frags 248 0 0 0 0 62 0 0 pf table entries 160 0 0 0 0 62 0 0 pf table entry counters 64 0 0 0 0 254 0 0 pf source nodes 136 0 0 0 0 254 0 0 pf state keys 88 0 0 0 0 126 0 0 pf states 312 0 0 0 0 254 0 0 pf tags 104 0 0 0 0 126 0 0 pf mtags 48 0 0 0 0 254 0 0 tcp_log_node 120 0 0 0 0 126 0 0 tcp_log_bucket 176 0 0 0 0 62 0 0 tcpreass 48 0 0 0 0 254 0 0 tfo_ccache_entries 80 0 0 0 0 126 0 0 tfo 4 0 0 0 0 254 0 0 ipq 56 0 0 0 0 254 0 0 IPsec SA lft_c 16 0 0 0 0 254 0 0 AIOLIO 272 0 0 0 0 30 0 0 TMPFS node 224 0 0 0 0 62 0 0 mqnotifier 216 0 0 0 0 62 0 0 mvdata 64 0 0 0 0 254 0 0 mqueue 248 0 0 0 0 62 0 0 NCLNODE 592 0 0 0 0 16 0 0 LTS VFS Cache 360 0 0 0 0 30 0 0 L VFS Cache 320 0 0 0 0 30 0 0 STS VFS Cache 144 0 0 0 0 62 0 0 linux_dma_object 24 0 0 0 0 254 0 0 linux_dma_pctrie 144 0 0 0 0 62 0 0 IOMMU_MAP_ENTRY 120 0 0 0 0 126 0 0 ktls_session 192 0 0 0 0 62 0 0 mbuf_jumbo_16k 16384 0 0 0 0 254 0 0 mbuf_jumbo_9k 9216 0 0 0 0 254 0 0 audit_record 1280 0 0 0 0 8 0 0 domainset 40 0 0 0 0 254 0 0 MAC labels 40 0 0 0 0 254 0 0 vnpbuf 2624 0 0 0 0 64 0 0 mdpbuf 2624 0 0 0 0 3 0 0 nfspbuf 2624 0 0 0 0 16 0 0 swwbuf 2624 0 0 0 0 8 0 0 swrbuf 2624 0 0 0 0 16 0 0 umtx_shm 88 0 0 0 0 126 0 0 umtx pi 96 0 0 0 0 126 0 0 rangeset pctrie nodes 144 0 0 0 0 62 0 0 malloc-65536 65536 0 0 0 0 1 0 0 malloc-32768 32768 0 0 0 0 1 0 0 malloc-32768 32768 0 0 0 0 1 0 0 malloc-32768 32768 0 0 0 0 1 0 0 malloc-32768 32768 0 0 0 0 1 0 0 malloc-16384 16384 0 0 0 0 1 0 0 malloc-16384 16384 0 0 0 0 1 0 0 malloc-16384 16384 0 0 0 0 1 0 0 malloc-8192 8192 0 0 0 0 1 0 0 malloc-384 384 0 0 0 0 30 0 0 pcpu-32 32 0 0 0 0 254 0 0 pcpu-4 4 0 0 0 0 254 0 0 fakepg 104 0 0 0 0 126 0 0 UMA Hash 256 0 0 0 0 62 0 0