UBSan: Undefined Behavior in compat_43_ttioctl.cold

1 view

Skip to first unread message

syzbot

unread,

Sep 21, 2020, 7:18:33 PM9/21/20

to syzkaller-...@googlegroups.com

Hello,

syzbot found the following issue on:

HEAD commit: a1511216 ld.so(1): Upgrade r_debug to the protocol version..
git tree: netbsd
console output: https://syzkaller.appspot.com/x/log.txt?x=11e88973900000
kernel config: https://syzkaller.appspot.com/x/.config?x=1420f906d33d9f1f
dashboard link: https://syzkaller.appspot.com/bug?extid=39cd551a05298b222756
compiler: g++ (Ubuntu 5.4.0-6ubuntu1~16.04.12) 5.4.0 20160609

Unfortunately, I don't have any reproducer for this issue yet.

IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+39cd55...@syzkaller.appspotmail.com

[ 452.4090315] panic: UBSan: Undefined Behavior in /syzkaller/managers/netbsd-kubsan/kernel/sys/compat/common/tty_43.c:230:48, left shift of 1768304430 by 16 places cannot be represented in type 'int'

[ 452.4090315] cpu0: Begin traceback...
[ 452.4090315] vpanic() at netbsd:vpanic+0x2cd sys/kern/subr_prf.c:290
[ 452.4090315] isAlreadyReported() at netbsd:isAlreadyReported
[ 452.4090315] HandleShiftOutOfBounds() at netbsd:HandleShiftOutOfBounds+0x24e sys/../common/lib/libc/misc/ubsan.c:479
[ 452.4090315] compat_43_ttioctl.cold() at netbsd:compat_43_ttioctl.cold+0x37
[ 452.4090315] ttioctl() at netbsd:ttioctl+0x83c sys/kern/tty.c:1422
[ 452.4090315] comioctl() at netbsd:comioctl+0x1a3 sys/dev/ic/com.c:1168
[ 452.4090315] cdev_ioctl() at netbsd:cdev_ioctl+0x15f sys/kern/subr_devsw.c:935
[ 452.4090315] spec_ioctl() at netbsd:spec_ioctl+0x2d3 sys/miscfs/specfs/spec_vnops.c:902
[ 452.4090315] layer_bypass() at netbsd:layer_bypass+0x635 sys/miscfs/genfs/layer_vnops.c:294
[ 452.4090315] layer_bypass() at netbsd:layer_bypass+0x635 sys/miscfs/genfs/layer_vnops.c:294
[ 452.4090315] VOP_IOCTL() at netbsd:VOP_IOCTL+0x20e sys/kern/vnode_if.c:646
[ 452.4090315] vn_ioctl() at netbsd:vn_ioctl+0x197 sys/kern/vfs_vnops.c:778
[ 452.4090315] sys_ioctl() at netbsd:sys_ioctl+0xd8b sys/kern/sys_generic.c:671
[ 452.4090315] sys___syscall() at netbsd:sys___syscall+0x1cf sy_call sys/sys/syscallvar.h:66 [inline]
[ 452.4090315] sys___syscall() at netbsd:sys___syscall+0x1cf sys/kern/sys_syscall.c:77
[ 452.4090315] syscall() at netbsd:syscall+0x2d5 sy_call sys/sys/syscallvar.h:65 [inline]
[ 452.4090315] syscall() at netbsd:syscall+0x2d5 sy_invoke sys/sys/syscallvar.h:94 [inline]
[ 452.4090315] syscall() at netbsd:syscall+0x2d5 sys/arch/x86/x86/syscall.c:138
[ 452.4090315] --- syscall (number 198) ---
[ 452.4090315] netbsd:syscall+0x2d5:
[ 452.4090315] cpu0: End traceback...
[ 452.4090315] fatal breakpoint trap in supervisor mode
[ 452.4090315] trap type 1 code 0 rip 0xffffffff80221a85 cs 0x8 rflags 0x246 cr2 0x79d21f45b8c8 ilevel 0x8 rsp 0xffffdb80cb7490f0
[ 452.4090315] curlwp 0xffffb703ee3c5780 pid 2804.5065 lowest kstack 0xffffdb80cb7452c0
Stopped in pid 2804.5065 (syz-executor.4) at netbsd:breakpoint+0x5: leave
?
breakpoint() at netbsd:breakpoint+0x5
db_panic() at netbsd:db_panic+0xec sys/ddb/db_panic.c:67
vpanic() at netbsd:vpanic+0x2cd sys/kern/subr_prf.c:290
isAlreadyReported() at netbsd:isAlreadyReported
HandleShiftOutOfBounds() at netbsd:HandleShiftOutOfBounds+0x24e sys/../common/lib/libc/misc/ubsan.c:479
compat_43_ttioctl.cold() at netbsd:compat_43_ttioctl.cold+0x37
ttioctl() at netbsd:ttioctl+0x83c sys/kern/tty.c:1422
comioctl() at netbsd:comioctl+0x1a3 sys/dev/ic/com.c:1168
cdev_ioctl() at netbsd:cdev_ioctl+0x15f sys/kern/subr_devsw.c:935
spec_ioctl() at netbsd:spec_ioctl+0x2d3 sys/miscfs/specfs/spec_vnops.c:902
layer_bypass() at netbsd:layer_bypass+0x635 sys/miscfs/genfs/layer_vnops.c:294
layer_bypass() at netbsd:layer_bypass+0x635 sys/miscfs/genfs/layer_vnops.c:294
VOP_IOCTL() at netbsd:VOP_IOCTL+0x20e sys/kern/vnode_if.c:646
vn_ioctl() at netbsd:vn_ioctl+0x197 sys/kern/vfs_vnops.c:778
sys_ioctl() at netbsd:sys_ioctl+0xd8b sys/kern/sys_generic.c:671
sys___syscall() at netbsd:sys___syscall+0x1cf sy_call sys/sys/syscallvar.h:66 [inline]
sys___syscall() at netbsd:sys___syscall+0x1cf sys/kern/sys_syscall.c:77
syscall() at netbsd:syscall+0x2d5 sy_call sys/sys/syscallvar.h:65 [inline]
syscall() at netbsd:syscall+0x2d5 sy_invoke sys/sys/syscallvar.h:94 [inline]
syscall() at netbsd:syscall+0x2d5 sys/arch/x86/x86/syscall.c:138
--- syscall (number 198) ---
netbsd:syscall+0x2d5:
Panic string: UBSan: Undefined Behavior in /syzkaller/managers/netbsd-kubsan/kernel/sys/compat/common/tty_43.c:230:48, left shift of 1768304430 by 16 places cannot be represented in type 'int'

PID LID S CPU FLAGS STRUCT LWP * NAME WAIT
4965 4965 2 0 0 ffffb703ef6c28c0 syz-executor.4
2952 2952 2 0 0 ffffb703ed723580 syz-executor.2
5026 5026 4 1 1000000 ffffb703f0378740 syz-executor.4
5076 5076 2 0 0 ffffb703ee967700 syz-executor.3
2811 2811 2 0 0 ffffb703ef5d1080 syz-executor.0
4926 2949 2 1 0 ffffb703ee3c5bc0 syz-executor.5
4926 4926 2 1 10000000 ffffb703f0378b80 syz-executor.5
2695 2802 3 0 80 ffffb703dc046940 syz-executor.1 parked
2695 4906 3 1 80 ffffb703ef6c2480 syz-executor.1 parked
2695 2695 2 1 10000040 ffffb703ed7239c0 syz-executor.1
2804 2793 3 0 80 ffffb703ef23b680 syz-executor.4 parked
2804 2799 3 1 80 ffffb703eecb4a80 syz-executor.4 parked
2804 >5065 7 0 0 ffffb703ee3c5780 syz-executor.4
2804 2804 2 0 10000000 ffffb703f0378300 syz-executor.4
3878 3878 3 0 80 ffffb703ef23bac0 syz-executor.3 parked
2596 2596 3 0 80 ffffb703ec1e9900 syz-executor.0 parked
3121 3121 3 0 80 ffffb703ebe36b40 syz-executor.3 parked
4944 4944 3 0 80 ffffb703ec25d900 syz-executor.0 parked
2890 2890 3 1 80 ffffb703ee9672c0 syz-executor.3 parked
4814 4814 3 0 80 ffffb703ebb7a480 syz-executor.0 parked
3537 3537 3 0 80 ffffb703ee0035c0 syz-executor.0 parked
3510 3510 3 0 80 ffffb703eb939200 syz-executor.0 parked
4137 4137 3 0 80 ffffb703ef23b240 syz-executor.0 parked
4264 4264 3 0 80 ffffb703ebc31980 syz-executor.0 parked
2293 2293 3 0 80 ffffb703ed132500 syz-executor.0 parked
2196 2196 3 0 80 ffffb703ebd6c5c0 syz-executor.0 parked
4296 4296 3 0 80 ffffb703ec757580 syz-executor.5 parked
2042 2042 3 1 80 ffffb703ec1e9080 syz-executor.5 parked
2197 2197 3 0 80 ffffb703ed1320c0 syz-executor.0 parked
4311 4311 3 0 80 ffffb703ebd6ca00 syz-executor.3 parked
2028 2028 3 0 80 ffffb703eba33740 syz-executor.3 parked
2270 2270 3 1 80 ffffb703eb791680 syz-executor.5 parked
2498 2498 3 0 80 ffffb703ecf7b100 syz-executor.2 parked
2880 2880 3 1 80 ffffb703eb939a80 syz-executor.0 parked
1829 1829 3 0 80 ffffb703ec2002c0 syz-executor.1 parked
1926 1926 3 0 80 ffffb703ecf7b540 syz-executor.0 parked
1943 1943 3 0 80 ffffb703ed723140 syz-executor.3 parked
3013 3013 3 0 80 ffffb703ec25d4c0 syz-executor.1 parked
1785 1785 3 0 80 ffffb703ec9fa280 syz-executor.1 parked
3800 3800 3 0 80 ffffb703eb16cb80 syz-executor.1 parked
2740 2740 3 0 80 ffffb703dc046500 syz-executor.0 parked
3641 3641 3 0 80 ffffb703eb16c740 syz-executor.0 parked
3624 3624 3 1 80 ffffb703ec63cac0 syz-executor.3 parked
1666 1666 3 0 80 ffffb703ebb7a040 syz-executor.3 parked
3399 3399 3 0 80 ffffb703eb972280 syz-executor.0 parked
1422 1422 3 0 80 ffffb703eb791240 syz-executor.2 parked
1421 1421 3 0 80 ffffb703ebc31540 syz-executor.3 parked
1411 1411 3 0 80 ffffb703ec9fab00 syz-executor.0 parked
3131 3131 3 0 80 ffffb703eb85f780 syz-executor.3 parked
1278 1278 3 1 80 ffffb703ec200700 syz-executor.0 parked
2508 2508 3 1 80 ffffb703ec1e94c0 syz-executor.3 parked
3810 3810 3 1 80 ffffb703ec7579c0 syz-executor.2 parked
3557 3557 3 0 80 ffffb703ec63c680 syz-executor.5 parked
3282 3282 3 1 80 ffffb703ec9fa6c0 syz-executor.3 parked
3498 3498 3 0 80 ffffb703ebc960c0 syz-executor.1 parked
1182 1182 3 0 80 ffffb703ebd6c180 syz-executor.0 parked
1836 1836 3 1 80 ffffb703ec25d080 syz-executor.1 parked
1056 1056 3 0 80 ffffb703ebe362c0 syz-executor.2 parked
1171 1171 3 0 80 ffffb703ebb7a8c0 syz-executor.4 parked
3132 3132 3 1 80 ffffb703eba33300 syz-executor.2 parked
3119 3119 3 0 80 ffffb703eb95fbc0 syz-executor.5 parked
3426 3426 3 0 80 ffffb703eba33b80 syz-executor.4 parked
1021 1021 3 0 80 ffffb703eb95f780 syz-executor.2 parked
1014 1014 3 0 80 ffffb703ebe36700 syz-executor.3 parked
1008 1008 3 0 80 ffffb703ebfac8c0 syz-executor.0 parked
3536 3536 3 0 80 ffffb703ec63c240 syz-executor.0 parked
3265 3265 3 0 80 ffffb703ec7ff200 syz-executor.0 parked
2214 2214 3 0 80 ffffb703ec7ff640 syz-executor.0 parked
912 912 3 0 80 ffffb703dc18e980 syz-executor.0 parked
1247 1247 3 1 80 ffffb703ece111c0 syz-executor.0 parked
671 671 3 0 80 ffffb703ec757140 syz-executor.0 parked
644 644 3 0 80 ffffb703ec200b40 syz-executor.0 parked
289 289 3 1 80 ffffb703e8b845c0 syz-executor.0 parked
401 401 3 1 80 ffffb703ebc96500 syz-executor.0 parked
384 384 3 0 80 ffffb703eb9726c0 syz-executor.5 parked
2343 2343 3 1 80 ffffb703eb16c300 syz-executor.0 parked
2369 2369 3 0 80 ffffb703eaae0a40 syz-executor.5 parked
2233 2233 3 1 80 ffffb703ebfac040 syz-executor.2 parked
2139 2139 3 0 80 ffffb703e8b84a00 syz-executor.0 parked
2136 2136 3 1 80 ffffb703ebc31100 syz-executor.2 parked
2377 2377 3 0 80 ffffb703ebc96940 syz-executor.2 parked
2140 2140 3 1 80 ffffb703eb85f340 syz-executor.2 parked
2130 2130 3 1 80 ffffb703eb85fbc0 syz-executor.0 parked
1842 1842 3 1 80 ffffb703e8b84180 syz-executor.0 parked
1997 1997 3 0 80 ffffb703eaae01c0 syz-executor.0 parked
1508 1508 3 0 80 ffffb703eb972b00 syz-executor.1 parked
1639 1639 3 0 80 ffffb703deeaf580 syz-executor.1 parked
582 582 3 0 80 ffffb703eb939640 syz-executor.1 parked
458 458 3 0 80 ffffb703deeaf9c0 syz-executor.1 parked
1241 1241 3 0 80 ffffb703eaae0600 syz-executor.1 parked
1356 1356 3 1 80 ffffb703eb791ac0 syz-executor.3 parked
1069 1069 2 1 40 ffffb703db262b00 syz-executor.5
1099 1099 2 1 40 ffffb703deeaf140 syz-executor.4
1151 1151 2 1 40 ffffb703dc03c340 syz-executor.3
419 419 2 1 40 ffffb703dc372480 syz-executor.1
1076 1076 3 0 80 ffffb703db128680 syz-executor.2 nanoslp
1220 1220 2 1 40 ffffb703db3a3b40 syz-executor.0
1109 1078 3 0 80 ffffb703daef9a80 syz-fuzzer parked
1109 1216 3 1 c0 ffffb703dc18e100 syz-fuzzer parked
1109 1219 3 1 80 ffffb703db128ac0 syz-fuzzer parked
1109 1249 3 1 80 ffffb703dc372040 syz-fuzzer parked
1109 1105 3 0 80 ffffb703db262280 syz-fuzzer parked
1109 1254 2 1 40 ffffb703db3a3700 syz-fuzzer
1109 1067 3 0 c0 ffffb703dca584c0 syz-fuzzer parked
1109 1251 2 1 40 ffffb703db128240 syz-fuzzer
1109 1109 3 0 80 ffffb703dc0460c0 syz-fuzzer parked
1082 1082 3 0 80 ffffb703dc03c780 sshd select
1103 1103 3 1 80 ffffb703dbd10b80 getty nanoslp
1077 1077 3 0 80 ffffb703dc3728c0 getty nanoslp
1075 1075 3 0 80 ffffb703daef9640 getty nanoslp
1072 1072 3 1 c0 ffffb703dac3d5c0 getty ttyraw
942 942 3 0 80 ffffb703dca58080 sshd select
940 940 3 0 80 ffffb703dc18e540 powerd kqueue
689 689 3 0 80 ffffb703daef9200 syslogd kqueue
598 598 3 1 80 ffffb703dca58900 dhcpcd poll
607 607 3 0 80 ffffb703dc03cbc0 dhcpcd poll
602 602 3 0 80 ffffb703db3a32c0 dhcpcd poll
480 480 3 0 80 ffffb703dbd10740 dhcpcd poll
339 339 3 1 80 ffffb703dbd10300 dhcpcd poll
350 350 3 1 80 ffffb703db2626c0 dhcpcd poll
1 1 3 1 80 ffffb703d2a944c0 init wait
0 2010 5 1 600 ffffb703ec7ffa80 (zombie)
0 829 3 0 200 ffffb703dac3da00 physiod physiod
0 160 3 0 200 ffffb703dace7a40 pooldrain pooldrain
0 165 2 1 240 ffffb703dace7600 ioflush
0 164 3 1 200 ffffb703dace71c0 pgdaemon pgdaemon
0 161 3 0 200 ffffb703dac3d180 usb7 usbevt
0 31 3 1 200 ffffb703d7bf89c0 usb6 usbevt
0 63 3 1 200 ffffb703d7bf8580 usb5 usbevt
0 126 3 1 200 ffffb703d7bf8140 usb4 usbevt
0 125 3 0 200 ffffb703d4b7b980 usb3 usbevt
0 124 3 0 200 ffffb703d4b7b540 usb2 usbevt
0 123 3 1 200 ffffb703d4b7b100 usb1 usbevt
0 122 3 0 200 ffffb703d3b06940 usb0 usbevt
0 121 3 0 200 ffffb703d3b06500 usbtask-dr usbtsk
0 120 3 0 200 ffffb703d3b060c0 usbtask-hc usbtsk
0 119 3 1 200 ffffb703d2a94900 npfgc0 npfgcw
0 118 3 1 200 ffffb703d2a94080 rt_free rt_free
0 117 3 1 200 ffffb703d2a8f8c0 unpgc unpgc
0 116 3 1 200 ffffb703d2a8f480 key_timehandler key_timehandler
0 115 3 1 200 ffffb703d2380b00 icmp6_wqinput/1 icmp6_wqinput
0 114 3 0 200 ffffb703d2a002c0 icmp6_wqinput/0 icmp6_wqinput
0 > 113 7 1 200 ffffb703d2a8f040 nd6_timer
0 112 3 1 200 ffffb703d2a32bc0 carp6_wqinput/1 carp6_wqinput
0 111 3 0 200 ffffb703d2a32780 carp6_wqinput/0 carp6_wqinput
0 110 3 1 200 ffffb703d2a32340 carp_wqinput/1 carp_wqinput
0 109 3 0 200 ffffb703d2a6ab80 carp_wqinput/0 carp_wqinput
0 108 3 1 200 ffffb703d2a6a740 icmp_wqinput/1 icmp_wqinput
0 107 3 0 200 ffffb703d2a6a300 icmp_wqinput/0 icmp_wqinput
0 106 3 1 200 ffffb703cff3aac0 rt_timer rt_timer
0 105 2 1 200 ffffb703d2a00b40 vmem_rehash
0 104 3 1 200 ffffb703d2a00700 entbutler entropy
0 30 3 1 200 ffffb703d23806c0 vioif0_txrx/1 vioif0_txrx
0 29 3 0 200 ffffb703d2380280 vioif0_txrx/0 vioif0_txrx
0 27 3 0 200 ffffb703cff3a680 scsibus0 sccomp
0 26 3 0 200 ffffb703cff3a240 pms0 pmsreset
0 25 3 1 200 ffffb703cfe7ca80 xcall/1 xcall
0 24 1 1 200 ffffb703cfe7c640 softser/1
0 23 3 1 200 ffffb703cfe7c200 softclk/1 tstile
0 22 1 1 200 ffffb703cfe47a40 softbio/1
0 21 1 1 200 ffffb703cfe47600 softnet/1
0 20 1 1 201 ffffb703cfe471c0 idle/1
0 19 3 0 200 ffffb704dfd8ba00 lnxpwrwq lnxpwrwq
0 18 3 0 200 ffffb704dfd8b5c0 lnxlngwq lnxlngwq
0 17 3 0 200 ffffb704dfd8b180 lnxsyswq lnxsyswq
0 16 3 0 200 ffffb704dfda49c0 lnxrcugc lnxrcugc
0 15 3 0 200 ffffb704dfda4580 sysmon smtaskq
0 14 3 0 200 ffffb704dfda4140 pmfsuspend pmfsuspend
0 13 3 0 200 ffffb704dfdb5980 pmfevent pmfevent
0 12 3 0 200 ffffb704dfdb5540 sopendfree sopendfr
0 11 3 1 200 ffffb704dfdb5100 iflnkst iflnkst
0 10 3 0 200 ffffb704e0dde940 nfssilly nfssilly
0 9 3 0 200 ffffb704e0dde500 vdrain vdrain
0 8 3 0 200 ffffb704e0dde0c0 modunload mod_unld
0 7 3 0 200 ffffb704e0e15900 xcall/0 xcall
0 6 1 0 200 ffffb704e0e154c0 softser/0
0 5 1 0 200 ffffb704e0e15080 softclk/0
0 4 1 0 200 ffffb704e0e3f8c0 softbio/0
0 3 1 0 200 ffffb704e0e3f480 softnet/0
0 2 1 0 201 ffffb704e0e3f040 idle/0
0 0 2 1 240 ffffffff85ed83c0 swapper
[Locks tracked through LWPs]

****** LWP 2952.2952 (syz-executor.2) @ 0xffffb703ed723580, l_stat=2

*** Locks held:

* Lock 0 (initialized at pmap_ctor)
lock address : 0xffffb703f0460f80 type : sleep/adaptive
initialized : 0xffffffff80f5972e
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffffb703ed723580 last held: 0xffffb703ed723580
last locked* : 0xffffffff80f5bdda unlocked : 0xffffffff80f59464
owner field : 0xffffb703ed723580 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

*** Locks wanted: none

****** LWP 5076.5076 (syz-executor.3) @ 0xffffb703ee967700, l_stat=2

*** Locks held:

* Lock 0 (initialized at pmap_ctor)
lock address : 0xffffb703ed648580 type : sleep/adaptive
initialized : 0xffffffff80f5972e
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffffb703ee967700 last held: 0xffffb703ee967700
last locked* : 0xffffffff80f5932a unlocked : 0xffffffff80f5c4c6
owner field : 0xffffb703ee967700 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

*** Locks wanted: none

****** LWP 2811.2811 (syz-executor.0) @ 0xffffb703ef5d1080, l_stat=2

*** Locks held:

* Lock 0 (initialized at pmap_ctor)
lock address : 0xffffb703f0460d80 type : sleep/adaptive
initialized : 0xffffffff80f5972e
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffffb703ef5d1080 last held: 0xffffb703ef5d1080
last locked* : 0xffffffff80f5bdda unlocked : 0xffffffff80f59464
owner field : 0xffffb703ef5d1080 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

* Lock 1 (initialized at pmap_ctor)
lock address : 0xffffb703f0460d88 type : sleep/adaptive
initialized : 0xffffffff80f5975c
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffffb703ef5d1080 last held: 0xffffb703ef5d1080
last locked* : 0xffffffff80f460af unlocked : 0xffffffff80f4652f
owner/count : 0xffffb703ef5d1080 flags : 0x0000000000000004
Turnstile: no active turnstile for this lock.

*** Locks wanted: none

****** LWP 4926.2949 (syz-executor.5) @ 0xffffb703ee3c5bc0, l_stat=2

*** Locks held:

* Lock 0 (initialized at vcache_alloc)
lock address : 0xffffb703eddf42c0 type : sleep/adaptive
initialized : 0xffffffff835232b8
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 1
relevant lwp : 0xffffb703ee3c5bc0 last held: 0xffffb703ee3c5bc0
last locked* : 0xffffffff8357d8b0 unlocked : 0xffffffff8357d63d
owner/count : 0xffffb703ee3c5bc0 flags : 0x0000000000000004
Turnstile: no active turnstile for this lock.

*** Locks wanted: none

****** LWP 2804.5065 (syz-executor.4) @ 0xffffb703ee3c5780, l_stat=7

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at module_hook_init)
lock address : 0xffffffff862d17c0 type : sleep/adaptive
initialized : 0xffffffff832683f7
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffffb703ee3c5780 last held: 000000000000000000
last locked : 000000000000000000 unlocked*: 000000000000000000
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 607.607 (dhcpcd) @ 0xffffb703dc03cbc0, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at module_hook_init)
lock address : 0xffffffff862d17c0 type : sleep/adaptive
initialized : 0xffffffff832683f7
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffffb703dc03cbc0 last held: 000000000000000000
last locked : 000000000000000000 unlocked*: 000000000000000000
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 602.602 (dhcpcd) @ 0xffffb703db3a32c0, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at module_hook_init)
lock address : 0xffffffff862d17c0 type : sleep/adaptive
initialized : 0xffffffff832683f7
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffffb703db3a32c0 last held: 000000000000000000
last locked : 000000000000000000 unlocked*: 000000000000000000
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 339.339 (dhcpcd) @ 0xffffb703dbd10300, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at module_hook_init)
lock address : 0xffffffff862d17c0 type : sleep/adaptive
initialized : 0xffffffff832683f7
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 0
relevant lwp : 0xffffb703dbd10300 last held: 000000000000000000
last locked : 000000000000000000 unlocked*: 000000000000000000
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 350.350 (dhcpcd) @ 0xffffb703db2626c0, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at module_hook_init)
lock address : 0xffffffff862d17c0 type : sleep/adaptive
initialized : 0xffffffff832683f7
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 0
relevant lwp : 0xffffb703db2626c0 last held: 000000000000000000
last locked : 000000000000000000 unlocked*: 000000000000000000
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 0.23 (softclk/1) @ 0xffffb703cfe7c200, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at module_hook_init)
lock address : 0xffffffff862d17c0 type : sleep/adaptive
initialized : 0xffffffff832683f7
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 0
relevant lwp : 0xffffb703cfe7c200 last held: 000000000000000000
last locked : 000000000000000000 unlocked*: 000000000000000000
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 0.11 (iflnkst) @ 0xffffb704dfdb5100, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at module_hook_init)
lock address : 0xffffffff862d17c0 type : sleep/adaptive
initialized : 0xffffffff832683f7
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 0
relevant lwp : 0xffffb704dfdb5100 last held: 000000000000000000
last locked : 000000000000000000 unlocked*: 000000000000000000
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

[Locks tracked through CPUs]

******* Locks held on cpu0:

* Lock 0 (initialized at main)
lock address : 0xffffffff862d16c0 type : spin
initialized : 0xffffffff83a51fc6
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffffb703ee3c5780 last held: 0xffffb703ee3c5780
last locked* : 0xffffffff8355a7f9 unlocked : 0xffffffff8261486f
curcpu holds : 2 wanted by: 000000000000000000

* Lock 1 (initialized at tty_init)
lock address : 0xffffffff863bdab0 type : spin
initialized : 0xffffffff83436d58
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffffb703ee3c5780 last held: 0xffffb703ee3c5780
last locked* : 0xffffffff82350ed2 unlocked : 0xffffffff8343dec2
owner field : 0x0000000000010600 wait/spin: 0/1

PAGE FLAG PQ UOBJECT UANON
0xffffdb8000007180 0045 00000000 0x0 0x0
0xffffdb8000007200 0045 00000000 0x0 0x0
0xffffdb8000007280 0045 00000000 0x0 0x0
0xffffdb8000007300 0045 00000000 0x0 0x0
0xffffdb8000007380 0045 00000000 0x0 0x0
0xffffdb8000007400 0045 00000000 0x0 0x0
0xffffdb8000007480 0045 00000000 0x0 0x0
0xffffdb8000007500 0045 00000000 0x0 0x0
0xffffdb8000007580 0041 00000000 0x0 0x0
0xffffdb8000007600 0041 00000000 0x0 0x0
0xffffdb8000007680 0041 00000000 0x0 0x0
0xffffdb8000007700 0041 00000000 0x0 0x0
0xffffdb8000007780 0045 00000000 0x0 0x0
0xffffdb8000007800 0045 00000000 0x0 0x0
0xffffdb8000007880 0045 00000000 0x0 0x0
0xffffdb8000007900 0041 00000000 0x0 0x0
0xffffdb8000007980 0041 00000000 0x0 0x0
0xffffdb8000007a00 0041 00000000 0x0 0x0
0xffffdb8000007a80 0041 00000000 0x0 0x0
0xffffdb8000007b00 0041 00000000 0x0 0x0
0xffffdb8000007b80 0041 00000000 0x0 0x0
0xffffdb8000007c00 0041 00000000 0x0 0x0
0xffffdb8000007c80 0041 00000000 0x0 0x0
0xffffdb8000007d00 0041 00000000 0x0 0x0
0xffffdb8000007d80 0041 00000000 0x0 0x0
0xffffdb8000007e00 0041 00000000 0x0 0x0
0xffffdb8000007e80 0041 00000000 0x0 0x0
0xffffdb8000007f00 0041 00000000 0x0 0x0
0xffffdb8000007f80 0041 00000000 0x0 0x0
0xffffdb8000008000 0041 00000000 0x0 0x0
0xffffdb8000008080 0041 00000000 0x0 0x0
0xffffdb8000008100 0041 00000000 0x0 0x0
0xffffdb8000008180 0041 00000000 0x0 0x0
0xffffdb8000008200 0041 00000000 0x0 0x0
0xffffdb8000008280 0041 00000000 0x0 0x0
0xffffdb8000008300 0041 00000000 0x0 0x0
0xffffdb8000008380 0041 00000000 0x0 0x0
0xffffdb8000008400 0041 00000000 0x0 0x0
0xffffdb8000008480 0041 00000000 0x0 0x0
0xffffdb8000008500 0041 00000000 0x0 0x0
0xffffdb8000008580 0041 00000000 0x0 0x0
0xffffdb8000008600 0041 00000000 0x0 0x0
0xffffdb8000008680 0045 00000000 0x0 0x0
0xffffdb8000008700 0041 00000000 0x0 0x0
0xffffdb8000008780 0041 00000000 0x0 0x0
0xffffdb8000008800 0041 00000000 0x0 0x0
0xffffdb8000008880 0041 00000000 0x0 0x0
0xffffdb8000008900 0041 00000000 0x0 0x0
0xffffdb8000008980 0041 00000000 0x0 0x0
0xffffdb8000008a00 0041 00000000 0x0 0x0
0xffffdb8000008a80 0041 00000000 0x0 0x0
0xffffdb8000008b00 0045 00000000 0x0 0x0
0xffffdb8000008b80 0041 00000000 0x0 0x0
0xffffdb8000008c00 0041 00000000 0x0 0x0
0xffffdb8000008c80 0041 00000000 0x0 0x0
0xffffdb8000008d00 0041 00000000 0x0 0x0
0xffffdb8000008d80 0041 00000000 0x0 0x0
0xffffdb8000008e00 0041 00000000 0x0 0x0
0xffffdb8000008e80 0041 00000000 0x0 0x0
0xffffdb8000008f00 0041 00000000 0x0 0x0
0xffffdb8000008f80 0045 00000000 0x0 0x0
0xffffdb8000009000 0041 00000000 0x0 0x0
0xffffdb8000009080 0041 00000000 0x0 0x0
0xffffdb8000009100 0041 00000000 0x0 0x0
0xffffdb8000009180 0041 00000000 0x0 0x0
0xffffdb8000009200 0041 00000000 0x0 0x0
0xffffdb8000009280 0041 00000000 0x0 0x0
0xffffdb8000009300 0041 00000000 0x0 0x0
0xffffdb8000009380 0041 00000000 0x0 0x0
0xffffdb8000009400 0041 00000000 0x0 0x0
0xffffdb8000009480 0041 00000000 0x0 0x0
0xffffdb8000009500 0041 00000000 0x0 0x0
0xffffdb8000009580 0041 00000000 0x0 0x0
0xffffdb8000009600 0041 00000000 0x0 0x0
0xffffdb8000009680 0041 00000000 0x0 0x0
0xffffdb8000009700 0041 00000000 0x0 0x0
0xffffdb8000009780 0041 00000000 0x0 0x0
0xffffdb8000009800 0041 00000000 0x0 0x0
0xffffdb8000009880 0041 00000000 0x0 0x0
0xffffdb8000009900 0041 00000000 0x0 0x0
0xffffdb8000009980 0041 00000000 0x0 0x0
0xffffdb8000009a00 0041 00000000 0x0 0x0
0xffffdb8000009a80 0041 00000000 0x0 0x0
0xffffdb8000009b00 0041 00000000 0x0 0x0
0xffffdb8000009b80 0041 00000000 0x0 0x0
0xffffdb8000009c00 0041 00000000 0x0 0x0
0xffffdb8000009c80 0041 00000000 0x0 0x0
0xffffdb8000009d00 0041 00000000 0x0 0x0
0xffffdb8000009d80 0041 00000000 0x0 0x0
0xffffdb8000009e00 0041 00000000 0x0 0x0
0xffffdb8000009e80 0041 00000000 0x0 0x0
0xffffdb8000009f00 0041 00000000 0x0 0x0
0xffffdb8000009f80 0041 00000000 0x0 0x0
0xffffdb800000a000 0041 00000000 0x0 0x0
0xffffdb800000a080 0041 00000000 0x0 0x0
0xffffdb800000a100 0045 00000000 0x0 0x0
0xffffdb800000a180 0041 00000000 0x0 0x0
0xffffdb800000a200 0041 00000000 0x0 0x0
0xffffdb800000a280 0041 00000000 0x0 0x0
0xffffdb800000a300 0041 00000000 0x0 0x0
0xffffdb800000a380 0041 00000000 0x0 0x0
0xffffdb800000a400 0041 00000000 0x0 0x0
0xffffdb800000a480 0041 00000000 0x0 0x0
0xffffdb800000a500 0041 00000000 0x0 0x0
0xffffdb800000a580 0041 00000000 0x0 0x0
0xffffdb800000a600 0045 00000000 0x0 0x0
0xffffdb800000a680 0041 00000000 0x0 0x0
0xffffdb800000a700 0041 00000000 0x0 0x0
0xffffdb800000a780 0041 00000000 0x0 0x0
0xffffdb800000a800 0041 00000000 0x0 0x0
0xffffdb800000a880 0041 00000000 0x0 0x0
0xffffdb800000a900 0041 00000000 0x0 0x0
0xffffdb800000a980 0045 00000000 0x0 0x0
0xffffdb800000aa00 0045 00000000 0x0 0x0
0xffffdb800000aa80 0041 00000000 0x0 0x0
0xffffdb800000ab00 0041 00000000 0x0 0x0
0xffffdb800000ab80 0041 00000000 0x0 0x0
0xffffdb800000ac00 0041 00000000 0x0 0x0
0xffffdb800000ac80 0041 00000000 0x0 0x0
0xffffdb800000ad00 0041 00000000 0x0 0x0
0xffffdb800000ad80 0045 00000000 0x0 0x0
0xffffdb800000ae00 0045 00000000 0x0 0x0
0xffffdb800000ae80 0041 00000000 0x0 0x0
0xffffdb800000af00 0041 00000000 0x0 0x0
0xffffdb800000af80 0041 00000000 0x0 0x0
0xffffdb800000b000 0041 00000000 0x0 0x0
0xffffdb800000b080 0041 00000000 0x0 0x0
0xffffdb800000b100 0041 00000000 0x0 0x0
0xffffdb800000b180 0045 00000000 0x0 0x0
0xffffdb800000b200 0045 00000000 0x0 0x0
0xffffdb800000b280 0045 00000000 0x0 0x0
0xffffdb800000b300 0041 00000000 0x0 0x0
0xffffdb800000b380 0041 00000000 0x0 0x0
0xffffdb800000b400 0041 00000000 0x0 0x0
0xffffdb800000b480 0041 00000000 0x0 0x0
0xffffdb800000b500 0045 00000000 0x0 0x0
0xffffdb800000b580 0045 00000000 0x0 0x0
0xffffdb800000b600 0045 00000000 0x0 0x0
0xffffdb800000b680 0045 00000000 0x0 0x0
0xffffdb800000b700 0041 00000000 0x0 0x0
0xffffdb800000b780 0041 00000000 0x0 0x0
0xffffdb800000b800 0045 00000000 0x0 0x0
0xffffdb800000b880 0041 00000000 0x0 0x0
0xffffdb800000b900 0045 00000000 0x0 0x0
0xffffdb800000b980 0045 00000000 0x0 0x0
0xffffdb800000ba00 0041 00000000 0x0 0x0
0xffffdb800000ba80 0045 00000000 0x0 0x0
0xffffdb800000bb00 0045 00000000 0x0 0x0
0xffffdb800000bb80 0041 00000000 0x0 0x0
0xffffdb800000bc00 0045 00000000 0x0 0x0
0xffffdb800000bc80 0045 00000000 0x0 0x0
0xffffdb800000bd00 0045 00000000 0x0 0x0
0xffffdb800000bd80 0041 00000000 0x0 0x0
0xffffdb800000be00 0041 00000000 0x0 0x0
0xffffdb800000be80 0045 00000000 0x0 0x0
0xffffdb800000bf00 0045 00000000 0x0 0x0
0xffffdb800000bf80 0045 00000000 0x0 0x0
0xffffdb800000c000 0045 00000000 0x0 0x0
0xffffdb800000c080 0045 00000000 0x0 0x0
0xffffdb800000c100 0045 00000000 0x0 0x0
0xffffdb800000c180 0041 00000000 0x0 0x0
0xffffdb800000c200 0041 00000000 0x0 0x0
0xffffdb800000c280 0041 00000000 0x0 0x0
0xffffdb800000c300 0045 00000000 0x0 0x0
0xffffdb800000c380 0045 00000000 0x0 0x0
0xffffdb800000c400 0045 00000000 0x0 0x0
0xffffdb800000c480 0045 00000000 0x0 0x0
0xffffdb800000c500 0045 00000000 0x0 0x0
0xffffdb800000c580 0041 00000000 0x0 0x0
0xffffdb800000c600 0041 00000000 0x0 0x0
0xffffdb800000c680 0041 00000000 0x0 0x0
0xffffdb800000c700 0045 00000000 0x0 0x0
0xffffdb800000c780 0045 00000000 0x0 0x0
0xffffdb800000c800 0045 00000000 0x0 0x0
0xffffdb800000c880 0045 00000000 0x0 0x0
0xffffdb800000c900 0041 00000000 0x0 0x0
0xffffdb800000c980 0041 00000000 0x0 0x0
0xffffdb800000ca00 0041 00000000 0x0 0x0
0xffffdb800000ca80 0041 00000000 0x0 0x0
0xffffdb800000cb00 0041 00000000 0x0 0x0
0xffffdb800000cb80 0045 00000000 0x0 0x0
0xffffdb800000cc00 0041 00000000 0x0 0x0
0xffffdb800000cc80 0045 00000000 0x0 0x0
0xffffdb800000cd00 0041 00000000 0x0 0x0
0xffffdb800000cd80 0041 00000000 0x0 0x0
0xffffdb800000ce00 0045 00000000 0x0 0x0
0xffffdb800000ce80 0045 00000000 0x0 0x0
0xffffdb800000cf00 0041 00000000 0x0 0x0
0xffffdb800000cf80 0041 00000000 0x0 0x0
0xffffdb800000d000 0041 00000000 0x0 0x0
0xffffdb800000d080 0041 00000000 0x0 0x0
0xffffdb800000d100 0041 00000000 0x0 0x0
0xffffdb800000d180 0045 00000000 0x0 0x0
0xffffdb800000d200 0041 00000000 0x0 0x0
0xffffdb800000d280 0041 00000000 0x0 0x0
0xffffdb800000d300 0041 00000000 0x0 0x0
0xffffdb800000d380 0041 00000000 0x0 0x0
0xffffdb800000d400 0041 00000000 0x0 0x0
0xffffdb800000d480 0041 00000000 0x0 0x0
0xffffdb800000d500 0041 00000000 0x0 0x0
0xffffdb800000d580 0041 00000000 0x0 0x0
0xffffdb800000d600 0041 00000000 0x0 0x0
0xffffdb800000d680 0041 00000000 0x0 0x0
0xffffdb800000d700 0041 00000000 0x0 0x0
0xffffdb800000d780 0041 00000000 0x0 0x0
0xffffdb800000d800 0041 00000000 0x0 0x0
0xffffdb800000d880 0041 00000000 0x0 0x0
0xffffdb800000d900 0041 00000000 0x0 0x0
0xffffdb800000d980 0041 00000000 0x0 0x0
0xffffdb800000da00 0041 00000000 0x0 0x0
0xffffdb800000da80 0045 00000000 0x0 0x0
0xffffdb800000db00 0045 00000000 0x0 0x0
0xffffdb800000db80 0041 00000000 0x0 0x0
0xffffdb800000dc00 0045 00000000 0x0 0x0
0xffffdb800000dc80 0041 00000000 0x0 0x0
0xffffdb800000dd00 0045 00000000 0x0 0x0
0xffffdb800000dd80 0041 00000000 0x0 0x0
0xffffdb800000de00 0045 00000000 0x0 0x0
0xffffdb800000de80 0041 00000000 0x0 0x0
0xffffdb800000df00 0045 00000000 0x0 0x0
0xffffdb800000df80 0045 00000000 0x0 0x0
0xffffdb800000e000 0045 00000000 0x0 0x0
0xffffdb800000e080 0045 00000000 0x0 0x0
0xffffdb800000e100 0045 00000000 0x0 0x0
0xffffdb800000e180 0041 00000000 0x0 0x0
0xffffdb800000e200 0041 00000000 0x0 0x0
0xffffdb800000e280 0045 00000000 0x0 0x0
0xffffdb800000e300 0045 00000000 0x0 0x0
0xffffdb800000e380 0045 00000000 0x0 0x0
0xffffdb800000e400 0045 00000000 0x0 0x0
0xffffdb800000e480 0045 00000000 0x0 0x0
0xffffdb800000e500 0041 00000000 0x0 0x0
0xffffdb800000e580 0041 00000000 0x0 0x0
0xffffdb800000e600 0041 00000000 0x0 0x0
0xffffdb800000e680 0041 00000000 0x0 0x0
0xffffdb800000e700 0041 00000000 0x0 0x0
0xffffdb800000e780 0045 00000000 0x0 0x0
0xffffdb800000e800 0041 00000000 0x0 0x0
0xffffdb800000e880 0041 00000000 0x0 0x0
0xffffdb800000e900 0041 00000000 0x0 0x0
0xffffdb800000e980 0041 00000000 0x0 0x0
0xffffdb800000ea00 0041 00000000 0x0 0x0
0xffffdb800000ea80 0041 00000000 0x0 0x0
0xffffdb800000eb00 0041 00000000 0x0 0x0
0xffffdb800000eb80 0041 00000000 0x0 0x0
0xffffdb800000ec00 0045 00000000 0x0 0x0
0xffffdb800000ec80 0041 00000000 0x0 0x0
0xffffdb800000ed00 0041 00000000 0x0 0x0
0xffffdb800000ed80 0041 00000000 0x0 0x0
0xffffdb800000ee00 0041 00000000 0x0 0x0
0xffffdb800000ee80 0041 00000000 0x0 0x0
0xffffdb800000ef00 0041 00000000 0x0 0x0
0xffffdb800000ef80 0045 00000000 0x0 0x0
0xffffdb800000f000 0041 00000000 0x0 0x0
0xffffdb800000f080 0045 00000000 0x0 0x0
0xffffdb800000f100 0041 00000000 0x0 0x0
0xffffdb800000f180 0041 00000000 0x0 0x0
0xffffdb800000f200 0045 00000000 0x0 0x0
0xffffdb800000f280 0041 00000000 0x0 0x0
0xffffdb800000f300 0041 00000000 0x0 0x0
0xffffdb800000f380 0041 00000000 0x0 0x0
0xffffdb800000f400 0041 00000000 0x0 0x0
0xffffdb800000f480 0041 00000000 0x0 0x0
0xffffdb800000f500 0041 00000000 0x0 0x0
0xffffdb800000f580 0045 00000000 0x0 0x0
0xffffdb800000f600 0041 00000000 0x0 0x0
0xffffdb800000f680 0041 00000000 0x0 0x0
0xffffdb800000f700 0041 00000000 0x0 0x0
0xffffdb800000f780 0041 00000000 0x0 0x0
0xffffdb800000f800 0041 00000000 0x0 0x0
0xffffdb800000f880 0041 00000000 0x0 0x0
0xffffdb800000f900 0041 00000000 0x0 0x0
0xffffdb800000f980 0041 00000000 0x0 0x0
0xffffdb800000fa00 0041 00000000 0x0 0x0
0xffffdb800000fa80 0041 00000000 0x0 0x0
0xffffdb800000fb00 0041 00000000 0x0 0x0
0xffffdb800000fb80 0041 00000000 0x0 0x0
0xffffdb800000fc00 0041 00000000 0x0 0x0
0xffffdb800000fc80 0041 00000000 0x0 0x0
0xffffdb800000fd00 0041 00000000 0x0 0x0
0xffffdb800000fd80 0041 00000000 0x0 0x0
0xffffdb800000fe00 0041 00000000 0x0 0x0
0xffffdb800000fe80 0041 00000000 0x0 0x0
0xffffdb800000ff00 0041 00000000 0x0 0x0
0xffffdb800000ff80 0041 00000000 0x0 0x0
0xffffdb8000010000 0045 00000000 0x0 0x0
0xffffdb8000010080 0041 00000000 0x0 0x0
0xffffdb8000010100 0041 00000000 0x0 0x0
0xffffdb8000010180 0041 00000000 0x0 0x0
0xffffdb8000010200 0041 00000000 0x0 0x0
0xffffdb8000010280 0045 00000000 0x0 0x0
0xffffdb8000010300 0041 00000000 0x0 0x0
0xffffdb8000010380 0045 00000000 0x0 0x0
0xffffdb8000010400 0041 00000000 0x0 0x0
0xffffdb8000010480 0041 00000000 0x0 0x0
0xffffdb8000010500 0045 00000000 0x0 0x0
0xffffdb8000010580 0041 00000000 0x0 0x0
0xffffdb8000010600 0041 00000000 0x0 0x0
0xffffdb8000010680 0041 00000000 0x0 0x0
0xffffdb8000010700 0045 00000000 0x0 0x0
0xffffdb8000010780 0041 00000000 0x0 0x0
0xffffdb8000010800 0041 00000000 0x0 0x0
0xffffdb8000010880 0045 00000000 0x0 0x0
0xffffdb8000010900 0041 00000000 0x0 0x0
0xffffdb8000010980 0041 00000000 0x0 0x0
0xffffdb8000010a00 0041 00000000 0x0 0x0
0xffffdb8000010a80 0041 00000000 0x0 0x0
0xffffdb8000010b00 0041 00000000 0x0 0x0
0xffffdb8000010b80 0041 00000000 0x0 0x0
0xffffdb8000010c00 0041 00000000 0x0 0x0
0xffffdb8000010c80 0041 00000000 0x0 0x0
0xffffdb8000010d00 0041 00000000 0x0 0x0
0xffffdb8000010d80 0041 00000000 0x0 0x0
0xffffdb8000010e00 0041 00000000 0x0 0x0
0xffffdb8000010e80 0041 00000000 0x0 0x0
0xffffdb8000010f00 0041 00000000 0x0 0x0
0xffffdb8000010f80 0041 00000000 0x0 0x0
0xffffdb8000011000 0001 00000000 0x0 0x0
0xffffdb8000011080 0001 00000000 0x0 0x0
0xffffdb8000011100 0001 00000000 0x0 0x0
0xffffdb8000011180 0001 00000000 0x0 0x0
0xffffdb8000011200 0001 00000000 0x0 0x0
0xffffdb8000011280 0001 00000000 0x0 0x0
0xffffdb8000011300 0001 00000000 0x0 0x0
0xffffdb8000011380 0001 00000000 0x0 0x0
0xffffdb8000011400 0001 00000000 0x0 0x0
0xffffdb8000011480 0001 00000000 0x0 0x0
0xffffdb8000011500 0001 00000000 0x0 0x0
0xffffdb8000011580 0001 00000000 0x0 0x0
0xffffdb8000011600 0001 00000000 0x0 0x0
0xffffdb8000011680 0001 00000000 0x0 0x0
0xffffdb8000011700 0001 00000000 0x0 0x0
0xffffdb8000011780 0001 00000000 0x0 0x0
0xffffdb8000011800 0001 00000000 0x0 0x0
0xffffdb8000011880 0001 00000000 0x0 0x0
0xffffdb8000011900 0001 00000000 0x0 0x0
0xffffdb8000011980 0001 00000000 0x0 0x0
0xffffdb8000011a00 0001 00000000 0x0 0x0
0xffffdb8000011a80 0001 00000000 0x0 0x0
0xffffdb8000011b00 0001 00000000 0x0 0x0
0xffffdb8000011b80 0001 00000000 0x0 0x0
0xffffdb8000011c00 0001 00000000 0x0 0x0
0xffffdb8000011c80 0001 00000000 0x0 0x0
0xffffdb8000011d00 0001 00000000 0x0 0x0
0xffffdb8000011d80 0001 00000000 0x0 0x0
0xffffdb8000011e00 0001 00000000 0x0 0x0
0xffffdb8000011e80 0001 00000000 0x0 0x0
0xffffdb8000011f00 0001 00000000 0x0 0x0
0xffffdb8000011f80 0001 00000000 0x0 0x0
0xffffdb8000012000 0001 00000000 0x0 0x0
0xffffdb8000012080 0001 00000000 0x0 0x0
0xffffdb8000012100 0001 00000000 0x0 0x0
0xffffdb8000012180 0001 00000000 0x0 0x0
0xffffdb8000012200 0001 00000000 0x0 0x0
0xffffdb8000012280 0001 00000000 0x0 0x0
0xffffdb8000012300 0001 00000000 0x0 0x0
0xffffdb8000012380 0001 00000000 0x0 0x0
0xffffdb8000012400 0001 00000000 0x0 0x0
0xffffdb8000012480 0001 00000000 0x0 0x0
0xffffdb8000012500 0001 00000000 0x0 0x0
0xffffdb8000012580 0001 00000000 0x0 0x0
0xffffdb8000012600 0001 00000000 0x0 0x0
0xffffdb8000012680 0001 00000000 0x0 0x0
0xffffdb8000012700 0001 00000000 0x0 0x0
0xffffdb8000012780 0001 00000000 0x0 0x0
0xffffdb8000012800 0001 00000000 0x0 0x0
0xffffdb8000012880 0001 00000000 0x0 0x0
0xffffdb8000012900 0001 00000000 0x0 0x0
0xffffdb8000012980 0001 00000000 0x0 0x0
0xffffdb8000012a00 0001 00000000 0x0 0x0
0xffffdb8000012a80 0001 00000000 0x0 0x0
0xffffdb8000012b00 0041 00000000 0x0 0x0
0xffffdb8000012b80 0045 00000000 0x0 0x0
0xffffdb8000012c00 0041 00000000 0x0 0x0
0xffffdb8000012c80 0041 00000000 0x0 0x0
0xffffdb8000012d00 0041 00000000 0x0 0x0
0xffffdb8000012d80 0041 00000000 0x0 0x0
0xffffdb8000012e00 0041 00000000 0x0 0x0
0xffffdb8000012e80 0041 00000000 0x0 0x0
0xffffdb8000012f00 0041 00000000 0x0 0x0
0xffffdb8000012f80 0041 00000000 0x0 0x0
0xffffdb8000013000 0041 00000000 0x0 0x0
0xffffdb8000013080 0041 00000000 0x0 0x0
0xffffdb8000013100 0041 00000000 0x0 0x0
0xffffdb8000013180 0041 00000000 0x0 0x0
0xffffdb8000013200 0041 00000000 0x0 0x0
0xffffdb8000013280 0041 00000000 0x0 0x0
0xffffdb8000013300 0041 00000000 0x0 0x0
0xffffdb8000013380 0041 00000000 0x0 0x0
0xffffdb8000013400 0041 00000000 0x0 0x0
0xffffdb8000013480 0041 00000000 0x0 0x0
0xffffdb8000013500 0041 00000000 0x0 0x0
0xffffdb8000013580 0041 00000000 0x0 0x0
0xffffdb8000013600 0041 00000000 0x0 0x0
0xffffdb8000013680 0041 00000000 0x0 0x0
0xffffdb8000013700 0041 00000000 0x0 0x0
0xffffdb8000013780 0041 00000000 0x0 0x0
0xffffdb8000013800 0041 00000000 0x0 0x0
0xffffdb8000013880 0041 00000000 0x0 0x0
0xffffdb8000013900 0041 00000000 0x0 0x0
0xffffdb8000013980 0041 00000000 0x0 0x0
0xffffdb8000013a00 0041 00000000 0x0 0x0
0xffffdb8000013a80 0041 00000000 0x0 0x0
0xffffdb8000013b00 0041 00000000 0x0 0x0
0xffffdb8000013b80 0041 00000000 0x0 0x0
0xffffdb8000013c00 0041 00000000 0x0 0x0
0xffffdb8000013c80 0041 00000000 0x0 0x0
0xffffdb8000013d00 0041 00000000 0x0 0x0
0xffffdb8000013d80 0041 00000000 0x0 0x0
0xffffdb8000013e00 0041 00000000 0x0 0x0
0xffffdb8000013e80 0041 00000000 0x0 0x0
0xffffdb8000013f00 0041 00000000 0x0 0x0
0xffffdb8000013f80 0041 00000000 0x0 0x0
0xffffdb8000014000 0041 00000000 0x0 0x0
0xffffdb8000014080 0041 00000000 0x0 0x0
0xffffdb8000014100 0041 00000000 0x0 0x0
0xffffdb8000014180 0041 00000000 0x0 0x0
0xffffdb8000014200 0041 00000000 0x0 0x0
0xffffdb8000014280 0041 00000000 0x0 0x0
0xffffdb8000014300 0041 00000000 0x0 0x0
0xffffdb8000014380 0041 00000000 0x0 0x0
0xffffdb8000014400 0001 00000000 0x0 0x0
0xffffdb8000014480 0001 00000000 0x0 0x0
0xffffdb8000014500 0001 00000000 0x0 0x0
0xffffdb8000014580 0001 00000000 0x0 0x0
0xffffdb8000014600 0001 00000000 0x0 0x0
0xffffdb8000014680 0001 00000000 0x0 0x0
0xffffdb8000014700 0001 00000000 0x0 0x0
0xffffdb8000014780 0001 00000000 0x0 0x0
0xffffdb8000014800 0001 00000000 0x0 0x0
0xffffdb8000014880 0001 00000000 0x0 0x0
0xffffdb8000014900 0001 00000000 0x0 0x0
0xffffdb8000014980 0001 00000000 0x0 0x0
0xffffdb8000014a00 0001 00000000 0x0 0x0
0xffffdb8000014a80 0001 00000000 0x0 0x0
0xffffdb8000014b00 0001 00000000 0x0 0x0
0xffffdb8000014b80 0001 00000000 0x0 0x0
0xffffdb8000014c00 0001 00000000 0x0 0x0
0xffffdb8000014c80 0001 00000000 0x0 0x0
0xffffdb8000014d00 0001 00000000 0x0 0x0
0xffffdb8000014d80 0001 00000000 0x0 0x0
0xffffdb8000014e00 0001 00000000 0x0 0x0
0xffffdb8000014e80 0001 00000000 0x0 0x0
0xffffdb8000014f00 0001 00000000 0x0 0x0
0xffffdb8000014f80 0001 00000000 0x0 0x0
0xffffdb8000015000 0001 00000000 0x0 0x0
0xffffdb8000015080 0001 00000000 0x0 0x0
0xffffdb8000015100 0001 00000000 0x0 0x0
0xffffdb8000015180 0001 00000000 0x0 0x0
0xffffdb8000015200 0001 00000000 0x0 0x0
0xffffdb8000015280 0001 00000000 0x0 0x0
0xffffdb8000015300 0001 00000000 0x0 0x0
0xffffdb8000015380 0001 00000000 0x0 0x0
0xffffdb8000015400 0001 00000000 0x0 0x0
0xffffdb8000015480 0001 00000000 0x0 0x0
0xffffdb8000015500 0001 00000000 0x0 0x0
0xffffdb8000015580 0001 00000000 0x0 0x0
0xffffdb8000015600 0001 00000000 0x0 0x0
0xffffdb8000015680 0001 00000000 0x0 0x0
0xffffdb8000015700 0001 00000000 0x0 0x0
0xffffdb8000015780 0001 00000000 0x0 0x0
0xffffdb8000015800 0001 00000000 0x0 0x0
0xffffdb8000015880 0001 00000000 0x0 0x0
0xffffdb8000015900 0001 00000000 0x0 0x0
0xffffdb8000015980 0001 00000000 0x0 0x0
0xffffdb8000015a00 0001 00000000 0x0 0x0
0xffffdb8000015a80 0001 00000000 0x0 0x0
0xffffdb8000015b00 0001 00000000 0x0 0x0
0xffffdb8000015b80 0001 00000000 0x0 0x0
0xffffdb8000015c00 0001 00000000 0x0 0x0
0xffffdb8000015c80 0001 00000000 0x0 0x0
0xffffdb8000015d00 0001 00000000 0x0 0x0
0xffffdb8000015d80 0001 00000000 0x0 0x0
0xffffdb8000015e00 0001 00000000 0x0 0x0
0xffffdb8000015e80 0001 00000000 0x0 0x0
0xffffdb8000015f00 0041 00000000 0x0 0x0
0xffffdb8000015f80 0041 00000000 0x0 0x0
0xffffdb8000016000 0041 00000000 0x0 0x0
0xffffdb8000016080 0041 00000000 0x0 0x0
0xffffdb8000016100 0041 00000000 0x0 0x0
0xffffdb8000016180 0041 00000000 0x0 0x0
0xffffdb8000016200 0041 00000000 0x0 0x0
0xffffdb8000016280 0041 00000000 0x0 0x0
0xffffdb8000016300 0041 00000000 0x0 0x0
0xffffdb8000016380 0041 00000000 0x0 0x0
0xffffdb8000016400 0041 00000000 0x0 0x0
0xffffdb8000016480 0041 00000000 0x0 0x0
0xffffdb8000016500 0041 00000000 0x0 0x0
0xffffdb8000016580 0041 00000000 0x0 0x0
0xffffdb8000016600 0041 00000000 0x0 0x0
0xffffdb8000016680 0041 00000000 0x0 0x0
0xffffdb8000016700 0041 00000000 0x0 0x0
0xffffdb8000016780 0041 00000000 0x0 0x0
0xffffdb8000016800 0041 00000000 0x0 0x0
0xffffdb8000016880 0041 00000000 0x0 0x0
0xffffdb8000016900 0041 00000000 0x0 0x0
0xffffdb8000016980 0041 00000000 0x0 0x0
0xffffdb8000016a00 0041 00000000 0x0 0x0
0xffffdb8000016a80 0041 00000000 0x0 0x0
0xffffdb8000016b00 0041 00000000 0x0 0x0
0xffffdb8000016b80 0041 00000000 0x0 0x0
0xffffdb8000016c00 0041 00000000 0x0 0x0
0xffffdb8000016c80 0041 00000000 0x0 0x0

---
This report is generated by a bot. It may contain errors.
See https://goo.gl/tpsmEJ for more information about syzbot.
syzbot engineers can be reached at syzk...@googlegroups.com.

syzbot will keep track of this issue. See:
https://goo.gl/tpsmEJ#status for how to communicate with syzbot.

syzbot

unread,

Sep 21, 2020, 7:48:24 PM9/21/20

to syzkaller-...@googlegroups.com

syzbot has found a reproducer for the following issue on:

HEAD commit: a1511216 ld.so(1): Upgrade r_debug to the protocol version..
git tree: netbsd

console output: https://syzkaller.appspot.com/x/log.txt?x=173df481900000

kernel config: https://syzkaller.appspot.com/x/.config?x=1420f906d33d9f1f
dashboard link: https://syzkaller.appspot.com/bug?extid=39cd551a05298b222756
compiler: g++ (Ubuntu 5.4.0-6ubuntu1~16.04.12) 5.4.0 20160609

syz repro: https://syzkaller.appspot.com/x/repro.syz?x=122adf53900000

IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+39cd55...@syzkaller.appspotmail.com

[ 74.6127409] panic: UBSan: Undefined Behavior in /syzkaller/managers/netbsd-kubsan/kernel/sys/compat/common/tty_43.c:230:48, left shift of 1768304430 by 16 places cannot be represented in type 'int'

[ 74.6327164] cpu1: Begin traceback...
[ 74.6627173] vpanic() at netbsd:vpanic+0x2cd sys/kern/subr_prf.c:290
[ 74.7427185] isAlreadyReported() at netbsd:isAlreadyReported
[ 74.8227178] HandleShiftOutOfBounds() at netbsd:HandleShiftOutOfBounds+0x24e sys/../common/lib/libc/misc/ubsan.c:479
[ 74.9027265] compat_43_ttioctl.cold() at netbsd:compat_43_ttioctl.cold+0x37
[ 74.9827166] ttioctl() at netbsd:ttioctl+0x83c sys/kern/tty.c:1422
[ 75.0527175] comioctl() at netbsd:comioctl+0x1a3 sys/dev/ic/com.c:1168
[ 75.1227121] cdev_ioctl() at netbsd:cdev_ioctl+0x15f sys/kern/subr_devsw.c:935
[ 75.2027169] spec_ioctl() at netbsd:spec_ioctl+0x2d3 sys/miscfs/specfs/spec_vnops.c:902
[ 75.2727178] VOP_IOCTL() at netbsd:VOP_IOCTL+0x142 sys/kern/vnode_if.c:646
[ 75.3527165] vn_ioctl() at netbsd:vn_ioctl+0x197 sys/kern/vfs_vnops.c:778
[ 75.4327094] sys_ioctl() at netbsd:sys_ioctl+0xd8b sys/kern/sys_generic.c:671
[ 75.5127080] sys___syscall() at netbsd:sys___syscall+0x1cf sy_call sys/sys/syscallvar.h:66 [inline]
[ 75.5127080] sys___syscall() at netbsd:sys___syscall+0x1cf sys/kern/sys_syscall.c:77
[ 75.5927141] syscall() at netbsd:syscall+0x2d5 sy_call sys/sys/syscallvar.h:65 [inline]
[ 75.5927141] syscall() at netbsd:syscall+0x2d5 sy_invoke sys/sys/syscallvar.h:94 [inline]
[ 75.5927141] syscall() at netbsd:syscall+0x2d5 sys/arch/x86/x86/syscall.c:138
[ 75.6027086] --- syscall (number 198) ---
[ 75.6327095] netbsd:syscall+0x2d5:
[ 75.6327095] cpu1: End traceback...
[ 75.6427046] fatal breakpoint trap in supervisor mode
[ 75.6427046] trap type 1 code 0 rip 0xffffffff80221a85 cs 0x8 rflags 0x246 cr2 0x79674876f410 ilevel 0x8 rsp 0xffffb300bf42c330
[ 75.6527055] curlwp 0xffffa3bafa1a3ac0 pid 710.1473 lowest kstack 0xffffb300bf4282c0
Stopped in pid 710.1473 (syz-executor.5) at netbsd:breakpoint+0x5: leave

?
breakpoint() at netbsd:breakpoint+0x5
db_panic() at netbsd:db_panic+0xec sys/ddb/db_panic.c:67
vpanic() at netbsd:vpanic+0x2cd sys/kern/subr_prf.c:290
isAlreadyReported() at netbsd:isAlreadyReported
HandleShiftOutOfBounds() at netbsd:HandleShiftOutOfBounds+0x24e sys/../common/lib/libc/misc/ubsan.c:479
compat_43_ttioctl.cold() at netbsd:compat_43_ttioctl.cold+0x37
ttioctl() at netbsd:ttioctl+0x83c sys/kern/tty.c:1422
comioctl() at netbsd:comioctl+0x1a3 sys/dev/ic/com.c:1168
cdev_ioctl() at netbsd:cdev_ioctl+0x15f sys/kern/subr_devsw.c:935
spec_ioctl() at netbsd:spec_ioctl+0x2d3 sys/miscfs/specfs/spec_vnops.c:902

VOP_IOCTL() at netbsd:VOP_IOCTL+0x142 sys/kern/vnode_if.c:646

vn_ioctl() at netbsd:vn_ioctl+0x197 sys/kern/vfs_vnops.c:778
sys_ioctl() at netbsd:sys_ioctl+0xd8b sys/kern/sys_generic.c:671
sys___syscall() at netbsd:sys___syscall+0x1cf sy_call sys/sys/syscallvar.h:66 [inline]
sys___syscall() at netbsd:sys___syscall+0x1cf sys/kern/sys_syscall.c:77
syscall() at netbsd:syscall+0x2d5 sy_call sys/sys/syscallvar.h:65 [inline]
syscall() at netbsd:syscall+0x2d5 sy_invoke sys/sys/syscallvar.h:94 [inline]
syscall() at netbsd:syscall+0x2d5 sys/arch/x86/x86/syscall.c:138
--- syscall (number 198) ---
netbsd:syscall+0x2d5:
Panic string: UBSan: Undefined Behavior in /syzkaller/managers/netbsd-kubsan/kernel/sys/compat/common/tty_43.c:230:48, left shift of 1768304430 by 16 places cannot be represented in type 'int'

PID LID S CPU FLAGS STRUCT LWP * NAME WAIT

1629 1703 3 1 0 ffffa3bafa1a3680 syz-executor.0 biowait
1629 >1629 7 0 10000000 ffffa3baf7ceebc0 syz-executor.0
1374 1374 2 0 0 ffffa3bafa091600 syz-executor.4
1500 1500 2 0 0 ffffa3baf9c2e280 syz-executor.3
710 1616 3 1 80 ffffa3bafa0911c0 syz-executor.5 parked
710 >1473 7 1 0 ffffa3bafa1a3ac0 syz-executor.5
710 710 3 1 10000080 ffffa3bafa1a3240 syz-executor.5 nanoslp
1364 1364 3 0 10040000 ffffa3bafa091a40 syz-executor.1 ttycls
1448 1448 3 1 10040000 ffffa3baf6ca7ac0 syz-executor.2 ttycls
1151 1151 3 1 80 ffffa3baf98d75c0 syz-executor.2 nanoslp
1084 1084 3 0 80 ffffa3baf7e754c0 syz-executor.5 nanoslp
1075 1075 3 1 80 ffffa3baf7f0e480 syz-executor.1 nanoslp
1083 1083 3 0 80 ffffa3baf7cee340 syz-executor.3 nanoslp
1072 1072 3 1 80 ffffa3baf6f64280 syz-executor.0 nanoslp
418 418 3 0 80 ffffa3baf7e75900 syz-executor.4 nanoslp
1249 1081 3 1 80 ffffa3baf74790c0 syz-execprog parked
1249 1082 3 1 80 ffffa3baf7479500 syz-execprog parked
1249 946 3 1 80 ffffa3baf8ba3980 syz-execprog parked
1249 1100 3 1 80 ffffa3baf98d7180 syz-execprog kqueue
1249 1078 3 1 80 ffffa3baf90ba9c0 syz-execprog parked
1249 1077 3 1 80 ffffa3baf6b18a80 syz-execprog parked
1249 1067 3 1 80 ffffa3baf6ca7240 syz-execprog parked
1249 1070 3 0 80 ffffa3baf7479940 syz-execprog parked
1249 971 3 0 80 ffffa3baf90ba580 syz-execprog parked
1249 1249 3 1 80 ffffa3baf6b18200 syz-execprog parked
1068 1068 3 0 80 ffffa3baf90ba140 sshd select
996 996 3 0 80 ffffa3baf8ba3540 getty nanoslp
1092 1092 3 1 80 ffffa3baf6eec740 getty nanoslp
1097 1097 3 0 80 ffffa3baf6b18640 getty nanoslp
1091 1091 3 1 c0 ffffa3baf684d5c0 getty ttyraw
948 948 3 1 80 ffffa3baf8ba3100 sshd select
979 979 3 0 80 ffffa3baf7cee780 powerd kqueue
869 869 3 0 80 ffffa3baf6f64b00 syslogd kqueue
593 593 3 0 80 ffffa3baf6eecb80 dhcpcd poll
591 591 3 1 80 ffffa3baf6ca7680 dhcpcd poll
590 590 3 1 80 ffffa3baf74b8700 dhcpcd poll
426 426 3 0 80 ffffa3baf74b82c0 dhcpcd poll
347 347 3 0 80 ffffa3baf6eec300 dhcpcd poll
346 346 3 0 80 ffffa3baf74b8b40 dhcpcd poll
345 345 3 0 80 ffffa3baf6f646c0 dhcpcd poll
1 1 3 0 80 ffffa3baee6b1940 init wait
0 839 3 0 200 ffffa3baf684da00 physiod physiod
0 165 3 0 200 ffffa3baf68dfa40 pooldrain pooldrain
0 164 3 0 200 ffffa3baf68df600 ioflush syncer
0 163 3 1 200 ffffa3baf68df1c0 pgdaemon pgdaemon
0 160 3 0 200 ffffa3baf684d180 usb7 usbevt
0 31 3 0 200 ffffa3baf37f09c0 usb6 usbevt
0 63 3 0 200 ffffa3baf37f0580 usb5 usbevt
0 126 3 0 200 ffffa3baf37f0140 usb4 usbevt
0 125 3 0 200 ffffa3baee71b980 usb3 usbevt
0 124 3 0 200 ffffa3baee71b540 usb2 usbevt
0 123 3 0 200 ffffa3baedf80b00 usb1 usbevt
0 122 3 1 200 ffffa3baee6002c0 usb0 usbevt
0 121 3 1 200 ffffa3baee600700 usbtask-dr usbtsk
0 120 3 0 200 ffffa3baebb3aac0 usbtask-hc usbtsk
0 119 3 1 200 ffffa3baee71b100 npfgc0 npfgcw
0 118 3 1 200 ffffa3baee6b1500 rt_free rt_free
0 117 3 1 200 ffffa3baee6b10c0 unpgc unpgc
0 116 3 0 200 ffffa3baee6bc900 key_timehandler key_timehandler
0 115 3 1 200 ffffa3baee6bc4c0 icmp6_wqinput/1 icmp6_wqinput
0 114 3 0 200 ffffa3baee6bc080 icmp6_wqinput/0 icmp6_wqinput
0 113 3 0 200 ffffa3baee6878c0 nd6_timer nd6_timer
0 112 3 1 200 ffffa3baee687480 carp6_wqinput/1 carp6_wqinput
0 111 3 0 200 ffffa3baee687040 carp6_wqinput/0 carp6_wqinput
0 110 3 1 200 ffffa3baee662bc0 carp_wqinput/1 carp_wqinput
0 109 3 0 200 ffffa3baee662780 carp_wqinput/0 carp_wqinput
0 108 3 1 200 ffffa3baee662340 icmp_wqinput/1 icmp_wqinput
0 107 3 0 200 ffffa3baee619b80 icmp_wqinput/0 icmp_wqinput
0 106 3 0 200 ffffa3baee619740 rt_timer rt_timer
0 105 3 0 200 ffffa3baee619300 vmem_rehash vmem_rehash
0 104 3 0 200 ffffa3baee600b40 entbutler entropy
0 30 3 1 200 ffffa3baedf806c0 vioif0_txrx/1 vioif0_txrx
0 29 3 0 200 ffffa3baedf80280 vioif0_txrx/0 vioif0_txrx
0 27 3 0 200 ffffa3baebb3a680 scsibus0 sccomp
0 26 3 0 200 ffffa3baebb3a240 pms0 pmsreset
0 25 3 1 200 ffffa3baeba7ca80 xcall/1 xcall
0 24 1 1 200 ffffa3baeba7c640 softser/1
0 23 1 1 200 ffffa3baeba7c200 softclk/1
0 22 1 1 200 ffffa3baeba47a40 softbio/1
0 21 1 1 200 ffffa3baeba47600 softnet/1
0 20 1 1 201 ffffa3baeba471c0 idle/1
0 19 3 0 200 ffffa3bbfb98ba00 lnxpwrwq lnxpwrwq
0 18 3 0 200 ffffa3bbfb98b5c0 lnxlngwq lnxlngwq
0 17 3 0 200 ffffa3bbfb98b180 lnxsyswq lnxsyswq
0 16 3 0 200 ffffa3bbfb9a49c0 lnxrcugc lnxrcugc
0 15 3 0 200 ffffa3bbfb9a4580 sysmon smtaskq
0 14 3 0 200 ffffa3bbfb9a4140 pmfsuspend pmfsuspend
0 13 3 0 200 ffffa3bbfb9b5980 pmfevent pmfevent
0 12 3 0 200 ffffa3bbfb9b5540 sopendfree sopendfr
0 11 3 0 200 ffffa3bbfb9b5100 iflnkst iflnkst
0 10 3 0 200 ffffa3bbfc9de940 nfssilly nfssilly
0 9 3 0 200 ffffa3bbfc9de500 vdrain vdrain
0 8 3 0 200 ffffa3bbfc9de0c0 modunload mod_unld
0 7 3 0 200 ffffa3bbfca15900 xcall/0 xcall
0 6 1 0 200 ffffa3bbfca154c0 softser/0
0 5 1 0 200 ffffa3bbfca15080 softclk/0
0 4 1 0 200 ffffa3bbfca3f8c0 softbio/0
0 3 1 0 200 ffffa3bbfca3f480 softnet/0
0 2 1 0 201 ffffa3bbfca3f040 idle/0
0 0 3 0 200 ffffffff85ed83c0 swapper uvm
[Locks tracked through LWPs]

****** LWP 1629.1703 (syz-executor.0) @ 0xffffa3bafa1a3680, l_stat=3

*** Locks held:

* Lock 0 (initialized at vcache_alloc)

lock address : 0xffffa3baf9895a00 type : sleep/adaptive

initialized : 0xffffffff835232b8
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 1

relevant lwp : 0xffffa3bafa1a3680 last held: 0xffffa3bafa1a3680

last locked* : 0xffffffff8357d8b0 unlocked : 0xffffffff8357d63d

owner/count : 0xffffa3bafa1a3680 flags : 0x0000000000000004

Turnstile: no active turnstile for this lock.

* Lock 1 (initialized at vcache_alloc)
lock address : 0xffffa3baf9e172c0 type : sleep/adaptive

initialized : 0xffffffff835232b8
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 1

relevant lwp : 0xffffa3bafa1a3680 last held: 0xffffa3bafa1a3680
last locked* : 0xffffffff8357d8b0 unlocked : 000000000000000000
owner/count : 0xffffa3bafa1a3680 flags : 0x0000000000000004

Turnstile: no active turnstile for this lock.

*** Locks wanted: none

****** LWP 1629.1629 (syz-executor.0) @ 0xffffa3baf7ceebc0, l_stat=7

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at main)
lock address : 0xffffffff862d16c0 type : spin
initialized : 0xffffffff83a51fc6
shared holds : 0 exclusive: 1

shares wanted: 0 exclusive: 1
relevant cpu : 0 last held: 1
relevant lwp : 0xffffa3baf7ceebc0 last held: 0xffffa3bafa1a3ac0
last locked* : 0xffffffff8334c3c3 unlocked : 0xffffffff802b0512
curcpu holds : 1 wanted by: 000000000000000000

****** LWP 1500.1500 (syz-executor.3) @ 0xffffa3baf9c2e280, l_stat=2

*** Locks held:

* Lock 0 (initialized at amap_alloc1)
lock address : 0xffffa3baf5a3fec0 type : sleep/adaptive
initialized : 0xffffffff8311b89a

shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0

relevant lwp : 0xffffa3baf9c2e280 last held: 0xffffa3baf9c2e280
last locked* : 0xffffffff8313f4a5 unlocked : 0xffffffff8313ba6f
owner/count : 0xffffa3baf9c2e280 flags : 0x0000000000000004

Turnstile: no active turnstile for this lock.

* Lock 1 (initialized at pmap_ctor)

lock address : 0xffffa3baf6fd6980 type : sleep/adaptive

initialized : 0xffffffff80f5972e
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0

relevant lwp : 0xffffa3baf9c2e280 last held: 0xffffa3baf9c2e280

last locked* : 0xffffffff80f5bdda unlocked : 0xffffffff80f59464

owner field : 0xffffa3baf9c2e280 wait/spin: 0/0

Turnstile: no active turnstile for this lock.

*** Locks wanted: none

****** LWP 710.1473 (syz-executor.5) @ 0xffffa3bafa1a3ac0, l_stat=7

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at module_hook_init)
lock address : 0xffffffff862d17c0 type : sleep/adaptive
initialized : 0xffffffff832683f7
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0

relevant cpu : 1 last held: 0

relevant lwp : 0xffffa3bafa1a3ac0 last held: 000000000000000000

last locked : 000000000000000000 unlocked*: 000000000000000000
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 1364.1364 (syz-executor.1) @ 0xffffa3bafa091a40, l_stat=3

*** Locks held:

* Lock 0 (initialized at fork1)
lock address : 0xffffa3baf9dac750 type : sleep/adaptive
initialized : 0xffffffff83233d12

shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0

relevant lwp : 0xffffa3bafa091a40 last held: 0xffffa3bafa091a40
last locked* : 0xffffffff8322bf9e unlocked : 0xffffffff83219b6e
owner/count : 0xffffa3bafa091a40 flags : 0x0000000000000004

Turnstile: no active turnstile for this lock.

*** Locks wanted: none

****** LWP 1448.1448 (syz-executor.2) @ 0xffffa3baf6ca7ac0, l_stat=3

*** Locks held:

* Lock 0 (initialized at fork1)
lock address : 0xffffa3baf7ad8b50 type : sleep/adaptive
initialized : 0xffffffff83233d12

shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 1

relevant lwp : 0xffffa3baf6ca7ac0 last held: 0xffffa3baf6ca7ac0
last locked* : 0xffffffff8322bf9e unlocked : 0xffffffff83219b6e
owner/count : 0xffffa3baf6ca7ac0 flags : 0x0000000000000004

Turnstile: no active turnstile for this lock.

*** Locks wanted: none

****** LWP 591.591 (dhcpcd) @ 0xffffa3baf6ca7680, l_stat=3

relevant lwp : 0xffffa3baf6ca7680 last held: 000000000000000000

last locked : 000000000000000000 unlocked*: 000000000000000000
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 590.590 (dhcpcd) @ 0xffffa3baf74b8700, l_stat=3

relevant lwp : 0xffffa3baf74b8700 last held: 000000000000000000

last locked : 000000000000000000 unlocked*: 000000000000000000
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 346.346 (dhcpcd) @ 0xffffa3baf74b8b40, l_stat=3

relevant lwp : 0xffffa3baf74b8b40 last held: 000000000000000000

last locked : 000000000000000000 unlocked*: 000000000000000000
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 345.345 (dhcpcd) @ 0xffffa3baf6f646c0, l_stat=3

relevant lwp : 0xffffa3baf6f646c0 last held: 000000000000000000

last locked : 000000000000000000 unlocked*: 000000000000000000
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 0.23 (softclk/1) @ 0xffffa3baeba7c200, l_stat=1

relevant lwp : 0xffffa3baeba7c200 last held: 000000000000000000

last locked : 000000000000000000 unlocked*: 000000000000000000
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 0.11 (iflnkst) @ 0xffffa3bbfb9b5100, l_stat=3

relevant lwp : 0xffffa3bbfb9b5100 last held: 000000000000000000

last locked : 000000000000000000 unlocked*: 000000000000000000
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

[Locks tracked through CPUs]

******* Locks held on cpu1:

* Lock 0 (initialized at main)
lock address : 0xffffffff862d16c0 type : spin
initialized : 0xffffffff83a51fc6
shared holds : 0 exclusive: 1

shares wanted: 0 exclusive: 1

relevant cpu : 1 last held: 1

relevant lwp : 0xffffa3bafa1a3ac0 last held: 0xffffa3bafa1a3ac0
last locked* : 0xffffffff8334c3c3 unlocked : 0xffffffff802b0512
curcpu holds : 1 wanted by: 000000000000000000

* Lock 1 (initialized at tty_init)
lock address : 0xffffffff863bdab0 type : spin
initialized : 0xffffffff83436d58
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0

relevant cpu : 1 last held: 1

relevant lwp : 0xffffa3bafa1a3ac0 last held: 0xffffa3bafa1a3ac0

last locked* : 0xffffffff82350ed2 unlocked : 0xffffffff8343dec2
owner field : 0x0000000000010600 wait/spin: 0/1

PAGE FLAG PQ UOBJECT UANON

0xffffb30000007180 0045 00000000 0x0 0x0
0xffffb30000007200 0045 00000000 0x0 0x0
0xffffb30000007280 0045 00000000 0x0 0x0
0xffffb30000007300 0045 00000000 0x0 0x0
0xffffb30000007380 0045 00000000 0x0 0x0
0xffffb30000007400 0045 00000000 0x0 0x0
0xffffb30000007480 0045 00000000 0x0 0x0
0xffffb30000007500 0045 00000000 0x0 0x0
0xffffb30000007580 0041 00000000 0x0 0x0
0xffffb30000007600 0041 00000000 0x0 0x0
0xffffb30000007680 0041 00000000 0x0 0x0
0xffffb30000007700 0041 00000000 0x0 0x0
0xffffb30000007780 0045 00000000 0x0 0x0
0xffffb30000007800 0045 00000000 0x0 0x0
0xffffb30000007880 0045 00000000 0x0 0x0
0xffffb30000007900 0041 00000000 0x0 0x0
0xffffb30000007980 0041 00000000 0x0 0x0
0xffffb30000007a00 0041 00000000 0x0 0x0
0xffffb30000007a80 0041 00000000 0x0 0x0
0xffffb30000007b00 0041 00000000 0x0 0x0
0xffffb30000007b80 0041 00000000 0x0 0x0
0xffffb30000007c00 0041 00000000 0x0 0x0
0xffffb30000007c80 0041 00000000 0x0 0x0
0xffffb30000007d00 0041 00000000 0x0 0x0
0xffffb30000007d80 0041 00000000 0x0 0x0
0xffffb30000007e00 0041 00000000 0x0 0x0
0xffffb30000007e80 0041 00000000 0x0 0x0
0xffffb30000007f00 0041 00000000 0x0 0x0
0xffffb30000007f80 0041 00000000 0x0 0x0
0xffffb30000008000 0041 00000000 0x0 0x0
0xffffb30000008080 0041 00000000 0x0 0x0
0xffffb30000008100 0041 00000000 0x0 0x0
0xffffb30000008180 0041 00000000 0x0 0x0
0xffffb30000008200 0041 00000000 0x0 0x0
0xffffb30000008280 0041 00000000 0x0 0x0
0xffffb30000008300 0041 00000000 0x0 0x0
0xffffb30000008380 0041 00000000 0x0 0x0
0xffffb30000008400 0041 00000000 0x0 0x0
0xffffb30000008480 0041 00000000 0x0 0x0
0xffffb30000008500 0041 00000000 0x0 0x0
0xffffb30000008580 0041 00000000 0x0 0x0
0xffffb30000008600 0041 00000000 0x0 0x0
0xffffb30000008680 0045 00000000 0x0 0x0
0xffffb30000008700 0041 00000000 0x0 0x0
0xffffb30000008780 0041 00000000 0x0 0x0
0xffffb30000008800 0041 00000000 0x0 0x0
0xffffb30000008880 0041 00000000 0x0 0x0
0xffffb30000008900 0041 00000000 0x0 0x0
0xffffb30000008980 0041 00000000 0x0 0x0
0xffffb30000008a00 0041 00000000 0x0 0x0
0xffffb30000008a80 0041 00000000 0x0 0x0
0xffffb30000008b00 0045 00000000 0x0 0x0
0xffffb30000008b80 0041 00000000 0x0 0x0
0xffffb30000008c00 0041 00000000 0x0 0x0
0xffffb30000008c80 0041 00000000 0x0 0x0
0xffffb30000008d00 0041 00000000 0x0 0x0
0xffffb30000008d80 0041 00000000 0x0 0x0
0xffffb30000008e00 0041 00000000 0x0 0x0
0xffffb30000008e80 0041 00000000 0x0 0x0
0xffffb30000008f00 0041 00000000 0x0 0x0
0xffffb30000008f80 0045 00000000 0x0 0x0
0xffffb30000009000 0041 00000000 0x0 0x0
0xffffb30000009080 0041 00000000 0x0 0x0
0xffffb30000009100 0041 00000000 0x0 0x0
0xffffb30000009180 0041 00000000 0x0 0x0
0xffffb30000009200 0041 00000000 0x0 0x0
0xffffb30000009280 0041 00000000 0x0 0x0
0xffffb30000009300 0041 00000000 0x0 0x0
0xffffb30000009380 0041 00000000 0x0 0x0
0xffffb30000009400 0041 00000000 0x0 0x0
0xffffb30000009480 0041 00000000 0x0 0x0
0xffffb30000009500 0041 00000000 0x0 0x0
0xffffb30000009580 0041 00000000 0x0 0x0
0xffffb30000009600 0041 00000000 0x0 0x0
0xffffb30000009680 0041 00000000 0x0 0x0
0xffffb30000009700 0041 00000000 0x0 0x0
0xffffb30000009780 0041 00000000 0x0 0x0
0xffffb30000009800 0041 00000000 0x0 0x0
0xffffb30000009880 0041 00000000 0x0 0x0
0xffffb30000009900 0041 00000000 0x0 0x0
0xffffb30000009980 0041 00000000 0x0 0x0
0xffffb30000009a00 0041 00000000 0x0 0x0
0xffffb30000009a80 0041 00000000 0x0 0x0
0xffffb30000009b00 0041 00000000 0x0 0x0
0xffffb30000009b80 0041 00000000 0x0 0x0
0xffffb30000009c00 0041 00000000 0x0 0x0
0xffffb30000009c80 0041 00000000 0x0 0x0
0xffffb30000009d00 0041 00000000 0x0 0x0
0xffffb30000009d80 0041 00000000 0x0 0x0
0xffffb30000009e00 0041 00000000 0x0 0x0
0xffffb30000009e80 0041 00000000 0x0 0x0
0xffffb30000009f00 0041 00000000 0x0 0x0
0xffffb30000009f80 0041 00000000 0x0 0x0
0xffffb3000000a000 0041 00000000 0x0 0x0
0xffffb3000000a080 0041 00000000 0x0 0x0
0xffffb3000000a100 0045 00000000 0x0 0x0
0xffffb3000000a180 0041 00000000 0x0 0x0
0xffffb3000000a200 0041 00000000 0x0 0x0
0xffffb3000000a280 0041 00000000 0x0 0x0
0xffffb3000000a300 0041 00000000 0x0 0x0
0xffffb3000000a380 0041 00000000 0x0 0x0
0xffffb3000000a400 0041 00000000 0x0 0x0
0xffffb3000000a480 0041 00000000 0x0 0x0
0xffffb3000000a500 0041 00000000 0x0 0x0
0xffffb3000000a580 0041 00000000 0x0 0x0
0xffffb3000000a600 0045 00000000 0x0 0x0
0xffffb3000000a680 0041 00000000 0x0 0x0
0xffffb3000000a700 0041 00000000 0x0 0x0
0xffffb3000000a780 0041 00000000 0x0 0x0
0xffffb3000000a800 0041 00000000 0x0 0x0
0xffffb3000000a880 0041 00000000 0x0 0x0
0xffffb3000000a900 0041 00000000 0x0 0x0
0xffffb3000000a980 0045 00000000 0x0 0x0
0xffffb3000000aa00 0045 00000000 0x0 0x0
0xffffb3000000aa80 0041 00000000 0x0 0x0
0xffffb3000000ab00 0041 00000000 0x0 0x0
0xffffb3000000ab80 0041 00000000 0x0 0x0
0xffffb3000000ac00 0041 00000000 0x0 0x0
0xffffb3000000ac80 0041 00000000 0x0 0x0
0xffffb3000000ad00 0041 00000000 0x0 0x0
0xffffb3000000ad80 0045 00000000 0x0 0x0
0xffffb3000000ae00 0045 00000000 0x0 0x0
0xffffb3000000ae80 0041 00000000 0x0 0x0
0xffffb3000000af00 0041 00000000 0x0 0x0
0xffffb3000000af80 0041 00000000 0x0 0x0
0xffffb3000000b000 0041 00000000 0x0 0x0
0xffffb3000000b080 0041 00000000 0x0 0x0
0xffffb3000000b100 0041 00000000 0x0 0x0
0xffffb3000000b180 0045 00000000 0x0 0x0
0xffffb3000000b200 0045 00000000 0x0 0x0
0xffffb3000000b280 0045 00000000 0x0 0x0
0xffffb3000000b300 0041 00000000 0x0 0x0
0xffffb3000000b380 0041 00000000 0x0 0x0
0xffffb3000000b400 0041 00000000 0x0 0x0
0xffffb3000000b480 0041 00000000 0x0 0x0
0xffffb3000000b500 0045 00000000 0x0 0x0
0xffffb3000000b580 0045 00000000 0x0 0x0
0xffffb3000000b600 0045 00000000 0x0 0x0
0xffffb3000000b680 0045 00000000 0x0 0x0
0xffffb3000000b700 0041 00000000 0x0 0x0
0xffffb3000000b780 0041 00000000 0x0 0x0
0xffffb3000000b800 0045 00000000 0x0 0x0
0xffffb3000000b880 0041 00000000 0x0 0x0
0xffffb3000000b900 0045 00000000 0x0 0x0
0xffffb3000000b980 0045 00000000 0x0 0x0
0xffffb3000000ba00 0041 00000000 0x0 0x0
0xffffb3000000ba80 0045 00000000 0x0 0x0
0xffffb3000000bb00 0045 00000000 0x0 0x0
0xffffb3000000bb80 0041 00000000 0x0 0x0
0xffffb3000000bc00 0045 00000000 0x0 0x0
0xffffb3000000bc80 0045 00000000 0x0 0x0
0xffffb3000000bd00 0045 00000000 0x0 0x0
0xffffb3000000bd80 0041 00000000 0x0 0x0
0xffffb3000000be00 0041 00000000 0x0 0x0
0xffffb3000000be80 0045 00000000 0x0 0x0
0xffffb3000000bf00 0045 00000000 0x0 0x0
0xffffb3000000bf80 0045 00000000 0x0 0x0
0xffffb3000000c000 0045 00000000 0x0 0x0
0xffffb3000000c080 0045 00000000 0x0 0x0
0xffffb3000000c100 0045 00000000 0x0 0x0
0xffffb3000000c180 0041 00000000 0x0 0x0
0xffffb3000000c200 0041 00000000 0x0 0x0
0xffffb3000000c280 0041 00000000 0x0 0x0
0xffffb3000000c300 0045 00000000 0x0 0x0
0xffffb3000000c380 0045 00000000 0x0 0x0
0xffffb3000000c400 0045 00000000 0x0 0x0
0xffffb3000000c480 0045 00000000 0x0 0x0
0xffffb3000000c500 0045 00000000 0x0 0x0
0xffffb3000000c580 0041 00000000 0x0 0x0
0xffffb3000000c600 0041 00000000 0x0 0x0
0xffffb3000000c680 0041 00000000 0x0 0x0
0xffffb3000000c700 0045 00000000 0x0 0x0
0xffffb3000000c780 0045 00000000 0x0 0x0
0xffffb3000000c800 0045 00000000 0x0 0x0
0xffffb3000000c880 0045 00000000 0x0 0x0
0xffffb3000000c900 0041 00000000 0x0 0x0
0xffffb3000000c980 0041 00000000 0x0 0x0
0xffffb3000000ca00 0041 00000000 0x0 0x0
0xffffb3000000ca80 0041 00000000 0x0 0x0
0xffffb3000000cb00 0041 00000000 0x0 0x0
0xffffb3000000cb80 0045 00000000 0x0 0x0
0xffffb3000000cc00 0041 00000000 0x0 0x0
0xffffb3000000cc80 0045 00000000 0x0 0x0
0xffffb3000000cd00 0041 00000000 0x0 0x0
0xffffb3000000cd80 0041 00000000 0x0 0x0
0xffffb3000000ce00 0045 00000000 0x0 0x0
0xffffb3000000ce80 0045 00000000 0x0 0x0
0xffffb3000000cf00 0041 00000000 0x0 0x0
0xffffb3000000cf80 0041 00000000 0x0 0x0
0xffffb3000000d000 0041 00000000 0x0 0x0
0xffffb3000000d080 0041 00000000 0x0 0x0
0xffffb3000000d100 0041 00000000 0x0 0x0
0xffffb3000000d180 0045 00000000 0x0 0x0
0xffffb3000000d200 0041 00000000 0x0 0x0
0xffffb3000000d280 0041 00000000 0x0 0x0
0xffffb3000000d300 0041 00000000 0x0 0x0
0xffffb3000000d380 0041 00000000 0x0 0x0
0xffffb3000000d400 0041 00000000 0x0 0x0
0xffffb3000000d480 0041 00000000 0x0 0x0
0xffffb3000000d500 0041 00000000 0x0 0x0
0xffffb3000000d580 0041 00000000 0x0 0x0
0xffffb3000000d600 0041 00000000 0x0 0x0
0xffffb3000000d680 0041 00000000 0x0 0x0
0xffffb3000000d700 0041 00000000 0x0 0x0
0xffffb3000000d780 0041 00000000 0x0 0x0
0xffffb3000000d800 0041 00000000 0x0 0x0
0xffffb3000000d880 0041 00000000 0x0 0x0
0xffffb3000000d900 0041 00000000 0x0 0x0
0xffffb3000000d980 0041 00000000 0x0 0x0
0xffffb3000000da00 0041 00000000 0x0 0x0
0xffffb3000000da80 0045 00000000 0x0 0x0
0xffffb3000000db00 0045 00000000 0x0 0x0
0xffffb3000000db80 0041 00000000 0x0 0x0
0xffffb3000000dc00 0045 00000000 0x0 0x0
0xffffb3000000dc80 0041 00000000 0x0 0x0
0xffffb3000000dd00 0045 00000000 0x0 0x0
0xffffb3000000dd80 0041 00000000 0x0 0x0
0xffffb3000000de00 0045 00000000 0x0 0x0
0xffffb3000000de80 0041 00000000 0x0 0x0
0xffffb3000000df00 0045 00000000 0x0 0x0
0xffffb3000000df80 0045 00000000 0x0 0x0
0xffffb3000000e000 0045 00000000 0x0 0x0
0xffffb3000000e080 0045 00000000 0x0 0x0
0xffffb3000000e100 0045 00000000 0x0 0x0
0xffffb3000000e180 0041 00000000 0x0 0x0
0xffffb3000000e200 0041 00000000 0x0 0x0
0xffffb3000000e280 0045 00000000 0x0 0x0
0xffffb3000000e300 0045 00000000 0x0 0x0
0xffffb3000000e380 0045 00000000 0x0 0x0
0xffffb3000000e400 0045 00000000 0x0 0x0
0xffffb3000000e480 0045 00000000 0x0 0x0
0xffffb3000000e500 0041 00000000 0x0 0x0
0xffffb3000000e580 0041 00000000 0x0 0x0
0xffffb3000000e600 0041 00000000 0x0 0x0
0xffffb3000000e680 0041 00000000 0x0 0x0
0xffffb3000000e700 0041 00000000 0x0 0x0
0xffffb3000000e780 0045 00000000 0x0 0x0
0xffffb3000000e800 0041 00000000 0x0 0x0
0xffffb3000000e880 0041 00000000 0x0 0x0
0xffffb3000000e900 0041 00000000 0x0 0x0
0xffffb3000000e980 0041 00000000 0x0 0x0
0xffffb3000000ea00 0041 00000000 0x0 0x0
0xffffb3000000ea80 0041 00000000 0x0 0x0
0xffffb3000000eb00 0041 00000000 0x0 0x0
0xffffb3000000eb80 0041 00000000 0x0 0x0
0xffffb3000000ec00 0045 00000000 0x0 0x0
0xffffb3000000ec80 0041 00000000 0x0 0x0
0xffffb3000000ed00 0041 00000000 0x0 0x0
0xffffb3000000ed80 0041 00000000 0x0 0x0
0xffffb3000000ee00 0041 00000000 0x0 0x0
0xffffb3000000ee80 0041 00000000 0x0 0x0
0xffffb3000000ef00 0041 00000000 0x0 0x0
0xffffb3000000ef80 0045 00000000 0x0 0x0
0xffffb3000000f000 0041 00000000 0x0 0x0
0xffffb3000000f080 0045 00000000 0x0 0x0
0xffffb3000000f100 0041 00000000 0x0 0x0
0xffffb3000000f180 0041 00000000 0x0 0x0
0xffffb3000000f200 0045 00000000 0x0 0x0
0xffffb3000000f280 0041 00000000 0x0 0x0
0xffffb3000000f300 0041 00000000 0x0 0x0
0xffffb3000000f380 0041 00000000 0x0 0x0
0xffffb3000000f400 0041 00000000 0x0 0x0
0xffffb3000000f480 0041 00000000 0x0 0x0
0xffffb3000000f500 0041 00000000 0x0 0x0
0xffffb3000000f580 0045 00000000 0x0 0x0
0xffffb3000000f600 0041 00000000 0x0 0x0
0xffffb3000000f680 0041 00000000 0x0 0x0
0xffffb3000000f700 0041 00000000 0x0 0x0
0xffffb3000000f780 0041 00000000 0x0 0x0
0xffffb3000000f800 0041 00000000 0x0 0x0
0xffffb3000000f880 0041 00000000 0x0 0x0
0xffffb3000000f900 0041 00000000 0x0 0x0
0xffffb3000000f980 0041 00000000 0x0 0x0
0xffffb3000000fa00 0041 00000000 0x0 0x0
0xffffb3000000fa80 0041 00000000 0x0 0x0
0xffffb3000000fb00 0041 00000000 0x0 0x0
0xffffb3000000fb80 0041 00000000 0x0 0x0
0xffffb3000000fc00 0041 00000000 0x0 0x0
0xffffb3000000fc80 0041 00000000 0x0 0x0
0xffffb3000000fd00 0041 00000000 0x0 0x0
0xffffb3000000fd80 0041 00000000 0x0 0x0
0xffffb3000000fe00 0041 00000000 0x0 0x0
0xffffb3000000fe80 0041 00000000 0x0 0x0
0xffffb3000000ff00 0041 00000000 0x0 0x0
0xffffb3000000ff80 0041 00000000 0x0 0x0
0xffffb30000010000 0045 00000000 0x0 0x0
0xffffb30000010080 0041 00000000 0x0 0x0
0xffffb30000010100 0041 00000000 0x0 0x0
0xffffb30000010180 0041 00000000 0x0 0x0
0xffffb30000010200 0041 00000000 0x0 0x0
0xffffb30000010280 0045 00000000 0x0 0x0
0xffffb30000010300 0041 00000000 0x0 0x0
0xffffb30000010380 0045 00000000 0x0 0x0
0xffffb30000010400 0041 00000000 0x0 0x0
0xffffb30000010480 0041 00000000 0x0 0x0
0xffffb30000010500 0045 00000000 0x0 0x0
0xffffb30000010580 0041 00000000 0x0 0x0
0xffffb30000010600 0041 00000000 0x0 0x0
0xffffb30000010680 0041 00000000 0x0 0x0
0xffffb30000010700 0045 00000000 0x0 0x0
0xffffb30000010780 0041 00000000 0x0 0x0
0xffffb30000010800 0041 00000000 0x0 0x0
0xffffb30000010880 0045 00000000 0x0 0x0
0xffffb30000010900 0041 00000000 0x0 0x0
0xffffb30000010980 0041 00000000 0x0 0x0
0xffffb30000010a00 0041 00000000 0x0 0x0
0xffffb30000010a80 0041 00000000 0x0 0x0
0xffffb30000010b00 0041 00000000 0x0 0x0
0xffffb30000010b80 0041 00000000 0x0 0x0
0xffffb30000010c00 0041 00000000 0x0 0x0
0xffffb30000010c80 0041 00000000 0x0 0x0
0xffffb30000010d00 0041 00000000 0x0 0x0
0xffffb30000010d80 0041 00000000 0x0 0x0
0xffffb30000010e00 0041 00000000 0x0 0x0
0xffffb30000010e80 0041 00000000 0x0 0x0
0xffffb30000010f00 0041 00000000 0x0 0x0
0xffffb30000010f80 0041 00000000 0x0 0x0
0xffffb30000011000 0001 00000000 0x0 0x0
0xffffb30000011080 0001 00000000 0x0 0x0
0xffffb30000011100 0001 00000000 0x0 0x0
0xffffb30000011180 0001 00000000 0x0 0x0
0xffffb30000011200 0001 00000000 0x0 0x0
0xffffb30000011280 0001 00000000 0x0 0x0
0xffffb30000011300 0001 00000000 0x0 0x0
0xffffb30000011380 0001 00000000 0x0 0x0
0xffffb30000011400 0001 00000000 0x0 0x0
0xffffb30000011480 0001 00000000 0x0 0x0
0xffffb30000011500 0001 00000000 0x0 0x0
0xffffb30000011580 0001 00000000 0x0 0x0
0xffffb30000011600 0001 00000000 0x0 0x0
0xffffb30000011680 0001 00000000 0x0 0x0
0xffffb30000011700 0001 00000000 0x0 0x0
0xffffb30000011780 0001 00000000 0x0 0x0
0xffffb30000011800 0001 00000000 0x0 0x0
0xffffb30000011880 0001 00000000 0x0 0x0
0xffffb30000011900 0001 00000000 0x0 0x0
0xffffb30000011980 0001 00000000 0x0 0x0
0xffffb30000011a00 0001 00000000 0x0 0x0
0xffffb30000011a80 0001 00000000 0x0 0x0
0xffffb30000011b00 0001 00000000 0x0 0x0
0xffffb30000011b80 0001 00000000 0x0 0x0
0xffffb30000011c00 0001 00000000 0x0 0x0
0xffffb30000011c80 0001 00000000 0x0 0x0
0xffffb30000011d00 0001 00000000 0x0 0x0
0xffffb30000011d80 0001 00000000 0x0 0x0
0xffffb30000011e00 0001 00000000 0x0 0x0
0xffffb30000011e80 0001 00000000 0x0 0x0
0xffffb30000011f00 0001 00000000 0x0 0x0
0xffffb30000011f80 0001 00000000 0x0 0x0
0xffffb30000012000 0001 00000000 0x0 0x0
0xffffb30000012080 0001 00000000 0x0 0x0
0xffffb30000012100 0001 00000000 0x0 0x0
0xffffb30000012180 0001 00000000 0x0 0x0
0xffffb30000012200 0001 00000000 0x0 0x0
0xffffb30000012280 0001 00000000 0x0 0x0
0xffffb30000012300 0001 00000000 0x0 0x0
0xffffb30000012380 0001 00000000 0x0 0x0
0xffffb30000012400 0001 00000000 0x0 0x0
0xffffb30000012480 0001 00000000 0x0 0x0
0xffffb30000012500 0001 00000000 0x0 0x0
0xffffb30000012580 0001 00000000 0x0 0x0
0xffffb30000012600 0001 00000000 0x0 0x0
0xffffb30000012680 0001 00000000 0x0 0x0
0xffffb30000012700 0001 00000000 0x0 0x0
0xffffb30000012780 0001 00000000 0x0 0x0
0xffffb30000012800 0001 00000000 0x0 0x0
0xffffb30000012880 0001 00000000 0x0 0x0
0xffffb30000012900 0001 00000000 0x0 0x0
0xffffb30000012980 0001 00000000 0x0 0x0
0xffffb30000012a00 0001 00000000 0x0 0x0
0xffffb30000012a80 0001 00000000 0x0 0x0
0xffffb30000012b00 0041 00000000 0x0 0x0
0xffffb30000012b80 0045 00000000 0x0 0x0
0xffffb30000012c00 0041 00000000 0x0 0x0
0xffffb30000012c80 0041 00000000 0x0 0x0
0xffffb30000012d00 0041 00000000 0x0 0x0
0xffffb30000012d80 0041 00000000 0x0 0x0
0xffffb30000012e00 0041 00000000 0x0 0x0
0xffffb30000012e80 0041 00000000 0x0 0x0
0xffffb30000012f00 0041 00000000 0x0 0x0
0xffffb30000012f80 0041 00000000 0x0 0x0
0xffffb30000013000 0041 00000000 0x0 0x0
0xffffb30000013080 0041 00000000 0x0 0x0
0xffffb30000013100 0041 00000000 0x0 0x0
0xffffb30000013180 0041 00000000 0x0 0x0
0xffffb30000013200 0041 00000000 0x0 0x0
0xffffb30000013280 0041 00000000 0x0 0x0
0xffffb30000013300 0041 00000000 0x0 0x0
0xffffb30000013380 0041 00000000 0x0 0x0
0xffffb30000013400 0041 00000000 0x0 0x0
0xffffb30000013480 0041 00000000 0x0 0x0
0xffffb30000013500 0041 00000000 0x0 0x0
0xffffb30000013580 0041 00000000 0x0 0x0
0xffffb30000013600 0041 00000000 0x0 0x0
0xffffb30000013680 0041 00000000 0x0 0x0
0xffffb30000013700 0041 00000000 0x0 0x0
0xffffb30000013780 0041 00000000 0x0 0x0
0xffffb30000013800 0041 00000000 0x0 0x0
0xffffb30000013880 0041 00000000 0x0 0x0
0xffffb30000013900 0041 00000000 0x0 0x0
0xffffb30000013980 0041 00000000 0x0 0x0
0xffffb30000013a00 0041 00000000 0x0 0x0
0xffffb30000013a80 0041 00000000 0x0 0x0
0xffffb30000013b00 0041 00000000 0x0 0x0
0xffffb30000013b80 0041 00000000 0x0 0x0
0xffffb30000013c00 0041 00000000 0x0 0x0
0xffffb30000013c80 0041 00000000 0x0 0x0
0xffffb30000013d00 0041 00000000 0x0 0x0
0xffffb30000013d80 0041 00000000 0x0 0x0
0xffffb30000013e00 0041 00000000 0x0 0x0
0xffffb30000013e80 0041 00000000 0x0 0x0
0xffffb30000013f00 0041 00000000 0x0 0x0
0xffffb30000013f80 0041 00000000 0x0 0x0
0xffffb30000014000 0041 00000000 0x0 0x0
0xffffb30000014080 0041 00000000 0x0 0x0
0xffffb30000014100 0041 00000000 0x0 0x0
0xffffb30000014180 0041 00000000 0x0 0x0
0xffffb30000014200 0041 00000000 0x0 0x0
0xffffb30000014280 0041 00000000 0x0 0x0
0xffffb30000014300 0041 00000000 0x0 0x0
0xffffb30000014380 0041 00000000 0x0 0x0
0xffffb30000014400 0001 00000000 0x0 0x0
0xffffb30000014480 0001 00000000 0x0 0x0
0xffffb30000014500 0001 00000000 0x0 0x0
0xffffb30000014580 0001 00000000 0x0 0x0
0xffffb30000014600 0001 00000000 0x0 0x0
0xffffb30000014680 0001 00000000 0x0 0x0
0xffffb30000014700 0001 00000000 0x0 0x0
0xffffb30000014780 0001 00000000 0x0 0x0
0xffffb30000014800 0001 00000000 0x0 0x0
0xffffb30000014880 0001 00000000 0x0 0x0
0xffffb30000014900 0001 00000000 0x0 0x0
0xffffb30000014980 0001 00000000 0x0 0x0
0xffffb30000014a00 0001 00000000 0x0 0x0
0xffffb30000014a80 0001 00000000 0x0 0x0
0xffffb30000014b00 0001 00000000 0x0 0x0
0xffffb30000014b80 0001 00000000 0x0 0x0
0xffffb30000014c00 0001 00000000 0x0 0x0
0xffffb30000014c80 0001 00000000 0x0 0x0
0xffffb30000014d00 0001 00000000 0x0 0x0
0xffffb30000014d80 0001 00000000 0x0 0x0
0xffffb30000014e00 0001 00000000 0x0 0x0
0xffffb30000014e80 0001 00000000 0x0 0x0
0xffffb30000014f00 0001 00000000 0x0 0x0
0xffffb30000014f80 0001 00000000 0x0 0x0
0xffffb30000015000 0001 00000000 0x0 0x0
0xffffb30000015080 0001 00000000 0x0 0x0
0xffffb30000015100 0001 00000000 0x0 0x0
0xffffb30000015180 0001 00000000 0x0 0x0
0xffffb30000015200 0001 00000000 0x0 0x0
0xffffb30000015280 0001 00000000 0x0 0x0
0xffffb30000015300 0001 00000000 0x0 0x0
0xffffb30000015380 0001 00000000 0x0 0x0
0xffffb30000015400 0001 00000000 0x0 0x0
0xffffb30000015480 0001 00000000 0x0 0x0
0xffffb30000015500 0001 00000000 0x0 0x0
0xffffb30000015580 0001 00000000 0x0 0x0
0xffffb30000015600 0001 00000000 0x0 0x0
0xffffb30000015680 0001 00000000 0x0 0x0
0xffffb30000015700 0001 00000000 0x0 0x0
0xffffb30000015780 0001 00000000 0x0 0x0
0xffffb30000015800 0001 00000000 0x0 0x0
0xffffb30000015880 0001 00000000 0x0 0x0
0xffffb30000015900 0001 00000000 0x0 0x0
0xffffb30000015980 0001 00000000 0x0 0x0
0xffffb30000015a00 0001 00000000 0x0 0x0
0xffffb30000015a80 0001 00000000 0x0 0x0
0xffffb30000015b00 0001 00000000 0x0 0x0
0xffffb30000015b80 0001 00000000 0x0 0x0
0xffffb30000015c00 0001 00000000 0x0 0x0
0xffffb30000015c80 0001 00000000 0x0 0x0
0xffffb30000015d00 0001 00000000 0x0 0x0
0xffffb30000015d80 0001 00000000 0x0 0x0
0xffffb30000015e00 0001 00000000 0x0 0x0
0xffffb30000015e80 0001 00000000 0x0 0x0
0xffffb30000015f00 0041 00000000 0x0 0x0
0xffffb30000015f80 0041 00000000 0x0 0x0
0xffffb30000016000 0041 00000000 0x0 0x0
0xffffb30000016080 0041 00000000 0x0 0x0
0xffffb30000016100 0041 00000000 0x0 0x0
0xffffb30000016180 0041 00000000 0x0 0x0
0xffffb30000016200 0041 00000000 0x0 0x0
0xffffb30000016280 0041 00000000 0x0 0x0
0xffffb30000016300 0041 00000000 0x0 0x0
0xffffb30000016380 0041 00000000 0x0 0x0
0xffffb30000016400 0041 00000000 0x0 0x0
0xffffb30000016480 0041 00000000 0x0 0x0
0xffffb30000016500 0041 00000000 0x0 0x0
0xffffb30000016580 0041 00000000 0x0 0x0
0xffffb30000016600 0041 00000000 0x0 0x0
0xffffb30000016680 0041 00000000 0x0 0x0
0xffffb30000016700 0041 00000000 0x0 0x0
0xffffb30000016780 0041 00000000 0x0 0x0
0xffffb30000016800 0041 00000000 0x0 0x0
0xffffb30000016880 0041 00000000 0x0 0x0
0xffffb30000016900 0041 00000000 0x0 0x0
0xffffb30000016980 0041 00000000 0x0 0x0
0xffffb30000016a00 0041 00000000 0x0 0x0
0xffffb30000016a80 0041 00000000 0x0 0x0
0xffffb30000016b00 0041 00000000 0x0 0x0
0xffffb30000016b80 0041 00000000 0x0 0x0
0xffffb30000016c00 0041 00000000 0x0 0x0
0xffffb30000016c80 0041 00000000 0x0 0x0
0xffffb30000016d00 0041 00000000 0x0 0x0
0xffffb30000016d80 0041 00000000 0x0 0x0
0xffffb30000016e00 0041 00000000 0x0 0x0
0xffffb30000016e80 0041 00000000 0x0 0x0
0xffffb30000016f00 0041 00000000 0x0 0x0
0xffffb30000016f80 0041 00000000 0x0 0x0
0xffffb30000017000 0041 00000000 0x0 0x0
0xffffb30000017080 0041 00000000 0x0 0x0
0xffffb30000017100 0041 00000000 0x0 0x0
0xffffb30000017180 0041 00000000 0x0 0x0
0xffffb30000017200 0041 00000000 0x0 0x0
0xffffb30000017280 0041 00000000 0x0 0x0
0xffffb30000017300 0041 00000000 0x0 0x0
0xffffb30000017380 0041 00000000 0x0 0x0
0xffffb30000017400 0041 00000000 0x0 0x0
0xffffb30000017480 0001 00000000 0x0 0x0
0xffffb30000017500 0001 00000000 0x0 0x0
0xffffb30000017580 0001 00000000 0x0 0x0
0xffffb30000017600 0001 00000000 0x0 0x0
0xffffb30000017680 0001 00000000 0x0 0x0
0xffffb30000017700 0001 00000000 0x0 0x0
0xffffb30000017780 0001 00000000 0x0 0x0
0xffffb30000017800 0001 00000000 0x0 0x0
0xffffb30000017880 0001 00000000 0x0 0x0
0xffffb30000017900 0001 00000000 0x0 0x0
0xffffb30000017980 0001 00000000 0x0 0x0
0xffffb30000017a00 0001 00000000 0x0 0x0
0xffffb30000017a80 0001 00000000 0x0 0x0
0xffffb30000017b00 0001 00000000 0x0 0x0
0xffffb30000017b80 0001 00000000 0x0 0x0
0xffffb30000017c00 0001 00000000 0x0 0x0
0xffffb30000017c80 0001 00000000 0x0 0x0
0xffffb30000017d00 0001 00000000 0x0 0x0
0xffffb30000017d80 0001 00000000 0x0 0x0
0xffffb30000017e00 0001 00000000 0x0 0x0
0xffffb30000017e80 0001 00000000 0x0 0x0
0xffffb30000017f00 0001 00000000 0x0 0x0
0xffffb30000017f80 0001 00000000 0x0 0x0
0xffffb30000018000 0001 00000000 0x0 0x0
0xffffb30000018080 0001 00000000 0x0 0x0
0xffffb30000018100 0001 00000000 0x0 0x0
0xffffb30000018180 0001 00000000 0x0 0x0
0xffffb30000018200 0001 00000000 0x0 0x0
0xffffb30000018280 0001 00000000 0x0 0x0
0xffffb30000018300 0001 00000000 0x0 0x0
0xffffb30000018380 0001 00000000 0x0 0x0
0xffffb30000018400 0001 00000000 0x0 0x0
0xffffb30000018480 0001 00000000 0x0 0x0
0xffffb30000018500 0001 00000000 0x0 0x0
0xffffb30000018580 0001 00000000 0x0 0x0
0xffffb30000018600 0001 00000000 0x0 0x0
0xffffb30000018680 0001 00000000 0x0 0x0
0xffffb30000018700 0001 00000000 0x0 0x0
0xffffb30000018780 0001 00000000 0x0 0x0
0xffffb30000018800 0001 00000000 0x0 0x0
0xffffb30000018880 0001 00000000 0x0 0x0
0xffffb30000018900 0001 00000000 0x0 0x0
0xffffb30000018980 0001 00000000 0x0 0x0
0xffffb30000018a00 0001 00000000 0x0 0x0
0xffffb30000018a80 0001 00000000 0x0 0x0
0xffffb30000018b00 0001 00000000 0x0 0x0
0xffffb30000018b80 0001 00000000 0x0 0x0
0xffffb30000018c00 0001 00000000 0x0 0x0
0xffffb30000018c80 0001 00000000 0x0 0x0
0xffffb30000018d00 0001 00000000 0x0 0x0
0xffffb30000018d80 0001 00000000 0x0 0x0
0xffffb30000018e00 0001 00000000 0x0 0x0
0xffffb30000018e80 0001 00000000 0x0 0x0
0xffffb30000018f00 0001 00000000 0x0 0x0
0xffffb30000018f80 0041 00000000 0x0 0x0
0xffffb30000019000 0041 00000000 0x0 0x0
0xffffb30000019080 0041 00000000 0x0 0x0
0xffffb30000019100 0041 00000000 0x0 0x0
0xffffb30000019180 0041 00000000 0x0 0x0
0xffffb30000019200 0045 00000000 0x0 0x0
0xffffb30000019280 0041 00000000 0x0 0x0
0xffffb30000019300 0041 00000000 0x0 0x0
0xffffb30000019380 0041 00000000 0x0 0x0
0xffffb30000019400 0041 00000000 0x0 0x0
0xffffb30000019480 0041 00000000 0x0 0x0
0xffffb30000019500 0041 00000000 0x0 0x0
0xffffb30000019580 0045 00000000 0x0 0x0
0xffffb30000019600 0045 00000000 0x0 0x0
0xffffb30000019680 0041 00000000 0x0 0x0
0xffffb30000019700 0041 00000000 0x0 0x0
0xffffb30000019780 0041 00000000 0x0 0x0
0xffffb30000019800 0041 00000000 0x0 0x0
0xffffb30000019880 0041 00000000 0x0 0x0
0xffffb30000019900 0041 00000000 0x0 0x0
0xffffb30000019980 0045 00000000 0x0 0x0
0xffffb30000019a00 0045 00000000 0x0 0x0
0xffffb30000019a80 0041 00000000 0x0 0x0
0xffffb30000019b00 0041 00000000 0x0 0x0
0xffffb30000019b80 0041 00000000 0x0 0x0
0xffffb30000019c00 0041 00000000 0x0 0x0
0xffffb30000019c80 0041 00000000 0x0 0x0
0xffffb30000019d00 0041 00000000 0x0 0x0
0xffffb30000019d80 0045 00000000 0x0 0x0
0xffffb30000019e00 0045 00000000 0x0 0x0
0xffffb30000019e80 0041 00000000 0x0 0x0
0xffffb30000019f00 0045 00000000 0x0 0x0
0xffffb30000019f80 0041 00000000 0x0 0x0
0xffffb3000001a000 0041 00000000 0x0 0x0
0xffffb3000001a080 0041 00000000 0x0 0x0
0xffffb3000001a100 0041 00000000 0x0 0x0
0xffffb3000001a180 0045 00000000 0x0 0x0
0xffffb3000001a200 0045 00000000 0x0 0x0
0xffffb3000001a280 0045 00000000 0x0 0x0
0xffffb3000001a300 0045 00000000 0x0 0x0
0xffffb3000001a380 0041 00000000 0x0 0x0
0xffffb3000001a400 0041 00000000 0x0 0x0
0xffffb3000001a480 0041 00000000 0x0 0x0
0xffffb3000001a500 0001 00000000 0x0 0x0
0xffffb3000001a580 0001 00000000 0x0 0x0
0xffffb3000001a600 0001 00000000 0x0 0x0
0xffffb3000001a680 0001 00000000 0x0 0x0
0xffffb3000001a700 0001 00000000 0x0 0x0
0xffffb3000001a780 0001 00000000 0x0 0x0
0xffffb3000001a800 0001 00000000 0x0 0x0
0xffffb3000001a880 0001 00000000 0x0 0x0
0xffffb3000001a900 0001 00000000 0x0 0x0
0xffffb3000001a980 0001 00000000 0x0 0x0
0xffffb3000001aa00 0001 00000000 0x0

syzbot

unread,

Sep 25, 2020, 11:20:23 AM9/25/20

to syzkaller-...@googlegroups.com

syzbot has found a reproducer for the following issue on:

HEAD commit: 80425266 Add a function to copy AC-Name and Service-Name
git tree: netbsd
console output: https://syzkaller.appspot.com/x/log.txt?x=1153e6c5900000

syz repro: https://syzkaller.appspot.com/x/repro.syz?x=142679c3900000
C reproducer: https://syzkaller.appspot.com/x/repro.c?x=1485293d900000

IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+39cd55...@syzkaller.appspotmail.com

[ 52.7004251] panic: UBSan: Undefined Behavior in /syzkaller/managers/netbsd-kubsan/kernel/sys/compat/common/tty_43.c:230:48, left shift of negative value -50331649

[ 52.7004251] cpu0: Begin traceback...
[ 52.7004251] vpanic() at netbsd:vpanic+0x2cd sys/kern/subr_prf.c:290
[ 52.7004251] isAlreadyReported() at netbsd:isAlreadyReported
[ 52.7004251] HandleShiftOutOfBounds() at netbsd:HandleShiftOutOfBounds+0x1ee sys/../common/lib/libc/misc/ubsan.c:499
[ 52.7004251] compat_43_ttioctl.cold() at netbsd:compat_43_ttioctl.cold+0x37
[ 52.7004251] ttioctl() at netbsd:ttioctl+0x83c sys/kern/tty.c:1422
[ 52.7004251] comioctl() at netbsd:comioctl+0x1a3 sys/dev/ic/com.c:1168
[ 52.7004251] cdev_ioctl() at netbsd:cdev_ioctl+0x15f sys/kern/subr_devsw.c:935
[ 52.7004251] cnioctl() at netbsd:cnioctl+0xb4 sys/dev/cons.c:221
[ 52.7004251] cdev_ioctl() at netbsd:cdev_ioctl+0x15f sys/kern/subr_devsw.c:935
[ 52.7004251] spec_ioctl() at netbsd:spec_ioctl+0x2d3 sys/miscfs/specfs/spec_vnops.c:902
[ 52.7004251] VOP_IOCTL() at netbsd:VOP_IOCTL+0x142 sys/kern/vnode_if.c:646
[ 52.7004251] vn_ioctl() at netbsd:vn_ioctl+0x197 sys/kern/vfs_vnops.c:778
[ 52.7004251] sys_ioctl() at netbsd:sys_ioctl+0xd8b sys/kern/sys_generic.c:671
[ 52.7004251] sys_syscall() at netbsd:sys_syscall+0x1cf sy_call sys/sys/syscallvar.h:66 [inline]
[ 52.7004251] sys_syscall() at netbsd:sys_syscall+0x1cf sys/kern/sys_syscall.c:77
[ 52.7004251] syscall() at netbsd:syscall+0x2d5 sy_call sys/sys/syscallvar.h:65 [inline]
[ 52.7004251] syscall() at netbsd:syscall+0x2d5 sy_invoke sys/sys/syscallvar.h:94 [inline]
[ 52.7004251] syscall() at netbsd:syscall+0x2d5 sys/arch/x86/x86/syscall.c:138
[ 52.7004251] --- syscall (number 0) ---
[ 52.7004251] netbsd:syscall+0x2d5:
[ 52.7004251] cpu0: End traceback...
[ 52.7004251] fatal breakpoint trap in supervisor mode
[ 52.7004251] trap type 1 code 0 rip 0xffffffff80221a85 cs 0x8 rflags 0x246 cr2 0x7334fb3eb0d8 ilevel 0x8 rsp 0xffffa000bf374280
[ 52.7004251] curlwp 0xffff80d45ed9f180 pid 1096.1096 lowest kstack 0xffffa000bf3702c0
Stopped in pid 1096.1096 (syz-executor4712) at netbsd:breakpoint+0x5: leave

HandleShiftOutOfBounds() at netbsd:HandleShiftOutOfBounds+0x1ee sys/../common/lib/libc/misc/ubsan.c:499

compat_43_ttioctl.cold() at netbsd:compat_43_ttioctl.cold+0x37
ttioctl() at netbsd:ttioctl+0x83c sys/kern/tty.c:1422
comioctl() at netbsd:comioctl+0x1a3 sys/dev/ic/com.c:1168
cdev_ioctl() at netbsd:cdev_ioctl+0x15f sys/kern/subr_devsw.c:935

cnioctl() at netbsd:cnioctl+0xb4 sys/dev/cons.c:221

cdev_ioctl() at netbsd:cdev_ioctl+0x15f sys/kern/subr_devsw.c:935
spec_ioctl() at netbsd:spec_ioctl+0x2d3 sys/miscfs/specfs/spec_vnops.c:902

VOP_IOCTL() at netbsd:VOP_IOCTL+0x142 sys/kern/vnode_if.c:646

vn_ioctl() at netbsd:vn_ioctl+0x197 sys/kern/vfs_vnops.c:778
sys_ioctl() at netbsd:sys_ioctl+0xd8b sys/kern/sys_generic.c:671

sys_syscall() at netbsd:sys_syscall+0x1cf sy_call sys/sys/syscallvar.h:66 [inline]
sys_syscall() at netbsd:sys_syscall+0x1cf sys/kern/sys_syscall.c:77

syscall() at netbsd:syscall+0x2d5 sy_call sys/sys/syscallvar.h:65 [inline]
syscall() at netbsd:syscall+0x2d5 sy_invoke sys/sys/syscallvar.h:94 [inline]
syscall() at netbsd:syscall+0x2d5 sys/arch/x86/x86/syscall.c:138

--- syscall (number 0) ---
netbsd:syscall+0x2d5:
Panic string: UBSan: Undefined Behavior in /syzkaller/managers/netbsd-kubsan/kernel/sys/compat/common/tty_43.c:230:48, left shift of negative value -50331649

PID LID S CPU FLAGS STRUCT LWP * NAME WAIT

418 418 2 1 0 ffff80d45de4b0c0 syz-executor4712
1082 1082 2 1 0 ffff80d45ed9fa00 syz-executor4712
1075 1075 2 0 0 ffff80d45de4b500 syz-executor4712
1076 1076 2 0 0 ffff80d45ed9f5c0 syz-executor4712
1100 1100 3 0 80 ffff80d45de4b940 syz-executor4712 nanoslp
1067 1067 2 0 0 ffff80d45db53780 syz-executor4712
1096 >1096 7 0 0 ffff80d45ed9f180 syz-executor4712
1066 1066 2 1 0 ffff80d45c64d5c0 syz-executor4712
1121 1121 2 1 40 ffff80d45ca8f240 syz-executor4712
1064 1064 2 1 40 ffff80d45ce8ab00 syz-executor4712
1068 1068 2 1 40 ffff80d45c8c8a80 syz-executor4712
1250 1250 3 0 80 ffff80d45c8c8640 syz-executor4712 nanoslp
1254 >1254 7 1 40000 ffff80d45c8c8200 sshd
850 850 3 1 80 ffff80d45ebb2140 getty nanoslp
1089 1089 3 0 80 ffff80d45e957100 getty nanoslp
852 852 3 0 80 ffff80d45ebb29c0 getty nanoslp
1110 1110 3 0 c0 ffff80d45e957540 getty ttyraw
941 941 3 1 80 ffff80d45ebb2580 sshd select
962 962 3 0 80 ffff80d45e957980 powerd kqueue
567 567 3 0 80 ffff80d45d0de740 syslogd kqueue
591 591 3 0 80 ffff80d45db53bc0 dhcpcd poll
589 589 3 1 80 ffff80d45ca8f680 dhcpcd poll
587 587 3 1 80 ffff80d45d0deb80 dhcpcd poll
412 412 3 1 80 ffff80d45ca8fac0 dhcpcd poll
347 347 3 1 80 ffff80d45ce4eb40 dhcpcd poll
346 346 3 0 80 ffff80d45ce4e700 dhcpcd poll
345 345 3 0 80 ffff80d45ce8a6c0 dhcpcd poll
1 1 3 0 80 ffff80d454494900 init wait
0 853 3 0 200 ffff80d45c64da00 physiod physiod
0 165 3 0 200 ffff80d45c6c7a40 pooldrain pooldrain
0 164 3 0 200 ffff80d45c6c7600 ioflush syncer
0 163 3 1 200 ffff80d45c6c71c0 pgdaemon pgdaemon
0 160 3 0 200 ffff80d45c64d180 usb7 usbevt
0 31 3 1 200 ffff80d4595e09c0 usb6 usbevt
0 63 3 1 200 ffff80d4595e0580 usb5 usbevt
0 126 3 1 200 ffff80d4595e0140 usb4 usbevt
0 125 3 1 200 ffff80d456593980 usb3 usbevt
0 124 3 1 200 ffff80d456593540 usb2 usbevt
0 123 3 1 200 ffff80d456593100 usb1 usbevt
0 122 3 1 200 ffff80d455539940 usb0 usbevt
0 121 3 1 200 ffff80d455539500 usbtask-dr usbtsk
0 120 3 1 200 ffff80d4555390c0 usbtask-hc usbtsk
0 119 3 0 200 ffff80d45193aac0 npfgc0 npfgcw
0 118 3 1 200 ffff80d4544944c0 rt_free rt_free
0 117 3 1 200 ffff80d454494080 unpgc unpgc
0 116 3 0 200 ffff80d45447f8c0 key_timehandler key_timehandler
0 115 3 1 200 ffff80d45447f480 icmp6_wqinput/1 icmp6_wqinput
0 114 3 0 200 ffff80d45447f040 icmp6_wqinput/0 icmp6_wqinput
0 113 3 0 200 ffff80d454432bc0 nd6_timer nd6_timer
0 112 3 1 200 ffff80d454432780 carp6_wqinput/1 carp6_wqinput
0 111 3 0 200 ffff80d454432340 carp6_wqinput/0 carp6_wqinput
0 110 3 1 200 ffff80d454474b80 carp_wqinput/1 carp_wqinput
0 109 3 0 200 ffff80d454474740 carp_wqinput/0 carp_wqinput
0 108 3 1 200 ffff80d454474300 icmp_wqinput/1 icmp_wqinput
0 107 3 0 200 ffff80d453d80b00 icmp_wqinput/0 icmp_wqinput
0 106 3 0 200 ffff80d4544002c0 rt_timer rt_timer
0 105 3 1 200 ffff80d454400700 vmem_rehash vmem_rehash
0 104 3 1 200 ffff80d454400b40 entbutler entropy
0 30 3 1 200 ffff80d453d806c0 vioif0_txrx/1 vioif0_txrx
0 29 3 0 200 ffff80d453d80280 vioif0_txrx/0 vioif0_txrx
0 27 3 0 200 ffff80d45193a680 scsibus0 sccomp
0 26 3 0 200 ffff80d45193a240 pms0 pmsreset
0 25 3 1 200 ffff80d45187ca80 xcall/1 xcall
0 24 1 1 200 ffff80d45187c640 softser/1
0 23 1 1 200 ffff80d45187c200 softclk/1
0 22 1 1 200 ffff80d451847a40 softbio/1
0 21 1 1 200 ffff80d451847600 softnet/1
0 20 1 1 201 ffff80d4518471c0 idle/1
0 19 3 0 200 ffff80d56178ba00 lnxpwrwq lnxpwrwq
0 18 3 1 200 ffff80d56178b5c0 lnxlngwq lnxlngwq
0 17 3 1 200 ffff80d56178b180 lnxsyswq lnxsyswq
0 16 3 0 200 ffff80d5617a49c0 lnxrcugc lnxrcugc
0 15 3 0 200 ffff80d5617a4580 sysmon smtaskq
0 14 3 0 200 ffff80d5617a4140 pmfsuspend pmfsuspend
0 13 3 1 200 ffff80d5617b5980 pmfevent pmfevent
0 12 3 0 200 ffff80d5617b5540 sopendfree sopendfr
0 11 3 0 200 ffff80d5617b5100 iflnkst iflnkst
0 10 3 0 200 ffff80d5627de940 nfssilly nfssilly
0 9 3 0 200 ffff80d5627de500 vdrain vdrain
0 8 3 0 200 ffff80d5627de0c0 modunload mod_unld
0 7 3 0 200 ffff80d562815900 xcall/0 xcall
0 6 1 0 200 ffff80d5628154c0 softser/0
0 5 1 0 200 ffff80d562815080 softclk/0
0 4 1 0 200 ffff80d56283f8c0 softbio/0
0 3 1 0 200 ffff80d56283f480 softnet/0
0 2 1 0 201 ffff80d56283f040 idle/0
0 0 3 0 200 ffffffff85ed8640 swapper uvm
[Locks tracked through LWPs]

****** LWP 418.418 (syz-executor4712) @ 0xffff80d45de4b0c0, l_stat=2

*** Locks held:

* Lock 0 (initialized at pmap_ctor)

lock address : 0xffff80d45cc61180 type : sleep/adaptive

initialized : 0xffffffff80f5972e
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0

relevant cpu : 1 last held: 1

relevant lwp : 0xffff80d45de4b0c0 last held: 0xffff80d45de4b0c0

last locked* : 0xffffffff80f5bdda unlocked : 0xffffffff80f59464

owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

*** Locks wanted: none

****** LWP 1082.1082 (syz-executor4712) @ 0xffff80d45ed9fa00, l_stat=2

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at uvm_map_setup)
lock address : 0xffff80d4544af9e0 type : sleep/adaptive
initialized : 0xffffffff83162152

shared holds : 0 exclusive: 0

shares wanted: 1 exclusive: 0
relevant cpu : 1 last held: 65535
relevant lwp : 0xffff80d45ed9fa00 last held: 000000000000000000
last locked : 0xffffffff8313f093 unlocked*: 0xffffffff8313bbce
owner/count : 000000000000000000 flags : 000000000000000000

Turnstile: no active turnstile for this lock.

****** LWP 1067.1067 (syz-executor4712) @ 0xffff80d45db53780, l_stat=2

*** Locks held:

* Lock 0 (initialized at pmap_ctor)

lock address : 0xffff80d45db73f80 type : sleep/adaptive

initialized : 0xffffffff80f5972e
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0

relevant lwp : 0xffff80d45db53780 last held: 0xffff80d45db53780

last locked* : 0xffffffff80f5bdda unlocked : 0xffffffff80f59464

owner field : 0xffff80d45db53780 wait/spin: 0/0

Turnstile: no active turnstile for this lock.

* Lock 1 (initialized at pmap_ctor)

lock address : 0xffff80d45db73f88 type : sleep/adaptive

initialized : 0xffffffff80f5975c
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0

relevant lwp : 0xffff80d45db53780 last held: 0xffff80d45db53780

last locked* : 0xffffffff80f460af unlocked : 0xffffffff80f4652f

owner/count : 0xffff80d45db53780 flags : 0x0000000000000004

Turnstile: no active turnstile for this lock.

*** Locks wanted: none

****** LWP 1096.1096 (syz-executor4712) @ 0xffff80d45ed9f180, l_stat=7

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at module_hook_init)

lock address : 0xffffffff862d18c0 type : sleep/adaptive
initialized : 0xffffffff83268577

shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0

relevant lwp : 0xffff80d45ed9f180 last held: 000000000000000000

last locked : 000000000000000000 unlocked*: 000000000000000000
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 1066.1066 (syz-executor4712) @ 0xffff80d45c64d5c0, l_stat=2

*** Locks held:

* Lock 0 (initialized at pmap_ctor)

lock address : 0xffff80d45ccfe980 type : sleep/adaptive

initialized : 0xffffffff80f5972e
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0

relevant cpu : 1 last held: 1

relevant lwp : 0xffff80d45c64d5c0 last held: 0xffff80d45c64d5c0

last locked* : 0xffffffff80f5bdda unlocked : 0xffffffff80f59464

owner field : 0xffff80d45c64d5c0 wait/spin: 0/0

Turnstile: no active turnstile for this lock.

*** Locks wanted: none

****** LWP 589.589 (dhcpcd) @ 0xffff80d45ca8f680, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at module_hook_init)

lock address : 0xffffffff862d18c0 type : sleep/adaptive
initialized : 0xffffffff83268577

shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 0

relevant lwp : 0xffff80d45ca8f680 last held: 000000000000000000

last locked : 000000000000000000 unlocked*: 000000000000000000
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 587.587 (dhcpcd) @ 0xffff80d45d0deb80, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at module_hook_init)

lock address : 0xffffffff862d18c0 type : sleep/adaptive
initialized : 0xffffffff83268577

shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 0

relevant lwp : 0xffff80d45d0deb80 last held: 000000000000000000

last locked : 000000000000000000 unlocked*: 000000000000000000
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 346.346 (dhcpcd) @ 0xffff80d45ce4e700, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at module_hook_init)

lock address : 0xffffffff862d18c0 type : sleep/adaptive
initialized : 0xffffffff83268577

shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0

relevant lwp : 0xffff80d45ce4e700 last held: 000000000000000000

last locked : 000000000000000000 unlocked*: 000000000000000000
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 345.345 (dhcpcd) @ 0xffff80d45ce8a6c0, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at module_hook_init)

lock address : 0xffffffff862d18c0 type : sleep/adaptive
initialized : 0xffffffff83268577

shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0

relevant lwp : 0xffff80d45ce8a6c0 last held: 000000000000000000

last locked : 000000000000000000 unlocked*: 000000000000000000
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 0.11 (iflnkst) @ 0xffff80d5617b5100, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at module_hook_init)

lock address : 0xffffffff862d18c0 type : sleep/adaptive
initialized : 0xffffffff83268577

shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0

relevant lwp : 0xffff80d5617b5100 last held: 000000000000000000

last locked : 000000000000000000 unlocked*: 000000000000000000
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 0.5 (softclk/0) @ 0xffff80d562815080, l_stat=1

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at module_hook_init)

lock address : 0xffffffff862d18c0 type : sleep/adaptive
initialized : 0xffffffff83268577

shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0

relevant lwp : 0xffff80d562815080 last held: 000000000000000000

last locked : 000000000000000000 unlocked*: 000000000000000000
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

[Locks tracked through CPUs]

******* Locks held on cpu0:

* Lock 0 (initialized at main)

lock address : 0xffffffff862d17c0 type : spin
initialized : 0xffffffff83a51ee6

shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0

relevant lwp : 0xffff80d45ed9f180 last held: 0xffff80d45ed9f180
last locked* : 0xffffffff8334c523 unlocked : 0xffffffff8334bdc0

curcpu holds : 2 wanted by: 000000000000000000

* Lock 1 (initialized at tty_init)
lock address : 0xffffffff863bdab0 type : spin

initialized : 0xffffffff83436eb8

shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0

relevant lwp : 0xffff80d45ed9f180 last held: 0xffff80d45ed9f180
last locked* : 0xffffffff82351092 unlocked : 0xffffffff8343e022

owner field : 0x0000000000010600 wait/spin: 0/1

PAGE FLAG PQ UOBJECT UANON

0xffffa00000007180 0045 00000000 0x0 0x0
0xffffa00000007200 0045 00000000 0x0 0x0
0xffffa00000007280 0045 00000000 0x0 0x0
0xffffa00000007300 0045 00000000 0x0 0x0
0xffffa00000007380 0045 00000000 0x0 0x0
0xffffa00000007400 0045 00000000 0x0 0x0
0xffffa00000007480 0045 00000000 0x0 0x0
0xffffa00000007500 0045 00000000 0x0 0x0
0xffffa00000007580 0041 00000000 0x0 0x0
0xffffa00000007600 0041 00000000 0x0 0x0
0xffffa00000007680 0041 00000000 0x0 0x0
0xffffa00000007700 0041 00000000 0x0 0x0
0xffffa00000007780 0045 00000000 0x0 0x0
0xffffa00000007800 0045 00000000 0x0 0x0
0xffffa00000007880 0045 00000000 0x0 0x0
0xffffa00000007900 0041 00000000 0x0 0x0
0xffffa00000007980 0041 00000000 0x0 0x0
0xffffa00000007a00 0041 00000000 0x0 0x0
0xffffa00000007a80 0041 00000000 0x0 0x0
0xffffa00000007b00 0041 00000000 0x0 0x0
0xffffa00000007b80 0041 00000000 0x0 0x0
0xffffa00000007c00 0041 00000000 0x0 0x0
0xffffa00000007c80 0041 00000000 0x0 0x0
0xffffa00000007d00 0041 00000000 0x0 0x0
0xffffa00000007d80 0041 00000000 0x0 0x0
0xffffa00000007e00 0041 00000000 0x0 0x0
0xffffa00000007e80 0041 00000000 0x0 0x0
0xffffa00000007f00 0041 00000000 0x0 0x0
0xffffa00000007f80 0041 00000000 0x0 0x0
0xffffa00000008000 0041 00000000 0x0 0x0
0xffffa00000008080 0041 00000000 0x0 0x0
0xffffa00000008100 0041 00000000 0x0 0x0
0xffffa00000008180 0041 00000000 0x0 0x0
0xffffa00000008200 0041 00000000 0x0 0x0
0xffffa00000008280 0041 00000000 0x0 0x0
0xffffa00000008300 0041 00000000 0x0 0x0
0xffffa00000008380 0041 00000000 0x0 0x0
0xffffa00000008400 0041 00000000 0x0 0x0
0xffffa00000008480 0041 00000000 0x0 0x0
0xffffa00000008500 0041 00000000 0x0 0x0
0xffffa00000008580 0041 00000000 0x0 0x0
0xffffa00000008600 0041 00000000 0x0 0x0
0xffffa00000008680 0045 00000000 0x0 0x0
0xffffa00000008700 0041 00000000 0x0 0x0
0xffffa00000008780 0041 00000000 0x0 0x0
0xffffa00000008800 0041 00000000 0x0 0x0
0xffffa00000008880 0041 00000000 0x0 0x0
0xffffa00000008900 0041 00000000 0x0 0x0
0xffffa00000008980 0041 00000000 0x0 0x0
0xffffa00000008a00 0041 00000000 0x0 0x0
0xffffa00000008a80 0041 00000000 0x0 0x0
0xffffa00000008b00 0045 00000000 0x0 0x0
0xffffa00000008b80 0041 00000000 0x0 0x0
0xffffa00000008c00 0041 00000000 0x0 0x0
0xffffa00000008c80 0041 00000000 0x0 0x0
0xffffa00000008d00 0041 00000000 0x0 0x0
0xffffa00000008d80 0041 00000000 0x0 0x0
0xffffa00000008e00 0041 00000000 0x0 0x0
0xffffa00000008e80 0041 00000000 0x0 0x0
0xffffa00000008f00 0041 00000000 0x0 0x0
0xffffa00000008f80 0045 00000000 0x0 0x0
0xffffa00000009000 0041 00000000 0x0 0x0
0xffffa00000009080 0041 00000000 0x0 0x0
0xffffa00000009100 0041 00000000 0x0 0x0
0xffffa00000009180 0041 00000000 0x0 0x0
0xffffa00000009200 0041 00000000 0x0 0x0
0xffffa00000009280 0041 00000000 0x0 0x0
0xffffa00000009300 0041 00000000 0x0 0x0
0xffffa00000009380 0041 00000000 0x0 0x0
0xffffa00000009400 0041 00000000 0x0 0x0
0xffffa00000009480 0041 00000000 0x0 0x0
0xffffa00000009500 0041 00000000 0x0 0x0
0xffffa00000009580 0041 00000000 0x0 0x0
0xffffa00000009600 0041 00000000 0x0 0x0
0xffffa00000009680 0041 00000000 0x0 0x0
0xffffa00000009700 0041 00000000 0x0 0x0
0xffffa00000009780 0041 00000000 0x0 0x0
0xffffa00000009800 0041 00000000 0x0 0x0
0xffffa00000009880 0041 00000000 0x0 0x0
0xffffa00000009900 0041 00000000 0x0 0x0
0xffffa00000009980 0041 00000000 0x0 0x0
0xffffa00000009a00 0041 00000000 0x0 0x0
0xffffa00000009a80 0041 00000000 0x0 0x0
0xffffa00000009b00 0041 00000000 0x0 0x0
0xffffa00000009b80 0041 00000000 0x0 0x0
0xffffa00000009c00 0041 00000000 0x0 0x0
0xffffa00000009c80 0041 00000000 0x0 0x0
0xffffa00000009d00 0041 00000000 0x0 0x0
0xffffa00000009d80 0041 00000000 0x0 0x0
0xffffa00000009e00 0041 00000000 0x0 0x0
0xffffa00000009e80 0041 00000000 0x0 0x0
0xffffa00000009f00 0041 00000000 0x0 0x0
0xffffa00000009f80 0041 00000000 0x0 0x0
0xffffa0000000a000 0041 00000000 0x0 0x0
0xffffa0000000a080 0041 00000000 0x0 0x0
0xffffa0000000a100 0045 00000000 0x0 0x0
0xffffa0000000a180 0041 00000000 0x0 0x0
0xffffa0000000a200 0041 00000000 0x0 0x0
0xffffa0000000a280 0041 00000000 0x0 0x0
0xffffa0000000a300 0041 00000000 0x0 0x0

0xffffa0000000a380 0041 00000000 0x0 0x0

0xffffa0000000a400 0041 00000000 0x0 0x0

0xffffa0000000a480 0041 00000000 0x0 0x0

0xffffa0000000a500 0041 00000000 0x0 0x0

0xffffa0000000a580 0041 00000000 0x0 0x0

0xffffa0000000a600 0045 00000000 0x0 0x0

0xffffa0000000a680 0041 00000000 0x0 0x0

0xffffa0000000a700 0041 00000000 0x0 0x0

0xffffa0000000a780 0041 00000000 0x0 0x0

0xffffa0000000a800 0041 00000000 0x0 0x0

0xffffa0000000a880 0041 00000000 0x0 0x0

0xffffa0000000a900 0041 00000000 0x0 0x0
0xffffa0000000a980 0045 00000000 0x0 0x0
0xffffa0000000aa00 0045 00000000 0x0 0x0
0xffffa0000000aa80 0041 00000000 0x0 0x0
0xffffa0000000ab00 0041 00000000 0x0 0x0
0xffffa0000000ab80 0041 00000000 0x0 0x0
0xffffa0000000ac00 0041 00000000 0x0 0x0
0xffffa0000000ac80 0041 00000000 0x0 0x0
0xffffa0000000ad00 0041 00000000 0x0 0x0
0xffffa0000000ad80 0045 00000000 0x0 0x0
0xffffa0000000ae00 0045 00000000 0x0 0x0
0xffffa0000000ae80 0041 00000000 0x0 0x0
0xffffa0000000af00 0041 00000000 0x0 0x0
0xffffa0000000af80 0041 00000000 0x0 0x0
0xffffa0000000b000 0041 00000000 0x0 0x0
0xffffa0000000b080 0041 00000000 0x0 0x0
0xffffa0000000b100 0041 00000000 0x0 0x0
0xffffa0000000b180 0045 00000000 0x0 0x0
0xffffa0000000b200 0045 00000000 0x0 0x0
0xffffa0000000b280 0045 00000000 0x0 0x0
0xffffa0000000b300 0041 00000000 0x0 0x0
0xffffa0000000b380 0041 00000000 0x0 0x0
0xffffa0000000b400 0041 00000000 0x0 0x0

0xffffa0000000b480 0041 00000000 0x0 0x0

0xffffa0000000b500 0045 00000000 0x0 0x0
0xffffa0000000b580 0045 00000000 0x0 0x0
0xffffa0000000b600 0045 00000000 0x0 0x0
0xffffa0000000b680 0045 00000000 0x0 0x0
0xffffa0000000b700 0041 00000000 0x0 0x0

0xffffa0000000b780 0041 00000000 0x0 0x0

0xffffa0000000b800 0045 00000000 0x0 0x0

0xffffa0000000b880 0041 00000000 0x0 0x0

0xffffa0000000b900 0045 00000000 0x0 0x0
0xffffa0000000b980 0045 00000000 0x0 0x0
0xffffa0000000ba00 0041 00000000 0x0 0x0
0xffffa0000000ba80 0045 00000000 0x0 0x0
0xffffa0000000bb00 0045 00000000 0x0 0x0
0xffffa0000000bb80 0041 00000000 0x0 0x0
0xffffa0000000bc00 0045 00000000 0x0 0x0
0xffffa0000000bc80 0045 00000000 0x0 0x0
0xffffa0000000bd00 0045 00000000 0x0 0x0
0xffffa0000000bd80 0041 00000000 0x0 0x0
0xffffa0000000be00 0041 00000000 0x0 0x0
0xffffa0000000be80 0045 00000000 0x0 0x0
0xffffa0000000bf00 0045 00000000 0x0 0x0
0xffffa0000000bf80 0045 00000000 0x0 0x0
0xffffa0000000c000 0045 00000000 0x0 0x0
0xffffa0000000c080 0045 00000000 0x0 0x0
0xffffa0000000c100 0045 00000000 0x0 0x0
0xffffa0000000c180 0041 00000000 0x0 0x0
0xffffa0000000c200 0041 00000000 0x0 0x0
0xffffa0000000c280 0041 00000000 0x0 0x0
0xffffa0000000c300 0045 00000000 0x0 0x0
0xffffa0000000c380 0045 00000000 0x0 0x0
0xffffa0000000c400 0045 00000000 0x0 0x0
0xffffa0000000c480 0045 00000000 0x0 0x0
0xffffa0000000c500 0045 00000000 0x0 0x0
0xffffa0000000c580 0041 00000000 0x0 0x0
0xffffa0000000c600 0041 00000000 0x0 0x0
0xffffa0000000c680 0041 00000000 0x0 0x0

0xffffa0000000c700 0045 00000000 0x0 0x0

0xffffa0000000c780 0045 00000000 0x0 0x0

0xffffa0000000c800 0045 00000000 0x0 0x0

0xffffa0000000c880 0045 00000000 0x0 0x0
0xffffa0000000c900 0041 00000000 0x0 0x0
0xffffa0000000c980 0041 00000000 0x0 0x0
0xffffa0000000ca00 0041 00000000 0x0 0x0
0xffffa0000000ca80 0041 00000000 0x0 0x0
0xffffa0000000cb00 0041 00000000 0x0 0x0
0xffffa0000000cb80 0045 00000000 0x0 0x0
0xffffa0000000cc00 0041 00000000 0x0 0x0
0xffffa0000000cc80 0045 00000000 0x0 0x0
0xffffa0000000cd00 0041 00000000 0x0 0x0
0xffffa0000000cd80 0041 00000000 0x0 0x0
0xffffa0000000ce00 0045 00000000 0x0 0x0
0xffffa0000000ce80 0045 00000000 0x0 0x0
0xffffa0000000cf00 0041 00000000 0x0 0x0
0xffffa0000000cf80 0041 00000000 0x0 0x0
0xffffa0000000d000 0041 00000000 0x0 0x0
0xffffa0000000d080 0041 00000000 0x0 0x0
0xffffa0000000d100 0041 00000000 0x0 0x0
0xffffa0000000d180 0045 00000000 0x0 0x0
0xffffa0000000d200 0041 00000000 0x0 0x0
0xffffa0000000d280 0041 00000000 0x0 0x0
0xffffa0000000d300 0041 00000000 0x0 0x0
0xffffa0000000d380 0041 00000000 0x0 0x0
0xffffa0000000d400 0041 00000000 0x0 0x0

0xffffa0000000d480 0041 00000000 0x0 0x0

0xffffa0000000d500 0041 00000000 0x0 0x0

0xffffa0000000d580 0041 00000000 0x0 0x0

0xffffa0000000d600 0041 00000000 0x0 0x0

0xffffa0000000d680 0041 00000000 0x0 0x0

0xffffa0000000d700 0041 00000000 0x0 0x0
0xffffa0000000d780 0041 00000000 0x0 0x0
0xffffa0000000d800 0041 00000000 0x0 0x0
0xffffa0000000d880 0041 00000000 0x0 0x0
0xffffa0000000d900 0041 00000000 0x0 0x0
0xffffa0000000d980 0041 00000000 0x0 0x0
0xffffa0000000da00 0041 00000000 0x0 0x0
0xffffa0000000da80 0045 00000000 0x0 0x0
0xffffa0000000db00 0045 00000000 0x0 0x0
0xffffa0000000db80 0041 00000000 0x0 0x0
0xffffa0000000dc00 0045 00000000 0x0 0x0
0xffffa0000000dc80 0041 00000000 0x0 0x0
0xffffa0000000dd00 0045 00000000 0x0 0x0
0xffffa0000000dd80 0041 00000000 0x0 0x0
0xffffa0000000de00 0045 00000000 0x0 0x0
0xffffa0000000de80 0041 00000000 0x0 0x0
0xffffa0000000df00 0045 00000000 0x0 0x0
0xffffa0000000df80 0045 00000000 0x0 0x0
0xffffa0000000e000 0045 00000000 0x0 0x0
0xffffa0000000e080 0045 00000000 0x0 0x0
0xffffa0000000e100 0045 00000000 0x0 0x0
0xffffa0000000e180 0041 00000000 0x0 0x0
0xffffa0000000e200 0041 00000000 0x0 0x0
0xffffa0000000e280 0045 00000000 0x0 0x0
0xffffa0000000e300 0045 00000000 0x0 0x0
0xffffa0000000e380 0045 00000000 0x0 0x0
0xffffa0000000e400 0045 00000000 0x0 0x0
0xffffa0000000e480 0045 00000000 0x0 0x0
0xffffa0000000e500 0041 00000000 0x0 0x0
0xffffa0000000e580 0041 00000000 0x0 0x0
0xffffa0000000e600 0041 00000000 0x0 0x0
0xffffa0000000e680 0041 00000000 0x0 0x0
0xffffa0000000e700 0041 00000000 0x0 0x0
0xffffa0000000e780 0045 00000000 0x0 0x0
0xffffa0000000e800 0041 00000000 0x0 0x0
0xffffa0000000e880 0041 00000000 0x0 0x0
0xffffa0000000e900 0041 00000000 0x0 0x0
0xffffa0000000e980 0041 00000000 0x0 0x0
0xffffa0000000ea00 0041 00000000 0x0 0x0
0xffffa0000000ea80 0041 00000000 0x0 0x0
0xffffa0000000eb00 0041 00000000 0x0 0x0
0xffffa0000000eb80 0041 00000000 0x0 0x0
0xffffa0000000ec00 0045 00000000 0x0 0x0
0xffffa0000000ec80 0041 00000000 0x0 0x0
0xffffa0000000ed00 0041 00000000 0x0 0x0
0xffffa0000000ed80 0041 00000000 0x0 0x0
0xffffa0000000ee00 0041 00000000 0x0 0x0
0xffffa0000000ee80 0041 00000000 0x0 0x0
0xffffa0000000ef00 0041 00000000 0x0 0x0
0xffffa0000000ef80 0045 00000000 0x0 0x0
0xffffa0000000f000 0041 00000000 0x0 0x0
0xffffa0000000f080 0045 00000000 0x0 0x0
0xffffa0000000f100 0041 00000000 0x0 0x0
0xffffa0000000f180 0041 00000000 0x0 0x0
0xffffa0000000f200 0045 00000000 0x0 0x0
0xffffa0000000f280 0041 00000000 0x0 0x0
0xffffa0000000f300 0041 00000000 0x0 0x0
0xffffa0000000f380 0041 00000000 0x0 0x0
0xffffa0000000f400 0041 00000000 0x0 0x0
0xffffa0000000f480 0041 00000000 0x0 0x0
0xffffa0000000f500 0041 00000000 0x0 0x0
0xffffa0000000f580 0045 00000000 0x0 0x0
0xffffa0000000f600 0041 00000000 0x0 0x0
0xffffa0000000f680 0041 00000000 0x0 0x0
0xffffa0000000f700 0041 00000000 0x0 0x0
0xffffa0000000f780 0041 00000000 0x0 0x0
0xffffa0000000f800 0041 00000000 0x0 0x0
0xffffa0000000f880 0041 00000000 0x0 0x0
0xffffa0000000f900 0041 00000000 0x0 0x0
0xffffa0000000f980 0041 00000000 0x0 0x0
0xffffa0000000fa00 0041 00000000 0x0 0x0
0xffffa0000000fa80 0041 00000000 0x0 0x0
0xffffa0000000fb00 0041 00000000 0x0 0x0
0xffffa0000000fb80 0041 00000000 0x0 0x0
0xffffa0000000fc00 0041 00000000 0x0 0x0
0xffffa0000000fc80 0041 00000000 0x0 0x0
0xffffa0000000fd00 0041 00000000 0x0 0x0
0xffffa0000000fd80 0041 00000000 0x0 0x0
0xffffa0000000fe00 0041 00000000 0x0 0x0
0xffffa0000000fe80 0041 00000000 0x0 0x0
0xffffa0000000ff00 0041 00000000 0x0 0x0
0xffffa0000000ff80 0041 00000000 0x0 0x0
0xffffa00000010000 0045 00000000 0x0 0x0
0xffffa00000010080 0041 00000000 0x0 0x0
0xffffa00000010100 0041 00000000 0x0 0x0
0xffffa00000010180 0041 00000000 0x0 0x0
0xffffa00000010200 0041 00000000 0x0 0x0
0xffffa00000010280 0045 00000000 0x0 0x0
0xffffa00000010300 0041 00000000 0x0 0x0
0xffffa00000010380 0045 00000000 0x0 0x0
0xffffa00000010400 0041 00000000 0x0 0x0
0xffffa00000010480 0041 00000000 0x0 0x0
0xffffa00000010500 0045 00000000 0x0 0x0
0xffffa00000010580 0041 00000000 0x0 0x0
0xffffa00000010600 0041 00000000 0x0 0x0
0xffffa00000010680 0041 00000000 0x0 0x0
0xffffa00000010700 0045 00000000 0x0 0x0
0xffffa00000010780 0041 00000000 0x0 0x0
0xffffa00000010800 0041 00000000 0x0 0x0
0xffffa00000010880 0045 00000000 0x0 0x0
0xffffa00000010900 0041 00000000 0x0 0x0
0xffffa00000010980 0041 00000000 0x0 0x0
0xffffa00000010a00 0041 00000000 0x0 0x0
0xffffa00000010a80 0041 00000000 0x0 0x0
0xffffa00000010b00 0041 00000000 0x0 0x0
0xffffa00000010b80 0041 00000000 0x0 0x0
0xffffa00000010c00 0041 00000000 0x0 0x0
0xffffa00000010c80 0041 00000000 0x0 0x0
0xffffa00000010d00 0041 00000000 0x0 0x0
0xffffa00000010d80 0041 00000000 0x0 0x0
0xffffa00000010e00 0041 00000000 0x0 0x0
0xffffa00000010e80 0041 00000000 0x0 0x0
0xffffa00000010f00 0041 00000000 0x0 0x0
0xffffa00000010f80 0041 00000000 0x0 0x0
0xffffa00000011000 0001 00000000 0x0 0x0
0xffffa00000011080 0001 00000000 0x0 0x0
0xffffa00000011100 0001 00000000 0x0 0x0
0xffffa00000011180 0001 00000000 0x0 0x0
0xffffa00000011200 0001 00000000 0x0 0x0
0xffffa00000011280 0001 00000000 0x0 0x0
0xffffa00000011300 0001 00000000 0x0 0x0
0xffffa00000011380 0001 00000000 0x0 0x0
0xffffa00000011400 0001 00000000 0x0 0x0
0xffffa00000011480 0001 00000000 0x0 0x0
0xffffa00000011500 0001 00000000 0x0 0x0
0xffffa00000011580 0001 00000000 0x0 0x0
0xffffa00000011600 0001 00000000 0x0 0x0
0xffffa00000011680 0001 00000000 0x0 0x0
0xffffa00000011700 0001 00000000 0x0 0x0
0xffffa00000011780 0001 00000000 0x0 0x0
0xffffa00000011800 0001 00000000 0x0 0x0
0xffffa00000011880 0001 00000000 0x0 0x0
0xffffa00000011900 0001 00000000 0x0 0x0
0xffffa00000011980 0001 00000000 0x0 0x0
0xffffa00000011a00 0001 00000000 0x0 0x0
0xffffa00000011a80 0001 00000000 0x0 0x0
0xffffa00000011b00 0001 00000000 0x0 0x0
0xffffa00000011b80 0001 00000000 0x0 0x0
0xffffa00000011c00 0001 00000000 0x0 0x0
0xffffa00000011c80 0001 00000000 0x0 0x0
0xffffa00000011d00 0001 00000000 0x0 0x0
0xffffa00000011d80 0001 00000000 0x0 0x0
0xffffa00000011e00 0001 00000000 0x0 0x0
0xffffa00000011e80 0001 00000000 0x0 0x0
0xffffa00000011f00 0001 00000000 0x0 0x0
0xffffa00000011f80 0001 00000000 0x0 0x0
0xffffa00000012000 0001 00000000 0x0 0x0
0xffffa00000012080 0001 00000000 0x0 0x0
0xffffa00000012100 0001 00000000 0x0 0x0
0xffffa00000012180 0001 00000000 0x0 0x0
0xffffa00000012200 0001 00000000 0x0 0x0
0xffffa00000012280 0001 00000000 0x0 0x0
0xffffa00000012300 0001 00000000 0x0 0x0
0xffffa00000012380 0001 00000000 0x0 0x0
0xffffa00000012400 0001 00000000 0x0 0x0
0xffffa00000012480 0001 00000000 0x0 0x0
0xffffa00000012500 0001 00000000 0x0 0x0
0xffffa00000012580 0001 00000000 0x0 0x0
0xffffa00000012600 0001 00000000 0x0 0x0
0xffffa00000012680 0001 00000000 0x0 0x0
0xffffa00000012700 0001 00000000 0x0 0x0
0xffffa00000012780 0001 00000000 0x0 0x0
0xffffa00000012800 0001 00000000 0x0 0x0
0xffffa00000012880 0001 00000000 0x0 0x0
0xffffa00000012900 0001 00000000 0x0 0x0
0xffffa00000012980 0001 00000000 0x0 0x0
0xffffa00000012a00 0001 00000000 0x0 0x0
0xffffa00000012a80 0001 00000000 0x0 0x0
0xffffa00000012b00 0041 00000000 0x0 0x0
0xffffa00000012b80 0045 00000000 0x0 0x0
0xffffa00000012c00 0041 00000000 0x0 0x0
0xffffa00000012c80 0041 00000000 0x0 0x0
0xffffa00000012d00 0041 00000000 0x0 0x0
0xffffa00000012d80 0041 00000000 0x0 0x0
0xffffa00000012e00 0041 00000000 0x0 0x0
0xffffa00000012e80 0041 00000000 0x0 0x0
0xffffa00000012f00 0041 00000000 0x0 0x0
0xffffa00000012f80 0041 00000000 0x0 0x0
0xffffa00000013000 0041 00000000 0x0 0x0
0xffffa00000013080 0041 00000000 0x0 0x0
0xffffa00000013100 0041 00000000 0x0 0x0
0xffffa00000013180 0041 00000000 0x0 0x0
0xffffa00000013200 0041 00000000 0x0 0x0
0xffffa00000013280 0041 00000000 0x0 0x0
0xffffa00000013300 0041 00000000 0x0 0x0
0xffffa00000013380 0041 00000000 0x0 0x0
0xffffa00000013400 0041 00000000 0x0 0x0
0xffffa00000013480 0041 00000000 0x0 0x0
0xffffa00000013500 0041 00000000 0x0 0x0
0xffffa00000013580 0041 00000000 0x0 0x0
0xffffa00000013600 0041 00000000 0x0 0x0
0xffffa00000013680 0041 00000000 0x0 0x0
0xffffa00000013700 0041 00000000 0x0 0x0
0xffffa00000013780 0041 00000000 0x0 0x0
0xffffa00000013800 0041 00000000 0x0 0x0
0xffffa00000013880 0041 00000000 0x0 0x0
0xffffa00000013900 0041 00000000 0x0 0x0
0xffffa00000013980 0041 00000000 0x0 0x0
0xffffa00000013a00 0041 00000000 0x0 0x0
0xffffa00000013a80 0041 00000000 0x0 0x0
0xffffa00000013b00 0041 00000000 0x0 0x0
0xffffa00000013b80 0041 00000000 0x0 0x0
0xffffa00000013c00 0041 00000000 0x0 0x0
0xffffa00000013c80 0041 00000000 0x0 0x0
0xffffa00000013d00 0041 00000000 0x0 0x0
0xffffa00000013d80 0041 00000000 0x0 0x0
0xffffa00000013e00 0041 00000000 0x0 0x0
0xffffa00000013e80 0041 00000000 0x0 0x0
0xffffa00000013f00 0041 00000000 0x0 0x0
0xffffa00000013f80 0041 00000000 0x0 0x0
0xffffa00000014000 0041 00000000 0x0 0x0
0xffffa00000014080 0041 00000000 0x0 0x0
0xffffa00000014100 0041 00000000 0x0 0x0
0xffffa00000014180 0041 00000000 0x0 0x0
0xffffa00000014200 0041 00000000 0x0 0x0
0xffffa00000014280 0041 00000000 0x0 0x0
0xffffa00000014300 0041 00000000 0x0 0x0
0xffffa00000014380 0041 00000000 0x0 0x0
0xffffa00000014400 0001 00000000 0x0 0x0
0xffffa00000014480 0001 00000000 0x0 0x0
0xffffa00000014500 0001 00000000 0x0 0x0
0xffffa00000014580 0001 00000000 0x0 0x0
0xffffa00000014600 0001 00000000 0x0 0x0
0xffffa00000014680 0001 00000000 0x0 0x0
0xffffa00000014700 0001 00000000 0x0 0x0
0xffffa00000014780 0001 00000000 0x0 0x0
0xffffa00000014800 0001 00000000 0x0 0x0
0xffffa00000014880 0001 00000000 0x0 0x0
0xffffa00000014900 0001 00000000 0x0 0x0
0xffffa00000014980 0001 00000000 0x0 0x0
0xffffa00000014a00 0001 00000000 0x0 0x0
0xffffa00000014a80 0001 00000000 0x0 0x0
0xffffa00000014b00 0001 00000000 0x0 0x0
0xffffa00000014b80 0001 00000000 0x0 0x0
0xffffa00000014c00 0001 00000000 0x0 0x0
0xffffa00000014c80 0001 00000000 0x0 0x0
0xffffa00000014d00 0001 00000000 0x0 0x0
0xffffa00000014d80 0001 00000000 0x0 0x0
0xffffa00000014e00 0001 00000000 0x0 0x0
0xffffa00000014e80 0001 00000000 0x0 0x0
0xffffa00000014f00 0001 00000000 0x0 0x0
0xffffa00000014f80 0001 00000000 0x0 0x0
0xffffa00000015000 0001 00000000 0x0 0x0
0xffffa00000015080 0001 00000000 0x0 0x0
0xffffa00000015100 0001 00000000 0x0 0x0
0xffffa00000015180 0001 00000000 0x0 0x0
0xffffa00000015200 0001 00000000 0x0 0x0
0xffffa00000015280 0001 00000000 0x0 0x0
0xffffa00000015300 0001 00000000 0x0 0x0
0xffffa00000015380 0001 00000000 0x0 0x0
0xffffa00000015400 0001 00000000 0x0 0x0
0xffffa00000015480 0001 00000000 0x0 0x0
0xffffa00000015500 0001 00000000 0x0 0x0
0xffffa00000015580 0001 00000000 0x0 0x0
0xffffa00000015600 0001 00000000 0x0 0x0
0xffffa00000015680 0001 00000000 0x0 0x0
0xffffa00000015700 0001 00000000 0x0 0x0
0xffffa00000015780 0001 00000000 0x0 0x0
0xffffa00000015800 0001 00000000 0x0 0x0
0xffffa00000015880 0001 00000000 0x0 0x0
0xffffa00000015900 0001 00000000 0x0 0x0
0xffffa00000015980 0001 00000000 0x0 0x0
0xffffa00000015a00 0001 00000000 0x0 0x0
0xffffa00000015a80 0001 00000000 0x0 0x0
0xffffa00000015b00 0001 00000000 0x0 0x0
0xffffa00000015b80 0001 00000000 0x0 0x0
0xffffa00000015c00 0001 00000000 0x0 0x0
0xffffa00000015c80 0001 00000000 0x0 0x0
0xffffa00000015d00 0001 00000000 0x0 0x0
0xffffa00000015d80 0001 00000000 0x0 0x0
0xffffa00000015e00 0001 00000000 0x0 0x0
0xffffa00000015e80 0001 00000000 0x0 0x0
0xffffa00000015f00 0041 00000000 0x0 0x0
0xffffa00000015f80 0041 00000000 0x0 0x0
0xffffa00000016000 0041 00000000 0x0 0x0
0xffffa00000016080 0041 00000000 0x0 0x0
0xffffa00000016100 0041 00000000 0x0 0x0
0xffffa00000016180 0041 00000000 0x0 0x0
0xffffa00000016200 0041 00000000 0x0 0x0
0xffffa00000016280 0041 00000000 0x0 0x0
0xffffa00000016300 0041 00000000 0x0 0x0
0xffffa00000016380 0041 00000000 0x0 0x0
0xffffa00000016400 0041 00000000 0x0 0x0
0xffffa00000016480 0041 00000000 0x0 0x0
0xffffa00000016500 0041 00000000 0x0 0x0
0xffffa00000016580 0041 00000000 0x0 0x0
0xffffa00000016600 0041 00000000 0x0 0x0
0xffffa00000016680 0041 00000000 0x0 0x0
0xffffa00000016700 0041 00000000 0x0 0x0
0xffffa00000016780 0041 00000000 0x0 0x0
0xffffa00000016800 0041 00000000 0x0 0x0
0xffffa00000016880 0041 00000000 0x0 0x0
0xffffa00000016900 0041 00000000 0x0 0x0
0xffffa00000016980 0041 00000000 0x0 0x0
0xffffa00000016a00 0041 00000000 0x0 0x0
0xffffa00000016a80 0041 00000000 0x0 0x0
0xffffa00000016b00 0041 00000000 0x0 0x0
0xffffa00000016b80 0041 00000000 0x0 0x0
0xffffa00000016c00 0041 00000000 0x0 0x0
0xffffa00000016c80 0041 00000000 0x0 0x0
0xffffa00000016d00 0041 00000000 0x0 0x0
0xffffa00000016d80 0041 00000000 0x0 0x0
0xffffa00000016e00 0041 00000000 0x0 0x0
0xffffa00000016e80 0041 00000000 0x0 0x0
0xffffa00000016f00 0041 00000000 0x0 0x0
0xffffa00000016f80 0041 00000000 0x0 0x0
0xffffa00000017000 0041 00000000 0x0 0x0
0xffffa00000017080 0041 00000000 0x0 0x0
0xffffa00000017100 0041 00000000 0x0 0x0
0xffffa00000017180 0041 00000000 0x0 0x0
0xffffa00000017200 0041 00000000 0x0 0x0
0xffffa00000017280 0041 00000000 0x0 0x0
0xffffa00000017300 0041 00000000 0x0 0x0
0xffffa00000017380 0041 00000000 0x0 0x0
0xffffa00000017400 0041 00000000 0x0 0x0
0xffffa00000017480 0001 00000000 0x0 0x0
0xffffa00000017500 0001 00000000 0x0 0x0
0xffffa00000017580 0001 00000000 0x0 0x0
0xffffa00000017600 0001 00000000 0x0 0x0
0xffffa00000017680 0001 00000000 0x0 0x0
0xffffa00000017700 0001 00000000 0x0 0x0
0xffffa00000017780 0001 00000000 0x0 0x0
0xffffa00000017800 0001 00000000 0x0 0x0
0xffffa00000017880 0001 00000000 0x0 0x0
0xffffa00000017900 0001 00000000 0x0 0x0
0xffffa00000017980 0001 00000000 0x0 0x0
0xffffa00000017a00 0001 00000000 0x0 0x0
0xffffa00000017a80 0001 00000000 0x0 0x0
0xffffa00000017b00 0001 00000000 0x0 0x0
0xffffa00000017b80 0001 00000000 0x0 0x0
0xffffa00000017c00 0001 00000000 0x0 0x0
0xffffa00000017c80 0001 00000000 0x0 0x0
0xffffa00000017d00 0001 00000000 0x0 0x0
0xffffa00000017d80 0001 00000000 0x0 0x0
0xffffa00000017e00 0001 00000000 0x0 0x0
0xffffa00000017e80 0001 00000000 0x0 0x0
0xffffa00000017f00 0001 00000000 0x0 0x0
0xffffa00000017f80 0001 00000000 0x0 0x0
0xffffa00000018000 0001 00000000 0x0 0x0
0xffffa00000018080 0001 00000000 0x0 0x0
0xffffa00000018100 0001 00000000 0x0 0x0
0xffffa00000018180 0001 00000000 0x0 0x0
0xffffa00000018200 0001 00000000 0x0 0x0
0xffffa00000018280 0001 00000000 0x0 0x0
0xffffa00000018300 0001 00000000 0x0 0x0
0xffffa00000018380 0001 00000000 0x0 0x0
0xffffa00000018400 0001 00000000 0x0 0x0
0xffffa00000018480 0001 00000000 0x0 0x0
0xffffa00000018500 0001 00000000 0x0 0x0
0xffffa00000018580 0001 00000000 0x0 0x0
0xffffa00000018600 0001 00000000 0x0 0x0
0xffffa00000018680 0001 00000000 0x0 0x0
0xffffa00000018700 0001 00000000 0x0 0x0
0xffffa00000018780 0001 00000000 0x0 0x0
0xffffa00000018800 0001 00000000 0x0 0x0
0xffffa00000018880 0001 00000000 0x0 0x0
0xffffa00000018900 0001 00000000 0x0 0x0
0xffffa00000018980 0001 00000000 0x0 0x0
0xffffa00000018a00 0001 00000000 0x0 0x0
0xffffa00000018a80 0001 00000000 0x0 0x0
0xffffa00000018b00 0001 00000000 0x0 0x0
0xffffa00000018b80 0001 00000000 0x0 0x0
0xffffa00000018c00 0001 00000000 0x0 0x0
0xffffa00000018c80 0001 00000000 0x0 0x0
0xffffa00000018d00 0001 00000000 0x0 0x0
0xffffa00000018d80 0001 00000000 0x0 0x0
0xffffa00000018e00 0001 00000000 0x0 0x0
0xffffa00000018e80 0001 00000000 0x0 0x0
0xffffa00000018f00 0001 00000000 0x0 0x0
0xffffa00000018f80 0041 00000000 0x0 0x0
0xffffa00000019000 0041 00000000 0x0 0x0
0xffffa00000019080 0041 00000000 0x0 0x0
0xffffa00000019100 0041 00000000 0x0 0x0

0xffffa00000019180 0041 00000000 0x0 0x0

0xffffa00000019200 0045 00000000 0x0 0x0

0xffffa00000019280 0041 00000000 0x0 0x0

0xffffa00000019300 0041 00000000 0x0 0x0
0xffffa00000019380 0041 00000000 0x0 0x0

0xffffa00000019400 0041 00000000 0x0 0x0

0xffffa00000019480 0041 00000000 0x0 0x0
0xffffa00000019500 0041 00000000 0x0 0x0
0xffffa00000019580 0045 00000000 0x0 0x0
0xffffa00000019600 0045 00000000 0x0 0x0
0xffffa00000019680 0041 00000000 0x0 0x0
0xffffa00000019700 0041 00000000 0x0 0x0

0xffffa00000019780 0041 00000000 0x0 0x0

0xffffa00000019800 0041 00000000 0x0 0x0
0xffffa00000019880 0041 00000000 0x0 0x0
0xffffa00000019900 0041 00000000 0x0 0x0
0xffffa00000019980 0045 00000000 0x0 0x0
0xffffa00000019a00 0045 00000000 0x0 0x0
0xffffa00000019a80 0041 00000000 0x0 0x0
0xffffa00000019b00 0041 00000000 0x0 0x0
0xffffa00000019b80 0041 00000000 0x0 0x0
0xffffa00000019c00 0041 00000000 0x0 0x0
0xffffa00000019c80 0041 00000000 0x0 0x0
0xffffa00000019d00 0041 00000000 0x0 0x0
0xffffa00000019d80 0045 00000000 0x0 0x0
0xffffa00000019e00 0045 00000000 0x0 0x0
0xffffa00000019e80 0041 00000000 0x0 0x0
0xffffa00000019f00 0045 00000000 0x0 0x0
0xffffa00000019f80 0041 00000000 0x0 0x0
0xffffa0000001a000 0041 00000000 0x0 0x0
0xffffa0000001a080 0041 00000000 0x0 0x0
0xffffa0000001a100 0041 00000000 0x0 0x0
0xffffa0000001a180 0045 00000000 0x0 0x0
0xffffa0000001a200 0045 00000000 0x0 0x0
0xffffa0000001a280 0045 00000000 0x0 0x0
0xffffa0000001a300 0045 00000000 0x0 0x0
0xffffa0000001a380 0041 00000000 0x0 0x0
0xffffa0000001a400 0041 00000000 0x0 0x0
0xffffa0000001a480 0041 00000000 0x0 0x0
0xffffa0000001a500 0001 00000000 0x0 0x0

0xffffa0000001a580 0001 00000000 0x0 0x0

0xffffa0000001a600 0001 00000000 0x0 0x0

0xffffa0000001a680 0001 00000000 0x0 0x0

0xffffa0000001a700 0001 00000000 0x0 0x0

0xffffa0000001a780 0001 00000000 0x0 0x0

0xffffa0000001a800 0001 00000000 0x0 0x0

0xffffa0000001a880 0001 00000000 0x0 0x0

0xffffa0000001a900 0001 00000000 0x0 0x0

0xffffa0000001a980 0001 00000000 0x0 0x0

0xffffa0000001aa00 0001 00000000 0x0 0x0
0xffffa0000001aa80 0001 00000000 0x0 0x0
0xffffa0000001ab00 0001 00000000 0x0 0x0
0xffffa0000001ab80 0001 00000000 0x0 0x0
0xffffa0000001ac00 0001 00000000 0x0 0x0
0xffffa0000001ac80 0001 00000000 0x0 0x0
0xffffa0000001ad00 0001 00000000 0x0 0x0
0xffffa0000001ad80 0001 00000000 0x0 0x0
0xffffa0000001ae00 0001 00000000 0x0 0x0
0xffffa0000001ae80 0001 00000000 0x0 0x0
0xffffa0000001af00 0001 00000000 0x0 0x0
0xffffa0000001af80 0001 00000000 0x0 0x0
0xffffa0000001b000 0001 00000000 0x0 0x0
0xffffa0000001b080 0001 00000000 0x0 0x0
0xffffa0000001b100 0001 00000000 0x0 0x0
0xffffa0000001b180 0001 00000000 0x0 0x0
0xffffa0000001b200 0001 00000000 0x0 0x0
0xffffa0000001b280 0001 00000000 0x0 0x0
0xffffa0000001b300 0001 00000000 0x0 0x0
0xffffa0000001b380 0001 00000000 0x0 0x0
0xffffa0000001b400 0001 00000000 0x0 0x0
0xffffa0000001b480 0001 00000000 0x0 0x0
0xffffa0000001b500 0001 00000000 0x0 0x0
0xffffa0000001b580 0001 00000000 0x0 0x0
0xffffa0000001b600 0001 00000000 0x0 0x0
0xffffa0000001b680 0001 00000000 0x0 0x0
0xffffa0000001b700 0001 00000000 0x0 0x0
0xffffa0000001b780 0001 00000000 0x0 0x0
0xffffa0000001b800 0001 00000000 0x0

Reply all

Reply to author

Forward

0 new messages