[ 105.7979305] panic: ASan: Unauthorized Access In 0xffffffff817142e5: Addr 0xffff990014842598 [8 bytes, read, PoolUseAfterFree] [ 105.7979305] cpu0: Begin traceback... [ 105.8090502] vpanic() at netbsd:vpanic+0x244 sys/kern/subr_prf.c:290 [ 105.8201799] snprintf() at netbsd:snprintf [ 105.8424413] kasan_report() at netbsd:kasan_report+0x9c kasan_code_name sys/kern/subr_asan.c:187 [inline] [ 105.8424413] kasan_report() at netbsd:kasan_report+0x9c sys/kern/subr_asan.c:197 [ 105.8647092] __asan_load8() at netbsd:__asan_load8+0x294 kasan_shadow_4byte_isvalid sys/kern/subr_asan.c:347 [inline] [ 105.8647092] __asan_load8() at netbsd:__asan_load8+0x294 kasan_shadow_8byte_isvalid sys/kern/subr_asan.c:361 [inline] [ 105.8647092] __asan_load8() at netbsd:__asan_load8+0x294 kasan_shadow_check sys/kern/subr_asan.c:413 [inline] [ 105.8647092] __asan_load8() at netbsd:__asan_load8+0x294 sys/kern/subr_asan.c:1210 [ 105.8981010] mutex_oncpu() at netbsd:mutex_oncpu+0x38 mutex_oncpu sys/kern/kern_mutex.c:422 [inline] [ 105.8981010] mutex_oncpu() at netbsd:mutex_oncpu+0x38 sys/kern/kern_mutex.c:406 [ 105.9203639] mutex_enter() at netbsd:mutex_enter+0x1a4 sys/kern/kern_mutex.c:550 [ 105.9426263] match_process() at netbsd:match_process+0x4e sys/kern/kern_exit.c:827 [ 105.9648882] do_sys_waitid() at netbsd:do_sys_waitid+0x337 find_stopped_child sys/kern/kern_exit.c:1025 [inline] [ 105.9648882] do_sys_waitid() at netbsd:do_sys_waitid+0x337 sys/kern/kern_exit.c:661 [ 105.9871549] do_sys_wait() at netbsd:do_sys_wait+0x1c3 sys/kern/kern_exit.c:713 [ 106.0094158] sys___wait450() at netbsd:sys___wait450+0x10e sys/kern/kern_exit.c:733 [ 106.0428128] syscall() at netbsd:syscall+0x57e sy_call sys/sys/syscallvar.h:65 [inline] [ 106.0428128] syscall() at netbsd:syscall+0x57e sy_invoke sys/sys/syscallvar.h:94 [inline] [ 106.0428128] syscall() at netbsd:syscall+0x57e sys/arch/x86/x86/syscall.c:138 [ 106.0428128] --- syscall (number 449) --- [ 106.0579861] 6fb4d224279a: [ 106.0674045] cpu0: End traceback... [ 106.0674045] fatal breakpoint trap in supervisor mode [ 106.0769115] trap type 1 code 0 rip 0xffffffff802209c5 cs 0x8 rflags 0x246 cr2 0x6fb4d25fb729 ilevel 0 rsp 0xffff99017f19f650 [ 106.0893483] curlwp 0xffff99001382d5c0 pid 1120.1120 lowest kstack 0xffff99017f1982c0 Stopped in pid 1120.1120 (syz-executor8003) at netbsd:breakpoint+0x5: leave ? breakpoint() at netbsd:breakpoint+0x5 db_panic() at netbsd:db_panic+0xe9 sys/ddb/db_panic.c:67 vpanic() at netbsd:vpanic+0x244 sys/kern/subr_prf.c:290 snprintf() at netbsd:snprintf kasan_report() at netbsd:kasan_report+0x9c kasan_code_name sys/kern/subr_asan.c:187 [inline] kasan_report() at netbsd:kasan_report+0x9c sys/kern/subr_asan.c:197 __asan_load8() at netbsd:__asan_load8+0x294 kasan_shadow_4byte_isvalid sys/kern/subr_asan.c:347 [inline] __asan_load8() at netbsd:__asan_load8+0x294 kasan_shadow_8byte_isvalid sys/kern/subr_asan.c:361 [inline] __asan_load8() at netbsd:__asan_load8+0x294 kasan_shadow_check sys/kern/subr_asan.c:413 [inline] __asan_load8() at netbsd:__asan_load8+0x294 sys/kern/subr_asan.c:1210 mutex_oncpu() at netbsd:mutex_oncpu+0x38 mutex_oncpu sys/kern/kern_mutex.c:422 [inline] mutex_oncpu() at netbsd:mutex_oncpu+0x38 sys/kern/kern_mutex.c:406 mutex_enter() at netbsd:mutex_enter+0x1a4 sys/kern/kern_mutex.c:550 match_process() at netbsd:match_process+0x4e sys/kern/kern_exit.c:827 do_sys_waitid() at netbsd:do_sys_waitid+0x337 find_stopped_child sys/kern/kern_exit.c:1025 [inline] do_sys_waitid() at netbsd:do_sys_waitid+0x337 sys/kern/kern_exit.c:661 do_sys_wait() at netbsd:do_sys_wait+0x1c3 sys/kern/kern_exit.c:713 sys___wait450() at netbsd:sys___wait450+0x10e sys/kern/kern_exit.c:733 syscall() at netbsd:syscall+0x57e sy_call sys/sys/syscallvar.h:65 [inline] syscall() at netbsd:syscall+0x57e sy_invoke sys/sys/syscallvar.h:94 [inline] syscall() at netbsd:syscall+0x57e sys/arch/x86/x86/syscall.c:138 --- syscall (number 449) --- 6fb4d224279a: ds d5c0 es 6ef0 fs f630 gs 1372 rdi ffffffff82bdf200 db_onpanic rsi 1ffffffff057be40 rbp ffff99017f19f650 rbx ffffffff829bc3c0 cpu_info_primary rdx 0 rcx ffffffff812a7109 db_panic+0xd5 rax 0 r8 4 r9 1ffffffff057be40 r10 ffffffff82bdf203 db_onpanic+0x3 r11 10 r12 ffff99016e6aa000 r13 ffffffff82444348 ostype+0x708a8 r14 ffff99017f19f6e0 r15 ffff99016e699060 rip ffffffff802209c5 breakpoint+0x5 cs 8 rflags 246 rsp ffff99017f19f650 ss 10 netbsd:breakpoint+0x5: leave PID LID S CPU FLAGS STRUCT LWP * NAME WAIT 3397 3965 1 1 0 ffff99001382da00 syz-executor8003 3397 3397 3 1 0 ffff990012c86ac0 syz-executor8003 tstile 3270 3270 2 0 10000000 ffff990013fbe340 syz-executor8003 3236 3236 2 0 0 ffff9900137a2300 syz-executor8003 3282 3871 1 1 0 ffff990012a07640 syz-executor8003 3282 3282 3 1 0 ffff9900148429c0 syz-executor8003 tstile 696 696 2 0 40 ffff9900147ca480 syz-executor8003 689 689 3 1 40 ffff9900147ca040 syz-executor8003 tstile 692 692 2 0 40 ffff9900136e6ac0 syz-executor8003 691 > 691 7 1 40 ffff9900136e6680 syz-executor8003 1120 >1120 7 0 40 ffff99001382d5c0 syz-executor8003 688 688 3 1 40 ffff9900138259c0 syz-executor8003 tstile 723 723 3 0 80 ffff99001384cac0 syz-executor8003 nanoslp 686 686 2 0 0 ffff990012742b40 sshd 1375 1375 3 1 80 ffff990013819980 getty nanoslp 719 719 3 0 80 ffff990013843200 getty nanoslp 1374 1374 3 0 80 ffff990013837a40 getty nanoslp 1373 1373 3 0 c0 ffff990013837600 getty ttyraw 887 887 3 0 80 ffff9900136e6240 cron nanoslp 1214 1214 3 1 80 ffff9900137a2b80 inetd kqueue 562 562 3 0 80 ffff990012d0e9c0 sshd select 602 602 3 0 80 ffff990012c1d5c0 powerd kqueue 460 460 3 0 80 ffff990013791700 syslogd kqueue 303 303 3 0 80 ffff990012cc2780 dhcpcd kqueue 333 333 3 1 80 ffff990012be20c0 dhcpcd kqueue 1 1 3 0 80 ffff990012931100 init wait 0 590 3 0 200 ffff99001297b9c0 physiod physiod 0 123 3 0 200 ffff990012989a00 pooldrain pooldrain 0 122 3 1 240 ffff9900129895c0 ioflush tstile 0 121 3 1 200 ffff990012989180 pgdaemon pgdaemon 0 118 3 0 200 ffff99001297b140 usb0 usbevt 0 117 3 0 200 ffff990012931980 usbtask-dr usbtsk 0 116 3 0 200 ffff99000fe5dac0 usbtask-hc usbtsk 0 115 2 0 240 ffff990012931540 npfgc-0 0 114 3 0 200 ffff990012923940 rt_free rt_free 0 113 3 1 200 ffff990012923500 unpgc unpgc 0 112 2 0 200 ffff9900129230c0 key_timehandler 0 111 3 1 200 ffff990012919900 icmp6_wqinput/1 icmp6_wqinput 0 110 3 0 200 ffff9900129194c0 icmp6_wqinput/0 icmp6_wqinput 0 109 3 1 200 ffff990012919080 nd6_timer nd6_timer 0 108 3 1 200 ffff9900127698c0 carp6_wqinput/1 carp6_wqinput 0 107 3 0 200 ffff990012769480 carp6_wqinput/0 carp6_wqinput 0 106 3 1 200 ffff990012769040 carp_wqinput/1 carp_wqinput 0 105 3 0 200 ffff990012759bc0 carp_wqinput/0 carp_wqinput 0 104 3 1 200 ffff990012759780 icmp_wqinput/1 icmp_wqinput 0 103 3 0 200 ffff990012759340 icmp_wqinput/0 icmp_wqinput 0 102 3 0 200 ffff990012745b80 rt_timer rt_timer 0 101 3 0 200 ffff990012745740 vmem_rehash vmem_rehash 0 100 3 0 200 ffff9900127416c0 entbutler entropy 0 27 3 0 200 ffff99000fe5d680 scsibus0 sccomp 0 26 3 0 200 ffff99000fe5d240 pms0 pmsreset 0 25 3 1 200 ffff99000fd9ea80 xcall/1 xcall 0 24 1 1 200 ffff99000fd9e640 softser/1 0 23 1 1 200 ffff99000fd9e200 softclk/1 0 22 1 1 200 ffff99000fd9ca40 softbio/1 0 21 1 1 200 ffff99000fd9c600 softnet/1 0 20 1 1 201 ffff99000fd9c1c0 idle/1 0 19 3 0 200 ffff99000e80aa00 lnxpwrwq lnxpwrwq 0 18 3 0 200 ffff99000e80a5c0 lnxlngwq lnxlngwq 0 17 3 0 200 ffff99000e80a180 lnxsyswq lnxsyswq 0 16 3 0 200 ffff99000e8039c0 lnxrcugc lnxrcugc 0 15 3 0 200 ffff99000e803580 sysmon smtaskq 0 14 3 0 200 ffff99000e803140 pmfsuspend pmfsuspend 0 13 3 0 200 ffff99000e7fe980 pmfevent pmfevent 0 12 3 0 200 ffff99000e7fe540 sopendfree sopendfr 0 11 3 1 200 ffff99000e7fe100 iflnkst iflnkst 0 10 3 0 200 ffff99000e7f3940 nfssilly nfssilly 0 9 3 0 200 ffff99000e7f3500 vdrain vdrain 0 8 3 1 200 ffff99000e7f30c0 modunload mod_unld 0 7 3 0 200 ffff99000e7e6900 xcall/0 xcall 0 6 1 0 200 ffff99000e7e64c0 softser/0 0 5 1 0 200 ffff99000e7e6080 softclk/0 0 4 1 0 200 ffff99000e7e38c0 softbio/0 0 3 1 0 200 ffff99000e7e3480 softnet/0 0 2 1 0 201 ffff99000e7e3040 idle/0 0 0 3 0 200 ffffffff82caa040 swapper uvm [Locks tracked through LWPs] ****** LWP 3397.3397 (syz-executor8003) @ 0xffff990012c86ac0, l_stat=3 *** Locks held: * Lock 0 (initialized at amap_ctor) lock address : 0xffff99001463c240 type : sleep/adaptive initialized : 0xffffffff8166b8c3 shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 0 relevant cpu : 1 last held: 1 relevant lwp : 0xffff990012c86ac0 last held: 0xffff990012c86ac0 last locked* : 0xffffffff8167a516 unlocked : 0xffffffff81678086 owner/count : 000000000000000000 flags : 000000000000000000 Turnstile: no active turnstile for this lock. *** Locks wanted: none ****** LWP 3270.3270 (syz-executor8003) @ 0xffff990013fbe340, l_stat=2 *** Locks held: * Lock 0 (initialized at fork1) lock address : 0xffff990012b7c490 type : sleep/adaptive initialized : 0xffffffff816fb608 shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 0 relevant cpu : 0 last held: 0 relevant lwp : 0xffff990013fbe340 last held: 0xffff990013fbe340 last locked* : 0xffffffff816f7de4 unlocked : 000000000000000000 owner/count : 0xffff990013fbe340 flags : 0x0000000000000004 Turnstile: no active turnstile for this lock. *** Locks wanted: none ****** LWP 3236.3236 (syz-executor8003) @ 0xffff9900137a2300, l_stat=2 *** Locks held: * Lock 0 (initialized at pmap_ctor) lock address : 0xffff990012bfd580 type : sleep/adaptive initialized : 0xffffffff8087e6aa shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 0 relevant cpu : 0 last held: 0 relevant lwp : 0xffff9900137a2300 last held: 0xffff9900137a2300 last locked* : 0xffffffff80880292 unlocked : 0xffffffff80880a6d owner field : 0xffff9900137a2300 wait/spin: 0/0 Turnstile: no active turnstile for this lock. *** Locks wanted: none ****** LWP 3282.3282 (syz-executor8003) @ 0xffff9900148429c0, l_stat=3 *** Locks held: * Lock 0 (initialized at amap_ctor) lock address : 0xffff990013f4b5c0 type : sleep/adaptive initialized : 0xffffffff8166b8c3 shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 0 relevant cpu : 1 last held: 1 relevant lwp : 0xffff9900148429c0 last held: 0xffff9900148429c0 last locked* : 0xffffffff8167a516 unlocked : 0xffffffff81679987 owner/count : 000000000000000000 flags : 000000000000000000 Turnstile: no active turnstile for this lock. *** Locks wanted: none ****** LWP 696.696 (syz-executor8003) @ 0xffff9900147ca480, l_stat=2 *** Locks held: * Lock 0 (initialized at vcache_alloc) lock address : 0xffff9900147db980 type : sleep/adaptive initialized : 0xffffffff81866a93 shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 0 relevant cpu : 0 last held: 0 relevant lwp : 0xffff9900147ca480 last held: 0xffff9900147ca480 last locked* : 0xffffffff8189602e unlocked : 0xffffffff81896090 owner/count : 0xffff9900147ca480 flags : 0x0000000000000004 Turnstile: no active turnstile for this lock. * Lock 1 (initialized at vcache_alloc) lock address : 0xffff990014840280 type : sleep/adaptive initialized : 0xffffffff81866a93 shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 0 relevant cpu : 0 last held: 0 relevant lwp : 0xffff9900147ca480 last held: 0xffff9900147ca480 last locked* : 0xffffffff8189602e unlocked : 0xffffffff81896090 owner/count : 0xffff9900147ca480 flags : 0x0000000000000004 Turnstile: no active turnstile for this lock. * Lock 2 (initialized at vcache_alloc) lock address : 0xffff990013eebb80 type : sleep/adaptive initialized : 0xffffffff81866a9f shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 0 relevant cpu : 0 last held: 0 relevant lwp : 0xffff9900147ca480 last held: 0xffff9900147ca480 last locked* : 0xffffffff81830f81 unlocked : 0xffffffff81830ff1 owner field : 0xffff9900147ca480 wait/spin: 1/0 Turnstile: => 0 waiting readers: => 1 waiting writers: 0xffff9900129895c0 *** Locks wanted: none ****** LWP 689.689 (syz-executor8003) @ 0xffff9900147ca040, l_stat=3 *** Locks held: none *** Locks wanted: * Lock 0 (initialized at procinit) lock address : 0xffffffff82da1400 type : sleep/adaptive initialized : 0xffffffff8171fd08 shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 1 relevant cpu : 1 last held: 0 relevant lwp : 0xffff9900147ca040 last held: 0xffff99001382d5c0 last locked* : 0xffffffff816f93a7 unlocked : 0xffffffff8170c1ce owner field : 0xffff99001382d5c0 wait/spin: 1/0 Turnstile: => 0 waiting readers: => 4 waiting writers: 0xffff9900138259c0 0xffff990012c86ac0 0xffff9900148429c0 0xffff9900147ca040 ****** LWP 1120.1120 (syz-executor8003) @ 0xffff99001382d5c0, l_stat=7 *** Locks held: * Lock 0 (initialized at procinit) lock address : 0xffffffff82da1400 type : sleep/adaptive initialized : 0xffffffff8171fd08 shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 1 relevant cpu : 0 last held: 0 relevant lwp : 0xffff99001382d5c0 last held: 0xffff99001382d5c0 last locked* : 0xffffffff816f93a7 unlocked : 0xffffffff8170c1ce owner field : 0xffff99001382d5c0 wait/spin: 1/0 Turnstile: => 0 waiting readers: => 4 waiting writers: 0xffff9900138259c0 0xffff990012c86ac0 0xffff9900148429c0 0xffff9900147ca040 *** Locks wanted: * Lock 0 (initialized at fork1) lock address : 0xffff9900146765c0 type : sleep/adaptive initialized : 0xffffffff816fc493 shared holds : 0 exclusive: 0 shares wanted: 0 exclusive: 1 relevant cpu : 0 last held: 0 relevant lwp : 0xffff99001382d5c0 last held: 000000000000000000 last locked : 0xffffffff8170ce09 unlocked*: 0xffffffff8170bdb7 owner field : 000000000000000000 wait/spin: 0/0 Turnstile: no active turnstile for this lock. ****** LWP 0.11 (iflnkst) @ 0xffff99000e7fe100, l_stat=3 *** Locks held: none *** Locks wanted: * Lock 0 (initialized at module_hook_init) lock address : 0xffffffff82da12c0 type : sleep/adaptive initialized : 0xffffffff81713612 shared holds : 0 exclusive: 0 shares wanted: 0 exclusive: 0 relevant cpu : 1 last held: 0 relevant lwp : 0xffff99000e7fe100 last held: 000000000000000000 last locked : 000000000000000000 unlocked*: 000000000000000000 owner field : 000000000000000000 wait/spin: 0/0 Turnstile: no active turnstile for this lock. ****** LWP 0.5 (softclk/0) @ 0xffff99000e7e6080, l_stat=1 *** Locks held: none *** Locks wanted: * Lock 0 (initialized at module_hook_init) lock address : 0xffffffff82da12c0 type : sleep/adaptive initialized : 0xffffffff81713612 shared holds : 0 exclusive: 0 shares wanted: 0 exclusive: 0 relevant cpu : 0 last held: 0 relevant lwp : 0xffff99000e7e6080 last held: 000000000000000000 last locked : 000000000000000000 unlocked*: 000000000000000000 owner field : 000000000000000000 wait/spin: 0/0 Turnstile: no active turnstile for this lock. [Locks tracked through CPUs] PAGE FLAG PQ UOBJECT UANON 0xffff990000017180 0041 00000000 0x0 0x0 0xffff990000017200 0041 00000000 0x0 0x0 0xffff990000017280 0041 00000000 0x0 0x0 0xffff990000017300 0041 00000000 0x0 0x0 0xffff990000017380 0041 00000000 0x0 0x0 0xffff990000017400 0041 00000000 0x0 0x0 0xffff990000017480 0041 00000000 0x0 0x0 0xffff990000017500 0041 00000000 0x0 0x0 0xffff990000017580 0041 00000000 0x0 0x0 0xffff990000017600 0041 00000000 0x0 0x0 0xffff990000017680 0041 00000000 0x0 0x0 0xffff990000017700 0041 00000000 0x0 0x0 0xffff990000017780 0041 00000000 0x0 0x0 0xffff990000017800 0041 00000000 0x0 0x0 0xffff990000017880 0041 00000000 0x0 0x0 0xffff990000017900 0041 00000000 0x0 0x0 0xffff990000017980 0041 00000000 0x0 0x0 0xffff990000017a00 0041 00000000 0x0 0x0 0xffff990000017a80 0041 00000000 0x0 0x0 0xffff990000017b00 0041 00000000 0x0 0x0 0xffff990000017b80 0041 00000000 0x0 0x0 0xffff990000017c00 0041 00000000 0x0 0x0 0xffff990000017c80 0041 00000000 0x0 0x0 0xffff990000017d00 0041 00000000 0x0 0x0 0xffff990000017d80 0041 00000000 0x0 0x0 0xffff990000017e00 0041 00000000 0x0 0x0 0xffff990000017e80 0041 00000000 0x0 0x0 0xffff990000017f00 0041 00000000 0x0 0x0 0xffff990000017f80 0041 00000000 0x0 0x0 0xffff990000018000 0041 00000000 0x0 0x0 0xffff990000018080 0041 00000000 0x0 0x0 0xffff990000018100 0041 00000000 0x0 0x0 0xffff990000018180 0041 00000000 0x0 0x0 0xffff990000018200 0041 00000000 0x0 0x0 0xffff990000018280 0041 00000000 0x0 0x0 0xffff990000018300 0041 00000000 0x0 0x0 0xffff990000018380 0041 00000000 0x0 0x0 0xffff990000018400 0041 00000000 0x0 0x0 0xffff990000018480 0041 00000000 0x0 0x0 0xffff990000018500 0041 00000000 0x0 0x0 0xffff990000018580 0041 00000000 0x0 0x0 0xffff990000018600 0041 00000000 0x0 0x0 0xffff990000018680 0041 00000000 0x0 0x0 0xffff990000018700 0041 00000000 0x0 0x0 0xffff990000018780 0041 00000000 0x0 0x0 0xffff990000018800 0041 00000000 0x0 0x0 0xffff990000018880 0041 00000000 0x0 0x0 0xffff990000018900 0041 00000000 0x0 0x0 0xffff990000018980 0041 00000000 0x0 0x0 0xffff990000018a00 0041 00000000 0x0 0x0 0xffff990000018a80 0041 00000000 0x0 0x0 0xffff990000018b00 0041 00000000 0x0 0x0 0xffff990000018b80 0041 00000000 0x0 0x0 0xffff990000018c00 0041 00000000 0x0 0x0 0xffff990000018c80 0041 00000000 0x0 0x0 0xffff990000018d00 0041 00000000 0x0 0x0 0xffff990000018d80 0041 00000000 0x0 0x0 0xffff990000018e00 0041 00000000 0x0 0x0 0xffff990000018e80 0041 00000000 0x0 0x0 0xffff990000018f00 0041 00000000 0x0 0x0 0xffff990000018f80 0041 00000000 0x0 0x0 0xffff990000019000 0041 00000000 0x0 0x0 0xffff990000019080 0041 00000000 0x0 0x0 0xffff990000019100 0041 00000000 0x0 0x0 0xffff990000019180 0041 00000000 0x0 0x0 0xffff990000019200 0041 00000000 0x0 0x0 0xffff990000019280 0041 00000000 0x0 0x0 0xffff990000019300 0041 00000000 0x0 0x0 0xffff990000019380 0041 00000000 0x0 0x0 0xffff990000019400 0041 00000000 0x0 0x0 0xffff990000019480 0041 00000000 0x0 0x0 0xffff990000019500 0041 00000000 0x0 0x0 0xffff990000019580 0041 00000000 0x0 0x0 0xffff990000019600 0041 00000000 0x0 0x0 0xffff990000019680 0041 00000000 0x0 0x0 0xffff990000019700 0041 00000000 0x0 0x0 0xffff990000019780 0041 00000000 0x0 0x0 0xffff990000019800 0041 00000000 0x0 0x0 0xffff990000019880 0041 00000000 0x0 0x0 0xffff990000019900 0041 00000000 0x0 0x0 0xffff990000019980 0041 00000000 0x0 0x0 0xffff990000019a00 0041 00000000 0x0 0x0 0xffff990000019a80 0041 00000000 0x0 0x0 0xffff990000019b00 0041 00000000 0x0 0x0 0xffff990000019b80 0041 00000000 0x0 0x0 0xffff990000019c00 0041 00000000 0x0 0x0 0xffff990000019c80 0041 00000000 0x0 0x0 0xffff990000019d00 0041 00000000 0x0 0x0 0xffff990000019d80 0041 00000000 0x0 0x0 0xffff990000019e00 0041 00000000 0x0 0x0 0xffff990000019e80 0041 00000000 0x0 0x0 0xffff990000019f00 0041 00000000 0x0 0x0 0xffff990000019f80 0041 00000000 0x0 0x0 0xffff99000001a000 0041 00000000 0x0 0x0 0xffff99000001a080 0041 00000000 0x0 0x0 0xffff99000001a100 0041 00000000 0x0 0x0 0xffff99000001a180 0041 00000000 0x0 0x0 0xffff99000001a200 0041 00000000 0x0 0x0 0xffff99000001a280 0041 00000000 0x0 0x0 0xffff99000001a300 0041 00000000 0x0 0x0 0xffff99000001a380 0041 00000000 0x0 0x0 0xffff99000001a400 0041 00000000 0x0 0x0 0xffff99000001a480 0041 00000000 0x0 0x0 0xffff99000001a500 0041 00000000 0x0 0x0 0xffff99000001a580 0041 00000000 0x0 0x0 0xffff99000001a600 0041 00000000 0x0 0x0 0xffff99000001a680 0041 00000000 0x0 0x0 0xffff99000001a700 0041 00000000 0x0 0x0 0xffff99000001a780 0041 00000000 0x0 0x0 0xffff99000001a800 0041 00000000 0x0 0x0 0xffff99000001a880 0041 00000000 0x0 0x0 0xffff99000001a900 0041 00000000 0x0 0x0 0xffff99000001a980 0041 00000000 0x0 0x0 0xffff99000001aa00 0041 00000000 0x0 0x0 0xffff99000001aa80 0041 00000000 0x0 0x0 0xffff99000001ab00 0041 00000000 0x0 0x0 0xffff99000001ab80 0041 00000000 0x0 0x0 0xffff99000001ac00 0041 00000000 0x0 0x0 0xffff99000001ac80 0041 00000000 0x0 0x0 0xffff99000001ad00 0041 00000000 0x0 0x0 0xffff99000001ad80 0041 00000000 0x0 0x0 0xffff99000001ae00 0041 00000000 0x0 0x0 0xffff99000001ae80 0041 00000000 0x0 0x0 0xffff99000001af00 0041 00000000 0x0 0x0 0xffff99000001af80 0041 00000000 0x0 0x0 0xffff99000001b000 0041 00000000 0x0 0x0 0xffff99000001b080 0041 00000000 0x0 0x0 0xffff99000001b100 0041 00000000 0x0 0x0 0xffff99000001b180 0041 00000000 0x0 0x0 0xffff99000001b200 0041 00000000 0x0 0x0 0xffff99000001b280 0041 00000000 0x0 0x0 0xffff99000001b300 0041 00000000 0x0 0x0 0xffff99000001b380 0041 00000000 0x0 0x0 0xffff99000001b400 0041 00000000 0x0 0x0 0xffff99000001b480 0041 00000000 0x0 0x0 0xffff99000001b500 0041 00000000 0x0 0x0 0xffff99000001b580 0041 00000000 0x0 0x0 0xffff99000001b600 0041 00000000 0x0 0x0 0xffff99000001b680 0041 00000000 0x0 0x0 0xffff99000001b700 0041 00000000 0x0 0x0 0xffff99000001b780 0041 00000000 0x0 0x0 0xffff99000001b800 0041 00000000 0x0 0x0 0xffff99000001b880 0041 00000000 0x0 0x0 0xffff99000001b900 0041 00000000 0x0 0x0 0xffff99000001b980 0041 00000000 0x0 0x0 0xffff99000001ba00 0041 00000000 0x0 0x0 0xffff99000001ba80 0041 00000000 0x0 0x0 0xffff99000001bb00 0041 00000000 0x0 0x0 0xffff99000001bb80 0041 00000000 0x0 0x0 0xffff99000001bc00 0041 00000000 0x0 0x0 0xffff99000001bc80 0041 00000000 0x0 0x0 0xffff9900000