Warning: Permanently added '10.128.0.224' (ECDSA) to the list of known hosts. 2020/09/08 13:35:25 fuzzer started 2020/09/08 13:35:25 dialing manager at 10.128.0.105:38299 2020/09/08 13:35:25 syscalls: 306 2020/09/08 13:35:25 code coverage: enabled 2020/09/08 13:35:25 comparison tracing: enabled 2020/09/08 13:35:25 extra coverage: enabled 2020/09/08 13:35:25 setuid sandbox: support is not implemented in syzkaller 2020/09/08 13:35:25 namespace sandbox: support is not implemented in syzkaller 2020/09/08 13:35:25 Android sandbox: support is not implemented in syzkaller 2020/09/08 13:35:25 fault injection: enabled 2020/09/08 13:35:25 leak checking: support is not implemented in syzkaller 2020/09/08 13:35:25 net packet injection: support is not implemented in syzkaller 2020/09/08 13:35:25 net device setup: support is not implemented in syzkaller 2020/09/08 13:35:25 concurrency sanitizer: support is not implemented in syzkaller 2020/09/08 13:35:25 devlink PCI setup: support is not implemented in syzkaller 2020/09/08 13:35:25 USB emulation: enabled 2020/09/08 13:35:25 hci packet injection: support is not implemented in syzkaller 13:35:43 executing program 0: profil(0x0, 0x0, 0x0, 0x10001) 13:35:43 executing program 1: mknod(&(0x7f0000000040)='./bus\x00', 0x2080002002, 0x40004000000028ad) r0 = open(&(0x7f0000000100)='./bus\x00', 0x0, 0x0) ioctl$FIONREAD(r0, 0x4004667f, &(0x7f0000000000)) 13:35:43 executing program 2: r0 = socket(0x12, 0x2, 0x0) ioctl$FIOSEEKDATA(r0, 0xc0086661, &(0x7f0000000040)) 13:35:43 executing program 3: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) rename(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00') 13:35:43 executing program 4: mkdir(&(0x7f0000002000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f00000002c0)='./file0\x00') readlink(&(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', 0x0, 0x0) 13:35:44 executing program 5: connect$unix(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="6202e5"], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x2, 0x1, 0x0) bind(r0, &(0x7f0000000000), 0x10) r1 = dup(r0) listen(r1, 0x0) r2 = socket(0x2, 0x1, 0x0) connect$unix(r2, &(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x10) shutdown(r2, 0x2) shutdown(r2, 0x2) 13:35:50 executing program 0: pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) fstatat(r0, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) 13:35:50 executing program 3: connect$unix(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="62020207e0000001"], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x2, 0x2, 0x0) bind(r0, &(0x7f0000000000), 0x10) r1 = socket(0x2, 0x2, 0x0) dup2(r0, r1) connect$unix(r1, &(0x7f0000000000)=ANY=[], 0x10) r2 = socket(0x2, 0x2, 0x0) connect$unix(r2, &(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x10) 13:35:51 executing program 4: mkdir(&(0x7f0000002000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f00000002c0)='./file0\x00') readlink(&(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', 0x0, 0x0) 13:35:51 executing program 1: r0 = socket(0x18, 0x2, 0x0) getsockopt(r0, 0x29, 0x23, 0x0, 0x0) 13:35:51 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) __fstat50(r0, &(0x7f00000000c0)={0x0}) mknod(&(0x7f0000000000)='./file0\x00', 0x4000040002000, r1) r2 = open$dir(&(0x7f0000001240)='./file0\x00', 0x42000400000002c1, 0x0) pwritev(r2, &(0x7f0000000080)=[{0x0}], 0x1, 0x0) 13:35:51 executing program 2: __clock_getres50(0x60000001, 0x0) 13:35:51 executing program 5: r0 = _lwp_self() _lwp_getname(r0, &(0x7f0000001580)=""/3, 0x3) 13:35:51 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) __mount50(&(0x7f0000000100)='procfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) 13:35:51 executing program 3: r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) connect$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) writev(r0, &(0x7f0000001380)=[{0x0}], 0x1) recvmmsg(r0, &(0x7f0000000300)={0x0}, 0x10, 0x1000000000fe, 0x0) 13:35:51 executing program 5: compat_50_mknod(&(0x7f0000000080)='./file0\x00', 0x6131, 0x40001403) acct(&(0x7f0000000040)='./file0\x00') 13:35:51 executing program 2: syz_usb_connect(0x0, 0x15c, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000a5c90a20cf07671100010002000109024a0101000000000904df000a03d7860009050d0c000081010871216b2bcd3a11191a113b13c5b42d934ad3a06ddb9bad4eaef013abde0c0cb1a75818b7c2f4f80f4645608b0325cfa97378a3e3f4cf066d72218adaf6e3723c8a115d90e5d2045516b344f44f5c5499cbeee1c821f87203b615459e680b5fb46a854892599176bfee76d511d72c04550e09050e04100080ff01072501011f020009050903"], 0x0) 13:35:51 executing program 4: _ksem_init(0x0, &(0x7f0000000040)=0x0) _ksem_close(r0) 13:35:51 executing program 0: r0 = socket$inet(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0}, 0x10) 13:35:52 executing program 1: open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) flock(r0, 0x0) 13:35:52 executing program 5: compat_50_mknod(&(0x7f0000000080)='./file0\x00', 0x6131, 0x40001403) acct(&(0x7f0000000040)='./file0\x00') 13:35:52 executing program 0: __nanosleep50(&(0x7f0000000000)={0xfffffffffffffff7}, &(0x7f0000000040)) 13:35:52 executing program 3: socketpair$unix(0x1, 0x200000000000002, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) dup2(r2, r0) recvmsg(r1, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x842) 13:35:52 executing program 4: r0 = open(&(0x7f0000000480)='./file0\x00', 0x80400000000206, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x101, 0x0) r2 = open$dir(&(0x7f0000000000)='./file0\x00', 0x40000400000002c2, 0x0) pwritev(r2, &(0x7f0000000080)=[{&(0x7f00000006c0), 0x100000}], 0x1, 0x0) writev(r1, &(0x7f0000000340)=[{&(0x7f0000000180), 0x81700}], 0x1000000000000013) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x20011, r0, 0x0, 0x0) 13:35:52 executing program 0: pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x3, 0xffffffffffffffff) write(r1, &(0x7f0000000100), 0xfffffe5d) [ 78.2724162] uhub2: device problem, disabling port 1 13:35:53 executing program 3: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) chmod(&(0x7f0000000180)='./file0\x00', 0x23f) setuid(0xee01) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) rename(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000200)='./file0\x00') 13:35:53 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) lchown(&(0x7f00000000c0)='./file0/file0/file0\x00', 0x0, 0xffffffffffffffff) __stat50(&(0x7f0000000080)='./file0/file0/file0\x00', 0x0) 13:35:53 executing program 5: mlockall(0x2) mprotect(&(0x7f0000f60000/0x1000)=nil, 0x1000, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r0, &(0x7f0000000000)={0x0}, 0x10, 0x0, 0x0) ioctl$FIOSEEKHOLE(r0, 0xc0086662, &(0x7f0000000040)=0x1) mprotect(&(0x7f0000f60000/0x2000)=nil, 0x2000, 0x2) pipe2(&(0x7f0000000000), 0x400000) sendmmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0}, 0x10, 0x0, 0x0) compat_43_fstat43(0xffffffffffffffff, &(0x7f0000000100)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r1, &(0x7f0000000000)={0x0}, 0x10, 0x0, 0x0) r2 = semget$private(0x0, 0x4, 0x1da) semctl$GETNCNT(r2, 0x4, 0x3, &(0x7f00000004c0)=""/177) semctl$SETVAL(r2, 0x0, 0x8, &(0x7f0000000240)=0x72) semctl$GETVAL(r2, 0x3, 0x5, &(0x7f0000000640)=""/228) semop(r2, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2) r3 = getgid() getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000480)={0x0, 0x0}, 0xc) semctl$IPC_SET(r2, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r3, r4, r3, 0x0, 0x9}, 0x8, 0x1, 0x9}) setsockopt$sock_cred(r1, 0xffff, 0x11, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, r3}, 0xc) 13:35:54 executing program 1: open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) flock(r0, 0x0) 13:35:54 executing program 2: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) setuid(0xee01) chdir(&(0x7f0000000000)='./file0/file0\x00') 13:35:54 executing program 4: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) poll(&(0x7f0000000300)=[{r1, 0x40}], 0x1, 0x100) pread(0xffffffffffffffff, 0x0, 0x0, 0x0) poll(&(0x7f0000000340)=[{r0, 0x4}], 0x1, 0x8001) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r2, 0xa, 0xffffffffffffffff) 13:35:54 executing program 0: mknod(&(0x7f0000000000)='./bus\x00', 0x800080002002, 0x3d00) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r0, 0xa, 0xffffffffffffffff) [ 79.9124144] uhub2: device problem, disabling port 1 13:35:54 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f000000cfc0), 0x6e) 13:35:54 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x31) compat_50_quotactl(&(0x7f0000000100)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0, 0x0) 13:35:54 executing program 0: r0 = socket(0x18, 0x400000002, 0x0) getpeername$unix(0xffffffffffffffff, 0x0, &(0x7f0000000080)=0x6e) setsockopt(r0, 0x1000000029, 0x26, &(0x7f0000000080), 0x4) 13:35:54 executing program 5: open$dir(&(0x7f0000000000)='./file0\x00', 0x2088611, 0x0) truncate(&(0x7f00000000c0)='./file0\x00', 0x0, 0x100000000) r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x2, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001380)=[{&(0x7f0000001400)=""/4136, 0x1028}], 0x1, 0x0) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000180), 0x81700}], 0x1000000000000013) 13:35:54 executing program 3: open$dir(&(0x7f0000000000)='./file0\x00', 0x200, 0x0) mknod(&(0x7f00000000c0)='./file0/\x00', 0x0, 0x0) 13:35:54 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) __mount50(0x0, &(0x7f0000000080)='./file0\x00', 0xcc4cc761ded67f5a, 0x0, 0x0) 13:35:55 executing program 0: r0 = socket(0x2, 0x2, 0x0) connect$unix(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="82022e"], 0x10) sendmsg$unix(r0, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001440)=[@rights={0x14, 0x7}, @cred={0x3100800a}], 0x18}, 0x0) 13:35:55 executing program 3: accept(0xffffffffffffffff, &(0x7f0000000000), &(0x7f00000000c0)=0x1c) connect$unix(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="6202c1"], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x2, 0x1, 0x0) bind(r0, &(0x7f0000000000), 0x10) r1 = dup(r0) listen(r0, 0x0) setsockopt$sock_int(r0, 0xffff, 0x1001, &(0x7f00000000c0), 0x4) r2 = socket(0x2, 0x1, 0x0) connect$unix(r2, &(0x7f0000000000)=ANY=[], 0x10) r3 = accept$unix(r1, 0x0, 0x0) write(r3, &(0x7f0000000240)="ddee43ab8734abe72e8289e48f848dcae6855abde176689fd16e6ad78a4f273bc1d2e3f3f911c89a2472d11399504870b9fb0e36d8892e80897800000000d20a2c82125431700f50a6b8d22db0ec0ff3a1800280b535084f92a7499cd07afbd1d0b82c439984f338ffbf66decf2ba302619dc2dcef33b15aa3d89beb2b70ddbd84311f09a2639749e5f4c3669169eb4be5a922395a28149f4d2ec0588916c297ac43adfbb5775ab949938e2baef7e6fa3703487dc7cd0255926c0ec9", 0xfffffea5) 13:35:55 executing program 0: r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0}, 0x1c) sendmmsg(r0, &(0x7f00000005c0), 0x1, 0x0, 0x0) 13:35:55 executing program 2: sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f00000013c0)=ANY=[@ANYBLOB="2000000000ebfffffeff0000000000000000095b9d180000002900000031c7456b"], 0x38}, 0x0) r0 = socket(0x18, 0x3, 0x0) connect$unix(r0, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) 13:35:55 executing program 4: r0 = socket(0x1f, 0x5, 0x0) setsockopt$sock_timeval(r0, 0xffff, 0x100c, &(0x7f0000000000), 0x10) 13:35:55 executing program 1: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) _lwp_setname(0x0, 0x0) 13:35:55 executing program 5: open$dir(&(0x7f0000000000)='./file0\x00', 0x2088611, 0x0) truncate(&(0x7f00000000c0)='./file0\x00', 0x0, 0x100000000) r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x2, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001380)=[{&(0x7f0000001400)=""/4136, 0x1028}], 0x1, 0x0) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000180), 0x81700}], 0x1000000000000013) 13:35:55 executing program 1: open$dir(&(0x7f0000000000)='./file0\x00', 0x2088611, 0x0) truncate(&(0x7f0000000100)='./file0\x00', 0x0, 0x100000000) r0 = open(&(0x7f0000000000)='./file0\x00', 0x80400000000206, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x20011, r0, 0x0, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001740)=[{&(0x7f0000000740)=""/4096, 0x400003}], 0x1, 0x0) open(0x0, 0x0, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x0, 0x10, r2, 0x0, 0x0) 13:35:55 executing program 4: fchroot(0xffffffffffffff9c) 13:35:55 executing program 0: r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000001200)={0x3}, 0x8, 0x0) msgsnd(r0, &(0x7f0000000300)={0x1}, 0x8, 0x0) msgrcv(r0, &(0x7f0000000040)={0x0, ""/239}, 0xf7, 0x3, 0x0) 13:35:55 executing program 2: mknod(&(0x7f0000000000)='./bus\x00', 0x80002000, 0x801) open(&(0x7f0000000140)='./bus\x00', 0x10004, 0x0) 13:35:56 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) getsockname$unix(r0, 0x0, 0x0) 13:35:56 executing program 0: mknod(&(0x7f0000000080)='./bus\x00', 0x2000, 0x0) r0 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) ioctl$FIOASYNC(r0, 0x8004747d, &(0x7f0000000000)=0xfcffffff) [ 81.9724116] panic: UBSan: Undefined Behavior in /syzkaller/managers/netbsd-kubsan/kernel/sys/compat/common/tty_43.c:230:48, left shift of negative value -50331649 [ 81.9724116] cpu0: Begin traceback... [ 81.9724116] vpanic() at netbsd:vpanic+0x2d3 [ 81.9724116] isAlreadyReported() at netbsd:isAlreadyReported [ 81.9724116] HandleShiftOutOfBounds() at netbsd:HandleShiftOutOfBounds+0x1e0 [ 81.9724116] compat_43_ttioctl.cold.0() at netbsd:compat_43_ttioctl.cold.0+0x55 [ 81.9724116] ttioctl() at netbsd:ttioctl+0x11e8 [ 81.9724116] comioctl() at netbsd:comioctl+0x18e [ 81.9724116] cdev_ioctl() at netbsd:cdev_ioctl+0x160 [ 81.9724116] cnioctl() at netbsd:cnioctl+0xb2 [ 81.9724116] cdev_ioctl() at netbsd:cdev_ioctl+0x160 [ 81.9724116] spec_ioctl() at netbsd:spec_ioctl+0x2d0 [ 81.9724116] VOP_IOCTL() at netbsd:VOP_IOCTL+0x141 [ 81.9724116] vn_ioctl() at netbsd:vn_ioctl+0x1c7 [ 81.9724116] sys_ioctl() at netbsd:sys_ioctl+0xdaa [ 81.9724116] sys___syscall() at netbsd:sys___syscall+0x1cf [ 81.9724116] syscall() at netbsd:syscall+0x2d5 [ 81.9724116] --- syscall (number 198) --- [ 81.9724116] netbsd:syscall+0x2d5: [ 81.9724116] cpu0: End traceback... [ 81.9724116] fatal breakpoint trap in supervisor mode [ 81.9724116] trap type 1 code 0 rip 0xffffffff80221a85 cs 0x8 rflags 0x246 cr2 0x72af675df6a0 ilevel 0x8 rsp 0xffffd400cb51b260 [ 81.9724116] curlwp 0xffffcf9aaf6f6340 pid 1607.1508 lowest kstack 0xffffd400cb5172c0 Stopped in pid 1607.1508 (syz-executor.0) at netbsd:breakpoint+0x5: leave ? breakpoint() at netbsd:breakpoint+0x5 db_panic() at netbsd:db_panic+0xec vpanic() at netbsd:vpanic+0x2d3 isAlreadyReported() at netbsd:isAlreadyReported HandleShiftOutOfBounds() at netbsd:HandleShiftOutOfBounds+0x1e0 compat_43_ttioctl.cold.0() at netbsd:compat_43_ttioctl.cold.0+0x55 ttioctl() at netbsd:ttioctl+0x11e8 comioctl() at netbsd:comioctl+0x18e cdev_ioctl() at netbsd:cdev_ioctl+0x160 cnioctl() at netbsd:cnioctl+0xb2 cdev_ioctl() at netbsd:cdev_ioctl+0x160 spec_ioctl() at netbsd:spec_ioctl+0x2d0 VOP_IOCTL() at netbsd:VOP_IOCTL+0x141 vn_ioctl() at netbsd:vn_ioctl+0x1c7 sys_ioctl() at netbsd:sys_ioctl+0xdaa sys___syscall() at netbsd:sys___syscall+0x1cf syscall() at netbsd:syscall+0x2d5 --- syscall (number 198) --- netbsd:syscall+0x2d5: Panic string: UBSan: Undefined Behavior in /syzkaller/managers/netbsd-kubsan/kernel/sys/compat/common/tty_43.c:230:48, left shift of negative value -50331649 PID LID S CPU FLAGS STRUCT LWP * NAME WAIT 1607 >1508 7 0 0 ffffcf9aaf6f6340 syz-executor.0 1607 1607 2 0 10000000 ffffcf9ab0747b80 syz-executor.0 714 714 2 0 0 ffffcf9ab0747740 syz-executor.5 1436 1596 2 1 100000 ffffcf9aafafcac0 syz-executor.2 1436 1436 3 0 10040000 ffffcf9aafcd96c0 syz-executor.2 lwpwait 1469 1601 3 0 80 ffffcf9aafb49700 syz-executor.1 parked 1469 1598 2 0 0 ffffcf9aaf3325c0 syz-executor.1 1469 1484 3 1 80 ffffcf9a9f09ba80 syz-executor.1 parked 1469 1469 3 0 10040080 ffffcf9aafafc240 syz-executor.1 nanoslp 419 419 3 0 80 ffffcf9a9f9fa740 syz-executor.5 nanoslp 1074 1074 3 1 c0 ffffcf9aa2f7e580 syz-executor.4 pipe_rd 1079 1079 2 1 40 ffffcf9aa2f7e140 syz-executor.3 1081 1081 3 0 80 ffffcf9aa2542100 syz-executor.2 nanoslp 1069 1069 3 0 80 ffffcf9aa2542980 syz-executor.1 nanoslp 1097 1097 3 0 80 ffffcf9aa2542540 syz-executor.0 nanoslp 1253 1066 3 1 80 ffffcf9aa0c68480 syz-fuzzer parked 1253 >1120 7 1 0 ffffcf9aa04e2bc0 syz-fuzzer 1253 1067 3 1 80 ffffcf9a9f341680 syz-fuzzer parked 1253 1255 3 0 80 ffffcf9a9f341ac0 syz-fuzzer parked 1253 937 2 1 0 ffffcf9a9f341240 syz-fuzzer 1253 1250 3 1 80 ffffcf9a9f09b200 syz-fuzzer parked 1253 1068 2 1 0 ffffcf9a9de4ea00 syz-fuzzer 1253 1253 3 0 80 ffffcf9aa05d7940 syz-fuzzer parked 1118 1118 3 1 80 ffffcf9aa05d7500 sshd select 948 948 3 0 80 ffffcf9aa05d70c0 getty nanoslp 949 949 3 1 80 ffffcf9aa07ce900 getty nanoslp 852 852 3 1 80 ffffcf9a9f452280 getty nanoslp 981 981 3 0 c0 ffffcf9aa07ce080 getty ttyraw 942 942 3 0 80 ffffcf9aa07ce4c0 sshd select 982 982 3 0 80 ffffcf9aa04e2340 powerd kqueue 865 865 3 1 80 ffffcf9aa0c68040 syslogd kqueue 592 592 3 0 80 ffffcf9aa04e2780 dhcpcd poll 590 590 3 1 80 ffffcf9a9f452b00 dhcpcd poll 589 589 3 1 80 ffffcf9a9f4526c0 dhcpcd poll 546 546 3 0 80 ffffcf9a9f9fab80 dhcpcd poll 347 347 3 0 80 ffffcf9a9f9fa300 dhcpcd poll 346 346 3 0 80 ffffcf9a9f7192c0 dhcpcd poll 345 345 3 1 80 ffffcf9a9f719b40 dhcpcd poll 1 1 3 0 80 ffffcf9a96d020c0 init wait 0 1375 5 1 600 ffffcf9aaf9f4640 (zombie) 0 860 3 0 200 ffffcf9a9eefe1c0 physiod physiod 0 166 3 0 200 ffffcf9a9eefea40 ioflush syncer 0 165 3 0 200 ffffcf9a96c26300 pooldrain pooldrain 0 164 3 1 200 ffffcf9a9eefe600 pgdaemon pgdaemon 0 161 3 1 200 ffffcf9a9de4e5c0 usb7 usbevt 0 31 3 1 200 ffffcf9a9de4e180 usb6 usbevt 0 63 3 1 200 ffffcf9a9add19c0 usb5 usbevt 0 126 3 1 200 ffffcf9a9add1580 usb4 usbevt 0 125 3 1 200 ffffcf9a9add1140 usb3 usbevt 0 124 3 0 200 ffffcf9a97d3c980 usb2 usbevt 0 123 3 1 200 ffffcf9a97d3c540 usb1 usbevt 0 122 3 1 200 ffffcf9a97d3c100 usb0 usbevt 0 121 3 1 200 ffffcf9a96d02940 usbtask-dr usbtsk 0 120 3 1 200 ffffcf9a96d02500 usbtask-hc usbtsk 0 119 2 1 240 ffffcf9a9415aac0 npfgc0 0 118 3 1 200 ffffcf9a96c85900 rt_free rt_free 0 117 3 1 200 ffffcf9a96c854c0 unpgc unpgc 0 116 3 0 200 ffffcf9a96c85080 key_timehandler key_timehandler 0 115 3 1 200 ffffcf9a96ca88c0 icmp6_wqinput/1 icmp6_wqinput 0 114 3 0 200 ffffcf9a96ca8480 icmp6_wqinput/0 icmp6_wqinput 0 113 3 0 200 ffffcf9a96ca8040 nd6_timer nd6_timer 0 112 3 1 200 ffffcf9a96c53bc0 carp6_wqinput/1 carp6_wqinput 0 111 3 0 200 ffffcf9a96c53780 carp6_wqinput/0 carp6_wqinput 0 110 3 1 200 ffffcf9a96c53340 carp_wqinput/1 carp_wqinput 0 109 3 0 200 ffffcf9a96c26b80 carp_wqinput/0 carp_wqinput 0 108 3 1 200 ffffcf9a96c09700 icmp_wqinput/1 icmp_wqinput 0 107 3 0 200 ffffcf9a96c09b40 icmp_wqinput/0 icmp_wqinput 0 106 3 0 200 ffffcf9a96c092c0 rt_timer rt_timer 0 105 3 0 200 ffffcf9a96c26740 vmem_rehash vmem_rehash 0 104 3 1 200 ffffcf9a965a8b00 entbutler entropy 0 30 3 1 200 ffffcf9a965a86c0 vioif0_txrx/1 vioif0_txrx 0 29 3 0 200 ffffcf9a965a8280 vioif0_txrx/0 vioif0_txrx 0 27 3 0 200 ffffcf9a9415a680 scsibus0 sccomp 0 26 3 0 200 ffffcf9a9415a240 pms0 pmsreset 0 25 3 1 200 ffffcf9a9408ca80 xcall/1 xcall 0 24 1 1 200 ffffcf9a9408c640 softser/1 0 23 1 1 200 ffffcf9a9408c200 softclk/1 0 22 1 1 200 ffffcf9a94057a40 softbio/1 0 21 1 1 200 ffffcf9a94057600 softnet/1 0 20 1 1 201 ffffcf9a940571c0 idle/1 0 19 3 0 200 ffffcf9ba3f8fa00 lnxpwrwq lnxpwrwq 0 18 3 0 200 ffffcf9ba3f8f5c0 lnxlngwq lnxlngwq 0 17 3 0 200 ffffcf9ba3f8f180 lnxsyswq lnxsyswq 0 16 3 0 200 ffffcf9ba3fa09c0 lnxrcugc lnxrcugc 0 15 3 0 200 ffffcf9ba3fa0580 sysmon smtaskq 0 14 3 0 200 ffffcf9ba3fa0140 pmfsuspend pmfsuspend 0 13 3 0 200 ffffcf9ba3fbb980 pmfevent pmfevent 0 12 3 0 200 ffffcf9ba3fbb540 sopendfree sopendfr 0 11 3 0 200 ffffcf9ba3fbb100 iflnkst iflnkst 0 10 3 0 200 ffffcf9ba4fdc940 nfssilly nfssilly 0 9 3 0 200 ffffcf9ba4fdc500 vdrain vdrain 0 8 3 0 200 ffffcf9ba4fdc0c0 modunload mod_unld 0 7 3 0 200 ffffcf9ba5015900 xcall/0 xcall 0 6 1 0 200 ffffcf9ba50154c0 softser/0 0 5 1 0 200 ffffcf9ba5015080 softclk/0 0 4 1 0 200 ffffcf9ba503f8c0 softbio/0 0 3 1 0 200 ffffcf9ba503f480 softnet/0 0 2 1 0 201 ffffcf9ba503f040 idle/0 0 0 3 0 200 ffffffff85cca5c0 swapper uvm [Locks tracked through LWPs] ****** LWP 1607.1508 (syz-executor.0) @ 0xffffcf9aaf6f6340, l_stat=7 *** Locks held: none *** Locks wanted: * Lock 0 (initialized at module_hook_init) lock address : 0xffffffff860ccb40 type : sleep/adaptive initialized : 0xffffffff831efd50 shared holds : 0 exclusive: 0 shares wanted: 0 exclusive: 0 relevant cpu : 0 last held: 0 relevant lwp : 0xffffcf9aaf6f6340 last held: 000000000000000000 last locked : 000000000000000000 unlocked*: 000000000000000000 owner field : 000000000000000000 wait/spin: 0/0 Turnstile: no active turnstile for this lock. ****** LWP 1469.1598 (syz-executor.1) @ 0xffffcf9aaf3325c0, l_stat=2 *** Locks held: none *** Locks wanted: * Lock 0 (initialized at vcache_alloc) lock address : 0xffffcf9aaef917c0 type : sleep/adaptive initialized : 0xffffffff834a81ce shared holds : 1 exclusive: 0 shares wanted: 0 exclusive: 1 relevant cpu : 0 last held: 0 relevant lwp : 0xffffcf9aaf3325c0 last held: 0xffffcf9a9f09ba80 last locked : 0xffffffff83502381 unlocked*: 0xffffffff83502118 owner/count : 000000000000000000 flags : 0x0000000000000002 Turnstile: no active turnstile for this lock. ****** LWP 590.590 (dhcpcd) @ 0xffffcf9a9f452b00, l_stat=3 *** Locks held: none *** Locks wanted: * Lock 0 (initialized at module_hook_init) lock address : 0xffffffff860ccb40 type : sleep/adaptive initialized : 0xffffffff831efd50 shared holds : 0 exclusive: 0 shares wanted: 0 exclusive: 0 relevant cpu : 1 last held: 0 relevant lwp : 0xffffcf9a9f452b00 last held: 000000000000000000 last locked : 000000000000000000 unlocked*: 000000000000000000 owner field : 000000000000000000 wait/spin: 0/0 Turnstile: no active turnstile for this lock. ****** LWP 589.589 (dhcpcd) @ 0xffffcf9a9f4526c0, l_stat=3 *** Locks held: none *** Locks wanted: * Lock 0 (initialized at module_hook_init) lock address : 0xffffffff860ccb40 type : sleep/adaptive initialized : 0xffffffff831efd50 shared holds : 0 exclusive: 0 shares wanted: 0 exclusive: 0 relevant cpu : 1 last held: 0 relevant lwp : 0xffffcf9a9f4526c0 last held: 000000000000000000 last locked : 000000000000000000 unlocked*: 000000000000000000 owner field : 000000000000000000 wait/spin: 0/0 Turnstile: no active turnstile for this lock. ****** LWP 346.346 (dhcpcd) @ 0xffffcf9a9f7192c0, l_stat=3 *** Locks held: none *** Locks wanted: * Lock 0 (initialized at module_hook_init) lock address : 0xffffffff860ccb40 type : sleep/adaptive initialized : 0xffffffff831efd50 shared holds : 0 exclusive: 0 shares wanted: 0 exclusive: 0 relevant cpu : 0 last held: 0 relevant lwp : 0xffffcf9a9f7192c0 last held: 000000000000000000 last locked : 000000000000000000 unlocked*: 000000000000000000 owner field : 000000000000000000 wait/spin: 0/0 Turnstile: no active turnstile for this lock. ****** LWP 345.345 (dhcpcd) @ 0xffffcf9a9f719b40, l_stat=3 *** Locks held: none *** Locks wanted: * Lock 0 (initialized at module_hook_init) lock address : 0xffffffff860ccb40 type : sleep/adaptive initialized : 0xffffffff831efd50 shared holds : 0 exclusive: 0 shares wanted: 0 exclusive: 0 relevant cpu : 1 last held: 0 relevant lwp : 0xffffcf9a9f719b40 last held: 000000000000000000 last locked : 000000000000000000 unlocked*: 000000000000000000 owner field : 000000000000000000 wait/spin: 0/0 Turnstile: no active turnstile for this lock. ****** LWP 0.11 (iflnkst) @ 0xffffcf9ba3fbb100, l_stat=3 *** Locks held: none *** Locks wanted: * Lock 0 (initialized at module_hook_init) lock address : 0xffffffff860ccb40 type : sleep/adaptive initialized : 0xffffffff831efd50 shared holds : 0 exclusive: 0 shares wanted: 0 exclusive: 0 relevant cpu : 0 last held: 0 relevant lwp : 0xffffcf9ba3fbb100 last held: 000000000000000000 last locked : 000000000000000000 unlocked*: 000000000000000000 owner field : 000000000000000000 wait/spin: 0/0 Turnstile: no active turnstile for this lock. ****** LWP 0.5 (softclk/0) @ 0xffffcf9ba5015080, l_stat=1 *** Locks held: none *** Locks wanted: * Lock 0 (initialized at module_hook_init) lock address : 0xffffffff860ccb40 type : sleep/adaptive initialized : 0xffffffff831efd50 shared holds : 0 exclusive: 0 shares wanted: 0 exclusive: 0 relevant cpu : 0 last held: 0 relevant lwp : 0xffffcf9ba5015080 last held: 000000000000000000 last locked : 000000000000000000 unlocked*: 000000000000000000 owner field : 000000000000000000 wait/spin: 0/0 Turnstile: no active turnstile for this lock. [Locks tracked through CPUs] ******* Locks held on cpu0: * Lock 0 (initialized at main) lock address : 0xffffffff860cca40 type : spin initialized : 0xffffffff839d18bd shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 0 relevant cpu : 0 last held: 0 relevant lwp : 0xffffcf9aaf6f6340 last held: 0xffffcf9aaf6f6340 last locked* : 0xffffffff832d3259 unlocked : 0xffffffff832d2b00 curcpu holds : 2 wanted by: 000000000000000000 * Lock 1 (initialized at tty_init) lock address : 0xffffffff861b8ab0 type : spin initialized : 0xffffffff833bbe25 shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 0 relevant cpu : 0 last held: 0 relevant lwp : 0xffffcf9aaf6f6340 last held: 0xffffcf9aaf6f6340 last locked* : 0xffffffff822e00fb unlocked : 0xffffffff833c417e owner field : 0x0000000000010600 wait/spin: 0/1 PAGE FLAG PQ UOBJECT UANON 0xffffd40000007180 0045 00000000 0x0 0x0 0xffffd40000007200 0045 00000000 0x0 0x0 0xffffd40000007280 0045 00000000 0x0 0x0 0xffffd40000007300 0045 00000000 0x0 0x0 0xffffd40000007380 0045 00000000 0x0 0x0 0xffffd40000007400 0045 00000000 0x0 0x0 0xffffd40000007480 0045 00000000 0x0 0x0 0xffffd40000007500 0045 00000000 0x0 0x0 0xffffd40000007580 0041 00000000 0x0 0x0 0xffffd40000007600 0041 00000000 0x0 0x0 0xffffd40000007680 0041 00000000 0x0 0x0 0xffffd40000007700 0045 00000000 0x0 0x0 0xffffd40000007780 0045 00000000 0x0 0x0 0xffffd40000007800 0045 00000000 0x0 0x0 0xffffd40000007880 0041 00000000 0x0 0x0 0xffffd40000007900 0041 00000000 0x0 0x0 0xffffd40000007980 0041 00000000 0x0 0x0 0xffffd40000007a00 0041 00000000 0x0 0x0 0xffffd40000007a80 0041 00000000 0x0 0x0 0xffffd40000007b00 0041 00000000 0x0 0x0 0xffffd40000007b80 0041 00000000 0x0 0x0 0xffffd40000007c00 0041 00000000 0x0 0x0 0xffffd40000007c80 0041 00000000 0x0 0x0 0xffffd40000007d00 0041 00000000 0x0 0x0 0xffffd40000007d80 0041 00000000 0x0 0x0 0xffffd40000007e00 0041 00000000 0x0 0x0 0xffffd40000007e80 0041 00000000 0x0 0x0 0xffffd40000007f00 0041 00000000 0x0 0x0 0xffffd40000007f80 0041 00000000 0x0 0x0 0xffffd40000008000 0041 00000000 0x0 0x0 0xffffd40000008080 0041 00000000 0x0 0x0 0xffffd40000008100 0041 00000000 0x0 0x0 0xffffd40000008180 0041 00000000 0x0 0x0 0xffffd40000008200 0041 00000000 0x0 0x0 0xffffd40000008280 0041 00000000 0x0 0x0 0xffffd40000008300 0041 00000000 0x0 0x0 0xffffd40000008380 0041 00000000 0x0 0x0 0xffffd40000008400 0041 00000000 0x0 0x0 0xffffd40000008480 0041 00000000 0x0 0x0 0xffffd40000008500 0041 00000000 0x0 0x0 0xffffd40000008580 0041 00000000 0x0 0x0 0xffffd40000008600 0041 00000000 0x0 0x0 0xffffd40000008680 0045 00000000 0x0 0x0 0xffffd40000008700 0041 00000000 0x0 0x0 0xffffd40000008780 0041 00000000 0x0 0x0 0xffffd40000008800 0041 00000000 0x0 0x0 0xffffd40000008880 0041 00000000 0x0 0x0 0xffffd40000008900 0041 00000000 0x0 0x0 0xffffd40000008980 0041 00000000 0x0 0x0 0xffffd40000008a00 0041 00000000 0x0 0x0 0xffffd40000008a80 0041 00000000 0x0 0x0 0xffffd40000008b00 0041 00000000 0x0 0x0 0xffffd40000008b80 0041 00000000 0x0 0x0 0xffffd40000008c00 0041 00000000 0x0 0x0 0xffffd40000008c80 0041 00000000 0x0 0x0 0xffffd40000008d00 0041 00000000 0x0 0x0 0xffffd40000008d80 0041 00000000 0x0 0x0 0xffffd40000008e00 0041 00000000 0x0 0x0 0xffffd40000008e80 0041 00000000 0x0 0x0 0xffffd40000008f00 0045 00000000 0x0 0x0 0xffffd40000008f80 0041 00000000 0x0 0x0 0xffffd40000009000 0041 00000000 0x0 0x0 0xffffd40000009080 0041 00000000 0x0 0x0 0xffffd40000009100 0041 00000000 0x0 0x0 0xffffd40000009180 0041 00000000 0x0 0x0 0xffffd40000009200 0041 00000000 0x0 0x0 0xffffd40000009280 0041 00000000 0x0 0x0 0xffffd40000009300 0041 00000000 0x0 0x0 0xffffd40000009380 0041 00000000 0x0 0x0 0xffffd40000009400 0041 00000000 0x0 0x0 0xffffd40000009480 0041 00000000 0x0 0x0 0xffffd40000009500 0041 00000000 0x0 0x0 0xffffd40000009580 0045 00000000 0x0 0x0 0xffffd40000009600 0041 00000000 0x0 0x0 0xffffd40000009680 0041 00000000 0x0 0x0 0xffffd40000009700 0041 00000000 0x0 0x0 0xffffd40000009780 0041 00000000 0x0 0x0 0xffffd40000009800 0041 00000000 0x0 0x0 0xffffd40000009880 0041 00000000 0x0 0x0 0xffffd40000009900 0041 00000000 0x0 0x0 0xffffd40000009980 0041 00000000 0x0 0x0 0xffffd40000009a00 0041 00000000 0x0 0x0 0xffffd40000009a80 0041 00000000 0x0 0x0 0xffffd40000009b00 0041 00000000 0x0 0x0 0xffffd40000009b80 0041 00000000 0x0 0x0 0xffffd40000009c00 0041 00000000 0x0 0x0 0xffffd40000009c80 0041 00000000 0x0 0x0 0xffffd40000009d00 0041 00000000 0x0 0x0 0xffffd40000009d80 0041 00000000 0x0 0x0 0xffffd40000009e00 0041 00000000 0x0 0x0 0xffffd40000009e80 0041 00000000 0x0 0x0 0xffffd40000009f00 0041 00000000 0x0 0x0 0xffffd40000009f80 0041 00000000 0x0 0x0 0xffffd4000000a000 0041 00000000 0x0 0x0 0xffffd4000000a080 0041 00000000 0x0 0x0 0xffffd4000000a100 0045 00000000 0x0 0x0 0xffffd4000000a180 0041 00000000 0x0 0x0 0xffffd4000000a200 0041 00000000 0x0 0x0 0xffffd4000000a280 0041 00000000 0x0 0x0 0xffffd4000000a300 0041 00000000 0x0 0x0 0xffffd4000000a380 0041 00000000 0x0 0x0 0xffffd4000000a400 0041 00000000 0x0 0x0 0xffffd4000000a480 0041 00000000 0x0 0x0 0xffffd4000000a500 0041 00000000 0x0 0x0 0xffffd4000000a580 0041 00000000 0x0 0x0 0xffffd4000000a600 0041 00000000 0x0 0x0 0xffffd4000000a680 0041 00000000 0x0 0x0 0xffffd4000000a700 0041 00000000 0x0 0x0 0xffffd4000000a780 0041 00000000 0x0 0x0 0xffffd4000000a800 0041 00000000 0x0 0x0 0xffffd4000000a880 0041 00000000 0x0 0x0 0xffffd4000000a900 0041 00000000 0x0 0x0 0xffffd4000000a980 0041 00000000 0x0 0x0 0xffffd4000000aa00 0045 00000000 0x0 0x0 0xffffd4000000aa80 0041 00000000 0x0 0x0 0xffffd4000000ab00 0041 00000000 0x0 0x0 0xffffd4000000ab80 0041 00000000 0x0 0x0 0xffffd4000000ac00 0041 00000000 0x0 0x0 0xffffd4000000ac80 0041 00000000 0x0 0x0 0xffffd4000000ad00 0041 00000000 0x0 0x0 0xffffd4000000ad80 0045 00000000 0x0 0x0 0xffffd4000000ae00 0045 00000000 0x0 0x0 0xffffd4000000ae80 0045 00000000 0x0 0x0 0xffffd4000000af00 0041 00000000 0x0 0x0 0xffffd4000000af80 0041 00000000 0x0 0x0 0xffffd4000000b000 0041 00000000 0x0 0x0 0xffffd4000000b080 0041 00000000 0x0 0x0 0xffffd4000000b100 0041 00000000 0x0 0x0 0xffffd4000000b180 0045 00000000 0x0 0x0 0xffffd4000000b200 0045 00000000 0x0 0x0 0xffffd4000000b280 0045 00000000 0x0 0x0 0xffffd4000000b300 0041 00000000 0x0 0x0 0xffffd4000000b380 0041 00000000 0x0 0x0 0xffffd4000000b400 0041 00000000 0x0 0x0 0xffffd4000000b480 0041 00000000 0x0 0x0 0xffffd4000000b500 0041 00000000 0x0 0x0 0xffffd4000000b580 0045 00000000 0x0 0x0 0xffffd4000000b600 0045 00000000 0x0 0x0 0xffffd4000000b680 0045 00000000 0x0 0x0 0xffffd4000000b700 0041 00000000 0x0 0x0 0xffffd4000000b780 0045 00000000 0x0 0x0 0xffffd4000000b800 0045 00000000 0x0 0x0 0xffffd4000000b880 0041 00000000 0x0 0x0 0xffffd4000000b900 0045 00000000 0x0 0x0 0xffffd4000000b980 0045 00000000 0x0 0x0 0xffffd4000000ba00 0045 00000000 0x0 0x0 0xffffd4000000ba80 0045 00000000 0x0 0x0 0xffffd4000000bb00 0045 00000000 0x0 0x0 0xffffd4000000bb80 0045 00000000 0x0 0x0 0xffffd4000000bc00 0045 00000000 0x0 0x0 0xffffd4000000bc80 0045 00000000 0x0 0x0 0xffffd4000000bd00 0045 00000000 0x0 0x0 0xffffd4000000bd80 0045 00000000 0x0 0x0 0xffffd4000000be00 0041 00000000 0x0 0x0 0xffffd4000000be80 0041 00000000 0x0 0x0 0xffffd4000000bf00 0045 00000000 0x0 0x0 0xffffd4000000bf80 0045 00000000 0x0 0x0 0xffffd4000000c000 0045 00000000 0x0 0x0 0xffffd4000000c080 0045 00000000 0x0 0x0 0xffffd4000000c100 0045 00000000 0x0 0x0 0xffffd4000000c180 0041 00000000 0x0 0x0 0xffffd4000000c200 0041 00000000 0x0 0x0 0xffffd4000000c280 0041 00000000 0x0 0x0 0xffffd4000000c300 0045 00000000 0x0 0x0 0xffffd4000000c380 0045 00000000 0x0 0x0 0xffffd4000000c400 0045 00000000 0x0 0x0 0xffffd4000000c480 0045 00000000 0x0 0x0 0xffffd4000000c500 0045 00000000 0x0 0x0 0xffffd4000000c580 0041 00000000 0x0 0x0 0xffffd4000000c600 0041 00000000 0x0 0x0 0xffffd4000000c680 0041 00000000 0x0 0x0 0xffffd4000000c700 0045 00000000 0x0 0x0 0xffffd4000000c780 0041 00000000 0x0 0x0 0xffffd4000000c800 0045 00000000 0x0 0x0 0xffffd4000000c880 0045 00000000 0x0 0x0 0xffffd4000000c900 0045 00000000 0x0 0x0 0xffffd4000000c980 0041 00000000 0x0 0x0 0xffffd4000000ca00 0041 00000000 0x0 0x0 0xffffd4000000ca80 0041 00000000 0x0 0x0 0xffffd4000000cb00 0041 00000000 0x0 0x0 0xffffd4000000cb80 0041 00000000 0x0 0x0 0xffffd4000000cc00 0041 00000000 0x0 0x0 0xffffd4000000cc80 0045 00000000 0x0 0x0 0xffffd4000000cd00 0041 00000000 0x0 0x0 0xffffd4000000cd80 0041 00000000 0x0 0x0 0xffffd4000000ce00 0041 00000000 0x0 0x0 0xffffd4000000ce80 0041 00000000 0x0 0x0 0xffffd4000000cf00 0041 00000000 0x0 0x0 0xffffd4000000cf80 0041 00000000 0x0 0x0 0xffffd4000000d000 0041 00000000 0x0 0x0 0xffffd4000000d080 0041 00000000 0x0 0x0 0xffffd4000000d100 0041 00000000 0x0 0x0 0xffffd4000000d180 0041 00000000 0x0 0x0 0xffffd4000000d200 0045 00000000 0x0 0x0 0xffffd4000000d280 0045 00000000 0x0 0x0 0xffffd4000000d300 0041 00000000 0x0 0x0 0xffffd4000000d380 0045 00000000 0x0 0x0 0xffffd4000000d400 0041 00000000 0x0 0x0 0xffffd4000000d480 0041 00000000 0x0 0x0 0xffffd4000000d500 0041 00000000 0x0 0x0 0xffffd4000000d580 0045 00000000 0x0 0x0 0xffffd4000000d600 0041 00000000 0x0 0x0 0xffffd4000000d680 0041 00000000 0x0 0x0 0xffffd4000000d700 0045 00000000 0x0 0x0 0xffffd4000000d780 0041 00000000 0x0 0x0 0xffffd4000000d800 0045 00000000 0x0 0x0 0xffffd4000000d880 0041 00000000 0x0 0x0 0xffffd4000000d900 0041 00000000 0x0 0x0 0xffffd4000000d980 0045 00000000 0x0 0x0 0xffffd4000000da00 0041 00000000 0x0 0x0 0xffffd4000000da80 0041 00000000 0x0 0x0 0xffffd4000000db00 0041 00000000 0x0 0x0 0xffffd4000000db80 0045 00000000 0x0 0x0 0xffffd4000000dc00 0041 00000000 0x0 0x0 0xffffd4000000dc80 0041 00000000 0x0 0x0 0xffffd4000000dd00 0045 00000000 0x0 0x0 0xffffd4000000dd80 0041 00000000 0x0 0x0 0xffffd4000000de00 0041 00000000 0x0 0x0 0xffffd4000000de80 0041 00000000 0x0 0x0 0xffffd4000000df00 0041 00000000 0x0 0x0 0xffffd4000000df80 0045 00000000 0x0 0x0 0xffffd4000000e000 0045 00000000 0x0 0x0 0xffffd4000000e080 0045 00000000 0x0 0x0 0xffffd4000000e100 0045 00000000 0x0 0x0 0xffffd4000000e180 0041 00000000 0x0 0x0 0xffffd4000000e200 0041 00000000 0x0 0x0 0xffffd4000000e280 0041 00000000 0x0 0x0 0xffffd4000000e300 0045 00000000 0x0 0x0 0xffffd4000000e380 0045 00000000 0x0 0x0 0xffffd4000000e400 0045 00000000 0x0 0x0 0xffffd4000000e480 0045 00000000 0x0 0x0 0xffffd4000000e500 0041 00000000 0x0 0x0 0xffffd4000000e580 0041 00000000 0x0 0x0 0xffffd4000000e600 0041 00000000 0x0 0x0 0xffffd4000000e680 0041 00000000 0x0 0x0 0xffffd4000000e700 0041 00000000 0x0 0x0 0xffffd4000000e780 0041 00000000 0x0 0x0 0xffffd4000000e800 0045 00000000 0x0 0x0 0xffffd4000000e880 0045 00000000 0x0 0x0 0xffffd4000000e900 0041 00000000 0x0 0x0 0xffffd4000000e980 0041 00000000 0x0 0x0 0xffffd4000000ea00 0041 00000000 0x0 0x0 0xffffd4000000ea80 0041 00000000 0x0 0x0 0xffffd4000000eb00 0045 00000000 0x0 0x0 0xffffd4000000eb80 0041 00000000 0x0 0x0 0xffffd4000000ec00 0041 00000000 0x0 0x0 0xffffd4000000ec80 0041 00000000 0x0 0x0 0xffffd4000000ed00 0045 00000000 0x0 0x0 0xffffd4000000ed80 0041 00000000 0x0 0x0 0xffffd4000000ee00 0041 00000000 0x0 0x0 0xffffd4000000ee80 0041 00000000 0x0 0x0 0xffffd4000000ef00 0041 00000000 0x0 0x0 0xffffd4000000ef80 0041 00000000 0x0 0x0 0xffffd4000000f000 0045 00000000 0x0 0x0 0xffffd4000000f080 0045 00000000 0x0 0x0 0xffffd4000000f100 0041 00000000 0x0 0x0 0xffffd4000000f180 0041 00000000 0x0 0x0 0xffffd4000000f200 0041 00000000 0x0 0x0 0xffffd4000000f280 0045 00000000 0x0 0x0 0xffffd4000000f300 0041 00000000 0x0 0x0 0xffffd4000000f380 0041 00000000 0x0 0x0 0xffffd4000000f400 0041 00000000 0x0 0x0 0xffffd4000000f480 0041 00000000 0x0 0x0 0xffffd4000000f500 0041 00000000 0x0 0x0 0xffffd4000000f580 0041 00000000 0x0 0x0 0xffffd4000000f600 0045 00000000 0x0 0x0 0xffffd4000000f680 0041 00000000 0x0 0x0 0xffffd4000000f700 0041 00000000 0x0 0x0 0xffffd4000000f780 0041 00000000 0x0 0x0 0xffffd4000000f800 0041 00000000 0x0 0x0 0xffffd4000000f880 0041 00000000 0x0 0x0 0xffffd4000000f900 0041 00000000 0x0 0x0 0xffffd4000000f980 0041 00000000 0x0 0x0 0xffffd4000000fa00 0041 00000000 0x0 0x0 0xffffd4000000fa80 0041 00000000 0x0 0x0 0xffffd4000000fb00 0041 00000000 0x0 0x0 0xffffd4000000fb80 0045 00000000 0x0 0x0 0xffffd4000000fc00 0041 00000000 0x0 0x0 0xffffd4000000fc80 0041 00000000 0x0 0x0 0xffffd4000000fd00 0041 00000000 0x0 0x0 0xffffd4000000fd80 0045 00000000 0x0 0x0 0xffffd4000000fe00 0041 00000000 0x0 0x0 0xffffd4000000fe80 0041 00000000 0x0 0x0 0xffffd4000000ff00 0041 00000000 0x0 0x0 0xffffd4000000ff80 0041 00000000 0x0 0x0 0xffffd40000010000 0041 00000000 0x0 0x0 0xffffd40000010080 0041 00000000 0x0 0x0 0xffffd40000010100 0041 00000000 0x0 0x0 0xffffd40000010180 0041 00000000 0x0 0x0 0xffffd40000010200 0041 00000000 0x0 0x0 0xffffd40000010280 0041 00000000 0x0 0x0 0xffffd40000010300 0041 00000000 0x0 0x0 0xffffd40000010380 0041 00000000 0x0 0x0 0xffffd40000010400 0041 00000000 0x0 0x0 0xffffd40000010480 0041 00000000 0x0 0x0 0xffffd40000010500 0041 00000000 0x0 0x0 0xffffd40000010580 0041 00000000 0x0 0x0 0xffffd40000010600 0041 00000000 0x0 0x0 0xffffd40000010680 0041 00000000 0x0 0x0 0xffffd40000010700 0045 00000000 0x0 0x0 0xffffd40000010780 0041 00000000 0x0 0x0 0xffffd40000010800 0045 00000000 0x0 0x0 0xffffd40000010880 0041 00000000 0x0 0x0 0xffffd40000010900 0045 00000000 0x0 0x0 0xffffd40000010980 0041 00000000 0x0 0x0 0xffffd40000010a00 0041 00000000 0x0 0x0 0xffffd40000010a80 0041 00000000 0x0 0x0 0xffffd40000010b00 0041 00000000 0x0 0x0 0xffffd40000010b80 0045 00000000 0x0 0x0 0xffffd40000010c00 0041 00000000 0x0 0x0 0xffffd40000010c80 0041 00000000 0x0 0x0 0xffffd40000010d00 0041 00000000 0x0 0x0 0xffffd40000010d80 0041 00000000 0x0 0x0 0xffffd40000010e00 0041 00000000 0x0 0x0 0xffffd40000010e80 0041 00000000 0x0 0x0 0xffffd40000010f00 0041 00000000 0x0 0x0 0xffffd40000010f80 0041 00000000 0x0 0x0 0xffffd40000011000 0041 00000000 0x0 0x0 0xffffd40000011080 0041 00000000 0x0 0x0 0xffffd40000011100 0041 00000000 0x0 0x0 0xffffd40000011180 0041 00000000 0x0 0x0 0xffffd40000011200 0041 00000000 0x0 0x0 0xffffd40000011280 0041 00000000 0x0 0x0 0xffffd40000011300 0041 00000000 0x0 0x0 0xffffd40000011380 0041 00000000 0x0 0x0 0xffffd40000011400 0041 00000000 0x0 0x0 0xffffd40000011480 0001 00000000 0x0 0x0 0xffffd40000011500 0001 00000000 0x0 0x0 0xffffd40000011580 0001 00000000 0x0 0x0 0xffffd40000011600 0001 00000000 0x0 0x0 0xffffd40000011680 0001 00000000 0x0 0x0 0xffffd40000011700 0001 00000000 0x0 0x0 0xffffd40000011780 0001 00000000 0x0 0x0 0xffffd40000011800 0001 00000000 0x0 0x0 0xffffd40000011880 0001 00000000 0x0 0x0 0xffffd40000011900 0001 00000000 0x0 0x0 0xffffd40000011980 0001 00000000 0x0 0x0 0xffffd40000011a00 0001 00000000 0x0 0x0 0xffffd40000011a80 0001 00000000 0x0 0x0 0xffffd40000011b00 0001 00000000 0x0 0x0 0xffffd40000011b80 0001 00000000 0x0 0x0 0xffffd40000011c00 0001 00000000 0x0 0x0 0xffffd40000011c80 0001 00000000 0x0 0x0 0xffffd40000011d00 0001 00000000 0x0 0x0 0xffffd40000011d80 0001 00000000 0x0 0x0 0xffffd40000011e00 0001 00000000 0x0 0x0 0xffffd40000011e80 0001 00000000 0x0 0x0 0xffffd40000011f00 0001 00000000 0x0 0x0 0xffffd40000011f80 0001 00000000 0x0 0x0 0xffffd40000012000 0001 00000000 0x0 0x0 0xffffd40000012080 0001 00000000 0x0 0x0 0xffffd40000012100 0001 00000000 0x0 0x0 0xffffd40000012180 0001 00000000 0x0 0x0 0xffffd40000012200 0001 00000000 0x0 0x0 0xffffd40000012280 0001 00000000 0x0 0x0 0xffffd40000012300 0001 00000000 0x0 0x0 0xffffd40000012380 0001 00000000 0x0 0x0 0xffffd40000012400 0001 00000000 0x0 0x0 0xffffd40000012480 0001 00000000 0x0 0x0 0xffffd40000012500 0001 00000000 0x0 0x0 0xffffd40000012580 0001 00000000 0x0 0x0 0xffffd40000012600 0001 00000000 0x0 0x0 0xffffd40000012680 0001 00000000 0x0 0x0 0xffffd40000012700 0001 00000000 0x0 0x0 0xffffd40000012780 0001 00000000 0x0 0x0 0xffffd40000012800 0001 00000000 0x0 0x0 0xffffd40000012880 0001 00000000 0x0 0x0 0xffffd40000012900 0001 00000000 0x0 0x0 0xffffd40000012980 0001 00000000 0x0 0x0 0xffffd40000012a00 0001 00000000 0x0 0x0 0xffffd40000012a80 0001 00000000 0x0 0x0 0xffffd40000012b00 0001 00000000 0x0 0x0 0xffffd40000012b80 0001 00000000 0x0 0x0 0xffffd40000012c00 0001 00000000 0x0 0x0 0xffffd40000012c80 0001 00000000 0x0 0x0 0xffffd40000012d00 0001 00000000 0x0 0x0 0xffffd40000012d80 0001 00000000 0x0 0x0 0xffffd40000012e00 0001 00000000 0x0 0x0 0xffffd40000012e80 0001 00000000 0x0 0x0 0xffffd40000012f00 0001 00000000 0x0 0x0 0xffffd40000012f80 0041 00000000 0x0 0x0 0xffffd40000013000 0045 00000000 0x0 0x0 0xffffd40000013080 0041 00000000 0x0 0x0 0xffffd40000013100 0041 00000000 0x0 0x0 0xffffd40000013180 0041 00000000 0x0 0x0 0xffffd40000013200 0041 00000000 0x0 0x0 0xffffd40000013280 0041 00000000 0x0 0x0 0xffffd40000013300 0041 00000000 0x0 0x0 0xffffd40000013380 0041 00000000 0x0 0x0 0xffffd40000013400 0041 00000000 0x0 0x0 0xffffd40000013480 0041 00000000 0x0 0x0 0xffffd40000013500 0041 00000000 0x0 0x0 0xffffd40000013580 0041 00000000 0x0 0x0 0xffffd40000013600 0041 00000000 0x0 0x0 0xffffd40000013680 0041 00000000 0x0 0x0 0xffffd40000013700 0041 00000000 0x0 0x0 0xffffd40000013780 0041 00000000 0x0 0x0 0xffffd40000013800 0041 00000000 0x0 0x0 0xffffd40000013880 0041 00000000 0x0 0x0 0xffffd40000013900 0041 00000000 0x0 0x0 0xffffd40000013980 0041 00000000 0x0 0x0 0xffffd40000013a00 0041 00000000 0x0 0x0 0xffffd40000013a80 0041 00000000 0x0 0x0 0xffffd40000013b00 0041 00000000 0x0 0x0 0xffffd40000013b80 0041 00000000 0x0 0x0 0xffffd40000013c00 0041 00000000 0x0 0x0 0xffffd40000013c80 0041 00000000 0x0 0x0 0xffffd40000013d00 0041 00000000 0x0 0x0 0xffffd40000013d80 0041 00000000 0x0 0x0 0xffffd40000013e00 0041 00000000 0x0 0x0 0xffffd40000013e80 0041 00000000 0x0 0x0 0xffffd40000013f00 0041 00000000 0x0 0x0 0xffffd40000013f80 0041 00000000 0x0 0x0 0xffffd40000014000 0041 00000000 0x0 0x0 0xffffd40000014080 0041 00000000 0x0 0x0 0xffffd40000014100 0041 00000000 0x0 0x0 0xffffd40000014180 0041 00000000 0x0 0x0 0xffffd40000014200 0041 00000000 0x0 0x0 0xffffd40000014280 0041 00000000 0x0 0x0 0xffffd40000014300 0041 00000000 0x0 0x0 0xffffd40000014380 0041 00000000 0x0 0x0 0xffffd40000014400 0041 00000000 0x0 0x0 0xffffd40000014480 0041 00000000 0x0 0x0 0xffffd40000014500 0041 00000000 0x0 0x0 0xffffd40000014580 0041 00000000 0x0 0x0 0xffffd40000014600 0041 00000000 0x0 0x0 0xffffd40000014680 0041 00000000 0x0 0x0 0xffffd40000014700 0041 00000000 0x0 0x0 0xffffd40000014780 0041 00000000 0x0 0x0 0xffffd40000014800 0041 00000000 0x0 0x0 0xffffd40000014880 0001 00000000 0x0 0x0 0xffffd40000014900 0001 00000000 0x0 0x0 0xffffd40000014980 0001 00000000 0x0 0x0 0xffffd40000014a00 0001 00000000 0x0 0x0 0xffffd40000014a80 0001 00000000 0x0 0x0 0xffffd40000014b00 0001 00000000 0x0 0x0 0xffffd40000014b80 0001 00000000 0x0 0x0 0xffffd40000014c00 0001 00000000 0x0 0x0 0xffffd40000014c80 0001 00000000 0x0 0x0 0xffffd40000014d00 0001 00000000 0x0 0x0 0xffffd40000014d80 0001 00000000 0x0 0x0 0xffffd40000014e00 0001 00000000 0x0 0x0 0xffffd40000014e80 0001 00000000 0x0 0x0 0xffffd40000014f00 0001 00000000 0x0 0x0 0xffffd40000014f80 0001 00000000 0x0 0x0 0xffffd40000015000 0001 00000000 0x0 0x0 0xffffd40000015080 0001 00000000 0x0 0x0 0xffffd40000015100 0001 00000000 0x0 0x0 0xffffd40000015180 0001 00000000 0x0 0x0 0xffffd40000015200 0001 00000000 0x0 0x0 0xffffd40000015280 0001 00000000 0x0 0x0 0xffffd40000015300 0001 00000000 0x0 0x0 0xffffd40000015380 0001 00000000 0x0 0x0 0xffffd40000015400 0001 00000000 0x0 0x0 0xffffd40000015480 0001 00000000 0x0 0x0 0xffffd40000015500 0001 00000000 0x0 0x0 0xffffd40000015580 0001 00000000 0x0 0x0 0xffffd40000015600 0001 00000000 0x0 0x0 0xffffd40000015680 0001 00000000 0x0 0x0 0xffffd40000015700 0001 00000000 0x0 0x0 0xffffd40000015780 0001 00000000 0x0 0x0 0xffffd40000015800 0001 00000000 0x0 0x0 0xffffd40000015880 0001 00000000 0x0 0x0 0xffffd40000015900 0001 00000000 0x0 0x0 0xffffd40000015980 0001 00000000 0x0 0x0 0xffffd40000015a00 0001 00000000 0x0 0x0 0xffffd40000015a80 0001 00000000 0x0 0x0 0xffffd40000015b00 0001 00000000 0x0 0x0 0xffffd40000015b80 0001 00000000 0x0 0x0 0xffffd40000015c00 0001 00000000 0x0 0x0 0xffffd40000015c80 0001 00000000 0x0 0x0 0xffffd40000015d00 0001 00000000 0x0 0x0 0xffffd40000015d80 0001 00000000 0x0 0x0 0xffffd40000015e00 0001 00000000 0x0 0x0 0xffffd40000015e80 0001 00000000 0x0 0x0 0xffffd40000015f00 0001 00000000 0x0 0x0 0xffffd40000015f80 0001 00000000 0x0 0x0 0xffffd40000016000 0001 00000000 0x0 0x0 0xffffd40000016080 0001 00000000 0x0 0x0 0xffffd40000016100 0001 00000000 0x0 0x0 0xffffd40000016180 0001 00000000 0x0 0x0 0xffffd40000016200 0001 00000000 0x0 0x0 0xffffd40000016280 0001 00000000 0x0 0x0 0xffffd40000016300 0001 00000000 0x0 0x0 0xffffd40000016380 0041 00000000 0x0 0x0 0xffffd40000016400 0041 00000000 0x0 0x0 0xffffd40000016480 0041 00000000 0x0 0x0 0xffffd40000016500 0041 00000000 0x0 0x0 0xffffd40000016580 0041 00000000 0x0 0x0 0xffffd40000016600 0041 00000000 0x0 0x0 0xffffd40000016680 0041 00000000 0x0 0x0 0xffffd40000016700 0041 00000000 0x0 0x0 0xffffd40000016780 0041 00000000 0x0 0x0 0xffffd40000016800 0041 00000000 0x0 0x0 0xffffd40000016880 0041 00000000 0x0 0x0 0xffffd40000016900 0041 00000000 0x0 0x0 0xffffd40000016980 0041 00000000 0x0 0x0 0xffffd40000016a00 0041 00000000 0x0 0x0 0xffffd40000016a80 0041 00000000 0x0 0x0 0xffffd40000016b00 0041 00000000 0x0 0x0 0xffffd40000016b80 0041 00000000 0x0 0x0 0xffffd40000016c00 0041 00000000 0x0 0x0 0xffffd40000016c80 0041 00000000 0x0 0x0 0xffffd40000016d00 0041 00000000 0x0 0x0 0xffffd40000016d80 0041 00000000 0x0 0x0 0xffffd40000016e00 0041 00000000 0x0 0x0 0xffffd40000016e80 0041 00000000 0x0 0x0 0xffffd40000016f00 0041 00000000 0x0 0x0 0xffffd40000016f80 0041 00000000 0x0 0x0 0xffffd40000017000 0041 00000000 0x0 0x0 0xffffd40000017080 0041 00000000 0x0 0x0 0xffffd40000017100 0041 00000000 0x0 0x0 0xffffd40000017180 0041 00000000 0x0 0x0 0xffffd40000017200 0041 00000000 0x0 0x0 0xffffd40000017280 0041 00000000 0x0 0x0 0xffffd40000017300 0041 00000000 0x0 0x0 0xffffd40000017380 0041 00000000 0x0 0x0 0xffffd40000017400 0041 00000000 0x0 0x0 0xffffd40000017480 0041 00000000 0x0 0x0 0xffffd40000017500 0041 00000000 0x0 0x0 0xffffd40000017580 0041 00000000 0x0 0x0 0xffffd40000017600 0041 00000000 0x0 0x0 0xffffd40000017680 0045 00000000 0x0 0x0 0xffffd40000017700 0041 00000000 0x0 0x0 0xffffd40000017780 0041 00000000 0x0 0x0 0xffffd40000017800 0041 00000000 0x0 0x0 0xffffd40000017880 0001 00000000 0x0 0x0 0xffffd40000017900 0001 00000000 0x0 0x0 0xffffd40000017980 0001 00000000 0x0 0x0 0xffffd40000017a00 0001 00000000 0x0 0x0 0xffffd40000017a80 0001 00000000 0x0 0x0 0xffffd40000017b00 0001 00000000 0x0 0x0 0xffffd40000017b80 0001 00000000 0x0 0x0 0xffffd40000017c00 0001 00000000 0x0 0x0 0xffffd40000017c80 0001 00000000 0x0 0x0 0xffffd40000017d00 0001 00000000 0x0 0x0 0xffffd40000017d80 0001 00000000 0x0 0x0 0xffffd40000017e00 0001 00000000 0x0 0x0 0xffffd40000017e80 0001 00000000 0x0 0x0 0xffffd40000017f00 0001 00000000 0x0 0x0 0xffffd40000017f80 0001 00000000 0x0 0x0 0xffffd40000018000 0001 00000000 0x0 0x0 0xffffd40000018080 0001 00000000 0x0 0x0 0xffffd40000018100 0001 00000000 0x0 0x0 0xffffd40000018180 0001 00000000 0x0 0x0 0xffffd40000018200 0001 00000000 0x0 0x0 0xffffd40000018280 0001 00000000 0x0 0x0 0xffffd40000018300 0001 00000000 0x0 0x0 0xffffd40000018380 0001 00000000 0x0 0x0 0xffffd40000018400 0001 00000000 0x0 0x0 0xffffd40000018480 0001 00000000 0x0 0x0 0xffffd40000018500 0001 00000000 0x0 0x0 0xffffd40000018580 0001 00000000 0x0 0x0 0xffffd40000018600 0001 00000000 0x0 0x0 0xffffd40000018680 0001 00000000 0x0 0x0 0xffffd40000018700 0001 00000000 0x0 0x0 0xffffd40000018780 0001 00000000 0x0 0x0 0xffffd40000018800 0001 00000000 0x0 0x0 0xffffd40000018880 0001 00000000 0x0 0x0 0xffffd40000018900 0001 00000000 0x0 0x0 0xffffd40000018980 0001 00000000 0x0 0x0 0xffffd40000018a00 0001 00000000 0x0 0x0 0xffffd40000018a80 0001 00000000 0x0 0x0 0xffffd40000018b00 0001 00000000 0x0 0x0 0xffffd40000018b80 0001 00000000 0x0 0x0 0xffffd40000018c00 0001 00000000 0x0 0x0 0xffffd40000018c80 0001 00000000 0x0 0x0 0xffffd40000018d00 0001 00000000 0x0 0x0 0xffffd40000018d80 0001 00000000 0x0 0x0 0xffffd40000018e00 0001 00000000 0x0 0x0 0xffffd40000018e80 0001 00000000 0x0 0x0 0xffffd40000018f00 0001 00000000 0x0 0x0 0xffffd40000018f80 0001 00000000 0x0 0x0 0xffffd40000019000 0001 00000000 0x0 0x0 0xffffd40000019080 0001 00000000 0x0 0x0 0xffffd40000019100 0001 00000000 0x0 0x0 0xffffd40000019180 0001 00000000 0x0 0x0 0xffffd40000019200 0001 00000000 0x0 0x0 0xffffd40000019280 0001 00000000 0x0 0x0 0xffffd40000019300 0001 00000000 0x0 0x0 0xffffd40000019380 0041 00000000 0x0 0x0 0xffffd40000019400 0041 00000000 0x0 0x0 0xffffd40000019480 0041 00000000 0x0 0x0 0xffffd40000019500 0041 00000000 0x0 0x0 0xffffd40000019580 0041 00000000 0x0 0x0 0xffffd40000019600 0045 00000000 0x0 0x0 0xffffd40000019680 0045 00000000 0x0 0x0 0xffffd40000019700 0041 00000000 0x0 0x0 0xffffd40000019780 0041 00000000 0x0 0x0 0xffffd40000019800 0041 00000000 0x0 0x0 0xffffd40000019880 0041 00000000 0x0 0x0 0xffffd40000019900 0041 00000000 0x0 0x0 0xffffd40000019980 0041 00000000 0x0 0x0 0xffffd40000019a00 0045 00000000 0x0 0x0 0xffffd40000019a80 0045 00000000 0x0 0x0 0xffffd40000019b00 0041 00000000 0x0 0x0 0xffffd40000019b80 0041 00000000 0x0 0x0 0xffffd40000019c00 0041 00000000 0x0 0x0 0xffffd40000019c80 0041 00000000 0x0 0x0 0xffffd40000019d00 0041 00000000 0x0 0x0 0xffffd40000019d80 0045 00000000 0x0 0x0 0xffffd40000019e00 0045 00000000 0x0 0x0 0xffffd40000019e80 0045 00000000 0x0 0x0 0xffffd40000019f00 0041 00000000 0x0 0x0 0xffffd40000019f80 0045 00000000 0x0 0x0 0xffffd4000001a000 0041 00000000 0x0 0x0 0xffffd4000001a080 0041 00000000 0x0 0x0 0xffffd4000001a100 0041 00000000 0x0 0x0 0xffffd4000001a180 0045 00000000 0x0 0x0 0xffffd4000001a200 0045 00000000 0x0 0x0 0xffffd4000001a280 0045 00000000 0x0 0x0 0xffffd4000001a300 0041 00000000 0x0 0x0 0xffffd4000001a380 0045 00000000 0x0 0x0 0xffffd4000001a400 0041 00000000 0x0 0x0 0xffffd4000001a480 0041 00000000 0x0 0x0 0xffffd4000001a500 0041 00000000 0x0 0x0 0xffffd4000001a580 0045 00000000 0x0 0x0 0xffffd4000001a600 0045 00000000 0x0 0x0 0xffffd4000001a680 0045 00000000 0x0 0x0 0xffffd4000001a700 0045 00000000 0x0 0x0 0xffffd4000001a780 0045 00000000 0x0 0x0 0xffffd4000001a800 0041 00000000 0x0 0x0 0xffffd4000001a880 0001 00000000 0x0 0x0 0xffffd4000001a900 0001 00000000 0x0 0x0 0xffffd4000001a980 0001 00000000 0x0 0x0 0xffffd4000001aa00 0001 00000000 0x0 0x0 0xffffd4000001aa80 0001 00000000 0x0 0x0 0xffffd4000001ab00 0001 00000000 0x0 0x0 0xffffd4000001ab80 0001 00000000 0x0 0x0 0xffffd4000001ac00 0001 00000000 0x0 0x0 0xffffd4000001ac80 0001 00000000 0x0 0x0 0xffffd4000001ad00 0001 00000000 0x0 0x0 0xffffd4000001ad80 0001 00000000 0x0 0x0 0xffffd4000001ae00 0001 00000000 0x0 0x0 0xffffd4000001ae80 0001 00000000 0x0 0x0 0xffffd4000001af00 0001 00000000 0x0 0x0 0xffffd4000001af80 0001 00000000 0x0 0x0 0xffffd4000001b000 0001 00000000 0x0 0x0 0xffffd4000001b080 0001 00000000 0x0 0x0 0xffffd4000001b100 0001 00000000 0x0 0x0 0xffffd4000001b180 0001 00000000 0x0 0x0 0xffffd4000001b200 0001 00000000 0x0 0x0 0xffffd4000001b280 0001 00000000 0x0 0x0 0xffffd4000001b300 0001 00000000 0x0 0x0 0xffffd4000001b380 0001 00000000 0x0 0x0 0xffffd4000001b400 0001 00000000 0x0 0x0 0xffffd4000001b480 0001 00000000 0x0 0x0 0xffffd4000001b500 0001 00000000 0x0 0x0 0xffffd4000001b580 0001 00000000 0x0 0x0 0xffffd4000001b600 0001 00000000 0x0 0x0 0xffffd4000001b680 0001 00000000 0x0 0x0 0xffffd4000001b700 0001 00000000 0x0 0x0 0xffffd4000001b780 0001 00000000 0x0 0x0 0xffffd4000001b800 0001 00000000 0x0 0x0 0xffffd4000001b880 0001 00000000 0x0 0x0 0xffffd4000001b900 0001 00000000 0x0 0x0 0xffffd4000001b980 0001 00000000 0x0 0x0 0xffffd4000001ba00 0001 00000000 0x0 0x0 0xffffd4000001ba80 0001 00000000 0x0 0x0 0xffffd4000001bb00 0001 00000000 0x0 0x0 0xffffd4000001bb80 0001 00000000 0x0 0x0 0xffffd4000001bc00 0001 00000000 0x0 0x0 0xffffd4000001bc80 0001 00000000 0x0 0x0 0xffffd4000001bd00 0001 00000000 0x0 0x0 0xffffd4000001bd80 0001 00000000 0x0 0x0 0xffffd4000001be00 0001 00000000 0x0 0x0 0xffffd4000001be80 0001 00000000 0x0 0x0 0xffffd4000001bf00 0001 00000000 0x0 0x0 0xffffd4000001bf80 0001 00000000 0x0 0x0 0xffffd4000001c000 0001 00000000 0x0 0x0 0xffffd4000001c080 0001 00000000 0x0 0x0 0xffffd4000001c100 0001 00000000 0x0 0x0 0xffffd4000001c180 0001 00000000 0x0 0x0 0xffffd4000001c200 0001 00000000 0x0 0x0 0xffffd4000001c280 0001 00000000 0x0 0x0 0xffffd4000001c300 0001 00000000 0x0 0x0 0xffffd4000001c380 0001 00000000 0x0 0x0 0xffffd4000001c400 0001 00000000 0x0 0x0 0xffffd4000001c480 0001 00000000 0x0 0x0 0xffffd4000001c500 0001 00000000 0x0 0x0 0xffffd4000001c580 0001 00000000 0x0 0x0 0xffffd4000001c600 0001 00000000 0x0 0x0 0xffffd4000001c680 0001 00000000 0x0 0x0 0xffffd4000001c700 0001 00000000 0x0 0x0 0xffffd4000001c780 0001 00000000 0x0 0x0 0xffffd4000001c800 0001 00000000 0x0 0x0 0xffffd4000001c880 0001 00000000 0x0 0x0 0xffffd4000001c900 0001 00000000 0x0 0x0 0xffffd4000001c980 0001 00000000 0x0 0x0 0xffffd4000001ca00 0001 00000000 0x0 0x0 0xffffd4000001ca80 0001 00000000 0x0 0x0 0xffffd4000001cb00 0001 00000000 0x0 0x0 0xffffd4000001cb80 0001 00000000 0x0 0x0 0xffffd4000001cc00 0001 00000000 0x0 0x0 0xffffd4000001cc80 0001 00000000 0x0 0x0 0xffffd4000001cd00 0001 00000000 0x0 0x0 0xffffd4000001cd80 0001 00000000 0x0 0x0 0xffffd4000001ce00 0001 00000000 0x0 0x0 0xffffd4000001ce80 0001 00000000 0x0 0x0 0xffffd4000001cf00 0001 00000000 0x0 0x0 0xffffd4000001cf80 0001 00000000 0x0 0x0 0xffffd4000001d000 0001 00000000 0x0 0x0 0xffffd4000001d080 0001 00000000 0x0 0x0 0xffffd4000001d100 0001 00000000 0x0 0x0 0xffffd4000001d180 0001 00000000 0x0 0x0 0xffffd4000001d200 0001 00000000 0x0 0x0 0xffffd4000001d280 0001 00000000 0x0 0x0 0xffffd4000001d300 0001 00000000 0x0 0x0 0xffffd4000001d380 0001 00000000 0x0 0x0 0xffffd4000001d400 0001 00000000 0x0 0x0 0xffffd4000001d480 0001 00000000 0x0 0x0 0xffffd4000001d500 0001 00000000 0x0 0x0 0xffffd4000001d580 0001 00000000 0x0 0x0