assert failed: lktype != LK_NONE

1 view

Skip to first unread message

syzbot

unread,

Apr 16, 2022, 7:45:24 PM4/16/22

to syzkaller-...@googlegroups.com

Hello,

syzbot found the following issue on:

HEAD commit: 030a5ba80092 Redo the way the builtin cmd 'ulimit' getopt(..
git tree: netbsd
console output: https://syzkaller.appspot.com/x/log.txt?x=14ba8084f00000
kernel config: https://syzkaller.appspot.com/x/.config?x=fab579639ba4bf0a
dashboard link: https://syzkaller.appspot.com/bug?extid=da4be777819055325902
compiler: g++ (Debian 10.2.1-6) 10.2.1 20210110

Unfortunately, I don't have any reproducer for this issue yet.

IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+da4be7...@syzkaller.appspotmail.com

[ 210.4489677] panic: kernel diagnostic assertion "lktype != LK_NONE" failed: file "/syzkaller/managers/ci2-netbsd/kernel/sys/kern/vfs_vnode.c", line 778
[ 210.4689556] cpu1: Begin traceback...
[ 210.4889566] vpanic() at netbsd:vpanic+0x258 sys/kern/subr_prf.c:290
[ 210.5189557] _sub_D_65535_0() at netbsd:_sub_D_65535_0+-0x241ac
[ 210.5589565] vput() at netbsd:vput+0x16d sys/kern/vfs_vnode.c:778
[ 210.5889567] rf_find_raid_components() at netbsd:rf_find_raid_components+0xa52 sys/dev/raidframe/rf_netbsdkintf.c:2960
[ 210.6189561] raidioctl() at netbsd:raidioctl+0x1db9 rf_rescan sys/dev/raidframe/rf_netbsdkintf.c:486 [inline]
[ 210.6189561] raidioctl() at netbsd:raidioctl+0x1db9 sys/dev/raidframe/rf_netbsdkintf.c:1623
[ 210.6489562] cdev_ioctl() at netbsd:cdev_ioctl+0x1e7 sys/kern/subr_devsw.c:1223
[ 210.6789560] spec_ioctl() at netbsd:spec_ioctl+0x148 sys/miscfs/specfs/spec_vnops.c:1294
[ 210.7089563] VOP_IOCTL() at netbsd:VOP_IOCTL+0x132 sys/kern/vnode_if.c:883
[ 210.7489561] vn_ioctl() at netbsd:vn_ioctl+0x1b9 sys/kern/vfs_vnops.c:865
[ 210.7789590] sys_ioctl() at netbsd:sys_ioctl+0x8f5 sys/kern/sys_generic.c:673
[ 210.8089562] sys___syscall() at netbsd:sys___syscall+0x10e sy_call sys/sys/syscallvar.h:65 [inline]
[ 210.8089562] sys___syscall() at netbsd:sys___syscall+0x10e sys/kern/sys_syscall.c:90
[ 210.8389590] syscall() at netbsd:syscall+0x25a sy_call sys/sys/syscallvar.h:65 [inline]
[ 210.8389590] syscall() at netbsd:syscall+0x25a sy_invoke sys/sys/syscallvar.h:94 [inline]
[ 210.8389590] syscall() at netbsd:syscall+0x25a sys/arch/x86/x86/syscall.c:138
[ 210.8489548] --- syscall (number 198) ---
[ 210.8589552] netbsd:syscall+0x25a:
[ 210.8689555] cpu1: End traceback...
[ 210.8689555] fatal breakpoint trap in supervisor mode
[ 210.8689555] trap type 1 code 0 rip 0xffffffff80220a2d cs 0x8 rflags 0x286 cr2 0x76ca185ff000 ilevel 0 rsp 0xffff9f01a7160030
[ 210.8889541] curlwp 0xffff9f0013452980 pid 10823.6543 lowest kstack 0xffff9f01a71592c0
Stopped in pid 10823.6543 (syz-executor.1) at netbsd:breakpoint+0x5: leave
?
breakpoint() at netbsd:breakpoint+0x5
db_panic() at netbsd:db_panic+0x105 sys/ddb/db_panic.c:69
vpanic() at netbsd:vpanic+0x258 sys/kern/subr_prf.c:290
_sub_D_65535_0() at netbsd:_sub_D_65535_0+-0x241ac
vput() at netbsd:vput+0x16d sys/kern/vfs_vnode.c:778
rf_find_raid_components() at netbsd:rf_find_raid_components+0xa52 sys/dev/raidframe/rf_netbsdkintf.c:2960
raidioctl() at netbsd:raidioctl+0x1db9 rf_rescan sys/dev/raidframe/rf_netbsdkintf.c:486 [inline]
raidioctl() at netbsd:raidioctl+0x1db9 sys/dev/raidframe/rf_netbsdkintf.c:1623
cdev_ioctl() at netbsd:cdev_ioctl+0x1e7 sys/kern/subr_devsw.c:1223
spec_ioctl() at netbsd:spec_ioctl+0x148 sys/miscfs/specfs/spec_vnops.c:1294
VOP_IOCTL() at netbsd:VOP_IOCTL+0x132 sys/kern/vnode_if.c:883
vn_ioctl() at netbsd:vn_ioctl+0x1b9 sys/kern/vfs_vnops.c:865
sys_ioctl() at netbsd:sys_ioctl+0x8f5 sys/kern/sys_generic.c:673
sys___syscall() at netbsd:sys___syscall+0x10e sy_call sys/sys/syscallvar.h:65 [inline]
sys___syscall() at netbsd:sys___syscall+0x10e sys/kern/sys_syscall.c:90
syscall() at netbsd:syscall+0x25a sy_call sys/sys/syscallvar.h:65 [inline]
syscall() at netbsd:syscall+0x25a sy_invoke sys/sys/syscallvar.h:94 [inline]
syscall() at netbsd:syscall+0x25a sys/arch/x86/x86/syscall.c:138
--- syscall (number 198) ---
netbsd:syscall+0x25a:
Panic string: kernel diagnostic assertion "lktype != LK_NONE" failed: file "/syzkaller/managers/ci2-netbsd/kernel/sys/kern/vfs_vnode.c", line 778
PID LID S CPU FLAGS STRUCT LWP * NAME WAIT
10823>6543 7 1 100 ffff9f0013452980 syz-executor.1
10823>10823 7 0 10000000 ffff9f0014056a40 syz-executor.1
6561 12090 3 0 180 ffff9f0012d42780 syz-executor.2 parked
6561 6561 2 0 10000000 ffff9f0012c78480 syz-executor.2
6557 11832 3 0 180 ffff9f0013edb780 syz-executor.4 parked
6557 6557 2 0 10000000 ffff9f0012cd6640 syz-executor.4
11623 7340 2 0 0 ffff9f0013eb7300 syz-executor.3
11623 11623 2 0 10000000 ffff9f0012be9640 syz-executor.3
6396 7075 3 0 180 ffff9f0012c0b6c0 syz-executor.5 parked
6396 6528 3 1 180 ffff9f0013475580 syz-executor.5 parked
6396 6396 2 1 10000000 ffff9f0013452100 syz-executor.5
11440 11440 2 0 0 ffff9f0013363580 syz-executor.0
7094 7094 3 1 180 ffff9f0012b68540 syz-executor.2 parked
10727 10727 3 0 180 ffff9f0014032580 syz-executor.0 parked
3207 3207 3 1 180 ffff9f00140bf640 syz-executor.4 parked
3041 3041 3 0 180 ffff9f0012b68980 syz-executor.4 parked
3295 3295 3 0 180 ffff9f0012bd21c0 syz-executor.4 parked
6487 6487 3 0 180 ffff9f0013376180 syz-executor.0 parked
2361 2361 3 1 180 ffff9f0012b89580 syz-executor.0 parked
7092 7092 3 1 180 ffff9f0013f0d480 syz-executor.0 parked
390 390 3 0 180 ffff9f0012b48500 syz-executor.1 parked
4558 4558 3 0 180 ffff9f0012cbb5c0 syz-executor.1 parked
5052 5052 3 0 180 ffff9f0013f89940 syz-executor.1 parked
5309 5309 3 0 180 ffff9f00129bc2c0 syz-executor.1 parked
1508 1508 3 0 180 ffff9f0013f0d040 syz-executor.3 parked
1362 1362 3 1 180 ffff9f0012c0b280 syz-executor.3 parked
323 323 3 1 180 ffff9f0012aa4080 syz-executor.3 parked
1194 1194 2 1 140 ffff9f0013dc4240 syz-executor.5
1001 1001 2 1 140 ffff9f0013d78a80 syz-executor.4
926 926 2 1 140 ffff9f0013d78640 syz-executor.3
1151 1151 2 1 140 ffff9f0013cb9a40 syz-executor.1
1221 1221 2 1 140 ffff9f0013cb9600 syz-executor.2
422 422 2 1 140 ffff9f0012c9e540 syz-executor.0
1128 1130 3 0 1c0 ffff9f0013d78200 syz-fuzzer parked
1128 1075 2 1 140 ffff9f0013cb91c0 syz-fuzzer
1128 1192 3 1 180 ffff9f0013caa5c0 syz-fuzzer parked
1128 975 3 1 180 ffff9f0013caa180 syz-fuzzer parked
1128 1220 3 0 180 ffff9f00133b5ac0 syz-fuzzer parked
1128 1105 3 0 180 ffff9f00133b5240 syz-fuzzer parked
1128 1078 3 0 180 ffff9f0013391a40 syz-fuzzer parked
1128 1086 2 1 140 ffff9f001341cb80 syz-fuzzer
1128 1128 3 0 180 ffff9f0012a64040 syz-fuzzer parked
1079 1079 3 0 180 ffff9f0012a64480 sshd select
1126 1126 3 0 180 ffff9f0013446500 getty nanoslp
1115 1115 3 0 180 ffff9f00126cc040 getty nanoslp
699 699 3 0 180 ffff9f00134759c0 getty nanoslp
1068 1068 3 0 1c0 ffff9f0013475140 getty ttyraw
1067 1067 3 1 180 ffff9f0013391600 sshd select
953 953 3 0 180 ffff9f0012d00700 powerd kqueue
689 689 3 1 180 ffff9f00133c7b00 syslogd kqueue
602 602 3 0 180 ffff9f00126cb340 dhcpcd poll
547 547 3 1 180 ffff9f0012bffac0 dhcpcd poll
464 464 3 0 180 ffff9f0012bff240 dhcpcd poll
589 589 3 1 180 ffff9f0012c4f300 dhcpcd poll
289 289 3 0 180 ffff9f0012d83080 dhcpcd poll
288 288 3 0 180 ffff9f0012d6c8c0 dhcpcd poll
351 351 3 0 180 ffff9f0012d6c480 dhcpcd poll
1 1 3 0 180 ffff9f00128559c0 init wait
0 5927 5 0 200 ffff9f0014356240 (zombie)
0 6911 3 0 200 ffff9f0012bb5a00 acctwatch actwat
0 5696 3 0 200 ffff9f0013f794c0 ktrace ktrwait
0 6349 3 0 200 ffff9f00133b5680 ktrace ktrwait
0 3562 3 0 200 ffff9f0012d42bc0 ktrace ktrwait
0 2541 3 1 200 ffff9f0013f0d8c0 ktrace ktrwait
0 4533 3 1 600 ffff9f0013e43280 cgd/1 cgd
0 3798 3 0 600 ffff9f001342e480 cgd/0 cgd
0 968 3 0 200 ffff9f0012974ac0 physiod physiod
0 194 3 0 200 ffff9f001298ab00 pooldrain pooldrain
0 193 2 0 240 ffff9f001298a6c0 ioflush
0 192 3 1 200 ffff9f001298a280 pgdaemon pgdaemon
0 169 3 0 200 ffff9f0012974240 usb7 usbevt
0 167 3 0 200 ffff9f001292ea80 usb6 usbevt
0 165 3 1 200 ffff9f001292e640 usb5 usbevt
0 164 3 0 200 ffff9f001292e200 usb4 usbevt
0 31 3 0 200 ffff9f00128e0a40 usb3 usbevt
0 63 3 0 200 ffff9f00128e0600 usb2 usbevt
0 126 3 0 200 ffff9f00128e01c0 usb1 usbevt
0 125 3 1 200 ffff9f0012874a00 usb0 usbevt
0 124 3 1 200 ffff9f00128745c0 usbtask-dr usbtsk
0 123 3 0 200 ffff9f00120b66c0 usbtask-hc usbtsk
0 122 3 0 200 ffff9f0012874180 npfgc0 npfgcw
0 121 3 1 200 ffff9f0012855580 rt_free rt_free
0 120 3 1 200 ffff9f0012855140 unpgc unpgc
0 119 2 1 200 ffff9f00126fa980 key_timehandler
0 118 3 1 200 ffff9f00126fa540 icmp6_wqinput/1 icmp6_wqinput
0 117 3 0 200 ffff9f00126fa100 icmp6_wqinput/0 icmp6_wqinput
0 116 3 1 200 ffff9f00126ed940 nd6_timer nd6_timer
0 115 3 1 200 ffff9f00126ed500 carp6_wqinput/1 carp6_wqinput
0 114 3 0 200 ffff9f00126ed0c0 carp6_wqinput/0 carp6_wqinput
0 113 3 1 200 ffff9f00126de900 carp_wqinput/1 carp_wqinput
0 112 3 0 200 ffff9f00126de4c0 carp_wqinput/0 carp_wqinput
0 111 3 1 200 ffff9f00126de080 icmp_wqinput/1 icmp_wqinput
0 110 3 0 200 ffff9f00126cc8c0 icmp_wqinput/0 icmp_wqinput
0 109 3 0 200 ffff9f00126cc480 rt_timer rt_timer
0 108 3 1 200 ffff9f00126cbbc0 vmem_rehash vmem_rehash
0 99 3 0 200 ffff9f00120bbb40 entbutler entropy
0 98 3 1 200 ffff9f00120bb700 viomb balloon
0 97 3 1 200 ffff9f00120bb2c0 vioif0_txrx/1 vioif0_txrx
0 96 3 0 200 ffff9f00120b6b00 vioif0_txrx/0 vioif0_txrx
0 29 3 0 200 ffff9f00120b6280 scsibus0 sccomp
0 28 3 0 200 ffff9f0010cbaac0 pms0 pmsreset
0 27 3 1 200 ffff9f0010cba680 xcall/1 xcall
0 26 1 1 200 ffff9f0010cba240 softser/1
0 25 3 1 200 ffff9f0010cb9a80 softclk/1 tstile
0 24 1 1 200 ffff9f0010cb9640 softbio/1
0 23 1 1 200 ffff9f0010cb9200 softnet/1
0 22 1 1 201 ffff9f000fb55a40 idle/1
0 21 3 0 200 ffff9f000fb55600 lnxsyswq lnxsyswq
0 20 3 0 200 ffff9f000fb551c0 lnxubdwq lnxubdwq
0 19 3 0 200 ffff9f000fb54a00 lnxpwrwq lnxpwrwq
0 18 3 0 200 ffff9f000fb545c0 lnxlngwq lnxlngwq
0 17 3 0 200 ffff9f000fb54180 lnxhipwq lnxhipwq
0 16 3 1 200 ffff9f000fb4b9c0 lnxrcugc lnxrcugc
0 15 3 0 200 ffff9f000fb4b580 sysmon smtaskq
0 14 3 0 200 ffff9f000fb4b140 pmfsuspend pmfsuspend
0 13 3 0 200 ffff9f000fb47980 pmfevent pmfevent
0 12 3 0 200 ffff9f000fb47540 sopendfree sopendfr
0 11 3 1 200 ffff9f000fb47100 iflnkst iflnkst
0 10 3 0 200 ffff9f000fb3c940 nfssilly nfssilly
0 9 3 0 200 ffff9f000fb3c500 vdrain vdrain
0 8 3 1 200 ffff9f000fb3c0c0 modunload mod_unld
0 7 3 0 200 ffff9f000fb33900 xcall/0 xcall
0 6 1 0 200 ffff9f000fb334c0 softser/0
0 > 5 7 0 200 ffff9f000fb33080 softclk/0
0 4 1 0 200 ffff9f000fb318c0 softbio/0
0 3 1 0 200 ffff9f000fb31480 softnet/0
0 2 1 0 201 ffff9f000fb31040 idle/0
0 0 3 1 200 ffffffff8333ca40 swapper uvm
[Locks tracked through LWPs]

****** LWP 11623.7340 (syz-executor.3) @ 0xffff9f0013eb7300, l_stat=2

*** Locks held:

* Lock 0 (initialized at amap_ctor)
lock address : 0xffff9f00142b3e40 type : sleep/adaptive
initialized : 0xffffffff81a3ab14
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffff9f0013eb7300 last held: 0xffff9f0013eb7300
last locked* : 0xffffffff81a4b574 unlocked : 0xffffffff81a49ded
owner/count : 0xffff9f0013eb7300 flags : 0x0000000000000004
Turnstile: no active turnstile for this lock.

*** Locks wanted: none

****** LWP 11440.11440 (syz-executor.0) @ 0xffff9f0013363580, l_stat=2

*** Locks held:

* Lock 0 (initialized at pmap_ctor)
lock address : 0xffff9f0013450380 type : sleep/adaptive
initialized : 0xffffffff80942009
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffff9f0013363580 last held: 0xffff9f0013363580
last locked* : 0xffffffff80943e3c unlocked : 0xffffffff80941ed1
owner field : 0xffff9f0013363580 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

*** Locks wanted: none

****** LWP 547.547 (dhcpcd) @ 0xffff9f0012bffac0, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at module_hook_init)
lock address : 0xffffffff834701c0 type : sleep/adaptive
initialized : 0xffffffff81afb2a1
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 0
relevant lwp : 0xffff9f0012bffac0 last held: 000000000000000000
last locked : 000000000000000000 unlocked*: 000000000000000000
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 464.464 (dhcpcd) @ 0xffff9f0012bff240, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at module_hook_init)
lock address : 0xffffffff834701c0 type : sleep/adaptive
initialized : 0xffffffff81afb2a1
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffff9f0012bff240 last held: 000000000000000000
last locked : 000000000000000000 unlocked*: 000000000000000000
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 288.288 (dhcpcd) @ 0xffff9f0012d6c8c0, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at module_hook_init)
lock address : 0xffffffff834701c0 type : sleep/adaptive
initialized : 0xffffffff81afb2a1
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffff9f0012d6c8c0 last held: 000000000000000000
last locked : 000000000000000000 unlocked*: 000000000000000000
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 351.351 (dhcpcd) @ 0xffff9f0012d6c480, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at module_hook_init)
lock address : 0xffffffff834701c0 type : sleep/adaptive
initialized : 0xffffffff81afb2a1
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffff9f0012d6c480 last held: 000000000000000000
last locked : 000000000000000000 unlocked*: 000000000000000000
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 0.11 (iflnkst) @ 0xffff9f000fb47100, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at module_hook_init)
lock address : 0xffffffff834701c0 type : sleep/adaptive
initialized : 0xffffffff81afb2a1
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 0
relevant lwp : 0xffff9f000fb47100 last held: 000000000000000000
last locked : 000000000000000000 unlocked*: 000000000000000000
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 0.5 (softclk/0) @ 0xffff9f000fb33080, l_stat=7

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at module_hook_init)
lock address : 0xffffffff834701c0 type : sleep/adaptive
initialized : 0xffffffff81afb2a1
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffff9f000fb33080 last held: 000000000000000000
last locked : 000000000000000000 unlocked*: 000000000000000000
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 0.0 (swapper) @ 0xffffffff8333ca40, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at module_hook_init)
lock address : 0xffffffff834701c0 type : sleep/adaptive
initialized : 0xffffffff81afb2a1
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 0
relevant lwp : 0xffffffff8333ca40 last held: 000000000000000000
last locked : 000000000000000000 unlocked*: 000000000000000000
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

[Locks tracked through CPUs]

******* Locks held on cpu1:

* Lock 0 (initialized at main)
lock address : 0xffffffff834700c0 type : spin
initialized : 0xffffffff81f5134e
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 1
relevant lwp : 0xffff9f0013452980 last held: 0xffff9f0013452980
last locked* : 0xffffffff81b87c76 unlocked : 0xffffffff81b87cae
curcpu holds : 1 wanted by: 000000000000000000

PAGE FLAG PQ UOBJECT UANON
0xffff9f0000017180 0041 00000000 0x0 0x0
0xffff9f0000017200 0041 00000000 0x0 0x0
0xffff9f0000017280 0041 00000000 0x0 0x0
0xffff9f0000017300 0041 00000000 0x0 0x0
0xffff9f0000017380 0041 00000000 0x0 0x0
0xffff9f0000017400 0041 00000000 0x0 0x0
0xffff9f0000017480 0041 00000000 0x0 0x0
0xffff9f0000017500 0041 00000000 0x0 0x0
0xffff9f0000017580 0041 00000000 0x0 0x0
0xffff9f0000017600 0041 00000000 0x0 0x0
0xffff9f0000017680 0041 00000000 0x0 0x0
0xffff9f0000017700 0041 00000000 0x0 0x0
0xffff9f0000017780 0041 00000000 0x0 0x0
0xffff9f0000017800 0041 00000000 0x0 0x0
0xffff9f0000017880 0041 00000000 0x0 0x0
0xffff9f0000017900 0041 00000000 0x0 0x0
0xffff9f0000017980 0041 00000000 0x0 0x0
0xffff9f0000017a00 0041 00000000 0x0 0x0
0xffff9f0000017a80 0041 00000000 0x0 0x0
0xffff9f0000017b00 0041 00000000 0x0 0x0
0xffff9f0000017b80 0041 00000000 0x0 0x0
0xffff9f0000017c00 0041 00000000 0x0 0x0
0xffff9f0000017c80 0041 00000000 0x0 0x0
0xffff9f0000017d00 0041 00000000 0x0 0x0
0xffff9f0000017d80 0041 00000000 0x0 0x0
0xffff9f0000017e00 0041 00000000 0x0 0x0
0xffff9f0000017e80 0041 00000000 0x0 0x0
0xffff9f0000017f00 0041 00000000 0x0 0x0
0xffff9f0000017f80 0041 00000000 0x0 0x0
0xffff9f0000018000 0041 00000000 0x0 0x0
0xffff9f0000018080 0041 00000000 0x0 0x0
0xffff9f0000018100 0041 00000000 0x0 0x0
0xffff9f0000018180 0041 00000000 0x0 0x0
0xffff9f0000018200 0041 00000000 0x0 0x0
0xffff9f0000018280 0041 00000000 0x0 0x0
0xffff9f0000018300 0041 00000000 0x0 0x0
0xffff9f0000018380 0041 00000000 0x0 0x0
0xffff9f0000018400 0041 00000000 0x0 0x0
0xffff9f0000018480 0041 00000000 0x0 0x0
0xffff9f0000018500 0041 00000000 0x0 0x0
0xffff9f0000018580 0041 00000000 0x0 0x0
0xffff9f0000018600 0041 00000000 0x0 0x0
0xffff9f0000018680 0041 00000000 0x0 0x0
0xffff9f0000018700 0041 00000000 0x0 0x0
0xffff9f0000018780 0041 00000000 0x0 0x0
0xffff9f0000018800 0041 00000000 0x0 0x0
0xffff9f0000018880 0041 00000000 0x0 0x0
0xffff9f0000018900 0041 00000000 0x0 0x0
0xffff9f0000018980 0041 00000000 0x0 0x0
0xffff9f0000018a00 0041 00000000 0x0 0x0
0xffff9f0000018a80 0041 00000000 0x0 0x0
0xffff9f0000018b00 0041 00000000 0x0 0x0
0xffff9f0000018b80 0041 00000000 0x0 0x0
0xffff9f0000018c00 0041 00000000 0x0 0x0
0xffff9f0000018c80 0041 00000000 0x0 0x0
0xffff9f0000018d00 0041 00000000 0x0 0x0
0xffff9f0000018d80 0041 00000000 0x0 0x0
0xffff9f0000018e00 0041 00000000 0x0 0x0
0xffff9f0000018e80 0041 00000000 0x0 0x0
0xffff9f0000018f00 0041 00000000 0x0 0x0
0xffff9f0000018f80 0041 00000000 0x0 0x0
0xffff9f0000019000 0041 00000000 0x0 0x0
0xffff9f0000019080 0041 00000000 0x0 0x0
0xffff9f0000019100 0041 00000000 0x0 0x0
0xffff9f0000019180 0041 00000000 0x0 0x0
0xffff9f0000019200 0041 00000000 0x0 0x0
0xffff9f0000019280 0041 00000000 0x0 0x0
0xffff9f0000019300 0041 00000000 0x0 0x0
0xffff9f0000019380 0041 00000000 0x0 0x0
0xffff9f0000019400 0041 00000000 0x0 0x0
0xffff9f0000019480 0041 00000000 0x0 0x0
0xffff9f0000019500 0041 00000000 0x0 0x0
0xffff9f0000019580 0041 00000000 0x0 0x0
0xffff9f0000019600 0041 00000000 0x0 0x0
0xffff9f0000019680 0041 00000000 0x0 0x0
0xffff9f0000019700 0041 00000000 0x0 0x0
0xffff9f0000019780 0041 00000000 0x0 0x0
0xffff9f0000019800 0041 00000000 0x0 0x0
0xffff9f0000019880 0041 00000000 0x0 0x0
0xffff9f0000019900 0041 00000000 0x0 0x0
0xffff9f0000019980 0041 00000000 0x0 0x0
0xffff9f0000019a00 0041 00000000 0x0 0x0
0xffff9f0000019a80 0041 00000000 0x0 0x0
0xffff9f0000019b00 0041 00000000 0x0 0x0
0xffff9f0000019b80 0041 00000000 0x0 0x0
0xffff9f0000019c00 0041 00000000 0x0 0x0
0xffff9f0000019c80 0041 00000000 0x0 0x0
0xffff9f0000019d00 0041 00000000 0x0 0x0
0xffff9f0000019d80 0041 00000000 0x0 0x0
0xffff9f0000019e00 0041 00000000 0x0 0x0
0xffff9f0000019e80 0041 00000000 0x0 0x0
0xffff9f0000019f00 0041 00000000 0x0 0x0
0xffff9f0000019f80 0041 00000000 0x0 0x0
0xffff9f000001a000 0041 00000000 0x0 0x0
0xffff9f000001a080 0041 00000000 0x0 0x0
0xffff9f000001a100 0041 00000000 0x0 0x0
0xffff9f000001a180 0041 00000000 0x0 0x0
0xffff9f000001a200 0041 00000000 0x0 0x0
0xffff9f000001a280 0041 00000000 0x0 0x0
0xffff9f000001a300 0041 00000000 0x0 0x0
0xffff9f000001a380 0041 00000000 0x0 0x0
0xffff9f000001a400 0041 00000000 0x0 0x0
0xffff9f000001a480 0041 00000000 0x0 0x0
0xffff9f000001a500 0041 00000000 0x0 0x0
0xffff9f000001a580 0041 00000000 0x0 0x0
0xffff9f000001a600 0041 00000000 0x0 0x0
0xffff9f000001a680 0041 00000000 0x0 0x0
0xffff9f000001a700 0041 00000000 0x0 0x0
0xffff9f000001a780 0041 00000000 0x0 0x0
0xffff9f000001a800 0041 00000000 0x0 0x0
0xffff9f000001a880 0041 00000000 0x0 0x0
0xffff9f000001a900 0041 00000000 0x0 0x0
0xffff9f000001a980 0041 00000000 0x0 0x0
0xffff9f000001aa00 0041 00000000 0x0 0x0
0xffff9f000001aa80 0041 00000000 0x0 0x0
0xffff9f000001ab00 0041 00000000 0x0 0x0
0xffff9f000001ab80 0041 00000000 0x0 0x0
0xffff9f000001ac00 0041 00000000 0x0 0x0
0xffff9f000001ac80 0041 00000000 0x0 0x0
0xffff9f000001ad00 0041 00000000 0x0 0x0
0xffff9f000001ad80 0041 00000000 0x0 0x0
0xffff9f000001ae00 0041 00000000 0x0 0x0
0xffff9f000001ae80 0041 00000000 0x0 0x0
0xffff9f000001af00 0041 00000000 0x0 0x0
0xffff9f000001af80 0041 00000000 0x0 0x0
0xffff9f000001b000 0041 00000000 0x0 0x0
0xffff9f000001b080 0041 00000000 0x0 0x0
0xffff9f000001b100 0041 00000000 0x0 0x0
0xffff9f000001b180 0041 00000000 0x0 0x0
0xffff9f000001b200 0041 00000000 0x0 0x0
0xffff9f000001b280 0041 00000000 0x0 0x0
0xffff9f000001b300 0041 00000000 0x0 0x0
0xffff9f000001b380 0041 00000000 0x0 0x0
0xffff9f000001b400 0041 00000000 0x0 0x0
0xffff9f000001b480 0041 00000000 0x0 0x0
0xffff9f000001b500 0041 00000000 0x0 0x0
0xffff9f000001b580 0041 00000000 0x0 0x0
0xffff9f000001b600 0041 00000000 0x0 0x0
0xffff9f000001b680 0041 00000000 0x0 0x0
0xffff9f000001b700 0041 00000000 0x0 0x0
0xffff9f000001b780 0041 00000000 0x0 0x0
0xffff9f000001b800 0041 00000000 0x0 0x0
0xffff9f000001b880 0041 00000000 0x0 0x0
0xffff9f000001b900 0041 00000000 0x0 0x0
0xffff9f000001b980 0041 00000000 0x0 0x0
0xffff9f000001ba00 0041 00000000 0x0 0x0
0xffff9f000001ba80 0041 00000000 0x0 0x0
0xffff9f000001bb00 0001 00000000 0x0 0x0
0xffff9f000001bb80 0001 00000000 0x0 0x0
0xffff9f000001bc00 0001 00000000 0x0 0x0
0xffff9f000001bc80 0001 00000000 0x0 0x0
0xffff9f000001bd00 0001 00000000 0x0 0x0
0xffff9f000001bd80 0001 00000000 0x0 0x0
0xffff9f000001be00 0001 00000000 0x0 0x0
0xffff9f000001be80 0001 00000000 0x0 0x0
0xffff9f000001bf00 0001 00000000 0x0 0x0
0xffff9f000001bf80 0001 00000000 0x0 0x0
0xffff9f000001c000 0001 00000000 0x0 0x0
0xffff9f000001c080 0001 00000000 0x0 0x0
0xffff9f000001c100 0001 00000000 0x0 0x0
0xffff9f000001c180 0001 00000000 0x0 0x0
0xffff9f000001c200 0001 00000000 0x0 0x0
0xffff9f000001c280 0001 00000000 0x0 0x0
0xffff9f000001c300 0001 00000000 0x0 0x0
0xffff9f000001c380 0001 00000000 0x0 0x0
0xffff9f000001c400 0001 00000000 0x0 0x0
0xffff9f000001c480 0001 00000000 0x0 0x0
0xffff9f000001c500 0001 00000000 0x0 0x0
0xffff9f000001c580 0001 00000000 0x0 0x0
0xffff9f000001c600 0001 00000000 0x0 0x0
0xffff9f000001c680 0001 00000000 0x0 0x0
0xffff9f000001c700 0001 00000000 0x0 0x0
0xffff9f000001c780 0001 00000000 0x0 0x0
0xffff9f000001c800 0001 00000000 0x0 0x0
0xffff9f000001c880 0001 00000000 0x0 0x0
0xffff9f000001c900 0001 00000000 0x0 0x0
0xffff9f000001c980 0001 00000000 0x0 0x0
0xffff9f000001ca00 0001 00000000 0x0 0x0
0xffff9f000001ca80 0001 00000000 0x0 0x0
0xffff9f000001cb00 0001 00000000 0x0 0x0
0xffff9f000001cb80 0001 00000000 0x0 0x0
0xffff9f000001cc00 0001 00000000 0x0 0x0
0xffff9f000001cc80 0001 00000000 0x0 0x0
0xffff9f000001cd00 0001 00000000 0x0 0x0
0xffff9f000001cd80 0001 00000000 0x0 0x0
0xffff9f000001ce00 0001 00000000 0x0 0x0
0xffff9f000001ce80 0001 00000000 0x0 0x0
0xffff9f000001cf00 0001 00000000 0x0 0x0
0xffff9f000001cf80 0001 00000000 0x0 0x0
0xffff9f000001d000 0001 00000000 0x0 0x0
0xffff9f000001d080 0001 00000000 0x0 0x0
0xffff9f000001d100 0001 00000000 0x0 0x0
0xffff9f000001d180 0001 00000000 0x0 0x0
0xffff9f000001d200 0001 00000000 0x0 0x0
0xffff9f000001d280 0001 00000000 0x0 0x0
0xffff9f000001d300 0001 00000000 0x0 0x0
0xffff9f000001d380 0001 00000000 0x0 0x0
0xffff9f000001d400 0001 00000000 0x0 0x0
0xffff9f000001d480 0001 00000000 0x0 0x0
0xffff9f000001d500 0001 00000000 0x0 0x0
0xffff9f000001d580 0001 00000000 0x0 0x0
0xffff9f000001d600 0001 00000000 0x0 0x0
0xffff9f000001d680 0001 00000000 0x0 0x0
0xffff9f000001d700 0001 00000000 0x0 0x0
0xffff9f000001d780 0001 00000000 0x0 0x0
0xffff9f000001d800 0001 00000000 0x0 0x0
0xffff9f000001d880 0001 00000000 0x0 0x0
0xffff9f000001d900 0001 00000000 0x0 0x0
0xffff9f000001d980 0001 00000000 0x0 0x0
0xffff9f000001da00 0001 00000000 0x0 0x0
0xffff9f000001da80 0001 00000000 0x0 0x0
0xffff9f000001db00 0001 00000000 0x0 0x0
0xffff9f000001db80 0001 00000000 0x0 0x0
0xffff9f000001dc00 0001 00000000 0x0 0x0
0xffff9f000001dc80 0001 00000000 0x0 0x0
0xffff9f000001dd00 0001 00000000 0x0 0x0
0xffff9f000001dd80 0001 00000000 0x0 0x0
0xffff9f000001de00 0001 00000000 0x0 0x0
0xffff9f000001de80 0001 00000000 0x0 0x0
0xffff9f000001df00 0001 00000000 0x0 0x0
0xffff9f000001df80 0001 00000000 0x0 0x0
0xffff9f000001e000 0001 00000000 0x0 0x0
0xffff9f000001e080 0001 00000000 0x0 0x0
0xffff9f000001e100 0001 00000000 0x0 0x0
0xffff9f000001e180 0001 00000000 0x0 0x0
0xffff9f000001e200 0001 00000000 0x0 0x0
0xffff9f000001e280 0001 00000000 0x0 0x0
0xffff9f000001e300 0001 00000000 0x0 0x0
0xffff9f000001e380 0001 00000000 0x0 0x0
0xffff9f000001e400 0001 00000000 0x0 0x0
0xffff9f000001e480 0001 00000000 0x0 0x0
0xffff9f000001e500 0001 00000000 0x0 0x0
0xffff9f000001e580 0001 00000000 0x0 0x0
0xffff9f000001e600 0001 00000000 0x0 0x0
0xffff9f000001e680 0001 00000000 0x0 0x0
0xffff9f000001e700 0001 00000000 0x0 0x0
0xffff9f000001e780 0001 00000000 0x0 0x0
0xffff9f000001e800 0001 00000000 0x0 0x0
0xffff9f000001e880 0001 00000000 0x0 0x0
0xffff9f000001e900 0001 00000000 0x0 0x0
0xffff9f000001e980 0001 00000000 0x0 0x0
0xffff9f000001ea00 0001 00000000 0x0 0x0
0xffff9f000001ea80 0001 00000000 0x0 0x0
0xffff9f000001eb00 0001 00000000 0x0 0x0
0xffff9f000001eb80 0001 00000000 0x0 0x0
0xffff9f000001ec00 0001 00000000 0x0 0x0
0xffff9f000001ec80 0001 00000000 0x0 0x0
0xffff9f000001ed00 0001 00000000 0x0 0x0
0xffff9f000001ed80 0001 00000000 0x0 0x0
0xffff9f000001ee00 0001 00000000 0x0 0x0
0xffff9f000001ee80 0001 00000000 0x0 0x0
0xffff9f000001ef00 0001 00000000 0x0 0x0
0xffff9f000001ef80 0001 00000000 0x0 0x0
0xffff9f000001f000 0001 00000000 0x0 0x0
0xffff9f000001f080 0001 00000000 0x0 0x0
0xffff9f000001f100 0001 00000000 0x0 0x0
0xffff9f000001f180 0001 00000000 0x0 0x0
0xffff9f000001f200 0001 00000000 0x0 0x0
0xffff9f000001f280 0001 00000000 0x0 0x0
0xffff9f000001f300 0001 00000000 0x0 0x0
0xffff9f000001f380 0001 00000000 0x0 0x0
0xffff9f000001f400 0001 00000000 0x0 0x0
0xffff9f000001f480 0001 00000000 0x0 0x0
0xffff9f000001f500 0001 00000000 0x0 0x0
0xffff9f000001f580 0001 00000000 0x0 0x0
0xffff9f000001f600 0001 00000000 0x0 0x0
0xffff9f000001f680 0001 00000000 0x0 0x0
0xffff9f000001f700 0001 00000000 0x0 0x0
0xffff9f000001f780 0001 00000000 0x0 0x0
0xffff9f000001f800 0001 00000000 0x0 0x0
0xffff9f000001f880 0001 00000000 0x0 0x0
0xffff9f000001f900 0001 00000000 0x0 0x0
0xffff9f000001f980 0001 00000000 0x0 0x0
0xffff9f000001fa00 0001 00000000 0x0 0x0
0xffff9f000001fa80 0001 00000000 0x0 0x0
0xffff9f000001fb00 0001 00000000 0x0 0x0
0xffff9f000001fb80 0001 00000000 0x0 0x0
0xffff9f000001fc00 0001 00000000 0x0 0x0
0xffff9f000001fc80 0001 00000000 0x0 0x0
0xffff9f000001fd00 0001 00000000 0x0 0x0
0xffff9f000001fd80 0001 00000000 0x0 0x0
0xffff9f000001fe00 0001 00000000 0x0 0x0
0xffff9f000001fe80 0001 00000000 0x0 0x0
0xffff9f000001ff00 0001 00000000 0x0 0x0
0xffff9f000001ff80 0001 00000000 0x0 0x0
0xffff9f0000020000 0001 00000000 0x0 0x0
0xffff9f0000020080 0001 00000000 0x0 0x0
0xffff9f0000020100 0001 00000000 0x0 0x0
0xffff9f0000020180 0001 00000000 0x0 0x0
0xffff9f0000020200 0001 00000000 0x0 0x0
0xffff9f0000020280 0001 00000000 0x0 0x0
0xffff9f0000020300 0001 00000000 0x0 0x0
0xffff9f0000020380 0001 00000000 0x0 0x0
0xffff9f0000020400 0001 00000000 0x0 0x0
0xffff9f0000020480 0001 00000000 0x0 0x0
0xffff9f0000020500 0001 00000000 0x0 0x0
0xffff9f0000020580 0001 00000000 0x0 0x0
0xffff9f0000020600 0001 00000000 0x0 0x0
0xffff9f0000020680 0001 00000000 0x0 0x0
0xffff9f0000020700 0001 00000000 0x0 0x0
0xffff9f0000020780 0001 00000000 0x0 0x0
0xffff9f0000020800 0001 00000000 0x0 0x0
0xffff9f0000020880 0001 00000000 0x0 0x0
0xffff9f0000020900 0001 00000000 0x0 0x0
0xffff9f0000020980 0001 00000000 0x0 0x0
0xffff9f0000020a00 0001 00000000 0x0 0x0
0xffff9f0000020a80 0001 00000000 0x0 0x0
0xffff9f0000020b00 0001 00000000 0x0 0x0
0xffff9f0000020b80 0001 00000000 0x0 0x0
0xffff9f0000020c00 0001 00000000 0x0 0x0
0xffff9f0000020c80 0001 00000000 0x0 0x0
0xffff9f0000020d00 0001 00000000 0x0 0x0
0xffff9f0000020d80 0001 00000000 0x0 0x0
0xffff9f0000020e00 0001 00000000 0x0 0x0
0xffff9f0000020e80 0001 00000000 0x0 0x0
0xffff9f0000020f00 0001 00000000 0x0 0x0
0xffff9f0000020f80 0001 00000000 0x0 0x0
0xffff9f0000021000 0001 00000000 0x0 0x0
0xffff9f0000021080 0001 00000000 0x0 0x0
0xffff9f0000021100 0001 00000000 0x0 0x0
0xffff9f0000021180 0001 00000000 0x0 0x0
0xffff9f0000021200 0001 00000000 0x0 0x0
0xffff9f0000021280 0001 00000000 0x0 0x0
0xffff9f0000021300 0001 00000000 0x0 0x0
0xffff9f0000021380 0001 00000000 0x0 0x0
0xffff9f0000021400 0001 00000000 0x0 0x0
0xffff9f0000021480 0001 00000000 0x0 0x0
0xffff9f0000021500 0001 00000000 0x0 0x0
0xffff9f0000021580 0001 00000000 0x0 0x0
0xffff9f0000021600 0001 00000000 0x0 0x0
0xffff9f0000021680 0001 00000000 0x0 0x0
0xffff9f0000021700 0001 00000000 0x0 0x0
0xffff9f0000021780 0001 00000000 0x0 0x0
0xffff9f0000021800 0001 00000000 0x0 0x0
0xffff9f0000021880 0001 00000000 0x0 0x0
0xffff9f0000021900 0001 00000000 0x0 0x0
0xffff9f0000021980 0001 00000000 0x0 0x0
0xffff9f0000021a00 0001 00000000 0x0 0x0
0xffff9f0000021a80 0001 00000000 0x0 0x0
0xffff9f0000021b00 0001 00000000 0x0 0x0
0xffff9f0000021b80 0001 00000000 0x0 0x0
0xffff9f0000021c00 0001 00000000 0x0 0x0
0xffff9f0000021c80 0001 00000000 0x0 0x0
0xffff9f0000021d00 0001 00000000 0x0 0x0
0xffff9f0000021d80 0001 00000000 0x0 0x0
0xffff9f0000021e00 0001 00000000 0x0 0x0
0xffff9f0000021e80 0001 00000000 0x0 0x0
0xffff9f0000021f00 0001 00000000 0x0 0x0
0xffff9f0000021f80 0001 00000000 0x0 0x0
0xffff9f0000022000 0001 00000000 0x0 0x0
0xffff9f0000022080 0001 00000000 0x0 0x0
0xffff9f0000022100 0001 00000000 0x0 0x0
0xffff9f0000022180 0001 00000000 0x0 0x0
0xffff9f0000022200 0001 00000000 0x0 0x0
0xffff9f0000022280 0001 00000000 0x0 0x0
0xffff9f0000022300 0001 00000000 0x0 0x0
0xffff9f0000022380 0001 00000000 0x0 0x0
0xffff9f0000022400 0001 00000000 0x0 0x0
0xffff9f0000022480 0001 00000000 0x0 0x0
0xffff9f0000022500 0001 00000000 0x0 0x0
0xffff9f0000022580 0001 00000000 0x0 0x0
0xffff9f0000022600 0001 00000000 0x0 0x0
0xffff9f0000022680 0001 00000000 0x0 0x0
0xffff9f0000022700 0001 00000000 0x0 0x0
0xffff9f0000022780 0001 00000000 0x0 0x0
0xffff9f0000022800 0001 00000000 0x0 0x0
0xffff9f0000022880 0001 00000000 0x0 0x0
0xffff9f0000022900 0001 00000000 0x0 0x0
0xffff9f0000022980 0001 00000000 0x0 0x0
0xffff9f0000022a00 0001 00000000 0x0 0x0
0xffff9f0000022a80 0001 00000000 0x0 0x0
0xffff9f0000022b00 0001 00000000 0x0 0x0
0xffff9f0000022b80 0001 00000000 0x0 0x0
0xffff9f0000022c00 0001 00000000 0x0 0x0
0xffff9f0000022c80 0001 00000000 0x0 0x0
0xffff9f0000022d00 0001 00000000 0x0 0x0
0xffff9f0000022d80 0001 00000000 0x0 0x0
0xffff9f0000022e00 0001 00000000 0x0 0x0
0xffff9f0000022e80 0001 00000000 0x0 0x0
0xffff9f0000022f00 0001 00000000 0x0 0x0
0xffff9f0000022f80 0001 00000000 0x0 0x0
0xffff9f0000023000 0001 00000000 0x0 0x0
0xffff9f0000023080 0001 00000000 0x0 0x0
0xffff9f0000023100 0001 00000000 0x0 0x0
0xffff9f0000023180 0001 00000000 0x0 0x0
0xffff9f0000023200 0001 00000000 0x0 0x0
0xffff9f0000023280 0001 00000000 0x0 0x0
0xffff9f0000023300 0001 00000000 0x0 0x0
0xffff9f0000023380 0001 00000000 0x0 0x0
0xffff9f0000023400 0001 00000000 0x0 0x0
0xffff9f0000023480 0001 00000000 0x0 0x0
0xffff9f0000023500 0001 00000000 0x0 0x0
0xffff9f0000023580 0001 00000000 0x0 0x0
0xffff9f0000023600 0001 00000000 0x0 0x0
0xffff9f0000023680 0001 00000000 0x0 0x0
0xffff9f0000023700 0001 00000000 0x0 0x0
0xffff9f0000023780 0001 00000000 0x0 0x0
0xffff9f0000023800 0001 00000000 0x0 0x0
0xffff9f0000023880 0001 00000000 0x0 0x0
0xffff9f0000023900 0001 00000000 0x0 0x0
0xffff9f0000023980 0001 00000000 0x0 0x0
0xffff9f0000023a00 0001 00000000 0x0 0x0
0xffff9f0000023a80 0001 00000000 0x0 0x0
0xffff9f0000023b00 0001 00000000 0x0 0x0
0xffff9f0000023b80 0001 00000000 0x0 0x0
0xffff9f0000023c00 0001 00000000 0x0 0x0
0xffff9f0000023c80 0001 00000000 0x0 0x0
0xffff9f0000023d00 0001 00000000 0x0 0x0
0xffff9f0000023d80 0001 00000000 0x0 0x0
0xffff9f0000023e00 0001 00000000 0x0 0x0
0xffff9f0000023e80 0001 00000000 0x0 0x0
0xffff9f0000023f00 0001 00000000 0x0 0x0
0xffff9f0000023f80 0001 00000000 0x0 0x0
0xffff9f0000024000 0001 00000000 0x0 0x0
0xffff9f0000024080 0001 00000000 0x0 0x0
0xffff9f0000024100 0001 00000000 0x0 0x0
0xffff9f0000024180 0001 00000000 0x0 0x0
0xffff9f0000024200 0001 00000000 0x0 0x0
0xffff9f0000024280 0001 00000000 0x0 0x0
0xffff9f0000024300 0001 00000000 0x0 0x0
0xffff9f0000024380 0001 00000000 0x0 0x0
0xffff9f0000024400 0001 00000000 0x0 0x0
0xffff9f0000024480 0001 00000000 0x0 0x0
0xffff9f0000024500 0001 00000000 0x0 0x0
0xffff9f0000024580 0001 00000000 0x0 0x0
0xffff9f0000024600 0001 00000000 0x0 0x0
0xffff9f0000024680 0001 00000000 0x0 0x0
0xffff9f0000024700 0001 00000000 0x0 0x0
0xffff9f0000024780 0001 00000000 0x0 0x0
0xffff9f0000024800 0001 00000000 0x0 0x0
0xffff9f0000024880 0001 00000000 0x0 0x0
0xffff9f0000024900 0001 00000000 0x0 0x0
0xffff9f0000024980 0001 00000000 0x0 0x0
0xffff9f0000024a00 0001 00000000 0x0 0x0
0xffff9f0000024a80 0001 00000000 0x0 0x0
0xffff9f0000024b00 0001 00000000 0x0 0x0
0xffff9f0000024b80 0001 00000000 0x0 0x0
0xffff9f0000024c00 0001 00000000 0x0 0x0
0xffff9f0000024c80 0001 00000000 0x0 0x0
0xffff9f0000024d00 0001 00000000 0x0 0x0
0xffff9f0000024d80 0001 00000000 0x0 0x0
0xffff9f0000024e00 0001 00000000 0x0 0x0
0xffff9f0000024e80 0001 00000000 0x0 0x0
0xffff9f0000024f00 0001 00000000 0x0 0x0
0xffff9f0000024f80 0001 00000000 0x0 0x0
0xffff9f0000025000 0001 00000000 0x0 0x0
0xffff9f0000025080 0001 00000000 0x0 0x0
0xffff9f0000025100 0001 00000000 0x0 0x0
0xffff9f0000025180 0001 00000000 0x0 0x0
0xffff9f0000025200 0001 00000000 0x0 0x0
0xffff9f0000025280 0001 00000000 0x0 0x0
0xffff9f0000025300 0001 00000000 0x0 0x0
0xffff9f0000025380 0001 00000000 0x0 0x0
0xffff9f0000025400 0001 00000000 0x0 0x0
0xffff9f0000025480 0001 00000000 0x0 0x0
0xffff9f0000025500 0001 00000000 0x0 0x0
0xffff9f0000025580 0001 00000000 0x0 0x0
0xffff9f0000025600 0001 00000000 0x0 0x0
0xffff9f0000025680 0001 00000000 0x0 0x0
0xffff9f0000025700 0001 00000000 0x0 0x0
0xffff9f0000025780 0001 00000000 0x0 0x0
0xffff9f0000025800 0001 00000000 0x0 0x0
0xffff9f0000025880 0001 00000000 0x0 0x0
0xffff9f0000025900 0001 00000000 0x0 0x0
0xffff9f0000025980 0001 00000000 0x0 0x0
0xffff9f0000025a00 0001 00000000 0x0 0x0
0xffff9f0000025a80 0001 00000000 0x0 0x0
0xffff9f0000025b00 0001 00000000 0x0 0x0
0xffff9f0000025b80 0001 00000000 0x0 0x0
0xffff9f0000025c00 0001 00000000 0x0 0x0
0xffff9f0000025c80 0001 00000000 0x0 0x0
0xffff9f0000025d00 0001 00000000 0x0 0x0
0xffff9f0000025d80 0001 00000000 0x0 0x0
0xffff9f0000025e00 0001 00000000 0x0 0x0
0xffff9f0000025e80 0001 00000000 0x0 0x0
0xffff9f0000025f00 0001 00000000 0x0 0x0
0xffff9f0000025f80 0001 00000000 0x0 0x0
0xffff9f0000026000 0001 00000000 0x0 0x0
0xffff9f0000026080 0001 00000000 0x0 0x0
0xffff9f0000026100 0001 00000000 0x0 0x0
0xffff9f0000026180 0001 00000000 0x0 0x0
0xffff9f0000026200 0001 00000000 0x0 0x0
0xffff9f0000026280 0001 00000000 0x0 0x0
0xffff9f0000026300 0001 00000000 0x0 0x0
0xffff9f0000026380 0001 00000000 0x0 0x0
0xffff9f0000026400 0001 00000000 0x0 0x0
0xffff9f0000026480 0001 00000000 0x0 0x0
0xffff9f0000026500 0001 00000000 0x0 0x0
0xffff9f0000026580 0001 00000000 0x0 0x0
0xffff9f0000026600 0001 00000000 0x0 0x0
0xffff9f0000026680 0001 00000000 0x0 0x0
0xffff9f0000026700 0001 00000000 0x0 0x0
0xffff9f0000026780 0001 00000000 0x0 0x0
0xffff9f0000026800 0001 00000000 0x0 0x0
0xffff9f0000026880 0001 00000000 0x0 0x0
0xffff9f0000026900 0001 00000000 0x0 0x0
0xffff9f0000026980 0001 00000000 0x0 0x0
0xffff9f0000026a00 0001 00000000 0x0 0x0
0xffff9f0000026a80 0001 00000000 0x0 0x0
0xffff9f0000026b00 0001 00000000 0x0 0x0
0xffff9f0000026b80 0001 00000000 0x0 0x0
0xffff9f0000026c00 0001 00000000 0x0 0x0
0xffff9f0000026c80 0001 00000000 0x0 0x0
0xffff9f0000026d00 0001 00000000 0x0 0x0
0xffff9f0000026d80 0001 00000000 0x0 0x0
0xffff9f0000026e00 0001 00000000 0x0 0x0
0xffff9f0000026e80 0001 00000000 0x0 0x0
0xffff9f0000026f00 0001 00000000 0x0 0x0
0xffff9f0000026f80 0001 00000000 0x0 0x0
0xffff9f0000027000 0001 00000000 0x0 0x0
0xffff9f0000027080 0001 00000000 0x0 0x0
0xffff9f0000027100 0001 00000000 0x0 0x0
0xffff9f0000027180 0001 00000000 0x0 0x0
0xffff9f0000027200 0001 00000000 0x0 0x0
0xffff9f0000027280 0001 00000000 0x0 0x0
0xffff9f0000027300 0001 00000000 0x0 0x0
0xffff9f0000027380 0001 00000000 0x0 0x0
0xffff9f0000027400 0001 00000000 0x0 0x0
0xffff9f0000027480 0001 00000000 0x0 0x0
0xffff9f0000027500 0001 00000000 0x0 0x0
0xffff9f0000027580 0001 00000000 0x0 0x0
0xffff9f0000027600 0001 00000000 0x0 0x0
0xffff9f0000027680 0001 00000000 0x0 0x0
0xffff9f0000027700 0001 00000000 0x0 0x0
0xffff9f0000027780 0001 00000000 0x0 0x0
0xffff9f0000027800 0001 00000000 0x0 0x0
0xffff9f0000027880 0001 00000000 0x0 0x0
0xffff9f0000027900 0001 00000000 0x0 0x0
0xffff9f0000027980 0001 00000000 0x0 0x0
0xffff9f0000027a00 0001 00000000 0x0 0x0
0xffff9f0000027a80 0001 00000000 0x0 0x0
0xffff9f0000027b00 0001 00000000 0x0 0x0
0xffff9f0000027b80 0001 00000000 0x0 0x0
0xffff9f0000027c00 0001 00000000 0x0 0x0
0xffff9f0000027c80 0001 00000000 0x0 0x0
0xffff9f0000027d00 0001 00000000 0x0 0x0
0xffff9f0000027d80 0001 00000000 0x0 0x0
0xffff9f0000027e00 0001 00000000 0x0 0x0
0xffff9f0000027e80 0001 00000000 0x0 0x0
0xffff9f0000027f00 0001 00000000 0x0 0x0
0xffff9f0000027f80 0001 00000000 0x0 0x0
0xffff9f0000028000 0001 00000000 0x0 0x0
0xffff9f0000028080 0001 00000000 0x0 0x0
0xffff9f0000028100 0001 00000000 0x0 0x0
0xffff9f0000028180 0001 00000000 0x0 0x0
0xffff9f0000028200 0001 00000000 0x0 0x0
0xffff9f0000028280 0001 00000000 0x0 0x0
0xffff9f0000028300 0001 00000000 0x0 0x0
0xffff9f0000028380 0001 00000000 0x0 0x0
0xffff9f0000028400 0001 00000000 0x0 0x0
0xffff9f0000028480 0001 00000000 0x0 0x0
0xffff9f0000028500 0001 00000000 0x0 0x0
0xffff9f0000028580 0001 00000000 0x0 0x0
0xffff9f0000028600 0001 00000000 0x0 0x0
0xffff9f0000028680 0001 00000000 0x0 0x0
0xffff9f0000028700 0001 00000000 0x0 0x0
0xffff9f0000028780 0001 00000000 0x0 0x0
0xffff9f0000028800 0001 00000000 0x0 0x0
0xffff9f0000028880 0001 00000000 0x0 0x0
0xffff9f0000028900 0001 00000000 0x0 0x0
0xffff9f0000028980 0001 00000000 0x0 0x0
0xffff9f0000028a00 0001 00000000 0x0 0x0
0xffff9f0000028a80 0001 00000000 0x0 0x0
0xffff9f0000028b00 0001 00000000 0x0 0x0
0xffff9f0000028b80 0001 00000000 0x0 0x0
0xffff9f0000028c00 0001 00000000 0x0 0x0
0xffff9f0000028c80 0001 00000000 0x0 0x0
0xffff9f0000028d00 0001 00000000 0x0 0x0
0xffff9f0000028d80 0001 00000000 0x0 0x0
0xffff9f0000028e00 0001 00000000 0x0 0x0
0xffff9f0000028e80 0001 00000000 0x0 0x0
0xffff9f0000028f00 0001 00000000 0x0 0x0
0xffff9f0000028f80 0001 00000000 0x0 0x0
0xffff9f0000029000 0001 00000000 0x0 0x0
0xffff9f0000029080 0001 00000000 0x0 0x0
0xffff9f0000029100 0001 00000000 0x0 0x0
0xffff9f0000029180 0001 00000000 0x0 0x0
0xffff9f0000029200 0001 00000000 0x0 0x0
0xffff9f0000029280 0001 00000000 0x0 0x0
0xffff9f0000029300 0001 00000000 0x0 0x0
0xffff9f0000029380 0001 00000000 0x0 0x0
0xffff9f0000029400 0001 00000000 0x0 0x0
0xffff9f0000029480 0001 00000000 0x0 0x0
0xffff9f0000029500 0001 00000000 0x0 0x0
0xffff9f0000029580 0001 00000000 0x0 0x0
0xffff9f0000029600 0001 00000000 0x0 0x0
0xffff9f0000029680 0001 00000000 0x0 0x0
0xffff9f0000029700 0001 00000000 0x0 0x0
0xffff9f0000029780 0001 00000000 0x0 0x0
0xffff9f0000029800 0001 00000000 0x0 0x0
0xffff9f0000029880 0001 00000000 0x0 0x0
0xffff9f0000029900 0001 00000000 0x0 0x0
0xffff9f0000029980 0001 00000000 0x0 0x0
0xffff9f0000029a00 0001 00000000 0x0 0x0
0xffff9f0000029a80 0001 00000000 0x0 0x0
0xffff9f0000029b00 0001 00000000 0x0 0x0
0xffff9f0000029b80 0001 00000000 0x0 0x0
0xffff9f0000029c00 0001 00000000 0x0 0x0
0xffff9f0000029c80 0001 00000000 0x0 0x0
0xffff9f0000029d00 0001 00000000 0x0 0x0
0xffff9f0000029d80 0001 00000000 0x0 0x0
0xffff9f0000029e00 0001 00000000 0x0 0x0
0xffff9f0000029e80 0001 00000000 0x0 0x0
0xffff9f0000029f00 0001 00000000 0x0 0x0
0xffff9f0000029f80 0001 00000000 0x0 0x0
0xffff9f000002a000 0001 00000000 0x0 0x0
0xffff9f000002a080 0001 00000000 0x0 0x0
0xffff9f000002a100 0001 00000000 0x0 0x0
0xffff9f000002a180 0001 00000000 0x0 0x0
0xffff9f000002a200 0001 00000000 0x0 0x0
0xffff9f000002a280 0001 00000000 0x0 0x0
0xffff9f000002a300 0001 00000000 0x0 0x0
0xffff9f000002a380 0001 00000000 0x0 0x0
0xffff9f000002a400 0001 00000000 0x0 0x0
0xffff9f000002a480 0001 00000000 0x0 0x0
0xffff9f000002a500 0001 00000000 0x0 0x0
0xffff9f000002a580 0001 00000000 0x0 0x0
0xffff9f000002a600 0001 00000000 0x0 0x0
0xffff9f000002a680 0001 00000000 0x0 0x0
0xffff9f000002a700 0001 00000000 0x0 0x0
0xffff9f000002a780 0001 00000000 0x0 0x0
0xffff9f000002a800 0001 00000000 0x0 0x0
0xffff9f000002a880 0001 00000000 0x0 0x0
0xffff9f000002a900 0001 00000000 0x0 0x0
0xffff9f000002a980 0001 00000000 0x0 0x0
0xffff9f000002aa00 0001 00000000 0x0 0x0
0xffff9f000002aa80 0001 00000000 0x0 0x0
0xffff9f000002ab00 0001 00000000 0x0 0x0
0xffff9f000002ab80 0001 00000000 0x0 0x0
0xffff9f000002ac00 0001 00000000 0x0 0x0
0xffff9f000002ac80 0001 00000000 0x0 0x0
0xffff9f000002ad00 0001 00000000 0x0 0x0
0xffff9f000002ad80 0001 00000000 0x0 0x0
0xffff9f000002ae00 0001 00000000 0x0 0x0
0xffff9f000002ae80 0001 00000000 0x0 0x0
0xffff9f000002af00 0001 00000000 0x0 0x0
0xffff9f000002af80 0001 00000000 0x0 0x0
0xffff9f000002b000 0001 00000000 0x0 0x0
0xffff9f000002b080 0001 00000000 0x0 0x0
0xffff9f000002b100 0001 00000000 0x0 0x0
0xffff9f000002b180 0001 00000000 0x0 0x0
0xffff9f000002b200 0001 00000000 0x0 0x0
0xffff9f000002b280 0001 00000000 0x0 0x0
0xffff9f000002b300 0001 00000000 0x0 0x0
0xffff9f000002b380 0001 00000000 0x0 0x0
0xffff9f000002b400 0001 00000000 0x0 0x0
0xffff9f000002b480 0001 00000000 0x0 0x0
0xffff9f000002b500 0001 00000000 0x0 0x0
0xffff9f000002b580 0001 00000000 0x0 0x0
0xffff9f000002b600 0001 00000000

---
This report is generated by a bot. It may contain errors.
See https://goo.gl/tpsmEJ for more information about syzbot.
syzbot engineers can be reached at syzk...@googlegroups.com.

syzbot will keep track of this issue. See:
https://goo.gl/tpsmEJ#status for how to communicate with syzbot.

syzbot

unread,

Apr 16, 2022, 8:11:20 PM4/16/22

to syzkaller-...@googlegroups.com

syzbot has found a reproducer for the following issue on:

HEAD commit: 030a5ba80092 Redo the way the builtin cmd 'ulimit' getopt(..
git tree: netbsd

console output: https://syzkaller.appspot.com/x/log.txt?x=10dba2ef700000

kernel config: https://syzkaller.appspot.com/x/.config?x=fab579639ba4bf0a
dashboard link: https://syzkaller.appspot.com/bug?extid=da4be777819055325902
compiler: g++ (Debian 10.2.1-6) 10.2.1 20210110

syz repro: https://syzkaller.appspot.com/x/repro.syz?x=178ce267700000
C reproducer: https://syzkaller.appspot.com/x/repro.c?x=15753ab8f00000

IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+da4be7...@syzkaller.appspotmail.com

[ 47.5720472] panic: kernel diagnostic assertion "lktype != LK_NONE" failed: file "/syzkaller/managers/ci2-netbsd/kernel/sys/kern/vfs_vnode.c", line 778
[ 47.5720472] cpu0: Begin traceback...
[ 47.5820335] vpanic() at netbsd:vpanic+0x258 sys/kern/subr_prf.c:290
[ 47.6020322] _sub_D_65535_0() at netbsd:_sub_D_65535_0+-0x241ac
[ 47.6320326] vput() at netbsd:vput+0x16d sys/kern/vfs_vnode.c:778
[ 47.6520366] rf_find_raid_components() at netbsd:rf_find_raid_components+0xa52 sys/dev/raidframe/rf_netbsdkintf.c:2960
[ 47.6820352] raidioctl() at netbsd:raidioctl+0x1db9 rf_rescan sys/dev/raidframe/rf_netbsdkintf.c:486 [inline]
[ 47.6820352] raidioctl() at netbsd:raidioctl+0x1db9 sys/dev/raidframe/rf_netbsdkintf.c:1623
[ 47.7120362] cdev_ioctl() at netbsd:cdev_ioctl+0x1e7 sys/kern/subr_devsw.c:1223
[ 47.7320327] spec_ioctl() at netbsd:spec_ioctl+0x148 sys/miscfs/specfs/spec_vnops.c:1294
[ 47.7520353] VOP_IOCTL() at netbsd:VOP_IOCTL+0x132 sys/kern/vnode_if.c:883
[ 47.7820317] vn_ioctl() at netbsd:vn_ioctl+0x1b9 sys/kern/vfs_vnops.c:865
[ 47.8120340] sys_ioctl() at netbsd:sys_ioctl+0x8f5 sys/kern/sys_generic.c:673
[ 47.8320390] sys_syscall() at netbsd:sys_syscall+0x10e sy_call sys/sys/syscallvar.h:65 [inline]
[ 47.8320390] sys_syscall() at netbsd:sys_syscall+0x10e sys/kern/sys_syscall.c:90
[ 47.8620347] syscall() at netbsd:syscall+0x25a sy_call sys/sys/syscallvar.h:65 [inline]
[ 47.8620347] syscall() at netbsd:syscall+0x25a sy_invoke sys/sys/syscallvar.h:94 [inline]
[ 47.8620347] syscall() at netbsd:syscall+0x25a sys/arch/x86/x86/syscall.c:138
[ 47.8620347] --- syscall (number 0) ---
[ 47.8753351] netbsd:syscall+0x25a:
[ 47.8834289] cpu0: End traceback...
[ 47.8834289] fatal breakpoint trap in supervisor mode
[ 47.8925213] trap type 1 code 0 rip 0xffffffff80220a2d cs 0x8 rflags 0x286 cr2 0x7f7fffddd258 ilevel 0 rsp 0xffffc5019db07030
[ 47.9036956] curlwp 0xffffc50013ca7a00 pid 1103.1103 lowest kstack 0xffffc5019db002c0
Stopped in pid 1103.1103 (syz-executor6037) at netbsd:breakpoint+0x5: leave

?
breakpoint() at netbsd:breakpoint+0x5
db_panic() at netbsd:db_panic+0x105 sys/ddb/db_panic.c:69
vpanic() at netbsd:vpanic+0x258 sys/kern/subr_prf.c:290
_sub_D_65535_0() at netbsd:_sub_D_65535_0+-0x241ac
vput() at netbsd:vput+0x16d sys/kern/vfs_vnode.c:778
rf_find_raid_components() at netbsd:rf_find_raid_components+0xa52 sys/dev/raidframe/rf_netbsdkintf.c:2960
raidioctl() at netbsd:raidioctl+0x1db9 rf_rescan sys/dev/raidframe/rf_netbsdkintf.c:486 [inline]
raidioctl() at netbsd:raidioctl+0x1db9 sys/dev/raidframe/rf_netbsdkintf.c:1623
cdev_ioctl() at netbsd:cdev_ioctl+0x1e7 sys/kern/subr_devsw.c:1223
spec_ioctl() at netbsd:spec_ioctl+0x148 sys/miscfs/specfs/spec_vnops.c:1294
VOP_IOCTL() at netbsd:VOP_IOCTL+0x132 sys/kern/vnode_if.c:883
vn_ioctl() at netbsd:vn_ioctl+0x1b9 sys/kern/vfs_vnops.c:865
sys_ioctl() at netbsd:sys_ioctl+0x8f5 sys/kern/sys_generic.c:673

sys_syscall() at netbsd:sys_syscall+0x10e sy_call sys/sys/syscallvar.h:65 [inline]
sys_syscall() at netbsd:sys_syscall+0x10e sys/kern/sys_syscall.c:90

syscall() at netbsd:syscall+0x25a sy_call sys/sys/syscallvar.h:65 [inline]
syscall() at netbsd:syscall+0x25a sy_invoke sys/sys/syscallvar.h:94 [inline]
syscall() at netbsd:syscall+0x25a sys/arch/x86/x86/syscall.c:138

--- syscall (number 0) ---

netbsd:syscall+0x25a:
Panic string: kernel diagnostic assertion "lktype != LK_NONE" failed: file "/syzkaller/managers/ci2-netbsd/kernel/sys/kern/vfs_vnode.c", line 778
PID LID S CPU FLAGS STRUCT LWP * NAME WAIT

1111 1111 2 0 0 ffffc50013cc71c0 syz-executor6037
1103 >1103 7 0 0 ffffc50013ca7a00 syz-executor6037
422 422 3 1 0 ffffc50013ca75c0 syz-executor6037 tstile
1223 1223 2 1 0 ffffc50013ca7180 syz-executor6037
1054 1054 2 1 0 ffffc500133f86c0 syz-executor6037
1221 >1221 7 1 0 ffffc500133f8280 syz-executor6037
1194 1194 2 0 0 ffffc50013392a40 syz-executor6037
1192 1192 2 0 140 ffffc5001339da80 syz-executor6037
1075 1075 2 1 140 ffffc5001339d200 syz-executor6037
1077 1077 3 0 180 ffffc50012b45500 syz-executor6037 nanoslp
1099 1099 3 1 180 ffffc50012aa0080 sshd select
1071 1071 3 0 180 ffffc50013462980 getty nanoslp
1254 1254 3 0 180 ffffc500134719c0 getty nanoslp
1058 1058 3 1 180 ffffc50013471580 getty nanoslp
976 976 3 0 1c0 ffffc500126c9b80 getty ttyraw
952 952 3 1 180 ffffc50013392600 sshd select
997 997 3 0 180 ffffc50012c74480 powerd kqueue
688 688 3 0 180 ffffc500133f8b00 syslogd kqueue
600 600 3 1 180 ffffc500126c9740 dhcpcd poll
602 602 3 0 180 ffffc50012c80900 dhcpcd poll
547 547 3 0 180 ffffc500126cb780 dhcpcd poll
289 289 3 0 180 ffffc50012d7e080 dhcpcd poll
288 288 3 0 180 ffffc50012d688c0 dhcpcd poll
351 351 3 0 180 ffffc50012d68480 dhcpcd poll
1 1 3 0 180 ffffc500126fd9c0 init wait
0 820 3 0 200 ffffc50012974ac0 physiod physiod
0 194 3 1 200 ffffc5001298ab00 pooldrain pooldrain
0 193 2 1 240 ffffc5001298a6c0 ioflush
0 192 3 0 200 ffffc5001298a280 pgdaemon pgdaemon
0 169 3 1 200 ffffc50012974240 usb7 usbevt
0 167 3 1 200 ffffc5001292ea80 usb6 usbevt
0 165 3 1 200 ffffc5001292e640 usb5 usbevt
0 164 3 1 200 ffffc5001292e200 usb4 usbevt
0 31 3 1 200 ffffc500128e0a40 usb3 usbevt
0 63 3 1 200 ffffc500128e0600 usb2 usbevt
0 126 3 1 200 ffffc500128e01c0 usb1 usbevt
0 125 3 1 200 ffffc50012871a00 usb0 usbevt
0 124 3 1 200 ffffc500128715c0 usbtask-dr usbtsk
0 123 3 1 200 ffffc500120b66c0 usbtask-hc usbtsk
0 122 3 0 200 ffffc50012871180 npfgc0 npfgcw
0 121 3 1 200 ffffc500126fd580 rt_free rt_free
0 120 3 1 200 ffffc500126fd140 unpgc unpgc
0 119 2 0 200 ffffc500126f6980 key_timehandler
0 118 3 1 200 ffffc500126f6540 icmp6_wqinput/1 icmp6_wqinput
0 117 3 0 200 ffffc500126f6100 icmp6_wqinput/0 icmp6_wqinput
0 116 2 0 200 ffffc500126ec940 nd6_timer
0 115 3 1 200 ffffc500126ec500 carp6_wqinput/1 carp6_wqinput
0 114 3 0 200 ffffc500126ec0c0 carp6_wqinput/0 carp6_wqinput
0 113 3 1 200 ffffc500126dd900 carp_wqinput/1 carp_wqinput
0 112 3 0 200 ffffc500126dd4c0 carp_wqinput/0 carp_wqinput
0 111 3 1 200 ffffc500126dd080 icmp_wqinput/1 icmp_wqinput
0 110 3 0 200 ffffc500126cc8c0 icmp_wqinput/0 icmp_wqinput
0 109 2 0 200 ffffc500126cbbc0 rt_timer
0 108 3 1 200 ffffc500126cc480 vmem_rehash vmem_rehash
0 99 3 0 200 ffffc500120bbb40 entbutler entropy
0 98 3 1 200 ffffc500120bb700 viomb balloon
0 97 3 1 200 ffffc500120bb2c0 vioif0_txrx/1 vioif0_txrx
0 96 3 0 200 ffffc500120b6b00 vioif0_txrx/0 vioif0_txrx
0 29 3 0 200 ffffc500120b6280 scsibus0 sccomp
0 28 3 0 200 ffffc50010cbaac0 pms0 pmsreset
0 27 3 1 200 ffffc50010cba680 xcall/1 xcall
0 26 1 1 200 ffffc50010cba240 softser/1
0 25 1 1 200 ffffc50010cb9a80 softclk/1
0 24 1 1 200 ffffc50010cb9640 softbio/1
0 23 1 1 200 ffffc50010cb9200 softnet/1
0 22 1 1 201 ffffc5000fb55a40 idle/1
0 21 3 0 200 ffffc5000fb55600 lnxsyswq lnxsyswq
0 20 3 0 200 ffffc5000fb551c0 lnxubdwq lnxubdwq
0 19 3 0 200 ffffc5000fb54a00 lnxpwrwq lnxpwrwq
0 18 3 0 200 ffffc5000fb545c0 lnxlngwq lnxlngwq
0 17 3 0 200 ffffc5000fb54180 lnxhipwq lnxhipwq
0 16 3 0 200 ffffc5000fb4b9c0 lnxrcugc lnxrcugc
0 15 3 0 200 ffffc5000fb4b580 sysmon smtaskq
0 14 3 0 200 ffffc5000fb4b140 pmfsuspend pmfsuspend
0 13 3 0 200 ffffc5000fb47980 pmfevent pmfevent
0 12 3 0 200 ffffc5000fb47540 sopendfree sopendfr
0 11 3 0 200 ffffc5000fb47100 iflnkst iflnkst
0 10 3 0 200 ffffc5000fb3c940 nfssilly nfssilly
0 9 3 0 200 ffffc5000fb3c500 vdrain vdrain
0 8 3 1 200 ffffc5000fb3c0c0 modunload mod_unld
0 7 3 0 200 ffffc5000fb33900 xcall/0 xcall
0 6 1 0 200 ffffc5000fb334c0 softser/0
0 5 1 0 200 ffffc5000fb33080 softclk/0
0 4 1 0 200 ffffc5000fb318c0 softbio/0
0 3 1 0 200 ffffc5000fb31480 softnet/0
0 2 1 0 201 ffffc5000fb31040 idle/0
0 0 2 1 240 ffffffff8333ca40 swapper
[Locks tracked through LWPs]

****** LWP 1111.1111 (syz-executor6037) @ 0xffffc50013cc71c0, l_stat=2

*** Locks held:

* Lock 0 (initialized at amap_ctor)

lock address : 0xffffc50013c30480 type : sleep/adaptive
initialized : 0xffffffff81a3aa3b

shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0

relevant lwp : 0xffffc50013cc71c0 last held: 0xffffc50013cc71c0
last locked* : 0xffffffff81a4b574 unlocked : 0xffffffff81a48fb6
owner/count : 0xffffc50013cc71c0 flags : 0x0000000000000007
Turnstile:
=> 0 waiting readers:
=> 1 waiting writers: 0xffffc50013ca75c0

* Lock 1 (initialized at pmap_ctor)
lock address : 0xffffc50013cc3180 type : sleep/adaptive

initialized : 0xffffffff80942009
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0

relevant lwp : 0xffffc50013cc71c0 last held: 0xffffc50013cc71c0

last locked* : 0xffffffff80943e3c unlocked : 0xffffffff80941ed1

owner field : 0xffffc50013cc71c0 wait/spin: 0/0

Turnstile: no active turnstile for this lock.

*** Locks wanted: none

****** LWP 422.422 (syz-executor6037) @ 0xffffc50013ca75c0, l_stat=3

*** Locks held:

* Lock 0 (initialized at pmap_ctor)

lock address : 0xffffc5001347dd80 type : sleep/adaptive

initialized : 0xffffffff80942009
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0

relevant cpu : 1 last held: 1

relevant lwp : 0xffffc50013ca75c0 last held: 0xffffc50013ca75c0

last locked* : 0xffffffff80943e3c unlocked : 0xffffffff80941ed1

owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

*** Locks wanted: none

****** LWP 1223.1223 (syz-executor6037) @ 0xffffc50013ca7180, l_stat=2

*** Locks held:

* Lock 0 (initialized at pmap_ctor)

lock address : 0xffffc5001347db80 type : sleep/adaptive

initialized : 0xffffffff80942009
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0

relevant cpu : 1 last held: 1

relevant lwp : 0xffffc50013ca7180 last held: 0xffffc50013ca7180
last locked* : 0xffffffff80941c6a unlocked : 0xffffffff80941ed1
owner field : 0xffffc50013ca7180 wait/spin: 0/0

Turnstile: no active turnstile for this lock.

*** Locks wanted: none

****** LWP 1054.1054 (syz-executor6037) @ 0xffffc500133f86c0, l_stat=2

*** Locks held:

* Lock 0 (initialized at pool_init)
lock address : 0xffffc50010bf81f0 type : sleep/adaptive
initialized : 0xffffffff81ba5152

shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 1

relevant lwp : 0xffffc500133f86c0 last held: 0xffffc500133f86c0
last locked* : 0xffffffff81ba5ee2 unlocked : 0xffffffff81ba6731
owner field : 0xffffc500133f86c0 wait/spin: 0/0

Turnstile: no active turnstile for this lock.

*** Locks wanted: none

****** LWP 602.602 (dhcpcd) @ 0xffffc50012c80900, l_stat=3

relevant lwp : 0xffffc50012c80900 last held: 000000000000000000