syzbot


UBSan: Undefined Behavior in ttioctl

Status: fixed on 2020/11/18 19:21
Reported-by: syzbot+92c0fca82b74a9798b78@syzkaller.appspotmail.com
Fix commit: bf7b939a1a2d tty: Negating INT_MIN will overflow int, bail out with EINVAL
First crash: 1390d, last: 1390d

Sample crash report:
[  88.1536595] panic: UBSan: Undefined Behavior in /syzkaller/managers/netbsd-kubsan/kernel/sys/kern/tty.c:1302:11, negation of -2147483648 cannot be represented in type 'int'

[  88.1702792] cpu0: Begin traceback...
[  88.2236120] vpanic() at netbsd:vpanic+0x2d3 sys/kern/subr_prf.c:290
[  88.3536169] isAlreadyReported() at netbsd:isAlreadyReported
[  88.4836115] HandleNegateOverflow() at netbsd:HandleNegateOverflow+0x134 sys/../common/lib/libc/misc/ubsan.c:393
[  88.6136112] ttioctl() at netbsd:ttioctl+0x3c41 sys/kern/tty.c:1302
[  88.7236107] comioctl() at netbsd:comioctl+0x18e sys/dev/ic/com.c:1168
[  88.8436124] cdev_ioctl() at netbsd:cdev_ioctl+0x160 sys/kern/subr_devsw.c:935
[  88.9636108] cnioctl() at netbsd:cnioctl+0xb2 sys/dev/cons.c:221
[  89.0836102] cdev_ioctl() at netbsd:cdev_ioctl+0x160 sys/kern/subr_devsw.c:935
[  89.2136124] spec_ioctl() at netbsd:spec_ioctl+0x2d0 sys/miscfs/specfs/spec_vnops.c:902
[  89.3336121] VOP_IOCTL() at netbsd:VOP_IOCTL+0x141 sys/kern/vnode_if.c:646
[  89.4836176] vn_ioctl() at netbsd:vn_ioctl+0x1c7 sys/kern/vfs_vnops.c:778
[  89.6136113] sys_ioctl() at netbsd:sys_ioctl+0xdaa sys/kern/sys_generic.c:671
[  89.7336175] sys___syscall() at netbsd:sys___syscall+0x1cf sy_call sys/sys/syscallvar.h:66 [inline]
[  89.7336175] sys___syscall() at netbsd:sys___syscall+0x1cf sys/kern/sys_syscall.c:77
[  89.8636149] syscall() at netbsd:syscall+0x2d5 sy_call sys/sys/syscallvar.h:65 [inline]
[  89.8636149] syscall() at netbsd:syscall+0x2d5 sy_invoke sys/sys/syscallvar.h:94 [inline]
[  89.8636149] syscall() at netbsd:syscall+0x2d5 sys/arch/x86/x86/syscall.c:138
[  89.8936142] --- syscall (number 198) ---
[  89.9336133] netbsd:syscall+0x2d5:
[  89.9336133] cpu0: End traceback...
[  89.9336133] fatal breakpoint trap in supervisor mode
[  89.9455282] trap type 1 code 0 rip 0xffffffff80221a85 cs 0x8 rflags 0x246 cr2 0x77d5a2a8ef08 ilevel 0 rsp 0xffff8d00cb45b3a0
[  89.9585130] curlwp 0xffffaf01ae021680 pid 912.3120 lowest kstack 0xffff8d00cb4572c0
Stopped in pid 912.3120 (syz-executor.2) at     netbsd:breakpoint+0x5:  leave
?
breakpoint() at netbsd:breakpoint+0x5
db_panic() at netbsd:db_panic+0xec sys/ddb/db_panic.c:67
vpanic() at netbsd:vpanic+0x2d3 sys/kern/subr_prf.c:290
isAlreadyReported() at netbsd:isAlreadyReported
HandleNegateOverflow() at netbsd:HandleNegateOverflow+0x134 sys/../common/lib/libc/misc/ubsan.c:393
ttioctl() at netbsd:ttioctl+0x3c41 sys/kern/tty.c:1302
comioctl() at netbsd:comioctl+0x18e sys/dev/ic/com.c:1168
cdev_ioctl() at netbsd:cdev_ioctl+0x160 sys/kern/subr_devsw.c:935
cnioctl() at netbsd:cnioctl+0xb2 sys/dev/cons.c:221
cdev_ioctl() at netbsd:cdev_ioctl+0x160 sys/kern/subr_devsw.c:935
spec_ioctl() at netbsd:spec_ioctl+0x2d0 sys/miscfs/specfs/spec_vnops.c:902
VOP_IOCTL() at netbsd:VOP_IOCTL+0x141 sys/kern/vnode_if.c:646
vn_ioctl() at netbsd:vn_ioctl+0x1c7 sys/kern/vfs_vnops.c:778
sys_ioctl() at netbsd:sys_ioctl+0xdaa sys/kern/sys_generic.c:671
sys___syscall() at netbsd:sys___syscall+0x1cf sy_call sys/sys/syscallvar.h:66 [inline]
sys___syscall() at netbsd:sys___syscall+0x1cf sys/kern/sys_syscall.c:77
syscall() at netbsd:syscall+0x2d5 sy_call sys/sys/syscallvar.h:65 [inline]
syscall() at netbsd:syscall+0x2d5 sy_invoke sys/sys/syscallvar.h:94 [inline]
syscall() at netbsd:syscall+0x2d5 sys/arch/x86/x86/syscall.c:138
--- syscall (number 198) ---
netbsd:syscall+0x2d5:
Panic string: UBSan: Undefined Behavior in /syzkaller/managers/netbsd-kubsan/kernel/sys/kern/tty.c:1302:11, negation of -2147483648 cannot be represented in type 'int'

PID    LID S CPU     FLAGS       STRUCT LWP *               NAME WAIT
2738  2738 2   1         0   ffffaf01ae43c540     syz-executor.5
2985  2985 3   0     40080   ffffaf01afaab9c0     syz-executor.5 parked
2088  2088 3   1     40080   ffffaf019e17e2c0     syz-executor.5 parked
1059  1059 2   1     40000   ffffaf01ae371480     syz-executor.1
915    915 3   0     40080   ffffaf019f6f0080     syz-executor.5 parked
912  >3120 7   0         0   ffffaf01ae021680     syz-executor.2
912   1973 3   0        80   ffffaf01ae02f740     syz-executor.2 parked
912    912 2   0  10040000   ffffaf01ae371040     syz-executor.2
2746  2746 3   0     40080   ffffaf01ace9b200     syz-executor.5 parked
905    905 3   0     40080   ffffaf01ae044340     syz-executor.1 parked
2815  2815 3   1        80   ffffaf01afaab580     syz-executor.5 parked
909    909 3   1        80   ffffaf019eee6480     syz-executor.3 parked
911    914 2   1     40000   ffffaf01ae02f300     syz-executor.4
911    911 2   1  10040000   ffffaf01ace9ba80     syz-executor.4
2855  2855 3   1        80   ffffaf01ae11f940     syz-executor.3 parked
2518  2518 3   0        80   ffffaf019ef0d0c0     syz-executor.4 parked
2737  2737 3   0        80   ffffaf01ae3718c0     syz-executor.4 parked
2662  2662 3   0        80   ffffaf019d8465c0     syz-executor.5 parked
2460  2460 3   1        80   ffffaf01ade066c0     syz-executor.5 parked
1460  1460 3   1        80   ffffaf01adcb74c0     syz-executor.4 parked
1842  1842 3   0        80   ffffaf01ae02fb80     syz-executor.3 parked
2097  2097 3   0        80   ffffaf01ade06280     syz-executor.3 parked
952    952 3   1        80   ffffaf01ade06b00               init nanoslp
1448  1448 3   0        80   ffffaf01a346aa40     syz-executor.2 parked
1492  1492 3   0        80   ffffaf01ace9b640     syz-executor.2 parked
1736  1736 3   0        80   ffffaf01ae044bc0     syz-executor.2 parked
1467  1467 3   1        80   ffffaf01ae021ac0     syz-executor.1 parked
1375  1375 3   1        80   ffffaf019eee6040     syz-executor.3 parked
1341  1341 3   0        80   ffffaf01adeae700     syz-executor.3 parked
1214  1214 3   1        80   ffffaf019ed5dbc0     syz-executor.3 parked
1314  1314 3   0        80   ffffaf01a346a600     syz-executor.4 parked
1207  1207 3   0        80   ffffaf01ae021240     syz-executor.3 parked
995  > 995 7   1        40   ffffaf01a346a1c0     syz-executor.5
419    419 3   0        c0   ffffaf01a013fa00     syz-executor.3 pipe_rd
1084  1084 3   1        40   ffffaf01a013f5c0     syz-executor.4 tstile
1081  1081 2   0        40   ffffaf019ef0d500     syz-executor.2
940    940 2   0        40   ffffaf019ed5d340     syz-executor.1
1076  1076 3   0        c0   ffffaf019e5f9b80     syz-executor.0 pipe_rd
855   1099 3   0        80   ffffaf019dab3640         syz-fuzzer parked
855   1077 3   1        80   ffffaf019f6f0900         syz-fuzzer parked
855   1069 3   0        c0   ffffaf019dd3b680         syz-fuzzer parked
855   1067 3   0        80   ffffaf019fa66540         syz-fuzzer parked
855    989 3   1        80   ffffaf019df2cb00         syz-fuzzer parked
855   1249 2   1        40   ffffaf019dab3a80         syz-fuzzer
855   1100 3   0        80   ffffaf019dd3b240         syz-fuzzer parked
855   1070 2   0        40   ffffaf019fbac140         syz-fuzzer
855    855 3   0        80   ffffaf019dab3200         syz-fuzzer parked
1250  1250 3   0        80   ffffaf019fa66100               sshd select
960    960 3   1        80   ffffaf019ef0d940              getty nanoslp
1116  1116 3   0        80   ffffaf019fbac580              getty nanoslp
1090  1090 3   1        80   ffffaf01a013f180              getty nanoslp
943    943 3   1        80   ffffaf019fbac9c0               sshd select
979    979 3   1        80   ffffaf019fa66980             powerd kqueue
869    869 3   1        80   ffffaf019e5f9740            syslogd kqueue
593    593 3   0        80   ffffaf019df2c280             dhcpcd poll
591    591 3   1        80   ffffaf019ed5d780             dhcpcd poll
590    590 3   1        80   ffffaf019f6f04c0             dhcpcd poll
426    426 3   0        80   ffffaf019e5f9300             dhcpcd poll
347    347 3   0        80   ffffaf019df2c6c0             dhcpcd poll
346    346 3   1        80   ffffaf019dd3bac0             dhcpcd poll
345    345 3   0        80   ffffaf019e17e700             dhcpcd poll
1        1 3   0        80   ffffaf0195675900               init wait
0      409 3   1       200   ffffaf01adcb7080          acctwatch actwat
0      839 3   0       200   ffffaf019d846a00            physiod physiod
0      166 3   0       200   ffffaf019d8dfa40          pooldrain pooldrain
0      165 2   0       240   ffffaf019d8df600            ioflush
0      164 3   1       200   ffffaf019d8df1c0           pgdaemon pgdaemon
0      161 3   0       200   ffffaf019d846180               usb7 usbevt
0       31 3   1       200   ffffaf019a7e99c0               usb6 usbevt
0       63 3   1       200   ffffaf019a7e9580               usb5 usbevt
0      126 2   0       240   ffffaf019a7e9140               usb4
0      125 3   1       200   ffffaf019775c980               usb3 usbevt
0      124 3   1       200   ffffaf019775c540               usb2 usbevt
0      123 3   0       200   ffffaf019775c100               usb1 usbevt
0      122 3   1       200   ffffaf01956d7940               usb0 usbevt
0      121 3   1       200   ffffaf01956d7500         usbtask-dr usbtsk
0      120 3   0       200   ffffaf0192b32ac0         usbtask-hc usbtsk
0      119 3   0       200   ffffaf01956d70c0             npfgc0 npfgcw
0      118 3   1       200   ffffaf01956754c0            rt_free rt_free
0      117 3   1       200   ffffaf0195675080              unpgc unpgc
0      116 2   0       200   ffffaf01956908c0    key_timehandler
0      115 3   1       200   ffffaf0195690480    icmp6_wqinput/1 icmp6_wqinput
0      114 3   0       200   ffffaf0195690040    icmp6_wqinput/0 icmp6_wqinput
0      113 2   0       200   ffffaf019564bbc0          nd6_timer
0      112 3   1       200   ffffaf019564b780    carp6_wqinput/1 carp6_wqinput
0      111 3   0       200   ffffaf019564b340    carp6_wqinput/0 carp6_wqinput
0      110 3   1       200   ffffaf019560eb80     carp_wqinput/1 carp_wqinput
0      109 3   0       200   ffffaf0195601700     carp_wqinput/0 carp_wqinput
0      108 3   1       200   ffffaf01956012c0     icmp_wqinput/1 icmp_wqinput
0      107 3   0       200   ffffaf019560e300     icmp_wqinput/0 icmp_wqinput
0      106 2   0       200   ffffaf019560e740           rt_timer
0      105 3   0       200   ffffaf0195601b40        vmem_rehash vmem_rehash
0      104 3   0       200   ffffaf0194f90b00          entbutler entropy
0       30 3   1       200   ffffaf0194f906c0      vioif0_txrx/1 vioif0_txrx
0       29 3   0       200   ffffaf0194f90280      vioif0_txrx/0 vioif0_txrx
0       27 3   0       200   ffffaf0192b32680           scsibus0 sccomp
0       26 3   0       200   ffffaf0192b32240               pms0 pmsreset
0       25 3   1       200   ffffaf0192a7ca80            xcall/1 xcall
0       24 1   1       200   ffffaf0192a7c640          softser/1
0       23 1   1       200   ffffaf0192a7c200          softclk/1
0       22 1   1       200   ffffaf0192a4fa40          softbio/1
0       21 1   1       200   ffffaf0192a4f600          softnet/1
0       20 1   1       201   ffffaf0192a4f1c0             idle/1
0       19 3   0       200   ffffaf02a2991a00           lnxpwrwq lnxpwrwq
0       18 3   0       200   ffffaf02a29915c0           lnxlngwq lnxlngwq
0       17 3   0       200   ffffaf02a2991180           lnxsyswq lnxsyswq
0       16 3   0       200   ffffaf02a299c9c0           lnxrcugc lnxrcugc
0       15 3   0       200   ffffaf02a299c580             sysmon smtaskq
0       14 3   0       200   ffffaf02a299c140         pmfsuspend pmfsuspend
0       13 3   0       200   ffffaf02a29bb980           pmfevent pmfevent
0       12 3   0       200   ffffaf02a29bb540         sopendfree sopendfr
0       11 3   0       200   ffffaf02a29bb100            iflnkst iflnkst
0       10 3   0       200   ffffaf02a39da940           nfssilly nfssilly
0        9 3   0       200   ffffaf02a39da500             vdrain vdrain
0        8 3   0       200   ffffaf02a39da0c0          modunload mod_unld
0        7 3   0       200   ffffaf02a3a13900            xcall/0 xcall
0        6 1   0       200   ffffaf02a3a134c0          softser/0
0        5 1   0       200   ffffaf02a3a13080          softclk/0
0        4 1   0       200   ffffaf02a3a3d8c0          softbio/0
0        3 1   0       200   ffffaf02a3a3d480          softnet/0
0        2 1   0       201   ffffaf02a3a3d040             idle/0
0        0 2   1       240   ffffffff85eef700            swapper
[Locks tracked through LWPs]

****** LWP 2738.2738 (syz-executor.5) @ 0xffffaf01ae43c540, l_stat=2

*** Locks held:

* Lock 0 (initialized at amap_alloc1)
lock address : 0xffffaf019ff178c0 type     :     sleep/adaptive
initialized  : 0xffffffff830d37dc
shared holds :                  0 exclusive:                  1
shares wanted:                  0 exclusive:                  0
relevant cpu :                  1 last held:                  1
relevant lwp : 0xffffaf01ae43c540 last held: 0xffffaf01ae43c540
last locked* : 0xffffffff830f6eec unlocked : 0xffffffff830d549b
owner/count  : 0xffffaf01ae43c540 flags    : 0x0000000000000004
Turnstile: no active turnstile for this lock.

* Lock 1 (initialized at pmap_ctor)
lock address : 0xffffaf01ade73780 type     :     sleep/adaptive
initialized  : 0xffffffff80f835b3
shared holds :                  0 exclusive:                  1
shares wanted:                  0 exclusive:                  0
relevant cpu :                  1 last held:                  1
relevant lwp : 0xffffaf01ae43c540 last held: 0xffffaf01ae43c540
last locked* : 0xffffffff80f85c67 unlocked : 0xffffffff80f8635c
owner field  : 0xffffaf01ae43c540 wait/spin:                0/0
Turnstile: no active turnstile for this lock.

*** Locks wanted:

* Lock 0 (initialized at pmap_ctor)
lock address : 0xffffaf01ade73788 type     :     sleep/adaptive
initialized  : 0xffffffff80f835e2
shared holds :                  0 exclusive:                  0
shares wanted:                  0 exclusive:                  1
relevant cpu :                  1 last held:                  1
relevant lwp : 0xffffaf01ae43c540 last held: 000000000000000000
last locked  : 0xffffffff80f7081b unlocked*: 0xffffffff80f70c8a
owner/count  : 000000000000000000 flags    : 000000000000000000
Turnstile: no active turnstile for this lock.

****** LWP 1059.1059 (syz-executor.1) @ 0xffffaf01ae371480, l_stat=2

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at uvm_map_setup)
lock address : 0xffffaf01b00c1070 type     :     sleep/adaptive
initialized  : 0xffffffff8311a0cc
shared holds :                  0 exclusive:                  0
shares wanted:                  1 exclusive:                  0
relevant cpu :                  1 last held:                  1
relevant lwp : 0xffffaf01ae371480 last held: 000000000000000000
last locked  : 0xffffffff8310c6ad unlocked*: 0xffffffff8311e8e2
owner/count  : 000000000000000000 flags    : 000000000000000000
Turnstile: no active turnstile for this lock.

****** LWP 912.3120 (syz-executor.2) @ 0xffffaf01ae021680, l_stat=7

*** Locks held:

* Lock 0 (initialized at procinit)
lock address : 0xffffffff862edc00 type     :     sleep/adaptive
initialized  : 0xffffffff83236964
shared holds :                  0 exclusive:                  1
shares wanted:                  0 exclusive:                  0
relevant cpu :                  0 last held:                  0
relevant lwp : 0xffffaf01ae021680 last held: 0xffffaf01ae021680
last locked* : 0xffffffff833f1145 unlocked : 0xffffffff831e72c0
owner field  : 0xffffaf01ae021680 wait/spin:                1/0
Turnstile:
=> 0 waiting readers:
=> 1 waiting writers: 0xffffaf01a013f5c0

*** Locks wanted: none

****** LWP 995.995 (syz-executor.5) @ 0xffffaf01a346a1c0, l_stat=7

*** Locks held:

* Lock 0 (initialized at filedesc_ctor)
lock address : 0xffffaf019ef66480 type     :     sleep/adaptive
initialized  : 0xffffffff831a56f4
shared holds :                  0 exclusive:                  1
shares wanted:                  0 exclusive:                  0
relevant cpu :                  1 last held:                  1
relevant lwp : 0xffffaf01a346a1c0 last held: 0xffffaf01a346a1c0
last locked* : 0xffffffff831ac32b unlocked : 0xffffffff831b4ca0
owner field  : 000000000000000000 wait/spin:                0/0
Turnstile: no active turnstile for this lock.

*** Locks wanted: none

****** LWP 591.591 (dhcpcd) @ 0xffffaf019ed5d780, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at module_hook_init)
lock address : 0xffffffff862edb00 type     :     sleep/adaptive
initialized  : 0xffffffff8321ec70
shared holds :                  0 exclusive:                  0
shares wanted:                  0 exclusive:                  0
relevant cpu :                  1 last held:                  0
relevant lwp : 0xffffaf019ed5d780 last held: 000000000000000000
last locked  : 000000000000000000 unlocked*: 000000000000000000
owner field  : 000000000000000000 wait/spin:                0/0
Turnstile: no active turnstile for this lock.

****** LWP 590.590 (dhcpcd) @ 0xffffaf019f6f04c0, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at module_hook_init)
lock address : 0xffffffff862edb00 type     :     sleep/adaptive
initialized  : 0xffffffff8321ec70
shared holds :                  0 exclusive:                  0
shares wanted:                  0 exclusive:                  0
relevant cpu :                  1 last held:                  0
relevant lwp : 0xffffaf019f6f04c0 last held: 000000000000000000
last locked  : 000000000000000000 unlocked*: 000000000000000000
owner field  : 000000000000000000 wait/spin:                0/0
Turnstile: no active turnstile for this lock.

****** LWP 346.346 (dhcpcd) @ 0xffffaf019dd3bac0, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at module_hook_init)
lock address : 0xffffffff862edb00 type     :     sleep/adaptive
initialized  : 0xffffffff8321ec70
shared holds :                  0 exclusive:                  0
shares wanted:                  0 exclusive:                  0
relevant cpu :                  1 last held:                  0
relevant lwp : 0xffffaf019dd3bac0 last held: 000000000000000000
last locked  : 000000000000000000 unlocked*: 000000000000000000
owner field  : 000000000000000000 wait/spin:                0/0
Turnstile: no active turnstile for this lock.

****** LWP 345.345 (dhcpcd) @ 0xffffaf019e17e700, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at module_hook_init)
lock address : 0xffffffff862edb00 type     :     sleep/adaptive
initialized  : 0xffffffff8321ec70
shared holds :                  0 exclusive:                  0
shares wanted:                  0 exclusive:                  0
relevant cpu :                  0 last held:                  0
relevant lwp : 0xffffaf019e17e700 last held: 000000000000000000
last locked  : 000000000000000000 unlocked*: 000000000000000000
owner field  : 000000000000000000 wait/spin:                0/0
Turnstile: no active turnstile for this lock.

****** LWP 0.23 (softclk/1) @ 0xffffaf0192a7c200, l_stat=1

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at module_hook_init)
lock address : 0xffffffff862edb00 type     :     sleep/adaptive
initialized  : 0xffffffff8321ec70
shared holds :                  0 exclusive:                  0
shares wanted:                  0 exclusive:                  0
relevant cpu :                  1 last held:                  0
relevant lwp : 0xffffaf0192a7c200 last held: 000000000000000000
last locked  : 000000000000000000 unlocked*: 000000000000000000
owner field  : 000000000000000000 wait/spin:                0/0
Turnstile: no active turnstile for this lock.

****** LWP 0.11 (iflnkst) @ 0xffffaf02a29bb100, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at module_hook_init)
lock address : 0xffffffff862edb00 type     :     sleep/adaptive
initialized  : 0xffffffff8321ec70
shared holds :                  0 exclusive:                  0
shares wanted:                  0 exclusive:                  0
relevant cpu :                  0 last held:                  0
relevant lwp : 0xffffaf02a29bb100 last held: 000000000000000000
last locked  : 000000000000000000 unlocked*: 000000000000000000
owner field  : 000000000000000000 wait/spin:                0/0
Turnstile: no active turnstile for this lock.

[Locks tracked through CPUs]

******* Locks held on cpu0:

* Lock 0 (initialized at main)
lock address : 0xffffffff862eda00 type     :               spin
initialized  : 0xffffffff839fa7ed
shared holds :                  0 exclusive:                  1
shares wanted:                  0 exclusive:                  0
relevant cpu :                  0 last held:                  0
relevant lwp : 0xffffaf01ae021680 last held: 0xffffaf01ae021680
last locked* : 0xffffffff83300e19 unlocked : 0xffffffff8264fc53
curcpu holds :                  2 wanted by: 000000000000000000

              PAGE FLAG   PQ            UOBJECT              UANON
0xffff8d0000007180 0045 00000000                0x0                0x0
0xffff8d0000007200 0045 00000000                0x0                0x0
0xffff8d0000007280 0045 00000000                0x0                0x0
0xffff8d0000007300 0045 00000000                0x0                0x0
0xffff8d0000007380 0045 00000000                0x0                0x0
0xffff8d0000007400 0045 00000000                0x0                0x0
0xffff8d0000007480 0045 00000000                0x0                0x0
0xffff8d0000007500 0045 00000000                0x0                0x0
0xffff8d0000007580 0041 00000000                0x0                0x0
0xffff8d0000007600 0041 00000000                0x0                0x0
0xffff8d0000007680 0041 00000000                0x0                0x0
0xffff8d0000007700 0041 00000000                0x0                0x0
0xffff8d0000007780 0045 00000000                0x0                0x0
0xffff8d0000007800 0045 00000000                0x0                0x0
0xffff8d0000007880 0045 00000000                0x0                0x0
0xffff8d0000007900 0041 00000000                0x0                0x0
0xffff8d0000007980 0041 00000000                0x0                0x0
0xffff8d0000007a00 0041 00000000                0x0                0x0
0xffff8d0000007a80 0041 00000000                0x0                0x0
0xffff8d0000007b00 0041 00000000                0x0                0x0
0xffff8d0000007b80 0041 00000000                0x0                0x0
0xffff8d0000007c00 0041 00000000                0x0                0x0
0xffff8d0000007c80 0041 00000000                0x0                0x0
0xffff8d0000007d00 0041 00000000                0x0                0x0
0xffff8d0000007d80 0041 00000000                0x0                0x0
0xffff8d0000007e00 0041 00000000                0x0                0x0
0xffff8d0000007e80 0041 00000000                0x0                0x0
0xffff8d0000007f00 0041 00000000                0x0                0x0
0xffff8d0000007f80 0041 00000000                0x0                0x0
0xffff8d0000008000 0041 00000000                0x0                0x0
0xffff8d0000008080 0041 00000000                0x0                0x0
0xffff8d0000008100 0041 00000000                0x0                0x0
0xffff8d0000008180 0041 00000000                0x0                0x0
0xffff8d0000008200 0041 00000000                0x0                0x0
0xffff8d0000008280 0045 00000000                0x0                0x0
0xffff8d0000008300 0041 00000000                0x0                0x0
0xffff8d0000008380 0041 00000000                0x0                0x0
0xffff8d0000008400 0041 00000000                0x0                0x0
0xffff8d0000008480 0041 00000000                0x0                0x0
0xffff8d0000008500 0041 00000000                0x0                0x0
0xffff8d0000008580 0041 00000000                0x0                0x0
0xffff8d0000008600 0041 00000000                0x0                0x0
0xffff8d0000008680 0041 00000000                0x0                0x0
0xffff8d0000008700 0041 00000000                0x0                0x0
0xffff8d0000008780 0041 00000000                0x0                0x0
0xffff8d0000008800 0041 00000000                0x0                0x0
0xffff8d0000008880 0041 00000000                0x0                0x0
0xffff8d0000008900 0041 00000000                0x0                0x0
0xffff8d0000008980 0041 00000000                0x0                0x0
0xffff8d0000008a00 0041 00000000                0x0                0x0
0xffff8d0000008a80 0045 00000000                0x0                0x0
0xffff8d0000008b00 0045 00000000                0x0                0x0
0xffff8d0000008b80 0041 00000000                0x0                0x0
0xffff8d0000008c00 0041 00000000                0x0                0x0
0xffff8d0000008c80 0041 00000000                0x0                0x0
0xffff8d0000008d00 0041 00000000                0x0                0x0
0xffff8d0000008d80 0041 00000000                0x0                0x0
0xffff8d0000008e00 0041 00000000                0x0                0x0
0xffff8d0000008e80 0041 00000000                0x0                0x0
0xffff8d0000008f00 0041 00000000                0x0                0x0
0xffff8d0000008f80 0041 00000000                0x0                0x0
0xffff8d0000009000 0041 00000000                0x0                0x0
0xffff8d0000009080 0041 00000000                0x0                0x0
0xffff8d0000009100 0041 00000000                0x0                0x0
0xffff8d0000009180 0041 00000000                0x0                0x0
0xffff8d0000009200 0041 00000000                0x0                0x0
0xffff8d0000009280 0041 00000000                0x0                0x0
0xffff8d0000009300 0041 00000000                0x0                0x0
0xffff8d0000009380 0041 00000000                0x0                0x0
0xffff8d0000009400 0041 00000000                0x0                0x0
0xffff8d0000009480 0041 00000000                0x0                0x0
0xffff8d0000009500 0041 00000000                0x0                0x0
0xffff8d0000009580 0045 00000000                0x0                0x0
0xffff8d0000009600 0041 00000000                0x0                0x0
0xffff8d0000009680 0041 00000000                0x0                0x0
0xffff8d0000009700 0041 00000000                0x0                0x0
0xffff8d0000009780 0041 00000000                0x0                0x0
0xffff8d0000009800 0041 00000000                0x0                0x0
0xffff8d0000009880 0041 00000000                0x0                0x0
0xffff8d0000009900 0041 00000000                0x0                0x0
0xffff8d0000009980 0041 00000000                0x0                0x0
0xffff8d0000009a00 0041 00000000                0x0                0x0
0xffff8d0000009a80 0041 00000000                0x0                0x0
0xffff8d0000009b00 0041 00000000                0x0                0x0
0xffff8d0000009b80 0041 00000000                0x0                0x0
0xffff8d0000009c00 0041 00000000                0x0                0x0
0xffff8d0000009c80 0041 00000000                0x0                0x0
0xffff8d0000009d00 0041 00000000                0x0                0x0
0xffff8d0000009d80 0041 00000000                0x0                0x0
0xffff8d0000009e00 0041 00000000                0x0                0x0
0xffff8d0000009e80 0041 00000000                0x0                0x0
0xffff8d0000009f00 0041 00000000                0x0                0x0
0xffff8d0000009f80 0041 00000000                0x0                0x0
0xffff8d000000a000 0041 00000000                0x0                0x0
0xffff8d000000a080 0041 00000000                0x0                0x0
0xffff8d000000a100 0045 00000000                0x0                0x0
0xffff8d000000a180 0041 00000000                0x0                0x0
0xffff8d000000a200 0041 00000000                0x0                0x0
0xffff8d000000a280 0041 00000000                0x0                0x0
0xffff8d000000a300 0041 00000000                0x0                0x0
0xffff8d000000a380 0041 00000000                0x0                0x0
0xffff8d000000a400 0041 00000000                0x0                0x0
0xffff8d000000a480 0041 00000000                0x0                0x0
0xffff8d000000a500 0041 00000000                0x0                0x0
0xffff8d000000a580 0041 00000000                0x0                0x0
0xffff8d000000a600 0041 00000000                0x0                0x0
0xffff8d000000a680 0041 00000000                0x0                0x0
0xffff8d000000a700 0041 00000000                0x0                0x0
0xffff8d000000a780 0041 00000000                0x0                0x0
0xffff8d000000a800 0041 00000000                0x0                0x0
0xffff8d000000a880 0041 00000000                0x0                0x0
0xffff8d000000a900 0041 00000000                0x0                0x0
0xffff8d000000a980 0041 00000000                0x0                0x0
0xffff8d000000aa00 0045 00000000                0x0                0x0
0xffff8d000000aa80 0041 00000000                0x0                0x0
0xffff8d000000ab00 0041 00000000                0x0                0x0
0xffff8d000000ab80 0041 00000000                0x0                0x0
0xffff8d000000ac00 0041 00000000                0x0                0x0
0xffff8d000000ac80 0041 00000000                0x0                0x0
0xffff8d000000ad00 0041 00000000                0x0                0x0
0xffff8d000000ad80 0041 00000000                0x0                0x0
0xffff8d000000ae00 0045 00000000                0x0                0x0
0xffff8d000000ae80 0041 00000000                0x0                0x0
0xffff8d000000af00 0041 00000000                0x0                0x0
0xffff8d000000af80 0041 00000000                0x0                0x0
0xffff8d000000b000 0041 00000000                0x0                0x0
0xffff8d000000b080 0041 00000000                0x0                0x0
0xffff8d000000b100 0041 00000000                0x0                0x0
0xffff8d000000b180 0045 00000000                0x0                0x0
0xffff8d000000b200 0045 00000000                0x0                0x0
0xffff8d000000b280 0045 00000000                0x0                0x0
0xffff8d000000b300 0041 00000000                0x0                0x0
0xffff8d000000b380 0041 00000000                0x0                0x0
0xffff8d000000b400 0041 00000000                0x0                0x0
0xffff8d000000b480 0041 00000000                0x0                0x0
0xffff8d000000b500 0041 00000000                0x0                0x0
0xffff8d000000b580 0045 00000000                0x0                0x0
0xffff8d000000b600 0045 00000000                0x0                0x0
0xffff8d000000b680 0045 00000000                0x0                0x0
0xffff8d000000b700 0045 00000000                0x0                0x0
0xffff8d000000b780 0045 00000000                0x0                0x0
0xffff8d000000b800 0045 00000000                0x0                0x0
0xffff8d000000b880 0041 00000000                0x0                0x0
0xffff8d000000b900 0045 00000000                0x0                0x0
0xffff8d000000b980 0045 00000000                0x0                0x0
0xffff8d000000ba00 0041 00000000                0x0                0x0
0xffff8d000000ba80 0045 00000000                0x0                0x0
0xffff8d000000bb00 0045 00000000                0x0                0x0
0xffff8d000000bb80 0045 00000000                0x0                0x0
0xffff8d000000bc00 0045 00000000                0x0                0x0
0xffff8d000000bc80 0045 00000000                0x0                0x0
0xffff8d000000bd00 0045 00000000                0x0                0x0
0xffff8d000000bd80 0045 00000000                0x0                0x0
0xffff8d000000be00 0041 00000000                0x0                0x0
0xffff8d000000be80 0045 00000000                0x0                0x0
0xffff8d000000bf00 0045 00000000                0x0                0x0
0xffff8d000000bf80 0045 00000000                0x0                0x0
0xffff8d000000c000 0045 00000000                0x0                0x0
0xffff8d000000c080 0045 00000000                0x0                0x0
0xffff8d000000c100 0045 00000000                0x0                0x0
0xffff8d000000c180 0045 00000000                0x0                0x0
0xffff8d000000c200 0041 00000000                0x0                0x0
0xffff8d000000c280 0041 00000000                0x0                0x0
0xffff8d000000c300 0045 00000000                0x0                0x0
0xffff8d000000c380 0045 00000000                0x0                0x0
0xffff8d000000c400 0045 00000000                0x0                0x0
0xffff8d000000c480 0045 00000000                0x0                0x0
0xffff8d000000c500 0045 00000000                0x0                0x0
0xffff8d000000c580 0041 00000000                0x0                0x0
0xffff8d000000c600 0041 00000000                0x0                0x0
0xffff8d000000c680 0041 00000000                0x0                0x0
0xffff8d000000c700 0041 00000000                0x0                0x0
0xffff8d000000c780 0041 00000000                0x0                0x0
0xffff8d000000c800 0045 00000000                0x0                0x0
0xffff8d000000c880 0045 00000000                0x0                0x0
0xffff8d000000c900 0045 00000000                0x0                0x0
0xffff8d000000c980 0041 00000000                0x0                0x0
0xffff8d000000ca00 0041 00000000                0x0                0x0
0xffff8d000000ca80 0041 00000000                0x0                0x0
0xffff8d000000cb00 0041 00000000                0x0                0x0
0xffff8d000000cb80 0041 00000000                0x0                0x0
0xffff8d000000cc00 0041 00000000                0x0                0x0
0xffff8d000000cc80 0045 00000000                0x0                0x0
0xffff8d000000cd00 0041 00000000                0x0                0x0
0xffff8d000000cd80 0041 00000000                0x0                0x0
0xffff8d000000ce00 0045 00000000                0x0                0x0
0xffff8d000000ce80 0041 00000000                0x0                0x0
0xffff8d000000cf00 0041 00000000                0x0                0x0
0xffff8d000000cf80 0041 00000000                0x0                0x0
0xffff8d000000d000 0041 00000000                0x0                0x0
0xffff8d000000d080 0041 00000000                0x0                0x0
0xffff8d000000d100 0041 00000000                0x0                0x0
0xffff8d000000d180 0041 00000000                0x0                0x0
0xffff8d000000d200 0045 00000000                0x0                0x0
0xffff8d000000d280 0041 00000000                0x0                0x0
0xffff8d000000d300 0045 00000000                0x0                0x0
0xffff8d000000d380 0045 00000000                0x0                0x0
0xffff8d000000d400 0041 00000000                0x0                0x0
0xffff8d000000d480 0041 00000000                0x0                0x0
0xffff8d000000d500 0041 00000000                0x0                0x0
0xffff8d000000d580 0041 00000000                0x0                0x0
0xffff8d000000d600 0041 00000000                0x0                0x0
0xffff8d000000d680 0045 00000000                0x0                0x0
0xffff8d000000d700 0041 00000000                0x0                0x0
0xffff8d000000d780 0041 00000000                0x0                0x0
0xffff8d000000d800 0041 00000000                0x0                0x0
0xffff8d000000d880 0041 00000000                0x0                0x0
0xffff8d000000d900 0041 00000000                0x0                0x0
0xffff8d000000d980 0045 00000000                0x0                0x0
0xffff8d000000da00 0041 00000000                0x0                0x0
0xffff8d000000da80 0041 00000000                0x0                0x0
0xffff8d000000db00 0041 00000000                0x0                0x0
0xffff8d000000db80 0045 00000000                0x0                0x0
0xffff8d000000dc00 0045 00000000                0x0                0x0
0xffff8d000000dc80 0041 00000000                0x0                0x0
0xffff8d000000dd00 0045 00000000                0x0                0x0
0xffff8d000000dd80 0045 00000000                0x0                0x0
0xffff8d000000de00 0041 00000000                0x0                0x0
0xffff8d000000de80 0041 00000000                0x0                0x0
0xffff8d000000df00 0045 00000000                0x0                0x0
0xffff8d000000df80 0045 00000000                0x0                0x0
0xffff8d000000e000 0045 00000000                0x0                0x0
0xffff8d000000e080 0045 00000000                0x0                0x0
0xffff8d000000e100 0045 00000000                0x0                0x0
0xffff8d000000e180 0041 00000000                0x0                0x0
0xffff8d000000e200 0041 00000000                0x0                0x0
0xffff8d000000e280 0041 00000000                0x0                0x0
0xffff8d000000e300 0041 00000000                0x0                0x0
0xffff8d000000e380 0045 00000000                0x0                0x0
0xffff8d000000e400 0045 00000000                0x0                0x0
0xffff8d000000e480 0045 00000000                0x0                0x0
0xffff8d000000e500 0041 00000000                0x0                0x0
0xffff8d000000e580 0041 00000000                0x0                0x0
0xffff8d000000e600 0041 00000000                0x0                0x0
0xffff8d000000e680 0041 00000000                0x0                0x0
0xffff8d000000e700 0045 00000000                0x0                0x0
0xffff8d000000e780 0041 00000000                0x0                0x0
0xffff8d000000e800 0041 00000000                0x0                0x0
0xffff8d000000e880 0045 00000000                0x0                0x0
0xffff8d000000e900 0045 00000000                0x0                0x0
0xffff8d000000e980 0041 00000000                0x0                0x0
0xffff8d000000ea00 0041 00000000                0x0                0x0
0xffff8d000000ea80 0041 00000000                0x0                0x0
0xffff8d000000eb00 0041 00000000                0x0                0x0
0xffff8d000000eb80 0041 00000000                0x0                0x0
0xffff8d000000ec00 0045 00000000                0x0                0x0
0xffff8d000000ec80 0041 00000000                0x0                0x0
0xffff8d000000ed00 0041 00000000                0x0                0x0
0xffff8d000000ed80 0041 00000000                0x0                0x0
0xffff8d000000ee00 0041 00000000                0x0                0x0
0xffff8d000000ee80 0041 00000000                0x0                0x0
0xffff8d000000ef00 0041 00000000                0x0                0x0
0xffff8d000000ef80 0041 00000000                0x0                0x0
0xffff8d000000f000 0041 00000000                0x0                0x0
0xffff8d000000f080 0045 00000000                0x0                0x0
0xffff8d000000f100 0041 00000000                0x0                0x0
0xffff8d000000f180 0041 00000000                0x0                0x0
0xffff8d000000f200 0041 00000000                0x0                0x0
0xffff8d000000f280 0041 00000000                0x0                0x0
0xffff8d000000f300 0041 00000000                0x0                0x0
0xffff8d000000f380 0045 00000000                0x0                0x0
0xffff8d000000f400 0041 00000000                0x0                0x0
0xffff8d000000f480 0041 00000000                0x0                0x0
0xffff8d000000f500 0041 00000000                0x0                0x0
0xffff8d000000f580 0041 00000000                0x0                0x0
0xffff8d000000f600 0045 00000000                0x0                0x0
0xffff8d000000f680 0045 00000000                0x0                0x0
0xffff8d000000f700 0041 00000000                0x0                0x0
0xffff8d000000f780 0041 00000000                0x0                0x0
0xffff8d000000f800 0041 00000000                0x0                0x0
0xffff8d000000f880 0041 00000000                0x0                0x0
0xffff8d000000f900 0041 00000000                0x0                0x0
0xffff8d000000f980 0041 00000000                0x0                0x0
0xffff8d000000fa00 0041 00000000                0x0                0x0
0xffff8d000000fa80 0041 00000000                0x0                0x0
0xffff8d000000fb00 0041 00000000                0x0                0x0
0xffff8d000000fb80 0041 00000000                0x0                0x0
0xffff8d000000fc00 0045 00000000                0x0                0x0
0xffff8d000000fc80 0041 00000000                0x0                0x0
0xffff8d000000fd00 0041 00000000                0x0                0x0
0xffff8d000000fd80 0041 00000000                0x0                0x0
0xffff8d000000fe00 0041 00000000                0x0                0x0
0xffff8d000000fe80 0041 00000000                0x0                0x0
0xffff8d000000ff00 0041 00000000                0x0                0x0
0xffff8d000000ff80 0041 00000000                0x0                0x0
0xffff8d0000010000 0041 00000000                0x0                0x0
0xffff8d0000010080 0041 00000000                0x0                0x0
0xffff8d0000010100 0041 00000000                0x0                0x0
0xffff8d0000010180 0045 00000000                0x0                0x0
0xffff8d0000010200 0041 00000000                0x0                0x0
0xffff8d0000010280 0041 00000000                0x0                0x0
0xffff8d0000010300 0045 00000000                0x0                0x0
0xffff8d0000010380 0041 00000000                0x0                0x0
0xffff8d0000010400 0041 00000000                0x0                0x0
0xffff8d0000010480 0041 00000000                0x0                0x0
0xffff8d0000010500 0041 00000000                0x0                0x0
0xffff8d0000010580 0041 00000000                0x0                0x0
0xffff8d0000010600 0041 00000000                0x0                0x0
0xffff8d0000010680 0041 00000000                0x0                0x0
0xffff8d0000010700 0041 00000000                0x0                0x0
0xffff8d0000010780 0041 00000000                0x0                0x0
0xffff8d0000010800 0041 00000000                0x0                0x0
0xffff8d0000010880 0041 00000000                0x0                0x0
0xffff8d0000010900 0045 00000000                0x0                0x0
0xffff8d0000010980 0041 00000000                0x0                0x0
0xffff8d0000010a00 0041 00000000                0x0                0x0
0xffff8d0000010a80 0041 00000000                0x0                0x0
0xffff8d0000010b00 0041 00000000                0x0                0x0
0xffff8d0000010b80 0045 00000000                0x0                0x0
0xffff8d0000010c00 0041 00000000                0x0                0x0
0xffff8d0000010c80 0045 00000000                0x0                0x0
0xffff8d0000010d00 0041 00000000                0x0                0x0
0xffff8d0000010d80 0041 00000000                0x0                0x0
0xffff8d0000010e00 0041 00000000                0x0                0x0
0xffff8d0000010e80 0041 00000000                0x0                0x0
0xffff8d0000010f00 0041 00000000                0x0                0x0
0xffff8d0000010f80 0041 00000000                0x0                0x0
0xffff8d0000011000 0041 00000000                0x0                0x0
0xffff8d0000011080 0041 00000000                0x0                0x0
0xffff8d0000011100 0041 00000000                0x0                0x0
0xffff8d0000011180 0041 00000000                0x0                0x0
0xffff8d0000011200 0041 00000000                0x0                0x0
0xffff8d0000011280 0041 00000000                0x0                0x0
0xffff8d0000011300 0041 00000000                0x0                0x0
0xffff8d0000011380 0041 00000000                0x0                0x0
0xffff8d0000011400 0045 00000000                0x0                0x0
0xffff8d0000011480 0001 00000000                0x0                0x0
0xffff8d0000011500 0001 00000000                0x0                0x0
0xffff8d0000011580 0001 00000000                0x0                0x0
0xffff8d0000011600 0001 00000000                0x0                0x0
0xffff8d0000011680 0001 00000000                0x0                0x0
0xffff8d0000011700 0001 00000000                0x0                0x0
0xffff8d0000011780 0001 00000000                0x0                0x0
0xffff8d0000011800 0001 00000000                0x0                0x0
0xffff8d0000011880 0001 00000000                0x0                0x0
0xffff8d0000011900 0001 00000000                0x0                0x0
0xffff8d0000011980 0001 00000000                0x0                0x0
0xffff8d0000011a00 0001 00000000                0x0                0x0
0xffff8d0000011a80 0001 00000000                0x0                0x0
0xffff8d0000011b00 0001 00000000                0x0                0x0
0xffff8d0000011b80 0001 00000000                0x0                0x0
0xffff8d0000011c00 0001 00000000                0x0                0x0
0xffff8d0000011c80 0001 00000000                0x0                0x0
0xffff8d0000011d00 0001 00000000                0x0                0x0
0xffff8d0000011d80 0001 00000000                0x0                0x0
0xffff8d0000011e00 0001 00000000                0x0                0x0
0xffff8d0000011e80 0001 00000000                0x0                0x0
0xffff8d0000011f00 0001 00000000                0x0                0x0
0xffff8d0000011f80 0001 00000000                0x0                0x0
0xffff8d0000012000 0001 00000000                0x0                0x0
0xffff8d0000012080 0001 00000000                0x0                0x0
0xffff8d0000012100 0001 00000000                0x0                0x0
0xffff8d0000012180 0001 00000000                0x0                0x0
0xffff8d0000012200 0001 00000000                0x0                0x0
0xffff8d0000012280 0001 00000000                0x0                0x0
0xffff8d0000012300 0001 00000000                0x0                0x0
0xffff8d0000012380 0001 00000000                0x0                0x0
0xffff8d0000012400 0001 00000000                0x0                0x0
0xffff8d0000012480 0001 00000000                0x0                0x0
0xffff8d0000012500 0001 00000000                0x0                0x0
0xffff8d0000012580 0001 00000000                0x0                0x0
0xffff8d0000012600 0001 00000000                0x0                0x0
0xffff8d0000012680 0001 00000000                0x0                0x0
0xffff8d0000012700 0001 00000000                0x0                0x0
0xffff8d0000012780 0001 00000000                0x0                0x0
0xffff8d0000012800 0001 00000000                0x0                0x0
0xffff8d0000012880 0001 00000000                0x0                0x0
0xffff8d0000012900 0001 00000000                0x0                0x0
0xffff8d0000012980 0001 00000000                0x0                0x0
0xffff8d0000012a00 0001 00000000                0x0                0x0
0xffff8d0000012a80 0001 00000000                0x0                0x0
0xffff8d0000012b00 0001 00000000                0x0                0x0
0xffff8d0000012b80 0001 00000000                0x0                0x0
0xffff8d0000012c00 0001 00000000                0x0                0x0
0xffff8d0000012c80 0001 00000000                0x0                0x0
0xffff8d0000012d00 0001 00000000                0x0                0x0
0xffff8d0000012d80 0001 00000000                0x0                0x0
0xffff8d0000012e00 0001 00000000                0x0                0x0
0xffff8d0000012e80 0001 00000000                0x0                0x0
0xffff8d0000012f00 0001 00000000                0x0                0x0
0xffff8d0000012f80 0041 00000000                0x0                0x0
0xffff8d0000013000 0041 00000000                0x0                0x0
0xffff8d0000013080 0041 00000000                0x0                0x0
0xffff8d0000013100 0041 00000000                0x0                0x0
0xffff8d0000013180 0041 00000000                0x0                0x0
0xffff8d0000013200 0041 00000000                0x0                0x0
0xffff8d0000013280 0041 00000000                0x0                0x0
0xffff8d0000013300 0041 00000000                0x0                0x0
0xffff8d0000013380 0041 00000000                0x0                0x0
0xffff8d0000013400 0041 00000000                0x0                0x0
0xffff8d0000013480 0041 00000000                0x0                0x0
0xffff8d0000013500 0041 00000000                0x0                0x0
0xffff8d0000013580 0041 00000000                0x0                0x0
0xffff8d0000013600 0041 00000000                0x0                0x0
0xffff8d0000013680 0041 00000000                0x0                0x0
0xffff8d0000013700 0041 00000000                0x0                0x0
0xffff8d0000013780 0041 00000000                0x0                0x0
0xffff8d0000013800 0041 00000000                0x0                0x0
0xffff8d0000013880 0041 00000000                0x0                0x0
0xffff8d0000013900 0041 00000000                0x0                0x0
0xffff8d0000013980 0041 00000000                0x0                0x0
0xffff8d0000013a00 0041 00000000                0x0                0x0
0xffff8d0000013a80 0041 00000000                0x0                0x0
0xffff8d0000013b00 0041 00000000                0x0                0x0
0xffff8d0000013b80 0041 00000000                0x0                0x0
0xffff8d0000013c00 0041 00000000                0x0                0x0
0xffff8d0000013c80 0041 00000000                0x0                0x0
0xffff8d0000013d00 0041 00000000                0x0                0x0
0xffff8d0000013d80 0041 00000000                0x0                0x0
0xffff8d0000013e00 0041 00000000                0x0                0x0
0xffff8d0000013e80 0041 00000000                0x0                0x0
0xffff8d0000013f00 0041 00000000                0x0                0x0
0xffff8d0000013f80 0041 00000000                0x0                0x0
0xffff8d0000014000 0041 00000000                0x0                0x0
0xffff8d0000014080 0041 00000000                0x0                0x0
0xffff8d0000014100 0041 00000000                0x0                0x0
0xffff8d0000014180 0041 00000000                0x0                0x0
0xffff8d0000014200 0041 00000000                0x0                0x0
0xffff8d0000014280 0041 00000000                0x0                0x0
0xffff8d0000014300 0041 00000000                0x0                0x0
0xffff8d0000014380 0041 00000000                0x0                0x0
0xffff8d0000014400 0041 00000000                0x0                0x0
0xffff8d0000014480 0001 00000000                0x0                0x0
0xffff8d0000014500 0001 00000000                0x0                0x0
0xffff8d0000014580 0001 00000000                0x0                0x0
0xffff8d0000014600 0001 00000000                0x0                0x0
0xffff8d0000014680 0001 00000000                0x0                0x0
0xffff8d0000014700 0001 00000000                0x0                0x0
0xffff8d0000014780 0001 00000000                0x0                0x0
0xffff8d0000014800 0001 00000000                0x0                0x0
0xffff8d0000014880 0001 00000000                0x0                0x0
0xffff8d0000014900 0001 00000000                0x0                0x0
0xffff8d0000014980 0001 00000000                0x0                0x0
0xffff8d0000014a00 0001 00000000                0x0                0x0
0xffff8d0000014a80 0001 00000000                0x0                0x0
0xffff8d0000014b00 0001 00000000                0x0                0x0
0xffff8d0000014b80 0001 00000000                0x0                0x0
0xffff8d0000014c00 0001 00000000                0x0                0x0
0xffff8d0000014c80 0001 00000000                0x0                0x0
0xffff8d0000014d00 0001 00000000                0x0                0x0
0xffff8d0000014d80 0001 00000000                0x0                0x0
0xffff8d0000014e00 0001 00000000                0x0                0x0
0xffff8d0000014e80 0001 00000000                0x0                0x0
0xffff8d0000014f00 0001 00000000                0x0                0x0
0xffff8d0000014f80 0001 00000000                0x0                0x0
0xffff8d0000015000 0001 00000000                0x0                0x0
0xffff8d0000015080 0001 00000000                0x0                0x0
0xffff8d0000015100 0001 00000000                0x0                0x0
0xffff8d0000015180 0001 00000000                0x0                0x0
0xffff8d0000015200 0001 00000000                0x0                0x0
0xffff8d0000015280 0001 00000000                0x0                0x0
0xffff8d0000015300 0001 00000000                0x0                0x0
0xffff8d0000015380 0001 00000000                0x0                0x0
0xffff8d0000015400 0001 00000000                0x0                0x0
0xffff8d0000015480 0001 00000000                0x0                0x0
0xffff8d0000015500 0001 00000000                0x0                0x0
0xffff8d0000015580 0001 00000000                0x0                0x0
0xffff8d0000015600 0001 00000000                0x0                0x0
0xffff8d0000015680 0001 00000000                0x0                0x0
0xffff8d0000015700 0001 00000000                0x0                0x0
0xffff8d0000015780 0001 00000000                0x0                0x0
0xffff8d0000015800 0001 00000000                0x0                0x0
0xffff8d0000015880 0001 00000000                0x0                0x0
0xffff8d0000015900 0001 00000000                0x0                0x0
0xffff8d0000015980 0001 00000000                0x0                0x0
0xffff8d0000015a00 0001 00000000                0x0                0x0
0xffff8d0000015a80 0001 00000000                0x0                0x0
0xffff8d0000015b00 0001 00000000                0x0                0x0
0xffff8d0000015b80 0001 00000000                0x0                0x0
0xffff8d0000015c00 0001 00000000                0x0                0x0
0xffff8d0000015c80 0001 00000000                0x0                0x0
0xffff8d0000015d00 0001 00000000                0x0                0x0
0xffff8d0000015d80 0001 00000000                0x0                0x0
0xffff8d0000015e00 0001 00000000                0x0                0x0
0xffff8d0000015e80 0001 00000000                0x0                0x0
0xffff8d0000015f00 0001 00000000                0x0                0x0
0xffff8d0000015f80 0041 00000000                0x0                0x0
0xffff8d0000016000 0041 00000000                0x0                0x0
0xffff8d0000016080 0041 00000000                0x0                0x0
0xffff8d0000016100 0041 00000000                0x0                0x0
0xffff8d0000016180 0041 00000000                0x0                0x0
0xffff8d0000016200 0041 00000000                0x0                0x0
0xffff8d0000016280 0041 00000000                0x0                0x0
0xffff8d0000016300 0041 00000000                0x0                0x0
0xffff8d0000016380 0041 00000000                0x0                0x0
0xffff8d0000016400 0041 00000000                0x0                0x0
0xffff8d0000016480 0041 00000000                0x0                0x0
0xffff8d0000016500 0041 00000000                0x0                0x0
0xffff8d0000016580 0041 00000000                0x0                0x0
0xffff8d0000016600 0041 00000000                0x0                0x0
0xffff8d0000016680 0041 00000000                0x0                0x0
0xffff8d0000016700 0041 00000000                0x0                0x0
0xffff8d0000016780 0041 00000000                0x0                0x0
0xffff8d0000016800 0041 00000000                0x0                0x0
0xffff8d0000016880 0041 00000000                0x0                0x0
0xffff8d0000016900 0041 00000000                0x0                0x0
0xffff8d0000016980 0041 00000000                0x0                0x0
0xffff8d0000016a00 0041 00000000                0x0                0x0
0xffff8d0000016a80 0041 00000000                0x0                0x0
0xffff8d0000016b00 0041 00000000                0x0                0x0
0xffff8d0000016b80 0041 00000000                0x0                0x0
0xffff8d0000016c00 0041 00000000                0x0                0x0
0xffff8d0000016c80 0041 00000000                0x0                0x0
0xffff8d0000016d00 0041 00000000                0x0                0x0
0xffff8d0000016d80 0041 00000000                0x0                0x0
0xffff8d0000016e00 0041 00000000                0x0                0x0
0xffff8d0000016e80 0041 00000000                0x0                0x0
0xffff8d0000016f00 0041 00000000                0x0                0x0
0xffff8d0000016f80 0041 00000000                0x0                0x0
0xffff8d0000017000 0041 00000000                0x0                0x0
0xffff8d0000017080 0041 00000000                0x0                0x0
0xffff8d0000017100 0041 00000000                0x0                0x0
0xffff8d0000017180 0041 00000000                0x0                0x0
0xffff8d0000017200 0041 00000000                0x0                0x0
0xffff8d0000017280 0041 00000000                0x0                0x0
0xffff8d0000017300 0041 00000000                0x0                0x0
0xffff8d0000017380 0041 00000000                0x0                0x0
0xffff8d0000017400 0041 00000000                0x0                0x0
0xffff8d0000017480 0041 00000000                0x0                0x0
0xffff8d0000017500 0001 00000000                0x0                0x0
0xffff8d0000017580 0001 00000000                0x0                0x0
0xffff8d0000017600 0001 00000000                0x0                0x0
0xffff8d0000017680 0001 00000000                0x0                0x0
0xffff8d0000017700 0001 00000000                0x0                0x0
0xffff8d0000017780 0001 00000000                0x0                0x0
0xffff8d0000017800 0001 00000000                0x0                0x0
0xffff8d0000017880 0001 00000000                0x0                0x0
0xffff8d0000017900 0001 00000000                0x0                0x0
0xffff8d0000017980 0001 00000000                0x0                0x0
0xffff8d0000017a00 0001 00000000                0x0                0x0
0xffff8d0000017a80 0001 00000000                0x0                0x0
0xffff8d0000017b00 0001 00000000                0x0                0x0
0xffff8d0000017b80 0001 00000000                0x0                0x0
0xffff8d0000017c00 0001 00000000                0x0                0x0
0xffff8d0000017c80 0001 00000000                0x0                0x0
0xffff8d0000017d00 0001 00000000                0x0                0x0
0xffff8d0000017d80 0001 00000000                0x0                0x0
0xffff8d0000017e00 0001 00000000                0x0                0x0
0xffff8d0000017e80 0001 00000000                0x0                0x0
0xffff8d0000017f00 0001 00000000                0x0                0x0
0xffff8d0000017f80 0001 00000000                0x0                0x0
0xffff8d0000018000 0001 00000000                0x0                0x0
0xffff8d0000018080 0001 00000000                0x0                0x0
0xffff8d0000018100 0001 00000000                0x0                0x0
0xffff8d0000018180 0001 00000000                0x0                0x0
0xffff8d0000018200 0001 00000000                0x0                0x0
0xffff8d0000018280 0001 00000000                0x0                0x0
0xffff8d0000018300 0001 00000000                0x0                0x0
0xffff8d0000018380 0001 00000000                0x0                0x0
0xffff8d0000018400 0001 00000000                0x0                0x0
0xffff8d0000018480 0001 00000000                0x0                0x0
0xffff8d0000018500 0001 00000000                0x0                0x0
0xffff8d0000018580 0001 00000000                0x0                0x0
0xffff8d0000018600 0001 00000000                0x0                0x0
0xffff8d0000018680 0001 00000000                0x0                0x0
0xffff8d0000018700 0001 00000000                0x0                0x0
0xffff8d0000018780 0001 00000000                0x0                0x0
0xffff8d0000018800 0001 00000000                0x0                0x0
0xffff8d0000018880 0001 00000000                0x0                0x0
0xffff8d0000018900 0001 00000000                0x0                0x0
0xffff8d0000018980 0001 00000000                0x0                0x0
0xffff8d0000018a00 0001 00000000                0x0                0x0
0xffff8d0000018a80 0001 00000000                0x0                0x0
0xffff8d0000018b00 0001 00000000                0x0                0x0
0xffff8d0000018b80 0001 00000000                0x0                0x0
0xffff8d0000018c00 0001 00000000                0x0                0x0
0xffff8d0000018c80 0001 00000000                0x0                0x0
0xffff8d0000018d00 0001 00000000                0x0                0x0
0xffff8d0000018d80 0001 00000000                0x0                0x0
0xffff8d0000018e00 0001 00000000                0x0                0x0
0xffff8d0000018e80 0001 00000000                0x0                0x0
0xffff8d0000018f00 0001 00000000                0x0                0x0
0xffff8d0000018f80 0001 00000000                0x0                0x0
0xffff8d0000019000 0041 00000000                0x0                0x0
0xffff8d0000019080 0041 00000000                0x0                0x0
0xffff8d0000019100 0041 00000000                0x0                0x0
0xffff8d0000019180 0041 00000000                0x0                0x0
0xffff8d0000019200 0041 00000000                0x0                0x0
0xffff8d0000019280 0041 00000000                0x0                0x0
0xffff8d0000019300 0041 00000000                0x0                0x0
0xffff8d0000019380 0041 00000000                0x0                0x0
0xffff8d0000019400 0041 00000000                0x0                0x0
0xffff8d0000019480 0041 00000000                0x0                0x0
0xffff8d0000019500 0041 00000000                0x0                0x0
0xffff8d0000019580 0041 00000000                0x0                0x0
0xffff8d0000019600 0045 00000000                0x0                0x0
0xffff8d0000019680 0045 00000000                0x0                0x0
0xffff8d0000019700 0041 00000000                0x0                0x0
0xffff8d0000019780 0041 00000000                0x0                0x0
0xffff8d0000019800 0041 00000000                0x0                0x0
0xffff8d0000019880 0041 00000000                0x0                0x0
0xffff8d0000019900 0041 00000000                0x0                0x0
0xffff8d0000019980 0041 00000000                0x0                0x0
0xffff8d0000019a00 0045 00000000                0x0                0x0
0xffff8d0000019a80 0045 00000000                0x0                0x0
0xffff8d0000019b00 0041 00000000                0x0                0x0
0xffff8d0000019b80 0041 00000000                0x0                0x0
0xffff8d0000019c00 0041 00000000                0x0                0x0
0xffff8d0000019c80 0041 00000000                0x0                0x0
0xffff8d0000019d00 0041 00000000                0x0                0x0
0xffff8d0000019d80 0041 00000000                0x0                0x0
0xffff8d0000019e00 0045 00000000                0x0                0x0
0xffff8d0000019e80 0045 00000000                0x0                0x0
0xffff8d0000019f00 0041 00000000                0x0                0x0
0xffff8d0000019f80 0041 00000000                0x0                0x0
0xffff8d000001a000 0041 00000000                0x0                0x0
0xffff8d000001a080 0041 00000000                0x0                0x0
0xffff8d000001a100 0041 00000000                0x0                0x0
0xffff8d000001a180 0045 00000000                0x0                0x0
0xffff8d000001a200 0045 00000000                0x0                0x0
0xffff8d000001a280 0045 00000000                0x0                0x0
0xffff8d000001a300 0045 00000000                0x0                0x0
0xffff8d000001a380 0045 00000000                0x0                0x0
0xffff8d000001a400 0041 00000000                0x0                0x0
0xffff8d000001a480 0041 00000000                0x0                0x0
0xffff8d000001a500 0041 00000000                0x0                0x0
0xffff8d000001a580 0001 00000000                0x0                0x0
0xffff8d000001a600 0001 00000000                0x0                0x0
0xffff8d000001a680 0001 00000000                0x0                0x0
0xffff8d000001a700 0001 00000000                0x0                0x0
0xffff8d000001a780 0001 00000000                0x0                0x0
0xffff8d000001a800 0001 00000000                0x0                0x0
0xffff8d000001a880 0001 00000000                0x0                0x0
0xffff8d000001a900 0001 00000000                0x0                0x0
0xffff8d000001a980 0001 00000000                0x0                0x0
0xffff8d000001aa00 0001 00000000                0x0                0x0
0xffff8d000001aa80 0001 00000000                0x0                0x0
0xffff8d000001ab00 0001 00000000                0x0                0x0
0xffff8d000001ab80 0001 00000000                0x0                0x0
0xffff8d000001ac00 0001 00000000                0x0                0x0
0xffff8d000001ac80 0001 00000000                0x0                0x0
0xffff8d000001ad00 0001 00000000                0x0                0x0
0xffff8d000001ad80 0001 00000000                0x0                0x0
0xffff8d000001ae00 0001 00000000                0x0                0x0
0xffff8d000001ae80 0001 00000000                0x0                0x0
0xffff8d000001af00 0001 00000000                0x0                0x0
0xffff8d000001af80 0001 00000000                0x0                0x0
0xffff8d000001b000 0001 00000000                0x0                0x0
0xffff8d000001b080 0001 00000000                0x0                0x0
0xffff8d000001b100 0001 00000000                0x0                0x0
0xffff8d000001b180 0001 00000000                0x0                0x0
0xffff8d000001b200 0001 00000000                0x0                0x0
0xffff8d000001b280 0001 00000000                0x0                0x0
0xffff8d000001b300 0001 00000000                0x0                0x0
0xffff8d000001b380 0001 00000000                0x0                0x0
0xffff8d000001b400 0001 00000000                0x0                0x0
0xffff8d000001b480 0001 00000000                0x0                0x0
0xffff8d000001b500 0001 00000000                0x0                0x0
0xffff8d000001b580 0001 00000000                0x0                0x0
0xffff8d000001b600 0001 00000000                0x0                0x0
0xffff8d000001b680 0001 00000000                0x0                0x0
0xffff8d000001b700 0001 00000000                0x0                0x0
0xffff8d000001b780 0001 00000000                0x0                0x0
0xffff8d000001b800 0001 00000000                0x0                0x0
0xffff8d000001b880 0001 00000000                0x0                0x0
0xffff8d000001b900 0001 00000000                0x0                0x0
0xffff8d000001b980 0001 00000000                0x0                0x0
0xffff8d000001ba00 0001 00000000                0x0                0x0
0xffff8d000001ba80 0001 00000000                0x0                0x0
0xffff8d000001bb00 0001 00000000                0x0                0x0
0xffff8d000001bb80 0001 00000000                0x0                0x0
0xffff8d000001bc00 0001 00000000                0x0                0x0
0xffff8d000001bc80 0001 00000000                0x0                0x0
0xffff8d000001bd00 0001 00000000                0x0                0x0
0xffff8d000001bd80 0001 00000000                0x0                0x0
0xffff8d000001be00 0001 00000000                0x0                0x0
0xffff8d000001be80 0001 00000000                0x0                0x0
0xffff8d000001bf00 0001 00000000                0x0                0x0
0xffff8d000001bf80 0001 00000000                0x0                0x0
0xffff8d000001c000 0001 00000000                0x0                0x0
0xffff8d000001c080 0001 00000000                0x0                0x0
0xffff8d000001c100 0001 00000000                0x0                0x0
0xffff8d000001c180 0001 00000000                0x0                0x0
0xffff8d000001c200 0001 00000000                0x0                0x0
0xffff8d000001c280 0001 00000000                0x0                0x0
0xffff8d000001c300 0001 00000000                0x0                0x0
0xffff8d000001c380 0001 00000000                0x0                0x0
0xffff8d000001c400 0001 00000000                0x0                0x0
0xffff8d000001c480 0001 00000000                0x0                0x0
0xffff8d000001c500 0001 00000000                0x0                0x0
0xffff8d000001c580 0001 00000000                0x0                0x0
0xffff8d000001c600 0001 00000000                0x0                0x0

Crashes (1):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2020/07/18 13:50 netbsd f1988592cbcb 9c812472 .config console log report ci2-netbsd-kubsan
* Struck through repros no longer work on HEAD.