UBSan: Undefined Behavior in gettimeleft

0 views

Skip to first unread message

syzbot

unread,

Mar 15, 2021, 6:55:19 PM3/15/21

to syzkaller-...@googlegroups.com

Hello,

syzbot found the following issue on:

HEAD commit: b960aff9 make(1): add test for modifier parts in ':=' assi..
git tree: netbsd
console output: https://syzkaller.appspot.com/x/log.txt?x=137df32ad00000
kernel config: https://syzkaller.appspot.com/x/.config?x=1420f906d33d9f1f
dashboard link: https://syzkaller.appspot.com/bug?extid=5f6a6329d139810dfe3c
compiler: g++ (Ubuntu 5.4.0-6ubuntu1~16.04.12) 5.4.0 20160609

Unfortunately, I don't have any reproducer for this issue yet.

IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+5f6a63...@syzkaller.appspotmail.com

[ 113.9173251] panic: UBSan: Undefined Behavior in /syzkaller/managers/netbsd-kubsan/kernel/sys/kern/subr_time.c:223:2, signed integer overflow: 9223372036854775804 + 113 cannot be represented in type 'long int'

[ 113.9375685] cpu0: Begin traceback...
[ 113.9873013] vpanic() at netbsd:vpanic+0x2cd syzkaller/managers/netbsd-kubsan/kernel/sys/kern/subr_prf.c:290
[ 114.1273021] isAlreadyReported() at netbsd:isAlreadyReported
[ 114.2673016] HandleOverflow() at netbsd:HandleOverflow+0x1d0 syzkaller/managers/netbsd-kubsan/kernel/sys/../common/lib/libc/misc/ubsan.c:375
[ 114.3973010] gettimeleft() at netbsd:gettimeleft+0x3ec syzkaller/managers/netbsd-kubsan/kernel/sys/kern/subr_time.c:223
[ 114.5473011] sel_do_scan() at netbsd:sel_do_scan+0x58d syzkaller/managers/netbsd-kubsan/kernel/sys/kern/sys_select.c:294
[ 114.6873035] selcommon() at netbsd:selcommon+0x303 syzkaller/managers/netbsd-kubsan/kernel/sys/kern/sys_select.c:386
[ 114.8173027] compat_50_sys_select() at netbsd:compat_50_sys_select+0xf2 syzkaller/managers/netbsd-kubsan/kernel/sys/compat/common/kern_select_50.c:126
[ 114.9473004] sys___syscall() at netbsd:sys___syscall+0x1cf sy_call syzkaller/managers/netbsd-kubsan/kernel/sys/sys/syscallvar.h:66 [inline]
[ 114.9473004] sys___syscall() at netbsd:sys___syscall+0x1cf syzkaller/managers/netbsd-kubsan/kernel/sys/kern/sys_syscall.c:77
[ 115.0873001] syscall() at netbsd:syscall+0x2d5 sy_call syzkaller/managers/netbsd-kubsan/kernel/sys/sys/syscallvar.h:65 [inline]
[ 115.0873001] syscall() at netbsd:syscall+0x2d5 sy_invoke syzkaller/managers/netbsd-kubsan/kernel/sys/sys/syscallvar.h:94 [inline]
[ 115.0873001] syscall() at netbsd:syscall+0x2d5 syzkaller/managers/netbsd-kubsan/kernel/sys/arch/x86/x86/syscall.c:138
[ 115.1172998] --- syscall (number 198) ---
[ 115.1572997] netbsd:syscall+0x2d5:
[ 115.1572997] cpu0: End traceback...
[ 115.1698602] fatal breakpoint trap in supervisor mode
[ 115.1698602] trap type 1 code 0 rip 0xffffffff80221a95 cs 0x8 rflags 0x246 cr2 0x7b2dc7600000 ilevel 0 rsp 0xffff8c80d44d45c0
[ 115.1859527] curlwp 0xffff8270d7772680 pid 3815.3935 lowest kstack 0xffff8c80d44d02c0
Stopped in pid 3815.3935 (syz-executor.4) at netbsd:breakpoint+0x5: leave
?
breakpoint() at netbsd:breakpoint+0x5
db_panic() at netbsd:db_panic+0xec syzkaller/managers/netbsd-kubsan/kernel/sys/ddb/db_panic.c:67
vpanic() at netbsd:vpanic+0x2cd syzkaller/managers/netbsd-kubsan/kernel/sys/kern/subr_prf.c:290
isAlreadyReported() at netbsd:isAlreadyReported
HandleOverflow() at netbsd:HandleOverflow+0x1d0 syzkaller/managers/netbsd-kubsan/kernel/sys/../common/lib/libc/misc/ubsan.c:375
gettimeleft() at netbsd:gettimeleft+0x3ec syzkaller/managers/netbsd-kubsan/kernel/sys/kern/subr_time.c:223
sel_do_scan() at netbsd:sel_do_scan+0x58d syzkaller/managers/netbsd-kubsan/kernel/sys/kern/sys_select.c:294
selcommon() at netbsd:selcommon+0x303 syzkaller/managers/netbsd-kubsan/kernel/sys/kern/sys_select.c:386
compat_50_sys_select() at netbsd:compat_50_sys_select+0xf2 syzkaller/managers/netbsd-kubsan/kernel/sys/compat/common/kern_select_50.c:126
sys___syscall() at netbsd:sys___syscall+0x1cf sy_call syzkaller/managers/netbsd-kubsan/kernel/sys/sys/syscallvar.h:66 [inline]
sys___syscall() at netbsd:sys___syscall+0x1cf syzkaller/managers/netbsd-kubsan/kernel/sys/kern/sys_syscall.c:77
syscall() at netbsd:syscall+0x2d5 sy_call syzkaller/managers/netbsd-kubsan/kernel/sys/sys/syscallvar.h:65 [inline]
syscall() at netbsd:syscall+0x2d5 sy_invoke syzkaller/managers/netbsd-kubsan/kernel/sys/sys/syscallvar.h:94 [inline]
syscall() at netbsd:syscall+0x2d5 syzkaller/managers/netbsd-kubsan/kernel/sys/arch/x86/x86/syscall.c:138
--- syscall (number 198) ---
netbsd:syscall+0x2d5:
Panic string: UBSan: Undefined Behavior in /syzkaller/managers/netbsd-kubsan/kernel/sys/kern/subr_time.c:223:2, signed integer overflow: 9223372036854775804 + 113 cannot be represented in type 'long int'

PID LID S CPU FLAGS STRUCT LWP * NAME WAIT
3802 3802 2 0 0 ffff8270d81d9bc0 syz-executor.2
4180 4180 2 0 0 ffff8270d7cbe040 syz-executor.1
3774 3774 2 0 0 ffff8270d5d16b80 syz-executor.0
3815 >3935 7 0 0 ffff8270d7772680 syz-executor.4
3815 3815 2 0 10000000 ffff8270d5d16740 syz-executor.4
3672 3801 3 0 180 ffff8270c83ab340 syz-executor.3 parked
3672 3996 3 0 180 ffff8270c8c78040 syz-executor.3 parked
3672 3672 2 0 10000000 ffff8270d6e36b40 syz-executor.3
1187 1187 2 1 140 ffff8270cadf0a40 syz-executor.5
1105 1105 2 0 140 ffff8270cadf0600 syz-executor.4
1107 1107 2 1 140 ffff8270c84f6900 syz-executor.3
1078 1078 2 0 140 ffff8270c7385280 syz-executor.1
420 420 2 1 140 ffff8270c86060c0 syz-executor.2
1085 1085 2 0 140 ffff8270cadf01c0 syz-executor.0
1071 1125 2 0 100 ffff8270c8606940 syz-fuzzer
1071 1101 2 0 100 ffff8270c920a140 syz-fuzzer
1071 1076 3 1 180 ffff8270c920a9c0 syz-fuzzer kqueue
1071 1074 3 1 180 ffff8270c9f98a00 syz-fuzzer parked
1071 1093 3 0 180 ffff8270c6e8ca80 syz-fuzzer parked
1071 1077 3 1 180 ffff8270c723dac0 syz-fuzzer parked
1071 1081 3 1 180 ffff8270c723d680 syz-fuzzer parked
1071 1079 2 1 100 ffff8270c6e8c640 syz-fuzzer
1071 1071 3 0 180 ffff8270c9f985c0 syz-fuzzer parked
1256 1256 3 1 180 ffff8270c6e871c0 sshd select
1250 1250 3 0 180 ffff8270c7477b40 getty nanoslp
995 995 3 1 180 ffff8270c904f100 getty nanoslp
1104 1104 3 0 180 ffff8270c904f540 getty nanoslp
1098 1098 3 0 1c0 ffff8270c9f98180 getty ttyraw
956 956 3 1 180 ffff8270c920a580 sshd select
1121 1121 3 1 180 ffff8270c904f980 powerd kqueue
868 868 3 1 180 ffff8270c83abbc0 syslogd kqueue
599 599 3 0 180 ffff8270c760f740 dhcpcd poll
598 598 3 1 180 ffff8270c760fb80 dhcpcd poll
597 597 3 0 180 ffff8270c8c78480 dhcpcd poll
578 578 3 1 180 ffff8270c723d240 dhcpcd poll
350 350 3 0 180 ffff8270c7477700 dhcpcd poll
349 349 3 1 180 ffff8270c760f300 dhcpcd poll
348 348 3 0 180 ffff8270c7385b00 dhcpcd poll
1 1 3 0 180 ffff8270bec83940 init wait
0 817 3 0 200 ffff8270c6e87600 physiod physiod
0 192 2 0 240 ffff8270c6e8c200 ioflush
0 166 3 0 200 ffff8270bebba2c0 pooldrain pooldrain
0 165 3 1 200 ffff8270c6e87a40 pgdaemon pgdaemon
0 162 3 0 200 ffff8270c4dbfa00 usb7 usbevt
0 161 3 1 200 ffff8270c4dbf5c0 usb6 usbevt
0 31 3 0 200 ffff8270c4dbf180 usb5 usbevt
0 63 3 1 200 ffff8270c1d529c0 usb4 usbevt
0 126 3 1 200 ffff8270c1d52580 usb3 usbevt
0 125 3 1 200 ffff8270c1d52140 usb2 usbevt
0 124 3 0 200 ffff8270becd5980 usb1 usbevt
0 123 3 0 200 ffff8270becd5540 usb0 usbevt
0 122 3 1 200 ffff8270bebba700 usbtask-dr usbtsk
0 121 3 0 200 ffff8270bc0b3ac0 usbtask-hc usbtsk
0 120 3 1 200 ffff8270becd5100 npfgc0 npfgcw
0 119 3 1 200 ffff8270bec83500 rt_free rt_free
0 118 3 1 200 ffff8270bec830c0 unpgc unpgc
0 117 2 0 200 ffff8270bec5e900 key_timehandler
0 116 3 1 200 ffff8270bec5e4c0 icmp6_wqinput/1 icmp6_wqinput
0 115 3 0 200 ffff8270bec5e080 icmp6_wqinput/0 icmp6_wqinput
0 114 2 0 200 ffff8270bec398c0 nd6_timer
0 113 3 1 200 ffff8270bec39480 carp6_wqinput/1 carp6_wqinput
0 112 3 0 200 ffff8270bec39040 carp6_wqinput/0 carp6_wqinput
0 111 3 1 200 ffff8270bec1cbc0 carp_wqinput/1 carp_wqinput
0 110 3 0 200 ffff8270bec1c780 carp_wqinput/0 carp_wqinput
0 109 3 1 200 ffff8270bec1c340 icmp_wqinput/1 icmp_wqinput
0 108 3 0 200 ffff8270bebc7b80 icmp_wqinput/0 icmp_wqinput
0 107 2 0 200 ffff8270bebc7740 rt_timer
0 106 3 0 200 ffff8270bebbab40 vmem_rehash vmem_rehash
0 105 3 1 200 ffff8270bebc7300 entbutler entropy
0 96 3 0 200 ffff8270be523b00 viomb balloon
0 30 3 1 200 ffff8270be5236c0 vioif0_txrx/1 vioif0_txrx
0 29 2 0 200 ffff8270be523280 vioif0_txrx/0
0 27 3 0 200 ffff8270bc0b3680 scsibus0 sccomp
0 26 3 0 200 ffff8270bc0b3240 pms0 pmsreset
0 25 3 1 200 ffff8270bc004a80 xcall/1 xcall
0 24 1 1 200 ffff8270bc004640 softser/1
0 23 1 1 200 ffff8270bc004200 softclk/1
0 22 1 1 200 ffff8270bbfdfa40 softbio/1
0 21 1 1 200 ffff8270bbfdf600 softnet/1
0 20 1 1 201 ffff8270bbfdf1c0 idle/1
0 19 3 0 200 ffff8271eaf49a00 lnxpwrwq lnxpwrwq
0 18 3 1 200 ffff8271eaf495c0 lnxlngwq lnxlngwq
0 17 3 1 200 ffff8271eaf49180 lnxsyswq lnxsyswq
0 16 3 0 200 ffff8271eaf649c0 lnxrcugc lnxrcugc
0 15 3 0 200 ffff8271eaf64580 sysmon smtaskq
0 14 3 1 200 ffff8271eaf64140 pmfsuspend pmfsuspend
0 13 3 0 200 ffff8271eaf73980 pmfevent pmfevent
0 12 3 0 200 ffff8271eaf73540 sopendfree sopendfr
0 11 3 0 200 ffff8271eaf73100 iflnkst iflnkst
0 10 3 0 200 ffff8271ebf9e940 nfssilly nfssilly
0 9 3 0 200 ffff8271ebf9e500 vdrain vdrain
0 8 3 0 200 ffff8271ebf9e0c0 modunload mod_unld
0 7 3 0 200 ffff8271ebfd3900 xcall/0 xcall
0 6 1 0 200 ffff8271ebfd34c0 softser/0
0 5 1 0 200 ffff8271ebfd3080 softclk/0
0 4 1 0 200 ffff8271ebffd8c0 softbio/0
0 3 1 0 200 ffff8271ebffd480 softnet/0
0 2 1 0 201 ffff8271ebffd040 idle/0
0 > 0 7 1 240 ffffffff85edc580 swapper
[Locks tracked through LWPs]

****** LWP 3774.3774 (syz-executor.0) @ 0xffff8270d5d16b80, l_stat=2

*** Locks held:

* Lock 0 (initialized at pmap_ctor)
lock address : 0xffff8270c851a780 type : sleep/adaptive
initialized : 0xffffffff80f5460e
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffff8270d5d16b80 last held: 0xffff8270d5d16b80
last locked* : 0xffffffff80f56cba unlocked : 0xffffffff80f54346
owner field : 0xffff8270d5d16b80 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

* Lock 1 (initialized at pmap_ctor)
lock address : 0xffff8270c851a788 type : sleep/adaptive
initialized : 0xffffffff80f5463c
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffff8270d5d16b80 last held: 0xffff8270d5d16b80
last locked* : 0xffffffff80f4105f unlocked : 0xffffffff80f414df
owner/count : 0xffff8270d5d16b80 flags : 0x0000000000000004
Turnstile: no active turnstile for this lock.

*** Locks wanted: none

****** LWP 1071.1076 (syz-fuzzer) @ 0xffff8270c920a9c0, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at amap_alloc1)
lock address : 0xffff8270ca819080 type : sleep/adaptive
initialized : 0xffffffff8310c6aa
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 1
relevant cpu : 1 last held: 1
relevant lwp : 0xffff8270c920a9c0 last held: 000000000000000000
last locked : 0xffffffff831302b5 unlocked*: 0xffffffff8312c87f
owner/count : 000000000000000000 flags : 000000000000000000
Turnstile: no active turnstile for this lock.

****** LWP 598.598 (dhcpcd) @ 0xffff8270c760fb80, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at module_hook_init)
lock address : 0xffffffff862cc1c0 type : sleep/adaptive
initialized : 0xffffffff8325afb7
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 0
relevant lwp : 0xffff8270c760fb80 last held: 000000000000000000
last locked : 000000000000000000 unlocked*: 000000000000000000
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 597.597 (dhcpcd) @ 0xffff8270c8c78480, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at module_hook_init)
lock address : 0xffffffff862cc1c0 type : sleep/adaptive
initialized : 0xffffffff8325afb7
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffff8270c8c78480 last held: 000000000000000000
last locked : 000000000000000000 unlocked*: 000000000000000000
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 349.349 (dhcpcd) @ 0xffff8270c760f300, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at module_hook_init)
lock address : 0xffffffff862cc1c0 type : sleep/adaptive
initialized : 0xffffffff8325afb7
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 0
relevant lwp : 0xffff8270c760f300 last held: 000000000000000000
last locked : 000000000000000000 unlocked*: 000000000000000000
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 348.348 (dhcpcd) @ 0xffff8270c7385b00, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at module_hook_init)
lock address : 0xffffffff862cc1c0 type : sleep/adaptive
initialized : 0xffffffff8325afb7
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffff8270c7385b00 last held: 000000000000000000
last locked : 000000000000000000 unlocked*: 000000000000000000
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 0.11 (iflnkst) @ 0xffff8271eaf73100, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at module_hook_init)
lock address : 0xffffffff862cc1c0 type : sleep/adaptive
initialized : 0xffffffff8325afb7
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffff8271eaf73100 last held: 000000000000000000
last locked : 000000000000000000 unlocked*: 000000000000000000
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 0.5 (softclk/0) @ 0xffff8271ebfd3080, l_stat=1

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at module_hook_init)
lock address : 0xffffffff862cc1c0 type : sleep/adaptive
initialized : 0xffffffff8325afb7
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffff8271ebfd3080 last held: 000000000000000000
last locked : 000000000000000000 unlocked*: 000000000000000000
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

[Locks tracked through CPUs]

PAGE FLAG PQ UOBJECT UANON
0xffff8c8000007180 0045 00000000 0x0 0x0
0xffff8c8000007200 0045 00000000 0x0 0x0
0xffff8c8000007280 0045 00000000 0x0 0x0
0xffff8c8000007300 0045 00000000 0x0 0x0
0xffff8c8000007380 0045 00000000 0x0 0x0
0xffff8c8000007400 0045 00000000 0x0 0x0
0xffff8c8000007480 0045 00000000 0x0 0x0
0xffff8c8000007500 0045 00000000 0x0 0x0
0xffff8c8000007580 0045 00000000 0x0 0x0
0xffff8c8000007600 0045 00000000 0x0 0x0
0xffff8c8000007680 0041 00000000 0x0 0x0
0xffff8c8000007700 0041 00000000 0x0 0x0
0xffff8c8000007780 0041 00000000 0x0 0x0
0xffff8c8000007800 0041 00000000 0x0 0x0
0xffff8c8000007880 0041 00000000 0x0 0x0
0xffff8c8000007900 0045 00000000 0x0 0x0
0xffff8c8000007980 0041 00000000 0x0 0x0
0xffff8c8000007a00 0041 00000000 0x0 0x0
0xffff8c8000007a80 0041 00000000 0x0 0x0
0xffff8c8000007b00 0041 00000000 0x0 0x0
0xffff8c8000007b80 0041 00000000 0x0 0x0
0xffff8c8000007c00 0041 00000000 0x0 0x0
0xffff8c8000007c80 0041 00000000 0x0 0x0
0xffff8c8000007d00 0041 00000000 0x0 0x0
0xffff8c8000007d80 0041 00000000 0x0 0x0
0xffff8c8000007e00 0041 00000000 0x0 0x0
0xffff8c8000007e80 0041 00000000 0x0 0x0
0xffff8c8000007f00 0041 00000000 0x0 0x0
0xffff8c8000007f80 0041 00000000 0x0 0x0
0xffff8c8000008000 0041 00000000 0x0 0x0
0xffff8c8000008080 0041 00000000 0x0 0x0
0xffff8c8000008100 0041 00000000 0x0 0x0
0xffff8c8000008180 0041 00000000 0x0 0x0
0xffff8c8000008200 0041 00000000 0x0 0x0
0xffff8c8000008280 0041 00000000 0x0 0x0
0xffff8c8000008300 0041 00000000 0x0 0x0
0xffff8c8000008380 0041 00000000 0x0 0x0
0xffff8c8000008400 0041 00000000 0x0 0x0
0xffff8c8000008480 0041 00000000 0x0 0x0
0xffff8c8000008500 0041 00000000 0x0 0x0
0xffff8c8000008580 0041 00000000 0x0 0x0
0xffff8c8000008600 0041 00000000 0x0 0x0
0xffff8c8000008680 0041 00000000 0x0 0x0
0xffff8c8000008700 0041 00000000 0x0 0x0
0xffff8c8000008780 0041 00000000 0x0 0x0
0xffff8c8000008800 0041 00000000 0x0 0x0
0xffff8c8000008880 0041 00000000 0x0 0x0
0xffff8c8000008900 0041 00000000 0x0 0x0
0xffff8c8000008980 0041 00000000 0x0 0x0
0xffff8c8000008a00 0041 00000000 0x0 0x0
0xffff8c8000008a80 0041 00000000 0x0 0x0
0xffff8c8000008b00 0041 00000000 0x0 0x0
0xffff8c8000008b80 0041 00000000 0x0 0x0
0xffff8c8000008c00 0041 00000000 0x0 0x0
0xffff8c8000008c80 0045 00000000 0x0 0x0
0xffff8c8000008d00 0041 00000000 0x0 0x0
0xffff8c8000008d80 0045 00000000 0x0 0x0
0xffff8c8000008e00 0041 00000000 0x0 0x0
0xffff8c8000008e80 0041 00000000 0x0 0x0
0xffff8c8000008f00 0041 00000000 0x0 0x0
0xffff8c8000008f80 0041 00000000 0x0 0x0
0xffff8c8000009000 0041 00000000 0x0 0x0
0xffff8c8000009080 0041 00000000 0x0 0x0
0xffff8c8000009100 0041 00000000 0x0 0x0
0xffff8c8000009180 0041 00000000 0x0 0x0
0xffff8c8000009200 0041 00000000 0x0 0x0
0xffff8c8000009280 0041 00000000 0x0 0x0
0xffff8c8000009300 0041 00000000 0x0 0x0
0xffff8c8000009380 0041 00000000 0x0 0x0
0xffff8c8000009400 0041 00000000 0x0 0x0
0xffff8c8000009480 0041 00000000 0x0 0x0
0xffff8c8000009500 0045 00000000 0x0 0x0
0xffff8c8000009580 0041 00000000 0x0 0x0
0xffff8c8000009600 0041 00000000 0x0 0x0
0xffff8c8000009680 0041 00000000 0x0 0x0
0xffff8c8000009700 0041 00000000 0x0 0x0
0xffff8c8000009780 0041 00000000 0x0 0x0
0xffff8c8000009800 0041 00000000 0x0 0x0
0xffff8c8000009880 0041 00000000 0x0 0x0
0xffff8c8000009900 0041 00000000 0x0 0x0
0xffff8c8000009980 0041 00000000 0x0 0x0
0xffff8c8000009a00 0041 00000000 0x0 0x0
0xffff8c8000009a80 0041 00000000 0x0 0x0
0xffff8c8000009b00 0041 00000000 0x0 0x0
0xffff8c8000009b80 0041 00000000 0x0 0x0
0xffff8c8000009c00 0041 00000000 0x0 0x0
0xffff8c8000009c80 0041 00000000 0x0 0x0
0xffff8c8000009d00 0041 00000000 0x0 0x0
0xffff8c8000009d80 0041 00000000 0x0 0x0
0xffff8c8000009e00 0041 00000000 0x0 0x0
0xffff8c8000009e80 0041 00000000 0x0 0x0
0xffff8c8000009f00 0045 00000000 0x0 0x0
0xffff8c8000009f80 0041 00000000 0x0 0x0
0xffff8c800000a000 0041 00000000 0x0 0x0
0xffff8c800000a080 0041 00000000 0x0 0x0
0xffff8c800000a100 0041 00000000 0x0 0x0
0xffff8c800000a180 0041 00000000 0x0 0x0
0xffff8c800000a200 0041 00000000 0x0 0x0
0xffff8c800000a280 0041 00000000 0x0 0x0
0xffff8c800000a300 0041 00000000 0x0 0x0
0xffff8c800000a380 0041 00000000 0x0 0x0
0xffff8c800000a400 0041 00000000 0x0 0x0
0xffff8c800000a480 0041 00000000 0x0 0x0
0xffff8c800000a500 0041 00000000 0x0 0x0
0xffff8c800000a580 0041 00000000 0x0 0x0
0xffff8c800000a600 0041 00000000 0x0 0x0
0xffff8c800000a680 0041 00000000 0x0 0x0
0xffff8c800000a700 0041 00000000 0x0 0x0
0xffff8c800000a780 0041 00000000 0x0 0x0
0xffff8c800000a800 0041 00000000 0x0 0x0
0xffff8c800000a880 0041 00000000 0x0 0x0
0xffff8c800000a900 0041 00000000 0x0 0x0
0xffff8c800000a980 0041 00000000 0x0 0x0
0xffff8c800000aa00 0041 00000000 0x0 0x0
0xffff8c800000aa80 0041 00000000 0x0 0x0
0xffff8c800000ab00 0041 00000000 0x0 0x0
0xffff8c800000ab80 0041 00000000 0x0 0x0
0xffff8c800000ac00 0041 00000000 0x0 0x0
0xffff8c800000ac80 0041 00000000 0x0 0x0
0xffff8c800000ad00 0041 00000000 0x0 0x0
0xffff8c800000ad80 0041 00000000 0x0 0x0
0xffff8c800000ae00 0045 00000000 0x0 0x0
0xffff8c800000ae80 0045 00000000 0x0 0x0
0xffff8c800000af00 0041 00000000 0x0 0x0
0xffff8c800000af80 0041 00000000 0x0 0x0
0xffff8c800000b000 0045 00000000 0x0 0x0
0xffff8c800000b080 0041 00000000 0x0 0x0
0xffff8c800000b100 0041 00000000 0x0 0x0
0xffff8c800000b180 0041 00000000 0x0 0x0
0xffff8c800000b200 0045 00000000 0x0 0x0
0xffff8c800000b280 0045 00000000 0x0 0x0
0xffff8c800000b300 0045 00000000 0x0 0x0
0xffff8c800000b380 0045 00000000 0x0 0x0
0xffff8c800000b400 0045 00000000 0x0 0x0
0xffff8c800000b480 0041 00000000 0x0 0x0
0xffff8c800000b500 0041 00000000 0x0 0x0
0xffff8c800000b580 0045 00000000 0x0 0x0
0xffff8c800000b600 0045 00000000 0x0 0x0
0xffff8c800000b680 0045 00000000 0x0 0x0
0xffff8c800000b700 0045 00000000 0x0 0x0
0xffff8c800000b780 0045 00000000 0x0 0x0
0xffff8c800000b800 0045 00000000 0x0 0x0
0xffff8c800000b880 0041 00000000 0x0 0x0
0xffff8c800000b900 0041 00000000 0x0 0x0
0xffff8c800000b980 0045 00000000 0x0 0x0
0xffff8c800000ba00 0045 00000000 0x0 0x0
0xffff8c800000ba80 0045 00000000 0x0 0x0
0xffff8c800000bb00 0045 00000000 0x0 0x0
0xffff8c800000bb80 0045 00000000 0x0 0x0
0xffff8c800000bc00 0045 00000000 0x0 0x0
0xffff8c800000bc80 0045 00000000 0x0 0x0
0xffff8c800000bd00 0045 00000000 0x0 0x0
0xffff8c800000bd80 0045 00000000 0x0 0x0
0xffff8c800000be00 0045 00000000 0x0 0x0
0xffff8c800000be80 0045 00000000 0x0 0x0
0xffff8c800000bf00 0045 00000000 0x0 0x0
0xffff8c800000bf80 0045 00000000 0x0 0x0
0xffff8c800000c000 0041 00000000 0x0 0x0
0xffff8c800000c080 0045 00000000 0x0 0x0
0xffff8c800000c100 0045 00000000 0x0 0x0
0xffff8c800000c180 0045 00000000 0x0 0x0
0xffff8c800000c200 0041 00000000 0x0 0x0
0xffff8c800000c280 0041 00000000 0x0 0x0
0xffff8c800000c300 0045 00000000 0x0 0x0
0xffff8c800000c380 0045 00000000 0x0 0x0
0xffff8c800000c400 0041 00000000 0x0 0x0
0xffff8c800000c480 0045 00000000 0x0 0x0
0xffff8c800000c500 0045 00000000 0x0 0x0
0xffff8c800000c580 0041 00000000 0x0 0x0
0xffff8c800000c600 0041 00000000 0x0 0x0
0xffff8c800000c680 0041 00000000 0x0 0x0
0xffff8c800000c700 0041 00000000 0x0 0x0
0xffff8c800000c780 0041 00000000 0x0 0x0
0xffff8c800000c800 0041 00000000 0x0 0x0
0xffff8c800000c880 0045 00000000 0x0 0x0
0xffff8c800000c900 0045 00000000 0x0 0x0
0xffff8c800000c980 0041 00000000 0x0 0x0
0xffff8c800000ca00 0041 00000000 0x0 0x0
0xffff8c800000ca80 0041 00000000 0x0 0x0
0xffff8c800000cb00 0041 00000000 0x0 0x0
0xffff8c800000cb80 0041 00000000 0x0 0x0
0xffff8c800000cc00 0041 00000000 0x0 0x0
0xffff8c800000cc80 0041 00000000 0x0 0x0
0xffff8c800000cd00 0041 00000000 0x0 0x0
0xffff8c800000cd80 0041 00000000 0x0 0x0
0xffff8c800000ce00 0041 00000000 0x0 0x0
0xffff8c800000ce80 0045 00000000 0x0 0x0
0xffff8c800000cf00 0041 00000000 0x0 0x0
0xffff8c800000cf80 0041 00000000 0x0 0x0
0xffff8c800000d000 0045 00000000 0x0 0x0
0xffff8c800000d080 0041 00000000 0x0 0x0
0xffff8c800000d100 0041 00000000 0x0 0x0
0xffff8c800000d180 0041 00000000 0x0 0x0
0xffff8c800000d200 0041 00000000 0x0 0x0
0xffff8c800000d280 0041 00000000 0x0 0x0
0xffff8c800000d300 0045 00000000 0x0 0x0
0xffff8c800000d380 0041 00000000 0x0 0x0
0xffff8c800000d400 0045 00000000 0x0 0x0
0xffff8c800000d480 0041 00000000 0x0 0x0
0xffff8c800000d500 0041 00000000 0x0 0x0
0xffff8c800000d580 0041 00000000 0x0 0x0
0xffff8c800000d600 0045 00000000 0x0 0x0
0xffff8c800000d680 0041 00000000 0x0 0x0
0xffff8c800000d700 0041 00000000 0x0 0x0
0xffff8c800000d780 0045 00000000 0x0 0x0
0xffff8c800000d800 0045 00000000 0x0 0x0
0xffff8c800000d880 0041 00000000 0x0 0x0
0xffff8c800000d900 0041 00000000 0x0 0x0
0xffff8c800000d980 0045 00000000 0x0 0x0
0xffff8c800000da00 0041 00000000 0x0 0x0
0xffff8c800000da80 0045 00000000 0x0 0x0
0xffff8c800000db00 0045 00000000 0x0 0x0
0xffff8c800000db80 0045 00000000 0x0 0x0
0xffff8c800000dc00 0041 00000000 0x0 0x0
0xffff8c800000dc80 0045 00000000 0x0 0x0
0xffff8c800000dd00 0041 00000000 0x0 0x0
0xffff8c800000dd80 0041 00000000 0x0 0x0
0xffff8c800000de00 0041 00000000 0x0 0x0
0xffff8c800000de80 0041 00000000 0x0 0x0
0xffff8c800000df00 0045 00000000 0x0 0x0
0xffff8c800000df80 0045 00000000 0x0 0x0
0xffff8c800000e000 0045 00000000 0x0 0x0
0xffff8c800000e080 0045 00000000 0x0 0x0
0xffff8c800000e100 0045 00000000 0x0 0x0
0xffff8c800000e180 0041 00000000 0x0 0x0
0xffff8c800000e200 0041 00000000 0x0 0x0
0xffff8c800000e280 0045 00000000 0x0 0x0
0xffff8c800000e300 0045 00000000 0x0 0x0
0xffff8c800000e380 0041 00000000 0x0 0x0
0xffff8c800000e400 0041 00000000 0x0 0x0
0xffff8c800000e480 0041 00000000 0x0 0x0
0xffff8c800000e500 0045 00000000 0x0 0x0
0xffff8c800000e580 0041 00000000 0x0 0x0
0xffff8c800000e600 0045 00000000 0x0 0x0
0xffff8c800000e680 0041 00000000 0x0 0x0
0xffff8c800000e700 0041 00000000 0x0 0x0
0xffff8c800000e780 0045 00000000 0x0 0x0
0xffff8c800000e800 0041 00000000 0x0 0x0
0xffff8c800000e880 0041 00000000 0x0 0x0
0xffff8c800000e900 0041 00000000 0x0 0x0
0xffff8c800000e980 0041 00000000 0x0 0x0
0xffff8c800000ea00 0041 00000000 0x0 0x0
0xffff8c800000ea80 0041 00000000 0x0 0x0
0xffff8c800000eb00 0041 00000000 0x0 0x0
0xffff8c800000eb80 0041 00000000 0x0 0x0
0xffff8c800000ec00 0041 00000000 0x0 0x0
0xffff8c800000ec80 0045 00000000 0x0 0x0
0xffff8c800000ed00 0041 00000000 0x0 0x0
0xffff8c800000ed80 0041 00000000 0x0 0x0
0xffff8c800000ee00 0045 00000000 0x0 0x0
0xffff8c800000ee80 0041 00000000 0x0 0x0
0xffff8c800000ef00 0041 00000000 0x0 0x0
0xffff8c800000ef80 0041 00000000 0x0 0x0
0xffff8c800000f000 0041 00000000 0x0 0x0
0xffff8c800000f080 0041 00000000 0x0 0x0
0xffff8c800000f100 0041 00000000 0x0 0x0
0xffff8c800000f180 0041 00000000 0x0 0x0
0xffff8c800000f200 0041 00000000 0x0 0x0
0xffff8c800000f280 0041 00000000 0x0 0x0
0xffff8c800000f300 0041 00000000 0x0 0x0
0xffff8c800000f380 0041 00000000 0x0 0x0
0xffff8c800000f400 0041 00000000 0x0 0x0
0xffff8c800000f480 0041 00000000 0x0 0x0
0xffff8c800000f500 0041 00000000 0x0 0x0
0xffff8c800000f580 0041 00000000 0x0 0x0
0xffff8c800000f600 0041 00000000 0x0 0x0
0xffff8c800000f680 0045 00000000 0x0 0x0
0xffff8c800000f700 0041 00000000 0x0 0x0
0xffff8c800000f780 0041 00000000 0x0 0x0
0xffff8c800000f800 0041 00000000 0x0 0x0
0xffff8c800000f880 0041 00000000 0x0 0x0
0xffff8c800000f900 0041 00000000 0x0 0x0
0xffff8c800000f980 0045 00000000 0x0 0x0
0xffff8c800000fa00 0045 00000000 0x0 0x0
0xffff8c800000fa80 0041 00000000 0x0 0x0
0xffff8c800000fb00 0041 00000000 0x0 0x0
0xffff8c800000fb80 0041 00000000 0x0 0x0
0xffff8c800000fc00 0041 00000000 0x0 0x0
0xffff8c800000fc80 0041 00000000 0x0 0x0
0xffff8c800000fd00 0041 00000000 0x0 0x0
0xffff8c800000fd80 0041 00000000 0x0 0x0
0xffff8c800000fe00 0041 00000000 0x0 0x0
0xffff8c800000fe80 0041 00000000 0x0 0x0
0xffff8c800000ff00 0041 00000000 0x0 0x0
0xffff8c800000ff80 0041 00000000 0x0 0x0
0xffff8c8000010000 0045 00000000 0x0 0x0
0xffff8c8000010080 0041 00000000 0x0 0x0
0xffff8c8000010100 0041 00000000 0x0 0x0
0xffff8c8000010180 0041 00000000 0x0 0x0
0xffff8c8000010200 0041 00000000 0x0 0x0
0xffff8c8000010280 0041 00000000 0x0 0x0
0xffff8c8000010300 0041 00000000 0x0 0x0
0xffff8c8000010380 0041 00000000 0x0 0x0
0xffff8c8000010400 0041 00000000 0x0 0x0
0xffff8c8000010480 0041 00000000 0x0 0x0
0xffff8c8000010500 0041 00000000 0x0 0x0
0xffff8c8000010580 0041 00000000 0x0 0x0
0xffff8c8000010600 0041 00000000 0x0 0x0
0xffff8c8000010680 0045 00000000 0x0 0x0
0xffff8c8000010700 0045 00000000 0x0 0x0
0xffff8c8000010780 0041 00000000 0x0 0x0
0xffff8c8000010800 0041 00000000 0x0 0x0
0xffff8c8000010880 0045 00000000 0x0 0x0
0xffff8c8000010900 0045 00000000 0x0 0x0
0xffff8c8000010980 0041 00000000 0x0 0x0
0xffff8c8000010a00 0041 00000000 0x0 0x0
0xffff8c8000010a80 0041 00000000 0x0 0x0
0xffff8c8000010b00 0041 00000000 0x0 0x0
0xffff8c8000010b80 0045 00000000 0x0 0x0
0xffff8c8000010c00 0001 00000000 0x0 0x0
0xffff8c8000010c80 0001 00000000 0x0 0x0
0xffff8c8000010d00 0001 00000000 0x0 0x0
0xffff8c8000010d80 0001 00000000 0x0 0x0
0xffff8c8000010e00 0001 00000000 0x0 0x0
0xffff8c8000010e80 0001 00000000 0x0 0x0
0xffff8c8000010f00 0001 00000000 0x0 0x0
0xffff8c8000010f80 0001 00000000 0x0 0x0
0xffff8c8000011000 0001 00000000 0x0 0x0
0xffff8c8000011080 0001 00000000 0x0 0x0
0xffff8c8000011100 0001 00000000 0x0 0x0
0xffff8c8000011180 0001 00000000 0x0 0x0
0xffff8c8000011200 0001 00000000 0x0 0x0
0xffff8c8000011280 0001 00000000 0x0 0x0
0xffff8c8000011300 0001 00000000 0x0 0x0
0xffff8c8000011380 0001 00000000 0x0 0x0
0xffff8c8000011400 0001 00000000 0x0 0x0
0xffff8c8000011480 0001 00000000 0x0 0x0
0xffff8c8000011500 0001 00000000 0x0 0x0
0xffff8c8000011580 0001 00000000 0x0 0x0
0xffff8c8000011600 0001 00000000 0x0 0x0
0xffff8c8000011680 0001 00000000 0x0 0x0
0xffff8c8000011700 0001 00000000 0x0 0x0
0xffff8c8000011780 0001 00000000 0x0 0x0
0xffff8c8000011800 0001 00000000 0x0 0x0
0xffff8c8000011880 0001 00000000 0x0 0x0
0xffff8c8000011900 0001 00000000 0x0 0x0
0xffff8c8000011980 0001 00000000 0x0 0x0
0xffff8c8000011a00 0001 00000000 0x0 0x0
0xffff8c8000011a80 0001 00000000 0x0 0x0
0xffff8c8000011b00 0001 00000000 0x0 0x0
0xffff8c8000011b80 0001 00000000 0x0 0x0
0xffff8c8000011c00 0001 00000000 0x0 0x0
0xffff8c8000011c80 0001 00000000 0x0 0x0
0xffff8c8000011d00 0001 00000000 0x0 0x0
0xffff8c8000011d80 0001 00000000 0x0 0x0
0xffff8c8000011e00 0001 00000000 0x0 0x0
0xffff8c8000011e80 0001 00000000 0x0 0x0
0xffff8c8000011f00 0001 00000000 0x0 0x0
0xffff8c8000011f80 0001 00000000 0x0 0x0
0xffff8c8000012000 0001 00000000 0x0 0x0
0xffff8c8000012080 0001 00000000 0x0 0x0
0xffff8c8000012100 0001 00000000 0x0 0x0
0xffff8c8000012180 0001 00000000 0x0 0x0
0xffff8c8000012200 0001 00000000 0x0 0x0
0xffff8c8000012280 0001 00000000 0x0 0x0
0xffff8c8000012300 0001 00000000 0x0 0x0
0xffff8c8000012380 0001 00000000 0x0 0x0
0xffff8c8000012400 0001 00000000 0x0 0x0
0xffff8c8000012480 0001 00000000 0x0 0x0
0xffff8c8000012500 0001 00000000 0x0 0x0
0xffff8c8000012580 0001 00000000 0x0 0x0
0xffff8c8000012600 0001 00000000 0x0 0x0
0xffff8c8000012680 0001 00000000 0x0 0x0
0xffff8c8000012700 0041 00000000 0x0 0x0
0xffff8c8000012780 0041 00000000 0x0 0x0
0xffff8c8000012800 0041 00000000 0x0 0x0
0xffff8c8000012880 0041 00000000 0x0 0x0
0xffff8c8000012900 0041 00000000 0x0 0x0
0xffff8c8000012980 0041 00000000 0x0 0x0
0xffff8c8000012a00 0041 00000000 0x0 0x0
0xffff8c8000012a80 0041 00000000 0x0 0x0
0xffff8c8000012b00 0041 00000000 0x0 0x0
0xffff8c8000012b80 0041 00000000 0x0 0x0
0xffff8c8000012c00 0041 00000000 0x0 0x0
0xffff8c8000012c80 0041 00000000 0x0 0x0
0xffff8c8000012d00 0041 00000000 0x0 0x0
0xffff8c8000012d80 0041 00000000 0x0 0x0
0xffff8c8000012e00 0041 00000000 0x0 0x0
0xffff8c8000012e80 0041 00000000 0x0 0x0
0xffff8c8000012f00 0041 00000000 0x0 0x0
0xffff8c8000012f80 0041 00000000 0x0 0x0
0xffff8c8000013000 0041 00000000 0x0 0x0
0xffff8c8000013080 0041 00000000 0x0 0x0
0xffff8c8000013100 0041 00000000 0x0 0x0
0xffff8c8000013180 0041 00000000 0x0 0x0
0xffff8c8000013200 0041 00000000 0x0 0x0
0xffff8c8000013280 0041 00000000 0x0 0x0
0xffff8c8000013300 0041 00000000 0x0 0x0
0xffff8c8000013380 0041 00000000 0x0 0x0
0xffff8c8000013400 0041 00000000 0x0 0x0
0xffff8c8000013480 0041 00000000 0x0 0x0
0xffff8c8000013500 0041 00000000 0x0 0x0
0xffff8c8000013580 0041 00000000 0x0 0x0
0xffff8c8000013600 0041 00000000 0x0 0x0
0xffff8c8000013680 0041 00000000 0x0 0x0
0xffff8c8000013700 0041 00000000 0x0 0x0
0xffff8c8000013780 0041 00000000 0x0 0x0
0xffff8c8000013800 0041 00000000 0x0 0x0
0xffff8c8000013880 0041 00000000 0x0 0x0
0xffff8c8000013900 0041 00000000 0x0 0x0
0xffff8c8000013980 0041 00000000 0x0 0x0
0xffff8c8000013a00 0041 00000000 0x0 0x0
0xffff8c8000013a80 0041 00000000 0x0 0x0
0xffff8c8000013b00 0041 00000000 0x0 0x0
0xffff8c8000013b80 0041 00000000 0x0 0x0
0xffff8c8000013c00 0041 00000000 0x0 0x0
0xffff8c8000013c80 0041 00000000 0x0 0x0
0xffff8c8000013d00 0041 00000000 0x0 0x0
0xffff8c8000013d80 0001 00000000 0x0 0x0
0xffff8c8000013e00 0001 00000000 0x0 0x0
0xffff8c8000013e80 0001 00000000 0x0 0x0
0xffff8c8000013f00 0001 00000000 0x0 0x0
0xffff8c8000013f80 0001 00000000 0x0 0x0
0xffff8c8000014000 0001 00000000 0x0 0x0
0xffff8c8000014080 0001 00000000 0x0 0x0
0xffff8c8000014100 0001 00000000 0x0 0x0
0xffff8c8000014180 0001 00000000 0x0 0x0
0xffff8c8000014200 0001 00000000 0x0 0x0
0xffff8c8000014280 0001 00000000 0x0 0x0
0xffff8c8000014300 0001 00000000 0x0 0x0
0xffff8c8000014380 0001 00000000 0x0 0x0
0xffff8c8000014400 0001 00000000 0x0 0x0
0xffff8c8000014480 0001 00000000 0x0 0x0
0xffff8c8000014500 0001 00000000 0x0 0x0
0xffff8c8000014580 0001 00000000 0x0 0x0
0xffff8c8000014600 0001 00000000 0x0 0x0
0xffff8c8000014680 0001 00000000 0x0 0x0
0xffff8c8000014700 0001 00000000 0x0 0x0
0xffff8c8000014780 0001 00000000 0x0 0x0
0xffff8c8000014800 0001 00000000 0x0 0x0
0xffff8c8000014880 0001 00000000 0x0 0x0
0xffff8c8000014900 0001 00000000 0x0 0x0
0xffff8c8000014980 0001 00000000 0x0 0x0
0xffff8c8000014a00 0001 00000000 0x0 0x0
0xffff8c8000014a80 0001 00000000 0x0 0x0
0xffff8c8000014b00 0001 00000000 0x0 0x0
0xffff8c8000014b80 0001 00000000 0x0 0x0
0xffff8c8000014c00 0001 00000000 0x0 0x0
0xffff8c8000014c80 0001 00000000 0x0 0x0
0xffff8c8000014d00 0001 00000000 0x0 0x0
0xffff8c8000014d80 0001 00000000 0x0 0x0
0xffff8c8000014e00 0001 00000000 0x0 0x0
0xffff8c8000014e80 0001 00000000 0x0 0x0
0xffff8c8000014f00 0001 00000000 0x0 0x0
0xffff8c8000014f80 0001 00000000 0x0 0x0
0xffff8c8000015000 0001 00000000 0x0 0x0
0xffff8c8000015080 0001 00000000 0x0 0x0
0xffff8c8000015100 0001 00000000 0x0 0x0
0xffff8c8000015180 0001 00000000 0x0 0x0
0xffff8c8000015200 0001 00000000 0x0 0x0
0xffff8c8000015280 0001 00000000 0x0 0x0
0xffff8c8000015300 0001 00000000 0x0 0x0
0xffff8c8000015380 0001 00000000 0x0 0x0
0xffff8c8000015400 0001 00000000 0x0 0x0
0xffff8c8000015480 0001 00000000 0x0 0x0
0xffff8c8000015500 0001 00000000 0x0 0x0
0xffff8c8000015580 0001 00000000 0x0 0x0
0xffff8c8000015600 0001 00000000 0x0 0x0
0xffff8c8000015680 0001 00000000 0x0 0x0
0xffff8c8000015700 0001 00000000 0x0 0x0
0xffff8c8000015780 0001 00000000 0x0 0x0
0xffff8c8000015800 0001 00000000 0x0 0x0
0xffff8c8000015880 0041 00000000 0x0 0x0
0xffff8c8000015900 0041 00000000 0x0 0x0
0xffff8c8000015980 0041 00000000 0x0 0x0
0xffff8c8000015a00 0041 00000000 0x0 0x0
0xffff8c8000015a80 0041 00000000 0x0 0x0
0xffff8c8000015b00 0041 00000000 0x0 0x0
0xffff8c8000015b80 0041 00000000 0x0 0x0
0xffff8c8000015c00 0041 00000000 0x0 0x0
0xffff8c8000015c80 0041 00000000 0x0 0x0
0xffff8c8000015d00 0041 00000000 0x0 0x0
0xffff8c8000015d80 0041 00000000 0x0 0x0
0xffff8c8000015e00 0041 00000000 0x0 0x0
0xffff8c8000015e80 0041 00000000 0x0 0x0
0xffff8c8000015f00 0041 00000000 0x0 0x0
0xffff8c8000015f80 0041 00000000 0x0 0x0
0xffff8c8000016000 0041 00000000 0x0 0x0
0xffff8c8000016080 0041 00000000 0x0 0x0
0xffff8c8000016100 0041 00000000 0x0 0x0
0xffff8c8000016180 0041 00000000 0x0 0x0
0xffff8c8000016200 0041 00000000 0x0 0x0
0xffff8c8000016280 0041 00000000 0x0 0x0
0xffff8c8000016300 0041 00000000 0x0 0x0
0xffff8c8000016380 0041 00000000 0x0 0x0
0xffff8c8000016400 0041 00000000 0x0 0x0
0xffff8c8000016480 0041 00000000 0x0 0x0
0xffff8c8000016500 0041 00000000 0x0 0x0
0xffff8c8000016580 0041 00000000 0x0 0x0
0xffff8c8000016600 0041 00000000 0x0 0x0
0xffff8c8000016680 0041 00000000 0x0 0x0
0xffff8c8000016700 0041 00000000 0x0 0x0
0xffff8c8000016780 0041 00000000 0x0 0x0
0xffff8c8000016800 0041 00000000 0x0 0x0
0xffff8c8000016880 0041 00000000 0x0 0x0
0xffff8c8000016900 0041 00000000 0x0 0x0
0xffff8c8000016980 0041 00000000 0x0 0x0
0xffff8c8000016a00 0041 00000000 0x0 0x0
0xffff8c8000016a80 0041 00000000 0x0 0x0
0xffff8c8000016b00 0041 00000000 0x0 0x0
0xffff8c8000016b80 0041 00000000 0x0 0x0
0xffff8c8000016c00 0041 00000000 0x0 0x0
0xffff8c8000016c80 0041 00000000 0x0 0x0
0xffff8c8000016d00 0041 00000000 0x0 0x0
0xffff8c8000016d80 0041 00000000 0x0 0x0
0xffff8c8000016e00 0041 00000000 0x0 0x0
0xffff8c8000016e80 0041 00000000 0x0 0x0
0xffff8c8000016f00 0041 00000000 0x0 0x0
0xffff8c8000016f80 0041 00000000 0x0 0x0
0xffff8c8000017000 0001 00000000 0x0 0x0
0xffff8c8000017080 0001 00000000 0x0 0x0
0xffff8c8000017100 0001 00000000 0x0 0x0
0xffff8c8000017180 0001 00000000 0x0 0x0
0xffff8c8000017200 0001 00000000 0x0 0x0
0xffff8c8000017280 0001 00000000 0x0 0x0
0xffff8c8000017300 0001 00000000 0x0 0x0
0xffff8c8000017380 0001 00000000 0x0 0x0
0xffff8c8000017400 0001 00000000 0x0 0x0
0xffff8c8000017480 0001 00000000 0x0 0x0
0xffff8c8000017500 0001 00000000 0x0 0x0
0xffff8c8000017580 0001 00000000 0x0 0x0
0xffff8c8000017600 0001 00000000 0x0 0x0
0xffff8c8000017680 0001 00000000 0x0 0x0
0xffff8c8000017700 0001 00000000 0x0 0x0
0xffff8c8000017780 0001 00000000 0x0 0x0
0xffff8c8000017800 0001 00000000 0x0 0x0
0xffff8c8000017880 0001 00000000 0x0 0x0
0xffff8c8000017900 0001 00000000 0x0 0x0
0xffff8c8000017980 0001 00000000 0x0 0x0
0xffff8c8000017a00 0001 00000000 0x0 0x0
0xffff8c8000017a80 0001 00000000 0x0 0x0
0xffff8c8000017b00 0001 00000000 0x0 0x0
0xffff8c8000017b80 0001 00000000 0x0 0x0
0xffff8c8000017c00 0001 00000000 0x0 0x0
0xffff8c8000017c80 0001 00000000 0x0 0x0
0xffff8c8000017d00 0001 00000000 0x0 0x0
0xffff8c8000017d80 0001 00000000 0x0 0x0
0xffff8c8000017e00 0001 00000000 0x0 0x0
0xffff8c8000017e80 0001 00000000 0x0 0x0
0xffff8c8000017f00 0001 00000000 0x0 0x0
0xffff8c8000017f80 0001 00000000 0x0 0x0
0xffff8c8000018000 0001 00000000 0x0 0x0
0xffff8c8000018080 0001 00000000 0x0 0x0
0xffff8c8000018100 0001 00000000 0x0 0x0
0xffff8c8000018180 0001 00000000 0x0 0x0
0xffff8c8000018200 0001 00000000 0x0 0x0
0xffff8c8000018280 0001 00000000 0x0 0x0
0xffff8c8000018300 0001 00000000 0x0 0x0
0xffff8c8000018380 0001 00000000 0x0 0x0
0xffff8c8000018400 0001 00000000 0x0 0x0
0xffff8c8000018480 0001 00000000 0x0 0x0
0xffff8c8000018500 0001 00000000 0x0 0x0
0xffff8c8000018580 0001 00000000 0x0 0x0
0xffff8c8000018600 0001 00000000 0x0 0x0
0xffff8c8000018680 0001 00000000 0x0 0x0
0xffff8c8000018700 0001 00000000 0x0 0x0
0xffff8c8000018780 0001 00000000 0x0 0x0
0xffff8c8000018800 0001 00000000 0x0 0x0
0xffff8c8000018880 0001 00000000 0x0 0x0
0xffff8c8000018900 0001 00000000 0x0 0x0
0xffff8c8000018980 0001 00000000 0x0 0x0
0xffff8c8000018a00 0001 00000000 0x0 0x0
0xffff8c8000018a80 0001 00000000 0x0 0x0
0xffff8c8000018b00 0041 00000000 0x0 0x0
0xffff8c8000018b80 0041 00000000 0x0 0x0
0xffff8c8000018c00 0041 00000000 0x0 0x0
0xffff8c8000018c80 0041 00000000 0x0 0x0
0xffff8c8000018d00 0041 00000000 0x0 0x0
0xffff8c8000018d80 0041 00000000 0x0 0x0
0xffff8c8000018e00 0041 00000000 0x0 0x0
0xffff8c8000018e80 0041 00000000 0x0 0x0
0xffff8c8000018f00 0041 00000000 0x0 0x0
0xffff8c8000018f80 0041 00000000 0x0 0x0
0xffff8c8000019000 0041 00000000 0x0 0x0
0xffff8c8000019080 0041 00000000 0x0 0x0
0xffff8c8000019100 0041 00000000 0x0 0x0
0xffff8c8000019180 0041 00000000 0x0 0x0
0xffff8c8000019200 0041 00000000 0x0 0x0
0xffff8c8000019280 0041 00000000 0x0 0x0
0xffff8c8000019300 0041 00000000 0x0 0x0
0xffff8c8000019380 0041 00000000 0x0 0x0
0xffff8c8000019400 0041 00000000 0x0 0x0
0xffff8c8000019480 0041 00000000 0x0 0x0
0xffff8c8000019500 0041 00000000 0x0 0x0
0xffff8c8000019580 0041 00000000 0x0 0x0
0xffff8c8000019600 0041 00000000 0x0 0x0
0xffff8c8000019680 0041 00000000 0x0 0x0
0xffff8c8000019700 0041 00000000 0x0 0x0
0xffff8c8000019780 0041 00000000 0x0 0x0
0xffff8c8000019800 0041 00000000 0x0 0x0
0xffff8c8000019880 0041 00000000 0x0 0x0
0xffff8c8000019900 0041 00000000 0x0 0x0
0xffff8c8000019980 0045 00000000 0x0 0x0
0xffff8c8000019a00 0045 00000000 0x0 0x0
0xffff8c8000019a80 0041 00000000 0x0 0x0
0xffff8c8000019b00 0041 00000000 0x0 0x0
0xffff8c8000019b80 0041 00000000 0x0 0x0
0xffff8c8000019c00 0041 00000000 0x0 0x0
0xffff8c8000019c80 0041 00000000 0x0 0x0
0xffff8c8000019d00 0041 00000000 0x0 0x0
0xffff8c8000019d80 0045 00000000 0x0 0x0
0xffff8c8000019e00 0045 00000000 0x0 0x0
0xffff8c8000019e80 0041 00000000 0x0 0x0
0xffff8c8000019f00 0045 00000000 0x0 0x0
0xffff8c8000019f80 0041 00000000 0x0 0x0
0xffff8c800001a000 0045 00000000 0x0 0x0
0xffff8c800001a080 0041 00000000 0x0 0x0
0xffff8c800001a100 0041 00000000 0x0 0x0
0xffff8c800001a180 0045 00000000 0x0 0x0
0xffff8c800001a200 0045 00000000 0x0 0x0
0xffff8c800001a280 0041 00000000 0x0 0x0
0xffff8c800001a300 0045 00000000 0x0 0x0
0xffff8c800001a380 0045 00000000 0x0 0x0
0xffff8c800001a400 0045 00000000 0x0 0x0
0xffff8c800001a480 0041 00000000 0x0 0x0
0xffff8c800001a500 0001 00000000 0x0 0x0
0xffff8c800001a580 0001 00000000 0x0 0x0
0xffff8c800001a600 0001 00000000 0x0 0x0
0xffff8c800001a680 0001 00000000 0x0 0x0
0xffff8c800001a700 0001 00000000 0x0 0x0
0xffff8c800001a780 0001 00000000 0x0 0x0
0xffff8c800001a800 0001 00000000 0x0 0x0
0xffff8c800001a880 0001 00000000 0x0 0x0
0xffff8c800001a900 0001 00000000 0x0 0x0
0xffff8c800001a980 0001 00000000 0x0 0x0
0xffff8c800001aa00 0001 00000000 0x0 0x0
0xffff8c800001aa80 0001 00000000 0x0 0x0
0xffff8c800001ab00 0001 00000000 0x0 0x0
0xffff8c800001ab80 0001 00000000 0x0 0x0
0xffff8c800001ac00 0001 00000000 0x0 0x0
0xffff8c800001ac80 0001 00000000 0x0 0x0
0xffff8c800001ad00 0001 00000000 0x0 0x0
0xffff8c800001ad80 0001 00000000 0x0 0x0
0xffff8c800001ae00 0001 00000000 0x0 0x0
0xffff8c800001ae80 0001 00000000 0x0 0x0
0xffff8c800001af00 0001 00000000 0x0 0x0
0xffff8c800001af80 0001 00000000 0x0 0x0
0xffff8c800001b000 0001 00000000 0x0 0x0
0xffff8c800001b080 0001 00000000 0x0 0x0
0xffff8c800001b100 0001 00000000 0x0 0x0
0xffff8c800001b180 0001 00000000 0x0 0x0
0xffff8c800001b200 0001 00000000 0x0 0x0
0xffff8c800001b280 0001 00000000 0x0 0x0
0xffff8c800001b300 0001 00000000 0x0 0x0
0xffff8c800001b380 0001 00000000 0x0 0x0
0xffff8c800001b400 0001 00000000 0x0 0x0
0xffff8c800001b480 0001 00000000 0x0 0x0
0xffff8c800001b500 0001 00000000 0x0 0x0
0xffff8c800001b580 0001 00000000 0x0 0x0
0xffff8c800001b600 0001 00000000 0x0 0x0
0xffff8c800001b680 0001 00000000 0x0 0x0
0xffff8c800001b700 0001 00000000 0x0 0x0
0xffff8c800001b780 0001 00000000 0x0 0x0
0xffff8c800001b800 0001 00000000 0x0 0x0
0xffff8c800001b880 0001 00000000 0x0 0x0
0xffff8c800001b900 0001 00000000 0x0 0x0
0xffff8c800001b980 0001 00000000 0x0 0x0
0xffff8c800001ba00 0001 00000000 0x0 0x0
0xffff8c800001ba80 0001 00000000 0x0 0x0
0xffff8c800001bb00 0001 00000000 0x0 0x0
0xffff8c800001bb80 0001 00000000 0x0 0x0
0xffff8c800001bc00 0001 00000000 0x0 0x0
0xffff8c800001bc80 0001 00000000 0x0 0x0
0xffff8c800001bd00 0001 00000000 0x0 0x0
0xffff8c800001bd80 0001 00000000 0x0 0x0
0xffff8c800001be00 0001 00000000 0x0 0x0
0xffff8c800001be80 0001 00000000 0x0 0x0
0xffff8c800001bf00 0001 00000000 0x0 0x0
0xffff8c800001bf80 0001 00000000 0x0 0x0
0xffff8c800001c000 0001 00000000 0x0 0x0
0xffff8c800001c080 0001 00000000 0x0 0x0
0xffff8c800001c100 0001 00000000 0x0 0x0
0xffff8c800001c180 0001 00000000 0x0 0x0
0xffff8c800001c200 0001 00000000 0x0 0x0
0xffff8c800001c280 0001 00000000 0x0 0x0
0xffff8c800001c300 0001 00000000 0x0 0x0
0xffff8c800001c380 0001 00000000 0x0 0x0
0xffff8c800001c400 0001 00000000 0x0 0x0
0xffff8c800001c480 0001 00000000 0x0 0x0
0xffff8c800001c500 0001 00000000 0x0 0x0
0xffff8c800001c580 0001 00000000 0x0 0x0
0xffff8c800001c600 0001 00000000 0x0 0x0
0xffff8c800001c680 0001 00000000 0x0 0x0
0

---
This report is generated by a bot. It may contain errors.
See https://goo.gl/tpsmEJ for more information about syzbot.
syzbot engineers can be reached at syzk...@googlegroups.com.

syzbot will keep track of this issue. See:
https://goo.gl/tpsmEJ#status for how to communicate with syzbot.

syzbot

unread,

Mar 15, 2021, 7:13:20 PM3/15/21

to syzkaller-...@googlegroups.com

syzbot has found a reproducer for the following issue on:

HEAD commit: b960aff9 make(1): add test for modifier parts in ':=' assi..
git tree: netbsd

console output: https://syzkaller.appspot.com/x/log.txt?x=1406a8d2d00000

kernel config: https://syzkaller.appspot.com/x/.config?x=1420f906d33d9f1f
dashboard link: https://syzkaller.appspot.com/bug?extid=5f6a6329d139810dfe3c
compiler: g++ (Ubuntu 5.4.0-6ubuntu1~16.04.12) 5.4.0 20160609

syz repro: https://syzkaller.appspot.com/x/repro.syz?x=1303b406d00000
C reproducer: https://syzkaller.appspot.com/x/repro.c?x=1666867cd00000

IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+5f6a63...@syzkaller.appspotmail.com

[ 55.4941170] panic: UBSan: Undefined Behavior in /syzkaller/managers/netbsd-kubsan/kernel/sys/kern/subr_time.c:223:2, signed integer overflow: 9223372036854775804 + 55 cannot be represented in type 'long int'

[ 55.4941170] cpu1: Begin traceback...
[ 55.5241005] vpanic() at netbsd:vpanic+0x2cd syzkaller/managers/netbsd-kubsan/kernel/sys/kern/subr_prf.c:290
[ 55.5840980] isAlreadyReported() at netbsd:isAlreadyReported
[ 55.6441020] HandleOverflow() at netbsd:HandleOverflow+0x1d0 syzkaller/managers/netbsd-kubsan/kernel/sys/../common/lib/libc/misc/ubsan.c:375
[ 55.6940956] gettimeleft() at netbsd:gettimeleft+0x3ec syzkaller/managers/netbsd-kubsan/kernel/sys/kern/subr_time.c:223
[ 55.7640969] sel_do_scan() at netbsd:sel_do_scan+0x58d syzkaller/managers/netbsd-kubsan/kernel/sys/kern/sys_select.c:294
[ 55.8140963] selcommon() at netbsd:selcommon+0x303 syzkaller/managers/netbsd-kubsan/kernel/sys/kern/sys_select.c:386
[ 55.8740953] compat_50_sys_select() at netbsd:compat_50_sys_select+0xf2 syzkaller/managers/netbsd-kubsan/kernel/sys/compat/common/kern_select_50.c:126
[ 55.9340955] sys_syscall() at netbsd:sys_syscall+0x1cf sy_call syzkaller/managers/netbsd-kubsan/kernel/sys/sys/syscallvar.h:66 [inline]
[ 55.9340955] sys_syscall() at netbsd:sys_syscall+0x1cf syzkaller/managers/netbsd-kubsan/kernel/sys/kern/sys_syscall.c:77
[ 55.9940975] syscall() at netbsd:syscall+0x2d5 sy_call syzkaller/managers/netbsd-kubsan/kernel/sys/sys/syscallvar.h:65 [inline]
[ 55.9940975] syscall() at netbsd:syscall+0x2d5 sy_invoke syzkaller/managers/netbsd-kubsan/kernel/sys/sys/syscallvar.h:94 [inline]
[ 55.9940975] syscall() at netbsd:syscall+0x2d5 syzkaller/managers/netbsd-kubsan/kernel/sys/arch/x86/x86/syscall.c:138
[ 56.0040990] --- syscall (number 0) ---
[ 56.0240959] netbsd:syscall+0x2d5:
[ 56.0240959] cpu1: End traceback...
[ 56.0340952] fatal breakpoint trap in supervisor mode
[ 56.0340952] trap type 1 code 0 rip 0xffffffff80221a95 cs 0x8 rflags 0x246 cr2 0x20000000 ilevel 0 rsp 0xffffa300c808b5c0
[ 56.0440973] curlwp 0xffff804f7daaca80 pid 1077.1077 lowest kstack 0xffffa300c80872c0
Stopped in pid 1077.1077 (syz-executor8257) at netbsd:breakpoint+0x5: leave

?
breakpoint() at netbsd:breakpoint+0x5
db_panic() at netbsd:db_panic+0xec syzkaller/managers/netbsd-kubsan/kernel/sys/ddb/db_panic.c:67
vpanic() at netbsd:vpanic+0x2cd syzkaller/managers/netbsd-kubsan/kernel/sys/kern/subr_prf.c:290
isAlreadyReported() at netbsd:isAlreadyReported
HandleOverflow() at netbsd:HandleOverflow+0x1d0 syzkaller/managers/netbsd-kubsan/kernel/sys/../common/lib/libc/misc/ubsan.c:375
gettimeleft() at netbsd:gettimeleft+0x3ec syzkaller/managers/netbsd-kubsan/kernel/sys/kern/subr_time.c:223
sel_do_scan() at netbsd:sel_do_scan+0x58d syzkaller/managers/netbsd-kubsan/kernel/sys/kern/sys_select.c:294
selcommon() at netbsd:selcommon+0x303 syzkaller/managers/netbsd-kubsan/kernel/sys/kern/sys_select.c:386
compat_50_sys_select() at netbsd:compat_50_sys_select+0xf2 syzkaller/managers/netbsd-kubsan/kernel/sys/compat/common/kern_select_50.c:126

sys_syscall() at netbsd:sys_syscall+0x1cf sy_call syzkaller/managers/netbsd-kubsan/kernel/sys/sys/syscallvar.h:66 [inline]
sys_syscall() at netbsd:sys_syscall+0x1cf syzkaller/managers/netbsd-kubsan/kernel/sys/kern/sys_syscall.c:77

syscall() at netbsd:syscall+0x2d5 sy_call syzkaller/managers/netbsd-kubsan/kernel/sys/sys/syscallvar.h:65 [inline]
syscall() at netbsd:syscall+0x2d5 sy_invoke syzkaller/managers/netbsd-kubsan/kernel/sys/sys/syscallvar.h:94 [inline]
syscall() at netbsd:syscall+0x2d5 syzkaller/managers/netbsd-kubsan/kernel/sys/arch/x86/x86/syscall.c:138

--- syscall (number 0) ---
netbsd:syscall+0x2d5:
Panic string: UBSan: Undefined Behavior in /syzkaller/managers/netbsd-kubsan/kernel/sys/kern/subr_time.c:223:2, signed integer overflow: 9223372036854775804 + 55 cannot be represented in type 'long int'

PID LID S CPU FLAGS STRUCT LWP * NAME WAIT

1191 1191 2 0 0 ffff804f815b0140 syz-executor8257
1103 1103 2 0 0 ffff804f7e38b980 syz-executor8257
1098 1098 2 0 0 ffff804f7e38b540 syz-executor8257
1085 1085 2 1 0 ffff804f7f2f40c0 syz-executor8257
1077 >1077 7 1 0 ffff804f7daaca80 syz-executor8257
420 420 2 0 0 ffff804f7f9b0900 syz-executor8257
1086 1086 2 0 0 ffff804f7efce480 syz-executor8257
1083 >1083 7 0 0 ffff804f7ca07a00 syz-executor8257
1102 1102 2 0 0 ffff804f7f9b04c0 syz-executor8257
1078 1078 2 0 140 ffff804f7f9b0080 syz-executor8257
1072 1072 2 1 140 ffff804f7dded680 syz-executor8257
1249 1249 2 1 140 ffff804f7dded240 syz-executor8257
1075 1075 3 0 180 ffff804f7daac640 syz-executor8257 nanoslp
1074 1074 2 1 100 ffff804f7dff66c0 sshd
856 856 3 1 180 ffff804f7efce040 getty nanoslp
1101 1101 3 0 180 ffff804f7e38b100 getty nanoslp
953 953 3 0 180 ffff804f7eb30740 getty nanoslp
1099 1099 3 0 1c0 ffff804f7dff6280 getty ttyraw
948 948 3 1 180 ffff804f7f2f4940 sshd select
982 982 3 1 180 ffff804f7f0aabc0 powerd kqueue
872 872 3 0 180 ffff804f7dff6b00 syslogd kqueue
597 597 3 0 180 ffff804f7f0aa780 dhcpcd poll
594 594 3 0 180 ffff804f7e3132c0 dhcpcd poll
593 593 3 0 180 ffff804f7e313700 dhcpcd poll
579 579 3 1 180 ffff804f7f0aa340 dhcpcd poll
350 350 3 0 180 ffff804f7eb30300 dhcpcd poll
349 349 3 0 180 ffff804f7e313b40 dhcpcd poll
348 348 3 0 180 ffff804f7ddedac0 dhcpcd poll
1 1 3 0 180 ffff804f7588b0c0 init wait
0 741 3 0 200 ffff804f7dab71c0 physiod physiod
0 192 3 0 200 ffff804f7daac200 pooldrain pooldrain
0 166 3 0 200 ffff804f7dab7a40 ioflush syncer
0 165 3 1 200 ffff804f7dab7600 pgdaemon pgdaemon
0 162 3 1 200 ffff804f7ca075c0 usb7 usbevt
0 161 3 1 200 ffff804f7ca07180 usb6 usbevt
0 31 3 1 200 ffff804f7995a9c0 usb5 usbevt
0 63 3 1 200 ffff804f7995a580 usb4 usbevt
0 126 3 1 200 ffff804f7995a140 usb3 usbevt
0 125 3 1 200 ffff804f76915980 usb2 usbevt
0 124 3 1 200 ffff804f76915540 usb1 usbevt
0 123 3 1 200 ffff804f76915100 usb0 usbevt
0 122 3 1 200 ffff804f7588b940 usbtask-dr usbtsk
0 121 3 1 200 ffff804f7588b500 usbtask-hc usbtsk
0 120 3 0 200 ffff804f72cb3ac0 npfgc0 npfgcw
0 119 3 1 200 ffff804f75866900 rt_free rt_free
0 118 3 1 200 ffff804f758664c0 unpgc unpgc
0 117 3 0 200 ffff804f75866080 key_timehandler key_timehandler
0 116 3 1 200 ffff804f758398c0 icmp6_wqinput/1 icmp6_wqinput
0 115 3 0 200 ffff804f75839480 icmp6_wqinput/0 icmp6_wqinput
0 114 3 0 200 ffff804f75839040 nd6_timer nd6_timer
0 113 3 1 200 ffff804f757e4bc0 carp6_wqinput/1 carp6_wqinput
0 112 3 0 200 ffff804f757e4780 carp6_wqinput/0 carp6_wqinput
0 111 3 1 200 ffff804f757e4340 carp_wqinput/1 carp_wqinput
0 110 3 0 200 ffff804f757c7b80 carp_wqinput/0 carp_wqinput
0 109 3 1 200 ffff804f757ba2c0 icmp_wqinput/1 icmp_wqinput
0 108 3 0 200 ffff804f757ba700 icmp_wqinput/0 icmp_wqinput
0 107 3 0 200 ffff804f757bab40 rt_timer rt_timer
0 106 3 0 200 ffff804f757c7740 vmem_rehash vmem_rehash
0 105 3 0 200 ffff804f757c7300 entbutler entropy
0 96 3 1 200 ffff804f75123b00 viomb balloon
0 30 3 1 200 ffff804f751236c0 vioif0_txrx/1 vioif0_txrx
0 29 3 0 200 ffff804f75123280 vioif0_txrx/0 vioif0_txrx
0 27 3 1 200 ffff804f72cb3680 scsibus0 sccomp
0 26 3 0 200 ffff804f72cb3240 pms0 pmsreset
0 25 3 1 200 ffff804f72c04a80 xcall/1 xcall
0 24 1 1 200 ffff804f72c04640 softser/1
0 23 1 1 200 ffff804f72c04200 softclk/1
0 22 1 1 200 ffff804f72bdfa40 softbio/1
0 21 1 1 200 ffff804f72bdf600 softnet/1
0 20 1 1 201 ffff804f72bdf1c0 idle/1
0 19 3 0 200 ffff8050a1b49a00 lnxpwrwq lnxpwrwq
0 18 3 0 200 ffff8050a1b495c0 lnxlngwq lnxlngwq
0 17 3 0 200 ffff8050a1b49180 lnxsyswq lnxsyswq
0 16 3 0 200 ffff8050a1b649c0 lnxrcugc lnxrcugc
0 15 3 0 200 ffff8050a1b64580 sysmon smtaskq
0 14 3 0 200 ffff8050a1b64140 pmfsuspend pmfsuspend
0 13 3 1 200 ffff8050a1b73980 pmfevent pmfevent
0 12 3 1 200 ffff8050a1b73540 sopendfree sopendfr
0 11 3 0 200 ffff8050a1b73100 iflnkst iflnkst
0 10 3 0 200 ffff8050a2b9e940 nfssilly nfssilly
0 9 3 0 200 ffff8050a2b9e500 vdrain vdrain
0 8 3 1 200 ffff8050a2b9e0c0 modunload mod_unld
0 7 3 0 200 ffff8050a2bd3900 xcall/0 xcall
0 6 1 0 200 ffff8050a2bd34c0 softser/0
0 5 1 0 200 ffff8050a2bd3080 softclk/0
0 4 1 0 200 ffff8050a2bfd8c0 softbio/0
0 3 1 0 200 ffff8050a2bfd480 softnet/0
0 2 1 0 201 ffff8050a2bfd040 idle/0
0 0 3 1 200 ffffffff85edc580 swapper uvm
[Locks tracked through LWPs]

****** LWP 1085.1085 (syz-executor8257) @ 0xffff804f7f2f40c0, l_stat=2

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at uvm_obj_init)
lock address : 0xffff804f7fe5c900 type : sleep/adaptive
initialized : 0xffffffff8316a68e

shared holds : 0 exclusive: 0

shares wanted: 1 exclusive: 0
relevant cpu : 1 last held: 65535
relevant lwp : 0xffff804f7f2f40c0 last held: 000000000000000000
last locked : 0xffffffff83131e2c unlocked*: 0xffffffff8312e119

owner/count : 000000000000000000 flags : 000000000000000000
Turnstile: no active turnstile for this lock.

****** LWP 1102.1102 (syz-executor8257) @ 0xffff804f7f9b04c0, l_stat=2

*** Locks held:

* Lock 0 (initialized at pmap_ctor)

lock address : 0xffff804f7e015380 type : sleep/adaptive

initialized : 0xffffffff80f5460e
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0

relevant lwp : 0xffff804f7f9b04c0 last held: 0xffff804f7f9b04c0

last locked* : 0xffffffff80f56cba unlocked : 0xffffffff80f54346

owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

*** Locks wanted: none

****** LWP 594.594 (dhcpcd) @ 0xffff804f7e3132c0, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at module_hook_init)
lock address : 0xffffffff862cc1c0 type : sleep/adaptive
initialized : 0xffffffff8325afb7
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0

relevant lwp : 0xffff804f7e3132c0 last held: 000000000000000000