page fault in Xintr_hyperv_hypercall (3)

5 views
Skip to first unread message

syzbot

unread,
Oct 12, 2023, 10:31:46 PM10/12/23
to syzkaller-...@googlegroups.com
Hello,

syzbot found the following issue on:

HEAD commit: 23ee83f7c0ae c.7: mention that C11 and C17 have been publi..
git tree: netbsd
console output: https://syzkaller.appspot.com/x/log.txt?x=13b35252680000
kernel config: https://syzkaller.appspot.com/x/.config?x=739e57438eb9ed9e
dashboard link: https://syzkaller.appspot.com/bug?extid=3d998127cfc5031dad23
compiler: Debian clang version 15.0.6

Unfortunately, I don't have any reproducer for this issue yet.

Downloadable assets:
disk image: https://storage.googleapis.com/syzbot-assets/a2246aa2875c/disk-23ee83f7.raw.xz
netbsd.gdb: https://storage.googleapis.com/syzbot-assets/f5e0702a2a8a/netbsd-23ee83f7.gdb.xz

IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+3d9981...@syzkaller.appspotmail.com

[ 151.7630161] fatal page fault in supervisor mode
[ 151.7630161] trap type 6 code 0x2 rip 0xffffffff802007d0 cs 0x8 rflags 0x10046 cr2 0x3571ee28 ilevel 0 rsp 0xffff8280c9f90458
[ 151.7630161] fatal page faultcurlwp 0xffff828013b54780 pid 5068.5075 lowest kstack 0xffff8280c9f892c0
k[e r1n5e1l.:763 0pa1g61e ] f aiunl t sturpaep,rv cisooder= m0o[
Stopped in pid 5068.5075 (syz-executor.3) at netbsd:Xintr_hyperv_hypercall+0xc0: addb %al,0(%rax)
?
Xintr_hyperv_hypercall() at netbsd:Xintr_hyperv_hypercall+0xc0
--- interrupt ---
Bad frame pointer: 0xffff8280139c1480
netbsd:rb_tree_find_node+0x26f:
Panic string: (null)
PID LID S CPU FLAGS STRUCT LWP * NAME WAIT
5072 5327 2 0 0 ffff828013787a80 syz-executor.5
5072 1873 2 0 100 ffff828013787640 syz-executor.5
5072 5072 2 0 10040000 ffff828013892280 syz-executor.5
5068 >5075 7 0 40000 ffff828013b54780 syz-executor.3
5068 >5334 7 -2042276578 40000 ffff828013b54340 syz-executor.3
5068 1856 3 0 180 ffff8280138926c0 syz-executor.3 parked
5068 5068 2 1 10040000 ffff8280139bb740 syz-executor.3
5182 5182 2 1 40000 ffff8280139bbb80 syz-executor.1
6057 5578 3 1 180 ffff828013b6d480 syz-executor.2 parked
6057 834 3 0 180 ffff8280136945c0 syz-executor.2 parked
6057 4665 3 1 40180 ffff828013b54bc0 syz-executor.2 parked
6057 6057 2 0 10040000 ffff8280137d4240 syz-executor.2
4540 4540 3 0 180 ffff8280136b0600 syz-executor.5 nanoslp
4663 4663 3 0 180 ffff82801399a2c0 syz-executor.1 nanoslp
4787 4787 2 1 40 ffff828013542980 syz-executor.4
4534 4534 3 1 180 ffff82801399ab40 syz-executor.5 parked
4184 3269 3 1 1100000 ffff82801399a700 syz-executor.5 vfork
4184 4184 3 0 11000000 ffff8280136b0a40 syz-executor.5 lwpwait
4179 4179 3 1 180 ffff8280137d4680 syz-executor.2 parked
4431 4431 3 1 180 ffff828013892b00 syz-executor.1 parked
4025 4025 3 0 180 ffff8280137d4ac0 syz-executor.1 parked
991 991 3 0 180 ffff8280135ce9c0 syz-executor.3 nanoslp
449 449 3 0 180 ffff8280135ce580 syz-executor.2 nanoslp
1243 1243 2 0 40 ffff828013542540 syz-executor.0
948 1835 3 0 180 ffff828013787200 syz-fuzzer parked
948 1376 3 0 1c0 ffff8280136b01c0 syz-fuzzer wait
948 1109 3 1 180 ffff828013694a00 syz-fuzzer parked
948 1246 3 1 180 ffff828013694180 syz-fuzzer parked
948 1241 3 0 180 ffff8280135ce140 syz-fuzzer wait
948 829 3 0 180 ffff828013542100 syz-fuzzer wait
948 942 2 1 100 ffff828012caf500 syz-fuzzer
948 929 3 0 180 ffff828012caf940 syz-fuzzer wait
948 1106 3 1 180 ffff828012caf0c0 syz-fuzzer parked
948 1244 3 0 1c0 ffff828012bf0900 syz-fuzzer wait
948 1229 3 1 180 ffff828012bf04c0 syz-fuzzer parked
948 1233 3 1 180 ffff828012bf0080 syz-fuzzer wait
948 1230 3 0 180 ffff82801238e2c0 syz-fuzzer parked
948 948 3 1 180 ffff8280125e9780 syz-fuzzer parked
1236 1236 3 0 180 ffff8280122ff6c0 sshd select
1223 1223 3 1 180 ffff8280122ffb00 getty nanoslp
1260 1260 3 0 180 ffff8280122ff280 getty nanoslp
1216 1216 3 0 180 ffff8280121ffac0 getty nanoslp
1184 1184 3 1 1c0 ffff8280121fc200 getty ttyraw
952 952 3 0 180 ffff828012bbf8c0 sshd select
1096 1096 3 1 180 ffff828012bbf480 powerd kqueue
699 699 3 1 180 ffff828012522300 syslogd kqueue
746 746 3 1 180 ffff828012bbf040 dhcpcd poll
745 745 3 1 180 ffff828012522b80 dhcpcd poll
582 582 3 0 180 ffff82801238e700 dhcpcd poll
599 599 3 0 180 ffff8280125e9bc0 dhcpcd poll
487 487 3 0 180 ffff8280125e9340 dhcpcd poll
292 292 3 0 180 ffff82801238eb40 dhcpcd poll
485 485 3 0 180 ffff828012522740 dhcpcd poll
1 1 3 1 180 ffff828011ede100 init wait
0 1478 3 0 200 ffff8280139bb300 ktrace ktrwait
0 674 3 0 200 ffff8280121fc640 physiod physiod
0 196 3 0 200 ffff8280121ff680 pooldrain pooldrain
0 195 3 0 200 ffff8280121ff240 ioflush syncer
0 194 3 1 200 ffff8280121fca80 pgdaemon pgdaemon
0 167 3 1 200 ffff82801216ba40 usb7 usbevt
0 172 3 1 200 ffff82801216b600 usb6 usbevt
0 170 3 0 200 ffff82801216b1c0 usb5 usbevt
0 168 3 1 200 ffff82801213ca00 usb4 usbevt
0 166 3 0 200 ffff82801213c5c0 usb3 usbevt
0 165 3 1 200 ffff82801213c180 usb2 usbevt
0 31 3 0 200 ffff8280120859c0 usb1 usbevt
0 63 3 1 200 ffff828012085580 usb0 usbevt
0 126 3 1 200 ffff828012085140 usbtask-dr usbtsk
0 125 3 1 200 ffff828011ede980 usbtask-hc usbtsk
0 124 3 0 200 ffff8280103f4b00 swwreboot swwreboot
0 123 3 0 200 ffff828011ede540 npfgc0 npfgcw
0 122 3 1 200 ffff828011ed1940 rt_free rt_free
0 121 3 1 200 ffff828011ed1500 unpgc unpgc
0 120 3 0 200 ffff828011ed10c0 key_timehandler key_timehandler
0 119 3 1 200 ffff828011ecb900 icmp6_wqinput/1 icmp6_wqinput
0 118 3 0 200 ffff828011ecb4c0 icmp6_wqinput/0 icmp6_wqinput
0 117 3 0 200 ffff828011ecb080 nd6_timer nd6_timer
0 116 3 1 200 ffff828011eaa8c0 carp6_wqinput/1 carp6_wqinput
0 115 3 0 200 ffff828011eaa480 carp6_wqinput/0 carp6_wqinput
0 114 3 1 200 ffff828011eaa040 carp_wqinput/1 carp_wqinput
0 113 3 0 200 ffff828011cecb80 carp_wqinput/0 carp_wqinput
0 112 3 1 200 ffff828011cec740 icmp_wqinput/1 icmp_wqinput
0 111 3 0 200 ffff828011ceebc0 icmp_wqinput/0 icmp_wqinput
0 110 3 0 200 ffff828011cee340 rt_timer rt_timer
0 109 3 0 200 ffff828011cee780 vmem_rehash vmem_rehash
0 100 3 0 200 ffff828011cec300 entbutler entropy
0 99 3 1 200 ffff8280117e0b40 viomb balloon
0 98 3 1 200 ffff8280117e0700 vioif0_txrx/1 vioif0_txrx
0 97 3 0 200 ffff8280117e02c0 vioif0_txrx/0 vioif0_txrx
0 30 3 0 200 ffff8280103f46c0 scsibus0 sccomp
0 29 3 0 200 ffff8280103f4280 pms0 pmsreset
0 28 3 1 200 ffff8280103d9ac0 xcall/1 xcall
0 27 1 1 200 ffff8280103d9680 softser/1
0 26 1 1 200 ffff8280103d9240 softclk/1
0 25 1 1 200 ffff8280103d7a80 softbio/1
0 24 1 1 200 ffff8280103d7640 softnet/1
0 23 1 1 201 ffff8280103d7200 idle/1
0 22 3 0 200 ffff82800f1e3a40 lnxsyswq lnxsyswq
0 21 3 0 200 ffff82800f1e3600 lnxubdwq lnxubdwq
0 20 3 0 200 ffff82800f1e31c0 lnxpwrwq lnxpwrwq
0 19 3 0 200 ffff82800f1e1a00 lnxlngwq lnxlngwq
0 18 3 1 200 ffff82800f1e15c0 lnxhipwq lnxhipwq
0 17 3 0 200 ffff82800f1e1180 lnxrcugc lnxrcugc
0 16 3 0 200 ffff82800f1db9c0 sysmon smtaskq
0 15 3 0 200 ffff82800f1db580 pmfsuspend pmfsuspend
0 14 3 0 200 ffff82800f1db140 pmfevent pmfevent
0 13 3 0 200 ffff82800f1d9980 sopendfree sopendfr
0 12 3 1 200 ffff82800f1d9540 ifwdog ifwdog
0 11 3 0 200 ffff82800f1d9100 iflnkst iflnkst
0 10 3 0 200 ffff82800f1cf940 nfssilly nfssilly
0 9 3 0 200 ffff82800f1cf500 vdrain vdrain
0 8 3 1 200 ffff82800f1cf0c0 modunload mod_unld
0 7 3 0 200 ffff82800ebdb900 xcall/0 xcall
0 6 1 0 200 ffff82800ebdb4c0 softser/0
0 5 1 0 200 ffff82800ebdb080 softclk/0
0 4 1 0 200 ffff82800ebd98c0 softbio/0
0 3 1 0 200 ffff82800ebd9480 softnet/0
0 2 1 0 201 ffff82800ebd9040 idle/0
0 0 3 0 200 ffffffff8686ea80 swapper uvm
[Locks tracked through LWPs]

****** LWP 5068.5334 (syz-executor.3) @ 0xffff828013b54340, l_stat=7

*** Locks held:

* Lock 0 (initialized at netbsd:mm_init+0x46 sys/dev/mm.c:117)
lock address : netbsd:dev_mem_lock
type : sleep/adaptive
initialized : netbsd:mm_init+0x46
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 2252690718 last held: 1
relevant lwp : 0xffff828013b54340 last held: 0xffff828013b54340
last locked* : netbsd:mm_readwrite+0x107a
unlocked : netbsd:mm_readwrite+0x11f5
owner field : 0xffff828013b54340 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

*** Locks wanted: none

****** LWP 6057.6057 (syz-executor.2) @ 0xffff8280137d4240, l_stat=2

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:uvmspace_fork+0x3e4 uvm_map_setup sys/uvm/uvm_map.c:4794 [inline])
* Lock 0 (initialized at netbsd:uvmspace_fork+0x3e4 uvmspace_init sys/uvm/uvm_map.c:4137 [inline])
* Lock 0 (initialized at netbsd:uvmspace_fork+0x3e4 uvmspace_alloc sys/uvm/uvm_map.c:4116 [inline])
* Lock 0 (initialized at netbsd:uvmspace_fork+0x3e4 sys/uvm/uvm_map.c:4593)
lock address : ffff8280136c7458
type : sleep/adaptive
initialized : netbsd:uvmspace_fork+0x3e4
shared holds : 0 exclusive: 0
shares wanted: 1 exclusive: 0
relevant cpu : 0 last held: 65535
relevant lwp : 0xffff8280137d4240 last held: 000000000000000000
last locked : netbsd:uvm_fault_internal+0x516
unlocked* : netbsd:uvm_fault_lower_enter+0x2071
owner/count : 000000000000000000 flags : 000000000000000000
Turnstile: no active turnstile for this lock.

****** LWP 745.745 (dhcpcd) @ 0xffff828012522b80, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:module_hook_init+0x43 sys/kern/kern_module_hook.c:132)
lock address : netbsd:module_hook
type : sleep/adaptive
initialized : netbsd:module_hook_init+0x43
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 0
relevant lwp : 0xffff828012522b80 last held: 000000000000000000
last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 582.582 (dhcpcd) @ 0xffff82801238e700, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:module_hook_init+0x43 sys/kern/kern_module_hook.c:132)
lock address : netbsd:module_hook
type : sleep/adaptive
initialized : netbsd:module_hook_init+0x43
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffff82801238e700 last held: 000000000000000000
last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 292.292 (dhcpcd) @ 0xffff82801238eb40, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:module_hook_init+0x43 sys/kern/kern_module_hook.c:132)
lock address : netbsd:module_hook
type : sleep/adaptive
initialized : netbsd:module_hook_init+0x43
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffff82801238eb40 last held: 000000000000000000
last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 485.485 (dhcpcd) @ 0xffff828012522740, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:module_hook_init+0x43 sys/kern/kern_module_hook.c:132)
lock address : netbsd:module_hook
type : sleep/adaptive
initialized : netbsd:module_hook_init+0x43
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffff828012522740 last held: 000000000000000000
last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 0.11 (iflnkst) @ 0xffff82800f1d9100, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:module_hook_init+0x43 sys/kern/kern_module_hook.c:132)
lock address : netbsd:module_hook
type : sleep/adaptive
initialized : netbsd:module_hook_init+0x43
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffff82800f1d9100 last held: 000000000000000000
last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 0.5 (softclk/0) @ 0xffff82800ebdb080, l_stat=1

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:module_hook_init+0x43 sys/kern/kern_module_hook.c:132)
lock address : netbsd:module_hook
type : sleep/adaptive
initialized : netbsd:module_hook_init+0x43
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffff82800ebdb080 last held: 000000000000000000
last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 0.0 (swapper) @ 0xffffffff8686ea80, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:module_hook_init+0x43 sys/kern/kern_module_hook.c:132)
lock address : netbsd:module_hook
type : sleep/adaptive
initialized : netbsd:module_hook_init+0x43
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffffffff8686ea80 last held: 000000000000000000
last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

[Locks tracked through CPUs]

******* Locks held on cpu1:

* Lock 0 (initialized at netbsd:kprintf_init+0xcb sys/kern/subr_prf.c:156)
lock address : netbsd:kprintf_mtx
type : spin
initialized : netbsd:kprintf_init+0xcb
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 2252690718 last held: 1
relevant lwp : 0xffff828013b54340 last held: 0xffff828013b54340
last locked* : netbsd:printf+0x1d7
unlocked : netbsd:printf+0x2ce
owner field : 0x0000000000010800 wait/spin: 0/1

* Lock 1 (initialized at netbsd:loginit+0x46 sys/kern/subr_log.c:138)
lock address : netbsd:log_lock
type : spin
initialized : netbsd:loginit+0x46
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 2252690718 last held: 1
relevant lwp : 0xffff828013b54340 last held: 0xffff828013b54340
last locked* : netbsd:logputchar+0xae
unlocked : netbsd:putone+0x7bd
owner field : 0x0000000000010600 wait/spin: 0/1

PAGE FLAG PQ UOBJECT UANON
0xffff828000017180 0001 00000000 0x0 0x0
0xffff828000017200 0041 00000000 0x0 0x0
0xffff828000017280 0041 00000000 0x0 0x0
0xffff828000017300 0041 00000000 0x0 0x0
0xffff828000017380 0041 00000000 0x0 0x0
0xffff828000017400 0041 00000000 0x0 0x0
0xffff828000017480 0041 00000000 0x0 0x0
0xffff828000017500 0041 00000000 0x0 0x0
0xffff828000017580 0041 00000000 0x0 0x0
0xffff828000017600 0041 00000000 0x0 0x0
0xffff828000017680 0041 00000000 0x0 0x0
0xffff828000017700 0041 00000000 0x0 0x0
0xffff828000017780 0041 00000000 0x0 0x0
0xffff828000017800 0041 00000000 0x0 0x0
0xffff828000017880 0041 00000000 0x0 0x0
0xffff828000017900 0041 00000000 0x0 0x0
0xffff828000017980 0041 00000000 0x0 0x0
0xffff828000017a00 0041 00000000 0x0 0x0
0xffff828000017a80 0041 00000000 0x0 0x0
0xffff828000017b00 0041 00000000 0x0 0x0
0xffff828000017b80 0041 00000000 0x0 0x0
0xffff828000017c00 0041 00000000 0x0 0x0
0xffff828000017c80 0041 00000000 0x0 0x0
0xffff828000017d00 0041 00000000 0x0 0x0
0xffff828000017d80 0041 00000000 0x0 0x0
0xffff828000017e00 0041 00000000 0x0 0x0
0xffff828000017e80 0041 00000000 0x0 0x0
0xffff828000017f00 0041 00000000 0x0 0x0
0xffff828000017f80 0041 00000000 0x0 0x0
0xffff828000018000 0041 00000000 0x0 0x0
0xffff828000018080 0041 00000000 0x0 0x0
0xffff828000018100 0041 00000000 0x0 0x0
0xffff828000018180 0041 00000000 0x0 0x0
0xffff828000018200 0041 00000000 0x0 0x0
0xffff828000018280 0041 00000000 0x0 0x0
0xffff828000018300 0041 00000000 0x0 0x0
0xffff828000018380 0041 00000000 0x0 0x0
0xffff828000018400 0041 00000000 0x0 0x0
0xffff828000018480 0041 00000000 0x0 0x0
0xffff828000018500 0041 00000000 0x0 0x0
0xffff828000018580 0041 00000000 0x0 0x0
0xffff828000018600 0041 00000000 0x0 0x0
0xffff828000018680 0041 00000000 0x0 0x0
0xffff828000018700 0041 00000000 0x0 0x0
0xffff828000018780 0041 00000000 0x0 0x0
0xffff828000018800 0041 00000000 0x0 0x0
0xffff828000018880 0041 00000000 0x0 0x0
0xffff828000018900 0041 00000000 0x0 0x0
0xffff828000018980 0041 00000000 0x0 0x0
0xffff828000018a00 0041 00000000 0x0 0x0
0xffff828000018a80 0041 00000000 0x0 0x0
0xffff828000018b00 0041 00000000 0x0 0x0
0xffff828000018b80 0041 00000000 0x0 0x0
0xffff828000018c00 0041 00000000 0x0 0x0
0xffff828000018c80 0041 00000000 0x0 0x0
0xffff828000018d00 0041 00000000 0x0 0x0
0xffff828000018d80 0041 00000000 0x0 0x0
0xffff828000018e00 0041 00000000 0x0 0x0
0xffff828000018e80 0041 00000000 0x0 0x0
0xffff828000018f00 0041 00000000 0x0 0x0
0xffff828000018f80 0041 00000000 0x0 0x0
0xffff828000019000 0041 00000000 0x0 0x0
0xffff828000019080 0041 00000000 0x0 0x0
0xffff828000019100 0041 00000000 0x0 0x0
0xffff828000019180 0041 00000000 0x0 0x0
0xffff828000019200 0041 00000000 0x0 0x0
0xffff828000019280 0041 00000000 0x0 0x0
0xffff828000019300 0041 00000000 0x0 0x0
0xffff828000019380 0041 00000000 0x0 0x0
0xffff828000019400 0041 00000000 0x0 0x0
0xffff828000019480 0041 00000000 0x0 0x0
0xffff828000019500 0041 00000000 0x0 0x0
0xffff828000019580 0041 00000000 0x0 0x0
0xffff828000019600 0041 00000000 0x0 0x0
0xffff828000019680 0041 00000000 0x0 0x0
0xffff828000019700 0041 00000000 0x0 0x0
0xffff828000019780 0041 00000000 0x0 0x0
0xffff828000019800 0041 00000000 0x0 0x0
0xffff828000019880 0041 00000000 0x0 0x0
0xffff828000019900 0041 00000000 0x0 0x0
0xffff828000019980 0041 00000000 0x0 0x0
0xffff828000019a00 0041 00000000 0x0 0x0
0xffff828000019a80 0041 00000000 0x0 0x0
0xffff828000019b00 0041 00000000 0x0 0x0
0xffff828000019b80 0041 00000000 0x0 0x0
0xffff828000019c00 0041 00000000 0x0 0x0
0xffff828000019c80 0041 00000000 0x0 0x0
0xffff828000019d00 0041 00000000 0x0 0x0
0xffff828000019d80 0041 00000000 0x0 0x0
0xffff828000019e00 0041 00000000 0x0 0x0
0xffff828000019e80 0041 00000000 0x0 0x0
0xffff828000019f00 0041 00000000 0x0 0x0
0xffff828000019f80 0041 00000000 0x0 0x0
0xffff82800001a000 0041 00000000 0x0 0x0
0xffff82800001a080 0041 00000000 0x0 0x0
0xffff82800001a100 0041 00000000 0x0 0x0
0xffff82800001a180 0041 00000000 0x0 0x0
0xffff82800001a200 0041 00000000 0x0 0x0
0xffff82800001a280 0041 00000000 0x0 0x0
0xffff82800001a300 0041 00000000 0x0 0x0
0xffff82800001a380 0041 00000000 0x0 0x0
0xffff82800001a400 0041 00000000 0x0 0x0
0xffff82800001a480 0041 00000000 0x0 0x0
0xffff82800001a500 0041 00000000 0x0 0x0
0xffff82800001a580 0041 00000000 0x0 0x0
0xffff82800001a600 0041 00000000 0x0 0x0
0xffff82800001a680 0041 00000000 0x0 0x0
0xffff82800001a700 0041 00000000 0x0 0x0
0xffff82800001a780 0041 00000000 0x0 0x0
0xffff82800001a800 0041 00000000 0x0 0x0
0xffff82800001a880 0041 00000000 0x0 0x0
0xffff82800001a900 0041 00000000 0x0 0x0
0xffff82800001a980 0041 00000000 0x0 0x0
0xffff82800001aa00 0041 00000000 0x0 0x0
0xffff82800001aa80 0041 00000000 0x0 0x0
0xffff82800001ab00 0041 00000000 0x0 0x0
0xffff82800001ab80 0041 00000000 0x0 0x0
0xffff82800001ac00 0041 00000000 0x0 0x0
0xffff82800001ac80 0041 00000000 0x0 0x0
0xffff82800001ad00 0041 00000000 0x0 0x0
0xffff82800001ad80 0041 00000000 0x0 0x0
0xffff82800001ae00 0041 00000000 0x0 0x0
0xffff82800001ae80 0041 00000000 0x0 0x0
0xffff82800001af00 0041 00000000 0x0 0x0
0xffff82800001af80 0041 00000000 0x0 0x0
0xffff82800001b000 0041 00000000 0x0 0x0
0xffff82800001b080 0041 00000000 0x0 0x0
0xffff82800001b100 0041 00000000 0x0 0x0
0xffff82800001b180 0041 00000000 0x0 0x0
0xffff82800001b200 0041 00000000 0x0 0x0
0xffff82800001b280 0041 00000000 0x0 0x0
0xffff82800001b300 0041 00000000 0x0 0x0
0xffff82800001b380 0041 00000000 0x0 0x0
0xffff82800001b400 0041 00000000 0x0 0x0
0xffff82800001b480 0041 00000000 0x0 0x0
0xffff82800001b500 0041 00000000 0x0 0x0
0xffff82800001b580 0041 00000000 0x0 0x0
0xffff82800001b600 0041 00000000 0x0 0x0
0xffff82800001b680 0041 00000000 0x0 0x0
0xffff82800001b700 0041 00000000 0x0 0x0
0xffff82800001b780 0041 00000000 0x0 0x0
0xffff82800001b800 0041 00000000 0x0 0x0
0xffff82800001b880 0041 00000000 0x0 0x0
0xffff82800001b900 0041 00000000 0x0 0x0
0xffff82800001b980 0041 00000000 0x0 0x0
0xffff82800001ba00 0041 00000000 0x0 0x0
0xffff82800001ba80 0041 00000000 0x0 0x0
0xffff82800001bb00 0041 00000000 0x0 0x0
0xffff82800001bb80 0041 00000000 0x0 0x0
0xffff82800001bc00 0041 00000000 0x0 0x0
0xffff82800001bc80 0041 00000000 0x0 0x0
0xffff82800001bd00 0041 00000000 0x0 0x0
0xffff82800001bd80 0041 00000000 0x0 0x0
0xffff82800001be00 0041 00000000 0x0 0x0
0xffff82800001be80 0041 00000000 0x0 0x0
0xffff82800001bf00 0041 00000000 0x0 0x0
0xffff82800001bf80 0041 00000000 0x0 0x0
0xffff82800001c000 0041 00000000 0x0 0x0
0xffff82800001c080 0041 00000000 0x0 0x0
0xffff82800001c100 0041 00000000 0x0 0x0
0xffff82800001c180 0041 00000000 0x0 0x0
0xffff82800001c200 0041 00000000 0x0 0x0
0xffff82800001c280 0041 00000000 0x0 0x0
0xffff82800001c300 0041 00000000 0x0 0x0
0xffff82800001c380 0041 00000000 0x0 0x0
0xffff82800001c400 0041 00000000 0x0 0x0
0xffff82800001c480 0041 00000000 0x0 0x0
0xffff82800001c500 0041 00000000 0x0 0x0
0xffff82800001c580 0041 00000000 0x0 0x0
0xffff82800001c600 0041 00000000 0x0 0x0
0xffff82800001c680 0041 00000000 0x0 0x0
0xffff82800001c700 0041 00000000 0x0 0x0
0xffff82800001c780 0041 00000000 0x0 0x0
0xffff82800001c800 0001 00000000 0x0 0x0
0xffff82800001c880 0001 00000000 0x0 0x0
0xffff82800001c900 0001 00000000 0x0 0x0
0xffff82800001c980 0001 00000000 0x0 0x0
0xffff82800001ca00 0001 00000000 0x0 0x0
0xffff82800001ca80 0001 00000000 0x0 0x0
0xffff82800001cb00 0001 00000000 0x0 0x0
0xffff82800001cb80 0001 00000000 0x0 0x0
0xffff82800001cc00 0001 00000000 0x0 0x0
0xffff82800001cc80 0001 00000000 0x0 0x0
0xffff82800001cd00 0001 00000000 0x0 0x0
0xffff82800001cd80 0001 00000000 0x0 0x0
0xffff82800001ce00 0001 00000000 0x0 0x0
0xffff82800001ce80 0001 00000000 0x0 0x0
0xffff82800001cf00 0001 00000000 0x0 0x0
0xffff82800001cf80 0001 00000000 0x0 0x0
0xffff82800001d000 0001 00000000 0x0 0x0
0xffff82800001d080 0001 00000000 0x0 0x0
0xffff82800001d100 0001 00000000 0x0 0x0
0xffff82800001d180 0001 00000000 0x0 0x0
0xffff82800001d200 0001 00000000 0x0 0x0
0xffff82800001d280 0001 00000000 0x0 0x0
0xffff82800001d300 0001 00000000 0x0 0x0
0xffff82800001d380 0001 00000000 0x0 0x0
0xffff82800001d400 0001 00000000 0x0 0x0
0xffff82800001d480 0001 00000000 0x0 0x0
0xffff82800001d500 0001 00000000 0x0 0x0
0xffff82800001d580 0001 00000000 0x0 0x0
0xffff82800001d600 0001 00000000 0x0 0x0
0xffff82800001d680 0001 00000000 0x0 0x0
0xffff82800001d700 0001 00000000 0x0 0x0
0xffff82800001d780 0001 00000000 0x0 0x0
0xffff82800001d800 0001 00000000 0x0 0x0
0xffff82800001d880 0001 00000000 0x0 0x0
0xffff82800001d900 0001 00000000 0x0 0x0
0xffff82800001d980 0001 00000000 0x0 0x0
0xffff82800001da00 0001 00000000 0x0 0x0
0xffff82800001da80 0001 00000000 0x0 0x0
0xffff82800001db00 0001 00000000 0x0 0x0
0xffff82800001db80 0001 00000000 0x0 0x0
0xffff82800001dc00 0001 00000000 0x0 0x0
0xffff82800001dc80 0001 00000000 0x0 0x0
0xffff82800001dd00 0001 00000000 0x0 0x0
0xffff82800001dd80 0001 00000000 0x0 0x0
0xffff82800001de00 0001 00000000 0x0 0x0
0xffff82800001de80 0001 00000000 0x0 0x0
0xffff82800001df00 0001 00000000 0x0 0x0
0xffff82800001df80 0001 00000000 0x0 0x0
0xffff82800001e000 0001 00000000 0x0 0x0
0xffff82800001e080 0001 00000000 0x0 0x0
0xffff82800001e100 0001 00000000 0x0 0x0
0xffff82800001e180 0001 00000000 0x0 0x0
0xffff82800001e200 0001 00000000 0x0 0x0
0xffff82800001e280 0001 00000000 0x0 0x0
0xffff82800001e300 0001 00000000 0x0 0x0
0xffff82800001e380 0001 00000000 0x0 0x0
0xffff82800001e400 0001 00000000 0x0 0x0
0xffff82800001e480 0001 00000000 0x0 0x0
0xffff82800001e500 0001 00000000 0x0 0x0
0xffff82800001e580 0001 00000000 0x0 0x0
0xffff82800001e600 0001 00000000 0x0 0x0
0xffff82800001e680 0001 00000000 0x0 0x0
0xffff82800001e700 0001 00000000 0x0 0x0
0xffff82800001e780 0001 00000000 0x0 0x0
0xffff82800001e800 0001 00000000 0x0 0x0
0xffff82800001e880 0001 00000000 0x0 0x0
0xffff82800001e900 0001 00000000 0x0 0x0
0xffff82800001e980 0001 00000000 0x0 0x0
0xffff82800001ea00 0001 00000000 0x0 0x0
0xffff82800001ea80 0001 00000000 0x0 0x0
0xffff82800001eb00 0001 00000000 0x0 0x0
0xffff82800001eb80 0001 00000000 0x0 0x0
0xffff82800001ec00 0001 00000000 0x0 0x0
0xffff82800001ec80 0001 00000000 0x0 0x0
0xffff82800001ed00 0001 00000000 0x0 0x0
0xffff82800001ed80 0001 00000000 0x0 0x0
0xffff82800001ee00 0001 00000000 0x0 0x0
0xffff82800001ee80 0001 00000000 0x0 0x0
0xffff82800001ef00 0001 00000000 0x0 0x0
0xffff82800001ef80 0001 00000000 0x0 0x0
0xffff82800001f000 0001 00000000 0x0 0x0
0xffff82800001f080 0001 00000000 0x0 0x0
0xffff82800001f100 0001 00000000 0x0 0x0
0xffff82800001f180 0001 00000000 0x0 0x0
0xffff82800001f200 0001 00000000 0x0 0x0
0xffff82800001f280 0001 00000000 0x0 0x0
0xffff82800001f300 0001 00000000 0x0 0x0
0xffff82800001f380 0001 00000000 0x0 0x0
0xffff82800001f400 0001 00000000 0x0 0x0
0xffff82800001f480 0001 00000000 0x0 0x0
0xffff82800001f500 0001 00000000 0x0 0x0
0xffff82800001f580 0001 00000000 0x0 0x0
0xffff82800001f600 0001 00000000 0x0 0x0
0xffff82800001f680 0001 00000000 0x0 0x0
0xffff82800001f700 0001 00000000 0x0 0x0
0xffff82800001f780 0001 00000000 0x0 0x0
0xffff82800001f800 0001 00000000 0x0 0x0
0xffff82800001f880 0001 00000000 0x0 0x0
0xffff82800001f900 0001 00000000 0x0 0x0
0xffff82800001f980 0001 00000000 0x0 0x0
0xffff82800001fa00 0001 00000000 0x0 0x0
0xffff82800001fa80 0001 00000000 0x0 0x0
0xffff82800001fb00 0001 00000000 0x0 0x0
0xffff82800001fb80 0001 00000000 0x0 0x0
0xffff82800001fc00 0001 00000000 0x0 0x0
0xffff82800001fc80 0001 00000000 0x0 0x0
0xffff82800001fd00 0001 00000000 0x0 0x0
0xffff82800001fd80 0001 00000000 0x0 0x0
0xffff82800001fe00 0001 00000000 0x0 0x0
0xffff82800001fe80 0001 00000000 0x0 0x0
0xffff82800001ff00 0001 00000000 0x0 0x0
0xffff82800001ff80 0001 00000000 0x0 0x0
0xffff828000020000 0001 00000000 0x0 0x0
0xffff828000020080 0001 00000000 0x0 0x0
0xffff828000020100 0001 00000000 0x0 0x0
0xffff828000020180 0001 00000000 0x0 0x0
0xffff828000020200 0001 00000000 0x0 0x0
0xffff828000020280 0001 00000000 0x0 0x0
0xffff828000020300 0001 00000000 0x0 0x0
0xffff828000020380 0001 00000000 0x0 0x0
0xffff828000020400 0001 00000000 0x0 0x0
0xffff828000020480 0001 00000000 0x0 0x0
0xffff828000020500 0001 00000000 0x0 0x0
0xffff828000020580 0001 00000000 0x0 0x0
0xffff828000020600 0001 00000000 0x0 0x0
0xffff828000020680 0001 00000000 0x0 0x0
0xffff828000020700 0001 00000000 0x0 0x0
0xffff828000020780 0001 00000000 0x0 0x0
0xffff828000020800 0001 00000000 0x0 0x0
0xffff828000020880 0001 00000000 0x0 0x0
0xffff828000020900 0001 00000000 0x0 0x0
0xffff828000020980 0001 00000000 0x0 0x0
0xffff828000020a00 0001 00000000 0x0 0x0
0xffff828000020a80 0001 00000000 0x0 0x0
0xffff828000020b00 0001 00000000 0x0 0x0
0xffff828000020b80 0001 00000000 0x0 0x0
0xffff828000020c00 0001 00000000 0x0 0x0
0xffff828000020c80 0001 00000000 0x0 0x0
0xffff828000020d00 0001 00000000 0x0 0x0
0xffff828000020d80 0001 00000000 0x0 0x0
0xffff828000020e00 0001 00000000 0x0 0x0
0xffff828000020e80 0001 00000000 0x0 0x0
0xffff828000020f00 0001 00000000 0x0 0x0
0xffff828000020f80 0001 00000000 0x0 0x0
0xffff828000021000 0001 00000000 0x0 0x0
0xffff828000021080 0001 00000000 0x0 0x0
0xffff828000021100 0001 00000000 0x0 0x0
0xffff828000021180 0001 00000000 0x0 0x0
0xffff828000021200 0001 00000000 0x0 0x0
0xffff828000021280 0001 00000000 0x0 0x0
0xffff828000021300 0001 00000000 0x0 0x0
0xffff828000021380 0001 00000000 0x0 0x0
0xffff828000021400 0001 00000000 0x0 0x0
0xffff828000021480 0001 00000000 0x0 0x0
0xffff828000021500 0001 00000000 0x0 0x0
0xffff828000021580 0001 00000000 0x0 0x0
0xffff828000021600 0001 00000000 0x0 0x0
0xffff828000021680 0001 00000000 0x0 0x0
0xffff828000021700 0001 00000000 0x0 0x0
0xffff828000021780 0001 00000000 0x0 0x0
0xffff828000021800 0001 00000000 0x0 0x0
0xffff828000021880 0001 00000000 0x0 0x0
0xffff828000021900 0001 00000000 0x0 0x0
0xffff828000021980 0001 00000000 0x0 0x0
0xffff828000021a00 0001 00000000 0x0 0x0
0xffff828000021a80 0001 00000000 0x0 0x0
0xffff828000021b00 0001 00000000 0x0 0x0
0xffff828000021b80 0001 00000000 0x0 0x0
0xffff828000021c00 0001 00000000 0x0 0x0
0xffff828000021c80 0001 00000000 0x0 0x0
0xffff828000021d00 0001 00000000 0x0 0x0
0xffff828000021d80 0001 00000000 0x0 0x0
0xffff828000021e00 0001 00000000 0x0 0x0
0xffff828000021e80 0001 00000000 0x0 0x0
0xffff828000021f00 0001 00000000 0x0 0x0
0xffff828000021f80 0001 00000000 0x0 0x0
0xffff828000022000 0001 00000000 0x0 0x0
0xffff828000022080 0001 00000000 0x0 0x0
0xffff828000022100 0001 00000000 0x0 0x0
0xffff828000022180 0001 00000000 0x0 0x0
0xffff828000022200 0001 00000000 0x0 0x0
0xffff828000022280 0001 00000000 0x0 0x0
0xffff828000022300 0001 00000000 0x0 0x0
0xffff828000022380 0001 00000000 0x0 0x0
0xffff828000022400 0001 00000000 0x0 0x0
0xffff828000022480 0001 00000000 0x0 0x0
0xffff828000022500 0001 00000000 0x0 0x0
0xffff828000022580 0001 00000000 0x0 0x0
0xffff828000022600 0001 00000000 0x0 0x0
0xffff828000022680 0001 00000000 0x0 0x0
0xffff828000022700 0001 00000000 0x0 0x0
0xffff828000022780 0001 00000000 0x0 0x0
0xffff828000022800 0001 00000000 0x0 0x0
0xffff828000022880 0001 00000000 0x0 0x0
0xffff828000022900 0001 00000000 0x0 0x0
0xffff828000022980 0001 00000000 0x0 0x0
0xffff828000022a00 0001 00000000 0x0 0x0
0xffff828000022a80 0001 00000000 0x0 0x0
0xffff828000022b00 0001 00000000 0x0 0x0
0xffff828000022b80 0001 00000000 0x0 0x0
0xffff828000022c00 0001 00000000 0x0 0x0
0xffff828000022c80 0001 00000000 0x0 0x0
0xffff828000022d00 0001 00000000 0x0 0x0
0xffff828000022d80 0001 00000000 0x0 0x0
0xffff828000022e00 0001 00000000 0x0 0x0
0xffff828000022e80 0001 00000000 0x0 0x0
0xffff828000022f00 0001 00000000 0x0 0x0
0xffff828000022f80 0001 00000000 0x0 0x0
0xffff828000023000 0001 00000000 0x0 0x0
0xffff828000023080 0001 00000000 0x0 0x0
0xffff828000023100 0001 00000000 0x0 0x0
0xffff828000023180 0001 00000000 0x0 0x0
0xffff828000023200 0001 00000000 0x0 0x0
0xffff828000023280 0001 00000000 0x0 0x0
0xffff828000023300 0001 00000000 0x0 0x0
0xffff828000023380 0001 00000000 0x0 0x0
0xffff828000023400 0001 00000000 0x0 0x0
0xffff828000023480 0001 00000000 0x0 0x0
0xffff828000023500 0001 00000000 0x0 0x0
0xffff828000023580 0001 00000000 0x0 0x0
0xffff828000023600 0001 00000000 0x0 0x0
0xffff828000023680 0001 00000000 0x0 0x0
0xffff828000023700 0001 00000000 0x0 0x0
0xffff828000023780 0001 00000000 0x0 0x0
0xffff828000023800 0001 00000000 0x0 0x0
0xffff828000023880 0001 00000000 0x0 0x0
0xffff828000023900 0001 00000000 0x0 0x0
0xffff828000023980 0001 00000000 0x0 0x0
0xffff828000023a00 0001 00000000 0x0 0x0
0xffff828000023a80 0001 00000000 0x0 0x0
0xffff828000023b00 0001 00000000 0x0 0x0
0xffff828000023b80 0001 00000000 0x0 0x0
0xffff828000023c00 0001 00000000 0x0 0x0
0xffff828000023c80 0001 00000000 0x0 0x0
0xffff828000023d00 0001 00000000 0x0 0x0
0xffff828000023d80 0001 00000000 0x0 0x0
0xffff828000023e00 0001 00000000 0x0 0x0
0xffff828000023e80 0001 00000000 0x0 0x0
0xffff828000023f00 0001 00000000 0x0 0x0
0xffff828000023f80 0001 00000000 0x0 0x0
0xffff828000024000 0001 00000000 0x0 0x0
0xffff828000024080 0001 00000000 0x0 0x0
0xffff828000024100 0001 00000000 0x0 0x0
0xffff828000024180 0001 00000000 0x0 0x0
0xffff828000024200 0001 00000000 0x0 0x0
0xffff828000024280 0001 00000000 0x0 0x0
0xffff828000024300 0001 00000000 0x0 0x0
0xffff828000024380 0001 00000000 0x0 0x0
0xffff828000024400 0001 00000000 0x0 0x0
0xffff828000024480 0001 00000000 0x0 0x0
0xffff828000024500 0001 00000000 0x0 0x0
0xffff828000024580 0001 00000000 0x0 0x0
0xffff828000024600 0001 00000000 0x0 0x0
0xffff828000024680 0001 00000000 0x0 0x0
0xffff828000024700 0001 00000000 0x0 0x0
0xffff828000024780 0001 00000000 0x0 0x0
0xffff828000024800 0001 00000000 0x0 0x0
0xffff828000024880 0001 00000000 0x0 0x0
0xffff828000024900 0001 00000000 0x0 0x0
0xffff828000024980 0001 00000000 0x0 0x0
0xffff828000024a00 0001 00000000 0x0 0x0
0xffff828000024a80 0001 00000000 0x0 0x0
0xffff828000024b00 0001 00000000 0x0 0x0
0xffff828000024b80 0001 00000000 0x0 0x0
0xffff828000024c00 0001 00000000 0x0 0x0
0xffff828000024c80 0001 00000000 0x0 0x0
0xffff828000024d00 0001 00000000 0x0 0x0
0xffff828000024d80 0001 00000000 0x0 0x0
0xffff828000024e00 0001 00000000 0x0 0x0
0xffff828000024e80 0001 00000000 0x0 0x0
0xffff828000024f00 0001 00000000 0x0 0x0
0xffff828000024f80 0001 00000000 0x0 0x0
0xffff828000025000 0001 00000000 0x0 0x0
0xffff828000025080 0001 00000000 0x0 0x0
0xffff828000025100 0001 00000000 0x0 0x0
0xffff828000025180 0001 00000000 0x0 0x0
0xffff828000025200 0001 00000000 0x0 0x0
0xffff828000025280 0001 00000000 0x0 0x0
0xffff828000025300 0001 00000000 0x0 0x0
0xffff828000025380 0001 00000000 0x0 0x0
0xffff828000025400 0001 00000000 0x0 0x0
0xffff828000025480 0001 00000000 0x0 0x0
0xffff828000025500 0001 00000000 0x0 0x0
0xffff828000025580 0001 00000000 0x0 0x0
0xffff828000025600 0001 00000000 0x0 0x0
0xffff828000025680 0001 00000000 0x0 0x0
0xffff828000025700 0001 00000000 0x0 0x0
0xffff828000025780 0001 00000000 0x0 0x0
0xffff828000025800 0001 00000000 0x0 0x0
0xffff828000025880 0001 00000000 0x0 0x0
0xffff828000025900 0001 00000000 0x0 0x0
0xffff828000025980 0001 00000000 0x0 0x0
0xffff828000025a00 0001 00000000 0x0 0x0
0xffff828000025a80 0001 00000000 0x0 0x0
0xffff828000025b00 0001 00000000 0x0 0x0
0xffff828000025b80 0001 00000000 0x0 0x0
0xffff828000025c00 0001 00000000 0x0 0x0
0xffff828000025c80 0001 00000000 0x0 0x0
0xffff828000025d00 0001 00000000 0x0 0x0
0xffff828000025d80 0001 00000000 0x0 0x0
0xffff828000025e00 0001 00000000 0x0 0x0
0xffff828000025e80 0001 00000000 0x0 0x0
0xffff828000025f00 0001 00000000 0x0 0x0
0xffff828000025f80 0001 00000000 0x0 0x0
0xffff828000026000 0001 00000000 0x0 0x0
0xffff828000026080 0001 00000000 0x0 0x0
0xffff828000026100 0001 00000000 0x0 0x0
0xffff828000026180 0001 00000000 0x0 0x0
0xffff828000026200 0001 00000000 0x0 0x0
0xffff828000026280 0001 00000000 0x0 0x0
0xffff828000026300 0001 00000000 0x0 0x0
0xffff828000026380 0001 00000000 0x0 0x0
0xffff828000026400 0001 00000000 0x0 0x0
0xffff828000026480 0001 00000000 0x0 0x0
0xffff828000026500 0001 00000000 0x0 0x0
0xffff828000026580 0001 00000000 0x0 0x0
0xffff828000026600 0001 00000000 0x0 0x0
0xffff828000026680 0001 00000000 0x0 0x0
0xffff828000026700 0001 00000000 0x0 0x0
0xffff828000026780 0001 00000000 0x0 0x0
0xffff828000026800 0001 00000000 0x0 0x0
0xffff828000026880 0001 00000000 0x0 0x0
0xffff828000026900 0001 00000000 0x0 0x0
0xffff828000026980 0001 00000000 0x0 0x0
0xffff828000026a00 0001 00000000 0x0 0x0
0xffff828000026a80 0001 00000000 0x0 0x0
0xffff828000026b00 0001 00000000 0x0 0x0
0xffff828000026b80 0001 00000000 0x0 0x0
0xffff828000026c00 0001 00000000 0x0 0x0
0xffff828000026c80 0001 00000000 0x0 0x0
0xffff828000026d00 0001 00000000 0x0 0x0
0xffff828000026d80 0001 00000000 0x0 0x0
0xffff828000026e00 0001 00000000 0x0 0x0
0xffff828000026e80 0001 00000000 0x0 0x0
0xffff828000026f00 0001 00000000 0x0 0x0
0xffff828000026f80 0001 00000000 0x0 0x0
0xffff828000027000 0001 00000000 0x0 0x0
0xffff828000027080 0001 00000000 0x0 0x0
0xffff828000027100 0001 00000000 0x0 0x0
0xffff828000027180 0001 00000000 0x0 0x0
0xffff828000027200 0001 00000000 0x0 0x0
0xffff828000027280 0001 00000000 0x0 0x0
0xffff828000027300 0001 00000000 0x0 0x0
0xffff828000027380 0001 00000000 0x0 0x0
0xffff828000027400 0001 00000000 0x0 0x0
0xffff828000027480 0001 00000000 0x0 0x0
0xffff828000027500 0001 00000000 0x0 0x0
0xffff828000027580 0001 00000000 0x0 0x0
0xffff828000027600 0001 00000000 0x0 0x0
0xffff828000027680 0001 00000000 0x0 0x0
0xffff828000027700 0001 00000000 0x0 0x0
0xffff828000027780 0001 00000000 0x0 0x0
0xffff828000027800 0001 00000000 0x0 0x0
0xffff828000027880 0001 00000000 0x0 0x0
0xffff828000027900 0001 00000000 0x0 0x0
0xffff828000027980 0001 00000000 0x0 0x0
0xffff828000027a00 0001 00000000 0x0 0x0
0xffff828000027a80 0001 00000000 0x0 0x0
0xffff828000027b00 0001 00000000 0x0 0x0
0xffff828000027b80 0001 00000000 0x0 0x0
0xffff828000027c00 0001 00000000 0x0 0x0
0xffff828000027c80 0001 00000000 0x0 0x0
0xffff828000027d00 0001 00000000 0x0 0x0
0xffff828000027d80 0001 00000000 0x0 0x0
0xffff828000027e00 0001 00000000 0x0 0x0
0xffff828000027e80 0001 00000000 0x0 0x0
0xffff828000027f00 0001 00000000 0x0 0x0
0xffff828000027f80 0001 00000000 0x0 0x0
0xffff828000028000 0001 00000000 0x0 0x0
0xffff828000028080 0001 00000000 0x0 0x0
0xffff828000028100 0001 00000000 0x0 0x0
0xffff828000028180 0001 00000000 0x0 0x0
0xffff828000028200 0001 00000000 0x0 0x0
0xffff828000028280 0001 00000000 0x0 0x0
0xffff828000028300 0001 00000000 0x0 0x0
0xffff828000028380 0001 00000000 0x0 0x0
0xffff828000028400 0001 00000000 0x0 0x0
0xffff828000028480 0001 00000000 0x0 0x0
0xffff828000028500 0001 00000000 0x0 0x0
0xffff828000028580 0001 00000000 0x0 0x0
0xffff828000028600 0001 00000000 0x0 0x0
0xffff828000028680 0001 00000000 0x0 0x0
0xffff828000028700 0001 00000000 0x0 0x0
0xffff828000028780 0001 00000000 0x0 0x0
0xffff828000028800 0001 00000000 0x0 0x0
0xffff828000028880 0001 00000000 0x0 0x0
0xffff828000028900 0001 00000000 0x0 0x0
0xffff828000028980 0001 00000000 0x0 0x0
0xffff828000028a00 0001 00000000 0x0 0x0
0xffff828000028a80 0001 00000000 0x0 0x0
0xffff828000028b00 0001 00000000 0x0 0x0
0xffff828000028b80 0001 00000000 0x0 0x0
0xffff828000028c00 0001 00000000 0x0 0x0
0xffff828000028c80 0001 00000000 0x0 0x0
0xffff828000028d00 0001 00000000 0x0 0x0
0xffff828000028d80 0001 00000000 0x0 0x0
0xffff828000028e00 0001 00000000 0x0 0x0
0xffff828000028e80 0001 00000000 0x0 0x0
0xffff828000028f00 0001 00000000 0x0 0x0
0xffff828000028f80 0001 00000000 0x0 0x0
0xffff828000029000 0001 00000000 0x0 0x0
0xffff828000029080 0001 00000000 0x0 0x0
0xffff828000029100 0001 00000000 0x0 0x0
0xffff828000029180 0001 00000000 0x0 0x0
0xffff828000029200 0001 00000000 0x0 0x0
0xffff828000029280 0001 00000000 0x0 0x0
0xffff828000029300 0001 00000000 0x0 0x0
0xffff828000029380 0001 00000000 0x0 0x0
0xffff828000029400 0001 00000000 0x0 0x0
0xffff828000029480 0001 00000000 0x0 0x0
0xffff828000029500 0001 00000000 0x0 0x0
0xffff828000029580 0001 00000000 0x0 0x0
0xffff828000029600 0001 00000000 0x0 0x0
0xffff828000029680 0001 00000000 0x0 0x0
0xffff828000029700 0001 00000000 0x0 0x0
0xffff828000029780 0001 00000000 0x0 0x0
0xffff828000029800 0001 00000000 0x0 0x0
0xffff828000029880 0001 00000000 0x0 0x0
0xffff828000029900 0001 00000000 0x0 0x0
0xffff828000029980 0001 00000000 0x0 0x0
0xffff828000029a00 0001 00000000 0x0 0x0
0xffff828000029a80 0001 00000000 0x0 0x0
0xffff828000029b00 0001 00000000 0x0 0x0
0xffff828000029b80 0001 00000000 0x0 0x0
0xffff828000029c00 0001 00000000 0x0 0x0
0xffff828000029c80 0001 00000000 0x0 0x0
0xffff828000029d00 0001 00000000 0x0 0x0
0xffff828000029d80 0001 00000000 0x0 0x0
0xffff828000029e00 0001 00000000 0x0 0x0
0xffff828000029e80 0001 00000000 0x0 0x0
0xffff828000029f00 0001 00000000 0x0 0x0
0xffff828000029f80 0001 00000000 0x0 0x0
0xffff82800002a000 0001 00000000 0x0 0x0
0xffff82800002a080 0001 00000000 0x0 0x0
0xffff82800002a100 0001 00000000 0x0 0x0
0xffff82800002a180 0001 00000000 0x0 0x0
0xffff82800002a200 0001 00000000 0x0 0x0
0xffff82800002a280 0001 00000000 0x0 0x0
0xffff82800002a300 0001 00000000 0x0 0x0
0xffff82800002a380 0001 00000000 0x0 0x0
0xffff82800002a400 0001 00000000 0x0 0x0
0xffff82800002a480 0001 00000000 0x0 0x0
0xffff82800002a500 0001 00000000 0x0 0x0
0xffff82800002a580 0001 00000000 0x0 0x0
0xffff82800002a600 0001 00000000 0x0 0x0
0xffff82800002a680 0001 00000000 0x0 0x0
0xffff82800002a700 0001 00000000 0x0 0x0
0xffff82800002a780 0001 00000000 0x0 0x0
0xffff82800002a800 0001 00000000 0x0 0x0
0xffff82800002a880 0001 00000000 0x0 0x0
0xffff82800002a900 0001 00000000 0x0 0x0
0xffff82800002a980 0001 00000000 0x0 0x0
0xffff82800002aa00 0001 00000000 0x0 0x0
0xffff82800002aa80 0001 00000000 0x0 0x0
0xffff82800002ab00 0001 00000000 0x0 0x0
0xffff82800002ab80 0001 00000000 0x0 0x0
0xffff82800002ac00 0001 00000000 0x0 0x0
0xffff82800002ac80 0001 00000000 0x0 0x0
0xffff82800002ad00 0001 00000000 0x0 0x0
0xffff82800002ad80 0001 00000000 0x0 0x0
0xffff82800002ae00 0001 00000000 0x0 0x0
0xffff82800002ae80 0001 00000000 0x0 0x0
0xffff82800002af00 0001 00000000 0x0 0x0
0xffff82800002af80 0001 00000000 0x0 0x0
0xffff82800002b000 0001 00000000 0x0 0x0
0xffff82800002b080 0001 00000000 0x0 0x0
0xffff82800002b100 0001 00000000 0x0 0x0
0xffff82800002b180 0001 00000000 0x0 0x0
0xffff82800002b200 0001 00000000 0x0 0x0
0xffff82800002b280 0001 00000000 0x0 0x0
0xffff82800002b300 0001 00000000 0x0 0x0
0xffff82800002b380 0001 00000000 0x0 0x0
0xffff82800002b400 0001 00000000 0x0 0x0
0xffff82800002b480 0001 00000000 0x0 0x0
0xffff82800002b500 0001 00000000 0x0 0x0
0xffff82800002b580 0001 00000000 0x0 0x0
0xffff82800002b600 0001 00000000 0x0 0x0
0xffff82800002b680 0001 00000000 0x0 0x0
0xffff82800002b700 0001 00000000 0x0 0x0
0xffff82800002b780 0001 00000000 0x0 0x0
0xffff82800002b800 0001 00000000 0x0 0x0
0xffff82800002b880 0001 00000000 0x0 0x0
0xffff82800002b900 0001 00000000 0x0 0x0
0xffff82800002b980 0001 00000000 0x0 0x0
0xffff82800002ba00 0001 00000000 0x0 0x0
0xffff82800002ba80 0001 00000000 0x0 0x0
0xffff82800002bb00 0001 00000000 0x0 0x0
0xffff82800002bb80 0001 00000000 0x0 0x0
0xffff82800002bc00 0001 00000000 0x0 0x0
0xffff82800002bc80 0001 00000000 0x0 0x0
0xffff82800002bd00 0001 00000000 0x0 0x0
0xffff82800002bd80 0001 00000000 0x0 0x0
0xffff82800002be00 0001 00000000 0x0 0x0
0xffff82800002be80 0001 00000000 0x0 0x0
0xffff82800002bf00 0001 00000000 0x0 0x0
0xffff82800002bf80 0001 00000000 0x0 0x0
0xffff82800002c000 0001 00000000 0x0 0x0
0xffff82800002c080 0001 00000000 0x0 0x0
0xffff82800002c100 0001 00000000 0x0 0x0
0xffff82800002c180 0001 00000000 0x0 0x0
0xffff82800002c200 0001 00000000 0x0 0x0
0xffff82800002c280 0001 00000000 0x0 0x0
0xffff82800002c300 0001 00000000 0x0 0x0
0xffff82800002c380 0001 00000000 0x0 0x0
0xffff82800002c400 0001 00000000 0x0 0x0
0xffff82800002c480 0001 00000000 0x0 0x0
0xffff82800002c500 0001 00000000 0x0 0x0
0xffff82800002c580 0001 00000000 0x0 0x0
0xffff82800002c600 0001 00000000

---
This report is generated by a bot. It may contain errors.
See https://goo.gl/tpsmEJ for more information about syzbot.
syzbot engineers can be reached at syzk...@googlegroups.com.

syzbot will keep track of this issue. See:
https://goo.gl/tpsmEJ#status for how to communicate with syzbot.

If the bug is already fixed, let syzbot know by replying with:
#syz fix: exact-commit-title

If you want to overwrite bug's subsystems, reply with:
#syz set subsystems: new-subsystem
(See the list of subsystem names on the web dashboard)

If the bug is a duplicate of another bug, reply with:
#syz dup: exact-subject-of-another-report

If you want to undo deduplication, reply with:
#syz undup

syzbot

unread,
Jan 10, 2024, 9:31:16 PMJan 10
to syzkaller-...@googlegroups.com
Auto-closing this bug as obsolete.
Crashes did not happen for a while, no reproducer and no activity.
Reply all
Reply to author
Forward
0 new messages