panic: UBSan: Undefined Behavior in /syzkaller/managers/netbsd-kubsan/kernel/sys/kern/sys_select.c:LINE, signed integer

[syzbot]

Hello,

syzbot found the following crash on:

HEAD commit: cb71f39b ref/mod bit should be set according to 'flags' ar..
git tree: netbsd
console output: https://syzkaller.appspot.com/x/log.txt?x=1258433d600000
kernel config: https://syzkaller.appspot.com/x/.config?x=824b23e1f4b6c76b
dashboard link: https://syzkaller.appspot.com/bug?extid=4e794d630199d943375a

Unfortunately, I don't have any reproducer for this crash yet.

IMPORTANT: if you fix the bug, please add the following tag to the commit:
Reported-by: syzbot+4e794d...@syzkaller.appspotmail.com

[ 45.1127214] panic: UBSan: Undefined Behavior in
/syzkaller/managers/netbsd-kubsan/kernel/sys/kern/sys_select.c:208:3,
signed integer overflow: 1391565348 * 1000 cannot be represented in
type 'int'

[ 45.1378958] cpu0: Begin traceback...
[ 45.1546790] vpanic() at netbsd:vpanic+0x258 sys/kern/subr_prf.c:336
[ 45.1966445] isAlreadyReported() at netbsd:isAlreadyReported
[ 45.2490938] HandleOverflow() at netbsd:HandleOverflow+0x19a
sys/../common/lib/libc/misc/ubsan.c:354
[ 45.2910571] sys___select50() at netbsd:sys___select50+0xe9
sys/kern/sys_select.c:208
[ 45.3330211] sys___syscall() at netbsd:sys___syscall+0x132 sy_call
sys/sys/syscallvar.h:65 [inline]
[ 45.3330211] sys___syscall() at netbsd:sys___syscall+0x132
sys/kern/sys_syscall.c:77
[ 45.3749847] syscall() at netbsd:syscall+0x1ce sy_call
sys/sys/syscallvar.h:65 [inline]
[ 45.3749847] syscall() at netbsd:syscall+0x1ce sy_invoke
sys/sys/syscallvar.h:94 [inline]
[ 45.3749847] syscall() at netbsd:syscall+0x1ce
sys/arch/x86/x86/syscall.c:138
[ 45.3959659] --- syscall (number 198) ---
[ 45.4169463] 724222643b9a:
[ 45.4169463] cpu0: End traceback...
[ 45.4169463] fatal breakpoint trap in supervisor mode
[ 45.4280496] trap type 1 code 0 rip 0xffffffff8021ddad cs 0x8 rflags
0x282 cr2 0x753790201000 ilevel 0 rsp 0xffffb680a8930880
[ 45.4417899] curlwp 0xffffda5ea1bec080 pid 523.2 lowest kstack
0xffffb680a892d2c0
Stopped in pid 523.2 (syz-executor.3) at netbsd:breakpoint+0x5:
leave
?
breakpoint() at netbsd:breakpoint+0x5
db_panic() at netbsd:db_panic+0xd9 sys/ddb/db_panic.c:67
vpanic() at netbsd:vpanic+0x258 sys/kern/subr_prf.c:336
isAlreadyReported() at netbsd:isAlreadyReported
HandleOverflow() at netbsd:HandleOverflow+0x19a
sys/../common/lib/libc/misc/ubsan.c:354
sys___select50() at netbsd:sys___select50+0xe9 sys/kern/sys_select.c:208
sys___syscall() at netbsd:sys___syscall+0x132 sy_call
sys/sys/syscallvar.h:65 [inline]
sys___syscall() at netbsd:sys___syscall+0x132 sys/kern/sys_syscall.c:77
syscall() at netbsd:syscall+0x1ce sy_call sys/sys/syscallvar.h:65 [inline]
syscall() at netbsd:syscall+0x1ce sy_invoke sys/sys/syscallvar.h:94 [inline]
syscall() at netbsd:syscall+0x1ce sys/arch/x86/x86/syscall.c:138
--- syscall (number 198) ---
724222643b9a:
ds 880
es 9741
fs 870
gs cac0
rdi ffffda5eb0eba4e0
rsi ffffda5ea1bec368
rbp ffffb680a8930880
rbx ffffffff8342cac0 cpu_info_primary
rdx 2
rcx 0
rax ffffda5e3acff510
r8 ffffffff8342cac0 cpu_info_primary
r9 0
r10 ffffb680a892ffa0
r11 10
r12 104
r13 ffffffff83021298 ostype+0xecea0
r14 ffffb680a89308f8
r15 ffffffff84cd5fa0 pool_head+0x4c0
rip ffffffff8021ddad breakpoint+0x5
cs 8
rflags 282
rsp ffffb680a8930880
ss 10
netbsd:breakpoint+0x5: leave
PID LID S CPU FLAGS STRUCT LWP * NAME WAIT
652 2 3 0 80 ffffda5ea2dac060 syz-executor.2 parked
652 1 2 0 10000000 ffffda5e9a646100 syz-executor.2
523 > 2 7 0 0 ffffda5ea1bec080 syz-executor.3
523 1 2 1 10000000 ffffda5dc1fd0ae0 syz-executor.3
260 2 2 1 0 ffffda5eab6bf040 syz-executor.1
260 1 2 1 10040000 ffffda5ea1bec900 syz-executor.1
656 1 2 1 40000 ffffda5e9b2610c0 sh
483 1 2 0 0 ffffda5eadab7bc0 syz-executor.3
537 1 2 0 0 ffffda5db7ac5280 syz-executor.2
570 1 2 0 0 ffffda5eadab7780 syz-executor.1
41 > 1 7 1 0 ffffda5da0683200 syz-executor.0
476 10 2 0 0 ffffda5db0d432e0 syz-fuzzer
476 9 3 0 80 ffffda5dd9f2a700 syz-fuzzer parked
476 8 3 0 80 ffffda5dba4062a0 syz-fuzzer parked
476 7 3 0 80 ffffda5db0d43b60 syz-fuzzer kqueue
476 6 3 1 80 ffffda5dd9f2ab40 syz-fuzzer parked
476 5 3 1 80 ffffda5dba4066e0 syz-fuzzer parked
476 4 3 1 80 ffffda5dba406b20 syz-fuzzer parked
476 3 3 0 80 ffffda5dbd808680 syz-fuzzer parked
476 2 3 0 80 ffffda5eae37f320 syz-fuzzer parked
476 1 3 1 80 ffffda5eadab7340 syz-fuzzer parked
431 1 3 1 80 ffffda5e43657b80 sshd select
574 1 3 1 80 ffffda5eae37fba0 getty nanoslp
564 1 3 1 80 ffffda5dbd808ac0 getty nanoslp
567 1 3 1 80 ffffda5dc1fd06a0 getty nanoslp
534 1 3 1 80 ffffda5dbd808240 getty ttyraw
421 1 3 0 80 ffffda5db0d43720 cron nanoslp
491 1 3 0 80 ffffda5eae37f760 inetd kqueue
358 1 3 0 80 ffffda5e43657740 sshd select
467 1 3 1 80 ffffda5dd9f2a2c0 powerd kqueue
458 1 2 1 0 ffffda5dc1fd0260 makemandb
242 1 3 0 80 ffffda5e43657300 syslogd kqueue
248 1 3 1 80 ffffda5db7ac56c0 dhcpcd wait
228 1 3 0 80 ffffda5db7ac5b00 dhcpcd kqueue
1 1 3 0 80 ffffda5da05bba60 init wait
0 58 3 0 204 ffffda5da0683640 physiod physiod
0 57 3 0 204 ffffda5da0693220 pooldrain pooldrain
0 56 3 0 204 ffffda5da0693aa0 aiodoned aiodoned
0 55 3 0 200 ffffda5da0693660 ioflush syncer
0 54 3 0 200 ffffda5da0683a80 pgdaemon pgdaemon
0 51 3 1 200 ffffda5d9ecf49c0 npfgc-0 npfgccv
0 50 3 0 204 ffffda5da05bb620 rt_free rt_free
0 49 3 0 204 ffffda5da05bb1e0 unpgc unpgc
0 48 3 0 204 ffffda5da05c4a40 key_timehandler
key_timehandler
0 47 3 1 204 ffffda5da05c4600 icmp6_wqinput/1
icmp6_wqinput
0 46 3 0 204 ffffda5da05c41c0 icmp6_wqinput/0
icmp6_wqinput
0 45 3 0 204 ffffda5da054da20 nd6_timer nd6_timer
0 44 3 1 204 ffffda5da0527160 carp6_wqinput/1
carp6_wqinput
0 43 3 0 204 ffffda5da05275a0 carp6_wqinput/0
carp6_wqinput
0 42 3 1 204 ffffda5da05279e0 carp_wqinput/1
carp_wqinput
0 41 3 0 204 ffffda5da0546180 carp_wqinput/0
carp_wqinput
0 40 3 1 204 ffffda5da05465c0 icmp_wqinput/1
icmp_wqinput
0 39 3 0 204 ffffda5da0546a00 icmp_wqinput/0
icmp_wqinput
0 38 3 1 204 ffffda5da054d1a0 rt_timer rt_timer
0 37 3 0 204 ffffda5da054d5e0 vmem_rehash vmem_rehash
0 27 3 0 204 ffffda5d9ecf4580 scsibus0 sccomp
0 26 3 0 200 ffffda5d9ecf4140 pms0 pmsreset
0 25 3 1 204 ffffda5d9ec879a0 xcall/1 xcall
0 24 1 1 200 ffffda5d9ec87560 softser/1
0 23 1 1 200 ffffda5d9ec87120 softclk/1
0 22 1 1 200 ffffda5d9ec70980 softbio/1
0 21 1 1 200 ffffda5d9ec70540 softnet/1
0 20 1 1 201 ffffda5d9ec70100 idle/1
0 19 3 0 204 ffffda5eaf190960 lnxpwrwq lnxpwrwq
0 18 3 0 204 ffffda5eaf190520 lnxlngwq lnxlngwq
0 17 3 0 204 ffffda5eaf1900e0 lnxsyswq lnxsyswq
0 16 3 0 204 ffffda5eaf1a4940 lnxrcugc lnxrcugc
0 15 3 0 204 ffffda5eaf1a4500 sysmon smtaskq
0 14 3 0 204 ffffda5eaf1a40c0 pmfsuspend pmfsuspend
0 13 3 0 204 ffffda5eaf5c6920 pmfevent pmfevent
0 12 3 0 204 ffffda5eaf5c64e0 sopendfree sopendfr
0 11 3 0 204 ffffda5eaf5c60a0 nfssilly nfssilly
0 10 3 1 200 ffffda5eb0a03900 cachegc cachegc
0 9 2 0 200 ffffda5eb0a034c0 vdrain
0 8 3 0 200 ffffda5eb0a03080 modunload mod_unld
0 7 3 0 204 ffffda5eb0a108e0 xcall/0 xcall
0 6 1 0 200 ffffda5eb0a104a0 softser/0
0 5 1 0 200 ffffda5eb0a10060 softclk/0
0 4 1 0 200 ffffda5eb0a378c0 softbio/0
0 3 1 0 200 ffffda5eb0a37480 softnet/0
0 2 1 0 201 ffffda5eb0a37040 idle/0
0 1 3 0 200 ffffffff84c01d00 swapper uvm
[Locks tracked through LWPs]
Locks held by an LWP (syz-executor.2):
Lock 0 (initialized at uvm_obj_init)
lock address : 0xffffda5eab4fda80 type : sleep/adaptive
initialized : 0xffffffff81ac4ae0
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
current cpu : 0 last held: 0
current lwp : 0xffffda5ea1bec080 last held: 0xffffda5e9a646100
last locked* : 0xffffffff81a9bbf9 unlocked : 0xffffffff81a984e5
owner field : 0xffffda5e9a646100 wait/spin: 0/0

Turnstile chain at 0xffffffff85a63f80.
=> No active turnstile for this lock.

Locks held by an LWP (syz-executor.0):
Lock 0 (initialized at vcache_alloc)
lock address : 0xffffda5eac471558 type : sleep/adaptive
initialized : 0xffffffff81d652b6
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
current cpu : 0 last held: 1
current lwp : 0xffffda5ea1bec080 last held: 0xffffda5da0683200
last locked* : 0xffffffff81da96b0 unlocked : 0xffffffff81da95ef
owner/count : 0xffffda5da0683200 flags : 0x0000000000000004

Turnstile chain at 0xffffffff85a64130.
=> No active turnstile for this lock.


[Locks tracked through CPUs]

PAGE FLAG PQ UOBJECT UANON
0xffffb68000003180 0041 0000 0x0 0x0
0xffffb680000031f8 0041 0000 0x0 0x0
0xffffb68000003270 0041 0000 0x0 0x0
0xffffb680000032e8 0041 0000 0x0 0x0
0xffffb68000003360 0041 0000 0x0 0x0
0xffffb680000033d8 0041 0000 0x0 0x0
0xffffb68000003450 0041 0000 0x0 0x0
0xffffb680000034c8 0041 0000 0x0 0x0
0xffffb68000003540 0049 0000 0x0 0x0
0xffffb680000035b8 0048 0000 0x0 0x0
0xffffb68000003630 0048 0000 0x0 0x0
0xffffb680000036a8 0048 0000 0x0 0x0
0xffffb68000003720 0048 0000 0x0 0x0
0xffffb68000003798 0048 0000 0x0 0x0
0xffffb68000003810 0049 0000 0x0 0x0
0xffffb68000003888 0049 0000 0x0 0x0
0xffffb68000003900 0040 0000 0x0 0x0
0xffffb68000003978 0040 0000 0x0 0x0
0xffffb680000039f0 0040 0000 0x0 0x0
0xffffb68000003a68 0040 0000 0x0 0x0
0xffffb68000003ae0 0040 0000 0x0 0x0
0xffffb68000003b58 0040 0000 0x0 0x0
0xffffb68000003bd0 0040 0000 0x0 0x0
0xffffb68000003c48 0049 0000 0x0 0x0
0xffffb68000003cc0 0040 0000 0x0 0x0
0xffffb68000003d38 0048 0000 0x0 0x0
0xffffb68000003db0 0048 0000 0x0 0x0
0xffffb68000003e28 0048 0000 0x0 0x0
0xffffb68000003ea0 0048 0000 0x0 0x0
0xffffb68000003f18 0048 0000 0x0 0x0
0xffffb68000003f90 0048 0000 0x0 0x0
0xffffb68000004008 0040 0000 0x0 0x0
0xffffb68000004080 0048 0000 0x0 0x0
0xffffb680000040f8 0048 0000 0x0 0x0
0xffffb68000004170 0048 0000 0x0 0x0
0xffffb680000041e8 0048 0000 0x0 0x0
0xffffb68000004260 0048 0000 0x0 0x0
0xffffb680000042d8 0049 0000 0x0 0x0
0xffffb68000004350 0048 0000 0x0 0x0
0xffffb680000043c8 0048 0000 0x0 0x0
0xffffb68000004440 0049 0000 0x0 0x0
0xffffb680000044b8 0048 0000 0x0 0x0
0xffffb68000004530 0048 0000 0x0 0x0
0xffffb680000045a8 0048 0000 0x0 0x0
0xffffb68000004620 0048 0000 0x0 0x0
0xffffb68000004698 0048 0000 0x0 0x0
0xffffb68000004710 0040 0000 0x0 0x0
0xffffb68000004788 0048 0000 0x0 0x0
0xffffb68000004800 0048 0000 0x0 0x0
0xffffb68000004878 0048 0000 0x0 0x0
0xffffb680000048f0 0048 0000 0x0 0x0
0xffffb68000004968 0041 0000 0x0 0x0
0xffffb680000049e0 0041 0000 0x0 0x0
0xffffb68000004a58 0048 0000 0x0 0x0
0xffffb68000004ad0 0048 0000 0x0 0x0
0xffffb68000004b48 0048 0000 0x0 0x0
0xffffb68000004bc0 0048 0000 0x0 0x0
0xffffb68000004c38 0041 0000 0x0 0x0
0xffffb68000004cb0 0041 0000 0x0 0x0
0xffffb68000004d28 0041 0000 0x0 0x0
0xffffb68000004da0 0041 0000 0x0 0x0
0xffffb68000004e18 0041 0000 0x0 0x0
0xffffb68000004e90 0048 0000 0x0 0x0
0xffffb68000004f08 0048 0000 0x0 0x0
0xffffb68000004f80 0048 0000 0x0 0x0
0xffffb68000004ff8 0041 0000 0x0 0x0
0xffffb68000005070 0041 0000 0x0 0x0
0xffffb680000050e8 0041 0000 0x0 0x0
0xffffb68000005160 0041 0000 0x0 0x0
0xffffb680000051d8 0041 0000 0x0 0x0
0xffffb68000005250 0048 0000 0x0 0x0
0xffffb680000052c8 0049 0000 0x0 0x0
0xffffb68000005340 0049 0000 0x0 0x0
0xffffb680000053b8 0041 0000 0x0 0x0
0xffffb68000005430 0041 0000 0x0 0x0
0xffffb680000054a8 0041 0000 0x0 0x0
0xffffb68000005520 0041 0000 0x0 0x0
0xffffb68000005598 0041 0000 0x0 0x0
0xffffb68000005610 0041 0000 0x0 0x0
0xffffb68000005688 0041 0000 0x0 0x0
0xffffb68000005700 0041 0000 0x0 0x0
0xffffb68000005778 0041 0000 0x0 0x0
0xffffb680000057f0 0041 0000 0x0 0x0
0xffffb68000005868 0041 0000 0x0 0x0
0xffffb680000058e0 0041 0000 0x0 0x0
0xffffb68000005958 0041 0000 0x0 0x0
0xffffb680000059d0 0041 0000 0x0 0x0
0xffffb68000005a48 0041 0000 0x0 0x0
0xffffb68000005ac0 0041 0000 0x0 0x0
0xffffb68000005b38 0041 0000 0x0 0x0
0xffffb68000005bb0 0041 0000 0x0 0x0
0xffffb68000005c28 0041 0000 0x0 0x0
0xffffb68000005ca0 0041 0000 0x0 0x0
0xffffb68000005d18 0041 0000 0x0 0x0
0xffffb68000005d90 0041 0000 0x0 0x0
0xffffb68000005e08 0041 0000 0x0 0x0
0xffffb68000005e80 0041 0000 0x0 0x0
0xffffb68000005ef8 0041 0000 0x0 0x0
0xffffb68000005f70 0041 0000 0x0 0x0
0xffffb68000005fe8 0049 0000 0x0 0x0
0xffffb68000006060 0049 0000 0x0 0x0
0xffffb680000060d8 0041 0000 0x0 0x0
0xffffb68000006150 0041 0000 0x0 0x0
0xffffb680000061c8 0041 0000 0x0 0x0
0xffffb68000006240 0041 0000 0x0 0x0
0xffffb680000062b8 0049 0000 0x0 0x0
0xffffb68000006330 0049 0000 0x0 0x0
0xffffb680000063a8 0049 0000 0x0 0x0
0xffffb68000006420 0049 0000 0x0 0x0
0xffffb68000006498 0049 0000 0x0 0x0
0xffffb68000006510 0041 0000 0x0 0x0
0xffffb68000006588 0041 0000 0x0 0x0
0xffffb68000006600 0041 0000 0x0 0x0
0xffffb68000006678 0049 0000 0x0 0x0
0xffffb680000066f0 0049 0000 0x0 0x0
0xffffb68000006768 0049 0000 0x0 0x0
0xffffb680000067e0 0049 0000 0x0 0x0
0xffffb68000006858 0049 0000 0x0 0x0
0xffffb680000068d0 0041 0000 0x0 0x0
0xffffb68000006948 0041 0000 0x0 0x0
0xffffb680000069c0 0049 0000 0x0 0x0
0xffffb68000006a38 0049 0000 0x0 0x0
0xffffb68000006ab0 0049 0000 0x0 0x0
0xffffb68000006b28 0048 0000 0x0 0x0
0xffffb68000006ba0 0049 0000 0x0 0x0
0xffffb68000006c18 0049 0000 0x0 0x0
0xffffb68000006c90 0049 0000 0x0 0x0
0xffffb68000006d08 0049 0000 0x0 0x0
0xffffb68000006d80 0049 0000 0x0 0x0
0xffffb68000006df8 0049 0000 0x0 0x0
0xffffb68000006e70 0048 0000 0x0 0x0
0xffffb68000006ee8 0049 0000 0x0 0x0
0xffffb68000006f60 0048 0000 0x0 0x0
0xffffb68000006fd8 0048 0000 0x0 0x0
0xffffb68000007050 0049 0000 0x0 0x0
0xffffb680000070c8 0049 0000 0x0 0x0
0xffffb68000007140 0049 0000 0x0 0x0
0xffffb680000071b8 0048 0000 0x0 0x0
0xffffb68000007230 0049 0000 0x0 0x0
0xffffb680000072a8 0048 0000 0x0 0x0
0xffffb68000007320 0048 0000 0x0 0x0
0xffffb68000007398 0048 0000 0x0 0x0
0xffffb68000007410 0049 0000 0x0 0x0
0xffffb68000007488 0049 0000 0x0 0x0
0xffffb68000007500 0049 0000 0x0 0x0
0xffffb68000007578 0048 0000 0x0 0x0
0xffffb680000075f0 0049 0000 0x0 0x0
0xffffb68000007668 0048 0000 0x0 0x0
0xffffb680000076e0 0048 0000 0x0 0x0
0xffffb68000007758 0048 0000 0x0 0x0
0xffffb680000077d0 0048 0000 0x0 0x0
0xffffb68000007848 0049 0000 0x0 0x0
0xffffb680000078c0 0048 0000 0x0 0x0
0xffffb68000007938 0048 0000 0x0 0x0
0xffffb680000079b0 0048 0000 0x0 0x0
0xffffb68000007a28 0049 0000 0x0 0x0
0xffffb68000007aa0 0049 0000 0x0 0x0
0xffffb68000007b18 0048 0000 0x0 0x0
0xffffb68000007b90 0048 0000 0x0 0x0
0xffffb68000007c08 0048 0000 0x0 0x0
0xffffb68000007c80 0048 0000 0x0 0x0
0xffffb68000007cf8 0048 0000 0x0 0x0
0xffffb68000007d70 0048 0000 0x0 0x0
0xffffb68000007de8 0048 0000 0x0 0x0
0xffffb68000007e60 0048 0000 0x0 0x0
0xffffb68000007ed8 0049 0000 0x0 0x0
0xffffb68000007f50 0048 0000 0x0 0x0
0xffffb68000007fc8 0048 0000 0x0 0x0
0xffffb68000008040 0048 0000 0x0 0x0
0xffffb680000080b8 0048 0000 0x0 0x0
0xffffb68000008130 0049 0000 0x0 0x0
0xffffb680000081a8 0048 0000 0x0 0x0
0xffffb68000008220 0048 0000 0x0 0x0
0xffffb68000008298 0048 0000 0x0 0x0
0xffffb68000008310 0048 0000 0x0 0x0
0xffffb68000008388 0048 0000 0x0 0x0
0xffffb68000008400 0048 0000 0x0 0x0
0xffffb68000008478 0048 0000 0x0 0x0
0xffffb680000084f0 0048 0000 0x0 0x0
0xffffb68000008568 0048 0000 0x0 0x0
0xffffb680000085e0 0048 0000 0x0 0x0
0xffffb68000008658 0048 0000 0x0 0x0
0xffffb680000086d0 0048 0000 0x0 0x0
0xffffb68000008748 0048 0000 0x0 0x0
0xffffb680000087c0 0008 0000 0x0 0x0
0xffffb68000008838 0008 0000 0x0 0x0
0xffffb680000088b0 0008 0000 0x0 0x0
0xffffb68000008928 0008 0000 0x0 0x0
0xffffb680000089a0 0008 0000 0x0 0x0
0xffffb68000008a18 0008 0000 0x0 0x0
0xffffb68000008a90 0008 0000 0x0 0x0
0xffffb68000008b08 0008 0000 0x0 0x0
0xffffb68000008b80 0008 0000 0x0 0x0
0xffffb68000008bf8 0008 0000 0x0 0x0
0xffffb68000008c70 0008 0000 0x0 0x0
0xffffb68000008ce8 0008 0000 0x0 0x0
0xffffb68000008d60 0008 0000 0x0 0x0
0xffffb68000008dd8 0008 0000 0x0 0x0
0xffffb68000008e50 0008 0000 0x0 0x0
0xffffb68000008ec8 0008 0000 0x0 0x0
0xffffb68000008f40 0008 0000 0x0 0x0
0xffffb68000008fb8 0008 0000 0x0 0x0
0xffffb68000009030 0008 0000 0x0 0x0
0xffffb680000090a8 0008 0000 0x0 0x0
0xffffb68000009120 0008 0000 0x0 0x0
0xffffb68000009198 0008 0000 0x0 0x0
0xffffb68000009210 0008 0000 0x0 0x0
0xffffb68000009288 0008 0000 0x0 0x0
0xffffb68000009300 0008 0000 0x0 0x0
0xffffb68000009378 0008 0000 0x0 0x0
0xffffb680000093f0 0008 0000 0x0 0x0
0xffffb68000009468 0008 0000 0x0 0x0
0xffffb680000094e0 0008 0000 0x0 0x0
0xffffb68000009558 0008 0000 0x0 0x0
0xffffb680000095d0 0008 0000 0x0 0x0
0xffffb68000009648 0008 0000 0x0 0x0
0xffffb680000096c0 0008 0000 0x0 0x0
0xffffb68000009738 0008 0000 0x0 0x0
0xffffb680000097b0 0008 0000 0x0 0x0
0xffffb68000009828 0008 0000 0x0 0x0
0xffffb680000098a0 0008 0000 0x0 0x0
0xffffb68000009918 0008 0000 0x0 0x0
0xffffb68000009990 0008 0000 0x0 0x0
0xffffb68000009a08 0008 0000 0x0 0x0
0xffffb68000009a80 0008 0000 0x0 0x0
0xffffb68000009af8 0008 0000 0x0 0x0
0xffffb68000009b70 0008 0000 0x0 0x0
0xffffb68000009be8 0008 0000 0x0 0x0
0xffffb68000009c60 0008 0000 0x0 0x0
0xffffb68000009cd8 0008 0000 0x0 0x0
0xffffb68000009d50 0008 0000 0x0 0x0
0xffffb68000009dc8 0008 0000 0x0 0x0
0xffffb68000009e40 0008 0000 0x0 0x0
0xffffb68000009eb8 0008 0000 0x0 0x0
0xffffb68000009f30 0008 0000 0x0 0x0
0xffffb68000009fa8 0008 0000 0x0 0x0
0xffffb6800000a020 0008 0000 0x0 0x0
0xffffb6800000a098 0008 0000 0x0 0x0
0xffffb6800000a110 0048 0000 0x0 0x0
0xffffb6800000a188 0048 0000 0x0 0x0
0xffffb6800000a200 0048 0000 0x0 0x0
0xffffb6800000a278 0048 0000 0x0 0x0
0xffffb6800000a2f0 0048 0000 0x0 0x0
0xffffb6800000a368 0048 0000 0x0 0x0
0xffffb6800000a3e0 0048 0000 0x0 0x0
0xffffb6800000a458 0048 0000 0x0 0x0
0xffffb6800000a4d0 0048 0000 0x0 0x0
0xffffb6800000a548 0048 0000 0x0 0x0
0xffffb6800000a5c0 0048 0000 0x0 0x0
0xffffb6800000a638 0048 0000 0x0 0x0
0xffffb6800000a6b0 0048 0000 0x0 0x0
0xffffb6800000a728 0048 0000 0x0 0x0
0xffffb6800000a7a0 0048 0000 0x0 0x0
0xffffb6800000a818 0048 0000 0x0 0x0
0xffffb6800000a890 0048 0000 0x0 0x0
0xffffb6800000a908 0048 0000 0x0 0x0
0xffffb6800000a980 0048 0000 0x0 0x0
0xffffb6800000a9f8 0048 0000 0x0 0x0
0xffffb6800000aa70 0048 0000 0x0 0x0
0xffffb6800000aae8 0048 0000 0x0 0x0
0xffffb6800000ab60 0048 0000 0x0 0x0
0xffffb6800000abd8 0048 0000 0x0 0x0
0xffffb6800000ac50 0048 0000 0x0 0x0
0xffffb6800000acc8 0048 0000 0x0 0x0
0xffffb6800000ad40 0048 0000 0x0 0x0
0xffffb6800000adb8 0048 0000 0x0 0x0
0xffffb6800000ae30 0048 0000 0x0 0x0
0xffffb6800000aea8 0048 0000 0x0 0x0
0xffffb6800000af20 0048 0000 0x0 0x0
0xffffb6800000af98 0048 0000 0x0 0x0
0xffffb6800000b010 0048 0000 0x0 0x0
0xffffb6800000b088 0048 0000 0x0 0x0
0xffffb6800000b100 0048 0000 0x0 0x0
0xffffb6800000b178 0048 0000 0x0 0x0
0xffffb6800000b1f0 0048 0000 0x0 0x0
0xffffb6800000b268 0048 0000 0x0 0x0
0xffffb6800000b2e0 0048 0000 0x0 0x0
0xffffb6800000b358 0048 0000 0x0 0x0
0xffffb6800000b3d0 0048 0000 0x0 0x0
0xffffb6800000b448 0048 0000 0x0 0x0
0xffffb6800000b4c0 0048 0000 0x0 0x0
0xffffb6800000b538 0008 0000 0x0 0x0
0xffffb6800000b5b0 0008 0000 0x0 0x0
0xffffb6800000b628 0008 0000 0x0 0x0
0xffffb6800000b6a0 0008 0000 0x0 0x0
0xffffb6800000b718 0008 0000 0x0 0x0
0xffffb6800000b790 0008 0000 0x0 0x0
0xffffb6800000b808 0008 0000 0x0 0x0
0xffffb6800000b880 0008 0000 0x0 0x0
0xffffb6800000b8f8 0008 0000 0x0 0x0
0xffffb6800000b970 0008 0000 0x0 0x0
0xffffb6800000b9e8 0008 0000 0x0 0x0
0xffffb6800000ba60 0008 0000 0x0 0x0
0xffffb6800000bad8 0008 0000 0x0 0x0
0xffffb6800000bb50 0008 0000 0x0 0x0
0xffffb6800000bbc8 0008 0000 0x0 0x0
0xffffb6800000bc40 0008 0000 0x0 0x0
0xffffb6800000bcb8 0008 0000 0x0 0x0
0xffffb6800000bd30 0008 0000 0x0 0x0
0xffffb6800000bda8 0008 0000 0x0 0x0
0xffffb6800000be20 0008 0000 0x0 0x0
0xffffb6800000be98 0008 0000 0x0 0x0
0xffffb6800000bf10 0008 0000 0x0 0x0
0xffffb6800000bf88 0008 0000 0x0 0x0
0xffffb6800000c000 0008 0000 0x0 0x0
0xffffb6800000c078 0008 0000 0x0 0x0
0xffffb6800000c0f0 0008 0000 0x0 0x0
0xffffb6800000c168 0008 0000 0x0 0x0
0xffffb6800000c1e0 0008 0000 0x0 0x0
0xffffb6800000c258 0008 0000 0x0 0x0
0xffffb6800000c2d0 0008 0000 0x0 0x0
0xffffb6800000c348 0008 0000 0x0 0x0
0xffffb6800000c3c0 0008 0000 0x0 0x0
0xffffb6800000c438 0008 0000 0x0 0x0
0xffffb6800000c4b0 0008 0000 0x0 0x0
0xffffb6800000c528 0008 0000 0x0 0x0
0xffffb6800000c5a0 0008 0000 0x0 0x0
0xffffb6800000c618 0008 0000 0x0 0x0
0xffffb6800000c690 0008 0000 0x0 0x0
0xffffb6800000c708 0008 0000 0x0 0x0
0xffffb6800000c780 0008 0000 0x0 0x0
0xffffb6800000c7f8 0008 0000 0x0 0x0
0xffffb6800000c870 0008 0000 0x0 0x0
0xffffb6800000c8e8 0008 0000 0x0 0x0
0xffffb6800000c960 0008 0000 0x0 0x0
0xffffb6800000c9d8 0008 0000 0x0 0x0
0xffffb6800000ca50 0008 0000 0x0 0x0
0xffffb6800000cac8 0008 0000 0x0 0x0
0xffffb6800000cb40 0008 0000 0x0 0x0
0xffffb6800000cbb8 0008 0000 0x0 0x0
0xffffb6800000cc30 0008 0000 0x0 0x0
0xffffb6800000cca8 0008 0000 0x0 0x0
0xffffb6800000cd20 0008 0000 0x0 0x0
0xffffb6800000cd98 0008 0000 0x0 0x0
0xffffb6800000ce10 0008 0000 0x0 0x0
0xffffb6800000ce88 0048 0000 0x0 0x0
0xffffb6800000cf00 0048 0000 0x0 0x0
0xffffb6800000cf78 0048 0000 0x0 0x0
0xffffb6800000cff0 0048 0000 0x0 0x0
0xffffb6800000d068 0048 0000 0x0 0x0
0xffffb6800000d0e0 0048 0000 0x0 0x0
0xffffb6800000d158 0048 0000 0x0 0x0
0xffffb6800000d1d0 0048 0000 0x0 0x0
0xffffb6800000d248 0048 0000 0x0 0x0
0xffffb6800000d2c0 0048 0000 0x0 0x0
0xffffb6800000d338 0048 0000 0x0 0x0
0xffffb6800000d3b0 0048 0000 0x0 0x0
0xffffb6800000d428 0048 0000 0x0 0x0
0xffffb6800000d4a0 0048 0000 0x0 0x0
0xffffb6800000d518 0048 0000 0x0 0x0
0xffffb6800000d590 0048 0000 0x0 0x0
0xffffb6800000d608 0048 0000 0x0 0x0
0xffffb6800000d680 0048 0000 0x0 0x0
0xffffb6800000d6f8 0048 0000 0x0 0x0
0xffffb6800000d770 0048 0000 0x0 0x0
0xffffb6800000d7e8 0048 0000 0x0 0x0
0xffffb6800000d860 0048 0000 0x0 0x0
0xffffb6800000d8d8 0048 0000 0x0 0x0
0xffffb6800000d950 0048 0000 0x0 0x0
0xffffb6800000d9c8 0048 0000 0x0 0x0
0xffffb6800000da40 0048 0000 0x0 0x0
0xffffb6800000dab8 0048 0000 0x0 0x0
0xffffb6800000db30 0048 0000 0x0 0x0
0xffffb6800000dba8 0048 0000 0x0 0x0
0xffffb6800000dc20 0048 0000 0x0 0x0
0xffffb6800000dc98 0048 0000 0x0 0x0
0xffffb6800000dd10 0048 0000 0x0 0x0
0xffffb6800000dd88 0048 0000 0x0 0x0
0xffffb6800000de00 0048 0000 0x0 0x0
0xffffb6800000de78 0048 0000 0x0 0x0
0xffffb6800000def0 0048 0000 0x0 0x0
0xffffb6800000df68 0048 0000 0x0 0x0
0xffffb6800000dfe0 0048 0000 0x0 0x0
0xffffb6800000e058 0048 0000 0x0 0x0
0xffffb6800000e0d0 0048 0000 0x0 0x0
0xffffb6800000e148 0048 0000 0x0 0x0
0xffffb6800000e1c0 0048 0000 0x0 0x0
0xffffb6800000e238 0048 0000 0x0 0x0
0xffffb6800000e2b0 0048 0000 0x0 0x0
0xffffb6800000e328 0008 0000 0x0 0x0
0xffffb6800000e3a0 0008 0000 0x0 0x0
0xffffb6800000e418 0008 0000 0x0 0x0
0xffffb6800000e490 0008 0000 0x0 0x0
0xffffb6800000e508 0008 0000 0x0 0x0
0xffffb6800000e580 0008 0000 0x0 0x0
0xffffb6800000e5f8 0008 0000 0x0 0x0
0xffffb6800000e670 0008 0000 0x0 0x0
0xffffb6800000e6e8 0008 0000 0x0 0x0
0xffffb6800000e760 0008 0000 0x0 0x0
0xffffb6800000e7d8 0008 0000 0x0 0x0
0xffffb6800000e850 0008 0000 0x0 0x0
0xffffb6800000e8c8 0008 0000 0x0 0x0
0xffffb6800000e940 0008 0000 0x0 0x0
0xffffb6800000e9b8 0008 0000 0x0 0x0
0xffffb6800000ea30 0008 0000 0x0 0x0
0xffffb6800000eaa8 0008 0000 0x0 0x0
0xffffb6800000eb20 0008 0000 0x0 0x0
0xffffb6800000eb98 0008 0000 0x0 0x0
0xffffb6800000ec10 0008 0000 0x0 0x0
0xffffb6800000ec88 0008 0000 0x0 0x0
0xffffb6800000ed00 0008 0000 0x0 0x0
0xffffb6800000ed78 0008 0000 0x0 0x0
0xffffb6800000edf0 0008 0000 0x0 0x0
0xffffb6800000ee68 0008 0000 0x0 0x0
0xffffb6800000eee0 0008 0000 0x0 0x0
0xffffb6800000ef58 0008 0000 0x0 0x0
0xffffb6800000efd0 0008 0000 0x0 0x0
0xffffb6800000f048 0008 0000 0x0 0x0
0xffffb6800000f0c0 0008 0000 0x0 0x0
0xffffb6800000f138 0008 0000 0x0 0x0
0xffffb6800000f1b0 0008 0000 0x0 0x0
0xffffb6800000f228 0008 0000 0x0 0x0
0xffffb6800000f2a0 0008 0000 0x0 0x0
0xffffb6800000f318 0008 0000 0x0 0x0
0xffffb6800000f390 0008 0000 0x0 0x0
0xffffb6800000f408 0008 0000 0x0 0x0
0xffffb6800000f480 0008 0000 0x0 0x0
0xffffb6800000f4f8 0008 0000 0x0 0x0
0xffffb6800000f570 0008 0000 0x0 0x0
0xffffb6800000f5e8 0008 0000 0x0 0x0
0xffffb6800000f660 0008 0000 0x0 0x0
0xffffb6800000f6d8 0008 0000 0x0 0x0
0xffffb6800000f750 0008 0000 0x0 0x0
0xffffb6800000f7c8 0008 0000 0x0 0x0
0xffffb6800000f840 0008 0000 0x0 0x0
0xffffb6800000f8b8 0008 0000 0x0 0x0
0xffffb6800000f930 0008 0000 0x0 0x0
0xffffb6800000f9a8 0008 0000 0x0 0x0
0xffffb6800000fa20 0008 0000 0x0 0x0
0xffffb6800000fa98 0008 0000 0x0 0x0
0xffffb6800000fb10 0008 0000 0x0 0x0
0xffffb6800000fb88 0008 0000 0x0 0x0
0xffffb6800000fc00 0008 0000 0x0 0x0
0xffffb6800000fc78 0048 0000 0x0 0x0
0xffffb6800000fcf0 0048 0000 0x0 0x0
0xffffb6800000fd68 0048 0000 0x0 0x0
0xffffb6800000fde0 0048 0000 0x0 0x0
0xffffb6800000fe58 0048 0000 0x0 0x0
0xffffb6800000fed0 0048 0000 0x0 0x0
0xffffb6800000ff48 0048 0000 0x0 0x0
0xffffb6800000ffc0 0048 0000 0x0 0x0
0xffffb68000010038 0048 0000 0x0 0x0
0xffffb680000100b0 0048 0000 0x0 0x0
0xffffb68000010128 0048 0000 0x0 0x0
0xffffb680000101a0 0048 0000 0x0 0x0
0xffffb68000010218 0048 0000 0x0 0x0
0xffffb68000010290 0048 0000 0x0 0x0
0xffffb68000010308 0048 0000 0x0 0x0
0xffffb68000010380 0048 0000 0x0 0x0
0xffffb680000103f8 0048 0000 0x0 0x0
0xffffb68000010470 0048 0000 0x0 0x0
0xffffb680000104e8 0048 0000 0x0 0x0
0xffffb68000010560 0048 0000 0x0 0x0
0xffffb680000105d8 0048 0000 0x0 0x0
0xffffb68000010650 0048 0000 0x0 0x0
0xffffb680000106c8 0048 0000 0x0 0x0
0xffffb68000010740 0048 0000 0x0 0x0
0xffffb680000107b8 0048 0000 0x0 0x0
0xffffb68000010830 0048 0000 0x0 0x0
0xffffb680000108a8 0048 0000 0x0 0x0
0xffffb68000010920 0048 0000 0x0 0x0
0xffffb68000010998 0048 0000 0x0 0x0
0xffffb68000010a10 0048 0000 0x0 0x0
0xffffb68000010a88 0048 0000 0x0 0x0
0xffffb68000010b00 0048 0000 0x0 0x0
0xffffb68000010b78 0048 0000 0x0 0x0
0xffffb68000010bf0 0048 0000 0x0 0x0
0xffffb68000010c68 0048 0000 0x0 0x0
0xffffb68000010ce0 0048 0000 0x0 0x0
0xffffb68000010d58 0048 0000 0x0 0x0
0xffffb68000010dd0 0048 0000 0x0 0x0
0xffffb68000010e48 0048 0000 0x0 0x0
0xffffb68000010ec0 0048 0000 0x0 0x0
0xffffb68000010f38 0049 0000 0x0 0x0
0xffffb68000010fb0 0048 0000 0x0 0x0
0xffffb68000011028 0049 0000 0x0 0x0
0xffffb680000110a0 0049 0000 0x0 0x0
0xffffb68000011118 0048 0000 0x0 0x0
0xffffb68000011190 0048 0000 0x0 0x0
0xffffb68000011208 0048 0000 0x0 0x0
0xffffb68000011280 0048 0000 0x0 0x0
0xffffb680000112f8 0008 0000 0x0 0x0
0xffffb68000011370 0008 0000 0x0 0x0
0xffffb680000113e8 0008 0000 0x0 0x0
0xffffb68000011460 0008 0000 0x0 0x0
0xffffb680000114d8 0008 0000 0x0 0x0
0xffffb68000011550 0008 0000 0x0 0x0
0xffffb680000115c8 0008 0000 0x0 0x0
0xffffb68000011640 0008 0000 0x0 0x0
0xffffb680000116b8 0008 0000 0x0 0x0
0xffffb68000011730 0008 0000 0x0 0x0
0xffffb680000117a8 0008 0000 0x0 0x0
0xffffb68000011820 0008 0000 0x0 0x0
0xffffb68000011898 0008 0000 0x0 0x0
0xffffb68000011910 0008 0000 0x0 0x0
0xffffb68000011988 0008 0000 0x0 0x0
0xffffb68000011a00 0008 0000 0x0 0x0
0xffffb68000011a78 0008 0000 0x0 0x0
0xffffb68000011af0 0008 0000 0x0 0x0
0xffffb68000011b68 0008 0000 0x0 0x0
0xffffb68000011be0 0008 0000 0x0 0x0
0xffffb68000011c58 0008 0000 0x0 0x0
0xffffb68000011cd0 0008 0000 0x0 0x0
0xffffb68000011d48 0008 0000 0x0 0x0
0xffffb68000011dc0 0008 0000 0x0 0x0
0xffffb68000011e38 0008 0000 0x0 0x0
0xffffb68000011eb0 0008 0000 0x0 0x0
0xffffb68000011f28 0008 0000 0x0 0x0
0xffffb68000011fa0 0008 0000 0x0 0x0
0xffffb68000012018 0008 0000 0x0 0x0
0xffffb68000012090 0008 0000 0x0 0x0
0xffffb68000012108 0008 0000 0x0 0x0
0xffffb68000012180 0008 0000 0x0 0x0
0xffffb680000121f8 0008 0000 0x0 0x0
0xffffb68000012270 0008 0000 0x0 0x0
0xffffb680000122e8 0008 0000 0x0 0x0
0xffffb68000012360 0008 0000 0x0 0x0
0xffffb680000123d8 0008 0000 0x0 0x0
0xffffb68000012450 0008 0000 0x0 0x0
0xffffb680000124c8 0008 0000 0x0 0x0
0xffffb68000012540 0008 0000 0x0 0x0
0xffffb680000125b8 0008 0000 0x0 0x0
0xffffb68000012630 0008 0000 0x0 0x0
0xffffb680000126a8 0008 0000 0x0 0x0
0xffffb68000012720 0008 0000 0x0 0x0
0xffffb68000012798 0008 0000 0x0 0x0
0xffffb68000012810 0008 0000 0x0 0x0
0xffffb68000012888 0008 0000 0x0 0x0
0xffffb68000012900 0008 0000 0x0 0x0
0xffffb68000012978 0008 0000 0x0 0x0
0xffffb680000129f0 0008 0000 0x0 0x0
0xffffb68000012a68 0008 0000 0x0 0x0
0xffffb68000012ae0 0008 0000 0x0 0x0
0xffffb68000012b58 0008 0000 0x0 0x0
0xffffb68000012bd0 0008 0000 0x0 0x0
0xffffb68000012c48 0008 0000 0x0 0x0
0xffffb68000012cc0 0008 0000 0x0 0x0
0xffffb68000012d38 0008 0000 0x0 0x0
0xffffb68000012db0 0008 0000 0x0 0x0
0xffffb68000012e28 0008 0000 0x0 0x0
0xffffb68000012ea0 0008 0000 0x0 0x0
0xffffb68000012f18 0008 0000 0x0 0x0
0xffffb68000012f90 0008 0000 0x0 0x0
0xffffb68000013008 0008 0000 0x0 0x0
0xffffb68000013080 0008 0000 0x0 0x0
0xffffb680000130f8 0008 0000 0x0 0x0
0xffffb68000013170 0008 0000 0x0 0x0
0xffffb680000131e8 0008 0000 0x0 0x0
0xffffb68000013260 0008 0000 0x0 0x0
0xffffb680000132d8 0008 0000 0x0 0x0
0xffffb68000013350 0008 0000 0x0 0x0
0xffffb680000133c8 0008 0000 0x0 0x0
0xffffb68000013440 0008 0000 0x0 0x0
0xffffb680000134b8 0008 0000 0x0 0x0
0xffffb68000013530 0008 0000 0x0 0x0
0xffffb680000135a8 0008 0000 0x0 0x0
0xffffb68000013620 0008 0000 0x0 0x0
0xffffb68000013698 0008 0000 0x0 0x0
0xffffb68000013710 0008 0000 0x0 0x0
0xffffb68000013788 0008 0000 0x0 0x0
0xffffb68000013800 0008 0000 0x0 0x0
0xffffb68000013878 0008 0000 0x0 0x0
0xffffb680000138f0 0008 0000 0x0 0x0
0xffffb68000013968 0008 0000 0x0 0x0
0xffffb680000139e0 0008 0000 0x0 0x0
0xffffb68000013a58 0008 0000 0x0 0x0
0xffffb68000013ad0 0008 0000 0x0 0x0
0xffffb68000013b48 0008 0000 0x0 0x0
0xffffb68000013bc0 0008 0000 0x0 0x0
0xffffb68000013c38 0008 0000 0x0 0x0
0xffffb68000013cb0 0008 0000 0x0 0x0
0xffffb68000013d28 0008 0000 0x0 0x0
0xffffb68000013da0 0008 0000 0x0 0x0
0xffffb68000013e18 0008 0000 0x0 0x0
0xffffb68000013e90 0008 0000 0x0 0x0
0xffffb68000013f08 0008 0000 0x0 0x0
0xffffb68000013f80 0008 0000 0x0 0x0
0xffffb68000013ff8 0008 0000 0x0 0x0
0xffffb68000014070 0008 0000 0x0 0x0
0xffffb680000140e8 0008 0000 0x0 0x0
0xffffb68000014160 0008 0000 0x0 0x0
0xffffb680000141d8 0008 0000 0x0 0x0
0xffffb68000014250 0008 0000 0x0 0x0
0xffffb680000142c8 0008 0000 0x0 0x0
0xffffb68000014340 0008 0000 0x0 0x0
0xffffb680000143b8 0008 0000 0x0 0x0
0xffffb68000014430 0008 0000 0x0 0x0
0xffffb680000144a8 0008 0000 0x0 0x0
0xffffb68000014520 0008 0000 0x0 0x0
0xffffb68000014598 0008 0000 0x0 0x0
0xffffb68000014610 0008 0000 0x0 0x0
0xffffb68000014688 0008 0000 0x0 0x0
0xffffb68000014700 0008 0000 0x0 0x0
0xffffb68000014778 0008 0000 0x0 0x0
0xffffb680000147f0 0008 0000 0x0 0x0
0xffffb68000014868 0008 0000 0x0 0x0
0xffffb680000148e0 0008 0000 0x0 0x0
0xffffb68000014958 0008 0000 0x0 0x0
0xffffb680000149d0 0008 0000 0x0 0x0
0xffffb68000014a48 0008 0000 0x0 0x0
0xffffb68000014ac0 0008 0000 0x0 0x0
0xffffb68000014b38 0008 0000 0x0 0x0
0xffffb68000014bb0 0008 0000 0x0 0x0
0xffffb68000014c28 0008 0000 0x0 0x0
0xffffb68000014ca0 0008 0000 0x0 0x0
0xffffb68000014d18 0008 0000 0x0 0x0
0xffffb68000014d90 0008 0000 0x0 0x0
0xffffb68000014e08 0008 0000 0x0 0x0
0xffffb68000014e80 0008 0000 0x0 0x0
0xffffb68000014ef8 0008 0000 0x0 0x0
0xffffb68000014f70 0008 0000 0x0 0x0
0xffffb68000014fe8 0008 0000 0x0 0x0
0xffffb68000015060 0008 0000 0x0 0x0
0xffffb680000150d8 0008 0000 0x0 0x0
0xffffb68000015150 0008 0000 0x0 0x0
0xffffb680000151c8 0008 0000 0x0 0x0
0xffffb68000015240 0008 0000 0x0 0x0
0xffffb680000152b8 0008 0000 0x0 0x0
0xffffb68000015330 0008 0000 0x0 0x0
0xffffb680000153a8 0008 0000 0x0 0x0
0xffffb68000015420 0008 0000 0x0 0x0
0xffffb68000015498 0008 0000 0x0 0x0
0xffffb68000015510 0008 0000 0x0 0x0
0xffffb68000015588 0008 0000 0x0 0x0
0xffffb68000015600 0008 0000 0x0 0x0
0xffffb68000015678 0008 0000 0x0 0x0
0xffffb680000156f0 0008 0000 0x0 0x0
0xffffb68000015768 0008 0000 0x0 0x0
0xffffb680000157e0 0008 0000 0x0 0x0
0xffffb68000015858 0008 0000 0x0 0x0
0xffffb680000158d0 0008 0000 0x0 0x0
0xffffb68000015948 0008 0000 0x0 0x0
0xffffb680000159c0 0008 0000 0x0 0x0
0xffffb68000015a38 0008 0000 0x0 0x0
0xffffb68000015ab0 0008 0000 0x0 0x0
0xffffb68000015b28 0008 0000 0x0 0x0
0xffffb68000015ba0 0008 0000 0x0 0x0
0xffffb68000015c18 0008 0000 0x0 0x0
0xffffb68000015c90 0008 0000 0x0 0x0
0xffffb68000015d08 0008 0000 0x0 0x0
0xffffb68000015d80 0008 0000 0x0 0x0
0xffffb68000015df8 0008 0000 0x0 0x0
0xffffb68000015e70 0008 0000 0x0 0x0
0xffffb68000015ee8 0008 0000 0x0 0x0
0xffffb68000015f60 0008 0000 0x0 0x0
0xffffb68000015fd8 0008 0000 0x0 0x0
0xffffb68000016050 0008 0000 0x0 0x0
0xffffb680000160c8 0008 0000 0x0 0x0
0xffffb68000016140 0008 0000 0x0 0x0
0xffffb680000161b8 0008 0000 0x0 0x0
0xffffb68000016230 0008 0000 0x0 0x0
0xffffb680000162a8 0008 0000 0x0 0x0
0xffffb68000016320 0008 0000 0x0 0x0
0xffffb68000016398 0008 0000 0x0 0x0
0xffffb68000016410 0008 0000 0x0 0x0
0xffffb68000016488 0008 0000 0x0 0x0
0xffffb68000016500 0008 0000 0x0 0x0
0xffffb68000016578 0008 0000 0x0 0x0
0xffffb680000165f0 0008 0000 0x0 0x0
0xffffb68000016668 0008 0000 0x0 0x0
0xffffb680000166e0 0008 0000 0x0 0x0
0xffffb68000016758 0008 0000 0x0 0x0
0xffffb680000167d0 0008 0000 0x0 0x0
0xffffb68000016848 0008 0000 0x0 0x0
0xffffb680000168c0 0008 0000 0x0 0x0
0xffffb68000016938 0008 0000 0x0 0x0
0xffffb680000169b0 0008 0000 0x0 0x0
0xffffb68000016a28 0008 0000 0x0 0x0
0xffffb68000016aa0 0008 0000 0x0 0x0
0xffffb68000016b18 0008 0000 0x0 0x0
0xffffb68000016b90 0008 0000 0x0 0x0
0xffffb68000016c08 0008 0000 0x0 0x0
0xffffb68000016c80 0008 0000 0x0 0x0
0xffffb68000016cf8 0008 0000 0x0 0x0
0xffffb68000016d70 0008 0000 0x0 0x0
0xffffb68000016de8 0008 0000 0x0 0x0
0xffffb68000016e60 0008 0000 0x0 0x0
0xffffb68000016ed8 0008 0000 0x0 0x0
0xffffb68000016f50 0008 0000 0x0 0x0
0xffffb68000016fc8 0008 0000 0x0 0x0
0xffffb68000017040 0008 0000 0x0 0x0
0xffffb680000170b8 0008 0000 0x0 0x0
0xffffb68000017130 0008 0000 0x0 0x0
0xffffb680000171a8 0008 0000 0x0 0x0
0xffffb68000017220 0008 0000 0x0 0x0
0xffffb68000017298 0008 0000 0x0 0x0
0xffffb68000017310 0008 0000 0x0 0x0
0xffffb68000017388 0008 0000 0x0 0x0
0xffffb68000017400 0008 0000 0x0 0x0
0xffffb68000017478 0008 0000 0x0 0x0
0xffffb680000174f0 0008 0000 0x0 0x0
0xffffb68000017568 0008 0000 0x0 0x0
0xffffb680000175e0 0008 0000 0x0 0x0
0xffffb68000017658 0008 0000 0x0 0x0
0xffffb680000176d0 0008 0000 0x0 0x0
0xffffb68000017748 0008 0000 0x0 0x0
0xffffb680000177c0 0008 0000 0x0 0x0
0xffffb68000017838 0008 0000 0x0 0x0
0xffffb680000178b0 0008 0000 0x0 0x0
0xffffb68000017928 0008 0000 0x0 0x0
0xffffb680000179a0 0008 0000 0x0 0x0
0xffffb68000017a18 0008 0000 0x0 0x0
0xffffb68000017a90 0008 0000 0x0 0x0
0xffffb68000017b08 0008 0000 0x0 0x0
0xffffb68000017b80 0008 0000 0x0 0x0
0xffffb68000017bf8 0008 0000 0x0 0x0
0xffffb68000017c70 0008 0000 0x0 0x0
0xffffb68000017ce8 0008 0000 0x0 0x0
0xffffb68000017d60 0008 0000 0x0 0x0
0xffffb68000017dd8 0008 0000 0x0 0x0
0xffffb68000017e50 0008 0000 0x0 0x0
0xffffb68000017ec8 0008 0000 0x0 0x0
0xffffb68000017f40 0008 0000 0x0 0x0
0xffffb68000017fb8 0008 0000 0x0 0x0
0xffffb68000018030 0008 0000 0x0 0x0
0xffffb680000180a8 0008 0000 0x0 0x0
0xffffb68000018120 0008 0000 0x0 0x0
0xffffb68000018198 0008 0000 0x0 0x0
0xffffb68000018210 0008 0000 0x0 0x0
0xffffb68000018288 0008 0000 0x0 0x0
0xffffb68000018300 0008 0000 0x0 0x0
0xffffb68000018378 0008 0000 0x0 0x0
0xffffb680000183f0 0008 0000 0x0 0x0
0xffffb68000018468 0008 0000 0x0 0x0
0xffffb680000184e0 0008 0000 0x0 0x0
0xffffb68000018558 0008 0000 0x0 0x0
0xffffb680000185d0 0008 0000 0x0 0x0
0xffffb68000018648 0008 0000 0x0 0x0
0xffffb680000186c0 0008 0000 0x0 0x0
0xffffb68000018738 0008 0000 0x0 0x0
0xffffb680000187b0 0008 0000 0x0 0x0
0xffffb68000018828 0008 0000 0x0 0x0
0xffffb680000188a0 0008 0000 0x0 0x0
0xffffb68000018918 0008 0000 0x0 0x0
0xffffb68000018990 0008 0000 0x0 0x0
0xffffb68000018a08 0008 0000 0x0 0x0
0xffffb68000018a80 0008 0000 0x0 0x0
0xffffb68000018af8 0008 0000 0x0 0x0
0xffffb68000018b70 0008 0000 0x0 0x0
0xffffb68000018be8 0008 0000 0x0 0x0
0xffffb68000018c60 0008 0000 0x0 0x0
0xffffb68000018cd8 0008 0000 0x0 0x0
0xffffb68000018d50 0008 0000 0x0 0x0
0xffffb68000018dc8 0008 0000 0x0 0x0
0xffffb68000018e40 0008 0000 0x0 0x0
0xffffb68000018eb8 0008 0000 0x0 0x0
0xffffb68000018f30 0008 0000 0x0 0x0
0xffffb68000018fa8 0008 0000 0x0 0x0
0xffffb68000019020 0008 0000 0x0 0x0
0xffffb68000019098 0008 0000 0x0 0x0
0xffffb68000019110 0008 0000 0x0 0x0
0xffffb68000019188 0008 0000 0x0 0x0
0xffffb68000019200 0008 0000 0x0 0x0
0xffffb68000019278 0008 0000 0x0 0x0
0xffffb680000192f0 0008 0000 0x0 0x0
0xffffb68000019368 0008 0000 0x0 0x0
0xffffb680000193e0 0008 0000 0x0 0x0
0xffffb68000019458 0008 0000 0x0 0x0
0xffffb680000194d0 0008 0000 0x0 0x0
0xffffb68000019548 0008 0000 0x0 0x0
0xffffb680000195c0 0008 0000 0x0 0x0
0xffffb68000019638 0008 0000 0x0 0x0
0xffffb680000196b0 0008 0000 0x0 0x0
0xffffb68000019728 0008 0000 0x0 0x0
0xffffb680000197a0 0008 0000 0x0 0x0
0xffffb68000019818 0008 0000 0x0 0x0
0xffffb68000019890 0008 0000 0x0 0x0
0xffffb68000019908 0008 0000 0x0 0x0
0xffffb68000019980 0008 0000 0x0 0x0
0xffffb680000199f8 0008 0000 0x0 0x0
0xffffb68000019a70 0008 0000 0x0 0x0
0xffffb68000019ae8 0008 0000 0x0 0x0
0xffffb68000019b60 0008 0000 0x0 0x0
0xffffb68000019bd8 0008 0000 0x0 0x0
0xffffb68000019c50 0008 0000 0x0 0x0
0xffffb68000019cc8 0008 0000 0x0 0x0
0xffffb68000019d40 0008 0000 0x0 0x0
0xffffb68000019db8 0008 0000 0x0 0x0
0xffffb68000019e30 0008 0000 0x0 0x0
0xffffb68000019ea8 0008 0000 0x0 0x0
0xffffb68000019f20 0008 0000 0x0 0x0
0xffffb68000019f98 0008 0000 0x0 0x0
0xffffb6800001a010 0008 0000 0x0 0x0
0xffffb6800001a088 0008 0000 0x0 0x0
0xffffb6800001a100 0008 0000 0x0 0x0
0xffffb6800001a178 0008 0000 0x0 0x0
0xffffb6800001a1f0 0008 0000 0x0 0x0
0xffffb6800001a268 0008 0000 0x0 0x0
0xffffb6800001a2e0 0008 0000 0x0 0x0
0xffffb6800001a358 0008 0000 0x0 0x0
0xffffb6800001a3d0 0008 0000 0x0 0x0
0xffffb6800001a448 0008 0000 0x0 0x0
0xffffb6800001a4c0 0008 0000 0x0 0x0
0xffffb6800001a538 0008 0000 0x0 0x0
0xffffb6800001a5b0 0008 0000 0x0 0x0
0xffffb6800001a628 0008 0000 0x0 0x0
0xffffb6800001a6a0 0008 0000 0x0 0x0
0xffffb6800001a718 0008 0000 0x0 0x0
0xffffb6800001a790 0008 0000 0x0 0x0
0xffffb6800001a808 0008 0000 0x0 0x0
0xffffb6800001a880 0008 0000 0x0 0x0
0xffffb6800001a8f8 0008 0000 0x0 0x0
0xffffb6800001a970 0008 0000 0x0 0x0
0xffffb6800001a9e8 0008 0000 0x0 0x0
0xffffb6800001aa60 0008 0000 0x0 0x0
0xffffb6800001aad8 0008 0000 0x0 0x0
0xffffb6800001ab50 0008 0000 0x0 0x0
0xffffb6800001abc8 0008 0000 0x0 0x0
0xffffb6800001ac40 0008 0000 0x0 0x0
0xffffb6800001acb8 0008 0000 0x0 0x0
0xffffb6800001ad30 0008 0000 0x0 0x0
0xffffb6800001ada8 0008 0000 0x0 0x0
0xffffb6800001ae20 0008 0000 0x0 0x0
0xffffb6800001ae98 0008 0000 0x0 0x0
0xffffb6800001af10 0008 0000 0x0 0x0
0xffffb6800001af88 0008 0000 0x0 0x0
0xffffb6800001b000 0008 0000 0x0 0x0
0xffffb6800001b078 0008 0000 0x0 0x0
0xffffb6800001b0f0 0008 0000 0x0 0x0
0xffffb6800001b168 0008 0000 0x0 0x0
0xffffb6800001b1e0 0008 0000 0x0 0x0
0xffffb6800001b258 0008 0000 0x0 0x0
0xffffb6800001b2d0 0008 0000 0x0 0x0
0xffffb6800001b348 0008 0000 0x0 0x0
0xffffb6800001b3c0 0008 0000 0x0 0x0
0xffffb6800001b438 0008 0000

---
This bug is generated by a bot. It may contain errors.
See https://goo.gl/tpsmEJ for more information about syzbot.
syzbot engineers can be reached at syzk...@googlegroups.com.

syzbot will keep track of this bug report. See:
https://goo.gl/tpsmEJ#status for how to communicate with syzbot.

[syzbot]

syzbot has found a reproducer for the following crash on:

HEAD commit: cb71f39b ref/mod bit should be set according to 'flags' ar..
git tree: netbsd

console output: https://syzkaller.appspot.com/x/log.txt?x=16eaeca1600000

kernel config: https://syzkaller.appspot.com/x/.config?x=824b23e1f4b6c76b
dashboard link: https://syzkaller.appspot.com/bug?extid=4e794d630199d943375a

syz repro: https://syzkaller.appspot.com/x/repro.syz?x=17a1ffc9600000
C reproducer: https://syzkaller.appspot.com/x/repro.c?x=14d2df1d600000

IMPORTANT: if you fix the bug, please add the following tag to the commit:
Reported-by: syzbot+4e794d...@syzkaller.appspotmail.com

[ 41.2609793] panic: UBSan: Undefined Behavior in

/syzkaller/managers/netbsd-kubsan/kernel/sys/kern/sys_select.c:208:3,
signed integer overflow: 1391565348 * 1000 cannot be represented in
type 'int'

[ 41.2609793] cpu1: Begin traceback...
[ 41.2709813] vpanic() at netbsd:vpanic+0x258 sys/kern/subr_prf.c:336
[ 41.3110409] isAlreadyReported() at netbsd:isAlreadyReported
[ 41.3410863] HandleOverflow() at netbsd:HandleOverflow+0x19a
sys/../common/lib/libc/misc/ubsan.c:354
[ 41.3711312] sys___select50() at netbsd:sys___select50+0xe9
sys/kern/sys_select.c:208
[ 41.4011775] sys_syscall() at netbsd:sys_syscall+0x137 sy_call
sys/sys/syscallvar.h:65 [inline]
[ 41.4011775] sys_syscall() at netbsd:sys_syscall+0x137
sys/kern/sys_syscall.c:77
[ 41.4412389] syscall() at netbsd:syscall+0x1ce sy_call
sys/sys/syscallvar.h:65 [inline]
[ 41.4412389] syscall() at netbsd:syscall+0x1ce sy_invoke
sys/sys/syscallvar.h:94 [inline]
[ 41.4412389] syscall() at netbsd:syscall+0x1ce
sys/arch/x86/x86/syscall.c:138
[ 41.4512499] --- syscall (number 0) ---
[ 41.4712817] 782c5f0e4b5a:
[ 41.4712817] cpu1: End traceback...
[ 41.4712817] fatal breakpoint trap in supervisor mode
[ 41.4812958] trap type 1 code 0 rip 0xffffffff8021ddad cs 0x8 rflags
0x282 cr2 0x200000c0 ilevel 0 rsp 0xffff9780a6a43880
[ 41.4913077] curlwp 0xffffe3add8d1c720 pid 602.1 lowest kstack
0xffff9780a6a402c0
Stopped in pid 602.1 (syz-executor3646) at netbsd:breakpoint+0x5:

leave
?
breakpoint() at netbsd:breakpoint+0x5
db_panic() at netbsd:db_panic+0xd9 sys/ddb/db_panic.c:67
vpanic() at netbsd:vpanic+0x258 sys/kern/subr_prf.c:336
isAlreadyReported() at netbsd:isAlreadyReported
HandleOverflow() at netbsd:HandleOverflow+0x19a
sys/../common/lib/libc/misc/ubsan.c:354
sys___select50() at netbsd:sys___select50+0xe9 sys/kern/sys_select.c:208

sys_syscall() at netbsd:sys_syscall+0x137 sy_call sys/sys/syscallvar.h:65
[inline]
sys_syscall() at netbsd:sys_syscall+0x137 sys/kern/sys_syscall.c:77

syscall() at netbsd:syscall+0x1ce sy_call sys/sys/syscallvar.h:65 [inline]
syscall() at netbsd:syscall+0x1ce sy_invoke sys/sys/syscallvar.h:94 [inline]
syscall() at netbsd:syscall+0x1ce sys/arch/x86/x86/syscall.c:138

--- syscall (number 0) ---
782c5f0e4b5a:
ds 3880
es 9741
fs 3870
gs 2000
rdi ffffe3addacba4e0
rsi ffffe3add8d1ca08
rbp ffff9780a6a43880
rbx ffff9780a57e2000
rdx 2
rcx 0
rax 0
r8 ffff9780a57e2000
r9 0
r10 ffff9780a6a42f30

r11 10
r12 104
r13 ffffffff83021298 ostype+0xecea0

r14 ffff9780a6a438f8

r15 ffffffff84cd5fa0 pool_head+0x4c0
rip ffffffff8021ddad breakpoint+0x5
cs 8
rflags 282

rsp ffff9780a6a43880

ss 10
netbsd:breakpoint+0x5: leave
PID LID S CPU FLAGS STRUCT LWP * NAME WAIT

439 1 2 0 0 ffffe3add8d1c2e0 syz-executor3646
559 1 2 1 0 ffffe3add8d1cb60 syz-executor3646
483 1 2 0 0 ffffe3add794b340 syz-executor3646
574 1 2 1 0 ffffe3acf21b0ae0 syz-executor3646
618 1 2 0 0 ffffe3add86d2ba0 syz-executor3646
400 1 2 0 0 ffffe3add86d2760 syz-executor3646
602 > 1 7 1 0 ffffe3add8d1c720 syz-executor3646
607 1 2 1 0 ffffe3acef608680 syz-executor3646
569 1 2 0 0 ffffe3acef608ac0 syz-executor3646
605 > 1 7 0 0 ffffe3ad98ae1300 syz-executor3646
366 1 2 0 0 ffffe3acc8af49c0 syz-executor3646
45 1 2 1 0 ffffe3ad0b4ba280 syz-executor3646
524 1 3 1 80 ffffe3acf21b0260 syz-executor3646 nanoslp
40 1 2 1 0 ffffe3acf21b06a0 sshd
380 1 3 1 80 ffffe3add8e95700 getty nanoslp
555 1 3 1 80 ffffe3add8e952c0 getty nanoslp
551 1 3 1 80 ffffe3ad036e0b20 getty nanoslp
504 1 3 0 80 ffffe3acef608240 getty ttyraw
389 1 3 0 80 ffffe3add86d2320 cron nanoslp
532 1 3 0 80 ffffe3ad98ae1b80 inetd kqueue
475 1 3 1 80 ffffe3ad98ae1740 sshd select
467 1 3 1 80 ffffe3ad036e06e0 powerd kqueue
242 1 3 0 80 ffffe3ad036e02a0 syslogd kqueue
278 1 3 1 80 ffffe3ad0b4bab00 dhcpcd kqueue
228 1 3 1 80 ffffe3ad0b4ba6c0 dhcpcd kqueue
1 1 3 1 80 ffffe3acca3bba60 init wait
0 58 3 0 204 ffffe3acca3f7640 physiod physiod
0 57 3 0 204 ffffe3acca48b220 pooldrain pooldrain
0 56 3 1 204 ffffe3acca48baa0 aiodoned aiodoned
0 55 3 1 200 ffffe3acca48b660 ioflush syncer
0 54 3 0 200 ffffe3acca3f7a80 pgdaemon pgdaemon
0 51 2 1 200 ffffe3acca3f7200 npfgc-0
0 50 3 1 204 ffffe3acca3bb620 rt_free rt_free
0 49 3 1 204 ffffe3acca3bb1e0 unpgc unpgc
0 48 2 1 200 ffffe3acca994a40 key_timehandler
0 47 3 1 204 ffffe3acca994600 icmp6_wqinput/1
icmp6_wqinput
0 46 3 0 204 ffffe3acca9941c0 icmp6_wqinput/0
icmp6_wqinput
0 45 2 1 200 ffffe3acca34da20 nd6_timer
0 44 3 1 204 ffffe3acca327160 carp6_wqinput/1
carp6_wqinput
0 43 3 0 204 ffffe3acca3275a0 carp6_wqinput/0
carp6_wqinput
0 42 3 1 204 ffffe3acca3279e0 carp_wqinput/1
carp_wqinput
0 41 3 0 204 ffffe3acca346180 carp_wqinput/0
carp_wqinput
0 40 3 1 204 ffffe3acca3465c0 icmp_wqinput/1
icmp_wqinput
0 39 3 0 204 ffffe3acca346a00 icmp_wqinput/0
icmp_wqinput
0 38 3 0 204 ffffe3acca34d1a0 rt_timer rt_timer
0 37 2 1 200 ffffe3acca34d5e0 vmem_rehash
0 27 3 0 204 ffffe3acc8af4580 scsibus0 sccomp
0 26 3 0 200 ffffe3acc8af4140 pms0 pmsreset
0 25 3 1 204 ffffe3acc8a879a0 xcall/1 xcall
0 24 1 1 200 ffffe3acc8a87560 softser/1
0 23 1 1 200 ffffe3acc8a87120 softclk/1
0 22 1 1 200 ffffe3acc8a70980 softbio/1
0 21 1 1 200 ffffe3acc8a70540 softnet/1
0 20 1 1 201 ffffe3acc8a70100 idle/1
0 19 3 0 204 ffffe3add8f90960 lnxpwrwq lnxpwrwq
0 18 3 0 204 ffffe3add8f90520 lnxlngwq lnxlngwq
0 17 3 0 204 ffffe3add8f900e0 lnxsyswq lnxsyswq
0 16 3 0 204 ffffe3add8fa4940 lnxrcugc lnxrcugc
0 15 3 0 204 ffffe3add8fa4500 sysmon smtaskq
0 14 3 0 204 ffffe3add8fa40c0 pmfsuspend pmfsuspend
0 13 3 0 204 ffffe3add93c6920 pmfevent pmfevent
0 12 3 0 204 ffffe3add93c64e0 sopendfree sopendfr
0 11 3 0 204 ffffe3add93c60a0 nfssilly nfssilly
0 10 2 1 200 ffffe3adda803900 cachegc
0 9 3 0 204 ffffe3adda8034c0 vdrain vdrain
0 8 3 0 200 ffffe3adda803080 modunload mod_unld
0 7 3 0 204 ffffe3adda8108e0 xcall/0 xcall
0 6 1 0 200 ffffe3adda8104a0 softser/0
0 5 1 0 200 ffffe3adda810060 softclk/0
0 4 1 0 200 ffffe3adda8378c0 softbio/0
0 3 1 0 200 ffffe3adda837480 softnet/0
0 2 1 0 201 ffffe3adda837040 idle/0

0 1 3 0 200 ffffffff84c01d00 swapper uvm
[Locks tracked through LWPs]

Locks held by an LWP (syz-executor3646):
Lock 0 (initialized at amap_alloc)
lock address : 0xffffe3add6bf2500 type : sleep/adaptive
initialized : 0xffffffff81a7d6b6

shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0

current cpu : 1 last held: 0
current lwp : 0xffffe3add8d1c720 last held: 0xffffe3add86d2760
last locked* : 0xffffffff81a9ad6a unlocked : 0xffffffff81a97cc6
owner field : 000000000000000000 wait/spin: 0/0

Turnstile chain at 0xffffffff85a64080.

=> No active turnstile for this lock.


[Locks tracked through CPUs]

PAGE FLAG PQ UOBJECT UANON

0xffff978000003180 0041 0000 0x0 0x0
0xffff9780000031f8 0041 0000 0x0 0x0
0xffff978000003270 0041 0000 0x0 0x0
0xffff9780000032e8 0041 0000 0x0 0x0
0xffff978000003360 0041 0000 0x0 0x0
0xffff9780000033d8 0041 0000 0x0 0x0
0xffff978000003450 0041 0000 0x0 0x0
0xffff9780000034c8 0041 0000 0x0 0x0
0xffff978000003540 0049 0000 0x0 0x0
0xffff9780000035b8 0048 0000 0x0 0x0
0xffff978000003630 0048 0000 0x0 0x0
0xffff9780000036a8 0048 0000 0x0 0x0
0xffff978000003720 0048 0000 0x0 0x0
0xffff978000003798 0048 0000 0x0 0x0
0xffff978000003810 0049 0000 0x0 0x0
0xffff978000003888 0049 0000 0x0 0x0
0xffff978000003900 0040 0000 0x0 0x0
0xffff978000003978 0040 0000 0x0 0x0
0xffff9780000039f0 0040 0000 0x0 0x0
0xffff978000003a68 0040 0000 0x0 0x0
0xffff978000003ae0 0040 0000 0x0 0x0
0xffff978000003b58 0040 0000 0x0 0x0
0xffff978000003bd0 0040 0000 0x0 0x0
0xffff978000003c48 0049 0000 0x0 0x0
0xffff978000003cc0 0040 0000 0x0 0x0
0xffff978000003d38 0048 0000 0x0 0x0
0xffff978000003db0 0048 0000 0x0 0x0
0xffff978000003e28 0048 0000 0x0 0x0
0xffff978000003ea0 0048 0000 0x0 0x0
0xffff978000003f18 0048 0000 0x0 0x0
0xffff978000003f90 0048 0000 0x0 0x0
0xffff978000004008 0040 0000 0x0 0x0
0xffff978000004080 0048 0000 0x0 0x0
0xffff9780000040f8 0048 0000 0x0 0x0
0xffff978000004170 0048 0000 0x0 0x0
0xffff9780000041e8 0048 0000 0x0 0x0
0xffff978000004260 0048 0000 0x0 0x0
0xffff9780000042d8 0049 0000 0x0 0x0
0xffff978000004350 0048 0000 0x0 0x0
0xffff9780000043c8 0048 0000 0x0 0x0
0xffff978000004440 0049 0000 0x0 0x0
0xffff9780000044b8 0048 0000 0x0 0x0
0xffff978000004530 0048 0000 0x0 0x0
0xffff9780000045a8 0048 0000 0x0 0x0
0xffff978000004620 0048 0000 0x0 0x0
0xffff978000004698 0048 0000 0x0 0x0
0xffff978000004710 0040 0000 0x0 0x0
0xffff978000004788 0048 0000 0x0 0x0
0xffff978000004800 0048 0000 0x0 0x0
0xffff978000004878 0048 0000 0x0 0x0
0xffff9780000048f0 0048 0000 0x0 0x0
0xffff978000004968 0041 0000 0x0 0x0
0xffff9780000049e0 0041 0000 0x0 0x0
0xffff978000004a58 0048 0000 0x0 0x0
0xffff978000004ad0 0048 0000 0x0 0x0
0xffff978000004b48 0048 0000 0x0 0x0
0xffff978000004bc0 0048 0000 0x0 0x0
0xffff978000004c38 0041 0000 0x0 0x0
0xffff978000004cb0 0041 0000 0x0 0x0
0xffff978000004d28 0041 0000 0x0 0x0
0xffff978000004da0 0041 0000 0x0 0x0
0xffff978000004e18 0041 0000 0x0 0x0
0xffff978000004e90 0048 0000 0x0 0x0
0xffff978000004f08 0048 0000 0x0 0x0
0xffff978000004f80 0048 0000 0x0 0x0
0xffff978000004ff8 0041 0000 0x0 0x0
0xffff978000005070 0041 0000 0x0 0x0
0xffff9780000050e8 0041 0000 0x0 0x0
0xffff978000005160 0041 0000 0x0 0x0
0xffff9780000051d8 0041 0000 0x0 0x0
0xffff978000005250 0048 0000 0x0 0x0
0xffff9780000052c8 0049 0000 0x0 0x0
0xffff978000005340 0049 0000 0x0 0x0
0xffff9780000053b8 0041 0000 0x0 0x0
0xffff978000005430 0041 0000 0x0 0x0
0xffff9780000054a8 0041 0000 0x0 0x0
0xffff978000005520 0041 0000 0x0 0x0
0xffff978000005598 0041 0000 0x0 0x0
0xffff978000005610 0041 0000 0x0 0x0
0xffff978000005688 0041 0000 0x0 0x0
0xffff978000005700 0041 0000 0x0 0x0
0xffff978000005778 0041 0000 0x0 0x0
0xffff9780000057f0 0041 0000 0x0 0x0
0xffff978000005868 0041 0000 0x0 0x0
0xffff9780000058e0 0041 0000 0x0 0x0
0xffff978000005958 0041 0000 0x0 0x0
0xffff9780000059d0 0041 0000 0x0 0x0
0xffff978000005a48 0041 0000 0x0 0x0
0xffff978000005ac0 0041 0000 0x0 0x0
0xffff978000005b38 0041 0000 0x0 0x0
0xffff978000005bb0 0041 0000 0x0 0x0
0xffff978000005c28 0041 0000 0x0 0x0
0xffff978000005ca0 0041 0000 0x0 0x0
0xffff978000005d18 0041 0000 0x0 0x0
0xffff978000005d90 0041 0000 0x0 0x0
0xffff978000005e08 0041 0000 0x0 0x0
0xffff978000005e80 0041 0000 0x0 0x0
0xffff978000005ef8 0041 0000 0x0 0x0
0xffff978000005f70 0041 0000 0x0 0x0
0xffff978000005fe8 0049 0000 0x0 0x0
0xffff978000006060 0049 0000 0x0 0x0
0xffff9780000060d8 0041 0000 0x0 0x0
0xffff978000006150 0041 0000 0x0 0x0
0xffff9780000061c8 0041 0000 0x0 0x0
0xffff978000006240 0041 0000 0x0 0x0
0xffff9780000062b8 0049 0000 0x0 0x0
0xffff978000006330 0049 0000 0x0 0x0
0xffff9780000063a8 0049 0000 0x0 0x0
0xffff978000006420 0049 0000 0x0 0x0
0xffff978000006498 0049 0000 0x0 0x0
0xffff978000006510 0041 0000 0x0 0x0
0xffff978000006588 0041 0000 0x0 0x0
0xffff978000006600 0041 0000 0x0 0x0
0xffff978000006678 0049 0000 0x0 0x0
0xffff9780000066f0 0049 0000 0x0 0x0
0xffff978000006768 0049 0000 0x0 0x0
0xffff9780000067e0 0049 0000 0x0 0x0
0xffff978000006858 0049 0000 0x0 0x0
0xffff9780000068d0 0041 0000 0x0 0x0
0xffff978000006948 0041 0000 0x0 0x0
0xffff9780000069c0 0049 0000 0x0 0x0
0xffff978000006a38 0049 0000 0x0 0x0
0xffff978000006ab0 0049 0000 0x0 0x0
0xffff978000006b28 0048 0000 0x0 0x0
0xffff978000006ba0 0049 0000 0x0 0x0
0xffff978000006c18 0049 0000 0x0 0x0
0xffff978000006c90 0049 0000 0x0 0x0
0xffff978000006d08 0049 0000 0x0 0x0
0xffff978000006d80 0049 0000 0x0 0x0
0xffff978000006df8 0049 0000 0x0 0x0
0xffff978000006e70 0048 0000 0x0 0x0
0xffff978000006ee8 0049 0000 0x0 0x0
0xffff978000006f60 0048 0000 0x0 0x0
0xffff978000006fd8 0048 0000 0x0 0x0
0xffff978000007050 0049 0000 0x0 0x0
0xffff9780000070c8 0049 0000 0x0 0x0
0xffff978000007140 0049 0000 0x0 0x0
0xffff9780000071b8 0048 0000 0x0 0x0
0xffff978000007230 0049 0000 0x0 0x0
0xffff9780000072a8 0048 0000 0x0 0x0
0xffff978000007320 0048 0000 0x0 0x0
0xffff978000007398 0048 0000 0x0 0x0
0xffff978000007410 0049 0000 0x0 0x0
0xffff978000007488 0049 0000 0x0 0x0
0xffff978000007500 0049 0000 0x0 0x0
0xffff978000007578 0048 0000 0x0 0x0
0xffff9780000075f0 0049 0000 0x0 0x0
0xffff978000007668 0048 0000 0x0 0x0
0xffff9780000076e0 0048 0000 0x0 0x0
0xffff978000007758 0048 0000 0x0 0x0
0xffff9780000077d0 0048 0000 0x0 0x0
0xffff978000007848 0049 0000 0x0 0x0
0xffff9780000078c0 0048 0000 0x0 0x0
0xffff978000007938 0048 0000 0x0 0x0
0xffff9780000079b0 0048 0000 0x0 0x0
0xffff978000007a28 0049 0000 0x0 0x0
0xffff978000007aa0 0049 0000 0x0 0x0
0xffff978000007b18 0048 0000 0x0 0x0
0xffff978000007b90 0048 0000 0x0 0x0
0xffff978000007c08 0048 0000 0x0 0x0
0xffff978000007c80 0048 0000 0x0 0x0
0xffff978000007cf8 0048 0000 0x0 0x0
0xffff978000007d70 0048 0000 0x0 0x0
0xffff978000007de8 0048 0000 0x0 0x0
0xffff978000007e60 0048 0000 0x0 0x0
0xffff978000007ed8 0049 0000 0x0 0x0
0xffff978000007f50 0048 0000 0x0 0x0
0xffff978000007fc8 0048 0000 0x0 0x0
0xffff978000008040 0048 0000 0x0 0x0
0xffff9780000080b8 0048 0000 0x0 0x0
0xffff978000008130 0049 0000 0x0 0x0
0xffff9780000081a8 0048 0000 0x0 0x0
0xffff978000008220 0048 0000 0x0 0x0
0xffff978000008298 0048 0000 0x0 0x0
0xffff978000008310 0048 0000 0x0 0x0
0xffff978000008388 0048 0000 0x0 0x0
0xffff978000008400 0048 0000 0x0 0x0
0xffff978000008478 0048 0000 0x0 0x0
0xffff9780000084f0 0048 0000 0x0 0x0
0xffff978000008568 0048 0000 0x0 0x0
0xffff9780000085e0 0048 0000 0x0 0x0
0xffff978000008658 0048 0000 0x0 0x0
0xffff9780000086d0 0048 0000 0x0 0x0
0xffff978000008748 0048 0000 0x0 0x0
0xffff9780000087c0 0008 0000 0x0 0x0
0xffff978000008838 0008 0000 0x0 0x0
0xffff9780000088b0 0008 0000 0x0 0x0
0xffff978000008928 0008 0000 0x0 0x0
0xffff9780000089a0 0008 0000 0x0 0x0
0xffff978000008a18 0008 0000 0x0 0x0
0xffff978000008a90 0008 0000 0x0 0x0
0xffff978000008b08 0008 0000 0x0 0x0
0xffff978000008b80 0008 0000 0x0 0x0
0xffff978000008bf8 0008 0000 0x0 0x0
0xffff978000008c70 0008 0000 0x0 0x0
0xffff978000008ce8 0008 0000 0x0 0x0
0xffff978000008d60 0008 0000 0x0 0x0
0xffff978000008dd8 0008 0000 0x0 0x0
0xffff978000008e50 0008 0000 0x0 0x0
0xffff978000008ec8 0008 0000 0x0 0x0
0xffff978000008f40 0008 0000 0x0 0x0
0xffff978000008fb8 0008 0000 0x0 0x0
0xffff978000009030 0008 0000 0x0 0x0
0xffff9780000090a8 0008 0000 0x0 0x0
0xffff978000009120 0008 0000 0x0 0x0
0xffff978000009198 0008 0000 0x0 0x0
0xffff978000009210 0008 0000 0x0 0x0
0xffff978000009288 0008 0000 0x0 0x0
0xffff978000009300 0008 0000 0x0 0x0
0xffff978000009378 0008 0000 0x0 0x0
0xffff9780000093f0 0008 0000 0x0 0x0
0xffff978000009468 0008 0000 0x0 0x0
0xffff9780000094e0 0008 0000 0x0 0x0
0xffff978000009558 0008 0000 0x0 0x0
0xffff9780000095d0 0008 0000 0x0 0x0
0xffff978000009648 0008 0000 0x0 0x0
0xffff9780000096c0 0008 0000 0x0 0x0
0xffff978000009738 0008 0000 0x0 0x0
0xffff9780000097b0 0008 0000 0x0 0x0
0xffff978000009828 0008 0000 0x0 0x0
0xffff9780000098a0 0008 0000 0x0 0x0
0xffff978000009918 0008 0000 0x0 0x0
0xffff978000009990 0008 0000 0x0 0x0
0xffff978000009a08 0008 0000 0x0 0x0
0xffff978000009a80 0008 0000 0x0 0x0
0xffff978000009af8 0008 0000 0x0 0x0
0xffff978000009b70 0008 0000 0x0 0x0
0xffff978000009be8 0008 0000 0x0 0x0
0xffff978000009c60 0008 0000 0x0 0x0
0xffff978000009cd8 0008 0000 0x0 0x0
0xffff978000009d50 0008 0000 0x0 0x0
0xffff978000009dc8 0008 0000 0x0 0x0
0xffff978000009e40 0008 0000 0x0 0x0
0xffff978000009eb8 0008 0000 0x0 0x0
0xffff978000009f30 0008 0000 0x0 0x0
0xffff978000009fa8 0008 0000 0x0 0x0
0xffff97800000a020 0008 0000 0x0 0x0
0xffff97800000a098 0008 0000 0x0 0x0
0xffff97800000a110 0048 0000 0x0 0x0
0xffff97800000a188 0048 0000 0x0 0x0
0xffff97800000a200 0048 0000 0x0 0x0
0xffff97800000a278 0048 0000 0x0 0x0
0xffff97800000a2f0 0048 0000 0x0 0x0
0xffff97800000a368 0048 0000 0x0 0x0
0xffff97800000a3e0 0048 0000 0x0 0x0
0xffff97800000a458 0048 0000 0x0 0x0
0xffff97800000a4d0 0048 0000 0x0 0x0
0xffff97800000a548 0048 0000 0x0 0x0
0xffff97800000a5c0 0048 0000 0x0 0x0
0xffff97800000a638 0048 0000 0x0 0x0
0xffff97800000a6b0 0048 0000 0x0 0x0
0xffff97800000a728 0048 0000 0x0 0x0
0xffff97800000a7a0 0048 0000 0x0 0x0
0xffff97800000a818 0048 0000 0x0 0x0
0xffff97800000a890 0048 0000 0x0 0x0
0xffff97800000a908 0048 0000 0x0 0x0
0xffff97800000a980 0048 0000 0x0 0x0
0xffff97800000a9f8 0048 0000 0x0 0x0
0xffff97800000aa70 0048 0000 0x0 0x0
0xffff97800000aae8 0048 0000 0x0 0x0
0xffff97800000ab60 0048 0000 0x0 0x0
0xffff97800000abd8 0048 0000 0x0 0x0
0xffff97800000ac50 0048 0000 0x0 0x0
0xffff97800000acc8 0048 0000 0x0 0x0
0xffff97800000ad40 0048 0000 0x0 0x0
0xffff97800000adb8 0048 0000 0x0 0x0
0xffff97800000ae30 0048 0000 0x0 0x0
0xffff97800000aea8 0048 0000 0x0 0x0
0xffff97800000af20 0048 0000 0x0 0x0
0xffff97800000af98 0048 0000 0x0 0x0
0xffff97800000b010 0048 0000 0x0 0x0
0xffff97800000b088 0048 0000 0x0 0x0
0xffff97800000b100 0048 0000 0x0 0x0
0xffff97800000b178 0048 0000 0x0 0x0
0xffff97800000b1f0 0048 0000 0x0 0x0
0xffff97800000b268 0048 0000 0x0 0x0
0xffff97800000b2e0 0048 0000 0x0 0x0
0xffff97800000b358 0048 0000 0x0 0x0
0xffff97800000b3d0 0048 0000 0x0 0x0
0xffff97800000b448 0048 0000 0x0 0x0
0xffff97800000b4c0 0048 0000 0x0 0x0
0xffff97800000b538 0008 0000 0x0 0x0
0xffff97800000b5b0 0008 0000 0x0 0x0
0xffff97800000b628 0008 0000 0x0 0x0
0xffff97800000b6a0 0008 0000 0x0 0x0
0xffff97800000b718 0008 0000 0x0 0x0
0xffff97800000b790 0008 0000 0x0 0x0
0xffff97800000b808 0008 0000 0x0 0x0
0xffff97800000b880 0008 0000 0x0 0x0
0xffff97800000b8f8 0008 0000 0x0 0x0
0xffff97800000b970 0008 0000 0x0 0x0
0xffff97800000b9e8 0008 0000 0x0 0x0
0xffff97800000ba60 0008 0000 0x0 0x0
0xffff97800000bad8 0008 0000 0x0 0x0
0xffff97800000bb50 0008 0000 0x0 0x0
0xffff97800000bbc8 0008 0000 0x0 0x0
0xffff97800000bc40 0008 0000 0x0 0x0
0xffff97800000bcb8 0008 0000 0x0 0x0
0xffff97800000bd30 0008 0000 0x0 0x0
0xffff97800000bda8 0008 0000 0x0 0x0
0xffff97800000be20 0008 0000 0x0 0x0
0xffff97800000be98 0008 0000 0x0 0x0
0xffff97800000bf10 0008 0000 0x0 0x0
0xffff97800000bf88 0008 0000 0x0 0x0
0xffff97800000c000 0008 0000 0x0 0x0
0xffff97800000c078 0008 0000 0x0 0x0
0xffff97800000c0f0 0008 0000 0x0 0x0
0xffff97800000c168 0008 0000 0x0 0x0
0xffff97800000c1e0 0008 0000 0x0 0x0
0xffff97800000c258 0008 0000 0x0 0x0
0xffff97800000c2d0 0008 0000 0x0 0x0
0xffff97800000c348 0008 0000 0x0 0x0
0xffff97800000c3c0 0008 0000 0x0 0x0
0xffff97800000c438 0008 0000 0x0 0x0
0xffff97800000c4b0 0008 0000 0x0 0x0
0xffff97800000c528 0008 0000 0x0 0x0
0xffff97800000c5a0 0008 0000 0x0 0x0
0xffff97800000c618 0008 0000 0x0 0x0
0xffff97800000c690 0008 0000 0x0 0x0
0xffff97800000c708 0008 0000 0x0 0x0
0xffff97800000c780 0008 0000 0x0 0x0
0xffff97800000c7f8 0008 0000 0x0 0x0
0xffff97800000c870 0008 0000 0x0 0x0
0xffff97800000c8e8 0008 0000 0x0 0x0
0xffff97800000c960 0008 0000 0x0 0x0
0xffff97800000c9d8 0008 0000 0x0 0x0
0xffff97800000ca50 0008 0000 0x0 0x0
0xffff97800000cac8 0008 0000 0x0 0x0
0xffff97800000cb40 0008 0000 0x0 0x0
0xffff97800000cbb8 0008 0000 0x0 0x0
0xffff97800000cc30 0008 0000 0x0 0x0
0xffff97800000cca8 0008 0000 0x0 0x0
0xffff97800000cd20 0008 0000 0x0 0x0
0xffff97800000cd98 0008 0000 0x0 0x0
0xffff97800000ce10 0008 0000 0x0 0x0
0xffff97800000ce88 0048 0000 0x0 0x0
0xffff97800000cf00 0048 0000 0x0 0x0
0xffff97800000cf78 0048 0000 0x0 0x0
0xffff97800000cff0 0048 0000 0x0 0x0
0xffff97800000d068 0048 0000 0x0 0x0
0xffff97800000d0e0 0048 0000 0x0 0x0
0xffff97800000d158 0048 0000 0x0 0x0
0xffff97800000d1d0 0048 0000 0x0 0x0
0xffff97800000d248 0048 0000 0x0 0x0
0xffff97800000d2c0 0048 0000 0x0 0x0
0xffff97800000d338 0048 0000 0x0 0x0
0xffff97800000d3b0 0048 0000 0x0 0x0
0xffff97800000d428 0048 0000 0x0 0x0
0xffff97800000d4a0 0048 0000 0x0 0x0
0xffff97800000d518 0048 0000 0x0 0x0
0xffff97800000d590 0048 0000 0x0 0x0
0xffff97800000d608 0048 0000 0x0 0x0
0xffff97800000d680 0048 0000 0x0 0x0
0xffff97800000d6f8 0048 0000 0x0 0x0
0xffff97800000d770 0048 0000 0x0 0x0
0xffff97800000d7e8 0048 0000 0x0 0x0
0xffff97800000d860 0048 0000 0x0 0x0
0xffff97800000d8d8 0048 0000 0x0 0x0
0xffff97800000d950 0048 0000 0x0 0x0
0xffff97800000d9c8 0048 0000 0x0 0x0
0xffff97800000da40 0048 0000 0x0 0x0
0xffff97800000dab8 0048 0000 0x0 0x0
0xffff97800000db30 0048 0000 0x0 0x0
0xffff97800000dba8 0048 0000 0x0 0x0
0xffff97800000dc20 0048 0000 0x0 0x0
0xffff97800000dc98 0048 0000 0x0 0x0
0xffff97800000dd10 0048 0000 0x0 0x0
0xffff97800000dd88 0048 0000 0x0 0x0
0xffff97800000de00 0048 0000 0x0 0x0
0xffff97800000de78 0048 0000 0x0 0x0
0xffff97800000def0 0048 0000 0x0 0x0
0xffff97800000df68 0048 0000 0x0 0x0
0xffff97800000dfe0 0048 0000 0x0 0x0
0xffff97800000e058 0048 0000 0x0 0x0
0xffff97800000e0d0 0048 0000 0x0 0x0
0xffff97800000e148 0048 0000 0x0 0x0
0xffff97800000e1c0 0048 0000 0x0 0x0
0xffff97800000e238 0048 0000 0x0 0x0
0xffff97800000e2b0 0048 0000 0x0 0x0
0xffff97800000e328 0008 0000 0x0 0x0
0xffff97800000e3a0 0008 0000 0x0 0x0
0xffff97800000e418 0008 0000 0x0 0x0
0xffff97800000e490 0008 0000 0x0 0x0
0xffff97800000e508 0008 0000 0x0 0x0
0xffff97800000e580 0008 0000 0x0 0x0
0xffff97800000e5f8 0008 0000 0x0 0x0
0xffff97800000e670 0008 0000 0x0 0x0
0xffff97800000e6e8 0008 0000 0x0 0x0
0xffff97800000e760 0008 0000 0x0 0x0
0xffff97800000e7d8 0008 0000 0x0 0x0
0xffff97800000e850 0008 0000 0x0 0x0
0xffff97800000e8c8 0008 0000 0x0 0x0
0xffff97800000e940 0008 0000 0x0 0x0
0xffff97800000e9b8 0008 0000 0x0 0x0
0xffff97800000ea30 0008 0000 0x0 0x0
0xffff97800000eaa8 0008 0000 0x0 0x0
0xffff97800000eb20 0008 0000 0x0 0x0
0xffff97800000eb98 0008 0000 0x0 0x0
0xffff97800000ec10 0008 0000 0x0 0x0
0xffff97800000ec88 0008 0000 0x0 0x0
0xffff97800000ed00 0008 0000 0x0 0x0
0xffff97800000ed78 0008 0000 0x0 0x0
0xffff97800000edf0 0008 0000 0x0 0x0
0xffff97800000ee68 0008 0000 0x0 0x0
0xffff97800000eee0 0008 0000 0x0 0x0
0xffff97800000ef58 0008 0000 0x0 0x0
0xffff97800000efd0 0008 0000 0x0 0x0
0xffff97800000f048 0008 0000 0x0 0x0
0xffff97800000f0c0 0008 0000 0x0 0x0
0xffff97800000f138 0008 0000 0x0 0x0
0xffff97800000f1b0 0008 0000 0x0 0x0
0xffff97800000f228 0008 0000 0x0 0x0
0xffff97800000f2a0 0008 0000 0x0 0x0
0xffff97800000f318 0008 0000 0x0 0x0
0xffff97800000f390 0008 0000 0x0 0x0
0xffff97800000f408 0008 0000 0x0 0x0
0xffff97800000f480 0008 0000 0x0 0x0
0xffff97800000f4f8 0008 0000 0x0 0x0
0xffff97800000f570 0008 0000 0x0 0x0
0xffff97800000f5e8 0008 0000 0x0 0x0
0xffff97800000f660 0008 0000 0x0 0x0
0xffff97800000f6d8 0008 0000 0x0 0x0
0xffff97800000f750 0008 0000 0x0 0x0
0xffff97800000f7c8 0008 0000 0x0 0x0
0xffff97800000f840 0008 0000 0x0 0x0
0xffff97800000f8b8 0008 0000 0x0 0x0
0xffff97800000f930 0008 0000 0x0 0x0
0xffff97800000f9a8 0008 0000 0x0 0x0
0xffff97800000fa20 0008 0000 0x0 0x0
0xffff97800000fa98 0008 0000 0x0 0x0
0xffff97800000fb10 0008 0000 0x0 0x0
0xffff97800000fb88 0008 0000 0x0 0x0
0xffff97800000fc00 0008 0000 0x0 0x0
0xffff97800000fc78 0048 0000 0x0 0x0
0xffff97800000fcf0 0048 0000 0x0 0x0
0xffff97800000fd68 0048 0000 0x0 0x0
0xffff97800000fde0 0048 0000 0x0 0x0
0xffff97800000fe58 0048 0000 0x0 0x0
0xffff97800000fed0 0048 0000 0x0 0x0
0xffff97800000ff48 0048 0000 0x0 0x0
0xffff97800000ffc0 0048 0000 0x0 0x0
0xffff978000010038 0048 0000 0x0 0x0
0xffff9780000100b0 0048 0000 0x0 0x0
0xffff978000010128 0048 0000 0x0 0x0
0xffff9780000101a0 0048 0000 0x0 0x0
0xffff978000010218 0048 0000 0x0 0x0
0xffff978000010290 0048 0000 0x0 0x0
0xffff978000010308 0048 0000 0x0 0x0
0xffff978000010380 0048 0000 0x0 0x0
0xffff9780000103f8 0048 0000 0x0 0x0
0xffff978000010470 0048 0000 0x0 0x0
0xffff9780000104e8 0048 0000 0x0 0x0
0xffff978000010560 0048 0000 0x0 0x0
0xffff9780000105d8 0048 0000 0x0 0x0
0xffff978000010650 0048 0000 0x0 0x0
0xffff9780000106c8 0048 0000 0x0 0x0
0xffff978000010740 0048 0000 0x0 0x0
0xffff9780000107b8 0048 0000 0x0 0x0
0xffff978000010830 0048 0000 0x0 0x0
0xffff9780000108a8 0048 0000 0x0 0x0
0xffff978000010920 0048 0000 0x0 0x0
0xffff978000010998 0048 0000 0x0 0x0
0xffff978000010a10 0048 0000 0x0 0x0
0xffff978000010a88 0048 0000 0x0 0x0
0xffff978000010b00 0048 0000 0x0 0x0
0xffff978000010b78 0048 0000 0x0 0x0
0xffff978000010bf0 0048 0000 0x0 0x0
0xffff978000010c68 0048 0000 0x0 0x0
0xffff978000010ce0 0048 0000 0x0 0x0
0xffff978000010d58 0048 0000 0x0 0x0
0xffff978000010dd0 0048 0000 0x0 0x0
0xffff978000010e48 0048 0000 0x0 0x0
0xffff978000010ec0 0048 0000 0x0 0x0
0xffff978000010f38 0049 0000 0x0 0x0
0xffff978000010fb0 0048 0000 0x0 0x0
0xffff978000011028 0049 0000 0x0 0x0
0xffff9780000110a0 0049 0000 0x0 0x0
0xffff978000011118 0048 0000 0x0 0x0
0xffff978000011190 0048 0000 0x0 0x0
0xffff978000011208 0048 0000 0x0 0x0
0xffff978000011280 0048 0000 0x0 0x0
0xffff9780000112f8 0008 0000 0x0 0x0
0xffff978000011370 0008 0000 0x0 0x0
0xffff9780000113e8 0008 0000 0x0 0x0
0xffff978000011460 0008 0000 0x0 0x0
0xffff9780000114d8 0008 0000 0x0 0x0
0xffff978000011550 0008 0000 0x0 0x0
0xffff9780000115c8 0008 0000 0x0 0x0
0xffff978000011640 0008 0000 0x0 0x0
0xffff9780000116b8 0008 0000 0x0 0x0
0xffff978000011730 0008 0000 0x0 0x0
0xffff9780000117a8 0008 0000 0x0 0x0
0xffff978000011820 0008 0000 0x0 0x0
0xffff978000011898 0008 0000 0x0 0x0
0xffff978000011910 0008 0000 0x0 0x0
0xffff978000011988 0008 0000 0x0 0x0
0xffff978000011a00 0008 0000 0x0 0x0
0xffff978000011a78 0008 0000 0x0 0x0
0xffff978000011af0 0008 0000 0x0 0x0
0xffff978000011b68 0008 0000 0x0 0x0
0xffff978000011be0 0008 0000 0x0 0x0
0xffff978000011c58 0008 0000 0x0 0x0
0xffff978000011cd0 0008 0000 0x0 0x0
0xffff978000011d48 0008 0000 0x0 0x0
0xffff978000011dc0 0008 0000 0x0 0x0
0xffff978000011e38 0008 0000 0x0 0x0
0xffff978000011eb0 0008 0000 0x0 0x0
0xffff978000011f28 0008 0000 0x0 0x0
0xffff978000011fa0 0008 0000 0x0 0x0
0xffff978000012018 0008 0000 0x0 0x0
0xffff978000012090 0008 0000 0x0 0x0
0xffff978000012108 0008 0000 0x0 0x0
0xffff978000012180 0008 0000 0x0 0x0
0xffff9780000121f8 0008 0000 0x0 0x0
0xffff978000012270 0008 0000 0x0 0x0
0xffff9780000122e8 0008 0000 0x0 0x0
0xffff978000012360 0008 0000 0x0 0x0
0xffff9780000123d8 0008 0000 0x0 0x0
0xffff978000012450 0008 0000 0x0 0x0
0xffff9780000124c8 0008 0000 0x0 0x0
0xffff978000012540 0008 0000 0x0 0x0
0xffff9780000125b8 0008 0000 0x0 0x0
0xffff978000012630 0008 0000 0x0 0x0
0xffff9780000126a8 0008 0000 0x0 0x0
0xffff978000012720 0008 0000 0x0 0x0
0xffff978000012798 0008 0000 0x0 0x0
0xffff978000012810 0008 0000 0x0 0x0
0xffff978000012888 0008 0000 0x0 0x0
0xffff978000012900 0008 0000 0x0 0x0
0xffff978000012978 0008 0000 0x0 0x0
0xffff9780000129f0 0008 0000 0x0 0x0
0xffff978000012a68 0008 0000 0x0 0x0
0xffff978000012ae0 0008 0000 0x0 0x0
0xffff978000012b58 0008 0000 0x0 0x0
0xffff978000012bd0 0008 0000 0x0 0x0
0xffff978000012c48 0008 0000 0x0 0x0
0xffff978000012cc0 0008 0000 0x0 0x0
0xffff978000012d38 0008 0000 0x0 0x0
0xffff978000012db0 0008 0000 0x0 0x0
0xffff978000012e28 0008 0000 0x0 0x0
0xffff978000012ea0 0008 0000 0x0 0x0
0xffff978000012f18 0008 0000 0x0 0x0
0xffff978000012f90 0008 0000 0x0 0x0
0xffff978000013008 0008 0000 0x0 0x0
0xffff978000013080 0008 0000 0x0 0x0
0xffff9780000130f8 0008 0000 0x0 0x0
0xffff978000013170 0008 0000 0x0 0x0
0xffff9780000131e8 0008 0000 0x0 0x0
0xffff978000013260 0008 0000 0x0 0x0
0xffff9780000132d8 0008 0000 0x0 0x0
0xffff978000013350 0008 0000 0x0 0x0
0xffff9780000133c8 0008 0000 0x0 0x0
0xffff978000013440 0008 0000 0x0 0x0
0xffff9780000134b8 0008 0000 0x0 0x0
0xffff978000013530 0008 0000 0x0 0x0
0xffff9780000135a8 0008 0000 0x0 0x0
0xffff978000013620 0008 0000 0x0 0x0
0xffff978000013698 0008 0000 0x0 0x0
0xffff978000013710 0008 0000 0x0 0x0
0xffff978000013788 0008 0000 0x0 0x0
0xffff978000013800 0008 0000 0x0 0x0
0xffff978000013878 0008 0000 0x0 0x0
0xffff9780000138f0 0008 0000 0x0 0x0
0xffff978000013968 0008 0000 0x0 0x0
0xffff9780000139e0 0008 0000 0x0 0x0
0xffff978000013a58 0008 0000 0x0 0x0
0xffff978000013ad0 0008 0000 0x0 0x0
0xffff978000013b48 0008 0000 0x0 0x0
0xffff978000013bc0 0008 0000 0x0 0x0
0xffff978000013c38 0008 0000 0x0 0x0
0xffff978000013cb0 0008 0000 0x0 0x0
0xffff978000013d28 0008 0000 0x0 0x0
0xffff978000013da0 0008 0000 0x0 0x0
0xffff978000013e18 0008 0000 0x0 0x0
0xffff978000013e90 0008 0000 0x0 0x0
0xffff978000013f08 0008 0000 0x0 0x0
0xffff978000013f80 0008 0000 0x0 0x0
0xffff978000013ff8 0008 0000 0x0 0x0
0xffff978000014070 0008 0000 0x0 0x0
0xffff9780000140e8 0008 0000 0x0 0x0
0xffff978000014160 0008 0000 0x0 0x0
0xffff9780000141d8 0008 0000 0x0 0x0
0xffff978000014250 0008 0000 0x0 0x0
0xffff9780000142c8 0008 0000 0x0 0x0
0xffff978000014340 0008 0000 0x0 0x0
0xffff9780000143b8 0008 0000 0x0 0x0
0xffff978000014430 0008 0000 0x0 0x0
0xffff9780000144a8 0008 0000 0x0 0x0
0xffff978000014520 0008 0000 0x0 0x0
0xffff978000014598 0008 0000 0x0 0x0
0xffff978000014610 0008 0000 0x0 0x0
0xffff978000014688 0008 0000 0x0 0x0
0xffff978000014700 0008 0000 0x0 0x0
0xffff978000014778 0008 0000 0x0 0x0
0xffff9780000147f0 0008 0000 0x0 0x0
0xffff978000014868 0008 0000 0x0 0x0
0xffff9780000148e0 0008 0000 0x0 0x0
0xffff978000014958 0008 0000 0x0 0x0
0xffff9780000149d0 0008 0000 0x0 0x0
0xffff978000014a48 0008 0000 0x0 0x0
0xffff978000014ac0 0008 0000 0x0 0x0
0xffff978000014b38 0008 0000 0x0 0x0
0xffff978000014bb0 0008 0000 0x0 0x0
0xffff978000014c28 0008 0000 0x0 0x0
0xffff978000014ca0 0008 0000 0x0 0x0
0xffff978000014d18 0008 0000 0x0 0x0
0xffff978000014d90 0008 0000 0x0 0x0
0xffff978000014e08 0008 0000 0x0 0x0
0xffff978000014e80 0008 0000 0x0 0x0
0xffff978000014ef8 0008 0000 0x0 0x0
0xffff978000014f70 0008 0000 0x0 0x0
0xffff978000014fe8 0008 0000 0x0 0x0
0xffff978000015060 0008 0000 0x0 0x0
0xffff9780000150d8 0008 0000 0x0 0x0
0xffff978000015150 0008 0000 0x0 0x0
0xffff9780000151c8 0008 0000 0x0 0x0
0xffff978000015240 0008 0000 0x0 0x0
0xffff9780000152b8 0008 0000 0x0 0x0
0xffff978000015330 0008 0000 0x0 0x0
0xffff9780000153a8 0008 0000 0x0 0x0
0xffff978000015420 0008 0000 0x0 0x0
0xffff978000015498 0008 0000 0x0 0x0
0xffff978000015510 0008 0000 0x0 0x0
0xffff978000015588 0008 0000 0x0 0x0
0xffff978000015600 0008 0000 0x0 0x0
0xffff978000015678 0008 0000 0x0 0x0
0xffff9780000156f0 0008 0000 0x0 0x0
0xffff978000015768 0008 0000 0x0 0x0
0xffff9780000157e0 0008 0000 0x0 0x0
0xffff978000015858 0008 0000 0x0 0x0
0xffff9780000158d0 0008 0000 0x0 0x0
0xffff978000015948 0008 0000 0x0 0x0
0xffff9780000159c0 0008 0000 0x0 0x0
0xffff978000015a38 0008 0000 0x0 0x0
0xffff978000015ab0 0008 0000 0x0 0x0
0xffff978000015b28 0008 0000 0x0 0x0
0xffff978000015ba0 0008 0000 0x0 0x0
0xffff978000015c18 0008 0000 0x0 0x0
0xffff978000015c90 0008 0000 0x0 0x0
0xffff978000015d08 0008 0000 0x0 0x0
0xffff978000015d80 0008 0000 0x0 0x0
0xffff978000015df8 0008 0000 0x0 0x0
0xffff978000015e70 0008 0000 0x0 0x0
0xffff978000015ee8 0008 0000 0x0 0x0
0xffff978000015f60 0008 0000 0x0 0x0
0xffff978000015fd8 0008 0000 0x0 0x0
0xffff978000016050 0008 0000 0x0 0x0
0xffff9780000160c8 0008 0000 0x0 0x0
0xffff978000016140 0008 0000 0x0 0x0
0xffff9780000161b8 0008 0000 0x0 0x0
0xffff978000016230 0008 0000 0x0 0x0
0xffff9780000162a8 0008 0000 0x0 0x0
0xffff978000016320 0008 0000 0x0 0x0
0xffff978000016398 0008 0000 0x0 0x0
0xffff978000016410 0008 0000 0x0 0x0
0xffff978000016488 0008 0000 0x0 0x0
0xffff978000016500 0008 0000 0x0 0x0
0xffff978000016578 0008 0000 0x0 0x0
0xffff9780000165f0 0008 0000 0x0 0x0
0xffff978000016668 0008 0000 0x0 0x0
0xffff9780000166e0 0008 0000 0x0 0x0
0xffff978000016758 0008 0000 0x0 0x0
0xffff9780000167d0 0008 0000 0x0 0x0
0xffff978000016848 0008 0000 0x0 0x0
0xffff9780000168c0 0008 0000 0x0 0x0
0xffff978000016938 0008 0000 0x0 0x0
0xffff9780000169b0 0008 0000 0x0 0x0
0xffff978000016a28 0008 0000 0x0 0x0
0xffff978000016aa0 0008 0000 0x0 0x0
0xffff978000016b18 0008 0000 0x0 0x0
0xffff978000016b90 0008 0000 0x0 0x0
0xffff978000016c08 0008 0000 0x0 0x0
0xffff978000016c80 0008 0000 0x0 0x0
0xffff978000016cf8 0008 0000 0x0 0x0
0xffff978000016d70 0008 0000 0x0 0x0
0xffff978000016de8 0008 0000 0x0 0x0
0xffff978000016e60 0008 0000 0x0 0x0
0xffff978000016ed8 0008 0000 0x0 0x0
0xffff978000016f50 0008 0000 0x0 0x0
0xffff978000016fc8 0008 0000 0x0 0x0
0xffff978000017040 0008 0000 0x0 0x0
0xffff9780000170b8 0008 0000 0x0 0x0
0xffff978000017130 0008 0000 0x0 0x0
0xffff9780000171a8 0008 0000 0x0 0x0
0xffff978000017220 0008 0000 0x0 0x0
0xffff978000017298 0008 0000 0x0 0x0
0xffff978000017310 0008 0000 0x0 0x0
0xffff978000017388 0008 0000 0x0 0x0
0xffff978000017400 0008 0000 0x0 0x0
0xffff978000017478 0008 0000 0x0 0x0
0xffff9780000174f0 0008 0000 0x0 0x0
0xffff978000017568 0008 0000 0x0 0x0
0xffff9780000175e0 0008 0000 0x0 0x0
0xffff978000017658 0008 0000 0x0 0x0
0xffff9780000176d0 0008 0000 0x0 0x0
0xffff978000017748 0008 0000 0x0 0x0
0xffff9780000177c0 0008 0000 0x0 0x0
0xffff978000017838 0008 0000 0x0 0x0
0xffff9780000178b0 0008 0000 0x0 0x0
0xffff978000017928 0008 0000 0x0 0x0
0xffff9780000179a0 0008 0000 0x0 0x0
0xffff978000017a18 0008 0000 0x0 0x0
0xffff978000017a90 0008 0000 0x0 0x0
0xffff978000017b08 0008 0000 0x0 0x0
0xffff978000017b80 0008 0000 0x0 0x0
0xffff978000017bf8 0008 0000 0x0 0x0
0xffff978000017c70 0008 0000 0x0 0x0
0xffff978000017ce8 0008 0000 0x0 0x0
0xffff978000017d60 0008 0000 0x0 0x0
0xffff978000017dd8 0008 0000 0x0 0x0
0xffff978000017e50 0008 0000 0x0 0x0
0xffff978000017ec8 0008 0000 0x0 0x0
0xffff978000017f40 0008 0000 0x0 0x0
0xffff978000017fb8 0008 0000 0x0 0x0
0xffff978000018030 0008 0000 0x0 0x0
0xffff9780000180a8 0008 0000 0x0 0x0
0xffff978000018120 0008 0000 0x0 0x0
0xffff978000018198 0008 0000 0x0 0x0
0xffff978000018210 0008 0000 0x0 0x0
0xffff978000018288 0008 0000 0x0 0x0
0xffff978000018300 0008 0000 0x0 0x0
0xffff978000018378 0008 0000 0x0 0x0
0xffff9780000183f0 0008 0000 0x0 0x0
0xffff978000018468 0008 0000 0x0 0x0
0xffff9780000184e0 0008 0000 0x0 0x0
0xffff978000018558 0008 0000 0x0 0x0
0xffff9780000185d0 0008 0000 0x0 0x0
0xffff978000018648 0008 0000 0x0 0x0
0xffff9780000186c0 0008 0000 0x0 0x0
0xffff978000018738 0008 0000 0x0 0x0
0xffff9780000187b0 0008 0000 0x0 0x0
0xffff978000018828 0008 0000 0x0 0x0
0xffff9780000188a0 0008 0000 0x0 0x0
0xffff978000018918 0008 0000 0x0 0x0
0xffff978000018990 0008 0000 0x0 0x0
0xffff978000018a08 0008 0000 0x0 0x0
0xffff978000018a80 0008 0000 0x0 0x0
0xffff978000018af8 0008 0000 0x0 0x0
0xffff978000018b70 0008 0000 0x0 0x0
0xffff978000018be8 0008 0000 0x0 0x0
0xffff978000018c60 0008 0000 0x0 0x0
0xffff978000018cd8 0008 0000 0x0 0x0
0xffff978000018d50 0008 0000 0x0 0x0
0xffff978000018dc8 0008 0000 0x0 0x0
0xffff978000018e40 0008 0000 0x0 0x0
0xffff978000018eb8 0008 0000 0x0 0x0
0xffff978000018f30 0008 0000 0x0 0x0
0xffff978000018fa8 0008 0000 0x0 0x0
0xffff978000019020 0008 0000 0x0 0x0
0xffff978000019098 0008 0000 0x0 0x0
0xffff978000019110 0008 0000 0x0 0x0
0xffff978000019188 0008 0000 0x0 0x0
0xffff978000019200 0008 0000 0x0 0x0
0xffff978000019278 0008 0000 0x0 0x0
0xffff9780000192f0 0008 0000 0x0 0x0
0xffff978000019368 0008 0000 0x0 0x0
0xffff9780000193e0 0008 0000 0x0 0x0
0xffff978000019458 0008 0000 0x0 0x0
0xffff9780000194d0 0008 0000 0x0 0x0
0xffff978000019548 0008 0000 0x0 0x0
0xffff9780000195c0 0008 0000 0x0 0x0
0xffff978000019638 0008 0000 0x0 0x0
0xffff9780000196b0 0008 0000 0x0 0x0
0xffff978000019728 0008 0000 0x0 0x0
0xffff9780000197a0 0008 0000 0x0 0x0
0xffff978000019818 0008 0000 0x0 0x0
0xffff978000019890 0008 0000 0x0 0x0
0xffff978000019908 0008 0000 0x0 0x0
0xffff978000019980 0008 0000 0x0 0x0
0xffff9780000199f8 0008 0000 0x0 0x0
0xffff978000019a70 0008 0000 0x0 0x0
0xffff978000019ae8 0008 0000 0x0 0x0
0xffff978000019b60 0008 0000 0x0 0x0
0xffff978000019bd8 0008 0000 0x0 0x0
0xffff978000019c50 0008 0000 0x0 0x0
0xffff978000019cc8 0008 0000 0x0 0x0
0xffff978000019d40 0008 0000 0x0 0x0
0xffff978000019db8 0008 0000 0x0 0x0
0xffff978000019e30 0008 0000 0x0 0x0
0xffff978000019ea8 0008 0000 0x0 0x0
0xffff978000019f20 0008 0000 0x0 0x0
0xffff978000019f98 0008 0000 0x0 0x0
0xffff97800001a010 0008 0000 0x0 0x0
0xffff97800001a088 0008 0000 0x0 0x0
0xffff97800001a100 0008 0000 0x0 0x0
0xffff97800001a178 0008 0000 0x0 0x0
0xffff97800001a1f0 0008 0000 0x0 0x0
0xffff97800001a268 0008 0000 0x0 0x0
0xffff97800001a2e0 0008 0000 0x0 0x0
0xffff97800001a358 0008 0000 0x0 0x0
0xffff97800001a3d0 0008 0000 0x0 0x0
0xffff97800001a448 0008 0000 0x0 0x0
0xffff97800001a4c0 0008 0000 0x0 0x0
0xffff97800001a538 0008 0000 0x0 0x0
0xffff97800001a5b0 0008 0000 0x0 0x0
0xffff97800001a628 0008 0000 0x0 0x0
0xffff97800001a6a0 0008 0000 0x0 0x0
0xffff97800001a718 0008 0000 0x0 0x0
0xffff97800001a790 0008 0000 0x0 0x0
0xffff97800001a808 0008 0000 0x0 0x0
0xffff97800001a880 0008 0000 0x0 0x0
0xffff97800001a8f8 0008 0000 0x0 0x0
0xffff97800001a970 0008 0000 0x0 0x0
0xffff97800001a9e8 0008 0000 0x0 0x0
0xffff97800001aa60 0008 0000 0x0 0x0
0xffff97800001aad8 0008 0000 0x0 0x0
0xffff97800001ab50 0008 0000 0x0 0x0
0xffff97800001abc8 0008 0000 0x0 0x0
0xffff97800001ac40 0008 0000 0x0 0x0
0xffff97800001acb8 0008 0000 0x0 0x0
0xffff97800001ad30 0008 0000 0x0 0x0
0xffff97800001ada8 0008 0000 0x0 0x0
0xffff97800001ae20 0008 0000 0x0 0x0
0xffff97800001ae98 0008 0000 0x0 0x0
0xffff97800001af10 0008 0000 0x0 0x0
0xffff97800001af88 0008 0000 0x0 0x0
0xffff97800001b000 0008 0000 0x0 0x0
0xffff97800001b078 0008 0000 0x0 0x0
0xffff97800001b0f0 0008 0000 0x0 0x0
0xffff97800001b168 0008 0000 0x0 0x0
0xffff97800001b1e0 0008 0000 0x0 0x0
0xffff97800001b258 0008 0000 0x0 0x0
0xffff97800001b2d0 0008 0000 0x0 0x0
0xffff97800001b348 0008 0000 0x0 0x0
0xffff97800001b3c0 0008 0000 0x0 0x0
0xffff97800001b438 0008 0000 0x0 0x0
0xffff97800001b4b0 0008 0000 0x0 0x0
0xffff97800001b528 0008 0000 0x0 0x0
0xffff97800001b5a0 0008 0000 0x0 0x0
0xffff97800001b618 0008 0000 0x0 0x0
0xffff97800001b690 0008 0000 0x0 0x0
0xffff97800001b708 0008 0000 0x0 0x0
0xffff97800001b780 0008 0000 0x0 0x0
0xffff97800001b7f8 0008 0000 0x0 0x0
0xffff97800001b870 0008 0000 0x0 0x0
0xffff97800001b8e8 0008 0000 0x0 0x0
0xffff97800001b960 0008 0000 0x0 0x0
0xffff97800001b9d8 0008 0000 0x0 0x0
0xffff97800001ba50 0008 0000 0x0 0x0
0xffff97800001bac8 0008 0000 0x0 0x0
0xffff97800001bb40 0008 0000 0x0 0x0
0xffff97800001bbb8 0008 0000 0x0 0x0
0xffff97800001bc30 0008 0000 0x0 0x0
0xffff97800001bca8 0008 0000 0x0 0x0
0xffff97800001bd20 0008 0000 0x0 0x0
0xffff97800001bd98 0008 0000 0x0 0x0
0xffff97800001be10 0008 0000

[Kamil Rytarowski]

#syz fix: Validate usec ranges in sys___select50()