[ 74.2060771] panic: UBSan: Undefined Behavior in /syzkaller/managers/ci2-netbsd-kubsan/kernel/sys/kern/kern_ntptime.c:371:4, signed integer overflow: 5483342340980473983 * 1000 cannot be represented in type 'long int' [ 74.2060771] cpu1: Begin traceback... [ 74.2060771] vpanic() at netbsd:vpanic+0x2d0 sys/kern/subr_prf.c:290 [ 74.2060771] Report() at netbsd:Report+0x3b sys/../common/lib/libc/misc/ubsan.c:1352 [ 74.2060771] HandleOverflow() at netbsd:HandleOverflow+0x1d0 sys/../common/lib/libc/misc/ubsan.c:375 [ 74.2060771] ntp_adjtime1() at netbsd:ntp_adjtime1+0xd84 sys/kern/kern_ntptime.c:371 [ 74.2060771] clockctlioctl() at netbsd:clockctlioctl+0x154 sys/dev/clockctl.c:260 [ 74.2060771] cdev_ioctl() at netbsd:cdev_ioctl+0x15f sys/kern/subr_devsw.c:935 [ 74.2060771] spec_ioctl() at netbsd:spec_ioctl+0x2d3 sys/miscfs/specfs/spec_vnops.c:934 [ 74.2060771] VOP_IOCTL() at netbsd:VOP_IOCTL+0x147 sys/kern/vnode_if.c:883 [ 74.2060771] vn_ioctl() at netbsd:vn_ioctl+0x197 sys/kern/vfs_vnops.c:865 [ 74.2060771] sys_ioctl() at netbsd:sys_ioctl+0xd84 sys/kern/sys_generic.c:673 [ 74.2060771] sys___syscall() at netbsd:sys___syscall+0x1cf sy_call sys/sys/syscallvar.h:66 [inline] [ 74.2060771] sys___syscall() at netbsd:sys___syscall+0x1cf sys/kern/sys_syscall.c:77 [ 74.2060771] syscall() at netbsd:syscall+0x2da sy_call sys/sys/syscallvar.h:65 [inline] [ 74.2060771] syscall() at netbsd:syscall+0x2da sy_invoke sys/sys/syscallvar.h:94 [inline] [ 74.2060771] syscall() at netbsd:syscall+0x2da sys/arch/x86/x86/syscall.c:138 [ 74.2060771] --- syscall (number 198) --- [ 74.2060771] netbsd:syscall+0x2da: [ 74.2060771] cpu1: End traceback... [ 74.2060771] fatal breakpoint trap in supervisor mode [ 74.2060771] trap type 1 code 0 rip 0xffffffff80221a95 cs 0x8 rflags 0x246 cr2 0x62004d ilevel 0x8 rsp 0xffffd880c88d9480 [ 74.2060771] curlwp 0xffff94c5f7da5bc0 pid 3175.2874 lowest kstack 0xffffd880c88d52c0 Stopped in pid 3175.2874 (syz-executor.0) at netbsd:breakpoint+0x5: leave ? breakpoint() at netbsd:breakpoint+0x5 db_panic() at netbsd:db_panic+0xec sys/ddb/db_panic.c:69 vpanic() at netbsd:vpanic+0x2d0 sys/kern/subr_prf.c:290 Report() at netbsd:Report+0x3b sys/../common/lib/libc/misc/ubsan.c:1352 HandleOverflow() at netbsd:HandleOverflow+0x1d0 sys/../common/lib/libc/misc/ubsan.c:375 ntp_adjtime1() at netbsd:ntp_adjtime1+0xd84 sys/kern/kern_ntptime.c:371 clockctlioctl() at netbsd:clockctlioctl+0x154 sys/dev/clockctl.c:260 cdev_ioctl() at netbsd:cdev_ioctl+0x15f sys/kern/subr_devsw.c:935 spec_ioctl() at netbsd:spec_ioctl+0x2d3 sys/miscfs/specfs/spec_vnops.c:934 VOP_IOCTL() at netbsd:VOP_IOCTL+0x147 sys/kern/vnode_if.c:883 vn_ioctl() at netbsd:vn_ioctl+0x197 sys/kern/vfs_vnops.c:865 sys_ioctl() at netbsd:sys_ioctl+0xd84 sys/kern/sys_generic.c:673 sys___syscall() at netbsd:sys___syscall+0x1cf sy_call sys/sys/syscallvar.h:66 [inline] sys___syscall() at netbsd:sys___syscall+0x1cf sys/kern/sys_syscall.c:77 syscall() at netbsd:syscall+0x2da sy_call sys/sys/syscallvar.h:65 [inline] syscall() at netbsd:syscall+0x2da sy_invoke sys/sys/syscallvar.h:94 [inline] syscall() at netbsd:syscall+0x2da sys/arch/x86/x86/syscall.c:138 --- syscall (number 198) --- netbsd:syscall+0x2da: Panic string: UBSan: Undefined Behavior in /syzkaller/managers/ci2-netbsd-kubsan/kernel/sys/kern/kern_ntptime.c:371:4, signed integer overflow: 5483342340980473983 * 1000 cannot be represented in type 'long int' PID LID S CPU FLAGS STRUCT LWP * NAME WAIT 3133 2989 2 1 100100 ffff94c5f372c780 syz-executor.3 3133 3133 3 0 10000000 ffff94c5f45dc540 syz-executor.3 lwpwait 3140 2115 3 0 180 ffff94c5f42568c0 syz-executor.4 parked 3140 3140 2 0 10000000 ffff94c5ff33e4c0 syz-executor.4 3175 >2874 7 1 100 ffff94c5f7da5bc0 syz-executor.0 3175 3175 2 1 10000000 ffff94c5ff33e080 syz-executor.0 3026 3026 2 1 0 ffff94c5fd1638c0 syz-executor.1 2741 2741 3 0 180 ffff94c60092b6c0 syz-executor.0 parked 2906 2906 3 0 180 ffff94c6010d42c0 syz-executor.0 parked 2901 2901 3 0 180 ffff94c6010d4700 syz-executor.0 parked 1448 1448 3 0 180 ffff94c5f342ba80 syz-executor.0 parked 2390 2390 3 0 180 ffff94c600ec5740 syz-executor.0 parked 2768 2768 3 0 180 ffff94c60092b280 syz-executor.0 parked 2612 2612 3 0 180 ffff94c5f7da5340 syz-executor.0 parked 2748 2748 3 1 180 ffff94c600ec5b80 syz-executor.0 parked 2775 2775 3 1 180 ffff94c5f41d8b80 syz-executor.0 parked 2607 2607 3 1 180 ffff94c5ffa2dac0 syz-executor.0 parked 2090 2090 3 0 180 ffff94c5ffa2d240 syz-executor.1 nanoslp 1227 1227 3 0 180 ffff94c5f45dc980 syz-executor.4 nanoslp 1130 1130 3 0 180 ffff94c5f4fde140 syz-executor.3 nanoslp 1075 1075 3 0 180 ffff94c5f50d3a00 syz-executor.0 nanoslp 1078 1223 3 1 1c0 ffff94c5f437f0c0 syz-fuzzer parked 1078 1193 3 0 180 ffff94c5f3467ac0 syz-fuzzer kqueue 1078 >1001 7 0 0 ffff94c5f342b640 syz-fuzzer 1078 1222 3 0 180 ffff94c5f37b8280 syz-fuzzer parked 1078 1107 3 0 180 ffff94c5f57e71c0 syz-fuzzer parked 1078 1054 3 1 180 ffff94c5f3467680 syz-fuzzer parked 1078 1086 3 1 180 ffff94c5f57e7600 syz-fuzzer nanoslp 1078 1078 3 0 180 ffff94c5f342b200 syz-fuzzer parked 1079 1079 3 1 180 ffff94c5f57e7a40 sshd select 1070 1070 3 0 180 ffff94c5f4fde580 getty nanoslp 1126 1126 3 0 180 ffff94c5f50d35c0 getty nanoslp 1068 1068 3 0 180 ffff94c5f31f2600 getty nanoslp 1067 1067 3 0 1c0 ffff94c5f3467240 getty ttyraw 1093 1093 3 1 180 ffff94c5f4fde9c0 sshd select 953 953 3 0 180 ffff94c5f45dc100 powerd kqueue 689 689 3 1 180 ffff94c5f41d8300 syslogd kqueue 739 739 3 1 180 ffff94c5f38c4b40 dhcpcd poll 546 546 3 1 180 ffff94c5f4c78900 dhcpcd poll 600 600 3 1 180 ffff94c5f372cbc0 dhcpcd poll 589 589 3 1 180 ffff94c5f372c340 dhcpcd poll 289 289 3 1 180 ffff94c5f38c4700 dhcpcd poll 288 288 3 1 180 ffff94c5f37b8b00 dhcpcd poll 351 351 3 1 180 ffff94c5f41d8740 dhcpcd poll 1 1 3 0 180 ffff94c5eb086540 init wait 0 2491 5 0 200 ffff94c600ec5300 (zombie) 0 968 3 0 200 ffff94c5f31f2a40 physiod physiod 0 194 3 0 200 ffff94c5f3275a80 pooldrain pooldrain 0 193 3 0 200 ffff94c5f3275640 ioflush syncer 0 192 3 1 200 ffff94c5f3275200 pgdaemon pgdaemon 0 166 3 1 200 ffff94c5f31f21c0 usb7 usbevt 0 165 3 0 200 ffff94c5f0185a00 usb6 usbevt 0 164 3 0 200 ffff94c5f01855c0 usb5 usbevt 0 163 3 1 200 ffff94c5f0185180 usb4 usbevt 0 31 3 1 200 ffff94c5ed1289c0 usb3 usbevt 0 63 3 1 200 ffff94c5ed128580 usb2 usbevt 0 126 3 0 200 ffff94c5ed128140 usb1 usbevt 0 125 3 1 200 ffff94c5ea972b40 usb0 usbevt 0 124 3 1 200 ffff94c5eafdd300 usbtask-dr usbtsk 0 123 3 1 200 ffff94c5ea93d6c0 usbtask-hc usbtsk 0 122 3 1 200 ffff94c5eb086980 npfgc0 npfgcw 0 121 3 1 200 ffff94c5eb086100 rt_free rt_free 0 120 3 1 200 ffff94c5eb061940 unpgc unpgc 0 119 3 0 200 ffff94c5eb061500 key_timehandler key_timehandler 0 118 3 1 200 ffff94c5eb0610c0 icmp6_wqinput/1 icmp6_wqinput 0 117 3 0 200 ffff94c5eb02c900 icmp6_wqinput/0 icmp6_wqinput 0 116 3 0 200 ffff94c5eb02c4c0 nd6_timer nd6_timer 0 115 3 1 200 ffff94c5eb02c080 carp6_wqinput/1 carp6_wqinput 0 114 3 0 200 ffff94c5eb01f8c0 carp6_wqinput/0 carp6_wqinput 0 113 3 1 200 ffff94c5eb01f480 carp_wqinput/1 carp_wqinput 0 112 3 0 200 ffff94c5eb01f040 carp_wqinput/0 carp_wqinput 0 111 3 1 200 ffff94c5eb010bc0 icmp_wqinput/1 icmp_wqinput 0 110 3 0 200 ffff94c5eb010780 icmp_wqinput/0 icmp_wqinput 0 109 3 0 200 ffff94c5eb010340 rt_timer rt_timer 0 108 3 1 200 ffff94c5eafdd740 vmem_rehash vmem_rehash 0 107 3 0 200 ffff94c5eafddb80 entbutler entropy 0 98 3 1 200 ffff94c5ea972700 viomb balloon 0 97 3 1 200 ffff94c5ea9722c0 vioif0_txrx/1 vioif0_txrx 0 96 3 0 200 ffff94c5ea93db00 vioif0_txrx/0 vioif0_txrx 0 29 3 1 200 ffff94c5ea93d280 scsibus0 sccomp 0 28 3 0 200 ffff94c5e93cbac0 pms0 pmsreset 0 27 3 1 200 ffff94c5e93cb680 xcall/1 xcall 0 26 1 1 200 ffff94c5e93cb240 softser/1 0 25 1 1 200 ffff94c5e939ea80 softclk/1 0 24 1 1 200 ffff94c5e939e640 softbio/1 0 23 1 1 200 ffff94c5e939e200 softnet/1 0 22 1 1 201 ffff94c71833ba40 idle/1 0 21 3 1 200 ffff94c71833b600 lnxsyswq lnxsyswq 0 20 3 1 200 ffff94c71833b1c0 lnxubdwq lnxubdwq 0 19 3 1 200 ffff94c718340a00 lnxpwrwq lnxpwrwq 0 18 3 1 200 ffff94c7183405c0 lnxlngwq lnxlngwq 0 17 3 1 200 ffff94c718340180 lnxhipwq lnxhipwq 0 16 3 1 200 ffff94c7183619c0 lnxrcugc lnxrcugc 0 15 3 0 200 ffff94c718361580 sysmon smtaskq 0 14 3 1 200 ffff94c718361140 pmfsuspend pmfsuspend 0 13 3 0 200 ffff94c71836a980 pmfevent pmfevent 0 12 3 1 200 ffff94c71836a540 sopendfree sopendfr 0 11 3 0 200 ffff94c71836a100 iflnkst iflnkst 0 10 3 1 200 ffff94c71939b940 nfssilly nfssilly 0 9 3 0 200 ffff94c71939b500 vdrain vdrain 0 8 3 1 200 ffff94c71939b0c0 modunload mod_unld 0 7 3 0 200 ffff94c7193c6900 xcall/0 xcall 0 6 1 0 200 ffff94c7193c64c0 softser/0 0 5 1 0 200 ffff94c7193c6080 softclk/0 0 4 1 0 200 ffff94c7193f38c0 softbio/0 0 3 1 0 200 ffff94c7193f3480 softnet/0 0 2 1 0 201 ffff94c7193f3040 idle/0 0 0 3 0 200 ffffffff8652f6c0 swapper uvm [Locks tracked through LWPs] ****** LWP 3140.3140 (syz-executor.4) @ 0xffff94c5ff33e4c0, l_stat=2 *** Locks held: * Lock 0 (initialized at amap_alloc1) lock address : 0xffff94c5f7955b00 type : sleep/adaptive initialized : 0xffffffff8357314a shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 0 relevant cpu : 0 last held: 0 relevant lwp : 0xffff94c5ff33e4c0 last held: 0xffff94c5ff33e4c0 last locked* : 0xffffffff8359752e unlocked : 0xffffffff83594eb9 owner/count : 0xffff94c5ff33e4c0 flags : 0x0000000000000004 Turnstile: no active turnstile for this lock. * Lock 1 (initialized at pmap_ctor) lock address : 0xffff94c5f4c60d80 type : sleep/adaptive initialized : 0xffffffff80fdabed shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 0 relevant cpu : 0 last held: 0 relevant lwp : 0xffff94c5ff33e4c0 last held: 0xffff94c5ff33e4c0 last locked* : 0xffffffff80fda7cb unlocked : 0xffffffff80fdd9d3 owner field : 0xffff94c5ff33e4c0 wait/spin: 0/0 Turnstile: no active turnstile for this lock. *** Locks wanted: none ****** LWP 3026.3026 (syz-executor.1) @ 0xffff94c5fd1638c0, l_stat=2 *** Locks held: none *** Locks wanted: * Lock 0 (initialized at file_ctor) lock address : 0xffff94c5f5c61930 type : sleep/adaptive initialized : 0xffffffff8364a675 shared holds : 0 exclusive: 0 shares wanted: 0 exclusive: 1 relevant cpu : 1 last held: 0 relevant lwp : 0xffff94c5fd1638c0 last held: 000000000000000000 last locked : 0xffffffff83655801 unlocked*: 0xffffffff8365585f owner field : 0xffff94c5fd1638c0 wait/spin: 0/0 Turnstile: no active turnstile for this lock. ****** LWP 1078.1001 (syz-fuzzer) @ 0xffff94c5f342b640, l_stat=7 *** Locks held: * Lock 0 (initialized at amap_alloc1) lock address : 0xffff94c5f34c9cc0 type : sleep/adaptive initialized : 0xffffffff8357314a shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 0 relevant cpu : 0 last held: 0 relevant lwp : 0xffff94c5f342b640 last held: 0xffff94c5f342b640 last locked* : 0xffffffff8359752e unlocked : 0xffffffff83594eb9 owner/count : 000000000000000000 flags : 000000000000000000 Turnstile: no active turnstile for this lock. *** Locks wanted: * Lock 0 (initialized at pmap_ctor) lock address : 0xffff94c5f3976d80 type : sleep/adaptive initialized : 0xffffffff80fdabed shared holds : 0 exclusive: 0 shares wanted: 0 exclusive: 1 relevant cpu : 0 last held: 0 relevant lwp : 0xffff94c5f342b640 last held: 000000000000000000 last locked : 0xffffffff80fdd2f6 unlocked*: 0xffffffff80fdd9d3 owner field : 000000000000000000 wait/spin: 0/0 Turnstile: no active turnstile for this lock. ****** LWP 546.546 (dhcpcd) @ 0xffff94c5f4c78900, l_stat=3 *** Locks held: none *** Locks wanted: * Lock 0 (initialized at module_hook_init) lock address : 0xffffffff869bcd00 type : sleep/adaptive initialized : 0xffffffff836cef27 shared holds : 0 exclusive: 0 shares wanted: 0 exclusive: 0 relevant cpu : 1 last held: 0 relevant lwp : 0xffff94c5f4c78900 last held: 000000000000000000 last locked : 000000000000000000 unlocked*: 000000000000000000 owner field : 000000000000000000 wait/spin: 0/0 Turnstile: no active turnstile for this lock. ****** LWP 600.600 (dhcpcd) @ 0xffff94c5f372cbc0, l_stat=3 *** Locks held: none *** Locks wanted: * Lock 0 (initialized at module_hook_init) lock address : 0xffffffff869bcd00 type : sleep/adaptive initialized : 0xffffffff836cef27 shared holds : 0 exclusive: 0 shares wanted: 0 exclusive: 0 relevant cpu : 1 last held: 0 relevant lwp : 0xffff94c5f372cbc0 last held: 000000000000000000 last locked : 000000000000000000 unlocked*: 000000000000000000 owner field : 000000000000000000 wait/spin: 0/0 Turnstile: no active turnstile for this lock. ****** LWP 288.288 (dhcpcd) @ 0xffff94c5f37b8b00, l_stat=3 *** Locks held: none *** Locks wanted: * Lock 0 (initialized at module_hook_init) lock address : 0xffffffff869bcd00 type : sleep/adaptive initialized : 0xffffffff836cef27 shared holds : 0 exclusive: 0 shares wanted: 0 exclusive: 0 relevant cpu : 1 last held: 0 relevant lwp : 0xffff94c5f37b8b00 last held: 000000000000000000 last locked : 000000000000000000 unlocked*: 000000000000000000 owner field : 000000000000000000 wait/spin: 0/0 Turnstile: no active turnstile for this lock. ****** LWP 351.351 (dhcpcd) @ 0xffff94c5f41d8740, l_stat=3 *** Locks held: none *** Locks wanted: * Lock 0 (initialized at module_hook_init) lock address : 0xffffffff869bcd00 type : sleep/adaptive initialized : 0xffffffff836cef27 shared holds : 0 exclusive: 0 shares wanted: 0 exclusive: 0 relevant cpu : 1 last held: 0 relevant lwp : 0xffff94c5f41d8740 last held: 000000000000000000 last locked : 000000000000000000 unlocked*: 000000000000000000 owner field : 000000000000000000 wait/spin: 0/0 Turnstile: no active turnstile for this lock. ****** LWP 0.25 (softclk/1) @ 0xffff94c5e939ea80, l_stat=1 *** Locks held: none *** Locks wanted: * Lock 0 (initialized at module_hook_init) lock address : 0xffffffff869bcd00 type : sleep/adaptive initialized : 0xffffffff836cef27 shared holds : 0 exclusive: 0 shares wanted: 0 exclusive: 0 relevant cpu : 1 last held: 0 relevant lwp : 0xffff94c5e939ea80 last held: 000000000000000000 last locked : 000000000000000000 unlocked*: 000000000000000000 owner field : 000000000000000000 wait/spin: 0/0 Turnstile: no active turnstile for this lock. ****** LWP 0.11 (iflnkst) @ 0xffff94c71836a100, l_stat=3 *** Locks held: none *** Locks wanted: * Lock 0 (initialized at module_hook_init) lock address : 0xffffffff869bcd00 type : sleep/adaptive initialized : 0xffffffff836cef27 shared holds : 0 exclusive: 0 shares wanted: 0 exclusive: 0 relevant cpu : 0 last held: 0 relevant lwp : 0xffff94c71836a100 last held: 000000000000000000 last locked : 000000000000000000 unlocked*: 000000000000000000 owner field : 000000000000000000 wait/spin: 0/0 Turnstile: no active turnstile for this lock. ****** LWP 0.0 (swapper) @ 0xffffffff8652f6c0, l_stat=3 *** Locks held: none *** Locks wanted: * Lock 0 (initialized at module_hook_init) lock address : 0xffffffff869bcd00 type : sleep/adaptive initialized : 0xffffffff836cef27 shared holds : 0 exclusive: 0 shares wanted: 0 exclusive: 0 relevant cpu : 0 last held: 0 relevant lwp : 0xffffffff8652f6c0 last held: 000000000000000000 last locked : 000000000000000000 unlocked*: 000000000000000000 owner field : 000000000000000000 wait/spin: 0/0 Turnstile: no active turnstile for this lock. [Locks tracked through CPUs] ******* Locks held on cpu1: * Lock 0 (initialized at main) lock address : 0xffffffff869bcc00 type : spin initialized : 0xffffffff83fab316 shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 0 relevant cpu : 1 last held: 1 relevant lwp : 0xffff94c5f7da5bc0 last held: 0xffff94c5f7da5bc0 last locked* : 0xffffffff837b9efa unlocked : 0xffffffff837b9798 curcpu holds : 1 wanted by: 000000000000000000 * Lock 1 (initialized at inittimecounter) lock address : 0xffffffff86a8dce0 type : spin initialized : 0xffffffff8375f0c8 shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 0 relevant cpu : 1 last held: 1 relevant lwp : 0xffff94c5f7da5bc0 last held: 0xffff94c5f7da5bc0 last locked* : 0xffffffff836d807f unlocked : 0xffffffff8375f018 owner field : 0x0000000000010800 wait/spin: 0/1 PAGE FLAG PQ UOBJECT UANON 0xffffd88000007180 0045 00000000 0x0 0x0 0xffffd88000007200 0045 00000000 0x0 0x0 0xffffd88000007280 0045 00000000 0x0 0x0 0xffffd88000007300 0045 00000000 0x0 0x0 0xffffd88000007380 0045 00000000 0x0 0x0 0xffffd88000007400 0045 00000000 0x0 0x0 0xffffd88000007480 0045 00000000 0x0 0x0 0xffffd88000007500 0045 00000000 0x0 0x0 0xffffd88000007580 0045 00000000 0x0 0x0 0xffffd88000007600 0041 00000000 0x0 0x0 0xffffd88000007680 0041 00000000 0x0 0x0 0xffffd88000007700 0041 00000000 0x0 0x0 0xffffd88000007780 0041 00000000 0x0 0x0 0xffffd88000007800 0041 00000000 0x0 0x0 0xffffd88000007880 0045 00000000 0x0 0x0 0xffffd88000007900 0045 00000000 0x0 0x0 0xffffd88000007980 0041 00000000 0x0 0x0 0xffffd88000007a00 0041 00000000 0x0 0x0 0xffffd88000007a80 0041 00000000 0x0 0x0 0xffffd88000007b00 0041 00000000 0x0 0x0 0xffffd88000007b80 0041 00000000 0x0 0x0 0xffffd88000007c00 0041 00000000 0x0 0x0 0xffffd88000007c80 0041 00000000 0x0 0x0 0xffffd88000007d00 0041 00000000 0x0 0x0 0xffffd88000007d80 0041 00000000 0x0 0x0 0xffffd88000007e00 0041 00000000 0x0 0x0 0xffffd88000007e80 0041 00000000 0x0 0x0 0xffffd88000007f00 0041 00000000 0x0 0x0 0xffffd88000007f80 0041 00000000 0x0 0x0 0xffffd88000008000 0041 00000000 0x0 0x0 0xffffd88000008080 0041 00000000 0x0 0x0 0xffffd88000008100 0041 00000000 0x0 0x0 0xffffd88000008180 0041 00000000 0x0 0x0 0xffffd88000008200 0041 00000000 0x0 0x0 0xffffd88000008280 0041 00000000 0x0 0x0 0xffffd88000008300 0041 00000000 0x0 0x0 0xffffd88000008380 0041 00000000 0x0 0x0 0xffffd88000008400 0041 00000000 0x0 0x0 0xffffd88000008480 0041 00000000 0x0 0x0 0xffffd88000008500 0041 00000000 0x0 0x0 0xffffd88000008580 0041 00000000 0x0 0x0 0xffffd88000008600 0041 00000000 0x0 0x0 0xffffd88000008680 0041 00000000 0x0 0x0 0xffffd88000008700 0041 00000000 0x0 0x0 0xffffd88000008780 0041 00000000 0x0 0x0 0xffffd88000008800 0041 00000000 0x0 0x0 0xffffd88000008880 0041 00000000 0x0 0x0 0xffffd88000008900 0041 00000000 0x0 0x0 0xffffd88000008980 0041 00000000 0x0 0x0 0xffffd88000008a00 0041 00000000 0x0 0x0 0xffffd88000008a80 0041 00000000 0x0 0x0 0xffffd88000008b00 0041 00000000 0x0 0x0 0xffffd88000008b80 0045 00000000 0x0 0x0 0xffffd88000008c00 0045 00000000 0x0 0x0 0xffffd88000008c80 0041 00000000 0x0 0x0 0xffffd88000008d00 0041 00000000 0x0 0x0 0xffffd88000008d80 0041 00000000 0x0 0x0 0xffffd88000008e00 0041 00000000 0x0 0x0 0xffffd88000008e80 0041 00000000 0x0 0x0 0xffffd88000008f00 0041 00000000 0x0 0x0 0xffffd88000008f80 0041 00000000 0x0 0x0 0xffffd88000009000 0041 00000000 0x0 0x0 0xffffd88000009080 0041 00000000 0x0 0x0 0xffffd88000009100 0041 00000000 0x0 0x0 0xffffd88000009180 0041 00000000 0x0 0x0 0xffffd88000009200 0041 00000000 0x0 0x0 0xffffd88000009280 0041 00000000 0x0 0x0 0xffffd88000009300 0041 00000000 0x0 0x0 0xffffd88000009380 0041 00000000 0x0 0x0 0xffffd88000009400 0041 00000000 0x0 0x0 0xffffd88000009480 0045 00000000 0x0 0x0 0xffffd88000009500 0041 00000000 0x0 0x0 0xffffd88000009580 0041 00000000 0x0 0x0 0xffffd88000009600 0041 00000000 0x0 0x0 0xffffd88000009680 0041 00000000 0x0 0x0 0xffffd88000009700 0041 00000000 0x0 0x0 0xffffd88000009780 0041 00000000 0x0 0x0 0xffffd88000009800 0041 00000000 0x0 0x0 0xffffd88000009880 0041 00000000 0x0 0x0 0xffffd88000009900 0041 00000000 0x0 0x0 0xffffd88000009980 0041 00000000 0x0 0x0 0xffffd88000009a00 0041 00000000 0x0 0x0 0xffffd88000009a80 0041 00000000 0x0 0x0 0xffffd88000009b00 0041 00000000 0x0 0x0 0xffffd88000009b80 0041 00000000 0x0 0x0 0xffffd88000009c00 0041 00000000 0x0 0x0 0xffffd88000009c80 0041 00000000 0x0 0x0 0xffffd88000009d00 0041 00000000 0x0 0x0 0xffffd88000009d80 0041 00000000 0x0 0x0 0xffffd88000009e00 0041 00000000 0x0 0x0 0xffffd88000009e80 0041 00000000 0x0 0x0 0xffffd88000009f00 0041 00000000 0x0 0x0 0xffffd88000009f80 0041 00000000 0x0 0x0 0xffffd8800000a000 0041 00000000 0x0 0x0 0xffffd8800000a080 0041 00000000 0x0 0x0 0xffffd8800000a100 0041 00000000 0x0 0x0 0xffffd8800000a180 0041 00000000 0x0 0x0 0xffffd8800000a200 0045 00000000 0x0 0x0 0xffffd8800000a280 0045 00000000 0x0 0x0 0xffffd8800000a300 0041 00000000 0x0 0x0 0xffffd8800000a380 0041 00000000 0x0 0x0 0xffffd8800000a400 0041 00000000 0x0 0x0 0xffffd8800000a480 0041 00000000 0x0 0x0 0xffffd8800000a500 0041 00000000 0x0 0x0 0xffffd8800000a580 0041 00000000 0x0 0x0 0xf