panic: k[ 114.ADDR] ernel diagnostic assertion "lwpcnt >= 0" failed: file "/syzkaller/managers/netbsd/kernel/sys/kern/ke

[syzbot]

Hello,

syzbot found the following crash on:

HEAD commit: 05f40b84 follow the channel locking protocol during probe ..
git tree: netbsd
console output: https://syzkaller.appspot.com/x/log.txt?x=1491def8e00000
kernel config: https://syzkaller.appspot.com/x/.config?x=6e4d6bd2b8e377a2
dashboard link: https://syzkaller.appspot.com/bug?extid=13074a9f89a3f774c221

Unfortunately, I don't have any reproducer for this crash yet.

IMPORTANT: if you fix the bug, please add the following tag to the commit:
Reported-by: syzbot+13074a...@syzkaller.appspotmail.com

[ 114.2427348] panic: k[ 114.2427348] ernel diagnostic assertion "lwpcnt >=
0" failed:
file "/syzkaller/managers/netbsd/kernel/sys/kern/kern_uidinfo.c", line 225
[ 114.2527521] cpu1: Begin traceback...
[ 114.2527521] vpanic() at netbsd:vpanic+0x267 sys/kern/subr_prf.c:336
[ 114.2527521] _GLOBAL__sub_D_65535_0_cpu_configure() at
netbsd:_GLOBAL__sub_D_65535_0_cpu_configure
[ 114.2527521] chglwpcnt() at netbsd:chglwpcnt+0x67
sys/kern/kern_uidinfo.c:226
[ 114.2527521] lwp_free() at netbsd:lwp_free+0x10b sys/kern/kern_lwp.c:1215
[ 114.2527521] lwp_wait() at netbsd:lwp_wait+0x13f sys/kern/kern_lwp.c:571
[ 114.2527521] exit_lwps() at netbsd:exit_lwps+0x22b
sys/kern/kern_exit.c:634
[ 114.2527521] exit1() at netbsd:exit1+0x725 sys/kern/kern_exit.c:221
[ 114.2527521] sys_exit() at netbsd:sys_exit+0x77 sys/kern/kern_exit.c:179
[ 114.2527521] syscall() at netbsd:syscall+0x3ac sy_call
sys/sys/syscallvar.h:65 [inline]
[ 114.2527521] syscall() at netbsd:syscall+0x3ac sy_invoke
sys/sys/syscallvar.h:94 [inline]
[ 114.2527521] syscall() at netbsd:syscall+0x3ac
sys/arch/x86/x86/syscall.c:138
[ 114.2527521] --- syscall (number 1) ---
[ 114.2527521] 767622399a6a:
[ 114.2527521] cpu1: End traceback...
[ 114.2527521] fatal breakpoint trap in supervisor mode
[ 114.2527521] trap type 1 code 0 rip 0xffffffff8021ccd5 cs 0x8 rflags
0x246 cr2 0x20068000 ilevel 0x8 rsp 0xffffb6017bfdf8b0
[ 114.2527521] curlwp 0xffffb600120596c0 pid 1279.1 lowest kstack
0xffffb6017bfd82c0
Stopped in pid 1279.1 (syz-executor.4) at netbsd:breakpoint+0x5:
leave
?
breakpoint() at netbsd:breakpoint+0x5
db_panic() at netbsd:db_panic+0xf9 sys/ddb/db_panic.c:67
vpanic() at netbsd:vpanic+0x267 sys/kern/subr_prf.c:336
_GLOBAL__sub_D_65535_0_cpu_configure() at
netbsd:_GLOBAL__sub_D_65535_0_cpu_configure
chglwpcnt() at netbsd:chglwpcnt+0x67 sys/kern/kern_uidinfo.c:226
lwp_free() at netbsd:lwp_free+0x10b sys/kern/kern_lwp.c:1215
lwp_wait() at netbsd:lwp_wait+0x13f sys/kern/kern_lwp.c:571
exit_lwps() at netbsd:exit_lwps+0x22b sys/kern/kern_exit.c:634
exit1() at netbsd:exit1+0x725 sys/kern/kern_exit.c:221
sys_exit() at netbsd:sys_exit+0x77 sys/kern/kern_exit.c:179
syscall() at netbsd:syscall+0x3ac sy_call sys/sys/syscallvar.h:65 [inline]
syscall() at netbsd:syscall+0x3ac sy_invoke sys/sys/syscallvar.h:94 [inline]
syscall() at netbsd:syscall+0x3ac sys/arch/x86/x86/syscall.c:138
--- syscall (number 1) ---
767622399a6a:
ds 0
es 1
fs f7bd
gs e14a
rdi ffffb6000d92d458
rsi ffffb600120599a8
rbp ffffb6017bfdf8b0
rbx ffffb6016d892000
rdx 2
rcx ffffffff80cf8c7e db_panic+0xe5
rax 0
r8 4
r9 ffffffff82a9ae03 db_onpanic+0x3
r10 1ffffffff05535c0
r11 8000000000
r12 ffffb6016d8a4000
r13 ffffffff821848e0 __func__.6081+0x7e0
r14 ffffb6017bfdf940
r15 ffffb6016d892058
rip ffffffff8021ccd5 breakpoint+0x5
cs 8
rflags 246
rsp ffffb6017bfdf8b0
ss 10
netbsd:breakpoint+0x5: leave
PID LID S CPU FLAGS STRUCT LWP * NAME WAIT
514 1 3 0 80 ffffb6001216db80 syz-executor.1 parked
576 1 3 1 80 ffffb600122969c0 syz-executor.4 parked
1487 1 3 1 80 ffffb600123afb60 syz-executor.4 parked
1273 1 2 1 0 ffffb60012e03a20 syz-executor.5
650 1 3 1 80 ffffb6001371a780 syz-executor.2 parked
952 3 3 0 80 ffffb60012dcc540 syz-executor.0 parked
952 2 2 1 0 ffffb60012dcc980 syz-executor.0
952 1 3 0 10000080 ffffb60013a95ac0 syz-executor.0 nanoslp
1007 1 2 1 0 ffffb60012140720 syz-executor.3
1428 1 2 1 1000000 ffffb60012d88900 syz-executor.1
1279 2 5 0 100000 ffffb60013aea6c0 syz-executor.4
1279 > 1 7 1 10040000 ffffb600120596c0 syz-executor.4
1575 2 3 0 80 ffffb600122f4200 syz-executor.2 parked
1575 1 2 1 10040000 ffffb600137624a0 syz-executor.2
800 1 4 1 1000000 ffffb60013abbae0 syz-executor.3
1008 1 3 0 80 ffffb60013898960 syz-executor.1 parked
749 4 4 0 1000080 ffffb60013694b20 syz-executor.3 parked
749 3 4 1 1000080 ffffb60013926180 syz-executor.3 parked
749 2 4 1 1000080 ffffb60013b9b480 syz-executor.3 parked
749 1 4 1 11040000 ffffb60013b94320 syz-executor.3
1454 1 3 0 80 ffffb600121f28e0 syz-executor.3 parked
785 1 3 0 80 ffffb6001390b9c0 syz-executor.0 parked
392 1 3 0 80 ffffb60012d21b80 syz-executor.0 parked
1494 1 3 0 80 ffffb60012213920 syz-executor.1 parked
1479 1 3 0 80 ffffb6001239ab40 syz-executor.1 parked
1156 1 3 1 80 ffffb60012da44e0 syz-executor.4 parked
585 1 3 0 80 ffffb60012dd7120 syz-executor.4 parked
1307 1 3 1 80 ffffb60013b0c6e0 syz-executor.2 parked
1330 1 3 1 80 ffffb60013b0c2a0 syz-executor.2 parked
634 1 3 0 80 ffffb60011ea45a0 syz-executor.2 parked
1012 1 3 0 80 ffffb6001216d300 syz-executor.2 parked
1397 1 3 0 80 ffffb600134bb220 syz-executor.2 parked
1126 1 3 0 80 ffffb600122e61e0 syz-executor.2 parked
417 1 3 1 80 ffffb60012db70c0 syz-executor.4 parked
853 1 3 1 80 ffffb60013833920 syz-executor.1 parked
856 1 3 0 80 ffffb60013abb260 syz-executor.3 parked
851 1 3 1 80 ffffb6001389b540 syz-executor.1 parked
707 1 3 0 80 ffffb600121d48c0 syz-executor.4 parked
908 1 3 1 80 ffffb600122b4a00 syz-executor.4 parked
773 1 3 0 80 ffffb60013932a20 syz-executor.3 parked
321 1 3 0 80 ffffb600136942a0 syz-executor.5 parked
1262 1 3 1 80 ffffb60012296580 syz-executor.5 parked
958 1 4 1 1000000 ffffb60012287120 syz-executor.5
509 1 4 1 1000000 ffffb60012de2140 syz-executor.5
316 1 4 0 1000000 ffffb600121f2060 syz-executor.5
571 1 3 0 80 ffffb60012d6c480 syz-executor.5 parked
759 7 4 1 1000000 ffffb60013a1aa60 syz-executor.5
759 6 4 1 1000080 ffffb600122a9160 syz-executor.5 parked
759 5 4 1 1000080 ffffb6001216d740 syz-executor.5 parked
759 4 4 1 1000080 ffffb60012de29c0 syz-executor.5 parked
759 3 4 1 1000080 ffffb60012dc2960 syz-executor.5 parked
759 2 4 1 1000080 ffffb6001387e0c0 parked
759 1 4 1 11000000 ffffb60011ea61a0 syz-executor.5
542 1 3 0 80 ffffb600122e6a60 syz-executor.0 parked
1243 1 3 0 80 ffffb600137568c0 syz-executor.0 parked
530 1 3 1 80 ffffb600122f4640 syz-executor.0 parked
654 1 3 1 80 ffffb600121d4040 syz-executor.1 parked
646 1 3 1 80 ffffb600136af700 syz-executor.2 parked
1040 1 3 0 80 ffffb600136afb40 syz-executor.2 parked
836 1 3 1 80 ffffb60013830900 syz-executor.1 parked
1011 1 3 1 80 ffffb600138334e0 syz-executor.1 parked
894 1 3 1 80 ffffb60012d21300 syz-executor.4 parked
480 1 3 1 80 ffffb60012d42320 syz-executor.0 parked
1046 1 3 0 80 ffffb600139321a0 syz-executor.4 parked
911 1 3 0 80 ffffb600137628e0 syz-executor.5 parked
855 1 3 1 80 ffffb6001387e500 syz-executor.3 parked
540 1 3 1 80 ffffb60012db7940 syz-executor.5 parked
397 1 3 0 80 ffffb60012db7500 syz-executor.5 parked
825 1 3 1 80 ffffb60012304660 syz-executor.0 parked
301 1 3 1 80 ffffb60012da4920 syz-executor.0 parked
793 1 3 1 80 ffffb600122a99e0 syz-executor.1 parked
806 1 3 0 80 ffffb60012243540 syz-executor.5 parked
426 1 3 1 80 ffffb6001389b980 syz-executor.0 parked
715 1 3 0 80 ffffb600121ff080 syz-executor.0 parked
716 1 3 1 80 ffffb60012296140 syz-executor.0 parked
831 1 3 1 80 ffffb60013756480 syz-executor.0 parked
683 1 3 0 80 ffffb60012e10600 syz-executor.3 parked
225 1 3 0 80 ffffb60012de2580 syz-executor.4 parked
822 1 3 1 80 ffffb600120b8b20 syz-executor.4 parked
137 1 3 1 80 ffffb60013702ba0 syz-executor.5 parked
349 1 3 0 80 ffffb600122c5a20 syz-executor.0 parked
314 1 3 0 80 ffffb60012da40a0 syz-executor.0 parked
632 1 3 0 80 ffffb600121ff900 syz-executor.2 parked
692 1 3 0 80 ffffb60012311ac0 syz-executor.2 parked
561 1 3 0 80 ffffb6001231f6a0 syz-executor.0 parked
72 1 3 1 80 ffffb60012243100 syz-executor.3 parked
581 1 3 1 80 ffffb600122d5600 syz-executor.3 parked
548 1 3 1 80 ffffb600122b45c0 syz-executor.3 parked
483 1 3 1 80 ffffb600122d51c0 syz-executor.5 parked
66 1 3 0 80 ffffb600121402e0 syz-executor.2 parked
560 1 3 1 80 ffffb60013702320 syz-executor.2 parked
567 1 3 0 80 ffffb600136f0300 syz-executor.2 parked
40 1 2 0 0 ffffb60013624ae0 syz-executor.5
41 1 3 1 80 ffffb600136246a0 syz-executor.3 nanoslp
559 1 2 0 0 ffffb60013624260 syz-executor.2
549 1 2 0 0 ffffb600135efac0 syz-executor.4
533 > 1 7 0 0 ffffb600135ef680 syz-executor.1
507 1 3 0 80 ffffb600135ef240 syz-executor.0 nanoslp
465 11 3 0 80 ffffb600134bbaa0 syz-fuzzer parked
465 10 3 1 80 ffffb600134bb660 syz-fuzzer parked
465 9 3 0 80 ffffb60012d42760 syz-fuzzer kqueue
465 8 3 1 80 ffffb600134b8a80 syz-fuzzer parked
465 7 3 0 80 ffffb600134b8640 syz-fuzzer parked
465 6 3 1 80 ffffb600134b8200 syz-fuzzer parked
465 5 3 1 80 ffffb60013384a60 syz-fuzzer parked
465 4 3 1 80 ffffb60012dcc100 syz-fuzzer parked
465 3 3 0 80 ffffb60012d88080 syz-fuzzer parked
465 2 3 1 80 ffffb60012df3180 syz-fuzzer parked
465 1 3 1 80 ffffb60011ea5180 syz-fuzzer parked
590 1 3 1 80 ffffb60011ea55c0 sshd select
531 1 3 1 80 ffffb60012dea9e0 getty nanoslp
466 1 3 1 80 ffffb60012dea5a0 getty nanoslp
582 1 3 1 80 ffffb60012e035e0 getty nanoslp
536 1 3 1 80 ffffb60012df3a00 getty ttyraw
556 1 3 1 80 ffffb60013384620 cron nanoslp
387 1 3 1 80 ffffb600123306c0 inetd kqueue
317 1 3 1 80 ffffb600123422a0 sshd select
478 1 3 0 80 ffffb60012311240 powerd kqueue
202 1 2 1 0 ffffb60012d60780 syslogd
252 1 3 1 80 ffffb600122e6620 dhcpcd kqueue
218 1 3 1 80 ffffb600122130a0 dhcpcd kqueue
1 1 3 0 80 ffffb6001200f240 init wait
0 58 3 1 204 ffffb6001200fac0 physiod physiod
0 57 3 0 204 ffffb600120586a0 pooldrain pooldrain
0 56 3 0 204 ffffb60012059280 aiodoned aiodoned
0 55 3 0 200 ffffb60012058ae0 ioflush syncer
0 54 3 1 200 ffffb60012058260 pgdaemon pgdaemon
0 51 3 0 200 ffffb6001200f680 npfgc-0 npfgccv
0 50 3 0 204 ffffb60012001aa0 rt_free rt_free
0 49 3 0 204 ffffb60012001660 unpgc unpgc
0 48 3 0 204 ffffb60012001220 key_timehandler
key_timehandler
0 47 3 1 204 ffffb60011ff6a80 icmp6_wqinput/1
icmp6_wqinput
0 46 3 0 204 ffffb60011ff6640 icmp6_wqinput/0
icmp6_wqinput
0 45 3 1 204 ffffb60011ff6200 nd6_timer nd6_timer
0 44 3 1 204 ffffb60011ecda60 carp6_wqinput/1
carp6_wqinput
0 43 3 0 204 ffffb60011ecd620 carp6_wqinput/0
carp6_wqinput
0 42 3 1 204 ffffb60011ecd1e0 carp_wqinput/1
carp_wqinput
0 41 3 0 204 ffffb60011ebaa40 carp_wqinput/0
carp_wqinput
0 40 3 1 204 ffffb60011eba600 icmp_wqinput/1
icmp_wqinput
0 39 3 0 204 ffffb60011eba1c0 icmp_wqinput/0
icmp_wqinput
0 38 3 1 204 ffffb60011ea6a20 rt_timer rt_timer
0 37 3 1 204 ffffb60011ea65e0 vmem_rehash vmem_rehash
0 27 3 0 204 ffffb6000f7c9580 scsibus0 sccomp
0 26 3 0 200 ffffb6000f7c9140 pms0 pmsreset
0 25 3 1 204 ffffb6000f73c9a0 xcall/1 xcall
0 24 1 1 200 ffffb6000f73c560 softser/1
0 23 1 1 200 ffffb6000f73c120 softclk/1
0 22 1 1 200 ffffb6000f738980 softbio/1
0 21 1 1 200 ffffb6000f738540 softnet/1
0 20 1 1 201 ffffb6000f738100 idle/1
0 19 3 1 204 ffffb6000f66e960 lnxpwrwq lnxpwrwq
0 18 3 1 204 ffffb6000f66e520 lnxlngwq lnxlngwq
0 17 3 1 204 ffffb6000f66e0e0 lnxsyswq lnxsyswq
0 16 3 0 204 ffffb6000de53940 lnxrcugc lnxrcugc
0 15 3 0 204 ffffb6000de53500 sysmon smtaskq
0 14 3 1 204 ffffb6000de530c0 pmfsuspend pmfsuspend
0 13 3 0 204 ffffb6000de43920 pmfevent pmfevent
0 12 3 0 204 ffffb6000de434e0 sopendfree sopendfr
0 11 3 1 204 ffffb6000de430a0 nfssilly nfssilly
0 10 3 1 200 ffffb6000de39900 cachegc cachegc
0 9 3 0 204 ffffb6000de394c0 vdrain vdrain
0 8 3 0 200 ffffb6000de39080 modunload mod_unld
0 7 3 0 204 ffffb6000de2b8e0 xcall/0 xcall
0 6 1 0 200 ffffb6000de2b4a0 softser/0
0 5 1 0 200 ffffb6000de2b060 softclk/0
0 4 1 0 200 ffffb6000de268c0 softbio/0
0 3 1 0 200 ffffb6000de26480 softnet/0
0 2 1 0 201 ffffb6000de26040 idle/0
0 1 3 1 200 ffffffff82b62f20 swapper uvm
[Locks tracked through LWPs]
Locks held by an LWP (syz-executor.0):
Lock 0 (initialized at vcache_alloc)
lock address : 0xffffb60013ba04f0 type : sleep/adaptive
initialized : 0xffffffff812aa39b
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
current cpu : 1 last held: 1
current lwp : 0xffffb600120596c0 last held: 0xffffb60012dcc980
last locked* : 0xffffffff812d92b0 unlocked : 0xffffffff812d92e3
owner/count : 0xffffb60012dcc980 flags : 0x0000000000000004

Turnstile chain at 0xffffffff82d7b6a0.
=> No active turnstile for this lock.
Lock 1 (initialized at genfs_node_init)
lock address : 0xffffb60013acfbb0 type : sleep/adaptive
initialized : 0xffffffff812d9430
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
current cpu : 1 last held: 1
current lwp : 0xffffb600120596c0 last held: 0xffffb60012dcc980
last locked* : 0xffffffff81039e21 unlocked : 0xffffffff812ce835
owner/count : 0xffffb60012dcc980 flags : 0x0000000000000004

Turnstile chain at 0xffffffff82d7b820.
=> No active turnstile for this lock.

Locks held by an LWP (syz-executor.3):
Lock 0 (initialized at amap_alloc)
lock address : 0xffffb6001362b980 type : sleep/adaptive
initialized : 0xffffffff810c3e02
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
current cpu : 1 last held: 1
current lwp : 0xffffb600120596c0 last held: 0xffffb60012140720
last locked* : 0xffffffff810d3781 unlocked : 0xffffffff810d163f
owner field : 0xffffb60012140720 wait/spin: 0/0

Turnstile chain at 0xffffffff82d7b7c0.
=> No active turnstile for this lock.

Locks held by an LWP (syz-executor.4):
Lock 0 (initialized at fork1)
lock address : 0xffffb6001366da40 type : sleep/adaptive
initialized : 0xffffffff81142bf3
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
current cpu : 1 last held: 1
current lwp : 0xffffb600120596c0 last held: 0xffffb600120596c0
last locked* : 0xffffffff8115416b unlocked : 0xffffffff811532ed
owner field : 0xffffb600120596c0 wait/spin: 0/0

Turnstile chain at 0xffffffff82d7b540.
=> No active turnstile for this lock.


[Locks tracked through CPUs]

PAGE FLAG PQ UOBJECT UANON
0xffffb60000014180 0048 0000 0x0 0x0
0xffffb600000141f8 0048 0000 0x0 0x0
0xffffb60000014270 0048 0000 0x0 0x0
0xffffb600000142e8 0048 0000 0x0 0x0
0xffffb60000014360 0048 0000 0x0 0x0
0xffffb600000143d8 0048 0000 0x0 0x0
0xffffb60000014450 0040 0000 0x0 0x0
0xffffb600000144c8 0048 0000 0x0 0x0
0xffffb60000014540 0040 0000 0x0 0x0
0xffffb600000145b8 0048 0000 0x0 0x0
0xffffb60000014630 0048 0000 0x0 0x0
0xffffb600000146a8 0048 0000 0x0 0x0
0xffffb60000014720 0048 0000 0x0 0x0
0xffffb60000014798 0048 0000 0x0 0x0
0xffffb60000014810 0048 0000 0x0 0x0
0xffffb60000014888 0040 0000 0x0 0x0
0xffffb60000014900 0048 0000 0x0 0x0
0xffffb60000014978 0040 0000 0x0 0x0
0xffffb600000149f0 0040 0000 0x0 0x0
0xffffb60000014a68 0040 0000 0x0 0x0
0xffffb60000014ae0 0040 0000 0x0 0x0
0xffffb60000014b58 0040 0000 0x0 0x0
0xffffb60000014bd0 0040 0000 0x0 0x0
0xffffb60000014c48 0048 0000 0x0 0x0
0xffffb60000014cc0 0048 0000 0x0 0x0
0xffffb60000014d38 0048 0000 0x0 0x0
0xffffb60000014db0 0048 0000 0x0 0x0
0xffffb60000014e28 0048 0000 0x0 0x0
0xffffb60000014ea0 0048 0000 0x0 0x0
0xffffb60000014f18 0048 0000 0x0 0x0
0xffffb60000014f90 0048 0000 0x0 0x0
0xffffb60000015008 0048 0000 0x0 0x0
0xffffb60000015080 0048 0000 0x0 0x0
0xffffb600000150f8 0048 0000 0x0 0x0
0xffffb60000015170 0048 0000 0x0 0x0
0xffffb600000151e8 0048 0000 0x0 0x0
0xffffb60000015260 0048 0000 0x0 0x0
0xffffb600000152d8 0048 0000 0x0 0x0
0xffffb60000015350 0048 0000 0x0 0x0
0xffffb600000153c8 0048 0000 0x0 0x0
0xffffb60000015440 0048 0000 0x0 0x0
0xffffb600000154b8 0048 0000 0x0 0x0
0xffffb60000015530 0048 0000 0x0 0x0
0xffffb600000155a8 0048 0000 0x0 0x0
0xffffb60000015620 0048 0000 0x0 0x0
0xffffb60000015698 0048 0000 0x0 0x0
0xffffb60000015710 0048 0000 0x0 0x0
0xffffb60000015788 0048 0000 0x0 0x0
0xffffb60000015800 0048 0000 0x0 0x0
0xffffb60000015878 0048 0000 0x0 0x0
0xffffb600000158f0 0048 0000 0x0 0x0
0xffffb60000015968 0048 0000 0x0 0x0
0xffffb600000159e0 0048 0000 0x0 0x0
0xffffb60000015a58 0048 0000 0x0 0x0
0xffffb60000015ad0 0048 0000 0x0 0x0
0xffffb60000015b48 0048 0000 0x0 0x0
0xffffb60000015bc0 0048 0000 0x0 0x0
0xffffb60000015c38 0048 0000 0x0 0x0
0xffffb60000015cb0 0048 0000 0x0 0x0
0xffffb60000015d28 0048 0000 0x0 0x0
0xffffb60000015da0 0048 0000 0x0 0x0
0xffffb60000015e18 0048 0000 0x0 0x0
0xffffb60000015e90 0048 0000 0x0 0x0
0xffffb60000015f08 0048 0000 0x0 0x0
0xffffb60000015f80 0048 0000 0x0 0x0
0xffffb60000015ff8 0048 0000 0x0 0x0
0xffffb60000016070 0048 0000 0x0 0x0
0xffffb600000160e8 0040 0000 0x0 0x0
0xffffb60000016160 0041 0000 0x0 0x0
0xffffb600000161d8 0041 0000 0x0 0x0
0xffffb60000016250 0048 0000 0x0 0x0
0xffffb600000162c8 0048 0000 0x0 0x0
0xffffb60000016340 0048 0000 0x0 0x0
0xffffb600000163b8 0048 0000 0x0 0x0
0xffffb60000016430 0040 0000 0x0 0x0
0xffffb600000164a8 0041 0000 0x0 0x0
0xffffb60000016520 0041 0000 0x0 0x0
0xffffb60000016598 0041 0000 0x0 0x0
0xffffb60000016610 0048 0000 0x0 0x0
0xffffb60000016688 0040 0000 0x0 0x0
0xffffb60000016700 0040 0000 0x0 0x0
0xffffb60000016778 0048 0000 0x0 0x0
0xffffb600000167f0 0041 0000 0x0 0x0
0xffffb60000016868 0041 0000 0x0 0x0
0xffffb600000168e0 0048 0000 0x0 0x0
0xffffb60000016958 0048 0000 0x0 0x0
0xffffb600000169d0 0041 0000 0x0 0x0
0xffffb60000016a48 0041 0000 0x0 0x0
0xffffb60000016ac0 0041 0000 0x0 0x0
0xffffb60000016b38 0040 0000 0x0 0x0
0xffffb60000016bb0 0041 0000 0x0 0x0
0xffffb60000016c28 0048 0000 0x0 0x0
0xffffb60000016ca0 0048 0000 0x0 0x0
0xffffb60000016d18 0048 0000 0x0 0x0
0xffffb60000016d90 0041 0000 0x0 0x0
0xffffb60000016e08 0041 0000 0x0 0x0
0xffffb60000016e80 0041 0000 0x0 0x0
0xffffb60000016ef8 0041 0000 0x0 0x0
0xffffb60000016f70 0048 0000 0x0 0x0
0xffffb60000016fe8 0048 0000 0x0 0x0
0xffffb60000017060 0048 0000 0x0 0x0
0xffffb600000170d8 0048 0000 0x0 0x0
0xffffb60000017150 0048 0000 0x0 0x0
0xffffb600000171c8 0048 0000 0x0 0x0
0xffffb60000017240 0048 0000 0x0 0x0
0xffffb600000172b8 0041 0000 0x0 0x0
0xffffb60000017330 0048 0000 0x0 0x0
0xffffb600000173a8 0048 0000 0x0 0x0
0xffffb60000017420 0048 0000 0x0 0x0
0xffffb60000017498 0048 0000 0x0 0x0
0xffffb60000017510 0048 0000 0x0 0x0
0xffffb60000017588 0048 0000 0x0 0x0
0xffffb60000017600 0048 0000 0x0 0x0
0xffffb60000017678 0048 0000 0x0 0x0
0xffffb600000176f0 0048 0000 0x0 0x0
0xffffb60000017768 0048 0000 0x0 0x0
0xffffb600000177e0 0048 0000 0x0 0x0
0xffffb60000017858 0048 0000 0x0 0x0
0xffffb600000178d0 0048 0000 0x0 0x0
0xffffb60000017948 0048 0000 0x0 0x0
0xffffb600000179c0 0048 0000 0x0 0x0
0xffffb60000017a38 0048 0000 0x0 0x0
0xffffb60000017ab0 0048 0000 0x0 0x0
0xffffb60000017b28 0048 0000 0x0 0x0
0xffffb60000017ba0 0048 0000 0x0 0x0
0xffffb60000017c18 0048 0000 0x0 0x0
0xffffb60000017c90 0048 0000 0x0 0x0
0xffffb60000017d08 0048 0000 0x0 0x0
0xffffb60000017d80 0048 0000 0x0 0x0
0xffffb60000017df8 0048 0000 0x0 0x0
0xffffb60000017e70 0048 0000 0x0 0x0
0xffffb60000017ee8 0048 0000 0x0 0x0
0xffffb60000017f60 0048 0000 0x0 0x0
0xffffb60000017fd8 0048 0000 0x0 0x0
0xffffb60000018050 0048 0000 0x0 0x0
0xffffb600000180c8 0048 0000 0x0 0x0
0xffffb60000018140 0048 0000 0x0 0x0
0xffffb600000181b8 0048 0000 0x0 0x0
0xffffb60000018230 0048 0000 0x0 0x0
0xffffb600000182a8 0048 0000 0x0 0x0
0xffffb60000018320 0048 0000 0x0 0x0
0xffffb60000018398 0048 0000 0x0 0x0
0xffffb60000018410 0048 0000 0x0 0x0
0xffffb60000018488 0048 0000 0x0 0x0
0xffffb60000018500 0048 0000 0x0 0x0
0xffffb60000018578 0048 0000 0x0 0x0
0xffffb600000185f0 0048 0000 0x0 0x0
0xffffb60000018668 0048 0000 0x0 0x0
0xffffb600000186e0 0048 0000 0x0 0x0
0xffffb60000018758 0048 0000 0x0 0x0
0xffffb600000187d0 0048 0000 0x0 0x0
0xffffb60000018848 0048 0000 0x0 0x0
0xffffb600000188c0 0048 0000 0x0 0x0
0xffffb60000018938 0048 0000 0x0 0x0
0xffffb600000189b0 0048 0000 0x0 0x0
0xffffb60000018a28 0048 0000 0x0 0x0
0xffffb60000018aa0 0048 0000 0x0 0x0
0xffffb60000018b18 0048 0000 0x0 0x0
0xffffb60000018b90 0048 0000 0x0 0x0
0xffffb60000018c08 0048 0000 0x0 0x0
0xffffb60000018c80 0048 0000 0x0 0x0
0xffffb60000018cf8 0048 0000 0x0 0x0
0xffffb60000018d70 0048 0000 0x0 0x0
0xffffb60000018de8 0048 0000 0x0 0x0
0xffffb60000018e60 0048 0000 0x0 0x0
0xffffb60000018ed8 0048 0000 0x0 0x0
0xffffb60000018f50 0048 0000 0x0 0x0
0xffffb60000018fc8 0048 0000 0x0 0x0
0xffffb60000019040 0048 0000 0x0 0x0
0xffffb600000190b8 0048 0000 0x0 0x0
0xffffb60000019130 0048 0000 0x0 0x0
0xffffb600000191a8 0048 0000 0x0 0x0
0xffffb60000019220 0048 0000 0x0 0x0
0xffffb60000019298 0048 0000 0x0 0x0
0xffffb60000019310 0048 0000 0x0 0x0
0xffffb60000019388 0048 0000 0x0 0x0
0xffffb60000019400 0048 0000 0x0 0x0
0xffffb60000019478 0048 0000 0x0 0x0
0xffffb600000194f0 0048 0000 0x0 0x0
0xffffb60000019568 0048 0000 0x0 0x0
0xffffb600000195e0 0048 0000 0x0 0x0
0xffffb60000019658 0048 0000 0x0 0x0
0xffffb600000196d0 0048 0000 0x0 0x0
0xffffb60000019748 0048 0000 0x0 0x0
0xffffb600000197c0 0048 0000 0x0 0x0
0xffffb60000019838 0048 0000 0x0 0x0
0xffffb600000198b0 0048 0000 0x0 0x0
0xffffb60000019928 0048 0000 0x0 0x0
0xffffb600000199a0 0048 0000 0x0 0x0
0xffffb60000019a18 0048 0000 0x0 0x0
0xffffb60000019a90 0048 0000 0x0 0x0
0xffffb60000019b08 0048 0000 0x0 0x0
0xffffb60000019b80 0048 0000 0x0 0x0
0xffffb60000019bf8 0048 0000 0x0 0x0
0xffffb60000019c70 0048 0000 0x0 0x0
0xffffb60000019ce8 0048 0000 0x0 0x0
0xffffb60000019d60 0048 0000 0x0 0x0
0xffffb60000019dd8 0048 0000 0x0 0x0
0xffffb60000019e50 0048 0000 0x0 0x0
0xffffb60000019ec8 0048 0000 0x0 0x0
0xffffb60000019f40 0048 0000 0x0 0x0
0xffffb60000019fb8 0048 0000 0x0 0x0
0xffffb6000001a030 0048 0000 0x0 0x0
0xffffb6000001a0a8 0048 0000 0x0 0x0
0xffffb6000001a120 0048 0000 0x0 0x0
0xffffb6000001a198 0048 0000 0x0 0x0
0xffffb6000001a210 0048 0000 0x0 0x0
0xffffb6000001a288 0048 0000 0x0 0x0
0xffffb6000001a300 0048 0000 0x0 0x0
0xffffb6000001a378 0048 0000 0x0 0x0
0xffffb6000001a3f0 0048 0000 0x0 0x0
0xffffb6000001a468 0048 0000 0x0 0x0
0xffffb6000001a4e0 0048 0000 0x0 0x0
0xffffb6000001a558 0048 0000 0x0 0x0
0xffffb6000001a5d0 0048 0000 0x0 0x0
0xffffb6000001a648 0048 0000 0x0 0x0
0xffffb6000001a6c0 0048 0000 0x0 0x0
0xffffb6000001a738 0048 0000 0x0 0x0
0xffffb6000001a7b0 0008 0000 0x0 0x0
0xffffb6000001a828 0008 0000 0x0 0x0
0xffffb6000001a8a0 0008 0000 0x0 0x0
0xffffb6000001a918 0008 0000 0x0 0x0
0xffffb6000001a990 0008 0000 0x0 0x0
0xffffb6000001aa08 0008 0000 0x0 0x0
0xffffb6000001aa80 0008 0000 0x0 0x0
0xffffb6000001aaf8 0008 0000 0x0 0x0
0xffffb6000001ab70 0008 0000 0x0 0x0
0xffffb6000001abe8 0008 0000 0x0 0x0
0xffffb6000001ac60 0008 0000 0x0 0x0
0xffffb6000001acd8 0008 0000 0x0 0x0
0xffffb6000001ad50 0008 0000 0x0 0x0
0xffffb6000001adc8 0008 0000 0x0 0x0
0xffffb6000001ae40 0008 0000 0x0 0x0
0xffffb6000001aeb8 0008 0000 0x0 0x0
0xffffb6000001af30 0008 0000 0x0 0x0
0xffffb6000001afa8 0008 0000 0x0 0x0
0xffffb6000001b020 0008 0000 0x0 0x0
0xffffb6000001b098 0008 0000 0x0 0x0
0xffffb6000001b110 0008 0000 0x0 0x0
0xffffb6000001b188 0008 0000 0x0 0x0
0xffffb6000001b200 0008 0000 0x0 0x0
0xffffb6000001b278 0008 0000 0x0 0x0
0xffffb6000001b2f0 0008 0000 0x0 0x0
0xffffb6000001b368 0008 0000 0x0 0x0
0xffffb6000001b3e0 0008 0000 0x0 0x0
0xffffb6000001b458 0008 0000 0x0 0x0
0xffffb6000001b4d0 0008 0000 0x0 0x0
0xffffb6000001b548 0008 0000 0x0 0x0
0xffffb6000001b5c0 0008 0000 0x0 0x0
0xffffb6000001b638 0008 0000 0x0 0x0
0xffffb6000001b6b0 0008 0000 0x0 0x0
0xffffb6000001b728 0008 0000 0x0 0x0
0xffffb6000001b7a0 0008 0000 0x0 0x0
0xffffb6000001b818 0008 0000 0x0 0x0
0xffffb6000001b890 0008 0000 0x0 0x0
0xffffb6000001b908 0008 0000 0x0 0x0
0xffffb6000001b980 0008 0000 0x0 0x0
0xffffb6000001b9f8 0008 0000 0x0 0x0
0xffffb6000001ba70 0008 0000 0x0 0x0
0xffffb6000001bae8 0008 0000 0x0 0x0
0xffffb6000001bb60 0008 0000 0x0 0x0
0xffffb6000001bbd8 0008 0000 0x0 0x0
0xffffb6000001bc50 0008 0000 0x0 0x0
0xffffb6000001bcc8 0008 0000 0x0 0x0
0xffffb6000001bd40 0008 0000 0x0 0x0
0xffffb6000001bdb8 0008 0000 0x0 0x0
0xffffb6000001be30 0008 0000 0x0 0x0
0xffffb6000001bea8 0008 0000 0x0 0x0
0xffffb6000001bf20 0008 0000 0x0 0x0
0xffffb6000001bf98 0008 0000 0x0 0x0
0xffffb6000001c010 0008 0000 0x0 0x0
0xffffb6000001c088 0008 0000 0x0 0x0
0xffffb6000001c100 0048 0000 0x0 0x0
0xffffb6000001c178 0048 0000 0x0 0x0
0xffffb6000001c1f0 0048 0000 0x0 0x0
0xffffb6000001c268 0048 0000 0x0 0x0
0xffffb6000001c2e0 0048 0000 0x0 0x0
0xffffb6000001c358 0048 0000 0x0 0x0
0xffffb6000001c3d0 0048 0000 0x0 0x0
0xffffb6000001c448 0048 0000 0x0 0x0
0xffffb6000001c4c0 0048 0000 0x0 0x0
0xffffb6000001c538 0048 0000 0x0 0x0
0xffffb6000001c5b0 0048 0000 0x0 0x0
0xffffb6000001c628 0048 0000 0x0 0x0
0xffffb6000001c6a0 0048 0000 0x0 0x0
0xffffb6000001c718 0048 0000 0x0 0x0
0xffffb6000001c790 0048 0000 0x0 0x0
0xffffb6000001c808 0048 0000 0x0 0x0
0xffffb6000001c880 0048 0000 0x0 0x0
0xffffb6000001c8f8 0048 0000 0x0 0x0
0xffffb6000001c970 0048 0000 0x0 0x0
0xffffb6000001c9e8 0048 0000 0x0 0x0
0xffffb6000001ca60 0048 0000 0x0 0x0
0xffffb6000001cad8 0048 0000 0x0 0x0
0xffffb6000001cb50 0048 0000 0x0 0x0
0xffffb6000001cbc8 0048 0000 0x0 0x0
0xffffb6000001cc40 0048 0000 0x0 0x0
0xffffb6000001ccb8 0048 0000 0x0 0x0
0xffffb6000001cd30 0048 0000 0x0 0x0
0xffffb6000001cda8 0048 0000 0x0 0x0
0xffffb6000001ce20 0048 0000 0x0 0x0
0xffffb6000001ce98 0048 0000 0x0 0x0
0xffffb6000001cf10 0048 0000 0x0 0x0
0xffffb6000001cf88 0048 0000 0x0 0x0
0xffffb6000001d000 0048 0000 0x0 0x0
0xffffb6000001d078 0048 0000 0x0 0x0
0xffffb6000001d0f0 0048 0000 0x0 0x0
0xffffb6000001d168 0048 0000 0x0 0x0
0xffffb6000001d1e0 0048 0000 0x0 0x0
0xffffb6000001d258 0048 0000 0x0 0x0
0xffffb6000001d2d0 0048 0000 0x0 0x0
0xffffb6000001d348 0048 0000 0x0 0x0
0xffffb6000001d3c0 0048 0000 0x0 0x0
0xffffb6000001d438 0048 0000 0x0 0x0
0xffffb6000001d4b0 0008 0000 0x0 0x0
0xffffb6000001d528 0008 0000 0x0 0x0
0xffffb6000001d5a0 0008 0000 0x0 0x0
0xffffb6000001d618 0008 0000 0x0 0x0
0xffffb6000001d690 0008 0000 0x0 0x0
0xffffb6000001d708 0008 0000 0x0 0x0
0xffffb6000001d780 0008 0000 0x0 0x0
0xffffb6000001d7f8 0008 0000 0x0 0x0
0xffffb6000001d870 0008 0000 0x0 0x0
0xffffb6000001d8e8 0008 0000 0x0 0x0
0xffffb6000001d960 0008 0000 0x0 0x0
0xffffb6000001d9d8 0008 0000 0x0 0x0
0xffffb6000001da50 0008 0000 0x0 0x0
0xffffb6000001dac8 0008 0000 0x0 0x0
0xffffb6000001db40 0008 0000 0x0 0x0
0xffffb6000001dbb8 0008 0000 0x0 0x0
0xffffb6000001dc30 0008 0000 0x0 0x0
0xffffb6000001dca8 0008 0000 0x0 0x0
0xffffb6000001dd20 0008 0000 0x0 0x0
0xffffb6000001dd98 0008 0000 0x0 0x0
0xffffb6000001de10 0008 0000 0x0 0x0
0xffffb6000001de88 0008 0000 0x0 0x0
0xffffb6000001df00 0008 0000 0x0 0x0
0xffffb6000001df78 0008 0000 0x0 0x0
0xffffb6000001dff0 0008 0000 0x0 0x0
0xffffb6000001e068 0008 0000 0x0 0x0
0xffffb6000001e0e0 0008 0000 0x0 0x0
0xffffb6000001e158 0008 0000 0x0 0x0
0xffffb6000001e1d0 0008 0000 0x0 0x0
0xffffb6000001e248 0008 0000 0x0 0x0
0xffffb6000001e2c0 0008 0000 0x0 0x0
0xffffb6000001e338 0008 0000 0x0 0x0
0xffffb6000001e3b0 0008 0000 0x0 0x0
0xffffb6000001e428 0008 0000 0x0 0x0
0xffffb6000001e4a0 0008 0000 0x0 0x0
0xffffb6000001e518 0008 0000 0x0 0x0
0xffffb6000001e590 0008 0000 0x0 0x0
0xffffb6000001e608 0008 0000 0x0 0x0
0xffffb6000001e680 0008 0000 0x0 0x0
0xffffb6000001e6f8 0008 0000 0x0 0x0
0xffffb6000001e770 0008 0000 0x0 0x0
0xffffb6000001e7e8 0008 0000 0x0 0x0
0xffffb6000001e860 0008 0000 0x0 0x0
0xffffb6000001e8d8 0008 0000 0x0 0x0
0xffffb6000001e950 0008 0000 0x0 0x0
0xffffb6000001e9c8 0008 0000 0x0 0x0
0xffffb6000001ea40 0008 0000 0x0 0x0
0xffffb6000001eab8 0008 0000 0x0 0x0
0xffffb6000001eb30 0008 0000 0x0 0x0
0xffffb6000001eba8 0008 0000 0x0 0x0
0xffffb6000001ec20 0008 0000 0x0 0x0
0xffffb6000001ec98 0008 0000 0x0 0x0
0xffffb6000001ed10 0008 0000 0x0 0x0
0xffffb6000001ed88 0008 0000 0x0 0x0
0xffffb6000001ee00 0048 0000 0x0 0x0
0xffffb6000001ee78 0048 0000 0x0 0x0
0xffffb6000001eef0 0048 0000 0x0 0x0
0xffffb6000001ef68 0048 0000 0x0 0x0
0xffffb6000001efe0 0048 0000 0x0 0x0
0xffffb6000001f058 0048 0000 0x0 0x0
0xffffb6000001f0d0 0048 0000 0x0 0x0
0xffffb6000001f148 0048 0000 0x0 0x0
0xffffb6000001f1c0 0048 0000 0x0 0x0
0xffffb6000001f238 0048 0000 0x0 0x0
0xffffb6000001f2b0 0048 0000 0x0 0x0
0xffffb6000001f328 0048 0000 0x0 0x0
0xffffb6000001f3a0 0048 0000 0x0 0x0
0xffffb6000001f418 0048 0000 0x0 0x0
0xffffb6000001f490 0048 0000 0x0 0x0
0xffffb6000001f508 0048 0000 0x0 0x0
0xffffb6000001f580 0048 0000 0x0 0x0
0xffffb6000001f5f8 0048 0000 0x0 0x0
0xffffb6000001f670 0048 0000 0x0 0x0
0xffffb6000001f6e8 0048 0000 0x0 0x0
0xffffb6000001f760 0048 0000 0x0 0x0
0xffffb6000001f7d8 0048 0000 0x0 0x0
0xffffb6000001f850 0048 0000 0x0 0x0
0xffffb6000001f8c8 0048 0000 0x0 0x0
0xffffb6000001f940 0048 0000 0x0 0x0
0xffffb6000001f9b8 0048 0000 0x0 0x0
0xffffb6000001fa30 0048 0000 0x0 0x0
0xffffb6000001faa8 0048 0000 0x0 0x0
0xffffb6000001fb20 0040 0000 0x0 0x0
0xffffb6000001fb98 0040 0000 0x0 0x0
0xffffb6000001fc10 0048 0000 0x0 0x0
0xffffb6000001fc88 0040 0000 0x0 0x0
0xffffb6000001fd00 0040 0000 0x0 0x0
0xffffb6000001fd78 0048 0000 0x0 0x0
0xffffb6000001fdf0 0048 0000 0x0 0x0
0xffffb6000001fe68 0048 0000 0x0 0x0
0xffffb6000001fee0 0040 0000 0x0 0x0
0xffffb6000001ff58 0040 0000 0x0 0x0
0xffffb6000001ffd0 0040 0000 0x0 0x0
0xffffb60000020048 0040 0000 0x0 0x0
0xffffb600000200c0 0040 0000 0x0 0x0
0xffffb60000020138 0048 0000 0x0 0x0
0xffffb600000201b0 0048 0000 0x0 0x0
0xffffb60000020228 0008 0000 0x0 0x0
0xffffb600000202a0 0008 0000 0x0 0x0
0xffffb60000020318 0008 0000 0x0 0x0
0xffffb60000020390 0008 0000 0x0 0x0
0xffffb60000020408 0008 0000 0x0 0x0
0xffffb60000020480 0008 0000 0x0 0x0
0xffffb600000204f8 0008 0000 0x0 0x0
0xffffb60000020570 0008 0000 0x0 0x0
0xffffb600000205e8 0008 0000 0x0 0x0
0xffffb60000020660 0008 0000 0x0 0x0
0xffffb600000206d8 0008 0000 0x0 0x0
0xffffb60000020750 0008 0000 0x0 0x0
0xffffb600000207c8 0008 0000 0x0 0x0
0xffffb60000020840 0008 0000 0x0 0x0
0xffffb600000208b8 0008 0000 0x0 0x0
0xffffb60000020930 0008 0000 0x0 0x0
0xffffb600000209a8 0008 0000 0x0 0x0
0xffffb60000020a20 0008 0000 0x0 0x0
0xffffb60000020a98 0008 0000 0x0 0x0
0xffffb60000020b10 0008 0000 0x0 0x0
0xffffb60000020b88 0008 0000 0x0 0x0
0xffffb60000020c00 0008 0000 0x0 0x0
0xffffb60000020c78 0008 0000 0x0 0x0
0xffffb60000020cf0 0008 0000 0x0 0x0
0xffffb60000020d68 0008 0000 0x0 0x0
0xffffb60000020de0 0008 0000 0x0 0x0
0xffffb60000020e58 0008 0000 0x0 0x0
0xffffb60000020ed0 0008 0000 0x0 0x0
0xffffb60000020f48 0008 0000 0x0 0x0
0xffffb60000020fc0 0008 0000 0x0 0x0
0xffffb60000021038 0008 0000 0x0 0x0
0xffffb600000210b0 0008 0000 0x0 0x0
0xffffb60000021128 0008 0000 0x0 0x0
0xffffb600000211a0 0008 0000 0x0 0x0
0xffffb60000021218 0008 0000 0x0 0x0
0xffffb60000021290 0008 0000 0x0 0x0
0xffffb60000021308 0008 0000 0x0 0x0
0xffffb60000021380 0008 0000 0x0 0x0
0xffffb600000213f8 0008 0000 0x0 0x0
0xffffb60000021470 0008 0000 0x0 0x0
0xffffb600000214e8 0008 0000 0x0 0x0
0xffffb60000021560 0008 0000 0x0 0x0
0xffffb600000215d8 0008 0000 0x0 0x0
0xffffb60000021650 0008 0000 0x0 0x0
0xffffb600000216c8 0008 0000 0x0 0x0
0xffffb60000021740 0008 0000 0x0 0x0
0xffffb600000217b8 0008 0000 0x0 0x0
0xffffb60000021830 0008 0000 0x0 0x0
0xffffb600000218a8 0008 0000 0x0 0x0
0xffffb60000021920 0008 0000 0x0 0x0
0xffffb60000021998 0008 0000 0x0 0x0
0xffffb60000021a10 0008 0000 0x0 0x0
0xffffb60000021a88 0008 0000 0x0 0x0
0xffffb60000021b00 0008 0000 0x0 0x0
0xffffb60000021b78 0040 0000 0x0 0x0
0xffffb60000021bf0 0040 0000 0x0 0x0
0xffffb60000021c68 0040 0000 0x0 0x0
0xffffb60000021ce0 0040 0000 0x0 0x0
0xffffb60000021d58 0040 0000 0x0 0x0
0xffffb60000021dd0 0040 0000 0x0 0x0
0xffffb60000021e48 0040 0000 0x0 0x0
0xffffb60000021ec0 0040 0000 0x0 0x0
0xffffb60000021f38 0040 0000 0x0 0x0
0xffffb60000021fb0 0040 0000 0x0 0x0
0xffffb60000022028 0040 0000 0x0 0x0
0xffffb600000220a0 0040 0000 0x0 0x0
0xffffb60000022118 0040 0000 0x0 0x0
0xffffb60000022190 0040 0000 0x0 0x0
0xffffb60000022208 0040 0000 0x0 0x0
0xffffb60000022280 0040 0000 0x0 0x0
0xffffb600000222f8 0040 0000 0x0 0x0
0xffffb60000022370 0040 0000 0x0 0x0
0xffffb600000223e8 0040 0000 0x0 0x0
0xffffb60000022460 0040 0000 0x0 0x0
0xffffb600000224d8 0040 0000 0x0 0x0
0xffffb60000022550 0040 0000 0x0 0x0
0xffffb600000225c8 0040 0000 0x0 0x0
0xffffb60000022640 0040 0000 0x0 0x0
0xffffb600000226b8 0040 0000 0x0 0x0
0xffffb60000022730 0040 0000 0x0 0x0
0xffffb600000227a8 0040 0000 0x0 0x0
0xffffb60000022820 0040 0000 0x0 0x0
0xffffb60000022898 0040 0000 0x0 0x0
0xffffb60000022910 0040 0000 0x0 0x0
0xffffb60000022988 0040 0000 0x0 0x0
0xffffb60000022a00 0040 0000 0x0 0x0
0xffffb60000022a78 0040 0000 0x0 0x0
0xffffb60000022af0 0040 0000 0x0 0x0
0xffffb60000022b68 0040 0000 0x0 0x0
0xffffb60000022be0 0040 0000 0x0 0x0
0xffffb60000022c58 0040 0000 0x0 0x0
0xffffb60000022cd0 0040 0000 0x0 0x0
0xffffb60000022d48 0040 0000 0x0 0x0
0xffffb60000022dc0 0040 0000 0x0 0x0
0xffffb60000022e38 0040 0000 0x0 0x0
0xffffb60000022eb0 0040 0000 0x0 0x0
0xffffb60000022f28 0040 0000 0x0 0x0
0xffffb60000022fa0 0040 0000 0x0 0x0
0xffffb60000023018 0040 0000 0x0 0x0
0xffffb60000023090 0040 0000 0x0 0x0
0xffffb60000023108 0040 0000 0x0 0x0
0xffffb60000023180 0040 0000 0x0 0x0
0xffffb600000231f8 0040 0000 0x0 0x0
0xffffb60000023270 0040 0000 0x0 0x0
0xffffb600000232e8 0040 0000 0x0 0x0
0xffffb60000023360 0048 0000 0x0 0x0
0xffffb600000233d8 0048 0000 0x0 0x0
0xffffb60000023450 0040 0000 0x0 0x0
0xffffb600000234c8 0048 0000 0x0 0x0
0xffffb60000023540 0048 0000 0x0 0x0
0xffffb600000235b8 0040 0000 0x0 0x0
0xffffb60000023630 0040 0000 0x0 0x0
0xffffb600000236a8 0040 0000 0x0 0x0
0xffffb60000023720 0048 0000 0x0 0x0
0xffffb60000023798 0048 0000 0x0 0x0
0xffffb60000023810 0040 0000 0x0 0x0
0xffffb60000023888 0048 0000 0x0 0x0
0xffffb60000023900 0048 0000 0x0 0x0
0xffffb60000023978 0048 0000 0x0 0x0
0xffffb600000239f0 0048 0000 0x0 0x0
0xffffb60000023a68 0048 0000 0x0 0x0
0xffffb60000023ae0 0048 0000 0x0 0x0
0xffffb60000023b58 0048 0000 0x0 0x0
0xffffb60000023bd0 0048 0000 0x0 0x0
0xffffb60000023c48 0048 0000 0x0 0x0
0xffffb60000023cc0 0048 0000 0x0 0x0
0xffffb60000023d38 0048 0000 0x0 0x0
0xffffb60000023db0 0048 0000 0x0 0x0
0xffffb60000023e28 0048 0000 0x0 0x0
0xffffb60000023ea0 0048 0000 0x0 0x0
0xffffb60000023f18 0048 0000 0x0 0x0
0xffffb60000023f90 0048 0000 0x0 0x0
0xffffb60000024008 0048 0000 0x0 0x0
0xffffb60000024080 0048 0000 0x0 0x0
0xffffb600000240f8 0048 0000 0x0 0x0
0xffffb60000024170 0048 0000 0x0 0x0
0xffffb600000241e8 0048 0000 0x0 0x0
0xffffb60000024260 0048 0000 0x0 0x0
0xffffb600000242d8 0048 0000 0x0 0x0
0xffffb60000024350 0048 0000 0x0 0x0
0xffffb600000243c8 0048 0000 0x0 0x0
0xffffb60000024440 0048 0000 0x0 0x0
0xffffb600000244b8 0048 0000 0x0 0x0
0xffffb60000024530 0048 0000 0x0 0x0
0xffffb600000245a8 0048 0000 0x0 0x0
0xffffb60000024620 0048 0000 0x0 0x0
0xffffb60000024698 0048 0000 0x0 0x0
0xffffb60000024710 0048 0000 0x0 0x0
0xffffb60000024788 0048 0000 0x0 0x0
0xffffb60000024800 0048 0000 0x0 0x0
0xffffb60000024878 0048 0000 0x0 0x0
0xffffb600000248f0 0048 0000 0x0 0x0
0xffffb60000024968 0048 0000 0x0 0x0
0xffffb600000249e0 0048 0000 0x0 0x0
0xffffb60000024a58 0048 0000 0x0 0x0
0xffffb60000024ad0 0048 0000 0x0 0x0
0xffffb60000024b48 0048 0000 0x0 0x0
0xffffb60000024bc0 0048 0000 0x0 0x0
0xffffb60000024c38 0048 0000 0x0 0x0
0xffffb60000024cb0 0048 0000 0x0 0x0
0xffffb60000024d28 0048 0000 0x0 0x0
0xffffb60000024da0 0048 0000 0x0 0x0
0xffffb60000024e18 0048 0000 0x0 0x0
0xffffb60000024e90 0048 0000 0x0 0x0
0xffffb60000024f08 0048 0000 0x0 0x0
0xffffb60000024f80 0048 0000 0x0 0x0
0xffffb60000024ff8 0048 0000 0x0 0x0
0xffffb60000025070 0048 0000 0x0 0x0
0xffffb600000250e8 0048 0000 0x0 0x0
0xffffb60000025160 0048 0000 0x0 0x0
0xffffb600000251d8 0048 0000 0x0 0x0
0xffffb60000025250 0048 0000 0x0 0x0
0xffffb600000252c8 0008 0000 0x0 0x0
0xffffb60000025340 0008 0000 0x0 0x0
0xffffb600000253b8 0008 0000 0x0 0x0
0xffffb60000025430 0008 0000 0x0 0x0
0xffffb600000254a8 0008 0000 0x0 0x0
0xffffb60000025520 0008 0000 0x0 0x0
0xffffb60000025598 0008 0000 0x0 0x0
0xffffb60000025610 0008 0000 0x0 0x0
0xffffb60000025688 0008 0000 0x0 0x0
0xffffb60000025700 0008 0000 0x0 0x0
0xffffb60000025778 0008 0000 0x0 0x0
0xffffb600000257f0 0008 0000 0x0 0x0
0xffffb60000025868 0008 0000 0x0 0x0
0xffffb600000258e0 0008 0000 0x0 0x0
0xffffb60000025958 0008 0000 0x0 0x0
0xffffb600000259d0 0008 0000 0x0 0x0
0xffffb60000025a48 0008 0000 0x0 0x0
0xffffb60000025ac0 0008 0000 0x0 0x0
0xffffb60000025b38 0008 0000 0x0 0x0
0xffffb60000025bb0 0008 0000 0x0 0x0
0xffffb60000025c28 0008 0000 0x0 0x0
0xffffb60000025ca0 0008 0000 0x0 0x0
0xffffb60000025d18 0008 0000 0x0 0x0
0xffffb60000025d90 0008 0000 0x0 0x0
0xffffb60000025e08 0008 0000 0x0 0x0
0xffffb60000025e80 0008 0000 0x0 0x0
0xffffb60000025ef8 0008 0000 0x0 0x0
0xffffb60000025f70 0008 0000 0x0 0x0
0xffffb60000025fe8 0008 0000 0x0 0x0
0xffffb60000026060 0008 0000 0x0 0x0
0xffffb600000260d8 0008 0000 0x0 0x0
0xffffb60000026150 0008 0000 0x0 0x0
0xffffb600000261c8 0008 0000 0x0 0x0
0xffffb60000026240 0008 0000 0x0 0x0
0xffffb600000262b8 0008 0000 0x0 0x0
0xffffb60000026330 0008 0000 0x0 0x0
0xffffb600000263a8 0008 0000 0x0 0x0
0xffffb60000026420 0008 0000 0x0 0x0
0xffffb60000026498 0008 0000 0x0 0x0
0xffffb60000026510 0008 0000 0x0 0x0
0xffffb60000026588 0008 0000 0x0 0x0
0xffffb60000026600 0008 0000 0x0 0x0
0xffffb60000026678 0008 0000 0x0 0x0
0xffffb600000266f0 0008 0000 0x0 0x0
0xffffb60000026768 0008 0000 0x0 0x0
0xffffb600000267e0 0008 0000 0x0 0x0
0xffffb60000026858 0008 0000 0x0 0x0
0xffffb600000268d0 0008 0000 0x0 0x0
0xffffb60000026948 0008 0000 0x0 0x0
0xffffb600000269c0 0008 0000 0x0 0x0
0xffffb60000026a38 0008 0000 0x0 0x0
0xffffb60000026ab0 0008 0000 0x0 0x0
0xffffb60000026b28 0008 0000 0x0 0x0
0xffffb60000026ba0 0008 0000 0x0 0x0
0xffffb60000026c18 0008 0000 0x0 0x0
0xffffb60000026c90 0008 0000 0x0 0x0
0xffffb60000026d08 0008 0000 0x0 0x0
0xffffb60000026d80 0008 0000 0x0 0x0
0xffffb60000026df8 0008 0000 0x0 0x0
0xffffb60000026e70 0008 0000 0x0 0x0
0xffffb60000026ee8 0008 0000 0x0 0x0
0xffffb60000026f60 0008 0000 0x0 0x0
0xffffb60000026fd8 0008 0000 0x0 0x0
0xffffb60000027050 0008 0000 0x0 0x0
0xffffb600000270c8 0008 0000 0x0 0x0
0xffffb60000027140 0008 0000 0x0 0x0
0xffffb600000271b8 0008 0000 0x0 0x0
0xffffb60000027230 0008 0000 0x0 0x0
0xffffb600000272a8 0008 0000 0x0 0x0
0xffffb60000027320 0008 0000 0x0 0x0
0xffffb60000027398 0008 0000 0x0 0x0
0xffffb60000027410 0008 0000 0x0 0x0
0xffffb60000027488 0008 0000 0x0 0x0
0xffffb60000027500 0008 0000 0x0 0x0
0xffffb60000027578 0008 0000 0x0 0x0
0xffffb600000275f0 0008 0000 0x0 0x0
0xffffb60000027668 0008 0000 0x0 0x0
0xffffb600000276e0 0008 0000 0x0 0x0
0xffffb60000027758 0008 0000 0x0 0x0
0xffffb600000277d0 0008 0000 0x0 0x0
0xffffb60000027848 0008 0000 0x0 0x0
0xffffb600000278c0 0008 0000 0x0 0x0
0xffffb60000027938 0008 0000 0x0 0x0
0xffffb600000279b0 0008 0000 0x0 0x0
0xffffb60000027a28 0008 0000 0x0 0x0
0xffffb60000027aa0 0008 0000 0x0 0x0
0xffffb60000027b18 0008 0000 0x0 0x0
0xffffb60000027b90 0008 0000 0x0 0x0
0xffffb60000027c08 0008 0000 0x0 0x0
0xffffb60000027c80 0008 0000 0x0 0x0
0xffffb60000027cf8 0008 0000 0x0 0x0
0xffffb60000027d70 0008 0000 0x0 0x0
0xffffb60000027de8 0008 0000 0x0 0x0
0xffffb60000027e60 0008 0000 0x0 0x0
0xffffb60000027ed8 0008 0000 0x0 0x0
0xffffb60000027f50 0008 0000 0x0 0x0
0xffffb60000027fc8 0008 0000 0x0 0x0
0xffffb60000028040 0008 0000 0x0 0x0
0xffffb600000280b8 0008 0000 0x0 0x0
0xffffb60000028130 0008 0000 0x0 0x0
0xffffb600000281a8 0008 0000 0x0 0x0
0xffffb60000028220 0008 0000 0x0 0x0
0xffffb60000028298 0008 0000 0x0 0x0
0xffffb60000028310 0008 0000 0x0 0x0
0xffffb60000028388 0008 0000 0x0 0x0
0xffffb60000028400 0008 0000 0x0 0x0
0xffffb60000028478 0008 0000 0x0 0x0
0xffffb600000284f0 0008 0000 0x0 0x0
0xffffb60000028568 0008 0000 0x0 0x0
0xffffb600000285e0 0008 0000 0x0 0x0
0xffffb60000028658 0008 0000 0x0 0x0
0xffffb600000286d0 0008 0000 0x0 0x0
0xffffb60000028748 0008 0000 0x0 0x0
0xffffb600000287c0 0008 0000 0x0 0x0
0xffffb60000028838 0008 0000 0x0 0x0
0xffffb600000288b0 0008 0000 0x0 0x0
0xffffb60000028928 0008 0000 0x0 0x0
0xffffb600000289a0 0008 0000 0x0 0x0
0xffffb60000028a18 0008 0000 0x0 0x0
0xffffb60000028a90 0008 0000 0x0 0x0
0xffffb60000028b08 0008 0000 0x0 0x0
0xffffb60000028b80 0008 0000 0x0 0x0
0xffffb60000028bf8 0008 0000 0x0 0x0
0xffffb60000028c70 0008 0000 0x0 0x0
0xffffb60000028ce8 0008 0000 0x0 0x0
0xffffb60000028d60 0008 0000 0x0 0x0
0xffffb60000028dd8 0008 0000 0x0 0x0
0xffffb60000028e50 0008 0000 0x0 0x0
0xffffb60000028ec8 0008 0000 0x0 0x0
0xf

---
This bug is generated by a bot. It may contain errors.
See https://goo.gl/tpsmEJ for more information about syzbot.
syzbot engineers can be reached at syzk...@googlegroups.com.

syzbot will keep track of this bug report. See:
https://goo.gl/tpsmEJ#status for how to communicate with syzbot.

[Maxime Villard]

Duplicate, but garbage, so drop

#syz invalid