Demand paging, the RTL8168H, links that come up late, and Ctrl+Alt+F1..F12

- Anonymous memory can be reserved without being backed: large mappings,
  MAP_NORESERVE and PROT_NONE are recorded and each page appears, zeroed,
  on first touch -- from trap() for the program, from uva2ka() for the
  kernel on its behalf. WebKit reserves 4 GB at start and touches a sliver;
  backing it all failed with ENOMEM and Epiphany aborted.
- r8169: the 8168G generation and later (the laptop's 8168H, XID 541) are
  taken from the firmware's out-of-band mode, get their PLL powered, the
  receive gate opened, and their PHY reached through the OCP window. The
  PHY's power-down bit is cleared; the old code kept it while restarting
  autonegotiation. Untested on the hardware so far.
- The network thread follows each device's link into lwIP. The link was
  read once at attach, 0.02 s into boot; real autonegotiation takes
  seconds, so on hardware the interface stayed down for good.
- Twelve terminals, switched with Ctrl+Alt+F1..F12 by default: the keys X
  uses, so the console and the desktop agree. AltGr+F-key is gone from
  the defaults (chvt -c altgr+F brings it back).
- SO_PASSCRED on Unix sockets, with SCM_CREDENTIALS delivered by recvmsg.
  WebKit sets it on its IPC sockets and aborted when refused.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01S1giNvrHTrPMPw7V6x1kQ4

kernel/fs/devfs.c

@@ -101,6 +101,12 @@ static const struct devnode devnodes[] = {
   { "tty4",    1, 14, D_ROOT },
   { "tty5",    1, 15, D_ROOT },
   { "tty6",    1, 16, D_ROOT },
+  { "tty7",    1, 17, D_ROOT },
+  { "tty8",    1, 18, D_ROOT },
+  { "tty9",    1, 19, D_ROOT },
+  { "tty10",   1, 20, D_ROOT },
+  { "tty11",   1, 21, D_ROOT },
+  { "tty12",   1, 22, D_ROOT },
   { "stdin",   1, 1,  D_ROOT },
   { "stdout",  1, 1,  D_ROOT },
   { "stderr",  1, 1,  D_ROOT },