assert failed: (use & VUSECOUNT_MASK) > NUM (2)

6 views

Skip to first unread message

syzbot

unread,

Apr 3, 2023, 9:30:49 PM4/3/23

to syzkaller-...@googlegroups.com

Hello,

syzbot found the following issue on:

HEAD commit: 879b36cfa4f4 Fix UAUDIO_DEBUG build.
git tree: netbsd
console output: https://syzkaller.appspot.com/x/log.txt?x=1243d759c80000
kernel config: https://syzkaller.appspot.com/x/.config?x=fab579639ba4bf0a
dashboard link: https://syzkaller.appspot.com/bug?extid=4243695fc960e9e2c756
compiler: g++ (Debian 10.2.1-6) 10.2.1 20210110

Unfortunately, I don't have any reproducer for this issue yet.

Downloadable assets:
disk image: https://storage.googleapis.com/syzbot-assets/5654519d9d5e/disk-879b36cf.raw.xz
netbsd.gdb: https://storage.googleapis.com/syzbot-assets/0207cd4429a5/netbsd-879b36cf.gdb.xz

IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+424369...@syzkaller.appspotmail.com

[ 73.3724916] panic: kernel diagnostic assertion "(use & VUSECOUNT_MASK) > 1" failed: file "/syzkaller/managers/ci2-netbsd/kernel/sys/kern/vfs_vnode.c", line 736
[ 73.3903287] cpu0: Begin traceback...
[ 73.4024778] vpanic() at netbsd:vpanic+0x282 sys/kern/subr_prf.c:291
[ 73.4324767] _sub_D_65535_0() at netbsd:_sub_D_65535_0+-0x6c3e
[ 73.4724782] vtryrele() at netbsd:vtryrele+0x195 sys/kern/vfs_vnode.c:736
[ 73.5124781] vrele() at netbsd:vrele+0x17 sys/kern/vfs_vnode.c:1017
[ 73.5424793] cwdfree() at netbsd:cwdfree+0x5d cwdfree sys/kern/vfs_cwd.c:147 [inline]
[ 73.5424793] cwdfree() at netbsd:cwdfree+0x5d sys/kern/vfs_cwd.c:138
[ 73.5724774] exit1() at netbsd:exit1+0x31d sys/kern/kern_exit.c:302
[ 73.6025005] sys_exit() at netbsd:sys_exit+0x92 sys/kern/kern_exit.c:180
[ 73.6425229] syscall() at netbsd:syscall+0x25a sy_call sys/sys/syscallvar.h:65 [inline]
[ 73.6425229] syscall() at netbsd:syscall+0x25a sy_invoke sys/sys/syscallvar.h:94 [inline]
[ 73.6425229] syscall() at netbsd:syscall+0x25a sys/arch/x86/x86/syscall.c:138
[ 73.6524779] --- syscall (number 1) ---
[ 73.6625184] netbsd:syscall+0x25a:
[ 73.6625184] cpu0: End traceback...
[ 73.6743481] fatal breakpoint trap in supervisor mode
[ 73.6743481] trap type 1 code 0 rip 0xffffffff8023230d cs 0x8 rflags 0x282 cr2 0x7cbd8c273120 ilevel 0 rsp 0xffffaf0251138ab0
[ 73.6902175] curlwp 0xffffaf00133e56c0 pid 971.971 lowest kstack 0xffffaf02511312c0
Stopped in pid 971.971 (syz-executor.3) at netbsd:breakpoint+0x5: leave
?
breakpoint() at netbsd:breakpoint+0x5
db_panic() at netbsd:db_panic+0x105 sys/ddb/db_panic.c:69
vpanic() at netbsd:vpanic+0x282 sys/kern/subr_prf.c:291
_sub_D_65535_0() at netbsd:_sub_D_65535_0+-0x6c3e
vtryrele() at netbsd:vtryrele+0x195 sys/kern/vfs_vnode.c:736
vrele() at netbsd:vrele+0x17 sys/kern/vfs_vnode.c:1017
cwdfree() at netbsd:cwdfree+0x5d cwdfree sys/kern/vfs_cwd.c:147 [inline]
cwdfree() at netbsd:cwdfree+0x5d sys/kern/vfs_cwd.c:138
exit1() at netbsd:exit1+0x31d sys/kern/kern_exit.c:302
sys_exit() at netbsd:sys_exit+0x92 sys/kern/kern_exit.c:180
syscall() at netbsd:syscall+0x25a sy_call sys/sys/syscallvar.h:65 [inline]
syscall() at netbsd:syscall+0x25a sy_invoke sys/sys/syscallvar.h:94 [inline]
syscall() at netbsd:syscall+0x25a sys/arch/x86/x86/syscall.c:138
--- syscall (number 1) ---
netbsd:syscall+0x25a:
Panic string: kernel diagnostic assertion "(use & VUSECOUNT_MASK) > 1" failed: file "/syzkaller/managers/ci2-netbsd/kernel/sys/kern/vfs_vnode.c", line 736
PID LID S CPU FLAGS STRUCT LWP * NAME WAIT
971 > 971 7 0 10000000 ffffaf00133e56c0 syz-executor.3
1852 1852 3 1 180 ffffaf0012ca4040 syz-executor.5 parked
2217 2217 2 0 140 ffffaf0012d0d640 syz-executor.3
1388 1388 3 1 1c0 ffffaf0012bcd180 syz-executor.5 pipe_rd
1237 1237 3 0 1c0 ffffaf0013def680 syz-executor.4 pipe_rd
952 952 3 0 1c0 ffffaf0013d9ca80 syz-executor.1 pipe_rd
1240 1240 3 1 1c0 ffffaf0013d9c640 syz-executor.2 pipe_rd
1107 1107 3 0 1c0 ffffaf0013d9c200 syz-executor.0 pipe_rd
1230 1207 3 0 180 ffffaf0013e8b700 syz-fuzzer wait
1230 1382 3 0 180 ffffaf0013e24280 syz-fuzzer wait
1230 1245 2 0 100 ffffaf0013defac0 syz-fuzzer
1230 1246 3 0 180 ffffaf0013def240 syz-fuzzer wait
1230 991 3 0 180 ffffaf0013cffa40 syz-fuzzer wait
1230 829 3 1 180 ffffaf0012ad1500 syz-fuzzer parked
1230 1115 3 1 180 ffffaf0013cff1c0 syz-fuzzer parked
1230 1241 3 1 180 ffffaf00133e5b00 syz-fuzzer parked
1230 942 3 0 180 ffffaf00133e5280 syz-fuzzer wait
1230 449 3 0 180 ffffaf00133c5a80 syz-fuzzer wait
1230 1229 3 1 180 ffffaf0012a48340 syz-fuzzer parked
1230 1233 2 0 140 ffffaf00126e7b80 syz-fuzzer
1230 1230 3 0 180 ffffaf001339ba00 syz-fuzzer parked
1238 1238 3 0 180 ffffaf0012ad1940 sshd select
1259 1259 3 0 180 ffffaf00133b4a40 getty nanoslp
1106 1106 3 1 180 ffffaf00134879c0 getty nanoslp
1086 1086 3 0 180 ffffaf00134b3180 getty nanoslp
1222 1222 3 1 1c0 ffffaf00126eabc0 getty ttyraw
1095 1095 3 0 180 ffffaf00133c5640 sshd select
1096 1096 3 1 180 ffffaf0012d8a040 powerd kqueue
699 699 3 1 180 ffffaf00133fb2c0 syslogd kqueue
559 559 3 0 180 ffffaf0012c27ac0 dhcpcd poll
746 746 3 0 180 ffffaf0012cd0100 dhcpcd poll
745 745 3 1 180 ffffaf0012c386c0 dhcpcd poll
599 599 3 1 180 ffffaf0012c93bc0 dhcpcd poll
487 487 3 0 180 ffffaf0012dc70c0 dhcpcd poll
292 292 3 1 180 ffffaf0012dae900 dhcpcd poll
485 485 3 0 180 ffffaf0012dae4c0 dhcpcd poll
1 1 3 0 180 ffffaf0012877180 init wait
0 1488 5 0 200 ffffaf0013487140 (zombie)
0 673 3 0 200 ffffaf00129a16c0 physiod physiod
0 196 3 0 200 ffffaf00129a3700 pooldrain pooldrain
0 195 3 0 200 ffffaf00129a32c0 ioflush syncer
0 194 3 1 200 ffffaf00129a1b00 pgdaemon pgdaemon
0 167 3 1 200 ffffaf0012961ac0 usb7 usbevt
0 172 3 1 200 ffffaf0012961680 usb6 usbevt
0 170 3 1 200 ffffaf0012961240 usb5 usbevt
0 168 3 0 200 ffffaf0012915a80 usb4 usbevt
0 166 3 0 200 ffffaf0012915640 usb3 usbevt
0 165 3 0 200 ffffaf0012915200 usb2 usbevt
0 31 3 1 200 ffffaf00128d9a40 usb1 usbevt
0 63 3 1 200 ffffaf00128d9600 usb0 usbevt
0 126 3 0 200 ffffaf00128d91c0 usbtask-dr usbtsk
0 125 3 1 200 ffffaf0012877a00 usbtask-hc usbtsk
0 124 3 0 200 ffffaf0010d76b00 swwreboot swwreboot
0 123 3 0 200 ffffaf00128775c0 npfgc0 npfgcw
0 122 3 0 200 ffffaf001286a9c0 rt_free rt_free
0 121 3 0 200 ffffaf001286a580 unpgc unpgc
0 120 3 0 200 ffffaf001286a140 key_timehandler key_timehandler
0 119 3 1 200 ffffaf001271b980 icmp6_wqinput/1 icmp6_wqinput
0 118 3 0 200 ffffaf001271b540 icmp6_wqinput/0 icmp6_wqinput
0 117 3 0 200 ffffaf001271b100 nd6_timer nd6_timer
0 116 3 1 200 ffffaf0012713940 carp6_wqinput/1 carp6_wqinput
0 115 3 0 200 ffffaf0012713500 carp6_wqinput/0 carp6_wqinput
0 114 3 1 200 ffffaf00127130c0 carp_wqinput/1 carp_wqinput
0 113 3 0 200 ffffaf0012703900 carp_wqinput/0 carp_wqinput
0 112 3 1 200 ffffaf00127034c0 icmp_wqinput/1 icmp_wqinput
0 111 3 0 200 ffffaf0012703080 icmp_wqinput/0 icmp_wqinput
0 110 3 0 200 ffffaf00126eb8c0 rt_timer rt_timer
0 109 3 0 200 ffffaf00126eb040 vmem_rehash vmem_rehash
0 100 3 0 200 ffffaf00126e7300 entbutler entropy
0 99 3 0 200 ffffaf00120bcb40 viomb balloon
0 98 3 1 200 ffffaf00120bc700 vioif0_txrx/1 vioif0_txrx
0 97 3 0 200 ffffaf00120bc2c0 vioif0_txrx/0 vioif0_txrx
0 30 3 0 200 ffffaf0010d766c0 scsibus0 sccomp
0 29 3 0 200 ffffaf0010d76280 pms0 pmsreset
0 28 3 1 200 ffffaf0010cbcac0 xcall/1 xcall
0 27 1 1 200 ffffaf0010cbc680 softser/1
0 26 1 1 200 ffffaf0010cbc240 softclk/1
0 25 1 1 200 ffffaf0010cb9a80 softbio/1
0 24 1 1 200 ffffaf0010cb9640 softnet/1
0 > 23 1 1 201 ffffaf0010cb9200 idle/1
0 22 3 0 200 ffffaf000fb56a40 lnxsyswq lnxsyswq
0 21 3 0 200 ffffaf000fb56600 lnxubdwq lnxubdwq
0 20 3 0 200 ffffaf000fb561c0 lnxpwrwq lnxpwrwq
0 19 3 0 200 ffffaf000fb55a00 lnxlngwq lnxlngwq
0 18 3 0 200 ffffaf000fb555c0 lnxhipwq lnxhipwq
0 17 3 0 200 ffffaf000fb55180 lnxrcugc lnxrcugc
0 16 3 0 200 ffffaf000fb4e9c0 sysmon smtaskq
0 15 3 0 200 ffffaf000fb4e580 pmfsuspend pmfsuspend
0 14 3 0 200 ffffaf000fb4e140 pmfevent pmfevent
0 13 3 0 200 ffffaf000fb49980 sopendfree sopendfr
0 12 3 0 200 ffffaf000fb49540 ifwdog ifwdog
0 11 3 1 200 ffffaf000fb49100 iflnkst iflnkst
0 10 3 1 200 ffffaf000fb3c940 nfssilly nfssilly
0 9 3 0 200 ffffaf000fb3c500 vdrain vdrain
0 8 3 0 200 ffffaf000fb3c0c0 modunload mod_unld
0 7 3 0 200 ffffaf000fb33900 xcall/0 xcall
0 6 1 0 200 ffffaf000fb334c0 softser/0
0 5 1 0 200 ffffaf000fb33080 softclk/0
0 4 1 0 200 ffffaf000fb318c0 softbio/0
0 3 1 0 200 ffffaf000fb31480 softnet/0
0 2 1 0 201 ffffaf000fb31040 idle/0
0 0 3 0 200 ffffffff8334bc80 swapper uvm
[Locks tracked through LWPs]

****** LWP 971.971 (syz-executor.3) @ 0xffffaf00133e56c0, l_stat=7

*** Locks held:

* Lock 0 (initialized at netbsd:fork1+0x392 sys/kern/kern_fork.c:366)
lock address : ffffaf0012d79490
type : sleep/adaptive
initialized : netbsd:fork1+0x392
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffffaf00133e56c0 last held: 0xffffaf00133e56c0
last locked* : netbsd:exit1+0x2f2
unlocked : 0
owner/count : 0xffffaf00133e56c0 flags : 0x0000000000000004
Turnstile: no active turnstile for this lock.

*** Locks wanted: none

****** LWP 1240.1240 (syz-executor.2) @ 0xffffaf0013d9c640, l_stat=3

*** Locks held:

* Lock 0 (initialized at netbsd:vcache_alloc+0x3e sys/kern/vfs_vnode.c:1376)
lock address : ffffaf0013dcbcc0
type : sleep/adaptive
initialized : netbsd:vcache_alloc+0x3e
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 0
relevant lwp : 0xffffaf0013d9c640 last held: 0xffffaf0013d9c640
last locked* : netbsd:genfs_lock+0x15d
unlocked : netbsd:genfs_unlock+0x2a
owner/count : 000000000000000000 flags : 000000000000000000
Turnstile: no active turnstile for this lock.

* Lock 1 (initialized at netbsd:vcache_alloc+0x3e sys/kern/vfs_vnode.c:1376)
lock address : ffffaf0012c702c0
type : sleep/adaptive
initialized : netbsd:vcache_alloc+0x3e
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 0
relevant lwp : 0xffffaf0013d9c640 last held: 0xffffaf0013d9c640
last locked* : netbsd:genfs_lock+0x15d
unlocked : 0
owner/count : 000000000000000000 flags : 000000000000000000
Turnstile: no active turnstile for this lock.

*** Locks wanted: none

****** LWP 746.746 (dhcpcd) @ 0xffffaf0012cd0100, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:module_hook_init+0x1c sys/kern/kern_module_hook.c:132)
lock address : netbsd:module_hook
type : sleep/adaptive
initialized : netbsd:module_hook_init+0x1c
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffffaf0012cd0100 last held: 000000000000000000
last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 745.745 (dhcpcd) @ 0xffffaf0012c386c0, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:module_hook_init+0x1c sys/kern/kern_module_hook.c:132)
lock address : netbsd:module_hook
type : sleep/adaptive
initialized : netbsd:module_hook_init+0x1c
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 0
relevant lwp : 0xffffaf0012c386c0 last held: 000000000000000000
last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 292.292 (dhcpcd) @ 0xffffaf0012dae900, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:module_hook_init+0x1c sys/kern/kern_module_hook.c:132)
lock address : netbsd:module_hook
type : sleep/adaptive
initialized : netbsd:module_hook_init+0x1c
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 0
relevant lwp : 0xffffaf0012dae900 last held: 000000000000000000
last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 485.485 (dhcpcd) @ 0xffffaf0012dae4c0, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:module_hook_init+0x1c sys/kern/kern_module_hook.c:132)
lock address : netbsd:module_hook
type : sleep/adaptive
initialized : netbsd:module_hook_init+0x1c
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffffaf0012dae4c0 last held: 000000000000000000
last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 0.26 (softclk/1) @ 0xffffaf0010cbc240, l_stat=1

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:module_hook_init+0x1c sys/kern/kern_module_hook.c:132)
lock address : netbsd:module_hook
type : sleep/adaptive
initialized : netbsd:module_hook_init+0x1c
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 0
relevant lwp : 0xffffaf0010cbc240 last held: 000000000000000000
last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 0.11 (iflnkst) @ 0xffffaf000fb49100, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:module_hook_init+0x1c sys/kern/kern_module_hook.c:132)
lock address : netbsd:module_hook
type : sleep/adaptive
initialized : netbsd:module_hook_init+0x1c
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 0
relevant lwp : 0xffffaf000fb49100 last held: 000000000000000000
last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 0.0 (swapper) @ 0xffffffff8334bc80, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:module_hook_init+0x1c sys/kern/kern_module_hook.c:132)
lock address : netbsd:module_hook
type : sleep/adaptive
initialized : netbsd:module_hook_init+0x1c
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffffffff8334bc80 last held: 000000000000000000
last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

[Locks tracked through CPUs]

******* Locks held on cpu0:

* Lock 0 (initialized at netbsd:kprintf_init+0x61 sys/kern/subr_prf.c:155)
lock address : netbsd:kprintf_mtx
type : spin
initialized : netbsd:kprintf_init+0x61
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffffaf00133e56c0 last held: 0xffffaf00133e56c0
last locked* : netbsd:kprintf_lock+0x33
unlocked : netbsd:kprintf_unlock+0x53
owner field : 0x0000000000000800 wait/spin: 0/1

PAGE FLAG PQ UOBJECT UANON
0xffffaf0000017180 0041 00000000 0x0 0x0
0xffffaf0000017200 0041 00000000 0x0 0x0
0xffffaf0000017280 0041 00000000 0x0 0x0
0xffffaf0000017300 0041 00000000 0x0 0x0
0xffffaf0000017380 0041 00000000 0x0 0x0
0xffffaf0000017400 0041 00000000 0x0 0x0
0xffffaf0000017480 0041 00000000 0x0 0x0
0xffffaf0000017500 0041 00000000 0x0 0x0
0xffffaf0000017580 0041 00000000 0x0 0x0
0xffffaf0000017600 0041 00000000 0x0 0x0
0xffffaf0000017680 0041 00000000 0x0 0x0
0xffffaf0000017700 0041 00000000 0x0 0x0
0xffffaf0000017780 0041 00000000 0x0 0x0
0xffffaf0000017800 0041 00000000 0x0 0x0
0xffffaf0000017880 0041 00000000 0x0 0x0
0xffffaf0000017900 0041 00000000 0x0 0x0
0xffffaf0000017980 0041 00000000 0x0 0x0
0xffffaf0000017a00 0041 00000000 0x0 0x0
0xffffaf0000017a80 0041 00000000 0x0 0x0
0xffffaf0000017b00 0041 00000000 0x0 0x0
0xffffaf0000017b80 0041 00000000 0x0 0x0
0xffffaf0000017c00 0041 00000000 0x0 0x0
0xffffaf0000017c80 0041 00000000 0x0 0x0
0xffffaf0000017d00 0041 00000000 0x0 0x0
0xffffaf0000017d80 0041 00000000 0x0 0x0
0xffffaf0000017e00 0041 00000000 0x0 0x0
0xffffaf0000017e80 0041 00000000 0x0 0x0
0xffffaf0000017f00 0041 00000000 0x0 0x0
0xffffaf0000017f80 0041 00000000 0x0 0x0
0xffffaf0000018000 0041 00000000 0x0 0x0
0xffffaf0000018080 0041 00000000 0x0 0x0
0xffffaf0000018100 0041 00000000 0x0 0x0
0xffffaf0000018180 0041 00000000 0x0 0x0
0xffffaf0000018200 0041 00000000 0x0 0x0
0xffffaf0000018280 0041 00000000 0x0 0x0
0xffffaf0000018300 0041 00000000 0x0 0x0
0xffffaf0000018380 0041 00000000 0x0 0x0
0xffffaf0000018400 0041 00000000 0x0 0x0
0xffffaf0000018480 0041 00000000 0x0 0x0
0xffffaf0000018500 0041 00000000 0x0 0x0
0xffffaf0000018580 0041 00000000 0x0 0x0
0xffffaf0000018600 0041 00000000 0x0 0x0
0xffffaf0000018680 0041 00000000 0x0 0x0
0xffffaf0000018700 0041 00000000 0x0 0x0
0xffffaf0000018780 0041 00000000 0x0 0x0
0xffffaf0000018800 0041 00000000 0x0 0x0
0xffffaf0000018880 0041 00000000 0x0 0x0
0xffffaf0000018900 0041 00000000 0x0 0x0
0xffffaf0000018980 0041 00000000 0x0 0x0
0xffffaf0000018a00 0041 00000000 0x0 0x0
0xffffaf0000018a80 0041 00000000 0x0 0x0
0xffffaf0000018b00 0041 00000000 0x0 0x0
0xffffaf0000018b80 0041 00000000 0x0 0x0
0xffffaf0000018c00 0041 00000000 0x0 0x0
0xffffaf0000018c80 0041 00000000 0x0 0x0
0xffffaf0000018d00 0041 00000000 0x0 0x0
0xffffaf0000018d80 0041 00000000 0x0 0x0
0xffffaf0000018e00 0041 00000000 0x0 0x0
0xffffaf0000018e80 0041 00000000 0x0 0x0
0xffffaf0000018f00 0041 00000000 0x0 0x0
0xffffaf0000018f80 0041 00000000 0x0 0x0
0xffffaf0000019000 0041 00000000 0x0 0x0
0xffffaf0000019080 0041 00000000 0x0 0x0
0xffffaf0000019100 0041 00000000 0x0 0x0
0xffffaf0000019180 0041 00000000 0x0 0x0
0xffffaf0000019200 0041 00000000 0x0 0x0
0xffffaf0000019280 0041 00000000 0x0 0x0
0xffffaf0000019300 0041 00000000 0x0 0x0
0xffffaf0000019380 0041 00000000 0x0 0x0
0xffffaf0000019400 0041 00000000 0x0 0x0
0xffffaf0000019480 0041 00000000 0x0 0x0
0xffffaf0000019500 0041 00000000 0x0 0x0
0xffffaf0000019580 0041 00000000 0x0 0x0
0xffffaf0000019600 0041 00000000 0x0 0x0
0xffffaf0000019680 0041 00000000 0x0 0x0
0xffffaf0000019700 0041 00000000 0x0 0x0
0xffffaf0000019780 0041 00000000 0x0 0x0
0xffffaf0000019800 0041 00000000 0x0 0x0
0xffffaf0000019880 0041 00000000 0x0 0x0
0xffffaf0000019900 0041 00000000 0x0 0x0
0xffffaf0000019980 0041 00000000 0x0 0x0
0xffffaf0000019a00 0041 00000000 0x0 0x0
0xffffaf0000019a80 0041 00000000 0x0 0x0
0xffffaf0000019b00 0041 00000000 0x0 0x0
0xffffaf0000019b80 0041 00000000 0x0 0x0
0xffffaf0000019c00 0041 00000000 0x0 0x0
0xffffaf0000019c80 0041 00000000 0x0 0x0
0xffffaf0000019d00 0041 00000000 0x0 0x0
0xffffaf0000019d80 0041 00000000 0x0 0x0
0xffffaf0000019e00 0041 00000000 0x0 0x0
0xffffaf0000019e80 0041 00000000 0x0 0x0
0xffffaf0000019f00 0041 00000000 0x0 0x0
0xffffaf0000019f80 0041 00000000 0x0 0x0
0xffffaf000001a000 0041 00000000 0x0 0x0
0xffffaf000001a080 0041 00000000 0x0 0x0
0xffffaf000001a100 0041 00000000 0x0 0x0
0xffffaf000001a180 0041 00000000 0x0 0x0
0xffffaf000001a200 0041 00000000 0x0 0x0
0xffffaf000001a280 0041 00000000 0x0 0x0
0xffffaf000001a300 0041 00000000 0x0 0x0
0xffffaf000001a380 0041 00000000 0x0 0x0
0xffffaf000001a400 0041 00000000 0x0 0x0
0xffffaf000001a480 0041 00000000 0x0 0x0
0xffffaf000001a500 0041 00000000 0x0 0x0
0xffffaf000001a580 0041 00000000 0x0 0x0
0xffffaf000001a600 0041 00000000 0x0 0x0
0xffffaf000001a680 0041 00000000 0x0 0x0
0xffffaf000001a700 0041 00000000 0x0 0x0
0xffffaf000001a780 0041 00000000 0x0 0x0
0xffffaf000001a800 0041 00000000 0x0 0x0
0xffffaf000001a880 0041 00000000 0x0 0x0
0xffffaf000001a900 0041 00000000 0x0 0x0
0xffffaf000001a980 0041 00000000 0x0 0x0
0xffffaf000001aa00 0041 00000000 0x0 0x0
0xffffaf000001aa80 0041 00000000 0x0 0x0
0xffffaf000001ab00 0041 00000000 0x0 0x0
0xffffaf000001ab80 0041 00000000 0x0 0x0
0xffffaf000001ac00 0041 00000000 0x0 0x0
0xffffaf000001ac80 0041 00000000 0x0 0x0
0xffffaf000001ad00 0041 00000000 0x0 0x0
0xffffaf000001ad80 0041 00000000 0x0 0x0
0xffffaf000001ae00 0041 00000000 0x0 0x0
0xffffaf000001ae80 0041 00000000 0x0 0x0
0xffffaf000001af00 0041 00000000 0x0 0x0
0xffffaf000001af80 0041 00000000 0x0 0x0
0xffffaf000001b000 0041 00000000 0x0 0x0
0xffffaf000001b080 0041 00000000 0x0 0x0
0xffffaf000001b100 0041 00000000 0x0 0x0
0xffffaf000001b180 0041 00000000 0x0 0x0
0xffffaf000001b200 0041 00000000 0x0 0x0
0xffffaf000001b280 0041 00000000 0x0 0x0
0xffffaf000001b300 0041 00000000 0x0 0x0
0xffffaf000001b380 0041 00000000 0x0 0x0
0xffffaf000001b400 0041 00000000 0x0 0x0
0xffffaf000001b480 0041 00000000 0x0 0x0
0xffffaf000001b500 0041 00000000 0x0 0x0
0xffffaf000001b580 0041 00000000 0x0 0x0
0xffffaf000001b600 0041 00000000 0x0 0x0
0xffffaf000001b680 0041 00000000 0x0 0x0
0xffffaf000001b700 0041 00000000 0x0 0x0
0xffffaf000001b780 0041 00000000 0x0 0x0
0xffffaf000001b800 0041 00000000 0x0 0x0
0xffffaf000001b880 0041 00000000 0x0 0x0
0xffffaf000001b900 0041 00000000 0x0 0x0
0xffffaf000001b980 0041 00000000 0x0 0x0
0xffffaf000001ba00 0041 00000000 0x0 0x0
0xffffaf000001ba80 0041 00000000 0x0 0x0
0xffffaf000001bb00 0041 00000000 0x0 0x0
0xffffaf000001bb80 0001 00000000 0x0 0x0
0xffffaf000001bc00 0001 00000000 0x0 0x0
0xffffaf000001bc80 0001 00000000 0x0 0x0
0xffffaf000001bd00 0001 00000000 0x0 0x0
0xffffaf000001bd80 0001 00000000 0x0 0x0
0xffffaf000001be00 0001 00000000 0x0 0x0
0xffffaf000001be80 0001 00000000 0x0 0x0
0xffffaf000001bf00 0001 00000000 0x0 0x0
0xffffaf000001bf80 0001 00000000 0x0 0x0
0xffffaf000001c000 0001 00000000 0x0 0x0
0xffffaf000001c080 0001 00000000 0x0 0x0
0xffffaf000001c100 0001 00000000 0x0 0x0
0xffffaf000001c180 0001 00000000 0x0 0x0
0xffffaf000001c200 0001 00000000 0x0 0x0
0xffffaf000001c280 0001 00000000 0x0 0x0
0xffffaf000001c300 0001 00000000 0x0 0x0
0xffffaf000001c380 0001 00000000 0x0 0x0
0xffffaf000001c400 0001 00000000 0x0 0x0
0xffffaf000001c480 0001 00000000 0x0 0x0
0xffffaf000001c500 0001 00000000 0x0 0x0
0xffffaf000001c580 0001 00000000 0x0 0x0
0xffffaf000001c600 0001 00000000 0x0 0x0
0xffffaf000001c680 0001 00000000 0x0 0x0
0xffffaf000001c700 0001 00000000 0x0 0x0
0xffffaf000001c780 0001 00000000 0x0 0x0
0xffffaf000001c800 0001 00000000 0x0 0x0
0xffffaf000001c880 0001 00000000 0x0 0x0
0xffffaf000001c900 0001 00000000 0x0 0x0
0xffffaf000001c980 0001 00000000 0x0 0x0
0xffffaf000001ca00 0001 00000000 0x0 0x0
0xffffaf000001ca80 0001 00000000 0x0 0x0
0xffffaf000001cb00 0001 00000000 0x0 0x0
0xffffaf000001cb80 0001 00000000 0x0 0x0
0xffffaf000001cc00 0001 00000000 0x0 0x0
0xffffaf000001cc80 0001 00000000 0x0 0x0
0xffffaf000001cd00 0001 00000000 0x0 0x0
0xffffaf000001cd80 0001 00000000 0x0 0x0
0xffffaf000001ce00 0001 00000000 0x0 0x0
0xffffaf000001ce80 0001 00000000 0x0 0x0
0xffffaf000001cf00 0001 00000000 0x0 0x0
0xffffaf000001cf80 0001 00000000 0x0 0x0
0xffffaf000001d000 0001 00000000 0x0 0x0
0xffffaf000001d080 0001 00000000 0x0 0x0
0xffffaf000001d100 0001 00000000 0x0 0x0
0xffffaf000001d180 0001 00000000 0x0 0x0
0xffffaf000001d200 0001 00000000 0x0 0x0
0xffffaf000001d280 0001 00000000 0x0 0x0
0xffffaf000001d300 0001 00000000 0x0 0x0
0xffffaf000001d380 0001 00000000 0x0 0x0
0xffffaf000001d400 0001 00000000 0x0 0x0
0xffffaf000001d480 0001 00000000 0x0 0x0
0xffffaf000001d500 0001 00000000 0x0 0x0
0xffffaf000001d580 0001 00000000 0x0 0x0
0xffffaf000001d600 0001 00000000 0x0 0x0
0xffffaf000001d680 0001 00000000 0x0 0x0
0xffffaf000001d700 0001 00000000 0x0 0x0
0xffffaf000001d780 0001 00000000 0x0 0x0
0xffffaf000001d800 0001 00000000 0x0 0x0
0xffffaf000001d880 0001 00000000 0x0 0x0
0xffffaf000001d900 0001 00000000 0x0 0x0
0xffffaf000001d980 0001 00000000 0x0 0x0
0xffffaf000001da00 0001 00000000 0x0 0x0
0xffffaf000001da80 0001 00000000 0x0 0x0
0xffffaf000001db00 0001 00000000 0x0 0x0
0xffffaf000001db80 0001 00000000 0x0 0x0
0xffffaf000001dc00 0001 00000000 0x0 0x0
0xffffaf000001dc80 0001 00000000 0x0 0x0
0xffffaf000001dd00 0001 00000000 0x0 0x0
0xffffaf000001dd80 0001 00000000 0x0 0x0
0xffffaf000001de00 0001 00000000 0x0 0x0
0xffffaf000001de80 0001 00000000 0x0 0x0
0xffffaf000001df00 0001 00000000 0x0 0x0
0xffffaf000001df80 0001 00000000 0x0 0x0
0xffffaf000001e000 0001 00000000 0x0 0x0
0xffffaf000001e080 0001 00000000 0x0 0x0
0xffffaf000001e100 0001 00000000 0x0 0x0
0xffffaf000001e180 0001 00000000 0x0 0x0
0xffffaf000001e200 0001 00000000 0x0 0x0
0xffffaf000001e280 0001 00000000 0x0 0x0
0xffffaf000001e300 0001 00000000 0x0 0x0
0xffffaf000001e380 0001 00000000 0x0 0x0
0xffffaf000001e400 0001 00000000 0x0 0x0
0xffffaf000001e480 0001 00000000 0x0 0x0
0xffffaf000001e500 0001 00000000 0x0 0x0
0xffffaf000001e580 0001 00000000 0x0 0x0
0xffffaf000001e600 0001 00000000 0x0 0x0
0xffffaf000001e680 0001 00000000 0x0 0x0
0xffffaf000001e700 0001 00000000 0x0 0x0
0xffffaf000001e780 0001 00000000 0x0 0x0
0xffffaf000001e800 0001 00000000 0x0 0x0
0xffffaf000001e880 0001 00000000 0x0 0x0
0xffffaf000001e900 0001 00000000 0x0 0x0
0xffffaf000001e980 0001 00000000 0x0 0x0
0xffffaf000001ea00 0001 00000000 0x0 0x0
0xffffaf000001ea80 0001 00000000 0x0 0x0
0xffffaf000001eb00 0001 00000000 0x0 0x0
0xffffaf000001eb80 0001 00000000 0x0 0x0
0xffffaf000001ec00 0001 00000000 0x0 0x0
0xffffaf000001ec80 0001 00000000 0x0 0x0
0xffffaf000001ed00 0001 00000000 0x0 0x0
0xffffaf000001ed80 0001 00000000 0x0 0x0
0xffffaf000001ee00 0001 00000000 0x0 0x0
0xffffaf000001ee80 0001 00000000 0x0 0x0
0xffffaf000001ef00 0001 00000000 0x0 0x0
0xffffaf000001ef80 0001 00000000 0x0 0x0
0xffffaf000001f000 0001 00000000 0x0 0x0
0xffffaf000001f080 0001 00000000 0x0 0x0
0xffffaf000001f100 0001 00000000 0x0 0x0
0xffffaf000001f180 0001 00000000 0x0 0x0
0xffffaf000001f200 0001 00000000 0x0 0x0
0xffffaf000001f280 0001 00000000 0x0 0x0
0xffffaf000001f300 0001 00000000 0x0 0x0
0xffffaf000001f380 0001 00000000 0x0 0x0
0xffffaf000001f400 0001 00000000 0x0 0x0
0xffffaf000001f480 0001 00000000 0x0 0x0
0xffffaf000001f500 0001 00000000 0x0 0x0
0xffffaf000001f580 0001 00000000 0x0 0x0
0xffffaf000001f600 0001 00000000 0x0 0x0
0xffffaf000001f680 0001 00000000 0x0 0x0
0xffffaf000001f700 0001 00000000 0x0 0x0
0xffffaf000001f780 0001 00000000 0x0 0x0
0xffffaf000001f800 0001 00000000 0x0 0x0
0xffffaf000001f880 0001 00000000 0x0 0x0
0xffffaf000001f900 0001 00000000 0x0 0x0
0xffffaf000001f980 0001 00000000 0x0 0x0
0xffffaf000001fa00 0001 00000000 0x0 0x0
0xffffaf000001fa80 0001 00000000 0x0 0x0
0xffffaf000001fb00 0001 00000000 0x0 0x0
0xffffaf000001fb80 0001 00000000 0x0 0x0
0xffffaf000001fc00 0001 00000000 0x0 0x0
0xffffaf000001fc80 0001 00000000 0x0 0x0
0xffffaf000001fd00 0001 00000000 0x0 0x0
0xffffaf000001fd80 0001 00000000 0x0 0x0
0xffffaf000001fe00 0001 00000000 0x0 0x0
0xffffaf000001fe80 0001 00000000 0x0 0x0
0xffffaf000001ff00 0001 00000000 0x0 0x0
0xffffaf000001ff80 0001 00000000 0x0 0x0
0xffffaf0000020000 0001 00000000 0x0 0x0
0xffffaf0000020080 0001 00000000 0x0 0x0
0xffffaf0000020100 0001 00000000 0x0 0x0
0xffffaf0000020180 0001 00000000 0x0 0x0
0xffffaf0000020200 0001 00000000 0x0 0x0
0xffffaf0000020280 0001 00000000 0x0 0x0
0xffffaf0000020300 0001 00000000 0x0 0x0
0xffffaf0000020380 0001 00000000 0x0 0x0
0xffffaf0000020400 0001 00000000 0x0 0x0
0xffffaf0000020480 0001 00000000 0x0 0x0
0xffffaf0000020500 0001 00000000 0x0 0x0
0xffffaf0000020580 0001 00000000 0x0 0x0
0xffffaf0000020600 0001 00000000 0x0 0x0
0xffffaf0000020680 0001 00000000 0x0 0x0
0xffffaf0000020700 0001 00000000 0x0 0x0
0xffffaf0000020780 0001 00000000 0x0 0x0
0xffffaf0000020800 0001 00000000 0x0 0x0
0xffffaf0000020880 0001 00000000 0x0 0x0
0xffffaf0000020900 0001 00000000 0x0 0x0
0xffffaf0000020980 0001 00000000 0x0 0x0
0xffffaf0000020a00 0001 00000000 0x0 0x0
0xffffaf0000020a80 0001 00000000 0x0 0x0
0xffffaf0000020b00 0001 00000000 0x0 0x0
0xffffaf0000020b80 0001 00000000 0x0 0x0
0xffffaf0000020c00 0001 00000000 0x0 0x0
0xffffaf0000020c80 0001 00000000 0x0 0x0
0xffffaf0000020d00 0001 00000000 0x0 0x0
0xffffaf0000020d80 0001 00000000 0x0 0x0
0xffffaf0000020e00 0001 00000000 0x0 0x0
0xffffaf0000020e80 0001 00000000 0x0 0x0
0xffffaf0000020f00 0001 00000000 0x0 0x0
0xffffaf0000020f80 0001 00000000 0x0 0x0
0xffffaf0000021000 0001 00000000 0x0 0x0
0xffffaf0000021080 0001 00000000 0x0 0x0
0xffffaf0000021100 0001 00000000 0x0 0x0
0xffffaf0000021180 0001 00000000 0x0 0x0
0xffffaf0000021200 0001 00000000 0x0 0x0
0xffffaf0000021280 0001 00000000 0x0 0x0
0xffffaf0000021300 0001 00000000 0x0 0x0
0xffffaf0000021380 0001 00000000 0x0 0x0
0xffffaf0000021400 0001 00000000 0x0 0x0
0xffffaf0000021480 0001 00000000 0x0 0x0
0xffffaf0000021500 0001 00000000 0x0 0x0
0xffffaf0000021580 0001 00000000 0x0 0x0
0xffffaf0000021600 0001 00000000 0x0 0x0
0xffffaf0000021680 0001 00000000 0x0 0x0
0xffffaf0000021700 0001 00000000 0x0 0x0
0xffffaf0000021780 0001 00000000 0x0 0x0
0xffffaf0000021800 0001 00000000 0x0 0x0
0xffffaf0000021880 0001 00000000 0x0 0x0
0xffffaf0000021900 0001 00000000 0x0 0x0
0xffffaf0000021980 0001 00000000 0x0 0x0
0xffffaf0000021a00 0001 00000000 0x0 0x0
0xffffaf0000021a80 0001 00000000 0x0 0x0
0xffffaf0000021b00 0001 00000000 0x0 0x0
0xffffaf0000021b80 0001 00000000 0x0 0x0
0xffffaf0000021c00 0001 00000000 0x0 0x0
0xffffaf0000021c80 0001 00000000 0x0 0x0
0xffffaf0000021d00 0001 00000000 0x0 0x0
0xffffaf0000021d80 0001 00000000 0x0 0x0
0xffffaf0000021e00 0001 00000000 0x0 0x0
0xffffaf0000021e80 0001 00000000 0x0 0x0
0xffffaf0000021f00 0001 00000000 0x0 0x0
0xffffaf0000021f80 0001 00000000 0x0 0x0
0xffffaf0000022000 0001 00000000 0x0 0x0
0xffffaf0000022080 0001 00000000 0x0 0x0
0xffffaf0000022100 0001 00000000 0x0 0x0
0xffffaf0000022180 0001 00000000 0x0 0x0
0xffffaf0000022200 0001 00000000 0x0 0x0
0xffffaf0000022280 0001 00000000 0x0 0x0
0xffffaf0000022300 0001 00000000 0x0 0x0
0xffffaf0000022380 0001 00000000 0x0 0x0
0xffffaf0000022400 0001 00000000 0x0 0x0
0xffffaf0000022480 0001 00000000 0x0 0x0
0xffffaf0000022500 0001 00000000 0x0 0x0
0xffffaf0000022580 0001 00000000 0x0 0x0
0xffffaf0000022600 0001 00000000 0x0 0x0
0xffffaf0000022680 0001 00000000 0x0 0x0
0xffffaf0000022700 0001 00000000 0x0 0x0
0xffffaf0000022780 0001 00000000 0x0 0x0
0xffffaf0000022800 0001 00000000 0x0 0x0
0xffffaf0000022880 0001 00000000 0x0 0x0
0xffffaf0000022900 0001 00000000 0x0 0x0
0xffffaf0000022980 0001 00000000 0x0 0x0
0xffffaf0000022a00 0001 00000000 0x0 0x0
0xffffaf0000022a80 0001 00000000 0x0 0x0
0xffffaf0000022b00 0001 00000000 0x0 0x0
0xffffaf0000022b80 0001 00000000 0x0 0x0
0xffffaf0000022c00 0001 00000000 0x0 0x0
0xffffaf0000022c80 0001 00000000 0x0 0x0
0xffffaf0000022d00 0001 00000000 0x0 0x0
0xffffaf0000022d80 0001 00000000 0x0 0x0
0xffffaf0000022e00 0001 00000000 0x0 0x0
0xffffaf0000022e80 0001 00000000 0x0 0x0
0xffffaf0000022f00 0001 00000000 0x0 0x0
0xffffaf0000022f80 0001 00000000 0x0 0x0
0xffffaf0000023000 0001 00000000 0x0 0x0
0xffffaf0000023080 0001 00000000 0x0 0x0
0xffffaf0000023100 0001 00000000 0x0 0x0
0xffffaf0000023180 0001 00000000 0x0 0x0
0xffffaf0000023200 0001 00000000 0x0 0x0
0xffffaf0000023280 0001 00000000 0x0 0x0
0xffffaf0000023300 0001 00000000 0x0 0x0
0xffffaf0000023380 0001 00000000 0x0 0x0
0xffffaf0000023400 0001 00000000 0x0 0x0
0xffffaf0000023480 0001 00000000 0x0 0x0
0xffffaf0000023500 0001 00000000 0x0 0x0
0xffffaf0000023580 0001 00000000 0x0 0x0
0xffffaf0000023600 0001 00000000 0x0 0x0
0xffffaf0000023680 0001 00000000 0x0 0x0
0xffffaf0000023700 0001 00000000 0x0 0x0
0xffffaf0000023780 0001 00000000 0x0 0x0
0xffffaf0000023800 0001 00000000 0x0 0x0
0xffffaf0000023880 0001 00000000 0x0 0x0
0xffffaf0000023900 0001 00000000 0x0 0x0
0xffffaf0000023980 0001 00000000 0x0 0x0
0xffffaf0000023a00 0001 00000000 0x0 0x0
0xffffaf0000023a80 0001 00000000 0x0 0x0
0xffffaf0000023b00 0001 00000000 0x0 0x0
0xffffaf0000023b80 0001 00000000 0x0 0x0
0xffffaf0000023c00 0001 00000000 0x0 0x0
0xffffaf0000023c80 0001 00000000 0x0 0x0
0xffffaf0000023d00 0001 00000000 0x0 0x0
0xffffaf0000023d80 0001 00000000 0x0 0x0
0xffffaf0000023e00 0001 00000000 0x0 0x0
0xffffaf0000023e80 0001 00000000 0x0 0x0
0xffffaf0000023f00 0001 00000000 0x0 0x0
0xffffaf0000023f80 0001 00000000 0x0 0x0
0xffffaf0000024000 0001 00000000 0x0 0x0
0xffffaf0000024080 0001 00000000 0x0 0x0
0xffffaf0000024100 0001 00000000 0x0 0x0
0xffffaf0000024180 0001 00000000 0x0 0x0
0xffffaf0000024200 0001 00000000 0x0 0x0
0xffffaf0000024280 0001 00000000 0x0 0x0
0xffffaf0000024300 0001 00000000 0x0 0x0
0xffffaf0000024380 0001 00000000 0x0 0x0
0xffffaf0000024400 0001 00000000 0x0 0x0
0xffffaf0000024480 0001 00000000 0x0 0x0
0xffffaf0000024500 0001 00000000 0x0 0x0
0xffffaf0000024580 0001 00000000 0x0 0x0
0xffffaf0000024600 0001 00000000 0x0 0x0
0xffffaf0000024680 0001 00000000 0x0 0x0
0xffffaf0000024700 0001 00000000 0x0 0x0
0xffffaf0000024780 0001 00000000 0x0 0x0
0xffffaf0000024800 0001 00000000 0x0 0x0
0xffffaf0000024880 0001 00000000 0x0 0x0
0xffffaf0000024900 0001 00000000 0x0 0x0
0xffffaf0000024980 0001 00000000 0x0 0x0
0xffffaf0000024a00 0001 00000000 0x0 0x0
0xffffaf0000024a80 0001 00000000 0x0 0x0
0xffffaf0000024b00 0001 00000000 0x0 0x0
0xffffaf0000024b80 0001 00000000 0x0 0x0
0xffffaf0000024c00 0001 00000000 0x0 0x0
0xffffaf0000024c80 0001 00000000 0x0 0x0
0xffffaf0000024d00 0001 00000000 0x0 0x0
0xffffaf0000024d80 0001 00000000 0x0 0x0
0xffffaf0000024e00 0001 00000000 0x0 0x0
0xffffaf0000024e80 0001 00000000 0x0 0x0
0xffffaf0000024f00 0001 00000000 0x0 0x0
0xffffaf0000024f80 0001 00000000 0x0 0x0
0xffffaf0000025000 0001 00000000 0x0 0x0
0xffffaf0000025080 0001 00000000 0x0 0x0
0xffffaf0000025100 0001 00000000 0x0 0x0
0xffffaf0000025180 0001 00000000 0x0 0x0
0xffffaf0000025200 0001 00000000 0x0 0x0
0xffffaf0000025280 0001 00000000 0x0 0x0
0xffffaf0000025300 0001 00000000 0x0 0x0
0xffffaf0000025380 0001 00000000 0x0 0x0
0xffffaf0000025400 0001 00000000 0x0 0x0
0xffffaf0000025480 0001 00000000 0x0 0x0
0xffffaf0000025500 0001 00000000 0x0 0x0
0xffffaf0000025580 0001 00000000 0x0 0x0
0xffffaf0000025600 0001 00000000 0x0 0x0
0xffffaf0000025680 0001 00000000 0x0 0x0
0xffffaf0000025700 0001 00000000 0x0 0x0
0xffffaf0000025780 0001 00000000 0x0 0x0
0xffffaf0000025800 0001 00000000 0x0 0x0
0xffffaf0000025880 0001 00000000 0x0 0x0
0xffffaf0000025900 0001 00000000 0x0 0x0
0xffffaf0000025980 0001 00000000 0x0 0x0
0xffffaf0000025a00 0001 00000000 0x0 0x0
0xffffaf0000025a80 0001 00000000 0x0 0x0
0xffffaf0000025b00 0001 00000000 0x0 0x0
0xffffaf0000025b80 0001 00000000 0x0 0x0
0xffffaf0000025c00 0001 00000000 0x0 0x0
0xffffaf0000025c80 0001 00000000 0x0 0x0
0xffffaf0000025d00 0001 00000000 0x0 0x0
0xffffaf0000025d80 0001 00000000 0x0 0x0
0xffffaf0000025e00 0001 00000000 0x0 0x0
0xffffaf0000025e80 0001 00000000 0x0 0x0
0xffffaf0000025f00 0001 00000000 0x0 0x0
0xffffaf0000025f80 0001 00000000 0x0 0x0
0xffffaf0000026000 0001 00000000 0x0 0x0
0xffffaf0000026080 0001 00000000 0x0 0x0
0xffffaf0000026100 0001 00000000 0x0 0x0
0xffffaf0000026180 0001 00000000 0x0 0x0
0xffffaf0000026200 0001 00000000 0x0 0x0
0xffffaf0000026280 0001 00000000 0x0 0x0
0xffffaf0000026300 0001 00000000 0x0 0x0
0xffffaf0000026380 0001 00000000 0x0 0x0
0xffffaf0000026400 0001 00000000 0x0 0x0
0xffffaf0000026480 0001 00000000 0x0 0x0
0xffffaf0000026500 0001 00000000 0x0 0x0
0xffffaf0000026580 0001 00000000 0x0 0x0
0xffffaf0000026600 0001 00000000 0x0 0x0
0xffffaf0000026680 0001 00000000 0x0 0x0
0xffffaf0000026700 0001 00000000 0x0 0x0
0xffffaf0000026780 0001 00000000 0x0 0x0
0xffffaf0000026800 0001 00000000 0x0 0x0
0xffffaf0000026880 0001 00000000 0x0 0x0
0xffffaf0000026900 0001 00000000 0x0 0x0
0xffffaf0000026980 0001 00000000 0x0 0x0
0xffffaf0000026a00 0001 00000000 0x0 0x0
0xffffaf0000026a80 0001 00000000 0x0 0x0
0xffffaf0000026b00 0001 00000000 0x0 0x0
0xffffaf0000026b80 0001 00000000 0x0 0x0
0xffffaf0000026c00 0001 00000000 0x0 0x0
0xffffaf0000026c80 0001 00000000 0x0 0x0
0xffffaf0000026d00 0001 00000000 0x0 0x0
0xffffaf0000026d80 0001 00000000 0x0 0x0
0xffffaf0000026e00 0001 00000000 0x0 0x0
0xffffaf0000026e80 0001 00000000 0x0 0x0
0xffffaf0000026f00 0001 00000000 0x0 0x0
0xffffaf0000026f80 0001 00000000 0x0 0x0
0xffffaf0000027000 0001 00000000 0x0 0x0
0xffffaf0000027080 0001 00000000 0x0 0x0
0xffffaf0000027100 0001 00000000 0x0 0x0
0xffffaf0000027180 0001 00000000 0x0 0x0
0xffffaf0000027200 0001 00000000 0x0 0x0
0xffffaf0000027280 0001 00000000 0x0 0x0
0xffffaf0000027300 0001 00000000 0x0 0x0
0xffffaf0000027380 0001 00000000 0x0 0x0
0xffffaf0000027400 0001 00000000 0x0 0x0
0xffffaf0000027480 0001 00000000 0x0 0x0
0xffffaf0000027500 0001 00000000 0x0 0x0
0xffffaf0000027580 0001 00000000 0x0 0x0
0xffffaf0000027600 0001 00000000 0x0 0x0
0xffffaf0000027680 0001 00000000 0x0 0x0
0xffffaf0000027700 0001 00000000 0x0 0x0
0xffffaf0000027780 0001 00000000 0x0 0x0
0xffffaf0000027800 0001 00000000 0x0 0x0
0xffffaf0000027880 0001 00000000 0x0 0x0
0xffffaf0000027900 0001 00000000 0x0 0x0
0xffffaf0000027980 0001 00000000 0x0 0x0
0xffffaf0000027a00 0001 00000000 0x0 0x0
0xffffaf0000027a80 0001 00000000 0x0 0x0
0xffffaf0000027b00 0001 00000000 0x0 0x0
0xffffaf0000027b80 0001 00000000 0x0 0x0
0xffffaf0000027c00 0001 00000000 0x0 0x0
0xffffaf0000027c80 0001 00000000 0x0 0x0
0xffffaf0000027d00 0001 00000000 0x0 0x0
0xffffaf0000027d80 0001 00000000 0x0 0x0
0xffffaf0000027e00 0001 00000000 0x0 0x0
0xffffaf0000027e80 0001 00000000 0x0 0x0
0xffffaf0000027f00 0001 00000000 0x0 0x0
0xffffaf0000027f80 0001 00000000 0x0 0x0
0xffffaf0000028000 0001 00000000 0x0 0x0
0xffffaf0000028080 0001 00000000 0x0 0x0
0xffffaf0000028100 0001 00000000 0x0 0x0
0xffffaf0000028180 0001 00000000 0x0 0x0
0xffffaf0000028200 0001 00000000 0x0 0x0
0xffffaf0000028280 0001 00000000 0x0 0x0
0xffffaf0000028300 0001 00000000 0x0 0x0
0xffffaf0000028380 0001 00000000 0x0 0x0
0xffffaf0000028400 0001 00000000 0x0 0x0
0xffffaf0000028480 0001 00000000 0x0 0x0
0xffffaf0000028500 0001 00000000 0x0 0x0
0xffffaf0000028580 0001 00000000 0x0 0x0
0xffffaf0000028600 0001 00000000 0x0 0x0
0xffffaf0000028680 0001 00000000 0x0 0x0
0xffffaf0000028700 0001 00000000 0x0 0x0
0xffffaf0000028780 0001 00000000 0x0 0x0
0xffffaf0000028800 0001 00000000 0x0 0x0
0xffffaf0000028880 0001 00000000 0x0 0x0
0xffffaf0000028900 0001 00000000 0x0 0x0
0xffffaf0000028980 0001 00000000 0x0 0x0
0xffffaf0000028a00 0001 00000000 0x0 0x0
0xffffaf0000028a80 0001 00000000 0x0 0x0
0xffffaf0000028b00 0001 00000000 0x0 0x0
0xffffaf0000028b80 0001 00000000 0x0 0x0
0xffffaf0000028c00 0001 00000000 0x0 0x0
0xffffaf0000028c80 0001 00000000 0x0 0x0
0xffffaf0000028d00 0001 00000000 0x0 0x0
0xffffaf0000028d80 0001 00000000 0x0 0x0
0xffffaf0000028e00 0001 00000000 0x0 0x0
0xffffaf0000028e80 0001 00000000 0x0 0x0
0xffffaf0000028f00 0001 00000000 0x0 0x0
0xffffaf0000028f80 0001 00000000 0x0 0x0
0xffffaf0000029000 0001 00000000 0x0 0x0
0xffffaf0000029080 0001 00000000 0x0 0x0
0xffffaf0000029100 0001 00000000 0x0 0x0
0xffffaf0000029180 0001 00000000 0x0 0x0
0xffffaf0000029200 0001 00000000 0x0 0x0
0xffffaf0000029280 0001 00000000 0x0 0x0
0xffffaf0000029300 0001 00000000 0x0 0x0
0xffffaf0000029380 0001 00000000 0x0 0x0
0xffffaf0000029400 0001 00000000 0x0 0x0
0xffffaf0000029480 0001 00000000 0x0 0x0
0xffffaf0000029500 0001 00000000 0x0 0x0
0xffffaf0000029580 0001 00000000 0x0 0x0
0xffffaf0000029600 0001 00000000 0x0 0x0
0xffffaf0000029680 0001 00000000 0x0 0x0
0xffffaf0000029700 0001 00000000 0x0 0x0
0xffffaf0000029780 0001 00000000 0x0 0x0
0xffffaf0000029800 0001 00000000 0x0 0x0
0xffffaf0000029880 0001 00000000 0x0 0x0
0xffffaf0000029900 0001 00000000 0x0 0x0
0xffffaf0000029980 0001 00000000 0x0 0x0
0xffffaf0000029a00 0001 00000000 0x0 0x0
0xffffaf0000029a80 0001 00000000 0x0 0x0
0xffffaf0000029b00 0001 00000000 0x0 0x0
0xffffaf0000029b80 0001 00000000 0x0 0x0
0xffffaf0000029c00 0001 00000000 0x0 0x0
0xffffaf0000029c80 0001 00000000 0x0 0x0
0xffffaf0000029d00 0001 00000000 0x0 0x0
0xffffaf0000029d80 0001 00000000 0x0 0x0
0xffffaf0000029e00 0001 00000000 0x0 0x0
0xffffaf0000029e80 0001 00000000 0x0 0x0
0xffffaf0000029f00 0001 00000000 0x0 0x0
0xffffaf0000029f80 0001 00000000 0x0 0x0
0xffffaf000002a000 0001 00000000 0x0 0x0
0xffffaf000002a080 0001 00000000 0x0 0x0
0xffffaf000002a100 0001 00000000 0x0 0x0
0xffffaf000002a180 0001 00000000 0x0 0x0
0xffffaf000002a200 0001 00000000 0x0 0x0
0xffffaf000002a280 0001 00000000 0x0 0x0
0xffffaf000002a300 0001 00000000 0x0 0x0
0xffffaf000002a380 0001 00000000 0x0 0x0
0xffffaf000002a400 0001 00000000 0x0 0x0
0xffffaf000002a480 0001 00000000 0x0 0x0
0xffffaf000002a500 0001 00000000 0x0 0x0
0xffffaf000002a580 0001 00000000 0x0 0x0
0xffffaf000002a600 0001 00000000 0x0 0x0
0xffffaf000002a680 0001 00000000 0x0 0x0
0xffffaf000002a700 0001 00000000 0x0 0x0
0xffffaf000002a780 0001 00000000 0x0 0x0
0xffffaf000002a800 0001 00000000 0x0 0x0
0xffffaf000002a880 0001 00000000 0x0 0x0
0xffffaf000002a900 0001 00000000 0x0 0x0
0xffffaf000002a980 0001 00000000 0x0 0x0
0xffffaf000002aa00 0001 00000000 0x0 0x0
0xffffaf000002aa80 0001 00000000 0x0 0x0
0xffffaf000002ab00 0001 00000000 0x0 0x0
0xffffaf000002ab80 0001 00000000 0x0 0x0
0xffffaf000002ac00 0001 00000000 0x0 0x0
0xffffaf000002ac80 0001 00000000 0x0 0x0
0xffffaf000002ad00 0001 00000000 0x0 0x0
0xffffaf000002ad80 0001 00000000 0x0 0x0
0xffffaf000002ae00 0001 00000000 0x0 0x0
0xffffaf000002ae80 0001 00000000 0x0 0x0
0xffffaf000002af00 0001 00000000 0x0 0x0
0xffffaf000002af80 0001 00000000 0x0 0x0
0xffffaf000002b000 0001 00000000 0x0 0x0
0xffffaf000002b080 0001 00000000 0x0 0x0
0xffffaf000002b100 0001 00000000 0x0 0x0
0xffffaf000002b180 0001 00000000 0x0 0x0
0xffffaf000002b200 0001 00000000 0x0 0x0
0xffffaf000002b280 0001 00000000 0x0 0x0
0xffffaf000002b300 0001 00000000 0x0 0x0
0xffffaf000002b380 0001 00000000 0x0 0x0
0xffffaf000002b400 0001 00000000 0x0 0x0
0xffffaf000002b480 0001 00000000 0x0 0x0
0xffffaf000002b500 0001 00000000 0x0 0x0
0xffffaf000002b580 0001 00000000 0x0 0x0
0xffffaf000002b600 0001 00000000 0x0 0x0
0xffffaf000002b680 0001 00000000 0x0 0x0
0xffffaf000002b700 0001 00000000 0x0 0x0
0xffffaf000002b780 0001 00000000 0x0 0x0
0xffffaf000002b800 0001 00000000 0x0 0x0
0xffffaf000002b880 0001 00000000 0x0 0x0
0xffffaf000002b900 0001 00000000 0x0 0x0
0xffffaf000002b980 0001 00000000 0x0 0x0
0xffffaf000002ba00 0001 00000000 0x0 0x0
0xffffaf000002ba80 0001 00000000 0x0 0x0
0xffffaf000002bb00 0001 00000000 0x0 0x0
0xffffaf000002bb80 0001 00000000 0x0 0x0
0xffffaf000002bc00 0001 00000000 0x0 0x0
0xffffaf000002bc80 0001 00000000 0x0 0x0
0xffffaf000002bd00 0001 00000000 0x0 0x0
0xffffaf000002bd80 0001 00000000 0x0 0x0
0xffffaf000002be00 0001 00000000 0x0 0x0
0xffffaf000002be80 0001 00000000 0x0 0x0
0xffffaf000002bf00 0001 00000000 0x0 0x0
0xffffaf000002bf80 0001 00000000 0x0 0x0
0xffffaf000002c000 0001 00000000 0x0 0x0
0xffffaf000002c080 0001 00000000 0x0 0x0
0xffffaf000002c100 0001 00000000 0x0 0x0
0xffffaf000002c180 0001 00000000 0x0 0x0
0xffffaf000002c200 0001 00000000 0x0 0x0
0xffffaf000002c280 0001 00000000 0x0 0x0
0xffffaf000002c300 0001 00000000 0x0 0x0
0

---
This report is generated by a bot. It may contain errors.
See https://goo.gl/tpsmEJ for more information about syzbot.
syzbot engineers can be reached at syzk...@googlegroups.com.

syzbot will keep track of this issue. See:
https://goo.gl/tpsmEJ#status for how to communicate with syzbot.

syzbot

unread,

Jun 23, 2023, 2:17:52 PM6/23/23

to syzkaller-...@googlegroups.com

syzbot has found a reproducer for the following issue on:

HEAD commit: 790814e76df3 paxctl(8): brush up
git tree: netbsd
console output: https://syzkaller.appspot.com/x/log.txt?x=1461ea1b280000

kernel config: https://syzkaller.appspot.com/x/.config?x=fab579639ba4bf0a
dashboard link: https://syzkaller.appspot.com/bug?extid=4243695fc960e9e2c756
compiler: g++ (Debian 10.2.1-6) 10.2.1 20210110

syz repro: https://syzkaller.appspot.com/x/repro.syz?x=13ae67b0a80000

Downloadable assets:
disk image: https://storage.googleapis.com/syzbot-assets/9b907e9e690f/disk-790814e7.raw.xz
netbsd.gdb: https://storage.googleapis.com/syzbot-assets/4e3e4dc9feb5/netbsd-790814e7.gdb.xz

IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+424369...@syzkaller.appspotmail.com

[ 44.3378001] panic: kernel diagnostic assertion "(use & VUSECOUNT_MASK) > 1" failed: file "/syzkaller/managers/ci2-netbsd/kernel/sys/kern/vfs_vnode.c", line 736
[ 44.3378001] cpu1: Begin traceback...
[ 44.3477988] vpanic() at netbsd:vpanic+0x282 sys/kern/subr_prf.c:292
[ 44.3777952] _sub_D_65535_0() at netbsd:_sub_D_65535_0+-0x6bd2
[ 44.4077958] vtryrele() at netbsd:vtryrele+0x195 sys/kern/vfs_vnode.c:736
[ 44.4377958] vrele() at netbsd:vrele+0x17 sys/kern/vfs_vnode.c:1017
[ 44.4677964] cwdfree() at netbsd:cwdfree+0x5d cwdfree sys/kern/vfs_cwd.c:147 [inline]
[ 44.4677964] cwdfree() at netbsd:cwdfree+0x5d sys/kern/vfs_cwd.c:138
[ 44.4977946] exit1() at netbsd:exit1+0x31d sys/kern/kern_exit.c:302
[ 44.5278015] sys_exit() at netbsd:sys_exit+0x92 sys/kern/kern_exit.c:180
[ 44.5577962] syscall() at netbsd:syscall+0x25a sy_call sys/sys/syscallvar.h:65 [inline]
[ 44.5577962] syscall() at netbsd:syscall+0x25a sy_invoke sys/sys/syscallvar.h:94 [inline]
[ 44.5577962] syscall() at netbsd:syscall+0x25a sys/arch/x86/x86/syscall.c:138
[ 44.5677979] --- syscall (number 1) ---
[ 44.5777963] netbsd:syscall+0x25a:
[ 44.5777963] cpu1: End traceback...
[ 44.5877963] fatal breakpoint trap in supervisor mode
[ 44.5877963] trap type 1 code 0 rip 0xffffffff8023241d cs 0x8 rflags 0x282 cr2 0x742c780570a8 ilevel 0 rsp 0xffffa302486c3ab0
[ 44.5977937] curlwp 0xffffa30012c5b700 pid 1363.1363 lowest kstack 0xffffa302486bc2c0
Stopped in pid 1363.1363 (syz-executor.2) at netbsd:breakpoint+0x5: leave

?
breakpoint() at netbsd:breakpoint+0x5
db_panic() at netbsd:db_panic+0x105 sys/ddb/db_panic.c:69

vpanic() at netbsd:vpanic+0x282 sys/kern/subr_prf.c:292
_sub_D_65535_0() at netbsd:_sub_D_65535_0+-0x6bd2

vtryrele() at netbsd:vtryrele+0x195 sys/kern/vfs_vnode.c:736
vrele() at netbsd:vrele+0x17 sys/kern/vfs_vnode.c:1017
cwdfree() at netbsd:cwdfree+0x5d cwdfree sys/kern/vfs_cwd.c:147 [inline]
cwdfree() at netbsd:cwdfree+0x5d sys/kern/vfs_cwd.c:138
exit1() at netbsd:exit1+0x31d sys/kern/kern_exit.c:302
sys_exit() at netbsd:sys_exit+0x92 sys/kern/kern_exit.c:180
syscall() at netbsd:syscall+0x25a sy_call sys/sys/syscallvar.h:65 [inline]
syscall() at netbsd:syscall+0x25a sy_invoke sys/sys/syscallvar.h:94 [inline]
syscall() at netbsd:syscall+0x25a sys/arch/x86/x86/syscall.c:138
--- syscall (number 1) ---
netbsd:syscall+0x25a:
Panic string: kernel diagnostic assertion "(use & VUSECOUNT_MASK) > 1" failed: file "/syzkaller/managers/ci2-netbsd/kernel/sys/kern/vfs_vnode.c", line 736
PID LID S CPU FLAGS STRUCT LWP * NAME WAIT

1368 1339 2 0 0 ffffa30012cd8100 syz-executor.3
1368 1332 2 0 100 ffffa30013e0d480 syz-executor.3
1368 >1368 7 0 10000000 ffffa30012ba1580 syz-executor.3
1070 1070 2 1 140 ffffa300126eabc0 syz-executor.4
1365 1365 2 1 40 ffffa30012bff600 syz-executor.5
1358 1358 2 1 0 ffffa30012c3e6c0 syz-executor.0
1208 1208 2 1 140 ffffa300134aea00 syz-executor.3
1359 1359 2 0 0 ffffa300126e7b80 syz-executor.1
1363 >1363 7 1 10000000 ffffa30012c5b700 syz-executor.2
1361 1361 2 0 140 ffffa30012c5b2c0 syz-executor.1
1247 1247 2 1 140 ffffa3001337a140 syz-executor.2
958 1209 3 0 180 ffffa30012cd8980 syz-execprog wait
958 1206 3 1 180 ffffa30013d8bb40 syz-execprog parked
958 1200 3 1 1c0 ffffa30013d8b700 syz-execprog wait
958 1207 3 1 180 ffffa30013d77b00 syz-execprog parked
958 801 3 1 180 ffffa30013d11a40 syz-execprog wait
958 1244 3 0 180 ffffa30013d11600 syz-execprog wait
958 989 3 1 180 ffffa30013d111c0 syz-execprog kqueue
958 990 3 1 180 ffffa30013368540 syz-execprog parked
958 1241 3 0 1c0 ffffa300133d7680 syz-execprog wait
958 1223 3 0 180 ffffa300133d7240 syz-execprog wait
958 1239 3 0 180 ffffa30013497580 syz-execprog parked
958 1120 3 0 180 ffffa30013497140 syz-execprog parked
958 958 3 1 180 ffffa30012abf4c0 syz-execprog parked
1226 1226 3 1 180 ffffa30012ae40c0 sshd select
813 813 3 1 180 ffffa300126e7740 getty nanoslp
1216 1216 3 0 180 ffffa300134979c0 getty nanoslp
1224 1224 3 0 180 ffffa300134ae5c0 getty nanoslp
1184 1184 3 0 1c0 ffffa300134ae180 getty ttyraw
1101 1101 3 0 180 ffffa300133bea40 sshd select
1023 1023 3 0 180 ffffa30012d4b300 powerd kqueue
700 700 3 1 180 ffffa3001343a2c0 syslogd kqueue
746 746 3 1 180 ffffa30012c29680 dhcpcd poll
747 747 3 0 180 ffffa30012cc60c0 dhcpcd poll
742 742 3 0 180 ffffa30012c5bb40 dhcpcd poll
602 602 3 0 180 ffffa30012c96340 dhcpcd poll
292 292 3 0 180 ffffa30012db74c0 dhcpcd poll
485 485 3 0 180 ffffa30012db7080 dhcpcd poll
291 291 3 1 180 ffffa30012d9a8c0 dhcpcd poll
1 1 3 0 180 ffffa3001286b9c0 init wait
0 987 3 0 200 ffffa300129a2280 physiod physiod
0 196 3 1 200 ffffa300129a32c0 pooldrain pooldrain
0 195 3 0 200 ffffa300129a2b00 ioflush syncer
0 194 3 0 200 ffffa300129a26c0 pgdaemon pgdaemon
0 167 3 1 200 ffffa30012978680 usb7 usbevt
0 172 3 1 200 ffffa30012978240 usb6 usbevt
0 170 3 0 200 ffffa3001292da80 usb5 usbevt
0 168 3 0 200 ffffa3001292d640 usb4 usbevt
0 166 3 0 200 ffffa3001292d200 usb3 usbevt
0 165 3 0 200 ffffa300128e1a40 usb2 usbevt
0 31 3 0 200 ffffa300128e1600 usb1 usbevt
0 63 3 0 200 ffffa300128e11c0 usb0 usbevt
0 126 3 1 200 ffffa30012886a00 usbtask-dr usbtsk
0 125 3 1 200 ffffa300128865c0 usbtask-hc usbtsk
0 124 3 0 200 ffffa30010d76b00 swwreboot swwreboot
0 123 3 1 200 ffffa30012886180 npfgc0 npfgcw
0 122 3 1 200 ffffa3001286b580 rt_free rt_free
0 121 3 1 200 ffffa3001286b140 unpgc unpgc
0 120 3 0 200 ffffa30012863980 key_timehandler key_timehandler
0 119 3 1 200 ffffa30012863540 icmp6_wqinput/1 icmp6_wqinput
0 118 3 0 200 ffffa30012863100 icmp6_wqinput/0 icmp6_wqinput
0 117 3 0 200 ffffa30012713940 nd6_timer nd6_timer
0 116 3 1 200 ffffa30012713500 carp6_wqinput/1 carp6_wqinput
0 115 3 0 200 ffffa300127130c0 carp6_wqinput/0 carp6_wqinput
0 114 3 1 200 ffffa30012704900 carp_wqinput/1 carp_wqinput
0 113 3 0 200 ffffa300127044c0 carp_wqinput/0 carp_wqinput
0 112 3 1 200 ffffa30012704080 icmp_wqinput/1 icmp_wqinput
0 111 3 0 200 ffffa300126eb8c0 icmp_wqinput/0 icmp_wqinput
0 110 3 0 200 ffffa300126eb040 rt_timer rt_timer
0 109 3 0 200 ffffa300126ea780 vmem_rehash vmem_rehash
0 100 3 0 200 ffffa300126e7300 entbutler entropy
0 99 3 0 200 ffffa300120bcb40 viomb balloon
0 98 3 1 200 ffffa300120bc700 vioif0_txrx/1 vioif0_txrx
0 97 3 0 200 ffffa300120bc2c0 vioif0_txrx/0 vioif0_txrx
0 30 3 0 200 ffffa30010d766c0 scsibus0 sccomp
0 29 3 0 200 ffffa30010d76280 pms0 pmsreset
0 28 3 1 200 ffffa30010cbcac0 xcall/1 xcall
0 27 1 1 200 ffffa30010cbc680 softser/1
0 26 1 1 200 ffffa30010cbc240 softclk/1
0 25 1 1 200 ffffa30010cb9a80 softbio/1
0 24 1 1 200 ffffa30010cb9640 softnet/1
0 23 1 1 201 ffffa30010cb9200 idle/1
0 22 3 0 200 ffffa3000fb56a40 lnxsyswq lnxsyswq
0 21 3 0 200 ffffa3000fb56600 lnxubdwq lnxubdwq
0 20 3 0 200 ffffa3000fb561c0 lnxpwrwq lnxpwrwq
0 19 3 0 200 ffffa3000fb55a00 lnxlngwq lnxlngwq
0 18 3 0 200 ffffa3000fb555c0 lnxhipwq lnxhipwq
0 17 3 0 200 ffffa3000fb55180 lnxrcugc lnxrcugc
0 16 3 0 200 ffffa3000fb4e9c0 sysmon smtaskq
0 15 3 1 200 ffffa3000fb4e580 pmfsuspend pmfsuspend
0 14 3 1 200 ffffa3000fb4e140 pmfevent pmfevent
0 13 3 0 200 ffffa3000fb49980 sopendfree sopendfr
0 12 3 0 200 ffffa3000fb49540 ifwdog ifwdog
0 11 3 0 200 ffffa3000fb49100 iflnkst iflnkst
0 10 3 1 200 ffffa3000fb3c940 nfssilly nfssilly
0 9 3 0 200 ffffa3000fb3c500 vdrain vdrain
0 8 3 1 200 ffffa3000fb3c0c0 modunload mod_unld
0 7 3 0 200 ffffa3000fb33900 xcall/0 xcall
0 6 1 0 200 ffffa3000fb334c0 softser/0
0 5 1 0 200 ffffa3000fb33080 softclk/0
0 4 1 0 200 ffffa3000fb318c0 softbio/0
0 3 1 0 200 ffffa3000fb31480 softnet/0
0 2 1 0 201 ffffa3000fb31040 idle/0
0 0 3 0 200 ffffffff8334b900 swapper uvm
[Locks tracked through LWPs]

****** LWP 1365.1365 (syz-executor.5) @ 0xffffa30012bff600, l_stat=2

*** Locks held:

* Lock 0 (initialized at netbsd:vcache_alloc+0x3e sys/kern/vfs_vnode.c:1376)

lock address : ffffa30013de9ec0

type : sleep/adaptive
initialized : netbsd:vcache_alloc+0x3e
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0

relevant cpu : 1 last held: 1
relevant lwp : 0xffffa30012bff600 last held: 0xffffa30012bff600

last locked* : netbsd:genfs_lock+0x15d
unlocked : netbsd:genfs_unlock+0x2a

owner/count : 0xffffa30012bff600 flags : 0x0000000000000004

Turnstile: no active turnstile for this lock.

* Lock 1 (initialized at netbsd:vcache_alloc+0x3e sys/kern/vfs_vnode.c:1376)

lock address : ffffa30013df5c80

type : sleep/adaptive
initialized : netbsd:vcache_alloc+0x3e
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0

relevant cpu : 1 last held: 1
relevant lwp : 0xffffa30012bff600 last held: 0xffffa30012bff600

last locked* : netbsd:genfs_lock+0x15d
unlocked : netbsd:genfs_unlock+0x2a

owner/count : 0xffffa30012bff600 flags : 0x0000000000000004

Turnstile: no active turnstile for this lock.

*** Locks wanted: none

****** LWP 1359.1359 (syz-executor.1) @ 0xffffa300126e7b80, l_stat=2

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:pmap_ctor+0x93 sys/arch/x86/x86/pmap.c:2860)
lock address : ffffa30012be5580
type : sleep/adaptive
initialized : netbsd:pmap_ctor+0x93

shared holds : 0 exclusive: 0

shares wanted: 0 exclusive: 1

relevant cpu : 0 last held: 0

relevant lwp : 0xffffa300126e7b80 last held: 000000000000000000
last locked : netbsd:pmap_enter_ma+0x386
unlocked* : netbsd:pmap_enter_ma+0xe14
owner field : 0xffffa300126e7b80 wait/spin: 0/0

Turnstile: no active turnstile for this lock.

****** LWP 1363.1363 (syz-executor.2) @ 0xffffa30012c5b700, l_stat=7

*** Locks held:

* Lock 0 (initialized at netbsd:fork1+0x392 sys/kern/kern_fork.c:366)

lock address : ffffa30012bddbd0

type : sleep/adaptive
initialized : netbsd:fork1+0x392
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0

relevant cpu : 1 last held: 1
relevant lwp : 0xffffa30012c5b700 last held: 0xffffa30012c5b700

last locked* : netbsd:exit1+0x2f2
unlocked : 0

owner/count : 0xffffa30012c5b700 flags : 0x0000000000000004

Turnstile: no active turnstile for this lock.

*** Locks wanted: none

****** LWP 747.747 (dhcpcd) @ 0xffffa30012cc60c0, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:module_hook_init+0x1c sys/kern/kern_module_hook.c:132)
lock address : netbsd:module_hook
type : sleep/adaptive
initialized : netbsd:module_hook_init+0x1c
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0

relevant lwp : 0xffffa30012cc60c0 last held: 000000000000000000