page fault in union_revoke

2 views

Skip to first unread message

syzbot

unread,

Jul 31, 2023, 9:22:57 AM7/31/23

to syzkaller-...@googlegroups.com

Hello,

syzbot found the following issue on:

HEAD commit: dbd12398b230 Import gdb-13.2 over gdb-11.0.50
git tree: netbsd
console output: https://syzkaller.appspot.com/x/log.txt?x=13c40091a80000
kernel config: https://syzkaller.appspot.com/x/.config?x=739e57438eb9ed9e
dashboard link: https://syzkaller.appspot.com/bug?extid=0dfe474b7322029d1368
compiler: Debian clang version 15.0.6

Unfortunately, I don't have any reproducer for this issue yet.

Downloadable assets:
disk image: https://storage.googleapis.com/syzbot-assets/7c1ade769576/disk-dbd12398.raw.xz
netbsd.gdb: https://storage.googleapis.com/syzbot-assets/6b4ad4a7dfa1/netbsd-dbd12398.gdb.xz

IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+0dfe47...@syzkaller.appspotmail.com

[ 76.5279093] fatal page fault in supervisor mode
[ 76.5279093] trap type 6 code 0 rip 0xffffffff84aa7363 cs 0x8 rflags 0x10246 cr2 0x38 ilevel 0 rsp 0xffffad80d0c954c0
[ 76.5379091] curlwp 0xffffad8013a18bc0 pid 843.843 lowest kstack 0xffffad80d0c8e2c0
kernel: page fault trap, code=0
Stopped in pid 843.843 (syz-executor.2) at netbsd:union_revoke+0x193: movq 0(%r12),%r14
?
union_revoke() at netbsd:union_revoke+0x193 sys/fs/union/union_vnops.c:1117
layer_bypass() at netbsd:layer_bypass+0x860 sys/miscfs/genfs/layer_vnops.c:294
layer_revoke() at netbsd:layer_revoke+0x11d sys/miscfs/genfs/layer_vnops.c:701
VOP_REVOKE() at netbsd:VOP_REVOKE+0x1ba
vdevgone() at netbsd:vdevgone+0x30c sys/kern/vfs_subr.c:585
pad_detach() at netbsd:pad_detach+0x342 sys/dev/pad/pad.c:248
config_detach_release() at netbsd:config_detach_release+0xf1e
fops_pad_close() at netbsd:fops_pad_close+0x160 pad_close sys/dev/pad/pad.c:435 [inline]
fops_pad_close() at netbsd:fops_pad_close+0x160 sys/dev/pad/pad.c:445
closef() at netbsd:closef+0x4e6 sys/kern/kern_descrip.c:865
fd_free() at netbsd:fd_free+0xc97
exit1() at netbsd:exit1+0xaa9 sys/kern/kern_exit.c:301
sys_exit() at netbsd:sys_exit+0x1d6
syscall() at netbsd:syscall+0x60c sy_invoke sys/sys/syscallvar.h:94 [inline]
syscall() at netbsd:syscall+0x60c sys/arch/x86/x86/syscall.c:138
--- syscall (number 1) ---
netbsd:syscall+0x60c:
Panic string: (null)
PID LID S CPU FLAGS STRUCT LWP * NAME WAIT
843 > 843 7 1 10000000 ffffad8013a18bc0 syz-executor.2
1568 >1375 7 0 40000 ffffad80136941c0 syz-executor.1
1568 1578 3 0 180 ffffad8013a298c0 syz-executor.1 parked
1568 1568 2 0 10040000 ffffad8013a18340 syz-executor.1
509 509 3 0 180 ffffad8013bd6500 syz-executor.2 nanoslp
507 1724 2 0 0 ffffad8013bd6940 syz-executor.4
507 508 2 1 40000 ffffad80136f0a80 syz-executor.4
507 507 2 0 10040000 ffffad80138a7b40 syz-executor.4
1750 1750 3 0 180 ffffad801370d240 syz-executor.1 parked
1596 1596 3 1 180 ffffad8013be0980 syz-executor.3 parked
299 299 3 1 180 ffffad8013be0540 syz-executor.3 parked
801 801 3 1 180 ffffad8013807b00 syz-executor.1 parked
1696 1696 3 1 180 ffffad8013694600 syz-executor.1 parked
391 391 3 0 180 ffffad8013a29040 syz-executor.3 parked
325 460 4 0 1000000 ffffad80138076c0 syz-executor.3
325 1333 4 1 1000100 ffffad8013a18780 syz-executor.3
325 1366 4 1 1000100 ffffad801370d680 syz-executor.3
325 1359 4 1 1000100 ffffad80138a7700 syz-executor.3
325 325 4 1 11000000 ffffad80136f0640 syz-executor.3
336 336 3 1 180 ffffad80138a72c0 syz-executor.1 parked
1279 1279 2 0 40 ffffad8013807280 syz-executor.5
1204 1204 3 1 1c0 ffffad801359d5c0 syz-executor.3 pipe_rd
1199 1199 2 1 140 ffffad80135809c0 syz-executor.4
1102 1102 3 0 180 ffffad8013533980 syz-executor.1 nanoslp
1245 1245 2 0 40 ffffad8013533100 syz-executor.0
1235 941 3 1 180 ffffad801370dac0 syz-fuzzer wait
1235 1074 3 0 180 ffffad801359da00 syz-fuzzer wait
1235 1376 3 0 180 ffffad801359d180 syz-fuzzer parked
1235 1244 3 0 180 ffffad8013580140 syz-fuzzer kqueue
1235 1246 3 0 180 ffffad8013533540 syz-fuzzer parked
1235 1243 3 1 180 ffffad8012c84940 syz-fuzzer wait
1235 1109 3 0 180 ffffad8012c84500 syz-fuzzer wait
1235 829 3 1 180 ffffad8012c840c0 syz-fuzzer parked
1235 942 3 0 180 ffffad80122efb00 syz-fuzzer parked
1235 449 3 1 180 ffffad80122ef6c0 syz-fuzzer parked
1235 1226 3 0 180 ffffad80122ef280 syz-fuzzer wait
1235 1233 3 0 180 ffffad80123812c0 syz-fuzzer parked
1235 1235 3 0 180 ffffad8012bc3900 syz-fuzzer wait
1236 1236 3 0 180 ffffad8012bc3080 sshd select
1112 1112 3 1 180 ffffad8012bc34c0 getty nanoslp
1106 1106 3 0 180 ffffad801250c300 getty nanoslp
1075 1075 3 1 180 ffffad80121eeac0 getty nanoslp
1224 1224 3 0 1c0 ffffad80121eb200 getty ttyraw
1095 1095 3 0 180 ffffad8012b958c0 sshd select
1088 1088 3 1 180 ffffad80125d2780 powerd kqueue
699 699 3 0 180 ffffad8012b95480 syslogd kqueue
746 746 3 0 180 ffffad8012b95040 dhcpcd poll
745 745 3 0 180 ffffad801250c740 dhcpcd poll
589 589 3 0 180 ffffad80125d2bc0 dhcpcd poll
599 599 3 0 180 ffffad8012381700 dhcpcd poll
487 487 3 0 180 ffffad80125d2340 dhcpcd poll
292 292 3 0 180 ffffad8012381b40 dhcpcd poll
485 485 3 0 180 ffffad801250cb80 dhcpcd poll
1 1 3 0 180 ffffad8011ee0100 init wait
0 392 5 0 200 ffffad8013a29480 (zombie)
0 673 3 0 200 ffffad80121eb640 physiod physiod
0 196 3 0 200 ffffad80121ee680 pooldrain pooldrain
0 195 3 0 200 ffffad80121ee240 ioflush syncer
0 194 3 1 200 ffffad80121eba80 pgdaemon pgdaemon
0 172 3 1 200 ffffad801215ba40 usb7 usbevt
0 171 3 1 200 ffffad801215b600 usb6 usbevt
0 169 3 1 200 ffffad801215b1c0 usb5 usbevt
0 168 3 1 200 ffffad801212ba00 usb4 usbdly
0 166 3 0 200 ffffad801212b5c0 usb3 usbevt
0 165 3 1 200 ffffad801212b180 usb2 usbevt
0 31 3 1 240 ffffad80120859c0 usb1 usbxfer
0 63 3 1 200 ffffad8012085580 usb0 usbevt
0 126 3 1 200 ffffad8012085140 usbtask-dr usbtsk
0 125 3 0 200 ffffad8011ee0980 usbtask-hc usbtsk
0 124 3 1 200 ffffad8011ee0540 swwreboot swwreboot
0 123 3 1 200 ffffad80103f4b00 npfgc0 npfgcw
0 122 3 1 200 ffffad8011ed4940 rt_free rt_free
0 121 3 1 200 ffffad8011ed4500 unpgc unpgc
0 120 3 0 200 ffffad8011ed40c0 key_timehandler key_timehandler
0 119 3 1 200 ffffad8011ecf900 icmp6_wqinput/1 icmp6_wqinput
0 118 3 0 200 ffffad8011ecf4c0 icmp6_wqinput/0 icmp6_wqinput
0 117 3 1 200 ffffad8011ecf080 nd6_timer nd6_timer
0 116 3 1 200 ffffad8011eaa8c0 carp6_wqinput/1 carp6_wqinput
0 115 3 0 200 ffffad8011eaa480 carp6_wqinput/0 carp6_wqinput
0 114 3 1 200 ffffad8011eaa040 carp_wqinput/1 carp_wqinput
0 113 3 0 200 ffffad8011ceebc0 carp_wqinput/0 carp_wqinput
0 112 3 1 200 ffffad8011cee340 icmp_wqinput/1 icmp_wqinput
0 111 3 0 200 ffffad8011cecb80 icmp_wqinput/0 icmp_wqinput
0 110 3 0 200 ffffad8011cec740 rt_timer rt_timer
0 109 3 0 200 ffffad8011cee780 vmem_rehash vmem_rehash
0 100 3 0 200 ffffad8011cec300 entbutler entropy
0 99 3 1 200 ffffad80117e0b40 viomb balloon
0 98 3 1 200 ffffad80117e0700 vioif0_txrx/1 vioif0_txrx
0 97 3 0 200 ffffad80117e02c0 vioif0_txrx/0 vioif0_txrx
0 30 3 0 200 ffffad80103f46c0 scsibus0 sccomp
0 29 3 0 200 ffffad80103f4280 pms0 pmsreset
0 28 3 1 200 ffffad80103d9ac0 xcall/1 xcall
0 27 1 1 200 ffffad80103d9680 softser/1
0 26 1 1 200 ffffad80103d9240 softclk/1
0 25 1 1 200 ffffad80103d7a80 softbio/1
0 24 1 1 200 ffffad80103d7640 softnet/1
0 23 1 1 201 ffffad80103d7200 idle/1
0 22 3 1 200 ffffad800f1e3a40 lnxsyswq lnxsyswq
0 21 3 0 200 ffffad800f1e3600 lnxubdwq lnxubdwq
0 20 3 0 200 ffffad800f1e31c0 lnxpwrwq lnxpwrwq
0 19 3 0 200 ffffad800f1e1a00 lnxlngwq lnxlngwq
0 18 3 0 200 ffffad800f1e15c0 lnxhipwq lnxhipwq
0 17 3 0 200 ffffad800f1e1180 lnxrcugc lnxrcugc
0 16 3 0 200 ffffad800f1db9c0 sysmon smtaskq
0 15 3 1 200 ffffad800f1db580 pmfsuspend pmfsuspend
0 14 3 0 200 ffffad800f1db140 pmfevent pmfevent
0 13 3 0 200 ffffad800f1d9980 sopendfree sopendfr
0 12 3 1 200 ffffad800f1d9540 ifwdog ifwdog
0 11 3 0 200 ffffad800f1d9100 iflnkst iflnkst
0 10 3 0 200 ffffad800f1cf940 nfssilly nfssilly
0 9 3 0 200 ffffad800f1cf500 vdrain vdrain
0 8 3 0 200 ffffad800f1cf0c0 modunload mod_unld
0 7 3 0 200 ffffad800ebdb900 xcall/0 xcall
0 6 1 0 200 ffffad800ebdb4c0 softser/0
0 5 1 0 200 ffffad800ebdb080 softclk/0
0 4 1 0 200 ffffad800ebd98c0 softbio/0
0 3 1 0 200 ffffad800ebd9480 softnet/0
0 2 1 0 201 ffffad800ebd9040 idle/0
0 0 3 0 200 ffffffff8686e500 swapper uvm
[Locks tracked through LWPs]

****** LWP 843.843 (syz-executor.2) @ 0xffffad8013a18bc0, l_stat=7

*** Locks held:

* Lock 0 (initialized at netbsd:fork1+0x938 sys/kern/kern_fork.c:366)
lock address : ffffad8012472d90
type : sleep/adaptive
initialized : netbsd:fork1+0x938
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 1
relevant lwp : 0xffffad8013a18bc0 last held: 0xffffad8013a18bc0
last locked* : netbsd:exit1+0xa74
unlocked : 0
owner/count : 0xffffad8013a18bc0 flags : 0x0000000000000004
Turnstile: no active turnstile for this lock.

*** Locks wanted: none

****** LWP 1568.1375 (syz-executor.1) @ 0xffffad80136941c0, l_stat=7

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:vhci_attach+0x2aa)
lock address : ffffad800f0806f0
type : sleep/adaptive
initialized : netbsd:vhci_attach+0x2aa
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 1
relevant cpu : 0 last held: 0
relevant lwp : 0xffffad80136941c0 last held: 000000000000000000
last locked : netbsd:vhci_fd_read+0x1f7
unlocked* : netbsd:vhci_fd_read+0xdad
owner field : 0xffffad80136941c0 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 1279.1279 (syz-executor.5) @ 0xffffad8013807280, l_stat=2

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:pipe1+0x1122 sys/kern/sys_pipe.c:235)
lock address : ffffad8013568900
type : sleep/adaptive
initialized : netbsd:pipe1+0x1122
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 1
relevant cpu : 0 last held: 0
relevant lwp : 0xffffad8013807280 last held: 000000000000000000
last locked : netbsd:pipe_read+0xbc
unlocked* : netbsd:pipe_read+0x1a4b
owner field : 0xffffad8013807280 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 745.745 (dhcpcd) @ 0xffffad801250c740, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:module_hook_init+0x43 sys/kern/kern_module_hook.c:132)
lock address : netbsd:module_hook
type : sleep/adaptive
initialized : netbsd:module_hook_init+0x43
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffffad801250c740 last held: 000000000000000000
last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 589.589 (dhcpcd) @ 0xffffad80125d2bc0, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:module_hook_init+0x43 sys/kern/kern_module_hook.c:132)
lock address : netbsd:module_hook
type : sleep/adaptive
initialized : netbsd:module_hook_init+0x43
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffffad80125d2bc0 last held: 000000000000000000
last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 292.292 (dhcpcd) @ 0xffffad8012381b40, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:module_hook_init+0x43 sys/kern/kern_module_hook.c:132)
lock address : netbsd:module_hook
type : sleep/adaptive
initialized : netbsd:module_hook_init+0x43
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffffad8012381b40 last held: 000000000000000000
last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 485.485 (dhcpcd) @ 0xffffad801250cb80, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:module_hook_init+0x43 sys/kern/kern_module_hook.c:132)
lock address : netbsd:module_hook
type : sleep/adaptive
initialized : netbsd:module_hook_init+0x43
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffffad801250cb80 last held: 000000000000000000
last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 0.26 (softclk/1) @ 0xffffad80103d9240, l_stat=1

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:module_hook_init+0x43 sys/kern/kern_module_hook.c:132)
lock address : netbsd:module_hook
type : sleep/adaptive
initialized : netbsd:module_hook_init+0x43
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 0
relevant lwp : 0xffffad80103d9240 last held: 000000000000000000
last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 0.11 (iflnkst) @ 0xffffad800f1d9100, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:module_hook_init+0x43 sys/kern/kern_module_hook.c:132)
lock address : netbsd:module_hook
type : sleep/adaptive
initialized : netbsd:module_hook_init+0x43
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffffad800f1d9100 last held: 000000000000000000
last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 0.0 (swapper) @ 0xffffffff8686e500, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:module_hook_init+0x43 sys/kern/kern_module_hook.c:132)
lock address : netbsd:module_hook
type : sleep/adaptive
initialized : netbsd:module_hook_init+0x43
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffffffff8686e500 last held: 000000000000000000
last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

[Locks tracked through CPUs]

******* Locks held on cpu1:

* Lock 0 (initialized at netbsd:main+0x354 sys/kern/init_main.c:305)
lock address : netbsd:kernel_lock
type : spin
initialized : netbsd:main+0x354
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 1
relevant lwp : 0xffffad8013a18bc0 last held: 0xffffad8013a18bc0
last locked* : netbsd:sleepq_block+0x7bb
unlocked : netbsd:cv_enter+0x75e
curcpu holds : 3 wanted by: 000000000000000000

PAGE FLAG PQ UOBJECT UANON
0xffffad8000017180 0001 00000000 0x0 0x0
0xffffad8000017200 0041 00000000 0x0 0x0
0xffffad8000017280 0041 00000000 0x0 0x0
0xffffad8000017300 0041 00000000 0x0 0x0
0xffffad8000017380 0041 00000000 0x0 0x0
0xffffad8000017400 0041 00000000 0x0 0x0
0xffffad8000017480 0041 00000000 0x0 0x0
0xffffad8000017500 0041 00000000 0x0 0x0
0xffffad8000017580 0041 00000000 0x0 0x0
0xffffad8000017600 0041 00000000 0x0 0x0
0xffffad8000017680 0041 00000000 0x0 0x0
0xffffad8000017700 0041 00000000 0x0 0x0
0xffffad8000017780 0041 00000000 0x0 0x0
0xffffad8000017800 0041 00000000 0x0 0x0
0xffffad8000017880 0041 00000000 0x0 0x0
0xffffad8000017900 0041 00000000 0x0 0x0
0xffffad8000017980 0041 00000000 0x0 0x0
0xffffad8000017a00 0041 00000000 0x0 0x0
0xffffad8000017a80 0041 00000000 0x0 0x0
0xffffad8000017b00 0041 00000000 0x0 0x0
0xffffad8000017b80 0041 00000000 0x0 0x0
0xffffad8000017c00 0041 00000000 0x0 0x0
0xffffad8000017c80 0041 00000000 0x0 0x0
0xffffad8000017d00 0041 00000000 0x0 0x0
0xffffad8000017d80 0041 00000000 0x0 0x0
0xffffad8000017e00 0041 00000000 0x0 0x0
0xffffad8000017e80 0041 00000000 0x0 0x0
0xffffad8000017f00 0041 00000000 0x0 0x0
0xffffad8000017f80 0041 00000000 0x0 0x0
0xffffad8000018000 0041 00000000 0x0 0x0
0xffffad8000018080 0041 00000000 0x0 0x0
0xffffad8000018100 0041 00000000 0x0 0x0
0xffffad8000018180 0041 00000000 0x0 0x0
0xffffad8000018200 0041 00000000 0x0 0x0
0xffffad8000018280 0041 00000000 0x0 0x0
0xffffad8000018300 0041 00000000 0x0 0x0
0xffffad8000018380 0041 00000000 0x0 0x0
0xffffad8000018400 0041 00000000 0x0 0x0
0xffffad8000018480 0041 00000000 0x0 0x0
0xffffad8000018500 0041 00000000 0x0 0x0
0xffffad8000018580 0041 00000000 0x0 0x0
0xffffad8000018600 0041 00000000 0x0 0x0
0xffffad8000018680 0041 00000000 0x0 0x0
0xffffad8000018700 0041 00000000 0x0 0x0
0xffffad8000018780 0041 00000000 0x0 0x0
0xffffad8000018800 0041 00000000 0x0 0x0
0xffffad8000018880 0041 00000000 0x0 0x0
0xffffad8000018900 0041 00000000 0x0 0x0
0xffffad8000018980 0041 00000000 0x0 0x0
0xffffad8000018a00 0041 00000000 0x0 0x0
0xffffad8000018a80 0041 00000000 0x0 0x0
0xffffad8000018b00 0041 00000000 0x0 0x0
0xffffad8000018b80 0041 00000000 0x0 0x0
0xffffad8000018c00 0041 00000000 0x0 0x0
0xffffad8000018c80 0041 00000000 0x0 0x0
0xffffad8000018d00 0041 00000000 0x0 0x0
0xffffad8000018d80 0041 00000000 0x0 0x0
0xffffad8000018e00 0041 00000000 0x0 0x0
0xffffad8000018e80 0041 00000000 0x0 0x0
0xffffad8000018f00 0041 00000000 0x0 0x0
0xffffad8000018f80 0041 00000000 0x0 0x0
0xffffad8000019000 0041 00000000 0x0 0x0
0xffffad8000019080 0041 00000000 0x0 0x0
0xffffad8000019100 0041 00000000 0x0 0x0
0xffffad8000019180 0041 00000000 0x0 0x0
0xffffad8000019200 0041 00000000 0x0 0x0
0xffffad8000019280 0041 00000000 0x0 0x0
0xffffad8000019300 0041 00000000 0x0 0x0
0xffffad8000019380 0041 00000000 0x0 0x0
0xffffad8000019400 0041 00000000 0x0 0x0
0xffffad8000019480 0041 00000000 0x0 0x0
0xffffad8000019500 0041 00000000 0x0 0x0
0xffffad8000019580 0041 00000000 0x0 0x0
0xffffad8000019600 0041 00000000 0x0 0x0
0xffffad8000019680 0041 00000000 0x0 0x0
0xffffad8000019700 0041 00000000 0x0 0x0
0xffffad8000019780 0041 00000000 0x0 0x0
0xffffad8000019800 0041 00000000 0x0 0x0
0xffffad8000019880 0041 00000000 0x0 0x0
0xffffad8000019900 0041 00000000 0x0 0x0
0xffffad8000019980 0041 00000000 0x0 0x0
0xffffad8000019a00 0041 00000000 0x0 0x0
0xffffad8000019a80 0041 00000000 0x0 0x0
0xffffad8000019b00 0041 00000000 0x0 0x0
0xffffad8000019b80 0041 00000000 0x0 0x0
0xffffad8000019c00 0041 00000000 0x0 0x0
0xffffad8000019c80 0041 00000000 0x0 0x0
0xffffad8000019d00 0041 00000000 0x0 0x0
0xffffad8000019d80 0041 00000000 0x0 0x0
0xffffad8000019e00 0041 00000000 0x0 0x0
0xffffad8000019e80 0041 00000000 0x0 0x0
0xffffad8000019f00 0041 00000000 0x0 0x0
0xffffad8000019f80 0041 00000000 0x0 0x0
0xffffad800001a000 0041 00000000 0x0 0x0
0xffffad800001a080 0041 00000000 0x0 0x0
0xffffad800001a100 0041 00000000 0x0 0x0
0xffffad800001a180 0041 00000000 0x0 0x0
0xffffad800001a200 0041 00000000 0x0 0x0
0xffffad800001a280 0041 00000000 0x0 0x0
0xffffad800001a300 0041 00000000 0x0 0x0
0xffffad800001a380 0041 00000000 0x0 0x0
0xffffad800001a400 0041 00000000 0x0 0x0
0xffffad800001a480 0041 00000000 0x0 0x0
0xffffad800001a500 0041 00000000 0x0 0x0
0xffffad800001a580 0041 00000000 0x0 0x0
0xffffad800001a600 0041 00000000 0x0 0x0
0xffffad800001a680 0041 00000000 0x0 0x0
0xffffad800001a700 0041 00000000 0x0 0x0
0xffffad800001a780 0041 00000000 0x0 0x0
0xffffad800001a800 0041 00000000 0x0 0x0
0xffffad800001a880 0041 00000000 0x0 0x0
0xffffad800001a900 0041 00000000 0x0 0x0
0xffffad800001a980 0041 00000000 0x0 0x0
0xffffad800001aa00 0041 00000000 0x0 0x0
0xffffad800001aa80 0041 00000000 0x0 0x0
0xffffad800001ab00 0041 00000000 0x0 0x0
0xffffad800001ab80 0041 00000000 0x0 0x0
0xffffad800001ac00 0041 00000000 0x0 0x0
0xffffad800001ac80 0041 00000000 0x0 0x0
0xffffad800001ad00 0041 00000000 0x0 0x0
0xffffad800001ad80 0041 00000000 0x0 0x0
0xffffad800001ae00 0041 00000000 0x0 0x0
0xffffad800001ae80 0041 00000000 0x0 0x0
0xffffad800001af00 0041 00000000 0x0 0x0
0xffffad800001af80 0041 00000000 0x0 0x0
0xffffad800001b000 0041 00000000 0x0 0x0
0xffffad800001b080 0041 00000000 0x0 0x0
0xffffad800001b100 0041 00000000 0x0 0x0
0xffffad800001b180 0041 00000000 0x0 0x0
0xffffad800001b200 0041 00000000 0x0 0x0
0xffffad800001b280 0041 00000000 0x0 0x0
0xffffad800001b300 0041 00000000 0x0 0x0
0xffffad800001b380 0041 00000000 0x0 0x0
0xffffad800001b400 0041 00000000 0x0 0x0
0xffffad800001b480 0041 00000000 0x0 0x0
0xffffad800001b500 0041 00000000 0x0 0x0
0xffffad800001b580 0041 00000000 0x0 0x0
0xffffad800001b600 0041 00000000 0x0 0x0
0xffffad800001b680 0041 00000000 0x0 0x0
0xffffad800001b700 0041 00000000 0x0 0x0
0xffffad800001b780 0041 00000000 0x0 0x0
0xffffad800001b800 0041 00000000 0x0 0x0
0xffffad800001b880 0041 00000000 0x0 0x0
0xffffad800001b900 0041 00000000 0x0 0x0
0xffffad800001b980 0041 00000000 0x0 0x0
0xffffad800001ba00 0041 00000000 0x0 0x0
0xffffad800001ba80 0041 00000000 0x0 0x0
0xffffad800001bb00 0041 00000000 0x0 0x0
0xffffad800001bb80 0041 00000000 0x0 0x0
0xffffad800001bc00 0041 00000000 0x0 0x0
0xffffad800001bc80 0041 00000000 0x0 0x0
0xffffad800001bd00 0041 00000000 0x0 0x0
0xffffad800001bd80 0041 00000000 0x0 0x0
0xffffad800001be00 0041 00000000 0x0 0x0
0xffffad800001be80 0041 00000000 0x0 0x0
0xffffad800001bf00 0041 00000000 0x0 0x0
0xffffad800001bf80 0041 00000000 0x0 0x0
0xffffad800001c000 0041 00000000 0x0 0x0
0xffffad800001c080 0041 00000000 0x0 0x0
0xffffad800001c100 0041 00000000 0x0 0x0
0xffffad800001c180 0041 00000000 0x0 0x0
0xffffad800001c200 0041 00000000 0x0 0x0
0xffffad800001c280 0041 00000000 0x0 0x0
0xffffad800001c300 0041 00000000 0x0 0x0
0xffffad800001c380 0041 00000000 0x0 0x0
0xffffad800001c400 0041 00000000 0x0 0x0
0xffffad800001c480 0041 00000000 0x0 0x0
0xffffad800001c500 0041 00000000 0x0 0x0
0xffffad800001c580 0041 00000000 0x0 0x0
0xffffad800001c600 0041 00000000 0x0 0x0
0xffffad800001c680 0041 00000000 0x0 0x0
0xffffad800001c700 0041 00000000 0x0 0x0
0xffffad800001c780 0041 00000000 0x0 0x0
0xffffad800001c800 0001 00000000 0x0 0x0
0xffffad800001c880 0001 00000000 0x0 0x0
0xffffad800001c900 0001 00000000 0x0 0x0
0xffffad800001c980 0001 00000000 0x0 0x0
0xffffad800001ca00 0001 00000000 0x0 0x0
0xffffad800001ca80 0001 00000000 0x0 0x0
0xffffad800001cb00 0001 00000000 0x0 0x0
0xffffad800001cb80 0001 00000000 0x0 0x0
0xffffad800001cc00 0001 00000000 0x0 0x0
0xffffad800001cc80 0001 00000000 0x0 0x0
0xffffad800001cd00 0001 00000000 0x0 0x0
0xffffad800001cd80 0001 00000000 0x0 0x0
0xffffad800001ce00 0001 00000000 0x0 0x0
0xffffad800001ce80 0001 00000000 0x0 0x0
0xffffad800001cf00 0001 00000000 0x0 0x0
0xffffad800001cf80 0001 00000000 0x0 0x0
0xffffad800001d000 0001 00000000 0x0 0x0
0xffffad800001d080 0001 00000000 0x0 0x0
0xffffad800001d100 0001 00000000 0x0 0x0
0xffffad800001d180 0001 00000000 0x0 0x0
0xffffad800001d200 0001 00000000 0x0 0x0
0xffffad800001d280 0001 00000000 0x0 0x0
0xffffad800001d300 0001 00000000 0x0 0x0
0xffffad800001d380 0001 00000000 0x0 0x0
0xffffad800001d400 0001 00000000 0x0 0x0
0xffffad800001d480 0001 00000000 0x0 0x0
0xffffad800001d500 0001 00000000 0x0 0x0
0xffffad800001d580 0001 00000000 0x0 0x0
0xffffad800001d600 0001 00000000 0x0 0x0
0xffffad800001d680 0001 00000000 0x0 0x0
0xffffad800001d700 0001 00000000 0x0 0x0
0xffffad800001d780 0001 00000000 0x0 0x0
0xffffad800001d800 0001 00000000 0x0 0x0
0xffffad800001d880 0001 00000000 0x0 0x0
0xffffad800001d900 0001 00000000 0x0 0x0
0xffffad800001d980 0001 00000000 0x0 0x0
0xffffad800001da00 0001 00000000 0x0 0x0
0xffffad800001da80 0001 00000000 0x0 0x0
0xffffad800001db00 0001 00000000 0x0 0x0
0xffffad800001db80 0001 00000000 0x0 0x0
0xffffad800001dc00 0001 00000000 0x0 0x0
0xffffad800001dc80 0001 00000000 0x0 0x0
0xffffad800001dd00 0001 00000000 0x0 0x0
0xffffad800001dd80 0001 00000000 0x0 0x0
0xffffad800001de00 0001 00000000 0x0 0x0
0xffffad800001de80 0001 00000000 0x0 0x0
0xffffad800001df00 0001 00000000 0x0 0x0
0xffffad800001df80 0001 00000000 0x0 0x0
0xffffad800001e000 0001 00000000 0x0 0x0
0xffffad800001e080 0001 00000000 0x0 0x0
0xffffad800001e100 0001 00000000 0x0 0x0
0xffffad800001e180 0001 00000000 0x0 0x0
0xffffad800001e200 0001 00000000 0x0 0x0
0xffffad800001e280 0001 00000000 0x0 0x0
0xffffad800001e300 0001 00000000 0x0 0x0
0xffffad800001e380 0001 00000000 0x0 0x0
0xffffad800001e400 0001 00000000 0x0 0x0
0xffffad800001e480 0001 00000000 0x0 0x0
0xffffad800001e500 0001 00000000 0x0 0x0
0xffffad800001e580 0001 00000000 0x0 0x0
0xffffad800001e600 0001 00000000 0x0 0x0
0xffffad800001e680 0001 00000000 0x0 0x0
0xffffad800001e700 0001 00000000 0x0 0x0
0xffffad800001e780 0001 00000000 0x0 0x0
0xffffad800001e800 0001 00000000 0x0 0x0
0xffffad800001e880 0001 00000000 0x0 0x0
0xffffad800001e900 0001 00000000 0x0 0x0
0xffffad800001e980 0001 00000000 0x0 0x0
0xffffad800001ea00 0001 00000000 0x0 0x0
0xffffad800001ea80 0001 00000000 0x0 0x0
0xffffad800001eb00 0001 00000000 0x0 0x0
0xffffad800001eb80 0001 00000000 0x0 0x0
0xffffad800001ec00 0001 00000000 0x0 0x0
0xffffad800001ec80 0001 00000000 0x0 0x0
0xffffad800001ed00 0001 00000000 0x0 0x0
0xffffad800001ed80 0001 00000000 0x0 0x0
0xffffad800001ee00 0001 00000000 0x0 0x0
0xffffad800001ee80 0001 00000000 0x0 0x0
0xffffad800001ef00 0001 00000000 0x0 0x0
0xffffad800001ef80 0001 00000000 0x0 0x0
0xffffad800001f000 0001 00000000 0x0 0x0
0xffffad800001f080 0001 00000000 0x0 0x0
0xffffad800001f100 0001 00000000 0x0 0x0
0xffffad800001f180 0001 00000000 0x0 0x0
0xffffad800001f200 0001 00000000 0x0 0x0
0xffffad800001f280 0001 00000000 0x0 0x0
0xffffad800001f300 0001 00000000 0x0 0x0
0xffffad800001f380 0001 00000000 0x0 0x0
0xffffad800001f400 0001 00000000 0x0 0x0
0xffffad800001f480 0001 00000000 0x0 0x0
0xffffad800001f500 0001 00000000 0x0 0x0
0xffffad800001f580 0001 00000000 0x0 0x0
0xffffad800001f600 0001 00000000 0x0 0x0
0xffffad800001f680 0001 00000000 0x0 0x0
0xffffad800001f700 0001 00000000 0x0 0x0
0xffffad800001f780 0001 00000000 0x0 0x0
0xffffad800001f800 0001 00000000 0x0 0x0
0xffffad800001f880 0001 00000000 0x0 0x0
0xffffad800001f900 0001 00000000 0x0 0x0
0xffffad800001f980 0001 00000000 0x0 0x0
0xffffad800001fa00 0001 00000000 0x0 0x0
0xffffad800001fa80 0001 00000000 0x0 0x0
0xffffad800001fb00 0001 00000000 0x0 0x0
0xffffad800001fb80 0001 00000000 0x0 0x0
0xffffad800001fc00 0001 00000000 0x0 0x0
0xffffad800001fc80 0001 00000000 0x0 0x0
0xffffad800001fd00 0001 00000000 0x0 0x0
0xffffad800001fd80 0001 00000000 0x0 0x0
0xffffad800001fe00 0001 00000000 0x0 0x0
0xffffad800001fe80 0001 00000000 0x0 0x0
0xffffad800001ff00 0001 00000000 0x0 0x0
0xffffad800001ff80 0001 00000000 0x0 0x0
0xffffad8000020000 0001 00000000 0x0 0x0
0xffffad8000020080 0001 00000000 0x0 0x0
0xffffad8000020100 0001 00000000 0x0 0x0
0xffffad8000020180 0001 00000000 0x0 0x0
0xffffad8000020200 0001 00000000 0x0 0x0
0xffffad8000020280 0001 00000000 0x0 0x0
0xffffad8000020300 0001 00000000 0x0 0x0
0xffffad8000020380 0001 00000000 0x0 0x0
0xffffad8000020400 0001 00000000 0x0 0x0
0xffffad8000020480 0001 00000000 0x0 0x0
0xffffad8000020500 0001 00000000 0x0 0x0
0xffffad8000020580 0001 00000000 0x0 0x0
0xffffad8000020600 0001 00000000 0x0 0x0
0xffffad8000020680 0001 00000000 0x0 0x0
0xffffad8000020700 0001 00000000 0x0 0x0
0xffffad8000020780 0001 00000000 0x0 0x0
0xffffad8000020800 0001 00000000 0x0 0x0
0xffffad8000020880 0001 00000000 0x0 0x0
0xffffad8000020900 0001 00000000 0x0 0x0
0xffffad8000020980 0001 00000000 0x0 0x0
0xffffad8000020a00 0001 00000000 0x0 0x0
0xffffad8000020a80 0001 00000000 0x0 0x0
0xffffad8000020b00 0001 00000000 0x0 0x0
0xffffad8000020b80 0001 00000000 0x0 0x0
0xffffad8000020c00 0001 00000000 0x0 0x0
0xffffad8000020c80 0001 00000000 0x0 0x0
0xffffad8000020d00 0001 00000000 0x0 0x0
0xffffad8000020d80 0001 00000000 0x0 0x0
0xffffad8000020e00 0001 00000000 0x0 0x0
0xffffad8000020e80 0001 00000000 0x0 0x0
0xffffad8000020f00 0001 00000000 0x0 0x0
0xffffad8000020f80 0001 00000000 0x0 0x0
0xffffad8000021000 0001 00000000 0x0 0x0
0xffffad8000021080 0001 00000000 0x0 0x0
0xffffad8000021100 0001 00000000 0x0 0x0
0xffffad8000021180 0001 00000000 0x0 0x0
0xffffad8000021200 0001 00000000 0x0 0x0
0xffffad8000021280 0001 00000000 0x0 0x0
0xffffad8000021300 0001 00000000 0x0 0x0
0xffffad8000021380 0001 00000000 0x0 0x0
0xffffad8000021400 0001 00000000 0x0 0x0
0xffffad8000021480 0001 00000000 0x0 0x0
0xffffad8000021500 0001 00000000 0x0 0x0
0xffffad8000021580 0001 00000000 0x0 0x0
0xffffad8000021600 0001 00000000 0x0 0x0
0xffffad8000021680 0001 00000000 0x0 0x0
0xffffad8000021700 0001 00000000 0x0 0x0
0xffffad8000021780 0001 00000000 0x0 0x0
0xffffad8000021800 0001 00000000 0x0 0x0
0xffffad8000021880 0001 00000000 0x0 0x0
0xffffad8000021900 0001 00000000 0x0 0x0
0xffffad8000021980 0001 00000000 0x0 0x0
0xffffad8000021a00 0001 00000000 0x0 0x0
0xffffad8000021a80 0001 00000000 0x0 0x0
0xffffad8000021b00 0001 00000000 0x0 0x0
0xffffad8000021b80 0001 00000000 0x0 0x0
0xffffad8000021c00 0001 00000000 0x0 0x0
0xffffad8000021c80 0001 00000000 0x0 0x0
0xffffad8000021d00 0001 00000000 0x0 0x0
0xffffad8000021d80 0001 00000000 0x0 0x0
0xffffad8000021e00 0001 00000000 0x0 0x0
0xffffad8000021e80 0001 00000000 0x0 0x0
0xffffad8000021f00 0001 00000000 0x0 0x0
0xffffad8000021f80 0001 00000000 0x0 0x0
0xffffad8000022000 0001 00000000 0x0 0x0
0xffffad8000022080 0001 00000000 0x0 0x0
0xffffad8000022100 0001 00000000 0x0 0x0
0xffffad8000022180 0001 00000000 0x0 0x0
0xffffad8000022200 0001 00000000 0x0 0x0
0xffffad8000022280 0001 00000000 0x0 0x0
0xffffad8000022300 0001 00000000 0x0 0x0
0xffffad8000022380 0001 00000000 0x0 0x0
0xffffad8000022400 0001 00000000 0x0 0x0
0xffffad8000022480 0001 00000000 0x0 0x0
0xffffad8000022500 0001 00000000 0x0 0x0
0xffffad8000022580 0001 00000000 0x0 0x0
0xffffad8000022600 0001 00000000 0x0 0x0
0xffffad8000022680 0001 00000000 0x0 0x0
0xffffad8000022700 0001 00000000 0x0 0x0
0xffffad8000022780 0001 00000000 0x0 0x0
0xffffad8000022800 0001 00000000 0x0 0x0
0xffffad8000022880 0001 00000000 0x0 0x0
0xffffad8000022900 0001 00000000 0x0 0x0
0xffffad8000022980 0001 00000000 0x0 0x0
0xffffad8000022a00 0001 00000000 0x0 0x0
0xffffad8000022a80 0001 00000000 0x0 0x0
0xffffad8000022b00 0001 00000000 0x0 0x0
0xffffad8000022b80 0001 00000000 0x0 0x0
0xffffad8000022c00 0001 00000000 0x0 0x0
0xffffad8000022c80 0001 00000000 0x0 0x0
0xffffad8000022d00 0001 00000000 0x0 0x0
0xffffad8000022d80 0001 00000000 0x0 0x0
0xffffad8000022e00 0001 00000000 0x0 0x0
0xffffad8000022e80 0001 00000000 0x0 0x0
0xffffad8000022f00 0001 00000000 0x0 0x0
0xffffad8000022f80 0001 00000000 0x0 0x0
0xffffad8000023000 0001 00000000 0x0 0x0
0xffffad8000023080 0001 00000000 0x0 0x0
0xffffad8000023100 0001 00000000 0x0 0x0
0xffffad8000023180 0001 00000000 0x0 0x0
0xffffad8000023200 0001 00000000 0x0 0x0
0xffffad8000023280 0001 00000000 0x0 0x0
0xffffad8000023300 0001 00000000 0x0 0x0
0xffffad8000023380 0001 00000000 0x0 0x0
0xffffad8000023400 0001 00000000 0x0 0x0
0xffffad8000023480 0001 00000000 0x0 0x0
0xffffad8000023500 0001 00000000 0x0 0x0
0xffffad8000023580 0001 00000000 0x0 0x0
0xffffad8000023600 0001 00000000 0x0 0x0
0xffffad8000023680 0001 00000000 0x0 0x0
0xffffad8000023700 0001 00000000 0x0 0x0
0xffffad8000023780 0001 00000000 0x0 0x0
0xffffad8000023800 0001 00000000 0x0 0x0
0xffffad8000023880 0001 00000000 0x0 0x0
0xffffad8000023900 0001 00000000 0x0 0x0
0xffffad8000023980 0001 00000000 0x0 0x0
0xffffad8000023a00 0001 00000000 0x0 0x0
0xffffad8000023a80 0001 00000000 0x0 0x0
0xffffad8000023b00 0001 00000000 0x0 0x0
0xffffad8000023b80 0001 00000000 0x0 0x0
0xffffad8000023c00 0001 00000000 0x0 0x0
0xffffad8000023c80 0001 00000000 0x0 0x0
0xffffad8000023d00 0001 00000000 0x0 0x0
0xffffad8000023d80 0001 00000000 0x0 0x0
0xffffad8000023e00 0001 00000000 0x0 0x0
0xffffad8000023e80 0001 00000000 0x0 0x0
0xffffad8000023f00 0001 00000000 0x0 0x0
0xffffad8000023f80 0001 00000000 0x0 0x0
0xffffad8000024000 0001 00000000 0x0 0x0
0xffffad8000024080 0001 00000000 0x0 0x0
0xffffad8000024100 0001 00000000 0x0 0x0
0xffffad8000024180 0001 00000000 0x0 0x0
0xffffad8000024200 0001 00000000 0x0 0x0
0xffffad8000024280 0001 00000000 0x0 0x0
0xffffad8000024300 0001 00000000 0x0 0x0
0xffffad8000024380 0001 00000000 0x0 0x0
0xffffad8000024400 0001 00000000 0x0 0x0
0xffffad8000024480 0001 00000000 0x0 0x0
0xffffad8000024500 0001 00000000 0x0 0x0
0xffffad8000024580 0001 00000000 0x0 0x0
0xffffad8000024600 0001 00000000 0x0 0x0
0xffffad8000024680 0001 00000000 0x0 0x0
0xffffad8000024700 0001 00000000 0x0 0x0
0xffffad8000024780 0001 00000000 0x0 0x0
0xffffad8000024800 0001 00000000 0x0 0x0
0xffffad8000024880 0001 00000000 0x0 0x0
0xffffad8000024900 0001 00000000 0x0 0x0
0xffffad8000024980 0001 00000000 0x0 0x0
0xffffad8000024a00 0001 00000000 0x0 0x0
0xffffad8000024a80 0001 00000000 0x0 0x0
0xffffad8000024b00 0001 00000000 0x0 0x0
0xffffad8000024b80 0001 00000000 0x0 0x0
0xffffad8000024c00 0001 00000000 0x0 0x0
0xffffad8000024c80 0001 00000000 0x0 0x0
0xffffad8000024d00 0001 00000000 0x0 0x0
0xffffad8000024d80 0001 00000000 0x0 0x0
0xffffad8000024e00 0001 00000000 0x0 0x0
0xffffad8000024e80 0001 00000000 0x0 0x0
0xffffad8000024f00 0001 00000000 0x0 0x0
0xffffad8000024f80 0001 00000000 0x0 0x0
0xffffad8000025000 0001 00000000 0x0 0x0
0xffffad8000025080 0001 00000000 0x0 0x0
0xffffad8000025100 0001 00000000 0x0 0x0
0xffffad8000025180 0001 00000000 0x0 0x0
0xffffad8000025200 0001 00000000 0x0 0x0
0xffffad8000025280 0001 00000000 0x0 0x0
0xffffad8000025300 0001 00000000 0x0 0x0
0xffffad8000025380 0001 00000000 0x0 0x0
0xffffad8000025400 0001 00000000 0x0 0x0
0xffffad8000025480 0001 00000000 0x0 0x0
0xffffad8000025500 0001 00000000 0x0 0x0
0xffffad8000025580 0001 00000000 0x0 0x0
0xffffad8000025600 0001 00000000 0x0 0x0
0xffffad8000025680 0001 00000000 0x0 0x0
0xffffad8000025700 0001 00000000 0x0 0x0
0xffffad8000025780 0001 00000000 0x0 0x0
0xffffad8000025800 0001 00000000 0x0 0x0
0xffffad8000025880 0001 00000000 0x0 0x0
0xffffad8000025900 0001 00000000 0x0 0x0
0xffffad8000025980 0001 00000000 0x0 0x0
0xffffad8000025a00 0001 00000000 0x0 0x0
0xffffad8000025a80 0001 00000000 0x0 0x0
0xffffad8000025b00 0001 00000000 0x0 0x0
0xffffad8000025b80 0001 00000000 0x0 0x0
0xffffad8000025c00 0001 00000000 0x0 0x0
0xffffad8000025c80 0001 00000000 0x0 0x0
0xffffad8000025d00 0001 00000000 0x0 0x0
0xffffad8000025d80 0001 00000000 0x0 0x0
0xffffad8000025e00 0001 00000000 0x0 0x0
0xffffad8000025e80 0001 00000000 0x0 0x0
0xffffad8000025f00 0001 00000000 0x0 0x0
0xffffad8000025f80 0001 00000000 0x0 0x0
0xffffad8000026000 0001 00000000 0x0 0x0
0xffffad8000026080 0001 00000000 0x0 0x0
0xffffad8000026100 0001 00000000 0x0 0x0
0xffffad8000026180 0001 00000000 0x0 0x0
0xffffad8000026200 0001 00000000 0x0 0x0
0xffffad8000026280 0001 00000000 0x0 0x0
0xffffad8000026300 0001 00000000 0x0 0x0
0xffffad8000026380 0001 00000000 0x0 0x0
0xffffad8000026400 0001 00000000 0x0 0x0
0xffffad8000026480 0001 00000000 0x0 0x0
0xffffad8000026500 0001 00000000 0x0 0x0
0xffffad8000026580 0001 00000000 0x0 0x0
0xffffad8000026600 0001 00000000 0x0 0x0
0xffffad8000026680 0001 00000000 0x0 0x0
0xffffad8000026700 0001 00000000 0x0 0x0
0xffffad8000026780 0001 00000000 0x0 0x0
0xffffad8000026800 0001 00000000 0x0 0x0
0xffffad8000026880 0001 00000000 0x0 0x0
0xffffad8000026900 0001 00000000 0x0 0x0
0xffffad8000026980 0001 00000000 0x0 0x0
0xffffad8000026a00 0001 00000000 0x0 0x0
0xffffad8000026a80 0001 00000000 0x0 0x0
0xffffad8000026b00 0001 00000000 0x0 0x0
0xffffad8000026b80 0001 00000000 0x0 0x0
0xffffad8000026c00 0001 00000000 0x0 0x0
0xffffad8000026c80 0001 00000000 0x0 0x0
0xffffad8000026d00 0001 00000000 0x0 0x0
0xffffad8000026d80 0001 00000000 0x0 0x0
0xffffad8000026e00 0001 00000000 0x0 0x0
0xffffad8000026e80 0001 00000000 0x0 0x0
0xffffad8000026f00 0001 00000000 0x0 0x0
0xffffad8000026f80 0001 00000000 0x0 0x0
0xffffad8000027000 0001 00000000 0x0 0x0
0xffffad8000027080 0001 00000000 0x0 0x0
0xffffad8000027100 0001 00000000 0x0 0x0
0xffffad8000027180 0001 00000000 0x0 0x0
0xffffad8000027200 0001 00000000 0x0 0x0
0xffffad8000027280 0001 00000000 0x0 0x0
0xffffad8000027300 0001 00000000 0x0 0x0
0xffffad8000027380 0001 00000000 0x0 0x0
0xffffad8000027400 0001 00000000 0x0 0x0
0xffffad8000027480 0001 00000000 0x0 0x0
0xffffad8000027500 0001 00000000 0x0 0x0
0xffffad8000027580 0001 00000000 0x0 0x0
0xffffad8000027600 0001 00000000 0x0 0x0
0xffffad8000027680 0001 00000000 0x0 0x0
0xffffad8000027700 0001 00000000 0x0 0x0
0xffffad8000027780 0001 00000000 0x0 0x0
0xffffad8000027800 0001 00000000 0x0 0x0
0xffffad8000027880 0001 00000000 0x0 0x0
0xffffad8000027900 0001 00000000 0x0 0x0
0xffffad8000027980 0001 00000000 0x0 0x0
0xffffad8000027a00 0001 00000000 0x0 0x0
0xffffad8000027a80 0001 00000000 0x0 0x0
0xffffad8000027b00 0001 00000000 0x0 0x0
0xffffad8000027b80 0001 00000000 0x0 0x0
0xffffad8000027c00 0001 00000000 0x0 0x0
0xffffad8000027c80 0001 00000000 0x0 0x0
0xffffad8000027d00 0001 00000000 0x0 0x0
0xffffad8000027d80 0001 00000000 0x0 0x0
0xffffad8000027e00 0001 00000000 0x0 0x0
0xffffad8000027e80 0001 00000000 0x0 0x0
0xffffad8000027f00 0001 00000000 0x0 0x0
0xffffad8000027f80 0001 00000000 0x0 0x0
0xffffad8000028000 0001 00000000 0x0 0x0
0xffffad8000028080 0001 00000000 0x0 0x0
0xffffad8000028100 0001 00000000 0x0 0x0
0xffffad8000028180 0001 00000000 0x0 0x0
0xffffad8000028200 0001 00000000 0x0 0x0
0xffffad8000028280 0001 00000000 0x0 0x0
0xffffad8000028300 0001 00000000 0x0 0x0
0xffffad8000028380 0001 00000000 0x0 0x0
0xffffad8000028400 0001 00000000 0x0 0x0
0xffffad8000028480 0001 00000000 0x0 0x0
0xffffad8000028500 0001 00000000 0x0 0x0
0xffffad8000028580 0001 00000000 0x0 0x0
0xffffad8000028600 0001 00000000 0x0 0x0
0xffffad8000028680 0001 00000000 0x0 0x0
0xffffad8000028700 0001 00000000 0x0 0x0
0xffffad8000028780 0001 00000000 0x0 0x0
0xffffad8000028800 0001 00000000 0x0 0x0
0xffffad8000028880 0001 00000000 0x0 0x0
0xffffad8000028900 0001 00000000 0x0 0x0
0xffffad8000028980 0001 00000000 0x0 0x0
0xffffad8000028a00 0001 00000000 0x0 0x0
0xffffad8000028a80 0001 00000000 0x0 0x0
0xffffad8000028b00 0001 00000000 0x0 0x0
0xffffad8000028b80 0001 00000000 0x0 0x0
0xffffad8000028c00 0001 00000000 0x0 0x0
0xffffad8000028c80 0001 00000000 0x0 0x0
0xffffad8000028d00 0001 00000000 0x0 0x0
0xffffad8000028d80 0001 00000000 0x0 0x0
0xffffad8000028e00 0001 00000000 0x0 0x0
0xffffad8000028e80 0001 00000000 0x0 0x0
0xffffad8000028f00 0001 00000000 0x0 0x0
0xffffad8000028f80 0001 00000000 0x0 0x0
0xffffad8000029000 0001 00000000 0x0 0x0
0xffffad8000029080 0001 00000000 0x0 0x0
0xffffad8000029100 0001 00000000 0x0 0x0
0xffffad8000029180 0001 00000000 0x0 0x0
0xffffad8000029200 0001 00000000 0x0 0x0
0xffffad8000029280 0001 00000000 0x0 0x0
0xffffad8000029300 0001 00000000 0x0 0x0
0xffffad8000029380 0001 00000000 0x0 0x0
0xffffad8000029400 0001 00000000 0x0 0x0
0xffffad8000029480 0001 00000000 0x0 0x0
0xffffad8000029500 0001 00000000 0x0 0x0
0xffffad8000029580 0001 00000000 0x0 0x0
0xffffad8000029600 0001 00000000 0x0 0x0
0xffffad8000029680 0001 00000000 0x0 0x0
0xffffad8000029700 0001 00000000 0x0 0x0
0xffffad8000029780 0001 00000000 0x0 0x0
0xffffad8000029800 0001 00000000 0x0 0x0
0xffffad8000029880 0001 00000000 0x0 0x0
0xffffad8000029900 0001 00000000 0x0 0x0
0xffffad8000029980 0001 00000000 0x0 0x0
0xffffad8000029a00 0001 00000000 0x0 0x0
0xffffad8000029a80 0001 00000000 0x0 0x0
0xffffad8000029b00 0001 00000000 0x0 0x0
0xffffad8000029b80 0001 00000000 0x0 0x0
0xffffad8000029c00 0001 00000000 0x0 0x0
0xffffad8000029c80 0001 00000000 0x0 0x0
0xffffad8000029d00 0001 00000000 0x0 0x0
0xffffad8000029d80 0001 00000000 0x0 0x0
0xffffad8000029e00 0001 00000000 0x0 0x0
0xffffad8000029e80 0001 00000000 0x0 0x0
0xffffad8000029f00 0001 00000000 0x0 0x0
0xffffad8000029f80 0001 00000000 0x0 0x0
0xffffad800002a000 0001 00000000 0x0 0x0
0xffffad800002a080 0001 00000000 0x0 0x0
0xffffad800002a100 0001 00000000 0x0 0x0
0xffffad800002a180 0001 00000000 0x0 0x0
0xffffad800002a200 0001 00000000 0x0 0x0
0xffffad800002a280 0001 00000000 0x0 0x0
0xffffad800002a300 0001 00000000 0x0 0x0
0xffffad800002a380 0001 00000000 0x0 0x0
0xffffad800002a400 0001 00000000 0x0 0x0
0xffffad800002a480 0001 00000000 0x0 0x0
0xffffad800002a500 0001 00000000 0x0 0x0
0xffffad800002a580 0001 00000000 0x0 0x0
0xffffad800002a600 0001 00000000 0x0 0x0
0xffffad800002a680 0001 00000000 0x0 0x0
0xffffad800002a700 0001 00000000 0x0 0x0
0xffffad800002a780 0001 00000000 0x0 0x0
0xffffad800002a800 0001 00000000 0x0 0x0
0xffffad800002a880 0001 00000000 0x0 0x0
0xffffad800002a900 0001 00000000 0x0 0x0
0xffffad800002a980 0001 00000000 0x0 0x0
0xffffad800002aa00 0001 00000000 0x0 0x0
0xffffad800002aa80 0001 00000000 0x0 0x0
0xffffad800002ab00 0001 00000000 0x0 0x0
0xffffad800002ab80 0001 00000000 0x0 0x0
0xffffad800002ac00 0001 00000000 0x0 0x0
0xffffad800002ac80 0001 00000000 0x0 0x0
0xffffad800002ad00 0001 00000000 0x0 0x0
0xffffad800002ad80 0001 00000000 0x0 0x0
0xffffad800002ae00 0001 00000000 0x0 0x0
0xffffad800002ae80 0001 00000000 0x0 0x0
0xffffad800002af00 0001 00000000 0x0 0x0
0xffffad800002af80 0001 00000000 0x0 0x0
0xffffad800002b000 0001 00000000 0x0 0x0
0xffffad800002b080 0001 00000000 0x0 0x0
0xffffad800002b100 0001 00000000 0x0 0x0
0xffffad800002b180 0001 00000000 0x0 0x0
0xffffad800002b200 0001 00000000 0x0 0x0
0xffffad800002b280 0001 00000000 0x0 0x0
0xffffad800002b300 0001 00000000 0x0 0x0
0xffffad800002b380 0001 00000000 0x0 0x0
0xffffad800002b400 0001 00000000 0x0 0x0
0xffffad800002b480 0001 00000000 0x0 0x0
0xffffad800002b500 0001 00000000 0x0 0x0
0xffffad800002b580 0001 00000000 0x0 0x0
0xffffad800002b600 0001 00000000 0x0 0x0
0xffffad800002b680 0001 00000000 0x0 0x0
0xffffad800002b700 0001 00000000 0x0 0x0
0xffffad800002b780 0001 00000000 0x0 0x0
0xffffad800002b800 0001 00000000 0x0 0x0
0xffffad800002b880 0001 00000000 0x0 0x0
0xffffad800002b900 0001 00000000 0x0 0x0
0xffffad800002b980 0001 00000000 0x0 0x0
0xffffad800002ba00 0001 00000000 0x0 0x0
0xffffad800002ba80 0001 00000000 0x0 0x0
0xffffad800002bb00 0001 00000000 0x0 0x0
0xffffad800002bb80 0001 00000000 0x0 0x0
0xffffad800002bc00 0001 00000000 0x0 0x0
0xffffad800002bc80 0001 00000000 0x0 0x0
0xffffad800002bd00 0001 00000000 0x0 0x0
0xffffad800002bd80 0001 00000000 0x0 0x0
0xffffad800002be00 0001 00000000 0x0 0x0
0xffffad800002be80 0001 00000000 0x0 0x0
0xffffad800002bf00 0001 00000000 0x0 0x0
0xffffad800002bf80 0001 00000000 0x0 0x0
0xffffad800002c000 0001 00000000 0x0 0x0
0xffffad800002c080 0001 00000000 0x0 0x0
0xffffad800002c100 0001 00000000 0x0 0x0
0xffffad800002c180 0001 00000000 0x0 0x0
0xffffad800002c200 0001 00000000 0x0 0x0
0xffffa

---
This report is generated by a bot. It may contain errors.
See https://goo.gl/tpsmEJ for more information about syzbot.
syzbot engineers can be reached at syzk...@googlegroups.com.

syzbot will keep track of this issue. See:
https://goo.gl/tpsmEJ#status for how to communicate with syzbot.

If the bug is already fixed, let syzbot know by replying with:
#syz fix: exact-commit-title

If you want to change bug's subsystems, reply with:
#syz set subsystems: new-subsystem
(See the list of subsystem names on the web dashboard)

If the bug is a duplicate of another bug, reply with:
#syz dup: exact-subject-of-another-report

If you want to undo deduplication, reply with:
#syz undup

syzbot

unread,

Jul 31, 2023, 10:06:54 AM7/31/23

to syzkaller-...@googlegroups.com

syzbot has found a reproducer for the following issue on:

HEAD commit: dbd12398b230 Import gdb-13.2 over gdb-11.0.50
git tree: netbsd

console output: https://syzkaller.appspot.com/x/log.txt?x=1669a336a80000

kernel config: https://syzkaller.appspot.com/x/.config?x=739e57438eb9ed9e
dashboard link: https://syzkaller.appspot.com/bug?extid=0dfe474b7322029d1368
compiler: Debian clang version 15.0.6

syz repro: https://syzkaller.appspot.com/x/repro.syz?x=14d21511a80000
C reproducer: https://syzkaller.appspot.com/x/repro.c?x=10c33952a80000

Downloadable assets:
disk image: https://storage.googleapis.com/syzbot-assets/7c1ade769576/disk-dbd12398.raw.xz
netbsd.gdb: https://storage.googleapis.com/syzbot-assets/6b4ad4a7dfa1/netbsd-dbd12398.gdb.xz

IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+0dfe47...@syzkaller.appspotmail.com

[ 51.8806140] fatal page fault in supervisor mode
[ 51.8906022] trap type 6 code 0 rip 0xffffffff84aa7363 cs 0x8 rflags 0x10246 cr2 0x38 ilevel 0 rsp 0xffffd800c792c440
[ 51.9005995] curlwp 0xffffd80012ba3900 pid 990.990 lowest kstack 0xffffd800c79262c0

kernel: page fault trap, code=0

Stopped in pid 990.990 (syz-executor4012) at netbsd:union_revoke+0x193: movq 0(%r12),%r14

?
union_revoke() at netbsd:union_revoke+0x193 sys/fs/union/union_vnops.c:1117
layer_bypass() at netbsd:layer_bypass+0x860 sys/miscfs/genfs/layer_vnops.c:294
layer_revoke() at netbsd:layer_revoke+0x11d sys/miscfs/genfs/layer_vnops.c:701
VOP_REVOKE() at netbsd:VOP_REVOKE+0x1ba

union_revoke() at netbsd:union_revoke+0x122 sys/fs/union/union_vnops.c:1115

layer_bypass() at netbsd:layer_bypass+0x860 sys/miscfs/genfs/layer_vnops.c:294
layer_revoke() at netbsd:layer_revoke+0x11d sys/miscfs/genfs/layer_vnops.c:701
layer_bypass() at netbsd:layer_bypass+0x860 sys/miscfs/genfs/layer_vnops.c:294
layer_revoke() at netbsd:layer_revoke+0x11d sys/miscfs/genfs/layer_vnops.c:701
VOP_REVOKE() at netbsd:VOP_REVOKE+0x1ba

union_revoke() at netbsd:union_revoke+0x122 sys/fs/union/union_vnops.c:1115

layer_bypass() at netbsd:layer_bypass+0x860 sys/miscfs/genfs/layer_vnops.c:294
layer_revoke() at netbsd:layer_revoke+0x11d sys/miscfs/genfs/layer_vnops.c:701
VOP_REVOKE() at netbsd:VOP_REVOKE+0x1ba

union_revoke() at netbsd:union_revoke+0x122 sys/fs/union/union_vnops.c:1115

layer_bypass() at netbsd:layer_bypass+0x860 sys/miscfs/genfs/layer_vnops.c:294
layer_revoke() at netbsd:layer_revoke+0x11d sys/miscfs/genfs/layer_vnops.c:701
VOP_REVOKE() at netbsd:VOP_REVOKE+0x1ba

union_revoke() at netbsd:union_revoke+0x122 sys/fs/union/union_vnops.c:1115

layer_bypass() at netbsd:layer_bypass+0x860 sys/miscfs/genfs/layer_vnops.c:294
layer_revoke() at netbsd:layer_revoke+0x11d sys/miscfs/genfs/layer_vnops.c:701
VOP_REVOKE() at netbsd:VOP_REVOKE+0x1ba
vdevgone() at netbsd:vdevgone+0x30c sys/kern/vfs_subr.c:585
pad_detach() at netbsd:pad_detach+0x342 sys/dev/pad/pad.c:248
config_detach_release() at netbsd:config_detach_release+0xf1e
fops_pad_close() at netbsd:fops_pad_close+0x160 pad_close sys/dev/pad/pad.c:435 [inline]
fops_pad_close() at netbsd:fops_pad_close+0x160 sys/dev/pad/pad.c:445
closef() at netbsd:closef+0x4e6 sys/kern/kern_descrip.c:865
fd_free() at netbsd:fd_free+0xc97
exit1() at netbsd:exit1+0xaa9 sys/kern/kern_exit.c:301

sigexit() at netbsd:sigexit+0x1312 sys/kern/kern_sig.c:2351
postsig() at netbsd:postsig+0xd84 sys/kern/kern_sig.c:2154
lwp_userret() at netbsd:lwp_userret+0x2c3
userret() at netbsd:userret+0xf3f KPREEMPT_DISABLE sys/sys/lwp.h:543 [inline]
userret() at netbsd:userret+0xf3f mi_userret sys/sys/userret.h:97 [inline]
userret() at netbsd:userret+0xf3f sys/arch/amd64/compile/obj/GENERIC_SYZKALLER/./machine/userret.h:81
syscall() at netbsd:syscall+0x860 sys/arch/x86/x86/syscall.c:167
--- syscall (number 29) ---
netbsd:syscall+0x860:

Panic string: (null)
PID LID S CPU FLAGS STRUCT LWP * NAME WAIT

1236 1236 2 0 1040000 ffffd8001346e580 syz-executor4012
829 829 2 0 1040000 ffffd8001346e140 syz-executor4012
942 > 942 7 0 1040000 ffffd8001343e980 syz-executor4012
1238 1238 2 0 1040000 ffffd8001343e540 syz-executor4012
1245 1245 3 0 1040000 ffffd8001343e100 syz-executor4012 xclocv
1115 1115 3 1 1c0 ffffd80012c61940 syz-executor4012 wait
1113 1113 3 0 1c0 ffffd80012c61500 syz-executor4012 wait
1120 1120 3 0 1c0 ffffd80012c610c0 syz-executor4012 wait
990 > 990 7 1 40000 ffffd80012ba3900 syz-executor4012
1239 1239 3 0 1c0 ffffd80012ba34c0 syz-executor4012 wait
1132 1132 3 1 1c0 ffffd80012ba3080 syz-executor4012 wait
449 449 3 1 1c0 ffffd800122ffb00 syz-executor4012 wait
1128 1128 3 0 180 ffffd800122ff6c0 syz-executor4012 nanoslp
1233 1233 3 1 180 ffffd8001251d300 sshd select
1222 1222 3 0 180 ffffd800122ff280 getty nanoslp
1184 1184 3 0 180 ffffd800125fc780 getty nanoslp
1216 1216 3 1 180 ffffd800121feac0 getty nanoslp
1193 1193 3 1 1c0 ffffd800121fb200 getty ttyraw
1098 1098 3 0 180 ffffd8001251d740 sshd select
1095 1095 3 1 180 ffffd80012b72480 powerd kqueue
702 702 2 1 100 ffffd80012b728c0 syslogd
746 746 3 0 180 ffffd80012b72040 dhcpcd poll
747 747 3 1 180 ffffd800123912c0 dhcpcd poll
742 742 3 1 180 ffffd800125fcbc0 dhcpcd poll
602 602 3 1 180 ffffd80012391700 dhcpcd poll
292 292 3 1 180 ffffd800125fc340 dhcpcd poll
485 485 3 0 180 ffffd80012391b40 dhcpcd poll
291 291 3 0 180 ffffd8001251db80 dhcpcd poll
1 1 3 0 180 ffffd80011ede100 init wait
0 673 3 0 200 ffffd800121fb640 physiod physiod
0 196 3 0 200 ffffd800121fe680 pooldrain pooldrain
0 195 3 1 200 ffffd800121fe240 ioflush syncer
0 194 3 1 200 ffffd800121fba80 pgdaemon pgdaemon
0 167 3 0 200 ffffd8001216ba40 usb7 usbevt
0 172 3 0 200 ffffd8001216b600 usb6 usbevt
0 170 3 0 200 ffffd8001216b1c0 usb5 usbevt
0 168 3 0 200 ffffd8001213ba00 usb4 usbevt
0 166 3 0 200 ffffd8001213b5c0 usb3 usbevt
0 165 3 0 200 ffffd8001213b180 usb2 usbevt
0 31 3 0 200 ffffd800120859c0 usb1 usbevt
0 63 3 0 200 ffffd80012085580 usb0 usbevt
0 126 3 1 200 ffffd80012085140 usbtask-dr usbtsk
0 125 3 1 200 ffffd80011ede980 usbtask-hc usbtsk
0 124 3 0 200 ffffd800103f4b00 swwreboot swwreboot
0 123 3 1 200 ffffd80011ede540 npfgc0 npfgcw
0 122 3 1 200 ffffd80011ed0940 rt_free rt_free
0 121 3 1 200 ffffd80011ed0500 unpgc unpgc
0 120 3 1 200 ffffd80011ed00c0 key_timehandler key_timehandler
0 119 3 1 200 ffffd80011ecb900 icmp6_wqinput/1 icmp6_wqinput
0 118 3 0 200 ffffd80011ecb4c0 icmp6_wqinput/0 icmp6_wqinput
0 117 3 0 200 ffffd80011ecb080 nd6_timer nd6_timer
0 116 3 1 200 ffffd80011eaa8c0 carp6_wqinput/1 carp6_wqinput
0 115 3 0 200 ffffd80011eaa480 carp6_wqinput/0 carp6_wqinput
0 114 3 1 200 ffffd80011cecb80 carp_wqinput/1 carp_wqinput
0 113 3 0 200 ffffd80011cec740 carp_wqinput/0 carp_wqinput
0 112 3 1 200 ffffd80011ceebc0 icmp_wqinput/1 icmp_wqinput
0 111 3 0 200 ffffd80011cee780 icmp_wqinput/0 icmp_wqinput
0 110 3 0 200 ffffd80011eaa040 rt_timer rt_timer
0 109 3 0 200 ffffd80011cee340 vmem_rehash vmem_rehash
0 100 3 0 200 ffffd80011cec300 entbutler entropy
0 99 3 1 200 ffffd800117e0b40 viomb balloon
0 98 3 1 200 ffffd800117e0700 vioif0_txrx/1 vioif0_txrx
0 97 3 0 200 ffffd800117e02c0 vioif0_txrx/0 vioif0_txrx
0 30 3 0 200 ffffd800103f46c0 scsibus0 sccomp
0 29 3 0 200 ffffd800103f4280 pms0 pmsreset
0 28 2 1 200 ffffd800103d9ac0 xcall/1
0 27 1 1 200 ffffd800103d9680 softser/1
0 26 1 1 200 ffffd800103d9240 softclk/1
0 25 1 1 200 ffffd800103d7a80 softbio/1
0 24 1 1 200 ffffd800103d7640 softnet/1
0 23 1 1 201 ffffd800103d7200 idle/1
0 22 3 0 200 ffffd8000f1e3a40 lnxsyswq lnxsyswq
0 21 3 0 200 ffffd8000f1e3600 lnxubdwq lnxubdwq
0 20 3 0 200 ffffd8000f1e31c0 lnxpwrwq lnxpwrwq
0 19 3 0 200 ffffd8000f1e1a00 lnxlngwq lnxlngwq
0 18 3 0 200 ffffd8000f1e15c0 lnxhipwq lnxhipwq
0 17 3 0 200 ffffd8000f1e1180 lnxrcugc lnxrcugc
0 16 3 0 200 ffffd8000f1db9c0 sysmon smtaskq
0 15 3 0 200 ffffd8000f1db580 pmfsuspend pmfsuspend
0 14 3 0 200 ffffd8000f1db140 pmfevent pmfevent
0 13 3 0 200 ffffd8000f1d9980 sopendfree sopendfr
0 12 3 0 200 ffffd8000f1d9540 ifwdog ifwdog
0 11 3 0 200 ffffd8000f1d9100 iflnkst iflnkst
0 10 3 0 200 ffffd8000f1cf940 nfssilly nfssilly
0 9 3 0 200 ffffd8000f1cf500 vdrain vdrain
0 8 3 1 200 ffffd8000f1cf0c0 modunload mod_unld
0 7 3 0 200 ffffd8000ebdb900 xcall/0 xcall
0 6 1 0 200 ffffd8000ebdb4c0 softser/0
0 > 5 7 0 200 ffffd8000ebdb080 softclk/0
0 4 1 0 200 ffffd8000ebd98c0 softbio/0
0 3 1 0 200 ffffd8000ebd9480 softnet/0
0 2 1 0 201 ffffd8000ebd9040 idle/0

0 0 3 0 200 ffffffff8686e500 swapper uvm
[Locks tracked through LWPs]

****** LWP 1236.1236 (syz-executor4012) @ 0xffffd8001346e580, l_stat=2

*** Locks held:

* Lock 0 (initialized at netbsd:fork1+0x938 sys/kern/kern_fork.c:366)

lock address : ffffd8001353e510

type : sleep/adaptive
initialized : netbsd:fork1+0x938
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0

relevant cpu : 0 last held: 0

relevant lwp : 0xffffd8001346e580 last held: 0xffffd8001346e580

last locked* : netbsd:exit1+0xa74
unlocked : 0

owner/count : 0xffffd8001346e580 flags : 0x0000000000000004

Turnstile: no active turnstile for this lock.

*** Locks wanted: none

****** LWP 829.829 (syz-executor4012) @ 0xffffd8001346e140, l_stat=2

*** Locks held:

* Lock 0 (initialized at netbsd:fork1+0x938 sys/kern/kern_fork.c:366)

lock address : ffffd80013439e90

type : sleep/adaptive
initialized : netbsd:fork1+0x938
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0

relevant cpu : 0 last held: 1
relevant lwp : 0xffffd8001346e140 last held: 0xffffd8001346e140

last locked* : netbsd:exit1+0xa74
unlocked : 0

owner/count : 0xffffd8001346e140 flags : 0x0000000000000004

Turnstile: no active turnstile for this lock.

*** Locks wanted: none

****** LWP 942.942 (syz-executor4012) @ 0xffffd8001343e980, l_stat=7

*** Locks held:

* Lock 0 (initialized at netbsd:fork1+0x938 sys/kern/kern_fork.c:366)

lock address : ffffd80013439b50

type : sleep/adaptive
initialized : netbsd:fork1+0x938
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0

relevant cpu : 0 last held: 1
relevant lwp : 0xffffd8001343e980 last held: 0xffffd8001343e980

last locked* : netbsd:exit1+0xa74
unlocked : 0

owner/count : 0xffffd8001343e980 flags : 0x0000000000000004

Turnstile: no active turnstile for this lock.

*** Locks wanted:

* Lock 0 (initialized at netbsd:main+0x354 sys/kern/init_main.c:305)
lock address : netbsd:kernel_lock
type : spin
initialized : netbsd:main+0x354
shared holds : 0 exclusive: 1

shares wanted: 0 exclusive: 2
relevant cpu : 0 last held: 1
relevant lwp : 0xffffd8001343e980 last held: 0xffffd80012ba3900

last locked* : netbsd:sleepq_block+0x7bb
unlocked : netbsd:cv_enter+0x75e

curcpu holds : 7 wanted by: 000000000000000000

****** LWP 1238.1238 (syz-executor4012) @ 0xffffd8001343e540, l_stat=2

*** Locks held:

* Lock 0 (initialized at netbsd:fork1+0x938 sys/kern/kern_fork.c:366)

lock address : ffffd80013439810

type : sleep/adaptive
initialized : netbsd:fork1+0x938
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0

relevant cpu : 0 last held: 0

relevant lwp : 0xffffd8001343e540 last held: 0xffffd8001343e540

last locked* : netbsd:exit1+0xa74
unlocked : 0

owner/count : 0xffffd8001343e540 flags : 0x0000000000000004

Turnstile: no active turnstile for this lock.

*** Locks wanted: none

****** LWP 1245.1245 (syz-executor4012) @ 0xffffd8001343e100, l_stat=3

*** Locks held:

* Lock 0 (initialized at netbsd:fork1+0x938 sys/kern/kern_fork.c:366)

lock address : ffffd800134394d0

type : sleep/adaptive
initialized : netbsd:fork1+0x938
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0

relevant cpu : 0 last held: 1
relevant lwp : 0xffffd8001343e100 last held: 0xffffd8001343e100

last locked* : netbsd:exit1+0xa74
unlocked : 0

owner/count : 0xffffd8001343e100 flags : 0x0000000000000004

Turnstile: no active turnstile for this lock.

*** Locks wanted: none

****** LWP 990.990 (syz-executor4012) @ 0xffffd80012ba3900, l_stat=7

*** Locks held:

* Lock 0 (initialized at netbsd:fork1+0x938 sys/kern/kern_fork.c:366)

lock address : ffffd80012bab490

type : sleep/adaptive
initialized : netbsd:fork1+0x938
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 1

relevant lwp : 0xffffd80012ba3900 last held: 0xffffd80012ba3900

last locked* : netbsd:exit1+0xa74
unlocked : 0

owner/count : 0xffffd80012ba3900 flags : 0x0000000000000004

Turnstile: no active turnstile for this lock.

*** Locks wanted: none

****** LWP 747.747 (dhcpcd) @ 0xffffd800123912c0, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:module_hook_init+0x43 sys/kern/kern_module_hook.c:132)
lock address : netbsd:module_hook
type : sleep/adaptive
initialized : netbsd:module_hook_init+0x43
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0

relevant cpu : 1 last held: 0

relevant lwp : 0xffffd800123912c0 last held: 000000000000000000

last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 742.742 (dhcpcd) @ 0xffffd800125fcbc0, l_stat=3

relevant cpu : 1 last held: 0

relevant lwp : 0xffffd800125fcbc0 last held: 000000000000000000

last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 485.485 (dhcpcd) @ 0xffffd80012391b40, l_stat=3

relevant lwp : 0xffffd80012391b40 last held: 000000000000000000

last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 291.291 (dhcpcd) @ 0xffffd8001251db80, l_stat=3

relevant lwp : 0xffffd8001251db80 last held: 000000000000000000

last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 0.11 (iflnkst) @ 0xffffd8000f1d9100, l_stat=3

relevant lwp : 0xffffd8000f1d9100 last held: 000000000000000000

last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 0.5 (softclk/0) @ 0xffffd8000ebdb080, l_stat=7

*** Locks held:

* Lock 0 (initialized at netbsd:soinit+0x4c2 sys/kern/uipc_socket.c:459)
lock address : ffffd8000ebbf080
type : sleep/adaptive
initialized : netbsd:soinit+0x4c2

shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0

relevant cpu : 0 last held: 0

relevant lwp : 0xffffd8000ebdb080 last held: 0xffffd8000ebdb080
last locked* : netbsd:ip_slowtimo+0x3d
unlocked : netbsd:pffasttimo+0x135
owner field : 0xffffd8000ebdb080 wait/spin: 0/0

Turnstile: no active turnstile for this lock.

*** Locks wanted:

* Lock 0 (initialized at netbsd:module_hook_init+0x43 sys/kern/kern_module_hook.c:132)
lock address : netbsd:module_hook
type : sleep/adaptive
initialized : netbsd:module_hook_init+0x43
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0

relevant lwp : 0xffffd8000ebdb080 last held: 000000000000000000

shares wanted: 0 exclusive: 2

relevant cpu : 1 last held: 1

relevant lwp : 0xffffd80012ba3900 last held: 0xffffd80012ba3900

last locked* : netbsd:sleepq_block+0x7bb
unlocked : netbsd:cv_enter+0x75e

curcpu holds : 7 wanted by: 000000000000000000

PAGE FLAG PQ UOBJECT UANON

0xffffd80000017180 0001 00000000 0x0 0x0
0xffffd80000017200 0041 00000000 0x0 0x0
0xffffd80000017280 0041 00000000 0x0 0x0
0xffffd80000017300 0041 00000000 0x0 0x0
0xffffd80000017380 0041 00000000 0x0 0x0
0xffffd80000017400 0041 00000000 0x0 0x0
0xffffd80000017480 0041 00000000 0x0 0x0
0xffffd80000017500 0041 00000000 0x0 0x0
0xffffd80000017580 0041 00000000 0x0 0x0
0xffffd80000017600 0041 00000000 0x0 0x0
0xffffd80000017680 0041 00000000 0x0 0x0
0xffffd80000017700 0041 00000000 0x0 0x0
0xffffd80000017780 0041 00000000 0x0 0x0
0xffffd80000017800 0041 00000000 0x0 0x0
0xffffd80000017880 0041 00000000 0x0 0x0
0xffffd80000017900 0041 00000000 0x0 0x0
0xffffd80000017980 0041 00000000 0x0 0x0
0xffffd80000017a00 0041 00000000 0x0 0x0
0xffffd80000017a80 0041 00000000 0x0 0x0
0xffffd80000017b00 0041 00000000 0x0 0x0
0xffffd80000017b80 0041 00000000 0x0 0x0
0xffffd80000017c00 0041 00000000 0x0 0x0
0xffffd80000017c80 0041 00000000 0x0 0x0
0xffffd80000017d00 0041 00000000 0x0 0x0
0xffffd80000017d80 0041 00000000 0x0 0x0
0xffffd80000017e00 0041 00000000 0x0 0x0
0xffffd80000017e80 0041 00000000 0x0 0x0
0xffffd80000017f00 0041 00000000 0x0 0x0
0xffffd80000017f80 0041 00000000 0x0 0x0
0xffffd80000018000 0041 00000000 0x0 0x0
0xffffd80000018080 0041 00000000 0x0 0x0
0xffffd80000018100 0041 00000000 0x0 0x0
0xffffd80000018180 0041 00000000 0x0 0x0
0xffffd80000018200 0041 00000000 0x0 0x0
0xffffd80000018280 0041 00000000 0x0 0x0
0xffffd80000018300 0041 00000000 0x0 0x0
0xffffd80000018380 0041 00000000 0x0 0x0
0xffffd80000018400 0041 00000000 0x0 0x0
0xffffd80000018480 0041 00000000 0x0 0x0
0xffffd80000018500 0041 00000000 0x0 0x0
0xffffd80000018580 0041 00000000 0x0 0x0
0xffffd80000018600 0041 00000000 0x0 0x0
0xffffd80000018680 0041 00000000 0x0 0x0
0xffffd80000018700 0041 00000000 0x0 0x0
0xffffd80000018780 0041 00000000 0x0 0x0
0xffffd80000018800 0041 00000000 0x0 0x0
0xffffd80000018880 0041 00000000 0x0 0x0
0xffffd80000018900 0041 00000000 0x0 0x0
0xffffd80000018980 0041 00000000 0x0 0x0
0xffffd80000018a00 0041 00000000 0x0 0x0
0xffffd80000018a80 0041 00000000 0x0 0x0
0xffffd80000018b00 0041 00000000 0x0 0x0
0xffffd80000018b80 0041 00000000 0x0 0x0
0xffffd80000018c00 0041 00000000 0x0 0x0
0xffffd80000018c80 0041 00000000 0x0 0x0
0xffffd80000018d00 0041 00000000 0x0 0x0
0xffffd80000018d80 0041 00000000 0x0 0x0
0xffffd80000018e00 0041 00000000 0x0 0x0
0xffffd80000018e80 0041 00000000 0x0 0x0
0xffffd80000018f00 0041 00000000 0x0 0x0
0xffffd80000018f80 0041 00000000 0x0 0x0
0xffffd80000019000 0041 00000000 0x0 0x0
0xffffd80000019080 0041 00000000 0x0 0x0
0xffffd80000019100 0041 00000000 0x0 0x0
0xffffd80000019180 0041 00000000 0x0 0x0
0xffffd80000019200 0041 00000000 0x0 0x0
0xffffd80000019280 0041 00000000 0x0 0x0
0xffffd80000019300 0041 00000000 0x0 0x0
0xffffd80000019380 0041 00000000 0x0 0x0
0xffffd80000019400 0041 00000000 0x0 0x0
0xffffd80000019480 0041 00000000 0x0 0x0
0xffffd80000019500 0041 00000000 0x0 0x0
0xffffd80000019580 0041 00000000 0x0 0x0
0xffffd80000019600 0041 00000000 0x0 0x0
0xffffd80000019680 0041 00000000 0x0 0x0
0xffffd80000019700 0041 00000000 0x0 0x0
0xffffd80000019780 0041 00000000 0x0 0x0
0xffffd80000019800 0041 00000000 0x0 0x0
0xffffd80000019880 0041 00000000 0x0 0x0
0xffffd80000019900 0041 00000000 0x0 0x0
0xffffd80000019980 0041 00000000 0x0 0x0
0xffffd80000019a00 0041 00000000 0x0 0x0
0xffffd80000019a80 0041 00000000 0x0 0x0
0xffffd80000019b00 0041 00000000 0x0 0x0
0xffffd80000019b80 0041 00000000 0x0 0x0
0xffffd80000019c00 0041 00000000 0x0 0x0
0xffffd80000019c80 0041 00000000 0x0 0x0
0xffffd80000019d00 0041 00000000 0x0 0x0
0xffffd80000019d80 0041 00000000 0x0 0x0
0xffffd80000019e00 0041 00000000 0x0 0x0
0xffffd80000019e80 0041 00000000 0x0 0x0
0xffffd80000019f00 0041 00000000 0x0 0x0
0xffffd80000019f80 0041 00000000 0x0 0x0
0xffffd8000001a000 0041 00000000 0x0 0x0
0xffffd8000001a080 0041 00000000 0x0 0x0
0xffffd8000001a100 0041 00000000 0x0 0x0
0xffffd8000001a180 0041 00000000 0x0 0x0
0xffffd8000001a200 0041 00000000 0x0 0x0
0xffffd8000001a280 0041 00000000 0x0 0x0
0xffffd8000001a300 0041 00000000 0x0 0x0
0xffffd8000001a380 0041 00000000 0x0 0x0
0xffffd8000001a400 0041 00000000 0x0 0x0
0xffffd8000001a480 0041 00000000 0x0 0x0
0xffffd8000001a500 0041 00000000 0x0 0x0
0xffffd8000001a580 0041 00000000 0x0 0x0
0xffffd8000001a600 0041 00000000 0x0 0x0
0xffffd8000001a680 0041 00000000 0x0 0x0
0xffffd8000001a700 0041 00000000 0x0 0x0
0xffffd8000001a780 0041 00000000 0x0 0x0
0xffffd8000001a800 0041 00000000 0x0 0x0
0xffffd8000001a880 0041 00000000 0x0 0x0
0xffffd8000001a900 0041 00000000 0x0 0x0
0xffffd8000001a980 0041 00000000 0x0 0x0
0xffffd8000001aa00 0041 00000000 0x0 0x0
0xffffd8000001aa80 0041 00000000 0x0 0x0
0xffffd8000001ab00 0041 00000000 0x0 0x0
0xffffd8000001ab80 0041 00000000 0x0 0x0
0xffffd8000001ac00 0041 00000000 0x0 0x0
0xffffd8000001ac80 0041 00000000 0x0 0x0
0xffffd8000001ad00 0041 00000000 0x0 0x0
0xffffd8000001ad80 0041 00000000 0x0 0x0
0xffffd8000001ae00 0041 00000000 0x0 0x0
0xffffd8000001ae80 0041 00000000 0x0 0x0
0xffffd8000001af00 0041 00000000 0x0 0x0
0xffffd8000001af80 0041 00000000 0x0 0x0
0xffffd8000001b000 0041 00000000 0x0 0x0
0xffffd8000001b080 0041 00000000 0x0 0x0
0xffffd8000001b100 0041 00000000 0x0 0x0
0xffffd8000001b180 0041 00000000 0x0 0x0
0xffffd8000001b200 0041 00000000 0x0 0x0
0xffffd8000001b280 0041 00000000 0x0 0x0
0xffffd8000001b300 0041 00000000 0x0 0x0
0xffffd8000001b380 0041 00000000 0x0 0x0
0xffffd8000001b400 0041 00000000 0x0 0x0
0xffffd8000001b480 0041 00000000 0x0 0x0
0xffffd8000001b500 0041 00000000 0x0 0x0
0xffffd8000001b580 0041 00000000 0x0 0x0
0xffffd8000001b600 0041 00000000 0x0 0x0
0xffffd8000001b680 0041 00000000 0x0 0x0
0xffffd8000001b700 0041 00000000 0x0 0x0
0xffffd8000001b780 0041 00000000 0x0 0x0
0xffffd8000001b800 0041 00000000 0x0 0x0
0xffffd8000001b880 0041 00000000 0x0 0x0
0xffffd8000001b900 0041 00000000 0x0 0x0
0xffffd8000001b980 0041 00000000 0x0 0x0
0xffffd8000001ba00 0041 00000000 0x0 0x0
0xffffd8000001ba80 0041 00000000 0x0 0x0
0xffffd8000001bb00 0041 00000000 0x0 0x0
0xffffd8000001bb80 0041 00000000 0x0 0x0
0xffffd8000001bc00 0041 00000000 0x0 0x0
0xffffd8000001bc80 0041 00000000 0x0 0x0
0xffffd8000001bd00 0041 00000000 0x0 0x0
0xffffd8000001bd80 0041 00000000 0x0 0x0
0xffffd8000001be00 0041 00000000 0x0 0x0
0xffffd8000001be80 0041 00000000 0x0 0x0
0xffffd8000001bf00 0041 00000000 0x0 0x0
0xffffd8000001bf80 0041 00000000 0x0 0x0
0xffffd8000001c000 0041 00000000 0x0 0x0
0xffffd8000001c080 0041 00000000 0x0 0x0
0xffffd8000001c100 0041 00000000 0x0 0x0
0xffffd8000001c180 0041 00000000 0x0 0x0
0xffffd8000001c200 0041 00000000 0x0 0x0
0xffffd8000001c280 0041 00000000 0x0 0x0
0xffffd8000001c300 0041 00000000 0x0 0x0
0xffffd8000001c380 0041 00000000 0x0 0x0
0xffffd8000001c400 0041 00000000 0x0 0x0
0xffffd8000001c480 0041 00000000 0x0 0x0
0xffffd8000001c500 0041 00000000 0x0 0x0
0xffffd8000001c580 0041 00000000 0x0 0x0
0xffffd8000001c600 0041 00000000 0x0 0x0
0xffffd8000001c680 0041 00000000 0x0 0x0
0xffffd8000001c700 0041 00000000 0x0 0x0
0xffffd8000001c780 0041 00000000 0x0 0x0
0xffffd8000001c800 0001 00000000 0x0 0x0
0xffffd8000001c880 0001 00000000 0x0 0x0
0xffffd8000001c900 0001 00000000 0x0 0x0
0xffffd8000001c980 0001 00000000 0x0 0x0
0xffffd8000001ca00 0001 00000000 0x0 0x0
0xffffd8000001ca80 0001 00000000 0x0 0x0
0xffffd8000001cb00 0001 00000000 0x0 0x0
0xffffd8000001cb80 0001 00000000 0x0 0x0
0xffffd8000001cc00 0001 00000000 0x0 0x0
0xffffd8000001cc80 0001 00000000 0x0 0x0
0xffffd8000001cd00 0001 00000000 0x0 0x0
0xffffd8000001cd80 0001 00000000 0x0 0x0
0xffffd8000001ce00 0001 00000000 0x0 0x0
0xffffd8000001ce80 0001 00000000 0x0 0x0
0xffffd8000001cf00 0001 00000000 0x0 0x0
0xffffd8000001cf80 0001 00000000 0x0 0x0
0xffffd8000001d000 0001 00000000 0x0 0x0
0xffffd8000001d080 0001 00000000 0x0 0x0
0xffffd8000001d100 0001 00000000 0x0 0x0
0xffffd8000001d180 0001 00000000 0x0 0x0
0xffffd8000001d200 0001 00000000 0x0 0x0
0xffffd8000001d280 0001 00000000 0x0 0x0
0xffffd8000001d300 0001 00000000 0x0 0x0
0xffffd8000001d380 0001 00000000 0x0 0x0
0xffffd8000001d400 0001 00000000 0x0 0x0
0xffffd8000001d480 0001 00000000 0x0 0x0
0xffffd8000001d500 0001 00000000 0x0 0x0
0xffffd8000001d580 0001 00000000 0x0 0x0
0xffffd8000001d600 0001 00000000 0x0 0x0
0xffffd8000001d680 0001 00000000 0x0 0x0
0xffffd8000001d700 0001 00000000 0x0 0x0
0xffffd8000001d780 0001 00000000 0x0 0x0
0xffffd8000001d800 0001 00000000 0x0 0x0
0xffffd8000001d880 0001 00000000 0x0 0x0
0xffffd8000001d900 0001 00000000 0x0 0x0
0xffffd8000001d980 0001 00000000 0x0 0x0
0xffffd8000001da00 0001 00000000 0x0 0x0
0xffffd8000001da80 0001 00000000 0x0 0x0
0xffffd8000001db00 0001 00000000 0x0 0x0
0xffffd8000001db80 0001 00000000 0x0 0x0
0xffffd8000001dc00 0001 00000000 0x0 0x0
0xffffd8000001dc80 0001 00000000 0x0 0x0
0xffffd8000001dd00 0001 00000000 0x0 0x0
0xffffd8000001dd80 0001 00000000 0x0 0x0
0xffffd8000001de00 0001 00000000 0x0 0x0
0xffffd8000001de80 0001 00000000 0x0 0x0
0xffffd8000001df00 0001 00000000 0x0 0x0
0xffffd8000001df80 0001 00000000 0x0 0x0
0xffffd8000001e000 0001 00000000 0x0 0x0
0xffffd8000001e080 0001 00000000 0x0 0x0
0xffffd8000001e100 0001 00000000 0x0 0x0
0xffffd8000001e180 0001 00000000 0x0 0x0
0xffffd8000001e200 0001 00000000 0x0 0x0
0xffffd8000001e280 0001 00000000 0x0 0x0
0xffffd8000001e300 0001 00000000 0x0 0x0
0xffffd8000001e380 0001 00000000 0x0 0x0
0xffffd8000001e400 0001 00000000 0x0 0x0
0xffffd8000001e480 0001 00000000 0x0 0x0
0xffffd8000001e500 0001 00000000 0x0 0x0
0xffffd8000001e580 0001 00000000 0x0 0x0
0xffffd8000001e600 0001 00000000 0x0 0x0
0xffffd8000001e680 0001 00000000 0x0 0x0
0xffffd8000001e700 0001 00000000 0x0 0x0
0xffffd8000001e780 0001 00000000 0x0 0x0
0xffffd8000001e800 0001 00000000 0x0 0x0
0xffffd8000001e880 0001 00000000 0x0 0x0
0xffffd8000001e900 0001 00000000 0x0 0x0
0xffffd8000001e980 0001 00000000 0x0 0x0
0xffffd8000001ea00 0001 00000000 0x0 0x0
0xffffd8000001ea80 0001 00000000 0x0 0x0
0xffffd8000001eb00 0001 00000000 0x0 0x0
0xffffd8000001eb80 0001 00000000 0x0 0x0
0xffffd8000001ec00 0001 00000000 0x0 0x0
0xffffd8000001ec80 0001 00000000 0x0 0x0
0xffffd8000001ed00 0001 00000000 0x0 0x0
0xffffd8000001ed80 0001 00000000 0x0 0x0
0xffffd8000001ee00 0001 00000000 0x0 0x0
0xffffd8000001ee80 0001 00000000 0x0 0x0
0xffffd8000001ef00 0001 00000000 0x0 0x0
0xffffd8000001ef80 0001 00000000 0x0 0x0
0xffffd8000001f000 0001 00000000 0x0 0x0
0xffffd8000001f080 0001 00000000 0x0 0x0
0xffffd8000001f100 0001 00000000 0x0 0x0
0xffffd8000001f180 0001 00000000 0x0 0x0
0xffffd8000001f200 0001 00000000 0x0 0x0
0xffffd8000001f280 0001 00000000 0x0 0x0
0xffffd8000001f300 0001 00000000 0x0 0x0
0xffffd8000001f380 0001 00000000 0x0 0x0
0xffffd8000001f400 0001 00000000 0x0 0x0
0xffffd8000001f480 0001 00000000 0x0 0x0
0xffffd8000001f500 0001 00000000 0x0 0x0
0xffffd8000001f580 0001 00000000 0x0 0x0
0xffffd8000001f600 0001 00000000 0x0 0x0
0xffffd8000001f680 0001 00000000 0x0 0x0
0xffffd8000001f700 0001 00000000 0x0 0x0
0xffffd8000001f780 0001 00000000 0x0 0x0
0xffffd8000001f800 0001 00000000 0x0 0x0
0xffffd8000001f880 0001 00000000 0x0 0x0
0xffffd8000001f900 0001 00000000 0x0 0x0
0xffffd8000001f980 0001 00000000 0x0 0x0
0xffffd8000001fa00 0001 00000000 0x0 0x0
0xffffd8000001fa80 0001 00000000 0x0 0x0
0xffffd8000001fb00 0001 00000000 0x0 0x0
0xffffd8000001fb80 0001 00000000 0x0 0x0
0xffffd8000001fc00 0001 00000000 0x0 0x0
0xffffd8000001fc80 0001 00000000 0x0 0x0
0xffffd8000001fd00 0001 00000000 0x0 0x0
0xffffd8000001fd80 0001 00000000 0x0 0x0
0xffffd8000001fe00 0001 00000000 0x0 0x0
0xffffd8000001fe80 0001 00000000 0x0 0x0
0xffffd8000001ff00 0001 00000000 0x0 0x0
0xffffd8000001ff80 0001 00000000 0x0 0x0
0xffffd80000020000 0001 00000000 0x0 0x0
0xffffd80000020080 0001 00000000 0x0 0x0
0xffffd80000020100 0001 00000000 0x0 0x0
0xffffd80000020180 0001 00000000 0x0 0x0
0xffffd80000020200 0001 00000000 0x0 0x0
0xffffd80000020280 0001 00000000 0x0 0x0
0xffffd80000020300 0001 00000000 0x0 0x0
0xffffd80000020380 0001 00000000 0x0 0x0
0xffffd80000020400 0001 00000000 0x0 0x0
0xffffd80000020480 0001 00000000 0x0 0x0
0xffffd80000020500 0001 00000000 0x0 0x0
0xffffd80000020580 0001 00000000 0x0 0x0
0xffffd80000020600 0001 00000000 0x0 0x0
0xffffd80000020680 0001 00000000 0x0 0x0
0xffffd80000020700 0001 00000000 0x0 0x0
0xffffd80000020780 0001 00000000 0x0 0x0
0xffffd80000020800 0001 00000000 0x0 0x0
0xffffd80000020880 0001 00000000 0x0 0x0
0xffffd80000020900 0001 00000000 0x0 0x0
0xffffd80000020980 0001 00000000 0x0 0x0
0xffffd80000020a00 0001 00000000 0x0 0x0
0xffffd80000020a80 0001 00000000 0x0 0x0
0xffffd80000020b00 0001 00000000 0x0 0x0
0xffffd80000020b80 0001 00000000 0x0 0x0
0xffffd80000020c00 0001 00000000 0x0 0x0
0xffffd80000020c80 0001 00000000 0x0 0x0
0xffffd80000020d00 0001 00000000 0x0 0x0
0xffffd80000020d80 0001 00000000 0x0 0x0
0xffffd80000020e00 0001 00000000 0x0 0x0
0xffffd80000020e80 0001 00000000 0x0 0x0
0xffffd80000020f00 0001 00000000 0x0 0x0
0xffffd80000020f80 0001 00000000 0x0 0x0
0xffffd80000021000 0001 00000000 0x0 0x0
0xffffd80000021080 0001 00000000 0x0 0x0
0xffffd80000021100 0001 00000000 0x0 0x0
0xffffd80000021180 0001 00000000 0x0 0x0
0xffffd80000021200 0001 00000000 0x0 0x0
0xffffd80000021280 0001 00000000 0x0 0x0
0xffffd80000021300 0001 00000000 0x0 0x0
0xffffd80000021380 0001 00000000 0x0 0x0
0xffffd80000021400 0001 00000000 0x0 0x0
0xffffd80000021480 0001 00000000 0x0 0x0
0xffffd80000021500 0001 00000000 0x0 0x0
0xffffd80000021580 0001 00000000 0x0 0x0
0xffffd80000021600 0001 00000000 0x0 0x0
0xffffd80000021680 0001 00000000 0x0 0x0
0xffffd80000021700 0001 00000000 0x0 0x0
0xffffd80000021780 0001 00000000 0x0 0x0
0xffffd80000021800 0001 00000000 0x0 0x0
0xffffd80000021880 0001 00000000 0x0 0x0
0xffffd80000021900 0001 00000000 0x0 0x0
0xffffd80000021980 0001 00000000 0x0 0x0
0xffffd80000021a00 0001 00000000 0x0 0x0
0xffffd80000021a80 0001 00000000 0x0 0x0
0xffffd80000021b00 0001 00000000 0x0 0x0
0xffffd80000021b80 0001 00000000 0x0 0x0
0xffffd80000021c00 0001 00000000 0x0 0x0
0xffffd80000021c80 0001 00000000 0x0 0x0
0xffffd80000021d00 0001 00000000 0x0 0x0
0xffffd80000021d80 0001 00000000 0x0 0x0
0xffffd80000021e00 0001 00000000 0x0 0x0
0xffffd80000021e80 0001 00000000 0x0 0x0
0xffffd80000021f00 0001 00000000 0x0 0x0
0xffffd80000021f80 0001 00000000 0x0 0x0
0xffffd80000022000 0001 00000000 0x0 0x0
0xffffd80000022080 0001 00000000 0x0 0x0
0xffffd80000022100 0001 00000000 0x0 0x0
0xffffd80000022180 0001 00000000 0x0 0x0
0xffffd80000022200 0001 00000000 0x0 0x0
0xffffd80000022280 0001 00000000 0x0 0x0
0xffffd80000022300 0001 00000000 0x0 0x0
0xffffd80000022380 0001 00000000 0x0 0x0
0xffffd80000022400 0001 00000000 0x0 0x0
0xffffd80000022480 0001 00000000 0x0 0x0
0xffffd80000022500 0001 00000000 0x0 0x0
0xffffd80000022580 0001 00000000 0x0 0x0
0xffffd80000022600 0001 00000000 0x0 0x0
0xffffd80000022680 0001 00000000 0x0 0x0
0xffffd80000022700 0001 00000000 0x0 0x0
0xffffd80000022780 0001 00000000 0x0 0x0
0xffffd80000022800 0001 00000000 0x0 0x0
0xffffd80000022880 0001 00000000 0x0 0x0
0xffffd80000022900 0001 00000000 0x0 0x0
0xffffd80000022980 0001 00000000 0x0 0x0
0xffffd80000022a00 0001 00000000 0x0 0x0
0xffffd80000022a80 0001 00000000 0x0 0x0
0xffffd80000022b00 0001 00000000 0x0 0x0
0xffffd80000022b80 0001 00000000 0x0 0x0
0xffffd80000022c00 0001 00000000 0x0 0x0
0xffffd80000022c80 0001 00000000 0x0 0x0
0xffffd80000022d00 0001 00000000 0x0 0x0
0xffffd80000022d80 0001 00000000 0x0 0x0
0xffffd80000022e00 0001 00000000 0x0 0x0
0xffffd80000022e80 0001 00000000 0x0 0x0
0xffffd80000022f00 0001 00000000 0x0 0x0
0xffffd80000022f80 0001 00000000 0x0 0x0
0xffffd80000023000 0001 00000000 0x0 0x0
0xffffd80000023080 0001 00000000 0x0 0x0
0xffffd80000023100 0001 00000000 0x0 0x0
0xffffd80000023180 0001 00000000 0x0 0x0
0xffffd80000023200 0001 00000000 0x0 0x0
0xffffd80000023280 0001 00000000 0x0 0x0
0xffffd80000023300 0001 00000000 0x0 0x0
0xffffd80000023380 0001 00000000 0x0 0x0
0xffffd80000023400 0001 00000000 0x0 0x0
0xffffd80000023480 0001 00000000 0x0 0x0
0xffffd80000023500 0001 00000000 0x0 0x0
0xffffd80000023580 0001 00000000 0x0 0x0
0xffffd80000023600 0001 00000000 0x0 0x0
0xffffd80000023680 0001 00000000 0x0 0x0
0xffffd80000023700 0001 00000000 0x0 0x0
0xffffd80000023780 0001 00000000 0x0 0x0
0xffffd80000023800 0001 00000000 0x0 0x0
0xffffd80000023880 0001 00000000 0x0 0x0
0xffffd80000023900 0001 00000000 0x0 0x0
0xffffd80000023980 0001 00000000 0x0 0x0
0xffffd80000023a00 0001 00000000 0x0 0x0
0xffffd80000023a80 0001 00000000 0x0 0x0
0xffffd80000023b00 0001 00000000 0x0 0x0
0xffffd80000023b80 0001 00000000 0x0 0x0
0xffffd80000023c00 0001 00000000 0x0 0x0
0xffffd80000023c80 0001 00000000 0x0 0x0
0xffffd80000023d00 0001 00000000 0x0 0x0
0xffffd80000023d80 0001 00000000 0x0 0x0
0xffffd80000023e00 0001 00000000 0x0 0x0
0xffffd80000023e80 0001 00000000 0x0 0x0
0xffffd80000023f00 0001 00000000 0x0 0x0
0xffffd80000023f80 0001 00000000 0x0 0x0
0xffffd80000024000 0001 00000000 0x0 0x0
0xffffd80000024080 0001 00000000 0x0 0x0
0xffffd80000024100 0001 00000000 0x0 0x0
0xffffd80000024180 0001 00000000 0x0 0x0
0xffffd80000024200 0001 00000000 0x0 0x0
0xffffd80000024280 0001 00000000 0x0 0x0
0xffffd80000024300 0001 00000000 0x0 0x0
0xffffd80000024380 0001 00000000 0x0 0x0
0xffffd80000024400 0001 00000000 0x0 0x0
0xffffd80000024480 0001 00000000 0x0 0x0
0xffffd80000024500 0001 00000000 0x0 0x0
0xffffd80000024580 0001 00000000 0x0 0x0
0xffffd80000024600 0001 00000000 0x0 0x0
0xffffd80000024680 0001 00000000 0x0 0x0
0xffffd80000024700 0001 00000000 0x0 0x0
0xffffd80000024780 0001 00000000 0x0 0x0
0xffffd80000024800 0001 00000000 0x0 0x0
0xffffd80000024880 0001 00000000 0x0 0x0
0xffffd80000024900 0001 00000000 0x0 0x0
0xffffd80000024980 0001 00000000 0x0 0x0
0xffffd80000024a00 0001 00000000 0x0 0x0
0xffffd80000024a80 0001 00000000 0x0 0x0
0xffffd80000024b00 0001 00000000 0x0 0x0
0xffffd80000024b80 0001 00000000 0x0 0x0
0xffffd80000024c00 0001 00000000 0x0 0x0
0xffffd80000024c80 0001 00000000 0x0 0x0
0xffffd80000024d00 0001 00000000 0x0 0x0
0xffffd80000024d80 0001 00000000 0x0 0x0
0xffffd80000024e00 0001 00000000 0x0 0x0
0xffffd80000024e80 0001 00000000 0x0 0x0
0xffffd80000024f00 0001 00000000 0x0 0x0
0xffffd80000024f80 0001 00000000 0x0 0x0
0xffffd80000025000 0001 00000000 0x0 0x0
0xffffd80000025080 0001 00000000 0x0 0x0
0xffffd80000025100 0001 00000000 0x0 0x0
0xffffd80000025180 0001 00000000 0x0 0x0
0xffffd80000025200 0001 00000000 0x0 0x0
0xffffd80000025280 0001 00000000 0x0 0x0
0xffffd80000025300 0001 00000000 0x0 0x0
0xffffd80000025380 0001 00000000 0x0 0x0
0xffffd80000025400 0001 00000000 0x0 0x0
0xffffd80000025480 0001 00000000 0x0 0x0
0xffffd80000025500 0001 00000000 0x0 0x0
0xffffd80000025580 0001 00000000 0x0 0x0
0xffffd80000025600 0001 00000000 0x0 0x0
0xffffd80000025680 0001 00000000 0x0 0x0
0xffffd80000025700 0001 00000000 0x0 0x0
0xffffd80000025780 0001 00000000 0x0 0x0
0xffffd80000025800 0001 00000000 0x0 0x0
0xffffd80000025880 0001 00000000 0x0 0x0
0xffffd80000025900 0001 00000000 0x0 0x0
0xffffd80000025980 0001 00000000 0x0 0x0
0xffffd80000025a00 0001 00000000 0x0 0x0
0xffffd80000025a80 0001 00000000 0x0 0x0
0xffffd80000025b00 0001 00000000 0x0 0x0
0xffffd80000025b80 0001 00000000 0x0 0x0
0xffffd80000025c00 0001 00000000 0x0 0x0
0xffffd80000025c80 0001 00000000 0x0 0x0
0xffffd80000025d00 0001 00000000 0x0 0x0
0xffffd80000025d80 0001 00000000 0x0 0x0
0xffffd80000025e00 0001 00000000 0x0 0x0
0xffffd80000025e80 0001 00000000 0x0 0x0
0xffffd80000025f00 0001 00000000 0x0 0x0
0xffffd80000025f80 0001 00000000 0x0 0x0
0xffffd80000026000 0001 00000000 0x0 0x0
0xffffd80000026080 0001 00000000 0x0 0x0
0xffffd80000026100 0001 00000000 0x0 0x0
0xffffd80000026180 0001 00000000 0x0 0x0
0xffffd80000026200 0001 00000000 0x0 0x0
0xffffd80000026280 0001 00000000 0x0 0x0
0xffffd80000026300 0001 00000000 0x0 0x0
0xffffd80000026380 0001 00000000 0x0 0x0
0xffffd80000026400 0001 00000000 0x0 0x0
0xffffd80000026480 0001 00000000 0x0 0x0
0xffffd80000026500 0001 00000000 0x0 0x0
0xffffd80000026580 0001 00000000 0x0 0x0
0xffffd80000026600 0001 00000000 0x0 0x0
0xffffd80000026680 0001 00000000 0x0 0x0
0xffffd80000026700 0001 00000000 0x0 0x0
0xffffd80000026780 0001 00000000 0x0 0x0
0xffffd80000026800 0001 00000000 0x0 0x0
0xffffd80000026880 0001 00000000 0x0 0x0
0xffffd80000026900 0001 00000000 0x0 0x0
0xffffd80000026980 0001 00000000 0x0 0x0
0xffffd80000026a00 0001 00000000 0x0 0x0
0xffffd80000026a80 0001 00000000 0x0 0x0
0xffffd80000026b00 0001 00000000 0x0 0x0
0xffffd80000026b80 0001 00000000 0x0 0x0
0xffffd80000026c00 0001 00000000 0x0 0x0
0xffffd80000026c80 0001 00000000 0x0 0x0
0xffffd80000026d00 0001 00000000 0x0 0x0
0xffffd80000026d80 0001 00000000 0x0 0x0
0xffffd80000026e00 0001 00000000 0x0 0x0
0xffffd80000026e80 0001 00000000 0x0 0x0
0xffffd80000026f00 0001 00000000 0x0 0x0
0xffffd80000026f80 0001 00000000 0x0 0x0
0xffffd80000027000 0001 00000000 0x0 0x0
0xffffd80000027080 0001 00000000 0x0 0x0
0xffffd80000027100 0001 00000000 0x0 0x0
0xffffd80000027180 0001 00000000 0x0 0x0
0xffffd80000027200 0001 00000000 0x0 0x0
0xffffd80000027280 0001 00000000 0x0 0x0
0xffffd80000027300 0001 00000000 0x0 0x0
0xffffd80000027380 0001 00000000 0x0 0x0
0xffffd80000027400 0001 00000000 0x0 0x0
0xffffd80000027480 0001 00000000 0x0 0x0
0xffffd80000027500 0001 00000000 0x0 0x0
0xffffd80000027580 0001 00000000 0x0 0x0
0xffffd80000027600 0001 00000000 0x0 0x0
0xffffd80000027680 0001 00000000 0x0 0x0
0xffffd80000027700 0001 00000000 0x0 0x0
0xffffd80000027780 0001 00000000 0x0 0x0
0xffffd80000027800 0001 00000000 0x0 0x0
0xffffd80000027880 0001 00000000 0x0 0x0
0xffffd80000027900 0001 00000000 0x0 0x0
0xffffd80000027980 0001 00000000 0x0 0x0
0xffffd80000027a00 0001 00000000 0x0 0x0
0xffffd80000027a80 0001 00000000 0x0 0x0
0xffffd80000027b00 0001 00000000 0x0 0x0
0xffffd80000027b80 0001 00000000 0x0 0x0
0xffffd80000027c00 0001 00000000 0x0 0x0
0xffffd80000027c80 0001 00000000 0x0 0x0
0xffffd80000027d00 0001 00000000 0x0 0x0
0xffffd80000027d80 0001 00000000 0x0 0x0
0xffffd80000027e00 0001 00000000 0x0 0x0
0xffffd80000027e80 0001 00000000 0x0 0x0
0xffffd80000027f00 0001 00000000 0x0 0x0
0xffffd80000027f80 0001 00000000 0x0 0x0
0xffffd80000028000 0001 00000000 0x0 0x0
0xffffd80000028080 0001 00000000 0x0 0x0
0xffffd80000028100 0001 00000000 0x0 0x0
0xffffd80000028180 0001 00000000 0x0 0x0
0xffffd80000028200 0001 00000000 0x0 0x0
0xffffd80000028280 0001 00000000 0x0 0x0
0xffffd80000028300 0001 00000000 0x0 0x0
0xffffd80000028380 0001 00000000 0x0 0x0
0xffffd80000028400 0001 00000000 0x0 0x0
0xffffd80000028480 0001 00000000 0x0 0x0
0xffffd80000028500 0001 00000000 0x0 0x0
0xffffd80000028580 0001 00000000 0x0 0x0
0xffffd80000028600 0001 00000000 0x0 0x0
0xffffd80000028680 0001 00000000 0x0 0x0
0xffffd80000028700 0001 00000000 0x0 0x0
0xffffd80000028780 0001 00000000 0x0 0x0
0xffffd80000028800 0001 00000000 0x0 0x0
0xffffd80000028880 0001 00000000 0x0 0x0
0xffffd80000028900 0001 00000000 0x0 0x0
0xffffd80000028980 0001 00000000 0x0 0x0
0xffffd80000028a00 0001 00000000 0x0 0x0
0xffffd80000028a80 0001 00000000 0x0 0x0
0xffffd80000028b00 0001 00000000 0x0 0x0
0xffffd80000028b80 0001 00000000 0x0 0x0
0xffffd80000028c00 0001 00000000 0x0 0x0
0xffffd80000028c80 0001 00000000 0x0 0x0
0xffffd80000028d00 0001 00000000 0x0 0x0
0xffffd80000028d80 0001 00000000 0x0 0x0
0xffffd80000028e00 0001 00000000 0x0 0x0
0xffffd80000028e80 0001 00000000 0x0 0x0
0xffffd80000028f00 0001 00000000 0x0 0x0
0xffffd80000028f80 0001 00000000 0x0 0x0
0xffffd80000029000 0001 00000000 0x0 0x0
0xffffd80000029080 0001 00000000 0x0 0x0
0xffffd80000029100 0001 00000000 0x0 0x0
0xffffd80000029180 0001 00000000 0x0 0x0
0xffffd80000029200 0001 00000000 0x0 0x0
0xffffd80000029280 0001 00000000 0x0 0x0
0xffffd80000029300 0001 00000000 0x0 0x0
0xffffd80000029380 0001 00000000 0x0 0x0
0xffffd80000029400 0001 00000000 0x0 0x0
0xffffd80000029480 0001 00000000 0x0 0x0
0xffffd80000029500 0001 00000000 0x0 0x0
0xffffd80000029580 0001 00000000 0x0 0x0
0xffffd80000029600 0001 00000000 0x0 0x0
0xffffd80000029680 0001 00000000 0x0 0x0
0xffffd80000029700 0001 00000000 0x0 0x0
0xffffd80000029780 0001 00000000 0x0 0x0
0xffffd80000029800 0001 00000000 0x0 0x0
0xffffd80000029880 0001 00000000 0x0 0x0
0xffffd80000029900 0001 00000000 0x0 0x0
0xffffd80000029980 0001 00000000 0x0 0x0
0xffffd80000029a00 0001 00000000 0x0 0x0
0xffffd80000029a80 0001 00000000 0x0 0x0
0xffffd80000029b00 0001 00000000 0x0 0x0
0xffffd80000029b80 0001 00000000 0x0 0x0
0xffffd80000029c00 0001 00000000 0x0 0x0
0xffffd80000029c80 0001 00000000 0x0 0x0
0xffffd80000029d00 0001 00000000 0x0 0x0
0xffffd80000029d80 0001 00000000 0x0 0x0
0xffffd80000029e00 0001 00000000 0x0 0x0
0xffffd80000029e80 0001 00000000 0x0 0x0
0xffffd80000029f00 0001 00000000 0x0 0x0
0xffffd80000029f80 0001 00000000 0x0 0x0
0xffffd8000002a000 0001 00000000 0x0 0x0
0xffffd8000002a080 0001 00000000 0x0 0x0
0xffffd8000002a100 0001 00000000 0x0 0x0
0xffffd8000002a180 0001 00000000 0x0 0x0
0xffffd8000002a200 0001 00000000 0x0 0x0
0xffffd8000002a280 0001 00000000 0x0 0x0
0xffffd8000002a300 0001 00000000 0x0 0x0
0xffffd8000002a380 0001 00000000 0x0 0x0
0xffffd8000002a400 0001 00000000 0x0 0x0
0xffffd8000002a480 0001 00000000 0x0 0x0
0xffffd8000002a500 0001 00000000 0x0 0x0
0xffffd8000002a580 0001 00000000 0x0 0x0
0xffffd8000002a600 0001 00000000 0x0 0x0
0xffffd8000002a680 0001 00000000 0x0 0x0
0xffffd8000002a700 0001 00000000 0x0 0x0
0xffffd8000002a780 0001 00000000 0x0 0x0
0xffffd8000002a800 0001 00000000 0x0 0x0
0xffffd8000002a880 0001 00000000 0x0 0x0
0xffffd8000002a900 0001 00000000 0x0 0x0
0xffffd8000002a980 0001 00000000 0x0 0x0
0xffffd8000002aa00 0001 00000000 0x0 0x0
0xffffd8000002aa80 0001 00000000 0x0 0x0
0xffffd8000002ab00 0001 00000000 0x0 0x0
0xffffd8000002ab80 0001 00000000 0x0 0x0
0xffffd8000002ac00 0001 00000000 0x0 0x0
0xffffd8000002ac80 0001 00000000 0x0 0x0
0xffffd8000002ad00 0001 00000000 0x0 0x0
0xffffd8000002ad80 0001 00000000

---
If you want syzbot to run the reproducer, reply with:
#syz test: git://repo/address.git branch-or-commit-hash
If you attach or paste a git patch, syzbot will apply it before testing.

Reply all

Reply to author

Forward

0 new messages