panic: mutex_destroy,NUM: uninitialized lock (lock=ADDR, from=ADDR) (3)

4 views

Skip to first unread message

syzbot

unread,

Jun 29, 2022, 10:18:24 PM6/29/22

to syzkaller-...@googlegroups.com

Hello,

syzbot found the following issue on:

HEAD commit: c2b46e72e50e bind.2: add references to specific protocol f..
git tree: netbsd
console output: https://syzkaller.appspot.com/x/log.txt?x=164e5938080000
kernel config: https://syzkaller.appspot.com/x/.config?x=739e57438eb9ed9e
dashboard link: https://syzkaller.appspot.com/bug?extid=365e26863f286c6677b7
compiler: Debian clang version 13.0.1-++20220126092033+75e33f71c2da-1~exp1~20220126212112.63

Unfortunately, I don't have any reproducer for this issue yet.

IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+365e26...@syzkaller.appspotmail.com

[ 71.5541840] panic: mutex_destroy,400: uninitialized lock (lock=0xffffe90013a8f608, from=ffffffff85181e69)
[ 71.5641697] cpu1: Begin traceback...
[ 71.5841743] vpanic() at netbsd:vpanic+0xc9d
[ 71.6241784] panic() at netbsd:panic+0x1b3 sys/kern/subr_prf.c:210
[ 71.6741768] lockdebug_free() at netbsd:lockdebug_free+0x4bf
[ 71.7141782] mutex_destroy() at netbsd:mutex_destroy+0x259
[ 71.7641786] upgt_detach() at netbsd:upgt_detach+0xb48 upgt_free_cmd sys/dev/usb/if_upgt.c:2383 [inline]
[ 71.7641786] upgt_detach() at netbsd:upgt_detach+0xb48 sys/dev/usb/if_upgt.c:536
[ 71.8141757] config_detach() at netbsd:config_detach+0x106c sys/kern/subr_autoconf.c:2037
[ 71.8641782] usb_disconnect_port() at netbsd:usb_disconnect_port+0x312 sys/dev/usb/usb_subr.c:1895
[ 71.9141741] uhub_explore() at netbsd:uhub_explore+0x1eb5
[ 71.9741744] usb_discover() at netbsd:usb_discover+0x453 sys/dev/usb/usb.c:1196
[ 72.0241791] usb_event_thread() at netbsd:usb_event_thread+0x2b7 sys/dev/usb/usb.c:728
[ 72.0441719] cpu1: End traceback...
[ 72.0441719] fatal breakpoint trap in supervisor mode
[ 72.0441719] trap type 1 code 0 rip 0xffffffff802228ad cs 0x8 rflags 0x286 cr2 0x76e822e00000 ilevel 0x8 rsp 0xffffe90083704720
[ 72.0641688] curlwp 0xffffe9001205d9c0 pid 0.31 lowest kstack 0xffffe900836fd2c0
Stopped in pid 0.31 (system) at netbsd:breakpoint+0x5: leave
?
breakpoint() at netbsd:breakpoint+0x5
vpanic() at netbsd:vpanic+0xc9d
panic() at netbsd:panic+0x1b3 sys/kern/subr_prf.c:210
lockdebug_free() at netbsd:lockdebug_free+0x4bf
mutex_destroy() at netbsd:mutex_destroy+0x259
upgt_detach() at netbsd:upgt_detach+0xb48 upgt_free_cmd sys/dev/usb/if_upgt.c:2383 [inline]
upgt_detach() at netbsd:upgt_detach+0xb48 sys/dev/usb/if_upgt.c:536
config_detach() at netbsd:config_detach+0x106c sys/kern/subr_autoconf.c:2037
usb_disconnect_port() at netbsd:usb_disconnect_port+0x312 sys/dev/usb/usb_subr.c:1895
uhub_explore() at netbsd:uhub_explore+0x1eb5
usb_discover() at netbsd:usb_discover+0x453 sys/dev/usb/usb.c:1196
usb_event_thread() at netbsd:usb_event_thread+0x2b7 sys/dev/usb/usb.c:728
Panic string: mutex_destroy,400: uninitialized lock (lock=0xffffe90013a8f608, from=ffffffff85181e69)
PID LID S CPU FLAGS STRUCT LWP * NAME WAIT
1443 922 3 0 180 ffffe90013833b80 syz-executor.4 parked
1443 1443 2 0 10040000 ffffe900138398c0 syz-executor.4
917 909 2 0 0 ffffe90013664a40 syz-executor.5
917 1185 2 0 0 ffffe90013664600 syz-executor.5
917 919 2 0 0 ffffe900136641c0 syz-executor.5
917 902 2 0 100 ffffe9001381a280 syz-executor.5
917 > 924 7 0 100 ffffe90013728a80 syz-executor.5
917 917 2 0 10040000 ffffe900136595c0 syz-executor.5
923 907 2 1 100 ffffe90013833740 syz-executor.1
923 923 2 1 10040000 ffffe9001381ab00 syz-executor.1
1467 1566 3 0 180 ffffe90013833300 syz-executor.0 parked
1467 903 2 1 100 ffffe90013839480 syz-executor.0
1467 1467 2 0 10040000 ffffe90013659a00 syz-executor.0
1832 1893 3 0 40180 ffffe90013839040 syz-executor.3 nanoslp
1832 842 2 1 40000 ffffe90013728640 syz-executor.3
1832 1873 2 0 40000 ffffe90013728200 syz-executor.3
1832 1832 2 1 10040000 ffffe90013659180 syz-executor.3
1843 1845 2 1 40100 ffffe900135929c0 syz-executor.2
1843 1843 2 1 10040000 ffffe90013737680 syz-executor.2
549 549 3 1 180 ffffe90013592580 syz-executor.1 parked
1329 1329 3 0 180 ffffe9001381a6c0 syz-executor.4 parked
1370 1370 3 0 180 ffffe90013737ac0 syz-executor.4 parked
1194 1194 2 0 140 ffffe90013592140 syz-executor.5
1129 1129 2 0 140 ffffe900134db980 syz-executor.3
1151 1151 3 0 180 ffffe900134db540 syz-executor.4 nanoslp
1195 1195 2 0 140 ffffe900134db100 syz-executor.0
1220 1220 2 0 140 ffffe9001337f940 syz-executor.2
1107 1107 2 0 140 ffffe9001337f0c0 syz-executor.1
1252 422 3 1 180 ffffe9001337f500 syz-fuzzer kqueue
1252 972 3 1 1c0 ffffe90012bb5900 syz-fuzzer parked
1252 1223 3 1 180 ffffe90012bb54c0 syz-fuzzer parked
1252 1222 3 1 1c0 ffffe90012bb5080 syz-fuzzer parked
1252 1221 3 0 180 ffffe9001242e700 syz-fuzzer parked
1252 1084 3 0 1c0 ffffe900122c96c0 syz-fuzzer parked
1252 1078 3 0 180 ffffe9001229bac0 syz-fuzzer parked
1252 1252 3 0 180 ffffe900124ee300 syz-fuzzer parked
1085 1085 3 1 180 ffffe90012b998c0 sshd select
1074 1074 3 0 180 ffffe90012b99480 getty nanoslp
1068 1068 3 1 180 ffffe9001229b680 getty nanoslp
1000 1000 3 0 180 ffffe9001229b240 getty nanoslp
1106 1106 3 0 1c0 ffffe900121a9600 getty ttyraw
926 926 3 1 180 ffffe90012b99040 sshd select
1127 1127 3 0 180 ffffe900124eeb80 powerd kqueue
687 687 2 0 100 ffffe90012ae5bc0 syslogd
547 547 3 0 180 ffffe90012ae5780 dhcpcd poll
464 464 3 0 180 ffffe900122c9280 dhcpcd poll
600 600 3 0 180 ffffe900122c9b00 dhcpcd poll
587 587 3 1 180 ffffe90012ae5340 dhcpcd poll
289 289 3 0 180 ffffe900124ee740 dhcpcd poll
288 288 3 0 180 ffffe9001242e2c0 dhcpcd poll
351 351 3 0 180 ffffe9001242eb40 dhcpcd poll
1 1 3 0 180 ffffe90011e38940 init wait
0 1708 5 0 200 ffffe90013737240 (zombie)
0 968 3 0 200 ffffe900121a9a40 physiod physiod
0 194 3 1 200 ffffe900121b5a80 pooldrain pooldrain
0 193 3 1 200 ffffe900121b5640 ioflush syncer
0 192 3 0 200 ffffe900121b5200 pgdaemon pgdaemon
0 169 3 1 200 ffffe900121a91c0 usb7 usbevt
0 167 3 1 200 ffffe900120f6a00 usb6 usbevt
0 165 3 1 200 ffffe900120f65c0 usb5 usbevt
0 164 3 1 200 ffffe900120f6180 usb4 usbevt
0 > 31 7 1 240 ffffe9001205d9c0 usb3
0 63 3 0 200 ffffe9001205d580 usb2 usbdly
0 126 3 0 200 ffffe9001205d140 usb1 usbevt
0 125 3 0 200 ffffe90011e4d980 usb0 usbdly
0 124 3 1 200 ffffe90011e4d540 usbtask-dr usbtsk
0 123 3 1 200 ffffe900118016c0 usbtask-hc usbtsk
0 122 3 1 200 ffffe90011e4d100 npfgc0 npfgcw
0 121 3 1 200 ffffe90011e38500 rt_free rt_free
0 120 3 1 200 ffffe90011e380c0 unpgc unpgc
0 119 3 1 200 ffffe90011e35900 key_timehandler key_timehandler
0 118 3 1 200 ffffe90011e354c0 icmp6_wqinput/1 icmp6_wqinput
0 117 3 0 200 ffffe90011e35080 icmp6_wqinput/0 icmp6_wqinput
0 116 3 0 200 ffffe90011cc48c0 nd6_timer nd6_timer
0 115 3 1 200 ffffe90011cc4480 carp6_wqinput/1 carp6_wqinput
0 114 3 0 200 ffffe90011cc4040 carp6_wqinput/0 carp6_wqinput
0 113 3 1 200 ffffe90011cc2b80 carp_wqinput/1 carp_wqinput
0 112 3 0 200 ffffe90011cc2740 carp_wqinput/0 carp_wqinput
0 111 3 1 200 ffffe90011cc2300 icmp_wqinput/1 icmp_wqinput
0 110 3 0 200 ffffe90011cc3780 icmp_wqinput/0 icmp_wqinput
0 109 3 0 200 ffffe90011cc3340 rt_timer rt_timer
0 108 3 1 200 ffffe90011cc3bc0 vmem_rehash vmem_rehash
0 99 3 0 200 ffffe90011804b40 entbutler entropy
0 98 3 0 200 ffffe90011804700 viomb balloon
0 97 3 1 200 ffffe900118042c0 vioif0_txrx/1 vioif0_txrx
0 96 3 0 200 ffffe90011801b00 vioif0_txrx/0 vioif0_txrx
0 29 3 0 200 ffffe90011801280 scsibus0 sccomp
0 28 3 0 200 ffffe900103afac0 pms0 pmsreset
0 27 3 1 200 ffffe900103af680 xcall/1 xcall
0 26 1 1 200 ffffe900103af240 softser/1
0 25 1 1 200 ffffe900103ada80 softclk/1
0 24 1 1 200 ffffe900103ad640 softbio/1
0 23 1 1 200 ffffe900103ad200 softnet/1
0 22 1 1 201 ffffe9000f1f1a40 idle/1
0 21 3 0 200 ffffe9000f1f1600 lnxsyswq lnxsyswq
0 20 3 0 200 ffffe9000f1f11c0 lnxubdwq lnxubdwq
0 19 3 0 200 ffffe9000f1f0a00 lnxpwrwq lnxpwrwq
0 18 3 0 200 ffffe9000f1f05c0 lnxlngwq lnxlngwq
0 17 3 0 200 ffffe9000f1f0180 lnxhipwq lnxhipwq
0 16 3 0 200 ffffe9000f1eb9c0 lnxrcugc lnxrcugc
0 15 3 0 200 ffffe9000f1eb580 sysmon smtaskq
0 14 3 0 200 ffffe9000f1eb140 pmfsuspend pmfsuspend
0 13 3 1 200 ffffe9000f1e7980 pmfevent pmfevent
0 12 3 0 200 ffffe9000f1e7540 sopendfree sopendfr
0 11 3 0 200 ffffe9000f1e7100 iflnkst iflnkst
0 10 3 0 200 ffffe9000f1dd940 nfssilly nfssilly
0 9 3 0 200 ffffe9000f1dd500 vdrain vdrain
0 8 3 0 200 ffffe9000f1dd0c0 modunload mod_unld
0 7 3 0 200 ffffe9000ebda900 xcall/0 xcall
0 6 1 0 200 ffffe9000ebda4c0 softser/0
0 > 5 7 0 200 ffffe9000ebda080 softclk/0
0 4 1 0 200 ffffe9000ebd88c0 softbio/0
0 3 1 0 200 ffffe9000ebd8480 softnet/0
0 2 1 0 201 ffffe9000ebd8040 idle/0
0 0 3 0 200 ffffffff86868980 swapper uvm
[Locks tracked through LWPs]

****** LWP 1467.903 (syz-executor.0) @ 0xffffe90013839480, l_stat=2

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at module_hook_init)
lock address : 0xffffffff868f6cc0 type : sleep/adaptive
initialized : 0xffffffff8517f863
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 0
relevant lwp : 0xffffe90013839480 last held: 000000000000000000
last locked : 000000000000000000 unlocked*: 000000000000000000
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 1832.1873 (syz-executor.3) @ 0xffffe90013728200, l_stat=2

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at vhci_attach)
lock address : 0xffffe9000f08d6f0 type : sleep/adaptive
initialized : 0xffffffff82241a9a
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 1
relevant cpu : 0 last held: 0
relevant lwp : 0xffffe90013728200 last held: 000000000000000000
last locked : 0xffffffff8223db67 unlocked*: 0xffffffff8223e71d
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 1843.1845 (syz-executor.2) @ 0xffffe900135929c0, l_stat=2

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at vhci_attach)
lock address : 0xffffe9000f08b6f0 type : sleep/adaptive
initialized : 0xffffffff82241a9a
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 1
relevant cpu : 1 last held: 1
relevant lwp : 0xffffe900135929c0 last held: 000000000000000000
last locked : 0xffffffff8223db67 unlocked*: 0xffffffff8223e71d
owner field : 0xffffe900135929c0 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 464.464 (dhcpcd) @ 0xffffe900122c9280, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at module_hook_init)
lock address : 0xffffffff868f6cc0 type : sleep/adaptive
initialized : 0xffffffff8517f863
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffffe900122c9280 last held: 000000000000000000
last locked : 000000000000000000 unlocked*: 000000000000000000
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 600.600 (dhcpcd) @ 0xffffe900122c9b00, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at module_hook_init)
lock address : 0xffffffff868f6cc0 type : sleep/adaptive
initialized : 0xffffffff8517f863
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffffe900122c9b00 last held: 000000000000000000
last locked : 000000000000000000 unlocked*: 000000000000000000
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 288.288 (dhcpcd) @ 0xffffe9001242e2c0, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at module_hook_init)
lock address : 0xffffffff868f6cc0 type : sleep/adaptive
initialized : 0xffffffff8517f863
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffffe9001242e2c0 last held: 000000000000000000
last locked : 000000000000000000 unlocked*: 000000000000000000
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 351.351 (dhcpcd) @ 0xffffe9001242eb40, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at module_hook_init)
lock address : 0xffffffff868f6cc0 type : sleep/adaptive
initialized : 0xffffffff8517f863
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffffe9001242eb40 last held: 000000000000000000
last locked : 000000000000000000 unlocked*: 000000000000000000
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 0.11 (iflnkst) @ 0xffffe9000f1e7100, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at module_hook_init)
lock address : 0xffffffff868f6cc0 type : sleep/adaptive
initialized : 0xffffffff8517f863
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffffe9000f1e7100 last held: 000000000000000000
last locked : 000000000000000000 unlocked*: 000000000000000000
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 0.5 (softclk/0) @ 0xffffe9000ebda080, l_stat=7

*** Locks held:

* Lock 0 (initialized at soinit)
lock address : 0xffffe9000ebbf080 type : sleep/adaptive
initialized : 0xffffffff8552e762
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffffe9000ebda080 last held: 0xffffe9000ebda080
last locked* : 0xffffffff83e874d5 unlocked : 0xffffffff854ed835
owner field : 0xffffe9000ebda080 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

*** Locks wanted:

* Lock 0 (initialized at module_hook_init)
lock address : 0xffffffff868f6cc0 type : sleep/adaptive
initialized : 0xffffffff8517f863
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffffe9000ebda080 last held: 000000000000000000
last locked : 000000000000000000 unlocked*: 000000000000000000
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 0.0 (swapper) @ 0xffffffff86868980, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at module_hook_init)
lock address : 0xffffffff868f6cc0 type : sleep/adaptive
initialized : 0xffffffff8517f863
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffffffff86868980 last held: 000000000000000000
last locked : 000000000000000000 unlocked*: 000000000000000000
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

[Locks tracked through CPUs]

******* Locks held on cpu1:

* Lock 0 (initialized at main)
lock address : 0xffffffff868f6bc0 type : spin
initialized : 0xffffffff850649f4
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 1
relevant cpu : 1 last held: 1
relevant lwp : 0xffffe9001205d9c0 last held: 0xffffe9001205d9c0
last locked* : 0xffffffff85226189 unlocked : 0xffffffff850951be
curcpu holds : 3 wanted by: 000000000000000000

* Lock 1 (initialized at kprintf_init)
lock address : 0xffffffff868a9c00 type : spin
initialized : 0xffffffff8539c6ac
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 1
relevant lwp : 0xffffe9001205d9c0 last held: 0xffffe9001205d9c0
last locked* : 0xffffffff8539d4d4 unlocked : 0xffffffff853ac9e8
owner field : 0x0000000000000800 wait/spin: 0/1

PAGE FLAG PQ UOBJECT UANON
0xffffe90000017180 0041 00000000 0x0 0x0
0xffffe90000017200 0041 00000000 0x0 0x0
0xffffe90000017280 0041 00000000 0x0 0x0
0xffffe90000017300 0041 00000000 0x0 0x0
0xffffe90000017380 0041 00000000 0x0 0x0
0xffffe90000017400 0041 00000000 0x0 0x0
0xffffe90000017480 0041 00000000 0x0 0x0
0xffffe90000017500 0041 00000000 0x0 0x0
0xffffe90000017580 0041 00000000 0x0 0x0
0xffffe90000017600 0041 00000000 0x0 0x0
0xffffe90000017680 0041 00000000 0x0 0x0
0xffffe90000017700 0041 00000000 0x0 0x0
0xffffe90000017780 0041 00000000 0x0 0x0
0xffffe90000017800 0041 00000000 0x0 0x0
0xffffe90000017880 0041 00000000 0x0 0x0
0xffffe90000017900 0041 00000000 0x0 0x0
0xffffe90000017980 0041 00000000 0x0 0x0
0xffffe90000017a00 0041 00000000 0x0 0x0
0xffffe90000017a80 0041 00000000 0x0 0x0
0xffffe90000017b00 0041 00000000 0x0 0x0
0xffffe90000017b80 0041 00000000 0x0 0x0
0xffffe90000017c00 0041 00000000 0x0 0x0
0xffffe90000017c80 0041 00000000 0x0 0x0
0xffffe90000017d00 0041 00000000 0x0 0x0
0xffffe90000017d80 0041 00000000 0x0 0x0
0xffffe90000017e00 0041 00000000 0x0 0x0
0xffffe90000017e80 0041 00000000 0x0 0x0
0xffffe90000017f00 0041 00000000 0x0 0x0
0xffffe90000017f80 0041 00000000 0x0 0x0
0xffffe90000018000 0041 00000000 0x0 0x0
0xffffe90000018080 0041 00000000 0x0 0x0
0xffffe90000018100 0041 00000000 0x0 0x0
0xffffe90000018180 0041 00000000 0x0 0x0
0xffffe90000018200 0041 00000000 0x0 0x0
0xffffe90000018280 0041 00000000 0x0 0x0
0xffffe90000018300 0041 00000000 0x0 0x0
0xffffe90000018380 0041 00000000 0x0 0x0
0xffffe90000018400 0041 00000000 0x0 0x0
0xffffe90000018480 0041 00000000 0x0 0x0
0xffffe90000018500 0041 00000000 0x0 0x0
0xffffe90000018580 0041 00000000 0x0 0x0
0xffffe90000018600 0041 00000000 0x0 0x0
0xffffe90000018680 0041 00000000 0x0 0x0
0xffffe90000018700 0041 00000000 0x0 0x0
0xffffe90000018780 0041 00000000 0x0 0x0
0xffffe90000018800 0041 00000000 0x0 0x0
0xffffe90000018880 0041 00000000 0x0 0x0
0xffffe90000018900 0041 00000000 0x0 0x0
0xffffe90000018980 0041 00000000 0x0 0x0
0xffffe90000018a00 0041 00000000 0x0 0x0
0xffffe90000018a80 0041 00000000 0x0 0x0
0xffffe90000018b00 0041 00000000 0x0 0x0
0xffffe90000018b80 0041 00000000 0x0 0x0
0xffffe90000018c00 0041 00000000 0x0 0x0
0xffffe90000018c80 0041 00000000 0x0 0x0
0xffffe90000018d00 0041 00000000 0x0 0x0
0xffffe90000018d80 0041 00000000 0x0 0x0
0xffffe90000018e00 0041 00000000 0x0 0x0
0xffffe90000018e80 0041 00000000 0x0 0x0
0xffffe90000018f00 0041 00000000 0x0 0x0
0xffffe90000018f80 0041 00000000 0x0 0x0
0xffffe90000019000 0041 00000000 0x0 0x0
0xffffe90000019080 0041 00000000 0x0 0x0
0xffffe90000019100 0041 00000000 0x0 0x0
0xffffe90000019180 0041 00000000 0x0 0x0
0xffffe90000019200 0041 00000000 0x0 0x0
0xffffe90000019280 0041 00000000 0x0 0x0
0xffffe90000019300 0041 00000000 0x0 0x0
0xffffe90000019380 0041 00000000 0x0 0x0
0xffffe90000019400 0041 00000000 0x0 0x0
0xffffe90000019480 0041 00000000 0x0 0x0
0xffffe90000019500 0041 00000000 0x0 0x0
0xffffe90000019580 0041 00000000 0x0 0x0
0xffffe90000019600 0041 00000000 0x0 0x0
0xffffe90000019680 0041 00000000 0x0 0x0
0xffffe90000019700 0041 00000000 0x0 0x0
0xffffe90000019780 0041 00000000 0x0 0x0
0xffffe90000019800 0041 00000000 0x0 0x0
0xffffe90000019880 0041 00000000 0x0 0x0
0xffffe90000019900 0041 00000000 0x0 0x0
0xffffe90000019980 0041 00000000 0x0 0x0
0xffffe90000019a00 0041 00000000 0x0 0x0
0xffffe90000019a80 0041 00000000 0x0 0x0
0xffffe90000019b00 0041 00000000 0x0 0x0
0xffffe90000019b80 0041 00000000 0x0 0x0
0xffffe90000019c00 0041 00000000 0x0 0x0
0xffffe90000019c80 0041 00000000 0x0 0x0
0xffffe90000019d00 0041 00000000 0x0 0x0
0xffffe90000019d80 0041 00000000 0x0 0x0
0xffffe90000019e00 0041 00000000 0x0 0x0
0xffffe90000019e80 0041 00000000 0x0 0x0
0xffffe90000019f00 0041 00000000 0x0 0x0
0xffffe90000019f80 0041 00000000 0x0 0x0
0xffffe9000001a000 0041 00000000 0x0 0x0
0xffffe9000001a080 0041 00000000 0x0 0x0
0xffffe9000001a100 0041 00000000 0x0 0x0
0xffffe9000001a180 0041 00000000 0x0 0x0
0xffffe9000001a200 0041 00000000 0x0 0x0
0xffffe9000001a280 0041 00000000 0x0 0x0
0xffffe9000001a300 0041 00000000 0x0 0x0
0xffffe9000001a380 0041 00000000 0x0 0x0
0xffffe9000001a400 0041 00000000 0x0 0x0
0xffffe9000001a480 0041 00000000 0x0 0x0
0xffffe9000001a500 0041 00000000 0x0 0x0
0xffffe9000001a580 0041 00000000 0x0 0x0
0xffffe9000001a600 0041 00000000 0x0 0x0
0xffffe9000001a680 0041 00000000 0x0 0x0
0xffffe9000001a700 0041 00000000 0x0 0x0
0xffffe9000001a780 0041 00000000 0x0 0x0
0xffffe9000001a800 0041 00000000 0x0 0x0
0xffffe9000001a880 0041 00000000 0x0 0x0
0xffffe9000001a900 0041 00000000 0x0 0x0
0xffffe9000001a980 0041 00000000 0x0 0x0
0xffffe9000001aa00 0041 00000000 0x0 0x0
0xffffe9000001aa80 0041 00000000 0x0 0x0
0xffffe9000001ab00 0041 00000000 0x0 0x0
0xffffe9000001ab80 0041 00000000 0x0 0x0
0xffffe9000001ac00 0041 00000000 0x0 0x0
0xffffe9000001ac80 0041 00000000 0x0 0x0
0xffffe9000001ad00 0041 00000000 0x0 0x0
0xffffe9000001ad80 0041 00000000 0x0 0x0
0xffffe9000001ae00 0041 00000000 0x0 0x0
0xffffe9000001ae80 0041 00000000 0x0 0x0
0xffffe9000001af00 0041 00000000 0x0 0x0
0xffffe9000001af80 0041 00000000 0x0 0x0
0xffffe9000001b000 0041 00000000 0x0 0x0
0xffffe9000001b080 0041 00000000 0x0 0x0
0xffffe9000001b100 0041 00000000 0x0 0x0
0xffffe9000001b180 0041 00000000 0x0 0x0
0xffffe9000001b200 0041 00000000 0x0 0x0
0xffffe9000001b280 0041 00000000 0x0 0x0
0xffffe9000001b300 0041 00000000 0x0 0x0
0xffffe9000001b380 0041 00000000 0x0 0x0
0xffffe9000001b400 0041 00000000 0x0 0x0
0xffffe9000001b480 0041 00000000 0x0 0x0
0xffffe9000001b500 0041 00000000 0x0 0x0
0xffffe9000001b580 0041 00000000 0x0 0x0
0xffffe9000001b600 0041 00000000 0x0 0x0
0xffffe9000001b680 0041 00000000 0x0 0x0
0xffffe9000001b700 0041 00000000 0x0 0x0
0xffffe9000001b780 0041 00000000 0x0 0x0
0xffffe9000001b800 0041 00000000 0x0 0x0
0xffffe9000001b880 0041 00000000 0x0 0x0
0xffffe9000001b900 0041 00000000 0x0 0x0
0xffffe9000001b980 0041 00000000 0x0 0x0
0xffffe9000001ba00 0041 00000000 0x0 0x0
0xffffe9000001ba80 0041 00000000 0x0 0x0
0xffffe9000001bb00 0041 00000000 0x0 0x0
0xffffe9000001bb80 0041 00000000 0x0 0x0
0xffffe9000001bc00 0041 00000000 0x0 0x0
0xffffe9000001bc80 0041 00000000 0x0 0x0
0xffffe9000001bd00 0041 00000000 0x0 0x0
0xffffe9000001bd80 0041 00000000 0x0 0x0
0xffffe9000001be00 0041 00000000 0x0 0x0
0xffffe9000001be80 0041 00000000 0x0 0x0
0xffffe9000001bf00 0041 00000000 0x0 0x0
0xffffe9000001bf80 0041 00000000 0x0 0x0
0xffffe9000001c000 0041 00000000 0x0 0x0
0xffffe9000001c080 0041 00000000 0x0 0x0
0xffffe9000001c100 0041 00000000 0x0 0x0
0xffffe9000001c180 0041 00000000 0x0 0x0
0xffffe9000001c200 0041 00000000 0x0 0x0
0xffffe9000001c280 0041 00000000 0x0 0x0
0xffffe9000001c300 0041 00000000 0x0 0x0
0xffffe9000001c380 0041 00000000 0x0 0x0
0xffffe9000001c400 0041 00000000 0x0 0x0
0xffffe9000001c480 0041 00000000 0x0 0x0
0xffffe9000001c500 0041 00000000 0x0 0x0
0xffffe9000001c580 0041 00000000 0x0 0x0
0xffffe9000001c600 0041 00000000 0x0 0x0
0xffffe9000001c680 0041 00000000 0x0 0x0
0xffffe9000001c700 0041 00000000 0x0 0x0
0xffffe9000001c780 0001 00000000 0x0 0x0
0xffffe9000001c800 0001 00000000 0x0 0x0
0xffffe9000001c880 0001 00000000 0x0 0x0
0xffffe9000001c900 0001 00000000 0x0 0x0
0xffffe9000001c980 0001 00000000 0x0 0x0
0xffffe9000001ca00 0001 00000000 0x0 0x0
0xffffe9000001ca80 0001 00000000 0x0 0x0
0xffffe9000001cb00 0001 00000000 0x0 0x0
0xffffe9000001cb80 0001 00000000 0x0 0x0
0xffffe9000001cc00 0001 00000000 0x0 0x0
0xffffe9000001cc80 0001 00000000 0x0 0x0
0xffffe9000001cd00 0001 00000000 0x0 0x0
0xffffe9000001cd80 0001 00000000 0x0 0x0
0xffffe9000001ce00 0001 00000000 0x0 0x0
0xffffe9000001ce80 0001 00000000 0x0 0x0
0xffffe9000001cf00 0001 00000000 0x0 0x0
0xffffe9000001cf80 0001 00000000 0x0 0x0
0xffffe9000001d000 0001 00000000 0x0 0x0
0xffffe9000001d080 0001 00000000 0x0 0x0
0xffffe9000001d100 0001 00000000 0x0 0x0
0xffffe9000001d180 0001 00000000 0x0 0x0
0xffffe9000001d200 0001 00000000 0x0 0x0
0xffffe9000001d280 0001 00000000 0x0 0x0
0xffffe9000001d300 0001 00000000 0x0 0x0
0xffffe9000001d380 0001 00000000 0x0 0x0
0xffffe9000001d400 0001 00000000 0x0 0x0
0xffffe9000001d480 0001 00000000 0x0 0x0
0xffffe9000001d500 0001 00000000 0x0 0x0
0xffffe9000001d580 0001 00000000 0x0 0x0
0xffffe9000001d600 0001 00000000 0x0 0x0
0xffffe9000001d680 0001 00000000 0x0 0x0
0xffffe9000001d700 0001 00000000 0x0 0x0
0xffffe9000001d780 0001 00000000 0x0 0x0
0xffffe9000001d800 0001 00000000 0x0 0x0
0xffffe9000001d880 0001 00000000 0x0 0x0
0xffffe9000001d900 0001 00000000 0x0 0x0
0xffffe9000001d980 0001 00000000 0x0 0x0
0xffffe9000001da00 0001 00000000 0x0 0x0
0xffffe9000001da80 0001 00000000 0x0 0x0
0xffffe9000001db00 0001 00000000 0x0 0x0
0xffffe9000001db80 0001 00000000 0x0 0x0
0xffffe9000001dc00 0001 00000000 0x0 0x0
0xffffe9000001dc80 0001 00000000 0x0 0x0
0xffffe9000001dd00 0001 00000000 0x0 0x0
0xffffe9000001dd80 0001 00000000 0x0 0x0
0xffffe9000001de00 0001 00000000 0x0 0x0
0xffffe9000001de80 0001 00000000 0x0 0x0
0xffffe9000001df00 0001 00000000 0x0 0x0
0xffffe9000001df80 0001 00000000 0x0 0x0
0xffffe9000001e000 0001 00000000 0x0 0x0
0xffffe9000001e080 0001 00000000 0x0 0x0
0xffffe9000001e100 0001 00000000 0x0 0x0
0xffffe9000001e180 0001 00000000 0x0 0x0
0xffffe9000001e200 0001 00000000 0x0 0x0
0xffffe9000001e280 0001 00000000 0x0 0x0
0xffffe9000001e300 0001 00000000 0x0 0x0
0xffffe9000001e380 0001 00000000 0x0 0x0
0xffffe9000001e400 0001 00000000 0x0 0x0
0xffffe9000001e480 0001 00000000 0x0 0x0
0xffffe9000001e500 0001 00000000 0x0 0x0
0xffffe9000001e580 0001 00000000 0x0 0x0
0xffffe9000001e600 0001 00000000 0x0 0x0
0xffffe9000001e680 0001 00000000 0x0 0x0
0xffffe9000001e700 0001 00000000 0x0 0x0
0xffffe9000001e780 0001 00000000 0x0 0x0
0xffffe9000001e800 0001 00000000 0x0 0x0
0xffffe9000001e880 0001 00000000 0x0 0x0
0xffffe9000001e900 0001 00000000 0x0 0x0
0xffffe9000001e980 0001 00000000 0x0 0x0
0xffffe9000001ea00 0001 00000000 0x0 0x0
0xffffe9000001ea80 0001 00000000 0x0 0x0
0xffffe9000001eb00 0001 00000000 0x0 0x0
0xffffe9000001eb80 0001 00000000 0x0 0x0
0xffffe9000001ec00 0001 00000000 0x0 0x0
0xffffe9000001ec80 0001 00000000 0x0 0x0
0xffffe9000001ed00 0001 00000000 0x0 0x0
0xffffe9000001ed80 0001 00000000 0x0 0x0
0xffffe9000001ee00 0001 00000000 0x0 0x0
0xffffe9000001ee80 0001 00000000 0x0 0x0
0xffffe9000001ef00 0001 00000000 0x0 0x0
0xffffe9000001ef80 0001 00000000 0x0 0x0
0xffffe9000001f000 0001 00000000 0x0 0x0
0xffffe9000001f080 0001 00000000 0x0 0x0
0xffffe9000001f100 0001 00000000 0x0 0x0
0xffffe9000001f180 0001 00000000 0x0 0x0
0xffffe9000001f200 0001 00000000 0x0 0x0
0xffffe9000001f280 0001 00000000 0x0 0x0
0xffffe9000001f300 0001 00000000 0x0 0x0
0xffffe9000001f380 0001 00000000 0x0 0x0
0xffffe9000001f400 0001 00000000 0x0 0x0
0xffffe9000001f480 0001 00000000 0x0 0x0
0xffffe9000001f500 0001 00000000 0x0 0x0
0xffffe9000001f580 0001 00000000 0x0 0x0
0xffffe9000001f600 0001 00000000 0x0 0x0
0xffffe9000001f680 0001 00000000 0x0 0x0
0xffffe9000001f700 0001 00000000 0x0 0x0
0xffffe9000001f780 0001 00000000 0x0 0x0
0xffffe9000001f800 0001 00000000 0x0 0x0
0xffffe9000001f880 0001 00000000 0x0 0x0
0xffffe9000001f900 0001 00000000 0x0 0x0
0xffffe9000001f980 0001 00000000 0x0 0x0
0xffffe9000001fa00 0001 00000000 0x0 0x0
0xffffe9000001fa80 0001 00000000 0x0 0x0
0xffffe9000001fb00 0001 00000000 0x0 0x0
0xffffe9000001fb80 0001 00000000 0x0 0x0
0xffffe9000001fc00 0001 00000000 0x0 0x0
0xffffe9000001fc80 0001 00000000 0x0 0x0
0xffffe9000001fd00 0001 00000000 0x0 0x0
0xffffe9000001fd80 0001 00000000 0x0 0x0
0xffffe9000001fe00 0001 00000000 0x0 0x0
0xffffe9000001fe80 0001 00000000 0x0 0x0
0xffffe9000001ff00 0001 00000000 0x0 0x0
0xffffe9000001ff80 0001 00000000 0x0 0x0
0xffffe90000020000 0001 00000000 0x0 0x0
0xffffe90000020080 0001 00000000 0x0 0x0
0xffffe90000020100 0001 00000000 0x0 0x0
0xffffe90000020180 0001 00000000 0x0 0x0
0xffffe90000020200 0001 00000000 0x0 0x0
0xffffe90000020280 0001 00000000 0x0 0x0
0xffffe90000020300 0001 00000000 0x0 0x0
0xffffe90000020380 0001 00000000 0x0 0x0
0xffffe90000020400 0001 00000000 0x0 0x0
0xffffe90000020480 0001 00000000 0x0 0x0
0xffffe90000020500 0001 00000000 0x0 0x0
0xffffe90000020580 0001 00000000 0x0 0x0
0xffffe90000020600 0001 00000000 0x0 0x0
0xffffe90000020680 0001 00000000 0x0 0x0
0xffffe90000020700 0001 00000000 0x0 0x0
0xffffe90000020780 0001 00000000 0x0 0x0
0xffffe90000020800 0001 00000000 0x0 0x0
0xffffe90000020880 0001 00000000 0x0 0x0
0xffffe90000020900 0001 00000000 0x0 0x0
0xffffe90000020980 0001 00000000 0x0 0x0
0xffffe90000020a00 0001 00000000 0x0 0x0
0xffffe90000020a80 0001 00000000 0x0 0x0
0xffffe90000020b00 0001 00000000 0x0 0x0
0xffffe90000020b80 0001 00000000 0x0 0x0
0xffffe90000020c00 0001 00000000 0x0 0x0
0xffffe90000020c80 0001 00000000 0x0 0x0
0xffffe90000020d00 0001 00000000 0x0 0x0
0xffffe90000020d80 0001 00000000 0x0 0x0
0xffffe90000020e00 0001 00000000 0x0 0x0
0xffffe90000020e80 0001 00000000 0x0 0x0
0xffffe90000020f00 0001 00000000 0x0 0x0
0xffffe90000020f80 0001 00000000 0x0 0x0
0xffffe90000021000 0001 00000000 0x0 0x0
0xffffe90000021080 0001 00000000 0x0 0x0
0xffffe90000021100 0001 00000000 0x0 0x0
0xffffe90000021180 0001 00000000 0x0 0x0
0xffffe90000021200 0001 00000000 0x0 0x0
0xffffe90000021280 0001 00000000 0x0 0x0
0xffffe90000021300 0001 00000000 0x0 0x0
0xffffe90000021380 0001 00000000 0x0 0x0
0xffffe90000021400 0001 00000000 0x0 0x0
0xffffe90000021480 0001 00000000 0x0 0x0
0xffffe90000021500 0001 00000000 0x0 0x0
0xffffe90000021580 0001 00000000 0x0 0x0
0xffffe90000021600 0001 00000000 0x0 0x0
0xffffe90000021680 0001 00000000 0x0 0x0
0xffffe90000021700 0001 00000000 0x0 0x0
0xffffe90000021780 0001 00000000 0x0 0x0
0xffffe90000021800 0001 00000000 0x0 0x0
0xffffe90000021880 0001 00000000 0x0 0x0
0xffffe90000021900 0001 00000000 0x0 0x0
0xffffe90000021980 0001 00000000 0x0 0x0
0xffffe90000021a00 0001 00000000 0x0 0x0
0xffffe90000021a80 0001 00000000 0x0 0x0
0xffffe90000021b00 0001 00000000 0x0 0x0
0xffffe90000021b80 0001 00000000 0x0 0x0
0xffffe90000021c00 0001 00000000 0x0 0x0
0xffffe90000021c80 0001 00000000 0x0 0x0
0xffffe90000021d00 0001 00000000 0x0 0x0
0xffffe90000021d80 0001 00000000 0x0 0x0
0xffffe90000021e00 0001 00000000 0x0 0x0
0xffffe90000021e80 0001 00000000 0x0 0x0
0xffffe90000021f00 0001 00000000 0x0 0x0
0xffffe90000021f80 0001 00000000 0x0 0x0
0xffffe90000022000 0001 00000000 0x0 0x0
0xffffe90000022080 0001 00000000 0x0 0x0
0xffffe90000022100 0001 00000000 0x0 0x0
0xffffe90000022180 0001 00000000 0x0 0x0
0xffffe90000022200 0001 00000000 0x0 0x0
0xffffe90000022280 0001 00000000 0x0 0x0
0xffffe90000022300 0001 00000000 0x0 0x0
0xffffe90000022380 0001 00000000 0x0 0x0
0xffffe90000022400 0001 00000000 0x0 0x0
0xffffe90000022480 0001 00000000 0x0 0x0
0xffffe90000022500 0001 00000000 0x0 0x0
0xffffe90000022580 0001 00000000 0x0 0x0
0xffffe90000022600 0001 00000000 0x0 0x0
0xffffe90000022680 0001 00000000 0x0 0x0
0xffffe90000022700 0001 00000000 0x0 0x0
0xffffe90000022780 0001 00000000 0x0 0x0
0xffffe90000022800 0001 00000000 0x0 0x0
0xffffe90000022880 0001 00000000 0x0 0x0
0xffffe90000022900 0001 00000000 0x0 0x0
0xffffe90000022980 0001 00000000 0x0 0x0
0xffffe90000022a00 0001 00000000 0x0 0x0
0xffffe90000022a80 0001 00000000 0x0 0x0
0xffffe90000022b00 0001 00000000 0x0 0x0
0xffffe90000022b80 0001 00000000 0x0 0x0
0xffffe90000022c00 0001 00000000 0x0 0x0
0xffffe90000022c80 0001 00000000 0x0 0x0
0xffffe90000022d00 0001 00000000 0x0 0x0
0xffffe90000022d80 0001 00000000 0x0 0x0
0xffffe90000022e00 0001 00000000 0x0 0x0
0xffffe90000022e80 0001 00000000 0x0 0x0
0xffffe90000022f00 0001 00000000 0x0 0x0
0xffffe90000022f80 0001 00000000 0x0 0x0
0xffffe90000023000 0001 00000000 0x0 0x0
0xffffe90000023080 0001 00000000 0x0 0x0
0xffffe90000023100 0001 00000000 0x0 0x0
0xffffe90000023180 0001 00000000 0x0 0x0
0xffffe90000023200 0001 00000000 0x0 0x0
0xffffe90000023280 0001 00000000 0x0 0x0
0xffffe90000023300 0001 00000000 0x0 0x0
0xffffe90000023380 0001 00000000 0x0 0x0
0xffffe90000023400 0001 00000000 0x0 0x0
0xffffe90000023480 0001 00000000 0x0 0x0
0xffffe90000023500 0001 00000000 0x0 0x0
0xffffe90000023580 0001 00000000 0x0 0x0
0xffffe90000023600 0001 00000000 0x0 0x0
0xffffe90000023680 0001 00000000 0x0 0x0
0xffffe90000023700 0001 00000000 0x0 0x0
0xffffe90000023780 0001 00000000 0x0 0x0
0xffffe90000023800 0001 00000000 0x0 0x0
0xffffe90000023880 0001 00000000 0x0 0x0
0xffffe90000023900 0001 00000000 0x0 0x0
0xffffe90000023980 0001 00000000 0x0 0x0
0xffffe90000023a00 0001 00000000 0x0 0x0
0xffffe90000023a80 0001 00000000 0x0 0x0
0xffffe90000023b00 0001 00000000 0x0 0x0
0xffffe90000023b80 0001 00000000 0x0 0x0
0xffffe90000023c00 0001 00000000 0x0 0x0
0xffffe90000023c80 0001 00000000 0x0 0x0
0xffffe90000023d00 0001 00000000 0x0 0x0
0xffffe90000023d80 0001 00000000 0x0 0x0
0xffffe90000023e00 0001 00000000 0x0 0x0
0xffffe90000023e80 0001 00000000 0x0 0x0
0xffffe90000023f00 0001 00000000 0x0 0x0
0xffffe90000023f80 0001 00000000 0x0 0x0
0xffffe90000024000 0001 00000000 0x0 0x0
0xffffe90000024080 0001 00000000 0x0 0x0
0xffffe90000024100 0001 00000000 0x0 0x0
0xffffe90000024180 0001 00000000 0x0 0x0
0xffffe90000024200 0001 00000000 0x0 0x0
0xffffe90000024280 0001 00000000 0x0 0x0
0xffffe90000024300 0001 00000000 0x0 0x0
0xffffe90000024380 0001 00000000 0x0 0x0
0xffffe90000024400 0001 00000000 0x0 0x0
0xffffe90000024480 0001 00000000 0x0 0x0
0xffffe90000024500 0001 00000000 0x0 0x0
0xffffe90000024580 0001 00000000 0x0 0x0
0xffffe90000024600 0001 00000000 0x0 0x0
0xffffe90000024680 0001 00000000 0x0 0x0
0xffffe90000024700 0001 00000000 0x0 0x0
0xffffe90000024780 0001 00000000 0x0 0x0
0xffffe90000024800 0001 00000000 0x0 0x0
0xffffe90000024880 0001 00000000 0x0 0x0
0xffffe90000024900 0001 00000000 0x0 0x0
0xffffe90000024980 0001 00000000 0x0 0x0
0xffffe90000024a00 0001 00000000 0x0 0x0
0xffffe90000024a80 0001 00000000 0x0 0x0
0xffffe90000024b00 0001 00000000 0x0 0x0
0xffffe90000024b80 0001 00000000 0x0 0x0
0xffffe90000024c00 0001 00000000 0x0 0x0
0xffffe90000024c80 0001 00000000 0x0 0x0
0xffffe90000024d00 0001 00000000 0x0 0x0
0xffffe90000024d80 0001 00000000 0x0 0x0
0xffffe90000024e00 0001 00000000 0x0 0x0
0xffffe90000024e80 0001 00000000 0x0 0x0
0xffffe90000024f00 0001 00000000 0x0 0x0
0xffffe90000024f80 0001 00000000 0x0 0x0
0xffffe90000025000 0001 00000000 0x0 0x0
0xffffe90000025080 0001 00000000 0x0 0x0
0xffffe90000025100 0001 00000000 0x0 0x0
0xffffe90000025180 0001 00000000 0x0 0x0
0xffffe90000025200 0001 00000000 0x0 0x0
0xffffe90000025280 0001 00000000 0x0 0x0
0xffffe90000025300 0001 00000000 0x0 0x0
0xffffe90000025380 0001 00000000 0x0 0x0
0xffffe90000025400 0001 00000000 0x0 0x0
0xffffe90000025480 0001 00000000 0x0 0x0
0xffffe90000025500 0001 00000000 0x0 0x0
0xffffe90000025580 0001 00000000 0x0 0x0
0xffffe90000025600 0001 00000000 0x0 0x0
0xffffe90000025680 0001 00000000 0x0 0x0
0xffffe90000025700 0001 00000000 0x0 0x0
0xffffe90000025780 0001 00000000 0x0 0x0
0xffffe90000025800 0001 00000000 0x0 0x0
0xffffe90000025880 0001 00000000 0x0 0x0
0xffffe90000025900 0001 00000000 0x0 0x0
0xffffe90000025980 0001 00000000 0x0 0x0
0xffffe90000025a00 0001 00000000 0x0 0x0
0xffffe90000025a80 0001 00000000 0x0 0x0
0xffffe90000025b00 0001 00000000 0x0 0x0
0xffffe90000025b80 0001 00000000 0x0 0x0
0xffffe90000025c00 0001 00000000 0x0 0x0
0xffffe90000025c80 0001 00000000 0x0 0x0
0xffffe90000025d00 0001 00000000 0x0 0x0
0xffffe90000025d80 0001 00000000 0x0 0x0
0xffffe90000025e00 0001 00000000 0x0 0x0
0xffffe90000025e80 0001 00000000 0x0 0x0
0xffffe90000025f00 0001 00000000 0x0 0x0
0xffffe90000025f80 0001 00000000 0x0 0x0
0xffffe90000026000 0001 00000000 0x0 0x0
0xffffe90000026080 0001 00000000 0x0 0x0
0xffffe90000026100 0001 00000000 0x0 0x0
0xffffe90000026180 0001 00000000 0x0 0x0
0xffffe90000026200 0001 00000000 0x0 0x0
0xffffe90000026280 0001 00000000 0x0 0x0
0xffffe90000026300 0001 00000000 0x0 0x0
0xffffe90000026380 0001 00000000 0x0 0x0
0xffffe90000026400 0001 00000000 0x0 0x0
0xffffe90000026480 0001 00000000 0x0 0x0
0xffffe90000026500 0001 00000000 0x0 0x0
0xffffe90000026580 0001 00000000 0x0 0x0
0xffffe90000026600 0001 00000000 0x0 0x0
0xffffe90000026680 0001 00000000 0x0 0x0
0xffffe90000026700 0001 00000000 0x0 0x0
0xffffe90000026780 0001 00000000 0x0 0x0
0xffffe90000026800 0001 00000000 0x0 0x0
0xffffe90000026880 0001 00000000 0x0 0x0
0xffffe90000026900 0001 00000000 0x0 0x0
0xffffe90000026980 0001 00000000 0x0 0x0
0xffffe90000026a00 0001 00000000 0x0 0x0
0xffffe90000026a80 0001 00000000 0x0 0x0
0xffffe90000026b00 0001 00000000 0x0 0x0
0xffffe90000026b80 0001 00000000 0x0 0x0
0xffffe90000026c00 0001 00000000 0x0 0x0
0xffffe90000026c80 0001 00000000 0x0 0x0
0xffffe90000026d00 0001 00000000 0x0 0x0
0xffffe90000026d80 0001 00000000 0x0 0x0
0xffffe90000026e00 0001 00000000 0x0 0x0
0xffffe90000026e80 0001 00000000 0x0 0x0
0xffffe90000026f00 0001 00000000 0x0 0x0
0xffffe90000026f80 0001 00000000 0x0 0x0
0xffffe90000027000 0001 00000000 0x0 0x0
0xffffe90000027080 0001 00000000 0x0 0x0
0xffffe90000027100 0001 00000000 0x0 0x0
0xffffe90000027180 0001 00000000 0x0 0x0
0xffffe90000027200 0001 00000000 0x0 0x0
0xffffe90000027280 0001 00000000 0x0 0x0
0xffffe90000027300 0001 00000000 0x0 0x0
0xffffe90000027380 0001 00000000 0x0 0x0
0xffffe90000027400 0001 00000000 0x0 0x0
0xffffe90000027480 0001 00000000 0x0 0x0
0xffffe90000027500 0001 00000000 0x0 0x0
0xffffe90000027580 0001 00000000 0x0 0x0
0xffffe90000027600 0001 00000000 0x0 0x0
0xffffe90000027680 0001 00000000 0x0 0x0
0xffffe90000027700 0001 00000000 0x0 0x0
0xffffe90000027780 0001 00000000 0x0 0x0
0xffffe90000027800 0001 00000000 0x0 0x0
0xffffe90000027880 0001 00000000 0x0 0x0
0xffffe90000027900 0001 00000000 0x0 0x0
0xffffe90000027980 0001 00000000 0x0 0x0
0xffffe90000027a00 0001 00000000 0x0 0x0
0xffffe90000027a80 0001 00000000 0x0 0x0
0xffffe90000027b00 0001 00000000 0x0 0x0
0xffffe90000027b80 0001 00000000 0x0 0x0
0xffffe90000027c00 0001 00000000 0x0 0x0
0xffffe90000027c80 0001 00000000 0x0 0x0
0xffffe90000027d00 0001 00000000 0x0 0x0
0xffffe90000027d80 0001 00000000 0x0 0x0
0xffffe90000027e00 0001 00000000 0x0 0x0
0xffffe90000027e80 0001 00000000 0x0 0x0
0xffffe90000027f00 0001 00000000 0x0 0x0
0xffffe90000027f80 0001 00000000 0x0 0x0
0xffffe90000028000 0001 00000000 0x0 0x0
0xffffe90000028080 0001 00000000 0x0 0x0
0xffffe90000028100 0001 00000000 0x0 0x0
0xffffe90000028180 0001 00000000 0x0 0x0
0xffffe90000028200 0001 00000000 0x0 0x0
0xffffe90000028280 0001 00000000 0x0 0x0
0xffffe90000028300 0001 00000000 0x0 0x0
0xffffe90000028380 0001 00000000 0x0 0x0
0xffffe90000028400 0001 00000000 0x0 0x0
0xffffe90000028480 0001 00000000 0x0 0x0
0xffffe90000028500 0001 00000000 0x0 0x0
0xffffe90000028580 0001 00000000 0x0 0x0
0xffffe90000028600 0001 00000000 0x0 0x0
0xffffe90000028680 0001 00000000 0x0 0x0
0xffffe90000028700 0001 00000000 0x0 0x0
0xffffe90000028780 0001 00000000 0x0 0x0
0xffffe90000028800 0001 00000000 0x0 0x0
0xffffe90000028880 0001 00000000 0x0 0x0
0xffffe90000028900 0001 00000000 0x0 0x0
0xffffe90000028980 0001 00000000 0x0 0x0
0xffffe90000028a00 0001 00000000 0x0 0x0
0xffffe90000028a80 0001 00000000 0x0 0x0
0xffffe90000028b00 0001 00000000 0x0 0x0
0xffffe90000028b80 0001 00000000 0x0 0x0
0xffffe90000028c00 0001 00000000 0x0 0x0
0xffffe90000028c80 0001 00000000 0x0 0x0
0xffffe90000028d00 0001 00000000 0x0 0x0
0xffffe90000028d80 0001 00000000 0x0 0x0
0xffffe90000028e00 0001 00000000 0x0 0x0
0xffffe90000028e80 0001 00000000 0x0 0x0
0xffffe90000028f00 0001 00000000 0x0 0x0
0xffffe90000028f80 0001 00000000 0x0 0x0
0xffffe90000029000 0001 00000000 0x0 0x0
0xffffe90000029080 0001 00000000 0x0 0x0
0xffffe90000029100 0001 00000000 0x0 0x0
0xffffe90000029180 0001 00000000 0x0 0x0
0xffffe90000029200 0001 00000000 0x0 0x0
0xffffe90000029280 0001 00000000 0x0 0x0
0xffffe90000029300 0001 00000000 0x0 0x0
0xffffe90000029380 0001 00000000 0x0 0x0
0xffffe90000029400 0001 00000000 0x0 0x0
0xffffe90000029480 0001 00000000 0x0 0x0
0xffffe90000029500 0001 00000000 0x0 0x0
0xffffe90000029580 0001 00000000 0x0 0x0
0xffffe90000029600 0001 00000000 0x0 0x0
0xffffe90000029680 0001 00000000 0x0 0x0
0xffffe90000029700 0001 00000000 0x0 0x0
0xffffe90000029780 0001 00000000 0x0 0x0
0xffffe90000029800 0001 00000000 0x0 0x0
0xffffe90000029880 0001 00000000 0x0 0x0
0xffffe90000029900 0001 00000000 0x0 0x0
0xffffe90000029980 0001 00000000 0x0 0x0
0xffffe90000029a00 0001 00000000 0x0 0x0
0xffffe90000029a80 0001 00000000 0x0 0x0
0xffffe90000029b00 0001 00000000 0x0 0x0
0xffffe90000029b80 0001 00000000 0x0 0x0
0xffffe90000029c00 0001 00000000 0x0 0x0
0xffffe90000029c80 0001 00000000 0x0 0x0
0xffffe90000029d00 0001 00000000 0x0 0x0
0xffffe90000029d80 0001 00000000 0x0 0x0
0xffffe90000029e00 0001 00000000 0x0 0x0
0xffffe90000029e80 0001 00000000 0x0 0x0
0xffffe90000029f00 0001 00000000 0x0 0x0
0xffffe90000029f80 0001 00000000 0x0 0x0
0xffffe9000002a000 0001 00000000 0x0 0x0
0xffffe9000002a080 0001 00000000 0x0 0x0
0xffffe9000002a100 0001 00000000 0x0 0x0
0xffffe9000002a180 0001 00000000 0x0 0x0
0xffffe9000002a200 0001 00000000 0x0 0x0
0xffffe9000002a280 0001 00000000 0x0 0x0
0xffffe9000002a300 0001 00000000 0x0 0x0
0xffffe9000002a380 0001 00000000 0x0 0x0
0xffffe9000002a400 0001 00000000 0x0 0x0
0xffffe9000002a480 0001 00000000 0x0 0x0
0xffffe9000002a500 0001 00000000 0x0 0x0
0xffffe9000002a580 0001 00000000 0x0 0x0
0xffffe9000002a600 0001 00000000 0x0 0x0
0xffffe9000002a680 0001 00000000 0x0 0x0
0xffffe9000002a700 0001 00000000 0x0 0x0
0xffffe9000002a780 0001 00000000 0x0 0x0
0xffffe9000002a800 0001 00000000 0x0 0x0
0xffffe9000002a880 0001 00000000 0x0 0x0
0xffffe9000002a900 0001 00000000 0x0 0x0
0xffffe9000002a980 0001 00000000 0x0 0x0
0xffffe9000002aa00 0001 00000000 0x0 0x0
0xffffe9000002aa80 0001 00000000 0x0 0x0
0xffffe9000002ab00 0001 00000000 0x0 0x0
0xffffe9000002ab80 0001 00000000 0x0 0x0
0xffffe9000002ac00 0001 00000000 0x0 0x0
0xffffe9000002ac80 0001 00000000 0x0 0x0
0xffffe9000002ad00 0001 00000000 0x0 0x0
0xffffe9000002ad80 0001 00000000 0x0 0x0
0xffffe9000002ae00 0001 00000000 0x0 0x0
0xffffe9000002ae80 0001 00000000 0x0 0x0
0xffffe9000002af00 0001 00000000 0x0 0x0
0xffffe9000002af80 0001 00000000 0x0 0x0
0xffffe9000002b000 0001 00000000 0x0 0x0
0xffffe9000002b080 0001 00000000 0x0 0x0
0xffffe9000002b100 0001 00000000 0x0 0x0
0xffffe9000002b180 0001 00000000 0x0 0x0
0xffffe9000002b200 0001 00000000 0x0 0x0
0xffffe9000002b280 0001 00000000 0x0 0x0
0xffffe9000002b300 0001 00000000 0x0 0x0
0xffffe9000002b380 0001 00000000 0x0 0x0
0xffffe9000002b400 0001 00000000 0x0 0x0
0xffffe9000002b480 0001 00000000 0x0 0x0
0xffffe9000002b500 0001 00000000 0x0 0x0
0xffffe9000002b580 0001 00000000 0x0 0x0
0xffffe9000002b600 0001 00000000 0x0 0x0
0xffffe9000002b680 0001 00000000 0x0 0x0
0xffffe9000002b700 0001 00000000 0x0 0x0
0xffffe9000002b780 0001 00000000 0x0 0x0
0xffffe9000002b800 0001 00000000 0x0 0x0
0xffffe9000002b880 0001 00000000 0x0 0x0
0xffffe9000002b900 0001 00000000 0x0 0x0
0xffffe9000002b980 0001 00000000 0x0

---
This report is generated by a bot. It may contain errors.
See https://goo.gl/tpsmEJ for more information about syzbot.
syzbot engineers can be reached at syzk...@googlegroups.com.

syzbot will keep track of this issue. See:
https://goo.gl/tpsmEJ#status for how to communicate with syzbot.

syzbot

unread,

Jun 29, 2022, 11:16:23 PM6/29/22

to syzkaller-...@googlegroups.com

syzbot has found a reproducer for the following issue on:

HEAD commit: c2b46e72e50e bind.2: add references to specific protocol f..
git tree: netbsd

console output: https://syzkaller.appspot.com/x/log.txt?x=1428534bf00000

kernel config: https://syzkaller.appspot.com/x/.config?x=739e57438eb9ed9e
dashboard link: https://syzkaller.appspot.com/bug?extid=365e26863f286c6677b7
compiler: Debian clang version 13.0.1-++20220126092033+75e33f71c2da-1~exp1~20220126212112.63

syz repro: https://syzkaller.appspot.com/x/repro.syz?x=1285f024080000
C reproducer: https://syzkaller.appspot.com/x/repro.c?x=162899c0080000

IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+365e26...@syzkaller.appspotmail.com

[ 151.5005148] panic: mutex_destroy,400: uninitialized lock (lock=0xffffbb0013651608, from=ffffffff85181e69)
[ 151.5105015] cpu1: Begin traceback...
[ 151.5305068] vpanic() at netbsd:vpanic+0xc9d
[ 151.5805081] panic() at netbsd:panic+0x1b3 sys/kern/subr_prf.c:210
[ 151.6205182] lockdebug_free() at netbsd:lockdebug_free+0x4bf
[ 151.6705139] mutex_destroy() at netbsd:mutex_destroy+0x259
[ 151.7205201] upgt_detach() at netbsd:upgt_detach+0xb48 upgt_free_cmd sys/dev/usb/if_upgt.c:2383 [inline]
[ 151.7205201] upgt_detach() at netbsd:upgt_detach+0xb48 sys/dev/usb/if_upgt.c:536
[ 151.7705104] config_detach() at netbsd:config_detach+0x106c sys/kern/subr_autoconf.c:2037
[ 151.8205163] usb_disconnect_port() at netbsd:usb_disconnect_port+0x312 sys/dev/usb/usb_subr.c:1895
[ 151.8705109] uhub_explore() at netbsd:uhub_explore+0x1eb5
[ 151.9205152] usb_discover() at netbsd:usb_discover+0x453 sys/dev/usb/usb.c:1196
[ 151.9805138] usb_event_thread() at netbsd:usb_event_thread+0x2b7 sys/dev/usb/usb.c:728
[ 152.0005091] cpu1: End traceback...
[ 152.0005091] fatal breakpoint trap in supervisor mode
[ 152.0005091] trap type 1 code 0 rip 0xffffffff802228ad cs 0x8 rflags 0x286 cr2 0x603600 ilevel 0x8 rsp 0xffffbb0085716720
[ 152.0105023] curlwp 0xffffbb00120f65c0 pid 0.165 lowest kstack 0xffffbb008570f2c0
Stopped in pid 0.165 (system) at netbsd:breakpoint+0x5: leave

?
breakpoint() at netbsd:breakpoint+0x5
vpanic() at netbsd:vpanic+0xc9d
panic() at netbsd:panic+0x1b3 sys/kern/subr_prf.c:210
lockdebug_free() at netbsd:lockdebug_free+0x4bf
mutex_destroy() at netbsd:mutex_destroy+0x259
upgt_detach() at netbsd:upgt_detach+0xb48 upgt_free_cmd sys/dev/usb/if_upgt.c:2383 [inline]
upgt_detach() at netbsd:upgt_detach+0xb48 sys/dev/usb/if_upgt.c:536
config_detach() at netbsd:config_detach+0x106c sys/kern/subr_autoconf.c:2037
usb_disconnect_port() at netbsd:usb_disconnect_port+0x312 sys/dev/usb/usb_subr.c:1895
uhub_explore() at netbsd:uhub_explore+0x1eb5
usb_discover() at netbsd:usb_discover+0x453 sys/dev/usb/usb.c:1196
usb_event_thread() at netbsd:usb_event_thread+0x2b7 sys/dev/usb/usb.c:728

Panic string: mutex_destroy,400: uninitialized lock (lock=0xffffbb0013651608, from=ffffffff85181e69)

PID LID S CPU FLAGS STRUCT LWP * NAME WAIT

982 1069 3 1 40000 ffffbb00135c3a80 syz-executor3620 tstile
982 1234 3 1 40000 ffffbb00135c3640 syz-executor3620 tstile
982 982 3 1 180 ffffbb0013479180 syz-executor3620 nanoslp
1000 988 3 0 40180 ffffbb00134795c0 syz-executor3620 parked
1000 1000 2 0 10000000 ffffbb001344e540 syz-executor3620
1224 1236 2 0 40000 ffffbb00135c3200 syz-executor3620
1224 1242 2 0 40000 ffffbb0013483600 syz-executor3620
1224 1224 2 0 10000140 ffffbb001344e100 syz-executor3620
984 1186 2 0 40140 ffffbb0013483a40 syz-executor3620
984 1237 2 0 0 ffffbb00134831c0 syz-executor3620
984 984 2 0 10000140 ffffbb0013383940 syz-executor3620
1129 1235 2 1 0 ffffbb00134759c0 syz-executor3620
1129 1101 2 1 40000 ffffbb0013475580 syz-executor3620
1129 1222 3 0 180 ffffbb001344e980 syz-executor3620 parked
1129 1129 3 1 10000180 ffffbb0013383500 syz-executor3620 nanoslp
422 422 2 1 140 ffffbb00133830c0 syz-executor3620
1076 1076 2 0 140 ffffbb0012bb3900 syz-executor3620
1151 1151 3 1 180 ffffbb0012bb34c0 syz-executor3620 nanoslp
1080 1233 2 0 40000 ffffbb0013479a00 syz-executor3620
1080 985 3 1 40180 ffffbb0013475140 syz-executor3620 parked
1080 1080 2 0 10000140 ffffbb0012bb3080 syz-executor3620
1077 1077 2 0 140 ffffbb00122c8280 syz-executor3620
1195 1195 3 1 180 ffffbb0012ae4bc0 syz-executor3620 nanoslp
1220 1220 3 1 180 ffffbb001229aac0 syz-executor3620 nanoslp
733 733 3 0 180 ffffbb001242c700 syz-executor3620 nanoslp
1194 1194 3 1 180 ffffbb0012b968c0 sshd select
1085 1085 3 0 180 ffffbb0012b96480 getty nanoslp
1072 1072 3 0 180 ffffbb001229a680 getty nanoslp
1075 1075 3 1 180 ffffbb001229a240 getty nanoslp
1074 1074 3 1 1c0 ffffbb00121a9600 getty ttyraw
926 926 3 1 180 ffffbb0012b96040 sshd select
942 942 3 1 180 ffffbb00122c86c0 powerd kqueue
689 > 689 7 0 100 ffffbb001250bb80 syslogd
547 547 3 0 180 ffffbb0012ae4780 dhcpcd poll
464 464 3 0 180 ffffbb001242cb40 dhcpcd poll
603 603 3 1 180 ffffbb0012ae4340 dhcpcd poll
588 588 3 1 180 ffffbb001242c2c0 dhcpcd poll
289 289 3 0 180 ffffbb001250b740 dhcpcd poll
288 288 3 0 180 ffffbb00122c8b00 dhcpcd poll
351 351 3 0 180 ffffbb001250b300 dhcpcd poll
1 1 3 1 180 ffffbb0011e3c940 init wait
0 967 3 0 200 ffffbb00121a9a40 physiod physiod
0 194 3 0 200 ffffbb00121b5a80 pooldrain pooldrain
0 193 3 0 200 ffffbb00121b5640 ioflush syncer
0 192 3 1 200 ffffbb00121b5200 pgdaemon pgdaemon
0 169 3 1 200 ffffbb00121a91c0 usb7 usbevt
0 167 3 0 200 ffffbb00120f6a00 usb6 usbevt
0 > 165 7 1 240 ffffbb00120f65c0 usb5
0 164 3 0 240 ffffbb00120f6180 usb4 usbxfer
0 31 3 1 200 ffffbb001205d9c0 usb3 usbdly
0 63 3 1 200 ffffbb001205d580 usb2 usbevt
0 126 3 1 240 ffffbb001205d140 usb1 usbxfer
0 125 3 1 200 ffffbb0011e4d980 usb0 usbevt
0 124 3 1 200 ffffbb0011e4d540 usbtask-dr usbtsk
0 123 3 0 200 ffffbb00118016c0 usbtask-hc usbtsk
0 122 3 1 200 ffffbb0011e4d100 npfgc0 npfgcw
0 121 3 0 200 ffffbb0011e3c500 rt_free rt_free
0 120 3 0 200 ffffbb0011e3c0c0 unpgc unpgc
0 119 2 0 200 ffffbb0011e37900 key_timehandler
0 118 3 1 200 ffffbb0011e374c0 icmp6_wqinput/1 icmp6_wqinput
0 117 3 0 200 ffffbb0011e37080 icmp6_wqinput/0 icmp6_wqinput
0 116 2 0 200 ffffbb0011cc48c0 nd6_timer
0 115 3 1 200 ffffbb0011cc4480 carp6_wqinput/1 carp6_wqinput
0 114 3 0 200 ffffbb0011cc4040 carp6_wqinput/0 carp6_wqinput
0 113 3 1 200 ffffbb0011cc2b80 carp_wqinput/1 carp_wqinput
0 112 3 0 200 ffffbb0011cc2740 carp_wqinput/0 carp_wqinput
0 111 3 1 200 ffffbb0011cc2300 icmp_wqinput/1 icmp_wqinput
0 110 3 0 200 ffffbb0011cc3780 icmp_wqinput/0 icmp_wqinput
0 109 2 0 200 ffffbb0011cc3340 rt_timer
0 108 2 0 200 ffffbb0011cc3bc0 vmem_rehash
0 99 3 0 200 ffffbb0011804b40 entbutler entropy
0 98 3 1 200 ffffbb0011804700 viomb balloon
0 97 3 1 200 ffffbb00118042c0 vioif0_txrx/1 vioif0_txrx
0 96 3 0 200 ffffbb0011801b00 vioif0_txrx/0 vioif0_txrx
0 29 3 0 200 ffffbb0011801280 scsibus0 sccomp
0 28 3 0 200 ffffbb00103afac0 pms0 pmsreset
0 27 3 1 200 ffffbb00103af680 xcall/1 xcall
0 26 1 1 200 ffffbb00103af240 softser/1
0 25 1 1 200 ffffbb00103ada80 softclk/1
0 24 1 1 200 ffffbb00103ad640 softbio/1
0 23 1 1 200 ffffbb00103ad200 softnet/1
0 22 1 1 201 ffffbb000f1f1a40 idle/1
0 21 3 0 200 ffffbb000f1f1600 lnxsyswq lnxsyswq
0 20 3 0 200 ffffbb000f1f11c0 lnxubdwq lnxubdwq
0 19 3 0 200 ffffbb000f1f0a00 lnxpwrwq lnxpwrwq
0 18 3 0 200 ffffbb000f1f05c0 lnxlngwq lnxlngwq
0 17 3 1 200 ffffbb000f1f0180 lnxhipwq lnxhipwq
0 16 3 0 200 ffffbb000f1eb9c0 lnxrcugc lnxrcugc
0 15 3 0 200 ffffbb000f1eb580 sysmon smtaskq
0 14 3 0 200 ffffbb000f1eb140 pmfsuspend pmfsuspend
0 13 3 0 200 ffffbb000f1e7980 pmfevent pmfevent
0 12 3 0 200 ffffbb000f1e7540 sopendfree sopendfr
0 11 3 0 200 ffffbb000f1e7100 iflnkst iflnkst
0 10 3 0 200 ffffbb000f1dd940 nfssilly nfssilly
0 9 3 0 200 ffffbb000f1dd500 vdrain vdrain
0 8 3 0 200 ffffbb000f1dd0c0 modunload mod_unld
0 7 3 0 200 ffffbb000ebda900 xcall/0 xcall
0 6 1 0 200 ffffbb000ebda4c0 softser/0
0 5 1 0 200 ffffbb000ebda080 softclk/0
0 4 1 0 200 ffffbb000ebd88c0 softbio/0
0 3 1 0 200 ffffbb000ebd8480 softnet/0
0 2 1 0 201 ffffbb000ebd8040 idle/0

0 0 3 0 200 ffffffff86868980 swapper uvm
[Locks tracked through LWPs]

****** LWP 982.1069 (syz-executor3620) @ 0xffffbb00135c3a80, l_stat=3

*** Locks held:

* Lock 0 (initialized at vhci_attach)
lock address : 0xffffbb000f08b4c8 type : sleep/adaptive
initialized : 0xffffffff82241a25

shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 1
relevant cpu : 1 last held: 1

relevant lwp : 0xffffbb00135c3a80 last held: 0xffffbb00135c3a80
last locked* : 0xffffffff82240e05 unlocked : 0xffffffff811f62ff
owner field : 0xffffbb00135c3a80 wait/spin: 1/0
Turnstile:
=> 0 waiting readers:
=> 1 waiting writers: 0xffffbb00135c3640

*** Locks wanted:

* Lock 0 (initialized at vhci_attach)

lock address : 0xffffbb000f08b6f0 type : sleep/adaptive
initialized : 0xffffffff82241a9a

shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 1
relevant cpu : 1 last held: 1

relevant lwp : 0xffffbb00135c3a80 last held: 0xffffbb00135c3640
last locked* : 0xffffffff82243149 unlocked : 0xffffffff8223e71d
owner field : 0xffffbb00135c3640 wait/spin: 1/0
Turnstile:
=> 0 waiting readers:
=> 1 waiting writers: 0xffffbb00135c3a80

****** LWP 982.1234 (syz-executor3620) @ 0xffffbb00135c3640, l_stat=3

*** Locks held:

* Lock 0 (initialized at vhci_attach)
lock address : 0xffffbb000f08b6f0 type : sleep/adaptive
initialized : 0xffffffff82241a9a

shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 1
relevant cpu : 1 last held: 1

relevant lwp : 0xffffbb00135c3640 last held: 0xffffbb00135c3640
last locked* : 0xffffffff82243149 unlocked : 0xffffffff8223e71d
owner field : 0xffffbb00135c3640 wait/spin: 1/0
Turnstile:
=> 0 waiting readers:
=> 1 waiting writers: 0xffffbb00135c3a80

* Lock 1 (initialized at uhub_attach)
lock address : 0xffffbb001205f8a0 type : sleep/adaptive
initialized : 0xffffffff8123867d

shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 1

relevant lwp : 0xffffbb00135c3640 last held: 0xffffbb00135c3640
last locked* : 0xffffffff8123e9b3 unlocked : 0xffffffff8123e52d
owner field : 0xffffbb00135c3640 wait/spin: 0/0

Turnstile: no active turnstile for this lock.

*** Locks wanted:

* Lock 0 (initialized at vhci_attach)
lock address : 0xffffbb000f08b4c8 type : sleep/adaptive
initialized : 0xffffffff82241a25

shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 1
relevant cpu : 1 last held: 1

relevant lwp : 0xffffbb00135c3640 last held: 0xffffbb00135c3a80
last locked* : 0xffffffff82240e05 unlocked : 0xffffffff811f62ff
owner field : 0xffffbb00135c3a80 wait/spin: 1/0
Turnstile:
=> 0 waiting readers:
=> 1 waiting writers: 0xffffbb00135c3640

****** LWP 1080.1233 (syz-executor3620) @ 0xffffbb0013479a00, l_stat=2

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at vhci_attach)

lock address : 0xffffbb000f0874c8 type : sleep/adaptive
initialized : 0xffffffff82241a25

shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 1

relevant cpu : 0 last held: 1
relevant lwp : 0xffffbb0013479a00 last held: 000000000000000000
last locked : 0xffffffff811e8987 unlocked*: 0xffffffff8509526b
owner field : 0xffffbb0013479a00 wait/spin: 0/0

Turnstile: no active turnstile for this lock.

****** LWP 689.689 (syslogd) @ 0xffffbb001250bb80, l_stat=7

*** Locks held:

* Lock 0 (initialized at vcache_alloc)
lock address : 0xffffbb0013242440 type : sleep/adaptive
initialized : 0xffffffff85677eb6

shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0

relevant lwp : 0xffffbb001250bb80 last held: 0xffffbb001250bb80
last locked* : 0xffffffff85704d86 unlocked : 0xffffffff85705135
owner/count : 0xffffbb001250bb80 flags : 0x0000000000000004

Turnstile: no active turnstile for this lock.

*** Locks wanted:

* Lock 0 (initialized at main)
lock address : 0xffffffff868f6bc0 type : spin
initialized : 0xffffffff850649f4
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 1

relevant cpu : 0 last held: 1
relevant lwp : 0xffffbb001250bb80 last held: 0xffffbb00120f65c0

last locked* : 0xffffffff85226189 unlocked : 0xffffffff850951be
curcpu holds : 3 wanted by: 000000000000000000

****** LWP 464.464 (dhcpcd) @ 0xffffbb001242cb40, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at module_hook_init)
lock address : 0xffffffff868f6cc0 type : sleep/adaptive
initialized : 0xffffffff8517f863
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0

relevant lwp : 0xffffbb001242cb40 last held: 000000000000000000