kern.securelevel: 0 -> 1 creating runtime link editor directory cache. preserving editor files. starting network daemons: sshd. starting local daemons:. Tue Dec 3 16:22:35 PST 2019 OpenBSD/amd64 (ci-openbsd-main-5.c.syzkaller.internal) (tty00) Warning: Permanently added '10.128.0.245' (ECDSA) to the list of known hosts. 2019/12/03 16:22:51 fuzzer started 2019/12/03 16:22:54 dialing manager at 10.128.15.235:30997 2019/12/03 16:22:54 syscalls: 337 2019/12/03 16:22:54 code coverage: enabled 2019/12/03 16:22:54 comparison tracing: enabled 2019/12/03 16:22:54 extra coverage: support is not implemented in syzkaller 2019/12/03 16:22:54 setuid sandbox: enabled 2019/12/03 16:22:54 namespace sandbox: support is not implemented in syzkaller 2019/12/03 16:22:54 Android sandbox: support is not implemented in syzkaller 2019/12/03 16:22:54 fault injection: support is not implemented in syzkaller 2019/12/03 16:22:54 leak checking: support is not implemented in syzkaller 2019/12/03 16:22:54 net packet injection: enabled 2019/12/03 16:22:54 net device setup: support is not implemented in syzkaller 2019/12/03 16:22:54 concurrency sanitizer: support is not implemented in syzkaller 2019/12/03 16:22:54 devlink PCI setup: support is not implemented in syzkaller 16:23:01 executing program 0: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x20, 0x0) r1 = dup(0xffffffffffffffff) linkat(r0, &(0x7f0000000040)='./file0\x00', r1, &(0x7f0000000080)='./file0\x00', 0x4) ioctl$TIOCSFLAGS(r1, 0x8004745c, &(0x7f00000000c0)=0x6) recvfrom$unix(r1, &(0x7f0000000100)=""/186, 0xba, 0x2, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0xa) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) openat$wsmuxkbd(0xffffffffffffff9c, &(0x7f0000000240)='/dev/wskbd\x00', 0x18000, 0x0) r3 = accept(0xffffffffffffffff, &(0x7f0000000280)=@in, &(0x7f00000002c0)=0xc) getsockopt$SO_PEERCRED(r3, 0xffff, 0x1022, &(0x7f0000000300), 0xc) ioctl$TIOCFLUSH(r0, 0x80047410, &(0x7f0000000340)=0xffffffff) r4 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ttyCcfg\x00', 0x8, 0x0) ioctl$KDDISABIO(r4, 0x20004b3d) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mknodat(r5, &(0x7f0000000400)='./file0/file0\x00', 0x2000, 0xffffffff) fsync(r2) r6 = openat(0xffffffffffffffff, &(0x7f0000000440)='./file1\x00', 0x88, 0x24) ioctl$VT_ACTIVATE(r6, 0x20007605, &(0x7f0000000480)=0xfffffff8) r7 = accept$inet6(0xffffffffffffff9c, &(0x7f00000004c0), &(0x7f0000000500)=0xc) fchdir(r7) connect$inet6(r1, &(0x7f0000000540)={0x18, 0x1, 0x4, 0x1f}, 0xc) getdents(r0, &(0x7f0000000580)=""/4, 0x4) r8 = syz_open_pts() ioctl$TIOCGETD(r8, 0x4004741a, &(0x7f00000005c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt(r9, 0x7d, 0x7, &(0x7f0000000640)="7e351cc23d13efa773b4bb5662deaa59de50ad2698421023b0063fba2d31c30c14f2bd4e185828e87fcffcf475b14810bfbeebf11bfbedf31fd30e239bdbdd348b2f9837e6", 0x45) socketpair$unix(0x1, 0x4, 0x0, &(0x7f00000006c0)) r10 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c) getsockopt$SO_PEERCRED(r10, 0xffff, 0x1022, &(0x7f0000000700), 0xc) r11 = socket$inet(0x2, 0x8005, 0x66) getsockname(r11, &(0x7f0000000740)=@un=@abs, &(0x7f0000000780)=0x8) 16:23:01 executing program 1: select(0x40, &(0x7f0000000000)={0x2, 0xfffffffffffffe00, 0x5, 0x7, 0x1b55, 0x20, 0x0, 0x2}, &(0x7f0000000040)={0x101, 0xbe, 0x5, 0x7fffffff, 0x3f, 0x7fffffff, 0x2, 0x4}, &(0x7f0000000080)={0x5f0, 0x80000001, 0x3f, 0xa703, 0x2281, 0x1, 0x4, 0x9}, &(0x7f00000000c0)={0x6c, 0x80000000}) r0 = semget$private(0x0, 0x1, 0x200) semctl$SETALL(r0, 0x0, 0x9, &(0x7f0000000100)=[0x6, 0x1000, 0x7, 0x0, 0xf140, 0x3, 0x8, 0xc80]) semctl$GETNCNT(r0, 0x2, 0x3, &(0x7f0000000140)=""/191) clock_gettime(0x2, &(0x7f0000000200)) r1 = msgget(0x2, 0x20) msgrcv(r1, &(0x7f0000000240)={0x0, ""/155}, 0xa3, 0x2, 0xb8a1a0eab62d4bc0) msgget$private(0x0, 0x8) r2 = msgget$private(0x0, 0x400) msgrcv(r2, &(0x7f0000000300)={0x0, ""/166}, 0xae, 0x0, 0x800) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet_opts(r3, 0x0, 0x8269f1b1689983a4, &(0x7f00000003c0)="db89d98afe830762d6c3e687950aa87c1eab61439335c0d8313d9f60de5f6dfaba6a98ba0ee526a5fea5b8edbac3f3cbe64532f297d63a981ee2734a745a83fb272f769b00e29f6f4f6b1f53fc231845914b45ccaeb9ef52ed6202d6405ea142c6d1e4b752260115cce8ff363d5125179923a649724926e28be737789f601a804fe7a47bd3e43a4bb9c2acfd88135ad280ff2c246b7739a4a45a94f7444e4de2abaca82a525f92f0332f3b7131293ac0d94c1901310e61b67f1e3c1c11ec933fbe95e9a5f9026e6a603ab2b04019cfdab7d53150a73f22eede3d54", 0xdb) msgget$private(0x0, 0x85) minherit(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1) r4 = socket$inet(0x2, 0x1, 0x6) getsockopt$sock_cred(r4, 0xffff, 0x1022, &(0x7f00000004c0), &(0x7f0000000500)=0xc) semget(0x2, 0x0, 0x218) msgget(0x2, 0x200) pipe(&(0x7f0000000540)) socket$inet(0x2, 0x3, 0x0) r5 = accept$unix(0xffffffffffffffff, &(0x7f0000000580)=@file={0x0, ""/2}, &(0x7f00000005c0)=0x4) connect$unix(r5, &(0x7f0000000600)=@abs={0x1, 0x0, 0x0}, 0x8) r6 = msgget$private(0x0, 0x8) msgctl$IPC_RMID(r6, 0x0) faccessat(r3, &(0x7f0000000640)='./file0\x00', 0xc0, 0x1) pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$SO_PEERCRED(r7, 0xffff, 0x1022, &(0x7f00000006c0), 0xc) r8 = syz_open_pts() ioctl$TIOCSDTR(r8, 0x20007479) r9 = accept(0xffffffffffffffff, &(0x7f0000000700)=@un=@abs, &(0x7f0000000740)=0x8) recvfrom$inet(r9, &(0x7f0000000780)=""/232, 0xe8, 0x4e4, &(0x7f0000000880)={0x2, 0x1}, 0xc) login: pckbd_enable: command error 16:23:02 executing program 1: ioctl$VMM_IOC_WRITEREGS(0xffffffffffffffff, 0x82485608, &(0x7f0000000240)={0x0, 0x0, 0x0, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x40000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200], [0x0, 0x0, 0x0, 0x9, 0xdfff], [0x0, 0x0, 0x403], [], {}, {0x0, 0x0, 0x0, 0x9}}}) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000300)={'tap', 0x0}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = semget$private(0x0, 0x1, 0x80) semctl$GETZCNT(r0, 0x3, 0x7, &(0x7f00000005c0)=""/175) semctl$GETPID(r0, 0x2, 0x4, &(0x7f00000004c0)=""/210) semctl$GETPID(r0, 0x1, 0x4, &(0x7f0000000080)=""/231) r1 = socket(0x18, 0x2, 0x0) r2 = semget(0x1, 0x2, 0x0) semctl$SETALL(r2, 0x0, 0x9, &(0x7f0000000040)=[0x1ff, 0x2, 0x9, 0xffff, 0x5, 0x20, 0x0]) r3 = fcntl$dupfd(r1, 0x0, r1) ioctl$TIOCFLUSH(r3, 0x8080691a, &(0x7f0000000300)) openat$bpf(0xffffffffffffff9c, &(0x7f0000000180)='/dev/bpf\x00', 0x8000, 0x0) getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000000), 0xc) 16:23:03 executing program 0: r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000200)='/dev/bpf\x00', 0x0, 0x0) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000080)={0x3, &(0x7f0000000100)=[{0x7}, {0x44}, {0x6}]}) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f00000000c0)={0x7, &(0x7f0000000040)=[{0x8a, 0x30, 0x80, 0x1}, {0x800, 0xc9, 0x4, 0xfffffff7}, {0x9, 0x4, 0x80, 0xb2}, {0xfffd, 0x9, 0x7, 0xe8b}, {0x9, 0xd3, 0xee, 0xf800}, {0x5b9d, 0x0, 0xb6, 0x8001}, {0x29b, 0x3, 0x9, 0x1f}]}) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000000)={'tap', 0x0}) r1 = syz_open_pts() close(r1) ioctl$TIOCSETAF(r1, 0x802c7416, &(0x7f0000000000)={0x0, 0x3, 0x9f2f, 0x511d, "0d592fde0e5f546fc58b62c25b9d19bf96cea18a"}) write(r1, &(0x7f0000000140)='\r', 0x1) dup2(0xffffffffffffffff, r1) syz_emit_ethernet(0x15c, &(0x7f0000000340)) 16:23:03 executing program 1: pipe(&(0x7f0000000080)) r0 = syz_open_pts() close(r0) r1 = openat$tty(0xffffffffffffff9c, &(0x7f0000000180)='/dev/tty\x00', 0x20000, 0x0) ioctl$TIOCEXCL(r1, 0x2000740d) setrlimit(0x8, &(0x7f0000000000)={0x7, 0x95}) openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) r2 = syz_open_pts() close(r2) readv(r0, &(0x7f0000001680)=[{&(0x7f00000000c0)=""/176, 0x1}], 0x31e) 16:23:03 executing program 1: connect$unix(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="820201f0ffffffff"], 0x1) r0 = openat$klog(0xffffffffffffff9c, &(0x7f0000000040)='/dev/klog\x00', 0x2, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x6, 0x0) write(r1, &(0x7f0000000140)="220e228901001c067ebc74a7ea11cf801bf1fa48f4445ed5", 0x18) pwritev(r1, &(0x7f00000002c0)=[{&(0x7f0000000180), 0xff20}], 0x100000000000005e, 0x0, 0x0) ioctl$LIOCSFD(r0, 0x80046c7f, &(0x7f0000000080)=r1) r2 = socket(0x2, 0x2, 0x0) connect$unix(r2, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x10) setsockopt$inet_opts(r2, 0x0, 0x3, &(0x7f0000000cc0)="071400000000db000a369bbc8c20b4372c0000005aa92a068d690d6a5343f64166fa5c3452e048095216bec5e0bb43aeecdd1e9d536cf5c9259fdbccfeb401f8a3970b3757d4ceac6d485bad8737c2f8ec94879c3ae6d2260a982fd45c29ba0af5bb68dbbcc50a563804122460861733ec50e282523da9ea282258a7ce6c607579538f806021f2f88c450693409d23d267cccbb25e9f7321e6fc2c022d106534c1f07ec6697f77b9", 0x4) writev(r2, &(0x7f0000000840)=[{&(0x7f0000000d80)="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", 0xb39}], 0x1) 16:23:03 executing program 0: r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000200)='/dev/bpf\x00', 0x0, 0x0) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000080)={0x0, &(0x7f0000000040)}) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) syz_emit_ethernet(0x168, &(0x7f0000000340)="b6") r1 = shmget$private(0x0, 0x1000, 0x200, &(0x7f0000ffd000/0x1000)=nil) r2 = getuid() r3 = getegid() getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) r5 = getgid() getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000100)={0x0}, 0xc) r7 = getpgrp() shmctl$IPC_SET(r1, 0x1, &(0x7f0000000140)={{0x1, r2, r3, r4, r5, 0x0, 0xffff}, 0x10000, 0x400, r6, r7, 0x0, 0x1, 0xffffffff}) socket(0x18, 0x4003, 0x36) 16:23:03 executing program 0: mknod(&(0x7f0000000000)='./bus\x00', 0x2080002002, 0x40004000000028aa) r0 = open(&(0x7f0000000040)='./bus\x00', 0x1, 0x0) writev(r0, &(0x7f0000000080), 0x0) open$dir(&(0x7f0000000080)='./bus/file0\x00', 0x80, 0x64) 16:23:03 executing program 1: r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bpf\x00', 0x0, 0x0) r1 = syz_open_pts() close(r1) ioctl$TIOCSETAF(r1, 0x802c7416, &(0x7f0000000000)={0x0, 0x3, 0x9f2f, 0x511d, "0d592fde0e5f546fc58b62c25b9d19bf96cea18a"}) write(r1, &(0x7f0000000140)='\r', 0x1) ioctl$TIOCCBRK(r1, 0x2000747a) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000200)={0x3, &(0x7f00000000c0)=[{0x25}, {0x3c}, {0x7ffffffe}]}) r2 = open(&(0x7f0000000080)='./bus\x00', 0x6, 0x0) write(r2, &(0x7f0000000140)="220e228901001c067ebc74a7ea11cf801bf1fa48f4445ed5", 0x18) pwritev(r2, &(0x7f00000002c0)=[{&(0x7f0000000180), 0xff20}], 0x100000000000005e, 0x0, 0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x6, 0x0) write(r3, &(0x7f0000000140)="220e228901001c067ebc74a7ea11cf801bf1fa48f4445ed5", 0x18) pwritev(r3, &(0x7f00000002c0)=[{&(0x7f0000000180), 0xff20}], 0x100000000000005e, 0x0, 0x0) ioctl$BIOCSETIF(r3, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) syz_emit_ethernet(0x61, &(0x7f0000000000)="b6") 16:23:03 executing program 1: r0 = syz_open_pts() ioctl$TIOCSTSTAMP(r0, 0x8008745a, &(0x7f00000002c0)={0xfff, 0x1}) r1 = syz_open_pts() close(r1) ioctl$TIOCSETAF(r1, 0x802c7416, &(0x7f0000000000)={0x0, 0x3, 0x9f2f, 0x511d, "0d592fde0e5f546fc58b62c25b9d19bf96cea18a"}) write(r1, &(0x7f0000000140)='\r', 0x1) ioctl$TIOCSETAF(r1, 0x802c7416, &(0x7f0000000300)={0x62, 0x479f, 0x8, 0x0, "039cc10a27b018cf0c1c31620209fcc4f2adde2a", 0x1ff, 0x80000000}) ioctl$TIOCSETAF(r0, 0x802c7416, &(0x7f0000000080)={0x0, 0x0, 0x90d2, 0x0, "d730c1e7bb6fc6e23c5b00000000000000e74de4"}) write(r0, &(0x7f0000000340)="582720efabd16ebae63225259560f8e5815f73f2a044fd33055552fbd5e41789632dfc94ff334a5619515a4c8ab06198824b3da0d4096e8c8b6b87cb2d72b8bcdb9ad0a4f5f728193ed96ab92f12fc4d5f16b1000000001628b53acc547d533587c189eac3", 0x65) r2 = dup(0xffffffffffffffff) readv(r2, &(0x7f0000000180)=[{&(0x7f0000000200)=""/130, 0x82}], 0x1) ioctl$TIOCSETAF(0xffffffffffffffff, 0x802c7416, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x4, "dad6c968e77f4ca99f4de2c4585aa0e4d0f53691", 0x0, 0x5}) write(r0, &(0x7f00000000c0)="bdfa4d2591c321a8cf98848e4a8051bd24313dea8d0343d605e2d3280d33ee6185c6a19e1a3fbed9d7c7f5ecd505370f55d9bb5fa3be8987e1cc70d0cd568c71ed2879e91f98c168a0237f559b05b5e32d0ff2d4e7199679daa987423cab21c6b2748aaa78947da61d75bc9028a2d687f01309bbe061a751731e5c2091f3e9bdd11c4518138f7d1d6a2e60e1f34322c0cdf8648b48935d14a79a15cecdd79cd66c31400b4dc386972d2eae1f3c146e", 0xfffffe39) r3 = syz_open_pts() close(r0) dup(r3) r4 = syz_open_pts() ioctl$TIOCSETA(r4, 0x802c7414, &(0x7f0000000040)={0x0, 0x0, 0xfffffffffffffffe, 0x0, "e011ebf8d59239a35971911660e08d68686f6ee7"}) ioctl$TIOCSETA(r4, 0x802c7414, &(0x7f0000000000)={0x2ea, 0x0, 0x200003, 0xd0f, "b04d6a6e069f67648baa088b9c000411f33ffd00"}) read(r4, &(0x7f0000000880)=""/161, 0xa1) 16:23:03 executing program 0: mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x44fa) r0 = open(&(0x7f0000000000)='./bus\x00', 0x1, 0x0) ioctl$WSMUXIO_REMOVE_DEVICE(r0, 0x80085762, &(0x7f0000000080)) r1 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttyCcfg\x00', 0x80, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x6, 0x0) write(r2, &(0x7f0000000140)="220e228901001c067ebc74a7ea11cf801bf1fa48f4445ed5", 0x18) pwritev(r2, &(0x7f00000002c0)=[{&(0x7f0000000180), 0xff20}], 0x100000000000005e, 0x0, 0x0) ioctl$VT_SETMODE(r2, 0x80087602, &(0x7f00000001c0)={0x0, 0x20, 0x401, 0x7ff, 0x8}) ioctl$WSDISPLAYIO_GETEMULTYPE(r1, 0xc014575e, &(0x7f0000000100)={0x7, './bus\x00'}) r3 = shmget(0x0, 0x1000, 0x10, &(0x7f0000ffd000/0x1000)=nil) shmctl$IPC_RMID(r3, 0x0) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000140)='/dev/null\x00', 0x80, 0x0) ioctl$KDMKTONE(r4, 0x20004b08, &(0x7f0000000180)=0x8) 16:23:03 executing program 0: ioctl$VMM_IOC_WRITEREGS(0xffffffffffffffff, 0x82485608, &(0x7f0000000240)={0x0, 0x0, 0x0, {[], [], [0x0, 0x0, 0x0, 0x9, 0xffffffffffffffff, 0x5ee], [0x0, 0x0, 0x3fd]}}) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000300)={'tap', 0x0}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = open(&(0x7f0000000080)='./bus\x00', 0x6, 0x0) write(r0, &(0x7f0000000140)="220e228901001c067ebc74a7ea11cf801bf1fa48f4445ed5", 0x18) pwritev(r0, &(0x7f00000002c0)=[{&(0x7f0000000180), 0xff20}], 0x100000000000005e, 0x0, 0x0) recvfrom$inet6(r0, &(0x7f0000000000)=""/157, 0x9d, 0x887, 0x0, 0x0) r1 = socket(0x18, 0x2, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$TIOCFLUSH(r2, 0x8080691a, &(0x7f0000000300)) 16:23:03 executing program 0: shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)) munmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000) r0 = open(&(0x7f0000000080)='./bus\x00', 0x6, 0x0) write(r0, &(0x7f0000000140)="220e228901001c067ebc74a7ea11cf801bf1fa48f4445ed5", 0x18) pwritev(r0, &(0x7f00000002c0)=[{&(0x7f0000000180), 0xff20}], 0x100000000000005e, 0x0, 0x0) getsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f0000000000), &(0x7f0000000040)=0xc) madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) 16:23:04 executing program 1: ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x0, 0x10000000000001}}) ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f00000000c0)={0x2, 0x0, 0xffffffffffffffff, 0x2, "00000000000000000000f2ffffffffff321c4000"}) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x8) connect$unix(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="82"], 0x1) ioctl$TIOCSETAF(0xffffffffffffffff, 0x802c7416, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x0, 0x0, "010000000000000000ffffff7f00"}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x18, 0x1, 0x0) setsockopt(r0, 0x29, 0xc, &(0x7f0000000140)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) r1 = socket(0x18, 0x1, 0x0) close(r1) r2 = socket(0x18, 0x2, 0x0) close(r2) r3 = syz_open_pts() writev(r3, &(0x7f0000000080)=[{&(0x7f0000000180)="3284f9122a826049b11e951c36dc79ec0e4190cec8dbdd53cf925c661341c0c5193cb026b398f0668fcacd3df8b38ead79a3fa1fd488a1de603253f76eff83e74273952cddce42e63c60f6a521", 0x4d}], 0x1) socket(0x400000000018, 0x3, 0x3a) setsockopt(r2, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) connect$unix(r1, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) r4 = socket(0x18, 0x1, 0x0) setsockopt(r4, 0x80000000000029, 0xc, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) write(r2, &(0x7f0000000040)="100a2956b9223776", 0x21d) 16:23:04 executing program 0: ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000000)={0x2, &(0x7f0000000240)=[{}, {0x2033, 0x0, 0x1}]}) r0 = socket(0x18, 0x1, 0x0) close(r0) r1 = socket(0x18, 0x400000002, 0x0) listen(r0, 0x0) accept$inet6(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000240)=0x2b) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x0, 0x3}}) ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f00000000c0)={0x0, 0x0, 0x1ff, 0x0, "000000000000000100002000"}) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) close(r1) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) getsockopt$sock_int(r2, 0xffff, 0x8, &(0x7f0000000080), &(0x7f0000000100)=0x4) socket(0x400000000018, 0x3, 0x3a) setsockopt(r1, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) connect$unix(r0, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) write(r1, &(0x7f0000000140)="ad18f05de2f4ef18", 0x23c) 16:23:04 executing program 0: r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bpf\x00', 0x0, 0x0) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000300)='/dev/bpf\x00', 0x0, 0x0) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/bpf\x00', 0x8, 0x0) ioctl$BIOCSETF(r2, 0x80104267, &(0x7f0000000080)={0x24c2, &(0x7f0000000180)}) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f00000000c0)={0x20000000000005b7, &(0x7f0000000280)=[{0xa3, 0x0, 0x0, 0x5fe}, {}, {}]}) syz_emit_ethernet(0x2f3, &(0x7f0000000140)='H') r3 = open(&(0x7f0000000040)='./file0\x00', 0x200, 0x0) r4 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000004c0)=[{&(0x7f0000001640)=""/247, 0xffffffcc}], 0x1, 0x0, 0x0) r5 = open(&(0x7f0000000040)='./file0\x00', 0x611, 0x61) fcntl$setstatus(r5, 0x4, 0x40080) pwritev(r5, &(0x7f00000003c0), 0x273, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x5, 0x2011, r4, 0x0, 0x0) getpeername$unix(r3, &(0x7f0000000440)=@abs, &(0x7f0000000480)=0x8) clock_settime(0x0, &(0x7f00000015c0)) r6 = semget$private(0x0, 0x4, 0x42) semop(r6, &(0x7f0000000440)=[{0x0, 0x0, 0x1000}, {0x3, 0x7, 0x1800}, {0x0, 0x8001}, {0x1, 0x0, 0x1000}], 0x4) shmget(0x3, 0x3000, 0x200, &(0x7f0000271000/0x3000)=nil) r7 = kqueue() syz_open_pts() kevent(r7, &(0x7f0000000040), 0x3, 0x0, 0x0, 0x0) fcntl$dupfd(r7, 0xa, 0xffffffffffffffff) r8 = syz_open_pts() close(r8) ioctl$TIOCSETAF(r8, 0x802c7416, &(0x7f0000000000)={0x0, 0x3, 0x9f2f, 0x511d, "0d592fde0e5f546fc58b62c25b9d19bf96cea18a"}) write(r8, &(0x7f0000000140)='\r', 0x1) pwritev(r8, &(0x7f00000008c0)=[{&(0x7f0000000500)="1fc599052c3d580857eb3f3c2491a48839f5af8e666beceffbfad49a5df06686005a3cd2dc9f61cde134f4ca963089d91dcf265135337ac3eb30d090dcc8dddfa5be7112dfdf3a893dc2b77384a7ad60926e57eac7ff942aed0d45643df3e30c591d2765709408ec443b26766d7274bb73af77b5036aeb7b290d12535f25992d7a9af4e80d7261e9f9f6fe82ac1710d99eee9904b34e8fbe985803e05ead0547d022a2b7e83799a38a738344223efc9574d59bbd45d908f3d4e6dde30997ca5464f1152c1c30190246ea9c0089e2da452717e0c92b242991167de1ad7d14428790084de3543d5a72dfd78cd1b0", 0xed}, {&(0x7f0000000200)="8627c882ae4c8271abd4c2981f06a7fc4a87e83214958f5eabd7f81bd81798c6a67ba4086127b065012ea8753f3db518f2ab8bd7415d1bbc2760c300365cf5c43695dcd1a4e177af8c4f52175f2c41d576c9e7e5825cf64d3a765c51c439", 0x5e}, {&(0x7f0000000380)="5bcae0eff0577d1caf572291b6eb223e70d4547a98786eb752ee09d1907b288d2a6b08d3dde03e4d8d09a086e1605edb998a5276de980753a9e8c15aee2ca475b52676e81fa8a9e28a42fba2fca4a4df725aa11e970484f0c9df4f075b266f8f04317326fc", 0x65}, {&(0x7f0000000600)="2df39649f222236fe87c8e83fc0c193694fdf15fe2d0a71307b82f10f7ecd2451794d598dc41353903de181f3ce44cacc0e4a75636fe6d0a00c54fee0423fdf361935ef220a8e7c857e674d3d5a8289f91b040eeee2681b7f395811b4266f0b621dca8cb76055424713a52e2506b9d4293dca3b8aa914aca3df6acf0b8e9f5489d8393ffb1e2e5b97e087506c70d296e26ba34d44e0796691dbe96a2cd1d274644d210e1a5260b29fe61f71d47f8af695cec7cb3363f2518edff3bc0668873688bec4bfa37167b82cafc47a835aac2734257a0d10fba7e2e02", 0xd9}, {&(0x7f0000000700)="f0a183382339c58937cdd263e7c7055523a9e66c9afdc6a3505d3612365d21a1b3c1f192362e1c42ea687f8cb769a2082fe9d12cffa46009bdad95d3e69d7ff96f77352748e85d17f90f4a4207efc6a171e0e6c9439941eda9b6e024d3079266aefb7da5afa143555c7ece8fadb8ae8787a7ad7077a6b59cefb51dbd64152b4ddbc87c0f7d", 0x85}, {&(0x7f00000007c0)="b8438a73cc20b2b23444addb5321658ba5bc2d6c043b66760be2821b234159b7fb31215217214ae94b2bc8cdd46f332b680f680d8100b6c18939b9fe31bfda3b7b4a521e5150d22b322cc8fe3f5faa28796ccd87ce07c21eceadfadd11d12cba684e31d0a3c44198dc23afd42b8b22a8effb4c115f9ca1291fe43611c55ab6cc13e5314715e76d1c7c3edcf99475fdfe759c322d2dc7b6f5ada0c596c4bd8f7d8e729ba7e68bd7ba1a2178438040ffacbd13f6a9f7bf3c7fe96e375f35a02a42691b892e5d39145d9177cbdf0f0a424b449d8500687ed8e6", 0xd8}], 0x6, 0x0, 0xfff) msgget$private(0x0, 0xfffffffffffffffd) r9 = openat$wsmouse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/wsmouse0\x00', 0x881, 0x0) ioctl$WSMOUSEIO_SETPARAMS(r9, 0x80105727, &(0x7f0000000040)={&(0x7f0000000440)=[{0x26}], 0x1}) r10 = openat$wsmouse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/wsmouse0\x00', 0x8881, 0x0) ioctl$WSMOUSEIO_SETPARAMS(r10, 0x80105727, &(0x7f0000000040)={&(0x7f0000000440)=[{0x26}], 0x1}) 16:23:04 executing program 1: mknod(&(0x7f0000000100)='./bus\x00', 0x20, 0xd02) r0 = open(&(0x7f0000000000)='./bus\x00', 0x1, 0x0) r1 = syz_open_pts() chdir(&(0x7f00000003c0)='./file0\x00') close(r1) r2 = accept$unix(r0, &(0x7f0000000040)=@abs, &(0x7f0000000080)=0x8) r3 = syz_open_pts() close(r3) ioctl$TIOCSETAF(r3, 0x802c7416, &(0x7f0000000000)={0x0, 0x3, 0x9f2f, 0x511d, "0d592fde0e5f546fc58b62c25b9d19bf96cea18a"}) syz_open_pts() write(r3, &(0x7f0000000140)='\r', 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x100, 0x101) r5 = syz_open_pts() r6 = syz_open_pts() close(r6) ioctl$TIOCSETAF(r6, 0x802c7416, &(0x7f0000000000)={0x0, 0x3, 0x9f2f, 0x511d, "0d592fde0e5f546fc58b62c25b9d19bf96cea18a"}) write(r6, &(0x7f0000000140)='\r', 0x1) ioctl$TIOCOUTQ(r6, 0x40047473, &(0x7f0000000380)=0x80) close(r5) ioctl$TIOCSETAF(r5, 0x802c7416, &(0x7f0000000000)={0x0, 0x3, 0x9f2f, 0x511d, "0d592fde0e5f546fc58b62c25b9d19bf96cea18a"}) write(r5, &(0x7f0000000140)='\r', 0x1) kevent(r0, &(0x7f0000000180)=[{{r0}, 0xfffffffffffffffb, 0x29, 0x1, 0xdf, 0x8}, {{r2}, 0xf, 0x1, 0x2, 0x9, 0x676}, {{r0}, 0xfffffffffffffffd, 0x10, 0x80000000, 0x3, 0x68f}, {{}, 0xfffffffffffffffe, 0x8, 0x4, 0x1, 0x100}, {{r3}, 0x2, 0x90, 0x4, 0x9, 0x2}, {{r0}, 0xffffffffffffffff, 0x20, 0x1, 0x400, 0x8}, {{r1}, 0xfffffffffffffffc, 0x1, 0xfffee, 0x0, 0x1}, {{r4}, 0xfffffffffffffffc, 0x0, 0x80, 0x8, 0x4}, {{r5}, 0xfffffffffffffff9, 0x43, 0x40, 0xcc6, 0x3f}], 0x8, &(0x7f0000000300)=[{{r1}, 0x0, 0x2a, 0x40000003, 0x3, 0x3}], 0x3, &(0x7f0000000340)={0x38000000000, 0x5}) ioctl$TIOCSETAF(r1, 0x802c7416, &(0x7f0000000000)={0x0, 0x7, 0x9f2f, 0x511d, "0d592fde0e5f546fc58b62c25b9d19bf96cea18a"}) write(r1, &(0x7f0000000140)='\r', 0x1) fcntl$getflags(r1, 0x1) mprotect(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x0) pwritev(r0, &(0x7f00000002c0)=[{&(0x7f0000000180), 0xfffffe91}], 0x1, 0x0, 0x0) 16:23:04 executing program 1: ioctl$WSMOUSEIO_SETPARAMS(0xffffffffffffff9c, 0x80105728, &(0x7f0000000140)={&(0x7f0000000000)=[{0x17138f9781fee8e2, 0x5}, {0x6, 0x20000}, {0x7, 0x7fffffff}, {0x45, 0xfffffffb}, {0x2, 0x2}, {0x86, 0x65}, {0x0, 0x4}, {0x1, 0x2}], 0x8}) symlink(&(0x7f000000bffa)='./control\x00', &(0x7f000000affa)='./bus\x00') symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./control\x00') r0 = open(&(0x7f0000000080)='./bus\x00', 0x6, 0x0) write(r0, &(0x7f0000000140)="220e228901001c067ebc74a7ea11cf801bf1fa48f4445ed5", 0x18) pwritev(r0, &(0x7f00000002c0)=[{&(0x7f0000000180), 0xff20}], 0x100000000000005e, 0x0, 0x0) getsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f00000001c0)={0x0}, &(0x7f0000000200)=0xc) ktrace(&(0x7f0000000280)='./file0\x00', 0x6, 0x400, r1) unveil(&(0x7f00000000c0)='./bus/\x00', &(0x7f0000000100)='x\x00') 16:23:04 executing program 1: ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x0, 0x3}}) r0 = socket(0x18, 0x1, 0x0) ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f00000000c0)={0x0, 0x0, 0x1ff, 0x0, "000000000000000100002000"}) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e7, 0x7}, 0x8) close(r0) r1 = socket(0x18, 0x3, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) setsockopt(r1, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) connect$unix(r0, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) write(r0, 0x0, 0x0) 16:00:00 executing program 0: r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bpf\x00', 0x0, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000200)={'tap', 0x0}) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000280)={0x3, &(0x7f00000000c0)=[{0x10006c}, {0x4c}, {0x406}]}) shmctl$IPC_RMID(0x0, 0x0) syz_emit_ethernet(0xe, &(0x7f0000000140)="c4d46c0a81d12e00d77e4dbeb6d4") 16:00:00 executing program 1: r0 = kqueue() r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) kevent(0xffffffffffffffff, &(0x7f0000000100)=[{{r1}, 0xfffffffffffffffb, 0x1}], 0x0, 0x0, 0x0, 0x0) nanosleep(&(0x7f0000000000)={0x2e93, 0x6d50507e}, &(0x7f0000000080)) kevent(r0, &(0x7f0000000080), 0xeaf4, 0x0, 0x80000001, 0x0) 16:00:00 executing program 1: mknod(&(0x7f0000000080)='./bus\x00', 0x2000, 0x86138) kevent(0xffffffffffffffff, &(0x7f0000000180)=[{{}, 0x0, 0x0, 0x8000000013, 0x0, 0x3000100000000000}], 0x0, 0x0, 0x0, 0x0) r0 = syz_open_pts() close(r0) ioctl$TIOCSETAF(r0, 0x802c7416, &(0x7f0000000000)={0x0, 0x3, 0x9f2f, 0x511d, "0d592fde0e5f546fc58b62c25b9d19bf96cea18a"}) write(r0, &(0x7f0000000140)='\r', 0x1) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) ioctl$TIOCOUTQ(r1, 0x40047473, &(0x7f00000000c0)=0xffffff5d) r2 = open(&(0x7f0000000000)='./bus\x00', 0x2, 0x0) write(r2, &(0x7f0000000040)="510fc3a0", 0x4) pwritev(r2, &(0x7f00000002c0)=[{&(0x7f0000000180), 0xff20}], 0x100000000000005e, 0x0, 0x0) 16:00:00 executing program 0: r0 = open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x0) pwritev(r0, &(0x7f0000000100)=[{&(0x7f00000001c0)="90c3fe67eb586898600425f2f573e0d1ac83c18d65c8e22066c0d389fe894a974c8d45aaf9d2e7ae9fed58938ea6ac68a0b0632688ca0fab3647175abf22fea120c9b3bb77ca60c128295bf234505356095dbf9e9dd850a4a5079723b57fed8ef0a251b91e67e1f5d347d5b668a390a25beea3962e7c10b8d9f53f5c82b5eacc2675bd0800006be9a2cbb2cfacc5e906dfd1e3208364dec454327b6a1522c332ea628b8cb672e9e7247818f970e0174fcb9303e6b505059f9476ab8eb2dc291328", 0xc1}], 0x1, 0x0, 0x0) r1 = open(&(0x7f0000000140)='.\x00', 0x0, 0x0) r2 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000cc0)='/dev/\x00\x00\x00\x00use0\x00', 0x0, 0x0) dup2(r2, r1) fchdir(r1) mmap(&(0x7f0000000000/0x13000)=nil, 0x13000, 0x5, 0x10, r0, 0x0, 0x0) r3 = semget$private(0x0, 0x4, 0x500) semctl$SETVAL(r3, 0x5, 0x8, &(0x7f0000000040)=0x9c41) semop(r3, &(0x7f0000001640)=[{0x0, 0x200, 0x1000}, {0x1, 0x3ff, 0x97d459a6df21fd63}, {0x2, 0x0, 0x800}], 0x3) r4 = semget(0x3, 0x0, 0xb48) semctl$GETNCNT(r4, 0x3, 0x3, &(0x7f0000000640)=""/4096) r5 = semget(0x3, 0x0, 0xb48) semctl$GETNCNT(r5, 0x3, 0x3, &(0x7f0000000640)=""/4096) r6 = semget$private(0x0, 0x3, 0x0) semop(r6, &(0x7f0000001200)=[{0x4, 0x1ff, 0x3000}, {0x1, 0xfeff, 0x1000}, {0x4, 0x5, 0x1000}], 0x3) semop(r6, &(0x7f0000000240), 0x6) semctl$SETVAL(r6, 0x0, 0x8, &(0x7f0000000000)=0x1) semop(r6, &(0x7f0000000340), 0x0) r7 = semget$private(0x0, 0x1, 0x400) semop(r7, &(0x7f0000000280), 0x4f) r8 = socket(0x11, 0x4003, 0x8) sendto$unix(r8, &(0x7f0000000000)="b10005016000009005001b0007000000050004fecea11ea8fef96ecfc73fd3357ae26caa0416fa4f376336acf00b7804be781e4991f7c8df5f882b297be1aa5b23ed00f4c8b2ca3ebbc257699a1f132e27acb5d602000d7d026ba8af63ff37282118e4fd89720fd3872babfbb770c1f5a872c881ff7cc53c894303b22f310b404f36a00f90006ee01b1257aea8c500000002000000000000020208", 0x9b, 0x3, 0x0, 0x0) r9 = dup(r8) ioctl$TIOCMBIC(r9, 0x8004746b, &(0x7f00000011c0)=0x1) getsockopt$SO_PEERCRED(r9, 0xffff, 0x1022, &(0x7f0000002600)={0x0, 0x0}, 0xfeaf) r11 = getgid() lchown(&(0x7f0000001280)='./file0\x00', r10, r11) r12 = open(&(0x7f0000000080)='./bus\x00', 0x6, 0x0) write(r12, &(0x7f0000000140)="220e228901001c067ebc74a7ea11cf801bf1fa48f4445ed5", 0x18) pwritev(r12, &(0x7f00000002c0)=[{&(0x7f0000000180), 0xff20}], 0x100000000000005e, 0x0, 0x0) getsockopt$sock_cred(r12, 0xffff, 0x1022, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) r14 = geteuid() r15 = socket(0x18, 0x1, 0x0) setsockopt(r15, 0x29, 0xb, &(0x7f0000000000)="d5ff9668", 0x4) setsockopt(r15, 0x29, 0x80000000000000c, &(0x7f0000000140)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) r16 = getpid() ktrace(&(0x7f0000000080)='./file0\x00', 0x0, 0xfcfc96ac7f78659a, r16) r17 = socket(0x11, 0x4003, 0x8) sendto$unix(r17, &(0x7f0000000000)="b10005016000009005001b0007000000050004fecea11ea8fef96ecfc73fd3357ae26caa0416fa4f376336acf00b7804be781e4991f7c8df5f882b297be1aa5b23ed00f4c8b2ca3ebbc257699a1f132e27acb5d602000d7d026ba8af63ff37282118e4fd89720fd3872babfbb770c1f5a872c881ff7cc53c894303b22f310b404f36a00f90006ee01b1257aea8c500000002000000000000020208", 0x9b, 0x8, 0x0, 0x0) r18 = dup(r17) ioctl$TIOCMBIC(r18, 0x8004746b, &(0x7f00000011c0)=0x1) getsockopt$SO_PEERCRED(r18, 0xffff, 0x1022, &(0x7f0000002600)={0x0, 0x0}, 0x3cf9) r20 = getgid() lchown(&(0x7f0000001280)='./file0\x00', r19, r20) setsockopt$sock_cred(r15, 0xffff, 0x1022, &(0x7f0000000040)={r16, 0xffffffffffffffff, r20}, 0xc) semctl$IPC_SET(r3, 0x0, 0x1, &(0x7f00000002c0)={{0x4, r10, r13, r14, r20, 0x1d4, 0x1}, 0x8, 0xbb, 0x1}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x18) rename(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='./file0\x00') 16:00:00 executing program 0: openat$wskbd(0xffffffffffffff9c, &(0x7f0000000040)='/dev/wskbd0\x00', 0x7fd, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000240)='/dev/zero\x00', 0x8, 0x0) r1 = socket(0x11, 0x3, 0x0) setsockopt$sock_int(r1, 0xffff, 0x2000, &(0x7f0000000000)=0x279ea4de, 0x4) sendto$unix(r1, &(0x7f00000000c0)="b100050400000000000008000101000000000000cea1fea7fef96ecfc73fd3357ae26caa0416fa4f376336acf00b7804be781e4991f7c8df5f882a297be1aa5b23ed00f4c8b2ca3ebbc257699a1f132e27acb5d602000d7d026ba8af63ff37282902e4fd89720fd3872babfbb770c1f5a872c881ff7cc53c894303b22f310b404f36a00f90006ee01be657aea800000002000000000000020208a371a3f800040000000000000001000000000000000000", 0xb1, 0x0, 0x0, 0x0) r2 = socket(0x19, 0x8003, 0x8007) r3 = kqueue() r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TIOCFLUSH(r4, 0x80206918, &(0x7f0000000300)) kevent(r3, &(0x7f0000000280)=[{{r2}, 0xfffffffffffffffb, 0x9, 0x21}, {{r4}, 0x8000000000000007, 0x0, 0x0, 0x81}], 0x5, 0x0, 0x0, 0x0) r5 = socket(0x11, 0x3, 0xff) setsockopt$sock_int(r5, 0xffff, 0x2000, &(0x7f0000000000)=0x279ea4de, 0x4) sendto$unix(r5, &(0x7f00000000c0)="b100050400000000000008000101000000000000cea1fea7fef96ecfc73fd3357ae26caa0416fa4f376336acf00b7804be781e4991f7c8df5f882a297be1aa5b23ed00f4c8b2ca3ebbc257699a1f132e27acb5d602000d7d026ba8af63ff37282902e4fd89720fd3872babfbb770c1f5a872c881ff7cc53c894303b22f310b404f36a00f90006ee01be657aea800000002000000000000020208a371a3f800040000000000000001000000000000000000", 0xb1, 0x0, 0x0, 0x0) r6 = socket(0x1, 0xebdcba190df76278, 0x9) pipe2(&(0x7f0000000380)={0xffffffffffffffff}, 0x10002) fcntl$dupfd(r7, 0x100000000000, r7) r8 = socket(0x19, 0x8003, 0x8007) r9 = kqueue() r10 = socket(0x2, 0x400000000002, 0x0) r11 = fcntl$dupfd(r10, 0x0, r10) ioctl$TIOCFLUSH(r11, 0x80206918, &(0x7f0000000300)) kevent(r9, &(0x7f0000000100)=[{{r8}, 0xfffffffffffffffb, 0x9}, {{r11}, 0xfffffffffffffffe, 0x1}], 0x5, 0x0, 0x0, 0x0) linkat(r7, &(0x7f00000002c0)='./file0\x00', r11, &(0x7f0000000340)='./file0\x00', 0x4) setsockopt$sock_int(r6, 0xffff, 0x2000, &(0x7f0000000000)=0x279ea4de, 0x4) sendto$unix(r6, &(0x7f00000000c0)="b100050400000000000008000101000000000000cea1fea7fef96ecfc73fd3357ae26caa0416fa4f376336acf00b7804be781e4991f7c8df5f882a297be1aa5b23ed00f4c8b2ca3ebbc257699a1f132e27acb5d602000d7d026ba8af63ff37282902e4fd89720fd3872babfbb770c1f5a872c881ff7cc53c894303b22f310b404f36a00f90006ee01be657aea800000002000000000000020208a371a3f800040000000000000001000000000000000000", 0xb1, 0x0, 0x0, 0x0) r12 = socket$unix(0x1, 0x2, 0x0) kevent(r3, &(0x7f0000000180)=[{{}, 0xfffffffffffffffe, 0x1, 0x10, 0x2, 0x1200000000}, {{r5}, 0xffffffffffffffff, 0x7423fce652e33ca7, 0x2, 0x8, 0x4000000000000}, {{r6}, 0xfffffffffffffff8, 0x1e4, 0x4, 0x5, 0xff}], 0xaa, &(0x7f0000000080)=[{{r12}, 0xfffffffffffffffd, 0x0, 0x80000000, 0x2, 0xfffffffffffffff7}], 0x80000000, &(0x7f0000000200)={0x5, 0xcf9}) dup2(r0, r1) r13 = msgget$private(0x0, 0x0) r14 = getpgid(0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r16 = accept$inet6(r15, &(0x7f0000000800), &(0x7f00000008c0)=0xc) r17 = socket$inet6(0x18, 0x4005, 0x70) r18 = fcntl$dupfd(r15, 0x0, r16) getsockopt$SO_PEERCRED(r18, 0xffff, 0x1022, &(0x7f00000001c0), 0x6a14a19ca22b4388) getsockopt$SO_PEERCRED(r17, 0xffff, 0x1022, &(0x7f0000000600), 0xc) getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f00000004c0), &(0x7f0000000480)=0x2fb) getsockopt$sock_cred(r17, 0xffff, 0x1022, &(0x7f0000000540), &(0x7f0000000580)=0xc) getpgrp() fcntl$getown(r16, 0x5) r19 = geteuid() setreuid(r19, 0x0) shmget(0x1, 0x3000, 0x4, &(0x7f0000ffa000/0x3000)=nil) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) accept$inet6(r20, &(0x7f00000003c0), &(0x7f00000008c0)=0xc) socket$inet6(0x18, 0x4005, 0x70) open(&(0x7f0000000100)='./bus\x00', 0x0, 0x0) kqueue() msgctl$IPC_SET(r13, 0x1, &(0x7f0000003f80)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xe31, r14, 0x0, 0x10001, 0x0, 0xac}) 16:00:00 executing program 1: r0 = socket(0x2, 0xc003, 0x2) connect$unix(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x10) write(r0, &(0x7f00000008c0)="87579e3f99755f4dd72b093cf17ad88324392c2c0f3f8c8e5842083f592b2c322d43be77aa37a0ce4a4c8c5a4ba4dde9190ad89a3fe8248b7f6dbb4dca523bd408471526771cc496bc53eb1516f5be5afe0a9876a23945bdca2edc937acbedfdf82e49ebee34d8dce2f189cf7f32fb6f8ea375fb41a4b1702b8838bb0d81b3eeb96352ee8461394c3e7d11a75b8b2cf023d7a4d6087b29b13b8eeae4293a23e3e2f1a36acd3cf169f7023967a10862c1ac41a1765e7c408a076dd28921904e274ea2a5d52e602a2f452d4c3f6f7f68908a5ef361c0246742208f743a241f8fd8e2f9f5d7546bc33c2d000000dc97cc239b7183ec9b5d990c09703bc8412236c09b98826d18e9fbd9bcc9d0220c738b917c8ebf8e335cca77615207276c983386c3b043a7b5c984093edd02cdc9bed31238d6b32f2affee4910f95e6c4a58ab999bdd79dab094e142ede870ce9bcc98507a767c0d8f2ab0bf49ae0695e6aa08d6dd47ef174525c211a516c0eef30dae510a1ca6d2a460a0a904892d1fcc05f677551668759383fd047305e445fdd23213d239920bd18d8e1b47f41d8e49998e2510c6bf7e9d095c2cac06e31ec13e3306e1f7dad2298d56c332f1ce90223326636d18dcf5f7154619d44a6e5a846a5b539f9601ffc1c06f6c8e7f46845d4a6ac44109fec6866f662c199c896f4870401571e930b6ecc0935a379701dd69fff82dbcd4d14993c41ef61224ac2330f6b1ceac2c40b4240a7bd9df523a34a7d84293d5d0b4b64c3a6fc70e4fa4b89d736fadc0517807e9fcf8348dc6aea9928344533971f0eff0e6bcc0bb14638b99ddcacac0228afdf15f5b2fbac3857f7ff9822726118bbbccb718e4ef4b4071a5945df748b05d4a3091a555ee69db3834619309d57f54cdb9e867276b845320d921b5593405198fd30f53a0ba123a24a6e38bb82e2b9d23c5489e48cab7da85379c51cb970932bbff93ecc34013eed69e64b358aec0493d71a619fc8644b2fbc82cd9ca539602e4fcd632cc1c980247c2fe3a2415", 0x2e1) sync() 16:00:00 executing program 1: connect$unix(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="820201f0ffffffff"], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x2, 0x1, 0x0) bind(r0, &(0x7f0000000000)=@un=@abs={0x0, 0xd}, 0x10) socket$inet(0x2, 0x4001, 0x1) r1 = socket(0x2, 0x2, 0x0) dup2(r0, r1) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x2485b, 0x0) ioctl$VT_OPENQRY(r2, 0x40047601, &(0x7f0000000080)) connect$unix(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="af43a73fbf2becfece0b1ba7eb9cb8998220120c163a79b5db44662e795590feaaac818e4d92c5f9c1b76ec8b1f60f1ae9ef46706190429ea013b7a3cda75e56dd7061ef0c90b752e5cc249a65901d8a6be625beffade84c666e6aecec9e732b9c0c083b40e85b6dbeb6261f78739ff8a10fbfef8b198eea536f7ce36f34a1c456eb95d4441da929610a3e86b1f53de887eef8ea6885dac637db7c9bbe391b96dfdd22955455125d836ee7307705844fb0cb2a9e29800b8e98463490702bcb7b9d60e399d8ba1606873cea8f48858d71c856ef0e99a4cfd657d69a91cf8427c763d12fd993d4e74de84df9c0486a19ff530690b2f28c9cf47febfd09c751646c20e0be"], 0x10) socket(0x1, 0x3, 0xca) r3 = socket(0x2, 0x10000000000003, 0x0) connect$unix(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="62020207e00000010000"], 0x10) writev(r3, &(0x7f00000001c0)=[{0x0}], 0x1) 16:00:00 executing program 0: mknod(&(0x7f0000002300)='./bus\x00', 0x80002000, 0x0) r0 = open(&(0x7f0000000280)='./bus\x00', 0x80, 0x106) syz_open_pts() kqueue() kqueue() socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)) pipe2(&(0x7f0000000540), 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)) pipe2(&(0x7f0000000600), 0x0) pipe(&(0x7f0000000280)) pipe(&(0x7f00000007c0)) pipe2(&(0x7f0000000800), 0x0) pipe(&(0x7f0000000840)) pipe(&(0x7f0000000880)) kqueue() socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000008c0)) syz_open_pts() syz_open_pts() syz_open_pts() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="28000000ffff00000100000008cd3fdf00000000", @ANYRES32=r2, @ANYRES32=r2, @ANYRES32=r2, @ANYRES32=r1, @ANYRES32=r2], 0x28}, 0x0) setrlimit(0x8, &(0x7f0000000080)) recvmsg(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=""/88, 0x58}, 0x0) acct(&(0x7f0000000000)='./bus\x00') ioctl$WSDISPLAYIO_GETSCREEN(r0, 0xc0245755, &(0x7f0000000080)={0x8000, './bus\x00', './bus\x00'}) ioctl$TIOCSFLAGS(r0, 0x8004745c, &(0x7f0000000040)) 16:00:00 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bind(r1, &(0x7f0000000240)=@un=@file={0xd80f49edce43012d, './file0\x00'}, 0xa) dup2(r1, r0) listen(r1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r3, r2) connect$unix(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="f039e900000000000000000000883a71a4630a9cd0349c96919a5ba627d42afeb69c767b636bab126ec82367e2e6bfc07a"], 0xa) r5 = kqueue() kevent(r5, &(0x7f0000000100), 0x6, 0x0, 0x9d1, &(0x7f0000000140)={0x3, 0x7fffffff}) shutdown(r0, 0x0) utimensat(r4, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={{0xffff, 0x81}, {0x6, 0xa}}, 0x0) 16:00:00 executing program 1: munmap(&(0x7f0000001000/0x2000)=nil, 0x2000) r0 = openat$vmm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/vmm\x00', 0x0, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x6, 0x0) write(r1, &(0x7f0000000140)="220e228901001c067ebc74a7ea11cf801bf1fa48f4445ed5", 0x18) pwritev(r1, &(0x7f00000002c0)=[{&(0x7f0000000180), 0xff20}], 0x100000000000005e, 0x0, 0x0) bind$inet6(r1, &(0x7f0000000000)={0x18, 0x2, 0x5, 0x6}, 0xc) ioctl$VMM_IOC_WRITEREGS(r0, 0xc5005601, &(0x7f0000000580)={0x1, 0x0, 0x1, {[0x0, 0x0, 0x0, 0x20000000, 0x200000]}}) 16:00:00 executing program 0: setrlimit(0x0, &(0x7f0000000180)) mlock(&(0x7f0000001000/0x2000)=nil, 0x2000) r0 = openat$vmm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/vmm\x00', 0x0, 0x0) ioctl$VMM_IOC_WRITEREGS(r0, 0xc5005601, &(0x7f0000000580)={0x1, 0x0, 0x1, {[0x0, 0x8, 0x0, 0x20000000, 0x200000], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000], [], [{}, {}, {0x2000}, {0x0, 0x0, 0x2}, {}, {}, {0x0, 0x1}], {0x659f}, {0x0, 0x0, 0x0, 0x5}}}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VT_SETMODE(r2, 0x80087602, &(0x7f0000000300)={0x1, 0xff, 0xf9, 0x1}) r3 = syz_open_pts() close(r3) r4 = dup(0xffffffffffffff9c) getsockname$inet(0xffffffffffffff9c, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$TIOCSETD(r4, 0x8004741b, &(0x7f0000000240)=0x80000000) ioctl$TIOCSETAF(r3, 0x802c7416, &(0x7f0000000000)={0x0, 0x3, 0x9f2f, 0x511d, "0d592fde0e5f546fc58b62c25b9d19bf96cea18a"}) ioctl$DIOCMAP(r1, 0xc0106477, &(0x7f0000000200)={&(0x7f00000001c0)='./file0\x00', 0xffffffffffffff9c}) write(r3, &(0x7f0000000140)='\r', 0x1) ioctl$TIOCSTOP(r3, 0x2000746f) getsockopt(r1, 0x7, 0xff, &(0x7f0000000040)=""/221, &(0x7f0000000140)=0xdd) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x10000) read(r1, &(0x7f00000003c0)=""/46, 0x2e) ioctl$WSDISPLAYIO_DELSCREEN(r5, 0x80085754, &(0x7f0000000380)={0x6, 0x1}) getuid() uvm_fault(0xffffffff82538f58, 0xffff800000a08000, 0, 1) -> e kernel: page fault trap, code=0 Stopped at uvm_unmap_remove+0x3eb: movq 0x100(%r15),%r15 ddb> ddb> set $lines = 0 ddb> set $maxwidth = 0 ddb> show panic kernel page fault uvm_fault(0xffffffff82538f58, 0xffff800000a08000, 0, 1) -> e uvm_unmap_remove(ffff800000a07f00,0,1000,ffff80001593bc90,0,1) at uvm_unmap_remove+0x3eb end trace frame: 0xffff80001593bd40, count: 0 ddb> trace uvm_unmap_remove(ffff800000a07f00,0,1000,ffff80001593bc90,0,1) at uvm_unmap_remove+0x3eb uvm_share(ffff800000a07f00,0,7,fffffd803f012550,20000000,200000) at uvm_share+0x55b vm_impl_init_vmx(ffff80001593fa68,ffff8000ffff2ee8) at vm_impl_init_vmx+0xf1 vm_create(ffff800000a18800,ffff8000ffff2ee8) at vm_create+0x193 VOP_IOCTL(fffffd803654a270,c5005601,ffff800000a18800,1,fffffd803f7c6840,ffff8000ffff2ee8) at VOP_IOCTL+0x88 vn_ioctl(fffffd803620cd28,c5005601,ffff800000a18800,ffff8000ffff2ee8) at vn_ioctl+0xb7 sys_ioctl(ffff8000ffff2ee8,ffff80001593c0e8,ffff80001593c130) at sys_ioctl+0x5b9 syscall(ffff80001593c1b0) at syscall+0x507 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x6890e882b00, count: -9 ddb> show registers rdi 0 rsi 0 rbp 0xffff80001593bc60 rbx 0 rdx 0x66a rcx 0xffff800016b63000 rax 0xffff800000a07f00 r8 0 r9 0x1 r10 0x3be67a26b4dc750f r11 0x481509917d4ce84b r12 0 r13 0xfffffd802e01e7f8 r14 0x1000 __ALIGN_SIZE r15 0xffff800000a07f00 rip 0xffffffff815649cb uvm_unmap_remove+0x3eb cs 0x8 rflags 0x10246 __ALIGN_SIZE+0xf246 rsp 0xffff80001593bbb0 ss 0x10 uvm_unmap_remove+0x3eb: movq 0x100(%r15),%r15 ddb> show proc PROC (syz-executor.1) pid=478577 stat=onproc flags process=0 proc=4000000 pri=86, usrpri=86, nice=20 forw=0xffffffffffffffff, list=0xffff8000ffff2780,0xffffffff82545ea8 process=0xffff8000ffff70f0 user=0xffff800015937000, vmspace=0xfffffd803f012550 estcpu=36, cpticks=1, pctcpu=0.0 user=0, sys=1, intr=0 ddb> ps PID TID PPID UID S FLAGS WAIT COMMAND 90923 522395 24543 0 2 0 syz-executor.1 *90923 478577 24543 0 7 0x4000000 syz-executor.1 24543 377702 16095 0 2 0x482 syz-executor.1 39510 272035 16095 0 2 0x2 syz-executor.0 16095 175070 2375 0 3 0x82 thrsleep syz-fuzzer 16095 356489 2375 0 3 0x4000082 nanosleep syz-fuzzer 16095 456504 2375 0 3 0x4000082 thrsleep syz-fuzzer 16095 364336 2375 0 3 0x4000082 thrsleep syz-fuzzer 16095 366780 2375 0 3 0x4000082 thrsleep syz-fuzzer 16095 114898 2375 0 3 0x4000082 thrsleep syz-fuzzer 16095 372485 2375 0 3 0x4000082 thrsleep syz-fuzzer 16095 52190 2375 0 3 0x4000082 kqread syz-fuzzer 2375 439794 92994 0 3 0x10008a pause ksh 92994 430580 81206 0 3 0x92 select sshd 19157 209290 1 0 3 0x100083 ttyin getty 81206 146083 1 0 3 0x80 select sshd 4768 478280 97952 73 3 0x100090 kqread syslogd 97952 122147 1 0 3 0x100082 netio syslogd 59827 418260 1 77 3 0x100090 poll dhclient 37483 424730 1 0 3 0x80 poll dhclient 10804 476404 0 0 2 0x14200 zerothread 31667 487615 0 0 3 0x14200 aiodoned aiodoned 99530 119186 0 0 3 0x14200 syncer update 36937 244769 0 0 3 0x14200 cleaner cleaner 54674 278057 0 0 3 0x14200 reaper reaper 78174 116903 0 0 3 0x14200 pgdaemon pagedaemon 60484 267950 0 0 3 0x14200 bored crynlk 12941 61698 0 0 3 0x14200 bored crypto 37864 377478 0 0 3 0x40014200 acpi0 acpi0 20749 415164 0 0 3 0x14200 bored softnet 21580 75726 0 0 3 0x14200 bored systqmp 14536 346847 0 0 3 0x14200 bored systq 90867 91996 0 0 3 0x40014200 bored softclock 34355 275822 0 0 3 0x40014200 idle0 84049 153568 0 0 3 0x14200 bored smr 1 262473 0 0 3 0x82 wait init 0 0 -1 0 3 0x10200 scheduler swapper ddb> show all locks No such command ddb> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 9456 6326K 6581K 78643K 10599 0 pcb 13 8K 8K 78643K 27 0 rtable 108 3K 4K 78643K 212 0 ifaddr 46 11K 11K 78643K 53 0 counters 19 16K 16K 78643K 19 0 ioctlops 1 2K 2K 78643K 16 0 iov 0 0K 16K 78643K 23 0 mount 1 1K 1K 78643K 1 0 vnodes 1218 77K 77K 78643K 1242 0 UFS quota 1 32K 32K 78643K 1 0 UFS mount 5 36K 36K 78643K 5 0 shm 2 1K 1K 78643K 2 0 VM map 3 0K 0K 78643K 3 0 sem 12 0K 1K 78643K 16 0 dirhash 12 2K 2K 78643K 12 0 ACPI 1794 195K 288K 78643K 12646 0 file desc 5 13K 25K 78643K 63 0 proc 47 38K 63K 78643K 361 0 subproc 32 2K 2K 78643K 34 0 NFS srvsock 1 0K 0K 78643K 1 0 NFS daemon 1 16K 16K 78643K 1 0 ip_moptions 0 0K 0K 78643K 5 0 in_multi 40 2K 2K 78643K 47 0 ether_multi 1 0K 0K 78643K 3 0 ISOFS mount 1 32K 32K 78643K 1 0 MSDOSFS mount 1 16K 16K 78643K 1 0 ttys 36 159K 159K 78643K 36 0 exec 0 0K 1K 78643K 181 0 pagedep 1 8K 8K 78643K 1 0 inodedep 1 32K 32K 78643K 1 0 newblk 1 0K 0K 78643K 1 0 VM swap 7 26K 26K 78643K 7 0 UVM amap 103 21K 22K 78643K 974 0 UVM aobj 5 2K 2K 78643K 5 0 memdesc 1 4K 4K 78643K 1 0 crypto data 1 1K 1K 78643K 1 0 ip6_options 0 0K 0K 78643K 12 0 NDP 6 0K 0K 78643K 11 0 temp 81 3007K 3071K 78643K 3298 0 SYN cache 2 16K 16K 78643K 2 0 ddb> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle arp 64 6 0 0 1 0 1 1 0 8 0 rtpcb 80 27 0 25 1 0 1 1 0 8 0 rtentry 112 45 0 1 2 0 2 2 0 8 0 unpcb 120 61 0 53 1 0 1 1 0 8 0 syncache 264 4 0 4 1 1 0 1 0 8 0 tcpqe 32 326 0 326 1 0 1 1 0 8 1 tcpcb 544 26 0 22 1 0 1 1 0 8 0 ipq 40 2 0 2 1 0 1 1 0 8 1 ipqe 40 6 0 6 1 0 1 1 0 8 1 inpcb 280 76 0 69 1 0 1 1 0 8 0 nd6 48 4 0 0 1 0 1 1 0 8 0 ppxss 1128 1 0 1 1 0 1 1 0 8 1 art_heap8 4096 1 0 0 1 0 1 1 0 8 0 art_heap4 256 212 0 0 14 0 14 14 0 8 0 art_table 32 213 0 0 2 0 2 2 0 8 0 art_node 16 44 0 4 1 0 1 1 0 8 0 semapl 112 12 0 2 1 0 1 1 0 8 0 shmpl 112 3 0 0 1 0 1 1 0 8 0 dirhash 1024 17 0 0 3 0 3 3 0 8 0 dino1pl 128 1468 0 65 46 0 46 46 0 8 0 ffsino 240 1468 0 65 83 0 83 83 0 8 0 nchpl 144 1741 0 126 60 0 60 60 0 8 0 uvmvnodes 72 1523 0 0 28 0 28 28 0 8 0 vnodes 208 1523 0 0 81 0 81 81 0 8 0 namei 1024 4353 0 4353 1 0 1 1 0 8 1 vmpool 520 1 0 0 1 0 1 1 0 8 0 scxspl 192 4853 0 4853 8 1 7 7 0 8 7 plimitpl 152 18 0 11 1 0 1 1 0 8 0 sigapl 432 234 0 221 2 0 2 2 0 8 0 futexpl 56 988 0 988 1 0 1 1 0 8 1 knotepl 112 63 0 44 1 0 1 1 0 8 0 kqueuepl 104 17 0 15 1 0 1 1 0 8 0 pipepl 128 186 0 167 2 0 2 2 0 8 1 fdescpl 424 235 0 221 2 0 2 2 0 8 0 filepl 120 1384 0 1288 4 0 4 4 0 8 1 lockfpl 104 13 0 12 1 0 1 1 0 8 0 lockfspl 48 6 0 5 1 0 1 1 0 8 0 sessionpl 112 17 0 7 1 0 1 1 0 8 0 pgrppl 48 17 0 7 1 0 1 1 0 8 0 ucredpl 96 157 0 150 1 0 1 1 0 8 0 zombiepl 144 221 0 221 1 0 1 1 0 8 1 processpl 864 249 0 221 4 0 4 4 0 8 0 procpl 632 290 0 254 4 0 4 4 0 8 0 sockpl 384 164 0 147 3 0 3 3 0 8 1 mcl64k 65536 3 0 3 1 0 1 1 0 8 1 mcl8k 8192 2 0 2 1 0 1 1 0 8 1 mcl4k 4096 14 0 14 2 1 1 1 0 8 1 mcl2k2 2112 1 0 1 1 0 1 1 0 8 1 mcl2k 2048 68069 0 68010 23 7 16 19 0 8 8 mtagpl 80 2 0 2 1 1 0 1 0 8 0 mbufpl 256 107860 0 107762 14 3 11 11 0 8 1 bufpl 280 6256 0 1385 349 0 349 349 0 8 0 anonpl 16 40785 0 22563 76 2 74 74 0 62 0 amapchunkpl 152 1170 0 1022 11 0 11 11 0 158 5 amappl16 192 1203 0 201 51 0 51 51 0 8 0 amappl15 184 97 0 87 1 0 1 1 0 8 0 amappl14 176 25 0 23 2 1 1 1 0 8 0 amappl12 160 5 0 4 2 1 1 1 0 8 0 amappl11 152 46 0 35 1 0 1 1 0 8 0 amappl10 144 9 0 8 1 0 1 1 0 8 0 amappl9 136 559 0 556 1 0 1 1 0 8 0 amappl8 128 119 0 93 2 0 2 2 0 8 1 amappl7 120 98 0 87 1 0 1 1 0 8 0 amappl6 112 53 0 47 1 0 1 1 0 8 0 amappl5 104 138 0 128 1 0 1 1 0 8 0 amappl4 96 444 0 417 1 0 1 1 0 8 0 amappl3 88 113 0 106 1 0 1 1 0 8 0 amappl2 80 1120 0 1047 3 1 2 3 0 8 0 amappl1 72 14044 0 13621 26 10 16 20 0 8 6 amappl 80 511 0 469 1 0 1 1 0 84 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 253 0 253 1 1 0 1 0 8 0 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 64 4 0 0 1 0 1 1 0 8 0 uaddrrnd 24 236 0 221 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 236 0 221 1 0 1 1 0 8 0 vmmpekpl 168 5833 0 5809 2 0 2 2 0 8 0 vmmpepl 168 36418 0 34311 137 10 127 127 0 357 35 vmsppl 272 234 0 221 2 0 2 2 0 8 1 pdppl 4096 478 0 442 6 0 6 6 0 8 1 pvpl 32 132040 0 110851 177 0 177 177 0 265 6 pmappl 200 235 0 221 1 0 1 1 0 8 0 extentpl 40 46 0 29 1 0 1 1 0 8 0 phpool 112 154 0 13 5 0 5 5 0 8 0