kern.securelevel: 0 -> 1 creating runtime link editor directory cache. preserving editor files. starting network daemons: sshd. starting local daemons:. Thu May 9 14:15:39 PDT 2019 OpenBSD/amd64 (ci-openbsd-main-8.c.syzkaller.internal) (tty00) Warning: Permanently added '10.128.10.17' (ECDSA) to the list of known hosts. 2019/05/09 14:16:03 fuzzer started 2019/05/09 14:16:11 dialing manager at 10.128.15.235:18446 2019/05/09 14:16:11 syscalls: 320 2019/05/09 14:16:11 code coverage: enabled 2019/05/09 14:16:11 comparison tracing: enabled 2019/05/09 14:16:11 extra coverage: support is not implemented in syzkaller 2019/05/09 14:16:11 setuid sandbox: enabled 2019/05/09 14:16:11 namespace sandbox: support is not implemented in syzkaller 2019/05/09 14:16:11 Android sandbox: support is not implemented in syzkaller 2019/05/09 14:16:11 fault injection: support is not implemented in syzkaller 2019/05/09 14:16:11 leak checking: support is not implemented in syzkaller 2019/05/09 14:16:11 net packet injection: enabled 2019/05/09 14:16:11 net device setup: support is not implemented in syzkaller 14:16:15 executing program 0: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000040)={0x6, &(0x7f0000000000)=[{0xfffffffffffffffc, 0x3e, 0x80000000, 0x2a04}, {0x9, 0x7f, 0x7, 0x7}, {0x7fffffff, 0x2, 0x1ff, 0x2000000}, {0x0, 0x2, 0x3, 0x200}, {0x20, 0x10001, 0xa2d9, 0x58}, {0x1ff, 0x8, 0x7, 0x1}]}) ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f00000000c0)={0x6, &(0x7f0000000080)=[{0x443, 0x400, 0x8001, 0xfffffffffffffff9}, {0x2, 0x6, 0x6, 0x8}, {0x9, 0x80000000, 0x6877, 0xde}, {0x2, 0x200, 0x3, 0x2}, {0x7fff, 0x603, 0x0, 0x81}, {0xfffffffffffeffff, 0xda3, 0x100000000}]}) r1 = msgget$private(0x0, 0x400) r2 = socket$inet(0x2, 0x4002, 0x9) open$dir(&(0x7f0000000100)='./file0\x00', 0x8000, 0x8) fcntl$getown(r0, 0x5) ioctl$BIOCGFILDROP(r0, 0x40044278, &(0x7f0000000140)) listen(r0, 0x282) ioctl$BIOCSFILDROP(r0, 0x80044279, &(0x7f0000000180)=0x1) r3 = socket$inet(0x2, 0x4001, 0x100000001) r4 = semget$private(0x0, 0x3, 0x446) r5 = dup2(r2, r0) getsockopt$inet_opts(r3, 0x0, 0x1, &(0x7f00000001c0)=""/184, &(0x7f0000000280)=0xb8) getsockopt$sock_cred(r3, 0xffff, 0x1022, &(0x7f00000002c0)={0x0, 0x0}, &(0x7f0000000300)=0xc) getsockopt$SO_PEERCRED(r2, 0xffff, 0x1022, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0xc) r9 = getuid() getsockopt$SO_PEERCRED(r5, 0xffff, 0x1022, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0xc) semctl$IPC_SET(r4, 0x0, 0x1, &(0x7f00000003c0)={{0x1, r6, r8, r9, r10, 0x2, 0x7f}, 0x5, 0x88b8, 0x2}) ioctl$WSMOUSEIO_GETPARAMS(r5, 0x80105727, &(0x7f0000000480)={&(0x7f0000000440)=[{0x1, 0x800}, {0x21, 0x8b47}, {0x82, 0x3}, {0xef, 0x1}, {0xc7, 0x3}, {0x46, 0x101}], 0x6}) getuid() r11 = semget(0x0, 0x5, 0x14) connect$inet6(r5, &(0x7f00000004c0)={0x18, 0x3, 0x3, 0x8}, 0xc) setsockopt(r0, 0xfffffffffffffff9, 0x7, &(0x7f0000000500)="0e81fc4f5108e7d36c15c13a8e876fc9ffd406383f58df619607e99d5810c8b6e806320ee99cff96aa6c03286f4b8d6dd9c9dc3d1dc143616573add2352fd5e7910cca644ead29bf002dbbe024db8895e8947c054ce9e9922e3ff03754f211ee0beaf4447002cc457de142dbb35c1b49a38db0a69ef86cad3a5515540179ba2168197fef51b322f242eabfb39a2193843e9878c6bdd1b93234b3b67b8abb202b967e9c741ab364ac3a00aa6ceca98bbafe6ca98a8b8631dfa561cefac0131ee8", 0xc0) setuid(r7) msgrcv(r1, &(0x7f00000005c0)={0x0, ""/238}, 0xf6, 0x3, 0x1800) sendto$inet(r5, &(0x7f00000006c0)="9c70ca5d2f3501d9f122d61c11808be146ddfa7236359bee358b9404cfb81575c1b18d31ec9cd130062bf648498c9635fdc2c7b1105d7c6096d977d441b11ec5f3ffb2961c8579679ebe001001d3cb06e40a4cc605481bb5432715a755ee790a9d9a74312500b07885a3ccbed319cbd23849bae6edeba8e4c492ddf5b2", 0x7d, 0x1, 0x0, 0x0) faccessat(r5, &(0x7f0000000740)='./file0/file0\x00', 0x2, 0x3) semctl$GETPID(r11, 0x3, 0x4, &(0x7f0000000780)=""/204) ioctl$TIOCGETD(r5, 0x4004741a, &(0x7f0000000880)) 14:16:15 executing program 1: r0 = accept$inet(0xffffffffffffff9c, &(0x7f0000000000), &(0x7f0000000040)=0xc) sendto$inet(r0, &(0x7f0000000080)="8975ecfd9794b202c8dfae54e6ad202fa28e21040e61f06d99f61590848b0848983db6", 0x23, 0x400, 0x0, 0x0) r1 = dup2(r0, r0) bind$inet6(r1, &(0x7f00000000c0)={0x18, 0x1, 0x7ff, 0x4cf5f5ac}, 0xc) r2 = shmget(0x3, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil) r3 = geteuid() getgroups(0x3, &(0x7f0000000100)=[0x0, 0xffffffffffffffff, 0x0]) getsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f0000000140)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) getgroups(0x3, &(0x7f00000001c0)=[0x0, 0x0, 0x0]) r12 = getpgid(0xffffffffffffffff) r13 = fcntl$getown(r0, 0x5) shmctl$IPC_SET(r2, 0x1, &(0x7f0000000200)={{0xffffffffffffff00, r3, r4, r7, r9, 0x65, 0x1}, 0x2, 0x8, r12, r13, 0x5, 0x3, 0x2}) shmctl$SHM_LOCK(r2, 0x3) getgroups(0x4, &(0x7f0000000280)=[r11, r8, r8, r5]) mkdir(&(0x7f00000002c0)='./file0\x00', 0xa) shmget(0x1, 0x3000, 0x400, &(0x7f0000ffc000/0x3000)=nil) r14 = getpgid(r6) shmget$private(0x0, 0x2000, 0x18, &(0x7f0000ffb000/0x2000)=nil) openat$wskbd(0xffffffffffffff9c, &(0x7f0000000300)='/dev/wskbd0\x00', 0x80, 0x0) getpgid(r14) getpgid(r13) ioctl$KDSETLED(r1, 0x20004b42, &(0x7f0000000340)) setpgid(r6, r6) setgid(r10) getppid() ioctl$WSDISPLAYIO_GETSCREEN(r0, 0xc0245755, &(0x7f0000000380)={0x2, './file0\x00', './file0\x00'}) semget$private(0x0, 0x0, 0x200) munmap(&(0x7f0000a00000/0x600000)=nil, 0x600000) recvfrom(r1, &(0x7f00000003c0)=""/198, 0xc6, 0x2, 0x0, 0x0) ioctl$KDSETRAD(r1, 0x20004b43) login: pckbd_enable: command error 14:16:17 executing program 0: r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bpf\x00', 0x20, 0x0) ioctl$BIOCGDIRFILT(r0, 0x4004427c, &(0x7f0000000040)) r1 = openat$vmm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vmm\x00', 0x0, 0x0) ioctl$VMM_IOC_WRITEREGS(r1, 0x82485608, &(0x7f0000000300)={0x0, 0x7, 0x80000000, {[0x2a, 0x1, 0xa8a5, 0x40, 0x1, 0xc61, 0x9, 0x9, 0x1, 0x4, 0x5e2d, 0x2, 0x30, 0x8, 0x1, 0x0, 0x3, 0x103], [0x8, 0x3, 0x2, 0xfffe00000000000, 0x7119, 0xffffffff, 0x2, 0x3], [0x0, 0x1, 0x3ff, 0x1, 0x5, 0x1f, 0x101], [0x65aa, 0x5, 0x9, 0xe1e8, 0x795, 0x6], [{0x7b7abd2e, 0x81, 0x2, 0xf73e}, {0x5, 0xfff, 0x9, 0xffffffffffff0001}, {0x5, 0x80, 0x0, 0x100}, {0x87, 0x9, 0x7, 0x633a}, {0x6, 0x5, 0x6, 0x20}, {0xe2, 0x9, 0xfffffffffffffff9, 0xfff}, {0x5, 0x60, 0x3, 0x9}, {0x0, 0x3, 0x8, 0x4}], {0x5, 0xffffffffffffffc0, 0x9, 0x6}, {0x1, 0x5, 0x5, 0xffffffff80000001}}}) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000100)={0x0, &(0x7f00000000c0)}) r2 = semget(0x3, 0x3, 0x0) r3 = getuid() chroot(&(0x7f0000000580)='./file0\x00') r4 = getgid() r5 = open(&(0x7f0000000240)='./file0\x00', 0x10080, 0x0) getpeername(r5, &(0x7f00000005c0)=@in, &(0x7f0000000600)=0xc) ioctl$VMM_IOC_TERM(r5, 0x80045604, &(0x7f0000000280)={0x1}) getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000080)={0x0, 0x0}, 0xc) getgroups(0x3, &(0x7f00000000c0)=[0x0, 0x0, 0x0]) semctl$IPC_SET(r2, 0x0, 0x1, &(0x7f0000000180)={{0x6, r3, r4, r6, r7, 0x111, 0x6}, 0x2, 0x0, 0x2}) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) syz_emit_ethernet(0x1, &(0x7f0000000200)="8d") pckbd_enable: command error 14:16:18 executing program 1: socket$inet(0x2, 0x2, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0xa0, 0x0) connect$unix(r0, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0xa) accept$inet(r0, &(0x7f0000000200), &(0x7f0000000240)=0xc) socketpair$unix(0x1, 0x10000000001, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) ioctl$TIOCMSET(r0, 0x8004746d, &(0x7f00000002c0)=0x8) ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f00000000c0)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}]}) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="7fac120afff02f758eda64a9b66c76c6e6d7f35d2b58a004efd70e1d1cb5012ad4772881b0092a7c7e17ad4a0a1047"], 0x9}, 0x0) sendmsg(r1, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x128}, 0x0) 14:16:18 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt(r0, 0x6, 0x0, 0x0, 0x0) flock(r0, 0x4) 14:16:18 executing program 0: socketpair(0x1f, 0x400000000003, 0x7, 0x0) r0 = socket$inet6(0x18, 0x2, 0x9) recvfrom$inet6(r0, &(0x7f0000000040), 0x0, 0x40, &(0x7f0000000080)={0x18, 0x3, 0x8, 0xffffffffffff0001}, 0xc) socketpair(0x6, 0x5, 0x997a, &(0x7f0000000000)={0xffffffffffffffff}) accept$inet6(r1, &(0x7f0000000040), &(0x7f00000000c0)=0xc) 14:16:18 executing program 1: r0 = open(&(0x7f0000000040)='./file0\x00', 0x200, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000004c0)=[{&(0x7f0000001640)=""/247, 0xffffffcc}], 0x1, 0x0) ioctl$WSDISPLAYIO_LSFONT(r1, 0xc058574e, &(0x7f0000000180)) r2 = open(&(0x7f0000000040)='./file0\x00', 0x611, 0x0) fcntl$setstatus(r2, 0x4, 0x80) pwritev(r2, &(0x7f00000003c0), 0x10000000000001dc, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x5, 0x10, r1, 0x0, 0x0) syz_open_pts() getrlimit(0x4, &(0x7f0000000200)) fcntl$lock(r0, 0x7, &(0x7f0000000140)) getsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f0000000000)={0x0}, &(0x7f0000000080)=0xc) fcntl$lock(r1, 0x7, &(0x7f00000000c0)={0x3, 0x2, 0x4, 0x5, r3}) fcntl$lock(r2, 0x7, &(0x7f0000000300)) close(r2) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3, 0x10, r0, 0x0, 0x0) 14:16:18 executing program 0: mknod(&(0x7f0000000180)='./file0\x00', 0x2000000006002, 0x401) r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x810, r0, 0x0, 0x0) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x5) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) dup2(r0, r0) munlock(&(0x7f0000fef000/0x11000)=nil, 0x11000) 14:16:18 executing program 1: r0 = open(&(0x7f0000000040)='./file0\x00', 0x10280, 0x28) ioctl$TIOCGETD(r0, 0x4004741a, &(0x7f0000000080)) r1 = socket$inet(0x2, 0x1, 0x0) listen(r1, 0x0) setsockopt$sock_int(r1, 0xffff, 0x1, &(0x7f0000000000)=0x6, 0x4) socket$inet6(0x18, 0x4003, 0x100000000) listen(r1, 0x0) listen(r1, 0x3) 14:16:18 executing program 0: mknod(&(0x7f0000000180)='./file0\x00', 0x2000000006002, 0x401) r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x810, r0, 0x0, 0x0) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x5) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) dup2(r0, r0) munlock(&(0x7f0000fef000/0x11000)=nil, 0x11000) 14:16:18 executing program 1: r0 = socket(0x400000000018, 0x3, 0x800000000000003a) ioctl$WSMUXIO_REMOVE_DEVICE(0xffffffffffffffff, 0x80085762, &(0x7f0000000040)={0x1}) setsockopt(r0, 0x29, 0x6c, &(0x7f0000000040), 0x4) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0x66, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1}, 0xc) ioctl$TIOCSETAF(0xffffffffffffffff, 0x802c7416, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, "010000000000000000ffffff7f00"}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = socket(0x18, 0x1, 0x0) setsockopt(r1, 0x29, 0xc, &(0x7f0000000140)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) close(r1) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x10004) ioctl$BIOCPROMISC(r2, 0x20004269) 14:16:18 executing program 0: r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bpf\x00', 0x0, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) ioctl$BIOCSFILDROP(r0, 0x80044279, &(0x7f0000000100)=0x2) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000000)={0x2, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7}, {0x6}]}) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x3cf, 0x80, 0x1, 0x9}]}) syz_emit_ethernet(0x1, &(0x7f0000000200)="8d") 14:16:19 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) execve(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=[&(0x7f0000000080)='\x00'], &(0x7f00000002c0)=[&(0x7f0000000100)='-).\x00', &(0x7f0000000140)='&}!\x00', &(0x7f00000001c0)='+\x00', &(0x7f0000000200)='\x00', &(0x7f0000000240)='\x00', &(0x7f0000000280)='\x00']) recvmsg(r0, &(0x7f0000002200)={&(0x7f0000000180)=@in, 0xc, &(0x7f0000002100)=[{&(0x7f0000001c80)=""/63, 0x3f}], 0x1, 0x0}, 0x0) sendmsg$unix(r0, &(0x7f00000005c0)={&(0x7f0000000340)=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000000580)=[{&(0x7f0000000380)="e04b108eaafc890381fc9212fed16560387510a01eae7ce5f3e8ab71f2ffb03f2665294963700b2be4e353ad19c57122ed25c60005567c1e696853b2ef8d6079a4f376f2df6616780bf947e82936ea081abc8c7d0915ef85834e922423773e2e460ae732c5603f29a6e73d28cab58588b901eb1e382b6cf1a1a5cf8dfc0a64c29f3bd47cbce56fd08bb181248f748d7bb07e8eead046d7512c0e2c3c99541703384f1ed7be4e19c8205ec1aeba36376c67595232c3f2b5463b79d69b59692a383f49cf58316c01d25177499a0880aefe0d1aa0acc5e62f9b16aeecf76123f753a73867822973af5d5c0ce1273e01b2a1730b20d9399ad44c", 0xf8}, {&(0x7f0000000480)="c18fca8b18b1866e094efac303003eff3fab57fb78373b424475de7e6b057aa76753", 0x22}, {&(0x7f00000004c0)="7641f2936c636fae10bf372c700b8d67eef0f25ef9984c90cb6ddfcc1d86e7aac2a899956a0012175f09ae17540085196a71f29df825bd8595f80edf5ee299a20a06acc473ad1febacd2c0e9c7fe07b830031ec198bd28d4c0d94acaf197ed759b7d6d03a470c1128aed868935c7ae5325445809fa7dbbed049988b432561af890fbcc1b6e04ab87e23fb3678032398c4dd5cd5e63c148680e124b2e157a951e49f5749fdf696af3b8136a", 0xab}], 0x3, 0x0, 0x0, 0x3}, 0x40d) r2 = dup2(r0, r0) ioctl$VT_OPENQRY(r2, 0x40047601, &(0x7f0000000300)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sendmsg$unix(r1, &(0x7f0000001840)={0x0, 0x0, 0x0}, 0x0) 14:16:19 executing program 1: r0 = socket(0x11, 0x3, 0x0) geteuid() getsockopt$SO_PEERCRED(r0, 0xffff, 0x1022, &(0x7f0000000000)={0x0, 0x0}, 0xc) setreuid(r1, r1) r2 = kqueue() kevent(r2, &(0x7f0000000340)=[{{r0}, 0xfffffffffffffffe, 0x11}], 0x3, 0x0, 0x0, 0x0) kevent(r2, 0x0, 0x0, &(0x7f0000000040), 0xe1b4, 0x0) listen(r0, 0x3) socket(0x0, 0x2, 0x2) 14:16:19 executing program 1: r0 = socket$inet6(0x18, 0x108000, 0x80000001) getsockopt(r0, 0x200000029, 0x6c, 0x0, 0x0) r1 = getppid() fcntl$lock(r0, 0xf, &(0x7f0000000000)={0x3, 0x0, 0x7f, 0x6, r1}) select(0x40, &(0x7f00000001c0)={0x6, 0x2, 0x1, 0x7ff, 0x1, 0x4, 0x100000000, 0x29a3}, &(0x7f0000000040)={0x7, 0x4, 0x3, 0x2, 0x401, 0x61fe, 0x5, 0x6}, &(0x7f0000000080)={0xfff, 0x2, 0x1, 0x58, 0x7, 0x80000000, 0x8, 0x7}, &(0x7f00000000c0)={0xfffffffffffffff8, 0x1}) mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x1, 0x10, r0, 0x0, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x8000, 0x0) recvmsg(r2, &(0x7f0000000980)={&(0x7f0000000180)=@in6, 0xc, &(0x7f0000000800)=[{&(0x7f0000000280)=""/87, 0x57}, {&(0x7f0000000300)=""/28, 0x1c}, {&(0x7f0000000340)=""/230, 0xe6}, {&(0x7f0000000440)=""/152, 0x98}, {&(0x7f0000000500)=""/62, 0x3e}, {&(0x7f0000000540)=""/241, 0xf1}, {&(0x7f0000000640)=""/191, 0xbf}, {&(0x7f0000000700)=""/245, 0xf5}], 0x8, &(0x7f0000000880)=""/249, 0xf9}, 0x801) ioctl$TIOCMBIS(r2, 0x8004746c, &(0x7f0000000140)=0x6117) recvfrom$inet6(r2, &(0x7f0000000200)=""/76, 0x4c, 0x3, 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x6, 0x811, r0, 0x0, 0x0) 14:16:19 executing program 1: mknod(&(0x7f0000000100)='./bus\x00', 0x2080002005, 0x40004000000028b1) r0 = open$dir(&(0x7f0000000000)='./bus/file0\x00', 0x0, 0x12) r1 = openat(r0, &(0x7f0000000040)='./bus\x00', 0x88, 0x20) r2 = open(&(0x7f0000000400)='./bus\x00', 0x1, 0x0) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)="000000186004008b00002b27feffffff000000000000000000000000000000000000000f1000001af0286c00", 0x2c}], 0x1) kevent(r2, &(0x7f0000000080), 0x2, &(0x7f0000000180)=[{{r0}, 0xffffffffffffffff, 0xc1, 0x11, 0x9, 0xffff}, {{r2}, 0xfffffffffffffffd, 0x80, 0x4, 0x1}, {{r2}, 0xfffffffffffffffd, 0x40, 0x10, 0x4, 0x1}, {{r1}, 0xffffffffffffffff, 0x0, 0xf0000002, 0x9d, 0x1}, {{r2}, 0xffffffffffffffff, 0x4, 0x800fffff, 0xff, 0x26}, {{r1}, 0xfffffffffffffff9, 0x40, 0xf0000003, 0x0, 0xa19}, {{r1}, 0xfffffffffffffff8, 0x51, 0x20000000, 0x9}, {{r1}, 0xfffffffffffffffb, 0x10, 0xf0000000, 0x0, 0x8}], 0x3, &(0x7f0000000280)={0x0, 0x9}) 14:16:19 executing program 0: mkdir(&(0x7f0000000180)='./file0\x00', 0x6) r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bpf\x00', 0x0, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) ioctl$BIOCSDIRFILT(r0, 0x8004427d, &(0x7f0000000140)=0x7ff) ioctl$BIOCGDIRFILT(r0, 0x4004427c, &(0x7f0000000200)) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000080)={0x3, &(0x7f0000000100)=[{0x1c}, {0x2c}, {0x6}]}) getitimer(0x0, &(0x7f0000000040)) syz_emit_ethernet(0x1, &(0x7f00000002c0)="8b") 14:16:19 executing program 1: r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bpf\x00', 0x0, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000080)={0x0, &(0x7f0000000140)}) syz_emit_ethernet(0x1, &(0x7f00000002c0)="8b") r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x821, 0x0) faccessat(r1, &(0x7f0000000100)='./file0\x00', 0x8, 0x1) 14:16:19 executing program 0: munmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0) madvise(&(0x7f0000ff8000/0x3000)=nil, 0x3000, 0x6) r0 = msgget$private(0x0, 0x20000020) getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0xc) getgroups(0x2, &(0x7f0000000040)=[0xffffffffffffffff, 0xffffffffffffffff]) getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0xc) getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000100)=0xc) r9 = shmget$private(0x0, 0x600000, 0x10, &(0x7f0000a00000/0x600000)=nil) shmctl$IPC_SET(r9, 0x1, &(0x7f0000000240)={{0x4, r7, r2, r7, r6, 0x80, 0x9}, 0x7, 0x80000000, r4, r4, 0x8, 0x10001, 0xfffffffffffffffa}) r10 = getppid() mprotect(&(0x7f0000b33000/0x1000)=nil, 0x1000, 0x5) getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000200)={0x0}, 0xc) msgget(0x3, 0x2) r12 = kqueue() close(r12) msgctl$IPC_SET(r0, 0x1, &(0x7f0000000180)={{0x1, r1, r3, r5, r8, 0x8, 0x3}, 0x0, 0x6, r10, r11, 0xe867, 0x1f, 0x1000, 0xffffffff}) 14:16:19 executing program 0: r0 = socket$inet6(0x18, 0xc000, 0x9) shutdown(r0, 0x1) mknod(&(0x7f0000000000)='./bus\x00', 0x80002002, 0x100a26) r1 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x29) setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0x68, &(0x7f00000000c0)={{}, {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7, 0x1000000]}, 0xffffffffffffff9b) getrlimit(0x5, &(0x7f0000000100)) ioctl$TIOCCONS(r1, 0xc5005601, &(0x7f00000000c0)=0x9) 14:16:19 executing program 1: mknod(&(0x7f0000000040)='./bus\x00', 0x2080002002, 0x40004000000028aa) r0 = open(&(0x7f0000000000)='./bus\x00', 0x5, 0x2) writev(r0, &(0x7f0000001680)=[{&(0x7f0000000080)="c64c24302eae3aa1e04c9ce4"}, {&(0x7f0000000100)="5dce8bdf8a355c3628f286b0ab25752c64b72a7425f1ca8ff2a71a5e51ff648c6581ab46cf630e1b794766fd6113e690341c47fd5eef72a8acdd7e9e58cb98008f0fd8bec2abadb87e437d2fccbc172f19612b8ce08dbf9311c85ab76bfc423e7d8589e2e0f03f550e243551bad4394fd3cb288e9ff7fb0574f6e98ab584a9880406f54900d83cb41b17d1b8c8cb0851529dc9000d66053c4fc3af0160f07e3918468678"}, {&(0x7f00000001c0)="6999c676b07f7ccecebd23259697fdb45f4e2fff8e25022d0d7bbd6ee566d2a0f48e546f203642f0e0994bdc05de56b31056767c49f5390cdac7f0783018811c6d60d095f075525a82aca2bba604171785ed4a80c6d1deddc7efb4b7e666d70c88db1f9a84b5bdf1252b36f22654a1f9b82bd3eaa2677a943f5469e28387c0b4f2a0235053228257a6abe1ea323e4e18885884b109a088b9b6e32c9f2e50158961da1478070ded40a2085d96bd56ab68d363b8db39c415aabbb23a4f034519cb30a898c3be1b0f6bdb6833def84d7b81dff8"}, {&(0x7f0000000480)="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"}, {&(0x7f00000002c0)="e7c03367ae60c9bb2cb7b2ad1c67c3c115b081fce651d07ab22ed0dbddf3248d8e1ba2be8389f315f1020686e8ab30f5f1f48ec893"}, {&(0x7f0000000300)="ff25c8ebb7dd7c8573369a2ace11b82de069c321fee99dcc59e62b686ebcb79a8504c2044338f0b3597f5ba7680be71ee6e68e952ef5c54881afd0749f502a39a34f0fc0500d7a309a15e7bacc7f7c5fe129d6de91bd6b732669f571a9363e5783c7a55857c6cee8084c5f3ed2ea7225bb57ab4ec8ab53e7507f506c71945ca179d9733cc0b937a501c8e41f570a7a1c7a5bf3702294f5c95808f2c324c4fe40bf54a5c8f91ecb189e36ebb87f5c2a46025312e7d9df731f6d51df361bdb2e02ba3c25fe8965531ec6c532ad27aee5945ae1289bbfac670598fa5da0cc10f7c0750a50da32880d9cf16f47b76b3766d2"}, {&(0x7f0000001480)="1cf51a03eb2b7d11cf7b901a3144cff637e611a59aacc3c83166c2b61e75c338e2ee7e68dfe8ddac6aba48f50582ad877440b2f0cf91ba95dcbf5f17a62c68c8cc42d8596adb10f3c03c52a66f1ad6b4d1f80db3c9bf41dba51aef1b4542304cff1728eda59c92b296f14a99fcea9bd2dd56c0b78f020859ae4a1bd8448bbf2c5dae37756e1473360adfeed8e6a76cbac696daf86e60c90e0e19a71a685bbfa9398cc63453d2d63f4f5e72e1d401ac6204ad7f43e85c276174ef54241fbae617affc66f7b6667217942c2fe68f38a4eaae6bf9508abedca5adaabe080561ebc6876a12e80a89a0"}, {&(0x7f0000001580)="3d03b888ee8656f6d1435f6c6cb84463db1553296b887bcd804fab2951578f0e3ff9d2983bc523f21d8766427c2e2411f53c076d0e30b348b95e9f4a14e98142238bbca396e9152050b34f9f1c445bcb830321bd345ba4db0473057f12b67b2d90dac9d5fd44a5bf6665e8857ece764930679772205c9c7c2802a5bd4d0a6e97c8e01b6b0b1b03dc94ad60db37bd81a8aa787965aebcd1c7f38c10762e71c76a02b65e484dc370969feacfed701a9f15c70cbfcc3501e8bb5c237a1e313eae5f44e1bdb76a7ff94606"}], 0x0) 14:16:19 executing program 0: mknod(&(0x7f00000000c0)='./bus\x00', 0x80002007, 0x5dc6) r0 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) ioctl$TIOCFLUSH(r0, 0x400c745c, &(0x7f0000000100)) unlink(&(0x7f0000000000)='./bus\x00') 14:16:19 executing program 1: preadv(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000000080)=""/120, 0x78}, {&(0x7f0000000480)=""/4096, 0x138b}], 0x1bb, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x611, 0x0) pwritev(r0, &(0x7f00000003c0), 0x10000000000000c6, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x11, r0, 0x0, 0x0) getgroups(0x1, &(0x7f0000001640)=[0x0]) connect$unix(0xffffffffffffffff, 0x0, 0x0) fchflags(r0, 0x10004) munmap(&(0x7f0000000000/0x4000)=nil, 0x4000) 14:16:19 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="011a2e2f66696c6530006c7eb7a53e7a226d779b74eea309e64e12d6cf116592de85b30e227a904cd3fd8683761a5fd331c3a1f305bbcb5131a1a7bf757b18ec2eba298f5d71326eb9120aae132fe29ea3d20c84b4bf77df2d1d10b845197e34b47a97e0a4ea770e7b8434f7e8736c38ee3328f5f4769caeabc539392f5e2e968ac0f62ce09383bf693c61c0ec7c51493601965e2ad5e6779082b5f79f50e777abc899562cadd10f9ecc8d37b81d8b5ee5f92010d52e4225ab55d57624e87c7a84fe25f0029062a6ce218c34e59fddc522bc363b7956"], 0xe0, 0x0, 0x0, 0x0, 0xffffffffffffff61, 0x8}, 0x402) 14:16:19 executing program 0: setuid(0xee01) r0 = socket(0x11, 0x3, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x800012) sendto$unix(r0, &(0x7f0000000100)="b1000503b100a45997bb43e25786cb3849451ae3d3051020741038f53e8551f30ce390500e08fecea11ea8fef96e4fc748e93f0b780486ae007373a1bdbe781e5d8f6aef9187a869a4d3722c91f75073a1ebe2a4cbba982fd825582fe2aa7923ed00f4c8b2ca3ebbc259699a1f132e27acb5d606290d7d026ba8af63ff37282934e4fd89f20fd3873babfbb770c1f5a872c881ff7cc53c094303b2b8a85ff3fa86d9211830e0f2f0c9029fc7ab3a34c290", 0xb1, 0x0, 0x0, 0x0) getsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f00000001c0), &(0x7f00000000c0)=0x345) 14:16:19 executing program 1: r0 = socket$inet6(0x18, 0x0, 0xec71) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$WSMOUSEIO_SETPARAMS(r1, 0x80105728, &(0x7f0000000080)={&(0x7f0000000100), 0x1112bcb7b66ae95a}) openat(r2, &(0x7f00000000c0)='./file0\x00', 0x41, 0x40) getsockopt(r0, 0x0, 0xb, 0x0, 0x0) 14:16:19 executing program 1: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) chroot(&(0x7f0000000040)='./file0\x00') mkdir(&(0x7f0000000080)='./file1\x00', 0x96) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/', 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$KDGETLED(r0, 0x40044b41, &(0x7f00000000c0)) 14:16:19 executing program 0: r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080)='/dev/bpf\x00', 0x0, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000000)={'tap', 0x0}) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000100)={0x6, &(0x7f00000000c0)=[{0x1, 0x7fff, 0x5, 0x2}, {0x5, 0x400, 0x1, 0x3}, {0xea, 0x1000, 0x1, 0x8}, {0x3, 0x9, 0x4, 0x8}, {0x9, 0x80, 0x2, 0x9}, {0x6}]}) syz_emit_ethernet(0x1, &(0x7f0000000200)="8d") openat$bpf(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bpf\x00', 0x8019, 0x0) uvn_flush: obj=0xfffffd80339b44e0, offset=0x1000. error during pageout. uvn_flush: WARNING: changes to page may be lost! 14:16:19 executing program 0: mknod(&(0x7f0000000040)='./bus\x00', 0x3a0914c44f7b202c, 0xd02) r0 = open(&(0x7f0000000380)='./bus\x00', 0x1, 0x0) ioctl$VT_OPENQRY(r0, 0x40047601, &(0x7f0000000240)) r1 = syz_open_pts() writev(r1, &(0x7f0000000480)=[{&(0x7f0000000080)='d', 0x1}], 0x1) mknod(&(0x7f0000000300)='./file0\x00', 0x1008, 0x20) ioctl$TIOCSETD(r1, 0x8004741b, &(0x7f00000001c0)=0x4) ioctl$TIOCSETD(r1, 0x8004741b, &(0x7f0000000280)=0x8) setgid(0x0) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0x69, &(0x7f0000000180)={{0x18, 0x0, 0xc000000000000000, 0x400}, {0x18, 0x2, 0x4, 0x1}, 0x5, [0x26, 0x1fffc000000000, 0x0, 0x23, 0x48a1, 0x8, 0x0, 0xfff]}, 0x3c) socket(0x10, 0x4, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) bind(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="6cf65d6421d97522035dc01b344b41c9584e6a080e51c58fdcdbfce675d318e7484e42012a127c275848e29807711cacea0dfbdcbcccaa78700d81ed15f6c140185004004189a7fbf2f4850000107659b759080457f11b36923bf281aa3af98717ecd4e15b03005c2ca7018080009c59"], 0x1) msgget(0x3, 0x8) ioctl$TIOCGFLAGS(r1, 0x4004745d, &(0x7f0000000400)) sendto$unix(r2, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffcf6) recvfrom$inet(0xffffffffffffffff, 0x0, 0xfffffeff, 0x42, 0x0, 0xfffffffffffffdd2) ioctl$TIOCMBIC(r1, 0x8004746b, &(0x7f0000000200)) getsockopt$SO_PEERCRED(r2, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, 0x0}, 0xc) r5 = geteuid() close(r3) setreuid(r4, r5) getsockname(r0, &(0x7f0000000000)=@in, &(0x7f0000000100)=0xc) recvmsg(r0, 0x0, 0x40) execve(0x0, 0x0, 0x0) r6 = open(&(0x7f00000000c0)='./bus\x00', 0x2, 0x0) pwritev(r6, &(0x7f00000002c0)=[{&(0x7f0000000180), 0xfffffe91}], 0x1, 0x0) pwritev(r0, &(0x7f00000002c0)=[{&(0x7f0000000180), 0xfffffe91}], 0x1, 0x0) syz_execute_func(0x0) mkdir(&(0x7f0000be0ff8)='./file0\x00', 0x20) /: bad dir ino 5 at offset 0: mangled entry panic: bad dir Stopped at db_enter+0x18: addq $0x8,%rsp TID PID UID PRFLAGS PFLAGS CPU COMMAND *142988 9363 0 0x2 0 0 ifconfig db_enter() at db_enter+0x18 panic() at panic+0x15c ufs_dirbadentry(ffff800014a20e78,ffff800014a20e78,433422d426121fa2) at ufs_dirbadentry VOP_LOOKUP(fffffd803efda708,ffff800014a20f20,ffff800014a20ee0) at VOP_LOOKUP+0x5b unveil_find_cover(fffffd803efda708,ffff8000ffff3c38) at unveil_find_cover+0x139 unveil_add_vnode(ffff8000ffff66a0,fffffd803efda708,0) at unveil_add_vnode+0x23c unveil_add(ffff8000ffff3c38,ffff800014a214e8,ffff800014a215b3) at unveil_add+0x273 sys_unveil(ffff8000ffff3c38,ffff800014a21620,ffff800014a21690) at sys_unveil+0x405 syscall(ffff800014a21700) at syscall+0x511 Xsyscall(6,72,1,72,7f7ffffdf5e8,af547608ac8) at Xsyscall+0x128 end of kernel end trace frame: 0x7f7ffffdf570, count: 5 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb> ddb> set $lines = 0 ddb> set $maxwidth = 0 ddb> show panic bad dir ddb> trace db_enter() at db_enter+0x18 panic() at panic+0x15c ufs_dirbadentry(ffff800014a20e78,ffff800014a20e78,433422d426121fa2) at ufs_dirbadentry VOP_LOOKUP(fffffd803efda708,ffff800014a20f20,ffff800014a20ee0) at VOP_LOOKUP+0x5b unveil_find_cover(fffffd803efda708,ffff8000ffff3c38) at unveil_find_cover+0x139 unveil_add_vnode(ffff8000ffff66a0,fffffd803efda708,0) at unveil_add_vnode+0x23c unveil_add(ffff8000ffff3c38,ffff800014a214e8,ffff800014a215b3) at unveil_add+0x273 sys_unveil(ffff8000ffff3c38,ffff800014a21620,ffff800014a21690) at sys_unveil+0x405 syscall(ffff800014a21700) at syscall+0x511 Xsyscall(6,72,1,72,7f7ffffdf5e8,af547608ac8) at Xsyscall+0x128 end of kernel end trace frame: 0x7f7ffffdf570, count: -10 ddb> show registers rdi 0 rsi 0x1 rbp 0xffff800014a20c90 rbx 0xffff800014a20d40 rdx 0x2 rcx 0 rax 0 r8 0xffff800014a20c50 r9 0x1 r10 0 r11 0x2ca4bf2f98701746 r12 0x3000000008 r13 0xffff800014a20ca0 r14 0x100 r15 0x1 rip 0xffffffff81a73678 db_enter+0x18 cs 0x8 rflags 0x246 rsp 0xffff800014a20c80 ss 0 db_enter+0x18: addq $0x8,%rsp ddb> show proc PROC (ifconfig) pid=142988 stat=onproc flags process=2 proc=0 pri=17, usrpri=51, nice=20 forw=0xffffffffffffffff, list=0xffff8000ffff5c30,0xffffffff822b78f0 process=0xffff8000ffff66a0 user=0xffff800014a1c000, vmspace=0xfffffd803f014a50 estcpu=1, cpticks=1, pctcpu=0.0 user=0, sys=1, intr=0 ddb> ps PID TID PPID UID S FLAGS WAIT COMMAND * 9363 142988 42921 0 7 0x2 ifconfig 42921 76239 69374 0 3 0x10008a pause sh 69374 191796 87928 0 3 0x82 wait syz-executor.1 62629 243679 26339 0 2 0 syz-executor.0 62629 50851 26339 0 3 0x4000000 physio syz-executor.0 62629 457722 26339 0 3 0x4000080 fsleep syz-executor.0 62629 95098 26339 0 3 0x4000000 vmmaplk syz-executor.0 62629 265407 26339 0 3 0x4000000 vmmaplk syz-executor.0 26339 480342 87928 0 2 0x482 syz-executor.0 87928 222705 43370 0 3 0x82 kqread syz-fuzzer 87928 502442 43370 0 3 0x4000082 thrsleep syz-fuzzer 87928 49639 43370 0 3 0x4000082 thrsleep syz-fuzzer 87928 77111 43370 0 3 0x4000082 thrsleep syz-fuzzer 87928 422970 43370 0 3 0x4000082 thrsleep syz-fuzzer 87928 453553 43370 0 3 0x4000082 thrsleep syz-fuzzer 87928 10600 43370 0 3 0x4000082 thrsleep syz-fuzzer 43370 337385 93063 0 3 0x10008a pause ksh 93063 503476 75004 0 3 0x92 select sshd 13323 496323 1 0 3 0x100083 ttyin getty 75004 135599 1 0 3 0x80 select sshd 82135 214184 25603 73 2 0x100090 syslogd 25603 46769 1 0 3 0x100082 netio syslogd 42743 240872 1 77 3 0x100090 poll dhclient 62859 156540 1 0 3 0x80 poll dhclient 13182 424476 0 0 3 0x14200 pgzero zerothread 89408 509809 0 0 3 0x14200 aiodoned aiodoned 70128 77450 0 0 3 0x14200 syncer update 52777 43914 0 0 3 0x14200 cleaner cleaner 97659 74638 0 0 3 0x14200 reaper reaper 30705 3758 0 0 3 0x14200 pgdaemon pagedaemon 3891 178035 0 0 3 0x14200 bored crynlk 22416 494100 0 0 3 0x14200 bored crypto 23275 183990 0 0 3 0x40014200 acpi0 acpi0 87847 254846 0 0 3 0x14200 bored softnet 89509 498855 0 0 3 0x14200 bored systqmp 37020 104419 0 0 3 0x14200 bored systq 54719 116837 0 0 3 0x40014200 bored softclock 88663 134291 0 0 3 0x40014200 idle0 17402 245227 0 0 3 0x14200 bored smr 1 322920 0 0 3 0x82 wait init 0 0 -1 0 3 0x10200 scheduler swapper ddb> show all locks No such command ddb> show malloc Type InUse MemUse HighUse Limit Requests Type Lim Kern Lim devbuf 9434 6309K 6445K 78643K 10595 0 0 pcb 24 9K 9K 78643K 79 0 0 rtable 86 3K 4K 78643K 221 0 0 ifaddr 29 9K 11K 78643K 47 0 0 counters 19 16K 16K 78643K 19 0 0 ioctlops 0 0K 2K 78643K 19 0 0 iov 0 0K 8K 78643K 6 0 0 mount 1 1K 1K 78643K 1 0 0 vnodes 1204 75K 75K 78643K 1242 0 0 UFS quota 1 32K 32K 78643K 1 0 0 UFS mount 5 36K 36K 78643K 5 0 0 shm 2 1K 1K 78643K 2 0 0 VM map 2 0K 0K 78643K 2 0 0 sem 4 0K 0K 78643K 4 0 0 dirhash 12 2K 2K 78643K 12 0 0 ACPI 1793 195K 288K 78643K 12537 0 0 file desc 7 21K 25K 78643K 67 0 0 proc 43 46K 62K 78643K 290 0 0 subproc 66 67586K 69634K 78643K 102 0 0 NFS srvsock 1 0K 0K 78643K 1 0 0 NFS daemon 1 16K 16K 78643K 1 0 0 ip_moptions 0 0K 0K 78643K 2 0 0 in_multi 22 1K 2K 78643K 37 0 0 ether_multi 1 0K 0K 78643K 2 0 0 mrt 0 0K 0K 78643K 1 0 0 ISOFS mount 1 32K 32K 78643K 1 0 0 MSDOSFS mount 1 16K 16K 78643K 1 0 0 ttys 30 132K 132K 78643K 30 0 0 exec 0 0K 1K 78643K 187 0 0 pagedep 1 8K 8K 78643K 1 0 0 inodedep 1 32K 32K 78643K 1 0 0 newblk 1 0K 0K 78643K 1 0 0 VM swap 7 26K 26K 78643K 7 0 0 UVM amap 82 20K 20K 78643K 928 0 0 UVM aobj 6 4K 4K 78643K 6 0 0 memdesc 1 4K 4K 78643K 1 0 0 crypto data 1 1K 1K 78643K 1 0 0 NDP 4 0K 0K 78643K 12 0 0 temp 76 2697K 2825K 78643K 5352 0 0 SYN cache 2 16K 16K 78643K 2 0 0 ddb> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle arp 64 6 0 2 1 0 1 1 0 8 0 inpcbpl 280 44 0 37 1 0 1 1 0 8 0 plimitpl 152 15 0 8 1 0 1 1 0 8 0 rtentry 112 45 0 12 2 0 2 2 0 8 0 syncache 264 4 0 4 1 1 0 1 0 8 0 tcpqe 32 12 0 12 1 0 1 1 0 8 1 tcpcb 544 16 0 12 1 0 1 1 0 8 0 nd6 48 6 0 3 1 0 1 1 0 8 0 ppxss 1128 2 0 2 1 0 1 1 0 8 1 art_heap8 4096 1 0 0 1 0 1 1 0 8 0 art_heap4 256 189 0 44 12 0 12 12 0 8 1 art_table 32 190 0 44 2 0 2 2 0 8 0 art_node 16 44 0 14 1 0 1 1 0 8 0 semapl 112 2 0 0 1 0 1 1 0 8 0 shmpl 112 4 0 0 1 0 1 1 0 8 0 dirhash 1024 17 0 0 3 0 3 3 0 8 0 dino1pl 128 1480 0 65 46 0 46 46 0 8 0 ffsino 240 1480 0 65 84 0 84 84 0 8 0 nchpl 144 1753 0 120 61 0 61 61 0 8 0 uvmvnodes 72 1552 0 0 29 0 29 29 0 8 0 vnodes 200 1552 0 0 82 0 82 82 0 8 0 namei 1024 4257 0 4256 2 1 1 1 0 8 0 scxspl 192 10219 0 10218 8 7 1 6 0 8 0 sigapl 432 234 0 219 2 0 2 2 0 8 0 futexpl 56 582 0 581 1 0 1 1 0 8 0 knotepl 112 69 0 48 1 0 1 1 0 8 0 kqueuepl 104 6 0 4 1 0 1 1 0 8 0 pipepl 112 142 0 123 2 1 1 1 0 8 0 fdescpl 424 235 0 219 2 0 2 2 0 8 0 filepl 120 1107 0 1008 4 0 4 4 0 8 1 lockfpl 104 29 0 29 2 1 1 1 0 8 1 lockfspl 48 12 0 12 2 1 1 1 0 8 1 sessionpl 112 18 0 8 1 0 1 1 0 8 0 pgrppl 48 20 0 10 1 0 1 1 0 8 0 ucredpl 96 50 0 43 1 0 1 1 0 8 0 zombiepl 144 219 0 219 2 1 1 1 0 8 1 processpl 840 249 0 219 4 0 4 4 0 8 0 procpl 600 294 0 254 4 0 4 4 0 8 0 sockpl 384 104 0 86 3 0 3 3 0 8 1 mcl12k 12288 1 0 1 1 0 1 1 0 8 1 mcl4k 4096 9 0 9 2 1 1 1 0 8 1 mcl2k 2048 57270 0 57231 13 2 11 11 0 8 5 mtagpl 80 2 0 2 1 1 0 1 0 8 0 mbufpl 256 93338 0 93281 10 1 9 9 0 8 2 bufpl 256 17185 0 14074 198 0 198 198 0 8 0 anonpl 16 36957 0 24151 53 1 52 52 0 62 0 amapchunkpl 152 1083 0 962 7 0 7 7 0 158 2 amappl16 192 1025 0 223 41 0 41 41 0 8 0 amappl14 176 44 0 42 2 1 1 1 0 8 0 amappl13 168 14 0 13 1 0 1 1 0 8 0 amappl12 160 12 0 9 1 0 1 1 0 8 0 amappl11 152 42 0 28 1 0 1 1 0 8 0 amappl10 144 64 0 61 2 1 1 1 0 8 0 amappl9 136 577 0 572 1 0 1 1 0 8 0 amappl8 128 150 0 135 1 0 1 1 0 8 0 amappl7 120 31 0 26 1 0 1 1 0 8 0 amappl6 112 52 0 44 1 0 1 1 0 8 0 amappl5 104 120 0 110 1 0 1 1 0 8 0 amappl4 96 426 0 399 2 1 1 2 0 8 0 amappl3 88 128 0 121 1 0 1 1 0 8 0 amappl2 80 889 0 838 2 0 2 2 0 8 0 amappl1 72 13414 0 12960 24 11 13 19 0 8 4 amappl 72 533 0 494 1 0 1 1 0 75 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma64 64 259 0 259 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 17 0 17 1 1 0 1 0 8 0 aobjpl 64 5 0 0 1 0 1 1 0 8 0 uaddrrnd 24 235 0 219 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 235 0 219 1 0 1 1 0 8 0 vmmpekpl 168 5808 0 5790 1 0 1 1 0 8 0 vmmpepl 168 33299 0 31514 108 9 99 99 0 357 20 vmsppl 264 234 0 219 2 0 2 2 0 8 1 pdppl 4096 476 0 438 6 0 6 6 0 8 1 pvpl 32 128147 0 112092 135 5 130 130 0 265 0 pmappl 200 234 0 219 1 0 1 1 0 8 0 extentpl 40 39 0 25 1 0 1 1 0 8 0 phpool 112 334 0 7 10 0 10 10 0 8 0