ASan: Unauthorized Access in ptyioctl (2)

0 views
Skip to first unread message

syzbot

unread,
May 18, 2024, 8:44:38 PMMay 18
to syzkaller-...@googlegroups.com
Hello,

syzbot found the following issue on:

HEAD commit: 3c6141f6f36b include all extra flavors of the kernel and u..
git tree: netbsd
console output: https://syzkaller.appspot.com/x/log.txt?x=121a5748980000
kernel config: https://syzkaller.appspot.com/x/.config?x=fab579639ba4bf0a
dashboard link: https://syzkaller.appspot.com/bug?extid=bcb3deaa3921cdbe0415
compiler: g++ (Debian 12.2.0-14) 12.2.0

Unfortunately, I don't have any reproducer for this issue yet.

Downloadable assets:
disk image: https://storage.googleapis.com/syzbot-assets/9e58629e6b15/disk-3c6141f6.raw.xz
netbsd.gdb: https://storage.googleapis.com/syzbot-assets/83cc756db7fa/netbsd-3c6141f6.gdb.xz

IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+bcb3de...@syzkaller.appspotmail.com

[ 94.7748406] panic: ASan: Unauthorized Access In 0xffffffff81c90f0a: Addr 0xffffa30013fb7390 [4 bytes, read, PoolUseAfterFree]

[ 94.7848287] cpu1: Begin traceback...
[ 94.8048277] vpanic() at netbsd:vpanic+0x282 sys/kern/subr_prf.c:288
[ 94.8748375] panic() at netbsd:panic+0x9e sys/kern/subr_prf.c:1084
[ 94.9248328] kasan_report() at netbsd:kasan_report+0x8f kasan_code_name sys/kern/subr_asan.c:169 [inline]
[ 94.9248328] kasan_report() at netbsd:kasan_report+0x8f sys/kern/subr_asan.c:201
[ 94.9748323] __asan_load4() at netbsd:__asan_load4+0x9d kasan_shadow_4byte_isvalid sys/kern/subr_asan.c:351 [inline]
[ 94.9748323] __asan_load4() at netbsd:__asan_load4+0x9d kasan_shadow_check sys/kern/subr_asan.c:418 [inline]
[ 94.9748323] __asan_load4() at netbsd:__asan_load4+0x9d sys/kern/subr_asan.c:1207
[ 95.0248312] ptyioctl() at netbsd:ptyioctl+0x723 sys/kern/tty_pty.c:1119
[ 95.0648423] cdev_ioctl() at netbsd:cdev_ioctl+0x197 sys/kern/subr_devsw.c:1525
[ 95.1048399] spec_ioctl() at netbsd:spec_ioctl+0x148 sys/miscfs/specfs/spec_vnops.c:1331
[ 95.1548387] VOP_IOCTL() at netbsd:VOP_IOCTL+0x132 sys/kern/vnode_if.c:933
[ 95.2048370] vn_ioctl() at netbsd:vn_ioctl+0x1c3 sys/kern/vfs_vnops.c:894
[ 95.2448341] sys_ioctl() at netbsd:sys_ioctl+0x8f6 sys/kern/sys_generic.c:675
[ 95.2948276] sys___syscall() at netbsd:sys___syscall+0x10e sy_call sys/sys/syscallvar.h:65 [inline]
[ 95.2948276] sys___syscall() at netbsd:sys___syscall+0x10e sys/kern/sys_syscall.c:90
[ 95.3348454] syscall() at netbsd:syscall+0x246 sy_call sys/sys/syscallvar.h:65 [inline]
[ 95.3348454] syscall() at netbsd:syscall+0x246 sy_invoke sys/sys/syscallvar.h:94 [inline]
[ 95.3348454] syscall() at netbsd:syscall+0x246 sys/arch/x86/x86/syscall.c:137
[ 95.3448403] --- syscall (number 54 via SYS_syscall) ---
[ 95.3648445] netbsd:syscall+0x246:
[ 95.3648445] cpu1: End traceback...
[ 95.3748384] fatal breakpoint trap in supervisor mode
[ 95.3748384] trap type 1 code 0 rip 0xffffffff8023240d cs 0x8 rflags 0x282 cr2 0x20000380 ilevel 0 rsp 0xffffa302485d66c0
[ 95.3848490] curlwp 0xffffa30012bf7200 pid 3692.3134 lowest kstack 0xffffa302485cf2c0
Stopped in pid 3692.3134 (syz-executor.3) at netbsd:breakpoint+0x5: leave
?
breakpoint() at netbsd:breakpoint+0x5
db_panic() at netbsd:db_panic+0x105 sys/ddb/db_panic.c:71
vpanic() at netbsd:vpanic+0x282 sys/kern/subr_prf.c:288
panic() at netbsd:panic+0x9e sys/kern/subr_prf.c:1084
kasan_report() at netbsd:kasan_report+0x8f kasan_code_name sys/kern/subr_asan.c:169 [inline]
kasan_report() at netbsd:kasan_report+0x8f sys/kern/subr_asan.c:201
__asan_load4() at netbsd:__asan_load4+0x9d kasan_shadow_4byte_isvalid sys/kern/subr_asan.c:351 [inline]
__asan_load4() at netbsd:__asan_load4+0x9d kasan_shadow_check sys/kern/subr_asan.c:418 [inline]
__asan_load4() at netbsd:__asan_load4+0x9d sys/kern/subr_asan.c:1207
ptyioctl() at netbsd:ptyioctl+0x723 sys/kern/tty_pty.c:1119
cdev_ioctl() at netbsd:cdev_ioctl+0x197 sys/kern/subr_devsw.c:1525
spec_ioctl() at netbsd:spec_ioctl+0x148 sys/miscfs/specfs/spec_vnops.c:1331
VOP_IOCTL() at netbsd:VOP_IOCTL+0x132 sys/kern/vnode_if.c:933
vn_ioctl() at netbsd:vn_ioctl+0x1c3 sys/kern/vfs_vnops.c:894
sys_ioctl() at netbsd:sys_ioctl+0x8f6 sys/kern/sys_generic.c:675
sys___syscall() at netbsd:sys___syscall+0x10e sy_call sys/sys/syscallvar.h:65 [inline]
sys___syscall() at netbsd:sys___syscall+0x10e sys/kern/sys_syscall.c:90
syscall() at netbsd:syscall+0x246 sy_call sys/sys/syscallvar.h:65 [inline]
syscall() at netbsd:syscall+0x246 sy_invoke sys/sys/syscallvar.h:94 [inline]
syscall() at netbsd:syscall+0x246 sys/arch/x86/x86/syscall.c:137
--- syscall (number 54 via SYS_syscall) ---
netbsd:syscall+0x246:
Panic string: ASan: Unauthorized Access In 0xffffffff81c90f0a: Addr 0xffffa30013fb7390 [4 bytes, read, PoolUseAfterFree]

PID LID S CPU FLAGS STRUCT LWP * NAME WAIT
3382 3382 2 0 0 ffffa30012c91480 syz-executor.2
3692 2792 3 1 180 ffffa30012c1b280 syz-executor.3 parked
3692 > 3134 7 1 0 ffffa30012bf7200 syz-executor.3
3692 3692 2 1 10000000 ffffa30013fdd4c0 syz-executor.3
2527 2527 2 1 0 ffffa30012ac50c0 syz-executor.0
2763 2763 2 0 0 ffffa30012cbe540 syz-executor.1
2640 2640 2 0 40000 ffffa30012bdca40 syz-executor.5
3381 3381 2 0 140 ffffa30013e45ac0 syz-executor.2
3379 > 3379 7 0 140 ffffa30013f93340 syz-executor.3
3146 3146 3 1 180 ffffa30012ac5500 syz-executor.0 parked
2992 2992 2 1 0 ffffa30013395a40 syz-executor.4
2345 2345 3 0 180 ffffa3001333b540 syz-executor.3 parked
3036 3036 3 0 180 ffffa30012bb55c0 syz-executor.1 parked
1868 1868 3 1 180 ffffa30012bdc600 syz-executor.5 parked
1499 1499 3 0 180 ffffa30012cd4a00 syz-executor.2 parked
1235 1736 3 0 10000180 ffffa300126db040 syz-fuzzer wait
1235 1207 3 0 180 ffffa30013f052c0 syz-fuzzer kqueue
1235 1209 3 1 180 ffffa30013e6fb00 syz-fuzzer parked
1235 1204 3 0 180 ffffa30013e6f280 syz-fuzzer wait
1235 1240 3 1 180 ffffa30013e45680 syz-fuzzer wait
1235 1246 3 0 180 ffffa30013de6a80 syz-fuzzer parked
1235 1108 3 1 180 ffffa30013dc5600 syz-fuzzer wait
1235 829 3 1 180 ffffa30013dc51c0 syz-fuzzer parked
1235 942 3 1 180 ffffa3001341eb40 syz-fuzzer parked
1235 449 3 1 180 ffffa3001341e700 syz-fuzzer parked
1235 1111 3 1 180 ffffa3001341e2c0 syz-fuzzer wait
1235 1229 3 1 180 ffffa300133a6a80 syz-fuzzer parked
1235 1080 2 1 140 ffffa300133b1ac0 syz-fuzzer
1235 1235 3 0 180 ffffa30012ac5940 syz-fuzzer wait
1238 1238 3 0 180 ffffa30012a97080 sshd select
1151 1151 3 1 180 ffffa300134819c0 getty nanoslp
1225 1225 3 0 180 ffffa300126d7b80 getty nanoslp
1216 1216 3 0 180 ffffa300134995c0 getty nanoslp
1184 1184 3 1 180 ffffa30013499180 getty ttyraw
1105 1105 3 0 180 ffffa300133a6640 sshd select
685 685 3 1 180 ffffa30012d68040 powerd kqueue
700 700 3 1 180 ffffa3001343fbc0 syslogd kqueue
746 746 3 0 180 ffffa30012c0bac0 dhcpcd poll
745 745 3 0 180 ffffa30012cb4500 dhcpcd poll
582 582 3 1 180 ffffa30012c1b6c0 dhcpcd poll
602 602 3 1 180 ffffa30012c7cbc0 dhcpcd poll
487 487 3 0 180 ffffa30012dad0c0 dhcpcd poll
292 292 3 1 180 ffffa30012d95900 dhcpcd poll
485 485 3 1 180 ffffa30012d954c0 dhcpcd poll
1 1 3 0 180 ffffa30012874180 init wait
0 673 3 0 200 ffffa300129bf6c0 physiod physiod
0 196 3 0 200 ffffa300129c1700 pooldrain pooldrain
0 195 3 0 200 ffffa300129c12c0 ioflush syncer
0 194 3 1 200 ffffa300129bfb00 pgdaemon pgdaemon
0 167 3 0 200 ffffa30012976ac0 usb7 usbevt
0 172 3 0 200 ffffa30012976680 usb6 usbevt
0 170 3 0 200 ffffa30012976240 usb5 usbevt
0 168 3 1 200 ffffa3001291ea80 usb4 usbevt
0 166 3 0 200 ffffa3001291e640 usb3 usbevt
0 165 3 0 200 ffffa3001291e200 usb2 usbevt
0 31 3 0 200 ffffa300128caa40 usb1 usbevt
0 63 3 0 200 ffffa300128ca600 usb0 usbevt
0 126 3 1 200 ffffa300128ca1c0 usbtask-dr usbtsk
0 125 3 1 200 ffffa30012874a00 usbtask-hc usbtsk
0 124 3 0 200 ffffa30010d66b00 swwreboot swwreboot
0 123 3 0 200 ffffa300128745c0 npfgc0 npfgcw
0 122 3 1 200 ffffa300128689c0 rt_free rt_free
0 121 3 1 200 ffffa30012868580 unpgc unpgc
0 120 3 0 200 ffffa30012868140 key_timehandler key_timehandler
0 119 3 1 200 ffffa30012707980 icmp6_wqinput/1 icmp6_wqinput
0 118 3 0 200 ffffa30012707540 icmp6_wqinput/0 icmp6_wqinput
0 117 3 1 200 ffffa30012707100 nd6_timer nd6_timer
0 116 3 1 200 ffffa300126ff940 carp6_wqinput/1 carp6_wqinput
0 115 3 0 200 ffffa300126ff500 carp6_wqinput/0 carp6_wqinput
0 114 3 1 200 ffffa300126ff0c0 carp_wqinput/1 carp_wqinput
0 113 3 0 200 ffffa300126f1900 carp_wqinput/0 carp_wqinput
0 112 3 1 200 ffffa300126f14c0 icmp_wqinput/1 icmp_wqinput
0 111 3 0 200 ffffa300126f1080 icmp_wqinput/0 icmp_wqinput
0 110 3 0 200 ffffa300126d9780 rt_timer rt_timer
0 109 3 0 200 ffffa300126db8c0 vmem_rehash vmem_rehash
0 100 3 0 200 ffffa300126d7300 entbutler entropy
0 99 3 0 200 ffffa300120bcb40 viomb balloon
0 98 3 1 200 ffffa300120bc700 vioif0_txrx/1 vioif0_txrx
0 97 3 0 200 ffffa300120bc2c0 vioif0_txrx/0 vioif0_txrx
0 30 3 0 200 ffffa30010d666c0 scsibus0 sccomp
0 29 3 0 200 ffffa30010d66280 pms0 pmsreset
0 28 3 1 200 ffffa30010cacac0 xcall/1 xcall
0 27 1 1 200 ffffa30010cac680 softser/1
0 26 1 1 200 ffffa30010cac240 softclk/1
0 25 1 1 200 ffffa30010ca8a80 softbio/1
0 24 3 1 200 ffffa30010ca8640 softnet/1 mutex
0 23 1 1 201 ffffa30010ca8200 idle/1
0 22 3 0 200 ffffa3000fb55a40 lnxsyswq lnxsyswq
0 21 3 0 200 ffffa3000fb55600 lnxubdwq lnxubdwq
0 20 3 1 200 ffffa3000fb551c0 lnxpwrwq lnxpwrwq
0 19 3 0 200 ffffa3000fb54a00 lnxlngwq lnxlngwq
0 18 3 0 200 ffffa3000fb545c0 lnxhipwq lnxhipwq
0 17 3 0 200 ffffa3000fb54180 lnxrcugc lnxrcugc
0 16 3 0 200 ffffa3000fb4d9c0 sysmon smtaskq
0 15 3 0 200 ffffa3000fb4d580 pmfsuspend pmfsuspend
0 14 3 0 200 ffffa3000fb4d140 pmfevent pmfevent
0 13 3 0 200 ffffa3000fb4a980 sopendfree sopendfr
0 12 3 0 200 ffffa3000fb4a540 ifwdog ifwdog
0 11 3 0 200 ffffa3000fb4a100 iflnkst iflnkst
0 10 3 0 200 ffffa3000fb3b940 nfssilly nfssilly
0 9 3 0 200 ffffa3000fb3b500 pooldisp pooldisp
0 8 3 1 200 ffffa3000fb3b0c0 modunload mod_unld
0 7 3 0 200 ffffa3000fb32900 xcall/0 xcall
0 6 1 0 200 ffffa3000fb324c0 softser/0
0 > 5 7 0 200 ffffa3000fb32080 softclk/0
0 4 1 0 200 ffffa3000fb308c0 softbio/0
0 3 1 0 200 ffffa3000fb30480 softnet/0
0 2 1 0 201 ffffa3000fb30040 idle/0
0 0 2 1 240 ffffffff8334fe40 swapper
[Locks tracked through LWPs]

****** LWP 3382.3382 (syz-executor.2) @ 0xffffa30012c91480, l_stat=2

*** Locks held:

* Lock 0 (initialized at netbsd:lwp_ctl_alloc+0x7a9 sys/kern/kern_lwp.c:1952)
lock address : ffffa30013f66b80
type : sleep/adaptive
initialized : netbsd:lwp_ctl_alloc+0x7a9
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffffa30012c91480 last held: 0xffffa30012c91480
last locked* : netbsd:lwp_ctl_alloc+0x129
unlocked : 0
owner field : 0xffffa30012c91480 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

*** Locks wanted:

* Lock 0 (initialized at netbsd:uvm_km_bootstrap+0x13e sys/uvm/uvm_km.c:294)
lock address : netbsd:kernel_map_store+0x18
type : sleep/adaptive
initialized : netbsd:uvm_km_bootstrap+0x13e
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 1
relevant cpu : 0 last held: 1
relevant lwp : 0xffffa30012c91480 last held: 000000000000000000
last locked : netbsd:vm_map_lock+0x48
unlocked* : netbsd:cv_wait+0x137
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 2527.2527 (syz-executor.0) @ 0xffffa30012ac50c0, l_stat=2

*** Locks held:

* Lock 0 (initialized at netbsd:kcov_open+0x40 sys/kern/subr_kcov.c:461)
lock address : ffffa30014116f40
type : sleep/adaptive
initialized : netbsd:kcov_open+0x40
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 1
relevant lwp : 0xffffa30012ac50c0 last held: 0xffffa30012ac50c0
last locked* : netbsd:kcov_fops_ioctl+0x28
unlocked : 0
owner field : 0xffffa30012ac50c0 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

*** Locks wanted: none

****** LWP 2763.2763 (syz-executor.1) @ 0xffffa30012cbe540, l_stat=2

*** Locks held:

* Lock 0 (initialized at netbsd:kcov_open+0x40 sys/kern/subr_kcov.c:461)
lock address : ffffa30014151340
type : sleep/adaptive
initialized : netbsd:kcov_open+0x40
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffffa30012cbe540 last held: 0xffffa30012cbe540
last locked* : netbsd:kcov_fops_ioctl+0x28
unlocked : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

* Lock 1 (initialized at netbsd:uvm_obj_init+0x9a sys/uvm/uvm_object.c:70)
lock address : ffffa300141514c0
type : sleep/adaptive
initialized : netbsd:uvm_obj_init+0x9a
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffffa30012cbe540 last held: 0xffffa30012cbe540
last locked* : netbsd:uvm_fault_internal+0x3f45
unlocked : netbsd:uao_get+0x3bd
owner/count : 000000000000000000 flags : 000000000000000000
Turnstile: no active turnstile for this lock.

* Lock 2 (initialized at netbsd:pmap_bootstrap+0xc3 sys/arch/x86/x86/pmap.c:1237)
lock address : netbsd:kernel_pmap_store+0x180
type : sleep/adaptive
initialized : netbsd:pmap_bootstrap+0xc3
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffffa30012cbe540 last held: 0xffffa30012cbe540
last locked* : netbsd:pmap_enter_ma+0x386
unlocked : netbsd:pmap_enter_ma+0xe14
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

*** Locks wanted: none

****** LWP 2640.2640 (syz-executor.5) @ 0xffffa30012bdca40, l_stat=2

*** Locks held:

* Lock 0 (initialized at netbsd:kcov_open+0x40 sys/kern/subr_kcov.c:461)
lock address : ffffa30014101d00
type : sleep/adaptive
initialized : netbsd:kcov_open+0x40
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffffa30012bdca40 last held: 0xffffa30012bdca40
last locked* : netbsd:kcov_fops_ioctl+0x28
unlocked : 0
owner field : 0xffffa30012bdca40 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

*** Locks wanted: none

****** LWP 2992.2992 (syz-executor.4) @ 0xffffa30013395a40, l_stat=2

*** Locks held:

* Lock 0 (initialized at netbsd:fork1+0x365 sys/kern/kern_fork.c:366)
lock address : ffffa30012a37390
type : sleep/adaptive
initialized : netbsd:fork1+0x365
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 0
relevant lwp : 0xffffa30013395a40 last held: 0xffffa30013395a40
last locked* : netbsd:exit1+0x2f2
unlocked : netbsd:execve_runproc+0x2211
owner/count : 0xffffa30013395a40 flags : 0x0000000000000004
Turnstile: no active turnstile for this lock.

*** Locks wanted: none

****** LWP 745.745 (dhcpcd) @ 0xffffa30012cb4500, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:module_hook_init+0x1c sys/kern/kern_module_hook.c:132)
lock address : netbsd:module_hook
type : sleep/adaptive
initialized : netbsd:module_hook_init+0x1c
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffffa30012cb4500 last held: 000000000000000000
last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 582.582 (dhcpcd) @ 0xffffa30012c1b6c0, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:module_hook_init+0x1c sys/kern/kern_module_hook.c:132)
lock address : netbsd:module_hook
type : sleep/adaptive
initialized : netbsd:module_hook_init+0x1c
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 0
relevant lwp : 0xffffa30012c1b6c0 last held: 000000000000000000
last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 292.292 (dhcpcd) @ 0xffffa30012d95900, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:module_hook_init+0x1c sys/kern/kern_module_hook.c:132)
lock address : netbsd:module_hook
type : sleep/adaptive
initialized : netbsd:module_hook_init+0x1c
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 0
relevant lwp : 0xffffa30012d95900 last held: 000000000000000000
last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 485.485 (dhcpcd) @ 0xffffa30012d954c0, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:module_hook_init+0x1c sys/kern/kern_module_hook.c:132)
lock address : netbsd:module_hook
type : sleep/adaptive
initialized : netbsd:module_hook_init+0x1c
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 0
relevant lwp : 0xffffa30012d954c0 last held: 000000000000000000
last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 0.26 (softclk/1) @ 0xffffa30010cac240, l_stat=1

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:module_hook_init+0x1c sys/kern/kern_module_hook.c:132)
lock address : netbsd:module_hook
type : sleep/adaptive
initialized : netbsd:module_hook_init+0x1c
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 0
relevant lwp : 0xffffa30010cac240 last held: 000000000000000000
last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 0.11 (iflnkst) @ 0xffffa3000fb4a100, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:module_hook_init+0x1c sys/kern/kern_module_hook.c:132)
lock address : netbsd:module_hook
type : sleep/adaptive
initialized : netbsd:module_hook_init+0x1c
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffffa3000fb4a100 last held: 000000000000000000
last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 0.5 (softclk/0) @ 0xffffa3000fb32080, l_stat=7

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:module_hook_init+0x1c sys/kern/kern_module_hook.c:132)
lock address : netbsd:module_hook
type : sleep/adaptive
initialized : netbsd:module_hook_init+0x1c
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffffa3000fb32080 last held: 000000000000000000
last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 0.0 (swapper) @ 0xffffffff8334fe40, l_stat=2

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:module_hook_init+0x1c sys/kern/kern_module_hook.c:132)
lock address : netbsd:module_hook
type : sleep/adaptive
initialized : netbsd:module_hook_init+0x1c
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 0
relevant lwp : 0xffffffff8334fe40 last held: 000000000000000000
last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

[Locks tracked through CPUs]

******* Locks held on cpu1:

* Lock 0 (initialized at netbsd:main+0x11e sys/kern/init_main.c:304)
lock address : netbsd:kernel_lock
type : spin
initialized : netbsd:main+0x11e
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 1
relevant lwp : 0xffffa30012bf7200 last held: 0xffffa30012bf7200
last locked* : netbsd:cdev_ioctl+0x218
unlocked : netbsd:frag6_fasttimo+0x54
curcpu holds : 1 wanted by: 000000000000000000

* Lock 1 (initialized at netbsd:kprintf_init+0x61 sys/kern/subr_prf.c:156)
lock address : netbsd:kprintf_mtx
type : spin
initialized : netbsd:kprintf_init+0x61
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 1
relevant lwp : 0xffffa30012bf7200 last held: 0xffffa30012bf7200
last locked* : netbsd:kprintf_lock+0x33
unlocked : netbsd:kprintf_unlock+0x53
owner field : 0x0000000000000800 wait/spin: 0/1

PAGE FLAG PQ UOBJECT UANON
0xffffa30000017180 0041 00000000 0x0 0x0
0xffffa30000017200 0041 00000000 0x0 0x0
0xffffa30000017280 0041 00000000 0x0 0x0
0xffffa30000017300 0041 00000000 0x0 0x0
0xffffa30000017380 0041 00000000 0x0 0x0
0xffffa30000017400 0041 00000000 0x0 0x0
0xffffa30000017480 0041 00000000 0x0 0x0
0xffffa30000017500 0041 00000000 0x0 0x0
0xffffa30000017580 0041 00000000 0x0 0x0
0xffffa30000017600 0041 00000000 0x0 0x0
0xffffa30000017680 0041 00000000 0x0 0x0
0xffffa30000017700 0041 00000000 0x0 0x0
0xffffa30000017780 0041 00000000 0x0 0x0
0xffffa30000017800 0041 00000000 0x0 0x0
0xffffa30000017880 0041 00000000 0x0 0x0
0xffffa30000017900 0041 00000000 0x0 0x0
0xffffa30000017980 0041 00000000 0x0 0x0
0xffffa30000017a00 0041 00000000 0x0 0x0
0xffffa30000017a80 0041 00000000 0x0 0x0
0xffffa30000017b00 0041 00000000 0x0 0x0
0xffffa30000017b80 0041 00000000 0x0 0x0
0xffffa30000017c00 0041 00000000 0x0 0x0
0xffffa30000017c80 0041 00000000 0x0 0x0
0xffffa30000017d00 0041 00000000 0x0 0x0
0xffffa30000017d80 0041 00000000 0x0 0x0
0xffffa30000017e00 0041 00000000 0x0 0x0
0xffffa30000017e80 0041 00000000 0x0 0x0
0xffffa30000017f00 0041 00000000 0x0 0x0
0xffffa30000017f80 0041 00000000 0x0 0x0
0xffffa30000018000 0041 00000000 0x0 0x0
0xffffa30000018080 0041 00000000 0x0 0x0
0xffffa30000018100 0041 00000000 0x0 0x0
0xffffa30000018180 0041 00000000 0x0 0x0
0xffffa30000018200 0041 00000000 0x0 0x0
0xffffa30000018280 0041 00000000 0x0 0x0
0xffffa30000018300 0041 00000000 0x0 0x0
0xffffa30000018380 0041 00000000 0x0 0x0
0xffffa30000018400 0041 00000000 0x0 0x0
0xffffa30000018480 0041 00000000 0x0 0x0
0xffffa30000018500 0041 00000000 0x0 0x0
0xffffa30000018580 0041 00000000 0x0 0x0
0xffffa30000018600 0041 00000000 0x0 0x0
0xffffa30000018680 0041 00000000 0x0 0x0
0xffffa30000018700 0041 00000000 0x0 0x0
0xffffa30000018780 0041 00000000 0x0 0x0
0xffffa30000018800 0041 00000000 0x0 0x0
0xffffa30000018880 0041 00000000 0x0 0x0
0xffffa30000018900 0041 00000000 0x0 0x0
0xffffa30000018980 0041 00000000 0x0 0x0
0xffffa30000018a00 0041 00000000 0x0 0x0
0xffffa30000018a80 0041 00000000 0x0 0x0
0xffffa30000018b00 0041 00000000 0x0 0x0
0xffffa30000018b80 0041 00000000 0x0 0x0
0xffffa30000018c00 0041 00000000 0x0 0x0
0xffffa30000018c80 0041 00000000 0x0 0x0
0xffffa30000018d00 0041 00000000 0x0 0x0
0xffffa30000018d80 0041 00000000 0x0 0x0
0xffffa30000018e00 0041 00000000 0x0 0x0
0xffffa30000018e80 0041 00000000 0x0 0x0
0xffffa30000018f00 0041 00000000 0x0 0x0
0xffffa30000018f80 0041 00000000 0x0 0x0
0xffffa30000019000 0041 00000000 0x0 0x0
0xffffa30000019080 0041 00000000 0x0 0x0
0xffffa30000019100 0041 00000000 0x0 0x0
0xffffa30000019180 0041 00000000 0x0 0x0
0xffffa30000019200 0041 00000000 0x0 0x0
0xffffa30000019280 0041 00000000 0x0 0x0
0xffffa30000019300 0041 00000000 0x0 0x0
0xffffa30000019380 0041 00000000 0x0 0x0
0xffffa30000019400 0041 00000000 0x0 0x0
0xffffa30000019480 0041 00000000 0x0 0x0
0xffffa30000019500 0041 00000000 0x0 0x0
0xffffa30000019580 0041 00000000 0x0 0x0
0xffffa30000019600 0041 00000000 0x0 0x0
0xffffa30000019680 0041 00000000 0x0 0x0
0xffffa30000019700 0041 00000000 0x0 0x0
0xffffa30000019780 0041 00000000 0x0 0x0
0xffffa30000019800 0041 00000000 0x0 0x0
0xffffa30000019880 0041 00000000 0x0 0x0
0xffffa30000019900 0041 00000000 0x0 0x0
0xffffa30000019980 0041 00000000 0x0 0x0
0xffffa30000019a00 0041 00000000 0x0 0x0
0xffffa30000019a80 0041 00000000 0x0 0x0
0xffffa30000019b00 0041 00000000 0x0 0x0
0xffffa30000019b80 0041 00000000 0x0 0x0
0xffffa30000019c00 0041 00000000 0x0 0x0
0xffffa30000019c80 0041 00000000 0x0 0x0
0xffffa30000019d00 0041 00000000 0x0 0x0
0xffffa30000019d80 0041 00000000 0x0 0x0
0xffffa30000019e00 0041 00000000 0x0 0x0
0xffffa30000019e80 0041 00000000 0x0 0x0
0xffffa30000019f00 0041 00000000 0x0 0x0
0xffffa30000019f80 0041 00000000 0x0 0x0
0xffffa3000001a000 0041 00000000 0x0 0x0
0xffffa3000001a080 0041 00000000 0x0 0x0
0xffffa3000001a100 0041 00000000 0x0 0x0
0xffffa3000001a180 0041 00000000 0x0 0x0
0xffffa3000001a200 0041 00000000 0x0 0x0
0xffffa3000001a280 0041 00000000 0x0 0x0
0xffffa3000001a300 0041 00000000 0x0 0x0
0xffffa3000001a380 0041 00000000 0x0 0x0
0xffffa3000001a400 0041 00000000 0x0 0x0
0xffffa3000001a480 0041 00000000 0x0 0x0
0xffffa3000001a500 0041 00000000 0x0 0x0
0xffffa3000001a580 0041 00000000 0x0 0x0
0xffffa3000001a600 0041 00000000 0x0 0x0
0xffffa3000001a680 0041 00000000 0x0 0x0
0xffffa3000001a700 0041 00000000 0x0 0x0
0xffffa3000001a780 0041 00000000 0x0 0x0
0xffffa3000001a800 0041 00000000 0x0 0x0
0xffffa3000001a880 0041 00000000 0x0 0x0
0xffffa3000001a900 0041 00000000 0x0 0x0
0xffffa3000001a980 0041 00000000 0x0 0x0
0xffffa3000001aa00 0041 00000000 0x0 0x0
0xffffa3000001aa80 0041 00000000 0x0 0x0
0xffffa3000001ab00 0041 00000000 0x0 0x0
0xffffa3000001ab80 0041 00000000 0x0 0x0
0xffffa3000001ac00 0041 00000000 0x0 0x0
0xffffa3000001ac80 0041 00000000 0x0 0x0
0xffffa3000001ad00 0041 00000000 0x0 0x0
0xffffa3000001ad80 0041 00000000 0x0 0x0
0xffffa3000001ae00 0041 00000000 0x0 0x0
0xffffa3000001ae80 0041 00000000 0x0 0x0
0xffffa3000001af00 0041 00000000 0x0 0x0
0xffffa3000001af80 0041 00000000 0x0 0x0
0xffffa3000001b000 0041 00000000 0x0 0x0
0xffffa3000001b080 0041 00000000 0x0 0x0
0xffffa3000001b100 0041 00000000 0x0 0x0
0xffffa3000001b180 0041 00000000 0x0 0x0
0xffffa3000001b200 0041 00000000 0x0 0x0
0xffffa3000001b280 0041 00000000 0x0 0x0
0xffffa3000001b300 0041 00000000 0x0 0x0
0xffffa3000001b380 0041 00000000 0x0 0x0
0xffffa3000001b400 0041 00000000 0x0 0x0
0xffffa3000001b480 0041 00000000 0x0 0x0
0xffffa3000001b500 0041 00000000 0x0 0x0
0xffffa3000001b580 0041 00000000 0x0 0x0
0xffffa3000001b600 0041 00000000 0x0 0x0
0xffffa3000001b680 0041 00000000 0x0 0x0
0xffffa3000001b700 0041 00000000 0x0 0x0
0xffffa3000001b780 0041 00000000 0x0 0x0
0xffffa3000001b800 0041 00000000 0x0 0x0
0xffffa3000001b880 0041 00000000 0x0 0x0
0xffffa3000001b900 0041 00000000 0x0 0x0
0xffffa3000001b980 0041 00000000 0x0 0x0
0xffffa3000001ba00 0041 00000000 0x0 0x0
0xffffa3000001ba80 0041 00000000 0x0 0x0
0xffffa3000001bb00 0001 00000000 0x0 0x0
0xffffa3000001bb80 0001 00000000 0x0 0x0
0xffffa3000001bc00 0001 00000000 0x0 0x0
0xffffa3000001bc80 0001 00000000 0x0 0x0
0xffffa3000001bd00 0001 00000000 0x0 0x0
0xffffa3000001bd80 0001 00000000 0x0 0x0
0xffffa3000001be00 0001 00000000 0x0 0x0
0xffffa3000001be80 0001 00000000 0x0 0x0
0xffffa3000001bf00 0001 00000000 0x0 0x0
0xffffa3000001bf80 0001 00000000 0x0 0x0
0xffffa3000001c000 0001 00000000 0x0 0x0
0xffffa3000001c080 0001 00000000 0x0 0x0
0xffffa3000001c100 0001 00000000 0x0 0x0
0xffffa3000001c180 0001 00000000 0x0 0x0
0xffffa3000001c200 0001 00000000 0x0 0x0
0xffffa3000001c280 0001 00000000 0x0 0x0
0xffffa3000001c300 0001 00000000 0x0 0x0
0xffffa3000001c380 0001 00000000 0x0 0x0
0xffffa3000001c400 0001 00000000 0x0 0x0
0xffffa3000001c480 0001 00000000 0x0 0x0
0xffffa3000001c500 0001 00000000 0x0 0x0
0xffffa3000001c580 0001 00000000 0x0 0x0
0xffffa3000001c600 0001 00000000 0x0 0x0
0xffffa3000001c680 0001 00000000 0x0 0x0
0xffffa3000001c700 0001 00000000 0x0 0x0
0xffffa3000001c780 0001 00000000 0x0 0x0
0xffffa3000001c800 0001 00000000 0x0 0x0
0xffffa3000001c880 0001 00000000 0x0 0x0
0xffffa3000001c900 0001 00000000 0x0 0x0
0xffffa3000001c980 0001 00000000 0x0 0x0
0xffffa3000001ca00 0001 00000000 0x0 0x0
0xffffa3000001ca80 0001 00000000 0x0 0x0
0xffffa3000001cb00 0001 00000000 0x0 0x0
0xffffa3000001cb80 0001 00000000 0x0 0x0
0xffffa3000001cc00 0001 00000000 0x0 0x0
0xffffa3000001cc80 0001 00000000 0x0 0x0
0xffffa3000001cd00 0001 00000000 0x0 0x0
0xffffa3000001cd80 0001 00000000 0x0 0x0
0xffffa3000001ce00 0001 00000000 0x0 0x0
0xffffa3000001ce80 0001 00000000 0x0 0x0
0xffffa3000001cf00 0001 00000000 0x0 0x0
0xffffa3000001cf80 0001 00000000 0x0 0x0
0xffffa3000001d000 0001 00000000 0x0 0x0
0xffffa3000001d080 0001 00000000 0x0 0x0
0xffffa3000001d100 0001 00000000 0x0 0x0
0xffffa3000001d180 0001 00000000 0x0 0x0
0xffffa3000001d200 0001 00000000 0x0 0x0
0xffffa3000001d280 0001 00000000 0x0 0x0
0xffffa3000001d300 0001 00000000 0x0 0x0
0xffffa3000001d380 0001 00000000 0x0 0x0
0xffffa3000001d400 0001 00000000 0x0 0x0
0xffffa3000001d480 0001 00000000 0x0 0x0
0xffffa3000001d500 0001 00000000 0x0 0x0
0xffffa3000001d580 0001 00000000 0x0 0x0
0xffffa3000001d600 0001 00000000 0x0 0x0
0xffffa3000001d680 0001 00000000 0x0 0x0
0xffffa3000001d700 0001 00000000 0x0 0x0
0xffffa3000001d780 0001 00000000 0x0 0x0
0xffffa3000001d800 0001 00000000 0x0 0x0
0xffffa3000001d880 0001 00000000 0x0 0x0
0xffffa3000001d900 0001 00000000 0x0 0x0
0xffffa3000001d980 0001 00000000 0x0 0x0
0xffffa3000001da00 0001 00000000 0x0 0x0
0xffffa3000001da80 0001 00000000 0x0 0x0
0xffffa3000001db00 0001 00000000 0x0 0x0
0xffffa3000001db80 0001 00000000 0x0 0x0
0xffffa3000001dc00 0001 00000000 0x0 0x0
0xffffa3000001dc80 0001 00000000 0x0 0x0
0xffffa3000001dd00 0001 00000000 0x0 0x0
0xffffa3000001dd80 0001 00000000 0x0 0x0
0xffffa3000001de00 0001 00000000 0x0 0x0
0xffffa3000001de80 0001 00000000 0x0 0x0
0xffffa3000001df00 0001 00000000 0x0 0x0
0xffffa3000001df80 0001 00000000 0x0 0x0
0xffffa3000001e000 0001 00000000 0x0 0x0
0xffffa3000001e080 0001 00000000 0x0 0x0
0xffffa3000001e100 0001 00000000 0x0 0x0
0xffffa3000001e180 0001 00000000 0x0 0x0
0xffffa3000001e200 0001 00000000 0x0 0x0
0xffffa3000001e280 0001 00000000 0x0 0x0
0xffffa3000001e300 0001 00000000 0x0 0x0
0xffffa3000001e380 0001 00000000 0x0 0x0
0xffffa3000001e400 0001 00000000 0x0 0x0
0xffffa3000001e480 0001 00000000 0x0 0x0
0xffffa3000001e500 0001 00000000 0x0 0x0
0xffffa3000001e580 0001 00000000 0x0 0x0
0xffffa3000001e600 0001 00000000 0x0 0x0
0xffffa3000001e680 0001 00000000 0x0 0x0
0xffffa3000001e700 0001 00000000 0x0 0x0
0xffffa3000001e780 0001 00000000 0x0 0x0
0xffffa3000001e800 0001 00000000 0x0 0x0
0xffffa3000001e880 0001 00000000 0x0 0x0
0xffffa3000001e900 0001 00000000 0x0 0x0
0xffffa3000001e980 0001 00000000 0x0 0x0
0xffffa3000001ea00 0001 00000000 0x0 0x0
0xffffa3000001ea80 0001 00000000 0x0 0x0
0xffffa3000001eb00 0001 00000000 0x0 0x0
0xffffa3000001eb80 0001 00000000 0x0 0x0
0xffffa3000001ec00 0001 00000000 0x0 0x0
0xffffa3000001ec80 0001 00000000 0x0 0x0
0xffffa3000001ed00 0001 00000000 0x0 0x0
0xffffa3000001ed80 0001 00000000 0x0 0x0
0xffffa3000001ee00 0001 00000000 0x0 0x0
0xffffa3000001ee80 0001 00000000 0x0 0x0
0xffffa3000001ef00 0001 00000000 0x0 0x0
0xffffa3000001ef80 0001 00000000 0x0 0x0
0xffffa3000001f000 0001 00000000 0x0 0x0
0xffffa3000001f080 0001 00000000 0x0 0x0
0xffffa3000001f100 0001 00000000 0x0 0x0
0xffffa3000001f180 0001 00000000 0x0 0x0
0xffffa3000001f200 0001 00000000 0x0 0x0
0xffffa3000001f280 0001 00000000 0x0 0x0
0xffffa3000001f300 0001 00000000 0x0 0x0
0xffffa3000001f380 0001 00000000 0x0 0x0
0xffffa3000001f400 0001 00000000 0x0 0x0
0xffffa3000001f480 0001 00000000 0x0 0x0
0xffffa3000001f500 0001 00000000 0x0 0x0
0xffffa3000001f580 0001 00000000 0x0 0x0
0xffffa3000001f600 0001 00000000 0x0 0x0
0xffffa3000001f680 0001 00000000 0x0 0x0
0xffffa3000001f700 0001 00000000 0x0 0x0
0xffffa3000001f780 0001 00000000 0x0 0x0
0xffffa3000001f800 0001 00000000 0x0 0x0
0xffffa3000001f880 0001 00000000 0x0 0x0
0xffffa3000001f900 0001 00000000 0x0 0x0
0xffffa3000001f980 0001 00000000 0x0 0x0
0xffffa3000001fa00 0001 00000000 0x0 0x0
0xffffa3000001fa80 0001 00000000 0x0 0x0
0xffffa3000001fb00 0001 00000000 0x0 0x0
0xffffa3000001fb80 0001 00000000 0x0 0x0
0xffffa3000001fc00 0001 00000000 0x0 0x0
0xffffa3000001fc80 0001 00000000 0x0 0x0
0xffffa3000001fd00 0001 00000000 0x0 0x0
0xffffa3000001fd80 0001 00000000 0x0 0x0
0xffffa3000001fe00 0001 00000000 0x0 0x0
0xffffa3000001fe80 0001 00000000 0x0 0x0
0xffffa3000001ff00 0001 00000000 0x0 0x0
0xffffa3000001ff80 0001 00000000 0x0 0x0
0xffffa30000020000 0001 00000000 0x0 0x0
0xffffa30000020080 0001 00000000 0x0 0x0
0xffffa30000020100 0001 00000000 0x0 0x0
0xffffa30000020180 0001 00000000 0x0 0x0
0xffffa30000020200 0001 00000000 0x0 0x0
0xffffa30000020280 0001 00000000 0x0 0x0
0xffffa30000020300 0001 00000000 0x0 0x0
0xffffa30000020380 0001 00000000 0x0 0x0
0xffffa30000020400 0001 00000000 0x0 0x0
0xffffa30000020480 0001 00000000 0x0 0x0
0xffffa30000020500 0001 00000000 0x0 0x0
0xffffa30000020580 0001 00000000 0x0 0x0
0xffffa30000020600 0001 00000000 0x0 0x0
0xffffa30000020680 0001 00000000 0x0 0x0
0xffffa30000020700 0001 00000000 0x0 0x0
0xffffa30000020780 0001 00000000 0x0 0x0
0xffffa30000020800 0001 00000000 0x0 0x0
0xffffa30000020880 0001 00000000 0x0 0x0
0xffffa30000020900 0001 00000000 0x0 0x0
0xffffa30000020980 0001 00000000 0x0 0x0
0xffffa30000020a00 0001 00000000 0x0 0x0
0xffffa30000020a80 0001 00000000 0x0 0x0
0xffffa30000020b00 0001 00000000 0x0 0x0
0xffffa30000020b80 0001 00000000 0x0 0x0
0xffffa30000020c00 0001 00000000 0x0 0x0
0xffffa30000020c80 0001 00000000 0x0 0x0
0xffffa30000020d00 0001 00000000 0x0 0x0
0xffffa30000020d80 0001 00000000 0x0 0x0
0xffffa30000020e00 0001 00000000 0x0 0x0
0xffffa30000020e80 0001 00000000 0x0 0x0
0xffffa30000020f00 0001 00000000 0x0 0x0
0xffffa30000020f80 0001 00000000 0x0 0x0
0xffffa30000021000 0001 00000000 0x0 0x0
0xffffa30000021080 0001 00000000 0x0 0x0
0xffffa30000021100 0001 00000000 0x0 0x0
0xffffa30000021180 0001 00000000 0x0 0x0
0xffffa30000021200 0001 00000000 0x0 0x0
0xffffa30000021280 0001 00000000 0x0 0x0
0xffffa30000021300 0001 00000000 0x0 0x0
0xffffa30000021380 0001 00000000 0x0 0x0
0xffffa30000021400 0001 00000000 0x0 0x0
0xffffa30000021480 0001 00000000 0x0 0x0
0xffffa30000021500 0001 00000000 0x0 0x0
0xffffa30000021580 0001 00000000 0x0 0x0
0xffffa30000021600 0001 00000000 0x0 0x0
0xffffa30000021680 0001 00000000 0x0 0x0
0xffffa30000021700 0001 00000000 0x0 0x0
0xffffa30000021780 0001 00000000 0x0 0x0
0xffffa30000021800 0001 00000000 0x0 0x0
0xffffa30000021880 0001 00000000 0x0 0x0
0xffffa30000021900 0001 00000000 0x0 0x0
0xffffa30000021980 0001 00000000 0x0 0x0
0xffffa30000021a00 0001 00000000 0x0 0x0
0xffffa30000021a80 0001 00000000 0x0 0x0
0xffffa30000021b00 0001 00000000 0x0 0x0
0xffffa30000021b80 0001 00000000 0x0 0x0
0xffffa30000021c00 0001 00000000 0x0 0x0
0xffffa30000021c80 0001 00000000 0x0 0x0
0xffffa30000021d00 0001 00000000 0x0 0x0
0xffffa30000021d80 0001 00000000 0x0 0x0
0xffffa30000021e00 0001 00000000 0x0 0x0
0xffffa30000021e80 0001 00000000 0x0 0x0
0xffffa30000021f00 0001 00000000 0x0 0x0
0xffffa30000021f80 0001 00000000 0x0 0x0
0xffffa30000022000 0001 00000000 0x0 0x0
0xffffa30000022080 0001 00000000 0x0 0x0
0xffffa30000022100 0001 00000000 0x0 0x0
0xffffa30000022180 0001 00000000 0x0 0x0
0xffffa30000022200 0001 00000000 0x0 0x0
0xffffa30000022280 0001 00000000 0x0 0x0
0xffffa30000022300 0001 00000000 0x0 0x0
0xffffa30000022380 0001 00000000 0x0 0x0
0xffffa30000022400 0001 00000000 0x0 0x0
0xffffa30000022480 0001 00000000 0x0 0x0
0xffffa30000022500 0001 00000000 0x0 0x0
0xffffa30000022580 0001 00000000 0x0 0x0
0xffffa30000022600 0001 00000000 0x0 0x0
0xffffa30000022680 0001 00000000 0x0 0x0
0xffffa30000022700 0001 00000000 0x0 0x0
0xffffa30000022780 0001 00000000 0x0 0x0
0xffffa30000022800 0001 00000000 0x0 0x0
0xffffa30000022880 0001 00000000 0x0 0x0
0xffffa30000022900 0001 00000000 0x0 0x0
0xffffa30000022980 0001 00000000 0x0 0x0
0xffffa30000022a00 0001 00000000 0x0 0x0
0xffffa30000022a80 0001 00000000 0x0 0x0
0xffffa30000022b00 0001 00000000 0x0 0x0
0xffffa30000022b80 0001 00000000 0x0 0x0
0xffffa30000022c00 0001 00000000 0x0 0x0
0xffffa30000022c80 0001 00000000 0x0 0x0
0xffffa30000022d00 0001 00000000 0x0 0x0
0xffffa30000022d80 0001 00000000 0x0 0x0
0xffffa30000022e00 0001 00000000 0x0 0x0
0xffffa30000022e80 0001 00000000 0x0 0x0
0xffffa30000022f00 0001 00000000 0x0 0x0
0xffffa30000022f80 0001 00000000 0x0 0x0
0xffffa30000023000 0001 00000000 0x0 0x0
0xffffa30000023080 0001 00000000 0x0 0x0
0xffffa30000023100 0001 00000000 0x0 0x0
0xffffa30000023180 0001 00000000 0x0 0x0
0xffffa30000023200 0001 00000000 0x0 0x0
0xffffa30000023280 0001 00000000 0x0 0x0
0xffffa30000023300 0001 00000000 0x0 0x0
0xffffa30000023380 0001 00000000 0x0 0x0
0xffffa30000023400 0001 00000000 0x0 0x0
0xffffa30000023480 0001 00000000 0x0 0x0
0xffffa30000023500 0001 00000000 0x0 0x0
0xffffa30000023580 0001 00000000 0x0 0x0
0xffffa30000023600 0001 00000000 0x0 0x0
0xffffa30000023680 0001 00000000 0x0 0x0
0xffffa30000023700 0001 00000000 0x0 0x0
0xffffa30000023780 0001 00000000 0x0 0x0
0xffffa30000023800 0001 00000000 0x0 0x0
0xffffa30000023880 0001 00000000 0x0 0x0
0xffffa30000023900 0001 00000000 0x0 0x0
0xffffa30000023980 0001 00000000 0x0 0x0
0xffffa30000023a00 0001 00000000 0x0 0x0
0xffffa30000023a80 0001 00000000 0x0 0x0
0xffffa30000023b00 0001 00000000 0x0 0x0
0xffffa30000023b80 0001 00000000 0x0 0x0
0xffffa30000023c00 0001 00000000 0x0 0x0
0xffffa30000023c80 0001 00000000 0x0 0x0
0xffffa30000023d00 0001 00000000 0x0 0x0
0xffffa30000023d80 0001 00000000 0x0 0x0
0xffffa30000023e00 0001 00000000 0x0 0x0
0xffffa30000023e80 0001 00000000 0x0 0x0
0xffffa30000023f00 0001 00000000 0x0 0x0
0xffffa30000023f80 0001 00000000 0x0 0x0
0xffffa30000024000 0001 00000000 0x0 0x0
0xffffa30000024080 0001 00000000 0x0 0x0
0xffffa30000024100 0001 00000000 0x0 0x0
0xffffa30000024180 0001 00000000 0x0 0x0
0xffffa30000024200 0001 00000000 0x0 0x0
0xffffa30000024280 0001 00000000 0x0 0x0
0xffffa30000024300 0001 00000000 0x0 0x0
0xffffa30000024380 0001 00000000 0x0 0x0
0xffffa30000024400 0001 00000000 0x0 0x0
0xffffa30000024480 0001 00000000 0x0 0x0
0xffffa30000024500 0001 00000000 0x0 0x0
0xffffa30000024580 0001 00000000 0x0 0x0
0xffffa30000024600 0001 00000000 0x0 0x0
0xffffa30000024680 0001 00000000 0x0 0x0
0xffffa30000024700 0001 00000000 0x0 0x0
0xffffa30000024780 0001 00000000 0x0 0x0
0xffffa30000024800 0001 00000000 0x0 0x0
0xffffa30000024880 0001 00000000 0x0 0x0
0xffffa30000024900 0001 00000000 0x0 0x0
0xffffa30000024980 0001 00000000 0x0 0x0
0xffffa30000024a00 0001 00000000 0x0 0x0
0xffffa30000024a80 0001 00000000 0x0 0x0
0xffffa30000024b00 0001 00000000 0x0 0x0
0xffffa30000024b80 0001 00000000 0x0 0x0
0xffffa30000024c00 0001 00000000 0x0 0x0
0xffffa30000024c80 0001 00000000 0x0 0x0
0xffffa30000024d00 0001 00000000 0x0 0x0
0xffffa30000024d80 0001 00000000 0x0 0x0
0xffffa30000024e00 0001 00000000 0x0 0x0
0xffffa30000024e80 0001 00000000 0x0 0x0
0xffffa30000024f00 0001 00000000 0x0 0x0
0xffffa30000024f80 0001 00000000 0x0 0x0
0xffffa30000025000 0001 00000000 0x0 0x0
0xffffa30000025080 0001 00000000 0x0 0x0
0xffffa30000025100 0001 00000000 0x0 0x0
0xffffa30000025180 0001 00000000 0x0 0x0
0xffffa30000025200 0001 00000000 0x0 0x0
0xffffa30000025280 0001 00000000 0x0 0x0
0xffffa30000025300 0001 00000000 0x0 0x0
0xffffa30000025380 0001 00000000 0x0 0x0
0xffffa30000025400 0001 00000000 0x0 0x0
0xffffa30000025480 0001 00000000 0x0 0x0
0xffffa30000025500 0001 00000000 0x0 0x0
0xffffa30000025580 0001 00000000 0x0 0x0
0xffffa30000025600 0001 00000000 0x0 0x0
0xffffa30000025680 0001 00000000 0x0 0x0
0xffffa30000025700 0001 00000000 0x0 0x0
0xffffa30000025780 0001 00000000 0x0 0x0
0xffffa30000025800 0001 00000000 0x0 0x0
0xffffa30000025880 0001 00000000 0x0 0x0
0xffffa30000025900 0001 00000000 0x0 0x0
0xffffa30000025980 0001 00000000 0x0 0x0
0xffffa30000025a00 0001 00000000 0x0 0x0
0xffffa30000025a80 0001 00000000 0x0 0x0
0xffffa30000025b00 0001 00000000 0x0 0x0
0xffffa30000025b80 0001 00000000 0x0 0x0
0xffffa30000025c00 0001 00000000 0x0 0x0
0xffffa30000025c80 0001 00000000 0x0 0x0
0xffffa30000025d00 0001 00000000 0x0 0x0
0xffffa30000025d80 0001 00000000 0x0 0x0
0xffffa30000025e00 0001 00000000 0x0 0x0
0xffffa30000025e80 0001 00000000 0x0 0x0
0xffffa30000025f00 0001 00000000 0x0 0x0
0xffffa30000025f80 0001 00000000 0x0 0x0
0xffffa30000026000 0001 00000000 0x0 0x0
0xffffa30000026080 0001 00000000 0x0 0x0
0xffffa30000026100 0001 00000000 0x0 0x0
0xffffa30000026180 0001 00000000 0x0 0x0
0xffffa30000026200 0001 00000000 0x0 0x0
0xffffa30000026280 0001 00000000 0x0 0x0
0xffffa30000026300 0001 00000000 0x0 0x0
0xffffa30000026380 0001 00000000 0x0 0x0
0xffffa30000026400 0001 00000000 0x0 0x0
0xffffa30000026480 0001 00000000 0x0 0x0
0xffffa30000026500 0001 00000000 0x0 0x0
0xffffa30000026580 0001 00000000 0x0 0x0
0xffffa30000026600 0001 00000000 0x0 0x0
0xffffa30000026680 0001 00000000 0x0 0x0
0xffffa30000026700 0001 00000000 0x0 0x0
0xffffa30000026780 0001 00000000 0x0 0x0
0xffffa30000026800 0001 00000000 0x0 0x0
0xffffa30000026880 0001 00000000 0x0 0x0
0xffffa30000026900 0001 00000000 0x0 0x0
0xffffa30000026980 0001 00000000 0x0 0x0
0xffffa30000026a00 0001 00000000 0x0 0x0
0xffffa30000026a80 0001 00000000 0x0 0x0
0xffffa30000026b00 0001 00000000 0x0 0x0
0xffffa30000026b80 0001 00000000 0x0 0x0
0xffffa30000026c00 0001 00000000 0x0 0x0
0xffffa30000026c80 0001 00000000 0x0 0x0
0xffffa30000026d00 0001 00000000 0x0 0x0
0xffffa30000026d80 0001 00000000 0x0 0x0
0xffffa30000026e00 0001 00000000 0x0 0x0
0xffffa30000026e80 0001 00000000 0x0 0x0
0xffffa30000026f00 0001 00000000 0x0 0x0
0xffffa30000026f80 0001 00000000 0x0 0x0
0xffffa30000027000 0001 00000000 0x0 0x0
0xffffa30000027080 0001 00000000 0x0 0x0
0xffffa30000027100 0001 00000000 0x0 0x0
0xffffa30000027180 0001 00000000 0x0 0x0
0xffffa30000027200 0001 00000000 0x0 0x0
0xffffa30000027280 0001 00000000 0x0 0x0
0xffffa30000027300 0001 00000000 0x0 0x0
0xffffa30000027380 0001 00000000 0x0 0x0
0xffffa30000027400 0001 00000000 0x0 0x0
0xffffa30000027480 0001 00000000 0x0 0x0
0xffffa30000027500 0001 00000000 0x0 0x0
0xffffa30000027580 0001 00000000 0x0 0x0
0xffffa30000027600 0001 00000000 0x0 0x0
0xffffa30000027680 0001 00000000 0x0 0x0
0xffffa30000027700 0001 00000000 0x0 0x0
0xffffa30000027780 0001 00000000 0x0 0x0
0xffffa30000027800 0001 00000000 0x0 0x0
0xffffa30000027880 0001 00000000 0x0 0x0
0xffffa30000027900 0001 00000000 0x0 0x0
0xffffa30000027980 0001 00000000 0x0 0x0
0xffffa30000027a00 0001 00000000 0x0 0x0
0xffffa30000027a80 0001 00000000 0x0 0x0
0xffffa30000027b00 0001 00000000 0x0 0x0
0xffffa30000027b80 0001 00000000 0x0 0x0
0xffffa30000027c00 0001 00000000 0x0 0x0
0xffffa30000027c80 0001 00000000 0x0 0x0
0xffffa30000027d00 0001 00000000 0x0 0x0
0xffffa30000027d80 0001 00000000 0x0 0x0
0xffffa30000027e00 0001 00000000 0x0 0x0
0xffffa30000027e80 0001 00000000 0x0 0x0
0xffffa30000027f00 0001 00000000 0x0 0x0
0xffffa30000027f80 0001 00000000 0x0 0x0
0xffffa30000028000 0001 00000000 0x0 0x0
0xffffa30000028080 0001 00000000 0x0 0x0
0xffffa30000028100 0001 00000000 0x0 0x0
0xffffa30000028180 0001 00000000 0x0 0x0
0xffffa30000028200 0001 00000000 0x0 0x0
0xffffa30000028280 0001 00000000 0x0 0x0
0xffffa30000028300 0001 00000000 0x0 0x0
0xffffa30000028380 0001 00000000 0x0 0x0
0xffffa30000028400 0001 00000000 0x0 0x0
0xffffa30000028480 0001 00000000 0x0 0x0
0xffffa30000028500 0001 00000000 0x0 0x0
0xffffa30000028580 0001 00000000 0x0 0x0
0xffffa30000028600 0001 00000000 0x0 0x0
0xffffa30000028680 0001 00000000 0x0 0x0
0xffffa30000028700 0001 00000000 0x0 0x0
0xffffa30000028780 0001 00000000 0x0 0x0
0xffffa30000028800 0001 00000000 0x0 0x0
0xffffa30000028880 0001 00000000 0x0 0x0
0xffffa30000028900 0001 00000000 0x0 0x0
0xffffa30000028980 0001 00000000 0x0 0x0
0xffffa30000028a00 0001 00000000 0x0 0x0
0xffffa30000028a80 0001 00000000 0x0 0x0
0xffffa30000028b00 0001 00000000 0x0 0x0
0xffffa30000028b80 0001 00000000 0x0 0x0
0xffffa30000028c00 0001 00000000 0x0 0x0
0xffffa30000028c80 0001 00000000 0x0 0x0
0xffffa30000028d00 0001 00000000 0x0 0x0
0xffffa30000028d80 0001 00000000 0x0 0x0
0xffffa30000028e00 0001 00000000 0x0 0x0
0xffffa30000028e80 0001 00000000 0x0 0x0
0xffffa30000028f00 0001 00000000 0x0 0x0
0xffffa30000028f80 0001 00000000 0x0 0x0
0xffffa30000029000 0001 00000000 0x0 0x0
0xffffa30000029080 0001 00000000 0x0 0x0
0xffffa30000029100 0001 00000000 0x0 0x0
0xffffa30000029180 0001 00000000 0x0 0x0
0xffffa30000029200 0001 00000000 0x0 0x0
0xffffa30000029280 0001 00000000 0x0 0x0
0xffffa30000029300 0001 00000000 0x0 0x0
0xffffa30000029380 0001 00000000 0x0 0x0
0xffffa30000029400 0001 00000000 0x0 0x0
0xffffa30000029480 0001 00000000 0x0 0x0
0x

---
This report is generated by a bot. It may contain errors.
See https://goo.gl/tpsmEJ for more information about syzbot.
syzbot engineers can be reached at syzk...@googlegroups.com.

syzbot will keep track of this issue. See:
https://goo.gl/tpsmEJ#status for how to communicate with syzbot.

If the report is already addressed, let syzbot know by replying with:
#syz fix: exact-commit-title

If you want to overwrite report's subsystems, reply with:
#syz set subsystems: new-subsystem
(See the list of subsystem names on the web dashboard)

If the report is a duplicate of another one, reply with:
#syz dup: exact-subject-of-another-report

If you want to undo deduplication, reply with:
#syz undup
Reply all
Reply to author
Forward
0 new messages