UBSan: Undefined Behavior in compat_43_sys_getdirentries

6 views
Skip to first unread message

syzbot

unread,
Feb 2, 2023, 1:59:42 AM2/2/23
to syzkaller-...@googlegroups.com
Hello,

syzbot found the following issue on:

HEAD commit: 3013c7cb3466 ddbping - restore the original narration of t..
git tree: netbsd
console output: https://syzkaller.appspot.com/x/log.txt?x=14dca891480000
kernel config: https://syzkaller.appspot.com/x/.config?x=1420f906d33d9f1f
dashboard link: https://syzkaller.appspot.com/bug?extid=be8722dfc4f6ae05b813
compiler: g++ (Debian 10.2.1-6) 10.2.1 20210110

Unfortunately, I don't have any reproducer for this issue yet.

Downloadable assets:
disk image: https://storage.googleapis.com/syzbot-assets/462c5a021304/disk-3013c7cb.raw.xz
netbsd.gdb: https://storage.googleapis.com/syzbot-assets/4e16dba2fc4c/netbsd-3013c7cb.gdb.xz

IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+be8722...@syzkaller.appspotmail.com

[ 62.0647066] panic: UBSan: Undefined Behavior in /syzkaller/managers/ci2-netbsd-kubsan/kernel/sys/compat/common/vfs_syscalls_43.c:431:8, pointer expression with base 0xffffffffffffffff overflowed to 0

[ 62.0846898] cpu1: Begin traceback...
[ 62.1146947] vpanic() at netbsd:vpanic+0x2f2 sys/kern/subr_prf.c:291
[ 62.2146930] Report() at netbsd:Report+0x3b sys/../common/lib/libc/misc/ubsan.c:1352
[ 62.2946911] HandlePointerOverflow() at netbsd:HandlePointerOverflow+0xd2 sys/../common/lib/libc/misc/ubsan.c:706
[ 62.3746924] compat_43_sys_getdirentries() at netbsd:compat_43_sys_getdirentries+0x1097 sys/compat/common/vfs_syscalls_43.c:431
[ 62.4446923] sys___syscall() at netbsd:sys___syscall+0x1e4 sy_call sys/sys/syscallvar.h:65 [inline]
[ 62.4446923] sys___syscall() at netbsd:sys___syscall+0x1e4 sys/kern/sys_syscall.c:90
[ 62.5246942] syscall() at netbsd:syscall+0x2da sy_call sys/sys/syscallvar.h:65 [inline]
[ 62.5246942] syscall() at netbsd:syscall+0x2da sy_invoke sys/sys/syscallvar.h:94 [inline]
[ 62.5246942] syscall() at netbsd:syscall+0x2da sys/arch/x86/x86/syscall.c:138
[ 62.5446933] --- syscall (number 156 via SYS_syscall) ---
[ 62.5646926] netbsd:syscall+0x2da:
[ 62.5746957] cpu1: End traceback...
[ 62.5746957] fatal breakpoint trap in supervisor mode
[ 62.5846947] trap type 1 code 0 rip 0xffffffff80235375 cs 0x8 rflags 0x246 cr2 0x728891764789 ilevel 0 rsp 0xffff820248132740
[ 62.5946903] curlwp 0xffff80dc60d78900 pid 1486.1616 lowest kstack 0xffff82024812e2c0
Stopped in pid 1486.1616 (syz-executor.2) at netbsd:breakpoint+0x5: leave
?
breakpoint() at netbsd:breakpoint+0x5
db_panic() at netbsd:db_panic+0xec sys/ddb/db_panic.c:69
vpanic() at netbsd:vpanic+0x2f2 sys/kern/subr_prf.c:291
Report() at netbsd:Report+0x3b sys/../common/lib/libc/misc/ubsan.c:1352
HandlePointerOverflow() at netbsd:HandlePointerOverflow+0xd2 sys/../common/lib/libc/misc/ubsan.c:706
compat_43_sys_getdirentries() at netbsd:compat_43_sys_getdirentries+0x1097 sys/compat/common/vfs_syscalls_43.c:431
sys___syscall() at netbsd:sys___syscall+0x1e4 sy_call sys/sys/syscallvar.h:65 [inline]
sys___syscall() at netbsd:sys___syscall+0x1e4 sys/kern/sys_syscall.c:90
syscall() at netbsd:syscall+0x2da sy_call sys/sys/syscallvar.h:65 [inline]
syscall() at netbsd:syscall+0x2da sy_invoke sys/sys/syscallvar.h:94 [inline]
syscall() at netbsd:syscall+0x2da sys/arch/x86/x86/syscall.c:138
--- syscall (number 156 via SYS_syscall) ---
netbsd:syscall+0x2da:
Panic string: UBSan: Undefined Behavior in /syzkaller/managers/ci2-netbsd-kubsan/kernel/sys/compat/common/vfs_syscalls_43.c:431:8, pointer expression with base 0xffffffffffffffff overflowed to 0

PID LID S CPU FLAGS STRUCT LWP * NAME WAIT
3277 594 2 0 0 ffff80dc5ea13bc0 syz-executor.5
3277 3281 2 0 0 ffff80dc60017940 syz-executor.5
3277 1359 2 1 100 ffff80dc5f49e2c0 syz-executor.5
3277 3277 2 0 10000000 ffff80dc605279c0 syz-executor.5
1486 >1616 7 1 100 ffff80dc60d78900 syz-executor.2
1486 1486 2 0 10000000 ffff80dc5f82e300 syz-executor.2
3271 2378 2 1 100 ffff80dc6031a100 syz-executor.4
3271 3271 2 0 10000000 ffff80dc5f82e740 syz-executor.4
1352 2508 3 0 180 ffff80dc52860080 syz-executor.3 parked
1352 1352 2 0 10000000 ffff80dc6031a540 syz-executor.3
2501 2123 2 0 100 ffff80dc52042480 syz-executor.0
2501 2501 2 0 10000000 ffff80dc60017500 syz-executor.0
1464 2110 3 0 180 ffff80dc60527580 syz-executor.1 parked
1464 957 3 0 180 ffff80dc52860900 syz-executor.1 parked
1464 1464 2 1 10000140 ffff80dc520428c0 syz-executor.1
2993 2993 3 0 180 ffff80dc5fa9a8c0 syz-executor.4 parked
2897 2897 3 0 180 ffff80dc600170c0 syz-executor.4 parked
2887 2887 3 0 180 ffff80dc52227500 syz-executor.4 parked
2132 2132 3 0 180 ffff80dc522270c0 syz-executor.4 parked
2397 2397 3 1 180 ffff80dc5fa9a480 syz-executor.4 parked
2491 2491 3 0 180 ffff80dc60d78080 syz-executor.4 parked
1488 1488 3 1 180 ffff80dc5fa9a040 syz-executor.4 parked
2096 2096 3 1 180 ffff80dc5f49eb40 syz-executor.4 parked
2230 2230 3 0 180 ffff80dc5ea13340 syz-executor.4 parked
2250 2250 3 0 180 ffff80dc528604c0 syz-executor.4 parked
1982 1982 3 0 180 ffff80dc5c169b00 syz-executor.4 parked
1247 1247 2 1 140 ffff80dc5189bbc0 syz-executor.5
1239 1239 2 1 140 ffff80dc51556740 syz-executor.4
1240 1240 2 1 140 ffff80dc52147140 syz-executor.3
573 573 2 1 140 ffff80dc521479c0 syz-executor.1
990 990 2 1 140 ffff80dc535b0180 syz-executor.2
1241 1241 2 1 140 ffff80dc535b05c0 syz-executor.0
1224 1205 3 1 1c0 ffff80dc5c1696c0 syz-fuzzer parked
1224 1386 3 0 1c0 ffff80dc5189b780 syz-fuzzer wait
1224 1203 3 0 180 ffff80dc53a31ac0 syz-fuzzer kqueue
1224 1132 3 1 180 ffff80dc53a31680 syz-fuzzer wait
1224 1120 3 1 180 ffff80dc515f5980 syz-fuzzer wait
1224 1242 3 1 180 ffff80dc52bfc1c0 syz-fuzzer wait
1224 1243 3 0 180 ffff80dc5119b6c0 syz-fuzzer parked
1224 929 3 0 180 ffff80dc5119bb00 syz-fuzzer wait
1224 449 3 1 180 ffff80dc50e77ac0 syz-fuzzer wait
1224 942 3 1 180 ffff80dc5119b280 syz-fuzzer parked
1224 1231 3 1 180 ffff80dc4fdeca80 syz-fuzzer parked
1224 1235 3 0 180 ffff80dc53199a80 syz-fuzzer parked
1224 1224 3 0 180 ffff80dc53a31240 syz-fuzzer parked
1080 1080 3 0 180 ffff80dc515f5540 sshd select
1222 1222 3 0 180 ffff80dc52bfca40 getty nanoslp
1082 1082 3 0 180 ffff80dc53199640 getty nanoslp
1184 1184 3 1 180 ffff80dc53199200 getty nanoslp
1000 1000 3 0 1c0 ffff80dc51317b40 getty ttyraw
1102 1102 3 1 180 ffff80dc52bfc600 sshd select
1088 1088 3 1 180 ffff80dc535b0a00 powerd kqueue
700 700 3 0 180 ffff80dc52147580 syslogd kqueue
747 747 3 0 180 ffff80dc51556b80 dhcpcd poll
742 742 3 1 180 ffff80dc52227940 dhcpcd poll
466 466 3 0 180 ffff80dc515f5100 dhcpcd poll
598 598 3 0 180 ffff80dc51317700 dhcpcd poll
292 292 3 0 180 ffff80dc5189b340 dhcpcd poll
485 485 3 0 180 ffff80dc513172c0 dhcpcd poll
291 291 3 0 180 ffff80dc51556300 dhcpcd poll
1 1 3 0 180 ffff80dc48c53980 init wait
0 577 5 1 200 ffff80dc5f82eb80 (zombie)
0 557 3 0 200 ffff80dc48ae0b80 physiod physiod
0 196 3 1 200 ffff80dc50e77680 pooldrain pooldrain
0 195 2 0 240 ffff80dc50e77240 ioflush
0 194 3 0 200 ffff80dc48ae0740 pgdaemon pgdaemon
0 170 3 1 200 ffff80dc4fdec640 usb7 usbevt
0 169 3 1 200 ffff80dc4fdec200 usb6 usbevt
0 168 3 0 200 ffff80dc4cd6fa40 usb5 usbevt
0 167 3 0 240 ffff80dc4cd6f600 usb4 usbxfer
0 166 3 1 200 ffff80dc4cd6f1c0 usb3 usbevt
0 165 3 1 200 ffff80dc49cfaa00 usb2 usbevt
0 31 3 1 200 ffff80dc49cfa5c0 usb1 usbevt
0 63 3 1 200 ffff80dc49cfa180 usb0 usbevt
0 126 3 1 200 ffff80dc48cce9c0 usbtask-dr usbtsk
0 125 3 0 200 ffff80dc48cce580 usbtask-hc usbtsk
0 124 3 1 200 ffff80dc48cce140 swwreboot swwreboot
0 123 3 1 200 ffff80dc470a1b00 npfgc0 npfgcw
0 122 3 1 200 ffff80dc48c53540 rt_free rt_free
0 121 3 1 200 ffff80dc48c53100 unpgc unpgc
0 120 2 1 200 ffff80dc48c4e940 key_timehandler
0 119 3 1 200 ffff80dc48c4e500 icmp6_wqinput/1 icmp6_wqinput
0 118 3 0 200 ffff80dc48c4e0c0 icmp6_wqinput/0 icmp6_wqinput
0 117 3 0 200 ffff80dc48c31900 nd6_timer nd6_timer
0 116 3 1 200 ffff80dc48c314c0 carp6_wqinput/1 carp6_wqinput
0 115 3 0 200 ffff80dc48c31080 carp6_wqinput/0 carp6_wqinput
0 114 3 1 200 ffff80dc48c248c0 carp_wqinput/1 carp_wqinput
0 113 3 0 200 ffff80dc48c24480 carp_wqinput/0 carp_wqinput
0 112 3 1 200 ffff80dc48c24040 icmp_wqinput/1 icmp_wqinput
0 111 3 0 200 ffff80dc48bd7bc0 icmp_wqinput/0 icmp_wqinput
0 110 3 0 200 ffff80dc48bd7340 rt_timer rt_timer
0 109 2 1 200 ffff80dc48bd7780 vmem_rehash
0 100 3 0 200 ffff80dc48ae0300 entbutler entropy
0 99 2 0 240 ffff80dc48550b40 viomb
0 98 3 1 200 ffff80dc48550700 vioif0_txrx/1 vioif0_txrx
0 97 3 0 200 ffff80dc485502c0 vioif0_txrx/0 vioif0_txrx
0 30 3 1 200 ffff80dc470a16c0 scsibus0 sccomp
0 29 3 0 200 ffff80dc470a1280 pms0 pmsreset
0 28 3 1 200 ffff80dc46facac0 xcall/1 xcall
0 27 1 1 200 ffff80dc46fac680 softser/1
0 26 1 1 200 ffff80dc46fac240 softclk/1
0 25 1 1 200 ffff80dc46f87a80 softbio/1
0 24 1 1 200 ffff80dc46f87640 softnet/1
0 23 1 1 201 ffff80dc46f87200 idle/1
0 22 3 1 200 ffff80dd7532da40 lnxsyswq lnxsyswq
0 21 3 1 200 ffff80dd7532d600 lnxubdwq lnxubdwq
0 20 3 1 200 ffff80dd7532d1c0 lnxpwrwq lnxpwrwq
0 19 3 1 200 ffff80dd75334a00 lnxlngwq lnxlngwq
0 18 3 1 200 ffff80dd753345c0 lnxhipwq lnxhipwq
0 17 3 1 200 ffff80dd75334180 lnxrcugc lnxrcugc
0 16 3 0 200 ffff80dd753539c0 sysmon smtaskq
0 15 3 1 200 ffff80dd75353580 pmfsuspend pmfsuspend
0 14 3 0 200 ffff80dd75353140 pmfevent pmfevent
0 13 3 1 200 ffff80dd7535e980 sopendfree sopendfr
0 12 3 0 200 ffff80dd7535e540 ifwdog ifwdog
0 11 3 0 200 ffff80dd7535e100 iflnkst iflnkst
0 10 3 1 200 ffff80dd76393940 nfssilly nfssilly
0 9 3 0 200 ffff80dd76393500 vdrain vdrain
0 8 3 1 200 ffff80dd763930c0 modunload mod_unld
0 7 3 0 200 ffff80dd763ba900 xcall/0 xcall
0 6 1 0 200 ffff80dd763ba4c0 softser/0
0 5 1 0 200 ffff80dd763ba080 softclk/0
0 4 1 0 200 ffff80dd763e98c0 softbio/0
0 3 1 0 200 ffff80dd763e9480 softnet/0
0 2 1 0 201 ffff80dd763e9040 idle/0
0 > 0 7 0 240 ffffffff86742a40 swapper
[Locks tracked through LWPs]

****** LWP 1486.1616 (syz-executor.2) @ 0xffff80dc60d78900, l_stat=7

*** Locks held:

* Lock 0 (initialized at netbsd:vcache_alloc+0xba sys/kern/vfs_vnode.c:1391)
lock address : ffff80dc60da09c0
type : sleep/adaptive
initialized : netbsd:vcache_alloc+0xba
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 1
relevant lwp : 0xffff80dc60d78900 last held: 0xffff80dc60d78900
last locked* : netbsd:genfs_lock+0x220
unlocked : netbsd:genfs_unlock+0x50
owner/count : 0xffff80dc60d78900 flags : 0x0000000000000004
Turnstile: no active turnstile for this lock.

*** Locks wanted: none

****** LWP 742.742 (dhcpcd) @ 0xffff80dc52227940, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:module_hook_init+0x1c sys/kern/kern_module_hook.c:132)
lock address : netbsd:module_hook
type : sleep/adaptive
initialized : netbsd:module_hook_init+0x1c
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 0
relevant lwp : 0xffff80dc52227940 last held: 000000000000000000
last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 466.466 (dhcpcd) @ 0xffff80dc515f5100, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:module_hook_init+0x1c sys/kern/kern_module_hook.c:132)
lock address : netbsd:module_hook
type : sleep/adaptive
initialized : netbsd:module_hook_init+0x1c
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffff80dc515f5100 last held: 000000000000000000
last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 485.485 (dhcpcd) @ 0xffff80dc513172c0, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:module_hook_init+0x1c sys/kern/kern_module_hook.c:132)
lock address : netbsd:module_hook
type : sleep/adaptive
initialized : netbsd:module_hook_init+0x1c
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffff80dc513172c0 last held: 000000000000000000
last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 291.291 (dhcpcd) @ 0xffff80dc51556300, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:module_hook_init+0x1c sys/kern/kern_module_hook.c:132)
lock address : netbsd:module_hook
type : sleep/adaptive
initialized : netbsd:module_hook_init+0x1c
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffff80dc51556300 last held: 000000000000000000
last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 0.11 (iflnkst) @ 0xffff80dd7535e100, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:module_hook_init+0x1c sys/kern/kern_module_hook.c:132)
lock address : netbsd:module_hook
type : sleep/adaptive
initialized : netbsd:module_hook_init+0x1c
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffff80dd7535e100 last held: 000000000000000000
last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 0.5 (softclk/0) @ 0xffff80dd763ba080, l_stat=1

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:module_hook_init+0x1c sys/kern/kern_module_hook.c:132)
lock address : netbsd:module_hook
type : sleep/adaptive
initialized : netbsd:module_hook_init+0x1c
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffff80dd763ba080 last held: 000000000000000000
last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 0.0 (swapper) @ 0xffffffff86742a40, l_stat=7

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:module_hook_init+0x1c sys/kern/kern_module_hook.c:132)
lock address : netbsd:module_hook
type : sleep/adaptive
initialized : netbsd:module_hook_init+0x1c
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffffffff86742a40 last held: 000000000000000000
last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

[Locks tracked through CPUs]

******* Locks held on cpu1:

* Lock 0 (initialized at netbsd:kprintf_init+0x72 sys/kern/subr_prf.c:155)
lock address : netbsd:kprintf_mtx
type : spin
initialized : netbsd:kprintf_init+0x72
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 1
relevant lwp : 0xffff80dc60d78900 last held: 0xffff80dc60d78900
last locked* : netbsd:kprintf_lock+0x50
unlocked : netbsd:kprintf_unlock+0x70
owner field : 0x0000000000000800 wait/spin: 0/1

PAGE FLAG PQ UOBJECT UANON
0xffff820000007180 0045 00000000 0x0 0x0
0xffff820000007200 0045 00000000 0x0 0x0
0xffff820000007280 0045 00000000 0x0 0x0
0xffff820000007300 0045 00000000 0x0 0x0
0xffff820000007380 0045 00000000 0x0 0x0
0xffff820000007400 0045 00000000 0x0 0x0
0xffff820000007480 0045 00000000 0x0 0x0
0xffff820000007500 0045 00000000 0x0 0x0
0xffff820000007580 0045 00000000 0x0 0x0
0xffff820000007600 0045 00000000 0x0 0x0
0xffff820000007680 0041 00000000 0x0 0x0
0xffff820000007700 0041 00000000 0x0 0x0
0xffff820000007780 0041 00000000 0x0 0x0
0xffff820000007800 0041 00000000 0x0 0x0
0xffff820000007880 0045 00000000 0x0 0x0
0xffff820000007900 0045 00000000 0x0 0x0
0xffff820000007980 0041 00000000 0x0 0x0
0xffff820000007a00 0041 00000000 0x0 0x0
0xffff820000007a80 0041 00000000 0x0 0x0
0xffff820000007b00 0041 00000000 0x0 0x0
0xffff820000007b80 0041 00000000 0x0 0x0
0xffff820000007c00 0041 00000000 0x0 0x0
0xffff820000007c80 0041 00000000 0x0 0x0
0xffff820000007d00 0041 00000000 0x0 0x0
0xffff820000007d80 0041 00000000 0x0 0x0
0xffff820000007e00 0041 00000000 0x0 0x0
0xffff820000007e80 0041 00000000 0x0 0x0
0xffff820000007f00 0041 00000000 0x0 0x0
0xffff820000007f80 0041 00000000 0x0 0x0
0xffff820000008000 0041 00000000 0x0 0x0
0xffff820000008080 0041 00000000 0x0 0x0
0xffff820000008100 0041 00000000 0x0 0x0
0xffff820000008180 0041 00000000 0x0 0x0
0xffff820000008200 0041 00000000 0x0 0x0
0xffff820000008280 0041 00000000 0x0 0x0
0xffff820000008300 0041 00000000 0x0 0x0
0xffff820000008380 0041 00000000 0x0 0x0
0xffff820000008400 0041 00000000 0x0 0x0
0xffff820000008480 0041 00000000 0x0 0x0
0xffff820000008500 0041 00000000 0x0 0x0
0xffff820000008580 0041 00000000 0x0 0x0
0xffff820000008600 0045 00000000 0x0 0x0
0xffff820000008680 0041 00000000 0x0 0x0
0xffff820000008700 0041 00000000 0x0 0x0
0xffff820000008780 0041 00000000 0x0 0x0
0xffff820000008800 0045 00000000 0x0 0x0
0xffff820000008880 0041 00000000 0x0 0x0
0xffff820000008900 0041 00000000 0x0 0x0
0xffff820000008980 0041 00000000 0x0 0x0
0xffff820000008a00 0041 00000000 0x0 0x0
0xffff820000008a80 0041 00000000 0x0 0x0
0xffff820000008b00 0041 00000000 0x0 0x0
0xffff820000008b80 0041 00000000 0x0 0x0
0xffff820000008c00 0041 00000000 0x0 0x0
0xffff820000008c80 0041 00000000 0x0 0x0
0xffff820000008d00 0041 00000000 0x0 0x0
0xffff820000008d80 0041 00000000 0x0 0x0
0xffff820000008e00 0041 00000000 0x0 0x0
0xffff820000008e80 0041 00000000 0x0 0x0
0xffff820000008f00 0041 00000000 0x0 0x0
0xffff820000008f80 0041 00000000 0x0 0x0
0xffff820000009000 0041 00000000 0x0 0x0
0xffff820000009080 0041 00000000 0x0 0x0
0xffff820000009100 0041 00000000 0x0 0x0
0xffff820000009180 0041 00000000 0x0 0x0
0xffff820000009200 0041 00000000 0x0 0x0
0xffff820000009280 0041 00000000 0x0 0x0
0xffff820000009300 0041 00000000 0x0 0x0
0xffff820000009380 0041 00000000 0x0 0x0
0xffff820000009400 0041 00000000 0x0 0x0
0xffff820000009480 0045 00000000 0x0 0x0
0xffff820000009500 0041 00000000 0x0 0x0
0xffff820000009580 0041 00000000 0x0 0x0
0xffff820000009600 0041 00000000 0x0 0x0
0xffff820000009680 0041 00000000 0x0 0x0
0xffff820000009700 0041 00000000 0x0 0x0
0xffff820000009780 0041 00000000 0x0 0x0
0xffff820000009800 0041 00000000 0x0 0x0
0xffff820000009880 0041 00000000 0x0 0x0
0xffff820000009900 0041 00000000 0x0 0x0
0xffff820000009980 0041 00000000 0x0 0x0
0xffff820000009a00 0041 00000000 0x0 0x0
0xffff820000009a80 0045 00000000 0x0 0x0
0xffff820000009b00 0041 00000000 0x0 0x0
0xffff820000009b80 0041 00000000 0x0 0x0
0xffff820000009c00 0041 00000000 0x0 0x0
0xffff820000009c80 0041 00000000 0x0 0x0
0xffff820000009d00 0041 00000000 0x0 0x0
0xffff820000009d80 0041 00000000 0x0 0x0
0xffff820000009e00 0041 00000000 0x0 0x0
0xffff820000009e80 0041 00000000 0x0 0x0
0xffff820000009f00 0041 00000000 0x0 0x0
0xffff820000009f80 0041 00000000 0x0 0x0
0xffff82000000a000 0041 00000000 0x0 0x0
0xffff82000000a080 0041 00000000 0x0 0x0
0xffff82000000a100 0041 00000000 0x0 0x0
0xffff82000000a180 0041 00000000 0x0 0x0
0xffff82000000a200 0041 00000000 0x0 0x0
0xffff82000000a280 0041 00000000 0x0 0x0
0xffff82000000a300 0041 00000000 0x0 0x0
0xffff82000000a380 0041 00000000 0x0 0x0
0xffff82000000a400 0041 00000000 0x0 0x0
0xffff82000000a480 0041 00000000 0x0 0x0
0xffff82000000a500 0041 00000000 0x0 0x0
0xffff82000000a580 0041 00000000 0x0 0x0
0xffff82000000a600 0041 00000000 0x0 0x0
0xffff82000000a680 0041 00000000 0x0 0x0
0xffff82000000a700 0041 00000000 0x0 0x0
0xffff82000000a780 0041 00000000 0x0 0x0
0xffff82000000a800 0041 00000000 0x0 0x0
0xffff82000000a880 0041 00000000 0x0 0x0
0xffff82000000a900 0041 00000000 0x0 0x0
0xffff82000000a980 0041 00000000 0x0 0x0
0xffff82000000aa00 0041 00000000 0x0 0x0
0xffff82000000aa80 0041 00000000 0x0 0x0
0xffff82000000ab00 0041 00000000 0x0 0x0
0xffff82000000ab80 0041 00000000 0x0 0x0
0xffff82000000ac00 0041 00000000 0x0 0x0
0xffff82000000ac80 0041 00000000 0x0 0x0
0xffff82000000ad00 0041 00000000 0x0 0x0
0xffff82000000ad80 0041 00000000 0x0 0x0
0xffff82000000ae00 0041 00000000 0x0 0x0
0xffff82000000ae80 0045 00000000 0x0 0x0
0xffff82000000af00 0045 00000000 0x0 0x0
0xffff82000000af80 0045 00000000 0x0 0x0
0xffff82000000b000 0041 00000000 0x0 0x0
0xffff82000000b080 0041 00000000 0x0 0x0
0xffff82000000b100 0041 00000000 0x0 0x0
0xffff82000000b180 0045 00000000 0x0 0x0
0xffff82000000b200 0041 00000000 0x0 0x0
0xffff82000000b280 0045 00000000 0x0 0x0
0xffff82000000b300 0045 00000000 0x0 0x0
0xffff82000000b380 0045 00000000 0x0 0x0
0xffff82000000b400 0041 00000000 0x0 0x0
0xffff82000000b480 0041 00000000 0x0 0x0
0xffff82000000b500 0045 00000000 0x0 0x0
0xffff82000000b580 0045 00000000 0x0 0x0
0xffff82000000b600 0045 00000000 0x0 0x0
0xffff82000000b680 0045 00000000 0x0 0x0
0xffff82000000b700 0045 00000000 0x0 0x0
0xffff82000000b780 0045 00000000 0x0 0x0
0xffff82000000b800 0045 00000000 0x0 0x0
0xffff82000000b880 0041 00000000 0x0 0x0
0xffff82000000b900 0045 00000000 0x0 0x0
0xffff82000000b980 0045 00000000 0x0 0x0
0xffff82000000ba00 0045 00000000 0x0 0x0
0xffff82000000ba80 0045 00000000 0x0 0x0
0xffff82000000bb00 0045 00000000 0x0 0x0
0xffff82000000bb80 0045 00000000 0x0 0x0
0xffff82000000bc00 0045 00000000 0x0 0x0
0xffff82000000bc80 0041 00000000 0x0 0x0
0xffff82000000bd00 0045 00000000 0x0 0x0
0xffff82000000bd80 0045 00000000 0x0 0x0
0xffff82000000be00 0045 00000000 0x0 0x0
0xffff82000000be80 0045 00000000 0x0 0x0
0xffff82000000bf00 0045 00000000 0x0 0x0
0xffff82000000bf80 0045 00000000 0x0 0x0
0xffff82000000c000 0045 00000000 0x0 0x0
0xffff82000000c080 0041 00000000 0x0 0x0
0xffff82000000c100 0045 00000000 0x0 0x0
0xffff82000000c180 0045 00000000 0x0 0x0
0xffff82000000c200 0045 00000000 0x0 0x0
0xffff82000000c280 0045 00000000 0x0 0x0
0xffff82000000c300 0045 00000000 0x0 0x0
0xffff82000000c380 0045 00000000 0x0 0x0
0xffff82000000c400 0045 00000000 0x0 0x0
0xffff82000000c480 0045 00000000 0x0 0x0
0xffff82000000c500 0045 00000000 0x0 0x0
0xffff82000000c580 0045 00000000 0x0 0x0
0xffff82000000c600 0045 00000000 0x0 0x0
0xffff82000000c680 0045 00000000 0x0 0x0
0xffff82000000c700 0041 00000000 0x0 0x0
0xffff82000000c780 0041 00000000 0x0 0x0
0xffff82000000c800 0045 00000000 0x0 0x0
0xffff82000000c880 0045 00000000 0x0 0x0
0xffff82000000c900 0045 00000000 0x0 0x0
0xffff82000000c980 0045 00000000 0x0 0x0
0xffff82000000ca00 0045 00000000 0x0 0x0
0xffff82000000ca80 0041 00000000 0x0 0x0
0xffff82000000cb00 0041 00000000 0x0 0x0
0xffff82000000cb80 0041 00000000 0x0 0x0
0xffff82000000cc00 0045 00000000 0x0 0x0
0xffff82000000cc80 0045 00000000 0x0 0x0
0xffff82000000cd00 0045 00000000 0x0 0x0
0xffff82000000cd80 0041 00000000 0x0 0x0
0xffff82000000ce00 0045 00000000 0x0 0x0
0xffff82000000ce80 0041 00000000 0x0 0x0
0xffff82000000cf00 0041 00000000 0x0 0x0
0xffff82000000cf80 0041 00000000 0x0 0x0
0xffff82000000d000 0041 00000000 0x0 0x0
0xffff82000000d080 0045 00000000 0x0 0x0
0xffff82000000d100 0041 00000000 0x0 0x0
0xffff82000000d180 0041 00000000 0x0 0x0
0xffff82000000d200 0041 00000000 0x0 0x0
0xffff82000000d280 0041 00000000 0x0 0x0
0xffff82000000d300 0045 00000000 0x0 0x0
0xffff82000000d380 0041 00000000 0x0 0x0
0xffff82000000d400 0041 00000000 0x0 0x0
0xffff82000000d480 0045 00000000 0x0 0x0
0xffff82000000d500 0041 00000000 0x0 0x0
0xffff82000000d580 0041 00000000 0x0 0x0
0xffff82000000d600 0041 00000000 0x0 0x0
0xffff82000000d680 0045 00000000 0x0 0x0
0xffff82000000d700 0041 00000000 0x0 0x0
0xffff82000000d780 0045 00000000 0x0 0x0
0xffff82000000d800 0041 00000000 0x0 0x0
0xffff82000000d880 0045 00000000 0x0 0x0
0xffff82000000d900 0041 00000000 0x0 0x0
0xffff82000000d980 0041 00000000 0x0 0x0
0xffff82000000da00 0041 00000000 0x0 0x0
0xffff82000000da80 0041 00000000 0x0 0x0
0xffff82000000db00 0045 00000000 0x0 0x0
0xffff82000000db80 0045 00000000 0x0 0x0
0xffff82000000dc00 0041 00000000 0x0 0x0
0xffff82000000dc80 0041 00000000 0x0 0x0
0xffff82000000dd00 0041 00000000 0x0 0x0
0xffff82000000dd80 0041 00000000 0x0 0x0
0xffff82000000de00 0041 00000000 0x0 0x0
0xffff82000000de80 0041 00000000 0x0 0x0
0xffff82000000df00 0045 00000000 0x0 0x0
0xffff82000000df80 0045 00000000 0x0 0x0
0xffff82000000e000 0045 00000000 0x0 0x0
0xffff82000000e080 0041 00000000 0x0 0x0
0xffff82000000e100 0041 00000000 0x0 0x0
0xffff82000000e180 0045 00000000 0x0 0x0
0xffff82000000e200 0041 00000000 0x0 0x0
0xffff82000000e280 0045 00000000 0x0 0x0
0xffff82000000e300 0045 00000000 0x0 0x0
0xffff82000000e380 0041 00000000 0x0 0x0
0xffff82000000e400 0045 00000000 0x0 0x0
0xffff82000000e480 0041 00000000 0x0 0x0
0xffff82000000e500 0045 00000000 0x0 0x0
0xffff82000000e580 0041 00000000 0x0 0x0
0xffff82000000e600 0045 00000000 0x0 0x0
0xffff82000000e680 0041 00000000 0x0 0x0
0xffff82000000e700 0041 00000000 0x0 0x0
0xffff82000000e780 0041 00000000 0x0 0x0
0xffff82000000e800 0045 00000000 0x0 0x0
0xffff82000000e880 0041 00000000 0x0 0x0
0xffff82000000e900 0041 00000000 0x0 0x0
0xffff82000000e980 0041 00000000 0x0 0x0
0xffff82000000ea00 0041 00000000 0x0 0x0
0xffff82000000ea80 0045 00000000 0x0 0x0
0xffff82000000eb00 0041 00000000 0x0 0x0
0xffff82000000eb80 0045 00000000 0x0 0x0
0xffff82000000ec00 0041 00000000 0x0 0x0
0xffff82000000ec80 0045 00000000 0x0 0x0
0xffff82000000ed00 0041 00000000 0x0 0x0
0xffff82000000ed80 0041 00000000 0x0 0x0
0xffff82000000ee00 0041 00000000 0x0 0x0
0xffff82000000ee80 0041 00000000 0x0 0x0
0xffff82000000ef00 0041 00000000 0x0 0x0
0xffff82000000ef80 0041 00000000 0x0 0x0
0xffff82000000f000 0041 00000000 0x0 0x0
0xffff82000000f080 0045 00000000 0x0 0x0
0xffff82000000f100 0041 00000000 0x0 0x0
0xffff82000000f180 0041 00000000 0x0 0x0
0xffff82000000f200 0041 00000000 0x0 0x0
0xffff82000000f280 0045 00000000 0x0 0x0
0xffff82000000f300 0041 00000000 0x0 0x0
0xffff82000000f380 0041 00000000 0x0 0x0
0xffff82000000f400 0045 00000000 0x0 0x0
0xffff82000000f480 0041 00000000 0x0 0x0
0xffff82000000f500 0041 00000000 0x0 0x0
0xffff82000000f580 0041 00000000 0x0 0x0
0xffff82000000f600 0041 00000000 0x0 0x0
0xffff82000000f680 0041 00000000 0x0 0x0
0xffff82000000f700 0041 00000000 0x0 0x0
0xffff82000000f780 0041 00000000 0x0 0x0
0xffff82000000f800 0041 00000000 0x0 0x0
0xffff82000000f880 0045 00000000 0x0 0x0
0xffff82000000f900 0041 00000000 0x0 0x0
0xffff82000000f980 0045 00000000 0x0 0x0
0xffff82000000fa00 0041 00000000 0x0 0x0
0xffff82000000fa80 0041 00000000 0x0 0x0
0xffff82000000fb00 0041 00000000 0x0 0x0
0xffff82000000fb80 0041 00000000 0x0 0x0
0xffff82000000fc00 0045 00000000 0x0 0x0
0xffff82000000fc80 0041 00000000 0x0 0x0
0xffff82000000fd00 0045 00000000 0x0 0x0
0xffff82000000fd80 0041 00000000 0x0 0x0
0xffff82000000fe00 0041 00000000 0x0 0x0
0xffff82000000fe80 0041 00000000 0x0 0x0
0xffff82000000ff00 0041 00000000 0x0 0x0
0xffff82000000ff80 0041 00000000 0x0 0x0
0xffff820000010000 0041 00000000 0x0 0x0
0xffff820000010080 0045 00000000 0x0 0x0
0xffff820000010100 0041 00000000 0x0 0x0
0xffff820000010180 0045 00000000 0x0 0x0
0xffff820000010200 0045 00000000 0x0 0x0
0xffff820000010280 0041 00000000 0x0 0x0
0xffff820000010300 0041 00000000 0x0 0x0
0xffff820000010380 0041 00000000 0x0 0x0
0xffff820000010400 0041 00000000 0x0 0x0
0xffff820000010480 0041 00000000 0x0 0x0
0xffff820000010500 0045 00000000 0x0 0x0
0xffff820000010580 0041 00000000 0x0 0x0
0xffff820000010600 0041 00000000 0x0 0x0
0xffff820000010680 0045 00000000 0x0 0x0
0xffff820000010700 0041 00000000 0x0 0x0
0xffff820000010780 0041 00000000 0x0 0x0
0xffff820000010800 0041 00000000 0x0 0x0
0xffff820000010880 0041 00000000 0x0 0x0
0xffff820000010900 0041 00000000 0x0 0x0
0xffff820000010980 0045 00000000 0x0 0x0
0xffff820000010a00 0045 00000000 0x0 0x0
0xffff820000010a80 0041 00000000 0x0 0x0
0xffff820000010b00 0041 00000000 0x0 0x0
0xffff820000010b80 0041 00000000 0x0 0x0
0xffff820000010c00 0041 00000000 0x0 0x0
0xffff820000010c80 0045 00000000 0x0 0x0
0xffff820000010d00 0041 00000000 0x0 0x0
0xffff820000010d80 0041 00000000 0x0 0x0
0xffff820000010e00 0041 00000000 0x0 0x0
0xffff820000010e80 0045 00000000 0x0 0x0
0xffff820000010f00 0041 00000000 0x0 0x0
0xffff820000010f80 0041 00000000 0x0 0x0
0xffff820000011000 0041 00000000 0x0 0x0
0xffff820000011080 0041 00000000 0x0 0x0
0xffff820000011100 0041 00000000 0x0 0x0
0xffff820000011180 0041 00000000 0x0 0x0
0xffff820000011200 0045 00000000 0x0 0x0
0xffff820000011280 0041 00000000 0x0 0x0
0xffff820000011300 0041 00000000 0x0 0x0
0xffff820000011380 0041 00000000 0x0 0x0
0xffff820000011400 0041 00000000 0x0 0x0
0xffff820000011480 0045 00000000 0x0 0x0
0xffff820000011500 0045 00000000 0x0 0x0
0xffff820000011580 0041 00000000 0x0 0x0
0xffff820000011600 0041 00000000 0x0 0x0
0xffff820000011680 0041 00000000 0x0 0x0
0xffff820000011700 0045 00000000 0x0 0x0
0xffff820000011780 0045 00000000 0x0 0x0
0xffff820000011800 0041 00000000 0x0 0x0
0xffff820000011880 0041 00000000 0x0 0x0
0xffff820000011900 0041 00000000 0x0 0x0
0xffff820000011980 0041 00000000 0x0 0x0
0xffff820000011a00 0041 00000000 0x0 0x0
0xffff820000011a80 0041 00000000 0x0 0x0
0xffff820000011b00 0041 00000000 0x0 0x0
0xffff820000011b80 0041 00000000 0x0 0x0
0xffff820000011c00 0041 00000000 0x0 0x0
0xffff820000011c80 0041 00000000 0x0 0x0
0xffff820000011d00 0041 00000000 0x0 0x0
0xffff820000011d80 0041 00000000 0x0 0x0
0xffff820000011e00 0045 00000000 0x0 0x0
0xffff820000011e80 0041 00000000 0x0 0x0
0xffff820000011f00 0041 00000000 0x0 0x0
0xffff820000011f80 0041 00000000 0x0 0x0
0xffff820000012000 0041 00000000 0x0 0x0
0xffff820000012080 0041 00000000 0x0 0x0
0xffff820000012100 0045 00000000 0x0 0x0
0xffff820000012180 0045 00000000 0x0 0x0
0xffff820000012200 0041 00000000 0x0 0x0
0xffff820000012280 0045 00000000 0x0 0x0
0xffff820000012300 0041 00000000 0x0 0x0
0xffff820000012380 0041 00000000 0x0 0x0
0xffff820000012400 0041 00000000 0x0 0x0
0xffff820000012480 0041 00000000 0x0 0x0
0xffff820000012500 0041 00000000 0x0 0x0
0xffff820000012580 0041 00000000 0x0 0x0
0xffff820000012600 0041 00000000 0x0 0x0
0xffff820000012680 0041 00000000 0x0 0x0
0xffff820000012700 0041 00000000 0x0 0x0
0xffff820000012780 0041 00000000 0x0 0x0
0xffff820000012800 0041 00000000 0x0 0x0
0xffff820000012880 0041 00000000 0x0 0x0
0xffff820000012900 0041 00000000 0x0 0x0
0xffff820000012980 0041 00000000 0x0 0x0
0xffff820000012a00 0041 00000000 0x0 0x0
0xffff820000012a80 0041 00000000 0x0 0x0
0xffff820000012b00 0041 00000000 0x0 0x0
0xffff820000012b80 0041 00000000 0x0 0x0
0xffff820000012c00 0041 00000000 0x0 0x0
0xffff820000012c80 0041 00000000 0x0 0x0
0xffff820000012d00 0041 00000000 0x0 0x0
0xffff820000012d80 0041 00000000 0x0 0x0
0xffff820000012e00 0041 00000000 0x0 0x0
0xffff820000012e80 0041 00000000 0x0 0x0
0xffff820000012f00 0041 00000000 0x0 0x0
0xffff820000012f80 0041 00000000 0x0 0x0
0xffff820000013000 0041 00000000 0x0 0x0
0xffff820000013080 0045 00000000 0x0 0x0
0xffff820000013100 0001 00000000 0x0 0x0
0xffff820000013180 0001 00000000 0x0 0x0
0xffff820000013200 0001 00000000 0x0 0x0
0xffff820000013280 0001 00000000 0x0 0x0
0xffff820000013300 0001 00000000 0x0 0x0
0xffff820000013380 0001 00000000 0x0 0x0
0xffff820000013400 0001 00000000 0x0 0x0
0xffff820000013480 0001 00000000 0x0 0x0
0xffff820000013500 0001 00000000 0x0 0x0
0xffff820000013580 0001 00000000 0x0 0x0
0xffff820000013600 0001 00000000 0x0 0x0
0xffff820000013680 0001 00000000 0x0 0x0
0xffff820000013700 0001 00000000 0x0 0x0
0xffff820000013780 0001 00000000 0x0 0x0
0xffff820000013800 0001 00000000 0x0 0x0
0xffff820000013880 0001 00000000 0x0 0x0
0xffff820000013900 0001 00000000 0x0 0x0
0xffff820000013980 0001 00000000 0x0 0x0
0xffff820000013a00 0001 00000000 0x0 0x0
0xffff820000013a80 0001 00000000 0x0 0x0
0xffff820000013b00 0001 00000000 0x0 0x0
0xffff820000013b80 0001 00000000 0x0 0x0
0xffff820000013c00 0001 00000000 0x0 0x0
0xffff820000013c80 0001 00000000 0x0 0x0
0xffff820000013d00 0001 00000000 0x0 0x0
0xffff820000013d80 0001 00000000 0x0 0x0
0xffff820000013e00 0001 00000000 0x0 0x0
0xffff820000013e80 0001 00000000 0x0 0x0
0xffff820000013f00 0001 00000000 0x0 0x0
0xffff820000013f80 0001 00000000 0x0 0x0
0xffff820000014000 0001 00000000 0x0 0x0
0xffff820000014080 0001 00000000 0x0 0x0
0xffff820000014100 0001 00000000 0x0 0x0
0xffff820000014180 0001 00000000 0x0 0x0
0xffff820000014200 0001 00000000 0x0 0x0
0xffff820000014280 0001 00000000 0x0 0x0
0xffff820000014300 0001 00000000 0x0 0x0
0xffff820000014380 0001 00000000 0x0 0x0
0xffff820000014400 0001 00000000 0x0 0x0
0xffff820000014480 0001 00000000 0x0 0x0
0xffff820000014500 0001 00000000 0x0 0x0
0xffff820000014580 0001 00000000 0x0 0x0
0xffff820000014600 0001 00000000 0x0 0x0
0xffff820000014680 0001 00000000 0x0 0x0
0xffff820000014700 0001 00000000 0x0 0x0
0xffff820000014780 0001 00000000 0x0 0x0
0xffff820000014800 0001 00000000 0x0 0x0
0xffff820000014880 0001 00000000 0x0 0x0
0xffff820000014900 0001 00000000 0x0 0x0
0xffff820000014980 0001 00000000 0x0 0x0
0xffff820000014a00 0001 00000000 0x0 0x0
0xffff820000014a80 0001 00000000 0x0 0x0
0xffff820000014b00 0001 00000000 0x0 0x0
0xffff820000014b80 0001 00000000 0x0 0x0
0xffff820000014c00 0041 00000000 0x0 0x0
0xffff820000014c80 0041 00000000 0x0 0x0
0xffff820000014d00 0041 00000000 0x0 0x0
0xffff820000014d80 0041 00000000 0x0 0x0
0xffff820000014e00 0041 00000000 0x0 0x0
0xffff820000014e80 0041 00000000 0x0 0x0
0xffff820000014f00 0041 00000000 0x0 0x0
0xffff820000014f80 0041 00000000 0x0 0x0
0xffff820000015000 0041 00000000 0x0 0x0
0xffff820000015080 0041 00000000 0x0 0x0
0xffff820000015100 0041 00000000 0x0 0x0
0xffff820000015180 0041 00000000 0x0 0x0
0xffff820000015200 0041 00000000 0x0 0x0
0xffff820000015280 0041 00000000 0x0 0x0
0xffff820000015300 0041 00000000 0x0 0x0
0xffff820000015380 0041 00000000 0x0 0x0
0xffff820000015400 0041 00000000 0x0 0x0
0xffff820000015480 0041 00000000 0x0 0x0
0xffff820000015500 0041 00000000 0x0 0x0
0xffff820000015580 0041 00000000 0x0 0x0
0xffff820000015600 0041 00000000 0x0 0x0
0xffff820000015680 0041 00000000 0x0 0x0
0xffff820000015700 0041 00000000 0x0 0x0
0xffff820000015780 0041 00000000 0x0 0x0
0xffff820000015800 0041 00000000 0x0 0x0
0xffff820000015880 0041 00000000 0x0 0x0
0xffff820000015900 0041 00000000 0x0 0x0
0xffff820000015980 0041 00000000 0x0 0x0
0xffff820000015a00 0041 00000000 0x0 0x0
0xffff820000015a80 0041 00000000 0x0 0x0
0xffff820000015b00 0041 00000000 0x0 0x0
0xffff820000015b80 0041 00000000 0x0 0x0
0xffff820000015c00 0041 00000000 0x0 0x0
0xffff820000015c80 0041 00000000 0x0 0x0
0xffff820000015d00 0041 00000000 0x0 0x0
0xffff820000015d80 0041 00000000 0x0 0x0
0xffff820000015e00 0041 00000000 0x0 0x0
0xffff820000015e80 0041 00000000 0x0 0x0
0xffff820000015f00 0041 00000000 0x0 0x0
0xffff820000015f80 0041 00000000 0x0 0x0
0xffff820000016000 0041 00000000 0x0 0x0
0xffff820000016080 0041 00000000 0x0 0x0
0xffff820000016100 0001 00000000 0x0 0x0
0xffff820000016180 0001 00000000 0x0 0x0
0xffff820000016200 0001 00000000 0x0 0x0
0xffff820000016280 0001 00000000 0x0 0x0
0xffff820000016300 0001 00000000 0x0 0x0
0xffff820000016380 0001 00000000 0x0 0x0
0xffff820000016400 0001 00000000 0x0 0x0
0xffff820000016480 0001 00000000 0x0 0x0
0xffff820000016500 0001 00000000 0x0 0x0
0xffff820000016580 0001 00000000 0x0 0x0
0xffff820000016600 0001 00000000 0x0 0x0
0xffff820000016680 0001 00000000 0x0 0x0
0xffff820000016700 0001 00000000 0x0 0x0
0xffff820000016780 0001 00000000 0x0 0x0
0xffff820000016800 0001 00000000 0x0 0x0
0xffff820000016880 0001 00000000 0x0 0x0
0xffff820000016900 0001 00000000 0x0 0x0
0xffff820000016980 0001 00000000 0x0 0x0
0xffff820000016a00 0001 00000000 0x0 0x0
0xffff820000016a80 0001 00000000 0x0 0x0
0xffff820000016b00 0001 00000000 0x0 0x0
0xffff820000016b80 0001 00000000 0x0 0x0
0xffff820000016c00 0001 00000000 0x0 0x0
0xffff820000016c80 0001 00000000 0x0 0x0
0xffff820000016d00 0001 00000000 0x0 0x0
0xffff820000016d80 0001 00000000 0x0 0x0
0xffff820000016e00 0001 00000000 0x0 0x0
0xffff820000016e80 0001 00000000 0x0 0x0
0xffff820000016f00 0001 00000000 0x0 0x0
0xffff820000016f80 0001 00000000 0x0 0x0
0xffff820000017000 0001 00000000 0x0 0x0
0xffff820000017080 0001 00000000 0x0 0x0
0xffff820000017100 0001 00000000 0x0 0x0
0xffff820000017180 0001 00000000 0x0 0x0
0xffff820000017200 0001 00000000 0x0 0x0
0xffff820000017280 0001 00000000 0x0 0x0
0xffff820000017300 0001 00000000 0x0 0x0
0xffff820000017380 0001 00000000 0x0 0x0
0xffff820000017400 0001 00000000 0x0 0x0
0xffff820000017480 0001 00000000 0x0 0x0
0xffff820000017500 0001 00000000 0x0 0x0
0xffff820000017580 0001 00000000 0x0 0x0
0xffff820000017600 0001 00000000 0x0 0x0
0xffff820000017680 0001 00000000 0x0 0x0
0xffff820000017700 0001 00000000 0x0 0x0
0xffff820000017780 0001 00000000 0x0 0x0
0xffff820000017800 0001 00000000 0x0 0x0
0xffff820000017880 0001 00000000 0x0 0x0
0xffff820000017900 0001 00000000 0x0 0x0
0xffff820000017980 0001 00000000 0x0 0x0
0xffff820000017a00 0001 00000000 0x0 0x0
0xffff820000017a80 0001 00000000 0x0 0x0
0xffff820000017b00 0001 00000000 0x0 0x0
0xffff820000017b80 0001 00000000 0x0 0x0
0xffff820000017c00 0041 00000000 0x0 0x0
0xffff820000017c80 0041 00000000 0x0 0x0
0xffff820000017d00 0041 00000000 0x0 0x0
0xffff820000017d80 0041 00000000 0x0 0x0
0xffff820000017e00 0041 00000000 0x0 0x0
0xffff820000017e80 0041 00000000 0x0 0x0
0xffff820000017f00 0041 00000000 0x0 0x0
0xffff820000017f80 0041 00000000 0x0 0x0
0xffff820000018000 0041 00000000 0x0 0x0
0xffff820000018080 0041 00000000 0x0 0x0
0xffff820000018100 0041 00000000 0x0 0x0
0xffff820000018180 0041 00000000 0x0 0x0
0xffff820000018200 0041 00000000 0x0 0x0
0xffff820000018280 0041 00000000 0x0 0x0
0xffff820000018300 0041 00000000 0x0 0x0
0xffff820000018380 0041 00000000 0x0 0x0
0xffff820000018400 0041 00000000 0x0 0x0
0xffff820000018480 0041 00000000 0x0 0x0
0xffff820000018500 0041 00000000 0x0 0x0
0xffff820000018580 0041 00000000 0x0 0x0
0xffff820000018600 0041 00000000 0x0 0x0
0xffff820000018680 0041 00000000 0x0 0x0
0xffff820000018700 0041 00000000 0x0 0x0
0xffff820000018780 0041 00000000 0x0 0x0
0xffff820000018800 0041 00000000 0x0 0x0
0xffff820000018880 0041 00000000 0x0 0x0
0xffff820000018900 0041 00000000 0x0 0x0
0xffff820000018980 0041 00000000 0x0 0x0
0xffff820000018a00 0041 00000000 0x0 0x0
0xffff820000018a80 0041 00000000 0x0 0x0
0xffff820000018b00 0041 00000000 0x0 0x0
0xffff820000018b80 0041 00000000 0x0 0x0
0xffff820000018c00 0041 00000000 0x0 0x0
0xffff820000018c80 0041 00000000 0x0 0x0
0xffff820000018d00 0041 00000000 0x0 0x0
0xffff820000018d80 0041 00000000 0x0 0x0
0xffff820000018e00 0041 00000000 0x0 0x0
0xffff820000018e80 0041 00000000 0x0 0x0
0xffff820000018f00 0041 00000000 0x0 0x0
0xffff820000018f80 0041 00000000 0x0 0x0
0xffff820000019000 0041 00000000 0x0 0x0
0xffff820000019080 0041 00000000 0x0 0x0
0xffff820000019100 0001 00000000 0x0 0x0
0xffff820000019180 0001 00000000 0x0 0x0
0xffff820000019200 0001 00000000 0x0 0x0
0xffff820000019280 0001 00000000 0x0 0x0
0xffff820000019300 0001 00000000 0x0 0x0
0xffff820000019380 0001 00000000 0x0 0x0
0xffff820000019400 0001 00000000 0x0 0x0
0xffff820000019480 0001 00000000 0x0 0x0
0xffff820000019500 0001 00000000 0x0 0x0
0xffff820000019580 0001 00000000 0x0 0x0
0xffff820000019600 0001 00000000 0x0 0x0
0xffff820000019680 0001 00000000 0x0 0x0
0xffff820000019700 0001 00000000 0x0 0x0
0xffff820000019780 0001 00000000 0x0 0x0
0xffff820000019800 0001 00000000 0x0 0x0
0xffff820000019880 0001 00000000 0x0 0x0
0xffff820000019900 0001 00000000 0x0 0x0
0xffff820000019980 0001 00000000 0x0 0x0
0xffff820000019a00 0001 00000000 0x0 0x0
0xffff820000019a80 0001 00000000 0x0 0x0
0xffff820000019b00 0001 00000000 0x0 0x0
0xffff820000019b80 0001 00000000 0x0 0x0
0xffff820000019c00 0001 00000000 0x0 0x0
0xffff820000019c80 0001 00000000 0x0 0x0
0xffff820000019d00 0001 00000000 0x0 0x0
0xffff820000019d80 0001 00000000 0x0 0x0
0xffff820000019e00 0001 00000000 0x0 0x0
0xffff820000019e80 0001 00000000 0x0 0x0
0xffff820000019f00 0001 00000000 0x0 0x0
0xffff820000019f80 0001 00000000 0x0 0x0
0xffff82000001a000 0001 00000000 0x0 0x0
0xffff82000001a080 0001 00000000 0x0 0x0
0xffff82000001a100 0001 00000000 0x0 0x0
0xffff82000001a180 0001 00000000 0x0 0x0
0xffff82000001a200 0001 00000000 0x0 0x0
0xffff82000001a280 0001 00000000 0x0 0x0
0xffff82000001a300 0001 00000000 0x0 0x0
0xffff82000001a380 0001 00000000 0x0 0x0
0xffff82000001a400 0001 00000000 0x0 0x0
0xffff82000001a480 0001 00000000 0x0 0x0
0xffff82000001a500 0001 00000000 0x0 0x0
0xffff82000001a580 0001 00000000 0x0 0x0
0xffff82000001a600 0001 00000000 0x0 0x0
0xffff82000001a680 0001 00000000 0x0 0x0
0xffff82000001a700 0001 00000000 0x0 0x0
0xffff82000001a780 0001 00000000 0x0 0x0
0xffff82000001a800 0001 00000000 0x0 0x0
0xffff82000001a880 0001 00000000 0x0 0x0
0xffff82000001a900 0001 00000000 0x0 0x0
0xffff82000001a980 0001 00000000 0x0 0x0
0xffff82000001aa00 0001 00000000 0x0 0x0
0xffff82000001aa80 0001 00000000 0x0 0x0
0xffff82000001ab00 0001 00000000 0x0 0x0
0xffff82000001ab80 0001 00000000 0x0 0x0
0xffff82000001ac00 0041 00000000 0x0 0x0
0xffff82000001ac80 0041 00000000 0x0 0x0
0xffff82000001ad00 0041 00000000 0x0 0x0
0xffff82000001ad80 0041 00000000 0x0 0x0
0xffff82000001ae00 0041 00000000 0x0 0x0
0xffff82000001ae80 0041 00000000 0x0 0x0
0xffff82000001af00 0041 00000000 0x0 0x0
0xffff82000001af80 0041 00000000 0x0 0x0
0xffff82000001b000 0041 00000000 0x0 0x0
0xffff82000001b080 0041 00000000 0x0 0x0
0xffff82000001b100 0041 00000000 0x0 0x0
0xffff82000001b180 0041 00000000 0x0 0x0
0xffff82000001b200 0041 00000000 0x0 0x0
0xffff82000001b280 0041 00000000 0x0 0x0
0xffff82000001b300 0041 00000000 0x0 0x0
0xffff82000001b380 0041 00000000 0x0 0x0
0xffff82000001b400 0045 00000000 0x0 0x0
0xffff82000001b480 0041 00000000 0x0 0x0
0xffff82000001b500 0041 00000000 0x0 0x0
0xffff82000001b580 0041 00000000 0x0 0x0
0xffff82000001b600 0041 00000000 0x0 0x0
0xffff82000001b680 0041 00000000 0x0 0x0
0xffff82000001b700 0045 00000000 0x0 0x0
0xffff82000001b780 0045 00000000 0x0 0x0
0xffff82000001b800 0045 00000000 0x0 0x0
0xffff82000001b880 0041 00000000 0x0 0x0
0xffff82000001b900 0041 00000000 0x0 0x0
0xffff82000001b980 0041 00000000 0x0 0x0
0xffff82000001ba00 0041 00000000 0x0 0x0
0xffff82000001ba80 0041 00000000 0x0 0x0
0xffff82000001bb00 0045 00000000 0x0 0x0
0xffff82000001bb80 0045 00000000 0x0 0x0
0xffff82000001bc00 0045 00000000 0x0 0x0
0xffff82000001bc80 0041 00000000 0x0 0x0
0xffff82000001bd00 0041 00000000 0x0 0x0
0xffff82000001bd80 0041 00000000 0x0 0x0
0xffff82000001be00 0045 00000000 0x0 0x0
0xffff82000001be80 0041 00000000 0x0 0x0
0xffff82000001bf00 0045 00000000 0x0 0x0
0xffff82000001bf80 0045 00000000 0x0 0x0
0xffff82000001c000 0045 00000000 0x0

---
This report is generated by a bot. It may contain errors.
See https://goo.gl/tpsmEJ for more information about syzbot.
syzbot engineers can be reached at syzk...@googlegroups.com.

syzbot will keep track of this issue. See:
https://goo.gl/tpsmEJ#status for how to communicate with syzbot.

syzbot

unread,
Feb 2, 2023, 2:09:49 AM2/2/23
to syzkaller-...@googlegroups.com
syzbot has found a reproducer for the following issue on:

HEAD commit: 3013c7cb3466 ddbping - restore the original narration of t..
git tree: netbsd
console output: https://syzkaller.appspot.com/x/log.txt?x=17e17ef9480000
kernel config: https://syzkaller.appspot.com/x/.config?x=1420f906d33d9f1f
dashboard link: https://syzkaller.appspot.com/bug?extid=be8722dfc4f6ae05b813
compiler: g++ (Debian 10.2.1-6) 10.2.1 20210110
syz repro: https://syzkaller.appspot.com/x/repro.syz?x=10498755480000
C reproducer: https://syzkaller.appspot.com/x/repro.c?x=1298fac3480000

Downloadable assets:
disk image: https://storage.googleapis.com/syzbot-assets/462c5a021304/disk-3013c7cb.raw.xz
netbsd.gdb: https://storage.googleapis.com/syzbot-assets/4e16dba2fc4c/netbsd-3013c7cb.gdb.xz

IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+be8722...@syzkaller.appspotmail.com

[ 39.5756949] panic: UBSan: Undefined Behavior in /syzkaller/managers/ci2-netbsd-kubsan/kernel/sys/compat/common/vfs_syscalls_43.c:431:8, pointer expression with base 0xffffffffffffffff overflowed to 0

[ 39.5875987] cpu0: Begin traceback...
[ 39.5956912] vpanic() at netbsd:vpanic+0x2f2 sys/kern/subr_prf.c:291
[ 39.6656945] Report() at netbsd:Report+0x3b sys/../common/lib/libc/misc/ubsan.c:1352
[ 39.7156906] HandlePointerOverflow() at netbsd:HandlePointerOverflow+0xd2 sys/../common/lib/libc/misc/ubsan.c:706
[ 39.7656911] compat_43_sys_getdirentries() at netbsd:compat_43_sys_getdirentries+0x1097 sys/compat/common/vfs_syscalls_43.c:431
[ 39.8156917] sys_syscall() at netbsd:sys_syscall+0x1e4 sy_call sys/sys/syscallvar.h:65 [inline]
[ 39.8156917] sys_syscall() at netbsd:sys_syscall+0x1e4 sys/kern/sys_syscall.c:90
[ 39.8656936] syscall() at netbsd:syscall+0x2da sy_call sys/sys/syscallvar.h:65 [inline]
[ 39.8656936] syscall() at netbsd:syscall+0x2da sy_invoke sys/sys/syscallvar.h:94 [inline]
[ 39.8656936] syscall() at netbsd:syscall+0x2da sys/arch/x86/x86/syscall.c:138
[ 39.8756958] --- syscall (number 156 via SYS_syscall) ---
[ 39.8856894] netbsd:syscall+0x2da:
[ 39.8976960] cpu0: End traceback...
[ 39.8976960] fatal breakpoint trap in supervisor mode
[ 39.9066030] trap type 1 code 0 rip 0xffffffff80235375 cs 0x8 rflags 0x246 cr2 0x200002c0 ilevel 0 rsp 0xffff9202482e6740
[ 39.9172821] curlwp 0xffffba83d14639c0 pid 1242.1242 lowest kstack 0xffff9202482e22c0
Stopped in pid 1242.1242 (syz-executor1633) at netbsd:breakpoint+0x5: leave
?
breakpoint() at netbsd:breakpoint+0x5
db_panic() at netbsd:db_panic+0xec sys/ddb/db_panic.c:69
vpanic() at netbsd:vpanic+0x2f2 sys/kern/subr_prf.c:291
Report() at netbsd:Report+0x3b sys/../common/lib/libc/misc/ubsan.c:1352
HandlePointerOverflow() at netbsd:HandlePointerOverflow+0xd2 sys/../common/lib/libc/misc/ubsan.c:706
compat_43_sys_getdirentries() at netbsd:compat_43_sys_getdirentries+0x1097 sys/compat/common/vfs_syscalls_43.c:431
sys_syscall() at netbsd:sys_syscall+0x1e4 sy_call sys/sys/syscallvar.h:65 [inline]
sys_syscall() at netbsd:sys_syscall+0x1e4 sys/kern/sys_syscall.c:90
syscall() at netbsd:syscall+0x2da sy_call sys/sys/syscallvar.h:65 [inline]
syscall() at netbsd:syscall+0x2da sy_invoke sys/sys/syscallvar.h:94 [inline]
syscall() at netbsd:syscall+0x2da sys/arch/x86/x86/syscall.c:138
--- syscall (number 156 via SYS_syscall) ---
netbsd:syscall+0x2da:
Panic string: UBSan: Undefined Behavior in /syzkaller/managers/ci2-netbsd-kubsan/kernel/sys/compat/common/vfs_syscalls_43.c:431:8, pointer expression with base 0xffffffffffffffff overflowed to 0

PID LID S CPU FLAGS STRUCT LWP * NAME WAIT
1132 1132 2 0 0 ffffba83d2b351c0 syz-executor1633
1245 1245 3 1 0 ffffba83cfa4fa00 syz-executor1633 tstile
449 449 2 0 0 ffffba83cfa4f5c0 syz-executor1633
1386 1386 2 0 0 ffffba83d0a3a0c0 syz-executor1633
1239 1239 2 1 0 ffffba83cfa4f180 syz-executor1633
813 > 813 7 1 140 ffffba83d1288540 syz-executor1633
1243 1243 2 1 140 ffffba83cfb4b2c0 syz-executor1633
1242 >1242 7 0 0 ffffba83d14639c0 syz-executor1633
829 829 2 1 140 ffffba83d1288980 syz-executor1633
990 990 2 0 140 ffffba83cf9936c0 syz-executor1633
929 929 2 1 140 ffffba83cf993280 syz-executor1633
1120 1120 2 1 140 ffffba83cf65f200 syz-executor1633
942 942 3 0 180 ffffba83cfb4b700 syz-executor1633 nanoslp
1237 1237 3 1 40180 ffffba83cf993b00 sshd select
1255 1255 3 1 180 ffffba83d1463580 getty nanoslp
1216 1216 3 0 180 ffffba83d1463140 getty nanoslp
1223 1223 3 0 180 ffffba83d0115040 getty nanoslp
1184 1184 3 0 1c0 ffffba83cf695ac0 getty ttyraw
872 872 3 1 180 ffffba83cfb17300 sshd select
1094 1094 3 0 180 ffffba83d1288100 powerd kqueue
702 702 3 0 180 ffffba83d0a3a940 syslogd kqueue
747 747 3 1 180 ffffba83d0a51080 dhcpcd poll
742 742 3 1 180 ffffba83d0115480 dhcpcd poll
466 466 3 1 180 ffffba83cfb17b80 dhcpcd poll
598 598 3 1 180 ffffba83cfdc7340 dhcpcd poll
292 292 3 1 180 ffffba83cfdc7bc0 dhcpcd poll
485 485 3 1 180 ffffba83cfdc7780 dhcpcd poll
291 291 3 0 180 ffffba83cfb17740 dhcpcd poll
1 1 3 0 180 ffffba83c744b980 init wait
0 985 3 0 200 ffffba83cf65f640 physiod physiod
0 196 3 0 200 ffffba83cf695680 pooldrain pooldrain
0 195 3 0 200 ffffba83cf695240 ioflush syncer
0 194 3 1 200 ffffba83cf65fa80 pgdaemon pgdaemon
0 170 3 1 200 ffffba83cd5a7a40 usb7 usbevt
0 169 3 1 200 ffffba83cd5a7600 usb6 usbevt
0 168 3 0 200 ffffba83cd5a71c0 usb5 usbevt
0 167 3 0 200 ffffba83ca552a00 usb4 usbevt
0 166 3 0 200 ffffba83ca5525c0 usb3 usbevt
0 165 3 0 200 ffffba83ca552180 usb2 usbevt
0 31 3 0 200 ffffba83c74ad9c0 usb1 usbevt
0 63 3 0 200 ffffba83c74ad580 usb0 usbevt
0 126 3 1 200 ffffba83c72e0740 usbtask-dr usbtsk
0 125 3 1 200 ffffba83c72e0b80 usbtask-hc usbtsk
0 124 3 0 200 ffffba83c58a1b00 swwreboot swwreboot
0 123 3 0 200 ffffba83c74ad140 npfgc0 npfgcw
0 122 3 1 200 ffffba83c744b540 rt_free rt_free
0 121 3 1 200 ffffba83c744b100 unpgc unpgc
0 120 3 0 200 ffffba83c744e940 key_timehandler key_timehandler
0 119 3 1 200 ffffba83c744e500 icmp6_wqinput/1 icmp6_wqinput
0 118 3 0 200 ffffba83c744e0c0 icmp6_wqinput/0 icmp6_wqinput
0 117 3 0 200 ffffba83c7442900 nd6_timer nd6_timer
0 116 3 1 200 ffffba83c74424c0 carp6_wqinput/1 carp6_wqinput
0 115 3 0 200 ffffba83c7442080 carp6_wqinput/0 carp6_wqinput
0 114 3 1 200 ffffba83c74148c0 carp_wqinput/1 carp_wqinput
0 113 3 0 200 ffffba83c7414480 carp_wqinput/0 carp_wqinput
0 112 3 1 200 ffffba83c7414040 icmp_wqinput/1 icmp_wqinput
0 111 3 0 200 ffffba83c73d7bc0 icmp_wqinput/0 icmp_wqinput
0 110 3 0 200 ffffba83c73d7340 rt_timer rt_timer
0 109 3 1 200 ffffba83c73d7780 vmem_rehash vmem_rehash
0 100 3 1 200 ffffba83c72e0300 entbutler entropy
0 99 3 0 200 ffffba83c6d50b40 viomb balloon
0 98 3 1 200 ffffba83c6d50700 vioif0_txrx/1 vioif0_txrx
0 97 3 0 200 ffffba83c6d502c0 vioif0_txrx/0 vioif0_txrx
0 30 3 0 200 ffffba83c58a16c0 scsibus0 sccomp
0 29 3 1 200 ffffba83c58a1280 pms0 pmsreset
0 28 3 1 200 ffffba83c57acac0 xcall/1 xcall
0 27 1 1 200 ffffba83c57ac680 softser/1
0 26 1 1 200 ffffba83c57ac240 softclk/1
0 25 1 1 200 ffffba83c5787a80 softbio/1
0 24 1 1 200 ffffba83c5787640 softnet/1
0 23 1 1 201 ffffba83c5787200 idle/1
0 22 3 0 200 ffffba84f3b2da40 lnxsyswq lnxsyswq
0 21 3 0 200 ffffba84f3b2d600 lnxubdwq lnxubdwq
0 20 3 1 200 ffffba84f3b2d1c0 lnxpwrwq lnxpwrwq
0 19 3 1 200 ffffba84f3b34a00 lnxlngwq lnxlngwq
0 18 3 1 200 ffffba84f3b345c0 lnxhipwq lnxhipwq
0 17 3 0 200 ffffba84f3b34180 lnxrcugc lnxrcugc
0 16 3 0 200 ffffba84f3b539c0 sysmon smtaskq
0 15 3 1 200 ffffba84f3b53580 pmfsuspend pmfsuspend
0 14 3 0 200 ffffba84f3b53140 pmfevent pmfevent
0 13 3 1 200 ffffba84f3b5e980 sopendfree sopendfr
0 12 3 0 200 ffffba84f3b5e540 ifwdog ifwdog
0 11 3 0 200 ffffba84f3b5e100 iflnkst iflnkst
0 10 3 1 200 ffffba84f4b93940 nfssilly nfssilly
0 9 3 0 200 ffffba84f4b93500 vdrain vdrain
0 8 3 1 200 ffffba84f4b930c0 modunload mod_unld
0 7 3 0 200 ffffba84f4bba900 xcall/0 xcall
0 6 1 0 200 ffffba84f4bba4c0 softser/0
0 5 1 0 200 ffffba84f4bba080 softclk/0
0 4 1 0 200 ffffba84f4be98c0 softbio/0
0 3 1 0 200 ffffba84f4be9480 softnet/0
0 2 1 0 201 ffffba84f4be9040 idle/0
0 0 3 0 200 ffffffff86742a40 swapper uvm
[Locks tracked through LWPs]

****** LWP 1132.1132 (syz-executor1633) @ 0xffffba83d2b351c0, l_stat=2

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:vcache_alloc+0xba sys/kern/vfs_vnode.c:1391)
lock address : ffffba83d1fd2540
type : sleep/adaptive
initialized : netbsd:vcache_alloc+0xba
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 4
relevant cpu : 0 last held: 65535
relevant lwp : 0xffffba83d2b351c0 last held: 000000000000000000
last locked : netbsd:genfs_lock+0x220
unlocked* : netbsd:genfs_unlock+0x50
owner/count : 000000000000000000 flags : 000000000000000000
Turnstile: no active turnstile for this lock.

****** LWP 1245.1245 (syz-executor1633) @ 0xffffba83cfa4fa00, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:vcache_alloc+0xba sys/kern/vfs_vnode.c:1391)
lock address : ffffba83d1fd2540
type : sleep/adaptive
initialized : netbsd:vcache_alloc+0xba
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 4
relevant cpu : 1 last held: 65535
relevant lwp : 0xffffba83cfa4fa00 last held: 000000000000000000
last locked : netbsd:genfs_lock+0x220
unlocked* : netbsd:genfs_unlock+0x50
owner/count : 000000000000000000 flags : 000000000000000000
Turnstile: no active turnstile for this lock.

****** LWP 449.449 (syz-executor1633) @ 0xffffba83cfa4f5c0, l_stat=2

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:vcache_alloc+0xba sys/kern/vfs_vnode.c:1391)
lock address : ffffba83d1fd2540
type : sleep/adaptive
initialized : netbsd:vcache_alloc+0xba
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 4
relevant cpu : 0 last held: 65535
relevant lwp : 0xffffba83cfa4f5c0 last held: 000000000000000000
last locked : netbsd:genfs_lock+0x220
unlocked* : netbsd:genfs_unlock+0x50
owner/count : 000000000000000000 flags : 000000000000000000
Turnstile: no active turnstile for this lock.

****** LWP 1386.1386 (syz-executor1633) @ 0xffffba83d0a3a0c0, l_stat=2

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:vcache_alloc+0xba sys/kern/vfs_vnode.c:1391)
lock address : ffffba83d1fd2540
type : sleep/adaptive
initialized : netbsd:vcache_alloc+0xba
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 4
relevant cpu : 0 last held: 65535
relevant lwp : 0xffffba83d0a3a0c0 last held: 000000000000000000
last locked : netbsd:genfs_lock+0x220
unlocked* : netbsd:genfs_unlock+0x50
owner/count : 000000000000000000 flags : 000000000000000000
Turnstile: no active turnstile for this lock.

****** LWP 1239.1239 (syz-executor1633) @ 0xffffba83cfa4f180, l_stat=2

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:vcache_alloc+0xba sys/kern/vfs_vnode.c:1391)
lock address : ffffba83d1ebfe80
type : sleep/adaptive
initialized : netbsd:vcache_alloc+0xba
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 1
relevant cpu : 1 last held: 0
relevant lwp : 0xffffba83cfa4f180 last held: 0xffffba83d14639c0
last locked* : netbsd:genfs_lock+0x220
unlocked : netbsd:genfs_unlock+0x50
owner/count : 0xffffba83d14639c0 flags : 0x0000000000000007
Turnstile:
=> 0 waiting readers:
=> 1 waiting writers: 0xffffba83cfa4fa00

****** LWP 1242.1242 (syz-executor1633) @ 0xffffba83d14639c0, l_stat=7

*** Locks held:

* Lock 0 (initialized at netbsd:vcache_alloc+0xba sys/kern/vfs_vnode.c:1391)
lock address : ffffba83d1ebfe80
type : sleep/adaptive
initialized : netbsd:vcache_alloc+0xba
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 1
relevant cpu : 0 last held: 0
relevant lwp : 0xffffba83d14639c0 last held: 0xffffba83d14639c0
last locked* : netbsd:genfs_lock+0x220
unlocked : netbsd:genfs_unlock+0x50
owner/count : 0xffffba83d14639c0 flags : 0x0000000000000007
Turnstile:
=> 0 waiting readers:
=> 1 waiting writers: 0xffffba83cfa4fa00

*** Locks wanted: none

****** LWP 742.742 (dhcpcd) @ 0xffffba83d0115480, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:module_hook_init+0x1c sys/kern/kern_module_hook.c:132)
lock address : netbsd:module_hook
type : sleep/adaptive
initialized : netbsd:module_hook_init+0x1c
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 0
relevant lwp : 0xffffba83d0115480 last held: 000000000000000000
last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 466.466 (dhcpcd) @ 0xffffba83cfb17b80, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:module_hook_init+0x1c sys/kern/kern_module_hook.c:132)
lock address : netbsd:module_hook
type : sleep/adaptive
initialized : netbsd:module_hook_init+0x1c
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 0
relevant lwp : 0xffffba83cfb17b80 last held: 000000000000000000
last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 485.485 (dhcpcd) @ 0xffffba83cfdc7780, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:module_hook_init+0x1c sys/kern/kern_module_hook.c:132)
lock address : netbsd:module_hook
type : sleep/adaptive
initialized : netbsd:module_hook_init+0x1c
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 0
relevant lwp : 0xffffba83cfdc7780 last held: 000000000000000000
last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 291.291 (dhcpcd) @ 0xffffba83cfb17740, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:module_hook_init+0x1c sys/kern/kern_module_hook.c:132)
lock address : netbsd:module_hook
type : sleep/adaptive
initialized : netbsd:module_hook_init+0x1c
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffffba83cfb17740 last held: 000000000000000000
last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 0.11 (iflnkst) @ 0xffffba84f3b5e100, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:module_hook_init+0x1c sys/kern/kern_module_hook.c:132)
lock address : netbsd:module_hook
type : sleep/adaptive
initialized : netbsd:module_hook_init+0x1c
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffffba84f3b5e100 last held: 000000000000000000
last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 0.5 (softclk/0) @ 0xffffba84f4bba080, l_stat=1

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:module_hook_init+0x1c sys/kern/kern_module_hook.c:132)
lock address : netbsd:module_hook
type : sleep/adaptive
initialized : netbsd:module_hook_init+0x1c
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffffba84f4bba080 last held: 000000000000000000
last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 0.0 (swapper) @ 0xffffffff86742a40, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:module_hook_init+0x1c sys/kern/kern_module_hook.c:132)
lock address : netbsd:module_hook
type : sleep/adaptive
initialized : netbsd:module_hook_init+0x1c
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffffffff86742a40 last held: 000000000000000000
last locked : 0
unlocked* : 0
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

[Locks tracked through CPUs]

******* Locks held on cpu0:

* Lock 0 (initialized at netbsd:kprintf_init+0x72 sys/kern/subr_prf.c:155)
lock address : netbsd:kprintf_mtx
type : spin
initialized : netbsd:kprintf_init+0x72
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffffba83d14639c0 last held: 0xffffba83d14639c0
last locked* : netbsd:kprintf_lock+0x50
unlocked : netbsd:kprintf_unlock+0x70
owner field : 0x0000000000000800 wait/spin: 0/1

PAGE FLAG PQ UOBJECT UANON
0xffff920000007180 0045 00000000 0x0 0x0
0xffff920000007200 0045 00000000 0x0 0x0
0xffff920000007280 0045 00000000 0x0 0x0
0xffff920000007300 0045 00000000 0x0 0x0
0xffff920000007380 0045 00000000 0x0 0x0
0xffff920000007400 0045 00000000 0x0 0x0
0xffff920000007480 0045 00000000 0x0 0x0
0xffff920000007500 0045 00000000 0x0 0x0
0xffff920000007580 0045 00000000 0x0 0x0
0xffff920000007600 0045 00000000 0x0 0x0
0xffff920000007680 0041 00000000 0x0 0x0
0xffff920000007700 0041 00000000 0x0 0x0
0xffff920000007780 0041 00000000 0x0 0x0
0xffff920000007800 0041 00000000 0x0 0x0
0xffff920000007880 0045 00000000 0x0 0x0
0xffff920000007900 0045 00000000 0x0 0x0
0xffff920000007980 0041 00000000 0x0 0x0
0xffff920000007a00 0041 00000000 0x0 0x0
0xffff920000007a80 0041 00000000 0x0 0x0
0xffff920000007b00 0041 00000000 0x0 0x0
0xffff920000007b80 0041 00000000 0x0 0x0
0xffff920000007c00 0041 00000000 0x0 0x0
0xffff920000007c80 0041 00000000 0x0 0x0
0xffff920000007d00 0041 00000000 0x0 0x0
0xffff920000007d80 0041 00000000 0x0 0x0
0xffff920000007e00 0041 00000000 0x0 0x0
0xffff920000007e80 0041 00000000 0x0 0x0
0xffff920000007f00 0041 00000000 0x0 0x0
0xffff920000007f80 0041 00000000 0x0 0x0
0xffff920000008000 0041 00000000 0x0 0x0
0xffff920000008080 0041 00000000 0x0 0x0
0xffff920000008100 0041 00000000 0x0 0x0
0xffff920000008180 0041 00000000 0x0 0x0
0xffff920000008200 0041 00000000 0x0 0x0
0xffff920000008280 0041 00000000 0x0 0x0
0xffff920000008300 0041 00000000 0x0 0x0
0xffff920000008380 0041 00000000 0x0 0x0
0xffff920000008400 0041 00000000 0x0 0x0
0xffff920000008480 0041 00000000 0x0 0x0
0xffff920000008500 0041 00000000 0x0 0x0
0xffff920000008580 0041 00000000 0x0 0x0
0xffff920000008600 0045 00000000 0x0 0x0
0xffff920000008680 0041 00000000 0x0 0x0
0xffff920000008700 0041 00000000 0x0 0x0
0xffff920000008780 0041 00000000 0x0 0x0
0xffff920000008800 0045 00000000 0x0 0x0
0xffff920000008880 0041 00000000 0x0 0x0
0xffff920000008900 0041 00000000 0x0 0x0
0xffff920000008980 0041 00000000 0x0 0x0
0xffff920000008a00 0041 00000000 0x0 0x0
0xffff920000008a80 0041 00000000 0x0 0x0
0xffff920000008b00 0041 00000000 0x0 0x0
0xffff920000008b80 0041 00000000 0x0 0x0
0xffff920000008c00 0041 00000000 0x0 0x0
0xffff920000008c80 0041 00000000 0x0 0x0
0xffff920000008d00 0041 00000000 0x0 0x0
0xffff920000008d80 0041 00000000 0x0 0x0
0xffff920000008e00 0041 00000000 0x0 0x0
0xffff920000008e80 0041 00000000 0x0 0x0
0xffff920000008f00 0041 00000000 0x0 0x0
0xffff920000008f80 0041 00000000 0x0 0x0
0xffff920000009000 0041 00000000 0x0 0x0
0xffff920000009080 0041 00000000 0x0 0x0
0xffff920000009100 0041 00000000 0x0 0x0
0xffff920000009180 0041 00000000 0x0 0x0
0xffff920000009200 0041 00000000 0x0 0x0
0xffff920000009280 0041 00000000 0x0 0x0
0xffff920000009300 0041 00000000 0x0 0x0
0xffff920000009380 0041 00000000 0x0 0x0
0xffff920000009400 0041 00000000 0x0 0x0
0xffff920000009480 0045 00000000 0x0 0x0
0xffff920000009500 0041 00000000 0x0 0x0
0xffff920000009580 0041 00000000 0x0 0x0
0xffff920000009600 0041 00000000 0x0 0x0
0xffff920000009680 0041 00000000 0x0 0x0
0xffff920000009700 0041 00000000 0x0 0x0
0xffff920000009780 0041 00000000 0x0 0x0
0xffff920000009800 0041 00000000 0x0 0x0
0xffff920000009880 0041 00000000 0x0 0x0
0xffff920000009900 0041 00000000 0x0 0x0
0xffff920000009980 0041 00000000 0x0 0x0
0xffff920000009a00 0041 00000000 0x0 0x0
0xffff920000009a80 0045 00000000 0x0 0x0
0xffff920000009b00 0041 00000000 0x0 0x0
0xffff920000009b80 0041 00000000 0x0 0x0
0xffff920000009c00 0041 00000000 0x0 0x0
0xffff920000009c80 0041 00000000 0x0 0x0
0xffff920000009d00 0041 00000000 0x0 0x0
0xffff920000009d80 0041 00000000 0x0 0x0
0xffff920000009e00 0041 00000000 0x0 0x0
0xffff920000009e80 0041 00000000 0x0 0x0
0xffff920000009f00 0041 00000000 0x0 0x0
0xffff920000009f80 0041 00000000 0x0 0x0
0xffff92000000a000 0041 00000000 0x0 0x0
0xffff92000000a080 0041 00000000 0x0 0x0
0xffff92000000a100 0041 00000000 0x0 0x0
0xffff92000000a180 0041 00000000 0x0 0x0
0xffff92000000a200 0041 00000000 0x0 0x0
0xffff92000000a280 0041 00000000 0x0 0x0
0xffff92000000a300 0041 00000000 0x0 0x0
0xffff92000000a380 0041 00000000 0x0 0x0
0xffff92000000a400 0041 00000000 0x0 0x0
0xffff92000000a480 0041 00000000 0x0 0x0
0xffff92000000a500 0041 00000000 0x0 0x0
0xffff92000000a580 0041 00000000 0x0 0x0
0xffff92000000a600 0041 00000000 0x0 0x0
0xffff92000000a680 0041 00000000 0x0 0x0
0xffff92000000a700 0041 00000000 0x0 0x0
0xffff92000000a780 0041 00000000 0x0 0x0
0xffff92000000a800 0041 00000000 0x0 0x0
0xffff92000000a880 0041 00000000 0x0 0x0
0xffff92000000a900 0041 00000000 0x0 0x0
0xffff92000000a980 0041 00000000 0x0 0x0
0xffff92000000aa00 0041 00000000 0x0 0x0
0xffff92000000aa80 0041 00000000 0x0 0x0
0xffff92000000ab00 0041 00000000 0x0 0x0
0xffff92000000ab80 0041 00000000 0x0 0x0
0xffff92000000ac00 0041 00000000 0x0 0x0
0xffff92000000ac80 0041 00000000 0x0 0x0
0xffff92000000ad00 0041 00000000 0x0 0x0
0xffff92000000ad80 0041 00000000 0x0 0x0
0xffff92000000ae00 0041 00000000 0x0 0x0
0xffff92000000ae80 0045 00000000 0x0 0x0
0xffff92000000af00 0045 00000000 0x0 0x0
0xffff92000000af80 0045 00000000 0x0 0x0
0xffff92000000b000 0041 00000000 0x0 0x0
0xffff92000000b080 0041 00000000 0x0 0x0
0xffff92000000b100 0041 00000000 0x0 0x0
0xffff92000000b180 0045 00000000 0x0 0x0
0xffff92000000b200 0041 00000000 0x0 0x0
0xffff92000000b280 0045 00000000 0x0 0x0
0xffff92000000b300 0045 00000000 0x0 0x0
0xffff92000000b380 0045 00000000 0x0 0x0
0xffff92000000b400 0041 00000000 0x0 0x0
0xffff92000000b480 0041 00000000 0x0 0x0
0xffff92000000b500 0045 00000000 0x0 0x0
0xffff92000000b580 0045 00000000 0x0 0x0
0xffff92000000b600 0045 00000000 0x0 0x0
0xffff92000000b680 0045 00000000 0x0 0x0
0xffff92000000b700 0045 00000000 0x0 0x0
0xffff92000000b780 0045 00000000 0x0 0x0
0xffff92000000b800 0045 00000000 0x0 0x0
0xffff92000000b880 0041 00000000 0x0 0x0
0xffff92000000b900 0045 00000000 0x0 0x0
0xffff92000000b980 0045 00000000 0x0 0x0
0xffff92000000ba00 0045 00000000 0x0 0x0
0xffff92000000ba80 0045 00000000 0x0 0x0
0xffff92000000bb00 0045 00000000 0x0 0x0
0xffff92000000bb80 0045 00000000 0x0 0x0
0xffff92000000bc00 0045 00000000 0x0 0x0
0xffff92000000bc80 0041 00000000 0x0 0x0
0xffff92000000bd00 0045 00000000 0x0 0x0
0xffff92000000bd80 0045 00000000 0x0 0x0
0xffff92000000be00 0045 00000000 0x0 0x0
0xffff92000000be80 0045 00000000 0x0 0x0
0xffff92000000bf00 0045 00000000 0x0 0x0
0xffff92000000bf80 0045 00000000 0x0 0x0
0xffff92000000c000 0045 00000000 0x0 0x0
0xffff92000000c080 0041 00000000 0x0 0x0
0xffff92000000c100 0045 00000000 0x0 0x0
0xffff92000000c180 0045 00000000 0x0 0x0
0xffff92000000c200 0045 00000000 0x0 0x0
0xffff92000000c280 0045 00000000 0x0 0x0
0xffff92000000c300 0045 00000000 0x0 0x0
0xffff92000000c380 0045 00000000 0x0 0x0
0xffff92000000c400 0045 00000000 0x0 0x0
0xffff92000000c480 0045 00000000 0x0 0x0
0xffff92000000c500 0045 00000000 0x0 0x0
0xffff92000000c580 0045 00000000 0x0 0x0
0xffff92000000c600 0045 00000000 0x0 0x0
0xffff92000000c680 0045 00000000 0x0 0x0
0xffff92000000c700 0041 00000000 0x0 0x0
0xffff92000000c780 0041 00000000 0x0 0x0
0xffff92000000c800 0045 00000000 0x0 0x0
0xffff92000000c880 0045 00000000 0x0 0x0
0xffff92000000c900 0045 00000000 0x0 0x0
0xffff92000000c980 0045 00000000 0x0 0x0
0xffff92000000ca00 0045 00000000 0x0 0x0
0xffff92000000ca80 0041 00000000 0x0 0x0
0xffff92000000cb00 0041 00000000 0x0 0x0
0xffff92000000cb80 0041 00000000 0x0 0x0
0xffff92000000cc00 0045 00000000 0x0 0x0
0xffff92000000cc80 0045 00000000 0x0 0x0
0xffff92000000cd00 0045 00000000 0x0 0x0
0xffff92000000cd80 0041 00000000 0x0 0x0
0xffff92000000ce00 0045 00000000 0x0 0x0
0xffff92000000ce80 0041 00000000 0x0 0x0
0xffff92000000cf00 0041 00000000 0x0 0x0
0xffff92000000cf80 0041 00000000 0x0 0x0
0xffff92000000d000 0041 00000000 0x0 0x0
0xffff92000000d080 0045 00000000 0x0 0x0
0xffff92000000d100 0041 00000000 0x0 0x0
0xffff92000000d180 0041 00000000 0x0 0x0
0xffff92000000d200 0041 00000000 0x0 0x0
0xffff92000000d280 0041 00000000 0x0 0x0
0xffff92000000d300 0045 00000000 0x0 0x0
0xffff92000000d380 0041 00000000 0x0 0x0
0xffff92000000d400 0041 00000000 0x0 0x0
0xffff92000000d480 0045 00000000 0x0 0x0
0xffff92000000d500 0041 00000000 0x0 0x0
0xffff92000000d580 0041 00000000 0x0 0x0
0xffff92000000d600 0041 00000000 0x0 0x0
0xffff92000000d680 0045 00000000 0x0 0x0
0xffff92000000d700 0041 00000000 0x0 0x0
0xffff92000000d780 0045 00000000 0x0 0x0
0xffff92000000d800 0041 00000000 0x0 0x0
0xffff92000000d880 0045 00000000 0x0 0x0
0xffff92000000d900 0041 00000000 0x0 0x0
0xffff92000000d980 0041 00000000 0x0 0x0
0xffff92000000da00 0041 00000000 0x0 0x0
0xffff92000000da80 0041 00000000 0x0 0x0
0xffff92000000db00 0045 00000000 0x0 0x0
0xffff92000000db80 0045 00000000 0x0 0x0
0xffff92000000dc00 0041 00000000 0x0 0x0
0xffff92000000dc80 0041 00000000 0x0 0x0
0xffff92000000dd00 0041 00000000 0x0 0x0
0xffff92000000dd80 0041 00000000 0x0 0x0
0xffff92000000de00 0041 00000000 0x0 0x0
0xffff92000000de80 0041 00000000 0x0 0x0
0xffff92000000df00 0045 00000000 0x0 0x0
0xffff92000000df80 0045 00000000 0x0 0x0
0xffff92000000e000 0045 00000000 0x0 0x0
0xffff92000000e080 0041 00000000 0x0 0x0
0xffff92000000e100 0041 00000000 0x0 0x0
0xffff92000000e180 0045 00000000 0x0 0x0
0xffff92000000e200 0041 00000000 0x0 0x0
0xffff92000000e280 0045 00000000 0x0 0x0
0xffff92000000e300 0045 00000000 0x0 0x0
0xffff92000000e380 0041 00000000 0x0 0x0
0xffff92000000e400 0045 00000000 0x0 0x0
0xffff92000000e480 0041 00000000 0x0 0x0
0xffff92000000e500 0045 00000000 0x0 0x0
0xffff92000000e580 0041 00000000 0x0 0x0
0xffff92000000e600 0045 00000000 0x0 0x0
0xffff92000000e680 0041 00000000 0x0 0x0
0xffff92000000e700 0041 00000000 0x0 0x0
0xffff92000000e780 0041 00000000 0x0 0x0
0xffff92000000e800 0045 00000000 0x0 0x0
0xffff92000000e880 0041 00000000 0x0 0x0
0xffff92000000e900 0041 00000000 0x0 0x0
0xffff92000000e980 0041 00000000 0x0 0x0
0xffff92000000ea00 0041 00000000 0x0 0x0
0xffff92000000ea80 0045 00000000 0x0 0x0
0xffff92000000eb00 0041 00000000 0x0 0x0
0xffff92000000eb80 0045 00000000 0x0 0x0
0xffff92000000ec00 0041 00000000 0x0 0x0
0xffff92000000ec80 0045 00000000 0x0 0x0
0xffff92000000ed00 0041 00000000 0x0 0x0
0xffff92000000ed80 0041 00000000 0x0 0x0
0xffff92000000ee00 0041 00000000 0x0 0x0
0xffff92000000ee80 0041 00000000 0x0 0x0
0xffff92000000ef00 0041 00000000 0x0 0x0
0xffff92000000ef80 0041 00000000 0x0 0x0
0xffff92000000f000 0041 00000000 0x0 0x0
0xffff92000000f080 0045 00000000 0x0 0x0
0xffff92000000f100 0041 00000000 0x0 0x0
0xffff92000000f180 0041 00000000 0x0 0x0
0xffff92000000f200 0041 00000000 0x0 0x0
0xffff92000000f280 0045 00000000 0x0 0x0
0xffff92000000f300 0041 00000000 0x0 0x0
0xffff92000000f380 0041 00000000 0x0 0x0
0xffff92000000f400 0045 00000000 0x0 0x0
0xffff92000000f480 0041 00000000 0x0 0x0
0xffff92000000f500 0041 00000000 0x0 0x0
0xffff92000000f580 0041 00000000 0x0 0x0
0xffff92000000f600 0041 00000000 0x0 0x0
0xffff92000000f680 0041 00000000 0x0 0x0
0xffff92000000f700 0041 00000000 0x0 0x0
0xffff92000000f780 0041 00000000 0x0 0x0
0xffff92000000f800 0041 00000000 0x0 0x0
0xffff92000000f880 0045 00000000 0x0 0x0
0xffff92000000f900 0041 00000000 0x0 0x0
0xffff92000000f980 0045 00000000 0x0 0x0
0xffff92000000fa00 0041 00000000 0x0 0x0
0xffff92000000fa80 0041 00000000 0x0 0x0
0xffff92000000fb00 0041 00000000 0x0 0x0
0xffff92000000fb80 0041 00000000 0x0 0x0
0xffff92000000fc00 0045 00000000 0x0 0x0
0xffff92000000fc80 0041 00000000 0x0 0x0
0xffff92000000fd00 0045 00000000 0x0 0x0
0xffff92000000fd80 0041 00000000 0x0 0x0
0xffff92000000fe00 0041 00000000 0x0 0x0
0xffff92000000fe80 0041 00000000 0x0 0x0
0xffff92000000ff00 0041 00000000 0x0 0x0
0xffff92000000ff80 0041 00000000 0x0 0x0
0xffff920000010000 0041 00000000 0x0 0x0
0xffff920000010080 0045 00000000 0x0 0x0
0xffff920000010100 0041 00000000 0x0 0x0
0xffff920000010180 0045 00000000 0x0 0x0
0xffff920000010200 0045 00000000 0x0 0x0
0xffff920000010280 0041 00000000 0x0 0x0
0xffff920000010300 0041 00000000 0x0 0x0
0xffff920000010380 0041 00000000 0x0 0x0
0xffff920000010400 0041 00000000 0x0 0x0
0xffff920000010480 0041 00000000 0x0 0x0
0xffff920000010500 0045 00000000 0x0 0x0
0xffff920000010580 0041 00000000 0x0 0x0
0xffff920000010600 0041 00000000 0x0 0x0
0xffff920000010680 0045 00000000 0x0 0x0
0xffff920000010700 0041 00000000 0x0 0x0
0xffff920000010780 0041 00000000 0x0 0x0
0xffff920000010800 0041 00000000 0x0 0x0
0xffff920000010880 0041 00000000 0x0 0x0
0xffff920000010900 0041 00000000 0x0 0x0
0xffff920000010980 0045 00000000 0x0 0x0
0xffff920000010a00 0045 00000000 0x0 0x0
0xffff920000010a80 0041 00000000 0x0 0x0
0xffff920000010b00 0041 00000000 0x0 0x0
0xffff920000010b80 0041 00000000 0x0 0x0
0xffff920000010c00 0041 00000000 0x0 0x0
0xffff920000010c80 0045 00000000 0x0 0x0
0xffff920000010d00 0041 00000000 0x0 0x0
0xffff920000010d80 0041 00000000 0x0 0x0
0xffff920000010e00 0041 00000000 0x0 0x0
0xffff920000010e80 0045 00000000 0x0 0x0
0xffff920000010f00 0041 00000000 0x0 0x0
0xffff920000010f80 0041 00000000 0x0 0x0
0xffff920000011000 0041 00000000 0x0 0x0
0xffff920000011080 0041 00000000 0x0 0x0
0xffff920000011100 0041 00000000 0x0 0x0
0xffff920000011180 0041 00000000 0x0 0x0
0xffff920000011200 0045 00000000 0x0 0x0
0xffff920000011280 0041 00000000 0x0 0x0
0xffff920000011300 0041 00000000 0x0 0x0
0xffff920000011380 0041 00000000 0x0 0x0
0xffff920000011400 0041 00000000 0x0 0x0
0xffff920000011480 0045 00000000 0x0 0x0
0xffff920000011500 0045 00000000 0x0 0x0
0xffff920000011580 0041 00000000 0x0 0x0
0xffff920000011600 0041 00000000 0x0 0x0
0xffff920000011680 0041 00000000 0x0 0x0
0xffff920000011700 0045 00000000 0x0 0x0
0xffff920000011780 0045 00000000 0x0 0x0
0xffff920000011800 0041 00000000 0x0 0x0
0xffff920000011880 0041 00000000 0x0 0x0
0xffff920000011900 0041 00000000 0x0 0x0
0xffff920000011980 0041 00000000 0x0 0x0
0xffff920000011a00 0041 00000000 0x0 0x0
0xffff920000011a80 0041 00000000 0x0 0x0
0xffff920000011b00 0041 00000000 0x0 0x0
0xffff920000011b80 0041 00000000 0x0 0x0
0xffff920000011c00 0041 00000000 0x0 0x0
0xffff920000011c80 0041 00000000 0x0 0x0
0xffff920000011d00 0041 00000000 0x0 0x0
0xffff920000011d80 0041 00000000 0x0 0x0
0xffff920000011e00 0045 00000000 0x0 0x0
0xffff920000011e80 0041 00000000 0x0 0x0
0xffff920000011f00 0041 00000000 0x0 0x0
0xffff920000011f80 0041 00000000 0x0 0x0
0xffff920000012000 0041 00000000 0x0 0x0
0xffff920000012080 0041 00000000 0x0 0x0
0xffff920000012100 0045 00000000 0x0 0x0
0xffff920000012180 0045 00000000 0x0 0x0
0xffff920000012200 0041 00000000 0x0 0x0
0xffff920000012280 0045 00000000 0x0 0x0
0xffff920000012300 0041 00000000 0x0 0x0
0xffff920000012380 0041 00000000 0x0 0x0
0xffff920000012400 0041 00000000 0x0 0x0
0xffff920000012480 0041 00000000 0x0 0x0
0xffff920000012500 0041 00000000 0x0 0x0
0xffff920000012580 0041 00000000 0x0 0x0
0xffff920000012600 0041 00000000 0x0 0x0
0xffff920000012680 0041 00000000 0x0 0x0
0xffff920000012700 0041 00000000 0x0 0x0
0xffff920000012780 0041 00000000 0x0 0x0
0xffff920000012800 0041 00000000 0x0 0x0
0xffff920000012880 0041 00000000 0x0 0x0
0xffff920000012900 0041 00000000 0x0 0x0
0xffff920000012980 0041 00000000 0x0 0x0
0xffff920000012a00 0041 00000000 0x0 0x0
0xffff920000012a80 0041 00000000 0x0 0x0
0xffff920000012b00 0041 00000000 0x0 0x0
0xffff920000012b80 0041 00000000 0x0 0x0
0xffff920000012c00 0041 00000000 0x0 0x0
0xffff920000012c80 0041 00000000 0x0 0x0
0xffff920000012d00 0041 00000000 0x0 0x0
0xffff920000012d80 0041 00000000 0x0 0x0
0xffff920000012e00 0041 00000000 0x0 0x0
0xffff920000012e80 0041 00000000 0x0 0x0
0xffff920000012f00 0041 00000000 0x0 0x0
0xffff920000012f80 0041 00000000 0x0 0x0
0xffff920000013000 0041 00000000 0x0 0x0
0xffff920000013080 0045 00000000 0x0 0x0
0xffff920000013100 0001 00000000 0x0 0x0
0xffff920000013180 0001 00000000 0x0 0x0
0xffff920000013200 0001 00000000 0x0 0x0
0xffff920000013280 0001 00000000 0x0 0x0
0xffff920000013300 0001 00000000 0x0 0x0
0xffff920000013380 0001 00000000 0x0 0x0
0xffff920000013400 0001 00000000 0x0 0x0
0xffff920000013480 0001 00000000 0x0 0x0
0xffff920000013500 0001 00000000 0x0 0x0
0xffff920000013580 0001 00000000 0x0 0x0
0xffff920000013600 0001 00000000 0x0 0x0
0xffff920000013680 0001 00000000 0x0 0x0
0xffff920000013700 0001 00000000 0x0 0x0
0xffff920000013780 0001 00000000 0x0 0x0
0xffff920000013800 0001 00000000 0x0 0x0
0xffff920000013880 0001 00000000 0x0 0x0
0xffff920000013900 0001 00000000 0x0 0x0
0xffff920000013980 0001 00000000 0x0 0x0
0xffff920000013a00 0001 00000000 0x0 0x0
0xffff920000013a80 0001 00000000 0x0 0x0
0xffff920000013b00 0001 00000000 0x0 0x0
0xffff920000013b80 0001 00000000 0x0 0x0
0xffff920000013c00 0001 00000000 0x0 0x0
0xffff920000013c80 0001 00000000 0x0 0x0
0xffff920000013d00 0001 00000000 0x0 0x0
0xffff920000013d80 0001 00000000 0x0 0x0
0xffff920000013e00 0001 00000000 0x0 0x0
0xffff920000013e80 0001 00000000 0x0 0x0
0xffff920000013f00 0001 00000000 0x0 0x0
0xffff920000013f80 0001 00000000 0x0 0x0
0xffff920000014000 0001 00000000 0x0 0x0
0xffff920000014080 0001 00000000 0x0 0x0
0xffff920000014100 0001 00000000 0x0 0x0
0xffff920000014180 0001 00000000 0x0 0x0
0xffff920000014200 0001 00000000 0x0 0x0
0xffff920000014280 0001 00000000 0x0 0x0
0xffff920000014300 0001 00000000 0x0 0x0
0xffff920000014380 0001 00000000 0x0 0x0
0xffff920000014400 0001 00000000 0x0 0x0
0xffff920000014480 0001 00000000 0x0 0x0
0xffff920000014500 0001 00000000 0x0 0x0
0xffff920000014580 0001 00000000 0x0 0x0
0xffff920000014600 0001 00000000 0x0 0x0
0xffff920000014680 0001 00000000 0x0 0x0
0xffff920000014700 0001 00000000 0x0 0x0
0xffff920000014780 0001 00000000 0x0 0x0
0xffff920000014800 0001 00000000 0x0 0x0
0xffff920000014880 0001 00000000 0x0 0x0
0xffff920000014900 0001 00000000 0x0 0x0
0xffff920000014980 0001 00000000 0x0 0x0
0xffff920000014a00 0001 00000000 0x0 0x0
0xffff920000014a80 0001 00000000 0x0 0x0
0xffff920000014b00 0001 00000000 0x0 0x0
0xffff920000014b80 0001 00000000 0x0 0x0
0xffff920000014c00 0041 00000000 0x0 0x0
0xffff920000014c80 0041 00000000 0x0 0x0
0xffff920000014d00 0041 00000000 0x0 0x0
0xffff920000014d80 0041 00000000 0x0 0x0
0xffff920000014e00 0041 00000000 0x0 0x0
0xffff920000014e80 0041 00000000 0x0 0x0
0xffff920000014f00 0041 00000000 0x0 0x0
0xffff920000014f80 0041 00000000 0x0 0x0
0xffff920000015000 0041 00000000 0x0 0x0
0xffff920000015080 0041 00000000 0x0 0x0
0xffff920000015100 0041 00000000 0x0 0x0
0xffff920000015180 0041 00000000 0x0 0x0
0xffff920000015200 0041 00000000 0x0 0x0
0xffff920000015280 0041 00000000 0x0 0x0
0xffff920000015300 0041 00000000 0x0 0x0
0xffff920000015380 0041 00000000 0x0 0x0
0xffff920000015400 0041 00000000 0x0 0x0
0xffff920000015480 0041 00000000 0x0 0x0
0xffff920000015500 0041 00000000 0x0 0x0
0xffff920000015580 0041 00000000 0x0 0x0
0xffff920000015600 0041 00000000 0x0 0x0
0xffff920000015680 0041 00000000 0x0 0x0
0xffff920000015700 0041 00000000 0x0 0x0
0xffff920000015780 0041 00000000 0x0 0x0
0xffff920000015800 0041 00000000 0x0 0x0
0xffff920000015880 0041 00000000 0x0 0x0
0xffff920000015900 0041 00000000 0x0 0x0
0xffff920000015980 0041 00000000 0x0 0x0
0xffff920000015a00 0041 00000000 0x0 0x0
0xffff920000015a80 0041 00000000 0x0 0x0
0xffff920000015b00 0041 00000000 0x0 0x0
0xffff920000015b80 0041 00000000 0x0 0x0
0xffff920000015c00 0041 00000000 0x0 0x0
0xffff920000015c80 0041 00000000 0x0 0x0
0xffff920000015d00 0041 00000000 0x0 0x0
0xffff920000015d80 0041 00000000 0x0 0x0
0xffff920000015e00 0041 00000000 0x0 0x0
0xffff920000015e80 0041 00000000 0x0 0x0
0xffff920000015f00 0041 00000000 0x0 0x0
0xffff920000015f80 0041 00000000 0x0 0x0
0xffff920000016000 0041 00000000 0x0 0x0
0xffff920000016080 0041 00000000 0x0 0x0
0xffff920000016100 0001 00000000 0x0 0x0
0xffff920000016180 0001 00000000 0x0 0x0
0xffff920000016200 0001 00000000 0x0 0x0
0xffff920000016280 0001 00000000 0x0 0x0
0xffff920000016300 0001 00000000 0x0 0x0
0xffff920000016380 0001 00000000 0x0 0x0
0xffff920000016400 0001 00000000 0x0 0x0
0xffff920000016480 0001 00000000 0x0 0x0
0xffff920000016500 0001 00000000 0x0 0x0
0xffff920000016580 0001 00000000 0x0 0x0
0xffff920000016600 0001 00000000 0x0 0x0
0xffff920000016680 0001 00000000 0x0 0x0
0xffff920000016700 0001 00000000 0x0 0x0
0xffff920000016780 0001 00000000 0x0 0x0
0xffff920000016800 0001 00000000 0x0 0x0
0xffff920000016880 0001 00000000 0x0 0x0
0xffff920000016900 0001 00000000 0x0 0x0
0xffff920000016980 0001 00000000 0x0 0x0
0xffff920000016a00 0001 00000000 0x0 0x0
0xffff920000016a80 0001 00000000 0x0 0x0
0xffff920000016b00 0001 00000000 0x0 0x0
0xffff920000016b80 0001 00000000 0x0 0x0
0xffff920000016c00 0001 00000000 0x0 0x0
0xffff920000016c80 0001 00000000 0x0 0x0
0xffff920000016d00 0001 00000000 0x0 0x0
0xffff920000016d80 0001 00000000 0x0 0x0
0xffff920000016e00 0001 00000000 0x0 0x0
0xffff920000016e80 0001 00000000 0x0 0x0
0xffff920000016f00 0001 00000000 0x0 0x0
0xffff920000016f80 0001 00000000 0x0 0x0
0xffff920000017000 0001 00000000 0x0 0x0
0xffff920000017080 0001 00000000 0x0 0x0
0xffff920000017100 0001 00000000 0x0 0x0
0xffff920000017180 0001 00000000 0x0 0x0
0xffff920000017200 0001 00000000 0x0 0x0
0xffff920000017280 0001 00000000 0x0 0x0
0xffff920000017300 0001 00000000 0x0 0x0
0xffff920000017380 0001 00000000 0x0 0x0
0xffff920000017400 0001 00000000 0x0 0x0
0xffff920000017480 0001 00000000 0x0 0x0
0xffff920000017500 0001 00000000 0x0 0x0
0xffff920000017580 0001 00000000 0x0 0x0
0xffff920000017600 0001 00000000 0x0 0x0
0xffff920000017680 0001 00000000 0x0 0x0
0xffff920000017700 0001 00000000 0x0 0x0
0xffff920000017780 0001 00000000 0x0 0x0
0xffff920000017800 0001 00000000 0x0 0x0
0xffff920000017880 0001 00000000 0x0 0x0
0xffff920000017900 0001 00000000 0x0 0x0
0xffff920000017980 0001 00000000 0x0 0x0
0xffff920000017a00 0001 00000000 0x0 0x0
0xffff920000017a80 0001 00000000 0x0 0x0
0xffff920000017b00 0001 00000000 0x0 0x0
0xffff920000017b80 0001 00000000 0x0 0x0
0xffff920000017c00 0041 00000000 0x0 0x0
0xffff920000017c80 0041 00000000 0x0 0x0
0xffff920000017d00 0041 00000000 0x0 0x0
0xffff920000017d80 0041 00000000 0x0 0x0
0xffff920000017e00 0041 00000000 0x0 0x0
0xffff920000017e80 0041 00000000 0x0 0x0
0xffff920000017f00 0041 00000000 0x0 0x0
0xffff920000017f80 0041 00000000 0x0 0x0
0xffff920000018000 0041 00000000 0x0 0x0
0xffff920000018080 0041 00000000 0x0 0x0
0xffff920000018100 0041 00000000 0x0 0x0
0xffff920000018180 0041 00000000 0x0 0x0
0xffff920000018200 0041 00000000 0x0 0x0
0xffff920000018280 0041 00000000 0x0 0x0
0xffff920000018300 0041 00000000 0x0 0x0
0xffff920000018380 0041 00000000 0x0 0x0
0xffff920000018400 0041 00000000 0x0 0x0
0xffff920000018480 0041 00000000 0x0 0x0
0xffff920000018500 0041 00000000 0x0 0x0
0xffff920000018580 0041 00000000 0x0 0x0
0xffff920000018600 0041 00000000 0x0 0x0
0xffff920000018680 0041 00000000 0x0 0x0
0xffff920000018700 0041 00000000 0x0 0x0
0xffff920000018780 0041 00000000 0x0 0x0
0xffff920000018800 0041 00000000 0x0 0x0
0xffff920000018880 0041 00000000 0x0 0x0
0xffff920000018900 0041 00000000 0x0 0x0
0xffff920000018980 0041 00000000 0x0 0x0
0xffff920000018a00 0041 00000000 0x0 0x0
0xffff920000018a80 0041 00000000 0x0 0x0
0xffff920000018b00 0041 00000000 0x0 0x0
0xffff920000018b80 0041 00000000 0x0 0x0
0xffff920000018c00 0041 00000000 0x0 0x0
0xffff920000018c80 0041 00000000 0x0 0x0
0xffff920000018d00 0041 00000000 0x0 0x0
0xffff920000018d80 0041 00000000 0x0 0x0
0xffff920000018e00 0041 00000000 0x0 0x0
0xffff920000018e80 0041 00000000 0x0 0x0
0xffff920000018f00 0041 00000000 0x0 0x0
0xffff920000018f80 0041 00000000 0x0 0x0
0xffff920000019000 0041 00000000 0x0 0x0
0xffff920000019080 0041 00000000 0x0 0x0
0xffff920000019100 0001 00000000 0x0 0x0
0xffff920000019180 0001 00000000 0x0 0x0
0xffff920000019200 0001 00000000 0x0 0x0
0xffff920000019280 0001 00000000 0x0 0x0
0xffff920000019300 0001 00000000 0x0 0x0
0xffff920000019380 0001 00000000 0x0 0x0
0xffff920000019400 0001 00000000 0x0 0x0
0xffff920000019480 0001 00000000 0x0 0x0
0xffff920000019500 0001 00000000 0x0 0x0
0xffff920000019580 0001 00000000 0x0 0x0
0xffff920000019600 0001 00000000 0x0 0x0
0xffff920000019680 0001 00000000 0x0 0x0
0xffff920000019700 0001 00000000 0x0 0x0
0xffff920000019780 0001 00000000 0x0 0x0
0xffff920000019800 0001 00000000 0x0 0x0
0xffff920000019880 0001 00000000 0x0 0x0
0xffff920000019900 0001 00000000 0x0 0x0
0xffff920000019980 0001 00000000 0x0 0x0
0xffff920000019a00 0001 00000000 0x0 0x0
0xffff920000019a80 0001 00000000 0x0 0x0
0xffff920000019b00 0001 00000000 0x0 0x0
0xffff920000019b80 0001 00000000 0x0 0x0
0xffff920000019c00 0001 00000000 0x0 0x0
0xffff920000019c80 0001 00000000 0x0 0x0
0xffff920000019d00 0001 00000000 0x0 0x0
0xffff920000019d80 0001 00000000 0x0 0x0
0xffff920000019e00 0001 00000000 0x0 0x0
0xffff920000019e80 0001 00000000 0x0 0x0
0xffff920000019f00 0001 00000000 0x0 0x0
0xffff920000019f80 0001 00000000 0x0 0x0
0xffff92000001a000 0001 00000000 0x0 0x0
0xffff92000001a080 0001 00000000 0x0 0x0
0xffff92000001a100 0001 00000000 0x0 0x0
0xffff92000001a180 0001 00000000 0x0 0x0
0xffff92000001a200 0001 00000000 0x0 0x0
0xffff92000001a280 0001 00000000 0x0 0x0
0xffff92000001a300 0001 00000000 0x0 0x0
0xffff92000001a380 0001 00000000 0x0 0x0
0xffff92000001a400 0001 00000000 0x0 0x0
0xffff92000001a480 0001 00000000 0x0 0x0
0xffff92000001a500 0001 00000000 0x0 0x0
0xffff92000001a580 0001 00000000 0x0 0x0
0xffff92000001a600 0001 00000000 0x0 0x0
0xffff92000001a680 0001 00000000 0x0 0x0
0xffff92000001a700 0001 00000000 0x0 0x0
0xffff92000001a780 0001 00000000 0x0 0x0
0xffff92000001a800 0001 00000000 0x0 0x0
0xffff92000001a880 0001 00000000 0x0 0x0
0xffff92000001a900 0001 00000000 0x0 0x0
0xffff92000001a980 0001 00000000 0x0 0x0
0xffff92000001aa00 0001 00000000 0x0 0x0
0xffff92000001aa80 0001 00000000 0x0 0x0
0xffff92000001ab00 0001 00000000 0x0 0x0
0xffff92000001ab80 0001 00000000 0x0 0x0
0xffff92000001ac00 0041 00000000 0x0 0x0
0xffff92000001ac80 0041 00000000 0x0 0x0
0xffff92000001ad00 0041 00000000 0x0 0x0
0xffff92000001ad80 0041 00000000 0x0 0x0
0xffff92000001ae00 0041 00000000 0x0 0x0
0xffff92000001ae80 0041 00000000 0x0 0x0
0xffff92000001af00 0041 00000000 0x0 0x0
0xffff92000001af80 0041 00000000 0x0 0x0
0xffff92000001b000 0041 00000000 0x0 0x0
0xffff92000001b080 0041 00000000 0x0 0x0
0xffff92000001b100 0041 00000000 0x0 0x0
0xffff92000001b180 0041 00000000 0x0 0x0
0xffff92000001b200 0041 00000000 0x0 0x0
0xffff92000001b280 0041 00000000 0x0 0x0
0xffff92000001b300 0041 00000000 0x0 0x0
0xffff92000001b380 0041 00000000 0x0 0x0
0xffff92000001b400 0045 00000000 0x0 0x0
0xffff92000001b480 0041 00000000 0x0 0x0
0xffff92000001b500 0041 00000000 0x0 0x0
0xffff92000001b580 0041 00000000 0x0 0x0
0xffff92
Reply all
Reply to author
Forward
0 new messages