UBSan: Undefined Behavior in sys_rasctl

[syzbot]

Hello,

syzbot found the following issue on:

HEAD commit: 4b97c2317f82 genfb: Handle uninitialized softc in genfb_en..
git tree: netbsd
console output: https://syzkaller.appspot.com/x/log.txt?x=10fc743e080000
kernel config: https://syzkaller.appspot.com/x/.config?x=1420f906d33d9f1f
dashboard link: https://syzkaller.appspot.com/bug?extid=8b0f1ced3fce82031535
compiler: g++ (Debian 10.2.1-6) 10.2.1 20210110

Unfortunately, I don't have any reproducer for this issue yet.

IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+8b0f1c...@syzkaller.appspotmail.com

[ 176.3939101] panic: UBSan: Undefined Behavior in /syzkaller/managers/ci2-netbsd-kubsan/kernel/sys/kern/kern_ras.c:183:10, pointer expression with base 0 overflowed to 0xfffffffffffffff9

[ 176.4138934] cpu1: Begin traceback...
[ 176.4438926] vpanic() at netbsd:vpanic+0x2f2 sys/kern/subr_prf.c:293
[ 176.5438930] Report() at netbsd:Report+0x3b sys/../common/lib/libc/misc/ubsan.c:1352
[ 176.6338939] HandlePointerOverflow() at netbsd:HandlePointerOverflow+0xd2 sys/../common/lib/libc/misc/ubsan.c:706
[ 176.7038928] sys_rasctl() at netbsd:sys_rasctl+0x641 ras_install sys/kern/kern_ras.c:183 [inline]
[ 176.7038928] sys_rasctl() at netbsd:sys_rasctl+0x641 sys/kern/kern_ras.c:288
[ 176.7738920] sys___syscall() at netbsd:sys___syscall+0x1e4 sy_call sys/sys/syscallvar.h:65 [inline]
[ 176.7738920] sys___syscall() at netbsd:sys___syscall+0x1e4 sys/kern/sys_syscall.c:90
[ 176.8538935] syscall() at netbsd:syscall+0x2da sy_call sys/sys/syscallvar.h:65 [inline]
[ 176.8538935] syscall() at netbsd:syscall+0x2da sy_invoke sys/sys/syscallvar.h:94 [inline]
[ 176.8538935] syscall() at netbsd:syscall+0x2da sys/arch/x86/x86/syscall.c:138
[ 176.8638931] --- syscall (number 343 via SYS_syscall) ---
[ 176.8938925] netbsd:syscall+0x2da:
[ 176.8938925] cpu1: End traceback...
[ 176.9038927] fatal breakpoint trap in supervisor mode
[ 176.9038927] trap type 1 code 0 rip 0xffffffff80221ab5 cs 0x8 rflags 0x246 cr2 0x774e3900ffa8 ilevel 0 rsp 0xffffc900d46599a0
[ 176.9138907] curlwp 0xffffc8d0de863100 pid 2365.1166 lowest kstack 0xffffc900d46552c0
Stopped in pid 2365.1166 (syz-executor.4) at netbsd:breakpoint+0x5: leave
?
breakpoint() at netbsd:breakpoint+0x5
db_panic() at netbsd:db_panic+0xec sys/ddb/db_panic.c:69
vpanic() at netbsd:vpanic+0x2f2 sys/kern/subr_prf.c:293
Report() at netbsd:Report+0x3b sys/../common/lib/libc/misc/ubsan.c:1352
HandlePointerOverflow() at netbsd:HandlePointerOverflow+0xd2 sys/../common/lib/libc/misc/ubsan.c:706
sys_rasctl() at netbsd:sys_rasctl+0x641 ras_install sys/kern/kern_ras.c:183 [inline]
sys_rasctl() at netbsd:sys_rasctl+0x641 sys/kern/kern_ras.c:288
sys___syscall() at netbsd:sys___syscall+0x1e4 sy_call sys/sys/syscallvar.h:65 [inline]
sys___syscall() at netbsd:sys___syscall+0x1e4 sys/kern/sys_syscall.c:90
syscall() at netbsd:syscall+0x2da sy_call sys/sys/syscallvar.h:65 [inline]
syscall() at netbsd:syscall+0x2da sy_invoke sys/sys/syscallvar.h:94 [inline]
syscall() at netbsd:syscall+0x2da sys/arch/x86/x86/syscall.c:138
--- syscall (number 343 via SYS_syscall) ---
netbsd:syscall+0x2da:
Panic string: UBSan: Undefined Behavior in /syzkaller/managers/ci2-netbsd-kubsan/kernel/sys/kern/kern_ras.c:183:10, pointer expression with base 0 overflowed to 0xfffffffffffffff9

PID LID S CPU FLAGS STRUCT LWP * NAME WAIT
2745 2740 3 1 180 ffffc8d0d95356c0 syz-executor.5 parked
2745 2745 2 1 10000000 ffffc8d0e2450240 syz-executor.5
1441 1698 3 0 180 ffffc8d0dec62a40 syz-executor.2 parked
1441 2088 3 0 180 ffffc8d0e1b736c0 syz-executor.2 socket
1441 1441 2 0 10000000 ffffc8d0de475180 syz-executor.2
2365 >1166 7 1 0 ffffc8d0de863100 syz-executor.4
2365 2365 2 1 10000000 ffffc8d0d4530580 syz-executor.4
2206 2383 2 1 0 ffffc8d0de52e300 syz-executor.3
2206 >2206 7 0 10000000 ffffc8d0e184ba80 syz-executor.3
1176 2358 3 0 180 ffffc8d0d4530140 syz-executor.0 parked
1176 1699 3 0 180 ffffc8d0d189b8c0 syz-executor.0 parked
1176 1061 2 1 100 ffffc8d0dec62600 syz-executor.0
1176 1176 2 0 10000000 ffffc8d0de98abc0 syz-executor.0
2151 2151 3 0 180 ffffc8d0dbb4ab40 syz-executor.1 parked
551 551 3 0 180 ffffc8d0d188f080 syz-executor.1 parked
665 665 3 1 180 ffffc8d0dec621c0 syz-executor.1 parked
842 842 2 0 140 ffffc8d0d45309c0 syz-executor.5
1623 1623 3 0 180 ffffc8d0dbb4a2c0 syz-executor.5 parked
1108 1110 3 0 11100000 ffffc8d0de72f480 syz-executor.5 vfork
1108 1108 3 0 11000000 ffffc8d0d2324540 syz-executor.5 lwpwait
415 415 3 0 180 ffffc8d0d19d7500 syz-executor.2 parked
407 407 3 0 180 ffffc8d0d19d70c0 syz-executor.2 parked
387 387 3 1 180 ffffc8d0df480940 syz-executor.2 parked
1452 1452 3 1 180 ffffc8d0dbb4a700 syz-executor.2 parked
1469 1469 3 1 180 ffffc8d0de72f040 syz-executor.5 parked
1463 1463 3 0 180 ffffc8d0d19d7940 syz-executor.2 parked
1456 1360 3 1 11100000 ffffc8d0de98a780 syz-executor.5 vfork
1456 1456 3 0 11000000 ffffc8d0d0d53700 syz-executor.5 lwpwait
982 982 2 0 140 ffffc8d0d0c40b00 syz-executor.4
1000 1000 2 1 140 ffffc8d0d235d140 syz-executor.2
1129 1129 2 1 140 ffffc8d0d53a4240 syz-executor.1
1151 1151 2 1 140 ffffc8d0d2d72a80 syz-executor.3
425 425 2 1 140 ffffc8d0d235d9c0 syz-executor.0
1195 989 3 1 1c0 ffffc8d0d9535280 syz-fuzzer wait
1195 988 3 1 180 ffffc8d0d188f900 syz-fuzzer parked
1195 1222 3 1 180 ffffc8d0d2324980 syz-fuzzer wait
1195 980 3 1 180 ffffc8d0d53a4680 syz-fuzzer wait
1195 859 3 1 180 ffffc8d0d235d580 syz-fuzzer wait
1195 1224 3 0 180 ffffc8d0d2d72640 syz-fuzzer wait
1195 1077 3 0 180 ffffc8d0d24af180 syz-fuzzer kqueue
1195 1192 3 1 180 ffffc8d0d2324100 syz-fuzzer parked
1195 1220 3 0 180 ffffc8d0d09da240 syz-fuzzer parked
1195 1106 3 0 180 ffffc8d0d24afa00 syz-fuzzer wait
1195 1054 3 0 1c0 ffffc8d0d09daac0 syz-fuzzer parked
1195 1194 3 0 180 ffffc8d0d0c40280 syz-fuzzer parked
1195 1195 3 1 180 ffffc8d0d09da680 syz-fuzzer parked
973 973 3 1 180 ffffc8d0d060a600 sshd select
1074 1074 3 1 180 ffffc8d0d2d72200 getty nanoslp
1254 1254 3 0 180 ffffc8d0d294aa40 getty nanoslp
1259 1259 3 0 180 ffffc8d0d294a600 getty nanoslp
1258 1258 3 0 1c0 ffffc8d0d294a1c0 getty ttyraw
1093 1093 3 1 180 ffffc8d0d189b480 sshd select
942 942 3 0 180 ffffc8d0d24af5c0 powerd kqueue
687 687 3 1 180 ffffc8d0d0f06b80 syslogd kqueue
547 547 3 0 180 ffffc8d0d1931bc0 dhcpcd poll
546 546 3 1 180 ffffc8d0d0f06300 dhcpcd poll
600 600 3 1 180 ffffc8d0d0d532c0 dhcpcd poll
588 588 3 1 180 ffffc8d0d1931340 dhcpcd poll
289 289 3 1 180 ffffc8d0d0d53b40 dhcpcd poll
288 288 3 1 180 ffffc8d0d0f06740 dhcpcd poll
351 351 3 1 180 ffffc8d0d0c406c0 dhcpcd poll
1 1 3 0 180 ffffc8d0c8446980 init wait
0 1171 5 1 200 ffffc8d0deb9a4c0 (zombie)
0 898 3 0 200 ffffc8d0d1931780 acctwatch actwat
0 967 3 0 200 ffffc8d0d060aa40 physiod physiod
0 194 3 1 200 ffffc8d0d0695a80 pooldrain pooldrain
0 193 3 0 200 ffffc8d0d0695640 ioflush syncer
0 192 3 0 200 ffffc8d0d0695200 pgdaemon pgdaemon
0 167 3 0 200 ffffc8d0d060a1c0 usb7 usbevt
0 166 3 1 200 ffffc8d0cd5a5a00 usb6 usbevt
0 165 3 1 200 ffffc8d0cd5a55c0 usb5 usbevt
0 164 3 0 200 ffffc8d0cd5a5180 usb4 usbevt
0 31 3 0 240 ffffc8d0c84a89c0 usb3 tstile
0 63 3 0 200 ffffc8d0c84a8580 usb2 usbevt
0 126 3 0 200 ffffc8d0c83ed300 usb1 usbevt
0 125 3 0 200 ffffc8d0c83ed740 usb0 usbevt
0 124 3 1 200 ffffc8d0c83edb80 usbtask-dr usbtsk
0 123 3 0 200 ffffc8d0c7d4d6c0 usbtask-hc usbtsk
0 122 3 0 200 ffffc8d0c84a8140 npfgc0 npfgcw
0 121 3 1 200 ffffc8d0c8446540 rt_free rt_free
0 120 3 1 200 ffffc8d0c8446100 unpgc unpgc
0 119 3 0 200 ffffc8d0c8461940 key_timehandler key_timehandler
0 118 3 1 200 ffffc8d0c8461500 icmp6_wqinput/1 icmp6_wqinput
0 117 3 0 200 ffffc8d0c84610c0 icmp6_wqinput/0 icmp6_wqinput
0 116 3 0 200 ffffc8d0c843c900 nd6_timer nd6_timer
0 115 3 1 200 ffffc8d0c843c4c0 carp6_wqinput/1 carp6_wqinput
0 114 3 0 200 ffffc8d0c843c080 carp6_wqinput/0 carp6_wqinput
0 113 3 1 200 ffffc8d0c84178c0 carp_wqinput/1 carp_wqinput
0 112 3 0 200 ffffc8d0c8417480 carp_wqinput/0 carp_wqinput
0 111 3 1 200 ffffc8d0c8417040 icmp_wqinput/1 icmp_wqinput
0 110 3 0 200 ffffc8d0c83fabc0 icmp_wqinput/0 icmp_wqinput
0 109 3 0 200 ffffc8d0c83fa780 rt_timer rt_timer
0 108 3 0 200 ffffc8d0c83fa340 vmem_rehash vmem_rehash
0 99 3 0 200 ffffc8d0c7d62b40 entbutler entropy
0 98 3 1 200 ffffc8d0c7d62700 viomb balloon
0 97 3 1 200 ffffc8d0c7d622c0 vioif0_txrx/1 vioif0_txrx
0 96 3 0 200 ffffc8d0c7d4db00 vioif0_txrx/0 vioif0_txrx
0 29 3 1 200 ffffc8d0c7d4d280 scsibus0 sccomp
0 28 3 0 200 ffffc8d0c67d3ac0 pms0 pmsreset
0 27 3 1 200 ffffc8d0c67d3680 xcall/1 xcall
0 26 1 1 200 ffffc8d0c67d3240 softser/1
0 25 1 1 200 ffffc8d0c679ea80 softclk/1
0 24 1 1 200 ffffc8d0c679e640 softbio/1
0 23 1 1 200 ffffc8d0c679e200 softnet/1
0 22 1 1 201 ffffc8d1f5737a40 idle/1
0 21 3 1 200 ffffc8d1f5737600 lnxsyswq lnxsyswq
0 20 3 1 200 ffffc8d1f57371c0 lnxubdwq lnxubdwq
0 19 3 1 200 ffffc8d1f5742a00 lnxpwrwq lnxpwrwq
0 18 3 1 200 ffffc8d1f57425c0 lnxlngwq lnxlngwq
0 17 3 1 200 ffffc8d1f5742180 lnxhipwq lnxhipwq
0 16 3 0 200 ffffc8d1f575d9c0 lnxrcugc lnxrcugc
0 15 3 0 200 ffffc8d1f575d580 sysmon smtaskq
0 14 3 1 200 ffffc8d1f575d140 pmfsuspend pmfsuspend
0 13 3 1 200 ffffc8d1f576a980 pmfevent pmfevent
0 12 3 0 200 ffffc8d1f576a540 sopendfree sopendfr
0 11 3 0 200 ffffc8d1f576a100 iflnkst iflnkst
0 10 3 0 200 ffffc8d1f679b940 nfssilly nfssilly
0 9 3 1 200 ffffc8d1f679b500 vdrain vdrain
0 8 3 0 200 ffffc8d1f679b0c0 modunload mod_unld
0 7 3 0 200 ffffc8d1f67c2900 xcall/0 xcall
0 6 1 0 200 ffffc8d1f67c24c0 softser/0
0 5 1 0 200 ffffc8d1f67c2080 softclk/0
0 4 1 0 200 ffffc8d1f67f18c0 softbio/0
0 3 1 0 200 ffffc8d1f67f1480 softnet/0
0 2 1 0 201 ffffc8d1f67f1040 idle/0
0 0 3 0 200 ffffffff86534180 swapper uvm
[Locks tracked through LWPs]

****** LWP 2206.2383 (syz-executor.3) @ 0xffffc8d0de52e300, l_stat=2

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at vhci_attach)
lock address : 0xffffc9000f9986f0 type : sleep/adaptive
initialized : 0xffffffff815ed556
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 1
relevant cpu : 1 last held: 1
relevant lwp : 0xffffc8d0de52e300 last held: 000000000000000000
last locked : 0xffffffff815f2e67 unlocked*: 0xffffffff815f3325
owner field : 0xffffc8d0de52e300 wait/spin: 1/0
Turnstile:
=> 0 waiting readers:
=> 1 waiting writers: 0xffffc8d0c84a89c0

****** LWP 546.546 (dhcpcd) @ 0xffffc8d0d0f06300, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at module_hook_init)
lock address : 0xffffffff869c7300 type : sleep/adaptive
initialized : 0xffffffff836ed137
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 0
relevant lwp : 0xffffc8d0d0f06300 last held: 000000000000000000
last locked : 000000000000000000 unlocked*: 000000000000000000
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 600.600 (dhcpcd) @ 0xffffc8d0d0d532c0, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at module_hook_init)
lock address : 0xffffffff869c7300 type : sleep/adaptive
initialized : 0xffffffff836ed137
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 0
relevant lwp : 0xffffc8d0d0d532c0 last held: 000000000000000000
last locked : 000000000000000000 unlocked*: 000000000000000000
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 288.288 (dhcpcd) @ 0xffffc8d0d0f06740, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at module_hook_init)
lock address : 0xffffffff869c7300 type : sleep/adaptive
initialized : 0xffffffff836ed137
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 0
relevant lwp : 0xffffc8d0d0f06740 last held: 000000000000000000
last locked : 000000000000000000 unlocked*: 000000000000000000
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 351.351 (dhcpcd) @ 0xffffc8d0d0c406c0, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at module_hook_init)
lock address : 0xffffffff869c7300 type : sleep/adaptive
initialized : 0xffffffff836ed137
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 0
relevant lwp : 0xffffc8d0d0c406c0 last held: 000000000000000000
last locked : 000000000000000000 unlocked*: 000000000000000000
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 0.11 (iflnkst) @ 0xffffc8d1f576a100, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at module_hook_init)
lock address : 0xffffffff869c7300 type : sleep/adaptive
initialized : 0xffffffff836ed137
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffffc8d1f576a100 last held: 000000000000000000
last locked : 000000000000000000 unlocked*: 000000000000000000
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 0.5 (softclk/0) @ 0xffffc8d1f67c2080, l_stat=1

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at module_hook_init)
lock address : 0xffffffff869c7300 type : sleep/adaptive
initialized : 0xffffffff836ed137
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffffc8d1f67c2080 last held: 000000000000000000
last locked : 000000000000000000 unlocked*: 000000000000000000
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 0.0 (swapper) @ 0xffffffff86534180, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at module_hook_init)
lock address : 0xffffffff869c7300 type : sleep/adaptive
initialized : 0xffffffff836ed137
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffffffff86534180 last held: 000000000000000000
last locked : 000000000000000000 unlocked*: 000000000000000000
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

[Locks tracked through CPUs]

******* Locks held on cpu1:

* Lock 0 (initialized at kprintf_init)
lock address : 0xffffffff86aaa668 type : spin
initialized : 0xffffffff838376c3
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 1
relevant lwp : 0xffffc8d0de863100 last held: 0xffffc8d0de863100
last locked* : 0xffffffff83837751 unlocked : 0xffffffff838377cc
owner field : 0x0000000000000800 wait/spin: 0/1

PAGE FLAG PQ UOBJECT UANON
0xffffc90000007180 0045 00000000 0x0 0x0
0xffffc90000007200 0045 00000000 0x0 0x0
0xffffc90000007280 0045 00000000 0x0 0x0
0xffffc90000007300 0045 00000000 0x0 0x0
0xffffc90000007380 0045 00000000 0x0 0x0
0xffffc90000007400 0045 00000000 0x0 0x0
0xffffc90000007480 0045 00000000 0x0 0x0
0xffffc90000007500 0045 00000000 0x0 0x0
0xffffc90000007580 0045 00000000 0x0 0x0
0xffffc90000007600 0045 00000000 0x0 0x0
0xffffc90000007680 0041 00000000 0x0 0x0
0xffffc90000007700 0041 00000000 0x0 0x0
0xffffc90000007780 0041 00000000 0x0 0x0
0xffffc90000007800 0041 00000000 0x0 0x0
0xffffc90000007880 0041 00000000 0x0 0x0
0xffffc90000007900 0045 00000000 0x0 0x0
0xffffc90000007980 0041 00000000 0x0 0x0
0xffffc90000007a00 0041 00000000 0x0 0x0
0xffffc90000007a80 0041 00000000 0x0 0x0
0xffffc90000007b00 0041 00000000 0x0 0x0
0xffffc90000007b80 0041 00000000 0x0 0x0
0xffffc90000007c00 0041 00000000 0x0 0x0
0xffffc90000007c80 0041 00000000 0x0 0x0
0xffffc90000007d00 0041 00000000 0x0 0x0
0xffffc90000007d80 0041 00000000 0x0 0x0
0xffffc90000007e00 0041 00000000 0x0 0x0
0xffffc90000007e80 0041 00000000 0x0 0x0
0xffffc90000007f00 0041 00000000 0x0 0x0
0xffffc90000007f80 0041 00000000 0x0 0x0
0xffffc90000008000 0041 00000000 0x0 0x0
0xffffc90000008080 0041 00000000 0x0 0x0
0xffffc90000008100 0041 00000000 0x0 0x0
0xffffc90000008180 0041 00000000 0x0 0x0
0xffffc90000008200 0041 00000000 0x0 0x0
0xffffc90000008280 0041 00000000 0x0 0x0
0xffffc90000008300 0041 00000000 0x0 0x0
0xffffc90000008380 0041 00000000 0x0 0x0
0xffffc90000008400 0041 00000000 0x0 0x0
0xffffc90000008480 0041 00000000 0x0 0x0
0xffffc90000008500 0041 00000000 0x0 0x0
0xffffc90000008580 0041 00000000 0x0 0x0
0xffffc90000008600 0041 00000000 0x0 0x0
0xffffc90000008680 0041 00000000 0x0 0x0
0xffffc90000008700 0041 00000000 0x0 0x0
0xffffc90000008780 0041 00000000 0x0 0x0
0xffffc90000008800 0041 00000000 0x0 0x0
0xffffc90000008880 0041 00000000 0x0 0x0
0xffffc90000008900 0041 00000000 0x0 0x0
0xffffc90000008980 0041 00000000 0x0 0x0
0xffffc90000008a00 0041 00000000 0x0 0x0
0xffffc90000008a80 0041 00000000 0x0 0x0
0xffffc90000008b00 0041 00000000 0x0 0x0
0xffffc90000008b80 0045 00000000 0x0 0x0
0xffffc90000008c00 0045 00000000 0x0 0x0
0xffffc90000008c80 0041 00000000 0x0 0x0
0xffffc90000008d00 0041 00000000 0x0 0x0
0xffffc90000008d80 0041 00000000 0x0 0x0
0xffffc90000008e00 0041 00000000 0x0 0x0
0xffffc90000008e80 0041 00000000 0x0 0x0
0xffffc90000008f00 0041 00000000 0x0 0x0
0xffffc90000008f80 0041 00000000 0x0 0x0
0xffffc90000009000 0041 00000000 0x0 0x0
0xffffc90000009080 0045 00000000 0x0 0x0
0xffffc90000009100 0045 00000000 0x0 0x0
0xffffc90000009180 0041 00000000 0x0 0x0
0xffffc90000009200 0041 00000000 0x0 0x0
0xffffc90000009280 0041 00000000 0x0 0x0
0xffffc90000009300 0041 00000000 0x0 0x0
0xffffc90000009380 0041 00000000 0x0 0x0
0xffffc90000009400 0041 00000000 0x0 0x0
0xffffc90000009480 0041 00000000 0x0 0x0
0xffffc90000009500 0041 00000000 0x0 0x0
0xffffc90000009580 0041 00000000 0x0 0x0
0xffffc90000009600 0041 00000000 0x0 0x0
0xffffc90000009680 0041 00000000 0x0 0x0
0xffffc90000009700 0041 00000000 0x0 0x0
0xffffc90000009780 0041 00000000 0x0 0x0
0xffffc90000009800 0041 00000000 0x0 0x0
0xffffc90000009880 0041 00000000 0x0 0x0
0xffffc90000009900 0041 00000000 0x0 0x0
0xffffc90000009980 0041 00000000 0x0 0x0
0xffffc90000009a00 0041 00000000 0x0 0x0
0xffffc90000009a80 0045 00000000 0x0 0x0
0xffffc90000009b00 0041 00000000 0x0 0x0
0xffffc90000009b80 0041 00000000 0x0 0x0
0xffffc90000009c00 0041 00000000 0x0 0x0
0xffffc90000009c80 0041 00000000 0x0 0x0
0xffffc90000009d00 0041 00000000 0x0 0x0
0xffffc90000009d80 0041 00000000 0x0 0x0
0xffffc90000009e00 0041 00000000 0x0 0x0
0xffffc90000009e80 0041 00000000 0x0 0x0
0xffffc90000009f00 0041 00000000 0x0 0x0
0xffffc90000009f80 0041 00000000 0x0 0x0
0xffffc9000000a000 0041 00000000 0x0 0x0
0xffffc9000000a080 0041 00000000 0x0 0x0
0xffffc9000000a100 0041 00000000 0x0 0x0
0xffffc9000000a180 0041 00000000 0x0 0x0
0xffffc9000000a200 0041 00000000 0x0 0x0
0xffffc9000000a280 0041 00000000 0x0 0x0
0xffffc9000000a300 0041 00000000 0x0 0x0
0xffffc9000000a380 0041 00000000 0x0 0x0
0xffffc9000000a400 0041 00000000 0x0 0x0
0xffffc9000000a480 0041 00000000 0x0 0x0
0xffffc9000000a500 0041 00000000 0x0 0x0
0xffffc9000000a580 0041 00000000 0x0 0x0
0xffffc9000000a600 0045 00000000 0x0 0x0
0xffffc9000000a680 0041 00000000 0x0 0x0
0xffffc9000000a700 0041 00000000 0x0 0x0
0xffffc9000000a780 0041 00000000 0x0 0x0
0xffffc9000000a800 0041 00000000 0x0 0x0
0xffffc9000000a880 0041 00000000 0x0 0x0
0xffffc9000000a900 0041 00000000 0x0 0x0
0xffffc9000000a980 0041 00000000 0x0 0x0
0xffffc9000000aa00 0041 00000000 0x0 0x0
0xffffc9000000aa80 0041 00000000 0x0 0x0
0xffffc9000000ab00 0041 00000000 0x0 0x0
0xffffc9000000ab80 0041 00000000 0x0 0x0
0xffffc9000000ac00 0041 00000000 0x0 0x0
0xffffc9000000ac80 0041 00000000 0x0 0x0
0xffffc9000000ad00 0041 00000000 0x0 0x0
0xffffc9000000ad80 0041 00000000 0x0 0x0
0xffffc9000000ae00 0041 00000000 0x0 0x0
0xffffc9000000ae80 0045 00000000 0x0 0x0
0xffffc9000000af00 0045 00000000 0x0 0x0
0xffffc9000000af80 0041 00000000 0x0 0x0
0xffffc9000000b000 0041 00000000 0x0 0x0
0xffffc9000000b080 0041 00000000 0x0 0x0
0xffffc9000000b100 0041 00000000 0x0 0x0
0xffffc9000000b180 0045 00000000 0x0 0x0
0xffffc9000000b200 0045 00000000 0x0 0x0
0xffffc9000000b280 0045 00000000 0x0 0x0
0xffffc9000000b300 0045 00000000 0x0 0x0
0xffffc9000000b380 0045 00000000 0x0 0x0
0xffffc9000000b400 0041 00000000 0x0 0x0
0xffffc9000000b480 0041 00000000 0x0 0x0
0xffffc9000000b500 0041 00000000 0x0 0x0
0xffffc9000000b580 0045 00000000 0x0 0x0
0xffffc9000000b600 0045 00000000 0x0 0x0
0xffffc9000000b680 0045 00000000 0x0 0x0
0xffffc9000000b700 0045 00000000 0x0 0x0
0xffffc9000000b780 0045 00000000 0x0 0x0
0xffffc9000000b800 0041 00000000 0x0 0x0
0xffffc9000000b880 0041 00000000 0x0 0x0
0xffffc9000000b900 0045 00000000 0x0 0x0
0xffffc9000000b980 0045 00000000 0x0 0x0
0xffffc9000000ba00 0045 00000000 0x0 0x0
0xffffc9000000ba80 0045 00000000 0x0 0x0
0xffffc9000000bb00 0045 00000000 0x0 0x0
0xffffc9000000bb80 0045 00000000 0x0 0x0
0xffffc9000000bc00 0045 00000000 0x0 0x0
0xffffc9000000bc80 0041 00000000 0x0 0x0
0xffffc9000000bd00 0045 00000000 0x0 0x0
0xffffc9000000bd80 0045 00000000 0x0 0x0
0xffffc9000000be00 0045 00000000 0x0 0x0
0xffffc9000000be80 0045 00000000 0x0 0x0
0xffffc9000000bf00 0045 00000000 0x0 0x0
0xffffc9000000bf80 0045 00000000 0x0 0x0
0xffffc9000000c000 0045 00000000 0x0 0x0
0xffffc9000000c080 0045 00000000 0x0 0x0
0xffffc9000000c100 0045 00000000 0x0 0x0
0xffffc9000000c180 0045 00000000 0x0 0x0
0xffffc9000000c200 0045 00000000 0x0 0x0
0xffffc9000000c280 0045 00000000 0x0 0x0
0xffffc9000000c300 0045 00000000 0x0 0x0
0xffffc9000000c380 0045 00000000 0x0 0x0
0xffffc9000000c400 0045 00000000 0x0 0x0
0xffffc9000000c480 0045 00000000 0x0 0x0
0xffffc9000000c500 0045 00000000 0x0 0x0
0xffffc9000000c580 0045 00000000 0x0 0x0
0xffffc9000000c600 0045 00000000 0x0 0x0
0xffffc9000000c680 0045 00000000 0x0 0x0
0xffffc9000000c700 0041 00000000 0x0 0x0
0xffffc9000000c780 0045 00000000 0x0 0x0
0xffffc9000000c800 0045 00000000 0x0 0x0
0xffffc9000000c880 0045 00000000 0x0 0x0
0xffffc9000000c900 0045 00000000 0x0 0x0
0xffffc9000000c980 0045 00000000 0x0 0x0
0xffffc9000000ca00 0045 00000000 0x0 0x0
0xffffc9000000ca80 0041 00000000 0x0 0x0
0xffffc9000000cb00 0041 00000000 0x0 0x0
0xffffc9000000cb80 0041 00000000 0x0 0x0
0xffffc9000000cc00 0045 00000000 0x0 0x0
0xffffc9000000cc80 0045 00000000 0x0 0x0
0xffffc9000000cd00 0045 00000000 0x0 0x0
0xffffc9000000cd80 0041 00000000 0x0 0x0
0xffffc9000000ce00 0041 00000000 0x0 0x0
0xffffc9000000ce80 0041 00000000 0x0 0x0
0xffffc9000000cf00 0041 00000000 0x0 0x0
0xffffc9000000cf80 0041 00000000 0x0 0x0
0xffffc9000000d000 0045 00000000 0x0 0x0
0xffffc9000000d080 0045 00000000 0x0 0x0
0xffffc9000000d100 0041 00000000 0x0 0x0
0xffffc9000000d180 0041 00000000 0x0 0x0
0xffffc9000000d200 0041 00000000 0x0 0x0
0xffffc9000000d280 0041 00000000 0x0 0x0
0xffffc9000000d300 0045 00000000 0x0 0x0
0xffffc9000000d380 0041 00000000 0x0 0x0
0xffffc9000000d400 0041 00000000 0x0 0x0
0xffffc9000000d480 0045 00000000 0x0 0x0
0xffffc9000000d500 0041 00000000 0x0 0x0
0xffffc9000000d580 0041 00000000 0x0 0x0
0xffffc9000000d600 0041 00000000 0x0 0x0
0xffffc9000000d680 0045 00000000 0x0 0x0
0xffffc9000000d700 0041 00000000 0x0 0x0
0xffffc9000000d780 0045 00000000 0x0 0x0
0xffffc9000000d800 0041 00000000 0x0 0x0
0xffffc9000000d880 0041 00000000 0x0 0x0
0xffffc9000000d900 0041 00000000 0x0 0x0
0xffffc9000000d980 0041 00000000 0x0 0x0
0xffffc9000000da00 0041 00000000 0x0 0x0
0xffffc9000000da80 0041 00000000 0x0 0x0
0xffffc9000000db00 0045 00000000 0x0 0x0
0xffffc9000000db80 0041 00000000 0x0 0x0
0xffffc9000000dc00 0041 00000000 0x0 0x0
0xffffc9000000dc80 0041 00000000 0x0 0x0
0xffffc9000000dd00 0041 00000000 0x0 0x0
0xffffc9000000dd80 0041 00000000 0x0 0x0
0xffffc9000000de00 0041 00000000 0x0 0x0
0xffffc9000000de80 0041 00000000 0x0 0x0
0xffffc9000000df00 0045 00000000 0x0 0x0
0xffffc9000000df80 0045 00000000 0x0 0x0
0xffffc9000000e000 0045 00000000 0x0 0x0
0xffffc9000000e080 0041 00000000 0x0 0x0
0xffffc9000000e100 0041 00000000 0x0 0x0
0xffffc9000000e180 0045 00000000 0x0 0x0
0xffffc9000000e200 0045 00000000 0x0 0x0
0xffffc9000000e280 0045 00000000 0x0 0x0
0xffffc9000000e300 0045 00000000 0x0 0x0
0xffffc9000000e380 0045 00000000 0x0 0x0
0xffffc9000000e400 0041 00000000 0x0 0x0
0xffffc9000000e480 0041 00000000 0x0 0x0
0xffffc9000000e500 0045 00000000 0x0 0x0
0xffffc9000000e580 0041 00000000 0x0 0x0
0xffffc9000000e600 0041 00000000 0x0 0x0
0xffffc9000000e680 0041 00000000 0x0 0x0
0xffffc9000000e700 0041 00000000 0x0 0x0
0xffffc9000000e780 0045 00000000 0x0 0x0
0xffffc9000000e800 0045 00000000 0x0 0x0
0xffffc9000000e880 0045 00000000 0x0 0x0
0xffffc9000000e900 0041 00000000 0x0 0x0
0xffffc9000000e980 0041 00000000 0x0 0x0
0xffffc9000000ea00 0041 00000000 0x0 0x0
0xffffc9000000ea80 0045 00000000 0x0 0x0
0xffffc9000000eb00 0041 00000000 0x0 0x0
0xffffc9000000eb80 0041 00000000 0x0 0x0
0xffffc9000000ec00 0045 00000000 0x0 0x0
0xffffc9000000ec80 0041 00000000 0x0 0x0
0xffffc9000000ed00 0041 00000000 0x0 0x0
0xffffc9000000ed80 0041 00000000 0x0 0x0
0xffffc9000000ee00 0041 00000000 0x0 0x0
0xffffc9000000ee80 0041 00000000 0x0 0x0
0xffffc9000000ef00 0041 00000000 0x0 0x0
0xffffc9000000ef80 0041 00000000 0x0 0x0
0xffffc9000000f000 0045 00000000 0x0 0x0
0xffffc9000000f080 0045 00000000 0x0 0x0
0xffffc9000000f100 0041 00000000 0x0 0x0
0xffffc9000000f180 0041 00000000 0x0 0x0
0xffffc9000000f200 0041 00000000 0x0 0x0
0xffffc9000000f280 0045 00000000 0x0 0x0
0xffffc9000000f300 0041 00000000 0x0 0x0
0xffffc9000000f380 0045 00000000 0x0 0x0
0xffffc9000000f400 0041 00000000 0x0 0x0
0xffffc9000000f480 0041 00000000 0x0 0x0
0xffffc9000000f500 0041 00000000 0x0 0x0
0xffffc9000000f580 0041 00000000 0x0 0x0
0xffffc9000000f600 0041 00000000 0x0 0x0
0xffffc9000000f680 0041 00000000 0x0 0x0
0xffffc9000000f700 0041 00000000 0x0 0x0
0xffffc9000000f780 0041 00000000 0x0 0x0
0xffffc9000000f800 0041 00000000 0x0 0x0
0xffffc9000000f880 0045 00000000 0x0 0x0
0xffffc9000000f900 0041 00000000 0x0 0x0
0xffffc9000000f980 0045 00000000 0x0 0x0
0xffffc9000000fa00 0045 00000000 0x0 0x0
0xffffc9000000fa80 0041 00000000 0x0 0x0
0xffffc9000000fb00 0041 00000000 0x0 0x0
0xffffc9000000fb80 0041 00000000 0x0 0x0
0xffffc9000000fc00 0045 00000000 0x0 0x0
0xffffc9000000fc80 0041 00000000 0x0 0x0
0xffffc9000000fd00 0045 00000000 0x0 0x0
0xffffc9000000fd80 0041 00000000 0x0 0x0
0xffffc9000000fe00 0041 00000000 0x0 0x0
0xffffc9000000fe80 0041 00000000 0x0 0x0
0xffffc9000000ff00 0041 00000000 0x0 0x0
0xffffc9000000ff80 0041 00000000 0x0 0x0
0xffffc90000010000 0041 00000000 0x0 0x0
0xffffc90000010080 0041 00000000 0x0 0x0
0xffffc90000010100 0041 00000000 0x0 0x0
0xffffc90000010180 0045 00000000 0x0 0x0
0xffffc90000010200 0041 00000000 0x0 0x0
0xffffc90000010280 0041 00000000 0x0 0x0
0xffffc90000010300 0041 00000000 0x0 0x0
0xffffc90000010380 0041 00000000 0x0 0x0
0xffffc90000010400 0045 00000000 0x0 0x0
0xffffc90000010480 0045 00000000 0x0 0x0
0xffffc90000010500 0045 00000000 0x0 0x0
0xffffc90000010580 0041 00000000 0x0 0x0
0xffffc90000010600 0041 00000000 0x0 0x0
0xffffc90000010680 0041 00000000 0x0 0x0
0xffffc90000010700 0045 00000000 0x0 0x0
0xffffc90000010780 0041 00000000 0x0 0x0
0xffffc90000010800 0041 00000000 0x0 0x0
0xffffc90000010880 0041 00000000 0x0 0x0
0xffffc90000010900 0041 00000000 0x0 0x0
0xffffc90000010980 0045 00000000 0x0 0x0
0xffffc90000010a00 0045 00000000 0x0 0x0
0xffffc90000010a80 0045 00000000 0x0 0x0
0xffffc90000010b00 0041 00000000 0x0 0x0
0xffffc90000010b80 0041 00000000 0x0 0x0
0xffffc90000010c00 0041 00000000 0x0 0x0
0xffffc90000010c80 0045 00000000 0x0 0x0
0xffffc90000010d00 0041 00000000 0x0 0x0
0xffffc90000010d80 0041 00000000 0x0 0x0
0xffffc90000010e00 0041 00000000 0x0 0x0
0xffffc90000010e80 0041 00000000 0x0 0x0
0xffffc90000010f00 0041 00000000 0x0 0x0
0xffffc90000010f80 0041 00000000 0x0 0x0
0xffffc90000011000 0041 00000000 0x0 0x0
0xffffc90000011080 0041 00000000 0x0 0x0
0xffffc90000011100 0041 00000000 0x0 0x0
0xffffc90000011180 0041 00000000 0x0 0x0
0xffffc90000011200 0041 00000000 0x0 0x0
0xffffc90000011280 0041 00000000 0x0 0x0
0xffffc90000011300 0041 00000000 0x0 0x0
0xffffc90000011380 0041 00000000 0x0 0x0
0xffffc90000011400 0041 00000000 0x0 0x0
0xffffc90000011480 0041 00000000 0x0 0x0
0xffffc90000011500 0041 00000000 0x0 0x0
0xffffc90000011580 0041 00000000 0x0 0x0
0xffffc90000011600 0041 00000000 0x0 0x0
0xffffc90000011680 0041 00000000 0x0 0x0
0xffffc90000011700 0041 00000000 0x0 0x0
0xffffc90000011780 0041 00000000 0x0 0x0
0xffffc90000011800 0041 00000000 0x0 0x0
0xffffc90000011880 0041 00000000 0x0 0x0
0xffffc90000011900 0041 00000000 0x0 0x0
0xffffc90000011980 0041 00000000 0x0 0x0
0xffffc90000011a00 0045 00000000 0x0 0x0
0xffffc90000011a80 0045 00000000 0x0 0x0
0xffffc90000011b00 0045 00000000 0x0 0x0
0xffffc90000011b80 0041 00000000 0x0 0x0
0xffffc90000011c00 0041 00000000 0x0 0x0
0xffffc90000011c80 0041 00000000 0x0 0x0
0xffffc90000011d00 0045 00000000 0x0 0x0
0xffffc90000011d80 0045 00000000 0x0 0x0
0xffffc90000011e00 0041 00000000 0x0 0x0
0xffffc90000011e80 0041 00000000 0x0 0x0
0xffffc90000011f00 0041 00000000 0x0 0x0
0xffffc90000011f80 0045 00000000 0x0 0x0
0xffffc90000012000 0041 00000000 0x0 0x0
0xffffc90000012080 0041 00000000 0x0 0x0
0xffffc90000012100 0041 00000000 0x0 0x0
0xffffc90000012180 0041 00000000 0x0 0x0
0xffffc90000012200 0041 00000000 0x0 0x0
0xffffc90000012280 0041 00000000 0x0 0x0
0xffffc90000012300 0041 00000000 0x0 0x0
0xffffc90000012380 0041 00000000 0x0 0x0
0xffffc90000012400 0041 00000000 0x0 0x0
0xffffc90000012480 0041 00000000 0x0 0x0
0xffffc90000012500 0041 00000000 0x0 0x0
0xffffc90000012580 0041 00000000 0x0 0x0
0xffffc90000012600 0041 00000000 0x0 0x0
0xffffc90000012680 0041 00000000 0x0 0x0
0xffffc90000012700 0041 00000000 0x0 0x0
0xffffc90000012780 0041 00000000 0x0 0x0
0xffffc90000012800 0041 00000000 0x0 0x0
0xffffc90000012880 0041 00000000 0x0 0x0
0xffffc90000012900 0041 00000000 0x0 0x0
0xffffc90000012980 0041 00000000 0x0 0x0
0xffffc90000012a00 0041 00000000 0x0 0x0
0xffffc90000012a80 0041 00000000 0x0 0x0
0xffffc90000012b00 0041 00000000 0x0 0x0
0xffffc90000012b80 0041 00000000 0x0 0x0
0xffffc90000012c00 0041 00000000 0x0 0x0
0xffffc90000012c80 0045 00000000 0x0 0x0
0xffffc90000012d00 0001 00000000 0x0 0x0
0xffffc90000012d80 0001 00000000 0x0 0x0
0xffffc90000012e00 0001 00000000 0x0 0x0
0xffffc90000012e80 0001 00000000 0x0 0x0
0xffffc90000012f00 0001 00000000 0x0 0x0
0xffffc90000012f80 0001 00000000 0x0 0x0
0xffffc90000013000 0001 00000000 0x0 0x0
0xffffc90000013080 0001 00000000 0x0 0x0
0xffffc90000013100 0001 00000000 0x0 0x0
0xffffc90000013180 0001 00000000 0x0 0x0
0xffffc90000013200 0001 00000000 0x0 0x0
0xffffc90000013280 0001 00000000 0x0 0x0
0xffffc90000013300 0001 00000000 0x0 0x0
0xffffc90000013380 0001 00000000 0x0 0x0
0xffffc90000013400 0001 00000000 0x0 0x0
0xffffc90000013480 0001 00000000 0x0 0x0
0xffffc90000013500 0001 00000000 0x0 0x0
0xffffc90000013580 0001 00000000 0x0 0x0
0xffffc90000013600 0001 00000000 0x0 0x0
0xffffc90000013680 0001 00000000 0x0 0x0
0xffffc90000013700 0001 00000000 0x0 0x0
0xffffc90000013780 0001 00000000 0x0 0x0
0xffffc90000013800 0001 00000000 0x0 0x0
0xffffc90000013880 0001 00000000 0x0 0x0
0xffffc90000013900 0001 00000000 0x0 0x0
0xffffc90000013980 0001 00000000 0x0 0x0
0xffffc90000013a00 0001 00000000 0x0 0x0
0xffffc90000013a80 0001 00000000 0x0 0x0
0xffffc90000013b00 0001 00000000 0x0 0x0
0xffffc90000013b80 0001 00000000 0x0 0x0
0xffffc90000013c00 0001 00000000 0x0 0x0
0xffffc90000013c80 0001 00000000 0x0 0x0
0xffffc90000013d00 0001 00000000 0x0 0x0
0xffffc90000013d80 0001 00000000 0x0 0x0
0xffffc90000013e00 0001 00000000 0x0 0x0
0xffffc90000013e80 0001 00000000 0x0 0x0
0xffffc90000013f00 0001 00000000 0x0 0x0
0xffffc90000013f80 0001 00000000 0x0 0x0
0xffffc90000014000 0001 00000000 0x0 0x0
0xffffc90000014080 0001 00000000 0x0 0x0
0xffffc90000014100 0001 00000000 0x0 0x0
0xffffc90000014180 0001 00000000 0x0 0x0
0xffffc90000014200 0001 00000000 0x0 0x0
0xffffc90000014280 0001 00000000 0x0 0x0
0xffffc90000014300 0001 00000000 0x0 0x0
0xffffc90000014380 0001 00000000 0x0 0x0
0xffffc90000014400 0001 00000000 0x0 0x0
0xffffc90000014480 0001 00000000 0x0 0x0
0xffffc90000014500 0001 00000000 0x0 0x0
0xffffc90000014580 0001 00000000 0x0 0x0
0xffffc90000014600 0001 00000000 0x0 0x0
0xffffc90000014680 0001 00000000 0x0 0x0
0xffffc90000014700 0001 00000000 0x0 0x0
0xffffc90000014780 0001 00000000 0x0 0x0
0xffffc90000014800 0041 00000000 0x0 0x0
0xffffc90000014880 0041 00000000 0x0 0x0
0xffffc90000014900 0041 00000000 0x0 0x0
0xffffc90000014980 0041 00000000 0x0 0x0
0xffffc90000014a00 0041 00000000 0x0 0x0
0xffffc90000014a80 0041 00000000 0x0 0x0
0xffffc90000014b00 0041 00000000 0x0 0x0
0xffffc90000014b80 0041 00000000 0x0 0x0
0xffffc90000014c00 0041 00000000 0x0 0x0
0xffffc90000014c80 0041 00000000 0x0 0x0
0xffffc90000014d00 0041 00000000 0x0 0x0
0xffffc90000014d80 0041 00000000 0x0 0x0
0xffffc90000014e00 0041 00000000 0x0 0x0
0xffffc90000014e80 0041 00000000 0x0 0x0
0xffffc90000014f00 0041 00000000 0x0 0x0
0xffffc90000014f80 0041 00000000 0x0 0x0
0xffffc90000015000 0041 00000000 0x0 0x0
0xffffc90000015080 0041 00000000 0x0 0x0
0xffffc90000015100 0041 00000000 0x0 0x0
0xffffc90000015180 0041 00000000 0x0 0x0
0xffffc90000015200 0041 00000000 0x0 0x0
0xffffc90000015280 0041 00000000 0x0 0x0
0xffffc90000015300 0041 00000000 0x0 0x0
0xffffc90000015380 0041 00000000 0x0 0x0
0xffffc90000015400 0041 00000000 0x0 0x0
0xffffc90000015480 0041 00000000 0x0 0x0
0xffffc90000015500 0041 00000000 0x0 0x0
0xffffc90000015580 0041 00000000 0x0 0x0
0xffffc90000015600 0041 00000000 0x0 0x0
0xffffc90000015680 0041 00000000 0x0 0x0
0xffffc90000015700 0041 00000000 0x0 0x0
0xffffc90000015780 0041 00000000 0x0 0x0
0xffffc90000015800 0041 00000000 0x0 0x0
0xffffc90000015880 0041 00000000 0x0 0x0
0xffffc90000015900 0041 00000000 0x0 0x0
0xffffc90000015980 0041 00000000 0x0 0x0
0xffffc90000015a00 0041 00000000 0x0 0x0
0xffffc90000015a80 0041 00000000 0x0 0x0
0xffffc90000015b00 0041 00000000 0x0 0x0
0xffffc90000015b80 0041 00000000 0x0 0x0
0xffffc90000015c00 0041 00000000 0x0 0x0
0xffffc90000015c80 0041 00000000 0x0 0x0
0xffffc90000015d00 0001 00000000 0x0 0x0
0xffffc90000015d80 0001 00000000 0x0 0x0
0xffffc90000015e00 0001 00000000 0x0 0x0
0xffffc90000015e80 0001 00000000 0x0 0x0
0xffffc90000015f00 0001 00000000 0x0 0x0
0xffffc90000015f80 0001 00000000 0x0 0x0
0xffffc90000016000 0001 00000000 0x0 0x0
0xffffc90000016080 0001 00000000 0x0 0x0
0xffffc90000016100 0001 00000000 0x0 0x0
0xffffc90000016180 0001 00000000 0x0 0x0
0xffffc90000016200 0001 00000000 0x0 0x0
0xffffc90000016280 0001 00000000 0x0 0x0
0xffffc90000016300 0001 00000000 0x0 0x0
0xffffc90000016380 0001 00000000 0x0 0x0
0xffffc90000016400 0001 00000000 0x0 0x0
0xffffc90000016480 0001 00000000 0x0 0x0
0xffffc90000016500 0001 00000000 0x0 0x0
0xffffc90000016580 0001 00000000 0x0 0x0
0xffffc90000016600 0001 00000000 0x0 0x0
0xffffc90000016680 0001 00000000 0x0 0x0
0xffffc90000016700 0001 00000000 0x0 0x0
0xffffc90000016780 0001 00000000 0x0 0x0
0xffffc90000016800 0001 00000000 0x0 0x0
0xffffc90000016880 0001 00000000 0x0 0x0
0xffffc90000016900 0001 00000000 0x0 0x0
0xffffc90000016980 0001 00000000 0x0 0x0
0xffffc90000016a00 0001 00000000 0x0 0x0
0xffffc90000016a80 0001 00000000 0x0 0x0
0xffffc90000016b00 0001 00000000 0x0 0x0
0xffffc90000016b80 0001 00000000 0x0 0x0
0xffffc90000016c00 0001 00000000 0x0 0x0
0xffffc90000016c80 0001 00000000 0x0 0x0
0xffffc90000016d00 0001 00000000 0x0 0x0
0xffffc90000016d80 0001 00000000 0x0 0x0
0xffffc90000016e00 0001 00000000 0x0 0x0
0xffffc90000016e80 0001 00000000 0x0 0x0
0xffffc90000016f00 0001 00000000 0x0 0x0
0xffffc90000016f80 0001 00000000 0x0 0x0
0xffffc90000017000 0001 00000000 0x0 0x0
0xffffc90000017080 0001 00000000 0x0 0x0
0xffffc90000017100 0001 00000000 0x0 0x0
0xffffc90000017180 0001 00000000 0x0 0x0
0xffffc90000017200 0001 00000000 0x0 0x0
0xffffc90000017280 0001 00000000 0x0 0x0
0xffffc90000017300 0001 00000000 0x0 0x0
0xffffc90000017380 0001 00000000 0x0 0x0
0xffffc90000017400 0001 00000000 0x0 0x0
0xffffc90000017480 0001 00000000 0x0 0x0
0xffffc90000017500 0001 00000000 0x0 0x0
0xffffc90000017580 0001 00000000 0x0 0x0
0xffffc90000017600 0001 00000000 0x0 0x0
0xffffc90000017680 0001 00000000 0x0 0x0
0xffffc90000017700 0001 00000000 0x0 0x0
0xffffc90000017780 0001 00000000 0x0 0x0
0xffffc90000017800 0041 00000000 0x0 0x0
0xffffc90000017880 0041 00000000 0x0 0x0
0xffffc90000017900 0041 00000000 0x0 0x0
0xffffc90000017980 0041 00000000 0x0 0x0
0xffffc90000017a00 0041 00000000 0x0 0x0
0xffffc90000017a80 0041 00000000 0x0 0x0
0xffffc90000017b00 0041 00000000 0x0 0x0
0xffffc90000017b80 0041 00000000 0x0 0x0
0xffffc90000017c00 0041 00000000 0x0 0x0
0xffffc90000017c80 0041 00000000 0x0 0x0
0xffffc90000017d00 0041 00000000 0x0 0x0
0xffffc90000017d80 0041 00000000 0x0 0x0
0xffffc90000017e00 0041 00000000 0x0 0x0
0xffffc90000017e80 0041 00000000 0x0 0x0
0xffffc90000017f00 0041 00000000 0x0 0x0
0xffffc90000017f80 0041 00000000 0x0 0x0
0xffffc90000018000 0041 00000000 0x0 0x0
0xffffc90000018080 0041 00000000 0x0 0x0
0xffffc90000018100 0041 00000000 0x0 0x0
0xffffc90000018180 0041 00000000 0x0 0x0
0xffffc90000018200 0041 00000000 0x0 0x0
0xffffc90000018280 0041 00000000 0x0 0x0
0xffffc90000018300 0041 00000000 0x0 0x0
0xffffc90000018380 0041 00000000 0x0 0x0
0xffffc90000018400 0041 00000000 0x0 0x0
0xffffc90000018480 0041 00000000 0x0 0x0
0xffffc90000018500 0041 00000000 0x0 0x0
0xffffc90000018580 0041 00000000 0x0 0x0
0xffffc90000018600 0041 00000000 0x0 0x0
0xffffc90000018680 0041 00000000 0x0 0x0
0xffffc90000018700 0041 00000000 0x0 0x0
0xffffc90000018780 0041 00000000 0x0 0x0
0xffffc90000018800 0041 00000000 0x0 0x0
0xffffc90000018880 0041 00000000 0x0 0x0
0xffffc90000018900 0041 00000000 0x0 0x0
0xffffc90000018980 0041 00000000 0x0 0x0
0xffffc90000018a00 0041 00000000 0x0 0x0
0xffffc90000018a80 0041 00000000 0x0 0x0
0xffffc90000018b00 0041 00000000 0x0 0x0
0xffffc90000018b80 0041 00000000 0x0 0x0
0xffffc90000018c00 0041 00000000 0x0 0x0
0xffffc90000018c80 0041 00000000 0x0 0x0
0xffffc90000018d00 0001 00000000 0x0 0x0
0xffffc90000018d80 0001 00000000 0x0 0x0
0xffffc90000018e00 0001 00000000 0x0 0x0
0xffffc90000018e80 0001 00000000 0x0 0x0
0xffffc90000018f00 0001 00000000 0x0 0x0
0xffffc90000018f80 0001 00000000 0x0 0x0
0xffffc90000019000 0001 00000000 0x0 0x0
0xffffc90000019080 0001 00000000 0x0 0x0
0xffffc90000019100 0001 00000000 0x0 0x0
0xffffc90000019180 0001 00000000 0x0 0x0
0xffffc90000019200 0001 00000000 0x0 0x0
0xffffc90000019280 0001 00000000 0x0 0x0
0xffffc90000019300 0001 00000000 0x0 0x0
0xffffc90000019380 0001 00000000 0x0 0x0
0xffffc90000019400 0001 00000000 0x0 0x0
0xffffc90000019480 0001 00000000 0x0 0x0
0xffffc90000019500 0001 00000000 0x0 0x0
0xffffc90000019580 0001 00000000 0x0 0x0
0xffffc90000019600 0001 00000000 0x0 0x0
0xffffc90000019680 0001 00000000 0x0 0x0
0xffffc90000019700 0001 00000000 0x0 0x0
0xffffc90000019780 0001 00000000 0x0 0x0
0xffffc90000019800 0001 00000000 0x0 0x0
0xffffc90000019880 0001 00000000 0x0 0x0
0xffffc90000019900 0001 00000000 0x0 0x0
0xffffc90000019980 0001 00000000 0x0 0x0
0xffffc90000019a00 0001 00000000 0x0 0x0
0xffffc90000019a80 0001 00000000 0x0 0x0
0xffffc90000019b00 0001 00000000 0x0 0x0
0xffffc90000019b80 0001 00000000 0x0 0x0
0xffffc90000019c00 0001 00000000 0x0 0x0
0xffffc90000019c80 0001 00000000 0x0 0x0
0xffffc90000019d00 0001 00000000 0x0 0x0
0xffffc90000019d80 0001 00000000 0x0 0x0
0xffffc90000019e00 0001 00000000 0x0 0x0
0xffffc90000019e80 0001 00000000 0x0 0x0
0xffffc90000019f00 0001 00000000 0x0 0x0
0xffffc90000019f80 0001 00000000 0x0 0x0
0xffffc9000001a000 0001 00000000 0x0 0x0
0xffffc9000001a080 0001 00000000 0x0 0x0
0xffffc9000001a100 0001 00000000 0x0 0x0
0xffffc9000001a180 0001 00000000 0x0 0x0
0xffffc9000001a200 0001 00000000 0x0 0x0
0xffffc9000001a280 0001 00000000 0x0 0x0
0xffffc9000001a300 0001 00000000 0x0 0x0
0xffffc9000001a380 0001 00000000 0x0 0x0
0xffffc9000001a400 0001 00000000 0x0 0x0
0xffffc9000001a480 0001 00000000 0x0 0x0
0xffffc9000001a500 0001 00000000 0x0 0x0
0xffffc9000001a580 0001 00000000 0x0 0x0
0xffffc9000001a600 0001 00000000 0x0 0x0
0xffffc9000001a680 0001 00000000 0x0 0x0
0xffffc9000001a700 0001 00000000 0x0 0x0
0xffffc9000001a780 0001 00000000 0x0 0x0
0xffffc9000001a800 0041 00000000 0x0 0x0
0xffffc9000001a880 0041 00000000 0x0 0x0
0xffffc9000001a900 0041 00000000 0x0 0x0
0xffffc9000001a980 0041 00000000 0x0 0x0
0xffffc9000001aa00 0041 00000000 0x0 0x0
0xffffc9000001aa80 0041 00000000 0x0 0x0
0xffffc9000001ab00 0041 00000000 0x0 0x0
0xffffc9000001ab80 0041 00000000 0x0 0x0
0xffffc9000001ac00 0041 00000000 0x0 0x0
0xffffc9000001ac80 0041 00000000 0x0 0x0
0xffffc9000001ad00 0041 00000000 0x0 0x0
0xffffc9000001ad80 0041 00000000 0x0 0x0
0xffffc9000001ae00 0041 00000000 0x0 0x0
0xffffc9000001ae80 0041 00000000 0x0 0x0
0xffffc9000001af00 0041 00000000 0x0 0x0
0xffffc9000001af80 0041 00000000 0x0 0x0
0xffffc9000001b000 0041 00000000 0x0 0x0
0xffffc9000001b080 0041 00000000 0x0 0x0
0xffffc9000001b100 0041 00000000 0x0 0x0
0xffffc9000001b180 0041 00000000 0x0 0x0
0xffffc9000001b200 0041 00000000 0x0 0x0
0xffffc9000001b280 0041 00000000 0x0 0x0
0xffffc9000001b300 0041 00000000 0x0 0x0
0xffffc9000001b380 0041 00000000 0x0 0x0
0xffffc9000001b400 0041 00000000 0x0 0x0
0xffffc9000001b480 0041 00000000 0x0 0x0
0xffffc9000001b500 0041 00000000 0x0 0x0
0xffffc9000001b580 0041 00000000 0x0 0x0
0xffffc9000001b600 0041 00000000 0x0 0x0
0xffffc9000001b680 0041 00000000 0x0 0x0
0xffffc9000001b700 0041 00000000 0x0 0x0
0xffffc9000001b780 0041 00000000 0x0 0x0
0xffffc9000001b800 0041 00000000 0x0 0x0
0xffffc9000001b880 0041 00000000 0x0 0x0
0xffffc9000001b900 0041 00000000 0x0 0x0
0xffffc9000001b980 0041 00000000 0x0 0x0
0xffffc9000001ba00 0045 00000000 0x0 0x0
0xffffc9000001ba80 0045 00000000 0x0 0x0
0xffffc9000001bb00 0045 00000000 0x0 0x0
0xffffc9000001bb80 0041 00000000 0x0 0x0
0xffffc9000001bc00 0045 00000000 0x0 0x0
0xffffc9000001bc80 0041 00000000 0x0 0x0
0xffffc9000001bd00 0001 00000000 0x0 0x0
0xffffc9000001bd80 0001 00000000 0x0 0x0
0xffffc9000001be00 0001 00000000 0x0 0x0
0xffffc9000001be80 0001 00000000 0x0 0x0
0xffffc9000001bf00 0001 00000000 0x0 0x0
0xffffc9000001bf80 0001 00000000 0x0 0x0
0xffffc9000001c000 0001 00000000 0x0 0x0
0xffffc9000001c080 0001 00000000 0x0 0x0
0xffffc9000001c100 0001 00000000

---
This report is generated by a bot. It may contain errors.
See https://goo.gl/tpsmEJ for more information about syzbot.
syzbot engineers can be reached at syzk...@googlegroups.com.

syzbot will keep track of this issue. See:
https://goo.gl/tpsmEJ#status for how to communicate with syzbot.

[syzbot]

syzbot has found a reproducer for the following issue on:

HEAD commit: 4b97c2317f82 genfb: Handle uninitialized softc in genfb_en..
git tree: netbsd

console output: https://syzkaller.appspot.com/x/log.txt?x=146d503a080000

kernel config: https://syzkaller.appspot.com/x/.config?x=1420f906d33d9f1f
dashboard link: https://syzkaller.appspot.com/bug?extid=8b0f1ced3fce82031535
compiler: g++ (Debian 10.2.1-6) 10.2.1 20210110

syz repro: https://syzkaller.appspot.com/x/repro.syz?x=13ce31f2080000
C reproducer: https://syzkaller.appspot.com/x/repro.c?x=105abb36080000

IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+8b0f1c...@syzkaller.appspotmail.com

login: [ 37.1574423] panic: UBSan: Undefined Behavior in /syzkaller/managers/ci2-netbsd-kubsan/kernel/sys/kern/kern_ras.c:183:10, pointer expression with base 0 overflowed to 0xfffffffffffffff9

[ 37.1696786] cpu0: Begin traceback...
[ 37.1874372] vpanic() at netbsd:vpanic+0x2f2 sys/kern/subr_prf.c:293
[ 37.2474372] Report() at netbsd:Report+0x3b sys/../common/lib/libc/misc/ubsan.c:1352
[ 37.3074349] HandlePointerOverflow() at netbsd:HandlePointerOverflow+0xd2 sys/../common/lib/libc/misc/ubsan.c:706
[ 37.3474396] sys_rasctl() at netbsd:sys_rasctl+0x641 ras_install sys/kern/kern_ras.c:183 [inline]
[ 37.3474396] sys_rasctl() at netbsd:sys_rasctl+0x641 sys/kern/kern_ras.c:288
[ 37.3974368] sys_syscall() at netbsd:sys_syscall+0x1e4 sy_call sys/sys/syscallvar.h:65 [inline]
[ 37.3974368] sys_syscall() at netbsd:sys_syscall+0x1e4 sys/kern/sys_syscall.c:90
[ 37.4474393] syscall() at netbsd:syscall+0x2da sy_call sys/sys/syscallvar.h:65 [inline]
[ 37.4474393] syscall() at netbsd:syscall+0x2da sy_invoke sys/sys/syscallvar.h:94 [inline]
[ 37.4474393] syscall() at netbsd:syscall+0x2da sys/arch/x86/x86/syscall.c:138
[ 37.4574360] --- syscall (number 343 via SYS_syscall) ---
[ 37.4774372] netbsd:syscall+0x2da:
[ 37.4774372] cpu0: End traceback...
[ 37.4774372] fatal breakpoint trap in supervisor mode
[ 37.4897205] trap type 1 code 0 rip 0xffffffff80221ab5 cs 0x8 rflags 0x246 cr2 0x7e73be41e0d0 ilevel 0 rsp 0xffff9880c83d89a0
[ 37.5027073] curlwp 0xffffe594bb039580 pid 1192.1192 lowest kstack 0xffff9880c83d42c0
Stopped in pid 1192.1192 (syz-executor4695) at netbsd:breakpoint+0x5: leave

?
breakpoint() at netbsd:breakpoint+0x5
db_panic() at netbsd:db_panic+0xec sys/ddb/db_panic.c:69
vpanic() at netbsd:vpanic+0x2f2 sys/kern/subr_prf.c:293
Report() at netbsd:Report+0x3b sys/../common/lib/libc/misc/ubsan.c:1352
HandlePointerOverflow() at netbsd:HandlePointerOverflow+0xd2 sys/../common/lib/libc/misc/ubsan.c:706
sys_rasctl() at netbsd:sys_rasctl+0x641 ras_install sys/kern/kern_ras.c:183 [inline]
sys_rasctl() at netbsd:sys_rasctl+0x641 sys/kern/kern_ras.c:288

sys_syscall() at netbsd:sys_syscall+0x1e4 sy_call sys/sys/syscallvar.h:65 [inline]
sys_syscall() at netbsd:sys_syscall+0x1e4 sys/kern/sys_syscall.c:90

syscall() at netbsd:syscall+0x2da sy_call sys/sys/syscallvar.h:65 [inline]
syscall() at netbsd:syscall+0x2da sy_invoke sys/sys/syscallvar.h:94 [inline]
syscall() at netbsd:syscall+0x2da sys/arch/x86/x86/syscall.c:138
--- syscall (number 343 via SYS_syscall) ---
netbsd:syscall+0x2da:
Panic string: UBSan: Undefined Behavior in /syzkaller/managers/ci2-netbsd-kubsan/kernel/sys/kern/kern_ras.c:183:10, pointer expression with base 0 overflowed to 0xfffffffffffffff9

PID LID S CPU FLAGS STRUCT LWP * NAME WAIT

1229 1229 2 0 0 ffffe594bc0675c0 syz-executor4695
1130 1130 2 0 0 ffffe594ba314100 syz-executor4695
1075 1075 2 0 0 ffffe594bc067180 syz-executor4695
425 425 2 0 0 ffffe594b99d1300 syz-executor4695
1001 1001 2 0 0 ffffe594ba267500 syz-executor4695
1192 >1192 7 0 0 ffffe594bb039580 syz-executor4695
1220 >1220 7 1 0 ffffe594b924f240 syz-executor4695
1194 1194 2 0 140 ffffe594b924fac0 syz-executor4695
1223 1223 2 1 140 ffffe594b9455280 syz-executor4695
1222 1222 2 1 140 ffffe594b9012600 syz-executor4695
1111 1111 3 0 180 ffffe594b9639bc0 syz-executor4695 nanoslp
815 815 3 1 180 ffffe594b924f680 sshd select
1069 1069 3 1 180 ffffe594ba267940 getty nanoslp
1126 1126 3 1 180 ffffe594ba314980 getty nanoslp
1000 1000 3 0 180 ffffe594bb0399c0 getty nanoslp
1115 1115 3 0 1c0 ffffe594b99d1b80 getty ttyraw
1093 1093 3 1 180 ffffe594bb039140 sshd select
953 953 3 0 180 ffffe594ba314540 powerd kqueue
689 689 3 0 180 ffffe594b94556c0 syslogd kqueue
547 547 3 1 180 ffffe594b99d1740 dhcpcd poll
546 546 3 1 180 ffffe594b9455b00 dhcpcd poll
600 600 3 1 180 ffffe594ba2670c0 dhcpcd poll
587 587 3 1 180 ffffe594b9639340 dhcpcd poll
289 289 3 1 180 ffffe594b96e4700 dhcpcd poll
288 288 3 0 180 ffffe594b96e42c0 dhcpcd poll
351 351 3 1 180 ffffe594b96e4b40 dhcpcd poll
1 1 3 0 180 ffffe594b0e6e540 init wait
0 968 3 0 200 ffffe594b9012a40 physiod physiod
0 194 3 0 200 ffffe594b9085a80 pooldrain pooldrain
0 193 3 0 200 ffffe594b9085640 ioflush syncer
0 192 3 1 200 ffffe594b9085200 pgdaemon pgdaemon
0 167 3 1 200 ffffe594b90121c0 usb7 usbevt
0 166 3 1 200 ffffe594b5f95a00 usb6 usbevt
0 165 3 1 200 ffffe594b5f955c0 usb5 usbevt
0 164 3 1 200 ffffe594b5f95180 usb4 usbevt
0 31 3 1 200 ffffe594b2f309c0 usb3 usbevt
0 63 3 1 200 ffffe594b2f30580 usb2 usbevt
0 126 3 1 200 ffffe594b2f30140 usb1 usbevt
0 125 3 1 200 ffffe594b0e6e980 usb0 usbevt
0 124 3 1 200 ffffe594b0ded300 usbtask-dr usbtsk
0 123 3 0 200 ffffe594b074d6c0 usbtask-hc usbtsk
0 122 3 0 200 ffffe594b0ded740 npfgc0 npfgcw
0 121 3 1 200 ffffe594b0e6e100 rt_free rt_free
0 120 3 1 200 ffffe594b0e69940 unpgc unpgc
0 119 3 0 200 ffffe594b0e69500 key_timehandler key_timehandler
0 118 3 1 200 ffffe594b0e690c0 icmp6_wqinput/1 icmp6_wqinput
0 117 3 0 200 ffffe594b0e3c900 icmp6_wqinput/0 icmp6_wqinput
0 116 3 0 200 ffffe594b0e3c4c0 nd6_timer nd6_timer
0 115 3 1 200 ffffe594b0e3c080 carp6_wqinput/1 carp6_wqinput
0 114 3 0 200 ffffe594b0e278c0 carp6_wqinput/0 carp6_wqinput
0 113 3 1 200 ffffe594b0e27480 carp_wqinput/1 carp_wqinput
0 112 3 0 200 ffffe594b0e27040 carp_wqinput/0 carp_wqinput
0 111 3 1 200 ffffe594b0dfabc0 icmp_wqinput/1 icmp_wqinput
0 110 3 0 200 ffffe594b0dfa780 icmp_wqinput/0 icmp_wqinput
0 109 3 0 200 ffffe594b0dedb80 rt_timer rt_timer
0 108 3 0 200 ffffe594b0dfa340 vmem_rehash vmem_rehash
0 99 3 0 200 ffffe594b0762b40 entbutler entropy
0 98 3 1 200 ffffe594b0762700 viomb balloon
0 97 3 1 200 ffffe594b07622c0 vioif0_txrx/1 vioif0_txrx
0 96 2 0 200 ffffe594b074db00 vioif0_txrx/0
0 29 3 1 200 ffffe594b074d280 scsibus0 sccomp
0 28 3 0 200 ffffe594af1d3ac0 pms0 pmsreset
0 27 3 1 200 ffffe594af1d3680 xcall/1 xcall
0 26 1 1 200 ffffe594af1d3240 softser/1
0 25 1 1 200 ffffe594af19ea80 softclk/1
0 24 1 1 200 ffffe594af19e640 softbio/1
0 23 1 1 200 ffffe594af19e200 softnet/1
0 22 1 1 201 ffffe595de137a40 idle/1
0 21 3 1 200 ffffe595de137600 lnxsyswq lnxsyswq
0 20 3 1 200 ffffe595de1371c0 lnxubdwq lnxubdwq
0 19 3 1 200 ffffe595de142a00 lnxpwrwq lnxpwrwq
0 18 3 1 200 ffffe595de1425c0 lnxlngwq lnxlngwq
0 17 3 1 200 ffffe595de142180 lnxhipwq lnxhipwq
0 16 3 0 200 ffffe595de15d9c0 lnxrcugc lnxrcugc
0 15 3 0 200 ffffe595de15d580 sysmon smtaskq
0 14 3 1 200 ffffe595de15d140 pmfsuspend pmfsuspend
0 13 3 1 200 ffffe595de16a980 pmfevent pmfevent
0 12 3 1 200 ffffe595de16a540 sopendfree sopendfr
0 11 3 0 200 ffffe595de16a100 iflnkst iflnkst
0 10 3 0 200 ffffe595df19b940 nfssilly nfssilly
0 9 3 0 200 ffffe595df19b500 vdrain vdrain
0 8 3 1 200 ffffe595df19b0c0 modunload mod_unld
0 7 3 0 200 ffffe595df1c2900 xcall/0 xcall
0 6 1 0 200 ffffe595df1c24c0 softser/0
0 5 1 0 200 ffffe595df1c2080 softclk/0
0 4 1 0 200 ffffe595df1f18c0 softbio/0
0 3 1 0 200 ffffe595df1f1480 softnet/0
0 2 1 0 201 ffffe595df1f1040 idle/0

0 0 3 0 200 ffffffff86534180 swapper uvm
[Locks tracked through LWPs]

****** LWP 1220.1220 (syz-executor4695) @ 0xffffe594b924f240, l_stat=7

*** Locks held:

* Lock 0 (initialized at pmap_ctor)
lock address : 0xffffe594b0e73980 type : sleep/adaptive
initialized : 0xffffffff810004cd

shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 1

relevant lwp : 0xffffe594b924f240 last held: 0xffffe594b924f240
last locked* : 0xffffffff81002bd6 unlocked : 0xffffffff81000298

owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

*** Locks wanted: none

****** LWP 546.546 (dhcpcd) @ 0xffffe594b9455b00, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at module_hook_init)
lock address : 0xffffffff869c7300 type : sleep/adaptive
initialized : 0xffffffff836ed137
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 0

relevant lwp : 0xffffe594b9455b00 last held: 000000000000000000

last locked : 000000000000000000 unlocked*: 000000000000000000
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 600.600 (dhcpcd) @ 0xffffe594ba2670c0, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at module_hook_init)
lock address : 0xffffffff869c7300 type : sleep/adaptive
initialized : 0xffffffff836ed137
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 0

relevant lwp : 0xffffe594ba2670c0 last held: 000000000000000000

last locked : 000000000000000000 unlocked*: 000000000000000000
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 288.288 (dhcpcd) @ 0xffffe594b96e42c0, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at module_hook_init)
lock address : 0xffffffff869c7300 type : sleep/adaptive
initialized : 0xffffffff836ed137
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0

relevant lwp : 0xffffe594b96e42c0 last held: 000000000000000000

last locked : 000000000000000000 unlocked*: 000000000000000000
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 351.351 (dhcpcd) @ 0xffffe594b96e4b40, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at module_hook_init)
lock address : 0xffffffff869c7300 type : sleep/adaptive
initialized : 0xffffffff836ed137
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 0

relevant lwp : 0xffffe594b96e4b40 last held: 000000000000000000

last locked : 000000000000000000 unlocked*: 000000000000000000
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 0.11 (iflnkst) @ 0xffffe595de16a100, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at module_hook_init)
lock address : 0xffffffff869c7300 type : sleep/adaptive
initialized : 0xffffffff836ed137
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0

relevant lwp : 0xffffe595de16a100 last held: 000000000000000000

last locked : 000000000000000000 unlocked*: 000000000000000000
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 0.5 (softclk/0) @ 0xffffe595df1c2080, l_stat=1

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at module_hook_init)
lock address : 0xffffffff869c7300 type : sleep/adaptive
initialized : 0xffffffff836ed137
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0

relevant lwp : 0xffffe595df1c2080 last held: 000000000000000000

last locked : 000000000000000000 unlocked*: 000000000000000000
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 0.0 (swapper) @ 0xffffffff86534180, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at module_hook_init)
lock address : 0xffffffff869c7300 type : sleep/adaptive
initialized : 0xffffffff836ed137
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffffffff86534180 last held: 000000000000000000
last locked : 000000000000000000 unlocked*: 000000000000000000
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

[Locks tracked through CPUs]

******* Locks held on cpu0:

* Lock 0 (initialized at kprintf_init)
lock address : 0xffffffff86aaa668 type : spin
initialized : 0xffffffff838376c3
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0

relevant cpu : 0 last held: 0

relevant lwp : 0xffffe594bb039580 last held: 0xffffe594bb039580

last locked* : 0xffffffff83837751 unlocked : 0xffffffff838377cc
owner field : 0x0000000000000800 wait/spin: 0/1

PAGE FLAG PQ UOBJECT UANON

0xffff988000007180 0045 00000000 0x0 0x0
0xffff988000007200 0045 00000000 0x0 0x0
0xffff988000007280 0045 00000000 0x0 0x0
0xffff988000007300 0045 00000000 0x0 0x0
0xffff988000007380 0045 00000000 0x0 0x0
0xffff988000007400 0045 00000000 0x0 0x0
0xffff988000007480 0045 00000000 0x0 0x0
0xffff988000007500 0045 00000000 0x0 0x0
0xffff988000007580 0045 00000000 0x0 0x0
0xffff988000007600 0045 00000000 0x0 0x0
0xffff988000007680 0041 00000000 0x0 0x0
0xffff988000007700 0041 00000000 0x0 0x0
0xffff988000007780 0041 00000000 0x0 0x0
0xffff988000007800 0041 00000000 0x0 0x0
0xffff988000007880 0041 00000000 0x0 0x0
0xffff988000007900 0045 00000000 0x0 0x0
0xffff988000007980 0041 00000000 0x0 0x0
0xffff988000007a00 0041 00000000 0x0 0x0
0xffff988000007a80 0041 00000000 0x0 0x0
0xffff988000007b00 0041 00000000 0x0 0x0
0xffff988000007b80 0041 00000000 0x0 0x0
0xffff988000007c00 0041 00000000 0x0 0x0
0xffff988000007c80 0041 00000000 0x0 0x0
0xffff988000007d00 0041 00000000 0x0 0x0
0xffff988000007d80 0041 00000000 0x0 0x0
0xffff988000007e00 0041 00000000 0x0 0x0
0xffff988000007e80 0041 00000000 0x0 0x0
0xffff988000007f00 0041 00000000 0x0 0x0
0xffff988000007f80 0041 00000000 0x0 0x0
0xffff988000008000 0041 00000000 0x0 0x0
0xffff988000008080 0041 00000000 0x0 0x0
0xffff988000008100 0041 00000000 0x0 0x0
0xffff988000008180 0041 00000000 0x0 0x0
0xffff988000008200 0041 00000000 0x0 0x0
0xffff988000008280 0041 00000000 0x0 0x0
0xffff988000008300 0041 00000000 0x0 0x0
0xffff988000008380 0041 00000000 0x0 0x0
0xffff988000008400 0041 00000000 0x0 0x0
0xffff988000008480 0041 00000000 0x0 0x0
0xffff988000008500 0041 00000000 0x0 0x0
0xffff988000008580 0041 00000000 0x0 0x0
0xffff988000008600 0041 00000000 0x0 0x0
0xffff988000008680 0041 00000000 0x0 0x0
0xffff988000008700 0041 00000000 0x0 0x0
0xffff988000008780 0041 00000000 0x0 0x0
0xffff988000008800 0041 00000000 0x0 0x0
0xffff988000008880 0041 00000000 0x0 0x0
0xffff988000008900 0041 00000000 0x0 0x0
0xffff988000008980 0041 00000000 0x0 0x0
0xffff988000008a00 0041 00000000 0x0 0x0
0xffff988000008a80 0041 00000000 0x0 0x0
0xffff988000008b00 0041 00000000 0x0 0x0
0xffff988000008b80 0045 00000000 0x0 0x0
0xffff988000008c00 0045 00000000 0x0 0x0
0xffff988000008c80 0041 00000000 0x0 0x0
0xffff988000008d00 0041 00000000 0x0 0x0
0xffff988000008d80 0041 00000000 0x0 0x0
0xffff988000008e00 0041 00000000 0x0 0x0
0xffff988000008e80 0041 00000000 0x0 0x0
0xffff988000008f00 0041 00000000 0x0 0x0
0xffff988000008f80 0041 00000000 0x0 0x0
0xffff988000009000 0041 00000000 0x0 0x0
0xffff988000009080 0045 00000000 0x0 0x0
0xffff988000009100 0045 00000000 0x0 0x0
0xffff988000009180 0041 00000000 0x0 0x0
0xffff988000009200 0041 00000000 0x0 0x0
0xffff988000009280 0041 00000000 0x0 0x0
0xffff988000009300 0041 00000000 0x0 0x0
0xffff988000009380 0041 00000000 0x0 0x0
0xffff988000009400 0041 00000000 0x0 0x0
0xffff988000009480 0041 00000000 0x0 0x0
0xffff988000009500 0041 00000000 0x0 0x0
0xffff988000009580 0041 00000000 0x0 0x0
0xffff988000009600 0041 00000000 0x0 0x0
0xffff988000009680 0041 00000000 0x0 0x0
0xffff988000009700 0041 00000000 0x0 0x0
0xffff988000009780 0041 00000000 0x0 0x0
0xffff988000009800 0041 00000000 0x0 0x0
0xffff988000009880 0041 00000000 0x0 0x0
0xffff988000009900 0041 00000000 0x0 0x0
0xffff988000009980 0041 00000000 0x0 0x0
0xffff988000009a00 0041 00000000 0x0 0x0
0xffff988000009a80 0045 00000000 0x0 0x0
0xffff988000009b00 0041 00000000 0x0 0x0
0xffff988000009b80 0041 00000000 0x0 0x0
0xffff988000009c00 0041 00000000 0x0 0x0
0xffff988000009c80 0041 00000000 0x0 0x0
0xffff988000009d00 0041 00000000 0x0 0x0
0xffff988000009d80 0041 00000000 0x0 0x0
0xffff988000009e00 0041 00000000 0x0 0x0
0xffff988000009e80 0041 00000000 0x0 0x0
0xffff988000009f00 0041 00000000 0x0 0x0
0xffff988000009f80 0041 00000000 0x0 0x0
0xffff98800000a000 0041 00000000 0x0 0x0
0xffff98800000a080 0041 00000000 0x0 0x0
0xffff98800000a100 0041 00000000 0x0 0x0
0xffff98800000a180 0041 00000000 0x0 0x0
0xffff98800000a200 0041 00000000 0x0 0x0
0xffff98800000a280 0041 00000000 0x0 0x0
0xffff98800000a300 0041 00000000 0x0 0x0
0xffff98800000a380 0041 00000000 0x0 0x0
0xffff98800000a400 0041 00000000 0x0 0x0
0xffff98800000a480 0041 00000000 0x0 0x0
0xffff98800000a500 0041 00000000 0x0 0x0
0xffff98800000a580 0041 00000000 0x0 0x0
0xffff98800000a600 0045 00000000 0x0 0x0
0xffff98800000a680 0041 00000000 0x0 0x0
0xffff98800000a700 0041 00000000 0x0 0x0
0xffff98800000a780 0041 00000000 0x0 0x0
0xffff98800000a800 0041 00000000 0x0 0x0
0xffff98800000a880 0041 00000000 0x0 0x0
0xffff98800000a900 0041 00000000 0x0 0x0
0xffff98800000a980 0041 00000000 0x0 0x0
0xffff98800000aa00 0041 00000000 0x0 0x0
0xffff98800000aa80 0041 00000000 0x0 0x0
0xffff98800000ab00 0041 00000000 0x0 0x0
0xffff98800000ab80 0041 00000000 0x0 0x0
0xffff98800000ac00 0041 00000000 0x0 0x0
0xffff98800000ac80 0041 00000000 0x0 0x0
0xffff98800000ad00 0041 00000000 0x0 0x0
0xffff98800000ad80 0041 00000000 0x0 0x0
0xffff98800000ae00 0041 00000000 0x0 0x0
0xffff98800000ae80 0045 00000000 0x0 0x0
0xffff98800000af00 0045 00000000 0x0 0x0
0xffff98800000af80 0041 00000000 0x0 0x0
0xffff98800000b000 0041 00000000 0x0 0x0
0xffff98800000b080 0041 00000000 0x0 0x0
0xffff98800000b100 0041 00000000 0x0 0x0
0xffff98800000b180 0045 00000000 0x0 0x0
0xffff98800000b200 0045 00000000 0x0 0x0
0xffff98800000b280 0045 00000000 0x0 0x0
0xffff98800000b300 0045 00000000 0x0 0x0
0xffff98800000b380 0045 00000000 0x0 0x0
0xffff98800000b400 0041 00000000 0x0 0x0
0xffff98800000b480 0041 00000000 0x0 0x0
0xffff98800000b500 0041 00000000 0x0 0x0
0xffff98800000b580 0045 00000000 0x0 0x0
0xffff98800000b600 0045 00000000 0x0 0x0
0xffff98800000b680 0045 00000000 0x0 0x0
0xffff98800000b700 0045 00000000 0x0 0x0
0xffff98800000b780 0045 00000000 0x0 0x0
0xffff98800000b800 0041 00000000 0x0 0x0
0xffff98800000b880 0041 00000000 0x0 0x0
0xffff98800000b900 0045 00000000 0x0 0x0
0xffff98800000b980 0045 00000000 0x0 0x0
0xffff98800000ba00 0045 00000000 0x0 0x0
0xffff98800000ba80 0045 00000000 0x0 0x0
0xffff98800000bb00 0045 00000000 0x0 0x0
0xffff98800000bb80 0045 00000000 0x0 0x0
0xffff98800000bc00 0045 00000000 0x0 0x0
0xffff98800000bc80 0041 00000000 0x0 0x0
0xffff98800000bd00 0045 00000000 0x0 0x0
0xffff98800000bd80 0045 00000000 0x0 0x0
0xffff98800000be00 0045 00000000 0x0 0x0
0xffff98800000be80 0045 00000000 0x0 0x0
0xffff98800000bf00 0045 00000000 0x0 0x0
0xffff98800000bf80 0045 00000000 0x0 0x0
0xffff98800000c000 0045 00000000 0x0 0x0
0xffff98800000c080 0045 00000000 0x0 0x0
0xffff98800000c100 0045 00000000 0x0 0x0
0xffff98800000c180 0045 00000000 0x0 0x0
0xffff98800000c200 0045 00000000 0x0 0x0
0xffff98800000c280 0045 00000000 0x0 0x0
0xffff98800000c300 0045 00000000 0x0 0x0
0xffff98800000c380 0045 00000000 0x0 0x0
0xffff98800000c400 0045 00000000 0x0 0x0
0xffff98800000c480 0045 00000000 0x0 0x0
0xffff98800000c500 0045 00000000 0x0 0x0
0xffff98800000c580 0045 00000000 0x0 0x0
0xffff98800000c600 0045 00000000 0x0 0x0
0xffff98800000c680 0045 00000000 0x0 0x0
0xffff98800000c700 0041 00000000 0x0 0x0
0xffff98800000c780 0045 00000000 0x0 0x0
0xffff98800000c800 0045 00000000 0x0 0x0
0xffff98800000c880 0045 00000000 0x0 0x0
0xffff98800000c900 0045 00000000 0x0 0x0
0xffff98800000c980 0045 00000000 0x0 0x0
0xffff98800000ca00 0045 00000000 0x0 0x0
0xffff98800000ca80 0041 00000000 0x0 0x0
0xffff98800000cb00 0041 00000000 0x0 0x0
0xffff98800000cb80 0041 00000000 0x0 0x0
0xffff98800000cc00 0045 00000000 0x0 0x0
0xffff98800000cc80 0045 00000000 0x0 0x0
0xffff98800000cd00 0045 00000000 0x0 0x0
0xffff98800000cd80 0041 00000000 0x0 0x0
0xffff98800000ce00 0041 00000000 0x0 0x0
0xffff98800000ce80 0041 00000000 0x0 0x0
0xffff98800000cf00 0041 00000000 0x0 0x0
0xffff98800000cf80 0041 00000000 0x0 0x0
0xffff98800000d000 0045 00000000 0x0 0x0
0xffff98800000d080 0045 00000000 0x0 0x0
0xffff98800000d100 0041 00000000 0x0 0x0
0xffff98800000d180 0041 00000000 0x0 0x0
0xffff98800000d200 0041 00000000 0x0 0x0
0xffff98800000d280 0041 00000000 0x0 0x0
0xffff98800000d300 0045 00000000 0x0 0x0
0xffff98800000d380 0041 00000000 0x0 0x0
0xffff98800000d400 0041 00000000 0x0 0x0
0xffff98800000d480 0045 00000000 0x0 0x0
0xffff98800000d500 0041 00000000 0x0 0x0
0xffff98800000d580 0041 00000000 0x0 0x0
0xffff98800000d600 0041 00000000 0x0 0x0
0xffff98800000d680 0045 00000000 0x0 0x0
0xffff98800000d700 0041 00000000 0x0 0x0
0xffff98800000d780 0045 00000000 0x0 0x0
0xffff98800000d800 0041 00000000 0x0 0x0
0xffff98800000d880 0041 00000000 0x0 0x0
0xffff98800000d900 0041 00000000 0x0 0x0
0xffff98800000d980 0041 00000000 0x0 0x0
0xffff98800000da00 0041 00000000 0x0 0x0
0xffff98800000da80 0041 00000000 0x0 0x0
0xffff98800000db00 0045 00000000 0x0 0x0
0xffff98800000db80 0041 00000000 0x0 0x0
0xffff98800000dc00 0041 00000000 0x0 0x0
0xffff98800000dc80 0041 00000000 0x0 0x0
0xffff98800000dd00 0041 00000000 0x0 0x0
0xffff98800000dd80 0041 00000000 0x0 0x0
0xffff98800000de00 0041 00000000 0x0 0x0
0xffff98800000de80 0041 00000000 0x0 0x0
0xffff98800000df00 0045 00000000 0x0 0x0
0xffff98800000df80 0045 00000000 0x0 0x0
0xffff98800000e000 0045 00000000 0x0 0x0
0xffff98800000e080 0041 00000000 0x0 0x0
0xffff98800000e100 0041 00000000 0x0 0x0
0xffff98800000e180 0045 00000000 0x0 0x0
0xffff98800000e200 0045 00000000 0x0 0x0
0xffff98800000e280 0045 00000000 0x0 0x0
0xffff98800000e300 0045 00000000 0x0 0x0
0xffff98800000e380 0045 00000000 0x0 0x0
0xffff98800000e400 0041 00000000 0x0 0x0
0xffff98800000e480 0041 00000000 0x0 0x0
0xffff98800000e500 0045 00000000 0x0 0x0
0xffff98800000e580 0041 00000000 0x0 0x0
0xffff98800000e600 0041 00000000 0x0 0x0
0xffff98800000e680 0041 00000000 0x0 0x0
0xffff98800000e700 0041 00000000 0x0 0x0
0xffff98800000e780 0045 00000000 0x0 0x0
0xffff98800000e800 0045 00000000 0x0 0x0
0xffff98800000e880 0045 00000000 0x0 0x0
0xffff98800000e900 0041 00000000 0x0 0x0
0xffff98800000e980 0041 00000000 0x0 0x0
0xffff98800000ea00 0041 00000000 0x0 0x0
0xffff98800000ea80 0045 00000000 0x0 0x0
0xffff98800000eb00 0041 00000000 0x0 0x0
0xffff98800000eb80 0041 00000000 0x0 0x0
0xffff98800000ec00 0045 00000000 0x0 0x0
0xffff98800000ec80 0041 00000000 0x0 0x0
0xffff98800000ed00 0041 00000000 0x0 0x0
0xffff98800000ed80 0041 00000000 0x0 0x0
0xffff98800000ee00 0041 00000000 0x0 0x0
0xffff98800000ee80 0041 00000000 0x0 0x0
0xffff98800000ef00 0041 00000000 0x0 0x0
0xffff98800000ef80 0041 00000000 0x0 0x0
0xffff98800000f000 0045 00000000 0x0 0x0
0xffff98800000f080 0045 00000000 0x0 0x0
0xffff98800000f100 0041 00000000 0x0 0x0
0xffff98800000f180 0041 00000000 0x0 0x0
0xffff98800000f200 0041 00000000 0x0 0x0
0xffff98800000f280 0045 00000000 0x0 0x0
0xffff98800000f300 0041 00000000 0x0 0x0
0xffff98800000f380 0045 00000000 0x0 0x0
0xffff98800000f400 0041 00000000 0x0 0x0
0xffff98800000f480 0041 00000000 0x0 0x0
0xffff98800000f500 0041 00000000 0x0 0x0
0xffff98800000f580 0041 00000000 0x0 0x0
0xffff98800000f600 0041 00000000 0x0 0x0
0xffff98800000f680 0041 00000000 0x0 0x0
0xffff98800000f700 0041 00000000 0x0 0x0
0xffff98800000f780 0041 00000000 0x0 0x0
0xffff98800000f800 0041 00000000 0x0 0x0
0xffff98800000f880 0045 00000000 0x0 0x0
0xffff98800000f900 0041 00000000 0x0 0x0
0xffff98800000f980 0045 00000000 0x0 0x0
0xffff98800000fa00 0045 00000000 0x0 0x0
0xffff98800000fa80 0041 00000000 0x0 0x0
0xffff98800000fb00 0041 00000000 0x0 0x0
0xffff98800000fb80 0041 00000000 0x0 0x0
0xffff98800000fc00 0045 00000000 0x0 0x0
0xffff98800000fc80 0041 00000000 0x0 0x0
0xffff98800000fd00 0045 00000000 0x0 0x0
0xffff98800000fd80 0041 00000000 0x0 0x0
0xffff98800000fe00 0041 00000000 0x0 0x0
0xffff98800000fe80 0041 00000000 0x0 0x0
0xffff98800000ff00 0041 00000000 0x0 0x0
0xffff98800000ff80 0041 00000000 0x0 0x0
0xffff988000010000 0041 00000000 0x0 0x0
0xffff988000010080 0041 00000000 0x0 0x0
0xffff988000010100 0041 00000000 0x0 0x0
0xffff988000010180 0045 00000000 0x0 0x0
0xffff988000010200 0041 00000000 0x0 0x0
0xffff988000010280 0041 00000000 0x0 0x0
0xffff988000010300 0041 00000000 0x0 0x0
0xffff988000010380 0041 00000000 0x0 0x0
0xffff988000010400 0045 00000000 0x0 0x0
0xffff988000010480 0045 00000000 0x0 0x0
0xffff988000010500 0045 00000000 0x0 0x0
0xffff988000010580 0041 00000000 0x0 0x0
0xffff988000010600 0041 00000000 0x0 0x0
0xffff988000010680 0041 00000000 0x0 0x0
0xffff988000010700 0045 00000000 0x0 0x0
0xffff988000010780 0041 00000000 0x0 0x0
0xffff988000010800 0041 00000000 0x0 0x0
0xffff988000010880 0041 00000000 0x0 0x0
0xffff988000010900 0041 00000000 0x0 0x0
0xffff988000010980 0045 00000000 0x0 0x0
0xffff988000010a00 0045 00000000 0x0 0x0
0xffff988000010a80 0045 00000000 0x0 0x0
0xffff988000010b00 0041 00000000 0x0 0x0
0xffff988000010b80 0041 00000000 0x0 0x0
0xffff988000010c00 0041 00000000 0x0 0x0
0xffff988000010c80 0045 00000000 0x0 0x0
0xffff988000010d00 0041 00000000 0x0 0x0
0xffff988000010d80 0041 00000000 0x0 0x0
0xffff988000010e00 0041 00000000 0x0 0x0
0xffff988000010e80 0041 00000000 0x0 0x0
0xffff988000010f00 0041 00000000 0x0 0x0
0xffff988000010f80 0041 00000000 0x0 0x0
0xffff988000011000 0041 00000000 0x0 0x0
0xffff988000011080 0041 00000000 0x0 0x0
0xffff988000011100 0041 00000000 0x0 0x0
0xffff988000011180 0041 00000000 0x0 0x0
0xffff988000011200 0041 00000000 0x0 0x0
0xffff988000011280 0041 00000000 0x0 0x0
0xffff988000011300 0041 00000000 0x0 0x0
0xffff988000011380 0041 00000000 0x0 0x0
0xffff988000011400 0041 00000000 0x0 0x0
0xffff988000011480 0041 00000000 0x0 0x0
0xffff988000011500 0041 00000000 0x0 0x0
0xffff988000011580 0041 00000000 0x0 0x0
0xffff988000011600 0041 00000000 0x0 0x0
0xffff988000011680 0041 00000000 0x0 0x0
0xffff988000011700 0041 00000000 0x0 0x0
0xffff988000011780 0041 00000000 0x0 0x0
0xffff988000011800 0041 00000000 0x0 0x0
0xffff988000011880 0041 00000000 0x0 0x0
0xffff988000011900 0041 00000000 0x0 0x0
0xffff988000011980 0041 00000000 0x0 0x0
0xffff988000011a00 0045 00000000 0x0 0x0
0xffff988000011a80 0045 00000000 0x0 0x0
0xffff988000011b00 0045 00000000 0x0 0x0
0xffff988000011b80 0041 00000000 0x0 0x0
0xffff988000011c00 0041 00000000 0x0 0x0
0xffff988000011c80 0041 00000000 0x0 0x0
0xffff988000011d00 0045 00000000 0x0 0x0
0xffff988000011d80 0045 00000000 0x0 0x0
0xffff988000011e00 0041 00000000 0x0 0x0
0xffff988000011e80 0041 00000000 0x0 0x0
0xffff988000011f00 0041 00000000 0x0 0x0
0xffff988000011f80 0045 00000000 0x0 0x0
0xffff988000012000 0041 00000000 0x0 0x0
0xffff988000012080 0041 00000000 0x0 0x0
0xffff988000012100 0041 00000000 0x0 0x0
0xffff988000012180 0041 00000000 0x0 0x0
0xffff988000012200 0041 00000000 0x0 0x0
0xffff988000012280 0041 00000000 0x0 0x0
0xffff988000012300 0041 00000000 0x0 0x0
0xffff988000012380 0041 00000000 0x0 0x0
0xffff988000012400 0041 00000000 0x0 0x0
0xffff988000012480 0041 00000000 0x0 0x0
0xffff988000012500 0041 00000000 0x0 0x0
0xffff988000012580 0041 00000000 0x0 0x0
0xffff988000012600 0041 00000000 0x0 0x0
0xffff988000012680 0041 00000000 0x0 0x0
0xffff988000012700 0041 00000000 0x0 0x0
0xffff988000012780 0041 00000000 0x0 0x0
0xffff988000012800 0041 00000000 0x0 0x0
0xffff988000012880 0041 00000000 0x0 0x0
0xffff988000012900 0041 00000000 0x0 0x0
0xffff988000012980 0041 00000000 0x0 0x0
0xffff988000012a00 0041 00000000 0x0 0x0
0xffff988000012a80 0041 00000000 0x0 0x0
0xffff988000012b00 0041 00000000 0x0 0x0
0xffff988000012b80 0041 00000000 0x0 0x0
0xffff988000012c00 0041 00000000 0x0 0x0
0xffff988000012c80 0045 00000000 0x0 0x0
0xffff988000012d00 0001 00000000 0x0 0x0
0xffff988000012d80 0001 00000000 0x0 0x0
0xffff988000012e00 0001 00000000 0x0 0x0
0xffff988000012e80 0001 00000000 0x0 0x0
0xffff988000012f00 0001 00000000 0x0 0x0
0xffff988000012f80 0001 00000000 0x0 0x0
0xffff988000013000 0001 00000000 0x0 0x0
0xffff988000013080 0001 00000000 0x0 0x0
0xffff988000013100 0001 00000000 0x0 0x0
0xffff988000013180 0001 00000000 0x0 0x0
0xffff988000013200 0001 00000000 0x0 0x0
0xffff988000013280 0001 00000000 0x0 0x0
0xffff988000013300 0001 00000000 0x0 0x0
0xffff988000013380 0001 00000000 0x0 0x0
0xffff988000013400 0001 00000000 0x0 0x0
0xffff988000013480 0001 00000000 0x0 0x0
0xffff988000013500 0001 00000000 0x0 0x0
0xffff988000013580 0001 00000000 0x0 0x0
0xffff988000013600 0001 00000000 0x0 0x0
0xffff988000013680 0001 00000000 0x0 0x0
0xffff988000013700 0001 00000000 0x0 0x0
0xffff988000013780 0001 00000000 0x0 0x0
0xffff988000013800 0001 00000000 0x0 0x0
0xffff988000013880 0001 00000000 0x0 0x0
0xffff988000013900 0001 00000000 0x0 0x0
0xffff988000013980 0001 00000000 0x0 0x0
0xffff988000013a00 0001 00000000 0x0 0x0
0xffff988000013a80 0001 00000000 0x0 0x0
0xffff988000013b00 0001 00000000 0x0 0x0
0xffff988000013b80 0001 00000000 0x0 0x0
0xffff988000013c00 0001 00000000 0x0 0x0
0xffff988000013c80 0001 00000000 0x0 0x0
0xffff988000013d00 0001 00000000 0x0 0x0
0xffff988000013d80 0001 00000000 0x0 0x0
0xffff988000013e00 0001 00000000 0x0 0x0
0xffff988000013e80 0001 00000000 0x0 0x0
0xffff988000013f00 0001 00000000 0x0 0x0
0xffff988000013f80 0001 00000000 0x0 0x0
0xffff988000014000 0001 00000000 0x0 0x0
0xffff988000014080 0001 00000000 0x0 0x0
0xffff988000014100 0001 00000000 0x0 0x0
0xffff988000014180 0001 00000000 0x0 0x0
0xffff988000014200 0001 00000000 0x0 0x0
0xffff988000014280 0001 00000000 0x0 0x0
0xffff988000014300 0001 00000000 0x0 0x0
0xffff988000014380 0001 00000000 0x0 0x0
0xffff988000014400 0001 00000000 0x0 0x0
0xffff988000014480 0001 00000000 0x0 0x0
0xffff988000014500 0001 00000000 0x0 0x0
0xffff988000014580 0001 00000000 0x0 0x0
0xffff988000014600 0001 00000000 0x0 0x0
0xffff988000014680 0001 00000000 0x0 0x0
0xffff988000014700 0001 00000000 0x0 0x0
0xffff988000014780 0001 00000000 0x0 0x0
0xffff988000014800 0041 00000000 0x0 0x0
0xffff988000014880 0041 00000000 0x0 0x0
0xffff988000014900 0041 00000000 0x0 0x0
0xffff988000014980 0041 00000000 0x0 0x0
0xffff988000014a00 0041 00000000 0x0 0x0
0xffff988000014a80 0041 00000000 0x0 0x0
0xffff988000014b00 0041 00000000 0x0 0x0
0xffff988000014b80 0041 00000000 0x0 0x0
0xffff988000014c00 0041 00000000 0x0 0x0
0xffff988000014c80 0041 00000000 0x0 0x0
0xffff988000014d00 0041 00000000 0x0 0x0
0xffff988000014d80 0041 00000000 0x0 0x0
0xffff988000014e00 0041 00000000 0x0 0x0
0xffff988000014e80 0041 00000000 0x0 0x0
0xffff988000014f00 0041 00000000 0x0 0x0
0xffff988000014f80 0041 00000000 0x0 0x0
0xffff988000015000 0041 00000000 0x0 0x0
0xffff988000015080 0041 00000000 0x0 0x0
0xffff988000015100 0041 00000000 0x0 0x0
0xffff988000015180 0041 00000000 0x0 0x0
0xffff988000015200 0041 00000000 0x0 0x0
0xffff988000015280 0041 00000000 0x0 0x0
0xffff988000015300 0041 00000000 0x0 0x0
0xffff988000015380 0041 00000000 0x0 0x0
0xffff988000015400 0041 00000000 0x0 0x0
0xffff988000015480 0041 00000000 0x0 0x0
0xffff988000015500 0041 00000000 0x0 0x0
0xffff988000015580 0041 00000000 0x0 0x0
0xffff988000015600 0041 00000000 0x0 0x0
0xffff988000015680 0041 00000000 0x0 0x0
0xffff988000015700 0041 00000000 0x0 0x0
0xffff988000015780 0041 00000000 0x0 0x0
0xffff988000015800 0041 00000000 0x0 0x0
0xffff988000015880 0041 00000000 0x0 0x0
0xffff988000015900 0041 00000000 0x0 0x0
0xffff988000015980 0041 00000000 0x0 0x0
0xffff988000015a00 0041 00000000 0x0 0x0
0xffff988000015a80 0041 00000000 0x0 0x0
0xffff988000015b00 0041 00000000 0x0 0x0
0xffff988000015b80 0041 00000000 0x0 0x0
0xffff988000015c00 0041 00000000 0x0 0x0
0xffff988000015c80 0041 00000000 0x0 0x0
0xffff988000015d00 0001 00000000 0x0 0x0
0xffff988000015d80 0001 00000000 0x0 0x0
0xffff988000015e00 0001 00000000 0x0 0x0
0xffff988000015e80 0001 00000000 0x0 0x0
0xffff988000015f00 0001 00000000 0x0 0x0
0xffff988000015f80 0001 00000000 0x0 0x0
0xffff988000016000 0001 00000000 0x0 0x0
0xffff988000016080 0001 00000000 0x0 0x0
0xffff988000016100 0001 00000000 0x0 0x0
0xffff988000016180 0001 00000000 0x0 0x0
0xffff988000016200 0001 00000000 0x0 0x0
0xffff988000016280 0001 00000000 0x0 0x0
0xffff988000016300 0001 00000000 0x0 0x0
0xffff988000016380 0001 00000000 0x0 0x0
0xffff988000016400 0001 00000000 0x0 0x0
0xffff988000016480 0001 00000000 0x0 0x0
0xffff988000016500 0001 00000000 0x0 0x0
0xffff988000016580 0001 00000000 0x0 0x0
0xffff988000016600 0001 00000000 0x0 0x0
0xffff988000016680 0001 00000000 0x0 0x0
0xffff988000016700 0001 00000000 0x0 0x0
0xffff988000016780 0001 00000000 0x0 0x0
0xffff988000016800 0001 00000000 0x0 0x0
0xffff988000016880 0001 00000000 0x0 0x0
0xffff988000016900 0001 00000000 0x0 0x0
0xffff988000016980 0001 00000000 0x0 0x0
0xffff988000016a00 0001 00000000 0x0 0x0
0xffff988000016a80 0001 00000000 0x0 0x0
0xffff988000016b00 0001 00000000 0x0 0x0
0xffff988000016b80 0001 00000000 0x0 0x0
0xffff988000016c00 0001 00000000 0x0 0x0
0xffff988000016c80 0001 00000000 0x0 0x0
0xffff988000016d00 0001 00000000 0x0 0x0
0xffff988000016d80 0001 00000000 0x0 0x0
0xffff988000016e00 0001 00000000 0x0 0x0
0xffff988000016e80 0001 00000000 0x0 0x0
0xffff988000016f00 0001 00000000 0x0 0x0
0xffff988000016f80 0001 00000000 0x0 0x0
0xffff988000017000 0001 00000000 0x0 0x0
0xffff988000017080 0001 00000000 0x0 0x0
0xffff988000017100 0001 00000000 0x0 0x0
0xffff988000017180 0001 00000000 0x0 0x0
0xffff988000017200 0001 00000000 0x0 0x0
0xffff988000017280 0001 00000000 0x0 0x0
0xffff988000017300 0001 00000000 0x0 0x0
0xffff988000017380 0001 00000000 0x0 0x0
0xffff988000017400 0001 00000000 0x0 0x0
0xffff988000017480 0001 00000000 0x0 0x0
0xffff988000017500 0001 00000000 0x0 0x0
0xffff988000017580 0001 00000000 0x0 0x0
0xffff988000017600 0001 00000000 0x0 0x0
0xffff988000017680 0001 00000000 0x0 0x0
0xffff988000017700 0001 00000000 0x0 0x0
0xffff988000017780 0001 00000000 0x0 0x0
0xffff988000017800 0041 00000000 0x0 0x0
0xffff988000017880 0041 00000000 0x0 0x0
0xffff988000017900 0041 00000000 0x0 0x0
0xffff988000017980 0041 00000000 0x0 0x0
0xffff988000017a00 0041 00000000 0x0 0x0
0xffff988000017a80 0041 00000000 0x0 0x0
0xffff988000017b00 0041 00000000 0x0 0x0
0xffff988000017b80 0041 00000000 0x0 0x0
0xffff988000017c00 0041 00000000 0x0 0x0
0xffff988000017c80 0041 00000000 0x0 0x0
0xffff988000017d00 0041 00000000 0x0 0x0
0xffff988000017d80 0041 00000000 0x0 0x0
0xffff988000017e00 0041 00000000 0x0 0x0
0xffff988000017e80 0041 00000000 0x0 0x0
0xffff988000017f00 0041 00000000 0x0 0x0
0xffff988000017f80 0041 00000000 0x0 0x0
0xffff988000018000 0041 00000000 0x0 0x0
0xffff988000018080 0041 00000000 0x0 0x0
0xffff988000018100 0041 00000000 0x0 0x0
0xffff988000018180 0041 00000000 0x0 0x0
0xffff988000018200 0041 00000000 0x0 0x0
0xffff988000018280 0041 00000000 0x0 0x0
0xffff988000018300 0041 00000000 0x0 0x0
0xffff988000018380 0041 00000000 0x0 0x0
0xffff988000018400 0041 00000000 0x0 0x0
0xffff988000018480 0041 00000000 0x0 0x0
0xffff988000018500 0041 00000000 0x0 0x0
0xffff988000018580 0041 00000000 0x0 0x0
0xffff988000018600 0041 00000000 0x0 0x0
0xffff988000018680 0041 00000000 0x0 0x0
0xffff988000018700 0041 00000000 0x0 0x0
0xffff988000018780 0041 00000000 0x0 0x0
0xffff988000018800 0041 00000000 0x0 0x0
0xffff988000018880 0041 00000000 0x0 0x0
0xffff988000018900 0041 00000000 0x0 0x0
0xffff988000018980 0041 00000000 0x0 0x0
0xffff988000018a00 0041 00000000 0x0 0x0
0xffff988000018a80 0041 00000000 0x0 0x0
0xffff988000018b00 0041 00000000 0x0 0x0
0xffff988000018b80 0041 00000000 0x0 0x0
0xffff988000018c00 0041 00000000 0x0 0x0
0xffff988000018c80 0041 00000000 0x0 0x0
0xffff988000018d00 0001 00000000 0x0 0x0
0xffff988000018d80 0001 00000000 0x0 0x0
0xffff988000018e00 0001 00000000 0x0 0x0
0xffff988000018e80 0001 00000000 0x0 0x0
0xffff988000018f00 0001 00000000 0x0 0x0
0xffff988000018f80 0001 00000000 0x0 0x0
0xffff988000019000 0001 00000000 0x0 0x0
0xffff988000019080 0001 00000000 0x0 0x0
0xffff988000019100 0001 00000000 0x0 0x0
0xffff988000019180 0001 00000000 0x0 0x0
0xffff988000019200 0001 00000000 0x0 0x0
0xffff988000019280 0001 00000000 0x0 0x0
0xffff988000019300 0001 00000000 0x0 0x0
0xffff988000019380 0001 00000000 0x0 0x0
0xffff988000019400 0001 00000000 0x0 0x0
0xffff988000019480 0001 00000000 0x0 0x0
0xffff988000019500 0001 00000000 0x0 0x0
0xffff988000019580 0001 00000000 0x0 0x0
0xffff988000019600 0001 00000000 0x0 0x0
0xffff988000019680 0001 00000000 0x0 0x0
0xffff988000019700 0001 00000000 0x0 0x0
0xffff988000019780 0001 00000000 0x0 0x0
0xffff988000019800 0001 00000000 0x0 0x0
0xffff988000019880 0001 00000000 0x0 0x0
0xffff988000019900 0001 00000000 0x0 0x0
0xffff988000019980 0001 00000000 0x0 0x0
0xffff988000019a00 0001 00000000 0x0 0x0
0xffff988000019a80 0001 00000000 0x0 0x0
0xffff988000019b00 0001 00000000 0x0 0x0
0xffff988000019b80 0001 00000000 0x0 0x0
0xffff988000019c00 0001 00000000 0x0 0x0
0xffff988000019c80 0001 00000000 0x0 0x0
0xffff988000019d00 0001 00000000 0x0 0x0
0xffff988000019d80 0001 00000000 0x0 0x0
0xffff988000019e00 0001 00000000 0x0 0x0
0xffff988000019e80 0001 00000000 0x0 0x0
0xffff988000019f00 0001 00000000 0x0 0x0
0xffff988000019f80 0001 00000000 0x0 0x0
0xffff98800001a000 0001 00000000 0x0 0x0
0xffff98800001a080 0001 00000000 0x0 0x0
0xffff98800001a100 0001 00000000 0x0 0x0
0xffff98800001a180 0001 00000000 0x0 0x0
0xffff98800001a200 0001 00000000 0x0 0x0
0xffff98800001a280 0001 00000000 0x0 0x0
0xffff98800001a300 0001 00000000 0x0 0x0
0xffff98800001a380 0001 00000000 0x0 0x0
0xffff98800001a400 0001 00000000 0x0 0x0
0xffff98800001a480 0001 00000000 0x0 0x0
0xffff98800001a500 0001 00000000 0x0 0x0
0xffff98800001a580 0001 00000000 0x0 0x0
0xffff98800001a600 0001 00000000 0x0 0x0
0xffff98800001a680 0001 00000000 0x0 0x0
0xffff98800001a700 0001 00000000 0x0 0x0
0xffff98800001a780 0001 00000000 0x0 0x0
0xffff98800001a800 0041 00000000 0x0 0x0
0xffff98800001a880 0041 00000000 0x0 0x0
0xffff98800001a900 0041 00000000 0x0 0x0
0xffff98800001a980 0041 00000000 0x0 0x0
0xffff98800001aa00 0041 00000000 0x0 0x0
0xffff98800001aa80 0041 00000000 0x0 0x0
0xffff98800001ab00 0041 00000000 0x0 0x0
0xffff98800001ab80 0041 00000000 0x0 0x0
0xffff98800001ac00 0041 00000000 0x0 0x0
0xffff98800001ac80 0041 00000000 0x0 0x0
0xffff98800001ad00 0041 00000000 0x0 0x0
0xffff98800001ad80 0041 00000000 0x0 0x0
0xffff98800001ae00 0041 00000000 0x0 0x0
0xffff98800001ae80 0041 00000000 0x0 0x0
0xffff98800001af00 0041 00000000 0x0 0x0
0xffff98800001af80 0041 00000000 0x0 0x0
0xffff98800001b000 0041 00000000 0x0 0x0
0xffff98800001b080 0041 00000000 0x0 0x0
0xffff98800001b100 0041 00000000 0x0 0x0
0xffff98800001b180 0041 00000000 0x0 0x0
0xffff98800001b200 0041 00000000 0x0 0x0
0xffff98800001b280 0041 00000000 0x0 0x0
0xffff98800001b300 0041 00000000 0x0 0x0
0xffff98800001b380 0041 00000000 0x0 0x0
0xffff98800001b400 0041 00000000 0x0 0x0
0xffff98800001b480 0041 00000000 0x0 0x0
0xffff98800001b500 0041 00000000 0x0 0x0
0xffff98800001b580 0041 00000000 0x0 0x0
0xffff98800001b600 0041 00000000 0x0 0x0
0xffff98800001b680 0041 00000000 0x0 0x0
0xffff98800001b700 0041 00000000 0x0 0x0
0xffff98800001b780 0041 00000000 0x0 0x0
0xffff98800001b800 0041 00000000 0x0 0x0
0xffff98800001b880 0041 00000000 0x0 0x0
0xffff98800001b900 0041 00000000 0x0 0x0
0xffff98800001b980 0041 00000000 0x0 0x0
0xffff98800001ba00 0045 00000000 0x0 0x0
0xffff98800001ba80 0045 00000000 0x0 0x0
0xffff98800001bb00 0045 00000000 0x0 0x0
0xffff98800001bb80 0041 00000000 0x0 0x0
0xffff98800001bc00 0045 00000000 0x0 0x0
0xffff98800001bc80 0041 00000000 0x0 0x0
0xffff98800001bd00 0001 00000000 0x0 0x0
0xffff98800001bd80 0001 00000000 0x0 0x0
0xffff98800001be00 0001 00000000 0x0 0x0
0xffff98800001be80 0001 00000000 0x0 0x0
0xffff98800001bf00 0001 00000000 0x0 0x0
0xffff98800001bf80 0001 00000000 0x0 0x0
0xffff98800001c000 0001 00000000 0x0 0x0
0xffff98800001c080 0001 00000000 0x0 0x0
0xffff98800001c100 0001 00000000 0x0 0x0
0xffff98800001c180 0001 00000000 0x0 0x0
0xffff98800001c200 0001 00000000 0x0 0x0
0xffff98800001c280 0001 00000000 0x0 0x0
0xffff98800001c300 0001 00000000 0x0 0x0
0xffff98800001c380 0001 00000000 0x0 0x0
0xffff98800001c400 0001 00000000 0x0 0x0
0xffff98800001c480 0001 00000000 0x0 0x0
0xffff98800001c500 0001 00000000 0x0 0x0
0xffff98800001c580 0001 00000000 0x0 0x0
0xffff98800001c600 0001 00000000 0x0 0x0
0xffff98800001c680 0001 00000000 0x0 0x0
0xffff98800001c700 0001 00000000 0x0 0x0
0xffff98800001c780 0001 00000000 0x0 0x0
0xffff98800001c800 0001 00000000 0x0 0x0
0xffff98800001c880 0001 00000000 0x0 0x0
0xffff98800001c900 0001 00000000 0x0 0x0
0xffff98800001c980 0001 00000000 0x0 0x0
0xffff98800001ca00 0001 00000000 0x0 0x0
0xffff98800001ca80 0001 00000000 0x0 0x0
0xffff98800001cb00 0001 00000000 0x0 0x0
0xffff98800001cb80 0001 00000000 0x0 0x0
0xffff98800001cc00 0001 00000000 0x0 0x0
0xffff98800001cc80 0001 00000000 0x0 0x0
0xffff98800001cd00 0001 00000000 0x0 0x0
0xffff98800001cd80 0001 00000000 0x0 0x0
0xffff98800001ce00 0001 00000000 0x0 0x0
0xffff98800001ce80 0001 00000000 0x0 0x0
0xffff98800001cf00 0001 00000000 0x0 0x0
0xffff98800001cf80 0001 00000000 0x0 0x0
0xffff98800001d000 0001 00000000 0x0 0x0
0xffff98800001d080 0001 00000000 0x0 0x0
0xffff98800001d100 0001 00000000 0x0 0x0
0xffff98800001d180 0001 00000000 0x0 0x0
0xffff98800001d200 0001 00000000 0x0 0x0
0xffff98800001d280 0001 00000000 0x0 0x0
0xffff98800001d300 0001 00000000 0x0 0x0
0xffff98800001d380 0001 00000000 0x0 0x0
0x