MSan: Uninitialized Memory in strlcpy

2 views
Skip to first unread message

syzbot

unread,
Feb 22, 2020, 11:26:15 AM2/22/20
to syzkaller-...@googlegroups.com
Hello,

syzbot found the following crash on:

HEAD commit: 5d6e8781 Update AUDIO_SETINFO_channels test. The kernel li..
git tree: netbsd
console output: https://syzkaller.appspot.com/x/log.txt?x=12dae265e00000
kernel config: https://syzkaller.appspot.com/x/.config?x=9544af77043190a5
dashboard link: https://syzkaller.appspot.com/bug?extid=3e7f116fce8bcdfd49d5
compiler: clang version 3.8.0-2ubuntu4 (tags/RELEASE_380/final)

Unfortunately, I don't have any reproducer for this crash yet.

IMPORTANT: if you fix the bug, please add the following tag to the commit:
Reported-by: syzbot+3e7f11...@syzkaller.appspotmail.com

[ 100.6085140] panic: MSan: Uninitialized Kmem Memory From sys__lwp_setname()

[ 100.6085140] cpu1: Begin traceback...
[ 100.6085140] vpanic() at netbsd:vpanic+0x7c1 sys/kern/subr_prf.c:334
[ 100.6085140] panic() at netbsd:panic+0x1ad sys/kern/subr_prf.c:255
[ 100.6085140] __msan_warning() at netbsd:__msan_warning+0xe7 kmsan_report_inline sys/kern/subr_msan.c:236 [inline]
[ 100.6085140] __msan_warning() at netbsd:__msan_warning+0xe7 sys/kern/subr_msan.c:612
[ 100.6085140] strlcpy() at netbsd:strlcpy+0x1ce sys/lib/libkern/../../../common/lib/libc/string/strlcpy.c:66
[ 100.6085140] sys__lwp_getname() at netbsd:sys__lwp_getname+0x2af sys/kern/sys_lwp.c:733
[ 100.6085140] sys___syscall() at netbsd:sys___syscall+0x27e sys/kern/sys_syscall.c:77
[ 100.6085140] syscall() at netbsd:syscall+0x35d sy_call sys/sys/syscallvar.h:65 [inline]
[ 100.6085140] syscall() at netbsd:syscall+0x35d sy_invoke sys/sys/syscallvar.h:94 [inline]
[ 100.6085140] syscall() at netbsd:syscall+0x35d sys/arch/x86/x86/syscall.c:138
[ 100.6085140] --- syscall (number 198) ---
[ 100.6085140] 73e4e5643b9a:
[ 100.6085140] cpu1: End traceback...
[ 100.6085140] fatal breakpoint trap in supervisor mode
[ 100.6085140] trap type 1 code 0 rip 0xffffffff8022025d cs 0x8 rflags 0x246 cr2 0x7f5ead21c000 ilevel 0x8 rsp 0xffff868086a479e0
[ 100.6085140] curlwp 0xffff8680113699c0 pid 820.2 lowest kstack 0xffff868086a402c0
Stopped in pid 820.2 (syz-executor.0) at netbsd:breakpoint+0x5: leave
?
breakpoint() at netbsd:breakpoint+0x5
vpanic() at netbsd:vpanic+0x7c1 sys/kern/subr_prf.c:334
panic() at netbsd:panic+0x1ad sys/kern/subr_prf.c:255
__msan_warning() at netbsd:__msan_warning+0xe7 kmsan_report_inline sys/kern/subr_msan.c:236 [inline]
__msan_warning() at netbsd:__msan_warning+0xe7 sys/kern/subr_msan.c:612
strlcpy() at netbsd:strlcpy+0x1ce sys/lib/libkern/../../../common/lib/libc/string/strlcpy.c:66
sys__lwp_getname() at netbsd:sys__lwp_getname+0x2af sys/kern/sys_lwp.c:733
sys___syscall() at netbsd:sys___syscall+0x27e sys/kern/sys_syscall.c:77
syscall() at netbsd:syscall+0x35d sy_call sys/sys/syscallvar.h:65 [inline]
syscall() at netbsd:syscall+0x35d sy_invoke sys/sys/syscallvar.h:94 [inline]
syscall() at netbsd:syscall+0x35d sys/arch/x86/x86/syscall.c:138
--- syscall (number 198) ---
73e4e5643b9a:
ds 79d0
es 0
fs 2004
gs 104
rdi ffff8680127bf130
rsi ffffb90000000000
rbp ffff868086a479e0
rbx 0
rdx ffff8100127bf130
rcx 33626022
rax ffff8680117fbb88
r8 0
r9 0
r10 0
r11 0
r12 0
r13 104
r14 2004
r15 0
rip ffffffff8022025d breakpoint+0x5
cs 8
rflags 246
rsp ffff868086a479e0
ss 10
netbsd:breakpoint+0x5: leave
PID LID S CPU FLAGS STRUCT LWP * NAME WAIT
682 1 2 0 0 ffff86801120eb00 syz-executor.3
798 1 2 0 40000 ffff8680113a1640 syz-executor.2
820 3 3 1 80 ffff86800febe6c0 parked
820 > 2 7 1 0 ffff8680113699c0 >k![-=37
820 1 2 1 10040000 ffff8680113b1240 syz-executor.0
771 3 3 1 80 ffff868010390b40 syz-executor.5 parked
771 2 3 1 80 ffff868011369140 syz-executor.5 parked
771 > 1 7 0 10040000 ffff8680108d6680 syz-executor.5
716 3 3 1 80 ffff868010b5db80 syz-executor.1 parked
716 2 3 1 80 ffff868011b27340 syz-executor.1 semwait
716 1 3 1 10040080 ffff8680113a1200 syz-executor.1 nanoslp
718 2 3 1 80 ffff868010ba6900 syz-executor.0 parked
105 3 3 1 80 ffff86801266f200 syz-executor.0 parked
45 1 2 0 0 ffff86801242a100 syz-executor.4
381 1 3 1 80 ffff86801237a940 syz-executor.5 nanoslp
433 1 3 0 80 ffff86801237a0c0 syz-executor.3 nanoslp
591 1 3 1 80 ffff868012352900 syz-executor.2 nanoslp
597 1 3 0 80 ffff8680123524c0 syz-executor.1 nanoslp
40 1 3 0 80 ffff868012352080 syz-executor.0 nanoslp
598 11 3 1 80 ffff86801237a500 syz-fuzzer parked
598 10 3 0 80 ffff868010712100 syz-fuzzer kqueue
598 9 3 0 80 ffff8680121e48c0 syz-fuzzer parked
598 8 3 0 80 ffff8680121e4480 syz-fuzzer parked
598 7 3 1 80 ffff868011b27bc0 syz-fuzzer parked
598 6 3 1 80 ffff868011b27780 syz-fuzzer parked
598 5 3 0 80 ffff8680111bd640 syz-fuzzer parked
598 4 3 0 80 ffff8680113bb6c0 syz-fuzzer parked
598 3 3 0 80 ffff8680113bb280 syz-fuzzer parked
598 2 3 1 80 ffff86800febeb00 syz-fuzzer parked
598 1 3 0 80 ffff868010807a00 syz-fuzzer parked
452 1 3 1 80 ffff8680111eeac0 sshd select
454 1 3 0 80 ffff8680113725c0 getty nanoslp
551 1 3 1 80 ffff8680113b1ac0 getty nanoslp
528 1 3 1 80 ffff8680113b1680 getty nanoslp
581 1 3 0 80 ffff8680113a1a80 getty ttyraw
511 1 3 0 80 ffff8680111bd200 cron nanoslp
540 1 3 1 80 ffff8680112172c0 inetd kqueue
440 1 3 0 80 ffff868010be4a00 sshd select
403 1 3 1 80 ffff868010a81100 powerd kqueue
434 1 2 0 0 ffff868010a61900 makemandb
279 1 3 0 80 ffff86801120e6c0 syslogd kqueue
250 1 3 0 80 ffff868010b6e340 dhcpcd kqueue
219 1 3 0 80 ffff868010a61080 dhcpcd kqueue
1 1 3 0 80 ffff868010561500 init wait
0 44 3 0 204 ffff868010712540 physiod physiod
0 48 3 0 204 ffff868010714580 pooldrain pooldrain
0 47 3 0 200 ffff868010714140 ioflush syncer
0 46 3 1 200 ffff868010712980 pgdaemon pgdaemon
0 43 3 1 200 ffff868010561940 npfgc-0 npfgccv
0 42 3 1 204 ffff8680105610c0 rt_free rt_free
0 41 3 1 204 ffff86801055c900 unpgc unpgc
0 40 3 1 204 ffff86801055c4c0 key_timehandler key_timehandler
0 39 3 1 204 ffff86801055c080 icmp6_wqinput/1 icmp6_wqinput
0 38 3 0 204 ffff8680105548c0 icmp6_wqinput/0 icmp6_wqinput
0 37 3 1 204 ffff868010554480 nd6_timer nd6_timer
0 36 3 1 204 ffff868010554040 carp6_wqinput/1 carp6_wqinput
0 35 3 0 204 ffff868010552bc0 carp6_wqinput/0 carp6_wqinput
0 34 3 1 204 ffff868010552780 carp_wqinput/1 carp_wqinput
0 33 3 0 204 ffff868010552340 carp_wqinput/0 carp_wqinput
0 32 3 1 204 ffff868010393b80 icmp_wqinput/1 icmp_wqinput
0 31 3 0 204 ffff868010393740 icmp_wqinput/0 icmp_wqinput
0 29 3 1 204 ffff86800febe280 rt_timer rt_timer
0 30 3 0 204 ffff868010390700 vmem_rehash vmem_rehash
0 28 3 0 204 ffff86800eb32ac0 scsibus0 sccomp
0 27 3 0 200 ffff86800eb32680 pms0 pmsreset
0 26 3 1 204 ffff86800eb32240 xcall/1 xcall
0 25 1 1 200 ffff86800eb30a80 softser/1
0 24 1 1 200 ffff86800eb30640 softclk/1
0 23 1 1 200 ffff86800eb30200 softbio/1
0 22 1 1 200 ffff86800d545a40 softnet/1
0 21 1 1 201 ffff86800d545600 idle/1
0 20 3 0 204 ffff86800d5451c0 lnxpwrwq lnxpwrwq
0 19 3 0 204 ffff86800d544a00 lnxlngwq lnxlngwq
0 18 3 0 204 ffff86800d5445c0 lnxsyswq lnxsyswq
0 17 3 0 204 ffff86800d544180 lnxrcugc lnxrcugc
0 16 3 0 204 ffff86800d53f9c0 sysmon smtaskq
0 15 3 0 204 ffff86800d53f580 pmfsuspend pmfsuspend
0 14 3 0 204 ffff86800d53f140 pmfevent pmfevent
0 13 3 0 204 ffff86800d535980 sopendfree sopendfr
0 12 3 1 204 ffff86800d535540 iflnkst iflnkst
0 11 3 1 204 ffff86800d535100 nfssilly nfssilly
0 10 3 1 200 ffff86800d52c940 cachegc cachegc
0 9 3 0 204 ffff86800d52c500 vdrain vdrain
0 8 3 0 200 ffff86800d52c0c0 modunload mod_unld
0 7 3 0 204 ffff86800cf65900 xcall/0 xcall
0 6 1 0 200 ffff86800cf654c0 softser/0
0 5 1 0 200 ffff86800cf65080 softclk/0
0 4 1 0 200 ffff86800cf608c0 softbio/0
0 3 1 0 200 ffff86800cf60480 softnet/0
0 2 1 0 201 ffff86800cf60040 idle/0
0 1 3 1 200 ffffffff859a3b40 swapper uvm
[Locks tracked through LWPs]

****** LWP 798.1 (syz-executor.2) @ 0xffff8680113a1640, l_stat=2

*** Locks held:

* Lock 0 (initialized at amap_ctor)
lock address : 0xffff868012407500 type : sleep/adaptive
initialized : 0xffffffff83252844
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffff8680113a1640 last held: 0xffff8680113a1640
last locked* : 0xffffffff83281fcf unlocked : 0xffffffff8325b8c1
owner field : 0xffff8680113a1640 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

* Lock 1 (initialized at pmap_ctor)
lock address : 0xffff868010b22a80 type : sleep/adaptive
initialized : 0xffffffff8031c437
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffff8680113a1640 last held: 0xffff8680113a1640
last locked* : 0xffffffff8032ebfb unlocked : 0xffffffff803331a7
owner field : 0xffff8680113a1640 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

*** Locks wanted: none

****** LWP 820.2 (>k![-=37) @ 0xffff8680113699c0, l_stat=7

*** Locks held:

* Lock 0 (initialized at fork1)
lock address : 0xffff8680121dd980 type : sleep/adaptive
initialized : 0xffffffff833fda94
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 1
relevant lwp : 0xffff8680113699c0 last held: 0xffff8680113699c0
last locked* : 0xffffffff836a28e9 unlocked : 0xffffffff836a24e3
owner field : 0xffff8680113699c0 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

*** Locks wanted: none

****** LWP 771.1 (syz-executor.5) @ 0xffff8680108d6680, l_stat=7

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at sched_cpuattach)
lock address : 0xffff86800cf443c0 type : spin
initialized : 0xffffffff834bb149
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 1
relevant cpu : 0 last held: 1
relevant lwp : 0xffff8680108d6680 last held: 0xffff8680113699c0
last locked* : 0xffffffff836a298b unlocked : 0xffffffff83501f79
owner field : 0x0000000000010700 wait/spin: 0/1

****** LWP 45.1 (syz-executor.4) @ 0xffff86801242a100, l_stat=2

*** Locks held:

* Lock 0 (initialized at vcache_new)
lock address : 0xffff8680127c7700 type : sleep/adaptive
initialized : 0xffffffff83886ba8
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffff86801242a100 last held: 0xffff86801242a100
last locked* : 0xffffffff838ff409 unlocked : 0xffffffff838ff776
owner/count : 0xffff86801242a100 flags : 0x0000000000000004
Turnstile: no active turnstile for this lock.

* Lock 1 (initialized at uvm_obj_init)
lock address : 0xffff868012590800 type : sleep/adaptive
initialized : 0xffffffff832ee25e
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffff86801242a100 last held: 0xffff86801242a100
last locked* : 0xffffffff837e8ee6 unlocked : 0xffffffff83879fd0
owner field : 0xffff86801242a100 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

*** Locks wanted: none

****** LWP 434.1 (makemandb) @ 0xffff868010a61900, l_stat=2

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at uvmspace_exec)
lock address : 0xffff868010a328c0 type : sleep/adaptive
initialized : 0xffffffff832d443f
shared holds : 0 exclusive: 0
shares wanted: 1 exclusive: 0
relevant cpu : 0 last held: 65535
relevant lwp : 0xffff868010a61900 last held: 000000000000000000
last locked : 0xffffffff83281177 unlocked*: 0xffffffff83292696
owner/count : 000000000000000000 flags : 000000000000000000
Turnstile: no active turnstile for this lock.

****** LWP 0.12 (iflnkst) @ 0xffff86800d535540, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at module_hook_init)
lock address : 0xffffffff85a5d440 type : sleep/adaptive
initialized : 0xffffffff8344fdf3
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 0
relevant lwp : 0xffff86800d535540 last held: 000000000000000000
last locked : 000000000000000000 unlocked*: 000000000000000000
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 0.5 (softclk/0) @ 0xffff86800cf65080, l_stat=1

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at module_hook_init)
lock address : 0xffffffff85a5d440 type : sleep/adaptive
initialized : 0xffffffff8344fdf3
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffff86800cf65080 last held: 000000000000000000
last locked : 000000000000000000 unlocked*: 000000000000000000
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

[Locks tracked through CPUs]

******* Locks held on cpu1:

* Lock 0 (initialized at sched_cpuattach)
lock address : 0xffff86800cf443c0 type : spin
initialized : 0xffffffff834bb149
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 1
relevant cpu : 1 last held: 1
relevant lwp : 0xffff8680113699c0 last held: 0xffff8680113699c0
last locked* : 0xffffffff836a298b unlocked : 0xffffffff83501f79
owner field : 0x0000000000010700 wait/spin: 0/1

PAGE FLAG PQ UOBJECT UANON
0xffff868000014180 0041 00000000 0x0 0x0
0xffff8680000141f8 0041 00000000 0x0 0x0
0xffff868000014270 0041 00000000 0x0 0x0
0xffff8680000142e8 0041 00000000 0x0 0x0
0xffff868000014360 0041 00000000 0x0 0x0
0xffff8680000143d8 0041 00000000 0x0 0x0
0xffff868000014450 0041 00000000 0x0 0x0
0xffff8680000144c8 0041 00000000 0x0 0x0
0xffff868000014540 0041 00000000 0x0 0x0
0xffff8680000145b8 0041 00000000 0x0 0x0
0xffff868000014630 0041 00000000 0x0 0x0
0xffff8680000146a8 0041 00000000 0x0 0x0
0xffff868000014720 0041 00000000 0x0 0x0
0xffff868000014798 0041 00000000 0x0 0x0
0xffff868000014810 0041 00000000 0x0 0x0
0xffff868000014888 0041 00000000 0x0 0x0
0xffff868000014900 0041 00000000 0x0 0x0
0xffff868000014978 0041 00000000 0x0 0x0
0xffff8680000149f0 0041 00000000 0x0 0x0
0xffff868000014a68 0041 00000000 0x0 0x0
0xffff868000014ae0 0041 00000000 0x0 0x0
0xffff868000014b58 0041 00000000 0x0 0x0
0xffff868000014bd0 0041 00000000 0x0 0x0
0xffff868000014c48 0041 00000000 0x0 0x0
0xffff868000014cc0 0041 00000000 0x0 0x0
0xffff868000014d38 0041 00000000 0x0 0x0
0xffff868000014db0 0041 00000000 0x0 0x0
0xffff868000014e28 0041 00000000 0x0 0x0
0xffff868000014ea0 0041 00000000 0x0 0x0
0xffff868000014f18 0041 00000000 0x0 0x0
0xffff868000014f90 0041 00000000 0x0 0x0
0xffff868000015008 0041 00000000 0x0 0x0
0xffff868000015080 0041 00000000 0x0 0x0
0xffff8680000150f8 0041 00000000 0x0 0x0
0xffff868000015170 0041 00000000 0x0 0x0
0xffff8680000151e8 0041 00000000 0x0 0x0
0xffff868000015260 0041 00000000 0x0 0x0
0xffff8680000152d8 0041 00000000 0x0 0x0
0xffff868000015350 0041 00000000 0x0 0x0
0xffff8680000153c8 0041 00000000 0x0 0x0
0xffff868000015440 0041 00000000 0x0 0x0
0xffff8680000154b8 0041 00000000 0x0 0x0
0xffff868000015530 0041 00000000 0x0 0x0
0xffff8680000155a8 0041 00000000 0x0 0x0
0xffff868000015620 0041 00000000 0x0 0x0
0xffff868000015698 0041 00000000 0x0 0x0
0xffff868000015710 0041 00000000 0x0 0x0
0xffff868000015788 0041 00000000 0x0 0x0
0xffff868000015800 0041 00000000 0x0 0x0
0xffff868000015878 0041 00000000 0x0 0x0
0xffff8680000158f0 0041 00000000 0x0 0x0
0xffff868000015968 0041 00000000 0x0 0x0
0xffff8680000159e0 0041 00000000 0x0 0x0
0xffff868000015a58 0041 00000000 0x0 0x0
0xffff868000015ad0 0041 00000000 0x0 0x0
0xffff868000015b48 0041 00000000 0x0 0x0
0xffff868000015bc0 0041 00000000 0x0 0x0
0xffff868000015c38 0041 00000000 0x0 0x0
0xffff868000015cb0 0041 00000000 0x0 0x0
0xffff868000015d28 0041 00000000 0x0 0x0
0xffff868000015da0 0041 00000000 0x0 0x0
0xffff868000015e18 0041 00000000 0x0 0x0
0xffff868000015e90 0041 00000000 0x0 0x0
0xffff868000015f08 0041 00000000 0x0 0x0
0xffff868000015f80 0041 00000000 0x0 0x0
0xffff868000015ff8 0041 00000000 0x0 0x0
0xffff868000016070 0041 00000000 0x0 0x0
0xffff8680000160e8 0041 00000000 0x0 0x0
0xffff868000016160 0041 00000000 0x0 0x0
0xffff8680000161d8 0041 00000000 0x0 0x0
0xffff868000016250 0041 00000000 0x0 0x0
0xffff8680000162c8 0041 00000000 0x0 0x0
0xffff868000016340 0041 00000000 0x0 0x0
0xffff8680000163b8 0041 00000000 0x0 0x0
0xffff868000016430 0041 00000000 0x0 0x0
0xffff8680000164a8 0041 00000000 0x0 0x0
0xffff868000016520 0041 00000000 0x0 0x0
0xffff868000016598 0041 00000000 0x0 0x0
0xffff868000016610 0041 00000000 0x0 0x0
0xffff868000016688 0041 00000000 0x0 0x0
0xffff868000016700 0041 00000000 0x0 0x0
0xffff868000016778 0041 00000000 0x0 0x0
0xffff8680000167f0 0041 00000000 0x0 0x0
0xffff868000016868 0041 00000000 0x0 0x0
0xffff8680000168e0 0041 00000000 0x0 0x0
0xffff868000016958 0041 00000000 0x0 0x0
0xffff8680000169d0 0041 00000000 0x0 0x0
0xffff868000016a48 0041 00000000 0x0 0x0
0xffff868000016ac0 0041 00000000 0x0 0x0
0xffff868000016b38 0041 00000000 0x0 0x0
0xffff868000016bb0 0041 00000000 0x0 0x0
0xffff868000016c28 0041 00000000 0x0 0x0
0xffff868000016ca0 0041 00000000 0x0 0x0
0xffff868000016d18 0041 00000000 0x0 0x0
0xffff868000016d90 0041 00000000 0x0 0x0
0xffff868000016e08 0041 00000000 0x0 0x0
0xffff868000016e80 0041 00000000 0x0 0x0
0xffff868000016ef8 0041 00000000 0x0 0x0
0xffff868000016f70 0041 00000000 0x0 0x0
0xffff868000016fe8 0041 00000000 0x0 0x0
0xffff868000017060 0041 00000000 0x0 0x0
0xffff8680000170d8 0041 00000000 0x0 0x0
0xffff868000017150 0041 00000000 0x0 0x0
0xffff8680000171c8 0041 00000000 0x0 0x0
0xffff868000017240 0041 00000000 0x0 0x0
0xffff8680000172b8 0041 00000000 0x0 0x0
0xffff868000017330 0041 00000000 0x0 0x0
0xffff8680000173a8 0041 00000000 0x0 0x0
0xffff868000017420 0041 00000000 0x0 0x0
0xffff868000017498 0041 00000000 0x0 0x0
0xffff868000017510 0041 00000000 0x0 0x0
0xffff868000017588 0041 00000000 0x0 0x0
0xffff868000017600 0041 00000000 0x0 0x0
0xffff868000017678 0041 00000000 0x0 0x0
0xffff8680000176f0 0041 00000000 0x0 0x0
0xffff868000017768 0041 00000000 0x0 0x0
0xffff8680000177e0 0041 00000000 0x0 0x0
0xffff868000017858 0041 00000000 0x0 0x0
0xffff8680000178d0 0041 00000000 0x0 0x0
0xffff868000017948 0041 00000000 0x0 0x0
0xffff8680000179c0 0041 00000000 0x0 0x0
0xffff868000017a38 0041 00000000 0x0 0x0
0xffff868000017ab0 0041 00000000 0x0 0x0
0xffff868000017b28 0041 00000000 0x0 0x0
0xffff868000017ba0 0041 00000000 0x0 0x0
0xffff868000017c18 0041 00000000 0x0 0x0
0xffff868000017c90 0041 00000000 0x0 0x0
0xffff868000017d08 0041 00000000 0x0 0x0
0xffff868000017d80 0041 00000000 0x0 0x0
0xffff868000017df8 0041 00000000 0x0 0x0
0xffff868000017e70 0041 00000000 0x0 0x0
0xffff868000017ee8 0041 00000000 0x0 0x0
0xffff868000017f60 0041 00000000 0x0 0x0
0xffff868000017fd8 0041 00000000 0x0 0x0
0xffff868000018050 0041 00000000 0x0 0x0
0xffff8680000180c8 0041 00000000 0x0 0x0
0xffff868000018140 0041 00000000 0x0 0x0
0xffff8680000181b8 0041 00000000 0x0 0x0
0xffff868000018230 0041 00000000 0x0 0x0
0xffff8680000182a8 0041 00000000 0x0 0x0
0xffff868000018320 0041 00000000 0x0 0x0
0xffff868000018398 0041 00000000 0x0 0x0
0xffff868000018410 0041 00000000 0x0 0x0
0xffff868000018488 0041 00000000 0x0 0x0
0xffff868000018500 0041 00000000 0x0 0x0
0xffff868000018578 0041 00000000 0x0 0x0
0xffff8680000185f0 0041 00000000 0x0 0x0
0xffff868000018668 0041 00000000 0x0 0x0
0xffff8680000186e0 0041 00000000 0x0 0x0
0xffff868000018758 0041 00000000 0x0 0x0
0xffff8680000187d0 0041 00000000 0x0 0x0
0xffff868000018848 0041 00000000 0x0 0x0
0xffff8680000188c0 0041 00000000 0x0 0x0
0xffff868000018938 0041 00000000 0x0 0x0
0xffff8680000189b0 0041 00000000 0x0 0x0
0xffff868000018a28 0041 00000000 0x0 0x0
0xffff868000018aa0 0041 00000000 0x0 0x0
0xffff868000018b18 0041 00000000 0x0 0x0
0xffff868000018b90 0041 00000000 0x0 0x0
0xffff868000018c08 0041 00000000 0x0 0x0
0xffff868000018c80 0041 00000000 0x0 0x0
0xffff868000018cf8 0041 00000000 0x0 0x0
0xffff868000018d70 0041 00000000 0x0 0x0
0xffff868000018de8 0041 00000000 0x0 0x0
0xffff868000018e60 0041 00000000 0x0 0x0
0xffff868000018ed8 0041 00000000 0x0 0x0
0xffff868000018f50 0041 00000000 0x0 0x0
0xffff868000018fc8 0041 00000000 0x0 0x0
0xffff868000019040 0041 00000000 0x0 0x0
0xffff8680000190b8 0041 00000000 0x0 0x0
0xffff868000019130 0041 00000000 0x0 0x0
0xffff8680000191a8 0041 00000000 0x0 0x0
0xffff868000019220 0041 00000000 0x0 0x0
0xffff868000019298 0041 00000000 0x0 0x0
0xffff868000019310 0041 00000000 0x0 0x0
0xffff868000019388 0041 00000000 0x0 0x0
0xffff868000019400 0041 00000000 0x0 0x0
0xffff868000019478 0041 00000000 0x0 0x0
0xffff8680000194f0 0041 00000000 0x0 0x0
0xffff868000019568 0041 00000000 0x0 0x0
0xffff8680000195e0 0041 00000000 0x0 0x0
0xffff868000019658 0041 00000000 0x0 0x0
0xffff8680000196d0 0041 00000000 0x0 0x0
0xffff868000019748 0041 00000000 0x0 0x0
0xffff8680000197c0 0041 00000000 0x0 0x0
0xffff868000019838 0041 00000000 0x0 0x0
0xffff8680000198b0 0041 00000000 0x0 0x0
0xffff868000019928 0041 00000000 0x0 0x0
0xffff8680000199a0 0041 00000000 0x0 0x0
0xffff868000019a18 0041 00000000 0x0 0x0
0xffff868000019a90 0041 00000000 0x0 0x0
0xffff868000019b08 0041 00000000 0x0 0x0
0xffff868000019b80 0041 00000000 0x0 0x0
0xffff868000019bf8 0041 00000000 0x0 0x0
0xffff868000019c70 0041 00000000 0x0 0x0
0xffff868000019ce8 0041 00000000 0x0 0x0
0xffff868000019d60 0041 00000000 0x0 0x0
0xffff868000019dd8 0041 00000000 0x0 0x0
0xffff868000019e50 0041 00000000 0x0 0x0
0xffff868000019ec8 0041 00000000 0x0 0x0
0xffff868000019f40 0041 00000000 0x0 0x0
0xffff868000019fb8 0041 00000000 0x0 0x0
0xffff86800001a030 0041 00000000 0x0 0x0
0xffff86800001a0a8 0041 00000000 0x0 0x0
0xffff86800001a120 0041 00000000 0x0 0x0
0xffff86800001a198 0041 00000000 0x0 0x0
0xffff86800001a210 0041 00000000 0x0 0x0
0xffff86800001a288 0041 00000000 0x0 0x0
0xffff86800001a300 0041 00000000 0x0 0x0
0xffff86800001a378 0041 00000000 0x0 0x0
0xffff86800001a3f0 0041 00000000 0x0 0x0
0xffff86800001a468 0041 00000000 0x0 0x0
0xffff86800001a4e0 0041 00000000 0x0 0x0
0xffff86800001a558 0041 00000000 0x0 0x0
0xffff86800001a5d0 0041 00000000 0x0 0x0
0xffff86800001a648 0041 00000000 0x0 0x0
0xffff86800001a6c0 0041 00000000 0x0 0x0
0xffff86800001a738 0041 00000000 0x0 0x0
0xffff86800001a7b0 0041 00000000 0x0 0x0
0xffff86800001a828 0041 00000000 0x0 0x0
0xffff86800001a8a0 0041 00000000 0x0 0x0
0xffff86800001a918 0041 00000000 0x0 0x0
0xffff86800001a990 0041 00000000 0x0 0x0
0xffff86800001aa08 0041 00000000 0x0 0x0
0xffff86800001aa80 0041 00000000 0x0 0x0
0xffff86800001aaf8 0041 00000000 0x0 0x0
0xffff86800001ab70 0041 00000000 0x0 0x0
0xffff86800001abe8 0045 00000000 0x0 0x0
0xffff86800001ac60 0045 00000000 0x0 0x0
0xffff86800001acd8 0045 00000000 0x0 0x0
0xffff86800001ad50 0041 00000000 0x0 0x0
0xffff86800001adc8 0041 00000000 0x0 0x0
0xffff86800001ae40 0045 00000000 0x0 0x0
0xffff86800001aeb8 0041 00000000 0x0 0x0
0xffff86800001af30 0041 00000000 0x0 0x0
0xffff86800001afa8 0045 00000000 0x0 0x0
0xffff86800001b020 0045 00000000 0x0 0x0
0xffff86800001b098 0045 00000000 0x0 0x0
0xffff86800001b110 0045 00000000 0x0 0x0
0xffff86800001b188 0041 00000000 0x0 0x0
0xffff86800001b200 0045 00000000 0x0 0x0
0xffff86800001b278 0045 00000000 0x0 0x0
0xffff86800001b2f0 0045 00000000 0x0 0x0
0xffff86800001b368 0041 00000000 0x0 0x0
0xffff86800001b3e0 0041 00000000 0x0 0x0
0xffff86800001b458 0041 00000000 0x0 0x0
0xffff86800001b4d0 0045 00000000 0x0 0x0
0xffff86800001b548 0045 00000000 0x0 0x0
0xffff86800001b5c0 0041 00000000 0x0 0x0
0xffff86800001b638 0045 00000000 0x0 0x0
0xffff86800001b6b0 0045 00000000 0x0 0x0
0xffff86800001b728 0041 00000000 0x0 0x0
0xffff86800001b7a0 0041 00000000 0x0 0x0
0xffff86800001b818 0041 00000000 0x0 0x0
0xffff86800001b890 0041 00000000 0x0 0x0
0xffff86800001b908 0045 00000000 0x0 0x0
0xffff86800001b980 0041 00000000 0x0 0x0
0xffff86800001b9f8 0041 00000000 0x0 0x0
0xffff86800001ba70 0041 00000000 0x0 0x0
0xffff86800001bae8 0041 00000000 0x0 0x0
0xffff86800001bb60 0041 00000000 0x0 0x0
0xffff86800001bbd8 0041 00000000 0x0 0x0
0xffff86800001bc50 0041 00000000 0x0 0x0
0xffff86800001bcc8 0041 00000000 0x0 0x0
0xffff86800001bd40 0041 00000000 0x0 0x0
0xffff86800001bdb8 0041 00000000 0x0 0x0
0xffff86800001be30 0041 00000000 0x0 0x0
0xffff86800001bea8 0041 00000000 0x0 0x0
0xffff86800001bf20 0041 00000000 0x0 0x0
0xffff86800001bf98 0041 00000000 0x0 0x0
0xffff86800001c010 0041 00000000 0x0 0x0
0xffff86800001c088 0041 00000000 0x0 0x0
0xffff86800001c100 0041 00000000 0x0 0x0
0xffff86800001c178 0041 00000000 0x0 0x0
0xffff86800001c1f0 0041 00000000 0x0 0x0
0xffff86800001c268 0041 00000000 0x0 0x0
0xffff86800001c2e0 0041 00000000 0x0 0x0
0xffff86800001c358 0041 00000000 0x0 0x0
0xffff86800001c3d0 0041 00000000 0x0 0x0
0xffff86800001c448 0041 00000000 0x0 0x0
0xffff86800001c4c0 0041 00000000 0x0 0x0
0xffff86800001c538 0041 00000000 0x0 0x0
0xffff86800001c5b0 0041 00000000 0x0 0x0
0xffff86800001c628 0041 00000000 0x0 0x0
0xffff86800001c6a0 0041 00000000 0x0 0x0
0xffff86800001c718 0041 00000000 0x0 0x0
0xffff86800001c790 0041 00000000 0x0 0x0
0xffff86800001c808 0041 00000000 0x0 0x0
0xffff86800001c880 0041 00000000 0x0 0x0
0xffff86800001c8f8 0041 00000000 0x0 0x0
0xffff86800001c970 0041 00000000 0x0 0x0
0xffff86800001c9e8 0041 00000000 0x0 0x0
0xffff86800001ca60 0041 00000000 0x0 0x0
0xffff86800001cad8 0041 00000000 0x0 0x0
0xffff86800001cb50 0041 00000000 0x0 0x0
0xffff86800001cbc8 0041 00000000 0x0 0x0
0xffff86800001cc40 0041 00000000 0x0 0x0
0xffff86800001ccb8 0041 00000000 0x0 0x0
0xffff86800001cd30 0041 00000000 0x0 0x0
0xffff86800001cda8 0041 00000000 0x0 0x0
0xffff86800001ce20 0041 00000000 0x0 0x0
0xffff86800001ce98 0041 00000000 0x0 0x0
0xffff86800001cf10 0041 00000000 0x0 0x0
0xffff86800001cf88 0041 00000000 0x0 0x0
0xffff86800001d000 0041 00000000 0x0 0x0
0xffff86800001d078 0041 00000000 0x0 0x0
0xffff86800001d0f0 0041 00000000 0x0 0x0
0xffff86800001d168 0041 00000000 0x0 0x0
0xffff86800001d1e0 0041 00000000 0x0 0x0
0xffff86800001d258 0041 00000000 0x0 0x0
0xffff86800001d2d0 0041 00000000 0x0 0x0
0xffff86800001d348 0041 00000000 0x0 0x0
0xffff86800001d3c0 0041 00000000 0x0 0x0
0xffff86800001d438 0041 00000000 0x0 0x0
0xffff86800001d4b0 0041 00000000 0x0 0x0
0xffff86800001d528 0041 00000000 0x0 0x0
0xffff86800001d5a0 0041 00000000 0x0 0x0
0xffff86800001d618 0041 00000000 0x0 0x0
0xffff86800001d690 0041 00000000 0x0 0x0
0xffff86800001d708 0041 00000000 0x0 0x0
0xffff86800001d780 0041 00000000 0x0 0x0
0xffff86800001d7f8 0041 00000000 0x0 0x0
0xffff86800001d870 0041 00000000 0x0 0x0
0xffff86800001d8e8 0041 00000000 0x0 0x0
0xffff86800001d960 0041 00000000 0x0 0x0
0xffff86800001d9d8 0041 00000000 0x0 0x0
0xffff86800001da50 0041 00000000 0x0 0x0
0xffff86800001dac8 0041 00000000 0x0 0x0
0xffff86800001db40 0041 00000000 0x0 0x0
0xffff86800001dbb8 0041 00000000 0x0 0x0
0xffff86800001dc30 0041 00000000 0x0 0x0
0xffff86800001dca8 0041 00000000 0x0 0x0
0xffff86800001dd20 0041 00000000 0x0 0x0
0xffff86800001dd98 0041 00000000 0x0 0x0
0xffff86800001de10 0041 00000000 0x0 0x0
0xffff86800001de88 0041 00000000 0x0 0x0
0xffff86800001df00 0041 00000000 0x0 0x0
0xffff86800001df78 0041 00000000 0x0 0x0
0xffff86800001dff0 0041 00000000 0x0 0x0
0xffff86800001e068 0041 00000000 0x0 0x0
0xffff86800001e0e0 0041 00000000 0x0 0x0
0xffff86800001e158 0041 00000000 0x0 0x0
0xffff86800001e1d0 0041 00000000 0x0 0x0
0xffff86800001e248 0041 00000000 0x0 0x0
0xffff86800001e2c0 0041 00000000 0x0 0x0
0xffff86800001e338 0041 00000000 0x0 0x0
0xffff86800001e3b0 0041 00000000 0x0 0x0
0xffff86800001e428 0041 00000000 0x0 0x0
0xffff86800001e4a0 0041 00000000 0x0 0x0
0xffff86800001e518 0041 00000000 0x0 0x0
0xffff86800001e590 0041 00000000 0x0 0x0
0xffff86800001e608 0041 00000000 0x0 0x0
0xffff86800001e680 0041 00000000 0x0 0x0
0xffff86800001e6f8 0041 00000000 0x0 0x0
0xffff86800001e770 0041 00000000 0x0 0x0
0xffff86800001e7e8 0041 00000000 0x0 0x0
0xffff86800001e860 0041 00000000 0x0 0x0
0xffff86800001e8d8 0041 00000000 0x0 0x0
0xffff86800001e950 0041 00000000 0x0 0x0
0xffff86800001e9c8 0041 00000000 0x0 0x0
0xffff86800001ea40 0041 00000000 0x0 0x0
0xffff86800001eab8 0041 00000000 0x0 0x0
0xffff86800001eb30 0041 00000000 0x0 0x0
0xffff86800001eba8 0041 00000000 0x0 0x0
0xffff86800001ec20 0041 00000000 0x0 0x0
0xffff86800001ec98 0041 00000000 0x0 0x0
0xffff86800001ed10 0041 00000000 0x0 0x0
0xffff86800001ed88 0041 00000000 0x0 0x0
0xffff86800001ee00 0041 00000000 0x0 0x0
0xffff86800001ee78 0041 00000000 0x0 0x0
0xffff86800001eef0 0041 00000000 0x0 0x0
0xffff86800001ef68 0041 00000000 0x0 0x0
0xffff86800001efe0 0041 00000000 0x0 0x0
0xffff86800001f058 0041 00000000 0x0 0x0
0xffff86800001f0d0 0041 00000000 0x0 0x0
0xffff86800001f148 0041 00000000 0x0 0x0
0xffff86800001f1c0 0041 00000000 0x0 0x0
0xffff86800001f238 0041 00000000 0x0 0x0
0xffff86800001f2b0 0041 00000000 0x0 0x0
0xffff86800001f328 0041 00000000 0x0 0x0
0xffff86800001f3a0 0041 00000000 0x0 0x0
0xffff86800001f418 0041 00000000 0x0 0x0
0xffff86800001f490 0041 00000000 0x0 0x0
0xffff86800001f508 0041 00000000 0x0 0x0
0xffff86800001f580 0041 00000000 0x0 0x0
0xffff86800001f5f8 0041 00000000 0x0 0x0
0xffff86800001f670 0041 00000000 0x0 0x0
0xffff86800001f6e8 0041 00000000 0x0 0x0
0xffff86800001f760 0041 00000000 0x0 0x0
0xffff86800001f7d8 0041 00000000 0x0 0x0
0xffff86800001f850 0041 00000000 0x0 0x0
0xffff86800001f8c8 0041 00000000 0x0 0x0
0xffff86800001f940 0041 00000000 0x0 0x0
0xffff86800001f9b8 0041 00000000 0x0 0x0
0xffff86800001fa30 0041 00000000 0x0 0x0
0xffff86800001faa8 0041 00000000 0x0 0x0
0xffff86800001fb20 0041 00000000 0x0 0x0
0xffff86800001fb98 0041 00000000 0x0 0x0
0xffff86800001fc10 0041 00000000 0x0 0x0
0xffff86800001fc88 0041 00000000 0x0 0x0
0xffff86800001fd00 0041 00000000 0x0 0x0
0xffff86800001fd78 0041 00000000 0x0 0x0
0xffff86800001fdf0 0041 00000000 0x0 0x0
0xffff86800001fe68 0041 00000000 0x0 0x0
0xffff86800001fee0 0041 00000000 0x0 0x0
0xffff86800001ff58 0041 00000000 0x0 0x0
0xffff86800001ffd0 0041 00000000 0x0 0x0
0xffff868000020048 0041 00000000 0x0 0x0
0xffff8680000200c0 0041 00000000 0x0 0x0
0xffff868000020138 0041 00000000 0x0 0x0
0xffff8680000201b0 0041 00000000 0x0 0x0
0xffff868000020228 0041 00000000 0x0 0x0
0xffff8680000202a0 0041 00000000 0x0 0x0
0xffff868000020318 0041 00000000 0x0 0x0
0xffff868000020390 0041 00000000 0x0 0x0
0xffff868000020408 0041 00000000 0x0 0x0
0xffff868000020480 0041 00000000 0x0 0x0
0xffff8680000204f8 0041 00000000 0x0 0x0
0xffff868000020570 0041 00000000 0x0 0x0
0xffff8680000205e8 0041 00000000 0x0 0x0
0xffff868000020660 0041 00000000 0x0 0x0
0xffff8680000206d8 0041 00000000 0x0 0x0
0xffff868000020750 0041 00000000 0x0 0x0
0xffff8680000207c8 0041 00000000 0x0 0x0
0xffff868000020840 0041 00000000 0x0 0x0
0xffff8680000208b8 0041 00000000 0x0 0x0
0xffff868000020930 0041 00000000 0x0 0x0
0xffff8680000209a8 0041 00000000 0x0 0x0
0xffff868000020a20 0041 00000000 0x0 0x0
0xffff868000020a98 0041 00000000 0x0 0x0
0xffff868000020b10 0041 00000000 0x0 0x0
0xffff868000020b88 0041 00000000 0x0 0x0
0xffff868000020c00 0041 00000000 0x0 0x0
0xffff868000020c78 0041 00000000 0x0 0x0
0xffff868000020cf0 0041 00000000 0x0 0x0
0xffff868000020d68 0041 00000000 0x0 0x0
0xffff868000020de0 0041 00000000 0x0 0x0
0xffff868000020e58 0041 00000000 0x0 0x0
0xffff868000020ed0 0041 00000000 0x0 0x0
0xffff868000020f48 0041 00000000 0x0 0x0
0xffff868000020fc0 0041 00000000 0x0 0x0
0xffff868000021038 0041 00000000 0x0 0x0
0xffff8680000210b0 0041 00000000 0x0 0x0
0xffff868000021128 0041 00000000 0x0 0x0
0xffff8680000211a0 0041 00000000 0x0 0x0
0xffff868000021218 0041 00000000 0x0 0x0
0xffff868000021290 0041 00000000 0x0 0x0
0xffff868000021308 0041 00000000 0x0 0x0
0xffff868000021380 0041 00000000 0x0 0x0
0xffff8680000213f8 0041 00000000 0x0 0x0
0xffff868000021470 0041 00000000 0x0 0x0
0xffff8680000214e8 0041 00000000 0x0 0x0
0xffff868000021560 0041 00000000 0x0 0x0
0xffff8680000215d8 0041 00000000 0x0 0x0
0xffff868000021650 0041 00000000 0x0 0x0
0xffff8680000216c8 0041 00000000 0x0 0x0
0xffff868000021740 0041 00000000 0x0 0x0
0xffff8680000217b8 0041 00000000 0x0 0x0
0xffff868000021830 0041 00000000 0x0 0x0
0xffff8680000218a8 0041 00000000 0x0 0x0
0xffff868000021920 0041 00000000 0x0 0x0
0xffff868000021998 0041 00000000 0x0 0x0
0xffff868000021a10 0041 00000000 0x0 0x0
0xffff868000021a88 0041 00000000 0x0 0x0
0xffff868000021b00 0041 00000000 0x0 0x0
0xffff868000021b78 0041 00000000 0x0 0x0
0xffff868000021bf0 0041 00000000 0x0 0x0
0xffff868000021c68 0041 00000000 0x0 0x0
0xffff868000021ce0 0041 00000000 0x0 0x0
0xffff868000021d58 0041 00000000 0x0 0x0
0xffff868000021dd0 0041 00000000 0x0 0x0
0xffff868000021e48 0041 00000000 0x0 0x0
0xffff868000021ec0 0041 00000000 0x0 0x0
0xffff868000021f38 0041 00000000 0x0 0x0
0xffff868000021fb0 0041 00000000 0x0 0x0
0xffff868000022028 0041 00000000 0x0 0x0
0xffff8680000220a0 0041 00000000 0x0 0x0
0xffff868000022118 0041 00000000 0x0 0x0
0xffff868000022190 0041 00000000 0x0 0x0
0xffff868000022208 0041 00000000 0x0 0x0
0xffff868000022280 0041 00000000 0x0 0x0
0xffff8680000222f8 0041 00000000 0x0 0x0
0xffff868000022370 0041 00000000 0x0 0x0
0xffff8680000223e8 0041 00000000 0x0 0x0
0xffff868000022460 0041 00000000 0x0 0x0
0xffff8680000224d8 0041 00000000 0x0 0x0
0xffff868000022550 0041 00000000 0x0 0x0
0xffff8680000225c8 0041 00000000 0x0 0x0
0xffff868000022640 0041 00000000 0x0 0x0
0xffff8680000226b8 0041 00000000 0x0 0x0
0xffff868000022730 0041 00000000 0x0 0x0
0xffff8680000227a8 0041 00000000 0x0 0x0
0xffff868000022820 0041 00000000 0x0 0x0
0xffff868000022898 0041 00000000 0x0 0x0
0xffff868000022910 0041 00000000 0x0 0x0
0xffff868000022988 0041 00000000 0x0 0x0
0xffff868000022a00 0041 00000000 0x0 0x0
0xffff868000022a78 0041 00000000 0x0 0x0
0xffff868000022af0 0041 00000000 0x0 0x0
0xffff868000022b68 0041 00000000 0x0 0x0
0xffff868000022be0 0041 00000000 0x0 0x0
0xffff868000022c58 0041 00000000 0x0 0x0
0xffff868000022cd0 0041 00000000 0x0 0x0
0xffff868000022d48 0041 00000000 0x0 0x0
0xffff868000022dc0 0041 00000000 0x0 0x0
0xffff868000022e38 0041 00000000 0x0 0x0
0xffff868000022eb0 0041 00000000 0x0 0x0
0xffff868000022f28 0041 00000000 0x0 0x0
0xffff868000022fa0 0041 00000000 0x0 0x0
0xffff868000023018 0041 00000000 0x0 0x0
0xffff868000023090 0041 00000000 0x0 0x0
0xffff868000023108 0041 00000000 0x0 0x0
0xffff868000023180 0041 00000000 0x0 0x0
0xffff8680000231f8 0041 00000000 0x0 0x0
0xffff868000023270 0041 00000000 0x0 0x0
0xffff8680000232e8 0041 00000000 0x0 0x0
0xffff868000023360 0041 00000000 0x0 0x0
0xffff8680000233d8 0041 00000000 0x0 0x0
0xffff868000023450 0041 00000000 0x0 0x0
0xffff8680000234c8 0041 00000000 0x0 0x0
0xffff868000023540 0041 00000000 0x0 0x0
0xffff8680000235b8 0041 00000000 0x0 0x0
0xffff868000023630 0041 00000000 0x0 0x0
0xffff8680000236a8 0041 00000000 0x0 0x0
0xffff868000023720 0041 00000000 0x0 0x0
0xffff868000023798 0041 00000000 0x0 0x0
0xffff868000023810 0041 00000000 0x0 0x0
0xffff868000023888 0041 00000000 0x0 0x0
0xffff868000023900 0041 00000000 0x0 0x0
0xffff868000023978 0041 00000000 0x0 0x0
0xffff8680000239f0 0041 00000000 0x0 0x0
0xffff868000023a68 0041 00000000 0x0 0x0
0xffff868000023ae0 0041 00000000 0x0 0x0
0xffff868000023b58 0041 00000000 0x0 0x0
0xffff868000023bd0 0041 00000000 0x0 0x0
0xffff868000023c48 0041 00000000 0x0 0x0
0xffff868000023cc0 0041 00000000 0x0 0x0
0xffff868000023d38 0041 00000000 0x0 0x0
0xffff868000023db0 0041 00000000 0x0 0x0
0xffff868000023e28 0041 00000000 0x0 0x0
0xffff868000023ea0 0041 00000000 0x0 0x0
0xffff868000023f18 0041 00000000 0x0 0x0
0xffff868000023f90 0041 00000000 0x0 0x0
0xffff868000024008 0041 00000000 0x0 0x0
0xffff868000024080 0041 00000000 0x0 0x0
0xffff8680000240f8 0041 00000000 0x0 0x0
0xffff868000024170 0041 00000000 0x0 0x0
0xffff8680000241e8 0041 00000000 0x0 0x0
0xffff868000024260 0041 00000000 0x0 0x0
0xffff8680000242d8 0041 00000000 0x0 0x0
0xffff868000024350 0041 00000000 0x0 0x0
0xffff8680000243c8 0041 00000000 0x0 0x0
0xffff868000024440 0041 00000000 0x0 0x0
0xffff8680000244b8 0041 00000000 0x0 0x0
0xffff868000024530 0041 00000000 0x0 0x0
0xffff8680000245a8 0041 00000000 0x0 0x0
0xffff868000024620 0041 00000000 0x0 0x0
0xffff868000024698 0041 00000000 0x0 0x0
0xffff868000024710 0041 00000000 0x0 0x0
0xffff868000024788 0041 00000000 0x0 0x0
0xffff868000024800 0041 00000000 0x0 0x0
0xffff868000024878 0041 00000000 0x0 0x0
0xffff8680000248f0 0041 00000000 0x0 0x0
0xffff868000024968 0041 00000000 0x0 0x0
0xffff8680000249e0 0041 00000000 0x0 0x0
0xffff868000024a58 0041 00000000 0x0 0x0
0xffff868000024ad0 0041 00000000 0x0 0x0
0xffff868000024b48 0041 00000000 0x0 0x0
0xffff868000024bc0 0041 00000000 0x0 0x0
0xffff868000024c38 0041 00000000 0x0 0x0
0xffff868000024cb0 0041 00000000 0x0 0x0
0xffff868000024d28 0041 00000000 0x0 0x0
0xffff868000024da0 0041 00000000 0x0 0x0
0xffff868000024e18 0041 00000000 0x0 0x0
0xffff868000024e90 0041 00000000 0x0 0x0
0xffff868000024f08 0041 00000000 0x0 0x0
0xffff868000024f80 0041 00000000 0x0 0x0
0xffff868000024ff8 0041 00000000 0x0 0x0
0xffff868000025070 0041 00000000 0x0 0x0
0xffff8680000250e8 0041 00000000 0x0 0x0
0xffff868000025160 0041 00000000 0x0 0x0
0xffff8680000251d8 0041 00000000 0x0 0x0
0xffff868000025250 0041 00000000 0x0 0x0
0xffff8680000252c8 0041 00000000 0x0 0x0
0xffff868000025340 0041 00000000 0x0 0x0
0xffff8680000253b8 0041 00000000 0x0 0x0
0xffff868000025430 0041 00000000 0x0 0x0
0xffff8680000254a8 0041 00000000 0x0 0x0
0xffff868000025520 0041 00000000 0x0 0x0
0xffff868000025598 0041 00000000 0x0 0x0
0xffff868000025610 0041 00000000 0x0 0x0
0xffff868000025688 0041 00000000 0x0 0x0
0xffff868000025700 0041 00000000 0x0 0x0
0xffff868000025778 0041 00000000 0x0 0x0
0xffff8680000257f0 0041 00000000 0x0 0x0
0xffff868000025868 0041 00000000 0x0 0x0
0xffff8680000258e0 0041 00000000 0x0 0x0
0xffff868000025958 0041 00000000 0x0 0x0
0xffff8680000259d0 0041 00000000 0x0 0x0
0xffff868000025a48 0041 00000000 0x0 0x0
0xffff868000025ac0 0041 00000000 0x0 0x0
0xffff868000025b38 0041 00000000 0x0 0x0
0xffff868000025bb0 0041 00000000 0x0 0x0
0xffff868000025c28 0041 00000000 0x0 0x0
0xffff868000025ca0 0041 00000000 0x0 0x0
0xffff868000025d18 0041 00000000 0x0 0x0
0xffff868000025d90 0041 00000000 0x0 0x0
0xffff868000025e08 0041 00000000 0x0 0x0
0xffff868000025e80 0041 00000000 0x0 0x0
0xffff868000025ef8 0041 00000000 0x0 0x0
0xffff868000025f70 0041 00000000 0x0 0x0
0xffff868000025fe8 0041 00000000 0x0 0x0
0xffff868000026060 0041 00000000 0x0 0x0
0xffff8680000260d8 0041 00000000 0x0 0x0
0xffff868000026150 0041 00000000 0x0 0x0
0xffff8680000261c8 0041 00000000 0x0 0x0
0xffff868000026240 0041 00000000 0x0 0x0
0xffff8680000262b8 0041 00000000 0x0 0x0
0xffff868000026330 0041 00000000 0x0 0x0
0xffff8680000263a8 0041 00000000 0x0 0x0
0xffff868000026420 0041 00000000 0x0 0x0
0xffff868000026498 0041 00000000 0x0 0x0
0xffff868000026510 0041 00000000 0x0 0x0
0xffff868000026588 0041 00000000 0x0 0x0
0xffff868000026600 0041 00000000 0x0 0x0
0xffff868000026678 0041 00000000 0x0 0x0
0xffff8680000266f0 0041 00000000 0x0 0x0
0xffff868000026768 0041 00000000 0x0 0x0
0xffff8680000267e0 0041 00000000 0x0 0x0
0xffff868000026858 0041 00000000 0x0 0x0
0xffff8680000268d0 0041 00000000 0x0 0x0
0xffff868000026948 0041 00000000 0x0 0x0
0xffff8680000269c0 0041 00000000 0x0 0x0
0xffff868000026a38 0041 00000000 0x0 0x0
0xffff868000026ab0 0041 00000000 0x0 0x0
0xffff868000026b28 0041 00000000 0x0 0x0
0xffff868000026ba0 0041 00000000 0x0 0x0
0xffff868000026c18 0041 00000000 0x0 0x0
0xffff868000026c90 0041 00000000 0x0 0x0
0xffff868000026d08 0041 00000000 0x0 0x0
0xffff868000026d80 0041 00000000 0x0 0x0
0xffff868000026df8 0041 00000000 0x0 0x0
0xffff868000026e70 0041 00000000 0x0 0x0
0xffff868000026ee8 0041 00000000 0x0 0x0
0xffff868000026f60 0041 00000000 0x0 0x0
0xffff868000026fd8 0041 00000000 0x0 0x0
0xffff868000027050 0041 00000000 0x0 0x0
0xffff8680000270c8 0041 00000000 0x0 0x0
0xffff868000027140 0041 00000000 0x0 0x0
0xffff8680000271b8 0041 00000000 0x0 0x0
0xffff868000027230 0041 00000000 0x0 0x0
0xffff8680000272a8 0041 00000000 0x0 0x0
0xffff868000027320 0041 00000000 0x0 0x0
0xffff868000027398 0041 00000000 0x0 0x0
0xffff868000027410 0041 00000000 0x0 0x0
0xffff868000027488 0041 00000000 0x0 0x0
0xffff868000027500 0041 00000000 0x0 0x0
0xffff868000027578 0041 00000000 0x0 0x0
0xffff8680000275f0 0041 00000000 0x0 0x0
0xffff868000027668 0041 00000000 0x0 0x0
0xffff8680000276e0 0041 00000000 0x0 0x0
0xffff868000027758 0041 00000000 0x0 0x0
0xffff8680000277d0 0041 00000000 0x0 0x0
0xffff868000027848 0041 00000000 0x0 0x0
0xffff8680000278c0 0041 00000000 0x0 0x0
0xffff868000027938 0041 00000000 0x0 0x0
0xffff8680000279b0 0041 00000000 0x0 0x0
0xffff868000027a28 0041 00000000 0x0 0x0
0xffff868000027aa0 0041 00000000 0x0 0x0
0xffff868000027b18 0041 00000000 0x0 0x0
0xffff868000027b90 0041 00000000 0x0 0x0
0xffff868000027c08 0041 00000000 0x0 0x0
0xffff868000027c80 0041 00000000 0x0 0x0
0xffff868000027cf8 0041 00000000 0x0 0x0
0xffff868000027d70 0041 00000000 0x0 0x0
0xffff868000027de8 0041 00000000 0x0 0x0
0xffff868000027e60 0041 00000000 0x0 0x0
0xffff868000027ed8 0041 00000000 0x0 0x0
0xffff868000027f50 0041 00000000 0x0 0x0
0xffff868000027fc8 0041 00000000 0x0 0x0
0xffff868000028040 0041 00000000 0x0 0x0
0xffff8680000280b8 0041 00000000 0x0 0x0
0xffff868000028130 0041 00000000 0x0 0x0
0xffff8680000281a8 0041 00000000 0x0 0x0
0xffff868000028220 0041 00000000 0x0 0x0
0xffff868000028298 0041 00000000 0x0 0x0
0xffff868000028310 0041 00000000 0x0 0x0
0xffff868000028388 0041 00000000 0x0 0x0
0xffff868000028400 0041 00000000 0x0 0x0
0xffff868000028478 0041 00000000 0x0 0x0
0xffff8680000284f0 0041 00000000 0x0 0x0
0xffff868000028568 0041 00000000 0x0 0x0
0xffff8680000285e0 0041 00000000 0x0 0x0
0xffff868000028658 0041 00000000 0x0 0x0
0xffff8680000286d0 0041 00000000 0x0 0x0
0xffff868000028748 0041 00000000 0x0 0x0
0xffff8680000287c0 0041 00000000 0x0 0x0
0xffff868000028838 0041 00000000 0x0 0x0
0xffff8680000288b0 0041 00000000 0x0 0x0
0xffff868000028928 0041 0000000

---
This bug is generated by a bot. It may contain errors.
See https://goo.gl/tpsmEJ for more information about syzbot.
syzbot engineers can be reached at syzk...@googlegroups.com.

syzbot will keep track of this bug report. See:
https://goo.gl/tpsmEJ#status for how to communicate with syzbot.

syzbot

unread,
Feb 22, 2020, 12:01:17 PM2/22/20
to syzkaller-...@googlegroups.com
syzbot has found a reproducer for the following crash on:

HEAD commit: 5d6e8781 Update AUDIO_SETINFO_channels test. The kernel li..
git tree: netbsd
console output: https://syzkaller.appspot.com/x/log.txt?x=15581c81e00000
kernel config: https://syzkaller.appspot.com/x/.config?x=9544af77043190a5
dashboard link: https://syzkaller.appspot.com/bug?extid=3e7f116fce8bcdfd49d5
compiler: clang version 3.8.0-2ubuntu4 (tags/RELEASE_380/final)
syz repro: https://syzkaller.appspot.com/x/repro.syz?x=14b7774ee00000
C reproducer: https://syzkaller.appspot.com/x/repro.c?x=10f361dde00000

IMPORTANT: if you fix the bug, please add the following tag to the commit:
Reported-by: syzbot+3e7f11...@syzkaller.appspotmail.com

[ 84.0241473] panic: MSan: Uninitialized Kmem Memory From sys__lwp_setname()

[ 84.0352300] cpu1: Begin traceback...
[ 84.0574758] vpanic() at netbsd:vpanic+0x7c1 sys/kern/subr_prf.c:334
[ 84.1243073] panic() at netbsd:panic+0x1ad sys/kern/subr_prf.c:255
[ 84.1799956] __msan_warning() at netbsd:__msan_warning+0xe7 kmsan_report_inline sys/kern/subr_msan.c:236 [inline]
[ 84.1799956] __msan_warning() at netbsd:__msan_warning+0xe7 sys/kern/subr_msan.c:612
[ 84.2468267] strlcpy() at netbsd:strlcpy+0x1ce sys/lib/libkern/../../../common/lib/libc/string/strlcpy.c:66
[ 84.3025210] sys__lwp_getname() at netbsd:sys__lwp_getname+0x2af sys/kern/sys_lwp.c:733
[ 84.3582098] sys_syscall() at netbsd:sys_syscall+0x27b sys/kern/sys_syscall.c:77
[ 84.4250413] syscall() at netbsd:syscall+0x35d sy_call sys/sys/syscallvar.h:65 [inline]
[ 84.4250413] syscall() at netbsd:syscall+0x35d sy_invoke sys/sys/syscallvar.h:94 [inline]
[ 84.4250413] syscall() at netbsd:syscall+0x35d sys/arch/x86/x86/syscall.c:138
[ 84.4473189] --- syscall (number 0) ---
[ 84.4695932] 772bce6e4b5a:
[ 84.4695932] cpu1: End traceback...
[ 84.4695932] fatal breakpoint trap in supervisor mode
[ 84.4807296] trap type 1 code 0 rip 0xffffffff8022025d cs 0x8 rflags 0x246 cr2 0x20000240 ilevel 0x8 rsp 0xffffa28079d179e0
[ 84.4918595] curlwp 0xffffa280120ed480 pid 454.1 lowest kstack 0xffffa28079d102c0
Stopped in pid 454.1 (syz-executor0176) at netbsd:breakpoint+0x5: leave
?
breakpoint() at netbsd:breakpoint+0x5
vpanic() at netbsd:vpanic+0x7c1 sys/kern/subr_prf.c:334
panic() at netbsd:panic+0x1ad sys/kern/subr_prf.c:255
__msan_warning() at netbsd:__msan_warning+0xe7 kmsan_report_inline sys/kern/subr_msan.c:236 [inline]
__msan_warning() at netbsd:__msan_warning+0xe7 sys/kern/subr_msan.c:612
strlcpy() at netbsd:strlcpy+0x1ce sys/lib/libkern/../../../common/lib/libc/string/strlcpy.c:66
sys__lwp_getname() at netbsd:sys__lwp_getname+0x2af sys/kern/sys_lwp.c:733
sys_syscall() at netbsd:sys_syscall+0x27b sys/kern/sys_syscall.c:77
syscall() at netbsd:syscall+0x35d sy_call sys/sys/syscallvar.h:65 [inline]
syscall() at netbsd:syscall+0x35d sy_invoke sys/sys/syscallvar.h:94 [inline]
syscall() at netbsd:syscall+0x35d sys/arch/x86/x86/syscall.c:138
--- syscall (number 0) ---
772bce6e4b5a:
ds 79d0
es 0
fs 1f3c
gs 104
rdi ffffa280120ed738
rsi ffffc40000000000
rbp ffffa28079d179e0
rbx 0
rdx ffff8100120ed738
rcx 0
rax 0
r8 0
r9 0
r10 0
r11 0
r12 0
r13 104
r14 1f3c
r15 0
rip ffffffff8022025d breakpoint+0x5
cs 8
rflags 246
rsp ffffa28079d179e0
ss 10
netbsd:breakpoint+0x5: leave
PID LID S CPU FLAGS STRUCT LWP * NAME WAIT
414 1 2 0 0 ffffa2801210a4c0 syz-executor0176
593 1 2 0 0 ffffa2801210a080 syz-executor0176
601 1 2 1 0 ffffa280120ed8c0 syz-executor0176
454 > 1 7 1 0 ffffa280120ed480 >k![-=37
596 1 2 1 0 ffffa280120ed040 syz-executor0176
556 1 2 0 0 ffffa28010814a40 syz-executor0176
45 1 2 0 0 ffffa28010814600 syz-executor0176
566 1 2 0 0 ffffa280108141c0 syz-executor0176
41 1 2 0 0 ffffa28011cc2bc0 syz-executor0176
40 1 2 1 0 ffffa28011cc2780 syz-executor0176
498 1 2 0 0 ffffa2801137ea80 syz-executor0176
559 1 3 1 80 ffffa280113a5700 syz-executor0176 nanoslp
535 1 3 0 80 ffffa280113489c0 sshd select
419 1 3 0 80 ffffa28011399280 getty nanoslp
549 1 3 0 80 ffffa2800febe6c0 getty nanoslp
458 1 3 1 80 ffffa2801138c680 getty nanoslp
506 1 3 1 80 ffffa280113a52c0 getty ttyraw
571 1 3 1 80 ffffa28011cc2340 cron nanoslp
540 1 3 0 80 ffffa2801128b8c0 inetd kqueue
445 1 3 0 80 ffffa28010bc1a00 sshd select
479 1 3 1 80 ffffa28010af01c0 powerd kqueue
467 1 2 0 40000 ffffa28010a6c940 makemandb
336 1 3 1 80 ffffa280111f5b40 syslogd kqueue
267 1 3 0 80 ffffa28010b5b040 dhcpcd kqueue
238 1 3 1 80 ffffa28010a6c0c0 dhcpcd kqueue
1 1 3 1 80 ffffa28010561540 init wait
0 44 3 0 204 ffffa28010713140 physiod physiod
0 48 3 0 204 ffffa28010715180 pooldrain pooldrain
0 47 2 0 200 ffffa280107139c0 ioflush
0 46 3 1 200 ffffa28010713580 pgdaemon pgdaemon
0 29 2 0 200 ffffa2800febe280 npfgc-0
0 43 3 1 204 ffffa28010561100 rt_free rt_free
0 42 3 1 204 ffffa2801055b940 unpgc unpgc
0 41 3 1 204 ffffa2801055b500 key_timehandler key_timehandler
0 40 3 1 204 ffffa2801055b0c0 icmp6_wqinput/1 icmp6_wqinput
0 39 3 0 204 ffffa28010553900 icmp6_wqinput/0 icmp6_wqinput
0 38 3 0 204 ffffa280105534c0 nd6_timer nd6_timer
0 37 3 1 204 ffffa28010553080 carp6_wqinput/1 carp6_wqinput
0 36 3 0 204 ffffa280105518c0 carp6_wqinput/0 carp6_wqinput
0 35 3 1 204 ffffa28010551480 carp_wqinput/1 carp_wqinput
0 34 3 0 204 ffffa28010551040 carp_wqinput/0 carp_wqinput
0 33 3 1 204 ffffa280103a7bc0 icmp_wqinput/1 icmp_wqinput
0 32 3 0 204 ffffa280103a7780 icmp_wqinput/0 icmp_wqinput
0 31 3 0 204 ffffa280103a7340 rt_timer rt_timer
0 30 3 0 204 ffffa28010393300 vmem_rehash vmem_rehash
0 28 3 0 204 ffffa2800eb32ac0 scsibus0 sccomp
0 27 3 0 200 ffffa2800eb32680 pms0 pmsreset
0 26 3 1 204 ffffa2800eb32240 xcall/1 xcall
0 25 1 1 200 ffffa2800eb30a80 softser/1
0 24 1 1 200 ffffa2800eb30640 softclk/1
0 23 1 1 200 ffffa2800eb30200 softbio/1
0 22 1 1 200 ffffa2800d545a40 softnet/1
0 21 1 1 201 ffffa2800d545600 idle/1
0 20 3 0 204 ffffa2800d5451c0 lnxpwrwq lnxpwrwq
0 19 3 0 204 ffffa2800d544a00 lnxlngwq lnxlngwq
0 18 3 0 204 ffffa2800d5445c0 lnxsyswq lnxsyswq
0 17 3 0 204 ffffa2800d544180 lnxrcugc lnxrcugc
0 16 3 0 204 ffffa2800d53f9c0 sysmon smtaskq
0 15 3 0 204 ffffa2800d53f580 pmfsuspend pmfsuspend
0 14 3 0 204 ffffa2800d53f140 pmfevent pmfevent
0 13 3 0 204 ffffa2800d535980 sopendfree sopendfr
0 12 3 1 204 ffffa2800d535540 iflnkst iflnkst
0 11 3 0 204 ffffa2800d535100 nfssilly nfssilly
0 10 3 0 200 ffffa2800d52c940 cachegc cachegc
0 9 3 0 204 ffffa2800d52c500 vdrain vdrain
0 8 3 0 200 ffffa2800d52c0c0 modunload mod_unld
0 7 3 0 204 ffffa2800cf65900 xcall/0 xcall
0 6 1 0 200 ffffa2800cf654c0 softser/0
0 5 1 0 200 ffffa2800cf65080 softclk/0
0 4 1 0 200 ffffa2800cf608c0 softbio/0
0 3 1 0 200 ffffa2800cf60480 softnet/0
0 2 1 0 201 ffffa2800cf60040 idle/0
0 > 1 7 0 200 ffffffff859a3b40 swapper
[Locks tracked through LWPs]

****** LWP 454.1 (>k![-=37) @ 0xffffa280120ed480, l_stat=7

*** Locks held:

* Lock 0 (initialized at fork1)
lock address : 0xffffa280120db640 type : sleep/adaptive
initialized : 0xffffffff833fda94
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 1
relevant lwp : 0xffffa280120ed480 last held: 0xffffa280120ed480
last locked* : 0xffffffff836a28e9 unlocked : 0xffffffff836a24e3
owner field : 0xffffa280120ed480 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

*** Locks wanted: none

****** LWP 596.1 (syz-executor0176) @ 0xffffa280120ed040, l_stat=2

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at uvm_obj_init)
lock address : 0xffffa28010726300 type : sleep/adaptive
initialized : 0xffffffff832ee25e
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 1
relevant cpu : 1 last held: 0
relevant lwp : 0xffffa280120ed040 last held: 000000000000000000
last locked : 0xffffffff83284679 unlocked*: 0xffffffff832921de
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 556.1 (syz-executor0176) @ 0xffffa28010814a40, l_stat=2

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at pool_cache_bootstrap)
lock address : 0xffffa2800cf68600 type : sleep/adaptive
initialized : 0xffffffff8362073f
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 1
relevant cpu : 0 last held: 0
relevant lwp : 0xffffa28010814a40 last held: 000000000000000000
last locked : 0xffffffff836258a3 unlocked*: 0xffffffff83625fce
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 566.1 (syz-executor0176) @ 0xffffa280108141c0, l_stat=2

*** Locks held:

* Lock 0 (initialized at lwp_ctl_alloc)
lock address : 0xffffa28011b77888 type : sleep/adaptive
initialized : 0xffffffff834383c1
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 1
relevant lwp : 0xffffa280108141c0 last held: 0xffffa280108141c0
last locked* : 0xffffffff83438551 unlocked : 000000000000000000
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

*** Locks wanted: none

****** LWP 41.1 (syz-executor0176) @ 0xffffa28011cc2bc0, l_stat=2

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at uvmspace_fork)
lock address : 0xffffa2801120da60 type : sleep/adaptive
initialized : 0xffffffff832d581f
shared holds : 0 exclusive: 0
shares wanted: 1 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffffa28011cc2bc0 last held: 000000000000000000
last locked : 0xffffffff832a4cdf unlocked*: 0xffffffff83286940
owner/count : 000000000000000000 flags : 000000000000000000
Turnstile: no active turnstile for this lock.

****** LWP 40.1 (syz-executor0176) @ 0xffffa28011cc2780, l_stat=2

*** Locks held:

* Lock 0 (initialized at uvmspace_fork)
lock address : 0xffffa2801135eb80 type : sleep/adaptive
initialized : 0xffffffff832d581f
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 1
relevant lwp : 0xffffa28011cc2780 last held: 0xffffa28011cc2780
last locked* : 0xffffffff832a4cdf unlocked : 0xffffffff8328610c
owner/count : 0xffffa28011cc2780 flags : 0x0000000000000004
Turnstile: no active turnstile for this lock.

*** Locks wanted: none

****** LWP 0.12 (iflnkst) @ 0xffffa2800d535540, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at module_hook_init)
lock address : 0xffffffff85a5d440 type : sleep/adaptive
initialized : 0xffffffff8344fdf3
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 0
relevant lwp : 0xffffa2800d535540 last held: 000000000000000000
last locked : 000000000000000000 unlocked*: 000000000000000000
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 0.5 (softclk/0) @ 0xffffa2800cf65080, l_stat=1

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at module_hook_init)
lock address : 0xffffffff85a5d440 type : sleep/adaptive
initialized : 0xffffffff8344fdf3
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffffa2800cf65080 last held: 000000000000000000
last locked : 000000000000000000 unlocked*: 000000000000000000
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

[Locks tracked through CPUs]

******* Locks held on cpu1:

* Lock 0 (initialized at sched_cpuattach)
lock address : 0xffffa2800cf443c0 type : spin
initialized : 0xffffffff834bb149
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 1
relevant lwp : 0xffffa280120ed480 last held: 0xffffa280120ed480
last locked* : 0xffffffff836a298b unlocked : 0xffffffff836a24ac
owner field : 0x0000000000010700 wait/spin: 0/1

PAGE FLAG PQ UOBJECT UANON
0xffffa28000014180 0041 00000000 0x0 0x0
0xffffa280000141f8 0041 00000000 0x0 0x0
0xffffa28000014270 0041 00000000 0x0 0x0
0xffffa280000142e8 0041 00000000 0x0 0x0
0xffffa28000014360 0041 00000000 0x0 0x0
0xffffa280000143d8 0041 00000000 0x0 0x0
0xffffa28000014450 0041 00000000 0x0 0x0
0xffffa280000144c8 0041 00000000 0x0 0x0
0xffffa28000014540 0041 00000000 0x0 0x0
0xffffa280000145b8 0041 00000000 0x0 0x0
0xffffa28000014630 0041 00000000 0x0 0x0
0xffffa280000146a8 0041 00000000 0x0 0x0
0xffffa28000014720 0041 00000000 0x0 0x0
0xffffa28000014798 0041 00000000 0x0 0x0
0xffffa28000014810 0041 00000000 0x0 0x0
0xffffa28000014888 0041 00000000 0x0 0x0
0xffffa28000014900 0041 00000000 0x0 0x0
0xffffa28000014978 0041 00000000 0x0 0x0
0xffffa280000149f0 0041 00000000 0x0 0x0
0xffffa28000014a68 0041 00000000 0x0 0x0
0xffffa28000014ae0 0041 00000000 0x0 0x0
0xffffa28000014b58 0041 00000000 0x0 0x0
0xffffa28000014bd0 0041 00000000 0x0 0x0
0xffffa28000014c48 0041 00000000 0x0 0x0
0xffffa28000014cc0 0041 00000000 0x0 0x0
0xffffa28000014d38 0041 00000000 0x0 0x0
0xffffa28000014db0 0041 00000000 0x0 0x0
0xffffa28000014e28 0041 00000000 0x0 0x0
0xffffa28000014ea0 0041 00000000 0x0 0x0
0xffffa28000014f18 0041 00000000 0x0 0x0
0xffffa28000014f90 0041 00000000 0x0 0x0
0xffffa28000015008 0041 00000000 0x0 0x0
0xffffa28000015080 0041 00000000 0x0 0x0
0xffffa280000150f8 0041 00000000 0x0 0x0
0xffffa28000015170 0041 00000000 0x0 0x0
0xffffa280000151e8 0041 00000000 0x0 0x0
0xffffa28000015260 0041 00000000 0x0 0x0
0xffffa280000152d8 0041 00000000 0x0 0x0
0xffffa28000015350 0041 00000000 0x0 0x0
0xffffa280000153c8 0041 00000000 0x0 0x0
0xffffa28000015440 0041 00000000 0x0 0x0
0xffffa280000154b8 0041 00000000 0x0 0x0
0xffffa28000015530 0041 00000000 0x0 0x0
0xffffa280000155a8 0041 00000000 0x0 0x0
0xffffa28000015620 0041 00000000 0x0 0x0
0xffffa28000015698 0041 00000000 0x0 0x0
0xffffa28000015710 0041 00000000 0x0 0x0
0xffffa28000015788 0041 00000000 0x0 0x0
0xffffa28000015800 0041 00000000 0x0 0x0
0xffffa28000015878 0041 00000000 0x0 0x0
0xffffa280000158f0 0041 00000000 0x0 0x0
0xffffa28000015968 0041 00000000 0x0 0x0
0xffffa280000159e0 0041 00000000 0x0 0x0
0xffffa28000015a58 0041 00000000 0x0 0x0
0xffffa28000015ad0 0041 00000000 0x0 0x0
0xffffa28000015b48 0041 00000000 0x0 0x0
0xffffa28000015bc0 0041 00000000 0x0 0x0
0xffffa28000015c38 0041 00000000 0x0 0x0
0xffffa28000015cb0 0041 00000000 0x0 0x0
0xffffa28000015d28 0041 00000000 0x0 0x0
0xffffa28000015da0 0041 00000000 0x0 0x0
0xffffa28000015e18 0041 00000000 0x0 0x0
0xffffa28000015e90 0041 00000000 0x0 0x0
0xffffa28000015f08 0041 00000000 0x0 0x0
0xffffa28000015f80 0041 00000000 0x0 0x0
0xffffa28000015ff8 0041 00000000 0x0 0x0
0xffffa28000016070 0041 00000000 0x0 0x0
0xffffa280000160e8 0041 00000000 0x0 0x0
0xffffa28000016160 0041 00000000 0x0 0x0
0xffffa280000161d8 0041 00000000 0x0 0x0
0xffffa28000016250 0041 00000000 0x0 0x0
0xffffa280000162c8 0041 00000000 0x0 0x0
0xffffa28000016340 0041 00000000 0x0 0x0
0xffffa280000163b8 0041 00000000 0x0 0x0
0xffffa28000016430 0041 00000000 0x0 0x0
0xffffa280000164a8 0041 00000000 0x0 0x0
0xffffa28000016520 0041 00000000 0x0 0x0
0xffffa28000016598 0041 00000000 0x0 0x0
0xffffa28000016610 0041 00000000 0x0 0x0
0xffffa28000016688 0041 00000000 0x0 0x0
0xffffa28000016700 0041 00000000 0x0 0x0
0xffffa28000016778 0041 00000000 0x0 0x0
0xffffa280000167f0 0041 00000000 0x0 0x0
0xffffa28000016868 0041 00000000 0x0 0x0
0xffffa280000168e0 0041 00000000 0x0 0x0
0xffffa28000016958 0041 00000000 0x0 0x0
0xffffa280000169d0 0041 00000000 0x0 0x0
0xffffa28000016a48 0041 00000000 0x0 0x0
0xffffa28000016ac0 0041 00000000 0x0 0x0
0xffffa28000016b38 0041 00000000 0x0 0x0
0xffffa28000016bb0 0041 00000000 0x0 0x0
0xffffa28000016c28 0041 00000000 0x0 0x0
0xffffa28000016ca0 0041 00000000 0x0 0x0
0xffffa28000016d18 0041 00000000 0x0 0x0
0xffffa28000016d90 0041 00000000 0x0 0x0
0xffffa28000016e08 0041 00000000 0x0 0x0
0xffffa28000016e80 0041 00000000 0x0 0x0
0xffffa28000016ef8 0041 00000000 0x0 0x0
0xffffa28000016f70 0041 00000000 0x0 0x0
0xffffa28000016fe8 0041 00000000 0x0 0x0
0xffffa28000017060 0041 00000000 0x0 0x0
0xffffa280000170d8 0041 00000000 0x0 0x0
0xffffa28000017150 0041 00000000 0x0 0x0
0xffffa280000171c8 0041 00000000 0x0 0x0
0xffffa28000017240 0041 00000000 0x0 0x0
0xffffa280000172b8 0041 00000000 0x0 0x0
0xffffa28000017330 0041 00000000 0x0 0x0
0xffffa280000173a8 0041 00000000 0x0 0x0
0xffffa28000017420 0041 00000000 0x0 0x0
0xffffa28000017498 0041 00000000 0x0 0x0
0xffffa28000017510 0041 00000000 0x0 0x0
0xffffa28000017588 0041 00000000 0x0 0x0
0xffffa28000017600 0041 00000000 0x0 0x0
0xffffa28000017678 0041 00000000 0x0 0x0
0xffffa280000176f0 0041 00000000 0x0 0x0
0xffffa28000017768 0041 00000000 0x0 0x0
0xffffa280000177e0 0041 00000000 0x0 0x0
0xffffa28000017858 0041 00000000 0x0 0x0
0xffffa280000178d0 0041 00000000 0x0 0x0
0xffffa28000017948 0041 00000000 0x0 0x0
0xffffa280000179c0 0041 00000000 0x0 0x0
0xffffa28000017a38 0041 00000000 0x0 0x0
0xffffa28000017ab0 0041 00000000 0x0 0x0
0xffffa28000017b28 0041 00000000 0x0 0x0
0xffffa28000017ba0 0041 00000000 0x0 0x0
0xffffa28000017c18 0041 00000000 0x0 0x0
0xffffa28000017c90 0041 00000000 0x0 0x0
0xffffa28000017d08 0041 00000000 0x0 0x0
0xffffa28000017d80 0041 00000000 0x0 0x0
0xffffa28000017df8 0041 00000000 0x0 0x0
0xffffa28000017e70 0041 00000000 0x0 0x0
0xffffa28000017ee8 0041 00000000 0x0 0x0
0xffffa28000017f60 0041 00000000 0x0 0x0
0xffffa28000017fd8 0041 00000000 0x0 0x0
0xffffa28000018050 0041 00000000 0x0 0x0
0xffffa280000180c8 0041 00000000 0x0 0x0
0xffffa28000018140 0041 00000000 0x0 0x0
0xffffa280000181b8 0041 00000000 0x0 0x0
0xffffa28000018230 0041 00000000 0x0 0x0
0xffffa280000182a8 0041 00000000 0x0 0x0
0xffffa28000018320 0041 00000000 0x0 0x0
0xffffa28000018398 0041 00000000 0x0 0x0
0xffffa28000018410 0041 00000000 0x0 0x0
0xffffa28000018488 0041 00000000 0x0 0x0
0xffffa28000018500 0041 00000000 0x0 0x0
0xffffa28000018578 0041 00000000 0x0 0x0
0xffffa280000185f0 0041 00000000 0x0 0x0
0xffffa28000018668 0041 00000000 0x0 0x0
0xffffa280000186e0 0041 00000000 0x0 0x0
0xffffa28000018758 0041 00000000 0x0 0x0
0xffffa280000187d0 0041 00000000 0x0 0x0
0xffffa28000018848 0041 00000000 0x0 0x0
0xffffa280000188c0 0041 00000000 0x0 0x0
0xffffa28000018938 0041 00000000 0x0 0x0
0xffffa280000189b0 0041 00000000 0x0 0x0
0xffffa28000018a28 0041 00000000 0x0 0x0
0xffffa28000018aa0 0041 00000000 0x0 0x0
0xffffa28000018b18 0041 00000000 0x0 0x0
0xffffa28000018b90 0041 00000000 0x0 0x0
0xffffa28000018c08 0041 00000000 0x0 0x0
0xffffa28000018c80 0041 00000000 0x0 0x0
0xffffa28000018cf8 0041 00000000 0x0 0x0
0xffffa28000018d70 0041 00000000 0x0 0x0
0xffffa28000018de8 0041 00000000 0x0 0x0
0xffffa28000018e60 0041 00000000 0x0 0x0
0xffffa28000018ed8 0041 00000000 0x0 0x0
0xffffa28000018f50 0041 00000000 0x0 0x0
0xffffa28000018fc8 0041 00000000 0x0 0x0
0xffffa28000019040 0041 00000000 0x0 0x0
0xffffa280000190b8 0041 00000000 0x0 0x0
0xffffa28000019130 0041 00000000 0x0 0x0
0xffffa280000191a8 0041 00000000 0x0 0x0
0xffffa28000019220 0041 00000000 0x0 0x0
0xffffa28000019298 0041 00000000 0x0 0x0
0xffffa28000019310 0041 00000000 0x0 0x0
0xffffa28000019388 0041 00000000 0x0 0x0
0xffffa28000019400 0041 00000000 0x0 0x0
0xffffa28000019478 0041 00000000 0x0 0x0
0xffffa280000194f0 0041 00000000 0x0 0x0
0xffffa28000019568 0041 00000000 0x0 0x0
0xffffa280000195e0 0041 00000000 0x0 0x0
0xffffa28000019658 0041 00000000 0x0 0x0
0xffffa280000196d0 0041 00000000 0x0 0x0
0xffffa28000019748 0041 00000000 0x0 0x0
0xffffa280000197c0 0041 00000000 0x0 0x0
0xffffa28000019838 0041 00000000 0x0 0x0
0xffffa280000198b0 0041 00000000 0x0 0x0
0xffffa28000019928 0041 00000000 0x0 0x0
0xffffa280000199a0 0041 00000000 0x0 0x0
0xffffa28000019a18 0041 00000000 0x0 0x0
0xffffa28000019a90 0041 00000000 0x0 0x0
0xffffa28000019b08 0041 00000000 0x0 0x0
0xffffa28000019b80 0041 00000000 0x0 0x0
0xffffa28000019bf8 0041 00000000 0x0 0x0
0xffffa28000019c70 0041 00000000 0x0 0x0
0xffffa28000019ce8 0041 00000000 0x0 0x0
0xffffa28000019d60 0041 00000000 0x0 0x0
0xffffa28000019dd8 0041 00000000 0x0 0x0
0xffffa28000019e50 0041 00000000 0x0 0x0
0xffffa28000019ec8 0041 00000000 0x0 0x0
0xffffa28000019f40 0041 00000000 0x0 0x0
0xffffa28000019fb8 0041 00000000 0x0 0x0
0xffffa2800001a030 0041 00000000 0x0 0x0
0xffffa2800001a0a8 0041 00000000 0x0 0x0
0xffffa2800001a120 0041 00000000 0x0 0x0
0xffffa2800001a198 0041 00000000 0x0 0x0
0xffffa2800001a210 0041 00000000 0x0 0x0
0xffffa2800001a288 0041 00000000 0x0 0x0
0xffffa2800001a300 0041 00000000 0x0 0x0
0xffffa2800001a378 0041 00000000 0x0 0x0
0xffffa2800001a3f0 0041 00000000 0x0 0x0
0xffffa2800001a468 0041 00000000 0x0 0x0
0xffffa2800001a4e0 0041 00000000 0x0 0x0
0xffffa2800001a558 0041 00000000 0x0 0x0
0xffffa2800001a5d0 0041 00000000 0x0 0x0
0xffffa2800001a648 0041 00000000 0x0 0x0
0xffffa2800001a6c0 0041 00000000 0x0 0x0
0xffffa2800001a738 0041 00000000 0x0 0x0
0xffffa2800001a7b0 0041 00000000 0x0 0x0
0xffffa2800001a828 0041 00000000 0x0 0x0
0xffffa2800001a8a0 0041 00000000 0x0 0x0
0xffffa2800001a918 0041 00000000 0x0 0x0
0xffffa2800001a990 0041 00000000 0x0 0x0
0xffffa2800001aa08 0041 00000000 0x0 0x0
0xffffa2800001aa80 0041 00000000 0x0 0x0
0xffffa2800001aaf8 0041 00000000 0x0 0x0
0xffffa2800001ab70 0041 00000000 0x0 0x0
0xffffa2800001abe8 0045 00000000 0x0 0x0
0xffffa2800001ac60 0045 00000000 0x0 0x0
0xffffa2800001acd8 0045 00000000 0x0 0x0
0xffffa2800001ad50 0041 00000000 0x0 0x0
0xffffa2800001adc8 0041 00000000 0x0 0x0
0xffffa2800001ae40 0045 00000000 0x0 0x0
0xffffa2800001aeb8 0041 00000000 0x0 0x0
0xffffa2800001af30 0041 00000000 0x0 0x0
0xffffa2800001afa8 0045 00000000 0x0 0x0
0xffffa2800001b020 0045 00000000 0x0 0x0
0xffffa2800001b098 0045 00000000 0x0 0x0
0xffffa2800001b110 0045 00000000 0x0 0x0
0xffffa2800001b188 0041 00000000 0x0 0x0
0xffffa2800001b200 0045 00000000 0x0 0x0
0xffffa2800001b278 0045 00000000 0x0 0x0
0xffffa2800001b2f0 0045 00000000 0x0 0x0
0xffffa2800001b368 0041 00000000 0x0 0x0
0xffffa2800001b3e0 0041 00000000 0x0 0x0
0xffffa2800001b458 0041 00000000 0x0 0x0
0xffffa2800001b4d0 0045 00000000 0x0 0x0
0xffffa2800001b548 0045 00000000 0x0 0x0
0xffffa2800001b5c0 0041 00000000 0x0 0x0
0xffffa2800001b638 0045 00000000 0x0 0x0
0xffffa2800001b6b0 0045 00000000 0x0 0x0
0xffffa2800001b728 0041 00000000 0x0 0x0
0xffffa2800001b7a0 0041 00000000 0x0 0x0
0xffffa2800001b818 0041 00000000 0x0 0x0
0xffffa2800001b890 0041 00000000 0x0 0x0
0xffffa2800001b908 0045 00000000 0x0 0x0
0xffffa2800001b980 0041 00000000 0x0 0x0
0xffffa2800001b9f8 0041 00000000 0x0 0x0
0xffffa2800001ba70 0041 00000000 0x0 0x0
0xffffa2800001bae8 0041 00000000 0x0 0x0
0xffffa2800001bb60 0041 00000000 0x0 0x0
0xffffa2800001bbd8 0041 00000000 0x0 0x0
0xffffa2800001bc50 0041 00000000 0x0 0x0
0xffffa2800001bcc8 0041 00000000 0x0 0x0
0xffffa2800001bd40 0041 00000000 0x0 0x0
0xffffa2800001bdb8 0041 00000000 0x0 0x0
0xffffa2800001be30 0041 00000000 0x0 0x0
0xffffa2800001bea8 0041 00000000 0x0 0x0
0xffffa2800001bf20 0041 00000000 0x0 0x0
0xffffa2800001bf98 0041 00000000 0x0 0x0
0xffffa2800001c010 0041 00000000 0x0 0x0
0xffffa2800001c088 0041 00000000 0x0 0x0
0xffffa2800001c100 0041 00000000 0x0 0x0
0xffffa2800001c178 0041 00000000 0x0 0x0
0xffffa2800001c1f0 0041 00000000 0x0 0x0
0xffffa2800001c268 0041 00000000 0x0 0x0
0xffffa2800001c2e0 0041 00000000 0x0 0x0
0xffffa2800001c358 0041 00000000 0x0 0x0
0xffffa2800001c3d0 0041 00000000 0x0 0x0
0xffffa2800001c448 0041 00000000 0x0 0x0
0xffffa2800001c4c0 0041 00000000 0x0 0x0
0xffffa2800001c538 0041 00000000 0x0 0x0
0xffffa2800001c5b0 0041 00000000 0x0 0x0
0xffffa2800001c628 0041 00000000 0x0 0x0
0xffffa2800001c6a0 0041 00000000 0x0 0x0
0xffffa2800001c718 0041 00000000 0x0 0x0
0xffffa2800001c790 0041 00000000 0x0 0x0
0xffffa2800001c808 0041 00000000 0x0 0x0
0xffffa2800001c880 0041 00000000 0x0 0x0
0xffffa2800001c8f8 0041 00000000 0x0 0x0
0xffffa2800001c970 0041 00000000 0x0 0x0
0xffffa2800001c9e8 0041 00000000 0x0 0x0
0xffffa2800001ca60 0041 00000000 0x0 0x0
0xffffa2800001cad8 0041 00000000 0x0 0x0
0xffffa2800001cb50 0041 00000000 0x0 0x0
0xffffa2800001cbc8 0041 00000000 0x0 0x0
0xffffa2800001cc40 0041 00000000 0x0 0x0
0xffffa2800001ccb8 0041 00000000 0x0 0x0
0xffffa2800001cd30 0041 00000000 0x0 0x0
0xffffa2800001cda8 0041 00000000 0x0 0x0
0xffffa2800001ce20 0041 00000000 0x0 0x0
0xffffa2800001ce98 0041 00000000 0x0 0x0
0xffffa2800001cf10 0041 00000000 0x0 0x0
0xffffa2800001cf88 0041 00000000 0x0 0x0
0xffffa2800001d000 0041 00000000 0x0 0x0
0xffffa2800001d078 0041 00000000 0x0 0x0
0xffffa2800001d0f0 0041 00000000 0x0 0x0
0xffffa2800001d168 0041 00000000 0x0 0x0
0xffffa2800001d1e0 0041 00000000 0x0 0x0
0xffffa2800001d258 0041 00000000 0x0 0x0
0xffffa2800001d2d0 0041 00000000 0x0 0x0
0xffffa2800001d348 0041 00000000 0x0 0x0
0xffffa2800001d3c0 0041 00000000 0x0 0x0
0xffffa2800001d438 0041 00000000 0x0 0x0
0xffffa2800001d4b0 0041 00000000 0x0 0x0
0xffffa2800001d528 0041 00000000 0x0 0x0
0xffffa2800001d5a0 0041 00000000 0x0 0x0
0xffffa2800001d618 0041 00000000 0x0 0x0
0xffffa2800001d690 0041 00000000 0x0 0x0
0xffffa2800001d708 0041 00000000 0x0 0x0
0xffffa2800001d780 0041 00000000 0x0 0x0
0xffffa2800001d7f8 0041 00000000 0x0 0x0
0xffffa2800001d870 0041 00000000 0x0 0x0
0xffffa2800001d8e8 0041 00000000 0x0 0x0
0xffffa2800001d960 0041 00000000 0x0 0x0
0xffffa2800001d9d8 0041 00000000 0x0 0x0
0xffffa2800001da50 0041 00000000 0x0 0x0
0xffffa2800001dac8 0041 00000000 0x0 0x0
0xffffa2800001db40 0041 00000000 0x0 0x0
0xffffa2800001dbb8 0041 00000000 0x0 0x0
0xffffa2800001dc30 0041 00000000 0x0 0x0
0xffffa2800001dca8 0041 00000000 0x0 0x0
0xffffa2800001dd20 0041 00000000 0x0 0x0
0xffffa2800001dd98 0041 00000000 0x0 0x0
0xffffa2800001de10 0041 00000000 0x0 0x0
0xffffa2800001de88 0041 00000000 0x0 0x0
0xffffa2800001df00 0041 00000000 0x0 0x0
0xffffa2800001df78 0041 00000000 0x0 0x0
0xffffa2800001dff0 0041 00000000 0x0 0x0
0xffffa2800001e068 0041 00000000 0x0 0x0
0xffffa2800001e0e0 0041 00000000 0x0 0x0
0xffffa2800001e158 0041 00000000 0x0 0x0
0xffffa2800001e1d0 0041 00000000 0x0 0x0
0xffffa2800001e248 0041 00000000 0x0 0x0
0xffffa2800001e2c0 0041 00000000 0x0 0x0
0xffffa2800001e338 0041 00000000 0x0 0x0
0xffffa2800001e3b0 0041 00000000 0x0 0x0
0xffffa2800001e428 0041 00000000 0x0 0x0
0xffffa2800001e4a0 0041 00000000 0x0 0x0
0xffffa2800001e518 0041 00000000 0x0 0x0
0xffffa2800001e590 0041 00000000 0x0 0x0
0xffffa2800001e608 0041 00000000 0x0 0x0
0xffffa2800001e680 0041 00000000 0x0 0x0
0xffffa2800001e6f8 0041 00000000 0x0 0x0
0xffffa2800001e770 0041 00000000 0x0 0x0
0xffffa2800001e7e8 0041 00000000 0x0 0x0
0xffffa2800001e860 0041 00000000 0x0 0x0
0xffffa2800001e8d8 0041 00000000 0x0 0x0
0xffffa2800001e950 0041 00000000 0x0 0x0
0xffffa2800001e9c8 0041 00000000 0x0 0x0
0xffffa2800001ea40 0041 00000000 0x0 0x0
0xffffa2800001eab8 0041 00000000 0x0 0x0
0xffffa2800001eb30 0041 00000000 0x0 0x0
0xffffa2800001eba8 0041 00000000 0x0 0x0
0xffffa2800001ec20 0041 00000000 0x0 0x0
0xffffa2800001ec98 0041 00000000 0x0 0x0
0xffffa2800001ed10 0041 00000000 0x0 0x0
0xffffa2800001ed88 0041 00000000 0x0 0x0
0xffffa2800001ee00 0041 00000000 0x0 0x0
0xffffa2800001ee78 0041 00000000 0x0 0x0
0xffffa2800001eef0 0041 00000000 0x0 0x0
0xffffa2800001ef68 0041 00000000 0x0 0x0
0xffffa2800001efe0 0041 00000000 0x0 0x0
0xffffa2800001f058 0041 00000000 0x0 0x0
0xffffa2800001f0d0 0041 00000000 0x0 0x0
0xffffa2800001f148 0041 00000000 0x0 0x0
0xffffa2800001f1c0 0041 00000000 0x0 0x0
0xffffa2800001f238 0041 00000000 0x0 0x0
0xffffa2800001f2b0 0041 00000000 0x0 0x0
0xffffa2800001f328 0041 00000000 0x0 0x0
0xffffa2800001f3a0 0041 00000000 0x0 0x0
0xffffa2800001f418 0041 00000000 0x0 0x0
0xffffa2800001f490 0041 00000000 0x0 0x0
0xffffa2800001f508 0041 00000000 0x0 0x0
0xffffa2800001f580 0041 00000000 0x0 0x0
0xffffa2800001f5f8 0041 00000000 0x0 0x0
0xffffa2800001f670 0041 00000000 0x0 0x0
0xffffa2800001f6e8 0041 00000000 0x0 0x0
0xffffa2800001f760 0041 00000000 0x0 0x0
0xffffa2800001f7d8 0041 00000000 0x0 0x0
0xffffa2800001f850 0041 00000000 0x0 0x0
0xffffa2800001f8c8 0041 00000000 0x0 0x0
0xffffa2800001f940 0041 00000000 0x0 0x0
0xffffa2800001f9b8 0041 00000000 0x0 0x0
0xffffa2800001fa30 0041 00000000 0x0 0x0
0xffffa2800001faa8 0041 00000000 0x0 0x0
0xffffa2800001fb20 0041 00000000 0x0 0x0
0xffffa2800001fb98 0041 00000000 0x0 0x0
0xffffa2800001fc10 0041 00000000 0x0 0x0
0xffffa2800001fc88 0041 00000000 0x0 0x0
0xffffa2800001fd00 0041 00000000 0x0 0x0
0xffffa2800001fd78 0041 00000000 0x0 0x0
0xffffa2800001fdf0 0041 00000000 0x0 0x0
0xffffa2800001fe68 0041 00000000 0x0 0x0
0xffffa2800001fee0 0041 00000000 0x0 0x0
0xffffa2800001ff58 0041 00000000 0x0 0x0
0xffffa2800001ffd0 0041 00000000 0x0 0x0
0xffffa28000020048 0041 00000000 0x0 0x0
0xffffa280000200c0 0041 00000000 0x0 0x0
0xffffa28000020138 0041 00000000 0x0 0x0
0xffffa280000201b0 0041 00000000 0x0 0x0
0xffffa28000020228 0041 00000000 0x0 0x0
0xffffa280000202a0 0041 00000000 0x0 0x0
0xffffa28000020318 0041 00000000 0x0 0x0
0xffffa28000020390 0041 00000000 0x0 0x0
0xffffa28000020408 0041 00000000 0x0 0x0
0xffffa28000020480 0041 00000000 0x0 0x0
0xffffa280000204f8 0041 00000000 0x0 0x0
0xffffa28000020570 0041 00000000 0x0 0x0
0xffffa280000205e8 0041 00000000 0x0 0x0
0xffffa28000020660 0041 00000000 0x0 0x0
0xffffa280000206d8 0041 00000000 0x0 0x0
0xffffa28000020750 0041 00000000 0x0 0x0
0xffffa280000207c8 0041 00000000 0x0 0x0
0xffffa28000020840 0041 00000000 0x0 0x0
0xffffa280000208b8 0041 00000000 0x0 0x0
0xffffa28000020930 0041 00000000 0x0 0x0
0xffffa280000209a8 0041 00000000 0x0 0x0
0xffffa28000020a20 0041 00000000 0x0 0x0
0xffffa28000020a98 0041 00000000 0x0 0x0
0xffffa28000020b10 0041 00000000 0x0 0x0
0xffffa28000020b88 0041 00000000 0x0 0x0
0xffffa28000020c00 0041 00000000 0x0 0x0
0xffffa28000020c78 0041 00000000 0x0 0x0
0xffffa28000020cf0 0041 00000000 0x0 0x0
0xffffa28000020d68 0041 00000000 0x0 0x0
0xffffa28000020de0 0041 00000000 0x0 0x0
0xffffa28000020e58 0041 00000000 0x0 0x0
0xffffa28000020ed0 0041 00000000 0x0 0x0
0xffffa28000020f48 0041 00000000 0x0 0x0
0xffffa28000020fc0 0041 00000000 0x0 0x0
0xffffa28000021038 0041 00000000 0x0 0x0
0xffffa280000210b0 0041 00000000 0x0 0x0
0xffffa28000021128 0041 00000000 0x0 0x0
0xffffa280000211a0 0041 00000000 0x0 0x0
0xffffa28000021218 0041 00000000 0x0 0x0
0xffffa28000021290 0041 00000000 0x0 0x0
0xffffa28000021308 0041 00000000 0x0 0x0
0xffffa28000021380 0041 00000000 0x0 0x0
0xffffa280000213f8 0041 00000000 0x0 0x0
0xffffa28000021470 0041 00000000 0x0 0x0
0xffffa280000214e8 0041 00000000 0x0 0x0
0xffffa28000021560 0041 00000000 0x0 0x0
0xffffa280000215d8 0041 00000000 0x0 0x0
0xffffa28000021650 0041 00000000 0x0 0x0
0xffffa280000216c8 0041 00000000 0x0 0x0
0xffffa28000021740 0041 00000000 0x0 0x0
0xffffa280000217b8 0041 00000000 0x0 0x0
0xffffa28000021830 0041 00000000 0x0 0x0
0xffffa280000218a8 0041 00000000 0x0 0x0
0xffffa28000021920 0041 00000000 0x0 0x0
0xffffa28000021998 0041 00000000 0x0 0x0
0xffffa28000021a10 0041 00000000 0x0 0x0
0xffffa28000021a88 0041 00000000 0x0 0x0
0xffffa28000021b00 0041 00000000 0x0 0x0
0xffffa28000021b78 0041 00000000 0x0 0x0
0xffffa28000021bf0 0041 00000000 0x0 0x0
0xffffa28000021c68 0041 00000000 0x0 0x0
0xffffa28000021ce0 0041 00000000 0x0 0x0
0xffffa28000021d58 0041 00000000 0x0 0x0
0xffffa28000021dd0 0041 00000000 0x0 0x0
0xffffa28000021e48 0041 00000000 0x0 0x0
0xffffa28000021ec0 0041 00000000 0x0 0x0
0xffffa28000021f38 0041 00000000 0x0 0x0
0xffffa28000021fb0 0041 00000000 0x0 0x0
0xffffa28000022028 0041 00000000 0x0 0x0
0xffffa280000220a0 0041 00000000 0x0 0x0
0xffffa28000022118 0041 00000000 0x0 0x0
0xffffa28000022190 0041 00000000 0x0 0x0
0xffffa28000022208 0041 00000000 0x0 0x0
0xffffa28000022280 0041 00000000 0x0 0x0
0xffffa280000222f8 0041 00000000 0x0 0x0
0xffffa28000022370 0041 00000000 0x0 0x0
0xffffa280000223e8 0041 00000000 0x0 0x0
0xffffa28000022460 0041 00000000 0x0 0x0
0xffffa280000224d8 0041 00000000 0x0 0x0
0xffffa28000022550 0041 00000000 0x0 0x0
0xffffa280000225c8 0041 00000000 0x0 0x0
0xffffa28000022640 0041 00000000 0x0 0x0
0xffffa280000226b8 0041 00000000 0x0 0x0
0xffffa28000022730 0041 00000000 0x0 0x0
0xffffa280000227a8 0041 00000000 0x0 0x0
0xffffa28000022820 0041 00000000 0x0 0x0
0xffffa28000022898 0041 00000000 0x0 0x0
0xffffa28000022910 0041 00000000 0x0 0x0
0xffffa28000022988 0041 00000000 0x0 0x0
0xffffa28000022a00 0041 00000000 0x0 0x0
0xffffa28000022a78 0041 00000000 0x0 0x0
0xffffa28000022af0 0041 00000000 0x0 0x0
0xffffa28000022b68 0041 00000000 0x0 0x0
0xffffa28000022be0 0041 00000000 0x0 0x0
0xffffa28000022c58 0041 00000000 0x0 0x0
0xffffa28000022cd0 0041 00000000 0x0 0x0
0xffffa28000022d48 0041 00000000 0x0 0x0
0xffffa28000022dc0 0041 00000000 0x0 0x0
0xffffa28000022e38 0041 00000000 0x0 0x0
0xffffa28000022eb0 0041 00000000 0x0 0x0
0xffffa28000022f28 0041 00000000 0x0 0x0
0xffffa28000022fa0 0041 00000000 0x0 0x0
0xffffa28000023018 0041 00000000 0x0 0x0
0xffffa28000023090 0041 00000000 0x0 0x0
0xffffa28000023108 0041 00000000 0x0 0x0
0xffffa28000023180 0041 00000000 0x0 0x0
0xffffa280000231f8 0041 00000000 0x0 0x0
0xffffa28000023270 0041 00000000 0x0 0x0
0xffffa280000232e8 0041 00000000 0x0 0x0
0xffffa28000023360 0041 00000000 0x0 0x0
0xffffa280000233d8 0041 00000000 0x0 0x0
0xffffa28000023450 0041 00000000 0x0 0x0
0xffffa280000234c8 0041 00000000 0x0 0x0
0xffffa28000023540 0041 00000000 0x0 0x0
0xffffa280000235b8 0041 00000000 0x0 0x0
0xffffa28000023630 0041 00000000 0x0 0x0
0xffffa280000236a8 0041 00000000 0x0 0x0
0xffffa28000023720 0041 00000000 0x0 0x0
0xffffa28000023798 0041 00000000 0x0 0x0
0xffffa28000023810 0041 00000000 0x0 0x0
0xffffa28000023888 0041 00000000 0x0 0x0
0xffffa28000023900 0041 00000000 0x0 0x0
0xffffa28000023978 0041 00000000 0x0 0x0
0xffffa280000239f0 0041 00000000 0x0 0x0
0xffffa28000023a68 0041 00000000 0x0 0x0
0xffffa28000023ae0 0041 00000000 0x0 0x0
0xffffa28000023b58 0041 00000000 0x0 0x0
0xffffa28000023bd0 0041 00000000 0x0 0x0
0xffffa28000023c48 0041 00000000 0x0 0x0
0xffffa28000023cc0 0041 00000000 0x0 0x0
0xffffa28000023d38 0041 00000000 0x0 0x0
0xffffa28000023db0 0041 00000000 0x0 0x0
0xffffa28000023e28 0041 00000000 0x0 0x0
0xffffa28000023ea0 0041 00000000 0x0 0x0
0xffffa28000023f18 0041 00000000 0x0 0x0
0xffffa28000023f90 0041 00000000 0x0 0x0
0xffffa28000024008 0041 00000000 0x0 0x0
0xffffa28000024080 0041 00000000 0x0 0x0
0xffffa280000240f8 0041 00000000 0x0 0x0
0xffffa28000024170 0041 00000000 0x0 0x0
0xffffa280000241e8 0041 00000000 0x0 0x0
0xffffa28000024260 0041 00000000 0x0 0x0
0xffffa280000242d8 0041 00000000 0x0 0x0
0xffffa28000024350 0041 00000000 0x0 0x0
0xffffa280000243c8 0041 00000000 0x0 0x0
0xffffa28000024440 0041 00000000 0x0 0x0
0xffffa280000244b8 0041 00000000 0x0 0x0
0xffffa28000024530 0041 00000000 0x0 0x0
0xffffa280000245a8 0041 00000000 0x0 0x0
0xffffa28000024620 0041 00000000 0x0 0x0
0xffffa28000024698 0041 00000000 0x0 0x0
0xffffa28000024710 0041 00000000 0x0 0x0
0xffffa28000024788 0041 00000000 0x0 0x0
0xffffa28000024800 0041 00000000 0x0 0x0
0xffffa28000024878 0041 00000000 0x0 0x0
0xffffa280000248f0 0041 00000000 0x0 0x0
0xffffa28000024968 0041 00000000 0x0 0x0
0xffffa280000249e0 0041 00000000 0x0 0x0
0xffffa28000024a58 0041 00000000 0x0 0x0
0xffffa28000024ad0 0041 00000000 0x0 0x0
0xffffa28000024b48 0041 00000000 0x0 0x0
0xffffa28000024bc0 0041 00000000 0x0 0x0
0xffffa28000024c38 0041 00000000 0x0 0x0
0xffffa28000024cb0 0041 00000000 0x0 0x0
0xffffa28000024d28 0041 00000000 0x0 0x0
0xffffa28000024da0 0041 00000000 0x0 0x0
0xffffa28000024e18 0041 00000000 0x0 0x0
0xffffa28000024e90 0041 00000000 0x0 0x0
0xffffa28000024f08 0041 00000000 0x0 0x0
0xffffa28000024f80 0041 00000000 0x0 0x0
0xffffa28000024ff8 0041 00000000 0x0 0x0
0xffffa28000025070 0041 00000000 0x0 0x0
0xffffa280000250e8 0041 00000000 0x0 0x0
0xffffa28000025160 0041 00000000 0x0 0x0
0xffffa280000251d8 0041 00000000 0x0 0x0
0xffffa28000025250 0041 00000000 0x0 0x0
0xffffa280000252c8 0041 00000000 0x0 0x0
0xffffa28000025340 0041 00000000 0x0 0x0
0xffffa280000253b8 0041 00000000 0x0 0x0
0xffffa28000025430 0041 00000000 0x0 0x0
0xffffa280000254a8 0041 00000000 0x0 0x0
0xffffa28000025520 0041 00000000 0x0 0x0
0xffffa28000025598 0041 00000000 0x0 0x0
0xffffa28000025610 0041 00000000 0x0 0x0
0xffffa28000025688 0041 00000000 0x0 0x0
0xffffa28000025700 0041 00000000 0x0 0x0
0xffffa28000025778 0041 00000000 0x0 0x0
0xffffa280000257f0 0041 00000000 0x0 0x0
0xffffa28000025868 0041 00000000 0x0 0x0
0xffffa280000258e0 0041 00000000 0x0 0x0
0xffffa28000025958 0041 00000000 0x0 0x0
0xffffa280000259d0 0041 00000000 0x0 0x0
0xffffa28000025a48 0041 00000000 0x0 0x0
0xffffa28000025ac0 0041 00000000 0x0 0x0
0xffffa28000025b38 0041 00000000 0x0 0x0
0xffffa28000025bb0 0041 00000000 0x0 0x0
0xffffa28000025c28 0041 00000000 0x0 0x0
0xffffa28000025ca0 0041 00000000 0x0 0x0
0xffffa28000025d18 0041 00000000 0x0 0x0
0xffffa28000025d90 0041 00000000 0x0 0x0
0xffffa28000025e08 0041 00000000 0x0 0x0
0xffffa28000025e80 0041 00000000 0x0 0x0
0xffffa28000025ef8 0041 00000000 0x0 0x0
0xffffa28000025f70 0041 00000000 0x0 0x0
0xffffa28000025fe8 0041 00000000 0x0 0x0
0xffffa28000026060 0041 00000000 0x0 0x0
0xffffa280000260d8 0041 00000000 0x0 0x0
0xffffa28000026150 0041 00000000 0x0 0x0
0xffffa280000261c8 0041 00000000 0x0 0x0
0xffffa28000026240 0041 00000000 0x0 0x0
0xffffa280000262b8 0041 00000000 0x0 0x0
0xffffa28000026330 0041 00000000 0x0 0x0
0xffffa280000263a8 0041 00000000 0x0 0x0
0xffffa28000026420 0041 00000000 0x0 0x0
0xffffa28000026498 0041 00000000 0x0 0x0
0xffffa28000026510 0041 00000000 0x0 0x0
0xffffa28000026588 0041 00000000 0x0 0x0
0xffffa28000026600 0041 00000000 0x0 0x0
0xffffa28000026678 0041 00000000 0x0 0x0
0xffffa280000266f0 0041 00000000 0x0 0x0
0xffffa28000026768 0041 00000000 0x0 0x0
0xffffa280000267e0 0041 00000000 0x0 0x0
0xffffa28000026858 0041 00000000 0x0 0x0
0xffffa280000268d0 0041 00000000 0x0 0x0
0xffffa28000026948 0041 00000000 0x0 0x0
0xffffa280000269c0 0041 00000000 0x0 0x0
0xffffa28000026a38 0041 00000000 0x0 0x0
0xffffa28000026ab0 0041 00000000 0x0 0x0
0xffffa28000026b28 0041 00000000 0x0 0x0
0xffffa28000026ba0 0041 00000000 0x0 0x0
0xffffa28000026c18 0041 00000000 0x0 0x0
0xffffa28000026c90 0041 00000000 0x0 0x0
0xffffa28000026d08 0041 00000000 0x0 0x0
0xffffa28000026d80 0041 00000000 0x0 0x0
0xffffa28000026df8 0041 00000000 0x0 0x0
0xffffa28000026e70 0041 00000000 0x0 0x0
0xffffa28000026ee8 0041 00000000 0x0 0x0
0xffffa28000026f60 0041 00000000 0x0 0x0
0xffffa28000026fd8 0041 00000000 0x0 0x0
0xffffa28000027050 0041 00000000 0x0 0x0
0xffffa280000270c8 0041 00000000 0x0 0x0
0xffffa28000027140 0041 00000000 0x0 0x0
0xffffa280000271b8 0041 00000000 0x0 0x0
0xffffa28000027230 0041 00000000 0x0 0x0
0xffffa280000272a8 0041 00000000 0x0 0x0
0xffffa28000027320 0041 00000000 0x0 0x0
0xffffa28000027398 0041 00000000 0x0 0x0
0xffffa28000027410 0041 00000000 0x0 0x0
0xffffa28000027488 0041 00000000 0x0 0x0
0xffffa28000027500 0041 00000000 0x0 0x0
0xffffa28000027578 0041 00000000 0x0 0x0
0xffffa280000275f0 0041 00000000 0x0 0x0
0xffffa28000027668 0041 00000000 0x0 0x0
0xffffa280000276e0 0041 00000000 0x0 0x0
0xffffa28000027758 0041 00000000 0x0 0x0
0xffffa280000277d0 0041 00000000 0x0 0x0
0xffffa28000027848 0041 00000000 0x0 0x0
0xffffa280000278c0 0041 00000000 0x0 0x0
0xffffa28000027938 0041 00000000 0x0 0x0
0xffffa280000279b0 0041 00000000 0x0 0x0
0xffffa28000027a28 0041 00000000 0x0 0x0
0xffffa28000027aa0 0041 00000000 0x0 0x0
0xffffa28000027b18 0041 00000000 0x0 0x0
0xffffa28000027b90 0041 00000000 0x0 0x0
0xffffa28000027c08 0041 00000000 0x0 0x0
0xffffa28000027c80 0041 00000000 0x0 0x0
0xffffa28000027cf8 0041 00000000 0x0 0x0
0xffffa28000027d70 0041 00000000 0x0 0x0
0xffffa28000027de8 0041 00000000 0x0 0x0
0xffffa28000027e60 0041 00000000 0x0 0x0
0xffffa28000027ed8 0041 00000000 0x0 0x0
0xffffa28000027f50 0041 00000000 0x0 0x0
0xffffa28000027fc8 0041 00000000 0x0 0x0
0xffffa28000028040 0041 00000000 0x0 0x0
0xffffa280000280b8 0041 00000000 0x0 0x0
0xffffa28000028130 0041 00000000 0x0 0x0
0xffffa280000281a8 0041 00000000 0x0 0x0
0xffffa28000028220 0041 00000000 0x0 0x0
0xffffa28000028298 0041 00000000 0x0 0x0
0xffffa28000028310 0041 00000000 0x0 0x0
0xffffa28000028388 0041 00000000 0x0 0x0
0xffffa28000028400 0041 00000000 0x0 0x0
0xffffa28000028478 0041 00000000 0x0 0x0
0xffffa280000284f0 0041 00000000 0x0 0x0
0xffffa28000028568 0041 00000000 0x0 0x0
0xffffa280000285e0 0041 00000000 0x0 0x0
0xffffa28000028658 0041 00000000 0x0 0x0
0xffffa280000286d0 0041 00000000 0x0 0x0
0xffffa28000028748 0041 00000000 0x0 0x0
0xffffa280000287c0 0041 00000000 0x0 0x0
0xffffa28000028838 0041 00000000 0x0 0x0
0xffffa280000288b0 0041 00000000 0x0 0x0
0xffffa28000028928 0041 00000000 0x0 0x0
0xffffa280000289a0 0041 00000000 0x0 0x0
0xffffa28000028a18 0041 00000000 0x0 0x0
0xffffa28000028a90 0041 00000000 0x0 0x0
0xffffa28000028b08 0041 00000000 0x0 0x0
0xffffa28000028b80 0041 00000000 0x0 0x0
0xffffa28000028bf8 0041 00000000 0x0 0x0
0xffffa28000028c70 0041 00000000 0x0 0x0
0xffffa28000028ce8 0041 00000000 0x0 0x0
0xffffa28000028d60 0041 00000000 0x0 0x0
0xffffa28000028dd8 0041 00000000 0x0 0x0
0xffffa28000028e50 0041 00000000 0x0 0x0
0xffffa28000028ec8 0041 00000000 0x0 0x0
0xffffa28000028f40 0041 00000000 0x0 0x0
0xffffa28000028fb8 0041 00000000 0x0 0x0
0xffffa28000029030 0041 00000000 0x0 0x0
0xffffa280000290a8 0041 00000000 0x0 0x0
0xffffa28000029120 0041 00000000 0x0 0x0
0xffffa28000029198 0041 00000000 0x0 0x0
0xffffa28000029210 0041 00000000 0x0 0x0
0xffffa28000029288 0041 00000000 0x0 0x0
0xffffa28000029300 0041 00000000 0x0 0x0
0xffffa28000029378 0041 00000000 0x0 0x0
0xffffa280000293f0 0041 00000000 0x0 0x0
0xffffa28000029468 0041 00000000 0x0 0x0
0xffffa280000294e0 0041 00000000

Maxime Villard

unread,
Feb 23, 2020, 1:55:30 AM2/23/20
to syzbot+3e7f11...@syzkaller.appspotmail.com, syzkaller-netbsd-bugs
This was a false positive, the kMSan wrapper around copyinstr() was too
severe. Now fixed.

#syz invalid
Reply all
Reply to author
Forward
0 new messages