panic: UBSan: Undefined Behavior in /syzkaller/managers/netbsd-kubsan/kernel/sys/kern/sysv_shm.c:LINE, member access wit

[syzbot]

Hello,

syzbot found the following crash on:

HEAD commit: eefd0580 npfctl: implement table replace subcommand. Contr..
git tree: netbsd
console output: https://syzkaller.appspot.com/x/log.txt?x=13af7ced600000
kernel config: https://syzkaller.appspot.com/x/.config?x=824b23e1f4b6c76b
dashboard link: https://syzkaller.appspot.com/bug?extid=1b140861598801aa5220

Unfortunately, I don't have any reproducer for this crash yet.

IMPORTANT: if you fix the bug, please add the following tag to the commit:
Reported-by: syzbot+1b1408...@syzkaller.appspotmail.com

[ 38.3487477] panic: UBSan: Undefined Behavior in
/syzkaller/managers/netbsd-kubsan/kernel/sys/kern/sysv_shm.c:215:2, member
access within null pointer of type 'struct shmmap_entry'

[ 38.3487477] cpu0: Begin traceback...
[ 38.3687584] vpanic() at netbsd:vpanic+0x258 sys/kern/subr_prf.c:336
[ 38.4088075] isAlreadyReported() at netbsd:isAlreadyReported
[ 38.4488482] HandleTypeMismatch() at netbsd:HandleTypeMismatch
[ 38.4888958] HandleTypeMismatch() at netbsd:HandleTypeMismatch+0x7b
sys/../common/lib/libc/misc/ubsan.c:396
[ 38.5389568] shm_delete_mapping() at netbsd:shm_delete_mapping+0x337
sys/kern/sysv_shm.c:215
[ 38.5789979] sys_shmat() at netbsd:sys_shmat+0x605 sys/kern/sysv_shm.c:485
[ 38.6190452] sys___syscall() at netbsd:sys___syscall+0x132 sy_call
sys/sys/syscallvar.h:65 [inline]
[ 38.6190452] sys___syscall() at netbsd:sys___syscall+0x132
sys/kern/sys_syscall.c:77
[ 38.6691022] syscall() at netbsd:syscall+0x1ce sy_call
sys/sys/syscallvar.h:65 [inline]
[ 38.6691022] syscall() at netbsd:syscall+0x1ce sy_invoke
sys/sys/syscallvar.h:94 [inline]
[ 38.6691022] syscall() at netbsd:syscall+0x1ce
sys/arch/x86/x86/syscall.c:138
[ 38.6791151] --- syscall (number 198) ---
[ 38.6991356] 771210043b9a:
[ 38.6991356] cpu0: End traceback...
[ 38.6991356] fatal breakpoint trap in supervisor mode
[ 38.7116743] trap type 1 code 0 rip 0xffffffff8021ddad cs 0x8 rflags
0x286 cr2 0x77120f000000 ilevel 0 rsp 0xffff9f80a7beb8b0
[ 38.7246795] curlwp 0xfffffc2805ac0040 pid 728.3 lowest kstack
0xffff9f80a7be82c0
Stopped in pid 728.3 (syz-executor.0) at netbsd:breakpoint+0x5:
leave
?
breakpoint() at netbsd:breakpoint+0x5
db_panic() at netbsd:db_panic+0xd9 sys/ddb/db_panic.c:67
vpanic() at netbsd:vpanic+0x258 sys/kern/subr_prf.c:336
isAlreadyReported() at netbsd:isAlreadyReported
HandleTypeMismatch() at netbsd:HandleTypeMismatch
HandleTypeMismatch() at netbsd:HandleTypeMismatch+0x7b
sys/../common/lib/libc/misc/ubsan.c:396
shm_delete_mapping() at netbsd:shm_delete_mapping+0x337
sys/kern/sysv_shm.c:215
sys_shmat() at netbsd:sys_shmat+0x605 sys/kern/sysv_shm.c:485
sys___syscall() at netbsd:sys___syscall+0x132 sy_call
sys/sys/syscallvar.h:65 [inline]
sys___syscall() at netbsd:sys___syscall+0x132 sys/kern/sys_syscall.c:77
syscall() at netbsd:syscall+0x1ce sy_call sys/sys/syscallvar.h:65 [inline]
syscall() at netbsd:syscall+0x1ce sy_invoke sys/sys/syscallvar.h:94 [inline]
syscall() at netbsd:syscall+0x1ce sys/arch/x86/x86/syscall.c:138
--- syscall (number 198) ---
771210043b9a:
ds b8b0
es cb1
fs b8a0
gs cac0
rdi fffffc28110b54e0
rsi fffffc2805ac0328
rbp ffff9f80a7beb8b0
rbx ffffffff8342cac0 cpu_info_primary
rdx 2
rcx 0
rax fffffc280dd2a270
r8 ffffffff8342cac0 cpu_info_primary
r9 0
r10 ffff9f80a7beaf60
r11 10
r12 104
r13 ffffffff830214c0 ostype+0xecf88
r14 ffff9f80a7beb928
r15 ffffffff84cdef00 pool_head+0x4c0
rip ffffffff8021ddad breakpoint+0x5
cs 8
rflags 286
rsp ffff9f80a7beb8b0
ss 10
netbsd:breakpoint+0x5: leave
PID LID S CPU FLAGS STRUCT LWP * NAME WAIT
494 1 2 0 0 fffffc27fca5b0c0 sh
728 5 2 1 0 fffffc27f81884e0 syz-executor.0
728 4 3 0 80 fffffc27ff21c4c0 syz-executor.0 parked
728 > 3 7 0 0 fffffc2805ac0040 syz-executor.0
728 2 2 0 0 fffffc27278396c0 syz-executor.0
728 1 2 1 10000000 fffffc27f8188920 syz-executor.0
527 1 2 1 0 fffffc273f6804a0 syz-executor.1
695 1 2 1 0 fffffc27ff21c900 ifconfig
66 5 3 0 80 fffffc2805ac08c0 syz-executor.2 parked
66 4 3 0 80 fffffc27ff21c080 syz-executor.2 parked
66 3 3 1 80 fffffc273f680060 syz-executor.2 parked
66 2 3 0 80 fffffc273f6808e0 syz-executor.2 parked
66 1 2 0 0 fffffc27053e6720 syz-executor.2
336 1 3 1 80 fffffc2805ac0480 syz-executor.3 wait
45 1 2 1 0 fffffc27053e62e0 syz-executor.2
483 1 2 0 0 fffffc2809e71bc0 syz-executor.1
41 1 2 0 0 fffffc2809e71780 syz-executor.0
593 11 3 0 80 fffffc2809e71340 syz-fuzzer parked
593 10 3 1 80 fffffc27053e6b60 syz-fuzzer parked
593 9 3 1 80 fffffc2745c75b40 syz-fuzzer parked
593 8 3 1 80 fffffc27033ce2a0 syz-fuzzer parked
593 7 3 0 80 fffffc2745c752c0 syz-fuzzer parked
593 6 3 1 80 fffffc27163b0ae0 syz-fuzzer parked
593 5 2 1 0 fffffc2702634200 syz-fuzzer
593 4 3 1 80 fffffc27163b0260 syz-fuzzer parked
593 3 3 0 80 fffffc280ea9a760 syz-fuzzer parked
593 2 3 0 80 fffffc280f180300 syz-fuzzer parked
593 1 3 0 80 fffffc27163b06a0 syz-fuzzer kqueue
565 1 3 0 80 fffffc280f180740 sshd select
573 1 3 0 80 fffffc27135c0ac0 getty nanoslp
564 1 3 0 80 fffffc2727839b00 getty nanoslp
551 1 3 1 80 fffffc27135c0680 getty nanoslp
380 1 3 0 80 fffffc27135c0240 getty ttyraw
522 1 3 0 80 fffffc280ea9aba0 cron nanoslp
383 1 3 1 80 fffffc280f180b80 inetd kqueue
475 1 3 0 80 fffffc27033ce6e0 sshd select
467 1 3 0 80 fffffc2745c75700 powerd kqueue
242 1 3 0 80 fffffc280ea9a320 syslogd kqueue
278 1 3 0 80 fffffc2727839280 dhcpcd wait
229 1 2 0 0 fffffc27033ceb20 dhcpcd
1 1 3 1 80 fffffc270180ba60 init wait
0 58 3 0 204 fffffc2702634640 physiod physiod
0 57 3 0 204 fffffc2701db3220 pooldrain pooldrain
0 56 3 0 204 fffffc2701db3aa0 aiodoned aiodoned
0 55 2 1 200 fffffc2701db3660 ioflush
0 54 3 0 200 fffffc2702634a80 pgdaemon pgdaemon
0 51 2 0 200 fffffc26feefc9c0 npfgc-0
0 50 3 0 204 fffffc270180b620 rt_free rt_free
0 49 3 0 204 fffffc270180b1e0 unpgc unpgc
0 48 2 0 200 fffffc2701844a40 key_timehandler
0 47 3 1 204 fffffc2701844600 icmp6_wqinput/1
icmp6_wqinput
0 46 3 0 204 fffffc27018441c0 icmp6_wqinput/0
icmp6_wqinput
0 45 2 0 200 fffffc2701785a20 nd6_timer
0 44 3 1 204 fffffc2701757160 carp6_wqinput/1
carp6_wqinput
0 43 3 0 204 fffffc27017575a0 carp6_wqinput/0
carp6_wqinput
0 42 3 1 204 fffffc27017579e0 carp_wqinput/1
carp_wqinput
0 41 3 0 204 fffffc270175e180 carp_wqinput/0
carp_wqinput
0 40 3 1 204 fffffc270175e5c0 icmp_wqinput/1
icmp_wqinput
0 39 3 0 204 fffffc270175ea00 icmp_wqinput/0
icmp_wqinput
0 38 3 1 204 fffffc27017851a0 rt_timer rt_timer
0 37 3 0 204 fffffc27017855e0 vmem_rehash vmem_rehash
0 27 3 0 204 fffffc26feefc580 scsibus0 sccomp
0 26 3 0 200 fffffc26feefc140 pms0 pmsreset
0 25 3 1 204 fffffc26fee879a0 xcall/1 xcall
0 24 1 1 200 fffffc26fee87560 softser/1
0 23 1 1 200 fffffc26fee87120 softclk/1
0 22 1 1 200 fffffc26fee78980 softbio/1
0 21 1 1 200 fffffc26fee78540 softnet/1
0 20 1 1 201 fffffc26fee78100 idle/1
0 19 3 0 204 fffffc280f382960 lnxpwrwq lnxpwrwq
0 18 3 0 204 fffffc280f382520 lnxlngwq lnxlngwq
0 17 3 0 204 fffffc280f3820e0 lnxsyswq lnxsyswq
0 16 3 0 204 fffffc280f3a1940 lnxrcugc lnxrcugc
0 15 3 0 204 fffffc280f3a1500 sysmon smtaskq
0 14 3 0 204 fffffc280f3a10c0 pmfsuspend pmfsuspend
0 13 3 0 204 fffffc280f7ba920 pmfevent pmfevent
0 12 3 0 204 fffffc280f7ba4e0 sopendfree sopendfr
0 11 3 0 204 fffffc280f7ba0a0 nfssilly nfssilly
0 > 10 7 1 200 fffffc2810bef900 cachegc
0 9 3 1 204 fffffc2810bef4c0 vdrain vdrain
0 8 3 0 200 fffffc2810bef080 modunload mod_unld
0 7 3 0 204 fffffc2810c0a8e0 xcall/0 xcall
0 6 1 0 200 fffffc2810c0a4a0 softser/0
0 5 1 0 200 fffffc2810c0a060 softclk/0
0 4 1 0 200 fffffc2810c298c0 softbio/0
0 3 1 0 200 fffffc2810c29480 softnet/0
0 2 1 0 201 fffffc2810c29040 idle/0
0 1 2 0 200 ffffffff84c0a280 swapper
[Locks tracked through LWPs]
Locks held by an LWP (sh):
Lock 0 (initialized at vcache_alloc)
lock address : 0xfffffc273b9158b0 type : sleep/adaptive
initialized : 0xffffffff81d6cee6
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
current cpu : 0 last held: 0
current lwp : 0xfffffc2805ac0040 last held: 0xfffffc27fca5b0c0
last locked* : 0xffffffff81db12e0 unlocked : 0xffffffff81db121f
owner/count : 0xfffffc27fca5b0c0 flags : 0x0000000000000004

Turnstile chain at 0xffffffff85a6c3a0.
=> No active turnstile for this lock.

Locks held by an LWP (syz-executor.0):
Lock 0 (initialized at shminit)
lock address : 0xffffffff85a6d400 type : sleep/adaptive
initialized : 0xffffffff81cb7170
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
current cpu : 0 last held: 0
current lwp : 0xfffffc2805ac0040 last held: 0xfffffc2805ac0040
last locked* : 0xffffffff81cb50f7 unlocked : 0xffffffff81cb4910
owner field : 0xfffffc2805ac0040 wait/spin: 0/0

Turnstile chain at 0xffffffff85a6c240.
=> No active turnstile for this lock.

Locks held by an LWP (syz-executor.1):
Lock 0 (initialized at uvm_obj_init)
lock address : 0xfffffc273e5e6040 type : sleep/adaptive
initialized : 0xffffffff81acbd60
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
current cpu : 0 last held: 1
current lwp : 0xfffffc2805ac0040 last held: 0xfffffc273f6804a0
last locked* : 0xffffffff81aa2e79 unlocked : 0xffffffff81a9f765
owner field : 0xfffffc273f6804a0 wait/spin: 0/0

Turnstile chain at 0xffffffff85a6c2c0.
=> No active turnstile for this lock.

Locks held by an LWP (ifconfig):
Lock 0 (initialized at filedesc_ctor)
lock address : 0xfffffc2715c4a900 type : sleep/adaptive
initialized : 0xffffffff81b1eece
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
current cpu : 0 last held: 1
current lwp : 0xfffffc2805ac0040 last held: 0xfffffc27ff21c900
last locked* : 0xffffffff81b26582 unlocked : 0xffffffff81b23d71
owner field : 0xfffffc27ff21c900 wait/spin: 0/0

Turnstile chain at 0xffffffff85a6c440.
=> No active turnstile for this lock.

Locks held by an LWP (syz-executor.2):
Lock 0 (initialized at uvm_obj_init)
lock address : 0xfffffc2809579b40 type : sleep/adaptive
initialized : 0xffffffff81acbd60
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
current cpu : 0 last held: 0
current lwp : 0xfffffc2805ac0040 last held: 0xfffffc27053e6720
last locked* : 0xffffffff81aa2e79 unlocked : 0xffffffff81a9f765
owner field : 0xfffffc27053e6720 wait/spin: 0/0

Turnstile chain at 0xffffffff85a6c4c0.
=> No active turnstile for this lock.


[Locks tracked through CPUs]

PAGE FLAG PQ UOBJECT UANON
0xffff9f8000003180 0041 0000 0x0 0x0
0xffff9f80000031f8 0041 0000 0x0 0x0
0xffff9f8000003270 0041 0000 0x0 0x0
0xffff9f80000032e8 0041 0000 0x0 0x0
0xffff9f8000003360 0041 0000 0x0 0x0
0xffff9f80000033d8 0041 0000 0x0 0x0
0xffff9f8000003450 0041 0000 0x0 0x0
0xffff9f80000034c8 0041 0000 0x0 0x0
0xffff9f8000003540 0040 0000 0x0 0x0
0xffff9f80000035b8 0048 0000 0x0 0x0
0xffff9f8000003630 0048 0000 0x0 0x0
0xffff9f80000036a8 0048 0000 0x0 0x0
0xffff9f8000003720 0048 0000 0x0 0x0
0xffff9f8000003798 0048 0000 0x0 0x0
0xffff9f8000003810 0049 0000 0x0 0x0
0xffff9f8000003888 0049 0000 0x0 0x0
0xffff9f8000003900 0040 0000 0x0 0x0
0xffff9f8000003978 0040 0000 0x0 0x0
0xffff9f80000039f0 0040 0000 0x0 0x0
0xffff9f8000003a68 0040 0000 0x0 0x0
0xffff9f8000003ae0 0040 0000 0x0 0x0
0xffff9f8000003b58 0040 0000 0x0 0x0
0xffff9f8000003bd0 0049 0000 0x0 0x0
0xffff9f8000003c48 0040 0000 0x0 0x0
0xffff9f8000003cc0 0048 0000 0x0 0x0
0xffff9f8000003d38 0048 0000 0x0 0x0
0xffff9f8000003db0 0048 0000 0x0 0x0
0xffff9f8000003e28 0049 0000 0x0 0x0
0xffff9f8000003ea0 0048 0000 0x0 0x0
0xffff9f8000003f18 0048 0000 0x0 0x0
0xffff9f8000003f90 0040 0000 0x0 0x0
0xffff9f8000004008 0048 0000 0x0 0x0
0xffff9f8000004080 0049 0000 0x0 0x0
0xffff9f80000040f8 0048 0000 0x0 0x0
0xffff9f8000004170 0048 0000 0x0 0x0
0xffff9f80000041e8 0048 0000 0x0 0x0
0xffff9f8000004260 0048 0000 0x0 0x0
0xffff9f80000042d8 0049 0000 0x0 0x0
0xffff9f8000004350 0048 0000 0x0 0x0
0xffff9f80000043c8 0048 0000 0x0 0x0
0xffff9f8000004440 0048 0000 0x0 0x0
0xffff9f80000044b8 0048 0000 0x0 0x0
0xffff9f8000004530 0048 0000 0x0 0x0
0xffff9f80000045a8 0048 0000 0x0 0x0
0xffff9f8000004620 0048 0000 0x0 0x0
0xffff9f8000004698 0048 0000 0x0 0x0
0xffff9f8000004710 0048 0000 0x0 0x0
0xffff9f8000004788 0048 0000 0x0 0x0
0xffff9f8000004800 0048 0000 0x0 0x0
0xffff9f8000004878 0048 0000 0x0 0x0
0xffff9f80000048f0 0048 0000 0x0 0x0
0xffff9f8000004968 0048 0000 0x0 0x0
0xffff9f80000049e0 0041 0000 0x0 0x0
0xffff9f8000004a58 0048 0000 0x0 0x0
0xffff9f8000004ad0 0040 0000 0x0 0x0
0xffff9f8000004b48 0048 0000 0x0 0x0
0xffff9f8000004bc0 0048 0000 0x0 0x0
0xffff9f8000004c38 0041 0000 0x0 0x0
0xffff9f8000004cb0 0041 0000 0x0 0x0
0xffff9f8000004d28 0041 0000 0x0 0x0
0xffff9f8000004da0 0041 0000 0x0 0x0
0xffff9f8000004e18 0041 0000 0x0 0x0
0xffff9f8000004e90 0048 0000 0x0 0x0
0xffff9f8000004f08 0049 0000 0x0 0x0
0xffff9f8000004f80 0049 0000 0x0 0x0
0xffff9f8000004ff8 0041 0000 0x0 0x0
0xffff9f8000005070 0041 0000 0x0 0x0
0xffff9f80000050e8 0041 0000 0x0 0x0
0xffff9f8000005160 0041 0000 0x0 0x0
0xffff9f80000051d8 0041 0000 0x0 0x0
0xffff9f8000005250 0048 0000 0x0 0x0
0xffff9f80000052c8 0041 0000 0x0 0x0
0xffff9f8000005340 0041 0000 0x0 0x0
0xffff9f80000053b8 0041 0000 0x0 0x0
0xffff9f8000005430 0041 0000 0x0 0x0
0xffff9f80000054a8 0041 0000 0x0 0x0
0xffff9f8000005520 0041 0000 0x0 0x0
0xffff9f8000005598 0041 0000 0x0 0x0
0xffff9f8000005610 0048 0000 0x0 0x0
0xffff9f8000005688 0041 0000 0x0 0x0
0xffff9f8000005700 0041 0000 0x0 0x0
0xffff9f8000005778 0041 0000 0x0 0x0
0xffff9f80000057f0 0041 0000 0x0 0x0
0xffff9f8000005868 0041 0000 0x0 0x0
0xffff9f80000058e0 0041 0000 0x0 0x0
0xffff9f8000005958 0041 0000 0x0 0x0
0xffff9f80000059d0 0041 0000 0x0 0x0
0xffff9f8000005a48 0041 0000 0x0 0x0
0xffff9f8000005ac0 0041 0000 0x0 0x0
0xffff9f8000005b38 0041 0000 0x0 0x0
0xffff9f8000005bb0 0041 0000 0x0 0x0
0xffff9f8000005c28 0041 0000 0x0 0x0
0xffff9f8000005ca0 0041 0000 0x0 0x0
0xffff9f8000005d18 0041 0000 0x0 0x0
0xffff9f8000005d90 0041 0000 0x0 0x0
0xffff9f8000005e08 0041 0000 0x0 0x0
0xffff9f8000005e80 0041 0000 0x0 0x0
0xffff9f8000005ef8 0041 0000 0x0 0x0
0xffff9f8000005f70 0041 0000 0x0 0x0
0xffff9f8000005fe8 0041 0000 0x0 0x0
0xffff9f8000006060 0049 0000 0x0 0x0
0xffff9f80000060d8 0041 0000 0x0 0x0
0xffff9f8000006150 0041 0000 0x0 0x0
0xffff9f80000061c8 0041 0000 0x0 0x0
0xffff9f8000006240 0041 0000 0x0 0x0
0xffff9f80000062b8 0049 0000 0x0 0x0
0xffff9f8000006330 0049 0000 0x0 0x0
0xffff9f80000063a8 0049 0000 0x0 0x0
0xffff9f8000006420 0049 0000 0x0 0x0
0xffff9f8000006498 0049 0000 0x0 0x0
0xffff9f8000006510 0041 0000 0x0 0x0
0xffff9f8000006588 0041 0000 0x0 0x0
0xffff9f8000006600 0049 0000 0x0 0x0
0xffff9f8000006678 0049 0000 0x0 0x0
0xffff9f80000066f0 0049 0000 0x0 0x0
0xffff9f8000006768 0049 0000 0x0 0x0
0xffff9f80000067e0 0049 0000 0x0 0x0
0xffff9f8000006858 0049 0000 0x0 0x0
0xffff9f80000068d0 0041 0000 0x0 0x0
0xffff9f8000006948 0049 0000 0x0 0x0
0xffff9f80000069c0 0049 0000 0x0 0x0
0xffff9f8000006a38 0049 0000 0x0 0x0
0xffff9f8000006ab0 0049 0000 0x0 0x0
0xffff9f8000006b28 0049 0000 0x0 0x0
0xffff9f8000006ba0 0048 0000 0x0 0x0
0xffff9f8000006c18 0049 0000 0x0 0x0
0xffff9f8000006c90 0041 0000 0x0 0x0
0xffff9f8000006d08 0049 0000 0x0 0x0
0xffff9f8000006d80 0049 0000 0x0 0x0
0xffff9f8000006df8 0049 0000 0x0 0x0
0xffff9f8000006e70 0049 0000 0x0 0x0
0xffff9f8000006ee8 0049 0000 0x0 0x0
0xffff9f8000006f60 0048 0000 0x0 0x0
0xffff9f8000006fd8 0048 0000 0x0 0x0
0xffff9f8000007050 0049 0000 0x0 0x0
0xffff9f80000070c8 0049 0000 0x0 0x0
0xffff9f8000007140 0049 0000 0x0 0x0
0xffff9f80000071b8 0049 0000 0x0 0x0
0xffff9f8000007230 0048 0000 0x0 0x0
0xffff9f80000072a8 0048 0000 0x0 0x0
0xffff9f8000007320 0048 0000 0x0 0x0
0xffff9f8000007398 0048 0000 0x0 0x0
0xffff9f8000007410 0049 0000 0x0 0x0
0xffff9f8000007488 0049 0000 0x0 0x0
0xffff9f8000007500 0049 0000 0x0 0x0
0xffff9f8000007578 0048 0000 0x0 0x0
0xffff9f80000075f0 0049 0000 0x0 0x0
0xffff9f8000007668 0049 0000 0x0 0x0
0xffff9f80000076e0 0049 0000 0x0 0x0
0xffff9f8000007758 0048 0000 0x0 0x0
0xffff9f80000077d0 0049 0000 0x0 0x0
0xffff9f8000007848 0049 0000 0x0 0x0
0xffff9f80000078c0 0048 0000 0x0 0x0
0xffff9f8000007938 0048 0000 0x0 0x0
0xffff9f80000079b0 0049 0000 0x0 0x0
0xffff9f8000007a28 0048 0000 0x0 0x0
0xffff9f8000007aa0 0048 0000 0x0 0x0
0xffff9f8000007b18 0048 0000 0x0 0x0
0xffff9f8000007b90 0049 0000 0x0 0x0
0xffff9f8000007c08 0048 0000 0x0 0x0
0xffff9f8000007c80 0048 0000 0x0 0x0
0xffff9f8000007cf8 0048 0000 0x0 0x0
0xffff9f8000007d70 0048 0000 0x0 0x0
0xffff9f8000007de8 0048 0000 0x0 0x0
0xffff9f8000007e60 0048 0000 0x0 0x0
0xffff9f8000007ed8 0049 0000 0x0 0x0
0xffff9f8000007f50 0048 0000 0x0 0x0
0xffff9f8000007fc8 0048 0000 0x0 0x0
0xffff9f8000008040 0048 0000 0x0 0x0
0xffff9f80000080b8 0048 0000 0x0 0x0
0xffff9f8000008130 0048 0000 0x0 0x0
0xffff9f80000081a8 0049 0000 0x0 0x0
0xffff9f8000008220 0048 0000 0x0 0x0
0xffff9f8000008298 0048 0000 0x0 0x0
0xffff9f8000008310 0048 0000 0x0 0x0
0xffff9f8000008388 0048 0000 0x0 0x0
0xffff9f8000008400 0048 0000 0x0 0x0
0xffff9f8000008478 0048 0000 0x0 0x0
0xffff9f80000084f0 0049 0000 0x0 0x0
0xffff9f8000008568 0048 0000 0x0 0x0
0xffff9f80000085e0 0048 0000 0x0 0x0
0xffff9f8000008658 0048 0000 0x0 0x0
0xffff9f80000086d0 0048 0000 0x0 0x0
0xffff9f8000008748 0048 0000 0x0 0x0
0xffff9f80000087c0 0049 0000 0x0 0x0
0xffff9f8000008838 0048 0000 0x0 0x0
0xffff9f80000088b0 0048 0000 0x0 0x0
0xffff9f8000008928 0048 0000 0x0 0x0
0xffff9f80000089a0 0048 0000 0x0 0x0
0xffff9f8000008a18 0048 0000 0x0 0x0
0xffff9f8000008a90 0048 0000 0x0 0x0
0xffff9f8000008b08 0049 0000 0x0 0x0
0xffff9f8000008b80 0048 0000 0x0 0x0
0xffff9f8000008bf8 0048 0000 0x0 0x0
0xffff9f8000008c70 0048 0000 0x0 0x0
0xffff9f8000008ce8 0048 0000 0x0 0x0
0xffff9f8000008d60 0048 0000 0x0 0x0
0xffff9f8000008dd8 0048 0000 0x0 0x0
0xffff9f8000008e50 0049 0000 0x0 0x0
0xffff9f8000008ec8 0008 0000 0x0 0x0
0xffff9f8000008f40 0008 0000 0x0 0x0
0xffff9f8000008fb8 0008 0000 0x0 0x0
0xffff9f8000009030 0008 0000 0x0 0x0
0xffff9f80000090a8 0008 0000 0x0 0x0
0xffff9f8000009120 0008 0000 0x0 0x0
0xffff9f8000009198 0008 0000 0x0 0x0
0xffff9f8000009210 0008 0000 0x0 0x0
0xffff9f8000009288 0008 0000 0x0 0x0
0xffff9f8000009300 0008 0000 0x0 0x0
0xffff9f8000009378 0008 0000 0x0 0x0
0xffff9f80000093f0 0008 0000 0x0 0x0
0xffff9f8000009468 0008 0000 0x0 0x0
0xffff9f80000094e0 0008 0000 0x0 0x0
0xffff9f8000009558 0008 0000 0x0 0x0
0xffff9f80000095d0 0008 0000 0x0 0x0
0xffff9f8000009648 0008 0000 0x0 0x0
0xffff9f80000096c0 0008 0000 0x0 0x0
0xffff9f8000009738 0008 0000 0x0 0x0
0xffff9f80000097b0 0008 0000 0x0 0x0
0xffff9f8000009828 0008 0000 0x0 0x0
0xffff9f80000098a0 0008 0000 0x0 0x0
0xffff9f8000009918 0008 0000 0x0 0x0
0xffff9f8000009990 0008 0000 0x0 0x0
0xffff9f8000009a08 0008 0000 0x0 0x0
0xffff9f8000009a80 0008 0000 0x0 0x0
0xffff9f8000009af8 0008 0000 0x0 0x0
0xffff9f8000009b70 0008 0000 0x0 0x0
0xffff9f8000009be8 0008 0000 0x0 0x0
0xffff9f8000009c60 0008 0000 0x0 0x0
0xffff9f8000009cd8 0008 0000 0x0 0x0
0xffff9f8000009d50 0008 0000 0x0 0x0
0xffff9f8000009dc8 0008 0000 0x0 0x0
0xffff9f8000009e40 0008 0000 0x0 0x0
0xffff9f8000009eb8 0008 0000 0x0 0x0
0xffff9f8000009f30 0008 0000 0x0 0x0
0xffff9f8000009fa8 0008 0000 0x0 0x0
0xffff9f800000a020 0008 0000 0x0 0x0
0xffff9f800000a098 0008 0000 0x0 0x0
0xffff9f800000a110 0008 0000 0x0 0x0
0xffff9f800000a188 0008 0000 0x0 0x0
0xffff9f800000a200 0008 0000 0x0 0x0
0xffff9f800000a278 0008 0000 0x0 0x0
0xffff9f800000a2f0 0008 0000 0x0 0x0
0xffff9f800000a368 0008 0000 0x0 0x0
0xffff9f800000a3e0 0008 0000 0x0 0x0
0xffff9f800000a458 0008 0000 0x0 0x0
0xffff9f800000a4d0 0008 0000 0x0 0x0
0xffff9f800000a548 0008 0000 0x0 0x0
0xffff9f800000a5c0 0008 0000 0x0 0x0
0xffff9f800000a638 0008 0000 0x0 0x0
0xffff9f800000a6b0 0008 0000 0x0 0x0
0xffff9f800000a728 0008 0000 0x0 0x0
0xffff9f800000a7a0 0008 0000 0x0 0x0
0xffff9f800000a818 0048 0000 0x0 0x0
0xffff9f800000a890 0048 0000 0x0 0x0
0xffff9f800000a908 0048 0000 0x0 0x0
0xffff9f800000a980 0048 0000 0x0 0x0
0xffff9f800000a9f8 0048 0000 0x0 0x0
0xffff9f800000aa70 0048 0000 0x0 0x0
0xffff9f800000aae8 0048 0000 0x0 0x0
0xffff9f800000ab60 0048 0000 0x0 0x0
0xffff9f800000abd8 0048 0000 0x0 0x0
0xffff9f800000ac50 0048 0000 0x0 0x0
0xffff9f800000acc8 0048 0000 0x0 0x0
0xffff9f800000ad40 0048 0000 0x0 0x0
0xffff9f800000adb8 0048 0000 0x0 0x0
0xffff9f800000ae30 0048 0000 0x0 0x0
0xffff9f800000aea8 0048 0000 0x0 0x0
0xffff9f800000af20 0048 0000 0x0 0x0
0xffff9f800000af98 0048 0000 0x0 0x0
0xffff9f800000b010 0048 0000 0x0 0x0
0xffff9f800000b088 0048 0000 0x0 0x0
0xffff9f800000b100 0048 0000 0x0 0x0
0xffff9f800000b178 0048 0000 0x0 0x0
0xffff9f800000b1f0 0048 0000 0x0 0x0
0xffff9f800000b268 0048 0000 0x0 0x0
0xffff9f800000b2e0 0048 0000 0x0 0x0
0xffff9f800000b358 0048 0000 0x0 0x0
0xffff9f800000b3d0 0048 0000 0x0 0x0
0xffff9f800000b448 0048 0000 0x0 0x0
0xffff9f800000b4c0 0048 0000 0x0 0x0
0xffff9f800000b538 0048 0000 0x0 0x0
0xffff9f800000b5b0 0048 0000 0x0 0x0
0xffff9f800000b628 0048 0000 0x0 0x0
0xffff9f800000b6a0 0048 0000 0x0 0x0
0xffff9f800000b718 0048 0000 0x0 0x0
0xffff9f800000b790 0048 0000 0x0 0x0
0xffff9f800000b808 0048 0000 0x0 0x0
0xffff9f800000b880 0048 0000 0x0 0x0
0xffff9f800000b8f8 0048 0000 0x0 0x0
0xffff9f800000b970 0048 0000 0x0 0x0
0xffff9f800000b9e8 0048 0000 0x0 0x0
0xffff9f800000ba60 0048 0000 0x0 0x0
0xffff9f800000bad8 0048 0000 0x0 0x0
0xffff9f800000bb50 0048 0000 0x0 0x0
0xffff9f800000bbc8 0048 0000 0x0 0x0
0xffff9f800000bc40 0008 0000 0x0 0x0
0xffff9f800000bcb8 0008 0000 0x0 0x0
0xffff9f800000bd30 0008 0000 0x0 0x0
0xffff9f800000bda8 0008 0000 0x0 0x0
0xffff9f800000be20 0008 0000 0x0 0x0
0xffff9f800000be98 0008 0000 0x0 0x0
0xffff9f800000bf10 0008 0000 0x0 0x0
0xffff9f800000bf88 0008 0000 0x0 0x0
0xffff9f800000c000 0008 0000 0x0 0x0
0xffff9f800000c078 0008 0000 0x0 0x0
0xffff9f800000c0f0 0008 0000 0x0 0x0
0xffff9f800000c168 0008 0000 0x0 0x0
0xffff9f800000c1e0 0008 0000 0x0 0x0
0xffff9f800000c258 0008 0000 0x0 0x0
0xffff9f800000c2d0 0008 0000 0x0 0x0
0xffff9f800000c348 0008 0000 0x0 0x0
0xffff9f800000c3c0 0008 0000 0x0 0x0
0xffff9f800000c438 0008 0000 0x0 0x0
0xffff9f800000c4b0 0008 0000 0x0 0x0
0xffff9f800000c528 0008 0000 0x0 0x0
0xffff9f800000c5a0 0008 0000 0x0 0x0
0xffff9f800000c618 0008 0000 0x0 0x0
0xffff9f800000c690 0008 0000 0x0 0x0
0xffff9f800000c708 0008 0000 0x0 0x0
0xffff9f800000c780 0008 0000 0x0 0x0
0xffff9f800000c7f8 0008 0000 0x0 0x0
0xffff9f800000c870 0008 0000 0x0 0x0
0xffff9f800000c8e8 0008 0000 0x0 0x0
0xffff9f800000c960 0008 0000 0x0 0x0
0xffff9f800000c9d8 0008 0000 0x0 0x0
0xffff9f800000ca50 0008 0000 0x0 0x0
0xffff9f800000cac8 0008 0000 0x0 0x0
0xffff9f800000cb40 0008 0000 0x0 0x0
0xffff9f800000cbb8 0008 0000 0x0 0x0
0xffff9f800000cc30 0008 0000 0x0 0x0
0xffff9f800000cca8 0008 0000 0x0 0x0
0xffff9f800000cd20 0008 0000 0x0 0x0
0xffff9f800000cd98 0008 0000 0x0 0x0
0xffff9f800000ce10 0008 0000 0x0 0x0
0xffff9f800000ce88 0008 0000 0x0 0x0
0xffff9f800000cf00 0008 0000 0x0 0x0
0xffff9f800000cf78 0008 0000 0x0 0x0
0xffff9f800000cff0 0008 0000 0x0 0x0
0xffff9f800000d068 0008 0000 0x0 0x0
0xffff9f800000d0e0 0008 0000 0x0 0x0
0xffff9f800000d158 0008 0000 0x0 0x0
0xffff9f800000d1d0 0008 0000 0x0 0x0
0xffff9f800000d248 0008 0000 0x0 0x0
0xffff9f800000d2c0 0008 0000 0x0 0x0
0xffff9f800000d338 0008 0000 0x0 0x0
0xffff9f800000d3b0 0008 0000 0x0 0x0
0xffff9f800000d428 0008 0000 0x0 0x0
0xffff9f800000d4a0 0008 0000 0x0 0x0
0xffff9f800000d518 0008 0000 0x0 0x0
0xffff9f800000d590 0048 0000 0x0 0x0
0xffff9f800000d608 0048 0000 0x0 0x0
0xffff9f800000d680 0048 0000 0x0 0x0
0xffff9f800000d6f8 0048 0000 0x0 0x0
0xffff9f800000d770 0048 0000 0x0 0x0
0xffff9f800000d7e8 0048 0000 0x0 0x0
0xffff9f800000d860 0048 0000 0x0 0x0
0xffff9f800000d8d8 0048 0000 0x0 0x0
0xffff9f800000d950 0048 0000 0x0 0x0
0xffff9f800000d9c8 0048 0000 0x0 0x0
0xffff9f800000da40 0048 0000 0x0 0x0
0xffff9f800000dab8 0048 0000 0x0 0x0
0xffff9f800000db30 0048 0000 0x0 0x0
0xffff9f800000dba8 0048 0000 0x0 0x0
0xffff9f800000dc20 0048 0000 0x0 0x0
0xffff9f800000dc98 0048 0000 0x0 0x0
0xffff9f800000dd10 0048 0000 0x0 0x0
0xffff9f800000dd88 0048 0000 0x0 0x0
0xffff9f800000de00 0048 0000 0x0 0x0
0xffff9f800000de78 0048 0000 0x0 0x0
0xffff9f800000def0 0048 0000 0x0 0x0
0xffff9f800000df68 0048 0000 0x0 0x0
0xffff9f800000dfe0 0048 0000 0x0 0x0
0xffff9f800000e058 0048 0000 0x0 0x0
0xffff9f800000e0d0 0048 0000 0x0 0x0
0xffff9f800000e148 0048 0000 0x0 0x0
0xffff9f800000e1c0 0048 0000 0x0 0x0
0xffff9f800000e238 0048 0000 0x0 0x0
0xffff9f800000e2b0 0048 0000 0x0 0x0
0xffff9f800000e328 0048 0000 0x0 0x0
0xffff9f800000e3a0 0048 0000 0x0 0x0
0xffff9f800000e418 0048 0000 0x0 0x0
0xffff9f800000e490 0048 0000 0x0 0x0
0xffff9f800000e508 0048 0000 0x0 0x0
0xffff9f800000e580 0048 0000 0x0 0x0
0xffff9f800000e5f8 0048 0000 0x0 0x0
0xffff9f800000e670 0048 0000 0x0 0x0
0xffff9f800000e6e8 0048 0000 0x0 0x0
0xffff9f800000e760 0048 0000 0x0 0x0
0xffff9f800000e7d8 0048 0000 0x0 0x0
0xffff9f800000e850 0048 0000 0x0 0x0
0xffff9f800000e8c8 0048 0000 0x0 0x0
0xffff9f800000e940 0048 0000 0x0 0x0
0xffff9f800000e9b8 0008 0000 0x0 0x0
0xffff9f800000ea30 0008 0000 0x0 0x0
0xffff9f800000eaa8 0008 0000 0x0 0x0
0xffff9f800000eb20 0008 0000 0x0 0x0
0xffff9f800000eb98 0008 0000 0x0 0x0
0xffff9f800000ec10 0008 0000 0x0 0x0
0xffff9f800000ec88 0008 0000 0x0 0x0
0xffff9f800000ed00 0008 0000 0x0 0x0
0xffff9f800000ed78 0008 0000 0x0 0x0
0xffff9f800000edf0 0008 0000 0x0 0x0
0xffff9f800000ee68 0008 0000 0x0 0x0
0xffff9f800000eee0 0008 0000 0x0 0x0
0xffff9f800000ef58 0008 0000 0x0 0x0
0xffff9f800000efd0 0008 0000 0x0 0x0
0xffff9f800000f048 0008 0000 0x0 0x0
0xffff9f800000f0c0 0008 0000 0x0 0x0
0xffff9f800000f138 0008 0000 0x0 0x0
0xffff9f800000f1b0 0008 0000 0x0 0x0
0xffff9f800000f228 0008 0000 0x0 0x0
0xffff9f800000f2a0 0008 0000 0x0 0x0
0xffff9f800000f318 0008 0000 0x0 0x0
0xffff9f800000f390 0008 0000 0x0 0x0
0xffff9f800000f408 0008 0000 0x0 0x0
0xffff9f800000f480 0008 0000 0x0 0x0
0xffff9f800000f4f8 0008 0000 0x0 0x0
0xffff9f800000f570 0008 0000 0x0 0x0
0xffff9f800000f5e8 0008 0000 0x0 0x0
0xffff9f800000f660 0008 0000 0x0 0x0
0xffff9f800000f6d8 0008 0000 0x0 0x0
0xffff9f800000f750 0008 0000 0x0 0x0
0xffff9f800000f7c8 0008 0000 0x0 0x0
0xffff9f800000f840 0008 0000 0x0 0x0
0xffff9f800000f8b8 0008 0000 0x0 0x0
0xffff9f800000f930 0008 0000 0x0 0x0
0xffff9f800000f9a8 0008 0000 0x0 0x0
0xffff9f800000fa20 0008 0000 0x0 0x0
0xffff9f800000fa98 0008 0000 0x0 0x0
0xffff9f800000fb10 0008 0000 0x0 0x0
0xffff9f800000fb88 0008 0000 0x0 0x0
0xffff9f800000fc00 0008 0000 0x0 0x0
0xffff9f800000fc78 0008 0000 0x0 0x0
0xffff9f800000fcf0 0008 0000 0x0 0x0
0xffff9f800000fd68 0008 0000 0x0 0x0
0xffff9f800000fde0 0008 0000 0x0 0x0
0xffff9f800000fe58 0008 0000 0x0 0x0
0xffff9f800000fed0 0008 0000 0x0 0x0
0xffff9f800000ff48 0008 0000 0x0 0x0
0xffff9f800000ffc0 0008 0000 0x0 0x0
0xffff9f8000010038 0008 0000 0x0 0x0
0xffff9f80000100b0 0008 0000 0x0 0x0
0xffff9f8000010128 0008 0000 0x0 0x0
0xffff9f80000101a0 0008 0000 0x0 0x0
0xffff9f8000010218 0008 0000 0x0 0x0
0xffff9f8000010290 0008 0000 0x0 0x0
0xffff9f8000010308 0048 0000 0x0 0x0
0xffff9f8000010380 0048 0000 0x0 0x0
0xffff9f80000103f8 0048 0000 0x0 0x0
0xffff9f8000010470 0048 0000 0x0 0x0
0xffff9f80000104e8 0048 0000 0x0 0x0
0xffff9f8000010560 0048 0000 0x0 0x0
0xffff9f80000105d8 0048 0000 0x0 0x0
0xffff9f8000010650 0048 0000 0x0 0x0
0xffff9f80000106c8 0048 0000 0x0 0x0
0xffff9f8000010740 0048 0000 0x0 0x0
0xffff9f80000107b8 0048 0000 0x0 0x0
0xffff9f8000010830 0048 0000 0x0 0x0
0xffff9f80000108a8 0048 0000 0x0 0x0
0xffff9f8000010920 0048 0000 0x0 0x0
0xffff9f8000010998 0048 0000 0x0 0x0
0xffff9f8000010a10 0048 0000 0x0 0x0
0xffff9f8000010a88 0048 0000 0x0 0x0
0xffff9f8000010b00 0048 0000 0x0 0x0
0xffff9f8000010b78 0048 0000 0x0 0x0
0xffff9f8000010bf0 0048 0000 0x0 0x0
0xffff9f8000010c68 0048 0000 0x0 0x0
0xffff9f8000010ce0 0049 0000 0x0 0x0
0xffff9f8000010d58 0048 0000 0x0 0x0
0xffff9f8000010dd0 0048 0000 0x0 0x0
0xffff9f8000010e48 0048 0000 0x0 0x0
0xffff9f8000010ec0 0048 0000 0x0 0x0
0xffff9f8000010f38 0048 0000 0x0 0x0
0xffff9f8000010fb0 0048 0000 0x0 0x0
0xffff9f8000011028 0048 0000 0x0 0x0
0xffff9f80000110a0 0049 0000 0x0 0x0
0xffff9f8000011118 0049 0000 0x0 0x0
0xffff9f8000011190 0048 0000 0x0 0x0
0xffff9f8000011208 0048 0000 0x0 0x0
0xffff9f8000011280 0048 0000 0x0 0x0
0xffff9f80000112f8 0048 0000 0x0 0x0
0xffff9f8000011370 0048 0000 0x0 0x0
0xffff9f80000113e8 0048 0000 0x0 0x0
0xffff9f8000011460 0049 0000 0x0 0x0
0xffff9f80000114d8 0049 0000 0x0 0x0
0xffff9f8000011550 0048 0000 0x0 0x0
0xffff9f80000115c8 0048 0000 0x0 0x0
0xffff9f8000011640 0048 0000 0x0 0x0
0xffff9f80000116b8 0049 0000 0x0 0x0
0xffff9f8000011730 0048 0000 0x0 0x0
0xffff9f80000117a8 0049 0000 0x0 0x0
0xffff9f8000011820 0049 0000 0x0 0x0
0xffff9f8000011898 0049 0000 0x0 0x0
0xffff9f8000011910 0048 0000 0x0 0x0
0xffff9f8000011988 0008 0000 0x0 0x0
0xffff9f8000011a00 0008 0000 0x0 0x0
0xffff9f8000011a78 0008 0000 0x0 0x0
0xffff9f8000011af0 0008 0000 0x0 0x0
0xffff9f8000011b68 0008 0000 0x0 0x0
0xffff9f8000011be0 0008 0000 0x0 0x0
0xffff9f8000011c58 0008 0000 0x0 0x0
0xffff9f8000011cd0 0008 0000 0x0 0x0
0xffff9f8000011d48 0008 0000 0x0 0x0
0xffff9f8000011dc0 0008 0000 0x0 0x0
0xffff9f8000011e38 0008 0000 0x0 0x0
0xffff9f8000011eb0 0008 0000 0x0 0x0
0xffff9f8000011f28 0008 0000 0x0 0x0
0xffff9f8000011fa0 0008 0000 0x0 0x0
0xffff9f8000012018 0008 0000 0x0 0x0
0xffff9f8000012090 0008 0000 0x0 0x0
0xffff9f8000012108 0008 0000 0x0 0x0
0xffff9f8000012180 0008 0000 0x0 0x0
0xffff9f80000121f8 0008 0000 0x0 0x0
0xffff9f8000012270 0008 0000 0x0 0x0
0xffff9f80000122e8 0008 0000 0x0 0x0
0xffff9f8000012360 0008 0000 0x0 0x0
0xffff9f80000123d8 0008 0000 0x0 0x0
0xffff9f8000012450 0008 0000 0x0 0x0
0xffff9f80000124c8 0008 0000 0x0 0x0
0xffff9f8000012540 0008 0000 0x0 0x0
0xffff9f80000125b8 0008 0000 0x0 0x0
0xffff9f8000012630 0008 0000 0x0 0x0
0xffff9f80000126a8 0008 0000 0x0 0x0
0xffff9f8000012720 0008 0000 0x0 0x0
0xffff9f8000012798 0008 0000 0x0 0x0
0xffff9f8000012810 0008 0000 0x0 0x0
0xffff9f8000012888 0008 0000 0x0 0x0
0xffff9f8000012900 0008 0000 0x0 0x0
0xffff9f8000012978 0008 0000 0x0 0x0
0xffff9f80000129f0 0008 0000 0x0 0x0
0xffff9f8000012a68 0008 0000 0x0 0x0
0xffff9f8000012ae0 0008 0000 0x0 0x0
0xffff9f8000012b58 0008 0000 0x0 0x0
0xffff9f8000012bd0 0008 0000 0x0 0x0
0xffff9f8000012c48 0008 0000 0x0 0x0
0xffff9f8000012cc0 0008 0000 0x0 0x0
0xffff9f8000012d38 0008 0000 0x0 0x0
0xffff9f8000012db0 0008 0000 0x0 0x0
0xffff9f8000012e28 0008 0000 0x0 0x0
0xffff9f8000012ea0 0008 0000 0x0 0x0
0xffff9f8000012f18 0008 0000 0x0 0x0
0xffff9f8000012f90 0008 0000 0x0 0x0
0xffff9f8000013008 0008 0000 0x0 0x0
0xffff9f8000013080 0008 0000 0x0 0x0
0xffff9f80000130f8 0008 0000 0x0 0x0
0xffff9f8000013170 0008 0000 0x0 0x0
0xffff9f80000131e8 0008 0000 0x0 0x0
0xffff9f8000013260 0008 0000 0x0 0x0
0xffff9f80000132d8 0008 0000 0x0 0x0
0xffff9f8000013350 0008 0000 0x0 0x0
0xffff9f80000133c8 0008 0000 0x0 0x0
0xffff9f8000013440 0008 0000 0x0 0x0
0xffff9f80000134b8 0008 0000 0x0 0x0
0xffff9f8000013530 0008 0000 0x0 0x0
0xffff9f80000135a8 0008 0000 0x0 0x0
0xffff9f8000013620 0008 0000 0x0 0x0
0xffff9f8000013698 0008 0000 0x0 0x0
0xffff9f8000013710 0008 0000 0x0 0x0
0xffff9f8000013788 0008 0000 0x0 0x0
0xffff9f8000013800 0008 0000 0x0 0x0
0xffff9f8000013878 0008 0000 0x0 0x0
0xffff9f80000138f0 0008 0000 0x0 0x0
0xffff9f8000013968 0008 0000 0x0 0x0
0xffff9f80000139e0 0008 0000 0x0 0x0
0xffff9f8000013a58 0008 0000 0x0 0x0
0xffff9f8000013ad0 0008 0000 0x0 0x0
0xffff9f8000013b48 0008 0000 0x0 0x0
0xffff9f8000013bc0 0008 0000 0x0 0x0
0xffff9f8000013c38 0008 0000 0x0 0x0
0xffff9f8000013cb0 0008 0000 0x0 0x0
0xffff9f8000013d28 0008 0000 0x0 0x0
0xffff9f8000013da0 0008 0000 0x0 0x0
0xffff9f8000013e18 0008 0000 0x0 0x0
0xffff9f8000013e90 0008 0000 0x0 0x0
0xffff9f8000013f08 0008 0000 0x0 0x0
0xffff9f8000013f80 0008 0000 0x0 0x0
0xffff9f8000013ff8 0008 0000 0x0 0x0
0xffff9f8000014070 0008 0000 0x0 0x0
0xffff9f80000140e8 0008 0000 0x0 0x0
0xffff9f8000014160 0008 0000 0x0 0x0
0xffff9f80000141d8 0008 0000 0x0 0x0
0xffff9f8000014250 0008 0000 0x0 0x0
0xffff9f80000142c8 0008 0000 0x0 0x0
0xffff9f8000014340 0008 0000 0x0 0x0
0xffff9f80000143b8 0008 0000 0x0 0x0
0xffff9f8000014430 0008 0000 0x0 0x0
0xffff9f80000144a8 0008 0000 0x0 0x0
0xffff9f8000014520 0008 0000 0x0 0x0
0xffff9f8000014598 0008 0000 0x0 0x0
0xffff9f8000014610 0008 0000 0x0 0x0
0xffff9f8000014688 0008 0000 0x0 0x0
0xffff9f8000014700 0008 0000 0x0 0x0
0xffff9f8000014778 0008 0000 0x0 0x0
0xffff9f80000147f0 0008 0000 0x0 0x0
0xffff9f8000014868 0008 0000 0x0 0x0
0xffff9f80000148e0 0008 0000 0x0 0x0
0xffff9f8000014958 0008 0000 0x0 0x0
0xffff9f80000149d0 0008 0000 0x0 0x0
0xffff9f8000014a48 0008 0000 0x0 0x0
0xffff9f8000014ac0 0008 0000 0x0 0x0
0xffff9f8000014b38 0008 0000 0x0 0x0
0xffff9f8000014bb0 0008 0000 0x0 0x0
0xffff9f8000014c28 0008 0000 0x0 0x0
0xffff9f8000014ca0 0008 0000 0x0 0x0
0xffff9f8000014d18 0008 0000 0x0 0x0
0xffff9f8000014d90 0008 0000 0x0 0x0
0xffff9f8000014e08 0008 0000 0x0 0x0
0xffff9f8000014e80 0008 0000 0x0 0x0
0xffff9f8000014ef8 0008 0000 0x0 0x0
0xffff9f8000014f70 0008 0000 0x0 0x0
0xffff9f8000014fe8 0008 0000 0x0 0x0
0xffff9f8000015060 0008 0000 0x0 0x0
0xffff9f80000150d8 0008 0000 0x0 0x0
0xffff9f8000015150 0008 0000 0x0 0x0
0xffff9f80000151c8 0008 0000 0x0 0x0
0xffff9f8000015240 0008 0000 0x0 0x0
0xffff9f80000152b8 0008 0000 0x0 0x0
0xffff9f8000015330 0008 0000 0x0 0x0
0xffff9f80000153a8 0008 0000 0x0 0x0
0xffff9f8000015420 0008 0000 0x0 0x0
0xffff9f8000015498 0008 0000 0x0 0x0
0xffff9f8000015510 0008 0000 0x0 0x0
0xffff9f8000015588 0008 0000 0x0 0x0
0xffff9f8000015600 0008 0000 0x0 0x0
0xffff9f8000015678 0008 0000 0x0 0x0
0xffff9f80000156f0 0008 0000 0x0 0x0
0xffff9f8000015768 0008 0000 0x0 0x0
0xffff9f80000157e0 0008 0000 0x0 0x0
0xffff9f8000015858 0008 0000 0x0 0x0
0xffff9f80000158d0 0008 0000 0x0 0x0
0xffff9f8000015948 0008 0000 0x0 0x0
0xffff9f80000159c0 0008 0000 0x0 0x0
0xffff9f8000015a38 0008 0000 0x0 0x0
0xffff9f8000015ab0 0008 0000 0x0 0x0
0xffff9f8000015b28 0008 0000 0x0 0x0
0xffff9f8000015ba0 0008 0000 0x0 0x0
0xffff9f8000015c18 0008 0000 0x0 0x0
0xffff9f8000015c90 0008 0000 0x0 0x0
0xffff9f8000015d08 0008 0000 0x0 0x0
0xffff9f8000015d80 0008 0000 0x0 0x0
0xffff9f8000015df8 0008 0000 0x0 0x0
0xffff9f8000015e70 0008 0000 0x0 0x0
0xffff9f8000015ee8 0008 0000 0x0 0x0
0xffff9f8000015f60 0008 0000 0x0 0x0
0xffff9f8000015fd8 0008 0000 0x0 0x0
0xffff9f8000016050 0008 0000 0x0 0x0
0xffff9f80000160c8 0008 0000 0x0 0x0
0xffff9f8000016140 0008 0000 0x0 0x0
0xffff9f80000161b8 0008 0000 0x0 0x0
0xffff9f8000016230 0008 0000 0x0 0x0
0xffff9f80000162a8 0008 0000 0x0 0x0
0xffff9f8000016320 0008 0000 0x0 0x0
0xffff9f8000016398 0008 0000 0x0 0x0
0xffff9f8000016410 0008 0000 0x0 0x0
0xffff9f8000016488 0008 0000 0x0 0x0
0xffff9f8000016500 0008 0000 0x0 0x0
0xffff9f8000016578 0008 0000 0x0 0x0
0xffff9f80000165f0 0008 0000 0x0 0x0
0xffff9f8000016668 0008 0000 0x0 0x0
0xffff9f80000166e0 0008 0000 0x0 0x0
0xffff9f8000016758 0008 0000 0x0 0x0
0xffff9f80000167d0 0008 0000 0x0 0x0
0xffff9f8000016848 0008 0000 0x0 0x0
0xffff9f80000168c0 0008 0000 0x0 0x0
0xffff9f8000016938 0008 0000 0x0 0x0
0xffff9f80000169b0 0008 0000 0x0 0x0
0xffff9f8000016a28 0008 0000 0x0 0x0
0xffff9f8000016aa0 0008 0000 0x0 0x0
0xffff9f8000016b18 0008 0000 0x0 0x0
0xffff9f8000016b90 0008 0000 0x0 0x0
0xffff9f8000016c08 0008 0000 0x0 0x0
0xffff9f8000016c80 0008 0000 0x0 0x0
0xffff9f8000016cf8 0008 0000 0x0 0x0
0xffff9f8000016d70 0008 0000 0x0 0x0
0xffff9f8000016de8 0008 0000 0x0 0x0
0xffff9f8000016e60 0008 0000 0x0 0x0
0xffff9f8000016ed8 0008 0000 0x0 0x0
0xffff9f8000016f50 0008 0000 0x0 0x0
0xffff9f8000016fc8 0008 0000 0x0 0x0
0xffff9f8000017040 0008 0000 0x0 0x0
0xffff9f80000170b8 0008 0000 0x0 0x0
0xffff9f8000017130 0008 0000 0x0 0x0
0xffff9f80000171a8 0008 0000 0x0 0x0
0xffff9f8000017220 0008 0000 0x0 0x0
0xffff9f8000017298 0008 0000 0x0 0x0
0xffff9f8000017310 0008 0000 0x0 0x0
0xffff9f8000017388 0008 0000 0x0 0x0
0xffff9f8000017400 0008 0000 0x0 0x0
0xffff9f8000017478 0008 0000 0x0 0x0
0xffff9f80000174f0 0008 0000 0x0 0x0
0xffff9f8000017568 0008 0000 0x0 0x0
0xffff9f80000175e0 0008 0000 0x0 0x0
0xffff9f8000017658 0008 0000 0x0 0x0
0xffff9f80000176d0 0008 0000 0x0 0x0
0xffff9f8000017748 0008 0000 0x0 0x0
0xffff9f80000177c0 0008 0000 0x0 0x0
0xffff9f8000017838 0008 0000 0x0 0x0
0xffff9f80000178b0 0008 0000 0x0 0x0
0xffff9f8000017928 0008 0000 0x0 0x0
0xffff9f80000179a0 0008 0000 0x0 0x0
0xffff9f8000017a18 0008 0000 0x0 0x0
0xffff9f8000017a90 0008 0000 0x0 0x0
0xffff9f8000017b08 0008 0000 0x0 0x0
0xffff9f8000017b80 0008 0000 0x0 0x0
0xffff9f8000017bf8 0008 0000 0x0 0x0
0xffff9f8000017c70 0008 0000 0x0 0x0
0xffff9f8000017ce8 0008 0000 0x0 0x0
0xffff9f8000017d60 0008 0000 0x0 0x0
0xffff9f8000017dd8 0008 0000 0x0 0x0
0xffff9f8000017e50 0008 0000 0x0 0x0
0xffff9f8000017ec8 0008 0000 0x0 0x0
0xffff9f8000017f40 0008 0000 0x0 0x0
0xffff9f8000017fb8 0008 0000 0x0 0x0
0xffff9f8000018030 0008 0000 0x0 0x0
0xffff9f80000180a8 0008 0000 0x0 0x0
0xffff9f8000018120 0008 0000 0x0 0x0
0xffff9f8000018198 0008 0000 0x0 0x0
0xffff9f8000018210 0008 0000 0x0 0x0
0xffff9f8000018288 0008 0000 0x0 0x0
0xffff9f8000018300 0008 0000 0x0 0x0
0xffff9f8000018378 0008 0000 0x0 0x0
0xffff9f80000183f0 0008 0000 0x0 0x0
0xffff9f8000018468 0008 0000 0x0 0x0
0xffff9f80000184e0 0008 0000 0x0 0x0
0xffff9f8000018558 0008 0000 0x0 0x0
0xffff9f80000185d0 0008 0000 0x0 0x0
0xffff9f8000018648 0008 0000 0x0 0x0
0xffff9f80000186c0 0008 0000 0x0 0x0
0xffff9f8000018738 0008 0000 0x0 0x0
0xffff9f80000187b0 0008 0000 0x0 0x0
0xffff9f8000018828 0008 0000 0x0 0x0
0xffff9f80000188a0 0008 0000 0x0 0x0
0xffff9f8000018918 0008 0000 0x0 0x0
0xffff9f8000018990 0008 0000 0x0 0x0
0xffff9f8000018a08 0008 0000 0x0 0x0
0xffff9f8000018a80 0008 0000 0x0 0x0
0xffff9f8000018af8 0008 0000 0x0 0x0
0xffff9f8000018b70 0008 0000 0x0 0x0
0xffff9f8000018be8 0008 0000 0x0 0x0
0xffff9f8000018c60 0008 0000 0x0 0x0
0xffff9f8000018cd8 0008 0000 0x0 0x0
0xffff9f8000018d50 0008 0000 0x0 0x0
0xffff9f8000018dc8 0008 0000 0x0 0x0
0xffff9f8000018e40 0008 0000 0x0 0x0
0xffff9f8000018eb8 0008 0000 0x0 0x0
0xffff9f8000018f30 0008 0000 0x0 0x0
0xffff9f8000018fa8 0008 0000 0x0 0x0
0xffff9f8000019020 0008 0000 0x0 0x0
0xffff9f8000019098 0008 0000 0x0 0x0
0xffff9f8000019110 0008 0000 0x0 0x0
0xffff9f8000019188 0008 0000 0x0 0x0
0xffff9f8000019200 0008 0000 0x0 0x0
0xffff9f8000019278 0008 0000 0x0 0x0
0xffff9f80000192f0 0008 0000 0x0 0x0
0xffff9f8000019368 0008 0000 0x0 0x0
0xffff9f80000193e0 0008 0000 0x0 0x0
0xffff9f8000019458 0008 0000 0x0 0x0
0xffff9f80000194d0 0008 0000 0x0 0x0
0xffff9f8000019548 0008 0000 0x0 0x0
0xffff9f80000195c0 0008 0000 0x0 0x0
0xffff9f8000019638 0008 0000 0x0 0x0
0xffff9f80000196b0 0008 0000 0x0 0x0
0xffff9f8000019728 0008 0000 0x0 0x0
0xffff9f80000197a0 0008 0000 0x0 0x0
0xffff9f8000019818 0008 0000 0x0 0x0
0xffff9f8000019890 0008 0000 0x0 0x0
0xffff9f8000019908 0008 0000 0x0 0x0
0xffff9f8000019980 0008 0000 0x0 0x0
0xffff9f80000199f8 0008 0000 0x0 0x0
0xffff9f8000019a70 0008 0000 0x0 0x0
0xffff9f8000019ae8 0008 0000 0x0 0x0
0xffff9f8000019b60 0008 0000 0x0 0x0
0xffff9f8000019bd8 0008 0000 0x0 0x0
0xffff9f8000019c50 0008 0000 0x0 0x0
0xffff9f8000019cc8 0008 0000 0x0 0x0
0xffff9f8000019d40 0008 0000 0x0 0x0
0xffff9f8000019db8 0008 0000 0x0 0x0
0xffff9f8000019e30 0008 0000 0x0 0x0
0xffff9f8000019ea8 0008 0000 0x0 0x0
0xffff9f8000019f20 0008 0000 0x0 0x0
0xffff9f8000019f98 0008 0000 0x0 0x0
0xffff9f800001a010 0008 0000 0x0 0x0
0xffff9f800001a088 0008 0000 0x0 0x0
0xffff9f800001a100 0008 0000 0x0 0x0
0xffff9f800001a178 0008 0000 0x0 0x0
0xffff9f800001a1f0 0008 0000 0x0 0x0
0xffff9f800001a268 0008 0000 0x0

---
This bug is generated by a bot. It may contain errors.
See https://goo.gl/tpsmEJ for more information about syzbot.
syzbot engineers can be reached at syzk...@googlegroups.com.

syzbot will keep track of this bug report. See:
https://goo.gl/tpsmEJ#status for how to communicate with syzbot.

[syzbot]

syzbot has found a reproducer for the following crash on:

HEAD commit: eefd0580 npfctl: implement table replace subcommand. Contr..
git tree: netbsd

console output: https://syzkaller.appspot.com/x/log.txt?x=12429f9d600000

kernel config: https://syzkaller.appspot.com/x/.config?x=824b23e1f4b6c76b
dashboard link: https://syzkaller.appspot.com/bug?extid=1b140861598801aa5220

syz repro: https://syzkaller.appspot.com/x/repro.syz?x=166abbd3600000

IMPORTANT: if you fix the bug, please add the following tag to the commit:
Reported-by: syzbot+1b1408...@syzkaller.appspotmail.com

[ 84.2616989] panic: UBSan: Undefined Behavior in

/syzkaller/managers/netbsd-kubsan/kernel/sys/kern/sysv_shm.c:215:2, member
access within null pointer of type 'struct shmmap_entry'

[ 84.2616989] cpu0: Begin traceback...
[ 84.2717060] vpanic() at netbsd:vpanic+0x258 sys/kern/subr_prf.c:336
[ 84.3118052] isAlreadyReported() at netbsd:isAlreadyReported
[ 84.3418748] HandleTypeMismatch() at netbsd:HandleTypeMismatch
[ 84.3719442] HandleTypeMismatch() at netbsd:HandleTypeMismatch+0x7b
sys/../common/lib/libc/misc/ubsan.c:396
[ 84.4120423] shm_delete_mapping() at netbsd:shm_delete_mapping+0x337
sys/kern/sysv_shm.c:215
[ 84.4421163] sys_shmat() at netbsd:sys_shmat+0x605 sys/kern/sysv_shm.c:485
[ 84.4721804] sys___syscall() at netbsd:sys___syscall+0x132 sy_call
sys/sys/syscallvar.h:65 [inline]
[ 84.4721804] sys___syscall() at netbsd:sys___syscall+0x132
sys/kern/sys_syscall.c:77
[ 84.5122740] syscall() at netbsd:syscall+0x1ce sy_call
sys/sys/syscallvar.h:65 [inline]
[ 84.5122740] syscall() at netbsd:syscall+0x1ce sy_invoke
sys/sys/syscallvar.h:94 [inline]
[ 84.5122740] syscall() at netbsd:syscall+0x1ce
sys/arch/x86/x86/syscall.c:138
[ 84.5222984] --- syscall (number 198) ---
[ 84.5323231] 7bd71a643b9a:
[ 84.5431570] cpu0: End traceback...
[ 84.5431570] fatal breakpoint trap in supervisor mode
[ 84.5528737] trap type 1 code 0 rip 0xffffffff8021ddad cs 0x8 rflags
0x286 cr2 0 ilevel 0 rsp 0xffff9d80a6e6b8b0
[ 84.5630315] curlwp 0xffffe7dc0e8c5120 pid 1349.3 lowest kstack
0xffff9d80a6e682c0
Stopped in pid 1349.3 (syz-executor.0) at netbsd:breakpoint+0x5:

leave
?
breakpoint() at netbsd:breakpoint+0x5
db_panic() at netbsd:db_panic+0xd9 sys/ddb/db_panic.c:67
vpanic() at netbsd:vpanic+0x258 sys/kern/subr_prf.c:336
isAlreadyReported() at netbsd:isAlreadyReported
HandleTypeMismatch() at netbsd:HandleTypeMismatch
HandleTypeMismatch() at netbsd:HandleTypeMismatch+0x7b
sys/../common/lib/libc/misc/ubsan.c:396
shm_delete_mapping() at netbsd:shm_delete_mapping+0x337
sys/kern/sysv_shm.c:215
sys_shmat() at netbsd:sys_shmat+0x605 sys/kern/sysv_shm.c:485
sys___syscall() at netbsd:sys___syscall+0x132 sy_call
sys/sys/syscallvar.h:65 [inline]
sys___syscall() at netbsd:sys___syscall+0x132 sys/kern/sys_syscall.c:77
syscall() at netbsd:syscall+0x1ce sy_call sys/sys/syscallvar.h:65 [inline]
syscall() at netbsd:syscall+0x1ce sy_invoke sys/sys/syscallvar.h:94 [inline]
syscall() at netbsd:syscall+0x1ce sys/arch/x86/x86/syscall.c:138
--- syscall (number 198) ---

7bd71a643b9a:

ds b8b0
es cb1
fs b8a0
gs cac0

rdi ffffe7dc138b54e0
rsi ffffe7dc0e8c5408
rbp ffff9d80a6e6b8b0

rbx ffffffff8342cac0 cpu_info_primary
rdx 2
rcx 0

rax 0

r8 ffffffff8342cac0 cpu_info_primary
r9 0

r10 ffff9d80a6e6af60

r11 10
r12 104
r13 ffffffff830214c0 ostype+0xecf88

r14 ffff9d80a6e6b928

r15 ffffffff84cdef00 pool_head+0x4c0
rip ffffffff8021ddad breakpoint+0x5
cs 8
rflags 286

rsp ffff9d80a6e6b8b0

ss 10
netbsd:breakpoint+0x5: leave
PID LID S CPU FLAGS STRUCT LWP * NAME WAIT

1349 8 2 1 0 ffffe7dc09608940 syz-executor.0
1349 7 2 1 0 ffffe7dc0c461920 syz-executor.0
1349 6 2 1 0 ffffe7dc0ead6080 syz-executor.0
1349 5 2 1 0 ffffe7dc0c4610a0 syz-executor.0
1349 4 2 1 0 ffffe7dc0dcef160 syz-executor.0
1349 > 3 7 0 0 ffffe7dc0e8c5120 syz-executor.0
1349 2 2 0 0 ffffe7dc0e8c5560 syz-executor.0
1349 > 1 7 1 10000000 ffffe7dc0e8c59a0 syz-executor.0
430 1 2 1 0 ffffe7db051ef8e0 syz-executor.0
504 10 3 1 80 ffffe7dc0e8ce540 syz-execprog kqueue
504 9 3 1 80 ffffe7db051ef4a0 syz-execprog parked
504 8 3 0 80 ffffe7db062586a0 syz-execprog parked
504 7 3 1 80 ffffe7db20ff3b20 syz-execprog parked
504 6 3 0 80 ffffe7db06258260 syz-execprog parked
504 5 3 1 80 ffffe7db379c7320 syz-execprog parked
504 4 3 0 80 ffffe7db5b00d680 syz-execprog parked
504 3 3 0 80 ffffe7db59009340 syz-execprog parked
504 2 3 0 80 ffffe7db59009bc0 syz-execprog parked
504 1 3 1 80 ffffe7dbe3289b80 syz-execprog parked
40 1 3 0 80 ffffe7db0980c200 sshd select
567 1 3 1 80 ffffe7db051ef060 getty nanoslp
561 1 3 1 80 ffffe7dc11478040 getty nanoslp
447 1 3 0 80 ffffe7db5b00d240 getty nanoslp
556 1 3 1 80 ffffe7db5b00dac0 getty ttyraw
542 1 3 0 80 ffffe7dc114788c0 cron nanoslp
548 1 3 0 80 ffffe7dc11478480 inetd kqueue
355 1 3 1 80 ffffe7db379c7760 sshd select
490 1 3 1 80 ffffe7db59009780 powerd kqueue
309 1 3 1 80 ffffe7db379c7ba0 syslogd kqueue
276 1 3 1 80 ffffe7dbe3289300 dhcpcd kqueue
175 1 3 1 80 ffffe7db064b3280 dhcpcd kqueue
1 1 3 0 80 ffffe7db0400b620 init wait
0 58 3 0 204 ffffe7db0980c640 physiod physiod
0 57 3 0 204 ffffe7db04503220 pooldrain pooldrain
0 56 3 0 204 ffffe7db04503aa0 aiodoned aiodoned
0 55 3 0 200 ffffe7db04503660 ioflush syncer
0 54 3 0 200 ffffe7db0980ca80 pgdaemon pgdaemon
0 51 3 0 200 ffffe7db0400ba60 npfgc-0 npfgccv
0 50 3 0 204 ffffe7db0400b1e0 rt_free rt_free
0 49 3 0 204 ffffe7db0400ca40 unpgc unpgc
0 48 3 1 204 ffffe7db0400c600 key_timehandler
key_timehandler
0 47 3 1 204 ffffe7db0400c1c0 icmp6_wqinput/1
icmp6_wqinput
0 46 3 0 204 ffffe7db03f85a20 icmp6_wqinput/0
icmp6_wqinput
0 45 3 0 204 ffffe7db03f57160 nd6_timer nd6_timer
0 44 3 1 204 ffffe7db03f575a0 carp6_wqinput/1
carp6_wqinput
0 43 3 0 204 ffffe7db03f579e0 carp6_wqinput/0
carp6_wqinput
0 42 3 1 204 ffffe7db03f5e180 carp_wqinput/1
carp_wqinput
0 41 3 0 204 ffffe7db03f5e5c0 carp_wqinput/0
carp_wqinput
0 40 3 1 204 ffffe7db03f5ea00 icmp_wqinput/1
icmp_wqinput
0 39 3 0 204 ffffe7db03f851a0 icmp_wqinput/0
icmp_wqinput
0 38 3 1 204 ffffe7db016fc9c0 rt_timer rt_timer
0 37 3 0 204 ffffe7db03f855e0 vmem_rehash vmem_rehash
0 27 3 0 204 ffffe7db016fc580 scsibus0 sccomp
0 26 3 0 200 ffffe7db016fc140 pms0 pmsreset
0 25 3 1 204 ffffe7db016879a0 xcall/1 xcall
0 24 1 1 200 ffffe7db01687560 softser/1
0 23 1 1 200 ffffe7db01687120 softclk/1
0 22 1 1 200 ffffe7db01678980 softbio/1
0 21 1 1 200 ffffe7db01678540 softnet/1
0 20 1 1 201 ffffe7db01678100 idle/1
0 19 3 0 204 ffffe7dc11b82960 lnxpwrwq lnxpwrwq
0 18 3 0 204 ffffe7dc11b82520 lnxlngwq lnxlngwq
0 17 3 0 204 ffffe7dc11b820e0 lnxsyswq lnxsyswq
0 16 3 0 204 ffffe7dc11ba1940 lnxrcugc lnxrcugc
0 15 3 0 204 ffffe7dc11ba1500 sysmon smtaskq
0 14 3 0 204 ffffe7dc11ba10c0 pmfsuspend pmfsuspend
0 13 3 0 204 ffffe7dc11fba920 pmfevent pmfevent
0 12 3 0 204 ffffe7dc11fba4e0 sopendfree sopendfr
0 11 3 0 204 ffffe7dc11fba0a0 nfssilly nfssilly
0 10 3 1 200 ffffe7dc133ef900 cachegc cachegc
0 9 3 0 204 ffffe7dc133ef4c0 vdrain vdrain
0 8 3 0 200 ffffe7dc133ef080 modunload mod_unld
0 7 3 0 204 ffffe7dc1340a8e0 xcall/0 xcall
0 6 1 0 200 ffffe7dc1340a4a0 softser/0
0 5 1 0 200 ffffe7dc1340a060 softclk/0
0 4 1 0 200 ffffe7dc134298c0 softbio/0
0 3 1 0 200 ffffe7dc13429480 softnet/0
0 2 1 0 201 ffffe7dc13429040 idle/0
0 1 3 0 200 ffffffff84c0a280 swapper uvm
[Locks tracked through LWPs]

Locks held by an LWP (syz-executor.0):
Lock 0 (initialized at shminit)
lock address : 0xffffffff85a6d400 type : sleep/adaptive
initialized : 0xffffffff81cb7170
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
current cpu : 0 last held: 0

current lwp : 0xffffe7dc0e8c5120 last held: 0xffffe7dc0e8c5120

last locked* : 0xffffffff81cb50f7 unlocked : 0xffffffff81cb4910

owner field : 0xffffe7dc0e8c5120 wait/spin: 0/0

Turnstile chain at 0xffffffff85a6c240.
=> No active turnstile for this lock.

[Locks tracked through CPUs]

PAGE FLAG PQ UOBJECT UANON

0xffff9d8000003180 0041 0000 0x0 0x0
0xffff9d80000031f8 0041 0000 0x0 0x0
0xffff9d8000003270 0041 0000 0x0 0x0
0xffff9d80000032e8 0041 0000 0x0 0x0
0xffff9d8000003360 0041 0000 0x0 0x0
0xffff9d80000033d8 0041 0000 0x0 0x0
0xffff9d8000003450 0041 0000 0x0 0x0
0xffff9d80000034c8 0041 0000 0x0 0x0
0xffff9d8000003540 0040 0000 0x0 0x0
0xffff9d80000035b8 0048 0000 0x0 0x0
0xffff9d8000003630 0048 0000 0x0 0x0
0xffff9d80000036a8 0048 0000 0x0 0x0
0xffff9d8000003720 0048 0000 0x0 0x0
0xffff9d8000003798 0048 0000 0x0 0x0
0xffff9d8000003810 0049 0000 0x0 0x0
0xffff9d8000003888 0049 0000 0x0 0x0
0xffff9d8000003900 0040 0000 0x0 0x0
0xffff9d8000003978 0040 0000 0x0 0x0
0xffff9d80000039f0 0040 0000 0x0 0x0
0xffff9d8000003a68 0040 0000 0x0 0x0
0xffff9d8000003ae0 0040 0000 0x0 0x0
0xffff9d8000003b58 0040 0000 0x0 0x0
0xffff9d8000003bd0 0049 0000 0x0 0x0
0xffff9d8000003c48 0040 0000 0x0 0x0
0xffff9d8000003cc0 0048 0000 0x0 0x0
0xffff9d8000003d38 0048 0000 0x0 0x0
0xffff9d8000003db0 0048 0000 0x0 0x0
0xffff9d8000003e28 0049 0000 0x0 0x0
0xffff9d8000003ea0 0048 0000 0x0 0x0
0xffff9d8000003f18 0048 0000 0x0 0x0
0xffff9d8000003f90 0040 0000 0x0 0x0
0xffff9d8000004008 0048 0000 0x0 0x0
0xffff9d8000004080 0049 0000 0x0 0x0
0xffff9d80000040f8 0048 0000 0x0 0x0
0xffff9d8000004170 0048 0000 0x0 0x0
0xffff9d80000041e8 0048 0000 0x0 0x0
0xffff9d8000004260 0048 0000 0x0 0x0
0xffff9d80000042d8 0049 0000 0x0 0x0
0xffff9d8000004350 0048 0000 0x0 0x0
0xffff9d80000043c8 0048 0000 0x0 0x0
0xffff9d8000004440 0048 0000 0x0 0x0
0xffff9d80000044b8 0048 0000 0x0 0x0
0xffff9d8000004530 0048 0000 0x0 0x0
0xffff9d80000045a8 0048 0000 0x0 0x0
0xffff9d8000004620 0048 0000 0x0 0x0
0xffff9d8000004698 0048 0000 0x0 0x0
0xffff9d8000004710 0048 0000 0x0 0x0
0xffff9d8000004788 0048 0000 0x0 0x0
0xffff9d8000004800 0048 0000 0x0 0x0
0xffff9d8000004878 0048 0000 0x0 0x0
0xffff9d80000048f0 0048 0000 0x0 0x0
0xffff9d8000004968 0048 0000 0x0 0x0
0xffff9d80000049e0 0041 0000 0x0 0x0
0xffff9d8000004a58 0048 0000 0x0 0x0
0xffff9d8000004ad0 0040 0000 0x0 0x0
0xffff9d8000004b48 0048 0000 0x0 0x0
0xffff9d8000004bc0 0048 0000 0x0 0x0
0xffff9d8000004c38 0041 0000 0x0 0x0
0xffff9d8000004cb0 0041 0000 0x0 0x0
0xffff9d8000004d28 0041 0000 0x0 0x0
0xffff9d8000004da0 0041 0000 0x0 0x0
0xffff9d8000004e18 0041 0000 0x0 0x0
0xffff9d8000004e90 0048 0000 0x0 0x0
0xffff9d8000004f08 0049 0000 0x0 0x0
0xffff9d8000004f80 0049 0000 0x0 0x0
0xffff9d8000004ff8 0041 0000 0x0 0x0
0xffff9d8000005070 0041 0000 0x0 0x0
0xffff9d80000050e8 0041 0000 0x0 0x0
0xffff9d8000005160 0041 0000 0x0 0x0
0xffff9d80000051d8 0041 0000 0x0 0x0
0xffff9d8000005250 0048 0000 0x0 0x0
0xffff9d80000052c8 0041 0000 0x0 0x0
0xffff9d8000005340 0041 0000 0x0 0x0
0xffff9d80000053b8 0041 0000 0x0 0x0
0xffff9d8000005430 0041 0000 0x0 0x0
0xffff9d80000054a8 0041 0000 0x0 0x0
0xffff9d8000005520 0041 0000 0x0 0x0
0xffff9d8000005598 0041 0000 0x0 0x0
0xffff9d8000005610 0048 0000 0x0 0x0
0xffff9d8000005688 0041 0000 0x0 0x0
0xffff9d8000005700 0041 0000 0x0 0x0
0xffff9d8000005778 0041 0000 0x0 0x0
0xffff9d80000057f0 0041 0000 0x0 0x0
0xffff9d8000005868 0041 0000 0x0 0x0
0xffff9d80000058e0 0041 0000 0x0 0x0
0xffff9d8000005958 0041 0000 0x0 0x0
0xffff9d80000059d0 0041 0000 0x0 0x0
0xffff9d8000005a48 0041 0000 0x0 0x0
0xffff9d8000005ac0 0041 0000 0x0 0x0
0xffff9d8000005b38 0041 0000 0x0 0x0
0xffff9d8000005bb0 0041 0000 0x0 0x0
0xffff9d8000005c28 0041 0000 0x0 0x0
0xffff9d8000005ca0 0041 0000 0x0 0x0
0xffff9d8000005d18 0041 0000 0x0 0x0
0xffff9d8000005d90 0041 0000 0x0 0x0
0xffff9d8000005e08 0041 0000 0x0 0x0
0xffff9d8000005e80 0041 0000 0x0 0x0
0xffff9d8000005ef8 0041 0000 0x0 0x0
0xffff9d8000005f70 0041 0000 0x0 0x0
0xffff9d8000005fe8 0041 0000 0x0 0x0
0xffff9d8000006060 0049 0000 0x0 0x0
0xffff9d80000060d8 0041 0000 0x0 0x0
0xffff9d8000006150 0041 0000 0x0 0x0
0xffff9d80000061c8 0041 0000 0x0 0x0
0xffff9d8000006240 0041 0000 0x0 0x0
0xffff9d80000062b8 0049 0000 0x0 0x0
0xffff9d8000006330 0049 0000 0x0 0x0
0xffff9d80000063a8 0049 0000 0x0 0x0
0xffff9d8000006420 0049 0000 0x0 0x0
0xffff9d8000006498 0049 0000 0x0 0x0
0xffff9d8000006510 0041 0000 0x0 0x0
0xffff9d8000006588 0041 0000 0x0 0x0
0xffff9d8000006600 0049 0000 0x0 0x0
0xffff9d8000006678 0049 0000 0x0 0x0
0xffff9d80000066f0 0049 0000 0x0 0x0
0xffff9d8000006768 0049 0000 0x0 0x0
0xffff9d80000067e0 0049 0000 0x0 0x0
0xffff9d8000006858 0049 0000 0x0 0x0
0xffff9d80000068d0 0041 0000 0x0 0x0
0xffff9d8000006948 0049 0000 0x0 0x0
0xffff9d80000069c0 0049 0000 0x0 0x0
0xffff9d8000006a38 0049 0000 0x0 0x0
0xffff9d8000006ab0 0049 0000 0x0 0x0
0xffff9d8000006b28 0049 0000 0x0 0x0
0xffff9d8000006ba0 0048 0000 0x0 0x0
0xffff9d8000006c18 0049 0000 0x0 0x0
0xffff9d8000006c90 0041 0000 0x0 0x0
0xffff9d8000006d08 0049 0000 0x0 0x0
0xffff9d8000006d80 0049 0000 0x0 0x0
0xffff9d8000006df8 0049 0000 0x0 0x0
0xffff9d8000006e70 0049 0000 0x0 0x0
0xffff9d8000006ee8 0049 0000 0x0 0x0
0xffff9d8000006f60 0048 0000 0x0 0x0
0xffff9d8000006fd8 0048 0000 0x0 0x0
0xffff9d8000007050 0049 0000 0x0 0x0
0xffff9d80000070c8 0049 0000 0x0 0x0
0xffff9d8000007140 0049 0000 0x0 0x0
0xffff9d80000071b8 0049 0000 0x0 0x0
0xffff9d8000007230 0048 0000 0x0 0x0
0xffff9d80000072a8 0048 0000 0x0 0x0
0xffff9d8000007320 0048 0000 0x0 0x0
0xffff9d8000007398 0048 0000 0x0 0x0
0xffff9d8000007410 0049 0000 0x0 0x0
0xffff9d8000007488 0049 0000 0x0 0x0
0xffff9d8000007500 0049 0000 0x0 0x0
0xffff9d8000007578 0048 0000 0x0 0x0
0xffff9d80000075f0 0049 0000 0x0 0x0
0xffff9d8000007668 0049 0000 0x0 0x0
0xffff9d80000076e0 0049 0000 0x0 0x0
0xffff9d8000007758 0048 0000 0x0 0x0
0xffff9d80000077d0 0049 0000 0x0 0x0
0xffff9d8000007848 0049 0000 0x0 0x0
0xffff9d80000078c0 0048 0000 0x0 0x0
0xffff9d8000007938 0048 0000 0x0 0x0
0xffff9d80000079b0 0049 0000 0x0 0x0
0xffff9d8000007a28 0048 0000 0x0 0x0
0xffff9d8000007aa0 0048 0000 0x0 0x0
0xffff9d8000007b18 0048 0000 0x0 0x0
0xffff9d8000007b90 0049 0000 0x0 0x0
0xffff9d8000007c08 0048 0000 0x0 0x0
0xffff9d8000007c80 0048 0000 0x0 0x0
0xffff9d8000007cf8 0048 0000 0x0 0x0
0xffff9d8000007d70 0048 0000 0x0 0x0
0xffff9d8000007de8 0048 0000 0x0 0x0
0xffff9d8000007e60 0048 0000 0x0 0x0
0xffff9d8000007ed8 0049 0000 0x0 0x0
0xffff9d8000007f50 0048 0000 0x0 0x0
0xffff9d8000007fc8 0048 0000 0x0 0x0
0xffff9d8000008040 0048 0000 0x0 0x0
0xffff9d80000080b8 0048 0000 0x0 0x0
0xffff9d8000008130 0048 0000 0x0 0x0
0xffff9d80000081a8 0049 0000 0x0 0x0
0xffff9d8000008220 0048 0000 0x0 0x0
0xffff9d8000008298 0048 0000 0x0 0x0
0xffff9d8000008310 0048 0000 0x0 0x0
0xffff9d8000008388 0048 0000 0x0 0x0
0xffff9d8000008400 0048 0000 0x0 0x0
0xffff9d8000008478 0048 0000 0x0 0x0
0xffff9d80000084f0 0049 0000 0x0 0x0
0xffff9d8000008568 0048 0000 0x0 0x0
0xffff9d80000085e0 0048 0000 0x0 0x0
0xffff9d8000008658 0048 0000 0x0 0x0
0xffff9d80000086d0 0048 0000 0x0 0x0
0xffff9d8000008748 0048 0000 0x0 0x0
0xffff9d80000087c0 0049 0000 0x0 0x0
0xffff9d8000008838 0048 0000 0x0 0x0
0xffff9d80000088b0 0048 0000 0x0 0x0
0xffff9d8000008928 0048 0000 0x0 0x0
0xffff9d80000089a0 0048 0000 0x0 0x0
0xffff9d8000008a18 0048 0000 0x0 0x0
0xffff9d8000008a90 0048 0000 0x0 0x0
0xffff9d8000008b08 0049 0000 0x0 0x0
0xffff9d8000008b80 0048 0000 0x0 0x0
0xffff9d8000008bf8 0048 0000 0x0 0x0
0xffff9d8000008c70 0048 0000 0x0 0x0
0xffff9d8000008ce8 0048 0000 0x0 0x0
0xffff9d8000008d60 0048 0000 0x0 0x0
0xffff9d8000008dd8 0048 0000 0x0 0x0
0xffff9d8000008e50 0049 0000 0x0 0x0
0xffff9d8000008ec8 0008 0000 0x0 0x0
0xffff9d8000008f40 0008 0000 0x0 0x0
0xffff9d8000008fb8 0008 0000 0x0 0x0
0xffff9d8000009030 0008 0000 0x0 0x0
0xffff9d80000090a8 0008 0000 0x0 0x0
0xffff9d8000009120 0008 0000 0x0 0x0
0xffff9d8000009198 0008 0000 0x0 0x0
0xffff9d8000009210 0008 0000 0x0 0x0
0xffff9d8000009288 0008 0000 0x0 0x0
0xffff9d8000009300 0008 0000 0x0 0x0
0xffff9d8000009378 0008 0000 0x0 0x0
0xffff9d80000093f0 0008 0000 0x0 0x0
0xffff9d8000009468 0008 0000 0x0 0x0
0xffff9d80000094e0 0008 0000 0x0 0x0
0xffff9d8000009558 0008 0000 0x0 0x0
0xffff9d80000095d0 0008 0000 0x0 0x0
0xffff9d8000009648 0008 0000 0x0 0x0
0xffff9d80000096c0 0008 0000 0x0 0x0
0xffff9d8000009738 0008 0000 0x0 0x0
0xffff9d80000097b0 0008 0000 0x0 0x0
0xffff9d8000009828 0008 0000 0x0 0x0
0xffff9d80000098a0 0008 0000 0x0 0x0
0xffff9d8000009918 0008 0000 0x0 0x0
0xffff9d8000009990 0008 0000 0x0 0x0
0xffff9d8000009a08 0008 0000 0x0 0x0
0xffff9d8000009a80 0008 0000 0x0 0x0
0xffff9d8000009af8 0008 0000 0x0 0x0
0xffff9d8000009b70 0008 0000 0x0 0x0
0xffff9d8000009be8 0008 0000 0x0 0x0
0xffff9d8000009c60 0008 0000 0x0 0x0
0xffff9d8000009cd8 0008 0000 0x0 0x0
0xffff9d8000009d50 0008 0000 0x0 0x0
0xffff9d8000009dc8 0008 0000 0x0 0x0
0xffff9d8000009e40 0008 0000 0x0 0x0
0xffff9d8000009eb8 0008 0000 0x0 0x0
0xffff9d8000009f30 0008 0000 0x0 0x0
0xffff9d8000009fa8 0008 0000 0x0 0x0
0xffff9d800000a020 0008 0000 0x0 0x0
0xffff9d800000a098 0008 0000 0x0 0x0
0xffff9d800000a110 0008 0000 0x0 0x0
0xffff9d800000a188 0008 0000 0x0 0x0
0xffff9d800000a200 0008 0000 0x0 0x0
0xffff9d800000a278 0008 0000 0x0 0x0
0xffff9d800000a2f0 0008 0000 0x0 0x0
0xffff9d800000a368 0008 0000 0x0 0x0
0xffff9d800000a3e0 0008 0000 0x0 0x0
0xffff9d800000a458 0008 0000 0x0 0x0
0xffff9d800000a4d0 0008 0000 0x0 0x0
0xffff9d800000a548 0008 0000 0x0 0x0
0xffff9d800000a5c0 0008 0000 0x0 0x0
0xffff9d800000a638 0008 0000 0x0 0x0
0xffff9d800000a6b0 0008 0000 0x0 0x0
0xffff9d800000a728 0008 0000 0x0 0x0
0xffff9d800000a7a0 0008 0000 0x0 0x0
0xffff9d800000a818 0048 0000 0x0 0x0
0xffff9d800000a890 0048 0000 0x0 0x0
0xffff9d800000a908 0048 0000 0x0 0x0
0xffff9d800000a980 0048 0000 0x0 0x0
0xffff9d800000a9f8 0048 0000 0x0 0x0
0xffff9d800000aa70 0048 0000 0x0 0x0
0xffff9d800000aae8 0048 0000 0x0 0x0
0xffff9d800000ab60 0048 0000 0x0 0x0
0xffff9d800000abd8 0048 0000 0x0 0x0
0xffff9d800000ac50 0048 0000 0x0 0x0
0xffff9d800000acc8 0048 0000 0x0 0x0
0xffff9d800000ad40 0048 0000 0x0 0x0
0xffff9d800000adb8 0048 0000 0x0 0x0
0xffff9d800000ae30 0048 0000 0x0 0x0
0xffff9d800000aea8 0048 0000 0x0 0x0
0xffff9d800000af20 0048 0000 0x0 0x0
0xffff9d800000af98 0048 0000 0x0 0x0
0xffff9d800000b010 0048 0000 0x0 0x0
0xffff9d800000b088 0048 0000 0x0 0x0
0xffff9d800000b100 0048 0000 0x0 0x0
0xffff9d800000b178 0048 0000 0x0 0x0
0xffff9d800000b1f0 0048 0000 0x0 0x0
0xffff9d800000b268 0048 0000 0x0 0x0
0xffff9d800000b2e0 0048 0000 0x0 0x0
0xffff9d800000b358 0048 0000 0x0 0x0
0xffff9d800000b3d0 0048 0000 0x0 0x0
0xffff9d800000b448 0048 0000 0x0 0x0
0xffff9d800000b4c0 0048 0000 0x0 0x0
0xffff9d800000b538 0048 0000 0x0 0x0
0xffff9d800000b5b0 0048 0000 0x0 0x0
0xffff9d800000b628 0048 0000 0x0 0x0
0xffff9d800000b6a0 0048 0000 0x0 0x0
0xffff9d800000b718 0048 0000 0x0 0x0
0xffff9d800000b790 0048 0000 0x0 0x0
0xffff9d800000b808 0048 0000 0x0 0x0
0xffff9d800000b880 0048 0000 0x0 0x0
0xffff9d800000b8f8 0048 0000 0x0 0x0
0xffff9d800000b970 0048 0000 0x0 0x0
0xffff9d800000b9e8 0048 0000 0x0 0x0
0xffff9d800000ba60 0048 0000 0x0 0x0
0xffff9d800000bad8 0048 0000 0x0 0x0
0xffff9d800000bb50 0048 0000 0x0 0x0
0xffff9d800000bbc8 0048 0000 0x0 0x0
0xffff9d800000bc40 0008 0000 0x0 0x0
0xffff9d800000bcb8 0008 0000 0x0 0x0
0xffff9d800000bd30 0008 0000 0x0 0x0
0xffff9d800000bda8 0008 0000 0x0 0x0
0xffff9d800000be20 0008 0000 0x0 0x0
0xffff9d800000be98 0008 0000 0x0 0x0
0xffff9d800000bf10 0008 0000 0x0 0x0
0xffff9d800000bf88 0008 0000 0x0 0x0
0xffff9d800000c000 0008 0000 0x0 0x0
0xffff9d800000c078 0008 0000 0x0 0x0
0xffff9d800000c0f0 0008 0000 0x0 0x0
0xffff9d800000c168 0008 0000 0x0 0x0
0xffff9d800000c1e0 0008 0000 0x0 0x0
0xffff9d800000c258 0008 0000 0x0 0x0
0xffff9d800000c2d0 0008 0000 0x0 0x0
0xffff9d800000c348 0008 0000 0x0 0x0
0xffff9d800000c3c0 0008 0000 0x0 0x0
0xffff9d800000c438 0008 0000 0x0 0x0
0xffff9d800000c4b0 0008 0000 0x0 0x0
0xffff9d800000c528 0008 0000 0x0 0x0
0xffff9d800000c5a0 0008 0000 0x0 0x0
0xffff9d800000c618 0008 0000 0x0 0x0
0xffff9d800000c690 0008 0000 0x0 0x0
0xffff9d800000c708 0008 0000 0x0 0x0
0xffff9d800000c780 0008 0000 0x0 0x0
0xffff9d800000c7f8 0008 0000 0x0 0x0
0xffff9d800000c870 0008 0000 0x0 0x0
0xffff9d800000c8e8 0008 0000 0x0 0x0
0xffff9d800000c960 0008 0000 0x0 0x0
0xffff9d800000c9d8 0008 0000 0x0 0x0
0xffff9d800000ca50 0008 0000 0x0 0x0
0xffff9d800000cac8 0008 0000 0x0 0x0
0xffff9d800000cb40 0008 0000 0x0 0x0
0xffff9d800000cbb8 0008 0000 0x0 0x0
0xffff9d800000cc30 0008 0000 0x0 0x0
0xffff9d800000cca8 0008 0000 0x0 0x0
0xffff9d800000cd20 0008 0000 0x0 0x0
0xffff9d800000cd98 0008 0000 0x0 0x0
0xffff9d800000ce10 0008 0000 0x0 0x0
0xffff9d800000ce88 0008 0000 0x0 0x0
0xffff9d800000cf00 0008 0000 0x0 0x0
0xffff9d800000cf78 0008 0000 0x0 0x0
0xffff9d800000cff0 0008 0000 0x0 0x0
0xffff9d800000d068 0008 0000 0x0 0x0
0xffff9d800000d0e0 0008 0000 0x0 0x0
0xffff9d800000d158 0008 0000 0x0 0x0
0xffff9d800000d1d0 0008 0000 0x0 0x0
0xffff9d800000d248 0008 0000 0x0 0x0
0xffff9d800000d2c0 0008 0000 0x0 0x0
0xffff9d800000d338 0008 0000 0x0 0x0
0xffff9d800000d3b0 0008 0000 0x0 0x0
0xffff9d800000d428 0008 0000 0x0 0x0
0xffff9d800000d4a0 0008 0000 0x0 0x0
0xffff9d800000d518 0008 0000 0x0 0x0
0xffff9d800000d590 0048 0000 0x0 0x0
0xffff9d800000d608 0048 0000 0x0 0x0
0xffff9d800000d680 0048 0000 0x0 0x0
0xffff9d800000d6f8 0048 0000 0x0 0x0
0xffff9d800000d770 0048 0000 0x0 0x0
0xffff9d800000d7e8 0048 0000 0x0 0x0
0xffff9d800000d860 0048 0000 0x0 0x0
0xffff9d800000d8d8 0048 0000 0x0 0x0
0xffff9d800000d950 0048 0000 0x0 0x0
0xffff9d800000d9c8 0048 0000 0x0 0x0
0xffff9d800000da40 0048 0000 0x0 0x0
0xffff9d800000dab8 0048 0000 0x0 0x0
0xffff9d800000db30 0048 0000 0x0 0x0
0xffff9d800000dba8 0048 0000 0x0 0x0
0xffff9d800000dc20 0048 0000 0x0 0x0
0xffff9d800000dc98 0048 0000 0x0 0x0
0xffff9d800000dd10 0048 0000 0x0 0x0
0xffff9d800000dd88 0048 0000 0x0 0x0
0xffff9d800000de00 0048 0000 0x0 0x0
0xffff9d800000de78 0048 0000 0x0 0x0
0xffff9d800000def0 0048 0000 0x0 0x0
0xffff9d800000df68 0048 0000 0x0 0x0
0xffff9d800000dfe0 0048 0000 0x0 0x0
0xffff9d800000e058 0048 0000 0x0 0x0
0xffff9d800000e0d0 0048 0000 0x0 0x0
0xffff9d800000e148 0048 0000 0x0 0x0
0xffff9d800000e1c0 0048 0000 0x0 0x0
0xffff9d800000e238 0048 0000 0x0 0x0
0xffff9d800000e2b0 0048 0000 0x0 0x0
0xffff9d800000e328 0048 0000 0x0 0x0
0xffff9d800000e3a0 0048 0000 0x0 0x0
0xffff9d800000e418 0048 0000 0x0 0x0
0xffff9d800000e490 0048 0000 0x0 0x0
0xffff9d800000e508 0048 0000 0x0 0x0
0xffff9d800000e580 0048 0000 0x0 0x0
0xffff9d800000e5f8 0048 0000 0x0 0x0
0xffff9d800000e670 0048 0000 0x0 0x0
0xffff9d800000e6e8 0048 0000 0x0 0x0
0xffff9d800000e760 0048 0000 0x0 0x0
0xffff9d800000e7d8 0048 0000 0x0 0x0
0xffff9d800000e850 0048 0000 0x0 0x0
0xffff9d800000e8c8 0048 0000 0x0 0x0
0xffff9d800000e940 0048 0000 0x0 0x0
0xffff9d800000e9b8 0008 0000 0x0 0x0
0xffff9d800000ea30 0008 0000 0x0 0x0
0xffff9d800000eaa8 0008 0000 0x0 0x0
0xffff9d800000eb20 0008 0000 0x0 0x0
0xffff9d800000eb98 0008 0000 0x0 0x0
0xffff9d800000ec10 0008 0000 0x0 0x0
0xffff9d800000ec88 0008 0000 0x0 0x0
0xffff9d800000ed00 0008 0000 0x0 0x0
0xffff9d800000ed78 0008 0000 0x0 0x0
0xffff9d800000edf0 0008 0000 0x0 0x0
0xffff9d800000ee68 0008 0000 0x0 0x0
0xffff9d800000eee0 0008 0000 0x0 0x0
0xffff9d800000ef58 0008 0000 0x0 0x0
0xffff9d800000efd0 0008 0000 0x0 0x0
0xffff9d800000f048 0008 0000 0x0 0x0
0xffff9d800000f0c0 0008 0000 0x0 0x0
0xffff9d800000f138 0008 0000 0x0 0x0
0xffff9d800000f1b0 0008 0000 0x0 0x0
0xffff9d800000f228 0008 0000 0x0 0x0
0xffff9d800000f2a0 0008 0000 0x0 0x0
0xffff9d800000f318 0008 0000 0x0 0x0
0xffff9d800000f390 0008 0000 0x0 0x0
0xffff9d800000f408 0008 0000 0x0 0x0
0xffff9d800000f480 0008 0000 0x0 0x0
0xffff9d800000f4f8 0008 0000 0x0 0x0
0xffff9d800000f570 0008 0000 0x0 0x0
0xffff9d800000f5e8 0008 0000 0x0 0x0
0xffff9d800000f660 0008 0000 0x0 0x0
0xffff9d800000f6d8 0008 0000 0x0 0x0
0xffff9d800000f750 0008 0000 0x0 0x0
0xffff9d800000f7c8 0008 0000 0x0 0x0
0xffff9d800000f840 0008 0000 0x0 0x0
0xffff9d800000f8b8 0008 0000 0x0 0x0
0xffff9d800000f930 0008 0000 0x0 0x0
0xffff9d800000f9a8 0008 0000 0x0 0x0
0xffff9d800000fa20 0008 0000 0x0 0x0
0xffff9d800000fa98 0008 0000 0x0 0x0
0xffff9d800000fb10 0008 0000 0x0 0x0
0xffff9d800000fb88 0008 0000 0x0 0x0
0xffff9d800000fc00 0008 0000 0x0 0x0
0xffff9d800000fc78 0008 0000 0x0 0x0
0xffff9d800000fcf0 0008 0000 0x0 0x0
0xffff9d800000fd68 0008 0000 0x0 0x0
0xffff9d800000fde0 0008 0000 0x0 0x0
0xffff9d800000fe58 0008 0000 0x0 0x0
0xffff9d800000fed0 0008 0000 0x0 0x0
0xffff9d800000ff48 0008 0000 0x0 0x0
0xffff9d800000ffc0 0008 0000 0x0 0x0
0xffff9d8000010038 0008 0000 0x0 0x0
0xffff9d80000100b0 0008 0000 0x0 0x0
0xffff9d8000010128 0008 0000 0x0 0x0
0xffff9d80000101a0 0008 0000 0x0 0x0
0xffff9d8000010218 0008 0000 0x0 0x0
0xffff9d8000010290 0008 0000 0x0 0x0
0xffff9d8000010308 0048 0000 0x0 0x0
0xffff9d8000010380 0048 0000 0x0 0x0
0xffff9d80000103f8 0048 0000 0x0 0x0
0xffff9d8000010470 0048 0000 0x0 0x0
0xffff9d80000104e8 0048 0000 0x0 0x0
0xffff9d8000010560 0048 0000 0x0 0x0
0xffff9d80000105d8 0048 0000 0x0 0x0
0xffff9d8000010650 0048 0000 0x0 0x0
0xffff9d80000106c8 0048 0000 0x0 0x0
0xffff9d8000010740 0048 0000 0x0 0x0
0xffff9d80000107b8 0048 0000 0x0 0x0
0xffff9d8000010830 0048 0000 0x0 0x0
0xffff9d80000108a8 0048 0000 0x0 0x0
0xffff9d8000010920 0048 0000 0x0 0x0
0xffff9d8000010998 0048 0000 0x0 0x0
0xffff9d8000010a10 0048 0000 0x0 0x0
0xffff9d8000010a88 0048 0000 0x0 0x0
0xffff9d8000010b00 0048 0000 0x0 0x0
0xffff9d8000010b78 0048 0000 0x0 0x0
0xffff9d8000010bf0 0048 0000 0x0 0x0
0xffff9d8000010c68 0048 0000 0x0 0x0
0xffff9d8000010ce0 0049 0000 0x0 0x0
0xffff9d8000010d58 0048 0000 0x0 0x0
0xffff9d8000010dd0 0048 0000 0x0 0x0
0xffff9d8000010e48 0048 0000 0x0 0x0
0xffff9d8000010ec0 0048 0000 0x0 0x0
0xffff9d8000010f38 0048 0000 0x0 0x0
0xffff9d8000010fb0 0048 0000 0x0 0x0
0xffff9d8000011028 0048 0000 0x0 0x0
0xffff9d80000110a0 0049 0000 0x0 0x0
0xffff9d8000011118 0049 0000 0x0 0x0
0xffff9d8000011190 0048 0000 0x0 0x0
0xffff9d8000011208 0048 0000 0x0 0x0
0xffff9d8000011280 0048 0000 0x0 0x0
0xffff9d80000112f8 0048 0000 0x0 0x0
0xffff9d8000011370 0048 0000 0x0 0x0
0xffff9d80000113e8 0048 0000 0x0 0x0
0xffff9d8000011460 0049 0000 0x0 0x0
0xffff9d80000114d8 0049 0000 0x0 0x0
0xffff9d8000011550 0048 0000 0x0 0x0
0xffff9d80000115c8 0048 0000 0x0 0x0
0xffff9d8000011640 0048 0000 0x0 0x0
0xffff9d80000116b8 0049 0000 0x0 0x0
0xffff9d8000011730 0048 0000 0x0 0x0
0xffff9d80000117a8 0049 0000 0x0 0x0
0xffff9d8000011820 0049 0000 0x0 0x0
0xffff9d8000011898 0049 0000 0x0 0x0
0xffff9d8000011910 0048 0000 0x0 0x0
0xffff9d8000011988 0008 0000 0x0 0x0
0xffff9d8000011a00 0008 0000 0x0 0x0
0xffff9d8000011a78 0008 0000 0x0 0x0
0xffff9d8000011af0 0008 0000 0x0 0x0
0xffff9d8000011b68 0008 0000 0x0 0x0
0xffff9d8000011be0 0008 0000 0x0 0x0
0xffff9d8000011c58 0008 0000 0x0 0x0
0xffff9d8000011cd0 0008 0000 0x0 0x0
0xffff9d8000011d48 0008 0000 0x0 0x0
0xffff9d8000011dc0 0008 0000 0x0 0x0
0xffff9d8000011e38 0008 0000 0x0 0x0
0xffff9d8000011eb0 0008 0000 0x0 0x0
0xffff9d8000011f28 0008 0000 0x0 0x0
0xffff9d8000011fa0 0008 0000 0x0 0x0
0xffff9d8000012018 0008 0000 0x0 0x0
0xffff9d8000012090 0008 0000 0x0 0x0
0xffff9d8000012108 0008 0000 0x0 0x0
0xffff9d8000012180 0008 0000 0x0 0x0
0xffff9d80000121f8 0008 0000 0x0 0x0
0xffff9d8000012270 0008 0000 0x0 0x0
0xffff9d80000122e8 0008 0000 0x0 0x0
0xffff9d8000012360 0008 0000 0x0 0x0
0xffff9d80000123d8 0008 0000 0x0 0x0
0xffff9d8000012450 0008 0000 0x0 0x0
0xffff9d80000124c8 0008 0000 0x0 0x0
0xffff9d8000012540 0008 0000 0x0 0x0
0xffff9d80000125b8 0008 0000 0x0 0x0
0xffff9d8000012630 0008 0000 0x0 0x0
0xffff9d80000126a8 0008 0000 0x0 0x0
0xffff9d8000012720 0008 0000 0x0 0x0
0xffff9d8000012798 0008 0000 0x0 0x0
0xffff9d8000012810 0008 0000 0x0 0x0
0xffff9d8000012888 0008 0000 0x0 0x0
0xffff9d8000012900 0008 0000 0x0 0x0
0xffff9d8000012978 0008 0000 0x0 0x0
0xffff9d80000129f0 0008 0000 0x0 0x0
0xffff9d8000012a68 0008 0000 0x0 0x0
0xffff9d8000012ae0 0008 0000 0x0 0x0
0xffff9d8000012b58 0008 0000 0x0 0x0
0xffff9d8000012bd0 0008 0000 0x0 0x0
0xffff9d8000012c48 0008 0000 0x0 0x0
0xffff9d8000012cc0 0008 0000 0x0 0x0
0xffff9d8000012d38 0008 0000 0x0 0x0
0xffff9d8000012db0 0008 0000 0x0 0x0
0xffff9d8000012e28 0008 0000 0x0 0x0
0xffff9d8000012ea0 0008 0000 0x0 0x0
0xffff9d8000012f18 0008 0000 0x0 0x0
0xffff9d8000012f90 0008 0000 0x0 0x0
0xffff9d8000013008 0008 0000 0x0 0x0
0xffff9d8000013080 0008 0000 0x0 0x0
0xffff9d80000130f8 0008 0000 0x0 0x0
0xffff9d8000013170 0008 0000 0x0 0x0
0xffff9d80000131e8 0008 0000 0x0 0x0
0xffff9d8000013260 0008 0000 0x0 0x0
0xffff9d80000132d8 0008 0000 0x0 0x0
0xffff9d8000013350 0008 0000 0x0 0x0
0xffff9d80000133c8 0008 0000 0x0 0x0
0xffff9d8000013440 0008 0000 0x0 0x0
0xffff9d80000134b8 0008 0000 0x0 0x0
0xffff9d8000013530 0008 0000 0x0 0x0
0xffff9d80000135a8 0008 0000 0x0 0x0
0xffff9d8000013620 0008 0000 0x0 0x0
0xffff9d8000013698 0008 0000 0x0 0x0
0xffff9d8000013710 0008 0000 0x0 0x0
0xffff9d8000013788 0008 0000 0x0 0x0
0xffff9d8000013800 0008 0000 0x0 0x0
0xffff9d8000013878 0008 0000 0x0 0x0
0xffff9d80000138f0 0008 0000 0x0 0x0
0xffff9d8000013968 0008 0000 0x0 0x0
0xffff9d80000139e0 0008 0000 0x0 0x0
0xffff9d8000013a58 0008 0000 0x0 0x0
0xffff9d8000013ad0 0008 0000 0x0 0x0
0xffff9d8000013b48 0008 0000 0x0 0x0
0xffff9d8000013bc0 0008 0000 0x0 0x0
0xffff9d8000013c38 0008 0000 0x0 0x0
0xffff9d8000013cb0 0008 0000 0x0 0x0
0xffff9d8000013d28 0008 0000 0x0 0x0
0xffff9d8000013da0 0008 0000 0x0 0x0
0xffff9d8000013e18 0008 0000 0x0 0x0
0xffff9d8000013e90 0008 0000 0x0 0x0
0xffff9d8000013f08 0008 0000 0x0 0x0
0xffff9d8000013f80 0008 0000 0x0 0x0
0xffff9d8000013ff8 0008 0000 0x0 0x0
0xffff9d8000014070 0008 0000 0x0 0x0
0xffff9d80000140e8 0008 0000 0x0 0x0
0xffff9d8000014160 0008 0000 0x0 0x0
0xffff9d80000141d8 0008 0000 0x0 0x0
0xffff9d8000014250 0008 0000 0x0 0x0
0xffff9d80000142c8 0008 0000 0x0 0x0
0xffff9d8000014340 0008 0000 0x0 0x0
0xffff9d80000143b8 0008 0000 0x0 0x0
0xffff9d8000014430 0008 0000 0x0 0x0
0xffff9d80000144a8 0008 0000 0x0 0x0
0xffff9d8000014520 0008 0000 0x0 0x0
0xffff9d8000014598 0008 0000 0x0 0x0
0xffff9d8000014610 0008 0000 0x0 0x0
0xffff9d8000014688 0008 0000 0x0 0x0
0xffff9d8000014700 0008 0000 0x0 0x0
0xffff9d8000014778 0008 0000 0x0 0x0
0xffff9d80000147f0 0008 0000 0x0 0x0
0xffff9d8000014868 0008 0000 0x0 0x0
0xffff9d80000148e0 0008 0000 0x0 0x0
0xffff9d8000014958 0008 0000 0x0 0x0
0xffff9d80000149d0 0008 0000 0x0 0x0
0xffff9d8000014a48 0008 0000 0x0 0x0
0xffff9d8000014ac0 0008 0000 0x0 0x0
0xffff9d8000014b38 0008 0000 0x0 0x0
0xffff9d8000014bb0 0008 0000 0x0 0x0
0xffff9d8000014c28 0008 0000 0x0 0x0
0xffff9d8000014ca0 0008 0000 0x0 0x0
0xffff9d8000014d18 0008 0000 0x0 0x0
0xffff9d8000014d90 0008 0000 0x0 0x0
0xffff9d8000014e08 0008 0000 0x0 0x0
0xffff9d8000014e80 0008 0000 0x0 0x0
0xffff9d8000014ef8 0008 0000 0x0 0x0
0xffff9d8000014f70 0008 0000 0x0 0x0
0xffff9d8000014fe8 0008 0000 0x0 0x0
0xffff9d8000015060 0008 0000 0x0 0x0
0xffff9d80000150d8 0008 0000 0x0 0x0
0xffff9d8000015150 0008 0000 0x0 0x0
0xffff9d80000151c8 0008 0000 0x0 0x0
0xffff9d8000015240 0008 0000 0x0 0x0
0xffff9d80000152b8 0008 0000 0x0 0x0
0xffff9d8000015330 0008 0000 0x0 0x0
0xffff9d80000153a8 0008 0000 0x0 0x0
0xffff9d8000015420 0008 0000 0x0 0x0
0xffff9d8000015498 0008 0000 0x0 0x0
0xffff9d8000015510 0008 0000 0x0 0x0
0xffff9d8000015588 0008 0000 0x0 0x0
0xffff9d8000015600 0008 0000 0x0 0x0
0xffff9d8000015678 0008 0000 0x0 0x0
0xffff9d80000156f0 0008 0000 0x0 0x0
0xffff9d8000015768 0008 0000 0x0 0x0
0xffff9d80000157e0 0008 0000 0x0 0x0
0xffff9d8000015858 0008 0000 0x0 0x0
0xffff9d80000158d0 0008 0000 0x0 0x0
0xffff9d8000015948 0008 0000 0x0 0x0
0xffff9d80000159c0 0008 0000 0x0 0x0
0xffff9d8000015a38 0008 0000 0x0 0x0
0xffff9d8000015ab0 0008 0000 0x0 0x0
0xffff9d8000015b28 0008 0000 0x0 0x0
0xffff9d8000015ba0 0008 0000 0x0 0x0
0xffff9d8000015c18 0008 0000 0x0 0x0
0xffff9d8000015c90 0008 0000 0x0 0x0
0xffff9d8000015d08 0008 0000 0x0 0x0
0xffff9d8000015d80 0008 0000 0x0 0x0
0xffff9d8000015df8 0008 0000 0x0 0x0
0xffff9d8000015e70 0008 0000 0x0 0x0
0xffff9d8000015ee8 0008 0000 0x0 0x0
0xffff9d8000015f60 0008 0000 0x0 0x0
0xffff9d8000015fd8 0008 0000 0x0 0x0
0xffff9d8000016050 0008 0000 0x0 0x0
0xffff9d80000160c8 0008 0000 0x0 0x0
0xffff9d8000016140 0008 0000 0x0 0x0
0xffff9d80000161b8 0008 0000 0x0 0x0
0xffff9d8000016230 0008 0000 0x0 0x0
0xffff9d80000162a8 0008 0000 0x0 0x0
0xffff9d8000016320 0008 0000 0x0 0x0
0xffff9d8000016398 0008 0000 0x0 0x0
0xffff9d8000016410 0008 0000 0x0 0x0
0xffff9d8000016488 0008 0000 0x0 0x0
0xffff9d8000016500 0008 0000 0x0 0x0
0xffff9d8000016578 0008 0000 0x0 0x0
0xffff9d80000165f0 0008 0000 0x0 0x0
0xffff9d8000016668 0008 0000 0x0 0x0
0xffff9d80000166e0 0008 0000 0x0 0x0
0xffff9d8000016758 0008 0000 0x0 0x0
0xffff9d80000167d0 0008 0000 0x0 0x0
0xffff9d8000016848 0008 0000 0x0 0x0
0xffff9d80000168c0 0008 0000 0x0 0x0
0xffff9d8000016938 0008 0000 0x0 0x0
0xffff9d80000169b0 0008 0000 0x0 0x0
0xffff9d8000016a28 0008 0000 0x0 0x0
0xffff9d8000016aa0 0008 0000 0x0 0x0
0xffff9d8000016b18 0008 0000 0x0 0x0
0xffff9d8000016b90 0008 0000 0x0 0x0
0xffff9d8000016c08 0008 0000 0x0 0x0
0xffff9d8000016c80 0008 0000 0x0 0x0
0xffff9d8000016cf8 0008 0000 0x0 0x0
0xffff9d8000016d70 0008 0000 0x0 0x0
0xffff9d8000016de8 0008 0000 0x0 0x0
0xffff9d8000016e60 0008 0000 0x0 0x0
0xffff9d8000016ed8 0008 0000 0x0 0x0
0xffff9d8000016f50 0008 0000 0x0 0x0
0xffff9d8000016fc8 0008 0000 0x0 0x0
0xffff9d8000017040 0008 0000 0x0 0x0
0xffff9d80000170b8 0008 0000 0x0 0x0
0xffff9d8000017130 0008 0000 0x0 0x0
0xffff9d80000171a8 0008 0000 0x0 0x0
0xffff9d8000017220 0008 0000 0x0 0x0
0xffff9d8000017298 0008 0000 0x0 0x0
0xffff9d8000017310 0008 0000 0x0 0x0
0xffff9d8000017388 0008 0000 0x0 0x0
0xffff9d8000017400 0008 0000 0x0 0x0
0xffff9d8000017478 0008 0000 0x0 0x0
0xffff9d80000174f0 0008 0000 0x0 0x0
0xffff9d8000017568 0008 0000 0x0 0x0
0xffff9d80000175e0 0008 0000 0x0 0x0
0xffff9d8000017658 0008 0000 0x0 0x0
0xffff9d80000176d0 0008 0000 0x0 0x0
0xffff9d8000017748 0008 0000 0x0 0x0
0xffff9d80000177c0 0008 0000 0x0 0x0
0xffff9d8000017838 0008 0000 0x0 0x0
0xffff9d80000178b0 0008 0000 0x0 0x0
0xffff9d8000017928 0008 0000 0x0 0x0
0xffff9d80000179a0 0008 0000 0x0 0x0
0xffff9d8000017a18 0008 0000 0x0 0x0
0xffff9d8000017a90 0008 0000 0x0 0x0
0xffff9d8000017b08 0008 0000 0x0 0x0
0xffff9d8000017b80 0008 0000 0x0 0x0
0xffff9d8000017bf8 0008 0000 0x0 0x0
0xffff9d8000017c70 0008 0000 0x0 0x0
0xffff9d8000017ce8 0008 0000 0x0 0x0
0xffff9d8000017d60 0008 0000 0x0 0x0
0xffff9d8000017dd8 0008 0000 0x0 0x0
0xffff9d8000017e50 0008 0000 0x0 0x0
0xffff9d8000017ec8 0008 0000 0x0 0x0
0xffff9d8000017f40 0008 0000 0x0 0x0
0xffff9d8000017fb8 0008 0000 0x0 0x0
0xffff9d8000018030 0008 0000 0x0 0x0
0xffff9d80000180a8 0008 0000 0x0 0x0
0xffff9d8000018120 0008 0000 0x0 0x0
0xffff9d8000018198 0008 0000 0x0 0x0
0xffff9d8000018210 0008 0000 0x0 0x0
0xffff9d8000018288 0008 0000 0x0 0x0
0xffff9d8000018300 0008 0000 0x0 0x0
0xffff9d8000018378 0008 0000 0x0 0x0
0xffff9d80000183f0 0008 0000 0x0 0x0
0xffff9d8000018468 0008 0000 0x0 0x0
0xffff9d80000184e0 0008 0000 0x0 0x0
0xffff9d8000018558 0008 0000 0x0 0x0
0xffff9d80000185d0 0008 0000 0x0 0x0
0xffff9d8000018648 0008 0000 0x0 0x0
0xffff9d80000186c0 0008 0000 0x0 0x0
0xffff9d8000018738 0008 0000 0x0 0x0
0xffff9d80000187b0 0008 0000 0x0 0x0
0xffff9d8000018828 0008 0000 0x0 0x0
0xffff9d80000188a0 0008 0000 0x0 0x0
0xffff9d8000018918 0008 0000 0x0 0x0
0xffff9d8000018990 0008 0000 0x0 0x0
0xffff9d8000018a08 0008 0000 0x0 0x0
0xffff9d8000018a80 0008 0000 0x0 0x0
0xffff9d8000018af8 0008 0000 0x0 0x0
0xffff9d8000018b70 0008 0000 0x0 0x0
0xffff9d8000018be8 0008 0000 0x0 0x0
0xffff9d8000018c60 0008 0000 0x0 0x0
0xffff9d8000018cd8 0008 0000 0x0 0x0
0xffff9d8000018d50 0008 0000 0x0 0x0
0xffff9d8000018dc8 0008 0000 0x0 0x0
0xffff9d8000018e40 0008 0000 0x0 0x0
0xffff9d8000018eb8 0008 0000 0x0 0x0
0xffff9d8000018f30 0008 0000 0x0 0x0
0xffff9d8000018fa8 0008 0000 0x0 0x0
0xffff9d8000019020 0008 0000 0x0 0x0
0xffff9d8000019098 0008 0000 0x0 0x0
0xffff9d8000019110 0008 0000 0x0 0x0
0xffff9d8000019188 0008 0000 0x0 0x0
0xffff9d8000019200 0008 0000 0x0 0x0
0xffff9d8000019278 0008 0000 0x0 0x0
0xffff9d80000192f0 0008 0000 0x0 0x0
0xffff9d8000019368 0008 0000 0x0 0x0
0xffff9d80000193e0 0008 0000 0x0 0x0
0xffff9d8000019458 0008 0000 0x0 0x0
0xffff9d80000194d0 0008 0000 0x0 0x0
0xffff9d8000019548 0008 0000 0x0 0x0
0xffff9d80000195c0 0008 0000 0x0 0x0
0xffff9d8000019638 0008 0000 0x0 0x0
0xffff9d80000196b0 0008 0000 0x0 0x0
0xffff9d8000019728 0008 0000 0x0 0x0
0xffff9d80000197a0 0008 0000 0x0 0x0
0xffff9d8000019818 0008 0000 0x0 0x0
0xffff9d8000019890 0008 0000 0x0 0x0
0xffff9d8000019908 0008 0000 0x0 0x0
0xffff9d8000019980 0008 0000 0x0 0x0
0xffff9d80000199f8 0008 0000 0x0 0x0
0xffff9d8000019a70 0008 0000 0x0 0x0
0xffff9d8000019ae8 0008 0000 0x0 0x0
0xffff9d8000019b60 0008 0000 0x0 0x0
0xffff9d8000019bd8 0008 0000 0x0 0x0
0xffff9d8000019c50 0008 0000 0x0 0x0
0xffff9d8000019cc8 0008 0000 0x0 0x0
0xffff9d8000019d40 0008 0000 0x0 0x0
0xffff9d8000019db8 0008 0000 0x0 0x0
0xffff9d8000019e30 0008 0000 0x0 0x0
0xffff9d8000019ea8 0008 0000 0x0 0x0
0xffff9d8000019f20 0008 0000 0x0 0x0
0xffff9d8000019f98 0008 0000 0x0 0x0
0xffff9d800001a010 0008 0000 0x0 0x0
0xffff9d800001a088 0008 0000 0x0 0x0
0xffff9d800001a100 0008 0000 0x0 0x0
0xffff9d800001a178 0008 0000 0x0 0x0
0xffff9d800001a1f0 0008 0000 0x0 0x0
0xffff9d800001a268 0008 0000 0x0 0x0
0xffff9d800001a2e0 0008 0000 0x0 0x0
0xffff9d800001a358 0008 0000 0x0 0x0
0xffff9d800001a3d0 0008 0000 0x0 0x0
0xffff9d800001a448 0008 0000 0x0 0x0
0xffff9d800001a4c0 0008 0000 0x0 0x0
0xffff9d800001a538 0008 0000 0x0 0x0
0xffff9d800001a5b0 0008 0000 0x0 0x0
0xffff9d800001a628 0008 0000 0x0 0x0
0xffff9d800001a6a0 0008 0000 0x0 0x0
0xffff9d800001a718 0008 0000 0x0 0x0
0xffff9d800001a790 0008 0000 0x0 0x0
0xffff9d800001a808 0008 0000 0x0 0x0
0xffff9d800001a880 0008 0000 0x0 0x0
0xffff9d800001a8f8 0008 0000 0x0 0x0
0xffff9d800001a970 0008 0000 0x0 0x0
0xffff9d800001a9e8 0008 0000 0x0 0x0
0xffff9d800001aa60 0008 0000 0x0 0x0
0xffff9d800001aad8 0008 0000 0x0 0x0
0xffff9d800001ab50 0008 0000 0x0 0x0
0xffff9d800001abc8 0008 0000 0x0 0x0
0xffff9d800001ac40 0008 0000 0x0 0x0
0xffff9d800001acb8 0008 0000 0x0 0x0
0xffff9d800001ad30 0008 0000 0x0 0x0
0xffff9d800001ada8 0008 0000 0x0 0x0
0xffff9d800001ae20 0008 0000 0x0 0x0
0xffff9d800001ae98 0008 0000 0x0 0x0
0xffff9d800001af10 0008 0000 0x0 0x0
0xffff9d800001af88 0008 0000 0x0 0x0
0xffff9d800001b000 0008 0000 0x0 0x0
0xffff9d800001b078 0008 0000 0x0 0x0
0xffff9d800001b0f0 0008 0000 0x0 0x0
0xffff9d800001b168 0008 0000 0x0 0x0
0xffff9d800001b1e0 0008 0000 0x0 0x0
0xffff9d800001b258 0008 0000 0x0 0x0
0xffff9d800001b2d0 0008 0000 0x0 0x0
0xffff9d800001b348 0008 0000 0x0 0x0
0xffff9d800001b3c0 0008 0000 0x0 0x0
0xffff9d800001b438 0008 0000 0x0 0x0
0xffff9d800001b4b0 0008 0000 0x0 0x0
0xffff9d800001b528 0008 0000 0x0 0x0
0xffff9d800001b5a0 0008 0000 0x0 0x0
0xffff9d800001b618 0008 0000 0x0 0x0
0xffff9d800001b690 0008 0000 0x0 0x0
0xffff9d800001b708 0008 0000 0x0 0x0
0xffff9d800001b780 0008 0000 0x0 0x0
0xffff9d800001b7f8 0008 0000 0x0 0x0
0xffff9d800001b870 000

[syzbot]

> #syz dup: page fault in shm_delete_mapping

Your 'dup:' command is accepted, but please keep
syzkaller-...@googlegroups.com mailing list in CC next time. It
serves as a history of what happened with each bug report. Thank you.