panic: [ 144.ADDR] vpanic() at netbsd:vpanic+0x2cd

[syzbot]

Hello,

syzbot found the following issue on:

HEAD commit: 2ab878cf Move evbarm/fdt/fdt_memory.[ch] to sys/dev/fdt an..
git tree: netbsd
console output: https://syzkaller.appspot.com/x/log.txt?x=13534b37500000
kernel config: https://syzkaller.appspot.com/x/.config?x=1420f906d33d9f1f
dashboard link: https://syzkaller.appspot.com/bug?extid=8b6bedb035bae8ed3bda
compiler: g++ (Ubuntu 5.4.0-6ubuntu1~16.04.12) 5.4.0 20160609

Unfortunately, I don't have any reproducer for this issue yet.

IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+8b6bed...@syzkaller.appspotmail.com

096051] panic: [ 144.7395941] vpanic() at netbsd:vpanic+0x2cd sys/kern/subr_prf.c:290
[ 144.7695939] uhub5: device problem, disabling port 1
[ 144.7995952] db_print_address.cold() at netbsd:db_print_address.cold
[ 144.8595950] chgsemcnt() at netbsd:chgsemcnt+0x92 sys/kern/kern_uidinfo.c:241
[ 144.9095957] ksem_release() at netbsd:ksem_release+0x1eb sys/kern/uipc_sem.c:536
[ 144.9795957] ksem_close_fop() at netbsd:ksem_close_fop+0x113 sys/kern/uipc_sem.c:853
[ 145.0295954] closef() at netbsd:closef+0x1cd sys/kern/kern_descrip.c:832
[ 145.0895966] fd_free() at netbsd:fd_free+0x795 sys/kern/kern_descrip.c:1571
[ 145.1395971] exit1() at netbsd:exit1+0x3a8 sys/kern/kern_exit.c:301
[ 145.1895988] sys_exit() at netbsd:sys_exit+0xd4 sys/kern/kern_exit.c:180
[ 145.2495976] syscall() at netbsd:syscall+0x2d5 sy_call sys/sys/syscallvar.h:65 [inline]
[ 145.2495976] syscall() at netbsd:syscall+0x2d5 sy_invoke sys/sys/syscallvar.h:94 [inline]
[ 145.2495976] syscall() at netbsd:syscall+0x2d5 sys/arch/x86/x86/syscall.c:138
[ 145.2596001] --- syscall (number 1) ---
[ 145.2795985] netbsd:syscall+0x2d5:
[ 145.2895978] cpu1: End traceback...
[ 145.2895978] fatal breakpoint trap in supervisor mode
[ 145.2895978] trap type 1 code 0 rip 0xffffffff80221a95 cs 0x8 rflags 0x246 cr2 0x7e0bba207ea0 ilevel 0 rsp 0xffffc300d44bcc20
[ 145.2995972] curlwp 0xfffffc0ac2862680 pid 8259.8259 lowest kstack 0xffffc300d44b82c0
Stopped in pid 8259.8259 (syz-executor.4) at netbsd:breakpoint+0x5: leave
?
breakpoint() at netbsd:breakpoint+0x5
db_panic() at netbsd:db_panic+0xec sys/ddb/db_panic.c:67
vpanic() at netbsd:vpanic+0x2cd sys/kern/subr_prf.c:290
db_print_address.cold() at netbsd:db_print_address.cold
chgsemcnt() at netbsd:chgsemcnt+0x92 sys/kern/kern_uidinfo.c:241
ksem_release() at netbsd:ksem_release+0x1eb sys/kern/uipc_sem.c:536
ksem_close_fop() at netbsd:ksem_close_fop+0x113 sys/kern/uipc_sem.c:853
closef() at netbsd:closef+0x1cd sys/kern/kern_descrip.c:832
fd_free() at netbsd:fd_free+0x795 sys/kern/kern_descrip.c:1571
exit1() at netbsd:exit1+0x3a8 sys/kern/kern_exit.c:301
sys_exit() at netbsd:sys_exit+0xd4 sys/kern/kern_exit.c:180
syscall() at netbsd:syscall+0x2d5 sy_call sys/sys/syscallvar.h:65 [inline]
syscall() at netbsd:syscall+0x2d5 sy_invoke sys/sys/syscallvar.h:94 [inline]
syscall() at netbsd:syscall+0x2d5 sys/arch/x86/x86/syscall.c:138
--- syscall (number 1) ---
netbsd:syscall+0x2d5:
Panic string: kernel diagnostic assertion "semcnt >= 0" failed: file "/syzkaller/managers/netbsd-kubsan/kernel/sys/kern/kern_uidinfo.c", line 241
PID LID S CPU FLAGS STRUCT LWP * NAME WAIT
8259 >8259 7 1 10000000 fffffc0ac2862680 syz-executor.4
8547 8547 3 0 180 fffffc0ac2862240 syz-executor.4 parked
7870 7870 3 0 180 fffffc0ac2907700 syz-executor.4 parked
7976 7976 3 0 180 fffffc0ac20afa00 syz-executor.1 parked
8164 8038 3 0 180 fffffc0ac29072c0 syz-executor.1 parked
8164 8164 2 1 10000000 fffffc0ac23e3740 syz-executor.1
8111 8153 2 0 100 fffffc0ac2d3abc0 syz-executor.0
8111 8111 2 0 10000000 fffffc0ac1df7280 syz-executor.0
7909 8404 2 1 1000100 fffffc0ac1062140 syz-executor.2
7909 7909 2 1 11000140 fffffc0ac20af180 syz-executor.2
1084 1084 3 0 1c0 fffffc0ab44c8540 syz-executor.2 wait
1098 1098 2 0 140 fffffc0ab2daabc0 syz-executor.4
1077 1077 3 1 1c0 fffffc0ab2e8c040 syz-executor.5 pipe_rd
420 420 3 1 1c0 fffffc0ab44c8100 syz-executor.3 pipe_rd
1103 1103 2 1 140 fffffc0ab2e1c080 syz-executor.1
1102 1102 2 1 140 fffffc0ab2e8c480 syz-executor.0
1072 1083 2 1 140 fffffc0ab2fad500 syz-fuzzer
1072 1080 2 0 100 fffffc0ab18b4640 syz-fuzzer
1072 1075 2 0 100 fffffc0ab2daa780 syz-fuzzer
1072 1122 3 1 180 fffffc0ab2e1c900 syz-fuzzer parked
1072 694 3 0 1c0 fffffc0ab2e1c4c0 syz-fuzzer parked
1072 1070 3 0 1c0 fffffc0ab2266b80 syz-fuzzer parked
1072 1106 2 0 140 fffffc0ab1c0d680 syz-fuzzer
1072 1072 3 0 180 fffffc0ab1c0d240 syz-fuzzer parked
1069 1069 3 0 180 fffffc0ab18b4a80 sshd select
1056 1056 3 1 180 fffffc0ab2fad0c0 getty nanoslp
1249 1249 3 1 180 fffffc0ab1f37700 getty nanoslp
957 957 3 1 180 fffffc0ab2266300 getty nanoslp
856 856 3 0 1c0 fffffc0ab07e7a00 getty ttyraw
946 946 3 1 180 fffffc0ab2fad940 sshd select
962 962 3 0 180 fffffc0ab1ce6280 powerd kqueue
871 871 3 0 180 fffffc0ab2daa340 syslogd kqueue
598 598 3 0 180 fffffc0ab1ce6b00 dhcpcd poll
595 595 3 1 180 fffffc0ab2266740 dhcpcd poll
593 593 3 0 180 fffffc0ab2e8c8c0 dhcpcd poll
428 428 3 1 180 fffffc0ab1f372c0 dhcpcd poll
350 350 3 0 180 fffffc0ab1c0dac0 dhcpcd poll
349 349 3 1 180 fffffc0ab1ce66c0 dhcpcd poll
348 348 3 0 180 fffffc0ab1f37b40 dhcpcd poll
1 1 3 1 180 fffffc0aa96830c0 init wait
0 8151 3 0 200 fffffc0ac2d3a780 acctwatch actwat
0 895 3 0 200 fffffc0ab18971c0 physiod physiod
0 192 3 0 200 fffffc0ab18b4200 pooldrain pooldrain
0 166 3 1 200 fffffc0ab1897a40 ioflush syncer
0 165 3 1 200 fffffc0ab1897600 pgdaemon pgdaemon
0 162 3 1 200 fffffc0ab07e75c0 usb7 usbevt
0 161 3 1 200 fffffc0ab07e7180 usb6 usbevt
0 31 3 0 200 fffffc0aad76a9c0 usb5 usbevt
0 63 3 1 200 fffffc0aad76a580 usb4 usbevt
0 126 3 1 200 fffffc0aad76a140 usb3 usbevt
0 125 3 0 240 fffffc0aaa725980 usb2 tstile
0 124 3 1 200 fffffc0aaa725540 usb1 usbevt
0 123 2 1 240 fffffc0aaa725100 usb0
0 122 3 1 200 fffffc0aa9683940 usbtask-dr usbtsk
0 121 3 1 200 fffffc0aa9683500 usbtask-hc usbtsk
0 120 3 1 200 fffffc0aa6ab3ac0 npfgc0 npfgcw
0 119 3 1 200 fffffc0aa9666900 rt_free rt_free
0 118 3 1 200 fffffc0aa96664c0 unpgc unpgc
0 117 3 0 200 fffffc0aa9666080 key_timehandler key_timehandler
0 116 3 1 200 fffffc0aa96398c0 icmp6_wqinput/1 icmp6_wqinput
0 115 3 0 200 fffffc0aa9639480 icmp6_wqinput/0 icmp6_wqinput
0 114 3 0 200 fffffc0aa9639040 nd6_timer nd6_timer
0 113 3 1 200 fffffc0aa95e4bc0 carp6_wqinput/1 carp6_wqinput
0 112 3 0 200 fffffc0aa95e4780 carp6_wqinput/0 carp6_wqinput
0 111 3 1 200 fffffc0aa95e4340 carp_wqinput/1 carp_wqinput
0 110 3 0 200 fffffc0aa95c7b80 carp_wqinput/0 carp_wqinput
0 109 3 1 200 fffffc0aa95c7740 icmp_wqinput/1 icmp_wqinput
0 108 3 0 200 fffffc0aa95ba2c0 icmp_wqinput/0 icmp_wqinput
0 107 3 0 200 fffffc0aa95ba700 rt_timer rt_timer
0 106 3 0 200 fffffc0aa95bab40 vmem_rehash vmem_rehash
0 105 3 0 200 fffffc0aa95c7300 entbutler entropy
0 96 3 1 200 fffffc0aa8f23b00 viomb balloon
0 30 3 1 200 fffffc0aa8f236c0 vioif0_txrx/1 vioif0_txrx
0 29 3 0 200 fffffc0aa8f23280 vioif0_txrx/0 vioif0_txrx
0 27 3 0 200 fffffc0aa6ab3680 scsibus0 sccomp
0 26 3 0 200 fffffc0aa6ab3240 pms0 pmsreset
0 25 3 1 200 fffffc0aa6a04a80 xcall/1 xcall
0 24 1 1 200 fffffc0aa6a04640 softser/1
0 23 1 1 200 fffffc0aa6a04200 softclk/1
0 22 1 1 200 fffffc0aa69dfa40 softbio/1
0 21 1 1 200 fffffc0aa69df600 softnet/1
0 20 1 1 201 fffffc0aa69df1c0 idle/1
0 19 3 1 200 fffffc0bd5949a00 lnxpwrwq lnxpwrwq
0 18 3 1 200 fffffc0bd59495c0 lnxlngwq lnxlngwq
0 17 3 1 200 fffffc0bd5949180 lnxsyswq lnxsyswq
0 16 3 1 200 fffffc0bd59649c0 lnxrcugc lnxrcugc
0 15 3 0 200 fffffc0bd5964580 sysmon smtaskq
0 14 3 0 200 fffffc0bd5964140 pmfsuspend pmfsuspend
0 13 3 0 200 fffffc0bd5973980 pmfevent pmfevent
0 12 3 0 200 fffffc0bd5973540 sopendfree sopendfr
0 11 3 0 200 fffffc0bd5973100 iflnkst iflnkst
0 10 3 0 200 fffffc0bd699e940 nfssilly nfssilly
0 9 3 0 200 fffffc0bd699e500 vdrain vdrain
0 8 3 0 200 fffffc0bd699e0c0 modunload mod_unld
0 7 3 0 200 fffffc0bd69d3900 xcall/0 xcall
0 6 1 0 200 fffffc0bd69d34c0 softser/0
0 5 1 0 200 fffffc0bd69d3080 softclk/0
0 4 1 0 200 fffffc0bd69fd8c0 softbio/0
0 3 1 0 200 fffffc0bd69fd480 softnet/0
0 2 1 0 201 fffffc0bd69fd040 idle/0
0 > 0 7 0 240 ffffffff85eded80 swapper
[Locks tracked through LWPs]

****** LWP 8259.8259 (syz-executor.4) @ 0xfffffc0ac2862680, l_stat=7

*** Locks held:

* Lock 0 (initialized at fork1)
lock address : 0xfffffc0ac2db17d0 type : sleep/adaptive
initialized : 0xffffffff83229ef3
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 1
relevant lwp : 0xfffffc0ac2862680 last held: 0xfffffc0ac2862680
last locked* : 0xffffffff832221be unlocked : 000000000000000000
owner/count : 0xfffffc0ac2862680 flags : 0x0000000000000004
Turnstile: no active turnstile for this lock.

*** Locks wanted: none

****** LWP 8111.8153 (syz-executor.0) @ 0xfffffc0ac2d3abc0, l_stat=2

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at vhci_attach)
lock address : 0xffffc3000f9c96d8 type : sleep/adaptive
initialized : 0xffffffff815280ea
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 1
relevant cpu : 0 last held: 0
relevant lwp : 0xfffffc0ac2d3abc0 last held: 000000000000000000
last locked : 0xffffffff81530a76 unlocked*: 0xffffffff81530f35
owner field : 0xfffffc0ac2d3abc0 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 7909.8404 (syz-executor.2) @ 0xfffffc0ac1062140, l_stat=2

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at vhci_attach)
lock address : 0xffffc3000f9cb6d8 type : sleep/adaptive
initialized : 0xffffffff815280ea
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 1
relevant cpu : 1 last held: 1
relevant lwp : 0xfffffc0ac1062140 last held: 000000000000000000
last locked : 0xffffffff81530a76 unlocked*: 0xffffffff81530f35
owner field : 0xfffffc0ac1062140 wait/spin: 1/0
Turnstile:
=> 0 waiting readers:
=> 1 waiting writers: 0xfffffc0aaa725980

****** LWP 595.595 (dhcpcd) @ 0xfffffc0ab2266740, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at module_hook_init)
lock address : 0xffffffff862cf7c0 type : sleep/adaptive
initialized : 0xffffffff8325e567
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 0
relevant lwp : 0xfffffc0ab2266740 last held: 000000000000000000
last locked : 000000000000000000 unlocked*: 000000000000000000
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 593.593 (dhcpcd) @ 0xfffffc0ab2e8c8c0, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at module_hook_init)
lock address : 0xffffffff862cf7c0 type : sleep/adaptive
initialized : 0xffffffff8325e567
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xfffffc0ab2e8c8c0 last held: 000000000000000000
last locked : 000000000000000000 unlocked*: 000000000000000000
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 349.349 (dhcpcd) @ 0xfffffc0ab1ce66c0, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at module_hook_init)
lock address : 0xffffffff862cf7c0 type : sleep/adaptive
initialized : 0xffffffff8325e567
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 0
relevant lwp : 0xfffffc0ab1ce66c0 last held: 000000000000000000
last locked : 000000000000000000 unlocked*: 000000000000000000
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 348.348 (dhcpcd) @ 0xfffffc0ab1f37b40, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at module_hook_init)
lock address : 0xffffffff862cf7c0 type : sleep/adaptive
initialized : 0xffffffff8325e567
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xfffffc0ab1f37b40 last held: 000000000000000000
last locked : 000000000000000000 unlocked*: 000000000000000000
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 0.23 (softclk/1) @ 0xfffffc0aa6a04200, l_stat=1

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at module_hook_init)
lock address : 0xffffffff862cf7c0 type : sleep/adaptive
initialized : 0xffffffff8325e567
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 0
relevant lwp : 0xfffffc0aa6a04200 last held: 000000000000000000
last locked : 000000000000000000 unlocked*: 000000000000000000
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 0.11 (iflnkst) @ 0xfffffc0bd5973100, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at module_hook_init)
lock address : 0xffffffff862cf7c0 type : sleep/adaptive
initialized : 0xffffffff8325e567
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xfffffc0bd5973100 last held: 000000000000000000
last locked : 000000000000000000 unlocked*: 000000000000000000
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

[Locks tracked through CPUs]

******* Locks held on cpu0:

* Lock 0 (initialized at com_attach_subr)
lock address : 0xfffffc0aa9444500 type : spin
initialized : 0xffffffff813ba8a4
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffffffff85eded80 last held: 0xfffffc0ac1df7280
last locked* : 0xffffffff813b7729 unlocked : 0xffffffff813b7e7e
owner field : 0x0000000000000800 wait/spin: 0/1

PAGE FLAG PQ UOBJECT UANON
0xffffc30000007180 0045 00000000 0x0 0x0
0xffffc30000007200 0045 00000000 0x0 0x0
0xffffc30000007280 0045 00000000 0x0 0x0
0xffffc30000007300 0045 00000000 0x0 0x0
0xffffc30000007380 0045 00000000 0x0 0x0
0xffffc30000007400 0045 00000000 0x0 0x0
0xffffc30000007480 0045 00000000 0x0 0x0
0xffffc30000007500 0045 00000000 0x0 0x0
0xffffc30000007580 0045 00000000 0x0 0x0
0xffffc30000007600 0045 00000000 0x0 0x0
0xffffc30000007680 0041 00000000 0x0 0x0
0xffffc30000007700 0041 00000000 0x0 0x0
0xffffc30000007780 0041 00000000 0x0 0x0
0xffffc30000007800 0041 00000000 0x0 0x0
0xffffc30000007880 0041 00000000 0x0 0x0
0xffffc30000007900 0045 00000000 0x0 0x0
0xffffc30000007980 0041 00000000 0x0 0x0
0xffffc30000007a00 0041 00000000 0x0 0x0
0xffffc30000007a80 0041 00000000 0x0 0x0
0xffffc30000007b00 0041 00000000 0x0 0x0
0xffffc30000007b80 0041 00000000 0x0 0x0
0xffffc30000007c00 0041 00000000 0x0 0x0
0xffffc30000007c80 0041 00000000 0x0 0x0
0xffffc30000007d00 0041 00000000 0x0 0x0
0xffffc30000007d80 0041 00000000 0x0 0x0
0xffffc30000007e00 0041 00000000 0x0 0x0
0xffffc30000007e80 0041 00000000 0x0 0x0
0xffffc30000007f00 0041 00000000 0x0 0x0
0xffffc30000007f80 0041 00000000 0x0 0x0
0xffffc30000008000 0041 00000000 0x0 0x0
0xffffc30000008080 0041 00000000 0x0 0x0
0xffffc30000008100 0041 00000000 0x0 0x0
0xffffc30000008180 0041 00000000 0x0 0x0
0xffffc30000008200 0041 00000000 0x0 0x0
0xffffc30000008280 0041 00000000 0x0 0x0
0xffffc30000008300 0041 00000000 0x0 0x0
0xffffc30000008380 0041 00000000 0x0 0x0
0xffffc30000008400 0041 00000000 0x0 0x0
0xffffc30000008480 0041 00000000 0x0 0x0
0xffffc30000008500 0041 00000000 0x0 0x0
0xffffc30000008580 0041 00000000 0x0 0x0
0xffffc30000008600 0041 00000000 0x0 0x0
0xffffc30000008680 0041 00000000 0x0 0x0
0xffffc30000008700 0041 00000000 0x0 0x0
0xffffc30000008780 0041 00000000 0x0 0x0
0xffffc30000008800 0041 00000000 0x0 0x0
0xffffc30000008880 0041 00000000 0x0 0x0
0xffffc30000008900 0041 00000000 0x0 0x0
0xffffc30000008980 0041 00000000 0x0 0x0
0xffffc30000008a00 0041 00000000 0x0 0x0
0xffffc30000008a80 0041 00000000 0x0 0x0
0xffffc30000008b00 0041 00000000 0x0 0x0
0xffffc30000008b80 0041 00000000 0x0 0x0
0xffffc30000008c00 0041 00000000 0x0 0x0
0xffffc30000008c80 0045 00000000 0x0 0x0
0xffffc30000008d00 0041 00000000 0x0 0x0
0xffffc30000008d80 0045 00000000 0x0 0x0
0xffffc30000008e00 0041 00000000 0x0 0x0
0xffffc30000008e80 0041 00000000 0x0 0x0
0xffffc30000008f00 0041 00000000 0x0 0x0
0xffffc30000008f80 0041 00000000 0x0 0x0
0xffffc30000009000 0041 00000000 0x0 0x0
0xffffc30000009080 0041 00000000 0x0 0x0
0xffffc30000009100 0041 00000000 0x0 0x0
0xffffc30000009180 0041 00000000 0x0 0x0
0xffffc30000009200 0041 00000000 0x0 0x0
0xffffc30000009280 0041 00000000 0x0 0x0
0xffffc30000009300 0041 00000000 0x0 0x0
0xffffc30000009380 0041 00000000 0x0 0x0
0xffffc30000009400 0041 00000000 0x0 0x0
0xffffc30000009480 0041 00000000 0x0 0x0
0xffffc30000009500 0045 00000000 0x0 0x0
0xffffc30000009580 0041 00000000 0x0 0x0
0xffffc30000009600 0041 00000000 0x0 0x0
0xffffc30000009680 0041 00000000 0x0 0x0
0xffffc30000009700 0041 00000000 0x0 0x0
0xffffc30000009780 0041 00000000 0x0 0x0
0xffffc30000009800 0041 00000000 0x0 0x0
0xffffc30000009880 0041 00000000 0x0 0x0
0xffffc30000009900 0041 00000000 0x0 0x0
0xffffc30000009980 0041 00000000 0x0 0x0
0xffffc30000009a00 0041 00000000 0x0 0x0
0xffffc30000009a80 0041 00000000 0x0 0x0
0xffffc30000009b00 0041 00000000 0x0 0x0
0xffffc30000009b80 0041 00000000 0x0 0x0
0xffffc30000009c00 0041 00000000 0x0 0x0
0xffffc30000009c80 0041 00000000 0x0 0x0
0xffffc30000009d00 0041 00000000 0x0 0x0
0xffffc30000009d80 0041 00000000 0x0 0x0
0xffffc30000009e00 0041 00000000 0x0 0x0
0xffffc30000009e80 0041 00000000 0x0 0x0
0xffffc30000009f00 0045 00000000 0x0 0x0
0xffffc30000009f80 0041 00000000 0x0 0x0
0xffffc3000000a000 0041 00000000 0x0 0x0
0xffffc3000000a080 0041 00000000 0x0 0x0
0xffffc3000000a100 0041 00000000 0x0 0x0
0xffffc3000000a180 0041 00000000 0x0 0x0
0xffffc3000000a200 0041 00000000 0x0 0x0
0xffffc3000000a280 0041 00000000 0x0 0x0
0xffffc3000000a300 0041 00000000 0x0 0x0
0xffffc3000000a380 0041 00000000 0x0 0x0
0xffffc3000000a400 0041 00000000 0x0 0x0
0xffffc3000000a480 0041 00000000 0x0 0x0
0xffffc3000000a500 0041 00000000 0x0 0x0
0xffffc3000000a580 0041 00000000 0x0 0x0
0xffffc3000000a600 0041 00000000 0x0 0x0
0xffffc3000000a680 0041 00000000 0x0 0x0
0xffffc3000000a700 0041 00000000 0x0 0x0
0xffffc3000000a780 0041 00000000 0x0 0x0
0xffffc3000000a800 0041 00000000 0x0 0x0
0xffffc3000000a880 0041 00000000 0x0 0x0
0xffffc3000000a900 0041 00000000 0x0 0x0
0xffffc3000000a980 0041 00000000 0x0 0x0
0xffffc3000000aa00 0041 00000000 0x0 0x0
0xffffc3000000aa80 0041 00000000 0x0 0x0
0xffffc3000000ab00 0041 00000000 0x0 0x0
0xffffc3000000ab80 0041 00000000 0x0 0x0
0xffffc3000000ac00 0041 00000000 0x0 0x0
0xffffc3000000ac80 0041 00000000 0x0 0x0
0xffffc3000000ad00 0041 00000000 0x0 0x0
0xffffc3000000ad80 0041 00000000 0x0 0x0
0xffffc3000000ae00 0045 00000000 0x0 0x0
0xffffc3000000ae80 0045 00000000 0x0 0x0
0xffffc3000000af00 0041 00000000 0x0 0x0
0xffffc3000000af80 0041 00000000 0x0 0x0
0xffffc3000000b000 0045 00000000 0x0 0x0
0xffffc3000000b080 0041 00000000 0x0 0x0
0xffffc3000000b100 0041 00000000 0x0 0x0
0xffffc3000000b180 0041 00000000 0x0 0x0
0xffffc3000000b200 0045 00000000 0x0 0x0
0xffffc3000000b280 0045 00000000 0x0 0x0
0xffffc3000000b300 0045 00000000 0x0 0x0
0xffffc3000000b380 0045 00000000 0x0 0x0
0xffffc3000000b400 0045 00000000 0x0 0x0
0xffffc3000000b480 0041 00000000 0x0 0x0
0xffffc3000000b500 0041 00000000 0x0 0x0
0xffffc3000000b580 0045 00000000 0x0 0x0
0xffffc3000000b600 0045 00000000 0x0 0x0
0xffffc3000000b680 0045 00000000 0x0 0x0
0xffffc3000000b700 0045 00000000 0x0 0x0
0xffffc3000000b780 0045 00000000 0x0 0x0
0xffffc3000000b800 0045 00000000 0x0 0x0
0xffffc3000000b880 0041 00000000 0x0 0x0
0xffffc3000000b900 0041 00000000 0x0 0x0
0xffffc3000000b980 0045 00000000 0x0 0x0
0xffffc3000000ba00 0045 00000000 0x0 0x0
0xffffc3000000ba80 0045 00000000 0x0 0x0
0xffffc3000000bb00 0045 00000000 0x0 0x0
0xffffc3000000bb80 0045 00000000 0x0 0x0
0xffffc3000000bc00 0045 00000000 0x0 0x0
0xffffc3000000bc80 0045 00000000 0x0 0x0
0xffffc3000000bd00 0045 00000000 0x0 0x0
0xffffc3000000bd80 0045 00000000 0x0 0x0
0xffffc3000000be00 0045 00000000 0x0 0x0
0xffffc3000000be80 0045 00000000 0x0 0x0
0xffffc3000000bf00 0045 00000000 0x0 0x0
0xffffc3000000bf80 0045 00000000 0x0 0x0
0xffffc3000000c000 0045 00000000 0x0 0x0
0xffffc3000000c080 0045 00000000 0x0 0x0
0xffffc3000000c100 0045 00000000 0x0 0x0
0xffffc3000000c180 0045 00000000 0x0 0x0
0xffffc3000000c200 0041 00000000 0x0 0x0
0xffffc3000000c280 0041 00000000 0x0 0x0
0xffffc3000000c300 0045 00000000 0x0 0x0
0xffffc3000000c380 0045 00000000 0x0 0x0
0xffffc3000000c400 0041 00000000 0x0 0x0
0xffffc3000000c480 0045 00000000 0x0 0x0
0xffffc3000000c500 0045 00000000 0x0 0x0
0xffffc3000000c580 0041 00000000 0x0 0x0
0xffffc3000000c600 0041 00000000 0x0 0x0
0xffffc3000000c680 0041 00000000 0x0 0x0
0xffffc3000000c700 0041 00000000 0x0 0x0
0xffffc3000000c780 0041 00000000 0x0 0x0
0xffffc3000000c800 0041 00000000 0x0 0x0
0xffffc3000000c880 0045 00000000 0x0 0x0
0xffffc3000000c900 0045 00000000 0x0 0x0
0xffffc3000000c980 0041 00000000 0x0 0x0
0xffffc3000000ca00 0041 00000000 0x0 0x0
0xffffc3000000ca80 0041 00000000 0x0 0x0
0xffffc3000000cb00 0041 00000000 0x0 0x0
0xffffc3000000cb80 0041 00000000 0x0 0x0
0xffffc3000000cc00 0041 00000000 0x0 0x0
0xffffc3000000cc80 0041 00000000 0x0 0x0
0xffffc3000000cd00 0041 00000000 0x0 0x0
0xffffc3000000cd80 0041 00000000 0x0 0x0
0xffffc3000000ce00 0041 00000000 0x0 0x0
0xffffc3000000ce80 0045 00000000 0x0 0x0
0xffffc3000000cf00 0041 00000000 0x0 0x0
0xffffc3000000cf80 0041 00000000 0x0 0x0
0xffffc3000000d000 0041 00000000 0x0 0x0
0xffffc3000000d080 0041 00000000 0x0 0x0
0xffffc3000000d100 0041 00000000 0x0 0x0
0xffffc3000000d180 0041 00000000 0x0 0x0
0xffffc3000000d200 0041 00000000 0x0 0x0
0xffffc3000000d280 0041 00000000 0x0 0x0
0xffffc3000000d300 0041 00000000 0x0 0x0
0xffffc3000000d380 0041 00000000 0x0 0x0
0xffffc3000000d400 0045 00000000 0x0 0x0
0xffffc3000000d480 0041 00000000 0x0 0x0
0xffffc3000000d500 0041 00000000 0x0 0x0
0xffffc3000000d580 0041 00000000 0x0 0x0
0xffffc3000000d600 0045 00000000 0x0 0x0
0xffffc3000000d680 0041 00000000 0x0 0x0
0xffffc3000000d700 0045 00000000 0x0 0x0
0xffffc3000000d780 0045 00000000 0x0 0x0
0xffffc3000000d800 0045 00000000 0x0 0x0
0xffffc3000000d880 0041 00000000 0x0 0x0
0xffffc3000000d900 0041 00000000 0x0 0x0
0xffffc3000000d980 0045 00000000 0x0 0x0
0xffffc3000000da00 0041 00000000 0x0 0x0
0xffffc3000000da80 0045 00000000 0x0 0x0
0xffffc3000000db00 0045 00000000 0x0 0x0
0xffffc3000000db80 0045 00000000 0x0 0x0
0xffffc3000000dc00 0045 00000000 0x0 0x0
0xffffc3000000dc80 0045 00000000 0x0 0x0
0xffffc3000000dd00 0041 00000000 0x0 0x0
0xffffc3000000dd80 0041 00000000 0x0 0x0
0xffffc3000000de00 0041 00000000 0x0 0x0
0xffffc3000000de80 0041 00000000 0x0 0x0
0xffffc3000000df00 0045 00000000 0x0 0x0
0xffffc3000000df80 0045 00000000 0x0 0x0
0xffffc3000000e000 0041 00000000 0x0 0x0
0xffffc3000000e080 0045 00000000 0x0 0x0
0xffffc3000000e100 0045 00000000 0x0 0x0
0xffffc3000000e180 0041 00000000 0x0 0x0
0xffffc3000000e200 0041 00000000 0x0 0x0
0xffffc3000000e280 0045 00000000 0x0 0x0
0xffffc3000000e300 0041 00000000 0x0 0x0
0xffffc3000000e380 0041 00000000 0x0 0x0
0xffffc3000000e400 0045 00000000 0x0 0x0
0xffffc3000000e480 0041 00000000 0x0 0x0
0xffffc3000000e500 0045 00000000 0x0 0x0
0xffffc3000000e580 0041 00000000 0x0 0x0
0xffffc3000000e600 0041 00000000 0x0 0x0
0xffffc3000000e680 0041 00000000 0x0 0x0
0xffffc3000000e700 0041 00000000 0x0 0x0
0xffffc3000000e780 0045 00000000 0x0 0x0
0xffffc3000000e800 0041 00000000 0x0 0x0
0xffffc3000000e880 0045 00000000 0x0 0x0
0xffffc3000000e900 0041 00000000 0x0 0x0
0xffffc3000000e980 0041 00000000 0x0 0x0
0xffffc3000000ea00 0045 00000000 0x0 0x0
0xffffc3000000ea80 0041 00000000 0x0 0x0
0xffffc3000000eb00 0041 00000000 0x0 0x0
0xffffc3000000eb80 0041 00000000 0x0 0x0
0xffffc3000000ec00 0041 00000000 0x0 0x0
0xffffc3000000ec80 0041 00000000 0x0 0x0
0xffffc3000000ed00 0041 00000000 0x0 0x0
0xffffc3000000ed80 0041 00000000 0x0 0x0
0xffffc3000000ee00 0041 00000000 0x0 0x0
0xffffc3000000ee80 0041 00000000 0x0 0x0
0xffffc3000000ef00 0041 00000000 0x0 0x0
0xffffc3000000ef80 0041 00000000 0x0 0x0
0xffffc3000000f000 0041 00000000 0x0 0x0
0xffffc3000000f080 0045 00000000 0x0 0x0
0xffffc3000000f100 0041 00000000 0x0 0x0
0xffffc3000000f180 0041 00000000 0x0 0x0
0xffffc3000000f200 0041 00000000 0x0 0x0
0xffffc3000000f280 0041 00000000 0x0 0x0
0xffffc3000000f300 0041 00000000 0x0 0x0
0xffffc3000000f380 0041 00000000 0x0 0x0
0xffffc3000000f400 0041 00000000 0x0 0x0
0xffffc3000000f480 0041 00000000 0x0 0x0
0xffffc3000000f500 0041 00000000 0x0 0x0
0xffffc3000000f580 0041 00000000 0x0 0x0
0xffffc3000000f600 0045 00000000 0x0 0x0
0xffffc3000000f680 0045 00000000 0x0 0x0
0xffffc3000000f700 0041 00000000 0x0 0x0
0xffffc3000000f780 0041 00000000 0x0 0x0
0xffffc3000000f800 0041 00000000 0x0 0x0
0xffffc3000000f880 0041 00000000 0x0 0x0
0xffffc3000000f900 0041 00000000 0x0 0x0
0xffffc3000000f980 0045 00000000 0x0 0x0
0xffffc3000000fa00 0041 00000000 0x0 0x0
0xffffc3000000fa80 0041 00000000 0x0 0x0
0xffffc3000000fb00 0041 00000000 0x0 0x0
0xffffc3000000fb80 0041 00000000 0x0 0x0
0xffffc3000000fc00 0041 00000000 0x0 0x0
0xffffc3000000fc80 0041 00000000 0x0 0x0
0xffffc3000000fd00 0041 00000000 0x0 0x0
0xffffc3000000fd80 0041 00000000 0x0 0x0
0xffffc3000000fe00 0041 00000000 0x0 0x0
0xffffc3000000fe80 0041 00000000 0x0 0x0
0xffffc3000000ff00 0041 00000000 0x0 0x0
0xffffc3000000ff80 0041 00000000 0x0 0x0
0xffffc30000010000 0041 00000000 0x0 0x0
0xffffc30000010080 0041 00000000 0x0 0x0
0xffffc30000010100 0041 00000000 0x0 0x0
0xffffc30000010180 0041 00000000 0x0 0x0
0xffffc30000010200 0041 00000000 0x0 0x0
0xffffc30000010280 0041 00000000 0x0 0x0
0xffffc30000010300 0045 00000000 0x0 0x0
0xffffc30000010380 0041 00000000 0x0 0x0
0xffffc30000010400 0041 00000000 0x0 0x0
0xffffc30000010480 0041 00000000 0x0 0x0
0xffffc30000010500 0041 00000000 0x0 0x0
0xffffc30000010580 0041 00000000 0x0 0x0
0xffffc30000010600 0041 00000000 0x0 0x0
0xffffc30000010680 0045 00000000 0x0 0x0
0xffffc30000010700 0041 00000000 0x0 0x0
0xffffc30000010780 0041 00000000 0x0 0x0
0xffffc30000010800 0041 00000000 0x0 0x0
0xffffc30000010880 0041 00000000 0x0 0x0
0xffffc30000010900 0045 00000000 0x0 0x0
0xffffc30000010980 0041 00000000 0x0 0x0
0xffffc30000010a00 0041 00000000 0x0 0x0
0xffffc30000010a80 0041 00000000 0x0 0x0
0xffffc30000010b00 0041 00000000 0x0 0x0
0xffffc30000010b80 0045 00000000 0x0 0x0
0xffffc30000010c00 0041 00000000 0x0 0x0
0xffffc30000010c80 0045 00000000 0x0 0x0
0xffffc30000010d00 0001 00000000 0x0 0x0
0xffffc30000010d80 0001 00000000 0x0 0x0
0xffffc30000010e00 0001 00000000 0x0 0x0
0xffffc30000010e80 0001 00000000 0x0 0x0
0xffffc30000010f00 0001 00000000 0x0 0x0
0xffffc30000010f80 0001 00000000 0x0 0x0
0xffffc30000011000 0001 00000000 0x0 0x0
0xffffc30000011080 0001 00000000 0x0 0x0
0xffffc30000011100 0001 00000000 0x0 0x0
0xffffc30000011180 0001 00000000 0x0 0x0
0xffffc30000011200 0001 00000000 0x0 0x0
0xffffc30000011280 0001 00000000 0x0 0x0
0xffffc30000011300 0001 00000000 0x0 0x0
0xffffc30000011380 0001 00000000 0x0 0x0
0xffffc30000011400 0001 00000000 0x0 0x0
0xffffc30000011480 0001 00000000 0x0 0x0
0xffffc30000011500 0001 00000000 0x0 0x0
0xffffc30000011580 0001 00000000 0x0 0x0
0xffffc30000011600 0001 00000000 0x0 0x0
0xffffc30000011680 0001 00000000 0x0 0x0
0xffffc30000011700 0001 00000000 0x0 0x0
0xffffc30000011780 0001 00000000 0x0 0x0
0xffffc30000011800 0001 00000000 0x0 0x0
0xffffc30000011880 0001 00000000 0x0 0x0
0xffffc30000011900 0001 00000000 0x0 0x0
0xffffc30000011980 0001 00000000 0x0 0x0
0xffffc30000011a00 0001 00000000 0x0 0x0
0xffffc30000011a80 0001 00000000 0x0 0x0
0xffffc30000011b00 0001 00000000 0x0 0x0
0xffffc30000011b80 0001 00000000 0x0 0x0
0xffffc30000011c00 0001 00000000 0x0 0x0
0xffffc30000011c80 0001 00000000 0x0 0x0
0xffffc30000011d00 0001 00000000 0x0 0x0
0xffffc30000011d80 0001 00000000 0x0 0x0
0xffffc30000011e00 0001 00000000 0x0 0x0
0xffffc30000011e80 0001 00000000 0x0 0x0
0xffffc30000011f00 0001 00000000 0x0 0x0
0xffffc30000011f80 0001 00000000 0x0 0x0
0xffffc30000012000 0001 00000000 0x0 0x0
0xffffc30000012080 0001 00000000 0x0 0x0
0xffffc30000012100 0001 00000000 0x0 0x0
0xffffc30000012180 0001 00000000 0x0 0x0
0xffffc30000012200 0001 00000000 0x0 0x0
0xffffc30000012280 0001 00000000 0x0 0x0
0xffffc30000012300 0001 00000000 0x0 0x0
0xffffc30000012380 0001 00000000 0x0 0x0
0xffffc30000012400 0001 00000000 0x0 0x0
0xffffc30000012480 0001 00000000 0x0 0x0
0xffffc30000012500 0001 00000000 0x0 0x0
0xffffc30000012580 0001 00000000 0x0 0x0
0xffffc30000012600 0001 00000000 0x0 0x0
0xffffc30000012680 0001 00000000 0x0 0x0
0xffffc30000012700 0001 00000000 0x0 0x0
0xffffc30000012780 0001 00000000 0x0 0x0
0xffffc30000012800 0041 00000000 0x0 0x0
0xffffc30000012880 0041 00000000 0x0 0x0
0xffffc30000012900 0041 00000000 0x0 0x0
0xffffc30000012980 0041 00000000 0x0 0x0
0xffffc30000012a00 0041 00000000 0x0 0x0
0xffffc30000012a80 0041 00000000 0x0 0x0
0xffffc30000012b00 0041 00000000 0x0 0x0
0xffffc30000012b80 0041 00000000 0x0 0x0
0xffffc30000012c00 0041 00000000 0x0 0x0
0xffffc30000012c80 0041 00000000 0x0 0x0
0xffffc30000012d00 0041 00000000 0x0 0x0
0xffffc30000012d80 0041 00000000 0x0 0x0
0xffffc30000012e00 0041 00000000 0x0 0x0
0xffffc30000012e80 0041 00000000 0x0 0x0
0xffffc30000012f00 0041 00000000 0x0 0x0
0xffffc30000012f80 0041 00000000 0x0 0x0
0xffffc30000013000 0041 00000000 0x0 0x0
0xffffc30000013080 0041 00000000 0x0 0x0
0xffffc30000013100 0041 00000000 0x0 0x0
0xffffc30000013180 0041 00000000 0x0 0x0
0xffffc30000013200 0041 00000000 0x0 0x0
0xffffc30000013280 0041 00000000 0x0 0x0
0xffffc30000013300 0041 00000000 0x0 0x0
0xffffc30000013380 0041 00000000 0x0 0x0
0xffffc30000013400 0041 00000000 0x0 0x0
0xffffc30000013480 0041 00000000 0x0 0x0
0xffffc30000013500 0041 00000000 0x0 0x0
0xffffc30000013580 0041 00000000 0x0 0x0
0xffffc30000013600 0041 00000000 0x0 0x0
0xffffc30000013680 0041 00000000 0x0 0x0
0xffffc30000013700 0041 00000000 0x0 0x0
0xffffc30000013780 0041 00000000 0x0 0x0
0xffffc30000013800 0041 00000000 0x0 0x0
0xffffc30000013880 0041 00000000 0x0 0x0
0xffffc30000013900 0041 00000000 0x0 0x0
0xffffc30000013980 0041 00000000 0x0 0x0
0xffffc30000013a00 0041 00000000 0x0 0x0
0xffffc30000013a80 0041 00000000 0x0 0x0
0xffffc30000013b00 0041 00000000 0x0 0x0
0xffffc30000013b80 0041 00000000 0x0 0x0
0xffffc30000013c00 0041 00000000 0x0 0x0
0xffffc30000013c80 0041 00000000 0x0 0x0
0xffffc30000013d00 0041 00000000 0x0 0x0
0xffffc30000013d80 0041 00000000 0x0 0x0
0xffffc30000013e00 0041 00000000 0x0 0x0
0xffffc30000013e80 0041 00000000 0x0 0x0
0xffffc30000013f00 0041 00000000 0x0 0x0
0xffffc30000013f80 0041 00000000 0x0 0x0
0xffffc30000014000 0001 00000000 0x0 0x0
0xffffc30000014080 0001 00000000 0x0 0x0
0xffffc30000014100 0001 00000000 0x0 0x0
0xffffc30000014180 0001 00000000 0x0 0x0
0xffffc30000014200 0001 00000000 0x0 0x0
0xffffc30000014280 0001 00000000 0x0 0x0
0xffffc30000014300 0001 00000000 0x0 0x0
0xffffc30000014380 0001 00000000 0x0 0x0
0xffffc30000014400 0001 00000000 0x0 0x0
0xffffc30000014480 0001 00000000 0x0 0x0
0xffffc30000014500 0001 00000000 0x0 0x0
0xffffc30000014580 0001 00000000 0x0 0x0
0xffffc30000014600 0001 00000000 0x0 0x0
0xffffc30000014680 0001 00000000 0x0 0x0
0xffffc30000014700 0001 00000000 0x0 0x0
0xffffc30000014780 0001 00000000 0x0 0x0
0xffffc30000014800 0001 00000000 0x0 0x0
0xffffc30000014880 0001 00000000 0x0 0x0
0xffffc30000014900 0001 00000000 0x0 0x0
0xffffc30000014980 0001 00000000 0x0 0x0
0xffffc30000014a00 0001 00000000 0x0 0x0
0xffffc30000014a80 0001 00000000 0x0 0x0
0xffffc30000014b00 0001 00000000 0x0 0x0
0xffffc30000014b80 0001 00000000 0x0 0x0
0xffffc30000014c00 0001 00000000 0x0 0x0
0xffffc30000014c80 0001 00000000 0x0 0x0
0xffffc30000014d00 0001 00000000 0x0 0x0
0xffffc30000014d80 0001 00000000 0x0 0x0
0xffffc30000014e00 0001 00000000 0x0 0x0
0xffffc30000014e80 0001 00000000 0x0 0x0
0xffffc30000014f00 0001 00000000 0x0 0x0
0xffffc30000014f80 0001 00000000 0x0 0x0
0xffffc30000015000 0001 00000000 0x0 0x0
0xffffc30000015080 0001 00000000 0x0 0x0
0xffffc30000015100 0001 00000000 0x0 0x0
0xffffc30000015180 0001 00000000 0x0 0x0
0xffffc30000015200 0001 00000000 0x0 0x0
0xffffc30000015280 0001 00000000 0x0 0x0
0xffffc30000015300 0001 00000000 0x0 0x0
0xffffc30000015380 0001 00000000 0x0 0x0
0xffffc30000015400 0001 00000000 0x0 0x0
0xffffc30000015480 0001 00000000 0x0 0x0
0xffffc30000015500 0001 00000000 0x0 0x0
0xffffc30000015580 0001 00000000 0x0 0x0
0xffffc30000015600 0001 00000000 0x0 0x0
0xffffc30000015680 0001 00000000 0x0 0x0
0xffffc30000015700 0001 00000000 0x0 0x0
0xffffc30000015780 0001 00000000 0x0 0x0
0xffffc30000015800 0001 00000000 0x0 0x0
0xffffc30000015880 0001 00000000 0x0 0x0
0xffffc30000015900 0001 00000000 0x0 0x0
0xffffc30000015980 0001 00000000 0x0 0x0
0xffffc30000015a00 0001 00000000 0x0 0x0
0xffffc30000015a80 0001 00000000 0x0 0x0
0xffffc30000015b00 0041 00000000 0x0 0x0
0xffffc30000015b80 0041 00000000 0x0 0x0
0xffffc30000015c00 0041 00000000 0x0 0x0
0xffffc30000015c80 0041 00000000 0x0 0x0
0xffffc30000015d00 0041 00000000 0x0 0x0
0xffffc30000015d80 0041 00000000 0x0 0x0
0xffffc30000015e00 0041 00000000 0x0 0x0
0xffffc30000015e80 0041 00000000 0x0 0x0
0xffffc30000015f00 0041 00000000 0x0 0x0
0xffffc30000015f80 0041 00000000 0x0 0x0
0xffffc30000016000 0041 00000000 0x0 0x0
0xffffc30000016080 0041 00000000 0x0 0x0
0xffffc30000016100 0041 00000000 0x0 0x0
0xffffc30000016180 0041 00000000 0x0 0x0
0xffffc30000016200 0041 00000000 0x0 0x0
0xffffc30000016280 0041 00000000 0x0 0x0
0xffffc30000016300 0041 00000000 0x0 0x0
0xffffc30000016380 0041 00000000 0x0 0x0
0xffffc30000016400 0041 00000000 0x0 0x0
0xffffc30000016480 0041 00000000 0x0 0x0
0xffffc30000016500 0041 00000000 0x0 0x0
0xffffc30000016580 0041 00000000 0x0 0x0
0xffffc30000016600 0041 00000000 0x0 0x0
0xffffc30000016680 0041 00000000 0x0 0x0
0xffffc30000016700 0041 00000000 0x0 0x0
0xffffc30000016780 0041 00000000 0x0 0x0
0xffffc30000016800 0041 00000000 0x0 0x0
0xffffc30000016880 0041 00000000 0x0 0x0
0xffffc30000016900 0041 00000000 0x0 0x0
0xffffc30000016980 0041 00000000 0x0 0x0
0xffffc30000016a00 0041 00000000 0x0 0x0
0xffffc30000016a80 0041 00000000 0x0 0x0
0xffffc30000016b00 0041 00000000 0x0 0x0
0xffffc30000016b80 0041 00000000 0x0 0x0
0xffffc30000016c00 0041 00000000 0x0 0x0
0xffffc30000016c80 0041 00000000 0x0 0x0
0xffffc30000016d00 0041 00000000 0x0 0x0
0xffffc30000016d80 0041 00000000 0x0 0x0
0xffffc30000016e00 0041 00000000 0x0 0x0
0xffffc30000016e80 0041 00000000 0x0 0x0
0xffffc30000016f00 0041 00000000 0x0 0x0
0xffffc30000016f80 0041 00000000 0x0 0x0
0xffffc30000017000 0041 00000000 0x0 0x0
0xffffc30000017080 0041 00000000 0x0 0x0
0xffffc30000017100 0041 00000000 0x0 0x0
0xffffc30000017180 0001 00000000 0x0 0x0
0xffffc30000017200 0001 00000000 0x0 0x0
0xffffc30000017280 0001 00000000 0x0 0x0
0xffffc30000017300 0001 00000000 0x0 0x0
0xffffc30000017380 0001 00000000 0x0 0x0
0xffffc30000017400 0001 00000000 0x0 0x0
0xffffc30000017480 0001 00000000 0x0 0x0
0xffffc30000017500 0001 00000000 0x0 0x0
0xffffc30000017580 0001 00000000 0x0 0x0
0xffffc30000017600 0001 00000000 0x0 0x0
0xffffc30000017680 0001 00000000 0x0 0x0
0xffffc30000017700 0001 00000000 0x0 0x0
0xffffc30000017780 0001 00000000 0x0 0x0
0xffffc30000017800 0001 00000000 0x0 0x0
0xffffc30000017880 0001 00000000 0x0 0x0
0xffffc30000017900 0001 00000000 0x0 0x0
0xffffc30000017980 0001 00000000 0x0 0x0
0xffffc30000017a00 0001 00000000 0x0 0x0
0xffffc30000017a80 0001 00000000 0x0 0x0
0xffffc30000017b00 0001 00000000 0x0 0x0
0xffffc30000017b80 0001 00000000 0x0 0x0
0xffffc30000017c00 0001 00000000 0x0 0x0
0xffffc30000017c80 0001 00000000 0x0 0x0
0xffffc30000017d00 0001 00000000 0x0 0x0
0xffffc30000017d80 0001 00000000 0x0 0x0
0xffffc30000017e00 0001 00000000 0x0 0x0
0xffffc30000017e80 0001 00000000 0x0 0x0
0xffffc30000017f00 0001 00000000 0x0 0x0
0xffffc30000017f80 0001 00000000 0x0 0x0
0xffffc30000018000 0001 00000000 0x0 0x0
0xffffc30000018080 0001 00000000 0x0 0x0
0xffffc30000018100 0001 00000000 0x0 0x0
0xffffc30000018180 0001 00000000 0x0 0x0
0xffffc30000018200 0001 00000000 0x0 0x0
0xffffc30000018280 0001 00000000 0x0 0x0
0xffffc30000018300 0001 00000000 0x0 0x0
0xffffc30000018380 0001 00000000 0x0 0x0
0xffffc30000018400 0001 00000000 0x0 0x0
0xffffc30000018480 0001 00000000 0x0 0x0
0xffffc30000018500 0001 00000000 0x0 0x0
0xffffc30000018580 0001 00000000 0x0 0x0
0xffffc30000018600 0001 00000000 0x0 0x0
0xffffc30000018680 0001 00000000 0x0 0x0
0xffffc30000018700 0001 00000000 0x0 0x0
0xffffc30000018780 0001 00000000 0x0 0x0
0xffffc30000018800 0001 00000000 0x0 0x0
0xffffc30000018880 0001 00000000 0x0 0x0
0xffffc30000018900 0001 00000000 0x0 0x0
0xffffc30000018980 0001 00000000 0x0 0x0
0xffffc30000018a00 0001 00000000 0x0 0x0
0xffffc30000018a80 0001 00000000 0x0 0x0
0xffffc30000018b00 0001 00000000 0x0 0x0
0xffffc30000018b80 0001 00000000 0x0 0x0
0xffffc30000018c00 0001 00000000 0x0 0x0
0xffffc30000018c80 0041 00000000 0x0 0x0
0xffffc30000018d00 0041 00000000 0x0 0x0
0xffffc30000018d80 0041 00000000 0x0 0x0
0xffffc30000018e00 0041 00000000 0x0 0x0
0xffffc30000018e80 0041 00000000 0x0 0x0
0xffffc30000018f00 0041 00000000 0x0 0x0
0xffffc30000018f80 0041 00000000 0x0 0x0
0xffffc30000019000 0041 00000000 0x0 0x0
0xffffc30000019080 0041 00000000 0x0 0x0
0xffffc30000019100 0041 00000000 0x0 0x0
0xffffc30000019180 0041 00000000 0x0 0x0
0xffffc30000019200 0041 00000000 0x0 0x0
0xffffc30000019280 0041 00000000 0x0 0x0
0xffffc30000019300 0041 00000000 0x0 0x0
0xffffc30000019380 0041 00000000 0x0 0x0
0xffffc30000019400 0041 00000000 0x0 0x0
0xffffc30000019480 0041 00000000 0x0 0x0
0xffffc30000019500 0041 00000000 0x0 0x0
0xffffc30000019580 0041 00000000 0x0 0x0
0xffffc30000019600 0045 00000000 0x0 0x0
0xffffc30000019680 0041 00000000 0x0 0x0
0xffffc30000019700 0041 00000000 0x0 0x0
0xffffc30000019780 0041 00000000 0x0 0x0
0xffffc30000019800 0041 00000000 0x0 0x0
0xffffc30000019880 0041 00000000 0x0 0x0
0xffffc30000019900 0041 00000000 0x0 0x0
0xffffc30000019980 0045 00000000 0x0 0x0
0xffffc30000019a00 0045 00000000 0x0 0x0
0xffffc30000019a80 0041 00000000 0x0 0x0
0xffffc30000019b00 0041 00000000 0x0 0x0
0xffffc30000019b80 0041 00000000 0x0 0x0
0xffffc30000019c00 0045 00000000 0x0 0x0
0xffffc30000019c80 0041 00000000 0x0 0x0
0xffffc30000019d00 0041 00000000 0x0 0x0
0xffffc30000019d80 0045 00000000 0x0 0x0
0xffffc30000019e00 0045 00000000 0x0 0x0
0xffffc30000019e80 0041 00000000 0x0 0x0
0xffffc30000019f00 0045 00000000 0x0 0x0
0xffffc30000019f80 0041 00000000 0x0 0x0
0xffffc3000001a000 0045 00000000 0x0 0x0
0xffffc3000001a080 0041 00000000 0x0 0x0
0xffffc3000001a100 0041 00000000 0x0 0x0
0xffffc3000001a180 0045 00000000 0x0 0x0
0xffffc3000001a200 0045 00000000 0x0 0x0
0xffffc3000001a280 0041 00000000 0x0 0x0
0xffffc3000001a300 0045 00000000 0x0 0x0
0xffffc3000001a380 0041 00000000 0x0 0x0
0xffffc3000001a400 0045 00000000 0x0 0x0
0xffffc3000001a480 0041 00000000 0x0 0x0
0xffffc3000001a500 0001 00000000 0x0 0x0
0xffffc3000001a580 0001 00000000 0x0 0x0
0xffffc3000001a600 0001 00000000 0x0 0x0
0xffffc3000001a680 0001 00000000 0x0 0x0
0xffffc3000001a700 0001 00000000 0x0 0x0
0xffffc3000001a780 0001 00000000 0x0 0x0
0xffffc3000001a800 0001 00000000 0x0 0x0
0xffffc3000001a880 0001 00000000 0x0 0x0
0xffffc3000001a900 0001 00000000 0x0 0x0
0xffffc3000001a980 0001 00000000 0x0 0x0
0xffffc3000001aa00 0001 00000000 0x0 0x0
0xffffc3000001aa80 0001 00000000 0x0 0x0
0xffffc3000001ab00 0001 00000000 0x0 0x0
0xffffc3000001ab80 0001 00000000 0x0 0x0
0xffffc3000001ac00 0001 00000000 0x0 0x0
0xffffc3000001ac80 0001 00000000 0x0 0x0
0xffffc3000001ad00 0001 00000000 0x0 0x0
0xffffc3000001ad80 0001 00000000 0x0 0x0
0xffffc3000001ae00 0001 00000000 0x0 0x0
0xffffc3000001ae80 0001 00000000 0x0 0x0
0xffffc3000001af00 0001 00000000 0x0 0x0
0xffffc3000001af80 0001 00000000 0x0 0x0
0xffffc3000001b000 0001 00000000 0x0 0x0
0xffffc3000001b080 0001 00000000 0x0 0x0
0xffffc3000001b100 0001 00000000 0x0 0x0
0xffffc3000001b180 0001 00000000 0x0 0x0
0xffffc3000001b200 0001 00000000 0x0 0x0
0xffffc3000001b280 0001 00000000 0x0 0x0
0xffffc3000001b300 0001 00000000 0x0 0x0
0xffffc3000001b380 0001 00000000 0x0 0x0
0xffffc3000001b400 0001 00000000 0x0 0x0
0xffffc3000001b480 0001 00000000 0x0 0x0
0xffffc3000001b500 0001 00000000 0x0 0x0
0xffffc3000001b580 0001 00000000 0x0 0x0
0xffffc3000001b600 0001 00000000 0x0 0x0
0xffffc3000001b680 0001 00000000 0x0 0x0
0xffffc3000001b700 0001 00000000 0x0 0x0
0xffffc3000001b780 0001 00000000 0x0 0x0
0xffffc3000001b800 0001 00000000 0x0 0x0
0xffffc3000001b880 0001 00000000 0x0 0x0
0xffffc3000001b900 0001 00000000 0x0 0x0
0xffffc3000001b980 0001 00000000 0x0 0x0
0xffffc3000001ba00 0001 00000000 0x0 0x0
0xffffc3000001ba80 0001 00000000 0x0 0x0
0xffffc3000001bb00 0001 00000000 0x0 0x0
0xffffc3000001bb80 0001 00000000 0x0 0x0
0xffffc3000001bc00 0001 00000000 0x0 0x0
0xffffc3000001bc80 0001 00000000 0x0 0x0
0xffffc3000001bd00 0001 00000000 0x0 0x0
0xffffc3000001bd80 0001 00000000 0x0 0x0
0xffffc3000001be00 0001 00000000 0x0 0x0
0xffffc3000001be80 0001 00000000 0x0 0x0
0xffffc3000001bf00 0001 00000000 0x0 0x0
0xffffc3000001bf80 0001 00000000 0x0 0x0
0xffffc3000001c000 0001 00000000 0x0 0x0
0xffffc3000001c080 0001 00000000 0x0 0x0
0xffffc3000001c100 0001 00000000 0x0 0x0
0xffffc3000001c180 0001 00000000 0x0 0x0
0xffffc3000001c200 0001 00000000 0x0 0x0
0xffffc3000001c280 0001 00000000 0x0 0x0
0xffffc3000001c300 0001 00000000 0x0 0x0
0xffffc3000001c380 0001 00000000 0x0 0x0
0xffffc3000001c400 0001 00000000 0x0 0x0
0xffffc3000001c480 0001 00000000 0x0 0x0
0xffffc3000001c500 0001 00000000 0x0 0x0
0xffffc3000001c580 0001 00000000 0x0 0x0
0xffffc3000001c600 0001 00000000 0x0 0x0
0xffffc3000001c680 0001 00000000 0x0 0x0
0xffffc3000001c700 0001 00000000 0x0 0x0
0xffffc3000001c780 0001 00000000 0x0 0x0
0xffffc3000001c800 0001 00000000 0x0 0x0
0xffffc3000001c880 0001 00000000 0x0 0x0
0xffffc3000001c900 0001 00000000 0x0 0x0
0xffffc3000001c980 0001 00000000 0x0 0x0
0xffffc3000001ca00 0001 00

---
This report is generated by a bot. It may contain errors.
See https://goo.gl/tpsmEJ for more information about syzbot.
syzbot engineers can be reached at syzk...@googlegroups.com.

syzbot will keep track of this issue. See:
https://goo.gl/tpsmEJ#status for how to communicate with syzbot.

[Chuck Silvers]

#syz dup: assert failed: semcnt >= 0