UBSan: Undefined Behavior in quota1_handle_cmd_get

8 views

Skip to first unread message

syzbot

unread,

Sep 20, 2022, 5:23:39 PM9/20/22

to syzkaller-...@googlegroups.com

Hello,

syzbot found the following issue on:

HEAD commit: 56ea27f598d5 Typo in comment. No binary changes.
git tree: netbsd
console output: https://syzkaller.appspot.com/x/log.txt?x=136cf35f080000
kernel config: https://syzkaller.appspot.com/x/.config?x=1420f906d33d9f1f
dashboard link: https://syzkaller.appspot.com/bug?extid=ce8391eb74a16e1967ab
compiler: g++ (Debian 10.2.1-6) 10.2.1 20210110

Unfortunately, I don't have any reproducer for this issue yet.

Downloadable assets:
disk image: https://storage.googleapis.com/syzbot-assets/dcb6d558b8bf/disk-56ea27f5.raw.xz
netbsd.gdb: https://storage.googleapis.com/syzbot-assets/7da7cd6b8b60/netbsd-56ea27f5.gdb.xz

IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+ce8391...@syzkaller.appspotmail.com

[ 377.3647660] panic: UBSan: Undefined Behavior in /syzkaller/managers/ci2-netbsd-kubsan/kernel/sys/ufs/ufs/ufs_quota1.c:495:20, index -1 is out of range for type 'vnode *[2]'

[ 377.3807499] cpu0: Begin traceback...
[ 377.4047520] vpanic() at netbsd:vpanic+0x2f2 sys/kern/subr_prf.c:293
[ 377.5147522] Report() at netbsd:Report+0x3b sys/../common/lib/libc/misc/ubsan.c:1352
[ 377.6047537] HandleOutOfBounds() at netbsd:HandleOutOfBounds+0x136 sys/../common/lib/libc/misc/ubsan.c:470
[ 377.6847502] quota1_handle_cmd_get() at netbsd:quota1_handle_cmd_get+0x3ac sys/ufs/ufs/ufs_quota1.c:495
[ 377.7547523] quota_handle_cmd() at netbsd:quota_handle_cmd+0x1535 quota_handle_cmd_get sys/ufs/ufs/ufs_quota.c:365 [inline]
[ 377.7547523] quota_handle_cmd() at netbsd:quota_handle_cmd+0x1535 sys/ufs/ufs/ufs_quota.c:193
[ 377.8347505] ufs_quotactl() at netbsd:ufs_quotactl+0x7e sys/ufs/ufs/ufs_vfsops.c:142
[ 377.9047498] VFS_QUOTACTL() at netbsd:VFS_QUOTACTL+0xa5 sys/kern/vfs_subr.c:1466
[ 377.9747507] vfs_quotactl_get() at netbsd:vfs_quotactl_get+0x36 sys/kern/vfs_quotactl.c:81
[ 378.0547516] compat_50_sys_quotactl() at netbsd:compat_50_sys_quotactl+0x2f7 sys/compat/common/compat_50_quota.c:110
[ 378.1247484] sys___syscall() at netbsd:sys___syscall+0x1e4 sy_call sys/sys/syscallvar.h:65 [inline]
[ 378.1247484] sys___syscall() at netbsd:sys___syscall+0x1e4 sys/kern/sys_syscall.c:90
[ 378.2047500] syscall() at uhub2: device problem, disabling port 1
[ 378.2247502] netbsd:syscall+0x2da
[ 378.2247502] --- syscall (number 148 via SYS_syscall) ---
[ 378.2447510] netbsd:syscall+0x2da:
[ 378.2550571] cpu0: End traceback...
[ 378.2550571] fatal breakpoint trap in supervisor mode
[ 378.2550571] trap type 1 code 0 rip 0xffffffff80235375 cs 0x8 rflags 0x246 cr2 0x63e060 ilevel 0 rsp 0xffff8402576816d0
[ 378.2744217] curlwp 0xffff82a86a8c28c0 pid 8008.7787 lowest kstack 0xffff84025767d2c0
Stopped in pid 8008.7787 (syz-executor.3) at netbsd:breakpoint+0x5: leave
?
breakpoint() at netbsd:breakpoint+0x5
db_panic() at netbsd:db_panic+0xec sys/ddb/db_panic.c:69
vpanic() at netbsd:vpanic+0x2f2 sys/kern/subr_prf.c:293
Report() at netbsd:Report+0x3b sys/../common/lib/libc/misc/ubsan.c:1352
HandleOutOfBounds() at netbsd:HandleOutOfBounds+0x136 sys/../common/lib/libc/misc/ubsan.c:470
quota1_handle_cmd_get() at netbsd:quota1_handle_cmd_get+0x3ac sys/ufs/ufs/ufs_quota1.c:495
quota_handle_cmd() at netbsd:quota_handle_cmd+0x1535 quota_handle_cmd_get sys/ufs/ufs/ufs_quota.c:365 [inline]
quota_handle_cmd() at netbsd:quota_handle_cmd+0x1535 sys/ufs/ufs/ufs_quota.c:193
ufs_quotactl() at netbsd:ufs_quotactl+0x7e sys/ufs/ufs/ufs_vfsops.c:142
VFS_QUOTACTL() at netbsd:VFS_QUOTACTL+0xa5 sys/kern/vfs_subr.c:1466
vfs_quotactl_get() at netbsd:vfs_quotactl_get+0x36 sys/kern/vfs_quotactl.c:81
compat_50_sys_quotactl() at netbsd:compat_50_sys_quotactl+0x2f7 sys/compat/common/compat_50_quota.c:110
sys___syscall() at netbsd:sys___syscall+0x1e4 sy_call sys/sys/syscallvar.h:65 [inline]
sys___syscall() at netbsd:sys___syscall+0x1e4 sys/kern/sys_syscall.c:90
syscall() at netbsd:syscall+0x2da sy_call sys/sys/syscallvar.h:65 [inline]
syscall() at netbsd:syscall+0x2da sy_invoke sys/sys/syscallvar.h:94 [inline]
syscall() at netbsd:syscall+0x2da sys/arch/x86/x86/syscall.c:138
--- syscall (number 148 via SYS_syscall) ---
netbsd:syscall+0x2da:
Panic string: UBSan: Undefined Behavior in /syzkaller/managers/ci2-netbsd-kubsan/kernel/sys/ufs/ufs/ufs_quota1.c:495:20, index -1 is out of range for type 'vnode *[2]'

PID LID S CPU FLAGS STRUCT LWP * NAME WAIT
8375 8375 2 0 0 ffff82a875808980 syz-executor.4
8553 7313 2 1 100 ffff82a86d9cc300 syz-executor.2
8553 8553 2 1 10000000 ffff82a8744b5780 syz-executor.2
8008 >7787 7 0 100100 ffff82a86a8c28c0 syz-executor.3
8008 8008 3 1 10000000 ffff82a877ffab00 syz-executor.3 lwpwait
8480 7206 2 0 100 ffff82a878e9d680 syz-executor.1
8480 8480 2 0 10000000 ffff82a879123600 syz-executor.1
2438 >2438 7 1 140 ffff82a8780f8a00 syz-executor.4
3541 3386 2 1 1140100 ffff82a8791231c0 syz-executor.4
3541 3541 2 0 11000040 ffff82a879e78200 syz-executor.4
2234 2234 3 1 180 ffff82a879123a40 syz-executor.3 parked
1351 1351 3 0 180 ffff82a874446700 syz-executor.4 parked
322 323 3 0 11100000 ffff82a86d9cc740 syz-executor.4 vfork
322 322 2 0 11000040 ffff82a869afb080 syz-executor.4
411 411 3 0 180 ffff82a873f50ac0 syz-executor.4 parked
408 415 2 0 1000040 ffff82a866c81b40 syz-executor.4
408 409 3 0 11100000 ffff82a86ec8d640 syz-executor.4 vfork
1214 1214 3 0 180 ffff82a873bc1280 syz-executor.4 parked
1238 1072 3 0 1100000 ffff82a866b9d300 syz-executor.4 vfork
1238 1238 2 0 11000040 ffff82a86ec8da80 syz-executor.4
1381 1381 2 0 140 ffff82a86777f500 syz-executor.5
828 828 2 0 140 ffff82a86c042a40 syz-executor.3
979 979 2 0 40140 ffff82a86c042600 syz-executor.1
988 988 2 0 140 ffff82a86c0421c0 syz-executor.2
1003 1003 3 1 1c0 ffff82a868512a00 syz-executor.0 pipe_rd
1221 1862 3 1 180 ffff82a869afb900 syz-fuzzer parked
1221 1243 2 0 100 ffff82a86ec8d200 syz-fuzzer
1221 1242 3 1 180 ffff82a8669cdb00 syz-fuzzer parked
1221 1240 3 0 1c0 ffff82a867211900 syz-fuzzer wait
1221 991 3 0 1c0 ffff82a86777f940 syz-fuzzer parked
1221 1066 3 0 180 ffff82a866b9db80 syz-fuzzer wait
1221 1230 3 0 180 ffff82a8685125c0 syz-fuzzer wait
1221 1196 3 1 180 ffff82a866684ac0 syz-fuzzer wait
1221 1002 3 1 180 ffff82a8669cd6c0 syz-fuzzer parked
1221 1228 3 0 180 ffff82a866ce3bc0 syz-fuzzer parked
1221 1223 3 0 1c0 ffff82a8655e6a40 syz-fuzzer parked
1221 1229 3 0 180 ffff82a866ce3340 syz-fuzzer wait
1221 1080 2 0 140 ffff82a867737980 syz-fuzzer
1221 1221 3 0 180 ffff82a867797140 syz-fuzzer wait
1224 1224 3 0 180 ffff82a867737100 sshd select
1081 1081 3 1 180 ffff82a8677979c0 getty nanoslp
848 848 3 1 180 ffff82a868512180 getty nanoslp
1079 1079 3 1 180 ffff82a866684680 getty nanoslp
1071 1071 3 0 1c0 ffff82a8669cd280 getty ttyraw
950 950 3 1 180 ffff82a866b9d740 sshd select
1067 1067 3 0 180 ffff82a867797580 powerd kqueue
693 693 3 0 180 ffff82a86777f0c0 syslogd kqueue
547 547 3 0 180 ffff82a866eb2480 dhcpcd poll
742 742 3 0 180 ffff82a8672114c0 dhcpcd poll
465 465 3 0 180 ffff82a866c812c0 dhcpcd poll
594 594 3 0 180 ffff82a866eb28c0 dhcpcd poll
292 292 3 1 180 ffff82a866ce3780 dhcpcd poll
290 290 3 1 180 ffff82a866eb2040 dhcpcd poll
289 289 3 0 180 ffff82a867211080 dhcpcd poll
1 1 3 0 180 ffff82a85e3d7340 init wait
0 7153 5 0 200 ffff82a873f50680 (zombie)
0 4304 3 0 200 ffff82a8750890c0 ktrace ktrwait
0 1709 3 0 200 ffff82a86a8c2480 ktrace ktrwait
0 734 3 0 200 ffff82a866686200 physiod physiod
0 195 3 1 200 ffff82a866684240 pooldrain pooldrain
0 194 2 0 240 ffff82a866686a80 ioflush
0 193 3 0 200 ffff82a866686640 pgdaemon pgdaemon
0 169 3 0 200 ffff82a8655e6600 usb7 usbevt
0 168 3 1 200 ffff82a8655e61c0 usb6 usbevt
0 167 3 1 200 ffff82a862571a00 usb5 usbevt
0 166 3 1 200 ffff82a8625715c0 usb4 usbevt
0 165 3 1 200 ffff82a862571180 usb3 usbevt
0 31 3 1 200 ffff82a85e4b49c0 usb2 usbevt
0 63 3 0 200 ffff82a85e4b4580 usb1 usbevt
0 126 3 1 200 ffff82a85e2d8740 usb0 usbevt
0 125 3 1 200 ffff82a85e2d8b80 usbtask-dr usbtsk
0 124 3 1 200 ffff82a85c8a1b00 usbtask-hc usbtsk
0 123 3 1 200 ffff82a85e4b4140 npfgc0 npfgcw
0 122 3 1 200 ffff82a85e44b980 rt_free rt_free
0 121 3 1 200 ffff82a85e44b540 unpgc unpgc
0 120 2 0 200 ffff82a85e44b100 key_timehandler
0 119 3 1 200 ffff82a85e43e940 icmp6_wqinput/1 icmp6_wqinput
0 118 3 0 200 ffff82a85e43e500 icmp6_wqinput/0 icmp6_wqinput
0 117 2 0 200 ffff82a85e43e0c0 nd6_timer
0 116 3 1 200 ffff82a85e42a900 carp6_wqinput/1 carp6_wqinput
0 115 3 0 200 ffff82a85e42a4c0 carp6_wqinput/0 carp6_wqinput
0 114 3 1 200 ffff82a85e42a080 carp_wqinput/1 carp_wqinput
0 113 3 0 200 ffff82a85e4148c0 carp_wqinput/0 carp_wqinput
0 112 3 1 200 ffff82a85e414480 icmp_wqinput/1 icmp_wqinput
0 111 3 0 200 ffff82a85e414040 icmp_wqinput/0 icmp_wqinput
0 110 2 0 200 ffff82a85e3d7bc0 rt_timer
0 109 3 0 200 ffff82a85e3d7780 vmem_rehash vmem_rehash
0 100 3 0 200 ffff82a85e2d8300 entbutler entropy
0 99 3 0 200 ffff82a85dd48b40 viomb balloon
0 98 3 1 200 ffff82a85dd48700 vioif0_txrx/1 vioif0_txrx
0 97 3 0 200 ffff82a85dd482c0 vioif0_txrx/0 vioif0_txrx
0 30 3 0 200 ffff82a85c8a16c0 scsibus0 sccomp
0 29 3 1 200 ffff82a85c8a1280 pms0 pmsreset
0 28 3 1 200 ffff82a85c7b4ac0 xcall/1 xcall
0 27 1 1 200 ffff82a85c7b4680 softser/1
0 26 1 1 200 ffff82a85c7b4240 softclk/1
0 25 1 1 200 ffff82a85c787a80 softbio/1
0 24 1 1 200 ffff82a85c787640 softnet/1
0 23 1 1 201 ffff82a85c787200 idle/1
0 22 3 1 200 ffff82a98ab2da40 lnxsyswq lnxsyswq
0 21 3 0 200 ffff82a98ab2d600 lnxubdwq lnxubdwq
0 20 3 1 200 ffff82a98ab2d1c0 lnxpwrwq lnxpwrwq
0 19 3 1 200 ffff82a98ab34a00 lnxlngwq lnxlngwq
0 18 3 1 200 ffff82a98ab345c0 lnxhipwq lnxhipwq
0 17 3 0 200 ffff82a98ab34180 lnxrcugc lnxrcugc
0 16 3 0 200 ffff82a98ab539c0 sysmon smtaskq
0 15 3 1 200 ffff82a98ab53580 pmfsuspend pmfsuspend
0 14 3 0 200 ffff82a98ab53140 pmfevent pmfevent
0 13 3 1 200 ffff82a98ab5e980 sopendfree sopendfr
0 12 3 0 200 ffff82a98ab5e540 ifwdog ifwdog
0 11 3 1 200 ffff82a98ab5e100 iflnkst iflnkst
0 10 3 1 200 ffff82a98bb95940 nfssilly nfssilly
0 9 3 0 200 ffff82a98bb95500 vdrain vdrain
0 8 3 1 200 ffff82a98bb950c0 modunload mod_unld
0 7 3 0 200 ffff82a98bbba900 xcall/0 xcall
0 6 1 0 200 ffff82a98bbba4c0 softser/0
0 5 1 0 200 ffff82a98bbba080 softclk/0
0 4 1 0 200 ffff82a98bbeb8c0 softbio/0
0 3 1 0 200 ffff82a98bbeb480 softnet/0
0 2 1 0 201 ffff82a98bbeb040 idle/0
0 0 2 0 240 ffffffff86741280 swapper
[Locks tracked through LWPs]

****** LWP 8008.7787 (syz-executor.3) @ 0xffff82a86a8c28c0, l_stat=7

*** Locks held:

* Lock 0 (initialized at netbsd:vfs_mountalloc+0x14a sys/kern/vfs_mount.c:159)
lock address : ffff82a98c06a8c0
type : sleep/adaptive
initialized : netbsd:vfs_mountalloc+0x14a
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffff82a86a8c28c0 last held: 0xffff82a86a8c28c0
last locked* : netbsd:ufs_quotactl+0x70
unlocked : netbsd:ufs_quotactl+0x96
owner field : 0xffff82a86a8c28c0 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

*** Locks wanted: none

****** LWP 8480.7206 (syz-executor.1) @ 0xffff82a878e9d680, l_stat=2

*** Locks held:

* Lock 0 (initialized at netbsd:filedesc_ctor+0xa1 sys/kern/kern_descrip.c:1328)
lock address : ffff82a87aaff940
type : sleep/adaptive
initialized : netbsd:filedesc_ctor+0xa1
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffff82a878e9d680 last held: 0xffff82a878e9d680
last locked* : netbsd:fd_alloc+0xf3
unlocked : netbsd:fd_alloc+0x59c
owner field : 0xffff82a878e9d680 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

*** Locks wanted: none

****** LWP 1003.1003 (syz-executor.0) @ 0xffff82a868512a00, l_stat=3

*** Locks held:

* Lock 0 (initialized at netbsd:filedesc_ctor+0xa1 sys/kern/kern_descrip.c:1328)
lock address : ffff82a86717a9c0
type : sleep/adaptive
initialized : netbsd:filedesc_ctor+0xa1
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 1
relevant lwp : 0xffff82a868512a00 last held: 0xffff82a868512a00
last locked* : netbsd:fd_close+0x1ac
unlocked : netbsd:fd_alloc+0x59c
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

*** Locks wanted: none

****** LWP 742.742 (dhcpcd) @ 0xffff82a8672114c0, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:module_hook_init+0x1c sys/kern/kern_module_hook.c:132)
lock address : netbsd:module_hook
type : sleep/adaptive
initialized : netbsd:module_hook_init+0x1c
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffff82a8672114c0 last held: 000000000000000000
last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 465.465 (dhcpcd) @ 0xffff82a866c812c0, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:module_hook_init+0x1c sys/kern/kern_module_hook.c:132)
lock address : netbsd:module_hook
type : sleep/adaptive
initialized : netbsd:module_hook_init+0x1c
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffff82a866c812c0 last held: 000000000000000000
last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 290.290 (dhcpcd) @ 0xffff82a866eb2040, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:module_hook_init+0x1c sys/kern/kern_module_hook.c:132)
lock address : netbsd:module_hook
type : sleep/adaptive
initialized : netbsd:module_hook_init+0x1c
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 0
relevant lwp : 0xffff82a866eb2040 last held: 000000000000000000
last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 289.289 (dhcpcd) @ 0xffff82a867211080, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:module_hook_init+0x1c sys/kern/kern_module_hook.c:132)
lock address : netbsd:module_hook
type : sleep/adaptive
initialized : netbsd:module_hook_init+0x1c
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffff82a867211080 last held: 000000000000000000
last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 0.11 (iflnkst) @ 0xffff82a98ab5e100, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:module_hook_init+0x1c sys/kern/kern_module_hook.c:132)
lock address : netbsd:module_hook
type : sleep/adaptive
initialized : netbsd:module_hook_init+0x1c
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 0
relevant lwp : 0xffff82a98ab5e100 last held: 000000000000000000
last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 0.5 (softclk/0) @ 0xffff82a98bbba080, l_stat=1

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:module_hook_init+0x1c sys/kern/kern_module_hook.c:132)
lock address : netbsd:module_hook
type : sleep/adaptive
initialized : netbsd:module_hook_init+0x1c
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffff82a98bbba080 last held: 000000000000000000
last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 0.0 (swapper) @ 0xffffffff86741280, l_stat=2

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:module_hook_init+0x1c sys/kern/kern_module_hook.c:132)
lock address : netbsd:module_hook
type : sleep/adaptive
initialized : netbsd:module_hook_init+0x1c
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffffffff86741280 last held: 000000000000000000
last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

[Locks tracked through CPUs]

******* Locks held on cpu0:

* Lock 0 (initialized at netbsd:kprintf_init+0x72 sys/kern/subr_prf.c:157)
lock address : netbsd:kprintf_mtx
type : spin
initialized : netbsd:kprintf_init+0x72
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffff82a86a8c28c0 last held: 0xffff82a86a8c28c0
last locked* : netbsd:kprintf_lock+0x50
unlocked : netbsd:kprintf_unlock+0x70
owner field : 0x0000000000000800 wait/spin: 0/1

PAGE FLAG PQ UOBJECT UANON
0xffff840000007180 0045 00000000 0x0 0x0
0xffff840000007200 0045 00000000 0x0 0x0
0xffff840000007280 0045 00000000 0x0 0x0
0xffff840000007300 0045 00000000 0x0 0x0
0xffff840000007380 0045 00000000 0x0 0x0
0xffff840000007400 0045 00000000 0x0 0x0
0xffff840000007480 0045 00000000 0x0 0x0
0xffff840000007500 0045 00000000 0x0 0x0
0xffff840000007580 0045 00000000 0x0 0x0
0xffff840000007600 0045 00000000 0x0 0x0
0xffff840000007680 0045 00000000 0x0 0x0
0xffff840000007700 0041 00000000 0x0 0x0
0xffff840000007780 0041 00000000 0x0 0x0
0xffff840000007800 0041 00000000 0x0 0x0
0xffff840000007880 0041 00000000 0x0 0x0
0xffff840000007900 0045 00000000 0x0 0x0
0xffff840000007980 0041 00000000 0x0 0x0
0xffff840000007a00 0041 00000000 0x0 0x0
0xffff840000007a80 0041 00000000 0x0 0x0
0xffff840000007b00 0041 00000000 0x0 0x0
0xffff840000007b80 0041 00000000 0x0 0x0
0xffff840000007c00 0041 00000000 0x0 0x0
0xffff840000007c80 0041 00000000 0x0 0x0
0xffff840000007d00 0041 00000000 0x0 0x0
0xffff840000007d80 0041 00000000 0x0 0x0
0xffff840000007e00 0041 00000000 0x0 0x0
0xffff840000007e80 0041 00000000 0x0 0x0
0xffff840000007f00 0041 00000000 0x0 0x0
0xffff840000007f80 0041 00000000 0x0 0x0
0xffff840000008000 0041 00000000 0x0 0x0
0xffff840000008080 0041 00000000 0x0 0x0
0xffff840000008100 0041 00000000 0x0 0x0
0xffff840000008180 0041 00000000 0x0 0x0
0xffff840000008200 0041 00000000 0x0 0x0
0xffff840000008280 0041 00000000 0x0 0x0
0xffff840000008300 0041 00000000 0x0 0x0
0xffff840000008380 0041 00000000 0x0 0x0
0xffff840000008400 0041 00000000 0x0 0x0
0xffff840000008480 0041 00000000 0x0 0x0
0xffff840000008500 0041 00000000 0x0 0x0
0xffff840000008580 0041 00000000 0x0 0x0
0xffff840000008600 0045 00000000 0x0 0x0
0xffff840000008680 0041 00000000 0x0 0x0
0xffff840000008700 0041 00000000 0x0 0x0
0xffff840000008780 0041 00000000 0x0 0x0
0xffff840000008800 0045 00000000 0x0 0x0
0xffff840000008880 0041 00000000 0x0 0x0
0xffff840000008900 0041 00000000 0x0 0x0
0xffff840000008980 0041 00000000 0x0 0x0
0xffff840000008a00 0041 00000000 0x0 0x0
0xffff840000008a80 0041 00000000 0x0 0x0
0xffff840000008b00 0041 00000000 0x0 0x0
0xffff840000008b80 0041 00000000 0x0 0x0
0xffff840000008c00 0041 00000000 0x0 0x0
0xffff840000008c80 0041 00000000 0x0 0x0
0xffff840000008d00 0041 00000000 0x0 0x0
0xffff840000008d80 0041 00000000 0x0 0x0
0xffff840000008e00 0041 00000000 0x0 0x0
0xffff840000008e80 0041 00000000 0x0 0x0
0xffff840000008f00 0041 00000000 0x0 0x0
0xffff840000008f80 0041 00000000 0x0 0x0
0xffff840000009000 0041 00000000 0x0 0x0
0xffff840000009080 0045 00000000 0x0 0x0
0xffff840000009100 0041 00000000 0x0 0x0
0xffff840000009180 0041 00000000 0x0 0x0
0xffff840000009200 0041 00000000 0x0 0x0
0xffff840000009280 0041 00000000 0x0 0x0
0xffff840000009300 0041 00000000 0x0 0x0
0xffff840000009380 0041 00000000 0x0 0x0
0xffff840000009400 0041 00000000 0x0 0x0
0xffff840000009480 0041 00000000 0x0 0x0
0xffff840000009500 0041 00000000 0x0 0x0
0xffff840000009580 0041 00000000 0x0 0x0
0xffff840000009600 0041 00000000 0x0 0x0
0xffff840000009680 0041 00000000 0x0 0x0
0xffff840000009700 0041 00000000 0x0 0x0
0xffff840000009780 0041 00000000 0x0 0x0
0xffff840000009800 0041 00000000 0x0 0x0
0xffff840000009880 0041 00000000 0x0 0x0
0xffff840000009900 0041 00000000 0x0 0x0
0xffff840000009980 0041 00000000 0x0 0x0
0xffff840000009a00 0041 00000000 0x0 0x0
0xffff840000009a80 0041 00000000 0x0 0x0
0xffff840000009b00 0041 00000000 0x0 0x0
0xffff840000009b80 0041 00000000 0x0 0x0
0xffff840000009c00 0041 00000000 0x0 0x0
0xffff840000009c80 0041 00000000 0x0 0x0
0xffff840000009d00 0041 00000000 0x0 0x0
0xffff840000009d80 0041 00000000 0x0 0x0
0xffff840000009e00 0041 00000000 0x0 0x0
0xffff840000009e80 0045 00000000 0x0 0x0
0xffff840000009f00 0041 00000000 0x0 0x0
0xffff840000009f80 0041 00000000 0x0 0x0
0xffff84000000a000 0041 00000000 0x0 0x0
0xffff84000000a080 0041 00000000 0x0 0x0
0xffff84000000a100 0041 00000000 0x0 0x0
0xffff84000000a180 0041 00000000 0x0 0x0
0xffff84000000a200 0041 00000000 0x0 0x0
0xffff84000000a280 0041 00000000 0x0 0x0
0xffff84000000a300 0041 00000000 0x0 0x0
0xffff84000000a380 0041 00000000 0x0 0x0
0xffff84000000a400 0041 00000000 0x0 0x0
0xffff84000000a480 0041 00000000 0x0 0x0
0xffff84000000a500 0041 00000000 0x0 0x0
0xffff84000000a580 0041 00000000 0x0 0x0
0xffff84000000a600 0041 00000000 0x0 0x0
0xffff84000000a680 0041 00000000 0x0 0x0
0xffff84000000a700 0041 00000000 0x0 0x0
0xffff84000000a780 0041 00000000 0x0 0x0
0xffff84000000a800 0041 00000000 0x0 0x0
0xffff84000000a880 0041 00000000 0x0 0x0
0xffff84000000a900 0041 00000000 0x0 0x0
0xffff84000000a980 0041 00000000 0x0 0x0
0xffff84000000aa00 0041 00000000 0x0 0x0
0xffff84000000aa80 0041 00000000 0x0 0x0
0xffff84000000ab00 0041 00000000 0x0 0x0
0xffff84000000ab80 0041 00000000 0x0 0x0
0xffff84000000ac00 0041 00000000 0x0 0x0
0xffff84000000ac80 0041 00000000 0x0 0x0
0xffff84000000ad00 0041 00000000 0x0 0x0
0xffff84000000ad80 0041 00000000 0x0 0x0
0xffff84000000ae00 0041 00000000 0x0 0x0
0xffff84000000ae80 0041 00000000 0x0 0x0
0xffff84000000af00 0045 00000000 0x0 0x0
0xffff84000000af80 0045 00000000 0x0 0x0
0xffff84000000b000 0041 00000000 0x0 0x0
0xffff84000000b080 0041 00000000 0x0 0x0
0xffff84000000b100 0041 00000000 0x0 0x0
0xffff84000000b180 0045 00000000 0x0 0x0
0xffff84000000b200 0041 00000000 0x0 0x0
0xffff84000000b280 0045 00000000 0x0 0x0
0xffff84000000b300 0045 00000000 0x0 0x0
0xffff84000000b380 0045 00000000 0x0 0x0
0xffff84000000b400 0041 00000000 0x0 0x0
0xffff84000000b480 0041 00000000 0x0 0x0
0xffff84000000b500 0045 00000000 0x0 0x0
0xffff84000000b580 0045 00000000 0x0 0x0
0xffff84000000b600 0045 00000000 0x0 0x0
0xffff84000000b680 0045 00000000 0x0 0x0
0xffff84000000b700 0045 00000000 0x0 0x0
0xffff84000000b780 0045 00000000 0x0 0x0
0xffff84000000b800 0045 00000000 0x0 0x0
0xffff84000000b880 0041 00000000 0x0 0x0
0xffff84000000b900 0045 00000000 0x0 0x0
0xffff84000000b980 0045 00000000 0x0 0x0
0xffff84000000ba00 0045 00000000 0x0 0x0
0xffff84000000ba80 0045 00000000 0x0 0x0
0xffff84000000bb00 0045 00000000 0x0 0x0
0xffff84000000bb80 0045 00000000 0x0 0x0
0xffff84000000bc00 0045 00000000 0x0 0x0
0xffff84000000bc80 0041 00000000 0x0 0x0
0xffff84000000bd00 0045 00000000 0x0 0x0
0xffff84000000bd80 0045 00000000 0x0 0x0
0xffff84000000be00 0045 00000000 0x0 0x0
0xffff84000000be80 0045 00000000 0x0 0x0
0xffff84000000bf00 0045 00000000 0x0 0x0
0xffff84000000bf80 0045 00000000 0x0 0x0
0xffff84000000c000 0045 00000000 0x0 0x0
0xffff84000000c080 0045 00000000 0x0 0x0
0xffff84000000c100 0045 00000000 0x0 0x0
0xffff84000000c180 0045 00000000 0x0 0x0
0xffff84000000c200 0045 00000000 0x0 0x0
0xffff84000000c280 0045 00000000 0x0 0x0
0xffff84000000c300 0045 00000000 0x0 0x0
0xffff84000000c380 0045 00000000 0x0 0x0
0xffff84000000c400 0045 00000000 0x0 0x0
0xffff84000000c480 0045 00000000 0x0 0x0
0xffff84000000c500 0045 00000000 0x0 0x0
0xffff84000000c580 0045 00000000 0x0 0x0
0xffff84000000c600 0045 00000000 0x0 0x0
0xffff84000000c680 0045 00000000 0x0 0x0
0xffff84000000c700 0041 00000000 0x0 0x0
0xffff84000000c780 0041 00000000 0x0 0x0
0xffff84000000c800 0045 00000000 0x0 0x0
0xffff84000000c880 0045 00000000 0x0 0x0
0xffff84000000c900 0045 00000000 0x0 0x0
0xffff84000000c980 0045 00000000 0x0 0x0
0xffff84000000ca00 0045 00000000 0x0 0x0
0xffff84000000ca80 0045 00000000 0x0 0x0
0xffff84000000cb00 0041 00000000 0x0 0x0
0xffff84000000cb80 0041 00000000 0x0 0x0
0xffff84000000cc00 0045 00000000 0x0 0x0
0xffff84000000cc80 0045 00000000 0x0 0x0
0xffff84000000cd00 0045 00000000 0x0 0x0
0xffff84000000cd80 0041 00000000 0x0 0x0
0xffff84000000ce00 0045 00000000 0x0 0x0
0xffff84000000ce80 0041 00000000 0x0 0x0
0xffff84000000cf00 0041 00000000 0x0 0x0
0xffff84000000cf80 0041 00000000 0x0 0x0
0xffff84000000d000 0041 00000000 0x0 0x0
0xffff84000000d080 0045 00000000 0x0 0x0
0xffff84000000d100 0041 00000000 0x0 0x0
0xffff84000000d180 0041 00000000 0x0 0x0
0xffff84000000d200 0041 00000000 0x0 0x0
0xffff84000000d280 0041 00000000 0x0 0x0
0xffff84000000d300 0045 00000000 0x0 0x0
0xffff84000000d380 0041 00000000 0x0 0x0
0xffff84000000d400 0041 00000000 0x0 0x0
0xffff84000000d480 0045 00000000 0x0 0x0
0xffff84000000d500 0041 00000000 0x0 0x0
0xffff84000000d580 0041 00000000 0x0 0x0
0xffff84000000d600 0041 00000000 0x0 0x0
0xffff84000000d680 0041 00000000 0x0 0x0
0xffff84000000d700 0041 00000000 0x0 0x0
0xffff84000000d780 0045 00000000 0x0 0x0
0xffff84000000d800 0041 00000000 0x0 0x0
0xffff84000000d880 0041 00000000 0x0 0x0
0xffff84000000d900 0041 00000000 0x0 0x0
0xffff84000000d980 0041 00000000 0x0 0x0
0xffff84000000da00 0041 00000000 0x0 0x0
0xffff84000000da80 0045 00000000 0x0 0x0
0xffff84000000db00 0045 00000000 0x0 0x0
0xffff84000000db80 0045 00000000 0x0 0x0
0xffff84000000dc00 0041 00000000 0x0 0x0
0xffff84000000dc80 0041 00000000 0x0 0x0
0xffff84000000dd00 0041 00000000 0x0 0x0
0xffff84000000dd80 0041 00000000 0x0 0x0
0xffff84000000de00 0041 00000000 0x0 0x0
0xffff84000000de80 0041 00000000 0x0 0x0
0xffff84000000df00 0045 00000000 0x0 0x0
0xffff84000000df80 0045 00000000 0x0 0x0
0xffff84000000e000 0045 00000000 0x0 0x0
0xffff84000000e080 0041 00000000 0x0 0x0
0xffff84000000e100 0041 00000000 0x0 0x0
0xffff84000000e180 0045 00000000 0x0 0x0
0xffff84000000e200 0041 00000000 0x0 0x0
0xffff84000000e280 0041 00000000 0x0 0x0
0xffff84000000e300 0045 00000000 0x0 0x0
0xffff84000000e380 0041 00000000 0x0 0x0
0xffff84000000e400 0045 00000000 0x0 0x0
0xffff84000000e480 0041 00000000 0x0 0x0
0xffff84000000e500 0045 00000000 0x0 0x0
0xffff84000000e580 0041 00000000 0x0 0x0
0xffff84000000e600 0045 00000000 0x0 0x0
0xffff84000000e680 0045 00000000 0x0 0x0
0xffff84000000e700 0041 00000000 0x0 0x0
0xffff84000000e780 0041 00000000 0x0 0x0
0xffff84000000e800 0045 00000000 0x0 0x0
0xffff84000000e880 0045 00000000 0x0 0x0
0xffff84000000e900 0041 00000000 0x0 0x0
0xffff84000000e980 0041 00000000 0x0 0x0
0xffff84000000ea00 0041 00000000 0x0 0x0
0xffff84000000ea80 0041 00000000 0x0 0x0
0xffff84000000eb00 0041 00000000 0x0 0x0
0xffff84000000eb80 0045 00000000 0x0 0x0
0xffff84000000ec00 0041 00000000 0x0 0x0
0xffff84000000ec80 0041 00000000 0x0 0x0
0xffff84000000ed00 0041 00000000 0x0 0x0
0xffff84000000ed80 0041 00000000 0x0 0x0
0xffff84000000ee00 0041 00000000 0x0 0x0
0xffff84000000ee80 0045 00000000 0x0 0x0
0xffff84000000ef00 0041 00000000 0x0 0x0
0xffff84000000ef80 0041 00000000 0x0 0x0
0xffff84000000f000 0041 00000000 0x0 0x0
0xffff84000000f080 0045 00000000 0x0 0x0
0xffff84000000f100 0041 00000000 0x0 0x0
0xffff84000000f180 0041 00000000 0x0 0x0
0xffff84000000f200 0041 00000000 0x0 0x0
0xffff84000000f280 0041 00000000 0x0 0x0
0xffff84000000f300 0041 00000000 0x0 0x0
0xffff84000000f380 0041 00000000 0x0 0x0
0xffff84000000f400 0045 00000000 0x0 0x0
0xffff84000000f480 0041 00000000 0x0 0x0
0xffff84000000f500 0041 00000000 0x0 0x0
0xffff84000000f580 0041 00000000 0x0 0x0
0xffff84000000f600 0041 00000000 0x0 0x0
0xffff84000000f680 0045 00000000 0x0 0x0
0xffff84000000f700 0041 00000000 0x0 0x0
0xffff84000000f780 0041 00000000 0x0 0x0
0xffff84000000f800 0041 00000000 0x0 0x0
0xffff84000000f880 0045 00000000 0x0 0x0
0xffff84000000f900 0041 00000000 0x0 0x0
0xffff84000000f980 0045 00000000 0x0 0x0
0xffff84000000fa00 0041 00000000 0x0 0x0
0xffff84000000fa80 0041 00000000 0x0 0x0
0xffff84000000fb00 0041 00000000 0x0 0x0
0xffff84000000fb80 0041 00000000 0x0 0x0
0xffff84000000fc00 0045 00000000 0x0 0x0
0xffff84000000fc80 0041 00000000 0x0 0x0
0xffff84000000fd00 0045 00000000 0x0 0x0
0xffff84000000fd80 0041 00000000 0x0 0x0
0xffff84000000fe00 0041 00000000 0x0 0x0
0xffff84000000fe80 0041 00000000 0x0 0x0
0xffff84000000ff00 0041 00000000 0x0 0x0
0xffff84000000ff80 0041 00000000 0x0 0x0
0xffff840000010000 0041 00000000 0x0 0x0
0xffff840000010080 0041 00000000 0x0 0x0
0xffff840000010100 0041 00000000 0x0 0x0
0xffff840000010180 0045 00000000 0x0 0x0
0xffff840000010200 0045 00000000 0x0 0x0
0xffff840000010280 0041 00000000 0x0 0x0
0xffff840000010300 0041 00000000 0x0 0x0
0xffff840000010380 0041 00000000 0x0 0x0
0xffff840000010400 0041 00000000 0x0 0x0
0xffff840000010480 0045 00000000 0x0 0x0
0xffff840000010500 0045 00000000 0x0 0x0
0xffff840000010580 0041 00000000 0x0 0x0
0xffff840000010600 0041 00000000 0x0 0x0
0xffff840000010680 0041 00000000 0x0 0x0
0xffff840000010700 0045 00000000 0x0 0x0
0xffff840000010780 0041 00000000 0x0 0x0
0xffff840000010800 0041 00000000 0x0 0x0
0xffff840000010880 0041 00000000 0x0 0x0
0xffff840000010900 0041 00000000 0x0 0x0
0xffff840000010980 0045 00000000 0x0 0x0
0xffff840000010a00 0045 00000000 0x0 0x0
0xffff840000010a80 0041 00000000 0x0 0x0
0xffff840000010b00 0041 00000000 0x0 0x0
0xffff840000010b80 0041 00000000 0x0 0x0
0xffff840000010c00 0041 00000000 0x0 0x0
0xffff840000010c80 0045 00000000 0x0 0x0
0xffff840000010d00 0041 00000000 0x0 0x0
0xffff840000010d80 0041 00000000 0x0 0x0
0xffff840000010e00 0041 00000000 0x0 0x0
0xffff840000010e80 0045 00000000 0x0 0x0
0xffff840000010f00 0041 00000000 0x0 0x0
0xffff840000010f80 0041 00000000 0x0 0x0
0xffff840000011000 0041 00000000 0x0 0x0
0xffff840000011080 0041 00000000 0x0 0x0
0xffff840000011100 0041 00000000 0x0 0x0
0xffff840000011180 0041 00000000 0x0 0x0
0xffff840000011200 0045 00000000 0x0 0x0
0xffff840000011280 0041 00000000 0x0 0x0
0xffff840000011300 0041 00000000 0x0 0x0
0xffff840000011380 0041 00000000 0x0 0x0
0xffff840000011400 0041 00000000 0x0 0x0
0xffff840000011480 0041 00000000 0x0 0x0
0xffff840000011500 0045 00000000 0x0 0x0
0xffff840000011580 0041 00000000 0x0 0x0
0xffff840000011600 0041 00000000 0x0 0x0
0xffff840000011680 0041 00000000 0x0 0x0
0xffff840000011700 0041 00000000 0x0 0x0
0xffff840000011780 0045 00000000 0x0 0x0
0xffff840000011800 0041 00000000 0x0 0x0
0xffff840000011880 0041 00000000 0x0 0x0
0xffff840000011900 0041 00000000 0x0 0x0
0xffff840000011980 0041 00000000 0x0 0x0
0xffff840000011a00 0041 00000000 0x0 0x0
0xffff840000011a80 0041 00000000 0x0 0x0
0xffff840000011b00 0045 00000000 0x0 0x0
0xffff840000011b80 0041 00000000 0x0 0x0
0xffff840000011c00 0041 00000000 0x0 0x0
0xffff840000011c80 0041 00000000 0x0 0x0
0xffff840000011d00 0041 00000000 0x0 0x0
0xffff840000011d80 0041 00000000 0x0 0x0
0xffff840000011e00 0045 00000000 0x0 0x0
0xffff840000011e80 0041 00000000 0x0 0x0
0xffff840000011f00 0041 00000000 0x0 0x0
0xffff840000011f80 0041 00000000 0x0 0x0
0xffff840000012000 0041 00000000 0x0 0x0
0xffff840000012080 0041 00000000 0x0 0x0
0xffff840000012100 0045 00000000 0x0 0x0
0xffff840000012180 0045 00000000 0x0 0x0
0xffff840000012200 0041 00000000 0x0 0x0
0xffff840000012280 0045 00000000 0x0 0x0
0xffff840000012300 0041 00000000 0x0 0x0
0xffff840000012380 0041 00000000 0x0 0x0
0xffff840000012400 0041 00000000 0x0 0x0
0xffff840000012480 0041 00000000 0x0 0x0
0xffff840000012500 0041 00000000 0x0 0x0
0xffff840000012580 0041 00000000 0x0 0x0
0xffff840000012600 0041 00000000 0x0 0x0
0xffff840000012680 0041 00000000 0x0 0x0
0xffff840000012700 0041 00000000 0x0 0x0
0xffff840000012780 0041 00000000 0x0 0x0
0xffff840000012800 0041 00000000 0x0 0x0
0xffff840000012880 0045 00000000 0x0 0x0
0xffff840000012900 0001 00000000 0x0 0x0
0xffff840000012980 0001 00000000 0x0 0x0
0xffff840000012a00 0001 00000000 0x0 0x0
0xffff840000012a80 0001 00000000 0x0 0x0
0xffff840000012b00 0001 00000000 0x0 0x0
0xffff840000012b80 0001 00000000 0x0 0x0
0xffff840000012c00 0001 00000000 0x0 0x0
0xffff840000012c80 0001 00000000 0x0 0x0
0xffff840000012d00 0001 00000000 0x0 0x0
0xffff840000012d80 0001 00000000 0x0 0x0
0xffff840000012e00 0001 00000000 0x0 0x0
0xffff840000012e80 0001 00000000 0x0 0x0
0xffff840000012f00 0001 00000000 0x0 0x0
0xffff840000012f80 0001 00000000 0x0 0x0
0xffff840000013000 0001 00000000 0x0 0x0
0xffff840000013080 0001 00000000 0x0 0x0
0xffff840000013100 0001 00000000 0x0 0x0
0xffff840000013180 0001 00000000 0x0 0x0
0xffff840000013200 0001 00000000 0x0 0x0
0xffff840000013280 0001 00000000 0x0 0x0
0xffff840000013300 0001 00000000 0x0 0x0
0xffff840000013380 0001 00000000 0x0 0x0
0xffff840000013400 0001 00000000 0x0 0x0
0xffff840000013480 0001 00000000 0x0 0x0
0xffff840000013500 0001 00000000 0x0 0x0
0xffff840000013580 0001 00000000 0x0 0x0
0xffff840000013600 0001 00000000 0x0 0x0
0xffff840000013680 0001 00000000 0x0 0x0
0xffff840000013700 0001 00000000 0x0 0x0
0xffff840000013780 0001 00000000 0x0 0x0
0xffff840000013800 0001 00000000 0x0 0x0
0xffff840000013880 0001 00000000 0x0 0x0
0xffff840000013900 0001 00000000 0x0 0x0
0xffff840000013980 0001 00000000 0x0 0x0
0xffff840000013a00 0001 00000000 0x0 0x0
0xffff840000013a80 0001 00000000 0x0 0x0
0xffff840000013b00 0001 00000000 0x0 0x0
0xffff840000013b80 0001 00000000 0x0 0x0
0xffff840000013c00 0001 00000000 0x0 0x0
0xffff840000013c80 0001 00000000 0x0 0x0
0xffff840000013d00 0001 00000000 0x0 0x0
0xffff840000013d80 0001 00000000 0x0 0x0
0xffff840000013e00 0001 00000000 0x0 0x0
0xffff840000013e80 0001 00000000 0x0 0x0
0xffff840000013f00 0001 00000000 0x0 0x0
0xffff840000013f80 0001 00000000 0x0 0x0
0xffff840000014000 0001 00000000 0x0 0x0
0xffff840000014080 0001 00000000 0x0 0x0
0xffff840000014100 0001 00000000 0x0 0x0
0xffff840000014180 0001 00000000 0x0 0x0
0xffff840000014200 0001 00000000 0x0 0x0
0xffff840000014280 0001 00000000 0x0 0x0
0xffff840000014300 0001 00000000 0x0 0x0
0xffff840000014380 0001 00000000 0x0 0x0
0xffff840000014400 0041 00000000 0x0 0x0
0xffff840000014480 0041 00000000 0x0 0x0
0xffff840000014500 0041 00000000 0x0 0x0
0xffff840000014580 0041 00000000 0x0 0x0
0xffff840000014600 0041 00000000 0x0 0x0
0xffff840000014680 0041 00000000 0x0 0x0
0xffff840000014700 0041 00000000 0x0 0x0
0xffff840000014780 0041 00000000 0x0 0x0
0xffff840000014800 0041 00000000 0x0 0x0
0xffff840000014880 0041 00000000 0x0 0x0
0xffff840000014900 0041 00000000 0x0 0x0
0xffff840000014980 0041 00000000 0x0 0x0
0xffff840000014a00 0041 00000000 0x0 0x0
0xffff840000014a80 0041 00000000 0x0 0x0
0xffff840000014b00 0041 00000000 0x0 0x0
0xffff840000014b80 0041 00000000 0x0 0x0
0xffff840000014c00 0041 00000000 0x0 0x0
0xffff840000014c80 0041 00000000 0x0 0x0
0xffff840000014d00 0041 00000000 0x0 0x0
0xffff840000014d80 0041 00000000 0x0 0x0
0xffff840000014e00 0041 00000000 0x0 0x0
0xffff840000014e80 0041 00000000 0x0 0x0
0xffff840000014f00 0041 00000000 0x0 0x0
0xffff840000014f80 0041 00000000 0x0 0x0
0xffff840000015000 0041 00000000 0x0 0x0
0xffff840000015080 0041 00000000 0x0 0x0
0xffff840000015100 0041 00000000 0x0 0x0
0xffff840000015180 0041 00000000 0x0 0x0
0xffff840000015200 0041 00000000 0x0 0x0
0xffff840000015280 0041 00000000 0x0 0x0
0xffff840000015300 0041 00000000 0x0 0x0
0xffff840000015380 0041 00000000 0x0 0x0
0xffff840000015400 0041 00000000 0x0 0x0
0xffff840000015480 0041 00000000 0x0 0x0
0xffff840000015500 0041 00000000 0x0 0x0
0xffff840000015580 0041 00000000 0x0 0x0
0xffff840000015600 0041 00000000 0x0 0x0
0xffff840000015680 0041 00000000 0x0 0x0
0xffff840000015700 0041 00000000 0x0 0x0
0xffff840000015780 0041 00000000 0x0 0x0
0xffff840000015800 0041 00000000 0x0 0x0
0xffff840000015880 0041 00000000 0x0 0x0
0xffff840000015900 0001 00000000 0x0 0x0
0xffff840000015980 0001 00000000 0x0 0x0
0xffff840000015a00 0001 00000000 0x0 0x0
0xffff840000015a80 0001 00000000 0x0 0x0
0xffff840000015b00 0001 00000000 0x0 0x0
0xffff840000015b80 0001 00000000 0x0 0x0
0xffff840000015c00 0001 00000000 0x0 0x0
0xffff840000015c80 0001 00000000 0x0 0x0
0xffff840000015d00 0001 00000000 0x0 0x0
0xffff840000015d80 0001 00000000 0x0 0x0
0xffff840000015e00 0001 00000000 0x0 0x0
0xffff840000015e80 0001 00000000 0x0 0x0
0xffff840000015f00 0001 00000000 0x0 0x0
0xffff840000015f80 0001 00000000 0x0 0x0
0xffff840000016000 0001 00000000 0x0 0x0
0xffff840000016080 0001 00000000 0x0 0x0
0xffff840000016100 0001 00000000 0x0 0x0
0xffff840000016180 0001 00000000 0x0 0x0
0xffff840000016200 0001 00000000 0x0 0x0
0xffff840000016280 0001 00000000 0x0 0x0
0xffff840000016300 0001 00000000 0x0 0x0
0xffff840000016380 0001 00000000 0x0 0x0
0xffff840000016400 0001 00000000 0x0 0x0
0xffff840000016480 0001 00000000 0x0 0x0
0xffff840000016500 0001 00000000 0x0 0x0
0xffff840000016580 0001 00000000 0x0 0x0
0xffff840000016600 0001 00000000 0x0 0x0
0xffff840000016680 0001 00000000 0x0 0x0
0xffff840000016700 0001 00000000 0x0 0x0
0xffff840000016780 0001 00000000 0x0 0x0
0xffff840000016800 0001 00000000 0x0 0x0
0xffff840000016880 0001 00000000 0x0 0x0
0xffff840000016900 0001 00000000 0x0 0x0
0xffff840000016980 0001 00000000 0x0 0x0
0xffff840000016a00 0001 00000000 0x0 0x0
0xffff840000016a80 0001 00000000 0x0 0x0
0xffff840000016b00 0001 00000000 0x0 0x0
0xffff840000016b80 0001 00000000 0x0 0x0
0xffff840000016c00 0001 00000000 0x0 0x0
0xffff840000016c80 0001 00000000 0x0 0x0
0xffff840000016d00 0001 00000000 0x0 0x0
0xffff840000016d80 0001 00000000 0x0 0x0
0xffff840000016e00 0001 00000000 0x0 0x0
0xffff840000016e80 0001 00000000 0x0 0x0
0xffff840000016f00 0001 00000000 0x0 0x0
0xffff840000016f80 0001 00000000 0x0 0x0
0xffff840000017000 0001 00000000 0x0 0x0
0xffff840000017080 0001 00000000 0x0 0x0
0xffff840000017100 0001 00000000 0x0 0x0
0xffff840000017180 0001 00000000 0x0 0x0
0xffff840000017200 0001 00000000 0x0 0x0
0xffff840000017280 0001 00000000 0x0 0x0
0xffff840000017300 0001 00000000 0x0 0x0
0xffff840000017380 0001 00000000 0x0 0x0
0xffff840000017400 0041 00000000 0x0 0x0
0xffff840000017480 0041 00000000 0x0 0x0
0xffff840000017500 0041 00000000 0x0 0x0
0xffff840000017580 0041 00000000 0x0 0x0
0xffff840000017600 0041 00000000 0x0 0x0
0xffff840000017680 0041 00000000 0x0 0x0
0xffff840000017700 0041 00000000 0x0 0x0
0xffff840000017780 0041 00000000 0x0 0x0
0xffff840000017800 0041 00000000 0x0 0x0
0xffff840000017880 0041 00000000 0x0 0x0
0xffff840000017900 0041 00000000 0x0 0x0
0xffff840000017980 0041 00000000 0x0 0x0
0xffff840000017a00 0041 00000000 0x0 0x0
0xffff840000017a80 0041 00000000 0x0 0x0
0xffff840000017b00 0041 00000000 0x0 0x0
0xffff840000017b80 0041 00000000 0x0 0x0
0xffff840000017c00 0041 00000000 0x0 0x0
0xffff840000017c80 0041 00000000 0x0 0x0
0xffff840000017d00 0041 00000000 0x0 0x0
0xffff840000017d80 0041 00000000 0x0 0x0
0xffff840000017e00 0041 00000000 0x0 0x0
0xffff840000017e80 0041 00000000 0x0 0x0
0xffff840000017f00 0041 00000000 0x0 0x0
0xffff840000017f80 0041 00000000 0x0 0x0
0xffff840000018000 0041 00000000 0x0 0x0
0xffff840000018080 0041 00000000 0x0 0x0
0xffff840000018100 0041 00000000 0x0 0x0
0xffff840000018180 0041 00000000 0x0 0x0
0xffff840000018200 0041 00000000 0x0 0x0
0xffff840000018280 0041 00000000 0x0 0x0
0xffff840000018300 0041 00000000 0x0 0x0
0xffff840000018380 0041 00000000 0x0 0x0
0xffff840000018400 0041 00000000 0x0 0x0
0xffff840000018480 0041 00000000 0x0 0x0
0xffff840000018500 0041 00000000 0x0 0x0
0xffff840000018580 0041 00000000 0x0 0x0
0xffff840000018600 0041 00000000 0x0 0x0
0xffff840000018680 0041 00000000 0x0 0x0
0xffff840000018700 0041 00000000 0x0 0x0
0xffff840000018780 0041 00000000 0x0 0x0
0xffff840000018800 0041 00000000 0x0 0x0
0xffff840000018880 0041 00000000 0x0 0x0
0xffff840000018900 0041 00000000 0x0 0x0
0xffff840000018980 0041 00000000 0x0 0x0
0xffff840000018a00 0041 00000000 0x0 0x0
0xffff840000018a80 0041 00000000 0x0 0x0
0xffff840000018b00 0001 00000000 0x0 0x0
0xffff840000018b80 0001 00000000 0x0 0x0
0xffff840000018c00 0001 00000000 0x0 0x0
0xffff840000018c80 0001 00000000 0x0 0x0
0xffff840000018d00 0001 00000000 0x0 0x0
0xffff840000018d80 0001 00000000 0x0 0x0
0xffff840000018e00 0001 00000000 0x0 0x0
0xffff840000018e80 0001 00000000 0x0 0x0
0xffff840000018f00 0001 00000000 0x0 0x0
0xffff840000018f80 0001 00000000 0x0 0x0
0xffff840000019000 0001 00000000 0x0 0x0
0xffff840000019080 0001 00000000 0x0 0x0
0xffff840000019100 0001 00000000 0x0 0x0
0xffff840000019180 0001 00000000 0x0 0x0
0xffff840000019200 0001 00000000 0x0 0x0
0xffff840000019280 0001 00000000 0x0 0x0
0xffff840000019300 0001 00000000 0x0 0x0
0xffff840000019380 0001 00000000 0x0 0x0
0xffff840000019400 0001 00000000 0x0 0x0
0xffff840000019480 0001 00000000 0x0 0x0
0xffff840000019500 0001 00000000 0x0 0x0
0xffff840000019580 0001 00000000 0x0 0x0
0xffff840000019600 0001 00000000 0x0 0x0
0xffff840000019680 0001 00000000 0x0 0x0
0xffff840000019700 0001 00000000 0x0 0x0
0xffff840000019780 0001 00000000 0x0 0x0
0xffff840000019800 0001 00000000 0x0 0x0
0xffff840000019880 0001 00000000 0x0 0x0
0xffff840000019900 0001 00000000 0x0 0x0
0xffff840000019980 0001 00000000 0x0 0x0
0xffff840000019a00 0001 00000000 0x0 0x0
0xffff840000019a80 0001 00000000 0x0 0x0
0xffff840000019b00 0001 00000000 0x0 0x0
0xffff840000019b80 0001 00000000 0x0 0x0
0xffff840000019c00 0001 00000000 0x0 0x0
0xffff840000019c80 0001 00000000 0x0 0x0
0xffff840000019d00 0001 00000000 0x0 0x0
0xffff840000019d80 0001 00000000 0x0 0x0
0xffff840000019e00 0001 00000000 0x0 0x0
0xffff840000019e80 0001 00000000 0x0 0x0
0xffff840000019f00 0001 00000000 0x0 0x0
0xffff840000019f80 0001 00000000 0x0 0x0
0xffff84000001a000 0001 00000000 0x0 0x0
0xffff84000001a080 0001 00000000 0x0 0x0
0xffff84000001a100 0001 00000000 0x0 0x0
0xffff84000001a180 0001 00000000 0x0 0x0
0xffff84000001a200 0001 00000000 0x0 0x0
0xffff84000001a280 0001 00000000 0x0 0x0
0xffff84000001a300 0001 00000000 0x0 0x0
0xffff84000001a380 0001 00000000 0x0 0x0
0xffff84000001a400 0001 00000000 0x0 0x0
0xffff84000001a480 0001 00000000 0x0 0x0
0xffff84000001a500 0001 00000000 0x0 0x0
0xffff84000001a580 0001 00000000 0x0 0x0
0xffff84000001a600 0041 00000000 0x0 0x0
0xffff84000001a680 0041 00000000 0x0 0x0
0xffff84000001a700 0041 00000000 0x0 0x0
0xffff84000001a780 0041 00000000 0x0 0x0
0xffff84000001a800 0041 00000000 0x0 0x0
0xffff84000001a880 0041 00000000 0x0 0x0
0xffff84000001a900 0041 00000000 0x0 0x0
0xffff84000001a980 0041 00000000 0x0 0x0
0xffff84000001aa00 0041 00000000 0x0 0x0
0xffff84000001aa80 0041 00000000 0x0 0x0
0xffff84000001ab00 0041 00000000 0x0 0x0
0xffff84000001ab80 0041 00000000 0x0 0x0
0xffff84000001ac00 0041 00000000 0x0 0x0
0xffff84000001ac80 0041 00000000 0x0 0x0
0xffff84000001ad00 0041 00000000 0x0 0x0
0xffff84000001ad80 0041 00000000 0x0 0x0
0xffff84000001ae00 0041 00000000 0x0 0x0
0xffff84000001ae80 0041 00000000 0x0 0x0
0xffff84000001af00 0041 00000000 0x0 0x0
0xffff84000001af80 0041 00000000 0x0 0x0
0xffff84000001b000 0041 00000000 0x0 0x0
0xffff84000001b080 0041 00000000 0x0 0x0
0xffff84000001b100 0041 00000000 0x0 0x0
0xffff84000001b180 0041 00000000 0x0 0x0
0xffff84000001b200 0041 00000000 0x0 0x0
0xffff84000001b28

---
This report is generated by a bot. It may contain errors.
See https://goo.gl/tpsmEJ for more information about syzbot.
syzbot engineers can be reached at syzk...@googlegroups.com.

syzbot will keep track of this issue. See:
https://goo.gl/tpsmEJ#status for how to communicate with syzbot.

syzbot

unread,

Sep 20, 2022, 5:54:39 PM9/20/22

to syzkaller-...@googlegroups.com

syzbot has found a reproducer for the following issue on:

HEAD commit: 56ea27f598d5 Typo in comment. No binary changes.
git tree: netbsd

console output: https://syzkaller.appspot.com/x/log.txt?x=12e82b80880000

kernel config: https://syzkaller.appspot.com/x/.config?x=1420f906d33d9f1f
dashboard link: https://syzkaller.appspot.com/bug?extid=ce8391eb74a16e1967ab
compiler: g++ (Debian 10.2.1-6) 10.2.1 20210110

syz repro: https://syzkaller.appspot.com/x/repro.syz?x=12211c18880000
C reproducer: https://syzkaller.appspot.com/x/repro.c?x=1107bb80880000

Downloadable assets:
disk image: https://storage.googleapis.com/syzbot-assets/dcb6d558b8bf/disk-56ea27f5.raw.xz
netbsd.gdb: https://storage.googleapis.com/syzbot-assets/7da7cd6b8b60/netbsd-56ea27f5.gdb.xz

IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+ce8391...@syzkaller.appspotmail.com

[ 52.6418671] panic: UBSan: Undefined Behavior in /syzkaller/managers/ci2-netbsd-kubsan/kernel/sys/ufs/ufs/ufs_quota1.c:495:20, index -1 is out of range for type 'vnode *[2]'

[ 52.6418671] cpu1: Begin traceback...
[ 52.6618568] vpanic() at netbsd:vpanic+0x2f2 sys/kern/subr_prf.c:293
[ 52.7318559] Report() at netbsd:Report+0x3b sys/../common/lib/libc/misc/ubsan.c:1352
[ 52.7918565] HandleOutOfBounds() at netbsd:HandleOutOfBounds+0x136 sys/../common/lib/libc/misc/ubsan.c:470
[ 52.8418559] quota1_handle_cmd_get() at netbsd:quota1_handle_cmd_get+0x3ac sys/ufs/ufs/ufs_quota1.c:495
[ 52.8918560] quota_handle_cmd() at netbsd:quota_handle_cmd+0x1535 quota_handle_cmd_get sys/ufs/ufs/ufs_quota.c:365 [inline]
[ 52.8918560] quota_handle_cmd() at netbsd:quota_handle_cmd+0x1535 sys/ufs/ufs/ufs_quota.c:193
[ 52.9418549] ufs_quotactl() at netbsd:ufs_quotactl+0x7e sys/ufs/ufs/ufs_vfsops.c:142
[ 52.9918542] VFS_QUOTACTL() at netbsd:VFS_QUOTACTL+0xa5 sys/kern/vfs_subr.c:1466
[ 53.0418547] vfs_quotactl_get() at netbsd:vfs_quotactl_get+0x36 sys/kern/vfs_quotactl.c:81
[ 53.0918530] compat_50_sys_quotactl() at netbsd:compat_50_sys_quotactl+0x2f7 sys/compat/common/compat_50_quota.c:110
[ 53.1418536] sys_syscall() at netbsd:sys_syscall+0x1e4 sy_call sys/sys/syscallvar.h:65 [inline]
[ 53.1418536] sys_syscall() at netbsd:sys_syscall+0x1e4 sys/kern/sys_syscall.c:90
[ 53.1918527] syscall() at netbsd:syscall+0x2da sy_call sys/sys/syscallvar.h:65 [inline]
[ 53.1918527] syscall() at netbsd:syscall+0x2da sy_invoke sys/sys/syscallvar.h:94 [inline]
[ 53.1918527] syscall() at netbsd:syscall+0x2da sys/arch/x86/x86/syscall.c:138
[ 53.2018516] --- syscall (number 148 via SYS_syscall) ---
[ 53.2218535] netbsd:syscall+0x2da:
[ 53.2218535] cpu1: End traceback...
[ 53.2318520] fatal breakpoint trap in supervisor mode
[ 53.2318520] trap type 1 code 0 rip 0xffffffff80235375 cs 0x8 rflags 0x246 cr2 0x6f8623e3ed30 ilevel 0 rsp 0xffff91024837b6d0
[ 53.2418511] curlwp 0xffffb2570462e180 pid 822.822 lowest kstack 0xffff9102483772c0
Stopped in pid 822.822 (syz-executor3195) at netbsd:breakpoint+0x5: leave

?
breakpoint() at netbsd:breakpoint+0x5
db_panic() at netbsd:db_panic+0xec sys/ddb/db_panic.c:69
vpanic() at netbsd:vpanic+0x2f2 sys/kern/subr_prf.c:293
Report() at netbsd:Report+0x3b sys/../common/lib/libc/misc/ubsan.c:1352
HandleOutOfBounds() at netbsd:HandleOutOfBounds+0x136 sys/../common/lib/libc/misc/ubsan.c:470
quota1_handle_cmd_get() at netbsd:quota1_handle_cmd_get+0x3ac sys/ufs/ufs/ufs_quota1.c:495
quota_handle_cmd() at netbsd:quota_handle_cmd+0x1535 quota_handle_cmd_get sys/ufs/ufs/ufs_quota.c:365 [inline]
quota_handle_cmd() at netbsd:quota_handle_cmd+0x1535 sys/ufs/ufs/ufs_quota.c:193
ufs_quotactl() at netbsd:ufs_quotactl+0x7e sys/ufs/ufs/ufs_vfsops.c:142
VFS_QUOTACTL() at netbsd:VFS_QUOTACTL+0xa5 sys/kern/vfs_subr.c:1466
vfs_quotactl_get() at netbsd:vfs_quotactl_get+0x36 sys/kern/vfs_quotactl.c:81
compat_50_sys_quotactl() at netbsd:compat_50_sys_quotactl+0x2f7 sys/compat/common/compat_50_quota.c:110

sys_syscall() at netbsd:sys_syscall+0x1e4 sy_call sys/sys/syscallvar.h:65 [inline]
sys_syscall() at netbsd:sys_syscall+0x1e4 sys/kern/sys_syscall.c:90

syscall() at netbsd:syscall+0x2da sy_call sys/sys/syscallvar.h:65 [inline]
syscall() at netbsd:syscall+0x2da sy_invoke sys/sys/syscallvar.h:94 [inline]
syscall() at netbsd:syscall+0x2da sys/arch/x86/x86/syscall.c:138
--- syscall (number 148 via SYS_syscall) ---
netbsd:syscall+0x2da:
Panic string: UBSan: Undefined Behavior in /syzkaller/managers/ci2-netbsd-kubsan/kernel/sys/ufs/ufs/ufs_quota1.c:495:20, index -1 is out of range for type 'vnode *[2]'

PID LID S CPU FLAGS STRUCT LWP * NAME WAIT

828 828 2 1 0 ffffb25701db6b40 syz-executor3195
1230 1230 3 0 40180 ffffb2570462e5c0 syz-executor3195 pipe_lk
1240 1240 2 0 40000 ffffb257021bdbc0 syz-executor3195
1002 1002 3 0 40180 ffffb257022a6480 syz-executor3195 pipe_lk
822 > 822 7 1 40000 ffffb2570462e180 syz-executor3195
988 988 2 0 140 ffffb25702a1e500 syz-executor3195
1131 1131 2 0 140 ffffb257007c7a40 syz-executor3195
448 448 2 0 140 ffffb25701c2d6c0 syz-executor3195
991 991 2 1 40000 ffffb257048509c0 syz-executor3195
990 990 2 0 140 ffffb25701c2d280 syz-executor3195
1223 1223 2 0 140 ffffb25701884ac0 syz-executor3195
1194 1194 2 0 140 ffffb25701884680 syz-executor3195
1228 1228 3 0 40180 ffffb25704850580 syz-executor3195 nanoslp
1080 1080 3 1 180 ffffb25704850140 sshd select
1086 1086 3 0 180 ffffb25703737540 getty nanoslp
1195 1195 3 0 180 ffffb25703737980 getty nanoslp
1081 1081 3 1 180 ffffb25701e67b80 getty nanoslp
1071 1071 3 0 1c0 ffffb25702a1e940 getty ttyraw
1093 1093 3 1 180 ffffb257022a68c0 sshd select
1023 1023 3 0 180 ffffb25703737100 powerd kqueue
693 693 3 0 180 ffffb25701db6700 syslogd kqueue
547 547 3 1 180 ffffb25702d19900 dhcpcd poll
742 742 3 1 180 ffffb25701db62c0 dhcpcd poll
465 465 3 1 180 ffffb25701e67740 dhcpcd poll
594 594 3 1 180 ffffb257022a6040 dhcpcd poll
292 292 3 0 180 ffffb257021bd780 dhcpcd poll
290 290 3 0 180 ffffb257021bd340 dhcpcd poll
289 289 3 1 180 ffffb25701c2db00 dhcpcd poll
1 1 3 0 180 ffffb256f965b980 init wait
0 940 3 0 200 ffffb2570186f200 physiod physiod
0 195 3 0 200 ffffb25701884240 pooldrain pooldrain
0 > 194 7 0 240 ffffb2570186fa80 ioflush
0 193 3 1 200 ffffb2570186f640 pgdaemon pgdaemon
0 169 3 0 200 ffffb257007c7600 usb7 usbevt
0 168 3 0 200 ffffb257007c71c0 usb6 usbevt
0 167 3 0 200 ffffb256fd752a00 usb5 usbevt
0 166 3 0 200 ffffb256fd7525c0 usb4 usbevt
0 165 3 0 200 ffffb256fd752180 usb3 usbevt
0 31 3 0 200 ffffb256f96a59c0 usb2 usbevt
0 63 3 0 200 ffffb256f96a5580 usb1 usbevt
0 126 3 0 200 ffffb256f94d8740 usb0 usbevt
0 125 3 1 200 ffffb256f94d8b80 usbtask-dr usbtsk
0 124 3 1 200 ffffb256f7aa1b00 usbtask-hc usbtsk
0 123 3 0 200 ffffb256f96a5140 npfgc0 npfgcw
0 122 3 1 200 ffffb256f965b540 rt_free rt_free
0 121 3 1 200 ffffb256f965b100 unpgc unpgc
0 120 3 0 200 ffffb256f9646940 key_timehandler key_timehandler
0 119 3 1 200 ffffb256f9646500 icmp6_wqinput/1 icmp6_wqinput
0 118 3 0 200 ffffb256f96460c0 icmp6_wqinput/0 icmp6_wqinput
0 117 3 0 200 ffffb256f9631900 nd6_timer nd6_timer
0 116 3 1 200 ffffb256f96314c0 carp6_wqinput/1 carp6_wqinput
0 115 3 0 200 ffffb256f9631080 carp6_wqinput/0 carp6_wqinput
0 114 3 1 200 ffffb256f96148c0 carp_wqinput/1 carp_wqinput
0 113 3 0 200 ffffb256f9614480 carp_wqinput/0 carp_wqinput
0 112 3 1 200 ffffb256f9614040 icmp_wqinput/1 icmp_wqinput
0 111 3 0 200 ffffb256f95d7bc0 icmp_wqinput/0 icmp_wqinput
0 110 3 0 200 ffffb256f95d7340 rt_timer rt_timer
0 109 3 0 200 ffffb256f95d7780 vmem_rehash vmem_rehash
0 100 3 1 200 ffffb256f94d8300 entbutler entropy
0 99 3 0 200 ffffb256f8f48b40 viomb balloon
0 98 3 1 200 ffffb256f8f48700 vioif0_txrx/1 vioif0_txrx
0 97 3 0 200 ffffb256f8f482c0 vioif0_txrx/0 vioif0_txrx
0 30 3 1 200 ffffb256f7aa16c0 scsibus0 sccomp
0 29 3 0 200 ffffb256f7aa1280 pms0 pmsreset
0 28 3 1 200 ffffb256f79b4ac0 xcall/1 xcall
0 27 1 1 200 ffffb256f79b4680 softser/1
0 26 1 1 200 ffffb256f79b4240 softclk/1
0 25 1 1 200 ffffb256f7987a80 softbio/1
0 24 1 1 200 ffffb256f7987640 softnet/1
0 23 1 1 201 ffffb256f7987200 idle/1
0 22 3 1 200 ffffb25825d2da40 lnxsyswq lnxsyswq
0 21 3 1 200 ffffb25825d2d600 lnxubdwq lnxubdwq
0 20 3 0 200 ffffb25825d2d1c0 lnxpwrwq lnxpwrwq
0 19 3 1 200 ffffb25825d34a00 lnxlngwq lnxlngwq
0 18 3 1 200 ffffb25825d345c0 lnxhipwq lnxhipwq
0 17 3 1 200 ffffb25825d34180 lnxrcugc lnxrcugc
0 16 3 0 200 ffffb25825d539c0 sysmon smtaskq
0 15 3 1 200 ffffb25825d53580 pmfsuspend pmfsuspend
0 14 3 0 200 ffffb25825d53140 pmfevent pmfevent
0 13 3 0 200 ffffb25825d5e980 sopendfree sopendfr
0 12 3 0 200 ffffb25825d5e540 ifwdog ifwdog
0 11 3 0 200 ffffb25825d5e100 iflnkst iflnkst
0 10 3 1 200 ffffb25826d95940 nfssilly nfssilly
0 9 3 1 200 ffffb25826d95500 vdrain vdrain
0 8 3 0 200 ffffb25826d950c0 modunload mod_unld
0 7 3 0 200 ffffb25826dba900 xcall/0 xcall
0 6 1 0 200 ffffb25826dba4c0 softser/0
0 5 1 0 200 ffffb25826dba080 softclk/0
0 4 1 0 200 ffffb25826deb8c0 softbio/0
0 3 1 0 200 ffffb25826deb480 softnet/0
0 2 1 0 201 ffffb25826deb040 idle/0
0 0 3 0 200 ffffffff86741280 swapper uvm
[Locks tracked through LWPs]

****** LWP 1240.1240 (syz-executor3195) @ 0xffffb257021bdbc0, l_stat=2

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:vfs_mountalloc+0x14a sys/kern/vfs_mount.c:159)

lock address : ffffb2582726a8c0

type : sleep/adaptive
initialized : netbsd:vfs_mountalloc+0x14a
shared holds : 0 exclusive: 1

shares wanted: 0 exclusive: 1
relevant cpu : 0 last held: 1
relevant lwp : 0xffffb257021bdbc0 last held: 0xffffb2570462e180

last locked* : netbsd:ufs_quotactl+0x70
unlocked : netbsd:ufs_quotactl+0x96

owner field : 0xffffb2570462e180 wait/spin: 0/0

Turnstile: no active turnstile for this lock.

****** LWP 822.822 (syz-executor3195) @ 0xffffb2570462e180, l_stat=7

*** Locks held:

* Lock 0 (initialized at netbsd:vfs_mountalloc+0x14a sys/kern/vfs_mount.c:159)

lock address : ffffb2582726a8c0

type : sleep/adaptive
initialized : netbsd:vfs_mountalloc+0x14a
shared holds : 0 exclusive: 1

shares wanted: 0 exclusive: 1

relevant cpu : 1 last held: 1

relevant lwp : 0xffffb2570462e180 last held: 0xffffb2570462e180

last locked* : netbsd:ufs_quotactl+0x70
unlocked : netbsd:ufs_quotactl+0x96

owner field : 0xffffb2570462e180 wait/spin: 0/0

Turnstile: no active turnstile for this lock.

*** Locks wanted: none

****** LWP 742.742 (dhcpcd) @ 0xffffb25701db62c0, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:module_hook_init+0x1c sys/kern/kern_module_hook.c:132)
lock address : netbsd:module_hook
type : sleep/adaptive
initialized : netbsd:module_hook_init+0x1c
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 0

relevant lwp : 0xffffb25701db62c0 last held: 000000000000000000

last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 465.465 (dhcpcd) @ 0xffffb25701e67740, l_stat=3

relevant lwp : 0xffffb25701e67740 last held: 000000000000000000

last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 290.290 (dhcpcd) @ 0xffffb257021bd340, l_stat=3

relevant lwp : 0xffffb257021bd340 last held: 000000000000000000

last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 289.289 (dhcpcd) @ 0xffffb25701c2db00, l_stat=3

relevant lwp : 0xffffb25701c2db00 last held: 000000000000000000

last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 0.194 (ioflush) @ 0xffffb2570186fa80, l_stat=7

*** Locks held:

* Lock 0 (initialized at netbsd:vcache_alloc+0xba sys/kern/vfs_vnode.c:1392)
lock address : ffffb25701b53740
type : sleep/adaptive
initialized : netbsd:vcache_alloc+0xba

shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0

relevant lwp : 0xffffb2570186fa80 last held: 0xffffb2570186fa80
last locked* : netbsd:genfs_lock+0x19e
unlocked : netbsd:genfs_unlock+0x50
owner/count : 000000000000000000 flags : 000000000000000000

Turnstile: no active turnstile for this lock.

*** Locks wanted: none

****** LWP 0.11 (iflnkst) @ 0xffffb25825d5e100, l_stat=3

relevant lwp : 0xffffb25825d5e100 last held: 000000000000000000

last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 0.5 (softclk/0) @ 0xffffb25826dba080, l_stat=1

relevant lwp : 0xffffb25826dba080 last held: 000000000000000000

last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 0.0 (swapper) @ 0xffffffff86741280, l_stat=3

relevant lwp : 0xffffffff86741280 last held: 000000000000000000
last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

[Locks tracked through CPUs]

******* Locks held on cpu1:

* Lock 0 (initialized at netbsd:kprintf_init+0x72 sys/kern/subr_prf.c:157)
lock address : netbsd:kprintf_mtx
type : spin
initialized : netbsd:kprintf_init+0x72
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0

relevant cpu : 1 last held: 1

relevant lwp : 0xffffb2570462e180 last held: 0xffffb2570462e180

last locked* : netbsd:kprintf_lock+0x50
unlocked : netbsd:kprintf_unlock+0x70
owner field : 0x0000000000000800 wait/spin: 0/1

PAGE FLAG PQ UOBJECT UANON

0xffff910000007180 0045 00000000 0x0 0x0
0xffff910000007200 0045 00000000 0x0 0x0
0xffff910000007280 0045 00000000 0x0 0x0
0xffff910000007300 0045 00000000 0x0 0x0
0xffff910000007380 0045 00000000 0x0 0x0
0xffff910000007400 0045 00000000 0x0 0x0
0xffff910000007480 0045 00000000 0x0 0x0
0xffff910000007500 0045 00000000 0x0 0x0
0xffff910000007580 0045 00000000 0x0 0x0
0xffff910000007600 0045 00000000 0x0 0x0
0xffff910000007680 0045 00000000 0x0 0x0
0xffff910000007700 0041 00000000 0x0 0x0

0xffff910000007780 0041 00000000 0x0 0x0

0xffff910000007800 0041 00000000 0x0 0x0
0xffff910000007880 0041 00000000 0x0 0x0
0xffff910000007900 0045 00000000 0x0 0x0
0xffff910000007980 0041 00000000 0x0 0x0
0xffff910000007a00 0041 00000000 0x0 0x0
0xffff910000007a80 0041 00000000 0x0 0x0
0xffff910000007b00 0041 00000000 0x0 0x0
0xffff910000007b80 0041 00000000 0x0 0x0
0xffff910000007c00 0041 00000000 0x0 0x0
0xffff910000007c80 0041 00000000 0x0 0x0
0xffff910000007d00 0041 00000000 0x0 0x0
0xffff910000007d80 0041 00000000 0x0 0x0
0xffff910000007e00 0041 00000000 0x0 0x0
0xffff910000007e80 0041 00000000 0x0 0x0
0xffff910000007f00 0041 00000000 0x0 0x0
0xffff910000007f80 0041 00000000 0x0 0x0
0xffff910000008000 0041 00000000 0x0 0x0
0xffff910000008080 0041 00000000 0x0 0x0
0xffff910000008100 0041 00000000 0x0 0x0
0xffff910000008180 0041 00000000 0x0 0x0
0xffff910000008200 0041 00000000 0x0 0x0
0xffff910000008280 0041 00000000 0x0 0x0
0xffff910000008300 0041 00000000 0x0 0x0
0xffff910000008380 0041 00000000 0x0 0x0
0xffff910000008400 0041 00000000 0x0 0x0
0xffff910000008480 0041 00000000 0x0 0x0
0xffff910000008500 0041 00000000 0x0 0x0
0xffff910000008580 0041 00000000 0x0 0x0
0xffff910000008600 0045 00000000 0x0 0x0
0xffff910000008680 0041 00000000 0x0 0x0
0xffff910000008700 0041 00000000 0x0 0x0
0xffff910000008780 0041 00000000 0x0 0x0
0xffff910000008800 0045 00000000 0x0 0x0
0xffff910000008880 0041 00000000 0x0 0x0
0xffff910000008900 0041 00000000 0x0 0x0
0xffff910000008980 0041 00000000 0x0 0x0
0xffff910000008a00 0041 00000000 0x0 0x0
0xffff910000008a80 0041 00000000 0x0 0x0
0xffff910000008b00 0041 00000000 0x0 0x0
0xffff910000008b80 0041 00000000 0x0 0x0
0xffff910000008c00 0041 00000000 0x0 0x0
0xffff910000008c80 0041 00000000 0x0 0x0
0xffff910000008d00 0041 00000000 0x0 0x0
0xffff910000008d80 0041 00000000 0x0 0x0
0xffff910000008e00 0041 00000000 0x0 0x0
0xffff910000008e80 0041 00000000 0x0 0x0
0xffff910000008f00 0041 00000000 0x0 0x0
0xffff910000008f80 0041 00000000 0x0 0x0
0xffff910000009000 0041 00000000 0x0 0x0
0xffff910000009080 0045 00000000 0x0 0x0
0xffff910000009100 0041 00000000 0x0 0x0
0xffff910000009180 0041 00000000 0x0 0x0

0xffff910000009200 0041 00000000 0x0 0x0

0xffff910000009280 0041 00000000 0x0 0x0
0xffff910000009300 0041 00000000 0x0 0x0
0xffff910000009380 0041 00000000 0x0 0x0

0xffff910000009400 0041 00000000 0x0 0x0

0xffff910000009480 0041 00000000 0x0 0x0

0xffff910000009500 0041 00000000 0x0 0x0

0xffff910000009580 0041 00000000 0x0 0x0
0xffff910000009600 0041 00000000 0x0 0x0
0xffff910000009680 0041 00000000 0x0 0x0

0xffff910000009700 0041 00000000 0x0 0x0

0xffff910000009780 0041 00000000 0x0 0x0

0xffff910000009800 0041 00000000 0x0 0x0

0xffff910000009880 0041 00000000 0x0 0x0

0xffff910000009900 0041 00000000 0x0 0x0

0xffff910000009980 0041 00000000 0x0 0x0
0xffff910000009a00 0041 00000000 0x0 0x0
0xffff910000009a80 0041 00000000 0x0 0x0
0xffff910000009b00 0041 00000000 0x0 0x0
0xffff910000009b80 0041 00000000 0x0 0x0

0xffff910000009c00 0041 00000000 0x0 0x0

0xffff910000009c80 0041 00000000 0x0 0x0

0xffff910000009d00 0041 00000000 0x0 0x0

0xffff910000009d80 0041 00000000 0x0 0x0
0xffff910000009e00 0041 00000000 0x0 0x0
0xffff910000009e80 0045 00000000 0x0 0x0

0xffff910000009f00 0041 00000000 0x0 0x0

0xffff910000009f80 0041 00000000 0x0 0x0
0xffff91000000a000 0041 00000000 0x0 0x0
0xffff91000000a080 0041 00000000 0x0 0x0
0xffff91000000a100 0041 00000000 0x0 0x0
0xffff91000000a180 0041 00000000 0x0 0x0
0xffff91000000a200 0041 00000000 0x0 0x0

0xffff91000000a280 0041 00000000 0x0 0x0

0xffff91000000a300 0041 00000000 0x0 0x0
0xffff91000000a380 0041 00000000 0x0 0x0
0xffff91000000a400 0041 00000000 0x0 0x0

0xffff91000000a480 0041 00000000 0x0 0x0

0xffff91000000a500 0041 00000000 0x0 0x0

0xffff91000000a580 0041 00000000 0x0 0x0

0xffff91000000a600 0041 00000000 0x0 0x0

0xffff91000000a680 0041 00000000 0x0 0x0

0xffff91000000a700 0041 00000000 0x0 0x0

0xffff91000000a780 0041 00000000 0x0 0x0

0xffff91000000a800 0041 00000000 0x0 0x0

0xffff91000000a880 0041 00000000 0x0 0x0

0xffff91000000a900 0041 00000000 0x0 0x0
0xffff91000000a980 0041 00000000 0x0 0x0
0xffff91000000aa00 0041 00000000 0x0 0x0

0xffff91000000aa80 0041 00000000 0x0 0x0

0xffff91000000ab00 0041 00000000 0x0 0x0

0xffff91000000ab80 0041 00000000 0x0 0x0

0xffff91000000ac00 0041 00000000 0x0 0x0

0xffff91000000ac80 0041 00000000 0x0 0x0

0xffff91000000ad00 0041 00000000 0x0 0x0

0xffff91000000ad80 0041 00000000 0x0 0x0

0xffff91000000ae00 0041 00000000 0x0 0x0

0xffff91000000ae80 0041 00000000 0x0 0x0

0xffff91000000af00 0045 00000000 0x0 0x0
0xffff91000000af80 0045 00000000 0x0 0x0
0xffff91000000b000 0041 00000000 0x0 0x0

0xffff91000000b080 0041 00000000 0x0 0x0

0xffff91000000b100 0041 00000000 0x0 0x0
0xffff91000000b180 0045 00000000 0x0 0x0
0xffff91000000b200 0041 00000000 0x0 0x0
0xffff91000000b280 0045 00000000 0x0 0x0
0xffff91000000b300 0045 00000000 0x0 0x0
0xffff91000000b380 0045 00000000 0x0 0x0
0xffff91000000b400 0041 00000000 0x0 0x0

0xffff91000000b480 0041 00000000 0x0 0x0

0xffff91000000b500 0045 00000000 0x0 0x0
0xffff91000000b580 0045 00000000 0x0 0x0
0xffff91000000b600 0045 00000000 0x0 0x0
0xffff91000000b680 0045 00000000 0x0 0x0
0xffff91000000b700 0045 00000000 0x0 0x0
0xffff91000000b780 0045 00000000 0x0 0x0
0xffff91000000b800 0045 00000000 0x0 0x0

0xffff91000000b880 0041 00000000 0x0 0x0

0xffff91000000b900 0045 00000000 0x0 0x0
0xffff91000000b980 0045 00000000 0x0 0x0
0xffff91000000ba00 0045 00000000 0x0 0x0
0xffff91000000ba80 0045 00000000 0x0 0x0
0xffff91000000bb00 0045 00000000 0x0 0x0
0xffff91000000bb80 0045 00000000 0x0 0x0
0xffff91000000bc00 0045 00000000 0x0 0x0

0xffff91000000bc80 0041 00000000 0x0 0x0

0xffff91000000bd00 0045 00000000 0x0 0x0
0xffff91000000bd80 0045 00000000 0x0 0x0
0xffff91000000be00 0045 00000000 0x0 0x0
0xffff91000000be80 0045 00000000 0x0 0x0
0xffff91000000bf00 0045 00000000 0x0 0x0
0xffff91000000bf80 0045 00000000 0x0 0x0
0xffff91000000c000 0045 00000000 0x0 0x0
0xffff91000000c080 0045 00000000 0x0 0x0
0xffff91000000c100 0045 00000000 0x0 0x0
0xffff91000000c180 0045 00000000 0x0 0x0
0xffff91000000c200 0045 00000000 0x0 0x0
0xffff91000000c280 0045 00000000 0x0 0x0
0xffff91000000c300 0045 00000000 0x0 0x0
0xffff91000000c380 0045 00000000 0x0 0x0
0xffff91000000c400 0045 00000000 0x0 0x0
0xffff91000000c480 0045 00000000 0x0 0x0
0xffff91000000c500 0045 00000000 0x0 0x0
0xffff91000000c580 0045 00000000 0x0 0x0
0xffff91000000c600 0045 00000000 0x0 0x0
0xffff91000000c680 0045 00000000 0x0 0x0
0xffff91000000c700 0041 00000000 0x0 0x0
0xffff91000000c780 0041 00000000 0x0 0x0
0xffff91000000c800 0045 00000000 0x0 0x0
0xffff91000000c880 0045 00000000 0x0 0x0
0xffff91000000c900 0045 00000000 0x0 0x0
0xffff91000000c980 0045 00000000 0x0 0x0
0xffff91000000ca00 0045 00000000 0x0 0x0
0xffff91000000ca80 0045 00000000 0x0 0x0
0xffff91000000cb00 0041 00000000 0x0 0x0
0xffff91000000cb80 0041 00000000 0x0 0x0
0xffff91000000cc00 0045 00000000 0x0 0x0
0xffff91000000cc80 0045 00000000 0x0 0x0
0xffff91000000cd00 0045 00000000 0x0 0x0
0xffff91000000cd80 0041 00000000 0x0 0x0
0xffff91000000ce00 0045 00000000 0x0 0x0

0xffff91000000ce80 0041 00000000 0x0 0x0

0xffff91000000cf00 0041 00000000 0x0 0x0
0xffff91000000cf80 0041 00000000 0x0 0x0
0xffff91000000d000 0041 00000000 0x0 0x0
0xffff91000000d080 0045 00000000 0x0 0x0
0xffff91000000d100 0041 00000000 0x0 0x0
0xffff91000000d180 0041 00000000 0x0 0x0
0xffff91000000d200 0041 00000000 0x0 0x0

0xffff91000000d280 0041 00000000 0x0 0x0

0xffff91000000d300 0045 00000000 0x0 0x0

0xffff91000000d380 0041 00000000 0x0 0x0

0xffff91000000d400 0041 00000000 0x0 0x0
0xffff91000000d480 0045 00000000 0x0 0x0
0xffff91000000d500 0041 00000000 0x0 0x0

0xffff91000000d580 0041 00000000 0x0 0x0

0xffff91000000d600 0041 00000000 0x0 0x0
0xffff91000000d680 0041 00000000 0x0 0x0
0xffff91000000d700 0041 00000000 0x0 0x0
0xffff91000000d780 0045 00000000 0x0 0x0
0xffff91000000d800 0041 00000000 0x0 0x0
0xffff91000000d880 0041 00000000 0x0 0x0
0xffff91000000d900 0041 00000000 0x0 0x0
0xffff91000000d980 0041 00000000 0x0 0x0
0xffff91000000da00 0041 00000000 0x0 0x0
0xffff91000000da80 0045 00000000 0x0 0x0
0xffff91000000db00 0045 00000000 0x0 0x0
0xffff91000000db80 0045 00000000 0x0 0x0
0xffff91000000dc00 0041 00000000 0x0 0x0
0xffff91000000dc80 0041 00000000 0x0 0x0
0xffff91000000dd00 0041 00000000 0x0 0x0
0xffff91000000dd80 0041 00000000 0x0 0x0
0xffff91000000de00 0041 00000000 0x0 0x0
0xffff91000000de80 0041 00000000 0x0 0x0
0xffff91000000df00 0045 00000000 0x0 0x0
0xffff91000000df80 0045 00000000 0x0 0x0
0xffff91000000e000 0045 00000000 0x0 0x0

0xffff91000000e080 0041 00000000 0x0 0x0

0xffff91000000e100 0041 00000000 0x0 0x0
0xffff91000000e180 0045 00000000 0x0 0x0
0xffff91000000e200 0041 00000000 0x0 0x0
0xffff91000000e280 0041 00000000 0x0 0x0
0xffff91000000e300 0045 00000000 0x0 0x0

0xffff91000000e380 0041 00000000 0x0 0x0

0xffff91000000e400 0045 00000000 0x0 0x0
0xffff91000000e480 0041 00000000 0x0 0x0
0xffff91000000e500 0045 00000000 0x0 0x0
0xffff91000000e580 0041 00000000 0x0 0x0
0xffff91000000e600 0045 00000000 0x0 0x0
0xffff91000000e680 0045 00000000 0x0 0x0
0xffff91000000e700 0041 00000000 0x0 0x0
0xffff91000000e780 0041 00000000 0x0 0x0
0xffff91000000e800 0045 00000000 0x0 0x0
0xffff91000000e880 0045 00000000 0x0 0x0
0xffff91000000e900 0041 00000000 0x0 0x0
0xffff91000000e980 0041 00000000 0x0 0x0
0xffff91000000ea00 0041 00000000 0x0 0x0
0xffff91000000ea80 0041 00000000 0x0 0x0
0xffff91000000eb00 0041 00000000 0x0 0x0
0xffff91000000eb80 0045 00000000 0x0 0x0
0xffff91000000ec00 0041 00000000 0x0 0x0

0xffff91000000ec80 0041 00000000 0x0 0x0

0xffff91000000ed00 0041 00000000 0x0 0x0
0xffff91000000ed80 0041 00000000 0x0 0x0
0xffff91000000ee00 0041 00000000 0x0 0x0
0xffff91000000ee80 0045 00000000 0x0 0x0
0xffff91000000ef00 0041 00000000 0x0 0x0
0xffff91000000ef80 0041 00000000 0x0 0x0
0xffff91000000f000 0041 00000000 0x0 0x0
0xffff91000000f080 0045 00000000 0x0 0x0
0xffff91000000f100 0041 00000000 0x0 0x0
0xffff91000000f180 0041 00000000 0x0 0x0
0xffff91000000f200 0041 00000000 0x0 0x0
0xffff91000000f280 0041 00000000 0x0 0x0
0xffff91000000f300 0041 00000000 0x0 0x0
0xffff91000000f380 0041 00000000 0x0 0x0
0xffff91000000f400 0045 00000000 0x0 0x0
0xffff91000000f480 0041 00000000 0x0 0x0
0xffff91000000f500 0041 00000000 0x0 0x0
0xffff91000000f580 0041 00000000 0x0 0x0
0xffff91000000f600 0041 00000000 0x0 0x0
0xffff91000000f680 0045 00000000 0x0 0x0
0xffff91000000f700 0041 00000000 0x0 0x0
0xffff91000000f780 0041 00000000 0x0 0x0
0xffff91000000f800 0041 00000000 0x0 0x0
0xffff91000000f880 0045 00000000 0x0 0x0
0xffff91000000f900 0041 00000000 0x0 0x0
0xffff91000000f980 0045 00000000 0x0 0x0
0xffff91000000fa00 0041 00000000 0x0 0x0
0xffff91000000fa80 0041 00000000 0x0 0x0
0xffff91000000fb00 0041 00000000 0x0 0x0
0xffff91000000fb80 0041 00000000 0x0 0x0
0xffff91000000fc00 0045 00000000 0x0 0x0
0xffff91000000fc80 0041 00000000 0x0 0x0
0xffff91000000fd00 0045 00000000 0x0 0x0
0xffff91000000fd80 0041 00000000 0x0 0x0
0xffff91000000fe00 0041 00000000 0x0 0x0
0xffff91000000fe80 0041 00000000 0x0 0x0
0xffff91000000ff00 0041 00000000 0x0 0x0
0xffff91000000ff80 0041 00000000 0x0 0x0
0xffff910000010000 0041 00000000 0x0 0x0
0xffff910000010080 0041 00000000 0x0 0x0
0xffff910000010100 0041 00000000 0x0 0x0
0xffff910000010180 0045 00000000 0x0 0x0
0xffff910000010200 0045 00000000 0x0 0x0
0xffff910000010280 0041 00000000 0x0 0x0
0xffff910000010300 0041 00000000 0x0 0x0
0xffff910000010380 0041 00000000 0x0 0x0
0xffff910000010400 0041 00000000 0x0 0x0
0xffff910000010480 0045 00000000 0x0 0x0
0xffff910000010500 0045 00000000 0x0 0x0
0xffff910000010580 0041 00000000 0x0 0x0
0xffff910000010600 0041 00000000 0x0 0x0
0xffff910000010680 0041 00000000 0x0 0x0
0xffff910000010700 0045 00000000 0x0 0x0
0xffff910000010780 0041 00000000 0x0 0x0
0xffff910000010800 0041 00000000 0x0 0x0
0xffff910000010880 0041 00000000 0x0 0x0
0xffff910000010900 0041 00000000 0x0 0x0
0xffff910000010980 0045 00000000 0x0 0x0
0xffff910000010a00 0045 00000000 0x0 0x0

0xffff910000010a80 0041 00000000 0x0 0x0

0xffff910000010b00 0041 00000000 0x0 0x0
0xffff910000010b80 0041 00000000 0x0 0x0
0xffff910000010c00 0041 00000000 0x0 0x0
0xffff910000010c80 0045 00000000 0x0 0x0
0xffff910000010d00 0041 00000000 0x0 0x0

0xffff910000010d80 0041 00000000 0x0 0x0

0xffff910000010e00 0041 00000000 0x0 0x0
0xffff910000010e80 0045 00000000 0x0 0x0
0xffff910000010f00 0041 00000000 0x0 0x0
0xffff910000010f80 0041 00000000 0x0 0x0
0xffff910000011000 0041 00000000 0x0 0x0

0xffff910000011080 0041 00000000 0x0 0x0

0xffff910000011100 0041 00000000 0x0 0x0
0xffff910000011180 0041 00000000 0x0 0x0
0xffff910000011200 0045 00000000 0x0 0x0
0xffff910000011280 0041 00000000 0x0 0x0
0xffff910000011300 0041 00000000 0x0 0x0
0xffff910000011380 0041 00000000 0x0 0x0
0xffff910000011400 0041 00000000 0x0 0x0
0xffff910000011480 0041 00000000 0x0 0x0
0xffff910000011500 0045 00000000 0x0 0x0
0xffff910000011580 0041 00000000 0x0 0x0
0xffff910000011600 0041 00000000 0x0 0x0
0xffff910000011680 0041 00000000 0x0 0x0
0xffff910000011700 0041 00000000 0x0 0x0
0xffff910000011780 0045 00000000 0x0 0x0
0xffff910000011800 0041 00000000 0x0 0x0
0xffff910000011880 0041 00000000 0x0 0x0
0xffff910000011900 0041 00000000 0x0 0x0
0xffff910000011980 0041 00000000 0x0 0x0
0xffff910000011a00 0041 00000000 0x0 0x0
0xffff910000011a80 0041 00000000 0x0 0x0
0xffff910000011b00 0045 00000000 0x0 0x0
0xffff910000011b80 0041 00000000 0x0 0x0
0xffff910000011c00 0041 00000000 0x0 0x0
0xffff910000011c80 0041 00000000 0x0 0x0
0xffff910000011d00 0041 00000000 0x0 0x0
0xffff910000011d80 0041 00000000 0x0 0x0
0xffff910000011e00 0045 00000000 0x0 0x0
0xffff910000011e80 0041 00000000 0x0 0x0
0xffff910000011f00 0041 00000000 0x0 0x0
0xffff910000011f80 0041 00000000 0x0 0x0
0xffff910000012000 0041 00000000 0x0 0x0
0xffff910000012080 0041 00000000 0x0 0x0
0xffff910000012100 0045 00000000 0x0 0x0
0xffff910000012180 0045 00000000 0x0 0x0
0xffff910000012200 0041 00000000 0x0 0x0
0xffff910000012280 0045 00000000 0x0 0x0
0xffff910000012300 0041 00000000 0x0 0x0
0xffff910000012380 0041 00000000 0x0 0x0
0xffff910000012400 0041 00000000 0x0 0x0
0xffff910000012480 0041 00000000 0x0 0x0
0xffff910000012500 0041 00000000 0x0 0x0
0xffff910000012580 0041 00000000 0x0 0x0
0xffff910000012600 0041 00000000 0x0 0x0
0xffff910000012680 0041 00000000 0x0 0x0
0xffff910000012700 0041 00000000 0x0 0x0
0xffff910000012780 0041 00000000 0x0 0x0
0xffff910000012800 0041 00000000 0x0 0x0
0xffff910000012880 0045 00000000 0x0 0x0
0xffff910000012900 0001 00000000 0x0 0x0
0xffff910000012980 0001 00000000 0x0 0x0
0xffff910000012a00 0001 00000000 0x0 0x0
0xffff910000012a80 0001 00000000 0x0 0x0
0xffff910000012b00 0001 00000000 0x0 0x0
0xffff910000012b80 0001 00000000 0x0 0x0
0xffff910000012c00 0001 00000000 0x0 0x0
0xffff910000012c80 0001 00000000 0x0 0x0
0xffff910000012d00 0001 00000000 0x0 0x0
0xffff910000012d80 0001 00000000 0x0 0x0
0xffff910000012e00 0001 00000000 0x0 0x0
0xffff910000012e80 0001 00000000 0x0 0x0
0xffff910000012f00 0001 00000000 0x0 0x0
0xffff910000012f80 0001 00000000 0x0 0x0
0xffff910000013000 0001 00000000 0x0 0x0
0xffff910000013080 0001 00000000 0x0 0x0
0xffff910000013100 0001 00000000 0x0 0x0

0xffff910000013180 0001 00000000 0x0 0x0

0xffff910000013200 0001 00000000 0x0 0x0
0xffff910000013280 0001 00000000 0x0 0x0
0xffff910000013300 0001 00000000 0x0 0x0

0xffff910000013380 0001 00000000 0x0 0x0

0xffff910000013400 0001 00000000 0x0 0x0

0xffff910000013480 0001 00000000 0x0 0x0

0xffff910000013500 0001 00000000 0x0 0x0
0xffff910000013580 0001 00000000 0x0 0x0
0xffff910000013600 0001 00000000 0x0 0x0
0xffff910000013680 0001 00000000 0x0 0x0
0xffff910000013700 0001 00000000 0x0 0x0
0xffff910000013780 0001 00000000 0x0 0x0
0xffff910000013800 0001 00000000 0x0 0x0
0xffff910000013880 0001 00000000 0x0 0x0
0xffff910000013900 0001 00000000 0x0 0x0
0xffff910000013980 0001 00000000 0x0 0x0
0xffff910000013a00 0001 00000000 0x0 0x0

0xffff910000013a80 0001 00000000 0x0 0x0

0xffff910000013b00 0001 00000000 0x0 0x0
0xffff910000013b80 0001 00000000 0x0 0x0
0xffff910000013c00 0001 00000000 0x0 0x0
0xffff910000013c80 0001 00000000 0x0 0x0
0xffff910000013d00 0001 00000000 0x0 0x0
0xffff910000013d80 0001 00000000 0x0 0x0
0xffff910000013e00 0001 00000000 0x0 0x0
0xffff910000013e80 0001 00000000 0x0 0x0
0xffff910000013f00 0001 00000000 0x0 0x0
0xffff910000013f80 0001 00000000 0x0 0x0
0xffff910000014000 0001 00000000 0x0 0x0
0xffff910000014080 0001 00000000 0x0 0x0
0xffff910000014100 0001 00000000 0x0 0x0

0xffff910000014180 0001 00000000 0x0 0x0

0xffff910000014200 0001 00000000 0x0 0x0

0xffff910000014280 0001 00000000 0x0 0x0

0xffff910000014300 0001 00000000 0x0 0x0

0xffff910000014380 0001 00000000 0x0 0x0

0xffff910000014400 0041 00000000 0x0 0x0

0xffff910000014480 0041 00000000 0x0 0x0

0xffff910000014500 0041 00000000 0x0 0x0

0xffff910000014580 0041 00000000 0x0 0x0

0xffff910000014600 0041 00000000 0x0 0x0

0xffff910000014680 0041 00000000 0x0 0x0

0xffff910000014700 0041 00000000 0x0 0x0
0xffff910000014780 0041 00000000 0x0 0x0
0xffff910000014800 0041 00000000 0x0 0x0
0xffff910000014880 0041 00000000 0x0 0x0
0xffff910000014900 0041 00000000 0x0 0x0

0xffff910000014980 0041 00000000 0x0 0x0

0xffff910000014a00 0041 00000000 0x0 0x0
0xffff910000014a80 0041 00000000 0x0 0x0
0xffff910000014b00 0041 00000000 0x0 0x0
0xffff910000014b80 0041 00000000 0x0 0x0
0xffff910000014c00 0041 00000000 0x0 0x0
0xffff910000014c80 0041 00000000 0x0 0x0
0xffff910000014d00 0041 00000000 0x0 0x0
0xffff910000014d80 0041 00000000 0x0 0x0
0xffff910000014e00 0041 00000000 0x0 0x0
0xffff910000014e80 0041 00000000 0x0 0x0
0xffff910000014f00 0041 00000000 0x0 0x0
0xffff910000014f80 0041 00000000 0x0 0x0
0xffff910000015000 0041 00000000 0x0 0x0
0xffff910000015080 0041 00000000 0x0 0x0
0xffff910000015100 0041 00000000 0x0 0x0
0xffff910000015180 0041 00000000 0x0 0x0
0xffff910000015200 0041 00000000 0x0 0x0
0xffff910000015280 0041 00000000 0x0 0x0
0xffff910000015300 0041 00000000 0x0 0x0
0xffff910000015380 0041 00000000 0x0 0x0
0xffff910000015400 0041 00000000 0x0 0x0
0xffff910000015480 0041 00000000 0x0 0x0
0xffff910000015500 0041 00000000 0x0 0x0
0xffff910000015580 0041 00000000 0x0 0x0
0xffff910000015600 0041 00000000 0x0 0x0

0xffff910000015680 0041 00000000 0x0 0x0

0xffff910000015700 0041 00000000 0x0 0x0
0xffff910000015780 0041 00000000 0x0 0x0
0xffff910000015800 0041 00000000 0x0 0x0

0xffff910000015880 0041 00000000 0x0 0x0

0xffff910000015900 0001 00000000 0x0 0x0
0xffff910000015980 0001 00000000 0x0 0x0
0xffff910000015a00 0001 00000000 0x0 0x0
0xffff910000015a80 0001 00000000 0x0 0x0
0xffff910000015b00 0001 00000000 0x0 0x0
0xffff910000015b80 0001 00000000 0x0 0x0
0xffff910000015c00 0001 00000000 0x0 0x0
0xffff910000015c80 0001 00000000 0x0 0x0
0xffff910000015d00 0001 00000000 0x0 0x0
0xffff910000015d80 0001 00000000 0x0 0x0
0xffff910000015e00 0001 00000000 0x0 0x0
0xffff910000015e80 0001 00000000 0x0 0x0
0xffff910000015f00 0001 00000000 0x0 0x0
0xffff910000015f80 0001 00000000 0x0 0x0
0xffff910000016000 0001 00000000 0x0 0x0
0xffff910000016080 0001 00000000 0x0 0x0
0xffff910000016100 0001 00000000 0x0 0x0
0xffff910000016180 0001 00000000 0x0 0x0
0xffff910000016200 0001 00000000 0x0 0x0
0xffff910000016280 0001 00000000 0x0 0x0
0xffff910000016300 0001 00000000 0x0 0x0
0xffff910000016380 0001 00000000 0x0 0x0
0xffff910000016400 0001 00000000 0x0 0x0
0xffff910000016480 0001 00000000 0x0 0x0
0xffff910000016500 0001 00000000 0x0 0x0
0xffff910000016580 0001 00000000 0x0 0x0
0xffff910000016600 0001 00000000 0x0 0x0
0xffff910000016680 0001 00000000 0x0 0x0
0xffff910000016700 0001 00000000 0x0 0x0
0xffff910000016780 0001 00000000 0x0 0x0
0xffff910000016800 0001 00000000 0x0 0x0
0xffff910000016880 0001 00000000 0x0 0x0
0xffff910000016900 0001 00000000 0x0 0x0
0xffff910000016980 0001 00000000 0x0 0x0
0xffff910000016a00 0001 00000000 0x0 0x0
0xffff910000016a80 0001 00000000 0x0 0x0
0xffff910000016b00 0001 00000000 0x0 0x0
0xffff910000016b80 0001 00000000 0x0 0x0
0xffff910000016c00 0001 00000000 0x0 0x0
0xffff910000016c80 0001 00000000 0x0 0x0
0xffff910000016d00 0001 00000000 0x0 0x0
0xffff910000016d80 0001 00000000 0x0 0x0
0xffff910000016e00 0001 00000000 0x0 0x0
0xffff910000016e80 0001 00000000 0x0 0x0
0xffff910000016f00 0001 00000000 0x0 0x0
0xffff910000016f80 0001 00000000 0x0 0x0
0xffff910000017000 0001 00000000 0x0 0x0

0xffff910000017080 0001 00000000 0x0 0x0

0xffff910000017100 0001 00000000 0x0 0x0

0xffff910000017180 0001 00000000 0x0 0x0

0xffff910000017200 0001 00000000 0x0 0x0

0xffff910000017280 0001 00000000 0x0 0x0

0xffff910000017300 0001 00000000 0x0 0x0

0xffff910000017380 0001 00000000 0x0 0x0

0xffff910000017400 0041 00000000 0x0 0x0
0xffff910000017480 0041 00000000 0x0 0x0

0xffff910000017500 0041 00000000 0x0 0x0

0xffff910000017580 0041 00000000 0x0 0x0

0xffff910000017600 0041 00000000 0x0 0x0

0xffff910000017680 0041 00000000 0x0 0x0
0xffff910000017700 0041 00000000 0x0 0x0
0xffff910000017780 0041 00000000 0x0 0x0

0xffff910000017800 0041 00000000 0x0 0x0

0xffff910000017880 0041 00000000 0x0 0x0

0xffff910000017900 0041 00000000 0x0 0x0

0xffff910000017980 0041 00000000 0x0 0x0
0xffff910000017a00 0041 00000000 0x0 0x0
0xffff910000017a80 0041 00000000 0x0 0x0
0xffff910000017b00 0041 00000000 0x0 0x0
0xffff910000017b80 0041 00000000 0x0 0x0
0xffff910000017c00 0041 00000000 0x0 0x0
0xffff910000017c80 0041 00000000 0x0 0x0

0xffff910000017d00 0041 00000000 0x0 0x0

0xffff910000017d80 0041 00000000 0x0 0x0

0xffff910000017e00 0041 00000000 0x0 0x0

0xffff910000017e80 0041 00000000 0x0 0x0
0xffff910000017f00 0041 00000000 0x0 0x0
0xffff910000017f80 0041 00000000 0x0 0x0
0xffff910000018000 0041 00000000 0x0 0x0
0xffff910000018080 0041 00000000 0x0 0x0
0xffff910000018100 0041 00000000 0x0 0x0
0xffff910000018180 0041 00000000 0x0 0x0
0xffff910000018200 0041 00000000 0x0 0x0
0xffff910000018280 0041 00000000 0x0 0x0

0xffff910000018300 0041 00000000 0x0 0x0

0xffff910000018380 0041 00000000 0x0 0x0

0xffff910000018400 0041 00000000 0x0 0x0

0xffff910000018480 0041 00000000 0x0 0x0

0xffff910000018500 0041 00000000 0x0 0x0

0xffff910000018580 0041 00000000 0x0 0x0

0xffff910000018600 0041 00000000 0x0 0x0

0xffff910000018680 0041 00000000 0x0 0x0

0xffff910000018700 0041 00000000 0x0 0x0

0xffff910000018780 0041 00000000 0x0 0x0

0xffff910000018800 0041 00000000 0x0 0x0

0xffff910000018880 0041 00000000 0x0 0x0

0xffff910000018900 0041 00000000 0x0 0x0

0xffff910000018980 0041 00000000 0x0 0x0
0xffff910000018a00 0041 00000000 0x0 0x0
0xffff910000018a80 0041 00000000 0x0 0x0
0xffff910000018b00 0001 00000000 0x0 0x0

0xffff910000018b80 0001 00000000 0x0 0x0

0xffff910000018c00 0001 00000000 0x0 0x0
0xffff910000018c80 0001 00000000 0x0 0x0
0xffff910000018d00 0001 00000000 0x0 0x0
0xffff910000018d80 0001 00000000 0x0 0x0
0xffff910000018e00 0001 00000000 0x0 0x0
0xffff910000018e80 0001 00000000 0x0 0x0
0xffff910000018f00 0001 00000000 0x0 0x0
0xffff910000018f80 0001 00000000 0x0 0x0
0xffff910000019000 0001 00000000 0x0 0x0

0xffff910000019080 0001 00000000 0x0 0x0

0xffff910000019100 0001 00000000 0x0 0x0

0xffff910000019180 0001 00000000 0x0 0x0

0xffff910000019200 0001 00000000 0x0 0x0
0xffff910000019280 0001 00000000 0x0 0x0
0xffff910000019300 0001 00000000 0x0 0x0

0xffff910000019380 0001 00000000 0x0 0x0

0xffff910000019400 0001 00000000 0x0 0x0
0xffff910000019480 0001 00000000 0x0 0x0
0xffff910000019500 0001 00000000 0x0 0x0

0xffff910000019580 0001 00000000 0x0 0x0

0xffff910000019600 0001 00000000 0x0 0x0
0xffff910000019680 0001 00000000 0x0 0x0
0xffff910000019700 0001 00000000 0x0 0x0
0xffff910000019780 0001 00000000 0x0 0x0
0xffff910000019800 0001 00000000 0x0 0x0
0xffff910000019880 0001 00000000 0x0 0x0
0xffff910000019900 0001 00000000 0x0 0x0
0xffff910000019980 0001 00000000 0x0 0x0
0xffff910000019a00 0001 00000000 0x0 0x0

0xffff910000019a80 0001 00000000 0x0 0x0

0xffff910000019b00 0001 00000000 0x0 0x0

0xffff910000019b80 0001 00000000 0x0 0x0

0xffff910000019c00 0001 00000000 0x0 0x0
0xffff910000019c80 0001 00000000 0x0 0x0

0xffff910000019d00 0001 00000000 0x0 0x0

0xffff910000019d80 0001 00000000 0x0 0x0

0xffff910000019e00 0001 00000000 0x0 0x0

0xffff910000019e80 0001 00000000 0x0 0x0

0xffff910000019f00 0001 00000000 0x0 0x0

0xffff910000019f80 0001 00000000 0x0 0x0
0xffff91000001a000 0001 00000000 0x0 0x0
0xffff91000001a080 0001 00000000 0x0 0x0
0xffff91000001a100 0001 00000000 0x0 0x0
0xffff91000001a180 0001 00000000 0x0 0x0
0xffff91000001a200 0001 00000000 0x0 0x0
0xffff91000001a280 0001 00000000 0x0 0x0
0xffff91000001a300 0001 00000000 0x0 0x0
0xffff91000001a380 0001 00000000 0x0 0x0
0xffff91000001a400 0001 00000000 0x0 0x0
0xffff91000001a480 0001 00000000 0x0 0x0
0xffff91000001a500 0001 00000000 0x0 0x0
0xffff91000001a580 0001 00000000 0x0 0x0
0xffff91000001a600 0041 00000000 0x0 0x0
0xffff91000001a680 0041 00000000 0x0 0x0
0xffff91000001a700 0041 00000000 0x0 0x0
0xffff91000001a780 0041 00000000 0x0 0x0
0xffff91000001a800 0041 00000000 0x0 0x0
0xffff91000001a880 0041 00000000 0x0 0x0
0xffff91000001a900 0041 00000000 0x0 0x0
0xffff91000001a980 0041 00000000 0x0 0x0
0xffff91000001aa00 0041 00000000 0x0 0x0
0xffff91000001aa80 0041 00000000 0x0 0x0
0xffff91000001ab00 0041 00000000 0x0 0x0

0xffff91000001ab80 0041 00000000 0x0 0x0

0xffff91000001ac00 0041 00000000 0x0 0x0
0xffff91000001ac80 0041 00000000 0x0 0x0
0xffff91000001ad00 0041 00000000 0x0 0x0
0xffff91000001ad80 0041 00000000 0x0 0x0
0xffff91000001ae00 0041 00000000 0x0 0x0
0xffff91000001ae80 0041 00000000 0x0 0x0
0xffff91000001af00 0041 00000000 0x0 0x0

0xffff91000001af80 0041 00000000 0x0 0x0

0xffff91000001b000 0041 00000000 0x0 0x0

0xffff91000001b080 0041 00000000 0x0 0x0

0xffff91000001b100 0041 00000000 0x0 0x0
0xffff91000001b180 0041 00000000 0x0 0x0
0xffff91000001b200 0041 00000000 0x0 0x0
0xffff91000001b280 0041 00000000 0x0 0x0
0xffff91000001b300 0041 00000000 0x0 0x0

0xffff91000001b380 0041 00000000 0x0 0x0

0xffff91000001b400 0041 00000000 0x0 0x0

0xffff91000001b480 0041 00000000 0x0 0x0

0xffff91000001b500 0041 00000000 0x0 0x0

0xffff91000001b580 0041 00000000 0x0 0x0

0xffff91000001b600 0041 00000000 0x0 0x0

0xffff91000001b680 0041 00000000 0x0 0x0

0xffff91000001b700 0041 00000000 0x0 0x0
0xffff91000001b780 0045 00000000 0x0 0x0
0xffff91000001b800 0045 00000000 0x0 0x0

0xffff91000001b880 0041 00000000 0x0 0x0

0xffff91000001b900 0041 00000000 0x0 0x0
0xffff91000001b980 0041 00000000 0x0 0x0
0xffff91000001ba00 0045 00000000 0x0 0x0
0xffff91000001ba80 0041 00000000 0x0 0x0
0xffff91000001bb00 0045 00000000 0x0 0x0
0xffff91000001bb80 0045 00000000 0x0 0x0
0xffff91000001bc00 0045 00000000 0x0 0x0
0xffff91000001bc80 0041 00000000 0x0 0x0
0xffff91000001bd00 0041 00000000 0x0 0x0
0xffff91000001bd80 0041 00000000 0x0 0x0
0xffff91000001be00 0001 00000000 0x0 0x0
0xffff91000001be80 0001 00000000 0x0 0x0
0xffff91000001bf00 0001 00000000 0x0 0x0

Reply all

Reply to author

Forward

0 new messages