protection fault in __asan_load8 (3)

4 views
Skip to first unread message

syzbot

unread,
Aug 14, 2022, 12:18:22 AM8/14/22
to syzkaller-...@googlegroups.com
Hello,

syzbot found the following issue on:

HEAD commit: 10849e7835aa pciconf: Skip callbacks for reserved ranges i..
git tree: netbsd
console output: https://syzkaller.appspot.com/x/log.txt?x=12dbfe0d080000
kernel config: https://syzkaller.appspot.com/x/.config?x=fab579639ba4bf0a
dashboard link: https://syzkaller.appspot.com/bug?extid=75d9dcbdbc78c74ae421
compiler: g++ (Debian 10.2.1-6) 10.2.1 20210110

Unfortunately, I don't have any reproducer for this issue yet.

IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+75d9dc...@syzkaller.appspotmail.com

[ 199.8880951] fatal protection fault in supervisor mode
[ 199.8880951] trap type 4 code 0 rip 0xffffffff81b910db cs 0x8 rflags 0x10202 cr2 0x71a5329a2ec0 ilevel 0x8 rsp 0xffffd002518802b0
[ 199.8880951] curlwp 0xffffd00012d5db80 pid 10702.5864 lowest kstack 0xffffd002518792c0
kernel: protection fault trap, code=0
Stopped in pid 10702.5864 (syz-executor.3) at netbsd:__asan_load8+0x6c: movzbl 0(%rax),%r8d
?
__asan_load8() at netbsd:__asan_load8+0x6c kasan_shadow_1byte_isvalid sys/kern/subr_asan.c:310 [inline]
__asan_load8() at netbsd:__asan_load8+0x6c kasan_shadow_2byte_isvalid sys/kern/subr_asan.c:323 [inline]
__asan_load8() at netbsd:__asan_load8+0x6c kasan_shadow_4byte_isvalid sys/kern/subr_asan.c:343 [inline]
__asan_load8() at netbsd:__asan_load8+0x6c kasan_shadow_8byte_isvalid sys/kern/subr_asan.c:363 [inline]
__asan_load8() at netbsd:__asan_load8+0x6c kasan_shadow_check sys/kern/subr_asan.c:420 [inline]
__asan_load8() at netbsd:__asan_load8+0x6c sys/kern/subr_asan.c:1207
pmap_check_pv.constprop.0() at netbsd:pmap_check_pv.constprop.0+0x158
pmap_enter_ma() at netbsd:pmap_enter_ma+0xf5d pmap_enter_pv sys/arch/x86/x86/pmap.c:2294 [inline]
pmap_enter_ma() at netbsd:pmap_enter_ma+0xf5d sys/arch/x86/x86/pmap.c:4937
pmap_enter_default() at netbsd:pmap_enter_default+0x62 sys/arch/x86/x86/pmap.c:4820
udv_fault() at netbsd:udv_fault+0x1e0 sys/uvm/uvm_device.c:453
uvm_fault_internal() at netbsd:uvm_fault_internal+0xe55 sys/uvm/uvm_fault.c:917
uvm_fault_wire() at netbsd:uvm_fault_wire+0xac sys/uvm/uvm_fault.c:2629
uvm_map_pageable() at netbsd:uvm_map_pageable+0x491 sys/uvm/uvm_map.c:3562
uvm_mmap.part.0() at netbsd:uvm_mmap.part.0+0x429
sys_mmap() at netbsd:sys_mmap+0xd11 uvm_mmap sys/uvm/uvm_mmap.c:875 [inline]
sys_mmap() at netbsd:sys_mmap+0xd11 sys/uvm/uvm_mmap.c:425
sys___syscall() at netbsd:sys___syscall+0x10e sy_call sys/sys/syscallvar.h:65 [inline]
sys___syscall() at netbsd:sys___syscall+0x10e sys/kern/sys_syscall.c:90
syscall() at netbsd:syscall+0x25a sy_call sys/sys/syscallvar.h:65 [inline]
syscall() at netbsd:syscall+0x25a sy_invoke sys/sys/syscallvar.h:94 [inline]
syscall() at netbsd:syscall+0x25a sys/arch/x86/x86/syscall.c:138
--- syscall (number 197 via SYS_syscall) ---
netbsd:syscall+0x25a:
Panic string: (null)
PID LID S CPU FLAGS STRUCT LWP * NAME WAIT
5775 5775 2 1 0 ffffd00013426700 syz-executor.2
5600 11495 2 0 0 ffffd0001405a580 syz-executor.1
5600 5766 2 0 0 ffffd0001337e140 syz-executor.1
5600 >5600 7 1 10000000 ffffd00012daa900 syz-executor.1
11576 11576 2 0 0 ffffd00013338500 syz-executor.0
5763 5763 2 0 0 ffffd00012daa4c0 syz-executor.5
5784 6453 2 0 0 ffffd000126da340 syz-executor.4
5784 10825 3 0 180 ffffd00012c8f040 syz-executor.4 parked
5784 5784 2 1 10040000 ffffd00012c74bc0 syz-executor.4
10702>5864 7 0 40100 ffffd00012d5db80 syz-executor.3
10702 10702 2 0 10040000 ffffd00013e8d700 syz-executor.3
982 982 3 0 180 ffffd00013df9ac0 syz-executor.5 nanoslp
1221 1221 3 1 180 ffffd00013df9240 syz-executor.3 nanoslp
942 942 3 0 180 ffffd00013dd6640 syz-executor.2 nanoslp
972 972 3 1 180 ffffd00013dd6200 syz-executor.4 nanoslp
422 422 3 1 180 ffffd00013ce0600 syz-executor.1 nanoslp
1224 1224 3 0 180 ffffd00012ab4900 syz-executor.0 nanoslp
1113 3645 3 0 180 ffffd00012a75480 syz-fuzzer parked
1113 1196 3 1 180 ffffd00012b1a500 syz-fuzzer parked
1113 1103 3 1 180 ffffd00013e37280 syz-fuzzer kqueue
1113 1130 3 0 180 ffffd00013df9680 syz-fuzzer wait
1113 1227 3 1 180 ffffd00013dd6a80 syz-fuzzer parked
1113 1086 3 0 180 ffffd00013ce0a40 syz-fuzzer wait
1113 1075 3 0 180 ffffd00013ce01c0 syz-fuzzer wait
1113 1078 3 1 180 ffffd00013cd15c0 syz-fuzzer wait
1113 1222 3 1 180 ffffd00013cd1180 syz-fuzzer parked
1113 1223 3 0 1c0 ffffd0001348e9c0 syz-fuzzer wait
1113 1151 3 1 180 ffffd0001348e580 syz-fuzzer parked
1113 1054 3 0 180 ffffd000126d8b80 syz-fuzzer wait
1113 733 3 1 180 ffffd000126d8300 syz-fuzzer parked
1113 1113 3 1 180 ffffd00012a75040 syz-fuzzer parked
1084 1084 3 0 180 ffffd00013392180 sshd select
1069 1069 3 0 180 ffffd000133b9a80 getty nanoslp
1128 1128 3 0 180 ffffd000133b9640 getty nanoslp
1074 1074 3 0 180 ffffd000133e3280 getty nanoslp
1259 1259 3 0 1c0 ffffd000126db040 getty ttyraw
1092 1092 3 1 180 ffffd000133ac600 sshd select
949 949 3 1 180 ffffd00012d29700 powerd kqueue
689 689 3 1 180 ffffd000133e3b00 syslogd kqueue
602 602 3 0 180 ffffd00012c40700 dhcpcd poll
547 547 3 1 180 ffffd00012c9b900 dhcpcd poll
546 546 3 0 180 ffffd00012c67b80 dhcpcd poll
589 589 3 1 180 ffffd00012c74340 dhcpcd poll
289 289 3 0 180 ffffd00012daa080 dhcpcd poll
288 288 3 0 180 ffffd00012d938c0 dhcpcd poll
351 351 3 1 180 ffffd00012d93480 dhcpcd poll
1 1 3 0 180 ffffd000128569c0 init wait
0 1955 3 1 200 ffffd00013e8db40 ktrace ktrwait
0 1429 5 1 200 ffffd0001345f940 (zombie)
0 745 3 0 200 ffffd00012977ac0 physiod physiod
0 194 3 0 200 ffffd0001298db00 pooldrain pooldrain
0 193 3 1 200 ffffd0001298d6c0 ioflush syncer
0 192 3 1 200 ffffd0001298d280 pgdaemon pgdaemon
0 169 3 1 200 ffffd00012977240 usb7 usbevt
0 167 3 0 200 ffffd0001292fa80 usb6 usbevt
0 165 3 0 200 ffffd0001292f640 usb5 usbevt
0 164 3 0 200 ffffd0001292f200 usb4 usbevt
0 31 3 0 200 ffffd000128e3a40 usb3 usbevt
0 63 3 1 200 ffffd000128e3600 usb2 usbevt
0 126 3 1 200 ffffd000128e31c0 usb1 usbevt
0 125 3 0 200 ffffd00012874a00 usb0 usbevt
0 124 3 1 200 ffffd000128745c0 usbtask-dr usbtsk
0 123 3 1 200 ffffd000120b86c0 usbtask-hc usbtsk
0 122 3 1 200 ffffd00012874180 npfgc0 npfgcw
0 121 3 1 200 ffffd00012856580 rt_free rt_free
0 120 3 1 200 ffffd00012856140 unpgc unpgc
0 119 3 0 200 ffffd0001270a980 key_timehandler key_timehandler
0 118 3 1 200 ffffd0001270a540 icmp6_wqinput/1 icmp6_wqinput
0 117 3 0 200 ffffd0001270a100 icmp6_wqinput/0 icmp6_wqinput
0 116 3 0 200 ffffd000126fe940 nd6_timer nd6_timer
0 115 3 1 200 ffffd000126fe500 carp6_wqinput/1 carp6_wqinput
0 114 3 0 200 ffffd000126fe0c0 carp6_wqinput/0 carp6_wqinput
0 113 3 1 200 ffffd000126f0900 carp_wqinput/1 carp_wqinput
0 112 3 0 200 ffffd000126f04c0 carp_wqinput/0 carp_wqinput
0 111 3 1 200 ffffd000126f0080 icmp_wqinput/1 icmp_wqinput
0 110 3 0 200 ffffd000126db8c0 icmp_wqinput/0 icmp_wqinput
0 109 3 0 200 ffffd000126db480 rt_timer rt_timer
0 108 3 0 200 ffffd000126dabc0 vmem_rehash vmem_rehash
0 99 3 0 200 ffffd000120bcb40 entbutler entropy
0 98 3 1 200 ffffd000120bc700 viomb balloon
0 97 3 1 200 ffffd000120bc2c0 vioif0_txrx/1 vioif0_txrx
0 96 3 0 200 ffffd000120b8b00 vioif0_txrx/0 vioif0_txrx
0 29 3 0 200 ffffd000120b8280 scsibus0 sccomp
0 28 3 0 200 ffffd00010cbcac0 pms0 pmsreset
0 27 3 1 200 ffffd00010cbc680 xcall/1 xcall
0 26 1 1 200 ffffd00010cbc240 softser/1
0 25 1 1 200 ffffd00010cbaa80 softclk/1
0 24 1 1 200 ffffd00010cba640 softbio/1
0 23 1 1 200 ffffd00010cba200 softnet/1
0 22 1 1 201 ffffd0000fb57a40 idle/1
0 21 3 0 200 ffffd0000fb57600 lnxsyswq lnxsyswq
0 20 3 0 200 ffffd0000fb571c0 lnxubdwq lnxubdwq
0 19 3 0 200 ffffd0000fb56a00 lnxpwrwq lnxpwrwq
0 18 3 0 200 ffffd0000fb565c0 lnxlngwq lnxlngwq
0 17 3 0 200 ffffd0000fb56180 lnxhipwq lnxhipwq
0 16 3 0 200 ffffd0000fb4f9c0 lnxrcugc lnxrcugc
0 15 3 0 200 ffffd0000fb4f580 sysmon smtaskq
0 14 3 0 200 ffffd0000fb4f140 pmfsuspend pmfsuspend
0 13 3 0 200 ffffd0000fb4a980 pmfevent pmfevent
0 12 3 0 200 ffffd0000fb4a540 sopendfree sopendfr
0 11 3 0 200 ffffd0000fb4a100 iflnkst iflnkst
0 10 3 0 200 ffffd0000fb3d940 nfssilly nfssilly
0 9 3 0 200 ffffd0000fb3d500 vdrain vdrain
0 8 3 1 200 ffffd0000fb3d0c0 modunload mod_unld
0 7 3 0 200 ffffd0000fb34900 xcall/0 xcall
0 6 1 0 200 ffffd0000fb344c0 softser/0
0 5 1 0 200 ffffd0000fb34080 softclk/0
0 4 1 0 200 ffffd0000fb328c0 softbio/0
0 3 1 0 200 ffffd0000fb32480 softnet/0
0 2 1 0 201 ffffd0000fb32040 idle/0
0 0 3 0 200 ffffffff83343980 swapper uvm
[Locks tracked through LWPs]

****** LWP 11576.11576 (syz-executor.0) @ 0xffffd00013338500, l_stat=2

*** Locks held:

* Lock 0 (initialized at amap_ctor)
lock address : 0xffffd00013cdea80 type : sleep/adaptive
initialized : 0xffffffff81a5befb
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffffd00013338500 last held: 0xffffd00013338500
last locked* : 0xffffffff81a6cbd4 unlocked : 0xffffffff81a5e3a4
owner/count : 0xffffd00013338500 flags : 0x0000000000000004
Turnstile: no active turnstile for this lock.

*** Locks wanted:

* Lock 0 (initialized at pmap_ctor)
lock address : 0xffffd00012863580 type : sleep/adaptive
initialized : 0xffffffff80957279
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 1
relevant cpu : 0 last held: 0
relevant lwp : 0xffffd00013338500 last held: 000000000000000000
last locked : 0xffffffff809590ac unlocked*: 0xffffffff80959ac0
owner field : 0xffffd00013338500 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 5763.5763 (syz-executor.5) @ 0xffffd00012daa4c0, l_stat=2

*** Locks held:

* Lock 0 (initialized at amap_ctor)
lock address : 0xffffd00013df6a80 type : sleep/adaptive
initialized : 0xffffffff81a5befb
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffffd00012daa4c0 last held: 0xffffd00012daa4c0
last locked* : 0xffffffff81a6cbd4 unlocked : 0xffffffff81a6a616
owner/count : 0xffffd00012daa4c0 flags : 0x0000000000000004
Turnstile: no active turnstile for this lock.

*** Locks wanted: none

****** LWP 5784.6453 (syz-executor.4) @ 0xffffd000126da340, l_stat=2

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at lwp_ctl_alloc)
lock address : 0xffffd00012d15580 type : sleep/adaptive
initialized : 0xffffffff81b13035
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 1
relevant cpu : 0 last held: 1
relevant lwp : 0xffffd000126da340 last held: 000000000000000000
last locked : 0xffffffff81b129a1 unlocked*: 0xffffffff81b12b31
owner field : 0xffffd000126da340 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 10702.5864 (syz-executor.3) @ 0xffffd00012d5db80, l_stat=7

*** Locks held:

* Lock 0 (initialized at uvm_obj_init)
lock address : 0xffffd000140de880 type : sleep/adaptive
initialized : 0xffffffff81a8fcca
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffffd00012d5db80 last held: 0xffffd00012d5db80
last locked* : 0xffffffff81a6d11c unlocked : 0xffffffff81a6990d
owner/count : 0xffffd00012d5db80 flags : 0x0000000000000004
Turnstile: no active turnstile for this lock.

* Lock 1 (initialized at pmap_ctor)
lock address : 0xffffd00013497980 type : sleep/adaptive
initialized : 0xffffffff80957279
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffffd00012d5db80 last held: 0xffffd00012d5db80
last locked* : 0xffffffff809590ac unlocked : 0xffffffff80959ac0
owner field : 0xffffd00012d5db80 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

*** Locks wanted: none

****** LWP 547.547 (dhcpcd) @ 0xffffd00012c9b900, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at module_hook_init)
lock address : 0xffffffff834830c0 type : sleep/adaptive
initialized : 0xffffffff81b1dd41
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 0
relevant lwp : 0xffffd00012c9b900 last held: 000000000000000000
last locked : 000000000000000000 unlocked*: 000000000000000000
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 546.546 (dhcpcd) @ 0xffffd00012c67b80, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at module_hook_init)
lock address : 0xffffffff834830c0 type : sleep/adaptive
initialized : 0xffffffff81b1dd41
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffffd00012c67b80 last held: 000000000000000000
last locked : 000000000000000000 unlocked*: 000000000000000000
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 288.288 (dhcpcd) @ 0xffffd00012d938c0, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at module_hook_init)
lock address : 0xffffffff834830c0 type : sleep/adaptive
initialized : 0xffffffff81b1dd41
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffffd00012d938c0 last held: 000000000000000000
last locked : 000000000000000000 unlocked*: 000000000000000000
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 351.351 (dhcpcd) @ 0xffffd00012d93480, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at module_hook_init)
lock address : 0xffffffff834830c0 type : sleep/adaptive
initialized : 0xffffffff81b1dd41
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 0
relevant lwp : 0xffffd00012d93480 last held: 000000000000000000
last locked : 000000000000000000 unlocked*: 000000000000000000
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 0.11 (iflnkst) @ 0xffffd0000fb4a100, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at module_hook_init)
lock address : 0xffffffff834830c0 type : sleep/adaptive
initialized : 0xffffffff81b1dd41
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffffd0000fb4a100 last held: 000000000000000000
last locked : 000000000000000000 unlocked*: 000000000000000000
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 0.5 (softclk/0) @ 0xffffd0000fb34080, l_stat=1

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at module_hook_init)
lock address : 0xffffffff834830c0 type : sleep/adaptive
initialized : 0xffffffff81b1dd41
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffffd0000fb34080 last held: 000000000000000000
last locked : 000000000000000000 unlocked*: 000000000000000000
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 0.0 (swapper) @ 0xffffffff83343980, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at module_hook_init)
lock address : 0xffffffff834830c0 type : sleep/adaptive
initialized : 0xffffffff81b1dd41
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffffffff83343980 last held: 000000000000000000
last locked : 000000000000000000 unlocked*: 000000000000000000
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

[Locks tracked through CPUs]

PAGE FLAG PQ UOBJECT UANON
0xffffd00000017180 0041 00000000 0x0 0x0
0xffffd00000017200 0041 00000000 0x0 0x0
0xffffd00000017280 0041 00000000 0x0 0x0
0xffffd00000017300 0041 00000000 0x0 0x0
0xffffd00000017380 0041 00000000 0x0 0x0
0xffffd00000017400 0041 00000000 0x0 0x0
0xffffd00000017480 0041 00000000 0x0 0x0
0xffffd00000017500 0041 00000000 0x0 0x0
0xffffd00000017580 0041 00000000 0x0 0x0
0xffffd00000017600 0041 00000000 0x0 0x0
0xffffd00000017680 0041 00000000 0x0 0x0
0xffffd00000017700 0041 00000000 0x0 0x0
0xffffd00000017780 0041 00000000 0x0 0x0
0xffffd00000017800 0041 00000000 0x0 0x0
0xffffd00000017880 0041 00000000 0x0 0x0
0xffffd00000017900 0041 00000000 0x0 0x0
0xffffd00000017980 0041 00000000 0x0 0x0
0xffffd00000017a00 0041 00000000 0x0 0x0
0xffffd00000017a80 0041 00000000 0x0 0x0
0xffffd00000017b00 0041 00000000 0x0 0x0
0xffffd00000017b80 0041 00000000 0x0 0x0
0xffffd00000017c00 0041 00000000 0x0 0x0
0xffffd00000017c80 0041 00000000 0x0 0x0
0xffffd00000017d00 0041 00000000 0x0 0x0
0xffffd00000017d80 0041 00000000 0x0 0x0
0xffffd00000017e00 0041 00000000 0x0 0x0
0xffffd00000017e80 0041 00000000 0x0 0x0
0xffffd00000017f00 0041 00000000 0x0 0x0
0xffffd00000017f80 0041 00000000 0x0 0x0
0xffffd00000018000 0041 00000000 0x0 0x0
0xffffd00000018080 0041 00000000 0x0 0x0
0xffffd00000018100 0041 00000000 0x0 0x0
0xffffd00000018180 0041 00000000 0x0 0x0
0xffffd00000018200 0041 00000000 0x0 0x0
0xffffd00000018280 0041 00000000 0x0 0x0
0xffffd00000018300 0041 00000000 0x0 0x0
0xffffd00000018380 0041 00000000 0x0 0x0
0xffffd00000018400 0041 00000000 0x0 0x0
0xffffd00000018480 0041 00000000 0x0 0x0
0xffffd00000018500 0041 00000000 0x0 0x0
0xffffd00000018580 0041 00000000 0x0 0x0
0xffffd00000018600 0041 00000000 0x0 0x0
0xffffd00000018680 0041 00000000 0x0 0x0
0xffffd00000018700 0041 00000000 0x0 0x0
0xffffd00000018780 0041 00000000 0x0 0x0
0xffffd00000018800 0041 00000000 0x0 0x0
0xffffd00000018880 0041 00000000 0x0 0x0
0xffffd00000018900 0041 00000000 0x0 0x0
0xffffd00000018980 0041 00000000 0x0 0x0
0xffffd00000018a00 0041 00000000 0x0 0x0
0xffffd00000018a80 0041 00000000 0x0 0x0
0xffffd00000018b00 0041 00000000 0x0 0x0
0xffffd00000018b80 0041 00000000 0x0 0x0
0xffffd00000018c00 0041 00000000 0x0 0x0
0xffffd00000018c80 0041 00000000 0x0 0x0
0xffffd00000018d00 0041 00000000 0x0 0x0
0xffffd00000018d80 0041 00000000 0x0 0x0
0xffffd00000018e00 0041 00000000 0x0 0x0
0xffffd00000018e80 0041 00000000 0x0 0x0
0xffffd00000018f00 0041 00000000 0x0 0x0
0xffffd00000018f80 0041 00000000 0x0 0x0
0xffffd00000019000 0041 00000000 0x0 0x0
0xffffd00000019080 0041 00000000 0x0 0x0
0xffffd00000019100 0041 00000000 0x0 0x0
0xffffd00000019180 0041 00000000 0x0 0x0
0xffffd00000019200 0041 00000000 0x0 0x0
0xffffd00000019280 0041 00000000 0x0 0x0
0xffffd00000019300 0041 00000000 0x0 0x0
0xffffd00000019380 0041 00000000 0x0 0x0
0xffffd00000019400 0041 00000000 0x0 0x0
0xffffd00000019480 0041 00000000 0x0 0x0
0xffffd00000019500 0041 00000000 0x0 0x0
0xffffd00000019580 0041 00000000 0x0 0x0
0xffffd00000019600 0041 00000000 0x0 0x0
0xffffd00000019680 0041 00000000 0x0 0x0
0xffffd00000019700 0041 00000000 0x0 0x0
0xffffd00000019780 0041 00000000 0x0 0x0
0xffffd00000019800 0041 00000000 0x0 0x0
0xffffd00000019880 0041 00000000 0x0 0x0
0xffffd00000019900 0041 00000000 0x0 0x0
0xffffd00000019980 0041 00000000 0x0 0x0
0xffffd00000019a00 0041 00000000 0x0 0x0
0xffffd00000019a80 0041 00000000 0x0 0x0
0xffffd00000019b00 0041 00000000 0x0 0x0
0xffffd00000019b80 0041 00000000 0x0 0x0
0xffffd00000019c00 0041 00000000 0x0 0x0
0xffffd00000019c80 0041 00000000 0x0 0x0
0xffffd00000019d00 0041 00000000 0x0 0x0
0xffffd00000019d80 0041 00000000 0x0 0x0
0xffffd00000019e00 0041 00000000 0x0 0x0
0xffffd00000019e80 0041 00000000 0x0 0x0
0xffffd00000019f00 0041 00000000 0x0 0x0
0xffffd00000019f80 0041 00000000 0x0 0x0
0xffffd0000001a000 0041 00000000 0x0 0x0
0xffffd0000001a080 0041 00000000 0x0 0x0
0xffffd0000001a100 0041 00000000 0x0 0x0
0xffffd0000001a180 0041 00000000 0x0 0x0
0xffffd0000001a200 0041 00000000 0x0 0x0
0xffffd0000001a280 0041 00000000 0x0 0x0
0xffffd0000001a300 0041 00000000 0x0 0x0
0xffffd0000001a380 0041 00000000 0x0 0x0
0xffffd0000001a400 0041 00000000 0x0 0x0
0xffffd0000001a480 0041 00000000 0x0 0x0
0xffffd0000001a500 0041 00000000 0x0 0x0
0xffffd0000001a580 0041 00000000 0x0 0x0
0xffffd0000001a600 0041 00000000 0x0 0x0
0xffffd0000001a680 0041 00000000 0x0 0x0
0xffffd0000001a700 0041 00000000 0x0 0x0
0xffffd0000001a780 0041 00000000 0x0 0x0
0xffffd0000001a800 0041 00000000 0x0 0x0
0xffffd0000001a880 0041 00000000 0x0 0x0
0xffffd0000001a900 0041 00000000 0x0 0x0
0xffffd0000001a980 0041 00000000 0x0 0x0
0xffffd0000001aa00 0041 00000000 0x0 0x0
0xffffd0000001aa80 0041 00000000 0x0 0x0
0xffffd0000001ab00 0041 00000000 0x0 0x0
0xffffd0000001ab80 0041 00000000 0x0 0x0
0xffffd0000001ac00 0041 00000000 0x0 0x0
0xffffd0000001ac80 0041 00000000 0x0 0x0
0xffffd0000001ad00 0041 00000000 0x0 0x0
0xffffd0000001ad80 0041 00000000 0x0 0x0
0xffffd0000001ae00 0041 00000000 0x0 0x0
0xffffd0000001ae80 0041 00000000 0x0 0x0
0xffffd0000001af00 0041 00000000 0x0 0x0
0xffffd0000001af80 0041 00000000 0x0 0x0
0xffffd0000001b000 0041 00000000 0x0 0x0
0xffffd0000001b080 0041 00000000 0x0 0x0
0xffffd0000001b100 0041 00000000 0x0 0x0
0xffffd0000001b180 0041 00000000 0x0 0x0
0xffffd0000001b200 0041 00000000 0x0 0x0
0xffffd0000001b280 0041 00000000 0x0 0x0
0xffffd0000001b300 0041 00000000 0x0 0x0
0xffffd0000001b380 0041 00000000 0x0 0x0
0xffffd0000001b400 0041 00000000 0x0 0x0
0xffffd0000001b480 0041 00000000 0x0 0x0
0xffffd0000001b500 0041 00000000 0x0 0x0
0xffffd0000001b580 0041 00000000 0x0 0x0
0xffffd0000001b600 0041 00000000 0x0 0x0
0xffffd0000001b680 0041 00000000 0x0 0x0
0xffffd0000001b700 0041 00000000 0x0 0x0
0xffffd0000001b780 0041 00000000 0x0 0x0
0xffffd0000001b800 0041 00000000 0x0 0x0
0xffffd0000001b880 0041 00000000 0x0 0x0
0xffffd0000001b900 0041 00000000 0x0 0x0
0xffffd0000001b980 0041 00000000 0x0 0x0
0xffffd0000001ba00 0041 00000000 0x0 0x0
0xffffd0000001ba80 0001 00000000 0x0 0x0
0xffffd0000001bb00 0001 00000000 0x0 0x0
0xffffd0000001bb80 0001 00000000 0x0 0x0
0xffffd0000001bc00 0001 00000000 0x0 0x0
0xffffd0000001bc80 0001 00000000 0x0 0x0
0xffffd0000001bd00 0001 00000000 0x0 0x0
0xffffd0000001bd80 0001 00000000 0x0 0x0
0xffffd0000001be00 0001 00000000 0x0 0x0
0xffffd0000001be80 0001 00000000 0x0 0x0
0xffffd0000001bf00 0001 00000000 0x0 0x0
0xffffd0000001bf80 0001 00000000 0x0 0x0
0xffffd0000001c000 0001 00000000 0x0 0x0
0xffffd0000001c080 0001 00000000 0x0 0x0
0xffffd0000001c100 0001 00000000 0x0 0x0
0xffffd0000001c180 0001 00000000 0x0 0x0
0xffffd0000001c200 0001 00000000 0x0 0x0
0xffffd0000001c280 0001 00000000 0x0 0x0
0xffffd0000001c300 0001 00000000 0x0 0x0
0xffffd0000001c380 0001 00000000 0x0 0x0
0xffffd0000001c400 0001 00000000 0x0 0x0
0xffffd0000001c480 0001 00000000 0x0 0x0
0xffffd0000001c500 0001 00000000 0x0 0x0
0xffffd0000001c580 0001 00000000 0x0 0x0
0xffffd0000001c600 0001 00000000 0x0 0x0
0xffffd0000001c680 0001 00000000 0x0 0x0
0xffffd0000001c700 0001 00000000 0x0 0x0
0xffffd0000001c780 0001 00000000 0x0 0x0
0xffffd0000001c800 0001 00000000 0x0 0x0
0xffffd0000001c880 0001 00000000 0x0 0x0
0xffffd0000001c900 0001 00000000 0x0 0x0
0xffffd0000001c980 0001 00000000 0x0 0x0
0xffffd0000001ca00 0001 00000000 0x0 0x0
0xffffd0000001ca80 0001 00000000 0x0 0x0
0xffffd0000001cb00 0001 00000000 0x0 0x0
0xffffd0000001cb80 0001 00000000 0x0 0x0
0xffffd0000001cc00 0001 00000000 0x0 0x0
0xffffd0000001cc80 0001 00000000 0x0 0x0
0xffffd0000001cd00 0001 00000000 0x0 0x0
0xffffd0000001cd80 0001 00000000 0x0 0x0
0xffffd0000001ce00 0001 00000000 0x0 0x0
0xffffd0000001ce80 0001 00000000 0x0 0x0
0xffffd0000001cf00 0001 00000000 0x0 0x0
0xffffd0000001cf80 0001 00000000 0x0 0x0
0xffffd0000001d000 0001 00000000 0x0 0x0
0xffffd0000001d080 0001 00000000 0x0 0x0
0xffffd0000001d100 0001 00000000 0x0 0x0
0xffffd0000001d180 0001 00000000 0x0 0x0
0xffffd0000001d200 0001 00000000 0x0 0x0
0xffffd0000001d280 0001 00000000 0x0 0x0
0xffffd0000001d300 0001 00000000 0x0 0x0
0xffffd0000001d380 0001 00000000 0x0 0x0
0xffffd0000001d400 0001 00000000 0x0 0x0
0xffffd0000001d480 0001 00000000 0x0 0x0
0xffffd0000001d500 0001 00000000 0x0 0x0
0xffffd0000001d580 0001 00000000 0x0 0x0
0xffffd0000001d600 0001 00000000 0x0 0x0
0xffffd0000001d680 0001 00000000 0x0 0x0
0xffffd0000001d700 0001 00000000 0x0 0x0
0xffffd0000001d780 0001 00000000 0x0 0x0
0xffffd0000001d800 0001 00000000 0x0 0x0
0xffffd0000001d880 0001 00000000 0x0 0x0
0xffffd0000001d900 0001 00000000 0x0 0x0
0xffffd0000001d980 0001 00000000 0x0 0x0
0xffffd0000001da00 0001 00000000 0x0 0x0
0xffffd0000001da80 0001 00000000 0x0 0x0
0xffffd0000001db00 0001 00000000 0x0 0x0
0xffffd0000001db80 0001 00000000 0x0 0x0
0xffffd0000001dc00 0001 00000000 0x0 0x0
0xffffd0000001dc80 0001 00000000 0x0 0x0
0xffffd0000001dd00 0001 00000000 0x0 0x0
0xffffd0000001dd80 0001 00000000 0x0 0x0
0xffffd0000001de00 0001 00000000 0x0 0x0
0xffffd0000001de80 0001 00000000 0x0 0x0
0xffffd0000001df00 0001 00000000 0x0 0x0
0xffffd0000001df80 0001 00000000 0x0 0x0
0xffffd0000001e000 0001 00000000 0x0 0x0
0xffffd0000001e080 0001 00000000 0x0 0x0
0xffffd0000001e100 0001 00000000 0x0 0x0
0xffffd0000001e180 0001 00000000 0x0 0x0
0xffffd0000001e200 0001 00000000 0x0 0x0
0xffffd0000001e280 0001 00000000 0x0 0x0
0xffffd0000001e300 0001 00000000 0x0 0x0
0xffffd0000001e380 0001 00000000 0x0 0x0
0xffffd0000001e400 0001 00000000 0x0 0x0
0xffffd0000001e480 0001 00000000 0x0 0x0
0xffffd0000001e500 0001 00000000 0x0 0x0
0xffffd0000001e580 0001 00000000 0x0 0x0
0xffffd0000001e600 0001 00000000 0x0 0x0
0xffffd0000001e680 0001 00000000 0x0 0x0
0xffffd0000001e700 0001 00000000 0x0 0x0
0xffffd0000001e780 0001 00000000 0x0 0x0
0xffffd0000001e800 0001 00000000 0x0 0x0
0xffffd0000001e880 0001 00000000 0x0 0x0
0xffffd0000001e900 0001 00000000 0x0 0x0
0xffffd0000001e980 0001 00000000 0x0 0x0
0xffffd0000001ea00 0001 00000000 0x0 0x0
0xffffd0000001ea80 0001 00000000 0x0 0x0
0xffffd0000001eb00 0001 00000000 0x0 0x0
0xffffd0000001eb80 0001 00000000 0x0 0x0
0xffffd0000001ec00 0001 00000000 0x0 0x0
0xffffd0000001ec80 0001 00000000 0x0 0x0
0xffffd0000001ed00 0001 00000000 0x0 0x0
0xffffd0000001ed80 0001 00000000 0x0 0x0
0xffffd0000001ee00 0001 00000000 0x0 0x0
0xffffd0000001ee80 0001 00000000 0x0 0x0
0xffffd0000001ef00 0001 00000000 0x0 0x0
0xffffd0000001ef80 0001 00000000 0x0 0x0
0xffffd0000001f000 0001 00000000 0x0 0x0
0xffffd0000001f080 0001 00000000 0x0 0x0
0xffffd0000001f100 0001 00000000 0x0 0x0
0xffffd0000001f180 0001 00000000 0x0 0x0
0xffffd0000001f200 0001 00000000 0x0 0x0
0xffffd0000001f280 0001 00000000 0x0 0x0
0xffffd0000001f300 0001 00000000 0x0 0x0
0xffffd0000001f380 0001 00000000 0x0 0x0
0xffffd0000001f400 0001 00000000 0x0 0x0
0xffffd0000001f480 0001 00000000 0x0 0x0
0xffffd0000001f500 0001 00000000 0x0 0x0
0xffffd0000001f580 0001 00000000 0x0 0x0
0xffffd0000001f600 0001 00000000 0x0 0x0
0xffffd0000001f680 0001 00000000 0x0 0x0
0xffffd0000001f700 0001 00000000 0x0 0x0
0xffffd0000001f780 0001 00000000 0x0 0x0
0xffffd0000001f800 0001 00000000 0x0 0x0
0xffffd0000001f880 0001 00000000 0x0 0x0
0xffffd0000001f900 0001 00000000 0x0 0x0
0xffffd0000001f980 0001 00000000 0x0 0x0
0xffffd0000001fa00 0001 00000000 0x0 0x0
0xffffd0000001fa80 0001 00000000 0x0 0x0
0xffffd0000001fb00 0001 00000000 0x0 0x0
0xffffd0000001fb80 0001 00000000 0x0 0x0
0xffffd0000001fc00 0001 00000000 0x0 0x0
0xffffd0000001fc80 0001 00000000 0x0 0x0
0xffffd0000001fd00 0001 00000000 0x0 0x0
0xffffd0000001fd80 0001 00000000 0x0 0x0
0xffffd0000001fe00 0001 00000000 0x0 0x0
0xffffd0000001fe80 0001 00000000 0x0 0x0
0xffffd0000001ff00 0001 00000000 0x0 0x0
0xffffd0000001ff80 0001 00000000 0x0 0x0
0xffffd00000020000 0001 00000000 0x0 0x0
0xffffd00000020080 0001 00000000 0x0 0x0
0xffffd00000020100 0001 00000000 0x0 0x0
0xffffd00000020180 0001 00000000 0x0 0x0
0xffffd00000020200 0001 00000000 0x0 0x0
0xffffd00000020280 0001 00000000 0x0 0x0
0xffffd00000020300 0001 00000000 0x0 0x0
0xffffd00000020380 0001 00000000 0x0 0x0
0xffffd00000020400 0001 00000000 0x0 0x0
0xffffd00000020480 0001 00000000 0x0 0x0
0xffffd00000020500 0001 00000000 0x0 0x0
0xffffd00000020580 0001 00000000 0x0 0x0
0xffffd00000020600 0001 00000000 0x0 0x0
0xffffd00000020680 0001 00000000 0x0 0x0
0xffffd00000020700 0001 00000000 0x0 0x0
0xffffd00000020780 0001 00000000 0x0 0x0
0xffffd00000020800 0001 00000000 0x0 0x0
0xffffd00000020880 0001 00000000 0x0 0x0
0xffffd00000020900 0001 00000000 0x0 0x0
0xffffd00000020980 0001 00000000 0x0 0x0
0xffffd00000020a00 0001 00000000 0x0 0x0
0xffffd00000020a80 0001 00000000 0x0 0x0
0xffffd00000020b00 0001 00000000 0x0 0x0
0xffffd00000020b80 0001 00000000 0x0 0x0
0xffffd00000020c00 0001 00000000 0x0 0x0
0xffffd00000020c80 0001 00000000 0x0 0x0
0xffffd00000020d00 0001 00000000 0x0 0x0
0xffffd00000020d80 0001 00000000 0x0 0x0
0xffffd00000020e00 0001 00000000 0x0 0x0
0xffffd00000020e80 0001 00000000 0x0 0x0
0xffffd00000020f00 0001 00000000 0x0 0x0
0xffffd00000020f80 0001 00000000 0x0 0x0
0xffffd00000021000 0001 00000000 0x0 0x0
0xffffd00000021080 0001 00000000 0x0 0x0
0xffffd00000021100 0001 00000000 0x0 0x0
0xffffd00000021180 0001 00000000 0x0 0x0
0xffffd00000021200 0001 00000000 0x0 0x0
0xffffd00000021280 0001 00000000 0x0 0x0
0xffffd00000021300 0001 00000000 0x0 0x0
0xffffd00000021380 0001 00000000 0x0 0x0
0xffffd00000021400 0001 00000000 0x0 0x0
0xffffd00000021480 0001 00000000 0x0 0x0
0xffffd00000021500 0001 00000000 0x0 0x0
0xffffd00000021580 0001 00000000 0x0 0x0
0xffffd00000021600 0001 00000000 0x0 0x0
0xffffd00000021680 0001 00000000 0x0 0x0
0xffffd00000021700 0001 00000000 0x0 0x0
0xffffd00000021780 0001 00000000 0x0 0x0
0xffffd00000021800 0001 00000000 0x0 0x0
0xffffd00000021880 0001 00000000 0x0 0x0
0xffffd00000021900 0001 00000000 0x0 0x0
0xffffd00000021980 0001 00000000 0x0 0x0
0xffffd00000021a00 0001 00000000 0x0 0x0
0xffffd00000021a80 0001 00000000 0x0 0x0
0xffffd00000021b00 0001 00000000 0x0 0x0
0xffffd00000021b80 0001 00000000 0x0 0x0
0xffffd00000021c00 0001 00000000 0x0 0x0
0xffffd00000021c80 0001 00000000 0x0 0x0
0xffffd00000021d00 0001 00000000 0x0 0x0
0xffffd00000021d80 0001 00000000 0x0 0x0
0xffffd00000021e00 0001 00000000 0x0 0x0
0xffffd00000021e80 0001 00000000 0x0 0x0
0xffffd00000021f00 0001 00000000 0x0 0x0
0xffffd00000021f80 0001 00000000 0x0 0x0
0xffffd00000022000 0001 00000000 0x0 0x0
0xffffd00000022080 0001 00000000 0x0 0x0
0xffffd00000022100 0001 00000000 0x0 0x0
0xffffd00000022180 0001 00000000 0x0 0x0
0xffffd00000022200 0001 00000000 0x0 0x0
0xffffd00000022280 0001 00000000 0x0 0x0
0xffffd00000022300 0001 00000000 0x0 0x0
0xffffd00000022380 0001 00000000 0x0 0x0
0xffffd00000022400 0001 00000000 0x0 0x0
0xffffd00000022480 0001 00000000 0x0 0x0
0xffffd00000022500 0001 00000000 0x0 0x0
0xffffd00000022580 0001 00000000 0x0 0x0
0xffffd00000022600 0001 00000000 0x0 0x0
0xffffd00000022680 0001 00000000 0x0 0x0
0xffffd00000022700 0001 00000000 0x0 0x0
0xffffd00000022780 0001 00000000 0x0 0x0
0xffffd00000022800 0001 00000000 0x0 0x0
0xffffd00000022880 0001 00000000 0x0 0x0
0xffffd00000022900 0001 00000000 0x0 0x0
0xffffd00000022980 0001 00000000 0x0 0x0
0xffffd00000022a00 0001 00000000 0x0 0x0
0xffffd00000022a80 0001 00000000 0x0 0x0
0xffffd00000022b00 0001 00000000 0x0 0x0
0xffffd00000022b80 0001 00000000 0x0 0x0
0xffffd00000022c00 0001 00000000 0x0 0x0
0xffffd00000022c80 0001 00000000 0x0 0x0
0xffffd00000022d00 0001 00000000 0x0 0x0
0xffffd00000022d80 0001 00000000 0x0 0x0
0xffffd00000022e00 0001 00000000 0x0 0x0
0xffffd00000022e80 0001 00000000 0x0 0x0
0xffffd00000022f00 0001 00000000 0x0 0x0
0xffffd00000022f80 0001 00000000 0x0 0x0
0xffffd00000023000 0001 00000000 0x0 0x0
0xffffd00000023080 0001 00000000 0x0 0x0
0xffffd00000023100 0001 00000000 0x0 0x0
0xffffd00000023180 0001 00000000 0x0 0x0
0xffffd00000023200 0001 00000000 0x0 0x0
0xffffd00000023280 0001 00000000 0x0 0x0
0xffffd00000023300 0001 00000000 0x0 0x0
0xffffd00000023380 0001 00000000 0x0 0x0
0xffffd00000023400 0001 00000000 0x0 0x0
0xffffd00000023480 0001 00000000 0x0 0x0
0xffffd00000023500 0001 00000000 0x0 0x0
0xffffd00000023580 0001 00000000 0x0 0x0
0xffffd00000023600 0001 00000000 0x0 0x0
0xffffd00000023680 0001 00000000 0x0 0x0
0xffffd00000023700 0001 00000000 0x0 0x0
0xffffd00000023780 0001 00000000 0x0 0x0
0xffffd00000023800 0001 00000000 0x0 0x0
0xffffd00000023880 0001 00000000 0x0 0x0
0xffffd00000023900 0001 00000000 0x0 0x0
0xffffd00000023980 0001 00000000 0x0 0x0
0xffffd00000023a00 0001 00000000 0x0 0x0
0xffffd00000023a80 0001 00000000 0x0 0x0
0xffffd00000023b00 0001 00000000 0x0 0x0
0xffffd00000023b80 0001 00000000 0x0 0x0
0xffffd00000023c00 0001 00000000 0x0 0x0
0xffffd00000023c80 0001 00000000 0x0 0x0
0xffffd00000023d00 0001 00000000 0x0 0x0
0xffffd00000023d80 0001 00000000 0x0 0x0
0xffffd00000023e00 0001 00000000 0x0 0x0
0xffffd00000023e80 0001 00000000 0x0 0x0
0xffffd00000023f00 0001 00000000 0x0 0x0
0xffffd00000023f80 0001 00000000 0x0 0x0
0xffffd00000024000 0001 00000000 0x0 0x0
0xffffd00000024080 0001 00000000 0x0 0x0
0xffffd00000024100 0001 00000000 0x0 0x0
0xffffd00000024180 0001 00000000 0x0 0x0
0xffffd00000024200 0001 00000000 0x0 0x0
0xffffd00000024280 0001 00000000 0x0 0x0
0xffffd00000024300 0001 00000000 0x0 0x0
0xffffd00000024380 0001 00000000 0x0 0x0
0xffffd00000024400 0001 00000000 0x0 0x0
0xffffd00000024480 0001 00000000 0x0 0x0
0xffffd00000024500 0001 00000000 0x0 0x0
0xffffd00000024580 0001 00000000 0x0 0x0
0xffffd00000024600 0001 00000000 0x0 0x0
0xffffd00000024680 0001 00000000 0x0 0x0
0xffffd00000024700 0001 00000000 0x0 0x0
0xffffd00000024780 0001 00000000 0x0 0x0
0xffffd00000024800 0001 00000000 0x0 0x0
0xffffd00000024880 0001 00000000 0x0 0x0
0xffffd00000024900 0001 00000000 0x0 0x0
0xffffd00000024980 0001 00000000 0x0 0x0
0xffffd00000024a00 0001 00000000 0x0 0x0
0xffffd00000024a80 0001 00000000 0x0 0x0
0xffffd00000024b00 0001 00000000 0x0 0x0
0xffffd00000024b80 0001 00000000 0x0 0x0
0xffffd00000024c00 0001 00000000 0x0 0x0
0xffffd00000024c80 0001 00000000 0x0 0x0
0xffffd00000024d00 0001 00000000 0x0 0x0
0xffffd00000024d80 0001 00000000 0x0 0x0
0xffffd00000024e00 0001 00000000 0x0 0x0
0xffffd00000024e80 0001 00000000 0x0 0x0
0xffffd00000024f00 0001 00000000 0x0 0x0
0xffffd00000024f80 0001 00000000 0x0 0x0
0xffffd00000025000 0001 00000000 0x0 0x0
0xffffd00000025080 0001 00000000 0x0 0x0
0xffffd00000025100 0001 00000000 0x0 0x0
0xffffd00000025180 0001 00000000 0x0 0x0
0xffffd00000025200 0001 00000000 0x0 0x0
0xffffd00000025280 0001 00000000 0x0 0x0
0xffffd00000025300 0001 00000000 0x0 0x0
0xffffd00000025380 0001 00000000 0x0 0x0
0xffffd00000025400 0001 00000000 0x0 0x0
0xffffd00000025480 0001 00000000 0x0 0x0
0xffffd00000025500 0001 00000000 0x0 0x0
0xffffd00000025580 0001 00000000 0x0 0x0
0xffffd00000025600 0001 00000000 0x0 0x0
0xffffd00000025680 0001 00000000 0x0 0x0
0xffffd00000025700 0001 00000000 0x0 0x0
0xffffd00000025780 0001 00000000 0x0 0x0
0xffffd00000025800 0001 00000000 0x0 0x0
0xffffd00000025880 0001 00000000 0x0 0x0
0xffffd00000025900 0001 00000000 0x0 0x0
0xffffd00000025980 0001 00000000 0x0 0x0
0xffffd00000025a00 0001 00000000 0x0 0x0
0xffffd00000025a80 0001 00000000 0x0 0x0
0xffffd00000025b00 0001 00000000 0x0 0x0
0xffffd00000025b80 0001 00000000 0x0 0x0
0xffffd00000025c00 0001 00000000 0x0 0x0
0xffffd00000025c80 0001 00000000 0x0 0x0
0xffffd00000025d00 0001 00000000 0x0 0x0
0xffffd00000025d80 0001 00000000 0x0 0x0
0xffffd00000025e00 0001 00000000 0x0 0x0
0xffffd00000025e80 0001 00000000 0x0 0x0
0xffffd00000025f00 0001 00000000 0x0 0x0
0xffffd00000025f80 0001 00000000 0x0 0x0
0xffffd00000026000 0001 00000000 0x0 0x0
0xffffd00000026080 0001 00000000 0x0 0x0
0xffffd00000026100 0001 00000000 0x0 0x0
0xffffd00000026180 0001 00000000 0x0 0x0
0xffffd00000026200 0001 00000000 0x0 0x0
0xffffd00000026280 0001 00000000 0x0 0x0
0xffffd00000026300 0001 00000000 0x0 0x0
0xffffd00000026380 0001 00000000 0x0 0x0
0xffffd00000026400 0001 00000000 0x0 0x0
0xffffd00000026480 0001 00000000 0x0 0x0
0xffffd00000026500 0001 00000000 0x0 0x0
0xffffd00000026580 0001 00000000 0x0 0x0
0xffffd00000026600 0001 00000000 0x0 0x0
0xffffd00000026680 0001 00000000 0x0 0x0
0xffffd00000026700 0001 00000000 0x0 0x0
0xffffd00000026780 0001 00000000 0x0 0x0
0xffffd00000026800 0001 00000000 0x0 0x0
0xffffd00000026880 0001 00000000 0x0 0x0
0xffffd00000026900 0001 00000000 0x0 0x0
0xffffd00000026980 0001 00000000 0x0 0x0
0xffffd00000026a00 0001 00000000 0x0 0x0
0xffffd00000026a80 0001 00000000 0x0 0x0
0xffffd00000026b00 0001 00000000 0x0 0x0
0xffffd00000026b80 0001 00000000 0x0 0x0
0xffffd00000026c00 0001 00000000 0x0 0x0
0xffffd00000026c80 0001 00000000 0x0 0x0
0xffffd00000026d00 0001 00000000 0x0 0x0
0xffffd00000026d80 0001 00000000 0x0 0x0
0xffffd00000026e00 0001 00000000 0x0 0x0
0xffffd00000026e80 0001 00000000 0x0 0x0
0xffffd00000026f00 0001 00000000 0x0 0x0
0xffffd00000026f80 0001 00000000 0x0 0x0
0xffffd00000027000 0001 00000000 0x0 0x0
0xffffd00000027080 0001 00000000 0x0 0x0
0xffffd00000027100 0001 00000000 0x0 0x0
0xffffd00000027180 0001 00000000 0x0 0x0
0xffffd00000027200 0001 00000000 0x0 0x0
0xffffd00000027280 0001 00000000 0x0 0x0
0xffffd00000027300 0001 00000000 0x0 0x0
0xffffd00000027380 0001 00000000 0x0 0x0
0xffffd00000027400 0001 00000000 0x0 0x0
0xffffd00000027480 0001 00000000 0x0 0x0
0xffffd00000027500 0001 00000000 0x0 0x0
0xffffd00000027580 0001 00000000 0x0 0x0
0xffffd00000027600 0001 00000000 0x0 0x0
0xffffd00000027680 0001 00000000 0x0 0x0
0xffffd00000027700 0001 00000000 0x0 0x0
0xffffd00000027780 0001 00000000 0x0 0x0
0xffffd00000027800 0001 00000000 0x0 0x0
0xffffd00000027880 0001 00000000 0x0 0x0
0xffffd00000027900 0001 00000000 0x0 0x0
0xffffd00000027980 0001 00000000 0x0 0x0
0xffffd00000027a00 0001 00000000 0x0 0x0
0xffffd00000027a80 0001 00000000 0x0 0x0
0xffffd00000027b00 0001 00000000 0x0 0x0
0xffffd00000027b80 0001 00000000 0x0 0x0
0xffffd00000027c00 0001 00000000 0x0 0x0
0xffffd00000027c80 0001 00000000 0x0 0x0
0xffffd00000027d00 0001 00000000 0x0 0x0
0xffffd00000027d80 0001 00000000 0x0 0x0
0xffffd00000027e00 0001 00000000 0x0 0x0
0xffffd00000027e80 0001 00000000 0x0 0x0
0xffffd00000027f00 0001 00000000 0x0 0x0
0xffffd00000027f80 0001 00000000 0x0 0x0
0xffffd00000028000 0001 00000000 0x0 0x0
0xffffd00000028080 0001 00000000 0x0 0x0
0xffffd00000028100 0001 00000000 0x0 0x0
0xffffd00000028180 0001 00000000 0x0 0x0
0xffffd00000028200 0001 00000000 0x0 0x0
0xffffd00000028280 0001 00000000 0x0 0x0
0xffffd00000028300 0001 00000000 0x0 0x0
0xffffd00000028380 0001 00000000 0x0 0x0
0xffffd00000028400 0001 00000000 0x0 0x0
0xffffd00000028480 0001 00000000 0x0 0x0
0xffffd00000028500 0001 00000000 0x0 0x0
0xffffd00000028580 0001 00000000 0x0 0x0
0xffffd00000028600 0001 00000000 0x0 0x0
0xffffd00000028680 0001 00000000 0x0 0x0
0xffffd00000028700 0001 00000000 0x0 0x0
0xffffd00000028780 0001 00000000 0x0 0x0
0xffffd00000028800 0001 00000000 0x0 0x0
0xffffd00000028880 0001 00000000 0x0 0x0
0xffffd00000028900 0001 00000000 0x0 0x0
0xffffd00000028980 0001 00000000 0x0 0x0
0xffffd00000028a00 0001 00000000 0x0 0x0
0xffffd00000028a80 0001 00000000 0x0 0x0
0xffffd00000028b00 0001 00000000 0x0 0x0
0xffffd00000028b80 0001 00000000 0x0 0x0
0xffffd00000028c00 0001 00000000 0x0 0x0
0xffffd00000028c80 0001 00000000 0x0 0x0
0xffffd00000028d00 0001 00000000 0x0 0x0
0xffffd00000028d80 0001 00000000 0x0 0x0
0xffffd00000028e00 0001 00000000 0x0 0x0
0xffffd00000028e80 0001 00000000 0x0 0x0
0xffffd00000028f00 0001 00000000 0x0 0x0
0xffffd00000028f80 0001 00000000 0x0 0x0
0xffffd00000029000 0001 00000000 0x0 0x0
0xffffd00000029080 0001 00000000 0x0 0x0
0xffffd00000029100 0001 00000000 0x0 0x0
0xffffd00000029180 0001 00000000 0x0 0x0
0xffffd00000029200 0001 00000000 0x0 0x0
0xffffd00000029280 0001 00000000 0x0 0x0
0xffffd00000029300 0001 00000000 0x0 0x0
0xffffd00000029380 0001 00000000 0x0 0x0
0xffffd00000029400 0001 00000000 0x0 0x0
0xffffd00000029480 0001 00000000 0x0 0x0
0xffffd00000029500 0001 00000000 0x0 0x0
0xffffd00000029580 0001 00000000 0x0 0x0
0xffffd00000029600 0001 00000000 0x0 0x0
0xffffd00000029680 0001 00000000 0x0 0x0
0xffffd00000029700 0001 00000000 0x0 0x0
0xffffd00000029780 0001 00000000 0x0 0x0
0xffffd00000029800 0001 00000000 0x0 0x0
0xffffd00000029880 0001 00000000 0x0 0x0
0xffffd00000029900 0001 00000000 0x0 0x0
0xffffd00000029980 0001 00000000 0x0 0x0
0xffffd00000029a00 0001 00000000 0x0 0x0
0xffffd00000029a80 0001 00000000 0x0 0x0
0xffffd00000029b00 0001 00000000 0x0 0x0
0xffffd00000029b80 0001 00000000 0x0 0x0
0xffffd00000029c00 0001 00000000 0x0 0x0
0xffffd00000029c80 0001 00000000 0x0 0x0
0xffffd00000029d00 0001 00000000 0x0 0x0
0xffffd00000029d80 0001 00000000 0x0 0x0
0xffffd00000029e00 0001 00000000 0x0 0x0
0xffffd00000029e80 0001 00000000 0x0 0x0
0xffffd00000029f00 0001 00000000 0x0 0x0
0xffffd00000029f80 0001 00000000 0x0 0x0
0xffffd0000002a000 0001 00000000 0x0 0x0
0xffffd0000002a080 0001 00000000 0x0 0x0
0xffffd0000002a100 0001 00000000 0x0 0x0
0xffffd0000002a180 0001 00000000 0x0 0x0
0xffffd0000002a200 0001 00000000 0x0 0x0
0xffffd0000002a280 0001 00000000 0x0 0x0
0xffffd0000002a300 0001 00000000 0x0 0x0
0xffffd0000002a380 0001 00000000 0x0 0x0
0xffffd0000002a400 0001 00000000 0x0 0x0
0xffffd0000002a480 0001 00000000 0x0 0x0
0xffffd0000002a500 0001 00000000 0x0 0x0
0xffffd0000002a580 0001 00000000 0x0 0x0
0xffffd0000002a600 0001 00000000 0x0 0x0
0xffffd0000002a680 0001 00000000 0x0 0x0
0xffffd0000002a700 0001 00000000 0x0 0x0
0xffffd0000002a780 0001 00000000 0x0 0x0
0xffffd0000002a800 0001 00000000 0x0 0x0
0xffffd0000002a880 0001 00000000 0x0 0x0
0xffffd0000002a900 0001 00000000 0x0 0x0
0xffffd0000002a980 0001 00000000 0x0 0x0
0xffffd0000002aa00 0001 00000000 0x0 0x0
0xffffd0000002aa80 0001 00000000 0x0 0x0
0xffffd0000002ab00 0001 00000000 0x0 0x0
0xffffd0000002ab80 0001 00000000 0x0 0x0
0xffffd0000002ac00 0001 00000000 0x0 0x0
0xffffd0000002ac80 0001 00000000 0x0 0x0
0xffffd0000002ad00 0001 00000000 0x0 0x0
0xffffd0000002ad80 0001 00000000 0x0 0x0
0xffffd0000002ae00 0001 00000000 0x0 0x0
0xffffd0000002ae80 0001 00000000 0x0 0x0
0xffffd0000002af00 0001 00000000 0x0 0x0
0xffffd0000002af80 0001 00000000 0x0 0x0
0xffffd0000002b000 0001 00000000 0x0 0x0
0xffffd0000002b080 0001 00000000 0x0 0x0
0xffffd0000002b100 0001 00000000 0x0 0x0
0xffffd0000002b180 0001 00000000 0x0 0x0
0xffffd0000002b200 0001 00000000 0x0 0x0
0xffffd0000002b280 0001 00000000 0x0 0x0
0xffffd0000002b300 0001 00000000 0x0 0x0
0xffffd0000002b380 0001 00000000 0x0 0x0
0xffffd0000002b400 0001 00000000 0x0 0x0
0xffffd0000002b480 0001 00000000 0x0 0x0
0xffffd0000002b500 0001 00000000 0x0 0x0
0xffffd0000002b580 0001 00000000 0x0 0x0
0xffffd0000002b600 0001 00000000 0x0 0x0
0xffffd0000002b680 0001 00000000 0x0 0x0
0xffffd0000002b700 0001 00000000 0x0 0x0
0xffffd0000002b780 0001 00000000 0x0 0x0
0xffffd0000002b800 0001 00000000 0x0 0x0
0xffffd0000002b880 0001 00000000 0x0 0x0
0xffffd0000002b900 0001 00000000 0x0 0x0
0xffffd00

---
This report is generated by a bot. It may contain errors.
See https://goo.gl/tpsmEJ for more information about syzbot.
syzbot engineers can be reached at syzk...@googlegroups.com.

syzbot will keep track of this issue. See:
https://goo.gl/tpsmEJ#status for how to communicate with syzbot.

syzbot

unread,
Nov 11, 2022, 11:18:37 PM11/11/22
to syzkaller-...@googlegroups.com
Auto-closing this bug as obsolete.
Crashes did not happen for a while, no reproducer and no activity.
Reply all
Reply to author
Forward
0 new messages