panic: [ 106.ADDR] vpanic() at netbsd:vpanic+0x265

[syzbot]

Hello,

syzbot found the following issue on:

HEAD commit: 2bf4760b Add a static EDID entry for the Mesostation-999. ..
git tree: netbsd
console output: https://syzkaller.appspot.com/x/log.txt?x=1730f19f900000
kernel config: https://syzkaller.appspot.com/x/.config?x=fab579639ba4bf0a
dashboard link: https://syzkaller.appspot.com/bug?extid=4cfea46146a5263f287c
compiler: g++ (Ubuntu 5.4.0-6ubuntu1~16.04.12) 5.4.0 20160609

Unfortunately, I don't have any reproducer for this issue yet.

IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+4cfea4...@syzkaller.appspotmail.com

106.4593791] panic: [ 106.4893527] vpanic() at netbsd:vpanic+0x265 sys/kern/subr_prf.c:290
[ 106.5293503] _GLOBAL__sub_D_65535_0_cpu_configure() at netbsd:_GLOBAL__sub_D_65535_0_cpu_configure
[ 106.5793490] chgsemcnt() at netbsd:chgsemcnt+0x71 sys/kern/kern_uidinfo.c:242
[ 106.6293522] ksem_release() at netbsd:ksem_release+0xbf sys/kern/uipc_sem.c:536
[ 106.6793521] ksem_close_fop() at netbsd:ksem_close_fop+0xb0 sys/kern/uipc_sem.c:853
[ 106.7193527] closef() at netbsd:closef+0x152 sys/kern/kern_descrip.c:832
[ 106.7693502] fd_free() at netbsd:fd_free+0x544 sys/kern/kern_descrip.c:1565
[ 106.8093505] exit1() at netbsd:exit1+0x307 sys/kern/kern_exit.c:301
[ 106.8493489] sys_exit() at netbsd:sys_exit+0x92 sys/kern/kern_exit.c:180
[ 106.8993503] syscall() at netbsd:syscall+0x259 sy_call sys/sys/syscallvar.h:65 [inline]
[ 106.8993503] syscall() at netbsd:syscall+0x259 sy_invoke sys/sys/syscallvar.h:94 [inline]
[ 106.8993503] syscall() at netbsd:syscall+0x259 sys/arch/x86/x86/syscall.c:138
[ 106.9093488] --- syscall (number 1) ---
[ 106.9293482] netbsd:syscall+0x259:
[ 106.9293482] cpu0: End traceback...
[ 106.9293482] fatal breakpoint trap in supervisor mode
[ 106.9410793] trap type 1 code 0 rip 0xffffffff80220a1d cs 0x8 rflags 0x286 cr2 0x76ce069ee710 ilevel 0 rsp 0xffffc701937e0930
[ 106.9522557] curlwp 0xffffc700144858c0 pid 415.415 lowest kstack 0xffffc701937d92c0
Stopped in pid 415.415 (syz-executor.1) at netbsd:breakpoint+0x5: leave
?
breakpoint() at netbsd:breakpoint+0x5
db_panic() at netbsd:db_panic+0x105 sys/ddb/db_panic.c:67
vpanic() at netbsd:vpanic+0x265 sys/kern/subr_prf.c:290
_GLOBAL__sub_D_65535_0_cpu_configure() at netbsd:_GLOBAL__sub_D_65535_0_cpu_configure
chgsemcnt() at netbsd:chgsemcnt+0x71 sys/kern/kern_uidinfo.c:242
ksem_release() at netbsd:ksem_release+0xbf sys/kern/uipc_sem.c:536
ksem_close_fop() at netbsd:ksem_close_fop+0xb0 sys/kern/uipc_sem.c:853
closef() at netbsd:closef+0x152 sys/kern/kern_descrip.c:832
fd_free() at netbsd:fd_free+0x544 sys/kern/kern_descrip.c:1565
exit1() at netbsd:exit1+0x307 sys/kern/kern_exit.c:301
sys_exit() at netbsd:sys_exit+0x92 sys/kern/kern_exit.c:180
syscall() at netbsd:syscall+0x259 sy_call sys/sys/syscallvar.h:65 [inline]
syscall() at netbsd:syscall+0x259 sy_invoke sys/sys/syscallvar.h:94 [inline]
syscall() at netbsd:syscall+0x259 sys/arch/x86/x86/syscall.c:138
--- syscall (number 1) ---
netbsd:syscall+0x259:
Panic string: kernel diagnostic assertion "semcnt >= 0" failed: file "/syzkaller/managers/netbsd/kernel/sys/kern/kern_uidinfo.c", line 241
PID LID S CPU FLAGS STRUCT LWP * NAME WAIT
5309 5309 2 0 0 ffffc70012d0a900 syz-executor.3
4796 4796 2 0 0 ffffc700143e12c0 syz-executor.2
1465 1465 3 0 80 ffffc70013880ac0 syz-executor.3 parked
4915 5307 2 1 0 ffffc700144cd0c0 syz-executor.3
4915 4920 3 0 0 ffffc70012af1780 syz-executor.3 vfork
4915 4915 2 1 10000000 ffffc70012a60b00 syz-executor.3
1456 5044 3 1 80 ffffc70012be50c0 syz-executor.4 poll
1456 1456 2 1 10000040 ffffc70013901500 syz-executor.4
415 > 415 7 0 10000000 ffffc700144858c0 syz-executor.1
5219 5219 3 0 80 ffffc70012dea340 syz-executor.4 parked
4957 4957 3 0 80 ffffc700137ae940 syz-executor.4 parked
4684 4684 3 0 80 ffffc70014527980 syz-executor.0 parked
4412 4412 3 0 80 ffffc700138e3340 syz-executor.3 parked
4647 4647 3 0 80 ffffc70013867640 syz-executor.3 parked
4041 4041 3 0 80 ffffc70012e03480 syz-executor.1 parked
3141 3141 3 0 80 ffffc70012cb86c0 syz-executor.2 parked
4054 4054 3 0 80 ffffc70014398240 syz-executor.2 parked
3934 3934 3 0 80 ffffc70014485040 syz-executor.1 parked
3583 3583 3 0 80 ffffc70012c0d100 syz-executor.1 parked
3134 3134 4 0 1000000 ffffc70012b86900 syz-executor.0
3154 3154 3 0 80 ffffc70012d4f1c0 syz-executor.0 parked
3266 3031 4 0 1000000 ffffc70012d0a4c0 syz-executor.0
3266 3393 4 1 1000080 ffffc70012ccc2c0 syz-executor.0 parked
3266 3266 4 1 11000000 ffffc70012b864c0 syz-executor.0
1081 1081 3 1 c0 ffffc700142a0640 syz-executor.5 pipe_rd
1092 1092 2 1 40 ffffc700142a0200 syz-executor.4
416 416 2 1 40 ffffc70014269a40 syz-executor.3
1072 1072 2 1 40 ffffc70014269600 syz-executor.1
1077 1077 2 1 40 ffffc700142691c0 syz-executor.2
991 991 2 0 40 ffffc70012b20480 syz-executor.0
945 1078 3 1 80 ffffc700141a9a00 syz-fuzzer parked
945 1249 3 1 80 ffffc700141a95c0 syz-fuzzer parked
945 940 2 0 40 ffffc700141a9180 syz-fuzzer
945 1069 3 1 c0 ffffc700141a1580 syz-fuzzer parked
945 1064 3 1 80 ffffc700141a1140 syz-fuzzer parked
945 1065 3 0 80 ffffc70013840a00 syz-fuzzer parked
945 1253 3 0 c0 ffffc70012d17500 syz-fuzzer parked
945 1067 3 0 80 ffffc7001392d100 syz-fuzzer parked
945 1250 2 1 40 ffffc70012a952c0 syz-fuzzer
945 945 3 0 80 ffffc70013815980 syz-fuzzer parked
1254 1254 3 0 80 ffffc70012b208c0 sshd select
1105 1105 3 0 80 ffffc700127c3700 getty nanoslp
943 943 3 1 80 ffffc7001392d980 getty nanoslp
1091 1091 3 1 80 ffffc7001392d540 getty nanoslp
852 852 3 1 c0 ffffc700127c6300 getty ttyraw
938 938 3 1 80 ffffc700138405c0 sshd select
979 979 3 1 80 ffffc70012dbe300 powerd kqueue
608 608 3 0 80 ffffc700138beb00 syslogd kqueue
592 592 3 0 80 ffffc70012c63a40 dhcpcd poll
590 590 3 0 80 ffffc70012cfe8c0 dhcpcd poll
589 589 3 1 80 ffffc70012cccb40 dhcpcd poll
412 412 3 1 80 ffffc70012c74640 dhcpcd poll
347 347 3 0 80 ffffc70012e03040 dhcpcd poll
346 346 3 0 80 ffffc70012deabc0 dhcpcd poll
345 345 3 1 80 ffffc70012dea780 dhcpcd poll
1 1 3 1 80 ffffc700128c5540 init wait
0 860 3 0 200 ffffc700129f8640 physiod physiod
0 166 3 0 200 ffffc700129fc680 pooldrain pooldrain
0 163 3 0 200 ffffc700129fc240 ioflush syncer
0 164 3 1 200 ffffc700129f8a80 pgdaemon pgdaemon
0 161 3 1 200 ffffc700129b5a40 usb7 usbevt
0 31 3 1 200 ffffc700129b5600 usb6 usbevt
0 63 3 1 200 ffffc700129b51c0 usb5 usbevt
0 126 3 1 200 ffffc70012965a00 usb4 usbevt
0 125 3 1 200 ffffc700129655c0 usb3 usbevt
0 124 3 1 200 ffffc70012965180 usb2 usbevt
0 123 3 1 200 ffffc700129259c0 usb1 usbevt
0 122 3 1 200 ffffc70012925580 usb0 usbevt
0 121 3 1 200 ffffc70012925140 usbtask-dr usbtsk
0 120 3 0 200 ffffc7000fe34ac0 usbtask-hc usbtsk
0 119 3 0 200 ffffc700128c5980 npfgc0 npfgcw
0 118 3 1 200 ffffc700128c5100 rt_free rt_free
0 117 3 1 200 ffffc700127f8940 unpgc unpgc
0 116 2 0 200 ffffc700127f8500 key_timehandler
0 115 3 1 200 ffffc700127f80c0 icmp6_wqinput/1 icmp6_wqinput
0 114 3 0 200 ffffc700127ed900 icmp6_wqinput/0 icmp6_wqinput
0 113 2 0 200 ffffc700127ed4c0 nd6_timer
0 112 3 1 200 ffffc700127ed080 carp6_wqinput/1 carp6_wqinput
0 111 3 0 200 ffffc700127e88c0 carp6_wqinput/0 carp6_wqinput
0 110 3 1 200 ffffc700127e8480 carp_wqinput/1 carp_wqinput
0 109 3 0 200 ffffc700127e8040 carp_wqinput/0 carp_wqinput
0 108 3 1 200 ffffc700127c7bc0 icmp_wqinput/1 icmp_wqinput
0 107 3 0 200 ffffc700127c7780 icmp_wqinput/0 icmp_wqinput
0 106 3 0 200 ffffc700127c7340 rt_timer rt_timer
0 105 3 1 200 ffffc700127c6740 vmem_rehash vmem_rehash
0 104 3 1 200 ffffc700127c3b40 entbutler entropy
0 30 3 1 200 ffffc7001213a6c0 vioif0_txrx/1 vioif0_txrx
0 29 3 0 200 ffffc7001213a280 vioif0_txrx/0 vioif0_txrx
0 27 3 0 200 ffffc7000fe34680 scsibus0 sccomp
0 26 3 0 200 ffffc7000fe34240 pms0 pmsreset
0 25 3 1 200 ffffc7000fd89a80 xcall/1 xcall
0 24 1 1 200 ffffc7000fd89640 softser/1
0 23 1 1 200 ffffc7000fd89200 softclk/1
0 22 1 1 200 ffffc7000fd87a40 softbio/1
0 21 1 1 200 ffffc7000fd87600 softnet/1
0 20 1 1 201 ffffc7000fd871c0 idle/1
0 19 3 0 200 ffffc7000e7f8a00 lnxpwrwq lnxpwrwq
0 18 3 0 200 ffffc7000e7f85c0 lnxlngwq lnxlngwq
0 17 3 0 200 ffffc7000e7f8180 lnxsyswq lnxsyswq
0 16 3 0 200 ffffc7000e7f09c0 lnxrcugc lnxrcugc
0 15 3 0 200 ffffc7000e7f0580 sysmon smtaskq
0 14 3 0 200 ffffc7000e7f0140 pmfsuspend pmfsuspend
0 13 3 0 200 ffffc7000e7ec980 pmfevent pmfevent
0 12 3 0 200 ffffc7000e7ec540 sopendfree sopendfr
0 11 3 1 200 ffffc7000e7ec100 iflnkst iflnkst
0 10 3 0 200 ffffc7000e7e0940 nfssilly nfssilly
0 9 3 0 200 ffffc7000e7e0500 vdrain vdrain
0 8 3 0 200 ffffc7000e7e00c0 modunload mod_unld
0 7 3 0 200 ffffc7000e7d3900 xcall/0 xcall
0 6 1 0 200 ffffc7000e7d34c0 softser/0
0 5 1 0 200 ffffc7000e7d3080 softclk/0
0 4 1 0 200 ffffc7000e7d18c0 softbio/0
0 3 1 0 200 ffffc7000e7d1480 softnet/0
0 2 1 0 201 ffffc7000e7d1040 idle/0
0 > 0 7 1 240 ffffffff82eecf80 swapper
[Locks tracked through LWPs]

****** LWP 5309.5309 (syz-executor.3) @ 0xffffc70012d0a900, l_stat=2

*** Locks held:

* Lock 0 (initialized at pmap_ctor)
lock address : 0xffffc70012aba180 type : sleep/adaptive
initialized : 0xffffffff808d3c24
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffffc70012d0a900 last held: 0xffffc70012d0a900
last locked* : 0xffffffff808d58b2 unlocked : 0xffffffff808d3937
owner field : 0xffffc70012d0a900 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

*** Locks wanted: none

****** LWP 4796.4796 (syz-executor.2) @ 0xffffc700143e12c0, l_stat=2

*** Locks held:

* Lock 0 (initialized at amap_ctor)
lock address : 0xffffc700141af980 type : sleep/adaptive
initialized : 0xffffffff81825b2b
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffffc700143e12c0 last held: 0xffffc700143e12c0
last locked* : 0xffffffff8183642d unlocked : 0xffffffff81833ff6
owner/count : 0xffffc700143e12c0 flags : 0x0000000000000004
Turnstile: no active turnstile for this lock.

*** Locks wanted: none

****** LWP 415.415 (syz-executor.1) @ 0xffffc700144858c0, l_stat=7

*** Locks held:

* Lock 0 (initialized at fork1)
lock address : 0xffffc700138bf4d0 type : sleep/adaptive
initialized : 0xffffffff818c196e
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffffc700144858c0 last held: 0xffffc700144858c0
last locked* : 0xffffffff818bdcf1 unlocked : 000000000000000000
owner/count : 0xffffc700144858c0 flags : 0x0000000000000004
Turnstile: no active turnstile for this lock.

*** Locks wanted: none

****** LWP 590.590 (dhcpcd) @ 0xffffc70012cfe8c0, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at module_hook_init)
lock address : 0xffffffff82ff4880 type : sleep/adaptive
initialized : 0xffffffff818dbbb1
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffffc70012cfe8c0 last held: 000000000000000000
last locked : 000000000000000000 unlocked*: 000000000000000000
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 589.589 (dhcpcd) @ 0xffffc70012cccb40, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at module_hook_init)
lock address : 0xffffffff82ff4880 type : sleep/adaptive
initialized : 0xffffffff818dbbb1
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 0
relevant lwp : 0xffffc70012cccb40 last held: 000000000000000000
last locked : 000000000000000000 unlocked*: 000000000000000000
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 346.346 (dhcpcd) @ 0xffffc70012deabc0, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at module_hook_init)
lock address : 0xffffffff82ff4880 type : sleep/adaptive
initialized : 0xffffffff818dbbb1
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffffc70012deabc0 last held: 000000000000000000
last locked : 000000000000000000 unlocked*: 000000000000000000
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 345.345 (dhcpcd) @ 0xffffc70012dea780, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at module_hook_init)
lock address : 0xffffffff82ff4880 type : sleep/adaptive
initialized : 0xffffffff818dbbb1
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 0
relevant lwp : 0xffffc70012dea780 last held: 000000000000000000
last locked : 000000000000000000 unlocked*: 000000000000000000
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 0.11 (iflnkst) @ 0xffffc7000e7ec100, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at module_hook_init)
lock address : 0xffffffff82ff4880 type : sleep/adaptive
initialized : 0xffffffff818dbbb1
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 0
relevant lwp : 0xffffc7000e7ec100 last held: 000000000000000000
last locked : 000000000000000000 unlocked*: 000000000000000000
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 0.5 (softclk/0) @ 0xffffc7000e7d3080, l_stat=1

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at module_hook_init)
lock address : 0xffffffff82ff4880 type : sleep/adaptive
initialized : 0xffffffff818dbbb1
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffffc7000e7d3080 last held: 000000000000000000
last locked : 000000000000000000 unlocked*: 000000000000000000
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

[Locks tracked through CPUs]

PAGE FLAG PQ UOBJECT UANON
0xffffc70000017180 0041 00000000 0x0 0x0
0xffffc70000017200 0001 00000000 0x0 0x0
0xffffc70000017280 0001 00000000 0x0 0x0
0xffffc70000017300 0001 00000000 0x0 0x0
0xffffc70000017380 0001 00000000 0x0 0x0
0xffffc70000017400 0001 00000000 0x0 0x0
0xffffc70000017480 0001 00000000 0x0 0x0
0xffffc70000017500 0001 00000000 0x0 0x0
0xffffc70000017580 0001 00000000 0x0 0x0
0xffffc70000017600 0001 00000000 0x0 0x0
0xffffc70000017680 0001 00000000 0x0 0x0
0xffffc70000017700 0001 00000000 0x0 0x0
0xffffc70000017780 0001 00000000 0x0 0x0
0xffffc70000017800 0001 00000000 0x0 0x0
0xffffc70000017880 0001 00000000 0x0 0x0
0xffffc70000017900 0001 00000000 0x0 0x0
0xffffc70000017980 0001 00000000 0x0 0x0
0xffffc70000017a00 0001 00000000 0x0 0x0
0xffffc70000017a80 0001 00000000 0x0 0x0
0xffffc70000017b00 0001 00000000 0x0 0x0
0xffffc70000017b80 0001 00000000 0x0 0x0
0xffffc70000017c00 0001 00000000 0x0 0x0
0xffffc70000017c80 0001 00000000 0x0 0x0
0xffffc70000017d00 0001 00000000 0x0 0x0
0xffffc70000017d80 0001 00000000 0x0 0x0
0xffffc70000017e00 0001 00000000 0x0 0x0
0xffffc70000017e80 0001 00000000 0x0 0x0
0xffffc70000017f00 0001 00000000 0x0 0x0
0xffffc70000017f80 0001 00000000 0x0 0x0
0xffffc70000018000 0001 00000000 0x0 0x0
0xffffc70000018080 0001 00000000 0x0 0x0
0xffffc70000018100 0001 00000000 0x0 0x0
0xffffc70000018180 0001 00000000 0x0 0x0
0xffffc70000018200 0001 00000000 0x0 0x0
0xffffc70000018280 0001 00000000 0x0 0x0
0xffffc70000018300 0001 00000000 0x0 0x0
0xffffc70000018380 0001 00000000 0x0 0x0
0xffffc70000018400 0001 00000000 0x0 0x0
0xffffc70000018480 0001 00000000 0x0 0x0
0xffffc70000018500 0001 00000000 0x0 0x0
0xffffc70000018580 0001 00000000 0x0 0x0
0xffffc70000018600 0001 00000000 0x0 0x0
0xffffc70000018680 0001 00000000 0x0 0x0
0xffffc70000018700 0001 00000000 0x0 0x0
0xffffc70000018780 0001 00000000 0x0 0x0
0xffffc70000018800 0001 00000000 0x0 0x0
0xffffc70000018880 0001 00000000 0x0 0x0
0xffffc70000018900 0001 00000000 0x0 0x0
0xffffc70000018980 0001 00000000 0x0 0x0
0xffffc70000018a00 0001 00000000 0x0 0x0
0xffffc70000018a80 0001 00000000 0x0 0x0
0xffffc70000018b00 0001 00000000 0x0 0x0
0xffffc70000018b80 0001 00000000 0x0 0x0
0xffffc70000018c00 0001 00000000 0x0 0x0
0xffffc70000018c80 0001 00000000 0x0 0x0
0xffffc70000018d00 0001 00000000 0x0 0x0
0xffffc70000018d80 0001 00000000 0x0 0x0
0xffffc70000018e00 0001 00000000 0x0 0x0
0xffffc70000018e80 0001 00000000 0x0 0x0
0xffffc70000018f00 0001 00000000 0x0 0x0
0xffffc70000018f80 0001 00000000 0x0 0x0
0xffffc70000019000 0001 00000000 0x0 0x0
0xffffc70000019080 0001 00000000 0x0 0x0
0xffffc70000019100 0001 00000000 0x0 0x0
0xffffc70000019180 0001 00000000 0x0 0x0
0xffffc70000019200 0001 00000000 0x0 0x0
0xffffc70000019280 0001 00000000 0x0 0x0
0xffffc70000019300 0001 00000000 0x0 0x0
0xffffc70000019380 0001 00000000 0x0 0x0
0xffffc70000019400 0001 00000000 0x0 0x0
0xffffc70000019480 0001 00000000 0x0 0x0
0xffffc70000019500 0001 00000000 0x0 0x0
0xffffc70000019580 0001 00000000 0x0 0x0
0xffffc70000019600 0001 00000000 0x0 0x0
0xffffc70000019680 0001 00000000 0x0 0x0
0xffffc70000019700 0001 00000000 0x0 0x0
0xffffc70000019780 0001 00000000 0x0 0x0
0xffffc70000019800 0001 00000000 0x0 0x0
0xffffc70000019880 0001 00000000 0x0 0x0
0xffffc70000019900 0001 00000000 0x0 0x0
0xffffc70000019980 0001 00000000 0x0 0x0
0xffffc70000019a00 0001 00000000 0x0 0x0
0xffffc70000019a80 0001 00000000 0x0 0x0
0xffffc70000019b00 0001 00000000 0x0 0x0
0xffffc70000019b80 0001 00000000 0x0 0x0
0xffffc70000019c00 0001 00000000 0x0 0x0
0xffffc70000019c80 0001 00000000 0x0 0x0
0xffffc70000019d00 0001 00000000 0x0 0x0
0xffffc70000019d80 0001 00000000 0x0 0x0
0xffffc70000019e00 0001 00000000 0x0 0x0
0xffffc70000019e80 0001 00000000 0x0 0x0
0xffffc70000019f00 0001 00000000 0x0 0x0
0xffffc70000019f80 0001 00000000 0x0 0x0
0xffffc7000001a000 0001 00000000 0x0 0x0
0xffffc7000001a080 0001 00000000 0x0 0x0
0xffffc7000001a100 0001 00000000 0x0 0x0
0xffffc7000001a180 0001 00000000 0x0 0x0
0xffffc7000001a200 0001 00000000 0x0 0x0
0xffffc7000001a280 0001 00000000 0x0 0x0
0xffffc7000001a300 0001 00000000 0x0 0x0
0xffffc7000001a380 0001 00000000 0x0 0x0
0xffffc7000001a400 0001 00000000 0x0 0x0
0xffffc7000001a480 0001 00000000 0x0 0x0
0xffffc7000001a500 0001 00000000 0x0 0x0
0xffffc7000001a580 0001 00000000 0x0 0x0
0xffffc7000001a600 0001 00000000 0x0 0x0
0xffffc7000001a680 0001 00000000 0x0 0x0
0xffffc7000001a700 0001 00000000 0x0 0x0
0xffffc7000001a780 0001 00000000 0x0 0x0
0xffffc7000001a800 0001 00000000 0x0 0x0
0xffffc7000001a880 0001 00000000 0x0 0x0
0xffffc7000001a900 0001 00000000 0x0 0x0
0xffffc7000001a980 0001 00000000 0x0 0x0
0xffffc7000001aa00 0001 00000000 0x0 0x0
0xffffc7000001aa80 0001 00000000 0x0 0x0
0xffffc7000001ab00 0001 00000000 0x0 0x0
0xffffc7000001ab80 0001 00000000 0x0 0x0
0xffffc7000001ac00 0001 00000000 0x0 0x0
0xffffc7000001ac80 0001 00000000 0x0 0x0
0xffffc7000001ad00 0001 00000000 0x0 0x0
0xffffc7000001ad80 0001 00000000 0x0 0x0
0xffffc7000001ae00 0001 00000000 0x0 0x0
0xffffc7000001ae80 0001 00000000 0x0 0x0
0xffffc7000001af00 0001 00000000 0x0 0x0
0xffffc7000001af80 0001 00000000 0x0 0x0
0xffffc7000001b000 0001 00000000 0x0 0x0
0xffffc7000001b080 0001 00000000 0x0 0x0
0xffffc7000001b100 0001 00000000 0x0 0x0
0xffffc7000001b180 0001 00000000 0x0 0x0
0xffffc7000001b200 0001 00000000 0x0 0x0
0xffffc7000001b280 0001 00000000 0x0 0x0
0xffffc7000001b300 0001 00000000 0x0 0x0
0xffffc7000001b380 0001 00000000 0x0 0x0
0xffffc7000001b400 0001 00000000 0x0 0x0
0xffffc7000001b480 0001 00000000 0x0 0x0
0xffffc7000001b500 0001 00000000 0x0 0x0
0xffffc7000001b580 0001 00000000 0x0 0x0
0xffffc7000001b600 0001 00000000 0x0 0x0
0xffffc7000001b680 0001 00000000 0x0 0x0
0xffffc7000001b700 0001 00000000 0x0 0x0
0xffffc7000001b780 0001 00000000 0x0 0x0
0xffffc7000001b800 0001 00000000 0x0 0x0
0xffffc7000001b880 0001 00000000 0x0 0x0
0xffffc7000001b900 0001 00000000 0x0 0x0
0xffffc7000001b980 0001 00000000 0x0 0x0
0xffffc7000001ba00 0001 00000000 0x0 0x0
0xffffc7000001ba80 0001 00000000 0x0 0x0
0xffffc7000001bb00 0001 00000000 0x0 0x0
0xffffc7000001bb80 0001 00000000 0x0 0x0
0xffffc7000001bc00 0001 00000000 0x0 0x0
0xffffc7000001bc80 0001 00000000 0x0 0x0
0xffffc7000001bd00 0001 00000000 0x0 0x0
0xffffc7000001bd80 0001 00000000 0x0 0x0
0xffffc7000001be00 0001 00000000 0x0 0x0
0xffffc7000001be80 0001 00000000 0x0 0x0
0xffffc7000001bf00 0001 00000000 0x0 0x0
0xffffc7000001bf80 0001 00000000 0x0 0x0
0xffffc7000001c000 0001 00000000 0x0 0x0
0xffffc7000001c080 0001 00000000 0x0 0x0
0xffffc7000001c100 0001 00000000 0x0 0x0
0xffffc7000001c180 0001 00000000 0x0 0x0
0xffffc7000001c200 0001 00000000 0x0 0x0
0xffffc7000001c280 0001 00000000 0x0 0x0
0xffffc7000001c300 0001 00000000 0x0 0x0
0xffffc7000001c380 0001 00000000 0x0 0x0
0xffffc7000001c400 0001 00000000 0x0 0x0
0xffffc7000001c480 0001 00000000 0x0 0x0
0xffffc7000001c500 0001 00000000 0x0 0x0
0xffffc7000001c580 0001 00000000 0x0 0x0
0xffffc7000001c600 0001 00000000 0x0 0x0
0xffffc7000001c680 0001 00000000 0x0 0x0
0xffffc7000001c700 0001 00000000 0x0 0x0
0xffffc7000001c780 0001 00000000 0x0 0x0
0xffffc7000001c800 0001 00000000 0x0 0x0
0xffffc7000001c880 0001 00000000 0x0 0x0
0xffffc7000001c900 0001 00000000 0x0 0x0
0xffffc7000001c980 0001 00000000 0x0 0x0
0xffffc7000001ca00 0001 00000000 0x0 0x0
0xffffc7000001ca80 0001 00000000 0x0 0x0
0xffffc7000001cb00 0001 00000000 0x0 0x0
0xffffc7000001cb80 0001 00000000 0x0 0x0
0xffffc7000001cc00 0001 00000000 0x0 0x0
0xffffc7000001cc80 0001 00000000 0x0 0x0
0xffffc7000001cd00 0001 00000000 0x0 0x0
0xffffc7000001cd80 0001 00000000 0x0 0x0
0xffffc7000001ce00 0001 00000000 0x0 0x0
0xffffc7000001ce80 0001 00000000 0x0 0x0
0xffffc7000001cf00 0001 00000000 0x0 0x0
0xffffc7000001cf80 0001 00000000 0x0 0x0
0xffffc7000001d000 0001 00000000 0x0 0x0
0xffffc7000001d080 0001 00000000 0x0 0x0
0xffffc7000001d100 0001 00000000 0x0 0x0
0xffffc7000001d180 0001 00000000 0x0 0x0
0xffffc7000001d200 0001 00000000 0x0 0x0
0xffffc7000001d280 0001 00000000 0x0 0x0
0xffffc7000001d300 0001 00000000 0x0 0x0
0xffffc7000001d380 0001 00000000 0x0 0x0
0xffffc7000001d400 0001 00000000 0x0 0x0
0xffffc7000001d480 0001 00000000 0x0 0x0
0xffffc7000001d500 0001 00000000 0x0 0x0
0xffffc7000001d580 0001 00000000 0x0 0x0
0xffffc7000001d600 0001 00000000 0x0 0x0
0xffffc7000001d680 0001 00000000 0x0 0x0
0xffffc7000001d700 0001 00000000 0x0 0x0
0xffffc7000001d780 0001 00000000 0x0 0x0
0xffffc7000001d800 0001 00000000 0x0 0x0
0xffffc7000001d880 0001 00000000 0x0 0x0
0xffffc7000001d900 0001 00000000 0x0 0x0
0xffffc7000001d980 0001 00000000 0x0 0x0
0xffffc7000001da00 0001 00000000 0x0 0x0
0xffffc7000001da80 0001 00000000 0x0 0x0
0xffffc7000001db00 0001 00000000 0x0 0x0
0xffffc7000001db80 0001 00000000 0x0 0x0
0xffffc7000001dc00 0001 00000000 0x0 0x0
0xffffc7000001dc80 0001 00000000 0x0 0x0
0xffffc7000001dd00 0001 00000000 0x0 0x0
0xffffc7000001dd80 0001 00000000 0x0 0x0
0xffffc7000001de00 0001 00000000 0x0 0x0
0xffffc7000001de80 0001 00000000 0x0 0x0
0xffffc7000001df00 0001 00000000 0x0 0x0
0xffffc7000001df80 0001 00000000 0x0 0x0
0xffffc7000001e000 0001 00000000 0x0 0x0
0xffffc7000001e080 0001 00000000 0x0 0x0
0xffffc7000001e100 0001 00000000 0x0 0x0
0xffffc7000001e180 0001 00000000 0x0 0x0
0xffffc7000001e200 0001 00000000 0x0 0x0
0xffffc7000001e280 0001 00000000 0x0 0x0
0xffffc7000001e300 0001 00000000 0x0 0x0
0xffffc7000001e380 0001 00000000 0x0 0x0
0xffffc7000001e400 0001 00000000 0x0 0x0
0xffffc7000001e480 0001 00000000 0x0 0x0
0xffffc7000001e500 0001 00000000 0x0 0x0
0xffffc7000001e580 0001 00000000 0x0 0x0
0xffffc7000001e600 0001 00000000 0x0 0x0
0xffffc7000001e680 0001 00000000 0x0 0x0
0xffffc7000001e700 0001 00000000 0x0 0x0
0xffffc7000001e780 0001 00000000 0x0 0x0
0xffffc7000001e800 0001 00000000 0x0 0x0
0xffffc7000001e880 0001 00000000 0x0 0x0
0xffffc7000001e900 0001 00000000 0x0 0x0
0xffffc7000001e980 0001 00000000 0x0 0x0
0xffffc7000001ea00 0001 00000000 0x0 0x0
0xffffc7000001ea80 0001 00000000 0x0 0x0
0xffffc7000001eb00 0001 00000000 0x0 0x0
0xffffc7000001eb80 0001 00000000 0x0 0x0
0xffffc7000001ec00 0001 00000000 0x0 0x0
0xffffc7000001ec80 0001 00000000 0x0 0x0
0xffffc7000001ed00 0001 00000000 0x0 0x0
0xffffc7000001ed80 0001 00000000 0x0 0x0
0xffffc7000001ee00 0001 00000000 0x0 0x0
0xffffc7000001ee80 0001 00000000 0x0 0x0
0xffffc7000001ef00 0001 00000000 0x0 0x0
0xffffc7000001ef80 0001 00000000 0x0 0x0
0xffffc7000001f000 0001 00000000 0x0 0x0
0xffffc7000001f080 0001 00000000 0x0 0x0
0xffffc7000001f100 0001 00000000 0x0 0x0
0xffffc7000001f180 0001 00000000 0x0 0x0
0xffffc7000001f200 0001 00000000 0x0 0x0
0xffffc7000001f280 0001 00000000 0x0 0x0
0xffffc7000001f300 0001 00000000 0x0 0x0
0xffffc7000001f380 0001 00000000 0x0 0x0
0xffffc7000001f400 0001 00000000 0x0 0x0
0xffffc7000001f480 0001 00000000 0x0 0x0
0xffffc7000001f500 0001 00000000 0x0 0x0
0xffffc7000001f580 0001 00000000 0x0 0x0
0xffffc7000001f600 0001 00000000 0x0 0x0
0xffffc7000001f680 0001 00000000 0x0 0x0
0xffffc7000001f700 0001 00000000 0x0 0x0
0xffffc7000001f780 0001 00000000 0x0 0x0
0xffffc7000001f800 0001 00000000 0x0 0x0
0xffffc7000001f880 0001 00000000 0x0 0x0
0xffffc7000001f900 0001 00000000 0x0 0x0
0xffffc7000001f980 0001 00000000 0x0 0x0
0xffffc7000001fa00 0001 00000000 0x0 0x0
0xffffc7000001fa80 0001 00000000 0x0 0x0
0xffffc7000001fb00 0001 00000000 0x0 0x0
0xffffc7000001fb80 0001 00000000 0x0 0x0
0xffffc7000001fc00 0001 00000000 0x0 0x0
0xffffc7000001fc80 0001 00000000 0x0 0x0
0xffffc7000001fd00 0001 00000000 0x0 0x0
0xffffc7000001fd80 0001 00000000 0x0 0x0
0xffffc7000001fe00 0001 00000000 0x0 0x0
0xffffc7000001fe80 0001 00000000 0x0 0x0
0xffffc7000001ff00 0001 00000000 0x0 0x0
0xffffc7000001ff80 0001 00000000 0x0 0x0
0xffffc70000020000 0001 00000000 0x0 0x0
0xffffc70000020080 0001 00000000 0x0 0x0
0xffffc70000020100 0001 00000000 0x0 0x0
0xffffc70000020180 0001 00000000 0x0 0x0
0xffffc70000020200 0001 00000000 0x0 0x0
0xffffc70000020280 0001 00000000 0x0 0x0
0xffffc70000020300 0001 00000000 0x0 0x0
0xffffc70000020380 0001 00000000 0x0 0x0
0xffffc70000020400 0001 00000000 0x0 0x0
0xffffc70000020480 0001 00000000 0x0 0x0
0xffffc70000020500 0001 00000000 0x0 0x0
0xffffc70000020580 0001 00000000 0x0 0x0
0xffffc70000020600 0001 00000000 0x0 0x0
0xffffc70000020680 0001 00000000 0x0 0x0
0xffffc70000020700 0001 00000000 0x0 0x0
0xffffc70000020780 0001 00000000 0x0 0x0
0xffffc70000020800 0001 00000000 0x0 0x0
0xffffc70000020880 0001 00000000 0x0 0x0
0xffffc70000020900 0001 00000000 0x0 0x0
0xffffc70000020980 0001 00000000 0x0 0x0
0xffffc70000020a00 0001 00000000 0x0 0x0
0xffffc70000020a80 0001 00000000 0x0 0x0
0xffffc70000020b00 0001 00000000 0x0 0x0
0xffffc70000020b80 0001 00000000 0x0 0x0
0xffffc70000020c00 0001 00000000 0x0 0x0
0xffffc70000020c80 0001 00000000 0x0 0x0
0xffffc70000020d00 0001 00000000 0x0 0x0
0xffffc70000020d80 0001 00000000 0x0 0x0
0xffffc70000020e00 0001 00000000 0x0 0x0
0xffffc70000020e80 0001 00000000 0x0 0x0
0xffffc70000020f00 0001 00000000 0x0 0x0
0xffffc70000020f80 0001 00000000 0x0 0x0
0xffffc70000021000 0001 00000000 0x0 0x0
0xffffc70000021080 0001 00000000 0x0 0x0
0xffffc70000021100 0001 00000000 0x0 0x0
0xffffc70000021180 0001 00000000 0x0 0x0
0xffffc70000021200 0001 00000000 0x0 0x0
0xffffc70000021280 0001 00000000 0x0 0x0
0xffffc70000021300 0001 00000000 0x0 0x0
0xffffc70000021380 0001 00000000 0x0 0x0
0xffffc70000021400 0001 00000000 0x0 0x0
0xffffc70000021480 0001 00000000 0x0 0x0
0xffffc70000021500 0001 00000000 0x0 0x0
0xffffc70000021580 0001 00000000 0x0 0x0
0xffffc70000021600 0001 00000000 0x0 0x0
0xffffc70000021680 0001 00000000 0x0 0x0
0xffffc70000021700 0001 00000000 0x0 0x0
0xffffc70000021780 0001 00000000 0x0 0x0
0xffffc70000021800 0001 00000000 0x0 0x0
0xffffc70000021880 0001 00000000 0x0 0x0
0xffffc70000021900 0001 00000000 0x0 0x0
0xffffc70000021980 0001 00000000 0x0 0x0
0xffffc70000021a00 0001 00000000 0x0 0x0
0xffffc70000021a80 0001 00000000 0x0 0x0
0xffffc70000021b00 0001 00000000 0x0 0x0
0xffffc70000021b80 0001 00000000 0x0 0x0
0xffffc70000021c00 0001 00000000 0x0 0x0
0xffffc70000021c80 0001 00000000 0x0 0x0
0xffffc70000021d00 0001 00000000 0x0 0x0
0xffffc70000021d80 0001 00000000 0x0 0x0
0xffffc70000021e00 0001 00000000 0x0 0x0
0xffffc70000021e80 0001 00000000 0x0 0x0
0xffffc70000021f00 0001 00000000 0x0 0x0
0xffffc70000021f80 0001 00000000 0x0 0x0
0xffffc70000022000 0001 00000000 0x0 0x0
0xffffc70000022080 0001 00000000 0x0 0x0
0xffffc70000022100 0001 00000000 0x0 0x0
0xffffc70000022180 0001 00000000 0x0 0x0
0xffffc70000022200 0001 00000000 0x0 0x0
0xffffc70000022280 0001 00000000 0x0 0x0
0xffffc70000022300 0001 00000000 0x0 0x0
0xffffc70000022380 0001 00000000 0x0 0x0
0xffffc70000022400 0001 00000000 0x0 0x0
0xffffc70000022480 0001 00000000 0x0 0x0
0xffffc70000022500 0001 00000000 0x0 0x0
0xffffc70000022580 0001 00000000 0x0 0x0
0xffffc70000022600 0001 00000000 0x0 0x0
0xffffc70000022680 0001 00000000 0x0 0x0
0xffffc70000022700 0001 00000000 0x0 0x0
0xffffc70000022780 0001 00000000 0x0 0x0
0xffffc70000022800 0001 00000000 0x0 0x0
0xffffc70000022880 0001 00000000 0x0 0x0
0xffffc70000022900 0001 00000000 0x0 0x0
0xffffc70000022980 0001 00000000 0x0 0x0
0xffffc70000022a00 0001 00000000 0x0 0x0
0xffffc70000022a80 0001 00000000 0x0 0x0
0xffffc70000022b00 0001 00000000 0x0 0x0
0xffffc70000022b80 0001 00000000 0x0 0x0
0xffffc70000022c00 0001 00000000 0x0 0x0
0xffffc70000022c80 0001 00000000 0x0 0x0
0xffffc70000022d00 0001 00000000 0x0 0x0
0xffffc70000022d80 0001 00000000 0x0 0x0
0xffffc70000022e00 0001 00000000 0x0 0x0
0xffffc70000022e80 0001 00000000 0x0 0x0
0xffffc70000022f00 0001 00000000 0x0 0x0
0xffffc70000022f80 0001 00000000 0x0 0x0
0xffffc70000023000 0001 00000000 0x0 0x0
0xffffc70000023080 0001 00000000 0x0 0x0
0xffffc70000023100 0001 00000000 0x0 0x0
0xffffc70000023180 0001 00000000 0x0 0x0
0xffffc70000023200 0001 00000000 0x0 0x0
0xffffc70000023280 0001 00000000 0x0 0x0
0xffffc70000023300 0001 00000000 0x0 0x0
0xffffc70000023380 0001 00000000 0x0 0x0
0xffffc70000023400 0001 00000000 0x0 0x0
0xffffc70000023480 0001 00000000 0x0 0x0
0xffffc70000023500 0001 00000000 0x0 0x0
0xffffc70000023580 0001 00000000 0x0 0x0
0xffffc70000023600 0001 00000000 0x0 0x0
0xffffc70000023680 0001 00000000 0x0 0x0
0xffffc70000023700 0001 00000000 0x0 0x0
0xffffc70000023780 0001 00000000 0x0 0x0
0xffffc70000023800 0001 00000000 0x0 0x0
0xffffc70000023880 0001 00000000 0x0 0x0
0xffffc70000023900 0001 00000000 0x0 0x0
0xffffc70000023980 0001 00000000 0x0 0x0
0xffffc70000023a00 0001 00000000 0x0 0x0
0xffffc70000023a80 0001 00000000 0x0 0x0
0xffffc70000023b00 0001 00000000 0x0 0x0
0xffffc70000023b80 0001 00000000 0x0 0x0
0xffffc70000023c00 0001 00000000 0x0 0x0
0xffffc70000023c80 0001 00000000 0x0 0x0
0xffffc70000023d00 0001 00000000 0x0 0x0
0xffffc70000023d80 0001 00000000 0x0 0x0
0xffffc70000023e00 0001 00000000 0x0 0x0
0xffffc70000023e80 0001 00000000 0x0 0x0
0xffffc70000023f00 0001 00000000 0x0 0x0
0xffffc70000023f80 0001 00000000 0x0 0x0
0xffffc70000024000 0001 00000000 0x0 0x0
0xffffc70000024080 0001 00000000 0x0 0x0
0xffffc70000024100 0001 00000000 0x0 0x0
0xffffc70000024180 0001 00000000 0x0 0x0
0xffffc70000024200 0001 00000000 0x0 0x0
0xffffc70000024280 0001 00000000 0x0 0x0
0xffffc70000024300 0001 00000000 0x0 0x0
0xffffc70000024380 0001 00000000 0x0 0x0
0xffffc70000024400 0001 00000000 0x0 0x0
0xffffc70000024480 0001 00000000 0x0 0x0
0xffffc70000024500 0001 00000000 0x0 0x0
0xffffc70000024580 0001 00000000 0x0 0x0
0xffffc70000024600 0001 00000000 0x0 0x0
0xffffc70000024680 0001 00000000 0x0 0x0
0xffffc70000024700 0001 00000000 0x0 0x0
0xffffc70000024780 0001 00000000 0x0 0x0
0xffffc70000024800 0001 00000000 0x0 0x0
0xffffc70000024880 0001 00000000 0x0 0x0
0xffffc70000024900 0001 00000000 0x0 0x0
0xffffc70000024980 0001 00000000 0x0 0x0
0xffffc70000024a00 0001 00000000 0x0 0x0
0xffffc70000024a80 0001 00000000 0x0 0x0
0xffffc70000024b00 0001 00000000 0x0 0x0
0xffffc70000024b80 0001 00000000 0x0 0x0
0xffffc70000024c00 0001 00000000 0x0 0x0
0xffffc70000024c80 0001 00000000 0x0 0x0
0xffffc70000024d00 0001 00000000 0x0 0x0
0xffffc70000024d80 0001 00000000 0x0 0x0
0xffffc70000024e00 0001 00000000 0x0 0x0
0xffffc70000024e80 0001 00000000 0x0 0x0
0xffffc70000024f00 0001 00000000 0x0 0x0
0xffffc70000024f80 0001 00000000 0x0 0x0
0xffffc70000025000 0001 00000000 0x0 0x0
0xffffc70000025080 0001 00000000 0x0 0x0
0xffffc70000025100 0001 00000000 0x0 0x0
0xffffc70000025180 0001 00000000 0x0 0x0
0xffffc70000025200 0001 00000000 0x0 0x0
0xffffc70000025280 0001 00000000 0x0 0x0
0xffffc70000025300 0001 00000000 0x0 0x0
0xffffc70000025380 0001 00000000 0x0 0x0
0xffffc70000025400 0001 00000000 0x0 0x0
0xffffc70000025480 0001 00000000 0x0 0x0
0xffffc70000025500 0001 00000000 0x0 0x0
0xffffc70000025580 0001 00000000 0x0 0x0
0xffffc70000025600 0001 00000000 0x0 0x0
0xffffc70000025680 0001 00000000 0x0 0x0
0xffffc70000025700 0001 00000000 0x0 0x0
0xffffc70000025780 0001 00000000 0x0 0x0
0xffffc70000025800 0001 00000000 0x0 0x0
0xffffc70000025880 0001 00000000 0x0 0x0
0xffffc70000025900 0001 00000000 0x0 0x0
0xffffc70000025980 0001 00000000 0x0 0x0
0xffffc70000025a00 0001 00000000 0x0 0x0
0xffffc70000025a80 0001 00000000 0x0 0x0
0xffffc70000025b00 0001 00000000 0x0 0x0
0xffffc70000025b80 0001 00000000 0x0 0x0
0xffffc70000025c00 0001 00000000 0x0 0x0
0xffffc70000025c80 0001 00000000 0x0 0x0
0xffffc70000025d00 0001 00000000 0x0 0x0
0xffffc70000025d80 0001 00000000 0x0 0x0
0xffffc70000025e00 0001 00000000 0x0 0x0
0xffffc70000025e80 0001 00000000 0x0 0x0
0xffffc70000025f00 0001 00000000 0x0 0x0
0xffffc70000025f80 0001 00000000 0x0 0x0
0xffffc70000026000 0001 00000000 0x0 0x0
0xffffc70000026080 0001 00000000 0x0 0x0
0xffffc70000026100 0001 00000000 0x0 0x0
0xffffc70000026180 0001 00000000 0x0 0x0
0xffffc70000026200 0001 00000000 0x0 0x0
0xffffc70000026280 0001 00000000 0x0 0x0
0xffffc70000026300 0001 00000000 0x0 0x0
0xffffc70000026380 0001 00000000 0x0 0x0
0xffffc70000026400 0001 00000000 0x0 0x0
0xffffc70000026480 0001 00000000 0x0 0x0
0xffffc70000026500 0001 00000000 0x0 0x0
0xffffc70000026580 0001 00000000 0x0 0x0
0xffffc70000026600 0001 00000000 0x0 0x0
0xffffc70000026680 0001 00000000 0x0 0x0
0xffffc70000026700 0001 00000000 0x0 0x0
0xffffc70000026780 0001 00000000 0x0 0x0
0xffffc70000026800 0001 00000000 0x0 0x0
0xffffc70000026880 0001 00000000 0x0 0x0
0xffffc70000026900 0001 00000000 0x0 0x0
0xffffc70000026980 0001 00000000 0x0 0x0
0xffffc70000026a00 0001 00000000 0x0 0x0
0xffffc70000026a80 0001 00000000 0x0 0x0
0xffffc70000026b00 0001 00000000 0x0 0x0
0xffffc70000026b80 0001 00000000 0x0 0x0
0xffffc70000026c00 0001 00000000 0x0 0x0
0xffffc70000026c80 0001 00000000 0x0 0x0
0xffffc70000026d00 0001 00000000 0x0 0x0
0xffffc70000026d80 0001 00000000 0x0 0x0
0xffffc70000026e00 0001 00000000 0x0 0x0
0xffffc70000026e80 0001 00000000 0x0 0x0
0xffffc70000026f00 0001 00000000 0x0 0x0
0xffffc70000026f80 0001 00000000 0x0 0x0
0xffffc70000027000 0001 00000000 0x0 0x0
0xffffc70000027080 0001 00000000 0x0 0x0
0xffffc70000027100 0001 00000000 0x0 0x0
0xffffc70000027180 0001 00000000 0x0 0x0
0xffffc70000027200 0001 00000000 0x0 0x0
0xffffc70000027280 0001 00000000 0x0 0x0
0xffffc70000027300 0001 00000000 0x0 0x0
0xffffc70000027380 0001 00000000 0x0 0x0
0xffffc70000027400 0001 00000000 0x0 0x0
0xffffc70000027480 0001 00000000 0x0 0x0
0xffffc70000027500 0001 00000000 0x0 0x0
0xffffc70000027580 0001 00000000 0x0 0x0
0xffffc70000027600 0001 00000000 0x0 0x0
0xffffc70000027680 0001 00000000 0x0 0x0
0xffffc70000027700 0001 00000000 0x0 0x0
0xffffc70000027780 0001 00000000 0x0 0x0
0xffffc70000027800 0001 00000000 0x0 0x0
0xffffc70000027880 0001 00000000 0x0 0x0
0xffffc70000027900 0001 00000000 0x0 0x0
0xffffc70000027980 0001 00000000 0x0 0x0
0xffffc70000027a00 0001 00000000 0x0 0x0
0xffffc70000027a80 0001 00000000 0x0 0x0
0xffffc70000027b00 0001 00000000 0x0 0x0
0xffffc70000027b80 0001 00000000 0x0 0x0
0xffffc70000027c00 0001 00000000 0x0 0x0
0xffffc70000027c80 0001 00000000 0x0 0x0
0xffffc70000027d00 0001 00000000 0x0 0x0
0xffffc70000027d80 0001 00000000 0x0 0x0
0xffffc70000027e00 0001 00000000 0x0 0x0
0xffffc70000027e80 0001 00000000 0x0 0x0
0xffffc70000027f00 0001 00000000 0x0 0x0
0xffffc70000027f80 0001 00000000 0x0 0x0
0xffffc70000028000 0001 00000000 0x0 0x0
0xffffc70000028080 0001 00000000 0x0 0x0
0xffffc70000028100 0001 00000000 0x0 0x0
0xffffc70000028180 0001 00000000 0x0 0x0
0xffffc70000028200 0001 00000000 0x0 0x0
0xffffc70000028280 0001 00000000 0x0 0x0
0xffffc70000028300 0001 00000000 0x0 0x0
0xffffc70000028380 0001 00000000 0x0 0x0
0xffffc70000028400 0001 00000000 0x0 0x0
0xffffc70000028480 0001 00000000 0x0 0x0
0xffffc70000028500 0001 00000000 0x0 0x0
0xffffc70000028580 0001 00000000 0x0 0x0
0xffffc70000028600 0001 00000000 0x0 0x0
0xffffc70000028680 0001 00000000 0x0 0x0
0xffffc70000028700 0001 00000000 0x0 0x0
0xffffc70000028780 0001 00000000 0x0 0x0
0xffffc70000028800 0001 00000000 0x0 0x0
0xffffc70000028880 0001 00000000 0x0 0x0
0xffffc70000028900 0001 00000000 0x0 0x0
0xffffc70000028980 0001 00000000 0x0 0x0
0xffffc70000028a00 0001 00000000 0x0 0x0
0xffffc70000028a80 0001 00000000 0x0 0x0
0xffffc70000028b00 0001 00000000 0x0 0x0
0xffffc70000028b80 0001 00000000 0x0 0x0
0xffffc70000028c00 0001 00000000 0x0 0x0
0xffffc70000028c80 0001 00000000 0x0 0x0
0xffffc70000028d00 0001 00000000 0x0 0x0
0xffffc70000028d80 0001 00000000 0x0 0x0
0xffffc70000028e00 0001 00000000 0x0 0x0
0xffffc70000028e80 0001 00000000 0x0 0x0
0xffffc70000028f00 0001 00000000 0x0 0x0
0xffffc70000028f80 0001 00000000 0x0 0x0
0xffffc70000029000 0001 00000000 0x0 0x0
0xffffc70000029080 0001 00000000 0x0 0x0
0xffffc70000029100 0001 00000000 0x0 0x0
0xffffc70000029180 0001 00000000 0x0 0x0
0xffffc70000029200 0001 00000000 0x0 0x0
0xffffc70000029280 0001 00000000 0x0 0x0
0xffffc70000029300 0001 00000000 0x0 0x0
0xffffc70000029380 0001 00000000 0x0 0x0
0xffffc70000029400 0001 00000000 0x0 0x0
0xffffc70000029480 0001 00000000 0x0 0x0
0xffffc70000029500 0001 00000000 0x0 0x0
0xffffc70000029580 0001 00000000 0x0 0x0
0xffffc70000029600 0001 00000000 0x0 0x0
0xffffc70000029680 0001 00000000 0x0 0x0
0xffffc70000029700 0001 00000000 0x0 0x0
0xffffc70000029780 0001 00000000 0x0 0x0
0xffffc70000029800 0001 00000000 0x0 0x0
0xffffc70000029880 0001 00000000 0x0 0x0
0xffffc70000029900 0001 00000000 0x0 0x0
0xffffc70000029980 0001 00000000 0x0 0x0
0xffffc70000029a00 0001 00000000 0x0 0x0
0xffffc70000029a80 0001 00000000 0x0 0x0
0xffffc70000029b00 0001 00000000 0x0 0x0
0xffffc70000029b80 0001 00000000 0x0 0x0
0xffffc70000029c00 0001 00000000 0x0 0x0
0xffffc70000029c80 0001 00000000 0x0 0x0
0xffffc70000029d00 0001 00000000 0x0 0x0
0xffffc70000029d80 0001 00000000 0x0 0x0
0xffffc70000029e00 0001 00000000 0x0 0x0
0xffffc70000029e80 0001 00000000 0x0 0x0
0xffffc70000029f00 0001 00000000 0x0 0x0
0xffffc70000029f80 0001 00000000 0x0 0x0
0xffffc7000002a000 0001 00000000 0x0 0x0
0xffffc7000002a080 0001 00000000 0x0 0x0
0xffffc7000002a100 0001 00000000 0x0 0x0
0xffffc7000002a180 0001 00000000 0x0 0x0
0xffffc7000002a200 0001 00000000 0x0 0x0
0xffffc7000002a280 0001 00000000 0x0 0x0
0xffffc7000002a300 0001 00000000 0x0 0x0
0xffffc7000002a380 0001 00000000 0x0 0x0
0xffffc7000002a400 0001 00000000 0x0 0x0
0xffffc7000002a480 0001 00000000 0x0 0x0
0xffffc7000002a500 0001 00000000 0x0 0x0
0xffffc7000002a580 0001 00000000 0x0 0x0
0xffffc7000002a600 0001 00000000 0x0 0x0
0xffffc7000002a680 0001 00000000 0x0 0x0
0xffffc7000002a700 0001 00000000 0x0 0x0
0xffffc7000002a780 0001 00000000 0x0 0x0
0xffffc7000002a800 0001 00000000 0x0 0x0
0xffffc7000002a880 0001 00000000 0x0 0x0
0xffffc7000002a900 0001 00000000 0x0 0x0
0xffffc7000002a980 0001 00000000 0x0 0x0
0xffffc7000002aa00 0001 00000000 0x0 0x0
0xffffc7000002aa80 0001 00000000 0x0 0x0
0xffffc7000002ab00 0001 00000000 0x0 0x0
0xffffc7000002ab80 0001 00000000 0x0 0x0
0xffffc7000002ac00 0001 00000000 0x0 0x0
0xffffc7000002ac80 0001 00000000 0x0 0x0
0xffffc7000002ad00 0001 00000000 0x0 0x0
0xffffc7000002ad80 0001 00000000 0x0 0x0
0xffffc7000002ae00 0001 00000000 0x0 0x0
0xffffc7000002ae80 0001 00000000 0x0 0x0
0xffffc7000002af00 0001 00000000 0x0 0x0
0xffffc7000002af80 0001 00000000 0x0 0x0
0xffffc7000002b000 0001 00000000 0x0 0x0
0xffffc7000002b080 0001 00000000 0x0 0x0
0xffffc7000002b100 0001 00000000 0x0 0x0
0xffffc7000002b180 0001 00000000 0x0 0x0
0xffffc7000002b200 0001 00000000 0x0 0x0
0xffffc7000002b280 0001 00000000 0x0 0x0
0xffffc7000002b300 0001 00000000 0x0 0x0
0xffffc7000002b380 0001 00000000 0x0 0x0
0xffffc7000002b400 0001 00000000 0x0 0x0
0xffffc7000002b480 0001 00000000 0x0 0x0
0xffffc7000002b500 0001 00000000 0x0 0x0
0xffffc7000002b580 0001 00000000 0x0 0x0
0xffffc7000002b600 0001 00000000 0x0 0x0
0xffffc7000002b680 0001 00000000 0x0 0x0
0xffffc7000002b700 0001 00000000 0x0 0x0
0xffffc7000002b780 0001 00000000 0x0 0x0
0xffffc7000002b800 0001 00000000 0x0 0x0
0xffffc7000002b880 0001 00000000 0x0 0x0
0xffffc7000002b900 0001 00000000 0x0 0x0
0xffffc7000002b980 0001 00000000 0x0 0x0
0xffffc7000002ba00 0001 00000000 0x0 0x0
0xffffc7000002ba80 0001 00000000 0x0 0x0
0xffffc7000002bb00 0001 00000000 0x0 0x0
0xffffc7000002bb80 0001 00000000 0x0 0x0
0xffffc7000002bc00 0001 00000000 0x0 0x0
0xffffc7000002bc80 0001 00000000 0x0 0x0
0xffffc7000002bd00 0001 00000000 0x0 0x0
0xffffc7000002bd80 0001 00000000 0x0 0x0
0xffffc7000002be00 0001 00000000 0x0 0x0
0xffffc7000002be80 0001 00000000 0x0 0x0
0xffffc7000002bf00 0001 00000000 0x0 0x0
0xffffc7000002bf80 0001 00000000 0x0 0x0
0xffffc7000002c000 0001 00000000 0x0 0x0
0xffffc7000002c080 0001 00000000 0x0 0x0
0xffffc7000002c100 0001 00000000 0x0 0x0
0xffffc7000002c180 0001 00000000 0x0 0x0
0xffffc7000002c200 0001 00000000 0x0 0x0
0xffffc7000002c280 0001 00000000 0x0 0x0
0xffffc7000002c300 0001 00000000 0x0 0x0
0xffffc7000002c380 0001 00000000 0x0 0x0
0xffffc7000002c400 0001 00000000 0x0 0x0
0xffffc7000002c480 0001 00000000 0x0 0x0
0xffffc7000002c500 0001 00000000 0x0 0x0
0xffffc7000002c580 0001 00000000 0x0 0x0
0xffffc7000002c600 0001 00000000 0x0 0x0
0xffffc7000002c680 0001 00000000 0x0 0x0
0xffffc7000002c700 0001 00000000 0x0 0x0
0xffffc

---
This report is generated by a bot. It may contain errors.
See https://goo.gl/tpsmEJ for more information about syzbot.
syzbot engineers can be reached at syzk...@googlegroups.com.

syzbot will keep track of this issue. See:
https://goo.gl/tpsmEJ#status for how to communicate with syzbot.

[Chuck Silvers]

#syz dup: assert failed: semcnt >= 0