Concurrent writer/reader cursor updates on msg_bufl unsynchronized

Summary

msg_bufl written by logread(:185) and msgaddchar(subr_prf.c:1064) with no atomic/lock. cpu_ccfence is compiler barrier only. Lost update -> duplicated/skipped log lines. No OOB (modular indexing bounds uiomove). Data integrity only.