ASan: Unauthorized Access in rf_UnconfigureVnodes

4 views
Skip to first unread message

syzbot

unread,
Aug 5, 2022, 1:33:26 PM8/5/22
to syzkaller-...@googlegroups.com
Hello,

syzbot found the following issue on:

HEAD commit: 80c847fb084f In vcache_reclaim(), post NOTE_REVOKE immedia..
git tree: netbsd
console output: https://syzkaller.appspot.com/x/log.txt?x=16abfa46080000
kernel config: https://syzkaller.appspot.com/x/.config?x=fab579639ba4bf0a
dashboard link: https://syzkaller.appspot.com/bug?extid=6d9de9d7af3afd945eac
compiler: g++ (Debian 10.2.1-6) 10.2.1 20210110
syz repro: https://syzkaller.appspot.com/x/repro.syz?x=14696466080000

IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+6d9de9...@syzkaller.appspotmail.com

[ 38.9702726] panic: ASan: Unauthorized Access In 0xffffffff816ac4f9: Addr 0xffff968013d58e68 [8 bytes, read, MallocRedZone]

[ 38.9875494] cpu0: Begin traceback...
[ 38.9911001] vpanic() at netbsd:vpanic+0x282 sys/kern/subr_prf.c:293
[ 39.0302674] panic() at netbsd:panic+0x9e sys/kern/subr_prf.c:1043
[ 39.0502692] kasan_report() at netbsd:kasan_report+0x8f kasan_code_name sys/kern/subr_asan.c:168 [inline]
[ 39.0502692] kasan_report() at netbsd:kasan_report+0x8f sys/kern/subr_asan.c:200
[ 39.0802701] __asan_load8() at netbsd:__asan_load8+0xac kasan_shadow_8byte_isvalid sys/kern/subr_asan.c:370 [inline]
[ 39.0802701] __asan_load8() at netbsd:__asan_load8+0xac kasan_shadow_check sys/kern/subr_asan.c:420 [inline]
[ 39.0802701] __asan_load8() at netbsd:__asan_load8+0xac sys/kern/subr_asan.c:1207
[ 39.1002671] rf_UnconfigureVnodes() at netbsd:rf_UnconfigureVnodes+0x77 sys/dev/raidframe/rf_netbsdkintf.c:2704
[ 39.1302667] rf_ConfigureDisks() at netbsd:rf_ConfigureDisks+0x2b8 sys/dev/raidframe/rf_disks.c:227
[ 39.1602674] rf_Configure() at netbsd:rf_Configure+0x102c sys/dev/raidframe/rf_driver.c:373
[ 39.1802699] rf_construct() at netbsd:rf_construct+0x178 sys/dev/raidframe/rf_netbsdkintf.c:1265
[ 39.2102672] raidioctl() at netbsd:raidioctl+0x2289 sys/dev/raidframe/rf_netbsdkintf.c:1490
[ 39.2302714] cdev_ioctl() at netbsd:cdev_ioctl+0x1e7 sys/kern/subr_devsw.c:1248
[ 39.2602672] spec_ioctl() at netbsd:spec_ioctl+0x148 sys/miscfs/specfs/spec_vnops.c:1294
[ 39.2802685] VOP_IOCTL() at netbsd:VOP_IOCTL+0x132 sys/kern/vnode_if.c:934
[ 39.3102675] vn_ioctl() at netbsd:vn_ioctl+0x1ba sys/kern/vfs_vnops.c:865
[ 39.3302683] sys_ioctl() at netbsd:sys_ioctl+0x8f6 sys/kern/sys_generic.c:675
[ 39.3602703] sys___syscall() at netbsd:sys___syscall+0x10e sy_call sys/sys/syscallvar.h:65 [inline]
[ 39.3602703] sys___syscall() at netbsd:sys___syscall+0x10e sys/kern/sys_syscall.c:90
[ 39.3802708] syscall() at netbsd:syscall+0x25a sy_call sys/sys/syscallvar.h:65 [inline]
[ 39.3802708] syscall() at netbsd:syscall+0x25a sy_invoke sys/sys/syscallvar.h:94 [inline]
[ 39.3802708] syscall() at netbsd:syscall+0x25a sys/arch/x86/x86/syscall.c:138
[ 39.3903846] --- syscall (number 54 via SYS_syscall) ---
[ 39.4020402] netbsd:syscall+0x25a:
[ 39.4106419] cpu0: End traceback...
[ 39.4106419] fatal breakpoint trap in supervisor mode
[ 39.4106419] trap type 1 code 0 rip 0xffffffff80220a4d cs 0x8 rflags 0x286 cr2 0x61b000 ilevel 0 rsp 0xffff9682485c93d0
[ 39.4298710] curlwp 0xffff968013cca600 pid 1130.1130 lowest kstack 0xffff9682485c22c0
Stopped in pid 1130.1130 (syz-executor.0) at netbsd:breakpoint+0x5: leave
?
breakpoint() at netbsd:breakpoint+0x5
db_panic() at netbsd:db_panic+0x105 sys/ddb/db_panic.c:69
vpanic() at netbsd:vpanic+0x282 sys/kern/subr_prf.c:293
panic() at netbsd:panic+0x9e sys/kern/subr_prf.c:1043
kasan_report() at netbsd:kasan_report+0x8f kasan_code_name sys/kern/subr_asan.c:168 [inline]
kasan_report() at netbsd:kasan_report+0x8f sys/kern/subr_asan.c:200
__asan_load8() at netbsd:__asan_load8+0xac kasan_shadow_8byte_isvalid sys/kern/subr_asan.c:370 [inline]
__asan_load8() at netbsd:__asan_load8+0xac kasan_shadow_check sys/kern/subr_asan.c:420 [inline]
__asan_load8() at netbsd:__asan_load8+0xac sys/kern/subr_asan.c:1207
rf_UnconfigureVnodes() at netbsd:rf_UnconfigureVnodes+0x77 sys/dev/raidframe/rf_netbsdkintf.c:2704
rf_ConfigureDisks() at netbsd:rf_ConfigureDisks+0x2b8 sys/dev/raidframe/rf_disks.c:227
rf_Configure() at netbsd:rf_Configure+0x102c sys/dev/raidframe/rf_driver.c:373
rf_construct() at netbsd:rf_construct+0x178 sys/dev/raidframe/rf_netbsdkintf.c:1265
raidioctl() at netbsd:raidioctl+0x2289 sys/dev/raidframe/rf_netbsdkintf.c:1490
cdev_ioctl() at netbsd:cdev_ioctl+0x1e7 sys/kern/subr_devsw.c:1248
spec_ioctl() at netbsd:spec_ioctl+0x148 sys/miscfs/specfs/spec_vnops.c:1294
VOP_IOCTL() at netbsd:VOP_IOCTL+0x132 sys/kern/vnode_if.c:934
vn_ioctl() at netbsd:vn_ioctl+0x1ba sys/kern/vfs_vnops.c:865
sys_ioctl() at netbsd:sys_ioctl+0x8f6 sys/kern/sys_generic.c:675
sys___syscall() at netbsd:sys___syscall+0x10e sy_call sys/sys/syscallvar.h:65 [inline]
sys___syscall() at netbsd:sys___syscall+0x10e sys/kern/sys_syscall.c:90
syscall() at netbsd:syscall+0x25a sy_call sys/sys/syscallvar.h:65 [inline]
syscall() at netbsd:syscall+0x25a sy_invoke sys/sys/syscallvar.h:94 [inline]
syscall() at netbsd:syscall+0x25a sys/arch/x86/x86/syscall.c:138
--- syscall (number 54 via SYS_syscall) ---
netbsd:syscall+0x25a:
Panic string: ASan: Unauthorized Access In 0xffffffff816ac4f9: Addr 0xffff968013d58e68 [8 bytes, read, MallocRedZone]

PID LID S CPU FLAGS STRUCT LWP * NAME WAIT
1130 >1130 7 0 0 ffff968013cca600 syz-executor.0
1195 1195 2 0 140 ffff9680133b5ac0 syz-executor.0
1221 1151 3 1 180 ffff968013cca1c0 syz-execprog wait
1221 1220 3 1 180 ffff9680133b5680 syz-execprog kqueue
1221 1105 3 1 180 ffff968012b5d100 syz-execprog parked
1221 1075 3 1 180 ffff9680134749c0 syz-execprog parked
1221 1223 3 0 180 ffff968013474580 syz-execprog parked
1221 1194 3 0 1c0 ffff96801343b4c0 syz-execprog parked
1221 1222 3 0 180 ffff9680129ff740 syz-execprog parked
1221 1221 3 1 40180 ffff968012a9c080 syz-execprog parked
1078 1078 3 1 180 ffff968012b410c0 sshd select
1076 1076 3 1 180 ffff968013474140 getty nanoslp
1070 1070 3 1 180 ffff968013c32a00 getty nanoslp
1069 1069 3 1 180 ffff968013c325c0 getty nanoslp
1126 1126 3 1 1c0 ffff9680126ca040 getty ttyraw
926 926 3 1 180 ffff968013390600 sshd select
953 953 3 0 180 ffff968012d006c0 powerd kqueue
689 689 3 1 180 ffff9680133c8b00 syslogd kqueue
602 602 3 0 180 ffff968012bf4ac0 dhcpcd poll
547 547 3 0 180 ffff968012c8c900 dhcpcd poll
464 464 3 0 180 ffff968012bf4680 dhcpcd poll
587 587 3 1 180 ffff968012c4d300 dhcpcd poll
289 289 3 0 180 ffff968012d91080 dhcpcd poll
288 288 3 0 180 ffff968012d7f8c0 dhcpcd poll
351 351 3 0 180 ffff968012d7f480 dhcpcd poll
1 1 3 1 180 ffff9680126fd9c0 init wait
0 1103 2 0 200 ffff968013d57200 raidio0
0 > 972 7 1 200 ffff968013ccaa40 raid0
0 968 3 0 200 ffff968012974ac0 physiod physiod
0 194 3 0 200 ffff96801298bb00 pooldrain pooldrain
0 193 3 1 200 ffff96801298b6c0 ioflush syncer
0 192 3 1 200 ffff96801298b280 pgdaemon pgdaemon
0 169 3 0 200 ffff968012974240 usb7 usbevt
0 167 3 0 200 ffff96801292da80 usb6 usbevt
0 165 3 0 200 ffff96801292d640 usb5 usbevt
0 164 3 0 200 ffff96801292d200 usb4 usbevt
0 31 3 0 200 ffff9680128e1a40 usb3 usbevt
0 63 3 0 200 ffff9680128e1600 usb2 usbevt
0 126 3 0 200 ffff9680128e11c0 usb1 usbevt
0 125 3 1 200 ffff968012870a00 usb0 usbevt
0 124 3 0 200 ffff9680128705c0 usbtask-dr usbtsk
0 123 3 0 200 ffff9680120b66c0 usbtask-hc usbtsk
0 122 3 0 200 ffff968012870180 npfgc0 npfgcw
0 121 3 0 200 ffff9680126fd580 rt_free rt_free
0 120 3 0 200 ffff9680126fd140 unpgc unpgc
0 119 3 0 200 ffff9680126f5980 key_timehandler key_timehandler
0 118 3 1 200 ffff9680126f5540 icmp6_wqinput/1 icmp6_wqinput
0 117 3 0 200 ffff9680126f5100 icmp6_wqinput/0 icmp6_wqinput
0 116 3 0 200 ffff9680126ec940 nd6_timer nd6_timer
0 115 3 1 200 ffff9680126ec500 carp6_wqinput/1 carp6_wqinput
0 114 3 0 200 ffff9680126ec0c0 carp6_wqinput/0 carp6_wqinput
0 113 3 1 200 ffff9680126dd900 carp_wqinput/1 carp_wqinput
0 112 3 0 200 ffff9680126dd4c0 carp_wqinput/0 carp_wqinput
0 111 3 1 200 ffff9680126dd080 icmp_wqinput/1 icmp_wqinput
0 110 3 0 200 ffff9680126ca8c0 icmp_wqinput/0 icmp_wqinput
0 109 3 0 200 ffff9680126ca480 rt_timer rt_timer
0 108 3 1 200 ffff9680126c9bc0 vmem_rehash vmem_rehash
0 99 3 0 200 ffff9680120bbb40 entbutler entropy
0 98 3 1 200 ffff9680120bb700 viomb balloon
0 97 3 1 200 ffff9680120bb2c0 vioif0_txrx/1 vioif0_txrx
0 96 3 0 200 ffff9680120b6b00 vioif0_txrx/0 vioif0_txrx
0 29 3 0 200 ffff9680120b6280 scsibus0 sccomp
0 28 3 0 200 ffff968010cb9ac0 pms0 pmsreset
0 27 3 1 200 ffff968010cb9680 xcall/1 xcall
0 26 1 1 200 ffff968010cb9240 softser/1
0 > 25 7 1 200 ffff968010cb8a80 softclk/1
0 24 1 1 200 ffff968010cb8640 softbio/1
0 23 1 1 200 ffff968010cb8200 softnet/1
0 22 1 1 201 ffff96800fb55a40 idle/1
0 21 3 0 200 ffff96800fb55600 lnxsyswq lnxsyswq
0 20 3 0 200 ffff96800fb551c0 lnxubdwq lnxubdwq
0 19 3 0 200 ffff96800fb54a00 lnxpwrwq lnxpwrwq
0 18 3 0 200 ffff96800fb545c0 lnxlngwq lnxlngwq
0 17 3 0 200 ffff96800fb54180 lnxhipwq lnxhipwq
0 16 3 0 200 ffff96800fb4b9c0 lnxrcugc lnxrcugc
0 15 3 0 200 ffff96800fb4b580 sysmon smtaskq
0 14 3 0 200 ffff96800fb4b140 pmfsuspend pmfsuspend
0 13 3 0 200 ffff96800fb48980 pmfevent pmfevent
0 12 3 0 200 ffff96800fb48540 sopendfree sopendfr
0 11 3 1 200 ffff96800fb48100 iflnkst iflnkst
0 10 3 0 200 ffff96800fb3c940 nfssilly nfssilly
0 9 3 0 200 ffff96800fb3c500 vdrain vdrain
0 8 3 0 200 ffff96800fb3c0c0 modunload mod_unld
0 7 3 0 200 ffff96800fb33900 xcall/0 xcall
0 6 1 0 200 ffff96800fb334c0 softser/0
0 5 1 0 200 ffff96800fb33080 softclk/0
0 4 1 0 200 ffff96800fb318c0 softbio/0
0 3 1 0 200 ffff96800fb31480 softnet/0
0 2 1 0 201 ffff96800fb31040 idle/0
0 0 3 0 200 ffffffff83341640 swapper uvm
[Locks tracked through LWPs]

****** LWP 547.547 (dhcpcd) @ 0xffff968012c8c900, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at module_hook_init)
lock address : 0xffffffff83480ac0 type : sleep/adaptive
initialized : 0xffffffff81b11b91
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffff968012c8c900 last held: 000000000000000000
last locked : 000000000000000000 unlocked*: 000000000000000000
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 464.464 (dhcpcd) @ 0xffff968012bf4680, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at module_hook_init)
lock address : 0xffffffff83480ac0 type : sleep/adaptive
initialized : 0xffffffff81b11b91
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffff968012bf4680 last held: 000000000000000000
last locked : 000000000000000000 unlocked*: 000000000000000000
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 288.288 (dhcpcd) @ 0xffff968012d7f8c0, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at module_hook_init)
lock address : 0xffffffff83480ac0 type : sleep/adaptive
initialized : 0xffffffff81b11b91
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffff968012d7f8c0 last held: 000000000000000000
last locked : 000000000000000000 unlocked*: 000000000000000000
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 351.351 (dhcpcd) @ 0xffff968012d7f480, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at module_hook_init)
lock address : 0xffffffff83480ac0 type : sleep/adaptive
initialized : 0xffffffff81b11b91
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffff968012d7f480 last held: 000000000000000000
last locked : 000000000000000000 unlocked*: 000000000000000000
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 0.972 (raid0) @ 0xffff968013ccaa40, l_stat=7

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at main)
lock address : 0xffffffff834809c0 type : spin
initialized : 0xffffffff81f6664e
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 1
relevant cpu : 1 last held: 0
relevant lwp : 0xffff968013ccaa40 last held: 0xffff968013cca600
last locked* : 0xffffffff81b9e896 unlocked : 0xffffffff81b9e8ce
curcpu holds : 1 wanted by: 000000000000000000

****** LWP 0.11 (iflnkst) @ 0xffff96800fb48100, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at module_hook_init)
lock address : 0xffffffff83480ac0 type : sleep/adaptive
initialized : 0xffffffff81b11b91
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 0
relevant lwp : 0xffff96800fb48100 last held: 000000000000000000
last locked : 000000000000000000 unlocked*: 000000000000000000
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 0.5 (softclk/0) @ 0xffff96800fb33080, l_stat=1

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at module_hook_init)
lock address : 0xffffffff83480ac0 type : sleep/adaptive
initialized : 0xffffffff81b11b91
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffff96800fb33080 last held: 000000000000000000
last locked : 000000000000000000 unlocked*: 000000000000000000
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 0.0 (swapper) @ 0xffffffff83341640, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at module_hook_init)
lock address : 0xffffffff83480ac0 type : sleep/adaptive
initialized : 0xffffffff81b11b91
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffffffff83341640 last held: 000000000000000000
last locked : 000000000000000000 unlocked*: 000000000000000000
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

[Locks tracked through CPUs]

******* Locks held on cpu0:

* Lock 0 (initialized at main)
lock address : 0xffffffff834809c0 type : spin
initialized : 0xffffffff81f6664e
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 1
relevant cpu : 0 last held: 0
relevant lwp : 0xffff968013cca600 last held: 0xffff968013cca600
last locked* : 0xffffffff81b9e896 unlocked : 0xffffffff81b9e8ce
curcpu holds : 1 wanted by: 000000000000000000

* Lock 1 (initialized at kprintf_init)
lock address : 0xffffffff8358bea0 type : spin
initialized : 0xffffffff81bc3ff5
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffff968013cca600 last held: 0xffff968013cca600
last locked* : 0xffffffff81bc4066 unlocked : 0xffffffff81bc40c4
owner field : 0x0000000000000800 wait/spin: 0/1

PAGE FLAG PQ UOBJECT UANON
0xffff968000017180 0041 00000000 0x0 0x0
0xffff968000017200 0041 00000000 0x0 0x0
0xffff968000017280 0041 00000000 0x0 0x0
0xffff968000017300 0041 00000000 0x0 0x0
0xffff968000017380 0041 00000000 0x0 0x0
0xffff968000017400 0041 00000000 0x0 0x0
0xffff968000017480 0041 00000000 0x0 0x0
0xffff968000017500 0041 00000000 0x0 0x0
0xffff968000017580 0041 00000000 0x0 0x0
0xffff968000017600 0041 00000000 0x0 0x0
0xffff968000017680 0041 00000000 0x0 0x0
0xffff968000017700 0041 00000000 0x0 0x0
0xffff968000017780 0041 00000000 0x0 0x0
0xffff968000017800 0041 00000000 0x0 0x0
0xffff968000017880 0041 00000000 0x0 0x0
0xffff968000017900 0041 00000000 0x0 0x0
0xffff968000017980 0041 00000000 0x0 0x0
0xffff968000017a00 0041 00000000 0x0 0x0
0xffff968000017a80 0041 00000000 0x0 0x0
0xffff968000017b00 0041 00000000 0x0 0x0
0xffff968000017b80 0041 00000000 0x0 0x0
0xffff968000017c00 0041 00000000 0x0 0x0
0xffff968000017c80 0041 00000000 0x0 0x0
0xffff968000017d00 0041 00000000 0x0 0x0
0xffff968000017d80 0041 00000000 0x0 0x0
0xffff968000017e00 0041 00000000 0x0 0x0
0xffff968000017e80 0041 00000000 0x0 0x0
0xffff968000017f00 0041 00000000 0x0 0x0
0xffff968000017f80 0041 00000000 0x0 0x0
0xffff968000018000 0041 00000000 0x0 0x0
0xffff968000018080 0041 00000000 0x0 0x0
0xffff968000018100 0041 00000000 0x0 0x0
0xffff968000018180 0041 00000000 0x0 0x0
0xffff968000018200 0041 00000000 0x0 0x0
0xffff968000018280 0041 00000000 0x0 0x0
0xffff968000018300 0041 00000000 0x0 0x0
0xffff968000018380 0041 00000000 0x0 0x0
0xffff968000018400 0041 00000000 0x0 0x0
0xffff968000018480 0041 00000000 0x0 0x0
0xffff968000018500 0041 00000000 0x0 0x0
0xffff968000018580 0041 00000000 0x0 0x0
0xffff968000018600 0041 00000000 0x0 0x0
0xffff968000018680 0041 00000000 0x0 0x0
0xffff968000018700 0041 00000000 0x0 0x0
0xffff968000018780 0041 00000000 0x0 0x0
0xffff968000018800 0041 00000000 0x0 0x0
0xffff968000018880 0041 00000000 0x0 0x0
0xffff968000018900 0041 00000000 0x0 0x0
0xffff968000018980 0041 00000000 0x0 0x0
0xffff968000018a00 0041 00000000 0x0 0x0
0xffff968000018a80 0041 00000000 0x0 0x0
0xffff968000018b00 0041 00000000 0x0 0x0
0xffff968000018b80 0041 00000000 0x0 0x0
0xffff968000018c00 0041 00000000 0x0 0x0
0xffff968000018c80 0041 00000000 0x0 0x0
0xffff968000018d00 0041 00000000 0x0 0x0
0xffff968000018d80 0041 00000000 0x0 0x0
0xffff968000018e00 0041 00000000 0x0 0x0
0xffff968000018e80 0041 00000000 0x0 0x0
0xffff968000018f00 0041 00000000 0x0 0x0
0xffff968000018f80 0041 00000000 0x0 0x0
0xffff968000019000 0041 00000000 0x0 0x0
0xffff968000019080 0041 00000000 0x0 0x0
0xffff968000019100 0041 00000000 0x0 0x0
0xffff968000019180 0041 00000000 0x0 0x0
0xffff968000019200 0041 00000000 0x0 0x0
0xffff968000019280 0041 00000000 0x0 0x0
0xffff968000019300 0041 00000000 0x0 0x0
0xffff968000019380 0041 00000000 0x0 0x0
0xffff968000019400 0041 00000000 0x0 0x0
0xffff968000019480 0041 00000000 0x0 0x0
0xffff968000019500 0041 00000000 0x0 0x0
0xffff968000019580 0041 00000000 0x0 0x0
0xffff968000019600 0041 00000000 0x0 0x0
0xffff968000019680 0041 00000000 0x0 0x0
0xffff968000019700 0041 00000000 0x0 0x0
0xffff968000019780 0041 00000000 0x0 0x0
0xffff968000019800 0041 00000000 0x0 0x0
0xffff968000019880 0041 00000000 0x0 0x0
0xffff968000019900 0041 00000000 0x0 0x0
0xffff968000019980 0041 00000000 0x0 0x0
0xffff968000019a00 0041 00000000 0x0 0x0
0xffff968000019a80 0041 00000000 0x0 0x0
0xffff968000019b00 0041 00000000 0x0 0x0
0xffff968000019b80 0041 00000000 0x0 0x0
0xffff968000019c00 0041 00000000 0x0 0x0
0xffff968000019c80 0041 00000000 0x0 0x0
0xffff968000019d00 0041 00000000 0x0 0x0
0xffff968000019d80 0041 00000000 0x0 0x0
0xffff968000019e00 0041 00000000 0x0 0x0
0xffff968000019e80 0041 00000000 0x0 0x0
0xffff968000019f00 0041 00000000 0x0 0x0
0xffff968000019f80 0041 00000000 0x0 0x0
0xffff96800001a000 0041 00000000 0x0 0x0
0xffff96800001a080 0041 00000000 0x0 0x0
0xffff96800001a100 0041 00000000 0x0 0x0
0xffff96800001a180 0041 00000000 0x0 0x0
0xffff96800001a200 0041 00000000 0x0 0x0
0xffff96800001a280 0041 00000000 0x0 0x0
0xffff96800001a300 0041 00000000 0x0 0x0
0xffff96800001a380 0041 00000000 0x0 0x0
0xffff96800001a400 0041 00000000 0x0 0x0
0xffff96800001a480 0041 00000000 0x0 0x0
0xffff96800001a500 0041 00000000 0x0 0x0
0xffff96800001a580 0041 00000000 0x0 0x0
0xffff96800001a600 0041 00000000 0x0 0x0
0xffff96800001a680 0041 00000000 0x0 0x0
0xffff96800001a700 0041 00000000 0x0 0x0
0xffff96800001a780 0041 00000000 0x0 0x0
0xffff96800001a800 0041 00000000 0x0 0x0
0xffff96800001a880 0041 00000000 0x0 0x0
0xffff96800001a900 0041 00000000 0x0 0x0
0xffff96800001a980 0041 00000000 0x0 0x0
0xffff96800001aa00 0041 00000000 0x0 0x0
0xffff96800001aa80 0041 00000000 0x0 0x0
0xffff96800001ab00 0041 00000000 0x0 0x0
0xffff96800001ab80 0041 00000000 0x0 0x0
0xffff96800001ac00 0041 00000000 0x0 0x0
0xffff96800001ac80 0041 00000000 0x0 0x0
0xffff96800001ad00 0041 00000000 0x0 0x0
0xffff96800001ad80 0041 00000000 0x0 0x0
0xffff96800001ae00 0041 00000000 0x0 0x0
0xffff96800001ae80 0041 00000000 0x0 0x0
0xffff96800001af00 0041 00000000 0x0 0x0
0xffff96800001af80 0041 00000000 0x0 0x0
0xffff96800001b000 0041 00000000 0x0 0x0
0xffff96800001b080 0041 00000000 0x0 0x0
0xffff96800001b100 0041 00000000 0x0 0x0
0xffff96800001b180 0041 00000000 0x0 0x0
0xffff96800001b200 0041 00000000 0x0 0x0
0xffff96800001b280 0041 00000000 0x0 0x0
0xffff96800001b300 0041 00000000 0x0 0x0
0xffff96800001b380 0041 00000000 0x0 0x0
0xffff96800001b400 0041 00000000 0x0 0x0
0xffff96800001b480 0041 00000000 0x0 0x0
0xffff96800001b500 0041 00000000 0x0 0x0
0xffff96800001b580 0041 00000000 0x0 0x0
0xffff96800001b600 0041 00000000 0x0 0x0
0xffff96800001b680 0041 00000000 0x0 0x0
0xffff96800001b700 0041 00000000 0x0 0x0
0xffff96800001b780 0041 00000000 0x0 0x0
0xffff96800001b800 0041 00000000 0x0 0x0
0xffff96800001b880 0041 00000000 0x0 0x0
0xffff96800001b900 0041 00000000 0x0 0x0
0xffff96800001b980 0041 00000000 0x0 0x0
0xffff96800001ba00 0041 00000000 0x0 0x0
0xffff96800001ba80 0001 00000000 0x0 0x0
0xffff96800001bb00 0001 00000000 0x0 0x0
0xffff96800001bb80 0001 00000000 0x0 0x0
0xffff96800001bc00 0001 00000000 0x0 0x0
0xffff96800001bc80 0001 00000000 0x0 0x0
0xffff96800001bd00 0001 00000000 0x0 0x0
0xffff96800001bd80 0001 00000000 0x0 0x0
0xffff96800001be00 0001 00000000 0x0 0x0
0xffff96800001be80 0001 00000000 0x0 0x0
0xffff96800001bf00 0001 00000000 0x0 0x0
0xffff96800001bf80 0001 00000000 0x0 0x0
0xffff96800001c000 0001 00000000 0x0 0x0
0xffff96800001c080 0001 00000000 0x0 0x0
0xffff96800001c100 0001 00000000 0x0 0x0
0xffff96800001c180 0001 00000000 0x0 0x0
0xffff96800001c200 0001 00000000 0x0 0x0
0xffff96800001c280 0001 00000000 0x0 0x0
0xffff96800001c300 0001 00000000 0x0 0x0
0xffff96800001c380 0001 00000000 0x0 0x0
0xffff96800001c400 0001 00000000 0x0 0x0
0xffff96800001c480 0001 00000000 0x0 0x0
0xffff96800001c500 0001 00000000 0x0 0x0
0xffff96800001c580 0001 00000000 0x0 0x0
0xffff96800001c600 0001 00000000 0x0 0x0
0xffff96800001c680 0001 00000000 0x0 0x0
0xffff96800001c700 0001 00000000 0x0 0x0
0xffff96800001c780 0001 00000000 0x0 0x0
0xffff96800001c800 0001 00000000 0x0 0x0
0xffff96800001c880 0001 00000000 0x0 0x0
0xffff96800001c900 0001 00000000 0x0 0x0
0xffff96800001c980 0001 00000000 0x0 0x0
0xffff96800001ca00 0001 00000000 0x0 0x0
0xffff96800001ca80 0001 00000000 0x0 0x0
0xffff96800001cb00 0001 00000000 0x0 0x0
0xffff96800001cb80 0001 00000000 0x0 0x0
0xffff96800001cc00 0001 00000000 0x0 0x0
0xffff96800001cc80 0001 00000000 0x0 0x0
0xffff96800001cd00 0001 00000000 0x0 0x0
0xffff96800001cd80 0001 00000000 0x0 0x0
0xffff96800001ce00 0001 00000000 0x0 0x0
0xffff96800001ce80 0001 00000000 0x0 0x0
0xffff96800001cf00 0001 00000000 0x0 0x0
0xffff96800001cf80 0001 00000000 0x0 0x0
0xffff96800001d000 0001 00000000 0x0 0x0
0xffff96800001d080 0001 00000000 0x0 0x0
0xffff96800001d100 0001 00000000 0x0 0x0
0xffff96800001d180 0001 00000000 0x0 0x0
0xffff96800001d200 0001 00000000 0x0 0x0
0xffff96800001d280 0001 00000000 0x0 0x0
0xffff96800001d300 0001 00000000 0x0 0x0
0xffff96800001d380 0001 00000000 0x0 0x0
0xffff96800001d400 0001 00000000 0x0 0x0
0xffff96800001d480 0001 00000000 0x0 0x0
0xffff96800001d500 0001 00000000 0x0 0x0
0xffff96800001d580 0001 00000000 0x0 0x0
0xffff96800001d600 0001 00000000 0x0 0x0
0xffff96800001d680 0001 00000000 0x0 0x0
0xffff96800001d700 0001 00000000 0x0 0x0
0xffff96800001d780 0001 00000000 0x0 0x0
0xffff96800001d800 0001 00000000 0x0 0x0
0xffff96800001d880 0001 00000000 0x0 0x0
0xffff96800001d900 0001 00000000 0x0 0x0
0xffff96800001d980 0001 00000000 0x0 0x0
0xffff96800001da00 0001 00000000 0x0 0x0
0xffff96800001da80 0001 00000000 0x0 0x0
0xffff96800001db00 0001 00000000 0x0 0x0
0xffff96800001db80 0001 00000000 0x0 0x0
0xffff96800001dc00 0001 00000000 0x0 0x0
0xffff96800001dc80 0001 00000000 0x0 0x0
0xffff96800001dd00 0001 00000000 0x0 0x0
0xffff96800001dd80 0001 00000000 0x0 0x0
0xffff96800001de00 0001 00000000 0x0 0x0
0xffff96800001de80 0001 00000000 0x0 0x0
0xffff96800001df00 0001 00000000 0x0 0x0
0xffff96800001df80 0001 00000000 0x0 0x0
0xffff96800001e000 0001 00000000 0x0 0x0
0xffff96800001e080 0001 00000000 0x0 0x0
0xffff96800001e100 0001 00000000 0x0 0x0
0xffff96800001e180 0001 00000000 0x0 0x0
0xffff96800001e200 0001 00000000 0x0 0x0
0xffff96800001e280 0001 00000000 0x0 0x0
0xffff96800001e300 0001 00000000 0x0 0x0
0xffff96800001e380 0001 00000000 0x0 0x0
0xffff96800001e400 0001 00000000 0x0 0x0
0xffff96800001e480 0001 00000000 0x0 0x0
0xffff96800001e500 0001 00000000 0x0 0x0
0xffff96800001e580 0001 00000000 0x0 0x0
0xffff96800001e600 0001 00000000 0x0 0x0
0xffff96800001e680 0001 00000000 0x0 0x0
0xffff96800001e700 0001 00000000 0x0 0x0
0xffff96800001e780 0001 00000000 0x0 0x0
0xffff96800001e800 0001 00000000 0x0 0x0
0xffff96800001e880 0001 00000000 0x0 0x0
0xffff96800001e900 0001 00000000 0x0 0x0
0xffff96800001e980 0001 00000000 0x0 0x0
0xffff96800001ea00 0001 00000000 0x0 0x0
0xffff96800001ea80 0001 00000000 0x0 0x0
0xffff96800001eb00 0001 00000000 0x0 0x0
0xffff96800001eb80 0001 00000000 0x0 0x0
0xffff96800001ec00 0001 00000000 0x0 0x0
0xffff96800001ec80 0001 00000000 0x0 0x0
0xffff96800001ed00 0001 00000000 0x0 0x0
0xffff96800001ed80 0001 00000000 0x0 0x0
0xffff96800001ee00 0001 00000000 0x0 0x0
0xffff96800001ee80 0001 00000000 0x0 0x0
0xffff96800001ef00 0001 00000000 0x0 0x0
0xffff96800001ef80 0001 00000000 0x0 0x0
0xffff96800001f000 0001 00000000 0x0 0x0
0xffff96800001f080 0001 00000000 0x0 0x0
0xffff96800001f100 0001 00000000 0x0 0x0
0xffff96800001f180 0001 00000000 0x0 0x0
0xffff96800001f200 0001 00000000 0x0 0x0
0xffff96800001f280 0001 00000000 0x0 0x0
0xffff96800001f300 0001 00000000 0x0 0x0
0xffff96800001f380 0001 00000000 0x0 0x0
0xffff96800001f400 0001 00000000 0x0 0x0
0xffff96800001f480 0001 00000000 0x0 0x0
0xffff96800001f500 0001 00000000 0x0 0x0
0xffff96800001f580 0001 00000000 0x0 0x0
0xffff96800001f600 0001 00000000 0x0 0x0
0xffff96800001f680 0001 00000000 0x0 0x0
0xffff96800001f700 0001 00000000 0x0 0x0
0xffff96800001f780 0001 00000000 0x0 0x0
0xffff96800001f800 0001 00000000 0x0 0x0
0xffff96800001f880 0001 00000000 0x0 0x0
0xffff96800001f900 0001 00000000 0x0 0x0
0xffff96800001f980 0001 00000000 0x0 0x0
0xffff96800001fa00 0001 00000000 0x0 0x0
0xffff96800001fa80 0001 00000000 0x0 0x0
0xffff96800001fb00 0001 00000000 0x0 0x0
0xffff96800001fb80 0001 00000000 0x0 0x0
0xffff96800001fc00 0001 00000000 0x0 0x0
0xffff96800001fc80 0001 00000000 0x0 0x0
0xffff96800001fd00 0001 00000000 0x0 0x0
0xffff96800001fd80 0001 00000000 0x0 0x0
0xffff96800001fe00 0001 00000000 0x0 0x0
0xffff96800001fe80 0001 00000000 0x0 0x0
0xffff96800001ff00 0001 00000000 0x0 0x0
0xffff96800001ff80 0001 00000000 0x0 0x0
0xffff968000020000 0001 00000000 0x0 0x0
0xffff968000020080 0001 00000000 0x0 0x0
0xffff968000020100 0001 00000000 0x0 0x0
0xffff968000020180 0001 00000000 0x0 0x0
0xffff968000020200 0001 00000000 0x0 0x0
0xffff968000020280 0001 00000000 0x0 0x0
0xffff968000020300 0001 00000000 0x0 0x0
0xffff968000020380 0001 00000000 0x0 0x0
0xffff968000020400 0001 00000000 0x0 0x0
0xffff968000020480 0001 00000000 0x0 0x0
0xffff968000020500 0001 00000000 0x0 0x0
0xffff968000020580 0001 00000000 0x0 0x0
0xffff968000020600 0001 00000000 0x0 0x0
0xffff968000020680 0001 00000000 0x0 0x0
0xffff968000020700 0001 00000000 0x0 0x0
0xffff968000020780 0001 00000000 0x0 0x0
0xffff968000020800 0001 00000000 0x0 0x0
0xffff968000020880 0001 00000000 0x0 0x0
0xffff968000020900 0001 00000000 0x0 0x0
0xffff968000020980 0001 00000000 0x0 0x0
0xffff968000020a00 0001 00000000 0x0 0x0
0xffff968000020a80 0001 00000000 0x0 0x0
0xffff968000020b00 0001 00000000 0x0 0x0
0xffff968000020b80 0001 00000000 0x0 0x0
0xffff968000020c00 0001 00000000 0x0 0x0
0xffff968000020c80 0001 00000000 0x0 0x0
0xffff968000020d00 0001 00000000 0x0 0x0
0xffff968000020d80 0001 00000000 0x0 0x0
0xffff968000020e00 0001 00000000 0x0 0x0
0xffff968000020e80 0001 00000000 0x0 0x0
0xffff968000020f00 0001 00000000 0x0 0x0
0xffff968000020f80 0001 00000000 0x0 0x0
0xffff968000021000 0001 00000000 0x0 0x0
0xffff968000021080 0001 00000000 0x0 0x0
0xffff968000021100 0001 00000000 0x0 0x0
0xffff968000021180 0001 00000000 0x0 0x0
0xffff968000021200 0001 00000000 0x0 0x0
0xffff968000021280 0001 00000000 0x0 0x0
0xffff968000021300 0001 00000000 0x0 0x0
0xffff968000021380 0001 00000000 0x0 0x0
0xffff968000021400 0001 00000000 0x0 0x0
0xffff968000021480 0001 00000000 0x0 0x0
0xffff968000021500 0001 00000000 0x0 0x0
0xffff968000021580 0001 00000000 0x0 0x0
0xffff968000021600 0001 00000000 0x0 0x0
0xffff968000021680 0001 00000000 0x0 0x0
0xffff968000021700 0001 00000000 0x0 0x0
0xffff968000021780 0001 00000000 0x0 0x0
0xffff968000021800 0001 00000000 0x0 0x0
0xffff968000021880 0001 00000000 0x0 0x0
0xffff968000021900 0001 00000000 0x0 0x0
0xffff968000021980 0001 00000000 0x0 0x0
0xffff968000021a00 0001 00000000 0x0 0x0
0xffff968000021a80 0001 00000000 0x0 0x0
0xffff968000021b00 0001 00000000 0x0 0x0
0xffff968000021b80 0001 00000000 0x0 0x0
0xffff968000021c00 0001 00000000 0x0 0x0
0xffff968000021c80 0001 00000000 0x0 0x0
0xffff968000021d00 0001 00000000 0x0 0x0
0xffff968000021d80 0001 00000000 0x0 0x0
0xffff968000021e00 0001 00000000 0x0 0x0
0xffff968000021e80 0001 00000000 0x0 0x0
0xffff968000021f00 0001 00000000 0x0 0x0
0xffff968000021f80 0001 00000000 0x0 0x0
0xffff968000022000 0001 00000000 0x0 0x0
0xffff968000022080 0001 00000000 0x0 0x0
0xffff968000022100 0001 00000000 0x0 0x0
0xffff968000022180 0001 00000000 0x0 0x0
0xffff968000022200 0001 00000000 0x0 0x0
0xffff968000022280 0001 00000000 0x0 0x0
0xffff968000022300 0001 00000000 0x0 0x0
0xffff968000022380 0001 00000000 0x0 0x0
0xffff968000022400 0001 00000000 0x0 0x0
0xffff968000022480 0001 00000000 0x0 0x0
0xffff968000022500 0001 00000000 0x0 0x0
0xffff968000022580 0001 00000000 0x0 0x0
0xffff968000022600 0001 00000000 0x0 0x0
0xffff968000022680 0001 00000000 0x0 0x0
0xffff968000022700 0001 00000000 0x0 0x0
0xffff968000022780 0001 00000000 0x0 0x0
0xffff968000022800 0001 00000000 0x0 0x0
0xffff968000022880 0001 00000000 0x0 0x0
0xffff968000022900 0001 00000000 0x0 0x0
0xffff968000022980 0001 00000000 0x0 0x0
0xffff968000022a00 0001 00000000 0x0 0x0
0xffff968000022a80 0001 00000000 0x0 0x0
0xffff968000022b00 0001 00000000 0x0 0x0
0xffff968000022b80 0001 00000000 0x0 0x0
0xffff968000022c00 0001 00000000 0x0 0x0
0xffff968000022c80 0001 00000000 0x0 0x0
0xffff968000022d00 0001 00000000 0x0 0x0
0xffff968000022d80 0001 00000000 0x0 0x0
0xffff968000022e00 0001 00000000 0x0 0x0
0xffff968000022e80 0001 00000000 0x0 0x0
0xffff968000022f00 0001 00000000 0x0 0x0
0xffff968000022f80 0001 00000000 0x0 0x0
0xffff968000023000 0001 00000000 0x0 0x0
0xffff968000023080 0001 00000000 0x0 0x0
0xffff968000023100 0001 00000000 0x0 0x0
0xffff968000023180 0001 00000000 0x0 0x0
0xffff968000023200 0001 00000000 0x0 0x0
0xffff968000023280 0001 00000000 0x0 0x0
0xffff968000023300 0001 00000000 0x0 0x0
0xffff968000023380 0001 00000000 0x0 0x0
0xffff968000023400 0001 00000000 0x0 0x0
0xffff968000023480 0001 00000000 0x0 0x0
0xffff968000023500 0001 00000000 0x0 0x0
0xffff968000023580 0001 00000000 0x0 0x0
0xffff968000023600 0001 00000000 0x0 0x0
0xffff968000023680 0001 00000000 0x0 0x0
0xffff968000023700 0001 00000000 0x0 0x0
0xffff968000023780 0001 00000000 0x0 0x0
0xffff968000023800 0001 00000000 0x0 0x0
0xffff968000023880 0001 00000000 0x0 0x0
0xffff968000023900 0001 00000000 0x0 0x0
0xffff968000023980 0001 00000000 0x0 0x0
0xffff968000023a00 0001 00000000 0x0 0x0
0xffff968000023a80 0001 00000000 0x0 0x0
0xffff968000023b00 0001 00000000 0x0 0x0
0xffff968000023b80 0001 00000000 0x0 0x0
0xffff968000023c00 0001 00000000 0x0 0x0
0xffff968000023c80 0001 00000000 0x0 0x0
0xffff968000023d00 0001 00000000 0x0 0x0
0xffff968000023d80 0001 00000000 0x0 0x0
0xffff968000023e00 0001 00000000 0x0 0x0
0xffff968000023e80 0001 00000000 0x0 0x0
0xffff968000023f00 0001 00000000 0x0 0x0
0xffff968000023f80 0001 00000000 0x0 0x0
0xffff968000024000 0001 00000000 0x0 0x0
0xffff968000024080 0001 00000000 0x0 0x0
0xffff968000024100 0001 00000000 0x0 0x0
0xffff968000024180 0001 00000000 0x0 0x0
0xffff968000024200 0001 00000000 0x0 0x0
0xffff968000024280 0001 00000000 0x0 0x0
0xffff968000024300 0001 00000000 0x0 0x0
0xffff968000024380 0001 00000000 0x0 0x0
0xffff968000024400 0001 00000000 0x0 0x0
0xffff968000024480 0001 00000000 0x0 0x0
0xffff968000024500 0001 00000000 0x0 0x0
0xffff968000024580 0001 00000000 0x0 0x0
0xffff968000024600 0001 00000000 0x0 0x0
0xffff968000024680 0001 00000000 0x0 0x0
0xffff968000024700 0001 00000000 0x0 0x0
0xffff968000024780 0001 00000000 0x0 0x0
0xffff968000024800 0001 00000000 0x0 0x0
0xffff968000024880 0001 00000000 0x0 0x0
0xffff968000024900 0001 00000000 0x0 0x0
0xffff968000024980 0001 00000000 0x0 0x0
0xffff968000024a00 0001 00000000 0x0 0x0
0xffff968000024a80 0001 00000000 0x0 0x0
0xffff968000024b00 0001 00000000 0x0 0x0
0xffff968000024b80 0001 00000000 0x0 0x0
0xffff968000024c00 0001 00000000 0x0 0x0
0xffff968000024c80 0001 00000000 0x0 0x0
0xffff968000024d00 0001 00000000 0x0 0x0
0xffff968000024d80 0001 00000000 0x0 0x0
0xffff968000024e00 0001 00000000 0x0 0x0
0xffff968000024e80 0001 00000000 0x0 0x0
0xffff968000024f00 0001 00000000 0x0 0x0
0xffff968000024f80 0001 00000000 0x0 0x0
0xffff968000025000 0001 00000000 0x0 0x0
0xffff968000025080 0001 00000000 0x0 0x0
0xffff968000025100 0001 00000000 0x0 0x0
0xffff968000025180 0001 00000000 0x0 0x0
0xffff968000025200 0001 00000000 0x0 0x0
0xffff968000025280 0001 00000000 0x0 0x0
0xffff968000025300 0001 00000000 0x0 0x0
0xffff968000025380 0001 00000000 0x0 0x0
0xffff968000025400 0001 00000000 0x0 0x0
0xffff968000025480 0001 00000000 0x0 0x0
0xffff968000025500 0001 00000000 0x0 0x0
0xffff968000025580 0001 00000000 0x0 0x0
0xffff968000025600 0001 00000000 0x0 0x0
0xffff968000025680 0001 00000000 0x0 0x0
0xffff968000025700 0001 00000000 0x0 0x0
0xffff968000025780 0001 00000000 0x0 0x0
0xffff968000025800 0001 00000000 0x0 0x0
0xffff968000025880 0001 00000000 0x0 0x0
0xffff968000025900 0001 00000000 0x0 0x0
0xffff968000025980 0001 00000000 0x0 0x0
0xffff968000025a00 0001 00000000 0x0 0x0
0xffff968000025a80 0001 00000000 0x0 0x0
0xffff968000025b00 0001 00000000 0x0 0x0
0xffff968000025b80 0001 00000000 0x0 0x0
0xffff968000025c00 0001 00000000 0x0 0x0
0xffff968000025c80 0001 00000000 0x0 0x0
0xffff968000025d00 0001 00000000 0x0 0x0
0xffff968000025d80 0001 00000000 0x0 0x0
0xffff968000025e00 0001 00000000 0x0 0x0
0xffff968000025e80 0001 00000000 0x0 0x0
0xffff968000025f00 0001 00000000 0x0 0x0
0xffff968000025f80 0001 00000000 0x0 0x0
0xffff968000026000 0001 00000000 0x0 0x0
0xffff968000026080 0001 00000000 0x0 0x0
0xffff968000026100 0001 00000000 0x0 0x0
0xffff968000026180 0001 00000000 0x0 0x0
0xffff968000026200 0001 00000000 0x0 0x0
0xffff968000026280 0001 00000000 0x0 0x0
0xffff968000026300 0001 00000000 0x0 0x0
0xffff968000026380 0001 00000000 0x0 0x0
0xffff968000026400 0001 00000000 0x0 0x0
0xffff968000026480 0001 00000000 0x0 0x0
0xffff968000026500 0001 00000000 0x0 0x0
0xffff968000026580 0001 00000000 0x0 0x0
0xffff968000026600 0001 00000000 0x0 0x0
0xffff968000026680 0001 00000000 0x0 0x0
0xffff968000026700 0001 00000000 0x0 0x0
0xffff968000026780 0001 00000000 0x0 0x0
0xffff968000026800 0001 00000000 0x0 0x0
0xffff968000026880 0001 00000000 0x0 0x0
0xffff968000026900 0001 00000000 0x0 0x0
0xffff968000026980 0001 00000000 0x0 0x0
0xffff968000026a00 0001 00000000 0x0 0x0
0xffff968000026a80 0001 00000000 0x0 0x0
0xffff968000026b00 0001 00000000 0x0 0x0
0xffff968000026b80 0001 00000000 0x0 0x0
0xffff968000026c00 0001 00000000 0x0 0x0
0xffff968000026c80 0001 00000000 0x0 0x0
0xffff968000026d00 0001 00000000 0x0 0x0
0xffff968000026d80 0001 00000000 0x0 0x0
0xffff968000026e00 0001 00000000 0x0 0x0
0xffff968000026e80 0001 00000000 0x0 0x0
0xffff968000026f00 0001 00000000 0x0 0x0
0xffff968000026f80 0001 00000000 0x0 0x0
0xffff968000027000 0001 00000000 0x0 0x0
0xffff968000027080 0001 00000000 0x0 0x0
0xffff968000027100 0001 00000000 0x0 0x0
0xffff968000027180 0001 00000000 0x0 0x0
0xffff968000027200 0001 00000000 0x0 0x0
0xffff968000027280 0001 00000000 0x0 0x0
0xffff968000027300 0001 00000000 0x0 0x0
0xffff968000027380 0001 00000000 0x0 0x0
0xffff968000027400 0001 00000000 0x0 0x0
0xffff968000027480 0001 00000000 0x0 0x0
0xffff968000027500 0001 00000000 0x0 0x0
0xffff968000027580 0001 00000000 0x0 0x0
0xffff968000027600 0001 00000000 0x0 0x0
0xffff968000027680 0001 00000000 0x0 0x0
0xffff968000027700 0001 00000000 0x0 0x0
0xffff968000027780 0001 00000000 0x0 0x0
0xffff968000027800 0001 00000000 0x0 0x0
0xffff968000027880 0001 00000000 0x0 0x0
0xffff968000027900 0001 00000000 0x0 0x0
0xffff968000027980 0001 00000000 0x0 0x0
0xffff968000027a00 0001 00000000 0x0 0x0
0xffff968000027a80 0001 00000000 0x0 0x0
0xffff968000027b00 0001 00000000 0x0 0x0
0xffff968000027b80 0001 00000000 0x0 0x0
0xffff968000027c00 0001 00000000 0x0 0x0
0xffff968000027c80 0001 00000000 0x0 0x0
0xffff968000027d00 0001 00000000 0x0 0x0
0xffff968000027d80 0001 00000000 0x0 0x0
0xffff968000027e00 0001 00000000 0x0 0x0
0xffff968000027e80 0001 00000000 0x0 0x0
0xffff968000027f00 0001 00000000 0x0 0x0
0xffff968000027f80 0001 00000000 0x0 0x0
0xffff968000028000 0001 00000000 0x0 0x0
0xffff968000028080 0001 00000000 0x0 0x0
0xffff968000028100 0001 00000000 0x0 0x0
0xffff968000028180 0001 00000000 0x0 0x0
0xffff968000028200 0001 00000000 0x0 0x0
0xffff968000028280 0001 00000000 0x0 0x0
0xffff968000028300 0001 00000000 0x0 0x0
0xffff968000028380 0001 00000000 0x0 0x0
0xffff968000028400 0001 00000000 0x0 0x0
0xffff968000028480 0001 00000000 0x0 0x0
0xffff968000028500 0001 00000000 0x0 0x0
0xffff968000028580 0001 00000000 0x0 0x0
0xffff968000028600 0001 00000000 0x0 0x0
0xffff968000028680 0001 00000000 0x0 0x0
0xffff968000028700 0001 00000000 0x0 0x0
0xffff968000028780 0001 00000000 0x0 0x0
0xffff968000028800 0001 00000000 0x0 0x0
0xffff968000028880 0001 00000000 0x0 0x0
0xffff968000028900 0001 00000000 0x0 0x0
0xffff968000028980 0001 00000000 0x0 0x0
0xffff968000028a00 0001 00000000 0x0 0x0
0xffff968000028a80 0001 00000000 0x0 0x0
0xffff968000028b00 0001 00000000 0x0 0x0
0xffff968000028b80 0001 00000000 0x0 0x0
0xffff968000028c00 0001 00000000 0x0 0x0
0xffff968000028c80 0001 00000000 0x0 0x0
0xffff968000028d00 0001 00000000 0x0 0x0
0xffff968000028d80 0001 00000000 0x0 0x0
0xffff968000028e00 0001 00000000 0x0 0x0
0xffff968000028e80 0001 00000000 0x0 0x0
0xffff968000028f00 0001 00000000 0x0 0x0
0xffff968000028f80 0001 00000000 0x0 0x0
0xffff968000029000 0001 00000000 0x0 0x0
0xffff968000029080 0001 00000000 0x0 0x0
0xffff968000029100 0001 00000000 0x0 0x0
0xffff968000029180 0001 00000000 0x0 0x0
0xffff968000029200 0001 00000000 0x0 0x0
0xffff968000029280 0001 00000000 0x0 0x0
0xffff968000029300 0001 00000000 0x0 0x0
0xffff968000029380 0001 00000000 0x0 0x0
0xffff968000029400 0001 00000000 0x0 0x0
0xffff968000029480 0001 00000000 0x0 0x0
0xffff968000029500 0001 00000000 0x0 0x0
0xffff968000029580 0001 00000000 0x0 0x0
0xffff968000029600 0001 00000000 0x0 0x0
0xffff968000029680 0001 00000000 0x0 0x0
0xffff968000029700 0001 00000000 0x0 0x0
0xffff968000029780 0001 00000000 0x0 0x0
0xffff968000029800 0001 00000000 0x0 0x0
0xffff968000029880 0001 00000000 0x0 0x0
0xffff968000029900 0001 00000000 0x0 0x0
0xffff968000029980 0001 00000000 0x0 0x0
0xffff968000029a00 0001 00000000 0x0 0x0
0xffff968000029a80 0001 00000000 0x0 0x0
0xffff968000029b00 0001 00000000 0x0 0x0
0xffff968000029b80 0001 00000000 0x0 0x0
0xffff968000029c00 0001 00000000 0x0 0x0
0xffff968000029c80 0001 00000000 0x0 0x0
0xffff968000029d00 0001 00000000 0x0 0x0
0xffff968000029d80 0001 00000000 0x0 0x0
0xffff968000029e00 0001 00000000 0x0 0x0
0xffff968000029e80 0001 00000000 0x0 0x0
0xffff968000029f00 0001 00000000 0x0 0x0
0xffff968000029f80 0001 00000000 0x0 0x0
0xffff96800002a000 0001 00000000 0x0 0x0
0xffff96800002a080 0001 00000000 0x0 0x0
0xffff96800002a100 0001 00000000 0x0 0x0
0xffff96800002a180 0001 00000000 0x0 0x0
0xffff96800002a200 0001 00000000 0x0 0x0
0xffff96800002a280 0001 00000000 0x0 0x0
0xffff96800002a300 0001 00000000 0x0 0x0
0xffff96800002a380 0001 00000000 0x0 0x0
0xffff96800002a400 0001 00000000 0x0 0x0
0xffff96800002a480 0001 00000000 0x0 0x0
0xffff96800002a500 0001 00000000 0x0 0x0
0xffff96800002a580 0001 00000000 0x0 0x0
0xffff96800002a600 0001 00000000 0x0 0x0
0xffff96800002a680 0001 00000000 0x0 0x0
0xffff96800002a700 0001 00000000 0x0 0x0
0xffff96800002a780 0001 00000000 0x0 0x0
0xffff96800002a800 0001 00000000 0x0 0x0
0xffff96800002a880 0001 00000000 0x0 0x0
0xffff96800002a900 0001 00000000 0x0 0x0
0xffff96800002a980 0001 00000000 0x0 0x0
0xffff96800002aa00 0001 00000000 0x0 0x0
0xffff96800002aa80 0001 00000000 0x0 0x0
0xffff96800002ab00 0001 00000000 0x0 0x0
0xffff96800002ab80 0001 00000000 0x0 0x0
0xffff96800002ac00 0001 00000000 0x0 0x0
0xffff96800002ac80 0001 00000000 0x0 0x0
0xffff96800002ad00 0001 00000000 0x0 0x0
0xffff96800002ad80 0001 00000000 0x0 0x0
0xffff96800002ae00 0001 00000000 0x0 0x0
0xffff96800002ae80 0001 00000000 0x0 0x0
0xffff96800002af00 0001 00000000 0x0 0x0
0xffff96800002af80 0001 00000000 0x0 0x0
0xffff96800002b000 0001 00000000 0x0 0x0
0xffff96800002b080 0001 00000000 0x0 0x0
0xffff96800002b100 0001 00000000 0x0 0x0
0xffff96800002b180 0001 00000000 0x0 0x0
0xffff96800002b200 0001 00000000 0x0 0x0
0xffff96800002b280 0001 00000000 0x0 0x0
0xffff96800002b300 0001 00000000 0x0 0x0
0xffff96800002b380 0001 00000000 0x0 0x0
0xffff96800002b400 0001 00000000 0x0 0x0
0xffff96800002b480 0001 00000000 0x0 0x0
0xffff96800002b500 0001 00000000 0x0 0x0
0xffff96800002b580 0001 00000000 0x0 0x0
0xffff96800002b600 0001 00000000 0x0 0x0
0xffff96800002b680 0001 00000000 0x0 0x0
0xffff96800002b700 0001 00000000 0x0 0x0
0xffff96800002b780 0001 00000000 0x0 0x0
0xffff96800002b800 0001 00000000 0x0 0x0
0xffff96800002b880 0001 00000000 0x0 0x0
0xffff96800002b900 0001 00000000 0x0 0x0
0xffff96800002b980 0001 00000000 0x0 0x0
0xffff96800002ba00 0001 00000000 0x0 0x0
0xffff96800002ba80 0001 00000000 0x0 0x0
0xffff96800002bb00 0001 00000000 0x0 0x0
0xffff96800002bb80 0001 00000000 0x0 0x0
0xffff96800002bc00 0001 00000000 0x0 0x0
0xffff96800002bc80 0001 00000000 0x0 0x0
0xffff96800002bd00 0001 00000000 0x0 0x0
0xffff96800002bd80 0001 00000000 0x0 0x0
0xffff96800002be00 0001 00000000 0x0 0x0
0xffff96800002be80 0001 00000000 0x0 0x0
0xffff96800002bf00 0001 00000000 0x0 0x0
0xffff96800002bf80 0001 00000000 0x0 0x0
0xffff96800002c000 0001 00000000 0x0 0x0
0xffff96800002c080 0001 00000000 0x0 0x0
0xffff96800002c100 0001 00000000 0x0 0x0
0xffff96800002c180 0001 00000000 0x0 0x0
0xffff96800002c200 0001 00000000 0x0 0x0
0xffff96800002c2

---
This report is generated by a bot. It may contain errors.
See https://goo.gl/tpsmEJ for more information about syzbot.
syzbot engineers can be reached at syzk...@googlegroups.com.

syzbot will keep track of this issue. See:
https://goo.gl/tpsmEJ#status for how to communicate with syzbot.
syzbot can test patches for this issue, for details see:
https://goo.gl/tpsmEJ#testing-patches

syzbot

unread,
Aug 11, 2022, 8:12:00 AM8/11/22
to Taylor R Campbell, rias...@netbsd.org, syzkaller-...@googlegroups.com
> #syz fix: raidframe: reject invalid values for numCol and numSpares

Your 'fix:' command is accepted, but please keep syzkaller-...@googlegroups.com mailing list in CC next time. It serves as a history of what happened with each bug report. Thank you.

>
> https://syzkaller.appspot.com/bug?id=6fc452d228453494655a85264591dd9054cc0b08
> https://mail-index.netbsd.org/source-changes/2022/08/10/msg140203.html
Reply all
Reply to author
Forward
0 new messages