panic: ASan: Invalid access, 4-byte write at 0xfffffe00a76bfc38, UMAUseAfterFree(fd) cpuid = 1 time = 1630484531 KDB: stack backtrace: db_trace_self_wrapper() at db_trace_self_wrapper+0xc7/frame 0xfffffe009bf37150 kdb_backtrace() at kdb_backtrace+0xd3/frame 0xfffffe009bf372b0 vpanic() at vpanic+0x2c5/frame 0xfffffe009bf37390 panic() at panic+0xb5/frame 0xfffffe009bf37460 kasan_atomic_fetchadd_int() at kasan_atomic_fetchadd_int+0x225/frame 0xfffffe009bf37520 sctp_inpcb_free() at sctp_inpcb_free+0x1755/frame 0xfffffe009bf375b0 sctp_close() at sctp_close+0x1e4/frame 0xfffffe009bf37690 soclose() at soclose+0x1a4/frame 0xfffffe009bf377a0 _fdrop() at _fdrop+0x58/frame 0xfffffe009bf377d0 closef() at closef+0x686/frame 0xfffffe009bf379b0 closefp_impl() at closefp_impl+0xd9/frame 0xfffffe009bf379f0 amd64_syscall() at amd64_syscall+0x425/frame 0xfffffe009bf37bf0 fast_syscall_common() at fast_syscall_common+0xf8/frame 0xfffffe009bf37bf0 --- syscall (198, FreeBSD ELF64, nosys), rip = 0x289eda, rsp = 0x7fffdfffdf08, rbp = 0x7fffdfffdf70 --- KDB: enter: panic [ thread pid 4190 tid 105351 ] Stopped at kdb_enter+0x6b: movq $0,0x28e33ea(%rip) db> db> set $lines = 0 db> set $maxwidth = 0 db> show registers cs 0x20 ds 0x3b es 0x3b fs 0x13 gs 0x1b ss 0x28 rax 0x12 rcx 0xc30e1e0b4e46de65 rdx 0x40001 rbx 0 rsp 0xfffffe009bf37290 rbp 0xfffffe009bf372b0 rsi 0 rdi 0xfffffe005876b568 r8 0x3 r9 0xfffffe009bf36dc8 r10 0 r11 0x800729358 r12 0xfffffe009e3b5ac0 r13 0xfffffe009bf37301 r14 0xffffffff82c754c0 .str.18 r15 0xffffffff82c754c0 .str.18 rip 0xffffffff817aaf4b kdb_enter+0x6b rflags 0x46 kdb_enter+0x6b: movq $0,0x28e33ea(%rip) db> show proc Process 4190 (syz-executor.3) at 0xfffffe00a78fb000: state: NORMAL uid: 0 gids: 0, 0, 5 parent: pid 815 at 0xfffffe0058b2fa70 ABI: FreeBSD ELF64 flag: 0x10080480 flag2: 0 arguments: /root/syz-executor.3 reaper: 0xfffffe0053d52538 reapsubtree: 1 sigparent: 20 vmspace: 0xfffffe00a78149f0 (map 0xfffffe00a78149f0) (map.pmap 0xfffffe00a7814ab0) (pmap 0xfffffe00a7814b10) threads: 5 104784 s syz-executor.3 105351 Run CPU 1 syz-executor.3 105362 RunQ syz-executor.3 105363 RunQ syz-executor.3 105364 RunQ syz-executor.3 db> ps pid ppid pgrp uid state wmesg wchan cmd 4204 4200 4200 2 RV sh 4203 4201 1078 0 RV sh 4201 1078 1078 0 R sh 4200 4199 4200 2 Ds ppwait 0xfffffe00a78274e8 sh 4199 698 698 0 S piperd 0xfffffe00a76de000 cron 4190 815 815 0 T (threaded) syz-executor.3 104784 s syz-executor.3 105351 Run CPU 1 syz-executor.3 105362 RunQ syz-executor.3 105363 RunQ syz-executor.3 105364 RunQ syz-executor.3 3429 3422 792 0 SV uwait 0xfffffe009ebfde00 syz-executor.2 3422 1 792 0 RV syz-executor.2 3037 1 783 0 SV uwait 0xfffffe009ea7a100 syz-executor.0 3033 1 783 0 S uwait 0xfffffe009ebfd900 syz-executor.0 3024 1 783 0 SV uwait 0xfffffe00588c1300 syz-executor.0 3023 1 783 0 S uwait 0xfffffe009ebfd280 syz-executor.0 3015 1 783 0 SV uwait 0xfffffe009eb99d80 syz-executor.0 3013 1 783 0 S uwait 0xfffffe009ebfda00 syz-executor.0 3003 3000 783 0 SV uwait 0xfffffe009ea24c80 syz-executor.0 3001 3000 783 0 S uwait 0xfffffe009ebfd800 syz-executor.0 3000 1 783 0 RV syz-executor.0 2998 1 783 0 S uwait 0xfffffe0058b46380 syz-executor.0 2567 1 792 0 S uwait 0xfffffe009ea26400 syz-executor.2 1950 1 1950 65 Ss select 0xfffffe005740b1c0 dhclient 1664 1 1664 0 Ss select 0xfffffe005740b0c0 dhclient 1650 1 1650 0 Ss select 0xfffffe005740b7c0 dhclient 1595 1 1595 65 Ss select 0xfffffe005740b5c0 dhclient 1338 1 1338 0 Ss select 0xfffffe005740b540 dhclient 1335 1 1335 0 Ss select 0xfffffe005740b740 dhclient 1305 1 1305 65 Ss piperd 0xfffffe009ea11448 dhclient 1078 1 1078 0 Ss wait 0xfffffe009eb3ca70 dhclient 1074 1 1074 0 Ss select 0xfffffe005740b9c0 dhclient 1031 1 1031 65 Ss select 0xfffffe0056b8e340 dhclient 1026 0 0 0 DL aiordy 0xfffffe00a6e1e538 [aiod4] 1025 0 0 0 DL aiordy 0xfffffe00a6e1ea70 [aiod3] 1024 0 0 0 DL aiordy 0xfffffe009eabb538 [aiod2] 1023 0 0 0 DL aiordy 0xfffffe009eb3c538 [aiod1] 815 780 815 0 Ss wait 0xfffffe0058b2fa70 syz-executor.3 812 1 812 0 Ss select 0xfffffe0056b8e1c0 dhclient 809 1 809 0 Ss select 0xfffffe0056b8e240 dhclient 792 780 792 0 Ss piperd 0xfffffe009ea118b8 syz-executor.2 784 780 784 0 Ss piperd 0xfffffe009ea025d0 syz-executor.1 783 780 783 0 Ss piperd 0xfffffe00588b05d0 syz-executor.0 780 778 778 0 R (threaded) syz-fuzzer 100112 S uwait 0xfffffe00588c1800 syz-fuzzer 100123 RunQ syz-fuzzer 100124 S uwait 0xfffffe0058765e80 syz-fuzzer 100125 S uwait 0xfffffe005834d000 syz-fuzzer 100126 S uwait 0xfffffe005834d100 syz-fuzzer 100127 S uwait 0xfffffe0058b46280 syz-fuzzer 100128 S uwait 0xfffffe009e4f0800 syz-fuzzer 100130 S kqread 0xfffffe005700c600 syz-fuzzer 100131 S uwait 0xfffffe009e4f0a00 syz-fuzzer 100132 S uwait 0xfffffe009e4f0100 syz-fuzzer 778 776 778 0 Ss pause 0xfffffe00588bab20 csh 776 694 776 0 Ss select 0xfffffe0056b8e4c0 sshd 760 1 760 0 Ss+ ttyin 0xfffffe0056ff9cb0 getty 759 1 759 0 Ss+ ttyin 0xfffffe00575f7cb0 getty 758 1 758 0 Ss+ ttyin 0xfffffe00583eb0b0 getty 757 1 757 0 Ss+ ttyin 0xfffffe00583eb4b0 getty 756 1 756 0 Ss+ ttyin 0xfffffe00583eb8b0 getty 755 1 755 0 Ss+ ttyin 0xfffffe00583ebcb0 getty 754 1 754 0 Ss+ ttyin 0xfffffe00574750b0 getty 753 1 753 0 Ss+ ttyin 0xfffffe00574754b0 getty 752 1 752 0 Ss+ ttyin 0xfffffe00574758b0 getty 698 1 698 0 Ss nanslp 0xffffffff8405b201 cron 694 1 694 0 Ss select 0xfffffe005740bc40 sshd 507 1 507 0 Ss select 0xfffffe0056b8c7c0 syslogd 436 1 436 0 Ss select 0xfffffe0056b8ca40 devd 435 1 435 65 Ss select 0xfffffe0056b8cbc0 dhclient 350 1 350 0 Ss select 0xfffffe0056b8cc40 dhclient 347 1 347 0 Ss select 0xfffffe0056b8cd40 dhclient 23 0 0 0 DL syncer 0xffffffff841835a0 [syncer] 22 0 0 0 RL [vnlru] 21 0 0 0 DL (threaded) [bufdaemon] 100085 D qsleep 0xffffffff841812a0 [bufdaemon] 100088 D - 0xffffffff83411f80 [bufspacedaemon-0] 100100 D sdflush 0xfffffe00575ff8e8 [/ worker] 20 0 0 0 DL psleep 0xffffffff841b97c0 [vmdaemon] 19 0 0 0 RL (threaded) [pagedaemon] 100083 D psleep 0xffffffff841ad2f8 [dom0] 100089 D launds 0xffffffff841ad304 [laundry: dom0] 100090 RunQ [uma] 18 0 0 0 DL - 0xffffffff83e12320 [rand_harvestq] 17 0 0 0 DL waiting 0xffffffff84c084e0 [sctp_iterator] 16 0 0 0 DL pftm 0xffffffff8475be20 [pf purge] 15 0 0 0 DL - 0xffffffff8417c4c0 [soaiod4] 9 0 0 0 DL - 0xffffffff8417c4c0 [soaiod3] 8 0 0 0 DL - 0xffffffff8417c4c0 [soaiod2] 7 0 0 0 DL - 0xffffffff8417c4c0 [soaiod1] 6 0 0 0 DL (threaded) [cam] 100048 D - 0xffffffff83c97ac0 [doneq0] 100049 D - 0xffffffff83c97a40 [async] 100082 D - 0xffffffff83c978c0 [scanner] 14 0 0 0 DL seqstat 0xfffffe000791a888 [sequencer 00] 5 0 0 0 DL crypto_ 0xfffffe00541b1d80 [crypto returns 1] 4 0 0 0 DL crypto_ 0xfffffe00541b1d30 [crypto returns 0] 3 0 0 0 DL crypto_ 0xffffffff841a73a0 [crypto] 13 0 0 0 DL (threaded) [geom] 100039 D - 0xffffffff8402e7c0 [g_event] 100040 D - 0xffffffff8402e800 [g_up] 100041 D - 0xffffffff8402e840 [g_down] 2 0 0 0 DL (threaded) [KTLS] 100029 D - 0xfffffe00081ecb00 [thr_0] 100030 D - 0xfffffe00081ecb80 [thr_1] 100031 D - 0xffffffff8417d848 [alloc_0] 12 0 0 0 RL (threaded) [intr] 100012 I [swi6: task queue] 100013 I [swi6: Giant taskq] 100015 I [swi5: fast taskq] 100032 RunQ [swi4: clock (0)] 100033 I [swi4: clock (1)] 100034 Run CPU 0 [swi1: netisr 0] 100035 I [swi3: vm] 100036 I [swi1: hpts] 100037 I [swi1: hpts] 100050 I [irq24: virtio_pci0] 100051 I [irq25: virtio_pci0] 100052 I [irq26: virtio_pci0] 100053 I [irq27: virtio_pci0] 100054 I [irq28: virtio_pci1] 100055 I [irq29: virtio_pci1] 100056 I [irq30: virtio_pci1] 100057 I [irq31: virtio_pci1] 100058 I [irq32: virtio_pci1] 100063 I [irq10: virtio_pci2] 100065 I [irq1: atkbd0] 100066 I [irq12: psm0] 100067 I [swi0: uart uart++] 100075 I [swi1: pf send] 11 0 0 0 RL (threaded) [idle] 100003 CanRun [idle: cpu0] 100004 CanRun [idle: cpu1] 1 0 1 0 SLs wait 0xfffffe0053d52538 [init] 10 0 0 0 DL audit_w 0xffffffff841a8340 [audit] 0 0 0 0 RLs (threaded) [kernel] 100000 D swapin 0xffffffff8402f6c0 [swapper] 100005 D - 0xfffffe00081f4800 [if_config_tqg_0] 100006 D - 0xfffffe00081f4600 [softirq_0] 100007 D - 0xfffffe00081f4400 [softirq_1] 100008 D - 0xfffffe00081f4200 [if_io_tqg_0] 100009 D - 0xfffffe00081f4000 [if_io_tqg_1] 100010 D - 0xfffffe0053defd00 [in6m_free taskq] 100011 D - 0xfffffe0053defb00 [deferred_unmount ta] 100014 RunQ [thread taskq] 100016 D - 0xfffffe0053def100 [linuxkpi_irq_wq] 100017 D - 0xfffffe0053df9e00 [kqueue_ctx taskq] 100018 D - 0xfffffe0053df9c00 [pci_hp taskq] 100019 D - 0xfffffe0053df9a00 [aiod_kick taskq] 100020 D - 0xfffffe0053df9800 [inm_free taskq] 100021 D - 0xfffffe0053df9600 [linuxkpi_short_wq_0] 100022 D - 0xfffffe0053df9600 [linuxkpi_short_wq_1] 100023 D - 0xfffffe0053df9600 [linuxkpi_short_wq_2] 100024 D - 0xfffffe0053df9600 [linuxkpi_short_wq_3] 100025 D - 0xfffffe0053df9100 [linuxkpi_long_wq_0] 100026 D - 0xfffffe0053df9100 [linuxkpi_long_wq_1] 100027 D - 0xfffffe0053df9100 [linuxkpi_long_wq_2] 100028 D - 0xfffffe0053df9100 [linuxkpi_long_wq_3] 100038 D - 0xfffffe0053e01200 [firmware taskq] 100042 D - 0xfffffe0054188c00 [crypto_0] 100043 D - 0xfffffe0054188c00 [crypto_1] 100059 D - 0xfffffe0056eacd00 [vtnet0 rxq 0] 100060 D - 0xfffffe0056eacc00 [vtnet0 txq 0] 100061 D - 0xfffffe0056eacb00 [vtnet0 rxq 1] 100062 D - 0xfffffe0056eaca00 [vtnet0 txq 1] 100064 D vtbslp 0xfffffe0056b8ce80 [virtio_balloon] 100068 D - 0xfffffe0056feba00 [mca taskq] 100073 D - 0xffffffff82c7c441 [deadlkres] 100078 D - 0xfffffe0057401900 [acpi_task_0] 100079 D - 0xfffffe0057401900 [acpi_task_1] 100080 D - 0xfffffe0057401900 [acpi_task_2] 100081 D - 0xfffffe0054188500 [CAM taskq] db> show all locks Process 4201 (sh) thread 0xfffffe009e3b7740 (103680) exclusive sleep mutex process lock (process lock) r = 0 (0xfffffe00a77c7128) locked @ /syzkaller/managers/main/kernel/sys/kern/subr_trap.c:117 Process 4190 (syz-executor.3) thread 0xfffffe009eb96ac0 (105363) exclusive sleep mutex sctp-create (inp_create) r = 0 (0xfffffe00a735e988) locked @ /syzkaller/managers/main/kernel/sys/netinet6/sctp6_usrreq.c:871 Process 12 (intr) thread 0xfffffe0053dfe020 (100032) exclusive sleep mutex sctp-create (inp_create) r = 0 (0xfffffe00a7848488) locked @ /syzkaller/managers/main/kernel/sys/netinet/sctp_pcb.c:3316 Process 0 (kernel) thread 0xfffffe0053df43a0 (100014) exclusive sleep mutex vmem list lock (vmem list lock) r = 0 (0xffffffff83409bc0) locked @ /syzkaller/managers/main/kernel/sys/kern/subr_vmem.c:784 db> show malloc Type InUse MemUse Requests pf_hash 5 11524K 5 devbuf 4217 4339K 4245 tcp_hpts 6 3201K 6 sysctloid 34389 2031K 34460 vtbuf 24 1968K 46 kobj 327 1308K 486 newblk 5 1025K 8863 vfscache 3 1025K 3 pcb 230 764K 9452 inodedep 10 516K 3561 ufs_quota 1 512K 1 vfs_hash 1 512K 1 callout 2 512K 2 intr 4 472K 4 subproc 179 365K 4302 filedesc 38 297K 6571 vmem 3 274K 5 acpica 1674 184K 55752 vnet_data 1 168K 1 tidhash 3 141K 3 linker 356 140K 396 pagedep 9 130K 3302 tfo_ccache 1 128K 1 DEVFS1 108 108K 125 sem 4 106K 4 sctp_stro 94 94K 1800 BPF 46 88K 48 bus 989 81K 3490 sctp_atcl 195 74K 6353 mtx_pool 2 72K 2 syncache 1 68K 1 acpitask 1 64K 1 ddb_capture 1 64K 1 module 510 64K 510 umtx 418 53K 418 kdtrace 260 50K 9572 temp 36 35K 2696 hostcache 1 32K 1 shm 1 32K 9 DEVFS3 127 32K 137 msg 4 30K 4 gtaskqueue 18 26K 18 kbdmux 6 22K 6 ifaddr 70 20K 72 DEVFS_RULE 56 20K 56 routetbl 138 19K 754 ufs_mount 4 17K 5 proc 3 17K 3 tty 16 16K 16 ithread 99 16K 99 lltable 46 15K 197 bus-sc 34 15K 1693 KTRACE 101 13K 2800 sctp_atky 291 13K 8270 ifnet 7 13K 7 ether_multi 152 13K 162 kenv 95 12K 95 eventhandler 133 12K 133 cred 41 11K 324 CAM queue 5 11K 1528 GEOM 61 10K 489 rman 84 10K 425 in6_multi 65 9K 65 UART 12 9K 12 devstat 4 9K 4 sctp_timw 32 8K 32 ksem 1 8K 114 rpc 2 8K 2 bmsafemap 1 8K 3540 shmfd 1 8K 31 pfs_vncache 1 8K 1 pfs_nodes 20 8K 20 audit_evclass 237 8K 295 kqueue 84 8K 4252 taskqueue 63 7K 63 plimit 25 7K 491 sglist 5 7K 5 CAM DEV 3 6K 510 pwddesc 82 6K 4266 DEVFSP 81 6K 786 pf_ifnet 13 5K 114 ufs_dirhash 24 5K 24 session 36 5K 55 UMA 270 5K 270 vt 11 5K 11 pf_table 2 4K 84 memdesc 1 4K 1 MCA 32 4K 32 evdev 4 4K 4 kcovinfo 64 4K 68 acpisem 28 4K 28 lockf 32 4K 139 hhook 15 4K 17 selfd 52 4K 68472 sctp_athm 195 4K 6526 proc-args 55 3K 672 sctp_map 188 3K 3568 terminal 11 3K 11 uidinfo 5 3K 14 select 19 3K 110 local_apic 1 2K 1 io_apic 1 2K 1 fpukern_ctx 2 2K 2 ipsec-saq 2 2K 2 ip6ndp 12 2K 13 sctp_ifa 13 2K 14 Unitno 27 2K 47 CAM XPT 22 2K 543 in_multi 6 2K 8 ipsecpolicy 2 2K 2 acpidev 20 2K 20 msi 9 2K 9 clone 9 2K 9 tun 7 2K 7 softdep 1 1K 1 sahead 1 1K 1 secasvar 1 1K 1 nhops 6 1K 8 vnodemarker 2 1K 128 NFSD session 1 1K 1 CAM periph 4 1K 271 sctp_ifn 6 1K 14 ipsec 3 1K 3 inpcbpolicy 24 1K 2389 mld 6 1K 6 igmp 6 1K 6 toponodes 6 1K 6 isadev 6 1K 6 mount 16 1K 89 pci_link 10 1K 10 crypto 4 1K 531 encap_export_host 12 1K 12 procdesc 5 1K 14 newdirblk 4 1K 3270 mkdir 4 1K 6540 diradd 4 1K 3447 pfil 4 1K 4 cdev 2 1K 2 osd 12 1K 1274 chacha20random 1 1K 1 NFSD lckfile 1 1K 1 NFSD V4client 1 1K 1 DEVFS 9 1K 10 dirrem 1 1K 3407 vnodes 1 1K 7 CAM SIM 2 1K 2 ktls 1 1K 1 feeder 7 1K 7 xform 3 1K 1296 tcpfunc 3 1K 3 ip_msource 3 1K 12 loginclass 3 1K 6 prison 6 1K 6 lkpikmalloc 5 1K 6 soname 6 1K 8429 aesni_data 2 1K 2 pf_rule 1 1K 61 nexusdev 8 1K 8 apmdev 1 1K 1 atkbddev 2 1K 2 CAM dev queue 2 1K 2 freefile 1 1K 3398 CAM I/O Scheduler 1 1K 1 CAM path 4 1K 1034 pmchooks 1 1K 1 filecaps 5 1K 98 sctp_vrf 1 1K 1 ip6_msource 1 1K 2 ip_moptions 1 1K 26 vnet 1 1K 1 entropy 2 1K 46 acpiintr 1 1K 1 pmc 1 1K 1 vegas data 2 1K 23 cpus 2 1K 2 vnet_data_free 1 1K 1 Per-cpu 1 1K 1 freework 1 1K 4798 p1003.1b 1 1K 1 mqdata 0 0K 0 tcp_do 0 0K 0 tcp_fsb 0 0K 292 htcp data 0 0K 5 cdg data 0 0K 5 sctp_mcore 0 0K 0 sctp_socko 0 0K 3031 sctp_iter 0 0K 12 sctp_mvrf 0 0K 0 sctp_cpal 0 0K 0 sctp_cmsg 0 0K 0 sctp_stre 0 0K 0 sctp_athi 0 0K 0 sctp_a_it 0 0K 12 sctp_aadr 0 0K 1 sctp_stri 0 0K 420 chd data 0 0K 13 cubic data 0 0K 16 dctcp data 0 0K 0 pf_altq 0 0K 0 pf_osfp 0 0K 0 pf_temp 0 0K 0 NEWdirectio 0 0K 0 NEWNFSnode 0 0K 0 madt_table 0 0K 2 smartpqi 0 0K 0 NFSCL lck 0 0K 0 NFSCL lckown 0 0K 0 NFSCL client 0 0K 0 NFSCL deleg 0 0K 0 NFSCL open 0 0K 0 NFSCL owner 0 0K 0 NFS fh 0 0K 0 NFS req 0 0K 0 iavf 0 0K 0 ixl 0 0K 0 NFSD usrgroup 0 0K 0 NFSD string 0 0K 0 NFSD V4lock 0 0K 0 NFSD V4state 0 0K 0 NFSD srvcache 0 0K 0 ice-resmgr 0 0K 0 ice-osdep 0 0K 0 ice 0 0K 0 axgbe 0 0K 0 msdosfs_fat 0 0K 0 msdosfs_mount 0 0K 0 msdosfs_node 0 0K 0 DEVFS4 0 0K 0 DEVFS2 0 0K 0 xen_intr 0 0K 0 gntdev 0 0K 0 privcmd_dev 0 0K 0 xen_hvm 0 0K 0 legacydrv 0 0K 0 qpidrv 0 0K 0 evtchn_dev 0 0K 0 xenstore 0 0K 0 dmar_idpgtbl 0 0K 0 dmar_dom 0 0K 0 dmar_ctx 0 0K 0 ciss_data 0 0K 0 BACKLIGHT 0 0K 0 xnb 0 0K 0 isci 0 0K 0 iommu_dmamap 0 0K 0 xbbd 0 0K 0 hyperv_socket 0 0K 0 bxe_ilt 0 0K 0 xenbus 0 0K 0 xbd 0 0K 0 Balloon 0 0K 0 sysmouse 0 0K 0 vm_fictitious 0 0K 0 vtfont 0 0K 0 ath_hal 0 0K 0 athdev 0 0K 0 ata_pci 0 0K 0 ata_dma 0 0K 0 ata_generic 0 0K 0 amr 0 0K 0 pvscsi 0 0K 0 scsi_da 0 0K 69 UMAHash 0 0K 0 ata_da 0 0K 0 vm_pgdata 0 0K 0 jblocks 0 0K 0 savedino 0 0K 3607 sentinel 0 0K 0 jfsync 0 0K 0 jtrunc 0 0K 0 sbdep 0 0K 63 jsegdep 0 0K 0 jseg 0 0K 0 jfreefrag 0 0K 0 jfreeblk 0 0K 0 jnewblk 0 0K 0 jmvref 0 0K 0 jremref 0 0K 0 jaddref 0 0K 0 freedep 0 0K 0 freeblks 0 0K 3467 freefrag 0 0K 29 allocindir 0 0K 0 indirdep 0 0K 1384 allocdirect 0 0K 0 ufs_trim 0 0K 0 mactemp 0 0K 0 audit_trigger 0 0K 0 audit_pipe_presel 0 0K 0 audit_pipeent 0 0K 0 audit_pipe 0 0K 0 audit_evname 0 0K 0 audit_bsm 0 0K 0 audit_gidset 0 0K 0 audit_text 0 0K 0 audit_path 0 0K 0 audit_data 0 0K 0 audit_cred 0 0K 0 scsi_ch 0 0K 0 scsi_cd 0 0K 0 AHCI driver 0 0K 0 USBdev 0 0K 0 USB 0 0K 0 agp 0 0K 0 nvme_da 0 0K 0 ktls_ocf 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5E_TLS 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EN 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5DUMP 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 seq_file 0 0K 0 radix 0 0K 0 idr 0 0K 0 lkpifw 0 0K 0 NLM 0 0K 0 ipsec-spdcache 0 0K 0 ipsec-reg 0 0K 0 ipsec-misc 0 0K 0 ipsecrequest 0 0K 0 ip6opt 0 0K 86 ip6_moptions 0 0K 4 in6_mfilter 0 0K 9 frag6 0 0K 0 tcplog 0 0K 0 tcp_hwpace 0 0K 0 acpipwr 0 0K 0 acpi_perf 0 0K 0 LRO 0 0K 0 newreno data 0 0K 1 in_mfilter 0 0K 20 ipid 0 0K 0 80211scan 0 0K 0 80211ratectl 0 0K 0 80211power 0 0K 0 80211nodeie 0 0K 0 80211node 0 0K 0 80211mesh_gt 0 0K 0 80211mesh_rt 0 0K 0 80211perr 0 0K 0 80211prep 0 0K 0 80211preq 0 0K 0 80211dfs 0 0K 0 80211crypto 0 0K 0 80211vap 0 0K 0 iflib 0 0K 0 vlan 0 0K 0 gif 0 0K 0 ifdescr 0 0K 0 zlib 0 0K 0 fadvise 0 0K 0 VN POLL 0 0K 1 twsbuf 0 0K 0 statfs 0 0K 3509 namei_tracker 0 0K 5 export_host 0 0K 0 cl_savebuf 0 0K 23 twe_commands 0 0K 0 twa_commands 0 0K 0 tcp_log_dev 0 0K 172 midi buffers 0 0K 0 mixer 0 0K 0 ac97 0 0K 0 hdacc 0 0K 0 hdac 0 0K 0 hdaa 0 0K 0 acpicmbat 0 0K 0 SIIS driver 0 0K 0 CAM CCB 0 0K 523 PUC 0 0K 0 ppbusdev 0 0K 0 agtiapi_MemAlloc malloc 0 0K 0 biobuf 0 0K 0 aios 0 0K 0 lio 0 0K 30 acl 0 0K 0 osti_cacheable 0 0K 0 mbuf_tag 0 0K 166 tempbuff 0 0K 0 tempbuff 0 0K 0 ag_tgt_map_t malloc 0 0K 0 ag_slr_map_t malloc 0 0K 0 lDevFlags * malloc 0 0K 0 tiDeviceHandle_t * malloc 0 0K 0 ag_portal_data_t malloc 0 0K 0 ag_device_t malloc 0 0K 0 STLock malloc 0 0K 0 CCB List 0 0K 0 sr_iov 0 0K 0 OCS 0 0K 0 OCS 0 0K 0 nvme 0 0K 0 nvd 0 0K 0 netmap 0 0K 0 mwldev 0 0K 0 MVS driver 0 0K 0 CAM ccb queue 0 0K 0 mrsasbuf 0 0K 0 mpt_user 0 0K 0 mps_user 0 0K 0 accf 0 0K 0 pts 0 0K 0 iov 0 0K 20988 ioctlops 0 0K 724 eventfd 0 0K 13 Witness 0 0K 0 stack 0 0K 0 MPSSAS 0 0K 0 mps 0 0K 0 mpr_user 0 0K 0 MPRSAS 0 0K 0 mpr 0 0K 0 mfibuf 0 0K 0 sbuf 0 0K 288 md_sectors 0 0K 0 firmware 0 0K 0 compressor 0 0K 0 md_disk 0 0K 0 SWAP 0 0K 0 malodev 0 0K 0 LED 0 0K 0 sysctltmp 0 0K 910 sysctl 0 0K 3 ekcd 0 0K 0 dumper 0 0K 0 sendfile 0 0K 0 rctl 0 0K 0 ix_sriov 0 0K 0 aacraidcam 0 0K 0 aacraid_buf 0 0K 0 ix 0 0K 0 ipsbuf 0 0K 0 cache 0 0K 0 iirbuf 0 0K 0 prison_racct 0 0K 0 Fail Points 0 0K 0 sigio 0 0K 1 filedesc_to_leader 0 0K 0 pwd 0 0K 0 tty console 0 0K 0 aaccam 0 0K 0 aacbuf 0 0K 0 zstd 0 0K 0 XZ_DEC 0 0K 0 nvlist 0 0K 0 SCSI ENC 0 0K 0 SCSI sa 0 0K 0 scsi_pass 0 0K 0 isofs_node 0 0K 0 isofs_mount 0 0K 0 tr_raid5_data 0 0K 0 tr_raid1e_data 0 0K 0 tr_raid1_data 0 0K 0 tr_raid0_data 0 0K 0 tr_concat_data 0 0K 0 md_sii_data 0 0K 0 md_promise_data 0 0K 0 md_nvidia_data 0 0K 0 md_jmicron_data 0 0K 0 md_intel_data 0 0K 0 md_ddf_data 0 0K 0 raid_data 0 0K 72 geom_flashmap 0 0K 0 tmpfs dir 0 0K 0 tmpfs name 0 0K 0 tmpfs mount 0 0K 0 NFS FHA 0 0K 0 newnfsmnt 0 0K 0 newnfsclient_req 0 0K 0 NFSCL layrecall 0 0K 0 NFSCL session 0 0K 0 NFSCL sockreq 0 0K 0 NFSCL devinfo 0 0K 0 NFSCL flayout 0 0K 0 NFSCL layout 0 0K 0 NFSD rollback 0 0K 0 NFSCL diroff 0 0K 0 db> show uma Zone Size Used Free Requests Sleeps Bucket Total Mem XFree mbuf_jumbo_page 4096 8320 990 985079 0 254 38133760 0 tcp_log 416 0 15030 273660 0 254 6252480 0 mbuf 256 10216 704 2208207 0 254 2795520 0 pbuf 2624 0 957 0 0 2 2511168 0 RADIX NODE 144 14011 1048 151944 0 62 2168496 0 BUF TRIE 144 359 11401 4851 0 62 1693440 0 malloc-384 384 4152 8 4152 0 30 1597440 0 malloc-128 128 11293 53 11330 0 126 1452288 0 malloc-4096 4096 328 3 679 0 2 1355776 0 mbuf_cluster 2048 630 0 630 0 254 1290240 0 UMA Slabs 0 112 10742 19 10742 0 126 1205232 0 vmem btag 56 19129 70 19129 0 254 1075144 0 ertt_txseginfo 40 7159 16374 543198 0 254 941320 0 tcp_bbr_map 128 1859 4620 222809 0 126 829312 0 FFS inode 1160 523 30 3927 0 8 641480 0 256 Bucket 2048 274 30 20351 0 9 622592 0 malloc-16384 16384 19 7 3284 0 1 425984 0 VM OBJECT 264 1452 78 63235 0 30 403920 0 malloc-4096 4096 95 2 4231 0 2 397312 0 lkpimm 168 1 2327 1 0 62 391104 0 lkpicurr 168 2 2326 2 0 62 391104 0 sctp_asoc 2288 94 76 1784 0 254 388960 0 THREAD 1808 177 32 5366 0 8 377872 0 malloc-65536 65536 5 0 5 0 1 327680 0 malloc-2048 2048 108 46 5083 0 8 315392 0 VNODE 448 562 86 3968 0 30 290304 0 malloc-1024 1024 211 57 2224 0 16 274432 0 malloc-64 64 3925 296 8603 0 254 270144 0 sctp_ep 1280 101 100 4259 0 254 257280 0 MAP ENTRY 96 2219 343 244909 0 126 245952 0 malloc-32768 32768 0 7 1255 0 1 229376 0 malloc-16 16 14029 221 14119 0 254 228000 0 DEVCTL 1024 0 220 154 0 0 225280 0 malloc-65536 65536 1 2 361 0 1 196608 0 malloc-65536 65536 3 0 3 0 1 196608 0 malloc-32 32 5560 362 6131 0 254 189504 0 UMA Zones 768 242 2 242 0 16 187392 0 malloc-128 128 1366 60 27115 0 126 182528 0 malloc-256 256 45 645 13122 0 62 176640 0 mbuf_packet 256 100 530 16579 0 254 161280 0 malloc-256 256 318 297 9297 0 62 157440 0 VMSPACE 2544 51 9 4170 0 4 152640 0 FFS2 dinode 256 523 47 3927 0 62 145920 0 S VFS Cache 104 1024 341 4525 0 126 141960 0 malloc-65536 65536 0 2 31 0 1 131072 0 malloc-65536 65536 0 2 136 0 1 131072 0 sctp_raddr 736 95 81 1792 0 254 129536 0 PROC 1336 81 15 4204 0 8 128256 0 malloc-384 384 9 321 3592 0 30 126720 0 sctp_chunk 152 736 96 1425 0 254 126464 0 clpbuf 2624 0 48 331 0 16 125952 0 128 Bucket 1024 86 37 2704 0 16 125952 0 malloc-384 384 196 114 6826 0 30 119040 0 socket 944 50 74 7997 0 254 117056 0 ksiginfo 112 81 963 2701 0 126 116928 0 malloc-256 256 124 326 7372 0 62 115200 0 malloc-128 128 828 40 7450 0 126 111104 0 filedesc0 1072 82 16 4266 0 8 105056 0 malloc-256 256 236 139 7122 0 62 96000 0 malloc-128 128 580 133 11440 0 126 91264 0 malloc-4096 4096 22 0 22 0 2 90112 0 UMA Kegs 384 227 6 227 0 30 89472 0 64 Bucket 512 105 47 6170 0 30 77824 0 malloc-8192 8192 7 2 110 0 1 73728 0 g_bio 408 0 180 31659 0 30 73440 0 malloc-65536 65536 0 1 8 0 1 65536 0 malloc-32768 32768 0 2 130 0 1 65536 0 malloc-16384 16384 4 0 4 0 1 65536 0 malloc-64 64 914 94 9462 0 254 64512 0 tcpcb 1080 8 48 1263 0 254 60480 0 malloc-64 64 774 171 5631 0 254 60480 0 malloc-384 384 126 24 463 0 30 57600 0 malloc-8192 8192 7 0 7 0 1 57344 0 malloc-256 256 31 179 8295 0 62 53760 0 malloc-4096 4096 11 2 551 0 2 53248 0 malloc-128 128 7 396 3734 0 126 51584 0 32 Bucket 256 73 122 9272 0 62 49920 0 malloc-16384 16384 1 2 161 0 1 49152 0 malloc-2048 2048 5 19 706 0 8 49152 0 tcp_inpcb 496 11 85 1263 0 254 47616 0 pcpu-8 8 4771 861 7241 0 254 45056 0 malloc-64 64 185 508 68648 0 254 44352 0 DIRHASH 1024 34 6 34 0 16 40960 0 NAMEI 1024 0 40 29871 0 16 40960 0 malloc-8192 8192 5 0 5 0 1 40960 0 malloc-1024 1024 4 36 536 0 16 40960 0 pipe 744 27 23 587 0 16 37200 0 malloc-384 384 83 7 83 0 30 34560 0 da_ccb 544 0 63 8687 0 16 34272 0 malloc-32768 32768 1 0 1 0 1 32768 0 malloc-32768 32768 1 0 1 0 1 32768 0 malloc-32768 32768 1 0 1 0 1 32768 0 malloc-16384 16384 1 1 16 0 1 32768 0 malloc-8192 8192 0 4 40 0 1 32768 0 malloc-2048 2048 4 12 96 0 8 32768 0 malloc-1024 1024 22 10 1340 0 16 32768 0 malloc-512 512 2 62 643 0 30 32768 0 pcpu-64 64 487 25 487 0 254 32768 0 16 Bucket 144 67 157 1001 0 62 32256 0 Files 80 251 149 20284 0 126 32000 0 TURNSTILE 136 210 21 210 0 62 31416 0 tcp_bbr_pcb 832 1 35 628 0 16 29952 0 malloc-2048 2048 11 3 36 0 8 28672 0 KNOTE 160 28 147 86203 0 62 28000 0 malloc-128 128 34 183 328 0 126 27776 0 malloc-1024 1024 18 6 52 0 16 24576 0 PWD 32 26 730 3359 0 254 24192 0 ttyinq 160 135 15 300 0 62 24000 0 8 Bucket 80 45 255 1465 0 126 24000 0 ttyoutq 256 72 18 160 0 62 23040 0 tcp_rack_pcb 832 0 27 292 0 16 22464 0 malloc-4096 4096 3 2 9 0 2 20480 0 malloc-2048 2048 8 2 8 0 8 20480 0 udplite_inpcb 496 0 40 781 0 254 19840 0 malloc-128 128 89 66 627 0 126 19840 0 SLEEPQUEUE 88 210 14 210 0 126 19712 0 Mountpoints 2752 2 5 2 0 4 19264 0 malloc-256 256 37 38 917 0 62 19200 0 malloc-256 256 38 37 295 0 62 19200 0 malloc-16384 16384 1 0 1 0 1 16384 0 malloc-8192 8192 2 0 2 0 1 16384 0 malloc-8192 8192 2 0 2 0 1 16384 0 malloc-8192 8192 2 0 2 0 1 16384 0 malloc-4096 4096 2 2 3515 0 2 16384 0 malloc-2048 2048 1 7 25 0 8 16384 0 malloc-1024 1024 4 12 44 0 16 16384 0 sctp_laddr 48 0 336 1164 0 254 16128 0 malloc-32 32 313 191 10090 0 254 16128 0 vtnet_tx_hdr 24 0 668 658121 0 254 16032 0 malloc-16 16 430 570 37727 0 254 16000 0 malloc-384 384 25 15 66 0 30 15360 0 malloc-256 256 19 41 416 0 62 15360 0 malloc-2048 2048 2 4 418 0 8 12288 0 malloc-512 512 0 24 118 0 30 12288 0 malloc-512 512 19 5 22 0 30 12288 0 tcp_rack_map 112 0 108 716 0 126 12096 0 malloc-64 64 33 156 439 0 254 12096 0 malloc-32 32 151 227 3524 0 254 12096 0 2 Bucket 32 59 319 1068 0 254 12096 0 malloc-16 16 500 250 4281 0 254 12000 0 ripcb 496 6 18 86 0 254 11904 0 udp_inpcb 496 7 17 259 0 254 11904 0 kenv 258 15 30 1038 0 30 11610 0 unpcb 256 20 25 1298 0 254 11520 0 malloc-4096 4096 0 2 17 0 2 8192 0 malloc-4096 4096 0 2 94 0 2 8192 0 malloc-2048 2048 0 4 28 0 8 8192 0 malloc-1024 1024 2 6 6 0 16 8192 0 malloc-1024 1024 3 5 3 0 16 8192 0 malloc-512 512 2 14 2 0 30 8192 0 malloc-512 512 5 11 7 0 30 8192 0 malloc-512 512 0 16 46 0 30 8192 0 malloc-512 512 2 14 129 0 30 8192 0 malloc-512 512 0 16 5 0 30 8192 0 rtentry 176 30 16 34 0 62 8096 0 tcptw 88 0 92 15 0 254 8096 0 PGRP 88 36 56 57 0 126 8096 0 rl_entry 40 86 116 86 0 254 8080 0 sctp_stream_msg_out 112 15 57 567 0 254 8064 0 syncache 168 0 48 4 0 254 8064 0 udpcb 32 6 246 1040 0 254 8064 0 AIOP 32 4 248 4 0 254 8064 0 ertt 72 8 104 1263 0 126 8064 0 malloc-64 64 28 98 19594 0 254 8064 0 malloc-64 64 30 96 62 0 254 8064 0 malloc-32 32 56 196 3388 0 254 8064 0 malloc-32 32 34 218 2593 0 254 8064 0 malloc-32 32 130 122 296 0 254 8064 0 malloc-32 32 19 233 27 0 254 8064 0 4 Bucket 48 6 162 122 0 254 8064 0 malloc-16 16 13 487 1400 0 254 8000 0 malloc-16 16 22 478 37 0 254 8000 0 malloc-16 16 36 464 2323 0 254 8000 0 malloc-16 16 0 500 6 0 254 8000 0 malloc-16 16 14 486 21 0 254 8000 0 malloc-128 128 31 31 690 0 126 7936 0 sctp_readq 152 1 51 255 0 254 7904 0 AIO 208 0 38 28 0 62 7904 0 cryptop 280 0 28 58 0 30 7840 0 AIOCB 552 0 14 28 0 16 7728 0 routing nhops 256 27 3 34 0 62 7680 0 AIOLIO 272 0 28 30 0 30 7616 0 FPU_save_area 832 1 8 1 0 16 7488 0 cpuset 104 8 54 8 0 126 6448 0 epoch_record pcpu 256 4 12 4 0 62 4096 0 malloc-1024 1024 0 4 1 0 16 4096 0 pcpu-16 16 7 249 7 0 254 4096 0 sctp_asconf_ack 48 0 84 1 0 254 4032 0 tcpreass 48 0 84 1 0 254 4032 0 sackhole 32 0 126 2 0 254 4032 0 hostcache 64 1 62 1 0 254 4032 0 malloc-64 64 2 61 2 0 254 4032 0 malloc-32 32 18 108 327 0 254 4032 0 UMA Slabs 1 176 10 12 10 0 62 3872 0 malloc-384 384 0 10 1 0 30 3840 0 malloc-384 384 1 9 1 0 30 3840 0 mqnode 416 3 6 3 0 30 3744 0 KMAP ENTRY 96 12 27 14 0 0 3744 0 vmem 1856 1 1 1 0 8 3712 0 SMR CPU 32 3 60 3 0 254 2016 0 SMR SHARED 24 3 60 3 0 254 1512 0 FFS1 dinode 128 0 0 0 0 126 0 0 ada_ccb 272 0 0 0 0 30 0 0 swblk 136 0 0 0 0 62 0 0 swpctrie 144 0 0 0 0 62 0 0 cdg_qdiffsample 16 0 0 0 0 254 0 0 sctp_asconf 40 0 0 0 0 254 0 0 pf state scrubs 40 0 0 0 0 254 0 0 pf frag entries 40 0 0 0 0 254 0 0 pf frags 248 0 0 0 0 62 0 0 pf table entries 160 0 0 0 0 62 0 0 pf table entry counters 64 0 0 0 0 254 0 0 pf source nodes 136 0 0 0 0 254 0 0 pf state keys 88 0 0 0 0 126 0 0 pf states 312 0 0 0 0 254 0 0 pf tags 104 0 0 0 0 126 0 0 pf mtags 48 0 0 0 0 254 0 0 tcp_log_node 120 0 0 0 0 126 0 0 tcp_log_bucket 176 0 0 0 0 62 0 0 tfo_ccache_entries 80 0 0 0 0 126 0 0 tfo 4 0 0 0 0 254 0 0 ipq 56 0 0 0 0 254 0 0 IPsec SA lft_c 16 0 0 0 0 254 0 0 itimer 352 0 0 0 0 30 0 0 mqnotifier 216 0 0 0 0 62 0 0 mvdata 64 0 0 0 0 254 0 0 mqueue 248 0 0 0 0 62 0 0 TMPFS node 224 0 0 0 0 62 0 0 NCLNODE 592 0 0 0 0 16 0 0 LTS VFS Cache 360 0 0 0 0 30 0 0 L VFS Cache 320 0 0 0 0 30 0 0 STS VFS Cache 144 0 0 0 0 62 0 0 linux_dma_object 24 0 0 0 0 254 0 0 linux_dma_pctrie 144 0 0 0 0 62 0 0 IOMMU_MAP_ENTRY 120 0 0 0 0 126 0 0 ktls_session 192 0 0 0 0 62 0 0 mbuf_jumbo_16k 16384 0 0 0 0 254 0 0 mbuf_jumbo_9k 9216 0 0 0 0 254 0 0 audit_record 1280 0 0 0 0 8 0 0 domainset 40 0 0 0 0 254 0 0 MAC labels 40 0 0 0 0 254 0 0 vnpbuf 2624 0 0 0 0 64 0 0 mdpbuf 2624 0 0 0 0 3 0 0 nfspbuf 2624 0 0 0 0 16 0 0 swwbuf 2624 0 0 0 0 8 0 0 swrbuf 2624 0 0 0 0 16 0 0 umtx_shm 88 0 0 0 0 126 0 0 umtx pi 96 0 0 0 0 126 0 0 rangeset pctrie nodes 144 0 0 0 0 62 0 0 malloc-65536 65536 0 0 0 0 1 0 0 malloc-65536 65536 0 0 0 0 1 0 0 malloc-32768 32768 0 0 0 0 1 0 0 malloc-32768 32768 0 0 0 0 1 0 0 malloc-32768 32768 0 0 0 0 1 0 0 malloc-16384 16384 0 0 0 0 1 0 0 malloc-16384 16384 0 0 0 0 1 0 0 malloc-16384 16384 0 0 0 0 1 0 0 malloc-8192 8192 0 0 0 0 1 0 0 pcpu-32 32 0 0 0 0 254 0 0 pcpu-4 4 0 0 0 0 254 0 0 fakepg 104 0 0 0 0 126 0 0 UMA Hash 256 0 0 0 0 62 0 0