kern.securelevel: 0 -> 1 creating runtime link editor directory cache. preserving editor files. starting network daemons: sshd. starting local daemons:. Tue Mar 26 09:35:43 PDT 2019 OpenBSD/amd64 (ci-openbsd-multicore-3.c.syzkaller.internal) (tty00) Warning: Permanently added '10.128.0.213' (ECDSA) to the list of known hosts. 2019/03/26 09:36:16 fuzzer started 2019/03/26 09:36:20 dialing manager at 10.128.15.235:43968 2019/03/26 09:36:20 syscalls: 1 2019/03/26 09:36:20 code coverage: enabled 2019/03/26 09:36:20 comparison tracing: enabled 2019/03/26 09:36:20 extra coverage: support is not implemented in syzkaller 2019/03/26 09:36:20 setuid sandbox: enabled 2019/03/26 09:36:20 namespace sandbox: support is not implemented in syzkaller 2019/03/26 09:36:20 Android sandbox: support is not implemented in syzkaller 2019/03/26 09:36:20 fault injection: support is not implemented in syzkaller 2019/03/26 09:36:20 leak checking: support is not implemented in syzkaller 2019/03/26 09:36:20 net packet injection: enabled 2019/03/26 09:36:20 net device setup: support is not implemented in syzkaller 09:36:25 executing program 0: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x3}, 0xc) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x6010, r1, 0x0, 0x0) munmap(&(0x7f0000fee000/0x12000)=nil, 0x12000) fcntl$setstatus(r0, 0x4, 0x80) munmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000) minherit(&(0x7f0000ff1000/0x1000)=nil, 0x1000, 0x3) fcntl$getown(r1, 0x5) pwritev(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="81ffe9958f5c080563173f4fa71339c3d245d316c8a53811ed09f922620cd6703bd8c2df40ac9b50e0e5c4024949a9a64e9a67ec8244e5ed3c9c3fd87bedd723e55473e44f2f540949cfb06ac44643a910d34f37f7234d79dee540c0cde45986c3c0acf8d38600", 0x67}], 0x1, 0x0) getsockopt$SO_PEERCRED(r1, 0xffff, 0x1022, &(0x7f0000000140), 0xc) getpeername$unix(r1, &(0x7f0000000180)=@file={0x0, ""/108}, &(0x7f0000000200)=0x6e) ioctl$TIOCSWINSZ(r1, 0x80087467, &(0x7f0000000240)={0x2, 0x2, 0x5f, 0x5}) sendmsg(r1, &(0x7f00000007c0)={&(0x7f0000000280)=@un=@abs={0x0, 0x0, 0x0}, 0x8, &(0x7f00000006c0)=[{&(0x7f00000002c0)="468571c9207df110341e190b5a51799701d2a28eece4a75970d0b0fe616017cafd10ff1a9cb1b1d08179446d233d152a1fec54c9c3927592755870bc9bd5e7587386eacd3aeb32c12b85671cba7d99adcc19b7b5d8eb5b8a6ef5fdc24b03102a05e54c9de988ead432b561f9124d89e6ed84862bbd0580211ee4681c9d1f4000ffd4200ef98cb423dee790dfe187ce1eb0bce1fd5a07699f955e837f4934eb4752414af8d1", 0xa5}, {&(0x7f0000000380)="97dde19f28a94a020ebe319bbf2bc3e2867aa3ed5826dfc52872d0e02821cdaad27f4572b2450c9b3960dc2277384f458775f843c9cf5af8ece28e02dc2585c3d3a1a524538767e2f92d49bb05ffb0d77a884c959bcca65a90f7154709c1", 0x5e}, {&(0x7f0000000400)="4de7d1104ad0910b182a7d91568c7a75b5973a5d8f538111d93cbca4146b24de33200c95bdd6aac3f8bf4494a47ce2ce6a254ed32aa165f22fe10bee861e72e53d50857d2b83479974bdeef544a831d3d71e0f0c39fa16ff03e0b69e3ec6937157263ad93196aa98bc94", 0x6a}, {&(0x7f0000000480)="881d693df8e32b6bc20debc8e84199d07311446d0c82edfce3a80c89481fab", 0x1f}, {&(0x7f00000004c0)="9d45454bdead190bfffa6306317f62b7a356a0dc02b87a52c8512bdf872da1e4c2af1c30473be30dd5539147646463d5cf8f73c54f64fd50010034af20d5bd1d8bb84448bcfcefb3ead3c8c9a4bb1e3d8124b4d1beb7a77ede405573520c7a8f0ca25110e89aca10f3cd7c81b3294c29b560c90d6380252d1d51a40d1a8fc2aed570bc632d64d971230a7c1bc334d196684a43443a0e08406a9791d35b54d32ba289d6655a2013dd212a5b602364b15c77d9b9a3daf5fce150bebcbc9257aae7882606bbccf6d1c9cd0a3ddd6be754dd50ece3786086d1fbe9a292cc9b469736", 0xe0}, {&(0x7f00000005c0)="889bf0fb93bb98d73018bcf00a97adab1b204196e1f94091abd30f62e969b429a858d455562ff657830bdee26766056100c9785ae524b7b03bf28d09d1ada118ece013e37f3815ee14687202d39a23a82f7dd021d191", 0x56}, {&(0x7f0000000640)="4de58682ba37ac11e59064fc24210f2e3cd4f89c041b9726cf8a1a9f6fccd022d00e5ab49c05a4fe05aafef9bf2839270c326b116ded4279ba329dd9cf24693cac760bd3a3594d213343464d9fee", 0x4e}], 0x7, &(0x7f0000000740)=[{0x40, 0x1, 0xb3be, "f4541379590c608d0d149506f423f89a6df9e118a6cd48ad29ecc2020c0a6be6615fd43b2ce4c36f556f814f8d"}, {0x18, 0xffff, 0x2, "9d87dce2f788"}], 0x58}, 0x0) ioctl$TIOCSTOP(r1, 0x2000746f) getdents(r0, &(0x7f0000000800)=""/106, 0x6a) pwritev(r1, &(0x7f0000001ac0)=[{&(0x7f0000000880)="6bd4949fbf74bcfc7f46c2a68811db4b7f32f1814727ba3aa6d3db1ceecaece44cc8b310b53f85146e39c38e5ae9056e4f79b9217b28d4dcf11d76be7b3ccd7bfa34f08f6b109306d49a3fdd0d99799d181ec0f6cbefc6ba990dc83970866d40bb4f79b596e14a6776d3e8951999d3d302a233c5fe0a3ce1a6b77ffdc64aeb07c155ad172dc1891d89b59e40722c606ccda1104bda63171e9d853193474ed49d52a2ec04c54e72629f6b98eeeae59ac9d1af7251fb7dc0314cc4bb13e535786ced79737124491f5996c4b7d2f5da87ec998bacfdf18daed0d2d695af", 0xdc}, {&(0x7f0000000980)="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", 0x1000}, {&(0x7f0000001980)="863836402af20c62e6d1cd42695d0852bff0324b422e413af3d7ec09f2ed58460fcb457a9233656fcc95129c432d43ec0920279801999995148b7bb61a4175ea2d0a8a3b6c84cc0d989aec4566ebfd042d4d161936c61e8b729ad61c0edf533fb91cb4db6db49e7266187b9427b0d4f90b34c9cb2b1da51151b3c8067a8e75d7d80eed4cef", 0x85}, {&(0x7f0000001a40)="4afe1c2bdf923a8a40b72798cbf8c069e31d4f3e3a5982beea3af9ada26b1d1bd7b7a1d286d49b47ee8398f4776d3e528dfc9fd8ce473433ddf8c3d634547c64fc5d3a4372b74b3770b59d13171868b345dd5156bc53f5bb4bacf3467ebba6c51aa01a2031b37b0191f432ad683e89879008fc1e9ea7718575be5b", 0x7b}], 0x4, 0x0) write(r1, &(0x7f0000001b00)="7f002cbabaed023aa3a2d80df3f6862cdd8112354ce249ef64e2bf84d656", 0x1e) ioctl$TIOCSPGRP(r1, 0x40047477, &(0x7f0000001b40)) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2, 0x3010, r0, 0x0, 0x0) pipe(&(0x7f0000001b80)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_pts() unlinkat(r0, &(0x7f0000001bc0)='./file0\x00', 0x0) connect$inet6(r2, &(0x7f0000001c00)={0x18, 0x0, 0x6, 0x191d}, 0xc) r4 = dup(r3) sendto$inet(r1, &(0x7f0000001c40)="25a82c337a4772b08f4e16e75c105fbf63cc437e9809ca2537414c80428181a0bef7d76cd9f21ed5742a43c7604d424a1d76081aa4b30529f4a61a0a6a6b84b8210b5e1f4c82933f9a68ac5160857486ce09b3f5c641f59fc86ecfe865ecaf9fc3892d94bb1f63080f05ecddf8946e66ebf24f5570dfb591116edfccf2e3ac0edd50631aa2f109", 0x87, 0x0, &(0x7f0000001d00)={0x2, 0x0}, 0xc) dup2(r4, r1) ioctl$TIOCSETVERAUTH(r3, 0x8004741c, &(0x7f0000001d40)=0x1) fcntl$setflags(r2, 0x2, 0x1) setsockopt$inet_opts(r4, 0x0, 0x1, &(0x7f0000001d80)="b3abf95584d94286d2380763ad8e2df7611d31644bcd950728faa7c4f3f15fb16e679fdfaa75bd2cae693b53e3cc5e95a016179b4283be3ce594e4abf285366cd1c70e9c80e50e5d125fbed7f0400cf2b5c4ce678dd89c8c52433573", 0x5c) setsockopt$sock_timeval(r0, 0xffff, 0x1006, &(0x7f0000001e00)={0x3, 0x343}, 0x10) 09:36:25 executing program 1: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) ioctl$WSDISPLAYIO_WSMOUSED(r1, 0x80185758, &(0x7f0000000040)={0x2, 0xa863, {0x6, 0x3}}) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) recvfrom(r3, &(0x7f00000000c0)=""/177, 0xb1, 0x840, &(0x7f0000000180)=@in6={0x18, 0x1, 0xfffffffffffffffa, 0x3}, 0xc) chroot(&(0x7f00000001c0)='./file0\x00') r4 = msgget$private(0x0, 0x82) msgsnd(r4, &(0x7f0000000200)={0x1, "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"}, 0x103, 0x800) r5 = shmget$private(0x0, 0x4000, 0x10, &(0x7f0000ffb000/0x4000)=nil) shmctl$SHM_LOCK(r5, 0x3) ioctl$WSDISPLAYIO_DELFONT(r1, 0x8058574f, &(0x7f0000000340)={'./file0\x00', 0x6, 0x7, 0x8, 0x1, 0x6, 0x23a, 0x6, 0x1, 0x1, 0x0, 0x7fffffff}) recvfrom(r3, &(0x7f00000003c0)=""/176, 0xb0, 0x0, &(0x7f0000000480)=@in6={0x18, 0x2, 0x402, 0x3}, 0xc) getsockopt$inet_opts(r3, 0x0, 0x1, &(0x7f00000004c0)=""/49, &(0x7f0000000500)=0x31) ioctl$WSDISPLAYIO_LSFONT(r2, 0xc058574e, &(0x7f0000000540)) getpeername$unix(r2, &(0x7f00000005c0)=@file={0x0, ""/108}, &(0x7f0000000640)=0x6e) chroot(&(0x7f0000000680)='./file0\x00') pipe2(&(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) shmget$private(0x0, 0x4000, 0x20, &(0x7f0000ff9000/0x4000)=nil) ioctl$WSMOUSEIO_SETPARAMS(r3, 0x80105728, &(0x7f0000000740)={&(0x7f0000000700)=[{0xc5, 0x4}, {0x63, 0x5}, {0x0, 0x2}], 0x3}) ioctl$WSDISPLAYIO_GETSCREENTYPE(r6, 0xc028575d, &(0x7f0000000780)={0xffffffff7fffffff, 0x9, './file0\x00', 0x81, 0x8, 0xb7, 0x4}) sendto$unix(r2, &(0x7f00000007c0)="f9e6247f3308a0026218bfc5e6286c27e945133904ddbec74655f4f1c0510db0fd606e1d7e51bd9603895ba3a39507e1a56115c36040d40bdef5421633a6ec9af7bd93eec34bd3ced5bbf6624a668eae4253", 0x52, 0x402, &(0x7f0000000840)=@file={0x1, './file0\x00'}, 0xa) setsockopt$inet_opts(r1, 0x0, 0x1, &(0x7f0000000880)="f9bce9a1e3d56b787edeab36262099756fc60a58b39f47", 0x17) ioctl$KDSETRAD(r6, 0x20004b43) writev(r2, &(0x7f00000008c0), 0x0) fcntl$setstatus(r2, 0x4, 0x80) read(r6, &(0x7f0000000900)=""/4096, 0x1000) bind$unix(r0, &(0x7f0000001900)=@file={0x1, './file0\x00'}, 0xa) socket$inet(0x2, 0x2, 0x8) rename(&(0x7f0000001940)='./file0\x00', &(0x7f0000001980)='./file0\x00') socket$inet6(0x18, 0x0, 0xfffffffffffffeff) getsockopt$sock_timeval(r7, 0xffff, 0x1005, &(0x7f00000019c0), &(0x7f0000001a00)=0x10) 09:36:25 executing program 0: r0 = socket(0x2, 0x3, 0x1) connect$unix(r0, &(0x7f0000000000)=@file={0xbd5699bc1ec0282, './file0\x00'}, 0x10) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000280)="0d5dae3070ca9f05", 0x4}], 0x10000000000006aa) 09:36:25 executing program 0: nanosleep(&(0x7f0000000040)={0x200}, 0xffffffffffffffff) execve(0x0, 0x0, 0x0) r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c) socketpair(0x20, 0x2, 0x7, &(0x7f0000000000)={0xffffffffffffffff}) r2 = socket$inet(0x2, 0x8002, 0xfff) r3 = fcntl$dupfd(0xffffffffffffff9c, 0xa, 0xffffffffffffffff) r4 = socket$inet(0x2, 0x8000, 0x40) r5 = accept$inet6(0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=0xc) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x800, 0x0) r7 = socket(0x6, 0x5, 0x56) r8 = socket(0x3, 0xc007, 0x9) r9 = dup(0xffffffffffffff9c) r10 = socket$unix(0x1, 0x5, 0x0) r11 = accept$inet6(0xffffffffffffffff, &(0x7f0000000280), &(0x7f00000002c0)=0xc) r12 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/wsmouse\x00', 0x80, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r14 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x40, 0x2) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x10000) kevent(r0, &(0x7f0000000140)=[{{r1}, 0xffffffffffffffff, 0x1, 0x0, 0x1f, 0x3ff}, {{r2}, 0x0, 0x80, 0x2, 0x3, 0x1}, {{r3}, 0xfffffffffffffffe, 0x50, 0x1, 0xffff, 0xb2f8}, {{r4}, 0xfffffffffffffffe, 0x1, 0x4, 0x4, 0x1a}, {{r5}, 0xfffffffffffffffd, 0x2, 0x4, 0x0, 0x4000000000000000}, {{r6}, 0xfffffffffffffffb, 0x8, 0x40000000, 0x98bc, 0x7ff}, {{r7}, 0xfffffffffffffffe, 0x2, 0x85, 0x100000001, 0x1ff}, {{r8}, 0xfffffffffffffffc, 0x0, 0x40000003, 0x5, 0xfff}, {{r9}, 0xfffffffffffffffb, 0x20, 0x10, 0x20, 0x7}, {{r10}, 0xfffffffffffffffc, 0x50, 0x20000005, 0x5, 0x9}], 0x5, &(0x7f0000000400)=[{{r11}, 0xfffffffffffffffd, 0x4, 0xfffff, 0x4, 0x3ff}, {{r12}, 0xfffffffffffffff9, 0x2, 0x4, 0x4}, {{r13}, 0xfffffffffffffffd, 0x0, 0xf0000001, 0x3, 0x6}, {{r14}, 0xfffffffffffffff8, 0xfa, 0xa, 0x3, 0x7}, {{r15}, 0xfffffffffffffffe, 0x90, 0x80000081, 0x4, 0x20}], 0x2, &(0x7f00000004c0)={0xffff, 0x9}) 09:36:25 executing program 0: r0 = accept(0xffffffffffffffff, &(0x7f0000000040)=@un=@abs, &(0x7f00000000c0)=0x8) r1 = getpgrp() fcntl$setown(r0, 0x6, r1) mknod(&(0x7f0000000000)='./bus\x00', 0x2080002002, 0x40004000000028aa) r2 = open(&(0x7f0000000400)='./bus\x00', 0x1, 0x0) writev(r2, &(0x7f0000000080)=[{&(0x7f0000000140)="00000018600429000000020000000000000000000000000000000000000000000000000000000087899664b8", 0x2c}], 0x1) 09:36:26 executing program 1: mknod(&(0x7f0000000000)='./bus\x00', 0x80002005, 0x0) r0 = open$dir(&(0x7f0000000280)='./bus\x00', 0x0, 0x0) r1 = dup(r0) ioctl$WSDISPLAYIO_ADDSCREEN(r1, 0x80245753, &(0x7f0000000040)={0x4, './bus\x00', './bus\x00'}) r2 = dup2(r0, r0) close(r0) ioctl$TIOCSETD(r2, 0x8004741b, &(0x7f0000000080)=0x2) fsync(r2) 09:36:26 executing program 0: mknod(&(0x7f0000000000)='./file0\x00', 0x2003, 0x607) r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x20800, 0x1) r1 = kqueue() kevent(r1, &(0x7f0000000180)=[{{r0}, 0xffffffffffffffff, 0x1}], 0x28, 0x0, 0x0, 0x0) kevent(r1, &(0x7f0000000100)=[{{r0}, 0xfffffffffffffffe, 0x1}], 0x6, 0x0, 0x0, 0x0) dup2(r0, r1) 09:36:26 executing program 0: getgroups(0x0, &(0x7f0000000040)) setuid(0xee01) accept(0xffffffffffffffff, 0x0, &(0x7f0000000080)) r0 = socket$inet6(0x18, 0x3, 0x6) getsockopt$SO_PEERCRED(r0, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0}, 0xffffffffffffffaa) setuid(r1) setregid(0x0, 0x0) 09:36:26 executing program 1: mknod(&(0x7f0000000140)='./bus\x00', 0x80002005, 0x8000000000005200) r0 = kqueue() r1 = open$dir(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) kevent(r0, &(0x7f0000000240)=[{{r1}, 0xffffffffffffffff, 0x63}], 0x7, 0x0, 0x0, 0x0) openat(r1, &(0x7f0000000100)='./bus\x00', 0x10480, 0x4) r2 = kqueue() r3 = kqueue() kevent(r3, &(0x7f0000000200), 0x60, 0x0, 0xfffffffffffffff9, 0x0) kevent(r2, &(0x7f0000000000), 0x1, 0x0, 0x81, 0x0) semctl$IPC_SET(0x0, 0x0, 0x1, 0x0) linkat(r1, &(0x7f0000000080)='./bus\x00', r1, &(0x7f00000000c0)='./bus\x00', 0x4) r4 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000040)='/dev/wskbd0\x00', 0x8000, 0x0) kevent(0xffffffffffffffff, &(0x7f0000000280)=[{{r3}, 0x0, 0x20, 0x82, 0x1f37, 0x5}, {{}, 0xffffffffffffffff, 0x28, 0xa0, 0x9, 0x99}, {{r4}, 0xfffffffffffffffb, 0x0, 0xfffff, 0x10000}, {{r3}, 0xfffffffffffffffb, 0x80, 0xf0000004, 0x8000}, {{r0}, 0x0, 0x60, 0xf0000000, 0x1ff, 0x3}], 0x1, 0x0, 0x81, 0x0) kevent(r0, &(0x7f0000000000)=[{{r1}, 0xffffffffffffffff, 0x2}], 0x7, 0x0, 0x7, 0x0) kqueue() 09:36:27 executing program 0: r0 = socket(0x2, 0x3, 0x6) connect$unix(r0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00e0\x00'], 0xa) socket(0x20, 0x2, 0x9) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x3020, 0x0) write(r0, &(0x7f0000000080)="3228d1ae4d0c91328d75dba3efc27c2b903e5395be271b240ad1e1eedc4134a69917d42b89a58af1d4ba630e33879004ad63cb4e35ab7bbf", 0x38) chmod(&(0x7f00000000c0)='./file0\x00', 0x1) 09:36:27 executing program 1: r0 = socket(0x18, 0x2, 0x0) setsockopt$sock_int(r0, 0xffff, 0x1021, &(0x7f0000000000), 0x4) setsockopt(r0, 0xe20, 0x7f, &(0x7f0000000040)="f716d186828f7b0e56dc954c6af878f1e8544534b189cfd8cc08edca64736ac3269ce28e7bcfcbe586903ca5801bf541744fdffb9ba717783cf5ebc53cefbb1b50714475719a5fd405e01c71276a47ee09c60b58bff9a4ceb710e1b4c3908d63a360ae3538273bacfcd6f652bfabbab31505c18936b2cd71fdb4947c00193111dad4adf206246a91800dbc89d66647f6d597bdd02326747f2c6b8df68f0a0e3d2b3c4844db0ac57208ae9a558f69495762a28235737557", 0xb7) 09:36:27 executing program 0: r0 = socket$inet6(0x18, 0x3, 0x0) r1 = getpgid(0x0) fcntl$setown(r0, 0x6, r1) r2 = socket(0x2000000000000002, 0x3, 0x106) bind(r2, &(0x7f0000000000)=@un=@abs={0x25ad51a74fd02bc, 0x7}, 0x10) close(r0) r3 = openat$tty(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty\x00', 0x8100, 0x0) ioctl$TIOCCDTR(r3, 0x20007478) 09:36:27 executing program 1: mknod(&(0x7f0000000040)='./file0\x00', 0x2003, 0x1700) r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x280, 0x80) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TIOCMSET(r1, 0x8004667c, &(0x7f0000000000)=0x800000000005) close(r1) linkat(r1, &(0x7f0000000080)='./file0\x00', r0, &(0x7f0000000100)='./file0\x00', 0x4) 09:36:27 executing program 0: mknod(&(0x7f0000000100)='./bus\x00', 0x2000, 0x40004010001028ad) stat(&(0x7f0000000040)='./bus\x00', &(0x7f00000001c0)) r0 = open(&(0x7f0000000400)='./bus\x00', 0x1, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)="000000186004008b00233a27feff023519edffff0001000000bf02008c9798171fbb18fb9d568e58a6b193ce02df1286a2a219a3ac621f176181ffe691ec51f8a0d902da5691d8995335a17d1827ad", 0x4f}], 0x1) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0x69, &(0x7f0000000000)={{0x18, 0x3, 0x0, 0x1}, {0x18, 0x1, 0x80000001, 0x10000}, 0x2, [0x4, 0x8b97, 0x7fff, 0x7, 0xcb1, 0x5, 0xfffffffffffffff8, 0xee5]}, 0x3c) 09:36:27 executing program 1: getgroups(0x0, &(0x7f0000000200)) setegid(0x0) faccessat(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = dup(0xffffffffffffffff) ioctl$KDSETLED(r0, 0x20004b42, &(0x7f0000000000)=0x2) getegid() 09:36:27 executing program 0: pipe(&(0x7f00005dcff8)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000335000), 0xfc94) dup2(r1, r1) close(r0) 09:36:27 executing program 1: syz_open_pts() kqueue() socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)) pipe2(&(0x7f0000000540), 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)) pipe2(&(0x7f0000000600), 0x0) pipe(&(0x7f0000000280)) open$dir(&(0x7f0000000040)='./file0\x00', 0x7c, 0x19) pipe(&(0x7f0000000480)) pipe2(&(0x7f0000000800), 0x0) setrlimit(0x8, &(0x7f0000000440)={0x20, 0x100}) pipe(&(0x7f0000000840)) pipe(&(0x7f0000000080)) kqueue() socket(0x18, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000008c0)) syz_open_pts() syz_open_pts() socketpair$unix(0x1, 0x2, 0x0, 0x0) 09:36:27 executing program 0: select(0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0xda, 0x3, 0x80000000, 0x8000, 0x6, 0x401}, &(0x7f0000000040)={0x10001, 0x9, 0x8001, 0xfffffffeffffffff, 0x1, 0x4, 0x5, 0x1f}, &(0x7f0000000080)={0x1, 0x9, 0x9, 0xb67, 0x401, 0x7, 0x7fffffff, 0x6}, &(0x7f00000000c0)={0x6000000000, 0x40}) 09:36:27 executing program 1: getrlimit(0x8001002, &(0x7f0000001200)) r0 = semget(0x2, 0x4, 0x400) semctl$SETVAL(r0, 0x0, 0x8, &(0x7f0000001380)=0x4) mknod(&(0x7f00000000c0)='./bus\x00', 0x3a0914c44f7b202c, 0x1b00) r1 = dup(0xffffffffffffff9c) ioctl$TIOCGETA(r1, 0x402c7413, &(0x7f0000000000)) r2 = open(&(0x7f0000000180)='./bus/file0\x00', 0x0, 0x40) writev(r2, &(0x7f0000001740)=[{&(0x7f00000001c0)="0dcb220f10fc73c94a21ad0e2adb7184195ba3152aada9d56741d043d17a3c46b3082aff216945dc741cfc81a0d1b247425d2ad26dd76fee954f7c1e752295127b713551412518c575be8c8ea30c5fe57c36d0671e5e1020885e3d55bb080042b1d30ca78855b6a58d41ecb086865711895f7868b5e7594d8bd19d2d1864370713a70bba0fa7cc1746fdf6529756e456ea69726c7c33d8fc26ebb9f5e372a3324e4029aba0fc3feaaf6271619e3e9cc82babe145068d5d6ea176eb6a050555e1b2be54c3c523783c0aefcae3036f6421feca46e84607a4980a5e725926a66d53", 0xe0}, {0x0}], 0x2) execve(0x0, 0x0, 0x0) openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/wsmouse\x00', 0x810, 0x0) ioctl$WSDISPLAYIO_LDFONT(r2, 0x8058574d, &(0x7f00000012c0)={'./bus/file0\x00', 0x9d, 0x3, 0x6, 0x0, 0x4, 0x8, 0x200, 0x0, 0x0, 0x487, 0x8}) r3 = msgget$private(0x0, 0x23) msgctl$IPC_STAT(r3, 0x2, &(0x7f00000058c0)=""/4096) mknodat(r2, &(0x7f0000001340)='./file1\x00', 0x11d0, 0xdc8) r4 = semget$private(0x0, 0x7, 0x32) ioctl$KDDISABIO(r2, 0x20004b3d) mknodat(r2, &(0x7f0000001100)='./file1\x00', 0xd000, 0xff) ioctl$WSDISPLAYIO_DELSCREEN(r2, 0x80085754, &(0x7f0000001440)={0x80000001, 0x6}) getrlimit(0x6, &(0x7f0000001140)) semop(r4, &(0x7f00000010c0)=[{0x1, 0xffffffff, 0x1000}, {0x0, 0x2, 0x800}, {0x1, 0x8, 0x1000}, {0x0, 0x8}, {0x0, 0x9100}, {0x3, 0x2, 0x1800}], 0x6) connect$inet6(0xffffffffffffffff, &(0x7f00000013c0)={0x18, 0x0, 0x3}, 0xc) semop(r4, &(0x7f0000001180)=[{0x0, 0xa28, 0x800}, {0x1, 0x2, 0x17fd}, {0x3, 0x80000000, 0x800}], 0x3) semctl$SETVAL(r4, 0x0, 0x8, &(0x7f0000000040)=0x4e61) write(0xffffffffffffffff, &(0x7f00000017c0)="03ac0ff9ab95e88fcd4e866a9845beda472db551a1769fa18ca6a762a4cd7eb55c4d7aaf1fe0baab4fb6cb050c64935b935a6649725de694d906959cb6c34e195d702e252c1e429f6f12dde6926a52c724afd7174f8e98f0902f7bffcdb24c81c552b76756aaaf3573bf652c51cbafd30ca628d77614ce46e58347e1ac9ea2bc0fc22918da1c3f2c60f6a10c7a71370c4be381a20eec98725b7c10ccaf16f081d00a922fb59bec233c6fb5d313e48ec325", 0xb1) semctl$SETALL(r4, 0x0, 0x9, &(0x7f0000001400)=[0x3, 0x6, 0x80000001, 0x7, 0x8, 0x6, 0xfd]) msgsnd(r3, &(0x7f0000001880)=ANY=[], 0x0, 0x800) semctl$GETNCNT(r4, 0x1, 0x3, &(0x7f00000028c0)=""/4096) ioctl$WSKBDIO_GETMODE(0xffffffffffffffff, 0x40045714, &(0x7f0000001280)) msgsnd(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="000e7de631e309000f00000000ab0f0000000000000000000000bfa5247e4a9546bb4c2a007fff800c29d3f2bc03364884273a68afd0be5267f2574b7c19036022b226626cdc998e0661093bcfcf723d"], 0x1, 0x0) ioctl$TIOCSETD(r2, 0x8004741b, &(0x7f00000011c0)) 09:36:27 executing program 0: select(0x40, &(0x7f0000000000)={0xffffffff, 0x7, 0x4, 0x81, 0xd4, 0xac, 0x1, 0x86170000}, &(0x7f0000000040)={0x8000, 0x7, 0x0, 0x4, 0x10000, 0x101, 0xcdda, 0x7f}, &(0x7f0000000080)={0x40a, 0xffffffffffffdbef, 0x2, 0x7, 0x1000, 0x6, 0x7fffffff, 0x3}, &(0x7f00000000c0)={0xffff, 0x9}) r0 = semget$private(0x0, 0x2000000004, 0x40) mprotect(&(0x7f0000068000/0x4000)=nil, 0x4000, 0x6) mmap(&(0x7f0000067000/0x3000)=nil, 0x3000, 0x6, 0x10, 0xffffffffffffffff, 0x0, 0x4000000000003) mknod$loop(&(0x7f0000000100)='./file0\x00', 0x80, 0x1) r1 = syz_open_pts() fsync(r1) pwritev(r1, &(0x7f0000000180), 0x0, 0x800000000000004f) pwritev(r1, &(0x7f0000000280)=[{&(0x7f00000001c0)="898d637530978833d503839823cc68f00dc551c6283584f6f8b3338f4052ed9c8ba9e938f90e6df7548102e08a14c0d3b32e6c0d2fdbda2cd1f8db524011cc98c3caae9bd68de8a303e11c662942661155151d01a0e2aafc92a391500c8e1afc35850934cdc53b14950897335194c0b37e28ba960d7438ac6f8fa958dbe504290908abc0df7b6c025adeb30ce5a45a01eb5e9f613e0d6d5f19ad388e6b04d8b24a07af1d08fcc7a26cc01671cefc6cf861", 0xb1}], 0x1, 0x0) mknod$loop(&(0x7f00000002c0)='./file0\x00', 0x100, 0x1) r2 = open(&(0x7f0000000140)='./file0\x00', 0x80, 0x0) r3 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/wsmouse0\x00', 0x0, 0x0) ioctl$WSMOUSEIO_SETPARAMS(r3, 0x80105727, &(0x7f00000000c0)={&(0x7f0000000080)=[{}, {0x26}], 0x2}) semctl$GETPID(r0, 0x0, 0x4, &(0x7f0000000340)=""/207) setsockopt$sock_linger(r2, 0xffff, 0x80, &(0x7f0000000840)={0x401, 0x1}, 0x8) select(0x40, &(0x7f00000004c0)={0xffffffffffffffff, 0x2, 0x6, 0x7, 0x10, 0x100000001, 0x6, 0x5}, &(0x7f0000000500)={0x8, 0x78a8, 0x4, 0x8411, 0x0, 0x3, 0x9, 0x7282}, &(0x7f0000000540)={0x29c2, 0xb22, 0x7ff, 0x2, 0x9, 0x1, 0x1, 0x8000}, &(0x7f0000000580)={0x4, 0x6}) r4 = semget$private(0x0, 0x3, 0x22) semop(r0, &(0x7f00000005c0)=[{0x0, 0x80000001}, {0x3, 0x8, 0x800}], 0x2) recvfrom(r2, &(0x7f0000000600)=""/201, 0xc9, 0x2, 0x0, 0x0) open(&(0x7f0000000a80)='./file0\x00', 0x404, 0x5) semop(r4, &(0x7f00000007c0)=[{0x6, 0xd3, 0x800}, {0x2, 0x4, 0x1000}, {0x3}, {0x4, 0x9, 0x1000}, {0x7, 0x2, 0x800}, {0x1, 0x5, 0x1000}, {0x4, 0x2, 0x1000}, {0x1, 0x6, 0x1000}, {0x2, 0x2d9d, 0x800}], 0x9) mknod$loop(&(0x7f0000000440)='./file0\x00', 0x2000, 0x1) clock_settime(0x0, &(0x7f0000000800)={0x28c, 0x5}) clock_gettime(0x2, &(0x7f0000000b40)) semop(r0, &(0x7f0000000880)=[{0x3, 0x3}, {0x0, 0x7ff, 0x1800}, {0x0, 0x2, 0x800}, {0x6, 0x5, 0x1000}, {0x7, 0x400, 0x1000}], 0x5) setsockopt$sock_int(r2, 0xffff, 0x1087, &(0x7f00000008c0)=0x70a4, 0xffffffffffffff5c) ioctl$TIOCGTSTAMP(r1, 0x4010745b, &(0x7f0000000180)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000900)) ioctl$TIOCSTAT(r2, 0x20007465, &(0x7f0000000300)) unveil(&(0x7f0000000700)='./file0\x00', &(0x7f00000009c0)) login: panic: kernel diagnostic assertion "tname->un_flags & UNVEIL_USERSET" failed: file "/syzkaller/managers/multicore/kernel/sys/kern/kern_unveil.c", line 879 Stopped at db_enter+0x18: addq $0x8,%rsp TID PID UID PRFLAGS PFLAGS CPU COMMAND 346852 34645 0 0 0x4000000 1 syz-executor.0 * 97187 34645 0 0 0x4000000 0K syz-executor.0 db_enter() at db_enter+0x18 panic() at panic+0x174 __assert(ffffffff81f7e6d6,ffffffff81f80d6e,36f,ffffffff81f8ba8b) at __assert+0x2e unveil_check_final(ffff800020b759e0,ffff800020c4db78) at unveil_check_final+0x81d namei(ffff800020c4db78) at namei+0x88b domknodat(ffff800020b759e0,ffffff9c,20000100,80,701) at domknodat+0xa1 syscall(ffff800020c4de40) at syscall+0x5b8 Xsyscall(6,0,ffffffffffffff97,0,3,10e5eba70d8) at Xsyscall+0x128 end of kernel end trace frame: 0x1115bd55e30, count: 7 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb{0}> ddb{0}> set $lines = 0 ddb{0}> set $maxwidth = 0 ddb{0}> show panic kernel diagnostic assertion "tname->un_flags & UNVEIL_USERSET" failed: file "/syzkaller/managers/multicore/kernel/sys/kern/kern_unveil.c", line 879 ddb{0}> trace db_enter() at db_enter+0x18 panic() at panic+0x174 __assert(ffffffff81f7e6d6,ffffffff81f80d6e,36f,ffffffff81f8ba8b) at __assert+0x2e unveil_check_final(ffff800020b759e0,ffff800020c4db78) at unveil_check_final+0x81d namei(ffff800020c4db78) at namei+0x88b domknodat(ffff800020b759e0,ffffff9c,20000100,80,701) at domknodat+0xa1 syscall(ffff800020c4de40) at syscall+0x5b8 Xsyscall(6,0,ffffffffffffff97,0,3,10e5eba70d8) at Xsyscall+0x128 end of kernel end trace frame: 0x1115bd55e30, count: -8 ddb{0}> show registers rdi 0xffffffff814367b7 db_enter+0x17 rsi 0x3e68 __ALIGN_SIZE+0x2e68 rbp 0xffff800020c4d910 rbx 0xffff800020c4d9c0 rdx 0x3e69 __ALIGN_SIZE+0x2e69 rcx 0xffff800000b66000 rax 0xffff800000b66000 r8 0xffffffff818d1a13 kprintf+0x183 r9 0x1 r10 0x25 r11 0x885cb82a8802c15b r12 0x3000000008 r13 0xffff800020c4d920 r14 0x100 r15 0x1 rip 0xffffffff814367b8 db_enter+0x18 cs 0x8 rflags 0x246 rsp 0xffff800020c4d900 ss 0x10 db_enter+0x18: addq $0x8,%rsp ddb{0}> show proc PROC (syz-executor.0) pid=97187 stat=onproc flags process=0 proc=4000000 pri=59, usrpri=59, nice=20 forw=0xffffffffffffffff, list=0xffff800020b74018,0xffff800020b744d8 process=0xffff800020b8c9f0 user=0xffff800020c48000, vmspace=0xfffffd807effd000 estcpu=36, cpticks=1, pctcpu=0.0 user=0, sys=1, intr=0 ddb{0}> ps PID TID PPID UID S FLAGS WAIT COMMAND 34645 18158 15529 0 2 0 syz-executor.0 34645 346852 15529 0 7 0x4000000 syz-executor.0 *34645 97187 15529 0 7 0x4000000 syz-executor.0 16514 504505 50043 0 2 0 syz-executor.1 16514 411949 50043 0 3 0x4000080 semwait syz-executor.1 16514 377709 50043 0 2 0x4000000 syz-executor.1 50043 398611 12558 0 2 0x482 syz-executor.1 15529 383052 12558 0 3 0x82 nanosleep syz-executor.0 12558 139032 97830 0 3 0x82 thrsleep syz-fuzzer 12558 143077 97830 0 3 0x4000082 thrsleep syz-fuzzer 12558 180145 97830 0 3 0x4000082 thrsleep syz-fuzzer 12558 411545 97830 0 3 0x4000082 thrsleep syz-fuzzer 12558 385928 97830 0 3 0x4000082 kqread syz-fuzzer 12558 290071 97830 0 3 0x4000082 thrsleep syz-fuzzer 12558 186490 97830 0 3 0x4000082 thrsleep syz-fuzzer 12558 299719 97830 0 3 0x4000082 thrsleep syz-fuzzer 12558 150788 97830 0 3 0x4000082 thrsleep syz-fuzzer 12558 346955 97830 0 3 0x4000082 thrsleep syz-fuzzer 97830 338440 39876 0 3 0x10008a pause ksh 39876 28836 70975 0 3 0x92 select sshd 39841 493226 1 0 3 0x100083 ttyin getty 70975 41311 1 0 3 0x80 select sshd 21425 444468 1308 74 3 0x100092 bpf pflogd 1308 469126 1 0 3 0x80 netio pflogd 35360 75591 17384 73 3 0x100090 kqread syslogd 17384 190495 1 0 3 0x100082 netio syslogd 85171 163287 1 77 3 0x100090 poll dhclient 93064 56369 1 0 3 0x80 poll dhclient 72117 441490 0 0 2 0x14200 zerothread 89291 398859 0 0 3 0x14200 aiodoned aiodoned 17703 73087 0 0 3 0x14200 syncer update 17745 49542 0 0 3 0x14200 cleaner cleaner 3760 432320 0 0 3 0x14200 reaper reaper 41272 97499 0 0 3 0x14200 pgdaemon pagedaemon 56301 27907 0 0 3 0x14200 bored crynlk 45611 124725 0 0 3 0x14200 bored crypto 65471 505295 0 0 3 0x40014200 acpi0 acpi0 1996 497816 0 0 3 0x40014200 idle1 19354 387759 0 0 3 0x14200 bored softnet 48050 212596 0 0 3 0x14200 bored systqmp 96442 102711 0 0 3 0x14200 bored systq 37779 302126 0 0 3 0x40014200 bored softclock 52030 87413 0 0 3 0x40014200 idle0 77605 22135 0 0 3 0x14200 bored smr 1 6089 0 0 3 0x82 wait init 0 0 -1 0 3 0x10200 scheduler swapper ddb{0}> show all locks Process 34645 (syz-executor.0) thread 0xffff800020b759e0 (97187) exclusive rrwlock inode r = 0 (0xfffffd806889b810) locked @ /syzkaller/managers/multicore/kernel/sys/ufs/ufs/ufs_vnops.c:1547 #0 witness_lock+0x594 #1 _rw_enter+0x45d #2 _rrw_enter+0x60 #3 VOP_LOCK+0x57 #4 vn_lock+0x6e #5 vfs_lookup+0xf5 #6 namei+0x4b2 #7 domknodat+0xa1 #8 syscall+0x5b8 #9 Xsyscall+0x128 exclusive kernel_lock &kernel_lock r = 0 (0xffffffff82349ce8) locked @ /syzkaller/managers/multicore/kernel/sys/sys/syscall_mi.h:90 #0 witness_lock+0x594 #1 syscall+0x48b #2 Xsyscall+0x128 ddb{0}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim Kern Lim devbuf 9465 6403K 6403K 78643K 10565 0 0 pcb 27 9K 10K 78643K 79 0 0 rtable 100 3K 4K 78643K 192 0 0 ifaddr 39 10K 11K 78643K 49 0 0 counters 39 33K 33K 78643K 39 0 0 ioctlops 0 0K 4K 78643K 1469 0 0 mount 1 1K 1K 78643K 1 0 0 vnodes 1201 75K 75K 78643K 1217 0 0 UFS quota 1 32K 32K 78643K 1 0 0 UFS mount 5 36K 36K 78643K 5 0 0 shm 2 1K 1K 78643K 2 0 0 VM map 2 1K 1K 78643K 2 0 0 sem 6 0K 0K 78643K 7 0 0 dirhash 12 2K 2K 78643K 12 0 0 ACPI 1808 196K 290K 78643K 12628 0 0 file desc 6 17K 21K 78643K 38 0 0 sigio 0 0K 0K 78643K 2 0 0 proc 56 63K 71K 78643K 324 0 0 subproc 64 65538K 67586K 78643K 68 0 0 NFS srvsock 1 0K 0K 78643K 1 0 0 NFS daemon 1 16K 16K 78643K 1 0 0 in_multi 33 2K 2K 78643K 33 0 0 ether_multi 1 0K 0K 78643K 1 0 0 ISOFS mount 1 32K 32K 78643K 1 0 0 MSDOSFS mount 1 16K 16K 78643K 1 0 0 ttys 36 159K 159K 78643K 36 0 0 exec 0 0K 1K 78643K 195 0 0 pagedep 1 8K 8K 78643K 1 0 0 inodedep 1 32K 32K 78643K 1 0 0 newblk 1 0K 0K 78643K 1 0 0 VM swap 7 26K 26K 78643K 7 0 0 UVM amap 87 20K 21K 78643K 944 0 0 UVM aobj 6 2K 2K 78643K 6 0 0 memdesc 1 4K 4K 78643K 1 0 0 crypto data 1 1K 1K 78643K 1 0 0 NDP 6 0K 0K 78643K 12 0 0 temp 91 2365K 2433K 78643K 3231 0 0 SYN cache 2 16K 16K 78643K 2 0 0 ddb{0}> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle arp 64 4 0 0 1 0 1 1 0 8 0 inpcbpl 280 45 0 38 1 0 1 1 0 8 0 plimitpl 152 16 0 8 1 0 1 1 0 8 0 plcache 128 20 0 0 1 0 1 1 0 8 0 rtentry 112 41 0 1 2 0 2 2 0 8 0 syncache 264 4 0 4 1 1 0 1 0 8 0 tcpqe 32 22 0 22 2 1 1 1 0 8 1 tcpcb 544 12 0 8 1 0 1 1 0 8 0 nd6 48 4 0 0 1 0 1 1 0 8 0 ppxss 1128 2 0 2 1 0 1 1 0 8 1 pfosfp 40 846 0 423 5 0 5 5 0 8 0 pfosfpen 112 1428 0 714 21 0 21 21 0 8 0 pfstitem 24 13 0 2 1 0 1 1 0 8 0 pfstkey 112 13 0 2 1 0 1 1 0 8 0 pfstate 328 13 0 2 1 0 1 1 0 8 0 pfrule 1360 21 0 16 2 1 1 2 0 8 0 art_heap8 4096 1 0 0 1 0 1 1 0 8 0 art_heap4 256 185 0 0 12 0 12 12 0 8 0 art_table 32 186 0 0 2 0 2 2 0 8 0 art_node 16 40 0 6 1 0 1 1 0 8 0 sysvmsgpl 40 2 0 0 1 0 1 1 0 8 0 semupl 112 1 0 0 1 0 1 1 0 8 0 semapl 112 4 0 0 1 0 1 1 0 8 0 shmpl 112 4 0 0 1 0 1 1 0 8 0 dirhash 1024 17 0 0 3 0 3 3 0 8 0 dino1pl 128 1472 0 57 46 0 46 46 0 8 0 ffsino 272 1472 0 57 95 0 95 95 0 8 0 nchpl 144 1728 0 95 61 0 61 61 0 8 0 uvmvnodes 72 1519 0 0 28 0 28 28 0 8 0 vnodes 200 1519 0 0 80 0 80 80 0 8 0 namei 1024 4359 0 4358 2 1 1 1 0 8 0 percpumem 16 30 0 0 1 0 1 1 0 8 0 scxspl 192 4241 0 4241 8 7 1 6 0 8 1 sigapl 432 237 0 221 2 0 2 2 0 8 0 futexpl 56 321 0 321 1 0 1 1 0 8 1 knotepl 112 51 0 32 1 0 1 1 0 8 0 kqueuepl 104 15 0 13 1 0 1 1 0 8 0 pipepl 112 202 0 183 3 1 2 2 0 8 1 fdescpl 488 238 0 221 3 0 3 3 0 8 0 filepl 152 1210 0 1105 5 0 5 5 0 8 0 lockfpl 104 7 0 6 2 1 1 1 0 8 0 lockfspl 32 4 0 3 2 1 1 1 0 8 0 sessionpl 112 18 0 7 1 0 1 1 0 8 0 pgrppl 48 18 0 7 1 0 1 1 0 8 0 ucredpl 96 64 0 55 1 0 1 1 0 8 0 zombiepl 144 221 0 221 2 1 1 1 0 8 1 processpl 840 253 0 221 4 0 4 4 0 8 0 procpl 600 304 0 259 4 0 4 4 0 8 0 sockpl 384 109 0 88 3 0 3 3 0 8 0 mcl16k 16384 1 0 0 1 0 1 1 0 8 0 mcl4k 4096 4 0 0 1 0 1 1 0 8 0 mcl2k 2048 118 0 0 14 0 14 14 0 8 0 mtagpl 80 1 0 0 1 0 1 1 0 8 0 mbufpl 256 134 0 0 8 0 8 8 0 8 0 bufpl 256 5669 0 1143 283 0 283 283 0 8 0 anonpl 16 30229 0 22086 35 2 33 33 0 125 0 amapchunkpl 152 871 0 775 5 0 5 5 0 158 1 amappl16 192 535 0 119 21 0 21 21 0 8 0 amappl15 184 66 0 59 1 0 1 1 0 8 0 amappl14 176 22 0 20 2 1 1 1 0 8 0 amappl13 168 30 0 26 1 0 1 1 0 8 0 amappl12 160 10 0 8 1 0 1 1 0 8 0 amappl11 152 35 0 18 1 0 1 1 0 8 0 amappl10 144 70 0 65 1 0 1 1 0 8 0 amappl9 136 587 0 582 1 0 1 1 0 8 0 amappl8 128 135 0 120 1 0 1 1 0 8 0 amappl7 120 28 0 25 1 0 1 1 0 8 0 amappl6 112 58 0 52 1 0 1 1 0 8 0 amappl5 104 118 0 104 1 0 1 1 0 8 0 amappl4 96 474 0 444 2 0 2 2 0 8 1 amappl3 88 113 0 108 1 0 1 1 0 8 0 amappl2 80 906 0 842 2 0 2 2 0 8 0 amappl1 72 14566 0 14104 25 7 18 20 0 8 8 amappl 72 536 0 496 1 0 1 1 0 75 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma64 64 259 0 259 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 17 0 17 1 1 0 1 0 8 0 aobjpl 64 5 0 0 1 0 1 1 0 8 0 uaddrrnd 24 238 0 221 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 238 0 221 1 0 1 1 0 8 0 vmmpekpl 168 6074 0 6050 2 0 2 2 0 8 0 vmmpepl 168 32876 0 31371 89 12 77 77 0 357 11 vmsppl 360 237 0 221 2 0 2 2 0 8 0 pdppl 4096 484 0 442 6 0 6 6 0 8 0 pvpl 32 120115 0 108646 107 3 104 104 0 265 11 pmappl 224 237 0 221 2 0 2 2 0 8 1 extentpl 40 39 0 25 1 0 1 1 0 8 0 phpool 112 431 0 4 13 0 13 13 0 8 0