ASan: Unauthorized Access in ttioctl (3)

[syzbot]

Hello,

syzbot found the following issue on:

HEAD commit: 041cae022225 Adjust the tilde expansion test to deal with ..
git tree: netbsd
console output: https://syzkaller.appspot.com/x/log.txt?x=15d35270c80000
kernel config: https://syzkaller.appspot.com/x/.config?x=fab579639ba4bf0a
dashboard link: https://syzkaller.appspot.com/bug?extid=994b6ece722a41454fd9
compiler: g++ (Debian 10.2.1-6) 10.2.1 20210110

Unfortunately, I don't have any reproducer for this issue yet.

Downloadable assets:
disk image: https://storage.googleapis.com/syzbot-assets/fc03e69d2c5d/disk-041cae02.raw.xz
netbsd.gdb: https://storage.googleapis.com/syzbot-assets/efe0140f5a20/netbsd-041cae02.gdb.xz

IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+994b6e...@syzkaller.appspotmail.com

[ 816.2934038] panic: ASan: Unauthorized Access In 0xffffffff81c4c450: Addr 0xffffa18013690450 [4 bytes, read, PoolUseAfterFree]

[ 816.3033919] cpu1: Begin traceback...
[ 816.3133957] vpanic() at netbsd:vpanic+0x282 sys/kern/subr_prf.c:291
[ 816.3633936] panic() at netbsd:panic+0x9e sys/kern/subr_prf.c:1059
[ 816.4033967] kasan_report() at netbsd:kasan_report+0x8f kasan_code_name sys/kern/subr_asan.c:168 [inline]
[ 816.4033967] kasan_report() at netbsd:kasan_report+0x8f sys/kern/subr_asan.c:200
[ 816.4333972] __asan_load4() at netbsd:__asan_load4+0x9d kasan_shadow_4byte_isvalid sys/kern/subr_asan.c:350 [inline]
[ 816.4333972] __asan_load4() at netbsd:__asan_load4+0x9d kasan_shadow_check sys/kern/subr_asan.c:417 [inline]
[ 816.4333972] __asan_load4() at netbsd:__asan_load4+0x9d sys/kern/subr_asan.c:1206
[ 816.4633958] ttioctl() at netbsd:ttioctl+0x127b sys/kern/tty.c:1206
[ 816.5034061] comioctl() at netbsd:comioctl+0x13b sys/dev/ic/com.c:1296
[ 816.5333941] cdev_ioctl() at netbsd:cdev_ioctl+0x197 sys/kern/subr_devsw.c:1525
[ 816.5633923] spec_ioctl() at netbsd:spec_ioctl+0x148 sys/miscfs/specfs/spec_vnops.c:1329
[ 816.6033929] VOP_IOCTL() at netbsd:VOP_IOCTL+0x132 sys/kern/vnode_if.c:934
[ 816.6333981] vn_ioctl() at netbsd:vn_ioctl+0x1c0 sys/kern/vfs_vnops.c:868
[ 816.6733927] sys_fcntl() at netbsd:sys_fcntl+0xa15 sys/kern/sys_descrip.c:479
[ 816.7033943] sys___syscall() at netbsd:sys___syscall+0x10e sy_call sys/sys/syscallvar.h:65 [inline]
[ 816.7033943] sys___syscall() at netbsd:sys___syscall+0x10e sys/kern/sys_syscall.c:90
[ 816.7333956] syscall() at netbsd:syscall+0x25a sy_call sys/sys/syscallvar.h:65 [inline]
[ 816.7333956] syscall() at netbsd:syscall+0x25a sy_invoke sys/sys/syscallvar.h:94 [inline]
[ 816.7333956] syscall() at netbsd:syscall+0x25a sys/arch/x86/x86/syscall.c:138
[ 816.7433920] --- syscall (number 92 via SYS_syscall) ---
[ 816.7633942] netbsd:syscall+0x25a:
[ 816.7633942] cpu1: End traceback...
[ 816.7633942] fatal breakpoint trap in supervisor mode
[ 816.7733922] trap type 1 code 0 rip 0xffffffff8023230d cs 0x8 rflags 0x286 cr2 0x6250a0 ilevel 0 rsp 0xffffa1824cea7330
[ 816.7833884] curlwp 0xffffa18012d08240 pid 14722.14732 lowest kstack 0xffffa1824cea02c0
Stopped in pid 14722.14732 (syz-executor.4) at netbsd:breakpoint+0x5: leave
?
breakpoint() at netbsd:breakpoint+0x5
db_panic() at netbsd:db_panic+0x105 sys/ddb/db_panic.c:69
vpanic() at netbsd:vpanic+0x282 sys/kern/subr_prf.c:291
panic() at netbsd:panic+0x9e sys/kern/subr_prf.c:1059
kasan_report() at netbsd:kasan_report+0x8f kasan_code_name sys/kern/subr_asan.c:168 [inline]
kasan_report() at netbsd:kasan_report+0x8f sys/kern/subr_asan.c:200
__asan_load4() at netbsd:__asan_load4+0x9d kasan_shadow_4byte_isvalid sys/kern/subr_asan.c:350 [inline]
__asan_load4() at netbsd:__asan_load4+0x9d kasan_shadow_check sys/kern/subr_asan.c:417 [inline]
__asan_load4() at netbsd:__asan_load4+0x9d sys/kern/subr_asan.c:1206
ttioctl() at netbsd:ttioctl+0x127b sys/kern/tty.c:1206
comioctl() at netbsd:comioctl+0x13b sys/dev/ic/com.c:1296
cdev_ioctl() at netbsd:cdev_ioctl+0x197 sys/kern/subr_devsw.c:1525
spec_ioctl() at netbsd:spec_ioctl+0x148 sys/miscfs/specfs/spec_vnops.c:1329
VOP_IOCTL() at netbsd:VOP_IOCTL+0x132 sys/kern/vnode_if.c:934
vn_ioctl() at netbsd:vn_ioctl+0x1c0 sys/kern/vfs_vnops.c:868
sys_fcntl() at netbsd:sys_fcntl+0xa15 sys/kern/sys_descrip.c:479
sys___syscall() at netbsd:sys___syscall+0x10e sy_call sys/sys/syscallvar.h:65 [inline]
sys___syscall() at netbsd:sys___syscall+0x10e sys/kern/sys_syscall.c:90
syscall() at netbsd:syscall+0x25a sy_call sys/sys/syscallvar.h:65 [inline]
syscall() at netbsd:syscall+0x25a sy_invoke sys/sys/syscallvar.h:94 [inline]
syscall() at netbsd:syscall+0x25a sys/arch/x86/x86/syscall.c:138
--- syscall (number 92 via SYS_syscall) ---
netbsd:syscall+0x25a:
Panic string: ASan: Unauthorized Access In 0xffffffff81c4c450: Addr 0xffffa18013690450 [4 bytes, read, PoolUseAfterFree]

PID LID S CPU FLAGS STRUCT LWP * NAME WAIT
13622 13622 2 0 0 ffffa18012d20700 syz-executor.5
14032 14032 2 0 0 ffffa18012d87040 syz-executor.1
14722>14732 7 1 100 ffffa18012d08240 syz-executor.4
14722 14722 2 1 10000000 ffffa18013449480 syz-executor.4
15693 15693 2 0 0 ffffa18012bb4180 syz-executor.2
15189 15189 2 1 140 ffffa18012ca64c0 syz-executor.4
14005 14005 2 0 140 ffffa180126dabc0 syz-executor.0
11137 11137 3 1 180 ffffa180126da340 syz-executor.0 parked
14518 11917 2 0 1000040 ffffa18013f118c0 syz-executor.0
14518 12114 3 1 1100000 ffffa18013f5d0c0 syz-executor.0 vfork
11924 11924 3 0 180 ffffa1801346a980 syz-executor.0 parked
11663 12869 3 0 1000000 ffffa18012d878c0 syz-executor.0 lwpwait
11663 13748 5 0 11a0100 ffffa1801433b480 syz-executor.0
11663 12188 3 0 11a0000 ffffa1801346a540 syz-executor.0 vfork
11663 11663 5 1 111a0000 ffffa18012bfaa80 syz-executor.0
12627 12627 3 0 180 ffffa18013ebdb80 syz-executor.0 parked
11594 11657 3 1 1000000 ffffa18012c0f240 syz-executor.0 lwpwait
11594 12194 5 1 11a0100 ffffa18012b63980 syz-executor.0
11594 12092 3 0 11a0000 ffffa18014199640 syz-executor.0 vfork
11594 11594 5 0 111a0000 ffffa18012d65780 syz-executor.0
6555 6555 2 0 140 ffffa180133c6ac0 syz-executor.2
6384 6384 3 0 180 ffffa18012c80340 syz-executor.2 parked
8376 8619 3 0 11100000 ffffa180141ddb00 syz-executor.2 vfork
8376 8376 2 1 11000040 ffffa18012b81580 syz-executor.2
8624 8624 3 0 180 ffffa1801413e5c0 syz-executor.2 parked
8377 7400 2 0 1000040 ffffa18013dc7a80 syz-executor.2
8377 8655 3 0 11100000 ffffa18013449040 syz-executor.2 vfork
8233 8233 3 1 180 ffffa18013349100 syz-executor.2 parked
8297 7993 3 1 11100000 ffffa180134a15c0 syz-executor.2 vfork
8297 8297 2 0 11000040 ffffa18013f404c0 syz-executor.2
6399 6399 2 1 140 ffffa18012b81140 syz-executor.5
5160 5160 3 0 180 ffffa18012cce580 syz-executor.5 parked
6617 5162 3 0 11100000 ffffa18012dd7940 syz-executor.5 vfork
6617 6617 2 0 11000040 ffffa18012a34340 syz-executor.5
6214 6214 3 0 180 ffffa18012d15280 syz-executor.5 parked
5101 5101 3 1 180 ffffa18012cee600 syz-executor.5 parked
6091 5092 2 0 1000040 ffffa18012d08ac0 syz-executor.5
6091 7102 3 0 1100000 ffffa180133b9200 syz-executor.5 vfork
6091 5254 3 1 11100000 ffffa18012cee1c0 syz-executor.5 vfork
5960 5960 3 1 180 ffffa18013431300 syz-executor.5 parked
5221 6945 3 1 11100000 ffffa18013f40900 syz-executor.5 vfork
5221 5221 2 0 11000040 ffffa18013ecdbc0 syz-executor.5
4809 4809 3 0 1c0 ffffa18012991280 getty ttyraw
2989 >2989 7 0 40 ffffa1801402b9c0 syz-executor.3
2030 2030 2 0 140 ffffa1801345f0c0 syz-executor.1
959 959 3 1 180 ffffa18012d34300 syz-executor.5 parked
387 387 3 1 180 ffffa18012c32b40 syz-executor.0 parked
2104 2104 3 1 180 ffffa18012cfc640 syz-executor.1 parked
1756 1756 3 0 180 ffffa18012cd8180 syz-executor.1 parked
1237 5537 3 1 180 ffffa180133c6240 syz-fuzzer parked
1237 1240 3 0 1c0 ffffa18013e45b00 syz-fuzzer wait
1237 1203 3 0 1c0 ffffa18013e456c0 syz-fuzzer wait
1237 1236 3 0 180 ffffa18013e45280 syz-fuzzer wait
1237 829 3 0 180 ffffa18013e0f680 syz-fuzzer wait
1237 449 3 1 1c0 ffffa18013e0f240 syz-fuzzer wait
1237 813 3 1 180 ffffa18013ce3a40 syz-fuzzer parked
1237 1128 3 0 180 ffffa18013ce31c0 syz-fuzzer parked
1237 942 3 0 180 ffffa18012d20b40 syz-fuzzer parked
1237 1120 3 0 180 ffffa1801341fb40 syz-fuzzer parked
1237 1224 3 1 180 ffffa1801341f700 syz-fuzzer parked
1237 1229 3 1 180 ffffa180134a1180 syz-fuzzer wait
1237 1238 2 1 140 ffffa180126d7b80 syz-fuzzer
1237 1237 2 1 140 ffffa18012a8c080 syz-fuzzer
1235 1235 3 1 180 ffffa18012cce140 sshd select
1223 1223 3 0 180 ffffa1801346a100 getty nanoslp
1151 1151 3 0 180 ffffa180126db480 getty nanoslp
1222 1222 3 0 180 ffffa180134869c0 getty nanoslp
1105 1105 3 1 180 ffffa180133a8600 sshd select
1088 1088 3 0 180 ffffa18012d34b80 powerd kqueue
700 700 3 1 180 ffffa180133dbb00 syslogd kqueue
746 746 3 1 180 ffffa18012c0fac0 dhcpcd poll
747 747 3 1 180 ffffa18012cb4500 dhcpcd poll
742 742 3 1 180 ffffa18012c80bc0 dhcpcd poll
602 602 3 1 180 ffffa18012c206c0 dhcpcd poll
292 292 3 0 180 ffffa18012da0900 dhcpcd poll
485 485 3 0 180 ffffa18012da04c0 dhcpcd poll
291 291 3 1 180 ffffa18012da0080 dhcpcd poll
1 1 3 1 180 ffffa18012867180 init wait
0 13403 5 0 200 ffffa180133a8a40 (zombie)
0 10846 3 0 200 ffffa18013e7ab40 ktrace ktrwait
0 734 3 0 200 ffffa180129916c0 physiod physiod
0 196 3 0 200 ffffa18012994700 pooldrain pooldrain
0 195 3 0 200 ffffa180129942c0 ioflush syncer
0 194 3 1 200 ffffa18012991b00 pgdaemon pgdaemon
0 167 3 0 200 ffffa18012950ac0 usb7 usbevt
0 172 3 0 200 ffffa18012950680 usb6 usbevt
0 170 3 0 200 ffffa18012950240 usb5 usbevt
0 168 3 0 200 ffffa18012905a80 usb4 usbevt
0 166 3 0 200 ffffa18012905640 usb3 usbevt
0 165 3 0 200 ffffa18012905200 usb2 usbevt
0 31 3 1 200 ffffa180128c9a40 usb1 usbevt
0 63 3 1 200 ffffa180128c9600 usb0 usbevt
0 126 3 1 200 ffffa180128c91c0 usbtask-dr usbtsk
0 125 3 1 200 ffffa18012867a00 usbtask-hc usbtsk
0 124 3 0 200 ffffa18010d76b00 swwreboot swwreboot
0 123 3 0 200 ffffa180128675c0 npfgc0 npfgcw
0 122 3 1 200 ffffa1801285a9c0 rt_free rt_free
0 121 3 1 200 ffffa1801285a580 unpgc unpgc
0 120 3 0 200 ffffa1801285a140 key_timehandler key_timehandler
0 119 3 1 200 ffffa1801270a980 icmp6_wqinput/1 icmp6_wqinput
0 118 3 0 200 ffffa1801270a540 icmp6_wqinput/0 icmp6_wqinput
0 117 3 0 200 ffffa1801270a100 nd6_timer nd6_timer
0 116 3 1 200 ffffa18012703940 carp6_wqinput/1 carp6_wqinput
0 115 3 0 200 ffffa18012703500 carp6_wqinput/0 carp6_wqinput
0 114 3 1 200 ffffa180127030c0 carp_wqinput/1 carp_wqinput
0 113 3 0 200 ffffa180126f4900 carp_wqinput/0 carp_wqinput
0 112 3 1 200 ffffa180126f44c0 icmp_wqinput/1 icmp_wqinput
0 111 3 0 200 ffffa180126f4080 icmp_wqinput/0 icmp_wqinput
0 110 3 0 200 ffffa180126db8c0 rt_timer rt_timer
0 109 3 0 200 ffffa180126db040 vmem_rehash vmem_rehash
0 100 3 1 200 ffffa180126d7300 entbutler entropy
0 99 3 0 200 ffffa180120bcb40 viomb balloon
0 98 3 1 200 ffffa180120bc700 vioif0_txrx/1 vioif0_txrx
0 97 3 0 200 ffffa180120bc2c0 vioif0_txrx/0 vioif0_txrx
0 30 3 0 200 ffffa18010d766c0 scsibus0 sccomp
0 29 3 0 200 ffffa18010d76280 pms0 pmsreset
0 28 3 1 200 ffffa18010cbcac0 xcall/1 xcall
0 27 1 1 200 ffffa18010cbc680 softser/1
0 26 1 1 200 ffffa18010cbc240 softclk/1
0 25 1 1 200 ffffa18010cb9a80 softbio/1
0 24 1 1 200 ffffa18010cb9640 softnet/1
0 23 1 1 201 ffffa18010cb9200 idle/1
0 22 3 0 200 ffffa1800fb56a40 lnxsyswq lnxsyswq
0 21 3 0 200 ffffa1800fb56600 lnxubdwq lnxubdwq
0 20 3 0 200 ffffa1800fb561c0 lnxpwrwq lnxpwrwq
0 19 3 0 200 ffffa1800fb55a00 lnxlngwq lnxlngwq
0 18 3 0 200 ffffa1800fb555c0 lnxhipwq lnxhipwq
0 17 3 0 200 ffffa1800fb55180 lnxrcugc lnxrcugc
0 16 3 0 200 ffffa1800fb4e9c0 sysmon smtaskq
0 15 3 0 200 ffffa1800fb4e580 pmfsuspend pmfsuspend
0 14 3 0 200 ffffa1800fb4e140 pmfevent pmfevent
0 13 3 0 200 ffffa1800fb49980 sopendfree sopendfr
0 12 3 0 200 ffffa1800fb49540 ifwdog ifwdog
0 11 3 0 200 ffffa1800fb49100 iflnkst iflnkst
0 10 3 0 200 ffffa1800fb3c940 nfssilly nfssilly
0 9 3 0 200 ffffa1800fb3c500 vdrain vdrain
0 8 3 1 200 ffffa1800fb3c0c0 modunload mod_unld
0 7 3 0 200 ffffa1800fb33900 xcall/0 xcall
0 6 1 0 200 ffffa1800fb334c0 softser/0
0 > 5 7 0 200 ffffa1800fb33080 softclk/0
0 4 1 0 200 ffffa1800fb318c0 softbio/0
0 3 1 0 200 ffffa1800fb31480 softnet/0
0 2 1 0 201 ffffa1800fb31040 idle/0
0 0 3 0 200 ffffffff83347840 swapper uvm
[Locks tracked through LWPs]

****** LWP 14032.14032 (syz-executor.1) @ 0xffffa18012d87040, l_stat=2

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:pmap_ctor+0x93 sys/arch/x86/x86/pmap.c:2860)
lock address : ffffa18013471180
type : sleep/adaptive
initialized : netbsd:pmap_ctor+0x93
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 1
relevant cpu : 0 last held: 0
relevant lwp : 0xffffa18012d87040 last held: 000000000000000000
last locked : netbsd:pmap_enter_ma+0x386
unlocked* : netbsd:pmap_enter_ma+0xe14
owner field : 0xffffa18012d87040 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 14722.14732 (syz-executor.4) @ 0xffffa18012d08240, l_stat=7

*** Locks held:

* Lock 0 (initialized at netbsd:procinit+0x5c sys/kern/kern_proc.c:386)
lock address : netbsd:proc_lock
type : sleep/adaptive
initialized : netbsd:procinit+0x5c
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 1
relevant lwp : 0xffffa18012d08240 last held: 0xffffa18012d08240
last locked* : netbsd:ttioctl+0x11d9
unlocked : netbsd:do_sys_waitid+0xdd8
owner field : 0xffffa18012d08240 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

*** Locks wanted: none

****** LWP 15693.15693 (syz-executor.2) @ 0xffffa18012bb4180, l_stat=2

*** Locks held:

* Lock 0 (initialized at netbsd:pmap_ctor+0x93 sys/arch/x86/x86/pmap.c:2860)
lock address : ffffa18012d0f980
type : sleep/adaptive
initialized : netbsd:pmap_ctor+0x93
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffffa18012bb4180 last held: 0xffffa18012bb4180
last locked* : netbsd:pmap_enter_ma+0x386
unlocked : netbsd:pmap_extract+0x345
owner field : 0xffffa18012bb4180 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

*** Locks wanted: none

****** LWP 2989.2989 (syz-executor.3) @ 0xffffa1801402b9c0, l_stat=7

*** Locks held:

* Lock 0 (initialized at netbsd:vcache_alloc+0x3e sys/kern/vfs_vnode.c:1376)
lock address : ffffa18013fb6240
type : sleep/adaptive
initialized : netbsd:vcache_alloc+0x3e
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffffa1801402b9c0 last held: 0xffffa1801402b9c0
last locked* : netbsd:genfs_lock+0x15d
unlocked : netbsd:genfs_unlock+0x2a
owner/count : 0xffffa1801402b9c0 flags : 0x0000000000000004
Turnstile: no active turnstile for this lock.

* Lock 1 (initialized at netbsd:vcache_alloc+0x3e sys/kern/vfs_vnode.c:1376)
lock address : ffffa1801407b9c0
type : sleep/adaptive
initialized : netbsd:vcache_alloc+0x3e
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffffa1801402b9c0 last held: 0xffffa1801402b9c0
last locked* : netbsd:genfs_lock+0x15d
unlocked : 0
owner/count : 0xffffa1801402b9c0 flags : 0x0000000000000004
Turnstile: no active turnstile for this lock.

*** Locks wanted:

* Lock 0 (initialized at netbsd:main+0x12e sys/kern/init_main.c:303)
lock address : netbsd:kernel_lock
type : spin
initialized : netbsd:main+0x12e
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 1
relevant cpu : 0 last held: 1
relevant lwp : 0xffffa1801402b9c0 last held: 0xffffa18012d08240
last locked* : netbsd:cdev_ioctl+0x218
unlocked : netbsd:cdev_ioctl+0x22e
curcpu holds : 1 wanted by: 000000000000000000

****** LWP 747.747 (dhcpcd) @ 0xffffa18012cb4500, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:module_hook_init+0x1c sys/kern/kern_module_hook.c:132)
lock address : netbsd:module_hook
type : sleep/adaptive
initialized : netbsd:module_hook_init+0x1c
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 0
relevant lwp : 0xffffa18012cb4500 last held: 000000000000000000
last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 742.742 (dhcpcd) @ 0xffffa18012c80bc0, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:module_hook_init+0x1c sys/kern/kern_module_hook.c:132)
lock address : netbsd:module_hook
type : sleep/adaptive
initialized : netbsd:module_hook_init+0x1c
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 0
relevant lwp : 0xffffa18012c80bc0 last held: 000000000000000000
last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 485.485 (dhcpcd) @ 0xffffa18012da04c0, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:module_hook_init+0x1c sys/kern/kern_module_hook.c:132)
lock address : netbsd:module_hook
type : sleep/adaptive
initialized : netbsd:module_hook_init+0x1c
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffffa18012da04c0 last held: 000000000000000000
last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 291.291 (dhcpcd) @ 0xffffa18012da0080, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:module_hook_init+0x1c sys/kern/kern_module_hook.c:132)
lock address : netbsd:module_hook
type : sleep/adaptive
initialized : netbsd:module_hook_init+0x1c
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 0
relevant lwp : 0xffffa18012da0080 last held: 000000000000000000
last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 0.11 (iflnkst) @ 0xffffa1800fb49100, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:module_hook_init+0x1c sys/kern/kern_module_hook.c:132)
lock address : netbsd:module_hook
type : sleep/adaptive
initialized : netbsd:module_hook_init+0x1c
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffffa1800fb49100 last held: 000000000000000000
last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 0.5 (softclk/0) @ 0xffffa1800fb33080, l_stat=7

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:module_hook_init+0x1c sys/kern/kern_module_hook.c:132)
lock address : netbsd:module_hook
type : sleep/adaptive
initialized : netbsd:module_hook_init+0x1c
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffffa1800fb33080 last held: 000000000000000000
last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 0.0 (swapper) @ 0xffffffff83347840, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:module_hook_init+0x1c sys/kern/kern_module_hook.c:132)
lock address : netbsd:module_hook
type : sleep/adaptive
initialized : netbsd:module_hook_init+0x1c
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffffffff83347840 last held: 000000000000000000
last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

[Locks tracked through CPUs]

******* Locks held on cpu1:

* Lock 0 (initialized at netbsd:main+0x12e sys/kern/init_main.c:303)
lock address : netbsd:kernel_lock
type : spin
initialized : netbsd:main+0x12e
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 1
relevant cpu : 1 last held: 1
relevant lwp : 0xffffa18012d08240 last held: 0xffffa18012d08240
last locked* : netbsd:cdev_ioctl+0x218
unlocked : netbsd:cdev_ioctl+0x22e
curcpu holds : 1 wanted by: 000000000000000000

* Lock 1 (initialized at netbsd:kprintf_init+0x61 sys/kern/subr_prf.c:155)
lock address : netbsd:kprintf_mtx
type : spin
initialized : netbsd:kprintf_init+0x61
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 1
relevant lwp : 0xffffa18012d08240 last held: 0xffffa18012d08240
last locked* : netbsd:kprintf_lock+0x33
unlocked : netbsd:kprintf_unlock+0x53
owner field : 0x0000000000000800 wait/spin: 0/1

PAGE FLAG PQ UOBJECT UANON
0xffffa18000017180 0041 00000000 0x0 0x0
0xffffa18000017200 0041 00000000 0x0 0x0
0xffffa18000017280 0041 00000000 0x0 0x0
0xffffa18000017300 0041 00000000 0x0 0x0
0xffffa18000017380 0041 00000000 0x0 0x0
0xffffa18000017400 0041 00000000 0x0 0x0
0xffffa18000017480 0041 00000000 0x0 0x0
0xffffa18000017500 0041 00000000 0x0 0x0
0xffffa18000017580 0041 00000000 0x0 0x0
0xffffa18000017600 0041 00000000 0x0 0x0
0xffffa18000017680 0041 00000000 0x0 0x0
0xffffa18000017700 0041 00000000 0x0 0x0
0xffffa18000017780 0041 00000000 0x0 0x0
0xffffa18000017800 0041 00000000 0x0 0x0
0xffffa18000017880 0041 00000000 0x0 0x0
0xffffa18000017900 0041 00000000 0x0 0x0
0xffffa18000017980 0041 00000000 0x0 0x0
0xffffa18000017a00 0041 00000000 0x0 0x0
0xffffa18000017a80 0041 00000000 0x0 0x0
0xffffa18000017b00 0041 00000000 0x0 0x0
0xffffa18000017b80 0041 00000000 0x0 0x0
0xffffa18000017c00 0041 00000000 0x0 0x0
0xffffa18000017c80 0041 00000000 0x0 0x0
0xffffa18000017d00 0041 00000000 0x0 0x0
0xffffa18000017d80 0041 00000000 0x0 0x0
0xffffa18000017e00 0041 00000000 0x0 0x0
0xffffa18000017e80 0041 00000000 0x0 0x0
0xffffa18000017f00 0041 00000000 0x0 0x0
0xffffa18000017f80 0041 00000000 0x0 0x0
0xffffa18000018000 0041 00000000 0x0 0x0
0xffffa18000018080 0041 00000000 0x0 0x0
0xffffa18000018100 0041 00000000 0x0 0x0
0xffffa18000018180 0041 00000000 0x0 0x0
0xffffa18000018200 0041 00000000 0x0 0x0
0xffffa18000018280 0041 00000000 0x0 0x0
0xffffa18000018300 0041 00000000 0x0 0x0
0xffffa18000018380 0041 00000000 0x0 0x0
0xffffa18000018400 0041 00000000 0x0 0x0
0xffffa18000018480 0041 00000000 0x0 0x0
0xffffa18000018500 0041 00000000 0x0 0x0
0xffffa18000018580 0041 00000000 0x0 0x0
0xffffa18000018600 0041 00000000 0x0 0x0
0xffffa18000018680 0041 00000000 0x0 0x0
0xffffa18000018700 0041 00000000 0x0 0x0
0xffffa18000018780 0041 00000000 0x0 0x0
0xffffa18000018800 0041 00000000 0x0 0x0
0xffffa18000018880 0041 00000000 0x0 0x0
0xffffa18000018900 0041 00000000 0x0 0x0
0xffffa18000018980 0041 00000000 0x0 0x0
0xffffa18000018a00 0041 00000000 0x0 0x0
0xffffa18000018a80 0041 00000000 0x0 0x0
0xffffa18000018b00 0041 00000000 0x0 0x0
0xffffa18000018b80 0041 00000000 0x0 0x0
0xffffa18000018c00 0041 00000000 0x0 0x0
0xffffa18000018c80 0041 00000000 0x0 0x0
0xffffa18000018d00 0041 00000000 0x0 0x0
0xffffa18000018d80 0041 00000000 0x0 0x0
0xffffa18000018e00 0041 00000000 0x0 0x0
0xffffa18000018e80 0041 00000000 0x0 0x0
0xffffa18000018f00 0041 00000000 0x0 0x0
0xffffa18000018f80 0041 00000000 0x0 0x0
0xffffa18000019000 0041 00000000 0x0 0x0
0xffffa18000019080 0041 00000000 0x0 0x0
0xffffa18000019100 0041 00000000 0x0 0x0
0xffffa18000019180 0041 00000000 0x0 0x0
0xffffa18000019200 0041 00000000 0x0 0x0
0xffffa18000019280 0041 00000000 0x0 0x0
0xffffa18000019300 0041 00000000 0x0 0x0
0xffffa18000019380 0041 00000000 0x0 0x0
0xffffa18000019400 0041 00000000 0x0 0x0
0xffffa18000019480 0041 00000000 0x0 0x0
0xffffa18000019500 0041 00000000 0x0 0x0
0xffffa18000019580 0041 00000000 0x0 0x0
0xffffa18000019600 0041 00000000 0x0 0x0
0xffffa18000019680 0041 00000000 0x0 0x0
0xffffa18000019700 0041 00000000 0x0 0x0
0xffffa18000019780 0041 00000000 0x0 0x0
0xffffa18000019800 0041 00000000 0x0 0x0
0xffffa18000019880 0041 00000000 0x0 0x0
0xffffa18000019900 0041 00000000 0x0 0x0
0xffffa18000019980 0041 00000000 0x0 0x0
0xffffa18000019a00 0041 00000000 0x0 0x0
0xffffa18000019a80 0041 00000000 0x0 0x0
0xffffa18000019b00 0041 00000000 0x0 0x0
0xffffa18000019b80 0041 00000000 0x0 0x0
0xffffa18000019c00 0041 00000000 0x0 0x0
0xffffa18000019c80 0041 00000000 0x0 0x0
0xffffa18000019d00 0041 00000000 0x0 0x0
0xffffa18000019d80 0041 00000000 0x0 0x0
0xffffa18000019e00 0041 00000000 0x0 0x0
0xffffa18000019e80 0041 00000000 0x0 0x0
0xffffa18000019f00 0041 00000000 0x0 0x0
0xffffa18000019f80 0041 00000000 0x0 0x0
0xffffa1800001a000 0041 00000000 0x0 0x0
0xffffa1800001a080 0041 00000000 0x0 0x0
0xffffa1800001a100 0041 00000000 0x0 0x0
0xffffa1800001a180 0041 00000000 0x0 0x0
0xffffa1800001a200 0041 00000000 0x0 0x0
0xffffa1800001a280 0041 00000000 0x0 0x0
0xffffa1800001a300 0041 00000000 0x0 0x0
0xffffa1800001a380 0041 00000000 0x0 0x0
0xffffa1800001a400 0041 00000000 0x0 0x0
0xffffa1800001a480 0041 00000000 0x0 0x0
0xffffa1800001a500 0041 00000000 0x0 0x0
0xffffa1800001a580 0041 00000000 0x0 0x0
0xffffa1800001a600 0041 00000000 0x0 0x0
0xffffa1800001a680 0041 00000000 0x0 0x0
0xffffa1800001a700 0041 00000000 0x0 0x0
0xffffa1800001a780 0041 00000000 0x0 0x0
0xffffa1800001a800 0041 00000000 0x0 0x0
0xffffa1800001a880 0041 00000000 0x0 0x0
0xffffa1800001a900 0041 00000000 0x0 0x0
0xffffa1800001a980 0041 00000000 0x0 0x0
0xffffa1800001aa00 0041 00000000 0x0 0x0
0xffffa1800001aa80 0041 00000000 0x0 0x0
0xffffa1800001ab00 0041 00000000 0x0 0x0
0xffffa1800001ab80 0041 00000000 0x0 0x0
0xffffa1800001ac00 0041 00000000 0x0 0x0
0xffffa1800001ac80 0041 00000000 0x0 0x0
0xffffa1800001ad00 0041 00000000 0x0 0x0
0xffffa1800001ad80 0041 00000000 0x0 0x0
0xffffa1800001ae00 0041 00000000 0x0 0x0
0xffffa1800001ae80 0041 00000000 0x0 0x0
0xffffa1800001af00 0041 00000000 0x0 0x0
0xffffa1800001af80 0041 00000000 0x0 0x0
0xffffa1800001b000 0041 00000000 0x0 0x0
0xffffa1800001b080 0041 00000000 0x0 0x0
0xffffa1800001b100 0041 00000000 0x0 0x0
0xffffa1800001b180 0041 00000000 0x0 0x0
0xffffa1800001b200 0041 00000000 0x0 0x0
0xffffa1800001b280 0041 00000000 0x0 0x0
0xffffa1800001b300 0041 00000000 0x0 0x0
0xffffa1800001b380 0041 00000000 0x0 0x0
0xffffa1800001b400 0041 00000000 0x0 0x0
0xffffa1800001b480 0041 00000000 0x0 0x0
0xffffa1800001b500 0041 00000000 0x0 0x0
0xffffa1800001b580 0041 00000000 0x0 0x0
0xffffa1800001b600 0041 00000000 0x0 0x0
0xffffa1800001b680 0041 00000000 0x0 0x0
0xffffa1800001b700 0041 00000000 0x0 0x0
0xffffa1800001b780 0041 00000000 0x0 0x0
0xffffa1800001b800 0041 00000000 0x0 0x0
0xffffa1800001b880 0041 00000000 0x0 0x0
0xffffa1800001b900 0041 00000000 0x0 0x0
0xffffa1800001b980 0041 00000000 0x0 0x0
0xffffa1800001ba00 0041 00000000 0x0 0x0
0xffffa1800001ba80 0041 00000000 0x0 0x0
0xffffa1800001bb00 0041 00000000 0x0 0x0
0xffffa1800001bb80 0001 00000000 0x0 0x0
0xffffa1800001bc00 0001 00000000 0x0 0x0
0xffffa1800001bc80 0001 00000000 0x0 0x0
0xffffa1800001bd00 0001 00000000 0x0 0x0
0xffffa1800001bd80 0001 00000000 0x0 0x0
0xffffa1800001be00 0001 00000000 0x0 0x0
0xffffa1800001be80 0001 00000000 0x0 0x0
0xffffa1800001bf00 0001 00000000 0x0 0x0
0xffffa1800001bf80 0001 00000000 0x0 0x0
0xffffa1800001c000 0001 00000000 0x0 0x0
0xffffa1800001c080 0001 00000000 0x0 0x0
0xffffa1800001c100 0001 00000000 0x0 0x0
0xffffa1800001c180 0001 00000000 0x0 0x0
0xffffa1800001c200 0001 00000000 0x0 0x0
0xffffa1800001c280 0001 00000000 0x0 0x0
0xffffa1800001c300 0001 00000000 0x0 0x0
0xffffa1800001c380 0001 00000000 0x0 0x0
0xffffa1800001c400 0001 00000000 0x0 0x0
0xffffa1800001c480 0001 00000000 0x0 0x0
0xffffa1800001c500 0001 00000000 0x0 0x0
0xffffa1800001c580 0001 00000000 0x0 0x0
0xffffa1800001c600 0001 00000000 0x0 0x0
0xffffa1800001c680 0001 00000000 0x0 0x0
0xffffa1800001c700 0001 00000000 0x0 0x0
0xffffa1800001c780 0001 00000000 0x0 0x0
0xffffa1800001c800 0001 00000000 0x0 0x0
0xffffa1800001c880 0001 00000000 0x0 0x0
0xffffa1800001c900 0001 00000000 0x0 0x0
0xffffa1800001c980 0001 00000000 0x0 0x0
0xffffa1800001ca00 0001 00000000 0x0 0x0
0xffffa1800001ca80 0001 00000000 0x0 0x0
0xffffa1800001cb00 0001 00000000 0x0 0x0
0xffffa1800001cb80 0001 00000000 0x0 0x0
0xffffa1800001cc00 0001 00000000 0x0 0x0
0xffffa1800001cc80 0001 00000000 0x0 0x0
0xffffa1800001cd00 0001 00000000 0x0 0x0
0xffffa1800001cd80 0001 00000000 0x0 0x0
0xffffa1800001ce00 0001 00000000 0x0 0x0
0xffffa1800001ce80 0001 00000000 0x0 0x0
0xffffa1800001cf00 0001 00000000 0x0 0x0
0xffffa1800001cf80 0001 00000000 0x0 0x0
0xffffa1800001d000 0001 00000000 0x0 0x0
0xffffa1800001d080 0001 00000000 0x0 0x0
0xffffa1800001d100 0001 00000000 0x0 0x0
0xffffa1800001d180 0001 00000000 0x0 0x0
0xffffa1800001d200 0001 00000000 0x0 0x0
0xffffa1800001d280 0001 00000000 0x0 0x0
0xffffa1800001d300 0001 00000000 0x0 0x0
0xffffa1800001d380 0001 00000000 0x0 0x0
0xffffa1800001d400 0001 00000000 0x0 0x0
0xffffa1800001d480 0001 00000000 0x0 0x0
0xffffa1800001d500 0001 00000000 0x0 0x0
0xffffa1800001d580 0001 00000000 0x0 0x0
0xffffa1800001d600 0001 00000000 0x0 0x0
0xffffa1800001d680 0001 00000000 0x0 0x0
0xffffa1800001d700 0001 00000000 0x0 0x0
0xffffa1800001d780 0001 00000000 0x0 0x0
0xffffa1800001d800 0001 00000000 0x0 0x0
0xffffa1800001d880 0001 00000000 0x0 0x0
0xffffa1800001d900 0001 00000000 0x0 0x0
0xffffa1800001d980 0001 00000000 0x0 0x0
0xffffa1800001da00 0001 00000000 0x0 0x0
0xffffa1800001da80 0001 00000000 0x0 0x0
0xffffa1800001db00 0001 00000000 0x0 0x0
0xffffa1800001db80 0001 00000000 0x0 0x0
0xffffa1800001dc00 0001 00000000 0x0 0x0
0xffffa1800001dc80 0001 00000000 0x0 0x0
0xffffa1800001dd00 0001 00000000 0x0 0x0
0xffffa1800001dd80 0001 00000000 0x0 0x0
0xffffa1800001de00 0001 00000000 0x0 0x0
0xffffa1800001de80 0001 00000000 0x0 0x0
0xffffa1800001df00 0001 00000000 0x0 0x0
0xffffa1800001df80 0001 00000000 0x0 0x0
0xffffa1800001e000 0001 00000000 0x0 0x0
0xffffa1800001e080 0001 00000000 0x0 0x0
0xffffa1800001e100 0001 00000000 0x0 0x0
0xffffa1800001e180 0001 00000000 0x0 0x0
0xffffa1800001e200 0001 00000000 0x0 0x0
0xffffa1800001e280 0001 00000000 0x0 0x0
0xffffa1800001e300 0001 00000000 0x0 0x0
0xffffa1800001e380 0001 00000000 0x0 0x0
0xffffa1800001e400 0001 00000000 0x0 0x0
0xffffa1800001e480 0001 00000000 0x0 0x0
0xffffa1800001e500 0001 00000000 0x0 0x0
0xffffa1800001e580 0001 00000000 0x0 0x0
0xffffa1800001e600 0001 00000000 0x0 0x0
0xffffa1800001e680 0001 00000000 0x0 0x0
0xffffa1800001e700 0001 00000000 0x0 0x0
0xffffa1800001e780 0001 00000000 0x0 0x0
0xffffa1800001e800 0001 00000000 0x0 0x0
0xffffa1800001e880 0001 00000000 0x0 0x0
0xffffa1800001e900 0001 00000000 0x0 0x0
0xffffa1800001e980 0001 00000000 0x0 0x0
0xffffa1800001ea00 0001 00000000 0x0 0x0
0xffffa1800001ea80 0001 00000000 0x0 0x0
0xffffa1800001eb00 0001 00000000 0x0 0x0
0xffffa1800001eb80 0001 00000000 0x0 0x0
0xffffa1800001ec00 0001 00000000 0x0 0x0
0xffffa1800001ec80 0001 00000000 0x0 0x0
0xffffa1800001ed00 0001 00000000 0x0 0x0
0xffffa1800001ed80 0001 00000000 0x0 0x0
0xffffa1800001ee00 0001 00000000 0x0 0x0
0xffffa1800001ee80 0001 00000000 0x0 0x0
0xffffa1800001ef00 0001 00000000 0x0 0x0
0xffffa1800001ef80 0001 00000000 0x0 0x0
0xffffa1800001f000 0001 00000000 0x0 0x0
0xffffa1800001f080 0001 00000000 0x0 0x0
0xffffa1800001f100 0001 00000000 0x0 0x0
0xffffa1800001f180 0001 00000000 0x0 0x0
0xffffa1800001f200 0001 00000000 0x0 0x0
0xffffa1800001f280 0001 00000000 0x0 0x0
0xffffa1800001f300 0001 00000000 0x0 0x0
0xffffa1800001f380 0001 00000000 0x0 0x0
0xffffa1800001f400 0001 00000000 0x0 0x0
0xffffa1800001f480 0001 00000000 0x0 0x0
0xffffa1800001f500 0001 00000000 0x0 0x0
0xffffa1800001f580 0001 00000000 0x0 0x0
0xffffa1800001f600 0001 00000000 0x0 0x0
0xffffa1800001f680 0001 00000000 0x0 0x0
0xffffa1800001f700 0001 00000000 0x0 0x0
0xffffa1800001f780 0001 00000000 0x0 0x0
0xffffa1800001f800 0001 00000000 0x0 0x0
0xffffa1800001f880 0001 00000000 0x0 0x0
0xffffa1800001f900 0001 00000000 0x0 0x0
0xffffa1800001f980 0001 00000000 0x0 0x0
0xffffa1800001fa00 0001 00000000 0x0 0x0
0xffffa1800001fa80 0001 00000000 0x0 0x0
0xffffa1800001fb00 0001 00000000 0x0 0x0
0xffffa1800001fb80 0001 00000000 0x0 0x0
0xffffa1800001fc00 0001 00000000 0x0 0x0
0xffffa1800001fc80 0001 00000000 0x0 0x0
0xffffa1800001fd00 0001 00000000 0x0 0x0
0xffffa1800001fd80 0001 00000000 0x0 0x0
0xffffa1800001fe00 0001 00000000 0x0 0x0
0xffffa1800001fe80 0001 00000000 0x0 0x0
0xffffa1800001ff00 0001 00000000 0x0 0x0
0xffffa1800001ff80 0001 00000000 0x0 0x0
0xffffa18000020000 0001 00000000 0x0 0x0
0xffffa18000020080 0001 00000000 0x0 0x0
0xffffa18000020100 0001 00000000 0x0 0x0
0xffffa18000020180 0001 00000000 0x0 0x0
0xffffa18000020200 0001 00000000 0x0 0x0
0xffffa18000020280 0001 00000000 0x0 0x0
0xffffa18000020300 0001 00000000 0x0 0x0
0xffffa18000020380 0001 00000000 0x0 0x0
0xffffa18000020400 0001 00000000 0x0 0x0
0xffffa18000020480 0001 00000000 0x0 0x0
0xffffa18000020500 0001 00000000 0x0 0x0
0xffffa18000020580 0001 00000000 0x0 0x0
0xffffa18000020600 0001 00000000 0x0 0x0
0xffffa18000020680 0001 00000000 0x0 0x0
0xffffa18000020700 0001 00000000 0x0 0x0
0xffffa18000020780 0001 00000000 0x0 0x0
0xffffa18000020800 0001 00000000 0x0 0x0
0xffffa18000020880 0001 00000000 0x0 0x0
0xffffa18000020900 0001 00000000 0x0 0x0
0xffffa18000020980 0001 00000000 0x0 0x0
0xffffa18000020a00 0001 00000000 0x0 0x0
0xffffa18000020a80 0001 00000000 0x0 0x0
0xffffa18000020b00 0001 00000000 0x0 0x0
0xffffa18000020b80 0001 00000000 0x0 0x0
0xffffa18000020c00 0001 00000000 0x0 0x0
0xffffa18000020c80 0001 00000000 0x0 0x0
0xffffa18000020d00 0001 00000000 0x0 0x0
0xffffa18000020d80 0001 00000000 0x0 0x0
0xffffa18000020e00 0001 00000000 0x0 0x0
0xffffa18000020e80 0001 00000000 0x0 0x0
0xffffa18000020f00 0001 00000000 0x0 0x0
0xffffa18000020f80 0001 00000000 0x0 0x0
0xffffa18000021000 0001 00000000 0x0 0x0
0xffffa18000021080 0001 00000000 0x0 0x0
0xffffa18000021100 0001 00000000 0x0 0x0
0xffffa18000021180 0001 00000000 0x0 0x0
0xffffa18000021200 0001 00000000 0x0 0x0
0xffffa18000021280 0001 00000000 0x0 0x0
0xffffa18000021300 0001 00000000 0x0 0x0
0xffffa18000021380 0001 00000000 0x0 0x0
0xffffa18000021400 0001 00000000 0x0 0x0
0xffffa18000021480 0001 00000000 0x0 0x0
0xffffa18000021500 0001 00000000 0x0 0x0
0xffffa18000021580 0001 00000000 0x0 0x0
0xffffa18000021600 0001 00000000 0x0 0x0
0xffffa18000021680 0001 00000000 0x0 0x0
0xffffa18000021700 0001 00000000 0x0 0x0
0xffffa18000021780 0001 00000000 0x0 0x0
0xffffa18000021800 0001 00000000 0x0 0x0
0xffffa18000021880 0001 00000000 0x0 0x0
0xffffa18000021900 0001 00000000 0x0 0x0
0xffffa18000021980 0001 00000000 0x0 0x0
0xffffa18000021a00 0001 00000000 0x0 0x0
0xffffa18000021a80 0001 00000000 0x0 0x0
0xffffa18000021b00 0001 00000000 0x0 0x0
0xffffa18000021b80 0001 00000000 0x0 0x0
0xffffa18000021c00 0001 00000000 0x0 0x0
0xffffa18000021c80 0001 00000000 0x0 0x0
0xffffa18000021d00 0001 00000000 0x0 0x0
0xffffa18000021d80 0001 00000000 0x0 0x0
0xffffa18000021e00 0001 00000000 0x0 0x0
0xffffa18000021e80 0001 00000000 0x0 0x0
0xffffa18000021f00 0001 00000000 0x0 0x0
0xffffa18000021f80 0001 00000000 0x0 0x0
0xffffa18000022000 0001 00000000 0x0 0x0
0xffffa18000022080 0001 00000000 0x0 0x0
0xffffa18000022100 0001 00000000 0x0 0x0
0xffffa18000022180 0001 00000000 0x0 0x0
0xffffa18000022200 0001 00000000 0x0 0x0
0xffffa18000022280 0001 00000000 0x0 0x0
0xffffa18000022300 0001 00000000 0x0 0x0
0xffffa18000022380 0001 00000000 0x0 0x0
0xffffa18000022400 0001 00000000 0x0 0x0
0xffffa18000022480 0001 00000000 0x0 0x0
0xffffa18000022500 0001 00000000 0x0 0x0
0xffffa18000022580 0001 00000000 0x0 0x0
0xffffa18000022600 0001 00000000 0x0 0x0
0xffffa18000022680 0001 00000000 0x0 0x0
0xffffa18000022700 0001 00000000 0x0 0x0
0xffffa18000022780 0001 00000000 0x0 0x0
0xffffa18000022800 0001 00000000 0x0 0x0
0xffffa18000022880 0001 00000000 0x0 0x0
0xffffa18000022900 0001 00000000 0x0 0x0
0xffffa18000022980 0001 00000000 0x0 0x0
0xffffa18000022a00 0001 00000000 0x0 0x0
0xffffa18000022a80 0001 00000000 0x0 0x0
0xffffa18000022b00 0001 00000000 0x0 0x0
0xffffa18000022b80 0001 00000000 0x0 0x0
0xffffa18000022c00 0001 00000000 0x0 0x0
0xffffa18000022c80 0001 00000000 0x0 0x0
0xffffa18000022d00 0001 00000000 0x0 0x0
0xffffa18000022d80 0001 00000000 0x0 0x0
0xffffa18000022e00 0001 00000000 0x0 0x0
0xffffa18000022e80 0001 00000000 0x0 0x0
0xffffa18000022f00 0001 00000000 0x0 0x0
0xffffa18000022f80 0001 00000000 0x0 0x0
0xffffa18000023000 0001 00000000 0x0 0x0
0xffffa18000023080 0001 00000000 0x0 0x0
0xffffa18000023100 0001 00000000 0x0 0x0
0xffffa18000023180 0001 00000000 0x0 0x0
0xffffa18000023200 0001 00000000 0x0 0x0
0xffffa18000023280 0001 00000000 0x0 0x0
0xffffa18000023300 0001 00000000 0x0 0x0
0xffffa18000023380 0001 00000000 0x0 0x0
0xffffa18000023400 0001 00000000 0x0 0x0
0xffffa18000023480 0001 00000000 0x0 0x0
0xffffa18000023500 0001 00000000 0x0 0x0
0xffffa18000023580 0001 00000000 0x0 0x0
0xffffa18000023600 0001 00000000 0x0 0x0
0xffffa18000023680 0001 00000000 0x0 0x0
0xffffa18000023700 0001 00000000 0x0 0x0
0xffffa18000023780 0001 00000000 0x0 0x0
0xffffa18000023800 0001 00000000 0x0 0x0
0xffffa18000023880 0001 00000000 0x0 0x0
0xffffa18000023900 0001 00000000 0x0 0x0
0xffffa18000023980 0001 00000000 0x0 0x0
0xffffa18000023a00 0001 00000000 0x0 0x0
0xffffa18000023a80 0001 00000000 0x0 0x0
0xffffa18000023b00 0001 00000000 0x0 0x0
0xffffa18000023b80 0001 00000000 0x0 0x0
0xffffa18000023c00 0001 00000000 0x0 0x0
0xffffa18000023c80 0001 00000000 0x0 0x0
0xffffa18000023d00 0001 00000000 0x0 0x0
0xffffa18000023d80 0001 00000000 0x0 0x0
0xffffa18000023e00 0001 00000000 0x0 0x0
0xffffa18000023e80 0001 00000000 0x0 0x0
0xffffa18000023f00 0001 00000000 0x0 0x0
0xffffa18000023f80 0001 00000000 0x0 0x0
0xffffa18000024000 0001 00000000 0x0 0x0
0xffffa18000024080 0001 00000000 0x0 0x0
0xffffa18000024100 0001 00000000 0x0 0x0
0xffffa18000024180 0001 00000000 0x0 0x0
0xffffa18000024200 0001 00000000 0x0 0x0
0xffffa18000024280 0001 00000000 0x0 0x0
0xffffa18000024300 0001 00000000 0x0 0x0
0xffffa18000024380 0001 00000000 0x0 0x0
0xffffa18000024400 0001 00000000 0x0 0x0
0xffffa18000024480 0001 00000000 0x0 0x0
0xffffa18000024500 0001 00000000 0x0 0x0
0xffffa18000024580 0001 00000000 0x0 0x0
0xffffa18000024600 0001 00000000 0x0 0x0
0xffffa18000024680 0001 00000000 0x0 0x0
0xffffa18000024700 0001 00000000 0x0 0x0
0xffffa18000024780 0001 00000000 0x0 0x0
0xffffa18000024800 0001 00000000 0x0 0x0
0xffffa18000024880 0001 00000000 0x0 0x0
0xffffa18000024900 0001 00000000 0x0 0x0
0xffffa18000024980 0001 00000000 0x0 0x0
0xffffa18000024a00 0001 00000000 0x0 0x0
0xffffa18000024a80 0001 00000000 0x0 0x0
0xffffa18000024b00 0001 00000000 0x0 0x0
0xffffa18000024b80 0001 00000000 0x0 0x0
0xffffa18000024c00 0001 00000000 0x0 0x0
0xffffa18000024c80 0001 00000000 0x0 0x0
0xffffa18000024d00 0001 00000000 0x0 0x0
0xffffa18000024d80 0001 00000000 0x0 0x0
0xffffa18000024e00 0001 00000000 0x0 0x0
0xffffa18000024e80 0001 00000000 0x0 0x0
0xffffa18000024f00 0001 00000000 0x0 0x0
0xffffa18000024f80 0001 00000000 0x0 0x0
0xffffa18000025000 0001 00000000 0x0 0x0
0xffffa18000025080 0001 00000000 0x0 0x0
0xffffa18000025100 0001 00000000 0x0 0x0
0xffffa18000025180 0001 00000000 0x0 0x0
0xffffa18000025200 0001 00000000 0x0 0x0
0xffffa18000025280 0001 00000000 0x0 0x0
0xffffa18000025300 0001 00000000 0x0 0x0
0xffffa18000025380 0001 00000000 0x0 0x0
0xffffa18000025400 0001 00000000 0x0 0x0
0xffffa18000025480 0001 00000000 0x0 0x0
0xffffa18000025500 0001 00000000 0x0 0x0
0xffffa18000025580 0001 00000000 0x0 0x0
0xffffa18000025600 0001 00000000 0x0 0x0
0xffffa18000025680 0001 00000000 0x0 0x0
0xffffa18000025700 0001 00000000 0x0 0x0
0xffffa18000025780 0001 00000000 0x0 0x0
0xffffa18000025800 0001 00000000 0x0 0x0
0xffffa18000025880 0001 00000000 0x0 0x0
0xffffa18000025900 0001 00000000 0x0 0x0
0xffffa18000025980 0001 00000000 0x0 0x0
0xffffa18000025a00 0001 00000000 0x0 0x0
0xffffa18000025a80 0001 00000000 0x0 0x0
0xffffa18000025b00 0001 00000000 0x0 0x0
0xffffa18000025b80 0001 00000000 0x0 0x0
0xffffa18000025c00 0001 00000000 0x0 0x0
0xffffa18000025c80 0001 00000000 0x0 0x0
0xffffa18000025d00 0001 00000000 0x0 0x0
0xffffa18000025d80 0001 00000000 0x0 0x0
0xffffa18000025e00 0001 00000000 0x0 0x0
0xffffa18000025e80 0001 00000000 0x0 0x0
0xffffa18000025f00 0001 00000000 0x0 0x0
0xffffa18000025f80 0001 00000000 0x0 0x0
0xffffa18000026000 0001 00000000 0x0 0x0
0xffffa18000026080 0001 00000000 0x0 0x0
0xffffa18000026100 0001 00000000 0x0 0x0
0xffffa18000026180 0001 00000000 0x0 0x0
0xffffa18000026200 0001 00000000 0x0 0x0
0xffffa18000026280 0001 00000000 0x0 0x0
0xffffa18000026300 0001 00000000 0x0 0x0
0xffffa18000026380 0001 00000000 0x0 0x0
0xffffa18000026400 0001 00000000 0x0 0x0
0xffffa18000026480 0001 00000000 0x0 0x0
0xffffa18000026500 0001 00000000 0x0 0x0
0xffffa18000026580 0001 00000000 0x0 0x0
0xffffa18000026600 0001 00000000 0x0 0x0
0xffffa18000026680 0001 00000000 0x0 0x0
0xffffa18000026700 0001 00000000 0x0 0x0
0xffffa18000026780 0001 00000000 0x0 0x0
0xffffa18000026800 0001 00000000 0x0 0x0
0xffffa18000026880 0001 00000000 0x0 0x0
0xffffa18000026900 0001 00000000 0x0 0x0
0xffffa18000026980 0001 00000000 0x0 0x0
0xffffa18000026a00 0001 00000000 0x0 0x0
0xffffa18000026a80 0001 00000000 0x0 0x0
0xffffa18000026b00 0001 00000000 0x0 0x0
0xffffa18000026b80 0001 00000000 0x0 0x0
0xffffa18000026c00 0001 00000000 0x0 0x0
0xffffa18000026c80 0001 00000000 0x0 0x0
0xffffa18000026d00 0001 00000000 0x0 0x0
0xffffa18000026d80 0001 00000000 0x0 0x0
0xffffa18000026e00 0001 00000000 0x0 0x0
0xffffa18000026e80 0001 00000000 0x0 0x0
0xffffa18000026f00 0001 00000000 0x0 0x0
0xffffa18000026f80 0001 00000000 0x0 0x0
0xffffa18000027000 0001 00000000 0x0 0x0
0xffffa18000027080 0001 00000000 0x0 0x0
0xffffa18000027100 0001 00000000 0x0 0x0
0xffffa18000027180 0001 00000000 0x0 0x0
0xffffa18000027200 0001 00000000 0x0 0x0
0xffffa18000027280 0001 00000000 0x0 0x0
0xffffa18000027300 0001 00000000 0x0 0x0
0xffffa18000027380 0001 00000000 0x0 0x0
0xffffa18000027400 0001 00000000 0x0 0x0
0xffffa18000027480 0001 00000000 0x0 0x0
0xffffa18000027500 0001 00000000 0x0 0x0
0xffffa18000027580 0001 00000000 0x0 0x0
0xffffa18000027600 0001 00000000 0x0 0x0
0xffffa18000027680 0001 00000000 0x0 0x0
0xffffa18000027700 0001 00000000 0x0 0x0
0xffffa18000027780 0001 00000000 0x0 0x0
0xffffa18000027800 0001 00000000 0x0 0x0
0xffffa18000027880 0001 00000000 0x0 0x0
0xffffa18000027900 0001 00000000 0x0 0x0
0xffffa18000027980 0001 00000000 0x0 0x0
0xffffa18000027a00 0001 00000000 0x0 0x0
0xffffa18000027a80 0001 00000000 0x0 0x0
0xffffa18000027b00 0001 00000000 0x0 0x0
0xffffa18000027b80 0001 00000000 0x0 0x0
0xffffa18000027c00 0001 00000000 0x0 0x0
0xffffa18000027c80 0001 00000000 0x0 0x0
0xffffa18000027d00 0001 00000000 0x0 0x0
0xffffa18000027d80 0001 00000000 0x0 0x0
0xffffa18000027e00 0001 00000000 0x0 0x0
0xffffa18000027e80 0001 00000000 0x0 0x0
0xffffa18000027f00 0001 00000000 0x0 0x0
0xffffa18000027f80 0001 00000000 0x0 0x0
0xffffa18000028000 0001 00000000 0x0 0x0
0xffffa18000028080 0001 00000000 0x0 0x0
0xffffa18000028100 0001 00000000 0x0 0x0
0xffffa18000028180 0001 00000000 0x0 0x0
0xffffa18000028200 0001 00000000 0x0 0x0
0xffffa18000028280 0001 00000000 0x0 0x0
0xffffa18000028300 0001 00000000 0x0 0x0
0xffffa18000028380 0001 00000000 0x0 0x0
0xffffa18000028400 0001 00000000 0x0 0x0
0xffffa18000028480 0001 00000000 0x0 0x0
0xffffa18000028500 0001 00000000 0x0 0x0
0xffffa18000028580 0001 00000000 0x0 0x0
0xffffa18000028600 0001 00000000 0x0 0x0
0xffffa18000028680 0001 00000000 0x0 0x0
0xffffa18000028700 0001 00000000 0x0 0x0
0xffffa18000028780 0001 00000000 0x0 0x0
0xffffa18000028800 0001 00000000 0x0 0x0
0xffffa18000028880 0001 00000000 0x0 0x0
0xffffa18000028900 0001 00000000 0x0 0x0
0xffffa18000028980 0001 00000000 0x0 0x0
0xffffa18000028a00 0001 00000000 0x0 0x0
0xffffa18000028a80 0001 00000000 0x0 0x0
0xffffa18000028b00 0001 00000000 0x0 0x0
0xffffa18000028b80 0001 00000000 0x0 0x0
0xffffa18000028c00 0001 00000000 0x0 0x0
0xffffa18000028c80 0001 00000000 0x0 0x0
0xffffa18000028d00 0001 00000000 0x0 0x0
0xffffa18000028d80 0001 00000000 0x0 0x0
0xffffa18000028e00 0001 00000000 0x0 0x0
0xffffa18000028e80 0001 00000000 0x0 0x0
0xffffa18000028f00 0001 00000000 0x0 0x0
0xffffa18000028f80 0001 00000000 0x0 0x0
0xffffa18000029000 0001 00000000 0x0 0x0
0xffffa18000029080 0001 00000000 0x0 0x0
0xffffa18000029100 0001 00000000 0x0 0x0
0xffffa18000029180 0001 00000000 0x0 0x0
0xffffa18000029200 0001 00000000 0x0 0x0
0xffffa

---
This report is generated by a bot. It may contain errors.
See https://goo.gl/tpsmEJ for more information about syzbot.
syzbot engineers can be reached at syzk...@googlegroups.com.

syzbot will keep track of this issue. See:
https://goo.gl/tpsmEJ#status for how to communicate with syzbot.

[syzbot]

syzbot has found a reproducer for the following issue on:

HEAD commit: e434028b4441 indent: merge lexer symbols for type in/outsi..
git tree: netbsd
console output: https://syzkaller.appspot.com/x/log.txt?x=15062303280000

kernel config: https://syzkaller.appspot.com/x/.config?x=fab579639ba4bf0a
dashboard link: https://syzkaller.appspot.com/bug?extid=994b6ece722a41454fd9
compiler: g++ (Debian 10.2.1-6) 10.2.1 20210110

syz repro: https://syzkaller.appspot.com/x/repro.syz?x=1684ba5b280000

Downloadable assets:
disk image: https://storage.googleapis.com/syzbot-assets/c14f0dedd430/disk-e434028b.raw.xz
netbsd.gdb: https://storage.googleapis.com/syzbot-assets/6fde3d34e4bd/netbsd-e434028b.gdb.xz

IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+994b6e...@syzkaller.appspotmail.com

[ 1212.7223472] panic: ASan: Unauthorized Access In 0xffffffff81c58800: Addr 0xffff9d00136ba790 [4 bytes, read, PoolUseAfterFree]

[ 1212.7433275] cpu0: Begin traceback...
[ 1212.7523184] vpanic() at netbsd:vpanic+0x282 sys/kern/subr_prf.c:292
[ 1212.8123189] panic() at netbsd:panic+0x9e sys/kern/subr_prf.c:1060
[ 1212.8723202] kasan_report() at netbsd:kasan_report+0x8f kasan_code_name sys/kern/subr_asan.c:169 [inline]
[ 1212.8723202] kasan_report() at netbsd:kasan_report+0x8f sys/kern/subr_asan.c:201
[ 1212.9123211] __asan_load4() at netbsd:__asan_load4+0x9d kasan_shadow_4byte_isvalid sys/kern/subr_asan.c:351 [inline]
[ 1212.9123211] __asan_load4() at netbsd:__asan_load4+0x9d kasan_shadow_check sys/kern/subr_asan.c:418 [inline]
[ 1212.9123211] __asan_load4() at netbsd:__asan_load4+0x9d sys/kern/subr_asan.c:1207
[ 1212.9523195] ttioctl() at netbsd:ttioctl+0x127b sys/kern/tty.c:1206
[ 1212.9923188] ptyioctl() at netbsd:ptyioctl+0x526 sys/kern/tty_pty.c:1182
[ 1213.0223200] cdev_ioctl() at netbsd:cdev_ioctl+0x197 sys/kern/subr_devsw.c:1525
[ 1213.0623200] spec_ioctl() at netbsd:spec_ioctl+0x148 sys/miscfs/specfs/spec_vnops.c:1331
[ 1213.1023200] VOP_IOCTL() at netbsd:VOP_IOCTL+0x132 sys/kern/vnode_if.c:933
[ 1213.1523244] vn_ioctl() at netbsd:vn_ioctl+0x1c4 sys/kern/vfs_vnops.c:892
[ 1213.1923187] sys_fcntl() at netbsd:sys_fcntl+0xa16 sys/kern/sys_descrip.c:479
[ 1213.2323251] sys___syscall() at netbsd:sys___syscall+0x10e sy_call sys/sys/syscallvar.h:65 [inline]
[ 1213.2323251] sys___syscall() at netbsd:sys___syscall+0x10e sys/kern/sys_syscall.c:90
[ 1213.2723264] syscall() at netbsd:syscall+0x25a sy_call sys/sys/syscallvar.h:65 [inline]
[ 1213.2723264] syscall() at netbsd:syscall+0x25a sy_invoke sys/sys/syscallvar.h:94 [inline]
[ 1213.2723264] syscall() at netbsd:syscall+0x25a sys/arch/x86/x86/syscall.c:138
[ 1213.2823198] --- syscall (number 92 via SYS_syscall) ---
[ 1213.3023210] netbsd:syscall+0x25a:
[ 1213.3023210] cpu0: End traceback...
[ 1213.3023210] fatal breakpoint trap in supervisor mode
[ 1213.3153917] trap type 1 code 0 rip 0xffffffff8023241d cs 0x8 rflags 0x282 cr2 0x40eb30 ilevel 0 rsp 0xffff9d02487402e0
[ 1213.3278338] curlwp 0xffff9d0012abb4c0 pid 11654.11774 lowest kstack 0xffff9d02487392c0
Stopped in pid 11654.11774 (syz-executor.4) at netbsd:breakpoint+0x5: leave

?
breakpoint() at netbsd:breakpoint+0x5
db_panic() at netbsd:db_panic+0x105 sys/ddb/db_panic.c:69

vpanic() at netbsd:vpanic+0x282 sys/kern/subr_prf.c:292
panic() at netbsd:panic+0x9e sys/kern/subr_prf.c:1060
kasan_report() at netbsd:kasan_report+0x8f kasan_code_name sys/kern/subr_asan.c:169 [inline]
kasan_report() at netbsd:kasan_report+0x8f sys/kern/subr_asan.c:201
__asan_load4() at netbsd:__asan_load4+0x9d kasan_shadow_4byte_isvalid sys/kern/subr_asan.c:351 [inline]
__asan_load4() at netbsd:__asan_load4+0x9d kasan_shadow_check sys/kern/subr_asan.c:418 [inline]
__asan_load4() at netbsd:__asan_load4+0x9d sys/kern/subr_asan.c:1207

ttioctl() at netbsd:ttioctl+0x127b sys/kern/tty.c:1206

ptyioctl() at netbsd:ptyioctl+0x526 sys/kern/tty_pty.c:1182

cdev_ioctl() at netbsd:cdev_ioctl+0x197 sys/kern/subr_devsw.c:1525

spec_ioctl() at netbsd:spec_ioctl+0x148 sys/miscfs/specfs/spec_vnops.c:1331
VOP_IOCTL() at netbsd:VOP_IOCTL+0x132 sys/kern/vnode_if.c:933
vn_ioctl() at netbsd:vn_ioctl+0x1c4 sys/kern/vfs_vnops.c:892
sys_fcntl() at netbsd:sys_fcntl+0xa16 sys/kern/sys_descrip.c:479

sys___syscall() at netbsd:sys___syscall+0x10e sy_call sys/sys/syscallvar.h:65 [inline]
sys___syscall() at netbsd:sys___syscall+0x10e sys/kern/sys_syscall.c:90
syscall() at netbsd:syscall+0x25a sy_call sys/sys/syscallvar.h:65 [inline]
syscall() at netbsd:syscall+0x25a sy_invoke sys/sys/syscallvar.h:94 [inline]
syscall() at netbsd:syscall+0x25a sys/arch/x86/x86/syscall.c:138
--- syscall (number 92 via SYS_syscall) ---
netbsd:syscall+0x25a:

Panic string: ASan: Unauthorized Access In 0xffffffff81c58800: Addr 0xffff9d00136ba790 [4 bytes, read, PoolUseAfterFree]

PID LID S CPU FLAGS STRUCT LWP * NAME WAIT

12736 12736 2 0 0 ffff9d0013d81280 syz-executor.3
13395 13395 2 0 0 ffff9d0013e62580 syz-executor.5
13493 12592 3 1 100000 ffff9d0012cfa180 syz-executor.2 tstile
13493 13493 2 0 10000040 ffff9d00126e7740 syz-executor.2
10205 11759 3 1 180 ffff9d00133c0a40 syz-executor.1 parked
10205 11658 2 0 100 ffff9d0012d54300 syz-executor.1
10205 10205 2 1 10040000 ffff9d00134750c0 syz-executor.1
11654 13374 3 1 180 ffff9d0012cef580 syz-executor.4 parked
11654>11774 7 0 100 ffff9d0012abb4c0 syz-executor.4
11654 11654 2 0 10040000 ffff9d0012cc44c0 syz-executor.4
11331 11331 2 0 140 ffff9d0012a52bc0 syz-executor.4
12617 12617 3 1 40 ffff9d00133c01c0 syz-executor.3 tstile
10898 10898 3 1 40 ffff9d0013499140 syz-executor.5 tstile
8847 8847 2 0 140 ffff9d0012add0c0 syz-executor.2
2805 2805 2 0 140 ffff9d0012cd1940 syz-executor.1
449 2953 3 1 180 ffff9d0012a52780 syz-execprog parked
449 1312 2 1 140 ffff9d0013dcdb80 syz-execprog
449 1074 3 1 180 ffff9d0013db9b40 syz-execprog parked
449 1211 3 0 180 ffff9d0012b999c0 syz-execprog parked
449 991 3 0 180 ffff9d0013d21200 syz-execprog wait
449 1241 3 0 180 ffff9d0013d1ca40 syz-execprog wait
449 1246 3 0 180 ffff9d0013d1c600 syz-execprog wait
449 1236 3 0 1c0 ffff9d0013d1c1c0 syz-execprog wait
449 1244 3 1 180 ffff9d0012b99140 syz-execprog parked
449 930 3 1 180 ffff9d001343c700 syz-execprog wait
449 1071 3 0 180 ffff9d001343c2c0 syz-execprog parked
449 829 3 0 180 ffff9d0012a52340 syz-execprog parked
449 942 2 1 140 ffff9d0013468900 syz-execprog
449 449 3 0 180 ffff9d0012b7e100 syz-execprog parked
1233 1233 3 1 180 ffff9d0012b7e540 sshd select
1075 1075 3 0 180 ffff9d00133c0600 getty nanoslp
1224 1224 3 0 180 ffff9d00134b05c0 getty nanoslp
1106 1106 3 0 180 ffff9d00126ea340 getty nanoslp
1151 1151 3 0 1c0 ffff9d0012978ac0 getty ttyraw
1095 1095 3 0 180 ffff9d00133cb200 sshd select
1088 1088 3 0 180 ffff9d0012d86bc0 powerd kqueue
700 700 3 1 180 ffff9d0013448b80 syslogd kqueue
746 746 3 0 180 ffff9d0012c22680 dhcpcd poll
747 747 3 1 180 ffff9d0012cd10c0 dhcpcd poll
742 742 3 0 180 ffff9d0012c59b40 dhcpcd poll
602 602 3 0 180 ffff9d0012c38280 dhcpcd poll
487 487 3 0 180 ffff9d0012dbc900 dhcpcd poll
292 292 3 1 180 ffff9d0012dbc4c0 dhcpcd poll
485 485 3 1 180 ffff9d0012dbc080 dhcpcd poll
1 1 3 1 180 ffff9d00128719c0 init wait
0 673 3 0 200 ffff9d00129a2280 physiod physiod
0 196 3 0 200 ffff9d00129a32c0 pooldrain pooldrain
0 > 195 7 1 240 ffff9d00129a2b00 ioflush
0 194 3 1 200 ffff9d00129a26c0 pgdaemon pgdaemon
0 167 3 0 200 ffff9d0012978680 usb7 usbevt
0 172 3 0 200 ffff9d0012978240 usb6 usbevt
0 170 3 0 200 ffff9d001292da80 usb5 usbevt
0 168 3 0 200 ffff9d001292d640 usb4 usbevt
0 166 3 0 200 ffff9d001292d200 usb3 usbevt
0 165 3 0 200 ffff9d00128e1a40 usb2 usbevt
0 31 3 0 200 ffff9d00128e1600 usb1 usbevt
0 63 3 1 200 ffff9d00128e11c0 usb0 usbevt

0 126 3 1 200 ffff9d001288da00 usbtask-dr usbtsk

0 125 3 1 200 ffff9d001288d5c0 usbtask-hc usbtsk
0 124 3 0 200 ffff9d0010d76b00 swwreboot swwreboot
0 123 2 0 240 ffff9d001288d180 npfgc0
0 122 3 1 200 ffff9d0012871580 rt_free rt_free
0 121 3 1 200 ffff9d0012871140 unpgc unpgc
0 120 2 0 200 ffff9d001286c980 key_timehandler
0 119 3 1 200 ffff9d001286c540 icmp6_wqinput/1 icmp6_wqinput
0 118 3 0 200 ffff9d001286c100 icmp6_wqinput/0 icmp6_wqinput
0 117 2 0 200 ffff9d001271c940 nd6_timer
0 116 3 1 200 ffff9d001271c500 carp6_wqinput/1 carp6_wqinput
0 115 3 0 200 ffff9d001271c0c0 carp6_wqinput/0 carp6_wqinput
0 114 3 1 200 ffff9d001270c900 carp_wqinput/1 carp_wqinput
0 113 3 0 200 ffff9d001270c4c0 carp_wqinput/0 carp_wqinput
0 112 3 1 200 ffff9d001270c080 icmp_wqinput/1 icmp_wqinput
0 111 3 0 200 ffff9d00126eb8c0 icmp_wqinput/0 icmp_wqinput
0 110 2 0 200 ffff9d00126eb040 rt_timer
0 109 3 0 200 ffff9d00126ea780 vmem_rehash vmem_rehash
0 100 3 1 200 ffff9d00126e7300 entbutler entropy
0 99 3 1 200 ffff9d00120bcb40 viomb balloon
0 98 3 1 200 ffff9d00120bc700 vioif0_txrx/1 vioif0_txrx
0 97 3 0 200 ffff9d00120bc2c0 vioif0_txrx/0 vioif0_txrx
0 30 3 0 200 ffff9d0010d766c0 scsibus0 sccomp
0 29 3 0 200 ffff9d0010d76280 pms0 pmsreset
0 28 3 1 200 ffff9d0010cbcac0 xcall/1 xcall
0 27 1 1 200 ffff9d0010cbc680 softser/1
0 26 1 1 200 ffff9d0010cbc240 softclk/1
0 25 1 1 200 ffff9d0010cb9a80 softbio/1
0 24 1 1 200 ffff9d0010cb9640 softnet/1
0 23 1 1 201 ffff9d0010cb9200 idle/1
0 22 3 0 200 ffff9d000fb56a40 lnxsyswq lnxsyswq
0 21 3 0 200 ffff9d000fb56600 lnxubdwq lnxubdwq
0 20 3 0 200 ffff9d000fb561c0 lnxpwrwq lnxpwrwq
0 19 3 0 200 ffff9d000fb55a00 lnxlngwq lnxlngwq
0 18 3 0 200 ffff9d000fb555c0 lnxhipwq lnxhipwq
0 17 3 0 200 ffff9d000fb55180 lnxrcugc lnxrcugc
0 16 3 0 200 ffff9d000fb4e9c0 sysmon smtaskq
0 15 3 0 200 ffff9d000fb4e580 pmfsuspend pmfsuspend
0 14 3 0 200 ffff9d000fb4e140 pmfevent pmfevent
0 13 3 0 200 ffff9d000fb49980 sopendfree sopendfr
0 12 2 0 200 ffff9d000fb49540 ifwdog
0 11 3 0 200 ffff9d000fb49100 iflnkst iflnkst
0 10 3 0 200 ffff9d000fb3c940 nfssilly nfssilly
0 9 3 0 200 ffff9d000fb3c500 vdrain vdrain
0 8 3 1 200 ffff9d000fb3c0c0 modunload mod_unld
0 7 3 0 200 ffff9d000fb33900 xcall/0 xcall
0 6 1 0 200 ffff9d000fb334c0 softser/0
0 5 1 0 200 ffff9d000fb33080 softclk/0
0 4 1 0 200 ffff9d000fb318c0 softbio/0
0 3 1 0 200 ffff9d000fb31480 softnet/0
0 2 1 0 201 ffff9d000fb31040 idle/0
0 0 3 0 200 ffffffff8334b900 swapper uvm
[Locks tracked through LWPs]

****** LWP 13493.12592 (syz-executor.2) @ 0xffff9d0012cfa180, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:procinit+0x5c sys/kern/kern_proc.c:386)
lock address : netbsd:proc_lock
type : sleep/adaptive
initialized : netbsd:procinit+0x5c
shared holds : 0 exclusive: 1

shares wanted: 0 exclusive: 2

relevant cpu : 1 last held: 0

relevant lwp : 0xffff9d0012cfa180 last held: 0xffff9d0012abb4c0
last locked* : netbsd:ttioctl+0x11d9
unlocked : netbsd:lwp_create+0xae0
owner field : 0xffff9d0012abb4c0 wait/spin: 1/0
Turnstile:
=> 0 waiting readers:
=> 3 waiting writers: 0xffff9d0013499140 0xffff9d00133c01c0 0xffff9d0012cfa180

****** LWP 11654.11774 (syz-executor.4) @ 0xffff9d0012abb4c0, l_stat=7

*** Locks held:

* Lock 0 (initialized at netbsd:procinit+0x5c sys/kern/kern_proc.c:386)
lock address : netbsd:proc_lock
type : sleep/adaptive
initialized : netbsd:procinit+0x5c
shared holds : 0 exclusive: 1

shares wanted: 0 exclusive: 2

relevant cpu : 0 last held: 0

relevant lwp : 0xffff9d0012abb4c0 last held: 0xffff9d0012abb4c0
last locked* : netbsd:ttioctl+0x11d9
unlocked : netbsd:lwp_create+0xae0
owner field : 0xffff9d0012abb4c0 wait/spin: 1/0
Turnstile:
=> 0 waiting readers:
=> 3 waiting writers: 0xffff9d0013499140 0xffff9d00133c01c0 0xffff9d0012cfa180

*** Locks wanted: none

****** LWP 10898.10898 (syz-executor.5) @ 0xffff9d0013499140, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:procinit+0x5c sys/kern/kern_proc.c:386)
lock address : netbsd:proc_lock
type : sleep/adaptive
initialized : netbsd:procinit+0x5c
shared holds : 0 exclusive: 1

shares wanted: 0 exclusive: 2

relevant cpu : 1 last held: 0

relevant lwp : 0xffff9d0013499140 last held: 0xffff9d0012abb4c0
last locked* : netbsd:ttioctl+0x11d9
unlocked : netbsd:lwp_create+0xae0
owner field : 0xffff9d0012abb4c0 wait/spin: 1/0
Turnstile:
=> 0 waiting readers:
=> 3 waiting writers: 0xffff9d0013499140 0xffff9d00133c01c0 0xffff9d0012cfa180

****** LWP 747.747 (dhcpcd) @ 0xffff9d0012cd10c0, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:module_hook_init+0x1c sys/kern/kern_module_hook.c:132)
lock address : netbsd:module_hook
type : sleep/adaptive
initialized : netbsd:module_hook_init+0x1c
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 0

relevant lwp : 0xffff9d0012cd10c0 last held: 000000000000000000

last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 742.742 (dhcpcd) @ 0xffff9d0012c59b40, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:module_hook_init+0x1c sys/kern/kern_module_hook.c:132)
lock address : netbsd:module_hook
type : sleep/adaptive
initialized : netbsd:module_hook_init+0x1c
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0

relevant lwp : 0xffff9d0012c59b40 last held: 000000000000000000

last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 292.292 (dhcpcd) @ 0xffff9d0012dbc4c0, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:module_hook_init+0x1c sys/kern/kern_module_hook.c:132)
lock address : netbsd:module_hook
type : sleep/adaptive
initialized : netbsd:module_hook_init+0x1c
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 0

relevant lwp : 0xffff9d0012dbc4c0 last held: 000000000000000000

last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 485.485 (dhcpcd) @ 0xffff9d0012dbc080, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:module_hook_init+0x1c sys/kern/kern_module_hook.c:132)
lock address : netbsd:module_hook
type : sleep/adaptive
initialized : netbsd:module_hook_init+0x1c
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 0

relevant lwp : 0xffff9d0012dbc080 last held: 000000000000000000

last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 0.11 (iflnkst) @ 0xffff9d000fb49100, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:module_hook_init+0x1c sys/kern/kern_module_hook.c:132)
lock address : netbsd:module_hook
type : sleep/adaptive
initialized : netbsd:module_hook_init+0x1c
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0

relevant lwp : 0xffff9d000fb49100 last held: 000000000000000000

last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 0.5 (softclk/0) @ 0xffff9d000fb33080, l_stat=1

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:module_hook_init+0x1c sys/kern/kern_module_hook.c:132)
lock address : netbsd:module_hook
type : sleep/adaptive
initialized : netbsd:module_hook_init+0x1c
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0

relevant lwp : 0xffff9d000fb33080 last held: 000000000000000000

last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 0.0 (swapper) @ 0xffffffff8334b900, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:module_hook_init+0x1c sys/kern/kern_module_hook.c:132)
lock address : netbsd:module_hook
type : sleep/adaptive
initialized : netbsd:module_hook_init+0x1c
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0

relevant lwp : 0xffffffff8334b900 last held: 000000000000000000

last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

[Locks tracked through CPUs]

******* Locks held on cpu0:

* Lock 0 (initialized at netbsd:main+0x12e sys/kern/init_main.c:303)
lock address : netbsd:kernel_lock
type : spin
initialized : netbsd:main+0x12e
shared holds : 0 exclusive: 1

shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0

relevant lwp : 0xffff9d0012abb4c0 last held: 0xffff9d0012abb4c0
last locked* : netbsd:cdev_ioctl+0x218
unlocked : netbsd:cdev_open+0x421

curcpu holds : 1 wanted by: 000000000000000000

* Lock 1 (initialized at netbsd:kprintf_init+0x61 sys/kern/subr_prf.c:156)

lock address : netbsd:kprintf_mtx
type : spin
initialized : netbsd:kprintf_init+0x61
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0

relevant cpu : 0 last held: 0

relevant lwp : 0xffff9d0012abb4c0 last held: 0xffff9d0012abb4c0

last locked* : netbsd:kprintf_lock+0x33
unlocked : netbsd:kprintf_unlock+0x53
owner field : 0x0000000000000800 wait/spin: 0/1

PAGE FLAG PQ UOBJECT UANON

0xffff9d0000017180 0041 00000000 0x0 0x0
0xffff9d0000017200 0041 00000000 0x0 0x0
0xffff9d0000017280 0041 00000000 0x0 0x0
0xffff9d0000017300 0041 00000000 0x0 0x0
0xffff9d0000017380 0041 00000000 0x0 0x0
0xffff9d0000017400 0041 00000000 0x0 0x0
0xffff9d0000017480 0041 00000000 0x0 0x0
0xffff9d0000017500 0041 00000000 0x0 0x0
0xffff9d0000017580 0041 00000000 0x0 0x0

0xffff9d0000017600 0041 00000000 0x0 0x0

0xffff9d0000017680 0041 00000000 0x0 0x0

0xffff9d0000017700 0041 00000000 0x0 0x0

0xffff9d0000017780 0041 00000000 0x0 0x0

0xffff9d0000017800 0041 00000000 0x0 0x0

0xffff9d0000017880 0041 00000000 0x0 0x0

0xffff9d0000017900 0041 00000000 0x0 0x0

0xffff9d0000017980 0041 00000000 0x0 0x0
0xffff9d0000017a00 0041 00000000 0x0 0x0
0xffff9d0000017a80 0041 00000000 0x0 0x0
0xffff9d0000017b00 0041 00000000 0x0 0x0
0xffff9d0000017b80 0041 00000000 0x0 0x0
0xffff9d0000017c00 0041 00000000 0x0 0x0
0xffff9d0000017c80 0041 00000000 0x0 0x0
0xffff9d0000017d00 0041 00000000 0x0 0x0
0xffff9d0000017d80 0041 00000000 0x0 0x0
0xffff9d0000017e00 0041 00000000 0x0 0x0
0xffff9d0000017e80 0041 00000000 0x0 0x0

0xffff9d0000017f00 0041 00000000 0x0 0x0

0xffff9d0000017f80 0041 00000000 0x0 0x0
0xffff9d0000018000 0041 00000000 0x0 0x0
0xffff9d0000018080 0041 00000000 0x0 0x0
0xffff9d0000018100 0041 00000000 0x0 0x0
0xffff9d0000018180 0041 00000000 0x0 0x0
0xffff9d0000018200 0041 00000000 0x0 0x0
0xffff9d0000018280 0041 00000000 0x0 0x0
0xffff9d0000018300 0041 00000000 0x0 0x0
0xffff9d0000018380 0041 00000000 0x0 0x0
0xffff9d0000018400 0041 00000000 0x0 0x0
0xffff9d0000018480 0041 00000000 0x0 0x0

0xffff9d0000018500 0041 00000000 0x0 0x0

0xffff9d0000018580 0041 00000000 0x0 0x0

0xffff9d0000018600 0041 00000000 0x0 0x0

0xffff9d0000018680 0041 00000000 0x0 0x0

0xffff9d0000018700 0041 00000000 0x0 0x0

0xffff9d0000018780 0041 00000000 0x0 0x0

0xffff9d0000018800 0041 00000000 0x0 0x0

0xffff9d0000018880 0041 00000000 0x0 0x0

0xffff9d0000018900 0041 00000000 0x0 0x0

0xffff9d0000018980 0041 00000000 0x0 0x0
0xffff9d0000018a00 0041 00000000 0x0 0x0
0xffff9d0000018a80 0041 00000000 0x0 0x0
0xffff9d0000018b00 0041 00000000 0x0 0x0
0xffff9d0000018b80 0041 00000000 0x0 0x0
0xffff9d0000018c00 0041 00000000 0x0 0x0
0xffff9d0000018c80 0041 00000000 0x0 0x0
0xffff9d0000018d00 0041 00000000 0x0 0x0
0xffff9d0000018d80 0041 00000000 0x0 0x0
0xffff9d0000018e00 0041 00000000 0x0 0x0
0xffff9d0000018e80 0041 00000000 0x0 0x0

0xffff9d0000018f00 0041 00000000 0x0 0x0

0xffff9d0000018f80 0041 00000000 0x0 0x0
0xffff9d0000019000 0041 00000000 0x0 0x0
0xffff9d0000019080 0041 00000000 0x0 0x0
0xffff9d0000019100 0041 00000000 0x0 0x0
0xffff9d0000019180 0041 00000000 0x0 0x0
0xffff9d0000019200 0041 00000000 0x0 0x0
0xffff9d0000019280 0041 00000000 0x0 0x0
0xffff9d0000019300 0041 00000000 0x0 0x0
0xffff9d0000019380 0041 00000000 0x0 0x0
0xffff9d0000019400 0041 00000000 0x0 0x0
0xffff9d0000019480 0041 00000000 0x0 0x0

0xffff9d0000019500 0041 00000000 0x0 0x0

0xffff9d0000019580 0041 00000000 0x0 0x0

0xffff9d0000019600 0041 00000000 0x0 0x0

0xffff9d0000019680 0041 00000000 0x0 0x0

0xffff9d0000019700 0041 00000000 0x0 0x0

0xffff9d0000019780 0041 00000000 0x0 0x0

0xffff9d0000019800 0041 00000000 0x0 0x0

0xffff9d0000019880 0041 00000000 0x0 0x0

0xffff9d0000019900 0041 00000000 0x0 0x0

0xffff9d0000019980 0041 00000000 0x0 0x0
0xffff9d0000019a00 0041 00000000 0x0 0x0
0xffff9d0000019a80 0041 00000000 0x0 0x0
0xffff9d0000019b00 0041 00000000 0x0 0x0
0xffff9d0000019b80 0041 00000000 0x0 0x0
0xffff9d0000019c00 0041 00000000 0x0 0x0
0xffff9d0000019c80 0041 00000000 0x0 0x0
0xffff9d0000019d00 0041 00000000 0x0 0x0
0xffff9d0000019d80 0041 00000000 0x0 0x0
0xffff9d0000019e00 0041 00000000 0x0 0x0
0xffff9d0000019e80 0041 00000000 0x0 0x0

0xffff9d0000019f00 0041 00000000 0x0 0x0

0xffff9d0000019f80 0041 00000000 0x0 0x0
0xffff9d000001a000 0041 00000000 0x0 0x0
0xffff9d000001a080 0041 00000000 0x0 0x0
0xffff9d000001a100 0041 00000000 0x0 0x0
0xffff9d000001a180 0041 00000000 0x0 0x0
0xffff9d000001a200 0041 00000000 0x0 0x0
0xffff9d000001a280 0041 00000000 0x0 0x0
0xffff9d000001a300 0041 00000000 0x0 0x0
0xffff9d000001a380 0041 00000000 0x0 0x0
0xffff9d000001a400 0041 00000000 0x0 0x0
0xffff9d000001a480 0041 00000000 0x0 0x0

0xffff9d000001a500 0041 00000000 0x0 0x0

0xffff9d000001a580 0041 00000000 0x0 0x0

0xffff9d000001a600 0041 00000000 0x0 0x0

0xffff9d000001a680 0041 00000000 0x0 0x0

0xffff9d000001a700 0041 00000000 0x0 0x0

0xffff9d000001a780 0041 00000000 0x0 0x0

0xffff9d000001a800 0041 00000000 0x0 0x0

0xffff9d000001a880 0041 00000000 0x0 0x0

0xffff9d000001a900 0041 00000000 0x0 0x0

0xffff9d000001a980 0041 00000000 0x0 0x0
0xffff9d000001aa00 0041 00000000 0x0 0x0
0xffff9d000001aa80 0041 00000000 0x0 0x0
0xffff9d000001ab00 0041 00000000 0x0 0x0
0xffff9d000001ab80 0041 00000000 0x0 0x0
0xffff9d000001ac00 0041 00000000 0x0 0x0
0xffff9d000001ac80 0041 00000000 0x0 0x0
0xffff9d000001ad00 0041 00000000 0x0 0x0
0xffff9d000001ad80 0041 00000000 0x0 0x0
0xffff9d000001ae00 0041 00000000 0x0 0x0
0xffff9d000001ae80 0041 00000000 0x0 0x0

0xffff9d000001af00 0041 00000000 0x0 0x0

0xffff9d000001af80 0041 00000000 0x0 0x0
0xffff9d000001b000 0041 00000000 0x0 0x0
0xffff9d000001b080 0041 00000000 0x0 0x0
0xffff9d000001b100 0041 00000000 0x0 0x0
0xffff9d000001b180 0041 00000000 0x0 0x0
0xffff9d000001b200 0041 00000000 0x0 0x0
0xffff9d000001b280 0041 00000000 0x0 0x0
0xffff9d000001b300 0041 00000000 0x0 0x0
0xffff9d000001b380 0041 00000000 0x0 0x0
0xffff9d000001b400 0041 00000000 0x0 0x0
0xffff9d000001b480 0041 00000000 0x0 0x0

0xffff9d000001b500 0041 00000000 0x0 0x0

0xffff9d000001b580 0041 00000000 0x0 0x0

0xffff9d000001b600 0041 00000000 0x0 0x0

0xffff9d000001b680 0041 00000000 0x0 0x0

0xffff9d000001b700 0041 00000000 0x0 0x0

0xffff9d000001b780 0041 00000000 0x0 0x0

0xffff9d000001b800 0041 00000000 0x0 0x0

0xffff9d000001b880 0041 00000000 0x0 0x0

0xffff9d000001b900 0041 00000000 0x0 0x0

0xffff9d000001b980 0041 00000000 0x0 0x0
0xffff9d000001ba00 0041 00000000 0x0 0x0
0xffff9d000001ba80 0041 00000000 0x0 0x0
0xffff9d000001bb00 0041 00000000 0x0 0x0
0xffff9d000001bb80 0001 00000000 0x0 0x0
0xffff9d000001bc00 0001 00000000 0x0 0x0
0xffff9d000001bc80 0001 00000000 0x0 0x0
0xffff9d000001bd00 0001 00000000 0x0 0x0
0xffff9d000001bd80 0001 00000000 0x0 0x0
0xffff9d000001be00 0001 00000000 0x0 0x0
0xffff9d000001be80 0001 00000000 0x0 0x0
0xffff9d000001bf00 0001 00000000 0x0 0x0
0xffff9d000001bf80 0001 00000000 0x0 0x0
0xffff9d000001c000 0001 00000000 0x0 0x0
0xffff9d000001c080 0001 00000000 0x0 0x0
0xffff9d000001c100 0001 00000000 0x0 0x0
0xffff9d000001c180 0001 00000000 0x0 0x0
0xffff9d000001c200 0001 00000000 0x0 0x0
0xffff9d000001c280 0001 00000000 0x0 0x0
0xffff9d000001c300 0001 00000000 0x0 0x0
0xffff9d000001c380 0001 00000000 0x0 0x0
0xffff9d000001c400 0001 00000000 0x0 0x0
0xffff9d000001c480 0001 00000000 0x0 0x0

0xffff9d000001c500 0001 00000000 0x0 0x0

0xffff9d000001c580 0001 00000000 0x0 0x0

0xffff9d000001c600 0001 00000000 0x0 0x0

0xffff9d000001c680 0001 00000000 0x0 0x0

0xffff9d000001c700 0001 00000000 0x0 0x0

0xffff9d000001c780 0001 00000000 0x0 0x0

0xffff9d000001c800 0001 00000000 0x0 0x0

0xffff9d000001c880 0001 00000000 0x0 0x0

0xffff9d000001c900 0001 00000000 0x0 0x0

0xffff9d000001c980 0001 00000000 0x0 0x0
0xffff9d000001ca00 0001 00000000 0x0 0x0
0xffff9d000001ca80 0001 00000000 0x0 0x0
0xffff9d000001cb00 0001 00000000 0x0 0x0
0xffff9d000001cb80 0001 00000000 0x0 0x0
0xffff9d000001cc00 0001 00000000 0x0 0x0
0xffff9d000001cc80 0001 00000000 0x0 0x0
0xffff9d000001cd00 0001 00000000 0x0 0x0
0xffff9d000001cd80 0001 00000000 0x0 0x0
0xffff9d000001ce00 0001 00000000 0x0 0x0
0xffff9d000001ce80 0001 00000000 0x0 0x0

0xffff9d000001cf00 0001 00000000 0x0 0x0

0xffff9d000001cf80 0001 00000000 0x0 0x0
0xffff9d000001d000 0001 00000000 0x0 0x0
0xffff9d000001d080 0001 00000000 0x0 0x0
0xffff9d000001d100 0001 00000000 0x0 0x0
0xffff9d000001d180 0001 00000000 0x0 0x0
0xffff9d000001d200 0001 00000000 0x0 0x0
0xffff9d000001d280 0001 00000000 0x0 0x0
0xffff9d000001d300 0001 00000000 0x0 0x0
0xffff9d000001d380 0001 00000000 0x0 0x0
0xffff9d000001d400 0001 00000000 0x0 0x0
0xffff9d000001d480 0001 00000000 0x0 0x0

0xffff9d000001d500 0001 00000000 0x0 0x0

0xffff9d000001d580 0001 00000000 0x0 0x0

0xffff9d000001d600 0001 00000000 0x0 0x0

0xffff9d000001d680 0001 00000000 0x0 0x0

0xffff9d000001d700 0001 00000000 0x0 0x0

0xffff9d000001d780 0001 00000000 0x0 0x0

0xffff9d000001d800 0001 00000000 0x0 0x0

0xffff9d000001d880 0001 00000000 0x0 0x0

0xffff9d000001d900 0001 00000000 0x0 0x0

0xffff9d000001d980 0001 00000000 0x0 0x0
0xffff9d000001da00 0001 00000000 0x0 0x0
0xffff9d000001da80 0001 00000000 0x0 0x0
0xffff9d000001db00 0001 00000000 0x0 0x0
0xffff9d000001db80 0001 00000000 0x0 0x0
0xffff9d000001dc00 0001 00000000 0x0 0x0
0xffff9d000001dc80 0001 00000000 0x0 0x0
0xffff9d000001dd00 0001 00000000 0x0 0x0
0xffff9d000001dd80 0001 00000000 0x0 0x0
0xffff9d000001de00 0001 00000000 0x0 0x0
0xffff9d000001de80 0001 00000000 0x0 0x0

0xffff9d000001df00 0001 00000000 0x0 0x0

0xffff9d000001df80 0001 00000000 0x0 0x0
0xffff9d000001e000 0001 00000000 0x0 0x0
0xffff9d000001e080 0001 00000000 0x0 0x0
0xffff9d000001e100 0001 00000000 0x0 0x0
0xffff9d000001e180 0001 00000000 0x0 0x0
0xffff9d000001e200 0001 00000000 0x0 0x0
0xffff9d000001e280 0001 00000000 0x0 0x0
0xffff9d000001e300 0001 00000000 0x0 0x0
0xffff9d000001e380 0001 00000000 0x0 0x0
0xffff9d000001e400 0001 00000000 0x0 0x0
0xffff9d000001e480 0001 00000000 0x0 0x0

0xffff9d000001e500 0001 00000000 0x0 0x0

0xffff9d000001e580 0001 00000000 0x0 0x0

0xffff9d000001e600 0001 00000000 0x0 0x0

0xffff9d000001e680 0001 00000000 0x0 0x0

0xffff9d000001e700 0001 00000000 0x0 0x0

0xffff9d000001e780 0001 00000000 0x0 0x0

0xffff9d000001e800 0001 00000000 0x0 0x0

0xffff9d000001e880 0001 00000000 0x0 0x0

0xffff9d000001e900 0001 00000000 0x0 0x0

0xffff9d000001e980 0001 00000000 0x0 0x0
0xffff9d000001ea00 0001 00000000 0x0 0x0
0xffff9d000001ea80 0001 00000000 0x0 0x0
0xffff9d000001eb00 0001 00000000 0x0 0x0
0xffff9d000001eb80 0001 00000000 0x0 0x0
0xffff9d000001ec00 0001 00000000 0x0 0x0
0xffff9d000001ec80 0001 00000000 0x0 0x0
0xffff9d000001ed00 0001 00000000 0x0 0x0
0xffff9d000001ed80 0001 00000000 0x0 0x0
0xffff9d000001ee00 0001 00000000 0x0 0x0
0xffff9d000001ee80 0001 00000000 0x0 0x0

0xffff9d000001ef00 0001 00000000 0x0 0x0

0xffff9d000001ef80 0001 00000000 0x0 0x0
0xffff9d000001f000 0001 00000000 0x0 0x0
0xffff9d000001f080 0001 00000000 0x0 0x0
0xffff9d000001f100 0001 00000000 0x0 0x0
0xffff9d000001f180 0001 00000000 0x0 0x0
0xffff9d000001f200 0001 00000000 0x0 0x0
0xffff9d000001f280 0001 00000000 0x0 0x0
0xffff9d000001f300 0001 00000000 0x0 0x0
0xffff9d000001f380 0001 00000000 0x0 0x0
0xffff9d000001f400 0001 00000000 0x0 0x0
0xffff9d000001f480 0001 00000000 0x0 0x0

0xffff9d000001f500 0001 00000000 0x0 0x0

0xffff9d000001f580 0001 00000000 0x0 0x0

0xffff9d000001f600 0001 00000000 0x0 0x0

0xffff9d000001f680 0001 00000000 0x0 0x0

0xffff9d000001f700 0001 00000000 0x0 0x0

0xffff9d000001f780 0001 00000000 0x0 0x0

0xffff9d000001f800 0001 00000000 0x0 0x0

0xffff9d000001f880 0001 00000000 0x0 0x0

0xffff9d000001f900 0001 00000000 0x0 0x0

0xffff9d000001f980 0001 00000000 0x0 0x0
0xffff9d000001fa00 0001 00000000 0x0 0x0
0xffff9d000001fa80 0001 00000000 0x0 0x0
0xffff9d000001fb00 0001 00000000 0x0 0x0
0xffff9d000001fb80 0001 00000000 0x0 0x0
0xffff9d000001fc00 0001 00000000 0x0 0x0
0xffff9d000001fc80 0001 00000000 0x0 0x0
0xffff9d000001fd00 0001 00000000 0x0 0x0
0xffff9d000001fd80 0001 00000000 0x0 0x0
0xffff9d000001fe00 0001 00000000 0x0 0x0
0xffff9d000001fe80 0001 00000000 0x0 0x0

0xffff9d000001ff00 0001 00000000 0x0 0x0

0xffff9d000001ff80 0001 00000000 0x0 0x0
0xffff9d0000020000 0001 00000000 0x0 0x0
0xffff9d0000020080 0001 00000000 0x0 0x0
0xffff9d0000020100 0001 00000000 0x0 0x0
0xffff9d0000020180 0001 00000000 0x0 0x0
0xffff9d0000020200 0001 00000000 0x0 0x0
0xffff9d0000020280 0001 00000000 0x0 0x0
0xffff9d0000020300 0001 00000000 0x0 0x0
0xffff9d0000020380 0001 00000000 0x0 0x0
0xffff9d0000020400 0001 00000000 0x0 0x0
0xffff9d0000020480 0001 00000000 0x0 0x0

0xffff9d0000020500 0001 00000000 0x0 0x0

0xffff9d0000020580 0001 00000000 0x0 0x0

0xffff9d0000020600 0001 00000000 0x0 0x0

0xffff9d0000020680 0001 00000000 0x0 0x0

0xffff9d0000020700 0001 00000000 0x0 0x0

0xffff9d0000020780 0001 00000000 0x0 0x0

0xffff9d0000020800 0001 00000000 0x0 0x0

0xffff9d0000020880 0001 00000000 0x0 0x0

0xffff9d0000020900 0001 00000000 0x0 0x0

0xffff9d0000020980 0001 00000000 0x0 0x0
0xffff9d0000020a00 0001 00000000 0x0 0x0
0xffff9d0000020a80 0001 00000000 0x0 0x0
0xffff9d0000020b00 0001 00000000 0x0 0x0
0xffff9d0000020b80 0001 00000000 0x0 0x0
0xffff9d0000020c00 0001 00000000 0x0 0x0
0xffff9d0000020c80 0001 00000000 0x0 0x0
0xffff9d0000020d00 0001 00000000 0x0 0x0
0xffff9d0000020d80 0001 00000000 0x0 0x0
0xffff9d0000020e00 0001 00000000 0x0 0x0
0xffff9d0000020e80 0001 00000000 0x0 0x0

0xffff9d0000020f00 0001 00000000 0x0 0x0

0xffff9d0000020f80 0001 00000000 0x0 0x0
0xffff9d0000021000 0001 00000000 0x0 0x0

0xffff9d0000021080 0001 00000000 0x0 0x0

0xffff9d0000021100 0001 00000000 0x0 0x0

0xffff9d0000021180 0001 00000000 0x0 0x0

0xffff9d0000021200 0001 00000000 0x0 0x0

0xffff9d0000021280 0001 00000000 0x0 0x0

0xffff9d0000021300 0001 00000000 0x0 0x0

0xffff9d0000021380 0001 00000000 0x0 0x0

0xffff9d0000021400 0001 00000000 0x0 0x0

0xffff9d0000021480 0001 00000000 0x0 0x0

0xffff9d0000021500 0001 00000000 0x0 0x0

0xffff9d0000021580 0001 00000000 0x0 0x0

0xffff9d0000021600 0001 00000000 0x0 0x0

0xffff9d0000021680 0001 00000000 0x0 0x0

0xffff9d0000021700 0001 00000000 0x0 0x0

0xffff9d0000021780 0001 00000000 0x0 0x0

0xffff9d0000021800 0001 00000000 0x0 0x0

0xffff9d0000021880 0001 00000000 0x0 0x0

0xffff9d0000021900 0001 00000000 0x0 0x0

0xffff9d0000021980 0001 00000000 0x0 0x0
0xffff9d0000021a00 0001 00000000 0x0 0x0

0xffff9d0000021a80 0001 00000000 0x0 0x0

0xffff9d0000021b00 0001 00000000 0x0 0x0

0xffff9d0000021b80 0001 00000000 0x0 0x0

0xffff9d0000021c00 0001 00000000 0x0 0x0

0xffff9d0000021c80 0001 00000000 0x0 0x0

0xffff9d0000021d00 0001 00000000 0x0 0x0

0xffff9d0000021d80 0001 00000000 0x0 0x0

0xffff9d0000021e00 0001 00000000 0x0 0x0
0xffff9d0000021e80 0001 00000000 0x0 0x0

0xffff9d0000021f00 0001 00000000 0x0 0x0

0xffff9d0000021f80 0001 00000000 0x0 0x0
0xffff9d0000022000 0001 00000000 0x0 0x0

0xffff9d0000022080 0001 00000000 0x0 0x0

0xffff9d0000022100 0001 00000000 0x0 0x0

0xffff9d0000022180 0001 00000000 0x0 0x0

0xffff9d0000022200 0001 00000000 0x0 0x0

0xffff9d0000022280 0001 00000000 0x0 0x0

0xffff9d0000022300 0001 00000000 0x0 0x0

0xffff9d0000022380 0001 00000000 0x0 0x0

0xffff9d0000022400 0001 00000000 0x0 0x0

0xffff9d0000022480 0001 00000000 0x0 0x0

0xffff9d0000022500 0001 00000000 0x0 0x0

0xffff9d0000022580 0001 00000000 0x0 0x0

0xffff9d0000022600 0001 00000000 0x0 0x0

0xffff9d0000022680 0001 00000000 0x0 0x0

0xffff9d0000022700 0001 00000000 0x0 0x0

0xffff9d0000022780 0001 00000000 0x0 0x0

0xffff9d0000022800 0001 00000000 0x0 0x0

0xffff9d0000022880 0001 00000000 0x0 0x0

0xffff9d0000022900 0001 00000000 0x0 0x0

0xffff9d0000022980 0001 00000000 0x0 0x0
0xffff9d0000022a00 0001 00000000 0x0 0x0

0xffff9d0000022a80 0001 00000000 0x0 0x0

0xffff9d0000022b00 0001 00000000 0x0 0x0

0xffff9d0000022b80 0001 00000000 0x0 0x0

0xffff9d0000022c00 0001 00000000 0x0 0x0

0xffff9d0000022c80 0001 00000000 0x0 0x0

0xffff9d0000022d00 0001 00000000 0x0 0x0

0xffff9d0000022d80 0001 00000000 0x0 0x0

0xffff9d0000022e00 0001 00000000 0x0 0x0
0xffff9d0000022e80 0001 00000000 0x0 0x0

0xffff9d0000022f00 0001 00000000 0x0 0x0

0xffff9d0000022f80 0001 00000000 0x0 0x0
0xffff9d0000023000 0001 00000000 0x0 0x0

0xffff9d0000023080 0001 00000000 0x0 0x0

0xffff9d0000023100 0001 00000000 0x0 0x0

0xffff9d0000023180 0001 00000000 0x0 0x0

0xffff9d0000023200 0001 00000000 0x0 0x0

0xffff9d0000023280 0001 00000000 0x0 0x0

0xffff9d0000023300 0001 00000000 0x0 0x0

0xffff9d0000023380 0001 00000000 0x0 0x0

0xffff9d0000023400 0001 00000000 0x0 0x0

0xffff9d0000023480 0001 00000000 0x0 0x0

0xffff9d0000023500 0001 00000000 0x0 0x0

0xffff9d0000023580 0001 00000000 0x0 0x0

0xffff9d0000023600 0001 00000000 0x0 0x0

0xffff9d0000023680 0001 00000000 0x0 0x0

0xffff9d0000023700 0001 00000000 0x0 0x0

0xffff9d0000023780 0001 00000000 0x0 0x0

0xffff9d0000023800 0001 00000000 0x0 0x0

0xffff9d0000023880 0001 00000000 0x0 0x0

0xffff9d0000023900 0001 00000000 0x0 0x0

0xffff9d0000023980 0001 00000000 0x0 0x0
0xffff9d0000023a00 0001 00000000 0x0 0x0

0xffff9d0000023a80 0001 00000000 0x0 0x0

0xffff9d0000023b00 0001 00000000 0x0 0x0

0xffff9d0000023b80 0001 00000000 0x0 0x0

0xffff9d0000023c00 0001 00000000 0x0 0x0

0xffff9d0000023c80 0001 00000000 0x0 0x0

0xffff9d0000023d00 0001 00000000 0x0 0x0

0xffff9d0000023d80 0001 00000000 0x0 0x0

0xffff9d0000023e00 0001 00000000 0x0 0x0
0xffff9d0000023e80 0001 00000000 0x0 0x0

0xffff9d0000023f00 0001 00000000 0x0 0x0

0xffff9d0000023f80 0001 00000000 0x0 0x0
0xffff9d0000024000 0001 00000000 0x0 0x0
0xffff9d0000024080 0001 00000000 0x0 0x0
0xffff9d0000024100 0001 00000000 0x0 0x0
0xffff9d0000024180 0001 00000000 0x0 0x0
0xffff9d0000024200 0001 00000000 0x0 0x0
0xffff9d0000024280 0001 00000000 0x0 0x0
0xffff9d0000024300 0001 00000000 0x0 0x0
0xffff9d0000024380 0001 00000000 0x0 0x0
0xffff9d0000024400 0001 00000000 0x0 0x0
0xffff9d0000024480 0001 00000000 0x0 0x0

0xffff9d0000024500 0001 00000000 0x0 0x0

0xffff9d0000024580 0001 00000000 0x0 0x0

0xffff9d0000024600 0001 00000000 0x0 0x0

0xffff9d0000024680 0001 00000000 0x0 0x0

0xffff9d0000024700 0001 00000000 0x0 0x0

0xffff9d0000024780 0001 00000000 0x0 0x0

0xffff9d0000024800 0001 00000000 0x0 0x0

0xffff9d0000024880 0001 00000000 0x0 0x0

0xffff9d0000024900 0001 00000000 0x0 0x0

0xffff9d0000024980 0001 00000000 0x0 0x0
0xffff9d0000024a00 0001 00000000 0x0 0x0
0xffff9d0000024a80 0001 00000000 0x0 0x0
0xffff9d0000024b00 0001 00000000 0x0 0x0
0xffff9d0000024b80 0001 00000000 0x0 0x0
0xffff9d0000024c00 0001 00000000 0x0 0x0
0xffff9d0000024c80 0001 00000000 0x0 0x0
0xffff9d0000024d00 0001 00000000 0x0 0x0
0xffff9d0000024d80 0001 00000000 0x0 0x0
0xffff9d0000024e00 0001 00000000 0x0 0x0
0xffff9d0000024e80 0001 00000000 0x0 0x0

0xffff9d0000024f00 0001 00000000 0x0 0x0

0xffff9d0000024f80 0001 00000000 0x0 0x0
0xffff9d0000025000 0001 00000000 0x0 0x0
0xffff9d0000025080 0001 00000000 0x0 0x0
0xffff9d0000025100 0001 00000000 0x0 0x0
0xffff9d0000025180 0001 00000000 0x0 0x0
0xffff9d0000025200 0001 00000000 0x0 0x0
0xffff9d0000025280 0001 00000000 0x0 0x0
0xffff9d0000025300 0001 00000000 0x0 0x0
0xffff9d0000025380 0001 00000000 0x0 0x0
0xffff9d0000025400 0001 00000000 0x0 0x0
0xffff9d0000025480 0001 00000000 0x0 0x0

0xffff9d0000025500 0001 00000000 0x0 0x0

0xffff9d0000025580 0001 00000000 0x0 0x0

0xffff9d0000025600 0001 00000000 0x0 0x0

0xffff9d0000025680 0001 00000000 0x0 0x0

0xffff9d0000025700 0001 00000000 0x0 0x0

0xffff9d0000025780 0001 00000000 0x0 0x0

0xffff9d0000025800 0001 00000000 0x0 0x0

0xffff9d0000025880 0001 00000000 0x0 0x0

0xffff9d0000025900 0001 00000000 0x0 0x0

0xffff9d0000025980 0001 00000000 0x0 0x0
0xffff9d0000025a00 0001 00000000 0x0 0x0
0xffff9d0000025a80 0001 00000000 0x0 0x0
0xffff9d0000025b00 0001 00000000 0x0 0x0
0xffff9d0000025b80 0001 00000000 0x0 0x0
0xffff9d0000025c00 0001 00000000 0x0 0x0
0xffff9d0000025c80 0001 00000000 0x0 0x0
0xffff9d0000025d00 0001 00000000 0x0 0x0
0xffff9d0000025d80 0001 00000000 0x0 0x0
0xffff9d0000025e00 0001 00000000 0x0 0x0
0xffff9d0000025e80 0001 00000000 0x0 0x0

0xffff9d0000025f00 0001 00000000 0x0 0x0

0xffff9d0000025f80 0001 00000000 0x0 0x0
0xffff9d0000026000 0001 00000000 0x0 0x0
0xffff9d0000026080 0001 00000000 0x0 0x0
0xffff9d0000026100 0001 00000000 0x0 0x0
0xffff9d0000026180 0001 00000000 0x0 0x0
0xffff9d0000026200 0001 00000000 0x0 0x0
0xffff9d0000026280 0001 00000000 0x0 0x0
0xffff9d0000026300 0001 00000000 0x0 0x0
0xffff9d0000026380 0001 00000000 0x0 0x0
0xffff9d0000026400 0001 00000000 0x0 0x0
0xffff9d0000026480 0001 00000000 0x0 0x0

0xffff9d0000026500 0001 00000000 0x0 0x0

0xffff9d0000026580 0001 00000000 0x0 0x0

0xffff9d0000026600 0001 00000000 0x0 0x0

0xffff9d0000026680 0001 00000000 0x0 0x0

0xffff9d0000026700 0001 00000000 0x0 0x0

0xffff9d0000026780 0001 00000000 0x0 0x0

0xffff9d0000026800 0001 00000000 0x0 0x0

0xffff9d0000026880 0001 00000000 0x0 0x0

0xffff9d0000026900 0001 00000000 0x0 0x0

0xffff9d0000026980 0001 00000000 0x0 0x0
0xffff9d0000026a00 0001 00000000 0x0 0x0
0xffff9d0000026a80 0001 00000000 0x0 0x0
0xffff9d0000026b00 0001 00000000 0x0 0x0
0xffff9d0000026b80 0001 00000000 0x0 0x0
0xffff9d0000026c00 0001 00000000 0x0 0x0
0xffff9d0000026c80 0001 00000000 0x0 0x0
0xffff9d0000026d00 0001 00000000 0x0 0x0
0xffff9d0000026d80 0001 00000000 0x0 0x0
0xffff9d0000026e00 0001 00000000 0x0 0x0
0xffff9d0000026e80 0001 00000000 0x0 0x0

0xffff9d0000026f00 0001 00000000 0x0 0x0

0xffff9d0000026f80 0001 00000000 0x0 0x0
0xffff9d0000027000 0001 00000000 0x0 0x0
0xffff9d0000027080 0001 00000000 0x0 0x0
0xffff9d0000027100 0001 00000000 0x0 0x0
0xffff9d0000027180 0001 00000000 0x0 0x0
0xffff9d0000027200 0001 00000000 0x0 0x0
0xffff9d0000027280 0001 00000000 0x0 0x0
0xffff9d0000027300 0001 00000000 0x0 0x0
0xffff9d0000027380 0001 00000000 0x0 0x0
0xffff9d0000027400 0001 00000000 0x0 0x0
0xffff9d0000027480 0001 00000000 0x0 0x0

0xffff9d0000027500 0001 00000000 0x0 0x0

0xffff9d0000027580 0001 00000000 0x0 0x0

0xffff9d0000027600 0001 00000000 0x0 0x0

0xffff9d0000027680 0001 00000000 0x0 0x0

0xffff9d0000027700 0001 00000000 0x0 0x0

0xffff9d0000027780 0001 00000000 0x0 0x0

0xffff9d0000027800 0001 00000000 0x0 0x0

0xffff9d0000027880 0001 00000000 0x0 0x0

0xffff9d0000027900 0001 00000000 0x0 0x0

0xffff9d0000027980 0001 00000000 0x0 0x0
0xffff9d0000027a00 0001 00000000 0x0 0x0
0xffff9d0000027a80 0001 00000000 0x0 0x0
0xffff9d0000027b00 0001 00000000 0x0 0x0
0xffff9d0000027b80 0001 00000000 0x0 0x0
0xffff9d0000027c00 0001 00000000 0x0 0x0
0xffff9d0000027c80 0001 00000000 0x0 0x0
0xffff9d0000027d00 0001 00000000 0x0 0x0
0xffff9d0000027d80 0001 00000000 0x0 0x0
0xffff9d0000027e00 0001 00000000 0x0 0x0
0xffff9d0000027e80 0001 00000000 0x0 0x0

0xffff9d0000027f00 0001 00000000 0x0 0x0

0xffff9d0000027f80 0001 00000000 0x0 0x0
0xffff9d0000028000 0001 00000000 0x0 0x0
0xffff9d0000028080 0001 00000000 0x0 0x0
0xffff9d0000028100 0001 00000000 0x0 0x0
0xffff9d0000028180 0001 00000000 0x0 0x0
0xffff9d0000028200 0001 00000000 0x0 0x0
0xffff9d0000028280 0001 00000000 0x0 0x0
0xffff9d0000028300 0001 00000000 0x0 0x0
0xffff9d0000028380 0001 00000000 0x0 0x0
0xffff9d0000028400 0001 00000000 0x0 0x0
0xffff9d0000028480 0001 00000000 0x0 0x0

0xffff9d0000028500 0001 00000000 0x0 0x0

0xffff9d0000028580 0001 00000000 0x0 0x0

0xffff9d0000028600 0001 00000000 0x0 0x0

0xffff9d0000028680 0001 00000000 0x0 0x0

0xffff9d0000028700 0001 00000000 0x0 0x0

0xffff9d0000028780 0001 00000000 0x0 0x0

0xffff9d0000028800 0001 00000000 0x0 0x0

0xffff9d0000028880 0001 00000000 0x0 0x0

0xffff9d0000028900 0001 00000000 0x0 0x0

0xffff9d0000028980 0001 00000000 0x0 0x0
0xffff9d0000028a00 0001 00000000 0x0 0x0
0xffff9d0000028a80 0001 00000000 0x0 0x0
0xffff9d0000028b00 0001 00000000 0x0 0x0
0xffff9d0000028b80 0001 00000000 0x0 0x0
0xffff9d0000028c00 0001 00000000 0x0 0x0
0xffff9d0000028c80 0001 00000000 0x0 0x0
0xffff9d0000028d00 0001 00000000 0x0 0x0
0xffff9d0000028d80 0001 00000000 0x0 0x0
0xffff9d0000028e00 0001 00000000 0x0 0x0
0xffff9d0000028e80 0001 00000000 0x0 0x0

0xffff9d0000028f00 0001 00000000 0x0 0x0

0xffff9d0000028f80 0001 00000000 0x0 0x0
0xffff9d0000029000 0001 00000000 0x0 0x0
0xffff9d0000029080 0001 00000000 0x0 0x0
0xffff9d0000029100 0001 00000000 0x0 0x0
0xffff9d0000029180 0001 00000000 0x0 0x0
0xffff9d0000029200 0001 00000000 0x0 0x0
0xffff9d0000029280 0001 00000000 0x0 0x0
0xffff9d0000029300 0001 00000000 0x0 0x0
0xffff9d0000029380 0001 00000000 0x0 0x0
0xffff9d0000029400 0001 00000000 0x0 0x0
0xffff9d0000029480 0001 00000000 0x0 0x0

0xffff9d0000029500 0001 00000000 0x0 0x0

0xffff9d0000029580 0001 00000000 0x0 0x0

0xffff9d0000029600 0001 00000000 0x0 0x0

0xffff9d0000029680 0001 00000000 0x0 0x0
0xffff9d0000029700 0001 00000000 0x0 0x0
0xffff9d0000029780 0001 00000000 0x0 0x0
0xffff9d0000029800 0001 00000000 0x0 0x0
0xffff9d0000029880 0001 00000000 0x0 0x0
0xffff9d0000029900 0001 00000000 0x0 0x0
0xffff9d0000029980 0001 00000000 0x0 0x0
0xffff9d0000029a00 0001 00000000 0x0 0x0
0xffff9d0000029a80 0001 00000000 0x0 0x0
0xffff9d0000029b00 0001 00000000 0x0 0x0
0xffff9d0000029b80 0001 00000000 0x0 0x0
0xffff9d0000029c00 0001 00000000 0x0 0x0
0xffff9d0000029c80 0001 00000000 0x0 0x0
0xffff9d0000029d00 0001 00000000 0x0 0x0
0xffff9d0000029d80 0001 00000000 0x0 0x0
0xffff9d0000029e00 0001 00000000 0x0 0x0
0xffff9d0000029e80 0001 00000000 0x0 0x0
0xffff9d0000029f00 0001 00000000 0x0 0x0
0xffff9d0000029f80 0001 00000000 0x0 0x0
0xffff9d000002a000 0001 00000000 0x0 0x0
0xffff9d000002a080 0001 00000000 0x0 0x0
0xffff9d000002a100 0001 00000000 0x0 0x0
0xffff9d000002a180 0001 00000000 0x0 0x0
0xffff9d000002a200 0001 00000000 0x0 0x0
0xffff9d000002a280 0001 00000000 0x0 0x0
0xffff9d000002a300 0001 00000000 0x0 0x0
0xffff9d000002a380 0001 00000000 0x0 0x0
0xffff9d000002a400 0001 00000000 0x0 0x0
0xffff9d000002a480 0001 00000000 0x0 0x0
0xffff9d000002a500 0001 00000000 0x0 0x0
0xffff9d000002a580 0001 00000000 0x0 0x0

0xffff9d000002a600 0001 00000000 0x0 0x0

0xffff9d000002a680 0001 00000000 0x0 0x0

0xffff9d000002a700 0001 00000000 0x0 0x0

0xffff9d000002a780 0001 00000000 0x0 0x0

0xffff9d000002a800 0001 00000000 0x0 0x0

0xffff9d000002a880 0001 00000000 0x0 0x0

0xffff9d000002a900 0001 00000000 0x0 0x0

0xffff9d000002a980 0001 00000000 0x0 0x0
0xffff9d000002aa00 0001 00000000 0x0 0x0
0xffff9d000002aa80 0001 00000000 0x0 0x0
0xffff9d000002ab00 0001 00000000 0x0 0x0
0xffff9d000002ab80 0001 00000000 0x0 0x0
0xffff9d000002ac00 0001 00000000 0x0 0x0
0xffff9d000002ac80 0001 00000000 0x0 0x0
0xffff9d000002ad00 0001 00000000 0x0 0x0
0xffff9d000002ad80 0001 00000000 0x0 0x0
0xffff9d000002ae00 0001 00000000 0x0 0x0
0xffff9d000002ae80 0001 00000000 0x0 0x0
0xffff9d000002af00 0001 00000000 0x0 0x0
0xffff9d000002af80 0001 00000000 0x0

---
If you want syzbot to run the reproducer, reply with:
#syz test: git://repo/address.git branch-or-commit-hash
If you attach or paste a git patch, syzbot will apply it before testing.