UBSan: Undefined Behavior in compat_50_route_output (2)

4 views
Skip to first unread message

syzbot

unread,
Jun 29, 2022, 5:50:23 PM6/29/22
to syzkaller-...@googlegroups.com
Hello,

syzbot found the following issue on:

HEAD commit: c2b46e72e50e bind.2: add references to specific protocol f..
git tree: netbsd
console output: https://syzkaller.appspot.com/x/log.txt?x=17b6c104080000
kernel config: https://syzkaller.appspot.com/x/.config?x=1420f906d33d9f1f
dashboard link: https://syzkaller.appspot.com/bug?extid=083d9be5cb3c2e78ed1c
compiler: g++ (Debian 10.2.1-6) 10.2.1 20210110

Unfortunately, I don't have any reproducer for this issue yet.

IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+083d9b...@syzkaller.appspotmail.com

[ 83.8866838] panic: UBSan: Undefined Behavior in /syzkaller/managers/ci2-netbsd-kubsan/kernel/sys/net/rtsock_shared.c:676:2, member access within misaligned address 0xfffffb91799fa04c for type 'struct rt_msghdr50' which requires 8 byte alignment

[ 83.9128724] cpu0: Begin traceback...
[ 83.9366779] vpanic() at netbsd:vpanic+0x2f2 sys/kern/subr_prf.c:293
[ 84.0466776] Report() at netbsd:Report+0x3b sys/../common/lib/libc/misc/ubsan.c:1352
[ 84.1266823] HandleTypeMismatch() at netbsd:HandleTypeMismatch+0xfc sys/../common/lib/libc/misc/ubsan.c:432
[ 84.1966825] compat_50_route_output() at netbsd:compat_50_route_output+0x1d43 sys/net/rtsock_shared.c:676
[ 84.2666801] raw_send() at netbsd:raw_send+0x20c sys/net/raw_usrreq.c:182
[ 84.3366780] compat_50_route_send_wrapper() at netbsd:compat_50_route_send_wrapper+0xb2 compat_50_route_send sys/net/rtsock_shared.c:505 [inline]
[ 84.3366780] compat_50_route_send_wrapper() at netbsd:compat_50_route_send_wrapper+0xb2 sys/net/rtsock_shared.c:1754
[ 84.4166808] sosend() at netbsd:sosend+0x1a26 sys/kern/uipc_socket.c:1069
[ 84.4866784] do_sys_sendmsg_so() at netbsd:do_sys_sendmsg_so+0x6f3 sys/kern/uipc_syscalls.c:629
[ 84.5566784] do_sys_sendmsg() at netbsd:do_sys_sendmsg+0xfc sys/kern/uipc_syscalls.c:679
[ 84.6266773] sys_sendto() at netbsd:sys_sendto+0xc9 sys/kern/uipc_syscalls.c:514
[ 84.6866776] sys___syscall() at netbsd:sys___syscall+0x1e3 sy_call sys/sys/syscallvar.h:65 [inline]
[ 84.6866776] sys___syscall() at netbsd:sys___syscall+0x1e3 sys/kern/sys_syscall.c:90
[ 84.7566770] syscall() at netbsd:syscall+0x2da sy_call sys/sys/syscallvar.h:65 [inline]
[ 84.7566770] syscall() at netbsd:syscall+0x2da sy_invoke sys/sys/syscallvar.h:94 [inline]
[ 84.7566770] syscall() at netbsd:syscall+0x2da sys/arch/x86/x86/syscall.c:138
[ 84.7666768] --- syscall (number 133 via SYS_syscall) ---
[ 84.7866783] netbsd:syscall+0x2da:
[ 84.7968186] cpu0: End traceback...
[ 84.7968186] fatal breakpoint trap in supervisor mode
[ 84.7968186] trap type 1 code 0 rip 0xffffffff80221ab5 cs 0x8 rflags 0x246 cr2 0x7100e49aa360 ilevel 0x4 rsp 0xffffdb00d15ab3e0
[ 84.8173698] curlwp 0xfffffb9186dae300 pid 7344.6222 lowest kstack 0xffffdb00d15a72c0
Stopped in pid 7344.6222 (syz-executor.1) at netbsd:breakpoint+0x5: leave
?
breakpoint() at netbsd:breakpoint+0x5
db_panic() at netbsd:db_panic+0xec sys/ddb/db_panic.c:69
vpanic() at netbsd:vpanic+0x2f2 sys/kern/subr_prf.c:293
Report() at netbsd:Report+0x3b sys/../common/lib/libc/misc/ubsan.c:1352
HandleTypeMismatch() at netbsd:HandleTypeMismatch+0xfc sys/../common/lib/libc/misc/ubsan.c:432
compat_50_route_output() at netbsd:compat_50_route_output+0x1d43 sys/net/rtsock_shared.c:676
raw_send() at netbsd:raw_send+0x20c sys/net/raw_usrreq.c:182
compat_50_route_send_wrapper() at netbsd:compat_50_route_send_wrapper+0xb2 compat_50_route_send sys/net/rtsock_shared.c:505 [inline]
compat_50_route_send_wrapper() at netbsd:compat_50_route_send_wrapper+0xb2 sys/net/rtsock_shared.c:1754
sosend() at netbsd:sosend+0x1a26 sys/kern/uipc_socket.c:1069
do_sys_sendmsg_so() at netbsd:do_sys_sendmsg_so+0x6f3 sys/kern/uipc_syscalls.c:629
do_sys_sendmsg() at netbsd:do_sys_sendmsg+0xfc sys/kern/uipc_syscalls.c:679
sys_sendto() at netbsd:sys_sendto+0xc9 sys/kern/uipc_syscalls.c:514
sys___syscall() at netbsd:sys___syscall+0x1e3 sy_call sys/sys/syscallvar.h:65 [inline]
sys___syscall() at netbsd:sys___syscall+0x1e3 sys/kern/sys_syscall.c:90
syscall() at netbsd:syscall+0x2da sy_call sys/sys/syscallvar.h:65 [inline]
syscall() at netbsd:syscall+0x2da sy_invoke sys/sys/syscallvar.h:94 [inline]
syscall() at netbsd:syscall+0x2da sys/arch/x86/x86/syscall.c:138
--- syscall (number 133 via SYS_syscall) ---
netbsd:syscall+0x2da:
Panic string: UBSan: Undefined Behavior in /syzkaller/managers/ci2-netbsd-kubsan/kernel/sys/net/rtsock_shared.c:676:2, member access within misaligned address 0xfffffb91799fa04c for type 'struct rt_msghdr50' which requires 8 byte alignment

PID LID S CPU FLAGS STRUCT LWP * NAME WAIT
7609 7609 2 0 0 fffffb91869f5480 syz-executor.2
7633 7633 2 0 0 fffffb9179d21780 syz-executor.5
7344 >6222 7 0 100 fffffb9186dae300 syz-executor.1
7344 7344 2 0 10000000 fffffb917a4f04c0 syz-executor.1
5692 5692 3 0 180 fffffb917a418480 syz-executor.1 parked
5559 5559 3 1 180 fffffb91872fb4c0 syz-executor.2 parked
5205 5205 3 1 180 fffffb91872fb900 syz-executor.0 parked
5072 5072 3 0 180 fffffb917de5ab40 syz-executor.0 parked
4434 4434 3 0 180 fffffb9186dae740 syz-executor.1 parked
1222 1222 3 1 40 fffffb917930b300 syz-executor.3 biowait
1220 1220 2 1 40 fffffb91707dd300 syz-executor.5
1075 >1075 7 1 140 fffffb917baa0a40 syz-executor.4
1192 1192 2 1 40 fffffb917930bb80 syz-executor.2
1107 1107 3 0 180 fffffb9179d21bc0 syz-executor.1 nanoslp
1195 1195 3 0 40 fffffb917a903140 syz-executor.0 biowait
1082 1223 3 1 180 fffffb91797d1980 syz-fuzzer kqueue
1082 1054 3 1 1c0 fffffb9178e14280 syz-fuzzer parked
1082 1221 2 0 100 fffffb917baa0600 syz-fuzzer
1082 1078 3 0 180 fffffb917baa01c0 syz-fuzzer parked
1082 1000 3 1 180 fffffb9178e146c0 syz-fuzzer parked
1082 1111 3 1 180 fffffb917a9039c0 syz-fuzzer parked
1082 1086 3 0 180 fffffb917b2b35c0 syz-fuzzer nanoslp
1082 1082 3 1 180 fffffb917b2b3a00 syz-fuzzer parked
1080 1080 2 0 100 fffffb917b2b3180 sshd
1074 1074 3 0 180 fffffb9179e270c0 getty nanoslp
1003 1003 3 0 180 fffffb9178a90200 getty nanoslp
1073 1073 3 0 180 fffffb9178a8dac0 getty nanoslp
1115 1115 3 0 1c0 fffffb9178a8d680 getty ttyraw
1066 1066 3 1 180 fffffb917a903580 sshd select
997 997 3 0 180 fffffb91797d1540 powerd kqueue
687 687 3 0 180 fffffb91797d1100 syslogd kqueue
547 547 3 1 180 fffffb91795b8b40 dhcpcd poll
546 546 3 1 180 fffffb91795b82c0 dhcpcd poll
600 600 3 1 180 fffffb917a4f0080 dhcpcd poll
587 587 3 1 180 fffffb9179d21340 dhcpcd poll
289 289 3 1 180 fffffb9178e14b00 dhcpcd poll
288 288 3 1 180 fffffb91795b8700 dhcpcd poll
351 351 3 1 180 fffffb917930b740 dhcpcd poll
1 1 3 1 180 fffffb9170856540 init wait
0 5708 2 0 200 fffffb9187b20780 ktrace
0 7527 3 0 200 fffffb9187b20340 ktrace ktrwait
0 4781 3 0 200 fffffb91869f58c0 ktrace ktrwait
0 4713 3 0 200 fffffb917de5a700 ktrace ktrwait
0 4573 3 1 200 fffffb9186721240 ktrace ktrwait
0 968 3 0 200 fffffb9178a90640 physiod physiod
0 194 3 0 200 fffffb9178a8d240 ioflush syncer
0 193 3 0 200 fffffb91707dd740 pooldrain pooldrain
0 192 3 1 200 fffffb9178a90a80 pgdaemon pgdaemon
0 167 3 1 200 fffffb91769aaa40 usb7 usbevt
0 166 3 1 200 fffffb91769aa600 usb6 usbevt
0 165 3 1 200 fffffb91769aa1c0 usb5 usbevt
0 164 3 1 200 fffffb917394da00 usb4 usbevt
0 31 3 1 200 fffffb917394d5c0 usb3 usbevt
0 63 3 0 200 fffffb917394d180 usb2 usbevt
0 126 3 0 200 fffffb91718f09c0 usb1 usbevt
0 125 3 0 200 fffffb91718f0580 usb0 usbevt
0 124 3 1 200 fffffb91718f0140 usbtask-dr usbtsk
0 123 3 1 200 fffffb917013d6c0 usbtask-hc usbtsk
0 122 3 1 200 fffffb9170856980 npfgc0 npfgcw
0 121 3 1 200 fffffb9170856100 rt_free rt_free
0 120 3 1 200 fffffb9170859940 unpgc unpgc
0 119 3 0 200 fffffb9170859500 key_timehandler key_timehandler
0 118 3 1 200 fffffb91708590c0 icmp6_wqinput/1 icmp6_wqinput
0 117 3 0 200 fffffb9170824900 icmp6_wqinput/0 icmp6_wqinput
0 116 3 0 200 fffffb91708244c0 nd6_timer nd6_timer
0 115 3 1 200 fffffb9170824080 carp6_wqinput/1 carp6_wqinput
0 114 3 0 200 fffffb91708178c0 carp6_wqinput/0 carp6_wqinput
0 113 3 1 200 fffffb9170817480 carp_wqinput/1 carp_wqinput
0 112 3 0 200 fffffb9170817040 carp_wqinput/0 carp_wqinput
0 111 3 1 200 fffffb91707eabc0 icmp_wqinput/1 icmp_wqinput
0 110 3 0 200 fffffb91707ea780 icmp_wqinput/0 icmp_wqinput
0 109 3 1 200 fffffb91707ddb80 rt_timer rt_timer
0 108 3 1 200 fffffb91707ea340 vmem_rehash vmem_rehash
0 99 3 0 200 fffffb917014ab40 entbutler entropy
0 98 3 0 200 fffffb917014a700 viomb balloon
0 97 3 1 200 fffffb917014a2c0 vioif0_txrx/1 vioif0_txrx
0 96 3 0 200 fffffb917013db00 vioif0_txrx/0 vioif0_txrx
0 29 3 1 200 fffffb917013d280 scsibus0 sccomp
0 28 3 0 200 fffffb916ebc3ac0 pms0 pmsreset
0 27 3 1 200 fffffb916ebc3680 xcall/1 xcall
0 26 1 1 200 fffffb916ebc3240 softser/1
0 25 1 1 200 fffffb916eb8ea80 softclk/1
0 24 1 1 200 fffffb916eb8e640 softbio/1
0 23 1 1 200 fffffb916eb8e200 softnet/1
0 22 1 1 201 fffffb929db35a40 idle/1
0 21 3 0 200 fffffb929db35600 lnxsyswq lnxsyswq
0 20 3 0 200 fffffb929db351c0 lnxubdwq lnxubdwq
0 19 3 0 200 fffffb929db44a00 lnxpwrwq lnxpwrwq
0 18 3 0 200 fffffb929db445c0 lnxlngwq lnxlngwq
0 17 3 0 200 fffffb929db44180 lnxhipwq lnxhipwq
0 16 3 1 200 fffffb929db5d9c0 lnxrcugc lnxrcugc
0 15 3 0 200 fffffb929db5d580 sysmon smtaskq
0 14 3 0 200 fffffb929db5d140 pmfsuspend pmfsuspend
0 13 3 0 200 fffffb929db6a980 pmfevent pmfevent
0 12 3 1 200 fffffb929db6a540 sopendfree sopendfr
0 11 3 1 200 fffffb929db6a100 iflnkst iflnkst
0 10 3 1 200 fffffb929eb9b940 nfssilly nfssilly
0 9 3 0 200 fffffb929eb9b500 vdrain vdrain
0 8 3 1 200 fffffb929eb9b0c0 modunload mod_unld
0 7 3 0 200 fffffb929ebc2900 xcall/0 xcall
0 6 1 0 200 fffffb929ebc24c0 softser/0
0 5 1 0 200 fffffb929ebc2080 softclk/0
0 4 1 0 200 fffffb929ebf18c0 softbio/0
0 3 1 0 200 fffffb929ebf1480 softnet/0
0 2 1 0 201 fffffb929ebf1040 idle/0
0 0 3 0 200 ffffffff86750900 swapper uvm
[Locks tracked through LWPs]

****** LWP 7344.6222 (syz-executor.1) @ 0xfffffb9186dae300, l_stat=7

*** Locks held:

* Lock 0 (initialized at soinit)
lock address : 0xfffffb929f071080 type : sleep/adaptive
initialized : 0xffffffff8394e22e
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xfffffb9186dae300 last held: 0xfffffb9186dae300
last locked* : 0xffffffff8394bae3 unlocked : 0xffffffff8394bbe4
owner field : 0xfffffb9186dae300 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

*** Locks wanted: none

****** LWP 5205.5205 (syz-executor.0) @ 0xfffffb91872fb900, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at module_hook_init)
lock address : 0xffffffff86beb1c0 type : sleep/adaptive
initialized : 0xffffffff8370d6c7
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 0
relevant lwp : 0xfffffb91872fb900 last held: 000000000000000000
last locked : 000000000000000000 unlocked*: 000000000000000000
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 1222.1222 (syz-executor.3) @ 0xfffffb917930b300, l_stat=3

*** Locks held:

* Lock 0 (initialized at vcache_alloc)
lock address : 0xfffffb917eff7740 type : sleep/adaptive
initialized : 0xffffffff839f3b40
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 1
relevant lwp : 0xfffffb917930b300 last held: 0xfffffb917930b300
last locked* : 0xffffffff83a53300 unlocked : 0xffffffff83a53484
owner/count : 0xfffffb917930b300 flags : 0x0000000000000004
Turnstile: no active turnstile for this lock.

* Lock 1 (initialized at vcache_alloc)
lock address : 0xfffffb917eff7ec0 type : sleep/adaptive
initialized : 0xffffffff839f3b40
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 1
relevant lwp : 0xfffffb917930b300 last held: 0xfffffb917930b300
last locked* : 0xffffffff83a53300 unlocked : 0xffffffff83a53484
owner/count : 0xfffffb917930b300 flags : 0x0000000000000004
Turnstile: no active turnstile for this lock.

*** Locks wanted: none

****** LWP 1195.1195 (syz-executor.0) @ 0xfffffb917a903140, l_stat=3

*** Locks held:

* Lock 0 (initialized at vcache_alloc)
lock address : 0xfffffb917d6ddc80 type : sleep/adaptive
initialized : 0xffffffff839f3b40
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xfffffb917a903140 last held: 0xfffffb917a903140
last locked* : 0xffffffff83a53300 unlocked : 0xffffffff83a53484
owner/count : 0xfffffb917a903140 flags : 0x0000000000000004
Turnstile: no active turnstile for this lock.

* Lock 1 (initialized at vcache_alloc)
lock address : 0xfffffb9187d5a9c0 type : sleep/adaptive
initialized : 0xffffffff839f3b40
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xfffffb917a903140 last held: 0xfffffb917a903140
last locked* : 0xffffffff83a53300 unlocked : 0xffffffff83a53484
owner/count : 0xfffffb917a903140 flags : 0x0000000000000004
Turnstile: no active turnstile for this lock.

*** Locks wanted: none

****** LWP 546.546 (dhcpcd) @ 0xfffffb91795b82c0, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at module_hook_init)
lock address : 0xffffffff86beb1c0 type : sleep/adaptive
initialized : 0xffffffff8370d6c7
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 0
relevant lwp : 0xfffffb91795b82c0 last held: 000000000000000000
last locked : 000000000000000000 unlocked*: 000000000000000000
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 600.600 (dhcpcd) @ 0xfffffb917a4f0080, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at module_hook_init)
lock address : 0xffffffff86beb1c0 type : sleep/adaptive
initialized : 0xffffffff8370d6c7
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 0
relevant lwp : 0xfffffb917a4f0080 last held: 000000000000000000
last locked : 000000000000000000 unlocked*: 000000000000000000
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 288.288 (dhcpcd) @ 0xfffffb91795b8700, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at module_hook_init)
lock address : 0xffffffff86beb1c0 type : sleep/adaptive
initialized : 0xffffffff8370d6c7
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 0
relevant lwp : 0xfffffb91795b8700 last held: 000000000000000000
last locked : 000000000000000000 unlocked*: 000000000000000000
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 351.351 (dhcpcd) @ 0xfffffb917930b740, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at module_hook_init)
lock address : 0xffffffff86beb1c0 type : sleep/adaptive
initialized : 0xffffffff8370d6c7
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 0
relevant lwp : 0xfffffb917930b740 last held: 000000000000000000
last locked : 000000000000000000 unlocked*: 000000000000000000
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 0.11 (iflnkst) @ 0xfffffb929db6a100, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at module_hook_init)
lock address : 0xffffffff86beb1c0 type : sleep/adaptive
initialized : 0xffffffff8370d6c7
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 0
relevant lwp : 0xfffffb929db6a100 last held: 000000000000000000
last locked : 000000000000000000 unlocked*: 000000000000000000
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 0.5 (softclk/0) @ 0xfffffb929ebc2080, l_stat=1

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at module_hook_init)
lock address : 0xffffffff86beb1c0 type : sleep/adaptive
initialized : 0xffffffff8370d6c7
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xfffffb929ebc2080 last held: 000000000000000000
last locked : 000000000000000000 unlocked*: 000000000000000000
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 0.0 (swapper) @ 0xffffffff86750900, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at module_hook_init)
lock address : 0xffffffff86beb1c0 type : sleep/adaptive
initialized : 0xffffffff8370d6c7
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffffffff86750900 last held: 000000000000000000
last locked : 000000000000000000 unlocked*: 000000000000000000
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

[Locks tracked through CPUs]

******* Locks held on cpu0:

* Lock 0 (initialized at main)
lock address : 0xffffffff86beb0c0 type : spin
initialized : 0xffffffff83ffb759
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xfffffb9186dae300 last held: 0xfffffb9186dae300
last locked* : 0xffffffff827324ad unlocked : 0xffffffff802aea95
curcpu holds : 1 wanted by: 000000000000000000

* Lock 1 (initialized at kprintf_init)
lock address : 0xffffffff86cce668 type : spin
initialized : 0xffffffff8385b333
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xfffffb9186dae300 last held: 0xfffffb9186dae300
last locked* : 0xffffffff8385b3c1 unlocked : 0xffffffff8385b43c
owner field : 0x0000000000000800 wait/spin: 0/1

PAGE FLAG PQ UOBJECT UANON
0xffffdb0000007180 0045 00000000 0x0 0x0
0xffffdb0000007200 0045 00000000 0x0 0x0
0xffffdb0000007280 0045 00000000 0x0 0x0
0xffffdb0000007300 0045 00000000 0x0 0x0
0xffffdb0000007380 0045 00000000 0x0 0x0
0xffffdb0000007400 0045 00000000 0x0 0x0
0xffffdb0000007480 0045 00000000 0x0 0x0
0xffffdb0000007500 0045 00000000 0x0 0x0
0xffffdb0000007580 0045 00000000 0x0 0x0
0xffffdb0000007600 0045 00000000 0x0 0x0
0xffffdb0000007680 0041 00000000 0x0 0x0
0xffffdb0000007700 0041 00000000 0x0 0x0
0xffffdb0000007780 0041 00000000 0x0 0x0
0xffffdb0000007800 0041 00000000 0x0 0x0
0xffffdb0000007880 0041 00000000 0x0 0x0
0xffffdb0000007900 0045 00000000 0x0 0x0
0xffffdb0000007980 0041 00000000 0x0 0x0
0xffffdb0000007a00 0041 00000000 0x0 0x0
0xffffdb0000007a80 0041 00000000 0x0 0x0
0xffffdb0000007b00 0041 00000000 0x0 0x0
0xffffdb0000007b80 0041 00000000 0x0 0x0
0xffffdb0000007c00 0041 00000000 0x0 0x0
0xffffdb0000007c80 0041 00000000 0x0 0x0
0xffffdb0000007d00 0041 00000000 0x0 0x0
0xffffdb0000007d80 0041 00000000 0x0 0x0
0xffffdb0000007e00 0041 00000000 0x0 0x0
0xffffdb0000007e80 0041 00000000 0x0 0x0
0xffffdb0000007f00 0041 00000000 0x0 0x0
0xffffdb0000007f80 0041 00000000 0x0 0x0
0xffffdb0000008000 0041 00000000 0x0 0x0
0xffffdb0000008080 0041 00000000 0x0 0x0
0xffffdb0000008100 0041 00000000 0x0 0x0
0xffffdb0000008180 0041 00000000 0x0 0x0
0xffffdb0000008200 0041 00000000 0x0 0x0
0xffffdb0000008280 0041 00000000 0x0 0x0
0xffffdb0000008300 0041 00000000 0x0 0x0
0xffffdb0000008380 0041 00000000 0x0 0x0
0xffffdb0000008400 0041 00000000 0x0 0x0
0xffffdb0000008480 0041 00000000 0x0 0x0
0xffffdb0000008500 0041 00000000 0x0 0x0
0xffffdb0000008580 0041 00000000 0x0 0x0
0xffffdb0000008600 0041 00000000 0x0 0x0
0xffffdb0000008680 0041 00000000 0x0 0x0
0xffffdb0000008700 0041 00000000 0x0 0x0
0xffffdb0000008780 0041 00000000 0x0 0x0
0xffffdb0000008800 0041 00000000 0x0 0x0
0xffffdb0000008880 0041 00000000 0x0 0x0
0xffffdb0000008900 0041 00000000 0x0 0x0
0xffffdb0000008980 0041 00000000 0x0 0x0
0xffffdb0000008a00 0041 00000000 0x0 0x0
0xffffdb0000008a80 0041 00000000 0x0 0x0
0xffffdb0000008b00 0041 00000000 0x0 0x0
0xffffdb0000008b80 0045 00000000 0x0 0x0
0xffffdb0000008c00 0045 00000000 0x0 0x0
0xffffdb0000008c80 0041 00000000 0x0 0x0
0xffffdb0000008d00 0041 00000000 0x0 0x0
0xffffdb0000008d80 0041 00000000 0x0 0x0
0xffffdb0000008e00 0041 00000000 0x0 0x0
0xffffdb0000008e80 0041 00000000 0x0 0x0
0xffffdb0000008f00 0041 00000000 0x0 0x0
0xffffdb0000008f80 0041 00000000 0x0 0x0
0xffffdb0000009000 0041 00000000 0x0 0x0
0xffffdb0000009080 0045 00000000 0x0 0x0
0xffffdb0000009100 0041 00000000 0x0 0x0
0xffffdb0000009180 0041 00000000 0x0 0x0
0xffffdb0000009200 0041 00000000 0x0 0x0
0xffffdb0000009280 0041 00000000 0x0 0x0
0xffffdb0000009300 0041 00000000 0x0 0x0
0xffffdb0000009380 0041 00000000 0x0 0x0
0xffffdb0000009400 0041 00000000 0x0 0x0
0xffffdb0000009480 0041 00000000 0x0 0x0
0xffffdb0000009500 0041 00000000 0x0 0x0
0xffffdb0000009580 0041 00000000 0x0 0x0
0xffffdb0000009600 0041 00000000 0x0 0x0
0xffffdb0000009680 0041 00000000 0x0 0x0
0xffffdb0000009700 0041 00000000 0x0 0x0
0xffffdb0000009780 0041 00000000 0x0 0x0
0xffffdb0000009800 0041 00000000 0x0 0x0
0xffffdb0000009880 0041 00000000 0x0 0x0
0xffffdb0000009900 0041 00000000 0x0 0x0
0xffffdb0000009980 0041 00000000 0x0 0x0
0xffffdb0000009a00 0041 00000000 0x0 0x0
0xffffdb0000009a80 0041 00000000 0x0 0x0
0xffffdb0000009b00 0041 00000000 0x0 0x0
0xffffdb0000009b80 0041 00000000 0x0 0x0
0xffffdb0000009c00 0041 00000000 0x0 0x0
0xffffdb0000009c80 0041 00000000 0x0 0x0
0xffffdb0000009d00 0041 00000000 0x0 0x0
0xffffdb0000009d80 0041 00000000 0x0 0x0
0xffffdb0000009e00 0041 00000000 0x0 0x0
0xffffdb0000009e80 0041 00000000 0x0 0x0
0xffffdb0000009f00 0041 00000000 0x0 0x0
0xffffdb0000009f80 0041 00000000 0x0 0x0
0xffffdb000000a000 0041 00000000 0x0 0x0
0xffffdb000000a080 0041 00000000 0x0 0x0
0xffffdb000000a100 0041 00000000 0x0 0x0
0xffffdb000000a180 0041 00000000 0x0 0x0
0xffffdb000000a200 0041 00000000 0x0 0x0
0xffffdb000000a280 0045 00000000 0x0 0x0
0xffffdb000000a300 0041 00000000 0x0 0x0
0xffffdb000000a380 0041 00000000 0x0 0x0
0xffffdb000000a400 0041 00000000 0x0 0x0
0xffffdb000000a480 0041 00000000 0x0 0x0
0xffffdb000000a500 0041 00000000 0x0 0x0
0xffffdb000000a580 0041 00000000 0x0 0x0
0xffffdb000000a600 0045 00000000 0x0 0x0
0xffffdb000000a680 0041 00000000 0x0 0x0
0xffffdb000000a700 0041 00000000 0x0 0x0
0xffffdb000000a780 0041 00000000 0x0 0x0
0xffffdb000000a800 0041 00000000 0x0 0x0
0xffffdb000000a880 0041 00000000 0x0 0x0
0xffffdb000000a900 0041 00000000 0x0 0x0
0xffffdb000000a980 0041 00000000 0x0 0x0
0xffffdb000000aa00 0041 00000000 0x0 0x0
0xffffdb000000aa80 0041 00000000 0x0 0x0
0xffffdb000000ab00 0041 00000000 0x0 0x0
0xffffdb000000ab80 0041 00000000 0x0 0x0
0xffffdb000000ac00 0041 00000000 0x0 0x0
0xffffdb000000ac80 0041 00000000 0x0 0x0
0xffffdb000000ad00 0041 00000000 0x0 0x0
0xffffdb000000ad80 0041 00000000 0x0 0x0
0xffffdb000000ae00 0041 00000000 0x0 0x0
0xffffdb000000ae80 0045 00000000 0x0 0x0
0xffffdb000000af00 0045 00000000 0x0 0x0
0xffffdb000000af80 0041 00000000 0x0 0x0
0xffffdb000000b000 0041 00000000 0x0 0x0
0xffffdb000000b080 0041 00000000 0x0 0x0
0xffffdb000000b100 0041 00000000 0x0 0x0
0xffffdb000000b180 0045 00000000 0x0 0x0
0xffffdb000000b200 0045 00000000 0x0 0x0
0xffffdb000000b280 0045 00000000 0x0 0x0
0xffffdb000000b300 0045 00000000 0x0 0x0
0xffffdb000000b380 0045 00000000 0x0 0x0
0xffffdb000000b400 0041 00000000 0x0 0x0
0xffffdb000000b480 0041 00000000 0x0 0x0
0xffffdb000000b500 0045 00000000 0x0 0x0
0xffffdb000000b580 0045 00000000 0x0 0x0
0xffffdb000000b600 0045 00000000 0x0 0x0
0xffffdb000000b680 0045 00000000 0x0 0x0
0xffffdb000000b700 0045 00000000 0x0 0x0
0xffffdb000000b780 0045 00000000 0x0 0x0
0xffffdb000000b800 0041 00000000 0x0 0x0
0xffffdb000000b880 0041 00000000 0x0 0x0
0xffffdb000000b900 0045 00000000 0x0 0x0
0xffffdb000000b980 0045 00000000 0x0 0x0
0xffffdb000000ba00 0045 00000000 0x0 0x0
0xffffdb000000ba80 0045 00000000 0x0 0x0
0xffffdb000000bb00 0045 00000000 0x0 0x0
0xffffdb000000bb80 0045 00000000 0x0 0x0
0xffffdb000000bc00 0045 00000000 0x0 0x0
0xffffdb000000bc80 0041 00000000 0x0 0x0
0xffffdb000000bd00 0045 00000000 0x0 0x0
0xffffdb000000bd80 0045 00000000 0x0 0x0
0xffffdb000000be00 0045 00000000 0x0 0x0
0xffffdb000000be80 0045 00000000 0x0 0x0
0xffffdb000000bf00 0045 00000000 0x0 0x0
0xffffdb000000bf80 0045 00000000 0x0 0x0
0xffffdb000000c000 0045 00000000 0x0 0x0
0xffffdb000000c080 0045 00000000 0x0 0x0
0xffffdb000000c100 0045 00000000 0x0 0x0
0xffffdb000000c180 0045 00000000 0x0 0x0
0xffffdb000000c200 0045 00000000 0x0 0x0
0xffffdb000000c280 0045 00000000 0x0 0x0
0xffffdb000000c300 0045 00000000 0x0 0x0
0xffffdb000000c380 0045 00000000 0x0 0x0
0xffffdb000000c400 0045 00000000 0x0 0x0
0xffffdb000000c480 0045 00000000 0x0 0x0
0xffffdb000000c500 0045 00000000 0x0 0x0
0xffffdb000000c580 0045 00000000 0x0 0x0
0xffffdb000000c600 0045 00000000 0x0 0x0
0xffffdb000000c680 0045 00000000 0x0 0x0
0xffffdb000000c700 0041 00000000 0x0 0x0
0xffffdb000000c780 0045 00000000 0x0 0x0
0xffffdb000000c800 0045 00000000 0x0 0x0
0xffffdb000000c880 0045 00000000 0x0 0x0
0xffffdb000000c900 0045 00000000 0x0 0x0
0xffffdb000000c980 0045 00000000 0x0 0x0
0xffffdb000000ca00 0045 00000000 0x0 0x0
0xffffdb000000ca80 0041 00000000 0x0 0x0
0xffffdb000000cb00 0041 00000000 0x0 0x0
0xffffdb000000cb80 0041 00000000 0x0 0x0
0xffffdb000000cc00 0045 00000000 0x0 0x0
0xffffdb000000cc80 0045 00000000 0x0 0x0
0xffffdb000000cd00 0041 00000000 0x0 0x0
0xffffdb000000cd80 0041 00000000 0x0 0x0
0xffffdb000000ce00 0041 00000000 0x0 0x0
0xffffdb000000ce80 0041 00000000 0x0 0x0
0xffffdb000000cf00 0041 00000000 0x0 0x0
0xffffdb000000cf80 0041 00000000 0x0 0x0
0xffffdb000000d000 0045 00000000 0x0 0x0
0xffffdb000000d080 0045 00000000 0x0 0x0
0xffffdb000000d100 0041 00000000 0x0 0x0
0xffffdb000000d180 0041 00000000 0x0 0x0
0xffffdb000000d200 0041 00000000 0x0 0x0
0xffffdb000000d280 0041 00000000 0x0 0x0
0xffffdb000000d300 0045 00000000 0x0 0x0
0xffffdb000000d380 0041 00000000 0x0 0x0
0xffffdb000000d400 0041 00000000 0x0 0x0
0xffffdb000000d480 0045 00000000 0x0 0x0
0xffffdb000000d500 0041 00000000 0x0 0x0
0xffffdb000000d580 0041 00000000 0x0 0x0
0xffffdb000000d600 0041 00000000 0x0 0x0
0xffffdb000000d680 0045 00000000 0x0 0x0
0xffffdb000000d700 0041 00000000 0x0 0x0
0xffffdb000000d780 0045 00000000 0x0 0x0
0xffffdb000000d800 0041 00000000 0x0 0x0
0xffffdb000000d880 0041 00000000 0x0 0x0
0xffffdb000000d900 0041 00000000 0x0 0x0
0xffffdb000000d980 0041 00000000 0x0 0x0
0xffffdb000000da00 0041 00000000 0x0 0x0
0xffffdb000000da80 0041 00000000 0x0 0x0
0xffffdb000000db00 0045 00000000 0x0 0x0
0xffffdb000000db80 0041 00000000 0x0 0x0
0xffffdb000000dc00 0041 00000000 0x0 0x0
0xffffdb000000dc80 0041 00000000 0x0 0x0
0xffffdb000000dd00 0041 00000000 0x0 0x0
0xffffdb000000dd80 0041 00000000 0x0 0x0
0xffffdb000000de00 0041 00000000 0x0 0x0
0xffffdb000000de80 0041 00000000 0x0 0x0
0xffffdb000000df00 0045 00000000 0x0 0x0
0xffffdb000000df80 0045 00000000 0x0 0x0
0xffffdb000000e000 0045 00000000 0x0 0x0
0xffffdb000000e080 0041 00000000 0x0 0x0
0xffffdb000000e100 0045 00000000 0x0 0x0
0xffffdb000000e180 0045 00000000 0x0 0x0
0xffffdb000000e200 0045 00000000 0x0 0x0
0xffffdb000000e280 0045 00000000 0x0 0x0
0xffffdb000000e300 0045 00000000 0x0 0x0
0xffffdb000000e380 0045 00000000 0x0 0x0
0xffffdb000000e400 0041 00000000 0x0 0x0
0xffffdb000000e480 0045 00000000 0x0 0x0
0xffffdb000000e500 0041 00000000 0x0 0x0
0xffffdb000000e580 0041 00000000 0x0 0x0
0xffffdb000000e600 0041 00000000 0x0 0x0
0xffffdb000000e680 0041 00000000 0x0 0x0
0xffffdb000000e700 0041 00000000 0x0 0x0
0xffffdb000000e780 0045 00000000 0x0 0x0
0xffffdb000000e800 0045 00000000 0x0 0x0
0xffffdb000000e880 0041 00000000 0x0 0x0
0xffffdb000000e900 0041 00000000 0x0 0x0
0xffffdb000000e980 0041 00000000 0x0 0x0
0xffffdb000000ea00 0041 00000000 0x0 0x0
0xffffdb000000ea80 0045 00000000 0x0 0x0
0xffffdb000000eb00 0041 00000000 0x0 0x0
0xffffdb000000eb80 0041 00000000 0x0 0x0
0xffffdb000000ec00 0045 00000000 0x0 0x0
0xffffdb000000ec80 0045 00000000 0x0 0x0
0xffffdb000000ed00 0045 00000000 0x0 0x0
0xffffdb000000ed80 0041 00000000 0x0 0x0
0xffffdb000000ee00 0041 00000000 0x0 0x0
0xffffdb000000ee80 0041 00000000 0x0 0x0
0xffffdb000000ef00 0041 00000000 0x0 0x0
0xffffdb000000ef80 0041 00000000 0x0 0x0
0xffffdb000000f000 0045 00000000 0x0 0x0
0xffffdb000000f080 0041 00000000 0x0 0x0
0xffffdb000000f100 0041 00000000 0x0 0x0
0xffffdb000000f180 0041 00000000 0x0 0x0
0xffffdb000000f200 0041 00000000 0x0 0x0
0xffffdb000000f280 0045 00000000 0x0 0x0
0xffffdb000000f300 0041 00000000 0x0 0x0
0xffffdb000000f380 0045 00000000 0x0 0x0
0xffffdb000000f400 0041 00000000 0x0 0x0
0xffffdb000000f480 0041 00000000 0x0 0x0
0xffffdb000000f500 0041 00000000 0x0 0x0
0xffffdb000000f580 0041 00000000 0x0 0x0
0xffffdb000000f600 0041 00000000 0x0 0x0
0xffffdb000000f680 0041 00000000 0x0 0x0
0xffffdb000000f700 0041 00000000 0x0 0x0
0xffffdb000000f780 0041 00000000 0x0 0x0
0xffffdb000000f800 0041 00000000 0x0 0x0
0xffffdb000000f880 0045 00000000 0x0 0x0
0xffffdb000000f900 0041 00000000 0x0 0x0
0xffffdb000000f980 0045 00000000 0x0 0x0
0xffffdb000000fa00 0045 00000000 0x0 0x0
0xffffdb000000fa80 0041 00000000 0x0 0x0
0xffffdb000000fb00 0041 00000000 0x0 0x0
0xffffdb000000fb80 0041 00000000 0x0 0x0
0xffffdb000000fc00 0045 00000000 0x0 0x0
0xffffdb000000fc80 0041 00000000 0x0 0x0
0xffffdb000000fd00 0045 00000000 0x0 0x0
0xffffdb000000fd80 0041 00000000 0x0 0x0
0xffffdb000000fe00 0041 00000000 0x0 0x0
0xffffdb000000fe80 0041 00000000 0x0 0x0
0xffffdb000000ff00 0041 00000000 0x0 0x0
0xffffdb000000ff80 0041 00000000 0x0 0x0
0xffffdb0000010000 0041 00000000 0x0 0x0
0xffffdb0000010080 0041 00000000 0x0 0x0
0xffffdb0000010100 0041 00000000 0x0 0x0
0xffffdb0000010180 0041 00000000 0x0 0x0
0xffffdb0000010200 0041 00000000 0x0 0x0
0xffffdb0000010280 0041 00000000 0x0 0x0
0xffffdb0000010300 0041 00000000 0x0 0x0
0xffffdb0000010380 0041 00000000 0x0 0x0
0xffffdb0000010400 0045 00000000 0x0 0x0
0xffffdb0000010480 0045 00000000 0x0 0x0
0xffffdb0000010500 0045 00000000 0x0 0x0
0xffffdb0000010580 0045 00000000 0x0 0x0
0xffffdb0000010600 0045 00000000 0x0 0x0
0xffffdb0000010680 0041 00000000 0x0 0x0
0xffffdb0000010700 0045 00000000 0x0 0x0
0xffffdb0000010780 0041 00000000 0x0 0x0
0xffffdb0000010800 0041 00000000 0x0 0x0
0xffffdb0000010880 0041 00000000 0x0 0x0
0xffffdb0000010900 0041 00000000 0x0 0x0
0xffffdb0000010980 0041 00000000 0x0 0x0
0xffffdb0000010a00 0041 00000000 0x0 0x0
0xffffdb0000010a80 0045 00000000 0x0 0x0
0xffffdb0000010b00 0041 00000000 0x0 0x0
0xffffdb0000010b80 0041 00000000 0x0 0x0
0xffffdb0000010c00 0041 00000000 0x0 0x0
0xffffdb0000010c80 0045 00000000 0x0 0x0
0xffffdb0000010d00 0041 00000000 0x0 0x0
0xffffdb0000010d80 0041 00000000 0x0 0x0
0xffffdb0000010e00 0045 00000000 0x0 0x0
0xffffdb0000010e80 0041 00000000 0x0 0x0
0xffffdb0000010f00 0041 00000000 0x0 0x0
0xffffdb0000010f80 0041 00000000 0x0 0x0
0xffffdb0000011000 0041 00000000 0x0 0x0
0xffffdb0000011080 0041 00000000 0x0 0x0
0xffffdb0000011100 0041 00000000 0x0 0x0
0xffffdb0000011180 0041 00000000 0x0 0x0
0xffffdb0000011200 0041 00000000 0x0 0x0
0xffffdb0000011280 0041 00000000 0x0 0x0
0xffffdb0000011300 0041 00000000 0x0 0x0
0xffffdb0000011380 0041 00000000 0x0 0x0
0xffffdb0000011400 0041 00000000 0x0 0x0
0xffffdb0000011480 0041 00000000 0x0 0x0
0xffffdb0000011500 0041 00000000 0x0 0x0
0xffffdb0000011580 0041 00000000 0x0 0x0
0xffffdb0000011600 0041 00000000 0x0 0x0
0xffffdb0000011680 0041 00000000 0x0 0x0
0xffffdb0000011700 0041 00000000 0x0 0x0
0xffffdb0000011780 0041 00000000 0x0 0x0
0xffffdb0000011800 0041 00000000 0x0 0x0
0xffffdb0000011880 0041 00000000 0x0 0x0
0xffffdb0000011900 0041 00000000 0x0 0x0
0xffffdb0000011980 0045 00000000 0x0 0x0
0xffffdb0000011a00 0041 00000000 0x0 0x0
0xffffdb0000011a80 0045 00000000 0x0 0x0
0xffffdb0000011b00 0045 00000000 0x0 0x0
0xffffdb0000011b80 0041 00000000 0x0 0x0
0xffffdb0000011c00 0041 00000000 0x0 0x0
0xffffdb0000011c80 0041 00000000 0x0 0x0
0xffffdb0000011d00 0045 00000000 0x0 0x0
0xffffdb0000011d80 0041 00000000 0x0 0x0
0xffffdb0000011e00 0045 00000000 0x0 0x0
0xffffdb0000011e80 0041 00000000 0x0 0x0
0xffffdb0000011f00 0041 00000000 0x0 0x0
0xffffdb0000011f80 0045 00000000 0x0 0x0
0xffffdb0000012000 0041 00000000 0x0 0x0
0xffffdb0000012080 0041 00000000 0x0 0x0
0xffffdb0000012100 0041 00000000 0x0 0x0
0xffffdb0000012180 0041 00000000 0x0 0x0
0xffffdb0000012200 0041 00000000 0x0 0x0
0xffffdb0000012280 0041 00000000 0x0 0x0
0xffffdb0000012300 0041 00000000 0x0 0x0
0xffffdb0000012380 0041 00000000 0x0 0x0
0xffffdb0000012400 0041 00000000 0x0 0x0
0xffffdb0000012480 0041 00000000 0x0 0x0
0xffffdb0000012500 0041 00000000 0x0 0x0
0xffffdb0000012580 0041 00000000 0x0 0x0
0xffffdb0000012600 0041 00000000 0x0 0x0
0xffffdb0000012680 0041 00000000 0x0 0x0
0xffffdb0000012700 0041 00000000 0x0 0x0
0xffffdb0000012780 0041 00000000 0x0 0x0
0xffffdb0000012800 0041 00000000 0x0 0x0
0xffffdb0000012880 0041 00000000 0x0 0x0
0xffffdb0000012900 0041 00000000 0x0 0x0
0xffffdb0000012980 0041 00000000 0x0 0x0
0xffffdb0000012a00 0041 00000000 0x0 0x0
0xffffdb0000012a80 0041 00000000 0x0 0x0
0xffffdb0000012b00 0041 00000000 0x0 0x0
0xffffdb0000012b80 0041 00000000 0x0 0x0
0xffffdb0000012c00 0041 00000000 0x0 0x0
0xffffdb0000012c80 0045 00000000 0x0 0x0
0xffffdb0000012d00 0001 00000000 0x0 0x0
0xffffdb0000012d80 0001 00000000 0x0 0x0
0xffffdb0000012e00 0001 00000000 0x0 0x0
0xffffdb0000012e80 0001 00000000 0x0 0x0
0xffffdb0000012f00 0001 00000000 0x0 0x0
0xffffdb0000012f80 0001 00000000 0x0 0x0
0xffffdb0000013000 0001 00000000 0x0 0x0
0xffffdb0000013080 0001 00000000 0x0 0x0
0xffffdb0000013100 0001 00000000 0x0 0x0
0xffffdb0000013180 0001 00000000 0x0 0x0
0xffffdb0000013200 0001 00000000 0x0 0x0
0xffffdb0000013280 0001 00000000 0x0 0x0
0xffffdb0000013300 0001 00000000 0x0 0x0
0xffffdb0000013380 0001 00000000 0x0 0x0
0xffffdb0000013400 0001 00000000 0x0 0x0
0xffffdb0000013480 0001 00000000 0x0 0x0
0xffffdb0000013500 0001 00000000 0x0 0x0
0xffffdb0000013580 0001 00000000 0x0 0x0
0xffffdb0000013600 0001 00000000 0x0 0x0
0xffffdb0000013680 0001 00000000 0x0 0x0
0xffffdb0000013700 0001 00000000 0x0 0x0
0xffffdb0000013780 0001 00000000 0x0 0x0
0xffffdb0000013800 0001 00000000 0x0 0x0
0xffffdb0000013880 0001 00000000 0x0 0x0
0xffffdb0000013900 0001 00000000 0x0 0x0
0xffffdb0000013980 0001 00000000 0x0 0x0
0xffffdb0000013a00 0001 00000000 0x0 0x0
0xffffdb0000013a80 0001 00000000 0x0 0x0
0xffffdb0000013b00 0001 00000000 0x0 0x0
0xffffdb0000013b80 0001 00000000 0x0 0x0
0xffffdb0000013c00 0001 00000000 0x0 0x0
0xffffdb0000013c80 0001 00000000 0x0 0x0
0xffffdb0000013d00 0001 00000000 0x0 0x0
0xffffdb0000013d80 0001 00000000 0x0 0x0
0xffffdb0000013e00 0001 00000000 0x0 0x0
0xffffdb0000013e80 0001 00000000 0x0 0x0
0xffffdb0000013f00 0001 00000000 0x0 0x0
0xffffdb0000013f80 0001 00000000 0x0 0x0
0xffffdb0000014000 0001 00000000 0x0 0x0
0xffffdb0000014080 0001 00000000 0x0 0x0
0xffffdb0000014100 0001 00000000 0x0 0x0
0xffffdb0000014180 0001 00000000 0x0 0x0
0xffffdb0000014200 0001 00000000 0x0 0x0
0xffffdb0000014280 0001 00000000 0x0 0x0
0xffffdb0000014300 0001 00000000 0x0 0x0
0xffffdb0000014380 0001 00000000 0x0 0x0
0xffffdb0000014400 0001 00000000 0x0 0x0
0xffffdb0000014480 0001 00000000 0x0 0x0
0xffffdb0000014500 0001 00000000 0x0 0x0
0xffffdb0000014580 0001 00000000 0x0 0x0
0xffffdb0000014600 0001 00000000 0x0 0x0
0xffffdb0000014680 0001 00000000 0x0 0x0
0xffffdb0000014700 0001 00000000 0x0 0x0
0xffffdb0000014780 0001 00000000 0x0 0x0
0xffffdb0000014800 0041 00000000 0x0 0x0
0xffffdb0000014880 0041 00000000 0x0 0x0
0xffffdb0000014900 0041 00000000 0x0 0x0
0xffffdb0000014980 0041 00000000 0x0 0x0
0xffffdb0000014a00 0041 00000000 0x0 0x0
0xffffdb0000014a80 0041 00000000 0x0 0x0
0xffffdb0000014b00 0041 00000000 0x0 0x0
0xffffdb0000014b80 0041 00000000 0x0 0x0
0xffffdb0000014c00 0041 00000000 0x0 0x0
0xffffdb0000014c80 0041 00000000 0x0 0x0
0xffffdb0000014d00 0041 00000000 0x0 0x0
0xffffdb0000014d80 0041 00000000 0x0 0x0
0xffffdb0000014e00 0041 00000000 0x0 0x0
0xffffdb0000014e80 0041 00000000 0x0 0x0
0xffffdb0000014f00 0041 00000000 0x0 0x0
0xffffdb0000014f80 0041 00000000 0x0 0x0
0xffffdb0000015000 0041 00000000 0x0 0x0
0xffffdb0000015080 0041 00000000 0x0 0x0
0xffffdb0000015100 0041 00000000 0x0 0x0
0xffffdb0000015180 0041 00000000 0x0 0x0
0xffffdb0000015200 0041 00000000 0x0 0x0
0xffffdb0000015280 0041 00000000 0x0 0x0
0xffffdb0000015300 0041 00000000 0x0 0x0
0xffffdb0000015380 0041 00000000 0x0 0x0
0xffffdb0000015400 0041 00000000 0x0 0x0
0xffffdb0000015480 0041 00000000 0x0 0x0
0xffffdb0000015500 0041 00000000 0x0 0x0
0xffffdb0000015580 0041 00000000 0x0 0x0
0xffffdb0000015600 0041 00000000 0x0 0x0
0xffffdb0000015680 0041 00000000 0x0 0x0
0xffffdb0000015700 0041 00000000 0x0 0x0
0xffffdb0000015780 0041 00000000 0x0 0x0
0xffffdb0000015800 0041 00000000 0x0 0x0
0xffffdb0000015880 0041 00000000 0x0 0x0
0xffffdb0000015900 0041 00000000 0x0 0x0
0xffffdb0000015980 0041 00000000 0x0 0x0
0xffffdb0000015a00 0041 00000000 0x0 0x0
0xffffdb0000015a80 0041 00000000 0x0 0x0
0xffffdb0000015b00 0041 00000000 0x0 0x0
0xffffdb0000015b80 0041 00000000 0x0 0x0
0xffffdb0000015c00 0041 00000000 0x0 0x0
0xffffdb0000015c80 0041 00000000 0x0 0x0
0xffffdb0000015d00 0001 00000000 0x0 0x0
0xffffdb0000015d80 0001 00000000 0x0 0x0
0xffffdb0000015e00 0001 00000000 0x0 0x0
0xffffdb0000015e80 0001 00000000 0x0 0x0
0xffffdb0000015f00 0001 00000000 0x0 0x0
0xffffdb0000015f80 0001 00000000 0x0 0x0
0xffffdb0000016000 0001 00000000 0x0 0x0
0xffffdb0000016080 0001 00000000 0x0 0x0
0xffffdb0000016100 0001 00000000 0x0 0x0
0xffffdb0000016180 0001 00000000 0x0 0x0
0xffffdb0000016200 0001 00000000 0x0 0x0
0xffffdb0000016280 0001 00000000 0x0 0x0
0xffffdb0000016300 0001 00000000 0x0 0x0
0xffffdb0000016380 0001 00000000 0x0 0x0
0xffffdb0000016400 0001 00000000 0x0 0x0
0xffffdb0000016480 0001 00000000 0x0 0x0
0xffffdb0000016500 0001 00000000 0x0 0x0
0xffffdb0000016580 0001 00000000 0x0 0x0
0xffffdb0000016600 0001 00000000 0x0 0x0
0xffffdb0000016680 0001 00000000 0x0 0x0
0xffffdb0000016700 0001 00000000 0x0 0x0
0xffffdb0000016780 0001 00000000 0x0 0x0
0xffffdb0000016800 0001 00000000 0x0 0x0
0xffffdb0000016880 0001 00000000 0x0 0x0
0xffffdb0000016900 0001 00000000 0x0 0x0
0xffffdb0000016980 0001 00000000 0x0 0x0
0xffffdb0000016a00 0001 00000000 0x0 0x0
0xffffdb0000016a80 0001 00000000 0x0 0x0
0xffffdb0000016b00 0001 00000000 0x0 0x0
0xffffdb0000016b80 0001 00000000 0x0 0x0
0xffffdb0000016c00 0001 00000000 0x0 0x0
0xffffdb0000016c80 0001 00000000 0x0 0x0
0xffffdb0000016d00 0001 00000000 0x0 0x0
0xffffdb0000016d80 0001 00000000 0x0 0x0
0xffffdb0000016e00 0001 00000000 0x0 0x0
0xffffdb0000016e80 0001 00000000 0x0 0x0
0xffffdb0000016f00 0001 00000000 0x0 0x0
0xffffdb0000016f80 0001 00000000 0x0 0x0
0xffffdb0000017000 0001 00000000 0x0 0x0
0xffffdb0000017080 0001 00000000 0x0 0x0
0xffffdb0000017100 0001 00000000 0x0 0x0
0xffffdb0000017180 0001 00000000 0x0 0x0
0xffffdb0000017200 0001 00000000 0x0 0x0
0xffffdb0000017280 0001 00000000 0x0 0x0
0xffffdb0000017300 0001 00000000 0x0 0x0
0xffffdb0000017380 0001 00000000 0x0 0x0
0xffffdb0000017400 0001 00000000 0x0 0x0
0xffffdb0000017480 0001 00000000 0x0 0x0
0xffffdb0000017500 0001 00000000 0x0 0x0
0xffffdb0000017580 0001 00000000 0x0 0x0
0xffffdb0000017600 0001 00000000 0x0 0x0
0xffffdb0000017680 0001 00000000 0x0 0x0
0xffffdb0000017700 0001 00000000 0x0 0x0
0xffffdb0000017780 0001 00000000 0x0 0x0
0xffffdb0000017800 0041 00000000 0x0 0x0
0xffffdb0000017880 0041 00000000 0x0 0x0
0xffffdb0000017900 0041 00000000 0x0 0x0
0xffffdb0000017980 0041 00000000 0x0 0x0
0xffffdb0000017a00 0041 00000000 0x0 0x0
0xffffdb0000017a80 0041 00000000 0x0 0x0
0xffffdb0000017b00 0041 00000000 0x0 0x0
0xffffdb0000017b80 0041 00000000 0x0 0x0
0xffffdb0000017c00 0041 00000000 0x0 0x0
0xffffdb0000017c80 0041 00000000 0x0 0x0
0xffffdb0000017d00 0041 00000000 0x0 0x0
0xffffdb0000017d80 0041 00000000 0x0 0x0
0xffffdb0000017e00 0041 00000000 0x0 0x0
0xffffdb0000017e80 0041 00000000 0x0 0x0
0xffffdb0000017f00 0041 00000000 0x0 0x0
0xffffdb0000017f80 0041 00000000 0x0 0x0
0xffffdb0000018000 0041 00000000 0x0 0x0
0xffffdb0000018080 0041 00000000 0x0 0x0
0xffffdb0000018100 0041 00000000 0x0 0x0
0xffffdb0000018180 0041 00000000 0x0 0x0
0xffffdb0000018200 0041 00000000 0x0 0x0
0xffffdb0000018280 0041 00000000 0x0 0x0
0xffffdb0000018300 0041 00000000 0x0 0x0
0xffffdb0000018380 0041 00000000 0x0 0x0
0xffffdb0000018400 0041 00000000 0x0 0x0
0xffffdb0000018480 0041 00000000 0x0 0x0
0xffffdb0000018500 0041 00000000 0x0 0x0
0xffffdb0000018580 0041 00000000 0x0 0x0
0xffffdb0000018600 0041 00000000 0x0 0x0
0xffffdb0000018680 0041 00000000 0x0 0x0
0xffffdb0000018700 0041 00000000 0x0 0x0
0xffffdb0000018780 0041 00000000 0x0 0x0
0xffffdb0000018800 0041 00000000 0x0 0x0
0xffffdb0000018880 0041 00000000 0x0 0x0
0xffffdb0000018900 0041 00000000 0x0 0x0
0xffffdb0000018980 0041 00000000 0x0 0x0
0xffffdb0000018a00 0041 00000000 0x0 0x0
0xffffdb0000018a80 0041 00000000 0x0 0x0
0xffffdb0000018b00 0041 00000000 0x0 0x0
0xffffdb0000018b80 0041 00000000 0x0 0x0
0xffffdb0000018c00 0041 00000000 0x0 0x0
0xffffdb0000018c80 0041 00000000 0x0 0x0
0xffffdb0000018d00 0001 00000000 0x0 0x0
0xffffdb0000018d80 0001 00000000 0x0 0x0
0xffffdb0000018e00 0001 00000000 0x0 0x0
0xffffdb0000018e80 0001 00000000 0x0 0x0
0xffffdb0000018f00 0001 00000000 0x0 0x0
0xffffdb0000018f80 0001 00000000 0x0 0x0
0xffffdb0000019000 0001 00000000 0x0 0x0
0xffffdb0000019080 0001 00000000 0x0 0x0
0xffffdb0000019100 0001 00000000 0x0 0x0
0xffffdb0000019180 0001 00000000 0x0 0x0
0xffffdb0000019200 0001 00000000 0x0 0x0
0xffffdb0000019280 0001 00000000 0x0 0x0
0xffffdb0000019300 0001 00000000 0x0 0x0
0xffffdb0000019380 0001 00000000 0x0 0x0
0xffffdb0000019400 0001 00000000 0x0 0x0
0xffffdb0000019480 0001 00000000 0x0 0x0
0xffffdb0000019500 0001 00000000 0x0 0x0
0xffffdb0000019580 0001 00000000 0x0 0x0
0xffffdb0000019600 0001 00000000 0x0 0x0
0xffffdb0000019680 0001 00000000 0x0 0x0
0xffffdb0000019700 0001 00000000 0x0 0x0
0xffffdb0000019780 0001 00000000 0x0 0x0
0xffffdb0000019800 0001 00000000 0x0 0x0
0xffffdb0000019880 0001 00000000 0x0 0x0
0xffffdb0000019900 0001 00000000 0x0 0x0
0xffffdb0000019980 0001 00000000 0x0 0x0
0xffffdb0000019a00 0001 00000000 0x0 0x0
0xffffdb0000019a80 0001 00000000 0x0 0x0
0xffffdb0000019b00 0001 00000000 0x0 0x0
0xffffdb0000019b80 0001 00000000 0x0 0x0
0xffffdb0000019c00 0001 00000000 0x0 0x0
0xffffdb0000019c80 0001 00000000 0x0 0x0
0xffffdb0000019d00 0001 00000000 0x0 0x0
0xffffdb0000019d80 0001 00000000 0x0 0x0
0xffffdb0000019e00 0001 00000000 0x0 0x0
0xffffdb0000019e80 0001 00000000 0x0 0x0
0xffffdb0000019f00 0001 00000000 0x0 0x0
0xffffdb0000019f80 0001 00000000 0x0 0x0
0xffffdb000001a000 0001 00000000 0x0 0x0
0xffffdb000001a080 0001 00000000 0x0 0x0
0xffffdb000001a100 0001 00000000 0x0 0x0
0xffffdb000001a180 0001 00000000 0x0 0x0
0xffffdb000001a200 0001 00000000 0x0 0x0
0xffffdb000001a280 0001 00000000 0x0 0x0
0xffffdb000001a300 0001 00000000 0x0 0x0
0xffffdb000001a380 0001 00000000 0x0 0x0
0xffffdb000001a400 0001 00000000 0x0 0x0
0xffffdb000001a480 0001 00000000 0x0 0x0
0xffffdb000001a500 0001 00000000 0x0 0x0
0xffffdb000001a580 0001 00000000 0x0 0x0
0xffffdb000001a600 0001 00000000 0x0 0x0
0xffffdb000001a680 0001 00000000 0x0 0x0
0xffffdb000001a700 0001 00000000 0x0 0x0
0xffffdb000001a780 0001 00000000 0x0 0x0
0xffffdb000001a800 0041 00000000 0x0

---
This report is generated by a bot. It may contain errors.
See https://goo.gl/tpsmEJ for more information about syzbot.
syzbot engineers can be reached at syzk...@googlegroups.com.

syzbot will keep track of this issue. See:
https://goo.gl/tpsmEJ#status for how to communicate with syzbot.

syzbot

unread,
Jun 29, 2022, 6:00:28 PM6/29/22
to syzkaller-...@googlegroups.com
syzbot has found a reproducer for the following issue on:

HEAD commit: c2b46e72e50e bind.2: add references to specific protocol f..
git tree: netbsd
console output: https://syzkaller.appspot.com/x/log.txt?x=10e9874c080000
kernel config: https://syzkaller.appspot.com/x/.config?x=1420f906d33d9f1f
dashboard link: https://syzkaller.appspot.com/bug?extid=083d9be5cb3c2e78ed1c
compiler: g++ (Debian 10.2.1-6) 10.2.1 20210110
syz repro: https://syzkaller.appspot.com/x/repro.syz?x=14718be4080000
C reproducer: https://syzkaller.appspot.com/x/repro.c?x=16f9f024080000

IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+083d9b...@syzkaller.appspotmail.com

[ 37.9805190] panic: UBSan: Undefined Behavior in /syzkaller/managers/ci2-netbsd-kubsan/kernel/sys/net/rtsock_shared.c:676:2, member access within misaligned address 0xffffec382617504c for type 'struct rt_msghdr50' which requires 8 byte alignment

[ 37.9805190] cpu0: Begin traceback...
[ 38.0005109] vpanic() at netbsd:vpanic+0x2f2 sys/kern/subr_prf.c:293
[ 38.0605118] Report() at netbsd:Report+0x3b sys/../common/lib/libc/misc/ubsan.c:1352
[ 38.1005133] HandleTypeMismatch() at netbsd:HandleTypeMismatch+0xfc sys/../common/lib/libc/misc/ubsan.c:432
[ 38.1505119] compat_50_route_output() at netbsd:compat_50_route_output+0x1d43 sys/net/rtsock_shared.c:676
[ 38.1905093] raw_send() at netbsd:raw_send+0x20c sys/net/raw_usrreq.c:182
[ 38.2305111] compat_50_route_send_wrapper() at netbsd:compat_50_route_send_wrapper+0xb2 compat_50_route_send sys/net/rtsock_shared.c:505 [inline]
[ 38.2305111] compat_50_route_send_wrapper() at netbsd:compat_50_route_send_wrapper+0xb2 sys/net/rtsock_shared.c:1754
[ 38.2705125] sosend() at netbsd:sosend+0x1a26 sys/kern/uipc_socket.c:1069
[ 38.3105093] do_sys_sendmsg_so() at netbsd:do_sys_sendmsg_so+0x6f3 sys/kern/uipc_syscalls.c:629
[ 38.3505091] do_sys_sendmsg() at netbsd:do_sys_sendmsg+0xfc sys/kern/uipc_syscalls.c:679
[ 38.3905099] sys_sendto() at netbsd:sys_sendto+0xc9 sys/kern/uipc_syscalls.c:514
[ 38.4305084] sys_syscall() at netbsd:sys_syscall+0x1e4 sy_call sys/sys/syscallvar.h:65 [inline]
[ 38.4305084] sys_syscall() at netbsd:sys_syscall+0x1e4 sys/kern/sys_syscall.c:90
[ 38.4805108] syscall() at netbsd:syscall+0x2da sy_call sys/sys/syscallvar.h:65 [inline]
[ 38.4805108] syscall() at netbsd:syscall+0x2da sy_invoke sys/sys/syscallvar.h:94 [inline]
[ 38.4805108] syscall() at netbsd:syscall+0x2da sys/arch/x86/x86/syscall.c:138
[ 38.4905090] --- syscall (number 133 via SYS_syscall) ---
[ 38.5005072] netbsd:syscall+0x2da:
[ 38.5113609] cpu0: End traceback...
[ 38.5113609] fatal breakpoint trap in supervisor mode
[ 38.5113609] trap type 1 code 0 rip 0xffffffff80221ab5 cs 0x8 rflags 0x246 cr2 0x20001000 ilevel 0x4 rsp 0xffffc280c83ea3e0
[ 38.5314711] curlwp 0xffffec3828416600 pid 425.425 lowest kstack 0xffffc280c83e62c0
Stopped in pid 425.425 (syz-executor3410) at netbsd:breakpoint+0x5: leave
?
breakpoint() at netbsd:breakpoint+0x5
db_panic() at netbsd:db_panic+0xec sys/ddb/db_panic.c:69
vpanic() at netbsd:vpanic+0x2f2 sys/kern/subr_prf.c:293
Report() at netbsd:Report+0x3b sys/../common/lib/libc/misc/ubsan.c:1352
HandleTypeMismatch() at netbsd:HandleTypeMismatch+0xfc sys/../common/lib/libc/misc/ubsan.c:432
compat_50_route_output() at netbsd:compat_50_route_output+0x1d43 sys/net/rtsock_shared.c:676
raw_send() at netbsd:raw_send+0x20c sys/net/raw_usrreq.c:182
compat_50_route_send_wrapper() at netbsd:compat_50_route_send_wrapper+0xb2 compat_50_route_send sys/net/rtsock_shared.c:505 [inline]
compat_50_route_send_wrapper() at netbsd:compat_50_route_send_wrapper+0xb2 sys/net/rtsock_shared.c:1754
sosend() at netbsd:sosend+0x1a26 sys/kern/uipc_socket.c:1069
do_sys_sendmsg_so() at netbsd:do_sys_sendmsg_so+0x6f3 sys/kern/uipc_syscalls.c:629
do_sys_sendmsg() at netbsd:do_sys_sendmsg+0xfc sys/kern/uipc_syscalls.c:679
sys_sendto() at netbsd:sys_sendto+0xc9 sys/kern/uipc_syscalls.c:514
sys_syscall() at netbsd:sys_syscall+0x1e4 sy_call sys/sys/syscallvar.h:65 [inline]
sys_syscall() at netbsd:sys_syscall+0x1e4 sys/kern/sys_syscall.c:90
syscall() at netbsd:syscall+0x2da sy_call sys/sys/syscallvar.h:65 [inline]
syscall() at netbsd:syscall+0x2da sy_invoke sys/sys/syscallvar.h:94 [inline]
syscall() at netbsd:syscall+0x2da sys/arch/x86/x86/syscall.c:138
--- syscall (number 133 via SYS_syscall) ---
netbsd:syscall+0x2da:
Panic string: UBSan: Undefined Behavior in /syzkaller/managers/ci2-netbsd-kubsan/kernel/sys/net/rtsock_shared.c:676:2, member access within misaligned address 0xffffec382617504c for type 'struct rt_msghdr50' which requires 8 byte alignment

PID LID S CPU FLAGS STRUCT LWP * NAME WAIT
1130 1130 2 0 0 ffffec38282ad200 syz-executor3410
816 816 2 0 0 ffffec3825a5c6c0 syz-executor3410
1224 1224 2 0 0 ffffec3828416a40 syz-executor3410
1107 1107 2 0 0 ffffec38255ea600 syz-executor3410
1195 1195 2 0 0 ffffec3825a5c280 syz-executor3410
425 > 425 7 0 0 ffffec3828416600 syz-executor3410
1220 1220 2 1 0 ffffec382583e680 syz-executor3410
1221 1221 3 0 180 ffffec382739c140 syz-executor3410 nanoslp
1222 >1222 7 1 140 ffffec382583eac0 syz-executor3410
1054 1054 2 1 140 ffffec38278315c0 syz-executor3410
1078 1078 3 0 180 ffffec38284161c0 syz-executor3410 nanoslp
1086 1086 3 1 40180 ffffec3827831a00 sshd select
1074 1074 3 0 180 ffffec382759f540 getty nanoslp
1071 1071 3 0 180 ffffec3827831180 getty nanoslp
1000 1000 3 0 180 ffffec382759f100 getty nanoslp
1115 1115 3 0 1c0 ffffec382583e240 getty ttyraw
1066 1066 3 1 180 ffffec382739c580 sshd select
942 942 3 0 180 ffffec382739c9c0 powerd kqueue
689 689 3 0 180 ffffec3826e30480 syslogd kqueue
547 547 3 0 180 ffffec3825d1db40 dhcpcd poll
546 546 3 1 180 ffffec3825e2a300 dhcpcd poll
600 600 3 1 180 ffffec3826e30040 dhcpcd poll
587 587 3 0 180 ffffec3826097bc0 dhcpcd poll
289 289 3 0 180 ffffec3826097340 dhcpcd poll
288 288 3 0 180 ffffec3825e2ab80 dhcpcd poll
351 351 3 1 180 ffffec3825d1d2c0 dhcpcd poll
1 1 3 0 180 ffffec381d466100 init wait
0 819 3 0 200 ffffec38255eaa40 physiod physiod
0 194 3 0 200 ffffec3825685a80 pooldrain pooldrain
0 193 3 0 200 ffffec3825685640 ioflush syncer
0 192 3 1 200 ffffec3825685200 pgdaemon pgdaemon
0 167 3 1 200 ffffec38255ea1c0 usb7 usbevt
0 166 3 0 200 ffffec38225a5a00 usb6 usbevt
0 165 3 0 200 ffffec38225a55c0 usb5 usbevt
0 164 3 0 200 ffffec38225a5180 usb4 usbevt
0 31 3 0 200 ffffec381f5209c0 usb3 usbevt
0 63 3 0 200 ffffec381f520580 usb2 usbevt
0 126 3 0 200 ffffec381f520140 usb1 usbevt
0 125 3 0 200 ffffec381d466980 usb0 usbevt
0 124 3 1 200 ffffec381d3dd300 usbtask-dr usbtsk
0 123 3 0 200 ffffec381cd3d6c0 usbtask-hc usbtsk
0 122 3 0 200 ffffec381d466540 npfgc0 npfgcw
0 121 3 1 200 ffffec381d449940 rt_free rt_free
0 120 3 1 200 ffffec381d449500 unpgc unpgc
0 119 3 0 200 ffffec381d4490c0 key_timehandler key_timehandler
0 118 3 1 200 ffffec381d3dd740 icmp6_wqinput/1 icmp6_wqinput
0 117 3 0 200 ffffec381d3ddb80 icmp6_wqinput/0 icmp6_wqinput
0 116 3 0 200 ffffec381d424900 nd6_timer nd6_timer
0 115 3 1 200 ffffec381d4244c0 carp6_wqinput/1 carp6_wqinput
0 114 3 0 200 ffffec381d424080 carp6_wqinput/0 carp6_wqinput
0 113 3 1 200 ffffec381d4078c0 carp_wqinput/1 carp_wqinput
0 112 3 0 200 ffffec381d407480 carp_wqinput/0 carp_wqinput
0 111 3 1 200 ffffec381d407040 icmp_wqinput/1 icmp_wqinput
0 110 3 0 200 ffffec381d3eabc0 icmp_wqinput/0 icmp_wqinput
0 109 3 0 200 ffffec381d3ea780 rt_timer rt_timer
0 108 3 0 200 ffffec381d3ea340 vmem_rehash vmem_rehash
0 99 3 0 200 ffffec381cd4ab40 entbutler entropy
0 98 3 1 200 ffffec381cd4a700 viomb balloon
0 97 3 1 200 ffffec381cd4a2c0 vioif0_txrx/1 vioif0_txrx
0 96 2 0 200 ffffec381cd3db00 vioif0_txrx/0
0 29 3 1 200 ffffec381cd3d280 scsibus0 sccomp
0 28 3 0 200 ffffec381b7c3ac0 pms0 pmsreset
0 27 3 1 200 ffffec381b7c3680 xcall/1 xcall
0 26 1 1 200 ffffec381b7c3240 softser/1
0 25 1 1 200 ffffec381b78ea80 softclk/1
0 24 1 1 200 ffffec381b78e640 softbio/1
0 23 1 1 200 ffffec381b78e200 softnet/1
0 22 1 1 201 ffffec394a735a40 idle/1
0 21 3 0 200 ffffec394a735600 lnxsyswq lnxsyswq
0 20 3 0 200 ffffec394a7351c0 lnxubdwq lnxubdwq
0 19 3 1 200 ffffec394a744a00 lnxpwrwq lnxpwrwq
0 18 3 1 200 ffffec394a7445c0 lnxlngwq lnxlngwq
0 17 3 1 200 ffffec394a744180 lnxhipwq lnxhipwq
0 16 3 0 200 ffffec394a75d9c0 lnxrcugc lnxrcugc
0 15 3 0 200 ffffec394a75d580 sysmon smtaskq
0 14 3 1 200 ffffec394a75d140 pmfsuspend pmfsuspend
0 13 3 0 200 ffffec394a76a980 pmfevent pmfevent
0 12 3 1 200 ffffec394a76a540 sopendfree sopendfr
0 11 3 0 200 ffffec394a76a100 iflnkst iflnkst
0 10 3 1 200 ffffec394b79b940 nfssilly nfssilly
0 9 3 0 200 ffffec394b79b500 vdrain vdrain
0 8 3 1 200 ffffec394b79b0c0 modunload mod_unld
0 7 3 0 200 ffffec394b7c2900 xcall/0 xcall
0 6 1 0 200 ffffec394b7c24c0 softser/0
0 5 1 0 200 ffffec394b7c2080 softclk/0
0 4 1 0 200 ffffec394b7f18c0 softbio/0
0 3 1 0 200 ffffec394b7f1480 softnet/0
0 2 1 0 201 ffffec394b7f1040 idle/0
0 0 3 0 200 ffffffff86750900 swapper uvm
[Locks tracked through LWPs]

****** LWP 425.425 (syz-executor3410) @ 0xffffec3828416600, l_stat=7

*** Locks held:

* Lock 0 (initialized at soinit)
lock address : 0xffffec394bc71080 type : sleep/adaptive
initialized : 0xffffffff8394e22e
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffffec3828416600 last held: 0xffffec3828416600
last locked* : 0xffffffff8394bae3 unlocked : 0xffffffff8394bbe4
owner field : 0xffffec3828416600 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

*** Locks wanted: none

****** LWP 1220.1220 (syz-executor3410) @ 0xffffec382583e680, l_stat=2

*** Locks held:

* Lock 0 (initialized at uvmspace_alloc)
lock address : 0xffffec381d453880 type : sleep/adaptive
initialized : 0xffffffff835f6d55
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 1
relevant lwp : 0xffffec382583e680 last held: 0xffffec382583e680
last locked* : 0xffffffff835e4cef unlocked : 0xffffffff835cc028
owner/count : 000000000000000000 flags : 000000000000000000
Turnstile: no active turnstile for this lock.

*** Locks wanted: none

****** LWP 546.546 (dhcpcd) @ 0xffffec3825e2a300, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at module_hook_init)
lock address : 0xffffffff86beb1c0 type : sleep/adaptive
initialized : 0xffffffff8370d6c7
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 0
relevant lwp : 0xffffec3825e2a300 last held: 000000000000000000
last locked : 000000000000000000 unlocked*: 000000000000000000
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 600.600 (dhcpcd) @ 0xffffec3826e30040, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at module_hook_init)
lock address : 0xffffffff86beb1c0 type : sleep/adaptive
initialized : 0xffffffff8370d6c7
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 0
relevant lwp : 0xffffec3826e30040 last held: 000000000000000000
last locked : 000000000000000000 unlocked*: 000000000000000000
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 288.288 (dhcpcd) @ 0xffffec3825e2ab80, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at module_hook_init)
lock address : 0xffffffff86beb1c0 type : sleep/adaptive
initialized : 0xffffffff8370d6c7
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffffec3825e2ab80 last held: 000000000000000000
last locked : 000000000000000000 unlocked*: 000000000000000000
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 351.351 (dhcpcd) @ 0xffffec3825d1d2c0, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at module_hook_init)
lock address : 0xffffffff86beb1c0 type : sleep/adaptive
initialized : 0xffffffff8370d6c7
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 0
relevant lwp : 0xffffec3825d1d2c0 last held: 000000000000000000
last locked : 000000000000000000 unlocked*: 000000000000000000
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 0.11 (iflnkst) @ 0xffffec394a76a100, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at module_hook_init)
lock address : 0xffffffff86beb1c0 type : sleep/adaptive
initialized : 0xffffffff8370d6c7
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffffec394a76a100 last held: 000000000000000000
last locked : 000000000000000000 unlocked*: 000000000000000000
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 0.5 (softclk/0) @ 0xffffec394b7c2080, l_stat=1

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at module_hook_init)
lock address : 0xffffffff86beb1c0 type : sleep/adaptive
initialized : 0xffffffff8370d6c7
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffffec394b7c2080 last held: 000000000000000000
last locked : 000000000000000000 unlocked*: 000000000000000000
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 0.0 (swapper) @ 0xffffffff86750900, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at module_hook_init)
lock address : 0xffffffff86beb1c0 type : sleep/adaptive
initialized : 0xffffffff8370d6c7
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffffffff86750900 last held: 000000000000000000
last locked : 000000000000000000 unlocked*: 000000000000000000
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

[Locks tracked through CPUs]

******* Locks held on cpu0:

* Lock 0 (initialized at main)
lock address : 0xffffffff86beb0c0 type : spin
initialized : 0xffffffff83ffb759
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffffec3828416600 last held: 0xffffec3828416600
last locked* : 0xffffffff827324ad unlocked : 0xffffffff8377b92f
curcpu holds : 1 wanted by: 000000000000000000

* Lock 1 (initialized at kprintf_init)
lock address : 0xffffffff86cce668 type : spin
initialized : 0xffffffff8385b333
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffffec3828416600 last held: 0xffffec3828416600
last locked* : 0xffffffff8385b3c1 unlocked : 0xffffffff8385b43c
owner field : 0x0000000000000800 wait/spin: 0/1

PAGE FLAG PQ UOBJECT UANON
0xffffc28000007180 0045 00000000 0x0 0x0
0xffffc28000007200 0045 00000000 0x0 0x0
0xffffc28000007280 0045 00000000 0x0 0x0
0xffffc28000007300 0045 00000000 0x0 0x0
0xffffc28000007380 0045 00000000 0x0 0x0
0xffffc28000007400 0045 00000000 0x0 0x0
0xffffc28000007480 0045 00000000 0x0 0x0
0xffffc28000007500 0045 00000000 0x0 0x0
0xffffc28000007580 0045 00000000 0x0 0x0
0xffffc28000007600 0045 00000000 0x0 0x0
0xffffc28000007680 0041 00000000 0x0 0x0
0xffffc28000007700 0041 00000000 0x0 0x0
0xffffc28000007780 0041 00000000 0x0 0x0
0xffffc28000007800 0041 00000000 0x0 0x0
0xffffc28000007880 0041 00000000 0x0 0x0
0xffffc28000007900 0045 00000000 0x0 0x0
0xffffc28000007980 0041 00000000 0x0 0x0
0xffffc28000007a00 0041 00000000 0x0 0x0
0xffffc28000007a80 0041 00000000 0x0 0x0
0xffffc28000007b00 0041 00000000 0x0 0x0
0xffffc28000007b80 0041 00000000 0x0 0x0
0xffffc28000007c00 0041 00000000 0x0 0x0
0xffffc28000007c80 0041 00000000 0x0 0x0
0xffffc28000007d00 0041 00000000 0x0 0x0
0xffffc28000007d80 0041 00000000 0x0 0x0
0xffffc28000007e00 0041 00000000 0x0 0x0
0xffffc28000007e80 0041 00000000 0x0 0x0
0xffffc28000007f00 0041 00000000 0x0 0x0
0xffffc28000007f80 0041 00000000 0x0 0x0
0xffffc28000008000 0041 00000000 0x0 0x0
0xffffc28000008080 0041 00000000 0x0 0x0
0xffffc28000008100 0041 00000000 0x0 0x0
0xffffc28000008180 0041 00000000 0x0 0x0
0xffffc28000008200 0041 00000000 0x0 0x0
0xffffc28000008280 0041 00000000 0x0 0x0
0xffffc28000008300 0041 00000000 0x0 0x0
0xffffc28000008380 0041 00000000 0x0 0x0
0xffffc28000008400 0041 00000000 0x0 0x0
0xffffc28000008480 0041 00000000 0x0 0x0
0xffffc28000008500 0041 00000000 0x0 0x0
0xffffc28000008580 0041 00000000 0x0 0x0
0xffffc28000008600 0041 00000000 0x0 0x0
0xffffc28000008680 0041 00000000 0x0 0x0
0xffffc28000008700 0041 00000000 0x0 0x0
0xffffc28000008780 0041 00000000 0x0 0x0
0xffffc28000008800 0041 00000000 0x0 0x0
0xffffc28000008880 0041 00000000 0x0 0x0
0xffffc28000008900 0041 00000000 0x0 0x0
0xffffc28000008980 0041 00000000 0x0 0x0
0xffffc28000008a00 0041 00000000 0x0 0x0
0xffffc28000008a80 0041 00000000 0x0 0x0
0xffffc28000008b00 0041 00000000 0x0 0x0
0xffffc28000008b80 0045 00000000 0x0 0x0
0xffffc28000008c00 0045 00000000 0x0 0x0
0xffffc28000008c80 0041 00000000 0x0 0x0
0xffffc28000008d00 0041 00000000 0x0 0x0
0xffffc28000008d80 0041 00000000 0x0 0x0
0xffffc28000008e00 0041 00000000 0x0 0x0
0xffffc28000008e80 0041 00000000 0x0 0x0
0xffffc28000008f00 0041 00000000 0x0 0x0
0xffffc28000008f80 0041 00000000 0x0 0x0
0xffffc28000009000 0041 00000000 0x0 0x0
0xffffc28000009080 0045 00000000 0x0 0x0
0xffffc28000009100 0041 00000000 0x0 0x0
0xffffc28000009180 0041 00000000 0x0 0x0
0xffffc28000009200 0041 00000000 0x0 0x0
0xffffc28000009280 0041 00000000 0x0 0x0
0xffffc28000009300 0041 00000000 0x0 0x0
0xffffc28000009380 0041 00000000 0x0 0x0
0xffffc28000009400 0041 00000000 0x0 0x0
0xffffc28000009480 0041 00000000 0x0 0x0
0xffffc28000009500 0041 00000000 0x0 0x0
0xffffc28000009580 0041 00000000 0x0 0x0
0xffffc28000009600 0041 00000000 0x0 0x0
0xffffc28000009680 0041 00000000 0x0 0x0
0xffffc28000009700 0041 00000000 0x0 0x0
0xffffc28000009780 0041 00000000 0x0 0x0
0xffffc28000009800 0041 00000000 0x0 0x0
0xffffc28000009880 0041 00000000 0x0 0x0
0xffffc28000009900 0041 00000000 0x0 0x0
0xffffc28000009980 0041 00000000 0x0 0x0
0xffffc28000009a00 0041 00000000 0x0 0x0
0xffffc28000009a80 0041 00000000 0x0 0x0
0xffffc28000009b00 0041 00000000 0x0 0x0
0xffffc28000009b80 0041 00000000 0x0 0x0
0xffffc28000009c00 0041 00000000 0x0 0x0
0xffffc28000009c80 0041 00000000 0x0 0x0
0xffffc28000009d00 0041 00000000 0x0 0x0
0xffffc28000009d80 0041 00000000 0x0 0x0
0xffffc28000009e00 0041 00000000 0x0 0x0
0xffffc28000009e80 0041 00000000 0x0 0x0
0xffffc28000009f00 0041 00000000 0x0 0x0
0xffffc28000009f80 0041 00000000 0x0 0x0
0xffffc2800000a000 0041 00000000 0x0 0x0
0xffffc2800000a080 0041 00000000 0x0 0x0
0xffffc2800000a100 0041 00000000 0x0 0x0
0xffffc2800000a180 0041 00000000 0x0 0x0
0xffffc2800000a200 0041 00000000 0x0 0x0
0xffffc2800000a280 0045 00000000 0x0 0x0
0xffffc2800000a300 0041 00000000 0x0 0x0
0xffffc2800000a380 0041 00000000 0x0 0x0
0xffffc2800000a400 0041 00000000 0x0 0x0
0xffffc2800000a480 0041 00000000 0x0 0x0
0xffffc2800000a500 0041 00000000 0x0 0x0
0xffffc2800000a580 0041 00000000 0x0 0x0
0xffffc2800000a600 0045 00000000 0x0 0x0
0xffffc2800000a680 0041 00000000 0x0 0x0
0xffffc2800000a700 0041 00000000 0x0 0x0
0xffffc2800000a780 0041 00000000 0x0 0x0
0xffffc2800000a800 0041 00000000 0x0 0x0
0xffffc2800000a880 0041 00000000 0x0 0x0
0xffffc2800000a900 0041 00000000 0x0 0x0
0xffffc2800000a980 0041 00000000 0x0 0x0
0xffffc2800000aa00 0041 00000000 0x0 0x0
0xffffc2800000aa80 0041 00000000 0x0 0x0
0xffffc2800000ab00 0041 00000000 0x0 0x0
0xffffc2800000ab80 0041 00000000 0x0 0x0
0xffffc2800000ac00 0041 00000000 0x0 0x0
0xffffc2800000ac80 0041 00000000 0x0 0x0
0xffffc2800000ad00 0041 00000000 0x0 0x0
0xffffc2800000ad80 0041 00000000 0x0 0x0
0xffffc2800000ae00 0041 00000000 0x0 0x0
0xffffc2800000ae80 0045 00000000 0x0 0x0
0xffffc2800000af00 0045 00000000 0x0 0x0
0xffffc2800000af80 0041 00000000 0x0 0x0
0xffffc2800000b000 0041 00000000 0x0 0x0
0xffffc2800000b080 0041 00000000 0x0 0x0
0xffffc2800000b100 0041 00000000 0x0 0x0
0xffffc2800000b180 0045 00000000 0x0 0x0
0xffffc2800000b200 0045 00000000 0x0 0x0
0xffffc2800000b280 0045 00000000 0x0 0x0
0xffffc2800000b300 0045 00000000 0x0 0x0
0xffffc2800000b380 0045 00000000 0x0 0x0
0xffffc2800000b400 0041 00000000 0x0 0x0
0xffffc2800000b480 0041 00000000 0x0 0x0
0xffffc2800000b500 0045 00000000 0x0 0x0
0xffffc2800000b580 0045 00000000 0x0 0x0
0xffffc2800000b600 0045 00000000 0x0 0x0
0xffffc2800000b680 0045 00000000 0x0 0x0
0xffffc2800000b700 0045 00000000 0x0 0x0
0xffffc2800000b780 0045 00000000 0x0 0x0
0xffffc2800000b800 0041 00000000 0x0 0x0
0xffffc2800000b880 0041 00000000 0x0 0x0
0xffffc2800000b900 0045 00000000 0x0 0x0
0xffffc2800000b980 0045 00000000 0x0 0x0
0xffffc2800000ba00 0045 00000000 0x0 0x0
0xffffc2800000ba80 0045 00000000 0x0 0x0
0xffffc2800000bb00 0045 00000000 0x0 0x0
0xffffc2800000bb80 0045 00000000 0x0 0x0
0xffffc2800000bc00 0045 00000000 0x0 0x0
0xffffc2800000bc80 0041 00000000 0x0 0x0
0xffffc2800000bd00 0045 00000000 0x0 0x0
0xffffc2800000bd80 0045 00000000 0x0 0x0
0xffffc2800000be00 0045 00000000 0x0 0x0
0xffffc2800000be80 0045 00000000 0x0 0x0
0xffffc2800000bf00 0045 00000000 0x0 0x0
0xffffc2800000bf80 0045 00000000 0x0 0x0
0xffffc2800000c000 0045 00000000 0x0 0x0
0xffffc2800000c080 0045 00000000 0x0 0x0
0xffffc2800000c100 0045 00000000 0x0 0x0
0xffffc2800000c180 0045 00000000 0x0 0x0
0xffffc2800000c200 0045 00000000 0x0 0x0
0xffffc2800000c280 0045 00000000 0x0 0x0
0xffffc2800000c300 0045 00000000 0x0 0x0
0xffffc2800000c380 0045 00000000 0x0 0x0
0xffffc2800000c400 0045 00000000 0x0 0x0
0xffffc2800000c480 0045 00000000 0x0 0x0
0xffffc2800000c500 0045 00000000 0x0 0x0
0xffffc2800000c580 0045 00000000 0x0 0x0
0xffffc2800000c600 0045 00000000 0x0 0x0
0xffffc2800000c680 0045 00000000 0x0 0x0
0xffffc2800000c700 0041 00000000 0x0 0x0
0xffffc2800000c780 0045 00000000 0x0 0x0
0xffffc2800000c800 0045 00000000 0x0 0x0
0xffffc2800000c880 0045 00000000 0x0 0x0
0xffffc2800000c900 0045 00000000 0x0 0x0
0xffffc2800000c980 0045 00000000 0x0 0x0
0xffffc2800000ca00 0045 00000000 0x0 0x0
0xffffc2800000ca80 0041 00000000 0x0 0x0
0xffffc2800000cb00 0041 00000000 0x0 0x0
0xffffc2800000cb80 0041 00000000 0x0 0x0
0xffffc2800000cc00 0045 00000000 0x0 0x0
0xffffc2800000cc80 0045 00000000 0x0 0x0
0xffffc2800000cd00 0041 00000000 0x0 0x0
0xffffc2800000cd80 0041 00000000 0x0 0x0
0xffffc2800000ce00 0041 00000000 0x0 0x0
0xffffc2800000ce80 0041 00000000 0x0 0x0
0xffffc2800000cf00 0041 00000000 0x0 0x0
0xffffc2800000cf80 0041 00000000 0x0 0x0
0xffffc2800000d000 0045 00000000 0x0 0x0
0xffffc2800000d080 0045 00000000 0x0 0x0
0xffffc2800000d100 0041 00000000 0x0 0x0
0xffffc2800000d180 0041 00000000 0x0 0x0
0xffffc2800000d200 0041 00000000 0x0 0x0
0xffffc2800000d280 0041 00000000 0x0 0x0
0xffffc2800000d300 0045 00000000 0x0 0x0
0xffffc2800000d380 0041 00000000 0x0 0x0
0xffffc2800000d400 0041 00000000 0x0 0x0
0xffffc2800000d480 0045 00000000 0x0 0x0
0xffffc2800000d500 0041 00000000 0x0 0x0
0xffffc2800000d580 0041 00000000 0x0 0x0
0xffffc2800000d600 0041 00000000 0x0 0x0
0xffffc2800000d680 0045 00000000 0x0 0x0
0xffffc2800000d700 0041 00000000 0x0 0x0
0xffffc2800000d780 0045 00000000 0x0 0x0
0xffffc2800000d800 0041 00000000 0x0 0x0
0xffffc2800000d880 0041 00000000 0x0 0x0
0xffffc2800000d900 0041 00000000 0x0 0x0
0xffffc2800000d980 0041 00000000 0x0 0x0
0xffffc2800000da00 0041 00000000 0x0 0x0
0xffffc2800000da80 0041 00000000 0x0 0x0
0xffffc2800000db00 0045 00000000 0x0 0x0
0xffffc2800000db80 0041 00000000 0x0 0x0
0xffffc2800000dc00 0041 00000000 0x0 0x0
0xffffc2800000dc80 0041 00000000 0x0 0x0
0xffffc2800000dd00 0041 00000000 0x0 0x0
0xffffc2800000dd80 0041 00000000 0x0 0x0
0xffffc2800000de00 0041 00000000 0x0 0x0
0xffffc2800000de80 0041 00000000 0x0 0x0
0xffffc2800000df00 0045 00000000 0x0 0x0
0xffffc2800000df80 0045 00000000 0x0 0x0
0xffffc2800000e000 0045 00000000 0x0 0x0
0xffffc2800000e080 0041 00000000 0x0 0x0
0xffffc2800000e100 0045 00000000 0x0 0x0
0xffffc2800000e180 0045 00000000 0x0 0x0
0xffffc2800000e200 0045 00000000 0x0 0x0
0xffffc2800000e280 0045 00000000 0x0 0x0
0xffffc2800000e300 0045 00000000 0x0 0x0
0xffffc2800000e380 0045 00000000 0x0 0x0
0xffffc2800000e400 0041 00000000 0x0 0x0
0xffffc2800000e480 0045 00000000 0x0 0x0
0xffffc2800000e500 0041 00000000 0x0 0x0
0xffffc2800000e580 0041 00000000 0x0 0x0
0xffffc2800000e600 0041 00000000 0x0 0x0
0xffffc2800000e680 0041 00000000 0x0 0x0
0xffffc2800000e700 0041 00000000 0x0 0x0
0xffffc2800000e780 0045 00000000 0x0 0x0
0xffffc2800000e800 0045 00000000 0x0 0x0
0xffffc2800000e880 0041 00000000 0x0 0x0
0xffffc2800000e900 0041 00000000 0x0 0x0
0xffffc2800000e980 0041 00000000 0x0 0x0
0xffffc2800000ea00 0041 00000000 0x0 0x0
0xffffc2800000ea80 0045 00000000 0x0 0x0
0xffffc2800000eb00 0041 00000000 0x0 0x0
0xffffc2800000eb80 0041 00000000 0x0 0x0
0xffffc2800000ec00 0045 00000000 0x0 0x0
0xffffc2800000ec80 0045 00000000 0x0 0x0
0xffffc2800000ed00 0045 00000000 0x0 0x0
0xffffc2800000ed80 0041 00000000 0x0 0x0
0xffffc2800000ee00 0041 00000000 0x0 0x0
0xffffc2800000ee80 0041 00000000 0x0 0x0
0xffffc2800000ef00 0041 00000000 0x0 0x0
0xffffc2800000ef80 0041 00000000 0x0 0x0
0xffffc2800000f000 0045 00000000 0x0 0x0
0xffffc2800000f080 0041 00000000 0x0 0x0
0xffffc2800000f100 0041 00000000 0x0 0x0
0xffffc2800000f180 0041 00000000 0x0 0x0
0xffffc2800000f200 0041 00000000 0x0 0x0
0xffffc2800000f280 0045 00000000 0x0 0x0
0xffffc2800000f300 0041 00000000 0x0 0x0
0xffffc2800000f380 0045 00000000 0x0 0x0
0xffffc2800000f400 0041 00000000 0x0 0x0
0xffffc2800000f480 0041 00000000 0x0 0x0
0xffffc2800000f500 0041 00000000 0x0 0x0
0xffffc2800000f580 0041 00000000 0x0 0x0
0xffffc2800000f600 0041 00000000 0x0 0x0
0xffffc2800000f680 0041 00000000 0x0 0x0
0xffffc2800000f700 0041 00000000 0x0 0x0
0xffffc2800000f780 0041 00000000 0x0 0x0
0xffffc2800000f800 0041 00000000 0x0 0x0
0xffffc2800000f880 0045 00000000 0x0 0x0
0xffffc2800000f900 0041 00000000 0x0 0x0
0xffffc2800000f980 0045 00000000 0x0 0x0
0xffffc2800000fa00 0045 00000000 0x0 0x0
0xffffc2800000fa80 0041 00000000 0x0 0x0
0xffffc2800000fb00 0041 00000000 0x0 0x0
0xffffc2800000fb80 0041 00000000 0x0 0x0
0xffffc2800000fc00 0045 00000000 0x0 0x0
0xffffc2800000fc80 0041 00000000 0x0 0x0
0xffffc2800000fd00 0045 00000000 0x0 0x0
0xffffc2800000fd80 0041 00000000 0x0 0x0
0xffffc2800000fe00 0041 00000000 0x0 0x0
0xffffc2800000fe80 0041 00000000 0x0 0x0
0xffffc2800000ff00 0041 00000000 0x0 0x0
0xffffc2800000ff80 0041 00000000 0x0 0x0
0xffffc28000010000 0041 00000000 0x0 0x0
0xffffc28000010080 0041 00000000 0x0 0x0
0xffffc28000010100 0041 00000000 0x0 0x0
0xffffc28000010180 0041 00000000 0x0 0x0
0xffffc28000010200 0041 00000000 0x0 0x0
0xffffc28000010280 0041 00000000 0x0 0x0
0xffffc28000010300 0041 00000000 0x0 0x0
0xffffc28000010380 0041 00000000 0x0 0x0
0xffffc28000010400 0045 00000000 0x0 0x0
0xffffc28000010480 0045 00000000 0x0 0x0
0xffffc28000010500 0045 00000000 0x0 0x0
0xffffc28000010580 0045 00000000 0x0 0x0
0xffffc28000010600 0045 00000000 0x0 0x0
0xffffc28000010680 0041 00000000 0x0 0x0
0xffffc28000010700 0045 00000000 0x0 0x0
0xffffc28000010780 0041 00000000 0x0 0x0
0xffffc28000010800 0041 00000000 0x0 0x0
0xffffc28000010880 0041 00000000 0x0 0x0
0xffffc28000010900 0041 00000000 0x0 0x0
0xffffc28000010980 0041 00000000 0x0 0x0
0xffffc28000010a00 0041 00000000 0x0 0x0
0xffffc28000010a80 0045 00000000 0x0 0x0
0xffffc28000010b00 0041 00000000 0x0 0x0
0xffffc28000010b80 0041 00000000 0x0 0x0
0xffffc28000010c00 0041 00000000 0x0 0x0
0xffffc28000010c80 0045 00000000 0x0 0x0
0xffffc28000010d00 0041 00000000 0x0 0x0
0xffffc28000010d80 0041 00000000 0x0 0x0
0xffffc28000010e00 0045 00000000 0x0 0x0
0xffffc28000010e80 0041 00000000 0x0 0x0
0xffffc28000010f00 0041 00000000 0x0 0x0
0xffffc28000010f80 0041 00000000 0x0 0x0
0xffffc28000011000 0041 00000000 0x0 0x0
0xffffc28000011080 0041 00000000 0x0 0x0
0xffffc28000011100 0041 00000000 0x0 0x0
0xffffc28000011180 0041 00000000 0x0 0x0
0xffffc28000011200 0041 00000000 0x0 0x0
0xffffc28000011280 0041 00000000 0x0 0x0
0xffffc28000011300 0041 00000000 0x0 0x0
0xffffc28000011380 0041 00000000 0x0 0x0
0xffffc28000011400 0041 00000000 0x0 0x0
0xffffc28000011480 0041 00000000 0x0 0x0
0xffffc28000011500 0041 00000000 0x0 0x0
0xffffc28000011580 0041 00000000 0x0 0x0
0xffffc28000011600 0041 00000000 0x0 0x0
0xffffc28000011680 0041 00000000 0x0 0x0
0xffffc28000011700 0041 00000000 0x0 0x0
0xffffc28000011780 0041 00000000 0x0 0x0
0xffffc28000011800 0041 00000000 0x0 0x0
0xffffc28000011880 0041 00000000 0x0 0x0
0xffffc28000011900 0041 00000000 0x0 0x0
0xffffc28000011980 0045 00000000 0x0 0x0
0xffffc28000011a00 0041 00000000 0x0 0x0
0xffffc28000011a80 0045 00000000 0x0 0x0
0xffffc28000011b00 0045 00000000 0x0 0x0
0xffffc28000011b80 0041 00000000 0x0 0x0
0xffffc28000011c00 0041 00000000 0x0 0x0
0xffffc28000011c80 0041 00000000 0x0 0x0
0xffffc28000011d00 0045 00000000 0x0 0x0
0xffffc28000011d80 0041 00000000 0x0 0x0
0xffffc28000011e00 0045 00000000 0x0 0x0
0xffffc28000011e80 0041 00000000 0x0 0x0
0xffffc28000011f00 0041 00000000 0x0 0x0
0xffffc28000011f80 0045 00000000 0x0 0x0
0xffffc28000012000 0041 00000000 0x0 0x0
0xffffc28000012080 0041 00000000 0x0 0x0
0xffffc28000012100 0041 00000000 0x0 0x0
0xffffc28000012180 0041 00000000 0x0 0x0
0xffffc28000012200 0041 00000000 0x0 0x0
0xffffc28000012280 0041 00000000 0x0 0x0
0xffffc28000012300 0041 00000000 0x0 0x0
0xffffc28000012380 0041 00000000 0x0 0x0
0xffffc28000012400 0041 00000000 0x0 0x0
0xffffc28000012480 0041 00000000 0x0 0x0
0xffffc28000012500 0041 00000000 0x0 0x0
0xffffc28000012580 0041 00000000 0x0 0x0
0xffffc28000012600 0041 00000000 0x0 0x0
0xffffc28000012680 0041 00000000 0x0 0x0
0xffffc28000012700 0041 00000000 0x0 0x0
0xffffc28000012780 0041 00000000 0x0 0x0
0xffffc28000012800 0041 00000000 0x0 0x0
0xffffc28000012880 0041 00000000 0x0 0x0
0xffffc28000012900 0041 00000000 0x0 0x0
0xffffc28000012980 0041 00000000 0x0 0x0
0xffffc28000012a00 0041 00000000 0x0 0x0
0xffffc28000012a80 0041 00000000 0x0 0x0
0xffffc28000012b00 0041 00000000 0x0 0x0
0xffffc28000012b80 0041 00000000 0x0 0x0
0xffffc28000012c00 0041 00000000 0x0 0x0
0xffffc28000012c80 0045 00000000 0x0 0x0
0xffffc28000012d00 0001 00000000 0x0 0x0
0xffffc28000012d80 0001 00000000 0x0 0x0
0xffffc28000012e00 0001 00000000 0x0 0x0
0xffffc28000012e80 0001 00000000 0x0 0x0
0xffffc28000012f00 0001 00000000 0x0 0x0
0xffffc28000012f80 0001 00000000 0x0 0x0
0xffffc28000013000 0001 00000000 0x0 0x0
0xffffc28000013080 0001 00000000 0x0 0x0
0xffffc28000013100 0001 00000000 0x0 0x0
0xffffc28000013180 0001 00000000 0x0 0x0
0xffffc28000013200 0001 00000000 0x0 0x0
0xffffc28000013280 0001 00000000 0x0 0x0
0xffffc28000013300 0001 00000000 0x0 0x0
0xffffc28000013380 0001 00000000 0x0 0x0
0xffffc28000013400 0001 00000000 0x0 0x0
0xffffc28000013480 0001 00000000 0x0 0x0
0xffffc28000013500 0001 00000000 0x0 0x0
0xffffc28000013580 0001 00000000 0x0 0x0
0xffffc28000013600 0001 00000000 0x0 0x0
0xffffc28000013680 0001 00000000 0x0 0x0
0xffffc28000013700 0001 00000000 0x0 0x0
0xffffc28000013780 0001 00000000 0x0 0x0
0xffffc28000013800 0001 00000000 0x0 0x0
0xffffc28000013880 0001 00000000 0x0 0x0
0xffffc28000013900 0001 00000000 0x0 0x0
0xffffc28000013980 0001 00000000 0x0 0x0
0xffffc28000013a00 0001 00000000 0x0 0x0
0xffffc28000013a80 0001 00000000 0x0 0x0
0xffffc28000013b00 0001 00000000 0x0 0x0
0xffffc28000013b80 0001 00000000 0x0 0x0
0xffffc28000013c00 0001 00000000 0x0 0x0
0xffffc28000013c80 0001 00000000 0x0 0x0
0xffffc28000013d00 0001 00000000 0x0 0x0
0xffffc28000013d80 0001 00000000 0x0 0x0
0xffffc28000013e00 0001 00000000 0x0 0x0
0xffffc28000013e80 0001 00000000 0x0 0x0
0xffffc28000013f00 0001 00000000 0x0 0x0
0xffffc28000013f80 0001 00000000 0x0 0x0
0xffffc28000014000 0001 00000000 0x0 0x0
0xffffc28000014080 0001 00000000 0x0 0x0
0xffffc28000014100 0001 00000000 0x0 0x0
0xffffc28000014180 0001 00000000 0x0 0x0
0xffffc28000014200 0001 00000000 0x0 0x0
0xffffc28000014280 0001 00000000 0x0 0x0
0xffffc28000014300 0001 00000000 0x0 0x0
0xffffc28000014380 0001 00000000 0x0 0x0
0xffffc28000014400 0001 00000000 0x0 0x0
0xffffc28000014480 0001 00000000 0x0 0x0
0xffffc28000014500 0001 00000000 0x0 0x0
0xffffc28000014580 0001 00000000 0x0 0x0
0xffffc28000014600 0001 00000000 0x0 0x0
0xffffc28000014680 0001 00000000 0x0 0x0
0xffffc28000014700 0001 00000000 0x0 0x0
0xffffc28000014780 0001 00000000 0x0 0x0
0xffffc28000014800 0041 00000000 0x0 0x0
0xffffc28000014880 0041 00000000 0x0 0x0
0xffffc28000014900 0041 00000000 0x0 0x0
0xffffc28000014980 0041 00000000 0x0 0x0
0xffffc28000014a00 0041 00000000 0x0 0x0
0xffffc28000014a80 0041 00000000 0x0 0x0
0xffffc28000014b00 0041 00000000 0x0 0x0
0xffffc28000014b80 0041 00000000 0x0 0x0
0xffffc28000014c00 0041 00000000 0x0 0x0
0xffffc28000014c80 0041 00000000 0x0 0x0
0xffffc28000014d00 0041 00000000 0x0 0x0
0xffffc28000014d80 0041 00000000 0x0 0x0
0xffffc28000014e00 0041 00000000 0x0 0x0
0xffffc28000014e80 0041 00000000 0x0 0x0
0xffffc28000014f00 0041 00000000 0x0 0x0
0xffffc28000014f80 0041 00000000 0x0 0x0
0xffffc28000015000 0041 00000000 0x0 0x0
0xffffc28000015080 0041 00000000 0x0 0x0
0xffffc28000015100 0041 00000000 0x0 0x0
0xffffc28000015180 0041 00000000 0x0 0x0
0xffffc28000015200 0041 00000000 0x0 0x0
0xffffc28000015280 0041 00000000 0x0 0x0
0xffffc28000015300 0041 00000000 0x0 0x0
0xffffc28000015380 0041 00000000 0x0 0x0
0xffffc28000015400 0041 00000000 0x0 0x0
0xffffc28000015480 0041 00000000 0x0 0x0
0xffffc28000015500 0041 00000000 0x0 0x0
0xffffc28000015580 0041 00000000 0x0 0x0
0xffffc28000015600 0041 00000000 0x0 0x0
0xffffc28000015680 0041 00000000 0x0 0x0
0xffffc28000015700 0041 00000000 0x0 0x0
0xffffc28000015780 0041 00000000 0x0 0x0
0xffffc28000015800 0041 00000000 0x0 0x0
0xffffc28000015880 0041 00000000 0x0 0x0
0xffffc28000015900 0041 00000000 0x0 0x0
0xffffc28000015980 0041 00000000 0x0 0x0
0xffffc28000015a00 0041 00000000 0x0 0x0
0xffffc28000015a80 0041 00000000 0x0 0x0
0xffffc28000015b00 0041 00000000 0x0 0x0
0xffffc28000015b80 0041 00000000 0x0 0x0
0xffffc28000015c00 0041 00000000 0x0 0x0
0xffffc28000015c80 0041 00000000 0x0 0x0
0xffffc28000015d00 0001 00000000 0x0 0x0
0xffffc28000015d80 0001 00000000 0x0 0x0
0xffffc28000015e00 0001 00000000 0x0 0x0
0xffffc28000015e80 0001 00000000 0x0 0x0
0xffffc28000015f00 0001 00000000 0x0 0x0
0xffffc28000015f80 0001 00000000 0x0 0x0
0xffffc28000016000 0001 00000000 0x0 0x0
0xffffc28000016080 0001 00000000 0x0 0x0
0xffffc28000016100 0001 00000000 0x0 0x0
0xffffc28000016180 0001 00000000 0x0 0x0
0xffffc28000016200 0001 00000000 0x0 0x0
0xffffc28000016280 0001 00000000 0x0 0x0
0xffffc28000016300 0001 00000000 0x0 0x0
0xffffc28000016380 0001 00000000 0x0 0x0
0xffffc28000016400 0001 00000000 0x0 0x0
0xffffc28000016480 0001 00000000 0x0 0x0
0xffffc28000016500 0001 00000000 0x0 0x0
0xffffc28000016580 0001 00000000 0x0 0x0
0xffffc28000016600 0001 00000000 0x0 0x0
0xffffc28000016680 0001 00000000 0x0 0x0
0xffffc28000016700 0001 00000000 0x0 0x0
0xffffc28000016780 0001 00000000 0x0 0x0
0xffffc28000016800 0001 00000000 0x0 0x0
0xffffc28000016880 0001 00000000 0x0 0x0
0xffffc28000016900 0001 00000000 0x0 0x0
0xffffc28000016980 0001 00000000 0x0 0x0
0xffffc28000016a00 0001 00000000 0x0 0x0
0xffffc28000016a80 0001 00000000 0x0 0x0
0xffffc28000016b00 0001 00000000 0x0 0x0
0xffffc28000016b80 0001 00000000 0x0 0x0
0xffffc28000016c00 0001 00000000 0x0 0x0
0xffffc28000016c80 0001 00000000 0x0 0x0
0xffffc28000016d00 0001 00000000 0x0 0x0
0xffffc28000016d80 0001 00000000 0x0 0x0
0xffffc28000016e00 0001 00000000 0x0 0x0
0xffffc28000016e80 0001 00000000 0x0 0x0
0xffffc28000016f00 0001 00000000 0x0 0x0
0xffffc28000016f80 0001 00000000 0x0 0x0
0xffffc28000017000 0001 00000000 0x0 0x0
0xffffc28000017080 0001 00000000 0x0 0x0
0xffffc28000017100 0001 00000000 0x0 0x0
0xffffc28000017180 0001 00000000 0x0 0x0
0xffffc28000017200 0001 00000000 0x0 0x0
0xffffc28000017280 0001 00000000 0x0 0x0
0xffffc28000017300 0001 00000000 0x0 0x0
0xffffc28000017380 0001 00000000 0x0 0x0
0xffffc28000017400 0001 00000000 0x0 0x0
0xffffc28000017480 0001 00000000 0x0 0x0
0xffffc28000017500 0001 00000000 0x0 0x0
0xffffc28000017580 0001 00000000 0x0 0x0
0xffffc28000017600 0001 00000000 0x0 0x0
0xffffc28000017680 0001 00000000 0x0 0x0
0xffffc28000017700 0001 00000000 0x0 0x0
0xffffc28000017780 0001 00000000 0x0 0x0
0xffffc28000017800 0041 00000000 0x0 0x0
0xffffc28000017880 0041 00000000 0x0 0x0
0xffffc28000017900 0041 00000000 0x0 0x0
0xffffc28000017980 0041 00000000 0x0 0x0
0xffffc28000017a00 0041 00000000 0x0 0x0
0xffffc28000017a80 0041 00000000 0x0 0x0
0xffffc28000017b00 0041 00000000 0x0 0x0
0xffffc28000017b80 0041 00000000 0x0 0x0
0xffffc28000017c00 0041 00000000 0x0 0x0
0xffffc28000017c80 0041 00000000 0x0 0x0
0xffffc28000017d00 0041 00000000 0x0 0x0
0xffffc28000017d80 0041 00000000 0x0 0x0
0xffffc28000017e00 0041 00000000 0x0 0x0
0xffffc28000017e80 0041 00000000 0x0 0x0
0xffffc28000017f00 0041 00000000 0x0 0x0
0xffffc28000017f80 0041 00000000 0x0 0x0
0xffffc28000018000 0041 00000000 0x0 0x0
0xffffc28000018080 0041 00000000 0x0 0x0
0xffffc28000018100 0041 00000000 0x0 0x0
0xffffc28000018180 0041 00000000 0x0 0x0
0xffffc28000018200 0041 00000000 0x0 0x0
0xffffc28000018280 0041 00000000 0x0 0x0
0xffffc28000018300 0041 00000000 0x0 0x0
0xffffc28000018380 0041 00000000 0x0 0x0
0xffffc28000018400 0041 00000000 0x0 0x0
0xffffc28000018480 0041 00000000 0x0 0x0
0xffffc28000018500 0041 00000000 0x0 0x0
0xffffc28000018580 0041 00000000 0x0 0x0
0xffffc28000018600 0041 00000000 0x0 0x0
0xffffc28000018680 0041 00000000 0x0 0x0
0xffffc28000018700 0041 00000000 0x0 0x0
0xffffc28000018780 0041 00000000 0x0 0x0
0xffffc28000018800 0041 00000000 0x0 0x0
0xffffc28000018880 0041 00000000 0x0 0x0
0xffffc28000018900 0041 00000000 0x0 0x0
0xffffc28000018980 0041 00000000 0x0 0x0
0xffffc28000018a00 0041 00000000 0x0 0x0
0xffffc28000018a80 0041 00000000 0x0 0x0
0xffffc28000018b00 0041 00000000 0x0 0x0
0xffffc28000018b80 0041 00000000 0x0 0x0
0xffffc28000018c00 0041 00000000 0x0 0x0
0xffffc28000018c80 0041 00000000 0x0 0x0
0xffffc28000018d00 0001 00000000 0x0 0x0
0xffffc28000018d80 0001 00000000 0x0 0x0
0xffffc28000018e00 0001 00000000 0x0 0x0
0xffffc28000018e80 0001 00000000 0x0 0x0
0xffffc28000018f00 0001 00000000 0x0 0x0
0xffffc28000018f80 0001 00000000 0x0 0x0
0xffffc28000019000 0001 00000000 0x0 0x0
0xffffc28000019080 0001 00000000 0x0 0x0
0xffffc28000019100 0001 00000000 0x0 0x0
0xffffc28000019180 0001 00000000 0x0 0x0
0xffffc28000019200 0001 00000000 0x0 0x0
0xffffc28000019280 0001 00000000 0x0 0x0
0xffffc28000019300 0001 00000000 0x0 0x0
0xffffc28000019380 0001 00000000 0x0 0x0
0xffffc28000019400 0001 00000000 0x0 0x0
0xffffc28000019480 0001 00000000 0x0 0x0
0xffffc28000019500 0001 00000000 0x0 0x0
0xffffc28000019580 0001 00000000 0x0 0x0
0xffffc28000019600 0001 00000000 0x0 0x0
0xffffc28000019680 0001 00000000 0x0 0x0
0xffffc28000019700 0001 00000000 0x0 0x0
0xffffc28000019780 0001 00000000 0x0 0x0
0xffffc28000019800 0001 00000000 0x0 0x0
0xffffc28000019880 0001 00000000 0x0 0x0
0xffffc28000019900 0001 00000000 0x0 0x0
0xffffc28000019980 0001 00000000 0x0 0x0
0xffffc28000019a00 0001 00000000 0x0 0x0
0xffffc28000019a80 0001 00000000 0x0 0x0
0xffffc28000019b00 0001 00000000 0x0 0x0
0xffffc28000019b80 0001 00000000 0x0 0x0
0xffffc28000019c00 0001 00000000 0x0 0x0
0xffffc28000019c80 0001 00000000 0x0 0x0
0xffffc28000019d00 0001 00000000 0x0 0x0
0xffffc28000019d80 0001 00000000 0x0 0x0
0xffffc28000019e00 0001 00000000 0x0 0x0
0xffffc28000019e80 0001 00000000 0x0 0x0
0xffffc28000019f00 0001 00000000 0x0 0x0
0xffffc28000019f80 0001 00000000 0x0 0x0
0xffffc2800001a000 0001 00000000 0x0 0x0
0xffffc2800001a080 0001 00000000 0x0 0x0
0xffffc2800001a100 0001 00000000 0x0 0x0
0xffffc2800001a180 0001 00000000 0x0 0x0
0xffffc2800001a200 0001 00000000 0x0 0x0
0xffffc2800001a280 0001 00000000 0x0 0x0
0xffffc2800001a300 0001 00000000 0x0 0x0
0xffffc2800001a380 0001 00000000 0x0 0x0
0xffffc2800001a400 0001 00000000 0x0 0x0
0xffffc2800001a480 0001 00000000 0x0 0x0
0xffffc2800001a500 0001 00000000 0x0 0x0
0xffffc2800001a580 0001 00000000 0x0 0x0
0xffffc2800001a600 0001 00000000 0x0 0x0
0xffffc2800001a680 0001 00000000 0x0 0x0
0xffffc2800001a700 0001 00000000 0x0 0x0
0xffffc2800001a780 0001 00000000 0x0 0x0
0xffffc2800001a800 0041 00000000 0x0 0x0
0xffffc2800001a880 0041 00000000 0x0 0x0
0xffffc2800001a900 0041 00000000 0x0 0x0
0xffffc2800001a980 0041 00000000 0x0 0x0
0xffffc2800001aa00 0041 00000000 0x0 0x0
0xffffc2800001aa80 0041 00000000 0x0 0x0
0xffffc2800001ab00 0041 00000000 0x0 0x0
0xffffc2800001ab80 0041 00000000 0x0 0x0
0xffffc2800001ac00 0041 00000000 0x0 0x0
0xffffc2800001ac80 0041 00000000 0x0 0x0
0xffffc2800001ad00 0041 00000000 0x0 0x0
0xffffc2800001ad80 0041 00000000 0x0 0x0
0xffffc2800001ae00 0041 00000000 0x0 0x0
0xffffc2800001ae80 0041 00000000 0x0 0x0
0xffffc2800001af00 0041 00000000 0x0 0x0
0xffffc2800001af80 0041 00000000 0x0 0x0
0xffffc2800001b000 0041 00000000 0x0 0x0
0xffffc2800001b080 0041 00000000 0x0 0x0
0xffffc2800001b100 0041 00000000 0x0 0x0
0xffffc2800001b180 0041 00000000 0x0 0x0
0xffffc2800001b200 0041 00000000 0x0 0x0
0xffffc2800001b280 0041 00000000 0x0 0x0
0xffffc2800001b300 0041 00000000 0x0 0x0
0xffffc2800001b380 0041 00000000 0x0 0x0
0xffffc2800001b400 0041 00000000 0x0 0x0
0xffffc2800001b480 0041 00000000 0x0 0x0
0xffffc2800001b500 0041 00000000 0x0 0x0
0xffffc2800001b580 0041 00000000 0x0 0x0
0xffffc2800001b600 0041 00000000 0x0 0x0
0xffffc2800001b680 0041 00000000 0x0 0x0
0xffffc2800001b700 0041 00000000 0x0 0x0
0xffffc2800001b780 0041 00000000 0x0 0x0
0xffffc2800001b800 0041 00000000 0x0 0x0
0xffffc2800001b880 0041 00000000 0x0 0x0
0xffffc2800001b900 0041 00000000 0x0 0x0
0xffffc2800001b980 0045 00000000 0x0 0x0
0xffffc2800001ba00 0041 00000000 0x0 0x0
0xffffc2800001ba80 0045 00000000 0x0 0x0
0xffffc2800001bb00 0045 00000000 0x0 0x0
0xffffc2800001bb80 0041 00000000 0x0 0x0
0xffffc2800001bc00 0045 00000000 0x0 0x0
0xffffc2800001bc80 0041 00000000 0x0 0x0
0xffffc2800001bd00 0001 00000000 0x0 0x0
0xffffc2800001bd80 0001 00000000 0x0 0x0
0xffffc2800001be00 0001 00000000 0x0 0x0
0xffffc2800001be80 0001 00000000 0x0 0x0
0xffffc2800001bf00 0001 00000000 0x0 0x0
0xffffc2800001bf80 0001 00000000 0x0 0x0
0xffffc2800001c000 0001 00000000 0x0 0x0
0xffffc2800001c080 0001 00000000 0x0 0x0
0xffffc2800001c100 0001 00000000 0x0 0x0
0xffffc2800001c180 0001 00000000 0x0 0x0
0xffffc2800001c200 0001 00000000 0x0 0x0
0xffffc2800001c280 0001 00000000

syzbot

unread,
Jun 29, 2022, 6:53:16 PM6/29/22
to rias...@netbsd.org, syzkaller-...@googlegroups.com
Hello,

syzbot has tested the proposed patch and the reproducer did not trigger any issue:

Reported-and-tested-by: syzbot+083d9b...@syzkaller.appspotmail.com

Tested on:

commit: b169b899 Use old limit of 32 + 32 bytes to keep combin..
git tree: https://github.com/NetBSD/src trunk
console output: https://syzkaller.appspot.com/x/log.txt?x=17dcef70080000
kernel config: https://syzkaller.appspot.com/x/.config?x=1420f906d33d9f1f
dashboard link: https://syzkaller.appspot.com/bug?extid=083d9be5cb3c2e78ed1c
compiler: g++ (Debian 10.2.1-6) 10.2.1 20210110
patch: https://syzkaller.appspot.com/x/patch.diff?x=15cc3097f00000

Note: testing is done by a robot and is best-effort only.
Reply all
Reply to author
Forward
0 new messages