UBSan: Undefined Behavior in addupc_task

1 view

Skip to first unread message

syzbot

unread,

Aug 23, 2021, 11:56:34 PM8/23/21

to syzkaller-...@googlegroups.com

Hello,

syzbot found the following issue on:

HEAD commit: 6c9d506c6146 tests/lint: add tests for integer comparisons
git tree: netbsd
console output: https://syzkaller.appspot.com/x/log.txt?x=127c5d05300000
kernel config: https://syzkaller.appspot.com/x/.config?x=1420f906d33d9f1f
dashboard link: https://syzkaller.appspot.com/bug?extid=40fdac2b9ab7f43776f8
compiler: g++ (Debian 10.2.1-6) 10.2.1 20210110

Unfortunately, I don't have any reproducer for this issue yet.

IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+40fdac...@syzkaller.appspotmail.com

[ 229.0592347] panic: UBSan: Undefined Behavior in /syzkaller/managers/ci2-netbsd-kubsan/kernel/sys/kern/subr_prof.c:594:7, pointer expression with base 0xffffffffffffffff overflowed to 0x38505c41

[ 229.0592347] cpu0: Begin traceback...
[ 229.0592347] vpanic() at netbsd:vpanic+0x2d0 sys/kern/subr_prf.c:290
[ 229.0592347] isAlreadyReported() at netbsd:isAlreadyReported
[ 229.0592347] HandlePointerOverflow() at netbsd:HandlePointerOverflow+0xd2 sys/../common/lib/libc/misc/ubsan.c:706
[ 229.0592347] addupc_task() at netbsd:addupc_task+0x42c sys/kern/subr_prof.c:594
[ 229.0592347] trap() at netbsd:trap+0x16e2 sys/arch/amd64/amd64/trap.c:413
[ 229.0592347] --- trap (number 3) ---
[ 229.0592347] 75c25652b30a:
[ 229.0592347] cpu0: End traceback...
[ 229.0592347] fatal breakpoint trap in supervisor mode
[ 229.0592347] trap type 1 code 0 rip 0xffffffff80221a95 cs 0x8 rflags 0x246 cr2 0x7db2ae7089e0 ilevel 0x8 rsp 0xffffd600d455f970
[ 229.0592347] curlwp 0xffffd3803d7cc640 pid 14505.14505 lowest kstack 0xffffd600d455b2c0
Stopped in pid 14505.14505 (syz-executor.3) at netbsd:breakpoint+0x5: leave
?
breakpoint() at netbsd:breakpoint+0x5
db_panic() at netbsd:db_panic+0xec sys/ddb/db_panic.c:68
vpanic() at netbsd:vpanic+0x2d0 sys/kern/subr_prf.c:290
isAlreadyReported() at netbsd:isAlreadyReported
HandlePointerOverflow() at netbsd:HandlePointerOverflow+0xd2 sys/../common/lib/libc/misc/ubsan.c:706
addupc_task() at netbsd:addupc_task+0x42c sys/kern/subr_prof.c:594
trap() at netbsd:trap+0x16e2 sys/arch/amd64/amd64/trap.c:413
--- trap (number 3) ---
75c25652b30a:
Panic string: UBSan: Undefined Behavior in /syzkaller/managers/ci2-netbsd-kubsan/kernel/sys/kern/subr_prof.c:594:7, pointer expression with base 0xffffffffffffffff overflowed to 0x38505c41

PID LID S CPU FLAGS STRUCT LWP * NAME WAIT
14505 14507 2 0 100 ffffd3803e0614c0 syz-executor.3
14505>14505 7 0 10000000 ffffd3803d7cc640 syz-executor.3
5010 14748 2 0 0 ffffd3803d36d780 syz-executor.5
5010 5010 3 0 10000180 ffffd3803f3989c0 syz-executor.5 nanoslp
14510 14423 3 0 180 ffffd3803e388300 syz-executor.1 parked
14510 14510 2 0 10000000 ffffd3803d9caac0 syz-executor.1
7473 7473 3 0 180 ffffd3803d62fb00 syz-executor.1 parked
7651 7651 3 0 180 ffffd3803e360b40 syz-executor.1 parked
7739 7739 3 0 180 ffffd380390c7580 syz-executor.0 parked
1086 1086 3 0 180 ffffd38031d40980 syz-executor.5 nanoslp
1101 1101 3 1 40 ffffd38031d40540 syz-executor.4 biowait
1097 1097 3 0 180 ffffd38031d40100 syz-executor.3 nanoslp
1084 1084 2 0 140 ffffd38027f1d940 syz-executor.2
1077 1077 3 0 180 ffffd380270138c0 syz-executor.1 nanoslp
420 420 3 0 180 ffffd3802638e6c0 syz-executor.0 nanoslp
1252 1085 3 1 180 ffffd38027f1d500 syz-fuzzer parked
1252 1079 3 0 180 ffffd38027013040 syz-fuzzer parked
1252 1074 3 0 180 ffffd380262e8ac0 syz-fuzzer parked
1252 1072 3 1 180 ffffd380267a7300 syz-fuzzer parked
1252 1106 3 1 180 ffffd380262e8240 syz-fuzzer parked
1252 1078 3 1 1c0 ffffd3802638e280 syz-fuzzer parked
1252 1071 3 0 1c0 ffffd38025e95640 syz-fuzzer parked
1252 998 3 0 180 ffffd380262e8680 syz-fuzzer nanoslp
1252 1252 3 0 180 ffffd380265472c0 syz-fuzzer kqueue
1056 1056 3 1 180 ffffd38027013480 sshd select
1249 1249 3 1 180 ffffd38027f1d0c0 getty nanoslp
1099 1099 3 0 180 ffffd38027409900 getty nanoslp
1091 1091 3 1 180 ffffd38025e95a80 getty nanoslp
1098 1098 3 1 1c0 ffffd38025e831c0 getty ttyraw
948 948 3 1 180 ffffd380268fa780 sshd select
982 982 3 1 180 ffffd3802638eb00 powerd kqueue
871 871 3 1 180 ffffd38027409080 syslogd kqueue
462 462 3 0 180 ffffd380267a7740 dhcpcd poll
593 593 3 0 180 ffffd38026547700 dhcpcd poll
592 592 3 0 180 ffffd380274094c0 dhcpcd poll
580 580 3 1 180 ffffd380268fabc0 dhcpcd poll
350 350 3 0 180 ffffd380268fa340 dhcpcd poll
349 349 3 0 180 ffffd380267a7b80 dhcpcd poll
348 348 3 0 180 ffffd38026547b40 dhcpcd poll
1 1 3 0 180 ffffd3801dcae100 init wait
0 4648 3 1 200 ffffd380390c7140 acctwatch actwat
0 738 3 0 200 ffffd38025e83600 physiod physiod
0 192 3 0 200 ffffd38025e95200 ioflush syncer
0 166 3 0 200 ffffd3801dc082c0 pooldrain pooldrain
0 165 3 1 200 ffffd38025e83a40 pgdaemon pgdaemon
0 162 3 0 200 ffffd38023dcda00 usb7 usbevt
0 161 3 0 200 ffffd38023dcd5c0 usb6 usbevt
0 31 3 0 200 ffffd38023dcd180 usb5 usbevt
0 63 3 0 200 ffffd38020d789c0 usb4 usbevt
0 126 3 1 200 ffffd38020d78580 usb3 usbevt
0 125 3 0 200 ffffd38020d78140 usb2 usbevt
0 124 3 0 200 ffffd3801dcae980 usb1 usbevt
0 123 3 0 200 ffffd3801dcae540 usb0 usbevt
0 122 3 1 200 ffffd3801dc08700 usbtask-dr usbtsk
0 121 3 0 200 ffffd3801c0b4ac0 usbtask-hc usbtsk
0 120 3 0 200 ffffd3801dc08b40 npfgc0 npfgcw
0 119 3 1 200 ffffd3801dc79940 rt_free rt_free
0 118 3 1 200 ffffd3801dc79500 unpgc unpgc
0 117 3 0 200 ffffd3801dc790c0 key_timehandler key_timehandler
0 116 3 1 200 ffffd3801dc64900 icmp6_wqinput/1 icmp6_wqinput
0 115 3 0 200 ffffd3801dc644c0 icmp6_wqinput/0 icmp6_wqinput
0 114 3 0 200 ffffd3801dc64080 nd6_timer nd6_timer
0 113 3 1 200 ffffd3801dc578c0 carp6_wqinput/1 carp6_wqinput
0 112 3 0 200 ffffd3801dc57480 carp6_wqinput/0 carp6_wqinput
0 111 3 1 200 ffffd3801dc57040 carp_wqinput/1 carp_wqinput
0 110 3 0 200 ffffd3801dc32bc0 carp_wqinput/0 carp_wqinput
0 109 3 1 200 ffffd3801dc32780 icmp_wqinput/1 icmp_wqinput
0 108 3 0 200 ffffd3801dc32340 icmp_wqinput/0 icmp_wqinput
0 107 3 0 200 ffffd3801dc0db80 rt_timer rt_timer
0 106 3 1 200 ffffd3801dc0d740 vmem_rehash vmem_rehash
0 105 3 0 200 ffffd3801dc0d300 entbutler entropy
0 96 3 1 200 ffffd3801d55db00 viomb balloon
0 30 3 1 200 ffffd3801d55d6c0 vioif0_txrx/1 vioif0_txrx
0 29 3 0 200 ffffd3801d55d280 vioif0_txrx/0 vioif0_txrx
0 27 3 0 200 ffffd3801c0b4680 scsibus0 sccomp
0 26 3 0 200 ffffd3801c0b4240 pms0 pmsreset
0 25 3 1 200 ffffd3801bff4a80 xcall/1 xcall
0 24 1 1 200 ffffd3801bff4640 softser/1
0 23 1 1 200 ffffd3801bff4200 softclk/1
0 22 1 1 200 ffffd3801bfcfa40 softbio/1
0 21 1 1 200 ffffd3801bfcf600 softnet/1
0 > 20 1 1 201 ffffd3801bfcf1c0 idle/1
0 19 3 0 200 ffffd3814af3ea00 lnxpwrwq lnxpwrwq
0 18 3 0 200 ffffd3814af3e5c0 lnxlngwq lnxlngwq
0 17 3 0 200 ffffd3814af3e180 lnxsyswq lnxsyswq
0 16 3 0 200 ffffd3814af639c0 lnxrcugc lnxrcugc
0 15 3 0 200 ffffd3814af63580 sysmon smtaskq
0 14 3 0 200 ffffd3814af63140 pmfsuspend pmfsuspend
0 13 3 0 200 ffffd3814af68980 pmfevent pmfevent
0 12 3 0 200 ffffd3814af68540 sopendfree sopendfr
0 11 3 0 200 ffffd3814af68100 iflnkst iflnkst
0 10 3 0 200 ffffd3814bf9b940 nfssilly nfssilly
0 9 3 0 200 ffffd3814bf9b500 vdrain vdrain
0 8 3 0 200 ffffd3814bf9b0c0 modunload mod_unld
0 7 3 0 200 ffffd3814bfc6900 xcall/0 xcall
0 6 1 0 200 ffffd3814bfc64c0 softser/0
0 5 1 0 200 ffffd3814bfc6080 softclk/0
0 4 1 0 200 ffffd3814bff38c0 softbio/0
0 3 1 0 200 ffffd3814bff3480 softnet/0
0 2 1 0 201 ffffd3814bff3040 idle/0
0 0 3 0 200 ffffffff85f4ddc0 swapper uvm
[Locks tracked through LWPs]

****** LWP 1101.1101 (syz-executor.4) @ 0xffffd38031d40540, l_stat=3

*** Locks held:

* Lock 0 (initialized at vcache_alloc)
lock address : 0xffffd380310f54c0 type : sleep/adaptive
initialized : 0xffffffff83640aa0
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 1
relevant lwp : 0xffffd38031d40540 last held: 0xffffd38031d40540
last locked* : 0xffffffff8369b2d0 unlocked : 0xffffffff8369b454
owner/count : 0xffffd38031d40540 flags : 0x0000000000000004
Turnstile: no active turnstile for this lock.

* Lock 1 (initialized at vcache_alloc)
lock address : 0xffffd38038cbc500 type : sleep/adaptive
initialized : 0xffffffff83640aa0
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 1
relevant lwp : 0xffffd38031d40540 last held: 0xffffd38031d40540
last locked* : 0xffffffff8369b2d0 unlocked : 000000000000000000
owner/count : 0xffffd38031d40540 flags : 0x0000000000000004
Turnstile: no active turnstile for this lock.

*** Locks wanted: none

****** LWP 1084.1084 (syz-executor.2) @ 0xffffd38027f1d940, l_stat=2

*** Locks held:

* Lock 0 (initialized at vcache_alloc)
lock address : 0xffffd380311ab700 type : sleep/adaptive
initialized : 0xffffffff83640aa0
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffffd38027f1d940 last held: 0xffffd38027f1d940
last locked* : 0xffffffff8369b2d0 unlocked : 0xffffffff8369b454
owner/count : 0xffffd38027f1d940 flags : 0x0000000000000004
Turnstile: no active turnstile for this lock.

*** Locks wanted: none

****** LWP 593.593 (dhcpcd) @ 0xffffd38026547700, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at module_hook_init)
lock address : 0xffffffff8636d1c0 type : sleep/adaptive
initialized : 0xffffffff833789e7
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffffd38026547700 last held: 000000000000000000
last locked : 000000000000000000 unlocked*: 000000000000000000
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 592.592 (dhcpcd) @ 0xffffd380274094c0, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at module_hook_init)
lock address : 0xffffffff8636d1c0 type : sleep/adaptive
initialized : 0xffffffff833789e7
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffffd380274094c0 last held: 000000000000000000
last locked : 000000000000000000 unlocked*: 000000000000000000
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 349.349 (dhcpcd) @ 0xffffd380267a7b80, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at module_hook_init)
lock address : 0xffffffff8636d1c0 type : sleep/adaptive
initialized : 0xffffffff833789e7
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffffd380267a7b80 last held: 000000000000000000
last locked : 000000000000000000 unlocked*: 000000000000000000
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 348.348 (dhcpcd) @ 0xffffd38026547b40, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at module_hook_init)
lock address : 0xffffffff8636d1c0 type : sleep/adaptive
initialized : 0xffffffff833789e7
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffffd38026547b40 last held: 000000000000000000
last locked : 000000000000000000 unlocked*: 000000000000000000
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 0.11 (iflnkst) @ 0xffffd3814af68100, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at module_hook_init)
lock address : 0xffffffff8636d1c0 type : sleep/adaptive
initialized : 0xffffffff833789e7
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffffd3814af68100 last held: 000000000000000000
last locked : 000000000000000000 unlocked*: 000000000000000000
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 0.5 (softclk/0) @ 0xffffd3814bfc6080, l_stat=1

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at module_hook_init)
lock address : 0xffffffff8636d1c0 type : sleep/adaptive
initialized : 0xffffffff833789e7
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffffd3814bfc6080 last held: 000000000000000000
last locked : 000000000000000000 unlocked*: 000000000000000000
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 0.0 (swapper) @ 0xffffffff85f4ddc0, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at module_hook_init)
lock address : 0xffffffff8636d1c0 type : sleep/adaptive
initialized : 0xffffffff833789e7
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffffffff85f4ddc0 last held: 000000000000000000
last locked : 000000000000000000 unlocked*: 000000000000000000
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

[Locks tracked through CPUs]

******* Locks held on cpu0:

* Lock 0 (initialized at fork1)
lock address : 0xffffd3803dd29748 type : spin
initialized : 0xffffffff8334241e
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffffd3803d7cc640 last held: 0xffffd3803d7cc640
last locked* : 0xffffffff834c0e93 unlocked : 0xffffffff832f5136
owner field : 0x0000000000010800 wait/spin: 0/1

PAGE FLAG PQ UOBJECT UANON
0xffffd60000007180 0045 00000000 0x0 0x0
0xffffd60000007200 0045 00000000 0x0 0x0
0xffffd60000007280 0045 00000000 0x0 0x0
0xffffd60000007300 0045 00000000 0x0 0x0
0xffffd60000007380 0045 00000000 0x0 0x0
0xffffd60000007400 0045 00000000 0x0 0x0
0xffffd60000007480 0045 00000000 0x0 0x0
0xffffd60000007500 0045 00000000 0x0 0x0
0xffffd60000007580 0045 00000000 0x0 0x0
0xffffd60000007600 0045 00000000 0x0 0x0
0xffffd60000007680 0045 00000000 0x0 0x0
0xffffd60000007700 0041 00000000 0x0 0x0
0xffffd60000007780 0041 00000000 0x0 0x0
0xffffd60000007800 0041 00000000 0x0 0x0
0xffffd60000007880 0041 00000000 0x0 0x0
0xffffd60000007900 0045 00000000 0x0 0x0
0xffffd60000007980 0041 00000000 0x0 0x0
0xffffd60000007a00 0041 00000000 0x0 0x0
0xffffd60000007a80 0041 00000000 0x0 0x0
0xffffd60000007b00 0041 00000000 0x0 0x0
0xffffd60000007b80 0041 00000000 0x0 0x0
0xffffd60000007c00 0041 00000000 0x0 0x0
0xffffd60000007c80 0041 00000000 0x0 0x0
0xffffd60000007d00 0041 00000000 0x0 0x0
0xffffd60000007d80 0041 00000000 0x0 0x0
0xffffd60000007e00 0041 00000000 0x0 0x0
0xffffd60000007e80 0041 00000000 0x0 0x0
0xffffd60000007f00 0041 00000000 0x0 0x0
0xffffd60000007f80 0041 00000000 0x0 0x0
0xffffd60000008000 0041 00000000 0x0 0x0
0xffffd60000008080 0041 00000000 0x0 0x0
0xffffd60000008100 0041 00000000 0x0 0x0
0xffffd60000008180 0041 00000000 0x0 0x0
0xffffd60000008200 0041 00000000 0x0 0x0
0xffffd60000008280 0041 00000000 0x0 0x0
0xffffd60000008300 0041 00000000 0x0 0x0
0xffffd60000008380 0041 00000000 0x0 0x0
0xffffd60000008400 0041 00000000 0x0 0x0
0xffffd60000008480 0041 00000000 0x0 0x0
0xffffd60000008500 0041 00000000 0x0 0x0
0xffffd60000008580 0041 00000000 0x0 0x0
0xffffd60000008600 0041 00000000 0x0 0x0
0xffffd60000008680 0041 00000000 0x0 0x0
0xffffd60000008700 0041 00000000 0x0 0x0
0xffffd60000008780 0041 00000000 0x0 0x0
0xffffd60000008800 0041 00000000 0x0 0x0
0xffffd60000008880 0041 00000000 0x0 0x0
0xffffd60000008900 0041 00000000 0x0 0x0
0xffffd60000008980 0041 00000000 0x0 0x0
0xffffd60000008a00 0041 00000000 0x0 0x0
0xffffd60000008a80 0041 00000000 0x0 0x0
0xffffd60000008b00 0041 00000000 0x0 0x0
0xffffd60000008b80 0041 00000000 0x0 0x0
0xffffd60000008c00 0045 00000000 0x0 0x0
0xffffd60000008c80 0041 00000000 0x0 0x0
0xffffd60000008d00 0041 00000000 0x0 0x0
0xffffd60000008d80 0041 00000000 0x0 0x0
0xffffd60000008e00 0041 00000000 0x0 0x0
0xffffd60000008e80 0041 00000000 0x0 0x0
0xffffd60000008f00 0041 00000000 0x0 0x0
0xffffd60000008f80 0041 00000000 0x0 0x0
0xffffd60000009000 0041 00000000 0x0 0x0
0xffffd60000009080 0045 00000000 0x0 0x0
0xffffd60000009100 0045 00000000 0x0 0x0
0xffffd60000009180 0041 00000000 0x0 0x0
0xffffd60000009200 0041 00000000 0x0 0x0
0xffffd60000009280 0041 00000000 0x0 0x0
0xffffd60000009300 0041 00000000 0x0 0x0
0xffffd60000009380 0041 00000000 0x0 0x0
0xffffd60000009400 0041 00000000 0x0 0x0
0xffffd60000009480 0041 00000000 0x0 0x0
0xffffd60000009500 0041 00000000 0x0 0x0
0xffffd60000009580 0041 00000000 0x0 0x0
0xffffd60000009600 0041 00000000 0x0 0x0
0xffffd60000009680 0041 00000000 0x0 0x0
0xffffd60000009700 0045 00000000 0x0 0x0
0xffffd60000009780 0041 00000000 0x0 0x0
0xffffd60000009800 0041 00000000 0x0 0x0
0xffffd60000009880 0041 00000000 0x0 0x0
0xffffd60000009900 0041 00000000 0x0 0x0
0xffffd60000009980 0041 00000000 0x0 0x0
0xffffd60000009a00 0041 00000000 0x0 0x0
0xffffd60000009a80 0041 00000000 0x0 0x0
0xffffd60000009b00 0041 00000000 0x0 0x0
0xffffd60000009b80 0041 00000000 0x0 0x0
0xffffd60000009c00 0041 00000000 0x0 0x0
0xffffd60000009c80 0041 00000000 0x0 0x0
0xffffd60000009d00 0041 00000000 0x0 0x0
0xffffd60000009d80 0041 00000000 0x0 0x0
0xffffd60000009e00 0041 00000000 0x0 0x0
0xffffd60000009e80 0045 00000000 0x0 0x0
0xffffd60000009f00 0041 00000000 0x0 0x0
0xffffd60000009f80 0041 00000000 0x0 0x0
0xffffd6000000a000 0041 00000000 0x0 0x0
0xffffd6000000a080 0041 00000000 0x0 0x0
0xffffd6000000a100 0041 00000000 0x0 0x0
0xffffd6000000a180 0041 00000000 0x0 0x0
0xffffd6000000a200 0041 00000000 0x0 0x0
0xffffd6000000a280 0041 00000000 0x0 0x0
0xffffd6000000a300 0041 00000000 0x0 0x0
0xffffd6000000a380 0041 00000000 0x0 0x0
0xffffd6000000a400 0041 00000000 0x0 0x0
0xffffd6000000a480 0041 00000000 0x0 0x0
0xffffd6000000a500 0041 00000000 0x0 0x0
0xffffd6000000a580 0041 00000000 0x0 0x0
0xffffd6000000a600 0041 00000000 0x0 0x0
0xffffd6000000a680 0041 00000000 0x0 0x0
0xffffd6000000a700 0041 00000000 0x0 0x0
0xffffd6000000a780 0041 00000000 0x0 0x0
0xffffd6000000a800 0041 00000000 0x0 0x0
0xffffd6000000a880 0041 00000000 0x0 0x0
0xffffd6000000a900 0041 00000000 0x0 0x0
0xffffd6000000a980 0041 00000000 0x0 0x0
0xffffd6000000aa00 0041 00000000 0x0 0x0
0xffffd6000000aa80 0041 00000000 0x0 0x0
0xffffd6000000ab00 0041 00000000 0x0 0x0
0xffffd6000000ab80 0041 00000000 0x0 0x0
0xffffd6000000ac00 0041 00000000 0x0 0x0
0xffffd6000000ac80 0041 00000000 0x0 0x0
0xffffd6000000ad00 0041 00000000 0x0 0x0
0xffffd6000000ad80 0041 00000000 0x0 0x0
0xffffd6000000ae00 0045 00000000 0x0 0x0
0xffffd6000000ae80 0041 00000000 0x0 0x0
0xffffd6000000af00 0041 00000000 0x0 0x0
0xffffd6000000af80 0045 00000000 0x0 0x0
0xffffd6000000b000 0041 00000000 0x0 0x0
0xffffd6000000b080 0041 00000000 0x0 0x0
0xffffd6000000b100 0041 00000000 0x0 0x0
0xffffd6000000b180 0045 00000000 0x0 0x0
0xffffd6000000b200 0045 00000000 0x0 0x0
0xffffd6000000b280 0045 00000000 0x0 0x0
0xffffd6000000b300 0045 00000000 0x0 0x0
0xffffd6000000b380 0045 00000000 0x0 0x0
0xffffd6000000b400 0041 00000000 0x0 0x0
0xffffd6000000b480 0041 00000000 0x0 0x0
0xffffd6000000b500 0041 00000000 0x0 0x0
0xffffd6000000b580 0045 00000000 0x0 0x0
0xffffd6000000b600 0045 00000000 0x0 0x0
0xffffd6000000b680 0045 00000000 0x0 0x0
0xffffd6000000b700 0045 00000000 0x0 0x0
0xffffd6000000b780 0045 00000000 0x0 0x0
0xffffd6000000b800 0041 00000000 0x0 0x0
0xffffd6000000b880 0041 00000000 0x0 0x0
0xffffd6000000b900 0045 00000000 0x0 0x0
0xffffd6000000b980 0045 00000000 0x0 0x0
0xffffd6000000ba00 0045 00000000 0x0 0x0
0xffffd6000000ba80 0045 00000000 0x0 0x0
0xffffd6000000bb00 0045 00000000 0x0 0x0
0xffffd6000000bb80 0045 00000000 0x0 0x0
0xffffd6000000bc00 0045 00000000 0x0 0x0
0xffffd6000000bc80 0041 00000000 0x0 0x0
0xffffd6000000bd00 0045 00000000 0x0 0x0
0xffffd6000000bd80 0045 00000000 0x0 0x0
0xffffd6000000be00 0045 00000000 0x0 0x0
0xffffd6000000be80 0045 00000000 0x0 0x0
0xffffd6000000bf00 0045 00000000 0x0 0x0
0xffffd6000000bf80 0045 00000000 0x0 0x0
0xffffd6000000c000 0045 00000000 0x0 0x0
0xffffd6000000c080 0045 00000000 0x0 0x0
0xffffd6000000c100 0045 00000000 0x0 0x0
0xffffd6000000c180 0045 00000000 0x0 0x0
0xffffd6000000c200 0045 00000000 0x0 0x0
0xffffd6000000c280 0045 00000000 0x0 0x0
0xffffd6000000c300 0045 00000000 0x0 0x0
0xffffd6000000c380 0045 00000000 0x0 0x0
0xffffd6000000c400 0045 00000000 0x0 0x0
0xffffd6000000c480 0045 00000000 0x0 0x0
0xffffd6000000c500 0045 00000000 0x0 0x0
0xffffd6000000c580 0045 00000000 0x0 0x0
0xffffd6000000c600 0045 00000000 0x0 0x0
0xffffd6000000c680 0045 00000000 0x0 0x0
0xffffd6000000c700 0045 00000000 0x0 0x0
0xffffd6000000c780 0041 00000000 0x0 0x0
0xffffd6000000c800 0045 00000000 0x0 0x0
0xffffd6000000c880 0045 00000000 0x0 0x0
0xffffd6000000c900 0045 00000000 0x0 0x0
0xffffd6000000c980 0045 00000000 0x0 0x0
0xffffd6000000ca00 0041 00000000 0x0 0x0
0xffffd6000000ca80 0045 00000000 0x0 0x0
0xffffd6000000cb00 0045 00000000 0x0 0x0
0xffffd6000000cb80 0041 00000000 0x0 0x0
0xffffd6000000cc00 0045 00000000 0x0 0x0
0xffffd6000000cc80 0045 00000000 0x0 0x0
0xffffd6000000cd00 0045 00000000 0x0 0x0
0xffffd6000000cd80 0041 00000000 0x0 0x0
0xffffd6000000ce00 0041 00000000 0x0 0x0
0xffffd6000000ce80 0041 00000000 0x0 0x0
0xffffd6000000cf00 0041 00000000 0x0 0x0
0xffffd6000000cf80 0041 00000000 0x0 0x0
0xffffd6000000d000 0045 00000000 0x0 0x0
0xffffd6000000d080 0045 00000000 0x0 0x0
0xffffd6000000d100 0041 00000000 0x0 0x0
0xffffd6000000d180 0041 00000000 0x0 0x0
0xffffd6000000d200 0041 00000000 0x0 0x0
0xffffd6000000d280 0041 00000000 0x0 0x0
0xffffd6000000d300 0041 00000000 0x0 0x0
0xffffd6000000d380 0041 00000000 0x0 0x0
0xffffd6000000d400 0041 00000000 0x0 0x0
0xffffd6000000d480 0045 00000000 0x0 0x0
0xffffd6000000d500 0041 00000000 0x0 0x0
0xffffd6000000d580 0041 00000000 0x0 0x0
0xffffd6000000d600 0041 00000000 0x0 0x0
0xffffd6000000d680 0041 00000000 0x0 0x0
0xffffd6000000d700 0041 00000000 0x0 0x0
0xffffd6000000d780 0045 00000000 0x0 0x0
0xffffd6000000d800 0041 00000000 0x0 0x0
0xffffd6000000d880 0041 00000000 0x0 0x0
0xffffd6000000d900 0041 00000000 0x0 0x0
0xffffd6000000d980 0041 00000000 0x0 0x0
0xffffd6000000da00 0041 00000000 0x0 0x0
0xffffd6000000da80 0045 00000000 0x0 0x0
0xffffd6000000db00 0041 00000000 0x0 0x0
0xffffd6000000db80 0045 00000000 0x0 0x0
0xffffd6000000dc00 0041 00000000 0x0 0x0
0xffffd6000000dc80 0041 00000000 0x0 0x0
0xffffd6000000dd00 0041 00000000 0x0 0x0
0xffffd6000000dd80 0041 00000000 0x0 0x0
0xffffd6000000de00 0045 00000000 0x0 0x0
0xffffd6000000de80 0041 00000000 0x0 0x0
0xffffd6000000df00 0045 00000000 0x0 0x0
0xffffd6000000df80 0045 00000000 0x0 0x0
0xffffd6000000e000 0041 00000000 0x0 0x0
0xffffd6000000e080 0041 00000000 0x0 0x0
0xffffd6000000e100 0041 00000000 0x0 0x0
0xffffd6000000e180 0045 00000000 0x0 0x0
0xffffd6000000e200 0041 00000000 0x0 0x0
0xffffd6000000e280 0041 00000000 0x0 0x0
0xffffd6000000e300 0045 00000000 0x0 0x0
0xffffd6000000e380 0041 00000000 0x0 0x0
0xffffd6000000e400 0045 00000000 0x0 0x0
0xffffd6000000e480 0041 00000000 0x0 0x0
0xffffd6000000e500 0045 00000000 0x0 0x0
0xffffd6000000e580 0041 00000000 0x0 0x0
0xffffd6000000e600 0041 00000000 0x0 0x0
0xffffd6000000e680 0045 00000000 0x0 0x0
0xffffd6000000e700 0045 00000000 0x0 0x0
0xffffd6000000e780 0041 00000000 0x0 0x0
0xffffd6000000e800 0045 00000000 0x0 0x0
0xffffd6000000e880 0045 00000000 0x0 0x0
0xffffd6000000e900 0041 00000000 0x0 0x0
0xffffd6000000e980 0041 00000000 0x0 0x0
0xffffd6000000ea00 0041 00000000 0x0 0x0
0xffffd6000000ea80 0045 00000000 0x0 0x0
0xffffd6000000eb00 0041 00000000 0x0 0x0
0xffffd6000000eb80 0041 00000000 0x0 0x0
0xffffd6000000ec00 0041 00000000 0x0 0x0
0xffffd6000000ec80 0045 00000000 0x0 0x0
0xffffd6000000ed00 0041 00000000 0x0 0x0
0xffffd6000000ed80 0041 00000000 0x0 0x0
0xffffd6000000ee00 0041 00000000 0x0 0x0
0xffffd6000000ee80 0041 00000000 0x0 0x0
0xffffd6000000ef00 0041 00000000 0x0 0x0
0xffffd6000000ef80 0045 00000000 0x0 0x0
0xffffd6000000f000 0041 00000000 0x0 0x0
0xffffd6000000f080 0041 00000000 0x0 0x0
0xffffd6000000f100 0041 00000000 0x0 0x0
0xffffd6000000f180 0041 00000000 0x0 0x0
0xffffd6000000f200 0041 00000000 0x0 0x0
0xffffd6000000f280 0041 00000000 0x0 0x0
0xffffd6000000f300 0041 00000000 0x0 0x0
0xffffd6000000f380 0041 00000000 0x0 0x0
0xffffd6000000f400 0041 00000000 0x0 0x0
0xffffd6000000f480 0041 00000000 0x0 0x0
0xffffd6000000f500 0041 00000000 0x0 0x0
0xffffd6000000f580 0045 00000000 0x0 0x0
0xffffd6000000f600 0041 00000000 0x0 0x0
0xffffd6000000f680 0041 00000000 0x0 0x0
0xffffd6000000f700 0041 00000000 0x0 0x0
0xffffd6000000f780 0041 00000000 0x0 0x0
0xffffd6000000f800 0045 00000000 0x0 0x0
0xffffd6000000f880 0041 00000000 0x0 0x0
0xffffd6000000f900 0045 00000000 0x0 0x0
0xffffd6000000f980 0041 00000000 0x0 0x0
0xffffd6000000fa00 0045 00000000 0x0 0x0
0xffffd6000000fa80 0041 00000000 0x0 0x0
0xffffd6000000fb00 0041 00000000 0x0 0x0
0xffffd6000000fb80 0041 00000000 0x0 0x0
0xffffd6000000fc00 0041 00000000 0x0 0x0
0xffffd6000000fc80 0041 00000000 0x0 0x0
0xffffd6000000fd00 0041 00000000 0x0 0x0
0xffffd6000000fd80 0041 00000000 0x0 0x0
0xffffd6000000fe00 0041 00000000 0x0 0x0
0xffffd6000000fe80 0045 00000000 0x0 0x0
0xffffd6000000ff00 0041 00000000 0x0 0x0
0xffffd6000000ff80 0041 00000000 0x0 0x0
0xffffd60000010000 0041 00000000 0x0 0x0
0xffffd60000010080 0045 00000000 0x0 0x0
0xffffd60000010100 0041 00000000 0x0 0x0
0xffffd60000010180 0041 00000000 0x0 0x0
0xffffd60000010200 0041 00000000 0x0 0x0
0xffffd60000010280 0041 00000000 0x0 0x0
0xffffd60000010300 0041 00000000 0x0 0x0
0xffffd60000010380 0041 00000000 0x0 0x0
0xffffd60000010400 0041 00000000 0x0 0x0
0xffffd60000010480 0041 00000000 0x0 0x0
0xffffd60000010500 0041 00000000 0x0 0x0
0xffffd60000010580 0041 00000000 0x0 0x0
0xffffd60000010600 0041 00000000 0x0 0x0
0xffffd60000010680 0041 00000000 0x0 0x0
0xffffd60000010700 0041 00000000 0x0 0x0
0xffffd60000010780 0045 00000000 0x0 0x0
0xffffd60000010800 0041 00000000 0x0 0x0
0xffffd60000010880 0041 00000000 0x0 0x0
0xffffd60000010900 0041 00000000 0x0 0x0
0xffffd60000010980 0045 00000000 0x0 0x0
0xffffd60000010a00 0041 00000000 0x0 0x0
0xffffd60000010a80 0041 00000000 0x0 0x0
0xffffd60000010b00 0041 00000000 0x0 0x0
0xffffd60000010b80 0041 00000000 0x0 0x0
0xffffd60000010c00 0041 00000000 0x0 0x0
0xffffd60000010c80 0041 00000000 0x0 0x0
0xffffd60000010d00 0045 00000000 0x0 0x0
0xffffd60000010d80 0041 00000000 0x0 0x0
0xffffd60000010e00 0041 00000000 0x0 0x0
0xffffd60000010e80 0045 00000000 0x0 0x0
0xffffd60000010f00 0045 00000000 0x0 0x0
0xffffd60000010f80 0041 00000000 0x0 0x0
0xffffd60000011000 0045 00000000 0x0 0x0
0xffffd60000011080 0041 00000000 0x0 0x0
0xffffd60000011100 0041 00000000 0x0 0x0
0xffffd60000011180 0041 00000000 0x0 0x0
0xffffd60000011200 0041 00000000 0x0 0x0
0xffffd60000011280 0041 00000000 0x0 0x0
0xffffd60000011300 0041 00000000 0x0 0x0
0xffffd60000011380 0041 00000000 0x0 0x0
0xffffd60000011400 0041 00000000 0x0 0x0
0xffffd60000011480 0045 00000000 0x0 0x0
0xffffd60000011500 0001 00000000 0x0 0x0
0xffffd60000011580 0001 00000000 0x0 0x0
0xffffd60000011600 0001 00000000 0x0 0x0
0xffffd60000011680 0001 00000000 0x0 0x0
0xffffd60000011700 0001 00000000 0x0 0x0
0xffffd60000011780 0001 00000000 0x0 0x0
0xffffd60000011800 0001 00000000 0x0 0x0
0xffffd60000011880 0001 00000000 0x0 0x0
0xffffd60000011900 0001 00000000 0x0 0x0
0xffffd60000011980 0001 00000000 0x0 0x0
0xffffd60000011a00 0001 00000000 0x0 0x0
0xffffd60000011a80 0001 00000000 0x0 0x0
0xffffd60000011b00 0001 00000000 0x0 0x0
0xffffd60000011b80 0001 00000000 0x0 0x0
0xffffd60000011c00 0001 00000000 0x0 0x0
0xffffd60000011c80 0001 00000000 0x0 0x0
0xffffd60000011d00 0001 00000000 0x0 0x0
0xffffd60000011d80 0001 00000000 0x0 0x0
0xffffd60000011e00 0001 00000000 0x0 0x0
0xffffd60000011e80 0001 00000000 0x0 0x0
0xffffd60000011f00 0001 00000000 0x0 0x0
0xffffd60000011f80 0001 00000000 0x0 0x0
0xffffd60000012000 0001 00000000 0x0 0x0
0xffffd60000012080 0001 00000000 0x0 0x0
0xffffd60000012100 0001 00000000 0x0 0x0
0xffffd60000012180 0001 00000000 0x0 0x0
0xffffd60000012200 0001 00000000 0x0 0x0
0xffffd60000012280 0001 00000000 0x0 0x0
0xffffd60000012300 0001 00000000 0x0 0x0
0xffffd60000012380 0001 00000000 0x0 0x0
0xffffd60000012400 0001 00000000 0x0 0x0
0xffffd60000012480 0001 00000000 0x0 0x0
0xffffd60000012500 0001 00000000 0x0 0x0
0xffffd60000012580 0001 00000000 0x0 0x0
0xffffd60000012600 0001 00000000 0x0 0x0
0xffffd60000012680 0001 00000000 0x0 0x0
0xffffd60000012700 0001 00000000 0x0 0x0
0xffffd60000012780 0001 00000000 0x0 0x0
0xffffd60000012800 0001 00000000 0x0 0x0
0xffffd60000012880 0001 00000000 0x0 0x0
0xffffd60000012900 0001 00000000 0x0 0x0
0xffffd60000012980 0001 00000000 0x0 0x0
0xffffd60000012a00 0001 00000000 0x0 0x0
0xffffd60000012a80 0001 00000000 0x0 0x0
0xffffd60000012b00 0001 00000000 0x0 0x0
0xffffd60000012b80 0001 00000000 0x0 0x0
0xffffd60000012c00 0001 00000000 0x0 0x0
0xffffd60000012c80 0001 00000000 0x0 0x0
0xffffd60000012d00 0001 00000000 0x0 0x0
0xffffd60000012d80 0001 00000000 0x0 0x0
0xffffd60000012e00 0001 00000000 0x0 0x0
0xffffd60000012e80 0001 00000000 0x0 0x0
0xffffd60000012f00 0001 00000000 0x0 0x0
0xffffd60000012f80 0001 00000000 0x0 0x0
0xffffd60000013000 0041 00000000 0x0 0x0
0xffffd60000013080 0041 00000000 0x0 0x0
0xffffd60000013100 0041 00000000 0x0 0x0
0xffffd60000013180 0041 00000000 0x0 0x0
0xffffd60000013200 0041 00000000 0x0 0x0
0xffffd60000013280 0041 00000000 0x0 0x0
0xffffd60000013300 0041 00000000 0x0 0x0
0xffffd60000013380 0041 00000000 0x0 0x0
0xffffd60000013400 0041 00000000 0x0 0x0
0xffffd60000013480 0041 00000000 0x0 0x0
0xffffd60000013500 0041 00000000 0x0 0x0
0xffffd60000013580 0041 00000000 0x0 0x0
0xffffd60000013600 0041 00000000 0x0 0x0
0xffffd60000013680 0041 00000000 0x0 0x0
0xffffd60000013700 0041 00000000 0x0 0x0
0xffffd60000013780 0041 00000000 0x0 0x0
0xffffd60000013800 0041 00000000 0x0 0x0
0xffffd60000013880 0041 00000000 0x0 0x0
0xffffd60000013900 0041 00000000 0x0 0x0
0xffffd60000013980 0041 00000000 0x0 0x0
0xffffd60000013a00 0041 00000000 0x0 0x0
0xffffd60000013a80 0041 00000000 0x0 0x0
0xffffd60000013b00 0041 00000000 0x0 0x0
0xffffd60000013b80 0041 00000000 0x0 0x0
0xffffd60000013c00 0041 00000000 0x0 0x0
0xffffd60000013c80 0041 00000000 0x0 0x0
0xffffd60000013d00 0041 00000000 0x0 0x0
0xffffd60000013d80 0041 00000000 0x0 0x0
0xffffd60000013e00 0041 00000000 0x0 0x0
0xffffd60000013e80 0041 00000000 0x0 0x0
0xffffd60000013f00 0041 00000000 0x0 0x0
0xffffd60000013f80 0041 00000000 0x0 0x0
0xffffd60000014000 0041 00000000 0x0 0x0
0xffffd60000014080 0041 00000000 0x0 0x0
0xffffd60000014100 0041 00000000 0x0 0x0
0xffffd60000014180 0041 00000000 0x0 0x0
0xffffd60000014200 0041 00000000 0x0 0x0
0xffffd60000014280 0041 00000000 0x0 0x0
0xffffd60000014300 0041 00000000 0x0 0x0
0xffffd60000014380 0041 00000000 0x0 0x0
0xffffd60000014400 0041 00000000 0x0 0x0
0xffffd60000014480 0041 00000000 0x0 0x0
0xffffd60000014500 0001 00000000 0x0 0x0
0xffffd60000014580 0001 00000000 0x0 0x0
0xffffd60000014600 0001 00000000 0x0 0x0
0xffffd60000014680 0001 00000000 0x0 0x0
0xffffd60000014700 0001 00000000 0x0 0x0
0xffffd60000014780 0001 00000000 0x0 0x0
0xffffd60000014800 0001 00000000 0x0 0x0
0xffffd60000014880 0001 00000000 0x0 0x0
0xffffd60000014900 0001 00000000 0x0 0x0
0xffffd60000014980 0001 00000000 0x0 0x0
0xffffd60000014a00 0001 00000000 0x0 0x0
0xffffd60000014a80 0001 00000000 0x0 0x0
0xffffd60000014b00 0001 00000000 0x0 0x0
0xffffd60000014b80 0001 00000000 0x0 0x0
0xffffd60000014c00 0001 00000000 0x0 0x0
0xffffd60000014c80 0001 00000000 0x0 0x0
0xffffd60000014d00 0001 00000000 0x0 0x0
0xffffd60000014d80 0001 00000000 0x0 0x0
0xffffd60000014e00 0001 00000000 0x0 0x0
0xffffd60000014e80 0001 00000000 0x0 0x0
0xffffd60000014f00 0001 00000000 0x0 0x0
0xffffd60000014f80 0001 00000000 0x0 0x0
0xffffd60000015000 0001 00000000 0x0 0x0
0xffffd60000015080 0001 00000000 0x0 0x0
0xffffd60000015100 0001 00000000 0x0 0x0
0xffffd60000015180 0001 00000000 0x0 0x0
0xffffd60000015200 0001 00000000 0x0 0x0
0xffffd60000015280 0001 00000000 0x0 0x0
0xffffd60000015300 0001 00000000 0x0 0x0
0xffffd60000015380 0001 00000000 0x0 0x0
0xffffd60000015400 0001 00000000 0x0 0x0
0xffffd60000015480 0001 00000000 0x0 0x0
0xffffd60000015500 0001 00000000 0x0 0x0
0xffffd60000015580 0001 00000000 0x0 0x0
0xffffd60000015600 0001 00000000 0x0 0x0
0xffffd60000015680 0001 00000000 0x0 0x0
0xffffd60000015700 0001 00000000 0x0 0x0
0xffffd60000015780 0001 00000000 0x0 0x0
0xffffd60000015800 0001 00000000 0x0 0x0
0xffffd60000015880 0001 00000000 0x0 0x0
0xffffd60000015900 0001 00000000 0x0 0x0
0xffffd60000015980 0001 00000000 0x0 0x0
0xffffd60000015a00 0001 00000000 0x0 0x0
0xffffd60000015a80 0001 00000000 0x0 0x0
0xffffd60000015b00 0001 00000000 0x0 0x0
0xffffd60000015b80 0001 00000000 0x0 0x0
0xffffd60000015c00 0001 00000000 0x0 0x0
0xffffd60000015c80 0001 00000000 0x0 0x0
0xffffd60000015d00 0001 00000000 0x0 0x0
0xffffd60000015d80 0001 00000000 0x0 0x0
0xffffd60000015e00 0001 00000000 0x0 0x0
0xffffd60000015e80 0001 00000000 0x0 0x0
0xffffd60000015f00 0001 00000000 0x0 0x0
0xffffd60000015f80 0001 00000000 0x0 0x0
0xffffd60000016000 0041 00000000 0x0 0x0
0xffffd60000016080 0041 00000000 0x0 0x0
0xffffd60000016100 0041 00000000 0x0 0x0
0xffffd60000016180 0041 00000000 0x0 0x0
0xffffd60000016200 0041 00000000 0x0 0x0
0xffffd60000016280 0041 00000000 0x0 0x0
0xffffd60000016300 0041 00000000 0x0 0x0
0xffffd60000016380 0041 00000000 0x0 0x0
0xffffd60000016400 0041 00000000 0x0 0x0
0xffffd60000016480 0041 00000000 0x0 0x0
0xffffd60000016500 0041 00000000 0x0 0x0
0xffffd60000016580 0041 00000000 0x0 0x0
0xffffd60000016600 0041 00000000 0x0 0x0
0xffffd60000016680 0041 00000000 0x0 0x0
0xffffd60000016700 0041 00000000 0x0 0x0
0xffffd60000016780 0041 00000000 0x0 0x0
0xffffd60000016800 0041 00000000 0x0 0x0
0xffffd60000016880 0041 00000000 0x0 0x0
0xffffd60000016900 0041 00000000 0x0 0x0
0xffffd60000016980 0041 00000000 0x0 0x0
0xffffd60000016a00 0041 00000000 0x0 0x0
0xffffd60000016a80 0041 00000000 0x0 0x0
0xffffd60000016b00 0041 00000000 0x0 0x0
0xffffd60000016b80 0041 00000000 0x0 0x0
0xffffd60000016c00 0041 00000000 0x0 0x0
0xffffd60000016c80 0041 00000000 0x0 0x0
0xffffd60000016d00 0041 00000000 0x0 0x0
0xffffd60000016d80 0041 00000000 0x0 0x0
0xffffd60000016e00 0041 00000000 0x0 0x0
0xffffd60000016e80 0041 00000000 0x0 0x0
0xffffd60000016f00 0041 00000000 0x0 0x0
0xffffd60000016f80 0041 00000000 0x0 0x0
0xffffd60000017000 0041 00000000 0x0 0x0
0xffffd60000017080 0041 00000000 0x0 0x0
0xffffd60000017100 0041 00000000 0x0 0x0
0xffffd60000017180 0041 00000000 0x0 0x0
0xffffd60000017200 0041 00000000 0x0 0x0
0xffffd60000017280 0041 00000000 0x0 0x0
0xffffd60000017300 0041 00000000 0x0 0x0
0xffffd60000017380 0041 00000000 0x0 0x0
0xffffd60000017400 0041 00000000 0x0 0x0
0xffffd60000017480 0041 00000000 0x0 0x0
0xffffd60000017500 0041 00000000 0x0 0x0
0xffffd60000017580 0041 00000000 0x0 0x0
0xffffd60000017600 0041 00000000 0x0 0x0
0xffffd60000017680 0041 00000000 0x0 0x0
0xffffd60000017700 0041 00000000 0x0 0x0
0xffffd60000017780 0001 00000000 0x0 0x0
0xffffd60000017800 0001 00000000 0x0 0x0
0xffffd60000017880 0001 00000000 0x0 0x0
0xffffd60000017900 0001 00000000 0x0 0x0
0xffffd60000017980 0001 00000000 0x0 0x0
0xffffd60000017a00 0001 00000000 0x0 0x0
0xffffd60000017a80 0001 00000000 0x0 0x0
0xffffd60000017b00 0001 00000000 0x0 0x0
0xffffd60000017b80 0001 00000000 0x0 0x0
0xffffd60000017c00 0001 00000000 0x0 0x0
0xffffd60000017c80 0001 00000000 0x0 0x0
0xffffd60000017d00 0001 00000000 0x0 0x0
0xffffd60000017d80 0001 00000000 0x0 0x0
0xffffd60000017e00 0001 00000000 0x0 0x0
0xffffd60000017e80 0001 00000000 0x0 0x0
0xffffd60000017f00 0001 00000000 0x0 0x0
0xffffd60000017f80 0001 00000000 0x0 0x0
0xffffd60000018000 0001 00000000 0x0 0x0
0xffffd60000018080 0001 00000000 0x0 0x0
0xffffd60000018100 0001 00000000 0x0 0x0
0xffffd60000018180 0001 00000000 0x0 0x0
0xffffd60000018200 0001 00000000 0x0 0x0
0xffffd60000018280 0001 00000000 0x0 0x0
0xffffd60000018300 0001 00000000 0x0 0x0
0xffffd60000018380 0001 00000000 0x0 0x0
0xffffd60000018400 0001 00000000 0x0 0x0
0xffffd60000018480 0001 00000000 0x0 0x0
0xffffd60000018500 0001 00000000 0x0 0x0
0xffffd60000018580 0001 00000000 0x0 0x0
0xffffd60000018600 0001 00000000 0x0 0x0
0xffffd60000018680 0001 00000000 0x0 0x0
0xffffd60000018700 0001 00000000 0x0 0x0
0xffffd60000018780 0001 00000000 0x0 0x0
0xffffd60000018800 0001 00000000 0x0 0x0
0xffffd60000018880 0001 00000000 0x0 0x0
0xffffd60000018900 0001 00000000 0x0 0x0
0xffffd60000018980 0001 00000000 0x0 0x0
0xffffd60000018a00 0001 00000000 0x0 0x0
0xffffd60000018a80 0001 00000000 0x0 0x0
0xffffd60000018b00 0001 00000000 0x0 0x0
0xffffd60000018b80 0001 00000000 0x0 0x0
0xffffd60000018c00 0001 00000000 0x0 0x0
0xffffd60000018c80 0001 00000000 0x0 0x0
0xffffd60000018d00 0001 00000000 0x0 0x0
0xffffd60000018d80 0001 00000000 0x0 0x0
0xffffd60000018e00 0001 00000000 0x0 0x0
0xffffd60000018e80 0001 00000000 0x0 0x0
0xffffd60000018f00 0001 00000000 0x0 0x0
0xffffd60000018f80 0001 00000000 0x0 0x0
0xffffd60000019000 0001 00000000 0x0 0x0
0xffffd60000019080 0001 00000000 0x0 0x0
0xffffd60000019100 0001 00000000 0x0 0x0
0xffffd60000019180 0001 00000000 0x0 0x0
0xffffd60000019200 0001 00000000 0x0 0x0
0xffffd60000019280 0041 00000000 0x0 0x0
0xffffd60000019300 0041 00000000 0x0 0x0
0xffffd60000019380 0041 00000000 0x0 0x0
0xffffd60000019400 0041 00000000 0x0 0x0
0xffffd60000019480 0041 00000000 0x0 0x0
0xffffd60000019500 0041 00000000 0x0 0x0
0xffffd60000019580 0041 00000000 0x0 0x0
0xffffd60000019600 0041 00000000 0x0 0x0
0xffffd60000019680 0041 00000000 0x0 0x0
0xffffd60000019700 0041 00000000 0x0 0x0
0xffffd60000019780 0041 00000000 0x0 0x0
0xffffd60000019800 0041 00000000 0x0 0x0
0xffffd60000019880 0041 00000000 0x0 0x0
0xffffd60000019900 0041 00000000 0x0 0x0
0xffffd60000019980 0041 00000000 0x0 0x0
0xffffd60000019a00 0045 00000000 0x0 0x0
0xffffd60000019a80 0041 00000000 0x0 0x0
0xffffd60000019b00 0041 00000000 0x0 0x0
0xffffd60000019b80 0041 00000000 0x0 0x0
0xffffd60000019c00 0041 00000000 0x0 0x0
0xffffd60000019c80 0041 00000000 0x0 0x0
0xffffd60000019d00 0041 00000000 0x0 0x0
0xffffd60000019d80 0041 00000000 0x0 0x0
0xffffd60000019e00 0045 00000000 0x0 0x0
0xffffd60000019e80 0041 00000000 0x0 0x0
0xffffd60000019f00 0041 00000000 0x0 0x0
0xffffd60000019f80 0041 00000000 0x0 0x0
0xffffd6000001a000 0041 00000000 0x0 0x0
0xffffd6000001a080 0041 00000000 0x0 0x0
0xffffd6000001a100 0041 00000000 0x0 0x0
0xffffd6000001a180 0041 00000000 0x0 0x0
0xffffd6000001a200 0045 00000000 0x0 0x0
0xffffd6000001a280 0041 00000000 0x0 0x0
0xffffd6000001a300 0041 00000000 0x0 0x0
0xffffd6000001a380 0041 00000000 0x0 0x0
0xffffd6000001a400 0041 00000000 0x0 0x0
0xffffd6000001a480 0041 00000000 0x0 0x0
0xffffd6000001a500 0041 00000000 0x0 0x0
0xffffd6000001a580 0041 00000000 0x0 0x0
0xffffd6000001a600 0045 00000000 0x0 0x0
0xffffd6000001a680 0041 00000000 0x0 0x0
0xffffd6000001a700 0041 00000000 0x0 0x0
0xffffd6000001a780 0045 00000000 0x0 0x0
0xffffd6000001a800 0045 00000000 0x0 0x0
0xffffd6000001a880 0041 00000000 0x0 0x0
0xffffd6000001a900 0041 00000000 0x0 0x0
0xffffd6000001a980 0045 00000000 0x0 0x0
0xffffd6000001aa00 0045 00000000 0x0 0x0
0xffffd6000001aa80 0045 00000000 0x0 0x0
0xffffd6000001ab00 0045 00000000 0x0 0x0
0xffffd6000001ab80 0045 00000000 0x0 0x0
0xffffd6000001ac00 0045 00000000 0x0 0x0
0xffffd6000001ac80 0041 00000000 0x0 0x0
0xffffd6000001ad00 0001 00000000 0x0 0x0
0xffffd6000001ad80 0001 00000000 0x0 0x0
0xffffd6000001ae00 0001 00000000 0x0 0x0
0xffffd6000001ae80 0001 00000000 0x0 0x0
0xffffd6000001af00 0001 00000000 0x0 0x0
0xffffd6000001af80 0001 00000000 0x0 0x0
0xffffd6000001b000 0001 00000000 0x0 0x0
0xffffd6000001b080 0001 00000000 0x0 0x0
0xffffd6000001b100 0001 00000000 0x0 0x0
0xffffd6000001b180 0001 00000000 0x0 0x0
0xffffd6000001b200 0001 00000000 0x0 0x0
0xffffd6000001b280 0001 00000000 0x0 0x0
0xffffd6000001b300 0001 00000000 0x0 0x0
0xffffd6000001b380 0001 00000000 0x0 0x0
0xffffd6000001b400 0001 00000000 0x0 0x0
0xffffd6000001b480 0001 00000000 0x0 0x0
0xffffd6000001b500 0001 00000000 0x0 0x0
0xffffd6000001b580 0001 00000000 0x0 0x0
0xffffd6000001b600 0001 00000000 0x0 0x0
0xffffd6000001b680 0001 00000000 0x0 0x0
0xffffd6000001b700 0001 00000000 0x0 0x0
0xffffd6000001b780 0001 00000000 0x0 0x0
0xffffd6000001b800 0001 00000000 0x0 0x0
0xffffd6000001b880 0001 00000000 0x0 0x0
0xffffd6000001b900 0001 00000000 0x0 0x0
0xffffd6000001b980 0001 00000000 0x0 0x0
0xffffd6000001ba00 0001 00000000 0x0 0x0
0xffffd6000001ba80 0001 00000000 0x0 0x0
0xffffd6000001bb00 0001 00000000 0x0 0x0
0xffffd6000001bb80 0001 00000000 0x0 0x0
0xffffd6000001bc00 0001 00000000 0x0 0x0
0xffffd6000001bc80 0001 00000000 0x0 0x0
0xffffd6000001bd00 0001 00000000 0x0 0x0
0xffffd6000001bd80 0001 00000000 0x0 0x0
0xffffd6000001be00 0001 00000000 0x0 0x0
0xffffd6000001be80 0001 00000000 0x0 0x0
0xffffd6000001bf00 0001 00000000 0x0 0x0
0xffffd6000001bf80 0001 00000000 0x0 0x0
0xffffd6000001c000 0001 00000000 0x0 0x0
0xffffd6000001c080 0001 00000000 0x0 0x0
0xffffd6000001c100 0001 00000000 0x0 0x0
0xffffd6000001c180 0001 00000000 0x0 0x0
0xffffd6000001c200 0001 00000000 0x0 0x0
0xffffd6000001c280 0001 00000000 0x0 0x0
0xffffd6000001c300 0001 00000000 0x0 0x0
0xffffd6000001c380 0001 00000000 0x0 0x0
0xffffd6000001c400 0001 00000000 0x0 0x0
0xffffd6000001c480 0001 00000000 0x0 0x0
0xffffd6000001c500 0001 00000000 0x0 0x0
0xffffd6000001c580 0001 00000000 0x0 0x0
0xffffd6000001c600 0001 00000000 0x0 0x0
0xffffd6000001c680 0001 00000000 0x0 0x0
0xffffd6000001c700 0001 00000000 0x0 0x0
0xffffd6000001c780 0001 00000000 0x0 0x0
0xffffd6000001c800 0001 00000000 0x0 0x0
0xffffd6000001c880 0001 00000000 0x0 0x0
0xffffd6000001c900 0001 00000000 0x0 0x0
0xffffd6000001c980 0001 00000000 0x0 0x0
0xffffd6000001ca00 0001 00000000 0x0 0x0
0xffffd6000001ca80 0001 00000000 0x0 0x0
0xffffd6000001cb00 0001 00000000 0x0

---
This report is generated by a bot. It may contain errors.
See https://goo.gl/tpsmEJ for more information about syzbot.
syzbot engineers can be reached at syzk...@googlegroups.com.

syzbot will keep track of this issue. See:
https://goo.gl/tpsmEJ#status for how to communicate with syzbot.

syzbot

unread,

Aug 24, 2021, 12:44:22 AM8/24/21

to syzkaller-...@googlegroups.com

syzbot has found a reproducer for the following issue on:

HEAD commit: 6c9d506c6146 tests/lint: add tests for integer comparisons
git tree: netbsd

console output: https://syzkaller.appspot.com/x/log.txt?x=1582d0fe300000

kernel config: https://syzkaller.appspot.com/x/.config?x=1420f906d33d9f1f
dashboard link: https://syzkaller.appspot.com/bug?extid=40fdac2b9ab7f43776f8
compiler: g++ (Debian 10.2.1-6) 10.2.1 20210110

syz repro: https://syzkaller.appspot.com/x/repro.syz?x=12b02399300000
C reproducer: https://syzkaller.appspot.com/x/repro.c?x=119e5f29300000

IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+40fdac...@syzkaller.appspotmail.com

[ 55.4833567] panic: UBSan: Undefined Behavior in /syzkaller/managers/ci2-netbsd-kubsan/kernel/sys/kern/subr_prof.c:594:7, pointer expression with base 0xffffffffffffffff overflowed to 0x7c76557f

[ 55.4833567] cpu0: Begin traceback...
[ 55.4833567] vpanic() at netbsd:vpanic+0x2d0 sys/kern/subr_prf.c:290
[ 55.4833567] isAlreadyReported() at netbsd:isAlreadyReported
[ 55.4833567] HandlePointerOverflow() at netbsd:HandlePointerOverflow+0xd2 sys/../common/lib/libc/misc/ubsan.c:706
[ 55.4833567] addupc_task() at netbsd:addupc_task+0x42c sys/kern/subr_prof.c:594
[ 55.4833567] trap() at netbsd:trap+0x16e2 sys/arch/amd64/amd64/trap.c:413
[ 55.4833567] --- trap (number 3) ---
[ 55.4833567] 7f7e9e804138:
[ 55.4833567] cpu0: End traceback...
[ 55.4833567] fatal breakpoint trap in supervisor mode
[ 55.4833567] trap type 1 code 0 rip 0xffffffff80221a95 cs 0x8 rflags 0x246 cr2 0x7d611cc0e638 ilevel 0x8 rsp 0xffffdd80c83e7970
[ 55.4833567] curlwp 0xffff8c92992b69c0 pid 1082.1082 lowest kstack 0xffffdd80c83e32c0
Stopped in pid 1082.1082 (syz-executor5837) at netbsd:breakpoint+0x5: leave

?
breakpoint() at netbsd:breakpoint+0x5
db_panic() at netbsd:db_panic+0xec sys/ddb/db_panic.c:68
vpanic() at netbsd:vpanic+0x2d0 sys/kern/subr_prf.c:290
isAlreadyReported() at netbsd:isAlreadyReported
HandlePointerOverflow() at netbsd:HandlePointerOverflow+0xd2 sys/../common/lib/libc/misc/ubsan.c:706
addupc_task() at netbsd:addupc_task+0x42c sys/kern/subr_prof.c:594
trap() at netbsd:trap+0x16e2 sys/arch/amd64/amd64/trap.c:413
--- trap (number 3) ---

7f7e9e804138:
Panic string: UBSan: Undefined Behavior in /syzkaller/managers/ci2-netbsd-kubsan/kernel/sys/kern/subr_prof.c:594:7, pointer expression with base 0xffffffffffffffff overflowed to 0x7c76557f

PID LID S CPU FLAGS STRUCT LWP * NAME WAIT

1192 1192 2 0 0 ffff8c929a43c180 syz-executor5837
1086 1086 2 1 0 ffff8c9298cd9080 syz-executor5837
1082 >1082 7 0 0 ffff8c92992b69c0 syz-executor5837
1191 1191 2 0 0 ffff8c92992b6140 syz-executor5837
1083 1083 2 0 0 ffff8c929834abc0 syz-executor5837
1084 1084 2 0 0 ffff8c92992b6580 syz-executor5837
1077 1077 3 0 180 ffff8c929788b1c0 syz-executor5837 nanoslp
829 829 2 1 140 ffff8c9297d00680 syz-executor5837
941 > 941 7 1 140 ffff8c9297d00240 syz-executor5837
1101 1101 3 0 180 ffff8c9297895a80 syz-executor5837 nanoslp
1072 1072 2 1 140 ffff8c9298a9e0c0 syz-executor5837
1078 1078 2 1 140 ffff8c9298a9e500 syz-executor5837
1074 1074 3 0 180 ffff8c9298cd9900 syz-executor5837 nanoslp
1080 1080 3 1 180 ffff8c92981aeb80 sshd select
1249 1249 3 1 180 ffff8c9298a9e940 getty nanoslp
1099 1099 3 0 180 ffff8c9297d7e6c0 getty nanoslp
1091 1091 3 0 180 ffff8c9299c00540 getty nanoslp
718 718 3 1 1c0 ffff8c9297895640 getty ttyraw
947 947 3 1 180 ffff8c9299c00980 sshd select
978 978 3 0 180 ffff8c9298049b40 powerd kqueue
672 672 3 0 180 ffff8c9299c00100 syslogd kqueue
595 595 3 0 180 ffff8c929834a340 dhcpcd poll
593 593 3 1 180 ffff8c9297d00ac0 dhcpcd poll
592 592 3 0 180 ffff8c929834a780 dhcpcd poll
580 580 3 1 180 ffff8c92980492c0 dhcpcd poll
350 350 3 0 180 ffff8c92981ae740 dhcpcd poll
349 349 3 0 180 ffff8c92981ae300 dhcpcd poll
348 348 3 1 180 ffff8c9298049700 dhcpcd poll
1 1 3 0 180 ffff8c928f671940 init wait
0 817 3 0 200 ffff8c929788b600 physiod physiod
0 192 3 0 200 ffff8c9297895200 ioflush syncer
0 166 3 0 200 ffff8c928f6082c0 pooldrain pooldrain
0 165 3 1 200 ffff8c929788ba40 pgdaemon pgdaemon
0 162 3 0 200 ffff8c92957d5a00 usb7 usbevt
0 161 3 0 200 ffff8c92957d55c0 usb6 usbevt
0 31 3 0 200 ffff8c92957d5180 usb5 usbevt
0 63 3 0 200 ffff8c92927809c0 usb4 usbevt
0 126 3 0 200 ffff8c9292780580 usb3 usbevt
0 125 3 0 200 ffff8c9292780140 usb2 usbevt
0 124 3 0 200 ffff8c928f6b3980 usb1 usbevt
0 123 3 0 200 ffff8c928f6b3540 usb0 usbevt
0 122 3 1 200 ffff8c928f608700 usbtask-dr usbtsk
0 121 3 0 200 ffff8c928dab4ac0 usbtask-hc usbtsk
0 120 3 0 200 ffff8c928f6b3100 npfgc0 npfgcw
0 119 3 1 200 ffff8c928f671500 rt_free rt_free
0 118 3 1 200 ffff8c928f6710c0 unpgc unpgc
0 117 3 0 200 ffff8c928f66c900 key_timehandler key_timehandler
0 116 3 1 200 ffff8c928f66c4c0 icmp6_wqinput/1 icmp6_wqinput
0 115 3 0 200 ffff8c928f66c080 icmp6_wqinput/0 icmp6_wqinput
0 114 3 0 200 ffff8c928f6578c0 nd6_timer nd6_timer
0 113 3 1 200 ffff8c928f657480 carp6_wqinput/1 carp6_wqinput
0 112 3 0 200 ffff8c928f657040 carp6_wqinput/0 carp6_wqinput
0 111 3 1 200 ffff8c928f63abc0 carp_wqinput/1 carp_wqinput
0 110 3 0 200 ffff8c928f63a780 carp_wqinput/0 carp_wqinput
0 109 3 1 200 ffff8c928f63a340 icmp_wqinput/1 icmp_wqinput
0 108 3 0 200 ffff8c928f60db80 icmp_wqinput/0 icmp_wqinput
0 107 3 0 200 ffff8c928f60d740 rt_timer rt_timer
0 106 3 0 200 ffff8c928f608b40 vmem_rehash vmem_rehash
0 105 3 0 200 ffff8c928f60d300 entbutler entropy
0 96 3 1 200 ffff8c928ef5db00 viomb balloon
0 30 3 1 200 ffff8c928ef5d6c0 vioif0_txrx/1 vioif0_txrx
0 29 3 0 200 ffff8c928ef5d280 vioif0_txrx/0 vioif0_txrx
0 27 3 0 200 ffff8c928dab4680 scsibus0 sccomp
0 26 3 0 200 ffff8c928dab4240 pms0 pmsreset
0 25 3 1 200 ffff8c928d9f4a80 xcall/1 xcall
0 24 1 1 200 ffff8c928d9f4640 softser/1
0 23 1 1 200 ffff8c928d9f4200 softclk/1
0 22 1 1 200 ffff8c928d9cfa40 softbio/1
0 21 1 1 200 ffff8c928d9cf600 softnet/1
0 20 1 1 201 ffff8c928d9cf1c0 idle/1
0 19 3 0 200 ffff8c93bc93ea00 lnxpwrwq lnxpwrwq
0 18 3 0 200 ffff8c93bc93e5c0 lnxlngwq lnxlngwq
0 17 3 0 200 ffff8c93bc93e180 lnxsyswq lnxsyswq
0 16 3 0 200 ffff8c93bc9639c0 lnxrcugc lnxrcugc
0 15 3 0 200 ffff8c93bc963580 sysmon smtaskq
0 14 3 0 200 ffff8c93bc963140 pmfsuspend pmfsuspend
0 13 3 0 200 ffff8c93bc968980 pmfevent pmfevent
0 12 3 0 200 ffff8c93bc968540 sopendfree sopendfr
0 11 3 0 200 ffff8c93bc968100 iflnkst iflnkst
0 10 3 0 200 ffff8c93bd99b940 nfssilly nfssilly
0 9 3 0 200 ffff8c93bd99b500 vdrain vdrain
0 8 3 0 200 ffff8c93bd99b0c0 modunload mod_unld
0 7 3 0 200 ffff8c93bd9c6900 xcall/0 xcall
0 6 1 0 200 ffff8c93bd9c64c0 softser/0
0 5 1 0 200 ffff8c93bd9c6080 softclk/0
0 4 1 0 200 ffff8c93bd9f38c0 softbio/0
0 3 1 0 200 ffff8c93bd9f3480 softnet/0
0 2 1 0 201 ffff8c93bd9f3040 idle/0

0 0 3 0 200 ffffffff85f4ddc0 swapper uvm
[Locks tracked through LWPs]

****** LWP 1086.1086 (syz-executor5837) @ 0xffff8c9298cd9080, l_stat=2

*** Locks held:

* Lock 0 (initialized at pmap_ctor)
lock address : 0xffff8c9298ab1d80 type : sleep/adaptive
initialized : 0xffffffff80fbcf7d

shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 1

relevant lwp : 0xffff8c9298cd9080 last held: 0xffff8c9298cd9080
last locked* : 0xffffffff80fbf686 unlocked : 0xffffffff80fbcd48
owner field : 0xffff8c9298cd9080 wait/spin: 0/0

Turnstile: no active turnstile for this lock.

*** Locks wanted: none

****** LWP 1191.1191 (syz-executor5837) @ 0xffff8c92992b6140, l_stat=2

*** Locks held:

* Lock 0 (initialized at pmap_ctor)
lock address : 0xffff8c9297ede980 type : sleep/adaptive
initialized : 0xffffffff80fbcf7d

shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0

relevant lwp : 0xffff8c92992b6140 last held: 0xffff8c92992b6140
last locked* : 0xffffffff80fbf686 unlocked : 0xffffffff80fbcd48
owner field : 0xffff8c92992b6140 wait/spin: 0/0

Turnstile: no active turnstile for this lock.

*** Locks wanted:

* Lock 0 (initialized at pmap_ctor)
lock address : 0xffff8c9297ede988 type : sleep/adaptive
initialized : 0xffffffff80fbcfab

shared holds : 0 exclusive: 0

shares wanted: 0 exclusive: 1

relevant cpu : 0 last held: 0

relevant lwp : 0xffff8c92992b6140 last held: 000000000000000000
last locked : 0xffffffff80fa2b51 unlocked*: 0xffffffff80fa2bb1
owner/count : 000000000000000000 flags : 000000000000000000

Turnstile: no active turnstile for this lock.

****** LWP 593.593 (dhcpcd) @ 0xffff8c9297d00ac0, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at module_hook_init)
lock address : 0xffffffff8636d1c0 type : sleep/adaptive
initialized : 0xffffffff833789e7
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0

relevant cpu : 1 last held: 0
relevant lwp : 0xffff8c9297d00ac0 last held: 000000000000000000