protection fault in fork1 (4)

0 views
Skip to first unread message

syzbot

unread,
Aug 30, 2023, 6:39:46 PM8/30/23
to syzkaller-...@googlegroups.com
Hello,

syzbot found the following issue on:

HEAD commit: 23ee83f7c0ae c.7: mention that C11 and C17 have been publi..
git tree: netbsd
console output: https://syzkaller.appspot.com/x/log.txt?x=140a1b87a80000
kernel config: https://syzkaller.appspot.com/x/.config?x=739e57438eb9ed9e
dashboard link: https://syzkaller.appspot.com/bug?extid=12e35f5565b8e83267a2
compiler: Debian clang version 15.0.6

Unfortunately, I don't have any reproducer for this issue yet.

Downloadable assets:
disk image: https://storage.googleapis.com/syzbot-assets/a2246aa2875c/disk-23ee83f7.raw.xz
netbsd.gdb: https://storage.googleapis.com/syzbot-assets/f5e0702a2a8a/netbsd-23ee83f7.gdb.xz

IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+12e35f...@syzkaller.appspotmail.com

[ 731.4816972] fatal protection fault in supervisor mode
[ 731.5274431] trap type 4 code 0 rip 0xffffffff851a3dac cs 0x8 rflags 0x10246 cr2 0x7b4115435f44 ilevel 0 rsp 0xffffad00c7bb9b50
[ 731.6097316] curlwp 0xffffad0013be90c0 pid 2117.2117 lowest kstack 0xffffad00c7bb22c0
kernel: protection fault trap, code=0
Stopped in pid 2117.2117 (syz-executor.1) at netbsd:fork1+0x25ac: movq 0(%r14),%rbx
?
fork1() at netbsd:fork1+0x25ac sys/kern/kern_fork.c:513
sys_fork() at netbsd:sys_fork+0xa5 sys/kern/kern_fork.c:120
sys___syscall() at netbsd:sys___syscall+0x2ae sy_call sys/sys/syscallvar.h:65 [inline]
sys___syscall() at netbsd:sys___syscall+0x2ae sys/kern/sys_syscall.c:90
syscall() at netbsd:syscall+0x60c sy_invoke sys/sys/syscallvar.h:94 [inline]
syscall() at netbsd:syscall+0x60c sys/arch/x86/x86/syscall.c:138
--- syscall (number 2 via SYS_syscall) ---
netbsd:syscall+0x60c:
Panic string: (null)
PID LID S CPU FLAGS STRUCT LWP * NAME WAIT
2045 2045 2 1 0 ffffad00140e0b40 syz-executor.0
2177 2177 3 1 0 ffffad00140e0700 syz-executor.1 uarea
3249 3249 2 0 0 ffffad00140e02c0 syz-executor.1
2033 2033 3 1 0 ffffad00140ce6c0 syz-executor.1 uarea
2900 2900 2 0 0 ffffad00140ce280 syz-executor.1
2042 2042 2 0 0 ffffad0013fe9ac0 syz-executor.1
2038 2038 2 0 0 ffffad0013fe9240 syz-executor.1
2156 2156 2 0 0 ffffad0013fcda80 syz-executor.1
2490 2490 2 0 0 ffffad0013fcd640 syz-executor.1
2867 2867 2 0 0 ffffad0013fcd200 syz-executor.1
2903 2903 2 0 0 ffffad0013ee1a40 syz-executor.1
2899 2899 2 0 0 ffffad0013ee1600 syz-executor.1
3285 3285 3 1 0 ffffad0013ee11c0 syz-executor.1 uarea
2176 2176 2 0 0 ffffad0013ecca00 syz-executor.1
2943 2943 2 0 0 ffffad0013ecc5c0 syz-executor.1
2521 2521 2 0 0 ffffad0013ecc180 syz-executor.1
3529 3529 2 0 0 ffffad0013eb89c0 syz-executor.1
2030 2030 2 0 0 ffffad0013eb8580 syz-executor.1
2018 2018 3 0 0 ffffad0013eb8140 syz-executor.1 uarea
3157 3157 2 0 0 ffffad0013da7980 syz-executor.1
3303 3303 2 0 0 ffffad0013da7100 syz-executor.1
2155 2155 2 1 40000 ffffad0013957900 syz-executor.1
2034 2034 2 0 40000 ffffad00139574c0 syz-executor.1
3254 3254 2 0 40000 ffffad0013be9940 syz-executor.1
2117 >2117 7 0 40000 ffffad0013be90c0 syz-executor.1
2859 2859 2 0 40000 ffffad001384bb80 syz-executor.3
3133 3133 2 0 40000 ffffad0013957080 syz-executor.2
3279 3279 2 0 40000 ffffad001382a6c0 syz-executor.5
3144 >3144 7 1 40000 ffffad00135b5580 syz-executor.4
3283 2897 1 0 0 ffffad00140ceb00 syz-executor.1
3283 3544 2 0 0 ffffad0013da7540 syz-executor.1
3283 2029 2 0 40000 ffffad0013818680 syz-executor.1
3283 2041 3 1 40000 ffffad001384f340 syz-executor.1 tstile
3283 3283 2 0 10040000 ffffad0013818ac0 syz-executor.1
654 654 3 1 180 ffffad0013836700 syz-executor.1 parked
2875 2875 3 1 180 ffffad0013538980 syz-executor.1 parked
3290 3290 2 0 140 ffffad001382ab00 syz-executor.5
3294 3294 2 0 140 ffffad0013764a80 syz-executor.3
1616 1616 3 1 40 ffffad00138362c0 syz-executor.0 tstile
1429 1429 2 0 140 ffffad001384b300 syz-executor.1
2366 2366 3 0 180 ffffad0013be9500 syz-executor.1 parked
1267 1267 3 0 180 ffffad0013a6f040 syz-executor.1 parked
1384 1384 3 0 180 ffffad0013818240 syz-executor.1 parked
2528 2528 3 0 180 ffffad0013836b40 syz-executor.1 parked
996 996 3 1 180 ffffad00135e6180 syz-executor.0 parked
2139 2277 3 1 11100000 ffffad00135e6a00 syz-executor.0 vfork
2139 2139 2 0 11000040 ffffad0013a6f480 syz-executor.0
1844 1844 2 0 140 ffffad001367da40 syz-executor.2
921 921 3 0 180 ffffad0013a6f8c0 syz-executor.0 parked
906 904 3 0 11100000 ffffad0013764200 syz-executor.0 vfork
906 906 2 0 11000040 ffffad00135b5140 syz-executor.0
510 510 3 1 180 ffffad001384fbc0 syz-executor.4 parked
873 873 2 0 140 ffffad0012c7c500 syz-executor.4
404 404 3 1 180 ffffad001384b740 syz-executor.1 parked
403 403 3 1 180 ffffad001384f780 syz-executor.1 parked
1334 1334 3 1 180 ffffad001382a280 syz-executor.1 parked
1239 1869 3 1 180 ffffad0013764640 syz-fuzzer kqueue
1239 1359 3 0 180 ffffad001367d1c0 syz-fuzzer parked
1239 1208 3 1 1c0 ffffad00135e65c0 syz-fuzzer wait
1239 1211 3 0 1c0 ffffad00135b59c0 syz-fuzzer wait
1239 1344 3 1 180 ffffad0013538540 syz-fuzzer parked
1239 1358 3 0 180 ffffad0013538100 syz-fuzzer parked
1239 1187 3 1 180 ffffad0012c7c940 syz-fuzzer wait
1239 1279 3 0 1c0 ffffad0012c7c0c0 syz-fuzzer wait
1239 1350 3 1 180 ffffad0012bbc900 syz-fuzzer parked
1239 1376 3 0 180 ffffad0012bbc4c0 syz-fuzzer parked
1239 932 3 0 180 ffffad0012bbc080 syz-fuzzer parked
1239 1202 3 1 1c0 ffffad0012396700 syz-fuzzer wait
1239 449 2 0 140 ffffad00125d0780 syz-fuzzer
1239 1239 3 1 180 ffffad0012304b00 syz-fuzzer wait
1126 1126 3 0 180 ffffad00123046c0 sshd select
949 949 3 0 180 ffffad0012304280 getty nanoslp
1236 1236 3 1 180 ffffad0012b8e8c0 getty nanoslp
1195 1195 3 0 180 ffffad0012204ac0 getty nanoslp
1186 1186 3 0 1c0 ffffad0012201200 getty ttyraw
800 800 3 0 180 ffffad0012b8e480 sshd select
1119 1119 3 1 180 ffffad0012b8e040 powerd kqueue
839 839 3 0 180 ffffad0012520300 syslogd kqueue
601 601 3 0 180 ffffad00123962c0 dhcpcd poll
745 745 3 0 180 ffffad0012520740 dhcpcd poll
567 567 3 0 180 ffffad00125d0bc0 dhcpcd poll
301 301 3 0 180 ffffad00125d0340 dhcpcd poll
492 492 3 1 180 ffffad0012396b40 dhcpcd poll
491 491 3 1 180 ffffad0012520b80 dhcpcd poll
1 1 3 1 180 ffffad0011ede100 init wait
0 1965 3 1 200 ffffad001367d600 ktrace ktrwait
0 944 3 0 200 ffffad0012201640 physiod physiod
0 196 3 1 200 ffffad0012204680 pooldrain pooldrain
0 195 3 0 200 ffffad0012204240 ioflush syncer
0 194 3 0 200 ffffad0012201a80 pgdaemon pgdaemon
0 167 3 0 200 ffffad0012170a40 usb7 usbevt
0 172 3 0 200 ffffad0012170600 usb6 usbevt
0 170 3 1 200 ffffad00121701c0 usb5 usbevt
0 168 3 0 200 ffffad0012141a00 usb4 usbevt
0 166 3 1 200 ffffad00121415c0 usb3 usbevt
0 165 3 0 200 ffffad0012141180 usb2 usbevt
0 31 3 0 200 ffffad00120859c0 usb1 usbevt
0 63 3 0 200 ffffad0012085580 usb0 usbevt
0 126 3 1 200 ffffad0012085140 usbtask-dr usbtsk
0 125 3 0 200 ffffad0011ede980 usbtask-hc usbtsk
0 124 3 0 200 ffffad00103f4b00 swwreboot swwreboot
0 123 3 1 200 ffffad0011ede540 npfgc0 npfgcw
0 122 3 1 200 ffffad0011ed1940 rt_free rt_free
0 121 3 1 200 ffffad0011ed1500 unpgc unpgc
0 120 3 0 200 ffffad0011ed10c0 key_timehandler key_timehandler
0 119 3 1 200 ffffad0011ecd900 icmp6_wqinput/1 icmp6_wqinput
0 118 3 0 200 ffffad0011ecd4c0 icmp6_wqinput/0 icmp6_wqinput
0 117 3 1 200 ffffad0011ecd080 nd6_timer nd6_timer
0 116 3 1 200 ffffad0011ceebc0 carp6_wqinput/1 carp6_wqinput
0 115 3 0 200 ffffad0011cee780 carp6_wqinput/0 carp6_wqinput
0 114 3 1 200 ffffad0011cee340 carp_wqinput/1 carp_wqinput
0 113 3 0 200 ffffad0011eaa8c0 carp_wqinput/0 carp_wqinput
0 112 3 1 200 ffffad0011eaa480 icmp_wqinput/1 icmp_wqinput
0 111 3 0 200 ffffad0011cecb80 icmp_wqinput/0 icmp_wqinput
0 110 3 0 200 ffffad0011cec740 rt_timer rt_timer
0 109 3 0 200 ffffad0011eaa040 vmem_rehash vmem_rehash
0 100 3 1 200 ffffad0011cec300 entbutler entropy
0 99 2 0 240 ffffad00117e0b40 viomb
0 98 3 1 200 ffffad00117e0700 vioif0_txrx/1 vioif0_txrx
0 97 3 0 200 ffffad00117e02c0 vioif0_txrx/0 vioif0_txrx
0 30 3 0 200 ffffad00103f46c0 scsibus0 sccomp
0 29 3 0 200 ffffad00103f4280 pms0 pmsreset
0 28 3 1 200 ffffad00103d9ac0 xcall/1 xcall
0 27 1 1 200 ffffad00103d9680 softser/1
0 26 1 1 200 ffffad00103d9240 softclk/1
0 25 1 1 200 ffffad00103d7a80 softbio/1
0 24 1 1 200 ffffad00103d7640 softnet/1
0 23 1 1 201 ffffad00103d7200 idle/1
0 22 3 0 200 ffffad000f1e3a40 lnxsyswq lnxsyswq
0 21 3 0 200 ffffad000f1e3600 lnxubdwq lnxubdwq
0 20 3 0 200 ffffad000f1e31c0 lnxpwrwq lnxpwrwq
0 19 3 0 200 ffffad000f1e1a00 lnxlngwq lnxlngwq
0 18 3 0 200 ffffad000f1e15c0 lnxhipwq lnxhipwq
0 17 3 0 200 ffffad000f1e1180 lnxrcugc lnxrcugc
0 16 3 0 200 ffffad000f1db9c0 sysmon smtaskq
0 15 3 0 200 ffffad000f1db580 pmfsuspend pmfsuspend
0 14 3 0 200 ffffad000f1db140 pmfevent pmfevent
0 13 3 0 200 ffffad000f1d9980 sopendfree sopendfr
0 12 3 0 200 ffffad000f1d9540 ifwdog ifwdog
0 11 3 1 200 ffffad000f1d9100 iflnkst iflnkst
0 10 3 0 200 ffffad000f1cf940 nfssilly nfssilly
0 9 3 0 200 ffffad000f1cf500 vdrain vdrain
0 8 3 1 200 ffffad000f1cf0c0 modunload mod_unld
0 7 3 0 200 ffffad000ebdb900 xcall/0 xcall
0 6 1 0 200 ffffad000ebdb4c0 softser/0
0 5 1 0 200 ffffad000ebdb080 softclk/0
0 4 1 0 200 ffffad000ebd98c0 softbio/0
0 3 1 0 200 ffffad000ebd9480 softnet/0
0 2 1 0 201 ffffad000ebd9040 idle/0
0 0 3 1 200 ffffffff8686ea80 swapper uvm
[Locks tracked through LWPs]

****** LWP 2045.2045 (syz-executor.0) @ 0xffffad00140e0b40, l_stat=2

*** Locks held:

* Lock 0 (initialized at netbsd:pmap_ctor+0xc0 sys/arch/x86/x86/pmap.c:2872)
lock address : ffffad00140d9540
type : sleep/adaptive
initialized : netbsd:pmap_ctor+0xc0
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 1
relevant lwp : 0xffffad00140e0b40 last held: 0xffffad00140e0b40
last locked* : netbsd:pmap_enter_ma+0x11ce
unlocked : netbsd:pmap_extract+0x72d
owner field : 0xffffad00140e0b40 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

* Lock 1 (initialized at netbsd:pool_init+0x2061 sys/kern/subr_pool.c:981)
lock address : netbsd:pmap_pvp_cache+0xb0
type : sleep/adaptive
initialized : netbsd:pool_init+0x2061
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 1
relevant lwp : 0xffffad00140e0b40 last held: 0xffffad00140e0b40
last locked* : netbsd:pool_get+0x7fc
unlocked : netbsd:pool_get+0x3a57
owner field : 0xffffad00140e0b40 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

*** Locks wanted: none

****** LWP 2943.2943 (syz-executor.1) @ 0xffffad0013ecc5c0, l_stat=2

*** Locks held:

* Lock 0 (initialized at netbsd:pmap_ctor+0xc0 sys/arch/x86/x86/pmap.c:2872)
lock address : ffffad0013eb48c0
type : sleep/adaptive
initialized : netbsd:pmap_ctor+0xc0
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffffad0013ecc5c0 last held: 0xffffad0013ecc5c0
last locked* : netbsd:pmap_extract+0x130
unlocked : netbsd:pmap_enter_ma+0x6f3f
owner field : 0xffffad0013ecc5c0 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

*** Locks wanted: none

****** LWP 2521.2521 (syz-executor.1) @ 0xffffad0013ecc180, l_stat=2

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:pmap_ctor+0xc0 sys/arch/x86/x86/pmap.c:2872)
lock address : ffffad0013eb4700
type : sleep/adaptive
initialized : netbsd:pmap_ctor+0xc0
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 1
relevant cpu : 0 last held: 0
relevant lwp : 0xffffad0013ecc180 last held: 000000000000000000
last locked : netbsd:pmap_extract+0x130
unlocked* : netbsd:pmap_extract+0x72d
owner field : 0xffffad0013ecc180 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 3529.3529 (syz-executor.1) @ 0xffffad0013eb89c0, l_stat=2

*** Locks held:

* Lock 0 (initialized at netbsd:pmap_ctor+0xc0 sys/arch/x86/x86/pmap.c:2872)
lock address : ffffad0013eb4540
type : sleep/adaptive
initialized : netbsd:pmap_ctor+0xc0
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffffad0013eb89c0 last held: 0xffffad0013eb89c0
last locked* : netbsd:pmap_enter_ma+0x11ce
unlocked : netbsd:pmap_extract+0x72d
owner field : 0xffffad0013eb89c0 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

*** Locks wanted: none

****** LWP 2030.2030 (syz-executor.1) @ 0xffffad0013eb8580, l_stat=2

*** Locks held:

* Lock 0 (initialized at netbsd:pmap_ctor+0xc0 sys/arch/x86/x86/pmap.c:2872)
lock address : ffffad0013eb4380
type : sleep/adaptive
initialized : netbsd:pmap_ctor+0xc0
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffffad0013eb8580 last held: 0xffffad0013eb8580
last locked* : netbsd:pmap_enter_ma+0x11ce
unlocked : netbsd:pmap_extract+0x72d
owner field : 0xffffad0013eb8580 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

*** Locks wanted: none

****** LWP 3157.3157 (syz-executor.1) @ 0xffffad0013da7980, l_stat=2

*** Locks held:

* Lock 0 (initialized at netbsd:uvmspace_fork+0x3e4 uvm_map_setup sys/uvm/uvm_map.c:4794 [inline])
* Lock 0 (initialized at netbsd:uvmspace_fork+0x3e4 uvmspace_init sys/uvm/uvm_map.c:4137 [inline])
* Lock 0 (initialized at netbsd:uvmspace_fork+0x3e4 uvmspace_alloc sys/uvm/uvm_map.c:4116 [inline])
* Lock 0 (initialized at netbsd:uvmspace_fork+0x3e4 sys/uvm/uvm_map.c:4593)
lock address : ffffad0013eaa060
type : sleep/adaptive
initialized : netbsd:uvmspace_fork+0x3e4
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffffad0013da7980 last held: 0xffffad0013da7980
last locked* : netbsd:vm_map_lock+0x57
unlocked : netbsd:uvm_fault_internal+0x667e
owner/count : 0xffffad0013da7980 flags : 0x0000000000000004
Turnstile: no active turnstile for this lock.

*** Locks wanted: none

****** LWP 3303.3303 (syz-executor.1) @ 0xffffad0013da7100, l_stat=2

*** Locks held:

* Lock 0 (initialized at netbsd:pmap_ctor+0xc0 sys/arch/x86/x86/pmap.c:2872)
lock address : ffffad0013d9be00
type : sleep/adaptive
initialized : netbsd:pmap_ctor+0xc0
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffffad0013da7100 last held: 0xffffad0013da7100
last locked* : netbsd:pmap_enter_ma+0x11ce
unlocked : netbsd:pmap_extract+0x72d
owner field : 0xffffad0013da7100 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

*** Locks wanted: none

****** LWP 2155.2155 (syz-executor.1) @ 0xffffad0013957900, l_stat=2

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:procinit+0x85 sys/kern/kern_proc.c:386)
lock address : netbsd:proc_lock
type : sleep/adaptive
initialized : netbsd:procinit+0x85
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 2
relevant cpu : 1 last held: 0
relevant lwp : 0xffffad0013957900 last held: 0xffffad0013be90c0
last locked* : netbsd:fork1+0x2566
unlocked : netbsd:lwp_create+0x2ebf
owner field : 0xffffad0013be90c0 wait/spin: 1/0
Turnstile:
=> 0 waiting readers:
=> 1 waiting writers: 0xffffad00138362c0

****** LWP 2117.2117 (syz-executor.1) @ 0xffffad0013be90c0, l_stat=7

*** Locks held:

* Lock 0 (initialized at netbsd:procinit+0x85 sys/kern/kern_proc.c:386)
lock address : netbsd:proc_lock
type : sleep/adaptive
initialized : netbsd:procinit+0x85
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 2
relevant cpu : 0 last held: 0
relevant lwp : 0xffffad0013be90c0 last held: 0xffffad0013be90c0
last locked* : netbsd:fork1+0x2566
unlocked : netbsd:lwp_create+0x2ebf
owner field : 0xffffad0013be90c0 wait/spin: 1/0
Turnstile:
=> 0 waiting readers:
=> 1 waiting writers: 0xffffad00138362c0

*** Locks wanted: none

****** LWP 2859.2859 (syz-executor.3) @ 0xffffad001384bb80, l_stat=2

*** Locks held:

* Lock 0 (initialized at netbsd:pmap_ctor+0xc0 sys/arch/x86/x86/pmap.c:2872)
lock address : ffffad0013830380
type : sleep/adaptive
initialized : netbsd:pmap_ctor+0xc0
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffffad001384bb80 last held: 0xffffad001384bb80
last locked* : netbsd:pmap_enter_ma+0x11ce
unlocked : netbsd:pmap_enter_ma+0x6f3f
owner field : 0xffffad001384bb80 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

*** Locks wanted: none

****** LWP 3133.3133 (syz-executor.2) @ 0xffffad0013957080, l_stat=2

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:pmap_ctor+0xc0 sys/arch/x86/x86/pmap.c:2872)
lock address : ffffad0012bb71c0
type : sleep/adaptive
initialized : netbsd:pmap_ctor+0xc0
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 1
relevant cpu : 0 last held: 0
relevant lwp : 0xffffad0013957080 last held: 000000000000000000
last locked : netbsd:pmap_extract+0x130
unlocked* : netbsd:pmap_extract+0x72d
owner field : 0xffffad0013957080 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 3279.3279 (syz-executor.5) @ 0xffffad001382a6c0, l_stat=2

*** Locks held:

* Lock 0 (initialized at netbsd:pmap_ctor+0xc0 sys/arch/x86/x86/pmap.c:2872)
lock address : ffffad0013830e00
type : sleep/adaptive
initialized : netbsd:pmap_ctor+0xc0
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffffad001382a6c0 last held: 0xffffad001382a6c0
last locked* : netbsd:pmap_enter_ma+0x11ce
unlocked : netbsd:pmap_extract+0x72d
owner field : 0xffffad001382a6c0 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

*** Locks wanted: none

****** LWP 3283.3544 (syz-executor.1) @ 0xffffad0013da7540, l_stat=2

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:file_ctor+0x297 sys/kern/kern_descrip.c:1242)
lock address : ffffad0013bc58f0
type : sleep/adaptive
initialized : netbsd:file_ctor+0x297
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 1
relevant cpu : 0 last held: 1
relevant lwp : 0xffffad0013da7540 last held: 000000000000000000
last locked : 0
unlocked* : 0
owner field : 0xffffad0013da7540 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 3283.2041 (syz-executor.1) @ 0xffffad001384f340, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:uvmspace_fork+0x3e4 uvm_map_setup sys/uvm/uvm_map.c:4794 [inline])
* Lock 0 (initialized at netbsd:uvmspace_fork+0x3e4 uvmspace_init sys/uvm/uvm_map.c:4137 [inline])
* Lock 0 (initialized at netbsd:uvmspace_fork+0x3e4 uvmspace_alloc sys/uvm/uvm_map.c:4116 [inline])
* Lock 0 (initialized at netbsd:uvmspace_fork+0x3e4 sys/uvm/uvm_map.c:4593)
lock address : ffffad0012537b08
type : sleep/adaptive
initialized : netbsd:uvmspace_fork+0x3e4
shared holds : 0 exclusive: 0
shares wanted: 1 exclusive: 1
relevant cpu : 1 last held: 65535
relevant lwp : 0xffffad001384f340 last held: 000000000000000000
last locked : netbsd:uvm_fault_internal+0x516
unlocked* : netbsd:uvm_fault_internal+0x667e
owner/count : 0x0000000000000020 flags : 0x0000000000000003
Turnstile:
=> 0 waiting readers:
=> 1 waiting writers: 0xffffad001384f340

****** LWP 3283.3283 (syz-executor.1) @ 0xffffad0013818ac0, l_stat=2

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:uvmspace_fork+0x3e4 uvm_map_setup sys/uvm/uvm_map.c:4794 [inline])
* Lock 0 (initialized at netbsd:uvmspace_fork+0x3e4 uvmspace_init sys/uvm/uvm_map.c:4137 [inline])
* Lock 0 (initialized at netbsd:uvmspace_fork+0x3e4 uvmspace_alloc sys/uvm/uvm_map.c:4116 [inline])
* Lock 0 (initialized at netbsd:uvmspace_fork+0x3e4 sys/uvm/uvm_map.c:4593)
lock address : ffffad0012537b08
type : sleep/adaptive
initialized : netbsd:uvmspace_fork+0x3e4
shared holds : 0 exclusive: 0
shares wanted: 1 exclusive: 1
relevant cpu : 0 last held: 65535
relevant lwp : 0xffffad0013818ac0 last held: 000000000000000000
last locked : netbsd:uvm_fault_internal+0x516
unlocked* : netbsd:uvm_fault_internal+0x667e
owner/count : 0x0000000000000020 flags : 0x0000000000000003
Turnstile:
=> 0 waiting readers:
=> 1 waiting writers: 0xffffad001384f340

****** LWP 1616.1616 (syz-executor.0) @ 0xffffad00138362c0, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:procinit+0x85 sys/kern/kern_proc.c:386)
lock address : netbsd:proc_lock
type : sleep/adaptive
initialized : netbsd:procinit+0x85
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 2
relevant cpu : 1 last held: 0
relevant lwp : 0xffffad00138362c0 last held: 0xffffad0013be90c0
last locked* : netbsd:fork1+0x2566
unlocked : netbsd:lwp_create+0x2ebf
owner field : 0xffffad0013be90c0 wait/spin: 1/0
Turnstile:
=> 0 waiting readers:
=> 1 waiting writers: 0xffffad00138362c0

****** LWP 404.404 (syz-executor.1) @ 0xffffad001384b740, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:module_hook_init+0x43 sys/kern/kern_module_hook.c:132)
lock address : netbsd:module_hook
type : sleep/adaptive
initialized : netbsd:module_hook_init+0x43
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 0
relevant lwp : 0xffffad001384b740 last held: 000000000000000000
last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 403.403 (syz-executor.1) @ 0xffffad001384f780, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:module_hook_init+0x43 sys/kern/kern_module_hook.c:132)
lock address : netbsd:module_hook
type : sleep/adaptive
initialized : netbsd:module_hook_init+0x43
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 0
relevant lwp : 0xffffad001384f780 last held: 000000000000000000
last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 1334.1334 (syz-executor.1) @ 0xffffad001382a280, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:module_hook_init+0x43 sys/kern/kern_module_hook.c:132)
lock address : netbsd:module_hook
type : sleep/adaptive
initialized : netbsd:module_hook_init+0x43
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 0
relevant lwp : 0xffffad001382a280 last held: 000000000000000000
last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 745.745 (dhcpcd) @ 0xffffad0012520740, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:module_hook_init+0x43 sys/kern/kern_module_hook.c:132)
lock address : netbsd:module_hook
type : sleep/adaptive
initialized : netbsd:module_hook_init+0x43
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffffad0012520740 last held: 000000000000000000
last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 567.567 (dhcpcd) @ 0xffffad00125d0bc0, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:module_hook_init+0x43 sys/kern/kern_module_hook.c:132)
lock address : netbsd:module_hook
type : sleep/adaptive
initialized : netbsd:module_hook_init+0x43
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffffad00125d0bc0 last held: 000000000000000000
last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 492.492 (dhcpcd) @ 0xffffad0012396b40, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:module_hook_init+0x43 sys/kern/kern_module_hook.c:132)
lock address : netbsd:module_hook
type : sleep/adaptive
initialized : netbsd:module_hook_init+0x43
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 0
relevant lwp : 0xffffad0012396b40 last held: 000000000000000000
last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 491.491 (dhcpcd) @ 0xffffad0012520b80, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:module_hook_init+0x43 sys/kern/kern_module_hook.c:132)
lock address : netbsd:module_hook
type : sleep/adaptive
initialized : netbsd:module_hook_init+0x43
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 0
relevant lwp : 0xffffad0012520b80 last held: 000000000000000000
last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 0.11 (iflnkst) @ 0xffffad000f1d9100, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:module_hook_init+0x43 sys/kern/kern_module_hook.c:132)
lock address : netbsd:module_hook
type : sleep/adaptive
initialized : netbsd:module_hook_init+0x43
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 0
relevant lwp : 0xffffad000f1d9100 last held: 000000000000000000
last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 0.5 (softclk/0) @ 0xffffad000ebdb080, l_stat=1

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:module_hook_init+0x43 sys/kern/kern_module_hook.c:132)
lock address : netbsd:module_hook
type : sleep/adaptive
initialized : netbsd:module_hook_init+0x43
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffffad000ebdb080 last held: 000000000000000000
last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 0.0 (swapper) @ 0xffffffff8686ea80, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:module_hook_init+0x43 sys/kern/kern_module_hook.c:132)
lock address : netbsd:module_hook
type : sleep/adaptive
initialized : netbsd:module_hook_init+0x43
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 0
relevant lwp : 0xffffffff8686ea80 last held: 000000000000000000
last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

[Locks tracked through CPUs]

PAGE FLAG PQ UOBJECT UANON
0xffffad0000017180 0001 00000000 0x0 0x0
0xffffad0000017200 0041 00000000 0x0 0x0
0xffffad0000017280 0041 00000000 0x0 0x0
0xffffad0000017300 0041 00000000 0x0 0x0
0xffffad0000017380 0041 00000000 0x0 0x0
0xffffad0000017400 0041 00000000 0x0 0x0
0xffffad0000017480 0041 00000000 0x0 0x0
0xffffad0000017500 0041 00000000 0x0 0x0
0xffffad0000017580 0041 00000000 0x0 0x0
0xffffad0000017600 0041 00000000 0x0 0x0
0xffffad0000017680 0041 00000000 0x0 0x0
0xffffad0000017700 0041 00000000 0x0 0x0
0xffffad0000017780 0041 00000000 0x0 0x0
0xffffad0000017800 0041 00000000 0x0 0x0
0xffffad0000017880 0041 00000000 0x0 0x0
0xffffad0000017900 0041 00000000 0x0 0x0
0xffffad0000017980 0041 00000000 0x0 0x0
0xffffad0000017a00 0041 00000000 0x0 0x0
0xffffad0000017a80 0041 00000000 0x0 0x0
0xffffad0000017b00 0041 00000000 0x0 0x0
0xffffad0000017b80 0041 00000000 0x0 0x0
0xffffad0000017c00 0041 00000000 0x0 0x0
0xffffad0000017c80 0041 00000000 0x0 0x0
0xffffad0000017d00 0041 00000000 0x0 0x0
0xffffad0000017d80 0041 00000000 0x0 0x0
0xffffad0000017e00 0041 00000000 0x0 0x0
0xffffad0000017e80 0041 00000000 0x0 0x0
0xffffad0000017f00 0041 00000000 0x0 0x0
0xffffad0000017f80 0041 00000000 0x0 0x0
0xffffad0000018000 0041 00000000 0x0 0x0
0xffffad0000018080 0041 00000000 0x0 0x0
0xffffad0000018100 0041 00000000 0x0 0x0
0xffffad0000018180 0041 00000000 0x0 0x0
0xffffad0000018200 0041 00000000 0x0 0x0
0xffffad0000018280 0041 00000000 0x0 0x0
0xffffad0000018300 0041 00000000 0x0 0x0
0xffffad0000018380 0041 00000000 0x0 0x0
0xffffad0000018400 0041 00000000 0x0 0x0
0xffffad0000018480 0041 00000000 0x0 0x0
0xffffad0000018500 0041 00000000 0x0 0x0
0xffffad0000018580 0041 00000000 0x0 0x0
0xffffad0000018600 0041 00000000 0x0 0x0
0xffffad0000018680 0041 00000000 0x0 0x0
0xffffad0000018700 0041 00000000 0x0 0x0
0xffffad0000018780 0041 00000000 0x0 0x0
0xffffad0000018800 0041 00000000 0x0 0x0
0xffffad0000018880 0041 00000000 0x0 0x0
0xffffad0000018900 0041 00000000 0x0 0x0
0xffffad0000018980 0041 00000000 0x0 0x0
0xffffad0000018a00 0041 00000000 0x0 0x0
0xffffad0000018a80 0041 00000000 0x0 0x0
0xffffad0000018b00 0041 00000000 0x0 0x0
0xffffad0000018b80 0041 00000000 0x0 0x0
0xffffad0000018c00 0041 00000000 0x0 0x0
0xffffad0000018c80 0041 00000000 0x0 0x0
0xffffad0000018d00 0041 00000000 0x0 0x0
0xffffad0000018d80 0041 00000000 0x0 0x0
0xffffad0000018e00 0041 00000000 0x0 0x0
0xffffad0000018e80 0041 00000000 0x0 0x0
0xffffad0000018f00 0041 00000000 0x0 0x0
0xffffad0000018f80 0041 00000000 0x0 0x0
0xffffad0000019000 0041 00000000 0x0 0x0
0xffffad0000019080 0041 00000000 0x0 0x0
0xffffad0000019100 0041 00000000 0x0 0x0
0xffffad0000019180 0041 00000000 0x0 0x0
0xffffad0000019200 0041 00000000 0x0 0x0
0xffffad0000019280 0041 00000000 0x0 0x0
0xffffad0000019300 0041 00000000 0x0 0x0
0xffffad0000019380 0041 00000000 0x0 0x0
0xffffad0000019400 0041 00000000 0x0 0x0
0xffffad0000019480 0041 00000000 0x0 0x0
0xffffad0000019500 0041 00000000 0x0 0x0
0xffffad0000019580 0041 00000000 0x0 0x0
0xffffad0000019600 0041 00000000 0x0 0x0
0xffffad0000019680 0041 00000000 0x0 0x0
0xffffad0000019700 0041 00000000 0x0 0x0
0xffffad0000019780 0041 00000000 0x0 0x0
0xffffad0000019800 0041 00000000 0x0 0x0
0xffffad0000019880 0041 00000000 0x0 0x0
0xffffad0000019900 0041 00000000 0x0 0x0
0xffffad0000019980 0041 00000000 0x0 0x0
0xffffad0000019a00 0041 00000000 0x0 0x0
0xffffad0000019a80 0041 00000000 0x0 0x0
0xffffad0000019b00 0041 00000000 0x0 0x0
0xffffad0000019b80 0041 00000000 0x0 0x0
0xffffad0000019c00 0041 00000000 0x0 0x0
0xffffad0000019c80 0041 00000000 0x0 0x0
0xffffad0000019d00 0041 00000000 0x0 0x0
0xffffad0000019d80 0041 00000000 0x0 0x0
0xffffad0000019e00 0041 00000000 0x0 0x0
0xffffad0000019e80 0041 00000000 0x0 0x0
0xffffad0000019f00 0041 00000000 0x0 0x0
0xffffad0000019f80 0041 00000000 0x0 0x0
0xffffad000001a000 0041 00000000 0x0 0x0
0xffffad000001a080 0041 00000000 0x0 0x0
0xffffad000001a100 0041 00000000 0x0 0x0
0xffffad000001a180 0041 00000000 0x0 0x0
0xffffad000001a200 0041 00000000 0x0 0x0
0xffffad000001a280 0041 00000000 0x0 0x0
0xffffad000001a300 0041 00000000 0x0 0x0
0xffffad000001a380 0041 00000000 0x0 0x0
0xffffad000001a400 0041 00000000 0x0 0x0
0xffffad000001a480 0041 00000000 0x0 0x0
0xffffad000001a500 0041 00000000 0x0 0x0
0xffffad000001a580 0041 00000000 0x0 0x0
0xffffad000001a600 0041 00000000 0x0 0x0
0xffffad000001a680 0041 00000000 0x0 0x0
0xffffad000001a700 0041 00000000 0x0 0x0
0xffffad000001a780 0041 00000000 0x0 0x0
0xffffad000001a800 0041 00000000 0x0 0x0
0xffffad000001a880 0041 00000000 0x0 0x0
0xffffad000001a900 0041 00000000 0x0 0x0
0xffffad000001a980 0041 00000000 0x0 0x0
0xffffad000001aa00 0041 00000000 0x0 0x0
0xffffad000001aa80 0041 00000000 0x0 0x0
0xffffad000001ab00 0041 00000000 0x0 0x0
0xffffad000001ab80 0041 00000000 0x0 0x0
0xffffad000001ac00 0041 00000000 0x0 0x0
0xffffad000001ac80 0041 00000000 0x0 0x0
0xffffad000001ad00 0041 00000000 0x0 0x0
0xffffad000001ad80 0041 00000000 0x0 0x0
0xffffad000001ae00 0041 00000000 0x0 0x0
0xffffad000001ae80 0041 00000000 0x0 0x0
0xffffad000001af00 0041 00000000 0x0 0x0
0xffffad000001af80 0041 00000000 0x0 0x0
0xffffad000001b000 0041 00000000 0x0 0x0
0xffffad000001b080 0041 00000000 0x0 0x0
0xffffad000001b100 0041 00000000 0x0 0x0
0xffffad000001b180 0041 00000000 0x0 0x0
0xffffad000001b200 0041 00000000 0x0 0x0
0xffffad000001b280 0041 00000000 0x0 0x0
0xffffad000001b300 0041 00000000 0x0 0x0
0xffffad000001b380 0041 00000000 0x0 0x0
0xffffad000001b400 0041 00000000 0x0 0x0
0xffffad000001b480 0041 00000000 0x0 0x0
0xffffad000001b500 0041 00000000 0x0 0x0
0xffffad000001b580 0041 00000000 0x0 0x0
0xffffad000001b600 0041 00000000 0x0 0x0
0xffffad000001b680 0041 00000000 0x0 0x0
0xffffad000001b700 0041 00000000 0x0 0x0
0xffffad000001b780 0041 00000000 0x0 0x0
0xffffad000001b800 0041 00000000 0x0 0x0
0xffffad000001b880 0041 00000000 0x0 0x0
0xffffad000001b900 0041 00000000 0x0 0x0
0xffffad000001b980 0041 00000000 0x0 0x0
0xffffad000001ba00 0041 00000000 0x0 0x0
0xffffad000001ba80 0041 00000000 0x0 0x0
0xffffad000001bb00 0041 00000000 0x0 0x0
0xffffad000001bb80 0041 00000000 0x0 0x0
0xffffad000001bc00 0041 00000000 0x0 0x0
0xffffad000001bc80 0041 00000000 0x0 0x0
0xffffad000001bd00 0041 00000000 0x0 0x0
0xffffad000001bd80 0041 00000000 0x0 0x0
0xffffad000001be00 0041 00000000 0x0 0x0
0xffffad000001be80 0041 00000000 0x0 0x0
0xffffad000001bf00 0041 00000000 0x0 0x0
0xffffad000001bf80 0041 00000000 0x0 0x0
0xffffad000001c000 0041 00000000 0x0 0x0
0xffffad000001c080 0041 00000000 0x0 0x0
0xffffad000001c100 0041 00000000 0x0 0x0
0xffffad000001c180 0041 00000000 0x0 0x0
0xffffad000001c200 0041 00000000 0x0 0x0
0xffffad000001c280 0041 00000000 0x0 0x0
0xffffad000001c300 0041 00000000 0x0 0x0
0xffffad000001c380 0041 00000000 0x0 0x0
0xffffad000001c400 0041 00000000 0x0 0x0
0xffffad000001c480 0041 00000000 0x0 0x0
0xffffad000001c500 0041 00000000 0x0 0x0
0xffffad000001c580 0041 00000000 0x0 0x0
0xffffad000001c600 0041 00000000 0x0 0x0
0xffffad000001c680 0041 00000000 0x0 0x0
0xffffad000001c700 0041 00000000 0x0 0x0
0xffffad000001c780 0041 00000000 0x0 0x0
0xffffad000001c800 0001 00000000 0x0 0x0
0xffffad000001c880 0001 00000000 0x0 0x0
0xffffad000001c900 0001 00000000 0x0 0x0
0xffffad000001c980 0001 00000000 0x0 0x0
0xffffad000001ca00 0001 00000000 0x0 0x0
0xffffad000001ca80 0001 00000000 0x0 0x0
0xffffad000001cb00 0001 00000000 0x0 0x0
0xffffad000001cb80 0001 00000000 0x0 0x0
0xffffad000001cc00 0001 00000000 0x0 0x0
0xffffad000001cc80 0001 00000000 0x0 0x0
0xffffad000001cd00 0001 00000000 0x0 0x0
0xffffad000001cd80 0001 00000000 0x0 0x0
0xffffad000001ce00 0001 00000000 0x0 0x0
0xffffad000001ce80 0001 00000000 0x0 0x0
0xffffad000001cf00 0001 00000000 0x0 0x0
0xffffad000001cf80 0001 00000000 0x0 0x0
0xffffad000001d000 0001 00000000 0x0 0x0
0xffffad000001d080 0001 00000000 0x0 0x0
0xffffad000001d100 0001 00000000 0x0 0x0
0xffffad000001d180 0001 00000000 0x0 0x0
0xffffad000001d200 0001 00000000 0x0 0x0
0xffffad000001d280 0001 00000000 0x0 0x0
0xffffad000001d300 0001 00000000 0x0 0x0
0xffffad000001d380 0001 00000000 0x0 0x0
0xffffad000001d400 0001 00000000 0x0 0x0
0xffffad000001d480 0001 00000000 0x0 0x0
0xffffad000001d500 0001 00000000 0x0 0x0
0xffffad000001d580 0001 00000000 0x0 0x0
0xffffad000001d600 0001 00000000 0x0 0x0
0xffffad000001d680 0001 00000000 0x0 0x0
0xffffad000001d700 0001 00000000 0x0 0x0
0xffffad000001d780 0001 00000000 0x0 0x0
0xffffad000001d800 0001 00000000 0x0 0x0
0xffffad000001d880 0001 00000000 0x0 0x0
0xffffad000001d900 0001 00000000 0x0 0x0
0xffffad000001d980 0001 00000000 0x0 0x0
0xffffad000001da00 0001 00000000 0x0 0x0
0xffffad000001da80 0001 00000000 0x0 0x0
0xffffad000001db00 0001 00000000 0x0 0x0
0xffffad000001db80 0001 00000000 0x0 0x0
0xffffad000001dc00 0001 00000000 0x0 0x0
0xffffad000001dc80 0001 00000000 0x0 0x0
0xffffad000001dd00 0001 00000000 0x0 0x0
0xffffad000001dd80 0001 00000000 0x0 0x0
0xffffad000001de00 0001 00000000 0x0 0x0
0xffffad000001de80 0001 00000000 0x0 0x0
0xffffad000001df00 0001 00000000 0x0 0x0
0xffffad000001df80 0001 00000000 0x0 0x0
0xffffad000001e000 0001 00000000 0x0 0x0
0xffffad000001e080 0001 00000000 0x0 0x0
0xffffad000001e100 0001 00000000 0x0 0x0
0xffffad000001e180 0001 00000000 0x0 0x0
0xffffad000001e200 0001 00000000 0x0 0x0
0xffffad000001e280 0001 00000000 0x0 0x0
0xffffad000001e300 0001 00000000 0x0 0x0
0xffffad000001e380 0001 00000000 0x0 0x0
0xffffad000001e400 0001 00000000 0x0 0x0
0xffffad000001e480 0001 00000000 0x0 0x0
0xffffad000001e500 0001 00000000 0x0 0x0
0xffffad000001e580 0001 00000000 0x0 0x0
0xffffad000001e600 0001 00000000 0x0 0x0
0xffffad000001e680 0001 00000000 0x0 0x0
0xffffad000001e700 0001 00000000 0x0 0x0
0xffffad000001e780 0001 00000000 0x0 0x0
0xffffad000001e800 0001 00000000 0x0 0x0
0xffffad000001e880 0001 00000000 0x0 0x0
0xffffad000001e900 0001 00000000 0x0 0x0
0xffffad000001e980 0001 00000000 0x0 0x0
0xffffad000001ea00 0001 00000000 0x0 0x0
0xffffad000001ea80 0001 00000000 0x0 0x0
0xffffad000001eb00 0001 00000000 0x0 0x0
0xffffad000001eb80 0001 00000000 0x0 0x0
0xffffad000001ec00 0001 00000000 0x0 0x0
0xffffad000001ec80 0001 00000000 0x0 0x0
0xffffad000001ed00 0001 00000000 0x0 0x0
0xffffad000001ed80 0001 00000000 0x0 0x0
0xffffad000001ee00 0001 00000000 0x0 0x0
0xffffad000001ee80 0001 00000000 0x0 0x0
0xffffad000001ef00 0001 00000000 0x0 0x0
0xffffad000001ef80 0001 00000000 0x0 0x0
0xffffad000001f000 0001 00000000 0x0 0x0
0xffffad000001f080 0001 00000000 0x0 0x0
0xffffad000001f100 0001 00000000 0x0 0x0
0xffffad000001f180 0001 00000000 0x0 0x0
0xffffad000001f200 0001 00000000 0x0 0x0
0xffffad000001f280 0001 00000000 0x0 0x0
0xffffad000001f300 0001 00000000 0x0 0x0
0xffffad000001f380 0001 00000000 0x0 0x0
0xffffad000001f400 0001 00000000 0x0 0x0
0xffffad000001f480 0001 00000000 0x0 0x0
0xffffad000001f500 0001 00000000 0x0 0x0
0xffffad000001f580 0001 00000000 0x0 0x0
0xffffad000001f600 0001 00000000 0x0 0x0
0xffffad000001f680 0001 00000000 0x0 0x0
0xffffad000001f700 0001 00000000 0x0 0x0
0xffffad000001f780 0001 00000000 0x0 0x0
0xffffad000001f800 0001 00000000 0x0 0x0
0xffffad000001f880 0001 00000000 0x0 0x0
0xffffad000001f900 0001 00000000 0x0 0x0
0xffffad000001f980 0001 00000000 0x0 0x0
0xffffad000001fa00 0001 00000000 0x0 0x0
0xffffad000001fa80 0001 00000000 0x0 0x0
0xffffad000001fb00 0001 00000000 0x0 0x0
0xffffad000001fb80 0001 00000000 0x0 0x0
0xffffad000001fc00 0001 00000000 0x0 0x0
0xffffad000001fc80 0001 00000000 0x0 0x0
0xffffad000001fd00 0001 00000000 0x0 0x0
0xffffad000001fd80 0001 00000000 0x0 0x0
0xffffad000001fe00 0001 00000000 0x0 0x0
0xffffad000001fe80 0001 00000000 0x0 0x0
0xffffad000001ff00 0001 00000000 0x0 0x0
0xffffad000001ff80 0001 00000000 0x0 0x0
0xffffad0000020000 0001 00000000 0x0 0x0
0xffffad0000020080 0001 00000000 0x0 0x0
0xffffad0000020100 0001 00000000 0x0 0x0
0xffffad0000020180 0001 00000000 0x0 0x0
0xffffad0000020200 0001 00000000 0x0 0x0
0xffffad0000020280 0001 00000000 0x0 0x0
0xffffad0000020300 0001 00000000 0x0 0x0
0xffffad0000020380 0001 00000000 0x0 0x0
0xffffad0000020400 0001 00000000 0x0 0x0
0xffffad0000020480 0001 00000000 0x0 0x0
0xffffad0000020500 0001 00000000 0x0 0x0
0xffffad0000020580 0001 00000000 0x0 0x0
0xffffad0000020600 0001 00000000 0x0 0x0
0xffffad0000020680 0001 00000000 0x0 0x0
0xffffad0000020700 0001 00000000 0x0 0x0
0xffffad0000020780 0001 00000000 0x0 0x0
0xffffad0000020800 0001 00000000 0x0 0x0
0xffffad0000020880 0001 00000000 0x0 0x0
0xffffad0000020900 0001 00000000 0x0 0x0
0xffffad0000020980 0001 00000000 0x0 0x0
0xffffad0000020a00 0001 00000000 0x0 0x0
0xffffad0000020a80 0001 00000000 0x0 0x0
0xffffad0000020b00 0001 00000000 0x0 0x0
0xffffad0000020b80 0001 00000000 0x0 0x0
0xffffad0000020c00 0001 00000000 0x0 0x0
0xffffad0000020c80 0001 00000000 0x0 0x0
0xffffad0000020d00 0001 00000000 0x0 0x0
0xffffad0000020d80 0001 00000000 0x0 0x0
0xffffad0000020e00 0001 00000000 0x0 0x0
0xffffad0000020e80 0001 00000000 0x0 0x0
0xffffad0000020f00 0001 00000000 0x0 0x0
0xffffad0000020f80 0001 00000000 0x0 0x0
0xffffad0000021000 0001 00000000 0x0 0x0
0xffffad0000021080 0001 00000000 0x0 0x0
0xffffad0000021100 0001 00000000 0x0 0x0
0xffffad0000021180 0001 00000000 0x0 0x0
0xffffad0000021200 0001 00000000 0x0 0x0
0xffffad0000021280 0001 00000000 0x0 0x0
0xffffad0000021300 0001 00000000 0x0 0x0
0xffffad0000021380 0001 00000000 0x0 0x0
0xffffad0000021400 0001 00000000 0x0 0x0
0xffffad0000021480 0001 00000000 0x0 0x0
0xffffad0000021500 0001 00000000 0x0 0x0
0xffffad0000021580 0001 00000000 0x0 0x0
0xffffad0000021600 0001 00000000 0x0 0x0
0xffffad0000021680 0001 00000000 0x0 0x0
0xffffad0000021700 0001 00000000 0x0 0x0
0xffffad0000021780 0001 00000000 0x0 0x0
0xffffad0000021800 0001 00000000 0x0 0x0
0xffffad0000021880 0001 00000000 0x0 0x0
0xffffad0000021900 0001 00000000 0x0 0x0
0xffffad0000021980 0001 00000000 0x0 0x0
0xffffad0000021a00 0001 00000000 0x0 0x0
0xffffad0000021a80 0001 00000000 0x0 0x0
0xffffad0000021b00 0001 00000000 0x0 0x0
0xffffad0000021b80 0001 00000000 0x0 0x0
0xffffad0000021c00 0001 00000000 0x0 0x0
0xffffad0000021c80 0001 00000000 0x0 0x0
0xffffad0000021d00 0001 00000000 0x0 0x0
0xffffad0000021d80 0001 00000000 0x0 0x0
0xffffad0000021e00 0001 00000000 0x0 0x0
0xffffad0000021e80 0001 00000000 0x0 0x0
0xffffad0000021f00 0001 00000000 0x0 0x0
0xffffad0000021f80 0001 00000000 0x0 0x0
0xffffad0000022000 0001 00000000 0x0 0x0
0xffffad0000022080 0001 00000000 0x0 0x0
0xffffad0000022100 0001 00000000 0x0 0x0
0xffffad0000022180 0001 00000000 0x0 0x0
0xffffad0000022200 0001 00000000 0x0 0x0
0xffffad0000022280 0001 00000000 0x0 0x0
0xffffad0000022300 0001 00000000 0x0 0x0
0xffffad0000022380 0001 00000000 0x0 0x0
0xffffad0000022400 0001 00000000 0x0 0x0
0xffffad0000022480 0001 00000000 0x0 0x0
0xffffad0000022500 0001 00000000 0x0 0x0
0xffffad0000022580 0001 00000000 0x0 0x0
0xffffad0000022600 0001 00000000 0x0 0x0
0xffffad0000022680 0001 00000000 0x0 0x0
0xffffad0000022700 0001 00000000 0x0 0x0
0xffffad0000022780 0001 00000000 0x0 0x0
0xffffad0000022800 0001 00000000 0x0 0x0
0xffffad0000022880 0001 00000000 0x0 0x0
0xffffad0000022900 0001 00000000 0x0 0x0
0xffffad0000022980 0001 00000000 0x0 0x0
0xffffad0000022a00 0001 00000000 0x0 0x0
0xffffad0000022a80 0001 00000000 0x0 0x0
0xffffad0000022b00 0001 00000000 0x0 0x0
0xffffad0000022b80 0001 00000000 0x0 0x0
0xffffad0000022c00 0001 00000000 0x0 0x0
0xffffad0000022c80 0001 00000000 0x0 0x0
0xffffad0000022d00 0001 00000000 0x0 0x0
0xffffad0000022d80 0001 00000000 0x0 0x0
0xffffad0000022e00 0001 00000000 0x0 0x0
0xffffad0000022e80 0001 00000000 0x0 0x0
0xffffad0000022f00 0001 00000000 0x0 0x0
0xffffad0000022f80 0001 00000000 0x0 0x0
0xffffad0000023000 0001 00000000 0x0 0x0
0xffffad0000023080 0001 00000000 0x0 0x0
0xffffad0000023100 0001 00000000 0x0 0x0
0xffffad0000023180 0001 00000000 0x0 0x0
0xffffad0000023200 0001 00000000 0x0 0x0
0xffffad0000023280 0001 00000000 0x0 0x0
0xffffad0000023300 0001 00000000 0x0 0x0
0xffffad0000023380 0001 00000000 0x0 0x0
0xffffad0000023400 0001 00000000 0x0 0x0
0xffffad0000023480 0001 00000000 0x0 0x0
0xffffad0000023500 0001 00000000 0x0 0x0
0xffffad0000023580 0001 00000000 0x0 0x0
0xffffad0000023600 0001 00000000 0x0 0x0
0xffffad0000023680 0001 00000000 0x0 0x0
0xffffad0000023700 0001 00000000 0x0 0x0
0xffffad0000023780 0001 00000000 0x0 0x0
0xffffad0000023800 0001 00000000 0x0 0x0
0xffffad0000023880 0001 00000000 0x0 0x0
0xffffad0000023900 0001 00000000 0x0 0x0
0xffffad0000023980 0001 00000000 0x0 0x0
0xffffad0000023a00 0001 00000000 0x0 0x0
0xffffad0000023a80 0001 00000000 0x0 0x0
0xffffad0000023b00 0001 00000000 0x0 0x0
0xffffad0000023b80 0001 00000000 0x0 0x0
0xffffad0000023c00 0001 00000000 0x0 0x0
0xffffad0000023c80 0001 00000000 0x0 0x0
0xffffad0000023d00 0001 00000000 0x0 0x0
0xffffad0000023d80 0001 00000000 0x0 0x0
0xffffad0000023e00 0001 00000000 0x0 0x0
0xffffad0000023e80 0001 00000000 0x0 0x0
0xffffad0000023f00 0001 00000000 0x0 0x0
0xffffad0000023f80 0001 00000000 0x0 0x0
0xffffad0000024000 0001 00000000 0x0 0x0
0xffffad0000024080 0001 00000000 0x0 0x0
0xffffad0000024100 0001 00000000 0x0 0x0
0xffffad0000024180 0001 00000000 0x0 0x0
0xffffad0000024200 0001 00000000 0x0 0x0
0xffffad0000024280 0001 00000000 0x0 0x0
0xffffad0000024300 0001 00000000 0x0 0x0
0xffffad0000024380 0001 00000000 0x0 0x0
0xffffad0000024400 0001 00000000 0x0 0x0
0xffffad0000024480 0001 00000000 0x0 0x0
0xffffad0000024500 0001 00000000 0x0 0x0
0xffffad0000024580 0001 00000000 0x0 0x0
0xffffad0000024600 0001 00000000 0x0 0x0
0xffffad0000024680 0001 00000000 0x0 0x0
0xffffad0000024700 0001 00000000 0x0 0x0
0xffffad0000024780 0001 00000000 0x0 0x0
0xffffad0000024800 0001 00000000 0x0 0x0
0xffffad0000024880 0001 00000000 0x0 0x0
0xffffad0000024900 0001 00000000 0x0 0x0
0xffffad0000024980 0001 00000000 0x0 0x0
0xffffad0000024a00 0001 00000000 0x0 0x0
0xffffad0000024a80 0001 00000000 0x0 0x0
0xffffad0000024b00 0001 00000000 0x0 0x0
0xffffad0000024b80 0001 00000000 0x0 0x0
0xffffad0000024c00 0001 00000000 0x0 0x0
0xffffad0000024c80 0001 00000000 0x0 0x0
0xffffad0000024d00 0001 00000000 0x0 0x0
0xffffad0000024d80 0001 00000000 0x0 0x0
0xffffad0000024e00 0001 00000000 0x0 0x0
0xffffad0000024e80 0001 00000000 0x0 0x0
0xffffad0000024f00 0001 00000000 0x0 0x0
0xffffad0000024f80 0001 00000000 0x0 0x0
0xffffad0000025000 0001 00000000 0x0 0x0
0xffffad0000025080 0001 00000000 0x0 0x0
0xffffad0000025100 0001 00000000 0x0 0x0
0xffffad0000025180 0001 00000000 0x0 0x0
0xffffad0000025200 0001 00000000 0x0 0x0
0xffffad0000025280 0001 00000000 0x0 0x0
0xffffad0000025300 0001 00000000 0x0 0x0
0xffffad0000025380 0001 00000000 0x0 0x0
0xffffad0000025400 0001 00000000 0x0 0x0
0xffffad0000025480 0001 00000000 0x0 0x0
0xffffad0000025500 0001 00000000 0x0 0x0
0xffffad0000025580 0001 00000000 0x0 0x0
0xffffad0000025600 0001 00000000 0x0 0x0
0xffffad0000025680 0001 00000000 0x0 0x0
0xffffad0000025700 0001 00000000 0x0 0x0
0xffffad0000025780 0001 00000000 0x0 0x0
0xffffad0000025800 0001 00000000 0x0 0x0
0xffffad0000025880 0001 00000000 0x0 0x0
0xffffad0000025900 0001 00000000 0x0 0x0
0xffffad0000025980 0001 00000000 0x0 0x0
0xffffad0000025a00 0001 00000000 0x0 0x0
0xffffad0000025a80 0001 00000000 0x0 0x0
0xffffad0000025b00 0001 00000000 0x0 0x0
0xffffad0000025b80 0001 00000000 0x0 0x0
0xffffad0000025c00 0001 00000000 0x0 0x0
0xffffad0000025c80 0001 00000000 0x0 0x0
0xffffad0000025d00 0001 00000000

---
This report is generated by a bot. It may contain errors.
See https://goo.gl/tpsmEJ for more information about syzbot.
syzbot engineers can be reached at syzk...@googlegroups.com.

syzbot will keep track of this issue. See:
https://goo.gl/tpsmEJ#status for how to communicate with syzbot.

If the bug is already fixed, let syzbot know by replying with:
#syz fix: exact-commit-title

If you want to overwrite bug's subsystems, reply with:
#syz set subsystems: new-subsystem
(See the list of subsystem names on the web dashboard)

If the bug is a duplicate of another bug, reply with:
#syz dup: exact-subject-of-another-report

If you want to undo deduplication, reply with:
#syz undup

syzbot

unread,
Nov 28, 2023, 5:38:18 PM11/28/23
to syzkaller-...@googlegroups.com
Auto-closing this bug as obsolete.
Crashes did not happen for a while, no reproducer and no activity.
Reply all
Reply to author
Forward
0 new messages