kern.securelevel: 0 -> 1 creating runtime link editor directory cache. preserving editor files. starting network daemons: sshd. starting local daemons:. Tue Feb 12 11:20:13 PST 2019 OpenBSD/amd64 (ci-openbsd-multicore-9.c.syzkaller.internal) (tty00) Warning: Permanently added '10.128.0.67' (ECDSA) to the list of known hosts. 2019/02/12 11:20:40 fuzzer started 2019/02/12 11:20:47 dialing manager at 10.128.15.235:35879 2019/02/12 11:20:47 syscalls: 1 2019/02/12 11:20:47 code coverage: enabled 2019/02/12 11:20:47 comparison tracing: enabled 2019/02/12 11:20:47 extra coverage: support is not implemented in syzkaller 2019/02/12 11:20:47 setuid sandbox: enabled 2019/02/12 11:20:47 namespace sandbox: support is not implemented in syzkaller 2019/02/12 11:20:47 Android sandbox: support is not implemented in syzkaller 2019/02/12 11:20:47 fault injection: support is not implemented in syzkaller 2019/02/12 11:20:47 leak checking: support is not implemented in syzkaller 2019/02/12 11:20:47 net packet injection: enabled 2019/02/12 11:20:47 net device setup: support is not implemented in syzkaller 11:20:51 executing program 0: chdir(&(0x7f0000000000)='./file0\x00') getgroups(0x2, &(0x7f0000000040)=[0x0, 0x0]) getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f00000000c0)=0xc) getgroups(0xa, &(0x7f0000000100)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0]) setgroups(0x3, &(0x7f0000000140)=[r0, r3, r5]) r7 = open(&(0x7f0000000180)='./file0\x00', 0x2, 0x10) getsockopt$sock_cred(r7, 0xffff, 0x1022, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0xc) setsockopt$sock_linger(r7, 0xffff, 0x80, &(0x7f0000000240)={0x3bc62c4, 0x1ff}, 0x8) getsockopt$sock_cred(r7, 0xffff, 0x1022, &(0x7f0000000280)={0x0, 0x0}, &(0x7f00000002c0)=0xc) ioctl$TIOCFLUSH(r7, 0x80047410, &(0x7f0000000300)) setsockopt$sock_cred(r7, 0xffff, 0x1022, &(0x7f0000000340)={r8, r11, r3}, 0xc) connect$unix(r7, &(0x7f0000000380)=@file={0x1, './file0\x00'}, 0xa) ioctl$KDGKBMODE(r7, 0x40044b06) r12 = open(&(0x7f00000003c0)='./file0\x00', 0x0, 0x4) linkat(r7, &(0x7f0000000400)='./file0\x00', r12, &(0x7f0000000440)='./file1\x00', 0x4) r13 = shmget$private(0x0, 0x3000, 0xb9, &(0x7f0000ffa000/0x3000)=nil) shmctl$IPC_SET(r13, 0x1, &(0x7f0000000480)={{0x7fff, r2, r6, r9, r5, 0xa, 0xfffffffffffffff8}, 0x1, 0x81, r1, r1, 0x18000000, 0x2, 0x1f}) rmdir(&(0x7f0000000500)='./file0\x00') recvfrom(r7, &(0x7f0000000540)=""/207, 0xcf, 0x801, 0x0, 0x0) utimensat(r7, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={{0x101, 0xffff}, {0x2, 0x6}}, 0x2) syz_emit_ethernet(0xdd, &(0x7f00000006c0)="2f0eaf0a0ae2d4ddd24024fb9244c9220b2ab96d95164e4ec8cc64425e5e1a8c64d4da4bc5a54b8d1873b96211c3c24b2059eea8841eab8a7b73b3d80d42f571b1658c50b568ed204fc42490ede3d0114588bf6fd3aa8bdc6ef903513312048a0d6b5ff26b4db52d56d36576d83cf8963105cad172803d6c4f2322498ff9d9e8ff1ce81f2d6c993aa3d3ff41f69963137c9b68266c3f5281d76d7dc9cf98b749ac26c68a0dd44e2e36be6ed67a7f9e4b7433a24a4f422a6fb3a1885adf5dbdfd86d01d2bb1c59fc44ffcc444c8fec03d8a12b27b54e170412a7fb4615c") setuid(r11) symlinkat(&(0x7f00000007c0)='./file1\x00', r12, &(0x7f0000000800)='./file0\x00') shmctl$IPC_SET(r13, 0x1, &(0x7f0000000840)={{0x7ff, r9, r0, r11, r4, 0x5, 0x7}, 0x10000, 0x9, r10, r8, 0x8001, 0x4, 0x1}) sendto$inet(r12, &(0x7f00000008c0)="d133d9c3537515813364c5444167fa1f73a0609e77d8860a021d4dcf77125e03f94f3371e9769d525caf2892fab376a1521c8dbfbadb3bbbca23157ad83334", 0x3f, 0x1, &(0x7f0000000900)={0x2, 0x2}, 0xc) unveil(&(0x7f0000000940)='./file1\x00', &(0x7f0000000980)='x\x00') setsockopt$sock_int(r7, 0xffff, 0x0, &(0x7f00000009c0)=0x7f, 0x4) accept$inet6(r7, &(0x7f0000000a00), &(0x7f0000000a40)=0xc) getsockopt$sock_int(r12, 0xffff, 0x1004, &(0x7f0000000a80), &(0x7f0000000ac0)=0x4) getsockopt$sock_int(r12, 0xffff, 0x1001, &(0x7f0000000b00), &(0x7f0000000b40)=0x4) 11:20:51 executing program 1: select(0x40, &(0x7f0000000000)={0x8001, 0xdc, 0x1, 0x6, 0x6, 0x6, 0x6350000000, 0x2aee91af}, &(0x7f0000000040)={0x6, 0x3f, 0x2, 0x9, 0x3, 0x1ff, 0x0, 0xfffffffffffeffff}, &(0x7f0000000080)={0x2, 0x8, 0x80000001, 0xff, 0x3, 0x1, 0x8, 0x2}, &(0x7f00000000c0)={0x3ff, 0xdcb}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCGETD(r0, 0x4004741a, &(0x7f0000000140)) ioctl$TIOCCONS(r0, 0x80047462, &(0x7f0000000180)) ioctl$TIOCOUTQ(r1, 0x40047473, &(0x7f00000001c0)=0x2) ioctl$TIOCOUTQ(r1, 0x40047473, &(0x7f0000000200)=0x4) close(r0) r2 = getegid() r3 = getgid() getsockopt$sock_cred(r1, 0xffff, 0x1022, &(0x7f0000000240)={0x0, 0x0, 0x0}, &(0x7f0000000280)=0xc) r5 = getgid() getsockopt$SO_PEERCRED(r0, 0xffff, 0x1022, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0xc) r8 = getegid() getgroups(0x6, &(0x7f0000000300)=[r2, r3, r4, r5, r7, r8]) ioctl$WSMUXIO_LIST_DEVICES(r1, 0xc1045763, &(0x7f0000000340)={0x80, [{0x3, 0x3}, {0x0, 0x8}, {0x3, 0x100000000}, {0x1, 0x7ff}, {0x1}, {0x3, 0x4000000000000}, {0x3}, {0x1, 0x90}, {0x2, 0x5}, {0x3, 0x93c}, {0x3, 0x1}, {0x1, 0x6}, {0x3, 0x4}, {0x3, 0x9}, {0x3, 0x9ad}, {0x3, 0x1}, {0x1, 0x3}, {0x3, 0x7}, {0x2, 0x9}, {0x0, 0x401}, {0x3, 0x7}, {0x1, 0x6}, {0x3, 0x1000}, {0x3, 0x689}, {0x0, 0x3}, {0xf8caeddb2db17838, 0x200}, {0x1, 0x1}, {0x1, 0x8}, {0x2, 0x9}, {0x3, 0xbcb}, {0x2, 0xffffffff}, {0x3, 0x3}]}) socket$unix(0x1, 0x2, 0x0) r15 = msgget$private(0x0, 0x100) msgsnd(r15, &(0x7f0000000480)={0x0, "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"}, 0x1008, 0x800) setgroups(0x5, &(0x7f00000014c0)=[r7, r4, r4, r3, r10]) getgroups(0xa, &(0x7f0000001500)=[r14, r10, r14, r13, r9, r11, r12, r7, r5, r2]) getsockopt$sock_int(r0, 0xffff, 0x4, &(0x7f0000001540), &(0x7f0000001580)=0x4) ioctl$WSDISPLAYIO_GMODE(r0, 0x4004574b, &(0x7f00000015c0)) setgroups(0x3, &(0x7f0000001600)=[r14, r11, r17]) setuid(r6) unveil(&(0x7f0000001640)='./file0\x00', &(0x7f0000001680)='r\x00') mknod(&(0x7f00000016c0)='./file0\x00', 0x0, 0x8b) setegid(r16) symlinkat(&(0x7f0000001700)='./file0\x00', r0, &(0x7f0000001740)='./file0\x00') setgroups(0x3, &(0x7f0000001780)=[r18, r12, r13]) unveil(&(0x7f00000017c0)='./file1\x00', &(0x7f0000001800)='W\x00') 11:20:51 executing program 0: mknod(&(0x7f00000000c0)='./bus\x00', 0x10000000002000, 0x4503) r0 = open(&(0x7f0000000140)='./bus\x00', 0x200004000e, 0x0) sendto$inet6(r0, &(0x7f0000000180)="dff45715f9204de86ea706a9140d5f19e720ddd55db93126dbddca246e2ea6fab5c280f3544d19639d2390d342d8c84c7829bd3b35e60a98cb38dd71398812eaceddcce383dd8cfb61742fde1d5da418c2645fa479d8e190fefa52097f6d22a611ab047870a7c6fc86d16ffbd48f35c1ef28", 0x72, 0xb, &(0x7f0000000000)={0x18, 0x3, 0x2, 0x8}, 0xc) ioctl$WSMUXIO_ADD_DEVICE(r0, 0x80085761, &(0x7f0000000080)={0x3}) kqueue() msgget(0x3, 0x4c3) ioctl$WSMUXIO_REMOVE_DEVICE(r0, 0x80085762, &(0x7f0000000040)={0x3}) 11:20:51 executing program 1: open$dir(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) 11:20:51 executing program 0: r0 = socket$inet(0x2, 0xc001, 0x0) clock_settime(0x0, &(0x7f0000000000)={0x2, 0xe9}) r1 = openat$tty(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty\x00', 0x30000, 0x0) ioctl$TIOCGWINSZ(r1, 0x40087468, &(0x7f0000000080)) getsockopt$inet_opts(r0, 0x0, 0x1, 0x0, 0x0) 11:20:51 executing program 1: r0 = socket$inet(0x2, 0x3, 0x102) pipe2(&(0x7f0000000080), 0x10000) shutdown(r0, 0x2) getsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f0000000000), &(0x7f0000000040)=0xc) 16:00:02 executing program 1: r0 = syz_open_pts() r1 = syz_open_pts() r2 = kqueue() kevent(r2, &(0x7f0000000000)=[{{r0}, 0xffffffffffffffff, 0xd}], 0xfdf, 0x0, 0x0, 0x0) kevent(r2, &(0x7f00000000c0), 0x6, &(0x7f0000000100)=[{{r1}, 0xfffffffffffffffe, 0x1}], 0x100, 0x0) ioctl$TIOCSTOP(r1, 0x2000746f) r3 = syz_open_pts() ioctl$TIOCSETA(r3, 0x802c7414, &(0x7f0000000080)={0x0, 0x0, 0xfffffffffffffc00, 0x0, "4e971a5fda82e1a0632c374773bab6657aa6cbb1"}) kevent(r2, 0x0, 0x0, &(0x7f0000000140), 0x9, 0x0) 16:00:02 executing program 0: mknod(&(0x7f0000000000)='./bus\x00', 0x2000, 0x4400) r0 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/wsmouse\x00', 0x3, 0x0) r1 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/wsmouse\x00', 0x0, 0x0) r2 = dup(r1) close(r0) recvfrom(r2, &(0x7f0000000180)=""/105, 0x69, 0x1, &(0x7f0000000200)=@in={0x2, 0x2}, 0xc) socket$inet(0x2, 0x7, 0x3) rmdir(&(0x7f0000000040)='./file0\x00') ioctl$VT_GETSTATE(r2, 0x40067664, &(0x7f00000002c0)) r3 = open(&(0x7f000054a000)='./bus\x00', 0x0, 0x0) open$dir(&(0x7f0000000100)='./bus\x00', 0x10, 0x20) ioctl$TIOCCONS(r2, 0x80047462, &(0x7f0000000340)=0x40) ioctl$VT_OPENQRY(r3, 0x40047601, &(0x7f0000000080)) pledge(&(0x7f0000000240)=')\x00', &(0x7f0000000280)='/dev/wsmouse\x00') close(r3) openat$null(0xffffffffffffff9c, &(0x7f0000000300)='/dev/null\x00', 0x100a0, 0x0) 16:00:02 executing program 1: mknod(&(0x7f0000000040)='./bus\x00', 0x3a0914c44f7b202c, 0x1b00) rename(&(0x7f0000000080)='./bus\x00', &(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000000)='./bus\x00', 0x3fd, 0x0) write(r0, &(0x7f00000000c0)="6349e9651b26cec43ab7a07c46be5769d7c788978d5c7c414d47ecb22e1c774446bdea84980f77876a169e5ccd0ed96f049d4b556bcbcc9083eb82feceabb05037bef49ee51741467cebcb8eea461efa64c663a416052e3a35ccce2b496c2e16357d1fd5262cd4d0119a2cff0c9f46c2d86637841d7647b6fb7d66250d7ff7aa0052b076b4abf8e6bcba3671e71ae63bf8fa05c02b24c7e05953bfc8341e90b2031ca096b9bb74fc29931539f7c5fa26e234222962f8e769a07301fe5ba399af95be7501428dbcb0a0bd192b57c5c462b424", 0xd2) socket$inet(0x2, 0x2, 0x8) execve(0x0, 0x0, 0x0) unlink(&(0x7f0000000200)='./bus\x00') close(r0) login: uvm_fault(0xfffffd807f00d000, 0x9f, 0, 2) -> e kernel: page fault trap, code=0 Stopped at wsmux_detach_sc+0xcc: movq %rcx,0(%rax) ddb{1}> ddb{1}> set $lines = 0 ddb{1}> set $maxwidth = 0 ddb{1}> show panic kernel page fault uvm_fault(0xfffffd807f00d000, 0x9f, 0, 2) -> e wsmux_detach_sc(ffff80000064dc00) at wsmux_detach_sc+204 end trace frame: 0xffff800020c30f80, count: 0 ddb{1}> trace wsmux_detach_sc(ffff80000064dc00) at wsmux_detach_sc+204 wsmouseopen(4400,11,2000,ffff800020b439e0) at wsmouseopen+233 spec_open(ffff800020c31000) at spec_open+535 VOP_OPEN(fffffd807e001a58,11,fffffd807f7c7840,ffff800020b439e0) at VOP_OPEN+118 vn_open(ffff800020c311f0,11,20) at vn_open+1222 doopenat(ffff800020b439e0,ffffff9c,20000100,10,20,ffff800020c31430) at doopenat+702 syscall(ffff800020c314e0) at syscall+1452 Xsyscall(6,0,ffffffffffffffa9,0,3,c86c69bc0d8) at Xsyscall+296 end of kernel end trace frame: 0xc8957b831a0, count: -8 ddb{1}> show registers rdi 18446744071582847145 spllower+121 rsi 1504 rbp 18446603336770850592 rbx 0 rdx 1505 rcx 18446744073709551615 rax 159 r8 18446744071593365349 setrunnable+149 r9 5 r10 4 r11 13621139637116432917 r12 18446603336221355448 r13 5984 __ALIGN_SIZE+1888 r14 18446603336227806208 r15 1 rip 18446744071589157356 wsmux_detach_sc+204 cs 8 rflags 66182 __ALIGN_SIZE+62086 rsp 18446603336770850544 ss 16 wsmux_detach_sc+204: movq %rcx,0(%rax) ddb{1}> show proc PROC (syz-executor.0) pid=144674 stat=onproc flags process=0 proc=4000000 pri=0, usrpri=67, nice=20 forw=0xffffffffffffffff, list=0xffff800020b95c30,0xffffffff8230d660 process=0xffff800020b453c0 user=0xffff800020c2c000, vmspace=0xfffffd807f00d000 estcpu=17, cpticks=0, pctcpu=0.0 user=0, sys=0, intr=0 ddb{1}> ps PID TID PPID UID S FLAGS WAIT COMMAND 97925 135707 75870 0 7 0 syz-executor.0 97925 95200 75870 0 2 0x4000000 syz-executor.0 *97925 144674 75870 0 7 0x4000000 syz-executor.0 86854 184472 71205 0 3 0x2 biowait syz-executor.1 75870 330624 71205 0 3 0x82 nanosleep syz-executor.0 71205 85899 50373 0 3 0x82 thrsleep syz-fuzzer 71205 319843 50373 0 3 0x4000082 nanosleep syz-fuzzer 71205 15987 50373 0 3 0x4000082 thrsleep syz-fuzzer 71205 142085 50373 0 3 0x4000082 kqread syz-fuzzer 71205 440490 50373 0 3 0x4000082 thrsleep syz-fuzzer 71205 259180 50373 0 3 0x4000082 thrsleep syz-fuzzer 71205 411528 50373 0 3 0x4000082 thrsleep syz-fuzzer 71205 233845 50373 0 3 0x4000082 thrsleep syz-fuzzer 71205 134182 50373 0 3 0x4000082 thrsleep syz-fuzzer 71205 506098 50373 0 3 0x4000082 thrsleep syz-fuzzer 50373 265366 92925 0 3 0x10008a pause ksh 92925 502943 52034 0 3 0x92 select sshd 6191 166435 1 0 3 0x100083 ttyin getty 52034 235268 1 0 3 0x80 select sshd 32160 215667 91613 73 2 0x100090 syslogd 91613 142178 1 0 3 0x100082 netio syslogd 68366 234157 1 77 3 0x100090 poll dhclient 75664 192996 1 0 3 0x80 poll dhclient 16768 459711 0 0 3 0x14200 pgzero zerothread 6188 266781 0 0 3 0x14200 aiodoned aiodoned 17937 267232 0 0 3 0x14200 syncer update 61015 511347 0 0 3 0x14200 cleaner cleaner 29861 391929 0 0 3 0x14200 reaper reaper 7760 111882 0 0 3 0x14200 pgdaemon pagedaemon 53109 342134 0 0 3 0x14200 bored crynlk 25938 240497 0 0 3 0x14200 bored crypto 70689 252638 0 0 3 0x40014200 acpi0 acpi0 92871 166490 0 0 3 0x40014200 idle1 2009 382233 0 0 3 0x14200 bored softnet 73358 365090 0 0 3 0x14200 bored systqmp 44758 474172 0 0 3 0x14200 bored systq 79659 433680 0 0 3 0x40014200 bored softclock 17603 188316 0 0 3 0x40014200 idle0 1 405856 0 0 3 0x82 wait init 0 0 -1 0 3 0x10200 scheduler swapper ddb{1}> show all locks Process 97925 (syz-executor.0) thread 0xffff800020b439e0 (144674) exclusive kernel_lock &kernel_lock r = 1 (0xffffffff8230eba0) locked @ /syzkaller/managers/multicore/kernel/sys/arch/amd64/amd64/trap.c:161 #0 witness_lock+1418 #1 ___mp_acquire_count+103 #2 mi_switch+944 #3 sleep_finish+272 #4 sleep_finish_all+52 #5 tsleep+444 #6 pckbc_enqueue_cmd+669 #7 pms_change_state+467 #8 pms_disable+57 #9 wsmouse_mux_close+63 #10 wsmux_detach_sc+155 #11 wsmouseopen+233 #12 spec_open+535 #13 VOP_OPEN+118 #14 vn_open+1222 #15 doopenat+702 #16 syscall+1452 #17 Xsyscall+296 Process 86854 (syz-executor.1) thread 0xffff800020b24008 (184472) exclusive rrwlock inode r = 0 (0xfffffd807df63f80) locked @ /syzkaller/managers/multicore/kernel/sys/ufs/ufs/ufs_ihash.c:140 #0 witness_lock+1418 #1 _rw_enter+1101 #2 _rrw_enter+96 #3 ufs_ihashins+103 #4 ffs_vget+317 #5 ffs_inode_alloc+451 #6 ufs_mkdir+271 #7 VOP_MKDIR+118 #8 domkdirat+301 #9 syscall+1452 #10 Xsyscall+296 exclusive rrwlock inode r = 0 (0xfffffd806a1e9c48) locked @ /syzkaller/managers/multicore/kernel/sys/ufs/ufs/ufs_vnops.c:1547 #0 witness_lock+1418 #1 _rw_enter+1101 #2 _rrw_enter+96 #3 VOP_LOCK+87 #4 vn_lock+110 #5 vfs_lookup+245 #6 namei+1202 #7 domkdirat+129 #8 syscall+1452 #9 Xsyscall+296 ddb{1}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim Kern Lim devbuf 9458 6336K 6336K 78643K 10548 0 0 pcb 23 9K 9K 78643K 53 0 0 rtable 97 3K 3K 78643K 167 0 0 ifaddr 34 9K 9K 78643K 34 0 0 counters 39 33K 33K 78643K 39 0 0 ioctlops 0 0K 2K 78643K 17 0 0 mount 1 1K 1K 78643K 1 0 0 vnodes 1199 75K 75K 78643K 1210 0 0 UFS quota 1 32K 32K 78643K 1 0 0 UFS mount 5 36K 36K 78643K 5 0 0 shm 2 1K 1K 78643K 2 0 0 VM map 2 1K 1K 78643K 2 0 0 sem 2 0K 0K 78643K 2 0 0 dirhash 12 2K 2K 78643K 12 0 0 ACPI 1792 194K 288K 78643K 12592 0 0 file desc 5 13K 21K 78643K 26 0 0 proc 40 38K 58K 78643K 258 0 0 subproc 64 65538K 67586K 78643K 68 0 0 NFS srvsock 1 0K 0K 78643K 1 0 0 NFS daemon 1 16K 16K 78643K 1 0 0 in_multi 33 2K 2K 78643K 33 0 0 ether_multi 1 0K 0K 78643K 1 0 0 ISOFS mount 1 32K 32K 78643K 1 0 0 MSDOSFS mount 1 16K 16K 78643K 1 0 0 ttys 36 159K 159K 78643K 36 0 0 exec 0 0K 1K 78643K 163 0 0 pagedep 1 8K 8K 78643K 1 0 0 inodedep 1 32K 32K 78643K 1 0 0 newblk 1 0K 0K 78643K 1 0 0 VM swap 7 26K 26K 78643K 7 0 0 UVM amap 77 20K 20K 78643K 800 0 0 UVM aobj 4 2K 2K 78643K 4 0 0 memdesc 1 4K 4K 78643K 1 0 0 crypto data 1 1K 1K 78643K 1 0 0 NDP 9 0K 0K 78643K 9 0 0 temp 81 2352K 2416K 78643K 2795 0 0 SYN cache 2 16K 16K 78643K 2 0 0 ddb{1}> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle arp 64 4 0 0 1 0 1 1 0 8 0 inpcbpl 280 32 0 25 1 0 1 1 0 8 0 plimitpl 152 14 0 7 1 0 1 1 0 8 0 plcache 128 20 0 0 1 0 1 1 0 8 0 rtentry 112 41 0 1 2 0 2 2 0 8 0 syncache 264 4 0 4 1 1 0 1 0 8 0 tcpcb 544 12 0 8 1 0 1 1 0 8 0 nd6 48 4 0 0 1 0 1 1 0 8 0 art_heap8 4096 1 0 0 1 0 1 1 0 8 0 art_heap4 256 185 0 0 12 0 12 12 0 8 0 art_table 32 186 0 0 2 0 2 2 0 8 0 art_node 16 40 0 6 1 0 1 1 0 8 0 shmpl 112 2 0 0 1 0 1 1 0 8 0 dirhash 1024 17 0 0 3 0 3 3 0 8 0 dino1pl 128 1442 0 33 46 0 46 46 0 8 0 ffsino 272 1442 0 33 95 0 95 95 0 8 0 nchpl 144 1681 0 60 61 0 61 61 0 8 0 uvmvnodes 72 1485 0 0 27 0 27 27 0 8 0 vnodes 200 1485 0 0 79 0 79 79 0 8 0 namei 1024 3974 0 3973 2 1 1 1 0 8 0 percpumem 16 30 0 0 1 0 1 1 0 8 0 scxspl 192 3960 0 3959 8 7 1 6 0 8 0 sigapl 432 194 0 181 2 0 2 2 0 8 0 futexpl 56 139 0 139 1 0 1 1 0 8 1 knotepl 112 68 0 41 2 0 2 2 0 8 1 kqueuepl 104 6 0 4 1 0 1 1 0 8 0 pipepl 112 134 0 115 2 1 1 1 0 8 0 fdescpl 488 195 0 181 3 0 3 3 0 8 1 filepl 152 977 0 879 6 1 5 5 0 8 1 lockfpl 104 7 0 6 2 1 1 1 0 8 0 lockfspl 32 4 0 3 2 1 1 1 0 8 0 sessionpl 112 17 0 7 1 0 1 1 0 8 0 pgrppl 48 17 0 7 1 0 1 1 0 8 0 ucredpl 96 66 0 59 1 0 1 1 0 8 0 zombiepl 144 181 0 181 2 1 1 1 0 8 1 processpl 840 209 0 181 4 0 4 4 0 8 0 procpl 600 236 0 197 4 0 4 4 0 8 0 sockpl 384 72 0 55 2 0 2 2 0 8 0 mcl12k 12288 1 0 0 1 0 1 1 0 8 0 mcl4k 4096 3 0 0 1 0 1 1 0 8 0 mcl2k 2048 115 0 0 14 0 14 14 0 8 0 mtagpl 80 1 0 0 1 0 1 1 0 8 0 mbufpl 256 127 0 0 8 0 8 8 0 8 0 bufpl 256 5212 0 1013 263 0 263 263 0 8 0 anonpl 16 25750 0 19030 29 1 28 28 0 125 1 amapchunkpl 152 750 0 654 5 0 5 5 0 158 0 amappl16 192 462 0 128 17 0 17 17 0 8 0 amappl15 184 2 0 0 1 0 1 1 0 8 0 amappl14 176 4 0 4 2 1 1 1 0 8 1 amappl13 168 30 0 25 1 0 1 1 0 8 0 amappl12 160 7 0 7 1 1 0 1 0 8 0 amappl11 152 185 0 175 1 0 1 1 0 8 0 amappl10 144 54 0 53 2 1 1 1 0 8 0 amappl9 136 354 0 351 1 0 1 1 0 8 0 amappl8 128 137 0 119 1 0 1 1 0 8 0 amappl7 120 38 0 32 1 0 1 1 0 8 0 amappl6 112 56 0 48 1 0 1 1 0 8 0 amappl5 104 123 0 112 1 0 1 1 0 8 0 amappl4 96 271 0 248 1 0 1 1 0 8 0 amappl3 88 130 0 122 1 0 1 1 0 8 0 amappl2 80 711 0 662 2 0 2 2 0 8 1 amappl1 72 12409 0 11991 24 6 18 19 0 8 8 amappl 72 444 0 408 1 0 1 1 0 75 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma64 64 259 0 259 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 17 0 17 1 1 0 1 0 8 0 aobjpl 64 3 0 0 1 0 1 1 0 8 0 uaddrrnd 24 195 0 181 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 195 0 181 1 0 1 1 0 8 0 vmmpekpl 168 5363 0 5343 2 0 2 2 0 8 0 vmmpepl 168 27461 0 26192 82 12 70 70 0 357 14 vmsppl 360 194 0 181 2 0 2 2 0 8 0 pdppl 4096 397 0 362 5 0 5 5 0 8 0 pvpl 32 101841 0 92157 100 4 96 96 0 265 17 pmappl 224 194 0 181 1 0 1 1 0 8 0 extentpl 40 39 0 25 1 0 1 1 0 8 0 phpool 112 407 0 3 12 0 12 12 0 8 0