Re: assert failed: c->c_magic == CALLOUT_MAGIC (2)

1 view

Skip to first unread message

syzbot

unread,

Sep 2, 2022, 9:13:13 PM9/2/22

to rias...@netbsd.org, syzkaller-...@googlegroups.com

Hello,

syzbot has tested the proposed patch but the reproducer is still triggering an issue:
assert failed: cv_is_valid(cv)

[ 161.1024508] panic: kernel diagnostic assertion "cv_is_valid(cv)" failed: file "/syzkaller/jobs/netbsd/kernel/sys/kern/kern_condvar.c", line 456
[ 161.1224469] cpu1: Begin traceback...
[ 161.1424429] vpanic() at netbsd:vpanic+0x2f2 sys/kern/subr_prf.c:293
[ 161.2024431] kern_assert() at netbsd:kern_assert+0x65 sys/arch/amd64/amd64/db_disasm.c:1074
[ 161.2624475] cv_signal() at netbsd:cv_signal+0xbd sys/kern/kern_condvar.c:456
[ 161.3024439] ktd_callout() at netbsd:ktd_callout+0x40 sys/kern/kern_ktrace.c:191
[ 161.3524443] callout_softclock() at netbsd:callout_softclock+0x25b sys/kern/kern_timeout.c:786
[ 161.4024442] softint_dispatch() at netbsd:softint_dispatch+0x3b5 x86_curcpu sys/arch/amd64/compile/obj/GENERIC_SYZKALLER/./machine/cpu.h:56 [inline]
[ 161.4024442] softint_dispatch() at netbsd:softint_dispatch+0x3b5 softint_execute sys/kern/kern_softint.c:573 [inline]
[ 161.4024442] softint_dispatch() at netbsd:softint_dispatch+0x3b5 sys/kern/kern_softint.c:818
[ 161.4324518] DDB lost frame for netbsd:Xsoftintr+0x4f, trying 0xffffa5822f6f20f0
[ 161.4624471] Xsoftintr() at netbsd:Xsoftintr+0x4f
[ 161.4724426] --- interrupt ---
[ 161.4824455] 0:
[ 161.4824455] cpu1: End traceback...
[ 161.4924418] fatal breakpoint trap in supervisor mode
[ 161.4924418] trap type 1 code 0 rip 0xffffffff80221ab5 cs 0x8 rflags 0x246 cr2 0x74cdc4fcfff8 ilevel 0x2 rsp 0xffffa5822f6f1e60
[ 161.5024387] curlwp 0xffff8d0d8bfac240 pid 0.26 lowest kstack 0xffffa5822f6ed2c0
Stopped in pid 0.26 (system) at netbsd:breakpoint+0x5: leave
?
breakpoint() at netbsd:breakpoint+0x5
db_panic() at netbsd:db_panic+0xec sys/ddb/db_panic.c:69
vpanic() at netbsd:vpanic+0x2f2 sys/kern/subr_prf.c:293
kern_assert() at netbsd:kern_assert+0x65 sys/arch/amd64/amd64/db_disasm.c:1074
cv_signal() at netbsd:cv_signal+0xbd sys/kern/kern_condvar.c:456
ktd_callout() at netbsd:ktd_callout+0x40 sys/kern/kern_ktrace.c:191
callout_softclock() at netbsd:callout_softclock+0x25b sys/kern/kern_timeout.c:786
softint_dispatch() at netbsd:softint_dispatch+0x3b5 x86_curcpu sys/arch/amd64/compile/obj/GENERIC_SYZKALLER/./machine/cpu.h:56 [inline]
softint_dispatch() at netbsd:softint_dispatch+0x3b5 softint_execute sys/kern/kern_softint.c:573 [inline]
softint_dispatch() at netbsd:softint_dispatch+0x3b5 sys/kern/kern_softint.c:818
DDB lost frame for netbsd:Xsoftintr+0x4f, trying 0xffffa5822f6f20f0
Xsoftintr() at netbsd:Xsoftintr+0x4f
--- interrupt ---
0:
Panic string: kernel diagnostic assertion "cv_is_valid(cv)" failed: file "/syzkaller/jobs/netbsd/kernel/sys/kern/kern_condvar.c", line 456
PID LID S CPU FLAGS STRUCT LWP * NAME WAIT
11411 11411 2 0 0 ffff8d0d9a90e740 syz-executor.0
11235 11262 2 0 0 ffff8d0d9a73b900 syz-executor.2
11235 11419 3 0 180 ffff8d0d9a8a9500 syz-executor.2 parked
11235 14779 2 1 100 ffff8d0d972ba980 syz-executor.2
11235 11235 2 1 10000000 ffff8d0d9a5daa00 syz-executor.2
14906 14496 2 0 100 ffff8d0d963b44c0 syz-executor.3
14906 14906 2 0 10040000 ffff8d0d9a5c1540 syz-executor.3
1208 1208 3 1 180 ffff8d0d9831e640 syz-executor.4 nanoslp
1245 1245 3 1 180 ffff8d0d972d2940 syz-executor.3 nanoslp
1213 1213 2 1 40 ffff8d0d994c7b40 syz-executor.5
324 324 3 1 180 ffff8d0d97005a40 syz-executor.2 nanoslp
335 335 3 1 180 ffff8d0d970051c0 syz-executor.1 nanoslp
1198 1198 3 1 180 ffff8d0d961db6c0 syz-executor.0 nanoslp
1200 1512 3 0 180 ffff8d0d9710c9c0 syz-execprog kqueue
1200 1351 3 0 180 ffff8d0d96699300 syz-execprog parked
1200 1352 3 1 180 ffff8d0d9a8cebc0 syz-execprog parked
1200 1197 3 0 180 ffff8d0d9a8ce780 syz-execprog parked
1200 1350 3 0 180 ffff8d0d9a90eb80 syz-execprog wait
1200 330 3 1 180 ffff8d0d994c72c0 syz-execprog wait
1200 331 3 1 180 ffff8d0d9831ea80 syz-execprog wait
1200 1202 3 0 180 ffff8d0d97cb7a00 syz-execprog wait
1200 1203 3 0 180 ffff8d0d9907fb00 syz-execprog parked
1200 1255 3 0 180 ffff8d0d961dbb00 syz-execprog wait
1200 1232 3 0 1c0 ffff8d0d9831e200 syz-execprog parked
1200 1204 3 1 1c0 ffff8d0d99c48680 syz-execprog wait
1200 972 3 1 180 ffff8d0d9907f280 syz-execprog nanoslp
1200 1200 3 0 180 ffff8d0d9907f6c0 syz-execprog parked
1238 1238 3 0 180 ffff8d0d99c48ac0 sshd select
1086 1086 3 0 180 ffff8d0d97cb75c0 getty nanoslp
1195 1195 3 0 180 ffff8d0d95e1c640 getty nanoslp
1081 1081 3 1 180 ffff8d0d961db280 getty nanoslp
1257 1257 3 0 1c0 ffff8d0d95e6eac0 getty ttyraw
859 859 3 1 180 ffff8d0d97005600 sshd select
1023 1023 3 1 180 ffff8d0d9710c140 powerd kqueue
687 687 3 0 180 ffff8d0d9710c580 syslogd kqueue
547 547 3 1 180 ffff8d0d96699740 dhcpcd poll
742 742 3 1 180 ffff8d0d9635f2c0 dhcpcd poll
465 465 3 1 180 ffff8d0d96f248c0 dhcpcd poll
594 594 3 1 180 ffff8d0d96894780 dhcpcd poll
292 292 3 1 180 ffff8d0d96699b80 dhcpcd poll
290 290 3 1 180 ffff8d0d9635fb40 dhcpcd poll
289 289 3 1 180 ffff8d0d8dae0740 dhcpcd poll
1 1 3 0 180 ffff8d0d8dc78140 init wait
0 >14652 7 0 200 ffff8d0d972ba100 ktrace
0 11501 3 0 200 ffff8d0d9ae30200 ktrace ktrwait
0 14420 3 0 200 ffff8d0d96f24040 ktrace ktrwait
0 940 3 0 200 ffff8d0d95e1ca80 physiod physiod
0 195 3 1 200 ffff8d0d95e6e680 ioflush syncer
0 194 3 0 200 ffff8d0d8dae0b80 pooldrain pooldrain
0 193 3 1 200 ffff8d0d95e6e240 pgdaemon pgdaemon
0 169 3 1 200 ffff8d0d95e1c200 usb7 usbevt
0 168 3 0 200 ffff8d0d92d77a40 usb6 usbevt
0 167 3 1 200 ffff8d0d92d77600 usb5 usbevt
0 166 3 1 200 ffff8d0d92d771c0 usb4 usbevt
0 165 3 0 200 ffff8d0d8fd12a00 usb3 usbevt
0 31 3 1 200 ffff8d0d8fd125c0 usb2 usbevt
0 63 3 0 200 ffff8d0d8fd12180 usb1 usbevt
0 126 3 0 200 ffff8d0d8dc789c0 usb0 usbevt
0 125 3 1 200 ffff8d0d8dbd7340 usbtask-dr usbtsk
0 124 3 1 200 ffff8d0d8c0a9b00 usbtask-hc usbtsk
0 123 3 1 200 ffff8d0d8dc78580 npfgc0 npfgcw
0 122 3 1 200 ffff8d0d8dc4b980 rt_free rt_free
0 121 3 1 200 ffff8d0d8dc4b540 unpgc unpgc
0 120 3 0 200 ffff8d0d8dc4b100 key_timehandler key_timehandler
0 119 3 1 200 ffff8d0d8dc3e940 icmp6_wqinput/1 icmp6_wqinput
0 118 3 0 200 ffff8d0d8dc3e500 icmp6_wqinput/0 icmp6_wqinput
0 117 3 0 200 ffff8d0d8dc3e0c0 nd6_timer nd6_timer
0 116 3 1 200 ffff8d0d8dc29900 carp6_wqinput/1 carp6_wqinput
0 115 3 0 200 ffff8d0d8dc294c0 carp6_wqinput/0 carp6_wqinput
0 114 3 1 200 ffff8d0d8dc29080 carp_wqinput/1 carp_wqinput
0 113 3 0 200 ffff8d0d8dc0c8c0 carp_wqinput/0 carp_wqinput
0 112 3 1 200 ffff8d0d8dc0c480 icmp_wqinput/1 icmp_wqinput
0 111 3 0 200 ffff8d0d8dc0c040 icmp_wqinput/0 icmp_wqinput
0 110 3 1 200 ffff8d0d8dbd7bc0 rt_timer rt_timer
0 109 3 0 200 ffff8d0d8dbd7780 vmem_rehash vmem_rehash
0 100 3 1 200 ffff8d0d8dae0300 entbutler entropy
0 99 3 1 200 ffff8d0d8d548b40 viomb balloon
0 98 3 1 200 ffff8d0d8d548700 vioif0_txrx/1 vioif0_txrx
0 97 3 0 200 ffff8d0d8d5482c0 vioif0_txrx/0 vioif0_txrx
0 30 3 1 200 ffff8d0d8c0a96c0 scsibus0 sccomp
0 29 3 0 200 ffff8d0d8c0a9280 pms0 pmsreset
0 28 3 1 200 ffff8d0d8bfacac0 xcall/1 xcall
0 27 1 1 200 ffff8d0d8bfac680 softser/1
0 > 26 7 1 200 ffff8d0d8bfac240 softclk/1
0 25 1 1 200 ffff8d0d8bf87a80 softbio/1
0 24 1 1 200 ffff8d0d8bf87640 softnet/1
0 23 1 1 201 ffff8d0d8bf87200 idle/1
0 22 3 1 200 ffff8d0eba32da40 lnxsyswq lnxsyswq
0 21 3 0 200 ffff8d0eba32d600 lnxubdwq lnxubdwq
0 20 3 1 200 ffff8d0eba32d1c0 lnxpwrwq lnxpwrwq
0 19 3 1 200 ffff8d0eba334a00 lnxlngwq lnxlngwq
0 18 3 1 200 ffff8d0eba3345c0 lnxhipwq lnxhipwq
0 17 3 0 200 ffff8d0eba334180 lnxrcugc lnxrcugc
0 16 3 0 200 ffff8d0eba3539c0 sysmon smtaskq
0 15 3 1 200 ffff8d0eba353580 pmfsuspend pmfsuspend
0 14 3 0 200 ffff8d0eba353140 pmfevent pmfevent
0 13 3 1 200 ffff8d0eba35e980 sopendfree sopendfr
0 12 3 0 200 ffff8d0eba35e540 ifwdog ifwdog
0 11 3 1 200 ffff8d0eba35e100 iflnkst iflnkst
0 10 3 1 200 ffff8d0ebb395940 nfssilly nfssilly
0 9 3 0 200 ffff8d0ebb395500 vdrain vdrain
0 8 3 1 200 ffff8d0ebb3950c0 modunload mod_unld
0 7 3 0 200 ffff8d0ebb3ba900 xcall/0 xcall
0 6 1 0 200 ffff8d0ebb3ba4c0 softser/0
0 5 1 0 200 ffff8d0ebb3ba080 softclk/0
0 4 1 0 200 ffff8d0ebb3eb8c0 softbio/0
0 3 1 0 200 ffff8d0ebb3eb480 softnet/0
0 2 1 0 201 ffff8d0ebb3eb040 idle/0
0 0 3 0 200 ffffffff86740ec0 swapper uvm
[Locks tracked through LWPs]

****** LWP 11235.11235 (syz-executor.2) @ 0xffff8d0d9a5daa00, l_stat=2

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:ktrinit+0x20 sys/kern/kern_ktrace.c:259)
lock address : netbsd:ktrace_lock
type : sleep/adaptive
initialized : netbsd:ktrinit+0x20
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 3
relevant cpu : 1 last held: 1
relevant lwp : 0xffff8d0d9a5daa00 last held: 0xffff8d0d8bfac240
last locked* : netbsd:ktd_callout+0x1c
unlocked : netbsd:ktrace_common+0xbb8
owner field : 0xffff8d0d8bfac240 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 14906.14496 (syz-executor.3) @ 0xffff8d0d963b44c0, l_stat=2

*** Locks held:

* Lock 0 (initialized at netbsd:procinit+0x86 sys/kern/kern_proc.c:388)
lock address : netbsd:proc_lock
type : sleep/adaptive
initialized : netbsd:procinit+0x86
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffff8d0d963b44c0 last held: 0xffff8d0d963b44c0
last locked* : netbsd:ktrace_common+0x22c
unlocked : netbsd:lwp_create+0x10da
owner field : 0xffff8d0d963b44c0 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

* Lock 1 (initialized at netbsd:fork1+0x1b25 sys/kern/kern_fork.c:377)
lock address : ffff8d0d9a1126c0
type : sleep/adaptive
initialized : netbsd:fork1+0x1b25
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffff8d0d963b44c0 last held: 0xffff8d0d963b44c0
last locked* : netbsd:ktrops+0x4f
unlocked : netbsd:match_process+0x600
owner field : 0xffff8d0d963b44c0 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

*** Locks wanted:

* Lock 0 (initialized at netbsd:ktrinit+0x20 sys/kern/kern_ktrace.c:259)
lock address : netbsd:ktrace_lock
type : sleep/adaptive
initialized : netbsd:ktrinit+0x20
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 3
relevant cpu : 0 last held: 1
relevant lwp : 0xffff8d0d963b44c0 last held: 0xffff8d0d8bfac240
last locked* : netbsd:ktd_callout+0x1c
unlocked : netbsd:ktrace_common+0xbb8
owner field : 0xffff8d0d8bfac240 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 1213.1213 (syz-executor.5) @ 0xffff8d0d994c7b40, l_stat=2

*** Locks held:

* Lock 0 (initialized at netbsd:vcache_alloc+0xba sys/kern/vfs_vnode.c:1392)
lock address : ffff8d0d98cdd4c0
type : sleep/adaptive
initialized : netbsd:vcache_alloc+0xba
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 1
relevant lwp : 0xffff8d0d994c7b40 last held: 0xffff8d0d994c7b40
last locked* : netbsd:genfs_lock+0x220
unlocked : netbsd:genfs_unlock+0x50
owner/count : 0xffff8d0d994c7b40 flags : 0x0000000000000004
Turnstile: no active turnstile for this lock.

* Lock 1 (initialized at netbsd:vcache_alloc+0xba sys/kern/vfs_vnode.c:1392)
lock address : ffff8d0d9c0b9e80
type : sleep/adaptive
initialized : netbsd:vcache_alloc+0xba
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 1
relevant lwp : 0xffff8d0d994c7b40 last held: 0xffff8d0d994c7b40
last locked* : netbsd:genfs_lock+0x220
unlocked : 0
owner/count : 0xffff8d0d994c7b40 flags : 0x0000000000000004
Turnstile: no active turnstile for this lock.

*** Locks wanted: none

****** LWP 742.742 (dhcpcd) @ 0xffff8d0d9635f2c0, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:module_hook_init+0x1c sys/kern/kern_module_hook.c:132)
lock address : netbsd:module_hook
type : sleep/adaptive
initialized : netbsd:module_hook_init+0x1c
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 0
relevant lwp : 0xffff8d0d9635f2c0 last held: 000000000000000000
last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 465.465 (dhcpcd) @ 0xffff8d0d96f248c0, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:module_hook_init+0x1c sys/kern/kern_module_hook.c:132)
lock address : netbsd:module_hook
type : sleep/adaptive
initialized : netbsd:module_hook_init+0x1c
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 0
relevant lwp : 0xffff8d0d96f248c0 last held: 000000000000000000
last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 290.290 (dhcpcd) @ 0xffff8d0d9635fb40, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:module_hook_init+0x1c sys/kern/kern_module_hook.c:132)
lock address : netbsd:module_hook
type : sleep/adaptive
initialized : netbsd:module_hook_init+0x1c
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 0
relevant lwp : 0xffff8d0d9635fb40 last held: 000000000000000000
last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 289.289 (dhcpcd) @ 0xffff8d0d8dae0740, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:module_hook_init+0x1c sys/kern/kern_module_hook.c:132)
lock address : netbsd:module_hook
type : sleep/adaptive
initialized : netbsd:module_hook_init+0x1c
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 0
relevant lwp : 0xffff8d0d8dae0740 last held: 000000000000000000
last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 0.14652 (ktrace) @ 0xffff8d0d972ba100, l_stat=7

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:ktrinit+0x20 sys/kern/kern_ktrace.c:259)
lock address : netbsd:ktrace_lock
type : sleep/adaptive
initialized : netbsd:ktrinit+0x20
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 3
relevant cpu : 0 last held: 1
relevant lwp : 0xffff8d0d972ba100 last held: 0xffff8d0d8bfac240
last locked* : netbsd:ktd_callout+0x1c
unlocked : netbsd:ktrace_common+0xbb8
owner field : 0xffff8d0d8bfac240 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 0.26 (softclk/1) @ 0xffff8d0d8bfac240, l_stat=7

*** Locks held:

* Lock 0 (initialized at netbsd:ktrinit+0x20 sys/kern/kern_ktrace.c:259)
lock address : netbsd:ktrace_lock
type : sleep/adaptive
initialized : netbsd:ktrinit+0x20
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 3
relevant cpu : 1 last held: 1
relevant lwp : 0xffff8d0d8bfac240 last held: 0xffff8d0d8bfac240
last locked* : netbsd:ktd_callout+0x1c
unlocked : netbsd:ktrace_common+0xbb8
owner field : 0xffff8d0d8bfac240 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

*** Locks wanted: none

****** LWP 0.11 (iflnkst) @ 0xffff8d0eba35e100, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:module_hook_init+0x1c sys/kern/kern_module_hook.c:132)
lock address : netbsd:module_hook
type : sleep/adaptive
initialized : netbsd:module_hook_init+0x1c
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 0
relevant lwp : 0xffff8d0eba35e100 last held: 000000000000000000
last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 0.5 (softclk/0) @ 0xffff8d0ebb3ba080, l_stat=1

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:module_hook_init+0x1c sys/kern/kern_module_hook.c:132)
lock address : netbsd:module_hook
type : sleep/adaptive
initialized : netbsd:module_hook_init+0x1c
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffff8d0ebb3ba080 last held: 000000000000000000
last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 0.0 (swapper) @ 0xffffffff86740ec0, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:module_hook_init+0x1c sys/kern/kern_module_hook.c:132)
lock address : netbsd:module_hook
type : sleep/adaptive
initialized : netbsd:module_hook_init+0x1c
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffffffff86740ec0 last held: 000000000000000000
last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

[Locks tracked through CPUs]

******* Locks held on cpu1:

* Lock 0 (initialized at netbsd:kprintf_init+0x72 sys/kern/subr_prf.c:157)
lock address : netbsd:kprintf_mtx
type : spin
initialized : netbsd:kprintf_init+0x72
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 1
relevant lwp : 0xffff8d0d8bfac240 last held: 0xffff8d0d8bfac240
last locked* : netbsd:kprintf_lock+0x50
unlocked : netbsd:kprintf_unlock+0x70
owner field : 0x0000000000000800 wait/spin: 0/1

PAGE FLAG PQ UOBJECT UANON
0xffffa58000007180 0045 00000000 0x0 0x0
0xffffa58000007200 0045 00000000 0x0 0x0
0xffffa58000007280 0045 00000000 0x0 0x0
0xffffa58000007300 0045 00000000 0x0 0x0
0xffffa58000007380 0045 00000000 0x0 0x0
0xffffa58000007400 0045 00000000 0x0 0x0
0xffffa58000007480 0045 00000000 0x0 0x0
0xffffa58000007500 0045 00000000 0x0 0x0
0xffffa58000007580 0045 00000000 0x0 0x0
0xffffa58000007600 0045 00000000 0x0 0x0
0xffffa58000007680 0041 00000000 0x0 0x0
0xffffa58000007700 0041 00000000 0x0 0x0
0xffffa58000007780 0041 00000000 0x0 0x0
0xffffa58000007800 0041 00000000 0x0 0x0
0xffffa58000007880 0045 00000000 0x0 0x0
0xffffa58000007900 0045 00000000 0x0 0x0
0xffffa58000007980 0041 00000000 0x0 0x0
0xffffa58000007a00 0041 00000000 0x0 0x0
0xffffa58000007a80 0041 00000000 0x0 0x0
0xffffa58000007b00 0041 00000000 0x0 0x0
0xffffa58000007b80 0041 00000000 0x0 0x0
0xffffa58000007c00 0041 00000000 0x0 0x0
0xffffa58000007c80 0041 00000000 0x0 0x0
0xffffa58000007d00 0041 00000000 0x0 0x0
0xffffa58000007d80 0041 00000000 0x0 0x0
0xffffa58000007e00 0041 00000000 0x0 0x0
0xffffa58000007e80 0041 00000000 0x0 0x0
0xffffa58000007f00 0041 00000000 0x0 0x0
0xffffa58000007f80 0041 00000000 0x0 0x0
0xffffa58000008000 0041 00000000 0x0 0x0
0xffffa58000008080 0041 00000000 0x0 0x0
0xffffa58000008100 0041 00000000 0x0 0x0
0xffffa58000008180 0041 00000000 0x0 0x0
0xffffa58000008200 0041 00000000 0x0 0x0
0xffffa58000008280 0041 00000000 0x0 0x0
0xffffa58000008300 0041 00000000 0x0 0x0
0xffffa58000008380 0041 00000000 0x0 0x0
0xffffa58000008400 0041 00000000 0x0 0x0
0xffffa58000008480 0041 00000000 0x0 0x0
0xffffa58000008500 0041 00000000 0x0 0x0
0xffffa58000008580 0041 00000000 0x0 0x0
0xffffa58000008600 0045 00000000 0x0 0x0
0xffffa58000008680 0041 00000000 0x0 0x0
0xffffa58000008700 0041 00000000 0x0 0x0
0xffffa58000008780 0041 00000000 0x0 0x0
0xffffa58000008800 0045 00000000 0x0 0x0
0xffffa58000008880 0041 00000000 0x0 0x0
0xffffa58000008900 0041 00000000 0x0 0x0
0xffffa58000008980 0041 00000000 0x0 0x0
0xffffa58000008a00 0041 00000000 0x0 0x0
0xffffa58000008a80 0041 00000000 0x0 0x0
0xffffa58000008b00 0041 00000000 0x0 0x0
0xffffa58000008b80 0041 00000000 0x0 0x0
0xffffa58000008c00 0041 00000000 0x0 0x0
0xffffa58000008c80 0041 00000000 0x0 0x0
0xffffa58000008d00 0041 00000000 0x0 0x0
0xffffa58000008d80 0041 00000000 0x0 0x0
0xffffa58000008e00 0041 00000000 0x0 0x0
0xffffa58000008e80 0041 00000000 0x0 0x0
0xffffa58000008f00 0041 00000000 0x0 0x0
0xffffa58000008f80 0041 00000000 0x0 0x0
0xffffa58000009000 0041 00000000 0x0 0x0
0xffffa58000009080 0041 00000000 0x0 0x0
0xffffa58000009100 0045 00000000 0x0 0x0
0xffffa58000009180 0041 00000000 0x0 0x0
0xffffa58000009200 0041 00000000 0x0 0x0
0xffffa58000009280 0041 00000000 0x0 0x0
0xffffa58000009300 0041 00000000 0x0 0x0
0xffffa58000009380 0041 00000000 0x0 0x0
0xffffa58000009400 0041 00000000 0x0 0x0
0xffffa58000009480 0045 00000000 0x0 0x0
0xffffa58000009500 0041 00000000 0x0 0x0
0xffffa58000009580 0041 00000000 0x0 0x0
0xffffa58000009600 0041 00000000 0x0 0x0
0xffffa58000009680 0041 00000000 0x0 0x0
0xffffa58000009700 0041 00000000 0x0 0x0
0xffffa58000009780 0041 00000000 0x0 0x0
0xffffa58000009800 0041 00000000 0x0 0x0
0xffffa58000009880 0041 00000000 0x0 0x0
0xffffa58000009900 0041 00000000 0x0 0x0
0xffffa58000009980 0041 00000000 0x0 0x0
0xffffa58000009a00 0041 00000000 0x0 0x0
0xffffa58000009a80 0045 00000000 0x0 0x0
0xffffa58000009b00 0041 00000000 0x0 0x0
0xffffa58000009b80 0041 00000000 0x0 0x0
0xffffa58000009c00 0041 00000000 0x0 0x0
0xffffa58000009c80 0041 00000000 0x0 0x0
0xffffa58000009d00 0041 00000000 0x0 0x0
0xffffa58000009d80 0041 00000000 0x0 0x0
0xffffa58000009e00 0041 00000000 0x0 0x0
0xffffa58000009e80 0041 00000000 0x0 0x0
0xffffa58000009f00 0041 00000000 0x0 0x0
0xffffa58000009f80 0041 00000000 0x0 0x0
0xffffa5800000a000 0041 00000000 0x0 0x0
0xffffa5800000a080 0041 00000000 0x0 0x0
0xffffa5800000a100 0041 00000000 0x0 0x0
0xffffa5800000a180 0041 00000000 0x0 0x0
0xffffa5800000a200 0041 00000000 0x0 0x0
0xffffa5800000a280 0041 00000000 0x0 0x0
0xffffa5800000a300 0041 00000000 0x0 0x0
0xffffa5800000a380 0041 00000000 0x0 0x0
0xffffa5800000a400 0041 00000000 0x0 0x0
0xffffa5800000a480 0041 00000000 0x0 0x0
0xffffa5800000a500 0041 00000000 0x0 0x0
0xffffa5800000a580 0041 00000000 0x0 0x0
0xffffa5800000a600 0041 00000000 0x0 0x0
0xffffa5800000a680 0041 00000000 0x0 0x0
0xffffa5800000a700 0041 00000000 0x0 0x0
0xffffa5800000a780 0041 00000000 0x0 0x0
0xffffa5800000a800 0041 00000000 0x0 0x0
0xffffa5800000a880 0041 00000000 0x0 0x0
0xffffa5800000a900 0041 00000000 0x0 0x0
0xffffa5800000a980 0041 00000000 0x0 0x0
0xffffa5800000aa00 0041 00000000 0x0 0x0
0xffffa5800000aa80 0041 00000000 0x0 0x0
0xffffa5800000ab00 0041 00000000 0x0 0x0
0xffffa5800000ab80 0041 00000000 0x0 0x0
0xffffa5800000ac00 0041 00000000 0x0 0x0
0xffffa5800000ac80 0041 00000000 0x0 0x0
0xffffa5800000ad00 0041 00000000 0x0 0x0
0xffffa5800000ad80 0041 00000000 0x0 0x0
0xffffa5800000ae00 0041 00000000 0x0 0x0
0xffffa5800000ae80 0045 00000000 0x0 0x0
0xffffa5800000af00 0045 00000000 0x0 0x0
0xffffa5800000af80 0045 00000000 0x0 0x0
0xffffa5800000b000 0041 00000000 0x0 0x0
0xffffa5800000b080 0041 00000000 0x0 0x0
0xffffa5800000b100 0041 00000000 0x0 0x0
0xffffa5800000b180 0045 00000000 0x0 0x0
0xffffa5800000b200 0041 00000000 0x0 0x0
0xffffa5800000b280 0045 00000000 0x0 0x0
0xffffa5800000b300 0045 00000000 0x0 0x0
0xffffa5800000b380 0045 00000000 0x0 0x0
0xffffa5800000b400 0041 00000000 0x0 0x0
0xffffa5800000b480 0041 00000000 0x0 0x0
0xffffa5800000b500 0041 00000000 0x0 0x0
0xffffa5800000b580 0045 00000000 0x0 0x0
0xffffa5800000b600 0045 00000000 0x0 0x0
0xffffa5800000b680 0045 00000000 0x0 0x0
0xffffa5800000b700 0045 00000000 0x0 0x0
0xffffa5800000b780 0045 00000000 0x0 0x0
0xffffa5800000b800 0045 00000000 0x0 0x0
0xffffa5800000b880 0041 00000000 0x0 0x0
0xffffa5800000b900 0045 00000000 0x0 0x0
0xffffa5800000b980 0045 00000000 0x0 0x0
0xffffa5800000ba00 0045 00000000 0x0 0x0
0xffffa5800000ba80 0045 00000000 0x0 0x0
0xffffa5800000bb00 0045 00000000 0x0 0x0
0xffffa5800000bb80 0045 00000000 0x0 0x0
0xffffa5800000bc00 0045 00000000 0x0 0x0
0xffffa5800000bc80 0041 00000000 0x0 0x0
0xffffa5800000bd00 0045 00000000 0x0 0x0
0xffffa5800000bd80 0045 00000000 0x0 0x0
0xffffa5800000be00 0045 00000000 0x0 0x0
0xffffa5800000be80 0045 00000000 0x0 0x0
0xffffa5800000bf00 0045 00000000 0x0 0x0
0xffffa5800000bf80 0045 00000000 0x0 0x0
0xffffa5800000c000 0045 00000000 0x0 0x0
0xffffa5800000c080 0041 00000000 0x0 0x0
0xffffa5800000c100 0045 00000000 0x0 0x0
0xffffa5800000c180 0045 00000000 0x0 0x0
0xffffa5800000c200 0045 00000000 0x0 0x0
0xffffa5800000c280 0045 00000000 0x0 0x0
0xffffa5800000c300 0045 00000000 0x0 0x0
0xffffa5800000c380 0045 00000000 0x0 0x0
0xffffa5800000c400 0045 00000000 0x0 0x0
0xffffa5800000c480 0045 00000000 0x0 0x0
0xffffa5800000c500 0045 00000000 0x0 0x0
0xffffa5800000c580 0045 00000000 0x0 0x0
0xffffa5800000c600 0045 00000000 0x0 0x0
0xffffa5800000c680 0045 00000000 0x0 0x0
0xffffa5800000c700 0041 00000000 0x0 0x0
0xffffa5800000c780 0041 00000000 0x0 0x0
0xffffa5800000c800 0045 00000000 0x0 0x0
0xffffa5800000c880 0045 00000000 0x0 0x0
0xffffa5800000c900 0045 00000000 0x0 0x0
0xffffa5800000c980 0045 00000000 0x0 0x0
0xffffa5800000ca00 0045 00000000 0x0 0x0
0xffffa5800000ca80 0041 00000000 0x0 0x0
0xffffa5800000cb00 0041 00000000 0x0 0x0
0xffffa5800000cb80 0041 00000000 0x0 0x0
0xffffa5800000cc00 0045 00000000 0x0 0x0
0xffffa5800000cc80 0045 00000000 0x0 0x0
0xffffa5800000cd00 0045 00000000 0x0 0x0
0xffffa5800000cd80 0041 00000000 0x0 0x0
0xffffa5800000ce00 0045 00000000 0x0 0x0
0xffffa5800000ce80 0041 00000000 0x0 0x0
0xffffa5800000cf00 0041 00000000 0x0 0x0
0xffffa5800000cf80 0041 00000000 0x0 0x0
0xffffa5800000d000 0041 00000000 0x0 0x0
0xffffa5800000d080 0045 00000000 0x0 0x0
0xffffa5800000d100 0045 00000000 0x0 0x0
0xffffa5800000d180 0041 00000000 0x0 0x0
0xffffa5800000d200 0041 00000000 0x0 0x0
0xffffa5800000d280 0041 00000000 0x0 0x0
0xffffa5800000d300 0045 00000000 0x0 0x0
0xffffa5800000d380 0041 00000000 0x0 0x0
0xffffa5800000d400 0041 00000000 0x0 0x0
0xffffa5800000d480 0045 00000000 0x0 0x0
0xffffa5800000d500 0041 00000000 0x0 0x0
0xffffa5800000d580 0041 00000000 0x0 0x0
0xffffa5800000d600 0041 00000000 0x0 0x0
0xffffa5800000d680 0045 00000000 0x0 0x0
0xffffa5800000d700 0041 00000000 0x0 0x0
0xffffa5800000d780 0045 00000000 0x0 0x0
0xffffa5800000d800 0041 00000000 0x0 0x0
0xffffa5800000d880 0045 00000000 0x0 0x0
0xffffa5800000d900 0041 00000000 0x0 0x0
0xffffa5800000d980 0041 00000000 0x0 0x0
0xffffa5800000da00 0041 00000000 0x0 0x0
0xffffa5800000da80 0041 00000000 0x0 0x0
0xffffa5800000db00 0045 00000000 0x0 0x0
0xffffa5800000db80 0045 00000000 0x0 0x0
0xffffa5800000dc00 0041 00000000 0x0 0x0
0xffffa5800000dc80 0041 00000000 0x0 0x0
0xffffa5800000dd00 0041 00000000 0x0 0x0
0xffffa5800000dd80 0041 00000000 0x0 0x0
0xffffa5800000de00 0041 00000000 0x0 0x0
0xffffa5800000de80 0041 00000000 0x0 0x0
0xffffa5800000df00 0045 00000000 0x0 0x0
0xffffa5800000df80 0045 00000000 0x0 0x0
0xffffa5800000e000 0045 00000000 0x0 0x0
0xffffa5800000e080 0041 00000000 0x0 0x0
0xffffa5800000e100 0041 00000000 0x0 0x0
0xffffa5800000e180 0045 00000000 0x0 0x0
0xffffa5800000e200 0041 00000000 0x0 0x0
0xffffa5800000e280 0045 00000000 0x0 0x0
0xffffa5800000e300 0045 00000000 0x0 0x0
0xffffa5800000e380 0041 00000000 0x0 0x0
0xffffa5800000e400 0045 00000000 0x0 0x0
0xffffa5800000e480 0041 00000000 0x0 0x0
0xffffa5800000e500 0041 00000000 0x0 0x0
0xffffa5800000e580 0041 00000000 0x0 0x0
0xffffa5800000e600 0045 00000000 0x0 0x0
0xffffa5800000e680 0041 00000000 0x0 0x0
0xffffa5800000e700 0041 00000000 0x0 0x0
0xffffa5800000e780 0041 00000000 0x0 0x0
0xffffa5800000e800 0045 00000000 0x0 0x0
0xffffa5800000e880 0041 00000000 0x0 0x0
0xffffa5800000e900 0045 00000000 0x0 0x0
0xffffa5800000e980 0041 00000000 0x0 0x0
0xffffa5800000ea00 0041 00000000 0x0 0x0
0xffffa5800000ea80 0045 00000000 0x0 0x0
0xffffa5800000eb00 0041 00000000 0x0 0x0
0xffffa5800000eb80 0045 00000000 0x0 0x0
0xffffa5800000ec00 0041 00000000 0x0 0x0
0xffffa5800000ec80 0045 00000000 0x0 0x0
0xffffa5800000ed00 0041 00000000 0x0 0x0
0xffffa5800000ed80 0041 00000000 0x0 0x0
0xffffa5800000ee00 0041 00000000 0x0 0x0
0xffffa5800000ee80 0041 00000000 0x0 0x0
0xffffa5800000ef00 0041 00000000 0x0 0x0
0xffffa5800000ef80 0041 00000000 0x0 0x0
0xffffa5800000f000 0041 00000000 0x0 0x0
0xffffa5800000f080 0041 00000000 0x0 0x0
0xffffa5800000f100 0041 00000000 0x0 0x0
0xffffa5800000f180 0041 00000000 0x0 0x0
0xffffa5800000f200 0041 00000000 0x0 0x0
0xffffa5800000f280 0045 00000000 0x0 0x0
0xffffa5800000f300 0041 00000000 0x0 0x0
0xffffa5800000f380 0041 00000000 0x0 0x0
0xffffa5800000f400 0045 00000000 0x0 0x0
0xffffa5800000f480 0045 00000000 0x0 0x0
0xffffa5800000f500 0041 00000000 0x0 0x0
0xffffa5800000f580 0041 00000000 0x0 0x0
0xffffa5800000f600 0041 00000000 0x0 0x0
0xffffa5800000f680 0041 00000000 0x0 0x0
0xffffa5800000f700 0041 00000000 0x0 0x0
0xffffa5800000f780 0041 00000000 0x0 0x0
0xffffa5800000f800 0041 00000000 0x0 0x0
0xffffa5800000f880 0041 00000000 0x0 0x0
0xffffa5800000f900 0041 00000000 0x0 0x0
0xffffa5800000f980 0045 00000000 0x0 0x0
0xffffa5800000fa00 0041 00000000 0x0 0x0
0xffffa5800000fa80 0041 00000000 0x0 0x0
0xffffa5800000fb00 0041 00000000 0x0 0x0
0xffffa5800000fb80 0041 00000000 0x0 0x0
0xffffa5800000fc00 0045 00000000 0x0 0x0
0xffffa5800000fc80 0045 00000000 0x0 0x0
0xffffa5800000fd00 0041 00000000 0x0 0x0
0xffffa5800000fd80 0041 00000000 0x0 0x0
0xffffa5800000fe00 0041 00000000 0x0 0x0
0xffffa5800000fe80 0041 00000000 0x0 0x0
0xffffa5800000ff00 0041 00000000 0x0 0x0
0xffffa5800000ff80 0041 00000000 0x0 0x0
0xffffa58000010000 0041 00000000 0x0 0x0
0xffffa58000010080 0041 00000000 0x0 0x0
0xffffa58000010100 0045 00000000 0x0 0x0
0xffffa58000010180 0045 00000000 0x0 0x0
0xffffa58000010200 0045 00000000 0x0 0x0
0xffffa58000010280 0041 00000000 0x0 0x0
0xffffa58000010300 0041 00000000 0x0 0x0
0xffffa58000010380 0041 00000000 0x0 0x0
0xffffa58000010400 0041 00000000 0x0 0x0
0xffffa58000010480 0041 00000000 0x0 0x0
0xffffa58000010500 0041 00000000 0x0 0x0
0xffffa58000010580 0041 00000000 0x0 0x0
0xffffa58000010600 0041 00000000 0x0 0x0
0xffffa58000010680 0041 00000000 0x0 0x0
0xffffa58000010700 0045 00000000 0x0 0x0
0xffffa58000010780 0041 00000000 0x0 0x0
0xffffa58000010800 0041 00000000 0x0 0x0
0xffffa58000010880 0045 00000000 0x0 0x0
0xffffa58000010900 0045 00000000 0x0 0x0
0xffffa58000010980 0045 00000000 0x0 0x0
0xffffa58000010a00 0045 00000000 0x0 0x0
0xffffa58000010a80 0045 00000000 0x0 0x0
0xffffa58000010b00 0041 00000000 0x0 0x0
0xffffa58000010b80 0041 00000000 0x0 0x0
0xffffa58000010c00 0041 00000000 0x0 0x0
0xffffa58000010c80 0041 00000000 0x0 0x0
0xffffa58000010d00 0041 00000000 0x0 0x0
0xffffa58000010d80 0041 00000000 0x0 0x0
0xffffa58000010e00 0041 00000000 0x0 0x0
0xffffa58000010e80 0041 00000000 0x0 0x0
0xffffa58000010f00 0041 00000000 0x0 0x0
0xffffa58000010f80 0041 00000000 0x0 0x0
0xffffa58000011000 0041 00000000 0x0 0x0
0xffffa58000011080 0045 00000000 0x0 0x0
0xffffa58000011100 0041 00000000 0x0 0x0
0xffffa58000011180 0041 00000000 0x0 0x0
0xffffa58000011200 0045 00000000 0x0 0x0
0xffffa58000011280 0041 00000000 0x0 0x0
0xffffa58000011300 0041 00000000 0x0 0x0
0xffffa58000011380 0041 00000000 0x0 0x0
0xffffa58000011400 0041 00000000 0x0 0x0
0xffffa58000011480 0041 00000000 0x0 0x0
0xffffa58000011500 0041 00000000 0x0 0x0
0xffffa58000011580 0041 00000000 0x0 0x0
0xffffa58000011600 0041 00000000 0x0 0x0
0xffffa58000011680 0041 00000000 0x0 0x0
0xffffa58000011700 0041 00000000 0x0 0x0
0xffffa58000011780 0045 00000000 0x0 0x0
0xffffa58000011800 0041 00000000 0x0 0x0
0xffffa58000011880 0041 00000000 0x0 0x0
0xffffa58000011900 0045 00000000 0x0 0x0
0xffffa58000011980 0041 00000000 0x0 0x0
0xffffa58000011a00 0041 00000000 0x0 0x0
0xffffa58000011a80 0041 00000000 0x0 0x0
0xffffa58000011b00 0045 00000000 0x0 0x0
0xffffa58000011b80 0041 00000000 0x0 0x0
0xffffa58000011c00 0041 00000000 0x0 0x0
0xffffa58000011c80 0041 00000000 0x0 0x0
0xffffa58000011d00 0041 00000000 0x0 0x0
0xffffa58000011d80 0041 00000000 0x0 0x0
0xffffa58000011e00 0045 00000000 0x0 0x0
0xffffa58000011e80 0045 00000000 0x0 0x0
0xffffa58000011f00 0041 00000000 0x0 0x0
0xffffa58000011f80 0041 00000000 0x0 0x0
0xffffa58000012000 0041 00000000 0x0 0x0
0xffffa58000012080 0041 00000000 0x0 0x0
0xffffa58000012100 0041 00000000 0x0 0x0
0xffffa58000012180 0045 00000000 0x0 0x0
0xffffa58000012200 0041 00000000 0x0 0x0
0xffffa58000012280 0041 00000000 0x0 0x0
0xffffa58000012300 0041 00000000 0x0 0x0
0xffffa58000012380 0041 00000000 0x0 0x0
0xffffa58000012400 0041 00000000 0x0 0x0
0xffffa58000012480 0041 00000000 0x0 0x0
0xffffa58000012500 0045 00000000 0x0 0x0
0xffffa58000012580 0041 00000000 0x0 0x0
0xffffa58000012600 0041 00000000 0x0 0x0
0xffffa58000012680 0041 00000000 0x0 0x0
0xffffa58000012700 0041 00000000 0x0 0x0
0xffffa58000012780 0041 00000000 0x0 0x0
0xffffa58000012800 0041 00000000 0x0 0x0
0xffffa58000012880 0041 00000000 0x0 0x0
0xffffa58000012900 0041 00000000 0x0 0x0
0xffffa58000012980 0041 00000000 0x0 0x0
0xffffa58000012a00 0041 00000000 0x0 0x0
0xffffa58000012a80 0041 00000000 0x0 0x0
0xffffa58000012b00 0041 00000000 0x0 0x0
0xffffa58000012b80 0041 00000000 0x0 0x0
0xffffa58000012c00 0041 00000000 0x0 0x0
0xffffa58000012c80 0045 00000000 0x0 0x0
0xffffa58000012d00 0001 00000000 0x0 0x0
0xffffa58000012d80 0001 00000000 0x0 0x0
0xffffa58000012e00 0001 00000000 0x0 0x0
0xffffa58000012e80 0001 00000000 0x0 0x0
0xffffa58000012f00 0001 00000000 0x0 0x0
0xffffa58000012f80 0001 00000000 0x0 0x0
0xffffa58000013000 0001 00000000 0x0 0x0
0xffffa58000013080 0001 00000000 0x0 0x0
0xffffa58000013100 0001 00000000 0x0 0x0
0xffffa58000013180 0001 00000000 0x0 0x0
0xffffa58000013200 0001 00000000 0x0 0x0
0xffffa58000013280 0001 00000000 0x0 0x0
0xffffa58000013300 0001 00000000 0x0 0x0
0xffffa58000013380 0001 00000000 0x0 0x0
0xffffa58000013400 0001 00000000 0x0 0x0
0xffffa58000013480 0001 00000000 0x0 0x0
0xffffa58000013500 0001 00000000 0x0 0x0
0xffffa58000013580 0001 00000000 0x0 0x0
0xffffa58000013600 0001 00000000 0x0 0x0
0xffffa58000013680 0001 00000000 0x0 0x0
0xffffa58000013700 0001 00000000 0x0 0x0
0xffffa58000013780 0001 00000000 0x0 0x0
0xffffa58000013800 0001 00000000 0x0 0x0
0xffffa58000013880 0001 00000000 0x0 0x0
0xffffa58000013900 0001 00000000 0x0 0x0
0xffffa58000013980 0001 00000000 0x0 0x0
0xffffa58000013a00 0001 00000000 0x0 0x0
0xffffa58000013a80 0001 00000000 0x0 0x0
0xffffa58000013b00 0001 00000000 0x0 0x0
0xffffa58000013b80 0001 00000000 0x0 0x0
0xffffa58000013c00 0001 00000000 0x0 0x0
0xffffa58000013c80 0001 00000000 0x0 0x0
0xffffa58000013d00 0001 00000000 0x0 0x0
0xffffa58000013d80 0001 00000000 0x0 0x0
0xffffa58000013e00 0001 00000000 0x0 0x0
0xffffa58000013e80 0001 00000000 0x0 0x0
0xffffa58000013f00 0001 00000000 0x0 0x0
0xffffa58000013f80 0001 00000000 0x0 0x0
0xffffa58000014000 0001 00000000 0x0 0x0
0xffffa58000014080 0001 00000000 0x0 0x0
0xffffa58000014100 0001 00000000 0x0 0x0
0xffffa58000014180 0001 00000000 0x0 0x0
0xffffa58000014200 0001 00000000 0x0 0x0
0xffffa58000014280 0001 00000000 0x0 0x0
0xffffa58000014300 0001 00000000 0x0 0x0
0xffffa58000014380 0001 00000000 0x0 0x0
0xffffa58000014400 0001 00000000 0x0 0x0
0xffffa58000014480 0001 00000000 0x0 0x0
0xffffa58000014500 0001 00000000 0x0 0x0
0xffffa58000014580 0001 00000000 0x0 0x0
0xffffa58000014600 0001 00000000 0x0 0x0
0xffffa58000014680 0001 00000000 0x0 0x0
0xffffa58000014700 0001 00000000 0x0 0x0
0xffffa58000014780 0001 00000000 0x0 0x0
0xffffa58000014800 0041 00000000 0x0 0x0
0xffffa58000014880 0041 00000000 0x0 0x0
0xffffa58000014900 0041 00000000 0x0 0x0
0xffffa58000014980 0041 00000000 0x0 0x0
0xffffa58000014a00 0041 00000000 0x0 0x0
0xffffa58000014a80 0041 00000000 0x0 0x0
0xffffa58000014b00 0041 00000000 0x0 0x0
0xffffa58000014b80 0041 00000000 0x0 0x0
0xffffa58000014c00 0041 00000000 0x0 0x0
0xffffa58000014c80 0041 00000000 0x0 0x0
0xffffa58000014d00 0041 00000000 0x0 0x0
0xffffa58000014d80 0041 00000000 0x0 0x0
0xffffa58000014e00 0041 00000000 0x0 0x0
0xffffa58000014e80 0041 00000000 0x0 0x0
0xffffa58000014f00 0041 00000000 0x0 0x0
0xffffa58000014f80 0041 00000000 0x0 0x0
0xffffa58000015000 0041 00000000 0x0 0x0
0xffffa58000015080 0041 00000000 0x0 0x0
0xffffa58000015100 0041 00000000 0x0 0x0
0xffffa58000015180 0041 00000000 0x0 0x0
0xffffa58000015200 0041 00000000 0x0 0x0
0xffffa58000015280 0041 00000000 0x0 0x0
0xffffa58000015300 0041 00000000 0x0 0x0
0xffffa58000015380 0041 00000000 0x0 0x0
0xffffa58000015400 0041 00000000 0x0 0x0
0xffffa58000015480 0041 00000000 0x0 0x0
0xffffa58000015500 0041 00000000 0x0 0x0
0xffffa58000015580 0041 00000000 0x0 0x0
0xffffa58000015600 0041 00000000 0x0 0x0
0xffffa58000015680 0041 00000000 0x0 0x0
0xffffa58000015700 0041 00000000 0x0 0x0
0xffffa58000015780 0041 00000000 0x0 0x0
0xffffa58000015800 0041 00000000 0x0 0x0
0xffffa58000015880 0041 00000000 0x0 0x0
0xffffa58000015900 0041 00000000 0x0 0x0
0xffffa58000015980 0041 00000000 0x0 0x0
0xffffa58000015a00 0041 00000000 0x0 0x0
0xffffa58000015a80 0041 00000000 0x0 0x0
0xffffa58000015b00 0041 00000000 0x0 0x0
0xffffa58000015b80 0041 00000000 0x0 0x0
0xffffa58000015c00 0041 00000000 0x0 0x0
0xffffa58000015c80 0041 00000000 0x0 0x0
0xffffa58000015d00 0001 00000000 0x0 0x0
0xffffa58000015d80 0001 00000000 0x0 0x0
0xffffa58000015e00 0001 00000000 0x0 0x0
0xffffa58000015e80 0001 00000000 0x0 0x0
0xffffa58000015f00 0001 00000000 0x0 0x0
0xffffa58000015f80 0001 00000000 0x0 0x0
0xffffa58000016000 0001 00000000 0x0 0x0
0xffffa58000016080 0001 00000000 0x0 0x0
0xffffa58000016100 0001 00000000 0x0 0x0
0xffffa58000016180 0001 00000000 0x0 0x0
0xffffa58000016200 0001 00000000 0x0 0x0
0xffffa58000016280 0001 00000000 0x0 0x0
0xffffa58000016300 0001 00000000 0x0 0x0
0xffffa58000016380 0001 00000000 0x0 0x0
0xffffa58000016400 0001 00000000 0x0 0x0
0xffffa58000016480 0001 00000000 0x0 0x0
0xffffa58000016500 0001 00000000 0x0 0x0
0xffffa58000016580 0001 00000000 0x0 0x0
0xffffa58000016600 0001 00000000 0x0 0x0
0xffffa58000016680 0001 00000000 0x0 0x0
0xffffa58000016700 0001 00000000 0x0 0x0
0xffffa58000016780 0001 00000000 0x0 0x0
0xffffa58000016800 0001 00000000 0x0 0x0
0xffffa58000016880 0001 00000000 0x0 0x0
0xffffa58000016900 0001 00000000 0x0 0x0
0xffffa58000016980 0001 00000000 0x0 0x0
0xffffa58000016a00 0001 00000000 0x0 0x0
0xffffa58000016a80 0001 00000000 0x0 0x0
0xffffa58000016b00 0001 00000000 0x0 0x0
0xffffa58000016b80 0001 00000000 0x0 0x0
0xffffa58000016c00 0001 00000000 0x0 0x0
0xffffa58000016c80 0001 00000000 0x0 0x0
0xffffa58000016d00 0001 00000000 0x0 0x0
0xffffa58000016d80 0001 00000000 0x0 0x0
0xffffa58000016e00 0001 00000000 0x0 0x0
0xffffa58000016e80 0001 00000000 0x0 0x0
0xffffa58000016f00 0001 00000000 0x0 0x0
0xffffa58000016f80 0001 00000000 0x0 0x0
0xffffa58000017000 0001 00000000 0x0 0x0
0xffffa58000017080 0001 00000000 0x0 0x0
0xffffa58000017100 0001 00000000 0x0 0x0
0xffffa58000017180 0001 00000000 0x0 0x0
0xffffa58000017200 0001 00000000 0x0 0x0
0xffffa58000017280 0001 00000000 0x0 0x0
0xffffa58000017300 0001 00000000 0x0 0x0
0xffffa58000017380 0001 00000000 0x0 0x0
0xffffa58000017400 0001 00000000 0x0 0x0
0xffffa58000017480 0001 00000000 0x0 0x0
0xffffa58000017500 0001 00000000 0x0 0x0
0xffffa58000017580 0001 00000000 0x0 0x0
0xffffa58000017600 0001 00000000 0x0 0x0
0xffffa58000017680 0001 00000000 0x0 0x0
0xffffa58000017700 0001 00000000 0x0 0x0
0xffffa58000017780 0001 00000000 0x0 0x0
0xffffa58000017800 0041 00000000 0x0 0x0
0xffffa58000017880 0041 00000000 0x0 0x0
0xffffa58000017900 0041 00000000 0x0 0x0
0xffffa58000017980 0041 00000000 0x0 0x0
0xffffa58000017a00 0041 00000000 0x0 0x0
0xffffa58000017a80 0041 00000000 0x0 0x0
0xffffa58000017b00 0041 00000000 0x0 0x0
0xffffa58000017b80 0041 00000000 0x0 0x0
0xffffa58000017c00 0041 00000000 0x0 0x0
0xffffa58000017c80 0041 00000000 0x0 0x0
0xffffa58000017d00 0041 00000000 0x0 0x0
0xffffa58000017d80 0041 00000000 0x0 0x0
0xffffa58000017e00 0041 00000000 0x0 0x0
0xffffa58000017e80 0041 00000000 0x0 0x0
0xffffa58000017f00 0041 00000000 0x0 0x0
0xffffa58000017f80 0041 00000000 0x0 0x0
0xffffa58000018000 0041 00000000 0x0 0x0
0xffffa58000018080 0041 00000000 0x0 0x0
0xffffa58000018100 0041 00000000 0x0 0x0
0xffffa58000018180 0041 00000000 0x0 0x0
0xffffa58000018200 0041 00000000 0x0 0x0
0xffffa58000018280 0041 00000000 0x0 0x0
0xffffa58000018300 0041 00000000 0x0 0x0
0xffffa58000018380 0041 00000000 0x0 0x0
0xffffa58000018400 0041 00000000 0x0 0x0
0xffffa58000018480 0041 00000000 0x0 0x0
0xffffa58000018500 0041 00000000 0x0 0x0
0xffffa58000018580 0041 00000000 0x0 0x0
0xffffa58000018600 0041 00000000 0x0 0x0
0xffffa58000018680 0041 00000000 0x0 0x0
0xffffa58000018700 0041 00000000 0x0 0x0
0xffffa58000018780 0041 00000000 0x0 0x0
0xffffa58000018800 0041 00000000 0x0 0x0
0xffffa58000018880 0041 00000000 0x0 0x0
0xffffa58000018900 0041 00000000 0x0 0x0
0xffffa58000018980 0041 00000000 0x0 0x0
0xffffa58000018a00 0041 00000000 0x0 0x0
0xffffa58000018a80 0041 00000000 0x0 0x0
0xffffa58000018b00 0041 00000000 0x0 0x0
0xffffa58000018b80 0041 00000000 0x0 0x0
0xffffa58000018c00 0041 00000000 0x0 0x0
0xffffa58000018c80 0041 00000000 0x0 0x0
0xffffa58000018d00 0041 00000000 0x0 0x0
0xffffa58000018d80 0001 00000000 0x0 0x0
0xffffa58000018e00 0001 00000000 0x0 0x0
0xffffa58000018e80 0001 00000000 0x0 0x0
0xffffa58000018f00 0001 00000000 0x0 0x0
0xffffa58000018f80 0001 00000000 0x0 0x0
0xffffa58000019000 0001 00000000 0x0 0x0
0xffffa58000019080 0001 00000000 0x0 0x0
0xffffa58000019100 0001 00000000 0x0 0x0
0xffffa58000019180 0001 00000000 0x0 0x0
0xffffa58000019200 0001 00000000 0x0 0x0
0xffffa58000019280 0001 00000000 0x0 0x0
0xffffa58000019300 0001 00000000 0x0 0x0
0xffffa58000019380 0001 00000000 0x0 0x0
0xffffa58000019400 0001 00000000 0x0 0x0
0xffffa58000019480 0001 00000000 0x0 0x0
0xffffa58000019500 0001 00000000 0x0 0x0
0xffffa58000019580 0001 00000000 0x0 0x0
0xffffa58000019600 0001 00000000 0x0 0x0
0xffffa58000019680 0001 00000000 0x0 0x0
0xffffa58000019700 0001 00000000 0x0 0x0
0xffffa58000019780 0001 00000000 0x0 0x0
0xffffa58000019800 0001 00000000 0x0 0x0
0xffffa58000019880 0001 00000000 0x0 0x0
0xffffa58000019900 0001 00000000 0x0 0x0
0xffffa58000019980 0001 00000000 0x0 0x0
0xffffa58000019a00 0001 00000000 0x0 0x0
0xffffa58000019a80 0001 00000000 0x0 0x0
0xffffa58000019b00 0001 00000000 0x0 0x0
0xffffa58000019b80 0001 00000000 0x0 0x0
0xffffa58000019c00 0001 00000000 0x0 0x0
0xffffa58000019c80 0001 00000000 0x0 0x0
0xffffa58000019d00 0001 00000000 0x0 0x0
0xffffa58000019d80 0001 00000000 0x0 0x0
0xffffa58000019e00 0001 00000000 0x0 0x0
0xffffa58000019e80 0001 00000000 0x0 0x0
0xffffa58000019f00 0001 00000000 0x0 0x0
0xffffa58000019f80 0001 00000000 0x0 0x0
0xffffa5800001a000 0001 00000000 0x0 0x0
0xffffa5800001a080 0001 00000000 0x0 0x0
0xffffa5800001a100 0001 00000000 0x0 0x0
0xffffa5800001a180 0001 00000000 0x0 0x0
0xffffa5800001a200 0001 00000000 0x0 0x0
0xffffa5800001a280 0001 00000000 0x0 0x0
0xffffa5800001a300 0001 00000000 0x0 0x0
0xffffa5800001a380 0001 00000000 0x0 0x0
0xffffa5800001a400 0001 00000000 0x0 0x0
0xffffa5800001a480 0001 00000000 0x0 0x0
0xffffa5800001a500 0001 00000000 0x0 0x0
0xffffa5800001a580 0001 00000000 0x0 0x0
0xffffa5800001a600 0001 00000000 0x0 0x0
0xffffa5800001a680 0001 00000000 0x0 0x0
0xffffa5800001a700 0001 00000000 0x0

Tested on:

commit: 4450cb84 Enable make/unit-tests/directive-for-break
git tree: https://github.com/NetBSD/src trunk
console output: https://syzkaller.appspot.com/x/log.txt?x=12059dfb080000
kernel config: https://syzkaller.appspot.com/x/.config?x=1420f906d33d9f1f
dashboard link: https://syzkaller.appspot.com/bug?extid=1bee937496ae35ea301c
compiler: g++ (Debian 10.2.1-6) 10.2.1 20210110
patch: https://syzkaller.appspot.com/x/patch.diff?x=14c941c5080000

syzbot

unread,

Sep 3, 2022, 6:30:14 AM9/3/22

to rias...@netbsd.org, syzkaller-...@googlegroups.com

Hello,

syzbot has tested the proposed patch but the reproducer is still triggering an issue:

UBSan: Undefined Behavior in ktrace_common

[ 44.5367227] panic: UBSan: Undefined Behavior in /syzkaller/jobs/netbsd/kernel/sys/kern/kern_ktrace.c:1044:29, member access within null pointer of type 'struct ktr_desc'

[ 44.5467153] cpu1: Begin traceback...
[ 44.5667143] vpanic() at netbsd:vpanic+0x2f2 sys/kern/subr_prf.c:293
[ 44.6367103] Report() at netbsd:Report+0x3b sys/../common/lib/libc/misc/ubsan.c:1352
[ 44.6967116] HandleTypeMismatch() at netbsd:HandleTypeMismatch+0x1fb sys/../common/lib/libc/misc/ubsan.c:429
[ 44.7467103] ktrace_common() at netbsd:ktrace_common+0x623 sys/kern/kern_ktrace.c:1044
[ 44.7967124] sys_fktrace() at netbsd:sys_fktrace+0xd6 sys/kern/kern_ktrace.c:1186
[ 44.8467113] sys___syscall() at netbsd:sys___syscall+0x1e4 sy_call sys/sys/syscallvar.h:65 [inline]
[ 44.8467113] sys___syscall() at netbsd:sys___syscall+0x1e4 sys/kern/sys_syscall.c:90
[ 44.8967129] syscall() at netbsd:syscall+0x2da sy_call sys/sys/syscallvar.h:65 [inline]
[ 44.8967129] syscall() at netbsd:syscall+0x2da sy_invoke sys/sys/syscallvar.h:94 [inline]
[ 44.8967129] syscall() at netbsd:syscall+0x2da sys/arch/x86/x86/syscall.c:138
[ 44.9167102] --- syscall (number 288 via SYS_syscall) ---
[ 44.9367092] netbsd:syscall+0x2da:
[ 44.9367092] cpu1: End traceback...
[ 44.9367092] fatal breakpoint trap in supervisor mode
[ 44.9467085] trap type 1 code 0 rip 0xffffffff80221ab5 cs 0x8 rflags 0x246 cr2 0x63e060 ilevel 0 rsp 0xffffcf024803b920
[ 44.9567071] curlwp 0xfffffe4d9adc6540 pid 1211.1207 lowest kstack 0xffffcf02480372c0
Stopped in pid 1211.1207 (syz-executor.3) at netbsd:breakpoint+0x5: leave

?
breakpoint() at netbsd:breakpoint+0x5
db_panic() at netbsd:db_panic+0xec sys/ddb/db_panic.c:69
vpanic() at netbsd:vpanic+0x2f2 sys/kern/subr_prf.c:293

Report() at netbsd:Report+0x3b sys/../common/lib/libc/misc/ubsan.c:1352
HandleTypeMismatch() at netbsd:HandleTypeMismatch+0x1fb sys/../common/lib/libc/misc/ubsan.c:429
ktrace_common() at netbsd:ktrace_common+0x623 sys/kern/kern_ktrace.c:1044
sys_fktrace() at netbsd:sys_fktrace+0xd6 sys/kern/kern_ktrace.c:1186
sys___syscall() at netbsd:sys___syscall+0x1e4 sy_call sys/sys/syscallvar.h:65 [inline]
sys___syscall() at netbsd:sys___syscall+0x1e4 sys/kern/sys_syscall.c:90
syscall() at netbsd:syscall+0x2da sy_call sys/sys/syscallvar.h:65 [inline]
syscall() at netbsd:syscall+0x2da sy_invoke sys/sys/syscallvar.h:94 [inline]
syscall() at netbsd:syscall+0x2da sys/arch/x86/x86/syscall.c:138
--- syscall (number 288 via SYS_syscall) ---
netbsd:syscall+0x2da:
Panic string: UBSan: Undefined Behavior in /syzkaller/jobs/netbsd/kernel/sys/kern/kern_ktrace.c:1044:29, member access within null pointer of type 'struct ktr_desc'

PID LID S CPU FLAGS STRUCT LWP * NAME WAIT

1236 1236 2 0 0 fffffe4d998ea340 syz-executor.0
1245 1322 2 0 0 fffffe4d9a27c0c0 syz-executor.4
1245 >1245 7 0 10000000 fffffe4d90ce0740 syz-executor.4
1210 1210 2 0 0 fffffe4d9db53680 syz-executor.5
1312 1312 2 0 0 fffffe4d9db53240 syz-executor.1
1211 >1207 7 1 100 fffffe4d9adc6540 syz-executor.3
1211 1211 2 1 10000000 fffffe4d9c066a80 syz-executor.3
324 324 2 1 0 fffffe4d9a0c4480 syz-executor.2
335 335 2 0 0 fffffe4d9c066640 syz-executor.0
331 331 2 0 40100 fffffe4d9b807600 syz-executor.4
330 330 2 1 40140 fffffe4d9938b6c0 syz-executor.3
1198 1352 3 0 180 fffffe4d9a0c4040 syz-execprog parked
1198 976 3 0 180 fffffe4d9a27c500 syz-execprog kqueue
1198 1213 3 1 180 fffffe4d9a27c940 syz-execprog wait
1198 1384 3 1 180 fffffe4d9adc6100 syz-execprog wait
1198 953 3 0 180 fffffe4d99004640 syz-execprog wait
1198 1238 3 1 180 fffffe4d9938b280 syz-execprog wait
1198 1202 3 1 180 fffffe4d9b807a40 syz-execprog parked
1198 1204 3 0 180 fffffe4d9b8071c0 syz-execprog parked
1198 1199 3 1 180 fffffe4d995072c0 syz-execprog wait
1198 1197 3 1 1c0 fffffe4d9b5e35c0 syz-execprog wait
1198 1203 2 0 100 fffffe4d9938bb00 syz-execprog
1198 1198 3 1 40180 fffffe4d9c066200 syz-execprog parked
1241 1241 3 1 180 fffffe4d9b5e3a00 sshd select
1195 1195 3 0 180 fffffe4d9b5e3180 getty nanoslp
732 732 3 0 180 fffffe4d9b209580 getty nanoslp
1086 1086 3 0 180 fffffe4d9adc6980 getty nanoslp
945 945 3 1 1c0 fffffe4d9907eac0 getty ttyraw
1100 1100 3 1 180 fffffe4d9b209140 sshd select
1023 1023 3 0 180 fffffe4d9b2099c0 powerd kqueue
693 693 3 0 180 fffffe4d9aa50900 syslogd kqueue
547 547 3 0 180 fffffe4d99787b80 dhcpcd poll
742 742 3 0 180 fffffe4d99507b40 dhcpcd poll
465 465 3 0 180 fffffe4d998eabc0 dhcpcd poll
594 594 3 0 180 fffffe4d99507700 dhcpcd poll
292 292 3 0 180 fffffe4d99787740 dhcpcd poll
290 290 3 0 180 fffffe4d99787300 dhcpcd poll
289 289 3 0 180 fffffe4d998ea780 dhcpcd poll
1 1 3 0 180 fffffe4d90e5b980 init wait
0 940 3 0 200 fffffe4d99004a80 physiod physiod
0 195 3 0 200 fffffe4d9907e680 ioflush syncer
0 194 3 0 200 fffffe4d90ce0b80 pooldrain pooldrain
0 193 3 1 200 fffffe4d9907e240 pgdaemon pgdaemon
0 169 3 1 200 fffffe4d99004200 usb7 usbevt
0 168 3 1 200 fffffe4d95f7fa40 usb6 usbevt
0 167 3 1 200 fffffe4d95f7f600 usb5 usbevt
0 166 3 1 200 fffffe4d95f7f1c0 usb4 usbevt
0 165 3 1 200 fffffe4d92f1aa00 usb3 usbevt
0 31 3 1 200 fffffe4d92f1a5c0 usb2 usbevt
0 63 3 1 200 fffffe4d92f1a180 usb1 usbevt
0 126 3 1 200 fffffe4d91ef49c0 usb0 usbevt
0 125 3 1 200 fffffe4d91ef4580 usbtask-dr usbtsk
0 124 3 1 200 fffffe4d91ef4140 usbtask-hc usbtsk
0 123 3 0 200 fffffe4d8f2a9b00 npfgc0 npfgcw
0 122 3 1 200 fffffe4d90e5b540 rt_free rt_free
0 121 3 1 200 fffffe4d90e5b100 unpgc unpgc
0 120 3 0 200 fffffe4d90e46940 key_timehandler key_timehandler
0 119 3 1 200 fffffe4d90e46500 icmp6_wqinput/1 icmp6_wqinput
0 118 3 0 200 fffffe4d90e460c0 icmp6_wqinput/0 icmp6_wqinput
0 117 3 0 200 fffffe4d90e39900 nd6_timer nd6_timer
0 116 3 1 200 fffffe4d90e394c0 carp6_wqinput/1 carp6_wqinput
0 115 3 0 200 fffffe4d90e39080 carp6_wqinput/0 carp6_wqinput
0 114 3 1 200 fffffe4d90e148c0 carp_wqinput/1 carp_wqinput
0 113 3 0 200 fffffe4d90e14480 carp_wqinput/0 carp_wqinput
0 112 3 1 200 fffffe4d90e14040 icmp_wqinput/1 icmp_wqinput
0 111 3 0 200 fffffe4d90dd7bc0 icmp_wqinput/0 icmp_wqinput
0 110 3 0 200 fffffe4d90dd7340 rt_timer rt_timer
0 109 3 0 200 fffffe4d90dd7780 vmem_rehash vmem_rehash
0 100 3 0 200 fffffe4d90ce0300 entbutler entropy
0 99 3 1 200 fffffe4d90748b40 viomb balloon
0 98 3 1 200 fffffe4d90748700 vioif0_txrx/1 vioif0_txrx
0 97 3 0 200 fffffe4d907482c0 vioif0_txrx/0 vioif0_txrx
0 30 3 1 200 fffffe4d8f2a96c0 scsibus0 sccomp
0 29 3 0 200 fffffe4d8f2a9280 pms0 pmsreset
0 28 3 1 200 fffffe4d8f1acac0 xcall/1 xcall
0 27 1 1 200 fffffe4d8f1ac680 softser/1
0 26 1 1 200 fffffe4d8f1ac240 softclk/1
0 25 1 1 200 fffffe4d8f187a80 softbio/1
0 24 1 1 200 fffffe4d8f187640 softnet/1
0 23 1 1 201 fffffe4d8f187200 idle/1
0 22 3 1 200 fffffe4ebd52da40 lnxsyswq lnxsyswq
0 21 3 1 200 fffffe4ebd52d600 lnxubdwq lnxubdwq
0 20 3 0 200 fffffe4ebd52d1c0 lnxpwrwq lnxpwrwq
0 19 3 1 200 fffffe4ebd534a00 lnxlngwq lnxlngwq
0 18 3 1 200 fffffe4ebd5345c0 lnxhipwq lnxhipwq
0 17 3 1 200 fffffe4ebd534180 lnxrcugc lnxrcugc
0 16 3 0 200 fffffe4ebd5539c0 sysmon smtaskq
0 15 3 1 200 fffffe4ebd553580 pmfsuspend pmfsuspend
0 14 3 0 200 fffffe4ebd553140 pmfevent pmfevent
0 13 3 1 200 fffffe4ebd55e980 sopendfree sopendfr
0 12 3 0 200 fffffe4ebd55e540 ifwdog ifwdog
0 11 3 1 200 fffffe4ebd55e100 iflnkst iflnkst
0 10 3 1 200 fffffe4ebe595940 nfssilly nfssilly
0 9 3 0 200 fffffe4ebe595500 vdrain vdrain
0 8 3 1 200 fffffe4ebe5950c0 modunload mod_unld
0 7 3 0 200 fffffe4ebe5ba900 xcall/0 xcall
0 6 1 0 200 fffffe4ebe5ba4c0 softser/0
0 5 1 0 200 fffffe4ebe5ba080 softclk/0
0 4 1 0 200 fffffe4ebe5eb8c0 softbio/0
0 3 1 0 200 fffffe4ebe5eb480 softnet/0
0 2 1 0 201 fffffe4ebe5eb040 idle/0
0 0 3 0 200 ffffffff86740cc0 swapper uvm
[Locks tracked through LWPs]

****** LWP 1210.1210 (syz-executor.5) @ 0xfffffe4d9db53680, l_stat=2

*** Locks held:

* Lock 0 (initialized at netbsd:amap_alloc1+0x30a sys/uvm/uvm_amap.c:167)
lock address : fffffe4d9ca313c0
type : sleep/adaptive
initialized : netbsd:amap_alloc1+0x30a

shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0

relevant lwp : 0xfffffe4d9db53680 last held: 0xfffffe4d9db53680
last locked* : netbsd:uvm_fault_internal+0x75d
unlocked : netbsd:uvm_fault_lower_enter+0x86d
owner/count : 000000000000000000 flags : 000000000000000000

Turnstile: no active turnstile for this lock.

* Lock 1 (initialized at netbsd:pmap_ctor+0x6d sys/arch/x86/x86/pmap.c:2857)
lock address : fffffe4d9942e780
type : sleep/adaptive
initialized : netbsd:pmap_ctor+0x6d

shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0

relevant lwp : 0xfffffe4d9db53680 last held: 0xfffffe4d9db53680
last locked* : netbsd:pmap_extract+0xdb
unlocked : netbsd:pmap_enter_ma+0xa7d

owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

*** Locks wanted: none

****** LWP 1312.1312 (syz-executor.1) @ 0xfffffe4d9db53240, l_stat=2

*** Locks held:

* Lock 0 (initialized at netbsd:uvmspace_alloc+0x339 uvm_map_setup sys/uvm/uvm_map.c:4772 [inline])
* Lock 0 (initialized at netbsd:uvmspace_alloc+0x339 uvmspace_init sys/uvm/uvm_map.c:4115 [inline])
* Lock 0 (initialized at netbsd:uvmspace_alloc+0x339 sys/uvm/uvm_map.c:4094)
lock address : fffffe4d90e7eb40
type : sleep/adaptive
initialized : netbsd:uvmspace_alloc+0x339

shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0

relevant lwp : 0xfffffe4d9db53240 last held: 0xfffffe4d9db53240
last locked* : netbsd:uvm_map_prepare+0x11e
unlocked : netbsd:uvm_map_enter+0x791
owner/count : 000000000000000000 flags : 000000000000000000

Turnstile: no active turnstile for this lock.

*** Locks wanted: none

****** LWP 324.324 (syz-executor.2) @ 0xfffffe4d9a0c4480, l_stat=2

*** Locks held:

* Lock 0 (initialized at netbsd:vcache_alloc+0xba sys/kern/vfs_vnode.c:1392)

lock address : fffffe4d9dbfe9c0

type : sleep/adaptive
initialized : netbsd:vcache_alloc+0xba
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 1

relevant lwp : 0xfffffe4d9a0c4480 last held: 0xfffffe4d9a0c4480

last locked* : netbsd:genfs_lock+0x220
unlocked : netbsd:genfs_unlock+0x50

owner/count : 0xfffffe4d9a0c4480 flags : 0x0000000000000004

Turnstile: no active turnstile for this lock.

* Lock 1 (initialized at netbsd:vcache_alloc+0xba sys/kern/vfs_vnode.c:1392)

lock address : fffffe4d9dbfeec0

type : sleep/adaptive
initialized : netbsd:vcache_alloc+0xba
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 1

relevant lwp : 0xfffffe4d9a0c4480 last held: 0xfffffe4d9a0c4480

last locked* : netbsd:genfs_lock+0x220
unlocked : 0

owner/count : 0xfffffe4d9a0c4480 flags : 0x0000000000000004

Turnstile: no active turnstile for this lock.

*** Locks wanted: none

****** LWP 335.335 (syz-executor.0) @ 0xfffffe4d9c066640, l_stat=2

*** Locks held:

* Lock 0 (initialized at netbsd:vcache_alloc+0xba sys/kern/vfs_vnode.c:1392)

lock address : fffffe4d9c42cc00

type : sleep/adaptive
initialized : netbsd:vcache_alloc+0xba
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0

relevant cpu : 0 last held: 1

relevant lwp : 0xfffffe4d9c066640 last held: 0xfffffe4d9c066640

last locked* : netbsd:genfs_lock+0x220
unlocked : netbsd:genfs_unlock+0x50

owner/count : 000000000000000000 flags : 000000000000000000

Turnstile: no active turnstile for this lock.

* Lock 1 (initialized at netbsd:vcache_alloc+0xba sys/kern/vfs_vnode.c:1392)

lock address : fffffe4d9dbfec40

type : sleep/adaptive
initialized : netbsd:vcache_alloc+0xba
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0

relevant cpu : 0 last held: 0

relevant lwp : 0xfffffe4d9c066640 last held: 0xfffffe4d9c066640

last locked* : netbsd:genfs_lock+0x220
unlocked : 0

owner/count : 000000000000000000 flags : 000000000000000000

Turnstile: no active turnstile for this lock.

*** Locks wanted: none

****** LWP 331.331 (syz-executor.4) @ 0xfffffe4d9b807600, l_stat=2

*** Locks held:

* Lock 0 (initialized at netbsd:uvmspace_alloc+0x339 uvm_map_setup sys/uvm/uvm_map.c:4772 [inline])
* Lock 0 (initialized at netbsd:uvmspace_alloc+0x339 uvmspace_init sys/uvm/uvm_map.c:4115 [inline])
* Lock 0 (initialized at netbsd:uvmspace_alloc+0x339 sys/uvm/uvm_map.c:4094)
lock address : fffffe4d9963e1a8
type : sleep/adaptive
initialized : netbsd:uvmspace_alloc+0x339

shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0

relevant lwp : 0xfffffe4d9b807600 last held: 0xfffffe4d9b807600
last locked* : netbsd:vm_map_lock+0x146
unlocked : netbsd:uvm_fault_lower_enter+0x88c
owner/count : 000000000000000000 flags : 000000000000000000

Turnstile: no active turnstile for this lock.

*** Locks wanted: none

****** LWP 742.742 (dhcpcd) @ 0xfffffe4d99507b40, l_stat=3

relevant lwp : 0xfffffe4d99507b40 last held: 000000000000000000

last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 465.465 (dhcpcd) @ 0xfffffe4d998eabc0, l_stat=3

relevant lwp : 0xfffffe4d998eabc0 last held: 000000000000000000

last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 290.290 (dhcpcd) @ 0xfffffe4d99787300, l_stat=3

relevant lwp : 0xfffffe4d99787300 last held: 000000000000000000

last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 289.289 (dhcpcd) @ 0xfffffe4d998ea780, l_stat=3

relevant lwp : 0xfffffe4d998ea780 last held: 000000000000000000

last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 0.11 (iflnkst) @ 0xfffffe4ebd55e100, l_stat=3

relevant lwp : 0xfffffe4ebd55e100 last held: 000000000000000000

last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 0.5 (softclk/0) @ 0xfffffe4ebe5ba080, l_stat=1

relevant lwp : 0xfffffe4ebe5ba080 last held: 000000000000000000

last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 0.0 (swapper) @ 0xffffffff86740cc0, l_stat=3

relevant lwp : 0xffffffff86740cc0 last held: 000000000000000000

last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

[Locks tracked through CPUs]

******* Locks held on cpu1:

* Lock 0 (initialized at netbsd:kprintf_init+0x72 sys/kern/subr_prf.c:157)
lock address : netbsd:kprintf_mtx
type : spin
initialized : netbsd:kprintf_init+0x72
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 1

relevant lwp : 0xfffffe4d9adc6540 last held: 0xfffffe4d9adc6540

last locked* : netbsd:kprintf_lock+0x50
unlocked : netbsd:kprintf_unlock+0x70
owner field : 0x0000000000000800 wait/spin: 0/1

PAGE FLAG PQ UOBJECT UANON

0xffffcf0000007180 0045 00000000 0x0 0x0
0xffffcf0000007200 0045 00000000 0x0 0x0
0xffffcf0000007280 0045 00000000 0x0 0x0
0xffffcf0000007300 0045 00000000 0x0 0x0
0xffffcf0000007380 0045 00000000 0x0 0x0
0xffffcf0000007400 0045 00000000 0x0 0x0
0xffffcf0000007480 0045 00000000 0x0 0x0
0xffffcf0000007500 0045 00000000 0x0 0x0
0xffffcf0000007580 0045 00000000 0x0 0x0
0xffffcf0000007600 0045 00000000 0x0 0x0
0xffffcf0000007680 0041 00000000 0x0 0x0
0xffffcf0000007700 0041 00000000 0x0 0x0
0xffffcf0000007780 0041 00000000 0x0 0x0
0xffffcf0000007800 0041 00000000 0x0 0x0
0xffffcf0000007880 0045 00000000 0x0 0x0
0xffffcf0000007900 0045 00000000 0x0 0x0
0xffffcf0000007980 0041 00000000 0x0 0x0
0xffffcf0000007a00 0041 00000000 0x0 0x0
0xffffcf0000007a80 0041 00000000 0x0 0x0
0xffffcf0000007b00 0041 00000000 0x0 0x0
0xffffcf0000007b80 0041 00000000 0x0 0x0
0xffffcf0000007c00 0041 00000000 0x0 0x0
0xffffcf0000007c80 0041 00000000 0x0 0x0
0xffffcf0000007d00 0041 00000000 0x0 0x0
0xffffcf0000007d80 0041 00000000 0x0 0x0
0xffffcf0000007e00 0041 00000000 0x0 0x0
0xffffcf0000007e80 0041 00000000 0x0 0x0
0xffffcf0000007f00 0041 00000000 0x0 0x0
0xffffcf0000007f80 0041 00000000 0x0 0x0
0xffffcf0000008000 0041 00000000 0x0 0x0
0xffffcf0000008080 0041 00000000 0x0 0x0
0xffffcf0000008100 0041 00000000 0x0 0x0
0xffffcf0000008180 0041 00000000 0x0 0x0
0xffffcf0000008200 0041 00000000 0x0 0x0
0xffffcf0000008280 0041 00000000 0x0 0x0
0xffffcf0000008300 0041 00000000 0x0 0x0
0xffffcf0000008380 0041 00000000 0x0 0x0
0xffffcf0000008400 0041 00000000 0x0 0x0
0xffffcf0000008480 0041 00000000 0x0 0x0
0xffffcf0000008500 0041 00000000 0x0 0x0
0xffffcf0000008580 0041 00000000 0x0 0x0
0xffffcf0000008600 0045 00000000 0x0 0x0
0xffffcf0000008680 0041 00000000 0x0 0x0
0xffffcf0000008700 0041 00000000 0x0 0x0
0xffffcf0000008780 0041 00000000 0x0 0x0
0xffffcf0000008800 0045 00000000 0x0 0x0
0xffffcf0000008880 0041 00000000 0x0 0x0
0xffffcf0000008900 0041 00000000 0x0 0x0
0xffffcf0000008980 0041 00000000 0x0 0x0
0xffffcf0000008a00 0041 00000000 0x0 0x0
0xffffcf0000008a80 0041 00000000 0x0 0x0
0xffffcf0000008b00 0041 00000000 0x0 0x0
0xffffcf0000008b80 0041 00000000 0x0 0x0
0xffffcf0000008c00 0041 00000000 0x0 0x0
0xffffcf0000008c80 0041 00000000 0x0 0x0
0xffffcf0000008d00 0041 00000000 0x0 0x0
0xffffcf0000008d80 0041 00000000 0x0 0x0
0xffffcf0000008e00 0041 00000000 0x0 0x0
0xffffcf0000008e80 0041 00000000 0x0 0x0
0xffffcf0000008f00 0041 00000000 0x0 0x0
0xffffcf0000008f80 0041 00000000 0x0 0x0
0xffffcf0000009000 0041 00000000 0x0 0x0
0xffffcf0000009080 0041 00000000 0x0 0x0
0xffffcf0000009100 0045 00000000 0x0 0x0
0xffffcf0000009180 0041 00000000 0x0 0x0
0xffffcf0000009200 0041 00000000 0x0 0x0
0xffffcf0000009280 0041 00000000 0x0 0x0
0xffffcf0000009300 0041 00000000 0x0 0x0
0xffffcf0000009380 0041 00000000 0x0 0x0
0xffffcf0000009400 0041 00000000 0x0 0x0
0xffffcf0000009480 0045 00000000 0x0 0x0
0xffffcf0000009500 0041 00000000 0x0 0x0
0xffffcf0000009580 0041 00000000 0x0 0x0
0xffffcf0000009600 0041 00000000 0x0 0x0
0xffffcf0000009680 0041 00000000 0x0 0x0
0xffffcf0000009700 0041 00000000 0x0 0x0
0xffffcf0000009780 0041 00000000 0x0 0x0
0xffffcf0000009800 0041 00000000 0x0 0x0
0xffffcf0000009880 0041 00000000 0x0 0x0
0xffffcf0000009900 0041 00000000 0x0 0x0
0xffffcf0000009980 0041 00000000 0x0 0x0
0xffffcf0000009a00 0041 00000000 0x0 0x0
0xffffcf0000009a80 0045 00000000 0x0 0x0
0xffffcf0000009b00 0041 00000000 0x0 0x0
0xffffcf0000009b80 0041 00000000 0x0 0x0
0xffffcf0000009c00 0041 00000000 0x0 0x0
0xffffcf0000009c80 0041 00000000 0x0 0x0
0xffffcf0000009d00 0041 00000000 0x0 0x0
0xffffcf0000009d80 0041 00000000 0x0 0x0
0xffffcf0000009e00 0041 00000000 0x0 0x0
0xffffcf0000009e80 0041 00000000 0x0 0x0
0xffffcf0000009f00 0041 00000000 0x0 0x0
0xffffcf0000009f80 0041 00000000 0x0 0x0
0xffffcf000000a000 0041 00000000 0x0 0x0
0xffffcf000000a080 0041 00000000 0x0 0x0
0xffffcf000000a100 0041 00000000 0x0 0x0
0xffffcf000000a180 0041 00000000 0x0 0x0
0xffffcf000000a200 0041 00000000 0x0 0x0
0xffffcf000000a280 0041 00000000 0x0 0x0
0xffffcf000000a300 0041 00000000 0x0 0x0
0xffffcf000000a380 0041 00000000 0x0 0x0
0xffffcf000000a400 0041 00000000 0x0 0x0
0xffffcf000000a480 0041 00000000 0x0 0x0
0xffffcf000000a500 0041 00000000 0x0 0x0
0xffffcf000000a580 0041 00000000 0x0 0x0
0xffffcf000000a600 0041 00000000 0x0 0x0
0xffffcf000000a680 0041 00000000 0x0 0x0
0xffffcf000000a700 0041 00000000 0x0 0x0
0xffffcf000000a780 0041 00000000 0x0 0x0
0xffffcf000000a800 0041 00000000 0x0 0x0
0xffffcf000000a880 0041 00000000 0x0 0x0
0xffffcf000000a900 0041 00000000 0x0 0x0
0xffffcf000000a980 0041 00000000 0x0 0x0
0xffffcf000000aa00 0041 00000000 0x0 0x0
0xffffcf000000aa80 0041 00000000 0x0 0x0
0xffffcf000000ab00 0041 00000000 0x0 0x0
0xffffcf000000ab80 0041 00000000 0x0 0x0
0xffffcf000000ac00 0041 00000000 0x0 0x0
0xffffcf000000ac80 0041 00000000 0x0 0x0
0xffffcf000000ad00 0041 00000000 0x0 0x0
0xffffcf000000ad80 0041 00000000 0x0 0x0
0xffffcf000000ae00 0041 00000000 0x0 0x0
0xffffcf000000ae80 0045 00000000 0x0 0x0
0xffffcf000000af00 0045 00000000 0x0 0x0
0xffffcf000000af80 0045 00000000 0x0 0x0
0xffffcf000000b000 0041 00000000 0x0 0x0
0xffffcf000000b080 0041 00000000 0x0 0x0
0xffffcf000000b100 0041 00000000 0x0 0x0
0xffffcf000000b180 0045 00000000 0x0 0x0
0xffffcf000000b200 0041 00000000 0x0 0x0
0xffffcf000000b280 0045 00000000 0x0 0x0
0xffffcf000000b300 0045 00000000 0x0 0x0
0xffffcf000000b380 0045 00000000 0x0 0x0
0xffffcf000000b400 0041 00000000 0x0 0x0
0xffffcf000000b480 0041 00000000 0x0 0x0
0xffffcf000000b500 0041 00000000 0x0 0x0
0xffffcf000000b580 0045 00000000 0x0 0x0
0xffffcf000000b600 0045 00000000 0x0 0x0
0xffffcf000000b680 0045 00000000 0x0 0x0
0xffffcf000000b700 0045 00000000 0x0 0x0
0xffffcf000000b780 0045 00000000 0x0 0x0
0xffffcf000000b800 0045 00000000 0x0 0x0
0xffffcf000000b880 0041 00000000 0x0 0x0
0xffffcf000000b900 0045 00000000 0x0 0x0
0xffffcf000000b980 0045 00000000 0x0 0x0
0xffffcf000000ba00 0045 00000000 0x0 0x0
0xffffcf000000ba80 0045 00000000 0x0 0x0
0xffffcf000000bb00 0045 00000000 0x0 0x0
0xffffcf000000bb80 0045 00000000 0x0 0x0
0xffffcf000000bc00 0045 00000000 0x0 0x0
0xffffcf000000bc80 0041 00000000 0x0 0x0
0xffffcf000000bd00 0045 00000000 0x0 0x0
0xffffcf000000bd80 0045 00000000 0x0 0x0
0xffffcf000000be00 0045 00000000 0x0 0x0
0xffffcf000000be80 0045 00000000 0x0 0x0
0xffffcf000000bf00 0045 00000000 0x0 0x0
0xffffcf000000bf80 0045 00000000 0x0 0x0
0xffffcf000000c000 0045 00000000 0x0 0x0
0xffffcf000000c080 0041 00000000 0x0 0x0
0xffffcf000000c100 0045 00000000 0x0 0x0
0xffffcf000000c180 0045 00000000 0x0 0x0
0xffffcf000000c200 0045 00000000 0x0 0x0
0xffffcf000000c280 0045 00000000 0x0 0x0
0xffffcf000000c300 0045 00000000 0x0 0x0
0xffffcf000000c380 0045 00000000 0x0 0x0
0xffffcf000000c400 0045 00000000 0x0 0x0
0xffffcf000000c480 0045 00000000 0x0 0x0
0xffffcf000000c500 0045 00000000 0x0 0x0
0xffffcf000000c580 0045 00000000 0x0 0x0
0xffffcf000000c600 0045 00000000 0x0 0x0
0xffffcf000000c680 0045 00000000 0x0 0x0
0xffffcf000000c700 0041 00000000 0x0 0x0
0xffffcf000000c780 0041 00000000 0x0 0x0
0xffffcf000000c800 0045 00000000 0x0 0x0
0xffffcf000000c880 0045 00000000 0x0 0x0
0xffffcf000000c900 0045 00000000 0x0 0x0
0xffffcf000000c980 0045 00000000 0x0 0x0
0xffffcf000000ca00 0045 00000000 0x0 0x0
0xffffcf000000ca80 0041 00000000 0x0 0x0
0xffffcf000000cb00 0041 00000000 0x0 0x0
0xffffcf000000cb80 0041 00000000 0x0 0x0
0xffffcf000000cc00 0045 00000000 0x0 0x0
0xffffcf000000cc80 0045 00000000 0x0 0x0
0xffffcf000000cd00 0045 00000000 0x0 0x0
0xffffcf000000cd80 0041 00000000 0x0 0x0
0xffffcf000000ce00 0045 00000000 0x0 0x0
0xffffcf000000ce80 0041 00000000 0x0 0x0
0xffffcf000000cf00 0041 00000000 0x0 0x0
0xffffcf000000cf80 0041 00000000 0x0 0x0
0xffffcf000000d000 0041 00000000 0x0 0x0
0xffffcf000000d080 0045 00000000 0x0 0x0
0xffffcf000000d100 0045 00000000 0x0 0x0
0xffffcf000000d180 0041 00000000 0x0 0x0
0xffffcf000000d200 0041 00000000 0x0 0x0
0xffffcf000000d280 0041 00000000 0x0 0x0
0xffffcf000000d300 0045 00000000 0x0 0x0
0xffffcf000000d380 0041 00000000 0x0 0x0
0xffffcf000000d400 0041 00000000 0x0 0x0
0xffffcf000000d480 0045 00000000 0x0 0x0
0xffffcf000000d500 0041 00000000 0x0 0x0
0xffffcf000000d580 0041 00000000 0x0 0x0
0xffffcf000000d600 0041 00000000 0x0 0x0
0xffffcf000000d680 0045 00000000 0x0 0x0
0xffffcf000000d700 0041 00000000 0x0 0x0
0xffffcf000000d780 0045 00000000 0x0 0x0
0xffffcf000000d800 0041 00000000 0x0 0x0
0xffffcf000000d880 0045 00000000 0x0 0x0
0xffffcf000000d900 0041 00000000 0x0 0x0
0xffffcf000000d980 0041 00000000 0x0 0x0
0xffffcf000000da00 0041 00000000 0x0 0x0
0xffffcf000000da80 0041 00000000 0x0 0x0
0xffffcf000000db00 0045 00000000 0x0 0x0
0xffffcf000000db80 0045 00000000 0x0 0x0
0xffffcf000000dc00 0041 00000000 0x0 0x0
0xffffcf000000dc80 0041 00000000 0x0 0x0
0xffffcf000000dd00 0041 00000000 0x0 0x0
0xffffcf000000dd80 0041 00000000 0x0 0x0
0xffffcf000000de00 0041 00000000 0x0 0x0
0xffffcf000000de80 0041 00000000 0x0 0x0
0xffffcf000000df00 0045 00000000 0x0 0x0
0xffffcf000000df80 0045 00000000 0x0 0x0
0xffffcf000000e000 0045 00000000 0x0 0x0
0xffffcf000000e080 0041 00000000 0x0 0x0
0xffffcf000000e100 0041 00000000 0x0 0x0
0xffffcf000000e180 0045 00000000 0x0 0x0
0xffffcf000000e200 0041 00000000 0x0 0x0
0xffffcf000000e280 0045 00000000 0x0 0x0
0xffffcf000000e300 0045 00000000 0x0 0x0
0xffffcf000000e380 0041 00000000 0x0 0x0
0xffffcf000000e400 0045 00000000 0x0 0x0
0xffffcf000000e480 0041 00000000 0x0 0x0
0xffffcf000000e500 0041 00000000 0x0 0x0
0xffffcf000000e580 0041 00000000 0x0 0x0
0xffffcf000000e600 0045 00000000 0x0 0x0
0xffffcf000000e680 0041 00000000 0x0 0x0
0xffffcf000000e700 0041 00000000 0x0 0x0
0xffffcf000000e780 0041 00000000 0x0 0x0
0xffffcf000000e800 0045 00000000 0x0 0x0
0xffffcf000000e880 0041 00000000 0x0 0x0
0xffffcf000000e900 0045 00000000 0x0 0x0
0xffffcf000000e980 0041 00000000 0x0 0x0
0xffffcf000000ea00 0041 00000000 0x0 0x0
0xffffcf000000ea80 0045 00000000 0x0 0x0
0xffffcf000000eb00 0041 00000000 0x0 0x0
0xffffcf000000eb80 0045 00000000 0x0 0x0
0xffffcf000000ec00 0041 00000000 0x0 0x0
0xffffcf000000ec80 0045 00000000 0x0 0x0
0xffffcf000000ed00 0041 00000000 0x0 0x0
0xffffcf000000ed80 0041 00000000 0x0 0x0
0xffffcf000000ee00 0041 00000000 0x0 0x0
0xffffcf000000ee80 0041 00000000 0x0 0x0
0xffffcf000000ef00 0041 00000000 0x0 0x0
0xffffcf000000ef80 0041 00000000 0x0 0x0
0xffffcf000000f000 0041 00000000 0x0 0x0
0xffffcf000000f080 0041 00000000 0x0 0x0
0xffffcf000000f100 0041 00000000 0x0 0x0
0xffffcf000000f180 0041 00000000 0x0 0x0
0xffffcf000000f200 0041 00000000 0x0 0x0
0xffffcf000000f280 0045 00000000 0x0 0x0
0xffffcf000000f300 0041 00000000 0x0 0x0
0xffffcf000000f380 0041 00000000 0x0 0x0
0xffffcf000000f400 0045 00000000 0x0 0x0
0xffffcf000000f480 0045 00000000 0x0 0x0
0xffffcf000000f500 0041 00000000 0x0 0x0
0xffffcf000000f580 0041 00000000 0x0 0x0
0xffffcf000000f600 0041 00000000 0x0 0x0
0xffffcf000000f680 0041 00000000 0x0 0x0
0xffffcf000000f700 0041 00000000 0x0 0x0
0xffffcf000000f780 0041 00000000 0x0 0x0
0xffffcf000000f800 0041 00000000 0x0 0x0
0xffffcf000000f880 0041 00000000 0x0 0x0
0xffffcf000000f900 0041 00000000 0x0 0x0
0xffffcf000000f980 0045 00000000 0x0 0x0
0xffffcf000000fa00 0041 00000000 0x0 0x0
0xffffcf000000fa80 0041 00000000 0x0 0x0
0xffffcf000000fb00 0041 00000000 0x0 0x0
0xffffcf000000fb80 0041 00000000 0x0 0x0
0xffffcf000000fc00 0045 00000000 0x0 0x0
0xffffcf000000fc80 0045 00000000 0x0 0x0
0xffffcf000000fd00 0041 00000000 0x0 0x0
0xffffcf000000fd80 0041 00000000 0x0 0x0
0xffffcf000000fe00 0041 00000000 0x0 0x0
0xffffcf000000fe80 0041 00000000 0x0 0x0
0xffffcf000000ff00 0041 00000000 0x0 0x0
0xffffcf000000ff80 0041 00000000 0x0 0x0
0xffffcf0000010000 0041 00000000 0x0 0x0
0xffffcf0000010080 0041 00000000 0x0 0x0
0xffffcf0000010100 0045 00000000 0x0 0x0
0xffffcf0000010180 0045 00000000 0x0 0x0
0xffffcf0000010200 0045 00000000 0x0 0x0
0xffffcf0000010280 0041 00000000 0x0 0x0
0xffffcf0000010300 0041 00000000 0x0 0x0
0xffffcf0000010380 0041 00000000 0x0 0x0
0xffffcf0000010400 0041 00000000 0x0 0x0
0xffffcf0000010480 0041 00000000 0x0 0x0
0xffffcf0000010500 0041 00000000 0x0 0x0
0xffffcf0000010580 0041 00000000 0x0 0x0
0xffffcf0000010600 0041 00000000 0x0 0x0
0xffffcf0000010680 0041 00000000 0x0 0x0
0xffffcf0000010700 0045 00000000 0x0 0x0
0xffffcf0000010780 0041 00000000 0x0 0x0
0xffffcf0000010800 0041 00000000 0x0 0x0
0xffffcf0000010880 0045 00000000 0x0 0x0
0xffffcf0000010900 0045 00000000 0x0 0x0
0xffffcf0000010980 0045 00000000 0x0 0x0
0xffffcf0000010a00 0045 00000000 0x0 0x0
0xffffcf0000010a80 0045 00000000 0x0 0x0
0xffffcf0000010b00 0041 00000000 0x0 0x0
0xffffcf0000010b80 0041 00000000 0x0 0x0
0xffffcf0000010c00 0041 00000000 0x0 0x0
0xffffcf0000010c80 0041 00000000 0x0 0x0
0xffffcf0000010d00 0041 00000000 0x0 0x0
0xffffcf0000010d80 0041 00000000 0x0 0x0
0xffffcf0000010e00 0041 00000000 0x0 0x0
0xffffcf0000010e80 0041 00000000 0x0 0x0
0xffffcf0000010f00 0041 00000000 0x0 0x0
0xffffcf0000010f80 0041 00000000 0x0 0x0
0xffffcf0000011000 0041 00000000 0x0 0x0
0xffffcf0000011080 0045 00000000 0x0 0x0
0xffffcf0000011100 0041 00000000 0x0 0x0
0xffffcf0000011180 0041 00000000 0x0 0x0
0xffffcf0000011200 0045 00000000 0x0 0x0
0xffffcf0000011280 0041 00000000 0x0 0x0
0xffffcf0000011300 0041 00000000 0x0 0x0
0xffffcf0000011380 0041 00000000 0x0 0x0
0xffffcf0000011400 0041 00000000 0x0 0x0
0xffffcf0000011480 0041 00000000 0x0 0x0
0xffffcf0000011500 0041 00000000 0x0 0x0
0xffffcf0000011580 0041 00000000 0x0 0x0
0xffffcf0000011600 0041 00000000 0x0 0x0
0xffffcf0000011680 0041 00000000 0x0 0x0
0xffffcf0000011700 0041 00000000 0x0 0x0
0xffffcf0000011780 0045 00000000 0x0 0x0
0xffffcf0000011800 0041 00000000 0x0 0x0
0xffffcf0000011880 0041 00000000 0x0 0x0
0xffffcf0000011900 0045 00000000 0x0 0x0
0xffffcf0000011980 0041 00000000 0x0 0x0
0xffffcf0000011a00 0041 00000000 0x0 0x0
0xffffcf0000011a80 0041 00000000 0x0 0x0
0xffffcf0000011b00 0045 00000000 0x0 0x0
0xffffcf0000011b80 0041 00000000 0x0 0x0
0xffffcf0000011c00 0041 00000000 0x0 0x0
0xffffcf0000011c80 0041 00000000 0x0 0x0
0xffffcf0000011d00 0041 00000000 0x0 0x0
0xffffcf0000011d80 0041 00000000 0x0 0x0
0xffffcf0000011e00 0045 00000000 0x0 0x0
0xffffcf0000011e80 0045 00000000 0x0 0x0
0xffffcf0000011f00 0041 00000000 0x0 0x0
0xffffcf0000011f80 0041 00000000 0x0 0x0
0xffffcf0000012000 0041 00000000 0x0 0x0
0xffffcf0000012080 0041 00000000 0x0 0x0
0xffffcf0000012100 0041 00000000 0x0 0x0
0xffffcf0000012180 0045 00000000 0x0 0x0
0xffffcf0000012200 0041 00000000 0x0 0x0
0xffffcf0000012280 0041 00000000 0x0 0x0
0xffffcf0000012300 0041 00000000 0x0 0x0
0xffffcf0000012380 0041 00000000 0x0 0x0
0xffffcf0000012400 0041 00000000 0x0 0x0
0xffffcf0000012480 0041 00000000 0x0 0x0
0xffffcf0000012500 0045 00000000 0x0 0x0
0xffffcf0000012580 0041 00000000 0x0 0x0
0xffffcf0000012600 0041 00000000 0x0 0x0
0xffffcf0000012680 0041 00000000 0x0 0x0
0xffffcf0000012700 0041 00000000 0x0 0x0
0xffffcf0000012780 0041 00000000 0x0 0x0
0xffffcf0000012800 0041 00000000 0x0 0x0
0xffffcf0000012880 0041 00000000 0x0 0x0
0xffffcf0000012900 0041 00000000 0x0 0x0
0xffffcf0000012980 0041 00000000 0x0 0x0
0xffffcf0000012a00 0041 00000000 0x0 0x0
0xffffcf0000012a80 0041 00000000 0x0 0x0
0xffffcf0000012b00 0041 00000000 0x0 0x0
0xffffcf0000012b80 0041 00000000 0x0 0x0
0xffffcf0000012c00 0041 00000000 0x0 0x0
0xffffcf0000012c80 0045 00000000 0x0 0x0
0xffffcf0000012d00 0001 00000000 0x0 0x0
0xffffcf0000012d80 0001 00000000 0x0 0x0
0xffffcf0000012e00 0001 00000000 0x0 0x0
0xffffcf0000012e80 0001 00000000 0x0 0x0
0xffffcf0000012f00 0001 00000000 0x0 0x0
0xffffcf0000012f80 0001 00000000 0x0 0x0
0xffffcf0000013000 0001 00000000 0x0 0x0
0xffffcf0000013080 0001 00000000 0x0 0x0
0xffffcf0000013100 0001 00000000 0x0 0x0
0xffffcf0000013180 0001 00000000 0x0 0x0
0xffffcf0000013200 0001 00000000 0x0 0x0
0xffffcf0000013280 0001 00000000 0x0 0x0
0xffffcf0000013300 0001 00000000 0x0 0x0
0xffffcf0000013380 0001 00000000 0x0 0x0
0xffffcf0000013400 0001 00000000 0x0 0x0
0xffffcf0000013480 0001 00000000 0x0 0x0
0xffffcf0000013500 0001 00000000 0x0 0x0
0xffffcf0000013580 0001 00000000 0x0 0x0
0xffffcf0000013600 0001 00000000 0x0 0x0
0xffffcf0000013680 0001 00000000 0x0 0x0
0xffffcf0000013700 0001 00000000 0x0 0x0
0xffffcf0000013780 0001 00000000 0x0 0x0
0xffffcf0000013800 0001 00000000 0x0 0x0
0xffffcf0000013880 0001 00000000 0x0 0x0
0xffffcf0000013900 0001 00000000 0x0 0x0
0xffffcf0000013980 0001 00000000 0x0 0x0
0xffffcf0000013a00 0001 00000000 0x0 0x0
0xffffcf0000013a80 0001 00000000 0x0 0x0
0xffffcf0000013b00 0001 00000000 0x0 0x0
0xffffcf0000013b80 0001 00000000 0x0 0x0
0xffffcf0000013c00 0001 00000000 0x0 0x0
0xffffcf0000013c80 0001 00000000 0x0 0x0
0xffffcf0000013d00 0001 00000000 0x0 0x0
0xffffcf0000013d80 0001 00000000 0x0 0x0
0xffffcf0000013e00 0001 00000000 0x0 0x0
0xffffcf0000013e80 0001 00000000 0x0 0x0
0xffffcf0000013f00 0001 00000000 0x0 0x0
0xffffcf0000013f80 0001 00000000 0x0 0x0
0xffffcf0000014000 0001 00000000 0x0 0x0
0xffffcf0000014080 0001 00000000 0x0 0x0
0xffffcf0000014100 0001 00000000 0x0 0x0
0xffffcf0000014180 0001 00000000 0x0 0x0
0xffffcf0000014200 0001 00000000 0x0 0x0
0xffffcf0000014280 0001 00000000 0x0 0x0
0xffffcf0000014300 0001 00000000 0x0 0x0
0xffffcf0000014380 0001 00000000 0x0 0x0
0xffffcf0000014400 0001 00000000 0x0 0x0
0xffffcf0000014480 0001 00000000 0x0 0x0
0xffffcf0000014500 0001 00000000 0x0 0x0
0xffffcf0000014580 0001 00000000 0x0 0x0
0xffffcf0000014600 0001 00000000 0x0 0x0
0xffffcf0000014680 0001 00000000 0x0 0x0
0xffffcf0000014700 0001 00000000 0x0 0x0
0xffffcf0000014780 0001 00000000 0x0 0x0
0xffffcf0000014800 0041 00000000 0x0 0x0
0xffffcf0000014880 0041 00000000 0x0 0x0
0xffffcf0000014900 0041 00000000 0x0 0x0
0xffffcf0000014980 0041 00000000 0x0 0x0
0xffffcf0000014a00 0041 00000000 0x0 0x0
0xffffcf0000014a80 0041 00000000 0x0 0x0
0xffffcf0000014b00 0041 00000000 0x0 0x0
0xffffcf0000014b80 0041 00000000 0x0 0x0
0xffffcf0000014c00 0041 00000000 0x0 0x0
0xffffcf0000014c80 0041 00000000 0x0 0x0
0xffffcf0000014d00 0041 00000000 0x0 0x0
0xffffcf0000014d80 0041 00000000 0x0 0x0
0xffffcf0000014e00 0041 00000000 0x0 0x0
0xffffcf0000014e80 0041 00000000 0x0 0x0
0xffffcf0000014f00 0041 00000000 0x0 0x0
0xffffcf0000014f80 0041 00000000 0x0 0x0
0xffffcf0000015000 0041 00000000 0x0 0x0
0xffffcf0000015080 0041 00000000 0x0 0x0
0xffffcf0000015100 0041 00000000 0x0 0x0
0xffffcf0000015180 0041 00000000 0x0 0x0
0xffffcf0000015200 0041 00000000 0x0 0x0
0xffffcf0000015280 0041 00000000 0x0 0x0
0xffffcf0000015300 0041 00000000 0x0 0x0
0xffffcf0000015380 0041 00000000 0x0 0x0
0xffffcf0000015400 0041 00000000 0x0 0x0
0xffffcf0000015480 0041 00000000 0x0 0x0
0xffffcf0000015500 0041 00000000 0x0 0x0
0xffffcf0000015580 0041 00000000 0x0 0x0
0xffffcf0000015600 0041 00000000 0x0 0x0
0xffffcf0000015680 0041 00000000 0x0 0x0
0xffffcf0000015700 0041 00000000 0x0 0x0
0xffffcf0000015780 0041 00000000 0x0 0x0
0xffffcf0000015800 0041 00000000 0x0 0x0
0xffffcf0000015880 0041 00000000 0x0 0x0
0xffffcf0000015900 0041 00000000 0x0 0x0
0xffffcf0000015980 0041 00000000 0x0 0x0
0xffffcf0000015a00 0041 00000000 0x0 0x0
0xffffcf0000015a80 0041 00000000 0x0 0x0
0xffffcf0000015b00 0041 00000000 0x0 0x0
0xffffcf0000015b80 0041 00000000 0x0 0x0
0xffffcf0000015c00 0041 00000000 0x0 0x0
0xffffcf0000015c80 0041 00000000 0x0 0x0
0xffffcf0000015d00 0001 00000000 0x0 0x0
0xffffcf0000015d80 0001 00000000 0x0 0x0
0xffffcf0000015e00 0001 00000000 0x0 0x0
0xffffcf0000015e80 0001 00000000 0x0 0x0
0xffffcf0000015f00 0001 00000000 0x0 0x0
0xffffcf0000015f80 0001 00000000 0x0 0x0
0xffffcf0000016000 0001 00000000 0x0 0x0
0xffffcf0000016080 0001 00000000 0x0 0x0
0xffffcf0000016100 0001 00000000 0x0 0x0
0xffffcf0000016180 0001 00000000 0x0 0x0
0xffffcf0000016200 0001 00000000 0x0 0x0
0xffffcf0000016280 0001 00000000 0x0 0x0
0xffffcf0000016300 0001 00000000 0x0 0x0
0xffffcf0000016380 0001 00000000 0x0 0x0
0xffffcf0000016400 0001 00000000 0x0 0x0
0xffffcf0000016480 0001 00000000 0x0 0x0
0xffffcf0000016500 0001 00000000 0x0 0x0
0xffffcf0000016580 0001 00000000 0x0 0x0
0xffffcf0000016600 0001 00000000 0x0 0x0
0xffffcf0000016680 0001 00000000 0x0 0x0
0xffffcf0000016700 0001 00000000 0x0 0x0
0xffffcf0000016780 0001 00000000 0x0 0x0
0xffffcf0000016800 0001 00000000 0x0 0x0
0xffffcf0000016880 0001 00000000 0x0 0x0
0xffffcf0000016900 0001 00000000 0x0 0x0
0xffffcf0000016980 0001 00000000 0x0 0x0
0xffffcf0000016a00 0001 00000000 0x0 0x0
0xffffcf0000016a80 0001 00000000 0x0 0x0
0xffffcf0000016b00 0001 00000000 0x0 0x0
0xffffcf0000016b80 0001 00000000 0x0 0x0
0xffffcf0000016c00 0001 00000000 0x0 0x0
0xffffcf0000016c80 0001 00000000 0x0 0x0
0xffffcf0000016d00 0001 00000000 0x0 0x0
0xffffcf0000016d80 0001 00000000 0x0 0x0
0xffffcf0000016e00 0001 00000000 0x0 0x0
0xffffcf0000016e80 0001 00000000 0x0 0x0
0xffffcf0000016f00 0001 00000000 0x0 0x0
0xffffcf0000016f80 0001 00000000 0x0 0x0
0xffffcf0000017000 0001 00000000 0x0 0x0
0xffffcf0000017080 0001 00000000 0x0 0x0
0xffffcf0000017100 0001 00000000 0x0 0x0
0xffffcf0000017180 0001 00000000 0x0 0x0
0xffffcf0000017200 0001 00000000 0x0 0x0
0xffffcf0000017280 0001 00000000 0x0 0x0
0xffffcf0000017300 0001 00000000 0x0 0x0
0xffffcf0000017380 0001 00000000 0x0 0x0
0xffffcf0000017400 0001 00000000 0x0 0x0
0xffffcf0000017480 0001 00000000 0x0 0x0
0xffffcf0000017500 0001 00000000 0x0 0x0
0xffffcf0000017580 0001 00000000 0x0 0x0
0xffffcf0000017600 0001 00000000 0x0 0x0
0xffffcf0000017680 0001 00000000 0x0 0x0
0xffffcf0000017700 0001 00000000 0x0 0x0
0xffffcf0000017780 0001 00000000 0x0 0x0
0xffffcf0000017800 0041 00000000 0x0 0x0
0xffffcf0000017880 0041 00000000 0x0 0x0
0xffffcf0000017900 0041 00000000 0x0 0x0
0xffffcf0000017980 0041 00000000 0x0 0x0
0xffffcf0000017a00 0041 00000000 0x0 0x0
0xffffcf0000017a80 0041 00000000 0x0 0x0
0xffffcf0000017b00 0041 00000000 0x0 0x0
0xffffcf0000017b80 0041 00000000 0x0 0x0
0xffffcf0000017c00 0041 00000000 0x0 0x0
0xffffcf0000017c80 0041 00000000 0x0 0x0
0xffffcf0000017d00 0041 00000000 0x0 0x0
0xffffcf0000017d80 0041 00000000 0x0 0x0
0xffffcf0000017e00 0041 00000000 0x0 0x0
0xffffcf0000017e80 0041 00000000 0x0 0x0
0xffffcf0000017f00 0041 00000000 0x0 0x0
0xffffcf0000017f80 0041 00000000 0x0 0x0
0xffffcf0000018000 0041 00000000 0x0 0x0
0xffffcf0000018080 0041 00000000 0x0 0x0
0xffffcf0000018100 0041 00000000 0x0 0x0
0xffffcf0000018180 0041 00000000 0x0 0x0
0xffffcf0000018200 0041 00000000 0x0 0x0
0xffffcf0000018280 0041 00000000 0x0 0x0
0xffffcf0000018300 0041 00000000 0x0 0x0
0xffffcf0000018380 0041 00000000 0x0 0x0
0xffffcf0000018400 0041 00000000 0x0 0x0
0xffffcf0000018480 0041 00000000 0x0 0x0
0xffffcf0000018500 0041 00000000 0x0 0x0
0xffffcf0000018580 0041 00000000 0x0 0x0
0xffffcf0000018600 0041 00000000 0x0 0x0
0xffffcf0000018680 0041 00000000 0x0 0x0
0xffffcf0000018700 0041 00000000 0x0 0x0
0xffffcf0000018780 0041 00000000 0x0 0x0
0xffffcf0000018800 0041 00000000 0x0 0x0
0xffffcf0000018880 0041 00000000 0x0 0x0
0xffffcf0000018900 0041 00000000 0x0 0x0
0xffffcf0000018980 0041 00000000 0x0 0x0
0xffffcf0000018a00 0041 00000000 0x0 0x0
0xffffcf0000018a80 0041 00000000 0x0 0x0
0xffffcf0000018b00 0041 00000000 0x0 0x0
0xffffcf0000018b80 0041 00000000 0x0 0x0
0xffffcf0000018c00 0041 00000000 0x0 0x0
0xffffcf0000018c80 0041 00000000 0x0 0x0
0xffffcf0000018d00 0041 00000000 0x0 0x0
0xffffcf0000018d80 0001 00000000 0x0 0x0
0xffffcf0000018e00 0001 00000000 0x0 0x0
0xffffcf0000018e80 0001 00000000 0x0 0x0
0xffffcf0000018f00 0001 00000000 0x0 0x0
0xffffcf0000018f80 0001 00000000 0x0 0x0
0xffffcf0000019000 0001 00000000 0x0 0x0
0xffffcf0000019080 0001 00000000 0x0 0x0
0xffffcf0000019100 0001 00000000 0x0 0x0
0xffffcf0000019180 0001 00000000 0x0 0x0
0xffffcf0000019200 0001 00000000 0x0 0x0
0xffffcf0000019280 0001 00000000 0x0 0x0
0xffffcf0000019300 0001 00000000 0x0 0x0
0xffffcf0000019380 0001 00000000 0x0 0x0
0xffffcf0000019400 0001 00000000 0x0 0x0
0xffffcf0000019480 0001 00000000 0x0 0x0
0xffffcf0000019500 0001 00000000 0x0 0x0
0xffffcf0000019580 0001 00000000 0x0 0x0
0xffffcf0000019600 0001 00000000 0x0 0x0
0xffffcf0000019680 0001 00000000 0x0 0x0
0xffffcf0000019700 0001 00000000 0x0 0x0
0xffffcf0000019780 0001 00000000 0x0 0x0
0xffffcf0000019800 0001 00000000 0x0 0x0
0xffffcf0000019880 0001 00000000 0x0 0x0
0xffffcf0000019900 0001 00000000 0x0 0x0
0xffffcf0000019980 0001 00000000 0x0 0x0
0xffffcf0000019a00 0001 00000000 0x0 0x0
0xffffcf0000019a80 0001 00000000 0x0 0x0
0xffffcf0000019b00 0001 00000000 0x0 0x0
0xffffcf0000019b80 0001 00000000 0x0 0x0
0xffffcf0000019c00 0001 00000000 0x0 0x0
0xffffcf0000019c80 0001 00000000 0x0 0x0
0xffffcf0000019d00 0001 00000000 0x0 0x0
0xffffcf0000019d80 0001 00000000 0x0 0x0
0xffffcf0000019e00 0001 00000000 0x0 0x0
0xffffcf0000019e80 0001 00000000 0x0 0x0
0xffffcf0000019f00 0001 00000000 0x0 0x0
0xffffcf0000019f80 0001 00000000 0x0 0x0
0xffffcf000001a000 0001 00000000 0x0 0x0
0xffffcf000001a080 0001 00000000 0x0 0x0
0xffffcf000001a100 0001 00000000 0x0 0x0
0xffffcf000001a180 0001 00000000 0x0 0x0
0xffffcf000001a200 0001 00000000 0x0 0x0
0xffffcf000001a280 0001 00000000 0x0 0x0
0xffffcf000001a300 0001 00000000 0x0 0x0
0xffffcf000001a380 0001 00000000 0x0 0x0
0xffffcf000001a400 0001 00000000 0x0 0x0
0xffffcf000001a480 0001 00000000 0x0 0x0
0xffffcf000001a500 0001 00000000 0x0 0x0
0xffffcf000001a580 0001 00000000 0x0 0x0
0xffffcf000001a600 0001 00000000 0x0 0x0
0xffffcf000001a680 0001 00000000 0x0 0x0
0xffffcf000001a700 0001 00000000

Tested on:

commit: 8d0cc366 tests/make: remove nonexistent file from file..

git tree: https://github.com/NetBSD/src trunk

console output: https://syzkaller.appspot.com/x/log.txt?x=11bdb283080000

kernel config: https://syzkaller.appspot.com/x/.config?x=1420f906d33d9f1f
dashboard link: https://syzkaller.appspot.com/bug?extid=1bee937496ae35ea301c
compiler: g++ (Debian 10.2.1-6) 10.2.1 20210110

patch: https://syzkaller.appspot.com/x/patch.diff?x=10caf7fb080000

syzbot

unread,

Sep 3, 2022, 7:04:15 AM9/3/22

to rias...@netbsd.org, syzkaller-...@googlegroups.com

Hello,

syzbot has tested the proposed patch but the reproducer is still triggering an issue:

assert failed: !ktd->ktd_callout_pending

[ 294.0482548] panic: kernel diagnostic assertion "!ktd->ktd_callout_pending" failed: file "/syzkaller/jobs/netbsd/kernel/sys/kern/kern_ktrace.c", line 405
[ 294.1381391] cpu1: Begin traceback...
[ 294.2681479] vpanic() at netbsd:vpanic+0x2f2 sys/kern/subr_prf.c:293
[ 294.6781352] kern_assert() at netbsd:kern_assert+0x65 sys/arch/amd64/amd64/db_disasm.c:1074
[ 295.0081351] ktraddentry() at netbsd:ktraddentry+0xba6 sys/kern/kern_ktrace.c:405
[ 295.3081291] ktr_sysret() at netbsd:ktr_sysret+0x235 sys/kern/kern_ktrace.c:600
[ 295.5981324] trace_exit() at netbsd:trace_exit+0x24d ktrsysret sys/sys/ktrace.h:420 [inline]
[ 295.5981324] trace_exit() at netbsd:trace_exit+0x24d sys/kern/kern_syscall.c:299
[ 295.8981309] syscall() at netbsd:syscall+0x32f sys/arch/x86/x86/syscall.c:140
[ 295.9781291] --- syscall (number 427) ---
[ 296.0781301] netbsd:syscall+0x32f:
[ 296.0981246] cpu1: End traceback...
[ 296.1181394] fatal breakpoint trap in supervisor mode
[ 296.1481276] trap type 1 code 0 rip 0xffffffff80221ab5 cs 0x8 rflags 0x246 cr2 0x7d3ae21cfff8 ilevel 0 rsp 0xffffda02482bbd90
[ 296.2181400] curlwp 0xfffffcea479e20c0 pid 1185.1185 lowest kstack 0xffffda02482b72c0
Stopped in pid 1185.1185 (syz-executor.4) at netbsd:breakpoint+0x5: leave

?
breakpoint() at netbsd:breakpoint+0x5
db_panic() at netbsd:db_panic+0xec sys/ddb/db_panic.c:69
vpanic() at netbsd:vpanic+0x2f2 sys/kern/subr_prf.c:293

kern_assert() at netbsd:kern_assert+0x65 sys/arch/amd64/amd64/db_disasm.c:1074

ktraddentry() at netbsd:ktraddentry+0xba6 sys/kern/kern_ktrace.c:405
ktr_sysret() at netbsd:ktr_sysret+0x235 sys/kern/kern_ktrace.c:600
trace_exit() at netbsd:trace_exit+0x24d ktrsysret sys/sys/ktrace.h:420 [inline]
trace_exit() at netbsd:trace_exit+0x24d sys/kern/kern_syscall.c:299
syscall() at netbsd:syscall+0x32f sys/arch/x86/x86/syscall.c:140
--- syscall (number 427) ---
netbsd:syscall+0x32f:
Panic string: kernel diagnostic assertion "!ktd->ktd_callout_pending" failed: file "/syzkaller/jobs/netbsd/kernel/sys/kern/kern_ktrace.c", line 405

PID LID S CPU FLAGS STRUCT LWP * NAME WAIT

1248 1248 2 0 0 fffffcea47635040 syz-executor.2
1364 1364 3 0 0 fffffcea4b1da240 syz-execprog tstile
1312 1312 3 0 0 fffffcea4ade5640 syz-execprog tstile
1185 1384 2 1 0 fffffcea4ade5a80 syz-executor.4
1185 1207 2 0 100 fffffcea4ade5200 syz-executor.4
1185 >1185 7 1 10000000 fffffcea479e20c0 syz-executor.4
1368 1368 2 0 0 fffffcea49a94a40 syz-executor.3
1363 1363 2 0 0 fffffcea46c082c0 syz-executor.2
1197 1197 3 0 180 fffffcea49a94600 syz-executor.1 pipe_rd
1210 1210 3 1 180 fffffcea47635480 syz-executor.4 nanoslp
1349 324 3 1 180 fffffcea479e2500 syz-execprog pipe_rd
1349 335 3 1 180 fffffcea479e2940 syz-execprog wait
1349 1213 2 1 0 fffffcea4667c680 syz-execprog
1349 331 3 0 180 fffffcea46e46340 syz-execprog wait
1349 330 3 1 180 fffffcea483ae580 syz-execprog wait
1349 895 3 0 180 fffffcea49a941c0 syz-execprog parked
1349 1356 3 0 180 fffffcea482e6540 syz-execprog parked
1349 1324 3 1 180 fffffcea496c8a00 syz-execprog parked
1349 1211 3 1 1c0 fffffcea469e5280 syz-execprog parked
1349 1076 3 0 180 fffffcea455d7a40 syz-execprog parked
1349 1350 2 1 40 fffffcea482e6100 syz-execprog
1349 1349 3 0 1c0 fffffcea4667cac0 syz-execprog wait
1351 1351 3 0 180 fffffcea47aa1080 sshd select
1230 1230 3 1 180 fffffcea482e6980 getty nanoslp
1084 1084 2 0 140 fffffcea496c85c0 getty
1229 1229 2 0 140 fffffcea496c8180 getty
1077 1077 3 0 1c0 fffffcea46dcf740 getty ttyraw
803 803 3 1 180 fffffcea483ae9c0 sshd select
1131 1131 3 0 180 fffffcea483ae140 powerd kqueue
694 694 2 0 140 fffffcea46e46780 syslogd
748 748 3 1 180 fffffcea469e56c0 dhcpcd poll
603 603 3 0 180 fffffcea46dcfb80 dhcpcd poll
746 746 3 1 180 fffffcea47aa14c0 dhcpcd poll
599 599 3 0 180 fffffcea46e46bc0 dhcpcd poll
486 486 3 1 180 fffffcea46dcf300 dhcpcd poll
487 487 3 1 180 fffffcea469e5b00 dhcpcd poll
292 292 3 1 180 fffffcea46c08b40 dhcpcd poll
1 1 3 0 180 fffffcea3e453540 init wait
0 1071 3 1 200 fffffcea46c08700 ktrace ktrwait
0 988 3 0 200 fffffcea4667f200 physiod physiod
0 195 3 0 200 fffffcea4667c240 pooldrain pooldrain
0 194 2 0 240 fffffcea4667fa80 ioflush
0 193 3 1 200 fffffcea4667f640 pgdaemon pgdaemon
0 169 3 1 200 fffffcea455d7600 usb7 usbevt
0 168 3 0 200 fffffcea455d71c0 usb6 usbevt
0 167 3 1 200 fffffcea42552a00 usb5 usbevt
0 166 3 1 200 fffffcea425525c0 usb4 usbevt
0 165 3 1 200 fffffcea42552180 usb3 usbevt
0 31 3 1 200 fffffcea3f4ed9c0 usb2 usbevt
0 63 3 1 200 fffffcea3f4ed580 usb1 usbevt
0 126 3 0 200 fffffcea3f4ed140 usb0 usbevt
0 125 3 1 200 fffffcea3e2e0740 usbtask-dr usbtsk
0 124 3 1 200 fffffcea3c8a9b00 usbtask-hc usbtsk
0 123 3 0 200 fffffcea3e453980 npfgc0 npfgcw
0 122 3 1 200 fffffcea3e453100 rt_free rt_free
0 121 3 1 200 fffffcea3e43e940 unpgc unpgc
0 120 3 0 200 fffffcea3e43e500 key_timehandler key_timehandler
0 119 3 1 200 fffffcea3e2e0b80 icmp6_wqinput/1 icmp6_wqinput
0 118 3 0 200 fffffcea3e3d7340 icmp6_wqinput/0 icmp6_wqinput
0 117 3 0 200 fffffcea3e43e0c0 nd6_timer nd6_timer
0 116 3 1 200 fffffcea3e42a900 carp6_wqinput/1 carp6_wqinput
0 115 3 0 200 fffffcea3e42a4c0 carp6_wqinput/0 carp6_wqinput
0 114 3 1 200 fffffcea3e42a080 carp_wqinput/1 carp_wqinput
0 113 3 0 200 fffffcea3e4148c0 carp_wqinput/0 carp_wqinput
0 112 3 1 200 fffffcea3e414480 icmp_wqinput/1 icmp_wqinput
0 111 3 0 200 fffffcea3e414040 icmp_wqinput/0 icmp_wqinput
0 110 3 0 200 fffffcea3e3d7bc0 rt_timer rt_timer
0 109 3 0 200 fffffcea3e3d7780 vmem_rehash vmem_rehash
0 100 3 0 200 fffffcea3e2e0300 entbutler entropy
0 99 3 0 200 fffffcea3dd48b40 viomb balloon
0 98 3 1 200 fffffcea3dd48700 vioif0_txrx/1 vioif0_txrx
0 97 3 0 200 fffffcea3dd482c0 vioif0_txrx/0 vioif0_txrx
0 30 3 0 200 fffffcea3c8a96c0 scsibus0 sccomp
0 29 3 1 200 fffffcea3c8a9280 pms0 pmsreset
0 28 3 1 200 fffffcea3c7acac0 xcall/1 xcall
0 27 1 1 200 fffffcea3c7ac680 softser/1
0 26 3 1 200 fffffcea3c7ac240 softclk/1 tstile
0 25 1 1 200 fffffcea3c787a80 softbio/1
0 24 1 1 200 fffffcea3c787640 softnet/1
0 23 1 1 201 fffffcea3c787200 idle/1
0 22 3 1 200 fffffceb6ab2da40 lnxsyswq lnxsyswq
0 21 3 1 200 fffffceb6ab2d600 lnxubdwq lnxubdwq
0 20 3 1 200 fffffceb6ab2d1c0 lnxpwrwq lnxpwrwq
0 19 3 1 200 fffffceb6ab34a00 lnxlngwq lnxlngwq
0 18 3 0 200 fffffceb6ab345c0 lnxhipwq lnxhipwq
0 17 3 0 200 fffffceb6ab34180 lnxrcugc lnxrcugc
0 16 3 0 200 fffffceb6ab539c0 sysmon smtaskq
0 15 3 1 200 fffffceb6ab53580 pmfsuspend pmfsuspend
0 14 3 0 200 fffffceb6ab53140 pmfevent pmfevent
0 13 3 1 200 fffffceb6ab5e980 sopendfree sopendfr
0 12 3 0 200 fffffceb6ab5e540 ifwdog ifwdog
0 11 3 0 200 fffffceb6ab5e100 iflnkst iflnkst
0 10 3 1 200 fffffceb6bb95940 nfssilly nfssilly
0 9 3 0 200 fffffceb6bb95500 vdrain vdrain
0 8 3 1 200 fffffceb6bb950c0 modunload mod_unld
0 7 3 0 200 fffffceb6bbba900 xcall/0 xcall
0 6 1 0 200 fffffceb6bbba4c0 softser/0
0 5 1 0 200 fffffceb6bbba080 softclk/0
0 4 1 0 200 fffffceb6bbeb8c0 softbio/0
0 3 1 0 200 fffffceb6bbeb480 softnet/0
0 2 1 0 201 fffffceb6bbeb040 idle/0
0 > 0 7 0 240 ffffffff86740cc0 swapper
[Locks tracked through LWPs]

****** LWP 1312.1312 (syz-execprog) @ 0xfffffcea4ade5640, l_stat=3

*** Locks held:

* Lock 0 (initialized at netbsd:fork1+0x4b8 sys/kern/kern_fork.c:366)
lock address : fffffcea4bc403d0
type : sleep/adaptive
initialized : netbsd:fork1+0x4b8

shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0

relevant lwp : 0xfffffcea4ade5640 last held: 0xfffffcea4ade5640
last locked* : netbsd:execve_loadvm+0x24c
unlocked : 0
owner/count : 0xfffffcea4ade5640 flags : 0x0000000000000004

Turnstile: no active turnstile for this lock.

* Lock 1 (initialized at netbsd:amap_alloc1+0x30a sys/uvm/uvm_amap.c:167)
lock address : fffffcea498c68c0

type : sleep/adaptive
initialized : netbsd:amap_alloc1+0x30a
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0

relevant lwp : 0xfffffcea4ade5640 last held: 0xfffffcea4ade5640
last locked* : netbsd:amap_unref+0x3a
unlocked : netbsd:uvm_fault_upper_enter+0x454

owner/count : 000000000000000000 flags : 000000000000000000
Turnstile: no active turnstile for this lock.

*** Locks wanted: none

****** LWP 1185.1185 (syz-executor.4) @ 0xfffffcea479e20c0, l_stat=7

*** Locks held:

* Lock 0 (initialized at netbsd:ktrinit+0x20 sys/kern/kern_ktrace.c:267)

lock address : netbsd:ktrace_lock
type : sleep/adaptive
initialized : netbsd:ktrinit+0x20

shared holds : 0 exclusive: 1

shares wanted: 0 exclusive: 1

relevant cpu : 1 last held: 1

relevant lwp : 0xfffffcea479e20c0 last held: 0xfffffcea479e20c0
last locked* : netbsd:ktraddentry+0x58
unlocked : netbsd:ktraddentry+0x790
owner field : 0xfffffcea479e20c0 wait/spin: 1/0
Turnstile:
=> 0 waiting readers:
=> 1 waiting writers: 0xfffffcea3c7ac240

*** Locks wanted: none

****** LWP 1368.1368 (syz-executor.3) @ 0xfffffcea49a94a40, l_stat=2

*** Locks held:

* Lock 0 (initialized at netbsd:amap_alloc1+0x30a sys/uvm/uvm_amap.c:167)

lock address : fffffcea47268040

type : sleep/adaptive
initialized : netbsd:amap_alloc1+0x30a
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0

relevant lwp : 0xfffffcea49a94a40 last held: 0xfffffcea49a94a40
last locked* : netbsd:uvm_fault_internal+0x75d
unlocked : 0
owner/count : 0xfffffcea49a94a40 flags : 0x0000000000000004

Turnstile: no active turnstile for this lock.

* Lock 1 (initialized at netbsd:pmap_ctor+0x6d sys/arch/x86/x86/pmap.c:2857)

lock address : fffffcea46b5a580

type : sleep/adaptive
initialized : netbsd:pmap_ctor+0x6d
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0

relevant lwp : 0xfffffcea49a94a40 last held: 0xfffffcea49a94a40
last locked* : netbsd:pmap_enter_ma+0x3a0
unlocked : netbsd:pmap_enter_ma+0xa7d
owner field : 0xfffffcea49a94a40 wait/spin: 0/0

Turnstile: no active turnstile for this lock.

* Lock 2 (initialized at netbsd:pmap_ctor+0x9b sys/arch/x86/x86/pmap.c:2858)
lock address : fffffcea46b5a588
type : sleep/adaptive
initialized : netbsd:pmap_ctor+0x9b

shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0

relevant lwp : 0xfffffcea49a94a40 last held: 0xfffffcea49a94a40
last locked* : netbsd:pmap_get_ptp+0x25e
unlocked : netbsd:pmap_get_ptp+0x6dc
owner/count : 0xfffffcea49a94a40 flags : 0x0000000000000004

Turnstile: no active turnstile for this lock.

*** Locks wanted: none

****** LWP 1363.1363 (syz-executor.2) @ 0xfffffcea46c082c0, l_stat=2

*** Locks held:

* Lock 0 (initialized at netbsd:pmap_ctor+0x6d sys/arch/x86/x86/pmap.c:2857)
lock address : fffffcea476fd180

type : sleep/adaptive
initialized : netbsd:pmap_ctor+0x6d
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0

relevant lwp : 0xfffffcea46c082c0 last held: 0xfffffcea46c082c0
last locked* : netbsd:pmap_enter_ma+0x3a0
unlocked : netbsd:pmap_extract+0x2c8

owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

*** Locks wanted: none

****** LWP 1349.1350 (syz-execprog) @ 0xfffffcea482e6100, l_stat=2

*** Locks held:

* Lock 0 (initialized at netbsd:amap_alloc1+0x30a sys/uvm/uvm_amap.c:167)

lock address : fffffcea459e4ec0

type : sleep/adaptive
initialized : netbsd:amap_alloc1+0x30a
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0

relevant cpu : 1 last held: 1

relevant lwp : 0xfffffcea482e6100 last held: 0xfffffcea482e6100
last locked* : netbsd:uvm_fault_internal+0x75d
unlocked : netbsd:uvm_fault_upper_enter+0x454
owner/count : 0xfffffcea482e6100 flags : 0x0000000000000007
Turnstile:
=> 0 waiting readers:
=> 2 waiting writers: 0xfffffcea4b1da240 0xfffffcea4ade5640

*** Locks wanted: none

****** LWP 603.603 (dhcpcd) @ 0xfffffcea46dcfb80, l_stat=3

relevant lwp : 0xfffffcea46dcfb80 last held: 000000000000000000

last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 746.746 (dhcpcd) @ 0xfffffcea47aa14c0, l_stat=3

relevant lwp : 0xfffffcea47aa14c0 last held: 000000000000000000

last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 487.487 (dhcpcd) @ 0xfffffcea469e5b00, l_stat=3

relevant lwp : 0xfffffcea469e5b00 last held: 000000000000000000

last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 292.292 (dhcpcd) @ 0xfffffcea46c08b40, l_stat=3

relevant lwp : 0xfffffcea46c08b40 last held: 000000000000000000

last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 0.26 (softclk/1) @ 0xfffffcea3c7ac240, l_stat=3

relevant lwp : 0xfffffcea3c7ac240 last held: 000000000000000000

last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 0.11 (iflnkst) @ 0xfffffceb6ab5e100, l_stat=3

relevant lwp : 0xfffffceb6ab5e100 last held: 000000000000000000

last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 0.0 (swapper) @ 0xffffffff86740cc0, l_stat=7

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:module_hook_init+0x1c sys/kern/kern_module_hook.c:132)
lock address : netbsd:module_hook
type : sleep/adaptive
initialized : netbsd:module_hook_init+0x1c
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffffffff86740cc0 last held: 000000000000000000
last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

[Locks tracked through CPUs]

******* Locks held on cpu1:

* Lock 0 (initialized at netbsd:kprintf_init+0x72 sys/kern/subr_prf.c:157)
lock address : netbsd:kprintf_mtx
type : spin
initialized : netbsd:kprintf_init+0x72
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 1

relevant lwp : 0xfffffcea479e20c0 last held: 0xfffffcea479e20c0

last locked* : netbsd:kprintf_lock+0x50
unlocked : netbsd:kprintf_unlock+0x70
owner field : 0x0000000000000800 wait/spin: 0/1

PAGE FLAG PQ UOBJECT UANON

0xffffda0000007180 0045 00000000 0x0 0x0
0xffffda0000007200 0045 00000000 0x0 0x0
0xffffda0000007280 0045 00000000 0x0 0x0
0xffffda0000007300 0045 00000000 0x0 0x0
0xffffda0000007380 0045 00000000 0x0 0x0
0xffffda0000007400 0045 00000000 0x0 0x0
0xffffda0000007480 0045 00000000 0x0 0x0
0xffffda0000007500 0045 00000000 0x0 0x0
0xffffda0000007580 0045 00000000 0x0 0x0
0xffffda0000007600 0045 00000000 0x0 0x0
0xffffda0000007680 0041 00000000 0x0 0x0
0xffffda0000007700 0041 00000000 0x0 0x0
0xffffda0000007780 0041 00000000 0x0 0x0
0xffffda0000007800 0041 00000000 0x0 0x0
0xffffda0000007880 0045 00000000 0x0 0x0
0xffffda0000007900 0045 00000000 0x0 0x0
0xffffda0000007980 0041 00000000 0x0 0x0
0xffffda0000007a00 0041 00000000 0x0 0x0
0xffffda0000007a80 0041 00000000 0x0 0x0
0xffffda0000007b00 0041 00000000 0x0 0x0
0xffffda0000007b80 0041 00000000 0x0 0x0
0xffffda0000007c00 0041 00000000 0x0 0x0
0xffffda0000007c80 0041 00000000 0x0 0x0
0xffffda0000007d00 0041 00000000 0x0 0x0
0xffffda0000007d80 0041 00000000 0x0 0x0
0xffffda0000007e00 0041 00000000 0x0 0x0
0xffffda0000007e80 0041 00000000 0x0 0x0
0xffffda0000007f00 0041 00000000 0x0 0x0
0xffffda0000007f80 0041 00000000 0x0 0x0
0xffffda0000008000 0041 00000000 0x0 0x0
0xffffda0000008080 0041 00000000 0x0 0x0
0xffffda0000008100 0041 00000000 0x0 0x0
0xffffda0000008180 0041 00000000 0x0 0x0
0xffffda0000008200 0041 00000000 0x0 0x0
0xffffda0000008280 0041 00000000 0x0 0x0
0xffffda0000008300 0041 00000000 0x0 0x0
0xffffda0000008380 0041 00000000 0x0 0x0
0xffffda0000008400 0041 00000000 0x0 0x0
0xffffda0000008480 0041 00000000 0x0 0x0
0xffffda0000008500 0041 00000000 0x0 0x0
0xffffda0000008580 0041 00000000 0x0 0x0
0xffffda0000008600 0045 00000000 0x0 0x0
0xffffda0000008680 0041 00000000 0x0 0x0
0xffffda0000008700 0041 00000000 0x0 0x0
0xffffda0000008780 0041 00000000 0x0 0x0
0xffffda0000008800 0045 00000000 0x0 0x0
0xffffda0000008880 0041 00000000 0x0 0x0
0xffffda0000008900 0041 00000000 0x0 0x0
0xffffda0000008980 0041 00000000 0x0 0x0
0xffffda0000008a00 0041 00000000 0x0 0x0
0xffffda0000008a80 0041 00000000 0x0 0x0
0xffffda0000008b00 0041 00000000 0x0 0x0
0xffffda0000008b80 0041 00000000 0x0 0x0
0xffffda0000008c00 0041 00000000 0x0 0x0
0xffffda0000008c80 0041 00000000 0x0 0x0
0xffffda0000008d00 0041 00000000 0x0 0x0
0xffffda0000008d80 0041 00000000 0x0 0x0
0xffffda0000008e00 0041 00000000 0x0 0x0
0xffffda0000008e80 0041 00000000 0x0 0x0
0xffffda0000008f00 0041 00000000 0x0 0x0
0xffffda0000008f80 0041 00000000 0x0 0x0
0xffffda0000009000 0041 00000000 0x0 0x0
0xffffda0000009080 0041 00000000 0x0 0x0
0xffffda0000009100 0045 00000000 0x0 0x0

0xffffda0000009180 0041 00000000 0x0 0x0
0xffffda0000009200 0041 00000000 0x0 0x0

0xffffda0000009280 0041 00000000 0x0 0x0
0xffffda0000009300 0041 00000000 0x0 0x0
0xffffda0000009380 0041 00000000 0x0 0x0
0xffffda0000009400 0041 00000000 0x0 0x0
0xffffda0000009480 0045 00000000 0x0 0x0
0xffffda0000009500 0041 00000000 0x0 0x0
0xffffda0000009580 0041 00000000 0x0 0x0
0xffffda0000009600 0041 00000000 0x0 0x0
0xffffda0000009680 0041 00000000 0x0 0x0

0xffffda0000009700 0041 00000000 0x0 0x0

0xffffda0000009780 0041 00000000 0x0 0x0
0xffffda0000009800 0041 00000000 0x0 0x0

0xffffda0000009880 0041 00000000 0x0 0x0
0xffffda0000009900 0041 00000000 0x0 0x0
0xffffda0000009980 0041 00000000 0x0 0x0
0xffffda0000009a00 0041 00000000 0x0 0x0

0xffffda0000009a80 0045 00000000 0x0 0x0
0xffffda0000009b00 0041 00000000 0x0 0x0
0xffffda0000009b80 0041 00000000 0x0 0x0
0xffffda0000009c00 0041 00000000 0x0 0x0
0xffffda0000009c80 0041 00000000 0x0 0x0
0xffffda0000009d00 0041 00000000 0x0 0x0
0xffffda0000009d80 0041 00000000 0x0 0x0
0xffffda0000009e00 0041 00000000 0x0 0x0
0xffffda0000009e80 0041 00000000 0x0 0x0
0xffffda0000009f00 0041 00000000 0x0 0x0
0xffffda0000009f80 0041 00000000 0x0 0x0
0xffffda000000a000 0041 00000000 0x0 0x0
0xffffda000000a080 0041 00000000 0x0 0x0
0xffffda000000a100 0041 00000000 0x0 0x0
0xffffda000000a180 0041 00000000 0x0 0x0
0xffffda000000a200 0041 00000000 0x0 0x0
0xffffda000000a280 0041 00000000 0x0 0x0
0xffffda000000a300 0041 00000000 0x0 0x0
0xffffda000000a380 0041 00000000 0x0 0x0
0xffffda000000a400 0041 00000000 0x0 0x0
0xffffda000000a480 0041 00000000 0x0 0x0
0xffffda000000a500 0041 00000000 0x0 0x0

0xffffda000000a580 0041 00000000 0x0 0x0

0xffffda000000a600 0041 00000000 0x0 0x0

0xffffda000000a680 0041 00000000 0x0 0x0

0xffffda000000a700 0041 00000000 0x0 0x0

0xffffda000000a780 0041 00000000 0x0 0x0

0xffffda000000a800 0041 00000000 0x0 0x0

0xffffda000000a880 0041 00000000 0x0 0x0

0xffffda000000a900 0041 00000000 0x0 0x0
0xffffda000000a980 0041 00000000 0x0 0x0
0xffffda000000aa00 0041 00000000 0x0 0x0
0xffffda000000aa80 0041 00000000 0x0 0x0
0xffffda000000ab00 0041 00000000 0x0 0x0
0xffffda000000ab80 0041 00000000 0x0 0x0
0xffffda000000ac00 0041 00000000 0x0 0x0
0xffffda000000ac80 0041 00000000 0x0 0x0
0xffffda000000ad00 0041 00000000 0x0 0x0
0xffffda000000ad80 0041 00000000 0x0 0x0
0xffffda000000ae00 0041 00000000 0x0 0x0
0xffffda000000ae80 0045 00000000 0x0 0x0
0xffffda000000af00 0045 00000000 0x0 0x0
0xffffda000000af80 0045 00000000 0x0 0x0
0xffffda000000b000 0041 00000000 0x0 0x0
0xffffda000000b080 0041 00000000 0x0 0x0
0xffffda000000b100 0041 00000000 0x0 0x0
0xffffda000000b180 0045 00000000 0x0 0x0
0xffffda000000b200 0041 00000000 0x0 0x0
0xffffda000000b280 0045 00000000 0x0 0x0
0xffffda000000b300 0045 00000000 0x0 0x0
0xffffda000000b380 0045 00000000 0x0 0x0
0xffffda000000b400 0041 00000000 0x0 0x0
0xffffda000000b480 0041 00000000 0x0 0x0
0xffffda000000b500 0041 00000000 0x0 0x0
0xffffda000000b580 0045 00000000 0x0 0x0
0xffffda000000b600 0045 00000000 0x0 0x0
0xffffda000000b680 0045 00000000 0x0 0x0
0xffffda000000b700 0045 00000000 0x0 0x0
0xffffda000000b780 0045 00000000 0x0 0x0
0xffffda000000b800 0045 00000000 0x0 0x0
0xffffda000000b880 0041 00000000 0x0 0x0

0xffffda000000b900 0045 00000000 0x0 0x0

0xffffda000000b980 0045 00000000 0x0 0x0
0xffffda000000ba00 0045 00000000 0x0 0x0
0xffffda000000ba80 0045 00000000 0x0 0x0
0xffffda000000bb00 0045 00000000 0x0 0x0
0xffffda000000bb80 0045 00000000 0x0 0x0
0xffffda000000bc00 0045 00000000 0x0 0x0
0xffffda000000bc80 0041 00000000 0x0 0x0
0xffffda000000bd00 0045 00000000 0x0 0x0
0xffffda000000bd80 0045 00000000 0x0 0x0
0xffffda000000be00 0045 00000000 0x0 0x0
0xffffda000000be80 0045 00000000 0x0 0x0
0xffffda000000bf00 0045 00000000 0x0 0x0
0xffffda000000bf80 0045 00000000 0x0 0x0
0xffffda000000c000 0045 00000000 0x0 0x0
0xffffda000000c080 0041 00000000 0x0 0x0
0xffffda000000c100 0045 00000000 0x0 0x0
0xffffda000000c180 0045 00000000 0x0 0x0
0xffffda000000c200 0045 00000000 0x0 0x0
0xffffda000000c280 0045 00000000 0x0 0x0
0xffffda000000c300 0045 00000000 0x0 0x0
0xffffda000000c380 0045 00000000 0x0 0x0
0xffffda000000c400 0045 00000000 0x0 0x0
0xffffda000000c480 0045 00000000 0x0 0x0
0xffffda000000c500 0045 00000000 0x0 0x0
0xffffda000000c580 0045 00000000 0x0 0x0
0xffffda000000c600 0045 00000000 0x0 0x0
0xffffda000000c680 0045 00000000 0x0 0x0
0xffffda000000c700 0041 00000000 0x0 0x0
0xffffda000000c780 0041 00000000 0x0 0x0
0xffffda000000c800 0045 00000000 0x0 0x0
0xffffda000000c880 0045 00000000 0x0 0x0

0xffffda000000c900 0045 00000000 0x0 0x0

0xffffda000000c980 0045 00000000 0x0 0x0
0xffffda000000ca00 0045 00000000 0x0 0x0
0xffffda000000ca80 0041 00000000 0x0 0x0
0xffffda000000cb00 0041 00000000 0x0 0x0
0xffffda000000cb80 0041 00000000 0x0 0x0
0xffffda000000cc00 0045 00000000 0x0 0x0
0xffffda000000cc80 0045 00000000 0x0 0x0
0xffffda000000cd00 0045 00000000 0x0 0x0
0xffffda000000cd80 0041 00000000 0x0 0x0
0xffffda000000ce00 0045 00000000 0x0 0x0
0xffffda000000ce80 0041 00000000 0x0 0x0
0xffffda000000cf00 0041 00000000 0x0 0x0
0xffffda000000cf80 0041 00000000 0x0 0x0
0xffffda000000d000 0041 00000000 0x0 0x0
0xffffda000000d080 0045 00000000 0x0 0x0
0xffffda000000d100 0045 00000000 0x0 0x0
0xffffda000000d180 0041 00000000 0x0 0x0
0xffffda000000d200 0041 00000000 0x0 0x0
0xffffda000000d280 0041 00000000 0x0 0x0
0xffffda000000d300 0045 00000000 0x0 0x0
0xffffda000000d380 0041 00000000 0x0 0x0
0xffffda000000d400 0041 00000000 0x0 0x0
0xffffda000000d480 0045 00000000 0x0 0x0
0xffffda000000d500 0041 00000000 0x0 0x0
0xffffda000000d580 0041 00000000 0x0 0x0
0xffffda000000d600 0041 00000000 0x0 0x0
0xffffda000000d680 0045 00000000 0x0 0x0
0xffffda000000d700 0041 00000000 0x0 0x0
0xffffda000000d780 0045 00000000 0x0 0x0
0xffffda000000d800 0041 00000000 0x0 0x0
0xffffda000000d880 0045 00000000 0x0 0x0
0xffffda000000d900 0041 00000000 0x0 0x0
0xffffda000000d980 0041 00000000 0x0 0x0
0xffffda000000da00 0041 00000000 0x0 0x0
0xffffda000000da80 0041 00000000 0x0 0x0
0xffffda000000db00 0045 00000000 0x0 0x0
0xffffda000000db80 0045 00000000 0x0 0x0
0xffffda000000dc00 0041 00000000 0x0 0x0
0xffffda000000dc80 0041 00000000 0x0 0x0
0xffffda000000dd00 0041 00000000 0x0 0x0
0xffffda000000dd80 0041 00000000 0x0 0x0
0xffffda000000de00 0041 00000000 0x0 0x0
0xffffda000000de80 0041 00000000 0x0 0x0
0xffffda000000df00 0045 00000000 0x0 0x0
0xffffda000000df80 0045 00000000 0x0 0x0
0xffffda000000e000 0045 00000000 0x0 0x0
0xffffda000000e080 0041 00000000 0x0 0x0
0xffffda000000e100 0041 00000000 0x0 0x0
0xffffda000000e180 0045 00000000 0x0 0x0
0xffffda000000e200 0041 00000000 0x0 0x0
0xffffda000000e280 0045 00000000 0x0 0x0
0xffffda000000e300 0045 00000000 0x0 0x0
0xffffda000000e380 0041 00000000 0x0 0x0
0xffffda000000e400 0045 00000000 0x0 0x0
0xffffda000000e480 0041 00000000 0x0 0x0
0xffffda000000e500 0041 00000000 0x0 0x0
0xffffda000000e580 0041 00000000 0x0 0x0
0xffffda000000e600 0045 00000000 0x0 0x0
0xffffda000000e680 0041 00000000 0x0 0x0
0xffffda000000e700 0041 00000000 0x0 0x0
0xffffda000000e780 0041 00000000 0x0 0x0
0xffffda000000e800 0045 00000000 0x0 0x0
0xffffda000000e880 0041 00000000 0x0 0x0

0xffffda000000e900 0045 00000000 0x0 0x0

0xffffda000000e980 0041 00000000 0x0 0x0
0xffffda000000ea00 0041 00000000 0x0 0x0
0xffffda000000ea80 0045 00000000 0x0 0x0
0xffffda000000eb00 0041 00000000 0x0 0x0
0xffffda000000eb80 0045 00000000 0x0 0x0
0xffffda000000ec00 0041 00000000 0x0 0x0
0xffffda000000ec80 0045 00000000 0x0 0x0
0xffffda000000ed00 0041 00000000 0x0 0x0
0xffffda000000ed80 0041 00000000 0x0 0x0
0xffffda000000ee00 0041 00000000 0x0 0x0
0xffffda000000ee80 0041 00000000 0x0 0x0
0xffffda000000ef00 0041 00000000 0x0 0x0
0xffffda000000ef80 0041 00000000 0x0 0x0
0xffffda000000f000 0041 00000000 0x0 0x0
0xffffda000000f080 0041 00000000 0x0 0x0
0xffffda000000f100 0041 00000000 0x0 0x0
0xffffda000000f180 0041 00000000 0x0 0x0
0xffffda000000f200 0041 00000000 0x0 0x0
0xffffda000000f280 0045 00000000 0x0 0x0
0xffffda000000f300 0041 00000000 0x0 0x0
0xffffda000000f380 0041 00000000 0x0 0x0
0xffffda000000f400 0045 00000000 0x0 0x0
0xffffda000000f480 0045 00000000 0x0 0x0
0xffffda000000f500 0041 00000000 0x0 0x0
0xffffda000000f580 0041 00000000 0x0 0x0
0xffffda000000f600 0041 00000000 0x0 0x0
0xffffda000000f680 0041 00000000 0x0 0x0
0xffffda000000f700 0041 00000000 0x0 0x0
0xffffda000000f780 0041 00000000 0x0 0x0
0xffffda000000f800 0041 00000000 0x0 0x0
0xffffda000000f880 0041 00000000 0x0 0x0
0xffffda000000f900 0041 00000000 0x0 0x0
0xffffda000000f980 0045 00000000 0x0 0x0
0xffffda000000fa00 0041 00000000 0x0 0x0
0xffffda000000fa80 0041 00000000 0x0 0x0
0xffffda000000fb00 0041 00000000 0x0 0x0
0xffffda000000fb80 0041 00000000 0x0 0x0
0xffffda000000fc00 0045 00000000 0x0 0x0
0xffffda000000fc80 0045 00000000 0x0 0x0
0xffffda000000fd00 0041 00000000 0x0 0x0
0xffffda000000fd80 0041 00000000 0x0 0x0
0xffffda000000fe00 0041 00000000 0x0 0x0
0xffffda000000fe80 0041 00000000 0x0 0x0
0xffffda000000ff00 0041 00000000 0x0 0x0
0xffffda000000ff80 0041 00000000 0x0 0x0
0xffffda0000010000 0041 00000000 0x0 0x0
0xffffda0000010080 0041 00000000 0x0 0x0
0xffffda0000010100 0045 00000000 0x0 0x0
0xffffda0000010180 0045 00000000 0x0 0x0
0xffffda0000010200 0045 00000000 0x0 0x0
0xffffda0000010280 0041 00000000 0x0 0x0
0xffffda0000010300 0041 00000000 0x0 0x0
0xffffda0000010380 0041 00000000 0x0 0x0
0xffffda0000010400 0041 00000000 0x0 0x0
0xffffda0000010480 0041 00000000 0x0 0x0
0xffffda0000010500 0041 00000000 0x0 0x0
0xffffda0000010580 0041 00000000 0x0 0x0
0xffffda0000010600 0041 00000000 0x0 0x0
0xffffda0000010680 0041 00000000 0x0 0x0
0xffffda0000010700 0045 00000000 0x0 0x0
0xffffda0000010780 0041 00000000 0x0 0x0
0xffffda0000010800 0041 00000000 0x0 0x0
0xffffda0000010880 0045 00000000 0x0 0x0
0xffffda0000010900 0045 00000000 0x0 0x0
0xffffda0000010980 0045 00000000 0x0 0x0
0xffffda0000010a00 0045 00000000 0x0 0x0
0xffffda0000010a80 0045 00000000 0x0 0x0
0xffffda0000010b00 0041 00000000 0x0 0x0
0xffffda0000010b80 0041 00000000 0x0 0x0
0xffffda0000010c00 0041 00000000 0x0 0x0
0xffffda0000010c80 0041 00000000 0x0 0x0
0xffffda0000010d00 0041 00000000 0x0 0x0
0xffffda0000010d80 0041 00000000 0x0 0x0
0xffffda0000010e00 0041 00000000 0x0 0x0
0xffffda0000010e80 0041 00000000 0x0 0x0
0xffffda0000010f00 0041 00000000 0x0 0x0
0xffffda0000010f80 0041 00000000 0x0 0x0
0xffffda0000011000 0041 00000000 0x0 0x0
0xffffda0000011080 0045 00000000 0x0 0x0
0xffffda0000011100 0041 00000000 0x0 0x0
0xffffda0000011180 0041 00000000 0x0 0x0
0xffffda0000011200 0045 00000000 0x0 0x0
0xffffda0000011280 0041 00000000 0x0 0x0
0xffffda0000011300 0041 00000000 0x0 0x0
0xffffda0000011380 0041 00000000 0x0 0x0
0xffffda0000011400 0041 00000000 0x0 0x0
0xffffda0000011480 0041 00000000 0x0 0x0
0xffffda0000011500 0041 00000000 0x0 0x0
0xffffda0000011580 0041 00000000 0x0 0x0
0xffffda0000011600 0041 00000000 0x0 0x0
0xffffda0000011680 0041 00000000 0x0 0x0
0xffffda0000011700 0041 00000000 0x0 0x0
0xffffda0000011780 0045 00000000 0x0 0x0
0xffffda0000011800 0041 00000000 0x0 0x0
0xffffda0000011880 0041 00000000 0x0 0x0
0xffffda0000011900 0045 00000000 0x0 0x0
0xffffda0000011980 0041 00000000 0x0 0x0
0xffffda0000011a00 0041 00000000 0x0 0x0
0xffffda0000011a80 0041 00000000 0x0 0x0
0xffffda0000011b00 0045 00000000 0x0 0x0
0xffffda0000011b80 0041 00000000 0x0 0x0
0xffffda0000011c00 0041 00000000 0x0 0x0
0xffffda0000011c80 0041 00000000 0x0 0x0
0xffffda0000011d00 0041 00000000 0x0 0x0
0xffffda0000011d80 0041 00000000 0x0 0x0
0xffffda0000011e00 0045 00000000 0x0 0x0
0xffffda0000011e80 0045 00000000 0x0 0x0
0xffffda0000011f00 0041 00000000 0x0 0x0
0xffffda0000011f80 0041 00000000 0x0 0x0
0xffffda0000012000 0041 00000000 0x0 0x0
0xffffda0000012080 0041 00000000 0x0 0x0
0xffffda0000012100 0041 00000000 0x0 0x0
0xffffda0000012180 0045 00000000 0x0 0x0
0xffffda0000012200 0041 00000000 0x0 0x0
0xffffda0000012280 0041 00000000 0x0 0x0
0xffffda0000012300 0041 00000000 0x0 0x0
0xffffda0000012380 0041 00000000 0x0 0x0
0xffffda0000012400 0041 00000000 0x0 0x0
0xffffda0000012480 0041 00000000 0x0 0x0
0xffffda0000012500 0045 00000000 0x0 0x0
0xffffda0000012580 0041 00000000 0x0 0x0
0xffffda0000012600 0041 00000000 0x0 0x0
0xffffda0000012680 0041 00000000 0x0 0x0
0xffffda0000012700 0041 00000000 0x0 0x0
0xffffda0000012780 0041 00000000 0x0 0x0
0xffffda0000012800 0041 00000000 0x0 0x0
0xffffda0000012880 0041 00000000 0x0 0x0
0xffffda0000012900 0041 00000000 0x0 0x0
0xffffda0000012980 0041 00000000 0x0 0x0
0xffffda0000012a00 0041 00000000 0x0 0x0
0xffffda0000012a80 0041 00000000 0x0 0x0
0xffffda0000012b00 0041 00000000 0x0 0x0
0xffffda0000012b80 0041 00000000 0x0 0x0
0xffffda0000012c00 0041 00000000 0x0 0x0
0xffffda0000012c80 0045 00000000 0x0 0x0
0xffffda0000012d00 0001 00000000 0x0 0x0
0xffffda0000012d80 0001 00000000 0x0 0x0
0xffffda0000012e00 0001 00000000 0x0 0x0
0xffffda0000012e80 0001 00000000 0x0 0x0
0xffffda0000012f00 0001 00000000 0x0 0x0
0xffffda0000012f80 0001 00000000 0x0 0x0
0xffffda0000013000 0001 00000000 0x0 0x0
0xffffda0000013080 0001 00000000 0x0 0x0
0xffffda0000013100 0001 00000000 0x0 0x0
0xffffda0000013180 0001 00000000 0x0 0x0
0xffffda0000013200 0001 00000000 0x0 0x0
0xffffda0000013280 0001 00000000 0x0 0x0
0xffffda0000013300 0001 00000000 0x0 0x0
0xffffda0000013380 0001 00000000 0x0 0x0
0xffffda0000013400 0001 00000000 0x0 0x0
0xffffda0000013480 0001 00000000 0x0 0x0
0xffffda0000013500 0001 00000000 0x0 0x0
0xffffda0000013580 0001 00000000 0x0 0x0
0xffffda0000013600 0001 00000000 0x0 0x0
0xffffda0000013680 0001 00000000 0x0 0x0
0xffffda0000013700 0001 00000000 0x0 0x0
0xffffda0000013780 0001 00000000 0x0 0x0
0xffffda0000013800 0001 00000000 0x0 0x0
0xffffda0000013880 0001 00000000 0x0 0x0
0xffffda0000013900 0001 00000000 0x0 0x0
0xffffda0000013980 0001 00000000 0x0 0x0
0xffffda0000013a00 0001 00000000 0x0 0x0
0xffffda0000013a80 0001 00000000 0x0 0x0
0xffffda0000013b00 0001 00000000 0x0 0x0
0xffffda0000013b80 0001 00000000 0x0 0x0
0xffffda0000013c00 0001 00000000 0x0 0x0
0xffffda0000013c80 0001 00000000 0x0 0x0
0xffffda0000013d00 0001 00000000 0x0 0x0
0xffffda0000013d80 0001 00000000 0x0 0x0
0xffffda0000013e00 0001 00000000 0x0 0x0
0xffffda0000013e80 0001 00000000 0x0 0x0
0xffffda0000013f00 0001 00000000 0x0 0x0
0xffffda0000013f80 0001 00000000 0x0 0x0
0xffffda0000014000 0001 00000000 0x0 0x0
0xffffda0000014080 0001 00000000 0x0 0x0
0xffffda0000014100 0001 00000000 0x0 0x0
0xffffda0000014180 0001 00000000 0x0 0x0
0xffffda0000014200 0001 00000000 0x0 0x0
0xffffda0000014280 0001 00000000 0x0 0x0
0xffffda0000014300 0001 00000000 0x0 0x0
0xffffda0000014380 0001 00000000 0x0 0x0
0xffffda0000014400 0001 00000000 0x0 0x0
0xffffda0000014480 0001 00000000 0x0 0x0
0xffffda0000014500 0001 00000000 0x0 0x0
0xffffda0000014580 0001 00000000 0x0 0x0
0xffffda0000014600 0001 00000000 0x0 0x0
0xffffda0000014680 0001 00000000 0x0 0x0
0xffffda0000014700 0001 00000000 0x0 0x0
0xffffda0000014780 0001 00000000 0x0 0x0
0xffffda0000014800 0041 00000000 0x0 0x0
0xffffda0000014880 0041 00000000 0x0 0x0
0xffffda0000014900 0041 00000000 0x0 0x0
0xffffda0000014980 0041 00000000 0x0 0x0
0xffffda0000014a00 0041 00000000 0x0 0x0
0xffffda0000014a80 0041 00000000 0x0 0x0
0xffffda0000014b00 0041 00000000 0x0 0x0
0xffffda0000014b80 0041 00000000 0x0 0x0
0xffffda0000014c00 0041 00000000 0x0 0x0
0xffffda0000014c80 0041 00000000 0x0 0x0
0xffffda0000014d00 0041 00000000 0x0 0x0
0xffffda0000014d80 0041 00000000 0x0 0x0
0xffffda0000014e00 0041 00000000 0x0 0x0
0xffffda0000014e80 0041 00000000 0x0 0x0
0xffffda0000014f00 0041 00000000 0x0 0x0
0xffffda0000014f80 0041 00000000 0x0 0x0
0xffffda0000015000 0041 00000000 0x0 0x0
0xffffda0000015080 0041 00000000 0x0 0x0
0xffffda0000015100 0041 00000000 0x0 0x0
0xffffda0000015180 0041 00000000 0x0 0x0
0xffffda0000015200 0041 00000000 0x0 0x0
0xffffda0000015280 0041 00000000 0x0 0x0
0xffffda0000015300 0041 00000000 0x0 0x0
0xffffda0000015380 0041 00000000 0x0 0x0
0xffffda0000015400 0041 00000000 0x0 0x0
0xffffda0000015480 0041 00000000 0x0 0x0
0xffffda0000015500 0041 00000000 0x0 0x0
0xffffda0000015580 0041 00000000 0x0 0x0
0xffffda0000015600 0041 00000000 0x0 0x0
0xffffda0000015680 0041 00000000 0x0 0x0
0xffffda0000015700 0041 00000000 0x0 0x0
0xffffda0000015780 0041 00000000 0x0 0x0
0xffffda0000015800 0041 00000000 0x0 0x0
0xffffda0000015880 0041 00000000 0x0 0x0
0xffffda0000015900 0041 00000000 0x0 0x0
0xffffda0000015980 0041 00000000 0x0 0x0
0xffffda0000015a00 0041 00000000 0x0 0x0
0xffffda0000015a80 0041 00000000 0x0 0x0
0xffffda0000015b00 0041 00000000 0x0 0x0
0xffffda0000015b80 0041 00000000 0x0 0x0
0xffffda0000015c00 0041 00000000 0x0 0x0
0xffffda0000015c80 0041 00000000 0x0 0x0
0xffffda0000015d00 0001 00000000 0x0 0x0
0xffffda0000015d80 0001 00000000 0x0 0x0
0xffffda0000015e00 0001 00000000 0x0 0x0
0xffffda0000015e80 0001 00000000 0x0 0x0
0xffffda0000015f00 0001 00000000 0x0 0x0
0xffffda0000015f80 0001 00000000 0x0 0x0
0xffffda0000016000 0001 00000000 0x0 0x0
0xffffda0000016080 0001 00000000 0x0 0x0
0xffffda0000016100 0001 00000000 0x0 0x0
0xffffda0000016180 0001 00000000 0x0 0x0
0xffffda0000016200 0001 00000000 0x0 0x0
0xffffda0000016280 0001 00000000 0x0 0x0
0xffffda0000016300 0001 00000000 0x0 0x0
0xffffda0000016380 0001 00000000 0x0 0x0
0xffffda0000016400 0001 00000000 0x0 0x0
0xffffda0000016480 0001 00000000 0x0 0x0
0xffffda0000016500 0001 00000000 0x0 0x0
0xffffda0000016580 0001 00000000 0x0 0x0
0xffffda0000016600 0001 00000000 0x0 0x0
0xffffda0000016680 0001 00000000 0x0 0x0
0xffffda0000016700 0001 00000000 0x0 0x0
0xffffda0000016780 0001 00000000 0x0 0x0
0xffffda0000016800 0001 00000000 0x0 0x0
0xffffda0000016880 0001 00000000 0x0 0x0
0xffffda0000016900 0001 00000000 0x0 0x0
0xffffda0000016980 0001 00000000 0x0 0x0
0xffffda0000016a00 0001 00000000 0x0 0x0
0xffffda0000016a80 0001 00000000 0x0 0x0
0xffffda0000016b00 0001 00000000 0x0 0x0
0xffffda0000016b80 0001 00000000 0x0 0x0
0xffffda0000016c00 0001 00000000 0x0 0x0
0xffffda0000016c80 0001 00000000 0x0 0x0
0xffffda0000016d00 0001 00000000 0x0 0x0
0xffffda0000016d80 0001 00000000 0x0 0x0
0xffffda0000016e00 0001 00000000 0x0 0x0
0xffffda0000016e80 0001 00000000 0x0 0x0
0xffffda0000016f00 0001 00000000 0x0 0x0
0xffffda0000016f80 0001 00000000 0x0 0x0
0xffffda0000017000 0001 00000000 0x0 0x0
0xffffda0000017080 0001 00000000 0x0 0x0
0xffffda0000017100 0001 00000000 0x0 0x0
0xffffda0000017180 0001 00000000 0x0 0x0
0xffffda0000017200 0001 00000000 0x0 0x0
0xffffda0000017280 0001 00000000 0x0 0x0
0xffffda0000017300 0001 00000000 0x0 0x0
0xffffda0000017380 0001 00000000 0x0 0x0
0xffffda0000017400 0001 00000000 0x0 0x0
0xffffda0000017480 0001 00000000 0x0 0x0
0xffffda0000017500 0001 00000000 0x0 0x0
0xffffda0000017580 0001 00000000 0x0 0x0
0xffffda0000017600 0001 00000000 0x0 0x0
0xffffda0000017680 0001 00000000 0x0 0x0
0xffffda0000017700 0001 00000000 0x0 0x0
0xffffda0000017780 0001 00000000 0x0 0x0

0xffffda0000017800 0041 00000000 0x0 0x0

0xffffda0000017880 0041 00000000 0x0 0x0
0xffffda0000017900 0041 00000000 0x0 0x0

0xffffda0000017980 0041 00000000 0x0 0x0

0xffffda0000017a00 0041 00000000 0x0 0x0
0xffffda0000017a80 0041 00000000 0x0 0x0

0xffffda0000017b00 0041 00000000 0x0 0x0
0xffffda0000017b80 0041 00000000 0x0 0x0

0xffffda0000017c00 0041 00000000 0x0 0x0
0xffffda0000017c80 0041 00000000 0x0 0x0
0xffffda0000017d00 0041 00000000 0x0 0x0
0xffffda0000017d80 0041 00000000 0x0 0x0
0xffffda0000017e00 0041 00000000 0x0 0x0
0xffffda0000017e80 0041 00000000 0x0 0x0
0xffffda0000017f00 0041 00000000 0x0 0x0
0xffffda0000017f80 0041 00000000 0x0 0x0
0xffffda0000018000 0041 00000000 0x0 0x0
0xffffda0000018080 0041 00000000 0x0 0x0
0xffffda0000018100 0041 00000000 0x0 0x0

0xffffda0000018180 0041 00000000 0x0 0x0

0xffffda0000018200 0041 00000000 0x0 0x0
0xffffda0000018280 0041 00000000 0x0 0x0

0xffffda0000018300 0041 00000000 0x0 0x0

0xffffda0000018380 0041 00000000 0x0 0x0
0xffffda0000018400 0041 00000000 0x0 0x0
0xffffda0000018480 0041 00000000 0x0 0x0
0xffffda0000018500 0041 00000000 0x0 0x0
0xffffda0000018580 0041 00000000 0x0 0x0
0xffffda0000018600 0041 00000000 0x0 0x0
0xffffda0000018680 0041 00000000 0x0 0x0
0xffffda0000018700 0041 00000000 0x0 0x0
0xffffda0000018780 0041 00000000 0x0 0x0
0xffffda0000018800 0041 00000000 0x0 0x0

0xffffda0000018880 0041 00000000 0x0 0x0

0xffffda0000018900 0041 00000000 0x0 0x0
0xffffda0000018980 0041 00000000 0x0 0x0
0xffffda0000018a00 0041 00000000 0x0 0x0
0xffffda0000018a80 0041 00000000 0x0 0x0
0xffffda0000018b00 0041 00000000 0x0 0x0
0xffffda0000018b80 0041 00000000 0x0 0x0

0xffffda0000018c00 0041 00000000 0x0 0x0

0xffffda0000018c80 0041 00000000 0x0 0x0
0xffffda0000018d00 0041 00000000 0x0 0x0
0xffffda0000018d80 0001 00000000 0x0 0x0
0xffffda0000018e00 0001 00000000 0x0 0x0
0xffffda0000018e80 0001 00000000 0x0 0x0
0xffffda0000018f00 0001 00000000 0x0 0x0
0xffffda0000018f80 0001 00000000 0x0 0x0
0xffffda0000019000 0001 00000000 0x0 0x0
0xffffda0000019080 0001 00000000 0x0 0x0
0xffffda0000019100 0001 00000000 0x0 0x0
0xffffda0000019180 0001 00000000 0x0 0x0
0xffffda0000019200 0001 00000000 0x0 0x0
0xffffda0000019280 0001 00000000 0x0 0x0
0xffffda0000019300 0001 00000000 0x0 0x0
0xffffda0000019380 0001 00000000 0x0 0x0
0xffffda0000019400 0001 00000000 0x0 0x0
0xffffda0000019480 0001 00000000 0x0 0x0
0xffffda0000019500 0001 00000000 0x0 0x0
0xffffda0000019580 0001 00000000 0x0 0x0
0xffffda0000019600 0001 00000000 0x0 0x0
0xffffda0000019680 0001 00000000 0x0 0x0
0xffffda0000019700 0001 00000000 0x0 0x0
0xffffda0000019780 0001 00000000 0x0 0x0
0xffffda0000019800 0001 00000000 0x0 0x0
0xffffda0000019880 0001 00000000 0x0 0x0
0xffffda0000019900 0001 00000000 0x0 0x0
0xffffda0000019980 0001 00000000 0x0 0x0
0xffffda0000019a00 0001 00000000 0x0 0x0
0xffffda0000019a80 0001 00000000 0x0 0x0
0xffffda0000019b00 0001 00000000 0x0 0x0
0xffffda0000019b80 0001 00000000 0x0 0x0
0xffffda0000019c00 0001 00000000 0x0 0x0
0xffffda0000019c80 0001 00000000 0x0 0x0
0xffffda0000019d00 0001 00000000 0x0 0x0
0xffffda0000019d80 0001 00000000 0x0 0x0
0xffffda0000019e00 0001 00000000 0x0 0x0
0xffffda0000019e80 0001 00000000 0x0 0x0
0xffffda0000019f00 0001 00000000 0x0 0x0
0xffffda0000019f80 0001 00000000 0x0 0x0
0xffffda000001a000 0001 00000000 0x0 0x0
0xffffda000001a080 0001 00000000 0x0 0x0
0xffffda000001a100 0001 00000000 0x0 0x0
0xffffda000001a180 0001 00000000 0x0 0x0
0xffffda000001a200 0001 00000000 0x0 0x0
0xffffda000001a280 0001 00000000 0x0 0x0
0xffffda000001a300 0001 00000000 0x0 0x0
0xffffda000001a380 0001 00000000 0x0 0x0
0xffffda000001a400 0001 00000000 0x0 0x0
0xffffda000001a480 0001 00000000 0x0 0x0
0xffffda000001a500 0001 00000000 0x0 0x0
0xffffda000001a580 0001 00000000 0x0 0x0
0xffffda000001a600 0001 00000000 0x0 0x0
0xffffda000001a680 0001 00000000 0x0 0x0
0xffffda000001a700 0001 00000000 0x0 0x0
0xffffda000001a780 0001 00000000 0x0 0x0
0xffffda000001a800 0001 00000000 0x0 0x0
0xffffda000001a880 0041 00000000 0x0 0x0
0xffffda000001a900 0041 00000000 0x0 0x0
0xffffda000001a980 0041 00000000 0x0 0x0
0xffffda000001aa00 0041 00000000 0x0 0x0
0xffffda000001aa80 0041 00000000 0x0 0x0
0xffffda000001ab00 0041 00000000 0x0 0x0
0xffffda000001ab80 0041 00000000 0x0 0x0
0xffffda000001ac00 0041 00000000 0x0 0x0
0xffffda000001ac80 0041 00000000 0x0 0x0
0xffffda000001ad00 0041 00000000 0x0 0x0
0xffffda000001ad80 0041 00000000 0x0 0x0
0xffffda

Tested on:

commit: 6ac77be6 Localize addr and buf. NFC.

git tree: https://github.com/NetBSD/src trunk

console output: https://syzkaller.appspot.com/x/log.txt?x=160b744b080000

kernel config: https://syzkaller.appspot.com/x/.config?x=1420f906d33d9f1f
dashboard link: https://syzkaller.appspot.com/bug?extid=1bee937496ae35ea301c
compiler: g++ (Debian 10.2.1-6) 10.2.1 20210110

patch: https://syzkaller.appspot.com/x/patch.diff?x=1177944b080000

syzbot

unread,

Sep 3, 2022, 7:36:11 AM9/3/22

to rias...@netbsd.org, syzkaller-...@googlegroups.com

Hello,

syzbot has tested the proposed patch but the reproducer is still triggering an issue:
assert failed: !ktd->ktd_callout_pending

[ 44.7291306] panic: kernel diagnostic assertion "!ktd->ktd_callout_pending" failed: file "/syzkaller/jobs/netbsd/kernel/sys/kern/kern_ktrace.c", line 1429
[ 44.7443733] cpu0: Begin traceback...
[ 44.7591187] vpanic() at netbsd:vpanic+0x2f2 sys/kern/subr_prf.c:293
[ 44.8291210] kern_assert() at netbsd:kern_assert+0x65 sys/arch/amd64/amd64/db_disasm.c:1074
[ 44.8791228] ktrace_thread() at netbsd:ktrace_thread+0x741 sys/kern/kern_ktrace.c:1429
[ 44.8991206] cpu0: End traceback...
[ 44.8991206] fatal breakpoint trap in supervisor mode
[ 44.9099838] trap type 1 code 0 rip 0xffffffff80221ab5 cs 0x8 rflags 0x246 cr2 0x7b68f9625ba8 ilevel 0 rsp 0xffffde824843aed0
[ 44.9210055] curlwp 0xffffdb40081f5240 pid 0.1259 lowest kstack 0xffffde82484362c0
Stopped in pid 0.1259 (system) at netbsd:breakpoint+0x5: leave

?
breakpoint() at netbsd:breakpoint+0x5
db_panic() at netbsd:db_panic+0xec sys/ddb/db_panic.c:69
vpanic() at netbsd:vpanic+0x2f2 sys/kern/subr_prf.c:293
kern_assert() at netbsd:kern_assert+0x65 sys/arch/amd64/amd64/db_disasm.c:1074

ktrace_thread() at netbsd:ktrace_thread+0x741 sys/kern/kern_ktrace.c:1429
Panic string: kernel diagnostic assertion "!ktd->ktd_callout_pending" failed: file "/syzkaller/jobs/netbsd/kernel/sys/kern/kern_ktrace.c", line 1429

PID LID S CPU FLAGS STRUCT LWP * NAME WAIT

1324 1324 3 1 0 ffffdb40054104c0 syz-executor.5 tstile
954 954 2 0 0 ffffdb4004cfa500 syz-executor.3
1350 1350 2 0 40000 ffffdb4006abca80 syz-executor.2
1209 >1119 7 1 100 ffffdb40081f5ac0 syz-executor.4
1209 1209 2 1 10040000 ffffdb4006abc200 syz-executor.4
1236 1236 2 0 140 ffffdb4005410900 syz-executor.5
1312 1312 3 1 10040000 ffffdb4005410080 syz-executor.1 tstile
1279 1322 2 0 0 ffffdb4008701280 syz-executor.0
1279 1279 2 0 40000 ffffdb4004cfa0c0 syz-executor.0
860 860 2 0 140 ffffdb4004b628c0 syz-executor.3
1214 1214 2 0 140 ffffdb400702fa40 syz-executor.0
1323 1323 3 1 40 ffffdb400702f600 syz-executor.1 tstile
1385 1385 2 0 140 ffffdb4003f862c0 syz-executor.4
1198 324 3 1 180 ffffdb4004b62480 syz-execprog wait
1198 335 2 0 100 ffffdb400636e180 syz-execprog
1198 976 3 1 180 ffffdb4004cfa940 syz-execprog wait
1198 330 3 0 180 ffffdb400702f1c0 syz-execprog wait
1198 331 3 1 180 ffffdb400636ea00 syz-execprog wait
1198 1200 3 1 180 ffffdb400636e5c0 syz-execprog wait
1198 1197 3 1 180 ffffdb4003e3d280 syz-execprog parked
1198 1206 3 0 180 ffffdb4005c239c0 syz-execprog parked
1198 1199 3 0 1c0 ffffdb4003e3db00 syz-execprog parked
1198 1241 3 1 180 ffffdb4005c23580 syz-execprog wait
1198 1238 2 0 140 ffffdb40029cfa40 syz-execprog
1198 1198 3 1 40180 ffffdb4003e3d6c0 syz-execprog parked
1242 1242 3 1 180 ffffdb4004377780 sshd select
1085 1085 3 0 180 ffffdb400581f100 getty nanoslp
1073 1073 3 0 180 ffffdb400581f980 getty nanoslp
1075 1075 3 1 180 ffffdb4003a84ac0 getty nanoslp
1127 1127 3 0 1c0 ffffdb4003a84680 getty ttyraw
1096 1096 3 1 180 ffffdb4005c23140 sshd select
952 952 3 0 180 ffffdb400581f540 powerd kqueue
693 693 3 0 180 ffffdb4003f86b40 syslogd kqueue
547 547 3 0 180 ffffdb4004b62040 dhcpcd poll
742 742 3 1 180 ffffdb40041ef300 dhcpcd poll
465 465 3 1 180 ffffdb40041ef740 dhcpcd poll
594 594 3 0 180 ffffdb4004377bc0 dhcpcd poll
292 292 3 0 180 ffffdb4004377340 dhcpcd poll
290 290 3 1 180 ffffdb40041efb80 dhcpcd poll
289 289 3 1 180 ffffdb4003f86700 dhcpcd poll
1 1 3 0 180 ffffdb3ffb853980 init wait
0 >1259 7 0 200 ffffdb40081f5240 ktrace
0 820 3 0 200 ffffdb4003a77200 physiod physiod
0 195 3 1 200 ffffdb4003a84240 pooldrain pooldrain
0 194 2 0 240 ffffdb4003a77a80 ioflush
0 193 3 0 200 ffffdb4003a77640 pgdaemon pgdaemon
0 169 3 1 200 ffffdb40029cf600 usb7 usbevt
0 168 3 1 200 ffffdb40029cf1c0 usb6 usbevt
0 167 3 1 200 ffffdb3fff942a00 usb5 usbevt
0 166 3 1 200 ffffdb3fff9425c0 usb4 usbevt
0 165 3 1 200 ffffdb3fff942180 usb3 usbevt
0 31 3 1 200 ffffdb3ffb8a59c0 usb2 usbevt
0 63 3 0 200 ffffdb3ffb8a5580 usb1 usbevt
0 126 3 1 200 ffffdb3ffb6e0740 usb0 usbevt
0 125 3 1 200 ffffdb3ffb6e0b80 usbtask-dr usbtsk
0 124 3 0 200 ffffdb3ff9ca9b00 usbtask-hc usbtsk
0 123 3 1 200 ffffdb3ffb8a5140 npfgc0 npfgcw
0 122 3 1 200 ffffdb3ffb853540 rt_free rt_free
0 121 3 1 200 ffffdb3ffb853100 unpgc unpgc
0 120 3 0 200 ffffdb3ffb846940 key_timehandler key_timehandler
0 119 3 1 200 ffffdb3ffb846500 icmp6_wqinput/1 icmp6_wqinput
0 118 3 0 200 ffffdb3ffb8460c0 icmp6_wqinput/0 icmp6_wqinput
0 117 3 0 200 ffffdb3ffb841900 nd6_timer nd6_timer
0 116 3 1 200 ffffdb3ffb8414c0 carp6_wqinput/1 carp6_wqinput
0 115 3 0 200 ffffdb3ffb841080 carp6_wqinput/0 carp6_wqinput
0 114 3 1 200 ffffdb3ffb8148c0 carp_wqinput/1 carp_wqinput
0 113 3 0 200 ffffdb3ffb814480 carp_wqinput/0 carp_wqinput
0 112 3 1 200 ffffdb3ffb814040 icmp_wqinput/1 icmp_wqinput
0 111 3 0 200 ffffdb3ffb7d7bc0 icmp_wqinput/0 icmp_wqinput
0 110 3 0 200 ffffdb3ffb7d7340 rt_timer rt_timer
0 109 3 0 200 ffffdb3ffb7d7780 vmem_rehash vmem_rehash
0 100 3 0 200 ffffdb3ffb6e0300 entbutler entropy
0 99 3 0 200 ffffdb3ffb148b40 viomb balloon
0 98 3 1 200 ffffdb3ffb148700 vioif0_txrx/1 vioif0_txrx
0 97 3 0 200 ffffdb3ffb1482c0 vioif0_txrx/0 vioif0_txrx
0 30 3 0 200 ffffdb3ff9ca96c0 scsibus0 sccomp
0 29 3 1 200 ffffdb3ff9ca9280 pms0 pmsreset
0 28 3 1 200 ffffdb3ff9bacac0 xcall/1 xcall
0 27 1 1 200 ffffdb3ff9bac680 softser/1
0 26 1 1 200 ffffdb3ff9bac240 softclk/1
0 25 1 1 200 ffffdb3ff9b87a80 softbio/1
0 24 1 1 200 ffffdb3ff9b87640 softnet/1
0 23 1 1 201 ffffdb3ff9b87200 idle/1
0 22 3 1 200 ffffdb4127f2da40 lnxsyswq lnxsyswq
0 21 3 1 200 ffffdb4127f2d600 lnxubdwq lnxubdwq
0 20 3 1 200 ffffdb4127f2d1c0 lnxpwrwq lnxpwrwq
0 19 3 1 200 ffffdb4127f34a00 lnxlngwq lnxlngwq
0 18 3 1 200 ffffdb4127f345c0 lnxhipwq lnxhipwq
0 17 3 1 200 ffffdb4127f34180 lnxrcugc lnxrcugc
0 16 3 0 200 ffffdb4127f539c0 sysmon smtaskq
0 15 3 1 200 ffffdb4127f53580 pmfsuspend pmfsuspend
0 14 3 0 200 ffffdb4127f53140 pmfevent pmfevent
0 13 3 1 200 ffffdb4127f5e980 sopendfree sopendfr
0 12 3 0 200 ffffdb4127f5e540 ifwdog ifwdog
0 11 3 1 200 ffffdb4127f5e100 iflnkst iflnkst
0 10 3 1 200 ffffdb4128f95940 nfssilly nfssilly
0 9 3 0 200 ffffdb4128f95500 vdrain vdrain
0 8 3 1 200 ffffdb4128f950c0 modunload mod_unld
0 7 3 0 200 ffffdb4128fba900 xcall/0 xcall
0 6 1 0 200 ffffdb4128fba4c0 softser/0
0 5 1 0 200 ffffdb4128fba080 softclk/0
0 4 1 0 200 ffffdb4128feb8c0 softbio/0
0 3 1 0 200 ffffdb4128feb480 softnet/0
0 2 1 0 201 ffffdb4128feb040 idle/0
0 0 3 1 200 ffffffff86740c40 swapper uvm
[Locks tracked through LWPs]

****** LWP 1324.1324 (syz-executor.5) @ 0xffffdb40054104c0, l_stat=3

*** Locks held:

* Lock 0 (initialized at netbsd:pmap_ctor+0x6d sys/arch/x86/x86/pmap.c:2857)
lock address : ffffdb4004b46380

type : sleep/adaptive
initialized : netbsd:pmap_ctor+0x6d
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0

relevant cpu : 1 last held: 1

relevant lwp : 0xffffdb40054104c0 last held: 0xffffdb40054104c0

last locked* : netbsd:pmap_enter_ma+0x3a0
unlocked : netbsd:pmap_extract+0x2c8
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

*** Locks wanted: none

****** LWP 954.954 (syz-executor.3) @ 0xffffdb4004cfa500, l_stat=2

*** Locks held:

* Lock 0 (initialized at netbsd:pmap_ctor+0x6d sys/arch/x86/x86/pmap.c:2857)

lock address : ffffdb4004860380

type : sleep/adaptive
initialized : netbsd:pmap_ctor+0x6d
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0

relevant lwp : 0xffffdb4004cfa500 last held: 0xffffdb4004cfa500

last locked* : netbsd:pmap_enter_ma+0x3a0
unlocked : netbsd:pmap_extract+0x2c8

owner field : 0xffffdb4004cfa500 wait/spin: 0/0

Turnstile: no active turnstile for this lock.

*** Locks wanted: none

****** LWP 1350.1350 (syz-executor.2) @ 0xffffdb4006abca80, l_stat=2

*** Locks held:

* Lock 0 (initialized at netbsd:vcache_alloc+0xba sys/kern/vfs_vnode.c:1392)

lock address : ffffdb40085f7740

type : sleep/adaptive
initialized : netbsd:vcache_alloc+0xba

shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0

relevant lwp : 0xffffdb4006abca80 last held: 0xffffdb4006abca80

last locked* : netbsd:genfs_lock+0x220
unlocked : netbsd:genfs_unlock+0x50

owner/count : 0xffffdb4006abca80 flags : 0x0000000000000004

Turnstile: no active turnstile for this lock.

* Lock 1 (initialized at netbsd:vcache_alloc+0xba sys/kern/vfs_vnode.c:1392)
lock address : ffffdb40083ca540

type : sleep/adaptive
initialized : netbsd:vcache_alloc+0xba

shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0

relevant lwp : 0xffffdb4006abca80 last held: 0xffffdb4006abca80

last locked* : netbsd:genfs_lock+0x220
unlocked : 0

owner/count : 0xffffdb4006abca80 flags : 0x0000000000000004

Turnstile: no active turnstile for this lock.

*** Locks wanted: none

****** LWP 1312.1312 (syz-executor.1) @ 0xffffdb4005410080, l_stat=3

*** Locks held:

* Lock 0 (initialized at netbsd:fork1+0x4b8 sys/kern/kern_fork.c:366)

lock address : ffffdb4003e1a390

type : sleep/adaptive
initialized : netbsd:fork1+0x4b8
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0

relevant cpu : 1 last held: 1

relevant lwp : 0xffffdb4005410080 last held: 0xffffdb4005410080
last locked* : netbsd:exit1+0x393
unlocked : netbsd:procfs_readlink+0x397
owner/count : 0xffffdb4005410080 flags : 0x0000000000000004

Turnstile: no active turnstile for this lock.

*** Locks wanted:

* Lock 0 (initialized at netbsd:amap_ctor+0x3d sys/uvm/uvm_amap.c:265)
lock address : ffffdb4006510740
type : sleep/adaptive
initialized : netbsd:amap_ctor+0x3d

shared holds : 0 exclusive: 0

shares wanted: 0 exclusive: 1

relevant cpu : 1 last held: 65535
relevant lwp : 0xffffdb4005410080 last held: 000000000000000000
last locked : netbsd:uvmspace_fork+0xa4f
unlocked* : netbsd:uvmspace_fork+0xb95

owner/count : 000000000000000000 flags : 000000000000000000
Turnstile: no active turnstile for this lock.

****** LWP 742.742 (dhcpcd) @ 0xffffdb40041ef300, l_stat=3

relevant lwp : 0xffffdb40041ef300 last held: 000000000000000000

last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 465.465 (dhcpcd) @ 0xffffdb40041ef740, l_stat=3

relevant lwp : 0xffffdb40041ef740 last held: 000000000000000000

last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 290.290 (dhcpcd) @ 0xffffdb40041efb80, l_stat=3

relevant lwp : 0xffffdb40041efb80 last held: 000000000000000000

last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 289.289 (dhcpcd) @ 0xffffdb4003f86700, l_stat=3

relevant lwp : 0xffffdb4003f86700 last held: 000000000000000000

last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 0.1259 (ktrace) @ 0xffffdb40081f5240, l_stat=7

*** Locks held:

* Lock 0 (initialized at netbsd:ktrinit+0x20 sys/kern/kern_ktrace.c:266)

lock address : netbsd:ktrace_lock
type : sleep/adaptive
initialized : netbsd:ktrinit+0x20
shared holds : 0 exclusive: 1

shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0

relevant lwp : 0xffffdb40081f5240 last held: 0xffffdb40081f5240
last locked* : netbsd:ktrace_thread+0x1a9
unlocked : netbsd:ktrace_thread+0x17a
owner field : 0xffffdb40081f5240 wait/spin: 0/0

Turnstile: no active turnstile for this lock.

*** Locks wanted: none

****** LWP 0.11 (iflnkst) @ 0xffffdb4127f5e100, l_stat=3

relevant lwp : 0xffffdb4127f5e100 last held: 000000000000000000

last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 0.5 (softclk/0) @ 0xffffdb4128fba080, l_stat=1

relevant lwp : 0xffffdb4128fba080 last held: 000000000000000000

last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 0.0 (swapper) @ 0xffffffff86740c40, l_stat=3

relevant lwp : 0xffffffff86740c40 last held: 000000000000000000

last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

[Locks tracked through CPUs]

******* Locks held on cpu0:

* Lock 0 (initialized at netbsd:kprintf_init+0x72 sys/kern/subr_prf.c:157)
lock address : netbsd:kprintf_mtx
type : spin
initialized : netbsd:kprintf_init+0x72
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0

relevant cpu : 0 last held: 0

relevant lwp : 0xffffdb40081f5240 last held: 0xffffdb40081f5240

last locked* : netbsd:kprintf_lock+0x50
unlocked : netbsd:kprintf_unlock+0x70
owner field : 0x0000000000000800 wait/spin: 0/1

PAGE FLAG PQ UOBJECT UANON

0xffffde8000007180 0045 00000000 0x0 0x0
0xffffde8000007200 0045 00000000 0x0 0x0
0xffffde8000007280 0045 00000000 0x0 0x0
0xffffde8000007300 0045 00000000 0x0 0x0
0xffffde8000007380 0045 00000000 0x0 0x0
0xffffde8000007400 0045 00000000 0x0 0x0
0xffffde8000007480 0045 00000000 0x0 0x0
0xffffde8000007500 0045 00000000 0x0 0x0
0xffffde8000007580 0045 00000000 0x0 0x0
0xffffde8000007600 0045 00000000 0x0 0x0
0xffffde8000007680 0041 00000000 0x0 0x0
0xffffde8000007700 0041 00000000 0x0 0x0
0xffffde8000007780 0041 00000000 0x0 0x0
0xffffde8000007800 0041 00000000 0x0 0x0
0xffffde8000007880 0045 00000000 0x0 0x0
0xffffde8000007900 0045 00000000 0x0 0x0
0xffffde8000007980 0041 00000000 0x0 0x0
0xffffde8000007a00 0041 00000000 0x0 0x0
0xffffde8000007a80 0041 00000000 0x0 0x0
0xffffde8000007b00 0041 00000000 0x0 0x0
0xffffde8000007b80 0041 00000000 0x0 0x0
0xffffde8000007c00 0041 00000000 0x0 0x0
0xffffde8000007c80 0041 00000000 0x0 0x0
0xffffde8000007d00 0041 00000000 0x0 0x0
0xffffde8000007d80 0041 00000000 0x0 0x0
0xffffde8000007e00 0041 00000000 0x0 0x0
0xffffde8000007e80 0041 00000000 0x0 0x0
0xffffde8000007f00 0041 00000000 0x0 0x0
0xffffde8000007f80 0041 00000000 0x0 0x0
0xffffde8000008000 0041 00000000 0x0 0x0
0xffffde8000008080 0041 00000000 0x0 0x0
0xffffde8000008100 0041 00000000 0x0 0x0
0xffffde8000008180 0041 00000000 0x0 0x0
0xffffde8000008200 0041 00000000 0x0 0x0
0xffffde8000008280 0041 00000000 0x0 0x0
0xffffde8000008300 0041 00000000 0x0 0x0
0xffffde8000008380 0041 00000000 0x0 0x0
0xffffde8000008400 0041 00000000 0x0 0x0
0xffffde8000008480 0041 00000000 0x0 0x0
0xffffde8000008500 0041 00000000 0x0 0x0
0xffffde8000008580 0041 00000000 0x0 0x0
0xffffde8000008600 0045 00000000 0x0 0x0
0xffffde8000008680 0041 00000000 0x0 0x0
0xffffde8000008700 0041 00000000 0x0 0x0
0xffffde8000008780 0041 00000000 0x0 0x0
0xffffde8000008800 0045 00000000 0x0 0x0
0xffffde8000008880 0041 00000000 0x0 0x0
0xffffde8000008900 0041 00000000 0x0 0x0
0xffffde8000008980 0041 00000000 0x0 0x0
0xffffde8000008a00 0041 00000000 0x0 0x0
0xffffde8000008a80 0041 00000000 0x0 0x0
0xffffde8000008b00 0041 00000000 0x0 0x0
0xffffde8000008b80 0041 00000000 0x0 0x0
0xffffde8000008c00 0041 00000000 0x0 0x0
0xffffde8000008c80 0041 00000000 0x0 0x0
0xffffde8000008d00 0041 00000000 0x0 0x0
0xffffde8000008d80 0041 00000000 0x0 0x0
0xffffde8000008e00 0041 00000000 0x0 0x0
0xffffde8000008e80 0041 00000000 0x0 0x0
0xffffde8000008f00 0041 00000000 0x0 0x0
0xffffde8000008f80 0041 00000000 0x0 0x0
0xffffde8000009000 0041 00000000 0x0 0x0
0xffffde8000009080 0041 00000000 0x0 0x0
0xffffde8000009100 0045 00000000 0x0 0x0
0xffffde8000009180 0041 00000000 0x0 0x0
0xffffde8000009200 0041 00000000 0x0 0x0
0xffffde8000009280 0041 00000000 0x0 0x0
0xffffde8000009300 0041 00000000 0x0 0x0
0xffffde8000009380 0041 00000000 0x0 0x0
0xffffde8000009400 0041 00000000 0x0 0x0
0xffffde8000009480 0045 00000000 0x0 0x0
0xffffde8000009500 0041 00000000 0x0 0x0
0xffffde8000009580 0041 00000000 0x0 0x0
0xffffde8000009600 0041 00000000 0x0 0x0
0xffffde8000009680 0041 00000000 0x0 0x0
0xffffde8000009700 0041 00000000 0x0 0x0
0xffffde8000009780 0041 00000000 0x0 0x0
0xffffde8000009800 0041 00000000 0x0 0x0
0xffffde8000009880 0041 00000000 0x0 0x0
0xffffde8000009900 0041 00000000 0x0 0x0
0xffffde8000009980 0041 00000000 0x0 0x0
0xffffde8000009a00 0041 00000000 0x0 0x0
0xffffde8000009a80 0045 00000000 0x0 0x0
0xffffde8000009b00 0041 00000000 0x0 0x0
0xffffde8000009b80 0041 00000000 0x0 0x0
0xffffde8000009c00 0041 00000000 0x0 0x0
0xffffde8000009c80 0041 00000000 0x0 0x0
0xffffde8000009d00 0041 00000000 0x0 0x0
0xffffde8000009d80 0041 00000000 0x0 0x0
0xffffde8000009e00 0041 00000000 0x0 0x0
0xffffde8000009e80 0041 00000000 0x0 0x0
0xffffde8000009f00 0041 00000000 0x0 0x0
0xffffde8000009f80 0041 00000000 0x0 0x0
0xffffde800000a000 0041 00000000 0x0 0x0
0xffffde800000a080 0041 00000000 0x0 0x0
0xffffde800000a100 0041 00000000 0x0 0x0
0xffffde800000a180 0041 00000000 0x0 0x0
0xffffde800000a200 0041 00000000 0x0 0x0
0xffffde800000a280 0041 00000000 0x0 0x0
0xffffde800000a300 0041 00000000 0x0 0x0
0xffffde800000a380 0041 00000000 0x0 0x0
0xffffde800000a400 0041 00000000 0x0 0x0
0xffffde800000a480 0041 00000000 0x0 0x0
0xffffde800000a500 0041 00000000 0x0 0x0
0xffffde800000a580 0041 00000000 0x0 0x0
0xffffde800000a600 0041 00000000 0x0 0x0
0xffffde800000a680 0041 00000000 0x0 0x0
0xffffde800000a700 0041 00000000 0x0 0x0
0xffffde800000a780 0041 00000000 0x0 0x0
0xffffde800000a800 0041 00000000 0x0 0x0
0xffffde800000a880 0041 00000000 0x0 0x0
0xffffde800000a900 0041 00000000 0x0 0x0
0xffffde800000a980 0041 00000000 0x0 0x0
0xffffde800000aa00 0041 00000000 0x0 0x0
0xffffde800000aa80 0041 00000000 0x0 0x0
0xffffde800000ab00 0041 00000000 0x0 0x0
0xffffde800000ab80 0041 00000000 0x0 0x0
0xffffde800000ac00 0041 00000000 0x0 0x0
0xffffde800000ac80 0041 00000000 0x0 0x0
0xffffde800000ad00 0041 00000000 0x0 0x0
0xffffde800000ad80 0041 00000000 0x0 0x0
0xffffde800000ae00 0041 00000000 0x0 0x0
0xffffde800000ae80 0045 00000000 0x0 0x0
0xffffde800000af00 0045 00000000 0x0 0x0
0xffffde800000af80 0045 00000000 0x0 0x0
0xffffde800000b000 0041 00000000 0x0 0x0
0xffffde800000b080 0041 00000000 0x0 0x0
0xffffde800000b100 0041 00000000 0x0 0x0
0xffffde800000b180 0045 00000000 0x0 0x0
0xffffde800000b200 0041 00000000 0x0 0x0
0xffffde800000b280 0045 00000000 0x0 0x0
0xffffde800000b300 0045 00000000 0x0 0x0
0xffffde800000b380 0045 00000000 0x0 0x0
0xffffde800000b400 0041 00000000 0x0 0x0
0xffffde800000b480 0041 00000000 0x0 0x0
0xffffde800000b500 0041 00000000 0x0 0x0
0xffffde800000b580 0045 00000000 0x0 0x0
0xffffde800000b600 0045 00000000 0x0 0x0
0xffffde800000b680 0045 00000000 0x0 0x0
0xffffde800000b700 0045 00000000 0x0 0x0
0xffffde800000b780 0045 00000000 0x0 0x0
0xffffde800000b800 0045 00000000 0x0 0x0
0xffffde800000b880 0041 00000000 0x0 0x0
0xffffde800000b900 0045 00000000 0x0 0x0
0xffffde800000b980 0045 00000000 0x0 0x0
0xffffde800000ba00 0045 00000000 0x0 0x0
0xffffde800000ba80 0045 00000000 0x0 0x0
0xffffde800000bb00 0045 00000000 0x0 0x0
0xffffde800000bb80 0045 00000000 0x0 0x0
0xffffde800000bc00 0045 00000000 0x0 0x0
0xffffde800000bc80 0041 00000000 0x0 0x0
0xffffde800000bd00 0045 00000000 0x0 0x0
0xffffde800000bd80 0045 00000000 0x0 0x0
0xffffde800000be00 0045 00000000 0x0 0x0
0xffffde800000be80 0045 00000000 0x0 0x0
0xffffde800000bf00 0045 00000000 0x0 0x0
0xffffde800000bf80 0045 00000000 0x0 0x0
0xffffde800000c000 0045 00000000 0x0 0x0
0xffffde800000c080 0041 00000000 0x0 0x0
0xffffde800000c100 0045 00000000 0x0 0x0
0xffffde800000c180 0045 00000000 0x0 0x0
0xffffde800000c200 0045 00000000 0x0 0x0
0xffffde800000c280 0045 00000000 0x0 0x0
0xffffde800000c300 0045 00000000 0x0 0x0
0xffffde800000c380 0045 00000000 0x0 0x0
0xffffde800000c400 0045 00000000 0x0 0x0
0xffffde800000c480 0045 00000000 0x0 0x0
0xffffde800000c500 0045 00000000 0x0 0x0
0xffffde800000c580 0045 00000000 0x0 0x0
0xffffde800000c600 0045 00000000 0x0 0x0
0xffffde800000c680 0045 00000000 0x0 0x0
0xffffde800000c700 0041 00000000 0x0 0x0
0xffffde800000c780 0041 00000000 0x0 0x0
0xffffde800000c800 0045 00000000 0x0 0x0
0xffffde800000c880 0045 00000000 0x0 0x0
0xffffde800000c900 0045 00000000 0x0 0x0
0xffffde800000c980 0045 00000000 0x0 0x0
0xffffde800000ca00 0045 00000000 0x0 0x0
0xffffde800000ca80 0041 00000000 0x0 0x0
0xffffde800000cb00 0041 00000000 0x0 0x0
0xffffde800000cb80 0041 00000000 0x0 0x0
0xffffde800000cc00 0045 00000000 0x0 0x0
0xffffde800000cc80 0045 00000000 0x0 0x0
0xffffde800000cd00 0045 00000000 0x0 0x0
0xffffde800000cd80 0041 00000000 0x0 0x0
0xffffde800000ce00 0045 00000000 0x0 0x0
0xffffde800000ce80 0041 00000000 0x0 0x0
0xffffde800000cf00 0041 00000000 0x0 0x0
0xffffde800000cf80 0041 00000000 0x0 0x0
0xffffde800000d000 0041 00000000 0x0 0x0
0xffffde800000d080 0045 00000000 0x0 0x0
0xffffde800000d100 0045 00000000 0x0 0x0
0xffffde800000d180 0041 00000000 0x0 0x0
0xffffde800000d200 0041 00000000 0x0 0x0
0xffffde800000d280 0041 00000000 0x0 0x0
0xffffde800000d300 0045 00000000 0x0 0x0
0xffffde800000d380 0041 00000000 0x0 0x0
0xffffde800000d400 0041 00000000 0x0 0x0
0xffffde800000d480 0045 00000000 0x0 0x0
0xffffde800000d500 0041 00000000 0x0 0x0
0xffffde800000d580 0041 00000000 0x0 0x0
0xffffde800000d600 0041 00000000 0x0 0x0
0xffffde800000d680 0045 00000000 0x0 0x0
0xffffde800000d700 0041 00000000 0x0 0x0
0xffffde800000d780 0045 00000000 0x0 0x0
0xffffde800000d800 0041 00000000 0x0 0x0
0xffffde800000d880 0045 00000000 0x0 0x0
0xffffde800000d900 0041 00000000 0x0 0x0
0xffffde800000d980 0041 00000000 0x0 0x0
0xffffde800000da00 0041 00000000 0x0 0x0
0xffffde800000da80 0041 00000000 0x0 0x0
0xffffde800000db00 0045 00000000 0x0 0x0
0xffffde800000db80 0045 00000000 0x0 0x0
0xffffde800000dc00 0041 00000000 0x0 0x0
0xffffde800000dc80 0041 00000000 0x0 0x0
0xffffde800000dd00 0041 00000000 0x0 0x0
0xffffde800000dd80 0041 00000000 0x0 0x0
0xffffde800000de00 0041 00000000 0x0 0x0
0xffffde800000de80 0041 00000000 0x0 0x0
0xffffde800000df00 0045 00000000 0x0 0x0
0xffffde800000df80 0045 00000000 0x0 0x0
0xffffde800000e000 0045 00000000 0x0 0x0
0xffffde800000e080 0041 00000000 0x0 0x0
0xffffde800000e100 0041 00000000 0x0 0x0
0xffffde800000e180 0045 00000000 0x0 0x0
0xffffde800000e200 0041 00000000 0x0 0x0
0xffffde800000e280 0045 00000000 0x0 0x0
0xffffde800000e300 0045 00000000 0x0 0x0
0xffffde800000e380 0041 00000000 0x0 0x0
0xffffde800000e400 0045 00000000 0x0 0x0
0xffffde800000e480 0041 00000000 0x0 0x0
0xffffde800000e500 0041 00000000 0x0 0x0
0xffffde800000e580 0041 00000000 0x0 0x0
0xffffde800000e600 0045 00000000 0x0 0x0
0xffffde800000e680 0041 00000000 0x0 0x0
0xffffde800000e700 0041 00000000 0x0 0x0
0xffffde800000e780 0041 00000000 0x0 0x0
0xffffde800000e800 0045 00000000 0x0 0x0
0xffffde800000e880 0041 00000000 0x0 0x0
0xffffde800000e900 0045 00000000 0x0 0x0
0xffffde800000e980 0041 00000000 0x0 0x0
0xffffde800000ea00 0041 00000000 0x0 0x0
0xffffde800000ea80 0045 00000000 0x0 0x0
0xffffde800000eb00 0041 00000000 0x0 0x0
0xffffde800000eb80 0045 00000000 0x0 0x0
0xffffde800000ec00 0041 00000000 0x0 0x0
0xffffde800000ec80 0045 00000000 0x0 0x0
0xffffde800000ed00 0041 00000000 0x0 0x0
0xffffde800000ed80 0041 00000000 0x0 0x0
0xffffde800000ee00 0041 00000000 0x0 0x0
0xffffde800000ee80 0041 00000000 0x0 0x0
0xffffde800000ef00 0041 00000000 0x0 0x0
0xffffde800000ef80 0041 00000000 0x0 0x0
0xffffde800000f000 0041 00000000 0x0 0x0
0xffffde800000f080 0041 00000000 0x0 0x0
0xffffde800000f100 0041 00000000 0x0 0x0
0xffffde800000f180 0041 00000000 0x0 0x0
0xffffde800000f200 0041 00000000 0x0 0x0
0xffffde800000f280 0045 00000000 0x0 0x0
0xffffde800000f300 0041 00000000 0x0 0x0
0xffffde800000f380 0041 00000000 0x0 0x0
0xffffde800000f400 0045 00000000 0x0 0x0
0xffffde800000f480 0045 00000000 0x0 0x0
0xffffde800000f500 0041 00000000 0x0 0x0
0xffffde800000f580 0041 00000000 0x0 0x0
0xffffde800000f600 0041 00000000 0x0 0x0
0xffffde800000f680 0041 00000000 0x0 0x0
0xffffde800000f700 0041 00000000 0x0 0x0
0xffffde800000f780 0041 00000000 0x0 0x0
0xffffde800000f800 0041 00000000 0x0 0x0
0xffffde800000f880 0041 00000000 0x0 0x0
0xffffde800000f900 0041 00000000 0x0 0x0
0xffffde800000f980 0045 00000000 0x0 0x0
0xffffde800000fa00 0041 00000000 0x0 0x0
0xffffde800000fa80 0041 00000000 0x0 0x0
0xffffde800000fb00 0041 00000000 0x0 0x0
0xffffde800000fb80 0041 00000000 0x0 0x0
0xffffde800000fc00 0045 00000000 0x0 0x0
0xffffde800000fc80 0045 00000000 0x0 0x0
0xffffde800000fd00 0041 00000000 0x0 0x0
0xffffde800000fd80 0041 00000000 0x0 0x0
0xffffde800000fe00 0041 00000000 0x0 0x0
0xffffde800000fe80 0041 00000000 0x0 0x0
0xffffde800000ff00 0041 00000000 0x0 0x0
0xffffde800000ff80 0041 00000000 0x0 0x0
0xffffde8000010000 0041 00000000 0x0 0x0
0xffffde8000010080 0041 00000000 0x0 0x0
0xffffde8000010100 0045 00000000 0x0 0x0
0xffffde8000010180 0045 00000000 0x0 0x0
0xffffde8000010200 0045 00000000 0x0 0x0
0xffffde8000010280 0041 00000000 0x0 0x0
0xffffde8000010300 0041 00000000 0x0 0x0
0xffffde8000010380 0041 00000000 0x0 0x0
0xffffde8000010400 0041 00000000 0x0 0x0
0xffffde8000010480 0041 00000000 0x0 0x0
0xffffde8000010500 0041 00000000 0x0 0x0
0xffffde8000010580 0041 00000000 0x0 0x0
0xffffde8000010600 0041 00000000 0x0 0x0
0xffffde8000010680 0041 00000000 0x0 0x0
0xffffde8000010700 0045 00000000 0x0 0x0
0xffffde8000010780 0041 00000000 0x0 0x0
0xffffde8000010800 0041 00000000 0x0 0x0
0xffffde8000010880 0045 00000000 0x0 0x0
0xffffde8000010900 0045 00000000 0x0 0x0
0xffffde8000010980 0045 00000000 0x0 0x0
0xffffde8000010a00 0045 00000000 0x0 0x0
0xffffde8000010a80 0045 00000000 0x0 0x0
0xffffde8000010b00 0041 00000000 0x0 0x0
0xffffde8000010b80 0041 00000000 0x0 0x0
0xffffde8000010c00 0041 00000000 0x0 0x0
0xffffde8000010c80 0041 00000000 0x0 0x0
0xffffde8000010d00 0041 00000000 0x0 0x0
0xffffde8000010d80 0041 00000000 0x0 0x0
0xffffde8000010e00 0041 00000000 0x0 0x0
0xffffde8000010e80 0041 00000000 0x0 0x0
0xffffde8000010f00 0041 00000000 0x0 0x0
0xffffde8000010f80 0041 00000000 0x0 0x0
0xffffde8000011000 0041 00000000 0x0 0x0
0xffffde8000011080 0045 00000000 0x0 0x0
0xffffde8000011100 0041 00000000 0x0 0x0
0xffffde8000011180 0041 00000000 0x0 0x0
0xffffde8000011200 0045 00000000 0x0 0x0
0xffffde8000011280 0041 00000000 0x0 0x0
0xffffde8000011300 0041 00000000 0x0 0x0
0xffffde8000011380 0041 00000000 0x0 0x0
0xffffde8000011400 0041 00000000 0x0 0x0
0xffffde8000011480 0041 00000000 0x0 0x0
0xffffde8000011500 0041 00000000 0x0 0x0
0xffffde8000011580 0041 00000000 0x0 0x0
0xffffde8000011600 0041 00000000 0x0 0x0
0xffffde8000011680 0041 00000000 0x0 0x0
0xffffde8000011700 0041 00000000 0x0 0x0
0xffffde8000011780 0045 00000000 0x0 0x0
0xffffde8000011800 0041 00000000 0x0 0x0
0xffffde8000011880 0041 00000000 0x0 0x0
0xffffde8000011900 0045 00000000 0x0 0x0
0xffffde8000011980 0041 00000000 0x0 0x0
0xffffde8000011a00 0041 00000000 0x0 0x0
0xffffde8000011a80 0041 00000000 0x0 0x0
0xffffde8000011b00 0045 00000000 0x0 0x0
0xffffde8000011b80 0041 00000000 0x0 0x0
0xffffde8000011c00 0041 00000000 0x0 0x0
0xffffde8000011c80 0041 00000000 0x0 0x0
0xffffde8000011d00 0041 00000000 0x0 0x0
0xffffde8000011d80 0041 00000000 0x0 0x0
0xffffde8000011e00 0045 00000000 0x0 0x0
0xffffde8000011e80 0045 00000000 0x0 0x0
0xffffde8000011f00 0041 00000000 0x0 0x0
0xffffde8000011f80 0041 00000000 0x0 0x0
0xffffde8000012000 0041 00000000 0x0 0x0
0xffffde8000012080 0041 00000000 0x0 0x0
0xffffde8000012100 0041 00000000 0x0 0x0
0xffffde8000012180 0045 00000000 0x0 0x0
0xffffde8000012200 0041 00000000 0x0 0x0
0xffffde8000012280 0041 00000000 0x0 0x0
0xffffde8000012300 0041 00000000 0x0 0x0
0xffffde8000012380 0041 00000000 0x0 0x0
0xffffde8000012400 0041 00000000 0x0 0x0
0xffffde8000012480 0041 00000000 0x0 0x0
0xffffde8000012500 0045 00000000 0x0 0x0
0xffffde8000012580 0041 00000000 0x0 0x0
0xffffde8000012600 0041 00000000 0x0 0x0
0xffffde8000012680 0041 00000000 0x0 0x0
0xffffde8000012700 0041 00000000 0x0 0x0
0xffffde8000012780 0041 00000000 0x0 0x0
0xffffde8000012800 0041 00000000 0x0 0x0
0xffffde8000012880 0041 00000000 0x0 0x0
0xffffde8000012900 0041 00000000 0x0 0x0
0xffffde8000012980 0041 00000000 0x0 0x0
0xffffde8000012a00 0041 00000000 0x0 0x0
0xffffde8000012a80 0041 00000000 0x0 0x0
0xffffde8000012b00 0041 00000000 0x0 0x0
0xffffde8000012b80 0041 00000000 0x0 0x0
0xffffde8000012c00 0041 00000000 0x0 0x0
0xffffde8000012c80 0045 00000000 0x0 0x0
0xffffde8000012d00 0001 00000000 0x0 0x0
0xffffde8000012d80 0001 00000000 0x0 0x0
0xffffde8000012e00 0001 00000000 0x0 0x0
0xffffde8000012e80 0001 00000000 0x0 0x0
0xffffde8000012f00 0001 00000000 0x0 0x0
0xffffde8000012f80 0001 00000000 0x0 0x0
0xffffde8000013000 0001 00000000 0x0 0x0
0xffffde8000013080 0001 00000000 0x0 0x0
0xffffde8000013100 0001 00000000 0x0 0x0
0xffffde8000013180 0001 00000000 0x0 0x0
0xffffde8000013200 0001 00000000 0x0 0x0
0xffffde8000013280 0001 00000000 0x0 0x0
0xffffde8000013300 0001 00000000 0x0 0x0
0xffffde8000013380 0001 00000000 0x0 0x0
0xffffde8000013400 0001 00000000 0x0 0x0
0xffffde8000013480 0001 00000000 0x0 0x0
0xffffde8000013500 0001 00000000 0x0 0x0
0xffffde8000013580 0001 00000000 0x0 0x0
0xffffde8000013600 0001 00000000 0x0 0x0
0xffffde8000013680 0001 00000000 0x0 0x0
0xffffde8000013700 0001 00000000 0x0 0x0
0xffffde8000013780 0001 00000000 0x0 0x0
0xffffde8000013800 0001 00000000 0x0 0x0
0xffffde8000013880 0001 00000000 0x0 0x0
0xffffde8000013900 0001 00000000 0x0 0x0
0xffffde8000013980 0001 00000000 0x0 0x0
0xffffde8000013a00 0001 00000000 0x0 0x0
0xffffde8000013a80 0001 00000000 0x0 0x0
0xffffde8000013b00 0001 00000000 0x0 0x0
0xffffde8000013b80 0001 00000000 0x0 0x0
0xffffde8000013c00 0001 00000000 0x0 0x0
0xffffde8000013c80 0001 00000000 0x0 0x0
0xffffde8000013d00 0001 00000000 0x0 0x0
0xffffde8000013d80 0001 00000000 0x0 0x0
0xffffde8000013e00 0001 00000000 0x0 0x0
0xffffde8000013e80 0001 00000000 0x0 0x0
0xffffde8000013f00 0001 00000000 0x0 0x0
0xffffde8000013f80 0001 00000000 0x0 0x0
0xffffde8000014000 0001 00000000 0x0 0x0
0xffffde8000014080 0001 00000000 0x0 0x0
0xffffde8000014100 0001 00000000 0x0 0x0
0xffffde8000014180 0001 00000000 0x0 0x0
0xffffde8000014200 0001 00000000 0x0 0x0
0xffffde8000014280 0001 00000000 0x0 0x0
0xffffde8000014300 0001 00000000 0x0 0x0
0xffffde8000014380 0001 00000000 0x0 0x0
0xffffde8000014400 0001 00000000 0x0 0x0
0xffffde8000014480 0001 00000000 0x0 0x0
0xffffde8000014500 0001 00000000 0x0 0x0
0xffffde8000014580 0001 00000000 0x0 0x0
0xffffde8000014600 0001 00000000 0x0 0x0
0xffffde8000014680 0001 00000000 0x0 0x0
0xffffde8000014700 0001 00000000 0x0 0x0
0xffffde8000014780 0001 00000000 0x0 0x0
0xffffde8000014800 0041 00000000 0x0 0x0
0xffffde8000014880 0041 00000000 0x0 0x0
0xffffde8000014900 0041 00000000 0x0 0x0
0xffffde8000014980 0041 00000000 0x0 0x0
0xffffde8000014a00 0041 00000000 0x0 0x0
0xffffde8000014a80 0041 00000000 0x0 0x0
0xffffde8000014b00 0041 00000000 0x0 0x0
0xffffde8000014b80 0041 00000000 0x0 0x0
0xffffde8000014c00 0041 00000000 0x0 0x0
0xffffde8000014c80 0041 00000000 0x0 0x0
0xffffde8000014d00 0041 00000000 0x0 0x0
0xffffde8000014d80 0041 00000000 0x0 0x0
0xffffde8000014e00 0041 00000000 0x0 0x0
0xffffde8000014e80 0041 00000000 0x0 0x0
0xffffde8000014f00 0041 00000000 0x0 0x0
0xffffde8000014f80 0041 00000000 0x0 0x0
0xffffde8000015000 0041 00000000 0x0 0x0
0xffffde8000015080 0041 00000000 0x0 0x0
0xffffde8000015100 0041 00000000 0x0 0x0
0xffffde8000015180 0041 00000000 0x0 0x0
0xffffde8000015200 0041 00000000 0x0 0x0
0xffffde8000015280 0041 00000000 0x0 0x0
0xffffde8000015300 0041 00000000 0x0 0x0
0xffffde8000015380 0041 00000000 0x0 0x0
0xffffde8000015400 0041 00000000 0x0 0x0
0xffffde8000015480 0041 00000000 0x0 0x0
0xffffde8000015500 0041 00000000 0x0 0x0
0xffffde8000015580 0041 00000000 0x0 0x0
0xffffde8000015600 0041 00000000 0x0 0x0
0xffffde8000015680 0041 00000000 0x0 0x0
0xffffde8000015700 0041 00000000 0x0 0x0
0xffffde8000015780 0041 00000000 0x0 0x0
0xffffde8000015800 0041 00000000 0x0 0x0
0xffffde8000015880 0041 00000000 0x0 0x0
0xffffde8000015900 0041 00000000 0x0 0x0
0xffffde8000015980 0041 00000000 0x0 0x0
0xffffde8000015a00 0041 00000000 0x0 0x0
0xffffde8000015a80 0041 00000000 0x0 0x0
0xffffde8000015b00 0041 00000000 0x0 0x0
0xffffde8000015b80 0041 00000000 0x0 0x0
0xffffde8000015c00 0041 00000000 0x0 0x0
0xffffde8000015c80 0041 00000000 0x0 0x0
0xffffde8000015d00 0001 00000000 0x0 0x0
0xffffde8000015d80 0001 00000000 0x0 0x0
0xffffde8000015e00 0001 00000000 0x0 0x0
0xffffde8000015e80 0001 00000000 0x0 0x0
0xffffde8000015f00 0001 00000000 0x0 0x0
0xffffde8000015f80 0001 00000000 0x0 0x0
0xffffde8000016000 0001 00000000 0x0 0x0
0xffffde8000016080 0001 00000000 0x0 0x0
0xffffde8000016100 0001 00000000 0x0 0x0
0xffffde8000016180 0001 00000000 0x0 0x0
0xffffde8000016200 0001 00000000 0x0 0x0
0xffffde8000016280 0001 00000000 0x0 0x0
0xffffde8000016300 0001 00000000 0x0 0x0
0xffffde8000016380 0001 00000000 0x0 0x0
0xffffde8000016400 0001 00000000 0x0 0x0
0xffffde8000016480 0001 00000000 0x0 0x0
0xffffde8000016500 0001 00000000 0x0 0x0
0xffffde8000016580 0001 00000000 0x0 0x0
0xffffde8000016600 0001 00000000 0x0 0x0
0xffffde8000016680 0001 00000000 0x0 0x0
0xffffde8000016700 0001 00000000 0x0 0x0
0xffffde8000016780 0001 00000000 0x0 0x0
0xffffde8000016800 0001 00000000 0x0 0x0
0xffffde8000016880 0001 00000000 0x0 0x0
0xffffde8000016900 0001 00000000 0x0 0x0
0xffffde8000016980 0001 00000000 0x0 0x0
0xffffde8000016a00 0001 00000000 0x0 0x0
0xffffde8000016a80 0001 00000000 0x0 0x0
0xffffde8000016b00 0001 00000000 0x0 0x0
0xffffde8000016b80 0001 00000000 0x0 0x0
0xffffde8000016c00 0001 00000000 0x0 0x0
0xffffde8000016c80 0001 00000000 0x0 0x0
0xffffde8000016d00 0001 00000000 0x0 0x0
0xffffde8000016d80 0001 00000000 0x0 0x0
0xffffde8000016e00 0001 00000000 0x0 0x0
0xffffde8000016e80 0001 00000000 0x0 0x0
0xffffde8000016f00 0001 00000000 0x0 0x0
0xffffde8000016f80 0001 00000000 0x0 0x0
0xffffde8000017000 0001 00000000 0x0 0x0
0xffffde8000017080 0001 00000000 0x0 0x0
0xffffde8000017100 0001 00000000 0x0 0x0
0xffffde8000017180 0001 00000000 0x0 0x0
0xffffde8000017200 0001 00000000 0x0 0x0
0xffffde8000017280 0001 00000000 0x0 0x0
0xffffde8000017300 0001 00000000 0x0 0x0
0xffffde8000017380 0001 00000000 0x0 0x0
0xffffde8000017400 0001 00000000 0x0 0x0
0xffffde8000017480 0001 00000000 0x0 0x0
0xffffde8000017500 0001 00000000 0x0 0x0
0xffffde8000017580 0001 00000000 0x0 0x0
0xffffde8000017600 0001 00000000 0x0 0x0
0xffffde8000017680 0001 00000000 0x0 0x0
0xffffde8000017700 0001 00000000 0x0 0x0
0xffffde8000017780 0001 00000000 0x0 0x0
0xffffde8000017800 0041 00000000 0x0 0x0
0xffffde8000017880 0041 00000000 0x0 0x0
0xffffde8000017900 0041 00000000 0x0 0x0
0xffffde8000017980 0041 00000000 0x0 0x0
0xffffde8000017a00 0041 00000000 0x0 0x0
0xffffde8000017a80 0041 00000000 0x0 0x0
0xffffde8000017b00 0041 00000000 0x0 0x0
0xffffde8000017b80 0041 00000000 0x0 0x0
0xffffde8000017c00 0041 00000000 0x0 0x0
0xffffde8000017c80 0041 00000000 0x0 0x0
0xffffde8000017d00 0041 00000000 0x0 0x0
0xffffde8000017d80 0041 00000000 0x0 0x0
0xffffde8000017e00 0041 00000000 0x0 0x0
0xffffde8000017e80 0041 00000000 0x0 0x0
0xffffde8000017f00 0041 00000000 0x0 0x0
0xffffde8000017f80 0041 00000000 0x0 0x0
0xffffde8000018000 0041 00000000 0x0 0x0
0xffffde8000018080 0041 00000000 0x0 0x0
0xffffde8000018100 0041 00000000 0x0 0x0
0xffffde8000018180 0041 00000000 0x0 0x0
0xffffde8000018200 0041 00000000 0x0 0x0
0xffffde8000018280 0041 00000000 0x0 0x0
0xffffde8000018300 0041 00000000 0x0 0x0
0xffffde8000018380 0041 00000000 0x0 0x0
0xffffde8000018400 0041 00000000 0x0 0x0
0xffffde8000018480 0041 00000000 0x0 0x0
0xffffde8000018500 0041 00000000 0x0 0x0
0xffffde8000018580 0041 00000000 0x0 0x0
0xffffde8000018600 0041 00000000 0x0 0x0
0xffffde8000018680 0041 00000000 0x0 0x0
0xffffde8000018700 0041 00000000 0x0 0x0
0xffffde8000018780 0041 00000000 0x0 0x0
0xffffde8000018800 0041 00000000 0x0 0x0
0xffffde8000018880 0041 00000000 0x0 0x0
0xffffde8000018900 0041 00000000 0x0 0x0
0xffffde8000018980 0041 00000000 0x0 0x0
0xffffde8000018a00 0041 00000000 0x0 0x0
0xffffde8000018a80 0041 00000000 0x0 0x0
0xffffde8000018b00 0041 00000000 0x0 0x0
0xffffde8000018b80 0041 00000000 0x0 0x0
0xffffde8000018c00 0041 00000000 0x0 0x0
0xffffde8000018c80 0041 00000000 0x0 0x0
0xffffde8000018d00 0041 00000000 0x0 0x0
0xffffde8000018d80 0001 00000000 0x0 0x0
0xffffde8000018e00 0001 00000000 0x0 0x0
0xffffde8000018e80 0001 00000000 0x0 0x0
0xffffde8000018f00 0001 00000000 0x0 0x0
0xffffde8000018f80 0001 00000000 0x0 0x0
0xffffde8000019000 0001 00000000 0x0 0x0
0xffffde8000019080 0001 00000000 0x0 0x0
0xffffde8000019100 0001 00000000 0x0 0x0
0xffffde8000019180 0001 00000000 0x0 0x0
0xffffde8000019200 0001 00000000 0x0 0x0
0xffffde8000019280 0001 00000000 0x0 0x0
0xffffde8000019300 0001 00000000 0x0 0x0
0xffffde8000019380 0001 00000000 0x0 0x0
0xffffde8000019400 0001 00000000 0x0 0x0
0xffffde8000019480 0001 00000000 0x0 0x0
0xffffde8000019500 0001 00000000 0x0 0x0
0xffffde8000019580 0001 00000000 0x0 0x0
0xffffde8000019600 0001 00000000 0x0 0x0
0xffffde8000019680 0001 00000000 0x0 0x0
0xffffde8000019700 0001 00000000 0x0 0x0
0xffffde8000019780 0001 00000000 0x0 0x0
0xffffde8000019800 0001 00000000 0x0 0x0
0xffffde8000019880 0001 00000000 0x0 0x0
0xffffde8000019900 0001 00000000 0x0 0x0
0xffffde8000019980 0001 00000000 0x0 0x0
0xffffde8000019a00 0001 00000000 0x0 0x0
0xffffde8000019a80 0001 00000000 0x0 0x0
0xffffde8000019b00 0001 00000000 0x0 0x0
0xffffde8000019b80 0001 00000000 0x0 0x0
0xffffde8000019c00 0001 00000000 0x0 0x0
0xffffde8000019c80 0001 00000000 0x0 0x0
0xffffde8000019d00 0001 00000000 0x0 0x0
0xffffde8000019d80 0001 00000000 0x0 0x0
0xffffde8000019e00 0001 00000000 0x0 0x0
0xffffde8000019e80 0001 00000000 0x0 0x0
0xffffde8000019f00 0001 00000000 0x0 0x0
0xffffde8000019f80 0001 00000000 0x0 0x0
0xffffde800001a000 0001 00000000 0x0 0x0
0xffffde800001a080 0001 00000000 0x0 0x0
0xffffde800001a100 0001 00000000 0x0 0x0
0xffffde800001a180 0001 00000000 0x0 0x0
0xffffde800001a200 0001 00000000 0x0 0x0
0xffffde800001a280 0001 00000000 0x0 0x0
0xffffde800001a300 0001 00000000 0x0 0x0
0xffffde800001a380 0001 00000000 0x0 0x0
0xffffde800001a400 0001 00000000 0x0 0x0
0xffffde800001a480 0001 00000000 0x0 0x0
0xffffde800001a500 0001 00000000 0x0 0x0
0xffffde800001a580 0001 00000000 0x0 0x0
0xffffde800001a600 0001 00000000 0x0 0x0
0xffffde800001a680 0001 00000000 0x0 0x0
0xffffde800001a700 0001 00000000 0x0 0x0
0xffffde800001a780 0001 00000000 0x0 0x0
0xffffde800001a800 0001 00000000 0x0 0x0
0xffffde800001a880 0041 00000000 0x0 0x0
0xffffde800001a900 0041 00000000 0x0 0x0
0xffffde800001a980 0041 00000000 0x0 0x0
0xffffde800001aa00 0041 00000000 0x0 0x0
0xffffde800001aa80 0041 00000000 0x0 0x0
0xffffde800001ab00 0041 00000000 0x0 0x0
0xffffde800001ab80 0041 00000000 0x0 0x0
0xffffde800001ac00 0041 00000000 0x0 0x0
0xffffde800001ac80 0041 00000000 0x0 0x0
0xffffde800001ad00 0041 00000000 0x0 0x0
0xffffde800001ad80 0041 00000000 0x0 0x0
0xffffde800001ae00 0041 00000000 0x0 0x0
0xffffde800001ae80 0041 00000000 0x0 0x0
0xffffde800001af00 0041 00000000 0x0 0x0
0xffffde800001af80 0041 00000000 0x0 0x0
0xffffde800001b000 0041 00000000 0x0 0x0
0xffffde800001b080 0041 00000000 0x0 0x0
0xffffde800001b100 0041 00000000 0x0 0x0
0xffffde800001b180 0041 00000000 0x0 0x0
0xffffde800001b200 0041 00000000 0x0 0x0
0xffffde800001b280 0041 00000000 0x0 0x0
0xffffde800001b300 0041 00000000 0x0 0x0
0xffffde800001b380 0041 00000000 0x0 0x0
0xffffde800001b400 0041 00000000 0x0 0x0
0xffffde800001b480 0041 00000000 0x0 0x0
0xffffde800001b500 0041 00000000 0x0 0x0
0xffffde800001b580 0041 00000000 0x0 0x0
0xffffde800001b600 0041 00000000 0x0 0x0
0xffffde800001b680 0041 00000000 0x0 0x0
0xffffde80

Tested on:

commit: 6ac77be6 Localize addr and buf. NFC.
git tree: https://github.com/NetBSD/src trunk

console output: https://syzkaller.appspot.com/x/log.txt?x=15a7db75080000

kernel config: https://syzkaller.appspot.com/x/.config?x=1420f906d33d9f1f
dashboard link: https://syzkaller.appspot.com/bug?extid=1bee937496ae35ea301c
compiler: g++ (Debian 10.2.1-6) 10.2.1 20210110

patch: https://syzkaller.appspot.com/x/patch.diff?x=10ccb38b080000

syzbot

unread,

Sep 3, 2022, 8:13:16 AM9/3/22

to rias...@netbsd.org, syzkaller-...@googlegroups.com

Hello,

syzbot tried to test the proposed patch but the build/boot failed:

sys/kern/kern_ktrace.c:1488: error: unterminated argument list invoking macro "KASSERT"
sys/kern/kern_ktrace.c:1428:2: error: 'KASSERT' undeclared (first use in this function)
sys/kern/kern_ktrace.c:1428:9: error: expected ';' at end of input
sys/kern/kern_ktrace.c:1428:2: error: expected declaration or statement at end of input
sys/kern/kern_ktrace.c:137:12: error: 'ktrcanset' used but never defined [-Werror]
ERROR: Failed to make all in "sys/arch/amd64/compile/obj/GENERIC_SYZKALLER"

Tested on:

commit: 6ac77be6 Localize addr and buf. NFC.
git tree: https://github.com/NetBSD/src trunk

dashboard link: https://syzkaller.appspot.com/bug?extid=1bee937496ae35ea301c
compiler: g++ (Debian 10.2.1-6) 10.2.1 20210110

patch: https://syzkaller.appspot.com/x/patch.diff?x=16ccb38b080000

syzbot

unread,

Sep 3, 2022, 12:15:12 PM9/3/22

to rias...@netbsd.org, syzkaller-...@googlegroups.com

Hello,

syzbot has tested the proposed patch but the reproducer is still triggering an issue:

assert failed: callout_pending(&ktd->ktd_wakch)

[ 54.6793565] panic: kernel diagnostic assertion "callout_pending(&ktd->ktd_wakch)" failed: file "/syzkaller/jobs/netbsd/kernel/sys/kern/kern_ktrace.c", line 411
[ 54.6938581] cpu0: Begin traceback...
[ 54.7093475] vpanic() at netbsd:vpanic+0x2f2 sys/kern/subr_prf.c:293
[ 54.7693490] kern_assert() at netbsd:kern_assert+0x65 sys/arch/amd64/amd64/db_disasm.c:1074
[ 54.8293470] ktraddentry() at netbsd:ktraddentry+0xae9 sys/kern/kern_ktrace.c:411
[ 54.8693510] ktr_sysret() at netbsd:ktr_sysret+0x235 sys/kern/kern_ktrace.c:599
[ 54.9093471] trace_exit() at netbsd:trace_exit+0x24d ktrsysret sys/sys/ktrace.h:420 [inline]
[ 54.9093471] trace_exit() at netbsd:trace_exit+0x24d sys/kern/kern_syscall.c:299
[ 54.9593477] syscall() at netbsd:syscall+0x32f sys/arch/x86/x86/syscall.c:140
[ 54.9693495] --- syscall (number 427) ---
[ 54.9893482] netbsd:syscall+0x32f:
[ 54.9893482] cpu0: End traceback...
[ 54.9893482] fatal breakpoint trap in supervisor mode
[ 54.9995186] trap type 1 code 0 rip 0xffffffff80221ab5 cs 0x8 rflags 0x246 cr2 0x200001c0 ilevel 0 rsp 0xffffbf82485dad90
[ 55.0120560] curlwp 0xffffe0f5aaa05900 pid 4685.5317 lowest kstack 0xffffbf82485d62c0
Stopped in pid 4685.5317 (syz-executor.5) at netbsd:breakpoint+0x5: leave

ktraddentry() at netbsd:ktraddentry+0xae9 sys/kern/kern_ktrace.c:411
ktr_sysret() at netbsd:ktr_sysret+0x235 sys/kern/kern_ktrace.c:599

trace_exit() at netbsd:trace_exit+0x24d ktrsysret sys/sys/ktrace.h:420 [inline]
trace_exit() at netbsd:trace_exit+0x24d sys/kern/kern_syscall.c:299
syscall() at netbsd:syscall+0x32f sys/arch/x86/x86/syscall.c:140
--- syscall (number 427) ---
netbsd:syscall+0x32f:

Panic string: kernel diagnostic assertion "callout_pending(&ktd->ktd_wakch)" failed: file "/syzkaller/jobs/netbsd/kernel/sys/kern/kern_ktrace.c", line 411

PID LID S CPU FLAGS STRUCT LWP * NAME WAIT

5467 5328 2 0 0 ffffe0f5ae127940 syz-executor.4
5467 5804 2 0 0 ffffe0f5ae054a40 syz-executor.4
5467 5467 2 1 10000000 ffffe0f5ae462480 syz-executor.4
5353 5930 2 0 0 ffffe0f5add4d540 syz-executor.1
5353 5226 2 0 0 ffffe0f5aa938bc0 syz-executor.1
5353 4175 2 0 0 ffffe0f5a9d2e700 syz-executor.1
5353 >5353 7 1 10000000 ffffe0f5aaa054c0 syz-executor.1
4685 >5317 7 0 100 ffffe0f5aaa05900 syz-executor.5
4685 4685 2 0 10000000 ffffe0f5ae968a00 syz-executor.5
5717 5552 2 0 100 ffffe0f5ae968180 syz-executor.3
5717 5717 2 0 10000000 ffffe0f5ae0be580 syz-executor.3
1119 1119 2 1 140 ffffe0f5ab148580 syz-executor.5
1114 1114 3 0 180 ffffe0f5ab84fa00 syz-executor.3 nanoslp
1279 1279 2 0 40 ffffe0f5ab724600 syz-executor.2
1213 1213 3 0 180 ffffe0f5a9bed6c0 syz-executor.4 nanoslp
331 331 3 0 180 ffffe0f5a87d7a40 syz-executor.1 nanoslp
330 330 2 0 40 ffffe0f5a988c680 syz-executor.0
1198 860 3 0 180 ffffe0f5ab84f5c0 syz-execprog parked
1198 1356 3 0 180 ffffe0f5ae12db40 syz-execprog parked
1198 1211 3 0 180 ffffe0f5ab1489c0 syz-execprog parked
1198 1312 3 1 180 ffffe0f5ae0cdb80 syz-execprog kqueue
1198 1245 3 0 180 ffffe0f5ae0cd300 syz-execprog wait
1198 1388 3 0 180 ffffe0f5ae12d700 syz-execprog wait
1198 1323 3 0 180 ffffe0f5ac2d1b00 syz-execprog wait
1198 1238 3 0 180 ffffe0f5a9bed280 syz-execprog wait
1198 1202 3 1 180 ffffe0f5aaafb240 syz-execprog parked
1198 1206 3 0 180 ffffe0f5aa9d2480 syz-execprog parked
1198 1199 3 0 180 ffffe0f5a988cac0 syz-execprog wait
1198 1197 3 1 1c0 ffffe0f5ab7241c0 syz-execprog wait
1198 1203 3 1 180 ffffe0f5ac2d16c0 syz-execprog parked
1198 1198 3 1 180 ffffe0f5ab724a40 syz-execprog parked
1241 1241 3 1 180 ffffe0f5aacfa980 sshd select
1086 1086 3 1 180 ffffe0f5aa87d640 getty nanoslp
1082 1082 3 1 180 ffffe0f5ac2d1280 getty nanoslp
1080 1080 3 0 180 ffffe0f5aaafbac0 getty nanoslp
1127 1127 3 1 1c0 ffffe0f5aaafb680 getty ttyraw
1094 1094 3 1 180 ffffe0f5aa87d200 sshd select
953 953 3 0 180 ffffe0f5aa87da80 powerd kqueue
693 693 3 0 180 ffffe0f5aa938780 syslogd kqueue
547 547 3 1 180 ffffe0f5a9f7f740 dhcpcd poll
742 742 3 0 180 ffffe0f5a9f7f300 dhcpcd poll
465 465 3 1 180 ffffe0f5aaa05080 dhcpcd poll
594 594 3 1 180 ffffe0f5a9bedb00 dhcpcd poll
292 292 3 0 180 ffffe0f5aa938340 dhcpcd poll
290 290 3 1 180 ffffe0f5a9f7fb80 dhcpcd poll
289 289 3 1 180 ffffe0f5a9d2eb40 dhcpcd poll
1 1 3 0 180 ffffe0f5a165b980 init wait
0 5705 3 1 200 ffffe0f5ae4628c0 ktrace ktrwait
0 5861 3 1 200 ffffe0f5aa9d28c0 ktrace ktrwait
0 4696 3 0 200 ffffe0f5ae127500 ktrace ktrwait
0 974 3 0 200 ffffe0f5a987f200 physiod physiod
0 195 3 0 200 ffffe0f5a988c240 pooldrain pooldrain
0 194 3 0 200 ffffe0f5a987fa80 ioflush syncer
0 193 3 1 200 ffffe0f5a987f640 pgdaemon pgdaemon
0 169 3 1 200 ffffe0f5a87d7600 usb7 usbevt
0 168 3 1 200 ffffe0f5a87d71c0 usb6 usbevt
0 167 3 1 200 ffffe0f5a5752a00 usb5 usbevt
0 166 3 0 200 ffffe0f5a57525c0 usb4 usbevt
0 165 3 0 200 ffffe0f5a5752180 usb3 usbevt
0 31 3 0 200 ffffe0f5a26fd9c0 usb2 usbevt
0 63 3 0 200 ffffe0f5a26fd580 usb1 usbevt
0 126 3 1 200 ffffe0f5a26fd140 usb0 usbevt
0 125 3 1 200 ffffe0f5a14e0740 usbtask-dr usbtsk
0 124 3 0 200 ffffe0f59faa9b00 usbtask-hc usbtsk
0 123 3 0 200 ffffe0f5a14e0b80 npfgc0 npfgcw
0 122 3 1 200 ffffe0f5a165b540 rt_free rt_free
0 121 3 1 200 ffffe0f5a165b100 unpgc unpgc
0 120 3 0 200 ffffe0f5a1646940 key_timehandler key_timehandler
0 119 3 1 200 ffffe0f5a1646500 icmp6_wqinput/1 icmp6_wqinput
0 118 3 0 200 ffffe0f5a16460c0 icmp6_wqinput/0 icmp6_wqinput
0 117 3 0 200 ffffe0f5a1639900 nd6_timer nd6_timer
0 116 3 1 200 ffffe0f5a16394c0 carp6_wqinput/1 carp6_wqinput
0 115 3 0 200 ffffe0f5a1639080 carp6_wqinput/0 carp6_wqinput
0 114 3 1 200 ffffe0f5a16148c0 carp_wqinput/1 carp_wqinput
0 113 3 0 200 ffffe0f5a1614480 carp_wqinput/0 carp_wqinput
0 112 3 1 200 ffffe0f5a1614040 icmp_wqinput/1 icmp_wqinput
0 111 3 0 200 ffffe0f5a15d7bc0 icmp_wqinput/0 icmp_wqinput
0 110 3 0 200 ffffe0f5a15d7340 rt_timer rt_timer
0 109 3 0 200 ffffe0f5a15d7780 vmem_rehash vmem_rehash
0 100 3 0 200 ffffe0f5a14e0300 entbutler entropy
0 99 3 1 200 ffffe0f5a0f48b40 viomb balloon
0 98 3 1 200 ffffe0f5a0f48700 vioif0_txrx/1 vioif0_txrx
0 97 3 0 200 ffffe0f5a0f482c0 vioif0_txrx/0 vioif0_txrx
0 30 3 1 200 ffffe0f59faa96c0 scsibus0 sccomp
0 29 3 0 200 ffffe0f59faa9280 pms0 pmsreset
0 28 3 1 200 ffffe0f59f9acac0 xcall/1 xcall
0 27 1 1 200 ffffe0f59f9ac680 softser/1
0 26 1 1 200 ffffe0f59f9ac240 softclk/1
0 25 1 1 200 ffffe0f59f987a80 softbio/1
0 24 1 1 200 ffffe0f59f987640 softnet/1
0 23 1 1 201 ffffe0f59f987200 idle/1
0 22 3 1 200 ffffe0f6cdd2da40 lnxsyswq lnxsyswq
0 21 3 1 200 ffffe0f6cdd2d600 lnxubdwq lnxubdwq
0 20 3 0 200 ffffe0f6cdd2d1c0 lnxpwrwq lnxpwrwq
0 19 3 1 200 ffffe0f6cdd34a00 lnxlngwq lnxlngwq
0 18 3 1 200 ffffe0f6cdd345c0 lnxhipwq lnxhipwq
0 17 3 1 200 ffffe0f6cdd34180 lnxrcugc lnxrcugc
0 16 3 0 200 ffffe0f6cdd539c0 sysmon smtaskq
0 15 3 1 200 ffffe0f6cdd53580 pmfsuspend pmfsuspend
0 14 3 0 200 ffffe0f6cdd53140 pmfevent pmfevent
0 13 3 1 200 ffffe0f6cdd5e980 sopendfree sopendfr
0 12 3 0 200 ffffe0f6cdd5e540 ifwdog ifwdog
0 11 3 0 200 ffffe0f6cdd5e100 iflnkst iflnkst
0 10 3 1 200 ffffe0f6ced95940 nfssilly nfssilly
0 9 3 0 200 ffffe0f6ced95500 vdrain vdrain
0 8 3 1 200 ffffe0f6ced950c0 modunload mod_unld
0 7 3 0 200 ffffe0f6cedba900 xcall/0 xcall
0 6 1 0 200 ffffe0f6cedba4c0 softser/0
0 5 3 0 200 ffffe0f6cedba080 softclk/0 tstile
0 4 1 0 200 ffffe0f6cedeb8c0 softbio/0
0 3 1 0 200 ffffe0f6cedeb480 softnet/0
0 2 1 0 201 ffffe0f6cedeb040 idle/0
0 0 3 1 200 ffffffff86740c80 swapper uvm
[Locks tracked through LWPs]

****** LWP 5353.5353 (syz-executor.1) @ 0xffffe0f5aaa054c0, l_stat=7

*** Locks held:

* Lock 0 (initialized at netbsd:uvmspace_alloc+0x339 uvm_map_setup sys/uvm/uvm_map.c:4772 [inline])
* Lock 0 (initialized at netbsd:uvmspace_alloc+0x339 uvmspace_init sys/uvm/uvm_map.c:4115 [inline])
* Lock 0 (initialized at netbsd:uvmspace_alloc+0x339 sys/uvm/uvm_map.c:4094)

lock address : ffffe0f5a167eb40

type : sleep/adaptive
initialized : netbsd:uvmspace_alloc+0x339

shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 1

relevant lwp : 0xffffe0f5aaa054c0 last held: 0xffffe0f5aaa054c0
last locked* : netbsd:vm_map_lock+0x146
unlocked : netbsd:uvm_fault_internal+0x3949

owner/count : 000000000000000000 flags : 000000000000000000
Turnstile: no active turnstile for this lock.

*** Locks wanted: none

****** LWP 4685.5317 (syz-executor.5) @ 0xffffe0f5aaa05900, l_stat=7

*** Locks held:

* Lock 0 (initialized at netbsd:ktrinit+0x20 sys/kern/kern_ktrace.c:266)
lock address : netbsd:ktrace_lock
type : sleep/adaptive
initialized : netbsd:ktrinit+0x20
shared holds : 0 exclusive: 1

shares wanted: 0 exclusive: 1

relevant cpu : 0 last held: 0

relevant lwp : 0xffffe0f5aaa05900 last held: 0xffffe0f5aaa05900

last locked* : netbsd:ktraddentry+0x58
unlocked : netbsd:ktraddentry+0x790

owner field : 0xffffe0f5aaa05900 wait/spin: 1/0

Turnstile:
=> 0 waiting readers:

=> 1 waiting writers: 0xffffe0f6cedba080

*** Locks wanted: none

****** LWP 1279.1279 (syz-executor.2) @ 0xffffe0f5ab724600, l_stat=2

*** Locks held:

* Lock 0 (initialized at netbsd:vcache_alloc+0xba sys/kern/vfs_vnode.c:1392)

lock address : ffffe0f5ae205c40

type : sleep/adaptive
initialized : netbsd:vcache_alloc+0xba
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0

relevant lwp : 0xffffe0f5ab724600 last held: 0xffffe0f5ab724600

last locked* : netbsd:genfs_lock+0x220
unlocked : netbsd:genfs_unlock+0x50

owner/count : 0xffffe0f5ab724600 flags : 0x0000000000000004

Turnstile: no active turnstile for this lock.

* Lock 1 (initialized at netbsd:vcache_alloc+0xba sys/kern/vfs_vnode.c:1392)

lock address : ffffe0f5ae205ec0

type : sleep/adaptive
initialized : netbsd:vcache_alloc+0xba
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0

relevant lwp : 0xffffe0f5ab724600 last held: 0xffffe0f5ab724600

last locked* : netbsd:genfs_lock+0x220
unlocked : 0

owner/count : 0xffffe0f5ab724600 flags : 0x0000000000000004

Turnstile: no active turnstile for this lock.

*** Locks wanted: none

****** LWP 330.330 (syz-executor.0) @ 0xffffe0f5a988c680, l_stat=2

*** Locks held:

lock address : ffffe0f5aa640890

type : sleep/adaptive
initialized : netbsd:uvmspace_alloc+0x339

shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0

relevant lwp : 0xffffe0f5a988c680 last held: 0xffffe0f5a988c680
last locked* : netbsd:vm_map_lock+0x146
unlocked : netbsd:uvm_fault_upper_enter+0x473
owner/count : 0xffffe0f5a988c680 flags : 0x0000000000000004

Turnstile: no active turnstile for this lock.

*** Locks wanted: none

****** LWP 742.742 (dhcpcd) @ 0xffffe0f5a9f7f300, l_stat=3

relevant cpu : 0 last held: 0

relevant lwp : 0xffffe0f5a9f7f300 last held: 000000000000000000

last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 465.465 (dhcpcd) @ 0xffffe0f5aaa05080, l_stat=3

relevant lwp : 0xffffe0f5aaa05080 last held: 000000000000000000

last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 290.290 (dhcpcd) @ 0xffffe0f5a9f7fb80, l_stat=3

relevant lwp : 0xffffe0f5a9f7fb80 last held: 000000000000000000

last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 289.289 (dhcpcd) @ 0xffffe0f5a9d2eb40, l_stat=3

relevant lwp : 0xffffe0f5a9d2eb40 last held: 000000000000000000

last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 0.11 (iflnkst) @ 0xffffe0f6cdd5e100, l_stat=3

relevant cpu : 0 last held: 0

relevant lwp : 0xffffe0f6cdd5e100 last held: 000000000000000000

last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 0.5 (softclk/0) @ 0xffffe0f6cedba080, l_stat=3

relevant cpu : 0 last held: 0

relevant lwp : 0xffffe0f6cedba080 last held: 000000000000000000

last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 0.0 (swapper) @ 0xffffffff86740c80, l_stat=3

relevant lwp : 0xffffffff86740c80 last held: 000000000000000000

last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

[Locks tracked through CPUs]

******* Locks held on cpu0:

* Lock 0 (initialized at netbsd:kprintf_init+0x72 sys/kern/subr_prf.c:157)
lock address : netbsd:kprintf_mtx
type : spin
initialized : netbsd:kprintf_init+0x72
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0

relevant lwp : 0xffffe0f5aaa05900 last held: 0xffffe0f5aaa05900

last locked* : netbsd:kprintf_lock+0x50
unlocked : netbsd:kprintf_unlock+0x70
owner field : 0x0000000000000800 wait/spin: 0/1

PAGE FLAG PQ UOBJECT UANON

0xffffbf8000007180 0045 00000000 0x0 0x0
0xffffbf8000007200 0045 00000000 0x0 0x0
0xffffbf8000007280 0045 00000000 0x0 0x0
0xffffbf8000007300 0045 00000000 0x0 0x0
0xffffbf8000007380 0045 00000000 0x0 0x0
0xffffbf8000007400 0045 00000000 0x0 0x0
0xffffbf8000007480 0045 00000000 0x0 0x0
0xffffbf8000007500 0045 00000000 0x0 0x0
0xffffbf8000007580 0045 00000000 0x0 0x0
0xffffbf8000007600 0045 00000000 0x0 0x0
0xffffbf8000007680 0041 00000000 0x0 0x0
0xffffbf8000007700 0041 00000000 0x0 0x0
0xffffbf8000007780 0041 00000000 0x0 0x0
0xffffbf8000007800 0041 00000000 0x0 0x0
0xffffbf8000007880 0045 00000000 0x0 0x0
0xffffbf8000007900 0045 00000000 0x0 0x0
0xffffbf8000007980 0041 00000000 0x0 0x0

0xffffbf8000007a00 0041 00000000 0x0 0x0

0xffffbf8000007a80 0041 00000000 0x0 0x0
0xffffbf8000007b00 0041 00000000 0x0 0x0
0xffffbf8000007b80 0041 00000000 0x0 0x0
0xffffbf8000007c00 0041 00000000 0x0 0x0
0xffffbf8000007c80 0041 00000000 0x0 0x0
0xffffbf8000007d00 0041 00000000 0x0 0x0
0xffffbf8000007d80 0041 00000000 0x0 0x0
0xffffbf8000007e00 0041 00000000 0x0 0x0
0xffffbf8000007e80 0041 00000000 0x0 0x0
0xffffbf8000007f00 0041 00000000 0x0 0x0
0xffffbf8000007f80 0041 00000000 0x0 0x0
0xffffbf8000008000 0041 00000000 0x0 0x0
0xffffbf8000008080 0041 00000000 0x0 0x0
0xffffbf8000008100 0041 00000000 0x0 0x0
0xffffbf8000008180 0041 00000000 0x0 0x0
0xffffbf8000008200 0041 00000000 0x0 0x0
0xffffbf8000008280 0041 00000000 0x0 0x0
0xffffbf8000008300 0041 00000000 0x0 0x0
0xffffbf8000008380 0041 00000000 0x0 0x0
0xffffbf8000008400 0041 00000000 0x0 0x0
0xffffbf8000008480 0041 00000000 0x0 0x0
0xffffbf8000008500 0041 00000000 0x0 0x0
0xffffbf8000008580 0041 00000000 0x0 0x0
0xffffbf8000008600 0045 00000000 0x0 0x0
0xffffbf8000008680 0041 00000000 0x0 0x0
0xffffbf8000008700 0041 00000000 0x0 0x0
0xffffbf8000008780 0041 00000000 0x0 0x0
0xffffbf8000008800 0045 00000000 0x0 0x0
0xffffbf8000008880 0041 00000000 0x0 0x0
0xffffbf8000008900 0041 00000000 0x0 0x0
0xffffbf8000008980 0041 00000000 0x0 0x0
0xffffbf8000008a00 0041 00000000 0x0 0x0
0xffffbf8000008a80 0041 00000000 0x0 0x0
0xffffbf8000008b00 0041 00000000 0x0 0x0
0xffffbf8000008b80 0041 00000000 0x0 0x0
0xffffbf8000008c00 0041 00000000 0x0 0x0
0xffffbf8000008c80 0041 00000000 0x0 0x0
0xffffbf8000008d00 0041 00000000 0x0 0x0
0xffffbf8000008d80 0041 00000000 0x0 0x0
0xffffbf8000008e00 0041 00000000 0x0 0x0
0xffffbf8000008e80 0041 00000000 0x0 0x0
0xffffbf8000008f00 0041 00000000 0x0 0x0
0xffffbf8000008f80 0041 00000000 0x0 0x0
0xffffbf8000009000 0041 00000000 0x0 0x0
0xffffbf8000009080 0041 00000000 0x0 0x0
0xffffbf8000009100 0045 00000000 0x0 0x0
0xffffbf8000009180 0041 00000000 0x0 0x0
0xffffbf8000009200 0041 00000000 0x0 0x0
0xffffbf8000009280 0041 00000000 0x0 0x0
0xffffbf8000009300 0041 00000000 0x0 0x0
0xffffbf8000009380 0041 00000000 0x0 0x0
0xffffbf8000009400 0041 00000000 0x0 0x0
0xffffbf8000009480 0045 00000000 0x0 0x0
0xffffbf8000009500 0041 00000000 0x0 0x0
0xffffbf8000009580 0041 00000000 0x0 0x0

0xffffbf8000009600 0041 00000000 0x0 0x0

0xffffbf8000009680 0041 00000000 0x0 0x0

0xffffbf8000009700 0041 00000000 0x0 0x0

0xffffbf8000009780 0041 00000000 0x0 0x0

0xffffbf8000009800 0041 00000000 0x0 0x0

0xffffbf8000009880 0041 00000000 0x0 0x0

0xffffbf8000009900 0041 00000000 0x0 0x0

0xffffbf8000009980 0041 00000000 0x0 0x0
0xffffbf8000009a00 0041 00000000 0x0 0x0
0xffffbf8000009a80 0045 00000000 0x0 0x0
0xffffbf8000009b00 0041 00000000 0x0 0x0
0xffffbf8000009b80 0041 00000000 0x0 0x0
0xffffbf8000009c00 0041 00000000 0x0 0x0
0xffffbf8000009c80 0041 00000000 0x0 0x0
0xffffbf8000009d00 0041 00000000 0x0 0x0
0xffffbf8000009d80 0041 00000000 0x0 0x0
0xffffbf8000009e00 0041 00000000 0x0 0x0
0xffffbf8000009e80 0041 00000000 0x0 0x0
0xffffbf8000009f00 0041 00000000 0x0 0x0
0xffffbf8000009f80 0041 00000000 0x0 0x0
0xffffbf800000a000 0041 00000000 0x0 0x0

0xffffbf800000a080 0041 00000000 0x0 0x0

0xffffbf800000a100 0041 00000000 0x0 0x0

0xffffbf800000a180 0041 00000000 0x0 0x0

0xffffbf800000a200 0041 00000000 0x0 0x0

0xffffbf800000a280 0041 00000000 0x0 0x0

0xffffbf800000a300 0041 00000000 0x0 0x0

0xffffbf800000a380 0041 00000000 0x0 0x0

0xffffbf800000a400 0041 00000000 0x0 0x0

0xffffbf800000a480 0041 00000000 0x0 0x0

0xffffbf800000a500 0041 00000000 0x0 0x0
0xffffbf800000a580 0041 00000000 0x0 0x0
0xffffbf800000a600 0041 00000000 0x0 0x0
0xffffbf800000a680 0041 00000000 0x0 0x0
0xffffbf800000a700 0041 00000000 0x0 0x0
0xffffbf800000a780 0041 00000000 0x0 0x0
0xffffbf800000a800 0041 00000000 0x0 0x0
0xffffbf800000a880 0041 00000000 0x0 0x0
0xffffbf800000a900 0041 00000000 0x0 0x0
0xffffbf800000a980 0041 00000000 0x0 0x0
0xffffbf800000aa00 0041 00000000 0x0 0x0
0xffffbf800000aa80 0041 00000000 0x0 0x0
0xffffbf800000ab00 0041 00000000 0x0 0x0
0xffffbf800000ab80 0041 00000000 0x0 0x0
0xffffbf800000ac00 0041 00000000 0x0 0x0
0xffffbf800000ac80 0041 00000000 0x0 0x0
0xffffbf800000ad00 0041 00000000 0x0 0x0
0xffffbf800000ad80 0041 00000000 0x0 0x0
0xffffbf800000ae00 0041 00000000 0x0 0x0
0xffffbf800000ae80 0045 00000000 0x0 0x0
0xffffbf800000af00 0045 00000000 0x0 0x0
0xffffbf800000af80 0045 00000000 0x0 0x0
0xffffbf800000b000 0041 00000000 0x0 0x0
0xffffbf800000b080 0041 00000000 0x0 0x0
0xffffbf800000b100 0041 00000000 0x0 0x0

0xffffbf800000b180 0045 00000000 0x0 0x0

0xffffbf800000b200 0041 00000000 0x0 0x0
0xffffbf800000b280 0045 00000000 0x0 0x0
0xffffbf800000b300 0045 00000000 0x0 0x0
0xffffbf800000b380 0045 00000000 0x0 0x0
0xffffbf800000b400 0041 00000000 0x0 0x0
0xffffbf800000b480 0041 00000000 0x0 0x0
0xffffbf800000b500 0041 00000000 0x0 0x0
0xffffbf800000b580 0045 00000000 0x0 0x0

0xffffbf800000b600 0045 00000000 0x0 0x0

0xffffbf800000b680 0045 00000000 0x0 0x0

0xffffbf800000b700 0045 00000000 0x0 0x0

0xffffbf800000b780 0045 00000000 0x0 0x0

0xffffbf800000b800 0045 00000000 0x0 0x0

0xffffbf800000b880 0041 00000000 0x0 0x0
0xffffbf800000b900 0045 00000000 0x0 0x0
0xffffbf800000b980 0045 00000000 0x0 0x0
0xffffbf800000ba00 0045 00000000 0x0 0x0
0xffffbf800000ba80 0045 00000000 0x0 0x0
0xffffbf800000bb00 0045 00000000 0x0 0x0
0xffffbf800000bb80 0045 00000000 0x0 0x0
0xffffbf800000bc00 0045 00000000 0x0 0x0
0xffffbf800000bc80 0041 00000000 0x0 0x0
0xffffbf800000bd00 0045 00000000 0x0 0x0
0xffffbf800000bd80 0045 00000000 0x0 0x0
0xffffbf800000be00 0045 00000000 0x0 0x0
0xffffbf800000be80 0045 00000000 0x0 0x0
0xffffbf800000bf00 0045 00000000 0x0 0x0
0xffffbf800000bf80 0045 00000000 0x0 0x0
0xffffbf800000c000 0045 00000000 0x0 0x0
0xffffbf800000c080 0041 00000000 0x0 0x0
0xffffbf800000c100 0045 00000000 0x0 0x0

0xffffbf800000c180 0045 00000000 0x0 0x0

0xffffbf800000c200 0045 00000000 0x0 0x0
0xffffbf800000c280 0045 00000000 0x0 0x0

0xffffbf800000c300 0045 00000000 0x0 0x0

0xffffbf800000c380 0045 00000000 0x0 0x0

0xffffbf800000c400 0045 00000000 0x0 0x0

0xffffbf800000c480 0045 00000000 0x0 0x0

0xffffbf800000c500 0045 00000000 0x0 0x0

0xffffbf800000c580 0045 00000000 0x0 0x0

0xffffbf800000c600 0045 00000000 0x0 0x0

0xffffbf800000c680 0045 00000000 0x0 0x0

0xffffbf800000c700 0041 00000000 0x0 0x0

0xffffbf800000c780 0041 00000000 0x0 0x0
0xffffbf800000c800 0045 00000000 0x0 0x0
0xffffbf800000c880 0045 00000000 0x0 0x0
0xffffbf800000c900 0045 00000000 0x0 0x0
0xffffbf800000c980 0045 00000000 0x0 0x0
0xffffbf800000ca00 0045 00000000 0x0 0x0
0xffffbf800000ca80 0041 00000000 0x0 0x0
0xffffbf800000cb00 0041 00000000 0x0 0x0
0xffffbf800000cb80 0041 00000000 0x0 0x0
0xffffbf800000cc00 0045 00000000 0x0 0x0
0xffffbf800000cc80 0045 00000000 0x0 0x0
0xffffbf800000cd00 0045 00000000 0x0 0x0
0xffffbf800000cd80 0041 00000000 0x0 0x0
0xffffbf800000ce00 0045 00000000 0x0 0x0
0xffffbf800000ce80 0041 00000000 0x0 0x0
0xffffbf800000cf00 0041 00000000 0x0 0x0
0xffffbf800000cf80 0041 00000000 0x0 0x0
0xffffbf800000d000 0041 00000000 0x0 0x0
0xffffbf800000d080 0045 00000000 0x0 0x0
0xffffbf800000d100 0045 00000000 0x0 0x0
0xffffbf800000d180 0041 00000000 0x0 0x0
0xffffbf800000d200 0041 00000000 0x0 0x0
0xffffbf800000d280 0041 00000000 0x0 0x0
0xffffbf800000d300 0045 00000000 0x0 0x0
0xffffbf800000d380 0041 00000000 0x0 0x0
0xffffbf800000d400 0041 00000000 0x0 0x0
0xffffbf800000d480 0045 00000000 0x0 0x0
0xffffbf800000d500 0041 00000000 0x0 0x0
0xffffbf800000d580 0041 00000000 0x0 0x0
0xffffbf800000d600 0041 00000000 0x0 0x0
0xffffbf800000d680 0045 00000000 0x0 0x0

0xffffbf800000d700 0041 00000000 0x0 0x0

0xffffbf800000d780 0045 00000000 0x0 0x0
0xffffbf800000d800 0041 00000000 0x0 0x0
0xffffbf800000d880 0045 00000000 0x0 0x0
0xffffbf800000d900 0041 00000000 0x0 0x0
0xffffbf800000d980 0041 00000000 0x0 0x0
0xffffbf800000da00 0041 00000000 0x0 0x0
0xffffbf800000da80 0041 00000000 0x0 0x0
0xffffbf800000db00 0045 00000000 0x0 0x0
0xffffbf800000db80 0045 00000000 0x0 0x0
0xffffbf800000dc00 0041 00000000 0x0 0x0
0xffffbf800000dc80 0041 00000000 0x0 0x0
0xffffbf800000dd00 0041 00000000 0x0 0x0
0xffffbf800000dd80 0041 00000000 0x0 0x0
0xffffbf800000de00 0041 00000000 0x0 0x0
0xffffbf800000de80 0041 00000000 0x0 0x0
0xffffbf800000df00 0045 00000000 0x0 0x0
0xffffbf800000df80 0045 00000000 0x0 0x0
0xffffbf800000e000 0045 00000000 0x0 0x0
0xffffbf800000e080 0041 00000000 0x0 0x0
0xffffbf800000e100 0041 00000000 0x0 0x0
0xffffbf800000e180 0045 00000000 0x0 0x0
0xffffbf800000e200 0041 00000000 0x0 0x0
0xffffbf800000e280 0045 00000000 0x0 0x0
0xffffbf800000e300 0045 00000000 0x0 0x0
0xffffbf800000e380 0041 00000000 0x0 0x0
0xffffbf800000e400 0045 00000000 0x0 0x0
0xffffbf800000e480 0041 00000000 0x0 0x0
0xffffbf800000e500 0041 00000000 0x0 0x0
0xffffbf800000e580 0041 00000000 0x0 0x0

0xffffbf800000e600 0045 00000000 0x0 0x0

0xffffbf800000e680 0041 00000000 0x0 0x0

0xffffbf800000e700 0041 00000000 0x0 0x0

0xffffbf800000e780 0041 00000000 0x0 0x0

0xffffbf800000e800 0045 00000000 0x0 0x0

0xffffbf800000e880 0041 00000000 0x0 0x0

0xffffbf800000e900 0045 00000000 0x0 0x0

0xffffbf800000e980 0041 00000000 0x0 0x0
0xffffbf800000ea00 0041 00000000 0x0 0x0
0xffffbf800000ea80 0045 00000000 0x0 0x0
0xffffbf800000eb00 0041 00000000 0x0 0x0
0xffffbf800000eb80 0045 00000000 0x0 0x0
0xffffbf800000ec00 0041 00000000 0x0 0x0
0xffffbf800000ec80 0045 00000000 0x0 0x0
0xffffbf800000ed00 0041 00000000 0x0 0x0
0xffffbf800000ed80 0041 00000000 0x0 0x0
0xffffbf800000ee00 0041 00000000 0x0 0x0
0xffffbf800000ee80 0041 00000000 0x0 0x0
0xffffbf800000ef00 0041 00000000 0x0 0x0
0xffffbf800000ef80 0041 00000000 0x0 0x0
0xffffbf800000f000 0041 00000000 0x0 0x0
0xffffbf800000f080 0041 00000000 0x0 0x0
0xffffbf800000f100 0041 00000000 0x0 0x0
0xffffbf800000f180 0041 00000000 0x0 0x0
0xffffbf800000f200 0041 00000000 0x0 0x0
0xffffbf800000f280 0045 00000000 0x0 0x0
0xffffbf800000f300 0041 00000000 0x0 0x0
0xffffbf800000f380 0041 00000000 0x0 0x0

0xffffbf800000f400 0045 00000000 0x0 0x0

0xffffbf800000f480 0045 00000000 0x0 0x0
0xffffbf800000f500 0041 00000000 0x0 0x0
0xffffbf800000f580 0041 00000000 0x0 0x0

0xffffbf800000f600 0041 00000000 0x0 0x0

0xffffbf800000f680 0041 00000000 0x0 0x0

0xffffbf800000f700 0041 00000000 0x0 0x0

0xffffbf800000f780 0041 00000000 0x0 0x0

0xffffbf800000f800 0041 00000000 0x0 0x0

0xffffbf800000f880 0041 00000000 0x0 0x0

0xffffbf800000f900 0041 00000000 0x0 0x0

0xffffbf800000f980 0045 00000000 0x0 0x0
0xffffbf800000fa00 0041 00000000 0x0 0x0
0xffffbf800000fa80 0041 00000000 0x0 0x0
0xffffbf800000fb00 0041 00000000 0x0 0x0
0xffffbf800000fb80 0041 00000000 0x0 0x0
0xffffbf800000fc00 0045 00000000 0x0 0x0
0xffffbf800000fc80 0045 00000000 0x0 0x0
0xffffbf800000fd00 0041 00000000 0x0 0x0
0xffffbf800000fd80 0041 00000000 0x0 0x0
0xffffbf800000fe00 0041 00000000 0x0 0x0
0xffffbf800000fe80 0041 00000000 0x0 0x0
0xffffbf800000ff00 0041 00000000 0x0 0x0
0xffffbf800000ff80 0041 00000000 0x0 0x0
0xffffbf8000010000 0041 00000000 0x0 0x0
0xffffbf8000010080 0041 00000000 0x0 0x0
0xffffbf8000010100 0045 00000000 0x0 0x0
0xffffbf8000010180 0045 00000000 0x0 0x0
0xffffbf8000010200 0045 00000000 0x0 0x0
0xffffbf8000010280 0041 00000000 0x0 0x0
0xffffbf8000010300 0041 00000000 0x0 0x0
0xffffbf8000010380 0041 00000000 0x0 0x0
0xffffbf8000010400 0041 00000000 0x0 0x0
0xffffbf8000010480 0041 00000000 0x0 0x0
0xffffbf8000010500 0041 00000000 0x0 0x0
0xffffbf8000010580 0041 00000000 0x0 0x0
0xffffbf8000010600 0041 00000000 0x0 0x0
0xffffbf8000010680 0041 00000000 0x0 0x0
0xffffbf8000010700 0045 00000000 0x0 0x0
0xffffbf8000010780 0041 00000000 0x0 0x0
0xffffbf8000010800 0041 00000000 0x0 0x0
0xffffbf8000010880 0045 00000000 0x0 0x0
0xffffbf8000010900 0045 00000000 0x0 0x0
0xffffbf8000010980 0045 00000000 0x0 0x0
0xffffbf8000010a00 0045 00000000 0x0 0x0
0xffffbf8000010a80 0045 00000000 0x0 0x0

0xffffbf8000010b00 0041 00000000 0x0 0x0
0xffffbf8000010b80 0041 00000000 0x0 0x0

0xffffbf8000010c00 0041 00000000 0x0 0x0
0xffffbf8000010c80 0041 00000000 0x0 0x0
0xffffbf8000010d00 0041 00000000 0x0 0x0
0xffffbf8000010d80 0041 00000000 0x0 0x0
0xffffbf8000010e00 0041 00000000 0x0 0x0
0xffffbf8000010e80 0041 00000000 0x0 0x0
0xffffbf8000010f00 0041 00000000 0x0 0x0
0xffffbf8000010f80 0041 00000000 0x0 0x0
0xffffbf8000011000 0041 00000000 0x0 0x0
0xffffbf8000011080 0045 00000000 0x0 0x0
0xffffbf8000011100 0041 00000000 0x0 0x0
0xffffbf8000011180 0041 00000000 0x0 0x0
0xffffbf8000011200 0045 00000000 0x0 0x0
0xffffbf8000011280 0041 00000000 0x0 0x0
0xffffbf8000011300 0041 00000000 0x0 0x0
0xffffbf8000011380 0041 00000000 0x0 0x0
0xffffbf8000011400 0041 00000000 0x0 0x0
0xffffbf8000011480 0041 00000000 0x0 0x0
0xffffbf8000011500 0041 00000000 0x0 0x0

0xffffbf8000011580 0041 00000000 0x0 0x0

0xffffbf8000011600 0041 00000000 0x0 0x0
0xffffbf8000011680 0041 00000000 0x0 0x0
0xffffbf8000011700 0041 00000000 0x0 0x0
0xffffbf8000011780 0045 00000000 0x0 0x0
0xffffbf8000011800 0041 00000000 0x0 0x0
0xffffbf8000011880 0041 00000000 0x0 0x0
0xffffbf8000011900 0045 00000000 0x0 0x0
0xffffbf8000011980 0041 00000000 0x0 0x0
0xffffbf8000011a00 0041 00000000 0x0 0x0

0xffffbf8000011a80 0041 00000000 0x0 0x0
0xffffbf8000011b00 0045 00000000 0x0 0x0

0xffffbf8000011b80 0041 00000000 0x0 0x0
0xffffbf8000011c00 0041 00000000 0x0 0x0
0xffffbf8000011c80 0041 00000000 0x0 0x0
0xffffbf8000011d00 0041 00000000 0x0 0x0
0xffffbf8000011d80 0041 00000000 0x0 0x0
0xffffbf8000011e00 0045 00000000 0x0 0x0
0xffffbf8000011e80 0045 00000000 0x0 0x0
0xffffbf8000011f00 0041 00000000 0x0 0x0
0xffffbf8000011f80 0041 00000000 0x0 0x0
0xffffbf8000012000 0041 00000000 0x0 0x0
0xffffbf8000012080 0041 00000000 0x0 0x0
0xffffbf8000012100 0041 00000000 0x0 0x0
0xffffbf8000012180 0045 00000000 0x0 0x0
0xffffbf8000012200 0041 00000000 0x0 0x0
0xffffbf8000012280 0041 00000000 0x0 0x0
0xffffbf8000012300 0041 00000000 0x0 0x0
0xffffbf8000012380 0041 00000000 0x0 0x0
0xffffbf8000012400 0041 00000000 0x0 0x0
0xffffbf8000012480 0041 00000000 0x0 0x0
0xffffbf8000012500 0045 00000000 0x0 0x0
0xffffbf8000012580 0041 00000000 0x0 0x0
0xffffbf8000012600 0041 00000000 0x0 0x0
0xffffbf8000012680 0041 00000000 0x0 0x0

0xffffbf8000012700 0041 00000000 0x0 0x0

0xffffbf8000012780 0041 00000000 0x0 0x0
0xffffbf8000012800 0041 00000000 0x0 0x0
0xffffbf8000012880 0041 00000000 0x0 0x0

0xffffbf8000012900 0041 00000000 0x0 0x0

0xffffbf8000012980 0041 00000000 0x0 0x0
0xffffbf8000012a00 0041 00000000 0x0 0x0
0xffffbf8000012a80 0041 00000000 0x0 0x0
0xffffbf8000012b00 0041 00000000 0x0 0x0
0xffffbf8000012b80 0041 00000000 0x0 0x0
0xffffbf8000012c00 0041 00000000 0x0 0x0
0xffffbf8000012c80 0045 00000000 0x0 0x0
0xffffbf8000012d00 0001 00000000 0x0 0x0

0xffffbf8000012d80 0001 00000000 0x0 0x0

0xffffbf8000012e00 0001 00000000 0x0 0x0

0xffffbf8000012e80 0001 00000000 0x0 0x0

0xffffbf8000012f00 0001 00000000 0x0 0x0
0xffffbf8000012f80 0001 00000000 0x0 0x0
0xffffbf8000013000 0001 00000000 0x0 0x0

0xffffbf8000013080 0001 00000000 0x0 0x0

0xffffbf8000013100 0001 00000000 0x0 0x0

0xffffbf8000013180 0001 00000000 0x0 0x0

0xffffbf8000013200 0001 00000000 0x0 0x0

0xffffbf8000013280 0001 00000000 0x0 0x0

0xffffbf8000013300 0001 00000000 0x0 0x0

0xffffbf8000013380 0001 00000000 0x0 0x0

0xffffbf8000013400 0001 00000000 0x0 0x0

0xffffbf8000013480 0001 00000000 0x0 0x0

0xffffbf8000013500 0001 00000000 0x0 0x0

0xffffbf8000013580 0001 00000000 0x0 0x0

0xffffbf8000013600 0001 00000000 0x0 0x0

0xffffbf8000013680 0001 00000000 0x0 0x0

0xffffbf8000013700 0001 00000000 0x0 0x0

0xffffbf8000013780 0001 00000000 0x0 0x0

0xffffbf8000013800 0001 00000000 0x0 0x0

0xffffbf8000013880 0001 00000000 0x0 0x0

0xffffbf8000013900 0001 00000000 0x0 0x0
0xffffbf8000013980 0001 00000000 0x0 0x0
0xffffbf8000013a00 0001 00000000 0x0 0x0

0xffffbf8000013a80 0001 00000000 0x0 0x0

0xffffbf8000013b00 0001 00000000 0x0 0x0

0xffffbf8000013b80 0001 00000000 0x0 0x0

0xffffbf8000013c00 0001 00000000 0x0 0x0

0xffffbf8000013c80 0001 00000000 0x0 0x0

0xffffbf8000013d00 0001 00000000 0x0 0x0

0xffffbf8000013d80 0001 00000000 0x0 0x0

0xffffbf8000013e00 0001 00000000 0x0 0x0

0xffffbf8000013e80 0001 00000000 0x0 0x0

0xffffbf8000013f00 0001 00000000 0x0 0x0

0xffffbf8000013f80 0001 00000000 0x0 0x0

0xffffbf8000014000 0001 00000000 0x0 0x0

0xffffbf8000014080 0001 00000000 0x0 0x0

0xffffbf8000014100 0001 00000000 0x0 0x0

0xffffbf8000014180 0001 00000000 0x0 0x0

0xffffbf8000014200 0001 00000000 0x0 0x0

0xffffbf8000014280 0001 00000000 0x0 0x0

0xffffbf8000014300 0001 00000000 0x0 0x0

0xffffbf8000014380 0001 00000000 0x0 0x0

0xffffbf8000014400 0001 00000000 0x0 0x0

0xffffbf8000014480 0001 00000000 0x0 0x0

0xffffbf8000014500 0001 00000000 0x0 0x0

0xffffbf8000014580 0001 00000000 0x0 0x0

0xffffbf8000014600 0001 00000000 0x0 0x0
0xffffbf8000014680 0001 00000000 0x0 0x0
0xffffbf8000014700 0001 00000000 0x0 0x0

0xffffbf8000014780 0001 00000000 0x0 0x0

0xffffbf8000014800 0041 00000000 0x0 0x0
0xffffbf8000014880 0041 00000000 0x0 0x0

0xffffbf8000014900 0041 00000000 0x0 0x0

0xffffbf8000014980 0041 00000000 0x0 0x0
0xffffbf8000014a00 0041 00000000 0x0 0x0

0xffffbf8000014a80 0041 00000000 0x0 0x0

0xffffbf8000014b00 0041 00000000 0x0 0x0

0xffffbf8000014b80 0041 00000000 0x0 0x0

0xffffbf8000014c00 0041 00000000 0x0 0x0
0xffffbf8000014c80 0041 00000000 0x0 0x0
0xffffbf8000014d00 0041 00000000 0x0 0x0
0xffffbf8000014d80 0041 00000000 0x0 0x0
0xffffbf8000014e00 0041 00000000 0x0 0x0
0xffffbf8000014e80 0041 00000000 0x0 0x0
0xffffbf8000014f00 0041 00000000 0x0 0x0
0xffffbf8000014f80 0041 00000000 0x0 0x0
0xffffbf8000015000 0041 00000000 0x0 0x0
0xffffbf8000015080 0041 00000000 0x0 0x0
0xffffbf8000015100 0041 00000000 0x0 0x0
0xffffbf8000015180 0041 00000000 0x0 0x0
0xffffbf8000015200 0041 00000000 0x0 0x0
0xffffbf8000015280 0041 00000000 0x0 0x0
0xffffbf8000015300 0041 00000000 0x0 0x0
0xffffbf8000015380 0041 00000000 0x0 0x0
0xffffbf8000015400 0041 00000000 0x0 0x0
0xffffbf8000015480 0041 00000000 0x0 0x0
0xffffbf8000015500 0041 00000000 0x0 0x0
0xffffbf8000015580 0041 00000000 0x0 0x0
0xffffbf8000015600 0041 00000000 0x0 0x0
0xffffbf8000015680 0041 00000000 0x0 0x0
0xffffbf8000015700 0041 00000000 0x0 0x0
0xffffbf8000015780 0041 00000000 0x0 0x0
0xffffbf8000015800 0041 00000000 0x0 0x0
0xffffbf8000015880 0041 00000000 0x0 0x0
0xffffbf8000015900 0041 00000000 0x0 0x0
0xffffbf8000015980 0041 00000000 0x0 0x0

0xffffbf8000015a00 0041 00000000 0x0 0x0
0xffffbf8000015a80 0041 00000000 0x0 0x0
0xffffbf8000015b00 0041 00000000 0x0 0x0

0xffffbf8000015b80 0041 00000000 0x0 0x0
0xffffbf8000015c00 0041 00000000 0x0 0x0
0xffffbf8000015c80 0041 00000000 0x0 0x0
0xffffbf8000015d00 0001 00000000 0x0 0x0

0xffffbf8000015d80 0001 00000000 0x0 0x0

0xffffbf8000015e00 0001 00000000 0x0 0x0

0xffffbf8000015e80 0001 00000000 0x0 0x0

0xffffbf8000015f00 0001 00000000 0x0 0x0

0xffffbf8000015f80 0001 00000000 0x0 0x0

0xffffbf8000016000 0001 00000000 0x0 0x0

0xffffbf8000016080 0001 00000000 0x0 0x0

0xffffbf8000016100 0001 00000000 0x0 0x0

0xffffbf8000016180 0001 00000000 0x0 0x0

0xffffbf8000016200 0001 00000000 0x0 0x0

0xffffbf8000016280 0001 00000000 0x0 0x0

0xffffbf8000016300 0001 00000000 0x0 0x0

0xffffbf8000016380 0001 00000000 0x0 0x0

0xffffbf8000016400 0001 00000000 0x0 0x0

0xffffbf8000016480 0001 00000000 0x0 0x0

0xffffbf8000016500 0001 00000000 0x0 0x0

0xffffbf8000016580 0001 00000000 0x0 0x0

0xffffbf8000016600 0001 00000000 0x0 0x0

0xffffbf8000016680 0001 00000000 0x0 0x0

0xffffbf8000016700 0001 00000000 0x0 0x0

0xffffbf8000016780 0001 00000000 0x0 0x0

0xffffbf8000016800 0001 00000000 0x0 0x0

0xffffbf8000016880 0001 00000000 0x0 0x0

0xffffbf8000016900 0001 00000000 0x0 0x0

0xffffbf8000016980 0001 00000000 0x0 0x0
0xffffbf8000016a00 0001 00000000 0x0 0x0

0xffffbf8000016a80 0001 00000000 0x0 0x0

0xffffbf8000016b00 0001 00000000 0x0 0x0

0xffffbf8000016b80 0001 00000000 0x0 0x0

0xffffbf8000016c00 0001 00000000 0x0 0x0

0xffffbf8000016c80 0001 00000000 0x0 0x0

0xffffbf8000016d00 0001 00000000 0x0 0x0
0xffffbf8000016d80 0001 00000000 0x0 0x0
0xffffbf8000016e00 0001 00000000 0x0 0x0
0xffffbf8000016e80 0001 00000000 0x0 0x0
0xffffbf8000016f00 0001 00000000 0x0 0x0
0xffffbf8000016f80 0001 00000000 0x0 0x0
0xffffbf8000017000 0001 00000000 0x0 0x0
0xffffbf8000017080 0001 00000000 0x0 0x0
0xffffbf8000017100 0001 00000000 0x0 0x0
0xffffbf8000017180 0001 00000000 0x0 0x0
0xffffbf8000017200 0001 00000000 0x0 0x0
0xffffbf8000017280 0001 00000000 0x0 0x0
0xffffbf8000017300 0001 00000000 0x0 0x0
0xffffbf8000017380 0001 00000000 0x0 0x0
0xffffbf8000017400 0001 00000000 0x0 0x0
0xffffbf8000017480 0001 00000000 0x0 0x0
0xffffbf8000017500 0001 00000000 0x0 0x0
0xffffbf8000017580 0001 00000000 0x0 0x0
0xffffbf8000017600 0001 00000000 0x0 0x0
0xffffbf8000017680 0001 00000000 0x0 0x0
0xffffbf8000017700 0001 00000000 0x0 0x0
0xffffbf8000017780 0001 00000000 0x0 0x0

0xffffbf8000017800 0041 00000000 0x0 0x0

0xffffbf8000017880 0041 00000000 0x0 0x0

0xffffbf8000017900 0041 00000000 0x0 0x0

0xffffbf8000017980 0041 00000000 0x0 0x0
0xffffbf8000017a00 0041 00000000 0x0 0x0
0xffffbf8000017a80 0041 00000000 0x0 0x0
0xffffbf8000017b00 0041 00000000 0x0 0x0
0xffffbf8000017b80 0041 00000000 0x0 0x0
0xffffbf8000017c00 0041 00000000 0x0 0x0
0xffffbf8000017c80 0041 00000000 0x0 0x0
0xffffbf8000017d00 0041 00000000 0x0 0x0
0xffffbf8000017d80 0041 00000000 0x0 0x0
0xffffbf8000017e00 0041 00000000 0x0 0x0
0xffffbf8000017e80 0041 00000000 0x0 0x0
0xffffbf8000017f00 0041 00000000 0x0 0x0
0xffffbf8000017f80 0041 00000000 0x0 0x0
0xffffbf8000018000 0041 00000000 0x0 0x0
0xffffbf8000018080 0041 00000000 0x0 0x0
0xffffbf8000018100 0041 00000000 0x0 0x0
0xffffbf8000018180 0041 00000000 0x0 0x0
0xffffbf8000018200 0041 00000000 0x0 0x0
0xffffbf8000018280 0041 00000000 0x0 0x0
0xffffbf8000018300 0041 00000000 0x0 0x0
0xffffbf8000018380 0041 00000000 0x0 0x0
0xffffbf8000018400 0041 00000000 0x0 0x0
0xffffbf8000018480 0041 00000000 0x0 0x0
0xffffbf8000018500 0041 00000000 0x0 0x0
0xffffbf8000018580 0041 00000000 0x0 0x0
0xffffbf8000018600 0041 00000000 0x0 0x0
0xffffbf8000018680 0041 00000000 0x0 0x0
0xffffbf8000018700 0041 00000000 0x0 0x0
0xffffbf8000018780 0041 00000000 0x0 0x0

0xffffbf8000018800 0041 00000000 0x0 0x0

0xffffbf8000018880 0041 00000000 0x0 0x0

0xffffbf8000018900 0041 00000000 0x0 0x0

0xffffbf8000018980 0041 00000000 0x0 0x0
0xffffbf8000018a00 0041 00000000 0x0 0x0
0xffffbf8000018a80 0041 00000000 0x0 0x0
0xffffbf8000018b00 0041 00000000 0x0 0x0
0xffffbf8000018b80 0041 00000000 0x0 0x0
0xffffbf8000018c00 0041 00000000 0x0 0x0
0xffffbf8000018c80 0041 00000000 0x0 0x0
0xffffbf8000018d00 0041 00000000 0x0 0x0
0xffffbf8000018d80 0001 00000000 0x0 0x0
0xffffbf8000018e00 0001 00000000 0x0 0x0
0xffffbf8000018e80 0001 00000000 0x0 0x0
0xffffbf8000018f00 0001 00000000 0x0 0x0
0xffffbf8000018f80 0001 00000000 0x0 0x0
0xffffbf8000019000 0001 00000000 0x0 0x0
0xffffbf8000019080 0001 00000000 0x0 0x0
0xffffbf8000019100 0001 00000000 0x0 0x0
0xffffbf8000019180 0001 00000000 0x0 0x0
0xffffbf8000019200 0001 00000000 0x0 0x0
0xffffbf8000019280 0001 00000000 0x0 0x0
0xffffbf8000019300 0001 00000000 0x0 0x0
0xffffbf8000019380 0001 00000000 0x0 0x0
0xffffbf8000019400 0001 00000000 0x0 0x0
0xffffbf8000019480 0001 00000000 0x0 0x0
0xffffbf8000019500 0001 00000000 0x0 0x0
0xffffbf8000019580 0001 00000000 0x0 0x0
0xffffbf8000019600 0001 00000000 0x0 0x0
0xffffbf8000019680 0001 00000000 0x0 0x0

0xffffbf8000019700 0001 00000000 0x0 0x0

0xffffbf8000019780 0001 00000000 0x0 0x0

0xffffbf8000019800 0001 00000000 0x0 0x0

0xffffbf8000019880 0001 00000000 0x0 0x0

0xffffbf8000019900 0001 00000000 0x0 0x0

0xffffbf8000019980 0001 00000000 0x0 0x0
0xffffbf8000019a00 0001 00000000 0x0 0x0
0xffffbf8000019a80 0001 00000000 0x0 0x0
0xffffbf8000019b00 0001 00000000 0x0 0x0
0xffffbf8000019b80 0001 00000000 0x0 0x0
0xffffbf8000019c00 0001 00000000 0x0 0x0
0xffffbf8000019c80 0001 00000000 0x0 0x0
0xffffbf8000019d00 0001 00000000 0x0 0x0
0xffffbf8000019d80 0001 00000000 0x0 0x0
0xffffbf8000019e00 0001 00000000 0x0 0x0
0xffffbf8000019e80 0001 00000000 0x0 0x0
0xffffbf8000019f00 0001 00000000 0x0 0x0
0xffffbf8000019f80 0001 00000000 0x0 0x0
0xffffbf800001a000 0001 00000000 0x0 0x0
0xffffbf800001a080 0001 00000000 0x0 0x0
0xffffbf800001a100 0001 00000000 0x0 0x0

0xffffbf800001a180 0001 00000000 0x0 0x0

0xffffbf800001a200 0001 00000000 0x0 0x0

0xffffbf800001a280 0001 00000000 0x0 0x0

0xffffbf800001a300 0001 00000000 0x0 0x0
0xffffbf800001a380 0001 00000000 0x0 0x0
0xffffbf800001a400 0001 00000000 0x0 0x0
0xffffbf800001a480 0001 00000000 0x0 0x0
0xffffbf800001a500 0001 00000000 0x0 0x0

0xffffbf800001a580 0001 00000000 0x0 0x0

0xffffbf800001a600 0001 00000000 0x0 0x0
0xffffbf800001a680 0001 00000000 0x0 0x0
0xffffbf800001a700 0001 00000000 0x0 0x0

0xffffbf800001a780 0001 00000000 0x0 0x0

0xffffbf800001a800 0001 00000000 0x0 0x0
0xffffbf800001a880 0041 00000000 0x0 0x0

0xffffbf800001a900 0041 00000000 0x0 0x0

0xffffbf800001a980 0041 00000000 0x0 0x0
0xffffbf800001aa00 0041 00000000 0x0 0x0
0xffffbf800001aa80 0041 00000000 0x0 0x0
0xffffbf800001ab00 0041 00000000 0x0 0x0
0xffffbf800001ab80 0041 00000000 0x0 0x0
0xffffbf800001ac00 0041 00000000 0x0 0x0
0xffffbf800001ac80 0041 00000000 0x0 0x0
0xffffbf800001ad00 0041 00000000 0x0 0x0
0xffffbf800001ad80 0041 00000000 0x0 0x0
0xffffbf800001ae00 0041 00000000 0x0 0x0
0xffffbf800001ae80 0041 00000000 0x0 0x0
0xffffbf800001af00 0041 00000000 0x0 0x0
0xffffbf800001af80 0041 00000000 0x0 0x0
0xffffbf800001b000 0041 00000000 0x0 0x0
0xffffbf800001b080 0041 00000000 0x0 0x0
0xffffbf800001b100 0041 00000000 0x0 0x0
0xffffbf800001b180 0041 00000000 0x0 0x0
0xffffbf800001b200 0041 00000000 0x0 0x0
0xffffbf800001b280 0041 00000000 0x0 0x0
0xffffbf800001b300 0041 00000000 0x0 0x0
0xffffbf800001b380 0041 00000000

Tested on:

commit: 96084e21 bpf(4): Reject bogus timeout values before ar..

git tree: https://github.com/NetBSD/src trunk

console output: https://syzkaller.appspot.com/x/log.txt?x=11acaccd080000
kernel config: https://syzkaller.appspot.com/x/.config?x=1420f906d33d9f1f

dashboard link: https://syzkaller.appspot.com/bug?extid=1bee937496ae35ea301c
compiler: g++ (Debian 10.2.1-6) 10.2.1 20210110

patch: https://syzkaller.appspot.com/x/patch.diff?x=107a5d7d080000

syzbot

unread,

Sep 3, 2022, 3:01:16 PM9/3/22

to rias...@netbsd.org, syzkaller-...@googlegroups.com

Hello,

syzbot has tested the proposed patch but the reproducer is still triggering an issue:

assert failed: !ktd->ktd_callout_pending

[ 58.9799046] panic: kernel diagnostic assertion "!ktd->ktd_callout_pending" failed: file "/syzkaller/jobs/netbsd/kernel/sys/kern/kern_ktrace.c", line 404
[ 58.9898910] cpu1: Begin traceback...
[ 59.0098924] vpanic() at netbsd:vpanic+0x2f2 sys/kern/subr_prf.c:293
[ 59.0698916] kern_assert() at netbsd:kern_assert+0x65 sys/arch/amd64/amd64/db_disasm.c:1074
[ 59.1198931] ktraddentry() at netbsd:ktraddentry+0xbd6 sys/kern/kern_ktrace.c:404
[ 59.1598959] ktr_sysret() at netbsd:ktr_sysret+0x235 sys/kern/kern_ktrace.c:600
[ 59.1998970] trace_exit() at netbsd:trace_exit+0x24d ktrsysret sys/sys/ktrace.h:420 [inline]
[ 59.1998970] trace_exit() at netbsd:trace_exit+0x24d sys/kern/kern_syscall.c:299
[ 59.2398963] syscall() at netbsd:syscall+0x32f sys/arch/x86/x86/syscall.c:140
[ 59.2498920] --- syscall (number 321) ---
[ 59.2699006] netbsd:syscall+0x32f:
[ 59.2699006] cpu1: End traceback...
[ 59.2699006] fatal breakpoint trap in supervisor mode
[ 59.2798900] trap type 1 code 0 rip 0xffffffff80221ab5 cs 0x8 rflags 0x246 cr2 0x200001c0 ilevel 0 rsp 0xffffd28248440d90
[ 59.2898884] curlwp 0xfffffec80394c780 pid 3283.3283 lowest kstack 0xffffd2824843c2c0
Stopped in pid 3283.3283 (syz-executor.3) at netbsd:breakpoint+0x5: leave

ktraddentry() at netbsd:ktraddentry+0xbd6 sys/kern/kern_ktrace.c:404
ktr_sysret() at netbsd:ktr_sysret+0x235 sys/kern/kern_ktrace.c:600

--- syscall (number 321) ---
netbsd:syscall+0x32f:
Panic string: kernel diagnostic assertion "!ktd->ktd_callout_pending" failed: file "/syzkaller/jobs/netbsd/kernel/sys/kern/kern_ktrace.c", line 404

PID LID S CPU FLAGS STRUCT LWP * NAME WAIT

2911 3290 3 0 180 fffffec803e67580 syz-executor.5 parked
2911 >2911 7 0 10000000 fffffec803b64700 syz-executor.5
3148 3132 2 0 0 fffffec80348d600 syz-executor.4
3148 3154 2 0 0 fffffec80348d1c0 syz-executor.4
3148 3163 2 0 0 fffffec8040d1a00 syz-executor.4
3148 2905 2 1 100 fffffec8040d1180 syz-executor.4
3148 3148 2 0 10000000 fffffec803e67140 syz-executor.4
3283 2368 2 1 100 fffffec8038f7080 syz-executor.3
3283 >3283 7 1 10000000 fffffec80394c780 syz-executor.3
3050 3145 2 0 0 fffffec803e51940 syz-executor.1
3050 3143 2 0 0 fffffec8038f74c0 syz-executor.1
3050 3050 2 0 10000000 fffffec8039fc540 syz-executor.1
2795 3284 3 0 180 fffffec800079480 syz-executor.2 parked
2795 3036 3 0 180 fffffec803e510c0 syz-executor.2 parked
2795 2795 2 1 10000140 fffffec803e679c0 syz-executor.2
1211 1211 2 1 140 fffffec803d46680 syz-executor.4
990 990 3 0 180 fffffec8026e7a80 syz-executor.5 nanoslp
1322 1322 2 1 140 fffffec8026e7640 syz-executor.0
1210 1210 2 1 140 fffffec7ff7aab40 syz-executor.1
1323 1323 3 0 180 fffffec7ff29cac0 syz-executor.2 nanoslp
1213 1213 2 1 140 fffffec7ff5b56c0 syz-executor.3
1255 463 3 1 180 fffffec803d46240 syz-execprog parked
1255 1360 3 0 180 fffffec803b642c0 syz-execprog parked
1255 1198 3 1 180 fffffec80046f500 syz-execprog kqueue
1255 1350 3 1 180 fffffec803e4a280 syz-execprog parked
1255 1207 3 1 180 fffffec8026e7200 syz-execprog wait
1255 331 3 0 180 fffffec7fe1bfa40 syz-execprog wait
1255 330 3 1 180 fffffec80090ea00 syz-execprog wait
1255 1201 3 1 180 fffffec80090e5c0 syz-execprog wait
1255 1257 3 0 180 fffffec801827a40 syz-execprog parked
1255 1208 3 1 180 fffffec7ffae9740 syz-execprog parked
1255 1200 3 1 180 fffffec7ff5b5280 syz-execprog wait
1255 1240 3 0 180 fffffec8006a2980 syz-execprog wait
1255 1071 3 0 180 fffffec8000798c0 syz-execprog nanoslp
1255 1255 3 0 180 fffffec8006a2540 syz-execprog parked
1245 1245 3 1 180 fffffec8018271c0 sshd select
1086 1086 3 1 180 fffffec800fa6580 getty nanoslp
1081 1081 3 1 180 fffffec800fa6140 getty nanoslp
1075 1075 3 1 180 fffffec801827600 getty nanoslp
1077 1077 3 1 1c0 fffffec7ff29c680 getty ttyraw
818 818 3 1 180 fffffec80090e180 sshd select
1068 1068 3 0 180 fffffec800fa69c0 powerd kqueue
694 694 3 0 180 fffffec800079040 syslogd kqueue
744 744 3 0 180 fffffec7ffae9b80 dhcpcd poll
465 465 3 0 180 fffffec7ffae9300 dhcpcd poll
599 599 3 0 180 fffffec7ffbea780 dhcpcd poll
598 598 3 1 180 fffffec7ff7aa2c0 dhcpcd poll
292 292 3 1 180 fffffec7ff7aa700 dhcpcd poll
290 290 3 0 180 fffffec7ff5b5b00 dhcpcd poll
289 289 3 1 180 fffffec7ffbea340 dhcpcd poll
1 1 3 0 180 fffffec7f7080140 init wait
0 3533 3 1 200 fffffec80383c300 ktrace ktrwait
0 3022 5 0 200 fffffec803e51500 (zombie)
0 2901 3 0 200 fffffec8006a2100 ktrace ktrwait
0 2796 3 0 200 fffffec8040d15c0 ktrace ktrwait
0 928 3 0 200 fffffec7ff267200 physiod physiod
0 195 3 0 200 fffffec7ff29c240 pooldrain pooldrain
0 194 3 0 200 fffffec7ff267a80 ioflush syncer
0 193 3 1 200 fffffec7ff267640 pgdaemon pgdaemon
0 169 3 1 200 fffffec7fe1bf600 usb7 usbevt
0 168 3 1 200 fffffec7fe1bf1c0 usb6 usbevt
0 167 3 1 200 fffffec7fb152a00 usb5 usbevt
0 166 3 0 200 fffffec7fb1525c0 usb4 usbevt
0 165 3 0 200 fffffec7fb152180 usb3 usbevt
0 31 3 0 200 fffffec7f70809c0 usb2 usbevt
0 63 3 0 200 fffffec7f6ee0740 usb1 usbevt
0 126 3 1 200 fffffec7f6ee0b80 usb0 usbevt
0 125 3 1 200 fffffec7f6fd7340 usbtask-dr usbtsk
0 124 3 0 200 fffffec7f54a9b00 usbtask-hc usbtsk
0 123 3 0 200 fffffec7f7080580 npfgc0 npfgcw
0 122 3 1 200 fffffec7f7053980 rt_free rt_free
0 121 3 1 200 fffffec7f7053540 unpgc unpgc
0 120 3 0 200 fffffec7f7053100 key_timehandler key_timehandler
0 119 3 1 200 fffffec7f7036940 icmp6_wqinput/1 icmp6_wqinput
0 118 3 0 200 fffffec7f7036500 icmp6_wqinput/0 icmp6_wqinput
0 117 3 0 200 fffffec7f70360c0 nd6_timer nd6_timer
0 116 3 1 200 fffffec7f7032900 carp6_wqinput/1 carp6_wqinput
0 115 3 0 200 fffffec7f70324c0 carp6_wqinput/0 carp6_wqinput
0 114 3 1 200 fffffec7f7032080 carp_wqinput/1 carp_wqinput
0 113 3 0 200 fffffec7f70148c0 carp_wqinput/0 carp_wqinput
0 112 3 1 200 fffffec7f7014480 icmp_wqinput/1 icmp_wqinput
0 111 3 0 200 fffffec7f7014040 icmp_wqinput/0 icmp_wqinput
0 110 3 0 200 fffffec7f6fd7bc0 rt_timer rt_timer
0 109 3 0 200 fffffec7f6fd7780 vmem_rehash vmem_rehash
0 100 3 1 200 fffffec7f6ee0300 entbutler entropy
0 99 3 1 200 fffffec7f6948b40 viomb balloon
0 98 3 1 200 fffffec7f6948700 vioif0_txrx/1 vioif0_txrx
0 97 3 0 200 fffffec7f69482c0 vioif0_txrx/0 vioif0_txrx
0 30 3 1 200 fffffec7f54a96c0 scsibus0 sccomp
0 29 3 0 200 fffffec7f54a9280 pms0 pmsreset
0 28 3 1 200 fffffec7f53acac0 xcall/1 xcall
0 27 1 1 200 fffffec7f53ac680 softser/1
0 26 3 1 200 fffffec7f53ac240 softclk/1 tstile
0 25 1 1 200 fffffec7f5387a80 softbio/1
0 24 1 1 200 fffffec7f5387640 softnet/1
0 23 1 1 201 fffffec7f5387200 idle/1
0 22 3 1 200 fffffec92372da40 lnxsyswq lnxsyswq
0 21 3 1 200 fffffec92372d600 lnxubdwq lnxubdwq
0 20 3 1 200 fffffec92372d1c0 lnxpwrwq lnxpwrwq
0 19 3 1 200 fffffec923734a00 lnxlngwq lnxlngwq
0 18 3 1 200 fffffec9237345c0 lnxhipwq lnxhipwq
0 17 3 1 200 fffffec923734180 lnxrcugc lnxrcugc
0 16 3 0 200 fffffec9237539c0 sysmon smtaskq
0 15 3 1 200 fffffec923753580 pmfsuspend pmfsuspend
0 14 3 0 200 fffffec923753140 pmfevent pmfevent
0 13 3 1 200 fffffec92375e980 sopendfree sopendfr
0 12 3 0 200 fffffec92375e540 ifwdog ifwdog
0 11 3 0 200 fffffec92375e100 iflnkst iflnkst
0 10 3 1 200 fffffec924795940 nfssilly nfssilly
0 9 3 0 200 fffffec924795500 vdrain vdrain
0 8 3 1 200 fffffec9247950c0 modunload mod_unld
0 7 3 0 200 fffffec9247ba900 xcall/0 xcall
0 6 1 0 200 fffffec9247ba4c0 softser/0
0 5 3 0 200 fffffec9247ba080 softclk/0 tstile
0 4 1 0 200 fffffec9247eb8c0 softbio/0
0 3 1 0 200 fffffec9247eb480 softnet/0
0 2 1 0 201 fffffec9247eb040 idle/0
0 0 3 0 200 ffffffff86740c80 swapper uvm
[Locks tracked through LWPs]

****** LWP 2911.2911 (syz-executor.5) @ 0xfffffec803b64700, l_stat=7

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:ktrinit+0x20 sys/kern/kern_ktrace.c:266)
lock address : netbsd:ktrace_lock
type : sleep/adaptive
initialized : netbsd:ktrinit+0x20
shared holds : 0 exclusive: 1

shares wanted: 0 exclusive: 2
relevant cpu : 0 last held: 1
relevant lwp : 0xfffffec803b64700 last held: 0xfffffec80394c780

last locked* : netbsd:ktraddentry+0x58
unlocked : netbsd:ktraddentry+0x790

owner field : 0xfffffec80394c780 wait/spin: 1/0

Turnstile:
=> 0 waiting readers:

=> 2 waiting writers: 0xfffffec9247ba080 0xfffffec7f53ac240

****** LWP 3283.3283 (syz-executor.3) @ 0xfffffec80394c780, l_stat=7

shares wanted: 0 exclusive: 2

relevant cpu : 1 last held: 1

relevant lwp : 0xfffffec80394c780 last held: 0xfffffec80394c780

last locked* : netbsd:ktraddentry+0x58
unlocked : netbsd:ktraddentry+0x790

owner field : 0xfffffec80394c780 wait/spin: 1/0

Turnstile:
=> 0 waiting readers:

=> 2 waiting writers: 0xfffffec9247ba080 0xfffffec7f53ac240

*** Locks wanted: none

****** LWP 3050.3143 (syz-executor.1) @ 0xfffffec8038f74c0, l_stat=2

*** Locks held:

* Lock 0 (initialized at netbsd:filedesc_ctor+0xa1 sys/kern/kern_descrip.c:1328)
lock address : fffffec7ff61b540
type : sleep/adaptive
initialized : netbsd:filedesc_ctor+0xa1

shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0

relevant lwp : 0xfffffec8038f74c0 last held: 0xfffffec8038f74c0
last locked* : netbsd:fd_alloc+0xf3
unlocked : netbsd:fd_close+0x459
owner field : 0xfffffec8038f74c0 wait/spin: 0/0

Turnstile: no active turnstile for this lock.

*** Locks wanted: none

****** LWP 465.465 (dhcpcd) @ 0xfffffec7ffae9300, l_stat=3

relevant lwp : 0xfffffec7ffae9300 last held: 000000000000000000

last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 599.599 (dhcpcd) @ 0xfffffec7ffbea780, l_stat=3

relevant lwp : 0xfffffec7ffbea780 last held: 000000000000000000

last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 290.290 (dhcpcd) @ 0xfffffec7ff5b5b00, l_stat=3

relevant lwp : 0xfffffec7ff5b5b00 last held: 000000000000000000

last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 289.289 (dhcpcd) @ 0xfffffec7ffbea340, l_stat=3

relevant lwp : 0xfffffec7ffbea340 last held: 000000000000000000

last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 0.26 (softclk/1) @ 0xfffffec7f53ac240, l_stat=3

relevant lwp : 0xfffffec7f53ac240 last held: 000000000000000000

last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 0.11 (iflnkst) @ 0xfffffec92375e100, l_stat=3

relevant lwp : 0xfffffec92375e100 last held: 000000000000000000

last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 0.5 (softclk/0) @ 0xfffffec9247ba080, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:ktrinit+0x20 sys/kern/kern_ktrace.c:266)
lock address : netbsd:ktrace_lock
type : sleep/adaptive
initialized : netbsd:ktrinit+0x20
shared holds : 0 exclusive: 1

shares wanted: 0 exclusive: 2
relevant cpu : 0 last held: 1
relevant lwp : 0xfffffec9247ba080 last held: 0xfffffec80394c780

last locked* : netbsd:ktraddentry+0x58
unlocked : netbsd:ktraddentry+0x790

owner field : 0xfffffec80394c780 wait/spin: 1/0

Turnstile:
=> 0 waiting readers:

=> 2 waiting writers: 0xfffffec9247ba080 0xfffffec7f53ac240

****** LWP 0.0 (swapper) @ 0xffffffff86740c80, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:module_hook_init+0x1c sys/kern/kern_module_hook.c:132)
lock address : netbsd:module_hook
type : sleep/adaptive
initialized : netbsd:module_hook_init+0x1c
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0

relevant cpu : 0 last held: 0

relevant lwp : 0xffffffff86740c80 last held: 000000000000000000
last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

[Locks tracked through CPUs]

******* Locks held on cpu1:

relevant cpu : 1 last held: 1

relevant lwp : 0xfffffec80394c780 last held: 0xfffffec80394c780

last locked* : netbsd:kprintf_lock+0x50
unlocked : netbsd:kprintf_unlock+0x70
owner field : 0x0000000000000800 wait/spin: 0/1

PAGE FLAG PQ UOBJECT UANON

0xffffd28000007180 0045 00000000 0x0 0x0
0xffffd28000007200 0045 00000000 0x0 0x0
0xffffd28000007280 0045 00000000 0x0 0x0
0xffffd28000007300 0045 00000000 0x0 0x0
0xffffd28000007380 0045 00000000 0x0 0x0
0xffffd28000007400 0045 00000000 0x0 0x0
0xffffd28000007480 0045 00000000 0x0 0x0
0xffffd28000007500 0045 00000000 0x0 0x0
0xffffd28000007580 0045 00000000 0x0 0x0
0xffffd28000007600 0045 00000000 0x0 0x0

0xffffd28000007680 0041 00000000 0x0 0x0
0xffffd28000007700 0041 00000000 0x0 0x0
0xffffd28000007780 0041 00000000 0x0 0x0
0xffffd28000007800 0041 00000000 0x0 0x0

0xffffd28000007880 0045 00000000 0x0 0x0
0xffffd28000007900 0045 00000000 0x0 0x0

0xffffd28000007980 0041 00000000 0x0 0x0

0xffffd28000007a00 0041 00000000 0x0 0x0
0xffffd28000007a80 0041 00000000 0x0 0x0
0xffffd28000007b00 0041 00000000 0x0 0x0
0xffffd28000007b80 0041 00000000 0x0 0x0

0xffffd28000007c00 0041 00000000 0x0 0x0
0xffffd28000007c80 0041 00000000 0x0 0x0
0xffffd28000007d00 0041 00000000 0x0 0x0
0xffffd28000007d80 0041 00000000 0x0 0x0
0xffffd28000007e00 0041 00000000 0x0 0x0
0xffffd28000007e80 0041 00000000 0x0 0x0
0xffffd28000007f00 0041 00000000 0x0 0x0

0xffffd28000007f80 0041 00000000 0x0 0x0
0xffffd28000008000 0041 00000000 0x0 0x0
0xffffd28000008080 0041 00000000 0x0 0x0
0xffffd28000008100 0041 00000000 0x0 0x0
0xffffd28000008180 0041 00000000 0x0 0x0
0xffffd28000008200 0041 00000000 0x0 0x0
0xffffd28000008280 0041 00000000 0x0 0x0
0xffffd28000008300 0041 00000000 0x0 0x0
0xffffd28000008380 0041 00000000 0x0 0x0
0xffffd28000008400 0041 00000000 0x0 0x0
0xffffd28000008480 0041 00000000 0x0 0x0
0xffffd28000008500 0041 00000000 0x0 0x0
0xffffd28000008580 0041 00000000 0x0 0x0
0xffffd28000008600 0045 00000000 0x0 0x0
0xffffd28000008680 0041 00000000 0x0 0x0
0xffffd28000008700 0041 00000000 0x0 0x0
0xffffd28000008780 0041 00000000 0x0 0x0
0xffffd28000008800 0045 00000000 0x0 0x0
0xffffd28000008880 0041 00000000 0x0 0x0
0xffffd28000008900 0041 00000000 0x0 0x0
0xffffd28000008980 0041 00000000 0x0 0x0
0xffffd28000008a00 0041 00000000 0x0 0x0
0xffffd28000008a80 0041 00000000 0x0 0x0
0xffffd28000008b00 0041 00000000 0x0 0x0
0xffffd28000008b80 0041 00000000 0x0 0x0
0xffffd28000008c00 0041 00000000 0x0 0x0
0xffffd28000008c80 0041 00000000 0x0 0x0
0xffffd28000008d00 0041 00000000 0x0 0x0
0xffffd28000008d80 0041 00000000 0x0 0x0
0xffffd28000008e00 0041 00000000 0x0 0x0
0xffffd28000008e80 0041 00000000 0x0 0x0
0xffffd28000008f00 0041 00000000 0x0 0x0
0xffffd28000008f80 0041 00000000 0x0 0x0
0xffffd28000009000 0041 00000000 0x0 0x0
0xffffd28000009080 0041 00000000 0x0 0x0
0xffffd28000009100 0045 00000000 0x0 0x0
0xffffd28000009180 0041 00000000 0x0 0x0
0xffffd28000009200 0041 00000000 0x0 0x0
0xffffd28000009280 0041 00000000 0x0 0x0
0xffffd28000009300 0041 00000000 0x0 0x0
0xffffd28000009380 0041 00000000 0x0 0x0
0xffffd28000009400 0041 00000000 0x0 0x0
0xffffd28000009480 0045 00000000 0x0 0x0
0xffffd28000009500 0041 00000000 0x0 0x0
0xffffd28000009580 0041 00000000 0x0 0x0
0xffffd28000009600 0041 00000000 0x0 0x0
0xffffd28000009680 0041 00000000 0x0 0x0
0xffffd28000009700 0041 00000000 0x0 0x0
0xffffd28000009780 0041 00000000 0x0 0x0
0xffffd28000009800 0041 00000000 0x0 0x0
0xffffd28000009880 0041 00000000 0x0 0x0
0xffffd28000009900 0041 00000000 0x0 0x0
0xffffd28000009980 0041 00000000 0x0 0x0
0xffffd28000009a00 0041 00000000 0x0 0x0
0xffffd28000009a80 0045 00000000 0x0 0x0
0xffffd28000009b00 0041 00000000 0x0 0x0
0xffffd28000009b80 0041 00000000 0x0 0x0
0xffffd28000009c00 0041 00000000 0x0 0x0
0xffffd28000009c80 0041 00000000 0x0 0x0
0xffffd28000009d00 0041 00000000 0x0 0x0
0xffffd28000009d80 0041 00000000 0x0 0x0
0xffffd28000009e00 0041 00000000 0x0 0x0
0xffffd28000009e80 0041 00000000 0x0 0x0
0xffffd28000009f00 0041 00000000 0x0 0x0
0xffffd28000009f80 0041 00000000 0x0 0x0
0xffffd2800000a000 0041 00000000 0x0 0x0
0xffffd2800000a080 0041 00000000 0x0 0x0
0xffffd2800000a100 0041 00000000 0x0 0x0
0xffffd2800000a180 0041 00000000 0x0 0x0
0xffffd2800000a200 0041 00000000 0x0 0x0
0xffffd2800000a280 0041 00000000 0x0 0x0

0xffffd2800000a300 0041 00000000 0x0 0x0

0xffffd2800000a380 0041 00000000 0x0 0x0
0xffffd2800000a400 0041 00000000 0x0 0x0

0xffffd2800000a480 0041 00000000 0x0 0x0
0xffffd2800000a500 0041 00000000 0x0 0x0
0xffffd2800000a580 0041 00000000 0x0 0x0

0xffffd2800000a600 0041 00000000 0x0 0x0

0xffffd2800000a680 0041 00000000 0x0 0x0
0xffffd2800000a700 0041 00000000 0x0 0x0

0xffffd2800000a780 0041 00000000 0x0 0x0

0xffffd2800000a800 0041 00000000 0x0 0x0
0xffffd2800000a880 0041 00000000 0x0 0x0
0xffffd2800000a900 0041 00000000 0x0 0x0

0xffffd2800000a980 0041 00000000 0x0 0x0
0xffffd2800000aa00 0041 00000000 0x0 0x0
0xffffd2800000aa80 0041 00000000 0x0 0x0
0xffffd2800000ab00 0041 00000000 0x0 0x0
0xffffd2800000ab80 0041 00000000 0x0 0x0
0xffffd2800000ac00 0041 00000000 0x0 0x0
0xffffd2800000ac80 0041 00000000 0x0 0x0

0xffffd2800000ad00 0041 00000000 0x0 0x0
0xffffd2800000ad80 0041 00000000 0x0 0x0

0xffffd2800000ae00 0041 00000000 0x0 0x0

0xffffd2800000ae80 0045 00000000 0x0 0x0

0xffffd2800000af00 0045 00000000 0x0 0x0
0xffffd2800000af80 0045 00000000 0x0 0x0
0xffffd2800000b000 0041 00000000 0x0 0x0
0xffffd2800000b080 0041 00000000 0x0 0x0
0xffffd2800000b100 0041 00000000 0x0 0x0
0xffffd2800000b180 0045 00000000 0x0 0x0
0xffffd2800000b200 0041 00000000 0x0 0x0
0xffffd2800000b280 0045 00000000 0x0 0x0

0xffffd2800000b300 0045 00000000 0x0 0x0

0xffffd2800000b380 0045 00000000 0x0 0x0

0xffffd2800000b400 0041 00000000 0x0 0x0

0xffffd2800000b480 0041 00000000 0x0 0x0

0xffffd2800000b500 0041 00000000 0x0 0x0
0xffffd2800000b580 0045 00000000 0x0 0x0
0xffffd2800000b600 0045 00000000 0x0 0x0

0xffffd2800000b680 0045 00000000 0x0 0x0

0xffffd2800000b700 0045 00000000 0x0 0x0

0xffffd2800000b780 0045 00000000 0x0 0x0
0xffffd2800000b800 0045 00000000 0x0 0x0

0xffffd2800000b880 0041 00000000 0x0 0x0
0xffffd2800000b900 0045 00000000 0x0 0x0

0xffffd2800000b980 0045 00000000 0x0 0x0
0xffffd2800000ba00 0045 00000000 0x0 0x0
0xffffd2800000ba80 0045 00000000 0x0 0x0
0xffffd2800000bb00 0045 00000000 0x0 0x0
0xffffd2800000bb80 0045 00000000 0x0 0x0
0xffffd2800000bc00 0045 00000000 0x0 0x0
0xffffd2800000bc80 0041 00000000 0x0 0x0
0xffffd2800000bd00 0045 00000000 0x0 0x0

0xffffd2800000bd80 0045 00000000 0x0 0x0

0xffffd2800000be00 0045 00000000 0x0 0x0

0xffffd2800000be80 0045 00000000 0x0 0x0

0xffffd2800000bf00 0045 00000000 0x0 0x0

0xffffd2800000bf80 0045 00000000 0x0 0x0

0xffffd2800000c000 0045 00000000 0x0 0x0
0xffffd2800000c080 0041 00000000 0x0 0x0
0xffffd2800000c100 0045 00000000 0x0 0x0
0xffffd2800000c180 0045 00000000 0x0 0x0
0xffffd2800000c200 0045 00000000 0x0 0x0

0xffffd2800000c280 0045 00000000 0x0 0x0
0xffffd2800000c300 0045 00000000 0x0 0x0
0xffffd2800000c380 0045 00000000 0x0 0x0
0xffffd2800000c400 0045 00000000 0x0 0x0
0xffffd2800000c480 0045 00000000 0x0 0x0

0xffffd2800000c500 0045 00000000 0x0 0x0

0xffffd2800000c580 0045 00000000 0x0 0x0

0xffffd2800000c600 0045 00000000 0x0 0x0
0xffffd2800000c680 0045 00000000 0x0 0x0
0xffffd2800000c700 0041 00000000 0x0 0x0
0xffffd2800000c780 0041 00000000 0x0 0x0
0xffffd2800000c800 0045 00000000 0x0 0x0
0xffffd2800000c880 0045 00000000 0x0 0x0
0xffffd2800000c900 0045 00000000 0x0 0x0
0xffffd2800000c980 0045 00000000 0x0 0x0
0xffffd2800000ca00 0045 00000000 0x0 0x0
0xffffd2800000ca80 0041 00000000 0x0 0x0
0xffffd2800000cb00 0041 00000000 0x0 0x0
0xffffd2800000cb80 0041 00000000 0x0 0x0
0xffffd2800000cc00 0045 00000000 0x0 0x0
0xffffd2800000cc80 0045 00000000 0x0 0x0
0xffffd2800000cd00 0045 00000000 0x0 0x0

0xffffd2800000cd80 0041 00000000 0x0 0x0

0xffffd2800000ce00 0045 00000000 0x0 0x0

0xffffd2800000ce80 0041 00000000 0x0 0x0

0xffffd2800000cf00 0041 00000000 0x0 0x0
0xffffd2800000cf80 0041 00000000 0x0 0x0
0xffffd2800000d000 0041 00000000 0x0 0x0

0xffffd2800000d080 0045 00000000 0x0 0x0
0xffffd2800000d100 0045 00000000 0x0 0x0

0xffffd2800000d180 0041 00000000 0x0 0x0
0xffffd2800000d200 0041 00000000 0x0 0x0
0xffffd2800000d280 0041 00000000 0x0 0x0

0xffffd2800000d300 0045 00000000 0x0 0x0

0xffffd2800000d380 0041 00000000 0x0 0x0
0xffffd2800000d400 0041 00000000 0x0 0x0

0xffffd2800000d480 0045 00000000 0x0 0x0

0xffffd2800000d500 0041 00000000 0x0 0x0
0xffffd2800000d580 0041 00000000 0x0 0x0
0xffffd2800000d600 0041 00000000 0x0 0x0
0xffffd2800000d680 0045 00000000 0x0 0x0
0xffffd2800000d700 0041 00000000 0x0 0x0
0xffffd2800000d780 0045 00000000 0x0 0x0
0xffffd2800000d800 0041 00000000 0x0 0x0
0xffffd2800000d880 0045 00000000 0x0 0x0
0xffffd2800000d900 0041 00000000 0x0 0x0
0xffffd2800000d980 0041 00000000 0x0 0x0
0xffffd2800000da00 0041 00000000 0x0 0x0
0xffffd2800000da80 0041 00000000 0x0 0x0
0xffffd2800000db00 0045 00000000 0x0 0x0
0xffffd2800000db80 0045 00000000 0x0 0x0
0xffffd2800000dc00 0041 00000000 0x0 0x0
0xffffd2800000dc80 0041 00000000 0x0 0x0
0xffffd2800000dd00 0041 00000000 0x0 0x0
0xffffd2800000dd80 0041 00000000 0x0 0x0
0xffffd2800000de00 0041 00000000 0x0 0x0
0xffffd2800000de80 0041 00000000 0x0 0x0
0xffffd2800000df00 0045 00000000 0x0 0x0
0xffffd2800000df80 0045 00000000 0x0 0x0
0xffffd2800000e000 0045 00000000 0x0 0x0
0xffffd2800000e080 0041 00000000 0x0 0x0
0xffffd2800000e100 0041 00000000 0x0 0x0
0xffffd2800000e180 0045 00000000 0x0 0x0
0xffffd2800000e200 0041 00000000 0x0 0x0
0xffffd2800000e280 0045 00000000 0x0 0x0
0xffffd2800000e300 0045 00000000 0x0 0x0
0xffffd2800000e380 0041 00000000 0x0 0x0
0xffffd2800000e400 0045 00000000 0x0 0x0
0xffffd2800000e480 0041 00000000 0x0 0x0
0xffffd2800000e500 0041 00000000 0x0 0x0
0xffffd2800000e580 0041 00000000 0x0 0x0
0xffffd2800000e600 0045 00000000 0x0 0x0
0xffffd2800000e680 0041 00000000 0x0 0x0
0xffffd2800000e700 0041 00000000 0x0 0x0
0xffffd2800000e780 0041 00000000 0x0 0x0
0xffffd2800000e800 0045 00000000 0x0 0x0
0xffffd2800000e880 0041 00000000 0x0 0x0
0xffffd2800000e900 0045 00000000 0x0 0x0
0xffffd2800000e980 0041 00000000 0x0 0x0
0xffffd2800000ea00 0041 00000000 0x0 0x0
0xffffd2800000ea80 0045 00000000 0x0 0x0
0xffffd2800000eb00 0041 00000000 0x0 0x0
0xffffd2800000eb80 0045 00000000 0x0 0x0
0xffffd2800000ec00 0041 00000000 0x0 0x0
0xffffd2800000ec80 0045 00000000 0x0 0x0
0xffffd2800000ed00 0041 00000000 0x0 0x0
0xffffd2800000ed80 0041 00000000 0x0 0x0
0xffffd2800000ee00 0041 00000000 0x0 0x0
0xffffd2800000ee80 0041 00000000 0x0 0x0
0xffffd2800000ef00 0041 00000000 0x0 0x0
0xffffd2800000ef80 0041 00000000 0x0 0x0
0xffffd2800000f000 0041 00000000 0x0 0x0
0xffffd2800000f080 0041 00000000 0x0 0x0
0xffffd2800000f100 0041 00000000 0x0 0x0
0xffffd2800000f180 0041 00000000 0x0 0x0
0xffffd2800000f200 0041 00000000 0x0 0x0
0xffffd2800000f280 0045 00000000 0x0 0x0
0xffffd2800000f300 0041 00000000 0x0 0x0
0xffffd2800000f380 0041 00000000 0x0 0x0
0xffffd2800000f400 0045 00000000 0x0 0x0
0xffffd2800000f480 0045 00000000 0x0 0x0
0xffffd2800000f500 0041 00000000 0x0 0x0
0xffffd2800000f580 0041 00000000 0x0 0x0
0xffffd2800000f600 0041 00000000 0x0 0x0
0xffffd2800000f680 0041 00000000 0x0 0x0
0xffffd2800000f700 0041 00000000 0x0 0x0
0xffffd2800000f780 0041 00000000 0x0 0x0
0xffffd2800000f800 0041 00000000 0x0 0x0
0xffffd2800000f880 0041 00000000 0x0 0x0
0xffffd2800000f900 0041 00000000 0x0 0x0
0xffffd2800000f980 0045 00000000 0x0 0x0
0xffffd2800000fa00 0041 00000000 0x0 0x0
0xffffd2800000fa80 0041 00000000 0x0 0x0
0xffffd2800000fb00 0041 00000000 0x0 0x0
0xffffd2800000fb80 0041 00000000 0x0 0x0
0xffffd2800000fc00 0045 00000000 0x0 0x0
0xffffd2800000fc80 0045 00000000 0x0 0x0
0xffffd2800000fd00 0041 00000000 0x0 0x0
0xffffd2800000fd80 0041 00000000 0x0 0x0
0xffffd2800000fe00 0041 00000000 0x0 0x0
0xffffd2800000fe80 0041 00000000 0x0 0x0
0xffffd2800000ff00 0041 00000000 0x0 0x0
0xffffd2800000ff80 0041 00000000 0x0 0x0
0xffffd28000010000 0041 00000000 0x0 0x0
0xffffd28000010080 0041 00000000 0x0 0x0
0xffffd28000010100 0045 00000000 0x0 0x0
0xffffd28000010180 0045 00000000 0x0 0x0
0xffffd28000010200 0045 00000000 0x0 0x0
0xffffd28000010280 0041 00000000 0x0 0x0
0xffffd28000010300 0041 00000000 0x0 0x0
0xffffd28000010380 0041 00000000 0x0 0x0
0xffffd28000010400 0041 00000000 0x0 0x0
0xffffd28000010480 0041 00000000 0x0 0x0
0xffffd28000010500 0041 00000000 0x0 0x0
0xffffd28000010580 0041 00000000 0x0 0x0
0xffffd28000010600 0041 00000000 0x0 0x0
0xffffd28000010680 0041 00000000 0x0 0x0
0xffffd28000010700 0045 00000000 0x0 0x0
0xffffd28000010780 0041 00000000 0x0 0x0
0xffffd28000010800 0041 00000000 0x0 0x0
0xffffd28000010880 0045 00000000 0x0 0x0
0xffffd28000010900 0045 00000000 0x0 0x0
0xffffd28000010980 0045 00000000 0x0 0x0
0xffffd28000010a00 0045 00000000 0x0 0x0
0xffffd28000010a80 0045 00000000 0x0 0x0
0xffffd28000010b00 0041 00000000 0x0 0x0
0xffffd28000010b80 0041 00000000 0x0 0x0
0xffffd28000010c00 0041 00000000 0x0 0x0
0xffffd28000010c80 0041 00000000 0x0 0x0
0xffffd28000010d00 0041 00000000 0x0 0x0
0xffffd28000010d80 0041 00000000 0x0 0x0
0xffffd28000010e00 0041 00000000 0x0 0x0
0xffffd28000010e80 0041 00000000 0x0 0x0
0xffffd28000010f00 0041 00000000 0x0 0x0
0xffffd28000010f80 0041 00000000 0x0 0x0
0xffffd28000011000 0041 00000000 0x0 0x0
0xffffd28000011080 0045 00000000 0x0 0x0
0xffffd28000011100 0041 00000000 0x0 0x0
0xffffd28000011180 0041 00000000 0x0 0x0
0xffffd28000011200 0045 00000000 0x0 0x0
0xffffd28000011280 0041 00000000 0x0 0x0
0xffffd28000011300 0041 00000000 0x0 0x0
0xffffd28000011380 0041 00000000 0x0 0x0
0xffffd28000011400 0041 00000000 0x0 0x0
0xffffd28000011480 0041 00000000 0x0 0x0
0xffffd28000011500 0041 00000000 0x0 0x0
0xffffd28000011580 0041 00000000 0x0 0x0
0xffffd28000011600 0041 00000000 0x0 0x0
0xffffd28000011680 0041 00000000 0x0 0x0
0xffffd28000011700 0041 00000000 0x0 0x0
0xffffd28000011780 0045 00000000 0x0 0x0
0xffffd28000011800 0041 00000000 0x0 0x0
0xffffd28000011880 0041 00000000 0x0 0x0
0xffffd28000011900 0045 00000000 0x0 0x0
0xffffd28000011980 0041 00000000 0x0 0x0
0xffffd28000011a00 0041 00000000 0x0 0x0
0xffffd28000011a80 0041 00000000 0x0 0x0
0xffffd28000011b00 0045 00000000 0x0 0x0
0xffffd28000011b80 0041 00000000 0x0 0x0
0xffffd28000011c00 0041 00000000 0x0 0x0
0xffffd28000011c80 0041 00000000 0x0 0x0

0xffffd28000011d00 0041 00000000 0x0 0x0
0xffffd28000011d80 0041 00000000 0x0 0x0

0xffffd28000011e00 0045 00000000 0x0 0x0
0xffffd28000011e80 0045 00000000 0x0 0x0

0xffffd28000011f00 0041 00000000 0x0 0x0
0xffffd28000011f80 0041 00000000 0x0 0x0

0xffffd28000012000 0041 00000000 0x0 0x0
0xffffd28000012080 0041 00000000 0x0 0x0
0xffffd28000012100 0041 00000000 0x0 0x0
0xffffd28000012180 0045 00000000 0x0 0x0
0xffffd28000012200 0041 00000000 0x0 0x0
0xffffd28000012280 0041 00000000 0x0 0x0

0xffffd28000012300 0041 00000000 0x0 0x0
0xffffd28000012380 0041 00000000 0x0 0x0
0xffffd28000012400 0041 00000000 0x0 0x0
0xffffd28000012480 0041 00000000 0x0 0x0

0xffffd28000012500 0045 00000000 0x0 0x0

0xffffd28000012580 0041 00000000 0x0 0x0
0xffffd28000012600 0041 00000000 0x0 0x0
0xffffd28000012680 0041 00000000 0x0 0x0
0xffffd28000012700 0041 00000000 0x0 0x0
0xffffd28000012780 0041 00000000 0x0 0x0
0xffffd28000012800 0041 00000000 0x0 0x0
0xffffd28000012880 0041 00000000 0x0 0x0
0xffffd28000012900 0041 00000000 0x0 0x0
0xffffd28000012980 0041 00000000 0x0 0x0

0xffffd28000012a00 0041 00000000 0x0 0x0
0xffffd28000012a80 0041 00000000 0x0 0x0
0xffffd28000012b00 0041 00000000 0x0 0x0
0xffffd28000012b80 0041 00000000 0x0 0x0
0xffffd28000012c00 0041 00000000 0x0 0x0
0xffffd28000012c80 0045 00000000 0x0 0x0
0xffffd28000012d00 0001 00000000 0x0 0x0
0xffffd28000012d80 0001 00000000 0x0 0x0
0xffffd28000012e00 0001 00000000 0x0 0x0
0xffffd28000012e80 0001 00000000 0x0 0x0
0xffffd28000012f00 0001 00000000 0x0 0x0
0xffffd28000012f80 0001 00000000 0x0 0x0
0xffffd28000013000 0001 00000000 0x0 0x0
0xffffd28000013080 0001 00000000 0x0 0x0
0xffffd28000013100 0001 00000000 0x0 0x0
0xffffd28000013180 0001 00000000 0x0 0x0
0xffffd28000013200 0001 00000000 0x0 0x0
0xffffd28000013280 0001 00000000 0x0 0x0

0xffffd28000013300 0001 00000000 0x0 0x0
0xffffd28000013380 0001 00000000 0x0 0x0
0xffffd28000013400 0001 00000000 0x0 0x0
0xffffd28000013480 0001 00000000 0x0 0x0
0xffffd28000013500 0001 00000000 0x0 0x0
0xffffd28000013580 0001 00000000 0x0 0x0
0xffffd28000013600 0001 00000000 0x0 0x0
0xffffd28000013680 0001 00000000 0x0 0x0
0xffffd28000013700 0001 00000000 0x0 0x0
0xffffd28000013780 0001 00000000 0x0 0x0
0xffffd28000013800 0001 00000000 0x0 0x0
0xffffd28000013880 0001 00000000 0x0 0x0
0xffffd28000013900 0001 00000000 0x0 0x0
0xffffd28000013980 0001 00000000 0x0 0x0

0xffffd28000013a00 0001 00000000 0x0 0x0
0xffffd28000013a80 0001 00000000 0x0 0x0
0xffffd28000013b00 0001 00000000 0x0 0x0
0xffffd28000013b80 0001 00000000 0x0 0x0
0xffffd28000013c00 0001 00000000 0x0 0x0
0xffffd28000013c80 0001 00000000 0x0 0x0

0xffffd28000013d00 0001 00000000 0x0 0x0
0xffffd28000013d80 0001 00000000 0x0 0x0
0xffffd28000013e00 0001 00000000 0x0 0x0
0xffffd28000013e80 0001 00000000 0x0 0x0
0xffffd28000013f00 0001 00000000 0x0 0x0
0xffffd28000013f80 0001 00000000 0x0 0x0

0xffffd28000014000 0001 00000000 0x0 0x0
0xffffd28000014080 0001 00000000 0x0 0x0
0xffffd28000014100 0001 00000000 0x0 0x0
0xffffd28000014180 0001 00000000 0x0 0x0
0xffffd28000014200 0001 00000000 0x0 0x0
0xffffd28000014280 0001 00000000 0x0 0x0

0xffffd28000014300 0001 00000000 0x0 0x0
0xffffd28000014380 0001 00000000 0x0 0x0
0xffffd28000014400 0001 00000000 0x0 0x0
0xffffd28000014480 0001 00000000 0x0 0x0
0xffffd28000014500 0001 00000000 0x0 0x0
0xffffd28000014580 0001 00000000 0x0 0x0
0xffffd28000014600 0001 00000000 0x0 0x0
0xffffd28000014680 0001 00000000 0x0 0x0
0xffffd28000014700 0001 00000000 0x0 0x0
0xffffd28000014780 0001 00000000 0x0 0x0

0xffffd28000014800 0041 00000000 0x0 0x0
0xffffd28000014880 0041 00000000 0x0 0x0

0xffffd28000014900 0041 00000000 0x0 0x0
0xffffd28000014980 0041 00000000 0x0 0x0

0xffffd28000014a00 0041 00000000 0x0 0x0
0xffffd28000014a80 0041 00000000 0x0 0x0
0xffffd28000014b00 0041 00000000 0x0 0x0
0xffffd28000014b80 0041 00000000 0x0 0x0
0xffffd28000014c00 0041 00000000 0x0 0x0
0xffffd28000014c80 0041 00000000 0x0 0x0

0xffffd28000014d00 0041 00000000 0x0 0x0
0xffffd28000014d80 0041 00000000 0x0 0x0
0xffffd28000014e00 0041 00000000 0x0 0x0
0xffffd28000014e80 0041 00000000 0x0 0x0
0xffffd28000014f00 0041 00000000 0x0 0x0
0xffffd28000014f80 0041 00000000 0x0 0x0

0xffffd28000015000 0041 00000000 0x0 0x0
0xffffd28000015080 0041 00000000 0x0 0x0
0xffffd28000015100 0041 00000000 0x0 0x0
0xffffd28000015180 0041 00000000 0x0 0x0
0xffffd28000015200 0041 00000000 0x0 0x0
0xffffd28000015280 0041 00000000 0x0 0x0

0xffffd28000015300 0041 00000000 0x0 0x0
0xffffd28000015380 0041 00000000 0x0 0x0
0xffffd28000015400 0041 00000000 0x0 0x0
0xffffd28000015480 0041 00000000 0x0 0x0
0xffffd28000015500 0041 00000000 0x0 0x0
0xffffd28000015580 0041 00000000 0x0 0x0
0xffffd28000015600 0041 00000000 0x0 0x0
0xffffd28000015680 0041 00000000 0x0 0x0
0xffffd28000015700 0041 00000000 0x0 0x0
0xffffd28000015780 0041 00000000 0x0 0x0
0xffffd28000015800 0041 00000000 0x0 0x0
0xffffd28000015880 0041 00000000 0x0 0x0
0xffffd28000015900 0041 00000000 0x0 0x0
0xffffd28000015980 0041 00000000 0x0 0x0

0xffffd28000015a00 0041 00000000 0x0 0x0
0xffffd28000015a80 0041 00000000 0x0 0x0
0xffffd28000015b00 0041 00000000 0x0 0x0
0xffffd28000015b80 0041 00000000 0x0 0x0
0xffffd28000015c00 0041 00000000 0x0 0x0
0xffffd28000015c80 0041 00000000 0x0 0x0
0xffffd28000015d00 0001 00000000 0x0 0x0
0xffffd28000015d80 0001 00000000 0x0 0x0
0xffffd28000015e00 0001 00000000 0x0 0x0
0xffffd28000015e80 0001 00000000 0x0 0x0
0xffffd28000015f00 0001 00000000 0x0 0x0
0xffffd28000015f80 0001 00000000 0x0 0x0
0xffffd28000016000 0001 00000000 0x0 0x0
0xffffd28000016080 0001 00000000 0x0 0x0
0xffffd28000016100 0001 00000000 0x0 0x0
0xffffd28000016180 0001 00000000 0x0 0x0
0xffffd28000016200 0001 00000000 0x0 0x0
0xffffd28000016280 0001 00000000 0x0 0x0

0xffffd28000016300 0001 00000000 0x0 0x0
0xffffd28000016380 0001 00000000 0x0 0x0
0xffffd28000016400 0001 00000000 0x0 0x0
0xffffd28000016480 0001 00000000 0x0 0x0
0xffffd28000016500 0001 00000000 0x0 0x0
0xffffd28000016580 0001 00000000 0x0 0x0
0xffffd28000016600 0001 00000000 0x0 0x0
0xffffd28000016680 0001 00000000 0x0 0x0
0xffffd28000016700 0001 00000000 0x0 0x0
0xffffd28000016780 0001 00000000 0x0 0x0
0xffffd28000016800 0001 00000000 0x0 0x0
0xffffd28000016880 0001 00000000 0x0 0x0
0xffffd28000016900 0001 00000000 0x0 0x0
0xffffd28000016980 0001 00000000 0x0 0x0

0xffffd28000016a00 0001 00000000 0x0 0x0
0xffffd28000016a80 0001 00000000 0x0 0x0
0xffffd28000016b00 0001 00000000 0x0 0x0
0xffffd28000016b80 0001 00000000 0x0 0x0
0xffffd28000016c00 0001 00000000 0x0 0x0
0xffffd28000016c80 0001 00000000 0x0 0x0

0xffffd28000016d00 0001 00000000 0x0 0x0
0xffffd28000016d80 0001 00000000 0x0 0x0
0xffffd28000016e00 0001 00000000 0x0 0x0
0xffffd28000016e80 0001 00000000 0x0 0x0
0xffffd28000016f00 0001 00000000 0x0 0x0
0xffffd28000016f80 0001 00000000 0x0 0x0

0xffffd28000017000 0001 00000000 0x0 0x0
0xffffd28000017080 0001 00000000 0x0 0x0
0xffffd28000017100 0001 00000000 0x0 0x0
0xffffd28000017180 0001 00000000 0x0 0x0
0xffffd28000017200 0001 00000000 0x0 0x0
0xffffd28000017280 0001 00000000 0x0 0x0
0xffffd28000017300 0001 00000000 0x0 0x0
0xffffd28000017380 0001 00000000 0x0 0x0
0xffffd28000017400 0001 00000000 0x0 0x0
0xffffd28000017480 0001 00000000 0x0 0x0
0xffffd28000017500 0001 00000000 0x0 0x0
0xffffd28000017580 0001 00000000 0x0 0x0
0xffffd28000017600 0001 00000000 0x0 0x0
0xffffd28000017680 0001 00000000 0x0 0x0
0xffffd28000017700 0001 00000000 0x0 0x0
0xffffd28000017780 0001 00000000 0x0 0x0
0xffffd28000017800 0041 00000000 0x0 0x0
0xffffd28000017880 0041 00000000 0x0 0x0
0xffffd28000017900 0041 00000000 0x0 0x0
0xffffd28000017980 0041 00000000 0x0 0x0
0xffffd28000017a00 0041 00000000 0x0 0x0
0xffffd28000017a80 0041 00000000 0x0 0x0
0xffffd28000017b00 0041 00000000 0x0 0x0
0xffffd28000017b80 0041 00000000 0x0 0x0
0xffffd28000017c00 0041 00000000 0x0 0x0
0xffffd28000017c80 0041 00000000 0x0 0x0
0xffffd28000017d00 0041 00000000 0x0 0x0
0xffffd28000017d80 0041 00000000 0x0 0x0
0xffffd28000017e00 0041 00000000 0x0 0x0
0xffffd28000017e80 0041 00000000 0x0 0x0
0xffffd28000017f00 0041 00000000 0x0 0x0
0xffffd28000017f80 0041 00000000 0x0 0x0
0xffffd28000018000 0041 00000000 0x0 0x0
0xffffd28000018080 0041 00000000 0x0 0x0
0xffffd28000018100 0041 00000000 0x0 0x0
0xffffd28000018180 0041 00000000 0x0 0x0
0xffffd28000018200 0041 00000000 0x0 0x0
0xffffd28000018280 0041 00000000 0x0 0x0
0xffffd28000018300 0041 00000000 0x0 0x0
0xffffd28000018380 0041 00000000 0x0 0x0
0xffffd28000018400 0041 00000000 0x0 0x0
0xffffd28000018480 0041 00000000 0x0 0x0
0xffffd28000018500 0041 00000000 0x0 0x0
0xffffd28000018580 0041 00000000 0x0 0x0
0xffffd28000018600 0041 00000000 0x0 0x0
0xffffd28000018680 0041 00000000 0x0 0x0
0xffffd28000018700 0041 00000000 0x0 0x0
0xffffd28000018780 0041 00000000 0x0 0x0
0xffffd28000018800 0041 00000000 0x0 0x0
0xffffd28000018880 0041 00000000 0x0 0x0
0xffffd28000018900 0041 00000000 0x0 0x0
0xffffd28000018980 0041 00000000 0x0 0x0
0xffffd28000018a00 0041 00000000 0x0 0x0
0xffffd28000018a80 0041 00000000 0x0 0x0
0xffffd28000018b00 0041 00000000 0x0 0x0
0xffffd28000018b80 0041 00000000 0x0 0x0
0xffffd28000018c00 0041 00000000 0x0 0x0
0xffffd28000018c80 0041 00000000 0x0 0x0
0xffffd28000018d00 0041 00000000 0x0 0x0
0xffffd28000018d80 0001 00000000 0x0 0x0
0xffffd28000018e00 0001 00000000 0x0 0x0
0xffffd28000018e80 0001 00000000 0x0 0x0
0xffffd28000018f00 0001 00000000 0x0 0x0
0xffffd28000018f80 0001 00000000 0x0 0x0
0xffffd28000019000 0001 00000000 0x0 0x0
0xffffd28000019080 0001 00000000 0x0 0x0
0xffffd28000019100 0001 00000000 0x0 0x0
0xffffd28000019180 0001 00000000 0x0 0x0
0xffffd28000019200 0001 00000000 0x0 0x0
0xffffd28000019280 0001 00000000 0x0 0x0
0xffffd28000019300 0001 00000000 0x0 0x0
0xffffd28000019380 0001 00000000 0x0 0x0
0xffffd28000019400 0001 00000000 0x0 0x0
0xffffd28000019480 0001 00000000 0x0 0x0
0xffffd28000019500 0001 00000000 0x0 0x0
0xffffd28000019580 0001 00000000 0x0 0x0
0xffffd28000019600 0001 00000000 0x0 0x0
0xffffd28000019680 0001 00000000 0x0 0x0
0xffffd28000019700 0001 00000000 0x0 0x0
0xffffd28000019780 0001 00000000 0x0 0x0
0xffffd28000019800 0001 00000000 0x0 0x0
0xffffd28000019880 0001 00000000 0x0 0x0
0xffffd28000019900 0001 00000000 0x0 0x0
0xffffd28000019980 0001 00000000 0x0 0x0
0xffffd28000019a00 0001 00000000 0x0 0x0

0xffffd28000019a80 0001 00000000 0x0 0x0

0xffffd28000019b00 0001 00000000 0x0 0x0
0xffffd28000019b80 0001 00000000 0x0 0x0
0xffffd28000019c00 0001 00000000 0x0 0x0
0xffffd28000019c80 0001 00000000 0x0 0x0
0xffffd28000019d00 0001 00000000 0x0 0x0
0xffffd28000019d80 0001 00000000 0x0 0x0
0xffffd28000019e00 0001 00000000 0x0 0x0
0xffffd28000019e80 0001 00000000 0x0 0x0
0xffffd28000019f00 0001 00000000 0x0 0x0
0xffffd28000019f80 0001 00000000 0x0 0x0
0xffffd2800001a000 0001 00000000 0x0 0x0
0xffffd2800001a080 0001 00000000 0x0 0x0
0xffffd2800001a100 0001 00000000 0x0 0x0
0xffffd2800001a180 0001 00000000 0x0 0x0
0xffffd2800001a200 0001 00000000 0x0 0x0
0xffffd2800001a280 0001 00000000 0x0 0x0
0xffffd2800001a300 0001 00000000 0x0 0x0
0xffffd2800001a380 0001 00000000 0x0 0x0
0xffffd2800001a400 0001 00000000 0x0 0x0
0xffffd2800001a480 0001 00000000 0x0 0x0
0xffffd2800001a500 0001 00000000 0x0 0x0
0xffffd2800001a580 0001 00000000 0x0 0x0
0xffffd2800001a600 0001 00000000 0x0 0x0
0xffffd2800001a680 0001 00000000 0x0 0x0
0xffffd2800001a700 0001 00000000 0x0 0x0
0xffffd2800001a780 0001 00000000 0x0 0x0
0xffffd2800001a800 0001 00000000 0x0 0x0
0xffffd2800001a880 0041 00000000 0x0 0x0

0xffffd2800001a900 0041 00000000 0x0 0x0
0xffffd2800001a980 0041 00000000 0x0 0x0

0xffffd2800001aa00 0041 00000000 0x0 0x0
0xffffd2800001aa80 0041 00000000 0x0 0x0
0xffffd2800001ab00 0041 00000000 0x0 0x0
0xffffd2800001ab80 0041 00000000 0x0 0x0
0xffffd2800001ac00 0041 00000000 0x0 0x0
0xffffd2800001ac80 0041 00000000 0x0 0x0
0xffffd2800001ad00 0041 00000000 0x0 0x0
0xffffd2800001ad80 0041 00000000 0x0 0x0

0xffffd2800001ae00 0041 00000000 0x0 0x0
0xffffd2800001ae80 0041 00000000 0x0 0x0
0xffffd2800001af00 0041 00000000 0x0 0x0
0xffffd2800001af80 0041 00000000 0x0 0x0

0xffffd2800001b000 0041 00000000 0x0 0x0
0xffffd2800001b080 0041 00000000 0x0 0x0
0xffffd2800001b100 0041 00000000 0x0 0x0
0xffffd2800001b180 0041 00000000 0x0 0x0
0xffffd2800001b200 0041 00000000 0x0 0x0
0xffffd2800001b280 0041 00000000 0x0 0x0
0xffffd2800001b300 0041 00000000 0x0 0x0
0xffffd2800001b380 0041 00000000 0x0 0x0
0xffffd2800001b400 0041 00000000 0x0 0x0
0xffffd2800001b480 0041 00000000 0x0 0x0
0xffffd2800001b500 0041 00000000 0x0 0x0
0xffffd2800001b580 0041 00000000 0x0 0x0
0xffffd2800001b600 0041 00000000 0x0 0x0
0xffffd2800001b680 0041 00000000 0x0 0x0
0xffffd2800001b700 0041 00000000 0x0 0x0
0xffffd2800001b780 0045 00000000 0x0 0x0
0xff

Tested on:

commit: 0305459b Only update distrib/sets/lists/tests/mi with ..

git tree: https://github.com/NetBSD/src trunk

console output: https://syzkaller.appspot.com/x/log.txt?x=101e2c55080000

kernel config: https://syzkaller.appspot.com/x/.config?x=1420f906d33d9f1f
dashboard link: https://syzkaller.appspot.com/bug?extid=1bee937496ae35ea301c
compiler: g++ (Debian 10.2.1-6) 10.2.1 20210110