[ 1014.9897477] panic: UBSan: Undefined Behavior in /syzkaller/managers/ci2-netbsd-kubsan/kernel/sys/miscfs/specfs/spec_vnops.c:1627:20, member access within null pointer of type 'struct tty' [ 1014.9897477] cpu0: Begin traceback... [ 1014.9897477] vpanic() at netbsd:vpanic+0x2f2 sys/kern/subr_prf.c:291 [ 1014.9897477] Report() at netbsd:Report+0x3b sys/../common/lib/libc/misc/ubsan.c:1352 [ 1014.9897477] HandleTypeMismatch() at netbsd:HandleTypeMismatch+0x1fb sys/../common/lib/libc/misc/ubsan.c:429 [ 1014.9897477] spec_close() at netbsd:spec_close+0x1305 sys/miscfs/specfs/spec_vnops.c:1627 [ 1014.9897477] VOP_CLOSE() at netbsd:VOP_CLOSE+0x133 sys/kern/vnode_if.c:605 [ 1014.9897477] vn_close() at netbsd:vn_close+0x4c sys/kern/vfs_vnops.c:480 [ 1014.9897477] closef() at netbsd:closef+0x1cd sys/kern/kern_descrip.c:863 [ 1014.9897477] fd_free() at netbsd:fd_free+0x4ea sys/kern/kern_descrip.c:1595 [ 1014.9897477] exit1() at netbsd:exit1+0x3a7 sys/kern/kern_exit.c:301 [ 1014.9897477] sys_exit() at netbsd:sys_exit+0xd4 sys/kern/kern_exit.c:180 [ 1014.9897477] syscall() at netbsd:syscall+0x2da sy_call sys/sys/syscallvar.h:65 [inline] [ 1014.9897477] syscall() at netbsd:syscall+0x2da sy_invoke sys/sys/syscallvar.h:94 [inline] [ 1014.9897477] syscall() at netbsd:syscall+0x2da sys/arch/x86/x86/syscall.c:138 [ 1014.9897477] --- syscall (number 1) --- [ 1014.9897477] netbsd:syscall+0x2da: [ 1014.9897477] cpu0: End traceback... [ 1014.9897477] fatal breakpoint trap in supervisor mode [ 1014.9897477] trap type 1 code 0 rip 0xffffffff80235385 cs 0x8 rflags 0x246 cr2 0x781dd4bab128 ilevel 0x8 rsp 0xffff9f025ef09730 [ 1014.9897477] curlwp 0xffffdc5d853d5700 pid 3406.3406 lowest kstack 0xffff9f025ef052c0 Stopped in pid 3406.3406 (syz-executor.3) at netbsd:breakpoint+0x5: leave ? breakpoint() at netbsd:breakpoint+0x5 db_panic() at netbsd:db_panic+0xec sys/ddb/db_panic.c:69 vpanic() at netbsd:vpanic+0x2f2 sys/kern/subr_prf.c:291 Report() at netbsd:Report+0x3b sys/../common/lib/libc/misc/ubsan.c:1352 HandleTypeMismatch() at netbsd:HandleTypeMismatch+0x1fb sys/../common/lib/libc/misc/ubsan.c:429 spec_close() at netbsd:spec_close+0x1305 sys/miscfs/specfs/spec_vnops.c:1627 VOP_CLOSE() at netbsd:VOP_CLOSE+0x133 sys/kern/vnode_if.c:605 vn_close() at netbsd:vn_close+0x4c sys/kern/vfs_vnops.c:480 closef() at netbsd:closef+0x1cd sys/kern/kern_descrip.c:863 fd_free() at netbsd:fd_free+0x4ea sys/kern/kern_descrip.c:1595 exit1() at netbsd:exit1+0x3a7 sys/kern/kern_exit.c:301 sys_exit() at netbsd:sys_exit+0xd4 sys/kern/kern_exit.c:180 syscall() at netbsd:syscall+0x2da sy_call sys/sys/syscallvar.h:65 [inline] syscall() at netbsd:syscall+0x2da sy_invoke sys/sys/syscallvar.h:94 [inline] syscall() at netbsd:syscall+0x2da sys/arch/x86/x86/syscall.c:138 --- syscall (number 1) --- netbsd:syscall+0x2da: Panic string: UBSan: Undefined Behavior in /syzkaller/managers/ci2-netbsd-kubsan/kernel/sys/miscfs/specfs/spec_vnops.c:1627:20, member access within null pointer of type 'struct tty' PID LID S CPU FLAGS STRUCT LWP * NAME WAIT 2529 2529 2 0 0 ffffdc5daa6c8180 syz-executor.0 2625 2110 2 1 100 ffffdc5d97fde200 syz-executor.1 2625 2625 2 1 10000000 ffffdc5d96a17600 syz-executor.1 3406 >3406 7 0 10000000 ffffdc5d853d5700 syz-executor.3 3374 3248 3 1 1100000 ffffdc5d9efb1940 syz-executor.5 tstile 3374 3374 3 0 11000000 ffffdc5da151e540 syz-executor.5 lwpwait 2433 4512 3 1 1100000 ffffdc5d840aa980 syz-executor.2 tstile 2433 2433 3 0 11000000 ffffdc5daa6c85c0 syz-executor.2 lwpwait 4456 2085 3 1 1100000 ffffdc5d9d2ba040 syz-executor.2 tstile 4456 2205 3 1 1100000 ffffdc5d9cb5d780 syz-executor.2 tstile 4456 4456 3 0 11000000 ffffdc5d9efb10c0 syz-executor.2 lwpwait 2036 2036 3 0 180 ffffdc5d9fab4900 syz-executor.1 nanoslp 3014 2907 3 1 1100000 ffffdc5d9852f240 syz-executor.2 tstile 3014 3014 3 0 11000000 ffffdc5d9efb1500 syz-executor.2 lwpwait 4063 3935 3 1 1100000 ffffdc5d97fdea80 syz-executor.5 tstile 4063 4063 3 0 11000000 ffffdc5d823e0100 syz-executor.5 lwpwait 2518 3245 3 0 1100000 ffffdc5d9d2ba8c0 syz-executor.5 tstile 2518 2518 3 0 11000000 ffffdc5d9fab44c0 syz-executor.5 lwpwait 2650 3898 3 0 1100000 ffffdc5d853d52c0 syz-executor.2 tstile 2650 2650 3 0 11000000 ffffdc5da151e100 syz-executor.2 lwpwait 1781 1786 3 1 1100000 ffffdc5d8f1da940 syz-executor.5 tstile 1781 1781 3 0 11000000 ffffdc5d9cb5dbc0 syz-executor.5 lwpwait 1667 1681 3 1 1100000 ffffdc5d99e73b40 syz-executor.5 tstile 1667 1667 3 0 11000000 ffffdc5d95c60a00 syz-executor.5 lwpwait 1347 2378 3 1 1100000 ffffdc5d981aeb00 syz-executor.5 tstile 1347 1347 3 0 11000000 ffffdc5d95c60180 syz-executor.5 lwpwait 1435 1428 3 1 1100000 ffffdc5d99e732c0 syz-executor.5 tstile 1435 1435 3 0 11000000 ffffdc5d8262fa00 syz-executor.5 lwpwait 1266 1264 3 1 1100000 ffffdc5d981ae280 syz-executor.2 tstile 1266 1266 3 0 11000000 ffffdc5d8192d4c0 syz-executor.2 lwpwait 3514 2617 3 0 1100000 ffffdc5d8ec3b8c0 syz-executor.2 tstile 3514 3514 3 0 11000000 ffffdc5d981ae6c0 syz-executor.2 lwpwait 1019 1006 3 1 1100000 ffffdc5d81ab30c0 syz-executor.2 tstile 1019 1019 3 0 11000000 ffffdc5d9852f680 syz-executor.2 lwpwait 2919 2868 3 0 1100000 ffffdc5d80e77300 syz-executor.2 tstile 2919 2904 3 0 1100000 ffffdc5d95c605c0 syz-executor.2 tstile 2919 2919 3 0 11000000 ffffdc5d8aa489c0 syz-executor.2 lwpwait 751 3051 3 0 1100000 ffffdc5d8aa48140 syz-executor.2 tstile 751 1388 3 0 1100000 ffffdc5d8ec3b040 syz-executor.2 tstile 751 751 3 0 11000000 ffffdc5d827531c0 syz-executor.2 lwpwait 739 739 3 0 180 ffffdc5d8262f180 syz-executor.3 nanoslp 646 651 3 0 1100000 ffffdc5d840aa100 syz-executor.2 tstile 646 646 3 0 11000000 ffffdc5d82753600 syz-executor.2 lwpwait 1489 1489 3 1 180 ffffdc5d823e0980 syz-executor.4 parked 1351 1351 3 0 180 ffffdc5d8ed4c900 syz-executor.4 parked 2080 >2080 7 1 140 ffffdc5d80d432c0 syz-executor.0 972 1721 3 0 1100000 ffffdc5d8e0eabc0 syz-executor.2 tstile 972 972 3 0 11000000 ffffdc5d81ab3500 syz-executor.2 lwpwait 1468 1487 3 1 1100000 ffffdc5d8192d080 syz-executor.5 tstile 1468 1468 3 0 11000000 ffffdc5d85affb80 syz-executor.5 lwpwait 1461 1629 3 0 1100000 ffffdc5d8126fbc0 syz-executor.2 tstile 1461 1325 3 1 1100040 ffffdc5d8e0ea340 syz-executor.2 tstile 1461 581 3 0 1100000 ffffdc5d8260e580 syz-executor.2 tstile 1461 1461 3 0 11000000 ffffdc5d80e77b80 syz-executor.2 lwpwait 1080 1206 2 0 1000140 ffffdc5d8260e9c0 syz-fuzzer 1080 1202 3 1 180 ffffdc5d8262f5c0 syz-fuzzer wait 1080 1198 3 1 180 ffffdc5d85aff740 syz-fuzzer kqueue 1080 829 3 1 180 ffffdc5d85aff300 syz-fuzzer parked 1080 990 3 1 180 ffffdc5d853d5b40 syz-fuzzer parked 1080 816 3 0 1c0 ffffdc5d83183b00 syz-fuzzer wait 1080 1004 3 1 1c0 ffffdc5d80877200 syz-fuzzer parked 1080 1237 3 0 180 ffffdc5d80babb00 syz-fuzzer parked 1080 1120 3 0 180 ffffdc5d831836c0 syz-fuzzer parked 1080 1225 3 1 180 ffffdc5d8087dac0 syz-fuzzer parked 1080 1226 3 1 1c0 ffffdc5d80bab280 syz-fuzzer wait 1080 1230 3 1 180 ffffdc5d80bab6c0 syz-fuzzer parked 1080 1080 3 0 180 ffffdc5d83183280 syz-fuzzer parked 1235 1235 3 1 180 ffffdc5d82daeac0 sshd select 1195 1195 3 0 180 ffffdc5d82dae240 getty nanoslp 1223 1223 3 0 180 ffffdc5d82dae680 getty nanoslp 1196 1196 3 0 180 ffffdc5d829e9200 getty nanoslp 1079 1079 3 1 1c0 ffffdc5d82753a40 getty ttyraw 1105 1105 3 1 180 ffffdc5d829e9640 sshd select 1094 1094 3 1 180 ffffdc5d829e9a80 powerd kqueue 702 702 3 0 180 ffffdc5d81fa0480 syslogd kqueue 746 746 3 1 180 ffffdc5d81fa0040 dhcpcd poll 742 742 3 1 180 ffffdc5d80d43700 dhcpcd poll 466 466 3 1 180 ffffdc5d8192d900 dhcpcd poll 598 598 3 1 180 ffffdc5d80d43b40 dhcpcd poll 292 292 3 1 180 ffffdc5d8126f780 dhcpcd poll 485 485 3 0 180 ffffdc5d8126f340 dhcpcd poll 291 291 3 1 180 ffffdc5d80e77740 dhcpcd poll 1 1 3 0 180 ffffdc5d78673100 init wait 0 2345 5 1 200 ffffdc5d8260e140 (zombie) 0 1009 3 1 240 ffffdc5d8f1da0c0 ktrace ktrwait 0 986 3 0 200 ffffdc5d80877640 physiod physiod 0 196 3 1 200 ffffdc5d8087d680 pooldrain pooldrain 0 195 3 1 240 ffffdc5d8087d240 ioflush biolock 0 194 3 0 200 ffffdc5d80877a80 pgdaemon pgdaemon 0 170 3 0 200 ffffdc5d7e7b7a40 usb7 usbevt 0 169 3 0 200 ffffdc5d7e7b7600 usb6 usbevt 0 168 3 0 240 ffffdc5d7e7b71c0 usb5 tstile 0 167 3 0 200 ffffdc5d7b742a00 usb4 usbevt 0 166 3 0 200 ffffdc5d7b7425c0 usb3 usbevt 0 165 3 1 240 ffffdc5d7b742180 usb2 tstile 0 31 3 0 200 ffffdc5d796f59c0 usb1 usbevt 0 63 3 1 200 ffffdc5d796f5580 usb0 usbevt 0 126 3 0 200 ffffdc5d796f5140 usbtask-dr usbtsk 0 125 3 1 200 ffffdc5d78673980 usbtask-hc usbtsk 0 124 3 0 200 ffffdc5d76aa1b00 swwreboot swwreboot 0 123 3 0 200 ffffdc5d78673540 npfgc0 npfgcw 0 122 3 0 200 ffffdc5d784e0740 rt_free rt_free 0 121 3 1 200 ffffdc5d784e0b80 unpgc unpgc 0 120 3 0 200 ffffdc5d785d7340 key_timehandler key_timehandler 0 119 3 1 200 ffffdc5d7863e940 icmp6_wqinput/1 icmp6_wqinput 0 118 3 0 200 ffffdc5d7863e500 icmp6_wqinput/0 icmp6_wqinput 0 117 3 0 200 ffffdc5d7863e0c0 nd6_timer nd6_timer 0 116 3 1 200 ffffdc5d78632900 carp6_wqinput/1 carp6_wqinput 0 115 3 0 200 ffffdc5d786324c0 carp6_wqinput/0 carp6_wqinput 0 114 3 1 200 ffffdc5d78632080 carp_wqinput/1 carp_wqinput 0 113 3 0 200 ffffdc5d786148c0 carp_wqinput/0 carp_wqinput 0 112 3 1 200 ffffdc5d78614480 icmp_wqinput/1 icmp_wqinput 0 111 3 0 200 ffffdc5d78614040 icmp_wqinput/0 icmp_wqinput 0 110 3 1 200 ffffdc5d785d7bc0 rt_timer rt_timer 0 109 3 0 200 ffffdc5d785d7780 vmem_rehash vmem_rehash 0 100 3 1 200 ffffdc5d784e0300 entbutler entropy 0 99 3 0 200 ffffdc5d77f50b40 viomb balloon 0 98 3 1 200 ffffdc5d77f50700 vioif0_txrx/1 vioif0_txrx 0 97 3 0 240 ffffdc5d77f502c0 vioif0_txrx/0 vioif0_txrx 0 30 3 1 200 ffffdc5d76aa16c0 scsibus0 sccomp 0 29 3 0 200 ffffdc5d76aa1280 pms0 pmsreset 0 28 3 1 200 ffffdc5d769acac0 xcall/1 xcall 0 27 1 1 200 ffffdc5d769ac680 softser/1 0 26 1 1 200 ffffdc5d769ac240 softclk/1 0 25 1 1 200 ffffdc5d76987a80 softbio/1 0 24 1 1 200 ffffdc5d76987640 softnet/1 0 23 1 1 201 ffffdc5d76987200 idle/1 0 22 3 0 200 ffffdc5ea4d2da40 lnxsyswq lnxsyswq 0 21 3 0 200 ffffdc5ea4d2d600 lnxubdwq lnxubdwq 0 20 3 1 200 ffffdc5ea4d2d1c0 lnxpwrwq lnxpwrwq 0 19 3 1 200 ffffdc5ea4d34a00 lnxlngwq lnxlngwq 0 18 3 1 200 ffffdc5ea4d345c0 lnxhipwq lnxhipwq 0 17 3 0 200 ffffdc5ea4d34180 lnxrcugc lnxrcugc 0 16 3 0 200 ffffdc5ea4d539c0 sysmon smtaskq 0 15 3 1 200 ffffdc5ea4d53580 pmfsuspend pmfsuspend 0 14 3 0 200 ffffdc5ea4d53140 pmfevent pmfevent 0 13 3 1 200 ffffdc5ea4d5e980 sopendfree sopendfr 0 12 3 0 200 ffffdc5ea4d5e540 ifwdog ifwdog 0 11 3 0 200 ffffdc5ea4d5e100 iflnkst iflnkst 0 10 3 1 200 ffffdc5ea5d93940 nfssilly nfssilly 0 9 3 0 200 ffffdc5ea5d93500 vdrain vdrain 0 8 3 1 200 ffffdc5ea5d930c0 modunload mod_unld 0 7 3 0 200 ffffdc5ea5dba900 xcall/0 xcall 0 6 1 0 200 ffffdc5ea5dba4c0 softser/0 0 5 1 0 200 ffffdc5ea5dba080 softclk/0 0 4 1 0 200 ffffdc5ea5de98c0 softbio/0 0 3 1 0 200 ffffdc5ea5de9480 softnet/0 0 2 1 0 201 ffffdc5ea5de9040 idle/0 0 0 3 0 200 ffffffff86742940 swapper uvm [Locks tracked through LWPs] ****** LWP 2529.2529 (syz-executor.0) @ 0xffffdc5daa6c8180, l_stat=2 *** Locks held: * Lock 0 (initialized at netbsd:amap_alloc1+0x30a sys/uvm/uvm_amap.c:167) lock address : ffffdc5d83000f40 type : sleep/adaptive initialized : netbsd:amap_alloc1+0x30a shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 0 relevant cpu : 0 last held: 0 relevant lwp : 0xffffdc5daa6c8180 last held: 0xffffdc5daa6c8180 last locked* : netbsd:uvm_fault_internal+0x75d unlocked : netbsd:uvm_fault_upper_enter+0x454 owner/count : 0xffffdc5daa6c8180 flags : 0x0000000000000004 Turnstile: no active turnstile for this lock. *** Locks wanted: * Lock 0 (initialized at netbsd:pmap_ctor+0x6d sys/arch/x86/x86/pmap.c:2860) lock address : ffffdc5da46dd180 type : sleep/adaptive initialized : netbsd:pmap_ctor+0x6d shared holds : 0 exclusive: 0 shares wanted: 0 exclusive: 1 relevant cpu : 0 last held: 0 relevant lwp : 0xffffdc5daa6c8180 last held: 000000000000000000 last locked : netbsd:pmap_extract+0xdb unlocked* : netbsd:pmap_extract+0x2c8 owner field : 0xffffdc5daa6c8180 wait/spin: 0/0 Turnstile: no active turnstile for this lock. ****** LWP 3406.3406 (syz-executor.3) @ 0xffffdc5d853d5700, l_stat=7 *** Locks held: * Lock 0 (initialized at netbsd:fork1+0x4b8 sys/kern/kern_fork.c:366) lock address : ffffdc5d8191ebd0 type : sleep/adaptive initialized : netbsd:fork1+0x4b8 shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 0 relevant cpu : 0 last held: 0 relevant lwp : 0xffffdc5d853d5700 last held: 0xffffdc5d853d5700 last locked* : netbsd:exit1+0x393 unlocked : 0 owner/count : 0xffffdc5d853d5700 flags : 0x0000000000000004 Turnstile: no active turnstile for this lock. * Lock 1 (initialized at netbsd:vcache_alloc+0xba sys/kern/vfs_vnode.c:1376) lock address : ffffdc5da6b04e80 type : sleep/adaptive initialized : netbsd:vcache_alloc+0xba shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 0 relevant cpu : 0 last held: 0 relevant lwp : 0xffffdc5d853d5700 last held: 0xffffdc5d853d5700 last locked* : netbsd:genfs_lock+0x220 unlocked : netbsd:genfs_unlock+0x50 owner/count : 0xffffdc5d853d5700 flags : 0x0000000000000004 Turnstile: no active turnstile for this lock. * Lock 2 (initialized at netbsd:procinit+0x86 sys/kern/kern_proc.c:386) lock address : netbsd:proc_lock type : sleep/adaptive initialized : netbsd:procinit+0x86 shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 0 relevant cpu : 0 last held: 0 relevant lwp : 0xffffdc5d853d5700 last held: 0xffffdc5d853d5700 last locked* : netbsd:spec_close+0x1f2 unlocked : netbsd:lwp_free+0x88e owner field : 0xffffdc5d853d5700 wait/spin: 0/0 Turnstile: no active turnstile for this lock. *** Locks wanted: none ****** LWP 3374.3248 (syz-executor.5) @ 0xffffdc5d9efb1940, l_stat=3 *** Locks held: none *** Locks wanted: * Lock 0 (initialized at netbsd:vhci_attach+0x1cb sys/dev/usb/vhci.c:1280) lock address : ffff9f000f9804c8 type : sleep/adaptive initialized : netbsd:vhci_attach+0x1cb shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 8 relevant cpu : 1 last held: 0 relevant lwp : 0xffffdc5d9efb1940 last held: 0xffffdc5d7e7b71c0 last locked* : netbsd:usbd_transfer+0x350 unlocked : netbsd:usbd_setup_pipe_flags+0x13c owner field : 0xffffdc5d7e7b71c0 wait/spin: 1/0 Turnstile: => 0 waiting readers: => 8 waiting writers: 0xffffdc5d8192d080 0xffffdc5d99e732c0 0xffffdc5d981aeb00 0xffffdc5d99e73b40 0xffffdc5d8f1da940 0xffffdc5d9d2ba8c0 0xffffdc5d97fdea80 0xffffdc5d9efb1940 ****** LWP 2433.4512 (syz-executor.2) @ 0xffffdc5d840aa980, l_stat=3 *** Locks held: none *** Locks wanted: * Lock 0 (initialized at netbsd:vhci_attach+0x1cb sys/dev/usb/vhci.c:1280) lock address : ffff9f000f9884c8 type : sleep/adaptive initialized : netbsd:vhci_attach+0x1cb shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 17 relevant cpu : 1 last held: 1 relevant lwp : 0xffffdc5d840aa980 last held: 0xffffdc5d7b742180 last locked* : netbsd:usbd_transfer+0x350 unlocked : netbsd:usb_transfer_complete+0x85d owner field : 0xffffdc5d7b742180 wait/spin: 1/0 Turnstile: => 0 waiting readers: => 17 waiting writers: 0xffffdc5d8126fbc0 0xffffdc5d8e0ea340 0xffffdc5d8260e580 0xffffdc5d8e0eabc0 0xffffdc5d840aa100 0xffffdc5d8aa48140 0xffffdc5d8ec3b040 0xffffdc5d80e77300 0xffffdc5d95c605c0 0xffffdc5d81ab30c0 0xffffdc5d8ec3b8c0 0xffffdc5d981ae280 0xffffdc5d853d52c0 0xffffdc5d9852f240 0xffffdc5d9d2ba040 0xffffdc5d9cb5d780 0xffffdc5d840aa980 ****** LWP 4456.2085 (syz-executor.2) @ 0xffffdc5d9d2ba040, l_stat=3 *** Locks held: none *** Locks wanted: * Lock 0 (initialized at netbsd:vhci_attach+0x1cb sys/dev/usb/vhci.c:1280) lock address : ffff9f000f9884c8 type : sleep/adaptive initialized : netbsd:vhci_attach+0x1cb shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 17 relevant cpu : 1 last held: 1 relevant lwp : 0xffffdc5d9d2ba040 last held: 0xffffdc5d7b742180 last locked* : netbsd:usbd_transfer+0x350 unlocked : netbsd:usb_transfer_complete+0x85d owner field : 0xffffdc5d7b742180 wait/spin: 1/0 Turnstile: => 0 waiting readers: => 17 waiting writers: 0xffffdc5d8126fbc0 0xffffdc5d8e0ea340 0xffffdc5d8260e580 0xffffdc5d8e0eabc0 0xffffdc5d840aa100 0xffffdc5d8aa48140 0xffffdc5d8ec3b040 0xffffdc5d80e77300 0xffffdc5d95c605c0 0xffffdc5d81ab30c0 0xffffdc5d8ec3b8c0 0xffffdc5d981ae280 0xffffdc5d853d52c0 0xffffdc5d9852f240 0xffffdc5d9d2ba040 0xffffdc5d9cb5d780 0xffffdc5d840aa980 ****** LWP 4456.2205 (syz-executor.2) @ 0xffffdc5d9cb5d780, l_stat=3 *** Locks held: none *** Locks wanted: * Lock 0 (initialized at netbsd:vhci_attach+0x1cb sys/dev/usb/vhci.c:1280) lock address : ffff9f000f9884c8 type : sleep/adaptive initialized : netbsd:vhci_attach+0x1cb shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 17 relevant cpu : 1 last held: 1 relevant lwp : 0xffffdc5d9cb5d780 last held: 0xffffdc5d7b742180 last locked* : netbsd:usbd_transfer+0x350 unlocked : netbsd:usb_transfer_complete+0x85d owner field : 0xffffdc5d7b742180 wait/spin: 1/0 Turnstile: => 0 waiting readers: => 17 waiting writers: 0xffffdc5d8126fbc0 0xffffdc5d8e0ea340 0xffffdc5d8260e580 0xffffdc5d8e0eabc0 0xffffdc5d840aa100 0xffffdc5d8aa48140 0xffffdc5d8ec3b040 0xffffdc5d80e77300 0xffffdc5d95c605c0 0xffffdc5d81ab30c0 0xffffdc5d8ec3b8c0 0xffffdc5d981ae280 0xffffdc5d853d52c0 0xffffdc5d9852f240 0xffffdc5d9d2ba040 0xffffdc5d9cb5d780 0xffffdc5d840aa980 ****** LWP 3014.2907 (syz-executor.2) @ 0xffffdc5d9852f240, l_stat=3 *** Locks held: none *** Locks wanted: * Lock 0 (initialized at netbsd:vhci_attach+0x1cb sys/dev/usb/vhci.c:1280) lock address : ffff9f000f9884c8 type : sleep/adaptive initialized : netbsd:vhci_attach+0x1cb shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 17 relevant cpu : 1 last held: 1 relevant lwp : 0xffffdc5d9852f240 last held: 0xffffdc5d7b742180 last locked* : netbsd:usbd_transfer+0x350 unlocked : netbsd:usb_transfer_complete+0x85d owner field : 0xffffdc5d7b742180 wait/spin: 1/0 Turnstile: => 0 waiting readers: => 17 waiting writers: 0xffffdc5d8126fbc0 0xffffdc5d8e0ea340 0xffffdc5d8260e580 0xffffdc5d8e0eabc0 0xffffdc5d840aa100 0xffffdc5d8aa48140 0xffffdc5d8ec3b040 0xffffdc5d80e77300 0xffffdc5d95c605c0 0xffffdc5d81ab30c0 0xffffdc5d8ec3b8c0 0xffffdc5d981ae280 0xffffdc5d853d52c0 0xffffdc5d9852f240 0xffffdc5d9d2ba040 0xffffdc5d9cb5d780 0xffffdc5d840aa980 ****** LWP 4063.3935 (syz-executor.5) @ 0xffffdc5d97fdea80, l_stat=3 *** Locks held: none *** Locks wanted: * Lock 0 (initialized at netbsd:vhci_attach+0x1cb sys/dev/usb/vhci.c:1280) lock address : ffff9f000f9804c8 type : sleep/adaptive initialized : netbsd:vhci_attach+0x1cb shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 8 relevant cpu : 1 last held: 0 relevant lwp : 0xffffdc5d97fdea80 last held: 0xffffdc5d7e7b71c0 last locked* : netbsd:usbd_transfer+0x350 unlocked : netbsd:usbd_setup_pipe_flags+0x13c owner field : 0xffffdc5d7e7b71c0 wait/spin: 1/0 Turnstile: => 0 waiting readers: => 8 waiting writers: 0xffffdc5d8192d080 0xffffdc5d99e732c0 0xffffdc5d981aeb00 0xffffdc5d99e73b40 0xffffdc5d8f1da940 0xffffdc5d9d2ba8c0 0xffffdc5d97fdea80 0xffffdc5d9efb1940 ****** LWP 2518.3245 (syz-executor.5) @ 0xffffdc5d9d2ba8c0, l_stat=3 *** Locks held: none *** Locks wanted: * Lock 0 (initialized at netbsd:vhci_attach+0x1cb sys/dev/usb/vhci.c:1280) lock address : ffff9f000f9804c8 type : sleep/adaptive initialized : netbsd:vhci_attach+0x1cb shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 8 relevant cpu : 0 last held: 0 relevant lwp : 0xffffdc5d9d2ba8c0 last held: 0xffffdc5d7e7b71c0 last locked* : netbsd:usbd_transfer+0x350 unlocked : netbsd:usbd_setup_pipe_flags+0x13c owner field : 0xffffdc5d7e7b71c0 wait/spin: 1/0 Turnstile: => 0 waiting readers: => 8 waiting writers: 0xffffdc5d8192d080 0xffffdc5d99e732c0 0xffffdc5d981aeb00 0xffffdc5d99e73b40 0xffffdc5d8f1da940 0xffffdc5d9d2ba8c0 0xffffdc5d97fdea80 0xffffdc5d9efb1940 ****** LWP 2650.3898 (syz-executor.2) @ 0xffffdc5d853d52c0, l_stat=3 *** Locks held: none *** Locks wanted: * Lock 0 (initialized at netbsd:vhci_attach+0x1cb sys/dev/usb/vhci.c:1280) lock address : ffff9f000f9884c8 type : sleep/adaptive initialized : netbsd:vhci_attach+0x1cb shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 17 relevant cpu : 0 last held: 1 relevant lwp : 0xffffdc5d853d52c0 last held: 0xffffdc5d7b742180 last locked* : netbsd:usbd_transfer+0x350 unlocked : netbsd:usb_transfer_complete+0x85d owner field : 0xffffdc5d7b742180 wait/spin: 1/0 Turnstile: => 0 waiting readers: => 17 waiting writers: 0xffffdc5d8126fbc0 0xffffdc5d8e0ea340 0xffffdc5d8260e580 0xffffdc5d8e0eabc0 0xffffdc5d840aa100 0xffffdc5d8aa48140 0xffffdc5d8ec3b040 0xffffdc5d80e77300 0xffffdc5d95c605c0 0xffffdc5d81ab30c0 0xffffdc5d8ec3b8c0 0xffffdc5d981ae280 0xffffdc5d853d52c0 0xffffdc5d9852f240 0xffffdc5d9d2ba040 0xffffdc5d9cb5d780 0xffffdc5d840aa980 ****** LWP 1781.1786 (syz-executor.5) @ 0xffffdc5d8f1da940, l_stat=3 *** Locks held: none *** Locks wanted: * Lock 0 (initialized at netbsd:vhci_attach+0x1cb sys/dev/usb/vhci.c:1280) lock address : ffff9f000f9804c8 type : sleep/adaptive initialized : netbsd:vhci_attach+0x1cb shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 8 relevant cpu : 1 last held: 0 relevant lwp : 0xffffdc5d8f1da940 last held: 0xffffdc5d7e7b71c0 last locked* : netbsd:usbd_transfer+0x350 unlocked : netbsd:usbd_setup_pipe_flags+0x13c owner field : 0xffffdc5d7e7b71c0 wait/spin: 1/0 Turnstile: => 0 waiting readers: => 8 waiting writers: 0xffffdc5d8192d080 0xffffdc5d99e732c0 0xffffdc5d981aeb00 0xffffdc5d99e73b40 0xffffdc5d8f1da940 0xffffdc5d9d2ba8c0 0xffffdc5d97fdea80 0xffffdc5d9efb1940 ****** LWP 1667.1681 (syz-executor.5) @ 0xffffdc5d99e73b40, l_stat=3 *** Locks held: none *** Locks wanted: * Lock 0 (initialized at netbsd:vhci_attach+0x1cb sys/dev/usb/vhci.c:1280) lock address : ffff9f000f9804c8 type : sleep/adaptive initialized : netbsd:vhci_attach+0x1cb shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 8 relevant cpu : 1 last held: 0 relevant lwp : 0xffffdc5d99e73b40 last held: 0xffffdc5d7e7b71c0 last locked* : netbsd:usbd_transfer+0x350 unlocked : netbsd:usbd_setup_pipe_flags+0x13c owner field : 0xffffdc5d7e7b71c0 wait/spin: 1/0 Turnstile: => 0 waiting readers: => 8 waiting writers: 0xffffdc5d8192d080 0xffffdc5d99e732c0 0xffffdc5d981aeb00 0xffffdc5d99e73b40 0xffffdc5d8f1da940 0xffffdc5d9d2ba8c0 0xffffdc5d97fdea80 0xffffdc5d9efb1940 ****** LWP 1347.2378 (syz-executor.5) @ 0xffffdc5d981aeb00, l_stat=3 *** Locks held: none *** Locks wanted: * Lock 0 (initialized at netbsd:vhci_attach+0x1cb sys/dev/usb/vhci.c:1280) lock address : ffff9f000f9804c8 type : sleep/adaptive initialized : netbsd:vhci_attach+0x1cb shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 8 relevant cpu : 1 last held: 0 relevant lwp : 0xffffdc5d981aeb00 last held: 0xffffdc5d7e7b71c0 last locked* : netbsd:usbd_transfer+0x350 unlocked : netbsd:usbd_setup_pipe_flags+0x13c owner field : 0xffffdc5d7e7b71c0 wait/spin: 1/0 Turnstile: => 0 waiting readers: => 8 waiting writers: 0xffffdc5d8192d080 0xffffdc5d99e732c0 0xffffdc5d981aeb00 0xffffdc5d99e73b40 0xffffdc5d8f1da940 0xffffdc5d9d2ba8c0 0xffffdc5d97fdea80 0xffffdc5d9efb1940 ****** LWP 1435.1428 (syz-executor.5) @ 0xffffdc5d99e732c0, l_stat=3 *** Locks held: none *** Locks wanted: * Lock 0 (initialized at netbsd:vhci_attach+0x1cb sys/dev/usb/vhci.c:1280) lock address : ffff9f000f9804c8 type : sleep/adaptive initialized : netbsd:vhci_attach+0x1cb shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 8 relevant cpu : 1 last held: 0 relevant lwp : 0xffffdc5d99e732c0 last held: 0xffffdc5d7e7b71c0 last locked* : netbsd:usbd_transfer+0x350 unlocked : netbsd:usbd_setup_pipe_flags+0x13c owner field : 0xffffdc5d7e7b71c0 wait/spin: 1/0 Turnstile: => 0 waiting readers: => 8 waiting writers: 0xffffdc5d8192d080 0xffffdc5d99e732c0 0xffffdc5d981aeb00 0xffffdc5d99e73b40 0xffffdc5d8f1da940 0xffffdc5d9d2ba8c0 0xffffdc5d97fdea80 0xffffdc5d9efb1940 ****** LWP 1266.1264 (syz-executor.2) @ 0xffffdc5d981ae280, l_stat=3 *** Locks held: none *** Locks wanted: * Lock 0 (initialized at netbsd:vhci_attach+0x1cb sys/dev/usb/vhci.c:1280) lock address : ffff9f000f9884c8 type : sleep/adaptive initialized : netbsd:vhci_attach+0x1cb shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 17 relevant cpu : 1 last held: 1 relevant lwp : 0xffffdc5d981ae280 last held: 0xffffdc5d7b742180 last locked* : netbsd:usbd_transfer+0x350 unlocked : netbsd:usb_transfer_complete+0x85d owner field : 0xffffdc5d7b742180 wait/spin: 1/0 Turnstile: => 0 waiting readers: => 17 waiting writers: 0xffffdc5d8126fbc0 0xffffdc5d8e0ea340 0xffffdc5d8260e580 0xffffdc5d8e0eabc0 0xffffdc5d840aa100 0xffffdc5d8aa48140 0xffffdc5d8ec3b040 0xffffdc5d80e77300 0xffffdc5d95c605c0 0xffffdc5d81ab30c0 0xffffdc5d8ec3b8c0 0xffffdc5d981ae280 0xffffdc5d853d52c0 0xffffdc5d9852f240 0xffffdc5d9d2ba040 0xffffdc5d9cb5d780 0xffffdc5d840aa980 ****** LWP 3514.2617 (syz-executor.2) @ 0xffffdc5d8ec3b8c0, l_stat=3 *** Locks held: none *** Locks wanted: * Lock 0 (initialized at netbsd:vhci_attach+0x1cb sys/dev/usb/vhci.c:1280) lock address : ffff9f000f9884c8 type : sleep/adaptive initialized : netbsd:vhci_attach+0x1cb shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 17 relevant cpu : 0 last held: 1 relevant lwp : 0xffffdc5d8ec3b8c0 last held: 0xffffdc5d7b742180 last locked* : netbsd:usbd_transfer+0x350 unlocked : netbsd:usb_transfer_complete+0x85d owner field : 0xffffdc5d7b742180 wait/spin: 1/0 Turnstile: => 0 waiting readers: => 17 waiting writers: 0xffffdc5d8126fbc0 0xffffdc5d8e0ea340 0xffffdc5d8260e580 0xffffdc5d8e0eabc0 0xffffdc5d840aa100 0xffffdc5d8aa48140 0xffffdc5d8ec3b040 0xffffdc5d80e77300 0xffffdc5d95c605c0 0xffffdc5d81ab30c0 0xffffdc5d8ec3b8c0 0xffffdc5d981ae280 0xffffdc5d853d52c0 0xffffdc5d9852f240 0xffffdc5d9d2ba040 0xffffdc5d9cb5d780 0xffffdc5d840aa980 ****** LWP 1019.1006 (syz-executor.2) @ 0xffffdc5d81ab30c0, l_stat=3 *** Locks held: none *** Locks wanted: * Lock 0 (initialized at netbsd:vhci_attach+0x1cb sys/dev/usb/vhci.c:1280) lock address : ffff9f000f9884c8 type : sleep/adaptive initialized : netbsd:vhci_attach+0x1cb shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 17 relevant cpu : 1 last held: 1 relevant lwp : 0xffffdc5d81ab30c0 last held: 0xffffdc5d7b742180 last locked* : netbsd:usbd_transfer+0x350 unlocked : netbsd:usb_transfer_complete+0x85d owner field : 0xffffdc5d7b742180 wait/spin: 1/0 Turnstile: => 0 waiting readers: => 17 waiting writers: 0xffffdc5d8126fbc0 0xffffdc5d8e0ea340 0xffffdc5d8260e580 0xffffdc5d8e0eabc0 0xffffdc5d840aa100 0xffffdc5d8aa48140 0xffffdc5d8ec3b040 0xffffdc5d80e77300 0xffffdc5d95c605c0 0xffffdc5d81ab30c0 0xffffdc5d8ec3b8c0 0xffffdc5d981ae280 0xffffdc5d853d52c0 0xffffdc5d9852f240 0xffffdc5d9d2ba040 0xffffdc5d9cb5d780 0xffffdc5d840aa980 ****** LWP 2919.2868 (syz-executor.2) @ 0xffffdc5d80e77300, l_stat=3 *** Locks held: none *** Locks wanted: * Lock 0 (initialized at netbsd:vhci_attach+0x1cb sys/dev/usb/vhci.c:1280) lock address : ffff9f000f9884c8 type : sleep/adaptive initialized : netbsd:vhci_attach+0x1cb shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 17 relevant cpu : 0 last held: 1 relevant lwp : 0xffffdc5d80e77300 last held: 0xffffdc5d7b742180 last locked* : netbsd:usbd_transfer+0x350 unlocked : netbsd:usb_transfer_complete+0x85d owner field : 0xffffdc5d7b742180 wait/spin: 1/0 Turnstile: => 0 waiting readers: => 17 waiting writers: 0xffffdc5d8126fbc0 0xffffdc5d8e0ea340 0xffffdc5d8260e580 0xffffdc5d8e0eabc0 0xffffdc5d840aa100 0xffffdc5d8aa48140 0xffffdc5d8ec3b040 0xffffdc5d80e77300 0xffffdc5d95c605c0 0xffffdc5d81ab30c0 0xffffdc5d8ec3b8c0 0xffffdc5d981ae280 0xffffdc5d853d52c0 0xffffdc5d9852f240 0xffffdc5d9d2ba040 0xffffdc5d9cb5d780 0xffffdc5d840aa980 ****** LWP 2919.2904 (syz-executor.2) @ 0xffffdc5d95c605c0, l_stat=3 *** Locks held: none *** Locks wanted: * Lock 0 (initialized at netbsd:vhci_attach+0x1cb sys/dev/usb/vhci.c:1280) lock address : ffff9f000f9884c8 type : sleep/adaptive initialized : netbsd:vhci_attach+0x1cb shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 17 relevant cpu : 0 last held: 1 relevant lwp : 0xffffdc5d95c605c0 last held: 0xffffdc5d7b742180 last locked* : netbsd:usbd_transfer+0x350 unlocked : netbsd:usb_transfer_complete+0x85d owner field : 0xffffdc5d7b742180 wait/spin: 1/0 Turnstile: => 0 waiting readers: => 17 waiting writers: 0xffffdc5d8126fbc0 0xffffdc5d8e0ea340 0xffffdc5d8260e580 0xffffdc5d8e0eabc0 0xffffdc5d840aa100 0xffffdc5d8aa48140 0xffffdc5d8ec3b040 0xffffdc5d80e77300 0xffffdc5d95c605c0 0xffffdc5d81ab30c0 0xffffdc5d8ec3b8c0 0xffffdc5d981ae280 0xffffdc5d853d52c0 0xffffdc5d9852f240 0xffffdc5d9d2ba040 0xffffdc5d9cb5d780 0xffffdc5d840aa980 ****** LWP 751.3051 (syz-executor.2) @ 0xffffdc5d8aa48140, l_stat=3 *** Locks held: none *** Locks wanted: * Lock 0 (initialized at netbsd:vhci_attach+0x1cb sys/dev/usb/vhci.c:1280) lock address : ffff9f000f9884c8 type : sleep/adaptive initialized : netbsd:vhci_attach+0x1cb shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 17 relevant cpu : 0 last held: 1 relevant lwp : 0xffffdc5d8aa48140 last held: 0xffffdc5d7b742180 last locked* : netbsd:usbd_transfer+0x350 unlocked : netbsd:usb_transfer_complete+0x85d owner field : 0xffffdc5d7b742180 wait/spin: 1/0 Turnstile: => 0 waiting readers: => 17 waiting writers: 0xffffdc5d8126fbc0 0xffffdc5d8e0ea340 0xffffdc5d8260e580 0xffffdc5d8e0eabc0 0xffffdc5d840aa100 0xffffdc5d8aa48140 0xffffdc5d8ec3b040 0xffffdc5d80e77300 0xffffdc5d95c605c0 0xffffdc5d81ab30c0 0xffffdc5d8ec3b8c0 0xffffdc5d981ae280 0xffffdc5d853d52c0 0xffffdc5d9852f240 0xffffdc5d9d2ba040 0xffffdc5d9cb5d780 0xffffdc5d840aa980 ****** LWP 751.1388 (syz-executor.2) @ 0xffffdc5d8ec3b040, l_stat=3 *** Locks held: none *** Locks wanted: * Lock 0 (initialized at netbsd:vhci_attach+0x1cb sys/dev/usb/vhci.c:1280) lock address : ffff9f000f9884c8 type : sleep/adaptive initialized : netbsd:vhci_attach+0x1cb shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 17 relevant cpu : 0 last held: 1 relevant lwp : 0xffffdc5d8ec3b040 last held: 0xffffdc5d7b742180 last locked* : netbsd:usbd_transfer+0x350 unlocked : netbsd:usb_transfer_complete+0x85d owner field : 0xffffdc5d7b742180 wait/spin: 1/0 Turnstile: => 0 waiting readers: => 17 waiting writers: 0xffffdc5d8126fbc0 0xffffdc5d8e0ea340 0xffffdc5d8260e580 0xffffdc5d8e0eabc0 0xffffdc5d840aa100 0xffffdc5d8aa48140 0xffffdc5d8ec3b040 0xffffdc5d80e77300 0xffffdc5d95c605c0 0xffffdc5d81ab30c0 0xffffdc5d8ec3b8c0 0xffffdc5d981ae280 0xffffdc5d853d52c0 0xffffdc5d9852f240 0xffffdc5d9d2ba040 0xffffdc5d9cb5d780 0xffffdc5d840aa980 ****** LWP 646.651 (syz-executor.2) @ 0xffffdc5d840aa100, l_stat=3 *** Locks held: none *** Locks wanted: * Lock 0 (initialized at netbsd:vhci_attach+0x1cb sys/dev/usb/vhci.c:1280) lock address : ffff9f000f9884c8 type : sleep/adaptive initialized : netbsd:vhci_attach+0x1cb shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 17 relevant cpu : 0 last held: 1 relevant lwp : 0xffffdc5d840aa100 last held: 0xffffdc5d7b742180 last locked* : netbsd:usbd_transfer+0x350 unlocked : netbsd:usb_transfer_complete+0x85d owner field : 0xffffdc5d7b742180 wait/spin: 1/0 Turnstile: => 0 waiting readers: => 17 waiting writers: 0xffffdc5d8126fbc0 0xffffdc5d8e0ea340 0xffffdc5d8260e580 0xffffdc5d8e0eabc0 0xffffdc5d840aa100 0xffffdc5d8aa48140 0xffffdc5d8ec3b040 0xffffdc5d80e77300 0xffffdc5d95c605c0 0xffffdc5d81ab30c0 0xffffdc5d8ec3b8c0 0xffffdc5d981ae280 0xffffdc5d853d52c0 0xffffdc5d9852f240 0xffffdc5d9d2ba040 0xffffdc5d9cb5d780 0xffffdc5d840aa980 ****** LWP 972.1721 (syz-executor.2) @ 0xffffdc5d8e0eabc0, l_stat=3 *** Locks held: none *** Locks wanted: * Lock 0 (initialized at netbsd:vhci_attach+0x1cb sys/dev/usb/vhci.c:1280) lock address : ffff9f000f9884c8 type : sleep/adaptive initialized : netbsd:vhci_attach+0x1cb shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 17 relevant cpu : 0 last held: 1 relevant lwp : 0xffffdc5d8e0eabc0 last held: 0xffffdc5d7b742180 last locked* : netbsd:usbd_transfer+0x350 unlocked : netbsd:usb_transfer_complete+0x85d owner field : 0xffffdc5d7b742180 wait/spin: 1/0 Turnstile: => 0 waiting readers: => 17 waiting writers: 0xffffdc5d8126fbc0 0xffffdc5d8e0ea340 0xffffdc5d8260e580 0xffffdc5d8e0eabc0 0xffffdc5d840aa100 0xffffdc5d8aa48140 0xffffdc5d8ec3b040 0xffffdc5d80e77300 0xffffdc5d95c605c0 0xffffdc5d81ab30c0 0xffffdc5d8ec3b8c0 0xffffdc5d981ae280 0xffffdc5d853d52c0 0xffffdc5d9852f240 0xffffdc5d9d2ba040 0xffffdc5d9cb5d780 0xffffdc5d840aa980 ****** LWP 1468.1487 (syz-executor.5) @ 0xffffdc5d8192d080, l_stat=3 *** Locks held: * Lock 0 (initialized at netbsd:vhci_attach+0x2b2 sys/dev/usb/vhci.c:1283) lock address : ffff9f000f9806f0 type : sleep/adaptive initialized : netbsd:vhci_attach+0x2b2 shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 1 relevant cpu : 1 last held: 1 relevant lwp : 0xffffdc5d8192d080 last held: 0xffffdc5d8192d080 last locked* : netbsd:vhci_usb_detach+0x172 unlocked : netbsd:vhci_fd_read+0x652 owner field : 0xffffdc5d8192d080 wait/spin: 1/0 Turnstile: => 0 waiting readers: => 1 waiting writers: 0xffffdc5d7e7b71c0 *** Locks wanted: * Lock 0 (initialized at netbsd:vhci_attach+0x1cb sys/dev/usb/vhci.c:1280) lock address : ffff9f000f9804c8 type : sleep/adaptive initialized : netbsd:vhci_attach+0x1cb shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 8 relevant cpu : 1 last held: 0 relevant lwp : 0xffffdc5d8192d080 last held: 0xffffdc5d7e7b71c0 last locked* : netbsd:usbd_transfer+0x350 unlocked : netbsd:usbd_setup_pipe_flags+0x13c owner field : 0xffffdc5d7e7b71c0 wait/spin: 1/0 Turnstile: => 0 waiting readers: => 8 waiting writers: 0xffffdc5d8192d080 0xffffdc5d99e732c0 0xffffdc5d981aeb00 0xffffdc5d99e73b40 0xffffdc5d8f1da940 0xffffdc5d9d2ba8c0 0xffffdc5d97fdea80 0xffffdc5d9efb1940 ****** LWP 1461.1629 (syz-executor.2) @ 0xffffdc5d8126fbc0, l_stat=3 *** Locks held: * Lock 0 (initialized at netbsd:vhci_attach+0x2b2 sys/dev/usb/vhci.c:1283) lock address : ffff9f000f9886f0 type : sleep/adaptive initialized : netbsd:vhci_attach+0x2b2 shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 1 relevant cpu : 0 last held: 0 relevant lwp : 0xffffdc5d8126fbc0 last held: 0xffffdc5d8126fbc0 last locked* : netbsd:vhci_usb_detach+0x172 unlocked : netbsd:vhci_fd_read+0x652 owner field : 0xffffdc5d8126fbc0 wait/spin: 1/0 Turnstile: => 0 waiting readers: => 1 waiting writers: 0xffffdc5d7b742180 *** Locks wanted: * Lock 0 (initialized at netbsd:vhci_attach+0x1cb sys/dev/usb/vhci.c:1280) lock address : ffff9f000f9884c8 type : sleep/adaptive initialized : netbsd:vhci_attach+0x1cb shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 17 relevant cpu : 0 last held: 1 relevant lwp : 0xffffdc5d8126fbc0 last held: 0xffffdc5d7b742180 last locked* : netbsd:usbd_transfer+0x350 unlocked : netbsd:usb_transfer_complete+0x85d owner field : 0xffffdc5d7b742180 wait/spin: 1/0 Turnstile: => 0 waiting readers: => 17 waiting writers: 0xffffdc5d8126fbc0 0xffffdc5d8e0ea340 0xffffdc5d8260e580 0xffffdc5d8e0eabc0 0xffffdc5d840aa100 0xffffdc5d8aa48140 0xffffdc5d8ec3b040 0xffffdc5d80e77300 0xffffdc5d95c605c0 0xffffdc5d81ab30c0 0xffffdc5d8ec3b8c0 0xffffdc5d981ae280 0xffffdc5d853d52c0 0xffffdc5d9852f240 0xffffdc5d9d2ba040 0xffffdc5d9cb5d780 0xffffdc5d840aa980 ****** LWP 1461.1325 (syz-executor.2) @ 0xffffdc5d8e0ea340, l_stat=3 *** Locks held: none *** Locks wanted: * Lock 0 (initialized at netbsd:vhci_attach+0x1cb sys/dev/usb/vhci.c:1280) lock address : ffff9f000f9884c8 type : sleep/adaptive initialized : netbsd:vhci_attach+0x1cb shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 17 relevant cpu : 1 last held: 1 relevant lwp : 0xffffdc5d8e0ea340 last held: 0xffffdc5d7b742180 last locked* : netbsd:usbd_transfer+0x350 unlocked : netbsd:usb_transfer_complete+0x85d owner field : 0xffffdc5d7b742180 wait/spin: 1/0 Turnstile: => 0 waiting readers: => 17 waiting writers: 0xffffdc5d8126fbc0 0xffffdc5d8e0ea340 0xffffdc5d8260e580 0xffffdc5d8e0eabc0 0xffffdc5d840aa100 0xffffdc5d8aa48140 0xffffdc5d8ec3b040 0xffffdc5d80e77300 0xffffdc5d95c605c0 0xffffdc5d81ab30c0 0xffffdc5d8ec3b8c0 0xffffdc5d981ae280 0xffffdc5d853d52c0 0xffffdc5d9852f240 0xffffdc5d9d2ba040 0xffffdc5d9cb5d780 0xffffdc5d840aa980 ****** LWP 1461.581 (syz-executor.2) @ 0xffffdc5d8260e580, l_stat=3 *** Locks held: none *** Locks wanted: * Lock 0 (initialized at netbsd:vhci_attach+0x1cb sys/dev/usb/vhci.c:1280) lock address : ffff9f000f9884c8 type : sleep/adaptive initialized : netbsd:vhci_attach+0x1cb shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 17 relevant cpu : 0 last held: 1 relevant lwp : 0xffffdc5d8260e580 last held: 0xffffdc5d7b742180 last locked* : netbsd:usbd_transfer+0x350 unlocked : netbsd:usb_transfer_complete+0x85d owner field : 0xffffdc5d7b742180 wait/spin: 1/0 Turnstile: => 0 waiting readers: => 17 waiting writers: 0xffffdc5d8126fbc0 0xffffdc5d8e0ea340 0xffffdc5d8260e580 0xffffdc5d8e0eabc0 0xffffdc5d840aa100 0xffffdc5d8aa48140 0xffffdc5d8ec3b040 0xffffdc5d80e77300 0xffffdc5d95c605c0 0xffffdc5d81ab30c0 0xffffdc5d8ec3b8c0 0xffffdc5d981ae280 0xffffdc5d853d52c0 0xffffdc5d9852f240 0xffffdc5d9d2ba040 0xffffdc5d9cb5d780 0xffffdc5d840aa980 ****** LWP 742.742 (dhcpcd) @ 0xffffdc5d80d43700, l_stat=3 *** Locks held: none *** Locks wanted: * Lock 0 (initialized at netbsd:module_hook_init+0x1c sys/kern/kern_module_hook.c:132) lock address : netbsd:module_hook type : sleep/adaptive initialized : netbsd:module_hook_init+0x1c shared holds : 0 exclusive: 0 shares wanted: 0 exclusive: 0 relevant cpu : 1 last held: 0 relevant lwp : 0xffffdc5d80d43700 last held: 000000000000000000 last locked : 0 unlocked* : 0 owner field : 000000000000000000 wait/spin: 0/0 Turnstile: no active turnstile for this lock. ****** LWP 466.466 (dhcpcd) @ 0xffffdc5d8192d900, l_stat=3 *** Locks held: none *** Locks wanted: * Lock 0 (initialized at netbsd:module_hook_init+0x1c sys/kern/kern_module_hook.c:132) lock address : netbsd:module_hook type : sleep/adaptive initialized : netbsd:module_hook_init+0x1c shared holds : 0 exclusive: 0 shares wanted: 0 exclusive: 0 relevant cpu : 1 last held: 0 relevant lwp : 0xffffdc5d8192d900 last held: 000000000000000000 last locked : 0 unlocked* : 0 owner field : 000000000000000000 wait/spin: 0/0 Turnstile: no active turnstile for this lock. ****** LWP 485.485 (dhcpcd) @ 0xffffdc5d8126f340, l_stat=3 *** Locks held: none *** Locks wanted: * Lock 0 (initialized at netbsd:module_hook_init+0x1c sys/kern/kern_module_hook.c:132) lock address : netbsd:module_hook type : sleep/adaptive initialized : netbsd:module_hook_init+0x1c shared holds : 0 exclusive: 0 shares wanted: 0 exclusive: 0 relevant cpu : 0 last held: 0 relevant lwp : 0xffffdc5d8126f340 last held: 000000000000000000 last locked : 0 unlocked* : 0 owner field : 000000000000000000 wait/spin: 0/0 Turnstile: no active turnstile for this lock. ****** LWP 291.291 (dhcpcd) @ 0xffffdc5d80e77740, l_stat=3 *** Locks held: none *** Locks wanted: * Lock 0 (initialized at netbsd:module_hook_init+0x1c sys/kern/kern_module_hook.c:132) lock address : netbsd:module_hook type : sleep/adaptive initialized : netbsd:module_hook_init+0x1c shared holds : 0 exclusive: 0 shares wanted: 0 exclusive: 0 relevant cpu : 1 last held: 0 relevant lwp : 0xffffdc5d80e77740 last held: 000000000000000000 last locked : 0 unlocked* : 0 owner field : 000000000000000000 wait/spin: 0/0 Turnstile: no active turnstile for this lock. ****** LWP 0.168 (usb5) @ 0xffffdc5d7e7b71c0, l_stat=3 *** Locks held: * Lock 0 (initialized at netbsd:vhci_attach+0x1cb sys/dev/usb/vhci.c:1280) lock address : ffff9f000f9804c8 type : sleep/adaptive initialized : netbsd:vhci_attach+0x1cb shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 8 relevant cpu : 0 last held: 0 relevant lwp : 0xffffdc5d7e7b71c0 last held: 0xffffdc5d7e7b71c0 last locked* : netbsd:usbd_transfer+0x350 unlocked : netbsd:usbd_setup_pipe_flags+0x13c owner field : 0xffffdc5d7e7b71c0 wait/spin: 1/0 Turnstile: => 0 waiting readers: => 8 waiting writers: 0xffffdc5d8192d080 0xffffdc5d99e732c0 0xffffdc5d981aeb00 0xffffdc5d99e73b40 0xffffdc5d8f1da940 0xffffdc5d9d2ba8c0 0xffffdc5d97fdea80 0xffffdc5d9efb1940 *** Locks wanted: * Lock 0 (initialized at netbsd:vhci_attach+0x2b2 sys/dev/usb/vhci.c:1283) lock address : ffff9f000f9806f0 type : sleep/adaptive initialized : netbsd:vhci_attach+0x2b2 shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 1 relevant cpu : 0 last held: 1 relevant lwp : 0xffffdc5d7e7b71c0 last held: 0xffffdc5d8192d080 last locked* : netbsd:vhci_usb_detach+0x172 unlocked : netbsd:vhci_fd_read+0x652 owner field : 0xffffdc5d8192d080 wait/spin: 1/0 Turnstile: => 0 waiting readers: => 1 waiting writers: 0xffffdc5d7e7b71c0 ****** LWP 0.165 (usb2) @ 0xffffdc5d7b742180, l_stat=3 *** Locks held: * Lock 0 (initialized at netbsd:vhci_attach+0x1cb sys/dev/usb/vhci.c:1280) lock address : ffff9f000f9884c8 type : sleep/adaptive initialized : netbsd:vhci_attach+0x1cb shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 17 relevant cpu : 1 last held: 1 relevant lwp : 0xffffdc5d7b742180 last held: 0xffffdc5d7b742180 last locked* : netbsd:usbd_transfer+0x350 unlocked : netbsd:usb_transfer_complete+0x85d owner field : 0xffffdc5d7b742180 wait/spin: 1/0 Turnstile: => 0 waiting readers: => 17 waiting writers: 0xffffdc5d8126fbc0 0xffffdc5d8e0ea340 0xffffdc5d8260e580 0xffffdc5d8e0eabc0 0xffffdc5d840aa100 0xffffdc5d8aa48140 0xffffdc5d8ec3b040 0xffffdc5d80e77300 0xffffdc5d95c605c0 0xffffdc5d81ab30c0 0xffffdc5d8ec3b8c0 0xffffdc5d981ae280 0xffffdc5d853d52c0 0xffffdc5d9852f240 0xffffdc5d9d2ba040 0xffffdc5d9cb5d780 0xffffdc5d840aa980 *** Locks wanted: * Lock 0 (initialized at netbsd:vhci_attach+0x2b2 sys/dev/usb/vhci.c:1283) lock address : ffff9f000f9886f0 type : sleep/adaptive initialized : netbsd:vhci_attach+0x2b2 shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 1 relevant cpu : 1 last held: 0 relevant lwp : 0xffffdc5d7b742180 last held: 0xffffdc5d8126fbc0 last locked* : netbsd:vhci_usb_detach+0x172 unlocked : netbsd:vhci_fd_read+0x652 owner field : 0xffffdc5d8126fbc0 wait/spin: 1/0 Turnstile: => 0 waiting readers: => 1 waiting writers: 0xffffdc5d7b742180 ****** LWP 0.11 (iflnkst) @ 0xffffdc5ea4d5e100, l_stat=3 *** Locks held: none *** Locks wanted: * Lock 0 (initialized at netbsd:module_hook_init+0x1c sys/kern/kern_module_hook.c:132) lock address : netbsd:module_hook type : sleep/adaptive initialized : netbsd:module_hook_init+0x1c shared holds : 0 exclusive: 0 shares wanted: 0 exclusive: 0 relevant cpu : 0 last held: 0 relevant lwp : 0xffffdc5ea4d5e100 last held: 000000000000000000 last locked : 0 unlocked* : 0 owner field : 000000000000000000 wait/spin: 0/0 Turnstile: no active turnstile for this lock. ****** LWP 0.5 (softclk/0) @ 0xffffdc5ea5dba080, l_stat=1 *** Locks held: none *** Locks wanted: * Lock 0 (initialized at netbsd:module_hook_init+0x1c sys/kern/kern_module_hook.c:132) lock address : netbsd:module_hook type : sleep/adaptive initialized : netbsd:module_hook_init+0x1c shared holds : 0 exclusive: 0 shares wanted: 0 exclusive: 0 relevant cpu : 0 last held: 0 relevant lwp : 0xffffdc5ea5dba080 last held: 000000000000000000 last locked : 0 unlocked* : 0 owner field : 000000000000000000 wait/spin: 0/0 Turnstile: no active turnstile for this lock. ****** LWP 0.0 (swapper) @ 0xffffffff86742940, l_stat=3 *** Locks held: none *** Locks wanted: * Lock 0 (initialized at netbsd:module_hook_init+0x1c sys/kern/kern_module_hook.c:132) lock address : netbsd:module_hook type : sleep/adaptive initialized : netbsd:module_hook_init+0x1c shared holds : 0 exclusive: 0 shares wanted: 0 exclusive: 0 relevant cpu : 0 last held: 0 relevant lwp : 0xffffffff86742940 last held: 000000000000000000 last locked : 0 unlocked* : 0 owner field : 000000000000000000 wait/spin: 0/0 Turnstile: no active turnstile for this lock. [Locks tracked through CPUs] ******* Locks held on cpu0: * Lock 0 (initialized at netbsd:tty_init+0x23 sys/kern/tty.c:3073) lock address : netbsd:tty_lock type : spin initialized : netbsd:tty_init+0x23 shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 0 relevant cpu : 0 last held: 0 relevant lwp : 0xffffdc5d853d5700 last held: 0xffffdc5d853d5700 last locked* : netbsd:spec_close+0xae1 unlocked : netbsd:proc_leavepgrp+0x24d owner field : 0x0000000000010600 wait/spin: 0/1 * Lock 1 (initialized at netbsd:kprintf_init+0x72 sys/kern/subr_prf.c:155) lock address : netbsd:kprintf_mtx type : spin initialized : netbsd:kprintf_init+0x72 shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 0 relevant cpu : 0 last held: 0 relevant lwp : 0xffffdc5d853d5700 last held: 0xffffdc5d853d5700 last locked* : netbsd:kprintf_lock+0x50 unlocked : netbsd:kprintf_unlock+0x70 owner field : 0x0000000000000800 wait/spin: 0/1 PAGE FLAG PQ UOBJECT UANON 0xffff9f0000007180 0045 00000000 0x0 0x0 0xffff9f0000007200 0045 00000000 0x0 0x0 0xffff9f0000007280 0045 00000000 0x0 0x0 0xffff9f0000007300 0045 00000000 0x0 0x0 0xffff9f0000007380 0045 00000000 0x0 0x0 0xffff9f0000007400 0045 00000000 0x0 0x0 0xffff9f0000007480 0045 00000000 0x0 0x0 0xffff9f0000007500 0045 00000000 0x0 0x0 0xffff9f0000007580 0045 00000000 0x0 0x0 0xffff9f0000007600 0045 00000000 0x0 0x0 0xffff9f0000007680 0041 00000000 0x0 0x0 0xffff9f0000007700 0041 00000000 0x0 0x0 0xffff9f0000007780 0041 00000000 0x0 0x0 0xffff9f0000007800 0041 00000000 0x0 0x0 0xffff9f0000007880 0045 00000000 0x0 0x0 0xffff9f0000007900 0045 00000000 0x0 0x0 0xffff9f0000007980 0041 00000000 0x0 0x0 0xffff9f0000007a00 0041 00000000 0x0 0x0 0xffff9f0000007a80 0041 00000000 0x0 0x0 0xffff9f0000007b00 0041 00000000 0x0 0x0 0xffff9f0000007b80 0041 00000000 0x0 0x0 0xffff9f0000007c00 0041 00000000 0x0 0x0 0xffff9f0000007c80 0041 00000000 0x0 0x0 0xffff9f0000007d00 0041 00000000 0x0 0x0 0xffff9f0000007d80 0041 00000000 0x0 0x0 0xffff9f0000007e00 0041 00000000 0x0 0x0 0xffff9f0000007e80 0041 00000000 0x0 0x0 0xffff9f0000007f00 0041 00000000 0x0 0x0 0xffff9f0000007f80 0041 00000000 0x0 0x0 0xffff9f0000008000 0041 00000000 0x0 0x0 0xffff9f0000008080 0041 00000000 0x0 0x0 0xffff9f0000008100 0041 00000000 0x0 0x0 0xffff9f0000008180 0041 00000000 0x0 0x0 0xffff9f0000008200 0041 00000000 0x0 0x0 0xffff9f0000008280 0041 00000000 0x0 0x0 0xffff9f0000008300 0041 00000000 0x0 0x0 0xffff9f0000008380 0041 00000000 0x0 0x0 0xffff9f0000008400 0041 00000000 0x0 0x0 0xffff9f0000008480 0041 00000000 0x0 0x0 0xffff9f0000008500 0041 00000000 0x0 0x0 0xffff9f0000008580 0041 00000000 0x0 0x0 0xffff9f0000008600 0045 00000000 0x0 0x0 0xffff9f0000008680 0041 00000000 0x0 0x0 0xffff9f0000008700 0041 00000000 0x0 0x0 0xffff9f0000008780 0041 00000000 0x0 0x0 0xffff9f0000008800 0045 00000000 0x0 0x0 0xffff9f0000008880 0041 00000000 0x0 0x0 0xffff9f0000008900 0041 00000000 0x0 0x0 0xffff9f0000008980 0041 00000000 0x0 0x0 0xffff9f0000008a00 0041 00000000 0x0 0x0 0xffff9f0000008a80 0041 00000000 0x0 0x0 0xffff9f0000008b00 0041 00000000 0x0 0x0 0xffff9f0000008b80 0041 00000000 0x0 0x0 0xffff9f0000008c00 0041 00000000 0x0 0x0 0xffff9f0000008c80 0041 00000000 0x0 0x0 0xffff9f0000008d00 0041 00000000 0x0 0x0 0xffff9f0000008d80 0041 00000000 0x0 0x0 0xffff9f0000008e00 0041 00000000 0x0 0x0 0xffff9f0000008e80 0041 00000000 0x0 0x0 0xffff9f0000008f00 0041 00000000 0x0 0x0 0xffff9f0000008f80 0041 00000000 0x0 0x0 0xffff9f0000009000 0041 00000000 0x0 0x0 0xffff9f0000009080 0041 00000000 0x0 0x0 0xffff9f0000009100 0041 00000000 0x0 0x0 0xffff9f0000009180 0041 00000000 0x0 0x0 0xffff9f0000009200 0041 00000000 0x0 0x0 0xffff9f0000009280 0041 00000000 0x0 0x0 0xffff9f0000009300 0041 00000000 0x0 0x0 0xffff9f0000009380 0041 00000000 0x0 0x0 0xffff9f0000009400 0041 00000000 0x0 0x0 0xffff9f0000009480 0045 00000000 0x0 0x0 0xffff9f0000009500 0041 00000000 0x0 0x0 0xffff9f0000009580 0041 00000000 0x0 0x0 0xffff9f0000009600 0041 00000000 0x0 0x0 0xffff9f0000009680 0041 00000000 0x0 0x0 0xffff9f0000009700 0041 00000000 0x0 0x0 0xffff9f0000009780 0041 00000000 0x0 0x0 0xffff9f0000009800 0041 00000000 0x0 0x0 0xffff9f0000009880 0041 00000000 0x0 0x0 0xffff9f0000009900 0041 00000000 0x0 0x0 0xffff9f0000009980 0041 00000000 0x0 0x0 0xffff9f0000009a00 0041 00000000 0x0 0x0 0xffff9f0000009a80 0045 00000000 0x0 0x0 0xffff9f0000009b00 0041 00000000 0x0 0x0 0xffff9f0000009b80 0041 00000000 0x0 0x0 0xffff9f0000009c00 0041 00000000 0x0 0x0 0xffff9f0000009c80 0041 00000000 0x0 0x0 0xffff9f0000009d00 0041 00000000 0x0 0x0 0xffff9f0000009d80 0041 00000000 0x0 0x0 0xffff9f0000009e00 0041 00000000 0x0 0x0 0xffff9f0000009e80 0041 00000000 0x0 0x0 0xffff9f0000009f00 0041 00000000 0x0 0x0 0xffff9f0000009f80 0041 00000000 0x0 0x0 0xffff9f000000a000 0041 00000000 0x0 0x0 0xffff9f000000a080 0041 00000000 0x0 0x0 0xffff9f000000a100 0041 00000000 0x0 0x0 0xffff9f000000a180 0041 00000000 0x0 0x0 0xffff9f000000a200 0041 00000000 0x0 0x0 0xffff9f000000a280 0041 00000000 0x0 0x0 0xffff9f000000a300 0041 00000000 0x0 0x0 0xffff9f000000a380 0041 00000000 0x0 0x0 0xffff9f000000a400 0041 00000000 0x0 0x0 0xffff9f000000a480 0041 00000000 0x0 0x0 0xffff9f000000a500 0041 00000000 0x0 0x0 0xffff9f000000a580 0041 00000000 0x0 0x0 0xffff9f000000a600 0041 00000000 0x0 0x0 0xffff9f000000a680 0041 00000000 0x0 0x0 0xffff9f000000a700 0041 00000000 0x0 0x0 0xffff9f000000a780 0041 00000000 0x0 0x0 0xffff9f000000a800 0041 00000000 0x0 0x0 0xffff9f000000a880 0041 00000000 0x0 0x0 0xffff9f000000a900 0041 00000000 0x0 0x0 0xffff9f000000a980 0041 00000000 0x0 0x0 0xffff9f000000aa00 0041 00000000 0x0 0x0 0xffff9f000000aa80 0041 00000000 0x0 0x0 0xffff9f000000ab00 0041 00000000 0x0 0x0 0xffff9f000000ab80 0041 00000000 0x0 0x0 0xffff9f000000ac00 0041 00000000 0x0 0x0 0xffff9f000000ac80 0041 00000000 0x0 0x0 0xffff9f000000ad00 0041 00000000 0x0 0x0 0xffff9f000000ad80 0041 00000000 0x0 0x0 0xffff9f000000ae00 0041 00000000 0x0 0x0 0xffff9f000000ae80 0045 00000000 0x0 0x0 0xffff9f000000af00 0045 00000000 0x0 0x0 0xffff9f000000af80 0045 00000000 0x0 0x0 0xffff9f000000b000 0041 00000000 0x0 0x0 0xffff9f000000b080 0041 00000000 0x0 0x0 0xffff9f000000b100 0041 00000000 0x0 0x0 0xffff9f000000b180 0045 00000000 0x0 0x0 0xffff9f000000b200 0041 00000000 0x0 0x0 0xffff9f000000b280 0045 00000000 0x0 0x0 0xffff9f000000b300 0045 00000000 0x0 0x0 0xffff9f000000b380 0045 00000000 0x0 0x0 0xffff9f000000b400 0041 00000000 0x0 0x0 0xffff9f000000b480 0041 00000000 0x0 0x0 0xffff9f000000b500 0045 00000000 0x0 0x0 0xffff9f000000b580 0045 00000000 0x0 0x0 0xffff9f000000b600 0045 00000000 0x0 0x0 0xffff9f000000b680 0045 00000000 0x0 0x0 0xffff9f000000b700 0045 00000000 0x0 0x0 0xffff9f000000b780 0045 00000000 0x0 0x0 0xffff9f000000b800 0045 00000000 0x0 0x0 0xffff9f000000b880 0041 00000000 0x0 0x0 0xffff9f000000b900 0045 00000000 0x0 0x0 0xffff9f000000b980 0045 00000000 0x0 0x0 0xffff9f000000ba00 0045 00000000 0x0 0x0 0xffff9f000000ba80 0045 00000000 0x0 0x0 0xffff9f000000bb00 0045 00000000 0x0 0x0 0xffff9f000000bb80 0045 00000000 0x0 0x0 0xffff9f000000bc00 0045 00000000 0x0 0x0 0xffff9f000000bc80 0041 00000000 0x0 0x0 0xffff9f000000bd00 0045 00000000 0x0 0x0 0xffff9f000000bd80 0045 00000000 0x0 0x0 0xffff9f000000be00 0045 00000000 0x0 0x0 0xffff9f000000be80 0045 00000000 0x0 0x0 0xffff9f000000bf00 0045 00000000 0x0 0x0 0xffff9f000000bf80 0045 00000000 0x0 0x0 0xffff9f000000c000 0045 00000000 0x0 0x0 0xffff9f000000c080 0041 00000000 0x0 0x0 0xffff9f000000c100 0045 00000000 0x0 0x0 0xffff9f000000c180 0045 00000000 0x0 0x0 0xffff9f000000c200 0045 00000000 0x0 0x0 0xffff9f000000c280 0045 00000000 0x0 0x0 0xffff9f000000c300 0045 00000000 0x0 0x0 0xffff9f000000c380 0045 00000000 0x0 0x0 0xffff9f000000c400 0045 00000000 0x0 0x0 0xffff9f000000c480 0045 00000000 0x0 0x0 0xffff9f000000c500 0045 00000000 0x0 0x0 0xffff9f000000c580 0045 00000000 0x0 0x0 0xffff9f000000c600 0045 00000000 0x0 0x0 0xffff9f000000c680 0045 00000000 0x0 0x0 0xffff9f000000c700 0041 00000000 0x0 0x0 0xffff9f000000c780 0041 00000000 0x0 0x0 0xffff9f000000c800 0045 00000000 0x0 0x0 0xffff9f000000c880 0045 00000000 0x0 0x0 0xffff9f000000c900 0045 00000000 0x0 0x0 0xffff9f000000c980 0045 00000000 0x0 0x0 0xffff9f000000ca00 0045 00000000 0x0 0x0 0xffff9f000000ca80 0041 00000000 0x0 0x0 0xffff9f000000cb00 0041 00000000 0x0 0x0 0xffff9f000000cb80 0041 00000000 0x0 0x0 0xffff9f000000cc00 0045 00000000 0x0 0x0 0xffff9f000000cc80 0045 00000000 0x0 0x0 0xffff9f000000cd00 0045 00000000 0x0 0x0 0xffff9f000000cd80 0041 00000000 0x0 0x0 0xffff9f000000ce00 0045 00000000 0x0 0x0 0xffff9f000000ce80 0041 00000000 0x0 0x0 0xffff9f000000cf00 0041 00000000 0x0 0x0 0xffff9f000000cf80 0041 00000000 0x0 0x0 0xffff9f000000d000 0041 00000000 0x0 0x0 0xffff9f000000d080 0045 00000000 0x0 0x0 0xffff9f000000d100 0041 00000000 0x0 0x0 0xffff9f000000d180 0041 00000000 0x0 0x0 0xffff9f000000d200 0041 00000000 0x0 0x0 0xffff9f000000d280 0041 00000000 0x0 0x0 0xffff9f000000d300 0045 00000000 0x0 0x0 0xffff9f000000d380 0041 00000000 0x0 0x0 0xffff9f000000d400 0041 00000000 0x0 0x0 0xffff9f000000d480 0045 00000000 0x0 0x0 0xffff9f000000d500 0041 00000000 0x0 0x0 0xffff9f000000d580 0041 00000000 0x0 0x0 0xffff9f000000d600 0041 00000000 0x0 0x0 0xffff9f000000d680 0045 00000000 0x0 0x0 0xffff9f000000d700 0041 00000000 0x0 0x0 0xffff9f000000d780 0045 00000000 0x0 0x0 0xffff9f000000d800 0041 00000000 0x0 0x0 0xffff9f000000d880 0045 00000000 0x0 0x0 0xffff9f000000d900 0041 00000000 0x0 0x0 0xffff9f000000d980 0041 00000000 0x0 0x0 0xffff9f000000da00 0041 00000000 0x0 0x0 0xffff9f000000da80 0041 00000000 0x0 0x0 0xffff9f000000db00 0045 00000000 0x0 0x0 0xffff9f000000db80 0045 00000000 0x0 0x0 0xffff9f000000dc00 0041 00000000 0x0 0x0 0xffff9f000000dc80 0041 00000000 0x0 0x0 0xffff9f000000dd00 0041 00000000 0x0 0x0 0xffff9f000000dd80 0041 00000000 0x0 0x0 0xffff9f000000de00 0041 00000000 0x0 0x0 0xffff9f000000de80 0041 00000000 0x0 0x0 0xffff9f000000df00 0045 00000000 0x0 0x0 0xffff9f000000df80 0045 00000000 0x0 0x0 0xffff9f000000e000 0045 00000000 0x0 0x0 0xffff9f000000e080 0041 00000000 0x0 0x0 0xffff9f000000e100 0041 00000000 0x0 0x0 0xffff9f000000e180 0045 00000000 0x0 0x0 0xffff9f000000e200 0041 00000000 0x0 0x0 0xffff9f000000e280 0045 00000000 0x0 0x0 0xffff9f000000e300 0045 00000000 0x0 0x0 0xffff9f000000e380 0041 00000000 0x0 0x0 0xffff9f000000e400 0045 00000000 0x0 0x0 0xffff9f000000e480 0041 00000000 0x0 0x0 0xffff9f000000e500 0045 00000000 0x0 0x0 0xffff9f000000e580 0041 00000000 0x0 0x0 0xffff9f000000e600 0045 00000000 0x0 0x0 0xffff9f000000e680 0041 00000000 0x0 0x0 0xffff9f000000e700 0041 00000000 0x0 0x0 0xffff9f000000e780 0041 00000000 0x0 0x0 0xffff9f000000e800 0045 00000000 0x0 0x0 0xffff9f000000e880 0041 00000000 0x0 0x0 0xffff9f000000e900 0041 00000000 0x0 0x0 0xffff9f000000e980 0041 00000000 0x0 0x0 0xffff9f000000ea00 0041 00000000 0x0 0x0 0xffff9f000000ea80 0045 00000000 0x0 0x0 0xffff9f000000eb00 0041 00000000 0x0 0x0 0xffff9f000000eb80 0045 00000000 0x0 0x0 0xffff9f000000ec00 0041 00000000 0x0 0x0 0xffff9f000000ec80 0045 00000000 0x0 0x0 0xffff9f000000ed00 0041 00000000 0x0 0x0 0xffff9f000000ed80 0041 00000000 0x0 0x0 0xffff9f000000ee00 0041 00000000 0x0 0x0 0xffff9f000000ee80 0041 00000000 0x0 0x0 0xffff9f000000ef00 0041 00000000 0x0 0x0 0xffff9f000000ef80 0041 00000000 0x0 0x0 0xffff9f000000f000 0041 00000000 0x0 0x0 0xffff9f000000f080 0045 00000000 0x0 0x0 0xffff9f000000f100 0041 00000000 0x0 0x0 0xffff9f000000f180 0041 00000000 0x0 0x0 0xffff9f000000f200 0041 00000000 0x0 0x0 0xffff9f000000f280 0045 00000000 0x0 0x0 0xffff9f000000f300 0041 00000000 0x0 0x0 0xffff9f000000f380 0041 00000000 0x0 0x0 0xffff9f000000f400 0045 00000000 0x0 0x0 0xffff9f000000f480 0041 00000000 0x0 0x0 0xffff9f000000f500 0041 00000000 0x0 0x0 0xffff9f000000f580 0041 00000000 0x0 0x0 0xffff9f000000f600 0041 00000000 0x0 0x0 0xffff9f000000f680 0041 00000000 0x0 0x0 0xffff9f000000f700 0041 00000000 0x0 0x0 0xffff9f000000f780 0041 00000000 0x0 0x0 0xffff9f000000f800 0041 00000000 0x0 0x0 0xffff9f000000f880 0045 00000000 0x0 0x0 0xffff9f000000f900 0041 00000000 0x0 0x0 0xffff9f000000f980 0045 00000000 0x0 0x0 0xffff9f000000fa00 0041 00000000 0x0 0x0 0xffff9f000000fa80 0041 00000000 0x0 0x0 0xffff9f000000fb00 0041 00000000 0x0 0x0 0xffff9f000000fb80 0041 00000000 0x0 0x0 0xffff9f000000fc00 0045 00000000 0x0 0x0 0xffff9f000000fc80 0041 00000000 0x0 0x0 0xffff9f000000fd00 0045 00000000 0x0 0x0 0xffff9f000000fd80 0041 00000000 0x0 0x0 0xffff9f000000fe00 0041 00000000 0x0 0x0 0xffff9f000000fe80 0041 00000000 0x0 0x0 0xffff9f000000ff00 0041 00000000 0x0 0x0 0xffff9f000000ff80 0041 00000000 0x0 0x0 0xffff9f0000010000 0041 00000000 0x0 0x0 0xffff9f0000010080 0045 00000000 0x0 0x0 0xffff9f0000010100 0041 00000000 0x0 0x0 0xffff9f0000010180 0045 00000000 0x0 0x0 0xffff9f0000010200 0045 00000000 0x0 0x0 0xffff9f0000010280 0041 00000000 0x0 0x0 0xffff9f0000010300 0041 00000000 0x0 0x0 0xffff9f0000010380 0041 00000000 0x0 0x0 0xffff9f0000010400 0041 00000000 0x0 0x0 0xffff9f0000010480 0041 00000000 0x0 0x0 0xffff9f0000010500 0045 00000000 0x0 0x0 0xffff9f0000010580 0041 00000000 0x0 0x0 0xffff9f0000010600 0041 00000000 0x0 0x0 0xffff9f0000010680 0045 00000000 0x0 0x0 0xffff9f0000010700 0041 00000000 0x0 0x0 0xffff9f0000010780 0041 00000000 0x0 0x0 0xffff9f0000010800 0041 00000000 0x0 0x0 0xffff9f0000010880 0041 00000000 0x0 0x0 0xffff9f0000010900 0041 00000000 0x0 0x0 0xffff9f0000010980 0045 00000000 0x0 0x0 0xffff9f0000010a00 0045 00000000 0x0 0x0 0xffff9f0000010a80 0041 00000000 0x0 0x0 0xffff9f0000010b00 0041 00000000 0x0 0x0 0xffff9f0000010b80 0041 00000000 0x0 0x0 0xffff9f0000010c00 0041 00000000 0x0 0x0 0xffff9f0000010c80 0045 00000000 0x0 0x0 0xffff9f0000010d00 0041 00000000 0x0 0x0 0xffff9f0000010d80 0041 00000000 0x0 0x0 0xffff9f0000010e00 0041 00000000 0x0 0x0 0xffff9f0000010e80 0045 00000000 0x0 0x0 0xffff9f0000010f00 0041 00000000 0x0 0x0 0xffff9f0000010f80 0041 00000000 0x0 0x0 0xffff9f0000011000 0041 00000000 0x0 0x0 0xffff9f0000011080 0041 00000000 0x0 0x0 0xffff9f0000011100 0041 00000000 0x0 0x0 0xffff9f0000011180 0041 00000000 0x0 0x0 0xffff9f0000011200 0045 00000000 0x0 0x0 0xffff9f0000011280 0041 00000000 0x0 0x0 0xffff9f0000011300 0041 00000000 0x0 0x0 0xffff9f0000011380 0041 00000000 0x0 0x0 0xffff9f0000011400 0041 00000000 0x0 0x0 0xffff9f0000011480 0045 00000000 0x0 0x0 0xffff9f0000011500 0045 00000000 0x0 0x0 0xffff9f0000011580 0041 00000000 0x0 0x0 0xffff9f0000011600 0041 00000000 0x0 0x0 0xffff9f0000011680 0041 00000000 0x0 0x0 0xffff9f0000011700 0045 00000000 0x0 0x0 0xffff9f0000011780 0045 00000000 0x0 0x0 0xffff9f0000011800 0041 00000000 0x0 0x0 0xffff9f0000011880 0041 00000000 0x0 0x0 0xffff9f0000011900 0041 00000000 0x0 0x0 0xffff9f0000011980 0041 00000000 0x0 0x0 0xffff9f0000011a00 0041 00000000 0x0 0x0 0xffff9f0000011a80 0041 00000000 0x0 0x0 0xffff9f0000011b00 0041 00000000 0x0 0x0 0xffff9f0000011b80 0041 00000000 0x0 0x0 0xffff9f0000011c00 0041 00000000 0x0 0x0 0xffff9f0000011c80 0041 00000000 0x0 0x0 0xffff9f0000011d00 0041 00000000 0x0 0x0 0xffff9f0000011d80 0041 00000000 0x0 0x0 0xffff9f0000011e00 0045 00000000 0x0 0x0 0xffff9f0000011e80 0041 00000000 0x0 0x0 0xffff9f0000011f00 0041 00000000 0x0 0x0 0xffff9f0000011f80 0041 00000000 0x0 0x0 0xffff9f0000012000 0041 00000000 0x0 0x0 0xffff9f0000012080 0041 00000000 0x0 0x0 0xffff9f0000012100 0045 00000000 0x0 0x0 0xffff9f0000012180 0045 00000000 0x0 0x0 0xffff9f0000012200 0041 00000000 0x0 0x0 0xffff9f0000012280 0045 00000000 0x0 0x0 0xffff9f0000012300 0041 00000000 0x0 0x0 0xffff9f0000012380 0041 00000000 0x0 0x0 0xffff9f0000012400 0041 00000000 0x0 0x0 0xffff9f0000012480 0041 00000000 0x0 0x0 0xffff9f0000012500 0041 00000000 0x0 0x0 0xffff9f0000012580 0041 00000000 0x0 0x0 0xffff9f0000012600 0041 00000000 0x0 0x0 0xffff9f0000012680 0041 00000000 0x0 0x0 0xffff9f0000012700 0041 00000000 0x0 0x0 0xffff9f0000012780 0041 00000000 0x0 0x0 0xffff9f0000012800 0041 00000000 0x0 0x0 0xffff9f0000012880 0041 00000000 0x0 0x0 0xffff9f0000012900 0041 00000000 0x0 0x0 0xffff9f0000012980 0041 00000000 0x0 0x0 0xffff9f0000012a00 0041 00000000 0x0 0x0 0xffff9f0000012a80 0041 00000000 0x0 0x0 0xffff9f0000012b00 0041 00000000 0x0 0x0 0xffff9f0000012b80 0041 00000000 0x0 0x0 0xffff9f0000012c00 0041 00000000 0x0 0x0 0xffff9f0000012c80 0041 00000000 0x0 0x0 0xffff9f0000012d00 0041 00000000 0x0 0x0 0xffff9f0000012d80 0041 00000000 0x0 0x0 0xffff9f0000012e00 0041 00000000 0x0 0x0 0xffff9f0000012e80 0041 00000000 0x0 0x0 0xffff9f0000012f00 0041 00000000 0x0 0x0 0xffff9f0000012f80 0041 00000000 0x0 0x0 0xffff9f0000013000 0041 00000000 0x0 0x0 0xffff9f0000013080 0045 00000000 0x0 0x0 0xffff9f0000013100 0001 00000000 0x0 0x0 0xffff9f0000013180 0001 00000000 0x0 0x0 0xffff9f0000013200 0001 00000000 0x0 0x0 0xffff9f0000013280 0001 00000000 0x0 0x0 0xffff9f0000013300 0001 00000000 0x0 0x0 0xffff9f0000013380 0001 00000000 0x0 0x0 0xffff9f0000013400 0001 00000000 0x0 0x0 0xffff9f0000013480 0001 00000000 0x0 0x0 0xffff9f0000013500 0001 00000000 0x0 0x0 0xffff9f0000013580 0001 00000000 0x0 0x0 0xffff9f0000013600 0001 00000000 0x0 0x0