panic: ASan: Invalid access, 8-byte read at 0xfffffe0073df5c10, UMAUseAfterFree(fd) cpuid = 1 time = 1711718721 KDB: stack backtrace: db_trace_self_wrapper() at db_trace_self_wrapper+0xc6/frame 0xfffffe0073e0cdb0 kdb_backtrace() at kdb_backtrace+0xd0/frame 0xfffffe0073e0cf10 vpanic() at vpanic+0x26a/frame 0xfffffe0073e0d0d0 panic() at panic+0xb5/frame 0xfffffe0073e0d1a0 kasan_code_name() at kasan_code_name/frame 0xfffffe0073e0d270 sctp_ss_default_add() at sctp_ss_default_add+0x9f/frame 0xfffffe0073e0d2b0 sctp_lower_sosend() at sctp_lower_sosend+0x5272/frame 0xfffffe0073e0d700 sctp_sosend() at sctp_sosend+0x701/frame 0xfffffe0073e0d9a0 sousrsend() at sousrsend+0x116/frame 0xfffffe0073e0da30 kern_sendit() at kern_sendit+0x5b5/frame 0xfffffe0073e0dba0 sendit() at sendit+0x157/frame 0xfffffe0073e0dbf0 sys_sendmsg() at sys_sendmsg+0x181/frame 0xfffffe0073e0dd10 amd64_syscall() at amd64_syscall+0x473/frame 0xfffffe0073e0df30 fast_syscall_common() at fast_syscall_common+0xf8/frame 0xfffffe0073e0df30 --- syscall (198, FreeBSD ELF64, __syscall), rip = 0x2aeb2a, rsp = 0x826dc1f08, rbp = 0x826dc1f80 --- KDB: enter: panic [ thread pid 1403 tid 100695 ] Stopped at kdb_enter+0x6e: movq $0,0x21912e7(%rip) db> db> set $lines = 0 db> set $maxwidth = 0 db> show registers cs 0x20 ds 0x3b es 0x3b fs 0x13 gs 0x1b ss 0x28 rax 0x12 rcx 0xffffffff815e4d7e _vprintf+0x1ae rdx 0 rbx 0xffffffff82707560 .str.27 rsp 0xfffffe0073e0cef0 rbp 0xfffffe0073e0cf10 rsi 0 rdi 0xffffffff815e52b9 printf+0x149 r8 0 r9 0xffffffff r10 0x5a4993412c29d7c1 r11 0xfffffe00741dbc60 r12 0xfffffe00741db740 r13 0xfffffffffffffffd r14 0xffffffff82707560 .str.27 r15 0 rip 0xffffffff815d1dae kdb_enter+0x6e rflags 0x46 kdb_enter+0x6e: movq $0,0x21912e7(%rip) db> show proc Process 1403 (syz-executor.1) at 0xfffffe0074bfe560: state: NORMAL uid: 0 gids: 0, 0, 5 parent: pid 917 at 0xfffffe006d1dc580 ABI: FreeBSD ELF64 flag: 0x10000080 flag2: 0 arguments: /root/syz-executor.1 exec reaper: 0xfffffe00541f7040 reapsubtree: 1 sigparent: 20 vmspace: 0xfffffe0073d0c9a0 (map 0xfffffe0073d0c9a0) (map.pmap 0xfffffe0073d0ca60) (pmap 0xfffffe0073d0cad0) threads: 3 100666 RunQ syz-executor.1 100695 Run CPU 1 syz-executor.1 100696 S uwait 0xfffffe0057aaeb80 syz-executor.1 db> ps pid ppid pgrp uid state wmesg wchan cmd 1404 775 775 0 R (threaded) syz-executor.2 100290 Run CPU 0 syz-executor.2 100697 RunQ syz-executor.2 1403 917 917 0 R (threaded) syz-executor.1 100666 RunQ syz-executor.1 100695 Run CPU 1 syz-executor.1 100696 S uwait 0xfffffe0057aaeb80 syz-executor.1 1401 778 778 0 R (threaded) syz-executor.3 100673 RunQ syz-executor.3 100694 RunQ syz-executor.3 1397 772 772 0 R (threaded) syz-executor.0 100526 RunQ syz-executor.0 100687 S connec 0xfffffe006aa170da syz-executor.0 1386 1370 1386 0 Ss select 0xfffffe0058b8d340 dhclient 1376 1 1376 0 Ss select 0xfffffe006ced4c40 dhclient 1370 1353 424 65 S select 0xfffffe006ced4d40 dhclient 1353 424 424 0 S wait 0xfffffe006d6a5000 sh 1201 1 778 0 SV uwait 0xfffffe0057ab0e00 syz-executor.3 1004 1 775 0 S uwait 0xfffffe0058b3c300 syz-executor.2 994 1 778 0 S uwait 0xfffffe0058b3d380 syz-executor.3 990 1 775 0 S uwait 0xfffffe0057aae000 syz-executor.2 986 1 778 0 S uwait 0xfffffe0058b3b800 syz-executor.3 983 1 917 0 S uwait 0xfffffe0058b3c500 syz-executor.1 982 1 775 0 S uwait 0xfffffe00542ad700 syz-executor.2 944 0 0 0 DL aiordy 0xfffffe00741d7000 [aiod4] 943 0 0 0 DL aiordy 0xfffffe00741d7560 [aiod3] 942 0 0 0 DL aiordy 0xfffffe00741d7ac0 [aiod2] 941 0 0 0 DL aiordy 0xfffffe00741d8020 [aiod1] 917 770 917 0 Rs syz-executor.1 778 770 778 0 Rs syz-executor.3 775 770 775 0 Rs syz-executor.2 772 770 772 0 Rs syz-executor.0 770 768 768 0 S (threaded) syz-fuzzer 100093 S uwait 0xfffffe00542adb00 syz-fuzzer 100117 S uwait 0xfffffe0057aaf100 syz-fuzzer 100118 S wait 0xfffffe0057be3b00 syz-fuzzer 100119 S kqread 0xfffffe005891f400 syz-fuzzer 100120 S uwait 0xfffffe0057aaf400 syz-fuzzer 100121 S uwait 0xfffffe0057aaf500 syz-fuzzer 100122 S uwait 0xfffffe00542adf00 syz-fuzzer 100123 S wait 0xfffffe0057be3b00 syz-fuzzer 100124 S wait 0xfffffe0057be3b00 syz-fuzzer 100125 S uwait 0xfffffe0058b3c880 syz-fuzzer 100126 S wait 0xfffffe0057be3b00 syz-fuzzer 100159 S uwait 0xfffffe0058b3b700 syz-fuzzer 100486 S uwait 0xfffffe0057ab0f00 syz-fuzzer 768 766 768 0 Ss pause 0xfffffe0057be4670 csh 766 682 766 0 Ss select 0xfffffe0058b8e4c0 sshd 748 1 748 0 Ss+ ttyin 0xfffffe00576904b0 getty 747 1 747 0 Ss+ ttyin 0xfffffe00587f4cb0 getty 746 1 746 0 Ss+ ttyin 0xfffffe00587f54b0 getty 745 1 745 0 Ss+ ttyin 0xfffffe00587f5cb0 getty 744 1 744 0 Ss+ ttyin 0xfffffe00543410b0 getty 743 1 743 0 Ss+ ttyin 0xfffffe00543418b0 getty 742 1 742 0 Ss+ ttyin 0xfffffe00543420b0 getty 741 1 741 0 Ss+ ttyin 0xfffffe00543428b0 getty 740 1 740 0 Ss+ ttyin 0xfffffe00543430b0 getty 738 1 18 0 S+ piperd 0xfffffe0058a59b60 logger 737 736 18 0 S+ nanslp 0xffffffff83744481 sleep 736 1 18 0 S+ wait 0xfffffe006cff6580 sh 686 1 686 0 Ss nanslp 0xffffffff83744480 cron 682 1 682 0 Ss select 0xfffffe006ced55c0 sshd 495 1 495 0 Ss select 0xfffffe006ced5740 syslogd 424 1 424 0 Ss wait 0xfffffe0057be2ae0 devd 423 1 423 65 Ss select 0xfffffe006ced5b40 dhclient 338 1 338 0 Ss select 0xfffffe0058b8eec0 dhclient 335 1 335 0 Ss select 0xfffffe006ced5ac0 dhclient 17 0 0 0 DL syncer 0xffffffff83861ba0 [syncer] 16 0 0 0 DL vlruwt 0xfffffe00571b8040 [vnlru] 15 0 0 0 DL (threaded) [bufdaemon] 100079 D psleep 0xffffffff83860180 [bufdaemon] 100080 D - 0xffffffff82c0a140 [bufspacedaemon-0] 100095 D sdflush 0xfffffe006a609ce8 [/ worker] 9 0 0 0 DL psleep 0xffffffff838a9680 [vmdaemon] 8 0 0 0 DL (threaded) [pagedaemon] 100077 D psleep 0xffffffff838914f8 [dom0] 100081 D launds 0xffffffff83891504 [laundry: dom0] 100082 D umarcl 0xffffffff81d6cf60 [uma] 7 0 0 0 RL [rand_harvestq] 6 0 0 0 DL pftm 0xffffffff83f98ea0 [pf purge] 5 0 0 0 DL waiting 0xffffffff845ee5c0 [sctp_iterator] 4 0 0 0 DL (threaded) [cam] 100044 D - 0xffffffff8348c340 [doneq0] 100045 D - 0xffffffff8348c2c0 [async] 100076 D - 0xffffffff8348c140 [scanner] 3 0 0 0 DL (threaded) [crypto] 100041 D crypto_ 0xffffffff8388cd20 [crypto] 100042 D crypto_ 0xfffffe00085e8830 [crypto returns 0] 100043 D crypto_ 0xfffffe00085e8880 [crypto returns 1] 14 0 0 0 DL seqstat 0xfffffe00085fe488 [sequencer 00] 13 0 0 0 DL (threaded) [geom] 100035 D - 0xffffffff836ece00 [g_event] 100036 D - 0xffffffff836ece20 [g_up] 100037 D - 0xffffffff836ece40 [g_down] 2 0 0 0 WL (threaded) [clock] 100029 I [clock (0)] 100030 I [clock (1)] 12 0 0 0 WL (threaded) [intr] 100012 I [swi6: task queue] 100013 I [swi6: Giant taskq] 100015 I [swi5: fast taskq] 100031 I [swi1: netisr 0] 100032 I [swi1: hpts] 100033 I [swi1: hpts] 100046 I [irq24: virtio_pci0] 100047 I [irq25: virtio_pci0] 100048 I [irq26: virtio_pci0] 100049 I [irq27: virtio_pci0] 100050 I [irq28: virtio_pci1] 100051 I [irq29: virtio_pci1] 100052 I [irq30: virtio_pci1] 100053 I [irq31: virtio_pci1] 100054 I [irq32: virtio_pci1] 100059 I [irq33: virtio_pci2] 100060 I [irq34: virtio_pci2] 100061 I [irq35: virtio_pci2] 100063 I [irq1: atkbd0] 100064 I [irq12: psm0] 100065 I [swi0: uart uart++] 100069 I [swi1: pf send] 11 0 0 0 RL (threaded) [idle] 100003 CanRun [idle: cpu0] 100004 CanRun [idle: cpu1] 1 0 1 0 SLs wait 0xfffffe00541f7040 [init] 10 0 0 0 DL audit_w 0xffffffff8388d780 [audit] 0 0 0 0 DLs (threaded) [kernel] 100000 D swapin 0xffffffff836ed7e0 [swapper] 100005 D - 0xfffffe00079e3000 [softirq_0] 100006 D - 0xfffffe00079e2e00 [softirq_1] 100007 D - 0xfffffe00079e2d00 [if_io_tqg_0] 100008 D - 0xfffffe00079e2c00 [if_io_tqg_1] 100009 D - 0xfffffe00079e2b00 [if_config_tqg_0] 100010 D - 0xfffffe00079e2a00 [pci_hp taskq] 100011 D - 0xfffffe00079e2900 [kqueue_ctx taskq] 100014 D - 0xfffffe00079e2600 [thread taskq] 100016 D - 0xfffffe00079e2400 [aiod_kick taskq] 100017 D - 0xfffffe00079e2300 [deferred_unmount ta] 100018 D - 0xfffffe00079e2200 [inm_free taskq] 100019 D - 0xfffffe00079e2100 [in6m_free taskq] 100020 D - 0xfffffe00079e2000 [linuxkpi_irq_wq] 100021 D - 0xfffffe00079e1e00 [linuxkpi_short_wq_0] 100022 D - 0xfffffe00079e1e00 [linuxkpi_short_wq_1] 100023 D - 0xfffffe00079e1e00 [linuxkpi_short_wq_2] 100024 D - 0xfffffe00079e1e00 [linuxkpi_short_wq_3] 100025 D - 0xfffffe00079e1d00 [linuxkpi_long_wq_0] 100026 D - 0xfffffe00079e1d00 [linuxkpi_long_wq_1] 100027 D - 0xfffffe00079e1d00 [linuxkpi_long_wq_2] 100028 D - 0xfffffe00079e1d00 [linuxkpi_long_wq_3] 100034 D - 0xfffffe00079e1c00 [firmware taskq] 100039 D - 0xfffffe00079e1100 [crypto_0] 100040 D - 0xfffffe00079e1100 [crypto_1] 100055 D - 0xfffffe00079e0900 [vtnet0 rxq 0] 100056 D - 0xfffffe00079e0800 [vtnet0 txq 0] 100057 D - 0xfffffe00079e0700 [vtnet0 rxq 1] 100058 D - 0xfffffe00079e0600 [vtnet0 txq 1] 100062 D vtbslp 0xfffffe0057178280 [virtio_balloon] 100066 D - 0xffffffff8270c7a1 [deadlkres] 100070 D - 0xfffffe00079e0b00 [acpi_task_0] 100071 D - 0xfffffe00079e0b00 [acpi_task_1] 100072 D - 0xfffffe00079e0b00 [acpi_task_2] 100074 D - 0xfffffe00079e3100 [mca taskq] 100075 D - 0xfffffe00079e0a00 [CAM taskq] db> show all locks Process 1403 (syz-executor.1) thread 0xfffffe00741db740 (100695) exclusive sleep mutex sctp-tcb (tcb) r = 0 (0xfffffe0074121180) locked @ /syzkaller/managers/main/kernel/sys/netinet/sctp_output.c:13192 db> show malloc Type InUse MemUse Requests pf_hash 5 11524K 5 sctp_stro 52 9121K 283 linker 371 4922K 481 tcp_hpts 7 4801K 7 devbuf 4192 4324K 4217 sysctloid 34865 2055K 34936 vtbuf 24 1968K 46 kobj 326 1304K 488 newblk 812 1227K 1320 vfscache 3 1025K 3 pcb 166 828K 1781 inodedep 533 712K 598 ufs_quota 1 512K 1 vfs_hash 1 512K 1 callout 2 512K 2 intr 4 472K 4 subproc 152 286K 1494 filedesc 32 249K 1054 vnet_data 2 224K 2 acpitask 1 224K 1 acpica 1674 184K 60830 tidhash 3 141K 3 vmem 3 138K 5 pagedep 33 136K 513 tfo_ccache 1 128K 1 IP reass 1 128K 1 dirrem 477 120K 531 DEVFS1 110 110K 129 sem 4 106K 4 gtaskqueue 18 98K 18 bus 985 81K 5155 mtx_pool 2 72K 2 syncache 1 68K 1 NFSD srvcache 3 68K 3 module 513 65K 513 ddb_capture 1 64K 1 freefile 452 57K 501 filemon 6 48K 19 sctp_atcl 123 47K 1181 umtx 352 44K 352 kdtrace 223 44K 2103 temp 35 37K 2014 BPF 22 36K 29 hostcache 1 32K 1 shm 1 32K 2 DEVFS3 128 32K 139 msg 4 30K 4 kbdmux 6 28K 6 LRO 20 21K 22 DEVFS_RULE 56 20K 56 ifaddr 67 19K 78 routetbl 176 18K 542 ufs_mount 4 17K 5 proc 3 17K 3 tty 16 16K 16 ithread 97 16K 97 bus-sc 34 15K 1687 lltable 44 14K 52 eventhandler 162 14K 162 KTRACE 100 13K 100 ifnet 7 13K 8 ether_multi 152 13K 190 kenv 95 12K 95 GEOM 61 11K 481 rman 86 11K 451 CAM queue 5 11K 1528 in6_multi 65 9K 75 tcp_fsb_rack 4 9K 32 bmsafemap 2 9K 564 rpc 4 9K 4 devstat 4 9K 4 UART 12 9K 12 ksem 1 8K 1 sctp_timw 32 8K 32 shmfd 1 8K 4 pfs_vncache 1 8K 1 audit_evclass 238 8K 300 sctp_atky 175 8K 1538 kqueue 68 8K 1414 taskqueue 63 7K 63 freework 26 7K 515 diradd 49 7K 564 sglist 6 7K 6 cred 24 6K 246 CAM DEV 3 6K 510 plimit 22 6K 370 pfs_nodes 22 6K 22 hhook 15 5K 17 ufs_dirhash 24 5K 24 pf_ifnet 11 5K 24 UMA 267 5K 267 DEVFSP 68 5K 182 vt 11 5K 11 memdesc 1 4K 1 MCA 32 4K 32 evdev 4 4K 4 pwddesc 63 4K 1405 mkdir 28 4K 1004 acpisem 28 4K 28 freeblks 13 4K 502 session 26 4K 46 kcovinfo 52 4K 65 proc-args 88 3K 2555 newdirblk 23 3K 502 indirdep 11 3K 31 terminal 11 3K 11 CC Mem 9 3K 90 clone 9 3K 9 uidinfo 3 3K 8 lockf 20 3K 38 local_apic 1 2K 1 io_apic 1 2K 1 ipsec-saq 2 2K 2 selfd 31 2K 18777 sctp_athm 123 2K 1224 ip6ndp 12 2K 15 sctp_ifa 14 2K 16 sctp_map 104 2K 560 Unitno 27 2K 59 tun 7 2K 8 CAM XPT 22 2K 543 msi 12 2K 12 in_multi 6 2K 9 toponodes 6 2K 6 ipsecpolicy 2 2K 2 select 10 2K 37 acpidev 20 2K 20 softdep 1 1K 1 sahead 1 1K 1 secasvar 1 1K 1 nhops 6 1K 8 vnodemarker 2 1K 10 NFSD session 1 1K 1 CAM periph 4 1K 271 sctp_ifn 6 1K 16 tcp_pcm_rack 2 1K 17 ipsec 3 1K 3 mld 6 1K 7 igmp 6 1K 7 pfil 6 1K 6 isadev 6 1K 6 mount 16 1K 89 pci_link 10 1K 10 crypto 4 1K 18 encap_export_host 12 1K 12 inpcbpolicy 17 1K 314 osd 14 1K 103 netlink 2 1K 33 cdev 2 1K 2 lkpikmalloc 8 1K 9 chacha20random 1 1K 1 biobuf 1 1K 1 vnodes 1 1K 1 procdesc 2 1K 12 NFSD lckfile 1 1K 1 NFSD V4client 1 1K 1 DEVFS 9 1K 10 CAM SIM 2 1K 2 feeder 7 1K 7 pf_osfp 2 1K 2 tcpfunc 3 1K 3 loginclass 3 1K 6 prison 6 1K 6 sigio 3 1K 4 soname 6 1K 4168 cryptodev 2 1K 157 nexusdev 8 1K 8 apmdev 1 1K 1 atkbddev 2 1K 2 aio 4 1K 5 pmchooks 1 1K 1 filecaps 5 1K 90 CAM path 4 1K 1034 CAM dev queue 2 1K 2 CAM I/O Scheduler 1 1K 1 sctp_vrf 1 1K 1 vnet 1 1K 1 pmc 1 1K 1 entropy 2 1K 40 acpiintr 1 1K 1 cpus 2 1K 2 vnet_data_free 1 1K 1 Per-cpu 1 1K 1 iov 1 1K 14943 p1003.1b 1 1K 1 sctp_mcore 0 0K 0 sctp_socko 0 0K 789 sctp_iter 0 0K 14 sctp_mvrf 0 0K 0 sctp_cpal 0 0K 0 sctp_cmsg 0 0K 0 sctp_stre 0 0K 0 sctp_athi 0 0K 0 sctp_a_it 0 0K 14 sctp_aadr 0 0K 2 sctp_stri 0 0K 86 tcp_do_rack 0 0K 0 mqdata 0 0K 0 ipcomp 0 0K 0 esp 0 0K 0 ah 0 0K 0 pf_table 0 0K 0 pf_rule 0 0K 0 pf_altq 0 0K 0 pf_krule_item 0 0K 0 pf_temp 0 0K 0 madt_table 0 0K 2 smartpqi 0 0K 0 ixl 0 0K 0 ice-resmgr 0 0K 0 ice-osdep 0 0K 0 ice 0 0K 0 iavf 0 0K 0 axgbe 0 0K 0 fpukern_ctx 0 0K 0 xen_intr 0 0K 0 xen_hvm 0 0K 0 legacydrv 0 0K 0 bounce 0 0K 0 busdma 0 0K 0 qpidrv 0 0K 0 dmar_idpgtbl 0 0K 0 dmar_dom 0 0K 0 dmar_ctx 0 0K 0 isci 0 0K 0 iommu_dmamap 0 0K 0 hyperv_socket 0 0K 0 bxe_ilt 0 0K 0 aesni_data 0 0K 0 xenbus 0 0K 0 vm_fictitious 0 0K 0 UMAHash 0 0K 0 vm_pgdata 0 0K 0 jblocks 0 0K 0 savedino 0 0K 34 sentinel 0 0K 0 jfsync 0 0K 0 jtrunc 0 0K 0 sbdep 0 0K 3 jsegdep 0 0K 0 jseg 0 0K 0 jfreefrag 0 0K 0 jfreeblk 0 0K 0 jnewblk 0 0K 0 jmvref 0 0K 0 jremref 0 0K 0 jaddref 0 0K 0 freedep 0 0K 0 freefrag 0 0K 2 allocindir 0 0K 0 allocdirect 0 0K 0 ufs_trim 0 0K 0 mactemp 0 0K 0 audit_trigger 0 0K 0 audit_pipe_presel 0 0K 0 audit_pipeent 0 0K 0 audit_pipe 0 0K 0 audit_evname 0 0K 0 audit_bsm 0 0K 0 audit_gidset 0 0K 0 audit_text 0 0K 0 audit_path 0 0K 0 audit_data 0 0K 0 audit_cred 0 0K 0 ktls_ocf 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5E_TLS_RX 0 0K 0 MLX5EEPROM 0 0K 0 MLX5E_TLS 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EN 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5DUMP 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 simple_attr 0 0K 0 seq_file 0 0K 0 lkpiskb 0 0K 0 radix 0 0K 0 idr 0 0K 0 lkpindev 0 0K 0 lkpimhi 0 0K 0 lkpifw 0 0K 0 lkpi80211 0 0K 0 NLM 0 0K 0 ipsec-spdcache 0 0K 0 ipsec-reg 0 0K 0 ipsec-misc 0 0K 0 ipsecrequest 0 0K 0 ip6opt 0 0K 9 ip6_msource 0 0K 0 ip6_moptions 0 0K 0 in6_mfilter 0 0K 0 frag6 0 0K 0 tcplog 0 0K 0 tcp_hwpace 0 0K 0 ip_msource 0 0K 0 ip_moptions 0 0K 0 in_mfilter 0 0K 0 ipid 0 0K 0 80211scan 0 0K 0 80211ratectl 0 0K 0 80211power 0 0K 0 80211nodeie 0 0K 0 80211node 0 0K 0 80211mesh_gt 0 0K 0 80211mesh_rt 0 0K 0 80211perr 0 0K 0 80211prep 0 0K 0 80211preq 0 0K 0 80211dfs 0 0K 0 80211crypto 0 0K 0 80211vap 0 0K 0 iflib 0 0K 0 vlan 0 0K 0 gif 0 0K 0 ifdescr 0 0K 0 zlib 0 0K 19 fadvise 0 0K 0 VN POLL 0 0K 0 statfs 0 0K 203 namei_tracker 0 0K 3 export_host 0 0K 0 cl_savebuf 0 0K 3 lio 0 0K 2 acl 0 0K 0 mbuf_tag 0 0K 0 ktls 0 0K 0 accf 0 0K 0 pts 0 0K 0 timerfd 0 0K 0 ioctlops 0 0K 227 eventfd 0 0K 1 Witness 0 0K 0 stack 0 0K 0 sbuf 0 0K 289 firmware 0 0K 0 compressor 0 0K 0 SWAP 0 0K 0 sysctltmp 0 0K 662 sysctl 0 0K 3 ekcd 0 0K 0 dumper 0 0K 0 sendfile 0 0K 0 rctl 0 0K 0 cache 0 0K 0 prison_racct 0 0K 0 Fail Points 0 0K 0 filedesc_to_leader 0 0K 0 pwd 0 0K 0 tty console 0 0K 0 boottrace 0 0K 0 isofs_node 0 0K 0 isofs_mount 0 0K 0 tr_raid5_data 0 0K 0 tr_raid1e_data 0 0K 0 tr_raid1_data 0 0K 0 tr_raid0_data 0 0K 0 tr_concat_data 0 0K 0 md_sii_data 0 0K 0 md_promise_data 0 0K 0 md_nvidia_data 0 0K 0 md_jmicron_data 0 0K 0 md_intel_data 0 0K 0 md_ddf_data 0 0K 0 raid_data 0 0K 72 geom_flashmap 0 0K 0 tmpfs dir 0 0K 0 tmpfs name 0 0K 0 tmpfs mount 0 0K 0 tmpfs extattr 0 0K 0 NFS FHA 0 0K 0 newnfsmnt 0 0K 0 newnfsclient_req 0 0K 0 NFSCL layrecall 0 0K 0 NFSCL session 0 0K 0 NFSCL sockreq 0 0K 0 NFSCL devinfo 0 0K 0 NFSCL flayout 0 0K 0 NFSCL layout 0 0K 0 NFSD rollback 0 0K 0 NFSCL diroff 0 0K 0 NEWdirectio 0 0K 0 NEWNFSnode 0 0K 0 NFSCL lck 0 0K 0 NFSCL lckown 0 0K 0 NFSCL client 0 0K 0 NFSCL deleg 0 0K 0 NFSCL open 0 0K 0 NFSCL owner 0 0K 0 NFS fh 0 0K 0 NFS req 0 0K 0 NFSD usrgroup 0 0K 0 NFSD string 0 0K 0 NFSD V4lock 0 0K 0 NFSD V4state 0 0K 0 msdosfs_fat 0 0K 0 msdosfs_mount 0 0K 0 msdosfs_node 0 0K 0 DEVFS4 0 0K 0 DEVFS2 0 0K 0 gntdev 0 0K 0 privcmd_dev 0 0K 0 evtchn_dev 0 0K 0 xenstore 0 0K 0 xnb 0 0K 0 xen_acpi 0 0K 0 xbbd 0 0K 0 xbd 0 0K 0 Balloon 0 0K 0 sysmouse 0 0K 0 vtfont 0 0K 0 pvscsi 0 0K 0 USBdev 0 0K 0 USB 0 0K 0 twsbuf 0 0K 0 tcp_log_dev 0 0K 1 midi buffers 0 0K 0 mixer 0 0K 0 ac97 0 0K 0 hdacc 0 0K 0 hdac 0 0K 0 hdaa 0 0K 0 SIIS driver 0 0K 0 PUC 0 0K 0 ppbusdev 0 0K 0 sr_iov 0 0K 0 OCS 0 0K 0 OCS 0 0K 0 nvme 0 0K 0 nvd 0 0K 0 netmap 0 0K 0 mwldev 0 0K 0 MVS driver 0 0K 0 mrsasbuf 0 0K 0 mpt_user 0 0K 0 mps_user 0 0K 0 MPSSAS 0 0K 0 mps 0 0K 0 mpr_user 0 0K 0 MPRSAS 0 0K 0 mpr 0 0K 0 mfibuf 0 0K 0 md_sectors 0 0K 0 md_disk 0 0K 0 malodev 0 0K 0 LED 0 0K 0 ix_sriov 0 0K 0 ix 0 0K 0 ipsbuf 0 0K 0 ciss_data 0 0K 0 BACKLIGHT 0 0K 0 ath_hal 0 0K 0 athdev 0 0K 0 ata_pci 0 0K 0 ata_dma 0 0K 0 ata_generic 0 0K 0 AHCI driver 0 0K 0 agp 0 0K 0 acpipwr 0 0K 0 acpi_perf 0 0K 0 acpicmbat 0 0K 0 aacraidcam 0 0K 0 aacraid_buf 0 0K 0 aaccam 0 0K 0 aacbuf 0 0K 0 zstd 0 0K 0 XZ_DEC 0 0K 0 nvlist 0 0K 0 SCSI ENC 0 0K 0 SCSI sa 0 0K 0 scsi_pass 0 0K 0 scsi_da 0 0K 69 ata_da 0 0K 0 scsi_ch 0 0K 0 scsi_cd 0 0K 0 nvme_da 0 0K 0 CAM CCB 0 0K 523 CAM ccb queue 0 0K 0 db> show uma Zone Size Used Free Requests Sleeps Bucket Total Mem XFree mbuf_jumbo_page 4096 8339 1059 34694 0 254 38494208 0 mbuf 256 8867 796 60635 0 254 2473728 0 malloc-384 384 4654 56 4721 0 30 1808640 0 BUF TRIE 144 236 11580 633 0 62 1701504 0 mbuf_cluster 2048 762 0 762 0 254 1560576 0 malloc-128 128 11546 172 13087 0 126 1499904 0 malloc-4096 4096 328 4 505 0 2 1359872 0 UMA Slabs 0 112 10940 34 10940 0 126 1229088 0 sctp_asoc 2256 52 458 280 0 254 1150560 0 RADIX NODE 144 7727 220 44102 0 62 1144368 0 vmem btag 56 16529 70 16529 0 254 929544 0 FFS inode 1168 551 30 1052 0 8 678608 0 malloc-65536 65536 10 0 13 0 1 655360 0 sctp_ep 1176 71 439 858 0 254 599760 0 lkpicurr 168 2 3094 2 0 62 520128 0 pbuf 2624 0 198 0 0 2 519552 0 socket 960 56 452 2410 0 254 487680 0 malloc-65536 65536 6 0 6 0 1 393216 0 sctp_raddr 736 52 465 280 0 254 380512 0 VM OBJECT 264 1255 95 22061 0 30 356400 0 256 Bucket 2048 156 12 1083 0 8 344064 0 malloc-16384 16384 16 4 525 0 1 327680 0 THREAD 1824 159 17 697 0 8 321024 0 malloc-4096 4096 70 6 1413 0 2 311296 0 VNODE 448 590 76 1094 0 30 298368 0 malloc-256 256 1009 116 1796 0 62 288000 0 malloc-64 64 3892 203 23990 0 254 262080 0 malloc-16 16 14391 359 14532 0 254 236000 0 DEVCTL 1024 33 187 160 0 0 225280 0 tcp_log 416 31 482 41 0 254 213408 0 malloc-32768 32768 6 0 6 0 1 196608 0 malloc-2048 2048 78 18 881 0 8 196608 0 mbuf_packet 256 93 669 4308 0 254 195072 0 UMA Zones 768 239 0 239 0 16 183552 0 malloc-32 32 5294 376 5328 0 254 181440 0 MAP ENTRY 96 1479 411 63115 0 126 181440 0 malloc-128 128 1178 217 28724 0 126 178560 0 malloc-256 256 581 109 1489 0 62 176640 0 lkpimm 56 1 3095 1 0 254 173376 0 FPU_save_area 832 161 37 1525 0 16 164736 0 malloc-32768 32768 0 5 20 0 1 163840 0 malloc-1024 1024 135 25 154 0 16 163840 0 malloc-128 128 1096 175 5368 0 126 162688 0 FFS2 dinode 256 551 79 1052 0 62 161280 0 S VFS Cache 104 1024 497 1590 0 126 158184 0 malloc-65536 65536 0 2 68 0 1 131072 0 malloc-65536 65536 0 2 113 0 1 131072 0 malloc-2048 2048 5 59 1228 0 8 131072 0 unpcb 256 11 499 1206 0 254 130560 0 PROC 1376 62 26 1404 0 8 121088 0 ksiginfo 112 65 979 909 0 126 116928 0 malloc-4096 4096 20 4 40 0 2 98304 0 malloc-256 256 287 88 1863 0 62 96000 0 malloc-8192 8192 10 1 12 0 1 90112 0 filedesc0 1072 63 21 1405 0 8 90048 0 UMA Kegs 384 226 7 226 0 30 89472 0 g_bio 408 0 210 5246 0 30 85680 0 128 Bucket 1024 56 27 284 0 16 84992 0 malloc-128 128 504 147 1185 0 126 83328 0 malloc-1024 1024 53 27 452 0 16 81920 0 sctp_readq 152 0 520 21 0 254 79040 0 sctp_chunk 152 54 466 122 0 254 79040 0 ertt_txseginfo 40 32 1786 6736 0 254 72720 0 malloc-384 384 142 38 143 0 30 69120 0 malloc-64 64 587 484 2351 0 254 68544 0 malloc-128 128 357 170 475 0 126 67456 0 malloc-65536 65536 1 0 1 0 1 65536 0 malloc-65536 65536 0 1 8 0 1 65536 0 malloc-32768 32768 0 2 120 0 1 65536 0 malloc-8192 8192 7 1 20 0 1 65536 0 malloc-256 256 163 92 2159 0 62 65280 0 sctp_stream_msg_out 112 6 534 66 0 254 60480 0 malloc-384 384 124 26 1182 0 30 57600 0 malloc-8192 8192 7 0 33 0 1 57344 0 64 Bucket 512 76 28 2107 0 30 53248 0 malloc-64 64 538 281 763 0 254 52416 0 32 Bucket 256 70 125 518 0 62 49920 0 DIRHASH 1024 35 13 35 0 16 49152 0 NAMEI 1024 0 48 15943 0 16 49152 0 malloc-16384 16384 3 0 3 0 1 49152 0 malloc-2048 2048 11 13 13 0 8 49152 0 malloc-1024 1024 7 41 1637 0 16 49152 0 syncache 168 0 264 4 0 254 44352 0 tcp_inpcb 1312 9 24 90 0 8 43296 0 malloc-8192 8192 3 2 104 0 1 40960 0 malloc-4096 4096 9 1 12 0 2 40960 0 pcpu-8 8 4733 387 5056 0 254 40960 0 VMSPACE 616 42 24 1384 0 16 40656 0 pipe 728 21 34 375 0 16 40040 0 udp_inpcb 424 6 84 200 0 30 38160 0 da_ccb 544 0 70 1445 0 16 38080 0 malloc-64 64 110 457 1621 0 254 36288 0 malloc-64 64 8 559 14387 0 254 36288 0 malloc-64 64 89 478 2051 0 254 36288 0 malloc-64 64 223 344 266 0 254 36288 0 malloc-64 64 242 325 372 0 254 36288 0 tcp_rack_map 128 6 273 129 0 126 35712 0 tcp_bbr_map 128 3 276 99 0 126 35712 0 malloc-128 128 27 252 196 0 126 35712 0 malloc-128 128 30 249 121 0 126 35712 0 malloc-128 128 112 167 127 0 126 35712 0 routing nhops 256 27 108 38 0 62 34560 0 ttyoutq 256 72 63 160 0 62 34560 0 malloc-384 384 47 43 65 0 30 34560 0 malloc-256 256 45 90 206 0 62 34560 0 malloc-256 256 32 103 369 0 62 34560 0 malloc-256 256 39 96 1102 0 62 34560 0 malloc-256 256 7 128 10 0 62 34560 0 TURNSTILE 136 177 75 177 0 62 34272 0 SLEEPQUEUE 88 177 207 177 0 126 33792 0 malloc-32768 32768 1 0 12 0 1 32768 0 malloc-32768 32768 1 0 1 0 1 32768 0 malloc-16384 16384 0 2 160 0 1 32768 0 malloc-4096 4096 4 4 775 0 2 32768 0 malloc-2048 2048 13 3 133 0 8 32768 0 malloc-2048 2048 3 13 81 0 8 32768 0 malloc-2048 2048 0 16 40 0 8 32768 0 malloc-1024 1024 3 29 18 0 16 32768 0 malloc-1024 1024 9 23 10 0 16 32768 0 malloc-1024 1024 5 27 21 0 16 32768 0 malloc-1024 1024 10 22 13 0 16 32768 0 malloc-512 512 5 59 42 0 30 32768 0 malloc-512 512 6 58 9 0 30 32768 0 malloc-512 512 1 63 133 0 30 32768 0 malloc-512 512 11 53 148 0 30 32768 0 malloc-512 512 2 62 6 0 30 32768 0 pcpu-64 64 488 24 488 0 254 32768 0 PWD 40 26 782 590 0 254 32320 0 KNOTE 160 31 169 7152 0 62 32000 0 ttyinq 160 135 65 300 0 62 32000 0 Files 80 217 183 9477 0 126 32000 0 PGRP 120 26 238 46 0 126 31680 0 clpbuf 2624 0 12 26 0 4 31488 0 tcp_bbr_pcb 832 1 35 15 0 16 29952 0 sctp_laddr 48 35 553 283 0 254 28224 0 malloc-32 32 276 606 1234 0 254 28224 0 16 Bucket 144 62 134 300 0 62 28224 0 4 Bucket 48 6 582 8 0 254 28224 0 udplite_inpcb 424 0 63 5 0 30 26712 0 cpuset 200 7 121 22 0 62 25600 0 ripcb 392 2 61 19 0 30 24696 0 malloc-8192 8192 3 0 3 0 1 24576 0 malloc-8192 8192 1 2 20 0 1 24576 0 malloc-4096 4096 2 4 6 0 2 24576 0 rl_entry 40 42 564 42 0 254 24240 0 rtentry 168 30 114 38 0 62 24192 0 8 Bucket 80 53 247 396 0 126 24000 0 malloc-384 384 14 46 50 0 30 23040 0 malloc-384 384 31 29 35 0 30 23040 0 malloc-384 384 0 60 345 0 30 23040 0 domainset 40 0 567 12 0 254 22680 0 Mountpoints 2816 2 6 2 0 4 22528 0 hostcache 64 1 314 1 0 254 20160 0 udplite_inpcb ports 32 0 630 2 0 254 20160 0 udp_inpcb ports 32 3 627 58 0 254 20160 0 tcp_inpcb ports 32 5 625 26 0 254 20160 0 ertt 72 9 271 90 0 126 20160 0 malloc-32 32 155 475 220 0 254 20160 0 malloc-32 32 26 604 56 0 254 20160 0 malloc-32 32 157 473 1090 0 254 20160 0 malloc-32 32 51 579 120 0 254 20160 0 malloc-32 32 217 413 5916 0 254 20160 0 malloc-32 32 47 583 349 0 254 20160 0 2 Bucket 32 61 569 406 0 254 20160 0 cryptop 280 0 70 8 0 30 19600 0 epoch_record pcpu 256 4 60 4 0 62 16384 0 malloc-16384 16384 1 0 1 0 1 16384 0 malloc-16384 16384 1 0 1 0 1 16384 0 malloc-16384 16384 0 1 1 0 1 16384 0 malloc-16384 16384 1 0 1 0 1 16384 0 malloc-2048 2048 3 5 3 0 8 16384 0 malloc-2048 2048 2 6 2 0 8 16384 0 malloc-1024 1024 1 15 1 0 16 16384 0 malloc-512 512 0 32 1 0 30 16384 0 SMR CPU 32 7 504 7 0 254 16352 0 vtnet_tx_hdr 24 0 668 15665 0 254 16032 0 malloc-16 16 441 559 31218 0 254 16000 0 AIO 208 0 76 2 0 62 15808 0 kenv 258 17 43 1076 0 30 15480 0 mqnode 416 3 33 3 0 30 14976 0 vmem 1856 1 7 1 0 8 14848 0 SMR SHARED 24 7 504 7 0 254 12264 0 tcp_rack_pcb 1216 2 8 16 0 8 12160 0 malloc-16 16 10 740 37 0 254 12000 0 malloc-16 16 16 734 200 0 254 12000 0 malloc-16 16 88 662 708 0 254 12000 0 malloc-16 16 302 448 4246 0 254 12000 0 malloc-16 16 36 714 165 0 254 12000 0 malloc-16 16 14 736 18 0 254 12000 0 AIOCB 552 0 21 6 0 16 11592 0 malloc-384 384 2 28 2 0 30 11520 0 AIOLIO 272 0 42 2 0 30 11424 0 malloc-8192 8192 1 0 1 0 1 8192 0 pcpu-16 16 8 504 8 0 254 8192 0 UMA Slabs 1 176 9 13 9 0 62 3872 0 KMAP ENTRY 96 12 27 14 0 0 3744 0 FFS1 dinode 128 0 0 0 0 126 0 0 ada_ccb 272 0 0 0 0 30 0 0 swblk 136 0 0 0 0 62 0 0 swpctrie 144 0 0 0 0 62 0 0 cdg_qdiffsample 16 0 0 0 0 254 0 0 pf state scrubs 40 0 0 0 0 254 0 0 pf frag entries 40 0 0 0 0 254 0 0 pf frags 248 0 0 0 0 62 0 0 pf table entries 160 0 0 0 0 254 0 0 pf table entry counters 64 0 0 0 0 254 0 0 pf source nodes 152 0 0 0 0 254 0 0 pf state keys 88 0 0 0 0 126 0 0 pf states 360 0 0 0 0 254 0 0 pf tags 104 0 0 0 0 126 0 0 pf mtags 184 0 0 0 0 62 0 0 tfo_ccache_entries 80 0 0 0 0 126 0 0 tfo 4 0 0 0 0 254 0 0 sackhole 32 0 0 0 0 254 0 0 ipq 56 0 0 0 0 254 0 0 sctp_asconf_ack 48 0 0 0 0 254 0 0 sctp_asconf 40 0 0 0 0 254 0 0 tcp_log_id_node 120 0 0 0 0 126 0 0 tcp_log_id_bucket 176 0 0 0 0 62 0 0 tcpreass 48 0 0 0 0 254 0 0 ripcb ports 32 0 0 0 0 254 0 0 IPsec SA lft_c 16 0 0 0 0 254 0 0 itimer 352 0 0 0 0 30 0 0 mqnotifier 216 0 0 0 0 62 0 0 mvdata 64 0 0 0 0 254 0 0 mqueue 248 0 0 0 0 62 0 0 TMPFS node 232 0 0 0 0 62 0 0 NCLNODE 608 0 0 0 0 16 0 0 LTS VFS Cache 360 0 0 0 0 30 0 0 L VFS Cache 320 0 0 0 0 30 0 0 STS VFS Cache 144 0 0 0 0 62 0 0 linux_dma_object 32 0 0 0 0 254 0 0 linux_dma_pctrie 144 0 0 0 0 62 0 0 IOMMU_MAP_ENTRY 104 0 0 0 0 126 0 0 mbuf_jumbo_16k 16384 0 0 0 0 254 0 0 mbuf_jumbo_9k 9216 0 0 0 0 254 0 0 audit_record 1280 0 0 0 0 8 0 0 MAC labels 40 0 0 0 0 254 0 0 vnpbuf 2624 0 0 0 0 16 0 0 nfspbuf 2624 0 0 0 0 4 0 0 swwbuf 2624 0 0 0 0 2 0 0 swrbuf 2624 0 0 0 0 4 0 0 umtx_shm 88 0 0 0 0 126 0 0 umtx pi 96 0 0 0 0 126 0 0 rangeset pctrie nodes 144 0 0 0 0 62 0 0 malloc-65536 65536 0 0 0 0 1 0 0 malloc-65536 65536 0 0 0 0 1 0 0 malloc-32768 32768 0 0 0 0 1 0 0 malloc-32768 32768 0 0 0 0 1 0 0 malloc-32768 32768 0 0 0 0 1 0 0 malloc-16384 16384 0 0 0 0 1 0 0 malloc-8192 8192 0 0 0 0 1 0 0 malloc-4096 4096 0 0 0 0 2 0 0 malloc-4096 4096 0 0 0 0 2 0 0 malloc-512 512 0 0 0 0 30 0 0 malloc-512 512 0 0 0 0 30 0 0 pcpu-32 32 0 0 0 0 254 0 0 pcpu-4 4 0 0 0 0 254 0 0 fakepg 104 0 0 0 0 126 0 0 UMA Hash 256 0 0 0 0 62 0 0