ASan: Unauthorized Access in mutex_oncpu (2)

1 view

Skip to first unread message

syzbot

unread,

Mar 7, 2020, 10:51:13 PM3/7/20

to syzkaller-...@googlegroups.com

Hello,

syzbot found the following crash on:

HEAD commit: ec23c06e Fix typo
git tree: netbsd
console output: https://syzkaller.appspot.com/x/log.txt?x=11f1e1fde00000
kernel config: https://syzkaller.appspot.com/x/.config?x=6e4d6bd2b8e377a2
dashboard link: https://syzkaller.appspot.com/bug?extid=0edbcf04ab7815fac58c
compiler: g++ (Ubuntu 5.4.0-6ubuntu1~16.04.12) 5.4.0 20160609

Unfortunately, I don't have any reproducer for this crash yet.

IMPORTANT: if you fix the bug, please add the following tag to the commit:
Reported-by: syzbot+0edbcf...@syzkaller.appspotmail.com

[ 68.6503002] panic: ASan: Unauthorized Access In 0xffffffff8117ff45: Addr 0xffffbd0013e23558 [8 bytes, read, PoolUseAfterFree]

[ 68.6603046] cpu1: Begin traceback...
[ 68.6703250] vpanic() at netbsd:vpanic+0x241 sys/kern/subr_prf.c:336
[ 68.7103916] snprintf() at netbsd:snprintf
[ 68.7404449] kasan_report() at netbsd:kasan_report+0x98 kasan_code_name sys/kern/subr_asan.c:186 [inline]
[ 68.7404449] kasan_report() at netbsd:kasan_report+0x98 sys/kern/subr_asan.c:196
[ 68.7804967] __asan_load8() at netbsd:__asan_load8+0x294 kasan_shadow_4byte_isvalid sys/kern/subr_asan.c:346 [inline]
[ 68.7804967] __asan_load8() at netbsd:__asan_load8+0x294 kasan_shadow_8byte_isvalid sys/kern/subr_asan.c:360 [inline]
[ 68.7804967] __asan_load8() at netbsd:__asan_load8+0x294 kasan_shadow_check sys/kern/subr_asan.c:412 [inline]
[ 68.7804967] __asan_load8() at netbsd:__asan_load8+0x294 sys/kern/subr_asan.c:1182
[ 68.8105441] mutex_oncpu() at netbsd:mutex_oncpu+0x38 mutex_oncpu sys/kern/kern_mutex.c:422 [inline]
[ 68.8105441] mutex_oncpu() at netbsd:mutex_oncpu+0x38 sys/kern/kern_mutex.c:406
[ 68.8506087] mutex_enter() at netbsd:mutex_enter+0x1a1 sys/kern/kern_mutex.c:550
[ 68.8806624] lwp_exit() at netbsd:lwp_exit+0x378 sys/kern/kern_lwp.c:1184
[ 68.9207186] lwp_userret() at netbsd:lwp_userret+0x1f5 sys/kern/kern_lwp.c:1646
[ 68.9607830] syscall() at netbsd:syscall+0x882 x86_curlwp sys/arch/amd64/compile/obj/GENERIC_SYZKALLER/./machine/cpu.h:68 [inline]
[ 68.9607830] syscall() at netbsd:syscall+0x882 KPREEMPT_DISABLE sys/sys/lwp.h:525 [inline]
[ 68.9607830] syscall() at netbsd:syscall+0x882 mi_userret sys/sys/userret.h:101 [inline]
[ 68.9607830] syscall() at netbsd:syscall+0x882 userret sys/arch/amd64/compile/obj/GENERIC_SYZKALLER/./machine/userret.h:81 [inline]
[ 68.9607830] syscall() at netbsd:syscall+0x882 sys/arch/x86/x86/syscall.c:166
[ 68.9707992] --- syscall (number 4) ---
[ 68.9908313] 7ca9fdeade7a:
[ 68.9908313] cpu1: End traceback...
[ 69.0008458] fatal breakpoint trap in supervisor mode
[ 69.0008458] trap type 1 code 0 rip 0xffffffff8021e4b5 cs 0x8 rflags 0x246 cr2 0x7d32abede000 ilevel 0 rsp 0xffffbd018ac83b90
[ 69.0108603] curlwp 0xffffbd0013eab140 pid 483.3 lowest kstack 0xffffbd018ac7c2c0
Stopped in pid 483.3 (syz-executor.4) at netbsd:breakpoint+0x5: leave
?
breakpoint() at netbsd:breakpoint+0x5
db_panic() at netbsd:db_panic+0xe9 sys/ddb/db_panic.c:67
vpanic() at netbsd:vpanic+0x241 sys/kern/subr_prf.c:336
snprintf() at netbsd:snprintf
kasan_report() at netbsd:kasan_report+0x98 kasan_code_name sys/kern/subr_asan.c:186 [inline]
kasan_report() at netbsd:kasan_report+0x98 sys/kern/subr_asan.c:196
__asan_load8() at netbsd:__asan_load8+0x294 kasan_shadow_4byte_isvalid sys/kern/subr_asan.c:346 [inline]
__asan_load8() at netbsd:__asan_load8+0x294 kasan_shadow_8byte_isvalid sys/kern/subr_asan.c:360 [inline]
__asan_load8() at netbsd:__asan_load8+0x294 kasan_shadow_check sys/kern/subr_asan.c:412 [inline]
__asan_load8() at netbsd:__asan_load8+0x294 sys/kern/subr_asan.c:1182
mutex_oncpu() at netbsd:mutex_oncpu+0x38 mutex_oncpu sys/kern/kern_mutex.c:422 [inline]
mutex_oncpu() at netbsd:mutex_oncpu+0x38 sys/kern/kern_mutex.c:406
mutex_enter() at netbsd:mutex_enter+0x1a1 sys/kern/kern_mutex.c:550
lwp_exit() at netbsd:lwp_exit+0x378 sys/kern/kern_lwp.c:1184
lwp_userret() at netbsd:lwp_userret+0x1f5 sys/kern/kern_lwp.c:1646
syscall() at netbsd:syscall+0x882 x86_curlwp sys/arch/amd64/compile/obj/GENERIC_SYZKALLER/./machine/cpu.h:68 [inline]
syscall() at netbsd:syscall+0x882 KPREEMPT_DISABLE sys/sys/lwp.h:525 [inline]
syscall() at netbsd:syscall+0x882 mi_userret sys/sys/userret.h:101 [inline]
syscall() at netbsd:syscall+0x882 userret sys/arch/amd64/compile/obj/GENERIC_SYZKALLER/./machine/userret.h:81 [inline]
syscall() at netbsd:syscall+0x882 sys/arch/x86/x86/syscall.c:166
--- syscall (number 4) ---
7ca9fdeade7a:
ds 3bc0
es 666a
fs 3b70
gs d7b4
rdi ffffbd000d92d488
rsi ffffbd0013eab3f8
rbp ffffbd018ac83b90
rbx ffffbd016d893000
rdx 2
rcx ffffffff80d14fa1 db_panic+0xd5
rax 0
r8 4
r9 1ffffffff0554bfc
r10 ffffffff82aa5fe3 db_onpanic+0x3
r11 10
r12 ffffbd016d8a4000
r13 ffffffff82440be8 ostype+0x4e268
r14 ffffbd018ac83c20
r15 ffffbd016d893068
rip ffffffff8021e4b5 breakpoint+0x5
cs 8
rflags 246
rsp ffffbd018ac83b90
ss 10
netbsd:breakpoint+0x5: leave
PID LID S CPU FLAGS STRUCT LWP * NAME WAIT
563 4 3 0 80 ffffbd0011e86a00 syz-executor.0 parked
34 1 2 0 40000 ffffbd0011efa1c0 syz-executor.2
407 1 2 0 40000 ffffbd0011efaa40 syz-executor.3
575 2 3 1 80 ffffbd0013ed3180 syz-executor.0 parked
381 7 2 0 0 ffffbd0011f29200 syz-executor.0
381 6 2 0 0 ffffbd0011f44680 syz-executor.0
381 5 2 1 0 ffffbd0013eeca40 syz-executor.0
381 4 2 1 0 ffffbd0013eec1c0 syz-executor.0
381 3 3 1 80 ffffbd0013ed3a00 syz-executor.0 wait
381 2 3 1 10000004 ffffbd0013eab9c0 syz-executor.0 vfork
381 > 1 7 0 10040000 ffffbd0012ca0ac0 syz-executor.0
483 > 3 7 1 100000 ffffbd0013eab140 syz-executor.4
483 1 2 1 10000000 ffffbd0011c89700 syz-executor.4
598 1 2 0 40000 ffffbd0013d6b500 syz-executor.5
453 1 2 0 0 ffffbd0013d6b0c0 syz-executor.4
45 1 2 1 0 ffffbd0013d23900 syz-executor.3
533 1 2 1 0 ffffbd0013d234c0 syz-executor.2
441 1 3 0 4 ffffbd0013d23080 syz-executor.1 xclocv
40 1 2 1 0 ffffbd0013c708c0 syz-executor.0
455 10 3 0 80 ffffbd0013c70480 syz-fuzzer kqueue
455 9 3 0 80 ffffbd0011c8c300 syz-fuzzer parked
455 8 3 1 80 ffffbd0013c70040 syz-fuzzer parked
455 7 3 0 80 ffffbd0012c96640 syz-fuzzer parked
455 6 3 1 80 ffffbd0012c96200 syz-fuzzer parked
455 5 3 0 80 ffffbd0013624bc0 syz-fuzzer parked
455 4 3 0 80 ffffbd0013624780 syz-fuzzer parked
455 3 3 0 80 ffffbd0012ba96c0 syz-fuzzer parked
455 2 3 0 80 ffffbd0011c89b40 syz-fuzzer parked
455 1 3 0 80 ffffbd00116a1b00 syz-fuzzer parked
528 1 3 0 80 ffffbd0012cbb2c0 sshd select
587 1 3 0 80 ffffbd0012c87a40 getty nanoslp
506 1 3 1 80 ffffbd0012c87600 getty nanoslp
536 1 3 0 80 ffffbd0012c7c180 getty nanoslp
558 1 3 1 80 ffffbd0012ca0240 getty ttyraw
433 1 3 1 80 ffffbd0012220a80 cron nanoslp
550 1 3 1 80 ffffbd0012be8780 inetd kqueue
431 1 3 1 80 ffffbd00121fb600 sshd select
468 1 3 1 80 ffffbd001213fb80 powerd kqueue
202 1 3 1 80 ffffbd0012ba9b00 syslogd kqueue
268 1 3 1 80 ffffbd001214d340 dhcpcd kqueue
220 1 3 0 80 ffffbd00120508c0 dhcpcd kqueue
1 1 3 0 80 ffffbd0011e2d540 init wait
0 29 3 0 204 ffffbd0011e84140 physiod physiod
0 48 3 0 204 ffffbd0011e86180 pooldrain pooldrain
0 47 3 1 200 ffffbd0011e849c0 ioflush syncer
0 46 3 1 200 ffffbd0011e84580 pgdaemon pgdaemon
0 44 3 1 200 ffffbd0011e2d980 npfgc-0 npfgccv
0 43 3 1 204 ffffbd0011e2d100 rt_free rt_free
0 42 3 1 204 ffffbd0011e24940 unpgc unpgc
0 41 3 0 204 ffffbd0011e24500 key_timehandler key_timehandler
0 40 3 1 204 ffffbd0011e240c0 icmp6_wqinput/1 icmp6_wqinput
0 39 3 0 204 ffffbd0011e1b900 icmp6_wqinput/0 icmp6_wqinput
0 38 3 0 204 ffffbd0011e1b4c0 nd6_timer nd6_timer
0 37 3 1 204 ffffbd0011e1b080 carp6_wqinput/1 carp6_wqinput
0 36 3 0 204 ffffbd0011e168c0 carp6_wqinput/0 carp6_wqinput
0 35 3 1 204 ffffbd0011e16480 carp_wqinput/1 carp_wqinput
0 34 3 0 204 ffffbd0011e16040 carp_wqinput/0 carp_wqinput
0 33 3 1 204 ffffbd0011c8ebc0 icmp_wqinput/1 icmp_wqinput
0 32 3 0 204 ffffbd0011c8e780 icmp_wqinput/0 icmp_wqinput
0 31 3 0 204 ffffbd0011c8cb80 rt_timer rt_timer
0 30 3 0 204 ffffbd0011c8e340 vmem_rehash vmem_rehash
0 28 3 0 204 ffffbd000f35dac0 scsibus0 sccomp
0 27 3 0 200 ffffbd000f35d680 pms0 pmsreset
0 26 2 1 200 ffffbd000f35d240 xcall/1
0 25 1 1 200 ffffbd000f35ca80 softser/1
0 24 1 1 200 ffffbd000f35c640 softclk/1
0 23 1 1 200 ffffbd000f35c200 softbio/1
0 22 1 1 200 ffffbd000f26ea40 softnet/1
0 21 1 1 201 ffffbd000f26e600 idle/1
0 20 3 0 204 ffffbd000f26e1c0 lnxpwrwq lnxpwrwq
0 19 3 0 204 ffffbd000f26ca00 lnxlngwq lnxlngwq
0 18 3 0 204 ffffbd000f26c5c0 lnxsyswq lnxsyswq
0 17 3 0 204 ffffbd000f26c180 lnxrcugc lnxrcugc
0 16 3 0 204 ffffbd000de4f9c0 sysmon smtaskq
0 15 3 0 204 ffffbd000de4f580 pmfsuspend pmfsuspend
0 14 3 0 204 ffffbd000de4f140 pmfevent pmfevent
0 13 3 0 204 ffffbd000de40980 sopendfree sopendfr
0 12 3 0 204 ffffbd000de40540 iflnkst iflnkst
0 11 3 0 204 ffffbd000de40100 nfssilly nfssilly
0 10 3 0 200 ffffbd000de34940 cachegc cachegc
0 9 3 0 204 ffffbd000de34500 vdrain vdrain
0 8 3 1 200 ffffbd000de340c0 modunload mod_unld
0 7 3 0 204 ffffbd000de24900 xcall/0 xcall
0 6 1 0 200 ffffbd000de244c0 softser/0
0 5 1 0 200 ffffbd000de24080 softclk/0
0 4 1 0 200 ffffbd000de218c0 softbio/0
0 3 1 0 200 ffffbd000de21480 softnet/0
0 2 1 0 201 ffffbd000de21040 idle/0
0 1 3 1 200 ffffffff82b6efc0 swapper uvm
[Locks tracked through LWPs]

****** LWP 563.4 (syz-executor.0) @ 0xffffbd0011e86a00, l_stat=3

*** Locks held:

* Lock 0 (initialized at amap_ctor)
lock address : 0xffffbd0013ab5380 type : sleep/adaptive
initialized : 0xffffffff810e0123
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffffbd0011e86a00 last held: 0xffffbd0011e86a00
last locked* : 0xffffffff810ef104 unlocked : 0xffffffff810ecfb0
owner/count : 000000000000000000 flags : 000000000000000000
Turnstile: no active turnstile for this lock.

* Lock 1 (initialized at pmap_ctor)
lock address : 0xffffbd0013ef5380 type : sleep/adaptive
initialized : 0xffffffff802772c1
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffffbd0011e86a00 last held: 0xffffbd0011e86a00
last locked* : 0xffffffff80278f1f unlocked : 0xffffffff80279c65
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

*** Locks wanted: none

****** LWP 34.1 (syz-executor.2) @ 0xffffbd0011efa1c0, l_stat=2

*** Locks held:

* Lock 0 (initialized at uvm_obj_init)
lock address : 0xffffbd0011c6b540 type : sleep/adaptive
initialized : 0xffffffff8110ca30
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffffbd0011efa1c0 last held: 0xffffbd0011efa1c0
last locked* : 0xffffffff810f070d unlocked : 0xffffffff810ede62
owner/count : 000000000000000000 flags : 000000000000000000
Turnstile: no active turnstile for this lock.

* Lock 1 (initialized at pmap_ctor)
lock address : 0xffffbd0012cc8380 type : sleep/adaptive
initialized : 0xffffffff802772c1
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffffbd0011efa1c0 last held: 0xffffbd0011efa1c0
last locked* : 0xffffffff80278f1f unlocked : 0xffffffff80279c65
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

*** Locks wanted: none

****** LWP 407.1 (syz-executor.3) @ 0xffffbd0011efaa40, l_stat=2

*** Locks held:

* Lock 0 (initialized at amap_ctor)
lock address : 0xffffbd0013d31a40 type : sleep/adaptive
initialized : 0xffffffff810e0123
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 1
relevant lwp : 0xffffbd0011efaa40 last held: 0xffffbd0011efaa40
last locked* : 0xffffffff810ef104 unlocked : 0xffffffff810e350c
owner/count : 0xffffbd0011efaa40 flags : 0x0000000000000004
Turnstile: no active turnstile for this lock.

* Lock 1 (initialized at pmap_ctor)
lock address : 0xffffbd0013ef5180 type : sleep/adaptive
initialized : 0xffffffff802772c1
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 1
relevant lwp : 0xffffbd0011efaa40 last held: 0xffffbd0011efaa40
last locked* : 0xffffffff80278f1f unlocked : 0xffffffff80279c65
owner field : 0xffffbd0011efaa40 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

* Lock 2 (initialized at pmap_ctor)
lock address : 0xffffbd0013ef5188 type : sleep/adaptive
initialized : 0xffffffff802772cd
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 1
relevant lwp : 0xffffbd0011efaa40 last held: 0xffffbd0011efaa40
last locked* : 0xffffffff80279011 unlocked : 0xffffffff80279146
owner/count : 0xffffbd0011efaa40 flags : 0x0000000000000004
Turnstile: no active turnstile for this lock.

*** Locks wanted: none

****** LWP 381.1 (syz-executor.0) @ 0xffffbd0012ca0ac0, l_stat=7

*** Locks held:

* Lock 0 (initialized at uvm_obj_init)
lock address : 0xffffbd0013d314c0 type : sleep/adaptive
initialized : 0xffffffff8110ca30
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffffbd0012ca0ac0 last held: 0xffffbd0012ca0ac0
last locked* : 0xffffffff810f070d unlocked : 0xffffffff810ede62
owner/count : 000000000000000000 flags : 000000000000000000
Turnstile: no active turnstile for this lock.

*** Locks wanted: none

****** LWP 483.3 (syz-executor.4) @ 0xffffbd0013eab140, l_stat=7

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at fork1)
lock address : 0xffffbd0013d4e380 type : sleep/adaptive
initialized : 0xffffffff81166ccf
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 1
relevant cpu : 1 last held: 1
relevant lwp : 0xffffbd0013eab140 last held: 000000000000000000
last locked : 0xffffffff8114650b unlocked*: 0xffffffff811464df
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 598.1 (syz-executor.5) @ 0xffffbd0013d6b500, l_stat=2

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at lim_copy)
lock address : 0xffffbd0013878d40 type : sleep/adaptive
initialized : 0xffffffff811990e2
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 1
relevant cpu : 0 last held: 0
relevant lwp : 0xffffbd0013d6b500 last held: 000000000000000000
last locked : 0xffffffff811996dd unlocked*: 0xffffffff81199720
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 0.12 (iflnkst) @ 0xffffbd000de40540, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at module_hook_init)
lock address : 0xffffffff82d90240 type : sleep/adaptive
initialized : 0xffffffff8117f252
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffffbd000de40540 last held: 000000000000000000
last locked : 000000000000000000 unlocked*: 000000000000000000
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 0.5 (softclk/0) @ 0xffffbd000de24080, l_stat=1

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at module_hook_init)
lock address : 0xffffffff82d90240 type : sleep/adaptive
initialized : 0xffffffff8117f252
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffffbd000de24080 last held: 000000000000000000
last locked : 000000000000000000 unlocked*: 000000000000000000
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

[Locks tracked through CPUs]

PAGE FLAG PQ UOBJECT UANON
0xffffbd0000014180 0041 00000000 0x0 0x0
0xffffbd00000141f8 0041 00000000 0x0 0x0
0xffffbd0000014270 0041 00000000 0x0 0x0
0xffffbd00000142e8 0041 00000000 0x0 0x0
0xffffbd0000014360 0041 00000000 0x0 0x0
0xffffbd00000143d8 0041 00000000 0x0 0x0
0xffffbd0000014450 0041 00000000 0x0 0x0
0xffffbd00000144c8 0041 00000000 0x0 0x0
0xffffbd0000014540 0041 00000000 0x0 0x0
0xffffbd00000145b8 0041 00000000 0x0 0x0
0xffffbd0000014630 0041 00000000 0x0 0x0
0xffffbd00000146a8 0041 00000000 0x0 0x0
0xffffbd0000014720 0041 00000000 0x0 0x0
0xffffbd0000014798 0041 00000000 0x0 0x0
0xffffbd0000014810 0041 00000000 0x0 0x0
0xffffbd0000014888 0041 00000000 0x0 0x0
0xffffbd0000014900 0041 00000000 0x0 0x0
0xffffbd0000014978 0041 00000000 0x0 0x0
0xffffbd00000149f0 0041 00000000 0x0 0x0
0xffffbd0000014a68 0041 00000000 0x0 0x0
0xffffbd0000014ae0 0041 00000000 0x0 0x0
0xffffbd0000014b58 0041 00000000 0x0 0x0
0xffffbd0000014bd0 0041 00000000 0x0 0x0
0xffffbd0000014c48 0041 00000000 0x0 0x0
0xffffbd0000014cc0 0041 00000000 0x0 0x0
0xffffbd0000014d38 0041 00000000 0x0 0x0
0xffffbd0000014db0 0041 00000000 0x0 0x0
0xffffbd0000014e28 0041 00000000 0x0 0x0
0xffffbd0000014ea0 0041 00000000 0x0 0x0
0xffffbd0000014f18 0041 00000000 0x0 0x0
0xffffbd0000014f90 0041 00000000 0x0 0x0
0xffffbd0000015008 0041 00000000 0x0 0x0
0xffffbd0000015080 0041 00000000 0x0 0x0
0xffffbd00000150f8 0041 00000000 0x0 0x0
0xffffbd0000015170 0041 00000000 0x0 0x0
0xffffbd00000151e8 0041 00000000 0x0 0x0
0xffffbd0000015260 0041 00000000 0x0 0x0
0xffffbd00000152d8 0041 00000000 0x0 0x0
0xffffbd0000015350 0041 00000000 0x0 0x0
0xffffbd00000153c8 0041 00000000 0x0 0x0
0xffffbd0000015440 0041 00000000 0x0 0x0
0xffffbd00000154b8 0041 00000000 0x0 0x0
0xffffbd0000015530 0041 00000000 0x0 0x0
0xffffbd00000155a8 0041 00000000 0x0 0x0
0xffffbd0000015620 0041 00000000 0x0 0x0
0xffffbd0000015698 0041 00000000 0x0 0x0
0xffffbd0000015710 0041 00000000 0x0 0x0
0xffffbd0000015788 0041 00000000 0x0 0x0
0xffffbd0000015800 0041 00000000 0x0 0x0
0xffffbd0000015878 0041 00000000 0x0 0x0
0xffffbd00000158f0 0041 00000000 0x0 0x0
0xffffbd0000015968 0041 00000000 0x0 0x0
0xffffbd00000159e0 0041 00000000 0x0 0x0
0xffffbd0000015a58 0041 00000000 0x0 0x0
0xffffbd0000015ad0 0041 00000000 0x0 0x0
0xffffbd0000015b48 0041 00000000 0x0 0x0
0xffffbd0000015bc0 0041 00000000 0x0 0x0
0xffffbd0000015c38 0041 00000000 0x0 0x0
0xffffbd0000015cb0 0041 00000000 0x0 0x0
0xffffbd0000015d28 0041 00000000 0x0 0x0
0xffffbd0000015da0 0041 00000000 0x0 0x0
0xffffbd0000015e18 0041 00000000 0x0 0x0
0xffffbd0000015e90 0041 00000000 0x0 0x0
0xffffbd0000015f08 0041 00000000 0x0 0x0
0xffffbd0000015f80 0041 00000000 0x0 0x0
0xffffbd0000015ff8 0041 00000000 0x0 0x0
0xffffbd0000016070 0041 00000000 0x0 0x0
0xffffbd00000160e8 0041 00000000 0x0 0x0
0xffffbd0000016160 0041 00000000 0x0 0x0
0xffffbd00000161d8 0041 00000000 0x0 0x0
0xffffbd0000016250 0041 00000000 0x0 0x0
0xffffbd00000162c8 0041 00000000 0x0 0x0
0xffffbd0000016340 0041 00000000 0x0 0x0
0xffffbd00000163b8 0041 00000000 0x0 0x0
0xffffbd0000016430 0041 00000000 0x0 0x0
0xffffbd00000164a8 0045 00000000 0x0 0x0
0xffffbd0000016520 0041 00000000 0x0 0x0
0xffffbd0000016598 0045 00000000 0x0 0x0
0xffffbd0000016610 0041 00000000 0x0 0x0
0xffffbd0000016688 0041 00000000 0x0 0x0
0xffffbd0000016700 0045 00000000 0x0 0x0
0xffffbd0000016778 0045 00000000 0x0 0x0
0xffffbd00000167f0 0041 00000000 0x0 0x0
0xffffbd0000016868 0045 00000000 0x0 0x0
0xffffbd00000168e0 0045 00000000 0x0 0x0
0xffffbd0000016958 0045 00000000 0x0 0x0
0xffffbd00000169d0 0045 00000000 0x0 0x0
0xffffbd0000016a48 0045 00000000 0x0 0x0
0xffffbd0000016ac0 0045 00000000 0x0 0x0
0xffffbd0000016b38 0045 00000000 0x0 0x0
0xffffbd0000016bb0 0045 00000000 0x0 0x0
0xffffbd0000016c28 0041 00000000 0x0 0x0
0xffffbd0000016ca0 0045 00000000 0x0 0x0
0xffffbd0000016d18 0041 00000000 0x0 0x0
0xffffbd0000016d90 0045 00000000 0x0 0x0
0xffffbd0000016e08 0045 00000000 0x0 0x0
0xffffbd0000016e80 0041 00000000 0x0 0x0
0xffffbd0000016ef8 0041 00000000 0x0 0x0
0xffffbd0000016f70 0045 00000000 0x0 0x0
0xffffbd0000016fe8 0041 00000000 0x0 0x0
0xffffbd0000017060 0041 00000000 0x0 0x0
0xffffbd00000170d8 0041 00000000 0x0 0x0
0xffffbd0000017150 0041 00000000 0x0 0x0
0xffffbd00000171c8 0041 00000000 0x0 0x0
0xffffbd0000017240 0041 00000000 0x0 0x0
0xffffbd00000172b8 0041 00000000 0x0 0x0
0xffffbd0000017330 0041 00000000 0x0 0x0
0xffffbd00000173a8 0041 00000000 0x0 0x0
0xffffbd0000017420 0041 00000000 0x0 0x0
0xffffbd0000017498 0041 00000000 0x0 0x0
0xffffbd0000017510 0041 00000000 0x0 0x0
0xffffbd0000017588 0041 00000000 0x0 0x0
0xffffbd0000017600 0041 00000000 0x0 0x0
0xffffbd0000017678 0041 00000000 0x0 0x0
0xffffbd00000176f0 0041 00000000 0x0 0x0
0xffffbd0000017768 0041 00000000 0x0 0x0
0xffffbd00000177e0 0041 00000000 0x0 0x0
0xffffbd0000017858 0041 00000000 0x0 0x0
0xffffbd00000178d0 0041 00000000 0x0 0x0
0xffffbd0000017948 0041 00000000 0x0 0x0
0xffffbd00000179c0 0041 00000000 0x0 0x0
0xffffbd0000017a38 0041 00000000 0x0 0x0
0xffffbd0000017ab0 0041 00000000 0x0 0x0
0xffffbd0000017b28 0041 00000000 0x0 0x0
0xffffbd0000017ba0 0041 00000000 0x0 0x0
0xffffbd0000017c18 0041 00000000 0x0 0x0
0xffffbd0000017c90 0041 00000000 0x0 0x0
0xffffbd0000017d08 0041 00000000 0x0 0x0
0xffffbd0000017d80 0041 00000000 0x0 0x0
0xffffbd0000017df8 0041 00000000 0x0 0x0
0xffffbd0000017e70 0041 00000000 0x0 0x0
0xffffbd0000017ee8 0041 00000000 0x0 0x0
0xffffbd0000017f60 0041 00000000 0x0 0x0
0xffffbd0000017fd8 0041 00000000 0x0 0x0
0xffffbd0000018050 0041 00000000 0x0 0x0
0xffffbd00000180c8 0041 00000000 0x0 0x0
0xffffbd0000018140 0041 00000000 0x0 0x0
0xffffbd00000181b8 0041 00000000 0x0 0x0
0xffffbd0000018230 0041 00000000 0x0 0x0
0xffffbd00000182a8 0041 00000000 0x0 0x0
0xffffbd0000018320 0041 00000000 0x0 0x0
0xffffbd0000018398 0041 00000000 0x0 0x0
0xffffbd0000018410 0041 00000000 0x0 0x0
0xffffbd0000018488 0041 00000000 0x0 0x0
0xffffbd0000018500 0041 00000000 0x0 0x0
0xffffbd0000018578 0041 00000000 0x0 0x0
0xffffbd00000185f0 0041 00000000 0x0 0x0
0xffffbd0000018668 0041 00000000 0x0 0x0
0xffffbd00000186e0 0041 00000000 0x0 0x0
0xffffbd0000018758 0041 00000000 0x0 0x0
0xffffbd00000187d0 0041 00000000 0x0 0x0
0xffffbd0000018848 0041 00000000 0x0 0x0
0xffffbd00000188c0 0041 00000000 0x0 0x0
0xffffbd0000018938 0041 00000000 0x0 0x0
0xffffbd00000189b0 0041 00000000 0x0 0x0
0xffffbd0000018a28 0041 00000000 0x0 0x0
0xffffbd0000018aa0 0041 00000000 0x0 0x0
0xffffbd0000018b18 0041 00000000 0x0 0x0
0xffffbd0000018b90 0041 00000000 0x0 0x0
0xffffbd0000018c08 0041 00000000 0x0 0x0
0xffffbd0000018c80 0041 00000000 0x0 0x0
0xffffbd0000018cf8 0041 00000000 0x0 0x0
0xffffbd0000018d70 0041 00000000 0x0 0x0
0xffffbd0000018de8 0041 00000000 0x0 0x0
0xffffbd0000018e60 0041 00000000 0x0 0x0
0xffffbd0000018ed8 0041 00000000 0x0 0x0
0xffffbd0000018f50 0041 00000000 0x0 0x0
0xffffbd0000018fc8 0041 00000000 0x0 0x0
0xffffbd0000019040 0041 00000000 0x0 0x0
0xffffbd00000190b8 0041 00000000 0x0 0x0
0xffffbd0000019130 0041 00000000 0x0 0x0
0xffffbd00000191a8 0041 00000000 0x0 0x0
0xffffbd0000019220 0041 00000000 0x0 0x0
0xffffbd0000019298 0041 00000000 0x0 0x0
0xffffbd0000019310 0041 00000000 0x0 0x0
0xffffbd0000019388 0041 00000000 0x0 0x0
0xffffbd0000019400 0041 00000000 0x0 0x0
0xffffbd0000019478 0041 00000000 0x0 0x0
0xffffbd00000194f0 0041 00000000 0x0 0x0
0xffffbd0000019568 0041 00000000 0x0 0x0
0xffffbd00000195e0 0041 00000000 0x0 0x0
0xffffbd0000019658 0041 00000000 0x0 0x0
0xffffbd00000196d0 0041 00000000 0x0 0x0
0xffffbd0000019748 0041 00000000 0x0 0x0
0xffffbd00000197c0 0041 00000000 0x0 0x0
0xffffbd0000019838 0041 00000000 0x0 0x0
0xffffbd00000198b0 0041 00000000 0x0 0x0
0xffffbd0000019928 0041 00000000 0x0 0x0
0xffffbd00000199a0 0041 00000000 0x0 0x0
0xffffbd0000019a18 0041 00000000 0x0 0x0
0xffffbd0000019a90 0041 00000000 0x0 0x0
0xffffbd0000019b08 0041 00000000 0x0 0x0
0xffffbd0000019b80 0041 00000000 0x0 0x0
0xffffbd0000019bf8 0041 00000000 0x0 0x0
0xffffbd0000019c70 0041 00000000 0x0 0x0
0xffffbd0000019ce8 0041 00000000 0x0 0x0
0xffffbd0000019d60 0041 00000000 0x0 0x0
0xffffbd0000019dd8 0041 00000000 0x0 0x0
0xffffbd0000019e50 0041 00000000 0x0 0x0
0xffffbd0000019ec8 0041 00000000 0x0 0x0
0xffffbd0000019f40 0041 00000000 0x0 0x0
0xffffbd0000019fb8 0041 00000000 0x0 0x0
0xffffbd000001a030 0041 00000000 0x0 0x0
0xffffbd000001a0a8 0041 00000000 0x0 0x0
0xffffbd000001a120 0041 00000000 0x0 0x0
0xffffbd000001a198 0041 00000000 0x0 0x0
0xffffbd000001a210 0041 00000000 0x0 0x0
0xffffbd000001a288 0041 00000000 0x0 0x0
0xffffbd000001a300 0041 00000000 0x0 0x0
0xffffbd000001a378 0041 00000000 0x0 0x0
0xffffbd000001a3f0 0041 00000000 0x0 0x0
0xffffbd000001a468 0001 00000000 0x0 0x0
0xffffbd000001a4e0 0001 00000000 0x0 0x0
0xffffbd000001a558 0001 00000000 0x0 0x0
0xffffbd000001a5d0 0001 00000000 0x0 0x0
0xffffbd000001a648 0001 00000000 0x0 0x0
0xffffbd000001a6c0 0001 00000000 0x0 0x0
0xffffbd000001a738 0001 00000000 0x0 0x0
0xffffbd000001a7b0 0001 00000000 0x0 0x0
0xffffbd000001a828 0001 00000000 0x0 0x0
0xffffbd000001a8a0 0001 00000000 0x0 0x0
0xffffbd000001a918 0001 00000000 0x0 0x0
0xffffbd000001a990 0001 00000000 0x0 0x0
0xffffbd000001aa08 0001 00000000 0x0 0x0
0xffffbd000001aa80 0001 00000000 0x0 0x0
0xffffbd000001aaf8 0001 00000000 0x0 0x0
0xffffbd000001ab70 0001 00000000 0x0 0x0
0xffffbd000001abe8 0001 00000000 0x0 0x0
0xffffbd000001ac60 0001 00000000 0x0 0x0
0xffffbd000001acd8 0001 00000000 0x0 0x0
0xffffbd000001ad50 0001 00000000 0x0 0x0
0xffffbd000001adc8 0001 00000000 0x0 0x0
0xffffbd000001ae40 0001 00000000 0x0 0x0
0xffffbd000001aeb8 0001 00000000 0x0 0x0
0xffffbd000001af30 0001 00000000 0x0 0x0
0xffffbd000001afa8 0001 00000000 0x0 0x0
0xffffbd000001b020 0001 00000000 0x0 0x0
0xffffbd000001b098 0001 00000000 0x0 0x0
0xffffbd000001b110 0001 00000000 0x0 0x0
0xffffbd000001b188 0001 00000000 0x0 0x0
0xffffbd000001b200 0001 00000000 0x0 0x0
0xffffbd000001b278 0001 00000000 0x0 0x0
0xffffbd000001b2f0 0001 00000000 0x0 0x0
0xffffbd000001b368 0001 00000000 0x0 0x0
0xffffbd000001b3e0 0001 00000000 0x0 0x0
0xffffbd000001b458 0001 00000000 0x0 0x0
0xffffbd000001b4d0 0001 00000000 0x0 0x0
0xffffbd000001b548 0001 00000000 0x0 0x0
0xffffbd000001b5c0 0001 00000000 0x0 0x0
0xffffbd000001b638 0001 00000000 0x0 0x0
0xffffbd000001b6b0 0001 00000000 0x0 0x0
0xffffbd000001b728 0001 00000000 0x0 0x0
0xffffbd000001b7a0 0001 00000000 0x0 0x0
0xffffbd000001b818 0001 00000000 0x0 0x0
0xffffbd000001b890 0001 00000000 0x0 0x0
0xffffbd000001b908 0001 00000000 0x0 0x0
0xffffbd000001b980 0001 00000000 0x0 0x0
0xffffbd000001b9f8 0001 00000000 0x0 0x0
0xffffbd000001ba70 0001 00000000 0x0 0x0
0xffffbd000001bae8 0001 00000000 0x0 0x0
0xffffbd000001bb60 0001 00000000 0x0 0x0
0xffffbd000001bbd8 0001 00000000 0x0 0x0
0xffffbd000001bc50 0001 00000000 0x0 0x0
0xffffbd000001bcc8 0001 00000000 0x0 0x0
0xffffbd000001bd40 0001 00000000 0x0 0x0
0xffffbd000001bdb8 0041 00000000 0x0 0x0
0xffffbd000001be30 0041 00000000 0x0 0x0
0xffffbd000001bea8 0041 00000000 0x0 0x0
0xffffbd000001bf20 0041 00000000 0x0 0x0
0xffffbd000001bf98 0041 00000000 0x0 0x0
0xffffbd000001c010 0041 00000000 0x0 0x0
0xffffbd000001c088 0041 00000000 0x0 0x0
0xffffbd000001c100 0041 00000000 0x0 0x0
0xffffbd000001c178 0041 00000000 0x0 0x0
0xffffbd000001c1f0 0041 00000000 0x0 0x0
0xffffbd000001c268 0041 00000000 0x0 0x0
0xffffbd000001c2e0 0041 00000000 0x0 0x0
0xffffbd000001c358 0041 00000000 0x0 0x0
0xffffbd000001c3d0 0041 00000000 0x0 0x0
0xffffbd000001c448 0041 00000000 0x0 0x0
0xffffbd000001c4c0 0041 00000000 0x0 0x0
0xffffbd000001c538 0041 00000000 0x0 0x0
0xffffbd000001c5b0 0041 00000000 0x0 0x0
0xffffbd000001c628 0041 00000000 0x0 0x0
0xffffbd000001c6a0 0041 00000000 0x0 0x0
0xffffbd000001c718 0041 00000000 0x0 0x0
0xffffbd000001c790 0041 00000000 0x0 0x0
0xffffbd000001c808 0041 00000000 0x0 0x0
0xffffbd000001c880 0041 00000000 0x0 0x0
0xffffbd000001c8f8 0041 00000000 0x0 0x0
0xffffbd000001c970 0041 00000000 0x0 0x0
0xffffbd000001c9e8 0041 00000000 0x0 0x0
0xffffbd000001ca60 0041 00000000 0x0 0x0
0xffffbd000001cad8 0041 00000000 0x0 0x0
0xffffbd000001cb50 0041 00000000 0x0 0x0
0xffffbd000001cbc8 0041 00000000 0x0 0x0
0xffffbd000001cc40 0041 00000000 0x0 0x0
0xffffbd000001ccb8 0041 00000000 0x0 0x0
0xffffbd000001cd30 0041 00000000 0x0 0x0
0xffffbd000001cda8 0041 00000000 0x0 0x0
0xffffbd000001ce20 0041 00000000 0x0 0x0
0xffffbd000001ce98 0041 00000000 0x0 0x0
0xffffbd000001cf10 0041 00000000 0x0 0x0
0xffffbd000001cf88 0041 00000000 0x0 0x0
0xffffbd000001d000 0041 00000000 0x0 0x0
0xffffbd000001d078 0041 00000000 0x0 0x0
0xffffbd000001d0f0 0041 00000000 0x0 0x0
0xffffbd000001d168 0041 00000000 0x0 0x0
0xffffbd000001d1e0 0041 00000000 0x0 0x0
0xffffbd000001d258 0041 00000000 0x0 0x0
0xffffbd000001d2d0 0041 00000000 0x0 0x0
0xffffbd000001d348 0041 00000000 0x0 0x0
0xffffbd000001d3c0 0001 00000000 0x0 0x0
0xffffbd000001d438 0001 00000000 0x0 0x0
0xffffbd000001d4b0 0001 00000000 0x0 0x0
0xffffbd000001d528 0001 00000000 0x0 0x0
0xffffbd000001d5a0 0001 00000000 0x0 0x0
0xffffbd000001d618 0001 00000000 0x0 0x0
0xffffbd000001d690 0001 00000000 0x0 0x0
0xffffbd000001d708 0001 00000000 0x0 0x0
0xffffbd000001d780 0001 00000000 0x0 0x0
0xffffbd000001d7f8 0001 00000000 0x0 0x0
0xffffbd000001d870 0001 00000000 0x0 0x0
0xffffbd000001d8e8 0001 00000000 0x0 0x0
0xffffbd000001d960 0001 00000000 0x0 0x0
0xffffbd000001d9d8 0001 00000000 0x0 0x0
0xffffbd000001da50 0001 00000000 0x0 0x0
0xffffbd000001dac8 0001 00000000 0x0 0x0
0xffffbd000001db40 0001 00000000 0x0 0x0
0xffffbd000001dbb8 0001 00000000 0x0 0x0
0xffffbd000001dc30 0001 00000000 0x0 0x0
0xffffbd000001dca8 0001 00000000 0x0 0x0
0xffffbd000001dd20 0001 00000000 0x0 0x0
0xffffbd000001dd98 0001 00000000 0x0 0x0
0xffffbd000001de10 0001 00000000 0x0 0x0
0xffffbd000001de88 0001 00000000 0x0 0x0
0xffffbd000001df00 0001 00000000 0x0 0x0
0xffffbd000001df78 0001 00000000 0x0 0x0
0xffffbd000001dff0 0001 00000000 0x0 0x0
0xffffbd000001e068 0001 00000000 0x0 0x0
0xffffbd000001e0e0 0001 00000000 0x0 0x0
0xffffbd000001e158 0001 00000000 0x0 0x0
0xffffbd000001e1d0 0001 00000000 0x0 0x0
0xffffbd000001e248 0001 00000000 0x0 0x0
0xffffbd000001e2c0 0001 00000000 0x0 0x0
0xffffbd000001e338 0001 00000000 0x0 0x0
0xffffbd000001e3b0 0001 00000000 0x0 0x0
0xffffbd000001e428 0001 00000000 0x0 0x0
0xffffbd000001e4a0 0001 00000000 0x0 0x0
0xffffbd000001e518 0001 00000000 0x0 0x0
0xffffbd000001e590 0001 00000000 0x0 0x0
0xffffbd000001e608 0001 00000000 0x0 0x0
0xffffbd000001e680 0001 00000000 0x0 0x0
0xffffbd000001e6f8 0001 00000000 0x0 0x0
0xffffbd000001e770 0001 00000000 0x0 0x0
0xffffbd000001e7e8 0001 00000000 0x0 0x0
0xffffbd000001e860 0001 00000000 0x0 0x0
0xffffbd000001e8d8 0001 00000000 0x0 0x0
0xffffbd000001e950 0001 00000000 0x0 0x0
0xffffbd000001e9c8 0001 00000000 0x0 0x0
0xffffbd000001ea40 0001 00000000 0x0 0x0
0xffffbd000001eab8 0001 00000000 0x0 0x0
0xffffbd000001eb30 0001 00000000 0x0 0x0
0xffffbd000001eba8 0001 00000000 0x0 0x0
0xffffbd000001ec20 0001 00000000 0x0 0x0
0xffffbd000001ec98 0001 00000000 0x0 0x0
0xffffbd000001ed10 0041 00000000 0x0 0x0
0xffffbd000001ed88 0041 00000000 0x0 0x0
0xffffbd000001ee00 0041 00000000 0x0 0x0
0xffffbd000001ee78 0041 00000000 0x0 0x0
0xffffbd000001eef0 0041 00000000 0x0 0x0
0xffffbd000001ef68 0041 00000000 0x0 0x0
0xffffbd000001efe0 0041 00000000 0x0 0x0
0xffffbd000001f058 0041 00000000 0x0 0x0
0xffffbd000001f0d0 0041 00000000 0x0 0x0
0xffffbd000001f148 0041 00000000 0x0 0x0
0xffffbd000001f1c0 0041 00000000 0x0 0x0
0xffffbd000001f238 0041 00000000 0x0 0x0
0xffffbd000001f2b0 0041 00000000 0x0 0x0
0xffffbd000001f328 0041 00000000 0x0 0x0
0xffffbd000001f3a0 0041 00000000 0x0 0x0
0xffffbd000001f418 0041 00000000 0x0 0x0
0xffffbd000001f490 0041 00000000 0x0 0x0
0xffffbd000001f508 0041 00000000 0x0 0x0
0xffffbd000001f580 0041 00000000 0x0 0x0
0xffffbd000001f5f8 0041 00000000 0x0 0x0
0xffffbd000001f670 0041 00000000 0x0 0x0
0xffffbd000001f6e8 0041 00000000 0x0 0x0
0xffffbd000001f760 0041 00000000 0x0 0x0
0xffffbd000001f7d8 0041 00000000 0x0 0x0
0xffffbd000001f850 0041 00000000 0x0 0x0
0xffffbd000001f8c8 0041 00000000 0x0 0x0
0xffffbd000001f940 0041 00000000 0x0 0x0
0xffffbd000001f9b8 0041 00000000 0x0 0x0
0xffffbd000001fa30 0041 00000000 0x0 0x0
0xffffbd000001faa8 0041 00000000 0x0 0x0
0xffffbd000001fb20 0041 00000000 0x0 0x0
0xffffbd000001fb98 0041 00000000 0x0 0x0
0xffffbd000001fc10 0041 00000000 0x0 0x0
0xffffbd000001fc88 0041 00000000 0x0 0x0
0xffffbd000001fd00 0041 00000000 0x0 0x0
0xffffbd000001fd78 0041 00000000 0x0 0x0
0xffffbd000001fdf0 0041 00000000 0x0 0x0
0xffffbd000001fe68 0041 00000000 0x0 0x0
0xffffbd000001fee0 0041 00000000 0x0 0x0
0xffffbd000001ff58 0041 00000000 0x0 0x0
0xffffbd000001ffd0 0041 00000000 0x0 0x0
0xffffbd0000020048 0041 00000000 0x0 0x0
0xffffbd00000200c0 0041 00000000 0x0 0x0
0xffffbd0000020138 0041 00000000 0x0 0x0
0xffffbd00000201b0 0041 00000000 0x0 0x0
0xffffbd0000020228 0041 00000000 0x0 0x0
0xffffbd00000202a0 0041 00000000 0x0 0x0
0xffffbd0000020318 0041 00000000 0x0 0x0
0xffffbd0000020390 0041 00000000 0x0 0x0
0xffffbd0000020408 0041 00000000 0x0 0x0
0xffffbd0000020480 0001 00000000 0x0 0x0
0xffffbd00000204f8 0001 00000000 0x0 0x0
0xffffbd0000020570 0001 00000000 0x0 0x0
0xffffbd00000205e8 0001 00000000 0x0 0x0
0xffffbd0000020660 0001 00000000 0x0 0x0
0xffffbd00000206d8 0001 00000000 0x0 0x0
0xffffbd0000020750 0001 00000000 0x0 0x0
0xffffbd00000207c8 0001 00000000 0x0 0x0
0xffffbd0000020840 0001 00000000 0x0 0x0
0xffffbd00000208b8 0001 00000000 0x0 0x0
0xffffbd0000020930 0001 00000000 0x0 0x0
0xffffbd00000209a8 0001 00000000 0x0 0x0
0xffffbd0000020a20 0001 00000000 0x0 0x0
0xffffbd0000020a98 0001 00000000 0x0 0x0
0xffffbd0000020b10 0001 00000000 0x0 0x0
0xffffbd0000020b88 0001 00000000 0x0 0x0
0xffffbd0000020c00 0001 00000000 0x0 0x0
0xffffbd0000020c78 0001 00000000 0x0 0x0
0xffffbd0000020cf0 0001 00000000 0x0 0x0
0xffffbd0000020d68 0001 00000000 0x0 0x0
0xffffbd0000020de0 0001 00000000 0x0 0x0
0xffffbd0000020e58 0001 00000000 0x0 0x0
0xffffbd0000020ed0 0001 00000000 0x0 0x0
0xffffbd0000020f48 0001 00000000 0x0 0x0
0xffffbd0000020fc0 0001 00000000 0x0 0x0
0xffffbd0000021038 0001 00000000 0x0 0x0
0xffffbd00000210b0 0001 00000000 0x0 0x0
0xffffbd0000021128 0001 00000000 0x0 0x0
0xffffbd00000211a0 0001 00000000 0x0 0x0
0xffffbd0000021218 0001 00000000 0x0 0x0
0xffffbd0000021290 0001 00000000 0x0 0x0
0xffffbd0000021308 0001 00000000 0x0 0x0
0xffffbd0000021380 0001 00000000 0x0 0x0
0xffffbd00000213f8 0001 00000000 0x0 0x0
0xffffbd0000021470 0001 00000000 0x0 0x0
0xffffbd00000214e8 0001 00000000 0x0 0x0
0xffffbd0000021560 0001 00000000 0x0 0x0
0xffffbd00000215d8 0001 00000000 0x0 0x0
0xffffbd0000021650 0001 00000000 0x0 0x0
0xffffbd00000216c8 0001 00000000 0x0 0x0
0xffffbd0000021740 0001 00000000 0x0 0x0
0xffffbd00000217b8 0001 00000000 0x0 0x0
0xffffbd0000021830 0001 00000000 0x0 0x0
0xffffbd00000218a8 0001 00000000 0x0 0x0
0xffffbd0000021920 0001 00000000 0x0 0x0
0xffffbd0000021998 0001 00000000 0x0 0x0
0xffffbd0000021a10 0001 00000000 0x0 0x0
0xffffbd0000021a88 0001 00000000 0x0 0x0
0xffffbd0000021b00 0001 00000000 0x0 0x0
0xffffbd0000021b78 0001 00000000 0x0 0x0
0xffffbd0000021bf0 0001 00000000 0x0 0x0
0xffffbd0000021c68 0001 00000000 0x0 0x0
0xffffbd0000021ce0 0001 00000000 0x0 0x0
0xffffbd0000021d58 0001 00000000 0x0 0x0
0xffffbd0000021dd0 0041 00000000 0x0 0x0
0xffffbd0000021e48 0041 00000000 0x0 0x0
0xffffbd0000021ec0 0041 00000000 0x0 0x0
0xffffbd0000021f38 0041 00000000 0x0 0x0
0xffffbd0000021fb0 0041 00000000 0x0 0x0
0xffffbd0000022028 0041 00000000 0x0 0x0
0xffffbd00000220a0 0041 00000000 0x0 0x0
0xffffbd0000022118 0041 00000000 0x0 0x0
0xffffbd0000022190 0041 00000000 0x0 0x0
0xffffbd0000022208 0041 00000000 0x0 0x0
0xffffbd0000022280 0041 00000000 0x0 0x0
0xffffbd00000222f8 0041 00000000 0x0 0x0
0xffffbd0000022370 0041 00000000 0x0 0x0
0xffffbd00000223e8 0041 00000000 0x0 0x0
0xffffbd0000022460 0041 00000000 0x0 0x0
0xffffbd00000224d8 0041 00000000 0x0 0x0
0xffffbd0000022550 0041 00000000 0x0 0x0
0xffffbd00000225c8 0041 00000000 0x0 0x0
0xffffbd0000022640 0041 00000000 0x0 0x0
0xffffbd00000226b8 0041 00000000 0x0 0x0
0xffffbd0000022730 0041 00000000 0x0 0x0
0xffffbd00000227a8 0041 00000000 0x0 0x0
0xffffbd0000022820 0041 00000000 0x0 0x0
0xffffbd0000022898 0041 00000000 0x0 0x0
0xffffbd0000022910 0041 00000000 0x0 0x0
0xffffbd0000022988 0041 00000000 0x0 0x0
0xffffbd0000022a00 0041 00000000 0x0 0x0
0xffffbd0000022a78 0041 00000000 0x0 0x0
0xffffbd0000022af0 0041 00000000 0x0 0x0
0xffffbd0000022b68 0041 00000000 0x0 0x0
0xffffbd0000022be0 0041 00000000 0x0 0x0
0xffffbd0000022c58 0041 00000000 0x0 0x0
0xffffbd0000022cd0 0041 00000000 0x0 0x0
0xffffbd0000022d48 0041 00000000 0x0 0x0
0xffffbd0000022dc0 0041 00000000 0x0 0x0
0xffffbd0000022e38 0041 00000000 0x0 0x0
0xffffbd0000022eb0 0041 00000000 0x0 0x0
0xffffbd0000022f28 0041 00000000 0x0 0x0
0xffffbd0000022fa0 0041 00000000 0x0 0x0
0xffffbd0000023018 0041 00000000 0x0 0x0
0xffffbd0000023090 0041 00000000 0x0 0x0
0xffffbd0000023108 0041 00000000 0x0 0x0
0xffffbd0000023180 0041 00000000 0x0 0x0
0xffffbd00000231f8 0041 00000000 0x0 0x0
0xffffbd0000023270 0041 00000000 0x0 0x0
0xffffbd00000232e8 0041 00000000 0x0 0x0
0xffffbd0000023360 0041 00000000 0x0 0x0
0xffffbd00000233d8 0041 00000000 0x0 0x0
0xffffbd0000023450 0041 00000000 0x0 0x0
0xffffbd00000234c8 0041 00000000 0x0 0x0
0xffffbd0000023540 0041 00000000 0x0 0x0
0xffffbd00000235b8 0041 00000000 0x0 0x0
0xffffbd0000023630 0041 00000000 0x0 0x0
0xffffbd00000236a8 0041 00000000 0x0 0x0
0xffffbd0000023720 0041 00000000 0x0 0x0
0xffffbd0000023798 0041 00000000 0x0 0x0
0xffffbd0000023810 0041 00000000 0x0 0x0
0xffffbd0000023888 0041 00000000 0x0 0x0
0xffffbd0000023900 0041 00000000 0x0 0x0
0xffffbd0000023978 0041 00000000 0x0 0x0
0xffffbd00000239f0 0041 00000000 0x0 0x0
0xffffbd0000023a68 0041 00000000 0x0 0x0
0xffffbd0000023ae0 0041 00000000 0x0 0x0
0xffffbd0000023b58 0041 00000000 0x0 0x0
0xffffbd0000023bd0 0041 00000000 0x0 0x0
0xffffbd0000023c48 0041 00000000 0x0 0x0
0xffffbd0000023cc0 0041 00000000 0x0 0x0
0xffffbd0000023d38 0041 00000000 0x0 0x0
0xffffbd0000023db0 0041 00000000 0x0 0x0
0xffffbd0000023e28 0041 00000000 0x0 0x0
0xffffbd0000023ea0 0041 00000000 0x0 0x0
0xffffbd0000023f18 0041 00000000 0x0 0x0
0xffffbd0000023f90 0041 00000000 0x0 0x0
0xffffbd0000024008 0041 00000000 0x0 0x0
0xffffbd0000024080 0041 00000000 0x0 0x0
0xffffbd00000240f8 0041 00000000 0x0 0x0
0xffffbd0000024170 0041 00000000 0x0 0x0
0xffffbd00000241e8 0041 00000000 0x0 0x0
0xffffbd0000024260 0041 00000000 0x0 0x0
0xffffbd00000242d8 0041 00000000 0x0 0x0
0xffffbd0000024350 0041 00000000 0x0 0x0
0xffffbd00000243c8 0041 00000000 0x0 0x0
0xffffbd0000024440 0041 00000000 0x0 0x0
0xffffbd00000244b8 0041 00000000 0x0 0x0
0xffffbd0000024530 0041 00000000 0x0 0x0
0xffffbd00000245a8 0041 00000000 0x0 0x0
0xffffbd0000024620 0041 00000000 0x0 0x0
0xffffbd0000024698 0041 00000000 0x0 0x0
0xffffbd0000024710 0041 00000000 0x0 0x0
0xffffbd0000024788 0041 00000000 0x0 0x0
0xffffbd0000024800 0041 00000000 0x0 0x0
0xffffbd0000024878 0041 00000000 0x0 0x0
0xffffbd00000248f0 0041 00000000 0x0 0x0
0xffffbd0000024968 0041 00000000 0x0 0x0
0xffffbd00000249e0 0041 00000000 0x0 0x0
0xffffbd0000024a58 0041 00000000 0x0 0x0
0xffffbd0000024ad0 0041 00000000 0x0 0x0
0xffffbd0000024b48 0041 00000000 0x0 0x0
0xffffbd0000024bc0 0041 00000000 0x0 0x0
0xffffbd0000024c38 0041 00000000 0x0 0x0
0xffffbd0000024cb0 0041 00000000 0x0 0x0
0xffffbd0000024d28 0041 00000000 0x0 0x0
0xffffbd0000024da0 0041 00000000 0x0 0x0
0xffffbd0000024e18 0041 00000000 0x0 0x0
0xffffbd0000024e90 0041 00000000 0x0 0x0
0xffffbd0000024f08 0041 00000000 0x0 0x0
0xffffbd0000024f80 0041 00000000 0x0 0x0
0xffffbd0000024ff8 0041 00000000 0x0 0x0
0xffffbd0000025070 0041 00000000 0x0 0x0
0xffffbd00000250e8 0001 00000000 0x0 0x0
0xffffbd0000025160 0001 00000000 0x0 0x0
0xffffbd00000251d8 0001 00000000 0x0 0x0
0xffffbd0000025250 0001 00000000 0x0 0x0
0xffffbd00000252c8 0001 00000000 0x0 0x0
0xffffbd0000025340 0001 00000000 0x0 0x0
0xffffbd00000253b8 0001 00000000 0x0 0x0
0xffffbd0000025430 0001 00000000 0x0 0x0
0xffffbd00000254a8 0001 00000000 0x0 0x0
0xffffbd0000025520 0001 00000000 0x0 0x0
0xffffbd0000025598 0001 00000000 0x0 0x0
0xffffbd0000025610 0001 00000000 0x0 0x0
0xffffbd0000025688 0001 00000000 0x0 0x0
0xffffbd0000025700 0001 00000000 0x0 0x0
0xffffbd0000025778 0001 00000000 0x0 0x0
0xffffbd00000257f0 0001 00000000 0x0 0x0
0xffffbd0000025868 0001 00000000 0x0 0x0
0xffffbd00000258e0 0001 00000000 0x0 0x0
0xffffbd0000025958 0001 00000000 0x0 0x0
0xffffbd00000259d0 0001 00000000 0x0 0x0
0xffffbd0000025a48 0001 00000000 0x0 0x0
0xffffbd0000025ac0 0001 00000000 0x0 0x0
0xffffbd0000025b38 0001 00000000 0x0 0x0
0xffffbd0000025bb0 0001 00000000 0x0 0x0
0xffffbd0000025c28 0001 00000000 0x0 0x0
0xffffbd0000025ca0 0001 00000000 0x0 0x0
0xffffbd0000025d18 0001 00000000 0x0 0x0
0xffffbd0000025d90 0001 00000000 0x0 0x0
0xffffbd0000025e08 0001 00000000 0x0 0x0
0xffffbd0000025e80 0001 00000000 0x0 0x0
0xffffbd0000025ef8 0001 00000000 0x0 0x0
0xffffbd0000025f70 0001 00000000 0x0 0x0
0xffffbd0000025fe8 0001 00000000 0x0 0x0
0xffffbd0000026060 0001 00000000 0x0 0x0
0xffffbd00000260d8 0001 00000000 0x0 0x0
0xffffbd0000026150 0001 00000000 0x0 0x0
0xffffbd00000261c8 0001 00000000 0x0 0x0
0xffffbd0000026240 0001 00000000 0x0 0x0
0xffffbd00000262b8 0001 00000000 0x0 0x0
0xffffbd0000026330 0001 00000000 0x0 0x0
0xffffbd00000263a8 0001 00000000 0x0 0x0
0xffffbd0000026420 0001 00000000 0x0 0x0
0xffffbd0000026498 0001 00000000 0x0 0x0
0xffffbd0000026510 0001 00000000 0x0 0x0
0xffffbd0000026588 0001 00000000 0x0 0x0
0xffffbd0000026600 0001 00000000 0x0 0x0
0xffffbd0000026678 0001 00000000 0x0 0x0
0xffffbd00000266f0 0001 00000000 0x0 0x0
0xffffbd0000026768 0001 00000000 0x0 0x0
0xffffbd00000267e0 0001 00000000 0x0 0x0
0xffffbd0000026858 0001 00000000 0x0 0x0
0xffffbd00000268d0 0001 00000000 0x0 0x0
0xffffbd0000026948 0001 00000000 0x0 0x0
0xffffbd00000269c0 0001 00000000 0x0 0x0
0xffffbd0000026a38 0001 00000000 0x0 0x0
0xffffbd0000026ab0 0001 00000000 0x0 0x0
0xffffbd0000026b28 0001 00000000 0x0 0x0
0xffffbd0000026ba0 0001 00000000 0x0 0x0
0xffffbd0000026c18 0001 00000000 0x0 0x0
0xffffbd0000026c90 0001 00000000 0x0 0x0
0xffffbd0000026d08 0001 00000000 0x0 0x0
0xffffbd0000026d80 0001 00000000 0x0 0x0
0xffffbd0000026df8 0001 00000000 0x0 0x0
0xffffbd0000026e70 0001 00000000 0x0 0x0
0xffffbd0000026ee8 0001 00000000 0x0 0x0
0xffffbd0000026f60 0001 00000000 0x0 0x0
0xffffbd0000026fd8 0001 00000000 0x0 0x0
0xffffbd0000027050 0001 00000000 0x0 0x0
0xffffbd00000270c8 0001 00000000 0x0 0x0
0xffffbd0000027140 0001 00000000 0x0 0x0
0xffffbd00000271b8 0001 00000000 0x0 0x0
0xffffbd0000027230 0001 00000000 0x0 0x0
0xffffbd00000272a8 0001 00000000 0x0 0x0
0xffffbd0000027320 0001 00000000 0x0 0x0
0xffffbd0000027398 0001 00000000 0x0 0x0
0xffffbd0000027410 0001 00000000 0x0 0x0
0xffffbd0000027488 0001 00000000 0x0 0x0
0xffffbd0000027500 0001 00000000 0x0 0x0
0xffffbd0000027578 0001 00000000 0x0 0x0
0xffffbd00000275f0 0001 00000000 0x0 0x0
0xffffbd0000027668 0001 00000000

---
This bug is generated by a bot. It may contain errors.
See https://goo.gl/tpsmEJ for more information about syzbot.
syzbot engineers can be reached at syzk...@googlegroups.com.

syzbot will keep track of this bug report. See:
https://goo.gl/tpsmEJ#status for how to communicate with syzbot.

syzbot

unread,

Mar 7, 2020, 11:42:14 PM3/7/20

to syzkaller-...@googlegroups.com

syzbot has found a reproducer for the following crash on:

HEAD commit: ec23c06e Fix typo
git tree: netbsd

console output: https://syzkaller.appspot.com/x/log.txt?x=15c9b731e00000

kernel config: https://syzkaller.appspot.com/x/.config?x=6e4d6bd2b8e377a2
dashboard link: https://syzkaller.appspot.com/bug?extid=0edbcf04ab7815fac58c
compiler: g++ (Ubuntu 5.4.0-6ubuntu1~16.04.12) 5.4.0 20160609

syz repro: https://syzkaller.appspot.com/x/repro.syz?x=14b77f29e00000

IMPORTANT: if you fix the bug, please add the following tag to the commit:
Reported-by: syzbot+0edbcf...@syzkaller.appspotmail.com

[ 84.6197338] panic: ASan: Unauthorized Access In 0xffffffff8117ff45: Addr 0xffff9880120fca98 [8 bytes, read, PoolUseAfterFree]

[ 84.6353462] cpu0: Begin traceback...
[ 84.6498125] vpanic() at netbsd:vpanic+0x241 sys/kern/subr_prf.c:336
[ 84.6799271] snprintf() at netbsd:snprintf
[ 84.7100415] kasan_report() at netbsd:kasan_report+0x98 kasan_code_name sys/kern/subr_asan.c:186 [inline]
[ 84.7100415] kasan_report() at netbsd:kasan_report+0x98 sys/kern/subr_asan.c:196
[ 84.7501975] __asan_load8() at netbsd:__asan_load8+0x294 kasan_shadow_4byte_isvalid sys/kern/subr_asan.c:346 [inline]
[ 84.7501975] __asan_load8() at netbsd:__asan_load8+0x294 kasan_shadow_8byte_isvalid sys/kern/subr_asan.c:360 [inline]
[ 84.7501975] __asan_load8() at netbsd:__asan_load8+0x294 kasan_shadow_check sys/kern/subr_asan.c:412 [inline]
[ 84.7501975] __asan_load8() at netbsd:__asan_load8+0x294 sys/kern/subr_asan.c:1182
[ 84.7903482] mutex_oncpu() at netbsd:mutex_oncpu+0x38 mutex_oncpu sys/kern/kern_mutex.c:422 [inline]
[ 84.7903482] mutex_oncpu() at netbsd:mutex_oncpu+0x38 sys/kern/kern_mutex.c:406
[ 84.8204635] mutex_enter() at netbsd:mutex_enter+0x1a1 sys/kern/kern_mutex.c:550
[ 84.8505788] lwp_exit() at netbsd:lwp_exit+0x378 sys/kern/kern_lwp.c:1184
[ 84.8907327] lwp_userret() at netbsd:lwp_userret+0x1f5 sys/kern/kern_lwp.c:1646
[ 84.9208492] syscall() at netbsd:syscall+0x882 x86_curlwp sys/arch/amd64/compile/obj/GENERIC_SYZKALLER/./machine/cpu.h:68 [inline]
[ 84.9208492] syscall() at netbsd:syscall+0x882 KPREEMPT_DISABLE sys/sys/lwp.h:525 [inline]
[ 84.9208492] syscall() at netbsd:syscall+0x882 mi_userret sys/sys/userret.h:101 [inline]
[ 84.9208492] syscall() at netbsd:syscall+0x882 userret sys/arch/amd64/compile/obj/GENERIC_SYZKALLER/./machine/userret.h:81 [inline]
[ 84.9208492] syscall() at netbsd:syscall+0x882 sys/arch/x86/x86/syscall.c:166
[ 84.9308869] --- syscall (number 4) ---
[ 84.9509626] 76d9c1aade7a:
[ 84.9509626] cpu0: End traceback...
[ 84.9509626] fatal breakpoint trap in supervisor mode
[ 84.9635865] trap type 1 code 0 rip 0xffffffff8021e4b5 cs 0x8 rflags 0x246 cr2 0x62d151 ilevel 0 rsp 0xffff98817e86db90
[ 84.9760931] curlwp 0xffff988011f77b00 pid 682.2 lowest kstack 0xffff98817e8662c0
Stopped in pid 682.2 (syz-executor.5) at netbsd:breakpoint+0x5: leave

?
breakpoint() at netbsd:breakpoint+0x5
db_panic() at netbsd:db_panic+0xe9 sys/ddb/db_panic.c:67
vpanic() at netbsd:vpanic+0x241 sys/kern/subr_prf.c:336
snprintf() at netbsd:snprintf
kasan_report() at netbsd:kasan_report+0x98 kasan_code_name sys/kern/subr_asan.c:186 [inline]
kasan_report() at netbsd:kasan_report+0x98 sys/kern/subr_asan.c:196
__asan_load8() at netbsd:__asan_load8+0x294 kasan_shadow_4byte_isvalid sys/kern/subr_asan.c:346 [inline]
__asan_load8() at netbsd:__asan_load8+0x294 kasan_shadow_8byte_isvalid sys/kern/subr_asan.c:360 [inline]
__asan_load8() at netbsd:__asan_load8+0x294 kasan_shadow_check sys/kern/subr_asan.c:412 [inline]
__asan_load8() at netbsd:__asan_load8+0x294 sys/kern/subr_asan.c:1182
mutex_oncpu() at netbsd:mutex_oncpu+0x38 mutex_oncpu sys/kern/kern_mutex.c:422 [inline]
mutex_oncpu() at netbsd:mutex_oncpu+0x38 sys/kern/kern_mutex.c:406
mutex_enter() at netbsd:mutex_enter+0x1a1 sys/kern/kern_mutex.c:550
lwp_exit() at netbsd:lwp_exit+0x378 sys/kern/kern_lwp.c:1184
lwp_userret() at netbsd:lwp_userret+0x1f5 sys/kern/kern_lwp.c:1646
syscall() at netbsd:syscall+0x882 x86_curlwp sys/arch/amd64/compile/obj/GENERIC_SYZKALLER/./machine/cpu.h:68 [inline]
syscall() at netbsd:syscall+0x882 KPREEMPT_DISABLE sys/sys/lwp.h:525 [inline]
syscall() at netbsd:syscall+0x882 mi_userret sys/sys/userret.h:101 [inline]
syscall() at netbsd:syscall+0x882 userret sys/arch/amd64/compile/obj/GENERIC_SYZKALLER/./machine/userret.h:81 [inline]
syscall() at netbsd:syscall+0x882 sys/arch/x86/x86/syscall.c:166
--- syscall (number 4) ---

76d9c1aade7a:
ds dbc0
es 666a
fs db70
gs 32c4
rdi ffff98800d92d488
rsi ffff988011f77db8
rbp ffff98817e86db90
rbx ffffffff82810480 cpu_info_primary

rdx 2
rcx ffffffff80d14fa1 db_panic+0xd5
rax 0
r8 4
r9 1ffffffff0554bfc
r10 ffffffff82aa5fe3 db_onpanic+0x3
r11 10

r12 ffff98816d8a4000
r13 ffffffff82440be8 ostype+0x4e268
r14 ffff98817e86dc20
r15 ffff98816d893068

rip ffffffff8021e4b5 breakpoint+0x5
cs 8
rflags 246

rsp ffff98817e86db90

ss 10
netbsd:breakpoint+0x5: leave
PID LID S CPU FLAGS STRUCT LWP * NAME WAIT

682 > 2 7 0 100000 ffff988011f77b00 syz-executor.5
682 1 2 0 10000000 ffff9880120ec600 syz-executor.5
786 2 2 0 0 ffff988012063080 syz-executor.0
786 1 2 0 0 ffff988013d34600 syz-executor.0
524 2 3 1 80 ffff98801213c300 syz-executor.3 parked
524 1 2 0 10040000 ffff988012057040 syz-executor.3
519 1 2 1 0 ffff988013c83940 syz-executor.0
437 1 3 0 80 ffff988013c83500 syz-executor.2 pipe_rd
569 > 1 7 1 0 ffff988013c830c0 syz-executor.5
566 1 2 0 0 ffff988013c6c4c0 syz-executor.3
613 1 3 0 80 ffff988013c6c080 syz-executor.1 pipe_rd
45 1 2 0 0 ffff988013c608c0 syz-executor.4
619 11 3 1 80 ffff988013c6c900 syz-execprog kqueue
619 10 3 0 80 ffff988013c60480 syz-execprog parked
619 9 3 0 80 ffff988013c60040 syz-execprog parked
619 8 3 0 80 ffff988013c5dbc0 syz-execprog parked
619 7 3 0 80 ffff988013c5d780 syz-execprog parked
619 6 3 0 80 ffff988012caab00 syz-execprog parked
619 5 3 1 80 ffff988012c9bac0 syz-execprog parked
619 4 3 1 80 ffff988012c9b680 syz-execprog parked
619 3 3 1 80 ffff988012c9b240 syz-execprog parked
619 2 3 0 80 ffff988011c8cb80 syz-execprog parked
619 1 3 0 80 ffff988011efa600 syz-execprog parked
40 1 3 0 80 ffff9880116a1b00 sshd select
542 1 3 1 80 ffff988012c87a40 getty nanoslp
462 1 3 1 80 ffff988012c87600 getty nanoslp
550 1 3 1 80 ffff988012c7c180 getty nanoslp
570 1 3 0 80 ffff988012b8a240 getty ttyraw
479 1 3 1 80 ffff9880121ad5c0 cron nanoslp
433 1 3 1 80 ffff988012beb780 inetd kqueue
317 1 3 1 80 ffff9880121ada00 sshd select
468 1 3 1 80 ffff98801215b480 powerd kqueue
195 1 3 1 80 ffff988012bd1700 syslogd kqueue
247 1 3 0 80 ffff98801214d340 dhcpcd kqueue
176 1 3 0 80 ffff9880120578c0 dhcpcd kqueue
1 1 3 0 80 ffff988011e2d540 init wait
0 44 3 0 204 ffff988011e84140 physiod physiod
0 48 3 0 204 ffff988011e86180 pooldrain pooldrain
0 47 3 0 200 ffff988011e849c0 ioflush syncer
0 46 3 1 200 ffff988011e84580 pgdaemon pgdaemon
0 29 3 1 200 ffff9880116a1280 npfgc-0 npfgccv
0 43 3 1 204 ffff988011e2d100 rt_free rt_free
0 42 3 1 204 ffff988011e24940 unpgc unpgc
0 41 3 1 204 ffff988011e24500 key_timehandler key_timehandler
0 40 3 1 204 ffff988011e240c0 icmp6_wqinput/1 icmp6_wqinput
0 39 3 0 204 ffff988011e1b900 icmp6_wqinput/0 icmp6_wqinput
0 38 2 0 200 ffff988011e1b4c0 nd6_timer
0 37 3 1 204 ffff988011e1b080 carp6_wqinput/1 carp6_wqinput
0 36 3 0 204 ffff988011e168c0 carp6_wqinput/0 carp6_wqinput
0 35 3 1 204 ffff988011e16480 carp_wqinput/1 carp_wqinput
0 34 3 0 204 ffff988011e16040 carp_wqinput/0 carp_wqinput
0 33 3 1 204 ffff988011c9bbc0 icmp_wqinput/1 icmp_wqinput
0 32 3 0 204 ffff988011c9b780 icmp_wqinput/0 icmp_wqinput
0 31 3 1 204 ffff988011c9b340 rt_timer rt_timer
0 30 3 0 204 ffff988011c8c300 vmem_rehash vmem_rehash
0 28 3 0 204 ffff98800f35dac0 scsibus0 sccomp
0 27 3 0 200 ffff98800f35d680 pms0 pmsreset
0 26 3 1 204 ffff98800f35d240 xcall/1 xcall
0 25 1 1 200 ffff98800f35ca80 softser/1
0 24 1 1 200 ffff98800f35c640 softclk/1
0 23 1 1 200 ffff98800f35c200 softbio/1
0 22 1 1 200 ffff98800f26ea40 softnet/1
0 21 1 1 201 ffff98800f26e600 idle/1
0 20 3 0 204 ffff98800f26e1c0 lnxpwrwq lnxpwrwq
0 19 3 0 204 ffff98800f26ca00 lnxlngwq lnxlngwq
0 18 3 0 204 ffff98800f26c5c0 lnxsyswq lnxsyswq
0 17 3 0 204 ffff98800f26c180 lnxrcugc lnxrcugc
0 16 3 0 204 ffff98800de4f9c0 sysmon smtaskq
0 15 3 0 204 ffff98800de4f580 pmfsuspend pmfsuspend
0 14 3 0 204 ffff98800de4f140 pmfevent pmfevent
0 13 3 0 204 ffff98800de40980 sopendfree sopendfr
0 12 3 0 204 ffff98800de40540 iflnkst iflnkst
0 11 3 0 204 ffff98800de40100 nfssilly nfssilly
0 10 2 0 200 ffff98800de34940 cachegc
0 9 3 0 204 ffff98800de34500 vdrain vdrain
0 8 3 0 200 ffff98800de340c0 modunload mod_unld
0 7 3 0 204 ffff98800de24900 xcall/0 xcall
0 6 1 0 200 ffff98800de244c0 softser/0
0 5 1 0 200 ffff98800de24080 softclk/0
0 4 1 0 200 ffff98800de218c0 softbio/0
0 3 1 0 200 ffff98800de21480 softnet/0
0 2 1 0 201 ffff98800de21040 idle/0
0 1 2 0 200 ffffffff82b6efc0 swapper
[Locks tracked through LWPs]

****** LWP 682.2 (syz-executor.5) @ 0xffff988011f77b00, l_stat=7

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at fork1)

lock address : 0xffff988013c7d3c0 type : sleep/adaptive

initialized : 0xffffffff81166ccf
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 1

relevant cpu : 0 last held: 0

relevant lwp : 0xffff988011f77b00 last held: 000000000000000000
last locked : 0xffffffff81178539 unlocked*: 0xffffffff811464df

owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 45.1 (syz-executor.4) @ 0xffff988013c608c0, l_stat=2

*** Locks held:

* Lock 0 (initialized at vcache_alloc)
lock address : 0xffff988013c76200 type : sleep/adaptive
initialized : 0xffffffff812d2d7f

shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0

relevant lwp : 0xffff988013c608c0 last held: 0xffff988013c608c0
last locked* : 0xffffffff8130077e unlocked : 0xffffffff813007e0
owner/count : 0xffff988013c608c0 flags : 0x0000000000000004

Turnstile: no active turnstile for this lock.

* Lock 1 (initialized at vcache_alloc)
lock address : 0xffff988013d6bd40 type : sleep/adaptive
initialized : 0xffffffff812d2d7f

shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0

relevant lwp : 0xffff988013c608c0 last held: 0xffff988013c608c0
last locked* : 0xffffffff8130077e unlocked : 000000000000000000
owner/count : 0xffff988013c608c0 flags : 0x0000000000000004

Turnstile: no active turnstile for this lock.

*** Locks wanted: none

****** LWP 0.12 (iflnkst) @ 0xffff98800de40540, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at module_hook_init)
lock address : 0xffffffff82d90240 type : sleep/adaptive
initialized : 0xffffffff8117f252
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0

relevant lwp : 0xffff98800de40540 last held: 000000000000000000

last locked : 000000000000000000 unlocked*: 000000000000000000
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 0.5 (softclk/0) @ 0xffff98800de24080, l_stat=1

relevant lwp : 0xffff98800de24080 last held: 000000000000000000

last locked : 000000000000000000 unlocked*: 000000000000000000
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

[Locks tracked through CPUs]

PAGE FLAG PQ UOBJECT UANON

0xffff988000014180 0041 00000000 0x0 0x0
0xffff9880000141f8 0041 00000000 0x0 0x0
0xffff988000014270 0041 00000000 0x0 0x0
0xffff9880000142e8 0041 00000000 0x0 0x0
0xffff988000014360 0041 00000000 0x0 0x0
0xffff9880000143d8 0041 00000000 0x0 0x0
0xffff988000014450 0041 00000000 0x0 0x0
0xffff9880000144c8 0041 00000000 0x0 0x0
0xffff988000014540 0041 00000000 0x0 0x0
0xffff9880000145b8 0041 00000000 0x0 0x0
0xffff988000014630 0041 00000000 0x0 0x0
0xffff9880000146a8 0041 00000000 0x0 0x0
0xffff988000014720 0041 00000000 0x0 0x0
0xffff988000014798 0041 00000000 0x0 0x0
0xffff988000014810 0041 00000000 0x0 0x0
0xffff988000014888 0041 00000000 0x0 0x0
0xffff988000014900 0041 00000000 0x0 0x0
0xffff988000014978 0041 00000000 0x0 0x0
0xffff9880000149f0 0041 00000000 0x0 0x0
0xffff988000014a68 0041 00000000 0x0 0x0
0xffff988000014ae0 0041 00000000 0x0 0x0
0xffff988000014b58 0041 00000000 0x0 0x0
0xffff988000014bd0 0041 00000000 0x0 0x0
0xffff988000014c48 0041 00000000 0x0 0x0
0xffff988000014cc0 0041 00000000 0x0 0x0
0xffff988000014d38 0041 00000000 0x0 0x0
0xffff988000014db0 0041 00000000 0x0 0x0
0xffff988000014e28 0041 00000000 0x0 0x0
0xffff988000014ea0 0041 00000000 0x0 0x0
0xffff988000014f18 0041 00000000 0x0 0x0
0xffff988000014f90 0041 00000000 0x0 0x0
0xffff988000015008 0041 00000000 0x0 0x0
0xffff988000015080 0041 00000000 0x0 0x0
0xffff9880000150f8 0041 00000000 0x0 0x0
0xffff988000015170 0041 00000000 0x0 0x0
0xffff9880000151e8 0041 00000000 0x0 0x0
0xffff988000015260 0041 00000000 0x0 0x0
0xffff9880000152d8 0041 00000000 0x0 0x0
0xffff988000015350 0041 00000000 0x0 0x0
0xffff9880000153c8 0041 00000000 0x0 0x0
0xffff988000015440 0041 00000000 0x0 0x0
0xffff9880000154b8 0041 00000000 0x0 0x0
0xffff988000015530 0041 00000000 0x0 0x0
0xffff9880000155a8 0041 00000000 0x0 0x0
0xffff988000015620 0041 00000000 0x0 0x0
0xffff988000015698 0041 00000000 0x0 0x0
0xffff988000015710 0041 00000000 0x0 0x0
0xffff988000015788 0041 00000000 0x0 0x0
0xffff988000015800 0041 00000000 0x0 0x0
0xffff988000015878 0041 00000000 0x0 0x0
0xffff9880000158f0 0041 00000000 0x0 0x0
0xffff988000015968 0041 00000000 0x0 0x0
0xffff9880000159e0 0041 00000000 0x0 0x0
0xffff988000015a58 0041 00000000 0x0 0x0
0xffff988000015ad0 0041 00000000 0x0 0x0
0xffff988000015b48 0041 00000000 0x0 0x0
0xffff988000015bc0 0041 00000000 0x0 0x0
0xffff988000015c38 0041 00000000 0x0 0x0
0xffff988000015cb0 0041 00000000 0x0 0x0
0xffff988000015d28 0041 00000000 0x0 0x0
0xffff988000015da0 0041 00000000 0x0 0x0
0xffff988000015e18 0041 00000000 0x0 0x0
0xffff988000015e90 0041 00000000 0x0 0x0
0xffff988000015f08 0041 00000000 0x0 0x0
0xffff988000015f80 0041 00000000 0x0 0x0
0xffff988000015ff8 0041 00000000 0x0 0x0
0xffff988000016070 0041 00000000 0x0 0x0
0xffff9880000160e8 0041 00000000 0x0 0x0
0xffff988000016160 0041 00000000 0x0 0x0
0xffff9880000161d8 0041 00000000 0x0 0x0
0xffff988000016250 0041 00000000 0x0 0x0
0xffff9880000162c8 0041 00000000 0x0 0x0
0xffff988000016340 0041 00000000 0x0 0x0
0xffff9880000163b8 0041 00000000 0x0 0x0
0xffff988000016430 0041 00000000 0x0 0x0
0xffff9880000164a8 0045 00000000 0x0 0x0
0xffff988000016520 0041 00000000 0x0 0x0
0xffff988000016598 0045 00000000 0x0 0x0
0xffff988000016610 0041 00000000 0x0 0x0
0xffff988000016688 0041 00000000 0x0 0x0
0xffff988000016700 0045 00000000 0x0 0x0
0xffff988000016778 0045 00000000 0x0 0x0
0xffff9880000167f0 0041 00000000 0x0 0x0
0xffff988000016868 0045 00000000 0x0 0x0
0xffff9880000168e0 0045 00000000 0x0 0x0
0xffff988000016958 0045 00000000 0x0 0x0
0xffff9880000169d0 0045 00000000 0x0 0x0
0xffff988000016a48 0045 00000000 0x0 0x0
0xffff988000016ac0 0045 00000000 0x0 0x0
0xffff988000016b38 0045 00000000 0x0 0x0
0xffff988000016bb0 0045 00000000 0x0 0x0
0xffff988000016c28 0041 00000000 0x0 0x0
0xffff988000016ca0 0045 00000000 0x0 0x0
0xffff988000016d18 0041 00000000 0x0 0x0
0xffff988000016d90 0045 00000000 0x0 0x0
0xffff988000016e08 0045 00000000 0x0 0x0
0xffff988000016e80 0041 00000000 0x0 0x0
0xffff988000016ef8 0041 00000000 0x0 0x0
0xffff988000016f70 0045 00000000 0x0 0x0
0xffff988000016fe8 0041 00000000 0x0 0x0
0xffff988000017060 0041 00000000 0x0 0x0
0xffff9880000170d8 0041 00000000 0x0 0x0
0xffff988000017150 0041 00000000 0x0 0x0
0xffff9880000171c8 0041 00000000 0x0 0x0
0xffff988000017240 0041 00000000 0x0 0x0
0xffff9880000172b8 0041 00000000 0x0 0x0
0xffff988000017330 0041 00000000 0x0 0x0
0xffff9880000173a8 0041 00000000 0x0 0x0
0xffff988000017420 0041 00000000 0x0 0x0
0xffff988000017498 0041 00000000 0x0 0x0
0xffff988000017510 0041 00000000 0x0 0x0
0xffff988000017588 0041 00000000 0x0 0x0
0xffff988000017600 0041 00000000 0x0 0x0
0xffff988000017678 0041 00000000 0x0 0x0
0xffff9880000176f0 0041 00000000 0x0 0x0
0xffff988000017768 0041 00000000 0x0 0x0
0xffff9880000177e0 0041 00000000 0x0 0x0
0xffff988000017858 0041 00000000 0x0 0x0
0xffff9880000178d0 0041 00000000 0x0 0x0
0xffff988000017948 0041 00000000 0x0 0x0
0xffff9880000179c0 0041 00000000 0x0 0x0
0xffff988000017a38 0041 00000000 0x0 0x0
0xffff988000017ab0 0041 00000000 0x0 0x0
0xffff988000017b28 0041 00000000 0x0 0x0
0xffff988000017ba0 0041 00000000 0x0 0x0
0xffff988000017c18 0041 00000000 0x0 0x0
0xffff988000017c90 0041 00000000 0x0 0x0
0xffff988000017d08 0041 00000000 0x0 0x0
0xffff988000017d80 0041 00000000 0x0 0x0
0xffff988000017df8 0041 00000000 0x0 0x0
0xffff988000017e70 0041 00000000 0x0 0x0
0xffff988000017ee8 0041 00000000 0x0 0x0
0xffff988000017f60 0041 00000000 0x0 0x0
0xffff988000017fd8 0041 00000000 0x0 0x0
0xffff988000018050 0041 00000000 0x0 0x0
0xffff9880000180c8 0041 00000000 0x0 0x0
0xffff988000018140 0041 00000000 0x0 0x0
0xffff9880000181b8 0041 00000000 0x0 0x0
0xffff988000018230 0041 00000000 0x0 0x0
0xffff9880000182a8 0041 00000000 0x0 0x0
0xffff988000018320 0041 00000000 0x0 0x0
0xffff988000018398 0041 00000000 0x0 0x0
0xffff988000018410 0041 00000000 0x0 0x0
0xffff988000018488 0041 00000000 0x0 0x0
0xffff988000018500 0041 00000000 0x0 0x0
0xffff988000018578 0041 00000000 0x0 0x0
0xffff9880000185f0 0041 00000000 0x0 0x0
0xffff988000018668 0041 00000000 0x0 0x0
0xffff9880000186e0 0041 00000000 0x0 0x0
0xffff988000018758 0041 00000000 0x0 0x0
0xffff9880000187d0 0041 00000000 0x0 0x0
0xffff988000018848 0041 00000000 0x0 0x0
0xffff9880000188c0 0041 00000000 0x0 0x0
0xffff988000018938 0041 00000000 0x0 0x0
0xffff9880000189b0 0041 00000000 0x0 0x0
0xffff988000018a28 0041 00000000 0x0 0x0
0xffff988000018aa0 0041 00000000 0x0 0x0
0xffff988000018b18 0041 00000000 0x0 0x0
0xffff988000018b90 0041 00000000 0x0 0x0
0xffff988000018c08 0041 00000000 0x0 0x0
0xffff988000018c80 0041 00000000 0x0 0x0
0xffff988000018cf8 0041 00000000 0x0 0x0
0xffff988000018d70 0041 00000000 0x0 0x0
0xffff988000018de8 0041 00000000 0x0 0x0
0xffff988000018e60 0041 00000000 0x0 0x0
0xffff988000018ed8 0041 00000000 0x0 0x0
0xffff988000018f50 0041 00000000 0x0 0x0
0xffff988000018fc8 0041 00000000 0x0 0x0
0xffff988000019040 0041 00000000 0x0 0x0
0xffff9880000190b8 0041 00000000 0x0 0x0
0xffff988000019130 0041 00000000 0x0 0x0
0xffff9880000191a8 0041 00000000 0x0 0x0
0xffff988000019220 0041 00000000 0x0 0x0
0xffff988000019298 0041 00000000 0x0 0x0
0xffff988000019310 0041 00000000 0x0 0x0
0xffff988000019388 0041 00000000 0x0 0x0
0xffff988000019400 0041 00000000 0x0 0x0
0xffff988000019478 0041 00000000 0x0 0x0
0xffff9880000194f0 0041 00000000 0x0 0x0
0xffff988000019568 0041 00000000 0x0 0x0
0xffff9880000195e0 0041 00000000 0x0 0x0
0xffff988000019658 0041 00000000 0x0 0x0
0xffff9880000196d0 0041 00000000 0x0 0x0
0xffff988000019748 0041 00000000 0x0 0x0
0xffff9880000197c0 0041 00000000 0x0 0x0
0xffff988000019838 0041 00000000 0x0 0x0
0xffff9880000198b0 0041 00000000 0x0 0x0
0xffff988000019928 0041 00000000 0x0 0x0
0xffff9880000199a0 0041 00000000 0x0 0x0
0xffff988000019a18 0041 00000000 0x0 0x0
0xffff988000019a90 0041 00000000 0x0 0x0
0xffff988000019b08 0041 00000000 0x0 0x0
0xffff988000019b80 0041 00000000 0x0 0x0
0xffff988000019bf8 0041 00000000 0x0 0x0
0xffff988000019c70 0041 00000000 0x0 0x0
0xffff988000019ce8 0041 00000000 0x0 0x0
0xffff988000019d60 0041 00000000 0x0 0x0
0xffff988000019dd8 0041 00000000 0x0 0x0
0xffff988000019e50 0041 00000000 0x0 0x0
0xffff988000019ec8 0041 00000000 0x0 0x0
0xffff988000019f40 0041 00000000 0x0 0x0
0xffff988000019fb8 0041 00000000 0x0 0x0
0xffff98800001a030 0041 00000000 0x0 0x0
0xffff98800001a0a8 0041 00000000 0x0 0x0
0xffff98800001a120 0041 00000000 0x0 0x0
0xffff98800001a198 0041 00000000 0x0 0x0
0xffff98800001a210 0041 00000000 0x0 0x0
0xffff98800001a288 0041 00000000 0x0 0x0
0xffff98800001a300 0041 00000000 0x0 0x0
0xffff98800001a378 0041 00000000 0x0 0x0
0xffff98800001a3f0 0041 00000000 0x0 0x0
0xffff98800001a468 0001 00000000 0x0 0x0
0xffff98800001a4e0 0001 00000000 0x0 0x0
0xffff98800001a558 0001 00000000 0x0 0x0
0xffff98800001a5d0 0001 00000000 0x0 0x0
0xffff98800001a648 0001 00000000 0x0 0x0
0xffff98800001a6c0 0001 00000000 0x0 0x0
0xffff98800001a738 0001 00000000 0x0 0x0
0xffff98800001a7b0 0001 00000000 0x0 0x0
0xffff98800001a828 0001 00000000 0x0 0x0
0xffff98800001a8a0 0001 00000000 0x0 0x0
0xffff98800001a918 0001 00000000 0x0 0x0
0xffff98800001a990 0001 00000000 0x0 0x0
0xffff98800001aa08 0001 00000000 0x0 0x0
0xffff98800001aa80 0001 00000000 0x0 0x0
0xffff98800001aaf8 0001 00000000 0x0 0x0
0xffff98800001ab70 0001 00000000 0x0 0x0
0xffff98800001abe8 0001 00000000 0x0 0x0
0xffff98800001ac60 0001 00000000 0x0 0x0
0xffff98800001acd8 0001 00000000 0x0 0x0
0xffff98800001ad50 0001 00000000 0x0 0x0
0xffff98800001adc8 0001 00000000 0x0 0x0
0xffff98800001ae40 0001 00000000 0x0 0x0
0xffff98800001aeb8 0001 00000000 0x0 0x0
0xffff98800001af30 0001 00000000 0x0 0x0
0xffff98800001afa8 0001 00000000 0x0 0x0
0xffff98800001b020 0001 00000000 0x0 0x0
0xffff98800001b098 0001 00000000 0x0 0x0
0xffff98800001b110 0001 00000000 0x0 0x0
0xffff98800001b188 0001 00000000 0x0 0x0
0xffff98800001b200 0001 00000000 0x0 0x0
0xffff98800001b278 0001 00000000 0x0 0x0
0xffff98800001b2f0 0001 00000000 0x0 0x0
0xffff98800001b368 0001 00000000 0x0 0x0
0xffff98800001b3e0 0001 00000000 0x0 0x0
0xffff98800001b458 0001 00000000 0x0 0x0
0xffff98800001b4d0 0001 00000000 0x0 0x0
0xffff98800001b548 0001 00000000 0x0 0x0
0xffff98800001b5c0 0001 00000000 0x0 0x0
0xffff98800001b638 0001 00000000 0x0 0x0
0xffff98800001b6b0 0001 00000000 0x0 0x0
0xffff98800001b728 0001 00000000 0x0 0x0
0xffff98800001b7a0 0001 00000000 0x0 0x0
0xffff98800001b818 0001 00000000 0x0 0x0
0xffff98800001b890 0001 00000000 0x0 0x0
0xffff98800001b908 0001 00000000 0x0 0x0
0xffff98800001b980 0001 00000000 0x0 0x0
0xffff98800001b9f8 0001 00000000 0x0 0x0
0xffff98800001ba70 0001 00000000 0x0 0x0
0xffff98800001bae8 0001 00000000 0x0 0x0
0xffff98800001bb60 0001 00000000 0x0 0x0
0xffff98800001bbd8 0001 00000000 0x0 0x0
0xffff98800001bc50 0001 00000000 0x0 0x0
0xffff98800001bcc8 0001 00000000 0x0 0x0
0xffff98800001bd40 0001 00000000 0x0 0x0
0xffff98800001bdb8 0041 00000000 0x0 0x0
0xffff98800001be30 0041 00000000 0x0 0x0
0xffff98800001bea8 0041 00000000 0x0 0x0
0xffff98800001bf20 0041 00000000 0x0 0x0
0xffff98800001bf98 0041 00000000 0x0 0x0
0xffff98800001c010 0041 00000000 0x0 0x0
0xffff98800001c088 0041 00000000 0x0 0x0
0xffff98800001c100 0041 00000000 0x0 0x0
0xffff98800001c178 0041 00000000 0x0 0x0
0xffff98800001c1f0 0041 00000000 0x0 0x0
0xffff98800001c268 0041 00000000 0x0 0x0
0xffff98800001c2e0 0041 00000000 0x0 0x0
0xffff98800001c358 0041 00000000 0x0 0x0
0xffff98800001c3d0 0041 00000000 0x0 0x0
0xffff98800001c448 0041 00000000 0x0 0x0
0xffff98800001c4c0 0041 00000000 0x0 0x0
0xffff98800001c538 0041 00000000 0x0 0x0
0xffff98800001c5b0 0041 00000000 0x0 0x0
0xffff98800001c628 0041 00000000 0x0 0x0
0xffff98800001c6a0 0041 00000000 0x0 0x0
0xffff98800001c718 0041 00000000 0x0 0x0
0xffff98800001c790 0041 00000000 0x0 0x0
0xffff98800001c808 0041 00000000 0x0 0x0
0xffff98800001c880 0041 00000000 0x0 0x0
0xffff98800001c8f8 0041 00000000 0x0 0x0
0xffff98800001c970 0041 00000000 0x0 0x0
0xffff98800001c9e8 0041 00000000 0x0 0x0
0xffff98800001ca60 0041 00000000 0x0 0x0
0xffff98800001cad8 0041 00000000 0x0 0x0
0xffff98800001cb50 0041 00000000 0x0 0x0
0xffff98800001cbc8 0041 00000000 0x0 0x0
0xffff98800001cc40 0041 00000000 0x0 0x0
0xffff98800001ccb8 0041 00000000 0x0 0x0
0xffff98800001cd30 0041 00000000 0x0 0x0
0xffff98800001cda8 0041 00000000 0x0 0x0
0xffff98800001ce20 0041 00000000 0x0 0x0
0xffff98800001ce98 0041 00000000 0x0 0x0
0xffff98800001cf10 0041 00000000 0x0 0x0
0xffff98800001cf88 0041 00000000 0x0 0x0
0xffff98800001d000 0041 00000000 0x0 0x0
0xffff98800001d078 0041 00000000 0x0 0x0
0xffff98800001d0f0 0041 00000000 0x0 0x0
0xffff98800001d168 0041 00000000 0x0 0x0
0xffff98800001d1e0 0041 00000000 0x0 0x0
0xffff98800001d258 0041 00000000 0x0 0x0
0xffff98800001d2d0 0041 00000000 0x0 0x0
0xffff98800001d348 0041 00000000 0x0 0x0
0xffff98800001d3c0 0001 00000000 0x0 0x0
0xffff98800001d438 0001 00000000 0x0 0x0
0xffff98800001d4b0 0001 00000000 0x0 0x0
0xffff98800001d528 0001 00000000 0x0 0x0
0xffff98800001d5a0 0001 00000000 0x0 0x0
0xffff98800001d618 0001 00000000 0x0 0x0
0xffff98800001d690 0001 00000000 0x0 0x0
0xffff98800001d708 0001 00000000 0x0 0x0
0xffff98800001d780 0001 00000000 0x0 0x0
0xffff98800001d7f8 0001 00000000 0x0 0x0
0xffff98800001d870 0001 00000000 0x0 0x0
0xffff98800001d8e8 0001 00000000 0x0 0x0
0xffff98800001d960 0001 00000000 0x0 0x0
0xffff98800001d9d8 0001 00000000 0x0 0x0
0xffff98800001da50 0001 00000000 0x0 0x0
0xffff98800001dac8 0001 00000000 0x0 0x0
0xffff98800001db40 0001 00000000 0x0 0x0
0xffff98800001dbb8 0001 00000000 0x0 0x0
0xffff98800001dc30 0001 00000000 0x0 0x0
0xffff98800001dca8 0001 00000000 0x0 0x0
0xffff98800001dd20 0001 00000000 0x0 0x0
0xffff98800001dd98 0001 00000000 0x0 0x0
0xffff98800001de10 0001 00000000 0x0 0x0
0xffff98800001de88 0001 00000000 0x0 0x0
0xffff98800001df00 0001 00000000 0x0 0x0
0xffff98800001df78 0001 00000000 0x0 0x0
0xffff98800001dff0 0001 00000000 0x0 0x0
0xffff98800001e068 0001 00000000 0x0 0x0
0xffff98800001e0e0 0001 00000000 0x0 0x0
0xffff98800001e158 0001 00000000 0x0 0x0
0xffff98800001e1d0 0001 00000000 0x0 0x0
0xffff98800001e248 0001 00000000 0x0 0x0
0xffff98800001e2c0 0001 00000000 0x0 0x0
0xffff98800001e338 0001 00000000 0x0 0x0
0xffff98800001e3b0 0001 00000000 0x0 0x0
0xffff98800001e428 0001 00000000 0x0 0x0
0xffff98800001e4a0 0001 00000000 0x0 0x0
0xffff98800001e518 0001 00000000 0x0 0x0
0xffff98800001e590 0001 00000000 0x0 0x0
0xffff98800001e608 0001 00000000 0x0 0x0
0xffff98800001e680 0001 00000000 0x0 0x0
0xffff98800001e6f8 0001 00000000 0x0 0x0
0xffff98800001e770 0001 00000000 0x0 0x0
0xffff98800001e7e8 0001 00000000 0x0 0x0
0xffff98800001e860 0001 00000000 0x0 0x0
0xffff98800001e8d8 0001 00000000 0x0 0x0
0xffff98800001e950 0001 00000000 0x0 0x0
0xffff98800001e9c8 0001 00000000 0x0 0x0
0xffff98800001ea40 0001 00000000 0x0 0x0
0xffff98800001eab8 0001 00000000 0x0 0x0
0xffff98800001eb30 0001 00000000 0x0 0x0
0xffff98800001eba8 0001 00000000 0x0 0x0
0xffff98800001ec20 0001 00000000 0x0 0x0
0xffff98800001ec98 0001 00000000 0x0 0x0
0xffff98800001ed10 0041 00000000 0x0 0x0
0xffff98800001ed88 0041 00000000 0x0 0x0
0xffff98800001ee00 0041 00000000 0x0 0x0
0xffff98800001ee78 0041 00000000 0x0 0x0
0xffff98800001eef0 0041 00000000 0x0 0x0
0xffff98800001ef68 0041 00000000 0x0 0x0
0xffff98800001efe0 0041 00000000 0x0 0x0
0xffff98800001f058 0041 00000000 0x0 0x0
0xffff98800001f0d0 0041 00000000 0x0 0x0
0xffff98800001f148 0041 00000000 0x0 0x0
0xffff98800001f1c0 0041 00000000 0x0 0x0
0xffff98800001f238 0041 00000000 0x0 0x0
0xffff98800001f2b0 0041 00000000 0x0 0x0
0xffff98800001f328 0041 00000000 0x0 0x0
0xffff98800001f3a0 0041 00000000 0x0 0x0
0xffff98800001f418 0041 00000000 0x0 0x0
0xffff98800001f490 0041 00000000 0x0 0x0
0xffff98800001f508 0041 00000000 0x0 0x0
0xffff98800001f580 0041 00000000 0x0 0x0
0xffff98800001f5f8 0041 00000000 0x0 0x0
0xffff98800001f670 0041 00000000 0x0 0x0
0xffff98800001f6e8 0041 00000000 0x0 0x0
0xffff98800001f760 0041 00000000 0x0 0x0
0xffff98800001f7d8 0041 00000000 0x0 0x0
0xffff98800001f850 0041 00000000 0x0 0x0
0xffff98800001f8c8 0041 00000000 0x0 0x0
0xffff98800001f940 0041 00000000 0x0 0x0
0xffff98800001f9b8 0041 00000000 0x0 0x0
0xffff98800001fa30 0041 00000000 0x0 0x0
0xffff98800001faa8 0041 00000000 0x0 0x0
0xffff98800001fb20 0041 00000000 0x0 0x0
0xffff98800001fb98 0041 00000000 0x0 0x0
0xffff98800001fc10 0041 00000000 0x0 0x0
0xffff98800001fc88 0041 00000000 0x0 0x0
0xffff98800001fd00 0041 00000000 0x0 0x0
0xffff98800001fd78 0041 00000000 0x0 0x0
0xffff98800001fdf0 0041 00000000 0x0 0x0
0xffff98800001fe68 0041 00000000 0x0 0x0
0xffff98800001fee0 0041 00000000 0x0 0x0
0xffff98800001ff58 0041 00000000 0x0 0x0
0xffff98800001ffd0 0041 00000000 0x0 0x0
0xffff988000020048 0041 00000000 0x0 0x0
0xffff9880000200c0 0041 00000000 0x0 0x0
0xffff988000020138 0041 00000000 0x0 0x0
0xffff9880000201b0 0041 00000000 0x0 0x0
0xffff988000020228 0041 00000000 0x0 0x0
0xffff9880000202a0 0041 00000000 0x0 0x0
0xffff988000020318 0041 00000000 0x0 0x0
0xffff988000020390 0041 00000000 0x0 0x0
0xffff988000020408 0041 00000000 0x0 0x0
0xffff988000020480 0001 00000000 0x0 0x0
0xffff9880000204f8 0001 00000000 0x0 0x0
0xffff988000020570 0001 00000000 0x0 0x0
0xffff9880000205e8 0001 00000000 0x0 0x0
0xffff988000020660 0001 00000000 0x0 0x0
0xffff9880000206d8 0001 00000000 0x0 0x0
0xffff988000020750 0001 00000000 0x0 0x0
0xffff9880000207c8 0001 00000000 0x0 0x0
0xffff988000020840 0001 00000000 0x0 0x0
0xffff9880000208b8 0001 00000000 0x0 0x0
0xffff988000020930 0001 00000000 0x0 0x0
0xffff9880000209a8 0001 00000000 0x0 0x0
0xffff988000020a20 0001 00000000 0x0 0x0
0xffff988000020a98 0001 00000000 0x0 0x0
0xffff988000020b10 0001 00000000 0x0 0x0
0xffff988000020b88 0001 00000000 0x0 0x0
0xffff988000020c00 0001 00000000 0x0 0x0
0xffff988000020c78 0001 00000000 0x0 0x0
0xffff988000020cf0 0001 00000000 0x0 0x0
0xffff988000020d68 0001 00000000 0x0 0x0
0xffff988000020de0 0001 00000000 0x0 0x0
0xffff988000020e58 0001 00000000 0x0 0x0
0xffff988000020ed0 0001 00000000 0x0 0x0
0xffff988000020f48 0001 00000000 0x0 0x0
0xffff988000020fc0 0001 00000000 0x0 0x0
0xffff988000021038 0001 00000000 0x0 0x0
0xffff9880000210b0 0001 00000000 0x0 0x0
0xffff988000021128 0001 00000000 0x0 0x0
0xffff9880000211a0 0001 00000000 0x0 0x0
0xffff988000021218 0001 00000000 0x0 0x0
0xffff988000021290 0001 00000000 0x0 0x0
0xffff988000021308 0001 00000000 0x0 0x0
0xffff988000021380 0001 00000000 0x0 0x0
0xffff9880000213f8 0001 00000000 0x0 0x0
0xffff988000021470 0001 00000000 0x0 0x0
0xffff9880000214e8 0001 00000000 0x0 0x0
0xffff988000021560 0001 00000000 0x0 0x0
0xffff9880000215d8 0001 00000000 0x0 0x0
0xffff988000021650 0001 00000000 0x0 0x0
0xffff9880000216c8 0001 00000000 0x0 0x0
0xffff988000021740 0001 00000000 0x0 0x0
0xffff9880000217b8 0001 00000000 0x0 0x0
0xffff988000021830 0001 00000000 0x0 0x0
0xffff9880000218a8 0001 00000000 0x0 0x0
0xffff988000021920 0001 00000000 0x0 0x0
0xffff988000021998 0001 00000000 0x0 0x0
0xffff988000021a10 0001 00000000 0x0 0x0
0xffff988000021a88 0001 00000000 0x0 0x0
0xffff988000021b00 0001 00000000 0x0 0x0
0xffff988000021b78 0001 00000000 0x0 0x0
0xffff988000021bf0 0001 00000000 0x0 0x0
0xffff988000021c68 0001 00000000 0x0 0x0
0xffff988000021ce0 0001 00000000 0x0 0x0
0xffff988000021d58 0001 00000000 0x0 0x0
0xffff988000021dd0 0041 00000000 0x0 0x0
0xffff988000021e48 0041 00000000 0x0 0x0
0xffff988000021ec0 0041 00000000 0x0 0x0
0xffff988000021f38 0041 00000000 0x0 0x0
0xffff988000021fb0 0041 00000000 0x0 0x0
0xffff988000022028 0041 00000000 0x0 0x0
0xffff9880000220a0 0041 00000000 0x0 0x0
0xffff988000022118 0041 00000000 0x0 0x0
0xffff988000022190 0041 00000000 0x0 0x0
0xffff988000022208 0041 00000000 0x0 0x0
0xffff988000022280 0041 00000000 0x0 0x0
0xffff9880000222f8 0041 00000000 0x0 0x0
0xffff988000022370 0041 00000000 0x0 0x0
0xffff9880000223e8 0041 00000000 0x0 0x0
0xffff988000022460 0041 00000000 0x0 0x0
0xffff9880000224d8 0041 00000000 0x0 0x0
0xffff988000022550 0041 00000000 0x0 0x0
0xffff9880000225c8 0041 00000000 0x0 0x0
0xffff988000022640 0041 00000000 0x0 0x0
0xffff9880000226b8 0041 00000000 0x0 0x0
0xffff988000022730 0041 00000000 0x0 0x0
0xffff9880000227a8 0041 00000000 0x0 0x0
0xffff988000022820 0041 00000000 0x0 0x0
0xffff988000022898 0041 00000000 0x0 0x0
0xffff988000022910 0041 00000000 0x0 0x0
0xffff988000022988 0041 00000000 0x0 0x0
0xffff988000022a00 0041 00000000 0x0 0x0
0xffff988000022a78 0041 00000000 0x0 0x0
0xffff988000022af0 0041 00000000 0x0 0x0
0xffff988000022b68 0041 00000000 0x0 0x0
0xffff988000022be0 0041 00000000 0x0 0x0
0xffff988000022c58 0041 00000000 0x0 0x0
0xffff988000022cd0 0041 00000000 0x0 0x0
0xffff988000022d48 0041 00000000 0x0 0x0
0xffff988000022dc0 0041 00000000 0x0 0x0
0xffff988000022e38 0041 00000000 0x0 0x0
0xffff988000022eb0 0041 00000000 0x0 0x0
0xffff988000022f28 0041 00000000 0x0 0x0
0xffff988000022fa0 0041 00000000 0x0 0x0
0xffff988000023018 0041 00000000 0x0 0x0
0xffff988000023090 0041 00000000 0x0 0x0
0xffff988000023108 0041 00000000 0x0 0x0
0xffff988000023180 0041 00000000 0x0 0x0
0xffff9880000231f8 0041 00000000 0x0 0x0
0xffff988000023270 0041 00000000 0x0 0x0
0xffff9880000232e8 0041 00000000 0x0 0x0
0xffff988000023360 0041 00000000 0x0 0x0
0xffff9880000233d8 0041 00000000 0x0 0x0
0xffff988000023450 0041 00000000 0x0 0x0
0xffff9880000234c8 0041 00000000 0x0 0x0
0xffff988000023540 0041 00000000 0x0 0x0
0xffff9880000235b8 0041 00000000 0x0 0x0
0xffff988000023630 0041 00000000 0x0 0x0
0xffff9880000236a8 0041 00000000 0x0 0x0
0xffff988000023720 0041 00000000 0x0 0x0
0xffff988000023798 0041 00000000 0x0 0x0
0xffff988000023810 0041 00000000 0x0 0x0
0xffff988000023888 0041 00000000 0x0 0x0
0xffff988000023900 0041 00000000 0x0 0x0
0xffff988000023978 0041 00000000 0x0 0x0
0xffff9880000239f0 0041 00000000 0x0 0x0
0xffff988000023a68 0041 00000000 0x0 0x0
0xffff988000023ae0 0041 00000000 0x0 0x0
0xffff988000023b58 0041 00000000 0x0 0x0
0xffff988000023bd0 0041 00000000 0x0 0x0
0xffff988000023c48 0041 00000000 0x0 0x0
0xffff988000023cc0 0041 00000000 0x0 0x0
0xffff988000023d38 0041 00000000 0x0 0x0
0xffff988000023db0 0041 00000000 0x0 0x0
0xffff988000023e28 0041 00000000 0x0 0x0
0xffff988000023ea0 0041 00000000 0x0 0x0
0xffff988000023f18 0041 00000000 0x0 0x0
0xffff988000023f90 0041 00000000 0x0 0x0
0xffff988000024008 0041 00000000 0x0 0x0
0xffff988000024080 0041 00000000 0x0 0x0
0xffff9880000240f8 0041 00000000 0x0 0x0
0xffff988000024170 0041 00000000 0x0 0x0
0xffff9880000241e8 0041 00000000 0x0 0x0
0xffff988000024260 0041 00000000 0x0 0x0
0xffff9880000242d8 0041 00000000 0x0 0x0
0xffff988000024350 0041 00000000 0x0 0x0
0xffff9880000243c8 0041 00000000 0x0 0x0
0xffff988000024440 0041 00000000 0x0 0x0
0xffff9880000244b8 0041 00000000 0x0 0x0
0xffff988000024530 0041 00000000 0x0 0x0
0xffff9880000245a8 0041 00000000 0x0 0x0
0xffff988000024620 0041 00000000 0x0 0x0
0xffff988000024698 0041 00000000 0x0 0x0
0xffff988000024710 0041 00000000 0x0 0x0
0xffff988000024788 0041 00000000 0x0 0x0
0xffff988000024800 0041 00000000 0x0 0x0
0xffff988000024878 0041 00000000 0x0 0x0
0xffff9880000248f0 0041 00000000 0x0 0x0
0xffff988000024968 0041 00000000 0x0 0x0
0xffff9880000249e0 0041 00000000 0x0 0x0
0xffff988000024a58 0041 00000000 0x0 0x0
0xffff988000024ad0 0041 00000000 0x0 0x0
0xffff988000024b48 0041 00000000 0x0 0x0
0xffff988000024bc0 0041 00000000 0x0 0x0
0xffff988000024c38 0041 00000000 0x0 0x0
0xffff988000024cb0 0041 00000000 0x0 0x0
0xffff988000024d28 0041 00000000 0x0 0x0
0xffff988000024da0 0041 00000000 0x0 0x0
0xffff988000024e18 0041 00000000 0x0 0x0
0xffff988000024e90 0041 00000000 0x0 0x0
0xffff988000024f08 0041 00000000 0x0 0x0
0xffff988000024f80 0041 00000000 0x0 0x0
0xffff988000024ff8 0041 00000000 0x0 0x0
0xffff988000025070 0041 00000000 0x0 0x0
0xffff9880000250e8 0001 00000000 0x0 0x0
0xffff988000025160 0001 00000000 0x0 0x0
0xffff9880000251d8 0001 00000000 0x0 0x0
0xffff988000025250 0001 00000000 0x0 0x0
0xffff9880000252c8 0001 00000000 0x0 0x0
0xffff988000025340 0001 00000000 0x0 0x0
0xffff9880000253b8 0001 00000000 0x0 0x0
0xffff988000025430 0001 00000000 0x0 0x0
0xffff9880000254a8 0001 00000000 0x0 0x0
0xffff988000025520 0001 00000000 0x0 0x0
0xffff988000025598 0001 00000000 0x0 0x0
0xffff988000025610 0001 00000000 0x0 0x0
0xffff988000025688 0001 00000000 0x0 0x0
0xffff988000025700 0001 00000000 0x0 0x0
0xffff988000025778 0001 00000000 0x0 0x0
0xffff9880000257f0 0001 00000000 0x0 0x0
0xffff988000025868 0001 00000000 0x0 0x0
0xffff9880000258e0 0001 00000000 0x0 0x0
0xffff988000025958 0001 00000000 0x0 0x0
0xffff9880000259d0 0001 00000000 0x0 0x0
0xffff988000025a48 0001 00000000 0x0 0x0
0xffff988000025ac0 0001 00000000 0x0 0x0
0xffff988000025b38 0001 00000000 0x0 0x0
0xffff988000025bb0 0001 00000000 0x0 0x0
0xffff988000025c28 0001 00000000 0x0 0x0
0xffff988000025ca0 0001 00000000 0x0 0x0
0xffff988000025d18 0001 00000000 0x0 0x0
0xffff988000025d90 0001 00000000 0x0 0x0
0xffff988000025e08 0001 00000000 0x0 0x0
0xffff988000025e80 0001 00000000 0x0 0x0
0xffff988000025ef8 0001 00000000 0x0 0x0
0xffff988000025f70 0001 00000000 0x0 0x0
0xffff988000025fe8 0001 00000000 0x0 0x0
0xffff988000026060 0001 00000000 0x0 0x0
0xffff9880000260d8 0001 00000000 0x0 0x0
0xffff988000026150 0001 00000000 0x0 0x0
0xffff9880000261c8 0001 00000000 0x0 0x0
0xffff988000026240 0001 00000000 0x0 0x0
0xffff9880000262b8 0001 00000000 0x0 0x0
0xffff988000026330 0001 00000000 0x0 0x0
0xffff9880000263a8 0001 00000000 0x0 0x0
0xffff988000026420 0001 00000000 0x0 0x0
0xffff988000026498 0001 00000000 0x0 0x0
0xffff988000026510 0001 00000000 0x0 0x0
0xffff988000026588 0001 00000000 0x0 0x0
0xffff988000026600 0001 00000000 0x0 0x0
0xffff988000026678 0001 00000000 0x0 0x0
0xffff9880000266f0 0001 00000000 0x0 0x0
0xffff988000026768 0001 00000000 0x0 0x0
0xffff9880000267e0 0001 00000000 0x0 0x0
0xffff988000026858 0001 00000000 0x0 0x0
0xffff9880000268d0 0001 00000000 0x0 0x0
0xffff988000026948 0001 00000000 0x0 0x0
0xffff9880000269c0 0001 00000000 0x0 0x0
0xffff988000026a38 0001 00000000 0x0 0x0
0xffff988000026ab0 0001 00000000 0x0 0x0
0xffff988000026b28 0001 00000000 0x0 0x0
0xffff988000026ba0 0001 00000000 0x0 0x0
0xffff988000026c18 0001 00000000 0x0 0x0
0xffff988000026c90 0001 00000000 0x0 0x0
0xffff988000026d08 0001 00000000 0x0 0x0
0xffff988000026d80 0001 00000000 0x0 0x0
0xffff988000026df8 0001 00000000 0x0 0x0
0xffff988000026e70 0001 00000000 0x0 0x0
0xffff988000026ee8 0001 00000000 0x0 0x0
0xffff988000026f60 0001 00000000 0x0 0x0
0xffff988000026fd8 0001 00000000 0x0 0x0
0xffff988000027050 0001 00000000 0x0 0x0
0xffff9880000270c8 0001 00000000 0x0 0x0
0xffff988000027140 0001 00000000 0x0 0x0
0xffff9880000271b8 0001 00000000 0x0 0x0
0xffff988000027230 0001 00000000 0x0 0x0
0xffff9880000272a8 0001 00000000 0x0 0x0
0xffff988000027320 0001 00000000 0x0 0x0
0xffff988000027398 0001 00000000 0x0 0x0
0xffff988000027410 0001 00000000 0x0 0x0
0xffff988000027488 0001 00000000 0x0 0x0
0xffff988000027500 0001 00000000 0x0 0x0
0xffff988000027578 0001 00000000 0x0 0x0
0xffff9880000275f0 0001 00000000 0x0 0x0
0xffff988000027668 0001 00000000 0x0 0x0
0xffff9880000276e0 0001 00000000 0x0 0x0
0xffff988000027758 0001 00000000 0x0 0x0
0xffff9880000277d0 0001 00000000 0x0 0x0
0xffff988000027848 0001 00000000 0x0 0x0
0xffff9880000278c0 0001 00000000 0x0 0x0
0xffff988000027938 0001 00000000 0x0 0x0
0xffff9880000279b0 0001 00000000 0x0 0x0
0xffff988000027a28 0001 00000000 0x0 0x0
0xffff988000027aa0 0001 00000000 0x0 0x0
0xffff988000027b18 0001 00000000 0x0 0x0
0xffff988000027b90 0001 00000000 0x0 0x0
0xffff988000027c08 0001 00000000 0x0 0x0
0xffff988000027c80 0001 00000000 0x0 0x0
0xffff988000027cf8 0001 00000000 0x0 0x0
0xffff988000027d70 0001 00000000 0x0 0x0
0xffff988000027de8 0001 00000000 0x0 0x0
0xffff988000027e60 0001 00000000 0x0 0x0
0xffff988000027ed8 0001 00000000 0x0 0x0
0xffff988000027f50 0001 00000000 0x0 0x0
0xffff988000027fc8 0001 00000000 0x0 0x0
0xffff988000028040 0001 00000000 0x0 0x0
0xffff9880000280b8 0001 00000000 0x0 0x0
0xffff988000028130 0001 00000000 0x0 0x0
0xffff9880000281a8 0001 00000000 0x0 0x0
0xffff988000028220 0001 00000000 0x0 0x0
0xffff988000028298 0001 00000000 0x0 0x0
0xffff988000028310 0001 00000000 0x0 0x0
0xffff988000028388 0001 00000000 0x0 0x0
0xffff988000028400 0001 00000000 0x0 0x0
0xffff988000028478 0001 00000000 0x0 0x0
0xffff9880000284f0 0001 00000000 0x0 0x0
0xffff988000028568 0001 00000000 0x0 0x0
0xffff9880000285e0 0001 00000000 0x0 0x0
0xffff988000028658 0001 00000000 0x0 0x0
0xffff9880000286d0 0001 00000000 0x0 0x0
0xffff988000028748 0001 00000000 0x0 0x0
0xffff9880000287c0 0001 00000000 0x0 0x0
0xffff988000028838 0001 00000000 0x0 0x0
0xffff9880000288b0 0001 00000000 0x0 0x0
0xffff988000028928 0001 00000000 0x0 0x0
0xffff9880000289a0 0001 00000000 0x0 0x0
0xffff988000028a18 0001 00000000 0x0 0x0
0xffff988000028a90 0001 00000000 0x0 0x0
0xffff988000028b08 0001 00000000 0x0 0x0
0xffff988000028b80 0001 00000000 0x0 0x0
0xffff988000028bf8 0001 00000000 0x0 0x0
0xffff988000028c70 0001 00000000 0x0 0x0
0xffff988000028ce8 0001 00000000 0x0 0x0
0xffff988000028d60 0001 00000000 0x0 0x0
0xffff988000028dd8 0001 00000000 0x0 0x0
0xffff988000028e50 0001 00000000 0x0 0x0
0xffff988000028ec8 0001 00000000 0x0 0x0
0xffff988000028f40 0001 00000000 0x0 0x0
0xffff988000028fb8 0001 00000000 0x0 0x0
0xffff988000029030 0001 00000000 0x0 0x0
0xffff9880000290a8 0001 00000000 0x0 0x0
0xffff988000029120 0001 00000000 0x0 0x0
0xffff988000029198 0001 00000000 0x0 0x0
0xffff988000029210 0001 00000000 0x0 0x0
0xffff988000029288 0001 00000000 0x0 0x0
0xffff988000029300 0001 00000000 0x0 0x0
0xffff988000029378 0001 00000000 0x0 0x0
0xffff9880000293f0 0001 00000000 0x0 0x0
0xffff988000029468 0001 00000000 0x0 0x0
0xffff9880000294e0 0001 00000000 0x0 0x0
0xffff988000029558 0001 00000000 0x0 0x0
0xffff9880000295d0 0001 00000000 0x0

syzbot

unread,

Mar 8, 2020, 12:17:12 AM3/8/20

to syzkaller-...@googlegroups.com

syzbot has found a reproducer for the following crash on:

HEAD commit: ec23c06e Fix typo
git tree: netbsd

console output: https://syzkaller.appspot.com/x/log.txt?x=158dda55e00000

syz repro: https://syzkaller.appspot.com/x/repro.syz?x=13a9b731e00000
C reproducer: https://syzkaller.appspot.com/x/repro.c?x=1196d70de00000

IMPORTANT: if you fix the bug, please add the following tag to the commit:
Reported-by: syzbot+0edbcf...@syzkaller.appspotmail.com

[ 240.8467052] panic: ASan: Unauthorized Access In 0xffffffff8117ff45: Addr 0xffff9a80121800d8 [8 bytes, read, PoolUseAfterFree]

[ 240.8676053] cpu0: Begin traceback...
[ 240.8867227] vpanic() at netbsd:vpanic+0x241 sys/kern/subr_prf.c:336
[ 240.9167354] snprintf() at netbsd:snprintf
[ 240.9467574] kasan_report() at netbsd:kasan_report+0x98 kasan_code_name sys/kern/subr_asan.c:186 [inline]
[ 240.9467574] kasan_report() at netbsd:kasan_report+0x98 sys/kern/subr_asan.c:196
[ 240.9767737] __asan_load8() at netbsd:__asan_load8+0x294 kasan_shadow_4byte_isvalid sys/kern/subr_asan.c:346 [inline]
[ 240.9767737] __asan_load8() at netbsd:__asan_load8+0x294 kasan_shadow_8byte_isvalid sys/kern/subr_asan.c:360 [inline]
[ 240.9767737] __asan_load8() at netbsd:__asan_load8+0x294 kasan_shadow_check sys/kern/subr_asan.c:412 [inline]
[ 240.9767737] __asan_load8() at netbsd:__asan_load8+0x294 sys/kern/subr_asan.c:1182
[ 241.0168004] mutex_oncpu() at netbsd:mutex_oncpu+0x38 mutex_oncpu sys/kern/kern_mutex.c:422 [inline]
[ 241.0168004] mutex_oncpu() at netbsd:mutex_oncpu+0x38 sys/kern/kern_mutex.c:406
[ 241.0468162] mutex_enter() at netbsd:mutex_enter+0x1a1 sys/kern/kern_mutex.c:550
[ 241.0768352] match_process() at netbsd:match_process+0x4e sys/kern/kern_exit.c:825
[ 241.1168590] do_sys_waitid() at netbsd:do_sys_waitid+0x336 find_stopped_child sys/kern/kern_exit.c:1023 [inline]
[ 241.1168590] do_sys_waitid() at netbsd:do_sys_waitid+0x336 sys/kern/kern_exit.c:659
[ 241.1468816] do_sys_wait() at netbsd:do_sys_wait+0x1c3 sys/kern/kern_exit.c:711
[ 241.1768977] sys___wait450() at netbsd:sys___wait450+0x10e sys/kern/kern_exit.c:731
[ 241.2069162] syscall() at netbsd:syscall+0x57e sy_call sys/sys/syscallvar.h:65 [inline]
[ 241.2069162] syscall() at netbsd:syscall+0x57e sy_invoke sys/sys/syscallvar.h:94 [inline]
[ 241.2069162] syscall() at netbsd:syscall+0x57e sys/arch/x86/x86/syscall.c:138
[ 241.2169217] --- syscall (number 449) ---
[ 241.2273369] 7829c1e4279a:
[ 241.2391353] cpu0: End traceback...
[ 241.2391353] fatal breakpoint trap in supervisor mode
[ 241.2476820] trap type 1 code 0 rip 0xffffffff8021e4b5 cs 0x8 rflags 0x246 cr2 0x7829c21fb729 ilevel 0 rsp 0xffff9a817e353650
[ 241.2588673] curlwp 0xffff9a8012c94640 pid 45.1 lowest kstack 0xffff9a817e34c2c0
Stopped in pid 45.1 (syz-executor1241) at netbsd:breakpoint+0x5: leave

match_process() at netbsd:match_process+0x4e sys/kern/kern_exit.c:825
do_sys_waitid() at netbsd:do_sys_waitid+0x336 find_stopped_child sys/kern/kern_exit.c:1023 [inline]
do_sys_waitid() at netbsd:do_sys_waitid+0x336 sys/kern/kern_exit.c:659
do_sys_wait() at netbsd:do_sys_wait+0x1c3 sys/kern/kern_exit.c:711
sys___wait450() at netbsd:sys___wait450+0x10e sys/kern/kern_exit.c:731
syscall() at netbsd:syscall+0x57e sy_call sys/sys/syscallvar.h:65 [inline]
syscall() at netbsd:syscall+0x57e sy_invoke sys/sys/syscallvar.h:94 [inline]
syscall() at netbsd:syscall+0x57e sys/arch/x86/x86/syscall.c:138
--- syscall (number 449) ---
7829c1e4279a:
ds 3680
es 666a
fs 3630
gs 3420
rdi ffff9a800d92d488
rsi ffff9a8012c948f8
rbp ffff9a817e353650
rbx ffffffff82810480 cpu_info_primary

rdx 2
rcx ffffffff80d14fa1 db_panic+0xd5
rax 0
r8 4
r9 1ffffffff0554bfc
r10 ffffffff82aa5fe3 db_onpanic+0x3
r11 10

r12 ffff9a816d8a4000
r13 ffffffff82440be8 ostype+0x4e268
r14 ffff9a817e3536e0
r15 ffff9a816d893068

rip ffffffff8021e4b5 breakpoint+0x5
cs 8
rflags 246

rsp ffff9a817e353650

ss 10
netbsd:breakpoint+0x5: leave
PID LID S CPU FLAGS STRUCT LWP * NAME WAIT

1512 1 2 0 0 ffff9a801222e640 syz-executor1241
2234 1 2 0 0 ffff9a801218f980 syz-executor1241
2086 1 2 0 0 ffff9a8012c7c180 syz-executor1241
2105 1 2 0 0 ffff9a8011f3c640 syz-executor1241
2122 1 2 0 40000 ffff9a8012140b80 syz-executor1241
423 1 3 1 0 ffff9a8012c08480 syz-executor1241 tstile
627 1 3 1 0 ffff9a8012c6b980 syz-executor1241 tstile
568 1 2 0 0 ffff9a8012c94a80 syz-executor1241
45 > 1 7 0 0 ffff9a8012c94640 syz-executor1241
606 1 2 0 0 ffff9a8012c9fac0 syz-executor1241
420 1 2 0 0 ffff9a8012cba2c0 syz-executor1241
530 1 3 1 80 ffff9a8011f0b1c0 syz-executor1241 nanoslp
41 1 3 0 80 ffff9a80116a1b00 sshd select
524 1 3 0 80 ffff9a8012c8aa40 getty nanoslp
508 1 3 0 80 ffff9a8012c8a1c0 getty nanoslp
549 1 3 1 80 ffff9a8012c73580 getty nanoslp
564 1 3 0 80 ffff9a8012b94240 getty ttyraw
558 1 3 1 80 ffff9a8012c08040 cron nanoslp
543 1 3 1 80 ffff9a8013628780 inetd kqueue
317 1 3 0 80 ffff9a80121f1180 sshd select
491 1 3 1 80 ffff9a8012152780 powerd kqueue
195 1 3 0 80 ffff9a8012baeb00 syslogd kqueue
247 1 3 0 80 ffff9a8012152340 dhcpcd kqueue
182 1 3 0 80 ffff9a8012068080 dhcpcd kqueue
1 1 3 0 80 ffff9a8011e38100 init wait
0 44 3 0 204 ffff9a8011e38980 physiod physiod
0 48 3 0 204 ffff9a8011e859c0 pooldrain pooldrain
0 47 3 1 200 ffff9a8011e85580 ioflush syncer
0 46 3 1 200 ffff9a8011e85140 pgdaemon pgdaemon
0 29 3 1 200 ffff9a80116a1280 npfgc-0 npfgccv
0 43 3 0 204 ffff9a8011e28940 rt_free rt_free
0 42 3 0 204 ffff9a8011e28500 unpgc unpgc
0 41 3 1 204 ffff9a8011e280c0 key_timehandler key_timehandler
0 40 3 1 204 ffff9a8011e20900 icmp6_wqinput/1 icmp6_wqinput
0 39 3 0 204 ffff9a8011e204c0 icmp6_wqinput/0 icmp6_wqinput
0 38 3 1 204 ffff9a8011e20080 nd6_timer nd6_timer
0 37 3 1 204 ffff9a8011e168c0 carp6_wqinput/1 carp6_wqinput
0 36 3 0 204 ffff9a8011e16480 carp6_wqinput/0 carp6_wqinput
0 35 3 1 204 ffff9a8011e16040 carp_wqinput/1 carp_wqinput
0 34 3 0 204 ffff9a8011c9dbc0 carp_wqinput/0 carp_wqinput
0 33 3 1 204 ffff9a8011c9d780 icmp_wqinput/1 icmp_wqinput
0 32 3 0 204 ffff9a8011c9d340 icmp_wqinput/0 icmp_wqinput
0 31 3 1 204 ffff9a8011c8cb80 rt_timer rt_timer
0 30 3 0 204 ffff9a8011c8c300 vmem_rehash vmem_rehash
0 28 3 0 204 ffff9a800f35dac0 scsibus0 sccomp
0 27 3 0 200 ffff9a800f35d680 pms0 pmsreset
0 26 3 1 204 ffff9a800f35d240 xcall/1 xcall
0 25 1 1 200 ffff9a800f35ca80 softser/1
0 24 1 1 200 ffff9a800f35c640 softclk/1
0 23 1 1 200 ffff9a800f35c200 softbio/1
0 22 1 1 200 ffff9a800f26ea40 softnet/1
0 > 21 7 1 201 ffff9a800f26e600 idle/1
0 20 3 0 204 ffff9a800f26e1c0 lnxpwrwq lnxpwrwq
0 19 3 0 204 ffff9a800f26ca00 lnxlngwq lnxlngwq
0 18 3 0 204 ffff9a800f26c5c0 lnxsyswq lnxsyswq
0 17 3 0 204 ffff9a800f26c180 lnxrcugc lnxrcugc
0 16 3 0 204 ffff9a800de4f9c0 sysmon smtaskq
0 15 3 1 204 ffff9a800de4f580 pmfsuspend pmfsuspend
0 14 3 0 204 ffff9a800de4f140 pmfevent pmfevent
0 13 3 0 204 ffff9a800de40980 sopendfree sopendfr
0 12 3 0 204 ffff9a800de40540 iflnkst iflnkst
0 11 3 0 204 ffff9a800de40100 nfssilly nfssilly
0 10 3 1 200 ffff9a800de34940 cachegc cachegc
0 9 3 0 204 ffff9a800de34500 vdrain vdrain
0 8 3 0 200 ffff9a800de340c0 modunload mod_unld
0 7 3 0 204 ffff9a800de24900 xcall/0 xcall
0 6 1 0 200 ffff9a800de244c0 softser/0
0 5 1 0 200 ffff9a800de24080 softclk/0
0 4 1 0 200 ffff9a800de218c0 softbio/0
0 3 1 0 200 ffff9a800de21480 softnet/0
0 2 1 0 201 ffff9a800de21040 idle/0
0 1 3 0 200 ffffffff82b6efc0 swapper uvm
[Locks tracked through LWPs]

****** LWP 2234.1 (syz-executor1241) @ 0xffff9a801218f980, l_stat=2

*** Locks held:

* Lock 0 (initialized at fork1)
lock address : 0xffff9a8012c90890 type : sleep/adaptive
initialized : 0xffffffff81166c81

shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0

relevant lwp : 0xffff9a801218f980 last held: 0xffff9a801218f980
last locked* : 0xffffffff811632a9 unlocked : 000000000000000000
owner/count : 0xffff9a801218f980 flags : 0x0000000000000004

Turnstile: no active turnstile for this lock.

*** Locks wanted:

* Lock 0 (initialized at amap_ctor)

lock address : 0xffff9a8013a43c40 type : sleep/adaptive
initialized : 0xffffffff810e0123

shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 1

relevant cpu : 0 last held: 1
relevant lwp : 0xffff9a801218f980 last held: 000000000000000000
last locked : 0xffffffff810ef104 unlocked*: 0xffffffff810ecfb0
owner/count : 000000000000000000 flags : 0x0000000000000002

Turnstile: no active turnstile for this lock.

****** LWP 2122.1 (syz-executor1241) @ 0xffff9a8012140b80, l_stat=2

*** Locks held:

* Lock 0 (initialized at uvm_obj_init)

lock address : 0xffff9a8011c6b940 type : sleep/adaptive

initialized : 0xffffffff8110ca30
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0

relevant cpu : 0 last held: 1
relevant lwp : 0xffff9a8012140b80 last held: 0xffff9a8012140b80
last locked* : 0xffffffff810f070d unlocked : 0xffffffff81100a90
owner/count : 0xffff9a8012140b80 flags : 0x0000000000000004

Turnstile: no active turnstile for this lock.

*** Locks wanted: none

****** LWP 423.1 (syz-executor1241) @ 0xffff9a8012c08480, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at procinit)
lock address : 0xffff9a800d91a0c0 type : sleep/adaptive
initialized : 0xffffffff8118aa43

shared holds : 0 exclusive: 1

shares wanted: 0 exclusive: 2
relevant cpu : 1 last held: 0
relevant lwp : 0xffff9a8012c08480 last held: 0xffff9a8012c94640
last locked* : 0xffffffff8116499a unlocked : 0xffffffff81177897
owner field : 0xffff9a8012c94640 wait/spin: 1/0
Turnstile:
=> 0 waiting readers:
=> 2 waiting writers: 0xffff9a8012c08480 0xffff9a8012c6b980

****** LWP 627.1 (syz-executor1241) @ 0xffff9a8012c6b980, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at procinit)
lock address : 0xffff9a800d91a0c0 type : sleep/adaptive
initialized : 0xffffffff8118aa43

shared holds : 0 exclusive: 1

shares wanted: 0 exclusive: 2
relevant cpu : 1 last held: 0
relevant lwp : 0xffff9a8012c6b980 last held: 0xffff9a8012c94640
last locked* : 0xffffffff8116499a unlocked : 0xffffffff81177897
owner field : 0xffff9a8012c94640 wait/spin: 1/0
Turnstile:
=> 0 waiting readers:
=> 2 waiting writers: 0xffff9a8012c08480 0xffff9a8012c6b980

****** LWP 45.1 (syz-executor1241) @ 0xffff9a8012c94640, l_stat=7

*** Locks held:

* Lock 0 (initialized at procinit)
lock address : 0xffff9a800d91a0c0 type : sleep/adaptive
initialized : 0xffffffff8118aa43

shared holds : 0 exclusive: 1

shares wanted: 0 exclusive: 2

relevant cpu : 0 last held: 0

relevant lwp : 0xffff9a8012c94640 last held: 0xffff9a8012c94640
last locked* : 0xffffffff8116499a unlocked : 0xffffffff81177897
owner field : 0xffff9a8012c94640 wait/spin: 1/0
Turnstile:
=> 0 waiting readers:
=> 2 waiting writers: 0xffff9a8012c08480 0xffff9a8012c6b980

*** Locks wanted:

* Lock 0 (initialized at fork1)

lock address : 0xffff9a8013731a80 type : sleep/adaptive

initialized : 0xffffffff81166ccf
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 1

relevant cpu : 0 last held: 0

relevant lwp : 0xffff9a8012c94640 last held: 000000000000000000
last locked : 0xffffffff81178539 unlocked*: 0xffffffff81163245

owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 0.12 (iflnkst) @ 0xffff9a800de40540, l_stat=3

relevant lwp : 0xffff9a800de40540 last held: 000000000000000000

last locked : 000000000000000000 unlocked*: 000000000000000000
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 0.5 (softclk/0) @ 0xffff9a800de24080, l_stat=1

relevant lwp : 0xffff9a800de24080 last held: 000000000000000000

0xffff9a8000014180 0041 00000000 0x0 0x0
0xffff9a80000141f8 0041 00000000 0x0 0x0
0xffff9a8000014270 0041 00000000 0x0 0x0
0xffff9a80000142e8 0041 00000000 0x0 0x0
0xffff9a8000014360 0041 00000000 0x0 0x0
0xffff9a80000143d8 0041 00000000 0x0 0x0
0xffff9a8000014450 0041 00000000 0x0 0x0
0xffff9a80000144c8 0041 00000000 0x0 0x0
0xffff9a8000014540 0041 00000000 0x0 0x0
0xffff9a80000145b8 0041 00000000 0x0 0x0
0xffff9a8000014630 0041 00000000 0x0 0x0
0xffff9a80000146a8 0041 00000000 0x0 0x0
0xffff9a8000014720 0041 00000000 0x0 0x0
0xffff9a8000014798 0041 00000000 0x0 0x0
0xffff9a8000014810 0041 00000000 0x0 0x0
0xffff9a8000014888 0041 00000000 0x0 0x0
0xffff9a8000014900 0041 00000000 0x0 0x0
0xffff9a8000014978 0041 00000000 0x0 0x0
0xffff9a80000149f0 0041 00000000 0x0 0x0
0xffff9a8000014a68 0041 00000000 0x0 0x0
0xffff9a8000014ae0 0041 00000000 0x0 0x0
0xffff9a8000014b58 0041 00000000 0x0 0x0
0xffff9a8000014bd0 0041 00000000 0x0 0x0
0xffff9a8000014c48 0041 00000000 0x0 0x0
0xffff9a8000014cc0 0041 00000000 0x0 0x0
0xffff9a8000014d38 0041 00000000 0x0 0x0
0xffff9a8000014db0 0041 00000000 0x0 0x0
0xffff9a8000014e28 0041 00000000 0x0 0x0
0xffff9a8000014ea0 0041 00000000 0x0 0x0
0xffff9a8000014f18 0041 00000000 0x0 0x0
0xffff9a8000014f90 0041 00000000 0x0 0x0
0xffff9a8000015008 0041 00000000 0x0 0x0
0xffff9a8000015080 0041 00000000 0x0 0x0
0xffff9a80000150f8 0041 00000000 0x0 0x0
0xffff9a8000015170 0041 00000000 0x0 0x0
0xffff9a80000151e8 0041 00000000 0x0 0x0
0xffff9a8000015260 0041 00000000 0x0 0x0
0xffff9a80000152d8 0041 00000000 0x0 0x0
0xffff9a8000015350 0041 00000000 0x0 0x0
0xffff9a80000153c8 0041 00000000 0x0 0x0
0xffff9a8000015440 0041 00000000 0x0 0x0
0xffff9a80000154b8 0041 00000000 0x0 0x0
0xffff9a8000015530 0041 00000000 0x0 0x0
0xffff9a80000155a8 0041 00000000 0x0 0x0
0xffff9a8000015620 0041 00000000 0x0 0x0
0xffff9a8000015698 0041 00000000 0x0 0x0
0xffff9a8000015710 0041 00000000 0x0 0x0
0xffff9a8000015788 0041 00000000 0x0 0x0
0xffff9a8000015800 0041 00000000 0x0 0x0
0xffff9a8000015878 0041 00000000 0x0 0x0
0xffff9a80000158f0 0041 00000000 0x0 0x0
0xffff9a8000015968 0041 00000000 0x0 0x0
0xffff9a80000159e0 0041 00000000 0x0 0x0
0xffff9a8000015a58 0041 00000000 0x0 0x0
0xffff9a8000015ad0 0041 00000000 0x0 0x0
0xffff9a8000015b48 0041 00000000 0x0 0x0
0xffff9a8000015bc0 0041 00000000 0x0 0x0
0xffff9a8000015c38 0041 00000000 0x0 0x0
0xffff9a8000015cb0 0041 00000000 0x0 0x0
0xffff9a8000015d28 0041 00000000 0x0 0x0
0xffff9a8000015da0 0041 00000000 0x0 0x0
0xffff9a8000015e18 0041 00000000 0x0 0x0
0xffff9a8000015e90 0041 00000000 0x0 0x0
0xffff9a8000015f08 0041 00000000 0x0 0x0
0xffff9a8000015f80 0041 00000000 0x0 0x0
0xffff9a8000015ff8 0041 00000000 0x0 0x0
0xffff9a8000016070 0041 00000000 0x0 0x0
0xffff9a80000160e8 0041 00000000 0x0 0x0
0xffff9a8000016160 0041 00000000 0x0 0x0
0xffff9a80000161d8 0041 00000000 0x0 0x0
0xffff9a8000016250 0041 00000000 0x0 0x0
0xffff9a80000162c8 0041 00000000 0x0 0x0
0xffff9a8000016340 0041 00000000 0x0 0x0
0xffff9a80000163b8 0041 00000000 0x0 0x0
0xffff9a8000016430 0041 00000000 0x0 0x0
0xffff9a80000164a8 0045 00000000 0x0 0x0
0xffff9a8000016520 0041 00000000 0x0 0x0
0xffff9a8000016598 0045 00000000 0x0 0x0
0xffff9a8000016610 0041 00000000 0x0 0x0
0xffff9a8000016688 0041 00000000 0x0 0x0
0xffff9a8000016700 0045 00000000 0x0 0x0
0xffff9a8000016778 0045 00000000 0x0 0x0
0xffff9a80000167f0 0041 00000000 0x0 0x0
0xffff9a8000016868 0045 00000000 0x0 0x0
0xffff9a80000168e0 0045 00000000 0x0 0x0
0xffff9a8000016958 0045 00000000 0x0 0x0
0xffff9a80000169d0 0045 00000000 0x0 0x0
0xffff9a8000016a48 0045 00000000 0x0 0x0
0xffff9a8000016ac0 0045 00000000 0x0 0x0
0xffff9a8000016b38 0045 00000000 0x0 0x0
0xffff9a8000016bb0 0045 00000000 0x0 0x0
0xffff9a8000016c28 0041 00000000 0x0 0x0
0xffff9a8000016ca0 0045 00000000 0x0 0x0
0xffff9a8000016d18 0041 00000000 0x0 0x0
0xffff9a8000016d90 0045 00000000 0x0 0x0
0xffff9a8000016e08 0045 00000000 0x0 0x0
0xffff9a8000016e80 0041 00000000 0x0 0x0
0xffff9a8000016ef8 0041 00000000 0x0 0x0
0xffff9a8000016f70 0045 00000000 0x0 0x0
0xffff9a8000016fe8 0041 00000000 0x0 0x0
0xffff9a8000017060 0041 00000000 0x0 0x0
0xffff9a80000170d8 0041 00000000 0x0 0x0
0xffff9a8000017150 0041 00000000 0x0 0x0
0xffff9a80000171c8 0041 00000000 0x0 0x0
0xffff9a8000017240 0041 00000000 0x0 0x0
0xffff9a80000172b8 0041 00000000 0x0 0x0
0xffff9a8000017330 0041 00000000 0x0 0x0
0xffff9a80000173a8 0041 00000000 0x0 0x0
0xffff9a8000017420 0041 00000000 0x0 0x0
0xffff9a8000017498 0041 00000000 0x0 0x0
0xffff9a8000017510 0041 00000000 0x0 0x0
0xffff9a8000017588 0041 00000000 0x0 0x0
0xffff9a8000017600 0041 00000000 0x0 0x0
0xffff9a8000017678 0041 00000000 0x0 0x0
0xffff9a80000176f0 0041 00000000 0x0 0x0
0xffff9a8000017768 0041 00000000 0x0 0x0
0xffff9a80000177e0 0041 00000000 0x0 0x0
0xffff9a8000017858 0041 00000000 0x0 0x0
0xffff9a80000178d0 0041 00000000 0x0 0x0
0xffff9a8000017948 0041 00000000 0x0 0x0
0xffff9a80000179c0 0041 00000000 0x0 0x0
0xffff9a8000017a38 0041 00000000 0x0 0x0
0xffff9a8000017ab0 0041 00000000 0x0 0x0
0xffff9a8000017b28 0041 00000000 0x0 0x0
0xffff9a8000017ba0 0041 00000000 0x0 0x0
0xffff9a8000017c18 0041 00000000 0x0 0x0
0xffff9a8000017c90 0041 00000000 0x0 0x0
0xffff9a8000017d08 0041 00000000 0x0 0x0
0xffff9a8000017d80 0041 00000000 0x0 0x0
0xffff9a8000017df8 0041 00000000 0x0 0x0
0xffff9a8000017e70 0041 00000000 0x0 0x0
0xffff9a8000017ee8 0041 00000000 0x0 0x0
0xffff9a8000017f60 0041 00000000 0x0 0x0
0xffff9a8000017fd8 0041 00000000 0x0 0x0
0xffff9a8000018050 0041 00000000 0x0 0x0
0xffff9a80000180c8 0041 00000000 0x0 0x0
0xffff9a8000018140 0041 00000000 0x0 0x0
0xffff9a80000181b8 0041 00000000 0x0 0x0
0xffff9a8000018230 0041 00000000 0x0 0x0
0xffff9a80000182a8 0041 00000000 0x0 0x0
0xffff9a8000018320 0041 00000000 0x0 0x0
0xffff9a8000018398 0041 00000000 0x0 0x0
0xffff9a8000018410 0041 00000000 0x0 0x0
0xffff9a8000018488 0041 00000000 0x0 0x0
0xffff9a8000018500 0041 00000000 0x0 0x0
0xffff9a8000018578 0041 00000000 0x0 0x0
0xffff9a80000185f0 0041 00000000 0x0 0x0
0xffff9a8000018668 0041 00000000 0x0 0x0
0xffff9a80000186e0 0041 00000000 0x0 0x0
0xffff9a8000018758 0041 00000000 0x0 0x0
0xffff9a80000187d0 0041 00000000 0x0 0x0
0xffff9a8000018848 0041 00000000 0x0 0x0
0xffff9a80000188c0 0041 00000000 0x0 0x0
0xffff9a8000018938 0041 00000000 0x0 0x0
0xffff9a80000189b0 0041 00000000 0x0 0x0
0xffff9a8000018a28 0041 00000000 0x0 0x0
0xffff9a8000018aa0 0041 00000000 0x0 0x0
0xffff9a8000018b18 0041 00000000 0x0 0x0
0xffff9a8000018b90 0041 00000000 0x0 0x0
0xffff9a8000018c08 0041 00000000 0x0 0x0
0xffff9a8000018c80 0041 00000000 0x0 0x0
0xffff9a8000018cf8 0041 00000000 0x0 0x0
0xffff9a8000018d70 0041 00000000 0x0 0x0
0xffff9a8000018de8 0041 00000000 0x0 0x0
0xffff9a8000018e60 0041 00000000 0x0 0x0
0xffff9a8000018ed8 0041 00000000 0x0 0x0
0xffff9a8000018f50 0041 00000000 0x0 0x0
0xffff9a8000018fc8 0041 00000000 0x0 0x0
0xffff9a8000019040 0041 00000000 0x0 0x0
0xffff9a80000190b8 0041 00000000 0x0 0x0
0xffff9a8000019130 0041 00000000 0x0 0x0
0xffff9a80000191a8 0041 00000000 0x0 0x0
0xffff9a8000019220 0041 00000000 0x0 0x0
0xffff9a8000019298 0041 00000000 0x0 0x0
0xffff9a8000019310 0041 00000000 0x0 0x0
0xffff9a8000019388 0041 00000000 0x0 0x0
0xffff9a8000019400 0041 00000000 0x0 0x0
0xffff9a8000019478 0041 00000000 0x0 0x0
0xffff9a80000194f0 0041 00000000 0x0 0x0
0xffff9a8000019568 0041 00000000 0x0 0x0
0xffff9a80000195e0 0041 00000000 0x0 0x0
0xffff9a8000019658 0041 00000000 0x0 0x0
0xffff9a80000196d0 0041 00000000 0x0 0x0
0xffff9a8000019748 0041 00000000 0x0 0x0
0xffff9a80000197c0 0041 00000000 0x0 0x0
0xffff9a8000019838 0041 00000000 0x0 0x0
0xffff9a80000198b0 0041 00000000 0x0 0x0
0xffff9a8000019928 0041 00000000 0x0 0x0
0xffff9a80000199a0 0041 00000000 0x0 0x0
0xffff9a8000019a18 0041 00000000 0x0 0x0
0xffff9a8000019a90 0041 00000000 0x0 0x0
0xffff9a8000019b08 0041 00000000 0x0 0x0
0xffff9a8000019b80 0041 00000000 0x0 0x0
0xffff9a8000019bf8 0041 00000000 0x0 0x0
0xffff9a8000019c70 0041 00000000 0x0 0x0
0xffff9a8000019ce8 0041 00000000 0x0 0x0
0xffff9a8000019d60 0041 00000000 0x0 0x0
0xffff9a8000019dd8 0041 00000000 0x0 0x0
0xffff9a8000019e50 0041 00000000 0x0 0x0
0xffff9a8000019ec8 0041 00000000 0x0 0x0
0xffff9a8000019f40 0041 00000000 0x0 0x0
0xffff9a8000019fb8 0041 00000000 0x0 0x0
0xffff9a800001a030 0041 00000000 0x0 0x0
0xffff9a800001a0a8 0041 00000000 0x0 0x0
0xffff9a800001a120 0041 00000000 0x0 0x0
0xffff9a800001a198 0041 00000000 0x0 0x0
0xffff9a800001a210 0041 00000000 0x0 0x0
0xffff9a800001a288 0041 00000000 0x0 0x0
0xffff9a800001a300 0041 00000000 0x0 0x0
0xffff9a800001a378 0041 00000000 0x0 0x0
0xffff9a800001a3f0 0041 00000000 0x0 0x0
0xffff9a800001a468 0001 00000000 0x0 0x0
0xffff9a800001a4e0 0001 00000000 0x0 0x0
0xffff9a800001a558 0001 00000000 0x0 0x0
0xffff9a800001a5d0 0001 00000000 0x0 0x0
0xffff9a800001a648 0001 00000000 0x0 0x0
0xffff9a800001a6c0 0001 00000000 0x0 0x0
0xffff9a800001a738 0001 00000000 0x0 0x0
0xffff9a800001a7b0 0001 00000000 0x0 0x0
0xffff9a800001a828 0001 00000000 0x0 0x0
0xffff9a800001a8a0 0001 00000000 0x0 0x0
0xffff9a800001a918 0001 00000000 0x0 0x0
0xffff9a800001a990 0001 00000000 0x0 0x0
0xffff9a800001aa08 0001 00000000 0x0 0x0
0xffff9a800001aa80 0001 00000000 0x0 0x0
0xffff9a800001aaf8 0001 00000000 0x0 0x0
0xffff9a800001ab70 0001 00000000 0x0 0x0
0xffff9a800001abe8 0001 00000000 0x0 0x0
0xffff9a800001ac60 0001 00000000 0x0 0x0
0xffff9a800001acd8 0001 00000000 0x0 0x0
0xffff9a800001ad50 0001 00000000 0x0 0x0
0xffff9a800001adc8 0001 00000000 0x0 0x0
0xffff9a800001ae40 0001 00000000 0x0 0x0
0xffff9a800001aeb8 0001 00000000 0x0 0x0
0xffff9a800001af30 0001 00000000 0x0 0x0
0xffff9a800001afa8 0001 00000000 0x0 0x0
0xffff9a800001b020 0001 00000000 0x0 0x0
0xffff9a800001b098 0001 00000000 0x0 0x0
0xffff9a800001b110 0001 00000000 0x0 0x0
0xffff9a800001b188 0001 00000000 0x0 0x0
0xffff9a800001b200 0001 00000000 0x0 0x0
0xffff9a800001b278 0001 00000000 0x0 0x0
0xffff9a800001b2f0 0001 00000000 0x0 0x0
0xffff9a800001b368 0001 00000000 0x0 0x0
0xffff9a800001b3e0 0001 00000000 0x0 0x0
0xffff9a800001b458 0001 00000000 0x0 0x0
0xffff9a800001b4d0 0001 00000000 0x0 0x0
0xffff9a800001b548 0001 00000000 0x0 0x0
0xffff9a800001b5c0 0001 00000000 0x0 0x0
0xffff9a800001b638 0001 00000000 0x0 0x0
0xffff9a800001b6b0 0001 00000000 0x0 0x0
0xffff9a800001b728 0001 00000000 0x0 0x0
0xffff9a800001b7a0 0001 00000000 0x0 0x0
0xffff9a800001b818 0001 00000000 0x0 0x0
0xffff9a800001b890 0001 00000000 0x0 0x0
0xffff9a800001b908 0001 00000000 0x0 0x0
0xffff9a800001b980 0001 00000000 0x0 0x0
0xffff9a800001b9f8 0001 00000000 0x0 0x0
0xffff9a800001ba70 0001 00000000 0x0 0x0
0xffff9a800001bae8 0001 00000000 0x0 0x0
0xffff9a800001bb60 0001 00000000 0x0 0x0
0xffff9a800001bbd8 0001 00000000 0x0 0x0
0xffff9a800001bc50 0001 00000000 0x0 0x0
0xffff9a800001bcc8 0001 00000000 0x0 0x0
0xffff9a800001bd40 0001 00000000 0x0 0x0
0xffff9a800001bdb8 0041 00000000 0x0 0x0
0xffff9a800001be30 0041 00000000 0x0 0x0
0xffff9a800001bea8 0041 00000000 0x0 0x0
0xffff9a800001bf20 0041 00000000 0x0 0x0
0xffff9a800001bf98 0041 00000000 0x0 0x0
0xffff9a800001c010 0041 00000000 0x0 0x0
0xffff9a800001c088 0041 00000000 0x0 0x0
0xffff9a800001c100 0041 00000000 0x0 0x0
0xffff9a800001c178 0041 00000000 0x0 0x0
0xffff9a800001c1f0 0041 00000000 0x0 0x0
0xffff9a800001c268 0041 00000000 0x0 0x0
0xffff9a800001c2e0 0041 00000000 0x0 0x0
0xffff9a800001c358 0041 00000000 0x0 0x0
0xffff9a800001c3d0 0041 00000000 0x0 0x0
0xffff9a800001c448 0041 00000000 0x0 0x0
0xffff9a800001c4c0 0041 00000000 0x0 0x0
0xffff9a800001c538 0041 00000000 0x0 0x0
0xffff9a800001c5b0 0041 00000000 0x0 0x0
0xffff9a800001c628 0041 00000000 0x0 0x0
0xffff9a800001c6a0 0041 00000000 0x0 0x0
0xffff9a800001c718 0041 00000000 0x0 0x0
0xffff9a800001c790 0041 00000000 0x0 0x0
0xffff9a800001c808 0041 00000000 0x0 0x0
0xffff9a800001c880 0041 00000000 0x0 0x0
0xffff9a800001c8f8 0041 00000000 0x0 0x0
0xffff9a800001c970 0041 00000000 0x0 0x0
0xffff9a800001c9e8 0041 00000000 0x0 0x0
0xffff9a800001ca60 0041 00000000 0x0 0x0
0xffff9a800001cad8 0041 00000000 0x0 0x0
0xffff9a800001cb50 0041 00000000 0x0 0x0
0xffff9a800001cbc8 0041 00000000 0x0 0x0
0xffff9a800001cc40 0041 00000000 0x0 0x0
0xffff9a800001ccb8 0041 00000000 0x0 0x0
0xffff9a800001cd30 0041 00000000 0x0 0x0
0xffff9a800001cda8 0041 00000000 0x0 0x0
0xffff9a800001ce20 0041 00000000 0x0 0x0
0xffff9a800001ce98 0041 00000000 0x0 0x0
0xffff9a800001cf10 0041 00000000 0x0 0x0
0xffff9a800001cf88 0041 00000000 0x0 0x0
0xffff9a800001d000 0041 00000000 0x0 0x0
0xffff9a800001d078 0041 00000000 0x0 0x0
0xffff9a800001d0f0 0041 00000000 0x0 0x0
0xffff9a800001d168 0041 00000000 0x0 0x0
0xffff9a800001d1e0 0041 00000000 0x0 0x0
0xffff9a800001d258 0041 00000000 0x0 0x0
0xffff9a800001d2d0 0041 00000000 0x0 0x0
0xffff9a800001d348 0041 00000000 0x0 0x0
0xffff9a800001d3c0 0001 00000000 0x0 0x0
0xffff9a800001d438 0001 00000000 0x0 0x0
0xffff9a800001d4b0 0001 00000000 0x0 0x0
0xffff9a800001d528 0001 00000000 0x0 0x0
0xffff9a800001d5a0 0001 00000000 0x0 0x0
0xffff9a800001d618 0001 00000000 0x0 0x0
0xffff9a800001d690 0001 00000000 0x0 0x0
0xffff9a800001d708 0001 00000000 0x0 0x0
0xffff9a800001d780 0001 00000000 0x0 0x0
0xffff9a800001d7f8 0001 00000000 0x0 0x0
0xffff9a800001d870 0001 00000000 0x0 0x0
0xffff9a800001d8e8 0001 00000000 0x0 0x0
0xffff9a800001d960 0001 00000000 0x0 0x0
0xffff9a800001d9d8 0001 00000000 0x0 0x0
0xffff9a800001da50 0001 00000000 0x0 0x0
0xffff9a800001dac8 0001 00000000 0x0 0x0
0xffff9a800001db40 0001 00000000 0x0 0x0
0xffff9a800001dbb8 0001 00000000 0x0 0x0
0xffff9a800001dc30 0001 00000000 0x0 0x0
0xffff9a800001dca8 0001 00000000 0x0 0x0
0xffff9a800001dd20 0001 00000000 0x0 0x0
0xffff9a800001dd98 0001 00000000 0x0 0x0
0xffff9a800001de10 0001 00000000 0x0 0x0
0xffff9a800001de88 0001 00000000 0x0 0x0
0xffff9a800001df00 0001 00000000 0x0 0x0
0xffff9a800001df78 0001 00000000 0x0 0x0
0xffff9a800001dff0 0001 00000000 0x0 0x0
0xffff9a800001e068 0001 00000000 0x0 0x0
0xffff9a800001e0e0 0001 00000000 0x0 0x0
0xffff9a800001e158 0001 00000000 0x0 0x0
0xffff9a800001e1d0 0001 00000000 0x0 0x0
0xffff9a800001e248 0001 00000000 0x0 0x0
0xffff9a800001e2c0 0001 00000000 0x0 0x0
0xffff9a800001e338 0001 00000000 0x0 0x0
0xffff9a800001e3b0 0001 00000000 0x0 0x0
0xffff9a800001e428 0001 00000000 0x0 0x0
0xffff9a800001e4a0 0001 00000000 0x0 0x0
0xffff9a800001e518 0001 00000000 0x0 0x0
0xffff9a800001e590 0001 00000000 0x0 0x0
0xffff9a800001e608 0001 00000000 0x0 0x0
0xffff9a800001e680 0001 00000000 0x0 0x0
0xffff9a800001e6f8 0001 00000000 0x0 0x0
0xffff9a800001e770 0001 00000000 0x0 0x0
0xffff9a800001e7e8 0001 00000000 0x0 0x0
0xffff9a800001e860 0001 00000000 0x0 0x0
0xffff9a800001e8d8 0001 00000000 0x0 0x0
0xffff9a800001e950 0001 00000000 0x0 0x0
0xffff9a800001e9c8 0001 00000000 0x0 0x0
0xffff9a800001ea40 0001 00000000 0x0 0x0
0xffff9a800001eab8 0001 00000000 0x0 0x0
0xffff9a800001eb30 0001 00000000 0x0 0x0
0xffff9a800001eba8 0001 00000000 0x0 0x0
0xffff9a800001ec20 0001 00000000 0x0 0x0
0xffff9a800001ec98 0001 00000000 0x0 0x0
0xffff9a800001ed10 0041 00000000 0x0 0x0
0xffff9a800001ed88 0041 00000000 0x0 0x0
0xffff9a800001ee00 0041 00000000 0x0 0x0
0xffff9a800001ee78 0041 00000000 0x0 0x0
0xffff9a800001eef0 0041 00000000 0x0 0x0
0xffff9a800001ef68 0041 00000000 0x0 0x0
0xffff9a800001efe0 0041 00000000 0x0 0x0
0xffff9a800001f058 0041 00000000 0x0 0x0
0xffff9a800001f0d0 0041 00000000 0x0 0x0
0xffff9a800001f148 0041 00000000 0x0 0x0
0xffff9a800001f1c0 0041 00000000 0x0 0x0
0xffff9a800001f238 0041 00000000 0x0 0x0
0xffff9a800001f2b0 0041 00000000 0x0 0x0
0xffff9a800001f328 0041 00000000 0x0 0x0
0xffff9a800001f3a0 0041 00000000 0x0 0x0
0xffff9a800001f418 0041 00000000 0x0 0x0
0xffff9a800001f490 0041 00000000 0x0 0x0
0xffff9a800001f508 0041 00000000 0x0 0x0
0xffff9a800001f580 0041 00000000 0x0 0x0
0xffff9a800001f5f8 0041 00000000 0x0 0x0
0xffff9a800001f670 0041 00000000 0x0 0x0
0xffff9a800001f6e8 0041 00000000 0x0 0x0
0xffff9a800001f760 0041 00000000 0x0 0x0
0xffff9a800001f7d8 0041 00000000 0x0 0x0
0xffff9a800001f850 0041 00000000 0x0 0x0
0xffff9a800001f8c8 0041 00000000 0x0 0x0
0xffff9a800001f940 0041 00000000 0x0 0x0
0xffff9a800001f9b8 0041 00000000 0x0 0x0
0xffff9a800001fa30 0041 00000000 0x0 0x0
0xffff9a800001faa8 0041 00000000 0x0 0x0
0xffff9a800001fb20 0041 00000000 0x0 0x0
0xffff9a800001fb98 0041 00000000 0x0 0x0
0xffff9a800001fc10 0041 00000000 0x0 0x0
0xffff9a800001fc88 0041 00000000 0x0 0x0
0xffff9a800001fd00 0041 00000000 0x0 0x0
0xffff9a800001fd78 0041 00000000 0x0 0x0
0xffff9a800001fdf0 0041 00000000 0x0 0x0
0xffff9a800001fe68 0041 00000000 0x0 0x0
0xffff9a800001fee0 0041 00000000 0x0 0x0
0xffff9a800001ff58 0041 00000000 0x0 0x0
0xffff9a800001ffd0 0041 00000000 0x0 0x0
0xffff9a8000020048 0041 00000000 0x0 0x0
0xffff9a80000200c0 0041 00000000 0x0 0x0
0xffff9a8000020138 0041 00000000 0x0 0x0
0xffff9a80000201b0 0041 00000000 0x0 0x0
0xffff9a8000020228 0041 00000000 0x0 0x0
0xffff9a80000202a0 0041 00000000 0x0 0x0
0xffff9a8000020318 0041 00000000 0x0 0x0
0xffff9a8000020390 0041 00000000 0x0 0x0
0xffff9a8000020408 0041 00000000 0x0 0x0
0xffff9a8000020480 0001 00000000 0x0 0x0
0xffff9a80000204f8 0001 00000000 0x0 0x0
0xffff9a8000020570 0001 00000000 0x0 0x0
0xffff9a80000205e8 0001 00000000 0x0 0x0
0xffff9a8000020660 0001 00000000 0x0 0x0
0xffff9a80000206d8 0001 00000000 0x0 0x0
0xffff9a8000020750 0001 00000000 0x0 0x0
0xffff9a80000207c8 0001 00000000 0x0 0x0
0xffff9a8000020840 0001 00000000 0x0 0x0
0xffff9a80000208b8 0001 00000000 0x0 0x0
0xffff9a8000020930 0001 00000000 0x0 0x0
0xffff9a80000209a8 0001 00000000 0x0 0x0
0xffff9a8000020a20 0001 00000000 0x0 0x0
0xffff9a8000020a98 0001 00000000 0x0 0x0
0xffff9a8000020b10 0001 00000000 0x0 0x0
0xffff9a8000020b88 0001 00000000 0x0 0x0
0xffff9a8000020c00 0001 00000000 0x0 0x0
0xffff9a8000020c78 0001 00000000 0x0 0x0
0xffff9a8000020cf0 0001 00000000 0x0 0x0
0xffff9a8000020d68 0001 00000000 0x0 0x0
0xffff9a8000020de0 0001 00000000 0x0 0x0
0xffff9a8000020e58 0001 00000000 0x0 0x0
0xffff9a8000020ed0 0001 00000000 0x0 0x0
0xffff9a8000020f48 0001 00000000 0x0 0x0
0xffff9a8000020fc0 0001 00000000 0x0 0x0
0xffff9a8000021038 0001 00000000 0x0 0x0
0xffff9a80000210b0 0001 00000000 0x0 0x0
0xffff9a8000021128 0001 00000000 0x0 0x0
0xffff9a80000211a0 0001 00000000 0x0 0x0
0xffff9a8000021218 0001 00000000 0x0 0x0
0xffff9a8000021290 0001 00000000 0x0 0x0
0xffff9a8000021308 0001 00000000 0x0 0x0
0xffff9a8000021380 0001 00000000 0x0 0x0
0xffff9a80000213f8 0001 00000000 0x0 0x0
0xffff9a8000021470 0001 00000000 0x0 0x0
0xffff9a80000214e8 0001 00000000 0x0 0x0
0xffff9a8000021560 0001 00000000 0x0 0x0
0xffff9a80000215d8 0001 00000000 0x0 0x0
0xffff9a8000021650 0001 00000000 0x0 0x0
0xffff9a80000216c8 0001 00000000 0x0 0x0
0xffff9a8000021740 0001 00000000 0x0 0x0
0xffff9a80000217b8 0001 00000000 0x0 0x0
0xffff9a8000021830 0001 00000000 0x0 0x0
0xffff9a80000218a8 0001 00000000 0x0 0x0
0xffff9a8000021920 0001 00000000 0x0 0x0
0xffff9a8000021998 0001 00000000 0x0 0x0
0xffff9a8000021a10 0001 00000000 0x0 0x0
0xffff9a8000021a88 0001 00000000 0x0 0x0
0xffff9a8000021b00 0001 00000000 0x0 0x0
0xffff9a8000021b78 0001 00000000 0x0 0x0
0xffff9a8000021bf0 0001 00000000 0x0 0x0
0xffff9a8000021c68 0001 00000000 0x0 0x0
0xffff9a8000021ce0 0001 00000000 0x0 0x0
0xffff9a8000021d58 0001 00000000 0x0 0x0
0xffff9a8000021dd0 0041 00000000 0x0 0x0
0xffff9a8000021e48 0041 00000000 0x0 0x0
0xffff9a8000021ec0 0041 00000000 0x0 0x0
0xffff9a8000021f38 0041 00000000 0x0 0x0
0xffff9a8000021fb0 0041 00000000 0x0 0x0
0xffff9a8000022028 0041 00000000 0x0 0x0
0xffff9a80000220a0 0041 00000000 0x0 0x0
0xffff9a8000022118 0041 00000000 0x0 0x0
0xffff9a8000022190 0041 00000000 0x0 0x0
0xffff9a8000022208 0041 00000000 0x0 0x0
0xffff9a8000022280 0041 00000000 0x0 0x0
0xffff9a80000222f8 0041 00000000 0x0 0x0
0xffff9a8000022370 0041 00000000 0x0 0x0
0xffff9a80000223e8 0041 00000000 0x0 0x0
0xffff9a8000022460 0041 00000000 0x0 0x0
0xffff9a80000224d8 0041 00000000 0x0 0x0
0xffff9a8000022550 0041 00000000 0x0 0x0
0xffff9a80000225c8 0041 00000000 0x0 0x0
0xffff9a8000022640 0041 00000000 0x0 0x0
0xffff9a80000226b8 0041 00000000 0x0 0x0
0xffff9a8000022730 0041 00000000 0x0 0x0
0xffff9a80000227a8 0041 00000000 0x0 0x0
0xffff9a8000022820 0041 00000000 0x0 0x0
0xffff9a8000022898 0041 00000000 0x0 0x0
0xffff9a8000022910 0041 00000000 0x0 0x0
0xffff9a8000022988 0041 00000000 0x0 0x0
0xffff9a8000022a00 0041 00000000 0x0 0x0
0xffff9a8000022a78 0041 00000000 0x0 0x0
0xffff9a8000022af0 0041 00000000 0x0 0x0
0xffff9a8000022b68 0041 00000000 0x0 0x0
0xffff9a8000022be0 0041 00000000 0x0 0x0
0xffff9a8000022c58 0041 00000000 0x0 0x0
0xffff9a8000022cd0 0041 00000000 0x0 0x0
0xffff9a8000022d48 0041 00000000 0x0 0x0
0xffff9a8000022dc0 0041 00000000 0x0 0x0
0xffff9a8000022e38 0041 00000000 0x0 0x0
0xffff9a8000022eb0 0041 00000000 0x0 0x0
0xffff9a8000022f28 0041 00000000 0x0 0x0
0xffff9a8000022fa0 0041 00000000 0x0 0x0
0xffff9a8000023018 0041 00000000 0x0 0x0
0xffff9a8000023090 0041 00000000 0x0 0x0
0xffff9a8000023108 0041 00000000 0x0 0x0
0xffff9a8000023180 0041 00000000 0x0 0x0
0xffff9a80000231f8 0041 00000000 0x0 0x0
0xffff9a8000023270 0041 00000000 0x0 0x0
0xffff9a80000232e8 0041 00000000 0x0 0x0
0xffff9a8000023360 0041 00000000 0x0 0x0
0xffff9a80000233d8 0041 00000000 0x0 0x0
0xffff9a8000023450 0041 00000000 0x0 0x0
0xffff9a80000234c8 0041 00000000 0x0 0x0
0xffff9a8000023540 0041 00000000 0x0 0x0
0xffff9a80000235b8 0041 00000000 0x0 0x0
0xffff9a8000023630 0041 00000000 0x0 0x0
0xffff9a80000236a8 0041 00000000 0x0 0x0
0xffff9a8000023720 0041 00000000 0x0 0x0
0xffff9a8000023798 0041 00000000 0x0 0x0
0xffff9a8000023810 0041 00000000 0x0 0x0
0xffff9a8000023888 0041 00000000 0x0 0x0
0xffff9a8000023900 0041 00000000 0x0 0x0
0xffff9a8000023978 0041 00000000 0x0 0x0
0xffff9a80000239f0 0041 00000000 0x0 0x0
0xffff9a8000023a68 0041 00000000 0x0 0x0
0xffff9a8000023ae0 0041 00000000 0x0 0x0
0xffff9a8000023b58 0041 00000000 0x0 0x0
0xffff9a8000023bd0 0041 00000000 0x0 0x0
0xffff9a8000023c48 0041 00000000 0x0 0x0
0xffff9a8000023cc0 0041 00000000 0x0 0x0
0xffff9a8000023d38 0041 00000000 0x0 0x0
0xffff9a8000023db0 0041 00000000 0x0 0x0
0xffff9a8000023e28 0041 00000000 0x0 0x0
0xffff9a8000023ea0 0041 00000000 0x0 0x0
0xffff9a8000023f18 0041 00000000 0x0 0x0
0xffff9a8000023f90 0041 00000000 0x0 0x0
0xffff9a8000024008 0041 00000000 0x0 0x0
0xffff9a8000024080 0041 00000000 0x0 0x0
0xffff9a80000240f8 0041 00000000 0x0 0x0
0xffff9a8000024170 0041 00000000 0x0 0x0
0xffff9a80000241e8 0041 00000000 0x0 0x0
0xffff9a8000024260 0041 00000000 0x0 0x0
0xffff9a80000242d8 0041 00000000 0x0 0x0
0xffff9a8000024350 0041 00000000 0x0 0x0
0xffff9a80000243c8 0041 00000000 0x0 0x0
0xffff9a8000024440 0041 00000000 0x0 0x0
0xffff9a80000244b8 0041 00000000 0x0 0x0
0xffff9a8000024530 0041 00000000 0x0 0x0
0xffff9a80000245a8 0041 00000000 0x0 0x0
0xffff9a8000024620 0041 00000000 0x0 0x0
0xffff9a8000024698 0041 00000000 0x0 0x0
0xffff9a8000024710 0041 00000000 0x0 0x0
0xffff9a8000024788 0041 00000000 0x0 0x0
0xffff9a8000024800 0041 00000000 0x0 0x0
0xffff9a8000024878 0041 00000000 0x0 0x0
0xffff9a80000248f0 0041 00000000 0x0 0x0
0xffff9a8000024968 0041 00000000 0x0 0x0
0xffff9a80000249e0 0041 00000000 0x0 0x0
0xffff9a8000024a58 0041 00000000 0x0 0x0
0xffff9a8000024ad0 0041 00000000 0x0 0x0
0xffff9a8000024b48 0041 00000000 0x0 0x0
0xffff9a8000024bc0 0041 00000000 0x0 0x0
0xffff9a8000024c38 0041 00000000 0x0 0x0
0xffff9a8000024cb0 0041 00000000 0x0 0x0
0xffff9a8000024d28 0041 00000000 0x0 0x0
0xffff9a8000024da0 0041 00000000 0x0 0x0
0xffff9a8000024e18 0041 00000000 0x0 0x0
0xffff9a8000024e90 0041 00000000 0x0 0x0
0xffff9a8000024f08 0041 00000000 0x0 0x0
0xffff9a8000024f80 0041 00000000 0x0 0x0
0xffff9a8000024ff8 0041 00000000 0x0 0x0
0xffff9a8000025070 0041 00000000 0x0 0x0
0xffff9a80000250e8 0001 00000000 0x0 0x0
0xffff9a8000025160 0001 00000000 0x0 0x0
0xffff9a80000251d8 0001 00000000 0x0 0x0
0xffff9a8000025250 0001 00000000 0x0 0x0
0xffff9a80000252c8 0001 00000000 0x0 0x0
0xffff9a8000025340 0001 00000000 0x0 0x0
0xffff9a80000253b8 0001 00000000 0x0 0x0
0xffff9a8000025430 0001 00000000 0x0 0x0
0xffff9a80000254a8 0001 00000000 0x0 0x0
0xffff9a8000025520 0001 00000000 0x0 0x0
0xffff9a8000025598 0001 00000000 0x0 0x0
0xffff9a8000025610 0001 00000000 0x0 0x0
0xffff9a8000025688 0001 00000000 0x0 0x0
0xffff9a8000025700 0001 00000000 0x0 0x0
0xffff9a8000025778 0001 00000000 0x0 0x0
0xffff9a80000257f0 0001 00000000 0x0 0x0
0xffff9a8000025868 0001 00000000 0x0 0x0
0xffff9a80000258e0 0001 00000000 0x0 0x0
0xffff9a8000025958 0001 00000000 0x0 0x0
0xffff9a80000259d0 0001 00000000 0x0 0x0
0xffff9a8000025a48 0001 00000000 0x0 0x0
0xffff9a8000025ac0 0001 00000000 0x0 0x0
0xffff9a8000025b38 0001 00000000 0x0 0x0
0xffff9a8000025bb0 0001 00000000 0x0 0x0
0xffff9a8000025c28 0001 00000000 0x0 0x0
0xffff9a8000025ca0 0001 00000000 0x0 0x0
0xffff9a8000025d18 0001 00000000 0x0 0x0
0xffff9a8000025d90 0001 00000000 0x0 0x0
0xffff9a8000025e08 0001 00000000 0x0 0x0
0xffff9a8000025e80 0001 00000000 0x0 0x0
0xffff9a8000025ef8 0001 00000000 0x0 0x0
0xffff9a8000025f70 0001 00000000 0x0 0x0
0xffff9a8000025fe8 0001 00000000 0x0 0x0
0xffff9a8000026060 0001 00000000 0x0 0x0
0xffff9a80000260d8 0001 00000000 0x0 0x0
0xffff9a8000026150 0001 00000000 0x0 0x0
0xffff9a80000261c8 0001 00000000 0x0 0x0
0xffff9a8000026240 0001 00000000 0x0 0x0
0xffff9a80000262b8 0001 00000000 0x0 0x0
0xffff9a8000026330 0001 00000000 0x0 0x0
0xffff9a80000263a8 0001 00000000 0x0 0x0
0xffff9a8000026420 0001 00000000 0x0 0x0
0xffff9a8000026498 0001 00000000 0x0 0x0
0xffff9a8000026510 0001 00000000 0x0 0x0
0xffff9a8000026588 0001 00000000 0x0 0x0
0xffff9a8000026600 0001 00000000 0x0 0x0
0xffff9a8000026678 0001 00000000 0x0 0x0
0xffff9a80000266f0 0001 00000000 0x0 0x0
0xffff9a8000026768 0001 00000000 0x0 0x0
0xffff9a80000267e0 0001 00000000 0x0 0x0
0xffff9a8000026858 0001 00000000 0x0 0x0
0xffff9a80000268d0 0001 00000000 0x0 0x0
0xffff9a8000026948 0001 00000000 0x0 0x0
0xffff9a80000269c0 0001 00000000 0x0 0x0
0xffff9a8000026a38 0001 00000000 0x0 0x0
0xffff9a8000026ab0 0001 00000000 0x0 0x0
0xffff9a8000026b28 0001 00000000 0x0 0x0
0xffff9a8000026ba0 0001 00000000 0x0 0x0
0xffff9a8000026c18 0001 00000000 0x0 0x0
0xffff9a8000026c90 0001 00000000 0x0 0x0
0xffff9a8000026d08 0001 00000000 0x0 0x0
0xffff9a8000026d80 0001 00000000 0x0 0x0
0xffff9a8000026df8 0001 00000000 0x0 0x0
0xffff9a8000026e70 0001 00000000 0x0 0x0
0xffff9a8000026ee8 0001 00000000 0x0 0x0
0xffff9a8000026f60 0001 00000000 0x0 0x0
0xffff9a8000026fd8 0001 00000000 0x0 0x0
0xffff9a8000027050 0001 00000000 0x0 0x0
0xffff9a80000270c8 0001 00000000 0x0 0x0
0xffff9a8000027140 0001 00000000 0x0 0x0
0xffff9a80000271b8 0001 00000000 0x0 0x0
0xffff9a8000027230 0001 00000000 0x0 0x0
0xffff9a80000272a8 0001 00000000 0x0 0x0
0xffff9a8000027320 0001 00000000 0x0 0x0
0xffff9a8000027398 0001 00000000 0x0 0x0
0xffff9a8000027410 0001 00000000 0x0 0x0
0xffff9a8000027488 0001 00000000 0x0 0x0
0xffff9a8000027500 0001 00000000 0x0 0x0
0xffff9a8000027578 0001 00000000 0x0 0x0
0xffff9a80000275f0 0001 00000000 0x0 0x0
0xffff9a8000027668 0001 00000000 0x0 0x0
0xffff9a80000276e0 0001 00000000 0x0 0x0
0xffff9a8000027758 0001 00000000 0x0 0x0
0xffff9a80000277d0 0001 00000000 0x0 0x0
0xffff9a8000027848 0001 00000000 0x0 0x0
0xffff9a80000278c0 0001 00000000 0x0 0x0
0xffff9a8000027938 0001 00000000 0x0 0x0
0xffff9a80000279b0 0001 00000000 0x0 0x0
0xffff9a8000027a28 0001 00000000 0x0 0x0
0xffff9a8000027aa0 0001 00000000 0x0 0x0
0xffff9a8000027b18 0001 00000000 0x0 0x0
0xffff9a8000027b90 0001 00000000 0x0 0x0
0xffff9a8000027c08 0001 00000000 0x0 0x0
0xffff9a8000027c80 0001 00000000 0x0 0x0
0xffff9a8000027cf8 0001 00000000 0x0 0x0
0xffff9a8000027d70 0001 00000000 0x0 0x0
0xffff9a8000027de8 0001 00000000 0x0 0x0
0xffff9a8000027e60 0001 00000000 0x0 0x0
0xffff9a8000027ed8 0001 00000000 0x0 0x0
0xffff9a8000027f50 0001 00000000 0x0 0x0
0xffff9a8000027fc8 0001 00000000 0x0 0x0
0xffff9a8000028040 0001 00000000 0x0 0x0
0xffff9a80000280b8 0001 00000000 0x0 0x0
0xffff9a8000028130 0001 00000000 0x0 0x0
0xffff9a80000281a8 0001 00000000 0x0 0x0
0xffff9a8000028220 0001 00000000 0x0 0x0
0xffff9a8000028298 0001 00000000 0x0 0x0
0xffff9a8000028310 0001 00000000 0x0 0x0
0xffff9a8000028388 0001 00000000 0x0 0x0
0xffff9a8000028400 0001 00000000 0x0 0x0
0xffff9a8000028478 0001 00000000 0x0 0x0
0xffff9a80000284f0 0001 00000000 0x0 0x0
0xffff9a8000028568 0001 00000000 0x0 0x0
0xffff9a80000285e0 0001 00000000 0x0 0x0
0xffff9a8000028658 0001 00000000 0x0 0x0
0xffff9a80000286d0 0001 00000000 0x0 0x0
0xffff9a8000028748 0001 00000000 0x0 0x0
0xffff9a80000287c0 0001 00000000 0x0 0x0
0xffff9a8000028838 0001 00000000 0x0 0x0
0xffff9a80000288b0 0001 00000000 0x0

Reply all

Reply to author

Forward

0 new messages