ASan: Unauthorized Access in ptyioctl

4 views
Skip to first unread message

syzbot

unread,
Aug 31, 2022, 9:29:31 PM8/31/22
to syzkaller-...@googlegroups.com
Hello,

syzbot found the following issue on:

HEAD commit: 771985f3da75 If we check XENPV, make sure to #include "opt..
git tree: netbsd
console output: https://syzkaller.appspot.com/x/log.txt?x=13f3a463080000
kernel config: https://syzkaller.appspot.com/x/.config?x=fab579639ba4bf0a
dashboard link: https://syzkaller.appspot.com/bug?extid=0ac9f482eacd57157729
compiler: g++ (Debian 10.2.1-6) 10.2.1 20210110

Unfortunately, I don't have any reproducer for this issue yet.

Downloadable assets:
disk image: https://storage.googleapis.com/syzbot-assets/436c75f94af0/disk-771985f3.raw.xz
netbsd.gdb: https://storage.googleapis.com/syzbot-assets/8e550ee70687/netbsd-771985f3.gdb.xz

IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+0ac9f4...@syzkaller.appspotmail.com

[ 656.7408604] panic: ASan: Unauthorized Access In 0xffffffff81c35e65: Addr 0xffff9b0014c7fa50 [4 bytes, read, PoolUseAfterFree]

[ 656.7508301] cpu1: Begin traceback...
[ 656.7708492] vpanic() at netbsd:vpanic+0x282 sys/kern/subr_prf.c:293
[ 656.8108341] panic() at netbsd:panic+0x9e sys/kern/subr_prf.c:1043
[ 656.8508537] kasan_report() at netbsd:kasan_report+0x8f kasan_code_name sys/kern/subr_asan.c:168 [inline]
[ 656.8508537] kasan_report() at netbsd:kasan_report+0x8f sys/kern/subr_asan.c:200
[ 656.8808471] __asan_load4() at netbsd:__asan_load4+0x9d kasan_shadow_4byte_isvalid sys/kern/subr_asan.c:350 [inline]
[ 656.8808471] __asan_load4() at netbsd:__asan_load4+0x9d kasan_shadow_check sys/kern/subr_asan.c:417 [inline]
[ 656.8808471] __asan_load4() at netbsd:__asan_load4+0x9d sys/kern/subr_asan.c:1206
[ 656.9008339] ptyioctl() at netbsd:ptyioctl+0x727 sys/kern/tty_pty.c:1119
[ 656.9308347] cdev_ioctl() at netbsd:cdev_ioctl+0x1e7 sys/kern/subr_devsw.c:1250
[ 656.9608435] spec_ioctl() at netbsd:spec_ioctl+0x148 sys/miscfs/specfs/spec_vnops.c:1320
[ 656.9908350] VOP_IOCTL() at netbsd:VOP_IOCTL+0x132 sys/kern/vnode_if.c:934
[ 657.0208377] vn_ioctl() at netbsd:vn_ioctl+0x1c0 sys/kern/vfs_vnops.c:868
[ 657.0508364] sys_ioctl() at netbsd:sys_ioctl+0x8f6 sys/kern/sys_generic.c:675
[ 657.0808375] sys___syscall() at netbsd:sys___syscall+0x10e sy_call sys/sys/syscallvar.h:65 [inline]
[ 657.0808375] sys___syscall() at netbsd:sys___syscall+0x10e sys/kern/sys_syscall.c:90
[ 657.1108352] syscall() at netbsd:syscall+0x25a sy_call sys/sys/syscallvar.h:65 [inline]
[ 657.1108352] syscall() at netbsd:syscall+0x25a sy_invoke sys/sys/syscallvar.h:94 [inline]
[ 657.1108352] syscall() at netbsd:syscall+0x25a sys/arch/x86/x86/syscall.c:138
[ 657.1208344] --- syscall (number 54 via SYS_syscall) ---
[ 657.1308324] netbsd:syscall+0x25a:
[ 657.1408352] cpu1: End traceback...
[ 657.1408352] fatal breakpoint trap in supervisor mode
[ 657.1408352] trap type 1 code 0 rip 0xffffffff80220a4d cs 0x8 rflags 0x286 cr2 0x63e060 ilevel 0 rsp 0xffff9b025d8906d0
[ 657.1508290] curlwp 0xffff9b0014c32980 pid 8338.8593 lowest kstack 0xffff9b025d8892c0
Stopped in pid 8338.8593 (syz-executor.1) at netbsd:breakpoint+0x5: leave
?
breakpoint() at netbsd:breakpoint+0x5
db_panic() at netbsd:db_panic+0x105 sys/ddb/db_panic.c:69
vpanic() at netbsd:vpanic+0x282 sys/kern/subr_prf.c:293
panic() at netbsd:panic+0x9e sys/kern/subr_prf.c:1043
kasan_report() at netbsd:kasan_report+0x8f kasan_code_name sys/kern/subr_asan.c:168 [inline]
kasan_report() at netbsd:kasan_report+0x8f sys/kern/subr_asan.c:200
__asan_load4() at netbsd:__asan_load4+0x9d kasan_shadow_4byte_isvalid sys/kern/subr_asan.c:350 [inline]
__asan_load4() at netbsd:__asan_load4+0x9d kasan_shadow_check sys/kern/subr_asan.c:417 [inline]
__asan_load4() at netbsd:__asan_load4+0x9d sys/kern/subr_asan.c:1206
ptyioctl() at netbsd:ptyioctl+0x727 sys/kern/tty_pty.c:1119
cdev_ioctl() at netbsd:cdev_ioctl+0x1e7 sys/kern/subr_devsw.c:1250
spec_ioctl() at netbsd:spec_ioctl+0x148 sys/miscfs/specfs/spec_vnops.c:1320
VOP_IOCTL() at netbsd:VOP_IOCTL+0x132 sys/kern/vnode_if.c:934
vn_ioctl() at netbsd:vn_ioctl+0x1c0 sys/kern/vfs_vnops.c:868
sys_ioctl() at netbsd:sys_ioctl+0x8f6 sys/kern/sys_generic.c:675
sys___syscall() at netbsd:sys___syscall+0x10e sy_call sys/sys/syscallvar.h:65 [inline]
sys___syscall() at netbsd:sys___syscall+0x10e sys/kern/sys_syscall.c:90
syscall() at netbsd:syscall+0x25a sy_call sys/sys/syscallvar.h:65 [inline]
syscall() at netbsd:syscall+0x25a sy_invoke sys/sys/syscallvar.h:94 [inline]
syscall() at netbsd:syscall+0x25a sys/arch/x86/x86/syscall.c:138
--- syscall (number 54 via SYS_syscall) ---
netbsd:syscall+0x25a:
Panic string: ASan: Unauthorized Access In 0xffffffff81c35e65: Addr 0xffff9b0014c7fa50 [4 bytes, read, PoolUseAfterFree]

PID LID S CPU FLAGS STRUCT LWP * NAME WAIT
7836 7836 2 0 0 ffff9b001428a340 syz-executor.5
9686 9686 2 0 0 ffff9b001345c0c0 syz-executor.0
4689 5774 2 0 100 ffff9b0012d7a780 syz-executor.3
4689 4689 2 0 10000000 ffff9b0013e36340 syz-executor.3
8234 317 3 0 180 ffff9b0012b6d100 syz-executor.4 parked
8234 8234 2 0 10000000 ffff9b00134448c0 syz-executor.4
8338 >8593 7 1 100 ffff9b0014c32980 syz-executor.1
8338 8338 2 1 10000000 ffff9b0012bfe240 syz-executor.1
8366 6382 2 0 100100 ffff9b0014df61c0 syz-executor.2
8366 8366 2 1 10000040 ffff9b0014671ac0 syz-executor.2
8015 8015 2 0 140 ffff9b0012ca5500 syz-executor.3
6809 6809 3 0 180 ffff9b0013ddcb40 syz-executor.0 parked
7055 7055 2 0 140 ffff9b0012db1900 syz-executor.4
2227 2227 3 1 180 ffff9b0013cce600 syz-executor.0 parked
7476 7476 3 0 180 ffff9b00133c2240 syz-executor.0 parked
6292 6292 3 0 180 ffff9b00145ac100 syz-executor.5 parked
6633 6633 3 0 180 ffff9b0014296480 syz-executor.0 parked
5859 5859 3 0 180 ffff9b00145ac980 syz-executor.5 parked
8167 8167 3 0 180 ffff9b0012a3b340 syz-executor.5 parked
7614 7614 3 0 180 ffff9b00134819c0 syz-executor.5 parked
5961 5961 3 0 180 ffff9b0012a5d040 syz-executor.5 parked
207 207 3 0 180 ffff9b001345c500 syz-executor.5 parked
6301 6301 3 0 180 ffff9b0014a06780 syz-executor.5 parked
1016 1016 3 1 180 ffff9b00142ea940 syz-executor.5 parked
5041 >5041 7 0 140 ffff9b0014a138c0 syz-executor.1
92 92 2 1 140 ffff9b00145d49c0 syz-executor.5
6213 6213 2 1 140 ffff9b00126d8b80 syz-executor.2
26602 26602 3 1 180 ffff9b0014612a40 syz-executor.2 parked
15176 15176 3 1 180 ffff9b0013f4c500 syz-executor.2 parked
18413 18413 3 1 180 ffff9b00133b5200 syz-executor.2 parked
23295 23295 3 1 180 ffff9b0013d4eac0 syz-executor.2 parked
19183 19183 3 1 180 ffff9b00145eaa00 syz-executor.2 parked
23384 23384 2 1 140 ffff9b0012b6d540 syz-executor.0
22944 22944 3 1 180 ffff9b0013e87480 syz-executor.4 parked
21147 21147 3 1 180 ffff9b0014671240 syz-executor.1 parked
22973 22973 3 1 180 ffff9b0014138680 syz-executor.4 parked
22237 22237 3 1 180 ffff9b0012cd79c0 syz-executor.4 parked
20617 20617 3 1 180 ffff9b0014bef080 syz-executor.1 parked
22763 22763 3 1 180 ffff9b0012c8a040 syz-executor.1 parked
21060 21060 3 1 180 ffff9b0013423b40 syz-executor.5 parked
22072 22072 3 1 180 ffff9b0013fd3180 syz-executor.5 parked
18916 18916 3 1 180 ffff9b001465ca80 syz-executor.2 parked
17140 17140 3 1 180 ffff9b0014a06340 syz-executor.4 parked
17541 17541 3 1 180 ffff9b0012ca5940 syz-executor.4 parked
16125 16125 3 1 180 ffff9b0012c71780 syz-executor.4 parked
18222 18222 3 1 180 ffff9b00146956c0 syz-executor.4 parked
17753 17753 3 1 180 ffff9b0012cf8a40 syz-executor.4 parked
15443 15443 3 1 180 ffff9b001335a980 syz-executor.4 parked
7746 7746 3 1 180 ffff9b001335a540 syz-executor.5 parked
10823 10823 3 1 180 ffff9b001338ba00 syz-executor.5 parked
9766 9766 3 1 180 ffff9b00140c9200 syz-executor.5 parked
9436 9436 3 1 180 ffff9b0012ce1180 syz-executor.2 parked
10544 10544 3 1 180 ffff9b001343abc0 syz-executor.0 parked
9916 9916 3 1 180 ffff9b00145d4580 syz-executor.0 parked
9096 9096 3 1 180 ffff9b0012d18680 syz-executor.0 parked
7766 7766 3 1 180 ffff9b0012d332c0 syz-executor.3 parked
7148 7148 3 1 180 ffff9b0014671680 syz-executor.2 parked
6140 6140 3 1 180 ffff9b0013e36bc0 syz-executor.1 parked
5955 5955 3 1 180 ffff9b001343a780 syz-executor.3 parked
4672 4672 3 1 180 ffff9b001336e140 syz-executor.2 parked
6035 6035 3 1 180 ffff9b00142ea500 syz-executor.1 parked
7474 7474 3 1 180 ffff9b0013464100 syz-executor.3 parked
6046 6046 3 1 180 ffff9b0014612600 syz-executor.2 parked
6982 6982 3 1 180 ffff9b001342f740 syz-executor.1 parked
5879 5879 3 1 180 ffff9b0013cce1c0 syz-executor.2 parked
5697 5697 3 1 180 ffff9b00145ea180 syz-executor.0 parked
5875 5875 3 1 180 ffff9b0012bed640 syz-executor.1 parked
6603 6603 3 1 180 ffff9b0012c176c0 syz-executor.2 parked
5627 5627 3 1 180 ffff9b0014144280 syz-executor.0 parked
6741 6741 3 1 180 ffff9b0013499a00 syz-executor.1 parked
5795 5795 3 1 180 ffff9b0013444040 syz-executor.2 parked
5622 5622 3 1 180 ffff9b00141446c0 syz-executor.1 parked
6839 6839 3 1 180 ffff9b0012b869c0 syz-executor.0 parked
5761 5761 3 1 180 ffff9b0013330500 syz-executor.2 parked
7248 7248 3 1 180 ffff9b0012d92480 syz-executor.1 parked
4601 4601 3 1 180 ffff9b001428a780 syz-executor.2 parked
1430 1430 3 1 180 ffff9b0012bd4600 syz-executor.4 parked
1419 1419 3 1 180 ffff9b00133300c0 syz-executor.4 parked
1424 1424 3 1 180 ffff9b001343a340 syz-executor.1 parked
2738 2738 3 1 180 ffff9b0014296040 syz-executor.3 parked
1899 1899 3 1 180 ffff9b00126db780 syz-executor.3 parked
2736 2736 3 1 180 ffff9b0013ef64c0 syz-executor.1 parked
1278 1278 3 1 180 ffff9b001425a740 syz-executor.3 parked
1249 1249 3 1 180 ffff9b0012d7abc0 syz-executor.0 parked
1376 1376 3 1 180 ffff9b001344f900 syz-executor.1 parked
1988 1988 3 1 180 ffff9b00142352c0 syz-executor.0 parked
1835 1835 3 1 180 ffff9b0012ac90c0 syz-executor.0 parked
1175 1175 3 1 180 ffff9b0012aa5080 syz-executor.0 parked
2153 2153 3 1 180 ffff9b0012d18240 syz-executor.4 parked
2533 2533 3 1 180 ffff9b00133c2680 syz-executor.2 parked
752 752 3 1 180 ffff9b0012d23280 syz-executor.0 parked
738 738 3 1 180 ffff9b00140c9640 syz-executor.2 parked
2024 2024 3 1 180 ffff9b0012c71bc0 syz-executor.0 parked
1626 1626 3 1 180 ffff9b0012a0a300 syz-executor.0 parked
1741 1741 3 1 180 ffff9b0012bfeac0 syz-executor.4 parked
1234 1234 3 1 180 ffff9b0012c23b40 syz-executor.4 parked
1718 1718 3 1 180 ffff9b0012c17b00 syz-executor.2 parked
1612 1612 3 1 180 ffff9b001338b180 syz-executor.4 parked
1961 1961 3 1 180 ffff9b001400c1c0 syz-executor.5 parked
674 674 3 1 180 ffff9b0013fd3a00 syz-executor.2 parked
397 397 3 1 180 ffff9b0012a3bbc0 syz-executor.2 parked
396 396 3 1 180 ffff9b0012a3b780 syz-executor.5 parked
384 384 3 1 180 ffff9b0013fae140 syz-executor.2 parked
1722 1722 3 1 180 ffff9b0013444480 syz-executor.5 parked
1585 1585 3 1 180 ffff9b00133db280 syz-executor.5 parked
1587 1587 3 1 180 ffff9b0013f4c0c0 syz-executor.2 parked
1407 1407 3 1 180 ffff9b0012cc7540 syz-executor.2 parked
1639 1639 3 1 180 ffff9b0012cf8600 syz-executor.2 parked
1577 1577 3 1 180 ffff9b0013ef6900 syz-executor.5 parked
1077 1077 3 1 180 ffff9b0013ef6080 syz-executor.5 parked
1197 1197 3 1 180 ffff9b0012bb55c0 syz-executor.5 parked
1224 11102 3 0 180 ffff9b00142d2080 syz-fuzzer kqueue
1224 812 3 0 1c0 ffff9b0013e87040 syz-fuzzer wait
1224 1384 3 1 180 ffff9b0012aa54c0 syz-fuzzer parked
1224 1242 3 0 1c0 ffff9b0013db1280 syz-fuzzer parked
1224 828 3 1 180 ffff9b0013d4e680 syz-fuzzer parked
1224 1235 3 1 1c0 ffff9b0013d1c640 syz-fuzzer wait
1224 1240 3 1 180 ffff9b0013d1c200 syz-fuzzer wait
1224 991 3 1 180 ffff9b001338b5c0 syz-fuzzer wait
1224 1223 3 0 180 ffff9b0012d33b40 syz-fuzzer parked
1224 1230 3 1 180 ffff9b0012d33700 syz-fuzzer parked
1224 1222 3 1 1c0 ffff9b00133a8a40 syz-fuzzer wait
1224 1228 3 1 180 ffff9b00133b5a80 syz-fuzzer parked
1224 1225 3 1 1c0 ffff9b00133b5640 syz-fuzzer parked
1224 1078 3 0 180 ffff9b001342fb80 syz-fuzzer parked
1224 1224 3 1 10000180 ffff9b0012a5d480 syz-fuzzer wait
1108 1108 3 0 180 ffff9b0012a5d8c0 sshd select
1081 1081 3 1 180 ffff9b001345c940 getty nanoslp
1086 1086 3 1 180 ffff9b00126dc480 getty nanoslp
987 987 3 0 180 ffff9b0013481580 getty nanoslp
1079 1079 3 1 1c0 ffff9b0013499180 getty ttyraw
1101 1101 3 1 180 ffff9b00133a8600 sshd select
1056 1056 3 1 180 ffff9b0012d236c0 powerd kqueue
692 692 3 0 180 ffff9b00133db6c0 syslogd kqueue
547 547 3 1 180 ffff9b0012c57b80 dhcpcd poll
742 742 3 1 180 ffff9b0012c9b900 dhcpcd poll
465 465 3 0 180 ffff9b0012c57740 dhcpcd poll
594 594 3 1 180 ffff9b0012c57300 dhcpcd poll
292 292 3 1 180 ffff9b0012db14c0 dhcpcd poll
290 290 3 1 180 ffff9b0012db1080 dhcpcd poll
289 289 3 1 180 ffff9b0012d928c0 dhcpcd poll
1 1 3 1 180 ffff9b0012864180 init wait
0 4820 5 0 200 ffff9b0014df6a40 (zombie)
0 27863 3 1 200 ffff9b0014de95c0 acctwatch actwat
0 27706 3 1 200 ffff9b0012c8a480 ktrace ktrwait
0 24537 3 1 200 ffff9b0013d1ca80 ktrace ktrwait
0 19861 3 0 200 ffff9b0012ce1a00 ktrace ktrwait
0 19045 3 1 200 ffff9b00146121c0 ktrace ktrwait
0 9950 3 1 200 ffff9b00145d4140 ktrace ktrwait
0 2289 3 1 200 ffff9b00133dbb00 ktrace ktrwait
0 2911 3 1 200 ffff9b0013f7f100 ktrace ktrwait
0 939 3 1 200 ffff9b001298c280 physiod physiod
0 195 3 1 200 ffff9b001298e2c0 pooldrain pooldrain
0 194 3 0 200 ffff9b001298cb00 ioflush syncer
0 193 3 1 200 ffff9b001298c6c0 pgdaemon pgdaemon
0 172 3 1 200 ffff9b0012962680 usb7 usbevt
0 170 3 1 200 ffff9b0012962240 usb6 usbevt
0 168 3 1 200 ffff9b0012918a80 usb5 usbevt
0 166 3 1 200 ffff9b0012918640 usb4 usbevt
0 165 3 1 200 ffff9b0012918200 usb3 usbevt
0 31 3 1 200 ffff9b00128cca40 usb2 usbevt
0 63 3 1 200 ffff9b00128cc600 usb1 usbevt
0 126 3 1 200 ffff9b00128cc1c0 usb0 usbevt
0 125 3 1 200 ffff9b0012864a00 usbtask-dr usbtsk
0 124 3 1 200 ffff9b0010d76b00 usbtask-hc usbtsk
0 123 3 1 200 ffff9b00128645c0 npfgc0 npfgcw
0 122 3 1 200 ffff9b00128559c0 rt_free rt_free
0 121 3 1 200 ffff9b0012855580 unpgc unpgc
0 120 3 0 200 ffff9b0012855140 key_timehandler key_timehandler
0 119 3 1 200 ffff9b001270a980 icmp6_wqinput/1 icmp6_wqinput
0 118 3 0 200 ffff9b001270a540 icmp6_wqinput/0 icmp6_wqinput
0 117 3 0 200 ffff9b001270a100 nd6_timer nd6_timer
0 116 3 1 200 ffff9b0012700940 carp6_wqinput/1 carp6_wqinput
0 115 3 0 200 ffff9b0012700500 carp6_wqinput/0 carp6_wqinput
0 114 3 1 200 ffff9b00127000c0 carp_wqinput/1 carp_wqinput
0 113 3 0 200 ffff9b00126f3900 carp_wqinput/0 carp_wqinput
0 112 3 1 200 ffff9b00126f34c0 icmp_wqinput/1 icmp_wqinput
0 111 3 0 200 ffff9b00126f3080 icmp_wqinput/0 icmp_wqinput
0 110 3 0 200 ffff9b00126dc8c0 rt_timer rt_timer
0 109 3 0 200 ffff9b00126dc040 vmem_rehash vmem_rehash
0 100 3 0 200 ffff9b00126d8300 entbutler entropy
0 99 3 1 200 ffff9b00120bcb40 viomb balloon
0 98 3 1 200 ffff9b00120bc700 vioif0_txrx/1 vioif0_txrx
0 97 3 0 200 ffff9b00120bc2c0 vioif0_txrx/0 vioif0_txrx
0 30 3 1 200 ffff9b0010d766c0 scsibus0 sccomp
0 29 3 1 200 ffff9b0010d76280 pms0 pmsreset
0 28 3 1 200 ffff9b0010cbcac0 xcall/1 xcall
0 27 1 1 200 ffff9b0010cbc680 softser/1
0 26 1 1 200 ffff9b0010cbc240 softclk/1
0 25 1 1 200 ffff9b0010cb9a80 softbio/1
0 24 1 1 200 ffff9b0010cb9640 softnet/1
0 23 1 1 201 ffff9b0010cb9200 idle/1
0 22 3 1 200 ffff9b000fb57a40 lnxsyswq lnxsyswq
0 21 3 1 200 ffff9b000fb57600 lnxubdwq lnxubdwq
0 20 3 1 200 ffff9b000fb571c0 lnxpwrwq lnxpwrwq
0 19 3 1 200 ffff9b000fb56a00 lnxlngwq lnxlngwq
0 18 3 1 200 ffff9b000fb565c0 lnxhipwq lnxhipwq
0 17 3 1 200 ffff9b000fb56180 lnxrcugc lnxrcugc
0 16 3 1 200 ffff9b000fb4f9c0 sysmon smtaskq
0 15 3 1 200 ffff9b000fb4f580 pmfsuspend pmfsuspend
0 14 3 1 200 ffff9b000fb4f140 pmfevent pmfevent
0 13 3 1 200 ffff9b000fb4a980 sopendfree sopendfr
0 12 3 1 200 ffff9b000fb4a540 ifwdog ifwdog
0 11 3 1 200 ffff9b000fb4a100 iflnkst iflnkst
0 10 3 1 200 ffff9b000fb3d940 nfssilly nfssilly
0 9 3 1 200 ffff9b000fb3d500 vdrain vdrain
0 8 3 1 200 ffff9b000fb3d0c0 modunload mod_unld
0 7 3 0 200 ffff9b000fb34900 xcall/0 xcall
0 6 1 0 200 ffff9b000fb344c0 softser/0
0 > 5 7 0 200 ffff9b000fb34080 softclk/0
0 4 1 0 200 ffff9b000fb328c0 softbio/0
0 3 1 0 200 ffff9b000fb32480 softnet/0
0 2 1 0 201 ffff9b000fb32040 idle/0
0 0 3 0 200 ffffffff83344480 swapper uvm
[Locks tracked through LWPs]

****** LWP 9686.9686 (syz-executor.0) @ 0xffff9b001345c0c0, l_stat=2

*** Locks held:

* Lock 0 (initialized at netbsd:amap_ctor+0x39 sys/uvm/uvm_amap.c:265)
lock address : ffff9b0014d38300
type : sleep/adaptive
initialized : netbsd:amap_ctor+0x39
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffff9b001345c0c0 last held: 0xffff9b001345c0c0
last locked* : netbsd:uvm_fault_internal+0x88a
unlocked : netbsd:uvm_fault_upper_enter+0x366
owner/count : 000000000000000000 flags : 000000000000000000
Turnstile: no active turnstile for this lock.

* Lock 1 (initialized at netbsd:pmap_ctor+0x93 sys/arch/x86/x86/pmap.c:2857)
lock address : ffff9b001342df80
type : sleep/adaptive
initialized : netbsd:pmap_ctor+0x93
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffff9b001345c0c0 last held: 0xffff9b001345c0c0
last locked* : netbsd:pmap_extract+0xde
unlocked : netbsd:pmap_enter_ma+0xd63
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

*** Locks wanted: none

****** LWP 742.742 (dhcpcd) @ 0xffff9b0012c9b900, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:module_hook_init+0x1c sys/kern/kern_module_hook.c:132)
lock address : netbsd:module_hook
type : sleep/adaptive
initialized : netbsd:module_hook_init+0x1c
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 0
relevant lwp : 0xffff9b0012c9b900 last held: 000000000000000000
last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 465.465 (dhcpcd) @ 0xffff9b0012c57740, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:module_hook_init+0x1c sys/kern/kern_module_hook.c:132)
lock address : netbsd:module_hook
type : sleep/adaptive
initialized : netbsd:module_hook_init+0x1c
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffff9b0012c57740 last held: 000000000000000000
last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 290.290 (dhcpcd) @ 0xffff9b0012db1080, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:module_hook_init+0x1c sys/kern/kern_module_hook.c:132)
lock address : netbsd:module_hook
type : sleep/adaptive
initialized : netbsd:module_hook_init+0x1c
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 0
relevant lwp : 0xffff9b0012db1080 last held: 000000000000000000
last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 289.289 (dhcpcd) @ 0xffff9b0012d928c0, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:module_hook_init+0x1c sys/kern/kern_module_hook.c:132)
lock address : netbsd:module_hook
type : sleep/adaptive
initialized : netbsd:module_hook_init+0x1c
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 0
relevant lwp : 0xffff9b0012d928c0 last held: 000000000000000000
last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 0.26 (softclk/1) @ 0xffff9b0010cbc240, l_stat=1

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:module_hook_init+0x1c sys/kern/kern_module_hook.c:132)
lock address : netbsd:module_hook
type : sleep/adaptive
initialized : netbsd:module_hook_init+0x1c
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 0
relevant lwp : 0xffff9b0010cbc240 last held: 000000000000000000
last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 0.11 (iflnkst) @ 0xffff9b000fb4a100, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:module_hook_init+0x1c sys/kern/kern_module_hook.c:132)
lock address : netbsd:module_hook
type : sleep/adaptive
initialized : netbsd:module_hook_init+0x1c
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 0
relevant lwp : 0xffff9b000fb4a100 last held: 000000000000000000
last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 0.0 (swapper) @ 0xffffffff83344480, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:module_hook_init+0x1c sys/kern/kern_module_hook.c:132)
lock address : netbsd:module_hook
type : sleep/adaptive
initialized : netbsd:module_hook_init+0x1c
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffffffff83344480 last held: 000000000000000000
last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

[Locks tracked through CPUs]

******* Locks held on cpu1:

* Lock 0 (initialized at netbsd:main+0x12e sys/kern/init_main.c:303)
lock address : netbsd:kernel_lock
type : spin
initialized : netbsd:main+0x12e
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 1
relevant lwp : 0xffff9b0014c32980 last held: 0xffff9b0014c32980
last locked* : netbsd:cdev_ioctl+0x1be
unlocked : netbsd:intr_biglock_wrapper+0xa3
curcpu holds : 1 wanted by: 000000000000000000

* Lock 1 (initialized at netbsd:kprintf_init+0x61 sys/kern/subr_prf.c:157)
lock address : netbsd:kprintf_mtx
type : spin
initialized : netbsd:kprintf_init+0x61
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 1
relevant lwp : 0xffff9b0014c32980 last held: 0xffff9b0014c32980
last locked* : netbsd:kprintf_lock+0x33
unlocked : netbsd:kprintf_unlock+0x53
owner field : 0x0000000000000800 wait/spin: 0/1

PAGE FLAG PQ UOBJECT UANON
0xffff9b0000017180 0041 00000000 0x0 0x0
0xffff9b0000017200 0041 00000000 0x0 0x0
0xffff9b0000017280 0041 00000000 0x0 0x0
0xffff9b0000017300 0041 00000000 0x0 0x0
0xffff9b0000017380 0041 00000000 0x0 0x0
0xffff9b0000017400 0041 00000000 0x0 0x0
0xffff9b0000017480 0041 00000000 0x0 0x0
0xffff9b0000017500 0041 00000000 0x0 0x0
0xffff9b0000017580 0041 00000000 0x0 0x0
0xffff9b0000017600 0041 00000000 0x0 0x0
0xffff9b0000017680 0041 00000000 0x0 0x0
0xffff9b0000017700 0041 00000000 0x0 0x0
0xffff9b0000017780 0041 00000000 0x0 0x0
0xffff9b0000017800 0041 00000000 0x0 0x0
0xffff9b0000017880 0041 00000000 0x0 0x0
0xffff9b0000017900 0041 00000000 0x0 0x0
0xffff9b0000017980 0041 00000000 0x0 0x0
0xffff9b0000017a00 0041 00000000 0x0 0x0
0xffff9b0000017a80 0041 00000000 0x0 0x0
0xffff9b0000017b00 0041 00000000 0x0 0x0
0xffff9b0000017b80 0041 00000000 0x0 0x0
0xffff9b0000017c00 0041 00000000 0x0 0x0
0xffff9b0000017c80 0041 00000000 0x0 0x0
0xffff9b0000017d00 0041 00000000 0x0 0x0
0xffff9b0000017d80 0041 00000000 0x0 0x0
0xffff9b0000017e00 0041 00000000 0x0 0x0
0xffff9b0000017e80 0041 00000000 0x0 0x0
0xffff9b0000017f00 0041 00000000 0x0 0x0
0xffff9b0000017f80 0041 00000000 0x0 0x0
0xffff9b0000018000 0041 00000000 0x0 0x0
0xffff9b0000018080 0041 00000000 0x0 0x0
0xffff9b0000018100 0041 00000000 0x0 0x0
0xffff9b0000018180 0041 00000000 0x0 0x0
0xffff9b0000018200 0041 00000000 0x0 0x0
0xffff9b0000018280 0041 00000000 0x0 0x0
0xffff9b0000018300 0041 00000000 0x0 0x0
0xffff9b0000018380 0041 00000000 0x0 0x0
0xffff9b0000018400 0041 00000000 0x0 0x0
0xffff9b0000018480 0041 00000000 0x0 0x0
0xffff9b0000018500 0041 00000000 0x0 0x0
0xffff9b0000018580 0041 00000000 0x0 0x0
0xffff9b0000018600 0041 00000000 0x0 0x0
0xffff9b0000018680 0041 00000000 0x0 0x0
0xffff9b0000018700 0041 00000000 0x0 0x0
0xffff9b0000018780 0041 00000000 0x0 0x0
0xffff9b0000018800 0041 00000000 0x0 0x0
0xffff9b0000018880 0041 00000000 0x0 0x0
0xffff9b0000018900 0041 00000000 0x0 0x0
0xffff9b0000018980 0041 00000000 0x0 0x0
0xffff9b0000018a00 0041 00000000 0x0 0x0
0xffff9b0000018a80 0041 00000000 0x0 0x0
0xffff9b0000018b00 0041 00000000 0x0 0x0
0xffff9b0000018b80 0041 00000000 0x0 0x0
0xffff9b0000018c00 0041 00000000 0x0 0x0
0xffff9b0000018c80 0041 00000000 0x0 0x0
0xffff9b0000018d00 0041 00000000 0x0 0x0
0xffff9b0000018d80 0041 00000000 0x0 0x0
0xffff9b0000018e00 0041 00000000 0x0 0x0
0xffff9b0000018e80 0041 00000000 0x0 0x0
0xffff9b0000018f00 0041 00000000 0x0 0x0
0xffff9b0000018f80 0041 00000000 0x0 0x0
0xffff9b0000019000 0041 00000000 0x0 0x0
0xffff9b0000019080 0041 00000000 0x0 0x0
0xffff9b0000019100 0041 00000000 0x0 0x0
0xffff9b0000019180 0041 00000000 0x0 0x0
0xffff9b0000019200 0041 00000000 0x0 0x0
0xffff9b0000019280 0041 00000000 0x0 0x0
0xffff9b0000019300 0041 00000000 0x0 0x0
0xffff9b0000019380 0041 00000000 0x0 0x0
0xffff9b0000019400 0041 00000000 0x0 0x0
0xffff9b0000019480 0041 00000000 0x0 0x0
0xffff9b0000019500 0041 00000000 0x0 0x0
0xffff9b0000019580 0041 00000000 0x0 0x0
0xffff9b0000019600 0041 00000000 0x0 0x0
0xffff9b0000019680 0041 00000000 0x0 0x0
0xffff9b0000019700 0041 00000000 0x0 0x0
0xffff9b0000019780 0041 00000000 0x0 0x0
0xffff9b0000019800 0041 00000000 0x0 0x0
0xffff9b0000019880 0041 00000000 0x0 0x0
0xffff9b0000019900 0041 00000000 0x0 0x0
0xffff9b0000019980 0041 00000000 0x0 0x0
0xffff9b0000019a00 0041 00000000 0x0 0x0
0xffff9b0000019a80 0041 00000000 0x0 0x0
0xffff9b0000019b00 0041 00000000 0x0 0x0
0xffff9b0000019b80 0041 00000000 0x0 0x0
0xffff9b0000019c00 0041 00000000 0x0 0x0
0xffff9b0000019c80 0041 00000000 0x0 0x0
0xffff9b0000019d00 0041 00000000 0x0 0x0
0xffff9b0000019d80 0041 00000000 0x0 0x0
0xffff9b0000019e00 0041 00000000 0x0 0x0
0xffff9b0000019e80 0041 00000000 0x0 0x0
0xffff9b0000019f00 0041 00000000 0x0 0x0
0xffff9b0000019f80 0041 00000000 0x0 0x0
0xffff9b000001a000 0041 00000000 0x0 0x0
0xffff9b000001a080 0041 00000000 0x0 0x0
0xffff9b000001a100 0041 00000000 0x0 0x0
0xffff9b000001a180 0041 00000000 0x0 0x0
0xffff9b000001a200 0041 00000000 0x0 0x0
0xffff9b000001a280 0041 00000000 0x0 0x0
0xffff9b000001a300 0041 00000000 0x0 0x0
0xffff9b000001a380 0041 00000000 0x0 0x0
0xffff9b000001a400 0041 00000000 0x0 0x0
0xffff9b000001a480 0041 00000000 0x0 0x0
0xffff9b000001a500 0041 00000000 0x0 0x0
0xffff9b000001a580 0041 00000000 0x0 0x0
0xffff9b000001a600 0041 00000000 0x0 0x0
0xffff9b000001a680 0041 00000000 0x0 0x0
0xffff9b000001a700 0041 00000000 0x0 0x0
0xffff9b000001a780 0041 00000000 0x0 0x0
0xffff9b000001a800 0041 00000000 0x0 0x0
0xffff9b000001a880 0041 00000000 0x0 0x0
0xffff9b000001a900 0041 00000000 0x0 0x0
0xffff9b000001a980 0041 00000000 0x0 0x0
0xffff9b000001aa00 0041 00000000 0x0 0x0
0xffff9b000001aa80 0041 00000000 0x0 0x0
0xffff9b000001ab00 0041 00000000 0x0 0x0
0xffff9b000001ab80 0041 00000000 0x0 0x0
0xffff9b000001ac00 0041 00000000 0x0 0x0
0xffff9b000001ac80 0041 00000000 0x0 0x0
0xffff9b000001ad00 0041 00000000 0x0 0x0
0xffff9b000001ad80 0041 00000000 0x0 0x0
0xffff9b000001ae00 0041 00000000 0x0 0x0
0xffff9b000001ae80 0041 00000000 0x0 0x0
0xffff9b000001af00 0041 00000000 0x0 0x0
0xffff9b000001af80 0041 00000000 0x0 0x0
0xffff9b000001b000 0041 00000000 0x0 0x0
0xffff9b000001b080 0041 00000000 0x0 0x0
0xffff9b000001b100 0041 00000000 0x0 0x0
0xffff9b000001b180 0041 00000000 0x0 0x0
0xffff9b000001b200 0041 00000000 0x0 0x0
0xffff9b000001b280 0041 00000000 0x0 0x0
0xffff9b000001b300 0041 00000000 0x0 0x0
0xffff9b000001b380 0041 00000000 0x0 0x0
0xffff9b000001b400 0041 00000000 0x0 0x0
0xffff9b000001b480 0041 00000000 0x0 0x0
0xffff9b000001b500 0041 00000000 0x0 0x0
0xffff9b000001b580 0041 00000000 0x0 0x0
0xffff9b000001b600 0041 00000000 0x0 0x0
0xffff9b000001b680 0041 00000000 0x0 0x0
0xffff9b000001b700 0041 00000000 0x0 0x0
0xffff9b000001b780 0041 00000000 0x0 0x0
0xffff9b000001b800 0041 00000000 0x0 0x0
0xffff9b000001b880 0041 00000000 0x0 0x0
0xffff9b000001b900 0041 00000000 0x0 0x0
0xffff9b000001b980 0041 00000000 0x0 0x0
0xffff9b000001ba00 0041 00000000 0x0 0x0
0xffff9b000001ba80 0041 00000000 0x0 0x0
0xffff9b000001bb00 0001 00000000 0x0 0x0
0xffff9b000001bb80 0001 00000000 0x0 0x0
0xffff9b000001bc00 0001 00000000 0x0 0x0
0xffff9b000001bc80 0001 00000000 0x0 0x0
0xffff9b000001bd00 0001 00000000 0x0 0x0
0xffff9b000001bd80 0001 00000000 0x0 0x0
0xffff9b000001be00 0001 00000000 0x0 0x0
0xffff9b000001be80 0001 00000000 0x0 0x0
0xffff9b000001bf00 0001 00000000 0x0 0x0
0xffff9b000001bf80 0001 00000000 0x0 0x0
0xffff9b000001c000 0001 00000000 0x0 0x0
0xffff9b000001c080 0001 00000000 0x0 0x0
0xffff9b000001c100 0001 00000000 0x0 0x0
0xffff9b000001c180 0001 00000000 0x0 0x0
0xffff9b000001c200 0001 00000000 0x0 0x0
0xffff9b000001c280 0001 00000000 0x0 0x0
0xffff9b000001c300 0001 00000000 0x0 0x0
0xffff9b000001c380 0001 00000000 0x0 0x0
0xffff9b000001c400 0001 00000000 0x0 0x0
0xffff9b000001c480 0001 00000000 0x0 0x0
0xffff9b000001c500 0001 00000000 0x0 0x0
0xffff9b000001c580 0001 00000000 0x0 0x0
0xffff9b000001c600 0001 00000000 0x0 0x0
0xffff9b000001c680 0001 00000000 0x0 0x0
0xffff9b000001c700 0001 00000000 0x0 0x0
0xffff9b000001c780 0001 00000000 0x0 0x0
0xffff9b000001c800 0001 00000000 0x0 0x0
0xffff9b000001c880 0001 00000000 0x0 0x0
0xffff9b000001c900 0001 00000000 0x0 0x0
0xffff9b000001c980 0001 00000000 0x0 0x0
0xffff9b000001ca00 0001 00000000 0x0 0x0
0xffff9b000001ca80 0001 00000000 0x0 0x0
0xffff9b000001cb00 0001 00000000 0x0 0x0
0xffff9b000001cb80 0001 00000000 0x0 0x0
0xffff9b000001cc00 0001 00000000 0x0 0x0
0xffff9b000001cc80 0001 00000000 0x0 0x0
0xffff9b000001cd00 0001 00000000 0x0 0x0
0xffff9b000001cd80 0001 00000000 0x0 0x0
0xffff9b000001ce00 0001 00000000 0x0 0x0
0xffff9b000001ce80 0001 00000000 0x0 0x0
0xffff9b000001cf00 0001 00000000 0x0 0x0
0xffff9b000001cf80 0001 00000000 0x0 0x0
0xffff9b000001d000 0001 00000000 0x0 0x0
0xffff9b000001d080 0001 00000000 0x0 0x0
0xffff9b000001d100 0001 00000000 0x0 0x0
0xffff9b000001d180 0001 00000000 0x0 0x0
0xffff9b000001d200 0001 00000000 0x0 0x0
0xffff9b000001d280 0001 00000000 0x0 0x0
0xffff9b000001d300 0001 00000000 0x0 0x0
0xffff9b000001d380 0001 00000000 0x0 0x0
0xffff9b000001d400 0001 00000000 0x0 0x0
0xffff9b000001d480 0001 00000000 0x0 0x0
0xffff9b000001d500 0001 00000000 0x0 0x0
0xffff9b000001d580 0001 00000000 0x0 0x0
0xffff9b000001d600 0001 00000000 0x0 0x0
0xffff9b000001d680 0001 00000000 0x0 0x0
0xffff9b000001d700 0001 00000000 0x0 0x0
0xffff9b000001d780 0001 00000000 0x0 0x0
0xffff9b000001d800 0001 00000000 0x0 0x0
0xffff9b000001d880 0001 00000000 0x0 0x0
0xffff9b000001d900 0001 00000000 0x0 0x0
0xffff9b000001d980 0001 00000000 0x0 0x0
0xffff9b000001da00 0001 00000000 0x0 0x0
0xffff9b000001da80 0001 00000000 0x0 0x0
0xffff9b000001db00 0001 00000000 0x0 0x0
0xffff9b000001db80 0001 00000000 0x0 0x0
0xffff9b000001dc00 0001 00000000 0x0 0x0
0xffff9b000001dc80 0001 00000000 0x0 0x0
0xffff9b000001dd00 0001 00000000 0x0 0x0
0xffff9b000001dd80 0001 00000000 0x0 0x0
0xffff9b000001de00 0001 00000000 0x0 0x0
0xffff9b000001de80 0001 00000000 0x0 0x0
0xffff9b000001df00 0001 00000000 0x0 0x0
0xffff9b000001df80 0001 00000000 0x0 0x0
0xffff9b000001e000 0001 00000000 0x0 0x0
0xffff9b000001e080 0001 00000000 0x0 0x0
0xffff9b000001e100 0001 00000000 0x0 0x0
0xffff9b000001e180 0001 00000000 0x0 0x0
0xffff9b000001e200 0001 00000000 0x0 0x0
0xffff9b000001e280 0001 00000000 0x0 0x0
0xffff9b000001e300 0001 00000000 0x0 0x0
0xffff9b000001e380 0001 00000000 0x0 0x0
0xffff9b000001e400 0001 00000000 0x0 0x0
0xffff9b000001e480 0001 00000000 0x0 0x0
0xffff9b000001e500 0001 00000000 0x0 0x0
0xffff9b000001e580 0001 00000000 0x0 0x0
0xffff9b000001e600 0001 00000000 0x0 0x0
0xffff9b000001e680 0001 00000000 0x0 0x0
0xffff9b000001e700 0001 00000000 0x0 0x0
0xffff9b000001e780 0001 00000000 0x0 0x0
0xffff9b000001e800 0001 00000000 0x0 0x0
0xffff9b000001e880 0001 00000000 0x0 0x0
0xffff9b000001e900 0001 00000000 0x0 0x0
0xffff9b000001e980 0001 00000000 0x0 0x0
0xffff9b000001ea00 0001 00000000 0x0 0x0
0xffff9b000001ea80 0001 00000000 0x0 0x0
0xffff9b000001eb00 0001 00000000 0x0 0x0
0xffff9b000001eb80 0001 00000000 0x0 0x0
0xffff9b000001ec00 0001 00000000 0x0 0x0
0xffff9b000001ec80 0001 00000000 0x0 0x0
0xffff9b000001ed00 0001 00000000 0x0 0x0
0xffff9b000001ed80 0001 00000000 0x0 0x0
0xffff9b000001ee00 0001 00000000 0x0 0x0
0xffff9b000001ee80 0001 00000000 0x0 0x0
0xffff9b000001ef00 0001 00000000 0x0 0x0
0xffff9b000001ef80 0001 00000000 0x0 0x0
0xffff9b000001f000 0001 00000000 0x0 0x0
0xffff9b000001f080 0001 00000000 0x0 0x0
0xffff9b000001f100 0001 00000000 0x0 0x0
0xffff9b000001f180 0001 00000000 0x0 0x0
0xffff9b000001f200 0001 00000000 0x0 0x0
0xffff9b000001f280 0001 00000000 0x0 0x0
0xffff9b000001f300 0001 00000000 0x0 0x0
0xffff9b000001f380 0001 00000000 0x0 0x0
0xffff9b000001f400 0001 00000000 0x0 0x0
0xffff9b000001f480 0001 00000000 0x0 0x0
0xffff9b000001f500 0001 00000000 0x0 0x0
0xffff9b000001f580 0001 00000000 0x0 0x0
0xffff9b000001f600 0001 00000000 0x0 0x0
0xffff9b000001f680 0001 00000000 0x0 0x0
0xffff9b000001f700 0001 00000000 0x0 0x0
0xffff9b000001f780 0001 00000000 0x0 0x0
0xffff9b000001f800 0001 00000000 0x0 0x0
0xffff9b000001f880 0001 00000000 0x0 0x0
0xffff9b000001f900 0001 00000000 0x0 0x0
0xffff9b000001f980 0001 00000000 0x0 0x0
0xffff9b000001fa00 0001 00000000 0x0 0x0
0xffff9b000001fa80 0001 00000000 0x0 0x0
0xffff9b000001fb00 0001 00000000 0x0 0x0
0xffff9b000001fb80 0001 00000000 0x0 0x0
0xffff9b000001fc00 0001 00000000 0x0 0x0
0xffff9b000001fc80 0001 00000000 0x0 0x0
0xffff9b000001fd00 0001 00000000 0x0 0x0
0xffff9b000001fd80 0001 00000000 0x0 0x0
0xffff9b000001fe00 0001 00000000 0x0 0x0
0xffff9b000001fe80 0001 00000000 0x0 0x0
0xffff9b000001ff00 0001 00000000 0x0 0x0
0xffff9b000001ff80 0001 00000000 0x0 0x0
0xffff9b0000020000 0001 00000000 0x0 0x0
0xffff9b0000020080 0001 00000000 0x0 0x0
0xffff9b0000020100 0001 00000000 0x0 0x0
0xffff9b0000020180 0001 00000000 0x0 0x0
0xffff9b0000020200 0001 00000000 0x0 0x0
0xffff9b0000020280 0001 00000000 0x0 0x0
0xffff9b0000020300 0001 00000000 0x0 0x0
0xffff9b0000020380 0001 00000000 0x0 0x0
0xffff9b0000020400 0001 00000000 0x0 0x0
0xffff9b0000020480 0001 00000000 0x0 0x0
0xffff9b0000020500 0001 00000000 0x0 0x0
0xffff9b0000020580 0001 00000000 0x0 0x0
0xffff9b0000020600 0001 00000000 0x0 0x0
0xffff9b0000020680 0001 00000000 0x0 0x0
0xffff9b0000020700 0001 00000000 0x0 0x0
0xffff9b0000020780 0001 00000000 0x0 0x0
0xffff9b0000020800 0001 00000000 0x0 0x0
0xffff9b0000020880 0001 00000000 0x0 0x0
0xffff9b0000020900 0001 00000000 0x0 0x0
0xffff9b0000020980 0001 00000000 0x0 0x0
0xffff9b0000020a00 0001 00000000 0x0 0x0
0xffff9b0000020a80 0001 00000000 0x0 0x0
0xffff9b0000020b00 0001 00000000 0x0 0x0
0xffff9b0000020b80 0001 00000000 0x0 0x0
0xffff9b0000020c00 0001 00000000 0x0 0x0
0xffff9b0000020c80 0001 00000000 0x0 0x0
0xffff9b0000020d00 0001 00000000 0x0 0x0
0xffff9b0000020d80 0001 00000000 0x0 0x0
0xffff9b0000020e00 0001 00000000 0x0 0x0
0xffff9b0000020e80 0001 00000000 0x0 0x0
0xffff9b0000020f00 0001 00000000 0x0 0x0
0xffff9b0000020f80 0001 00000000 0x0 0x0
0xffff9b0000021000 0001 00000000 0x0 0x0
0xffff9b0000021080 0001 00000000 0x0 0x0
0xffff9b0000021100 0001 00000000 0x0 0x0
0xffff9b0000021180 0001 00000000 0x0 0x0
0xffff9b0000021200 0001 00000000 0x0 0x0
0xffff9b0000021280 0001 00000000 0x0 0x0
0xffff9b0000021300 0001 00000000 0x0 0x0
0xffff9b0000021380 0001 00000000 0x0 0x0
0xffff9b0000021400 0001 00000000 0x0 0x0
0xffff9b0000021480 0001 00000000 0x0 0x0
0xffff9b0000021500 0001 00000000 0x0 0x0
0xffff9b0000021580 0001 00000000 0x0 0x0
0xffff9b0000021600 0001 00000000 0x0 0x0
0xffff9b0000021680 0001 00000000 0x0 0x0
0xffff9b0000021700 0001 00000000 0x0 0x0
0xffff9b0000021780 0001 00000000 0x0 0x0
0xffff9b0000021800 0001 00000000 0x0 0x0
0xffff9b0000021880 0001 00000000 0x0 0x0
0xffff9b0000021900 0001 00000000 0x0 0x0
0xffff9b0000021980 0001 00000000 0x0 0x0
0xffff9b0000021a00 0001 00000000 0x0 0x0
0xffff9b0000021a80 0001 00000000 0x0 0x0
0xffff9b0000021b00 0001 00000000 0x0 0x0
0xffff9b0000021b80 0001 00000000 0x0 0x0
0xffff9b0000021c00 0001 00000000 0x0 0x0
0xffff9b0000021c80 0001 00000000 0x0 0x0
0xffff9b0000021d00 0001 00000000 0x0 0x0
0xffff9b0000021d80 0001 00000000 0x0 0x0
0xffff9b0000021e00 0001 00000000 0x0 0x0
0xffff9b0000021e80 0001 00000000 0x0 0x0
0xffff9b0000021f00 0001 00000000 0x0 0x0
0xffff9b0000021f80 0001 00000000 0x0 0x0
0xffff9b0000022000 0001 00000000 0x0 0x0
0xffff9b0000022080 0001 00000000 0x0 0x0
0xffff9b0000022100 0001 00000000 0x0 0x0
0xffff9b0000022180 0001 00000000 0x0 0x0
0xffff9b0000022200 0001 00000000 0x0 0x0
0xffff9b0000022280 0001 00000000 0x0 0x0
0xffff9b0000022300 0001 00000000 0x0 0x0
0xffff9b0000022380 0001 00000000 0x0 0x0
0xffff9b0000022400 0001 00000000 0x0 0x0
0xffff9b0000022480 0001 00000000 0x0 0x0
0xffff9b0000022500 0001 00000000 0x0 0x0
0xffff9b0000022580 0001 00000000 0x0 0x0
0xffff9b0000022600 0001 00000000 0x0 0x0
0xffff9b0000022680 0001 00000000 0x0 0x0
0xffff9b0000022700 0001 00000000 0x0 0x0
0xffff9b0000022780 0001 00000000 0x0 0x0
0xffff9b0000022800 0001 00000000 0x0 0x0
0xffff9b0000022880 0001 00000000 0x0 0x0
0xffff9b0000022900 0001 00000000 0x0 0x0
0xffff9b0000022980 0001 00000000 0x0 0x0
0xffff9b0000022a00 0001 00000000 0x0 0x0
0xffff9b0000022a80 0001 00000000 0x0 0x0
0xffff9b0000022b00 0001 00000000 0x0 0x0
0xffff9b0000022b80 0001 00000000 0x0 0x0
0xffff9b0000022c00 0001 00000000 0x0 0x0
0xffff9b0000022c80 0001 00000000 0x0 0x0
0xffff9b0000022d00 0001 00000000 0x0 0x0
0xffff9b0000022d80 0001 00000000 0x0 0x0
0xffff9b0000022e00 0001 00000000 0x0 0x0
0xffff9b0000022e80 0001 00000000 0x0 0x0
0xffff9b0000022f00 0001 00000000 0x0 0x0
0xffff9b0000022f80 0001 00000000 0x0 0x0
0xffff9b0000023000 0001 00000000 0x0 0x0
0xffff9b0000023080 0001 00000000 0x0 0x0
0xffff9b0000023100 0001 00000000 0x0 0x0
0xffff9b0000023180 0001 00000000 0x0 0x0
0xffff9b0000023200 0001 00000000 0x0 0x0
0xffff9b0000023280 0001 00000000 0x0 0x0
0xffff9b0000023300 0001 00000000 0x0 0x0
0xffff9b0000023380 0001 00000000 0x0 0x0
0xffff9b0000023400 0001 00000000 0x0 0x0
0xffff9b0000023480 0001 00000000 0x0 0x0
0xffff9b0000023500 0001 00000000 0x0 0x0
0xffff9b0000023580 0001 00000000 0x0 0x0
0xffff9b0000023600 0001 00000000 0x0 0x0
0xffff9b0000023680 0001 00000000 0x0 0x0
0xffff9b0000023700 0001 00000000 0x0 0x0
0xffff9b0000023780 0001 00000000 0x0 0x0
0xffff9b0000023800 0001 00000000 0x0 0x0
0xffff9b0000023880 0001 00000000 0x0 0x0
0xffff9b0000023900 0001 00000000 0x0 0x0
0xffff9b0000023980 0001 00000000 0x0 0x0
0xffff9b0000023a00 0001 00000000 0x0 0x0
0xffff9b0000023a80 0001 00000000 0x0 0x0
0xffff9b0000023b00 0001 00000000 0x0 0x0
0xffff9b0000023b80 0001 00000000 0x0 0x0
0xffff9b0000023c00 0001 00000000 0x0 0x0
0xffff9b0000023c80 0001 00000000 0x0 0x0
0xffff9b0000023d00 0001 00000000 0x0 0x0
0xffff9b0000023d80 0001 00000000 0x0 0x0
0xffff9b0000023e00 0001 00000000 0x0 0x0
0xffff9b0000023e80 0001 00000000 0x0 0x0
0xffff9b0000023f00 0001 00000000 0x0 0x0
0xffff9b0000023f80 0001 00000000 0x0 0x0
0xffff9b0000024000 0001 00000000 0x0 0x0
0xffff9b0000024080 0001 00000000 0x0 0x0
0xffff9b0000024100 0001 00000000 0x0 0x0
0xffff9b0000024180 0001 00000000 0x0 0x0
0xffff9b0000024200 0001 00000000 0x0 0x0
0xffff9b0000024280 0001 00000000 0x0 0x0
0xffff9b0000024300 0001 00000000 0x0 0x0
0xffff9b0000024380 0001 00000000 0x0 0x0
0xffff9b0000024400 0001 00000000 0x0 0x0
0xffff9b0000024480 0001 00000000 0x0 0x0
0xffff9b0000024500 0001 00000000 0x0 0x0
0xffff9b0000024580 0001 00000000 0x0 0x0
0xffff9b0000024600 0001 00000000 0x0 0x0
0xffff9b0000024680 0001 00000000 0x0 0x0
0xffff9b0000024700 0001 00000000 0x0 0x0
0xffff9b0000024780 0001 00000000 0x0 0x0
0xffff9b0000024800 0001 00000000 0x0 0x0
0xffff9b0000024880 0001 00000000 0x0 0x0
0xffff9b0000024900 0001 00000000 0x0 0x0
0xffff9b0000024980 0001 00000000 0x0 0x0
0xffff9b0000024a00 0001 00000000 0x0 0x0
0xffff9b0000024a80 0001 00000000 0x0 0x0
0xffff9b0000024b00 0001 00000000 0x0 0x0
0xffff9b0000024b80 0001 00000000 0x0 0x0
0xffff9b0000024c00 0001 00000000 0x0 0x0
0xffff9b0000024c80 0001 00000000 0x0 0x0
0xffff9b0000024d00 0001 00000000 0x0 0x0
0xffff9b0000024d80 0001 00000000 0x0 0x0
0xffff9b0000024e00 0001 00000000 0x0 0x0
0xffff9b0000024e80 0001 00000000 0x0 0x0
0xffff9b0000024f00 0001 00000000 0x0 0x0
0xffff9b0000024f80 0001 00000000 0x0 0x0
0xffff9b0000025000 0001 00000000 0x0 0x0
0xffff9b0000025080 0001 00000000 0x0 0x0
0xffff9b0000025100 0001 00000000 0x0 0x0
0xffff9b0000025180 0001 00000000 0x0 0x0
0xffff9b0000025200 0001 00000000 0x0 0x0
0xffff9b0000025280 0001 00000000 0x0 0x0
0xffff9b0000025300 0001 00000000 0x0 0x0
0xffff9b0000025380 0001 00000000 0x0 0x0
0xffff9b0000025400 0001 00000000 0x0 0x0
0xffff9b0000025480 0001 00000000 0x0 0x0
0xffff9b0000025500 0001 00000000 0x0 0x0
0xffff9b0000025580 0001 00000000 0x0 0x0
0xffff9b0000025600 0001 00000000 0x0 0x0
0xffff9b0000025680 0001 00000000 0x0 0x0
0xffff9b0000025700 0001 00000000 0x0 0x0
0xffff9b0000025780 0001 00000000 0x0 0x0
0xffff9b0000025800 0001 00000000 0x0 0x0
0xffff9b0000025880 0001 00000000 0x0 0x0
0xffff9b0000025900 0001 00000000 0x0 0x0
0xffff9b0000025980 0001 00000000 0x0 0x0
0xffff9b0000025a00 0001 00000000 0x0 0x0
0xffff9b0000025a80 0001 00000000 0x0 0x0
0xffff9b0000025b00 0001 00000000 0x0 0x0
0xffff9b0000025b80 0001 00000000 0x0 0x0
0xffff9b0000025c00 0001 00000000 0x0 0x0
0xffff9b0000025c80 0001 00000000 0x0 0x0
0xffff9b0000025d00 0001 00000000 0x0 0x0
0xffff9b0000025d80 0001 00000000 0x0 0x0
0xffff9b0000025e00 0001 00000000 0x0 0x0
0xffff9b0000025e80 0001 00000000 0x0 0x0
0xffff9b0000025f00 0001 00000000 0x0 0x0
0xffff9b0000025f80 0001 00000000 0x0 0x0
0xffff9b0000026000 0001 00000000 0x0 0x0
0xffff9b0000026080 0001 00000000 0x0 0x0
0xffff9b0000026100 0001 00000000 0x0 0x0
0xffff9b0000026180 0001 00000000 0x0 0x0
0xffff9b0000026200 0001 00000000 0x0 0x0
0xffff9b0000026280 0001 00000000 0x0 0x0
0xffff9b0000026300 0001 00000000 0x0 0x0
0xffff9b0000026380 0001 00000000 0x0 0x0
0xffff9b0000026400 0001 00000000 0x0 0x0
0xffff9b0000026480 0001 00000000 0x0 0x0
0xffff9b0000026500 0001 00000000 0x0 0x0
0xffff9b0000026580 0001 00000000 0x0 0x0
0xffff9b0000026600 0001 00000000 0x0 0x0
0xffff9b0000026680 0001 00000000 0x0 0x0
0xffff9b0000026700 0001 00000000 0x0 0x0
0xffff9b0000026780 0001 00000000 0x0 0x0
0xffff9b0000026800 0001 00000000 0x0 0x0
0xffff9b0000026880 0001 00000000 0x0 0x0
0xffff9b0000026900 0001 00000000 0x0 0x0
0xffff9b0000026980 0001 00000000 0x0 0x0
0xffff9b0000026a00 0001 00000000 0x0 0x0
0xffff9b0000026a80 0001 00000000 0x0 0x0
0xffff9b0000026b00 0001 00000000 0x0 0x0
0xffff9b0000026b80 0001 00000000 0x0 0x0
0xffff9b0000026c00 0001 00000000 0x0 0x0
0xffff9b0000026c80 0001 00000000 0x0 0x0
0xffff9b0000026d00 0001 00000000 0x0 0x0
0xffff9b0000026d80 0001 00000000 0x0 0x0
0xffff9b0000026e00 0001 00000000 0x0 0x0
0xffff9b0000026e80 0001 00000000 0x0 0x0
0xffff9b0000026f00 0001 00000000 0x0 0x0
0xffff9b0000026f80 0001 00000000 0x0 0x0
0xffff9b0000027000 0001 00000000 0x0 0x0
0xffff9b0000027080 0001 00000000 0x0 0x0
0xffff9b0000027100 0001 00000000 0x0 0x0
0xffff9b0000027180 0001 00000000 0x0 0x0
0xffff9b0000027200 0001 00000000 0x0 0x0
0xffff9b0000027280 0001 00000000 0x0 0x0
0xffff9b0000027300 0001 00000000 0x0 0x0
0xffff9b0000027380 0001 00000000 0x0 0x0
0xffff9b0000027400 0001 00000000 0x0 0x0
0xffff9b0000027480 0001 00000000 0x0 0x0
0xffff9b0000027500 0001 00000000 0x0 0x0
0xffff9b0000027580 0001 00000000 0x0 0x0
0xffff9b0000027600 0001 00000000 0x0 0x0
0xffff9b0000027680 0001 00000000 0x0 0x0
0xffff9b0000027700 0001 00000000 0x0 0x0
0xffff9b0000027780 0001 00000000 0x0 0x0
0xffff9b0000027800 0001 00000000 0x0 0x0
0xffff9b0000027880 0001 00000000 0x0 0x0
0xffff9b0000027900 0001 00000000 0x0 0x0
0xffff9b0000027980 0001 00000000 0x0 0x0
0xffff9b0000027a00 0001 00000000 0x0 0x0
0xffff9b0000027a80 0001 00000000 0x0 0x0
0xffff9b0000027b00 0001 00000000 0x0 0x0
0xffff9b0000027b80 0001 00000000 0x0 0x0
0xffff9b0000027c00 0001 00000000 0x0 0x0
0xffff9b0000027c80 0001 00000000 0x0 0x0
0xffff9b0000027d00 0001 00000000 0x0 0x0
0xffff9b0000027d80 0001 00000000 0x0 0x0
0xffff9b0000027e00 0001 00000000 0x0 0x0
0xffff9b0000027e80 0001 00000000 0x0 0x0
0xffff9b0000027f00 0001 00000000 0x0 0x0
0xffff9b0000027f80 0001 00000000 0x0 0x0
0xffff9b0000028000 0001 00000000 0x0 0x0
0xffff9b0000028080 0001 00000000 0x0 0x0
0xffff9b0000028100 0001 00000000 0x0 0x0
0xffff9b0000028180 0001 00000000 0x0 0x0
0xffff9b0000028200 0001 00000000 0x0 0

---
This report is generated by a bot. It may contain errors.
See https://goo.gl/tpsmEJ for more information about syzbot.
syzbot engineers can be reached at syzk...@googlegroups.com.

syzbot will keep track of this issue. See:
https://goo.gl/tpsmEJ#status for how to communicate with syzbot.

syzbot

unread,
Nov 29, 2022, 8:29:30 PM11/29/22
to syzkaller-...@googlegroups.com
Auto-closing this bug as obsolete.
Crashes did not happen for a while, no reproducer and no activity.
Reply all
Reply to author
Forward
0 new messages