MSan: Uninitialized Memory in sysctl_rtable

6 views

Skip to first unread message

syzbot

unread,

May 24, 2023, 8:54:04 AM5/24/23

to syzkaller-...@googlegroups.com

Hello,

syzbot found the following issue on:

HEAD commit: 42d3fefefe6a efi(4): Fix logic to handle buffer sizing.
git tree: netbsd
console output: https://syzkaller.appspot.com/x/log.txt?x=1722f819280000
kernel config: https://syzkaller.appspot.com/x/.config?x=739e57438eb9ed9e
dashboard link: https://syzkaller.appspot.com/bug?extid=874b8f137916d568b181
compiler: Debian clang version 15.0.7

Unfortunately, I don't have any reproducer for this issue yet.

Downloadable assets:
disk image: https://storage.googleapis.com/syzbot-assets/8be571dc5302/disk-42d3fefe.raw.xz
netbsd.gdb: https://storage.googleapis.com/syzbot-assets/ba642cd6411c/netbsd-42d3fefe.gdb.xz

IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+874b8f...@syzkaller.appspotmail.com

[ 148.1289795] panic: MSan: Uninitialized Pool Memory In copyout():arg1 At Offset 176/256, From kmem_intr_alloc+269

[ 148.1389688] cpu1: Begin traceback...
[ 148.1589698] vpanic() at netbsd:vpanic+0xc9d
[ 148.2089682] panic() at netbsd:panic+0x1b3 sys/kern/subr_prf.c:209
[ 148.2589680] kmsan_report_hook() at netbsd:kmsan_report_hook+0x26b
[ 148.3089683] kmsan_copyout() at netbsd:kmsan_copyout+0x20c kmsan_init_ret sys/kern/subr_msan.c:400 [inline]
[ 148.3089683] kmsan_copyout() at netbsd:kmsan_copyout+0x20c sys/kern/subr_msan.c:871
[ 148.3689683] sysctl_rtable() at netbsd:sysctl_rtable+0x2873 sysctl_iflist_addr sys/net/rtsock.c:268 [inline]
[ 148.3689683] sysctl_rtable() at netbsd:sysctl_rtable+0x2873 sysctl_iflist sys/net/rtsock.c:364 [inline]
[ 148.3689683] sysctl_rtable() at netbsd:sysctl_rtable+0x2873 sys/net/rtsock.c:477
[ 148.4189674] sysctl_dispatch() at netbsd:sysctl_dispatch+0x526 sys/kern/kern_sysctl.c:461
[ 148.4689696] sys___sysctl() at netbsd:sys___sysctl+0x654 sys/kern/kern_sysctl.c:317
[ 148.5189695] syscall() at netbsd:syscall+0x60c sy_invoke sys/sys/syscallvar.h:94 [inline]
[ 148.5189695] syscall() at netbsd:syscall+0x60c sys/arch/x86/x86/syscall.c:138
[ 148.5289694] --- syscall (number 202) ---
[ 148.5489679] netbsd:syscall+0x60c:
[ 148.5489679] cpu1: End traceback...
[ 148.5489679] fatal breakpoint trap in supervisor mode
[ 148.5589681] trap type 1 code 0 rip 0xffffffff8023686d cs 0x8 rflags 0x286 cr2 0x61c4e0 ilevel 0x5 rsp 0xffffba80c78496c0
[ 148.5689656] curlwp 0xffffba801238f700 pid 742.742 lowest kstack 0xffffba80c78422c0
Stopped in pid 742.742 (dhcpcd) at netbsd:breakpoint+0x5: leave
?
breakpoint() at netbsd:breakpoint+0x5
vpanic() at netbsd:vpanic+0xc9d
panic() at netbsd:panic+0x1b3 sys/kern/subr_prf.c:209
kmsan_report_hook() at netbsd:kmsan_report_hook+0x26b
kmsan_copyout() at netbsd:kmsan_copyout+0x20c kmsan_init_ret sys/kern/subr_msan.c:400 [inline]
kmsan_copyout() at netbsd:kmsan_copyout+0x20c sys/kern/subr_msan.c:871
sysctl_rtable() at netbsd:sysctl_rtable+0x2873 sysctl_iflist_addr sys/net/rtsock.c:268 [inline]
sysctl_rtable() at netbsd:sysctl_rtable+0x2873 sysctl_iflist sys/net/rtsock.c:364 [inline]
sysctl_rtable() at netbsd:sysctl_rtable+0x2873 sys/net/rtsock.c:477
sysctl_dispatch() at netbsd:sysctl_dispatch+0x526 sys/kern/kern_sysctl.c:461
sys___sysctl() at netbsd:sys___sysctl+0x654 sys/kern/kern_sysctl.c:317
syscall() at netbsd:syscall+0x60c sy_invoke sys/sys/syscallvar.h:94 [inline]
syscall() at netbsd:syscall+0x60c sys/arch/x86/x86/syscall.c:138
--- syscall (number 202) ---
netbsd:syscall+0x60c:
Panic string: MSan: Uninitialized Pool Memory In copyout():arg1 At Offset 176/256, From kmem_intr_alloc+269

PID LID S CPU FLAGS STRUCT LWP * NAME WAIT
2468 2468 2 0 0 ffffba8013acb500 syz-executor.2
5049 5049 2 0 0 ffffba8013acb0c0 syz-executor.0
2194 2195 2 0 100 ffffba8013e919c0 syz-executor.3
2194 2176 3 1 180 ffffba80135f4600 syz-executor.3 parked
2194 2466 3 0 180 ffffba8013a52780 syz-executor.3 parked
2194 2194 3 1 10000180 ffffba8013502980 syz-executor.3 nanoslp
2193 3945 3 1 180 ffffba80134a1140 syz-executor.1 parked
2193 2648 3 1 180 ffffba80136ae680 syz-executor.1 parked
2193 2193 2 1 10000000 ffffba8013b714c0 syz-executor.1
2178 3131 2 1 100100 ffffba8013e91580 syz-executor.5
2178 2201 2 1 100100 ffffba8013502100 syz-executor.5
2178 2178 3 1 10000000 ffffba8013e91140 syz-executor.5 lwpwait
3033 3033 3 0 180 ffffba8013a52340 syz-executor.0 parked
1941 1941 3 0 180 ffffba8013502540 syz-executor.1 parked
3436 3436 3 1 180 ffffba8013747280 syz-executor.1 parked
1781 1781 2 0 40 ffffba8013710300 syz-executor.2
4399 4399 2 0 140 ffffba8013775700 syz-executor.3
1893 1893 2 0 140 ffffba8013617a80 syz-executor.0
2142 2142 3 1 180 ffffba80135f41c0 init nanoslp
2389 2389 2 0 140 ffffba80121fb200 syz-executor.5
1424 1424 2 0 40 ffffba8013478540 syz-executor.4
1172 1172 2 0 140 ffffba8013710b80 syz-executor.1
850 850 3 0 180 ffffba8013a628c0 syz-executor.3 parked
580 580 3 0 180 ffffba8013a62040 syz-executor.5 parked
578 578 3 0 180 ffffba8013710740 syz-executor.5 parked
3386 3386 3 0 180 ffffba8013b71900 syz-executor.1 parked
549 549 3 1 180 ffffba8013a62480 syz-executor.1 parked
670 670 3 1 180 ffffba8013478980 syz-executor.1 parked
653 653 3 0 180 ffffba8013a52bc0 syz-executor.1 parked
3021 3021 3 0 180 ffffba80135f4a40 syz-executor.4 parked
1449 1449 3 0 180 ffffba8013775b40 syz-executor.4 parked
2397 2397 3 1 180 ffffba80136ae240 syz-executor.3 parked
1104 1104 3 0 180 ffffba80134b05c0 syz-executor.3 parked
2349 2349 3 0 180 ffffba80137752c0 syz-executor.3 parked
2364 2364 3 1 180 ffffba80137476c0 syz-executor.3 parked
1211 1211 3 0 180 ffffba80136aeac0 syz-executor.4 parked
1233 1363 3 0 180 ffffba8013617640 syz-fuzzer parked
1233 1205 3 1 180 ffffba8013617200 syz-fuzzer parked
1233 1128 3 0 1c0 ffffba80134b0a00 syz-fuzzer wait
1233 1115 3 0 180 ffffba80134b0180 syz-fuzzer wait
1233 449 3 0 1c0 ffffba80134a1580 syz-fuzzer wait
1233 984 3 0 180 ffffba8013478100 syz-fuzzer wait
1233 1113 3 1 180 ffffba8012c2d940 syz-fuzzer parked
1233 942 3 0 180 ffffba8012c2d500 syz-fuzzer wait
1233 1239 3 1 180 ffffba8012c2d0c0 syz-fuzzer parked
1233 1242 3 1 180 ffffba8012ba2900 syz-fuzzer parked
1233 1120 3 1 180 ffffba8012ba24c0 syz-fuzzer parked
1233 1224 3 1 180 ffffba8012ba2080 syz-fuzzer wait
1233 1226 3 0 180 ffffba801251d740 syz-fuzzer parked
1233 1233 3 0 180 ffffba80122ff6c0 syz-fuzzer kqueue
1237 1237 3 1 180 ffffba80125e2bc0 sshd select
1222 1222 3 0 180 ffffba80122ffb00 getty nanoslp
1184 1184 3 1 180 ffffba80122ff280 getty nanoslp
1216 1216 3 0 180 ffffba80121feac0 getty nanoslp
1103 1103 3 0 180 ffffba801251d300 sshd select
1095 1095 3 1 180 ffffba8012b748c0 powerd kqueue
702 702 3 1 180 ffffba8012b74480 syslogd kqueue
746 746 3 0 180 ffffba8012b74040 dhcpcd poll
747 747 3 0 180 ffffba801238f2c0 dhcpcd poll
742 > 742 7 1 0 ffffba801238f700 dhcpcd
598 598 3 1 180 ffffba80125e2780 dhcpcd poll
292 292 3 1 180 ffffba80125e2340 dhcpcd poll
485 485 3 0 180 ffffba801238fb40 dhcpcd poll
291 291 2 1 100 ffffba801251db80 dhcpcd
1 1 3 1 180 ffffba8011ede100 init wait
0 5040 3 0 200 ffffba80134a19c0 ktrace ktrwait
0 2091 3 0 200 ffffba8013b71080 ktrace ktrwait
0 2655 3 0 200 ffffba8013747b00 ktrace ktrwait
0 734 3 0 200 ffffba80121fb640 physiod physiod
0 196 3 0 200 ffffba80121fe680 pooldrain pooldrain
0 195 3 0 200 ffffba80121fe240 ioflush syncer
0 194 3 1 200 ffffba80121fba80 pgdaemon pgdaemon
0 171 3 0 200 ffffba801216ba40 usb7 usbevt
0 172 3 0 200 ffffba801216b600 usb6 usbevt
0 170 3 0 200 ffffba801216b1c0 usb5 usbevt
0 168 3 0 200 ffffba801213ca00 usb4 usbevt
0 166 3 0 200 ffffba801213c5c0 usb3 usbevt
0 165 3 0 200 ffffba801213c180 usb2 usbevt
0 31 3 1 200 ffffba80120869c0 usb1 usbevt
0 63 3 0 200 ffffba8012086580 usb0 usbevt
0 126 3 0 200 ffffba8012086140 usbtask-dr usbtsk
0 125 3 1 200 ffffba8011ede980 usbtask-hc usbtsk
0 124 3 0 200 ffffba80103f5b00 swwreboot swwreboot
0 123 3 1 200 ffffba8011ede540 npfgc0 npfgcw
0 122 3 0 200 ffffba8011ed0940 rt_free rt_free
0 121 3 0 200 ffffba8011ed0500 unpgc unpgc
0 120 3 0 200 ffffba8011ed00c0 key_timehandler key_timehandler
0 119 3 1 200 ffffba8011ecb900 icmp6_wqinput/1 icmp6_wqinput
0 118 3 0 200 ffffba8011ecb4c0 icmp6_wqinput/0 icmp6_wqinput
0 > 117 7 0 200 ffffba8011ecb080 nd6_timer
0 116 3 1 200 ffffba8011eab8c0 carp6_wqinput/1 carp6_wqinput
0 115 3 0 200 ffffba8011eab480 carp6_wqinput/0 carp6_wqinput
0 114 3 1 200 ffffba8011eab040 carp_wqinput/1 carp_wqinput
0 113 3 0 200 ffffba8011cedb80 carp_wqinput/0 carp_wqinput
0 112 3 1 200 ffffba8011ced740 icmp_wqinput/1 icmp_wqinput
0 111 3 0 200 ffffba8011cefbc0 icmp_wqinput/0 icmp_wqinput
0 110 2 0 200 ffffba8011cef780 rt_timer
0 109 3 0 200 ffffba8011cef340 vmem_rehash vmem_rehash
0 100 3 1 200 ffffba8011ced300 entbutler entropy
0 99 3 1 200 ffffba80117e0b40 viomb balloon
0 98 3 1 200 ffffba80117e0700 vioif0_txrx/1 vioif0_txrx
0 97 3 0 200 ffffba80117e02c0 vioif0_txrx/0 vioif0_txrx
0 30 3 0 200 ffffba80103f56c0 scsibus0 sccomp
0 29 3 0 200 ffffba80103f5280 pms0 pmsreset
0 28 3 1 200 ffffba80103daac0 xcall/1 xcall
0 27 1 1 200 ffffba80103da680 softser/1
0 26 1 1 200 ffffba80103da240 softclk/1
0 25 1 1 200 ffffba80103d8a80 softbio/1
0 24 1 1 200 ffffba80103d8640 softnet/1
0 23 1 1 201 ffffba80103d8200 idle/1
0 22 3 0 200 ffffba800f1f4a40 lnxsyswq lnxsyswq
0 21 3 0 200 ffffba800f1f4600 lnxubdwq lnxubdwq
0 20 3 0 200 ffffba800f1f41c0 lnxpwrwq lnxpwrwq
0 19 3 0 200 ffffba800f1f2a00 lnxlngwq lnxlngwq
0 18 3 0 200 ffffba800f1f25c0 lnxhipwq lnxhipwq
0 17 3 0 200 ffffba800f1f2180 lnxrcugc lnxrcugc
0 16 3 0 200 ffffba800f1ec9c0 sysmon smtaskq
0 15 3 0 200 ffffba800f1ec580 pmfsuspend pmfsuspend
0 14 3 0 200 ffffba800f1ec140 pmfevent pmfevent
0 13 3 0 200 ffffba800f1e9980 sopendfree sopendfr
0 12 3 0 200 ffffba800f1e9540 ifwdog ifwdog
0 11 3 0 200 ffffba800f1e9100 iflnkst iflnkst
0 10 3 0 200 ffffba800f1df940 nfssilly nfssilly
0 9 3 0 200 ffffba800f1df500 vdrain vdrain
0 8 3 1 200 ffffba800f1df0c0 modunload mod_unld
0 7 3 0 200 ffffba800ebdb900 xcall/0 xcall
0 6 1 0 200 ffffba800ebdb4c0 softser/0
0 > 5 7 0 200 ffffba800ebdb080 softclk/0
0 4 1 0 200 ffffba800ebd98c0 softbio/0
0 3 1 0 200 ffffba800ebd9480 softnet/0
0 2 1 0 201 ffffba800ebd9040 idle/0
0 0 3 0 200 ffffffff8686be80 swapper uvm
[Locks tracked through LWPs]

****** LWP 1781.1781 (syz-executor.2) @ 0xffffba8013710300, l_stat=2

*** Locks held:

* Lock 0 (initialized at netbsd:uvmspace_fork+0x3e4 uvm_map_setup sys/uvm/uvm_map.c:4789 [inline])
* Lock 0 (initialized at netbsd:uvmspace_fork+0x3e4 uvmspace_init sys/uvm/uvm_map.c:4132 [inline])
* Lock 0 (initialized at netbsd:uvmspace_fork+0x3e4 uvmspace_alloc sys/uvm/uvm_map.c:4111 [inline])
* Lock 0 (initialized at netbsd:uvmspace_fork+0x3e4 sys/uvm/uvm_map.c:4588)
lock address : ffffba80135f0860
type : sleep/adaptive
initialized : netbsd:uvmspace_fork+0x3e4
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffffba8013710300 last held: 0xffffba8013710300
last locked* : netbsd:vm_map_lock+0x57
unlocked : netbsd:uvm_fault_upper_enter+0x161a
owner/count : 000000000000000000 flags : 000000000000000000
Turnstile: no active turnstile for this lock.

*** Locks wanted:

* Lock 0 (initialized at netbsd:pool_init+0x2061 sys/kern/subr_pool.c:981)
lock address : netbsd:uvm_map_entry_cache+0xb0
type : sleep/adaptive
initialized : netbsd:pool_init+0x2061
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 1
relevant cpu : 0 last held: 0
relevant lwp : 0xffffba8013710300 last held: 000000000000000000
last locked : netbsd:pool_get+0x7fc
unlocked* : netbsd:pool_get+0x3a57
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 747.747 (dhcpcd) @ 0xffffba801238f2c0, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:module_hook_init+0x43 sys/kern/kern_module_hook.c:132)
lock address : netbsd:module_hook
type : sleep/adaptive
initialized : netbsd:module_hook_init+0x43
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffffba801238f2c0 last held: 000000000000000000
last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 742.742 (dhcpcd) @ 0xffffba801238f700, l_stat=7

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:module_hook_init+0x43 sys/kern/kern_module_hook.c:132)
lock address : netbsd:module_hook
type : sleep/adaptive
initialized : netbsd:module_hook_init+0x43
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 0
relevant lwp : 0xffffba801238f700 last held: 000000000000000000
last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 485.485 (dhcpcd) @ 0xffffba801238fb40, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:module_hook_init+0x43 sys/kern/kern_module_hook.c:132)
lock address : netbsd:module_hook
type : sleep/adaptive
initialized : netbsd:module_hook_init+0x43
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffffba801238fb40 last held: 000000000000000000
last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 291.291 (dhcpcd) @ 0xffffba801251db80, l_stat=2

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:module_hook_init+0x43 sys/kern/kern_module_hook.c:132)
lock address : netbsd:module_hook
type : sleep/adaptive
initialized : netbsd:module_hook_init+0x43
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 0
relevant lwp : 0xffffba801251db80 last held: 000000000000000000
last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 0.26 (softclk/1) @ 0xffffba80103da240, l_stat=1

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:module_hook_init+0x43 sys/kern/kern_module_hook.c:132)
lock address : netbsd:module_hook
type : sleep/adaptive
initialized : netbsd:module_hook_init+0x43
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 0
relevant lwp : 0xffffba80103da240 last held: 000000000000000000
last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 0.11 (iflnkst) @ 0xffffba800f1e9100, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:module_hook_init+0x43 sys/kern/kern_module_hook.c:132)
lock address : netbsd:module_hook
type : sleep/adaptive
initialized : netbsd:module_hook_init+0x43
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffffba800f1e9100 last held: 000000000000000000
last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 0.0 (swapper) @ 0xffffffff8686be80, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:module_hook_init+0x43 sys/kern/kern_module_hook.c:132)
lock address : netbsd:module_hook
type : sleep/adaptive
initialized : netbsd:module_hook_init+0x43
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffffffff8686be80 last held: 000000000000000000
last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

[Locks tracked through CPUs]

******* Locks held on cpu1:

* Lock 0 (initialized at netbsd:main+0x354 sys/kern/init_main.c:303)
lock address : netbsd:kernel_lock
type : spin
initialized : netbsd:main+0x354
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 1
relevant lwp : 0xffffba801238f700 last held: 0xffffba801238f700
last locked* : netbsd:sleepq_block+0x7bb
unlocked : netbsd:cv_enter+0x75e
curcpu holds : 1 wanted by: 000000000000000000

* Lock 1 (initialized at netbsd:kprintf_init+0xcb sys/kern/subr_prf.c:156)
lock address : netbsd:kprintf_mtx
type : spin
initialized : netbsd:kprintf_init+0xcb
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 1
relevant lwp : 0xffffba801238f700 last held: 0xffffba801238f700
last locked* : netbsd:vpanic+0x624
unlocked : netbsd:log+0x618
owner field : 0x0000000000000800 wait/spin: 0/1

PAGE FLAG PQ UOBJECT UANON
0xffffba8000017180 0001 00000000 0x0 0x0
0xffffba8000017200 0041 00000000 0x0 0x0
0xffffba8000017280 0041 00000000 0x0 0x0
0xffffba8000017300 0041 00000000 0x0 0x0
0xffffba8000017380 0041 00000000 0x0 0x0
0xffffba8000017400 0041 00000000 0x0 0x0
0xffffba8000017480 0041 00000000 0x0 0x0
0xffffba8000017500 0041 00000000 0x0 0x0
0xffffba8000017580 0041 00000000 0x0 0x0
0xffffba8000017600 0041 00000000 0x0 0x0
0xffffba8000017680 0041 00000000 0x0 0x0
0xffffba8000017700 0041 00000000 0x0 0x0
0xffffba8000017780 0041 00000000 0x0 0x0
0xffffba8000017800 0041 00000000 0x0 0x0
0xffffba8000017880 0041 00000000 0x0 0x0
0xffffba8000017900 0041 00000000 0x0 0x0
0xffffba8000017980 0041 00000000 0x0 0x0
0xffffba8000017a00 0041 00000000 0x0 0x0
0xffffba8000017a80 0041 00000000 0x0 0x0
0xffffba8000017b00 0041 00000000 0x0 0x0
0xffffba8000017b80 0041 00000000 0x0 0x0
0xffffba8000017c00 0041 00000000 0x0 0x0
0xffffba8000017c80 0041 00000000 0x0 0x0
0xffffba8000017d00 0041 00000000 0x0 0x0
0xffffba8000017d80 0041 00000000 0x0 0x0
0xffffba8000017e00 0041 00000000 0x0 0x0
0xffffba8000017e80 0041 00000000 0x0 0x0
0xffffba8000017f00 0041 00000000 0x0 0x0
0xffffba8000017f80 0041 00000000 0x0 0x0
0xffffba8000018000 0041 00000000 0x0 0x0
0xffffba8000018080 0041 00000000 0x0 0x0
0xffffba8000018100 0041 00000000 0x0 0x0
0xffffba8000018180 0041 00000000 0x0 0x0
0xffffba8000018200 0041 00000000 0x0 0x0
0xffffba8000018280 0041 00000000 0x0 0x0
0xffffba8000018300 0041 00000000 0x0 0x0
0xffffba8000018380 0041 00000000 0x0 0x0
0xffffba8000018400 0041 00000000 0x0 0x0
0xffffba8000018480 0041 00000000 0x0 0x0
0xffffba8000018500 0041 00000000 0x0 0x0
0xffffba8000018580 0041 00000000 0x0 0x0
0xffffba8000018600 0041 00000000 0x0 0x0
0xffffba8000018680 0041 00000000 0x0 0x0
0xffffba8000018700 0041 00000000 0x0 0x0
0xffffba8000018780 0041 00000000 0x0 0x0
0xffffba8000018800 0041 00000000 0x0 0x0
0xffffba8000018880 0041 00000000 0x0 0x0
0xffffba8000018900 0041 00000000 0x0 0x0
0xffffba8000018980 0041 00000000 0x0 0x0
0xffffba8000018a00 0041 00000000 0x0 0x0
0xffffba8000018a80 0041 00000000 0x0 0x0
0xffffba8000018b00 0041 00000000 0x0 0x0
0xffffba8000018b80 0041 00000000 0x0 0x0
0xffffba8000018c00 0041 00000000 0x0 0x0
0xffffba8000018c80 0041 00000000 0x0 0x0
0xffffba8000018d00 0041 00000000 0x0 0x0
0xffffba8000018d80 0041 00000000 0x0 0x0
0xffffba8000018e00 0041 00000000 0x0 0x0
0xffffba8000018e80 0041 00000000 0x0 0x0
0xffffba8000018f00 0041 00000000 0x0 0x0
0xffffba8000018f80 0041 00000000 0x0 0x0
0xffffba8000019000 0041 00000000 0x0 0x0
0xffffba8000019080 0041 00000000 0x0 0x0
0xffffba8000019100 0041 00000000 0x0 0x0
0xffffba8000019180 0041 00000000 0x0 0x0
0xffffba8000019200 0041 00000000 0x0 0x0
0xffffba8000019280 0041 00000000 0x0 0x0
0xffffba8000019300 0041 00000000 0x0 0x0
0xffffba8000019380 0041 00000000 0x0 0x0
0xffffba8000019400 0041 00000000 0x0 0x0
0xffffba8000019480 0041 00000000 0x0 0x0
0xffffba8000019500 0041 00000000 0x0 0x0
0xffffba8000019580 0041 00000000 0x0 0x0
0xffffba8000019600 0041 00000000 0x0 0x0
0xffffba8000019680 0041 00000000 0x0 0x0
0xffffba8000019700 0041 00000000 0x0 0x0
0xffffba8000019780 0041 00000000 0x0 0x0
0xffffba8000019800 0041 00000000 0x0 0x0
0xffffba8000019880 0041 00000000 0x0 0x0
0xffffba8000019900 0041 00000000 0x0 0x0
0xffffba8000019980 0041 00000000 0x0 0x0
0xffffba8000019a00 0041 00000000 0x0 0x0
0xffffba8000019a80 0041 00000000 0x0 0x0
0xffffba8000019b00 0041 00000000 0x0 0x0
0xffffba8000019b80 0041 00000000 0x0 0x0
0xffffba8000019c00 0041 00000000 0x0 0x0
0xffffba8000019c80 0041 00000000 0x0 0x0
0xffffba8000019d00 0041 00000000 0x0 0x0
0xffffba8000019d80 0041 00000000 0x0 0x0
0xffffba8000019e00 0041 00000000 0x0 0x0
0xffffba8000019e80 0041 00000000 0x0 0x0
0xffffba8000019f00 0041 00000000 0x0 0x0
0xffffba8000019f80 0041 00000000 0x0 0x0
0xffffba800001a000 0041 00000000 0x0 0x0
0xffffba800001a080 0041 00000000 0x0 0x0
0xffffba800001a100 0041 00000000 0x0 0x0
0xffffba800001a180 0041 00000000 0x0 0x0
0xffffba800001a200 0041 00000000 0x0 0x0
0xffffba800001a280 0041 00000000 0x0 0x0
0xffffba800001a300 0041 00000000 0x0 0x0
0xffffba800001a380 0041 00000000 0x0 0x0
0xffffba800001a400 0041 00000000 0x0 0x0
0xffffba800001a480 0041 00000000 0x0 0x0
0xffffba800001a500 0041 00000000 0x0 0x0
0xffffba800001a580 0041 00000000 0x0 0x0
0xffffba800001a600 0041 00000000 0x0 0x0
0xffffba800001a680 0041 00000000 0x0 0x0
0xffffba800001a700 0041 00000000 0x0 0x0
0xffffba800001a780 0041 00000000 0x0 0x0
0xffffba800001a800 0041 00000000 0x0 0x0
0xffffba800001a880 0041 00000000 0x0 0x0
0xffffba800001a900 0041 00000000 0x0 0x0
0xffffba800001a980 0041 00000000 0x0 0x0
0xffffba800001aa00 0041 00000000 0x0 0x0
0xffffba800001aa80 0041 00000000 0x0 0x0
0xffffba800001ab00 0041 00000000 0x0 0x0
0xffffba800001ab80 0041 00000000 0x0 0x0
0xffffba800001ac00 0041 00000000 0x0 0x0
0xffffba800001ac80 0041 00000000 0x0 0x0
0xffffba800001ad00 0041 00000000 0x0 0x0
0xffffba800001ad80 0041 00000000 0x0 0x0
0xffffba800001ae00 0041 00000000 0x0 0x0
0xffffba800001ae80 0041 00000000 0x0 0x0
0xffffba800001af00 0041 00000000 0x0 0x0
0xffffba800001af80 0041 00000000 0x0 0x0
0xffffba800001b000 0041 00000000 0x0 0x0
0xffffba800001b080 0041 00000000 0x0 0x0
0xffffba800001b100 0041 00000000 0x0 0x0
0xffffba800001b180 0041 00000000 0x0 0x0
0xffffba800001b200 0041 00000000 0x0 0x0
0xffffba800001b280 0041 00000000 0x0 0x0
0xffffba800001b300 0041 00000000 0x0 0x0
0xffffba800001b380 0041 00000000 0x0 0x0
0xffffba800001b400 0041 00000000 0x0 0x0
0xffffba800001b480 0041 00000000 0x0 0x0
0xffffba800001b500 0041 00000000 0x0 0x0
0xffffba800001b580 0041 00000000 0x0 0x0
0xffffba800001b600 0041 00000000 0x0 0x0
0xffffba800001b680 0041 00000000 0x0 0x0
0xffffba800001b700 0041 00000000 0x0 0x0
0xffffba800001b780 0041 00000000 0x0 0x0
0xffffba800001b800 0041 00000000 0x0 0x0
0xffffba800001b880 0041 00000000 0x0 0x0
0xffffba800001b900 0041 00000000 0x0 0x0
0xffffba800001b980 0041 00000000 0x0 0x0
0xffffba800001ba00 0041 00000000 0x0 0x0
0xffffba800001ba80 0041 00000000 0x0 0x0
0xffffba800001bb00 0041 00000000 0x0 0x0
0xffffba800001bb80 0041 00000000 0x0 0x0
0xffffba800001bc00 0041 00000000 0x0 0x0
0xffffba800001bc80 0041 00000000 0x0 0x0
0xffffba800001bd00 0041 00000000 0x0 0x0
0xffffba800001bd80 0041 00000000 0x0 0x0
0xffffba800001be00 0041 00000000 0x0 0x0
0xffffba800001be80 0041 00000000 0x0 0x0
0xffffba800001bf00 0041 00000000 0x0 0x0
0xffffba800001bf80 0041 00000000 0x0 0x0
0xffffba800001c000 0041 00000000 0x0 0x0
0xffffba800001c080 0041 00000000 0x0 0x0
0xffffba800001c100 0041 00000000 0x0 0x0
0xffffba800001c180 0041 00000000 0x0 0x0
0xffffba800001c200 0041 00000000 0x0 0x0
0xffffba800001c280 0041 00000000 0x0 0x0
0xffffba800001c300 0041 00000000 0x0 0x0
0xffffba800001c380 0041 00000000 0x0 0x0
0xffffba800001c400 0041 00000000 0x0 0x0
0xffffba800001c480 0041 00000000 0x0 0x0
0xffffba800001c500 0041 00000000 0x0 0x0
0xffffba800001c580 0041 00000000 0x0 0x0
0xffffba800001c600 0041 00000000 0x0 0x0
0xffffba800001c680 0041 00000000 0x0 0x0
0xffffba800001c700 0041 00000000 0x0 0x0
0xffffba800001c780 0001 00000000 0x0 0x0
0xffffba800001c800 0001 00000000 0x0 0x0
0xffffba800001c880 0001 00000000 0x0 0x0
0xffffba800001c900 0001 00000000 0x0 0x0
0xffffba800001c980 0001 00000000 0x0 0x0
0xffffba800001ca00 0001 00000000 0x0 0x0
0xffffba800001ca80 0001 00000000 0x0 0x0
0xffffba800001cb00 0001 00000000 0x0 0x0
0xffffba800001cb80 0001 00000000 0x0 0x0
0xffffba800001cc00 0001 00000000 0x0 0x0
0xffffba800001cc80 0001 00000000 0x0 0x0
0xffffba800001cd00 0001 00000000 0x0 0x0
0xffffba800001cd80 0001 00000000 0x0 0x0
0xffffba800001ce00 0001 00000000 0x0 0x0
0xffffba800001ce80 0001 00000000 0x0 0x0
0xffffba800001cf00 0001 00000000 0x0 0x0
0xffffba800001cf80 0001 00000000 0x0 0x0
0xffffba800001d000 0001 00000000 0x0 0x0
0xffffba800001d080 0001 00000000 0x0 0x0
0xffffba800001d100 0001 00000000 0x0 0x0
0xffffba800001d180 0001 00000000 0x0 0x0
0xffffba800001d200 0001 00000000 0x0 0x0
0xffffba800001d280 0001 00000000 0x0 0x0
0xffffba800001d300 0001 00000000 0x0 0x0
0xffffba800001d380 0001 00000000 0x0 0x0
0xffffba800001d400 0001 00000000 0x0 0x0
0xffffba800001d480 0001 00000000 0x0 0x0
0xffffba800001d500 0001 00000000 0x0 0x0
0xffffba800001d580 0001 00000000 0x0 0x0
0xffffba800001d600 0001 00000000 0x0 0x0
0xffffba800001d680 0001 00000000 0x0 0x0
0xffffba800001d700 0001 00000000 0x0 0x0
0xffffba800001d780 0001 00000000 0x0 0x0
0xffffba800001d800 0001 00000000 0x0 0x0
0xffffba800001d880 0001 00000000 0x0 0x0
0xffffba800001d900 0001 00000000 0x0 0x0
0xffffba800001d980 0001 00000000 0x0 0x0
0xffffba800001da00 0001 00000000 0x0 0x0
0xffffba800001da80 0001 00000000 0x0 0x0
0xffffba800001db00 0001 00000000 0x0 0x0
0xffffba800001db80 0001 00000000 0x0 0x0
0xffffba800001dc00 0001 00000000 0x0 0x0
0xffffba800001dc80 0001 00000000 0x0 0x0
0xffffba800001dd00 0001 00000000 0x0 0x0
0xffffba800001dd80 0001 00000000 0x0 0x0
0xffffba800001de00 0001 00000000 0x0 0x0
0xffffba800001de80 0001 00000000 0x0 0x0
0xffffba800001df00 0001 00000000 0x0 0x0
0xffffba800001df80 0001 00000000 0x0 0x0
0xffffba800001e000 0001 00000000 0x0 0x0
0xffffba800001e080 0001 00000000 0x0 0x0
0xffffba800001e100 0001 00000000 0x0 0x0
0xffffba800001e180 0001 00000000 0x0 0x0
0xffffba800001e200 0001 00000000 0x0 0x0
0xffffba800001e280 0001 00000000 0x0 0x0
0xffffba800001e300 0001 00000000 0x0 0x0
0xffffba800001e380 0001 00000000 0x0 0x0
0xffffba800001e400 0001 00000000 0x0 0x0
0xffffba800001e480 0001 00000000 0x0 0x0
0xffffba800001e500 0001 00000000 0x0 0x0
0xffffba800001e580 0001 00000000 0x0 0x0
0xffffba800001e600 0001 00000000 0x0 0x0
0xffffba800001e680 0001 00000000 0x0 0x0
0xffffba800001e700 0001 00000000 0x0 0x0
0xffffba800001e780 0001 00000000 0x0 0x0
0xffffba800001e800 0001 00000000 0x0 0x0
0xffffba800001e880 0001 00000000 0x0 0x0
0xffffba800001e900 0001 00000000 0x0 0x0
0xffffba800001e980 0001 00000000 0x0 0x0
0xffffba800001ea00 0001 00000000 0x0 0x0
0xffffba800001ea80 0001 00000000 0x0 0x0
0xffffba800001eb00 0001 00000000 0x0 0x0
0xffffba800001eb80 0001 00000000 0x0 0x0
0xffffba800001ec00 0001 00000000 0x0 0x0
0xffffba800001ec80 0001 00000000 0x0 0x0
0xffffba800001ed00 0001 00000000 0x0 0x0
0xffffba800001ed80 0001 00000000 0x0 0x0
0xffffba800001ee00 0001 00000000 0x0 0x0
0xffffba800001ee80 0001 00000000 0x0 0x0
0xffffba800001ef00 0001 00000000 0x0 0x0
0xffffba800001ef80 0001 00000000 0x0 0x0
0xffffba800001f000 0001 00000000 0x0 0x0
0xffffba800001f080 0001 00000000 0x0 0x0
0xffffba800001f100 0001 00000000 0x0 0x0
0xffffba800001f180 0001 00000000 0x0 0x0
0xffffba800001f200 0001 00000000 0x0 0x0
0xffffba800001f280 0001 00000000 0x0 0x0
0xffffba800001f300 0001 00000000 0x0 0x0
0xffffba800001f380 0001 00000000 0x0 0x0
0xffffba800001f400 0001 00000000 0x0 0x0
0xffffba800001f480 0001 00000000 0x0 0x0
0xffffba800001f500 0001 00000000 0x0 0x0
0xffffba800001f580 0001 00000000 0x0 0x0
0xffffba800001f600 0001 00000000 0x0 0x0
0xffffba800001f680 0001 00000000 0x0 0x0
0xffffba800001f700 0001 00000000 0x0 0x0
0xffffba800001f780 0001 00000000 0x0 0x0
0xffffba800001f800 0001 00000000 0x0 0x0
0xffffba800001f880 0001 00000000 0x0 0x0
0xffffba800001f900 0001 00000000 0x0 0x0
0xffffba800001f980 0001 00000000 0x0 0x0
0xffffba800001fa00 0001 00000000 0x0 0x0
0xffffba800001fa80 0001 00000000 0x0 0x0
0xffffba800001fb00 0001 00000000 0x0 0x0
0xffffba800001fb80 0001 00000000 0x0 0x0
0xffffba800001fc00 0001 00000000 0x0 0x0
0xffffba800001fc80 0001 00000000 0x0 0x0
0xffffba800001fd00 0001 00000000 0x0 0x0
0xffffba800001fd80 0001 00000000 0x0 0x0
0xffffba800001fe00 0001 00000000 0x0 0x0
0xffffba800001fe80 0001 00000000 0x0 0x0
0xffffba800001ff00 0001 00000000 0x0 0x0
0xffffba800001ff80 0001 00000000 0x0 0x0
0xffffba8000020000 0001 00000000 0x0 0x0
0xffffba8000020080 0001 00000000 0x0 0x0
0xffffba8000020100 0001 00000000 0x0 0x0
0xffffba8000020180 0001 00000000 0x0 0x0
0xffffba8000020200 0001 00000000 0x0 0x0
0xffffba8000020280 0001 00000000 0x0 0x0
0xffffba8000020300 0001 00000000 0x0 0x0
0xffffba8000020380 0001 00000000 0x0 0x0
0xffffba8000020400 0001 00000000 0x0 0x0
0xffffba8000020480 0001 00000000 0x0 0x0
0xffffba8000020500 0001 00000000 0x0 0x0
0xffffba8000020580 0001 00000000 0x0 0x0
0xffffba8000020600 0001 00000000 0x0 0x0
0xffffba8000020680 0001 00000000 0x0 0x0
0xffffba8000020700 0001 00000000 0x0 0x0
0xffffba8000020780 0001 00000000 0x0 0x0
0xffffba8000020800 0001 00000000 0x0 0x0
0xffffba8000020880 0001 00000000 0x0 0x0
0xffffba8000020900 0001 00000000 0x0 0x0
0xffffba8000020980 0001 00000000 0x0 0x0
0xffffba8000020a00 0001 00000000 0x0 0x0
0xffffba8000020a80 0001 00000000 0x0 0x0
0xffffba8000020b00 0001 00000000 0x0 0x0
0xffffba8000020b80 0001 00000000 0x0 0x0
0xffffba8000020c00 0001 00000000 0x0 0x0
0xffffba8000020c80 0001 00000000 0x0 0x0
0xffffba8000020d00 0001 00000000 0x0 0x0
0xffffba8000020d80 0001 00000000 0x0 0x0
0xffffba8000020e00 0001 00000000 0x0 0x0
0xffffba8000020e80 0001 00000000 0x0 0x0
0xffffba8000020f00 0001 00000000 0x0 0x0
0xffffba8000020f80 0001 00000000 0x0 0x0
0xffffba8000021000 0001 00000000 0x0 0x0
0xffffba8000021080 0001 00000000 0x0 0x0
0xffffba8000021100 0001 00000000 0x0 0x0
0xffffba8000021180 0001 00000000 0x0 0x0
0xffffba8000021200 0001 00000000 0x0 0x0
0xffffba8000021280 0001 00000000 0x0 0x0
0xffffba8000021300 0001 00000000 0x0 0x0
0xffffba8000021380 0001 00000000 0x0 0x0
0xffffba8000021400 0001 00000000 0x0 0x0
0xffffba8000021480 0001 00000000 0x0 0x0
0xffffba8000021500 0001 00000000 0x0 0x0
0xffffba8000021580 0001 00000000 0x0 0x0
0xffffba8000021600 0001 00000000 0x0 0x0
0xffffba8000021680 0001 00000000 0x0 0x0
0xffffba8000021700 0001 00000000 0x0 0x0
0xffffba8000021780 0001 00000000 0x0 0x0
0xffffba8000021800 0001 00000000 0x0 0x0
0xffffba8000021880 0001 00000000 0x0 0x0
0xffffba8000021900 0001 00000000 0x0 0x0
0xffffba8000021980 0001 00000000 0x0 0x0
0xffffba8000021a00 0001 00000000 0x0 0x0
0xffffba8000021a80 0001 00000000 0x0 0x0
0xffffba8000021b00 0001 00000000 0x0 0x0
0xffffba8000021b80 0001 00000000 0x0 0x0
0xffffba8000021c00 0001 00000000 0x0 0x0
0xffffba8000021c80 0001 00000000 0x0 0x0
0xffffba8000021d00 0001 00000000 0x0 0x0
0xffffba8000021d80 0001 00000000 0x0 0x0
0xffffba8000021e00 0001 00000000 0x0 0x0
0xffffba8000021e80 0001 00000000 0x0 0x0
0xffffba8000021f00 0001 00000000 0x0 0x0
0xffffba8000021f80 0001 00000000 0x0 0x0
0xffffba8000022000 0001 00000000 0x0 0x0
0xffffba8000022080 0001 00000000 0x0 0x0
0xffffba8000022100 0001 00000000 0x0 0x0
0xffffba8000022180 0001 00000000 0x0 0x0
0xffffba8000022200 0001 00000000 0x0 0x0
0xffffba8000022280 0001 00000000 0x0 0x0
0xffffba8000022300 0001 00000000 0x0 0x0
0xffffba8000022380 0001 00000000 0x0 0x0
0xffffba8000022400 0001 00000000 0x0 0x0
0xffffba8000022480 0001 00000000 0x0 0x0
0xffffba8000022500 0001 00000000 0x0 0x0
0xffffba8000022580 0001 00000000 0x0 0x0
0xffffba8000022600 0001 00000000 0x0 0x0
0xffffba8000022680 0001 00000000 0x0 0x0
0xffffba8000022700 0001 00000000 0x0 0x0
0xffffba8000022780 0001 00000000 0x0 0x0
0xffffba8000022800 0001 00000000 0x0 0x0
0xffffba8000022880 0001 00000000 0x0 0x0
0xffffba8000022900 0001 00000000 0x0 0x0
0xffffba8000022980 0001 00000000 0x0 0x0
0xffffba8000022a00 0001 00000000 0x0 0x0
0xffffba8000022a80 0001 00000000 0x0 0x0
0xffffba8000022b00 0001 00000000 0x0 0x0
0xffffba8000022b80 0001 00000000 0x0 0x0
0xffffba8000022c00 0001 00000000 0x0 0x0
0xffffba8000022c80 0001 00000000 0x0 0x0
0xffffba8000022d00 0001 00000000 0x0 0x0
0xffffba8000022d80 0001 00000000 0x0 0x0
0xffffba8000022e00 0001 00000000 0x0 0x0
0xffffba8000022e80 0001 00000000 0x0 0x0
0xffffba8000022f00 0001 00000000 0x0 0x0
0xffffba8000022f80 0001 00000000 0x0 0x0
0xffffba8000023000 0001 00000000 0x0 0x0
0xffffba8000023080 0001 00000000 0x0 0x0
0xffffba8000023100 0001 00000000 0x0 0x0
0xffffba8000023180 0001 00000000 0x0 0x0
0xffffba8000023200 0001 00000000 0x0 0x0
0xffffba8000023280 0001 00000000 0x0 0x0
0xffffba8000023300 0001 00000000 0x0 0x0
0xffffba8000023380 0001 00000000 0x0 0x0
0xffffba8000023400 0001 00000000 0x0 0x0
0xffffba8000023480 0001 00000000 0x0 0x0
0xffffba8000023500 0001 00000000 0x0 0x0
0xffffba8000023580 0001 00000000 0x0 0x0
0xffffba8000023600 0001 00000000 0x0 0x0
0xffffba8000023680 0001 00000000 0x0 0x0
0xffffba8000023700 0001 00000000 0x0 0x0
0xffffba8000023780 0001 00000000 0x0 0x0
0xffffba8000023800 0001 00000000 0x0 0x0
0xffffba8000023880 0001 00000000 0x0 0x0
0xffffba8000023900 0001 00000000 0x0 0x0
0xffffba8000023980 0001 00000000 0x0 0x0
0xffffba8000023a00 0001 00000000 0x0 0x0
0xffffba8000023a80 0001 00000000 0x0 0x0
0xffffba8000023b00 0001 00000000 0x0 0x0
0xffffba8000023b80 0001 00000000 0x0 0x0
0xffffba8000023c00 0001 00000000 0x0 0x0
0xffffba8000023c80 0001 00000000 0x0 0x0
0xffffba8000023d00 0001 00000000 0x0 0x0
0xffffba8000023d80 0001 00000000 0x0 0x0
0xffffba8000023e00 0001 00000000 0x0 0x0
0xffffba8000023e80 0001 00000000 0x0 0x0
0xffffba8000023f00 0001 00000000 0x0 0x0
0xffffba8000023f80 0001 00000000 0x0 0x0
0xffffba8000024000 0001 00000000 0x0 0x0
0xffffba8000024080 0001 00000000 0x0 0x0
0xffffba8000024100 0001 00000000 0x0 0x0
0xffffba8000024180 0001 00000000 0x0 0x0
0xffffba8000024200 0001 00000000 0x0 0x0
0xffffba8000024280 0001 00000000 0x0 0x0
0xffffba8000024300 0001 00000000 0x0 0x0
0xffffba8000024380 0001 00000000 0x0 0x0
0xffffba8000024400 0001 00000000 0x0 0x0
0xffffba8000024480 0001 00000000 0x0 0x0
0xffffba8000024500 0001 00000000 0x0 0x0
0xffffba8000024580 0001 00000000 0x0 0x0
0xffffba8000024600 0001 00000000 0x0 0x0
0xffffba8000024680 0001 00000000 0x0 0x0
0xffffba8000024700 0001 00000000 0x0 0x0
0xffffba8000024780 0001 00000000 0x0 0x0
0xffffba8000024800 0001 00000000 0x0 0x0
0xffffba8000024880 0001 00000000 0x0 0x0
0xffffba8000024900 0001 00000000 0x0 0x0
0xffffba8000024980 0001 00000000 0x0 0x0
0xffffba8000024a00 0001 00000000 0x0 0x0
0xffffba8000024a80 0001 00000000 0x0 0x0
0xffffba8000024b00 0001 00000000 0x0 0x0
0xffffba8000024b80 0001 00000000 0x0 0x0
0xffffba8000024c00 0001 00000000 0x0 0x0
0xffffba8000024c80 0001 00000000 0x0 0x0
0xffffba8000024d00 0001 00000000 0x0 0x0
0xffffba8000024d80 0001 00000000 0x0 0x0
0xffffba8000024e00 0001 00000000 0x0 0x0
0xffffba8000024e80 0001 00000000 0x0 0x0
0xffffba8000024f00 0001 00000000 0x0 0x0
0xffffba8000024f80 0001 00000000 0x0 0x0
0xffffba8000025000 0001 00000000 0x0 0x0
0xffffba8000025080 0001 00000000 0x0 0x0
0xffffba8000025100 0001 00000000 0x0 0x0
0xffffba8000025180 0001 00000000 0x0 0x0
0xffffba8000025200 0001 00000000 0x0 0x0
0xffffba8000025280 0001 00000000 0x0 0x0
0xffffba8000025300 0001 00000000 0x0 0x0
0xffffba8000025380 0001 00000000 0x0 0x0
0xffffba8000025400 0001 00000000 0x0 0x0
0xffffba8000025480 0001 00000000 0x0 0x0
0xffffba8000025500 0001 00000000 0x0 0x0
0xffffba8000025580 0001 00000000 0x0 0x0
0xffffba8000025600 0001 00000000 0x0 0x0
0xffffba8000025680 0001 00000000 0x0 0x0
0xffffba8000025700 0001 00000000 0x0 0x0
0xffffba8000025780 0001 00000000 0x0 0x0
0xffffba8000025800 0001 00000000 0x0 0x0
0xffffba8000025880 0001 00000000 0x0 0x0
0xffffba8000025900 0001 00000000 0x0 0x0
0xffffba8000025980 0001 00000000 0x0 0x0
0xffffba8000025a00 0001 00000000 0x0 0x0
0xffffba8000025a80 0001 00000000 0x0 0x0
0xffffba8000025b00 0001 00000000 0x0 0x0
0xffffba8000025b80 0001 00000000 0x0 0x0
0xffffba8000025c00 0001 00000000 0x0 0x0
0xffffba8000025c80 0001 00000000 0x0 0x0
0xffffba8000025d00 0001 00000000 0x0 0x0
0xffffba8000025d80 0001 00000000 0x0 0x0
0xffffba8000025e00 0001 00000000 0x0 0x0
0xffffba8000025e80 0001 00000000 0x0 0x0
0xffffba8000025f00 0001 00000000 0x0 0x0
0xffffba8000025f80 0001 00000000 0x0 0x0
0xffffba8000026000 0001 00000000 0x0 0x0
0xffffba8000026080 0001 00000000 0x0 0x0
0xffffba8000026100 0001 00000000 0x0 0x0
0xffffba8000026180 0001 00000000 0x0 0x0
0xffffba8000026200 0001 00000000 0x0 0x0
0xffffba8000026280 0001 00000000 0x0 0x0
0xffffba8000026300 0001 00000000 0x0 0x0
0xffffba8000026380 0001 00000000 0x0 0x0
0xffffba8000026400 0001 00000000 0x0 0x0
0xffffba8000026480 0001 00000000 0x0 0x0
0xffffba8000026500 0001 00000000 0x0 0x0
0xffffba8000026580 0001 00000000 0x0 0x0
0xffffba8000026600 0001 00000000 0x0 0x0
0xffffba8000026680 0001 00000000 0x0 0x0
0xffffba8000026700 0001 00000000 0x0 0x0
0xffffba8000026780 0001 00000000 0x0 0x0
0xffffba8000026800 0001 00000000 0x0 0x0
0xffffba8000026880 0001 00000000 0x0 0x0
0xffffba8000026900 0001 00000000 0x0 0x0
0xffffba8000026980 0001 00000000 0x0 0x0
0xffffba8000026a00 0001 00000000 0x0 0x0
0xffffba8000026a80 0001 00000000 0x0 0x0
0xffffba8000026b00 0001 00000000 0x0 0x0
0xffffba8000026b80 0001 00000000 0x0 0x0
0xffffba8000026c00 0001 00000000 0x0 0x0
0xffffba8000026c80 0001 00000000 0x0 0x0
0xffffba8000026d00 0001 00000000 0x0 0x0
0xffffba8000026d80 0001 00000000 0x0 0x0
0xffffba8000026e00 0001 00000000 0x0 0x0
0xffffba8000026e80 0001 00000000 0x0 0x0
0xffffba8000026f00 0001 00000000 0x0 0x0
0xffffba8000026f80 0001 00000000 0x0 0x0
0xffffba8000027000 0001 00000000 0x0 0x0
0xffffba8000027080 0001 00000000 0x0 0x0
0xffffba8000027100 0001 00000000 0x0 0x0
0xffffba8000027180 0001 00000000 0x0 0x0
0xffffba8000027200 0001 00000000 0x0 0x0
0xffffba8000027280 0001 00000000 0x0 0x0
0xffffba8000027300 0001 00000000 0x0 0x0
0xffffba8000027380 0001 00000000 0x0 0x0
0xffffba8000027400 0001 00000000 0x0 0x0
0xffffba8000027480 0001 00000000 0x0 0x0
0xffffba8000027500 0001 00000000 0x0 0x0
0xffffba8000027580 0001 00000000 0x0 0x0
0xffffba8000027600 0001 00000000 0x0 0x0
0xffffba8000027680 0001 00000000 0x0 0x0
0xffffba8000027700 0001 00000000 0x0 0x0
0xffffba8000027780 0001 00000000 0x0 0x0
0xffffba8000027800 0001 00000000 0x0 0x0
0xffffba8000027880 0001 00000000 0x0 0x0
0xffffba8000027900 0001 00000000 0x0 0x0
0xffffba8000027980 0001 00000000 0x0 0x0
0xffffba8000027a00 0001 00000000 0x0 0x0
0xffffba8000027a80 0001 00000000 0x0 0x0
0xffffba8000027b00 0001 00000000 0x0 0x0
0xffffba8000027b80 0001 00000000 0x0 0x0
0xffffba8000027c00 0001 00000000 0x0 0x0
0xffffba8000027c80 0001 00000000 0x0 0x0
0xffffba8000027d00 0001 00000000 0x0 0x0
0xffffba8000027d80 0001 00000000 0x0 0x0
0xffffba8000027e00 0001 00000000 0x0 0x0
0xffffba8000027e80 0001 00000000 0x0 0x0
0xffffba8000027f00 0001 00000000 0x0 0x0
0xffffba8000027f80 0001 00000000 0x0 0x0
0xffffba8000028000 0001 00000000 0x0 0x0
0xffffba8000028080 0001 00000000 0x0 0x0
0xffffba8000028100 0001 00000000 0x0 0x0
0xffffba8000028180 0001 00000000 0x0 0x0
0xffffba8000028200 0001 00000000 0x0 0x0
0xffffba8000028280 0001 00000000 0x0 0x0
0xffffba8000028300 0001 00000000 0x0 0x0
0xffffba8000028380 0001 00000000 0x0 0x0
0xffffba8000028400 0001 00000000 0x0 0x0
0xffffba8000028480 0001 00000000 0x0 0x0
0xffffba8000028500 0001 00000000 0x0 0x0
0xffffba8000028580 0001 00000000 0x0 0x0
0xffffba8000028600 0001 00000000 0x0 0x0
0xffffba8000028680 0001 00000000 0x0 0x0
0xffffba8000028700 0001 00000000 0x0 0x0
0xffffba8000028780 0001 00000000 0x0 0x0
0xffffba8000028800 0001 00000000 0x0 0x0
0xffffba8000028880 0001 00000000 0x0 0x0
0xffffba8000028900 0001 00000000 0x0 0x0
0xffffba8000028980 0001 00000000 0x0 0x0
0xffffba8000028a00 0001 00000000 0x0 0x0
0xffffba8000028a80 0001 00000000 0x0 0x0
0xffffba8000028b00 0001 00000000 0x0 0x0
0xffffba8000028b80 0001 00000000 0x0 0x0
0xffffba8000028c00 0001 00000000 0x0 0x0
0xffffba8000028c80 0001 00000000 0x0 0x0
0xffffba8000028d00 0001 00000000 0x0 0x0
0xffffba8000028d80 0001 00000000 0x0 0x0
0xffffba8000028e00 0001 00000000 0x0 0x0
0xffffba8000028e80 0001 00000000 0x0 0x0
0xffffba8000028f00 0001 00000000 0x0 0x0
0xffffba8000028f80 0001 00000000 0x0 0x0
0xffffba8000029000 0001 00000000 0x0 0x0
0xffffba8000029080 0001 00000000 0x0 0x0
0xffffba8000029100 0001 00000000 0x0 0x0
0xffffba8000029180 0001 00000000 0x0 0x0
0xffffba8000029200 0001 00000000 0x0 0x0
0xffffba8000029280 0001 00000000 0x0 0x0
0xffffba8000029300 0001 00000000 0x0 0x0
0xffffba8000029380 0001 00000000 0x0 0x0
0xffffba8000029400 0001 00000000 0x0 0x0
0xffffba8000029480 0001 00000000 0x0 0x0
0xffffba8000029500 0001 00000000 0x0 0x0
0xffffba8000029580 0001 00000000 0x0 0x0
0xffffba8000029600 0001 00000000 0x0 0x0
0xffffba8000029680 0001 00000000 0x0 0x0
0xffffba8000029700 0001 00000000 0x0 0x0
0xffffba8000029780 0001 00000000 0x0 0x0
0xffffba8000029800 0001 00000000 0x0 0x0
0xffffba8000029880 0001 00000000 0x0 0x0
0xffffba8000029900 0001 00000000 0x0 0x0
0xffffba8000029980 0001 00000000 0x0 0x0
0xffffba8000029a00 0001 00000000 0x0 0x0
0xffffba8000029a80 0001 00000000 0x0 0x0
0xffffba8000029b00 0001 00000000 0x0 0x0
0xffffba8000029b80 0001 00000000 0x0 0x0
0xffffba8000029c00 0001 00000000 0x0 0x0
0xffffba8000029c80 0001 00000000 0x0 0x0
0xffffba8000029d00 0001 00000000 0x0 0x0
0xffffba8000029d80 0001 00000000 0x0 0x0
0xffffba8000029e00 0001 00000000 0x0 0x0
0xffffba8000029e80 0001 00000000 0x0 0x0
0xffffba8000029f00 0001 00000000 0x0 0x0
0xffffba8000029f80 0001 00000000 0x0 0x0
0xffffba800002a000 0001 00000000 0x0 0x0
0xffffba800002a080 0001 00000000 0x0 0x0
0xffffba800002a100 0001 00000000 0x0 0x0
0xffffba800002a180 0001 00000000 0x0 0x0
0xffffba800002a200 0001 00000000 0x0 0x0
0xffffba800002a280 0001 00000000 0x0 0x0
0xffffba800002a300 0001 00000000 0x0 0x0
0xffffba800002a380 0001 00000000 0x0 0x0
0xffffba800002a400 0001 00000000 0x0 0x0
0xffffba800002a480 0001 00000000 0x0 0x0
0xffffba800002a500 0001 00000000 0x0 0x0
0xffffba800002a580 0001 00000000 0x0 0x0
0xffffba800002a600 0001 00000000 0x0 0x0
0xffffba800002a680 0001 00000000 0x0 0x0
0xffffba800002a700 0001 00000000 0x0 0x0
0xffffba800002a780 0001 00000000 0x0 0x0
0xffffba800002a800 0001 00000000 0x0 0x0
0xffffba800002a880 0001 00000000 0x0 0x0
0xffffba800002a900 0001 00000000 0x0 0x0
0xffffba800002a980 0001 00000000 0x0 0x0
0xffffba800002aa00 0001 00000000 0x0 0x0
0xffffba800002aa80 0001 00000000 0x0 0x0
0xffffba800002ab00 0001 00000000 0x0 0x0
0xffffba800002ab80 0001 00000000 0x0 0x0
0xffffba800002ac00 0001 00000000 0x0 0x0
0xffffba800002ac80 0001 00000000 0x0 0x0
0xffffba800002ad00 0001 00000000 0x0 0x0
0xffffba800002ad80 0001 00000000 0x0 0x0
0xffffba800002ae00 0001 00000000 0x0 0x0
0xffffba800002ae80 0001 00000000 0x0 0x0
0xffffba800002af00 0001 00000000 0x0 0x0
0xffffba800002af80 0001 00000000 0x0 0x0
0xffffba800002b000 0001 00000000 0x0 0x0
0xffffba800002b080 0001 00000000 0x0 0x0
0xffffba800002b100 0001 00000000 0x0 0x0
0xffffba800002b180 0001 00000000 0x0 0x0
0xffffba800002b200 0001 0000

---
This report is generated by a bot. It may contain errors.
See https://goo.gl/tpsmEJ for more information about syzbot.
syzbot engineers can be reached at syzk...@googlegroups.com.

syzbot will keep track of this issue. See:
https://goo.gl/tpsmEJ#status for how to communicate with syzbot.

If the bug is already fixed, let syzbot know by replying with:
#syz fix: exact-commit-title

If you want to change bug's subsystems, reply with:
#syz set subsystems: new-subsystem
(See the list of subsystem names on the web dashboard)

If the bug is a duplicate of another bug, reply with:
#syz dup: exact-subject-of-another-report

If you want to undo deduplication, reply with:
#syz undup

syzbot

unread,

May 24, 2023, 10:12:52 AM5/24/23

to syzkaller-...@googlegroups.com

syzbot has found a reproducer for the following issue on:

HEAD commit: 42d3fefefe6a efi(4): Fix logic to handle buffer sizing.
git tree: netbsd

console output: https://syzkaller.appspot.com/x/log.txt?x=16865786280000

kernel config: https://syzkaller.appspot.com/x/.config?x=739e57438eb9ed9e
dashboard link: https://syzkaller.appspot.com/bug?extid=874b8f137916d568b181
compiler: Debian clang version 15.0.7

syz repro: https://syzkaller.appspot.com/x/repro.syz?x=14a39639280000
C reproducer: https://syzkaller.appspot.com/x/repro.c?x=1391f641280000

Downloadable assets:
disk image: https://storage.googleapis.com/syzbot-assets/8be571dc5302/disk-42d3fefe.raw.xz
netbsd.gdb: https://storage.googleapis.com/syzbot-assets/ba642cd6411c/netbsd-42d3fefe.gdb.xz

IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+874b8f...@syzkaller.appspotmail.com

[ 54.8683184] panic: MSan: Uninitialized Pool Memory In copyout():arg1 At Offset 176/256, From kmem_intr_alloc+269

[ 54.8782998] cpu1: Begin traceback...
[ 54.9083015] vpanic() at netbsd:vpanic+0xc9d
[ 54.9783043] panic() at netbsd:panic+0x1b3 sys/kern/subr_prf.c:209
[ 55.0483084] kmsan_report_hook() at netbsd:kmsan_report_hook+0x26b
[ 55.1183052] kmsan_copyout() at netbsd:kmsan_copyout+0x20c kmsan_init_ret sys/kern/subr_msan.c:400 [inline]
[ 55.1183052] kmsan_copyout() at netbsd:kmsan_copyout+0x20c sys/kern/subr_msan.c:871
[ 55.1883117] sysctl_rtable() at netbsd:sysctl_rtable+0x2873 sysctl_iflist_addr sys/net/rtsock.c:268 [inline]
[ 55.1883117] sysctl_rtable() at netbsd:sysctl_rtable+0x2873 sysctl_iflist sys/net/rtsock.c:364 [inline]
[ 55.1883117] sysctl_rtable() at netbsd:sysctl_rtable+0x2873 sys/net/rtsock.c:477
[ 55.2583025] sysctl_dispatch() at netbsd:sysctl_dispatch+0x526 sys/kern/kern_sysctl.c:461
[ 55.3283013] sys___sysctl() at netbsd:sys___sysctl+0x654 sys/kern/kern_sysctl.c:317
[ 55.3983058] syscall() at netbsd:syscall+0x60c sy_invoke sys/sys/syscallvar.h:94 [inline]
[ 55.3983058] syscall() at netbsd:syscall+0x60c sys/arch/x86/x86/syscall.c:138
[ 55.4183036] --- syscall (number 202) ---
[ 55.4383034] netbsd:syscall+0x60c:
[ 55.4383034] cpu1: End traceback...
[ 55.4483054] fatal breakpoint trap in supervisor mode
[ 55.4483054] trap type 1 code 0 rip 0xffffffff8023686d cs 0x8 rflags 0x286 cr2 0x7c566f00956c ilevel 0x5 rsp 0xffffda80c78b06c0
[ 55.4583049] curlwp 0xffffda801251eb80 pid 485.485 lowest kstack 0xffffda80c78a92c0
Stopped in pid 485.485 (dhcpcd) at netbsd:breakpoint+0x5: leave

?
breakpoint() at netbsd:breakpoint+0x5
vpanic() at netbsd:vpanic+0xc9d
panic() at netbsd:panic+0x1b3 sys/kern/subr_prf.c:209
kmsan_report_hook() at netbsd:kmsan_report_hook+0x26b
kmsan_copyout() at netbsd:kmsan_copyout+0x20c kmsan_init_ret sys/kern/subr_msan.c:400 [inline]
kmsan_copyout() at netbsd:kmsan_copyout+0x20c sys/kern/subr_msan.c:871
sysctl_rtable() at netbsd:sysctl_rtable+0x2873 sysctl_iflist_addr sys/net/rtsock.c:268 [inline]
sysctl_rtable() at netbsd:sysctl_rtable+0x2873 sysctl_iflist sys/net/rtsock.c:364 [inline]
sysctl_rtable() at netbsd:sysctl_rtable+0x2873 sys/net/rtsock.c:477
sysctl_dispatch() at netbsd:sysctl_dispatch+0x526 sys/kern/kern_sysctl.c:461
sys___sysctl() at netbsd:sys___sysctl+0x654 sys/kern/kern_sysctl.c:317
syscall() at netbsd:syscall+0x60c sy_invoke sys/sys/syscallvar.h:94 [inline]
syscall() at netbsd:syscall+0x60c sys/arch/x86/x86/syscall.c:138
--- syscall (number 202) ---
netbsd:syscall+0x60c:
Panic string: MSan: Uninitialized Pool Memory In copyout():arg1 At Offset 176/256, From kmem_intr_alloc+269

PID LID S CPU FLAGS STRUCT LWP * NAME WAIT

929 929 2 1 0 ffffda801345c980 syz-executor2376
1246 1246 2 1 0 ffffda801345c540 syz-executor2376
991 991 2 0 0 ffffda801345c100 syz-executor2376
1245 1245 2 0 0 ffffda8012c96940 syz-executor2376
1243 1243 2 0 0 ffffda8012c96500 syz-executor2376
1244 1244 2 1 0 ffffda8012c960c0 syz-executor2376
829 829 2 0 0 ffffda8012bd4900 syz-executor2376
1241 1241 3 1 180 ffffda8012bd44c0 syz-executor2376 nanoslp
930 930 3 0 180 ffffda8012bd4080 syz-executor2376 nanoslp
449 449 3 1 180 ffffda80122ffb00 syz-executor2376 nanoslp
942 942 3 0 180 ffffda80122ff6c0 syz-executor2376 nanoslp
1080 1080 3 0 40180 ffffda80123902c0 sshd select
1224 1224 3 0 180 ffffda80122ff280 getty nanoslp
1223 1223 3 0 180 ffffda801251e300 getty nanoslp
1114 1114 3 0 180 ffffda80121feac0 getty nanoslp
1184 1184 3 0 1c0 ffffda80121fb200 getty ttyraw
1103 1103 3 0 180 ffffda8012ba78c0 sshd select
1088 1088 3 1 180 ffffda80125e2780 powerd kqueue
700 700 3 1 180 ffffda8012ba7480 syslogd kqueue
746 746 3 0 180 ffffda8012ba7040 dhcpcd poll
745 745 3 1 180 ffffda801251e740 dhcpcd poll
582 > 582 7 0 0 ffffda8012390700 dhcpcd
599 599 3 1 180 ffffda80125e2bc0 dhcpcd poll
487 487 3 0 180 ffffda80125e2340 dhcpcd poll
292 292 3 1 180 ffffda8012390b40 dhcpcd poll
485 > 485 7 1 0 ffffda801251eb80 dhcpcd
1 1 3 0 180 ffffda8011e76100 init wait
0 852 3 0 200 ffffda80121fb640 physiod physiod
0 195 3 0 200 ffffda80121fe240 ioflush syncer
0 196 3 0 200 ffffda80121fe680 pooldrain pooldrain
0 194 3 1 200 ffffda80121fba80 pgdaemon pgdaemon
0 170 3 0 200 ffffda801216ba40 usb7 usbevt
0 169 3 1 200 ffffda801216b600 usb6 usbevt
0 168 3 0 200 ffffda801216b1c0 usb5 usbevt
0 167 3 0 200 ffffda801213ca00 usb4 usbevt
0 166 3 1 200 ffffda801213c5c0 usb3 usbevt
0 165 3 0 200 ffffda801213c180 usb2 usbevt
0 31 3 0 200 ffffda80120869c0 usb1 usbevt
0 63 3 0 200 ffffda8012086580 usb0 usbevt
0 126 3 1 200 ffffda8012086140 usbtask-dr usbtsk
0 125 3 1 200 ffffda8011e76980 usbtask-hc usbtsk
0 124 3 0 200 ffffda80103f5b00 swwreboot swwreboot
0 123 3 0 200 ffffda8011e76540 npfgc0 npfgcw
0 122 3 1 200 ffffda8011e69940 rt_free rt_free
0 121 3 1 200 ffffda8011e69500 unpgc unpgc
0 120 3 0 200 ffffda8011e690c0 key_timehandler key_timehandler
0 119 3 1 200 ffffda8011e65900 icmp6_wqinput/1 icmp6_wqinput
0 118 3 0 200 ffffda8011e654c0 icmp6_wqinput/0 icmp6_wqinput
0 117 3 0 200 ffffda8011e65080 nd6_timer nd6_timer
0 116 3 1 200 ffffda8011e5f8c0 carp6_wqinput/1 carp6_wqinput
0 115 3 0 200 ffffda8011e5f480 carp6_wqinput/0 carp6_wqinput
0 114 3 1 200 ffffda8011e5f040 carp_wqinput/1 carp_wqinput
0 113 3 0 200 ffffda8011e56bc0 carp_wqinput/0 carp_wqinput
0 112 3 1 200 ffffda8011e56780 icmp_wqinput/1 icmp_wqinput
0 111 3 0 200 ffffda8011e56340 icmp_wqinput/0 icmp_wqinput
0 110 3 0 200 ffffda8011cedb80 rt_timer rt_timer
0 109 3 0 200 ffffda8011ced740 vmem_rehash vmem_rehash
0 100 3 0 200 ffffda8011ced300 entbutler entropy
0 99 3 1 200 ffffda80117e0b40 viomb balloon
0 98 3 1 200 ffffda80117e0700 vioif0_txrx/1 vioif0_txrx
0 97 3 0 200 ffffda80117e02c0 vioif0_txrx/0 vioif0_txrx
0 30 3 0 200 ffffda80103f56c0 scsibus0 sccomp
0 29 3 0 200 ffffda80103f5280 pms0 pmsreset
0 28 3 1 200 ffffda80103daac0 xcall/1 xcall
0 27 1 1 200 ffffda80103da680 softser/1
0 26 1 1 200 ffffda80103da240 softclk/1
0 25 1 1 200 ffffda80103d8a80 softbio/1
0 24 1 1 200 ffffda80103d8640 softnet/1
0 23 1 1 201 ffffda80103d8200 idle/1
0 22 3 1 200 ffffda800f1f4a40 lnxsyswq lnxsyswq
0 21 3 0 200 ffffda800f1f4600 lnxubdwq lnxubdwq
0 20 3 0 200 ffffda800f1f41c0 lnxpwrwq lnxpwrwq
0 19 3 0 200 ffffda800f1f2a00 lnxlngwq lnxlngwq
0 18 3 0 200 ffffda800f1f25c0 lnxhipwq lnxhipwq
0 17 3 1 200 ffffda800f1f2180 lnxrcugc lnxrcugc
0 16 3 0 200 ffffda800f1ec9c0 sysmon smtaskq
0 15 3 1 200 ffffda800f1ec580 pmfsuspend pmfsuspend
0 14 3 0 200 ffffda800f1ec140 pmfevent pmfevent
0 13 3 0 200 ffffda800f1e9980 sopendfree sopendfr
0 12 3 1 200 ffffda800f1e9540 ifwdog ifwdog
0 11 3 0 200 ffffda800f1e9100 iflnkst iflnkst
0 10 3 0 200 ffffda800f1df940 nfssilly nfssilly
0 9 3 0 200 ffffda800f1df500 vdrain vdrain
0 8 3 0 200 ffffda800f1df0c0 modunload mod_unld
0 7 3 0 200 ffffda800ebdb900 xcall/0 xcall
0 6 1 0 200 ffffda800ebdb4c0 softser/0
0 5 1 0 200 ffffda800ebdb080 softclk/0
0 4 1 0 40200 ffffda800ebd98c0 softbio/0
0 3 1 0 200 ffffda800ebd9480 softnet/0
0 2 1 0 201 ffffda800ebd9040 idle/0

0 0 3 0 200 ffffffff8686be80 swapper uvm
[Locks tracked through LWPs]

****** LWP 929.929 (syz-executor2376) @ 0xffffda801345c980, l_stat=2

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:module_hook_init+0x43 sys/kern/kern_module_hook.c:132)
lock address : netbsd:module_hook
type : sleep/adaptive
initialized : netbsd:module_hook_init+0x43
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 0

relevant lwp : 0xffffda801345c980 last held: 000000000000000000

last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 1246.1246 (syz-executor2376) @ 0xffffda801345c540, l_stat=2

*** Locks held:

* Lock 0 (initialized at netbsd:pmap_ctor+0xc0 sys/arch/x86/x86/pmap.c:2860)
lock address : ffffda8012bd1e00
type : sleep/adaptive
initialized : netbsd:pmap_ctor+0xc0

shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 1

relevant lwp : 0xffffda801345c540 last held: 0xffffda801345c540
last locked* : netbsd:pmap_enter_ma+0x11ce
unlocked : netbsd:pmap_extract+0x72d
owner field : 0xffffda801345c540 wait/spin: 0/0

Turnstile: no active turnstile for this lock.

*** Locks wanted: none

****** LWP 991.991 (syz-executor2376) @ 0xffffda801345c100, l_stat=2

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:pmap_ctor+0xc0 sys/arch/x86/x86/pmap.c:2860)
lock address : ffffda8012bd1c40
type : sleep/adaptive
initialized : netbsd:pmap_ctor+0xc0

shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 1
relevant cpu : 0 last held: 0

relevant lwp : 0xffffda801345c100 last held: 000000000000000000
last locked : netbsd:pmap_extract+0x130
unlocked* : netbsd:pmap_extract+0x72d
owner field : 0xffffda801345c100 wait/spin: 0/0

Turnstile: no active turnstile for this lock.

****** LWP 1244.1244 (syz-executor2376) @ 0xffffda8012c960c0, l_stat=2

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:pmap_ctor+0xc0 sys/arch/x86/x86/pmap.c:2860)
lock address : ffffda8012bd1700
type : sleep/adaptive
initialized : netbsd:pmap_ctor+0xc0

shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 1

relevant cpu : 1 last held: 1

relevant lwp : 0xffffda8012c960c0 last held: 000000000000000000
last locked : netbsd:pmap_enter_ma+0x11ce
unlocked* : netbsd:pmap_enter_ma+0x6f3f
owner field : 0xffffda8012c960c0 wait/spin: 0/0

Turnstile: no active turnstile for this lock.

****** LWP 829.829 (syz-executor2376) @ 0xffffda8012bd4900, l_stat=2

relevant cpu : 0 last held: 0

relevant lwp : 0xffffda8012bd4900 last held: 000000000000000000

last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 745.745 (dhcpcd) @ 0xffffda801251e740, l_stat=3

relevant cpu : 1 last held: 0

relevant lwp : 0xffffda801251e740 last held: 000000000000000000

last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 582.582 (dhcpcd) @ 0xffffda8012390700, l_stat=7

relevant cpu : 0 last held: 0

relevant lwp : 0xffffda8012390700 last held: 000000000000000000

last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 292.292 (dhcpcd) @ 0xffffda8012390b40, l_stat=3

relevant cpu : 1 last held: 0

relevant lwp : 0xffffda8012390b40 last held: 000000000000000000

last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 485.485 (dhcpcd) @ 0xffffda801251eb80, l_stat=7

relevant lwp : 0xffffda801251eb80 last held: 000000000000000000

last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 0.11 (iflnkst) @ 0xffffda800f1e9100, l_stat=3

relevant lwp : 0xffffda800f1e9100 last held: 000000000000000000

last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 0.5 (softclk/0) @ 0xffffda800ebdb080, l_stat=1

relevant cpu : 0 last held: 0

relevant lwp : 0xffffda800ebdb080 last held: 000000000000000000

shares wanted: 0 exclusive: 1

relevant cpu : 1 last held: 1

relevant lwp : 0xffffda801251eb80 last held: 0xffffda801251eb80

last locked* : netbsd:sleepq_block+0x7bb
unlocked : netbsd:cv_enter+0x75e
curcpu holds : 1 wanted by: 000000000000000000

* Lock 1 (initialized at netbsd:kprintf_init+0xcb sys/kern/subr_prf.c:156)
lock address : netbsd:kprintf_mtx
type : spin
initialized : netbsd:kprintf_init+0xcb
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 1

relevant lwp : 0xffffda801251eb80 last held: 0xffffda801251eb80
last locked* : netbsd:vpanic+0x624
unlocked : netbsd:printf+0x2ce

owner field : 0x0000000000000800 wait/spin: 0/1

PAGE FLAG PQ UOBJECT UANON

0xffffda8000017180 0001 00000000 0x0 0x0
0xffffda8000017200 0041 00000000 0x0 0x0
0xffffda8000017280 0041 00000000 0x0 0x0
0xffffda8000017300 0041 00000000 0x0 0x0
0xffffda8000017380 0041 00000000 0x0 0x0
0xffffda8000017400 0041 00000000 0x0 0x0
0xffffda8000017480 0041 00000000 0x0 0x0
0xffffda8000017500 0041 00000000 0x0 0x0
0xffffda8000017580 0041 00000000 0x0 0x0
0xffffda8000017600 0041 00000000 0x0 0x0
0xffffda8000017680 0041 00000000 0x0 0x0
0xffffda8000017700 0041 00000000 0x0 0x0
0xffffda8000017780 0041 00000000 0x0 0x0
0xffffda8000017800 0041 00000000 0x0 0x0
0xffffda8000017880 0041 00000000 0x0 0x0
0xffffda8000017900 0041 00000000 0x0 0x0
0xffffda8000017980 0041 00000000 0x0 0x0
0xffffda8000017a00 0041 00000000 0x0 0x0
0xffffda8000017a80 0041 00000000 0x0 0x0
0xffffda8000017b00 0041 00000000 0x0 0x0
0xffffda8000017b80 0041 00000000 0x0 0x0
0xffffda8000017c00 0041 00000000 0x0 0x0
0xffffda8000017c80 0041 00000000 0x0 0x0
0xffffda8000017d00 0041 00000000 0x0 0x0
0xffffda8000017d80 0041 00000000 0x0 0x0
0xffffda8000017e00 0041 00000000 0x0 0x0
0xffffda8000017e80 0041 00000000 0x0 0x0
0xffffda8000017f00 0041 00000000 0x0 0x0
0xffffda8000017f80 0041 00000000 0x0 0x0

0xffffda8000018000 0041 00000000 0x0 0x0
0xffffda8000018080 0041 00000000 0x0 0x0

0xffffda8000018100 0041 00000000 0x0 0x0
0xffffda8000018180 0041 00000000 0x0 0x0
0xffffda8000018200 0041 00000000 0x0 0x0
0xffffda8000018280 0041 00000000 0x0 0x0
0xffffda8000018300 0041 00000000 0x0 0x0
0xffffda8000018380 0041 00000000 0x0 0x0
0xffffda8000018400 0041 00000000 0x0 0x0
0xffffda8000018480 0041 00000000 0x0 0x0
0xffffda8000018500 0041 00000000 0x0 0x0
0xffffda8000018580 0041 00000000 0x0 0x0
0xffffda8000018600 0041 00000000 0x0 0x0
0xffffda8000018680 0041 00000000 0x0 0x0
0xffffda8000018700 0041 00000000 0x0 0x0
0xffffda8000018780 0041 00000000 0x0 0x0
0xffffda8000018800 0041 00000000 0x0 0x0
0xffffda8000018880 0041 00000000 0x0 0x0
0xffffda8000018900 0041 00000000 0x0 0x0
0xffffda8000018980 0041 00000000 0x0 0x0
0xffffda8000018a00 0041 00000000 0x0 0x0
0xffffda8000018a80 0041 00000000 0x0 0x0
0xffffda8000018b00 0041 00000000 0x0 0x0
0xffffda8000018b80 0041 00000000 0x0 0x0
0xffffda8000018c00 0041 00000000 0x0 0x0
0xffffda8000018c80 0041 00000000 0x0 0x0
0xffffda8000018d00 0041 00000000 0x0 0x0
0xffffda8000018d80 0041 00000000 0x0 0x0
0xffffda8000018e00 0041 00000000 0x0 0x0
0xffffda8000018e80 0041 00000000 0x0 0x0
0xffffda8000018f00 0041 00000000 0x0 0x0
0xffffda8000018f80 0041 00000000 0x0 0x0

0xffffda8000019000 0041 00000000 0x0 0x0
0xffffda8000019080 0041 00000000 0x0 0x0

0xffffda8000019100 0041 00000000 0x0 0x0
0xffffda8000019180 0041 00000000 0x0 0x0
0xffffda8000019200 0041 00000000 0x0 0x0
0xffffda8000019280 0041 00000000 0x0 0x0
0xffffda8000019300 0041 00000000 0x0 0x0
0xffffda8000019380 0041 00000000 0x0 0x0
0xffffda8000019400 0041 00000000 0x0 0x0
0xffffda8000019480 0041 00000000 0x0 0x0
0xffffda8000019500 0041 00000000 0x0 0x0
0xffffda8000019580 0041 00000000 0x0 0x0
0xffffda8000019600 0041 00000000 0x0 0x0
0xffffda8000019680 0041 00000000 0x0 0x0
0xffffda8000019700 0041 00000000 0x0 0x0
0xffffda8000019780 0041 00000000 0x0 0x0
0xffffda8000019800 0041 00000000 0x0 0x0
0xffffda8000019880 0041 00000000 0x0 0x0
0xffffda8000019900 0041 00000000 0x0 0x0
0xffffda8000019980 0041 00000000 0x0 0x0
0xffffda8000019a00 0041 00000000 0x0 0x0
0xffffda8000019a80 0041 00000000 0x0 0x0
0xffffda8000019b00 0041 00000000 0x0 0x0
0xffffda8000019b80 0041 00000000 0x0 0x0
0xffffda8000019c00 0041 00000000 0x0 0x0
0xffffda8000019c80 0041 00000000 0x0 0x0
0xffffda8000019d00 0041 00000000 0x0 0x0
0xffffda8000019d80 0041 00000000 0x0 0x0
0xffffda8000019e00 0041 00000000 0x0 0x0
0xffffda8000019e80 0041 00000000 0x0 0x0
0xffffda8000019f00 0041 00000000 0x0 0x0
0xffffda8000019f80 0041 00000000 0x0 0x0
0xffffda800001a000 0041 00000000 0x0 0x0
0xffffda800001a080 0041 00000000 0x0 0x0
0xffffda800001a100 0041 00000000 0x0 0x0
0xffffda800001a180 0041 00000000 0x0 0x0
0xffffda800001a200 0041 00000000 0x0 0x0
0xffffda800001a280 0041 00000000 0x0 0x0
0xffffda800001a300 0041 00000000 0x0 0x0
0xffffda800001a380 0041 00000000 0x0 0x0
0xffffda800001a400 0041 00000000 0x0 0x0
0xffffda800001a480 0041 00000000 0x0 0x0
0xffffda800001a500 0041 00000000 0x0 0x0
0xffffda800001a580 0041 00000000 0x0 0x0
0xffffda800001a600 0041 00000000 0x0 0x0
0xffffda800001a680 0041 00000000 0x0 0x0
0xffffda800001a700 0041 00000000 0x0 0x0
0xffffda800001a780 0041 00000000 0x0 0x0
0xffffda800001a800 0041 00000000 0x0 0x0
0xffffda800001a880 0041 00000000 0x0 0x0
0xffffda800001a900 0041 00000000 0x0 0x0
0xffffda800001a980 0041 00000000 0x0 0x0
0xffffda800001aa00 0041 00000000 0x0 0x0
0xffffda800001aa80 0041 00000000 0x0 0x0
0xffffda800001ab00 0041 00000000 0x0 0x0
0xffffda800001ab80 0041 00000000 0x0 0x0
0xffffda800001ac00 0041 00000000 0x0 0x0
0xffffda800001ac80 0041 00000000 0x0 0x0
0xffffda800001ad00 0041 00000000 0x0 0x0
0xffffda800001ad80 0041 00000000 0x0 0x0
0xffffda800001ae00 0041 00000000 0x0 0x0
0xffffda800001ae80 0041 00000000 0x0 0x0
0xffffda800001af00 0041 00000000 0x0 0x0
0xffffda800001af80 0041 00000000 0x0 0x0
0xffffda800001b000 0041 00000000 0x0 0x0
0xffffda800001b080 0041 00000000 0x0 0x0
0xffffda800001b100 0041 00000000 0x0 0x0
0xffffda800001b180 0041 00000000 0x0 0x0
0xffffda800001b200 0041 00000000 0x0 0x0
0xffffda800001b280 0041 00000000 0x0 0x0
0xffffda800001b300 0041 00000000 0x0 0x0
0xffffda800001b380 0041 00000000 0x0 0x0
0xffffda800001b400 0041 00000000 0x0 0x0
0xffffda800001b480 0041 00000000 0x0 0x0
0xffffda800001b500 0041 00000000 0x0 0x0
0xffffda800001b580 0041 00000000 0x0 0x0
0xffffda800001b600 0041 00000000 0x0 0x0
0xffffda800001b680 0041 00000000 0x0 0x0
0xffffda800001b700 0041 00000000 0x0 0x0
0xffffda800001b780 0041 00000000 0x0 0x0
0xffffda800001b800 0041 00000000 0x0 0x0
0xffffda800001b880 0041 00000000 0x0 0x0
0xffffda800001b900 0041 00000000 0x0 0x0
0xffffda800001b980 0041 00000000 0x0 0x0
0xffffda800001ba00 0041 00000000 0x0 0x0
0xffffda800001ba80 0041 00000000 0x0 0x0
0xffffda800001bb00 0041 00000000 0x0 0x0
0xffffda800001bb80 0041 00000000 0x0 0x0
0xffffda800001bc00 0041 00000000 0x0 0x0
0xffffda800001bc80 0041 00000000 0x0 0x0
0xffffda800001bd00 0041 00000000 0x0 0x0
0xffffda800001bd80 0041 00000000 0x0 0x0
0xffffda800001be00 0041 00000000 0x0 0x0
0xffffda800001be80 0041 00000000 0x0 0x0
0xffffda800001bf00 0041 00000000 0x0 0x0
0xffffda800001bf80 0041 00000000 0x0 0x0
0xffffda800001c000 0041 00000000 0x0 0x0
0xffffda800001c080 0041 00000000 0x0 0x0
0xffffda800001c100 0041 00000000 0x0 0x0
0xffffda800001c180 0041 00000000 0x0 0x0
0xffffda800001c200 0041 00000000 0x0 0x0
0xffffda800001c280 0041 00000000 0x0 0x0
0xffffda800001c300 0041 00000000 0x0 0x0
0xffffda800001c380 0041 00000000 0x0 0x0
0xffffda800001c400 0041 00000000 0x0 0x0
0xffffda800001c480 0041 00000000 0x0 0x0
0xffffda800001c500 0041 00000000 0x0 0x0
0xffffda800001c580 0041 00000000 0x0 0x0
0xffffda800001c600 0041 00000000 0x0 0x0
0xffffda800001c680 0041 00000000 0x0 0x0
0xffffda800001c700 0041 00000000 0x0 0x0
0xffffda800001c780 0001 00000000 0x0 0x0
0xffffda800001c800 0001 00000000 0x0 0x0
0xffffda800001c880 0001 00000000 0x0 0x0
0xffffda800001c900 0001 00000000 0x0 0x0
0xffffda800001c980 0001 00000000 0x0 0x0
0xffffda800001ca00 0001 00000000 0x0 0x0
0xffffda800001ca80 0001 00000000 0x0 0x0
0xffffda800001cb00 0001 00000000 0x0 0x0
0xffffda800001cb80 0001 00000000 0x0 0x0
0xffffda800001cc00 0001 00000000 0x0 0x0
0xffffda800001cc80 0001 00000000 0x0 0x0
0xffffda800001cd00 0001 00000000 0x0 0x0
0xffffda800001cd80 0001 00000000 0x0 0x0
0xffffda800001ce00 0001 00000000 0x0 0x0
0xffffda800001ce80 0001 00000000 0x0 0x0
0xffffda800001cf00 0001 00000000 0x0 0x0
0xffffda800001cf80 0001 00000000 0x0 0x0
0xffffda800001d000 0001 00000000 0x0 0x0
0xffffda800001d080 0001 00000000 0x0 0x0
0xffffda800001d100 0001 00000000 0x0 0x0
0xffffda800001d180 0001 00000000 0x0 0x0
0xffffda800001d200 0001 00000000 0x0 0x0
0xffffda800001d280 0001 00000000 0x0 0x0
0xffffda800001d300 0001 00000000 0x0 0x0
0xffffda800001d380 0001 00000000 0x0 0x0
0xffffda800001d400 0001 00000000 0x0 0x0
0xffffda800001d480 0001 00000000 0x0 0x0
0xffffda800001d500 0001 00000000 0x0 0x0
0xffffda800001d580 0001 00000000 0x0 0x0
0xffffda800001d600 0001 00000000 0x0 0x0
0xffffda800001d680 0001 00000000 0x0 0x0
0xffffda800001d700 0001 00000000 0x0 0x0
0xffffda800001d780 0001 00000000 0x0 0x0
0xffffda800001d800 0001 00000000 0x0 0x0
0xffffda800001d880 0001 00000000 0x0 0x0
0xffffda800001d900 0001 00000000 0x0 0x0
0xffffda800001d980 0001 00000000 0x0 0x0
0xffffda800001da00 0001 00000000 0x0 0x0
0xffffda800001da80 0001 00000000 0x0 0x0
0xffffda800001db00 0001 00000000 0x0 0x0
0xffffda800001db80 0001 00000000 0x0 0x0
0xffffda800001dc00 0001 00000000 0x0 0x0
0xffffda800001dc80 0001 00000000 0x0 0x0
0xffffda800001dd00 0001 00000000 0x0 0x0
0xffffda800001dd80 0001 00000000 0x0 0x0
0xffffda800001de00 0001 00000000 0x0 0x0
0xffffda800001de80 0001 00000000 0x0 0x0
0xffffda800001df00 0001 00000000 0x0 0x0
0xffffda800001df80 0001 00000000 0x0 0x0
0xffffda800001e000 0001 00000000 0x0 0x0
0xffffda800001e080 0001 00000000 0x0 0x0
0xffffda800001e100 0001 00000000 0x0 0x0
0xffffda800001e180 0001 00000000 0x0 0x0
0xffffda800001e200 0001 00000000 0x0 0x0
0xffffda800001e280 0001 00000000 0x0 0x0
0xffffda800001e300 0001 00000000 0x0 0x0
0xffffda800001e380 0001 00000000 0x0 0x0
0xffffda800001e400 0001 00000000 0x0 0x0
0xffffda800001e480 0001 00000000 0x0 0x0
0xffffda800001e500 0001 00000000 0x0 0x0
0xffffda800001e580 0001 00000000 0x0 0x0
0xffffda800001e600 0001 00000000 0x0 0x0
0xffffda800001e680 0001 00000000 0x0 0x0
0xffffda800001e700 0001 00000000 0x0 0x0
0xffffda800001e780 0001 00000000 0x0 0x0
0xffffda800001e800 0001 00000000 0x0 0x0
0xffffda800001e880 0001 00000000 0x0 0x0
0xffffda800001e900 0001 00000000 0x0 0x0
0xffffda800001e980 0001 00000000 0x0 0x0
0xffffda800001ea00 0001 00000000 0x0 0x0
0xffffda800001ea80 0001 00000000 0x0 0x0
0xffffda800001eb00 0001 00000000 0x0 0x0
0xffffda800001eb80 0001 00000000 0x0 0x0
0xffffda800001ec00 0001 00000000 0x0 0x0
0xffffda800001ec80 0001 00000000 0x0 0x0
0xffffda800001ed00 0001 00000000 0x0 0x0
0xffffda800001ed80 0001 00000000 0x0 0x0
0xffffda800001ee00 0001 00000000 0x0 0x0
0xffffda800001ee80 0001 00000000 0x0 0x0
0xffffda800001ef00 0001 00000000 0x0 0x0
0xffffda800001ef80 0001 00000000 0x0 0x0
0xffffda800001f000 0001 00000000 0x0 0x0
0xffffda800001f080 0001 00000000 0x0 0x0
0xffffda800001f100 0001 00000000 0x0 0x0
0xffffda800001f180 0001 00000000 0x0 0x0
0xffffda800001f200 0001 00000000 0x0 0x0
0xffffda800001f280 0001 00000000 0x0 0x0
0xffffda800001f300 0001 00000000 0x0 0x0
0xffffda800001f380 0001 00000000 0x0 0x0
0xffffda800001f400 0001 00000000 0x0 0x0
0xffffda800001f480 0001 00000000 0x0 0x0
0xffffda800001f500 0001 00000000 0x0 0x0
0xffffda800001f580 0001 00000000 0x0 0x0
0xffffda800001f600 0001 00000000 0x0 0x0
0xffffda800001f680 0001 00000000 0x0 0x0
0xffffda800001f700 0001 00000000 0x0 0x0
0xffffda800001f780 0001 00000000 0x0 0x0
0xffffda800001f800 0001 00000000 0x0 0x0
0xffffda800001f880 0001 00000000 0x0 0x0
0xffffda800001f900 0001 00000000 0x0 0x0
0xffffda800001f980 0001 00000000 0x0 0x0
0xffffda800001fa00 0001 00000000 0x0 0x0
0xffffda800001fa80 0001 00000000 0x0 0x0
0xffffda800001fb00 0001 00000000 0x0 0x0
0xffffda800001fb80 0001 00000000 0x0 0x0
0xffffda800001fc00 0001 00000000 0x0 0x0
0xffffda800001fc80 0001 00000000 0x0 0x0
0xffffda800001fd00 0001 00000000 0x0 0x0
0xffffda800001fd80 0001 00000000 0x0 0x0
0xffffda800001fe00 0001 00000000 0x0 0x0
0xffffda800001fe80 0001 00000000 0x0 0x0
0xffffda800001ff00 0001 00000000 0x0 0x0
0xffffda800001ff80 0001 00000000 0x0 0x0
0xffffda8000020000 0001 00000000 0x0 0x0
0xffffda8000020080 0001 00000000 0x0 0x0
0xffffda8000020100 0001 00000000 0x0 0x0
0xffffda8000020180 0001 00000000 0x0 0x0
0xffffda8000020200 0001 00000000 0x0 0x0
0xffffda8000020280 0001 00000000 0x0 0x0
0xffffda8000020300 0001 00000000 0x0 0x0
0xffffda8000020380 0001 00000000 0x0 0x0
0xffffda8000020400 0001 00000000 0x0 0x0
0xffffda8000020480 0001 00000000 0x0 0x0
0xffffda8000020500 0001 00000000 0x0 0x0
0xffffda8000020580 0001 00000000 0x0 0x0
0xffffda8000020600 0001 00000000 0x0 0x0
0xffffda8000020680 0001 00000000 0x0 0x0
0xffffda8000020700 0001 00000000 0x0 0x0
0xffffda8000020780 0001 00000000 0x0 0x0
0xffffda8000020800 0001 00000000 0x0 0x0
0xffffda8000020880 0001 00000000 0x0 0x0
0xffffda8000020900 0001 00000000 0x0 0x0
0xffffda8000020980 0001 00000000 0x0 0x0
0xffffda8000020a00 0001 00000000 0x0 0x0
0xffffda8000020a80 0001 00000000 0x0 0x0
0xffffda8000020b00 0001 00000000 0x0 0x0
0xffffda8000020b80 0001 00000000 0x0 0x0
0xffffda8000020c00 0001 00000000 0x0 0x0
0xffffda8000020c80 0001 00000000 0x0 0x0
0xffffda8000020d00 0001 00000000 0x0 0x0
0xffffda8000020d80 0001 00000000 0x0 0x0
0xffffda8000020e00 0001 00000000 0x0 0x0
0xffffda8000020e80 0001 00000000 0x0 0x0
0xffffda8000020f00 0001 00000000 0x0 0x0
0xffffda8000020f80 0001 00000000 0x0 0x0
0xffffda8000021000 0001 00000000 0x0 0x0
0xffffda8000021080 0001 00000000 0x0 0x0
0xffffda8000021100 0001 00000000 0x0 0x0
0xffffda8000021180 0001 00000000 0x0 0x0
0xffffda8000021200 0001 00000000 0x0 0x0
0xffffda8000021280 0001 00000000 0x0 0x0
0xffffda8000021300 0001 00000000 0x0 0x0
0xffffda8000021380 0001 00000000 0x0 0x0
0xffffda8000021400 0001 00000000 0x0 0x0
0xffffda8000021480 0001 00000000 0x0 0x0
0xffffda8000021500 0001 00000000 0x0 0x0
0xffffda8000021580 0001 00000000 0x0 0x0
0xffffda8000021600 0001 00000000 0x0 0x0
0xffffda8000021680 0001 00000000 0x0 0x0
0xffffda8000021700 0001 00000000 0x0 0x0
0xffffda8000021780 0001 00000000 0x0 0x0
0xffffda8000021800 0001 00000000 0x0 0x0
0xffffda8000021880 0001 00000000 0x0 0x0
0xffffda8000021900 0001 00000000 0x0 0x0
0xffffda8000021980 0001 00000000 0x0 0x0
0xffffda8000021a00 0001 00000000 0x0 0x0
0xffffda8000021a80 0001 00000000 0x0 0x0
0xffffda8000021b00 0001 00000000 0x0 0x0
0xffffda8000021b80 0001 00000000 0x0 0x0
0xffffda8000021c00 0001 00000000 0x0 0x0
0xffffda8000021c80 0001 00000000 0x0 0x0
0xffffda8000021d00 0001 00000000 0x0 0x0
0xffffda8000021d80 0001 00000000 0x0 0x0
0xffffda8000021e00 0001 00000000 0x0 0x0
0xffffda8000021e80 0001 00000000 0x0 0x0
0xffffda8000021f00 0001 00000000 0x0 0x0
0xffffda8000021f80 0001 00000000 0x0 0x0
0xffffda8000022000 0001 00000000 0x0 0x0
0xffffda8000022080 0001 00000000 0x0 0x0
0xffffda8000022100 0001 00000000 0x0 0x0
0xffffda8000022180 0001 00000000 0x0 0x0
0xffffda8000022200 0001 00000000 0x0 0x0
0xffffda8000022280 0001 00000000 0x0 0x0
0xffffda8000022300 0001 00000000 0x0 0x0
0xffffda8000022380 0001 00000000 0x0 0x0
0xffffda8000022400 0001 00000000 0x0 0x0
0xffffda8000022480 0001 00000000 0x0 0x0
0xffffda8000022500 0001 00000000 0x0 0x0
0xffffda8000022580 0001 00000000 0x0 0x0
0xffffda8000022600 0001 00000000 0x0 0x0
0xffffda8000022680 0001 00000000 0x0 0x0
0xffffda8000022700 0001 00000000 0x0 0x0
0xffffda8000022780 0001 00000000 0x0 0x0
0xffffda8000022800 0001 00000000 0x0 0x0
0xffffda8000022880 0001 00000000 0x0 0x0
0xffffda8000022900 0001 00000000 0x0 0x0
0xffffda8000022980 0001 00000000 0x0 0x0
0xffffda8000022a00 0001 00000000 0x0 0x0
0xffffda8000022a80 0001 00000000 0x0 0x0
0xffffda8000022b00 0001 00000000 0x0 0x0
0xffffda8000022b80 0001 00000000 0x0 0x0
0xffffda8000022c00 0001 00000000 0x0 0x0
0xffffda8000022c80 0001 00000000 0x0 0x0
0xffffda8000022d00 0001 00000000 0x0 0x0
0xffffda8000022d80 0001 00000000 0x0 0x0
0xffffda8000022e00 0001 00000000 0x0 0x0
0xffffda8000022e80 0001 00000000 0x0 0x0
0xffffda8000022f00 0001 00000000 0x0 0x0
0xffffda8000022f80 0001 00000000 0x0 0x0
0xffffda8000023000 0001 00000000 0x0 0x0
0xffffda8000023080 0001 00000000 0x0 0x0
0xffffda8000023100 0001 00000000 0x0 0x0
0xffffda8000023180 0001 00000000 0x0 0x0
0xffffda8000023200 0001 00000000 0x0 0x0
0xffffda8000023280 0001 00000000 0x0 0x0
0xffffda8000023300 0001 00000000 0x0 0x0
0xffffda8000023380 0001 00000000 0x0 0x0
0xffffda8000023400 0001 00000000 0x0 0x0
0xffffda8000023480 0001 00000000 0x0 0x0
0xffffda8000023500 0001 00000000 0x0 0x0
0xffffda8000023580 0001 00000000 0x0 0x0
0xffffda8000023600 0001 00000000 0x0 0x0
0xffffda8000023680 0001 00000000 0x0 0x0
0xffffda8000023700 0001 00000000 0x0 0x0
0xffffda8000023780 0001 00000000 0x0 0x0
0xffffda8000023800 0001 00000000 0x0 0x0
0xffffda8000023880 0001 00000000 0x0 0x0
0xffffda8000023900 0001 00000000 0x0 0x0
0xffffda8000023980 0001 00000000 0x0 0x0
0xffffda8000023a00 0001 00000000 0x0 0x0
0xffffda8000023a80 0001 00000000 0x0 0x0
0xffffda8000023b00 0001 00000000 0x0 0x0
0xffffda8000023b80 0001 00000000 0x0 0x0
0xffffda8000023c00 0001 00000000 0x0 0x0
0xffffda8000023c80 0001 00000000 0x0 0x0
0xffffda8000023d00 0001 00000000 0x0 0x0
0xffffda8000023d80 0001 00000000 0x0 0x0
0xffffda8000023e00 0001 00000000 0x0 0x0
0xffffda8000023e80 0001 00000000 0x0 0x0
0xffffda8000023f00 0001 00000000 0x0 0x0
0xffffda8000023f80 0001 00000000 0x0 0x0
0xffffda8000024000 0001 00000000 0x0 0x0
0xffffda8000024080 0001 00000000 0x0 0x0
0xffffda8000024100 0001 00000000 0x0 0x0
0xffffda8000024180 0001 00000000 0x0 0x0
0xffffda8000024200 0001 00000000 0x0 0x0
0xffffda8000024280 0001 00000000 0x0 0x0
0xffffda8000024300 0001 00000000 0x0 0x0
0xffffda8000024380 0001 00000000 0x0 0x0
0xffffda8000024400 0001 00000000 0x0 0x0
0xffffda8000024480 0001 00000000 0x0 0x0
0xffffda8000024500 0001 00000000 0x0 0x0
0xffffda8000024580 0001 00000000 0x0 0x0
0xffffda8000024600 0001 00000000 0x0 0x0
0xffffda8000024680 0001 00000000 0x0 0x0
0xffffda8000024700 0001 00000000 0x0 0x0
0xffffda8000024780 0001 00000000 0x0 0x0
0xffffda8000024800 0001 00000000 0x0 0x0
0xffffda8000024880 0001 00000000 0x0 0x0
0xffffda8000024900 0001 00000000 0x0 0x0
0xffffda8000024980 0001 00000000 0x0 0x0
0xffffda8000024a00 0001 00000000 0x0 0x0
0xffffda8000024a80 0001 00000000 0x0 0x0
0xffffda8000024b00 0001 00000000 0x0 0x0
0xffffda8000024b80 0001 00000000 0x0 0x0
0xffffda8000024c00 0001 00000000 0x0 0x0
0xffffda8000024c80 0001 00000000 0x0 0x0
0xffffda8000024d00 0001 00000000 0x0 0x0
0xffffda8000024d80 0001 00000000 0x0 0x0
0xffffda8000024e00 0001 00000000 0x0 0x0
0xffffda8000024e80 0001 00000000 0x0 0x0
0xffffda8000024f00 0001 00000000 0x0 0x0
0xffffda8000024f80 0001 00000000 0x0 0x0
0xffffda8000025000 0001 00000000 0x0 0x0
0xffffda8000025080 0001 00000000 0x0 0x0
0xffffda8000025100 0001 00000000 0x0 0x0
0xffffda8000025180 0001 00000000 0x0 0x0
0xffffda8000025200 0001 00000000 0x0 0x0
0xffffda8000025280 0001 00000000 0x0 0x0
0xffffda8000025300 0001 00000000 0x0 0x0
0xffffda8000025380 0001 00000000 0x0 0x0
0xffffda8000025400 0001 00000000 0x0 0x0
0xffffda8000025480 0001 00000000 0x0 0x0
0xffffda8000025500 0001 00000000 0x0 0x0
0xffffda8000025580 0001 00000000 0x0 0x0
0xffffda8000025600 0001 00000000 0x0 0x0
0xffffda8000025680 0001 00000000 0x0 0x0
0xffffda8000025700 0001 00000000 0x0 0x0
0xffffda8000025780 0001 00000000 0x0 0x0
0xffffda8000025800 0001 00000000 0x0 0x0
0xffffda8000025880 0001 00000000 0x0 0x0
0xffffda8000025900 0001 00000000 0x0 0x0
0xffffda8000025980 0001 00000000 0x0 0x0
0xffffda8000025a00 0001 00000000 0x0 0x0
0xffffda8000025a80 0001 00000000 0x0 0x0
0xffffda8000025b00 0001 00000000 0x0 0x0
0xffffda8000025b80 0001 00000000 0x0 0x0
0xffffda8000025c00 0001 00000000 0x0 0x0
0xffffda8000025c80 0001 00000000 0x0 0x0
0xffffda8000025d00 0001 00000000 0x0 0x0
0xffffda8000025d80 0001 00000000 0x0 0x0
0xffffda8000025e00 0001 00000000 0x0 0x0
0xffffda8000025e80 0001 00000000 0x0 0x0
0xffffda8000025f00 0001 00000000 0x0 0x0
0xffffda8000025f80 0001 00000000 0x0 0x0
0xffffda8000026000 0001 00000000 0x0 0x0
0xffffda8000026080 0001 00000000 0x0 0x0
0xffffda8000026100 0001 00000000 0x0 0x0
0xffffda8000026180 0001 00000000 0x0 0x0
0xffffda8000026200 0001 00000000 0x0 0x0
0xffffda8000026280 0001 00000000 0x0 0x0
0xffffda8000026300 0001 00000000 0x0 0x0
0xffffda8000026380 0001 00000000 0x0 0x0
0xffffda8000026400 0001 00000000 0x0 0x0
0xffffda8000026480 0001 00000000 0x0 0x0
0xffffda8000026500 0001 00000000 0x0 0x0
0xffffda8000026580 0001 00000000 0x0 0x0
0xffffda8000026600 0001 00000000 0x0 0x0
0xffffda8000026680 0001 00000000 0x0 0x0
0xffffda8000026700 0001 00000000 0x0 0x0
0xffffda8000026780 0001 00000000 0x0 0x0
0xffffda8000026800 0001 00000000 0x0 0x0
0xffffda8000026880 0001 00000000 0x0 0x0
0xffffda8000026900 0001 00000000 0x0 0x0
0xffffda8000026980 0001 00000000 0x0 0x0
0xffffda8000026a00 0001 00000000 0x0 0x0
0xffffda8000026a80 0001 00000000 0x0 0x0
0xffffda8000026b00 0001 00000000 0x0 0x0
0xffffda8000026b80 0001 00000000 0x0 0x0
0xffffda8000026c00 0001 00000000 0x0 0x0
0xffffda8000026c80 0001 00000000 0x0 0x0
0xffffda8000026d00 0001 00000000 0x0 0x0
0xffffda8000026d80 0001 00000000 0x0 0x0
0xffffda8000026e00 0001 00000000 0x0 0x0
0xffffda8000026e80 0001 00000000 0x0 0x0
0xffffda8000026f00 0001 00000000 0x0 0x0
0xffffda8000026f80 0001 00000000 0x0 0x0
0xffffda8000027000 0001 00000000 0x0 0x0
0xffffda8000027080 0001 00000000 0x0 0x0
0xffffda8000027100 0001 00000000 0x0 0x0
0xffffda8000027180 0001 00000000 0x0 0x0
0xffffda8000027200 0001 00000000 0x0 0x0
0xffffda8000027280 0001 00000000 0x0 0x0
0xffffda8000027300 0001 00000000 0x0 0x0
0xffffda8000027380 0001 00000000 0x0 0x0
0xffffda8000027400 0001 00000000 0x0 0x0
0xffffda8000027480 0001 00000000 0x0 0x0
0xffffda8000027500 0001 00000000 0x0 0x0
0xffffda8000027580 0001 00000000 0x0 0x0
0xffffda8000027600 0001 00000000 0x0 0x0
0xffffda8000027680 0001 00000000 0x0 0x0
0xffffda8000027700 0001 00000000 0x0 0x0
0xffffda8000027780 0001 00000000 0x0 0x0
0xffffda8000027800 0001 00000000 0x0 0x0
0xffffda8000027880 0001 00000000 0x0 0x0
0xffffda8000027900 0001 00000000 0x0 0x0
0xffffda8000027980 0001 00000000 0x0 0x0
0xffffda8000027a00 0001 00000000 0x0 0x0
0xffffda8000027a80 0001 00000000 0x0 0x0
0xffffda8000027b00 0001 00000000 0x0 0x0
0xffffda8000027b80 0001 00000000 0x0 0x0
0xffffda8000027c00 0001 00000000 0x0 0x0
0xffffda8000027c80 0001 00000000 0x0 0x0
0xffffda8000027d00 0001 00000000 0x0 0x0
0xffffda8000027d80 0001 00000000 0x0 0x0
0xffffda8000027e00 0001 00000000 0x0 0x0
0xffffda8000027e80 0001 00000000 0x0 0x0
0xffffda8000027f00 0001 00000000 0x0 0x0
0xffffda8000027f80 0001 00000000 0x0 0x0
0xffffda8000028000 0001 00000000 0x0 0x0
0xffffda8000028080 0001 00000000 0x0 0x0
0xffffda8000028100 0001 00000000 0x0 0x0
0xffffda8000028180 0001 00000000 0x0 0x0
0xffffda8000028200 0001 00000000 0x0 0x0
0xffffda8000028280 0001 00000000 0x0 0x0
0xffffda8000028300 0001 00000000 0x0 0x0
0xffffda8000028380 0001 00000000 0x0 0x0
0xffffda8000028400 0001 00000000 0x0 0x0
0xffffda8000028480 0001 00000000 0x0 0x0
0xffffda8000028500 0001 00000000 0x0 0x0
0xffffda8000028580 0001 00000000 0x0 0x0
0xffffda8000028600 0001 00000000 0x0 0x0
0xffffda8000028680 0001 00000000 0x0 0x0
0xffffda8000028700 0001 00000000 0x0 0x0
0xffffda8000028780 0001 00000000 0x0 0x0
0xffffda8000028800 0001 00000000 0x0 0x0
0xffffda8000028880 0001 00000000 0x0 0x0
0xffffda8000028900 0001 00000000 0x0 0x0
0xffffda8000028980 0001 00000000 0x0 0x0
0xffffda8000028a00 0001 00000000 0x0 0x0
0xffffda8000028a80 0001 00000000 0x0 0x0
0xffffda8000028b00 0001 00000000 0x0 0x0
0xffffda8000028b80 0001 00000000 0x0 0x0
0xffffda8000028c00 0001 00000000 0x0 0x0
0xffffda8000028c80 0001 00000000 0x0 0x0
0xffffda8000028d00 0001 00000000 0x0 0x0
0xffffda8000028d80 0001 00000000 0x0 0x0
0xffffda8000028e00 0001 00000000 0x0 0x0
0xffffda8000028e80 0001 00000000 0x0 0x0
0xffffda8000028f00 0001 00000000 0x0 0x0
0xffffda8000028f80 0001 00000000 0x0 0x0
0xffffda8000029000 0001 00000000 0x0 0x0
0xffffda8000029080 0001 00000000 0x0 0x0
0xffffda8000029100 0001 00000000 0x0 0x0
0xffffda8000029180 0001 00000000 0x0 0x0
0xffffda8000029200 0001 00000000 0x0 0x0
0xffffda8000029280 0001 00000000 0x0 0x0
0xffffda8000029300 0001 00000000 0x0 0x0
0xffffda8000029380 0001 00000000 0x0 0x0
0xffffda8000029400 0001 00000000 0x0 0x0
0xffffda8000029480 0001 00000000 0x0 0x0
0xffffda8000029500 0001 00000000 0x0 0x0
0xffffda8000029580 0001 00000000 0x0 0x0
0xffffda8000029600 0001 00000000 0x0 0x0
0xffffda8000029680 0001 00000000 0x0 0x0
0xffffda8000029700 0001 00000000 0x0 0x0
0xffffda8000029780 0001 00000000 0x0 0x0
0xffffda8000029800 0001 00000000 0x0 0x0
0xffffda8000029880 0001 00000000 0x0 0x0
0xffffda8000029900 0001 00000000 0x0 0x0
0xffffda8000029980 0001 00000000 0x0 0x0

0xffffda8000029a00 0001 00000000 0x0 0x0
0xffffda8000029a80 0001 00000000 0x0 0x0
0xffffda8000029b00 0001 00000000 0x0 0x0
0xffffda8000029b80 0001 00000000 0x0 0x0

0xffffda8000029c00 0001 00000000 0x0 0x0
0xffffda8000029c80 0001 00000000 0x0 0x0
0xffffda8000029d00 0001 00000000 0x0 0x0
0xffffda8000029d80 0001 00000000 0x0 0x0
0xffffda8000029e00 0001 00000000 0x0 0x0
0xffffda8000029e80 0001 00000000 0x0 0x0
0xffffda8000029f00 0001 00000000 0x0 0x0
0xffffda8000029f80 0001 00000000 0x0 0x0
0xffffda800002a000 0001 00000000 0x0 0x0
0xffffda800002a080 0001 00000000 0x0 0x0
0xffffda800002a100 0001 00000000 0x0 0x0
0xffffda800002a180 0001 00000000 0x0 0x0
0xffffda800002a200 0001 00000000 0x0 0x0
0xffffda800002a280 0001 00000000 0x0 0x0
0xffffda800002a300 0001 00000000 0x0 0x0
0xffffda800002a380 0001 00000000 0x0 0x0
0xffffda800002a400 0001 00000000 0x0 0x0
0xffffda800002a480 0001 00000000 0x0 0x0
0xffffda800002a500 0001 00000000 0x0 0x0
0xffffda800002a580 0001 00000000 0x0 0x0
0xffffda800002a600 0001 00000000 0x0 0x0
0xffffda800002a680 0001 00000000 0x0 0x0
0xffffda800002a700 0001 00000000 0x0 0x0
0xffffda800002a780 0001 00000000 0x0 0x0
0xffffda800002a800 0001 00000000 0x0 0x0
0xffffda800002a880 0001 00000000 0x0 0x0
0xffffda800002a900 0001 00000000 0x0 0x0
0xffffda800002a980 0001 00000000 0x0 0x0
0xffffda800002aa00 0001 00000000 0x0 0x0
0xffffda800002aa80 0001 00000000 0x0 0x0
0xffffda800002ab00 0001 00000000 0x0 0x0
0xffffda800002ab80 0001 00000000 0x0 0x0
0xffffda800002ac00 0001 00000000 0x0 0x0
0xffffda800002ac80 0001 00000000 0x0 0x0
0xffffda800002ad00 0001 00000000 0x0 0x0
0xffffda800002ad80 0001 00000000 0x0 0x0
0xffffda800002ae00 0001 00000000 0x0 0x0
0xffffda800002ae80 0001 00000000 0x0 0x0
0xffffda800002af00 0001 00000000 0x0 0x0
0xffffda800002af80 0001 00000000 0x0 0x0
0xffffda800002b000 0001 00000000 0x0 0x0
0xffffda800002b080 0001 00000000 0x0 0x0
0xffffda800002b100 0001 00000000 0x0 0x0
0xffffda800002b180 0001 00000000 0x0 0x0
0xffffda800002b200 0001 00000000 0x0 0x0
0xffffda800002b280 0001 00000000 0x0 0x0
0xffffda800002b300 0001 00000000 0x0 0x0
0xffffda800002b380 0001 00000000 0x0 0x0
0xffffda800002b400 0001 00000000 0x0 0x0
0xffffda800002b480 0001 00000000 0x0 0x0
0xffffda800002b500 0001 00000000 0x0 0x0
0xffffda800002b580 0001 00000000 0x0 0x0
0xffffda800002b600 0001 00000000 0x0 0x0
0xffffda800002b680 0001 00000000 0x0 0x0
0xffffda800002b700 0001 00000000 0x0 0x0
0xffffda800002b780 0001 00000000 0x0 0x0
0xffffda800002b800 0001 00000000 0x0 0x0
0xffffda800002b880 0001 000

---
If you want syzbot to run the reproducer, reply with:
#syz test: git://repo/address.git branch-or-commit-hash
If you attach or paste a git patch, syzbot will apply it before testing.

Reply all

Reply to author

Forward

0 new messages