kern.securelevel: 0 -> 1 creating runtime link editor directory cache. preserving editor files. starting network daemons: sshd. starting local daemons:. Tue Dec 17 14:01:24 PST 2019 OpenBSD/amd64 (ci-openbsd-setuid-0.c.syzkaller.internal) (tty00) Warning: Permanently added '10.128.10.22' (ECDSA) to the list of known hosts. 2019/12/17 14:01:37 fuzzer started 2019/12/17 14:01:44 dialing manager at 10.128.15.235:24129 2019/12/17 14:01:44 syscalls: 337 2019/12/17 14:01:44 code coverage: enabled 2019/12/17 14:01:44 comparison tracing: enabled 2019/12/17 14:01:44 extra coverage: support is not implemented in syzkaller 2019/12/17 14:01:44 setuid sandbox: enabled 2019/12/17 14:01:44 namespace sandbox: support is not implemented in syzkaller 2019/12/17 14:01:44 Android sandbox: support is not implemented in syzkaller 2019/12/17 14:01:44 fault injection: support is not implemented in syzkaller 2019/12/17 14:01:44 leak checking: support is not implemented in syzkaller 2019/12/17 14:01:44 net packet injection: enabled 2019/12/17 14:01:44 net device setup: support is not implemented in syzkaller 2019/12/17 14:01:44 concurrency sanitizer: support is not implemented in syzkaller 2019/12/17 14:01:44 devlink PCI setup: support is not implemented in syzkaller 14:01:47 executing program 0: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x20000, 0x0) r1 = socket(0x10, 0x5, 0x27) openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyCcfg\x00', 0x0, 0x0) fsync(r0) openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/wsmouse0\x00', 0x8100, 0x0) r2 = kqueue() ioctl$FIOASYNC(r2, 0x8004667d, &(0x7f00000000c0)=0xae5) r3 = geteuid() r4 = socket$inet6(0x18, 0x5, 0x2) r5 = getpgrp() getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0xc) setsockopt$sock_cred(r4, 0xffff, 0x1022, &(0x7f0000000140)={r5, r3, r6}, 0xc) getsockopt$SO_PEERCRED(r0, 0xffff, 0x1022, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0xc) r8 = dup(0xffffffffffffffff) getsockopt$SO_PEERCRED(r8, 0xffff, 0x1022, &(0x7f00000001c0), 0xc) ftruncate(0xffffffffffffffff, 0x0, 0x2) openat$speaker(0xffffffffffffff9c, &(0x7f0000000200)='/dev/speaker\x00', 0x400, 0x0) pipe2(&(0x7f0000000240), 0x2000c) r9 = socket$inet6(0x18, 0x5, 0x40) getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000280)={0x0}, 0xc) r11 = getuid() setsockopt$sock_cred(r9, 0xffff, 0x1022, &(0x7f00000002c0)={r10, r11, r7}, 0xc) r12 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300)='/dev/zero\x00', 0x200, 0x0) setsockopt(r12, 0x6, 0xfff, &(0x7f0000000340)="d8262f2eb7ced5327f75af35b05cfefcaeb0ddf631bff25c620be6d967745eb4ac82e7f16fa465b5cd311c3a3cd444147fe1cc7f831536251ed0b4c6cf5a5707cea36185de25bb2daf6bb5610ad4285a4e7eea56981de5751edb40b5d397eac9011b914f9ff246d732719718346b1e06c8892c60735464531e17dca4947040385e2e373883c5d0cca6a94ddff089a278509581ddd32545fecb7931d55681d2e44c7ddf1178d9a7d544d455f5307243de677babcbb420a932747e0d3c6a5ad3e87b02cc7d5de7fd520e5c42dd4523999ca9a71d8d27c258", 0xd7) r13 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000440)='/dev/wskbd0\x00', 0x0, 0x0) poll(&(0x7f0000000480)=[{0xffffffffffffff9c, 0x10}, {r13, 0x2}], 0x2, 0x800) semget$private(0x0, 0x2, 0x0) getsockopt$sock_cred(r1, 0xffff, 0x1022, &(0x7f00000004c0), &(0x7f0000000500)=0xc) r14 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000540)='/dev/wsmouse\x00', 0x80, 0x0) r15 = openat$wsmuxkbd(0xffffffffffffff9c, &(0x7f0000000580)='/dev/wskbd\x00', 0x200, 0x0) dup2(r14, r15) 14:01:47 executing program 1: nanosleep(&(0x7f0000000000)={0x5, 0x9}, &(0x7f0000000040)) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x80, 0x0) r1 = openat$pci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/pci\x00', 0x20000, 0x0) r2 = openat$vmm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vmm\x00', 0x8000, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x200, 0x290) r4 = fcntl$dupfd(0xffffffffffffffff, 0xb74de323e1a5d357, 0xffffffffffffffff) pipe2(&(0x7f0000000200)={0xffffffffffffffff}, 0x10000) r6 = socket$unix(0x1, 0x1, 0x0) kevent(r0, &(0x7f0000000180)=[{{r1}, 0xfffffffffffffffa, 0x120, 0x42, 0x64, 0xfffffffffffffffe}, {{0xffffffffffffff9c}, 0xfffffffffffffffe, 0x10, 0x41, 0x7, 0x7}, {{r2}, 0x800000000000000d, 0x2, 0x4, 0x3f, 0x7f}, {{r3}, 0xfffffffffffffffd, 0x40, 0x1, 0x9}], 0xffffff00, &(0x7f0000000240)=[{{r4}, 0xfffffffffffffffe, 0x4, 0x84, 0x1f, 0x3}, {{r5}, 0x8000000000000002, 0xd0, 0x2, 0x9, 0xfffffffffffffffc}, {{r6}, 0xfffffffffffffffc, 0x40, 0x9000009d, 0x6e21, 0x1}], 0xffffffff, &(0x7f00000002c0)={0x40, 0xb}) r7 = open(&(0x7f0000000300)='./file0\x00', 0x40221, 0xc4) ioctl$KDDISABIO(r7, 0x20004b3d) open$dir(&(0x7f0000000340)='./file0\x00', 0x1, 0x0) r8 = semget$private(0x0, 0x6, 0x104) getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000380)={0x0, 0x0}, 0xc) getgroups(0x2, &(0x7f00000003c0)=[0x0, 0xffffffffffffffff]) getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000400)={0x0, 0x0}, &(0x7f0000000440)=0xc) r12 = getegid() semctl$IPC_SET(r8, 0x0, 0x1, &(0x7f0000000480)={{0x2, r9, r10, r11, r12, 0x382, 0x7}, 0x2, 0xffffffffffffff81, 0xffffffff}) r13 = syz_open_pts() poll(&(0x7f0000000500)=[{0xffffffffffffff9c, 0x2}, {r13, 0x40}, {r1, 0x100}, {r1, 0x10}], 0x4, 0x6) r14 = openat(0xffffffffffffffff, &(0x7f0000000540)='./file0\x00', 0x40, 0x2) r15 = openat$null(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/null\x00', 0x1, 0x0) renameat(r14, &(0x7f0000000580)='./file0\x00', r15, &(0x7f0000000600)='./file0\x00') fcntl$dupfd(r0, 0x0, r4) pipe2(&(0x7f0000000640), 0x10000) getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0xc) getgroups(0x1, &(0x7f00000006c0)=[r16]) r17 = open(&(0x7f0000000700)='./file0/file0\x00', 0xd3f808e968bf8266, 0x40) listen(r17, 0x2) r18 = accept(0xffffffffffffff9c, &(0x7f0000000740)=@un=@abs, &(0x7f0000000780)=0x8) connect$inet6(r18, &(0x7f00000007c0)={0x18, 0x2, 0x6e24c3b5, 0x4}, 0xc) 14:01:48 executing program 0: r0 = socket(0x18, 0x2, 0x0) execve(0x0, &(0x7f0000000240)=[&(0x7f0000000140)=')\x00'], 0x0) ioctl$WSDISPLAYIO_SBURNER(0xffffffffffffff9c, 0x800c5751, &(0x7f0000000000)={0x7, 0x5, 0x8}) sendmsg$unix(r0, &(0x7f00000000c0)={&(0x7f0000000040)=@abs={0x0, 0x0, 0x1}, 0x8, 0x0, 0x0, &(0x7f0000000140), 0x3c}, 0x404) 14:01:48 executing program 1: sync() socketpair(0x2, 0x2, 0x5, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(r1, 0xffff, 0x1007, &(0x7f0000000040)={0xfffffffffffffff9, 0x7}, 0x10) setsockopt$sock_timeval(r0, 0xffff, 0x1007, &(0x7f0000000080)={0x9137, 0x8}, 0x10) r2 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x800, 0x0) ioctl$WSDISPLAYIO_DELFONT(r2, 0x8058574f, &(0x7f0000000100)={'./file0\x00', 0x0, 0x7, 0x5, 0x1, 0xfffffffffffffffc, 0x80, 0x200, 0x2, 0x2, 0x1000, 0x7536}) mknod(&(0x7f0000000740)='./file0\x00', 0x10, 0x4) setsockopt$sock_int(r0, 0xffff, 0x200, &(0x7f0000000180)=0x5d, 0x4) clock_gettime(0x7, &(0x7f00000001c0)) clock_gettime(0x6, &(0x7f0000000200)) r3 = openat(r2, &(0x7f0000000240)='./file0\x00', 0x8a0, 0x100) ioctl$VMM_IOC_TERM(r3, 0x80045604, &(0x7f0000000280)={0x401}) fchdir(r3) ioctl$WSDISPLAYIO_LDFONT(r2, 0x8058574d, &(0x7f00000002c0)={'./file0\x00', 0x401, 0x800, 0x0, 0x1, 0x10001, 0x800, 0x3, 0x2, 0x1, 0x0, 0xb1c2}) ioctl$FIONREAD(r3, 0x4004667f, &(0x7f0000000340)) connect(r0, &(0x7f0000000380)=@in6={0x18, 0x0, 0x0, 0x7}, 0xc) r4 = openat$null(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/null\x00', 0x8, 0x0) getdents(r2, &(0x7f0000000400)=""/248, 0xf8) getsockopt$sock_timeval(r3, 0xffff, 0x1005, &(0x7f0000000500), &(0x7f0000000540)=0x10) setsockopt$sock_linger(r3, 0xffff, 0x80, &(0x7f0000000580)={0x8, 0x1}, 0x8) connect$unix(r4, &(0x7f00000005c0)=@file={0x1, './file0\x00'}, 0xa) minherit(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3) utimes(&(0x7f0000000600)='./file0\x00', &(0x7f0000000640)={{0x8000, 0x5}, {0x7c, 0x1000}}) ioctl$WSDISPLAYIO_LSFONT(r3, 0xc058574e, &(0x7f0000000680)) clock_gettime(0x2, &(0x7f0000000700)) 14:01:48 executing program 0: setrlimit(0x8, &(0x7f0000000040)={0x7, 0x95}) r0 = syz_open_pts() close(r0) r1 = syz_open_pts() ioctl$TIOCSETAF(r1, 0x802c7416, &(0x7f0000000000)={0x0, 0x71, 0x3, 0x1b19, "2bd0c00968dc65a2dff3fde0ab10000000001000"}) ioctl$TIOCSTAT(r0, 0x20007465, &(0x7f00000000c0)) write(r0, &(0x7f0000000140)="2078f7b678807d89e032dc", 0xb) r2 = openat$tty(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty\x00', 0x202e809f19fbcb8b, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x5, 0x10, r2, 0x0, 0xffffffff7fffffff) shmget$private(0x0, 0x3000, 0x40, &(0x7f0000ffd000/0x3000)=nil) getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000100), 0xffffffffffffffbf) r3 = msgget$private(0x0, 0x200) r4 = getgid() r5 = getuid() getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000180)={0x0}, 0xfffffffffffffc86) r7 = getppid() msgctl$IPC_SET(r3, 0x1, &(0x7f00000002c0)={{0x8, r5, r4, r5, r4, 0x42, 0x6}, 0x8, 0x3, r6, r7, 0x3f, 0x7, 0x4, 0x7}) getuid() r8 = getgid() r9 = getuid() getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000280)={0x0}, 0xc) r11 = semget$private(0x0, 0x8, 0x80) semop(r11, &(0x7f00000005c0)=[{0x0, 0x0, 0x1800}, {0x5, 0x3, 0x1800}, {0x3, 0x2, 0x800}, {0x4, 0x8001, 0x1000}, {0x3, 0x4, 0x1800}, {0x0, 0xfc00, 0x1000}], 0x6) semop(r11, &(0x7f0000000300)=[{0x0, 0x3, 0x1400}, {0x4, 0x80, 0x1800}, {0xfe52dc4792d94f09, 0x8000, 0x800}, {0x4, 0xff, 0x800}, {0x4, 0x100, 0x1000}, {0x2, 0x100000000, 0xf2e4cf5442ae0ee3}], 0x6) semop(r11, &(0x7f0000000400)=[{0x0, 0xfffe, 0x1800}, {0x4, 0x200, 0xc00}, {0x1, 0x8, 0xcab2bfc5c2d47ec2}], 0x3) r12 = socket$inet6(0x18, 0x3, 0x0) getsockopt(r12, 0x29, 0x33, 0x0, 0x0) getsockopt$sock_cred(r12, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) semctl$IPC_SET(r11, 0x0, 0x1, &(0x7f00000000c0)={{0x400, r13, r14, r13, r14, 0x82, 0xfffffffffffff7f5}, 0x8, 0x1ff}) r15 = msgget$private(0x0, 0xfffffffffffffead) msgsnd(r15, &(0x7f0000000700)=ANY=[@ANYBLOB="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"/481], 0x156, 0x800) msgrcv(r15, &(0x7f0000000900)=ANY=[@ANYBLOB="000000000000f9ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000844199ae137097503029c713d73719dfa0c477e0000001100000000000000000000000000000000000000000000000000000faa31ea8d0b5a3725487b7700acb700c8e1745827010000000000000000000000000000000000000000000000d70000000000000000000000000000000000000000000000000000000000000000000000410000000000000000ad3e92e776106094e56d320640f5044f8cd0466a8e7173f8c0ce1193d710bc2144bc6127fd42cc44e72cde136a94a979eca0508920ea2629fd67d7c6ea5735fe7e3314f2a2ca6c41ff8a6d15c3fba2c1ff9b02adc1581df2777573cee8305a426b555c07afdb45415d573662bc0bc47ddf06d6991ac6efcd6575ecd46f1d3197e8842783b20000000000fcb25acbb7eb42f1ef667f5a945bde53fa0ec327bfd541205310af0a0b2eb681cab8fd0ff85e1058cf51f08f5e6e2e7ef4201dcc1a06c2c3e6c25e12a41bb08ea9e9477a"], 0x49b, 0x3, 0x800) r16 = socket(0x10, 0x4, 0xa) connect$unix(r16, &(0x7f0000000000)=@file={0xbd5699bc1ec0282, './file0\x00'}, 0x10) setsockopt$sock_int(r16, 0xffff, 0x0, &(0x7f0000000080)=0x81, 0xfffffffffffffff8) getsockopt$SO_PEERCRED(r16, 0xffff, 0x1022, &(0x7f0000000440)={0x0}, 0xc) msgctl$IPC_SET(r15, 0x1, &(0x7f00000002c0)={{0x8, 0xffffffffffffffff, r14, r9, r8, 0x13, 0x6}, 0x6, 0x2, r10, r17, 0x3f, 0x7, 0x6, 0x7}) socketpair(0x25, 0x2, 0xf0, &(0x7f0000000040)={0xffffffffffffffff}) r19 = getpgid(0x0) dup(r18) fcntl$lock(r18, 0x0, &(0x7f0000000080)={0x2, 0x2, 0x10001, 0x0, r19}) r20 = msgget$private(0x0, 0x214) r21 = getgid() r22 = getuid() getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000280)={0x0}, 0xc) r24 = getppid() msgctl$IPC_SET(r20, 0x1, &(0x7f00000002c0)={{0x8, r22, r21, r22, r21, 0x42, 0x6}, 0x8, 0x3, r23, r24, 0x3f, 0x7, 0x4, 0x7}) 14:01:48 executing program 1: mkdir(&(0x7f0000000100)='./file1\x00', 0x0) unveil(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000140)='c\x00') unveil(&(0x7f0000000000)='.\x00', &(0x7f0000000080)='x\x00') rmdir(&(0x7f0000000240)='./file1\x00') 14:01:48 executing program 0: r0 = socket$unix(0x1, 0x1, 0x0) r1 = dup(r0) r2 = socket(0x11, 0x4003, 0x0) sendto$unix(r2, &(0x7f0000000300)="5001050360900004000000021306ca90081010fecea11ea8fef96ecfc73fd3357ae26caa0f16fa4f376336acf00b7804be781e4991f7c8df5f882b297be1aa5b23ed00f4c8b2ca3ebbc257699a1f132e27acb5d602000d7d026ba8af63ff37282902e4fd89720fd3872babfb6a000000000000002f310b404f36a00f90006ee01be657aea8c5000000020000000000000e0208a371a3f80004ffff00000000000000000000000000008539cda74d1467802811c67be2313927b913cebdbb7e563c73891d80000000000000000cceb2024db224dadc0640906fa45d709da9d158d945a2a5fc1233cf6e27749bbd97bb0d03fe2d04a1b9ff40195f1fde95d68896dc7ed79518bf70299107ddf3b187906698e04e34248daaf9231f0de030323b4125ce41203583671ac5e5b7b303757e60642b45cbc5737b8e2405757105889a2b32728f83ea65f3482e093de7cd0b1042", 0x150, 0x0, 0x0, 0x0) sendto$unix(r2, &(0x7f0000000000)="6f932e581469d1b89b2bca11221ca038d533cb8423f338af432b61fcb7c62e957457939d1a56fbc39329badbd9a086d36ab91abb0a830b5d905ea8b9c577004c1c1edbd3cc4fb9a3ef61cb02f18332cfb4689732d0a05b38a8debab4723c75ce03ea70f486489390e5fdb57100a6247532ec65b6925c481490cfe33c1cee52af054a3f40c24e9aa634277e74f31cfa607c0f6556f3109d60", 0x98, 0x0, 0x0, 0x34a) openat$null(0xffffffffffffff9c, &(0x7f0000000180)='/dev/null\x00', 0x400, 0x0) getsockopt$sock_cred(r2, 0xffff, 0x1022, &(0x7f0000000400), &(0x7f00000000c0)=0x12c) fcntl$getown(r2, 0x5) socketpair(0x1, 0x1, 0x4, &(0x7f0000000000)) r3 = socket(0x2, 0x1, 0x0) bind(r3, &(0x7f0000000000)=@un=@abs={0x0, 0xd}, 0x10) r4 = dup(r3) listen(r4, 0x0) ioctl$BIOCGDLTLIST(r4, 0xc010427b, &(0x7f0000000140)={0x6, &(0x7f0000000100)=[0x7fff, 0x2, 0x7f, 0x3, 0x4, 0x1]}) getsockopt$sock_int(r1, 0xffff, 0x1002, 0x0, 0x0) getpid() connect$unix(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="00002e79beebef2f66696c657f0f5a9422256eb80289d871"], 0xa) setsockopt$sock_timeval(r4, 0xffff, 0x1006, &(0x7f0000000200)={0x2, 0x4}, 0x10) r5 = msgget$private(0x0, 0x20000003c4) msgrcv(r5, &(0x7f0000000440)=ANY=[@ANYBLOB="000000054270931040000000"], 0xc, 0x2, 0x1000) r6 = msgget$private(0x0, 0xfffffffffffffffd) msgsnd(r6, &(0x7f00000004c0)=ANY=[@ANYBLOB="0100000000000000ba45ede2435a8b028adaffef6c924299c7339417153cf37617c2e9547a40d43f5d31059c11c5a913448e0e5a392c598c258300980190f7f757f7d10000000000020000000000000000a00570bdc48db38a42e13548516bf33186216da0e1b8aeeec38eb984ea816b48449e1f3d797fdc34c97a2b83eea214e18350e46ba39befc79076f25d33ed3de8de7ec37031bc10f8ba5567bf43cbceee16000000da0c23e9475c9d6bf97f93cf02b9422e05e492a01690821d727859f2329538784df6e99d087592e98f827e5c8868438b85fdc9dd940e1eda57e8168bca06d610fc3190ea0a2605addfc1e9ac4ff6cd5ec85c61dc8a76803f064ef04138c3e253c71c23820fcedb266121375d39876dfb6b45fbe066ff2f60ca6f5e061406752a9a78e9beb546cd2dd5f6faf247dbec8eb6d5651b305707854aa000000000000046568bd76f401b8b7ab4af81b1c992b76d6c971287731ef79362412cb3dc3598499081f05fab154f90f4a8061d237c36"], 0x1, 0x7fb) msgctl$IPC_RMID(r6, 0x0) 14:01:48 executing program 1: r0 = syz_open_pts() fcntl$lock(r0, 0x8, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x300000000}) flock(r0, 0x2) r1 = socket(0x18, 0x400000002, 0x0) setsockopt(r1, 0x1000000029, 0x2f, &(0x7f0000000000), 0x0) pipe(&(0x7f0000000100)) r2 = socket(0x18, 0x400000002, 0x0) setsockopt(r2, 0x1000000029, 0x2f, &(0x7f0000000000), 0x0) flock(r2, 0x9) fcntl$lock(r0, 0x9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x100000000}) 14:01:49 executing program 0: semget(0x2, 0x1, 0x200) setrlimit(0x8, &(0x7f0000000040)={0x7, 0x8}) r0 = open(&(0x7f0000000040)='./file0\x00', 0x615, 0x0) openat$tty(0xffffffffffffff9c, &(0x7f0000000380)='/dev/tty\x00', 0x0, 0x0) pwritev(r0, &(0x7f00000003c0), 0x273, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x11, r0, 0x0, 0x0) ioctl$WSMUXIO_INJECTEVENT(r0, 0x80185760, &(0x7f0000000080)={0x4c85, 0x7, {0xffffffff7fffffff, 0x1ff}}) close(0xffffffffffffffff) syz_open_pts() ioctl$TIOCSETAF(0xffffffffffffffff, 0x802c7416, &(0x7f0000000000)={0xfffffffc, 0x7fff, 0xfff7fff8, 0x1fc80d8c, "00002451db171865fc17ffab7fff0e091fe600"}) r1 = geteuid() getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000340)=0xc) fchownat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', r1, r2, 0x2) write(0xffffffffffffffff, &(0x7f0000000140)="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", 0x1dd) 14:01:49 executing program 0: r0 = kqueue() kevent(r0, &(0x7f0000000000), 0x9130fbf, 0x0, 0x4000000, 0x0) lstat(&(0x7f00000000c0)='.\x00', &(0x7f0000000040)) madvise(&(0x7f00003e9000/0xa000)=nil, 0xa000, 0x4) 14:01:52 executing program 1: setrlimit(0x8, &(0x7f0000000040)={0x7, 0x8}) r0 = syz_open_pts() close(r0) r1 = syz_open_pts() ioctl$TIOCSETAF(r1, 0x802c7416, &(0x7f0000000080)={0x7ff, 0x3, 0x80000001, 0xfffffffffffffffc, "661fbef224517fff0e091fe600"}) writev(r0, &(0x7f00000006c0)=[{&(0x7f0000000c80)="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", 0x32e}], 0x1) write(r0, &(0x7f0000000140)="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", 0x27d) syz_open_pts() ioctl$TIOCSETAF(r1, 0x802c7416, &(0x7f0000000000)={0x5, 0x4, 0x1, 0x5, "c7dd03a169fb08fbe18d2cd995e6969ffc90a3fc", 0x5, 0x8}) 14:01:53 executing program 0: r0 = socket(0x2, 0x1, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x60e, 0x0) close(r0) pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x10000) pread(r2, &(0x7f0000000240)="0996d0e5f69fa61935", 0x9, 0x0, 0x4) r3 = socket$inet6(0x18, 0x5, 0x1) getpeername$inet6(r3, &(0x7f0000000080), &(0x7f0000000100)=0xc) pwritev(r1, &(0x7f0000000400)=[{&(0x7f00000001c0)="6406b76e6a7b564429e6ed5c138988776992be9a82c849ad3102b8fd84bb7ebc9d913b5058c2bbe08a7e6c88f9a1f60aa004a8efbd797944848b3ce13c3cbfda0fe3c61f0d39d19a0f05bdbd571a9c9d1f7bdd7b9fc7b37d0911e2477d80c26ad3c4e2b745ad697fa6fe52b4dc6068e3dd8de1db122c99c62fec8441f65d", 0xfffffffffffffd97}], 0x1, 0x0, 0x20000000000) r4 = socket(0x18, 0x400000002, 0x0) setsockopt(r4, 0x1000000029, 0x2f, &(0x7f0000000000), 0x0) ioctl$LIOCSFD(0xffffffffffffffff, 0x80046c7f, &(0x7f0000000280)=r4) pwritev(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)="4402", 0x2}], 0x1, 0x0, 0x0) socket(0x1, 0x5, 0xcc) mmap(&(0x7f0000000000/0x13000)=nil, 0x13000, 0x5, 0x10, r1, 0x0, 0x0) connect(r0, &(0x7f0000000000)=ANY=[@ANYBLOB='le0\x00'], 0x10) 14:01:53 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = socket(0x2, 0x2, 0x0) connect$unix(r1, &(0x7f00000013c0)=ANY=[@ANYRES64], 0x1) dup2(r1, r0) setsockopt$sock_int(r0, 0xffff, 0x1001, &(0x7f0000000000)=0x43cbc, 0x4) r2 = dup(r0) sendto$inet6(r2, &(0x7f0000000040), 0xffc9, 0x0, 0x0, 0x0) 14:01:53 executing program 0: minherit(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) r0 = open$dir(&(0x7f0000001240)='./file0\x00', 0x800, 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x7, 0x3810, r0, 0x0, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000100), 0x1, 0x0) munmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000) mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) open$dir(&(0x7f0000000080)='./file1\x00', 0x112, 0x100) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)) pwritev(0xffffffffffffffff, &(0x7f00000003c0), 0x273, 0x0, 0x0) r1 = socket(0x18, 0x400000002, 0x0) setsockopt(r1, 0x1000000029, 0x2f, &(0x7f0000000000), 0x0) dup(r1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x11, 0xffffffffffffffff, 0x0, 0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x615, 0x0) pwritev(0xffffffffffffff9c, &(0x7f00000003c0)=[{&(0x7f0000000140)="52ff1e51feb729f1981f3e9d639c54dd3202eb0bf0986fcbf2fd090a851e05", 0x1f}, {&(0x7f0000000180)="6e9957d683664fa3d852608f7c1bb67233b2081682068e47b3bb67fb55975651a202832382856d99a422a89f526518aaeb952a50bddfaa82776448d5e4c493d1aade204908b70163f2438d8e0198423a0d8ffb5cea2e2549ac9b5a9e5c054940819ea064a13d2237f1c6dd7623926e13440c62a7f300e935c5eed4ba3e56acb835e370a2b5d3d77fd72208294b6f2fba4d866673b0ed382c8040a36eb3ce6517546c23ca4739b79623401cd6418dd510f4b437e24a5457ebf8d2f79c2c2194754889becb188dbfcc0647381e242281e7a998c789c581eb301bb9ff58d9f06294fa336f719510441585f2fa4c850c", 0xfffffffffffffdfa}, {&(0x7f0000000280)="9ecfabe89ab7b7acdb5266feffe3db58d142083f963536df5befdd00940a21459bfff661b4ee8d423313698cd384af89f8ee9752c9abe6c59de920b61c88701938325fb6971942ae090bd0fbc0740bff5e5eed77d974eec4c3ad1176d4f52fdf6ce3091500d06b24a4cb989e42f45f3dcb2037badbbce6ae572c06903736feb0eed9361a60cb93db9814c646666c32ffe3a86947c35369614afc1c1933af8770b96d376e808e80f76ecbd08bb3e4361ba41b74cf941cac96e2", 0xb9}, {&(0x7f0000000340)="e9e9a21a9969e16e69e4b1c9902290463a85a03e5319a91a3df2ffd86dec000295434118979645a0df2366c8e74311d455fcdb822ed344b9a0157ad5ebf7786c68e83fcde3fe7d80", 0x48}], 0x4, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x11, r2, 0x0, 0x0) mknod(&(0x7f00000000c0)='./file1\x00', 0x6000, 0x3) ioctl$KDSETLED(r2, 0x20004b42, &(0x7f0000000040)=0xc) ioctl$SPKRTONE(0xffffffffffffffff, 0x80085301, &(0x7f0000000000)={0x7, 0x40}) 14:01:53 executing program 1: r0 = kqueue() kevent(r0, &(0x7f0000000140), 0x9130fbf, 0x0, 0x4000000, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) preadv(0xffffffffffffffff, &(0x7f00000004c0)=[{&(0x7f0000001640)=""/247, 0xffffffcc}], 0x10000221, 0x0, 0x0) r2 = open(&(0x7f00000002c0)='./file0\x00', 0x611, 0x0) fcntl$setstatus(r2, 0x4, 0x80) pwritev(r2, &(0x7f00000003c0), 0x273, 0x0, 0x0) dup2(r1, r2) pipe2(&(0x7f0000000000), 0x0) r3 = socket(0x18, 0x400000002, 0x0) setsockopt(r3, 0x1000000029, 0x2f, &(0x7f0000000000), 0x0) fcntl$setstatus(r3, 0x4, 0x8) 14:01:53 executing program 0: r0 = socket(0x2, 0x2, 0x0) r1 = socket(0x2, 0x1, 0x0) setsockopt(r1, 0x0, 0x16, &(0x7f0000000100)="04000000", 0x4) dup2(r1, r0) r2 = socket(0x2, 0x1, 0x0) dup2(r0, r2) connect$unix(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="5882d5d1ba741f33780352eeca0c7ce8a384ab5c3f9bc66b0b348bb86af532689489fdabacf94b41a61d1787915fff7ffb36a4df2abba66db5fe9320c7db54db1559a42075deaa85e171834a342ee91fe8d4ac7ca385c1765b3142c5df18713169217bdd03f40e0333dcfaf49072f4996931e83dd3888eae729a815a99b05fdadbd504d583fe2704436e8cb1e7336edda69164441ecbae4946142962c9f4ffa593bcd7af3398cfa1a44939b3b8e4de13c8aa420de203efaf36f3545ff7141a3347c993daf9112c10abfa36522abd8aca0385340ee638d10a3ec9cd6f39ba894c2b793169"], 0x10) shutdown(r0, 0x1) 14:01:55 executing program 0: open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0xfffffffffffffffd) write(0xffffffffffffffff, &(0x7f00000000c0)="6e012a8a3ac4b7b30acd413b11483d1b833d77c4d9b4f8380ac224e3eb2134e45aa9a4d2a3e5253eef96b1be26da4a4e32428961a7d904a589fbacb27b716d95e134eacb7ebfc326d2927bc5822e49a74002302886ea7e05c1e9bff429d18632c9c79110274cfea380ce6206e16d7b80eab4d2b69162293edb1c70fd55cbad4013e649c6", 0x84) r0 = open$dir(&(0x7f0000001240)='./file0\x00', 0x0, 0x0) r1 = dup2(r0, r0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x2810, r1, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001240)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r2, 0xffff, 0x1022, &(0x7f0000000140)={0x0}, &(0x7f0000000100)=0x1) ktrace(&(0x7f00000001c0)='./file0\x00', 0x0, 0x104, r3) 14:01:55 executing program 0: r0 = socket(0x800000018, 0x1, 0x0) setsockopt$sock_int(r0, 0xffff, 0x1, &(0x7f0000000000)=0x8, 0x4) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x80, 0xdc) pwritev(r1, &(0x7f00000003c0), 0x273, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x11, r1, 0x0, 0x0) ioctl$TIOCSETAF(r1, 0x802c7416, &(0x7f0000000080)={0x0, 0x0, 0x1ff, 0x0, "d730c1e7e400000001000000000000000000009e"}) bind$unix(r0, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c) getsockname$inet(r0, 0x0, &(0x7f0000000040)) 14:01:57 executing program 1: r0 = socket(0x18, 0x400000002, 0x0) socket(0x7, 0x0, 0x9) setsockopt(r0, 0x1000000029, 0x2f, &(0x7f0000000000), 0x0) r1 = socket(0x18, 0x400000002, 0x0) setsockopt(r1, 0x1000000029, 0x2f, &(0x7f0000000000), 0x0) recvfrom$inet6(r1, &(0x7f0000000140)=""/136, 0x88, 0x40, &(0x7f00000000c0)={0x18, 0x2, 0x5, 0x7}, 0xc) r2 = socket(0x18, 0x400000002, 0x0) setsockopt(r2, 0x1000000029, 0x2f, &(0x7f0000000000), 0x0) r3 = socket(0x18, 0x400000002, 0x0) setsockopt(r3, 0x1000000029, 0x2f, &(0x7f0000000000), 0x0) r4 = dup2(r2, r3) ioctl$VT_GETMODE(r4, 0x40087603, &(0x7f0000000240)) r5 = socket(0x18, 0x400000002, 0x0) setsockopt(r5, 0x1000000029, 0x2f, &(0x7f0000000000), 0x0) bind(r5, &(0x7f0000000200)=@in6={0x18, 0x0, 0x3, 0x1}, 0xc) getsockname(r0, &(0x7f0000000080)=@in, &(0x7f0000000100)=0xc) r6 = kqueue() fcntl$setflags(r6, 0x2, 0x0) link(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file1\x00') 14:01:57 executing program 0: r0 = socket(0x18, 0x1, 0x0) close(r0) r1 = socket(0x800000018, 0x1, 0x0) ioctl$TIOCSETAF(0xffffffffffffffff, 0x802c7416, &(0x7f0000000080)={0x0, 0x0, 0x1ff, 0x0, "d730c1e7e400000001000000000000000000009e"}) bind$unix(r1, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) getpeername(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000934eb928000000000000000000000000000000000000000000000000000000000000005050ff3f"], 0x0) ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, "000000000000000100002000"}) connect$unix(r0, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) r2 = open(&(0x7f0000000040)='./file0\x00', 0x615, 0x0) pwritev(r2, &(0x7f00000003c0), 0x273, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x11, r2, 0x0, 0x0) ioctl$WSMOUSEIO_SRES(r2, 0x80045721, &(0x7f0000000100)=0x1000) r3 = socket(0x800000018, 0x1, 0x0) bind$unix(r3, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) 14:01:57 executing program 0: connect$unix(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8202e480ffffffff"], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x18, 0x400000002, 0x0) setsockopt(r0, 0x1000000029, 0x2f, &(0x7f0000000000), 0x0) r1 = accept$unix(r0, &(0x7f0000000080)=@abs, &(0x7f00000000c0)=0x8) getsockname(r1, &(0x7f00000006c0)=@in, &(0x7f0000000700)=0xc) r2 = socket(0x2, 0x2, 0x0) bind(r2, &(0x7f0000000000)=@un=@abs={0x0, 0xd}, 0x10) socket(0x10, 0x2, 0x0) r3 = socket(0x2, 0x2, 0x0) connect$unix(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="e544519bc07dec2d91e231151a026c9fea581468ad01376714"], 0x10) write(r3, &(0x7f0000000100)="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", 0x599) 14:01:57 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) read(r1, &(0x7f0000000180)=""/185, 0xb9) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0xfffffc83, 0x0, 0x0, &(0x7f0000000100)=ANY=[], 0xffffffffffffffe6, 0x40e}, 0x4) sendmsg(r0, &(0x7f0000000380)={0x0, 0x32c, 0x0, 0x0, &(0x7f0000000000), 0x90}, 0x0) 14:01:57 executing program 0: r0 = syz_open_pts() kevent(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)=[{{r0}, 0xfffffffffffffffe, 0x69}], 0x0, 0x0) r1 = kqueue() kevent(r1, 0x0, 0x0, &(0x7f0000000100), 0x800, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = open(&(0x7f0000000040)='./file0\x00', 0x615, 0x0) pwritev(r6, &(0x7f00000003c0), 0x273, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x11, r6, 0x0, 0x0) ioctl$VMM_IOC_RESETCPU(r6, 0x82405605, &(0x7f0000000280)={0x68, 0x1, {[0x6, 0x5a, 0x1, 0xda, 0x4, 0x7, 0xae2, 0x1, 0x2, 0x20, 0x101, 0x9, 0x1400000000000000, 0x2, 0x8, 0x4, 0xfffffffffffffffa, 0x1], [0x8, 0x5, 0x3ff, 0x1, 0x1ff, 0x1, 0x4, 0x4, 0xff, 0x5], [0x11, 0x8, 0x1ffe0, 0x52d, 0x1f, 0x10001, 0x4f93c82b], [0x10000, 0x6, 0x1, 0x7, 0x746a, 0xe4], [{0x6, 0x3ff, 0xb7, 0x1}, {0xfffb, 0x7, 0x100, 0x2}, {0x7ff, 0xfe, 0x0, 0x100000001}, {0x81, 0x7f, 0x7, 0x2}, {0x80, 0x8000, 0x3, 0x100000000}, {0x8, 0x200, 0x2, 0xa63}, {0x1, 0x8, 0x2, 0x4}, {0x101, 0x80, 0x6, 0x1}], {0xfff9, 0x1, 0x1400, 0xda2}, {0x20, 0x800, 0x1}}}) kevent(0xffffffffffffffff, &(0x7f0000000180)=[{{r4}, 0xffffffffffffffff, 0x85}], 0x0, 0x0, 0x0, 0x0) bind(r5, &(0x7f0000000240)=@un=@file={0xd80f49edce43012d, './file0\x00'}, 0xa) dup2(r5, r4) listen(r5, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x3800c) ioctl$VT_OPENQRY(r7, 0x40047601, &(0x7f0000000100)) dup2(r5, r2) connect$unix(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="00012e2f66696c653000"], 0xa) 14:01:58 executing program 0: r0 = socket(0x2, 0x1000000008002, 0x0) connect$unix(r0, &(0x7f00000019c0)=ANY=[@ANYBLOB="82022e2fac1400ab7d81b0a5ed56c0c0c7a8c14017c92a3953ff2b0f80981ade610ba108e59e940e6d8ccf9b1bcc9d5d0cdb02000000c75b3202000000a2aacf1b001553e098973c85ceb7d135bfd18a07634d3910e956ea948281d66d4c50432ad91508000cf85f8783602a67897cff7f000000000000f371e8cfaa1d4ab424b614911f88d3525e34e763128666ee7877bf9753b6bdae4c5b436e445960fa6b980ac1ba4aab44f0323348f261b51f15ee1620b4d2009fe508528e0000752fd96cb58d127addb390071baff955a58c179770ce1f000000d940682065385ec5c9762c34c7881a9506ffc85e43782e717e29127ca8c256b248000000007fea130879264ab70bf9c0aa0eb72598cb90fd03b162460c683ff8a85a93ad6fb2ce6263185505cc059fef6bef339f78b4f9da521ee1e53fd26f52249c901f022f19975028aed2b700c9076d0612112dd4db4a40bb3c7f82fd7c8d54e904d389e61651a28671f6aaacfcff282f7ec1a852494e378081f231927b35672f0c214b5cac7db956b7fa3158d2dc0f679159e040bc31a8529000b88e516809ccf0cfef09b6348ce400095bb49d06af62577f46c840d34b6362e9f9810cfec14d447dadc21aa457b780274e6e68e9c11aafa3f23f0e31941c0a490c909eb5221c0885236c6c40481db84295fad7e776a2b1f04e2a71c4d06bcc2a72bb272a9eb7d255410a663e91969372066c9867ef274484fffad868e059f2804a365f01f6701355c0a1900000009137e3f0e7a5f89b68cf7c65b7ada72c808d000068318e4fa7cb04cace50d549e7e752a3828ceec5948c15b42139f49354a211039146905d202634626670e584885cd5c53ac73465afaab1cd39be95373a87ca277d106490a95d3d8139a789eb2f861d9f834c274a19392429d476bde11689127431fcd756a8c3371a5f12beabd87b043e8b94df6542a868993f31f970cf9081e0b2f13f03a0776ec2eed29ed2709c068fb3ea586bee5c3bc1dec12052fa12fc688f7de2efba940f8e65918932829c030000000000000000f003d28b86e5b8f9983f49000000000000000073ab30cba944b5927efd33d319ed0d4537e6000000000000e2eaf9ba91b98365d6d337561564d2c4c7b45d87639f69c2b83d9fb892f6aea66ac2c632eee0bb5b086a0edda19af759e4905cdcddfb02696fd79769fb05347de39d9fa81504ce2ddd948b0ddab3f47e15c7f51c88a73831148eb67f7da113f50deb0a7a5a8132ef2b6d9aca7b2a6906d871a780b2e7548681231afafc3c752f2661acd9aad49386e15cecbced71693f00000000000000e4053a5103684be538c40e46b0993641250b7e69860f55da25404e6489500fef1f90532eb9e0840618fdc7f9fb467655f83d401fe57ee86fa642e9bad7ed751d79d3cbb15058810b243e38c7723358643889de02d97da9d096637071666cfbf0259fc5b9321f5a3b0552cea32380954ff38932dd10b70cb044cb97cf201ab4fa56e9f41d447f5ff588520f3f7cbf229cc322f1fcbea40a9be720dcb67df99ae37b51b9020000000005000070a08059947700000000f282ebea0ea0e3cff50258a2b04c9cdebab09df2ebf0ceaa8d264282aba8256155ba5529eb2f1c311d3fdb2a50ff294204e837acead22c5099d8104cb4e5cf2bd7376bdcc99d2e10e5eb5df707d876bb598905401311ce37b2a002422837255932851bac20b69e285e6ea829481de1dcfedfd6ba7e79a4ac39ffc89597c07bc44a581387dc8c6ddcf01fa61e6e50f7c51a2d8aa8f88f265b5600d841f85fe4e98eefb0ad1cb2147e154be17a6ca5c9ca702bbb4772cabbbbb70209affa81008440f0b0c1e54ff0f998c8a4c8e382591cd37534df534a458c97b7e6d9cee07c6f2630d1a137ef699461e520d70614d848745b3d2acce8a5fe894d33dc8f90eb5ac109c57e97cdb0c78092b66fa03f096e242fd3f9e6bb8009008c2d674f364ed79f70034a59c4692e711c671274276e0c128435721d84e5d8398ad78f9735cdc7deba70a6982fe7660713d7be4b5ec92f418c373a9e04d40cde7314b50dda5c30146906d84d65e2ff02e77dcca8cc7722a84bb0431a1c0be11ca979d5cd1975741f226167ba662fa6c329112fa7eb9787463da03047e267a0d232f4381b8e4030905938a64abc812d6d90ece6f0704406cdb53701e315f63734f822cccc9e14acec8c824d5db4cf9adfba5620f6c61e04000000696eb0a79222189068ad203a59277c1c148fde018da47e3b15df6dce906df52e610dc1779265c570b26fb81768d1d2c040832b1b393b06997c812f920c4b36659780bb73b057c7fa673296bfd14a111245905b98c4dd6a7b8366e3f94730ae2d575ddf11d564612561ec7ff1799c2e1262d58c91c38c993d3fb78e178e101d966f3dd071d08a490000000000000000c33bc738a8c1ab3d33ea96194ee1dd42000adfc74c2d3bb43b2e6c47b273b3f7903a62b24e473545e597baaef6d539a1efc08d3046f41083897f1858c8001ac0d915af3f7b3171c14f936df59a2fcd4cfb8cd15b7c3c4e40a6d622504dd0aa947a52f21f27e3a3e63750c03c009e63922b5a5ad504f84cda870bb75fe912805be9b86e169d58986e063ed7f133b1b7fb46514ebd59ebf8176d056008dceb3fa0053fe7e1b866d3f445157a6c05a393039b8f032a0d101aa4ad723df01e5a2a079c0598f9298d906bcc21e75d683e6b5f6ce4cb811612054a6a8be9e18cbce5604301008a2dedc257fdeb4128982913bb7291388c07f8f1e499a1c6b2c39871f0ed42a8b59ee0b5bc9f3e1212d9c400000000000000000000000000e522903e088c87a8aa62a84554e4ce419951e62c8ee7e435bcf62d522d0e23503e6e9dc6ea666b2ce4b60a46a198c2117da5819d4fac16783648bd3eff702490229c4bf079345744ca47a4a611a95e40f9000000000000000000000000000000000000000000000000000041993131a1c854d737d48cd54ad9632c839b62c8b23f6a5fdcc012a960df3970b8704c508e2dd32ddce8390b39b288b73b4004e03f3b71624d666261133aebc4105e7a541912d2bbc3bc1e25f3197d6a042eac"], 0x10) write(r0, 0x0, 0x0) accept$unix(r0, &(0x7f0000000000)=@abs, &(0x7f0000000040)=0x8) shutdown(r0, 0x2) 14:01:58 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200)='/dev/zero\x00', 0x0, 0x0) r1 = getuid() fchownat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', r1, 0x0, 0x2) kqueue() r2 = openat$pci(0xffffffffffffff9c, &(0x7f0000000240)='/dev/pci\x00', 0x20000, 0x0) r3 = fcntl$dupfd(r2, 0x2, 0xffffffffffffffff) close(r3) r4 = kqueue() r5 = socket(0x10000000002, 0x2, 0x0) setsockopt$sock_int(r5, 0xffff, 0x1023, 0x0, 0x0) r6 = syz_open_pts() kevent(r4, &(0x7f00000001c0)=[{{r5}, 0xffffffffffffffff, 0x5}, {{0xffffffffffffff9c}, 0xfffffffffffffffc}, {{r6}, 0xfffffffffffffffc}], 0xb8, &(0x7f0000000300), 0x80000000, 0x0) ioctl$TIOCOUTQ(r6, 0x40047473, &(0x7f00000000c0)=0x8d) getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0xc) getsockopt$sock_cred(r3, 0xffff, 0x1022, &(0x7f0000000540)={0x0, 0x0}, &(0x7f0000000580)=0xc) mkdir(&(0x7f0000000080)='./file0\x00', 0x200) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000740)={{0x0, r8, 0x0, 0x0, r7, 0x1}}) r9 = open(&(0x7f0000000280)='./file0/file0\x00', 0x70e, 0x0) pwritev(r9, &(0x7f00000003c0)=[{&(0x7f0000000840)="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", 0x2bc}], 0x1, 0x0, 0x0) r10 = socket(0x11, 0x4003, 0x0) sendto$unix(r10, &(0x7f0000000000)="b10005136000009005001b0007000000000004fecea11ea8fef96ecfc73fd3357ae26caa0416fa4f376336acf00b7804be781e4991f7c8df5f982b297be1aa5b23ed00f4c8b2ca3ebbc257699a1f132e27acb5d602000d7d026ba8af63ff3728211ee4fd89720fd3872babfbb770a9f5a872c881ff7cc53c895303b22f310b404f36a00f90006ee01b120400000000000000000000000000020208a371a3f8000400"/177, 0xb1, 0x0, 0x0, 0x0) r11 = socket(0x11, 0x4003, 0x0) sendto$unix(r11, &(0x7f00000002c0)="b10005136000009005001b0007000000000004fecea11ea8fef96ecfc73fd3357ae26caa0416fa4f376336f00b7804be781e4991f72b297be1aa5b23ed00f4c8b2ca3ebbc257699a1f132e27acb5d602000d7d026ba8af63ff3728211ee4fd89720fd3872babfbbb87642ddeadd7f02d4ab770a9f5a872c881ff7cc53c895303b22f310b404f36a00f90006ee01b120400000000000000000000000000020208a371a3f8000400"/182, 0xffffffffffffffbe, 0x400, 0x0, 0x0) ioctl$VT_OPENQRY(r9, 0x40047601, &(0x7f0000000000)) r12 = semget$private(0x0, 0x7, 0x80) semctl$GETNCNT(r12, 0x0, 0x3, &(0x7f0000000640)=""/22) semop(r12, &(0x7f0000000100)=[{0x5, 0x4000010004, 0x1000}, {0x1, 0xd59, 0x800}, {0x4, 0xffff, 0x800}, {0x4, 0x800007, 0x1000}, {0x0, 0x1ff, 0x1000}, {0x4, 0x2, 0x1800}, {0x0, 0x6, 0x1800}, {0x1, 0x3, 0x1800}], 0x8) semctl$SETALL(r12, 0x0, 0x9, &(0x7f0000000200)=[0xa, 0x3ff, 0x0, 0x5, 0x3f]) semctl$GETNCNT(r12, 0xacb8675f21c9d15b, 0x3, &(0x7f0000000140)=""/81) fchown(r0, r1, r7) 14:01:58 executing program 0: getgid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvfrom$unix(r0, &(0x7f0000001900)=""/102400, 0x19000, 0x0, &(0x7f0000000140)=@file={0x83cdc30e79e34608, './file0\x00'}, 0xa) mlock(&(0x7f0000000000/0x3000)=nil, 0x3000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2) shutdown(r0, 0x0) r1 = socket(0x1, 0x1, 0x8) setsockopt(r1, 0x5, 0x0, &(0x7f0000000240)="fd4050ca226b48e95aff0107b103b6f09a1a393b1d2d0906a0c6617efc18cccc199e33b7c2f7fd8d", 0x28) setsockopt$sock_int(r1, 0xffff, 0x20, &(0x7f0000000300)=0x3ff, 0x4) getsockopt$SO_PEERCRED(r1, 0xffff, 0x1022, &(0x7f0000000840), 0xc) r2 = open(&(0x7f0000000080)='./file0\x00', 0x60e, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f00000018c0)="ea", 0x1}], 0x1) mmap(&(0x7f0000000000/0x13000)=nil, 0x13000, 0x0, 0x10, r2, 0x0, 0x0) r3 = socket$inet(0x2, 0x1, 0x0) kevent(r2, &(0x7f0000000000)=[{{r1}, 0x3, 0x8, 0x2, 0x7fffffff, 0x3}], 0x6, &(0x7f0000000080)=[{}, {{r3}, 0xfffffffffffffffa, 0x50, 0x20000000, 0x3f, 0x7}], 0x0, &(0x7f0000000100)={0x80, 0x7}) r4 = open(&(0x7f0000000000)='./file0\x00', 0x402, 0x0) fcntl$lock(r4, 0x8, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x100000001}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="28000000ffff00000100000008cd3fdf00000000", @ANYRES32=r5, @ANYRES32=r5, @ANYRES32=r4, @ANYPTR64], 0x28}, 0x0) r6 = semget$private(0x0, 0x7, 0x8a) semop(r6, &(0x7f00000007c0)=[{0x3, 0x3, 0x1000}, {0x1, 0x5, 0x1000}], 0x2) login: witness: lock order reversal: 1st 0xfffffd807f004188 vmmaplk (&map->lock) 2nd 0xfffffd8064f701a8 inode (&ip->i_lock) lock order "&ip->i_lock"(rrwlock) -> "&map->lock"(rwlock) first seen at: #0 witness_checkorder+0x69c #1 rw_enter+0xd4 #2 vm_map_lock_ln+0x10d #3 uvm_map+0x2da #4 km_alloc+0x18b #5 pool_multi_alloc_ni+0xd0 #6 pool_p_alloc+0x74 #7 pool_do_get+0x10f #8 pool_get+0xeb #9 ufsdirhash_build+0x3ea #10 ufs_lookup+0x2a1 #11 VOP_LOOKUP+0x5b #12 vfs_lookup+0x7a6 #13 namei+0x63c #14 start_init+0xc9 #15 proc_trampoline+0x1c lock order "&map->lock"(rwlock) -> "&ip->i_lock"(rrwlock) first seen at: #0 witness_checkorder+0x69c #1 rw_enter+0xd4 #2 rrw_enter+0x88 #3 VOP_LOCK+0xf9 #4 vn_lock+0x81 #5 uvn_io+0x2c8 #6 uvn_get+0x226 #7 uvm_fault+0x11cc #8 uvm_fault_wire+0x70 #9 uvm_map_pageable_wire+0x2dd #10 sys_mlock+0x185 #11 syscall+0x4a4 #12 Xsyscall+0x128 Stopped at db_enter+0x18: addq $0x8,%rsp ddb{0}> ddb{0}> set $lines = 0 ddb{0}> set $maxwidth = 0 ddb{0}> show panic the kernel did not panic ddb{0}> trace db_enter() at db_enter+0x18 witness_checkorder(fffffd8064f701a8,9,0) at witness_checkorder+0x1009 rw_enter(fffffd8064f70198,81) at rw_enter+0xd4 rrw_enter(fffffd8064f70198,81) at rrw_enter+0x88 VOP_LOCK(fffffd80622569d8,81) at VOP_LOCK+0xf9 vn_lock(fffffd80622569d8,81) at vn_lock+0x81 uvn_io(fffffd8066ff89a8,ffff800022d6eb28,1,2,0) at uvn_io+0x2c8 uvn_get(fffffd8066ff89a8,0,ffff800022d6ed80,ffff800022d6ed14,0,0) at uvn_get+0x226 uvm_fault(fffffd807f004170,20000000,2,2) at uvm_fault+0x11cc uvm_fault_wire(fffffd807f004170,20000000,20003000,2) at uvm_fault_wire+0x70 uvm_map_pageable_wire(fffffd807f004170,fffffd806b394980,fffffd806b394440,ffff800020b6a000,0,0) at uvm_map_pageable_wire+0x2dd sys_mlock(ffff800020a98508,ffff800022d6ef78,ffff800022d6efc0) at sys_mlock+0x185 syscall(ffff800022d6f040) at syscall+0x4a4 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xda31fb53900, count: -14 ddb{0}> show registers rdi 0x3 rsi 0x3ffff acpi_pdirpa+0x2be67 rbp 0xffff800022d6e7a0 rbx 0x3 rdx 0x40000 acpi_pdirpa+0x2be68 rcx 0xffff800020b6a000 rax 0xffff8000009f51c0 r8 0xffffffff81b6af72 witness_checkorder+0xfe2 r9 0x5 r10 0x3 r11 0xad84ff7e4b42934d r12 0xfffffd800297b100 r13 0 r14 0xffffffff825f35e0 w_lodata+0x4c870 r15 0xffffffff825fbd50 w_lodata+0x54fe0 rip 0xffffffff819657f8 db_enter+0x18 cs 0x8 rflags 0x246 rsp 0xffff800022d6e790 ss 0x10 db_enter+0x18: addq $0x8,%rsp ddb{0}> show proc PROC (syz-executor.0) pid=207432 stat=onproc flags process=10 proc=4000000 pri=86, usrpri=86, nice=20 forw=0xffffffffffffffff, list=0xffff800020aa7b38,0xffff800020a982a0 process=0xffff800020aa31c0 user=0xffff800022d6a000, vmspace=0xfffffd807f004170 estcpu=36, cpticks=0, pctcpu=0.0 user=0, sys=0, intr=0 ddb{0}> ps PID TID PPID UID S FLAGS WAIT COMMAND 74360 365770 4613 32767 7 0x10 syz-executor.0 *74360 207432 4613 32767 7 0x4000010 syz-executor.0 74360 116962 4613 32767 3 0x4000090 fsleep syz-executor.0 73761 407236 0 0 3 0x14200 bored sosplice 2390 106797 71996 32767 3 0x90 nanosleep syz-executor.1 71996 108556 54224 0 3 0x82 wait syz-executor.1 4613 99098 37243 32767 3 0x90 nanosleep syz-executor.0 37243 474184 54224 0 3 0x82 wait syz-executor.0 54224 112367 11261 0 3 0x82 thrsleep syz-fuzzer 54224 329719 11261 0 3 0x4000082 nanosleep syz-fuzzer 54224 482780 11261 0 3 0x4000082 kqread syz-fuzzer 54224 95263 11261 0 3 0x4000082 thrsleep syz-fuzzer 54224 48440 11261 0 3 0x4000082 thrsleep syz-fuzzer 54224 382171 11261 0 3 0x4000082 thrsleep syz-fuzzer 54224 500515 11261 0 3 0x4000082 thrsleep syz-fuzzer 54224 197501 11261 0 3 0x4000082 thrsleep syz-fuzzer 54224 194254 11261 0 3 0x4000082 thrsleep syz-fuzzer 54224 402289 11261 0 3 0x4000082 nanosleep syz-fuzzer 11261 431666 40307 0 3 0x10008a pause ksh 40307 210574 11906 0 3 0x92 select sshd 17512 135552 1 0 3 0x100083 ttyin getty 11906 385581 1 0 3 0x80 select sshd 47750 363829 54775 73 3 0x100090 kqread syslogd 54775 23217 1 0 3 0x100082 netio syslogd 31911 255930 1 77 3 0x100090 poll dhclient 8328 412898 1 0 3 0x80 poll dhclient 40030 490608 0 0 2 0x14200 zerothread 11978 73035 0 0 3 0x14200 aiodoned aiodoned 32324 215288 0 0 3 0x14200 syncer update 61353 345301 0 0 3 0x14200 cleaner cleaner 66658 71666 0 0 3 0x14200 reaper reaper 48742 466805 0 0 3 0x14200 pgdaemon pagedaemon 30363 145816 0 0 3 0x14200 bored crynlk 39531 349221 0 0 3 0x14200 bored crypto 7666 316280 0 0 3 0x14200 bored viomb 63674 494181 0 0 3 0x40014200 acpi0 acpi0 22777 144312 0 0 3 0x40014200 idle1 63888 174944 0 0 3 0x14200 bored softnet 38717 225771 0 0 3 0x14200 bored systqmp 82377 502765 0 0 3 0x14200 bored systq 29043 217924 0 0 3 0x40014200 bored softclock 88649 271284 0 0 3 0x40014200 idle0 58318 37089 0 0 3 0x14200 bored smr 1 381084 0 0 3 0x82 wait init 0 0 -1 0 3 0x10200 scheduler swapper ddb{0}> show all locks Process 74360 (syz-executor.0) thread 0xffff800020a98508 (207432) shared rwlock vmmaplk r = 0 (0xfffffd807f004188) #0 witness_lock+0x52e #1 rw_enter+0x453 #2 vm_map_lock_ln+0x10d #3 uvm_map_pageable+0x11d #4 sys_mlock+0x185 #5 syscall+0x4a4 #6 Xsyscall+0x128 exclusive kernel_lock &kernel_lock r = 0 (0xffffffff82657328) #0 witness_lock+0x52e #1 syscall+0x400 #2 Xsyscall+0x128 ddb{0}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 9475 6340K 6340K 78643K 10565 0 pcb 13 8K 8K 78643K 13 0 rtable 107 3K 3K 78643K 199 0 ifaddr 39 10K 10K 78643K 39 0 counters 39 33K 33K 78643K 39 0 ioctlops 0 0K 2K 78643K 17 0 iov 0 0K 24K 78643K 12 0 mount 1 1K 1K 78643K 1 0 vnodes 1214 76K 76K 78643K 1219 0 UFS quota 1 32K 32K 78643K 1 0 UFS mount 5 36K 36K 78643K 5 0 shm 2 1K 1K 78643K 2 0 VM map 2 1K 1K 78643K 2 0 sem 12 1K 1K 78643K 13 0 dirhash 12 2K 2K 78643K 12 0 ACPI 1810 197K 290K 78643K 12817 0 file desc 7 21K 33K 78643K 62 0 proc 48 50K 83K 78643K 366 0 subproc 34 2K 2K 78643K 34 0 NFS srvsock 1 0K 0K 78643K 1 0 NFS daemon 1 16K 16K 78643K 1 0 in_multi 33 2K 2K 78643K 33 0 ether_multi 1 0K 0K 78643K 1 0 ISOFS mount 1 32K 32K 78643K 1 0 MSDOSFS mount 1 16K 16K 78643K 1 0 ttys 36 159K 159K 78643K 36 0 exec 0 0K 1K 78643K 183 0 pagedep 1 8K 8K 78643K 1 0 inodedep 1 32K 32K 78643K 1 0 newblk 1 0K 0K 78643K 1 0 VM swap 7 26K 26K 78643K 7 0 UVM amap 106 21K 22K 78643K 1033 0 UVM aobj 4 2K 2K 78643K 4 0 memdesc 1 4K 4K 78643K 1 0 crypto data 1 1K 1K 78643K 1 0 NDP 5 0K 0K 78643K 9 0 temp 73 3022K 3088K 78643K 3263 0 SYN cache 2 16K 16K 78643K 2 0 ddb{0}> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle arp 64 7 0 0 1 0 1 1 0 8 0 plcache 128 20 0 0 1 0 1 1 0 8 0 rtpcb 80 25 0 23 1 0 1 1 0 8 0 rtentry 112 46 0 1 2 0 2 2 0 8 0 unpcb 120 57 0 47 1 0 1 1 0 8 0 syncache 264 4 0 4 1 1 0 1 0 8 0 tcpqe 32 8 0 8 1 1 0 1 0 8 0 tcpcb 544 27 0 22 1 0 1 1 0 8 0 inpcb 280 85 0 75 2 0 2 2 0 8 1 nd6 48 4 0 0 1 0 1 1 0 8 0 art_heap8 4096 1 0 0 1 0 1 1 0 8 0 art_heap4 256 213 0 0 14 0 14 14 0 8 0 art_table 32 214 0 0 2 0 2 2 0 8 0 art_node 16 45 0 4 1 0 1 1 0 8 0 sysvmsgpl 40 4 0 2 1 0 1 1 0 8 0 semupl 112 1 0 1 1 1 0 1 0 8 0 semapl 112 11 0 1 1 0 1 1 0 8 0 shmpl 112 2 0 0 1 0 1 1 0 8 0 dirhash 1024 17 0 0 3 0 3 3 0 8 0 dino1pl 128 1455 0 52 46 0 46 46 0 8 0 ffsino 272 1455 0 52 94 0 94 94 0 8 0 nchpl 144 1728 0 115 60 0 60 60 0 8 0 uvmvnodes 72 1498 0 0 28 0 28 28 0 8 0 vnodes 208 1498 0 0 79 0 79 79 0 8 0 namei 1024 4209 0 4209 1 0 1 1 0 8 1 percpumem 16 30 0 0 1 0 1 1 0 8 0 scxspl 192 4868 0 4868 8 3 5 7 0 8 5 plimitpl 152 21 0 12 1 0 1 1 0 8 0 sigapl 432 233 0 218 3 1 2 3 0 8 0 futexpl 56 590 0 589 1 0 1 1 0 8 0 knotepl 112 55 0 36 1 0 1 1 0 8 0 kqueuepl 104 16 0 14 1 0 1 1 0 8 0 pipepl 160 154 0 135 2 0 2 2 0 8 1 fdescpl 488 234 0 218 3 0 3 3 0 8 0 filepl 152 1297 0 1196 5 0 5 5 0 8 1 lockfpl 104 26 0 25 1 0 1 1 0 8 0 lockfspl 48 11 0 10 1 0 1 1 0 8 0 sessionpl 112 17 0 7 1 0 1 1 0 8 0 pgrppl 48 17 0 7 1 0 1 1 0 8 0 ucredpl 96 85 0 76 1 0 1 1 0 8 0 zombiepl 144 218 0 217 1 0 1 1 0 8 0 processpl 904 251 0 217 4 0 4 4 0 8 0 procpl 632 338 0 293 5 0 5 5 0 8 1 sosppl 128 2 0 0 1 0 1 1 0 8 0 sockpl 384 169 0 147 3 0 3 3 0 8 0 mcl8k 8192 1 0 0 1 0 1 1 0 8 0 mcl4k 4096 3 0 0 1 0 1 1 0 8 0 mcl2k 2048 146 0 0 18 0 18 18 0 8 0 mtagpl 80 1 0 0 1 0 1 1 0 8 0 mbufpl 256 169 0 0 11 0 11 11 0 8 0 bufpl 280 6263 0 1326 353 0 353 353 0 8 0 anonpl 16 44437 0 30637 72 0 72 72 0 125 16 amapchunkpl 152 1365 0 1237 8 0 8 8 0 158 0 amappl16 192 1390 0 643 50 3 47 50 0 8 8 amappl15 184 58 0 53 1 0 1 1 0 8 0 amappl14 176 27 0 23 1 0 1 1 0 8 0 amappl13 168 19 0 16 1 0 1 1 0 8 0 amappl12 160 9 0 8 2 1 1 1 0 8 0 amappl11 152 53 0 42 1 0 1 1 0 8 0 amappl10 144 23 0 19 2 1 1 1 0 8 0 amappl9 136 580 0 574 1 0 1 1 0 8 0 amappl8 128 132 0 100 2 0 2 2 0 8 0 amappl7 120 101 0 88 1 0 1 1 0 8 0 amappl6 112 56 0 49 1 0 1 1 0 8 0 amappl5 104 119 0 110 1 0 1 1 0 8 0 amappl4 96 460 0 436 1 0 1 1 0 8 0 amappl3 88 117 0 108 1 0 1 1 0 8 0 amappl2 80 1072 0 1002 3 1 2 3 0 8 0 amappl1 72 14264 0 13807 24 12 12 20 0 8 2 amappl 80 563 0 520 2 0 2 2 0 84 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 253 0 253 1 1 0 1 0 8 0 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 64 3 0 0 1 0 1 1 0 8 0 uaddrrnd 24 234 0 218 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 234 0 218 1 0 1 1 0 8 0 vmmpekpl 168 5742 0 5718 2 0 2 2 0 8 0 vmmpepl 168 36682 0 34682 122 10 112 115 0 357 21 vmsppl 368 233 0 218 2 0 2 2 0 8 0 pdppl 4096 475 0 436 6 0 6 6 0 8 0 pvpl 32 135637 0 118723 176 0 176 176 0 265 35 pmappl 232 233 0 218 2 1 1 2 0 8 0 extentpl 40 50 0 32 1 0 1 1 0 8 0 phpool 112 160 0 2 5 0 5 5 0 8 0