page fault in __asan_store1

0 views

Skip to first unread message

syzbot

unread,

Jun 30, 2021, 4:30:22 AM6/30/21

to syzkaller-...@googlegroups.com

Hello,

syzbot found the following issue on:

HEAD commit: 9d3a2adf Fix previous. For Thumb-1: - sp cannot be manipul..
git tree: netbsd
console output: https://syzkaller.appspot.com/x/log.txt?x=17ab9b30300000
kernel config: https://syzkaller.appspot.com/x/.config?x=fab579639ba4bf0a
dashboard link: https://syzkaller.appspot.com/bug?extid=32ca30cde4ec6bf0d874
compiler: g++ (Debian 10.2.1-6) 10.2.1 20210110

Unfortunately, I don't have any reproducer for this issue yet.

IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+32ca30...@syzkaller.appspotmail.com

[ 72.3288100] fatal page fault in supervisor mode
[ 72.3388247] trap type 6 code 0 rip 0xffffffff819f4da8 cs 0x8 rflags 0x10287 cr2 0xffff900000000000 ilevel 0 rsp 0xffffa0019fa4b9f0
[ 72.3488086] curlwp 0xffffa00012c27340 pid 1854.1858 lowest kstack 0xffffa0019fa442c0
kernel: page fault trap, code=0
Stopped in pid 1854.1858 (syz-executor.2) at netbsd:__asan_store1+0x50: movzbl 0(%rax),%r8d
?
__asan_store1() at netbsd:__asan_store1+0x50 kasan_shadow_1byte_isvalid sys/kern/subr_asan.c:310 [inline]
__asan_store1() at netbsd:__asan_store1+0x50 kasan_shadow_check sys/kern/subr_asan.c:411 [inline]
__asan_store1() at netbsd:__asan_store1+0x50 sys/kern/subr_asan.c:1204
vn_open() at netbsd:vn_open+0x863 sys/kern/vfs_vnops.c:358
sys_acct() at netbsd:sys_acct+0x157 sys/kern/kern_acct.c:322
sys___syscall() at netbsd:sys___syscall+0xff sy_call sys/sys/syscallvar.h:65 [inline]
sys___syscall() at netbsd:sys___syscall+0xff sys/kern/sys_syscall.c:77
syscall() at netbsd:syscall+0x25a sy_call sys/sys/syscallvar.h:65 [inline]
syscall() at netbsd:syscall+0x25a sy_invoke sys/sys/syscallvar.h:94 [inline]
syscall() at netbsd:syscall+0x25a sys/arch/x86/x86/syscall.c:138
--- syscall (number 198) ---
netbsd:syscall+0x25a:
Panic string: (null)
PID LID S CPU FLAGS STRUCT LWP * NAME WAIT
1854 >1858 7 1 100 ffffa00012c27340 syz-executor.2
1854 1854 2 0 10000000 ffffa00012bef700 syz-executor.2
1879 1840 2 0 0 ffffa00012cfd740 syz-executor.0
1879 1879 2 0 10000000 ffffa00012d19340 syz-executor.0
839 1838 3 1 180 ffffa00012a528c0 syz-executor.5 parked
839 839 2 1 10000000 ffffa0001347c9c0 syz-executor.5
1731 1496 3 0 180 ffffa00012c348c0 syz-executor.3 parked
1731 >1731 7 0 10000000 ffffa00012bab200 syz-executor.3
1761 1761 2 0 0 ffffa00012bc2680 syz-executor.4
1052 1052 3 1 180 ffffa00013d23640 syz-executor.5 nanoslp
1191 1191 3 1 180 ffffa00013d23200 syz-executor.4 nanoslp
1083 1083 3 0 180 ffffa00013cdda40 syz-executor.2 nanoslp
1073 1073 3 0 180 ffffa00013cdd600 syz-executor.3 nanoslp
1125 1125 3 1 40 ffffa00012b160c0 syz-executor.1 biowait
998 998 3 1 180 ffffa00012b31100 syz-executor.0 nanoslp
1071 1099 3 0 180 ffffa00012b31540 syz-fuzzer parked
1071 1080 3 0 180 ffffa00013ca55c0 syz-fuzzer kqueue
1071 1107 3 1 180 ffffa00012b9ba40 syz-fuzzer parked
1071 1128 3 0 180 ffffa00012b9b600 syz-fuzzer parked
1071 1069 3 1 180 ffffa00013393a40 syz-fuzzer parked
1071 1076 3 1 180 ffffa000133fab00 syz-fuzzer parked
1071 1077 3 0 180 ffffa000133fa6c0 syz-fuzzer parked
1071 1074 3 1 180 ffffa0001339da80 syz-fuzzer nanoslp
1071 1071 3 0 1c0 ffffa000133679c0 syz-fuzzer parked
1068 1068 3 1 180 ffffa00012a794c0 sshd select
1093 1093 3 1 180 ffffa0001265b340 getty nanoslp
1098 1098 3 0 180 ffffa0001347c140 getty nanoslp
1094 1094 3 0 180 ffffa00013462980 getty nanoslp
947 947 3 1 1c0 ffffa0001265a740 getty ttyraw
976 976 3 1 180 ffffa000133931c0 sshd select
1122 1122 3 0 180 ffffa00012cfdb80 powerd kqueue
555 555 3 1 180 ffffa0001340fb40 syslogd kqueue
598 598 3 0 180 ffffa00012bc2ac0 dhcpcd poll
597 597 3 1 180 ffffa00012c404c0 dhcpcd poll
594 594 3 0 180 ffffa00012bc2240 dhcpcd poll
462 462 3 1 180 ffffa00012c13300 dhcpcd poll
350 350 3 0 180 ffffa00012d308c0 dhcpcd poll
349 349 3 1 180 ffffa00012d30480 dhcpcd poll
348 348 3 1 180 ffffa00012d30040 dhcpcd poll
1 1 3 0 180 ffffa0001281f140 init wait
0 933 3 0 200 ffffa00012945240 physiod physiod
0 192 3 0 200 ffffa00012946280 pooldrain pooldrain
0 163 3 1 200 ffffa00012945ac0 ioflush syncer
0 168 3 1 200 ffffa00012945680 pgdaemon pgdaemon
0 162 3 1 200 ffffa00012913640 usb7 usbevt
0 161 3 1 200 ffffa00012913200 usb6 usbevt
0 31 3 0 200 ffffa000128cba40 usb5 usbevt
0 63 3 1 200 ffffa000128cb600 usb4 usbevt
0 126 3 1 200 ffffa000128cb1c0 usb3 usbevt
0 125 3 1 200 ffffa0001287ba00 usb2 usbevt
0 124 3 1 200 ffffa0001287b5c0 usb1 usbevt
0 123 3 1 200 ffffa0001287b180 usb0 usbevt
0 122 3 1 200 ffffa0001281f9c0 usbtask-dr usbtsk
0 121 3 1 200 ffffa0001281f580 usbtask-hc usbtsk
0 120 3 1 200 ffffa00010d71ac0 npfgc0 npfgcw
0 119 3 1 200 ffffa00012812980 rt_free rt_free
0 118 3 1 200 ffffa00012812540 unpgc unpgc
0 117 3 1 200 ffffa00012812100 key_timehandler key_timehandler
0 116 3 1 200 ffffa00012808940 icmp6_wqinput/1 icmp6_wqinput
0 115 3 0 200 ffffa00012808500 icmp6_wqinput/0 icmp6_wqinput
0 114 3 1 200 ffffa000128080c0 nd6_timer nd6_timer
0 113 3 1 200 ffffa00012801900 carp6_wqinput/1 carp6_wqinput
0 112 3 0 200 ffffa000128014c0 carp6_wqinput/0 carp6_wqinput
0 111 3 1 200 ffffa00012801080 carp_wqinput/1 carp_wqinput
0 110 3 0 200 ffffa000127f28c0 carp_wqinput/0 carp_wqinput
0 109 3 1 200 ffffa000127f2480 icmp_wqinput/1 icmp_wqinput
0 108 3 0 200 ffffa000127f2040 icmp_wqinput/0 icmp_wqinput
0 107 3 1 200 ffffa0001265bbc0 rt_timer rt_timer
0 106 3 0 200 ffffa0001265ab80 vmem_rehash vmem_rehash
0 105 3 1 200 ffffa0001265b780 entbutler entropy
0 96 3 0 200 ffffa000120b6b00 viomb balloon
0 30 3 1 200 ffffa000120b66c0 vioif0_txrx/1 vioif0_txrx
0 29 3 0 200 ffffa000120b6280 vioif0_txrx/0 vioif0_txrx
0 27 3 0 200 ffffa00010d71680 scsibus0 sccomp
0 26 3 0 200 ffffa00010d71240 pms0 pmsreset
0 25 3 1 200 ffffa00010cc4a80 xcall/1 xcall
0 24 1 1 200 ffffa00010cc4640 softser/1
0 23 1 1 200 ffffa00010cc4200 softclk/1
0 22 1 1 200 ffffa00010cc2a40 softbio/1
0 21 1 1 200 ffffa00010cc2600 softnet/1
0 20 1 1 201 ffffa00010cc21c0 idle/1
0 19 3 0 200 ffffa0000fb73a00 lnxpwrwq lnxpwrwq
0 18 3 0 200 ffffa0000fb735c0 lnxlngwq lnxlngwq
0 17 3 0 200 ffffa0000fb73180 lnxsyswq lnxsyswq
0 16 3 0 200 ffffa0000fb6b9c0 lnxrcugc lnxrcugc
0 15 3 0 200 ffffa0000fb6b580 sysmon smtaskq
0 14 3 0 200 ffffa0000fb6b140 pmfsuspend pmfsuspend
0 13 3 0 200 ffffa0000fb67980 pmfevent pmfevent
0 12 3 0 200 ffffa0000fb67540 sopendfree sopendfr
0 11 3 0 200 ffffa0000fb67100 iflnkst iflnkst
0 10 3 0 200 ffffa0000fb5c940 nfssilly nfssilly
0 9 3 0 200 ffffa0000fb5c500 vdrain vdrain
0 8 3 0 200 ffffa0000fb5c0c0 modunload mod_unld
0 7 3 0 200 ffffa0000fb52900 xcall/0 xcall
0 6 1 0 200 ffffa0000fb524c0 softser/0
0 5 1 0 200 ffffa0000fb52080 softclk/0
0 > 4 7 0 200 ffffa0000fb508c0 softbio/0
0 3 1 0 200 ffffa0000fb50480 softnet/0
0 2 1 0 201 ffffa0000fb50040 idle/0
0 0 3 1 200 ffffffff82eff6c0 swapper uvm
[Locks tracked through LWPs]

****** LWP 1854.1858 (syz-executor.2) @ 0xffffa00012c27340, l_stat=7

*** Locks held:

* Lock 0 (initialized at vcache_alloc)
lock address : 0xffffa0001294d240 type : sleep/adaptive
initialized : 0xffffffff81b092b0
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 1
relevant lwp : 0xffffa00012c27340 last held: 0xffffa00012c27340
last locked* : 0xffffffff81b3be50 unlocked : 0xffffffff81b3beb2
owner/count : 0xffffa00012c27340 flags : 0x0000000000000004
Turnstile: no active turnstile for this lock.

*** Locks wanted: none

****** LWP 839.839 (syz-executor.5) @ 0xffffa0001347c9c0, l_stat=2

*** Locks held:

* Lock 0 (initialized at pmap_ctor)
lock address : 0xffffa00012cc6980 type : sleep/adaptive
initialized : 0xffffffff8091ff99
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 1
relevant lwp : 0xffffa0001347c9c0 last held: 0xffffa0001347c9c0
last locked* : 0xffffffff80921dcc unlocked : 0xffffffff809227e0
owner field : 0xffffa0001347c9c0 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

*** Locks wanted:

* Lock 0 (initialized at pmap_ctor)
lock address : 0xffffa00012cc6988 type : sleep/adaptive
initialized : 0xffffffff8091ffa5
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 1
relevant cpu : 1 last held: 1
relevant lwp : 0xffffa0001347c9c0 last held: 000000000000000000
last locked : 0xffffffff80922da0 unlocked*: 0xffffffff80922eae
owner/count : 000000000000000000 flags : 000000000000000000
Turnstile: no active turnstile for this lock.

****** LWP 1761.1761 (syz-executor.4) @ 0xffffa00012bc2680, l_stat=2

*** Locks held:

* Lock 0 (initialized at pmap_ctor)
lock address : 0xffffa00012d1ff80 type : sleep/adaptive
initialized : 0xffffffff8091ff99
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffffa00012bc2680 last held: 0xffffa00012bc2680
last locked* : 0xffffffff80921dcc unlocked : 0xffffffff8091fe61
owner field : 0xffffa00012bc2680 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

*** Locks wanted: none

****** LWP 1125.1125 (syz-executor.1) @ 0xffffa00012b160c0, l_stat=3

*** Locks held:

* Lock 0 (initialized at vcache_alloc)
lock address : 0xffffa00013ce9a40 type : sleep/adaptive
initialized : 0xffffffff81b092b0
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 1
relevant lwp : 0xffffa00012b160c0 last held: 0xffffa00012b160c0
last locked* : 0xffffffff81b3be50 unlocked : 0xffffffff81b3beb2
owner/count : 0xffffa00012b160c0 flags : 0x0000000000000004
Turnstile: no active turnstile for this lock.

* Lock 1 (initialized at vcache_alloc)
lock address : 0xffffa00012be1540 type : sleep/adaptive
initialized : 0xffffffff81b092b0
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 1
relevant lwp : 0xffffa00012b160c0 last held: 0xffffa00012b160c0
last locked* : 0xffffffff81b3be50 unlocked : 000000000000000000
owner/count : 0xffffa00012b160c0 flags : 0x0000000000000004
Turnstile: no active turnstile for this lock.

*** Locks wanted: none

****** LWP 597.597 (dhcpcd) @ 0xffffa00012c404c0, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at module_hook_init)
lock address : 0xffffffff8300be40 type : sleep/adaptive
initialized : 0xffffffff819864a1
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 0
relevant lwp : 0xffffa00012c404c0 last held: 000000000000000000
last locked : 000000000000000000 unlocked*: 000000000000000000
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 594.594 (dhcpcd) @ 0xffffa00012bc2240, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at module_hook_init)
lock address : 0xffffffff8300be40 type : sleep/adaptive
initialized : 0xffffffff819864a1
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffffa00012bc2240 last held: 000000000000000000
last locked : 000000000000000000 unlocked*: 000000000000000000
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 349.349 (dhcpcd) @ 0xffffa00012d30480, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at module_hook_init)
lock address : 0xffffffff8300be40 type : sleep/adaptive
initialized : 0xffffffff819864a1
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 0
relevant lwp : 0xffffa00012d30480 last held: 000000000000000000
last locked : 000000000000000000 unlocked*: 000000000000000000
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 348.348 (dhcpcd) @ 0xffffa00012d30040, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at module_hook_init)
lock address : 0xffffffff8300be40 type : sleep/adaptive
initialized : 0xffffffff819864a1
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 0
relevant lwp : 0xffffa00012d30040 last held: 000000000000000000
last locked : 000000000000000000 unlocked*: 000000000000000000
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 0.11 (iflnkst) @ 0xffffa0000fb67100, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at module_hook_init)
lock address : 0xffffffff8300be40 type : sleep/adaptive
initialized : 0xffffffff819864a1
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffffa0000fb67100 last held: 000000000000000000
last locked : 000000000000000000 unlocked*: 000000000000000000
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 0.5 (softclk/0) @ 0xffffa0000fb52080, l_stat=1

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at module_hook_init)
lock address : 0xffffffff8300be40 type : sleep/adaptive
initialized : 0xffffffff819864a1
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffffa0000fb52080 last held: 000000000000000000
last locked : 000000000000000000 unlocked*: 000000000000000000
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 0.0 (swapper) @ 0xffffffff82eff6c0, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at module_hook_init)
lock address : 0xffffffff8300be40 type : sleep/adaptive
initialized : 0xffffffff819864a1
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 0
relevant lwp : 0xffffffff82eff6c0 last held: 000000000000000000
last locked : 000000000000000000 unlocked*: 000000000000000000
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

[Locks tracked through CPUs]

PAGE FLAG PQ UOBJECT UANON
0xffffa00000017180 0041 00000000 0x0 0x0
0xffffa00000017200 0041 00000000 0x0 0x0
0xffffa00000017280 0041 00000000 0x0 0x0
0xffffa00000017300 0041 00000000 0x0 0x0
0xffffa00000017380 0041 00000000 0x0 0x0
0xffffa00000017400 0041 00000000 0x0 0x0
0xffffa00000017480 0041 00000000 0x0 0x0
0xffffa00000017500 0041 00000000 0x0 0x0
0xffffa00000017580 0041 00000000 0x0 0x0
0xffffa00000017600 0041 00000000 0x0 0x0
0xffffa00000017680 0041 00000000 0x0 0x0
0xffffa00000017700 0041 00000000 0x0 0x0
0xffffa00000017780 0041 00000000 0x0 0x0
0xffffa00000017800 0041 00000000 0x0 0x0
0xffffa00000017880 0041 00000000 0x0 0x0
0xffffa00000017900 0041 00000000 0x0 0x0
0xffffa00000017980 0041 00000000 0x0 0x0
0xffffa00000017a00 0041 00000000 0x0 0x0
0xffffa00000017a80 0041 00000000 0x0 0x0
0xffffa00000017b00 0041 00000000 0x0 0x0
0xffffa00000017b80 0041 00000000 0x0 0x0
0xffffa00000017c00 0041 00000000 0x0 0x0
0xffffa00000017c80 0041 00000000 0x0 0x0
0xffffa00000017d00 0041 00000000 0x0 0x0
0xffffa00000017d80 0041 00000000 0x0 0x0
0xffffa00000017e00 0041 00000000 0x0 0x0
0xffffa00000017e80 0041 00000000 0x0 0x0
0xffffa00000017f00 0041 00000000 0x0 0x0
0xffffa00000017f80 0041 00000000 0x0 0x0
0xffffa00000018000 0041 00000000 0x0 0x0
0xffffa00000018080 0041 00000000 0x0 0x0
0xffffa00000018100 0041 00000000 0x0 0x0
0xffffa00000018180 0041 00000000 0x0 0x0
0xffffa00000018200 0041 00000000 0x0 0x0
0xffffa00000018280 0041 00000000 0x0 0x0
0xffffa00000018300 0041 00000000 0x0 0x0
0xffffa00000018380 0041 00000000 0x0 0x0
0xffffa00000018400 0041 00000000 0x0 0x0
0xffffa00000018480 0041 00000000 0x0 0x0
0xffffa00000018500 0041 00000000 0x0 0x0
0xffffa00000018580 0041 00000000 0x0 0x0
0xffffa00000018600 0041 00000000 0x0 0x0
0xffffa00000018680 0041 00000000 0x0 0x0
0xffffa00000018700 0041 00000000 0x0 0x0
0xffffa00000018780 0041 00000000 0x0 0x0
0xffffa00000018800 0041 00000000 0x0 0x0
0xffffa00000018880 0041 00000000 0x0 0x0
0xffffa00000018900 0041 00000000 0x0 0x0
0xffffa00000018980 0041 00000000 0x0 0x0
0xffffa00000018a00 0041 00000000 0x0 0x0
0xffffa00000018a80 0041 00000000 0x0 0x0
0xffffa00000018b00 0041 00000000 0x0 0x0
0xffffa00000018b80 0041 00000000 0x0 0x0
0xffffa00000018c00 0041 00000000 0x0 0x0
0xffffa00000018c80 0041 00000000 0x0 0x0
0xffffa00000018d00 0041 00000000 0x0 0x0
0xffffa00000018d80 0041 00000000 0x0 0x0
0xffffa00000018e00 0041 00000000 0x0 0x0
0xffffa00000018e80 0041 00000000 0x0 0x0
0xffffa00000018f00 0041 00000000 0x0 0x0
0xffffa00000018f80 0041 00000000 0x0 0x0
0xffffa00000019000 0041 00000000 0x0 0x0
0xffffa00000019080 0041 00000000 0x0 0x0
0xffffa00000019100 0041 00000000 0x0 0x0
0xffffa00000019180 0041 00000000 0x0 0x0
0xffffa00000019200 0041 00000000 0x0 0x0
0xffffa00000019280 0041 00000000 0x0 0x0
0xffffa00000019300 0041 00000000 0x0 0x0
0xffffa00000019380 0041 00000000 0x0 0x0
0xffffa00000019400 0041 00000000 0x0 0x0
0xffffa00000019480 0041 00000000 0x0 0x0
0xffffa00000019500 0041 00000000 0x0 0x0
0xffffa00000019580 0041 00000000 0x0 0x0
0xffffa00000019600 0041 00000000 0x0 0x0
0xffffa00000019680 0041 00000000 0x0 0x0
0xffffa00000019700 0041 00000000 0x0 0x0
0xffffa00000019780 0041 00000000 0x0 0x0
0xffffa00000019800 0041 00000000 0x0 0x0
0xffffa00000019880 0041 00000000 0x0 0x0
0xffffa00000019900 0041 00000000 0x0 0x0
0xffffa00000019980 0041 00000000 0x0 0x0
0xffffa00000019a00 0041 00000000 0x0 0x0
0xffffa00000019a80 0041 00000000 0x0 0x0
0xffffa00000019b00 0041 00000000 0x0 0x0
0xffffa00000019b80 0041 00000000 0x0 0x0
0xffffa00000019c00 0041 00000000 0x0 0x0
0xffffa00000019c80 0041 00000000 0x0 0x0
0xffffa00000019d00 0041 00000000 0x0 0x0
0xffffa00000019d80 0041 00000000 0x0 0x0
0xffffa00000019e00 0041 00000000 0x0 0x0
0xffffa00000019e80 0041 00000000 0x0 0x0
0xffffa00000019f00 0041 00000000 0x0 0x0
0xffffa00000019f80 0041 00000000 0x0 0x0
0xffffa0000001a000 0041 00000000 0x0 0x0
0xffffa0000001a080 0041 00000000 0x0 0x0
0xffffa0000001a100 0041 00000000 0x0 0x0
0xffffa0000001a180 0041 00000000 0x0 0x0
0xffffa0000001a200 0041 00000000 0x0 0x0
0xffffa0000001a280 0041 00000000 0x0 0x0
0xffffa0000001a300 0041 00000000 0x0 0x0
0xffffa0000001a380 0041 00000000 0x0 0x0
0xffffa0000001a400 0041 00000000 0x0 0x0
0xffffa0000001a480 0041 00000000 0x0 0x0
0xffffa0000001a500 0041 00000000 0x0 0x0
0xffffa0000001a580 0041 00000000 0x0 0x0
0xffffa0000001a600 0041 00000000 0x0 0x0
0xffffa0000001a680 0041 00000000 0x0 0x0
0xffffa0000001a700 0041 00000000 0x0 0x0
0xffffa0000001a780 0041 00000000 0x0 0x0
0xffffa0000001a800 0041 00000000 0x0 0x0
0xffffa0000001a880 0041 00000000 0x0 0x0
0xffffa0000001a900 0041 00000000 0x0 0x0
0xffffa0000001a980 0041 00000000 0x0 0x0
0xffffa0000001aa00 0041 00000000 0x0 0x0
0xffffa0000001aa80 0041 00000000 0x0 0x0
0xffffa0000001ab00 0001 00000000 0x0 0x0
0xffffa0000001ab80 0001 00000000 0x0 0x0
0xffffa0000001ac00 0001 00000000 0x0 0x0
0xffffa0000001ac80 0001 00000000 0x0 0x0
0xffffa0000001ad00 0001 00000000 0x0 0x0
0xffffa0000001ad80 0001 00000000 0x0 0x0
0xffffa0000001ae00 0001 00000000 0x0 0x0
0xffffa0000001ae80 0001 00000000 0x0 0x0
0xffffa0000001af00 0001 00000000 0x0 0x0
0xffffa0000001af80 0001 00000000 0x0 0x0
0xffffa0000001b000 0001 00000000 0x0 0x0
0xffffa0000001b080 0001 00000000 0x0 0x0
0xffffa0000001b100 0001 00000000 0x0 0x0
0xffffa0000001b180 0001 00000000 0x0 0x0
0xffffa0000001b200 0001 00000000 0x0 0x0
0xffffa0000001b280 0001 00000000 0x0 0x0
0xffffa0000001b300 0001 00000000 0x0 0x0
0xffffa0000001b380 0001 00000000 0x0 0x0
0xffffa0000001b400 0001 00000000 0x0 0x0
0xffffa0000001b480 0001 00000000 0x0 0x0
0xffffa0000001b500 0001 00000000 0x0 0x0
0xffffa0000001b580 0001 00000000 0x0 0x0
0xffffa0000001b600 0001 00000000 0x0 0x0
0xffffa0000001b680 0001 00000000 0x0 0x0
0xffffa0000001b700 0001 00000000 0x0 0x0
0xffffa0000001b780 0001 00000000 0x0 0x0
0xffffa0000001b800 0001 00000000 0x0 0x0
0xffffa0000001b880 0001 00000000 0x0 0x0
0xffffa0000001b900 0001 00000000 0x0 0x0
0xffffa0000001b980 0001 00000000 0x0 0x0
0xffffa0000001ba00 0001 00000000 0x0 0x0
0xffffa0000001ba80 0001 00000000 0x0 0x0
0xffffa0000001bb00 0001 00000000 0x0 0x0
0xffffa0000001bb80 0001 00000000 0x0 0x0
0xffffa0000001bc00 0001 00000000 0x0 0x0
0xffffa0000001bc80 0001 00000000 0x0 0x0
0xffffa0000001bd00 0001 00000000 0x0 0x0
0xffffa0000001bd80 0001 00000000 0x0 0x0
0xffffa0000001be00 0001 00000000 0x0 0x0
0xffffa0000001be80 0001 00000000 0x0 0x0
0xffffa0000001bf00 0001 00000000 0x0 0x0
0xffffa0000001bf80 0001 00000000 0x0 0x0
0xffffa0000001c000 0001 00000000 0x0 0x0
0xffffa0000001c080 0001 00000000 0x0 0x0
0xffffa0000001c100 0001 00000000 0x0 0x0
0xffffa0000001c180 0001 00000000 0x0 0x0
0xffffa0000001c200 0001 00000000 0x0 0x0
0xffffa0000001c280 0001 00000000 0x0 0x0
0xffffa0000001c300 0001 00000000 0x0 0x0
0xffffa0000001c380 0001 00000000 0x0 0x0
0xffffa0000001c400 0001 00000000 0x0 0x0
0xffffa0000001c480 0001 00000000 0x0 0x0
0xffffa0000001c500 0001 00000000 0x0 0x0
0xffffa0000001c580 0001 00000000 0x0 0x0
0xffffa0000001c600 0001 00000000 0x0 0x0
0xffffa0000001c680 0001 00000000 0x0 0x0
0xffffa0000001c700 0001 00000000 0x0 0x0
0xffffa0000001c780 0001 00000000 0x0 0x0
0xffffa0000001c800 0001 00000000 0x0 0x0
0xffffa0000001c880 0001 00000000 0x0 0x0
0xffffa0000001c900 0001 00000000 0x0 0x0
0xffffa0000001c980 0001 00000000 0x0 0x0
0xffffa0000001ca00 0001 00000000 0x0 0x0
0xffffa0000001ca80 0001 00000000 0x0 0x0
0xffffa0000001cb00 0001 00000000 0x0 0x0
0xffffa0000001cb80 0001 00000000 0x0 0x0
0xffffa0000001cc00 0001 00000000 0x0 0x0
0xffffa0000001cc80 0001 00000000 0x0 0x0
0xffffa0000001cd00 0001 00000000 0x0 0x0
0xffffa0000001cd80 0001 00000000 0x0 0x0
0xffffa0000001ce00 0001 00000000 0x0 0x0
0xffffa0000001ce80 0001 00000000 0x0 0x0
0xffffa0000001cf00 0001 00000000 0x0 0x0
0xffffa0000001cf80 0001 00000000 0x0 0x0
0xffffa0000001d000 0001 00000000 0x0 0x0
0xffffa0000001d080 0001 00000000 0x0 0x0
0xffffa0000001d100 0001 00000000 0x0 0x0
0xffffa0000001d180 0001 00000000 0x0 0x0
0xffffa0000001d200 0001 00000000 0x0 0x0
0xffffa0000001d280 0001 00000000 0x0 0x0
0xffffa0000001d300 0001 00000000 0x0 0x0
0xffffa0000001d380 0001 00000000 0x0 0x0
0xffffa0000001d400 0001 00000000 0x0 0x0
0xffffa0000001d480 0001 00000000 0x0 0x0
0xffffa0000001d500 0001 00000000 0x0 0x0
0xffffa0000001d580 0001 00000000 0x0 0x0
0xffffa0000001d600 0001 00000000 0x0 0x0
0xffffa0000001d680 0001 00000000 0x0 0x0
0xffffa0000001d700 0001 00000000 0x0 0x0
0xffffa0000001d780 0001 00000000 0x0 0x0
0xffffa0000001d800 0001 00000000 0x0 0x0
0xffffa0000001d880 0001 00000000 0x0 0x0
0xffffa0000001d900 0001 00000000 0x0 0x0
0xffffa0000001d980 0001 00000000 0x0 0x0
0xffffa0000001da00 0001 00000000 0x0 0x0
0xffffa0000001da80 0001 00000000 0x0 0x0
0xffffa0000001db00 0001 00000000 0x0 0x0
0xffffa0000001db80 0001 00000000 0x0 0x0
0xffffa0000001dc00 0001 00000000 0x0 0x0
0xffffa0000001dc80 0001 00000000 0x0 0x0
0xffffa0000001dd00 0001 00000000 0x0 0x0
0xffffa0000001dd80 0001 00000000 0x0 0x0
0xffffa0000001de00 0001 00000000 0x0 0x0
0xffffa0000001de80 0001 00000000 0x0 0x0
0xffffa0000001df00 0001 00000000 0x0 0x0
0xffffa0000001df80 0001 00000000 0x0 0x0
0xffffa0000001e000 0001 00000000 0x0 0x0
0xffffa0000001e080 0001 00000000 0x0 0x0
0xffffa0000001e100 0001 00000000 0x0 0x0
0xffffa0000001e180 0001 00000000 0x0 0x0
0xffffa0000001e200 0001 00000000 0x0 0x0
0xffffa0000001e280 0001 00000000 0x0 0x0
0xffffa0000001e300 0001 00000000 0x0 0x0
0xffffa0000001e380 0001 00000000 0x0 0x0
0xffffa0000001e400 0001 00000000 0x0 0x0
0xffffa0000001e480 0001 00000000 0x0 0x0
0xffffa0000001e500 0001 00000000 0x0 0x0
0xffffa0000001e580 0001 00000000 0x0 0x0
0xffffa0000001e600 0001 00000000 0x0 0x0
0xffffa0000001e680 0001 00000000 0x0 0x0
0xffffa0000001e700 0001 00000000 0x0 0x0
0xffffa0000001e780 0001 00000000 0x0 0x0
0xffffa0000001e800 0001 00000000 0x0 0x0
0xffffa0000001e880 0001 00000000 0x0 0x0
0xffffa0000001e900 0001 00000000 0x0 0x0
0xffffa0000001e980 0001 00000000 0x0 0x0
0xffffa0000001ea00 0001 00000000 0x0 0x0
0xffffa0000001ea80 0001 00000000 0x0 0x0
0xffffa0000001eb00 0001 00000000 0x0 0x0
0xffffa0000001eb80 0001 00000000 0x0 0x0
0xffffa0000001ec00 0001 00000000 0x0 0x0
0xffffa0000001ec80 0001 00000000 0x0 0x0
0xffffa0000001ed00 0001 00000000 0x0 0x0
0xffffa0000001ed80 0001 00000000 0x0 0x0
0xffffa0000001ee00 0001 00000000 0x0 0x0
0xffffa0000001ee80 0001 00000000 0x0 0x0
0xffffa0000001ef00 0001 00000000 0x0 0x0
0xffffa0000001ef80 0001 00000000 0x0 0x0
0xffffa0000001f000 0001 00000000 0x0 0x0
0xffffa0000001f080 0001 00000000 0x0 0x0
0xffffa0000001f100 0001 00000000 0x0 0x0
0xffffa0000001f180 0001 00000000 0x0 0x0
0xffffa0000001f200 0001 00000000 0x0 0x0
0xffffa0000001f280 0001 00000000 0x0 0x0
0xffffa0000001f300 0001 00000000 0x0 0x0
0xffffa0000001f380 0001 00000000 0x0 0x0
0xffffa0000001f400 0001 00000000 0x0 0x0
0xffffa0000001f480 0001 00000000 0x0 0x0
0xffffa0000001f500 0001 00000000 0x0 0x0
0xffffa0000001f580 0001 00000000 0x0 0x0
0xffffa0000001f600 0001 00000000 0x0 0x0
0xffffa0000001f680 0001 00000000 0x0 0x0
0xffffa0000001f700 0001 00000000 0x0 0x0
0xffffa0000001f780 0001 00000000 0x0 0x0
0xffffa0000001f800 0001 00000000 0x0 0x0
0xffffa0000001f880 0001 00000000 0x0 0x0
0xffffa0000001f900 0001 00000000 0x0 0x0
0xffffa0000001f980 0001 00000000 0x0 0x0
0xffffa0000001fa00 0001 00000000 0x0 0x0
0xffffa0000001fa80 0001 00000000 0x0 0x0
0xffffa0000001fb00 0001 00000000 0x0 0x0
0xffffa0000001fb80 0001 00000000 0x0 0x0
0xffffa0000001fc00 0001 00000000 0x0 0x0
0xffffa0000001fc80 0001 00000000 0x0 0x0
0xffffa0000001fd00 0001 00000000 0x0 0x0
0xffffa0000001fd80 0001 00000000 0x0 0x0
0xffffa0000001fe00 0001 00000000 0x0 0x0
0xffffa0000001fe80 0001 00000000 0x0 0x0
0xffffa0000001ff00 0001 00000000 0x0 0x0
0xffffa0000001ff80 0001 00000000 0x0 0x0
0xffffa00000020000 0001 00000000 0x0 0x0
0xffffa00000020080 0001 00000000 0x0 0x0
0xffffa00000020100 0001 00000000 0x0 0x0
0xffffa00000020180 0001 00000000 0x0 0x0
0xffffa00000020200 0001 00000000 0x0 0x0
0xffffa00000020280 0001 00000000 0x0 0x0
0xffffa00000020300 0001 00000000 0x0 0x0
0xffffa00000020380 0001 00000000 0x0 0x0
0xffffa00000020400 0001 00000000 0x0 0x0
0xffffa00000020480 0001 00000000 0x0 0x0
0xffffa00000020500 0001 00000000 0x0 0x0
0xffffa00000020580 0001 00000000 0x0 0x0
0xffffa00000020600 0001 00000000 0x0 0x0
0xffffa00000020680 0001 00000000 0x0 0x0
0xffffa00000020700 0001 00000000 0x0 0x0
0xffffa00000020780 0001 00000000 0x0 0x0
0xffffa00000020800 0001 00000000 0x0 0x0
0xffffa00000020880 0001 00000000 0x0 0x0
0xffffa00000020900 0001 00000000 0x0 0x0
0xffffa00000020980 0001 00000000 0x0 0x0
0xffffa00000020a00 0001 00000000 0x0 0x0
0xffffa00000020a80 0001 00000000 0x0 0x0
0xffffa00000020b00 0001 00000000 0x0 0x0
0xffffa00000020b80 0001 00000000 0x0 0x0
0xffffa00000020c00 0001 00000000 0x0 0x0
0xffffa00000020c80 0001 00000000 0x0 0x0
0xffffa00000020d00 0001 00000000 0x0 0x0
0xffffa00000020d80 0001 00000000 0x0 0x0
0xffffa00000020e00 0001 00000000 0x0 0x0
0xffffa00000020e80 0001 00000000 0x0 0x0
0xffffa00000020f00 0001 00000000 0x0 0x0
0xffffa00000020f80 0001 00000000 0x0 0x0
0xffffa00000021000 0001 00000000 0x0 0x0
0xffffa00000021080 0001 00000000 0x0 0x0
0xffffa00000021100 0001 00000000 0x0 0x0
0xffffa00000021180 0001 00000000 0x0 0x0
0xffffa00000021200 0001 00000000 0x0 0x0
0xffffa00000021280 0001 00000000 0x0 0x0
0xffffa00000021300 0001 00000000 0x0 0x0
0xffffa00000021380 0001 00000000 0x0 0x0
0xffffa00000021400 0001 00000000 0x0 0x0
0xffffa00000021480 0001 00000000 0x0 0x0
0xffffa00000021500 0001 00000000 0x0 0x0
0xffffa00000021580 0001 00000000 0x0 0x0
0xffffa00000021600 0001 00000000 0x0 0x0
0xffffa00000021680 0001 00000000 0x0 0x0
0xffffa00000021700 0001 00000000 0x0 0x0
0xffffa00000021780 0001 00000000 0x0 0x0
0xffffa00000021800 0001 00000000 0x0 0x0
0xffffa00000021880 0001 00000000 0x0 0x0
0xffffa00000021900 0001 00000000 0x0 0x0
0xffffa00000021980 0001 00000000 0x0 0x0
0xffffa00000021a00 0001 00000000 0x0 0x0
0xffffa00000021a80 0001 00000000 0x0 0x0
0xffffa00000021b00 0001 00000000 0x0 0x0
0xffffa00000021b80 0001 00000000 0x0 0x0
0xffffa00000021c00 0001 00000000 0x0 0x0
0xffffa00000021c80 0001 00000000 0x0 0x0
0xffffa00000021d00 0001 00000000 0x0 0x0
0xffffa00000021d80 0001 00000000 0x0 0x0
0xffffa00000021e00 0001 00000000 0x0 0x0
0xffffa00000021e80 0001 00000000 0x0 0x0
0xffffa00000021f00 0001 00000000 0x0 0x0
0xffffa00000021f80 0001 00000000 0x0 0x0
0xffffa00000022000 0001 00000000 0x0 0x0
0xffffa00000022080 0001 00000000 0x0 0x0
0xffffa00000022100 0001 00000000 0x0 0x0
0xffffa00000022180 0001 00000000 0x0 0x0
0xffffa00000022200 0001 00000000 0x0 0x0
0xffffa00000022280 0001 00000000 0x0 0x0
0xffffa00000022300 0001 00000000 0x0 0x0
0xffffa00000022380 0001 00000000 0x0 0x0
0xffffa00000022400 0001 00000000 0x0 0x0
0xffffa00000022480 0001 00000000 0x0 0x0
0xffffa00000022500 0001 00000000 0x0 0x0
0xffffa00000022580 0001 00000000 0x0 0x0
0xffffa00000022600 0001 00000000 0x0 0x0
0xffffa00000022680 0001 00000000 0x0 0x0
0xffffa00000022700 0001 00000000 0x0 0x0
0xffffa00000022780 0001 00000000 0x0 0x0
0xffffa00000022800 0001 00000000 0x0 0x0
0xffffa00000022880 0001 00000000 0x0 0x0
0xffffa00000022900 0001 00000000 0x0 0x0
0xffffa00000022980 0001 00000000 0x0 0x0
0xffffa00000022a00 0001 00000000 0x0 0x0
0xffffa00000022a80 0001 00000000 0x0 0x0
0xffffa00000022b00 0001 00000000 0x0 0x0
0xffffa00000022b80 0001 00000000 0x0 0x0
0xffffa00000022c00 0001 00000000 0x0 0x0
0xffffa00000022c80 0001 00000000 0x0 0x0
0xffffa00000022d00 0001 00000000 0x0 0x0
0xffffa00000022d80 0001 00000000 0x0 0x0
0xffffa00000022e00 0001 00000000 0x0 0x0
0xffffa00000022e80 0001 00000000 0x0 0x0
0xffffa00000022f00 0001 00000000 0x0 0x0
0xffffa00000022f80 0001 00000000 0x0 0x0
0xffffa00000023000 0001 00000000 0x0 0x0
0xffffa00000023080 0001 00000000 0x0 0x0
0xffffa00000023100 0001 00000000 0x0 0x0
0xffffa00000023180 0001 00000000 0x0 0x0
0xffffa00000023200 0001 00000000 0x0 0x0
0xffffa00000023280 0001 00000000 0x0 0x0
0xffffa00000023300 0001 00000000 0x0 0x0
0xffffa00000023380 0001 00000000 0x0 0x0
0xffffa00000023400 0001 00000000 0x0 0x0
0xffffa00000023480 0001 00000000 0x0 0x0
0xffffa00000023500 0001 00000000 0x0 0x0
0xffffa00000023580 0001 00000000 0x0 0x0
0xffffa00000023600 0001 00000000 0x0 0x0
0xffffa00000023680 0001 00000000 0x0 0x0
0xffffa00000023700 0001 00000000 0x0 0x0
0xffffa00000023780 0001 00000000 0x0 0x0
0xffffa00000023800 0001 00000000 0x0 0x0
0xffffa00000023880 0001 00000000 0x0 0x0
0xffffa00000023900 0001 00000000 0x0 0x0
0xffffa00000023980 0001 00000000 0x0 0x0
0xffffa00000023a00 0001 00000000 0x0 0x0
0xffffa00000023a80 0001 00000000 0x0 0x0
0xffffa00000023b00 0001 00000000 0x0 0x0
0xffffa00000023b80 0001 00000000 0x0 0x0
0xffffa00000023c00 0001 00000000 0x0 0x0
0xffffa00000023c80 0001 00000000 0x0 0x0
0xffffa00000023d00 0001 00000000 0x0 0x0
0xffffa00000023d80 0001 00000000 0x0 0x0
0xffffa00000023e00 0001 00000000 0x0 0x0
0xffffa00000023e80 0001 00000000 0x0 0x0
0xffffa00000023f00 0001 00000000 0x0 0x0
0xffffa00000023f80 0001 00000000 0x0 0x0
0xffffa00000024000 0001 00000000 0x0 0x0
0xffffa00000024080 0001 00000000 0x0 0x0
0xffffa00000024100 0001 00000000 0x0 0x0
0xffffa00000024180 0001 00000000 0x0 0x0
0xffffa00000024200 0001 00000000 0x0 0x0
0xffffa00000024280 0001 00000000 0x0 0x0
0xffffa00000024300 0001 00000000 0x0 0x0
0xffffa00000024380 0001 00000000 0x0 0x0
0xffffa00000024400 0001 00000000 0x0 0x0
0xffffa00000024480 0001 00000000 0x0 0x0
0xffffa00000024500 0001 00000000 0x0 0x0
0xffffa00000024580 0001 00000000 0x0 0x0
0xffffa00000024600 0001 00000000 0x0 0x0
0xffffa00000024680 0001 00000000 0x0 0x0
0xffffa00000024700 0001 00000000 0x0 0x0
0xffffa00000024780 0001 00000000 0x0 0x0
0xffffa00000024800 0001 00000000 0x0 0x0
0xffffa00000024880 0001 00000000 0x0 0x0
0xffffa00000024900 0001 00000000 0x0 0x0
0xffffa00000024980 0001 00000000 0x0 0x0
0xffffa00000024a00 0001 00000000 0x0 0x0
0xffffa00000024a80 0001 00000000 0x0 0x0
0xffffa00000024b00 0001 00000000 0x0 0x0
0xffffa00000024b80 0001 00000000 0x0 0x0
0xffffa00000024c00 0001 00000000 0x0 0x0
0xffffa00000024c80 0001 00000000 0x0 0x0
0xffffa00000024d00 0001 00000000 0x0 0x0
0xffffa00000024d80 0001 00000000 0x0 0x0
0xffffa00000024e00 0001 00000000 0x0 0x0
0xffffa00000024e80 0001 00000000 0x0 0x0
0xffffa00000024f00 0001 00000000 0x0 0x0
0xffffa00000024f80 0001 00000000 0x0 0x0
0xffffa00000025000 0001 00000000 0x0 0x0
0xffffa00000025080 0001 00000000 0x0 0x0
0xffffa00000025100 0001 00000000 0x0 0x0
0xffffa00000025180 0001 00000000 0x0 0x0
0xffffa00000025200 0001 00000000 0x0 0x0
0xffffa00000025280 0001 00000000 0x0 0x0
0xffffa00000025300 0001 00000000 0x0 0x0
0xffffa00000025380 0001 00000000 0x0 0x0
0xffffa00000025400 0001 00000000 0x0 0x0
0xffffa00000025480 0001 00000000 0x0 0x0
0xffffa00000025500 0001 00000000 0x0 0x0
0xffffa00000025580 0001 00000000 0x0 0x0
0xffffa00000025600 0001 00000000 0x0 0x0
0xffffa00000025680 0001 00000000 0x0 0x0
0xffffa00000025700 0001 00000000 0x0 0x0
0xffffa00000025780 0001 00000000 0x0 0x0
0xffffa00000025800 0001 00000000 0x0 0x0
0xffffa00000025880 0001 00000000 0x0 0x0
0xffffa00000025900 0001 00000000 0x0 0x0
0xffffa00000025980 0001 00000000 0x0 0x0
0xffffa00000025a00 0001 00000000 0x0 0x0
0xffffa00000025a80 0001 00000000 0x0 0x0
0xffffa00000025b00 0001 00000000 0x0 0x0
0xffffa00000025b80 0001 00000000 0x0 0x0
0xffffa00000025c00 0001 00000000 0x0 0x0
0xffffa00000025c80 0001 00000000 0x0 0x0
0xffffa00000025d00 0001 00000000 0x0 0x0
0xffffa00000025d80 0001 00000000 0x0 0x0
0xffffa00000025e00 0001 00000000 0x0 0x0
0xffffa00000025e80 0001 00000000 0x0 0x0
0xffffa00000025f00 0001 00000000 0x0 0x0
0xffffa00000025f80 0001 00000000 0x0 0x0
0xffffa00000026000 0001 00000000 0x0 0x0
0xffffa00000026080 0001 00000000 0x0 0x0
0xffffa00000026100 0001 00000000 0x0 0x0
0xffffa00000026180 0001 00000000 0x0 0x0
0xffffa00000026200 0001 00000000 0x0 0x0
0xffffa00000026280 0001 00000000 0x0 0x0
0xffffa00000026300 0001 00000000 0x0 0x0
0xffffa00000026380 0001 00000000 0x0 0x0
0xffffa00000026400 0001 00000000 0x0 0x0
0xffffa00000026480 0001 00000000 0x0 0x0
0xffffa00000026500 0001 00000000 0x0 0x0
0xffffa00000026580 0001 00000000 0x0 0x0
0xffffa00000026600 0001 00000000 0x0 0x0
0xffffa00000026680 0001 00000000 0x0 0x0
0xffffa00000026700 0001 00000000 0x0 0x0
0xffffa00000026780 0001 00000000 0x0 0x0
0xffffa00000026800 0001 00000000 0x0 0x0
0xffffa00000026880 0001 00000000 0x0 0x0
0xffffa00000026900 0001 00000000 0x0 0x0
0xffffa00000026980 0001 00000000 0x0 0x0
0xffffa00000026a00 0001 00000000 0x0 0x0
0xffffa00000026a80 0001 00000000 0x0 0x0
0xffffa00000026b00 0001 00000000 0x0 0x0
0xffffa00000026b80 0001 00000000 0x0 0x0
0xffffa00000026c00 0001 00000000 0x0 0x0
0xffffa00000026c80 0001 00000000 0x0 0x0
0xffffa00000026d00 0001 00000000 0x0 0x0
0xffffa00000026d80 0001 00000000 0x0 0x0
0xffffa00000026e00 0001 00000000 0x0 0x0
0xffffa00000026e80 0001 00000000 0x0 0x0
0xffffa00000026f00 0001 00000000 0x0 0x0
0xffffa00000026f80 0001 00000000 0x0 0x0
0xffffa00000027000 0001 00000000 0x0 0x0
0xffffa00000027080 0001 00000000 0x0 0x0
0xffffa00000027100 0001 00000000 0x0 0x0
0xffffa00000027180 0001 00000000 0x0 0x0
0xffffa00000027200 0001 00000000 0x0 0x0
0xffffa00000027280 0001 00000000 0x0 0x0
0xffffa00000027300 0001 00000000 0x0 0x0
0xffffa00000027380 0001 00000000 0x0 0x0
0xffffa00000027400 0001 00000000 0x0 0x0
0xffffa00000027480 0001 00000000 0x0 0x0
0xffffa00000027500 0001 00000000 0x0 0x0
0xffffa00000027580 0001 00000000 0x0 0x0
0xffffa00000027600 0001 00000000 0x0 0x0
0xffffa00000027680 0001 00000000 0x0 0x0
0xffffa00000027700 0001 00000000 0x0 0x0
0xffffa00000027780 0001 00000000 0x0 0x0
0xffffa00000027800 0001 00000000 0x0 0x0
0xffffa00000027880 0001 00000000 0x0 0x0
0xffffa00000027900 0001 00000000 0x0 0x0
0xffffa00000027980 0001 00000000 0x0 0x0
0xffffa00000027a00 0001 00000000 0x0 0x0
0xffffa00000027a80 0001 00000000 0x0 0x0
0xffffa00000027b00 0001 00000000 0x0 0x0
0xffffa00000027b80 0001 00000000 0x0 0x0
0xffffa00000027c00 0001 00000000 0x0 0x0
0xffffa00000027c80 0001 00000000 0x0 0x0
0xffffa00000027d00 0001 00000000 0x0 0x0
0xffffa00000027d80 0001 00000000 0x0 0x0
0xffffa00000027e00 0001 00000000 0x0 0x0
0xffffa00000027e80 0001 00000000 0x0 0x0
0xffffa00000027f00 0001 00000000 0x0 0x0
0xffffa00000027f80 0001 00000000 0x0 0x0
0xffffa00000028000 0001 00000000 0x0 0x0
0xffffa00000028080 0001 00000000 0x0 0x0
0xffffa00000028100 0001 00000000 0x0 0x0
0xffffa00000028180 0001 00000000 0x0 0x0
0xffffa00000028200 0001 00000000 0x0 0x0
0xffffa00000028280 0001 00000000 0x0 0x0
0xffffa00000028300 0001 00000000 0x0 0x0
0xffffa00000028380 0001 00000000 0x0 0x0
0xffffa00000028400 0001 00000000 0x0 0x0
0xffffa00000028480 0001 00000000 0x0 0x0
0xffffa00000028500 0001 00000000 0x0 0x0
0xffffa00000028580 0001 00000000 0x0 0x0
0xffffa00000028600 0001 00000000 0x0 0x0
0xffffa00000028680 0001 00000000 0x0 0x0
0xffffa00000028700 0001 00000000 0x0 0x0
0xffffa00000028780 0001 00000000 0x0 0x0
0xffffa00000028800 0001 00000000 0x0 0x0
0xffffa00000028880 0001 00000000 0x0 0x0
0xffffa00000028900 0001 00000000 0x0 0x0
0xffffa00000028980 0001 00000000 0x0 0x0
0xffffa00000028a00 0001 00000000 0x0 0x0
0xffffa00000028a80 0001 00000000 0x0 0x0
0xffffa00000028b00 0001 00000000 0x0 0x0
0xffffa00000028b80 0001 00000000 0x0 0x0
0xffffa00000028c00 0001 00000000 0x0 0x0
0xffffa00000028c80 0001 00000000 0x0 0x0
0xffffa00000028d00 0001 00000000 0x0 0x0
0xffffa00000028d80 0001 00000000 0x0 0x0
0xffffa00000028e00 0001 00000000 0x0 0x0
0xffffa00000028e80 0001 00000000 0x0 0x0
0xffffa00000028f00 0001 00000000 0x0 0x0
0xffffa00000028f80 0001 00000000 0x0 0x0
0xffffa00000029000 0001 00000000 0x0 0x0
0xffffa00000029080 0001 00000000 0x0 0x0
0xffffa00000029100 0001 00000000 0x0 0x0
0xffffa00000029180 0001 00000000 0x0 0x0
0xffffa00000029200 0001 00000000 0x0 0x0
0xffffa00000029280 0001 00000000 0x0 0x0
0xffffa00000029300 0001 00000000 0x0 0x0
0xffffa00000029380 0001 00000000 0x0 0x0
0xffffa00000029400 0001 00000000 0x0 0x0
0xffffa00000029480 0001 00000000 0x0 0x0
0xffffa00000029500 0001 00000000 0x0 0x0
0xffffa00000029580 0001 00000000 0x0 0x0
0xffffa00000029600 0001 00000000 0x0 0x0
0xffffa00000029680 0001 00000000 0x0 0x0
0xffffa00000029700 0001 00000000 0x0 0x0
0xffffa00000029780 0001 00000000 0x0 0x0
0xffffa00000029800 0001 00000000 0x0 0x0
0xffffa00000029880 0001 00000000 0x0 0x0
0xffffa00000029900 0001 00000000 0x0 0x0
0xffffa00000029980 0001 00000000 0x0 0x0
0xffffa00000029a00 0001 00000000 0x0 0x0
0xffffa00000029a80 0001 00000000 0x0 0x0
0xffffa00000029b00 0001 00000000 0x0 0x0
0xffffa00000029b80 0001 00000000 0x0 0x0
0xffffa00000029c00 0001 00000000 0x0 0x0
0xffffa00000029c80 0001 00000000 0x0 0x0
0xffffa00000029d00 0001 00000000 0x0 0x0
0xffffa00000029d80 0001 00000000 0x0 0x0
0xffffa00000029e00 0001 00000000 0x0 0x0
0xffffa00000029e80 0001 00000000 0x0 0x0
0xffffa00000029f00 0001 00000000 0x0 0x0
0xffffa00000029f80 0001 00000000 0x0 0x0
0xffffa0000002a000 0001 00000000 0x0 0x0
0xffffa0000002a080 0001 00000000 0x0 0x0
0xffffa0000002a100 0001 00000000 0x0 0x0
0xffffa0000002a180 0001 00000000 0x0 0x0
0xffffa0000002a200 0001 00000000 0x0 0x0
0xffffa0000002a280 0001 00000000 0x0 0x0
0xffffa0000002a300 0001 00000000 0x0 0x0
0xffffa0000002a380 0001 00000000 0x0 0x0
0xffffa0000002a400 0001 00000000 0x0 0x0
0xffffa0000002a480 0001 00000000 0x0 0x0
0xffffa0000002a500 0001 00000000 0x0 0x0
0xffffa0000002a580 0001 00000000 0x0 0x0
0xffffa0000002a600 0001 00000000 0x0 0x0
0xffffa0000002a680 0001 00000000 0x0 0x0
0xffffa0000002a700 0001 00000000 0x0 0x0
0xffffa0000002a780 0001 00000000 0x0 0x0
0xffffa0000002a800 0001 00000000 0x0 0x0
0xffffa0000002a880 0001 00000000 0x0 0x0
0xffffa0000002a900 0001 00000000 0x0 0x0
0xffffa0000002a980 0001 00000000 0x0 0x0
0xffffa0000002aa00 0001 00000000 0x0 0x0
0xffffa0000002aa80 0001 00000000 0x0 0x0
0xffffa0000002ab00 0001 00000000 0x0 0x0
0xffffa0000002ab80 0001 00000000 0x0 0x0
0xffffa0000002ac00 0001 00000000 0x0 0x0
0xffffa0000002ac80 0001 00000000 0x0 0x0
0xffffa0000002ad00 0001 00000000 0x0 0x0
0xffffa0000002ad80 0001 00000000 0x0 0x0
0xffffa0000002ae00 0001 00000000 0x0 0x0
0xffffa0000002ae80 0001 00000000 0x0 0x0
0xffffa0000002af00 0001 00000000 0x0 0x0
0xffffa0000002af80 0001 00000000 0x0 0x0
0xffffa0000002b000 0001 00000000 0x0 0x0
0xffffa0000002b080 0001 00000000 0x0 0x0
0xffffa0000002b100 0001 00000000 0x0 0x0
0xffffa0000002b180 0001 00000000 0x0 0x0
0xffffa0000002b200 0001 00000000 0x0 0x0
0xffffa0000002b280 0001 00000000 0x0 0x0
0xffffa0000002b300 0001 00000000 0x0 0x0
0xffffa0000002b380 0001 00000000 0x0 0x0
0xffffa0000002b400 0001 00000000 0x0 0x0
0xffffa0000002b480 0001 00000000 0x0 0x0
0xffffa0000002b500 0001 00000000 0x0 0x0
0xffffa0000002b580 0001 00000000 0x0 0x0
0xffffa0000002b600 0001 00000000 0x0 0x0
0xffffa0000002b680 0001 00000000 0x0 0x0
0xffffa0000002b700 0001 00000000 0x0 0x0
0xffffa0000002b780 0001 00000000 0x0 0x0
0xffffa0000002b800 0001 00000000 0x0 0x0
0xffffa0000002b880 0001 00000000 0x0 0x0
0xffffa0000002b900 0001 00000000 0x0 0x0
0xffffa0000002b980 0001 00000000 0x0 0x0
0xffffa0000002ba00 0001 00000000 0x0 0x0
0xffffa0000002ba80 0001 00000000 0x0 0x0
0xffffa0000002bb00 0001 00000000 0x0 0x0
0xffffa0000002bb80 0001 00000000 0x0 0x0
0xffffa0000002bc00 0001 00000000 0x0 0x0
0xffffa0000002bc80 0001 00000000 0x0 0x0
0xffffa0000002bd00 0001 00000000 0x0 0x0
0xffffa0000002bd80 0001 00000000 0x0 0x0
0xffffa0000002be00 0001 00000000 0x0 0x0
0xffffa0000002be80 0001 00000000 0x0 0x0
0xffffa0000002bf00 0001 00000000 0x0 0x0
0xffffa0000002bf80 0001 00000000 0x0 0x0
0xffffa0000002c000 0001 00000000 0x0 0x0
0xffffa0000002c080 0001 00000000 0x0 0x0
0xffffa0000002c100 0001 00000000 0x0 0x0
0xffffa0000002c180 0001 00000000 0x0 0x0
0xffffa0000002c200 0001 00000000 0x0 0x0
0xffffa0000002c280 0001 00000000 0x0 0x0
0xffffa0000002c300 0001 00000000 0x0 0x0
0xffffa0000002c380 0001 00000000 0x0 0x0
0xffffa0000002c400 0001 00000000 0x0 0x0
0xffffa0000002c480 0001 00000000 0x0 0x0
0xffffa0000002c500 0001 00000000 0x0 0x0
0xffffa0000002c580 0001 00000000 0x0 0x0
0xffffa0000002c

---
This report is generated by a bot. It may contain errors.
See https://goo.gl/tpsmEJ for more information about syzbot.
syzbot engineers can be reached at syzk...@googlegroups.com.

syzbot will keep track of this issue. See:
https://goo.gl/tpsmEJ#status for how to communicate with syzbot.

syzbot

unread,

Jun 30, 2021, 5:10:32 AM6/30/21

to syzkaller-...@googlegroups.com

syzbot has found a reproducer for the following issue on:

HEAD commit: 9d3a2adf Fix previous. For Thumb-1: - sp cannot be manipul..
git tree: netbsd

console output: https://syzkaller.appspot.com/x/log.txt?x=10879880300000

kernel config: https://syzkaller.appspot.com/x/.config?x=fab579639ba4bf0a
dashboard link: https://syzkaller.appspot.com/bug?extid=32ca30cde4ec6bf0d874
compiler: g++ (Debian 10.2.1-6) 10.2.1 20210110

syz repro: https://syzkaller.appspot.com/x/repro.syz?x=1123f118300000
C reproducer: https://syzkaller.appspot.com/x/repro.c?x=16a00b30300000

IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+32ca30...@syzkaller.appspotmail.com

[ 60.9494313] fatal page fault in supervisor mode
[ 60.9594252] trap type 6 code 0 rip 0xffffffff819f4da8 cs 0x8 rflags 0x10287 cr2 0xffff900000000000 ilevel 0 rsp 0xffffaf819db399f0
[ 60.9794223] curlwp 0xffffaf8013cb9a00 pid 1098.1098 lowest kstack 0xffffaf819db322c0

kernel: page fault trap, code=0

Stopped in pid 1098.1098 (syz-executor4481) at netbsd:__asan_store1+0x50: movzbl 0(%rax),%r8d

?
__asan_store1() at netbsd:__asan_store1+0x50 kasan_shadow_1byte_isvalid sys/kern/subr_asan.c:310 [inline]
__asan_store1() at netbsd:__asan_store1+0x50 kasan_shadow_check sys/kern/subr_asan.c:411 [inline]
__asan_store1() at netbsd:__asan_store1+0x50 sys/kern/subr_asan.c:1204
vn_open() at netbsd:vn_open+0x863 sys/kern/vfs_vnops.c:358
sys_acct() at netbsd:sys_acct+0x157 sys/kern/kern_acct.c:322

sys_syscall() at netbsd:sys_syscall+0xff sy_call sys/sys/syscallvar.h:65 [inline]
sys_syscall() at netbsd:sys_syscall+0xff sys/kern/sys_syscall.c:77

syscall() at netbsd:syscall+0x25a sy_call sys/sys/syscallvar.h:65 [inline]
syscall() at netbsd:syscall+0x25a sy_invoke sys/sys/syscallvar.h:94 [inline]
syscall() at netbsd:syscall+0x25a sys/arch/x86/x86/syscall.c:138

--- syscall (number 0) ---

netbsd:syscall+0x25a:
Panic string: (null)
PID LID S CPU FLAGS STRUCT LWP * NAME WAIT

1085 >1085 7 0 0 ffffaf8013cda600 syz-executor4481
1074 1074 3 1 0 ffffaf8013cda1c0 syz-executor4481 tstile
1098 >1098 7 1 0 ffffaf8013cb9a00 syz-executor4481
1084 1084 2 1 0 ffffaf8013cb95c0 syz-executor4481
1077 1077 3 0 180 ffffaf8013cb9180 syz-executor4481 nanoslp
422 422 3 0 180 ffffaf8013404b00 syz-executor4481 nanoslp
1080 1080 2 0 0 ffffaf80134046c0 syz-executor4481
1086 1086 2 0 0 ffffaf8013404280 syz-executor4481
1078 1078 3 0 180 ffffaf8012b9ba40 syz-executor4481 nanoslp
1079 1079 3 0 180 ffffaf80129e6300 syz-executor4481 nanoslp
1069 1069 2 1 0 ffffaf8012657b40 syz-executor4481
1073 1073 3 0 180 ffffaf8012b160c0 syz-executor4481 nanoslp
1102 1102 3 0 40180 ffffaf8012b16500 sshd select
1090 1090 3 1 180 ffffaf801265b340 getty nanoslp
1099 1099 3 1 180 ffffaf801347d140 getty nanoslp
1094 1094 3 1 180 ffffaf8013462980 getty nanoslp
947 947 3 1 1c0 ffffaf801265a740 getty ttyraw
978 978 3 1 180 ffffaf80133921c0 sshd select
983 983 3 0 180 ffffaf8012cf7b80 powerd kqueue
871 871 3 1 180 ffffaf801341b740 syslogd kqueue
597 597 3 0 180 ffffaf8012bab640 dhcpcd poll
610 610 3 0 180 ffffaf8012c41080 dhcpcd poll
593 593 3 1 180 ffffaf8012bccb00 dhcpcd poll
428 428 3 0 180 ffffaf8012bc1240 dhcpcd poll
350 350 3 0 180 ffffaf8012d2a8c0 dhcpcd poll
349 349 3 0 180 ffffaf8012d2a480 dhcpcd poll
348 348 3 0 180 ffffaf8012d2a040 dhcpcd poll
1 1 3 1 180 ffffaf8012826140 init wait
0 847 3 0 200 ffffaf8012945240 physiod physiod
0 192 3 0 200 ffffaf8012946280 pooldrain pooldrain
0 163 3 0 200 ffffaf8012945ac0 ioflush syncer
0 168 3 1 200 ffffaf8012945680 pgdaemon pgdaemon
0 162 3 0 200 ffffaf8012913640 usb7 usbevt
0 161 3 1 200 ffffaf8012913200 usb6 usbevt
0 31 3 0 200 ffffaf80128cba40 usb5 usbevt
0 63 3 0 200 ffffaf80128cb600 usb4 usbevt
0 126 3 0 200 ffffaf80128cb1c0 usb3 usbevt
0 125 3 0 200 ffffaf801287ba00 usb2 usbevt
0 124 3 0 200 ffffaf801287b5c0 usb1 usbevt
0 123 3 0 200 ffffaf801287b180 usb0 usbevt
0 122 3 1 200 ffffaf80128269c0 usbtask-dr usbtsk
0 121 3 1 200 ffffaf8012826580 usbtask-hc usbtsk
0 120 3 0 200 ffffaf8010d71ac0 npfgc0 npfgcw
0 119 3 1 200 ffffaf8012813980 rt_free rt_free
0 118 3 1 200 ffffaf8012813540 unpgc unpgc
0 117 3 0 200 ffffaf8012813100 key_timehandler key_timehandler
0 116 3 1 200 ffffaf801280a940 icmp6_wqinput/1 icmp6_wqinput
0 115 3 0 200 ffffaf801280a500 icmp6_wqinput/0 icmp6_wqinput
0 114 3 0 200 ffffaf801280a0c0 nd6_timer nd6_timer
0 113 3 1 200 ffffaf8012803900 carp6_wqinput/1 carp6_wqinput
0 112 3 0 200 ffffaf80128034c0 carp6_wqinput/0 carp6_wqinput
0 111 3 1 200 ffffaf8012803080 carp_wqinput/1 carp_wqinput
0 110 3 0 200 ffffaf80127f58c0 carp_wqinput/0 carp_wqinput
0 109 3 1 200 ffffaf80127f5480 icmp_wqinput/1 icmp_wqinput
0 108 3 0 200 ffffaf80127f5040 icmp_wqinput/0 icmp_wqinput
0 107 3 0 200 ffffaf801265bbc0 rt_timer rt_timer
0 106 3 0 200 ffffaf801265b780 vmem_rehash vmem_rehash
0 105 3 0 200 ffffaf801265ab80 entbutler entropy
0 96 3 1 200 ffffaf80120b6b00 viomb balloon
0 30 3 1 200 ffffaf80120b66c0 vioif0_txrx/1 vioif0_txrx
0 29 3 0 200 ffffaf80120b6280 vioif0_txrx/0 vioif0_txrx
0 27 3 0 200 ffffaf8010d71680 scsibus0 sccomp
0 26 3 0 200 ffffaf8010d71240 pms0 pmsreset
0 25 3 1 200 ffffaf8010cc4a80 xcall/1 xcall
0 24 1 1 200 ffffaf8010cc4640 softser/1
0 23 1 1 200 ffffaf8010cc4200 softclk/1
0 22 1 1 200 ffffaf8010cc2a40 softbio/1
0 21 1 1 200 ffffaf8010cc2600 softnet/1
0 20 1 1 201 ffffaf8010cc21c0 idle/1
0 19 3 0 200 ffffaf800fb73a00 lnxpwrwq lnxpwrwq
0 18 3 0 200 ffffaf800fb735c0 lnxlngwq lnxlngwq
0 17 3 0 200 ffffaf800fb73180 lnxsyswq lnxsyswq
0 16 3 0 200 ffffaf800fb6b9c0 lnxrcugc lnxrcugc
0 15 3 0 200 ffffaf800fb6b580 sysmon smtaskq
0 14 3 0 200 ffffaf800fb6b140 pmfsuspend pmfsuspend
0 13 3 0 200 ffffaf800fb67980 pmfevent pmfevent
0 12 3 0 200 ffffaf800fb67540 sopendfree sopendfr
0 11 3 0 200 ffffaf800fb67100 iflnkst iflnkst
0 10 3 0 200 ffffaf800fb5c940 nfssilly nfssilly
0 9 3 0 200 ffffaf800fb5c500 vdrain vdrain
0 8 3 1 200 ffffaf800fb5c0c0 modunload mod_unld
0 7 3 0 200 ffffaf800fb52900 xcall/0 xcall
0 6 1 0 200 ffffaf800fb524c0 softser/0
0 5 1 0 200 ffffaf800fb52080 softclk/0
0 4 1 0 200 ffffaf800fb508c0 softbio/0
0 3 1 0 200 ffffaf800fb50480 softnet/0
0 2 1 0 201 ffffaf800fb50040 idle/0
0 0 3 0 200 ffffffff82eff6c0 swapper uvm
[Locks tracked through LWPs]

****** LWP 1074.1074 (syz-executor4481) @ 0xffffaf8013cda1c0, l_stat=3

*** Locks held:

* Lock 0 (initialized at vcache_alloc)

lock address : 0xffffaf8013c5b700 type : sleep/adaptive

initialized : 0xffffffff81b092b0
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 1

relevant lwp : 0xffffaf8013cda1c0 last held: 0xffffaf8013cda1c0

last locked* : 0xffffffff81b3be50 unlocked : 0xffffffff81b3beb2

owner/count : 0xffffaf8013cda1c0 flags : 0x0000000000000004

Turnstile: no active turnstile for this lock.

*** Locks wanted:

* Lock 0 (initialized at vcache_alloc)

lock address : 0xffffaf8013ca9a40 type : sleep/adaptive

initialized : 0xffffffff81b092b0
shared holds : 0 exclusive: 1

shares wanted: 0 exclusive: 1
relevant cpu : 1 last held: 1

relevant lwp : 0xffffaf8013cda1c0 last held: 0xffffaf8013cb9a00

last locked* : 0xffffffff81b3be50 unlocked : 0xffffffff81b3beb2

owner/count : 0xffffaf8013cb9a00 flags : 0x0000000000000007
Turnstile:
=> 0 waiting readers:
=> 1 waiting writers: 0xffffaf8013cda1c0

****** LWP 1098.1098 (syz-executor4481) @ 0xffffaf8013cb9a00, l_stat=7

*** Locks held:

* Lock 0 (initialized at vcache_alloc)

lock address : 0xffffaf8013ca9a40 type : sleep/adaptive

initialized : 0xffffffff81b092b0
shared holds : 0 exclusive: 1

shares wanted: 0 exclusive: 1
relevant cpu : 1 last held: 1

relevant lwp : 0xffffaf8013cb9a00 last held: 0xffffaf8013cb9a00

last locked* : 0xffffffff81b3be50 unlocked : 0xffffffff81b3beb2

owner/count : 0xffffaf8013cb9a00 flags : 0x0000000000000007
Turnstile:
=> 0 waiting readers:
=> 1 waiting writers: 0xffffaf8013cda1c0

*** Locks wanted: none

****** LWP 1084.1084 (syz-executor4481) @ 0xffffaf8013cb95c0, l_stat=2

*** Locks held:

* Lock 0 (initialized at pmap_ctor)

lock address : 0xffffaf8013cc0180 type : sleep/adaptive

initialized : 0xffffffff8091ff99
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 1

relevant lwp : 0xffffaf8013cb95c0 last held: 0xffffaf8013cb95c0

last locked* : 0xffffffff80921dcc unlocked : 0xffffffff8091fe61

owner field : 0xffffaf8013cb95c0 wait/spin: 0/0

Turnstile: no active turnstile for this lock.

*** Locks wanted: none

****** LWP 1086.1086 (syz-executor4481) @ 0xffffaf8013404280, l_stat=2

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at pmap_ctor)
lock address : 0xffffaf8013478180 type : sleep/adaptive
initialized : 0xffffffff8091ff99

shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 1

relevant cpu : 0 last held: 0

relevant lwp : 0xffffaf8013404280 last held: 000000000000000000
last locked : 0xffffffff8091fbfa unlocked*: 0xffffffff8091fe61
owner field : 0xffffaf8013404280 wait/spin: 0/0

Turnstile: no active turnstile for this lock.

****** LWP 1069.1069 (syz-executor4481) @ 0xffffaf8012657b40, l_stat=2

*** Locks held:

* Lock 0 (initialized at pmap_ctor)

lock address : 0xffffaf8012824580 type : sleep/adaptive

initialized : 0xffffffff8091ff99
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 1

relevant lwp : 0xffffaf8012657b40 last held: 0xffffaf8012657b40

last locked* : 0xffffffff80921dcc unlocked : 0xffffffff8091fe61

owner field : 0xffffaf8012657b40 wait/spin: 0/0

Turnstile: no active turnstile for this lock.

*** Locks wanted: none

****** LWP 610.610 (dhcpcd) @ 0xffffaf8012c41080, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at module_hook_init)
lock address : 0xffffffff8300be40 type : sleep/adaptive
initialized : 0xffffffff819864a1
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0

relevant lwp : 0xffffaf8012c41080 last held: 000000000000000000