panic: [ 120.ADDR] vpanic() at netbsd:vpanic+0x265

0 views
Skip to first unread message

syzbot

unread,
Oct 16, 2020, 1:37:24 AM10/16/20
to syzkaller-...@googlegroups.com
Hello,

syzbot found the following issue on:

HEAD commit: 7e420f83 Add tests for process_xmm_to_s87() and process_s8..
git tree: netbsd
console output: https://syzkaller.appspot.com/x/log.txt?x=154fea07900000
kernel config: https://syzkaller.appspot.com/x/.config?x=fab579639ba4bf0a
dashboard link: https://syzkaller.appspot.com/bug?extid=0243b9de5fb22680c488
compiler: g++ (Ubuntu 5.4.0-6ubuntu1~16.04.12) 5.4.0 20160609

Unfortunately, I don't have any reproducer for this issue yet.

IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+0243b9...@syzkaller.appspotmail.com

86285] panic: [ 120.9786088] vpanic() at netbsd:vpanic+0x265 sys/kern/subr_prf.c:290
[ 121.0286074] _GLOBAL__sub_D_65535_0_cpu_configure() at netbsd:_GLOBAL__sub_D_65535_0_cpu_configure
[ 121.0686056] chgsemcnt() at netbsd:chgsemcnt+0x71 sys/kern/kern_uidinfo.c:242
[ 121.0986154] uhub1: device problem, disabling port 1
[ 121.1186063] ksem_release() at netbsd:ksem_release+0xbf sys/kern/uipc_sem.c:536
[ 121.1686078] ksem_close_fop() at netbsd:ksem_close_fop+0xb0 sys/kern/uipc_sem.c:853
[ 121.2086075] closef() at netbsd:closef+0x152 sys/kern/kern_descrip.c:832
[ 121.2586082] fd_free() at netbsd:fd_free+0x544 sys/kern/kern_descrip.c:1565
[ 121.2986144] exit1() at netbsd:exit1+0x307 sys/kern/kern_exit.c:301
[ 121.3286104] sys_exit() at netbsd:sys_exit+0x92 sys/kern/kern_exit.c:180
[ 121.3686129] syscall() at netbsd:syscall+0x259 sy_call sys/sys/syscallvar.h:65 [inline]
[ 121.3686129] syscall() at netbsd:syscall+0x259 sy_invoke sys/sys/syscallvar.h:94 [inline]
[ 121.3686129] syscall() at netbsd:syscall+0x259 sys/arch/x86/x86/syscall.c:138
[ 121.3886132] --- syscall (number 1) ---
[ 121.3986181] netbsd:syscall+0x259:
[ 121.3986181] cpu1: End traceback...
[ 121.4086128] fatal breakpoint trap in supervisor mode
[ 121.4086128] trap type 1 code 0 rip 0xffffffff80220a1d cs 0x8 rflags 0x286 cr2 0x7660690197e8 ilevel 0 rsp 0xffffba8193659930
[ 121.4186119] curlwp 0xffffba8012ced780 pid 744.744 lowest kstack 0xffffba81936522c0
Stopped in pid 744.744 (syz-executor.4) at netbsd:breakpoint+0x5: leave
?
breakpoint() at netbsd:breakpoint+0x5
db_panic() at netbsd:db_panic+0x105 sys/ddb/db_panic.c:67
vpanic() at netbsd:vpanic+0x265 sys/kern/subr_prf.c:290
_GLOBAL__sub_D_65535_0_cpu_configure() at netbsd:_GLOBAL__sub_D_65535_0_cpu_configure
chgsemcnt() at netbsd:chgsemcnt+0x71 sys/kern/kern_uidinfo.c:242
ksem_release() at netbsd:ksem_release+0xbf sys/kern/uipc_sem.c:536
ksem_close_fop() at netbsd:ksem_close_fop+0xb0 sys/kern/uipc_sem.c:853
closef() at netbsd:closef+0x152 sys/kern/kern_descrip.c:832
fd_free() at netbsd:fd_free+0x544 sys/kern/kern_descrip.c:1565
exit1() at netbsd:exit1+0x307 sys/kern/kern_exit.c:301
sys_exit() at netbsd:sys_exit+0x92 sys/kern/kern_exit.c:180
syscall() at netbsd:syscall+0x259 sy_call sys/sys/syscallvar.h:65 [inline]
syscall() at netbsd:syscall+0x259 sy_invoke sys/sys/syscallvar.h:94 [inline]
syscall() at netbsd:syscall+0x259 sys/arch/x86/x86/syscall.c:138
--- syscall (number 1) ---
netbsd:syscall+0x259:
Panic string: kernel diagnostic assertion "semcnt >= 0" failed: file "/syzkaller/managers/netbsd/kernel/sys/kern/kern_uidinfo.c", line 241
PID LID S CPU FLAGS STRUCT LWP * NAME WAIT
904 904 2 0 0 ffffba8012d1b500 syz-executor.2
2990 2990 2 0 0 ffffba8013920540 syz-executor.5
897 906 2 0 0 ffffba80145ee580 syz-executor.3
897 901 3 0 80 ffffba8012d78280 syz-executor.3 parked
897 897 2 0 10040000 ffffba8012d8b2c0 syz-executor.3
915 2374 2 0 0 ffffba8012d4f1c0 syz-executor.0
915 1989 2 1 0 ffffba8012b16480 syz-executor.0
915 915 2 0 10040000 ffffba8012c7e240 syz-executor.0
744 > 744 7 1 10040000 ffffba8012ced780 syz-executor.4
750 750 2 1 0 ffffba8012a77b40 syz-executor.1
2915 2915 3 0 80 ffffba80146ff640 syz-executor.4 parked
2943 2943 3 0 80 ffffba8012a2f6c0 syz-executor.4 parked
1728 1728 3 0 80 ffffba80144e04c0 syz-executor.3 parked
1740 1740 2 0 40 ffffba8012c26580 syz-executor.1
1952 1952 3 1 80 ffffba801447bbc0 syz-executor.4 parked
1705 1705 3 0 80 ffffba8012c5ba40 syz-executor.3 parked
669 669 3 1 80 ffffba8012d01040 syz-executor.4 parked
386 386 3 0 80 ffffba8012c42180 syz-executor.5 parked
384 384 3 0 80 ffffba80145ee140 syz-executor.2 parked
2731 2731 3 1 80 ffffba8012c42a00 syz-executor.5 parked
2491 2491 3 0 80 ffffba8012bd90c0 syz-executor.2 parked
1188 1188 3 1 80 ffffba8012d32580 syz-executor.0 parked
1975 1975 3 0 80 ffffba8012d43a00 syz-executor.0 parked
1312 1312 3 0 80 ffffba80137aa500 syz-executor.2 parked
1442 1442 3 0 80 ffffba80127c7300 syz-executor.0 parked
1308 1308 3 0 80 ffffba8012d4f600 syz-executor.0 parked
1196 1196 3 1 80 ffffba801383ea00 syz-executor.0 parked
1203 1203 3 1 80 ffffba80138ff0c0 syz-executor.0 parked
458 458 3 0 80 ffffba801447b340 syz-executor.5 parked
1361 1361 3 0 80 ffffba8012c5b1c0 syz-executor.5 parked
1073 1073 3 0 80 ffffba80137aa940 syz-executor.0 parked
1084 1084 3 0 80 ffffba801441d280 syz-executor.0 parked
1081 1081 2 0 40 ffffba80142b9a40 syz-executor.4
1103 1103 2 0 40 ffffba80142b9600 syz-executor.5
1124 1124 2 0 40 ffffba80142b91c0 syz-executor.3
1095 1095 2 0 40 ffffba8014278a00 syz-executor.2
1071 1071 2 0 40 ffffba8014278180 syz-executor.0
1064 1100 3 0 80 ffffba8012cc4b40 syz-fuzzer parked
1064 1076 2 1 40 ffffba8012bd9940 syz-fuzzer
1064 1249 3 1 c0 ffffba8012cc42c0 syz-fuzzer parked
1064 971 3 1 80 ffffba80138c8700 syz-fuzzer parked
1064 1250 2 1 0 ffffba80138c82c0 syz-fuzzer
1064 1254 2 1 40 ffffba801385ba80 syz-fuzzer
1064 1065 3 0 c0 ffffba8013920980 syz-fuzzer parked
1064 1127 2 0 40 ffffba80127c4b40 syz-fuzzer
1064 1064 3 0 80 ffffba8012b7c080 syz-fuzzer parked
1117 1117 3 0 80 ffffba8012b7c4c0 sshd select
850 850 3 1 80 ffffba8013939140 getty nanoslp
1092 1092 3 0 80 ffffba80129e6640 getty nanoslp
1088 1088 3 1 80 ffffba8012a772c0 getty nanoslp
696 696 3 0 c0 ffffba80127c8340 getty ttyraw
941 941 3 1 80 ffffba801385b200 sshd select
864 864 3 0 80 ffffba8012dbb740 powerd kqueue
735 735 3 0 80 ffffba80138c8b40 syslogd kqueue
595 595 3 0 80 ffffba8012ca2b00 dhcpcd poll
592 592 3 1 80 ffffba8012d09900 dhcpcd poll
590 590 3 1 80 ffffba8012ca26c0 dhcpcd poll
347 347 3 0 80 ffffba8012dfe480 dhcpcd poll
346 346 3 0 80 ffffba8012dfe040 dhcpcd poll
345 345 3 1 80 ffffba8012ddabc0 dhcpcd poll
1 1 3 1 80 ffffba80128c5980 init wait
0 703 5 1 600 ffffba8012d4fa40 (zombie)
0 1750 3 1 200 ffffba801445c740 acctwatch actwat
0 833 3 0 200 ffffba80129e6a80 physiod physiod
0 166 3 0 200 ffffba80129fcac0 pooldrain pooldrain
0 > 167 7 0 240 ffffba80129fc680 ioflush
0 165 3 1 200 ffffba80129fc240 pgdaemon pgdaemon
0 161 3 1 200 ffffba80129e6200 usb7 usbevt
0 31 3 1 200 ffffba801299aa40 usb6 usbevt
0 63 3 1 200 ffffba801299a600 usb5 usbevt
0 126 3 1 240 ffffba801299a1c0 usb4 usbxfer
0 125 3 0 200 ffffba8012948a00 usb3 usbevt
0 124 3 0 200 ffffba80129485c0 usb2 usbevt
0 123 3 0 200 ffffba8012948180 usb1 usbevt
0 122 3 0 200 ffffba80128d89c0 usb0 usbevt
0 121 3 1 200 ffffba80128d8580 usbtask-dr usbtsk
0 120 3 0 200 ffffba800fe34ac0 usbtask-hc usbtsk
0 119 3 1 200 ffffba80128d8140 npfgc0 npfgcw
0 118 3 1 200 ffffba80128c5540 rt_free rt_free
0 117 3 1 200 ffffba80128c5100 unpgc unpgc
0 116 3 0 200 ffffba80127fa940 key_timehandler key_timehandler
0 115 3 1 200 ffffba80127fa500 icmp6_wqinput/1 icmp6_wqinput
0 114 3 0 200 ffffba80127fa0c0 icmp6_wqinput/0 icmp6_wqinput
0 113 3 0 200 ffffba80127ed900 nd6_timer nd6_timer
0 112 3 1 200 ffffba80127ed4c0 carp6_wqinput/1 carp6_wqinput
0 111 3 0 200 ffffba80127ed080 carp6_wqinput/0 carp6_wqinput
0 110 3 1 200 ffffba80127d98c0 carp_wqinput/1 carp_wqinput
0 109 3 0 200 ffffba80127d9480 carp_wqinput/0 carp_wqinput
0 108 3 1 200 ffffba80127d9040 icmp_wqinput/1 icmp_wqinput
0 107 3 0 200 ffffba80127c8bc0 icmp_wqinput/0 icmp_wqinput
0 106 3 0 200 ffffba80127c4700 rt_timer rt_timer
0 105 3 0 200 ffffba80127c8780 vmem_rehash vmem_rehash
0 104 3 0 200 ffffba801213ab00 entbutler entropy
0 30 3 1 200 ffffba801213a6c0 vioif0_txrx/1 vioif0_txrx
0 29 3 0 200 ffffba801213a280 vioif0_txrx/0 vioif0_txrx
0 27 3 0 200 ffffba800fe34680 scsibus0 sccomp
0 26 3 0 200 ffffba800fe34240 pms0 pmsreset
0 25 3 1 200 ffffba800fd89a80 xcall/1 xcall
0 24 1 1 200 ffffba800fd89640 softser/1
0 23 1 1 200 ffffba800fd89200 softclk/1
0 22 1 1 200 ffffba800fd87a40 softbio/1
0 21 1 1 200 ffffba800fd87600 softnet/1
0 20 1 1 201 ffffba800fd871c0 idle/1
0 19 3 0 200 ffffba800e7f8a00 lnxpwrwq lnxpwrwq
0 18 3 0 200 ffffba800e7f85c0 lnxlngwq lnxlngwq
0 17 3 0 200 ffffba800e7f8180 lnxsyswq lnxsyswq
0 16 3 0 200 ffffba800e7f09c0 lnxrcugc lnxrcugc
0 15 3 0 200 ffffba800e7f0580 sysmon smtaskq
0 14 3 0 200 ffffba800e7f0140 pmfsuspend pmfsuspend
0 13 3 0 200 ffffba800e7ec980 pmfevent pmfevent
0 12 3 0 200 ffffba800e7ec540 sopendfree sopendfr
0 11 3 0 200 ffffba800e7ec100 iflnkst iflnkst
0 10 3 0 200 ffffba800e7e0940 nfssilly nfssilly
0 9 3 0 200 ffffba800e7e0500 vdrain vdrain
0 8 3 0 200 ffffba800e7e00c0 modunload mod_unld
0 7 3 0 200 ffffba800e7d3900 xcall/0 xcall
0 6 1 0 200 ffffba800e7d34c0 softser/0
0 5 1 0 200 ffffba800e7d3080 softclk/0
0 4 1 0 200 ffffba800e7d18c0 softbio/0
0 3 1 0 200 ffffba800e7d1480 softnet/0
0 2 1 0 201 ffffba800e7d1040 idle/0
0 0 3 1 200 ffffffff82eed040 swapper uvm
[Locks tracked through LWPs]

****** LWP 904.904 (syz-executor.2) @ 0xffffba8012d1b500, l_stat=2

*** Locks held:

* Lock 0 (initialized at pmap_ctor)
lock address : 0xffffba801379bb80 type : sleep/adaptive
initialized : 0xffffffff808d3c24
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffffba8012d1b500 last held: 0xffffba8012d1b500
last locked* : 0xffffffff808d58b2 unlocked : 0xffffffff808d3937
owner field : 0xffffba8012d1b500 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

* Lock 1 (initialized at pmap_ctor)
lock address : 0xffffba801379bb88 type : sleep/adaptive
initialized : 0xffffffff808d3c30
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffffba8012d1b500 last held: 0xffffba8012d1b500
last locked* : 0xffffffff808d6a4b unlocked : 0xffffffff808ccd1d
owner/count : 0xffffba8012d1b500 flags : 0x0000000000000004
Turnstile: no active turnstile for this lock.

*** Locks wanted: none

****** LWP 2990.2990 (syz-executor.5) @ 0xffffba8013920540, l_stat=2

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at lwp_ctl_alloc)
lock address : 0xffffba80142ee040 type : sleep/adaptive
initialized : 0xffffffff818d1b1a
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 1
relevant cpu : 0 last held: 0
relevant lwp : 0xffffba8013920540 last held: 000000000000000000
last locked : 000000000000000000 unlocked*: 000000000000000000
owner field : 0xffffba8013920540 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 897.906 (syz-executor.3) @ 0xffffba80145ee580, l_stat=2

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at uvm_map_setup)
lock address : 0xffffba80137f8348 type : sleep/adaptive
initialized : 0xffffffff8184a502
shared holds : 0 exclusive: 0
shares wanted: 1 exclusive: 0
relevant cpu : 0 last held: 65535
relevant lwp : 0xffffba80145ee580 last held: 000000000000000000
last locked : 0xffffffff81835f0c unlocked*: 0xffffffff81834ef0
owner/count : 000000000000000000 flags : 000000000000000000
Turnstile: no active turnstile for this lock.

****** LWP 744.744 (syz-executor.4) @ 0xffffba8012ced780, l_stat=7

*** Locks held:

* Lock 0 (initialized at fork1)
lock address : 0xffffba801382fad0 type : sleep/adaptive
initialized : 0xffffffff818c197e
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 1
relevant lwp : 0xffffba8012ced780 last held: 0xffffba8012ced780
last locked* : 0xffffffff818bdd01 unlocked : 000000000000000000
owner/count : 0xffffba8012ced780 flags : 0x0000000000000004
Turnstile: no active turnstile for this lock.

*** Locks wanted: none

****** LWP 750.750 (syz-executor.1) @ 0xffffba8012a77b40, l_stat=2

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at pmap_ctor)
lock address : 0xffffba8014495b80 type : sleep/adaptive
initialized : 0xffffffff808d3c24
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 1
relevant cpu : 1 last held: 1
relevant lwp : 0xffffba8012a77b40 last held: 000000000000000000
last locked : 0xffffffff808d58b2 unlocked*: 0xffffffff808d61b8
owner field : 0xffffba8012a77b40 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 592.592 (dhcpcd) @ 0xffffba8012d09900, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at module_hook_init)
lock address : 0xffffffff82ff48c0 type : sleep/adaptive
initialized : 0xffffffff818dbbc1
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 0
relevant lwp : 0xffffba8012d09900 last held: 000000000000000000
last locked : 000000000000000000 unlocked*: 000000000000000000
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 590.590 (dhcpcd) @ 0xffffba8012ca26c0, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at module_hook_init)
lock address : 0xffffffff82ff48c0 type : sleep/adaptive
initialized : 0xffffffff818dbbc1
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 0
relevant lwp : 0xffffba8012ca26c0 last held: 000000000000000000
last locked : 000000000000000000 unlocked*: 000000000000000000
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 346.346 (dhcpcd) @ 0xffffba8012dfe040, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at module_hook_init)
lock address : 0xffffffff82ff48c0 type : sleep/adaptive
initialized : 0xffffffff818dbbc1
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffffba8012dfe040 last held: 000000000000000000
last locked : 000000000000000000 unlocked*: 000000000000000000
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 345.345 (dhcpcd) @ 0xffffba8012ddabc0, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at module_hook_init)
lock address : 0xffffffff82ff48c0 type : sleep/adaptive
initialized : 0xffffffff818dbbc1
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 0
relevant lwp : 0xffffba8012ddabc0 last held: 000000000000000000
last locked : 000000000000000000 unlocked*: 000000000000000000
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 0.23 (softclk/1) @ 0xffffba800fd89200, l_stat=1

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at module_hook_init)
lock address : 0xffffffff82ff48c0 type : sleep/adaptive
initialized : 0xffffffff818dbbc1
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 0
relevant lwp : 0xffffba800fd89200 last held: 000000000000000000
last locked : 000000000000000000 unlocked*: 000000000000000000
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 0.11 (iflnkst) @ 0xffffba800e7ec100, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at module_hook_init)
lock address : 0xffffffff82ff48c0 type : sleep/adaptive
initialized : 0xffffffff818dbbc1
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffffba800e7ec100 last held: 000000000000000000
last locked : 000000000000000000 unlocked*: 000000000000000000
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

[Locks tracked through CPUs]

******* Locks held on cpu0:

* Lock 0 (initialized at sched_cpuattach)
lock address : 0xffffba800e71d100 type : spin
initialized : 0xffffffff818fc631
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffffba80129fc680 last held: 0xffffba8012c7e240
last locked* : 0xffffffff818ea2e3 unlocked : 0xffffffff819adbd2
owner field : 0x0000000000000700 wait/spin: 0/1

* Lock 1 (initialized at com_attach_subr)
lock address : 0xffffba80126c6b80 type : spin
initialized : 0xffffffff80ae830d
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffffba80129fc680 last held: 0xffffba8012c7e240
last locked* : 0xffffffff80ae609e unlocked : 0xffffffff80ae7406
owner field : 0x0000000000000800 wait/spin: 0/1

PAGE FLAG PQ UOBJECT UANON
0xffffba8000017180 0041 00000000 0x0 0x0
0xffffba8000017200 0001 00000000 0x0 0x0
0xffffba8000017280 0001 00000000 0x0 0x0
0xffffba8000017300 0001 00000000 0x0 0x0
0xffffba8000017380 0001 00000000 0x0 0x0
0xffffba8000017400 0001 00000000 0x0 0x0
0xffffba8000017480 0001 00000000 0x0 0x0
0xffffba8000017500 0001 00000000 0x0 0x0
0xffffba8000017580 0001 00000000 0x0 0x0
0xffffba8000017600 0001 00000000 0x0 0x0
0xffffba8000017680 0001 00000000 0x0 0x0
0xffffba8000017700 0001 00000000 0x0 0x0
0xffffba8000017780 0001 00000000 0x0 0x0
0xffffba8000017800 0001 00000000 0x0 0x0
0xffffba8000017880 0001 00000000 0x0 0x0
0xffffba8000017900 0001 00000000 0x0 0x0
0xffffba8000017980 0001 00000000 0x0 0x0
0xffffba8000017a00 0001 00000000 0x0 0x0
0xffffba8000017a80 0001 00000000 0x0 0x0
0xffffba8000017b00 0001 00000000 0x0 0x0
0xffffba8000017b80 0001 00000000 0x0 0x0
0xffffba8000017c00 0001 00000000 0x0 0x0
0xffffba8000017c80 0001 00000000 0x0 0x0
0xffffba8000017d00 0001 00000000 0x0 0x0
0xffffba8000017d80 0001 00000000 0x0 0x0
0xffffba8000017e00 0001 00000000 0x0 0x0
0xffffba8000017e80 0001 00000000 0x0 0x0
0xffffba8000017f00 0001 00000000 0x0 0x0
0xffffba8000017f80 0001 00000000 0x0 0x0
0xffffba8000018000 0001 00000000 0x0 0x0
0xffffba8000018080 0001 00000000 0x0 0x0
0xffffba8000018100 0001 00000000 0x0 0x0
0xffffba8000018180 0001 00000000 0x0 0x0
0xffffba8000018200 0001 00000000 0x0 0x0
0xffffba8000018280 0001 00000000 0x0 0x0
0xffffba8000018300 0001 00000000 0x0 0x0
0xffffba8000018380 0001 00000000 0x0 0x0
0xffffba8000018400 0001 00000000 0x0 0x0
0xffffba8000018480 0001 00000000 0x0 0x0
0xffffba8000018500 0001 00000000 0x0 0x0
0xffffba8000018580 0001 00000000 0x0 0x0
0xffffba8000018600 0001 00000000 0x0 0x0
0xffffba8000018680 0001 00000000 0x0 0x0
0xffffba8000018700 0001 00000000 0x0 0x0
0xffffba8000018780 0001 00000000 0x0 0x0
0xffffba8000018800 0001 00000000 0x0 0x0
0xffffba8000018880 0001 00000000 0x0 0x0
0xffffba8000018900 0001 00000000 0x0 0x0
0xffffba8000018980 0001 00000000 0x0 0x0
0xffffba8000018a00 0001 00000000 0x0 0x0
0xffffba8000018a80 0001 00000000 0x0 0x0
0xffffba8000018b00 0001 00000000 0x0 0x0
0xffffba8000018b80 0001 00000000 0x0 0x0
0xffffba8000018c00 0001 00000000 0x0 0x0
0xffffba8000018c80 0001 00000000 0x0 0x0
0xffffba8000018d00 0001 00000000 0x0 0x0
0xffffba8000018d80 0001 00000000 0x0 0x0
0xffffba8000018e00 0001 00000000 0x0 0x0
0xffffba8000018e80 0001 00000000 0x0 0x0
0xffffba8000018f00 0001 00000000 0x0 0x0
0xffffba8000018f80 0001 00000000 0x0 0x0
0xffffba8000019000 0001 00000000 0x0 0x0
0xffffba8000019080 0001 00000000 0x0 0x0
0xffffba8000019100 0001 00000000 0x0 0x0
0xffffba8000019180 0001 00000000 0x0 0x0
0xffffba8000019200 0001 00000000 0x0 0x0
0xffffba8000019280 0001 00000000 0x0 0x0
0xffffba8000019300 0001 00000000 0x0 0x0
0xffffba8000019380 0001 00000000 0x0 0x0
0xffffba8000019400 0001 00000000 0x0 0x0
0xffffba8000019480 0001 00000000 0x0 0x0
0xffffba8000019500 0001 00000000 0x0 0x0
0xffffba8000019580 0001 00000000 0x0 0x0
0xffffba8000019600 0001 00000000 0x0 0x0
0xffffba8000019680 0001 00000000 0x0 0x0
0xffffba8000019700 0001 00000000 0x0 0x0
0xffffba8000019780 0001 00000000 0x0 0x0
0xffffba8000019800 0001 00000000 0x0 0x0
0xffffba8000019880 0001 00000000 0x0 0x0
0xffffba8000019900 0001 00000000 0x0 0x0
0xffffba8000019980 0001 00000000 0x0 0x0
0xffffba8000019a00 0001 00000000 0x0 0x0
0xffffba8000019a80 0001 00000000 0x0 0x0
0xffffba8000019b00 0001 00000000 0x0 0x0
0xffffba8000019b80 0001 00000000 0x0 0x0
0xffffba8000019c00 0001 00000000 0x0 0x0
0xffffba8000019c80 0001 00000000 0x0 0x0
0xffffba8000019d00 0001 00000000 0x0 0x0
0xffffba8000019d80 0001 00000000 0x0 0x0
0xffffba8000019e00 0001 00000000 0x0 0x0
0xffffba8000019e80 0001 00000000 0x0 0x0
0xffffba8000019f00 0001 00000000 0x0 0x0
0xffffba8000019f80 0001 00000000 0x0 0x0
0xffffba800001a000 0001 00000000 0x0 0x0
0xffffba800001a080 0001 00000000 0x0 0x0
0xffffba800001a100 0001 00000000 0x0 0x0
0xffffba800001a180 0001 00000000 0x0 0x0
0xffffba800001a200 0001 00000000 0x0 0x0
0xffffba800001a280 0001 00000000 0x0 0x0
0xffffba800001a300 0001 00000000 0x0 0x0
0xffffba800001a380 0001 00000000 0x0 0x0
0xffffba800001a400 0001 00000000 0x0 0x0
0xffffba800001a480 0001 00000000 0x0 0x0
0xffffba800001a500 0001 00000000 0x0 0x0
0xffffba800001a580 0001 00000000 0x0 0x0
0xffffba800001a600 0001 00000000 0x0 0x0
0xffffba800001a680 0001 00000000 0x0 0x0
0xffffba800001a700 0001 00000000 0x0 0x0
0xffffba800001a780 0001 00000000 0x0 0x0
0xffffba800001a800 0001 00000000 0x0 0x0
0xffffba800001a880 0001 00000000 0x0 0x0
0xffffba800001a900 0001 00000000 0x0 0x0
0xffffba800001a980 0001 00000000 0x0 0x0
0xffffba800001aa00 0001 00000000 0x0 0x0
0xffffba800001aa80 0001 00000000 0x0 0x0
0xffffba800001ab00 0001 00000000 0x0 0x0
0xffffba800001ab80 0001 00000000 0x0 0x0
0xffffba800001ac00 0001 00000000 0x0 0x0
0xffffba800001ac80 0001 00000000 0x0 0x0
0xffffba800001ad00 0001 00000000 0x0 0x0
0xffffba800001ad80 0001 00000000 0x0 0x0
0xffffba800001ae00 0001 00000000 0x0 0x0
0xffffba800001ae80 0001 00000000 0x0 0x0
0xffffba800001af00 0001 00000000 0x0 0x0
0xffffba800001af80 0001 00000000 0x0 0x0
0xffffba800001b000 0001 00000000 0x0 0x0
0xffffba800001b080 0001 00000000 0x0 0x0
0xffffba800001b100 0001 00000000 0x0 0x0
0xffffba800001b180 0001 00000000 0x0 0x0
0xffffba800001b200 0001 00000000 0x0 0x0
0xffffba800001b280 0001 00000000 0x0 0x0
0xffffba800001b300 0001 00000000 0x0 0x0
0xffffba800001b380 0001 00000000 0x0 0x0
0xffffba800001b400 0001 00000000 0x0 0x0
0xffffba800001b480 0001 00000000 0x0 0x0
0xffffba800001b500 0001 00000000 0x0 0x0
0xffffba800001b580 0001 00000000 0x0 0x0
0xffffba800001b600 0001 00000000 0x0 0x0
0xffffba800001b680 0001 00000000 0x0 0x0
0xffffba800001b700 0001 00000000 0x0 0x0
0xffffba800001b780 0001 00000000 0x0 0x0
0xffffba800001b800 0001 00000000 0x0 0x0
0xffffba800001b880 0001 00000000 0x0 0x0
0xffffba800001b900 0001 00000000 0x0 0x0
0xffffba800001b980 0001 00000000 0x0 0x0
0xffffba800001ba00 0001 00000000 0x0 0x0
0xffffba800001ba80 0001 00000000 0x0 0x0
0xffffba800001bb00 0001 00000000 0x0 0x0
0xffffba800001bb80 0001 00000000 0x0 0x0
0xffffba800001bc00 0001 00000000 0x0 0x0
0xffffba800001bc80 0001 00000000 0x0 0x0
0xffffba800001bd00 0001 00000000 0x0 0x0
0xffffba800001bd80 0001 00000000 0x0 0x0
0xffffba800001be00 0001 00000000 0x0 0x0
0xffffba800001be80 0001 00000000 0x0 0x0
0xffffba800001bf00 0001 00000000 0x0 0x0
0xffffba800001bf80 0001 00000000 0x0 0x0
0xffffba800001c000 0001 00000000 0x0 0x0
0xffffba800001c080 0001 00000000 0x0 0x0
0xffffba800001c100 0001 00000000 0x0 0x0
0xffffba800001c180 0001 00000000 0x0 0x0
0xffffba800001c200 0001 00000000 0x0 0x0
0xffffba800001c280 0001 00000000 0x0 0x0
0xffffba800001c300 0001 00000000 0x0 0x0
0xffffba800001c380 0001 00000000 0x0 0x0
0xffffba800001c400 0001 00000000 0x0 0x0
0xffffba800001c480 0001 00000000 0x0 0x0
0xffffba800001c500 0001 00000000 0x0 0x0
0xffffba800001c580 0001 00000000 0x0 0x0
0xffffba800001c600 0001 00000000 0x0 0x0
0xffffba800001c680 0001 00000000 0x0 0x0
0xffffba800001c700 0001 00000000 0x0 0x0
0xffffba800001c780 0001 00000000 0x0 0x0
0xffffba800001c800 0001 00000000 0x0 0x0
0xffffba800001c880 0001 00000000 0x0 0x0
0xffffba800001c900 0001 00000000 0x0 0x0
0xffffba800001c980 0001 00000000 0x0 0x0
0xffffba800001ca00 0001 00000000 0x0 0x0
0xffffba800001ca80 0001 00000000 0x0 0x0
0xffffba800001cb00 0001 00000000 0x0 0x0
0xffffba800001cb80 0001 00000000 0x0 0x0
0xffffba800001cc00 0001 00000000 0x0 0x0
0xffffba800001cc80 0001 00000000 0x0 0x0
0xffffba800001cd00 0001 00000000 0x0 0x0
0xffffba800001cd80 0001 00000000 0x0 0x0
0xffffba800001ce00 0001 00000000 0x0 0x0
0xffffba800001ce80 0001 00000000 0x0 0x0
0xffffba800001cf00 0001 00000000 0x0 0x0
0xffffba800001cf80 0001 00000000 0x0 0x0
0xffffba800001d000 0001 00000000 0x0 0x0
0xffffba800001d080 0001 00000000 0x0 0x0
0xffffba800001d100 0001 00000000 0x0 0x0
0xffffba800001d180 0001 00000000 0x0 0x0
0xffffba800001d200 0001 00000000 0x0 0x0
0xffffba800001d280 0001 00000000 0x0 0x0
0xffffba800001d300 0001 00000000 0x0 0x0
0xffffba800001d380 0001 00000000 0x0 0x0
0xffffba800001d400 0001 00000000 0x0 0x0
0xffffba800001d480 0001 00000000 0x0 0x0
0xffffba800001d500 0001 00000000 0x0 0x0
0xffffba800001d580 0001 00000000 0x0 0x0
0xffffba800001d600 0001 00000000 0x0 0x0
0xffffba800001d680 0001 00000000 0x0 0x0
0xffffba800001d700 0001 00000000 0x0 0x0
0xffffba800001d780 0001 00000000 0x0 0x0
0xffffba800001d800 0001 00000000 0x0 0x0
0xffffba800001d880 0001 00000000 0x0 0x0
0xffffba800001d900 0001 00000000 0x0 0x0
0xffffba800001d980 0001 00000000 0x0 0x0
0xffffba800001da00 0001 00000000 0x0 0x0
0xffffba800001da80 0001 00000000 0x0 0x0
0xffffba800001db00 0001 00000000 0x0 0x0
0xffffba800001db80 0001 00000000 0x0 0x0
0xffffba800001dc00 0001 00000000 0x0 0x0
0xffffba800001dc80 0001 00000000 0x0 0x0
0xffffba800001dd00 0001 00000000 0x0 0x0
0xffffba800001dd80 0001 00000000 0x0 0x0
0xffffba800001de00 0001 00000000 0x0 0x0
0xffffba800001de80 0001 00000000 0x0 0x0
0xffffba800001df00 0001 00000000 0x0 0x0
0xffffba800001df80 0001 00000000 0x0 0x0
0xffffba800001e000 0001 00000000 0x0 0x0
0xffffba800001e080 0001 00000000 0x0 0x0
0xffffba800001e100 0001 00000000 0x0 0x0
0xffffba800001e180 0001 00000000 0x0 0x0
0xffffba800001e200 0001 00000000 0x0 0x0
0xffffba800001e280 0001 00000000 0x0 0x0
0xffffba800001e300 0001 00000000 0x0 0x0
0xffffba800001e380 0001 00000000 0x0 0x0
0xffffba800001e400 0001 00000000 0x0 0x0
0xffffba800001e480 0001 00000000 0x0 0x0
0xffffba800001e500 0001 00000000 0x0 0x0
0xffffba800001e580 0001 00000000 0x0 0x0
0xffffba800001e600 0001 00000000 0x0 0x0
0xffffba800001e680 0001 00000000 0x0 0x0
0xffffba800001e700 0001 00000000 0x0 0x0
0xffffba800001e780 0001 00000000 0x0 0x0
0xffffba800001e800 0001 00000000 0x0 0x0
0xffffba800001e880 0001 00000000 0x0 0x0
0xffffba800001e900 0001 00000000 0x0 0x0
0xffffba800001e980 0001 00000000 0x0 0x0
0xffffba800001ea00 0001 00000000 0x0 0x0
0xffffba800001ea80 0001 00000000 0x0 0x0
0xffffba800001eb00 0001 00000000 0x0 0x0
0xffffba800001eb80 0001 00000000 0x0 0x0
0xffffba800001ec00 0001 00000000 0x0 0x0
0xffffba800001ec80 0001 00000000 0x0 0x0
0xffffba800001ed00 0001 00000000 0x0 0x0
0xffffba800001ed80 0001 00000000 0x0 0x0
0xffffba800001ee00 0001 00000000 0x0 0x0
0xffffba800001ee80 0001 00000000 0x0 0x0
0xffffba800001ef00 0001 00000000 0x0 0x0
0xffffba800001ef80 0001 00000000 0x0 0x0
0xffffba800001f000 0001 00000000 0x0 0x0
0xffffba800001f080 0001 00000000 0x0 0x0
0xffffba800001f100 0001 00000000 0x0 0x0
0xffffba800001f180 0001 00000000 0x0 0x0
0xffffba800001f200 0001 00000000 0x0 0x0
0xffffba800001f280 0001 00000000 0x0 0x0
0xffffba800001f300 0001 00000000 0x0 0x0
0xffffba800001f380 0001 00000000 0x0 0x0
0xffffba800001f400 0001 00000000 0x0 0x0
0xffffba800001f480 0001 00000000 0x0 0x0
0xffffba800001f500 0001 00000000 0x0 0x0
0xffffba800001f580 0001 00000000 0x0 0x0
0xffffba800001f600 0001 00000000 0x0 0x0
0xffffba800001f680 0001 00000000 0x0 0x0
0xffffba800001f700 0001 00000000 0x0 0x0
0xffffba800001f780 0001 00000000 0x0 0x0
0xffffba800001f800 0001 00000000 0x0 0x0
0xffffba800001f880 0001 00000000 0x0 0x0
0xffffba800001f900 0001 00000000 0x0 0x0
0xffffba800001f980 0001 00000000 0x0 0x0
0xffffba800001fa00 0001 00000000 0x0 0x0
0xffffba800001fa80 0001 00000000 0x0 0x0
0xffffba800001fb00 0001 00000000 0x0 0x0
0xffffba800001fb80 0001 00000000 0x0 0x0
0xffffba800001fc00 0001 00000000 0x0 0x0
0xffffba800001fc80 0001 00000000 0x0 0x0
0xffffba800001fd00 0001 00000000 0x0 0x0
0xffffba800001fd80 0001 00000000 0x0 0x0
0xffffba800001fe00 0001 00000000 0x0 0x0
0xffffba800001fe80 0001 00000000 0x0 0x0
0xffffba800001ff00 0001 00000000 0x0 0x0
0xffffba800001ff80 0001 00000000 0x0 0x0
0xffffba8000020000 0001 00000000 0x0 0x0
0xffffba8000020080 0001 00000000 0x0 0x0
0xffffba8000020100 0001 00000000 0x0 0x0
0xffffba8000020180 0001 00000000 0x0 0x0
0xffffba8000020200 0001 00000000 0x0 0x0
0xffffba8000020280 0001 00000000 0x0 0x0
0xffffba8000020300 0001 00000000 0x0 0x0
0xffffba8000020380 0001 00000000 0x0 0x0
0xffffba8000020400 0001 00000000 0x0 0x0
0xffffba8000020480 0001 00000000 0x0 0x0
0xffffba8000020500 0001 00000000 0x0 0x0
0xffffba8000020580 0001 00000000 0x0 0x0
0xffffba8000020600 0001 00000000 0x0 0x0
0xffffba8000020680 0001 00000000 0x0 0x0
0xffffba8000020700 0001 00000000 0x0 0x0
0xffffba8000020780 0001 00000000 0x0 0x0
0xffffba8000020800 0001 00000000 0x0 0x0
0xffffba8000020880 0001 00000000 0x0 0x0
0xffffba8000020900 0001 00000000 0x0 0x0
0xffffba8000020980 0001 00000000 0x0 0x0
0xffffba8000020a00 0001 00000000 0x0 0x0
0xffffba8000020a80 0001 00000000 0x0 0x0
0xffffba8000020b00 0001 00000000 0x0 0x0
0xffffba8000020b80 0001 00000000 0x0 0x0
0xffffba8000020c00 0001 00000000 0x0 0x0
0xffffba8000020c80 0001 00000000 0x0 0x0
0xffffba8000020d00 0001 00000000 0x0 0x0
0xffffba8000020d80 0001 00000000 0x0 0x0
0xffffba8000020e00 0001 00000000 0x0 0x0
0xffffba8000020e80 0001 00000000 0x0 0x0
0xffffba8000020f00 0001 00000000 0x0 0x0
0xffffba8000020f80 0001 00000000 0x0 0x0
0xffffba8000021000 0001 00000000 0x0 0x0
0xffffba8000021080 0001 00000000 0x0 0x0
0xffffba8000021100 0001 00000000 0x0 0x0
0xffffba8000021180 0001 00000000 0x0 0x0
0xffffba8000021200 0001 00000000 0x0 0x0
0xffffba8000021280 0001 00000000 0x0 0x0
0xffffba8000021300 0001 00000000 0x0 0x0
0xffffba8000021380 0001 00000000 0x0 0x0
0xffffba8000021400 0001 00000000 0x0 0x0
0xffffba8000021480 0001 00000000 0x0 0x0
0xffffba8000021500 0001 00000000 0x0 0x0
0xffffba8000021580 0001 00000000 0x0 0x0
0xffffba8000021600 0001 00000000 0x0 0x0
0xffffba8000021680 0001 00000000 0x0 0x0
0xffffba8000021700 0001 00000000 0x0 0x0
0xffffba8000021780 0001 00000000 0x0 0x0
0xffffba8000021800 0001 00000000 0x0 0x0
0xffffba8000021880 0001 00000000 0x0 0x0
0xffffba8000021900 0001 00000000 0x0 0x0
0xffffba8000021980 0001 00000000 0x0 0x0
0xffffba8000021a00 0001 00000000 0x0 0x0
0xffffba8000021a80 0001 00000000 0x0 0x0
0xffffba8000021b00 0001 00000000 0x0 0x0
0xffffba8000021b80 0001 00000000 0x0 0x0
0xffffba8000021c00 0001 00000000 0x0 0x0
0xffffba8000021c80 0001 00000000 0x0 0x0
0xffffba8000021d00 0001 00000000 0x0 0x0
0xffffba8000021d80 0001 00000000 0x0 0x0
0xffffba8000021e00 0001 00000000 0x0 0x0
0xffffba8000021e80 0001 00000000 0x0 0x0
0xffffba8000021f00 0001 00000000 0x0 0x0
0xffffba8000021f80 0001 00000000 0x0 0x0
0xffffba8000022000 0001 00000000 0x0 0x0
0xffffba8000022080 0001 00000000 0x0 0x0
0xffffba8000022100 0001 00000000 0x0 0x0
0xffffba8000022180 0001 00000000 0x0 0x0
0xffffba8000022200 0001 00000000 0x0 0x0
0xffffba8000022280 0001 00000000 0x0 0x0
0xffffba8000022300 0001 00000000 0x0 0x0
0xffffba8000022380 0001 00000000 0x0 0x0
0xffffba8000022400 0001 00000000 0x0 0x0
0xffffba8000022480 0001 00000000 0x0 0x0
0xffffba8000022500 0001 00000000 0x0 0x0
0xffffba8000022580 0001 00000000 0x0 0x0
0xffffba8000022600 0001 00000000 0x0 0x0
0xffffba8000022680 0001 00000000 0x0 0x0
0xffffba8000022700 0001 00000000 0x0 0x0
0xffffba8000022780 0001 00000000 0x0 0x0
0xffffba8000022800 0001 00000000 0x0 0x0
0xffffba8000022880 0001 00000000 0x0 0x0
0xffffba8000022900 0001 00000000 0x0 0x0
0xffffba8000022980 0001 00000000 0x0 0x0
0xffffba8000022a00 0001 00000000 0x0 0x0
0xffffba8000022a80 0001 00000000 0x0 0x0
0xffffba8000022b00 0001 00000000 0x0 0x0
0xffffba8000022b80 0001 00000000 0x0 0x0
0xffffba8000022c00 0001 00000000 0x0 0x0
0xffffba8000022c80 0001 00000000 0x0 0x0
0xffffba8000022d00 0001 00000000 0x0 0x0
0xffffba8000022d80 0001 00000000 0x0 0x0
0xffffba8000022e00 0001 00000000 0x0 0x0
0xffffba8000022e80 0001 00000000 0x0 0x0
0xffffba8000022f00 0001 00000000 0x0 0x0
0xffffba8000022f80 0001 00000000 0x0 0x0
0xffffba8000023000 0001 00000000 0x0 0x0
0xffffba8000023080 0001 00000000 0x0 0x0
0xffffba8000023100 0001 00000000 0x0 0x0
0xffffba8000023180 0001 00000000 0x0 0x0
0xffffba8000023200 0001 00000000 0x0 0x0
0xffffba8000023280 0001 00000000 0x0 0x0
0xffffba8000023300 0001 00000000 0x0 0x0
0xffffba8000023380 0001 00000000 0x0 0x0
0xffffba8000023400 0001 00000000 0x0 0x0
0xffffba8000023480 0001 00000000 0x0 0x0
0xffffba8000023500 0001 00000000 0x0 0x0
0xffffba8000023580 0001 00000000 0x0 0x0
0xffffba8000023600 0001 00000000 0x0 0x0
0xffffba8000023680 0001 00000000 0x0 0x0
0xffffba8000023700 0001 00000000 0x0 0x0
0xffffba8000023780 0001 00000000 0x0 0x0
0xffffba8000023800 0001 00000000 0x0 0x0
0xffffba8000023880 0001 00000000 0x0 0x0
0xffffba8000023900 0001 00000000 0x0 0x0
0xffffba8000023980 0001 00000000 0x0 0x0
0xffffba8000023a00 0001 00000000 0x0 0x0
0xffffba8000023a80 0001 00000000 0x0 0x0
0xffffba8000023b00 0001 00000000 0x0 0x0
0xffffba8000023b80 0001 00000000 0x0 0x0
0xffffba8000023c00 0001 00000000 0x0 0x0
0xffffba8000023c80 0001 00000000 0x0 0x0
0xffffba8000023d00 0001 00000000 0x0 0x0
0xffffba8000023d80 0001 00000000 0x0 0x0
0xffffba8000023e00 0001 00000000 0x0 0x0
0xffffba8000023e80 0001 00000000 0x0 0x0
0xffffba8000023f00 0001 00000000 0x0 0x0
0xffffba8000023f80 0001 00000000 0x0 0x0
0xffffba8000024000 0001 00000000 0x0 0x0
0xffffba8000024080 0001 00000000 0x0 0x0
0xffffba8000024100 0001 00000000 0x0 0x0
0xffffba8000024180 0001 00000000 0x0 0x0
0xffffba8000024200 0001 00000000 0x0 0x0
0xffffba8000024280 0001 00000000 0x0 0x0
0xffffba8000024300 0001 00000000 0x0 0x0
0xffffba8000024380 0001 00000000 0x0 0x0
0xffffba8000024400 0001 00000000 0x0 0x0
0xffffba8000024480 0001 00000000 0x0 0x0
0xffffba8000024500 0001 00000000 0x0 0x0
0xffffba8000024580 0001 00000000 0x0 0x0
0xffffba8000024600 0001 00000000 0x0 0x0
0xffffba8000024680 0001 00000000 0x0 0x0
0xffffba8000024700 0001 00000000 0x0 0x0
0xffffba8000024780 0001 00000000 0x0 0x0
0xffffba8000024800 0001 00000000 0x0 0x0
0xffffba8000024880 0001 00000000 0x0 0x0
0xffffba8000024900 0001 00000000 0x0 0x0
0xffffba8000024980 0001 00000000 0x0 0x0
0xffffba8000024a00 0001 00000000 0x0 0x0
0xffffba8000024a80 0001 00000000 0x0 0x0
0xffffba8000024b00 0001 00000000 0x0 0x0
0xffffba8000024b80 0001 00000000 0x0 0x0
0xffffba8000024c00 0001 00000000 0x0 0x0
0xffffba8000024c80 0001 00000000 0x0 0x0
0xffffba8000024d00 0001 00000000 0x0 0x0
0xffffba8000024d80 0001 00000000 0x0 0x0
0xffffba8000024e00 0001 00000000 0x0 0x0
0xffffba8000024e80 0001 00000000 0x0 0x0
0xffffba8000024f00 0001 00000000 0x0 0x0
0xffffba8000024f80 0001 00000000 0x0 0x0
0xffffba8000025000 0001 00000000 0x0 0x0
0xffffba8000025080 0001 00000000 0x0 0x0
0xffffba8000025100 0001 00000000 0x0 0x0
0xffffba8000025180 0001 00000000 0x0 0x0
0xffffba8000025200 0001 00000000 0x0 0x0
0xffffba8000025280 0001 00000000 0x0 0x0
0xffffba8000025300 0001 00000000 0x0 0x0
0xffffba8000025380 0001 00000000 0x0 0x0
0xffffba8000025400 0001 00000000 0x0 0x0
0xffffba8000025480 0001 00000000 0x0 0x0
0xffffba8000025500 0001 00000000 0x0 0x0
0xffffba8000025580 0001 00000000 0x0 0x0
0xffffba8000025600 0001 00000000 0x0 0x0
0xffffba8000025680 0001 00000000 0x0 0x0
0xffffba8000025700 0001 00000000 0x0 0x0
0xffffba8000025780 0001 00000000 0x0 0x0
0xffffba8000025800 0001 00000000 0x0 0x0
0xffffba8000025880 0001 00000000 0x0 0x0
0xffffba8000025900 0001 00000000 0x0 0x0
0xffffba8000025980 0001 00000000 0x0 0x0
0xffffba8000025a00 0001 00000000 0x0 0x0
0xffffba8000025a80 0001 00000000 0x0 0x0
0xffffba8000025b00 0001 00000000 0x0 0x0
0xffffba8000025b80 0001 00000000 0x0 0x0
0xffffba8000025c00 0001 00000000 0x0 0x0
0xffffba8000025c80 0001 00000000 0x0 0x0
0xffffba8000025d00 0001 00000000 0x0 0x0
0xffffba8000025d80 0001 00000000 0x0 0x0
0xffffba8000025e00 0001 00000000 0x0 0x0
0xffffba8000025e80 0001 00000000 0x0 0x0
0xffffba8000025f00 0001 00000000 0x0 0x0
0xffffba8000025f80 0001 00000000 0x0 0x0
0xffffba8000026000 0001 00000000 0x0 0x0
0xffffba8000026080 0001 00000000 0x0 0x0
0xffffba8000026100 0001 00000000 0x0 0x0
0xffffba8000026180 0001 00000000 0x0 0x0
0xffffba8000026200 0001 00000000 0x0 0x0
0xffffba8000026280 0001 00000000 0x0 0x0
0xffffba8000026300 0001 00000000 0x0 0x0
0xffffba8000026380 0001 00000000 0x0 0x0
0xffffba8000026400 0001 00000000 0x0 0x0
0xffffba8000026480 0001 00000000 0x0 0x0
0xffffba8000026500 0001 00000000 0x0 0x0
0xffffba8000026580 0001 00000000 0x0 0x0
0xffffba8000026600 0001 00000000 0x0 0x0
0xffffba8000026680 0001 00000000 0x0 0x0
0xffffba8000026700 0001 00000000 0x0 0x0
0xffffba8000026780 0001 00000000 0x0 0x0
0xffffba8000026800 0001 00000000 0x0 0x0
0xffffba8000026880 0001 00000000 0x0 0x0
0xffffba8000026900 0001 00000000 0x0 0x0
0xffffba8000026980 0001 00000000 0x0 0x0
0xffffba8000026a00 0001 00000000 0x0 0x0
0xffffba8000026a80 0001 00000000 0x0 0x0
0xffffba8000026b00 0001 00000000 0x0 0x0
0xffffba8000026b80 0001 00000000 0x0 0x0
0xffffba8000026c00 0001 00000000 0x0 0x0
0xffffba8000026c80 0001 00000000 0x0 0x0
0xffffba8000026d00 0001 00000000 0x0 0x0
0xffffba8000026d80 0001 00000000 0x0 0x0
0xffffba8000026e00 0001 00000000 0x0 0x0
0xffffba8000026e80 0001 00000000 0x0 0x0
0xffffba8000026f00 0001 00000000 0x0 0x0
0xffffba8000026f80 0001 00000000 0x0 0x0
0xffffba8000027000 0001 00000000 0x0 0x0
0xffffba8000027080 0001 00000000 0x0 0x0
0xffffba8000027100 0001 00000000 0x0 0x0
0xffffba8000027180 0001 00000000 0x0 0x0
0xffffba8000027200 0001 00000000 0x0 0x0
0xffffba8000027280 0001 00000000 0x0 0x0
0xffffba8000027300 0001 00000000 0x0 0x0
0xffffba8000027380 0001 00000000 0x0 0x0
0xffffba8000027400 0001 00000000 0x0 0x0
0xffffba8000027480 0001 00000000 0x0 0x0
0xffffba8000027500 0001 00000000 0x0 0x0
0xffffba8000027580 0001 00000000 0x0 0x0
0xffffba8000027600 0001 00000000 0x0 0x0
0xffffba8000027680 0001 00000000 0x0 0x0
0xffffba8000027700 0001 00000000 0x0 0x0
0xffffba8000027780 0001 00000000 0x0 0x0
0xffffba8000027800 0001 00000000 0x0 0x0
0xffffba8000027880 0001 00000000 0x0 0x0
0xffffba8000027900 0001 00000000 0x0 0x0
0xffffba8000027980 0001 00000000 0x0 0x0
0xffffba8000027a00 0001 00000000 0x0 0x0
0xffffba8000027a80 0001 00000000 0x0 0x0
0xffffba8000027b00 0001 00000000 0x0 0x0
0xffffba8000027b80 0001 00000000 0x0 0x0
0xffffba8000027c00 0001 00000000 0x0 0x0
0xffffba8000027c80 0001 00000000 0x0 0x0
0xffffba8000027d00 0001 00000000 0x0 0x0
0xffffba8000027d80 0001 00000000 0x0 0x0
0xffffba8000027e00 0001 00000000 0x0 0x0
0xffffba8000027e80 0001 00000000 0x0 0x0
0xffffba8000027f00 0001 00000000 0x0 0x0
0xffffba8000027f80 0001 00000000 0x0 0x0
0xffffba8000028000 0001 00000000 0x0 0x0
0xffffba8000028080 0001 00000000 0x0 0x0
0xffffba8000028100 0001 00000000 0x0 0x0
0xffffba8000028180 0001 00000000 0x0 0x0
0xffffba8000028200 0001 00000000 0x0 0x0
0xffffba8000028280 0001 00000000 0x0 0x0
0xffffba8000028300 0001 00000000 0x0 0x0
0xffffba8000028380 0001 00000000 0x0 0x0
0xffffba8000028400 0001 00000000 0x0 0x0
0xffffba8000028480 0001 00000000 0x0 0x0
0xffffba8000028500 0001 00000000 0x0 0x0
0xffffba8000028580 0001 00000000 0x0 0x0
0xffffba8000028600 0001 00000000 0x0 0x0
0xffffba8000028680 0001 00000000 0x0 0x0
0xffffba8000028700 0001 00000000 0x0 0x0
0xffffba8000028780 0001 00000000 0x0 0x0
0xffffba8000028800 0001 00000000 0x0 0x0
0xffffba8000028880 0001 00000000 0x0 0x0
0xffffba8000028900 0001 00000000 0x0 0x0
0xffffba8000028980 0001 00000000 0x0 0x0
0xffffba8000028a00 0001 00000000 0x0 0x0
0xffffba8000028a80 0001 00000000 0x0 0x0
0xffffba8000028b00 0001 00000000 0x0 0x0
0xffffba8000028b80 0001 00000000 0x0 0x0
0xffffba8000028c00 0001 00000000 0x0 0x0
0xffffba8000028c80 0001 00000000 0x0 0x0
0xffffba8000028d00 0001 00000000 0x0 0x0
0xffffba8000028d80 0001 00000000 0x0 0x0
0xffffba8000028e00 0001 00000000 0x0 0x0
0xffffba8000028e80 0001 00000000 0x0 0x0
0xffffba8000028f00 0001 00000000 0x0 0x0
0xffffba8000028f80 0001 00000000 0x0 0x0
0xffffba8000029000 0001 00000000 0x0 0x0
0xffffba8000029080 0001 00000000 0x0 0x0
0xffffba8000029100 0001 00000000 0x0 0x0
0xffffba8000029180 0001 00000000 0x0 0x0
0xffffba8000029200 0001 00000000 0x0 0x0
0xffffba8000029280 0001 00000000 0x0 0x0
0xffffba8000029300 0001 00000000 0x0 0x0
0xffffba8000029380 0001 00000000 0x0 0x0
0xffffba8000029400 0001 00000000 0x0 0x0
0xffffba8000029480 0001 00000000 0x0 0x0
0xffffba8000029500 0001 00000000 0x0 0x0
0xffffba8000029580 0001 00000000 0x0 0x0
0xffffba8000029600 0001 00000000 0x0 0x0
0xffffba8000029680 0001 00000000 0x0 0x0
0xffffba8000029700 0001 00000000 0x0 0x0
0xffffba8000029780 0001 00000000 0x0 0x0
0xffffba8000029800 0001 00000000 0x0 0x0
0xffffba8000029880 0001 00000000 0x0 0x0
0xffffba8000029900 0001 00000000 0x0 0x0
0xffffba8000029980 0001 00000000 0x0 0x0
0xffffba8000029a00 0001 00000000 0x0 0x0
0xffffba8000029a80 0001 00000000 0x0 0x0
0xffffba8000029b00 0001 00000000 0x0 0x0
0xffffba8000029b80 0001 00000000 0x0 0x0
0xffffba8000029c00 0001 00000000 0x0 0x0
0xffffba8000029c80 0001 00000000 0x0 0x0
0xffffba8000029d00 0001 00000000 0x0 0x0
0xffffba8000029d80 0001 00000000 0x0 0x0
0xffffba8000029e00 0001 00000000 0x0 0x0
0xffffba8000029e80 0001 00000000 0x0 0x0
0xffffba8000029f00 0001 00000000 0x0 0x0
0xffffba8000029f80 0001 00000000 0x0 0x0
0xffffba800002a000 0001 00000000 0x0 0x0
0xffffba800002a080 0001 00000000 0x0 0x0
0xffffba800002a100 0001 00000000 0x0 0x0
0xffffba800002a180 0001 00000000 0x0 0x0
0xffffba800002a200 0001 00000000 0x0 0x0
0xffffba800002a280 0001 00000000 0x0 0x0
0xffffba800002a300 0001 00000000 0x0 0x0
0xffffba800002a380 0001 00000000 0x0 0x0
0xffffba800002a400 0001 00000000 0x0 0x0
0xffffba800002a480 0001 00000000 0x0 0x0
0xffffba800002a500 0001 00000000 0x0 0x0
0xffffba800002a580 0001 00000000 0x0 0x0
0xffffba800002a600 0001 00000000 0x0 0x0
0xffffba800002a680 0001 00000000 0x0 0x0
0xffffba800002a700 0001 00000000 0x0 0x0
0xffffba800002a780 0001 00000000 0x0 0x0
0xffffba800002a800 0001 00000000 0x0 0x0
0xffffba800002a880 0001 00000000 0x0 0x0
0xffffba800002a900 0001 00000000 0x0 0x0
0xffffba800002a980 0001 00000000 0x0 0x0
0xffffba800002aa00 0001 00000000 0x0 0x0
0xffffba800002aa80 0001 00000000 0x0 0x0
0xffffba800002ab00 0001 00000000 0x0 0x0
0xffffba800002ab80 0001 00000000 0x0 0x0
0xffffba800002ac00 0001 00000000 0x0 0x0
0xffffba800002ac80 0001 00000000 0x0 0x0
0xffffba800002ad00 0001 00000000 0x0 0x0
0xffffba800002ad80 0001 00000000 0x0 0x0
0xffffba800002ae00 0001 00000000 0x0 0x0
0xfff

---
This report is generated by a bot. It may contain errors.
See https://goo.gl/tpsmEJ for more information about syzbot.
syzbot engineers can be reached at syzk...@googlegroups.com.

syzbot will keep track of this issue. See:
https://goo.gl/tpsmEJ#status for how to communicate with syzbot.

Chuck Silvers

unread,
Dec 29, 2020, 10:28:10 AM12/29/20
to syzbot, syzkaller-...@googlegroups.com
#syz dup: assert failed: semcnt >= 0
Reply all
Reply to author
Forward
0 new messages