panic: [ 118.ADDR] vpanic() at netbsd:vpanic+0x2cd

[syzbot]

Hello,

syzbot found the following issue on:

HEAD commit: d438b4f8 make(1): use consistent definition for MAKE_INLINE
git tree: netbsd
console output: https://syzkaller.appspot.com/x/log.txt?x=1291ca76500000
kernel config: https://syzkaller.appspot.com/x/.config?x=1420f906d33d9f1f
dashboard link: https://syzkaller.appspot.com/bug?extid=4e90856f76602de184da
compiler: g++ (Ubuntu 5.4.0-6ubuntu1~16.04.12) 5.4.0 20160609

Unfortunately, I don't have any reproducer for this issue yet.

IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+4e9085...@syzkaller.appspotmail.com

118.0050919] panic: [ 118.0450792] vpanic() at netbsd:vpanic+0x2cd sys/kern/subr_prf.c:290
[ 118.1050774] db_print_address.cold() at netbsd:db_print_address.cold
[ 118.1650793] chgsemcnt() at netbsd:chgsemcnt+0x92 sys/kern/kern_uidinfo.c:241
[ 118.2250800] ksem_release() at netbsd:ksem_release+0x1eb sys/kern/uipc_sem.c:536
[ 118.2850795] ksem_close_fop() at netbsd:ksem_close_fop+0x113 sys/kern/uipc_sem.c:853
[ 118.3450779] closef() at netbsd:closef+0x1cd sys/kern/kern_descrip.c:832
[ 118.3950780] fd_free() at netbsd:fd_free+0x795 sys/kern/kern_descrip.c:1571
[ 118.4550791] exit1() at netbsd:exit1+0x3a8 sys/kern/kern_exit.c:301
[ 118.5050770] sys_exit() at netbsd:sys_exit+0xd4 sys/kern/kern_exit.c:180
[ 118.5650784] syscall() at netbsd:syscall+0x2d5 sy_call sys/sys/syscallvar.h:65 [inline]
[ 118.5650784] syscall() at netbsd:syscall+0x2d5 sy_invoke sys/sys/syscallvar.h:94 [inline]
[ 118.5650784] syscall() at netbsd:syscall+0x2d5 sys/arch/x86/x86/syscall.c:138
[ 118.5850814] --- syscall (number 1) ---
[ 118.6050809] netbsd:syscall+0x2d5:
[ 118.6050809] cpu0: End traceback...
[ 118.6050809] fatal breakpoint trap in supervisor mode
[ 118.6160991] trap type 1 code 0 rip 0xffffffff80221a85 cs 0x8 rflags 0x246 cr2 0x728a04607ea0 ilevel 0 rsp 0xffff9000d3a09c20
[ 118.6290684] curlwp 0xfffff71b3a170580 pid 10423.10423 lowest kstack 0xffff9000d3a052c0
Stopped in pid 10423.10423 (syz-executor.3) at netbsd:breakpoint+0x5: leave
?
breakpoint() at netbsd:breakpoint+0x5
db_panic() at netbsd:db_panic+0xec sys/ddb/db_panic.c:67
vpanic() at netbsd:vpanic+0x2cd sys/kern/subr_prf.c:290
db_print_address.cold() at netbsd:db_print_address.cold
chgsemcnt() at netbsd:chgsemcnt+0x92 sys/kern/kern_uidinfo.c:241
ksem_release() at netbsd:ksem_release+0x1eb sys/kern/uipc_sem.c:536
ksem_close_fop() at netbsd:ksem_close_fop+0x113 sys/kern/uipc_sem.c:853
closef() at netbsd:closef+0x1cd sys/kern/kern_descrip.c:832
fd_free() at netbsd:fd_free+0x795 sys/kern/kern_descrip.c:1571
exit1() at netbsd:exit1+0x3a8 sys/kern/kern_exit.c:301
sys_exit() at netbsd:sys_exit+0xd4 sys/kern/kern_exit.c:180
syscall() at netbsd:syscall+0x2d5 sy_call sys/sys/syscallvar.h:65 [inline]
syscall() at netbsd:syscall+0x2d5 sy_invoke sys/sys/syscallvar.h:94 [inline]
syscall() at netbsd:syscall+0x2d5 sys/arch/x86/x86/syscall.c:138
--- syscall (number 1) ---
netbsd:syscall+0x2d5:
Panic string: kernel diagnostic assertion "semcnt >= 0" failed: file "/syzkaller/managers/netbsd-kubsan/kernel/sys/kern/kern_uidinfo.c", line 241
PID LID S CPU FLAGS STRUCT LWP * NAME WAIT
10563 10563 3 0 180 fffff71b3883e4c0 syz-executor.4 parked
10423>10423 7 0 10040000 fffff71b3a170580 syz-executor.3
10301 9416 2 1 40100 fffff71b2cf60300 syz-executor.1
10301 10301 2 1 10040000 fffff71b1fd922c0 syz-executor.1
10213 10537 2 0 40100 fffff71b2cf60b80 syz-executor.5
10213 10213 3 0 10000000 fffff71b38182b40 syz-executor.5 vm_map
10454 10454 3 0 180 fffff71b39c01540 syz-executor.4 parked
9561 9561 3 0 180 fffff71b3904a940 syz-executor.4 parked
1074 1074 2 0 140 fffff71b28740580 syz-executor.5
1098 1098 3 1 1c0 fffff71b2ce73280 syz-executor.4 pipe_rd
1103 >1103 7 1 140 fffff71b2a757ac0 syz-executor.3
1084 1084 3 1 1c0 fffff71b287409c0 syz-executor.2 pipe_rd
420 420 2 1 140 fffff71b2a757240 syz-executor.1
1080 1080 3 1 1c0 fffff71b295660c0 syz-executor.0 pipe_rd
1072 1077 3 1 180 fffff71b2a757680 syz-fuzzer parked
1072 1086 3 1 180 fffff71b2a2bf180 syz-fuzzer parked
1072 1102 3 0 180 fffff71b29a5c1c0 syz-fuzzer parked
1072 1073 3 1 180 fffff71b2ac91200 syz-fuzzer kqueue
1072 1122 3 0 180 fffff71b2ac91a80 syz-fuzzer parked
1072 796 3 0 180 fffff71b28740140 syz-fuzzer parked
1072 1070 3 0 1c0 fffff71b284d7280 syz-fuzzer parked
1072 991 3 1 180 fffff71b2805fa80 syz-fuzzer parked
1072 1072 3 1 180 fffff71b2ac91640 syz-fuzzer parked
1069 1069 3 1 180 fffff71b2a2bfa00 sshd select
947 947 3 1 180 fffff71b29a5ca40 getty nanoslp
856 856 3 1 180 fffff71b283e3240 getty nanoslp
1097 1097 3 0 180 fffff71b28014600 getty nanoslp
1099 1099 3 0 1c0 fffff71b283e3ac0 getty ttyraw
948 948 3 1 180 fffff71b29a5c600 sshd select
962 962 3 1 180 fffff71b2a2bf5c0 powerd kqueue
871 871 3 0 180 fffff71b28a5e340 syslogd kqueue
599 599 3 0 180 fffff71b286ec740 dhcpcd poll
595 595 3 1 180 fffff71b283e3680 dhcpcd poll
593 593 3 1 180 fffff71b2983a900 dhcpcd poll
428 428 3 1 180 fffff71b286ec300 dhcpcd poll
350 350 3 1 180 fffff71b286ecb80 dhcpcd poll
349 349 3 0 180 fffff71b28971700 dhcpcd poll
348 348 3 0 180 fffff71b28971b40 dhcpcd poll
1 1 3 0 180 fffff71b1fe63940 init wait
0 895 3 0 200 fffff71b28014a40 physiod physiod
0 192 3 0 200 fffff71b2805f640 ioflush syncer
0 166 3 0 200 fffff71b1fd92700 pooldrain pooldrain
0 165 3 1 200 fffff71b2805f200 pgdaemon pgdaemon
0 162 3 1 200 fffff71b280141c0 usb7 usbevt
0 161 3 1 200 fffff71b24f57a00 usb6 usbevt
0 31 3 1 200 fffff71b24f575c0 usb5 usbevt
0 63 3 0 200 fffff71b24f57180 usb4 usbevt
0 126 3 1 200 fffff71b21f129c0 usb3 usbevt
0 125 3 1 200 fffff71b21f12580 usb2 usbevt
0 124 2 0 240 fffff71b21f12140 usb1
0 123 3 1 200 fffff71b20eda980 usb0 usbevt
0 122 3 1 200 fffff71b20eda540 usbtask-dr usbtsk
0 121 3 1 200 fffff71b20eda100 usbtask-hc usbtsk
0 120 3 0 200 fffff71b1d2b3ac0 npfgc0 npfgcw
0 119 3 1 200 fffff71b1fe63500 rt_free rt_free
0 118 3 1 200 fffff71b1fe630c0 unpgc unpgc
0 117 2 0 200 fffff71b1fe46900 key_timehandler
0 116 3 1 200 fffff71b1fe464c0 icmp6_wqinput/1 icmp6_wqinput
0 115 3 0 200 fffff71b1fe46080 icmp6_wqinput/0 icmp6_wqinput
0 114 2 0 200 fffff71b1fe218c0 nd6_timer
0 113 3 1 200 fffff71b1fe21480 carp6_wqinput/1 carp6_wqinput
0 112 3 0 200 fffff71b1fe21040 carp6_wqinput/0 carp6_wqinput
0 111 3 1 200 fffff71b1fe0cbc0 carp_wqinput/1 carp_wqinput
0 110 3 0 200 fffff71b1fe0c780 carp_wqinput/0 carp_wqinput
0 109 3 1 200 fffff71b1fe0c340 icmp_wqinput/1 icmp_wqinput
0 108 3 0 200 fffff71b1fd97b80 icmp_wqinput/0 icmp_wqinput
0 107 2 0 200 fffff71b1fd97740 rt_timer
0 106 3 0 200 fffff71b1fd92b40 vmem_rehash vmem_rehash
0 105 3 0 200 fffff71b1fd97300 entbutler entropy
0 96 3 1 200 fffff71b1f723b00 viomb balloon
0 30 3 1 200 fffff71b1f7236c0 vioif0_txrx/1 vioif0_txrx
0 29 3 0 200 fffff71b1f723280 vioif0_txrx/0 vioif0_txrx
0 27 3 0 200 fffff71b1d2b3680 scsibus0 sccomp
0 26 3 0 200 fffff71b1d2b3240 pms0 pmsreset
0 25 3 1 200 fffff71b1d204a80 xcall/1 xcall
0 24 1 1 200 fffff71b1d204640 softser/1
0 23 1 1 200 fffff71b1d204200 softclk/1
0 22 1 1 200 fffff71b1d1dfa40 softbio/1
0 21 1 1 200 fffff71b1d1df600 softnet/1
0 20 1 1 201 fffff71b1d1df1c0 idle/1
0 19 3 0 200 fffff71c4c149a00 lnxpwrwq lnxpwrwq
0 18 3 0 200 fffff71c4c1495c0 lnxlngwq lnxlngwq
0 17 3 0 200 fffff71c4c149180 lnxsyswq lnxsyswq
0 16 3 0 200 fffff71c4c1649c0 lnxrcugc lnxrcugc
0 15 3 0 200 fffff71c4c164580 sysmon smtaskq
0 14 3 1 200 fffff71c4c164140 pmfsuspend pmfsuspend
0 13 3 0 200 fffff71c4c173980 pmfevent pmfevent
0 12 3 0 200 fffff71c4c173540 sopendfree sopendfr
0 11 3 1 200 fffff71c4c173100 iflnkst iflnkst
0 10 3 0 200 fffff71c4d19e940 nfssilly nfssilly
0 9 3 0 200 fffff71c4d19e500 vdrain vdrain
0 8 3 0 200 fffff71c4d19e0c0 modunload mod_unld
0 7 3 0 200 fffff71c4d1d3900 xcall/0 xcall
0 6 1 0 200 fffff71c4d1d34c0 softser/0
0 5 1 0 200 fffff71c4d1d3080 softclk/0
0 4 1 0 200 fffff71c4d1fd8c0 softbio/0
0 3 1 0 200 fffff71c4d1fd480 softnet/0
0 2 1 0 201 fffff71c4d1fd040 idle/0
0 0 2 0 240 ffffffff85edb480 swapper
[Locks tracked through LWPs]

****** LWP 10423.10423 (syz-executor.3) @ 0xfffff71b3a170580, l_stat=7

*** Locks held:

* Lock 0 (initialized at fork1)
lock address : 0xfffff71b3812fbd0 type : sleep/adaptive
initialized : 0xffffffff83222123
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xfffff71b3a170580 last held: 0xfffff71b3a170580
last locked* : 0xffffffff8321a3ee unlocked : 000000000000000000
owner/count : 0xfffff71b3a170580 flags : 0x0000000000000004
Turnstile: no active turnstile for this lock.

*** Locks wanted: none

****** LWP 10213.10537 (syz-executor.5) @ 0xfffff71b2cf60b80, l_stat=2

*** Locks held:

* Lock 0 (initialized at uvm_obj_init)
lock address : 0xfffff71b2a7739c0 type : sleep/adaptive
initialized : 0xffffffff8316592e
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xfffff71b2cf60b80 last held: 0xfffff71b2cf60b80
last locked* : 0xffffffff8312d03c unlocked : 0xffffffff83129329
owner/count : 0xfffff71b2cf60b80 flags : 0x0000000000000004
Turnstile: no active turnstile for this lock.

*** Locks wanted: none

****** LWP 595.595 (dhcpcd) @ 0xfffff71b283e3680, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at module_hook_init)
lock address : 0xffffffff862d55c0 type : sleep/adaptive
initialized : 0xffffffff83256797
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 0
relevant lwp : 0xfffff71b283e3680 last held: 000000000000000000
last locked : 000000000000000000 unlocked*: 000000000000000000
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 593.593 (dhcpcd) @ 0xfffff71b2983a900, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at module_hook_init)
lock address : 0xffffffff862d55c0 type : sleep/adaptive
initialized : 0xffffffff83256797
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 0
relevant lwp : 0xfffff71b2983a900 last held: 000000000000000000
last locked : 000000000000000000 unlocked*: 000000000000000000
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 349.349 (dhcpcd) @ 0xfffff71b28971700, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at module_hook_init)
lock address : 0xffffffff862d55c0 type : sleep/adaptive
initialized : 0xffffffff83256797
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xfffff71b28971700 last held: 000000000000000000
last locked : 000000000000000000 unlocked*: 000000000000000000
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 348.348 (dhcpcd) @ 0xfffff71b28971b40, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at module_hook_init)
lock address : 0xffffffff862d55c0 type : sleep/adaptive
initialized : 0xffffffff83256797
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xfffff71b28971b40 last held: 000000000000000000
last locked : 000000000000000000 unlocked*: 000000000000000000
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 0.11 (iflnkst) @ 0xfffff71c4c173100, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at module_hook_init)
lock address : 0xffffffff862d55c0 type : sleep/adaptive
initialized : 0xffffffff83256797
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 0
relevant lwp : 0xfffff71c4c173100 last held: 000000000000000000
last locked : 000000000000000000 unlocked*: 000000000000000000
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 0.5 (softclk/0) @ 0xfffff71c4d1d3080, l_stat=1

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at module_hook_init)
lock address : 0xffffffff862d55c0 type : sleep/adaptive
initialized : 0xffffffff83256797
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xfffff71c4d1d3080 last held: 000000000000000000
last locked : 000000000000000000 unlocked*: 000000000000000000
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

[Locks tracked through CPUs]

PAGE FLAG PQ UOBJECT UANON
0xffff900000007180 0045 00000000 0x0 0x0
0xffff900000007200 0045 00000000 0x0 0x0
0xffff900000007280 0045 00000000 0x0 0x0
0xffff900000007300 0045 00000000 0x0 0x0
0xffff900000007380 0045 00000000 0x0 0x0
0xffff900000007400 0045 00000000 0x0 0x0
0xffff900000007480 0045 00000000 0x0 0x0
0xffff900000007500 0045 00000000 0x0 0x0
0xffff900000007580 0045 00000000 0x0 0x0
0xffff900000007600 0045 00000000 0x0 0x0
0xffff900000007680 0041 00000000 0x0 0x0
0xffff900000007700 0041 00000000 0x0 0x0
0xffff900000007780 0041 00000000 0x0 0x0
0xffff900000007800 0041 00000000 0x0 0x0
0xffff900000007880 0041 00000000 0x0 0x0
0xffff900000007900 0045 00000000 0x0 0x0
0xffff900000007980 0041 00000000 0x0 0x0
0xffff900000007a00 0041 00000000 0x0 0x0
0xffff900000007a80 0041 00000000 0x0 0x0
0xffff900000007b00 0041 00000000 0x0 0x0
0xffff900000007b80 0041 00000000 0x0 0x0
0xffff900000007c00 0041 00000000 0x0 0x0
0xffff900000007c80 0041 00000000 0x0 0x0
0xffff900000007d00 0041 00000000 0x0 0x0
0xffff900000007d80 0041 00000000 0x0 0x0
0xffff900000007e00 0041 00000000 0x0 0x0
0xffff900000007e80 0041 00000000 0x0 0x0
0xffff900000007f00 0041 00000000 0x0 0x0
0xffff900000007f80 0041 00000000 0x0 0x0
0xffff900000008000 0041 00000000 0x0 0x0
0xffff900000008080 0041 00000000 0x0 0x0
0xffff900000008100 0041 00000000 0x0 0x0
0xffff900000008180 0041 00000000 0x0 0x0
0xffff900000008200 0041 00000000 0x0 0x0
0xffff900000008280 0041 00000000 0x0 0x0
0xffff900000008300 0041 00000000 0x0 0x0
0xffff900000008380 0041 00000000 0x0 0x0
0xffff900000008400 0041 00000000 0x0 0x0
0xffff900000008480 0041 00000000 0x0 0x0
0xffff900000008500 0041 00000000 0x0 0x0
0xffff900000008580 0041 00000000 0x0 0x0
0xffff900000008600 0041 00000000 0x0 0x0
0xffff900000008680 0041 00000000 0x0 0x0
0xffff900000008700 0041 00000000 0x0 0x0
0xffff900000008780 0041 00000000 0x0 0x0
0xffff900000008800 0041 00000000 0x0 0x0
0xffff900000008880 0041 00000000 0x0 0x0
0xffff900000008900 0041 00000000 0x0 0x0
0xffff900000008980 0041 00000000 0x0 0x0
0xffff900000008a00 0041 00000000 0x0 0x0
0xffff900000008a80 0041 00000000 0x0 0x0
0xffff900000008b00 0041 00000000 0x0 0x0
0xffff900000008b80 0041 00000000 0x0 0x0
0xffff900000008c00 0041 00000000 0x0 0x0
0xffff900000008c80 0045 00000000 0x0 0x0
0xffff900000008d00 0041 00000000 0x0 0x0
0xffff900000008d80 0045 00000000 0x0 0x0
0xffff900000008e00 0041 00000000 0x0 0x0
0xffff900000008e80 0041 00000000 0x0 0x0
0xffff900000008f00 0041 00000000 0x0 0x0
0xffff900000008f80 0041 00000000 0x0 0x0
0xffff900000009000 0041 00000000 0x0 0x0
0xffff900000009080 0041 00000000 0x0 0x0
0xffff900000009100 0041 00000000 0x0 0x0
0xffff900000009180 0041 00000000 0x0 0x0
0xffff900000009200 0041 00000000 0x0 0x0
0xffff900000009280 0041 00000000 0x0 0x0
0xffff900000009300 0041 00000000 0x0 0x0
0xffff900000009380 0041 00000000 0x0 0x0
0xffff900000009400 0041 00000000 0x0 0x0
0xffff900000009480 0041 00000000 0x0 0x0
0xffff900000009500 0045 00000000 0x0 0x0
0xffff900000009580 0041 00000000 0x0 0x0
0xffff900000009600 0041 00000000 0x0 0x0
0xffff900000009680 0041 00000000 0x0 0x0
0xffff900000009700 0041 00000000 0x0 0x0
0xffff900000009780 0041 00000000 0x0 0x0
0xffff900000009800 0041 00000000 0x0 0x0
0xffff900000009880 0041 00000000 0x0 0x0
0xffff900000009900 0041 00000000 0x0 0x0
0xffff900000009980 0041 00000000 0x0 0x0
0xffff900000009a00 0041 00000000 0x0 0x0
0xffff900000009a80 0041 00000000 0x0 0x0
0xffff900000009b00 0041 00000000 0x0 0x0
0xffff900000009b80 0041 00000000 0x0 0x0
0xffff900000009c00 0041 00000000 0x0 0x0
0xffff900000009c80 0041 00000000 0x0 0x0
0xffff900000009d00 0041 00000000 0x0 0x0
0xffff900000009d80 0041 00000000 0x0 0x0
0xffff900000009e00 0041 00000000 0x0 0x0
0xffff900000009e80 0041 00000000 0x0 0x0
0xffff900000009f00 0045 00000000 0x0 0x0
0xffff900000009f80 0041 00000000 0x0 0x0
0xffff90000000a000 0041 00000000 0x0 0x0
0xffff90000000a080 0041 00000000 0x0 0x0
0xffff90000000a100 0041 00000000 0x0 0x0
0xffff90000000a180 0041 00000000 0x0 0x0
0xffff90000000a200 0041 00000000 0x0 0x0
0xffff90000000a280 0041 00000000 0x0 0x0
0xffff90000000a300 0041 00000000 0x0 0x0
0xffff90000000a380 0041 00000000 0x0 0x0
0xffff90000000a400 0041 00000000 0x0 0x0
0xffff90000000a480 0041 00000000 0x0 0x0
0xffff90000000a500 0041 00000000 0x0 0x0
0xffff90000000a580 0041 00000000 0x0 0x0
0xffff90000000a600 0041 00000000 0x0 0x0
0xffff90000000a680 0041 00000000 0x0 0x0
0xffff90000000a700 0041 00000000 0x0 0x0
0xffff90000000a780 0041 00000000 0x0 0x0
0xffff90000000a800 0041 00000000 0x0 0x0
0xffff90000000a880 0041 00000000 0x0 0x0
0xffff90000000a900 0041 00000000 0x0 0x0
0xffff90000000a980 0041 00000000 0x0 0x0
0xffff90000000aa00 0041 00000000 0x0 0x0
0xffff90000000aa80 0041 00000000 0x0 0x0
0xffff90000000ab00 0041 00000000 0x0 0x0
0xffff90000000ab80 0041 00000000 0x0 0x0
0xffff90000000ac00 0041 00000000 0x0 0x0
0xffff90000000ac80 0041 00000000 0x0 0x0
0xffff90000000ad00 0041 00000000 0x0 0x0
0xffff90000000ad80 0041 00000000 0x0 0x0
0xffff90000000ae00 0045 00000000 0x0 0x0
0xffff90000000ae80 0045 00000000 0x0 0x0
0xffff90000000af00 0041 00000000 0x0 0x0
0xffff90000000af80 0041 00000000 0x0 0x0
0xffff90000000b000 0045 00000000 0x0 0x0
0xffff90000000b080 0041 00000000 0x0 0x0
0xffff90000000b100 0041 00000000 0x0 0x0
0xffff90000000b180 0041 00000000 0x0 0x0
0xffff90000000b200 0045 00000000 0x0 0x0
0xffff90000000b280 0045 00000000 0x0 0x0
0xffff90000000b300 0045 00000000 0x0 0x0
0xffff90000000b380 0045 00000000 0x0 0x0
0xffff90000000b400 0045 00000000 0x0 0x0
0xffff90000000b480 0041 00000000 0x0 0x0
0xffff90000000b500 0041 00000000 0x0 0x0
0xffff90000000b580 0045 00000000 0x0 0x0
0xffff90000000b600 0045 00000000 0x0 0x0
0xffff90000000b680 0045 00000000 0x0 0x0
0xffff90000000b700 0045 00000000 0x0 0x0
0xffff90000000b780 0045 00000000 0x0 0x0
0xffff90000000b800 0045 00000000 0x0 0x0
0xffff90000000b880 0041 00000000 0x0 0x0
0xffff90000000b900 0041 00000000 0x0 0x0
0xffff90000000b980 0045 00000000 0x0 0x0
0xffff90000000ba00 0045 00000000 0x0 0x0
0xffff90000000ba80 0045 00000000 0x0 0x0
0xffff90000000bb00 0045 00000000 0x0 0x0
0xffff90000000bb80 0045 00000000 0x0 0x0
0xffff90000000bc00 0045 00000000 0x0 0x0
0xffff90000000bc80 0045 00000000 0x0 0x0
0xffff90000000bd00 0045 00000000 0x0 0x0
0xffff90000000bd80 0045 00000000 0x0 0x0
0xffff90000000be00 0045 00000000 0x0 0x0
0xffff90000000be80 0045 00000000 0x0 0x0
0xffff90000000bf00 0045 00000000 0x0 0x0
0xffff90000000bf80 0045 00000000 0x0 0x0
0xffff90000000c000 0045 00000000 0x0 0x0
0xffff90000000c080 0045 00000000 0x0 0x0
0xffff90000000c100 0045 00000000 0x0 0x0
0xffff90000000c180 0045 00000000 0x0 0x0
0xffff90000000c200 0041 00000000 0x0 0x0
0xffff90000000c280 0041 00000000 0x0 0x0
0xffff90000000c300 0045 00000000 0x0 0x0
0xffff90000000c380 0045 00000000 0x0 0x0
0xffff90000000c400 0041 00000000 0x0 0x0
0xffff90000000c480 0045 00000000 0x0 0x0
0xffff90000000c500 0045 00000000 0x0 0x0
0xffff90000000c580 0041 00000000 0x0 0x0
0xffff90000000c600 0041 00000000 0x0 0x0
0xffff90000000c680 0041 00000000 0x0 0x0
0xffff90000000c700 0041 00000000 0x0 0x0
0xffff90000000c780 0041 00000000 0x0 0x0
0xffff90000000c800 0041 00000000 0x0 0x0
0xffff90000000c880 0045 00000000 0x0 0x0
0xffff90000000c900 0045 00000000 0x0 0x0
0xffff90000000c980 0041 00000000 0x0 0x0
0xffff90000000ca00 0041 00000000 0x0 0x0
0xffff90000000ca80 0041 00000000 0x0 0x0
0xffff90000000cb00 0041 00000000 0x0 0x0
0xffff90000000cb80 0041 00000000 0x0 0x0
0xffff90000000cc00 0041 00000000 0x0 0x0
0xffff90000000cc80 0041 00000000 0x0 0x0
0xffff90000000cd00 0041 00000000 0x0 0x0
0xffff90000000cd80 0041 00000000 0x0 0x0
0xffff90000000ce00 0041 00000000 0x0 0x0
0xffff90000000ce80 0045 00000000 0x0 0x0
0xffff90000000cf00 0041 00000000 0x0 0x0
0xffff90000000cf80 0041 00000000 0x0 0x0
0xffff90000000d000 0041 00000000 0x0 0x0
0xffff90000000d080 0041 00000000 0x0 0x0
0xffff90000000d100 0041 00000000 0x0 0x0
0xffff90000000d180 0041 00000000 0x0 0x0
0xffff90000000d200 0041 00000000 0x0 0x0
0xffff90000000d280 0041 00000000 0x0 0x0
0xffff90000000d300 0041 00000000 0x0 0x0
0xffff90000000d380 0041 00000000 0x0 0x0
0xffff90000000d400 0045 00000000 0x0 0x0
0xffff90000000d480 0041 00000000 0x0 0x0
0xffff90000000d500 0041 00000000 0x0 0x0
0xffff90000000d580 0041 00000000 0x0 0x0
0xffff90000000d600 0045 00000000 0x0 0x0
0xffff90000000d680 0041 00000000 0x0 0x0
0xffff90000000d700 0045 00000000 0x0 0x0
0xffff90000000d780 0045 00000000 0x0 0x0
0xffff90000000d800 0045 00000000 0x0 0x0
0xffff90000000d880 0041 00000000 0x0 0x0
0xffff90000000d900 0041 00000000 0x0 0x0
0xffff90000000d980 0045 00000000 0x0 0x0
0xffff90000000da00 0041 00000000 0x0 0x0
0xffff90000000da80 0045 00000000 0x0 0x0
0xffff90000000db00 0045 00000000 0x0 0x0
0xffff90000000db80 0045 00000000 0x0 0x0
0xffff90000000dc00 0045 00000000 0x0 0x0
0xffff90000000dc80 0045 00000000 0x0 0x0
0xffff90000000dd00 0041 00000000 0x0 0x0
0xffff90000000dd80 0041 00000000 0x0 0x0
0xffff90000000de00 0041 00000000 0x0 0x0
0xffff90000000de80 0041 00000000 0x0 0x0
0xffff90000000df00 0045 00000000 0x0 0x0
0xffff90000000df80 0045 00000000 0x0 0x0
0xffff90000000e000 0041 00000000 0x0 0x0
0xffff90000000e080 0045 00000000 0x0 0x0
0xffff90000000e100 0045 00000000 0x0 0x0
0xffff90000000e180 0041 00000000 0x0 0x0
0xffff90000000e200 0041 00000000 0x0 0x0
0xffff90000000e280 0045 00000000 0x0 0x0
0xffff90000000e300 0041 00000000 0x0 0x0
0xffff90000000e380 0041 00000000 0x0 0x0
0xffff90000000e400 0045 00000000 0x0 0x0
0xffff90000000e480 0041 00000000 0x0 0x0
0xffff90000000e500 0045 00000000 0x0 0x0
0xffff90000000e580 0041 00000000 0x0 0x0
0xffff90000000e600 0041 00000000 0x0 0x0
0xffff90000000e680 0041 00000000 0x0 0x0
0xffff90000000e700 0041 00000000 0x0 0x0
0xffff90000000e780 0045 00000000 0x0 0x0
0xffff90000000e800 0041 00000000 0x0 0x0
0xffff90000000e880 0045 00000000 0x0 0x0
0xffff90000000e900 0041 00000000 0x0 0x0
0xffff90000000e980 0041 00000000 0x0 0x0
0xffff90000000ea00 0045 00000000 0x0 0x0
0xffff90000000ea80 0041 00000000 0x0 0x0
0xffff90000000eb00 0041 00000000 0x0 0x0
0xffff90000000eb80 0041 00000000 0x0 0x0
0xffff90000000ec00 0041 00000000 0x0 0x0
0xffff90000000ec80 0041 00000000 0x0 0x0
0xffff90000000ed00 0041 00000000 0x0 0x0
0xffff90000000ed80 0041 00000000 0x0 0x0
0xffff90000000ee00 0041 00000000 0x0 0x0
0xffff90000000ee80 0041 00000000 0x0 0x0
0xffff90000000ef00 0041 00000000 0x0 0x0
0xffff90000000ef80 0041 00000000 0x0 0x0
0xffff90000000f000 0041 00000000 0x0 0x0
0xffff90000000f080 0045 00000000 0x0 0x0
0xffff90000000f100 0041 00000000 0x0 0x0
0xffff90000000f180 0041 00000000 0x0 0x0
0xffff90000000f200 0041 00000000 0x0 0x0
0xffff90000000f280 0041 00000000 0x0 0x0
0xffff90000000f300 0041 00000000 0x0 0x0
0xffff90000000f380 0041 00000000 0x0 0x0
0xffff90000000f400 0041 00000000 0x0 0x0
0xffff90000000f480 0041 00000000 0x0 0x0
0xffff90000000f500 0041 00000000 0x0 0x0
0xffff90000000f580 0041 00000000 0x0 0x0
0xffff90000000f600 0045 00000000 0x0 0x0
0xffff90000000f680 0045 00000000 0x0 0x0
0xffff90000000f700 0041 00000000 0x0 0x0
0xffff90000000f780 0041 00000000 0x0 0x0
0xffff90000000f800 0041 00000000 0x0 0x0
0xffff90000000f880 0041 00000000 0x0 0x0
0xffff90000000f900 0041 00000000 0x0 0x0
0xffff90000000f980 0045 00000000 0x0 0x0
0xffff90000000fa00 0041 00000000 0x0 0x0
0xffff90000000fa80 0041 00000000 0x0 0x0
0xffff90000000fb00 0041 00000000 0x0 0x0
0xffff90000000fb80 0041 00000000 0x0 0x0
0xffff90000000fc00 0041 00000000 0x0 0x0
0xffff90000000fc80 0041 00000000 0x0 0x0
0xffff90000000fd00 0041 00000000 0x0 0x0
0xffff90000000fd80 0041 00000000 0x0 0x0
0xffff90000000fe00 0041 00000000 0x0 0x0
0xffff90000000fe80 0041 00000000 0x0 0x0
0xffff90000000ff00 0041 00000000 0x0 0x0
0xffff90000000ff80 0041 00000000 0x0 0x0
0xffff900000010000 0041 00000000 0x0 0x0
0xffff900000010080 0041 00000000 0x0 0x0
0xffff900000010100 0041 00000000 0x0 0x0
0xffff900000010180 0041 00000000 0x0 0x0
0xffff900000010200 0041 00000000 0x0 0x0
0xffff900000010280 0041 00000000 0x0 0x0
0xffff900000010300 0045 00000000 0x0 0x0
0xffff900000010380 0041 00000000 0x0 0x0
0xffff900000010400 0041 00000000 0x0 0x0
0xffff900000010480 0041 00000000 0x0 0x0
0xffff900000010500 0041 00000000 0x0 0x0
0xffff900000010580 0041 00000000 0x0 0x0
0xffff900000010600 0041 00000000 0x0 0x0
0xffff900000010680 0045 00000000 0x0 0x0
0xffff900000010700 0041 00000000 0x0 0x0
0xffff900000010780 0041 00000000 0x0 0x0
0xffff900000010800 0041 00000000 0x0 0x0
0xffff900000010880 0041 00000000 0x0 0x0
0xffff900000010900 0045 00000000 0x0 0x0
0xffff900000010980 0041 00000000 0x0 0x0
0xffff900000010a00 0041 00000000 0x0 0x0
0xffff900000010a80 0041 00000000 0x0 0x0
0xffff900000010b00 0041 00000000 0x0 0x0
0xffff900000010b80 0045 00000000 0x0 0x0
0xffff900000010c00 0041 00000000 0x0 0x0
0xffff900000010c80 0045 00000000 0x0 0x0
0xffff900000010d00 0001 00000000 0x0 0x0
0xffff900000010d80 0001 00000000 0x0 0x0
0xffff900000010e00 0001 00000000 0x0 0x0
0xffff900000010e80 0001 00000000 0x0 0x0
0xffff900000010f00 0001 00000000 0x0 0x0
0xffff900000010f80 0001 00000000 0x0 0x0
0xffff900000011000 0001 00000000 0x0 0x0
0xffff900000011080 0001 00000000 0x0 0x0
0xffff900000011100 0001 00000000 0x0 0x0
0xffff900000011180 0001 00000000 0x0 0x0
0xffff900000011200 0001 00000000 0x0 0x0
0xffff900000011280 0001 00000000 0x0 0x0
0xffff900000011300 0001 00000000 0x0 0x0
0xffff900000011380 0001 00000000 0x0 0x0
0xffff900000011400 0001 00000000 0x0 0x0
0xffff900000011480 0001 00000000 0x0 0x0
0xffff900000011500 0001 00000000 0x0 0x0
0xffff900000011580 0001 00000000 0x0 0x0
0xffff900000011600 0001 00000000 0x0 0x0
0xffff900000011680 0001 00000000 0x0 0x0
0xffff900000011700 0001 00000000 0x0 0x0
0xffff900000011780 0001 00000000 0x0 0x0
0xffff900000011800 0001 00000000 0x0 0x0
0xffff900000011880 0001 00000000 0x0 0x0
0xffff900000011900 0001 00000000 0x0 0x0
0xffff900000011980 0001 00000000 0x0 0x0
0xffff900000011a00 0001 00000000 0x0 0x0
0xffff900000011a80 0001 00000000 0x0 0x0
0xffff900000011b00 0001 00000000 0x0 0x0
0xffff900000011b80 0001 00000000 0x0 0x0
0xffff900000011c00 0001 00000000 0x0 0x0
0xffff900000011c80 0001 00000000 0x0 0x0
0xffff900000011d00 0001 00000000 0x0 0x0
0xffff900000011d80 0001 00000000 0x0 0x0
0xffff900000011e00 0001 00000000 0x0 0x0
0xffff900000011e80 0001 00000000 0x0 0x0
0xffff900000011f00 0001 00000000 0x0 0x0
0xffff900000011f80 0001 00000000 0x0 0x0
0xffff900000012000 0001 00000000 0x0 0x0
0xffff900000012080 0001 00000000 0x0 0x0
0xffff900000012100 0001 00000000 0x0 0x0
0xffff900000012180 0001 00000000 0x0 0x0
0xffff900000012200 0001 00000000 0x0 0x0
0xffff900000012280 0001 00000000 0x0 0x0
0xffff900000012300 0001 00000000 0x0 0x0
0xffff900000012380 0001 00000000 0x0 0x0
0xffff900000012400 0001 00000000 0x0 0x0
0xffff900000012480 0001 00000000 0x0 0x0
0xffff900000012500 0001 00000000 0x0 0x0
0xffff900000012580 0001 00000000 0x0 0x0
0xffff900000012600 0001 00000000 0x0 0x0
0xffff900000012680 0001 00000000 0x0 0x0
0xffff900000012700 0001 00000000 0x0 0x0
0xffff900000012780 0001 00000000 0x0 0x0
0xffff900000012800 0041 00000000 0x0 0x0
0xffff900000012880 0041 00000000 0x0 0x0
0xffff900000012900 0041 00000000 0x0 0x0
0xffff900000012980 0041 00000000 0x0 0x0
0xffff900000012a00 0041 00000000 0x0 0x0
0xffff900000012a80 0041 00000000 0x0 0x0
0xffff900000012b00 0041 00000000 0x0 0x0
0xffff900000012b80 0041 00000000 0x0 0x0
0xffff900000012c00 0041 00000000 0x0 0x0
0xffff900000012c80 0041 00000000 0x0 0x0
0xffff900000012d00 0041 00000000 0x0 0x0
0xffff900000012d80 0041 00000000 0x0 0x0
0xffff900000012e00 0041 00000000 0x0 0x0
0xffff900000012e80 0041 00000000 0x0 0x0
0xffff900000012f00 0041 00000000 0x0 0x0
0xffff900000012f80 0041 00000000 0x0 0x0
0xffff900000013000 0041 00000000 0x0 0x0
0xffff900000013080 0041 00000000 0x0 0x0
0xffff900000013100 0041 00000000 0x0 0x0
0xffff900000013180 0041 00000000 0x0 0x0
0xffff900000013200 0041 00000000 0x0 0x0
0xffff900000013280 0041 00000000 0x0 0x0
0xffff900000013300 0041 00000000 0x0 0x0
0xffff900000013380 0041 00000000 0x0 0x0
0xffff900000013400 0041 00000000 0x0 0x0
0xffff900000013480 0041 00000000 0x0 0x0
0xffff900000013500 0041 00000000 0x0 0x0
0xffff900000013580 0041 00000000 0x0 0x0
0xffff900000013600 0041 00000000 0x0 0x0
0xffff900000013680 0041 00000000 0x0 0x0
0xffff900000013700 0041 00000000 0x0 0x0
0xffff900000013780 0041 00000000 0x0 0x0
0xffff900000013800 0041 00000000 0x0 0x0
0xffff900000013880 0041 00000000 0x0 0x0
0xffff900000013900 0041 00000000 0x0 0x0
0xffff900000013980 0041 00000000 0x0 0x0
0xffff900000013a00 0041 00000000 0x0 0x0
0xffff900000013a80 0041 00000000 0x0 0x0
0xffff900000013b00 0041 00000000 0x0 0x0
0xffff900000013b80 0041 00000000 0x0 0x0
0xffff900000013c00 0041 00000000 0x0 0x0
0xffff900000013c80 0041 00000000 0x0 0x0
0xffff900000013d00 0041 00000000 0x0 0x0
0xffff900000013d80 0041 00000000 0x0 0x0
0xffff900000013e00 0041 00000000 0x0 0x0
0xffff900000013e80 0041 00000000 0x0 0x0
0xffff900000013f00 0041 00000000 0x0 0x0
0xffff900000013f80 0041 00000000 0x0 0x0
0xffff900000014000 0001 00000000 0x0 0x0
0xffff900000014080 0001 00000000 0x0 0x0
0xffff900000014100 0001 00000000 0x0 0x0
0xffff900000014180 0001 00000000 0x0 0x0
0xffff900000014200 0001 00000000 0x0 0x0
0xffff900000014280 0001 00000000 0x0 0x0
0xffff900000014300 0001 00000000 0x0 0x0
0xffff900000014380 0001 00000000 0x0 0x0
0xffff900000014400 0001 00000000 0x0 0x0
0xffff900000014480 0001 00000000 0x0 0x0
0xffff900000014500 0001 00000000 0x0 0x0
0xffff900000014580 0001 00000000 0x0 0x0
0xffff900000014600 0001 00000000 0x0 0x0
0xffff900000014680 0001 00000000 0x0 0x0
0xffff900000014700 0001 00000000 0x0 0x0
0xffff900000014780 0001 00000000 0x0 0x0
0xffff900000014800 0001 00000000 0x0 0x0
0xffff900000014880 0001 00000000 0x0 0x0
0xffff900000014900 0001 00000000 0x0 0x0
0xffff900000014980 0001 00000000 0x0 0x0
0xffff900000014a00 0001 00000000 0x0 0x0
0xffff900000014a80 0001 00000000 0x0 0x0
0xffff900000014b00 0001 00000000 0x0 0x0
0xffff900000014b80 0001 00000000 0x0 0x0
0xffff900000014c00 0001 00000000 0x0 0x0
0xffff900000014c80 0001 00000000 0x0 0x0
0xffff900000014d00 0001 00000000 0x0 0x0
0xffff900000014d80 0001 00000000 0x0 0x0
0xffff900000014e00 0001 00000000 0x0 0x0
0xffff900000014e80 0001 00000000 0x0 0x0
0xffff900000014f00 0001 00000000 0x0 0x0
0xffff900000014f80 0001 00000000 0x0 0x0
0xffff900000015000 0001 00000000 0x0 0x0
0xffff900000015080 0001 00000000 0x0 0x0
0xffff900000015100 0001 00000000 0x0 0x0
0xffff900000015180 0001 00000000 0x0 0x0
0xffff900000015200 0001 00000000 0x0 0x0
0xffff900000015280 0001 00000000 0x0 0x0
0xffff900000015300 0001 00000000 0x0 0x0
0xffff900000015380 0001 00000000 0x0 0x0
0xffff900000015400 0001 00000000 0x0 0x0
0xffff900000015480 0001 00000000 0x0 0x0
0xffff900000015500 0001 00000000 0x0 0x0
0xffff900000015580 0001 00000000 0x0 0x0
0xffff900000015600 0001 00000000 0x0 0x0
0xffff900000015680 0001 00000000 0x0 0x0
0xffff900000015700 0001 00000000 0x0 0x0
0xffff900000015780 0001 00000000 0x0 0x0
0xffff900000015800 0001 00000000 0x0 0x0
0xffff900000015880 0001 00000000 0x0 0x0
0xffff900000015900 0001 00000000 0x0 0x0
0xffff900000015980 0001 00000000 0x0 0x0
0xffff900000015a00 0001 00000000 0x0 0x0
0xffff900000015a80 0001 00000000 0x0 0x0
0xffff900000015b00 0041 00000000 0x0 0x0
0xffff900000015b80 0041 00000000 0x0 0x0
0xffff900000015c00 0041 00000000 0x0 0x0
0xffff900000015c80 0041 00000000 0x0 0x0
0xffff900000015d00 0041 00000000 0x0 0x0
0xffff900000015d80 0041 00000000 0x0 0x0
0xffff900000015e00 0041 00000000 0x0 0x0
0xffff900000015e80 0041 00000000 0x0 0x0
0xffff900000015f00 0041 00000000 0x0 0x0
0xffff900000015f80 0041 00000000 0x0 0x0
0xffff900000016000 0041 00000000 0x0 0x0
0xffff900000016080 0041 00000000 0x0 0x0
0xffff900000016100 0041 00000000 0x0 0x0
0xffff900000016180 0041 00000000 0x0 0x0
0xffff900000016200 0041 00000000 0x0 0x0
0xffff900000016280 0041 00000000 0x0 0x0
0xffff900000016300 0041 00000000 0x0 0x0
0xffff900000016380 0041 00000000 0x0 0x0
0xffff900000016400 0041 00000000 0x0 0x0
0xffff900000016480 0041 00000000 0x0 0x0
0xffff900000016500 0041 00000000 0x0 0x0
0xffff900000016580 0041 00000000 0x0 0x0
0xffff900000016600 0041 00000000 0x0 0x0
0xffff900000016680 0041 00000000 0x0 0x0
0xffff900000016700 0041 00000000 0x0 0x0
0xffff900000016780 0041 00000000 0x0 0x0
0xffff900000016800 0041 00000000 0x0 0x0
0xffff900000016880 0041 00000000 0x0 0x0
0xffff900000016900 0041 00000000 0x0 0x0
0xffff900000016980 0041 00000000 0x0 0x0
0xffff900000016a00 0041 00000000 0x0 0x0
0xffff900000016a80 0041 00000000 0x0 0x0
0xffff900000016b00 0041 00000000 0x0 0x0
0xffff900000016b80 0041 00000000 0x0 0x0
0xffff900000016c00 0041 00000000 0x0 0x0
0xffff900000016c80 0041 00000000 0x0 0x0
0xffff900000016d00 0041 00000000 0x0 0x0
0xffff900000016d80 0041 00000000 0x0 0x0
0xffff900000016e00 0041 00000000 0x0 0x0
0xffff900000016e80 0041 00000000 0x0 0x0
0xffff900000016f00 0041 00000000 0x0 0x0
0xffff900000016f80 0041 00000000 0x0 0x0
0xffff900000017000 0041 00000000 0x0 0x0
0xffff900000017080 0041 00000000 0x0 0x0
0xffff900000017100 0041 00000000 0x0 0x0
0xffff900000017180 0001 00000000 0x0 0x0
0xffff900000017200 0001 00000000 0x0 0x0
0xffff900000017280 0001 00000000 0x0 0x0
0xffff900000017300 0001 00000000 0x0 0x0
0xffff900000017380 0001 00000000 0x0 0x0
0xffff900000017400 0001 00000000 0x0 0x0
0xffff900000017480 0001 00000000 0x0 0x0
0xffff900000017500 0001 00000000 0x0 0x0
0xffff900000017580 0001 00000000 0x0 0x0
0xffff900000017600 0001 00000000 0x0 0x0
0xffff900000017680 0001 00000000 0x0 0x0
0xffff900000017700 0001 00000000 0x0 0x0
0xffff900000017780 0001 00000000 0x0 0x0
0xffff900000017800 0001 00000000 0x0 0x0
0xffff900000017880 0001 00000000 0x0 0x0
0xffff900000017900 0001 00000000 0x0 0x0
0xffff900000017980 0001 00000000 0x0 0x0
0xffff900000017a00 0001 00000000 0x0 0x0
0xffff900000017a80 0001 00000000 0x0 0x0
0xffff900000017b00 0001 00000000 0x0 0x0
0xffff900000017b80 0001 00000000 0x0 0x0
0xffff900000017c00 0001 00000000 0x0 0x0
0xffff900000017c80 0001 00000000 0x0 0x0
0xffff900000017d00 0001 00000000 0x0 0x0
0xffff900000017d80 0001 00000000 0x0 0x0
0xffff900000017e00 0001 00000000 0x0 0x0
0xffff900000017e80 0001 00000000 0x0 0x0
0xffff900000017f00 0001 00000000 0x0 0x0
0xffff900000017f80 0001 00000000 0x0 0x0
0xffff900000018000 0001 00000000 0x0 0x0
0xffff900000018080 0001 00000000 0x0 0x0
0xffff900000018100 0001 00000000 0x0 0x0
0xffff900000018180 0001 00000000 0x0 0x0
0xffff900000018200 0001 00000000 0x0 0x0
0xffff900000018280 0001 00000000 0x0 0x0
0xffff900000018300 0001 00000000 0x0 0x0
0xffff900000018380 0001 00000000 0x0 0x0
0xffff900000018400 0001 00000000 0x0 0x0
0xffff900000018480 0001 00000000 0x0 0x0
0xffff900000018500 0001 00000000 0x0 0x0
0xffff900000018580 0001 00000000 0x0 0x0
0xffff900000018600 0001 00000000 0x0 0x0
0xffff900000018680 0001 00000000 0x0 0x0
0xffff900000018700 0001 00000000 0x0 0x0
0xffff900000018780 0001 00000000 0x0 0x0
0xffff900000018800 0001 00000000 0x0 0x0
0xffff900000018880 0001 00000000 0x0 0x0
0xffff900000018900 0001 00000000 0x0 0x0
0xffff900000018980 0001 00000000 0x0 0x0
0xffff900000018a00 0001 00000000 0x0 0x0
0xffff900000018a80 0001 00000000 0x0 0x0
0xffff900000018b00 0001 00000000 0x0 0x0
0xffff900000018b80 0001 00000000 0x0 0x0
0xffff900000018c00 0001 00000000 0x0 0x0
0xffff900000018c80 0041 00000000 0x0 0x0
0xffff900000018d00 0041 00000000 0x0 0x0
0xffff900000018d80 0041 00000000 0x0 0x0
0xffff900000018e00 0041 00000000 0x0 0x0
0xffff900000018e80 0041 00000000 0x0 0x0
0xffff900000018f00 0041 00000000 0x0 0x0
0xffff900000018f80 0041 00000000 0x0 0x0
0xffff900000019000 0041 00000000 0x0 0x0
0xffff900000019080 0041 00000000 0x0 0x0
0xffff900000019100 0041 00000000 0x0 0x0
0xffff900000019180 0041 00000000 0x0 0x0
0xffff900000019200 0041 00000000 0x0 0x0
0xffff900000019280 0041 00000000 0x0 0x0
0xffff900000019300 0041 00000000 0x0 0x0
0xffff900000019380 0041 00000000 0x0 0x0
0xffff900000019400 0041 00000000 0x0 0x0
0xffff900000019480 0041 00000000 0x0 0x0
0xffff900000019500 0041 00000000 0x0 0x0
0xffff900000019580 0041 00000000 0x0 0x0
0xffff900000019600 0045 00000000 0x0 0x0
0xffff900000019680 0041 00000000 0x0 0x0
0xffff900000019700 0041 00000000 0x0 0x0
0xffff900000019780 0041 00000000 0x0 0x0
0xffff900000019800 0041 00000000 0x0 0x0
0xffff900000019880 0041 00000000 0x0 0x0
0xffff900000019900 0041 00000000 0x0 0x0
0xffff900000019980 0045 00000000 0x0 0x0
0xffff900000019a00 0045 00000000 0x0 0x0
0xffff900000019a80 0041 00000000 0x0 0x0
0xffff900000019b00 0041 00000000 0x0 0x0
0xffff900000019b80 0041 00000000 0x0 0x0
0xffff900000019c00 0045 00000000 0x0 0x0
0xffff900000019c80 0041 00000000 0x0 0x0
0xffff900000019d00 0041 00000000 0x0 0x0
0xffff900000019d80 0045 00000000 0x0 0x0
0xffff900000019e00 0045 00000000 0x0 0x0
0xffff900000019e80 0041 00000000 0x0 0x0
0xffff900000019f00 0045 00000000 0x0 0x0
0xffff900000019f80 0041 00000000 0x0 0x0
0xffff90000001a000 0045 00000000 0x0 0x0
0xffff90000001a080 0041 00000000 0x0 0x0
0xffff90000001a100 0041 00000000 0x0 0x0
0xffff90000001a180 0045 00000000 0x0 0x0
0xffff90000001a200 0045 00000000 0x0 0x0
0xffff90000001a280 0041 00000000 0x0 0x0
0xffff90000001a300 0045 00000000 0x0 0x0
0xffff90000001a380 0041 00000000 0x0 0x0
0xffff90000001a400 0045 00000000 0x0 0x0
0xffff90000001a480 0041 00000000 0x0 0x0
0xffff90000001a500 0001 00000000 0x0 0x0
0xffff90000001a580 0001 00000000 0x0 0x0
0xffff90000001a600 0001 00000000 0x0 0x0
0xffff90000001a680 0001 00000000 0x0 0x0
0xffff90000001a700 0001 00000000 0x0 0x0
0xffff90000001a780 0001 00000000 0x0 0x0
0xffff90000001a800 0001 00000000 0x0 0x0
0xffff90000001a880 0001 00000000 0x0 0x0
0xffff90000001a900 0001 00000000 0x0 0x0
0xffff90000001a980 0001 00000000 0x0 0x0
0xffff90000001aa00 0001 00000000 0x0 0x0
0xffff90000001aa80 0001 00000000 0x0 0x0
0xffff90000001ab00 0001 00000000 0x0 0x0
0xffff90000001ab80 0001 00000000 0x0 0x0
0xffff90000001ac00 0001 00000000 0x0 0x0
0xffff90000001ac80 0001 00000000 0x0 0x0
0xffff90000001ad00 0001 00000000 0x0 0x0
0xffff90000001ad80 0001 00000000 0x0 0x0
0xffff90000001ae00 0001 00000000 0x0 0x0
0xffff90000001ae80 0001 00000000 0x0 0x0
0xffff90000001af00 0001 00000000 0x0 0x0
0xffff90000001af80 0001 00000000 0x0 0x0
0xffff90000001b000 0001 00000000 0x0 0x0
0xffff90000001b080 0001 00000000 0x0 0x0
0xffff90000001b100 0001 00000000 0x0 0x0
0xffff90000001b180 0001 00000000 0x0 0x0
0xffff90000001b200 0001 00000000 0x0 0x0
0xffff90000001b280 0001 00000000 0x0 0x0
0xffff90000001b300 0001 00000000 0x0 0x0
0xffff90000001b380 0001 00000000 0x0 0x0
0xffff90000001b400 0001 00000000 0x0 0x0
0xffff90000001b480 0001 00000000 0x0 0x0
0xffff90000001b500 0001 00000000 0x0 0x0
0xffff90000001b580 0001 00000000 0x0 0x0
0xffff90000001b600 0001 00000000 0x0 0x0
0xffff90000001b680 0001 00000000 0x0 0x0
0xffff90000001b700 0001 00000000 0x0 0x0
0xffff90000001b780 0001 00000000 0x0 0x0
0xffff90000001b800 0001 00000000 0x0 0x0
0xffff90000001b880 0001 00000000 0x0 0x0
0xffff90000001b900 0001 00000000 0x0 0x0
0xffff90000001b980 0001 00000000 0x0 0x0
0xffff90000001ba00 0001 00000000 0x0 0x0
0xffff90000001ba80 0001 00000000 0x0 0x0
0xffff90000001bb00 0001 00000000 0x0 0x0
0xffff90000001bb80 0001 00000000 0x0 0x0
0xffff90000001bc00 0001 00000000 0x0 0x0
0xffff90000001bc80 0001 00000000 0x0 0x0
0xffff90000001bd00 0001 00000000 0x0 0x0
0xffff90000001bd80 0001 00000000 0x0 0x0
0xffff90000001be00 0001 00000000 0x0 0x0
0xffff90000001be80 0001 00000000 0x0 0x0
0xffff90000001bf00 0001 00000000 0x0 0x0
0xffff90000001bf80 0001 00000000 0x0 0x0
0xffff90000001c000 0001 00000000 0x0 0x0
0xffff90000001c080 0001 00000000 0x0 0x0
0xffff90000001c100 0001 00000000 0x0 0x0
0xffff90000001c180 0001 00000000 0x0 0x0
0xffff90000001c200 0001 00000000 0x0 0x0
0xffff90000001c280 0001 00000000 0x0 0x0
0xffff90000001c300 0001 00000000 0x0 0x0
0xffff90000001c380 0001 00000000 0x0 0x0
0xffff90000001c400 0001 00000000 0x0 0x0
0xffff90000001c480 0001 00000000 0x0 0x0
0xffff90000001c500 0001 00000000 0x0 0x0
0xffff90000001c580 0001 00000000 0x0 0x0
0xffff90000001c600 0001 00000000 0x0 0x0
0xffff90000001c680 0001 00000000 0x0 0x0
0xffff90000001c700 0001 00000000 0x0 0x0
0xffff90000001c780 0001 00000000 0x0 0x0
0xffff90000001c800 0001 00000000 0x0 0x0
0xffff90000001c880 0001 00000000 0x0 0x0
0xffff90000001c900 0001 00000000 0x0 0x0
0xffff90000001c980 0001 00000000 0x0 0x0
0xffff90000001ca00 0001 00000000 0x0 0x0
0xffff90000001ca80 0001 00000000 0x0 0x0
0xffff90000001cb00 0001 00000000 0x0 0x0
0xffff90000001cb80 0001 00000000 0x0 0x0
0xffff90000001cc00 0001 00000000 0x0 0x0
0xffff90000001cc80 0001 00000000 0x0 0x0
0xffff90000001cd00 0001 00000000 0x0 0x0
0xffff90000001cd80 0001 00000000 0x0 0x0
0xffff90000001ce00 0001 00000000 0x0 0x0
0xffff90000001ce80 0001 00000000 0x0 0x0
0xffff90000001cf00 0001 00000000 0x0 0x0
0xffff90000001cf80 0001 00000000 0x0 0x0
0xffff90000001d000 0001 00000000 0x0 0x0
0xffff90000001d080 0001 00000000 0x0 0x0
0xffff90000001d100 0001 00000000 0x0 0x0
0xffff90000001d180 0001 00000000 0x0 0x0
0xffff90000001d200 0001 00000000 0x0 0x0
0xffff90000001d280 0001 00000000 0x0 0x0
0xffff90000001d300 0001 00000000 0x0 0x0
0xffff90000001d380 0001 00000000 0x0 0x0
0xffff90000001d400 0001 00000000

---
This report is generated by a bot. It may contain errors.
See https://goo.gl/tpsmEJ for more information about syzbot.
syzbot engineers can be reached at syzk...@googlegroups.com.

syzbot will keep track of this issue. See:
https://goo.gl/tpsmEJ#status for how to communicate with syzbot.

[Chuck Silvers]

#syz dup: assert failed: semcnt >= 0