page fault in uao_detach

5 views

Skip to first unread message

syzbot

unread,

Jun 21, 2023, 9:23:06 PM6/21/23

to syzkaller-...@googlegroups.com

Hello,

syzbot found the following issue on:

HEAD commit: 88dbb62f4fef adjust for new fontconfig files.
git tree: netbsd
console output: https://syzkaller.appspot.com/x/log.txt?x=1119dc57280000
kernel config: https://syzkaller.appspot.com/x/.config?x=739e57438eb9ed9e
dashboard link: https://syzkaller.appspot.com/bug?extid=78e30d42d95eaeccd316
compiler: Debian clang version 15.0.7

Unfortunately, I don't have any reproducer for this issue yet.

Downloadable assets:
disk image: https://storage.googleapis.com/syzbot-assets/de389fd5fca3/disk-88dbb62f.raw.xz
netbsd.gdb: https://storage.googleapis.com/syzbot-assets/e0adfa149079/netbsd-88dbb62f.gdb.xz

IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+78e30d...@syzkaller.appspotmail.com

[ 181.3034649] fatal page fault in supervisor mode
[ 181.3034649] trap type 6 code 0 rip 0xffffffff84f97605 cs 0x8 rflags 0x10246 cr2 0x61 ilevel 0 rsp 0xffffd480d0bdf9d0
[ 181.3134686] curlwp 0xffffd4801376ab80 pid 3167.3167 lowest kstack 0xffffd480d0bd82c0
kernel: page fault trap, code=0
Stopped in pid 3167.3167 (syz-executor.2) at netbsd:uao_detach+0x1b5: movq 0(%r15),%rbx
?
uao_detach() at netbsd:uao_detach+0x1b5 sys/uvm/uvm_aobj.c:619
uvm_unmap_detach() at netbsd:uvm_unmap_detach+0x59d
lwp_ctl_exit() at netbsd:lwp_ctl_exit+0x5ed
exit1() at netbsd:exit1+0xa3b
sys_exit() at netbsd:sys_exit+0x1d6
syscall() at netbsd:syscall+0x60c sy_invoke sys/sys/syscallvar.h:94 [inline]
syscall() at netbsd:syscall+0x60c sys/arch/x86/x86/syscall.c:138
--- syscall (number 1) ---
netbsd:syscall+0x60c:
Panic string: (null)
PID LID S CPU FLAGS STRUCT LWP * NAME WAIT
2548 4173 3 1 180 ffffd4801376a740 syz-executor.3 parked
2548 3284 3 1 180 ffffd48013b24100 syz-executor.3 parked
2548 2918 3 1 0 ffffd480134b69c0 syz-executor.3 swapiod
2548 2548 2 1 10040140 ffffd480134b6140 syz-executor.3
3404 3404 3 0 40 ffffd48013551180 syz-executor.4 tstile
3167 >3167 7 1 40 ffffd4801376ab80 syz-executor.2
2529 >2529 7 0 40 ffffd4801375db40 syz-executor.0
2653 2653 2 0 140 ffffd48013408100 syz-executor.5
2293 2293 2 0 140 ffffd480139af780 syz-executor.3
805 805 3 0 180 ffffd48013745280 syz-executor.4 parked
927 927 3 1 180 ffffd48013579a40 syz-executor.1 parked
925 925 3 1 180 ffffd480139afbc0 syz-executor.1 parked
1970 1970 3 1 180 ffffd48013b1f500 syz-executor.4 parked
913 913 3 0 180 ffffd48013408540 syz-executor.1 parked
1845 1845 3 0 180 ffffd480139af340 syz-executor.1 parked
1758 1758 3 0 180 ffffd4801375d700 syz-executor.1 parked
1715 1715 3 0 180 ffffd4801376a300 syz-executor.5 parked
1835 1835 3 1 180 ffffd48013745b00 syz-executor.1 parked
1750 1750 3 1 180 ffffd4801375d2c0 syz-executor.5 parked
1590 1590 3 1 180 ffffd480137456c0 syz-executor.5 parked
1080 1074 3 1 180 ffffd4801366c200 syz-fuzzer wait
1080 1200 3 0 1c0 ffffd48013579600 syz-fuzzer wait
1080 1376 3 0 1c0 ffffd48013551a00 syz-fuzzer parked
1080 1245 3 0 180 ffffd480135515c0 syz-fuzzer parked
1080 449 3 0 180 ffffd480134b6580 syz-fuzzer wait
1080 991 3 0 180 ffffd48013408980 syz-fuzzer wait
1080 1244 3 1 180 ffffd48012c85940 syz-fuzzer parked
1080 930 3 0 1c0 ffffd48012c85500 syz-fuzzer parked
1080 829 3 1 180 ffffd48012c850c0 syz-fuzzer parked
1080 942 3 0 180 ffffd48012bc6900 syz-fuzzer wait
1080 1102 3 0 180 ffffd48012bc64c0 syz-fuzzer parked
1080 1226 2 0 100 ffffd48012bc6080 syz-fuzzer
1080 1233 3 1 180 ffffd4801250e300 syz-fuzzer parked
1080 1080 3 0 180 ffffd480122ef6c0 syz-fuzzer parked
1237 1237 3 0 180 ffffd480123802c0 sshd select
1222 1222 3 0 180 ffffd480122efb00 getty nanoslp
1151 1151 3 0 180 ffffd480122ef280 getty nanoslp
1225 1225 3 0 180 ffffd480121eeac0 getty nanoslp
1184 1184 3 1 1c0 ffffd480121eb200 getty ttyraw
1095 1095 3 0 180 ffffd48012b978c0 sshd select
1088 1088 3 1 180 ffffd48012b97480 powerd kqueue
700 700 3 1 180 ffffd480125d4780 syslogd kqueue
746 746 3 0 180 ffffd48012b97040 dhcpcd poll
747 747 3 0 180 ffffd4801250e740 dhcpcd poll
742 742 3 1 180 ffffd4801250eb80 dhcpcd poll
602 602 3 0 180 ffffd480125d4bc0 dhcpcd poll
487 487 3 0 180 ffffd480125d4340 dhcpcd poll
292 292 3 0 180 ffffd48012380700 dhcpcd poll
485 485 3 1 180 ffffd48012380b40 dhcpcd poll
1 1 3 1 180 ffffd48011ee1100 init wait
0 3397 2 0 200 ffffd48013b24980 swapiod
0 1841 3 0 200 ffffd48013695ac0 ktrace ktrwait
0 815 3 0 200 ffffd480121eb640 physiod physiod
0 196 3 0 200 ffffd480121ee680 pooldrain pooldrain
0 195 3 0 200 ffffd480121ee240 ioflush syncer
0 194 3 1 200 ffffd480121eba80 pgdaemon pgdaemon
0 167 3 1 200 ffffd4801215ba40 usb7 usbevt
0 172 3 1 200 ffffd4801215b600 usb6 usbevt
0 170 3 1 200 ffffd4801215b1c0 usb5 usbevt
0 168 3 1 200 ffffd4801212ca00 usb4 usbevt
0 166 3 1 200 ffffd4801212c5c0 usb3 usbevt
0 165 3 1 200 ffffd4801212c180 usb2 usbevt
0 31 3 1 200 ffffd480120869c0 usb1 usbevt
0 63 3 0 200 ffffd48012086580 usb0 usbevt
0 126 3 1 200 ffffd48012086140 usbtask-dr usbtsk
0 125 3 0 200 ffffd48011ee1980 usbtask-hc usbtsk
0 124 3 1 200 ffffd48011ee1540 swwreboot swwreboot
0 123 3 0 200 ffffd480103f5b00 npfgc0 npfgcw
0 122 3 1 200 ffffd48011ed4940 rt_free rt_free
0 121 3 1 200 ffffd48011ed4500 unpgc unpgc
0 120 3 0 200 ffffd48011ed40c0 key_timehandler key_timehandler
0 119 3 1 200 ffffd48011ecf900 icmp6_wqinput/1 icmp6_wqinput
0 118 3 0 200 ffffd48011ecf4c0 icmp6_wqinput/0 icmp6_wqinput
0 117 3 0 200 ffffd48011ecf080 nd6_timer nd6_timer
0 116 3 1 200 ffffd48011cefbc0 carp6_wqinput/1 carp6_wqinput
0 115 3 0 200 ffffd48011cef780 carp6_wqinput/0 carp6_wqinput
0 114 3 1 200 ffffd48011cef340 carp_wqinput/1 carp_wqinput
0 113 3 0 200 ffffd48011eab8c0 carp_wqinput/0 carp_wqinput
0 112 3 1 200 ffffd48011eab480 icmp_wqinput/1 icmp_wqinput
0 111 3 0 200 ffffd48011cedb80 icmp_wqinput/0 icmp_wqinput
0 110 3 0 200 ffffd48011ced740 rt_timer rt_timer
0 109 3 0 200 ffffd48011eab040 vmem_rehash vmem_rehash
0 100 3 0 200 ffffd48011ced300 entbutler entropy
0 99 3 1 200 ffffd480117e0b40 viomb balloon
0 98 3 1 200 ffffd480117e0700 vioif0_txrx/1 vioif0_txrx
0 97 3 0 200 ffffd480117e02c0 vioif0_txrx/0 vioif0_txrx
0 30 3 0 200 ffffd480103f56c0 scsibus0 sccomp
0 29 3 0 200 ffffd480103f5280 pms0 pmsreset
0 28 3 1 200 ffffd480103daac0 xcall/1 xcall
0 27 1 1 200 ffffd480103da680 softser/1
0 26 1 1 200 ffffd480103da240 softclk/1
0 25 1 1 200 ffffd480103d8a80 softbio/1
0 24 1 1 200 ffffd480103d8640 softnet/1
0 23 1 1 201 ffffd480103d8200 idle/1
0 22 3 0 200 ffffd4800f1f4a40 lnxsyswq lnxsyswq
0 21 3 0 200 ffffd4800f1f4600 lnxubdwq lnxubdwq
0 20 3 0 200 ffffd4800f1f41c0 lnxpwrwq lnxpwrwq
0 19 3 0 200 ffffd4800f1f2a00 lnxlngwq lnxlngwq
0 18 3 0 200 ffffd4800f1f25c0 lnxhipwq lnxhipwq
0 17 3 0 200 ffffd4800f1f2180 lnxrcugc lnxrcugc
0 16 3 0 200 ffffd4800f1ec9c0 sysmon smtaskq
0 15 3 0 200 ffffd4800f1ec580 pmfsuspend pmfsuspend
0 14 3 0 200 ffffd4800f1ec140 pmfevent pmfevent
0 13 3 0 200 ffffd4800f1e9980 sopendfree sopendfr
0 12 3 0 200 ffffd4800f1e9540 ifwdog ifwdog
0 11 3 0 200 ffffd4800f1e9100 iflnkst iflnkst
0 10 3 0 200 ffffd4800f1df940 nfssilly nfssilly
0 9 3 0 240 ffffd4800f1df500 vdrain vdrain
0 8 3 1 200 ffffd4800f1df0c0 modunload mod_unld
0 7 3 0 200 ffffd4800ebdb900 xcall/0 xcall
0 6 1 0 200 ffffd4800ebdb4c0 softser/0
0 5 1 0 200 ffffd4800ebdb080 softclk/0
0 4 1 0 200 ffffd4800ebd98c0 softbio/0
0 3 1 0 200 ffffd4800ebd9480 softnet/0
0 2 1 0 201 ffffd4800ebd9040 idle/0
0 0 3 1 200 ffffffff8686bec0 swapper uvm
[Locks tracked through LWPs]

****** LWP 2548.2918 (syz-executor.3) @ 0xffffd480134b69c0, l_stat=3

*** Locks held:

* Lock 0 (initialized at netbsd:uvm_swap_init+0x68 sys/uvm/uvm_swap.c:278)
lock address : netbsd:swap_syscall_lock
type : sleep/adaptive
initialized : netbsd:uvm_swap_init+0x68
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 1
relevant lwp : 0xffffd480134b69c0 last held: 0xffffd480134b69c0
last locked* : netbsd:sys_swapctl+0x1d4
unlocked : netbsd:sys_swapctl+0x3df
owner/count : 0xffffd480134b69c0 flags : 0x0000000000000004
Turnstile: no active turnstile for this lock.

* Lock 1 (initialized at netbsd:vcache_alloc+0xc6 sys/kern/vfs_vnode.c:1376)
lock address : ffffd48013e52200
type : sleep/adaptive
initialized : netbsd:vcache_alloc+0xc6
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 1
relevant lwp : 0xffffd480134b69c0 last held: 0xffffd480134b69c0
last locked* : netbsd:genfs_lock+0x1d6
unlocked : netbsd:genfs_unlock+0x55
owner/count : 0xffffd480134b69c0 flags : 0x0000000000000004
Turnstile: no active turnstile for this lock.

*** Locks wanted: none

****** LWP 3404.3404 (syz-executor.4) @ 0xffffd48013551180, l_stat=3

*** Locks held:

* Lock 0 (initialized at netbsd:fork1+0x938 sys/kern/kern_fork.c:366)
lock address : ffffd48013b94f50
type : sleep/adaptive
initialized : netbsd:fork1+0x938
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 1
relevant lwp : 0xffffd48013551180 last held: 0xffffd48013551180
last locked* : netbsd:exit1+0xa74
unlocked : netbsd:execve_runproc+0x6602
owner/count : 0xffffd48013551180 flags : 0x0000000000000004
Turnstile: no active turnstile for this lock.

*** Locks wanted:

* Lock 0 (initialized at netbsd:uao_init+0xaa sys/uvm/uvm_aobj.c:564)
lock address : netbsd:uao_list_lock
type : sleep/adaptive
initialized : netbsd:uao_init+0xaa
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 1
relevant cpu : 0 last held: 1
relevant lwp : 0xffffd48013551180 last held: 0xffffd4801376ab80
last locked* : netbsd:uao_detach+0x164
unlocked : netbsd:uao_detach+0x342
owner field : 0xffffd4801376ab80 wait/spin: 1/0
Turnstile:
=> 0 waiting readers:
=> 1 waiting writers: 0xffffd48013551180

****** LWP 3167.3167 (syz-executor.2) @ 0xffffd4801376ab80, l_stat=7

*** Locks held:

* Lock 0 (initialized at netbsd:uao_init+0xaa sys/uvm/uvm_aobj.c:564)
lock address : netbsd:uao_list_lock
type : sleep/adaptive
initialized : netbsd:uao_init+0xaa
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 1
relevant cpu : 1 last held: 1
relevant lwp : 0xffffd4801376ab80 last held: 0xffffd4801376ab80
last locked* : netbsd:uao_detach+0x164
unlocked : netbsd:uao_detach+0x342
owner field : 0xffffd4801376ab80 wait/spin: 1/0
Turnstile:
=> 0 waiting readers:
=> 1 waiting writers: 0xffffd48013551180

*** Locks wanted: none

****** LWP 2529.2529 (syz-executor.0) @ 0xffffd4801375db40, l_stat=7

*** Locks held:

* Lock 0 (initialized at netbsd:fork1+0x938 sys/kern/kern_fork.c:366)
lock address : ffffd480122f6a10
type : sleep/adaptive
initialized : netbsd:fork1+0x938
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffffd4801375db40 last held: 0xffffd4801375db40
last locked* : netbsd:exit1+0xa74
unlocked : netbsd:execve_runproc+0x6602
owner/count : 0xffffd4801375db40 flags : 0x0000000000000004
Turnstile: no active turnstile for this lock.

* Lock 1 (initialized at netbsd:uvm_map_setup+0x2a0 sys/uvm/uvm_map.c:4789)
lock address : netbsd:kernel_map_store+0x8
type : sleep/adaptive
initialized : netbsd:uvm_map_setup+0x2a0
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffffd4801375db40 last held: 0xffffd4801375db40
last locked* : netbsd:vm_map_lock+0x57
unlocked : netbsd:uvm_unmap1+0x40d
owner/count : 0xffffd4801375db40 flags : 0x0000000000000004
Turnstile: no active turnstile for this lock.

* Lock 2 (initialized at netbsd:uvm_obj_init+0x88 sys/uvm/uvm_object.c:70)
lock address : ffffd48013c0fd00
type : sleep/adaptive
initialized : netbsd:uvm_obj_init+0x88
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffffd4801375db40 last held: 0xffffd4801375db40
last locked* : netbsd:uvm_fault_unwire_locked+0x9cd
unlocked : netbsd:uao_swap_off+0x1b43
owner/count : 0xffffd4801375db40 flags : 0x0000000000000004
Turnstile: no active turnstile for this lock.

*** Locks wanted:

* Lock 0 (initialized at netbsd:pmap_bootstrap+0x20c sys/arch/x86/x86/pmap.c:1237)
lock address : netbsd:kernel_pmap_store+0x180
type : sleep/adaptive
initialized : netbsd:pmap_bootstrap+0x20c
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 1
relevant cpu : 0 last held: 0
relevant lwp : 0xffffd4801375db40 last held: 000000000000000000
last locked : netbsd:pmap_unwire+0xe7
unlocked* : netbsd:uvm_fault_unwire_locked+0xb23
owner field : 0xffffd4801375db40 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 747.747 (dhcpcd) @ 0xffffd4801250e740, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:module_hook_init+0x43 sys/kern/kern_module_hook.c:132)
lock address : netbsd:module_hook
type : sleep/adaptive
initialized : netbsd:module_hook_init+0x43
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffffd4801250e740 last held: 000000000000000000
last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 742.742 (dhcpcd) @ 0xffffd4801250eb80, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:module_hook_init+0x43 sys/kern/kern_module_hook.c:132)
lock address : netbsd:module_hook
type : sleep/adaptive
initialized : netbsd:module_hook_init+0x43
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 0
relevant lwp : 0xffffd4801250eb80 last held: 000000000000000000
last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 292.292 (dhcpcd) @ 0xffffd48012380700, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:module_hook_init+0x43 sys/kern/kern_module_hook.c:132)
lock address : netbsd:module_hook
type : sleep/adaptive
initialized : netbsd:module_hook_init+0x43
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffffd48012380700 last held: 000000000000000000
last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 485.485 (dhcpcd) @ 0xffffd48012380b40, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:module_hook_init+0x43 sys/kern/kern_module_hook.c:132)
lock address : netbsd:module_hook
type : sleep/adaptive
initialized : netbsd:module_hook_init+0x43
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 0
relevant lwp : 0xffffd48012380b40 last held: 000000000000000000
last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 0.11 (iflnkst) @ 0xffffd4800f1e9100, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:module_hook_init+0x43 sys/kern/kern_module_hook.c:132)
lock address : netbsd:module_hook
type : sleep/adaptive
initialized : netbsd:module_hook_init+0x43
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffffd4800f1e9100 last held: 000000000000000000
last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 0.5 (softclk/0) @ 0xffffd4800ebdb080, l_stat=1

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:module_hook_init+0x43 sys/kern/kern_module_hook.c:132)
lock address : netbsd:module_hook
type : sleep/adaptive
initialized : netbsd:module_hook_init+0x43
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffffd4800ebdb080 last held: 000000000000000000
last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 0.0 (swapper) @ 0xffffffff8686bec0, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:module_hook_init+0x43 sys/kern/kern_module_hook.c:132)
lock address : netbsd:module_hook
type : sleep/adaptive
initialized : netbsd:module_hook_init+0x43
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 0
relevant lwp : 0xffffffff8686bec0 last held: 000000000000000000
last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

[Locks tracked through CPUs]

PAGE FLAG PQ UOBJECT UANON
0xffffd48000017180 0001 00000000 0x0 0x0
0xffffd48000017200 0041 00000000 0x0 0x0
0xffffd48000017280 0041 00000000 0x0 0x0
0xffffd48000017300 0041 00000000 0x0 0x0
0xffffd48000017380 0041 00000000 0x0 0x0
0xffffd48000017400 0041 00000000 0x0 0x0
0xffffd48000017480 0041 00000000 0x0 0x0
0xffffd48000017500 0041 00000000 0x0 0x0
0xffffd48000017580 0041 00000000 0x0 0x0
0xffffd48000017600 0041 00000000 0x0 0x0
0xffffd48000017680 0041 00000000 0x0 0x0
0xffffd48000017700 0041 00000000 0x0 0x0
0xffffd48000017780 0041 00000000 0x0 0x0
0xffffd48000017800 0041 00000000 0x0 0x0
0xffffd48000017880 0041 00000000 0x0 0x0
0xffffd48000017900 0041 00000000 0x0 0x0
0xffffd48000017980 0041 00000000 0x0 0x0
0xffffd48000017a00 0041 00000000 0x0 0x0
0xffffd48000017a80 0041 00000000 0x0 0x0
0xffffd48000017b00 0041 00000000 0x0 0x0
0xffffd48000017b80 0041 00000000 0x0 0x0
0xffffd48000017c00 0041 00000000 0x0 0x0
0xffffd48000017c80 0041 00000000 0x0 0x0
0xffffd48000017d00 0041 00000000 0x0 0x0
0xffffd48000017d80 0041 00000000 0x0 0x0
0xffffd48000017e00 0041 00000000 0x0 0x0
0xffffd48000017e80 0041 00000000 0x0 0x0
0xffffd48000017f00 0041 00000000 0x0 0x0
0xffffd48000017f80 0041 00000000 0x0 0x0
0xffffd48000018000 0041 00000000 0x0 0x0
0xffffd48000018080 0041 00000000 0x0 0x0
0xffffd48000018100 0041 00000000 0x0 0x0
0xffffd48000018180 0041 00000000 0x0 0x0
0xffffd48000018200 0041 00000000 0x0 0x0
0xffffd48000018280 0041 00000000 0x0 0x0
0xffffd48000018300 0041 00000000 0x0 0x0
0xffffd48000018380 0041 00000000 0x0 0x0
0xffffd48000018400 0041 00000000 0x0 0x0
0xffffd48000018480 0041 00000000 0x0 0x0
0xffffd48000018500 0041 00000000 0x0 0x0
0xffffd48000018580 0041 00000000 0x0 0x0
0xffffd48000018600 0041 00000000 0x0 0x0
0xffffd48000018680 0041 00000000 0x0 0x0
0xffffd48000018700 0041 00000000 0x0 0x0
0xffffd48000018780 0041 00000000 0x0 0x0
0xffffd48000018800 0041 00000000 0x0 0x0
0xffffd48000018880 0041 00000000 0x0 0x0
0xffffd48000018900 0041 00000000 0x0 0x0
0xffffd48000018980 0041 00000000 0x0 0x0
0xffffd48000018a00 0041 00000000 0x0 0x0
0xffffd48000018a80 0041 00000000 0x0 0x0
0xffffd48000018b00 0041 00000000 0x0 0x0
0xffffd48000018b80 0041 00000000 0x0 0x0
0xffffd48000018c00 0041 00000000 0x0 0x0
0xffffd48000018c80 0041 00000000 0x0 0x0
0xffffd48000018d00 0041 00000000 0x0 0x0
0xffffd48000018d80 0041 00000000 0x0 0x0
0xffffd48000018e00 0041 00000000 0x0 0x0
0xffffd48000018e80 0041 00000000 0x0 0x0
0xffffd48000018f00 0041 00000000 0x0 0x0
0xffffd48000018f80 0041 00000000 0x0 0x0
0xffffd48000019000 0041 00000000 0x0 0x0
0xffffd48000019080 0041 00000000 0x0 0x0
0xffffd48000019100 0041 00000000 0x0 0x0
0xffffd48000019180 0041 00000000 0x0 0x0
0xffffd48000019200 0041 00000000 0x0 0x0
0xffffd48000019280 0041 00000000 0x0 0x0
0xffffd48000019300 0041 00000000 0x0 0x0
0xffffd48000019380 0041 00000000 0x0 0x0
0xffffd48000019400 0041 00000000 0x0 0x0
0xffffd48000019480 0041 00000000 0x0 0x0
0xffffd48000019500 0041 00000000 0x0 0x0
0xffffd48000019580 0041 00000000 0x0 0x0
0xffffd48000019600 0041 00000000 0x0 0x0
0xffffd48000019680 0041 00000000 0x0 0x0
0xffffd48000019700 0041 00000000 0x0 0x0
0xffffd48000019780 0041 00000000 0x0 0x0
0xffffd48000019800 0041 00000000 0x0 0x0
0xffffd48000019880 0041 00000000 0x0 0x0
0xffffd48000019900 0041 00000000 0x0 0x0
0xffffd48000019980 0041 00000000 0x0 0x0
0xffffd48000019a00 0041 00000000 0x0 0x0
0xffffd48000019a80 0041 00000000 0x0 0x0
0xffffd48000019b00 0041 00000000 0x0 0x0
0xffffd48000019b80 0041 00000000 0x0 0x0
0xffffd48000019c00 0041 00000000 0x0 0x0
0xffffd48000019c80 0041 00000000 0x0 0x0
0xffffd48000019d00 0041 00000000 0x0 0x0
0xffffd48000019d80 0041 00000000 0x0 0x0
0xffffd48000019e00 0041 00000000 0x0 0x0
0xffffd48000019e80 0041 00000000 0x0 0x0
0xffffd48000019f00 0041 00000000 0x0 0x0
0xffffd48000019f80 0041 00000000 0x0 0x0
0xffffd4800001a000 0041 00000000 0x0 0x0
0xffffd4800001a080 0041 00000000 0x0 0x0
0xffffd4800001a100 0041 00000000 0x0 0x0
0xffffd4800001a180 0041 00000000 0x0 0x0
0xffffd4800001a200 0041 00000000 0x0 0x0
0xffffd4800001a280 0041 00000000 0x0 0x0
0xffffd4800001a300 0041 00000000 0x0 0x0
0xffffd4800001a380 0041 00000000 0x0 0x0
0xffffd4800001a400 0041 00000000 0x0 0x0
0xffffd4800001a480 0041 00000000 0x0 0x0
0xffffd4800001a500 0041 00000000 0x0 0x0
0xffffd4800001a580 0041 00000000 0x0 0x0
0xffffd4800001a600 0041 00000000 0x0 0x0
0xffffd4800001a680 0041 00000000 0x0 0x0
0xffffd4800001a700 0041 00000000 0x0 0x0
0xffffd4800001a780 0041 00000000 0x0 0x0
0xffffd4800001a800 0041 00000000 0x0 0x0
0xffffd4800001a880 0041 00000000 0x0 0x0
0xffffd4800001a900 0041 00000000 0x0 0x0
0xffffd4800001a980 0041 00000000 0x0 0x0
0xffffd4800001aa00 0041 00000000 0x0 0x0
0xffffd4800001aa80 0041 00000000 0x0 0x0
0xffffd4800001ab00 0041 00000000 0x0 0x0
0xffffd4800001ab80 0041 00000000 0x0 0x0
0xffffd4800001ac00 0041 00000000 0x0 0x0
0xffffd4800001ac80 0041 00000000 0x0 0x0
0xffffd4800001ad00 0041 00000000 0x0 0x0
0xffffd4800001ad80 0041 00000000 0x0 0x0
0xffffd4800001ae00 0041 00000000 0x0 0x0
0xffffd4800001ae80 0041 00000000 0x0 0x0
0xffffd4800001af00 0041 00000000 0x0 0x0
0xffffd4800001af80 0041 00000000 0x0 0x0
0xffffd4800001b000 0041 00000000 0x0 0x0
0xffffd4800001b080 0041 00000000 0x0 0x0
0xffffd4800001b100 0041 00000000 0x0 0x0
0xffffd4800001b180 0041 00000000 0x0 0x0
0xffffd4800001b200 0041 00000000 0x0 0x0
0xffffd4800001b280 0041 00000000 0x0 0x0
0xffffd4800001b300 0041 00000000 0x0 0x0
0xffffd4800001b380 0041 00000000 0x0 0x0
0xffffd4800001b400 0041 00000000 0x0 0x0
0xffffd4800001b480 0041 00000000 0x0 0x0
0xffffd4800001b500 0041 00000000 0x0 0x0
0xffffd4800001b580 0041 00000000 0x0 0x0
0xffffd4800001b600 0041 00000000 0x0 0x0
0xffffd4800001b680 0041 00000000 0x0 0x0
0xffffd4800001b700 0041 00000000 0x0 0x0
0xffffd4800001b780 0041 00000000 0x0 0x0
0xffffd4800001b800 0041 00000000 0x0 0x0
0xffffd4800001b880 0041 00000000 0x0 0x0
0xffffd4800001b900 0041 00000000 0x0 0x0
0xffffd4800001b980 0041 00000000 0x0 0x0
0xffffd4800001ba00 0041 00000000 0x0 0x0
0xffffd4800001ba80 0041 00000000 0x0 0x0
0xffffd4800001bb00 0041 00000000 0x0 0x0
0xffffd4800001bb80 0041 00000000 0x0 0x0
0xffffd4800001bc00 0041 00000000 0x0 0x0
0xffffd4800001bc80 0041 00000000 0x0 0x0
0xffffd4800001bd00 0041 00000000 0x0 0x0
0xffffd4800001bd80 0041 00000000 0x0 0x0
0xffffd4800001be00 0041 00000000 0x0 0x0
0xffffd4800001be80 0041 00000000 0x0 0x0
0xffffd4800001bf00 0041 00000000 0x0 0x0
0xffffd4800001bf80 0041 00000000 0x0 0x0
0xffffd4800001c000 0041 00000000 0x0 0x0
0xffffd4800001c080 0041 00000000 0x0 0x0
0xffffd4800001c100 0041 00000000 0x0 0x0
0xffffd4800001c180 0041 00000000 0x0 0x0
0xffffd4800001c200 0041 00000000 0x0 0x0
0xffffd4800001c280 0041 00000000 0x0 0x0
0xffffd4800001c300 0041 00000000 0x0 0x0
0xffffd4800001c380 0041 00000000 0x0 0x0
0xffffd4800001c400 0041 00000000 0x0 0x0
0xffffd4800001c480 0041 00000000 0x0 0x0
0xffffd4800001c500 0041 00000000 0x0 0x0
0xffffd4800001c580 0041 00000000 0x0 0x0
0xffffd4800001c600 0041 00000000 0x0 0x0
0xffffd4800001c680 0041 00000000 0x0 0x0
0xffffd4800001c700 0041 00000000 0x0 0x0
0xffffd4800001c780 0001 00000000 0x0 0x0
0xffffd4800001c800 0001 00000000 0x0 0x0
0xffffd4800001c880 0001 00000000 0x0 0x0
0xffffd4800001c900 0001 00000000 0x0 0x0
0xffffd4800001c980 0001 00000000 0x0 0x0
0xffffd4800001ca00 0001 00000000 0x0 0x0
0xffffd4800001ca80 0001 00000000 0x0 0x0
0xffffd4800001cb00 0001 00000000 0x0 0x0
0xffffd4800001cb80 0001 00000000 0x0 0x0
0xffffd4800001cc00 0001 00000000 0x0 0x0
0xffffd4800001cc80 0001 00000000 0x0 0x0
0xffffd4800001cd00 0001 00000000 0x0 0x0
0xffffd4800001cd80 0001 00000000 0x0 0x0
0xffffd4800001ce00 0001 00000000 0x0 0x0
0xffffd4800001ce80 0001 00000000 0x0 0x0
0xffffd4800001cf00 0001 00000000 0x0 0x0
0xffffd4800001cf80 0001 00000000 0x0 0x0
0xffffd4800001d000 0001 00000000 0x0 0x0
0xffffd4800001d080 0001 00000000 0x0 0x0
0xffffd4800001d100 0001 00000000 0x0 0x0
0xffffd4800001d180 0001 00000000 0x0 0x0
0xffffd4800001d200 0001 00000000 0x0 0x0
0xffffd4800001d280 0001 00000000 0x0 0x0
0xffffd4800001d300 0001 00000000 0x0 0x0
0xffffd4800001d380 0001 00000000 0x0 0x0
0xffffd4800001d400 0001 00000000 0x0 0x0
0xffffd4800001d480 0001 00000000 0x0 0x0
0xffffd4800001d500 0001 00000000 0x0 0x0
0xffffd4800001d580 0001 00000000 0x0 0x0
0xffffd4800001d600 0001 00000000 0x0 0x0
0xffffd4800001d680 0001 00000000 0x0 0x0
0xffffd4800001d700 0001 00000000 0x0 0x0
0xffffd4800001d780 0001 00000000 0x0 0x0
0xffffd4800001d800 0001 00000000 0x0 0x0
0xffffd4800001d880 0001 00000000 0x0 0x0
0xffffd4800001d900 0001 00000000 0x0 0x0
0xffffd4800001d980 0001 00000000 0x0 0x0
0xffffd4800001da00 0001 00000000 0x0 0x0
0xffffd4800001da80 0001 00000000 0x0 0x0
0xffffd4800001db00 0001 00000000 0x0 0x0
0xffffd4800001db80 0001 00000000 0x0 0x0
0xffffd4800001dc00 0001 00000000 0x0 0x0
0xffffd4800001dc80 0001 00000000 0x0 0x0
0xffffd4800001dd00 0001 00000000 0x0 0x0
0xffffd4800001dd80 0001 00000000 0x0 0x0
0xffffd4800001de00 0001 00000000 0x0 0x0
0xffffd4800001de80 0001 00000000 0x0 0x0
0xffffd4800001df00 0001 00000000 0x0 0x0
0xffffd4800001df80 0001 00000000 0x0 0x0
0xffffd4800001e000 0001 00000000 0x0 0x0
0xffffd4800001e080 0001 00000000 0x0 0x0
0xffffd4800001e100 0001 00000000 0x0 0x0
0xffffd4800001e180 0001 00000000 0x0 0x0
0xffffd4800001e200 0001 00000000 0x0 0x0
0xffffd4800001e280 0001 00000000 0x0 0x0
0xffffd4800001e300 0001 00000000 0x0 0x0
0xffffd4800001e380 0001 00000000 0x0 0x0
0xffffd4800001e400 0001 00000000 0x0 0x0
0xffffd4800001e480 0001 00000000 0x0 0x0
0xffffd4800001e500 0001 00000000 0x0 0x0
0xffffd4800001e580 0001 00000000 0x0 0x0
0xffffd4800001e600 0001 00000000 0x0 0x0
0xffffd4800001e680 0001 00000000 0x0 0x0
0xffffd4800001e700 0001 00000000 0x0 0x0
0xffffd4800001e780 0001 00000000 0x0 0x0
0xffffd4800001e800 0001 00000000 0x0 0x0
0xffffd4800001e880 0001 00000000 0x0 0x0
0xffffd4800001e900 0001 00000000 0x0 0x0
0xffffd4800001e980 0001 00000000 0x0 0x0
0xffffd4800001ea00 0001 00000000 0x0 0x0
0xffffd4800001ea80 0001 00000000 0x0 0x0
0xffffd4800001eb00 0001 00000000 0x0 0x0
0xffffd4800001eb80 0001 00000000 0x0 0x0
0xffffd4800001ec00 0001 00000000 0x0 0x0
0xffffd4800001ec80 0001 00000000 0x0 0x0
0xffffd4800001ed00 0001 00000000 0x0 0x0
0xffffd4800001ed80 0001 00000000 0x0 0x0
0xffffd4800001ee00 0001 00000000 0x0 0x0
0xffffd4800001ee80 0001 00000000 0x0 0x0
0xffffd4800001ef00 0001 00000000 0x0 0x0
0xffffd4800001ef80 0001 00000000 0x0 0x0
0xffffd4800001f000 0001 00000000 0x0 0x0
0xffffd4800001f080 0001 00000000 0x0 0x0
0xffffd4800001f100 0001 00000000 0x0 0x0
0xffffd4800001f180 0001 00000000 0x0 0x0
0xffffd4800001f200 0001 00000000 0x0 0x0
0xffffd4800001f280 0001 00000000 0x0 0x0
0xffffd4800001f300 0001 00000000 0x0 0x0
0xffffd4800001f380 0001 00000000 0x0 0x0
0xffffd4800001f400 0001 00000000 0x0 0x0
0xffffd4800001f480 0001 00000000 0x0 0x0
0xffffd4800001f500 0001 00000000 0x0 0x0
0xffffd4800001f580 0001 00000000 0x0 0x0
0xffffd4800001f600 0001 00000000 0x0 0x0
0xffffd4800001f680 0001 00000000 0x0 0x0
0xffffd4800001f700 0001 00000000 0x0 0x0
0xffffd4800001f780 0001 00000000 0x0 0x0
0xffffd4800001f800 0001 00000000 0x0 0x0
0xffffd4800001f880 0001 00000000 0x0 0x0
0xffffd4800001f900 0001 00000000 0x0 0x0
0xffffd4800001f980 0001 00000000 0x0 0x0
0xffffd4800001fa00 0001 00000000 0x0 0x0
0xffffd4800001fa80 0001 00000000 0x0 0x0
0xffffd4800001fb00 0001 00000000 0x0 0x0
0xffffd4800001fb80 0001 00000000 0x0 0x0
0xffffd4800001fc00 0001 00000000 0x0 0x0
0xffffd4800001fc80 0001 00000000 0x0 0x0
0xffffd4800001fd00 0001 00000000 0x0 0x0
0xffffd4800001fd80 0001 00000000 0x0 0x0
0xffffd4800001fe00 0001 00000000 0x0 0x0
0xffffd4800001fe80 0001 00000000 0x0 0x0
0xffffd4800001ff00 0001 00000000 0x0 0x0
0xffffd4800001ff80 0001 00000000 0x0 0x0
0xffffd48000020000 0001 00000000 0x0 0x0
0xffffd48000020080 0001 00000000 0x0 0x0
0xffffd48000020100 0001 00000000 0x0 0x0
0xffffd48000020180 0001 00000000 0x0 0x0
0xffffd48000020200 0001 00000000 0x0 0x0
0xffffd48000020280 0001 00000000 0x0 0x0
0xffffd48000020300 0001 00000000 0x0 0x0
0xffffd48000020380 0001 00000000 0x0 0x0
0xffffd48000020400 0001 00000000 0x0 0x0
0xffffd48000020480 0001 00000000 0x0 0x0
0xffffd48000020500 0001 00000000 0x0 0x0
0xffffd48000020580 0001 00000000 0x0 0x0
0xffffd48000020600 0001 00000000 0x0 0x0
0xffffd48000020680 0001 00000000 0x0 0x0
0xffffd48000020700 0001 00000000 0x0 0x0
0xffffd48000020780 0001 00000000 0x0 0x0
0xffffd48000020800 0001 00000000 0x0 0x0
0xffffd48000020880 0001 00000000 0x0 0x0
0xffffd48000020900 0001 00000000 0x0 0x0
0xffffd48000020980 0001 00000000 0x0 0x0
0xffffd48000020a00 0001 00000000 0x0 0x0
0xffffd48000020a80 0001 00000000 0x0 0x0
0xffffd48000020b00 0001 00000000 0x0 0x0
0xffffd48000020b80 0001 00000000 0x0 0x0
0xffffd48000020c00 0001 00000000 0x0 0x0
0xffffd48000020c80 0001 00000000 0x0 0x0
0xffffd48000020d00 0001 00000000 0x0 0x0
0xffffd48000020d80 0001 00000000 0x0 0x0
0xffffd48000020e00 0001 00000000 0x0 0x0
0xffffd48000020e80 0001 00000000 0x0 0x0
0xffffd48000020f00 0001 00000000 0x0 0x0
0xffffd48000020f80 0001 00000000 0x0 0x0
0xffffd48000021000 0001 00000000 0x0 0x0
0xffffd48000021080 0001 00000000 0x0 0x0
0xffffd48000021100 0001 00000000 0x0 0x0
0xffffd48000021180 0001 00000000 0x0 0x0
0xffffd48000021200 0001 00000000 0x0 0x0
0xffffd48000021280 0001 00000000 0x0 0x0
0xffffd48000021300 0001 00000000 0x0 0x0
0xffffd48000021380 0001 00000000 0x0 0x0
0xffffd48000021400 0001 00000000 0x0 0x0
0xffffd48000021480 0001 00000000 0x0 0x0
0xffffd48000021500 0001 00000000 0x0 0x0
0xffffd48000021580 0001 00000000 0x0 0x0
0xffffd48000021600 0001 00000000 0x0 0x0
0xffffd48000021680 0001 00000000 0x0 0x0
0xffffd48000021700 0001 00000000 0x0 0x0
0xffffd48000021780 0001 00000000 0x0 0x0
0xffffd48000021800 0001 00000000 0x0 0x0
0xffffd48000021880 0001 00000000 0x0 0x0
0xffffd48000021900 0001 00000000 0x0 0x0
0xffffd48000021980 0001 00000000 0x0 0x0
0xffffd48000021a00 0001 00000000 0x0 0x0
0xffffd48000021a80 0001 00000000 0x0 0x0
0xffffd48000021b00 0001 00000000 0x0 0x0
0xffffd48000021b80 0001 00000000 0x0 0x0
0xffffd48000021c00 0001 00000000 0x0 0x0
0xffffd48000021c80 0001 00000000 0x0 0x0
0xffffd48000021d00 0001 00000000 0x0 0x0
0xffffd48000021d80 0001 00000000 0x0 0x0
0xffffd48000021e00 0001 00000000 0x0 0x0
0xffffd48000021e80 0001 00000000 0x0 0x0
0xffffd48000021f00 0001 00000000 0x0 0x0
0xffffd48000021f80 0001 00000000 0x0 0x0
0xffffd48000022000 0001 00000000 0x0 0x0
0xffffd48000022080 0001 00000000 0x0 0x0
0xffffd48000022100 0001 00000000 0x0 0x0
0xffffd48000022180 0001 00000000 0x0 0x0
0xffffd48000022200 0001 00000000 0x0 0x0
0xffffd48000022280 0001 00000000 0x0 0x0
0xffffd48000022300 0001 00000000 0x0 0x0
0xffffd48000022380 0001 00000000 0x0 0x0
0xffffd48000022400 0001 00000000 0x0 0x0
0xffffd48000022480 0001 00000000 0x0 0x0
0xffffd48000022500 0001 00000000 0x0 0x0
0xffffd48000022580 0001 00000000 0x0 0x0
0xffffd48000022600 0001 00000000 0x0 0x0
0xffffd48000022680 0001 00000000 0x0 0x0
0xffffd48000022700 0001 00000000 0x0 0x0
0xffffd48000022780 0001 00000000 0x0 0x0
0xffffd48000022800 0001 00000000 0x0 0x0
0xffffd48000022880 0001 00000000 0x0 0x0
0xffffd48000022900 0001 00000000 0x0 0x0
0xffffd48000022980 0001 00000000 0x0 0x0
0xffffd48000022a00 0001 00000000 0x0 0x0
0xffffd48000022a80 0001 00000000 0x0 0x0
0xffffd48000022b00 0001 00000000 0x0 0x0
0xffffd48000022b80 0001 00000000 0x0 0x0
0xffffd48000022c00 0001 00000000 0x0 0x0
0xffffd48000022c80 0001 00000000 0x0 0x0
0xffffd48000022d00 0001 00000000 0x0 0x0
0xffffd48000022d80 0001 00000000 0x0 0x0
0xffffd48000022e00 0001 00000000 0x0 0x0
0xffffd48000022e80 0001 00000000 0x0 0x0
0xffffd48000022f00 0001 00000000 0x0 0x0
0xffffd48000022f80 0001 00000000 0x0 0x0
0xffffd48000023000 0001 00000000 0x0 0x0
0xffffd48000023080 0001 00000000 0x0 0x0
0xffffd48000023100 0001 00000000 0x0 0x0
0xffffd48000023180 0001 00000000 0x0 0x0
0xffffd48000023200 0001 00000000 0x0 0x0
0xffffd48000023280 0001 00000000 0x0 0x0
0xffffd48000023300 0001 00000000 0x0 0x0
0xffffd48000023380 0001 00000000 0x0 0x0
0xffffd48000023400 0001 00000000 0x0 0x0
0xffffd48000023480 0001 00000000 0x0 0x0
0xffffd48000023500 0001 00000000 0x0 0x0
0xffffd48000023580 0001 00000000 0x0 0x0
0xffffd48000023600 0001 00000000 0x0 0x0
0xffffd48000023680 0001 00000000 0x0 0x0
0xffffd48000023700 0001 00000000 0x0 0x0
0xffffd48000023780 0001 00000000 0x0 0x0
0xffffd48000023800 0001 00000000 0x0 0x0
0xffffd48000023880 0001 00000000 0x0 0x0
0xffffd48000023900 0001 00000000 0x0 0x0
0xffffd48000023980 0001 00000000 0x0 0x0
0xffffd48000023a00 0001 00000000 0x0 0x0
0xffffd48000023a80 0001 00000000 0x0 0x0
0xffffd48000023b00 0001 00000000 0x0 0x0
0xffffd48000023b80 0001 00000000 0x0 0x0
0xffffd48000023c00 0001 00000000 0x0 0x0
0xffffd48000023c80 0001 00000000 0x0 0x0
0xffffd48000023d00 0001 00000000 0x0 0x0
0xffffd48000023d80 0001 00000000 0x0 0x0
0xffffd48000023e00 0001 00000000 0x0 0x0
0xffffd48000023e80 0001 00000000 0x0 0x0
0xffffd48000023f00 0001 00000000 0x0 0x0
0xffffd48000023f80 0001 00000000 0x0 0x0
0xffffd48000024000 0001 00000000 0x0 0x0
0xffffd48000024080 0001 00000000 0x0 0x0
0xffffd48000024100 0001 00000000 0x0 0x0
0xffffd48000024180 0001 00000000 0x0 0x0
0xffffd48000024200 0001 00000000 0x0 0x0
0xffffd48000024280 0001 00000000 0x0 0x0
0xffffd48000024300 0001 00000000 0x0 0x0
0xffffd48000024380 0001 00000000 0x0 0x0
0xffffd48000024400 0001 00000000 0x0 0x0
0xffffd48000024480 0001 00000000 0x0 0x0
0xffffd48000024500 0001 00000000 0x0 0x0
0xffffd48000024580 0001 00000000 0x0 0x0
0xffffd48000024600 0001 00000000 0x0 0x0
0xffffd48000024680 0001 00000000 0x0 0x0
0xffffd48000024700 0001 00000000 0x0 0x0
0xffffd48000024780 0001 00000000 0x0 0x0
0xffffd48000024800 0001 00000000 0x0 0x0
0xffffd48000024880 0001 00000000 0x0 0x0
0xffffd48000024900 0001 00000000 0x0 0x0
0xffffd48000024980 0001 00000000 0x0 0x0
0xffffd48000024a00 0001 00000000 0x0 0x0
0xffffd48000024a80 0001 00000000 0x0 0x0
0xffffd48000024b00 0001 00000000 0x0 0x0
0xffffd48000024b80 0001 00000000 0x0 0x0
0xffffd48000024c00 0001 00000000 0x0 0x0
0xffffd48000024c80 0001 00000000 0x0 0x0
0xffffd48000024d00 0001 00000000 0x0 0x0
0xffffd48000024d80 0001 00000000 0x0 0x0
0xffffd48000024e00 0001 00000000 0x0 0x0
0xffffd48000024e80 0001 00000000 0x0 0x0
0xffffd48000024f00 0001 00000000 0x0 0x0
0xffffd48000024f80 0001 00000000 0x0 0x0
0xffffd48000025000 0001 00000000 0x0 0x0
0xffffd48000025080 0001 00000000 0x0 0x0
0xffffd48000025100 0001 00000000 0x0 0x0
0xffffd48000025180 0001 00000000 0x0 0x0
0xffffd48000025200 0001 00000000 0x0 0x0
0xffffd48000025280 0001 00000000 0x0 0x0
0xffffd48000025300 0001 00000000 0x0 0x0
0xffffd48000025380 0001 00000000 0x0 0x0
0xffffd48000025400 0001 00000000 0x0 0x0
0xffffd48000025480 0001 00000000 0x0 0x0
0xffffd48000025500 0001 00000000 0x0 0x0
0xffffd48000025580 0001 00000000 0x0 0x0
0xffffd48000025600 0001 00000000 0x0 0x0
0xffffd48000025680 0001 00000000 0x0 0x0
0xffffd48000025700 0001 00000000 0x0 0x0
0xffffd48000025780 0001 00000000 0x0 0x0
0xffffd48000025800 0001 00000000 0x0 0x0
0xffffd48000025880 0001 00000000 0x0 0x0
0xffffd48000025900 0001 00000000 0x0 0x0
0xffffd48000025980 0001 00000000 0x0 0x0
0xffffd48000025a00 0001 00000000 0x0 0x0
0xffffd48000025a80 0001 00000000 0x0 0x0
0xffffd48000025b00 0001 00000000 0x0 0x0
0xffffd48000025b80 0001 00000000 0x0 0x0
0xffffd48000025c00 0001 00000000 0x0 0x0
0xffffd48000025c80 0001 00000000 0x0 0x0
0xffffd48000025d00 0001 00000000 0x0 0x0
0xffffd48000025d80 0001 00000000 0x0 0x0
0xffffd48000025e00 0001 00000000 0x0 0x0
0xffffd48000025e80 0001 00000000 0x0 0x0
0xffffd48000025f00 0001 00000000 0x0 0x0
0xffffd48000025f80 0001 00000000 0x0 0x0
0xffffd48000026000 0001 00000000 0x0 0x0
0xffffd48000026080 0001 00000000 0x0 0x0
0xffffd48000026100 0001 00000000 0x0 0x0
0xffffd48000026180 0001 00000000 0x0 0x0
0xffffd48000026200 0001 00000000 0x0 0x0
0xffffd48000026280 0001 00000000 0x0 0x0
0xffffd48000026300 0001 00000000 0x0 0x0
0xffffd48000026380 0001 00000000 0x0 0x0
0xffffd48000026400 0001 00000000 0x0 0x0
0xffffd48000026480 0001 00000000 0x0 0x0
0xffffd48000026500 0001 00000000 0x0 0x0
0xffffd48000026580 0001 00000000 0x0 0x0
0xffffd48000026600 0001 00000000 0x0 0x0
0xffffd48000026680 0001 00000000 0x0 0x0
0xffffd48000026700 0001 00000000 0x0 0x0
0xffffd48000026780 0001 00000000 0x0 0x0
0xffffd48000026800 0001 00000000 0x0 0x0
0xffffd48000026880 0001 00000000 0x0 0x0
0xffffd48000026900 0001 00000000 0x0 0x0
0xffffd48000026980 0001 00000000 0x0 0x0
0xffffd48000026a00 0001 00000000 0x0 0x0
0xffffd48000026a80 0001 00000000 0x0 0x0
0xffffd48000026b00 0001 00000000 0x0 0x0
0xffffd48000026b80 0001 00000000 0x0 0x0
0xffffd48000026c00 0001 00000000 0x0 0x0
0xffffd48000026c80 0001 00000000 0x0 0x0
0xffffd48000026d00 0001 00000000 0x0 0x0
0xffffd48000026d80 0001 00000000 0x0 0x0
0xffffd48000026e00 0001 00000000 0x0 0x0
0xffffd48000026e80 0001 00000000 0x0 0x0
0xffffd48000026f00 0001 00000000 0x0 0x0
0xffffd48000026f80 0001 00000000 0x0 0x0
0xffffd48000027000 0001 00000000 0x0 0x0
0xffffd48000027080 0001 00000000 0x0 0x0
0xffffd48000027100 0001 00000000 0x0 0x0
0xffffd48000027180 0001 00000000 0x0 0x0
0xffffd48000027200 0001 00000000 0x0 0x0
0xffffd48000027280 0001 00000000 0x0 0x0
0xffffd48000027300 0001 00000000 0x0 0x0
0xffffd48000027380 0001 00000000 0x0 0x0
0xffffd48000027400 0001 00000000 0x0 0x0
0xffffd48000027480 0001 00000000 0x0 0x0
0xffffd48000027500 0001 00000000 0x0 0x0
0xffffd48000027580 0001 00000000 0x0 0x0
0xffffd48000027600 0001 00000000 0x0 0x0
0xffffd48000027680 0001 00000000 0x0 0x0
0xffffd48000027700 0001 00000000 0x0 0x0
0xffffd48000027780 0001 00000000 0x0 0x0
0xffffd48000027800 0001 00000000 0x0 0x0
0xffffd48000027880 0001 00000000 0x0 0x0
0xffffd48000027900 0001 00000000 0x0 0x0
0xffffd48000027980 0001 00000000 0x0 0x0
0xffffd48000027a00 0001 00000000 0x0 0x0
0xffffd48000027a80 0001 00000000 0x0 0x0
0xffffd48000027b00 0001 00000000 0x0 0x0
0xffffd48000027b80 0001 00000000 0x0 0x0
0xffffd48000027c00 0001 00000000 0x0 0x0
0xffffd48000027c80 0001 00000000 0x0 0x0
0xffffd48000027d00 0001 00000000 0x0 0x0
0xffffd48000027d80 0001 00000000 0x0 0x0
0xffffd48000027e00 0001 00000000 0x0 0x0
0xffffd48000027e80 0001 00000000 0x0 0x0
0xffffd48000027f00 0001 00000000 0x0 0x0
0xffffd48000027f80 0001 00000000 0x0 0x0
0xffffd48000028000 0001 00000000 0x0 0x0
0xffffd48000028080 0001 00000000 0x0 0x0
0xffffd48000028100 0001 00000000 0x0 0x0
0xffffd48000028180 0001 00000000 0x0 0x0
0xffffd48000028200 0001 00000000 0x0 0x0
0xffffd48000028280 0001 00000000 0x0 0x0
0xffffd48000028300 0001 00000000 0x0 0x0
0xffffd48000028380 0001 00000000 0x0 0x0
0xffffd48000028400 0001 00000000 0x0 0x0
0xffffd48000028480 0001 00000000 0x0 0x0
0xffffd48000028500 0001 00000000 0x0 0x0
0xffffd48000028580 0001 00000000 0x0 0x0
0xffffd48000028600 0001 00000000 0x0 0x0
0xffffd48000028680 0001 00000000 0x0 0x0
0xffffd48000028700 0001 00000000 0x0 0x0
0xffffd48000028780 0001 00000000 0x0 0x0
0xffffd48000028800 0001 00000000 0x0 0x0
0xffffd48000028880 0001 00000000 0x0 0x0
0xffffd48000028900 0001 00000000 0x0 0x0
0xffffd48000028980 0001 00000000 0x0 0x0
0xffffd48000028a00 0001 00000000 0x0 0x0
0xffffd48000028a80 0001 00000000 0x0 0x0
0xffffd48000028b00 0001 00000000 0x0 0x0
0xffffd48000028b80 0001 00000000 0x0 0x0
0xffffd48000028c00 0001 00000000 0x0 0x0
0xffffd48000028c80 0001 00000000 0x0 0x0
0xffffd48000028d00 0001 00000000 0x0 0x0
0xffffd48000028d80 0001 00000000 0x0 0x0
0xffffd48000028e00 0001 00000000 0x0 0x0
0xffffd48000028e80 0001 00000000 0x0 0x0
0xffffd48000028f00 0001 00000000 0x0 0x0
0xffffd48000028f80 0001 00000000 0x0 0x0
0xffffd48000029000 0001 00000000 0x0 0x0
0xffffd48000029080 0001 00000000 0x0 0x0
0xffffd48000029100 0001 00000000 0x0 0x0
0xffffd48000029180 0001 00000000 0x0 0x0
0xffffd48000029200 0001 00000000 0x0 0x0
0xffffd48000029280 0001 00000000 0x0 0x0
0xffffd48000029300 0001 00000000 0x0 0x0
0xffffd48000029380 0001 00000000 0x0 0x0
0xffffd48000029400 0001 00000000 0x0 0x0
0xffffd48000029480 0001 00000000 0x0 0x0
0xffffd48000029500 0001 00000000 0x0 0x0
0xffffd48000029580 0001 00000000 0x0 0x0
0xffffd48000029600 0001 00000000 0x0 0x0
0xffffd48000029680 0001 00000000 0x0 0x0
0xffffd48000029700 0001 00000000 0x0 0x0
0xffffd48000029780 0001 00000000 0x0 0x0
0xffffd48000029800 0001 00000000 0x0 0x0
0xffffd48000029880 0001 00000000 0x0 0x0
0xffffd48000029900 0001 00000000 0x0 0x0
0xffffd48000029980 0001 00000000 0x0 0x0
0xffffd48000029a00 0001 00000000 0x0 0x0
0xffffd48000029a80 0001 00000000 0x0 0x0
0xffffd48000029b00 0001 00000000 0x0 0x0
0xffffd48000029b80 0001 00000000 0x0 0x0
0xffffd48000029c00 0001 00000000 0x0 0x0
0xffffd48000029c80 0001 00000000 0x0 0x0
0xffffd48000029d00 0001 00000000 0x0 0x0
0xffffd48000029d80 0001 00000000 0x0 0x0
0xffffd48000029e00 0001 00000000 0x0 0x0
0xffffd48000029e80 0001 00000000 0x0 0x0
0xffffd48000029f00 0001 00000000 0x0 0x0
0xffffd48000029f80 0001 00000000 0x0 0x0
0xffffd4800002a000 0001 00000000 0x0 0x0
0xffffd4800002a080 0001 00000000 0x0 0x0
0xffffd4800002a100 0001 00000000 0x0 0x0
0xffffd4800002a180 0001 00000000 0x0 0x0
0xffffd4800002a200 0001 00000000 0x0 0x0
0xffffd4800002a280 0001 00000000 0x0 0x0
0xffffd4800002a300 0001 00000000 0x0 0x0
0xffffd4800002a380 0001 00000000 0x0 0x0
0xffffd4800002a400 0001 00000000 0x0 0x0
0xffffd4800002a480 0001 00000000 0x0 0x0
0xffffd4800002a500 0001 00000000 0x0 0x0
0xffffd4800002a580 0001 00000000 0x0 0x0
0xffffd4800002a600 0001 00000000 0x0 0x0
0xffffd4800002a680 0001 00000000 0x0 0x0
0xffffd4800002a700 0001 00000000 0x0 0x0
0xffffd4800002a780 0001 00000000 0x0 0x0
0xffffd4800002a800 0001 00000000 0x0 0x0
0xffffd4800002a880 0001 00000000 0x0 0x0
0xffffd4800002a900 0001 00000000 0x0 0x0
0xffffd4800002a980 0001 00000000 0x0 0x0
0xffffd4800002aa00 0001 00000000 0x0 0x0
0xffffd4800002aa80 0001 00000000 0x0 0x0
0xffffd4800002ab00 0001 00000000 0x0 0x0
0xffffd4800002ab80 0001 00000000 0x0 0x0
0xffffd4800002ac00 0001 00000000 0x0 0x0
0xffffd4800002ac80 0001 00000000 0x0 0x0
0xffffd4800002ad00 0001 00000000 0x0 0x0
0xffffd4800002ad80 0001 00000000 0x0 0x0
0xffffd4800002ae00 0001 00000000 0x0 0x0
0xffffd4800002ae80 0001 00000000 0x0 0x0
0xffffd4800002af00 0001 00000000 0x0 0x0
0xffffd4800002

---
This report is generated by a bot. It may contain errors.
See https://goo.gl/tpsmEJ for more information about syzbot.
syzbot engineers can be reached at syzk...@googlegroups.com.

syzbot will keep track of this issue. See:
https://goo.gl/tpsmEJ#status for how to communicate with syzbot.

If the bug is already fixed, let syzbot know by replying with:
#syz fix: exact-commit-title

If you want to change bug's subsystems, reply with:
#syz set subsystems: new-subsystem
(See the list of subsystem names on the web dashboard)

If the bug is a duplicate of another bug, reply with:
#syz dup: exact-subject-of-another-report

If you want to undo deduplication, reply with:
#syz undup

syzbot

unread,

Jun 22, 2023, 1:00:51 AM6/22/23

to syzkaller-...@googlegroups.com

syzbot has found a reproducer for the following issue on:

HEAD commit: 88dbb62f4fef adjust for new fontconfig files.
git tree: netbsd

console output: https://syzkaller.appspot.com/x/log.txt?x=11f124c0a80000

kernel config: https://syzkaller.appspot.com/x/.config?x=739e57438eb9ed9e
dashboard link: https://syzkaller.appspot.com/bug?extid=78e30d42d95eaeccd316
compiler: Debian clang version 15.0.7

syz repro: https://syzkaller.appspot.com/x/repro.syz?x=16db772f280000
C reproducer: https://syzkaller.appspot.com/x/repro.c?x=1722e0af280000

Downloadable assets:
disk image: https://storage.googleapis.com/syzbot-assets/de389fd5fca3/disk-88dbb62f.raw.xz
netbsd.gdb: https://storage.googleapis.com/syzbot-assets/e0adfa149079/netbsd-88dbb62f.gdb.xz

IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+78e30d...@syzkaller.appspotmail.com

[ 116.5329790] fatal page fault in supervisor mode
[ 116.5438018] trap type 6 code 0 rip 0xffffffff84f97605 cs 0x8 rflags 0x10246 cr2 0x61 ilevel 0 rsp 0xffff9380c7aa99d0
[ 116.5559281] curlwp 0xffff938012bf5900 pid 6464.6464 lowest kstack 0xffff9380c7aa22c0

kernel: page fault trap, code=0

Stopped in pid 6464.6464 (syz-executor3694) at netbsd:uao_detach+0x1b5: movq 0(%r15),%rbx

?
uao_detach() at netbsd:uao_detach+0x1b5 sys/uvm/uvm_aobj.c:619
uvm_unmap_detach() at netbsd:uvm_unmap_detach+0x59d
lwp_ctl_exit() at netbsd:lwp_ctl_exit+0x5ed
exit1() at netbsd:exit1+0xa3b
sys_exit() at netbsd:sys_exit+0x1d6
syscall() at netbsd:syscall+0x60c sy_invoke sys/sys/syscallvar.h:94 [inline]
syscall() at netbsd:syscall+0x60c sys/arch/x86/x86/syscall.c:138
--- syscall (number 1) ---
netbsd:syscall+0x60c:
Panic string: (null)
PID LID S CPU FLAGS STRUCT LWP * NAME WAIT

5452 5452 3 1 0 ffff9380134099c0 syz-executor3694 tstile
6195 6195 3 0 0 ffff9380133fb100 syz-executor3694 tstile
6111 6111 3 1 40 ffff938013409140 syz-executor3694 tstile
6482 6482 3 0 0 ffff9380133fb540 syz-executor3694 tstile
6464 >6464 7 0 0 ffff938012bf5900 syz-executor3694
6432 6432 3 1 0 ffff938013409580 syz-executor3694 tstile
1201 1201 3 1 180 ffff938012cac940 syz-executor3694 nanoslp
1241 1241 3 1 180 ffff938012cac500 syz-executor3694 nanoslp
1376 1376 3 1 180 ffff938012cac0c0 syz-executor3694 nanoslp
930 930 3 1 180 ffff938012bf54c0 syz-executor3694 nanoslp
829 829 3 1 180 ffff938012bf5080 syz-executor3694 nanoslp
1131 1131 3 1 180 ffff9380125f1bc0 syz-executor3694 nanoslp
1108 1108 3 0 180 ffff9380122f56c0 syz-executor3694 nanoslp
1235 1235 3 0 180 ffff938012513300 sshd select
1078 1078 3 0 180 ffff9380121f4ac0 getty nanoslp
1084 1084 3 0 180 ffff9380122f5b00 getty nanoslp
1225 1225 3 0 180 ffff9380122f5280 getty nanoslp
1226 1226 3 1 1c0 ffff9380121f1200 getty ttyraw
815 815 3 0 180 ffff938012b3f8c0 sshd select
1094 1094 3 0 180 ffff938012b3f480 powerd kqueue
811 811 3 1 180 ffff938012b3f040 syslogd kqueue
605 605 3 0 180 ffff938012387700 dhcpcd poll
744 744 3 0 180 ffff938012513b80 dhcpcd poll
748 748 3 0 180 ffff9380123872c0 dhcpcd poll
603 603 3 0 180 ffff9380125f1780 dhcpcd poll
487 487 3 0 180 ffff9380125f1340 dhcpcd poll
292 292 3 0 180 ffff938012387b40 dhcpcd poll
485 485 3 0 180 ffff938012513740 dhcpcd poll
1 1 3 1 180 ffff938011e79100 init wait
0 6609 3 1 200 ffff9380133fb980 swapiod swapiod
0 818 3 1 200 ffff9380121f1640 physiod physiod
0 196 3 0 200 ffff9380121f4680 pooldrain pooldrain
0 195 3 1 200 ffff9380121f4240 ioflush syncer
0 194 3 1 200 ffff9380121f1a80 pgdaemon pgdaemon
0 170 3 1 200 ffff938012161a40 usb7 usbevt
0 169 3 0 200 ffff938012161600 usb6 usbevt
0 168 3 0 200 ffff9380121611c0 usb5 usbevt
0 167 3 0 200 ffff938012132a00 usb4 usbevt
0 166 3 0 200 ffff9380121325c0 usb3 usbevt
0 165 3 0 200 ffff938012132180 usb2 usbevt
0 31 3 0 200 ffff93801207c9c0 usb1 usbevt
0 63 3 0 200 ffff93801207c580 usb0 usbevt
0 126 3 0 200 ffff93801207c140 usbtask-dr usbtsk
0 125 3 1 200 ffff938011e79980 usbtask-hc usbtsk
0 124 3 0 200 ffff9380103f5b00 swwreboot swwreboot
0 123 3 1 200 ffff938011e79540 npfgc0 npfgcw
0 122 3 0 200 ffff938011e6c940 rt_free rt_free
0 121 3 0 200 ffff938011e6c500 unpgc unpgc
0 120 3 0 200 ffff938011e6c0c0 key_timehandler key_timehandler
0 119 3 1 200 ffff938011e66900 icmp6_wqinput/1 icmp6_wqinput
0 118 3 0 200 ffff938011e664c0 icmp6_wqinput/0 icmp6_wqinput
0 117 3 1 200 ffff938011e66080 nd6_timer nd6_timer
0 116 3 1 200 ffff938011e5f8c0 carp6_wqinput/1 carp6_wqinput
0 115 3 0 200 ffff938011e5f480 carp6_wqinput/0 carp6_wqinput
0 114 3 1 200 ffff938011e5f040 carp_wqinput/1 carp_wqinput
0 113 3 0 200 ffff938011e55bc0 carp_wqinput/0 carp_wqinput
0 112 3 1 200 ffff938011e55780 icmp_wqinput/1 icmp_wqinput
0 111 3 0 200 ffff938011e55340 icmp_wqinput/0 icmp_wqinput
0 110 3 0 200 ffff938011ced740 rt_timer rt_timer
0 109 3 0 200 ffff938011cedb80 vmem_rehash vmem_rehash
0 100 3 0 200 ffff938011ced300 entbutler entropy
0 99 3 1 200 ffff9380117e0b40 viomb balloon
0 98 3 1 200 ffff9380117e0700 vioif0_txrx/1 vioif0_txrx
0 97 3 0 200 ffff9380117e02c0 vioif0_txrx/0 vioif0_txrx
0 30 3 0 200 ffff9380103f56c0 scsibus0 sccomp
0 29 3 0 200 ffff9380103f5280 pms0 pmsreset
0 28 3 1 200 ffff9380103daac0 xcall/1 xcall
0 27 1 1 200 ffff9380103da680 softser/1
0 26 1 1 200 ffff9380103da240 softclk/1
0 25 1 1 200 ffff9380103d8a80 softbio/1
0 24 1 1 200 ffff9380103d8640 softnet/1
0 > 23 1 1 201 ffff9380103d8200 idle/1
0 22 3 0 200 ffff93800f1f4a40 lnxsyswq lnxsyswq
0 21 3 0 200 ffff93800f1f4600 lnxubdwq lnxubdwq
0 20 3 0 200 ffff93800f1f41c0 lnxpwrwq lnxpwrwq
0 19 3 0 200 ffff93800f1f2a00 lnxlngwq lnxlngwq
0 18 3 0 200 ffff93800f1f25c0 lnxhipwq lnxhipwq
0 17 3 1 200 ffff93800f1f2180 lnxrcugc lnxrcugc
0 16 3 1 200 ffff93800f1ec9c0 sysmon smtaskq
0 15 3 0 200 ffff93800f1ec580 pmfsuspend pmfsuspend
0 14 3 1 200 ffff93800f1ec140 pmfevent pmfevent
0 13 3 0 200 ffff93800f1e9980 sopendfree sopendfr
0 12 3 0 200 ffff93800f1e9540 ifwdog ifwdog
0 11 3 0 200 ffff93800f1e9100 iflnkst iflnkst
0 10 3 0 200 ffff93800f1df940 nfssilly nfssilly
0 9 3 0 200 ffff93800f1df500 vdrain vdrain
0 8 3 0 200 ffff93800f1df0c0 modunload mod_unld
0 7 3 0 200 ffff93800ebdb900 xcall/0 xcall
0 6 1 0 200 ffff93800ebdb4c0 softser/0
0 5 1 0 200 ffff93800ebdb080 softclk/0
0 4 1 0 200 ffff93800ebd98c0 softbio/0
0 3 1 0 200 ffff93800ebd9480 softnet/0
0 2 1 0 201 ffff93800ebd9040 idle/0
0 0 3 0 200 ffffffff8686bec0 swapper uvm
[Locks tracked through LWPs]

****** LWP 5452.5452 (syz-executor3694) @ 0xffff9380134099c0, l_stat=3

*** Locks held:

* Lock 0 (initialized at netbsd:uvm_swap_init+0x68 sys/uvm/uvm_swap.c:278)
lock address : netbsd:swap_syscall_lock
type : sleep/adaptive
initialized : netbsd:uvm_swap_init+0x68
shared holds : 0 exclusive: 1

shares wanted: 0 exclusive: 1
relevant cpu : 1 last held: 1

relevant lwp : 0xffff9380134099c0 last held: 0xffff9380134099c0

last locked* : netbsd:sys_swapctl+0x1d4
unlocked : netbsd:sys_swapctl+0x3df

owner/count : 0xffff9380134099c0 flags : 0x0000000000000007

Turnstile:
=> 0 waiting readers:

=> 1 waiting writers: 0xffff9380133fb100

* Lock 1 (initialized at netbsd:vcache_alloc+0xc6 sys/kern/vfs_vnode.c:1376)

lock address : ffff9380133e0b00

type : sleep/adaptive
initialized : netbsd:vcache_alloc+0xc6
shared holds : 0 exclusive: 1

shares wanted: 0 exclusive: 2

relevant cpu : 1 last held: 1

relevant lwp : 0xffff9380134099c0 last held: 0xffff9380134099c0

last locked* : netbsd:genfs_lock+0x1d6
unlocked : netbsd:genfs_unlock+0x55

owner/count : 0xffff9380134099c0 flags : 0x0000000000000007

Turnstile:
=> 0 waiting readers:

=> 2 waiting writers: 0xffff938013409140 0xffff938013409580

*** Locks wanted:

* Lock 0 (initialized at netbsd:uao_init+0xaa sys/uvm/uvm_aobj.c:564)
lock address : netbsd:uao_list_lock
type : sleep/adaptive
initialized : netbsd:uao_init+0xaa
shared holds : 0 exclusive: 1

shares wanted: 0 exclusive: 2

relevant cpu : 1 last held: 1

relevant lwp : 0xffff9380134099c0 last held: 0xffff938012bf5900
last locked* : netbsd:uao_detach+0x164
unlocked : netbsd:uao_swap_off+0x132
owner field : 0xffff938012bf5900 wait/spin: 1/0

Turnstile:
=> 0 waiting readers:

=> 2 waiting writers: 0xffff9380134099c0 0xffff9380133fb540

****** LWP 6195.6195 (syz-executor3694) @ 0xffff9380133fb100, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:uvm_swap_init+0x68 sys/uvm/uvm_swap.c:278)
lock address : netbsd:swap_syscall_lock
type : sleep/adaptive
initialized : netbsd:uvm_swap_init+0x68
shared holds : 0 exclusive: 1

shares wanted: 0 exclusive: 1
relevant cpu : 0 last held: 1

relevant lwp : 0xffff9380133fb100 last held: 0xffff9380134099c0

last locked* : netbsd:sys_swapctl+0x1d4
unlocked : netbsd:sys_swapctl+0x3df

owner/count : 0xffff9380134099c0 flags : 0x0000000000000007

Turnstile:
=> 0 waiting readers:

=> 1 waiting writers: 0xffff9380133fb100

****** LWP 6111.6111 (syz-executor3694) @ 0xffff938013409140, l_stat=3

*** Locks held:

* Lock 0 (initialized at netbsd:fork1+0x938 sys/kern/kern_fork.c:366)

lock address : ffff9380133f2e90

type : sleep/adaptive
initialized : netbsd:fork1+0x938
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0

relevant cpu : 1 last held: 0

relevant lwp : 0xffff938013409140 last held: 0xffff938013409140
last locked* : netbsd:exit1+0xa74
unlocked : 0
owner/count : 0xffff938013409140 flags : 0x0000000000000004

Turnstile: no active turnstile for this lock.

*** Locks wanted:

* Lock 0 (initialized at netbsd:vcache_alloc+0xc6 sys/kern/vfs_vnode.c:1376)
lock address : ffff9380133e0b00

type : sleep/adaptive
initialized : netbsd:vcache_alloc+0xc6
shared holds : 0 exclusive: 1

shares wanted: 0 exclusive: 2

relevant cpu : 1 last held: 1

relevant lwp : 0xffff938013409140 last held: 0xffff9380134099c0

last locked* : netbsd:genfs_lock+0x1d6
unlocked : netbsd:genfs_unlock+0x55

owner/count : 0xffff9380134099c0 flags : 0x0000000000000007

Turnstile:
=> 0 waiting readers:

=> 2 waiting writers: 0xffff938013409140 0xffff938013409580

****** LWP 6482.6482 (syz-executor3694) @ 0xffff9380133fb540, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:uao_init+0xaa sys/uvm/uvm_aobj.c:564)
lock address : netbsd:uao_list_lock
type : sleep/adaptive
initialized : netbsd:uao_init+0xaa
shared holds : 0 exclusive: 1

shares wanted: 0 exclusive: 2

relevant cpu : 0 last held: 1

relevant lwp : 0xffff9380133fb540 last held: 0xffff938012bf5900
last locked* : netbsd:uao_detach+0x164
unlocked : netbsd:uao_swap_off+0x132
owner field : 0xffff938012bf5900 wait/spin: 1/0

Turnstile:
=> 0 waiting readers:

=> 2 waiting writers: 0xffff9380134099c0 0xffff9380133fb540

****** LWP 6464.6464 (syz-executor3694) @ 0xffff938012bf5900, l_stat=7

*** Locks held:

* Lock 0 (initialized at netbsd:uao_init+0xaa sys/uvm/uvm_aobj.c:564)
lock address : netbsd:uao_list_lock
type : sleep/adaptive
initialized : netbsd:uao_init+0xaa
shared holds : 0 exclusive: 1

shares wanted: 0 exclusive: 2

relevant cpu : 0 last held: 1

relevant lwp : 0xffff938012bf5900 last held: 0xffff938012bf5900
last locked* : netbsd:uao_detach+0x164
unlocked : netbsd:uao_swap_off+0x132
owner field : 0xffff938012bf5900 wait/spin: 1/0

Turnstile:
=> 0 waiting readers:

=> 2 waiting writers: 0xffff9380134099c0 0xffff9380133fb540

*** Locks wanted: none

****** LWP 6432.6432 (syz-executor3694) @ 0xffff938013409580, l_stat=3

*** Locks held:

* Lock 0 (initialized at netbsd:fork1+0x938 sys/kern/kern_fork.c:366)

lock address : ffff9380133f2810

type : sleep/adaptive
initialized : netbsd:fork1+0x938
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0

relevant cpu : 1 last held: 1

relevant lwp : 0xffff938013409580 last held: 0xffff938013409580
last locked* : netbsd:exit1+0xa74
unlocked : 0
owner/count : 0xffff938013409580 flags : 0x0000000000000004

Turnstile: no active turnstile for this lock.

*** Locks wanted:

* Lock 0 (initialized at netbsd:vcache_alloc+0xc6 sys/kern/vfs_vnode.c:1376)
lock address : ffff9380133e0b00

type : sleep/adaptive
initialized : netbsd:vcache_alloc+0xc6
shared holds : 0 exclusive: 1

shares wanted: 0 exclusive: 2

relevant cpu : 1 last held: 1

relevant lwp : 0xffff938013409580 last held: 0xffff9380134099c0

last locked* : netbsd:genfs_lock+0x1d6
unlocked : netbsd:genfs_unlock+0x55

owner/count : 0xffff9380134099c0 flags : 0x0000000000000007

Turnstile:
=> 0 waiting readers:

=> 2 waiting writers: 0xffff938013409140 0xffff938013409580

****** LWP 744.744 (dhcpcd) @ 0xffff938012513b80, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:module_hook_init+0x43 sys/kern/kern_module_hook.c:132)
lock address : netbsd:module_hook
type : sleep/adaptive
initialized : netbsd:module_hook_init+0x43
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0

relevant lwp : 0xffff938012513b80 last held: 000000000000000000

last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 748.748 (dhcpcd) @ 0xffff9380123872c0, l_stat=3

relevant lwp : 0xffff9380123872c0 last held: 000000000000000000

last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 292.292 (dhcpcd) @ 0xffff938012387b40, l_stat=3

relevant lwp : 0xffff938012387b40 last held: 000000000000000000

last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 485.485 (dhcpcd) @ 0xffff938012513740, l_stat=3

relevant lwp : 0xffff938012513740 last held: 000000000000000000

last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 0.11 (iflnkst) @ 0xffff93800f1e9100, l_stat=3

relevant lwp : 0xffff93800f1e9100 last held: 000000000000000000

last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 0.5 (softclk/0) @ 0xffff93800ebdb080, l_stat=1

relevant lwp : 0xffff93800ebdb080 last held: 000000000000000000

last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 0.0 (swapper) @ 0xffffffff8686bec0, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:module_hook_init+0x43 sys/kern/kern_module_hook.c:132)
lock address : netbsd:module_hook
type : sleep/adaptive
initialized : netbsd:module_hook_init+0x43
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0

relevant cpu : 0 last held: 0

relevant lwp : 0xffffffff8686bec0 last held: 000000000000000000
last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

[Locks tracked through CPUs]

PAGE FLAG PQ UOBJECT UANON

0xffff938000017180 0001 00000000 0x0 0x0
0xffff938000017200 0041 00000000 0x0 0x0
0xffff938000017280 0041 00000000 0x0 0x0
0xffff938000017300 0041 00000000 0x0 0x0
0xffff938000017380 0041 00000000 0x0 0x0
0xffff938000017400 0041 00000000 0x0 0x0
0xffff938000017480 0041 00000000 0x0 0x0
0xffff938000017500 0041 00000000 0x0 0x0
0xffff938000017580 0041 00000000 0x0 0x0
0xffff938000017600 0041 00000000 0x0 0x0
0xffff938000017680 0041 00000000 0x0 0x0
0xffff938000017700 0041 00000000 0x0 0x0
0xffff938000017780 0041 00000000 0x0 0x0
0xffff938000017800 0041 00000000 0x0 0x0
0xffff938000017880 0041 00000000 0x0 0x0
0xffff938000017900 0041 00000000 0x0 0x0
0xffff938000017980 0041 00000000 0x0 0x0
0xffff938000017a00 0041 00000000 0x0 0x0
0xffff938000017a80 0041 00000000 0x0 0x0
0xffff938000017b00 0041 00000000 0x0 0x0
0xffff938000017b80 0041 00000000 0x0 0x0
0xffff938000017c00 0041 00000000 0x0 0x0
0xffff938000017c80 0041 00000000 0x0 0x0
0xffff938000017d00 0041 00000000 0x0 0x0
0xffff938000017d80 0041 00000000 0x0 0x0
0xffff938000017e00 0041 00000000 0x0 0x0
0xffff938000017e80 0041 00000000 0x0 0x0
0xffff938000017f00 0041 00000000 0x0 0x0
0xffff938000017f80 0041 00000000 0x0 0x0
0xffff938000018000 0041 00000000 0x0 0x0
0xffff938000018080 0041 00000000 0x0 0x0
0xffff938000018100 0041 00000000 0x0 0x0
0xffff938000018180 0041 00000000 0x0 0x0
0xffff938000018200 0041 00000000 0x0 0x0
0xffff938000018280 0041 00000000 0x0 0x0
0xffff938000018300 0041 00000000 0x0 0x0
0xffff938000018380 0041 00000000 0x0 0x0
0xffff938000018400 0041 00000000 0x0 0x0
0xffff938000018480 0041 00000000 0x0 0x0
0xffff938000018500 0041 00000000 0x0 0x0
0xffff938000018580 0041 00000000 0x0 0x0
0xffff938000018600 0041 00000000 0x0 0x0
0xffff938000018680 0041 00000000 0x0 0x0
0xffff938000018700 0041 00000000 0x0 0x0
0xffff938000018780 0041 00000000 0x0 0x0
0xffff938000018800 0041 00000000 0x0 0x0
0xffff938000018880 0041 00000000 0x0 0x0
0xffff938000018900 0041 00000000 0x0 0x0
0xffff938000018980 0041 00000000 0x0 0x0
0xffff938000018a00 0041 00000000 0x0 0x0
0xffff938000018a80 0041 00000000 0x0 0x0
0xffff938000018b00 0041 00000000 0x0 0x0
0xffff938000018b80 0041 00000000 0x0 0x0
0xffff938000018c00 0041 00000000 0x0 0x0
0xffff938000018c80 0041 00000000 0x0 0x0
0xffff938000018d00 0041 00000000 0x0 0x0
0xffff938000018d80 0041 00000000 0x0 0x0
0xffff938000018e00 0041 00000000 0x0 0x0
0xffff938000018e80 0041 00000000 0x0 0x0
0xffff938000018f00 0041 00000000 0x0 0x0
0xffff938000018f80 0041 00000000 0x0 0x0
0xffff938000019000 0041 00000000 0x0 0x0
0xffff938000019080 0041 00000000 0x0 0x0
0xffff938000019100 0041 00000000 0x0 0x0
0xffff938000019180 0041 00000000 0x0 0x0
0xffff938000019200 0041 00000000 0x0 0x0
0xffff938000019280 0041 00000000 0x0 0x0
0xffff938000019300 0041 00000000 0x0 0x0
0xffff938000019380 0041 00000000 0x0 0x0
0xffff938000019400 0041 00000000 0x0 0x0
0xffff938000019480 0041 00000000 0x0 0x0
0xffff938000019500 0041 00000000 0x0 0x0
0xffff938000019580 0041 00000000 0x0 0x0
0xffff938000019600 0041 00000000 0x0 0x0
0xffff938000019680 0041 00000000 0x0 0x0
0xffff938000019700 0041 00000000 0x0 0x0
0xffff938000019780 0041 00000000 0x0 0x0
0xffff938000019800 0041 00000000 0x0 0x0
0xffff938000019880 0041 00000000 0x0 0x0
0xffff938000019900 0041 00000000 0x0 0x0
0xffff938000019980 0041 00000000 0x0 0x0
0xffff938000019a00 0041 00000000 0x0 0x0
0xffff938000019a80 0041 00000000 0x0 0x0
0xffff938000019b00 0041 00000000 0x0 0x0
0xffff938000019b80 0041 00000000 0x0 0x0
0xffff938000019c00 0041 00000000 0x0 0x0
0xffff938000019c80 0041 00000000 0x0 0x0
0xffff938000019d00 0041 00000000 0x0 0x0
0xffff938000019d80 0041 00000000 0x0 0x0
0xffff938000019e00 0041 00000000 0x0 0x0
0xffff938000019e80 0041 00000000 0x0 0x0
0xffff938000019f00 0041 00000000 0x0 0x0
0xffff938000019f80 0041 00000000 0x0 0x0
0xffff93800001a000 0041 00000000 0x0 0x0
0xffff93800001a080 0041 00000000 0x0 0x0
0xffff93800001a100 0041 00000000 0x0 0x0
0xffff93800001a180 0041 00000000 0x0 0x0
0xffff93800001a200 0041 00000000 0x0 0x0
0xffff93800001a280 0041 00000000 0x0 0x0
0xffff93800001a300 0041 00000000 0x0 0x0
0xffff93800001a380 0041 00000000 0x0 0x0
0xffff93800001a400 0041 00000000 0x0 0x0
0xffff93800001a480 0041 00000000 0x0 0x0
0xffff93800001a500 0041 00000000 0x0 0x0
0xffff93800001a580 0041 00000000 0x0 0x0
0xffff93800001a600 0041 00000000 0x0 0x0
0xffff93800001a680 0041 00000000 0x0 0x0
0xffff93800001a700 0041 00000000 0x0 0x0
0xffff93800001a780 0041 00000000 0x0 0x0
0xffff93800001a800 0041 00000000 0x0 0x0
0xffff93800001a880 0041 00000000 0x0 0x0
0xffff93800001a900 0041 00000000 0x0 0x0
0xffff93800001a980 0041 00000000 0x0 0x0
0xffff93800001aa00 0041 00000000 0x0 0x0
0xffff93800001aa80 0041 00000000 0x0 0x0
0xffff93800001ab00 0041 00000000 0x0 0x0
0xffff93800001ab80 0041 00000000 0x0 0x0
0xffff93800001ac00 0041 00000000 0x0 0x0
0xffff93800001ac80 0041 00000000 0x0 0x0
0xffff93800001ad00 0041 00000000 0x0 0x0
0xffff93800001ad80 0041 00000000 0x0 0x0
0xffff93800001ae00 0041 00000000 0x0 0x0
0xffff93800001ae80 0041 00000000 0x0 0x0
0xffff93800001af00 0041 00000000 0x0 0x0
0xffff93800001af80 0041 00000000 0x0 0x0
0xffff93800001b000 0041 00000000 0x0 0x0
0xffff93800001b080 0041 00000000 0x0 0x0
0xffff93800001b100 0041 00000000 0x0 0x0
0xffff93800001b180 0041 00000000 0x0 0x0
0xffff93800001b200 0041 00000000 0x0 0x0
0xffff93800001b280 0041 00000000 0x0 0x0
0xffff93800001b300 0041 00000000 0x0 0x0
0xffff93800001b380 0041 00000000 0x0 0x0
0xffff93800001b400 0041 00000000 0x0 0x0
0xffff93800001b480 0041 00000000 0x0 0x0
0xffff93800001b500 0041 00000000 0x0 0x0
0xffff93800001b580 0041 00000000 0x0 0x0
0xffff93800001b600 0041 00000000 0x0 0x0
0xffff93800001b680 0041 00000000 0x0 0x0
0xffff93800001b700 0041 00000000 0x0 0x0
0xffff93800001b780 0041 00000000 0x0 0x0
0xffff93800001b800 0041 00000000 0x0 0x0
0xffff93800001b880 0041 00000000 0x0 0x0
0xffff93800001b900 0041 00000000 0x0 0x0
0xffff93800001b980 0041 00000000 0x0 0x0
0xffff93800001ba00 0041 00000000 0x0 0x0
0xffff93800001ba80 0041 00000000 0x0 0x0
0xffff93800001bb00 0041 00000000 0x0 0x0
0xffff93800001bb80 0041 00000000 0x0 0x0
0xffff93800001bc00 0041 00000000 0x0 0x0
0xffff93800001bc80 0041 00000000 0x0 0x0
0xffff93800001bd00 0041 00000000 0x0 0x0
0xffff93800001bd80 0041 00000000 0x0 0x0
0xffff93800001be00 0041 00000000 0x0 0x0
0xffff93800001be80 0041 00000000 0x0 0x0
0xffff93800001bf00 0041 00000000 0x0 0x0
0xffff93800001bf80 0041 00000000 0x0 0x0
0xffff93800001c000 0041 00000000 0x0 0x0
0xffff93800001c080 0041 00000000 0x0 0x0
0xffff93800001c100 0041 00000000 0x0 0x0
0xffff93800001c180 0041 00000000 0x0 0x0
0xffff93800001c200 0041 00000000 0x0 0x0
0xffff93800001c280 0041 00000000 0x0 0x0
0xffff93800001c300 0041 00000000 0x0 0x0
0xffff93800001c380 0041 00000000 0x0 0x0
0xffff93800001c400 0041 00000000 0x0 0x0
0xffff93800001c480 0041 00000000 0x0 0x0
0xffff93800001c500 0041 00000000 0x0 0x0
0xffff93800001c580 0041 00000000 0x0 0x0
0xffff93800001c600 0041 00000000 0x0 0x0
0xffff93800001c680 0041 00000000 0x0 0x0
0xffff93800001c700 0041 00000000 0x0 0x0
0xffff93800001c780 0001 00000000 0x0 0x0
0xffff93800001c800 0001 00000000 0x0 0x0
0xffff93800001c880 0001 00000000 0x0 0x0
0xffff93800001c900 0001 00000000 0x0 0x0
0xffff93800001c980 0001 00000000 0x0 0x0
0xffff93800001ca00 0001 00000000 0x0 0x0
0xffff93800001ca80 0001 00000000 0x0 0x0
0xffff93800001cb00 0001 00000000 0x0 0x0
0xffff93800001cb80 0001 00000000 0x0 0x0
0xffff93800001cc00 0001 00000000 0x0 0x0
0xffff93800001cc80 0001 00000000 0x0 0x0
0xffff93800001cd00 0001 00000000 0x0 0x0
0xffff93800001cd80 0001 00000000 0x0 0x0
0xffff93800001ce00 0001 00000000 0x0 0x0
0xffff93800001ce80 0001 00000000 0x0 0x0
0xffff93800001cf00 0001 00000000 0x0 0x0
0xffff93800001cf80 0001 00000000 0x0 0x0
0xffff93800001d000 0001 00000000 0x0 0x0
0xffff93800001d080 0001 00000000 0x0 0x0
0xffff93800001d100 0001 00000000 0x0 0x0
0xffff93800001d180 0001 00000000 0x0 0x0
0xffff93800001d200 0001 00000000 0x0 0x0
0xffff93800001d280 0001 00000000 0x0 0x0
0xffff93800001d300 0001 00000000 0x0 0x0
0xffff93800001d380 0001 00000000 0x0 0x0
0xffff93800001d400 0001 00000000 0x0 0x0
0xffff93800001d480 0001 00000000 0x0 0x0
0xffff93800001d500 0001 00000000 0x0 0x0
0xffff93800001d580 0001 00000000 0x0 0x0
0xffff93800001d600 0001 00000000 0x0 0x0
0xffff93800001d680 0001 00000000 0x0 0x0
0xffff93800001d700 0001 00000000 0x0 0x0
0xffff93800001d780 0001 00000000 0x0 0x0
0xffff93800001d800 0001 00000000 0x0 0x0
0xffff93800001d880 0001 00000000 0x0 0x0
0xffff93800001d900 0001 00000000 0x0 0x0
0xffff93800001d980 0001 00000000 0x0 0x0
0xffff93800001da00 0001 00000000 0x0 0x0
0xffff93800001da80 0001 00000000 0x0 0x0
0xffff93800001db00 0001 00000000 0x0 0x0
0xffff93800001db80 0001 00000000 0x0 0x0
0xffff93800001dc00 0001 00000000 0x0 0x0
0xffff93800001dc80 0001 00000000 0x0 0x0
0xffff93800001dd00 0001 00000000 0x0 0x0
0xffff93800001dd80 0001 00000000 0x0 0x0
0xffff93800001de00 0001 00000000 0x0 0x0
0xffff93800001de80 0001 00000000 0x0 0x0
0xffff93800001df00 0001 00000000 0x0 0x0
0xffff93800001df80 0001 00000000 0x0 0x0
0xffff93800001e000 0001 00000000 0x0 0x0
0xffff93800001e080 0001 00000000 0x0 0x0
0xffff93800001e100 0001 00000000 0x0 0x0
0xffff93800001e180 0001 00000000 0x0 0x0
0xffff93800001e200 0001 00000000 0x0 0x0
0xffff93800001e280 0001 00000000 0x0 0x0
0xffff93800001e300 0001 00000000 0x0 0x0
0xffff93800001e380 0001 00000000 0x0 0x0
0xffff93800001e400 0001 00000000 0x0 0x0
0xffff93800001e480 0001 00000000 0x0 0x0
0xffff93800001e500 0001 00000000 0x0 0x0
0xffff93800001e580 0001 00000000 0x0 0x0
0xffff93800001e600 0001 00000000 0x0 0x0
0xffff93800001e680 0001 00000000 0x0 0x0
0xffff93800001e700 0001 00000000 0x0 0x0
0xffff93800001e780 0001 00000000 0x0 0x0
0xffff93800001e800 0001 00000000 0x0 0x0
0xffff93800001e880 0001 00000000 0x0 0x0
0xffff93800001e900 0001 00000000 0x0 0x0
0xffff93800001e980 0001 00000000 0x0 0x0
0xffff93800001ea00 0001 00000000 0x0 0x0
0xffff93800001ea80 0001 00000000 0x0 0x0
0xffff93800001eb00 0001 00000000 0x0 0x0
0xffff93800001eb80 0001 00000000 0x0 0x0
0xffff93800001ec00 0001 00000000 0x0 0x0
0xffff93800001ec80 0001 00000000 0x0 0x0
0xffff93800001ed00 0001 00000000 0x0 0x0
0xffff93800001ed80 0001 00000000 0x0 0x0
0xffff93800001ee00 0001 00000000 0x0 0x0
0xffff93800001ee80 0001 00000000 0x0 0x0
0xffff93800001ef00 0001 00000000 0x0 0x0
0xffff93800001ef80 0001 00000000 0x0 0x0
0xffff93800001f000 0001 00000000 0x0 0x0
0xffff93800001f080 0001 00000000 0x0 0x0
0xffff93800001f100 0001 00000000 0x0 0x0
0xffff93800001f180 0001 00000000 0x0 0x0
0xffff93800001f200 0001 00000000 0x0 0x0
0xffff93800001f280 0001 00000000 0x0 0x0
0xffff93800001f300 0001 00000000 0x0 0x0
0xffff93800001f380 0001 00000000 0x0 0x0
0xffff93800001f400 0001 00000000 0x0 0x0
0xffff93800001f480 0001 00000000 0x0 0x0
0xffff93800001f500 0001 00000000 0x0 0x0
0xffff93800001f580 0001 00000000 0x0 0x0
0xffff93800001f600 0001 00000000 0x0 0x0
0xffff93800001f680 0001 00000000 0x0 0x0
0xffff93800001f700 0001 00000000 0x0 0x0
0xffff93800001f780 0001 00000000 0x0 0x0
0xffff93800001f800 0001 00000000 0x0 0x0
0xffff93800001f880 0001 00000000 0x0 0x0
0xffff93800001f900 0001 00000000 0x0 0x0
0xffff93800001f980 0001 00000000 0x0 0x0
0xffff93800001fa00 0001 00000000 0x0 0x0
0xffff93800001fa80 0001 00000000 0x0 0x0
0xffff93800001fb00 0001 00000000 0x0 0x0
0xffff93800001fb80 0001 00000000 0x0 0x0
0xffff93800001fc00 0001 00000000 0x0 0x0
0xffff93800001fc80 0001 00000000 0x0 0x0
0xffff93800001fd00 0001 00000000 0x0 0x0
0xffff93800001fd80 0001 00000000 0x0 0x0
0xffff93800001fe00 0001 00000000 0x0 0x0
0xffff93800001fe80 0001 00000000 0x0 0x0
0xffff93800001ff00 0001 00000000 0x0 0x0
0xffff93800001ff80 0001 00000000 0x0 0x0
0xffff938000020000 0001 00000000 0x0 0x0
0xffff938000020080 0001 00000000 0x0 0x0
0xffff938000020100 0001 00000000 0x0 0x0
0xffff938000020180 0001 00000000 0x0 0x0
0xffff938000020200 0001 00000000 0x0 0x0
0xffff938000020280 0001 00000000 0x0 0x0
0xffff938000020300 0001 00000000 0x0 0x0
0xffff938000020380 0001 00000000 0x0 0x0
0xffff938000020400 0001 00000000 0x0 0x0
0xffff938000020480 0001 00000000 0x0 0x0
0xffff938000020500 0001 00000000 0x0 0x0
0xffff938000020580 0001 00000000 0x0 0x0
0xffff938000020600 0001 00000000 0x0 0x0
0xffff938000020680 0001 00000000 0x0 0x0
0xffff938000020700 0001 00000000 0x0 0x0
0xffff938000020780 0001 00000000 0x0 0x0
0xffff938000020800 0001 00000000 0x0 0x0
0xffff938000020880 0001 00000000 0x0 0x0
0xffff938000020900 0001 00000000 0x0 0x0
0xffff938000020980 0001 00000000 0x0 0x0
0xffff938000020a00 0001 00000000 0x0 0x0
0xffff938000020a80 0001 00000000 0x0 0x0
0xffff938000020b00 0001 00000000 0x0 0x0
0xffff938000020b80 0001 00000000 0x0 0x0
0xffff938000020c00 0001 00000000 0x0 0x0
0xffff938000020c80 0001 00000000 0x0 0x0
0xffff938000020d00 0001 00000000 0x0 0x0
0xffff938000020d80 0001 00000000 0x0 0x0
0xffff938000020e00 0001 00000000 0x0 0x0
0xffff938000020e80 0001 00000000 0x0 0x0
0xffff938000020f00 0001 00000000 0x0 0x0
0xffff938000020f80 0001 00000000 0x0 0x0
0xffff938000021000 0001 00000000 0x0 0x0
0xffff938000021080 0001 00000000 0x0 0x0
0xffff938000021100 0001 00000000 0x0 0x0
0xffff938000021180 0001 00000000 0x0 0x0
0xffff938000021200 0001 00000000 0x0 0x0
0xffff938000021280 0001 00000000 0x0 0x0
0xffff938000021300 0001 00000000 0x0 0x0
0xffff938000021380 0001 00000000 0x0 0x0
0xffff938000021400 0001 00000000 0x0 0x0
0xffff938000021480 0001 00000000 0x0 0x0
0xffff938000021500 0001 00000000 0x0 0x0
0xffff938000021580 0001 00000000 0x0 0x0
0xffff938000021600 0001 00000000 0x0 0x0
0xffff938000021680 0001 00000000 0x0 0x0
0xffff938000021700 0001 00000000 0x0 0x0
0xffff938000021780 0001 00000000 0x0 0x0
0xffff938000021800 0001 00000000 0x0 0x0
0xffff938000021880 0001 00000000 0x0 0x0
0xffff938000021900 0001 00000000 0x0 0x0
0xffff938000021980 0001 00000000 0x0 0x0
0xffff938000021a00 0001 00000000 0x0 0x0
0xffff938000021a80 0001 00000000 0x0 0x0
0xffff938000021b00 0001 00000000 0x0 0x0
0xffff938000021b80 0001 00000000 0x0 0x0
0xffff938000021c00 0001 00000000 0x0 0x0
0xffff938000021c80 0001 00000000 0x0 0x0
0xffff938000021d00 0001 00000000 0x0 0x0
0xffff938000021d80 0001 00000000 0x0 0x0
0xffff938000021e00 0001 00000000 0x0 0x0
0xffff938000021e80 0001 00000000 0x0 0x0
0xffff938000021f00 0001 00000000 0x0 0x0
0xffff938000021f80 0001 00000000 0x0 0x0
0xffff938000022000 0001 00000000 0x0 0x0
0xffff938000022080 0001 00000000 0x0 0x0
0xffff938000022100 0001 00000000 0x0 0x0
0xffff938000022180 0001 00000000 0x0 0x0
0xffff938000022200 0001 00000000 0x0 0x0
0xffff938000022280 0001 00000000 0x0 0x0
0xffff938000022300 0001 00000000 0x0 0x0
0xffff938000022380 0001 00000000 0x0 0x0
0xffff938000022400 0001 00000000 0x0 0x0
0xffff938000022480 0001 00000000 0x0 0x0
0xffff938000022500 0001 00000000 0x0 0x0
0xffff938000022580 0001 00000000 0x0 0x0
0xffff938000022600 0001 00000000 0x0 0x0
0xffff938000022680 0001 00000000 0x0 0x0
0xffff938000022700 0001 00000000 0x0 0x0
0xffff938000022780 0001 00000000 0x0 0x0
0xffff938000022800 0001 00000000 0x0 0x0
0xffff938000022880 0001 00000000 0x0 0x0
0xffff938000022900 0001 00000000 0x0 0x0
0xffff938000022980 0001 00000000 0x0 0x0
0xffff938000022a00 0001 00000000 0x0 0x0
0xffff938000022a80 0001 00000000 0x0 0x0
0xffff938000022b00 0001 00000000 0x0 0x0
0xffff938000022b80 0001 00000000 0x0 0x0
0xffff938000022c00 0001 00000000 0x0 0x0
0xffff938000022c80 0001 00000000 0x0 0x0
0xffff938000022d00 0001 00000000 0x0 0x0
0xffff938000022d80 0001 00000000 0x0 0x0
0xffff938000022e00 0001 00000000 0x0 0x0
0xffff938000022e80 0001 00000000 0x0 0x0
0xffff938000022f00 0001 00000000 0x0 0x0
0xffff938000022f80 0001 00000000 0x0 0x0
0xffff938000023000 0001 00000000 0x0 0x0
0xffff938000023080 0001 00000000 0x0 0x0
0xffff938000023100 0001 00000000 0x0 0x0
0xffff938000023180 0001 00000000 0x0 0x0
0xffff938000023200 0001 00000000 0x0 0x0
0xffff938000023280 0001 00000000 0x0 0x0
0xffff938000023300 0001 00000000 0x0 0x0
0xffff938000023380 0001 00000000 0x0 0x0
0xffff938000023400 0001 00000000 0x0 0x0
0xffff938000023480 0001 00000000 0x0 0x0
0xffff938000023500 0001 00000000 0x0 0x0
0xffff938000023580 0001 00000000 0x0 0x0
0xffff938000023600 0001 00000000 0x0 0x0
0xffff938000023680 0001 00000000 0x0 0x0
0xffff938000023700 0001 00000000 0x0 0x0
0xffff938000023780 0001 00000000 0x0 0x0
0xffff938000023800 0001 00000000 0x0 0x0
0xffff938000023880 0001 00000000 0x0 0x0
0xffff938000023900 0001 00000000 0x0 0x0
0xffff938000023980 0001 00000000 0x0 0x0
0xffff938000023a00 0001 00000000 0x0 0x0
0xffff938000023a80 0001 00000000 0x0 0x0
0xffff938000023b00 0001 00000000 0x0 0x0
0xffff938000023b80 0001 00000000 0x0 0x0
0xffff938000023c00 0001 00000000 0x0 0x0
0xffff938000023c80 0001 00000000 0x0 0x0
0xffff938000023d00 0001 00000000 0x0 0x0
0xffff938000023d80 0001 00000000 0x0 0x0
0xffff938000023e00 0001 00000000 0x0 0x0
0xffff938000023e80 0001 00000000 0x0 0x0
0xffff938000023f00 0001 00000000 0x0 0x0
0xffff938000023f80 0001 00000000 0x0 0x0
0xffff938000024000 0001 00000000 0x0 0x0
0xffff938000024080 0001 00000000 0x0 0x0
0xffff938000024100 0001 00000000 0x0 0x0
0xffff938000024180 0001 00000000 0x0 0x0
0xffff938000024200 0001 00000000 0x0 0x0
0xffff938000024280 0001 00000000 0x0 0x0
0xffff938000024300 0001 00000000 0x0 0x0
0xffff938000024380 0001 00000000 0x0 0x0
0xffff938000024400 0001 00000000 0x0 0x0
0xffff938000024480 0001 00000000 0x0 0x0
0xffff938000024500 0001 00000000 0x0 0x0
0xffff938000024580 0001 00000000 0x0 0x0
0xffff938000024600 0001 00000000 0x0 0x0
0xffff938000024680 0001 00000000 0x0 0x0
0xffff938000024700 0001 00000000 0x0 0x0
0xffff938000024780 0001 00000000 0x0 0x0
0xffff938000024800 0001 00000000 0x0 0x0
0xffff938000024880 0001 00000000 0x0 0x0
0xffff938000024900 0001 00000000 0x0 0x0
0xffff938000024980 0001 00000000 0x0 0x0
0xffff938000024a00 0001 00000000 0x0 0x0
0xffff938000024a80 0001 00000000 0x0 0x0
0xffff938000024b00 0001 00000000 0x0 0x0
0xffff938000024b80 0001 00000000 0x0 0x0
0xffff938000024c00 0001 00000000 0x0 0x0
0xffff938000024c80 0001 00000000 0x0 0x0
0xffff938000024d00 0001 00000000 0x0 0x0
0xffff938000024d80 0001 00000000 0x0 0x0
0xffff938000024e00 0001 00000000 0x0 0x0
0xffff938000024e80 0001 00000000 0x0 0x0
0xffff938000024f00 0001 00000000 0x0 0x0
0xffff938000024f80 0001 00000000 0x0 0x0
0xffff938000025000 0001 00000000 0x0 0x0
0xffff938000025080 0001 00000000 0x0 0x0
0xffff938000025100 0001 00000000 0x0 0x0
0xffff938000025180 0001 00000000 0x0 0x0
0xffff938000025200 0001 00000000 0x0 0x0
0xffff938000025280 0001 00000000 0x0 0x0
0xffff938000025300 0001 00000000 0x0 0x0
0xffff938000025380 0001 00000000 0x0 0x0
0xffff938000025400 0001 00000000 0x0 0x0
0xffff938000025480 0001 00000000 0x0 0x0
0xffff938000025500 0001 00000000 0x0 0x0
0xffff938000025580 0001 00000000 0x0 0x0
0xffff938000025600 0001 00000000 0x0 0x0
0xffff938000025680 0001 00000000 0x0 0x0
0xffff938000025700 0001 00000000 0x0 0x0
0xffff938000025780 0001 00000000 0x0 0x0
0xffff938000025800 0001 00000000 0x0 0x0
0xffff938000025880 0001 00000000 0x0 0x0
0xffff938000025900 0001 00000000 0x0 0x0
0xffff938000025980 0001 00000000 0x0 0x0
0xffff938000025a00 0001 00000000 0x0 0x0
0xffff938000025a80 0001 00000000 0x0 0x0
0xffff938000025b00 0001 00000000 0x0 0x0
0xffff938000025b80 0001 00000000 0x0 0x0
0xffff938000025c00 0001 00000000 0x0 0x0
0xffff938000025c80 0001 00000000 0x0 0x0
0xffff938000025d00 0001 00000000 0x0 0x0
0xffff938000025d80 0001 00000000 0x0 0x0
0xffff938000025e00 0001 00000000 0x0 0x0
0xffff938000025e80 0001 00000000 0x0 0x0
0xffff938000025f00 0001 00000000 0x0 0x0
0xffff938000025f80 0001 00000000 0x0 0x0
0xffff938000026000 0001 00000000 0x0 0x0
0xffff938000026080 0001 00000000 0x0 0x0
0xffff938000026100 0001 00000000 0x0 0x0
0xffff938000026180 0001 00000000 0x0 0x0
0xffff938000026200 0001 00000000 0x0 0x0
0xffff938000026280 0001 00000000 0x0 0x0
0xffff938000026300 0001 00000000 0x0 0x0
0xffff938000026380 0001 00000000 0x0 0x0
0xffff938000026400 0001 00000000 0x0 0x0
0xffff938000026480 0001 00000000 0x0 0x0
0xffff938000026500 0001 00000000 0x0 0x0
0xffff938000026580 0001 00000000 0x0 0x0
0xffff938000026600 0001 00000000 0x0 0x0
0xffff938000026680 0001 00000000 0x0 0x0
0xffff938000026700 0001 00000000 0x0 0x0
0xffff938000026780 0001 00000000 0x0 0x0
0xffff938000026800 0001 00000000 0x0 0x0
0xffff938000026880 0001 00000000 0x0 0x0
0xffff938000026900 0001 00000000 0x0 0x0
0xffff938000026980 0001 00000000 0x0 0x0
0xffff938000026a00 0001 00000000 0x0 0x0
0xffff938000026a80 0001 00000000 0x0 0x0
0xffff938000026b00 0001 00000000 0x0 0x0
0xffff938000026b80 0001 00000000 0x0 0x0
0xffff938000026c00 0001 00000000 0x0 0x0
0xffff938000026c80 0001 00000000 0x0 0x0
0xffff938000026d00 0001 00000000 0x0 0x0
0xffff938000026d80 0001 00000000 0x0 0x0
0xffff938000026e00 0001 00000000 0x0 0x0
0xffff938000026e80 0001 00000000 0x0 0x0
0xffff938000026f00 0001 00000000 0x0 0x0
0xffff938000026f80 0001 00000000 0x0 0x0
0xffff938000027000 0001 00000000 0x0 0x0
0xffff938000027080 0001 00000000 0x0 0x0
0xffff938000027100 0001 00000000 0x0 0x0
0xffff938000027180 0001 00000000 0x0 0x0
0xffff938000027200 0001 00000000 0x0 0x0
0xffff938000027280 0001 00000000 0x0 0x0
0xffff938000027300 0001 00000000 0x0 0x0
0xffff938000027380 0001 00000000 0x0 0x0
0xffff938000027400 0001 00000000 0x0 0x0
0xffff938000027480 0001 00000000 0x0 0x0
0xffff938000027500 0001 00000000 0x0 0x0
0xffff938000027580 0001 00000000 0x0 0x0
0xffff938000027600 0001 00000000 0x0 0x0
0xffff938000027680 0001 00000000 0x0 0x0
0xffff938000027700 0001 00000000 0x0 0x0
0xffff938000027780 0001 00000000 0x0 0x0
0xffff938000027800 0001 00000000 0x0 0x0
0xffff938000027880 0001 00000000 0x0 0x0
0xffff938000027900 0001 00000000 0x0 0x0
0xffff938000027980 0001 00000000 0x0 0x0
0xffff938000027a00 0001 00000000 0x0 0x0
0xffff938000027a80 0001 00000000 0x0 0x0
0xffff938000027b00 0001 00000000 0x0 0x0
0xffff938000027b80 0001 00000000 0x0 0x0
0xffff938000027c00 0001 00000000 0x0 0x0
0xffff938000027c80 0001 00000000 0x0 0x0
0xffff938000027d00 0001 00000000 0x0 0x0
0xffff938000027d80 0001 00000000 0x0 0x0
0xffff938000027e00 0001 00000000 0x0 0x0
0xffff938000027e80 0001 00000000 0x0 0x0
0xffff938000027f00 0001 00000000 0x0 0x0
0xffff938000027f80 0001 00000000 0x0 0x0
0xffff938000028000 0001 00000000 0x0 0x0
0xffff938000028080 0001 00000000 0x0 0x0
0xffff938000028100 0001 00000000 0x0 0x0
0xffff938000028180 0001 00000000 0x0 0x0
0xffff938000028200 0001 00000000 0x0 0x0
0xffff938000028280 0001 00000000 0x0 0x0
0xffff938000028300 0001 00000000 0x0 0x0
0xffff938000028380 0001 00000000 0x0 0x0
0xffff938000028400 0001 00000000 0x0 0x0
0xffff938000028480 0001 00000000 0x0 0x0
0xffff938000028500 0001 00000000 0x0 0x0
0xffff938000028580 0001 00000000 0x0 0x0
0xffff938000028600 0001 00000000 0x0 0x0
0xffff938000028680 0001 00000000 0x0 0x0
0xffff938000028700 0001 00000000 0x0 0x0
0xffff938000028780 0001 00000000 0x0 0x0
0xffff938000028800 0001 00000000 0x0 0x0
0xffff938000028880 0001 00000000 0x0 0x0
0xffff938000028900 0001 00000000 0x0 0x0
0xffff938000028980 0001 00000000 0x0 0x0
0xffff938000028a00 0001 00000000 0x0 0x0
0xffff938000028a80 0001 00000000 0x0 0x0
0xffff938000028b00 0001 00000000 0x0 0x0
0xffff938000028b80 0001 00000000 0x0 0x0
0xffff938000028c00 0001 00000000 0x0 0x0
0xffff938000028c80 0001 00000000 0x0 0x0
0xffff938000028d00 0001 00000000 0x0 0x0
0xffff938000028d80 0001 00000000 0x0 0x0
0xffff938000028e00 0001 00000000 0x0 0x0
0xffff938000028e80 0001 00000000 0x0 0x0
0xffff938000028f00 0001 00000000 0x0 0x0
0xffff938000028f80 0001 00000000 0x0 0x0
0xffff938000029000 0001 00000000 0x0 0x0
0xffff938000029080 0001 00000000 0x0 0x0
0xffff938000029100 0001 00000000 0x0 0x0
0xffff938000029180 0001 00000000 0x0 0x0
0xffff938000029200 0001 00000000 0x0 0x0
0xffff938000029280 0001 00000000 0x0 0x0
0xffff938000029300 0001 00000000 0x0 0x0
0xffff938000029380 0001 00000000 0x0 0x0
0xffff938000029400 0001 00000000 0x0 0x0
0xffff938000029480 0001 00000000 0x0 0x0
0xffff938000029500 0001 00000000 0x0 0x0
0xffff938000029580 0001 00000000 0x0 0x0
0xffff938000029600 0001 00000000 0x0 0x0
0xffff938000029680 0001 00000000 0x0 0x0
0xffff938000029700 0001 00000000 0x0 0x0
0xffff938000029780 0001 00000000 0x0 0x0
0xffff938000029800 0001 00000000 0x0 0x0
0xffff938000029880 0001 00000000 0x0 0x0
0xffff938000029900 0001 00000000 0x0 0x0
0xffff938000029980 0001 00000000 0x0 0x0
0xffff938000029a00 0001 00000000 0x0 0x0
0xffff938000029a80 0001 00000000 0x0 0x0
0xffff938000029b00 0001 00000000 0x0 0x0
0xffff938000029b80 0001 00000000 0x0 0x0
0xffff938000029c00 0001 00000000 0x0 0x0
0xffff938000029c80 0001 00000000 0x0 0x0
0xffff938000029d00 0001 00000000 0x0 0x0
0xffff938000029d80 0001 00000000 0x0 0x0
0xffff938000029e00 0001 00000000 0x0 0x0
0xffff938000029e80 0001 00000000 0x0 0x0
0xffff938000029f00 0001 00000000 0x0 0x0
0xffff938000029f80 0001 00000000 0x0 0x0
0xffff93800002a000 0001 00000000 0x0 0x0
0xffff93800002a080 0001 00000000 0x0 0x0
0xffff93800002a100 0001 00000000 0x0 0x0
0xffff93800002a180 0001 00000000 0x0 0x0
0xffff93800002a200 0001 00000000 0x0 0x0
0xffff93800002a280 0001 00000000 0x0 0x0
0xffff93800002a300 0001 00000000 0x0 0x0
0xffff93800002a380 0001 00000000 0x0 0x0
0xffff93800002a400 0001 00000000 0x0 0x0
0xffff93800002a480 0001 00000000 0x0 0x0
0xffff93800002a500 0001 00000000 0x0 0x0
0xffff93800002a580 0001 00000000 0x0 0x0
0xffff93800002a600 0001 00000000 0x0 0x0
0xffff93800002a680 0001 00000000 0x0 0x0
0xffff93800002a700 0001 00000000 0x0 0x0
0xffff93800002a780 0001 00000000 0x0 0x0
0xffff93800002a800 0001 00000000 0x0 0x0
0xffff93800002a880 0001 00000000 0x0 0x0
0xffff93800002a900 0001 00000000 0x0 0x0
0xffff93800002a980 0001 00000000 0x0 0x0
0xffff93800002aa00 0001 00000000 0x0 0x0
0xffff93800002aa80 0001 00000000 0x0 0x0
0xffff93800002ab00 0001 00000000 0x0 0x0
0xffff93800002ab80 0001 00000000 0x0 0x0
0xffff93800002ac00 0001 00000000 0x0 0x0
0xffff93800002ac80 0001 00000000 0x0 0x0
0xffff93800002ad00 0001 00000000 0x0 0x0
0xffff93800002ad80 0001 00000000 0x0 0x0
0xffff93800002ae00 0001 00000000 0x0 0x0
0xffff93800002ae80 0001 00000000 0x0 0x0
0xffff93800002af00 0001 00000000 0x0 0x0
0xffff93800002af80 0001 00000000 0x0 0x0
0xffff93800002b000 0001 00000000 0x0 0x0
0xffff93800002b080 0001 00000000 0x0 0x0
0xffff93800002b100 0001 00000000 0x0 0x0
0xffff93800002b180 0001 00000000 0x0 0x0
0xffff93800002b200 0001 00000000 0x0 0x0
0xffff93800002b280 0001 00000000 0x0 0x0
0xffff93800002

---
If you want syzbot to run the reproducer, reply with:
#syz test: git://repo/address.git branch-or-commit-hash
If you attach or paste a git patch, syzbot will apply it before testing.

Reply all

Reply to author

Forward

0 new messages