NetBSD/amd64 (ci2-netbsd-kubsan-1.c.syzkaller.internal) (constty) Oct 6 18:48:10 ci2-netbsd-kubsan-1 getty[1058]: /dev/ttyE1: Device not configured login: Oct 6 18:48:10 ci2-netbsd-kubsan-1 getty[695]: /dev/ttyE2: Device not configured Oct 6 18:48:10 ci2-netbsd-kubsan-1 getty[1089]: /dev/ttyE3: Device not configured Warning: Permanently added '10.128.1.35' (ECDSA) to the list of known hosts. 2020/10/06 18:48:21 fuzzer started 2020/10/06 18:48:22 dialing manager at 10.128.0.105:45077 2020/10/06 18:48:22 syscalls: 306 2020/10/06 18:48:22 code coverage: enabled 2020/10/06 18:48:22 comparison tracing: enabled 2020/10/06 18:48:22 extra coverage: enabled 2020/10/06 18:48:22 setuid sandbox: support is not implemented in syzkaller 2020/10/06 18:48:22 namespace sandbox: support is not implemented in syzkaller 2020/10/06 18:48:22 Android sandbox: support is not implemented in syzkaller 2020/10/06 18:48:22 fault injection: enabled 2020/10/06 18:48:22 leak checking: support is not implemented in syzkaller 2020/10/06 18:48:22 net packet injection: support is not implemented in syzkaller 2020/10/06 18:48:22 net device setup: support is not implemented in syzkaller 2020/10/06 18:48:22 concurrency sanitizer: support is not implemented in syzkaller 2020/10/06 18:48:22 devlink PCI setup: support is not implemented in syzkaller 2020/10/06 18:48:22 USB emulation: enabled 2020/10/06 18:48:22 hci packet injection: support is not implemented in syzkaller 2020/10/06 18:48:22 wifi device emulation: support is not implemented in syzkaller 18:48:26 executing program 0: mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x6b2) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000000), &(0x7f00000000c0)=0xffffff80) ioctl$FIOGETOWN(r0, 0x80047460, &(0x7f00000000c0)) fcntl$getown(r0, 0x5) 18:48:26 executing program 1: shmdt(0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x0, 0x57}}]}}]}}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0}) shmctl$IPC_STAT(0x0, 0x2, 0x0) 18:48:26 executing program 2: r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/', 0x0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0, 0x0) 18:48:26 executing program 3: r0 = socket(0x18, 0x1, 0x0) getsockopt(r0, 0x200000029, 0x25, 0x0, 0x0) 18:48:26 executing program 4: mknod(&(0x7f0000000180)='./bus\x00', 0x80002005, 0x514) r0 = open(&(0x7f0000000140)='./bus\x00', 0x10004, 0x0) ioctl$FIOSETOWN(r0, 0x8004667c, &(0x7f0000000080)=0xfda) 18:48:28 executing program 5: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x18, 0x1, 0x0) setsockopt(r0, 0x6, 0x6, &(0x7f0000000000)="2ed54287", 0x4) [ 54.4464635] uhub1: device problem, disabling port 1 18:48:31 executing program 0: mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x6b2) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000000), &(0x7f00000000c0)=0xffffff80) ioctl$FIOGETOWN(r0, 0x80047460, &(0x7f00000000c0)) fcntl$getown(r0, 0x5) 18:48:31 executing program 2: r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/', 0x0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0, 0x0) 18:48:31 executing program 4: mknod(&(0x7f0000000180)='./bus\x00', 0x80002005, 0x514) r0 = open(&(0x7f0000000140)='./bus\x00', 0x10004, 0x0) ioctl$FIOSETOWN(r0, 0x8004667c, &(0x7f0000000080)=0xfda) 18:48:31 executing program 5: mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x6b2) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000000), &(0x7f00000000c0)=0xffffff80) ioctl$FIOGETOWN(r0, 0x80047460, &(0x7f00000000c0)) fcntl$getown(r0, 0x5) 18:48:32 executing program 1: shmdt(0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x0, 0x57}}]}}]}}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0}) shmctl$IPC_STAT(0x0, 0x2, 0x0) 18:48:32 executing program 3: r0 = socket(0x18, 0x1, 0x0) getsockopt(r0, 0x200000029, 0x25, 0x0, 0x0) 18:48:32 executing program 2: r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/', 0x0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0, 0x0) 18:48:32 executing program 0: mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x6b2) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000000), &(0x7f00000000c0)=0xffffff80) ioctl$FIOGETOWN(r0, 0x80047460, &(0x7f00000000c0)) fcntl$getown(r0, 0x5) 18:48:32 executing program 4: mknod(&(0x7f0000000180)='./bus\x00', 0x80002005, 0x514) r0 = open(&(0x7f0000000140)='./bus\x00', 0x10004, 0x0) ioctl$FIOSETOWN(r0, 0x8004667c, &(0x7f0000000080)=0xfda) 18:48:32 executing program 3: r0 = socket(0x18, 0x1, 0x0) getsockopt(r0, 0x200000029, 0x25, 0x0, 0x0) 18:48:32 executing program 2: r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/', 0x0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0, 0x0) 18:48:32 executing program 4: mknod(&(0x7f0000000180)='./bus\x00', 0x80002005, 0x514) r0 = open(&(0x7f0000000140)='./bus\x00', 0x10004, 0x0) ioctl$FIOSETOWN(r0, 0x8004667c, &(0x7f0000000080)=0xfda) 18:48:32 executing program 3: r0 = socket(0x18, 0x1, 0x0) getsockopt(r0, 0x200000029, 0x25, 0x0, 0x0) 18:48:32 executing program 0: mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x6b2) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000000), &(0x7f00000000c0)=0xffffff80) ioctl$FIOGETOWN(r0, 0x80047460, &(0x7f00000000c0)) fcntl$getown(r0, 0x5) 18:48:32 executing program 5: mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x6b2) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000000), &(0x7f00000000c0)=0xffffff80) ioctl$FIOGETOWN(r0, 0x80047460, &(0x7f00000000c0)) fcntl$getown(r0, 0x5) 18:48:32 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r1, &(0x7f0000001ac0)={0x0}, 0x32, 0x0, 0x0) compat_43_orecvfrom(r0, &(0x7f00000000c0)=""/112, 0x70, 0x0, 0x0, 0x0) [ 56.0364696] uhub1: device problem, disabling port 1 18:48:33 executing program 1: shmdt(0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x0, 0x57}}]}}]}}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0}) shmctl$IPC_STAT(0x0, 0x2, 0x0) 18:48:33 executing program 0: connect$unix(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="6202c1"], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x2, 0x1, 0x0) bind(r0, &(0x7f0000000000), 0x10) r1 = dup(r0) listen(r1, 0x0) r2 = socket(0x2, 0x1, 0x0) connect$unix(r2, &(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x10) shutdown(r2, 0x1) r3 = accept$unix(r1, 0x0, 0x0) dup2(r1, r3) 18:48:33 executing program 3: setuid(0xee00) semget(0x0, 0x0, 0x2e1) 18:48:33 executing program 5: mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x6b2) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000000), &(0x7f00000000c0)=0xffffff80) ioctl$FIOGETOWN(r0, 0x80047460, &(0x7f00000000c0)) fcntl$getown(r0, 0x5) 18:48:33 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r1, &(0x7f0000001ac0)={0x0}, 0x32, 0x0, 0x0) compat_43_orecvfrom(r0, &(0x7f00000000c0)=""/112, 0x70, 0x0, 0x0, 0x0) 18:48:33 executing program 4: mknod(&(0x7f0000001a80)='./file0\x00', 0x1000, 0x0) compat_43_stat43(&(0x7f0000001ac0)='./file0\x00', &(0x7f0000001b00)) 18:48:33 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r1, &(0x7f0000001ac0)={0x0}, 0x32, 0x0, 0x0) compat_43_orecvfrom(r0, &(0x7f00000000c0)=""/112, 0x70, 0x0, 0x0, 0x0) 18:48:33 executing program 5: pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x3, 0xffffffffffffffff) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x3, 0xffffffffffffffff) write(r3, &(0x7f0000000100), 0xfffffe5d) write(r1, &(0x7f0000000100), 0xfffffe5d) 18:48:33 executing program 4: mknod(&(0x7f0000001a80)='./file0\x00', 0x1000, 0x0) compat_43_stat43(&(0x7f0000001ac0)='./file0\x00', &(0x7f0000001b00)) 18:48:33 executing program 0: connect$unix(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="6202c1"], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x2, 0x1, 0x0) bind(r0, &(0x7f0000000000), 0x10) r1 = dup(r0) listen(r1, 0x0) r2 = socket(0x2, 0x1, 0x0) connect$unix(r2, &(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x10) shutdown(r2, 0x1) r3 = accept$unix(r1, 0x0, 0x0) dup2(r1, r3) 18:48:33 executing program 4: mknod(&(0x7f0000001a80)='./file0\x00', 0x1000, 0x0) compat_43_stat43(&(0x7f0000001ac0)='./file0\x00', &(0x7f0000001b00)) 18:48:34 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r1, &(0x7f0000001ac0)={0x0}, 0x32, 0x0, 0x0) compat_43_orecvfrom(r0, &(0x7f00000000c0)=""/112, 0x70, 0x0, 0x0, 0x0) [ 58.1064766] uhub1: device problem, disabling port 1 18:48:35 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r1, &(0x7f0000001ac0)={0x0}, 0x32, 0x0, 0x0) compat_43_orecvfrom(r0, &(0x7f00000000c0)=""/112, 0x70, 0x0, 0x0, 0x0) 18:48:35 executing program 0: connect$unix(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="6202c1"], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x2, 0x1, 0x0) bind(r0, &(0x7f0000000000), 0x10) r1 = dup(r0) listen(r1, 0x0) r2 = socket(0x2, 0x1, 0x0) connect$unix(r2, &(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x10) shutdown(r2, 0x1) r3 = accept$unix(r1, 0x0, 0x0) dup2(r1, r3) 18:48:35 executing program 4: mknod(&(0x7f0000001a80)='./file0\x00', 0x1000, 0x0) compat_43_stat43(&(0x7f0000001ac0)='./file0\x00', &(0x7f0000001b00)) 18:48:35 executing program 5: pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x3, 0xffffffffffffffff) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x3, 0xffffffffffffffff) write(r3, &(0x7f0000000100), 0xfffffe5d) write(r1, &(0x7f0000000100), 0xfffffe5d) 18:48:35 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r1, &(0x7f0000001ac0)={0x0}, 0x32, 0x0, 0x0) compat_43_orecvfrom(r0, &(0x7f00000000c0)=""/112, 0x70, 0x0, 0x0, 0x0) 18:48:35 executing program 1: shmdt(0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x0, 0x57}}]}}]}}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0}) shmctl$IPC_STAT(0x0, 0x2, 0x0) 18:48:35 executing program 4: pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x3, 0xffffffffffffffff) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x3, 0xffffffffffffffff) write(r3, &(0x7f0000000100), 0xfffffe5d) write(r1, &(0x7f0000000100), 0xfffffe5d) 18:48:36 executing program 0: connect$unix(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="6202c1"], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x2, 0x1, 0x0) bind(r0, &(0x7f0000000000), 0x10) r1 = dup(r0) listen(r1, 0x0) r2 = socket(0x2, 0x1, 0x0) connect$unix(r2, &(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x10) shutdown(r2, 0x1) r3 = accept$unix(r1, 0x0, 0x0) dup2(r1, r3) 18:48:36 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r1, &(0x7f0000001ac0)={0x0}, 0x32, 0x0, 0x0) compat_43_orecvfrom(r0, &(0x7f00000000c0)=""/112, 0x70, 0x0, 0x0, 0x0) [ 59.7665103] uhub1: device problem, disabling port 1 18:48:36 executing program 5: pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x3, 0xffffffffffffffff) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x3, 0xffffffffffffffff) write(r3, &(0x7f0000000100), 0xfffffe5d) write(r1, &(0x7f0000000100), 0xfffffe5d) 18:48:36 executing program 2: connect$unix(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="6202c1"], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x2, 0x1, 0x0) bind(r0, &(0x7f0000000000), 0x10) r1 = dup(r0) listen(r1, 0x0) r2 = socket(0x2, 0x1, 0x0) connect$unix(r2, &(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x10) shutdown(r2, 0x1) r3 = accept$unix(r1, 0x0, 0x0) dup2(r1, r3) 18:48:37 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x40000003) 18:48:37 executing program 4: pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x3, 0xffffffffffffffff) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x3, 0xffffffffffffffff) write(r3, &(0x7f0000000100), 0xfffffe5d) write(r1, &(0x7f0000000100), 0xfffffe5d) 18:48:37 executing program 1: mknod(&(0x7f0000000000)='./file0\x00', 0x4000040002000, 0x80002922) open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 18:48:38 executing program 2: connect$unix(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="6202c1"], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x2, 0x1, 0x0) bind(r0, &(0x7f0000000000), 0x10) r1 = dup(r0) listen(r1, 0x0) r2 = socket(0x2, 0x1, 0x0) connect$unix(r2, &(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x10) shutdown(r2, 0x1) r3 = accept$unix(r1, 0x0, 0x0) dup2(r1, r3) [ 61.3764976] panic: UBSan: Undefined Behavior in /syzkaller/managers/netbsd-kubsan/kernel/sys/kern/subr_autoconf.c:1344:19, pointer expression with base 0 overflowed to 0xfffffffffffc0010 [ 61.3764976] cpu0: Begin traceback... [ 61.3764976] vpanic() at netbsd:vpanic+0x2cd [ 61.3764976] isAlreadyReported() at netbsd:isAlreadyReported [ 61.3764976] HandlePointerOverflow() at netbsd:HandlePointerOverflow+0xd6 [ 61.3764976] config_devalloc() at netbsd:config_devalloc+0x8e2 [ 61.3764976] config_attach_pseudo() at netbsd:config_attach_pseudo+0x21 [ 61.3764976] vndopen() at netbsd:vndopen+0x4d0 [ 61.3764976] cdev_open() at netbsd:cdev_open+0x169 [ 61.3764976] spec_open() at netbsd:spec_open+0x42b [ 61.3764976] VOP_OPEN() at netbsd:VOP_OPEN+0x131 [ 61.3764976] vn_open() at netbsd:vn_open+0x56d [ 61.3764976] do_open() at netbsd:do_open+0x229 [ 61.3764976] do_sys_openat() at netbsd:do_sys_openat+0xcb [ 61.3764976] sys_open() at netbsd:sys_open+0x60 [ 61.3764976] sys___syscall() at netbsd:sys___syscall+0x1cf [ 61.3764976] syscall() at netbsd:syscall+0x2d5 [ 61.3764976] --- syscall (number 198) --- [ 61.3764976] netbsd:syscall+0x2d5: [ 61.3764976] cpu0: End traceback... [ 61.3764976] fatal breakpoint trap in supervisor mode [ 61.3764976] trap type 1 code 0 rip 0xffffffff80221a85 cs 0x8 rflags 0x246 cr2 0x638000 ilevel 0x8 rsp 0xffff9280cb43f4a0 [ 61.3764976] curlwp 0xffffeb1a7efa2240 pid 1449.1575 lowest kstack 0xffff9280cb43b2c0 Stopped in pid 1449.1575 (syz-executor.1) at netbsd:breakpoint+0x5: leave ? breakpoint() at netbsd:breakpoint+0x5 db_panic() at netbsd:db_panic+0xec vpanic() at netbsd:vpanic+0x2cd isAlreadyReported() at netbsd:isAlreadyReported HandlePointerOverflow() at netbsd:HandlePointerOverflow+0xd6 config_devalloc() at netbsd:config_devalloc+0x8e2 config_attach_pseudo() at netbsd:config_attach_pseudo+0x21 vndopen() at netbsd:vndopen+0x4d0 cdev_open() at netbsd:cdev_open+0x169 spec_open() at netbsd:spec_open+0x42b VOP_OPEN() at netbsd:VOP_OPEN+0x131 vn_open() at netbsd:vn_open+0x56d do_open() at netbsd:do_open+0x229 do_sys_openat() at netbsd:do_sys_openat+0xcb sys_open() at netbsd:sys_open+0x60 sys___syscall() at netbsd:sys___syscall+0x1cf syscall() at netbsd:syscall+0x2d5 --- syscall (number 198) --- netbsd:syscall+0x2d5: Panic string: UBSan: Undefined Behavior in /syzkaller/managers/netbsd-kubsan/kernel/sys/kern/subr_autoconf.c:1344:19, pointer expression with base 0 overflowed to 0xfffffffffffc0010 PID LID S CPU FLAGS STRUCT LWP * NAME WAIT 1234 1234 2 0 0 ffffeb1a7dd04a00 syz-executor.2 1449 >1575 7 0 0 ffffeb1a7efa2240 syz-executor.1 1449 1449 2 0 10040000 ffffeb1a74fb5540 syz-executor.1 1465 1466 5 1 140000 ffffeb1a7ef1d280 syz-executor.4 1465 1465 2 0 10000000 ffffeb1a7d519580 syz-executor.4 1467 1628 3 0 80 ffffeb1a7efa2680 syz-executor.0 parked 1467 1467 2 0 10040000 ffffeb1a7f2e01c0 syz-executor.0 1455 1326 3 0 80 ffffeb1a74fb5980 syz-executor.3 netio 1455 1462 3 1 80 ffffeb1a7d5199c0 syz-executor.3 parked 1455 1455 3 0 10000080 ffffeb1a7f2e0a40 syz-executor.3 nanoslp 419 419 3 0 80 ffffeb1a6fc44780 syz-executor.5 nanoslp 1091 1091 3 0 80 ffffeb1a74fb5100 syz-executor.3 nanoslp 1096 1096 3 0 80 ffffeb1a71af6940 syz-executor.4 nanoslp 1073 1073 2 1 40 ffffeb1a71170900 syz-executor.2 1066 1066 2 1 40 ffffeb1a6fc058c0 syz-executor.1 1068 >1068 7 1 40 ffffeb1a6ebc7680 syz-executor.0 1252 1075 3 0 80 ffffeb1a71af6500 syz-fuzzer parked 1252 1067 3 1 c0 ffffeb1a71af60c0 syz-fuzzer parked 1252 1121 3 1 80 ffffeb1a711704c0 syz-fuzzer parked 1252 1254 3 0 80 ffffeb1a71170080 syz-fuzzer parked 1252 1250 3 0 80 ffffeb1a6e8b0a80 syz-fuzzer parked 1252 1064 3 0 c0 ffffeb1a6ebc7240 syz-fuzzer parked 1252 1253 3 0 80 ffffeb1a6e65c5c0 syz-fuzzer parked 1252 1252 3 1 80 ffffeb1a6e8b0640 syz-fuzzer kqueue 1092 1092 3 1 80 ffffeb1a6e8b0200 sshd select 1089 1089 3 0 80 ffffeb1a6fc05480 getty nanoslp 695 695 3 0 80 ffffeb1a6f2586c0 getty nanoslp 1058 1058 3 1 80 ffffeb1a6ebc7ac0 getty nanoslp 852 852 3 0 c0 ffffeb1a6f15f740 getty ttyraw 941 941 3 1 80 ffffeb1a6fc44bc0 sshd select 982 982 3 0 80 ffffeb1a6fc05040 powerd kqueue 733 733 3 0 80 ffffeb1a6f15f300 syslogd kqueue 591 591 3 0 80 ffffeb1a6fc44340 dhcpcd poll 589 589 3 1 80 ffffeb1a6eec62c0 dhcpcd poll 587 587 3 1 80 ffffeb1a6f15fb80 dhcpcd poll 412 412 3 0 80 ffffeb1a6f258280 dhcpcd poll 347 347 3 0 80 ffffeb1a6eec6b40 dhcpcd poll 346 346 3 1 80 ffffeb1a6eec6700 dhcpcd poll 345 345 3 0 80 ffffeb1a6f258b00 dhcpcd poll 1 1 3 0 80 ffffeb1a664b4900 init wait 0 846 3 0 200 ffffeb1a6e65ca00 physiod physiod 0 160 3 0 200 ffffeb1a6e6aea40 ioflush syncer 0 165 3 0 200 ffffeb1a6e6ae600 pooldrain pooldrain 0 164 3 1 200 ffffeb1a6e6ae1c0 pgdaemon pgdaemon 0 161 3 1 200 ffffeb1a6e65c180 usb7 usbevt 0 31 3 1 200 ffffeb1a6b5f79c0 usb6 usbevt 0 63 3 1 200 ffffeb1a6b5f7580 usb5 usbevt 0 126 3 1 200 ffffeb1a6b5f7140 usb4 usbevt 0 125 3 1 200 ffffeb1a6857a980 usb3 usbevt 0 124 3 1 200 ffffeb1a6857a540 usb2 usbevt 0 123 3 1 200 ffffeb1a6857a100 usb1 usbevt 0 122 3 1 200 ffffeb1a67525940 usb0 usbevt 0 121 3 1 200 ffffeb1a67525500 usbtask-dr usbtsk 0 120 3 1 200 ffffeb1a675250c0 usbtask-hc usbtsk 0 119 3 1 200 ffffeb1a6393aac0 npfgc0 npfgcw 0 118 3 1 200 ffffeb1a664b44c0 rt_free rt_free 0 117 3 1 200 ffffeb1a664b4080 unpgc unpgc 0 116 3 0 200 ffffeb1a6648f8c0 key_timehandler key_timehandler 0 115 3 1 200 ffffeb1a6648f480 icmp6_wqinput/1 icmp6_wqinput 0 114 3 0 200 ffffeb1a6648f040 icmp6_wqinput/0 icmp6_wqinput 0 113 3 0 200 ffffeb1a66472bc0 nd6_timer nd6_timer 0 112 3 1 200 ffffeb1a66472780 carp6_wqinput/1 carp6_wqinput 0 111 3 0 200 ffffeb1a66400700 carp6_wqinput/0 carp6_wqinput 0 110 3 1 200 ffffeb1a65d80b00 carp_wqinput/1 carp_wqinput 0 109 3 0 200 ffffeb1a66400b40 carp_wqinput/0 carp_wqinput 0 108 3 1 200 ffffeb1a66472340 icmp_wqinput/1 icmp_wqinput 0 107 3 0 200 ffffeb1a6641db80 icmp_wqinput/0 icmp_wqinput 0 106 3 1 200 ffffeb1a6641d740 rt_timer rt_timer 0 105 3 0 200 ffffeb1a664002c0 vmem_rehash vmem_rehash 0 104 3 0 200 ffffeb1a6641d300 entbutler entropy 0 30 3 1 200 ffffeb1a65d806c0 vioif0_txrx/1 vioif0_txrx 0 29 3 0 200 ffffeb1a65d80280 vioif0_txrx/0 vioif0_txrx 0 27 3 0 200 ffffeb1a6393a680 scsibus0 sccomp 0 26 3 0 200 ffffeb1a6393a240 pms0 pmsreset 0 25 3 1 200 ffffeb1a6387ca80 xcall/1 xcall 0 24 1 1 200 ffffeb1a6387c640 softser/1 0 23 1 1 200 ffffeb1a6387c200 softclk/1 0 22 1 1 200 ffffeb1a63847a40 softbio/1 0 21 1 1 200 ffffeb1a63847600 softnet/1 0 20 1 1 201 ffffeb1a638471c0 idle/1 0 19 3 0 200 ffffeb1b7378ba00 lnxpwrwq lnxpwrwq 0 18 3 0 200 ffffeb1b7378b5c0 lnxlngwq lnxlngwq 0 17 3 0 200 ffffeb1b7378b180 lnxsyswq lnxsyswq 0 16 3 0 200 ffffeb1b737a49c0 lnxrcugc lnxrcugc 0 15 3 0 200 ffffeb1b737a4580 sysmon smtaskq 0 14 3 0 200 ffffeb1b737a4140 pmfsuspend pmfsuspend 0 13 3 0 200 ffffeb1b737b5980 pmfevent pmfevent 0 12 3 0 200 ffffeb1b737b5540 sopendfree sopendfr 0 11 3 0 200 ffffeb1b737b5100 iflnkst iflnkst 0 10 3 0 200 ffffeb1b747de940 nfssilly nfssilly 0 9 3 0 200 ffffeb1b747de500 vdrain vdrain 0 8 3 0 200 ffffeb1b747de0c0 modunload mod_unld 0 7 3 0 200 ffffeb1b74815900 xcall/0 xcall 0 6 1 0 200 ffffeb1b748154c0 softser/0 0 5 1 0 200 ffffeb1b74815080 softclk/0 0 4 1 0 200 ffffeb1b7483f8c0 softbio/0 0 3 1 0 200 ffffeb1b7483f480 softnet/0 0 2 1 0 201 ffffeb1b7483f040 idle/0 0 0 3 0 200 ffffffff85ed8600 swapper uvm [Locks tracked through LWPs] ****** LWP 589.589 (dhcpcd) @ 0xffffeb1a6eec62c0, l_stat=3 *** Locks held: none *** Locks wanted: * Lock 0 (initialized at module_hook_init) lock address : 0xffffffff862d26c0 type : sleep/adaptive initialized : 0xffffffff832506f7 shared holds : 0 exclusive: 0 shares wanted: 0 exclusive: 0 relevant cpu : 1 last held: 0 relevant lwp : 0xffffeb1a6eec62c0 last held: 000000000000000000 last locked : 000000000000000000 unlocked*: 000000000000000000 owner field : 000000000000000000 wait/spin: 0/0 Turnstile: no active turnstile for this lock. ****** LWP 587.587 (dhcpcd) @ 0xffffeb1a6f15fb80, l_stat=3 *** Locks held: none *** Locks wanted: * Lock 0 (initialized at module_hook_init) lock address : 0xffffffff862d26c0 type : sleep/adaptive initialized : 0xffffffff832506f7 shared holds : 0 exclusive: 0 shares wanted: 0 exclusive: 0 relevant cpu : 1 last held: 0 relevant lwp : 0xffffeb1a6f15fb80 last held: 000000000000000000 last locked : 000000000000000000 unlocked*: 000000000000000000 owner field : 000000000000000000 wait/spin: 0/0 Turnstile: no active turnstile for this lock. ****** LWP 346.346 (dhcpcd) @ 0xffffeb1a6eec6700, l_stat=3 *** Locks held: none *** Locks wanted: * Lock 0 (initialized at module_hook_init) lock address : 0xffffffff862d26c0 type : sleep/adaptive initialized : 0xffffffff832506f7 shared holds : 0 exclusive: 0 shares wanted: 0 exclusive: 0 relevant cpu : 1 last held: 0 relevant lwp : 0xffffeb1a6eec6700 last held: 000000000000000000 last locked : 000000000000000000 unlocked*: 000000000000000000 owner field : 000000000000000000 wait/spin: 0/0 Turnstile: no active turnstile for this lock. ****** LWP 345.345 (dhcpcd) @ 0xffffeb1a6f258b00, l_stat=3 *** Locks held: none *** Locks wanted: * Lock 0 (initialized at module_hook_init) lock address : 0xffffffff862d26c0 type : sleep/adaptive initialized : 0xffffffff832506f7 shared holds : 0 exclusive: 0 shares wanted: 0 exclusive: 0 relevant cpu : 0 last held: 0 relevant lwp : 0xffffeb1a6f258b00 last held: 000000000000000000 last locked : 000000000000000000 unlocked*: 000000000000000000 owner field : 000000000000000000 wait/spin: 0/0 Turnstile: no active turnstile for this lock. ****** LWP 0.11 (iflnkst) @ 0xffffeb1b737b5100, l_stat=3 *** Locks held: none *** Locks wanted: * Lock 0 (initialized at module_hook_init) lock address : 0xffffffff862d26c0 type : sleep/adaptive initialized : 0xffffffff832506f7 shared holds : 0 exclusive: 0 shares wanted: 0 exclusive: 0 relevant cpu : 0 last held: 0 relevant lwp : 0xffffeb1b737b5100 last held: 000000000000000000 last locked : 000000000000000000 unlocked*: 000000000000000000 owner field : 000000000000000000 wait/spin: 0/0 Turnstile: no active turnstile for this lock. ****** LWP 0.5 (softclk/0) @ 0xffffeb1b74815080, l_stat=1 *** Locks held: none *** Locks wanted: * Lock 0 (initialized at module_hook_init) lock address : 0xffffffff862d26c0 type : sleep/adaptive initialized : 0xffffffff832506f7 shared holds : 0 exclusive: 0 shares wanted: 0 exclusive: 0 relevant cpu : 0 last held: 0 relevant lwp : 0xffffeb1b74815080 last held: 000000000000000000 last locked : 000000000000000000 unlocked*: 000000000000000000 owner field : 000000000000000000 wait/spin: 0/0 Turnstile: no active turnstile for this lock. [Locks tracked through CPUs] ******* Locks held on cpu0: * Lock 0 (initialized at main) lock address : 0xffffffff862d25c0 type : spin initialized : 0xffffffff83a37096 shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 0 relevant cpu : 0 last held: 0 relevant lwp : 0xffffeb1a7efa2240 last held: 0xffffeb1a7efa2240 last locked* : 0xffffffff833341eb unlocked : 0xffffffff80f2253b curcpu holds : 1 wanted by: 000000000000000000 * Lock 1 (initialized at config_init) lock address : 0xffffffff862db500 type : spin initialized : 0xffffffff83310d6a shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 0 relevant cpu : 0 last held: 0 relevant lwp : 0xffffeb1a7efa2240 last held: 0xffffeb1a7efa2240 last locked* : 0xffffffff8331253f unlocked : 0xffffffff83319e90 owner field : 0x0000000000010600 wait/spin: 0/1 PAGE FLAG PQ UOBJECT UANON 0xffff928000007180 0045 00000000 0x0 0x0 0xffff928000007200 0045 00000000 0x0 0x0 0xffff928000007280 0045 00000000 0x0 0x0 0xffff928000007300 0045 00000000 0x0 0x0 0xffff928000007380 0045 00000000 0x0 0x0 0xffff928000007400 0045 00000000 0x0 0x0 0xffff928000007480 0045 00000000 0x0 0x0 0xffff928000007500 0045 00000000 0x0 0x0 0xffff928000007580 0041 00000000 0x0 0x0 0xffff928000007600 0041 00000000 0x0 0x0 0xffff928000007680 0041 00000000 0x0 0x0 0xffff928000007700 0041 00000000 0x0 0x0 0xffff928000007780 0045 00000000 0x0 0x0 0xffff928000007800 0045 00000000 0x0 0x0 0xffff928000007880 0045 00000000 0x0 0x0 0xffff928000007900 0041 00000000 0x0 0x0 0xffff928000007980 0041 00000000 0x0 0x0 0xffff928000007a00 0041 00000000 0x0 0x0 0xffff928000007a80 0041 00000000 0x0 0x0 0xffff928000007b00 0041 00000000 0x0 0x0 0xffff928000007b80 0041 00000000 0x0 0x0 0xffff928000007c00 0041 00000000 0x0 0x0 0xffff928000007c80 0041 00000000 0x0 0x0 0xffff928000007d00 0041 00000000 0x0 0x0 0xffff928000007d80 0041 00000000 0x0 0x0 0xffff928000007e00 0041 00000000 0x0 0x0 0xffff928000007e80 0041 00000000 0x0 0x0 0xffff928000007f00 0041 00000000 0x0 0x0 0xffff928000007f80 0041 00000000 0x0 0x0 0xffff928000008000 0041 00000000 0x0 0x0 0xffff928000008080 0041 00000000 0x0 0x0 0xffff928000008100 0041 00000000 0x0 0x0 0xffff928000008180 0041 00000000 0x0 0x0 0xffff928000008200 0041 00000000 0x0 0x0 0xffff928000008280 0041 00000000 0x0 0x0 0xffff928000008300 0041 00000000 0x0 0x0 0xffff928000008380 0041 00000000 0x0 0x0 0xffff928000008400 0041 00000000 0x0 0x0 0xffff928000008480 0041 00000000 0x0 0x0 0xffff928000008500 0041 00000000 0x0 0x0 0xffff928000008580 0041 00000000 0x0 0x0 0xffff928000008600 0041 00000000 0x0 0x0 0xffff928000008680 0045 00000000 0x0 0x0 0xffff928000008700 0041 00000000 0x0 0x0 0xffff928000008780 0041 00000000 0x0 0x0 0xffff928000008800 0041 00000000 0x0 0x0 0xffff928000008880 0041 00000000 0x0 0x0 0xffff928000008900 0041 00000000 0x0 0x0 0xffff928000008980 0041 00000000 0x0 0x0 0xffff928000008a00 0041 00000000 0x0 0x0 0xffff928000008a80 0041 00000000 0x0 0x0 0xffff928000008b00 0045 00000000 0x0 0x0 0xffff928000008b80 0041 00000000 0x0 0x0 0xffff928000008c00 0041 00000000 0x0 0x0 0xffff928000008c80 0041 00000000 0x0 0x0 0xffff928000008d00 0041 00000000 0x0 0x0 0xffff928000008d80 0041 00000000 0x0 0x0 0xffff928000008e00 0041 00000000 0x0 0x0 0xffff928000008e80 0041 00000000 0x0 0x0 0xffff928000008f00 0041 00000000 0x0 0x0 0xffff928000008f80 0045 00000000 0x0 0x0 0xffff928000009000 0041 00000000 0x0 0x0 0xffff928000009080 0041 00000000 0x0 0x0 0xffff928000009100 0041 00000000 0x0 0x0 0xffff928000009180 0041 00000000 0x0 0x0 0xffff928000009200 0041 00000000 0x0 0x0 0xffff928000009280 0041 00000000 0x0 0x0 0xffff928000009300 0041 00000000 0x0 0x0 0xffff928000009380 0041 00000000 0x0 0x0 0xffff928000009400 0041 00000000 0x0 0x0 0xffff928000009480 0041 00000000 0x0 0x0 0xffff928000009500 0041 00000000 0x0 0x0 0xffff928000009580 0041 00000000 0x0 0x0 0xffff928000009600 0041 00000000 0x0 0x0 0xffff928000009680 0041 00000000 0x0 0x0 0xffff928000009700 0041 00000000 0x0 0x0 0xffff928000009780 0041 00000000 0x0 0x0 0xffff928000009800 0041 00000000 0x0 0x0 0xffff928000009880 0041 00000000 0x0 0x0 0xffff928000009900 0041 00000000 0x0 0x0 0xffff928000009980 0041 00000000 0x0 0x0 0xffff928000009a00 0041 00000000 0x0 0x0 0xffff928000009a80 0041 00000000 0x0 0x0 0xffff928000009b00 0041 00000000 0x0 0x0 0xffff928000009b80 0041 00000000 0x0 0x0 0xffff928000009c00 0041 00000000 0x0 0x0 0xffff928000009c80 0041 00000000 0x0 0x0 0xffff928000009d00 0041 00000000 0x0 0x0 0xffff928000009d80 0041 00000000 0x0 0x0 0xffff928000009e00 0041 00000000 0x0 0x0 0xffff928000009e80 0041 00000000 0x0 0x0 0xffff928000009f00 0041 00000000 0x0 0x0 0xffff928000009f80 0041 00000000 0x0 0x0 0xffff92800000a000 0041 00000000 0x0 0x0 0xffff92800000a080 0041 00000000 0x0 0x0 0xffff92800000a100 0045 00000000 0x0 0x0 0xffff92800000a180 0041 00000000 0x0 0x0 0xffff92800000a200 0041 00000000 0x0 0x0 0xffff92800000a280 0041 00000000 0x0 0x0 0xffff92800000a300 0041 00000000 0x0 0x0 0xffff92800000a380 0041 00000000 0x0 0x0 0xffff92800000a400 0041 00000000 0x0 0x0 0xffff92800000a480 0041 00000000 0x0 0x0 0xffff92800000a500 0041 00000000 0x0 0x0 0xffff92800000a580 0041 00000000 0x0 0x0 0xffff92800000a600 0045 00000000 0x0 0x0 0xffff92800000a680 0041 00000000 0x0 0x0 0xffff92800000a700 0041 00000000 0x0 0x0 0xffff92800000a780 0041 00000000 0x0 0x0 0xffff92800000a800 0041 00000000 0x0 0x0 0xffff92800000a880 0041 00000000 0x0 0x0 0xffff92800000a900 0041 00000000 0x0 0x0 0xffff92800000a980 0045 00000000 0x0 0x0 0xffff92800000aa00 0045 00000000 0x0 0x0 0xffff92800000aa80 0041 00000000 0x0 0x0 0xffff92800000ab00 0041 00000000 0x0 0x0 0xffff92800000ab80 0041 00000000 0x0 0x0 0xffff92800000ac00 0041 00000000 0x0 0x0 0xffff92800000ac80 0041 00000000 0x0 0x0 0xffff92800000ad00 0041 00000000 0x0 0x0 0xffff92800000ad80 0045 00000000 0x0 0x0 0xffff92800000ae00 0045 00000000 0x0 0x0 0xffff92800000ae80 0041 00000000 0x0 0x0 0xffff92800000af00 0041 00000000 0x0 0x0 0xffff92800000af80 0041 00000000 0x0 0x0 0xffff92800000b000 0041 00000000 0x0 0x0 0xffff92800000b080 0041 00000000 0x0 0x0 0xffff92800000b100 0041 00000000 0x0 0x0 0xffff92800000b180 0045 00000000 0x0 0x0 0xffff92800000b200 0045 00000000 0x0 0x0 0xffff92800000b280 0045 00000000 0x0 0x0 0xffff92800000b300 0041 00000000 0x0 0x0 0xffff92800000b380 0041 00000000 0x0 0x0 0xffff92800000b400 0041 00000000 0x0 0x0 0xffff92800000b480 0041 00000000 0x0 0x0 0xffff92800000b500 0045 00000000 0x0 0x0 0xffff92800000b580 0045 00000000 0x0 0x0 0xffff92800000b600 0045 00000000 0x0 0x0 0xffff92800000b680 0045 00000000 0x0 0x0 0xffff92800000b700 0041 00000000 0x0 0x0 0xffff92800000b780 0041 00000000 0x0 0x0 0xffff92800000b800 0045 00000000 0x0 0x0 0xffff92800000b880 0041 00000000 0x0 0x0 0xffff92800000b900 0045 00000000 0x0 0x0 0xffff92800000b980 0045 00000000 0x0 0x0 0xffff92800000ba00 0041 00000000 0x0 0x0 0xffff92800000ba80 0045 00000000 0x0 0x0 0xffff92800000bb00 0045 00000000 0x0 0x0 0xffff92800000bb80 0041 00000000 0x0 0x0 0xffff92800000bc00 0045 00000000 0x0 0x0 0xffff92800000bc80 0045 00000000 0x0 0x0 0xffff92800000bd00 0045 00000000 0x0 0x0 0xffff92800000bd80 0041 00000000 0x0 0x0 0xffff92800000be00 0041 00000000 0x0 0x0 0xffff92800000be80 0045 00000000 0x0 0x0 0xffff92800000bf00 0045 00000000 0x0 0x0 0xffff92800000bf80 0045 00000000 0x0 0x0 0xffff92800000c000 0045 00000000 0x0 0x0 0xffff92800000c080 0045 00000000 0x0 0x0 0xffff92800000c100 0045 00000000 0x0 0x0 0xffff92800000c180 0041 00000000 0x0 0x0 0xffff92800000c200 0041 00000000 0x0 0x0 0xffff92800000c280 0041 00000000 0x0 0x0 0xffff92800000c300 0045 00000000 0x0 0x0 0xffff92800000c380 0045 00000000 0x0 0x0 0xffff92800000c400 0045 00000000 0x0 0x0 0xffff92800000c480 0045 00000000 0x0 0x0 0xffff92800000c500 0045 00000000 0x0 0x0 0xffff92800000c580 0041 00000000 0x0 0x0 0xffff92800000c600 0041 00000000 0x0 0x0 0xffff92800000c680 0041 00000000 0x0 0x0 0xffff92800000c700 0045 00000000 0x0 0x0 0xffff92800000c780 0045 00000000 0x0 0x0 0xffff92800000c800 0045 00000000 0x0 0x0 0xffff92800000c880 0045 00000000 0x0 0x0 0xffff92800000c900 0041 00000000 0x0 0x0 0xffff92800000c980 0041 00000000 0x0 0x0 0xffff92800000ca00 0041 00000000 0x0 0x0 0xffff92800000ca80 0041 00000000 0x0 0x0 0xffff92800000cb00 0041 00000000 0x0 0x0 0xffff92800000cb80 0045 00000000 0x0 0x0 0xffff92800000cc00 0041 00000000 0x0 0x0 0xffff92800000cc80 0045 00000000 0x0 0x0 0xffff92800000cd00 0041 00000000 0x0 0x0 0xffff92800000cd80 0041 00000000 0x0 0x0 0xffff92800000ce00 0045 00000000 0x0 0x0 0xffff92800000ce80 0045 00000000 0x0 0x0 0xffff92800000cf00 0041 00000000 0x0 0x0 0xffff92800000cf80 0041 00000000 0x0 0x0 0xffff92800000d000 0041 00000000 0x0 0x0 0xffff92800000d080 0041 00000000 0x0 0x0 0xffff92800000d100 0041 00000000 0x0 0x0 0xffff92800000d180 0045 00000000 0x0 0x0 0xffff92800000d200 0041 00000000 0x0 0x0 0xffff92800000d280 0041 00000000 0x0 0x0 0xffff92800000d300 0041 00000000 0x0 0x0 0xffff92800000d380 0041 00000000 0x0 0x0 0xffff92800000d400 0041 00000000 0x0 0x0 0xffff92800000d480 0041 00000000 0x0 0x0 0xffff92800000d500 0041 00000000 0x0 0x0 0xffff92800000d580 0041 00000000 0x0 0x0 0xffff92800000d600 0041 00000000 0x0 0x0 0xffff92800000d680 0041 00000000 0x0 0x0 0xffff92800000d700 0041 00000000 0x0 0x0 0xffff92800000d780 0041 00000000 0x0 0x0 0xffff92800000d800 0041 00000000 0x0 0x0 0xffff92800000d880 0041 00000000 0x0 0x0 0xffff92800000d900 0041 00000000 0x0 0x0 0xffff92800000d980 0041 00000000 0x0 0x0 0xffff92800000da00 0041 00000000 0x0 0x0 0xffff92800000da80 0045 00000000 0x0 0x0 0xffff92800000db00 0045 00000000 0x0 0x0 0xffff92800000db80 0041 00000000 0x0 0x0 0xffff92800000dc00 0045 00000000 0x0 0x0 0xffff92800000dc80 0041 00000000 0x0 0x0 0xffff92800000dd00 0045 00000000 0x0 0x0 0xffff92800000dd80 0041 00000000 0x0 0x0 0xffff92800000de00 0045 00000000 0x0 0x0 0xffff92800000de80 0041 00000000 0x0 0x0 0xffff92800000df00 0045 00000000 0x0 0x0 0xffff92800000df80 0045 00000000 0x0 0x0 0xffff92800000e000 0045 00000000 0x0 0x0 0xffff92800000e080 0045 00000000 0x0 0x0 0xffff92800000e100 0045 00000000 0x0 0x0 0xffff92800000e180 0041 00000000 0x0 0x0 0xffff92800000e200 0041 00000000 0x0 0x0 0xffff92800000e280 0045 00000000 0x0 0x0 0xffff92800000e300 0045 00000000 0x0 0x0 0xffff92800000e380 0045 00000000 0x0 0x0 0xffff92800000e400 0045 00000000 0x0 0x0 0xffff92800000e480 0045 00000000 0x0 0x0 0xffff92800000e500 0041 00000000 0x0 0x0 0xffff92800000e580 0041 00000000 0x0 0x0 0xffff92800000e600 0041 00000000 0x0 0x0 0xffff92800000e680 0041 00000000 0x0 0x0 0xffff92800000e700 0041 00000000 0x0 0x0 0xffff92800000e780 0045 00000000 0x0 0x0 0xffff92800000e800 0041 00000000 0x0 0x0 0xffff92800000e880 0041 00000000 0x0 0x0 0xffff92800000e900 0041 00000000 0x0 0x0 0xffff92800000e980 0041 00000000 0x0 0x0 0xffff92800000ea00 0041 00000000 0x0 0x0 0xffff92800000ea80 0041 00000000 0x0 0x0 0xffff92800000eb00 0041 00000000 0x0 0x0 0xffff92800000eb80 0041 00000000 0x0 0x0 0xffff92800000ec00 0045 00000000 0x0 0x0 0xffff92800000ec80 0041 00000000 0x0 0x0 0xffff92800000ed00 0041 00000000 0x0 0x0 0xffff92800000ed80 0041 00000000 0x0 0x0 0xffff92800000ee00 0041 00000000 0x0 0x0 0xffff92800000ee80 0041 00000000 0x0 0x0 0xffff92800000ef00 0041 00000000 0x0 0x0 0xffff92800000ef80 0045 00000000 0x0 0x0 0xffff92800000f000 0041 00000000 0x0 0x0 0xffff92800000f080 0045 00000000 0x0 0x0 0xffff92800000f100 0041 00000000 0x0 0x0 0xffff92800000f180 0041 00000000 0x0 0x0 0xffff92800000f200 0045 00000000 0x0 0x0 0xffff92800000f280 0041 00000000 0x0 0x0 0xffff92800000f300 0041 00000000 0x0 0x0 0xffff92800000f380 0041 00000000 0x0 0x0 0xffff92800000f400 0041 00000000 0x0 0x0 0xffff92800000f480 0041 00000000 0x0 0x0 0xffff92800000f500 0041 00000000 0x0 0x0 0xffff92800000f580 0045 00000000 0x0 0x0 0xffff92800000f600 0041 00000000 0x0 0x0 0xffff92800000f680 0041 00000000 0x0 0x0 0xffff92800000f700 0041 00000000 0x0 0x0 0xffff92800000f780 0041 00000000 0x0 0x0 0xffff92800000f800 0041 00000000 0x0 0x0 0xffff92800000f880 0041 00000000 0x0 0x0 0xffff92800000f900 0041 00000000 0x0 0x0 0xffff92800000f980 0041 00000000 0x0 0x0 0xffff92800000fa00 0041 00000000 0x0 0x0 0xffff92800000fa80 0041 00000000 0x0 0x0 0xffff92800000fb00 0041 00000000 0x0 0x0 0xffff92800000fb80 0041 00000000 0x0 0x0 0xffff92800000fc00 0041 00000000 0x0 0x0 0xffff92800000fc80 0041 00000000 0x0 0x0 0xffff92800000fd00 0041 00000000 0x0 0x0 0xffff92800000fd80 0041 00000000 0x0 0x0 0xffff92800000fe00 0041 00000000 0x0 0x0 0xffff92800000fe80 0041 00000000 0x0 0x0 0xffff92800000ff00 0041 00000000 0x0 0x0 0xffff92800000ff80 0041 00000000 0x0 0x0 0xffff928000010000 0045 00000000 0x0 0x0 0xffff928000010080 0041 00000000 0x0 0x0 0xffff928000010100 0041 00000000 0x0 0x0 0xffff928000010180 0041 00000000 0x0 0x0 0xffff928000010200 0041 00000000 0x0 0x0 0xffff928000010280 0045 00000000 0x0 0x0 0xffff928000010300 0041 00000000 0x0 0x0 0xffff928000010380 0045 00000000 0x0 0x0 0xffff928000010400 0041 00000000 0x0 0x0 0xffff928000010480 0041 00000000 0x0 0x0 0xffff928000010500 0045 00000000 0x0 0x0 0xffff928000010580 0041 00000000 0x0 0x0 0xffff928000010600 0041 00000000 0x0 0x0 0xffff928000010680 0041 00000000 0x0 0x0 0xffff928000010700 0045 00000000 0x0 0x0 0xffff928000010780 0041 00000000 0x0 0x0 0xffff928000010800 0041 00000000 0x0 0x0 0xffff928000010880 0045 00000000 0x0 0x0 0xffff928000010900 0041 00000000 0x0 0x0 0xffff928000010980 0041 00000000 0x0 0x0 0xffff928000010a00 0041 00000000 0x0 0x0 0xffff928000010a80 0041 00000000 0x0 0x0 0xffff928000010b00 0041 00000000 0x0 0x0 0xffff928000010b80 0041 00000000 0x0 0x0 0xffff928000010c00 0041 00000000 0x0 0x0 0xffff928000010c80 0041 00000000 0x0 0x0 0xffff928000010d00 0041 00000000 0x0 0x0 0xffff928000010d80 0041 00000000 0x0 0x0 0xffff928000010e00 0041 00000000 0x0 0x0 0xffff928000010e80 0041 00000000 0x0 0x0 0xffff928000010f00 0041 00000000 0x0 0x0 0xffff928000010f80 0041 00000000 0x0 0x0 0xffff928000011000 0001 00000000 0x0 0x0 0xffff928000011080 0001 00000000 0x0 0x0 0xffff928000011100 0001 00000000 0x0 0x0 0xffff928000011180 0001 00000000 0x0 0x0 0xffff928000011200 0001 00000000 0x0 0x0 0xffff928000011280 0001 00000000 0x0 0x0 0xffff928000011300 0001 00000000 0x0 0x0 0xffff928000011380 0001 00000000 0x0 0x0 0xffff928000011400 0001 00000000 0x0 0x0 0xffff928000011480 0001 00000000 0x0 0x0 0xffff928000011500 0001 00000000 0x0 0x0 0xffff928000011580 0001 00000000 0x0 0x0 0xffff928000011600 0001 00000000 0x0 0x0 0xffff928000011680 0001 00000000 0x0 0x0 0xffff928000011700 0001 00000000 0x0 0x0 0xffff928000011780 0001 00000000 0x0 0x0 0xffff928000011800 0001 00000000 0x0 0x0 0xffff928000011880 0001 00000000 0x0 0x0 0xffff928000011900 0001 00000000 0x0 0x0 0xffff928000011980 0001 00000000 0x0 0x0 0xffff928000011a00 0001 00000000 0x0 0x0 0xffff928000011a80 0001 00000000 0x0 0x0 0xffff928000011b00 0001 00000000 0x0 0x0 0xffff928000011b80 0001 00000000 0x0 0x0 0xffff928000011c00 0001 00000000 0x0 0x0 0xffff928000011c80 0001 00000000 0x0 0x0 0xffff928000011d00 0001 00000000 0x0 0x0 0xffff928000011d80 0001 00000000 0x0 0x0 0xffff928000011e00 0001 00000000 0x0 0x0 0xffff928000011e80 0001 00000000 0x0 0x0 0xffff928000011f00 0001 00000000 0x0 0x0 0xffff928000011f80 0001 00000000 0x0 0x0 0xffff928000012000 0001 00000000 0x0 0x0 0xffff928000012080 0001 00000000 0x0 0x0 0xffff928000012100 0001 00000000 0x0 0x0 0xffff928000012180 0001 00000000 0x0 0x0 0xffff928000012200 0001 00000000 0x0 0x0 0xffff928000012280 0001 00000000 0x0 0x0 0xffff928000012300 0001 00000000 0x0 0x0 0xffff928000012380 0001 00000000 0x0 0x0 0xffff928000012400 0001 00000000 0x0 0x0 0xffff928000012480 0001 00000000 0x0 0x0 0xffff928000012500 0001 00000000 0x0 0x0 0xffff928000012580 0001 00000000 0x0 0x0 0xffff928000012600 0001 00000000 0x0 0x0 0xffff928000012680 0001 00000000 0x0 0x0 0xffff928000012700 0001 00000000 0x0 0x0 0xffff928000012780 0001 00000000 0x0 0x0 0xffff928000012800 0001 00000000 0x0 0x0 0xffff928000012880 0001 00000000 0x0 0x0 0xffff928000012900 0001 00000000 0x0 0x0 0xffff928000012980 0001 00000000 0x0 0x0 0xffff928000012a00 0001 00000000 0x0 0x0 0xffff928000012a80 0001 00000000 0x0 0x0 0xffff928000012b00 0041 00000000 0x0 0x0 0xffff928000012b80 0045 00000000 0x0 0x0 0xffff928000012c00 0041 00000000 0x0 0x0 0xffff928000012c80 0041 00000000 0x0 0x0 0xffff928000012d00 0041 00000000 0x0 0x0 0xffff928000012d80 0041 00000000 0x0 0x0 0xffff928000012e00 0041 00000000 0x0 0x0 0xffff928000012e80 0041 00000000 0x0 0x0 0xffff928000012f00 0041 00000000 0x0 0x0 0xffff928000012f80 0041 00000000 0x0 0x0 0xffff928000013000 0041 00000000 0x0 0x0 0xffff928000013080 0041 00000000 0x0 0x0 0xffff928000013100 0041 00000000 0x0 0x0 0xffff928000013180 0041 00000000 0x0 0x0 0xffff928000013200 0041 00000000 0x0 0x0 0xffff928000013280 0041 00000000 0x0 0x0 0xffff928000013300 0041 00000000 0x0 0x0 0xffff928000013380 0041 00000000 0x0 0x0 0xffff928000013400 0041 00000000 0x0 0x0 0xffff928000013480 0041 00000000 0x0 0x0 0xffff928000013500 0041 00000000 0x0 0x0 0xffff928000013580 0041 00000000 0x0 0x0 0xffff928000013600 0041 00000000 0x0 0x0 0xffff928000013680 0041 00000000 0x0 0x0 0xffff928000013700 0041 00000000 0x0 0x0 0xffff928000013780 0041 00000000 0x0 0x0 0xffff928000013800 0041 00000000 0x0 0x0 0xffff928000013880 0041 00000000 0x0 0x0 0xffff928000013900 0041 00000000 0x0 0x0 0xffff928000013980 0041 00000000 0x0 0x0 0xffff928000013a00 0041 00000000 0x0 0x0 0xffff928000013a80 0041 00000000 0x0 0x0 0xffff928000013b00 0041 00000000 0x0 0x0 0xffff928000013b80 0041 00000000 0x0 0x0 0xffff928000013c00 0041 00000000 0x0 0x0 0xffff928000013c80 0041 00000000 0x0 0x0 0xffff928000013d00 0041 00000000 0x0 0x0 0xffff928000013d80 0041 00000000 0x0 0x0 0xffff928000013e00 0041 00000000 0x0 0x0 0xffff928000013e80 0041 00000000 0x0 0x0 0xffff928000013f00 0041 00000000 0x0 0x0 0xffff928000013f80 0041 00000000 0x0 0x0 0xffff928000014000 0041 00000000 0x0 0x0 0xffff928000014080 0041 00000000 0x0 0x0 0xffff928000014100 0041 00000000 0x0 0x0 0xffff928000014180 0041 00000000 0x0 0x0 0xffff928000014200 0041 00000000 0x0 0x0 0xffff928000014280 0041 00000000 0x0 0x0 0xffff928000014300 0041 00000000 0x0 0x0 0xffff928000014380 0041 00000000 0x0 0x0 0xffff928000014400 0001 00000000 0x0 0x0 0xffff928000014480 0001 00000000 0x0 0x0 0xffff928000014500 0001 00000000 0x0 0x0 0xffff928000014580 0001 00000000 0x0 0x0 0xffff928000014600 0001 00000000 0x0 0x0 0xffff928000014680 0001 00000000 0x0 0x0 0xffff928000014700 0001 00000000 0x0 0x0 0xffff928000014780 0001 00000000 0x0 0x0 0xffff928000014800 0001 00000000 0x0 0x0 0xffff928000014880 0001 00000000 0x0 0x0 0xffff928000014900 0001 00000000 0x0 0x0 0xffff928000014980 0001 00000000 0x0 0x0 0xffff928000014a00 0001 00000000 0x0 0x0 0xffff928000014a80 0001 00000000 0x0 0x0 0xffff928000014b00 0001 00000000 0x0 0x0 0xffff928000014b80 0001 00000000 0x0 0x0 0xffff928000014c00 0001 00000000 0x0 0x0 0xffff928000014c80 0001 00000000 0x0 0x0 0xffff928000014d00 0001 00000000 0x0 0x0 0xffff928000014d80 0001 00000000 0x0 0x0 0xffff928000014e00 0001 00000000 0x0 0x0 0xffff928000014e80 0001 00000000 0x0 0x0 0xffff928000014f00 0001 00000000 0x0 0x0 0xffff928000014f80 0001 00000000 0x0 0x0 0xffff928000015000 0001 00000000 0x0 0x0 0xffff928000015080 0001 00000000 0x0 0x0 0xffff928000015100 0001 00000000 0x0 0x0 0xffff928000015180 0001 00000000 0x0 0x0 0xffff928000015200 0001 00000000 0x0 0x0 0xffff928000015280 0001 00000000 0x0 0x0 0xffff928000015300 0001 00000000 0x0 0x0 0xffff928000015380 0001 00000000 0x0 0x0 0xffff928000015400 0001 00000000 0x0 0x0 0xffff928000015480 0001 00000000 0x0 0x0 0xffff928000015500 0001 00000000 0x0 0x0 0xffff928000015580 0001 00000000 0x0 0x0 0xffff928000015600 0001 00000000 0x0 0x0 0xffff928000015680 0001 00000000 0x0 0x0 0xffff928000015700 0001 00000000 0x0 0x0 0xffff928000015780 0001 00000000 0x0 0x0 0xffff928000015800 0001 00000000 0x0 0x0 0xffff928000015880 0001 00000000 0x0 0x0 0xffff928000015900 0001 00000000 0x0 0x0 0xffff928000015980 0001 00000000 0x0 0x0 0xffff928000015a00 0001 00000000 0x0 0x0 0xffff928000015a80 0001 00000000 0x0 0x0 0xffff928000015b00 0001 00000000 0x0 0x0 0xffff928000015b80 0001 00000000 0x0 0x0 0xffff928000015c00 0001 00000000 0x0 0x0 0xffff928000015c80 0001 00000000 0x0 0x0 0xffff928000015d00 0001 00000000 0x0 0x0 0xffff928000015d80 0001 00000000 0x0 0x0 0xffff928000015e00 0001 00000000 0x0 0x0 0xffff928000015e80 0001 00000000 0x0 0x0 0xffff928000015f00 0041 00000000 0x0 0x0 0xffff928000015f80 0041 00000000 0x0 0x0 0xffff928000016000 0041 00000000 0x0 0x0 0xffff928000016080 0041 00000000 0x0 0x0 0xffff928000016100 0041 00000000 0x0 0x0 0xffff928000016180 0041 00000000 0x0 0x0 0xffff928000016200 0041 00000000 0x0 0x0 0xffff928000016280 0041 00000000 0x0 0x0 0xffff928000016300 0041 00000000 0x0 0x0 0xffff928000016380 0041 00000000 0x0 0x0 0xffff928000016400 0041 00000000 0x0 0x0 0xffff928000016480 0041 00000000 0x0 0x0 0xffff928000016500 0041 00000000 0x0 0x0 0xffff928000016580 0041 00000000 0x0 0x0 0xffff928000016600 0041 00000000 0x0 0x0 0xffff928000016680 0041 00000000 0x0 0x0 0xffff928000016700 0041 00000000 0x0 0x0 0xffff928000016780 0041 00000000 0x0 0x0 0xffff928000016800 0041 00000000 0x0 0x0 0xffff928000016880 0041 00000000 0x0 0x0 0xffff928000016900 0041 00000000 0x0 0x0 0xffff928000016980 0041 00000000 0x0 0x0 0xffff928000016a00 0041 00000000 0x0 0x0 0xffff928000016a80 0041 00000000 0x0 0x0 0xffff928000016b00 0041 00000000 0x0 0x0 0xffff928000016b80 0041 00000000 0x0 0x0 0xffff928000016c00 0041 00000000 0x0 0x0 0xffff928000016c80 0041 00000000 0x0 0x0 0xffff928000016d00 0041 00000000 0x0 0x0 0xffff928000016d80 0041 00000000 0x0 0x0 0xffff928000016e00 0041 00000000 0x0 0x0 0xffff928000016e80 0041 00000000 0x0 0x0 0xffff928000016f00 0041 00000000 0x0 0x0 0xffff928000016f80 0041 00000000 0x0 0x0 0xffff928000017000 0041 00000000 0x0 0x0 0xffff928000017080 0041 00000000 0x0 0x0 0xffff928000017100 0041 00000000 0x0 0x0 0xffff928000017180 0041 00000000 0x0 0x0 0xffff928000017200 0041 00000000 0x0 0x0 0xffff928000017280 0041 00000000 0x0 0x0 0xffff928000017300 0041 00000000 0x0 0x0 0xffff928000017380 0041 00000000 0x0 0x0 0xffff928000017400 0041 00000000 0x0 0x0 0xffff928000017480 0001 00000000 0x0 0x0 0xffff928000017500 0001 00000000 0x0 0x0 0xffff928000017580 0001 00000000 0x0 0x0 0xffff928000017600 0001 00000000 0x0 0x0 0xffff928000017680 0001 00000000 0x0 0x0 0xffff928000017700 0001 00000000 0x0 0x0 0xffff928000017780 0001 00000000 0x0 0x0 0xffff928000017800 0001 00000000 0x0 0x0 0xffff928000017880 0001 00000000 0x0 0x0 0xffff928000017900 0001 00000000 0x0 0x0 0xffff928000017980 0001 00000000 0x0 0x0 0xffff928000017a00 0001 00000000 0x0 0x0 0xffff928000017a80 0001 00000000 0x0 0x0 0xffff928000017b00 0001 00000000 0x0 0x0 0xffff928000017b80 0001 00000000 0x0 0x0 0xffff928000017c00 0001 00000000 0x0 0x0 0xffff928000017c80 0001 00000000 0x0 0x0 0xffff928000017d00 0001 00000000 0x0 0x0 0xffff928000017d80 0001 00000000 0x0 0x0 0xffff928000017e00 0001 00000000 0x0 0x0 0xffff928000017e80 0001 00000000 0x0 0x0 0xffff928000017f00 0001 00000000 0x0 0x0 0xffff928000017f80 0001 00000000 0x0 0x0 0xffff928000018000 0001 00000000 0x0 0x0 0xffff928000018080 0001 00000000 0x0 0x0 0xffff928000018100 0001 00000000 0x0 0x0 0xffff928000018180 0001 00000000 0x0 0x0 0xffff928000018200 0001 00000000 0x0 0x0 0xffff928000018280 0001 00000000 0x0 0x0 0xffff928000018300 0001 00000000 0x0 0x0 0xffff928000018380 0001 00000000 0x0 0x0 0xffff928000018400 0001 00000000 0x0 0x0 0xffff928000018480 0001 00000000 0x0 0x0 0xffff928000018500 0001 00000000 0x0 0x0 0xffff928000018580 0001 00000000 0x0 0x0 0xffff928000018600 0001 00000000 0x0 0x0 0xffff928000018680 0001 00000000 0x0 0x0 0xffff928000018700 0001 00000000 0x0 0x0 0xffff928000018780 0001 00000000 0x0 0x0 0xffff928000018800 0001 00000000 0x0 0x0 0xffff928000018880 0001 00000000 0x0 0x0 0xffff928000018900 0001 00000000 0x0 0x0 0xffff928000018980 0001 00000000 0x0 0x0 0xffff928000018a00 0001 00000000 0x0 0x0 0xffff928000018a80 0001 00000000 0x0 0x0 0xffff928000018b00 0001 00000000 0x0 0x0 0xffff928000018b80 0001 00000000 0x0 0x0 0xffff928000018c00 0001 00000000 0x0 0x0 0xffff928000018c80 0001 00000000 0x0 0x0 0xffff928000018d00 0001 00000000 0x0 0x0 0xffff928000018d80 0001 00000000 0x0 0x0 0xffff928000018e00 0001 00000000 0x0 0x0 0xffff928000018e80 0001 00000000 0x0 0x0 0xffff928000018f00 0001 00000000 0x0 0x0 0xffff928000018f80 0041 00000000 0x0 0x0 0xffff928000019000 0041 00000000 0x0 0x0 0xffff928000019080 0041 00000000 0x0 0x0 0xffff928000019100 0041 00000000 0x0 0x0 0xffff928000019180 0041 00000000 0x0 0x0 0xffff928000019200 0045 00000000 0x0 0x0 0xffff928000019280 0041 00000000 0x0 0x0 0xffff928000019300 0041 00000000 0x0 0x0 0xffff928000019380 0041 00000000 0x0 0x0 0xffff928000019400 0041 00000000 0x0 0x0 0xffff928000019480 0041 00000000 0x0 0x0 0xffff928000019500 0041 00000000 0x0 0x0 0xffff928000019580 0045 00000000 0x0 0x0 0xffff928000019600 0045 00000000 0x0 0x0 0xffff928000019680 0041 00000000 0x0 0x0 0xffff928000019700 0041 00000000 0x0 0x0 0xffff928000019780 0041 00000000 0x0 0x0 0xffff928000019800 0041 00000000 0x0 0x0 0xffff928000019880 0041 00000000 0x0 0x0 0xffff928000019900 0041 00000000 0x0 0x0 0xffff928000019980 0045 00000000 0x0 0x0 0xffff928000019a00 0045 00000000 0x0 0x0 0xffff928000019a80 0041 00000000 0x0 0x0 0xffff928000019b00 0041 00000000 0x0 0x0 0xffff928000019b80 0041 00000000 0x0 0x0 0xffff928000019c00 0041 00000000 0x0 0x0 0xffff928000019c80 0041 00000000 0x0 0x0 0xffff928000019d00 0041 00000000 0x0 0x0 0xffff928000019d80 0045 00000000 0x0 0x0 0xffff928000019e00 0045 00000000 0x0 0x0 0xffff928000019e80 0041 00000000 0x0 0x0 0xffff928000019f00 0045 00000000 0x0 0x0 0xffff928000019f80 0041 00000000 0x0 0x0 0xffff92800001a000 0041 00000000 0x0 0x0 0xffff92800001a080 0041 00000000 0x0 0x0 0xffff92800001a100 0041 00000000 0x0 0x0 0xffff92800001a180 0045 00000000 0x0 0x0 0xffff92800001a200 0045 00000000 0x0 0x0 0xffff92800001a280 0045 00000000 0x0 0x0 0xffff92800001a300 0045 00000000 0x0 0x0 0xffff92800001a380 0041 00000000 0x0 0x0 0xffff92800001a400 0041 00000000 0x0 0x0 0xffff92800001a480 0041 00000000 0x0 0x0 0xffff92800001a500 0001 00000000 0x0 0x0 0xffff92800001a580 0001 00000000 0x0 0x0 0xffff92800001a600 0001 00000000 0x0 0x0 0xffff92800001a680 0001 00000000 0x0 0x0 0xffff92800001a700 0001 00000000 0x0 0x0 0xffff92800001a780 0001 00000000 0x0 0x0 0xffff92800001a800 0001 00000000 0x0 0x0 0xffff92800001a880 0001 00000000 0x0 0x0 0xffff92800001a900 0001 00000000 0x0 0x0 0xffff92800001a980 0001 00000000 0x0 0x0 0xffff92800001aa00 0001 00000000 0x0 0x0 0xffff92800001aa80 0001 00000000 0x0 0x0 0xffff92800001ab00 0001 00000000 0x0 0x0 0xffff92800001ab80 0001 00000000 0x0 0x0 0xffff92800001ac00 0001 00000000 0x0 0x0 0xffff92800001ac80 0001 00000000 0x0 0x0 0xffff92800001ad00 0001 00000000 0x0 0x0 0xffff92800001ad80 0001 00000000 0x0 0x0 0xffff92800001ae00 0001 00000000 0x0 0x0 0xffff92800001ae80 0001 00000000 0x0 0x0 0xffff92800001af00 0001 00000000 0x0 0x0 0xffff92800001af80 0001 00000000 0x0 0x0 0xffff92800001b000 0001 00000000 0x0 0x0 0xffff92800001b080 0001 00000000 0x0 0x0 0xffff92800001b100 0001 00000000 0x0 0x0 0xffff92800001b180 0001 00000000 0x0 0x0 0xffff92800001b200 0001 00000000 0x0 0x0 0xffff92800001b280 0001 00000000 0x0 0x0 0xffff92800001b300 0001 00000000 0x0 0x0 0xffff92800001b380 0001 00000000 0x0 0x0 0xffff92800001b400 0001 00000000 0x0 0x0 0xffff92800001b480 0001 00000000 0x0 0x0 0xffff92800001b500 0001 00000000 0x0 0x0 0xffff92800001b580 0001 00000000 0x0 0x0 0xffff92800001b600 0001 00000000 0x0 0x0 0xffff92800001b680 0001 00000000 0x0 0x0 0xffff92800001b700 0001 00000000 0x0 0x0 0xffff92800001b780 0001 00000000 0x0 0x0 0xffff92800001b800 0001 00000000 0x0 0x0 0xffff92800001b880 0001 00000000 0x0 0x0 0xffff92800001b900 0001 00000000 0x0 0x0 0xffff92800001b980 0001 00000000 0x0 0x0 0xffff92800001ba00 0001 00000000 0x0 0x0 0xffff92800001ba80 0001 00000000 0x0 0x0 0xffff92800001bb00 0001 00000000 0x0 0x0 0xffff92800001bb80 0001 00000000 0x0 0x0 0xffff92800001bc00 0001 00000000 0x0 0x0 0xffff92800001bc80 0001 00000000 0x0 0x0 0xffff92800001bd00 0001 00000000 0x0 0x0 0xffff92800001bd80 0001 00000000 0x0 0x0 0xffff92800001be00 0001 00000000 0x0 0x0 0xffff92800001be80 0001 00000000 0x0 0x0 0xffff92800001bf00 0001 00000000 0x0 0x0 0xffff92800001bf80 0001 00000000 0x0 0x0 0xffff92800001c000 0001 00000000 0x0 0x0 0xffff92800001c080 0001 00000000 0x0 0x0 0xffff92800001c100 0001 00000000 0x0 0x0 0xffff92800001c180 0001 00000000 0x0 0x0 0xffff92800001c200 0001 00000000 0x0 0x0 0xffff92800001c280 0001 00000000 0x0 0x0 0xffff92800001c300 0001 00000000 0x0 0x0 0xffff92800001c380 0001 00000000 0x0 0x0 0xffff92800001c400 0001 00000000 0x0 0x0 0xffff92800001c480 0001 00000000 0x0 0x0 0xffff92800001c500 0001 00000000 0x0 0x0 0xffff92800001c580 0001 00000000 0x0 0x0 0xffff92800001c600 0001 00000000 0x0 0x0 0xffff92800001c680 0001 00000000 0x0 0x0 0xffff92800001c700 0001 00000000 0x0 0x0 0xffff92800001c780 0001 00000000 0x0 0x0 0xffff92800001c800 0001 00000000 0x0 0x0 0xffff92800001c880 0001 00000000 0x0 0x0 0xffff92800001c900 0001 00000000 0x0 0x0 0xffff92800001c980 0001 00000000 0x0 0x0 0xffff92800001ca00 0001 00000000 0x0 0x0 0xffff92800001ca80 0001 00000000 0x0 0x0 0xffff92800001cb00 0001 00000000 0x0 0x0 0xffff92800001cb80 0001 00000000 0x0 0x0 0xffff92800001cc00 0001 00000000 0x0 0x0 0xffff92800001cc80 0001 00000000 0x0 0x0 0xffff92800001cd00 0001 00000000 0x0 0x0 0xffff92800001cd80 0001 00000000 0x0 0x0 0xffff92800001ce00 0001 00000000 0x0 0x0 0xffff92800001ce80 0001 00000000 0x0 0x0 0xffff92800001cf00 0001 00000000 0x0 0x0 0xffff92800001cf80 0001 00000000 0x0 0x0 0xffff92800001d000 0001 00000000 0x0 0x0 0xffff92800001d080 0001 00000000 0x0 0x0 0xffff92800001d100 0001 00000000 0x0 0x0 0xffff92800001d180 0001 00000000 0x0 0x0 0xffff92800001d200 0001 00000000 0x0 0x0 0xffff92800001d280 0001 00000000 0x0 0x0 0xffff92800001d300 0001 00000000 0x0 0x0 0xffff92800001d380 0001 00000000 0x0 0x0 0xffff92800001d400 0001 00000000 0x0 0x0 0xffff92800001d480 0001 00000000 0x0 0x0 0xffff92800001d500 0001 00000000 0x0 0x0 0xffff92800001d580 0001 00000000 0x0 0x0 0xffff92800001d600 0001 00000000 0x0 0x0 0xffff92800001d680 0001 00000000 0x0 0x0 0xffff92800001d700 0001 00000000 0x0 0x0 0xffff92800001d780 0001 00000000 0x0 0x0 0xffff92800001d800 0001 00000000 0x0 0x0 0xffff92800001d880 0001 00000000 0x0 0x0 0xffff92800001d900 0001 00000000 0x0 0x0 0xffff92800001d980 0001 00000000 0x0 0x0 0xffff92800001da00 0001 00000000 0x0 0x0 0xffff92800001da80 0001 00000000 0x0 0x0 0xffff92800001db00 0001 00000000 0x0 0x0 0xffff92800001db80 0001 00000000 0x0 0x0 0xffff92800001dc00 0001 00000000 0x0 0x0 0xffff92800001dc80 0001 00000000 0x0 0x0 0xffff92800001dd00 0001 00000000 0x0 0x0 0xffff92800001dd80 0001 00000000 0x0 0x0 0xffff92800001de00 0001 00000000 0x0 0x0 0xffff92800001de80 0001 00000000 0x0 0x0 0xffff92800001df00 0001 00000000 0x0 0x0 0xffff92800001df80 0001 00000000 0x0 0x0 0xffff92800001e000 0001 00000000 0x0 0x0 0xffff92800001e080 0001 00000000 0x0 0x0 0xffff92800001e100 0001 00000000 0x0 0x0 0xffff92800001e180 0001 00000000 0x0 0x0 0xffff92800001e200 0001 00000000 0x0 0x0 0xffff92800001e280 0001 00000000 0x0 0x0 0xffff92800001e300 0001 00000000 0x0 0x0 0xffff92800001e380 0001 00000000 0x0 0x0 0xffff92800001e400 0001 00000000 0x0 0x0 0xffff92800001e480 0001 00000000 0x0 0x0 0xffff92800001e500 0001 00000000 0x0 0x0 0xffff92800001e580 0001 00000000 0x0 0x0 0xffff92800001e600 0001 00000000 0x0 0x0 0xffff92800001e680 0001 00000000 0x0 0x0 0xffff92800001e700 0001 00000000 0x0 0x0 0xffff92800001e780 0001 00000000 0x0 0x0 0xffff92800001e800 0001 00000000 0x0 0x0 0xffff92800001e880 0001 00000000 0x0 0x0 0xffff92800001e900 0001 00000000 0x0 0x0 0xffff92800001e980 0001 00000000 0x0 0x0 0xffff92800001ea00 0001 00000000 0x0 0x0 0xffff92800001ea80 0001 00000000 0x0 0x0 0xffff92800001eb00 0001 00000000 0x0 0x0 0xffff92800001eb80 0001 00000000 0x0 0x0 0xffff92800001ec00 0001 00000000 0x0 0x0 0xffff92800001ec80 0001 00000000 0x0 0x0 0xffff92800001ed00 0001 00000000 0x0 0x0 0xffff92800001ed80 0001 00000000 0x0 0x0 0xffff92800001ee00 0001 00000000 0x0 0x0 0xffff92800001ee80 0001 00000000 0x0 0x0 0xffff92800001ef00 0001 00000000 0x0 0x0 0xffff92800001ef80 0001 00000000 0x0 0x0 0xffff92800001f000 0001 00000000 0x0 0x0 0xffff92800001f080 0001 00000000 0x0 0x0 0xffff92800001f100 0001 00000000 0x0 0x0 0xffff92800001f180 0001 00000000 0x0 0x0 0xffff92800001f200 0001 00000000 0x0 0x0 0xffff92800001f280 0001 00000000 0x0 0x0 0xffff92800001f300 0001 00000000 0x0 0x0 0xffff92800001f380 0001 00000000 0x0 0x0 0xffff92800001f400 0001 00000000 0x0 0x0 0xffff92800001f480 0001 00000000 0x0 0x0 0xffff92800001f500 0001 00000000 0x0 0x0 0xffff92800001f580 0001 00000000 0x0 0x0 0xffff92800001f600 0001 00000000 0x0 0x0 0xffff92800001f680 0001 00000000 0x0 0x0 0xffff92800001f700 0001 00000000 0x0 0x0 0xffff92800001f780 0001 00000000 0x0 0x0 0xffff92800001f800 0001 00000000 0x0 0x0 0xffff92800001f880 0001 00000000 0x0 0x0 0xffff92800001f900 0001 00000000 0x0 0x0 0xffff92800001f980 0001 00000000 0x0 0x0 0xffff92800001fa00 0001 00000000 0x0 0x0 0xffff92800001fa80 0001 00000000 0x0 0x0 0xffff92800001fb00 0001 00000000 0x0 0x0 0xffff92800001fb80 0001 00000000 0x0 0x0 0xffff92800001fc00 0001 00000000 0x0 0x0 0xffff92800001fc80 0001 00000000 0x0 0x0 0xffff92800001fd00 0001 00000000 0x0 0x0 0xffff92800001fd80 0001 00000000 0x0 0x0 0xffff92800001fe00 0001 00000000 0x0 0x0 0xffff92800001fe80 0001 00000000 0x0 0x0 0xffff92800001ff00 0001 00000000 0x0 0x0 0xffff92800001ff80 0001 00000000 0x0 0x0 0xffff928000020000 0001 00000000 0x0 0x0 0xffff928000020080 0001 00000000 0x0 0x0 0xffff928000020100 0001 00000000 0x0 0x0 0xffff928000020180 0001 00000000 0x0 0x0 0xffff928000020200 0001 00000000 0x0 0x0 0xffff928000020280 0001 00000000 0x0 0x0 0xffff928000020300 0001 00000000 0x0 0x0 0xffff928000020380 0001 00000000 0x0 0x0 0xffff928000020400 0001 00000000 0x0 0x0 0xffff928000020480 0001 00000000 0x0 0x0 0xffff928000020500 0001 00000000 0x0 0x0 0xffff928000020580 0001 00000000 0x0 0x0 0xffff928000020600 0001 00000000 0x0 0x0 0xffff928000020680 0001 00000000 0x0 0x0 0xffff928000020700 0001 00000000 0x0 0x0 0xffff928000020780 0001 00000000 0x0 0x0 0xffff928000020800 0001 00000000 0x0 0x0 0xffff928000020880 0001 00000000 0x0 0x0 0xffff928000020900 0001 00000000 0x0 0x0 0xffff928000020980 0001 00000000 0x0 0x0 0xffff928000020a00 0001 00000000 0x0 0x0 0xffff928000020a80 0001 00000000 0x0 0x0 0xffff928000020b00 0001 00000000 0x0 0x0 0xffff928000020b80 0001 00000000 0x0 0x0 0xffff928000020c00 0001 00000000 0x0 0x0 0xffff928000020c80 0001 00000000 0x0 0x0 0xffff928000020d00 0001 00000000 0x0 0x0 0xffff928000020d80 0001 00000000 0x0 0x0 0xffff928000020e00 0001 00000000 0x0 0x0 0xffff928000020e80 0001 00000000 0x0 0x0 0xffff928000020f00 0001 00000000 0x0 0x0 0xffff928000020f80 0001 00000000 0x0 0x0 0xffff928000021000 0001 00000000 0x0 0x0 0xffff928000021080 0001 00000000 0x0 0x0 0xffff928000021100 0001 00000000 0x0 0x0 0xffff928000021180 0001 00000000 0x0 0x0 0xffff928000021200 0001 00000000 0x0 0x0 0xffff928000021280 0001 00000000 0x0 0x0 0xffff928000021300 0001 00000000 0x0 0x0 0xffff928000021380 0001 00000000 0x0 0x0 0xffff928000021400 0001 00000000 0x0 0x0 0xffff928000021480 0001 00000000 0x0 0x0 0xffff928000021500 0001 00000000 0x0 0x0 0xffff928000021580 0001 00000000 0x0 0x0 0xffff928000021600 0001 00000000 0x0 0x0 0xffff928000021680 0001 00000000 0x0 0x0 0xffff928000021700 0001 00000000 0x0 0x0 0xffff928000021780 0001 00000000 0x0 0x0 0xffff928000021800 0001 00000000 0x0 0x0 0xffff928000021880 0001 00000000 0x0 0x0 0xffff928000021900 0001 00000000 0x0 0x0 0xffff928000021980 0001 00000000 0x0 0x0 0xffff928000021a00 0001 00000000 0x0 0x0 0xffff928000021a80 0001 00000000 0x0 0x0 0xffff928000021b00 0001 00000000 0x0 0x0 0xffff928000021b80 0001 00000000 0x0 0x0 0xffff928000021c00 0001 00000000 0x0 0x0 0xffff928000021c80 0001 00000000 0x0 0x0 0xffff928000021d00 0001 00000000 0x0 0x0 0xffff928000021d80 0001 00000000 0x0 0x0 0xffff928000021e00 0001 00000000 0x0 0x0 0xffff928000021e80 0001 00000000 0x0 0x0 0xffff928000021f00 0001 00000000 0x0 0x0 0xffff928000021f80 0001 00000000 0x0 0x0 0xffff928000022000 0001 00000000 0x0 0x0 0xffff928000022080 0001 00000000 0x0 0x0 0xffff928000022100 0001 00000000 0x0 0x0 0xffff928000022180 0001 00000000 0x0 0x0 0xffff928000022200 0001 00000000 0x0 0x0 0xffff928000022280 0001 00000000 0x0 0x0 0xffff928000022300 0001 00000000 0x0 0x0 0xffff928000022380 0001 00000000 0x0 0x0 0xffff928000022400 0001 00000000 0x0 0x0 0xffff928000022480 0001 00000000 0x0 0x0 0xffff928000022500 0001 00000000 0x0 0x0 0xffff928000022580 0001 00000000 0x0 0x0 0xffff928000022600 0001 00000000 0x0 0x0 0xffff928000022680 0001 00000000 0x0 0x0 0xffff928000022700 0001 00000000 0x0 0x0 0xffff928000022780 0001 00000000 0x0 0x0 0xffff928000022800 0001 00000000 0x0 0x0 0xffff928000022880 0001 00000000 0x0 0x0 0xffff928000022900 0001 00000000 0x0 0x0 0xffff928000022980 0001 00000000 0x0 0x0 0xffff928000022a00 0001 00000000 0x0 0x0 0xffff928000022a80 0001 00000000 0x0 0x0 0xffff928000022b00 0001 00000000 0x0 0x0 0xffff928000022b80 0001 00000000 0x0 0x0 0xffff928000022c00 0001 00000000 0x0 0x0 0xffff928000022c80 0001 00000000 0x0 0x0 0xffff928000022d00 0001 00000000 0x0 0x0 0xffff928000022d80 0001 00000000 0x0 0x0 0xffff928000022e00 0001 00000000 0x0 0x0 0xffff928000022e80 0001 00000000 0x0 0x0 0xffff928000022f00 0001 00000000 0x0 0x0 0xffff928000022f80 0001 00000000 0x0 0x0 0xffff928000023000 0001 00000000 0x0 0x0 0xffff928000023080 0001 00000000 0x0 0x0 0xffff928000023100 0001 00000000 0x0 0x0 0xffff928000023180 0001 00000000 0x0 0x0 0xffff928000023200 0001 00000000 0x0 0x0 0xffff928000023280 0001 00000000 0x0 0x0 0xffff928000023300 0001 00000000 0x0 0x0 0xffff928000023380 0001 00000000 0x0 0x0 0xffff928000023400 0001 00000000 0x0 0x0 0xffff928000023480 0001 00000000 0x0 0x0 0xffff928000023500 0001 00000000 0x0 0x0 0xffff928000023580 0001 00000000 0x0 0x0 0xffff928000023600 0001 00000000 0x0 0x0 0xffff928000023680 0001 00000000 0x0 0x0 0xffff928000023700 0001 00000000 0x0 0x0 0xffff928000023780 0001 00000000 0x0 0x0 0xffff928000023800 0001 00000000 0x0 0x0 0xffff928000023880 0001 00000000 0x0 0x0 0xffff928000023900 0001 00000000 0x0 0x0 0xffff928000023980 0001 00000000 0x0 0x0 0xffff928000023a00 0001 00000000 0x0 0x0 0xffff928000023a80 0001 00000000 0x0 0x0 0xffff928000023b00 0001 00000000 0x0 0x0 0xffff928000023b80 0001 00000000 0x0 0x0 0xffff928000023c00 0001 00000000 0x0 0x0 0xffff928000023c80 0001 00000000 0x0 0x0 0xffff928000023d00 0001 00000000 0x0 0x0 0xffff928000023d80 0001 00000000 0x0 0x0 0xffff928000023e00 0001 00000000 0x0 0x0 0xffff928000023e80 0001 00000000 0x0 0x0 0xffff928000023f00 0001 00000000 0x0 0x0 0xffff928000023f80 0001 00000000 0x0 0x0 0xffff928000024000 0001 00000000 0x0 0x0 0xffff928000024080 0001 00000000 0x0 0x0 0xffff928000024100 0001 00000000 0x0 0x0 0xffff928000024180 0001 00000000 0x0 0x0 0xffff928000024200 0001 00000000 0x0 0x0 0xffff928000024280 0001 00000000 0x0 0x0 0xffff928000024300 0001 00000000 0x0 0x0 0xffff928000024380 0001 00000000 0x0 0x0 0xffff928000024400 0001 00000000 0x0 0x0 0xffff928000024480 0001 00000000 0x0 0x0 0xffff928000024500 0001 00000000 0x0 0x0 0xffff928000024580 0001 00000000 0x0 0x0 0xffff928000024600 0001 00000000 0x0 0x0 0xffff928000024680 0001 00000000 0x0 0x0 0xffff928000024700 0001 00000000 0x0 0x0 0xffff928000024780 0001 00000000 0x0 0x0 0xffff928000024800 0001 00000000 0x0 0x0 0xffff928000024880 0001 00000000 0x0 0x0 0xffff928000024900 0001 00000000 0x0 0x0 0xffff928000024980 0001 00000000 0x0 0x0 0xffff928000024a00 0001 00000000 0x0 0x0