kern.securelevel: 0 -> 1 creating runtime link editor directory cache. preserving editor files. starting network daemons: sshd. starting local daemons:. Mon Nov 4 10:15:18 PST 2019 OpenBSD/amd64 (ci-openbsd-main-4.c.syzkaller.internal) (tty00) Warning: Permanently added '10.128.0.111' (ECDSA) to the list of known hosts. 2019/11/04 10:15:30 fuzzer started 2019/11/04 10:15:37 dialing manager at 10.128.15.235:23864 2019/11/04 10:15:37 syscalls: 337 2019/11/04 10:15:37 code coverage: enabled 2019/11/04 10:15:37 comparison tracing: enabled 2019/11/04 10:15:37 extra coverage: support is not implemented in syzkaller 2019/11/04 10:15:37 setuid sandbox: enabled 2019/11/04 10:15:37 namespace sandbox: support is not implemented in syzkaller 2019/11/04 10:15:37 Android sandbox: support is not implemented in syzkaller 2019/11/04 10:15:37 fault injection: support is not implemented in syzkaller 2019/11/04 10:15:37 leak checking: support is not implemented in syzkaller 2019/11/04 10:15:37 net packet injection: enabled 2019/11/04 10:15:37 net device setup: support is not implemented in syzkaller 2019/11/04 10:15:37 concurrency sanitizer: support is not implemented in syzkaller 2019/11/04 10:15:37 devlink PCI setup: support is not implemented in syzkaller 10:15:42 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_timeval(r0, 0xffff, 0x1005, &(0x7f0000000040), &(0x7f0000000080)=0x10) recvmsg(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001280)=[{&(0x7f00000000c0)=""/4096, 0x1000}, {&(0x7f00000010c0)=""/235, 0xeb}, {&(0x7f00000011c0)=""/171, 0xab}], 0x3, &(0x7f00000012c0)=""/157, 0x9d}, 0x40) pipe(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}) poll(&(0x7f0000001400)=[{r1, 0x20}], 0x1, 0x7) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000001440)='/dev/zero\x00', 0x8240, 0x0) ioctl$WSMUXIO_LIST_DEVICES(r3, 0xc1045763, &(0x7f0000001480)={0x8, [{0x1}, {0x2, 0x3}, {0x1, 0x9559}, {0x3, 0xffff}, {0x2, 0x401}, {0x3, 0xcee}, {0x1}, {0x2, 0x7fff}, {0x1, 0x5}, {0x3, 0x3}, {0x3, 0x2}, {0x2, 0x2c4}, {0x3, 0x1}, {0x3, 0x31fc}, {0x3, 0x4}, {0x1, 0x200}, {0x2}, {0x2, 0x3}, {0x2, 0x1}, {0x3, 0x2}, {0x0, 0x9}, {0x1, 0xff}, {0x1, 0x1ff}, {0x2, 0x7}, {0x3, 0x7}, {0x2, 0x8}, {0x3, 0xc0}, {0x2, 0x3}, {0x0, 0x3}, {0x3, 0x7}, {0x3, 0x7}, {0x2, 0x80}]}) ioctl$TIOCSETAF(r2, 0x802c7416, &(0x7f00000015c0)={0x101, 0x4, 0x100, 0x1000, "4b8f35908775d3cb81c4a60c5d2505e5173f4f1a", 0x80000000, 0x81}) r4 = geteuid() r5 = semget$private(0x0, 0x3, 0x40) getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000001600)={0x0, 0x0, 0x0}, &(0x7f0000001640)=0xc) getgroups(0x3, &(0x7f0000001680)=[0xffffffffffffffff, 0x0, 0x0]) semctl$IPC_SET(r5, 0x0, 0x1, &(0x7f00000016c0)={{0x2669, r4, r6, 0xffffffffffffffff, r7, 0x1, 0x8000}, 0xfffffffffffffff9, 0x1000, 0x22}) r8 = openat$null(0xffffffffffffff9c, &(0x7f0000001740)='/dev/null\x00', 0x0, 0x0) ioctl$WSKBDIO_SETMODE(r8, 0x80045713, &(0x7f0000001780)=0x1) r9 = open$dir(&(0x7f00000017c0)='./file0\x00', 0x40, 0x0) writev(r9, &(0x7f0000002b00)=[{&(0x7f0000001800)="8c98bf22437aeec16512c4d4c8ab569b617c6fdcc01aa23c0678d51652ab0f56a2cf621185322f4b3d2b9551f34cd37c21ba60a35ed5905f29f6731e93ffc87921577cea3181032bfbf8572d0ed225", 0x4f}, {&(0x7f0000001880)="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", 0x1000}, {&(0x7f0000002880)="f6a9cc8e02e75e6fe450347554f94ff08b07d93da1fd5a0ad2d0fec93ade5771477113fa294d00fbd8bb84d7deb3b92c113b72bf286c79b8e7804d29abf361c0ee589e89c6a17f5f019b18b486ffe46038e923e68ad684fbf9fd54b23a70643aedf2d5b6dd0dcb5793928e00c5ec3a24cdf895867e2941c62707f9e04281de8852c254063bb073a030a32f0be5", 0x8d}, {&(0x7f0000002940)="cd83461ebebb34ffdd02d1ba18e8cb8e750670e0e98ae1d24023a18efec70b79129c66c230d5c3529fc254270bdc4589ce0fb3bcf4d2a6d75cf7c0cef8292b2a0abfb9a18f2db05968035497bbd8002b259c049a5d3898a166d2c43f175107143a57e3b588b3eb6ef2d44f", 0x6b}, {&(0x7f00000029c0)="bbfeac1c1f891184639e638607b80b76a1608093f73d32a4c552b1e8c803d0c82019fae3adbb1ce01a02c2c7eb5dc326c3625a2141617a945c51caed2353868d9615", 0x42}, {&(0x7f0000002a40)="7356bc1d0d5b41954e020b1ca8d4f661ee06d85faab9cfc814e6633039067698a73f7b1a4b9c1e33ea5ee349bf11f47ffc3061ed6081975da72f3216f1e5c5e651f9276bbc228a6595febd04a59c84d0f988f3d461a09a218fa87d7c9f337d4142bd796a8236c31e89c215640220581ba580b648d33a6094a56fea85a4cca59950be0fc01727e68a099697607dc3673c56d3170ae7", 0x95}], 0x6) ioctl$TIOCMSET(r3, 0x8004746d, &(0x7f0000002b80)=0x7) pipe(&(0x7f0000002bc0)={0xffffffffffffffff}) getsockopt$SO_PEERCRED(r10, 0xffff, 0x1022, &(0x7f0000002c00), 0xc) r11 = accept$inet(r8, &(0x7f0000002c40), &(0x7f0000002c80)=0xc) write(r11, &(0x7f0000002cc0)="acded8a4b25ff7275d62a2174165", 0xe) geteuid() r12 = dup(r2) sendmsg(r12, &(0x7f0000002ec0)={&(0x7f0000002d00)=@in6={0x18, 0x2, 0x8, 0x1}, 0xc, &(0x7f0000002d80)=[{&(0x7f0000002d40)="6280832e3a36a0d87d42d8dbbc69d760fdbdeb310fed28eec6f24ee41aeab353a08e99125a39fa981252a18564d5", 0x2e}], 0x1, &(0x7f0000002dc0)=[{0x50, 0xffff, 0x9, "dfb43aa59a86ec1b9be86ec9b654903125eea84a315cc61b056f3c5be95f272d57850ebe73e0523d6fb310885f7ef3fd3b0e979b0853d5fdb94ea78e8dddb588"}, {0x88, 0xffff, 0x1, "59f9274f52f5f60ff9b24b0edb65c8605a91aa0f529d612b177900d6e71e21c6cc8a741fb23f186e780747b73b8af0faa2c5c9f8c1f271bad13850ce010a7cc488cf170f93370a5ac93674ff876460603e54c1c3031f5e62d2e47030786606870203a2ec7027f421fa20f0ab0bbd59e0942b2d81d3c9"}], 0xd8}, 0x8) fcntl$setflags(0xffffffffffffff9c, 0x2, 0x1) ioctl$KDGETLED(0xffffffffffffff9c, 0x40044b41, &(0x7f0000002f00)=0x1) r13 = openat$wsmuxkbd(0xffffffffffffff9c, &(0x7f0000002f40)='/dev/wskbd\x00', 0x100, 0x0) r14 = geteuid() getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000002f80)={0x0, 0x0, 0x0}, 0xc) fchown(r13, r14, r15) 10:15:42 executing program 1: ioctl$WSDISPLAYIO_SBURNER(0xffffffffffffffff, 0x800c5751, &(0x7f0000000000)={0x8000, 0x4, 0xa}) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x200, 0x0) ioctl$WSDISPLAYIO_SMODE(r0, 0x8004574c, &(0x7f0000000080)=0x2) socket(0x5120b509006abef5, 0xc001, 0x6) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x8) ioctl$VMM_IOC_CREATE(r1, 0xc5005601, &(0x7f0000000100)={0x10, 0x8, 0x4, 0x4, [{&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x4}, {&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x3}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x9}, {&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, 0x3}, {&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x6}, {&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil}, {&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x7ff}, {&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x1}, {&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x8001}, {&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x9}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x9}, {&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil}, {&(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff9000/0x1000)=nil, 0x80}, {&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0xff}, {&(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x7fff}, {&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x7}], ['./file0\x00', './file0\x00', './file0\x00', './file0\x00'], './file0\x00', './file0\x00', './file0\x00', ['./file', './file', './file', './file'], 0x3}) unlink(&(0x7f0000000600)='./file0\x00') symlink(&(0x7f0000000640)='./file\x00', &(0x7f0000000680)='./file0\x00') fcntl$getown(r1, 0x5) r3 = openat$speaker(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/speaker\x00', 0x80, 0x0) r4 = openat$vmm(0xffffffffffffff9c, &(0x7f0000000700)='/dev/vmm\x00', 0x7873a01904864f92, 0x0) r5 = fcntl$dupfd(r3, 0x5, r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$unix(r6, &(0x7f0000000780)=""/145, 0x91, 0x42, &(0x7f0000000840)=@abs={0x0, 0x0, 0x1}, 0x8) open$dir(&(0x7f0000000880)='./file0\x00', 0x1, 0x40) r7 = openat$vmm(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/vmm\x00', 0xbaad2b4d6685aec8, 0x0) fcntl$getown(r7, 0x5) r8 = socket$inet6(0x18, 0x3, 0x80) getsockopt$sock_timeval(r8, 0xffff, 0x1005, &(0x7f0000000900), &(0x7f0000000940)=0x10) getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000980)={0x0, 0x0, 0x0}, 0xc) setgid(r9) r10 = open(&(0x7f00000009c0)='./file0\x00', 0x80, 0x80) fchflags(r10, 0x0) ioctl$WSDISPLAYIO_DELFONT(r2, 0x8058574f, &(0x7f0000000a00)={'./file0\x00', 0xb7b, 0xff, 0x5, 0x1, 0x10000, 0x1, 0xfffffff8, 0x2, 0x3, 0x81, 0x8}) r11 = shmget(0x1, 0x3000, 0x411, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_LOCK(r11, 0x3) r12 = dup(r5) ioctl$TIOCSETAW(r12, 0x802c7415, &(0x7f0000000a80)={0x78cc, 0x5, 0xfdf5, 0xfffffff7, "933ab2e73aaee477b0435b7dea7ae94bc8c8bb8a", 0xffffffff}) execve(&(0x7f0000000ac0)='./file0\x00', &(0x7f0000000bc0)=[&(0x7f0000000b00)='\x00', &(0x7f0000000b40)='/dev/vmm\x00', &(0x7f0000000b80)='/dev/vmm\x00'], &(0x7f0000000c80)=[&(0x7f0000000c00)='/dev/zero\x00', &(0x7f0000000c40)='({,%^\x00']) r13 = dup(r10) getsockname$unix(r13, &(0x7f0000000cc0)=@abs, &(0x7f0000000d00)=0x8) login: pckbd_enable: command error 10:15:43 executing program 1: socket(0x800000018, 0x0, 0x0) r0 = msgget(0x2, 0x8) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x10002) r3 = open(&(0x7f0000000100)='.\x00', 0x0, 0x0) mknod(&(0x7f0000000000)='./bus\x00', 0x100000000204f, 0x0) sendto(0xffffffffffffffff, &(0x7f0000000280)="7cd0a3f23f51b7e025723147b1bef929ee6cce8fde919ab0fe76c098f4c362443ad7d582a60e18e18c877e", 0x2b, 0x4, 0x0, 0x0) r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0xd4) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x11, r3, 0x0, 0x8000000000000000) ioctl$TIOCSETAW(r4, 0x802c7415, &(0x7f00000000c0)={0x3, 0x40000000, 0x0, 0x0, "1f2eb1223f8853e21d91193e74c6ffec83e94e1f", 0xffff, 0x7}) fchmod(r2, 0x4) pipe(&(0x7f0000000140)) ioctl$TIOCSETAF(0xffffffffffffffff, 0x802c7416, 0x0) msgget$private(0x0, 0x10000004) getsockopt$SO_PEERCRED(r4, 0xffff, 0x1022, &(0x7f00000001c0)={0x0, 0x0}, 0xfffffdd4) r7 = socket(0x18, 0x1, 0x0) setsockopt(r7, 0x29, 0x9, &(0x7f00000000c0)="03000000", 0x4) setsockopt(r7, 0x29, 0x80000000000000a, &(0x7f0000000000), 0x203) r8 = msgget(0x2, 0x367) r9 = openat$vmm(0xffffffffffffff9c, &(0x7f0000001440)='/dev/vmm\x00', 0x0, 0x0) ioctl$VMM_IOC_TERM(r9, 0xc0205602, &(0x7f0000001480)) r10 = openat$vmm(0xffffffffffffff9c, &(0x7f0000001440)='/dev/vmm\x00', 0x0, 0x0) ioctl$VMM_IOC_TERM(r10, 0xc0205602, &(0x7f0000001480)) r11 = openat$vmm(0xffffffffffffff9c, &(0x7f0000001440)='/dev/vmm\x00', 0x0, 0x0) ioctl$VMM_IOC_TERM(r11, 0xc0205602, &(0x7f0000001480)) r12 = openat$vmm(0xffffffffffffff9c, &(0x7f0000001440)='/dev/vmm\x00', 0x0, 0x0) ioctl$VMM_IOC_TERM(r12, 0xc0205602, &(0x7f0000001480)) r13 = openat$vmm(0xffffffffffffff9c, &(0x7f0000001440)='/dev/vmm\x00', 0x0, 0x0) ioctl$VMM_IOC_TERM(r13, 0xc0205602, &(0x7f0000001480)) r14 = openat$vmm(0xffffffffffffff9c, &(0x7f0000001440)='/dev/vmm\x00', 0x0, 0x0) ioctl$VMM_IOC_TERM(r14, 0xc0205602, &(0x7f0000001480)) r15 = openat$vmm(0xffffffffffffff9c, &(0x7f0000001440)='/dev/vmm\x00', 0x0, 0x0) ioctl$VMM_IOC_TERM(r15, 0xc0205602, &(0x7f0000001480)) r16 = openat$vmm(0xffffffffffffff9c, &(0x7f0000001440)='/dev/vmm\x00', 0x0, 0x0) ioctl$VMM_IOC_TERM(r16, 0xc0205602, &(0x7f0000001480)) msgsnd(r8, &(0x7f0000000480)=ANY=[@ANYRES16=r5, @ANYRES32=r1, @ANYRESHEX=r9, @ANYBLOB="e12b4689675d947b01f7d34c4beadbe1e6c88ab4a45220c36806a8343f16d09cfdf19d080f82ac8087d1f0f29ad854be140eee0653643fdba8e5bb32722a35e15a5f0d47e3a7f7", @ANYPTR64, @ANYRESDEC=r7, @ANYPTR=&(0x7f0000001600)=ANY=[@ANYPTR64, @ANYPTR64=&(0x7f0000001500)=ANY=[@ANYRES64=0x0, @ANYRES32=0x0, @ANYRES32=r6, @ANYRES32=0x0, @ANYRES16=r10, @ANYRESOCT, @ANYRES64=r2, @ANYRES32, @ANYPTR64], @ANYRES16=r12, @ANYPTR64=&(0x7f0000000540)=ANY=[@ANYRES32=r16, @ANYRES16=r15, @ANYPTR64, @ANYBLOB="ab8de55816d4c715c5e47cd7d61e95bd458511f57c20474c39ee720b5d73b8771f1c2bb2abdf0e53b0dbf69574bd1304792d2caf62f5f32afd229d1282286695ecc850fac7fb7b5155bd093b74875f77212e96f12d146d825088a83faab6fe7985e2beaeb20e89a9b3ead11abfdc9d73fd18238a380d893a7acb9edc187dae09d2e09a57c21d893eb5a50e8af9e495f215e89eedd7c51bc937d27400574883e24a857f253c9487359c7be6d67e5abe2a36841eb1173c479f2453d0c783c2bbe08a243dc660f245ff8d57aec424800c416e3bc4a59c278c68eebc26a8ab42286495e820451b901bed"], @ANYRESHEX, @ANYPTR=&(0x7f0000000440)=ANY=[@ANYRES32=r6, @ANYRES64=r0], @ANYRES16=r13, @ANYRESDEC=0x0, @ANYRES16=r14, @ANYRES32=0x0]], 0x7, 0x800) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) open$dir(&(0x7f0000000240)='./bus\x00', 0x20000, 0x114) r17 = socket(0x18, 0x2, 0x0) chdir(&(0x7f0000000200)='./file0\x00') r18 = openat$diskmap(0xffffffffffffff9c, &(0x7f0000000180)='/dev/diskmap\x00', 0x2, 0x0) dup2(r4, r18) setsockopt(r17, 0x29, 0x20000003b, &(0x7f0000000040)="f5ff1200", 0x4) r19 = msgget$private(0x0, 0x240) semget(0x1, 0x0, 0x300) r20 = semget$private(0x0, 0x3, 0x10200) semget$private(0x0, 0x6, 0x10) r21 = semget$private(0x0, 0x3, 0x10200) semop(r21, &(0x7f00000000c0)=[{0x0, 0x1}, {0x0, 0x7fffffff, 0x40000000000800}], 0x2) semctl$GETALL(r21, 0x0, 0x6, &(0x7f0000000040)=""/73) semop(r21, &(0x7f0000000400)=[{0x2, 0x5, 0x1c00}, {0x0, 0x3}, {0x1, 0x40, 0x800}, {0x0, 0xb83, 0x1000}], 0x4) semctl$GETALL(r20, 0x0, 0x6, &(0x7f0000000040)=""/73) semctl$GETVAL(r20, 0x2, 0x5, &(0x7f00000002c0)=""/185) msgsnd(r19, &(0x7f0000000000)=ANY=[], 0x0, 0x800) msgrcv(r19, &(0x7f0000002b00)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ee0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b7defa76069800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea40e591a851396a3b177b4a451c3c49f2b8c3eab297dfd946fd4f4be627d3156d286cd5ad35a5accdf1536decd5aef60f940a6c09"], 0x676, 0x0, 0x800) 10:15:43 executing program 0: recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0xa, &(0x7f00000008c0)=""/87, 0x57}, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x80002005, 0x2d94) open$dir(&(0x7f0000000040)='./file0\x00', 0x20840, 0x0) r0 = open(&(0x7f0000001700)='./file0\x00', 0x400000002, 0x0) pwritev(r0, &(0x7f00000002c0)=[{&(0x7f0000000180), 0xff20}], 0x100000000000005e, 0x0, 0x0) 10:15:43 executing program 1: r0 = kqueue() r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, r1, 0x0, 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x2010, r1, 0x0, 0x3) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x10, r1, 0x0, 0x0) mprotect(&(0x7f0000ff6000/0x9000)=nil, 0x9000, 0x2) mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mlock(&(0x7f0000ffa000/0x2000)=nil, 0x2000) munmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000) connect$inet(r1, &(0x7f0000000000)={0x2, 0x3}, 0xc) r2 = open(&(0x7f0000000080)='./bus\x00', 0x2, 0x0) write(r2, &(0x7f00000000c0)="220e228901001c067ebc74a7ea11cf801bf1fa48f4445e", 0x17) ktrace(0x0, 0x1, 0x40000a00, 0x0) pmap_unwire: wiring for pmap 0xfffffd803f012960 va 0x20ffb000 didn't change! pmap_unwire: wiring for pmap 0xfffffd803f012960 va 0x20ffc000 didn't change! pmap_unwire: wiring for pmap 0xfffffd803f012960 va 0x20ffd000 didn't change! 10:15:43 executing program 0: setrlimit(0x6, &(0x7f0000000180)) r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x10202, 0x0) syz_open_pts() ioctl$TIOCSETAF(0xffffffffffffffff, 0x802c7416, &(0x7f0000000000)={0x0, 0x7fff, 0xfffffffffffffff8, 0xfffffffffffffffc, "641fbef2245185a8186503182eab7fff0e091fe6", 0x1}) r1 = syz_open_pts() ioctl$TIOCSETAF(r1, 0x802c7416, &(0x7f0000000000)={0x0, 0x7fff, 0xfffffffffffffff8, 0xfffffffffffffffc, "661fbef2245185a8186503182eab7fff0e091fe6"}) mmap(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x1, 0x6012, r1, 0x0, 0x20) pwritev(r0, &(0x7f0000000040)=[{&(0x7f0000000100)="dc", 0xfffffffffffffcdf}], 0x1, 0x0, 0x6) r2 = socket(0x18, 0x1, 0x0) fcntl$setflags(r2, 0x2, 0x1) getsockopt$SO_PEERCRED(r2, 0xffff, 0x1022, &(0x7f0000000000)={0x0, 0x0}, 0xc) setreuid(r3, 0xee01) r4 = socket(0x18, 0x2, 0x3) setsockopt$sock_timeval(r4, 0xffff, 0x1006, &(0x7f0000000000)={0x0, 0x2}, 0x10) r5 = geteuid() r6 = getuid() r7 = getpid() ktrace(&(0x7f0000000040)='./file0\x00', 0x0, 0x1104, r7) fcntl$lock(r4, 0x7, &(0x7f00000002c0)={0x3, 0x0, 0x9, 0x101, r7}) setreuid(r5, r6) r8 = shmget$private(0x0, 0x1000, 0x40, &(0x7f0000ffe000/0x1000)=nil) r9 = socket(0x18, 0x1, 0x0) fcntl$setflags(r9, 0x2, 0x1) getsockopt$SO_PEERCRED(r9, 0xffff, 0x1022, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0xc) setreuid(r11, 0xee01) r13 = msgget$private(0x0, 0x4) msgctl$IPC_SET(r13, 0x1, &(0x7f0000000240)={{0x7, r11, r12, r11, r12, 0x2, 0x2}, 0x5, 0x58, r10, r10, 0x9a8, 0x15, 0x3f, 0xfcc}) r14 = socket(0x18, 0x1, 0x0) fcntl$setflags(r14, 0x2, 0x1) r15 = socket(0x11, 0x4003, 0x0) sendto$unix(r15, &(0x7f00000000c0)="b100050460000000000008000a01000000000000cea1fea7fef96ecfc73fd3357ae26caa0416fa4f376336acf00b7804be781e4991f7c8df5f882b297be1aa5b23ed00f4c8b2ca3ebbc257699a1f132e27acb5d602000d7d026ba8af63ff37282921e4fd89720fd3872babfbb770c1f5a872c881ff7cc53c894303b22f310b404f36a00f90006ee01be608a371a3f800040000000000000001000000000000000000000000000000000001000000000000", 0xb1, 0x0, 0x0, 0x0) getsockopt$SO_PEERCRED(r15, 0xffff, 0x1022, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0xe) setreuid(r17, 0xee01) r19 = msgget$private(0x0, 0x4) msgctl$IPC_SET(r19, 0x1, &(0x7f0000000240)={{0x7, r17, r18, r17, r18, 0x2, 0x2}, 0x5, 0x54, r16, r16, 0x9a8, 0x15, 0x3f, 0xfcc}) r20 = getpid() ktrace(0x0, 0xd062682ede22335d, 0x10012, r20) shmctl$IPC_SET(r8, 0x1, &(0x7f0000000080)={{0x5, r6, r12, r6, r18, 0x1b1, 0x2}, 0x8001, 0x3, r7, r20, 0x100000000, 0x5, 0x3}) r21 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x0, 0x0) close(r21) getdents(r21, 0x0, 0x0) getsockopt$SO_PEERCRED(r21, 0xffff, 0x1022, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0xc) setregid(r12, r22) r23 = socket(0x18, 0x2, 0x0) setsockopt$sock_timeval(r23, 0xffff, 0x1006, &(0x7f0000000000)={0x0, 0x2}, 0x10) r24 = geteuid() r25 = getuid() r26 = getpid() ktrace(&(0x7f0000000040)='./file0\x00', 0x0, 0x1104, r26) fcntl$lock(r23, 0x7, &(0x7f00000002c0)={0x3, 0x0, 0x9, 0x101, r26}) setreuid(r24, r25) r27 = shmget$private(0x0, 0x1000, 0x40, &(0x7f0000ffe000/0x1000)=nil) r28 = socket(0x18, 0x1, 0x0) fcntl$setflags(r28, 0x2, 0x1) getsockopt$SO_PEERCRED(r28, 0xffff, 0x1022, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0xc) r32 = geteuid() setreuid(r30, r32) r33 = msgget$private(0x0, 0x4) msgctl$IPC_SET(r33, 0x1, &(0x7f0000000240)={{0x7, r30, r31, r30, r31, 0x2, 0x2}, 0x5, 0x54, r29, r29, 0x9a8, 0x15, 0x3f, 0xfcc}) r34 = socket(0x18, 0x1, 0x0) fcntl$setflags(r34, 0x2, 0x1) getsockopt$SO_PEERCRED(r34, 0xffff, 0x1022, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0xc) setreuid(r36, 0xee01) r38 = msgget$private(0x0, 0x4) msgctl$IPC_SET(r38, 0x1, &(0x7f0000000240)={{0x7, r36, r37, r36, r37, 0x2, 0x2}, 0x5, 0x54, r35, r35, 0x9a8, 0x15, 0x3f, 0xfcc}) r39 = getpid() ktrace(0x0, 0xd062682ede22335d, 0x10012, r39) shmctl$IPC_SET(r27, 0x1, &(0x7f0000000080)={{0x5, r25, r31, r25, r37, 0x1b1, 0x2}, 0x8001, 0x3, r26, r39, 0x100000000, 0x5, 0x3}) r40 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x0, 0x0) close(r40) getdents(r40, 0x0, 0x0) getsockopt$SO_PEERCRED(r40, 0xffff, 0x1022, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0xc) setregid(r31, r41) r42 = socket(0x18, 0x2, 0x0) setsockopt$sock_timeval(r42, 0xffff, 0x1006, &(0x7f0000000000)={0x0, 0x2}, 0x10) r43 = geteuid() r44 = getuid() r45 = getpid() ktrace(&(0x7f0000000040)='./file0\x00', 0x0, 0x1104, r45) fcntl$lock(r42, 0x7, &(0x7f00000002c0)={0x3, 0x0, 0x9, 0x101, r45}) setreuid(r43, r44) shmget$private(0x0, 0x1000, 0x40, &(0x7f0000ffe000/0x1000)=nil) r46 = socket(0x18, 0x1, 0x0) fcntl$setflags(r46, 0x2, 0x1) getsockopt$SO_PEERCRED(r46, 0xffff, 0x1022, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0xc) setreuid(r48, 0xee01) r50 = msgget$private(0x0, 0x4) msgctl$IPC_SET(r50, 0x1, &(0x7f0000000240)={{0x7, r48, r49, r48, r49, 0x2, 0x2}, 0x5, 0x54, r47, r47, 0x9a8, 0x15, 0x3f, 0xfcc}) fcntl$setflags(0xffffffffffffffff, 0x2, 0x1) getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000000), 0xc) msgget$private(0x0, 0x4) mlockall(0x1) 10:15:43 executing program 1: mknod(&(0x7f0000000080)='./bus\x00', 0x2000, 0x86138) kevent(0xffffffffffffffff, &(0x7f0000000180)=[{{}, 0x0, 0x0, 0x40000029}], 0x0, 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x2, 0x0) write(r0, &(0x7f0000000040)="510fc3a0", 0x4) pwritev(r0, &(0x7f00000002c0)=[{&(0x7f0000000180), 0xff20}], 0x100000000000005e, 0x0, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x2, 0x0) ioctl$WSMUXIO_INJECTEVENT(r1, 0x80185760, &(0x7f0000000180)) r2 = open(&(0x7f0000000080)='./bus\x00', 0x2, 0x0) ioctl$WSMUXIO_INJECTEVENT(r2, 0x80185760, &(0x7f0000000180)) linkat(r1, &(0x7f00000000c0)='./bus\x00', r2, &(0x7f0000000100)='./bus\x00', 0x4) pmap_unwire: wiring for pmap 0xfffffd803f012960 va 0x20ffa000 didn't change! pmap_unwire: wiring for pmap 0xfffffd803f012960 va 0x20ffb000 didn't change! pmap_unwire: wiring for pmap 0xfffffd803f012960 va 0x20ffc000 didn't change! pmap_unwire: wiring for pmap 0xfffffd803f012960 va 0x20ffd000 didn't change! pmap_unwire: wiring for pmap 0xfffffd803f012960 va 0x20ffa000 didn't change! 10:15:44 executing program 0: openat$bpf(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bpf\x00', 0x200, 0x0) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000cc0)='/dev/\x00\x00\x00\x00use0\x00', 0x0, 0x0) dup2(r1, r0) fchdir(r0) r2 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0) mkdirat(r2, &(0x7f0000000040)='./file2\x00', 0x0) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r4 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000cc0)='/dev/\x00\x00\x00\x00use0\x00', 0x0, 0x0) dup2(r4, r3) r5 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0) renameat(r3, &(0x7f00000000c0)='./file2\x00', r5, &(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00') renameat(r5, &(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r2, &(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00') 10:15:44 executing program 1: r0 = syz_open_pts() fcntl$lock(0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x9430885e1ae86710, 0x20000000c79, 0x100000001}) flock(r0, 0x2) r1 = socket(0x2, 0x2, 0x0) getsockopt$sock_cred(r1, 0xffff, 0x1022, &(0x7f0000000140)={0x0}, &(0x7f0000000180)=0xc) fcntl$lock(r0, 0x9, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x100000000, r2}) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x4d2, 0x0) getsockname(r3, &(0x7f00000000c0)=@in6, &(0x7f0000000100)=0xc) r4 = openat$vmm(0xffffffffffffff9c, &(0x7f0000001440)='/dev/vmm\x00', 0x0, 0x0) ioctl$VMM_IOC_TERM(r4, 0xc0205602, &(0x7f0000001480)) r5 = dup2(0xffffffffffffffff, r4) ioctl$WSDISPLAYIO_GMODE(r5, 0x4004574b, &(0x7f00000001c0)) 10:15:44 executing program 0: r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bpf\x00', 0x0, 0x0) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x28, 0x4}, {0x5c}, {0x6}]}) r1 = socket(0x2, 0x2, 0x0) bind(r1, &(0x7f0000000000)=@un=@abs={0x0, 0xd}, 0x10) connect$unix(r1, &(0x7f00000000c0)=@abs={0x1, 0x0, 0x3}, 0x8) ioctl$BIOCSHDRCMPLT(r0, 0x80044275, &(0x7f0000000140)=0x81) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000040)={'tap', 0x0}) syz_emit_ethernet(0xd, &(0x7f0000001680)="905d86cd66b785843786cfce85") 10:15:44 executing program 0: ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x2, &(0x7f0000000240)=[{}, {0x0, 0xfffffffffffffffe, 0x1f}]}) r0 = socket(0x18, 0x1, 0x0) close(r0) r1 = socket(0x18, 0x400000002, 0x0) accept$inet6(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000240)=0x2b) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x0, 0x3}}) ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f00000000c0)={0x0, 0x0, 0x1ff, 0x0, "000000000000000100002000"}) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) r2 = socket(0x2, 0x5, 0x0) bind(r2, &(0x7f0000000000)=@un=@abs={0x0, 0xd}, 0x10) r3 = accept$unix(r2, &(0x7f0000000140)=@file={0x0, ""/13}, &(0x7f0000000180)=0xf) writev(r3, &(0x7f0000000200), 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) close(r1) socket(0x400000000018, 0x3, 0x3a) r4 = openat$tty(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty\x00', 0x20000, 0x0) ioctl$TIOCGWINSZ(r4, 0x40087468, &(0x7f0000000100)) setsockopt(r1, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) connect$unix(r0, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) write(r1, &(0x7f0000000180), 0x13c) 10:15:44 executing program 0: ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f00000002c0)={0x0, [{}, {}, {0x1000002}]}) r0 = open(&(0x7f0000000080)='./file0\x00', 0x200, 0x0) preadv(0xffffffffffffffff, &(0x7f00000004c0)=[{&(0x7f00000001c0)=""/247, 0xffffffca}], 0x1000000000000330, 0x0, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x2, 0x0) r2 = semget(0x3, 0x3, 0x32) semop(r2, &(0x7f0000000000)=[{0x2, 0x5, 0xf7984c3aa7776d1}, {0x3, 0x20, 0x1000}], 0x2) ioctl$WSMUXIO_INJECTEVENT(r1, 0x80185760, &(0x7f0000000180)) ioctl$WSDISPLAYIO_LDFONT(r1, 0x8058574d, &(0x7f0000000140)={'./file0\x00', 0x6, 0x0, 0x3, 0x1, 0x0, 0x3e, 0xfffc0000, 0x2, 0x3, 0x40, 0x8001}) r3 = open(&(0x7f0000000040)='./file0\x00', 0x611, 0x0) pwritev(r3, &(0x7f00000003c0), 0x273, 0x0, 0x0) r4 = open(&(0x7f0000000080)='./bus\x00', 0x2, 0x0) ioctl$WSMUXIO_INJECTEVENT(r4, 0x80185760, &(0x7f0000000180)) ioctl$WSDISPLAYIO_DELFONT(r4, 0x8058574f, &(0x7f0000000400)={'./file0\x00', 0x7, 0x9, 0x80000000, 0x1, 0x6, 0x7fffffff, 0x9, 0x0, 0xb8eb989db1f1d280, 0x80, 0x6}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10, r0, 0x0, 0x0) fcntl$lock(r3, 0x8, &(0x7f0000000100)) 10:15:45 executing program 1: r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080)='/dev/bpf\x00', 0x0, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000200)={'tap', 0x0}) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f00000000c0)={0x4, &(0x7f00000001c0)=[{0x10001, 0x0, 0x0, 0x8000000000001f}, {0x3d, 0x0, 0x3}, {0x3c}, {0x4406}]}) r1 = open(&(0x7f0000000080)='./bus\x00', 0x2, 0x0) ioctl$WSMUXIO_INJECTEVENT(r1, 0x80185760, &(0x7f0000000180)) r2 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/wsmouse0\x00', 0x10, 0x0) ftruncate(r2, 0x0, 0xffffffff) ioctl$KDSETRAD(r1, 0x20004b43) syz_emit_ethernet(0xe2, &(0x7f0000000100)="b6") 10:15:45 executing program 0: nanosleep(&(0x7f0000000000)={0x8005, 0x2000000000020000}, &(0x7f00000000c0)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r0 = shmget$private(0x0, 0x1000, 0x11, &(0x7f0000ffc000/0x1000)=nil) r1 = shmat(r0, &(0x7f0000ffc000/0x1000)=nil, 0x0) shmdt(r1) openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/wsmouse0\x00', 0x80, 0x0) shmdt(r1) execve(0x0, 0x0, 0x0) 10:15:45 executing program 0: ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f00000000c0)={0x0, 0x0, 0x208001ff, 0x0, "b000"}) socketpair$unix(0x1, 0x2d6eb8363e6a435, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r1 = socket(0x18, 0x4003, 0x0) connect$unix(r1, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) r2 = dup2(r1, r0) setsockopt$sock_int(r0, 0xffff, 0x1001, &(0x7f0000000000)=0x43cbc, 0x4) ioctl$TIOCSBRK(r2, 0x2000747b) r3 = dup(r0) r4 = syz_open_pts() r5 = open$dir(&(0x7f0000000380)='./bus/file0\x00', 0x200, 0x20) flock(0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r7 = dup2(r6, r6) shutdown(r7, 0x1) ioctl$WSDISPLAYIO_WSMOUSED(r7, 0x80185758, &(0x7f0000000300)={0x7fff800, 0x8000, {0x2, 0x6}}) write(r5, &(0x7f0000000140)='W', 0x1) setsockopt(r2, 0x4, 0x8, &(0x7f00000001c0)="cde30d93a1031aa3a7bcbb35276d99b55cdab0c5516b40d32cd45fc931b76f17897b2a3a31c695b2945ad55a067a5705774d6325d19cdc4632239caebd1df292070a1e7a7818c1973614483ce7fa1cdc3b7e9ca542729fe7e7a8d34aebb7444078153e71e50b1e7f3d90123f6d316d2912e2b666742981767f20037cdf46634ba32a81efb08b5c7bd5c42349bb7e54318329cf5a24e1b549873fd4213f40470425ec1452063aea4bdafb7ba34d99e78f9475891798c2bef71e019952ad46b9e09bd87abac3a240fa2cccbc9c14dc388f72c76d0976a4cf3acbe04d9f7dc62d9e923e5b78fa1527392d", 0xe9) ftruncate(r5, 0x0, 0x30000) dup2(r4, r5) r8 = syz_open_pts() lseek(r8, 0x0, 0x4c19c4870b7c4c8a, 0x0) r9 = open(&(0x7f0000000000)='./bus\x00', 0x2, 0x0) ioctl$TIOCFLUSH(r9, 0x8028698c, &(0x7f00000000c0)) ioctl$VMM_IOC_INTR(r9, 0x800c5606, &(0x7f0000000040)={0x4, 0x2, 0x6}) fcntl$lock(r8, 0x9, &(0x7f0000000180)={0x0, 0x0, 0xfffffffffffff476, 0x1000100000000}) ioctl$TIOCNOTTY(r8, 0x20007471) ioctl$TIOCFLUSH(r4, 0x80047410, &(0x7f0000000340)=0x8000082) openat$bpf(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bpf\x00', 0x0, 0x0) sendto$inet6(r3, &(0x7f0000000040), 0x43000, 0x0, 0x0, 0x0) r10 = socket(0x2, 0xc003, 0x2) setsockopt(r10, 0x0, 0x64, &(0x7f0000000000)="01000000", 0x4) close(r10) 10:15:45 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bind(r1, &(0x7f0000000240)=@un=@file={0xd80f49edce43012d, './file0\x00'}, 0xa) dup2(r1, r0) listen(r1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r3, r2) connect$unix(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="00012e2f66696c653000"], 0xa) r5 = open(&(0x7f0000000080)='./bus\x00', 0x2, 0x0) r6 = openat$vmm(0xffffffffffffff9c, &(0x7f0000001440)='/dev/vmm\x00', 0x0, 0x0) ioctl$VMM_IOC_TERM(r6, 0xc0205602, &(0x7f0000001480)) ioctl$FIONREAD(r6, 0x4004667f, &(0x7f0000000340)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r7, 0xffff, 0x1022, &(0x7f0000000200), &(0x7f0000000280)=0xc) ioctl$WSMUXIO_INJECTEVENT(r5, 0x80185760, &(0x7f0000000180)) symlinkat(&(0x7f0000000100)='./file0\x00', r5, &(0x7f0000000180)='./file0\x00') r8 = kqueue() r9 = accept$inet6(0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=0xc) ioctl$WSDISPLAYIO_SBURNER(r4, 0x800c5751, &(0x7f0000000380)={0x0, 0x10000, 0x8}) close(r9) r10 = socket(0x2, 0x2, 0x0) bind(r10, &(0x7f0000000000)=@un=@abs={0x0, 0xd}, 0x10) bind(r10, &(0x7f00000002c0)=@un=@abs={0x2, 0x0, 0x2}, 0x8) kevent(r8, &(0x7f0000000100), 0x6, 0x0, 0x9d1, &(0x7f0000000140)={0x3, 0x7fffffff}) r11 = openat$vmm(0xffffffffffffff9c, &(0x7f0000001440)='/dev/vmm\x00', 0x0, 0x0) ioctl$VMM_IOC_TERM(r11, 0xc0205602, &(0x7f0000001480)) ioctl$FIOGETOWN(r11, 0x4004667b, &(0x7f0000000300)) 10:15:45 executing program 0: r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bpf\x00', 0x0, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x60}, {0x4}, {0x4006}]}) r1 = open(&(0x7f0000000080)='./file0\x00', 0x10, 0x10) ioctl$BIOCSHDRCMPLT(r1, 0x80044275, &(0x7f0000000100)=0xfff) syz_emit_ethernet(0xe, &(0x7f00000001c0)="174af205b6068bbc6be6634ecdd0") 10:15:45 executing program 1: mknod(&(0x7f0000000140)='./bus\x00', 0x2080002006, 0x40004000000028a9) r0 = open(&(0x7f0000000400)='./bus\x00', 0x1, 0x0) writev(r0, &(0x7f0000000280)=[{&(0x7f00000002c0)="00000018600400e7170600000000000064000000000080000000000000000000000000000159d7ffdcb1e990", 0x2c}], 0x1) fchmodat(r0, &(0x7f0000000080)='./bus\x00', 0x1, 0x2) r1 = socket(0x2, 0x2, 0x0) bind(r1, &(0x7f0000000000)=@un=@abs={0x0, 0xd}, 0x10) getsockname(r1, &(0x7f0000000000)=@in6, &(0x7f0000000040)=0xc) 10:15:45 executing program 0: sendmsg$unix(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f0000000480)=ANY=[@ANYBLOB="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"/793], 0x1, 0x0}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x18, 0x2, 0x0) r1 = socket(0x18, 0x2, 0x0) r2 = dup2(r1, r0) sendmsg$unix(r2, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x0) 10:15:45 executing program 1: ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000300)={'tap', 0x0}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x2, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) shmctl$SHM_LOCK(0xffffffffffffffff, 0x3) ioctl$TIOCFLUSH(r1, 0x80206913, &(0x7f0000000300)) 10:15:45 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) chmod(&(0x7f0000000180)='./file0\x00', 0x23f) setuid(0xee01) r0 = kqueue() r1 = kqueue() pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) kevent(0xffffffffffffffff, &(0x7f0000000140)=[{}], 0x0, 0x0, 0xa102, 0x0) kevent(r1, &(0x7f00000000c0), 0xec7, 0x0, 0x48001, 0x0) dup2(r2, 0xffffffffffffffff) kevent(r0, &(0x7f0000000240)=[{{r1}, 0xfffffffffffffffb, 0x80, 0x80000000, 0xfff, 0x5}, {{r3}, 0x0, 0x0, 0x0, 0xffff, 0x3}], 0x9130fbf, 0x0, 0x24000000, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) poll(&(0x7f0000000000)=[{r4, 0x160}], 0x1, 0x606dca73) preadv(0xffffffffffffffff, &(0x7f00000004c0)=[{&(0x7f0000001640)=""/247, 0xffffffcc}], 0x10000221, 0x0, 0x0) r6 = open(&(0x7f00000002c0)='./file0\x00', 0x611, 0x0) kevent(0xffffffffffffffff, &(0x7f0000000140)=[{{}, 0xfffffffffffffffb, 0x65}], 0x0, 0x0, 0xa102, 0x0) kevent(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0, 0x48001, 0x0) close(0xffffffffffffffff) fcntl$setstatus(r6, 0x4, 0x80) kevent(0xffffffffffffffff, 0x0, 0xec7, 0x0, 0x48001, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) dup2(0xffffffffffffffff, 0xffffffffffffffff) pwritev(r6, &(0x7f00000003c0), 0x273, 0x0, 0x0) mmap(&(0x7f0000000000/0x11000)=nil, 0x11000, 0x2, 0x10, r6, 0x0, 0x0) dup2(r5, r4) pipe2(&(0x7f0000000080), 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0xfffffffffffffffd) r7 = socket$inet(0x2, 0x4, 0x1f) getsockopt$sock_cred(r7, 0xffff, 0x1022, &(0x7f0000000100), &(0x7f0000000140)=0xc) chdir(&(0x7f0000000340)='./file0/file0\x00') open(&(0x7f00000001c0)='./file1\x00', 0x201, 0x0) panic: ifa_update_broadaddr does not support dynamic length Stopped at db_enter+0x18: addq $0x8,%rsp TID PID UID PRFLAGS PFLAGS CPU COMMAND *443283 95006 0 0 0x4000000 0 syz-executor.1 db_enter() at db_enter+0x18 panic() at panic+0x15c ifa_update_broadaddr(ffff800000a63800,ffff8000006a0700,ffff800016b4c350) at ifa_update_broadaddr+0x61 in_ioctl(80206913,ffff800016b4c340,ffff800000a63800,1) at in_ioctl+0x463 ifioctl(fffffd8027b20018,80206913,ffff800016b4c340,ffff8000ffff2c70) at ifioctl+0xb34 sys_ioctl(ffff8000ffff2c70,ffff800016b4c458,ffff800016b4c4a0) at sys_ioctl+0x5b9 syscall(ffff800016b4c520) at syscall+0x507 Xsyscall(6,0,ffffffffffffff36,0,3,e06821ef010) at Xsyscall+0x128 end of kernel end trace frame: 0xe091f87f870, count: 7 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb> ddb> set $lines = 0 ddb> set $maxwidth = 0 ddb> show panic ifa_update_broadaddr does not support dynamic length ddb> trace db_enter() at db_enter+0x18 panic() at panic+0x15c ifa_update_broadaddr(ffff800000a63800,ffff8000006a0700,ffff800016b4c350) at ifa_update_broadaddr+0x61 in_ioctl(80206913,ffff800016b4c340,ffff800000a63800,1) at in_ioctl+0x463 ifioctl(fffffd8027b20018,80206913,ffff800016b4c340,ffff8000ffff2c70) at ifioctl+0xb34 sys_ioctl(ffff8000ffff2c70,ffff800016b4c458,ffff800016b4c4a0) at sys_ioctl+0x5b9 syscall(ffff800016b4c520) at syscall+0x507 Xsyscall(6,0,ffffffffffffff36,0,3,e06821ef010) at Xsyscall+0x128 end of kernel end trace frame: 0xe091f87f870, count: -8 ddb> show registers rdi 0xffffffff8186dab7 db_enter+0x17 rsi 0x1e7e __ALIGN_SIZE+0xe7e rbp 0xffff800016b4c0e0 rbx 0xffff800016b4c190 rdx 0x1e7f __ALIGN_SIZE+0xe7f rcx 0xffff800016b55000 rax 0xffff800016b55000 r8 0xffff800016b4c0a0 r9 0x1 r10 0xffff800000a65ec0 r11 0xcf73f604f328c1cd r12 0x3000000008 r13 0xffff800016b4c0f0 r14 0x100 r15 0x1 rip 0xffffffff8186dab8 db_enter+0x18 cs 0x8 rflags 0x246 rsp 0xffff800016b4c0d0 ss 0x10 db_enter+0x18: addq $0x8,%rsp ddb> show proc PROC (syz-executor.1) pid=443283 stat=onproc flags process=0 proc=4000000 pri=62, usrpri=62, nice=20 forw=0xffffffffffffffff, list=0xffff8000ffff2018,0xffffffff825607a0 process=0xffff8000ffff7b10 user=0xffff800016b47000, vmspace=0xfffffd803f013000 estcpu=36, cpticks=0, pctcpu=0.0 user=0, sys=0, intr=0 ddb> ps PID TID PPID UID S FLAGS WAIT COMMAND 95006 242083 15784 0 2 0 syz-executor.1 *95006 443283 15784 0 7 0x4000000 syz-executor.1 15784 426416 72151 0 3 0x82 nanosleep syz-executor.1 4115 450156 72151 0 2 0x2 syz-executor.0 72151 47133 26869 0 3 0x82 thrsleep syz-fuzzer 72151 99870 26869 0 3 0x4000082 nanosleep syz-fuzzer 72151 362285 26869 0 3 0x4000082 kqread syz-fuzzer 72151 158087 26869 0 3 0x4000082 thrsleep syz-fuzzer 72151 406570 26869 0 3 0x4000082 thrsleep syz-fuzzer 72151 201180 26869 0 3 0x4000082 thrsleep syz-fuzzer 72151 374643 26869 0 3 0x4000082 thrsleep syz-fuzzer 72151 495189 26869 0 3 0x4000082 thrsleep syz-fuzzer 26869 321534 65646 0 3 0x10008a pause ksh 65646 430759 14936 0 3 0x92 select sshd 44212 345244 1 0 3 0x100083 ttyin getty 14936 41146 1 0 3 0x80 select sshd 92994 360683 32566 73 3 0x100090 kqread syslogd 32566 152345 1 0 3 0x100082 netio syslogd 55353 33823 1 77 3 0x100090 poll dhclient 19972 294074 1 0 3 0x80 poll dhclient 50711 351239 0 0 2 0x14200 zerothread 56161 181222 0 0 3 0x14200 aiodoned aiodoned 65273 201465 0 0 3 0x14200 syncer update 91617 243975 0 0 3 0x14200 cleaner cleaner 46492 421263 0 0 3 0x14200 reaper reaper 41267 470549 0 0 3 0x14200 pgdaemon pagedaemon 96782 306695 0 0 3 0x14200 bored crynlk 19696 181907 0 0 3 0x14200 bored crypto 84204 263229 0 0 3 0x40014200 acpi0 acpi0 19534 202263 0 0 3 0x14200 bored softnet 66136 44084 0 0 3 0x14200 bored systqmp 47119 89226 0 0 3 0x14200 bored systq 35282 424204 0 0 3 0x40014200 bored softclock 88110 441277 0 0 3 0x40014200 idle0 61361 313741 0 0 3 0x14200 bored smr 1 281669 0 0 3 0x82 wait init 0 0 -1 0 3 0x10200 scheduler swapper ddb> show all locks No such command ddb> show malloc Type InUse MemUse HighUse Limit Requests Type Lim Kern Lim devbuf 9450 6316K 6575K 78643K 10583 0 0 pcb 13 8K 8K 78643K 23 0 0 rtable 108 3K 4K 78643K 205 0 0 ifaddr 39 10K 10K 78643K 43 0 0 counters 19 16K 16K 78643K 19 0 0 ioctlops 0 0K 2K 78643K 17 0 0 iov 0 0K 16K 78643K 10 0 0 mount 1 1K 1K 78643K 1 0 0 vnodes 1217 76K 77K 78643K 1235 0 0 UFS quota 1 32K 32K 78643K 1 0 0 UFS mount 5 36K 36K 78643K 5 0 0 shm 2 1K 5K 78643K 3 0 0 VM map 2 0K 0K 78643K 2 0 0 sem 10 0K 0K 78643K 10 0 0 dirhash 12 2K 2K 78643K 12 0 0 ACPI 1793 195K 288K 78643K 12645 0 0 file desc 5 13K 25K 78643K 54 0 0 proc 48 38K 63K 78643K 359 0 0 subproc 32 2K 2K 78643K 34 0 0 NFS srvsock 1 0K 0K 78643K 1 0 0 NFS daemon 1 16K 16K 78643K 1 0 0 ip_moptions 0 0K 0K 78643K 2 0 0 in_multi 33 2K 2K 78643K 33 0 0 ether_multi 1 0K 0K 78643K 1 0 0 ISOFS mount 1 32K 32K 78643K 1 0 0 MSDOSFS mount 1 16K 16K 78643K 1 0 0 ttys 42 185K 185K 78643K 42 0 0 exec 0 0K 1K 78643K 185 0 0 pagedep 1 8K 8K 78643K 1 0 0 inodedep 1 32K 32K 78643K 1 0 0 newblk 1 0K 0K 78643K 1 0 0 VM swap 7 26K 26K 78643K 7 0 0 UVM amap 100 21K 23K 78643K 966 0 0 UVM aobj 10 2K 2K 78643K 10 0 0 memdesc 1 4K 4K 78643K 1 0 0 crypto data 1 1K 1K 78643K 1 0 0 ip6_options 0 0K 0K 78643K 4 0 0 NDP 6 0K 0K 78643K 11 0 0 temp 105 3532K 3596K 78643K 3266 0 0 SYN cache 2 16K 16K 78643K 2 0 0 ddb> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle arp 64 6 0 0 1 0 1 1 0 8 0 rtpcb 80 21 0 19 1 0 1 1 0 8 0 rtentry 112 45 0 1 2 0 2 2 0 8 0 unpcb 120 45 0 35 1 0 1 1 0 8 0 syncache 264 4 0 4 1 1 0 1 0 8 0 tcpqe 32 145 0 145 1 0 1 1 0 8 1 tcpcb 544 26 0 22 2 0 2 2 0 8 1 inpcb 280 77 0 69 2 0 2 2 0 8 1 nd6 48 4 0 0 1 0 1 1 0 8 0 ppxss 1128 1 0 1 1 0 1 1 0 8 1 art_heap8 4096 1 0 0 1 0 1 1 0 8 0 art_heap4 256 212 0 0 14 0 14 14 0 8 0 art_table 32 213 0 0 2 0 2 2 0 8 0 art_node 16 44 0 4 1 0 1 1 0 8 0 sysvmsgpl 40 4 0 2 1 0 1 1 0 8 0 semupl 112 1 0 1 1 0 1 1 0 8 1 semapl 112 8 0 0 1 0 1 1 0 8 0 shmpl 112 8 0 0 1 0 1 1 0 8 0 dirhash 1024 17 0 0 3 0 3 3 0 8 0 dino1pl 128 1450 0 52 46 0 46 46 0 8 0 ffsino 240 1450 0 52 83 0 83 83 0 8 0 nchpl 144 1738 0 1296 60 5 55 60 0 8 35 uvmvnodes 72 1504 0 0 28 0 28 28 0 8 0 vnodes 208 1504 0 0 80 0 80 80 0 8 0 namei 1024 4202 0 4202 1 0 1 1 0 8 1 scxspl 192 4553 0 4553 3 1 2 2 0 8 2 plimitpl 152 16 0 9 1 0 1 1 0 8 0 sigapl 432 224 0 211 2 0 2 2 0 8 0 futexpl 56 826 0 826 1 0 1 1 0 8 1 knotepl 112 55 0 36 1 0 1 1 0 8 0 kqueuepl 104 6 0 4 1 0 1 1 0 8 0 pipepl 112 146 0 127 1 0 1 1 0 8 0 fdescpl 424 225 0 211 2 0 2 2 0 8 0 filepl 120 1246 0 1150 4 0 4 4 0 8 1 lockfpl 104 25 0 24 1 0 1 1 0 8 0 lockfspl 48 9 0 8 1 0 1 1 0 8 0 sessionpl 112 17 0 7 1 0 1 1 0 8 0 pgrppl 48 17 0 7 1 0 1 1 0 8 0 ucredpl 96 88 0 81 1 0 1 1 0 8 0 zombiepl 144 211 0 211 1 0 1 1 0 8 1 processpl 864 239 0 211 4 0 4 4 0 8 0 procpl 632 272 0 236 4 0 4 4 0 8 0 sockpl 384 143 0 123 4 0 4 4 0 8 1 mcl64k 65536 3 0 3 1 0 1 1 0 8 1 mcl16k 16384 2 0 2 1 0 1 1 0 8 1 mcl8k 8192 1 0 1 1 0 1 1 0 8 1 mcl4k 4096 9 0 9 2 1 1 1 0 8 1 mcl2k2 2112 1 0 1 1 0 1 1 0 8 1 mcl2k 2048 68200 0 68155 15 2 13 13 0 8 7 mtagpl 80 2 0 2 1 1 0 1 0 8 0 mbufpl 256 108035 0 107962 11 1 10 10 0 8 1 bufpl 256 7334 0 1341 375 0 375 375 0 8 0 anonpl 16 44474 0 26696 89 0 89 89 0 62 17 amapchunkpl 152 1423 0 1275 16 0 16 16 0 158 9 amappl16 192 1189 0 215 50 0 50 50 0 8 1 amappl14 176 66 0 59 1 0 1 1 0 8 0 amappl13 168 1 0 1 1 0 1 1 0 8 1 amappl12 160 9 0 8 1 0 1 1 0 8 0 amappl11 152 46 0 35 1 0 1 1 0 8 0 amappl10 144 10 0 9 1 0 1 1 0 8 0 amappl9 136 553 0 549 1 0 1 1 0 8 0 amappl8 128 144 0 122 1 0 1 1 0 8 0 amappl7 120 34 0 29 1 0 1 1 0 8 0 amappl6 112 55 0 47 1 0 1 1 0 8 0 amappl5 104 150 0 139 1 0 1 1 0 8 0 amappl4 96 425 0 397 1 0 1 1 0 8 0 amappl3 88 134 0 126 1 0 1 1 0 8 0 amappl2 80 1005 0 938 3 0 3 3 0 8 1 amappl1 72 13496 0 13088 24 8 16 20 0 8 6 amappl 80 518 0 471 2 0 2 2 0 84 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 253 0 253 1 1 0 1 0 8 0 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 17 0 17 1 1 0 1 0 8 0 aobjpl 64 9 0 0 1 0 1 1 0 8 0 uaddrrnd 24 225 0 211 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 225 0 211 1 0 1 1 0 8 0 vmmpekpl 168 5832 0 5808 2 0 2 2 0 8 0 vmmpepl 168 34667 0 32646 133 4 129 129 0 357 41 vmsppl 272 224 0 211 2 0 2 2 0 8 1 pdppl 4096 456 0 422 6 0 6 6 0 8 1 pvpl 32 168863 0 148070 294 0 294 294 0 265 122 pmappl 200 224 0 211 1 0 1 1 0 8 0 extentpl 40 41 0 26 1 0 1 1 0 8 0 phpool 112 520 0 6 15 0 15 15 0 8 0