UBSan: Undefined Behavior in pppinput.cold

0 views
Skip to first unread message

syzbot

unread,
Dec 12, 2021, 2:31:20 AM12/12/21
to syzkaller-...@googlegroups.com
Hello,

syzbot found the following issue on:

HEAD commit: 004fa7970ac0 crashme(9): Touch up man page markup.
git tree: netbsd
console output: https://syzkaller.appspot.com/x/log.txt?x=16f75f75b00000
kernel config: https://syzkaller.appspot.com/x/.config?x=1420f906d33d9f1f
dashboard link: https://syzkaller.appspot.com/bug?extid=07b8738cf6b733fe04e3
compiler: g++ (Debian 10.2.1-6) 10.2.1 20210110
syz repro: https://syzkaller.appspot.com/x/repro.syz?x=139f269db00000
C reproducer: https://syzkaller.appspot.com/x/repro.c?x=15fca3e5b00000

IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+07b873...@syzkaller.appspotmail.com

[ 36.3383059] panic: UBSan: Undefined Behavior in /syzkaller/managers/ci2-netbsd-kubsan/kernel/sys/net/ppp_tty.c:1011:32, left shift of 1 by 31 places cannot be represented in type 'int'

[ 36.3383059] cpu1: Begin traceback...
[ 36.3483003] vpanic() at netbsd:vpanic+0x2d0 sys/kern/subr_prf.c:290
[ 36.3883012] isAlreadyReported() at netbsd:isAlreadyReported
[ 36.4182994] HandleShiftOutOfBounds() at netbsd:HandleShiftOutOfBounds+0x24e sys/../common/lib/libc/misc/ubsan.c:479
[ 36.4583000] pppinput.cold() at netbsd:pppinput.cold+0x19
[ 36.4982977] ttioctl() at netbsd:ttioctl+0x1835 sys/kern/tty.c:1430
[ 36.5283002] comioctl() at netbsd:comioctl+0x1a1 sys/dev/ic/com.c:1305
[ 36.5582974] cdev_ioctl() at netbsd:cdev_ioctl+0x15f sys/kern/subr_devsw.c:935
[ 36.5982964] cnioctl() at netbsd:cnioctl+0xc7 sys/dev/cons.c:221
[ 36.6282978] cdev_ioctl() at netbsd:cdev_ioctl+0x15f sys/kern/subr_devsw.c:935
[ 36.6582993] spec_ioctl() at netbsd:spec_ioctl+0x2d3 sys/miscfs/specfs/spec_vnops.c:934
[ 36.6982992] VOP_IOCTL() at netbsd:VOP_IOCTL+0x147 sys/kern/vnode_if.c:883
[ 36.7283004] vn_ioctl() at netbsd:vn_ioctl+0x197 sys/kern/vfs_vnops.c:865
[ 36.7682991] sys_ioctl() at netbsd:sys_ioctl+0xd84 sys/kern/sys_generic.c:673
[ 36.7982977] sys_syscall() at netbsd:sys_syscall+0x1cf sy_call sys/sys/syscallvar.h:66 [inline]
[ 36.7982977] sys_syscall() at netbsd:sys_syscall+0x1cf sys/kern/sys_syscall.c:77
[ 36.8382994] syscall() at netbsd:syscall+0x2da sy_call sys/sys/syscallvar.h:65 [inline]
[ 36.8382994] syscall() at netbsd:syscall+0x2da sy_invoke sys/sys/syscallvar.h:94 [inline]
[ 36.8382994] syscall() at netbsd:syscall+0x2da sys/arch/x86/x86/syscall.c:138
[ 36.8483031] --- syscall (number 0) ---
[ 36.8582976] netbsd:syscall+0x2da:
[ 36.8682985] cpu1: End traceback...
[ 36.8682985] fatal breakpoint trap in supervisor mode
[ 36.8682985] trap type 1 code 0 rip 0xffffffff80221a95 cs 0x8 rflags 0x246 cr2 0x7dae5c8018e0 ilevel 0x6 rsp 0xffffc700c81a22d0
[ 36.8782949] curlwp 0xffffa33f6a668340 pid 420.420 lowest kstack 0xffffc700c819e2c0
Stopped in pid 420.420 (syz-executor7434) at netbsd:breakpoint+0x5: leave
?
breakpoint() at netbsd:breakpoint+0x5
db_panic() at netbsd:db_panic+0xec sys/ddb/db_panic.c:69
vpanic() at netbsd:vpanic+0x2d0 sys/kern/subr_prf.c:290
isAlreadyReported() at netbsd:isAlreadyReported
HandleShiftOutOfBounds() at netbsd:HandleShiftOutOfBounds+0x24e sys/../common/lib/libc/misc/ubsan.c:479
pppinput.cold() at netbsd:pppinput.cold+0x19
ttioctl() at netbsd:ttioctl+0x1835 sys/kern/tty.c:1430
comioctl() at netbsd:comioctl+0x1a1 sys/dev/ic/com.c:1305
cdev_ioctl() at netbsd:cdev_ioctl+0x15f sys/kern/subr_devsw.c:935
cnioctl() at netbsd:cnioctl+0xc7 sys/dev/cons.c:221
cdev_ioctl() at netbsd:cdev_ioctl+0x15f sys/kern/subr_devsw.c:935
spec_ioctl() at netbsd:spec_ioctl+0x2d3 sys/miscfs/specfs/spec_vnops.c:934
VOP_IOCTL() at netbsd:VOP_IOCTL+0x147 sys/kern/vnode_if.c:883
vn_ioctl() at netbsd:vn_ioctl+0x197 sys/kern/vfs_vnops.c:865
sys_ioctl() at netbsd:sys_ioctl+0xd84 sys/kern/sys_generic.c:673
sys_syscall() at netbsd:sys_syscall+0x1cf sy_call sys/sys/syscallvar.h:66 [inline]
sys_syscall() at netbsd:sys_syscall+0x1cf sys/kern/sys_syscall.c:77
syscall() at netbsd:syscall+0x2da sy_call sys/sys/syscallvar.h:65 [inline]
syscall() at netbsd:syscall+0x2da sy_invoke sys/sys/syscallvar.h:94 [inline]
syscall() at netbsd:syscall+0x2da sys/arch/x86/x86/syscall.c:138
--- syscall (number 0) ---
netbsd:syscall+0x2da:
Panic string: UBSan: Undefined Behavior in /syzkaller/managers/ci2-netbsd-kubsan/kernel/sys/net/ppp_tty.c:1011:32, left shift of 1 by 31 places cannot be represented in type 'int'

PID LID S CPU FLAGS STRUCT LWP * NAME WAIT
1118 1118 2 0 0 ffffa33f698a5740 syz-executor7434
420 > 420 7 1 0 ffffa33f6a668340 syz-executor7434
1085 1085 2 1 0 ffffa33f6b610540 syz-executor7434
1082 1082 2 1 0 ffffa33f6bbd65c0 syz-executor7434
1083 1083 2 0 0 ffffa33f698a5300 syz-executor7434
1097 1097 2 0 0 ffffa33f68e32600 syz-executor7434
1075 >1075 7 0 0 ffffa33f6bbd6180 syz-executor7434
1068 1068 2 0 0 ffffa33f6923aac0 syz-executor7434
1078 1078 2 0 140 ffffa33f68ec5a80 syz-executor7434
1252 1252 3 1 180 ffffa33f6b610980 syz-executor7434 nanoslp
1071 1071 3 1 180 ffffa33f6924a6c0 syz-executor7434 nanoslp
729 729 3 0 180 ffffa33f6b5289c0 syz-executor7434 nanoslp
1067 1067 2 1 40100 ffffa33f6b528580 sshd
697 697 3 0 180 ffffa33f6b528140 getty nanoslp
1098 1098 3 0 180 ffffa33f6b610100 getty nanoslp
1105 1105 3 1 180 ffffa33f6923a240 getty nanoslp
1099 1099 3 1 1c0 ffffa33f6923a680 getty ttyraw
991 991 3 1 180 ffffa33f69e16500 sshd select
1121 1121 3 1 180 ffffa33f69e16940 powerd kqueue
870 870 3 0 180 ffffa33f697e22c0 syslogd kqueue
594 594 3 0 180 ffffa33f6924ab00 dhcpcd poll
611 611 3 0 180 ffffa33f6a668780 dhcpcd poll
592 592 3 1 180 ffffa33f6a0e34c0 dhcpcd poll
432 432 3 0 180 ffffa33f697e2700 dhcpcd poll
349 349 3 0 180 ffffa33f6924a280 dhcpcd poll
348 348 3 0 180 ffffa33f60c282c0 dhcpcd poll
347 347 3 0 180 ffffa33f697e2b40 dhcpcd poll
1 1 3 0 180 ffffa33f60c79940 init wait
0 820 3 0 200 ffffa33f68e32a40 physiod physiod
0 192 3 0 200 ffffa33f68ec5640 ioflush syncer
0 166 3 0 200 ffffa33f60c28700 pooldrain pooldrain
0 165 3 1 200 ffffa33f68ec5200 pgdaemon pgdaemon
0 162 3 1 200 ffffa33f68e321c0 usb7 usbevt
0 161 3 1 200 ffffa33f65dd5a00 usb6 usbevt
0 31 3 1 200 ffffa33f65dd55c0 usb5 usbevt
0 63 3 1 200 ffffa33f65dd5180 usb4 usbevt
0 126 3 1 200 ffffa33f62d789c0 usb3 usbevt
0 125 3 1 200 ffffa33f62d78580 usb2 usbevt
0 124 3 1 200 ffffa33f62d78140 usb1 usbevt
0 123 3 1 200 ffffa33f61d19980 usb0 usbevt
0 122 3 1 200 ffffa33f61d19540 usbtask-dr usbtsk
0 121 3 1 200 ffffa33f61d19100 usbtask-hc usbtsk
0 120 3 0 200 ffffa33f5f0e4ac0 npfgc0 npfgcw
0 119 3 1 200 ffffa33f60c79500 rt_free rt_free
0 118 3 1 200 ffffa33f60c790c0 unpgc unpgc
0 117 3 0 200 ffffa33f60c7c900 key_timehandler key_timehandler
0 116 3 1 200 ffffa33f60c7c4c0 icmp6_wqinput/1 icmp6_wqinput
0 115 3 0 200 ffffa33f60c7c080 icmp6_wqinput/0 icmp6_wqinput
0 114 3 0 200 ffffa33f60c6f8c0 nd6_timer nd6_timer
0 113 3 1 200 ffffa33f60c6f480 carp6_wqinput/1 carp6_wqinput
0 112 3 0 200 ffffa33f60c6f040 carp6_wqinput/0 carp6_wqinput
0 111 3 1 200 ffffa33f60c4abc0 carp_wqinput/1 carp_wqinput
0 110 3 0 200 ffffa33f60c4a780 carp_wqinput/0 carp_wqinput
0 109 3 1 200 ffffa33f60c4a340 icmp_wqinput/1 icmp_wqinput
0 108 3 0 200 ffffa33f60c25b80 icmp_wqinput/0 icmp_wqinput
0 107 3 0 200 ffffa33f60c25740 rt_timer rt_timer
0 106 3 1 200 ffffa33f60c28b40 vmem_rehash vmem_rehash
0 105 3 0 200 ffffa33f60c25300 entbutler entropy
0 96 3 0 200 ffffa33f6057db00 viomb balloon
0 30 3 1 200 ffffa33f6057d6c0 vioif0_txrx/1 vioif0_txrx
0 29 3 0 200 ffffa33f6057d280 vioif0_txrx/0 vioif0_txrx
0 27 3 1 200 ffffa33f5f0e4680 scsibus0 sccomp
0 26 3 0 200 ffffa33f5f0e4240 pms0 pmsreset
0 25 3 1 200 ffffa33f5efeca80 xcall/1 xcall
0 24 1 1 200 ffffa33f5efec640 softser/1
0 23 1 1 200 ffffa33f5efec200 softclk/1
0 22 1 1 200 ffffa33f5efcfa40 softbio/1
0 21 1 1 200 ffffa33f5efcf600 softnet/1
0 20 1 1 201 ffffa33f5efcf1c0 idle/1
0 19 3 1 200 ffffa3408df3ea00 lnxpwrwq lnxpwrwq
0 18 3 1 200 ffffa3408df3e5c0 lnxlngwq lnxlngwq
0 17 3 1 200 ffffa3408df3e180 lnxsyswq lnxsyswq
0 16 3 0 200 ffffa3408df639c0 lnxrcugc lnxrcugc
0 15 3 0 200 ffffa3408df63580 sysmon smtaskq
0 14 3 1 200 ffffa3408df63140 pmfsuspend pmfsuspend
0 13 3 0 200 ffffa3408df68980 pmfevent pmfevent
0 12 3 1 200 ffffa3408df68540 sopendfree sopendfr
0 11 3 0 200 ffffa3408df68100 iflnkst iflnkst
0 10 3 1 200 ffffa3408ef9b940 nfssilly nfssilly
0 9 3 0 200 ffffa3408ef9b500 vdrain vdrain
0 8 3 1 200 ffffa3408ef9b0c0 modunload mod_unld
0 7 3 0 200 ffffa3408efc6900 xcall/0 xcall
0 6 1 0 200 ffffa3408efc64c0 softser/0
0 > 5 7 0 200 ffffa3408efc6080 softclk/0
0 4 1 0 200 ffffa3408eff38c0 softbio/0
0 3 1 0 200 ffffa3408eff3480 softnet/0
0 2 1 0 201 ffffa3408eff3040 idle/0
0 0 3 0 200 ffffffff85f572c0 swapper uvm
[Locks tracked through LWPs]

****** LWP 420.420 (syz-executor7434) @ 0xffffa33f6a668340, l_stat=7

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at module_hook_init)
lock address : 0xffffffff8637ed00 type : sleep/adaptive
initialized : 0xffffffff8338cf97
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 0
relevant lwp : 0xffffa33f6a668340 last held: 000000000000000000
last locked : 000000000000000000 unlocked*: 000000000000000000
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 1082.1082 (syz-executor7434) @ 0xffffa33f6bbd65c0, l_stat=2

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at uvmspace_alloc)
lock address : 0xffffa33f6a127e18 type : sleep/adaptive
initialized : 0xffffffff8327d7d5
shared holds : 0 exclusive: 0
shares wanted: 1 exclusive: 0
relevant cpu : 1 last held: 65535
relevant lwp : 0xffffa33f6bbd65c0 last held: 000000000000000000
last locked : 0xffffffff83255320 unlocked*: 0xffffffff83253218
owner/count : 000000000000000000 flags : 000000000000000000
Turnstile: no active turnstile for this lock.

****** LWP 1083.1083 (syz-executor7434) @ 0xffffa33f698a5300, l_stat=2

*** Locks held:

* Lock 0 (initialized at pmap_ctor)
lock address : 0xffffa33f6959cd80 type : sleep/adaptive
initialized : 0xffffffff80fc2b4d
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffffa33f698a5300 last held: 0xffffa33f698a5300
last locked* : 0xffffffff80fc5256 unlocked : 0xffffffff80fc2918
owner field : 0xffffa33f698a5300 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

*** Locks wanted: none

****** LWP 1097.1097 (syz-executor7434) @ 0xffffa33f68e32600, l_stat=2

*** Locks held:

* Lock 0 (initialized at amap_alloc1)
lock address : 0xffffa33f69c09500 type : sleep/adaptive
initialized : 0xffffffff8323148a
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffffa33f68e32600 last held: 0xffffa33f68e32600
last locked* : 0xffffffff8325586e unlocked : 0xffffffff8325193f
owner/count : 000000000000000000 flags : 000000000000000000
Turnstile: no active turnstile for this lock.

* Lock 1 (initialized at pmap_ctor)
lock address : 0xffffa33f69879380 type : sleep/adaptive
initialized : 0xffffffff80fc2b4d
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffffa33f68e32600 last held: 0xffffa33f68e32600
last locked* : 0xffffffff80fc5256 unlocked : 0xffffffff80fc2918
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

*** Locks wanted: none

****** LWP 1075.1075 (syz-executor7434) @ 0xffffa33f6bbd6180, l_stat=7

*** Locks held:

* Lock 0 (initialized at pmap_ctor)
lock address : 0xffffa33f6a728780 type : sleep/adaptive
initialized : 0xffffffff80fc2b4d
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffffa33f6bbd6180 last held: 0xffffa33f6bbd6180
last locked* : 0xffffffff80fc5256 unlocked : 0xffffffff80fc2918
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

*** Locks wanted: none

****** LWP 1068.1068 (syz-executor7434) @ 0xffffa33f6923aac0, l_stat=2

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at pmap_ctor)
lock address : 0xffffa33f6a728f80 type : sleep/adaptive
initialized : 0xffffffff80fc2b4d
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 1
relevant cpu : 0 last held: 0
relevant lwp : 0xffffa33f6923aac0 last held: 000000000000000000
last locked : 0xffffffff80fc5256 unlocked*: 0xffffffff80fc5933
owner field : 0xffffa33f6923aac0 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 611.611 (dhcpcd) @ 0xffffa33f6a668780, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at module_hook_init)
lock address : 0xffffffff8637ed00 type : sleep/adaptive
initialized : 0xffffffff8338cf97
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffffa33f6a668780 last held: 000000000000000000
last locked : 000000000000000000 unlocked*: 000000000000000000
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 592.592 (dhcpcd) @ 0xffffa33f6a0e34c0, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at module_hook_init)
lock address : 0xffffffff8637ed00 type : sleep/adaptive
initialized : 0xffffffff8338cf97
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 0
relevant lwp : 0xffffa33f6a0e34c0 last held: 000000000000000000
last locked : 000000000000000000 unlocked*: 000000000000000000
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 348.348 (dhcpcd) @ 0xffffa33f60c282c0, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at module_hook_init)
lock address : 0xffffffff8637ed00 type : sleep/adaptive
initialized : 0xffffffff8338cf97
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffffa33f60c282c0 last held: 000000000000000000
last locked : 000000000000000000 unlocked*: 000000000000000000
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 347.347 (dhcpcd) @ 0xffffa33f697e2b40, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at module_hook_init)
lock address : 0xffffffff8637ed00 type : sleep/adaptive
initialized : 0xffffffff8338cf97
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffffa33f697e2b40 last held: 000000000000000000
last locked : 000000000000000000 unlocked*: 000000000000000000
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 0.11 (iflnkst) @ 0xffffa3408df68100, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at module_hook_init)
lock address : 0xffffffff8637ed00 type : sleep/adaptive
initialized : 0xffffffff8338cf97
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffffa3408df68100 last held: 000000000000000000
last locked : 000000000000000000 unlocked*: 000000000000000000
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 0.5 (softclk/0) @ 0xffffa3408efc6080, l_stat=7

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at module_hook_init)
lock address : 0xffffffff8637ed00 type : sleep/adaptive
initialized : 0xffffffff8338cf97
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffffa3408efc6080 last held: 000000000000000000
last locked : 000000000000000000 unlocked*: 000000000000000000
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 0.0 (swapper) @ 0xffffffff85f572c0, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at module_hook_init)
lock address : 0xffffffff8637ed00 type : sleep/adaptive
initialized : 0xffffffff8338cf97
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffffffff85f572c0 last held: 000000000000000000
last locked : 000000000000000000 unlocked*: 000000000000000000
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

[Locks tracked through CPUs]

******* Locks held on cpu1:

* Lock 0 (initialized at main)
lock address : 0xffffffff8637ec00 type : spin
initialized : 0xffffffff83ba5ec6
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 1
relevant lwp : 0xffffa33f6a668340 last held: 0xffffa33f6a668340
last locked* : 0xffffffff83477f2a unlocked : 0xffffffff8378c945
curcpu holds : 2 wanted by: 000000000000000000

PAGE FLAG PQ UOBJECT UANON
0xffffc70000007180 0045 00000000 0x0 0x0
0xffffc70000007200 0045 00000000 0x0 0x0
0xffffc70000007280 0045 00000000 0x0 0x0
0xffffc70000007300 0045 00000000 0x0 0x0
0xffffc70000007380 0045 00000000 0x0 0x0
0xffffc70000007400 0045 00000000 0x0 0x0
0xffffc70000007480 0045 00000000 0x0 0x0
0xffffc70000007500 0045 00000000 0x0 0x0
0xffffc70000007580 0045 00000000 0x0 0x0
0xffffc70000007600 0045 00000000 0x0 0x0
0xffffc70000007680 0041 00000000 0x0 0x0
0xffffc70000007700 0041 00000000 0x0 0x0
0xffffc70000007780 0041 00000000 0x0 0x0
0xffffc70000007800 0041 00000000 0x0 0x0
0xffffc70000007880 0045 00000000 0x0 0x0
0xffffc70000007900 0045 00000000 0x0 0x0
0xffffc70000007980 0041 00000000 0x0 0x0
0xffffc70000007a00 0041 00000000 0x0 0x0
0xffffc70000007a80 0041 00000000 0x0 0x0
0xffffc70000007b00 0041 00000000 0x0 0x0
0xffffc70000007b80 0041 00000000 0x0 0x0
0xffffc70000007c00 0041 00000000 0x0 0x0
0xffffc70000007c80 0041 00000000 0x0 0x0
0xffffc70000007d00 0041 00000000 0x0 0x0
0xffffc70000007d80 0041 00000000 0x0 0x0
0xffffc70000007e00 0041 00000000 0x0 0x0
0xffffc70000007e80 0041 00000000 0x0 0x0
0xffffc70000007f00 0041 00000000 0x0 0x0
0xffffc70000007f80 0041 00000000 0x0 0x0
0xffffc70000008000 0041 00000000 0x0 0x0
0xffffc70000008080 0041 00000000 0x0 0x0
0xffffc70000008100 0041 00000000 0x0 0x0
0xffffc70000008180 0041 00000000 0x0 0x0
0xffffc70000008200 0041 00000000 0x0 0x0
0xffffc70000008280 0041 00000000 0x0 0x0
0xffffc70000008300 0041 00000000 0x0 0x0
0xffffc70000008380 0041 00000000 0x0 0x0
0xffffc70000008400 0041 00000000 0x0 0x0
0xffffc70000008480 0041 00000000 0x0 0x0
0xffffc70000008500 0041 00000000 0x0 0x0
0xffffc70000008580 0041 00000000 0x0 0x0
0xffffc70000008600 0045 00000000 0x0 0x0
0xffffc70000008680 0041 00000000 0x0 0x0
0xffffc70000008700 0041 00000000 0x0 0x0
0xffffc70000008780 0041 00000000 0x0 0x0
0xffffc70000008800 0041 00000000 0x0 0x0
0xffffc70000008880 0041 00000000 0x0 0x0
0xffffc70000008900 0041 00000000 0x0 0x0
0xffffc70000008980 0041 00000000 0x0 0x0
0xffffc70000008a00 0041 00000000 0x0 0x0
0xffffc70000008a80 0041 00000000 0x0 0x0
0xffffc70000008b00 0041 00000000 0x0 0x0
0xffffc70000008b80 0045 00000000 0x0 0x0
0xffffc70000008c00 0045 00000000 0x0 0x0
0xffffc70000008c80 0041 00000000 0x0 0x0
0xffffc70000008d00 0041 00000000 0x0 0x0
0xffffc70000008d80 0041 00000000 0x0 0x0
0xffffc70000008e00 0041 00000000 0x0 0x0
0xffffc70000008e80 0041 00000000 0x0 0x0
0xffffc70000008f00 0041 00000000 0x0 0x0
0xffffc70000008f80 0041 00000000 0x0 0x0
0xffffc70000009000 0041 00000000 0x0 0x0
0xffffc70000009080 0041 00000000 0x0 0x0
0xffffc70000009100 0045 00000000 0x0 0x0
0xffffc70000009180 0041 00000000 0x0 0x0
0xffffc70000009200 0041 00000000 0x0 0x0
0xffffc70000009280 0041 00000000 0x0 0x0
0xffffc70000009300 0041 00000000 0x0 0x0
0xffffc70000009380 0041 00000000 0x0 0x0
0xffffc70000009400 0041 00000000 0x0 0x0
0xffffc70000009480 0045 00000000 0x0 0x0
0xffffc70000009500 0041 00000000 0x0 0x0
0xffffc70000009580 0041 00000000 0x0 0x0
0xffffc70000009600 0041 00000000 0x0 0x0
0xffffc70000009680 0041 00000000 0x0 0x0
0xffffc70000009700 0041 00000000 0x0 0x0
0xffffc70000009780 0041 00000000 0x0 0x0
0xffffc70000009800 0041 00000000 0x0 0x0
0xffffc70000009880 0041 00000000 0x0 0x0
0xffffc70000009900 0041 00000000 0x0 0x0
0xffffc70000009980 0041 00000000 0x0 0x0
0xffffc70000009a00 0041 00000000 0x0 0x0
0xffffc70000009a80 0045 00000000 0x0 0x0
0xffffc70000009b00 0041 00000000 0x0 0x0
0xffffc70000009b80 0041 00000000 0x0 0x0
0xffffc70000009c00 0041 00000000 0x0 0x0
0xffffc70000009c80 0041 00000000 0x0 0x0
0xffffc70000009d00 0041 00000000 0x0 0x0
0xffffc70000009d80 0041 00000000 0x0 0x0
0xffffc70000009e00 0041 00000000 0x0 0x0
0xffffc70000009e80 0041 00000000 0x0 0x0
0xffffc70000009f00 0041 00000000 0x0 0x0
0xffffc70000009f80 0041 00000000 0x0 0x0
0xffffc7000000a000 0041 00000000 0x0 0x0
0xffffc7000000a080 0041 00000000 0x0 0x0
0xffffc7000000a100 0041 00000000 0x0 0x0
0xffffc7000000a180 0041 00000000 0x0 0x0
0xffffc7000000a200 0041 00000000 0x0 0x0
0xffffc7000000a280 0041 00000000 0x0 0x0
0xffffc7000000a300 0041 00000000 0x0 0x0
0xffffc7000000a380 0041 00000000 0x0 0x0
0xffffc7000000a400 0041 00000000 0x0 0x0
0xffffc7000000a480 0041 00000000 0x0 0x0
0xffffc7000000a500 0041 00000000 0x0 0x0
0xffffc7000000a580 0041 00000000 0x0 0x0
0xffffc7000000a600 0041 00000000 0x0 0x0
0xffffc7000000a680 0041 00000000 0x0 0x0
0xffffc7000000a700 0041 00000000 0x0 0x0
0xffffc7000000a780 0041 00000000 0x0 0x0
0xffffc7000000a800 0041 00000000 0x0 0x0
0xffffc7000000a880 0041 00000000 0x0 0x0
0xffffc7000000a900 0041 00000000 0x0 0x0
0xffffc7000000a980 0041 00000000 0x0 0x0
0xffffc7000000aa00 0041 00000000 0x0 0x0
0xffffc7000000aa80 0041 00000000 0x0 0x0
0xffffc7000000ab00 0041 00000000 0x0 0x0
0xffffc7000000ab80 0041 00000000 0x0 0x0
0xffffc7000000ac00 0041 00000000 0x0 0x0
0xffffc7000000ac80 0041 00000000 0x0 0x0
0xffffc7000000ad00 0041 00000000 0x0 0x0
0xffffc7000000ad80 0041 00000000 0x0 0x0
0xffffc7000000ae00 0041 00000000 0x0 0x0
0xffffc7000000ae80 0045 00000000 0x0 0x0
0xffffc7000000af00 0045 00000000 0x0 0x0
0xffffc7000000af80 0041 00000000 0x0 0x0
0xffffc7000000b000 0041 00000000 0x0 0x0
0xffffc7000000b080 0041 00000000 0x0 0x0
0xffffc7000000b100 0041 00000000 0x0 0x0
0xffffc7000000b180 0045 00000000 0x0 0x0
0xffffc7000000b200 0045 00000000 0x0 0x0
0xffffc7000000b280 0045 00000000 0x0 0x0
0xffffc7000000b300 0045 00000000 0x0 0x0
0xffffc7000000b380 0045 00000000 0x0 0x0
0xffffc7000000b400 0041 00000000 0x0 0x0
0xffffc7000000b480 0041 00000000 0x0 0x0
0xffffc7000000b500 0041 00000000 0x0 0x0
0xffffc7000000b580 0045 00000000 0x0 0x0
0xffffc7000000b600 0045 00000000 0x0 0x0
0xffffc7000000b680 0045 00000000 0x0 0x0
0xffffc7000000b700 0045 00000000 0x0 0x0
0xffffc7000000b780 0045 00000000 0x0 0x0
0xffffc7000000b800 0041 00000000 0x0 0x0
0xffffc7000000b880 0041 00000000 0x0 0x0
0xffffc7000000b900 0045 00000000 0x0 0x0
0xffffc7000000b980 0045 00000000 0x0 0x0
0xffffc7000000ba00 0045 00000000 0x0 0x0
0xffffc7000000ba80 0045 00000000 0x0 0x0
0xffffc7000000bb00 0045 00000000 0x0 0x0
0xffffc7000000bb80 0045 00000000 0x0 0x0
0xffffc7000000bc00 0045 00000000 0x0 0x0
0xffffc7000000bc80 0041 00000000 0x0 0x0
0xffffc7000000bd00 0045 00000000 0x0 0x0
0xffffc7000000bd80 0045 00000000 0x0 0x0
0xffffc7000000be00 0045 00000000 0x0 0x0
0xffffc7000000be80 0045 00000000 0x0 0x0
0xffffc7000000bf00 0045 00000000 0x0 0x0
0xffffc7000000bf80 0045 00000000 0x0 0x0
0xffffc7000000c000 0045 00000000 0x0 0x0
0xffffc7000000c080 0041 00000000 0x0 0x0
0xffffc7000000c100 0045 00000000 0x0 0x0
0xffffc7000000c180 0045 00000000 0x0 0x0
0xffffc7000000c200 0045 00000000 0x0 0x0
0xffffc7000000c280 0045 00000000 0x0 0x0
0xffffc7000000c300 0045 00000000 0x0 0x0
0xffffc7000000c380 0045 00000000 0x0 0x0
0xffffc7000000c400 0045 00000000 0x0 0x0
0xffffc7000000c480 0045 00000000 0x0 0x0
0xffffc7000000c500 0045 00000000 0x0 0x0
0xffffc7000000c580 0045 00000000 0x0 0x0
0xffffc7000000c600 0045 00000000 0x0 0x0
0xffffc7000000c680 0045 00000000 0x0 0x0
0xffffc7000000c700 0041 00000000 0x0 0x0
0xffffc7000000c780 0045 00000000 0x0 0x0
0xffffc7000000c800 0045 00000000 0x0 0x0
0xffffc7000000c880 0045 00000000 0x0 0x0
0xffffc7000000c900 0045 00000000 0x0 0x0
0xffffc7000000c980 0045 00000000 0x0 0x0
0xffffc7000000ca00 0045 00000000 0x0 0x0
0xffffc7000000ca80 0041 00000000 0x0 0x0
0xffffc7000000cb00 0041 00000000 0x0 0x0
0xffffc7000000cb80 0041 00000000 0x0 0x0
0xffffc7000000cc00 0045 00000000 0x0 0x0
0xffffc7000000cc80 0045 00000000 0x0 0x0
0xffffc7000000cd00 0045 00000000 0x0 0x0
0xffffc7000000cd80 0041 00000000 0x0 0x0
0xffffc7000000ce00 0041 00000000 0x0 0x0
0xffffc7000000ce80 0041 00000000 0x0 0x0
0xffffc7000000cf00 0041 00000000 0x0 0x0
0xffffc7000000cf80 0041 00000000 0x0 0x0
0xffffc7000000d000 0045 00000000 0x0 0x0
0xffffc7000000d080 0045 00000000 0x0 0x0
0xffffc7000000d100 0041 00000000 0x0 0x0
0xffffc7000000d180 0041 00000000 0x0 0x0
0xffffc7000000d200 0041 00000000 0x0 0x0
0xffffc7000000d280 0041 00000000 0x0 0x0
0xffffc7000000d300 0041 00000000 0x0 0x0
0xffffc7000000d380 0041 00000000 0x0 0x0
0xffffc7000000d400 0041 00000000 0x0 0x0
0xffffc7000000d480 0045 00000000 0x0 0x0
0xffffc7000000d500 0041 00000000 0x0 0x0
0xffffc7000000d580 0041 00000000 0x0 0x0
0xffffc7000000d600 0041 00000000 0x0 0x0
0xffffc7000000d680 0045 00000000 0x0 0x0
0xffffc7000000d700 0045 00000000 0x0 0x0
0xffffc7000000d780 0041 00000000 0x0 0x0
0xffffc7000000d800 0041 00000000 0x0 0x0
0xffffc7000000d880 0045 00000000 0x0 0x0
0xffffc7000000d900 0041 00000000 0x0 0x0
0xffffc7000000d980 0041 00000000 0x0 0x0
0xffffc7000000da00 0041 00000000 0x0 0x0
0xffffc7000000da80 0041 00000000 0x0 0x0
0xffffc7000000db00 0045 00000000 0x0 0x0
0xffffc7000000db80 0045 00000000 0x0 0x0
0xffffc7000000dc00 0041 00000000 0x0 0x0
0xffffc7000000dc80 0041 00000000 0x0 0x0
0xffffc7000000dd00 0041 00000000 0x0 0x0
0xffffc7000000dd80 0041 00000000 0x0 0x0
0xffffc7000000de00 0041 00000000 0x0 0x0
0xffffc7000000de80 0041 00000000 0x0 0x0
0xffffc7000000df00 0045 00000000 0x0 0x0
0xffffc7000000df80 0045 00000000 0x0 0x0
0xffffc7000000e000 0041 00000000 0x0 0x0
0xffffc7000000e080 0041 00000000 0x0 0x0
0xffffc7000000e100 0041 00000000 0x0 0x0
0xffffc7000000e180 0045 00000000 0x0 0x0
0xffffc7000000e200 0045 00000000 0x0 0x0
0xffffc7000000e280 0045 00000000 0x0 0x0
0xffffc7000000e300 0041 00000000 0x0 0x0
0xffffc7000000e380 0045 00000000 0x0 0x0
0xffffc7000000e400 0045 00000000 0x0 0x0
0xffffc7000000e480 0041 00000000 0x0 0x0
0xffffc7000000e500 0045 00000000 0x0 0x0
0xffffc7000000e580 0041 00000000 0x0 0x0
0xffffc7000000e600 0041 00000000 0x0 0x0
0xffffc7000000e680 0041 00000000 0x0 0x0
0xffffc7000000e700 0041 00000000 0x0 0x0
0xffffc7000000e780 0041 00000000 0x0 0x0
0xffffc7000000e800 0045 00000000 0x0 0x0
0xffffc7000000e880 0041 00000000 0x0 0x0
0xffffc7000000e900 0041 00000000 0x0 0x0
0xffffc7000000e980 0041 00000000 0x0 0x0
0xffffc7000000ea00 0041 00000000 0x0 0x0
0xffffc7000000ea80 0045 00000000 0x0 0x0
0xffffc7000000eb00 0041 00000000 0x0 0x0
0xffffc7000000eb80 0041 00000000 0x0 0x0
0xffffc7000000ec00 0045 00000000 0x0 0x0
0xffffc7000000ec80 0045 00000000 0x0 0x0
0xffffc7000000ed00 0041 00000000 0x0 0x0
0xffffc7000000ed80 0041 00000000 0x0 0x0
0xffffc7000000ee00 0041 00000000 0x0 0x0
0xffffc7000000ee80 0041 00000000 0x0 0x0
0xffffc7000000ef00 0041 00000000 0x0 0x0
0xffffc7000000ef80 0045 00000000 0x0 0x0
0xffffc7000000f000 0041 00000000 0x0 0x0
0xffffc7000000f080 0041 00000000 0x0 0x0
0xffffc7000000f100 0041 00000000 0x0 0x0
0xffffc7000000f180 0041 00000000 0x0 0x0
0xffffc7000000f200 0045 00000000 0x0 0x0
0xffffc7000000f280 0041 00000000 0x0 0x0
0xffffc7000000f300 0041 00000000 0x0 0x0
0xffffc7000000f380 0041 00000000 0x0 0x0
0xffffc7000000f400 0041 00000000 0x0 0x0
0xffffc7000000f480 0041 00000000 0x0 0x0
0xffffc7000000f500 0041 00000000 0x0 0x0
0xffffc7000000f580 0041 00000000 0x0 0x0
0xffffc7000000f600 0041 00000000 0x0 0x0
0xffffc7000000f680 0041 00000000 0x0 0x0
0xffffc7000000f700 0041 00000000 0x0 0x0
0xffffc7000000f780 0041 00000000 0x0 0x0
0xffffc7000000f800 0045 00000000 0x0 0x0
0xffffc7000000f880 0041 00000000 0x0 0x0
0xffffc7000000f900 0041 00000000 0x0 0x0
0xffffc7000000f980 0041 00000000 0x0 0x0
0xffffc7000000fa00 0041 00000000 0x0 0x0
0xffffc7000000fa80 0041 00000000 0x0 0x0
0xffffc7000000fb00 0041 00000000 0x0 0x0
0xffffc7000000fb80 0041 00000000 0x0 0x0
0xffffc7000000fc00 0041 00000000 0x0 0x0
0xffffc7000000fc80 0041 00000000 0x0 0x0
0xffffc7000000fd00 0041 00000000 0x0 0x0
0xffffc7000000fd80 0041 00000000 0x0 0x0
0xffffc7000000fe00 0041 00000000 0x0 0x0
0xffffc7000000fe80 0041 00000000 0x0 0x0
0xffffc7000000ff00 0041 00000000 0x0 0x0
0xffffc7000000ff80 0041 00000000 0x0 0x0
0xffffc70000010000 0041 00000000 0x0 0x0
0xffffc70000010080 0041 00000000 0x0 0x0
0xffffc70000010100 0045 00000000 0x0 0x0
0xffffc70000010180 0045 00000000 0x0 0x0
0xffffc70000010200 0041 00000000 0x0 0x0
0xffffc70000010280 0041 00000000 0x0 0x0
0xffffc70000010300 0041 00000000 0x0 0x0
0xffffc70000010380 0041 00000000 0x0 0x0
0xffffc70000010400 0041 00000000 0x0 0x0
0xffffc70000010480 0041 00000000 0x0 0x0
0xffffc70000010500 0041 00000000 0x0 0x0
0xffffc70000010580 0041 00000000 0x0 0x0
0xffffc70000010600 0045 00000000 0x0 0x0
0xffffc70000010680 0045 00000000 0x0 0x0
0xffffc70000010700 0041 00000000 0x0 0x0
0xffffc70000010780 0041 00000000 0x0 0x0
0xffffc70000010800 0045 00000000 0x0 0x0
0xffffc70000010880 0045 00000000 0x0 0x0
0xffffc70000010900 0045 00000000 0x0 0x0
0xffffc70000010980 0045 00000000 0x0 0x0
0xffffc70000010a00 0041 00000000 0x0 0x0
0xffffc70000010a80 0041 00000000 0x0 0x0
0xffffc70000010b00 0041 00000000 0x0 0x0
0xffffc70000010b80 0041 00000000 0x0 0x0
0xffffc70000010c00 0041 00000000 0x0 0x0
0xffffc70000010c80 0041 00000000 0x0 0x0
0xffffc70000010d00 0041 00000000 0x0 0x0
0xffffc70000010d80 0041 00000000 0x0 0x0
0xffffc70000010e00 0045 00000000 0x0 0x0
0xffffc70000010e80 0045 00000000 0x0 0x0
0xffffc70000010f00 0041 00000000 0x0 0x0
0xffffc70000010f80 0041 00000000 0x0 0x0
0xffffc70000011000 0041 00000000 0x0 0x0
0xffffc70000011080 0045 00000000 0x0 0x0
0xffffc70000011100 0045 00000000 0x0 0x0
0xffffc70000011180 0045 00000000 0x0 0x0
0xffffc70000011200 0041 00000000 0x0 0x0
0xffffc70000011280 0041 00000000 0x0 0x0
0xffffc70000011300 0041 00000000 0x0 0x0
0xffffc70000011380 0041 00000000 0x0 0x0
0xffffc70000011400 0041 00000000 0x0 0x0
0xffffc70000011480 0041 00000000 0x0 0x0
0xffffc70000011500 0041 00000000 0x0 0x0
0xffffc70000011580 0041 00000000 0x0 0x0
0xffffc70000011600 0041 00000000 0x0 0x0
0xffffc70000011680 0045 00000000 0x0 0x0
0xffffc70000011700 0041 00000000 0x0 0x0
0xffffc70000011780 0041 00000000 0x0 0x0
0xffffc70000011800 0041 00000000 0x0 0x0
0xffffc70000011880 0041 00000000 0x0 0x0
0xffffc70000011900 0041 00000000 0x0 0x0
0xffffc70000011980 0041 00000000 0x0 0x0
0xffffc70000011a00 0041 00000000 0x0 0x0
0xffffc70000011a80 0041 00000000 0x0 0x0
0xffffc70000011b00 0045 00000000 0x0 0x0
0xffffc70000011b80 0041 00000000 0x0 0x0
0xffffc70000011c00 0041 00000000 0x0 0x0
0xffffc70000011c80 0041 00000000 0x0 0x0
0xffffc70000011d00 0041 00000000 0x0 0x0
0xffffc70000011d80 0041 00000000 0x0 0x0
0xffffc70000011e00 0045 00000000 0x0 0x0
0xffffc70000011e80 0041 00000000 0x0 0x0
0xffffc70000011f00 0041 00000000 0x0 0x0
0xffffc70000011f80 0045 00000000 0x0 0x0
0xffffc70000012000 0041 00000000 0x0 0x0
0xffffc70000012080 0041 00000000 0x0 0x0
0xffffc70000012100 0041 00000000 0x0 0x0
0xffffc70000012180 0041 00000000 0x0 0x0
0xffffc70000012200 0041 00000000 0x0 0x0
0xffffc70000012280 0041 00000000 0x0 0x0
0xffffc70000012300 0041 00000000 0x0 0x0
0xffffc70000012380 0041 00000000 0x0 0x0
0xffffc70000012400 0041 00000000 0x0 0x0
0xffffc70000012480 0041 00000000 0x0 0x0
0xffffc70000012500 0041 00000000 0x0 0x0
0xffffc70000012580 0041 00000000 0x0 0x0
0xffffc70000012600 0041 00000000 0x0 0x0
0xffffc70000012680 0045 00000000 0x0 0x0
0xffffc70000012700 0041 00000000 0x0 0x0
0xffffc70000012780 0041 00000000 0x0 0x0
0xffffc70000012800 0041 00000000 0x0 0x0
0xffffc70000012880 0041 00000000 0x0 0x0
0xffffc70000012900 0041 00000000 0x0 0x0
0xffffc70000012980 0045 00000000 0x0 0x0
0xffffc70000012a00 0041 00000000 0x0 0x0
0xffffc70000012a80 0041 00000000 0x0 0x0
0xffffc70000012b00 0041 00000000 0x0 0x0
0xffffc70000012b80 0041 00000000 0x0 0x0
0xffffc70000012c00 0041 00000000 0x0 0x0
0xffffc70000012c80 0041 00000000 0x0 0x0
0xffffc70000012d00 0045 00000000 0x0 0x0
0xffffc70000012d80 0041 00000000 0x0 0x0
0xffffc70000012e00 0041 00000000 0x0 0x0
0xffffc70000012e80 0041 00000000 0x0 0x0
0xffffc70000012f00 0041 00000000 0x0 0x0
0xffffc70000012f80 0041 00000000 0x0 0x0
0xffffc70000013000 0045 00000000 0x0 0x0
0xffffc70000013080 0045 00000000 0x0 0x0
0xffffc70000013100 0001 00000000 0x0 0x0
0xffffc70000013180 0001 00000000 0x0 0x0
0xffffc70000013200 0001 00000000 0x0 0x0
0xffffc70000013280 0001 00000000 0x0 0x0
0xffffc70000013300 0001 00000000 0x0 0x0
0xffffc70000013380 0001 00000000 0x0 0x0
0xffffc70000013400 0001 00000000 0x0 0x0
0xffffc70000013480 0001 00000000 0x0 0x0
0xffffc70000013500 0001 00000000 0x0 0x0
0xffffc70000013580 0001 00000000 0x0 0x0
0xffffc70000013600 0001 00000000 0x0 0x0
0xffffc70000013680 0001 00000000 0x0 0x0
0xffffc70000013700 0001 00000000 0x0 0x0
0xffffc70000013780 0001 00000000 0x0 0x0
0xffffc70000013800 0001 00000000 0x0 0x0
0xffffc70000013880 0001 00000000 0x0 0x0
0xffffc70000013900 0001 00000000 0x0 0x0
0xffffc70000013980 0001 00000000 0x0 0x0
0xffffc70000013a00 0001 00000000 0x0 0x0
0xffffc70000013a80 0001 00000000 0x0 0x0
0xffffc70000013b00 0001 00000000 0x0 0x0
0xffffc70000013b80 0001 00000000 0x0 0x0
0xffffc70000013c00 0001 00000000 0x0 0x0
0xffffc70000013c80 0001 00000000 0x0 0x0
0xffffc70000013d00 0001 00000000 0x0 0x0
0xffffc70000013d80 0001 00000000 0x0 0x0
0xffffc70000013e00 0001 00000000 0x0 0x0
0xffffc70000013e80 0001 00000000 0x0 0x0
0xffffc70000013f00 0001 00000000 0x0 0x0
0xffffc70000013f80 0001 00000000 0x0 0x0
0xffffc70000014000 0001 00000000 0x0 0x0
0xffffc70000014080 0001 00000000 0x0 0x0
0xffffc70000014100 0001 00000000 0x0 0x0
0xffffc70000014180 0001 00000000 0x0 0x0
0xffffc70000014200 0001 00000000 0x0 0x0
0xffffc70000014280 0001 00000000 0x0 0x0
0xffffc70000014300 0001 00000000 0x0 0x0
0xffffc70000014380 0001 00000000 0x0 0x0
0xffffc70000014400 0001 00000000 0x0 0x0
0xffffc70000014480 0001 00000000 0x0 0x0
0xffffc70000014500 0001 00000000 0x0 0x0
0xffffc70000014580 0001 00000000 0x0 0x0
0xffffc70000014600 0001 00000000 0x0 0x0
0xffffc70000014680 0001 00000000 0x0 0x0
0xffffc70000014700 0001 00000000 0x0 0x0
0xffffc70000014780 0001 00000000 0x0 0x0
0xffffc70000014800 0001 00000000 0x0 0x0
0xffffc70000014880 0001 00000000 0x0 0x0
0xffffc70000014900 0001 00000000 0x0 0x0
0xffffc70000014980 0001 00000000 0x0 0x0
0xffffc70000014a00 0001 00000000 0x0 0x0
0xffffc70000014a80 0001 00000000 0x0 0x0
0xffffc70000014b00 0001 00000000 0x0 0x0
0xffffc70000014b80 0001 00000000 0x0 0x0
0xffffc70000014c00 0041 00000000 0x0 0x0
0xffffc70000014c80 0041 00000000 0x0 0x0
0xffffc70000014d00 0041 00000000 0x0 0x0
0xffffc70000014d80 0041 00000000 0x0 0x0
0xffffc70000014e00 0041 00000000 0x0 0x0
0xffffc70000014e80 0041 00000000 0x0 0x0
0xffffc70000014f00 0041 00000000 0x0 0x0
0xffffc70000014f80 0041 00000000 0x0 0x0
0xffffc70000015000 0041 00000000 0x0 0x0
0xffffc70000015080 0041 00000000 0x0 0x0
0xffffc70000015100 0041 00000000 0x0 0x0
0xffffc70000015180 0041 00000000 0x0 0x0
0xffffc70000015200 0041 00000000 0x0 0x0
0xffffc70000015280 0041 00000000 0x0 0x0
0xffffc70000015300 0041 00000000 0x0 0x0
0xffffc70000015380 0041 00000000 0x0 0x0
0xffffc70000015400 0041 00000000 0x0 0x0
0xffffc70000015480 0041 00000000 0x0 0x0
0xffffc70000015500 0041 00000000 0x0 0x0
0xffffc70000015580 0041 00000000 0x0 0x0
0xffffc70000015600 0041 00000000 0x0 0x0
0xffffc70000015680 0041 00000000 0x0 0x0
0xffffc70000015700 0041 00000000 0x0 0x0
0xffffc70000015780 0041 00000000 0x0 0x0
0xffffc70000015800 0041 00000000 0x0 0x0
0xffffc70000015880 0041 00000000 0x0 0x0
0xffffc70000015900 0041 00000000 0x0 0x0
0xffffc70000015980 0041 00000000 0x0 0x0
0xffffc70000015a00 0041 00000000 0x0 0x0
0xffffc70000015a80 0041 00000000 0x0 0x0
0xffffc70000015b00 0041 00000000 0x0 0x0
0xffffc70000015b80 0041 00000000 0x0 0x0
0xffffc70000015c00 0041 00000000 0x0 0x0
0xffffc70000015c80 0041 00000000 0x0 0x0
0xffffc70000015d00 0041 00000000 0x0 0x0
0xffffc70000015d80 0041 00000000 0x0 0x0
0xffffc70000015e00 0041 00000000 0x0 0x0
0xffffc70000015e80 0041 00000000 0x0 0x0
0xffffc70000015f00 0041 00000000 0x0 0x0
0xffffc70000015f80 0041 00000000 0x0 0x0
0xffffc70000016000 0041 00000000 0x0 0x0
0xffffc70000016080 0041 00000000 0x0 0x0
0xffffc70000016100 0041 00000000 0x0 0x0
0xffffc70000016180 0001 00000000 0x0 0x0
0xffffc70000016200 0001 00000000 0x0 0x0
0xffffc70000016280 0001 00000000 0x0 0x0
0xffffc70000016300 0001 00000000 0x0 0x0
0xffffc70000016380 0001 00000000 0x0 0x0
0xffffc70000016400 0001 00000000 0x0 0x0
0xffffc70000016480 0001 00000000 0x0 0x0
0xffffc70000016500 0001 00000000 0x0 0x0
0xffffc70000016580 0001 00000000 0x0 0x0
0xffffc70000016600 0001 00000000 0x0 0x0
0xffffc70000016680 0001 00000000 0x0 0x0
0xffffc70000016700 0001 00000000 0x0 0x0
0xffffc70000016780 0001 00000000 0x0 0x0
0xffffc70000016800 0001 00000000 0x0 0x0
0xffffc70000016880 0001 00000000 0x0 0x0
0xffffc70000016900 0001 00000000 0x0 0x0
0xffffc70000016980 0001 00000000 0x0 0x0
0xffffc70000016a00 0001 00000000 0x0 0x0
0xffffc70000016a80 0001 00000000 0x0 0x0
0xffffc70000016b00 0001 00000000 0x0 0x0
0xffffc70000016b80 0001 00000000 0x0 0x0
0xffffc70000016c00 0001 00000000 0x0 0x0
0xffffc70000016c80 0001 00000000 0x0 0x0
0xffffc70000016d00 0001 00000000 0x0 0x0
0xffffc70000016d80 0001 00000000 0x0 0x0
0xffffc70000016e00 0001 00000000 0x0 0x0
0xffffc70000016e80 0001 00000000 0x0 0x0
0xffffc70000016f00 0001 00000000 0x0 0x0
0xffffc70000016f80 0001 00000000 0x0 0x0
0xffffc70000017000 0001 00000000 0x0 0x0
0xffffc70000017080 0001 00000000 0x0 0x0
0xffffc70000017100 0001 00000000 0x0 0x0
0xffffc70000017180 0001 00000000 0x0 0x0
0xffffc70000017200 0001 00000000 0x0 0x0
0xffffc70000017280 0001 00000000 0x0 0x0
0xffffc70000017300 0001 00000000 0x0 0x0
0xffffc70000017380 0001 00000000 0x0 0x0
0xffffc70000017400 0001 00000000 0x0 0x0
0xffffc70000017480 0001 00000000 0x0 0x0
0xffffc70000017500 0001 00000000 0x0 0x0
0xffffc70000017580 0001 00000000 0x0 0x0
0xffffc70000017600 0001 00000000 0x0 0x0
0xffffc70000017680 0001 00000000 0x0 0x0
0xffffc70000017700 0001 00000000 0x0 0x0
0xffffc70000017780 0001 00000000 0x0 0x0
0xffffc70000017800 0001 00000000 0x0 0x0
0xffffc70000017880 0001 00000000 0x0 0x0
0xffffc70000017900 0001 00000000 0x0 0x0
0xffffc70000017980 0001 00000000 0x0 0x0
0xffffc70000017a00 0001 00000000 0x0 0x0
0xffffc70000017a80 0001 00000000 0x0 0x0
0xffffc70000017b00 0001 00000000 0x0 0x0
0xffffc70000017b80 0001 00000000 0x0 0x0
0xffffc70000017c00 0001 00000000 0x0 0x0
0xffffc70000017c80 0041 00000000 0x0 0x0
0xffffc70000017d00 0041 00000000 0x0 0x0
0xffffc70000017d80 0041 00000000 0x0 0x0
0xffffc70000017e00 0041 00000000 0x0 0x0
0xffffc70000017e80 0041 00000000 0x0 0x0
0xffffc70000017f00 0041 00000000 0x0 0x0
0xffffc70000017f80 0041 00000000 0x0 0x0
0xffffc70000018000 0041 00000000 0x0 0x0
0xffffc70000018080 0041 00000000 0x0 0x0
0xffffc70000018100 0041 00000000 0x0 0x0
0xffffc70000018180 0041 00000000 0x0 0x0
0xffffc70000018200 0041 00000000 0x0 0x0
0xffffc70000018280 0041 00000000 0x0 0x0
0xffffc70000018300 0041 00000000 0x0 0x0
0xffffc70000018380 0041 00000000 0x0 0x0
0xffffc70000018400 0041 00000000 0x0 0x0
0xffffc70000018480 0041 00000000 0x0 0x0
0xffffc70000018500 0041 00000000 0x0 0x0
0xffffc70000018580 0041 00000000 0x0 0x0
0xffffc70000018600 0041 00000000 0x0 0x0
0xffffc70000018680 0041 00000000 0x0 0x0
0xffffc70000018700 0041 00000000 0x0 0x0
0xffffc70000018780 0041 00000000 0x0 0x0
0xffffc70000018800 0041 00000000 0x0 0x0
0xffffc70000018880 0041 00000000 0x0 0x0
0xffffc70000018900 0041 00000000 0x0 0x0
0xffffc70000018980 0041 00000000 0x0 0x0
0xffffc70000018a00 0041 00000000 0x0 0x0
0xffffc70000018a80 0041 00000000 0x0 0x0
0xffffc70000018b00 0041 00000000 0x0 0x0
0xffffc70000018b80 0041 00000000 0x0 0x0
0xffffc70000018c00 0041 00000000 0x0 0x0
0xffffc70000018c80 0041 00000000 0x0 0x0
0xffffc70000018d00 0041 00000000 0x0 0x0
0xffffc70000018d80 0041 00000000 0x0 0x0
0xffffc70000018e00 0041 00000000 0x0 0x0
0xffffc70000018e80 0041 00000000 0x0 0x0
0xffffc70000018f00 0041 00000000 0x0 0x0
0xffffc70000018f80 0041 00000000 0x0 0x0
0xffffc70000019000 0041 00000000 0x0 0x0
0xffffc70000019080 0041 00000000 0x0 0x0
0xffffc70000019100 0041 00000000 0x0 0x0
0xffffc70000019180 0041 00000000 0x0 0x0
0xffffc70000019200 0041 00000000 0x0 0x0
0xffffc70000019280 0041 00000000 0x0 0x0
0xffffc70000019300 0041 00000000 0x0 0x0
0xffffc70000019380 0041 00000000 0x0 0x0
0xffffc70000019400 0041 00000000 0x0 0x0
0xffffc70000019480 0001 00000000 0x0 0x0
0xffffc70000019500 0001 00000000 0x0 0x0
0xffffc70000019580 0001 00000000 0x0 0x0
0xffffc70000019600 0001 00000000 0x0 0x0
0xffffc70000019680 0001 00000000 0x0 0x0
0xffffc70000019700 0001 00000000 0x0 0x0
0xffffc70000019780 0001 00000000 0x0 0x0
0xffffc70000019800 0001 00000000 0x0 0x0
0xffffc70000019880 0001 00000000 0x0 0x0
0xffffc70000019900 0001 00000000 0x0 0x0
0xffffc70000019980 0001 00000000 0x0 0x0
0xffffc70000019a00 0001 00000000 0x0 0x0
0xffffc70000019a80 0001 00000000 0x0 0x0
0xffffc70000019b00 0001 00000000 0x0 0x0
0xffffc70000019b80 0001 00000000 0x0 0x0
0xffffc70000019c00 0001 00000000 0x0 0x0
0xffffc70000019c80 0001 00000000 0x0 0x0
0xffffc70000019d00 0001 00000000 0x0 0x0
0xffffc70000019d80 0001 00000000 0x0 0x0
0xffffc70000019e00 0001 00000000 0x0 0x0
0xffffc70000019e80 0001 00000000 0x0 0x0
0xffffc70000019f00 0001 00000000 0x0 0x0
0xffffc70000019f80 0001 00000000 0x0 0x0
0xffffc7000001a000 0001 00000000 0x0 0x0
0xffffc7000001a080 0001 00000000 0x0 0x0
0xffffc7000001a100 0001 00000000 0x0 0x0
0xffffc7000001a180 0001 00000000 0x0 0x0
0xffffc7000001a200 0001 00000000 0x0 0x0
0xffffc7000001a280 0001 00000000 0x0 0x0
0xffffc7000001a300 0001 00000000 0x0 0x0
0xffffc7000001a380 0001 00000000 0x0 0x0
0xffffc7000001a400 0001 00000000 0x0 0x0
0xffffc7000001a480 0001 00000000 0x0 0x0
0xffffc7000001a500 0001 00000000 0x0 0x0
0xffffc7000001a580 0001 00000000 0x0 0x0
0xffffc7000001a600 0001 00000000 0x0 0x0
0xffffc7000001a680 0001 00000000 0x0 0x0
0xffffc7000001a700 0001 00000000 0x0 0x0
0xffffc7000001a780 0001 00000000 0x0 0x0
0xffffc7000001a800 0001 00000000 0x0 0x0
0xffffc7000001a880 0001 00000000 0x0 0x0
0xffffc7000001a900 0001 00000000 0x0 0x0
0xffffc7000001a980 0001 00000000 0x0 0x0
0xffffc7000001aa00 0001 00000000 0x0 0x0
0xffffc7000001aa80 0001 00000000 0x0 0x0
0xffffc7000001ab00 0001 00000000 0x0 0x0
0xffffc7000001ab80 0001 00000000 0x0 0x0
0xffffc7000001ac00 0001 00000000 0x0 0x0
0xffffc7000001ac80 0001 00000000 0x0 0x0
0xffffc7000001ad00 0001 00000000 0x0 0x0
0xffffc7000001ad80 0001 00000000 0x0 0x0
0xffffc7000001ae00 0001 00000000 0x0 0x0
0xffffc7000001ae80 0001 00000000 0x0 0x0
0xffffc7000001af00 0001 00000000 0x0 0x0
0xffffc7000001af80 0041 00000000 0x0 0x0
0xffffc7000001b000 0041 00000000 0x0 0x0
0xffffc7000001b080 0041 00000000 0x0 0x0
0xffffc7000001b100 0041 00000000 0x0 0x0
0xffffc7000001b180 0041 00000000 0x0

---
This report is generated by a bot. It may contain errors.
See https://goo.gl/tpsmEJ for more information about syzbot.
syzbot engineers can be reached at syzk...@googlegroups.com.

syzbot will keep track of this issue. See:
https://goo.gl/tpsmEJ#status for how to communicate with syzbot.
syzbot can test patches for this issue, for details see:
https://goo.gl/tpsmEJ#testing-patches

syzbot

unread,
Aug 27, 2022, 5:35:27 PM8/27/22
to syzkaller-...@googlegroups.com
Auto-closing this bug as obsolete.
No recent activity, existing reproducers are no longer triggering the issue.
Reply all
Reply to author
Forward
0 new messages