panic: Skernel diagnostic assertion "lwpcnt >= 0" failed: file "/syzkaller/managers/netbsd/kernel/sys/kern/kern_uidinfo.

1 view
Skip to first unread message

syzbot

unread,
Sep 6, 2019, 3:14:06 AM9/6/19
to syzkaller-...@googlegroups.com
Hello,

syzbot found the following crash on:

HEAD commit: 4a7c5d4c Catch up with RTC-related DTS changes for the H3,..
git tree: netbsd
console output: https://syzkaller.appspot.com/x/log.txt?x=11e11b2a600000
dashboard link: https://syzkaller.appspot.com/bug?extid=a47b12da76eaa1404992

Unfortunately, I don't have any reproducer for this crash yet.

IMPORTANT: if you fix the bug, please add the following tag to the commit:
Reported-by: syzbot+a47b12...@syzkaller.appspotmail.com

[ 51.6500090] panic: Skernel diagnostic assertion "lwpcnt >= 0" failed:
file "/syzkaller/managers/netbsd/kernel/sys/kern/kern_uidinfo.c", line 225
[ 51.6700440] cepu1: Begin traceback...
p 6 07:13:50 ci2-netbsd-4 dhcpcd[267]: route socket overflowed - learning
interface state
[ 51.6800361] vpanic() at netbsd:vpanic+0x267 sys/kern/subr_prf.c:336
[ 51.7200822] _GLOBAL__sub_D_65535_0_cpu_configure() at
netbsd:_GLOBAL__sub_D_65535_0_cpu_configure
[ 51.7601391] chglwpcnt() at netbsd:chglwpcnt+0x67
sys/kern/kern_uidinfo.c:226
[ 51.8001962] lwp_free() at netbsd:lwp_free+0x10b sys/kern/kern_lwp.c:1210
[ 51.8402530] lwp_wait() at netbsd:lwp_wait+0x13f sys/kern/kern_lwp.c:565
[ 51.8803102] exit_lwps() at netbsd:exit_lwps+0x205
sys/kern/kern_exit.c:633
[ 51.9203666] exit1() at netbsd:exit1+0x725 sys/kern/kern_exit.c:221
[ 51.9604252] sys_exit() at netbsd:sys_exit+0x77 sys/kern/kern_exit.c:179
[ 52.0004799] syscall() at netbsd:syscall+0x3ac sy_call
sys/sys/syscallvar.h:65 [inline]
[ 52.0004799] syscall() at netbsd:syscall+0x3ac sy_invoke
sys/sys/syscallvar.h:94 [inline]
[ 52.0004799] syscall() at netbsd:syscall+0x3ac
sys/arch/x86/x86/syscall.c:138
[ 52.0104942] --- syscall (number 1) ---
[ 52.0305247] 7e2fc7799a6a:
[ 52.0305247] cpu1: End traceback...
[ 52.0405353] fatal breakpoint trap in supervisor mode
[ 52.0405353] trap type 1 code 0 rip 0xffffffff8021ccdd cs 0x8 rflags
0x246 cr2 0x752ac9f0e000 ilevel 0 rsp 0xffff9c816ec638c0
[ 52.0505483] curlwp 0xffff9c8012a19720 pid 496.1 lowest kstack
0xffff9c816ec5c2c0
Stopped in pid 496.1 (syz-executor.1) at netbsd:breakpoint+0x5:
leave
?
breakpoint() at netbsd:breakpoint+0x5
db_panic() at netbsd:db_panic+0xf9 sys/ddb/db_panic.c:67
vpanic() at netbsd:vpanic+0x267 sys/kern/subr_prf.c:336
_GLOBAL__sub_D_65535_0_cpu_configure() at
netbsd:_GLOBAL__sub_D_65535_0_cpu_configure
chglwpcnt() at netbsd:chglwpcnt+0x67 sys/kern/kern_uidinfo.c:226
lwp_free() at netbsd:lwp_free+0x10b sys/kern/kern_lwp.c:1210
lwp_wait() at netbsd:lwp_wait+0x13f sys/kern/kern_lwp.c:565
exit_lwps() at netbsd:exit_lwps+0x205 sys/kern/kern_exit.c:633
exit1() at netbsd:exit1+0x725 sys/kern/kern_exit.c:221
sys_exit() at netbsd:sys_exit+0x77 sys/kern/kern_exit.c:179
syscall() at netbsd:syscall+0x3ac sy_call sys/sys/syscallvar.h:65 [inline]
syscall() at netbsd:syscall+0x3ac sy_invoke sys/sys/syscallvar.h:94 [inline]
syscall() at netbsd:syscall+0x3ac sys/arch/x86/x86/syscall.c:138
--- syscall (number 1) ---
7e2fc7799a6a:
ds 0
es 1
fs 537d
gs 764a
rdi ffff9c800d926458
rsi ffff9c8012a19a08
rbp ffff9c816ec638c0
rbx ffff9c816d892000
rdx 2
rcx ffffffff80ce807b db_panic+0xe5
rax 0
r8 4
r9 ffffffff82a98123 db_onpanic+0x3
r10 1ffffffff0553024
r11 10
r12 ffff9c816d8a4000
r13 ffffffff82180840 __func__.6052+0x7e0
r14 ffff9c816ec63950
r15 ffff9c816d892058
rip ffffffff8021ccdd breakpoint+0x5
cs 8
rflags 246
rsp ffff9c816ec638c0
ss 10
netbsd:breakpoint+0x5: leave
PID LID S CPU FLAGS STRUCT LWP * NAME WAIT
130 1 2 0 2 ffff9c8012a192e0 syz-executor.5
743 4 2 0 0 ffff9c80137ef920 syz-executor.0
743 3 2 0 0 ffff9c801376d900 syz-executor.0
743 2 2 0 0 ffff9c80136ab4a0 syz-executor.0
743 1 2 0 0 ffff9c801376d4c0 syz-executor.0
630 2 2 0 0 ffff9c801376d080 syz-executor.2
630 1 2 0 0 ffff9c80136ab8e0 syz-executor.2
168 1 2 1 0 ffff9c801203a6c0 ifconfig
496 4 5 1 100000 ffff9c801203a280 syz-executor.1
496 > 1 7 1 0 ffff9c8012a19720 syz-executor.1
664 1 2 0 40000 ffff9c80137ef4e0 syz-executor.5
571 1 3 1 80 ffff9c80129f0700 syz-executor.3 wait
564 1 2 1 0 ffff9c80129f0b40 syz-executor.2
593 1 2 1 0 ffff9c8011f7cac0 syz-executor.1
41 1 2 0 0 ffff9c80136ab060 syz-executor.0
537 12 3 0 80 ffff9c8011fe3ae0 syz-fuzzer parked
537 11 3 0 80 ffff9c8013687480 syz-fuzzer parked
537 10 3 1 80 ffff9c80136878c0 syz-fuzzer parked
537 9 3 0 80 ffff9c8012a19b60 syz-fuzzer parked
537 8 3 0 80 ffff9c8013687040 syz-fuzzer parked
537 7 3 0 80 ffff9c8013681bc0 syz-fuzzer parked
537 6 2 1 0 ffff9c8013681780 syz-fuzzer
537 5 3 0 80 ffff9c80129f02c0 syz-fuzzer kqueue
537 4 3 0 80 ffff9c8013681340 syz-fuzzer parked
537 3 3 1 80 ffff9c80130e1ba0 syz-fuzzer parked
537 2 3 1 80 ffff9c80130e1760 syz-fuzzer parked
537 1 3 0 80 ffff9c80120a52a0 syz-fuzzer parked
588 1 3 0 80 ffff9c8011fe36a0 sshd select
575 1 3 1 80 ffff9c8011f7c680 getty nanoslp
490 1 3 1 80 ffff9c8011f7c240 getty nanoslp
467 1 3 0 80 ffff9c8011fe3260 getty nanoslp
574 1 3 0 80 ffff9c8011f4b200 getty ttyraw
503 1 3 1 80 ffff9c8012f67300 cron nanoslp
462 1 3 0 80 ffff9c80130e1320 inetd kqueue
358 1 3 1 80 ffff9c8012f67b80 sshd select
405 1 3 1 80 ffff9c8012f67740 powerd kqueue
316 1 3 1 80 ffff9c80120a5b20 syslogd kqueue
267 1 3 1 80 ffff9c801203ab00 dhcpcd kqueue
218 1 3 1 80 ffff9c80120a56e0 dhcpcd kqueue
1 1 3 1 80 ffff9c8011f03620 init wait
0 58 3 1 204 ffff9c8011f4b640 physiod physiod
0 57 3 0 204 ffff9c8011f4e220 pooldrain pooldrain
0 56 3 0 204 ffff9c8011f4eaa0 aiodoned aiodoned
0 55 3 0 200 ffff9c8011f4e660 ioflush syncer
0 54 3 0 200 ffff9c8011f4ba80 pgdaemon pgdaemon
0 51 2 1 200 ffff9c8011f03a60 npfgc-0
0 50 3 0 204 ffff9c8011f031e0 rt_free rt_free
0 49 3 0 204 ffff9c8011efca40 unpgc unpgc
0 48 2 1 200 ffff9c8011efc600 key_timehandler
0 47 3 1 204 ffff9c8011efc1c0 icmp6_wqinput/1
icmp6_wqinput
0 46 3 0 204 ffff9c8011daba20 icmp6_wqinput/0
icmp6_wqinput
0 45 2 1 200 ffff9c8011da9160 nd6_timer
0 44 3 1 204 ffff9c8011da95a0 carp6_wqinput/1
carp6_wqinput
0 43 3 0 204 ffff9c8011da99e0 carp6_wqinput/0
carp6_wqinput
0 42 3 1 204 ffff9c8011daa180 carp_wqinput/1
carp_wqinput
0 41 3 0 204 ffff9c8011daa5c0 carp_wqinput/0
carp_wqinput
0 40 3 1 204 ffff9c8011daaa00 icmp_wqinput/1
icmp_wqinput
0 39 3 0 204 ffff9c8011dab1a0 icmp_wqinput/0
icmp_wqinput
0 38 2 1 200 ffff9c800f6ca9c0 rt_timer
0 37 3 0 204 ffff9c8011dab5e0 vmem_rehash vmem_rehash
0 27 3 0 204 ffff9c800f6ca580 scsibus0 sccomp
0 26 3 0 200 ffff9c800f6ca140 pms0 pmsreset
0 25 3 1 204 ffff9c800f6a59a0 xcall/1 xcall
0 24 1 1 200 ffff9c800f6a5560 softser/1
0 23 1 1 200 ffff9c800f6a5120 softclk/1
0 22 1 1 200 ffff9c800f6a1980 softbio/1
0 21 1 1 200 ffff9c800f6a1540 softnet/1
0 20 1 1 201 ffff9c800f6a1100 idle/1
0 19 3 0 204 ffff9c800de59960 lnxpwrwq lnxpwrwq
0 18 3 0 204 ffff9c800de59520 lnxlngwq lnxlngwq
0 17 3 0 204 ffff9c800de590e0 lnxsyswq lnxsyswq
0 16 3 0 204 ffff9c800de53940 lnxrcugc lnxrcugc
0 15 3 0 204 ffff9c800de53500 sysmon smtaskq
0 14 3 0 204 ffff9c800de530c0 pmfsuspend pmfsuspend
0 13 3 0 204 ffff9c800de49920 pmfevent pmfevent
0 12 3 0 204 ffff9c800de494e0 sopendfree sopendfr
0 11 3 0 204 ffff9c800de490a0 nfssilly nfssilly
0 > 10 7 0 200 ffff9c800de40900 cachegc
0 9 2 1 200 ffff9c800de404c0 vdrain
0 8 3 0 200 ffff9c800de40080 modunload mod_unld
0 7 3 0 204 ffff9c800de318e0 xcall/0 xcall
0 6 1 0 200 ffff9c800de314a0 softser/0
0 5 1 0 200 ffff9c800de31060 softclk/0
0 4 1 0 200 ffff9c800de2c8c0 softbio/0
0 3 1 0 200 ffff9c800de2c480 softnet/0
0 2 1 0 201 ffff9c800de2c040 idle/0
0 1 2 1 200 ffffffff82b5faa0 swapper
[Locks tracked through LWPs]
Locks held by an LWP (syz-executor.0):
Lock 0 (initialized at lwp_ctl_alloc)
lock address : 0xffff9c80137544a0 type : sleep/adaptive
initialized : 0xffffffff8113cd40
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
current cpu : 1 last held: 1
current lwp : 0xffff9c8012a19720 last held: 0xffff9c801376d4c0
last locked* : 0xffffffff8113c84b unlocked : 000000000000000000
owner field : 000000000000000000 wait/spin: 0/0

Turnstile chain at 0xffffffff82d77140.
=> No active turnstile for this lock.

Locks held by an LWP (syz-executor.1):
Lock 0 (initialized at fork1)
lock address : 0xffff9c80136cb4c0 type : sleep/adaptive
initialized : 0xffffffff8112eefb
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
current cpu : 1 last held: 1
current lwp : 0xffff9c8012a19720 last held: 0xffff9c8012a19720
last locked* : 0xffffffff8114045b unlocked : 0xffffffff8113f5cd
owner field : 0xffff9c8012a19720 wait/spin: 0/0

Turnstile chain at 0xffffffff82d77180.
=> No active turnstile for this lock.

Locks held by an LWP (syz-executor.5):
Lock 0 (initialized at kcov_open)
lock address : 0xffff9c80137ee7c8 type : sleep/adaptive
initialized : 0xffffffff811c71af
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
current cpu : 1 last held: 0
current lwp : 0xffff9c8012a19720 last held: 0xffff9c80137ef4e0
last locked* : 0xffffffff811c736e unlocked : 000000000000000000
owner field : 000000000000000000 wait/spin: 0/0

Turnstile chain at 0xffffffff82d77390.
=> No active turnstile for this lock.
Lock 1 (initialized at uvm_obj_init)
lock address : 0xffff9c8013749d00 type : sleep/adaptive
initialized : 0xffffffff810dc8c3
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
current cpu : 1 last held: 0
current lwp : 0xffff9c8012a19720 last held: 0xffff9c80137ef4e0
last locked* : 0xffffffff810c174b unlocked : 0xffffffff810be528
owner field : 000000000000000000 wait/spin: 0/0

Turnstile chain at 0xffffffff82d77200.
=> No active turnstile for this lock.


[Locks tracked through CPUs]
Locks held on CPU 0:
Lock 0 (initialized at main)
lock address : 0xffffffff82d75980 type : spin
initialized : 0xffffffff81a049b6
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
current cpu : 1 last held: 0
current lwp : 0xffff9c8012a19720 last held: 0xffff9c800de314a0
last locked* : 0xffffffff8117862a unlocked : 0xffffffff8119403b
curcpu holds : 0 wanted by: 000000000000000000


PAGE FLAG PQ UOBJECT UANON
0xffff9c8000014180 0048 0000 0x0 0x0
0xffff9c80000141f8 0048 0000 0x0 0x0
0xffff9c8000014270 0048 0000 0x0 0x0
0xffff9c80000142e8 0048 0000 0x0 0x0
0xffff9c8000014360 0048 0000 0x0 0x0
0xffff9c80000143d8 0048 0000 0x0 0x0
0xffff9c8000014450 0040 0000 0x0 0x0
0xffff9c80000144c8 0048 0000 0x0 0x0
0xffff9c8000014540 0040 0000 0x0 0x0
0xffff9c80000145b8 0040 0000 0x0 0x0
0xffff9c8000014630 0040 0000 0x0 0x0
0xffff9c80000146a8 0040 0000 0x0 0x0
0xffff9c8000014720 0040 0000 0x0 0x0
0xffff9c8000014798 0048 0000 0x0 0x0
0xffff9c8000014810 0048 0000 0x0 0x0
0xffff9c8000014888 0040 0000 0x0 0x0
0xffff9c8000014900 0048 0000 0x0 0x0
0xffff9c8000014978 0048 0000 0x0 0x0
0xffff9c80000149f0 0048 0000 0x0 0x0
0xffff9c8000014a68 0048 0000 0x0 0x0
0xffff9c8000014ae0 0048 0000 0x0 0x0
0xffff9c8000014b58 0040 0000 0x0 0x0
0xffff9c8000014bd0 0048 0000 0x0 0x0
0xffff9c8000014c48 0048 0000 0x0 0x0
0xffff9c8000014cc0 0048 0000 0x0 0x0
0xffff9c8000014d38 0048 0000 0x0 0x0
0xffff9c8000014db0 0048 0000 0x0 0x0
0xffff9c8000014e28 0048 0000 0x0 0x0
0xffff9c8000014ea0 0048 0000 0x0 0x0
0xffff9c8000014f18 0048 0000 0x0 0x0
0xffff9c8000014f90 0040 0000 0x0 0x0
0xffff9c8000015008 0048 0000 0x0 0x0
0xffff9c8000015080 0048 0000 0x0 0x0
0xffff9c80000150f8 0048 0000 0x0 0x0
0xffff9c8000015170 0048 0000 0x0 0x0
0xffff9c80000151e8 0048 0000 0x0 0x0
0xffff9c8000015260 0048 0000 0x0 0x0
0xffff9c80000152d8 0048 0000 0x0 0x0
0xffff9c8000015350 0048 0000 0x0 0x0
0xffff9c80000153c8 0048 0000 0x0 0x0
0xffff9c8000015440 0048 0000 0x0 0x0
0xffff9c80000154b8 0048 0000 0x0 0x0
0xffff9c8000015530 0048 0000 0x0 0x0
0xffff9c80000155a8 0048 0000 0x0 0x0
0xffff9c8000015620 0048 0000 0x0 0x0
0xffff9c8000015698 0048 0000 0x0 0x0
0xffff9c8000015710 0048 0000 0x0 0x0
0xffff9c8000015788 0048 0000 0x0 0x0
0xffff9c8000015800 0048 0000 0x0 0x0
0xffff9c8000015878 0048 0000 0x0 0x0
0xffff9c80000158f0 0048 0000 0x0 0x0
0xffff9c8000015968 0048 0000 0x0 0x0
0xffff9c80000159e0 0048 0000 0x0 0x0
0xffff9c8000015a58 0048 0000 0x0 0x0
0xffff9c8000015ad0 0048 0000 0x0 0x0
0xffff9c8000015b48 0048 0000 0x0 0x0
0xffff9c8000015bc0 0048 0000 0x0 0x0
0xffff9c8000015c38 0048 0000 0x0 0x0
0xffff9c8000015cb0 0048 0000 0x0 0x0
0xffff9c8000015d28 0040 0000 0x0 0x0
0xffff9c8000015da0 0041 0000 0x0 0x0
0xffff9c8000015e18 0048 0000 0x0 0x0
0xffff9c8000015e90 0048 0000 0x0 0x0
0xffff9c8000015f08 0048 0000 0x0 0x0
0xffff9c8000015f80 0048 0000 0x0 0x0
0xffff9c8000015ff8 0048 0000 0x0 0x0
0xffff9c8000016070 0040 0000 0x0 0x0
0xffff9c80000160e8 0041 0000 0x0 0x0
0xffff9c8000016160 0041 0000 0x0 0x0
0xffff9c80000161d8 0041 0000 0x0 0x0
0xffff9c8000016250 0048 0000 0x0 0x0
0xffff9c80000162c8 0048 0000 0x0 0x0
0xffff9c8000016340 0040 0000 0x0 0x0
0xffff9c80000163b8 0040 0000 0x0 0x0
0xffff9c8000016430 0041 0000 0x0 0x0
0xffff9c80000164a8 0041 0000 0x0 0x0
0xffff9c8000016520 0048 0000 0x0 0x0
0xffff9c8000016598 0041 0000 0x0 0x0
0xffff9c8000016610 0048 0000 0x0 0x0
0xffff9c8000016688 0048 0000 0x0 0x0
0xffff9c8000016700 0041 0000 0x0 0x0
0xffff9c8000016778 0041 0000 0x0 0x0
0xffff9c80000167f0 0041 0000 0x0 0x0
0xffff9c8000016868 0048 0000 0x0 0x0
0xffff9c80000168e0 0048 0000 0x0 0x0
0xffff9c8000016958 0048 0000 0x0 0x0
0xffff9c80000169d0 0048 0000 0x0 0x0
0xffff9c8000016a48 0040 0000 0x0 0x0
0xffff9c8000016ac0 0041 0000 0x0 0x0
0xffff9c8000016b38 0041 0000 0x0 0x0
0xffff9c8000016bb0 0048 0000 0x0 0x0
0xffff9c8000016c28 0048 0000 0x0 0x0
0xffff9c8000016ca0 0048 0000 0x0 0x0
0xffff9c8000016d18 0048 0000 0x0 0x0
0xffff9c8000016d90 0041 0000 0x0 0x0
0xffff9c8000016e08 0041 0000 0x0 0x0
0xffff9c8000016e80 0048 0000 0x0 0x0
0xffff9c8000016ef8 0048 0000 0x0 0x0
0xffff9c8000016f70 0048 0000 0x0 0x0
0xffff9c8000016fe8 0048 0000 0x0 0x0
0xffff9c8000017060 0048 0000 0x0 0x0
0xffff9c80000170d8 0048 0000 0x0 0x0
0xffff9c8000017150 0041 0000 0x0 0x0
0xffff9c80000171c8 0041 0000 0x0 0x0
0xffff9c8000017240 0048 0000 0x0 0x0
0xffff9c80000172b8 0048 0000 0x0 0x0
0xffff9c8000017330 0048 0000 0x0 0x0
0xffff9c80000173a8 0048 0000 0x0 0x0
0xffff9c8000017420 0048 0000 0x0 0x0
0xffff9c8000017498 0048 0000 0x0 0x0
0xffff9c8000017510 0048 0000 0x0 0x0
0xffff9c8000017588 0048 0000 0x0 0x0
0xffff9c8000017600 0048 0000 0x0 0x0
0xffff9c8000017678 0048 0000 0x0 0x0
0xffff9c80000176f0 0048 0000 0x0 0x0
0xffff9c8000017768 0048 0000 0x0 0x0
0xffff9c80000177e0 0048 0000 0x0 0x0
0xffff9c8000017858 0048 0000 0x0 0x0
0xffff9c80000178d0 0048 0000 0x0 0x0
0xffff9c8000017948 0048 0000 0x0 0x0
0xffff9c80000179c0 0048 0000 0x0 0x0
0xffff9c8000017a38 0048 0000 0x0 0x0
0xffff9c8000017ab0 0048 0000 0x0 0x0
0xffff9c8000017b28 0048 0000 0x0 0x0
0xffff9c8000017ba0 0048 0000 0x0 0x0
0xffff9c8000017c18 0048 0000 0x0 0x0
0xffff9c8000017c90 0048 0000 0x0 0x0
0xffff9c8000017d08 0048 0000 0x0 0x0
0xffff9c8000017d80 0048 0000 0x0 0x0
0xffff9c8000017df8 0048 0000 0x0 0x0
0xffff9c8000017e70 0048 0000 0x0 0x0
0xffff9c8000017ee8 0048 0000 0x0 0x0
0xffff9c8000017f60 0048 0000 0x0 0x0
0xffff9c8000017fd8 0048 0000 0x0 0x0
0xffff9c8000018050 0048 0000 0x0 0x0
0xffff9c80000180c8 0048 0000 0x0 0x0
0xffff9c8000018140 0048 0000 0x0 0x0
0xffff9c80000181b8 0048 0000 0x0 0x0
0xffff9c8000018230 0048 0000 0x0 0x0
0xffff9c80000182a8 0048 0000 0x0 0x0
0xffff9c8000018320 0048 0000 0x0 0x0
0xffff9c8000018398 0048 0000 0x0 0x0
0xffff9c8000018410 0048 0000 0x0 0x0
0xffff9c8000018488 0048 0000 0x0 0x0
0xffff9c8000018500 0048 0000 0x0 0x0
0xffff9c8000018578 0048 0000 0x0 0x0
0xffff9c80000185f0 0048 0000 0x0 0x0
0xffff9c8000018668 0048 0000 0x0 0x0
0xffff9c80000186e0 0048 0000 0x0 0x0
0xffff9c8000018758 0048 0000 0x0 0x0
0xffff9c80000187d0 0048 0000 0x0 0x0
0xffff9c8000018848 0048 0000 0x0 0x0
0xffff9c80000188c0 0048 0000 0x0 0x0
0xffff9c8000018938 0048 0000 0x0 0x0
0xffff9c80000189b0 0048 0000 0x0 0x0
0xffff9c8000018a28 0048 0000 0x0 0x0
0xffff9c8000018aa0 0048 0000 0x0 0x0
0xffff9c8000018b18 0048 0000 0x0 0x0
0xffff9c8000018b90 0048 0000 0x0 0x0
0xffff9c8000018c08 0048 0000 0x0 0x0
0xffff9c8000018c80 0048 0000 0x0 0x0
0xffff9c8000018cf8 0048 0000 0x0 0x0
0xffff9c8000018d70 0048 0000 0x0 0x0
0xffff9c8000018de8 0048 0000 0x0 0x0
0xffff9c8000018e60 0048 0000 0x0 0x0
0xffff9c8000018ed8 0048 0000 0x0 0x0
0xffff9c8000018f50 0048 0000 0x0 0x0
0xffff9c8000018fc8 0048 0000 0x0 0x0
0xffff9c8000019040 0048 0000 0x0 0x0
0xffff9c80000190b8 0048 0000 0x0 0x0
0xffff9c8000019130 0048 0000 0x0 0x0
0xffff9c80000191a8 0048 0000 0x0 0x0
0xffff9c8000019220 0048 0000 0x0 0x0
0xffff9c8000019298 0048 0000 0x0 0x0
0xffff9c8000019310 0048 0000 0x0 0x0
0xffff9c8000019388 0048 0000 0x0 0x0
0xffff9c8000019400 0048 0000 0x0 0x0
0xffff9c8000019478 0048 0000 0x0 0x0
0xffff9c80000194f0 0008 0000 0x0 0x0
0xffff9c8000019568 0008 0000 0x0 0x0
0xffff9c80000195e0 0008 0000 0x0 0x0
0xffff9c8000019658 0008 0000 0x0 0x0
0xffff9c80000196d0 0008 0000 0x0 0x0
0xffff9c8000019748 0008 0000 0x0 0x0
0xffff9c80000197c0 0008 0000 0x0 0x0
0xffff9c8000019838 0008 0000 0x0 0x0
0xffff9c80000198b0 0008 0000 0x0 0x0
0xffff9c8000019928 0008 0000 0x0 0x0
0xffff9c80000199a0 0008 0000 0x0 0x0
0xffff9c8000019a18 0008 0000 0x0 0x0
0xffff9c8000019a90 0008 0000 0x0 0x0
0xffff9c8000019b08 0008 0000 0x0 0x0
0xffff9c8000019b80 0008 0000 0x0 0x0
0xffff9c8000019bf8 0008 0000 0x0 0x0
0xffff9c8000019c70 0008 0000 0x0 0x0
0xffff9c8000019ce8 0008 0000 0x0 0x0
0xffff9c8000019d60 0008 0000 0x0 0x0
0xffff9c8000019dd8 0008 0000 0x0 0x0
0xffff9c8000019e50 0008 0000 0x0 0x0
0xffff9c8000019ec8 0008 0000 0x0 0x0
0xffff9c8000019f40 0008 0000 0x0 0x0
0xffff9c8000019fb8 0008 0000 0x0 0x0
0xffff9c800001a030 0008 0000 0x0 0x0
0xffff9c800001a0a8 0008 0000 0x0 0x0
0xffff9c800001a120 0008 0000 0x0 0x0
0xffff9c800001a198 0008 0000 0x0 0x0
0xffff9c800001a210 0008 0000 0x0 0x0
0xffff9c800001a288 0008 0000 0x0 0x0
0xffff9c800001a300 0008 0000 0x0 0x0
0xffff9c800001a378 0008 0000 0x0 0x0
0xffff9c800001a3f0 0008 0000 0x0 0x0
0xffff9c800001a468 0008 0000 0x0 0x0
0xffff9c800001a4e0 0008 0000 0x0 0x0
0xffff9c800001a558 0008 0000 0x0 0x0
0xffff9c800001a5d0 0008 0000 0x0 0x0
0xffff9c800001a648 0008 0000 0x0 0x0
0xffff9c800001a6c0 0008 0000 0x0 0x0
0xffff9c800001a738 0008 0000 0x0 0x0
0xffff9c800001a7b0 0008 0000 0x0 0x0
0xffff9c800001a828 0008 0000 0x0 0x0
0xffff9c800001a8a0 0008 0000 0x0 0x0
0xffff9c800001a918 0008 0000 0x0 0x0
0xffff9c800001a990 0008 0000 0x0 0x0
0xffff9c800001aa08 0008 0000 0x0 0x0
0xffff9c800001aa80 0008 0000 0x0 0x0
0xffff9c800001aaf8 0008 0000 0x0 0x0
0xffff9c800001ab70 0008 0000 0x0 0x0
0xffff9c800001abe8 0008 0000 0x0 0x0
0xffff9c800001ac60 0008 0000 0x0 0x0
0xffff9c800001acd8 0008 0000 0x0 0x0
0xffff9c800001ad50 0008 0000 0x0 0x0
0xffff9c800001adc8 0008 0000 0x0 0x0
0xffff9c800001ae40 0048 0000 0x0 0x0
0xffff9c800001aeb8 0048 0000 0x0 0x0
0xffff9c800001af30 0048 0000 0x0 0x0
0xffff9c800001afa8 0048 0000 0x0 0x0
0xffff9c800001b020 0048 0000 0x0 0x0
0xffff9c800001b098 0048 0000 0x0 0x0
0xffff9c800001b110 0048 0000 0x0 0x0
0xffff9c800001b188 0048 0000 0x0 0x0
0xffff9c800001b200 0048 0000 0x0 0x0
0xffff9c800001b278 0048 0000 0x0 0x0
0xffff9c800001b2f0 0048 0000 0x0 0x0
0xffff9c800001b368 0048 0000 0x0 0x0
0xffff9c800001b3e0 0048 0000 0x0 0x0
0xffff9c800001b458 0048 0000 0x0 0x0
0xffff9c800001b4d0 0048 0000 0x0 0x0
0xffff9c800001b548 0048 0000 0x0 0x0
0xffff9c800001b5c0 0048 0000 0x0 0x0
0xffff9c800001b638 0048 0000 0x0 0x0
0xffff9c800001b6b0 0048 0000 0x0 0x0
0xffff9c800001b728 0048 0000 0x0 0x0
0xffff9c800001b7a0 0048 0000 0x0 0x0
0xffff9c800001b818 0048 0000 0x0 0x0
0xffff9c800001b890 0048 0000 0x0 0x0
0xffff9c800001b908 0048 0000 0x0 0x0
0xffff9c800001b980 0048 0000 0x0 0x0
0xffff9c800001b9f8 0048 0000 0x0 0x0
0xffff9c800001ba70 0048 0000 0x0 0x0
0xffff9c800001bae8 0048 0000 0x0 0x0
0xffff9c800001bb60 0048 0000 0x0 0x0
0xffff9c800001bbd8 0048 0000 0x0 0x0
0xffff9c800001bc50 0048 0000 0x0 0x0
0xffff9c800001bcc8 0048 0000 0x0 0x0
0xffff9c800001bd40 0048 0000 0x0 0x0
0xffff9c800001bdb8 0048 0000 0x0 0x0
0xffff9c800001be30 0048 0000 0x0 0x0
0xffff9c800001bea8 0048 0000 0x0 0x0
0xffff9c800001bf20 0048 0000 0x0 0x0
0xffff9c800001bf98 0048 0000 0x0 0x0
0xffff9c800001c010 0048 0000 0x0 0x0
0xffff9c800001c088 0048 0000 0x0 0x0
0xffff9c800001c100 0048 0000 0x0 0x0
0xffff9c800001c178 0048 0000 0x0 0x0
0xffff9c800001c1f0 0048 0000 0x0 0x0
0xffff9c800001c268 0008 0000 0x0 0x0
0xffff9c800001c2e0 0008 0000 0x0 0x0
0xffff9c800001c358 0008 0000 0x0 0x0
0xffff9c800001c3d0 0008 0000 0x0 0x0
0xffff9c800001c448 0008 0000 0x0 0x0
0xffff9c800001c4c0 0008 0000 0x0 0x0
0xffff9c800001c538 0008 0000 0x0 0x0
0xffff9c800001c5b0 0008 0000 0x0 0x0
0xffff9c800001c628 0008 0000 0x0 0x0
0xffff9c800001c6a0 0008 0000 0x0 0x0
0xffff9c800001c718 0008 0000 0x0 0x0
0xffff9c800001c790 0008 0000 0x0 0x0
0xffff9c800001c808 0008 0000 0x0 0x0
0xffff9c800001c880 0008 0000 0x0 0x0
0xffff9c800001c8f8 0008 0000 0x0 0x0
0xffff9c800001c970 0008 0000 0x0 0x0
0xffff9c800001c9e8 0008 0000 0x0 0x0
0xffff9c800001ca60 0008 0000 0x0 0x0
0xffff9c800001cad8 0008 0000 0x0 0x0
0xffff9c800001cb50 0008 0000 0x0 0x0
0xffff9c800001cbc8 0008 0000 0x0 0x0
0xffff9c800001cc40 0008 0000 0x0 0x0
0xffff9c800001ccb8 0008 0000 0x0 0x0
0xffff9c800001cd30 0008 0000 0x0 0x0
0xffff9c800001cda8 0008 0000 0x0 0x0
0xffff9c800001ce20 0008 0000 0x0 0x0
0xffff9c800001ce98 0008 0000 0x0 0x0
0xffff9c800001cf10 0008 0000 0x0 0x0
0xffff9c800001cf88 0008 0000 0x0 0x0
0xffff9c800001d000 0008 0000 0x0 0x0
0xffff9c800001d078 0008 0000 0x0 0x0
0xffff9c800001d0f0 0008 0000 0x0 0x0
0xffff9c800001d168 0008 0000 0x0 0x0
0xffff9c800001d1e0 0008 0000 0x0 0x0
0xffff9c800001d258 0008 0000 0x0 0x0
0xffff9c800001d2d0 0008 0000 0x0 0x0
0xffff9c800001d348 0008 0000 0x0 0x0
0xffff9c800001d3c0 0008 0000 0x0 0x0
0xffff9c800001d438 0008 0000 0x0 0x0
0xffff9c800001d4b0 0008 0000 0x0 0x0
0xffff9c800001d528 0008 0000 0x0 0x0
0xffff9c800001d5a0 0008 0000 0x0 0x0
0xffff9c800001d618 0008 0000 0x0 0x0
0xffff9c800001d690 0008 0000 0x0 0x0
0xffff9c800001d708 0008 0000 0x0 0x0
0xffff9c800001d780 0008 0000 0x0 0x0
0xffff9c800001d7f8 0008 0000 0x0 0x0
0xffff9c800001d870 0008 0000 0x0 0x0
0xffff9c800001d8e8 0008 0000 0x0 0x0
0xffff9c800001d960 0008 0000 0x0 0x0
0xffff9c800001d9d8 0008 0000 0x0 0x0
0xffff9c800001da50 0008 0000 0x0 0x0
0xffff9c800001dac8 0008 0000 0x0 0x0
0xffff9c800001db40 0008 0000 0x0 0x0
0xffff9c800001dbb8 0048 0000 0x0 0x0
0xffff9c800001dc30 0048 0000 0x0 0x0
0xffff9c800001dca8 0048 0000 0x0 0x0
0xffff9c800001dd20 0048 0000 0x0 0x0
0xffff9c800001dd98 0048 0000 0x0 0x0
0xffff9c800001de10 0048 0000 0x0 0x0
0xffff9c800001de88 0048 0000 0x0 0x0
0xffff9c800001df00 0048 0000 0x0 0x0
0xffff9c800001df78 0048 0000 0x0 0x0
0xffff9c800001dff0 0048 0000 0x0 0x0
0xffff9c800001e068 0048 0000 0x0 0x0
0xffff9c800001e0e0 0048 0000 0x0 0x0
0xffff9c800001e158 0048 0000 0x0 0x0
0xffff9c800001e1d0 0048 0000 0x0 0x0
0xffff9c800001e248 0048 0000 0x0 0x0
0xffff9c800001e2c0 0048 0000 0x0 0x0
0xffff9c800001e338 0048 0000 0x0 0x0
0xffff9c800001e3b0 0048 0000 0x0 0x0
0xffff9c800001e428 0048 0000 0x0 0x0
0xffff9c800001e4a0 0048 0000 0x0 0x0
0xffff9c800001e518 0048 0000 0x0 0x0
0xffff9c800001e590 0048 0000 0x0 0x0
0xffff9c800001e608 0048 0000 0x0 0x0
0xffff9c800001e680 0048 0000 0x0 0x0
0xffff9c800001e6f8 0048 0000 0x0 0x0
0xffff9c800001e770 0048 0000 0x0 0x0
0xffff9c800001e7e8 0048 0000 0x0 0x0
0xffff9c800001e860 0048 0000 0x0 0x0
0xffff9c800001e8d8 0048 0000 0x0 0x0
0xffff9c800001e950 0048 0000 0x0 0x0
0xffff9c800001e9c8 0048 0000 0x0 0x0
0xffff9c800001ea40 0048 0000 0x0 0x0
0xffff9c800001eab8 0048 0000 0x0 0x0
0xffff9c800001eb30 0048 0000 0x0 0x0
0xffff9c800001eba8 0048 0000 0x0 0x0
0xffff9c800001ec20 0040 0000 0x0 0x0
0xffff9c800001ec98 0048 0000 0x0 0x0
0xffff9c800001ed10 0048 0000 0x0 0x0
0xffff9c800001ed88 0048 0000 0x0 0x0
0xffff9c800001ee00 0048 0000 0x0 0x0
0xffff9c800001ee78 0048 0000 0x0 0x0
0xffff9c800001eef0 0048 0000 0x0 0x0
0xffff9c800001ef68 0048 0000 0x0 0x0
0xffff9c800001efe0 0040 0000 0x0 0x0
0xffff9c800001f058 0040 0000 0x0 0x0
0xffff9c800001f0d0 0048 0000 0x0 0x0
0xffff9c800001f148 0048 0000 0x0 0x0
0xffff9c800001f1c0 0048 0000 0x0 0x0
0xffff9c800001f238 0008 0000 0x0 0x0
0xffff9c800001f2b0 0008 0000 0x0 0x0
0xffff9c800001f328 0008 0000 0x0 0x0
0xffff9c800001f3a0 0008 0000 0x0 0x0
0xffff9c800001f418 0008 0000 0x0 0x0
0xffff9c800001f490 0008 0000 0x0 0x0
0xffff9c800001f508 0008 0000 0x0 0x0
0xffff9c800001f580 0008 0000 0x0 0x0
0xffff9c800001f5f8 0008 0000 0x0 0x0
0xffff9c800001f670 0008 0000 0x0 0x0
0xffff9c800001f6e8 0008 0000 0x0 0x0
0xffff9c800001f760 0008 0000 0x0 0x0
0xffff9c800001f7d8 0008 0000 0x0 0x0
0xffff9c800001f850 0008 0000 0x0 0x0
0xffff9c800001f8c8 0008 0000 0x0 0x0
0xffff9c800001f940 0008 0000 0x0 0x0
0xffff9c800001f9b8 0008 0000 0x0 0x0
0xffff9c800001fa30 0008 0000 0x0 0x0
0xffff9c800001faa8 0008 0000 0x0 0x0
0xffff9c800001fb20 0008 0000 0x0 0x0
0xffff9c800001fb98 0008 0000 0x0 0x0
0xffff9c800001fc10 0008 0000 0x0 0x0
0xffff9c800001fc88 0008 0000 0x0 0x0
0xffff9c800001fd00 0008 0000 0x0 0x0
0xffff9c800001fd78 0008 0000 0x0 0x0
0xffff9c800001fdf0 0008 0000 0x0 0x0
0xffff9c800001fe68 0008 0000 0x0 0x0
0xffff9c800001fee0 0008 0000 0x0 0x0
0xffff9c800001ff58 0008 0000 0x0 0x0
0xffff9c800001ffd0 0008 0000 0x0 0x0
0xffff9c8000020048 0008 0000 0x0 0x0
0xffff9c80000200c0 0008 0000 0x0 0x0
0xffff9c8000020138 0008 0000 0x0 0x0
0xffff9c80000201b0 0008 0000 0x0 0x0
0xffff9c8000020228 0008 0000 0x0 0x0
0xffff9c80000202a0 0008 0000 0x0 0x0
0xffff9c8000020318 0008 0000 0x0 0x0
0xffff9c8000020390 0008 0000 0x0 0x0
0xffff9c8000020408 0008 0000 0x0 0x0
0xffff9c8000020480 0008 0000 0x0 0x0
0xffff9c80000204f8 0008 0000 0x0 0x0
0xffff9c8000020570 0008 0000 0x0 0x0
0xffff9c80000205e8 0008 0000 0x0 0x0
0xffff9c8000020660 0008 0000 0x0 0x0
0xffff9c80000206d8 0008 0000 0x0 0x0
0xffff9c8000020750 0008 0000 0x0 0x0
0xffff9c80000207c8 0008 0000 0x0 0x0
0xffff9c8000020840 0008 0000 0x0 0x0
0xffff9c80000208b8 0008 0000 0x0 0x0
0xffff9c8000020930 0008 0000 0x0 0x0
0xffff9c80000209a8 0008 0000 0x0 0x0
0xffff9c8000020a20 0008 0000 0x0 0x0
0xffff9c8000020a98 0008 0000 0x0 0x0
0xffff9c8000020b10 0008 0000 0x0 0x0
0xffff9c8000020b88 0040 0000 0x0 0x0
0xffff9c8000020c00 0040 0000 0x0 0x0
0xffff9c8000020c78 0040 0000 0x0 0x0
0xffff9c8000020cf0 0040 0000 0x0 0x0
0xffff9c8000020d68 0040 0000 0x0 0x0
0xffff9c8000020de0 0040 0000 0x0 0x0
0xffff9c8000020e58 0040 0000 0x0 0x0
0xffff9c8000020ed0 0040 0000 0x0 0x0
0xffff9c8000020f48 0040 0000 0x0 0x0
0xffff9c8000020fc0 0040 0000 0x0 0x0
0xffff9c8000021038 0040 0000 0x0 0x0
0xffff9c80000210b0 0040 0000 0x0 0x0
0xffff9c8000021128 0040 0000 0x0 0x0
0xffff9c80000211a0 0040 0000 0x0 0x0
0xffff9c8000021218 0040 0000 0x0 0x0
0xffff9c8000021290 0040 0000 0x0 0x0
0xffff9c8000021308 0040 0000 0x0 0x0
0xffff9c8000021380 0040 0000 0x0 0x0
0xffff9c80000213f8 0040 0000 0x0 0x0
0xffff9c8000021470 0040 0000 0x0 0x0
0xffff9c80000214e8 0040 0000 0x0 0x0
0xffff9c8000021560 0040 0000 0x0 0x0
0xffff9c80000215d8 0040 0000 0x0 0x0
0xffff9c8000021650 0040 0000 0x0 0x0
0xffff9c80000216c8 0040 0000 0x0 0x0
0xffff9c8000021740 0040 0000 0x0 0x0
0xffff9c80000217b8 0040 0000 0x0 0x0
0xffff9c8000021830 0040 0000 0x0 0x0
0xffff9c80000218a8 0040 0000 0x0 0x0
0xffff9c8000021920 0040 0000 0x0 0x0
0xffff9c8000021998 0040 0000 0x0 0x0
0xffff9c8000021a10 0040 0000 0x0 0x0
0xffff9c8000021a88 0040 0000 0x0 0x0
0xffff9c8000021b00 0040 0000 0x0 0x0
0xffff9c8000021b78 0040 0000 0x0 0x0
0xffff9c8000021bf0 0040 0000 0x0 0x0
0xffff9c8000021c68 0040 0000 0x0 0x0
0xffff9c8000021ce0 0040 0000 0x0 0x0
0xffff9c8000021d58 0040 0000 0x0 0x0
0xffff9c8000021dd0 0040 0000 0x0 0x0
0xffff9c8000021e48 0040 0000 0x0 0x0
0xffff9c8000021ec0 0040 0000 0x0 0x0
0xffff9c8000021f38 0040 0000 0x0 0x0
0xffff9c8000021fb0 0040 0000 0x0 0x0
0xffff9c8000022028 0040 0000 0x0 0x0
0xffff9c80000220a0 0040 0000 0x0 0x0
0xffff9c8000022118 0040 0000 0x0 0x0
0xffff9c8000022190 0040 0000 0x0 0x0
0xffff9c8000022208 0040 0000 0x0 0x0
0xffff9c8000022280 0040 0000 0x0 0x0
0xffff9c80000222f8 0040 0000 0x0 0x0
0xffff9c8000022370 0040 0000 0x0 0x0
0xffff9c80000223e8 0040 0000 0x0 0x0
0xffff9c8000022460 0048 0000 0x0 0x0
0xffff9c80000224d8 0040 0000 0x0 0x0
0xffff9c8000022550 0040 0000 0x0 0x0
0xffff9c80000225c8 0040 0000 0x0 0x0
0xffff9c8000022640 0040 0000 0x0 0x0
0xffff9c80000226b8 0040 0000 0x0 0x0
0xffff9c8000022730 0040 0000 0x0 0x0
0xffff9c80000227a8 0040 0000 0x0 0x0
0xffff9c8000022820 0048 0000 0x0 0x0
0xffff9c8000022898 0048 0000 0x0 0x0
0xffff9c8000022910 0040 0000 0x0 0x0
0xffff9c8000022988 0048 0000 0x0 0x0
0xffff9c8000022a00 0048 0000 0x0 0x0
0xffff9c8000022a78 0048 0000 0x0 0x0
0xffff9c8000022af0 0048 0000 0x0 0x0
0xffff9c8000022b68 0048 0000 0x0 0x0
0xffff9c8000022be0 0048 0000 0x0 0x0
0xffff9c8000022c58 0048 0000 0x0 0x0
0xffff9c8000022cd0 0040 0000 0x0 0x0
0xffff9c8000022d48 0048 0000 0x0 0x0
0xffff9c8000022dc0 0048 0000 0x0 0x0
0xffff9c8000022e38 0048 0000 0x0 0x0
0xffff9c8000022eb0 0048 0000 0x0 0x0
0xffff9c8000022f28 0048 0000 0x0 0x0
0xffff9c8000022fa0 0048 0000 0x0 0x0
0xffff9c8000023018 0048 0000 0x0 0x0
0xffff9c8000023090 0048 0000 0x0 0x0
0xffff9c8000023108 0048 0000 0x0 0x0
0xffff9c8000023180 0048 0000 0x0 0x0
0xffff9c80000231f8 0048 0000 0x0 0x0
0xffff9c8000023270 0048 0000 0x0 0x0
0xffff9c80000232e8 0048 0000 0x0 0x0
0xffff9c8000023360 0048 0000 0x0 0x0
0xffff9c80000233d8 0048 0000 0x0 0x0
0xffff9c8000023450 0048 0000 0x0 0x0
0xffff9c80000234c8 0048 0000 0x0 0x0
0xffff9c8000023540 0048 0000 0x0 0x0
0xffff9c80000235b8 0048 0000 0x0 0x0
0xffff9c8000023630 0048 0000 0x0 0x0
0xffff9c80000236a8 0048 0000 0x0 0x0
0xffff9c8000023720 0048 0000 0x0 0x0
0xffff9c8000023798 0048 0000 0x0 0x0
0xffff9c8000023810 0048 0000 0x0 0x0
0xffff9c8000023888 0048 0000 0x0 0x0
0xffff9c8000023900 0048 0000 0x0 0x0
0xffff9c8000023978 0048 0000 0x0 0x0
0xffff9c80000239f0 0048 0000 0x0 0x0
0xffff9c8000023a68 0048 0000 0x0 0x0
0xffff9c8000023ae0 0048 0000 0x0 0x0
0xffff9c8000023b58 0048 0000 0x0 0x0
0xffff9c8000023bd0 0048 0000 0x0 0x0
0xffff9c8000023c48 0048 0000 0x0 0x0
0xffff9c8000023cc0 0048 0000 0x0 0x0
0xffff9c8000023d38 0048 0000 0x0 0x0
0xffff9c8000023db0 0048 0000 0x0 0x0
0xffff9c8000023e28 0048 0000 0x0 0x0
0xffff9c8000023ea0 0048 0000 0x0 0x0
0xffff9c8000023f18 0048 0000 0x0 0x0
0xffff9c8000023f90 0048 0000 0x0 0x0
0xffff9c8000024008 0048 0000 0x0 0x0
0xffff9c8000024080 0048 0000 0x0 0x0
0xffff9c80000240f8 0048 0000 0x0 0x0
0xffff9c8000024170 0048 0000 0x0 0x0
0xffff9c80000241e8 0048 0000 0x0 0x0
0xffff9c8000024260 0048 0000 0x0 0x0
0xffff9c80000242d8 0048 0000 0x0 0x0
0xffff9c8000024350 0048 0000 0x0 0x0
0xffff9c80000243c8 0048 0000 0x0 0x0
0xffff9c8000024440 0048 0000 0x0 0x0
0xffff9c80000244b8 0048 0000 0x0 0x0
0xffff9c8000024530 0048 0000 0x0 0x0
0xffff9c80000245a8 0048 0000 0x0 0x0
0xffff9c8000024620 0048 0000 0x0 0x0
0xffff9c8000024698 0048 0000 0x0 0x0
0xffff9c8000024710 0048 0000 0x0 0x0
0xffff9c8000024788 0008 0000 0x0 0x0
0xffff9c8000024800 0008 0000 0x0 0x0
0xffff9c8000024878 0008 0000 0x0 0x0
0xffff9c80000248f0 0008 0000 0x0 0x0
0xffff9c8000024968 0008 0000 0x0 0x0
0xffff9c80000249e0 0008 0000 0x0 0x0
0xffff9c8000024a58 0008 0000 0x0 0x0
0xffff9c8000024ad0 0008 0000 0x0 0x0
0xffff9c8000024b48 0008 0000 0x0 0x0
0xffff9c8000024bc0 0008 0000 0x0 0x0
0xffff9c8000024c38 0008 0000 0x0 0x0
0xffff9c8000024cb0 0008 0000 0x0 0x0
0xffff9c8000024d28 0008 0000 0x0 0x0
0xffff9c8000024da0 0008 0000 0x0 0x0
0xffff9c8000024e18 0008 0000 0x0 0x0
0xffff9c8000024e90 0008 0000 0x0 0x0
0xffff9c8000024f08 0008 0000 0x0 0x0
0xffff9c8000024f80 0008 0000 0x0 0x0
0xffff9c8000024ff8 0008 0000 0x0 0x0
0xffff9c8000025070 0008 0000 0x0 0x0
0xffff9c80000250e8 0008 0000 0x0 0x0
0xffff9c8000025160 0008 0000 0x0 0x0
0xffff9c80000251d8 0008 0000 0x0 0x0
0xffff9c8000025250 0008 0000 0x0 0x0
0xffff9c80000252c8 0008 0000 0x0 0x0
0xffff9c8000025340 0008 0000 0x0 0x0
0xffff9c80000253b8 0008 0000 0x0 0x0
0xffff9c8000025430 0008 0000 0x0 0x0
0xffff9c80000254a8 0008 0000 0x0 0x0
0xffff9c8000025520 0008 0000 0x0 0x0
0xffff9c8000025598 0008 0000 0x0 0x0
0xffff9c8000025610 0008 0000 0x0 0x0
0xffff9c8000025688 0008 0000 0x0 0x0
0xffff9c8000025700 0008 0000 0x0 0x0
0xffff9c8000025778 0008 0000 0x0 0x0
0xffff9c80000257f0 0008 0000 0x0 0x0
0xffff9c8000025868 0008 0000 0x0 0x0
0xffff9c80000258e0 0008 0000 0x0 0x0
0xffff9c8000025958 0008 0000 0x0 0x0
0xffff9c80000259d0 0008 0000 0x0 0x0
0xffff9c8000025a48 0008 0000 0x0 0x0
0xffff9c8000025ac0 0008 0000 0x0 0x0
0xffff9c8000025b38 0008 0000 0x0 0x0
0xffff9c8000025bb0 0008 0000 0x0 0x0
0xffff9c8000025c28 0008 0000 0x0 0x0
0xffff9c8000025ca0 0008 0000 0x0 0x0
0xffff9c8000025d18 0008 0000 0x0 0x0
0xffff9c8000025d90 0008 0000 0x0 0x0
0xffff9c8000025e08 0008 0000 0x0 0x0
0xffff9c8000025e80 0008 0000 0x0 0x0
0xffff9c8000025ef8 0008 0000 0x0 0x0
0xffff9c8000025f70 0008 0000 0x0 0x0
0xffff9c8000025fe8 0008 0000 0x0 0x0
0xffff9c8000026060 0008 0000 0x0 0x0
0xffff9c80000260d8 0008 0000 0x0 0x0
0xffff9c8000026150 0008 0000 0x0 0x0
0xffff9c80000261c8 0008 0000 0x0 0x0
0xffff9c8000026240 0008 0000 0x0 0x0
0xffff9c80000262b8 0008 0000 0x0 0x0
0xffff9c8000026330 0008 0000 0x0 0x0
0xffff9c80000263a8 0008 0000 0x0 0x0
0xffff9c8000026420 0008 0000 0x0 0x0
0xffff9c8000026498 0008 0000 0x0 0x0
0xffff9c8000026510 0008 0000 0x0 0x0
0xffff9c8000026588 0008 0000 0x0 0x0
0xffff9c8000026600 0008 0000 0x0 0x0
0xffff9c8000026678 0008 0000 0x0 0x0
0xffff9c80000266f0 0008 0000 0x0 0x0
0xffff9c8000026768 0008 0000 0x0 0x0
0xffff9c80000267e0 0008 0000 0x0 0x0
0xffff9c8000026858 0008 0000 0x0 0x0
0xffff9c80000268d0 0008 0000 0x0 0x0
0xffff9c8000026948 0008 0000 0x0 0x0
0xffff9c80000269c0 0008 0000 0x0 0x0
0xffff9c8000026a38 0008 0000 0x0 0x0
0xffff9c8000026ab0 0008 0000 0x0 0x0
0xffff9c8000026b28 0008 0000 0x0 0x0
0xffff9c8000026ba0 0008 0000 0x0 0x0
0xffff9c8000026c18 0008 0000 0x0 0x0
0xffff9c8000026c90 0008 0000 0x0 0x0
0xffff9c8000026d08 0008 0000 0x0 0x0
0xffff9c8000026d80 0008 0000 0x0 0x0
0xffff9c8000026df8 0008 0000 0x0 0x0
0xffff9c8000026e70 0008 0000 0x0 0x0
0xffff9c8000026ee8 0008 0000 0x0 0x0
0xffff9c8000026f60 0008 0000 0x0 0x0
0xffff9c8000026fd8 0008 0000 0x0 0x0
0xffff9c8000027050 0008 0000 0x0 0x0
0xffff9c80000270c8 0008 0000 0x0 0x0
0xffff9c8000027140 0008 0000 0x0 0x0
0xffff9c80000271b8 0008 0000 0x0 0x0
0xffff9c8000027230 0008 0000 0x0 0x0
0xffff9c80000272a8 0008 0000 0x0 0x0
0xffff9c8000027320 0008 0000 0x0 0x0
0xffff9c8000027398 0008 0000 0x0 0x0
0xffff9c8000027410 0008 0000 0x0 0x0
0xffff9c8000027488 0008 0000 0x0 0x0
0xffff9c8000027500 0008 0000 0x0 0x0
0xffff9c8000027578 0008 0000 0x0 0x0
0xffff9c80000275f0 0008 0000 0x0 0x0
0xffff9c8000027668 0008 0000 0x0 0x0
0xffff9c80000276e0 0008 0000 0x0 0x0
0xffff9c8000027758 0008 0000 0x0 0x0
0xffff9c80000277d0 0008 0000 0x0 0x0
0xffff9c8000027848 0008 0000 0x0 0x0
0xffff9c80000278c0 0008 0000 0x0 0x0
0xffff9c8000027938 0008 0000 0x0 0x0
0xffff9c80000279b0 0008 0000 0x0 0x0
0xffff9c8000027a28 0008 0000 0x0 0x0
0xffff9c8000027aa0 0008 0000 0x0 0x0
0xffff9c8000027b18 0008 0000 0x0 0x0
0xffff9c8000027b90 0008 0000 0x0 0x0
0xffff9c8000027c08 0008 0000 0x0 0x0
0xffff9c8000027c80 0008 0000 0x0 0x0
0xffff9c8000027cf8 0008 0000 0x0 0x0
0xffff9c8000027d70 0008 0000 0x0 0x0
0xffff9c8000027de8 0008 0000 0x0 0x0
0xffff9c8000027e60 0008 0000 0x0 0x0
0xffff9c8000027ed8 0008 0000 0x0 0x0
0xffff9c8000027f50 0008 0000 0x0 0x0
0xffff9c8000027fc8 0008 0000 0x0 0x0
0xffff9c8000028040 0008 0000 0x0 0x0
0xffff9c80000280b8 0008 0000 0x0 0x0
0xffff9c8000028130 0008 0000 0x0 0x0
0xffff9c80000281a8 0008 0000 0x0 0x0
0xffff9c8000028220 0008 0000 0x0 0x0
0xffff9c8000028298 0008 0000 0x0 0x0
0xffff9c8000028310 0008 0000 0x0 0x0
0xffff9c8000028388 0008 0000 0x0 0x0
0xffff9c8000028400 0008 0000 0x0 0x0
0xffff9c8000028478 0008 0000 0x0 0x0
0xffff9c80000284f0 0008 0000 0x0 0x0
0xffff9c8000028568 0008 0000 0x0 0x0
0xffff9c80000285e0 0008 0000 0x0 0x0
0xffff9c8000028658 0008 0000 0x0 0x0
0xffff9c80000286d0 0008 0000 0x0 0x0
0xffff9c8000028748 0008 0000 0x0 0x0
0xffff9c80000287c0 0008 0000 0x0 0x0
0xffff9c8000028838 0008 0000 0x0 0x0
0xffff9c80000288b0 0008 0000 0x0 0x0
0xffff9c8000028928 0008 0000 0x0 0x0
0xffff9c80000289a0 0008 0000 0x0 0x0
0xffff9c8000028a18 0008 0000 0x0 0x0
0xffff9c8000028a90 0008 0000 0x0 0x0
0xffff9c8000028b08 0008 0000 0x0 0x0
0xffff9c8000028b80 0008 0000 0x0 0x0
0xffff9c8000028bf8 0008 0000 0x0 0x0
0xffff9c8000028c70 0008 0000 0x0 0x0
0xffff9c8000028ce8 0008 0000 0x0 0x0
0xffff9c8000028d60 0008 0000 0x0 0x0
0xffff9c8000028dd8 0008 0000 0x0 0x0
0xffff9c8000028e50 0008 0000 0x0 0x0
0xffff9c8000028ec8 0008 0000 0x0 0x0
0xffff9c8000028f40 0008 0000 0x0 0x0
0xffff9c8000028fb8 0008 0000 0x0 0x0
0xffff9c8000029030 0008 0000 0x0 0x0
0xffff9c80000290a8 0008 0000 0x0 0x0
0xffff9c8000029120 0008 0000 0x0 0x0
0xffff9c8000029198 0008 0000 0x0 0x0
0xffff9c8000029210 0008 0000 0x0 0x0
0xffff9c8000029288 0008 0000 0x0 0x0
0xffff9c8000029300 0008 0000 0x0 0x0
0xffff9c8000029378 0008 0000 0x0 0x0
0xffff9c80000293f0 0008 0000 0x0 0x0
0xffff9c8000029468 0008 0000 0x0 0x0
0xffff9c80000294e0 0008 0000 0x0 0x0
0xffff9c8000029558 0008 0000 0x0 0x0
0xffff9c80000295d0 0008 0000 0x0 0x0
0xffff9c8000029648 0008 0000 0x0 0x0
0xffff9c80000296c0 0008 0000 0x0 0x0
0xffff9c8000029738 0008 0000 0x0 0x0
0xffff9c80000297b0 0008 0000 0x0 0x0
0xffff9c8000029828 0008 0000 0x0 0x0
0xffff9c80000298a0 0008 0000 0x0 0x0
0xffff9c8000029918 0008 0000 0x0 0x0
0xffff9c8000029990 0008 0000 0x0 0x0
0xffff9c8000029a08 0008 0000 0x0 0x0
0xffff9c8000029a80 0008 0000 0x0 0x0
0xffff9c8000029af8 0008 0000 0x0 0x0
0xffff9c8000029b70 0008 0000 0x0 0x0
0xffff9c8000029be8 0008 0000 0x0 0x0
0xffff9c8000029c60 0008 0000 0x0 0x0
0xffff9c8000029cd8 0008 0000 0x0 0x0
0xffff9c8000029d50 0008 0000 0x0 0x0
0xffff9c8000029dc8 0008 0000 0x0 0x0
0xffff9c8000029e40 0008 0000 0x0 0x0
0xffff9c8000029eb8 0008 0000 0x0 0x0
0xffff9c8000029f30 0008 0000 0x0 0x0
0xffff9c8000029fa8 0008 0000 0x0 0x0
0xffff9c800002a020 0008 0000 0x0 0x0
0xffff9c800002a098 0008 0000 0x0 0x0
0xffff9c800002a110 0008 0000 0x0 0x0
0xffff9c800002a188 0008 0000 0x0 0x0
0xffff9c800002a200 0008 0000 0x0 0x0
0xffff9c800002a278 0008 0000 0x0 0x0
0xffff9c800002a2f0 0008 0000 0x0 0x0
0xffff9c800002a368 0008 0000 0x0 0x0
0xffff9c800002a3e0 0008 0000 0x0 0x0
0xffff9c800002a458 0008 0000 0x0 0x0
0xffff9c800002a4d0 0008 0000 0x0 0x0
0xffff9c800002a548 0008 0000 0x0 0x0
0xffff9c800002a5c0 0008 0000 0x0 0x0
0xffff9c800002a638 0008 0000 0x0 0x0
0xffff9c800002a6b0 0008 0000 0x0 0x0
0xffff9c800002a728 0008 0000 0x0 0x0
0xffff9c800002a7a0 0008 0000 0x0 0x0
0xffff9c800002a818 0008 0000 0x0 0x0
0xffff9c800002a890 0008 0000 0x0 0x0
0xffff9c800002a908 0008 0000 0x0 0x0
0xffff9c800002a980 0008 0000 0x0 0x0
0xffff9c800002a9f8 0008 0000 0x0 0x0
0xffff9c800002aa70 0008 0000 0x0 0x0
0xffff9c800002aae8 0008 0000 0x0 0x0
0xffff9c800002ab60 0008 0000 0x0 0x0
0xffff9c800002abd8 0008 0000 0x0 0x0
0xffff9c800002ac50 0008 0000 0x0 0x0
0xffff9c800002acc8 0008 0000 0x0 0x0
0xffff9c800002ad40 0008 0000 0x0 0x0
0xffff9c800002adb8 0008 0000 0x0 0x0
0xffff9c800002ae30 0008 0000 0x0 0x0
0xffff9c800002aea8 0008 0000 0x0 0x0
0xffff9c800002af20 0008 0000 0x0 0x0
0xffff9c800002af98 0008 0000 0x0 0x0
0xffff9c800002b010 0008 0000 0x0 0x0
0xffff9c800002b088 0008 0000 0x0 0x0
0xffff9c800002b100 0008 0000 0x0 0x0
0xffff9c800002b178 0008 0000 0x0 0x0
0xffff9c800002b1f0 0008 0000 0x0 0x0
0xffff9c800002b268 0008 0000 0x0 0x0
0xffff9c800002b2e0 0008 0000 0x0 0x0
0xffff9c800002b358 0008 0000 0x0 0x0
0xffff9c800002b3d0 0008 0000 0x0 0x0
0xffff9c800002b448 0008 0000 0x0

---
This bug is generated by a bot. It may contain errors.
See https://goo.gl/tpsmEJ for more information about syzbot.
syzbot engineers can be reached at syzk...@googlegroups.com.

syzbot will keep track of this bug report. See:
https://goo.gl/tpsmEJ#status for how to communicate with syzbot.

Maxime Villard

unread,
Sep 6, 2019, 10:14:30 AM9/6/19
to syzbot, syzkaller-...@googlegroups.com
#syz dup: assert failed: lwpcnt >= 0
Reply all
Reply to author
Forward
0 new messages