panic: ernel diagnostic assertion "lwpcnt >= NUM" failed: file "/syzkaller/managers/ci2-netbsd-kmsan/kernel/sys/kern/ker

[syzbot]

Hello,

syzbot found the following issue on:

HEAD commit: d7a86ca196fa Turn off AWIN_GMAC_MAC_CONF_ACS, so that all ..
git tree: netbsd
console output: https://syzkaller.appspot.com/x/log.txt?x=14139512080000
kernel config: https://syzkaller.appspot.com/x/.config?x=739e57438eb9ed9e
dashboard link: https://syzkaller.appspot.com/bug?extid=dd218b94de9ea192560a
compiler: Debian clang version 13.0.1-++20220126092033+75e33f71c2da-1~exp1~20220126212112.63

Unfortunately, I don't have any reproducer for this issue yet.

IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+dd218b...@syzkaller.appspotmail.com

[ 55.960k5148] panic: ernel diagnostic assertion "lwpcnt >= 0" failed: file "/syzkaller/managers/ci2-netbsd-kmsan/kernel/sys/kern/kern_uidinfo.c", line 259 uid=60928 diff=-1 lwpcnt=-1
[ 55.9804998] cpu1: Begin traceback...
[ 56.0005038] vpanic() at netbsd:vpanic+0xc9d
[ 56.0505004] kern_assert() at netbsd:kern_assert+0x228
[ 56.1004997] chglwpcnt() at netbsd:chglwpcnt+0x22e sys/kern/kern_uidinfo.c:258
[ 56.1504995] lwp_free() at netbsd:lwp_free+0x3ef
[ 56.2005010] lwp_wait() at netbsd:lwp_wait+0x13e5 sys/kern/kern_lwp.c:588
[ 56.2505027] exit_lwps() at netbsd:exit_lwps+0x703 sys/kern/kern_exit.c:651
[ 56.3005058] exit1() at netbsd:exit1+0x338 sys/kern/kern_exit.c:209
[ 56.3505014] sys_exit() at netbsd:sys_exit+0x1d6
[ 56.4105023] syscall() at netbsd:syscall+0x60c sy_invoke sys/sys/syscallvar.h:94 [inline]
[ 56.4105023] syscall() at netbsd:syscall+0x60c sys/arch/x86/x86/syscall.c:138
[ 56.4205053] --- syscall (number 1) ---
[ 56.4405011] netbsd:syscall+0x60c:
[ 56.4405011] cpu1: End traceback...
[ 56.4405011] fatal breakpoint trap in supervisor mode
[ 56.4505006] trap type 1 code 0 rip 0xffffffff802228ad cs 0x8 rflags 0x286 cr2 0x77c5607e9bd0 ilevel 0 rsp 0xffff9780d0ba9710
[ 56.4605014] curlwp 0xffff978013799b00 pid 1362.1362 lowest kstack 0xffff9780d0ba22c0
Stopped in pid 1362.1362 (syz-executor.2) at netbsd:breakpoint+0x5: leave
?
breakpoint() at netbsd:breakpoint+0x5
vpanic() at netbsd:vpanic+0xc9d
kern_assert() at netbsd:kern_assert+0x228
chglwpcnt() at netbsd:chglwpcnt+0x22e sys/kern/kern_uidinfo.c:258
lwp_free() at netbsd:lwp_free+0x3ef
lwp_wait() at netbsd:lwp_wait+0x13e5 sys/kern/kern_lwp.c:588
exit_lwps() at netbsd:exit_lwps+0x703 sys/kern/kern_exit.c:651
exit1() at netbsd:exit1+0x338 sys/kern/kern_exit.c:209
sys_exit() at netbsd:sys_exit+0x1d6
syscall() at netbsd:syscall+0x60c sy_invoke sys/sys/syscallvar.h:94 [inline]
syscall() at netbsd:syscall+0x60c sys/arch/x86/x86/syscall.c:138
--- syscall (number 1) ---
netbsd:syscall+0x60c:
Panic string: kernel diagnostic assertion "lwpcnt >= 0" failed: file "/syzkaller/managers/ci2-netbsd-kmsan/kernel/sys/kern/kern_uidinfo.c", line 259 uid=60928 diff=-1 lwpcnt=-1
PID LID S CPU FLAGS STRUCT LWP * NAME WAIT
1340 1244 3 0 0 ffff978013897700 syz-executor.4 tstile
1340 1083 3 0 180 ffff9780136cfa40 syz-executor.4 parked
1340 1333 3 0 0 ffff9780136cf600 syz-executor.4 tstile
1340 1199 2 1 0 ffff9780136cf1c0 syz-executor.4
1340 1340 2 0 10040000 ffff978013799280 syz-executor.4
1450 1450 2 1 40000 ffff978013778680 syz-executor.1
1256 1256 2 1 40000 ffff9780138972c0 syz-executor.0
1362 1407 5 0 100100 ffff9780138a9300 syz-executor.2
1362 >1362 7 1 10040000 ffff978013799b00 syz-executor.2
1361 451 3 0 180 ffff978013778ac0 syz-executor.3 parked
1361 1361 2 1 10040000 ffff9780137996c0 syz-executor.3
1236 1236 2 1 40 ffff9780135ce180 syz-executor.5
1129 1129 2 1 140 ffff9780135b5580 syz-executor.4
1255 1255 2 1 140 ffff97801353b980 syz-executor.3
1223 1223 2 1 140 ffff97801353b100 syz-executor.2
422 422 2 1 140 ffff9780133ab940 syz-executor.1
1086 1086 2 1 140 ffff9780133ab500 syz-executor.0
1054 1104 3 1 180 ffff9780135cea00 syz-fuzzer kqueue
1054 1130 3 0 180 ffff9780135ce5c0 syz-fuzzer wait
1054 989 3 0 180 ffff9780135b59c0 syz-fuzzer wait
1054 1103 3 0 180 ffff9780135b5140 syz-fuzzer parked
1054 1124 3 0 180 ffff97801353b540 syz-fuzzer wait
1054 1076 3 1 180 ffff9780133ab0c0 syz-fuzzer wait
1054 1080 3 1 180 ffff978012b87900 syz-fuzzer parked
1054 1222 3 0 180 ffff978012b874c0 syz-fuzzer parked
1054 1221 3 0 180 ffff978012b87080 syz-fuzzer wait
1054 1113 3 1 180 ffff978012aefbc0 syz-fuzzer parked
1054 1195 3 0 1c0 ffff9780123316c0 syz-fuzzer parked
1054 1192 3 0 180 ffff978012331280 syz-fuzzer parked
1054 1054 3 1 180 ffff97801229dac0 syz-fuzzer wait
1081 1081 3 1 180 ffff978012b5f8c0 sshd select
1072 1072 3 1 180 ffff978012b5f480 getty nanoslp
979 979 3 0 180 ffff97801229d680 getty nanoslp
1099 1099 3 0 180 ffff97801229d240 getty nanoslp
1254 1254 3 1 1c0 ffff97801219b600 getty ttyraw
1092 1092 3 1 180 ffff978012b5f040 sshd select
950 950 3 1 180 ffff97801242e700 powerd kqueue
690 690 3 1 180 ffff978012aef340 syslogd kqueue
602 602 3 0 180 ffff978012aef780 dhcpcd poll
547 547 3 0 180 ffff97801242eb40 dhcpcd poll
546 546 3 0 180 ffff9780124e1b80 dhcpcd poll
589 589 3 1 180 ffff97801242e2c0 dhcpcd poll
289 289 3 0 180 ffff9780124e1740 dhcpcd poll
288 288 3 0 180 ffff978012331b00 dhcpcd poll
351 351 3 0 180 ffff9780124e1300 dhcpcd poll
1 1 3 0 180 ffff978011ebd940 init wait
0 1197 3 0 200 ffff978013778240 ktrace ktrwait
0 462 5 1 40200 ffff978013897b40 (zombie)
0 968 3 0 200 ffff97801219ba40 physiod physiod
0 194 3 0 200 ffff9780121a4a80 pooldrain pooldrain
0 193 3 0 200 ffff9780121a4640 ioflush syncer
0 192 3 1 200 ffff9780121a4200 pgdaemon pgdaemon
0 169 3 1 200 ffff97801219b1c0 usb7 usbevt
0 167 3 1 200 ffff978012103a00 usb6 usbevt
0 165 3 1 200 ffff9780121035c0 usb5 usbevt
0 164 3 1 200 ffff978012103180 usb4 usbevt
0 31 3 0 200 ffff9780120699c0 usb3 usbevt
0 63 3 1 200 ffff978012069580 usb2 usbevt
0 126 3 1 200 ffff978012069140 usb1 usbevt
0 125 3 1 200 ffff978011ed0980 usb0 usbevt
0 124 3 1 200 ffff978011ed0540 usbtask-dr usbtsk
0 123 3 1 200 ffff9780117c46c0 usbtask-hc usbtsk
0 122 3 1 200 ffff978011ed0100 npfgc0 npfgcw
0 121 3 1 200 ffff978011ebd500 rt_free rt_free
0 120 3 1 200 ffff978011ebd0c0 unpgc unpgc
0 119 2 1 200 ffff978011eba900 key_timehandler
0 118 3 1 200 ffff978011eba4c0 icmp6_wqinput/1 icmp6_wqinput
0 117 3 0 200 ffff978011eba080 icmp6_wqinput/0 icmp6_wqinput
0 116 2 1 200 ffff978011e9b8c0 nd6_timer
0 115 3 1 200 ffff978011e9b480 carp6_wqinput/1 carp6_wqinput
0 114 3 0 200 ffff978011e9b040 carp6_wqinput/0 carp6_wqinput
0 113 3 1 200 ffff978011cc4b80 carp_wqinput/1 carp_wqinput
0 112 3 0 200 ffff978011cc4740 carp_wqinput/0 carp_wqinput
0 111 3 1 200 ffff978011cc4300 icmp_wqinput/1 icmp_wqinput
0 110 3 0 200 ffff978011cc5780 icmp_wqinput/0 icmp_wqinput
0 109 2 1 200 ffff978011cc5340 rt_timer
0 108 3 1 200 ffff978011cc5bc0 vmem_rehash vmem_rehash
0 99 3 0 200 ffff9780117c6b40 entbutler entropy
0 98 3 1 200 ffff9780117c6700 viomb balloon
0 97 3 1 200 ffff9780117c62c0 vioif0_txrx/1 vioif0_txrx
0 96 3 0 200 ffff9780117c4b00 vioif0_txrx/0 vioif0_txrx
0 29 3 0 200 ffff9780117c4280 scsibus0 sccomp
0 28 3 0 200 ffff9780103c0ac0 pms0 pmsreset
0 27 3 1 200 ffff9780103c0680 xcall/1 xcall
0 26 1 1 200 ffff9780103c0240 softser/1
0 25 1 1 200 ffff9780103bfa80 softclk/1
0 24 1 1 200 ffff9780103bf640 softbio/1
0 23 1 1 200 ffff9780103bf200 softnet/1
0 22 1 1 201 ffff97800f1f3a40 idle/1
0 21 3 0 200 ffff97800f1f3600 lnxsyswq lnxsyswq
0 20 3 0 200 ffff97800f1f31c0 lnxubdwq lnxubdwq
0 19 3 0 200 ffff97800f1f1a00 lnxpwrwq lnxpwrwq
0 18 3 0 200 ffff97800f1f15c0 lnxlngwq lnxlngwq
0 17 3 0 200 ffff97800f1f1180 lnxhipwq lnxhipwq
0 16 3 0 200 ffff97800f1ec9c0 lnxrcugc lnxrcugc
0 15 3 0 200 ffff97800f1ec580 sysmon smtaskq
0 14 3 0 200 ffff97800f1ec140 pmfsuspend pmfsuspend
0 13 3 0 200 ffff97800f1e8980 pmfevent pmfevent
0 12 3 0 200 ffff97800f1e8540 sopendfree sopendfr
0 11 3 0 200 ffff97800f1e8100 iflnkst iflnkst
0 10 3 0 200 ffff97800f1de940 nfssilly nfssilly
0 9 3 0 200 ffff97800f1de500 vdrain vdrain
0 8 3 1 200 ffff97800f1de0c0 modunload mod_unld
0 7 3 0 200 ffff97800ebdb900 xcall/0 xcall
0 6 1 0 200 ffff97800ebdb4c0 softser/0
0 5 1 0 200 ffff97800ebdb080 softclk/0
0 4 1 0 200 ffff97800ebd98c0 softbio/0
0 3 1 0 200 ffff97800ebd9480 softnet/0
0 2 1 0 201 ffff97800ebd9040 idle/0
0 > 0 7 0 240 ffffffff86869280 swapper
[Locks tracked through LWPs]

****** LWP 1340.1199 (syz-executor.4) @ 0xffff9780136cf1c0, l_stat=2

*** Locks held:

* Lock 0 (initialized at vcache_alloc)
lock address : 0xffff9780135def80 type : sleep/adaptive
initialized : 0xffffffff8569fa26
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 1
relevant lwp : 0xffff9780136cf1c0 last held: 0xffff9780136cf1c0
last locked* : 0xffffffff8572dcc6 unlocked : 0xffffffff8572e075
owner/count : 0xffff9780136cf1c0 flags : 0x0000000000000005
Turnstile:
=> 2 waiting readers: 0xffff978013897700 0xffff9780136cf600
=> 0 waiting writers:

*** Locks wanted: none

****** LWP 1362.1362 (syz-executor.2) @ 0xffff978013799b00, l_stat=7

*** Locks held:

* Lock 0 (initialized at fork1)
lock address : 0xffff978013529d00 type : sleep/adaptive
initialized : 0xffffffff8514591d
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 1
relevant lwp : 0xffff978013799b00 last held: 0xffff978013799b00
last locked* : 0xffffffff8517f654 unlocked : 0xffffffff851818b3
owner field : 0xffff978013799b00 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

*** Locks wanted: none

****** LWP 1361.1361 (syz-executor.3) @ 0xffff9780137996c0, l_stat=2

*** Locks held:

* Lock 0 (initialized at pmap_ctor)
lock address : 0xffff978012b7ee00 type : sleep/adaptive
initialized : 0xffffffff818f6570
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 1
relevant lwp : 0xffff9780137996c0 last held: 0xffff9780137996c0
last locked* : 0xffffffff81910d3d unlocked : 0xffffffff81916e69
owner field : 0xffff9780137996c0 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

*** Locks wanted: none

****** LWP 547.547 (dhcpcd) @ 0xffff97801242eb40, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at module_hook_init)
lock address : 0xffffffff868f7dc0 type : sleep/adaptive
initialized : 0xffffffff851a7c13
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffff97801242eb40 last held: 000000000000000000
last locked : 000000000000000000 unlocked*: 000000000000000000
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 546.546 (dhcpcd) @ 0xffff9780124e1b80, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at module_hook_init)
lock address : 0xffffffff868f7dc0 type : sleep/adaptive
initialized : 0xffffffff851a7c13
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffff9780124e1b80 last held: 000000000000000000
last locked : 000000000000000000 unlocked*: 000000000000000000
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 288.288 (dhcpcd) @ 0xffff978012331b00, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at module_hook_init)
lock address : 0xffffffff868f7dc0 type : sleep/adaptive
initialized : 0xffffffff851a7c13
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffff978012331b00 last held: 000000000000000000
last locked : 000000000000000000 unlocked*: 000000000000000000
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 351.351 (dhcpcd) @ 0xffff9780124e1300, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at module_hook_init)
lock address : 0xffffffff868f7dc0 type : sleep/adaptive
initialized : 0xffffffff851a7c13
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffff9780124e1300 last held: 000000000000000000
last locked : 000000000000000000 unlocked*: 000000000000000000
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 0.1197 (ktrace) @ 0xffff978013778240, l_stat=3

*** Locks held:

* Lock 0 (initialized at pool_init)
lock address : 0xffff978011e844f0 type : sleep/adaptive
initialized : 0xffffffff8539eab1
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffff978013778240 last held: 0xffff978013778240
last locked* : 0xffffffff853abeab unlocked : 0xffffffff853af153
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

*** Locks wanted: none

****** LWP 0.25 (softclk/1) @ 0xffff9780103bfa80, l_stat=1

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at module_hook_init)
lock address : 0xffffffff868f7dc0 type : sleep/adaptive
initialized : 0xffffffff851a7c13
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 0
relevant lwp : 0xffff9780103bfa80 last held: 000000000000000000
last locked : 000000000000000000 unlocked*: 000000000000000000
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 0.11 (iflnkst) @ 0xffff97800f1e8100, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at module_hook_init)
lock address : 0xffffffff868f7dc0 type : sleep/adaptive
initialized : 0xffffffff851a7c13
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffff97800f1e8100 last held: 000000000000000000
last locked : 000000000000000000 unlocked*: 000000000000000000
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

****** LWP 0.0 (swapper) @ 0xffffffff86869280, l_stat=7

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at module_hook_init)
lock address : 0xffffffff868f7dc0 type : sleep/adaptive
initialized : 0xffffffff851a7c13
shared holds : 0 exclusive: 0
shares wanted: 0 exclusive: 0
relevant cpu : 0 last held: 0
relevant lwp : 0xffffffff86869280 last held: 000000000000000000
last locked : 000000000000000000 unlocked*: 000000000000000000
owner field : 000000000000000000 wait/spin: 0/0
Turnstile: no active turnstile for this lock.

[Locks tracked through CPUs]

******* Locks held on cpu1:

* Lock 0 (initialized at kprintf_init)
lock address : 0xffffffff868aac00 type : spin
initialized : 0xffffffff853c51bc
shared holds : 0 exclusive: 1
shares wanted: 0 exclusive: 0
relevant cpu : 1 last held: 1
relevant lwp : 0xffff978013799b00 last held: 0xffff978013799b00
last locked* : 0xffffffff853c5fe4 unlocked : 0xffffffff853c69ee
owner field : 0x0000000000000800 wait/spin: 0/1

PAGE FLAG PQ UOBJECT UANON
0xffff978000017180 0001 00000000 0x0 0x0
0xffff978000017200 0041 00000000 0x0 0x0
0xffff978000017280 0041 00000000 0x0 0x0
0xffff978000017300 0041 00000000 0x0 0x0
0xffff978000017380 0041 00000000 0x0 0x0
0xffff978000017400 0041 00000000 0x0 0x0
0xffff978000017480 0041 00000000 0x0 0x0
0xffff978000017500 0041 00000000 0x0 0x0
0xffff978000017580 0041 00000000 0x0 0x0
0xffff978000017600 0041 00000000 0x0 0x0
0xffff978000017680 0041 00000000 0x0 0x0
0xffff978000017700 0041 00000000 0x0 0x0
0xffff978000017780 0041 00000000 0x0 0x0
0xffff978000017800 0041 00000000 0x0 0x0
0xffff978000017880 0041 00000000 0x0 0x0
0xffff978000017900 0041 00000000 0x0 0x0
0xffff978000017980 0041 00000000 0x0 0x0
0xffff978000017a00 0041 00000000 0x0 0x0
0xffff978000017a80 0041 00000000 0x0 0x0
0xffff978000017b00 0041 00000000 0x0 0x0
0xffff978000017b80 0041 00000000 0x0 0x0
0xffff978000017c00 0041 00000000 0x0 0x0
0xffff978000017c80 0041 00000000 0x0 0x0
0xffff978000017d00 0041 00000000 0x0 0x0
0xffff978000017d80 0041 00000000 0x0 0x0
0xffff978000017e00 0041 00000000 0x0 0x0
0xffff978000017e80 0041 00000000 0x0 0x0
0xffff978000017f00 0041 00000000 0x0 0x0
0xffff978000017f80 0041 00000000 0x0 0x0
0xffff978000018000 0041 00000000 0x0 0x0
0xffff978000018080 0041 00000000 0x0 0x0
0xffff978000018100 0041 00000000 0x0 0x0
0xffff978000018180 0041 00000000 0x0 0x0
0xffff978000018200 0041 00000000 0x0 0x0
0xffff978000018280 0041 00000000 0x0 0x0
0xffff978000018300 0041 00000000 0x0 0x0
0xffff978000018380 0041 00000000 0x0 0x0
0xffff978000018400 0041 00000000 0x0 0x0
0xffff978000018480 0041 00000000 0x0 0x0
0xffff978000018500 0041 00000000 0x0 0x0
0xffff978000018580 0041 00000000 0x0 0x0
0xffff978000018600 0041 00000000 0x0 0x0
0xffff978000018680 0041 00000000 0x0 0x0
0xffff978000018700 0041 00000000 0x0 0x0
0xffff978000018780 0041 00000000 0x0 0x0
0xffff978000018800 0041 00000000 0x0 0x0
0xffff978000018880 0041 00000000 0x0 0x0
0xffff978000018900 0041 00000000 0x0 0x0
0xffff978000018980 0041 00000000 0x0 0x0
0xffff978000018a00 0041 00000000 0x0 0x0
0xffff978000018a80 0041 00000000 0x0 0x0
0xffff978000018b00 0041 00000000 0x0 0x0
0xffff978000018b80 0041 00000000 0x0 0x0
0xffff978000018c00 0041 00000000 0x0 0x0
0xffff978000018c80 0041 00000000 0x0 0x0
0xffff978000018d00 0041 00000000 0x0 0x0
0xffff978000018d80 0041 00000000 0x0 0x0
0xffff978000018e00 0041 00000000 0x0 0x0
0xffff978000018e80 0041 00000000 0x0 0x0
0xffff978000018f00 0041 00000000 0x0 0x0
0xffff978000018f80 0041 00000000 0x0 0x0
0xffff978000019000 0041 00000000 0x0 0x0
0xffff978000019080 0041 00000000 0x0 0x0
0xffff978000019100 0041 00000000 0x0 0x0
0xffff978000019180 0041 00000000 0x0 0x0
0xffff978000019200 0041 00000000 0x0 0x0
0xffff978000019280 0041 00000000 0x0 0x0
0xffff978000019300 0041 00000000 0x0 0x0
0xffff978000019380 0041 00000000 0x0 0x0
0xffff978000019400 0041 00000000 0x0 0x0
0xffff978000019480 0041 00000000 0x0 0x0
0xffff978000019500 0041 00000000 0x0 0x0
0xffff978000019580 0041 00000000 0x0 0x0
0xffff978000019600 0041 00000000 0x0 0x0
0xffff978000019680 0041 00000000 0x0 0x0
0xffff978000019700 0041 00000000 0x0 0x0
0xffff978000019780 0041 00000000 0x0 0x0
0xffff978000019800 0041 00000000 0x0 0x0
0xffff978000019880 0041 00000000 0x0 0x0
0xffff978000019900 0041 00000000 0x0 0x0
0xffff978000019980 0041 00000000 0x0 0x0
0xffff978000019a00 0041 00000000 0x0 0x0
0xffff978000019a80 0041 00000000 0x0 0x0
0xffff978000019b00 0041 00000000 0x0 0x0
0xffff978000019b80 0041 00000000 0x0 0x0
0xffff978000019c00 0041 00000000 0x0 0x0
0xffff978000019c80 0041 00000000 0x0 0x0
0xffff978000019d00 0041 00000000 0x0 0x0
0xffff978000019d80 0041 00000000 0x0 0x0
0xffff978000019e00 0041 00000000 0x0 0x0
0xffff978000019e80 0041 00000000 0x0 0x0
0xffff978000019f00 0041 00000000 0x0 0x0
0xffff978000019f80 0041 00000000 0x0 0x0
0xffff97800001a000 0041 00000000 0x0 0x0
0xffff97800001a080 0041 00000000 0x0 0x0
0xffff97800001a100 0041 00000000 0x0 0x0
0xffff97800001a180 0041 00000000 0x0 0x0
0xffff97800001a200 0041 00000000 0x0 0x0
0xffff97800001a280 0041 00000000 0x0 0x0
0xffff97800001a300 0041 00000000 0x0 0x0
0xffff97800001a380 0041 00000000 0x0 0x0
0xffff97800001a400 0041 00000000 0x0 0x0
0xffff97800001a480 0041 00000000 0x0 0x0
0xffff97800001a500 0041 00000000 0x0 0x0
0xffff97800001a580 0041 00000000 0x0 0x0
0xffff97800001a600 0041 00000000 0x0 0x0
0xffff97800001a680 0041 00000000 0x0 0x0
0xffff97800001a700 0041 00000000 0x0 0x0
0xffff97800001a780 0041 00000000 0x0 0x0
0xffff97800001a800 0041 00000000 0x0 0x0
0xffff97800001a880 0041 00000000 0x0 0x0
0xffff97800001a900 0041 00000000 0x0 0x0
0xffff97800001a980 0041 00000000 0x0 0x0
0xffff97800001aa00 0041 00000000 0x0 0x0
0xffff97800001aa80 0041 00000000 0x0 0x0
0xffff97800001ab00 0041 00000000 0x0 0x0
0xffff97800001ab80 0041 00000000 0x0 0x0
0xffff97800001ac00 0041 00000000 0x0 0x0
0xffff97800001ac80 0041 00000000 0x0 0x0
0xffff97800001ad00 0041 00000000 0x0 0x0
0xffff97800001ad80 0041 00000000 0x0 0x0
0xffff97800001ae00 0041 00000000 0x0 0x0
0xffff97800001ae80 0041 00000000 0x0 0x0
0xffff97800001af00 0041 00000000 0x0 0x0
0xffff97800001af80 0041 00000000 0x0 0x0
0xffff97800001b000 0041 00000000 0x0 0x0
0xffff97800001b080 0041 00000000 0x0 0x0
0xffff97800001b100 0041 00000000 0x0 0x0
0xffff97800001b180 0041 00000000 0x0 0x0
0xffff97800001b200 0041 00000000 0x0 0x0
0xffff97800001b280 0041 00000000 0x0 0x0
0xffff97800001b300 0041 00000000 0x0 0x0
0xffff97800001b380 0041 00000000 0x0 0x0
0xffff97800001b400 0041 00000000 0x0 0x0
0xffff97800001b480 0041 00000000 0x0 0x0
0xffff97800001b500 0041 00000000 0x0 0x0
0xffff97800001b580 0041 00000000 0x0 0x0
0xffff97800001b600 0041 00000000 0x0 0x0
0xffff97800001b680 0041 00000000 0x0 0x0
0xffff97800001b700 0041 00000000 0x0 0x0
0xffff97800001b780 0041 00000000 0x0 0x0
0xffff97800001b800 0041 00000000 0x0 0x0
0xffff97800001b880 0041 00000000 0x0 0x0
0xffff97800001b900 0041 00000000 0x0 0x0
0xffff97800001b980 0041 00000000 0x0 0x0
0xffff97800001ba00 0041 00000000 0x0 0x0
0xffff97800001ba80 0041 00000000 0x0 0x0
0xffff97800001bb00 0041 00000000 0x0 0x0
0xffff97800001bb80 0041 00000000 0x0 0x0
0xffff97800001bc00 0041 00000000 0x0 0x0
0xffff97800001bc80 0041 00000000 0x0 0x0
0xffff97800001bd00 0041 00000000 0x0 0x0
0xffff97800001bd80 0041 00000000 0x0 0x0
0xffff97800001be00 0041 00000000 0x0 0x0
0xffff97800001be80 0041 00000000 0x0 0x0
0xffff97800001bf00 0041 00000000 0x0 0x0
0xffff97800001bf80 0041 00000000 0x0 0x0
0xffff97800001c000 0041 00000000 0x0 0x0
0xffff97800001c080 0041 00000000 0x0 0x0
0xffff97800001c100 0041 00000000 0x0 0x0
0xffff97800001c180 0041 00000000 0x0 0x0
0xffff97800001c200 0041 00000000 0x0 0x0
0xffff97800001c280 0041 00000000 0x0 0x0
0xffff97800001c300 0041 00000000 0x0 0x0
0xffff97800001c380 0041 00000000 0x0 0x0
0xffff97800001c400 0041 00000000 0x0 0x0
0xffff97800001c480 0041 00000000 0x0 0x0
0xffff97800001c500 0041 00000000 0x0 0x0
0xffff97800001c580 0041 00000000 0x0 0x0
0xffff97800001c600 0041 00000000 0x0 0x0
0xffff97800001c680 0041 00000000 0x0 0x0
0xffff97800001c700 0041 00000000 0x0 0x0
0xffff97800001c780 0001 00000000 0x0 0x0
0xffff97800001c800 0001 00000000 0x0 0x0
0xffff97800001c880 0001 00000000 0x0 0x0
0xffff97800001c900 0001 00000000 0x0 0x0
0xffff97800001c980 0001 00000000 0x0 0x0
0xffff97800001ca00 0001 00000000 0x0 0x0
0xffff97800001ca80 0001 00000000 0x0 0x0
0xffff97800001cb00 0001 00000000 0x0 0x0
0xffff97800001cb80 0001 00000000 0x0 0x0
0xffff97800001cc00 0001 00000000 0x0 0x0
0xffff97800001cc80 0001 00000000 0x0 0x0
0xffff97800001cd00 0001 00000000 0x0 0x0
0xffff97800001cd80 0001 00000000 0x0 0x0
0xffff97800001ce00 0001 00000000 0x0 0x0
0xffff97800001ce80 0001 00000000 0x0 0x0
0xffff97800001cf00 0001 00000000 0x0 0x0
0xffff97800001cf80 0001 00000000 0x0 0x0
0xffff97800001d000 0001 00000000 0x0 0x0
0xffff97800001d080 0001 00000000 0x0 0x0
0xffff97800001d100 0001 00000000 0x0 0x0
0xffff97800001d180 0001 00000000 0x0 0x0
0xffff97800001d200 0001 00000000 0x0 0x0
0xffff97800001d280 0001 00000000 0x0 0x0
0xffff97800001d300 0001 00000000 0x0 0x0
0xffff97800001d380 0001 00000000 0x0 0x0
0xffff97800001d400 0001 00000000 0x0 0x0
0xffff97800001d480 0001 00000000 0x0 0x0
0xffff97800001d500 0001 00000000 0x0 0x0
0xffff97800001d580 0001 00000000 0x0 0x0
0xffff97800001d600 0001 00000000 0x0 0x0
0xffff97800001d680 0001 00000000 0x0 0x0
0xffff97800001d700 0001 00000000 0x0 0x0
0xffff97800001d780 0001 00000000 0x0 0x0
0xffff97800001d800 0001 00000000 0x0 0x0
0xffff97800001d880 0001 00000000 0x0 0x0
0xffff97800001d900 0001 00000000 0x0 0x0
0xffff97800001d980 0001 00000000 0x0 0x0
0xffff97800001da00 0001 00000000 0x0 0x0
0xffff97800001da80 0001 00000000 0x0 0x0
0xffff97800001db00 0001 00000000 0x0 0x0
0xffff97800001db80 0001 00000000 0x0 0x0
0xffff97800001dc00 0001 00000000 0x0 0x0
0xffff97800001dc80 0001 00000000 0x0 0x0
0xffff97800001dd00 0001 00000000 0x0 0x0
0xffff97800001dd80 0001 00000000 0x0 0x0
0xffff97800001de00 0001 00000000 0x0 0x0
0xffff97800001de80 0001 00000000 0x0 0x0
0xffff97800001df00 0001 00000000 0x0 0x0
0xffff97800001df80 0001 00000000 0x0 0x0
0xffff97800001e000 0001 00000000 0x0 0x0
0xffff97800001e080 0001 00000000 0x0 0x0
0xffff97800001e100 0001 00000000 0x0 0x0
0xffff97800001e180 0001 00000000 0x0 0x0
0xffff97800001e200 0001 00000000 0x0 0x0
0xffff97800001e280 0001 00000000 0x0 0x0
0xffff97800001e300 0001 00000000 0x0 0x0
0xffff97800001e380 0001 00000000 0x0 0x0
0xffff97800001e400 0001 00000000 0x0 0x0
0xffff97800001e480 0001 00000000 0x0 0x0
0xffff97800001e500 0001 00000000 0x0 0x0
0xffff97800001e580 0001 00000000 0x0 0x0
0xffff97800001e600 0001 00000000 0x0 0x0
0xffff97800001e680 0001 00000000 0x0 0x0
0xffff97800001e700 0001 00000000 0x0 0x0
0xffff97800001e780 0001 00000000 0x0 0x0
0xffff97800001e800 0001 00000000 0x0 0x0
0xffff97800001e880 0001 00000000 0x0 0x0
0xffff97800001e900 0001 00000000 0x0 0x0
0xffff97800001e980 0001 00000000 0x0 0x0
0xffff97800001ea00 0001 00000000 0x0 0x0
0xffff97800001ea80 0001 00000000 0x0 0x0
0xffff97800001eb00 0001 00000000 0x0 0x0
0xffff97800001eb80 0001 00000000 0x0 0x0
0xffff97800001ec00 0001 00000000 0x0 0x0
0xffff97800001ec80 0001 00000000 0x0 0x0
0xffff97800001ed00 0001 00000000 0x0 0x0
0xffff97800001ed80 0001 00000000 0x0 0x0
0xffff97800001ee00 0001 00000000 0x0 0x0
0xffff97800001ee80 0001 00000000 0x0 0x0
0xffff97800001ef00 0001 00000000 0x0 0x0
0xffff97800001ef80 0001 00000000 0x0 0x0
0xffff97800001f000 0001 00000000 0x0 0x0
0xffff97800001f080 0001 00000000 0x0 0x0
0xffff97800001f100 0001 00000000 0x0 0x0
0xffff97800001f180 0001 00000000 0x0 0x0
0xffff97800001f200 0001 00000000 0x0 0x0
0xffff97800001f280 0001 00000000 0x0 0x0
0xffff97800001f300 0001 00000000 0x0 0x0
0xffff97800001f380 0001 00000000 0x0 0x0
0xffff97800001f400 0001 00000000 0x0 0x0
0xffff97800001f480 0001 00000000 0x0 0x0
0xffff97800001f500 0001 00000000 0x0 0x0
0xffff97800001f580 0001 00000000 0x0 0x0
0xffff97800001f600 0001 00000000 0x0 0x0
0xffff97800001f680 0001 00000000 0x0 0x0
0xffff97800001f700 0001 00000000 0x0 0x0
0xffff97800001f780 0001 00000000 0x0 0x0
0xffff97800001f800 0001 00000000 0x0 0x0
0xffff97800001f880 0001 00000000 0x0 0x0
0xffff97800001f900 0001 00000000 0x0 0x0
0xffff97800001f980 0001 00000000 0x0 0x0
0xffff97800001fa00 0001 00000000 0x0 0x0
0xffff97800001fa80 0001 00000000 0x0 0x0
0xffff97800001fb00 0001 00000000 0x0 0x0
0xffff97800001fb80 0001 00000000 0x0 0x0
0xffff97800001fc00 0001 00000000 0x0 0x0
0xffff97800001fc80 0001 00000000 0x0 0x0
0xffff97800001fd00 0001 00000000 0x0 0x0
0xffff97800001fd80 0001 00000000 0x0 0x0
0xffff97800001fe00 0001 00000000 0x0 0x0
0xffff97800001fe80 0001 00000000 0x0 0x0
0xffff97800001ff00 0001 00000000 0x0 0x0
0xffff97800001ff80 0001 00000000 0x0 0x0
0xffff978000020000 0001 00000000 0x0 0x0
0xffff978000020080 0001 00000000 0x0 0x0
0xffff978000020100 0001 00000000 0x0 0x0
0xffff978000020180 0001 00000000 0x0 0x0
0xffff978000020200 0001 00000000 0x0 0x0
0xffff978000020280 0001 00000000 0x0 0x0
0xffff978000020300 0001 00000000 0x0 0x0
0xffff978000020380 0001 00000000 0x0 0x0
0xffff978000020400 0001 00000000 0x0 0x0
0xffff978000020480 0001 00000000 0x0 0x0
0xffff978000020500 0001 00000000 0x0 0x0
0xffff978000020580 0001 00000000 0x0 0x0
0xffff978000020600 0001 00000000 0x0 0x0
0xffff978000020680 0001 00000000 0x0 0x0
0xffff978000020700 0001 00000000 0x0 0x0
0xffff978000020780 0001 00000000 0x0 0x0
0xffff978000020800 0001 00000000 0x0 0x0
0xffff978000020880 0001 00000000 0x0 0x0
0xffff978000020900 0001 00000000 0x0 0x0
0xffff978000020980 0001 00000000 0x0 0x0
0xffff978000020a00 0001 00000000 0x0 0x0
0xffff978000020a80 0001 00000000 0x0 0x0
0xffff978000020b00 0001 00000000 0x0 0x0
0xffff978000020b80 0001 00000000 0x0 0x0
0xffff978000020c00 0001 00000000 0x0 0x0
0xffff978000020c80 0001 00000000 0x0 0x0
0xffff978000020d00 0001 00000000 0x0 0x0
0xffff978000020d80 0001 00000000 0x0 0x0
0xffff978000020e00 0001 00000000 0x0 0x0
0xffff978000020e80 0001 00000000 0x0 0x0
0xffff978000020f00 0001 00000000 0x0 0x0
0xffff978000020f80 0001 00000000 0x0 0x0
0xffff978000021000 0001 00000000 0x0 0x0
0xffff978000021080 0001 00000000 0x0 0x0
0xffff978000021100 0001 00000000 0x0 0x0
0xffff978000021180 0001 00000000 0x0 0x0
0xffff978000021200 0001 00000000 0x0 0x0
0xffff978000021280 0001 00000000 0x0 0x0
0xffff978000021300 0001 00000000 0x0 0x0
0xffff978000021380 0001 00000000 0x0 0x0
0xffff978000021400 0001 00000000 0x0 0x0
0xffff978000021480 0001 00000000 0x0 0x0
0xffff978000021500 0001 00000000 0x0 0x0
0xffff978000021580 0001 00000000 0x0 0x0
0xffff978000021600 0001 00000000 0x0 0x0
0xffff978000021680 0001 00000000 0x0 0x0
0xffff978000021700 0001 00000000 0x0 0x0
0xffff978000021780 0001 00000000 0x0 0x0
0xffff978000021800 0001 00000000 0x0 0x0
0xffff978000021880 0001 00000000 0x0 0x0
0xffff978000021900 0001 00000000 0x0 0x0
0xffff978000021980 0001 00000000 0x0 0x0
0xffff978000021a00 0001 00000000 0x0 0x0
0xffff978000021a80 0001 00000000 0x0 0x0
0xffff978000021b00 0001 00000000 0x0 0x0
0xffff978000021b80 0001 00000000 0x0 0x0
0xffff978000021c00 0001 00000000 0x0 0x0
0xffff978000021c80 0001 00000000 0x0 0x0
0xffff978000021d00 0001 00000000 0x0 0x0
0xffff978000021d80 0001 00000000 0x0 0x0
0xffff978000021e00 0001 00000000 0x0 0x0
0xffff978000021e80 0001 00000000 0x0 0x0
0xffff978000021f00 0001 00000000 0x0 0x0
0xffff978000021f80 0001 00000000 0x0 0x0
0xffff978000022000 0001 00000000 0x0 0x0
0xffff978000022080 0001 00000000 0x0 0x0
0xffff978000022100 0001 00000000 0x0 0x0
0xffff978000022180 0001 00000000 0x0 0x0
0xffff978000022200 0001 00000000 0x0 0x0
0xffff978000022280 0001 00000000 0x0 0x0
0xffff978000022300 0001 00000000 0x0 0x0
0xffff978000022380 0001 00000000 0x0 0x0
0xffff978000022400 0001 00000000 0x0 0x0
0xffff978000022480 0001 00000000 0x0 0x0
0xffff978000022500 0001 00000000 0x0 0x0
0xffff978000022580 0001 00000000 0x0 0x0
0xffff978000022600 0001 00000000 0x0 0x0
0xffff978000022680 0001 00000000 0x0 0x0
0xffff978000022700 0001 00000000 0x0 0x0
0xffff978000022780 0001 00000000 0x0 0x0
0xffff978000022800 0001 00000000 0x0 0x0
0xffff978000022880 0001 00000000 0x0 0x0
0xffff978000022900 0001 00000000 0x0 0x0
0xffff978000022980 0001 00000000 0x0 0x0
0xffff978000022a00 0001 00000000 0x0 0x0
0xffff978000022a80 0001 00000000 0x0 0x0
0xffff978000022b00 0001 00000000 0x0 0x0
0xffff978000022b80 0001 00000000 0x0 0x0
0xffff978000022c00 0001 00000000 0x0 0x0
0xffff978000022c80 0001 00000000 0x0 0x0
0xffff978000022d00 0001 00000000 0x0 0x0
0xffff978000022d80 0001 00000000 0x0 0x0
0xffff978000022e00 0001 00000000 0x0 0x0
0xffff978000022e80 0001 00000000 0x0 0x0
0xffff978000022f00 0001 00000000 0x0 0x0
0xffff978000022f80 0001 00000000 0x0 0x0
0xffff978000023000 0001 00000000 0x0 0x0
0xffff978000023080 0001 00000000 0x0 0x0
0xffff978000023100 0001 00000000 0x0 0x0
0xffff978000023180 0001 00000000 0x0 0x0
0xffff978000023200 0001 00000000 0x0 0x0
0xffff978000023280 0001 00000000 0x0 0x0
0xffff978000023300 0001 00000000 0x0 0x0
0xffff978000023380 0001 00000000 0x0 0x0
0xffff978000023400 0001 00000000 0x0 0x0
0xffff978000023480 0001 00000000 0x0 0x0
0xffff978000023500 0001 00000000 0x0 0x0
0xffff978000023580 0001 00000000 0x0 0x0
0xffff978000023600 0001 00000000 0x0 0x0
0xffff978000023680 0001 00000000 0x0 0x0
0xffff978000023700 0001 00000000 0x0 0x0
0xffff978000023780 0001 00000000 0x0 0x0
0xffff978000023800 0001 00000000 0x0 0x0
0xffff978000023880 0001 00000000 0x0 0x0
0xffff978000023900 0001 00000000 0x0 0x0
0xffff978000023980 0001 00000000 0x0 0x0
0xffff978000023a00 0001 00000000 0x0 0x0
0xffff978000023a80 0001 00000000 0x0 0x0
0xffff978000023b00 0001 00000000 0x0 0x0
0xffff978000023b80 0001 00000000 0x0 0x0
0xffff978000023c00 0001 00000000 0x0 0x0
0xffff978000023c80 0001 00000000 0x0 0x0
0xffff978000023d00 0001 00000000 0x0 0x0
0xffff978000023d80 0001 00000000 0x0 0x0
0xffff978000023e00 0001 00000000 0x0 0x0
0xffff978000023e80 0001 00000000 0x0 0x0
0xffff978000023f00 0001 00000000 0x0 0x0
0xffff978000023f80 0001 00000000 0x0 0x0
0xffff978000024000 0001 00000000 0x0 0x0
0xffff978000024080 0001 00000000 0x0 0x0
0xffff978000024100 0001 00000000 0x0 0x0
0xffff978000024180 0001 00000000 0x0 0x0
0xffff978000024200 0001 00000000 0x0 0x0
0xffff978000024280 0001 00000000 0x0 0x0
0xffff978000024300 0001 00000000 0x0 0x0
0xffff978000024380 0001 00000000 0x0 0x0
0xffff978000024400 0001 00000000 0x0 0x0
0xffff978000024480 0001 00000000 0x0 0x0
0xffff978000024500 0001 00000000 0x0 0x0
0xffff978000024580 0001 00000000 0x0 0x0
0xffff978000024600 0001 00000000 0x0 0x0
0xffff978000024680 0001 00000000 0x0 0x0
0xffff978000024700 0001 00000000 0x0 0x0
0xffff978000024780 0001 00000000 0x0 0x0
0xffff978000024800 0001 00000000 0x0 0x0
0xffff978000024880 0001 00000000 0x0 0x0
0xffff978000024900 0001 00000000 0x0 0x0
0xffff978000024980 0001 00000000 0x0 0x0
0xffff978000024a00 0001 00000000 0x0 0x0
0xffff978000024a80 0001 00000000 0x0 0x0
0xffff978000024b00 0001 00000000 0x0 0x0
0xffff978000024b80 0001 00000000 0x0 0x0
0xffff978000024c00 0001 00000000 0x0 0x0
0xffff978000024c80 0001 00000000 0x0 0x0
0xffff978000024d00 0001 00000000 0x0 0x0
0xffff978000024d80 0001 00000000 0x0 0x0
0xffff978000024e00 0001 00000000 0x0 0x0
0xffff978000024e80 0001 00000000 0x0 0x0
0xffff978000024f00 0001 00000000 0x0 0x0
0xffff978000024f80 0001 00000000 0x0 0x0
0xffff978000025000 0001 00000000 0x0 0x0
0xffff978000025080 0001 00000000 0x0 0x0
0xffff978000025100 0001 00000000 0x0 0x0
0xffff978000025180 0001 00000000 0x0 0x0
0xffff978000025200 0001 00000000 0x0 0x0
0xffff978000025280 0001 00000000 0x0 0x0
0xffff978000025300 0001 00000000 0x0 0x0
0xffff978000025380 0001 00000000 0x0 0x0
0xffff978000025400 0001 00000000 0x0 0x0
0xffff978000025480 0001 00000000 0x0 0x0
0xffff978000025500 0001 00000000 0x0 0x0
0xffff978000025580 0001 00000000 0x0 0x0
0xffff978000025600 0001 00000000 0x0 0x0
0xffff978000025680 0001 00000000 0x0 0x0
0xffff978000025700 0001 00000000 0x0 0x0
0xffff978000025780 0001 00000000 0x0 0x0
0xffff978000025800 0001 00000000 0x0 0x0
0xffff978000025880 0001 00000000 0x0 0x0
0xffff978000025900 0001 00000000 0x0 0x0
0xffff978000025980 0001 00000000 0x0 0x0
0xffff978000025a00 0001 00000000 0x0 0x0
0xffff978000025a80 0001 00000000 0x0 0x0
0xffff978000025b00 0001 00000000 0x0 0x0
0xffff978000025b80 0001 00000000 0x0 0x0
0xffff978000025c00 0001 00000000 0x0 0x0
0xffff978000025c80 0001 00000000 0x0 0x0
0xffff978000025d00 0001 00000000 0x0 0x0
0xffff978000025d80 0001 00000000 0x0 0x0
0xffff978000025e00 0001 00000000 0x0 0x0
0xffff978000025e80 0001 00000000 0x0 0x0
0xffff978000025f00 0001 00000000 0x0 0x0
0xffff978000025f80 0001 00000000 0x0 0x0
0xffff978000026000 0001 00000000 0x0 0x0
0xffff978000026080 0001 00000000 0x0 0x0
0xffff978000026100 0001 00000000 0x0 0x0
0xffff978000026180 0001 00000000 0x0 0x0
0xffff978000026200 0001 00000000 0x0 0x0
0xffff978000026280 0001 00000000 0x0 0x0
0xffff978000026300 0001 00000000 0x0 0x0
0xffff978000026380 0001 00000000 0x0 0x0
0xffff978000026400 0001 00000000 0x0 0x0
0xffff978000026480 0001 00000000 0x0 0x0
0xffff978000026500 0001 00000000 0x0 0x0
0xffff978000026580 0001 00000000 0x0 0x0
0xffff978000026600 0001 00000000 0x0 0x0
0xffff978000026680 0001 00000000 0x0 0x0
0xffff978000026700 0001 00000000 0x0 0x0
0xffff978000026780 0001 00000000 0x0 0x0
0xffff978000026800 0001 00000000 0x0 0x0
0xffff978000026880 0001 00000000 0x0 0x0
0xffff978000026900 0001 00000000 0x0 0x0
0xffff978000026980 0001 00000000 0x0 0x0
0xffff978000026a00 0001 00000000 0x0 0x0
0xffff978000026a80 0001 00000000 0x0 0x0
0xffff978000026b00 0001 00000000 0x0 0x0
0xffff978000026b80 0001 00000000 0x0 0x0
0xffff978000026c00 0001 00000000 0x0 0x0
0xffff978000026c80 0001 00000000 0x0 0x0
0xffff978000026d00 0001 00000000 0x0 0x0
0xffff978000026d80 0001 00000000 0x0 0x0
0xffff978000026e00 0001 00000000 0x0 0x0
0xffff978000026e80 0001 00000000 0x0 0x0
0xffff978000026f00 0001 00000000 0x0 0x0
0xffff978000026f80 0001 00000000 0x0 0x0
0xffff978000027000 0001 00000000 0x0 0x0
0xffff978000027080 0001 00000000 0x0 0x0
0xffff978000027100 0001 00000000 0x0 0x0
0xffff978000027180 0001 00000000 0x0 0x0
0xffff978000027200 0001 00000000 0x0 0x0
0xffff978000027280 0001 00000000 0x0 0x0
0xffff978000027300 0001 00000000 0x0 0x0
0xffff978000027380 0001 00000000 0x0 0x0
0xffff978000027400 0001 00000000 0x0 0x0
0xffff978000027480 0001 00000000 0x0 0x0
0xffff978000027500 0001 00000000 0x0 0x0
0xffff978000027580 0001 00000000 0x0 0x0
0xffff978000027600 0001 00000000 0x0 0x0
0xffff978000027680 0001 00000000 0x0 0x0
0xffff978000027700 0001 00000000 0x0 0x0
0xffff978000027780 0001 00000000 0x0 0x0
0xffff978000027800 0001 00000000 0x0 0x0
0xffff978000027880 0001 00000000 0x0 0x0
0xffff978000027900 0001 00000000 0x0 0x0
0xffff978000027980 0001 00000000 0x0 0x0
0xffff978000027a00 0001 00000000 0x0 0x0
0xffff978000027a80 0001 00000000 0x0 0x0
0xffff978000027b00 0001 00000000 0x0 0x0
0xffff978000027b80 0001 00000000 0x0 0x0
0xffff978000027c00 0001 00000000 0x0 0x0
0xffff978000027c80 0001 00000000 0x0 0x0
0xffff978000027d00 0001 00000000 0x0 0x0
0xffff978000027d80 0001 00000000 0x0 0x0
0xffff978000027e00 0001 00000000 0x0 0x0
0xffff978000027e80 0001 00000000 0x0 0x0
0xffff978000027f00 0001 00000000 0x0 0x0
0xffff978000027f80 0001 00000000 0x0 0x0
0xffff978000028000 0001 00000000 0x0 0x0
0xffff978000028080 0001 00000000 0x0 0x0
0xffff978000028100 0001 00000000 0x0 0x0
0xffff978000028180 0001 00000000 0x0 0x0
0xffff978000028200 0001 00000000 0x0 0x0
0xffff978000028280 0001 00000000 0x0 0x0
0xffff978000028300 0001 00000000 0x0 0x0
0xffff978000028380 0001 00000000 0x0 0x0
0xffff978000028400 0001 00000000 0x0 0x0
0xffff978000028480 0001 00000000 0x0 0x0
0xffff978000028500 0001 00000000 0x0 0x0
0xffff978000028580 0001 00000000 0x0 0x0
0xffff978000028600 0001 00000000 0x0 0x0
0xffff978000028680 0001 00000000 0x0 0x0
0xffff978000028700 0001 00000000 0x0 0x0
0xffff978000028780 0001 00000000 0x0 0x0
0xffff978000028800 0001 00000000 0x0 0x0
0xffff978000028880 0001 00000000 0x0 0x0
0xffff978000028900 0001 00000000 0x0 0x0
0xffff978000028980 0001 00000000 0x0 0x0
0xffff978000028a00 0001 00000000 0x0 0x0
0xffff978000028a80 0001 00000000 0x0 0x0
0xffff978000028b00 0001 00000000 0x0 0x0
0xffff978000028b80 0001 00000000 0x0 0x0
0xffff978000028c00 0001 00000000 0x0 0x0
0xffff978000028c80 0001 00000000 0x0 0x0
0xffff978000028d00 0001 00000000 0x0 0x0
0xffff978000028d80 0001 00000000 0x0 0x0
0xffff978000028e00 0001 00000000 0x0 0x0
0xffff978000028e80 0001 00000000 0x0 0x0
0xffff978000028f00 0001 00000000 0x0 0x0
0xffff978000028f80 0001 00000000 0x0 0x0
0xffff978000029000 0001 00000000 0x0 0x0
0xffff978000029080 0001 00000000 0x0 0x0
0xffff978000029100 0001 00000000 0x0 0x0
0xffff978000029180 0001 00000000 0x0 0x0
0xffff978000029200 0001 00000000 0x0 0x0
0xffff978000029280 0001 00000000 0x0 0x0
0xffff978000029300 0001 00000000 0x0 0x0
0xffff978000029380 0001 00000000 0x0 0x0
0xffff978000029400 0001 00000000 0x0 0x0
0xffff978000029480 0001 00000000 0x0 0x0
0xffff978000029500 0001 00000000 0x0 0x0
0xffff978000029580 0001 00000000 0x0 0x0
0xffff978000029600 0001 00000000 0x0 0x0
0xffff978000029680 0001 00000000 0x0 0x0
0xffff978000029700 0001 00000000 0x0 0x0
0xffff978000029780 0001 00000000 0x0 0x0
0xffff978000029800 0001 00000000 0x0 0x0
0xffff978000029880 0001 00000000 0x0 0x0
0xffff978000029900 0001 00000000 0x0 0x0
0xffff978000029980 0001 00000000 0x0 0x0
0xffff978000029a00 0001 00000000 0x0 0x0
0xffff978000029a80 0001 00000000 0x0 0x0
0xffff978000029b00 0001 00000000 0x0 0x0
0xffff978000029b80 0001 00000000 0x0 0x0
0xffff978000029c00 0001 00000000 0x0 0x0
0xffff978000029c80 0001 00000000 0x0 0x0
0xffff978000029d00 0001 00000000 0x0 0x0
0xffff978000029d80 0001 00000000 0x0 0x0
0xffff978000029e00 0001 00000000 0x0 0x0
0xffff978000029e80 0001 00000000 0x0 0x0
0xffff978000029f00 0001 00000000 0x0 0x0
0xffff978000029f80 0001 00000000 0x0 0x0
0xffff97800002a000 0001 00000000 0x0 0x0
0xffff97800002a080 0001 00000000 0x0 0x0
0xffff97800002a100 0001 00000000 0x0 0x0
0xffff97800002a180 0001 00000000 0x0 0x0
0xffff97800002a200 0001 00000000 0x0 0x0
0xffff97800002a280 0001 00000000 0x0 0x0
0xffff97800002a300 0001 00000000 0x0 0x0
0xffff97800002a380 0001 00000000 0x0 0x0
0xffff97800002a400 0001 00000000 0x0 0x0
0xffff97800002a480 0001 00000000 0x0 0x0
0xffff97800002a500 0001 00000000 0x0 0x0
0xffff97800002a580 0001 00000000 0x0 0x0
0xffff97800002a600 0001 00000000 0x0 0x0
0xffff97800002a680 0001 00000000 0x0 0x0
0xffff97800002a700 0001 00000000 0x0 0x0
0xffff97800002a780 0001 00000000 0x0 0x0
0xffff97800002a800 0001 00000000 0x0 0x0
0xffff97800002a880 0001 00000000 0x0 0x0
0xffff97800002a900 0001 00000000 0x0 0x0
0xffff97800002a980 0001 00000000 0x0 0x0
0xffff97800002aa00 0001 00000000 0x0 0x0
0xffff97800002aa80 0001 00000000 0x0 0x0
0xffff97800002ab00 0001 00000000 0x0 0x0
0xffff97800002ab80 0001 00000000 0x0 0x0
0xffff97800002ac00 0001 00000000 0x0 0x0
0xffff97800002ac80 0001 00000000 0x0 0x0
0xffff97800002ad00 0001 00000000 0x0 0x0
0xffff97800002ad80 0001 00000000 0x0 0x0
0xffff97800002ae00 0001 00000000 0x0 0x0
0xffff97800002ae80 0001 00000000 0x0 0x0
0xffff97800002af00 0001 00000000 0x0 0x0
0xffff97800002af80 0001 00000000 0x0 0x0
0xffff97800002b000 0001 00000000 0x0 0x0
0xffff97800002b080 0001 00000000 0x0 0x0
0xffff97800002b100 0001 00000000 0x0 0x0
0xffff97800002b180 0001 00000000 0x0 0x0
0xffff97800002b200 0001 00000000 0x0 0x0
0xffff97800002b280 0001 00000000 0x0 0x0
0xffff97800002b300 0001 00000000 0x0 0x0
0xffff97800002b380 0001 00000000 0x0 0x0
0xffff97800002b400 0001 00000000 0x0 0x0
0xffff97800002b480 0001 00000000 0x0 0x0
0xffff97800002b500 0001 00000000 0x0 0x0
0xffff97800002b580 0001 00000000 0x0 0x0
0xffff97800002b600 0001 00000000 0x0 0x0
0xffff97800002b680 0001 00000000 0x0 0x0
0xffff97800002b700 0001 00000000 0x0 0x0
0xffff97800002b780 0001 00000000 0x0 0x0
0xffff97800002b800 0001 00000000 0x0 0x0
0xffff97800002b880 0001 00000000 0x0 0x0
0xffff97800002b900 0001 00000000 0x0 0x0
0xffff97800002b980 0001 00000000 0x0 0x0
0xffff97800002ba00 0001 00000000 0x0 0x0
0xffff97800002ba80 0001 00000000 0x0 0x0
0xffff97800002bb00 0001 00000000 0x0 0x0
0xffff97800002bb80 0001 00000000 0x0 0x0
0xffff97800002bc00 0001 00000000 0x0 0x0
0xffff97800002bc80 0001 00000000 0x0 0x0
0xffff97800002bd00 0001 00000000 0x0 0x0
0xffff97800002bd80 0001 00000000 0x0 0x0
0xffff97800002be00 0001 00000000 0x0 0x0
0xffff97800002be80 0001 00000000 0x0 0x0
0xffff97800

---
This report is generated by a bot. It may contain errors.
See https://goo.gl/tpsmEJ for more information about syzbot.
syzbot engineers can be reached at syzk...@googlegroups.com.

syzbot will keep track of this issue. See:
https://goo.gl/tpsmEJ#status for how to communicate with syzbot.

[Taylor R Campbell]

#syz dup: assert failed: lwpcnt >= 0

https://syzkaller.appspot.com/bug?id=b20a0d1c58ea9e2e4aab0404afa6728540b29791
https://syzkaller.appspot.com/bug?id=8878f056a0a9cf0cc405f1926a4f236fdc721642