[ 58.6935648] panic: UBSan: Undefined Behavior in /syzkaller/managers/ci2-netbsd-kubsan/kernel/sys/dev/wscons/wsmux.c:520:34, member access within null pointer of type 'struct pgrp' [ 58.7143149] cpu0: Begin traceback... [ 58.7335491] vpanic() at netbsd:vpanic+0x2f2 sys/kern/subr_prf.c:291 [ 58.8035491] Report() at netbsd:Report+0x3b sys/../common/lib/libc/misc/ubsan.c:1352 [ 58.8735493] HandleTypeMismatch() at netbsd:HandleTypeMismatch+0x1fb sys/../common/lib/libc/misc/ubsan.c:429 [ 58.9335502] wsmux_do_ioctl() at netbsd:wsmux_do_ioctl+0x12ce sys/dev/wscons/wsmux.c:520 [ 58.9835497] cdev_ioctl() at netbsd:cdev_ioctl+0x162 sys/kern/subr_devsw.c:1525 [ 59.0335508] spec_ioctl() at netbsd:spec_ioctl+0xf2 sys/miscfs/specfs/spec_vnops.c:1329 [ 59.0935485] VOP_IOCTL() at netbsd:VOP_IOCTL+0x149 sys/kern/vnode_if.c:934 [ 59.1535514] vn_ioctl() at netbsd:vn_ioctl+0x195 sys/kern/vfs_vnops.c:868 [ 59.2035518] sys_ioctl() at netbsd:sys_ioctl+0xd88 sys/kern/sys_generic.c:675 [ 59.2535511] sys_syscall() at netbsd:sys_syscall+0x1e4 sy_call sys/sys/syscallvar.h:65 [inline] [ 59.2535511] sys_syscall() at netbsd:sys_syscall+0x1e4 sys/kern/sys_syscall.c:90 [ 59.3135567] syscall() at netbsd:syscall+0x2da sy_call sys/sys/syscallvar.h:65 [inline] [ 59.3135567] syscall() at netbsd:syscall+0x2da sy_invoke sys/sys/syscallvar.h:94 [inline] [ 59.3135567] syscall() at netbsd:syscall+0x2da sys/arch/x86/x86/syscall.c:138 [ 59.3235501] --- syscall (number 54 via SYS_syscall) --- [ 59.3435486] netbsd:syscall+0x2da: [ 59.3435486] cpu0: End traceback... [ 59.3552647] fatal breakpoint trap in supervisor mode [ 59.3552647] trap type 1 code 0 rip 0xffffffff80235375 cs 0x8 rflags 0x246 cr2 0x7f4b30c3ed30 ilevel 0 rsp 0xffffb682482fb630 [ 59.3712210] curlwp 0xffff84301e48f140 pid 6454.6454 lowest kstack 0xffffb682482f72c0 Stopped in pid 6454.6454 (syz-executor3572) at netbsd:breakpoint+0x5: leave ? breakpoint() at netbsd:breakpoint+0x5 db_panic() at netbsd:db_panic+0xec sys/ddb/db_panic.c:69 vpanic() at netbsd:vpanic+0x2f2 sys/kern/subr_prf.c:291 Report() at netbsd:Report+0x3b sys/../common/lib/libc/misc/ubsan.c:1352 HandleTypeMismatch() at netbsd:HandleTypeMismatch+0x1fb sys/../common/lib/libc/misc/ubsan.c:429 wsmux_do_ioctl() at netbsd:wsmux_do_ioctl+0x12ce sys/dev/wscons/wsmux.c:520 cdev_ioctl() at netbsd:cdev_ioctl+0x162 sys/kern/subr_devsw.c:1525 spec_ioctl() at netbsd:spec_ioctl+0xf2 sys/miscfs/specfs/spec_vnops.c:1329 VOP_IOCTL() at netbsd:VOP_IOCTL+0x149 sys/kern/vnode_if.c:934 vn_ioctl() at netbsd:vn_ioctl+0x195 sys/kern/vfs_vnops.c:868 sys_ioctl() at netbsd:sys_ioctl+0xd88 sys/kern/sys_generic.c:675 sys_syscall() at netbsd:sys_syscall+0x1e4 sy_call sys/sys/syscallvar.h:65 [inline] sys_syscall() at netbsd:sys_syscall+0x1e4 sys/kern/sys_syscall.c:90 syscall() at netbsd:syscall+0x2da sy_call sys/sys/syscallvar.h:65 [inline] syscall() at netbsd:syscall+0x2da sy_invoke sys/sys/syscallvar.h:94 [inline] syscall() at netbsd:syscall+0x2da sys/arch/x86/x86/syscall.c:138 --- syscall (number 54 via SYS_syscall) --- netbsd:syscall+0x2da: Panic string: UBSan: Undefined Behavior in /syzkaller/managers/ci2-netbsd-kubsan/kernel/sys/dev/wscons/wsmux.c:520:34, member access within null pointer of type 'struct pgrp' PID LID S CPU FLAGS STRUCT LWP * NAME WAIT 6585 6585 2 0 0 ffff84301dd81980 syz-executor3572 6481 6481 2 1 0 ffff84301ce53bc0 syz-executor3572 6454 >6454 7 0 0 ffff84301e48f140 syz-executor3572 6364 6364 2 0 0 ffff84301e9ed6c0 syz-executor3572 6464 6464 2 0 0 ffff84301cad8b40 syz-executor3572 6334 6334 2 0 40000 ffff8430142e0b80 syz-executor3572 943 943 2 1 140 ffff84301e48f9c0 syz-executor3572 1239 1239 2 1 140 ffff84301cad8700 syz-executor3572 1238 1238 2 1 140 ffff84301c6956c0 syz-executor3572 829 829 2 1 140 ffff84301e56aa40 syz-executor3572 990 990 2 1 140 ffff84301f9b0200 syz-executor3572 449 449 2 1 140 ffff84301e56a600 syz-executor3572 941 941 3 0 180 ffff84301f9b0a80 syz-executor3572 nanoslp 1231 1231 3 0 180 ffff84301f9b0640 sshd select 1223 1223 3 0 180 ffff84301e4dba00 getty nanoslp 1195 1195 3 0 180 ffff84301e4db180 getty nanoslp 1184 1184 3 1 180 ffff84301cad82c0 getty nanoslp 1196 1196 3 0 1c0 ffff84301c695b00 getty ttyraw 1102 1102 3 1 180 ffff84301c682240 sshd select 1096 1096 3 0 180 ffff84301e4db5c0 powerd kqueue 767 767 3 0 180 ffff84301daf94c0 syslogd kqueue 745 745 3 0 180 ffff84301ce53780 dhcpcd poll 746 746 3 1 180 ffff84301ce53340 dhcpcd poll 743 743 3 1 180 ffff84301daf9900 dhcpcd poll 597 597 3 0 180 ffff84301cdd2740 dhcpcd poll 292 292 3 0 180 ffff84301cdd2300 dhcpcd poll 485 485 3 0 180 ffff84301cdd2b80 dhcpcd poll 291 291 3 0 180 ffff8430142e0740 dhcpcd poll 1 1 3 0 180 ffff843014478140 init wait 0 864 3 0 200 ffff84301c682680 physiod physiod 0 > 196 7 1 240 ffff84301c695280 ioflush 0 195 3 0 200 ffff8430143d7340 pooldrain pooldrain 0 194 3 1 200 ffff84301c682ac0 pgdaemon pgdaemon 0 170 3 1 200 ffff84301a5eca80 usb7 usbevt 0 169 3 1 200 ffff84301a5ec640 usb6 usbevt 0 168 3 1 200 ffff84301a5ec200 usb5 usbevt 0 167 3 1 200 ffff84301753fa40 usb4 usbevt 0 166 3 1 200 ffff84301753f600 usb3 usbevt 0 165 3 1 200 ffff84301753f1c0 usb2 usbevt 0 31 3 1 200 ffff8430154faa00 usb1 usbevt 0 63 3 1 200 ffff8430154fa5c0 usb0 usbevt 0 126 3 1 200 ffff8430154fa180 usbtask-dr usbtsk 0 125 3 0 200 ffff8430144789c0 usbtask-hc usbtsk 0 124 3 1 200 ffff843014478580 swwreboot swwreboot 0 123 3 1 200 ffff8430128a1b00 npfgc0 npfgcw 0 122 3 1 200 ffff843014463980 rt_free rt_free 0 121 3 1 200 ffff843014463540 unpgc unpgc 0 120 3 0 200 ffff843014463100 key_timehandler key_timehandler 0 119 3 1 200 ffff84301443e940 icmp6_wqinput/1 icmp6_wqinput 0 118 3 0 200 ffff84301443e500 icmp6_wqinput/0 icmp6_wqinput 0 117 3 0 200 ffff84301443e0c0 nd6_timer nd6_timer 0 116 3 1 200 ffff843014432900 carp6_wqinput/1 carp6_wqinput 0 115 3 0 200 ffff8430144324c0 carp6_wqinput/0 carp6_wqinput 0 114 3 1 200 ffff843014432080 carp_wqinput/1 carp_wqinput 0 113 3 0 200 ffff8430144148c0 carp_wqinput/0 carp_wqinput 0 112 3 1 200 ffff843014414480 icmp_wqinput/1 icmp_wqinput 0 111 3 0 200 ffff843014414040 icmp_wqinput/0 icmp_wqinput 0 110 3 0 200 ffff8430143d7bc0 rt_timer rt_timer 0 109 3 1 200 ffff8430143d7780 vmem_rehash vmem_rehash 0 100 3 1 200 ffff8430142e0300 entbutler entropy 0 99 3 0 200 ffff843013d50b40 viomb balloon 0 98 3 1 200 ffff843013d50700 vioif0_txrx/1 vioif0_txrx 0 97 3 0 200 ffff843013d502c0 vioif0_txrx/0 vioif0_txrx 0 30 3 0 200 ffff8430128a16c0 scsibus0 sccomp 0 29 3 0 200 ffff8430128a1280 pms0 pmsreset 0 28 3 1 200 ffff8430127acac0 xcall/1 xcall 0 27 1 1 200 ffff8430127ac680 softser/1 0 26 1 1 200 ffff8430127ac240 softclk/1 0 25 1 1 200 ffff843012787a80 softbio/1 0 24 1 1 200 ffff843012787640 softnet/1 0 23 1 1 201 ffff843012787200 idle/1 0 22 3 0 200 ffff843140b2da40 lnxsyswq lnxsyswq 0 21 3 1 200 ffff843140b2d600 lnxubdwq lnxubdwq 0 20 3 0 200 ffff843140b2d1c0 lnxpwrwq lnxpwrwq 0 19 3 0 200 ffff843140b34a00 lnxlngwq lnxlngwq 0 18 3 0 200 ffff843140b345c0 lnxhipwq lnxhipwq 0 17 3 0 200 ffff843140b34180 lnxrcugc lnxrcugc 0 16 3 0 200 ffff843140b539c0 sysmon smtaskq 0 15 3 0 200 ffff843140b53580 pmfsuspend pmfsuspend 0 14 3 0 200 ffff843140b53140 pmfevent pmfevent 0 13 3 0 200 ffff843140b5e980 sopendfree sopendfr 0 12 3 0 200 ffff843140b5e540 ifwdog ifwdog 0 11 3 0 200 ffff843140b5e100 iflnkst iflnkst 0 10 3 0 200 ffff843141b93940 nfssilly nfssilly 0 9 3 0 200 ffff843141b93500 vdrain vdrain 0 8 3 0 200 ffff843141b930c0 modunload mod_unld 0 7 3 0 200 ffff843141bba900 xcall/0 xcall 0 6 1 0 200 ffff843141bba4c0 softser/0 0 5 1 0 200 ffff843141bba080 softclk/0 0 4 1 0 200 ffff843141be98c0 softbio/0 0 3 1 0 40200 ffff843141be9480 softnet/0 0 2 1 0 201 ffff843141be9040 idle/0 0 0 3 1 200 ffffffff8673fec0 swapper uvm [Locks tracked through LWPs] ****** LWP 6364.6364 (syz-executor3572) @ 0xffff84301e9ed6c0, l_stat=2 *** Locks held: * Lock 0 (initialized at netbsd:pmap_ctor+0x6d sys/arch/x86/x86/pmap.c:2860) lock address : ffff843020908580 type : sleep/adaptive initialized : netbsd:pmap_ctor+0x6d shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 0 relevant cpu : 0 last held: 0 relevant lwp : 0xffff84301e9ed6c0 last held: 0xffff84301e9ed6c0 last locked* : netbsd:pmap_enter_ma+0x3c0 unlocked : netbsd:pmap_extract+0x2c8 owner field : 0xffff84301e9ed6c0 wait/spin: 0/0 Turnstile: no active turnstile for this lock. *** Locks wanted: none ****** LWP 746.746 (dhcpcd) @ 0xffff84301ce53340, l_stat=3 *** Locks held: none *** Locks wanted: * Lock 0 (initialized at netbsd:module_hook_init+0x1c sys/kern/kern_module_hook.c:132) lock address : netbsd:module_hook type : sleep/adaptive initialized : netbsd:module_hook_init+0x1c shared holds : 0 exclusive: 0 shares wanted: 0 exclusive: 0 relevant cpu : 1 last held: 0 relevant lwp : 0xffff84301ce53340 last held: 000000000000000000 last locked : 0 unlocked* : 0 owner field : 000000000000000000 wait/spin: 0/0 Turnstile: no active turnstile for this lock. ****** LWP 743.743 (dhcpcd) @ 0xffff84301daf9900, l_stat=3 *** Locks held: none *** Locks wanted: * Lock 0 (initialized at netbsd:module_hook_init+0x1c sys/kern/kern_module_hook.c:132) lock address : netbsd:module_hook type : sleep/adaptive initialized : netbsd:module_hook_init+0x1c shared holds : 0 exclusive: 0 shares wanted: 0 exclusive: 0 relevant cpu : 1 last held: 0 relevant lwp : 0xffff84301daf9900 last held: 000000000000000000 last locked : 0 unlocked* : 0 owner field : 000000000000000000 wait/spin: 0/0 Turnstile: no active turnstile for this lock. ****** LWP 485.485 (dhcpcd) @ 0xffff84301cdd2b80, l_stat=3 *** Locks held: none *** Locks wanted: * Lock 0 (initialized at netbsd:module_hook_init+0x1c sys/kern/kern_module_hook.c:132) lock address : netbsd:module_hook type : sleep/adaptive initialized : netbsd:module_hook_init+0x1c shared holds : 0 exclusive: 0 shares wanted: 0 exclusive: 0 relevant cpu : 0 last held: 0 relevant lwp : 0xffff84301cdd2b80 last held: 000000000000000000 last locked : 0 unlocked* : 0 owner field : 000000000000000000 wait/spin: 0/0 Turnstile: no active turnstile for this lock. ****** LWP 291.291 (dhcpcd) @ 0xffff8430142e0740, l_stat=3 *** Locks held: none *** Locks wanted: * Lock 0 (initialized at netbsd:module_hook_init+0x1c sys/kern/kern_module_hook.c:132) lock address : netbsd:module_hook type : sleep/adaptive initialized : netbsd:module_hook_init+0x1c shared holds : 0 exclusive: 0 shares wanted: 0 exclusive: 0 relevant cpu : 0 last held: 0 relevant lwp : 0xffff8430142e0740 last held: 000000000000000000 last locked : 0 unlocked* : 0 owner field : 000000000000000000 wait/spin: 0/0 Turnstile: no active turnstile for this lock. ****** LWP 0.11 (iflnkst) @ 0xffff843140b5e100, l_stat=3 *** Locks held: none *** Locks wanted: * Lock 0 (initialized at netbsd:module_hook_init+0x1c sys/kern/kern_module_hook.c:132) lock address : netbsd:module_hook type : sleep/adaptive initialized : netbsd:module_hook_init+0x1c shared holds : 0 exclusive: 0 shares wanted: 0 exclusive: 0 relevant cpu : 0 last held: 0 relevant lwp : 0xffff843140b5e100 last held: 000000000000000000 last locked : 0 unlocked* : 0 owner field : 000000000000000000 wait/spin: 0/0 Turnstile: no active turnstile for this lock. ****** LWP 0.5 (softclk/0) @ 0xffff843141bba080, l_stat=1 *** Locks held: none *** Locks wanted: * Lock 0 (initialized at netbsd:module_hook_init+0x1c sys/kern/kern_module_hook.c:132) lock address : netbsd:module_hook type : sleep/adaptive initialized : netbsd:module_hook_init+0x1c shared holds : 0 exclusive: 0 shares wanted: 0 exclusive: 0 relevant cpu : 0 last held: 0 relevant lwp : 0xffff843141bba080 last held: 000000000000000000 last locked : 0 unlocked* : 0 owner field : 000000000000000000 wait/spin: 0/0 Turnstile: no active turnstile for this lock. ****** LWP 0.0 (swapper) @ 0xffffffff8673fec0, l_stat=3 *** Locks held: none *** Locks wanted: * Lock 0 (initialized at netbsd:module_hook_init+0x1c sys/kern/kern_module_hook.c:132) lock address : netbsd:module_hook type : sleep/adaptive initialized : netbsd:module_hook_init+0x1c shared holds : 0 exclusive: 0 shares wanted: 0 exclusive: 0 relevant cpu : 1 last held: 0 relevant lwp : 0xffffffff8673fec0 last held: 000000000000000000 last locked : 0 unlocked* : 0 owner field : 000000000000000000 wait/spin: 0/0 Turnstile: no active turnstile for this lock. [Locks tracked through CPUs] ******* Locks held on cpu0: * Lock 0 (initialized at netbsd:main+0x106 sys/kern/init_main.c:303) lock address : netbsd:kernel_lock type : spin initialized : netbsd:main+0x106 shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 0 relevant cpu : 0 last held: 0 relevant lwp : 0xffff84301e48f140 last held: 0xffff84301e48f140 last locked* : netbsd:cdev_ioctl+0x1bb unlocked : netbsd:cdev_open+0x3f4 curcpu holds : 1 wanted by: 000000000000000000 * Lock 1 (initialized at netbsd:kprintf_init+0x72 sys/kern/subr_prf.c:155) lock address : netbsd:kprintf_mtx type : spin initialized : netbsd:kprintf_init+0x72 shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 0 relevant cpu : 0 last held: 0 relevant lwp : 0xffff84301e48f140 last held: 0xffff84301e48f140 last locked* : netbsd:kprintf_lock+0x50 unlocked : netbsd:kprintf_unlock+0x70 owner field : 0x0000000000000800 wait/spin: 0/1 PAGE FLAG PQ UOBJECT UANON 0xffffb68000007180 0045 00000000 0x0 0x0 0xffffb68000007200 0045 00000000 0x0 0x0 0xffffb68000007280 0045 00000000 0x0 0x0 0xffffb68000007300 0045 00000000 0x0 0x0 0xffffb68000007380 0045 00000000 0x0 0x0 0xffffb68000007400 0045 00000000 0x0 0x0 0xffffb68000007480 0045 00000000 0x0 0x0 0xffffb68000007500 0045 00000000 0x0 0x0 0xffffb68000007580 0045 00000000 0x0 0x0 0xffffb68000007600 0045 00000000 0x0 0x0 0xffffb68000007680 0041 00000000 0x0 0x0 0xffffb68000007700 0041 00000000 0x0 0x0 0xffffb68000007780 0041 00000000 0x0 0x0 0xffffb68000007800 0041 00000000 0x0 0x0 0xffffb68000007880 0045 00000000 0x0 0x0 0xffffb68000007900 0045 00000000 0x0 0x0 0xffffb68000007980 0041 00000000 0x0 0x0 0xffffb68000007a00 0041 00000000 0x0 0x0 0xffffb68000007a80 0041 00000000 0x0 0x0 0xffffb68000007b00 0041 00000000 0x0 0x0 0xffffb68000007b80 0041 00000000 0x0 0x0 0xffffb68000007c00 0041 00000000 0x0 0x0 0xffffb68000007c80 0041 00000000 0x0 0x0 0xffffb68000007d00 0041 00000000 0x0 0x0 0xffffb68000007d80 0041 00000000 0x0 0x0 0xffffb68000007e00 0041 00000000 0x0 0x0 0xffffb68000007e80 0041 00000000 0x0 0x0 0xffffb68000007f00 0041 00000000 0x0 0x0 0xffffb68000007f80 0041 00000000 0x0 0x0 0xffffb68000008000 0041 00000000 0x0 0x0 0xffffb68000008080 0041 00000000 0x0 0x0 0xffffb68000008100 0041 00000000 0x0 0x0 0xffffb68000008180 0041 00000000 0x0 0x0 0xffffb68000008200 0041 00000000 0x0 0x0 0xffffb68000008280 0041 00000000 0x0 0x0 0xffffb68000008300 0041 00000000 0x0 0x0 0xffffb68000008380 0041 00000000 0x0 0x0 0xffffb68000008400 0041 00000000 0x0 0x0 0xffffb68000008480 0041 00000000 0x0 0x0 0xffffb68000008500 0041 00000000 0x0 0x0 0xffffb68000008580 0041 00000000 0x0 0x0 0xffffb68000008600 0045 00000000 0x0 0x0 0xffffb68000008680 0041 00000000 0x0 0x0 0xffffb68000008700 0041 00000000 0x0 0x0 0xffffb68000008780 0041 00000000 0x0 0x0 0xffffb68000008800 0045 00000000 0x0 0x0 0xffffb68000008880 0041 00000000 0x0 0x0 0xffffb68000008900 0041 00000000 0x0 0x0 0xffffb68000008980 0041 00000000 0x0 0x0 0xffffb68000008a00 0041 00000000 0x0 0x0 0xffffb68000008a80 0041 00000000 0x0 0x0 0xffffb68000008b00 0041 00000000 0x0 0x0 0xffffb68000008b80 0041 00000000 0x0 0x0 0xffffb68000008c00 0041 00000000 0x0 0x0 0xffffb68000008c80 0041 00000000 0x0 0x0 0xffffb68000008d00 0041 00000000 0x0 0x0 0xffffb68000008d80 0041 00000000 0x0 0x0 0xffffb68000008e00 0041 00000000 0x0 0x0 0xffffb68000008e80 0041 00000000 0x0 0x0 0xffffb68000008f00 0041 00000000 0x0 0x0 0xffffb68000008f80 0041 00000000 0x0 0x0 0xffffb68000009000 0041 00000000 0x0 0x0 0xffffb68000009080 0041 00000000 0x0 0x0 0xffffb68000009100 0041 00000000 0x0 0x0 0xffffb68000009180 0041 00000000 0x0 0x0 0xffffb68000009200 0041 00000000 0x0 0x0 0xffffb68000009280 0041 00000000 0x0 0x0 0xffffb68000009300 0041 00000000 0x0 0x0 0xffffb68000009380 0041 00000000 0x0 0x0 0xffffb68000009400 0041 00000000 0x0 0x0 0xffffb68000009480 0045 00000000 0x0 0x0 0xffffb68000009500 0041 00000000 0x0 0x0 0xffffb68000009580 0041 00000000 0x0 0x0 0xffffb68000009600 0041 00000000 0x0 0x0 0xffffb68000009680 0041 00000000 0x0 0x0 0xffffb68000009700 0041 00000000 0x0 0x0 0xffffb68000009780 0041 00000000 0x0 0x0 0xffffb68000009800 0041 00000000 0x0 0x0 0xffffb68000009880 0041 00000000 0x0 0x0 0xffffb68000009900 0041 00000000 0x0 0x0 0xffffb68000009980 0041 00000000 0x0 0x0 0xffffb68000009a00 0041 00000000 0x0 0x0 0xffffb68000009a80 0045 00000000 0x0 0x0 0xffffb68000009b00 0041 00000000 0x0 0x0 0xffffb68000009b80 0041 00000000 0x0 0x0 0xffffb68000009c00 0041 00000000 0x0 0x0 0xffffb68000009c80 0041 00000000 0x0 0x0 0xffffb68000009d00 0041 00000000 0x0 0x0 0xffffb68000009d80 0041 00000000 0x0 0x0 0xffffb68000009e00 0041 00000000 0x0 0x0 0xffffb68000009e80 0041 00000000 0x0 0x0 0xffffb68000009f00 0041 00000000 0x0 0x0 0xffffb68000009f80 0041 00000000 0x0 0x0 0xffffb6800000a000 0041 00000000 0x0 0x0 0xffffb6800000a080 0041 00000000 0x0 0x0 0xffffb6800000a100 0041 00000000 0x0 0x0 0xffffb6800000a180 0041 00000000 0x0 0x0 0xffffb6800000a200 0041 00000000 0x0 0x0 0xffffb6800000a280 0041 00000000 0x0 0x0 0xffffb6800000a300 0041 00000000 0x0 0x0 0xffffb6800000a380 0041 00000000 0x0 0x0 0xffffb6800000a400 0041 00000000 0x0 0x0 0xffffb6800000a480 0041 00000000 0x0 0x0 0xffffb6800000a500 0041 00000000 0x0 0x0 0xffffb6800000a580 0041 00000000 0x0 0x0 0xffffb6800000a600 0041 00000000 0x0 0x0 0xffffb6800000a680 0041 00000000 0x0 0x0 0xffffb6800000a700 0041 00000000 0x0 0x0 0xffffb6800000a780 0041 00000000 0x0 0x0 0xffffb6800000a800 0041 00000000 0x0 0x0 0xffffb6800000a880 0041 00000000 0x0 0x0 0xffffb6800000a900 0041 00000000 0x0 0x0 0xffffb6800000a980 0041 00000000 0x0 0x0 0xffffb6800000aa00 0041 00000000 0x0 0x0 0xffffb6800000aa80 0041 00000000 0x0 0x0 0xffffb6800000ab00 0041 00000000 0x0 0x0 0xffffb6800000ab80 0041 00000000 0x0 0x0 0xffffb6800000ac00 0041 00000000 0x0 0x0 0xffffb6800000ac80 0041 00000000 0x0 0x0 0xffffb6800000ad00 0041 00000000 0x0 0x0 0xffffb6800000ad80 0041 00000000 0x0 0x0 0xffffb6800000ae00 0041 00000000 0x0 0x0 0xffffb6800000ae80 0045 00000000 0x0 0x0 0xffffb6800000af00 0045 00000000 0x0 0x0 0xffffb6800000af80 0045 00000000 0x0 0x0 0xffffb6800000b000 0041 00000000 0x0 0x0 0xffffb6800000b080 0041 00000000 0x0 0x0 0xffffb6800000b100 0041 00000000 0x0 0x0 0xffffb6800000b180 0045 00000000 0x0 0x0 0xffffb6800000b200 0041 00000000 0x0 0x0 0xffffb6800000b280 0045 00000000 0x0 0x0 0xffffb6800000b300 0045 00000000 0x0 0x0 0xffffb6800000b380 0045 00000000 0x0 0x0 0xffffb6800000b400 0041 00000000 0x0 0x0 0xffffb6800000b480 0041 00000000 0x0 0x0 0xffffb6800000b500 0045 00000000 0x0 0x0 0xffffb6800000b580 0045 00000000 0x0 0x0 0xffffb6800000b600 0045 00000000 0x0 0x0 0xffffb6800000b680 0045 00000000 0x0 0x0 0xffffb6800000b700 0045 00000000 0x0 0x0 0xffffb6800000b780 0045 00000000 0x0 0x0 0xffffb6800000b800 0045 00000000 0x0 0x0 0xffffb6800000b880 0041 00000000 0x0 0x0 0xffffb6800000b900 0045 00000000 0x0 0x0 0xffffb6800000b980 0045 00000000 0x0 0x0 0xffffb6800000ba00 0045 00000000 0x0 0x0 0xffffb6800000ba80 0045 00000000 0x0 0x0 0xffffb6800000bb00 0045 00000000 0x0 0x0 0xffffb6800000bb80 0045 00000000 0x0 0x0 0xffffb6800000bc00 0045 00000000 0x0 0x0 0xffffb6800000bc80 0041 00000000 0x0 0x0 0xffffb6800000bd00 0045 00000000 0x0 0x0 0xffffb6800000bd80 0045 00000000 0x0 0x0 0xffffb6800000be00 0045 00000000 0x0 0x0 0xffffb6800000be80 0045 00000000 0x0 0x0 0xffffb6800000bf00 0045 00000000 0x0 0x0 0xffffb6800000bf80 0045 00000000 0x0 0x0 0xffffb6800000c000 0045 00000000 0x0 0x0 0xffffb6800000c080 0041 00000000 0x0 0x0 0xffffb6800000c100 0045 00000000 0x0 0x0 0xffffb6800000c180 0045 00000000 0x0 0x0 0xffffb6800000c200 0045 00000000 0x0 0x0 0xffffb6800000c280 0045 00000000 0x0 0x0 0xffffb6800000c300 0045 00000000 0x0 0x0 0xffffb6800000c380 0045 00000000 0x0 0x0 0xffffb6800000c400 0045 00000000 0x0 0x0 0xffffb6800000c480 0045 00000000 0x0 0x0 0xffffb6800000c500 0045 00000000 0x0 0x0 0xffffb6800000c580 0045 00000000 0x0 0x0 0xffffb6800000c600 0045 00000000 0x0 0x0 0xffffb6800000c680 0045 00000000 0x0 0x0 0xffffb6800000c700 0041 00000000 0x0 0x0 0xffffb6800000c780 0041 00000000 0x0 0x0 0xffffb6800000c800 0045 00000000 0x0 0x0 0xffffb6800000c880 0045 00000000 0x0 0x0 0xffffb6800000c900 0045 00000000 0x0 0x0 0xffffb6800000c980 0045 00000000