[ 46.3788714] panic: kernel diagnostic assertion "proccnt >= 0" failed: file "/syzkaller/managers/ci2-netbsd-kubsan/kernel/sys/kern/kern_uidinfo.c", line 241 uid=60928 diff=-1 proccnt=-1 [ 46.3952368] cpu0: Begin traceback... [ 46.4088527] vpanic() at netbsd:vpanic+0x2f2 sys/kern/subr_prf.c:293 [ 46.4888565] kern_assert() at netbsd:kern_assert+0x65 sys/arch/amd64/amd64/db_disasm.c:1074 [ 46.5488552] chgproccnt() at netbsd:chgproccnt+0xaf sys/kern/kern_uidinfo.c:241 [ 46.5988533] do_sys_waitid() at netbsd:do_sys_waitid+0x1aca proc_free sys/kern/kern_exit.c:1259 [inline] [ 46.5988533] do_sys_waitid() at netbsd:do_sys_waitid+0x1aca sys/kern/kern_exit.c:690 [ 46.6488533] do_sys_wait() at netbsd:do_sys_wait+0x181 sys/kern/kern_exit.c:725 [ 46.6988540] sys___wait450() at netbsd:sys___wait450+0xa2 sys/kern/kern_exit.c:745 [ 46.7488532] syscall() at netbsd:syscall+0x2da sy_call sys/sys/syscallvar.h:65 [inline] [ 46.7488532] syscall() at netbsd:syscall+0x2da sy_invoke sys/sys/syscallvar.h:94 [inline] [ 46.7488532] syscall() at netbsd:syscall+0x2da sys/arch/x86/x86/syscall.c:138 [ 46.7588555] --- syscall (number 449) --- [ 46.7788542] netbsd:syscall+0x2da: [ 46.7788542] cpu0: End traceback... [ 46.7788542] fatal breakpoint trap in supervisor mode [ 46.7904595] trap type 1 code 0 rip 0xffffffff80235375 cs 0x8 rflags 0x246 cr2 0x79f70040e338 ilevel 0 rsp 0xffffde8248434ac0 [ 46.8032931] curlwp 0xffff9233827e5280 pid 988.988 lowest kstack 0xffffde82484302c0 Stopped in pid 988.988 (syz-executor.0) at netbsd:breakpoint+0x5: leave ? breakpoint() at netbsd:breakpoint+0x5 db_panic() at netbsd:db_panic+0xec sys/ddb/db_panic.c:69 vpanic() at netbsd:vpanic+0x2f2 sys/kern/subr_prf.c:293 kern_assert() at netbsd:kern_assert+0x65 sys/arch/amd64/amd64/db_disasm.c:1074 chgproccnt() at netbsd:chgproccnt+0xaf sys/kern/kern_uidinfo.c:241 do_sys_waitid() at netbsd:do_sys_waitid+0x1aca proc_free sys/kern/kern_exit.c:1259 [inline] do_sys_waitid() at netbsd:do_sys_waitid+0x1aca sys/kern/kern_exit.c:690 do_sys_wait() at netbsd:do_sys_wait+0x181 sys/kern/kern_exit.c:725 sys___wait450() at netbsd:sys___wait450+0xa2 sys/kern/kern_exit.c:745 syscall() at netbsd:syscall+0x2da sy_call sys/sys/syscallvar.h:65 [inline] syscall() at netbsd:syscall+0x2da sy_invoke sys/sys/syscallvar.h:94 [inline] syscall() at netbsd:syscall+0x2da sys/arch/x86/x86/syscall.c:138 --- syscall (number 449) --- netbsd:syscall+0x2da: Panic string: kernel diagnostic assertion "proccnt >= 0" failed: file "/syzkaller/managers/ci2-netbsd-kubsan/kernel/sys/kern/kern_uidinfo.c", line 241 uid=60928 diff=-1 proccnt=-1 PID LID S CPU FLAGS STRUCT LWP * NAME WAIT 5689 5689 2 1 0 ffff9233833f9900 syz-executor.3 5934 5934 2 0 0 ffff92337fc090c0 syz-executor.4 5462 5690 2 0 0 ffff923382c9d540 syz-executor.5 5462 5462 2 1 10000000 ffff923382f3c1c0 syz-executor.5 5960 5960 2 0 0 ffff9233831a7140 syz-executor.1 1384 1384 3 1 1c0 ffff92338142e580 syz-executor.2 pipe_rd 1240 1240 2 1 140 ffff923382bbf2c0 syz-executor.1 1117 1117 2 1 140 ffff9233827e56c0 syz-executor.4 988 > 988 7 0 140 ffff9233827e5280 syz-executor.0 990 990 2 0 140 ffff923381daa200 syz-executor.5 1131 1131 2 1 40 ffff9233814efa40 syz-executor.3 1221 2139 3 0 180 ffff923382c9d980 syz-execprog parked 1221 331 3 1 180 ffff92338145f980 syz-execprog parked 1221 1201 3 0 180 ffff9233813d4a00 syz-execprog kqueue 1221 1241 3 1 180 ffff923382bbf700 syz-execprog parked 1221 1067 3 0 180 ffff923383069300 syz-execprog wait 1221 1242 3 0 180 ffff923382bbfb40 syz-execprog wait 1221 1235 3 0 180 ffff9233827e5b00 syz-execprog wait 1221 1228 3 1 180 ffff92337fa3eb40 syz-execprog wait 1221 852 3 0 180 ffff92338205fac0 syz-execprog parked 1221 448 3 1 180 ffff92337f9bd6c0 syz-execprog parked 1221 1229 3 1 180 ffff9233814ef1c0 syz-execprog wait 1221 1230 3 1 1c0 ffff923381daaa80 syz-execprog wait 1221 1194 3 1 180 ffff923381daa640 syz-execprog parked 1221 1221 3 1 180 ffff92338205f680 syz-execprog parked 1069 1069 3 1 180 ffff92338205f240 sshd select 1127 1127 3 1 180 ffff9233807bb080 getty nanoslp 1086 1086 3 1 180 ffff92337f9bd280 getty nanoslp 1074 1074 3 1 180 ffff92337f69cac0 getty nanoslp 1078 1078 3 0 1c0 ffff92337f69c680 getty ttyraw 1097 1097 3 1 180 ffff9233814ef600 sshd select 957 957 3 0 180 ffff9233813d45c0 powerd kqueue 693 693 3 1 180 ffff9233800aabc0 syslogd kqueue 547 547 3 0 180 ffff92337f9bdb00 dhcpcd poll 742 742 3 0 180 ffff92337fa3e700 dhcpcd poll 465 465 3 0 180 ffff9233809d9040 dhcpcd poll 594 594 3 0 180 ffff92337fa3e2c0 dhcpcd poll 292 292 3 0 180 ffff9233800aa340 dhcpcd poll 290 290 3 1 180 ffff92337fc0d300 dhcpcd poll 289 289 3 0 180 ffff92337fc0db80 dhcpcd poll 1 1 3 0 180 ffff923377480140 init wait 0 820 3 0 200 ffff92337f66f200 physiod physiod 0 195 3 0 200 ffff92337f69c240 pooldrain pooldrain 0 > 194 7 1 240 ffff92337f66fa80 ioflush 0 193 3 1 200 ffff92337f66f640 pgdaemon pgdaemon 0 169 3 1 200 ffff92337e5c7600 usb7 usbevt 0 168 3 1 200 ffff92337e5c71c0 usb6 usbevt 0 167 3 1 200 ffff92337b54aa00 usb5 usbevt 0 166 3 1 200 ffff92337b54a5c0 usb4 usbevt 0 165 3 1 200 ffff92337b54a180 usb3 usbevt 0 31 3 1 200 ffff9233774809c0 usb2 usbevt 0 63 3 0 200 ffff9233772d8740 usb1 usbevt 0 126 3 1 200 ffff9233772d8b80 usb0 usbevt 0 125 3 1 200 ffff9233773d7340 usbtask-dr usbtsk 0 124 3 1 200 ffff9233758a1b00 usbtask-hc usbtsk 0 123 3 1 200 ffff923377480580 npfgc0 npfgcw 0 122 3 1 200 ffff92337744b980 rt_free rt_free 0 121 3 1 200 ffff92337744b540 unpgc unpgc 0 120 3 0 200 ffff92337744b100 key_timehandler key_timehandler 0 119 3 1 200 ffff923377436940 icmp6_wqinput/1 icmp6_wqinput 0 118 3 0 200 ffff923377436500 icmp6_wqinput/0 icmp6_wqinput 0 117 3 0 200 ffff9233774360c0 nd6_timer nd6_timer 0 116 3 1 200 ffff92337742a900 carp6_wqinput/1 carp6_wqinput 0 115 3 0 200 ffff92337742a4c0 carp6_wqinput/0 carp6_wqinput 0 114 3 1 200 ffff92337742a080 carp_wqinput/1 carp_wqinput 0 113 3 0 200 ffff9233774148c0 carp_wqinput/0 carp_wqinput 0 112 3 1 200 ffff923377414480 icmp_wqinput/1 icmp_wqinput 0 111 3 0 200 ffff923377414040 icmp_wqinput/0 icmp_wqinput 0 110 3 0 200 ffff9233773d7bc0 rt_timer rt_timer 0 109 3 0 200 ffff9233773d7780 vmem_rehash vmem_rehash 0 100 3 0 200 ffff9233772d8300 entbutler entropy 0 99 3 0 200 ffff923376d48b40 viomb balloon 0 98 3 1 200 ffff923376d48700 vioif0_txrx/1 vioif0_txrx 0 97 3 0 200 ffff923376d482c0 vioif0_txrx/0 vioif0_txrx 0 30 3 1 200 ffff9233758a16c0 scsibus0 sccomp 0 29 3 0 200 ffff9233758a1280 pms0 pmsreset 0 28 3 1 200 ffff9233757b4ac0 xcall/1 xcall 0 27 1 1 200 ffff9233757b4680 softser/1 0 26 1 1 200 ffff9233757b4240 softclk/1 0 25 1 1 200 ffff923375787a80 softbio/1 0 24 1 1 200 ffff923375787640 softnet/1 0 23 1 1 201 ffff923375787200 idle/1 0 22 3 1 200 ffff9234a3b2da40 lnxsyswq lnxsyswq 0 21 3 1 200 ffff9234a3b2d600 lnxubdwq lnxubdwq 0 20 3 1 200 ffff9234a3b2d1c0 lnxpwrwq lnxpwrwq 0 19 3 1 200 ffff9234a3b34a00 lnxlngwq lnxlngwq 0 18 3 1 200 ffff9234a3b345c0 lnxhipwq lnxhipwq 0 17 3 1 200 ffff9234a3b34180 lnxrcugc lnxrcugc 0 16 3 0 200 ffff9234a3b539c0 sysmon smtaskq 0 15 3 1 200 ffff9234a3b53580 pmfsuspend pmfsuspend 0 14 3 0 200 ffff9234a3b53140 pmfevent pmfevent 0 13 3 1 200 ffff9234a3b5e980 sopendfree sopendfr 0 12 3 0 200 ffff9234a3b5e540 ifwdog ifwdog 0 11 3 0 200 ffff9234a3b5e100 iflnkst iflnkst 0 10 3 1 200 ffff9234a4b95940 nfssilly nfssilly 0 9 3 0 200 ffff9234a4b95500 vdrain vdrain 0 8 3 1 200 ffff9234a4b950c0 modunload mod_unld 0 7 3 0 200 ffff9234a4bba900 xcall/0 xcall 0 6 1 0 200 ffff9234a4bba4c0 softser/0 0 5 1 0 200 ffff9234a4bba080 softclk/0 0 4 1 0 200 ffff9234a4beb8c0 softbio/0 0 3 1 0 200 ffff9234a4beb480 softnet/0 0 2 1 0 201 ffff9234a4beb040 idle/0 0 0 2 0 240 ffffffff86741b00 swapper [Locks tracked through LWPs] ****** LWP 5934.5934 (syz-executor.4) @ 0xffff92337fc090c0, l_stat=2 *** Locks held: * Lock 0 (initialized at netbsd:pmap_ctor+0x6d sys/arch/x86/x86/pmap.c:2860) lock address : ffff923381188b80 type : sleep/adaptive initialized : netbsd:pmap_ctor+0x6d shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 0 relevant cpu : 0 last held: 0 relevant lwp : 0xffff92337fc090c0 last held: 0xffff92337fc090c0 last locked* : netbsd:pmap_enter_ma+0x3c0 unlocked : netbsd:pmap_extract+0x2c8 owner field : 0xffff92337fc090c0 wait/spin: 0/0 Turnstile: no active turnstile for this lock. *** Locks wanted: none ****** LWP 1131.1131 (syz-executor.3) @ 0xffff9233814efa40, l_stat=2 *** Locks held: * Lock 0 (initialized at netbsd:amap_alloc1+0x30a sys/uvm/uvm_amap.c:167) lock address : ffff92337faa27c0 type : sleep/adaptive initialized : netbsd:amap_alloc1+0x30a shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 0 relevant cpu : 1 last held: 1 relevant lwp : 0xffff9233814efa40 last held: 0xffff9233814efa40 last locked* : netbsd:uvm_fault_internal+0x75d unlocked : netbsd:uvm_fault_upper_enter+0x454 owner/count : 0xffff9233814efa40 flags : 0x0000000000000004 Turnstile: no active turnstile for this lock. *** Locks wanted: none ****** LWP 742.742 (dhcpcd) @ 0xffff92337fa3e700, l_stat=3 *** Locks held: none *** Locks wanted: * Lock 0 (initialized at netbsd:module_hook_init+0x1c sys/kern/kern_module_hook.c:132) lock address : netbsd:module_hook type : sleep/adaptive initialized : netbsd:module_hook_init+0x1c shared holds : 0 exclusive: 0 shares wanted: 0 exclusive: 0 relevant cpu : 0 last held: 0 relevant lwp : 0xffff92337fa3e700 last held: 000000000000000000 last locked : 0 unlocked* : 0 owner field : 000000000000000000 wait/spin: 0/0 Turnstile: no active turnstile for this lock. ****** LWP 465.465 (dhcpcd) @ 0xffff9233809d9040, l_stat=3 *** Locks held: none *** Locks wanted: * Lock 0 (initialized at netbsd:module_hook_init+0x1c sys/kern/kern_module_hook.c:132) lock address : netbsd:module_hook type : sleep/adaptive initialized : netbsd:module_hook_init+0x1c shared holds : 0 exclusive: 0 shares wanted: 0 exclusive: 0 relevant cpu : 0 last held: 0 relevant lwp : 0xffff9233809d9040 last held: 000000000000000000 last locked : 0 unlocked* : 0 owner field : 000000000000000000 wait/spin: 0/0 Turnstile: no active turnstile for this lock. ****** LWP 290.290 (dhcpcd) @ 0xffff92337fc0d300, l_stat=3 *** Locks held: none *** Locks wanted: * Lock 0 (initialized at netbsd:module_hook_init+0x1c sys/kern/kern_module_hook.c:132) lock address : netbsd:module_hook type : sleep/adaptive initialized : netbsd:module_hook_init+0x1c shared holds : 0 exclusive: 0 shares wanted: 0 exclusive: 0 relevant cpu : 1 last held: 0 relevant lwp : 0xffff92337fc0d300 last held: 000000000000000000 last locked : 0 unlocked* : 0 owner field : 000000000000000000 wait/spin: 0/0 Turnstile: no active turnstile for this lock. ****** LWP 289.289 (dhcpcd) @ 0xffff92337fc0db80, l_stat=3 *** Locks held: none *** Locks wanted: * Lock 0 (initialized at netbsd:module_hook_init+0x1c sys/kern/kern_module_hook.c:132) lock address : netbsd:module_hook type : sleep/adaptive initialized : netbsd:module_hook_init+0x1c shared holds : 0 exclusive: 0 shares wanted: 0 exclusive: 0 relevant cpu : 0 last held: 0 relevant lwp : 0xffff92337fc0db80 last held: 000000000000000000 last locked : 0 unlocked* : 0 owner field : 000000000000000000 wait/spin: 0/0 Turnstile: no active turnstile for this lock. ****** LWP 0.11 (iflnkst) @ 0xffff9234a3b5e100, l_stat=3 *** Locks held: none *** Locks wanted: * Lock 0 (initialized at netbsd:module_hook_init+0x1c sys/kern/kern_module_hook.c:132) lock address : netbsd:module_hook type : sleep/adaptive initialized : netbsd:module_hook_init+0x1c shared holds : 0 exclusive: 0 shares wanted: 0 exclusive: 0 relevant cpu : 0 last held: 0 relevant lwp : 0xffff9234a3b5e100 last held: 000000000000000000 last locked : 0 unlocked* : 0 owner field : 000000000000000000 wait/spin: 0/0 Turnstile: no active turnstile for this lock. ****** LWP 0.5 (softclk/0) @ 0xffff9234a4bba080, l_stat=1 *** Locks held: none *** Locks wanted: * Lock 0 (initialized at netbsd:module_hook_init+0x1c sys/kern/kern_module_hook.c:132) lock address : netbsd:module_hook type : sleep/adaptive initialized : netbsd:module_hook_init+0x1c shared holds : 0 exclusive: 0 shares wanted: 0 exclusive: 0 relevant cpu : 0 last held: 0 relevant lwp : 0xffff9234a4bba080 last held: 000000000000000000 last locked : 0 unlocked* : 0 owner field : 000000000000000000 wait/spin: 0/0 Turnstile: no active turnstile for this lock. ****** LWP 0.0 (swapper) @ 0xffffffff86741b00, l_stat=2 *** Locks held: none *** Locks wanted: * Lock 0 (initialized at netbsd:module_hook_init+0x1c sys/kern/kern_module_hook.c:132) lock address : netbsd:module_hook type : sleep/adaptive initialized : netbsd:module_hook_init+0x1c shared holds : 0 exclusive: 0 shares wanted: 0 exclusive: 0 relevant cpu : 0 last held: 0 relevant lwp : 0xffffffff86741b00 last held: 000000000000000000 last locked : 0 unlocked* : 0 owner field : 000000000000000000 wait/spin: 0/0 Turnstile: no active turnstile for this lock. [Locks tracked through CPUs] ******* Locks held on cpu0: * Lock 0 (initialized at netbsd:kprintf_init+0x72 sys/kern/subr_prf.c:157) lock address : netbsd:kprintf_mtx type : spin initialized : netbsd:kprintf_init+0x72 shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 0 relevant cpu : 0 last held: 0 relevant lwp : 0xffff9233827e5280 last held: 0xffff9233827e5280 last locked* : netbsd:kprintf_lock+0x50 unlocked : netbsd:kprintf_unlock+0x70 owner field : 0x0000000000000800 wait/spin: 0/1 PAGE FLAG PQ UOBJECT UANON 0xffffde8000007180 0045 00000000 0x0 0x0 0xffffde8000007200 0045 00000000 0x0 0x0 0xffffde8000007280 0045 00000000 0x0 0x0 0xffffde8000007300 0045 00000000 0x0 0x0 0xffffde8000007380 0045 00000000 0x0 0x0 0xffffde8000007400 0045 00000000 0x0 0x0 0xffffde8000007480 0045 00000000 0x0 0x0 0xffffde8000007500 0045 00000000 0x0 0x0 0xffffde8000007580 0045 00000000 0x0 0x0 0xffffde8000007600 0045 00000000 0x0 0x0 0xffffde8000007680 0045 00000000 0x0 0x0 0xffffde8000007700 0041 00000000 0x0 0x0 0xffffde8000007780 0041 00000000 0x0 0x0 0xffffde8000007800 0041 00000000 0x0 0x0 0xffffde8000007880 0041 00000000 0x0 0x0 0xffffde8000007900 0045 00000000 0x0 0x0 0xffffde8000007980 0041 00000000 0x0 0x0 0xffffde8000007a00 0041 00000000 0x0 0x0 0xffffde8000007a80 0041 00000000 0x0 0x0 0xffffde8000007b00 0041 00000000 0x0 0x0 0xffffde8000007b80 0041 00000000 0x0 0x0 0xffffde8000007c00 0041 00000000 0x0 0x0 0xffffde8000007c80 0041 00000000 0x0 0x0 0xffffde8000007d00 0041 00000000 0x0 0x0 0xffffde8000007d80 0041 00000000 0x0 0x0 0xffffde8000007e00 0041 00000000 0x0 0x0 0xffffde8000007e80 0041 00000000 0x0 0x0 0xffffde8000007f00 0041 00000000 0x0 0x0 0xffffde8000007f80 0041 00000000 0x0 0x0 0xffffde8000008000 0041 00000000 0x0 0x0 0xffffde8000008080 0041 00000000 0x0 0x0 0xffffde8000008100 0041 00000000 0x0 0x0 0xffffde8000008180 0041 00000000 0x0 0x0 0xffffde8000008200 0041 00000000 0x0 0x0 0xffffde8000008280 0041 00000000 0x0 0x0 0xffffde8000008300 0041 00000000 0x0 0x0 0xffffde8000008380 0041 00000000 0x0 0x0 0xffffde8000008400 0041 00000000 0x0 0x0 0xffffde8000008480 0041 00000000 0x0 0x0 0xffffde8000008500 0041 00000000 0x0 0x0 0xffffde8000008580 0041 00000000 0x0 0x0 0xffffde8000008600 0045 00000000 0x0 0x0 0xffffde8000008680 0041 00000000 0x0 0x0 0xffffde8000008700 0041 00000000 0x0 0x0 0xffffde8000008780 0041 00000000 0x0 0x0 0xffffde8000008800 0045 00000000 0x0 0x0 0xffffde8000008880 0041 00000000 0x0 0x0 0xffffde8000008900 0041 00000000 0x0 0x0 0xffffde8000008980 0041 00000000 0x0 0x0 0xffffde8000008a00 0041 00000000 0x0 0x0 0xffffde8000008a80 0041 00000000 0x0 0x0 0xffffde8000008b00 0041 00000000 0x0 0x0 0xffffde8000008b80 0041 00000000 0x0 0x0 0xffffde8000008c00 0041 00000000 0x0 0x0 0xffffde8000008c80 0041 00000000 0x0 0x0 0xffffde8000008d00 0041 00000000 0x0 0x0 0xffffde8000008d80 0041 00000000 0x0 0x0 0xffffde8000008e00 0041 00000000 0x0 0x0 0xffffde8000008e80 0041 00000000 0x0 0x0 0xffffde8000008f00 0041 00000000 0x0 0x0 0xffffde8000008f80 0041 00000000 0x0 0x0 0xffffde8000009000 0041 00000000 0x0 0x0 0xffffde8000009080 0045 00000000 0x0 0x0 0xffffde8000009100 0041 00000000 0x0 0x0 0xffffde8000009180 0041 00000000 0x0 0x0 0xffffde8000009200 0041 00000000 0x0 0x0 0xffffde8000009280 0041 00000000 0x0 0x0 0xffffde8000009300 0041 00000000 0x0 0x0 0xffffde8000009380 0041 00000000 0x0 0x0 0xffffde8000009400 0041 00000000 0x0 0x0 0xffffde8000009480 0041 00000000 0x0 0x0 0xffffde8000009500 0041 00000000 0x0 0x0 0xffffde8000009580 0041 00000000 0x0 0x0 0xffffde8000009600 0041 00000000 0x0 0x0 0xffffde8000009680 0041 00000000 0x0 0x0 0xffffde8000009700 0041 00000000 0x0 0x0 0xffffde8000009780 0041 00000000 0x0 0x0 0xffffde8000009800 0041 00000000 0x0 0x0 0xffffde8000009880 0041 00000000 0x0 0x0 0xffffde8000009900 0041 00000000 0x0 0x0 0xffffde8000009980 0041 00000000 0x0 0x0 0xffffde8000009a00 0041 00000000 0x0 0x0 0xffffde8000009a80 0041 00000000 0x0 0x0 0xffffde8000009b00 0041 00000000 0x0 0x0 0xffffde8000009b80 0041 00000000 0x0 0x0 0xffffde8000009c00 0041 00000000 0x0 0x0 0xffffde8000009c80 0041 00000000 0x0 0x0 0xffffde8000009d00 0041 00000000 0x0 0x0 0xffffde8000009d80 0041 00000000 0x0 0x0 0xffffde8000009e00 0041 00000000 0x0 0x0 0xffffde8000009e80 0045 00000000 0x0 0x0 0xffffde8000009f00 0041 00000000 0x0 0x0 0xffffde8000009f80 0041 00000000 0x0 0x0 0xffffde800000a000 0041 00000000 0x0 0x0 0xffffde800000a080 0041 00000000 0x0 0x0 0xffffde800000a100 0041 00000000 0x0 0x0 0xffffde800000a180 0041 00000000 0x0 0x0 0xffffde800000a200 0041 00000000 0x0 0x0 0xffffde800000a280 0041 00000000 0x0 0x0 0xffffde800000a300 0041 00000000 0x0 0x0 0xffffde800000a380 0041 00000000 0x0 0x0 0xffffde800000a400 0041 00000000 0x0 0x0 0xffffde800000a480 0041 00000000 0x0 0x0 0xffffde800000a500 0041 00000000 0x0 0x0 0xffffde800000a580 0041 00000000 0x0 0x0 0xffffde800000a600 0041 00000000 0x0 0x0 0xffffde800000a680 0041 00000000 0x0 0x0 0xffffde800000a700 0041 00000000 0x0 0x0 0xffffde800000a780 0041 00000000 0x0 0x0 0xffffde800000a800 0041 00000000 0x0 0x0 0xffffde800000a880 0041 00000000 0x0 0x0 0xffffde800000a900 0041 00000000 0x0 0x0 0xffffde800000a980 0041 00000000 0x0 0x0 0xffffde800000aa00 0041 00000000 0x0 0x0 0xffffde800000aa80 0041 00000000 0x0 0x0 0xffffde800000ab00 0041 00000000 0x0 0x0 0xffffde800000ab80 0041 00000000 0x0 0x0 0xffffde800000ac00 0041 00000000 0x0 0x0 0xffffde800000ac80 0041 00000000 0x0 0x0 0xffffde800000ad00 0041 00000000 0x0 0x0 0xffffde800000ad80 0041 00000000 0x0 0x0 0xffffde800000ae00 0041 00000000 0x0 0x0 0xffffde800000ae80 0041 00000000 0x0 0x0 0xffffde800000af00 0045 00000000 0x0 0x0 0xffffde800000af80 0045 00000000 0x0 0x0 0xffffde800000b000 0041 00000000 0x0 0x0 0xffffde800000b080 0041 00000000 0x0 0x0 0xffffde800000b100 0041 00000000 0x0 0x0 0xffffde800000b180 0045 00000000 0x0 0x0 0xffffde800000b200 0041 00000000 0x0 0x0 0xffffde800000b280 0045 00000000 0x0 0x0 0xffffde800000b300 0045 00000000 0x0 0x0 0xffffde800000b380 0045 00000000 0x0 0x0 0xffffde800000b400 0041 00000000 0x0 0x0 0xffffde800000b480 0041 00000000 0x0 0x0 0xffffde800000b500 0045 00000000 0x0 0x0 0xffffde800000b580 0045 00000000 0x0 0x0 0xffffde800000b600 0045 00000000 0x0 0x0 0xffffde800000b680 0045 00000000 0x0 0x0 0xffffde800000b700 0045 00000000 0x0 0x0 0xffffde800000b780 0045 00000000 0x0 0x0 0xffffde800000b800 0045 00000000 0x0 0x0 0xffffde800000b880 0041 00000000 0x0 0x0 0xffffde800000b900 0045 00000000 0x0 0x0 0xffffde800000b980 0045 00000000 0x0 0x0 0xffffde800000ba00 0045 00000000 0x0 0x0 0xffffde800000ba80 0045 00000000 0x0 0x0 0xffffde800000bb00 0045 00000000 0x0 0x0 0xffffde800000bb80 0045 00000000 0x0 0x0 0xffffde800000bc00 0045 00000000 0x0 0x0 0xffffde800000bc80 0041 00000000 0x0 0x0 0xffffde800000bd00 0045 00000000 0x0 0x0 0xffffde800000bd80 0045 00000000 0x0 0x0 0xffffde800000be00 0045 00000000 0x0 0x0 0xffffde800000be80 0045 00000000 0x0 0x0 0xffffde800000bf00 0045 00000000 0x0 0x0 0xffffde800000bf80 0045 00000000 0x0 0x0 0xffffde800000c000 0045 00000000 0x0 0x0 0xffffde800000c080 0045 00000000 0x0 0x0 0xffffde800000c100 0045 00000000 0x0 0x0 0xffffde800000c180 0045 00000000 0x0 0x0 0xffffde800000c200 0045 00000000 0x0 0x0 0xffffde800000c280 0045 00000000 0x0 0x0 0xffffde800000c300 0045 00000000 0x0 0x0 0xffffde800000c380 0045 00000000 0x0 0x0 0xffffde800000c400 0045 00000000 0x0 0x0 0xffffde800000c480 0045 00000000 0x0 0x0 0xffffde800000c500 0045 00000000 0x0 0x0 0xffffde800000c580 0045 00000000 0x0 0x0 0xffffde800000c600 0045 00000000 0x0 0x0 0xffffde800000c680 0045 00000000 0x0 0x0 0xffffde800000c700 0041 00000000 0x0 0x0 0xffffde800000c780 0041 00000000 0x0 0x0 0xffffde800000c800 0045 00000000 0x0 0x0 0xffffde800000c880 0045 00000000 0x0 0x0 0xffffde800000c900 0045 00000000 0x0 0x0 0xffffde800000c980 0045 00000000 0x0 0x0 0xffffde800000ca00 0045 00000000 0x0 0x0 0xffffde800000ca80 0045 00000000 0x0 0x0 0xffffde800000cb00 0041 00000000 0x0 0x0 0xffffde800000cb80 0041 00000000 0x0 0x0 0xffffde800000cc00 0045 00000000 0x0 0x0 0xffffde800000cc80 0045 00000000 0x0 0x0 0xffffde800000cd00 0045 00000000 0x0 0x0 0xffffde800000cd80 0041 00000000 0x0 0x0 0xffffde800000ce00 0045 00000000 0x0 0x0 0xffffde800000ce80 0041 00000000 0x0 0x0 0xffffde800000cf00 0041 00000000 0x0 0x0 0xffffde800000cf80 0041 00000000 0x0 0x0 0xffffde800000d000 0041 00000000 0x0 0x0 0xffffde800000d080 0045 00000000 0x0 0x0 0xffffde800000d100 0041 00000000 0x0 0x0 0xffffde800000d180 0041 00000000 0x0 0x0 0xffffde800000d200 0041 00000000 0x0 0x0 0xffffde800000d280 0041 00000000 0x0 0x0 0xffffde800000d300 0045 00000000 0x0 0x0 0xffffde800000d380 0041 00000000 0x0 0x0 0xffffde800000d400 0041 00000000 0x0 0x0 0xffffde800000d480 0045 00000000 0x0 0x0 0xffffde800000d500 0041 00000000 0x0 0x0 0xffffde800000d580 0041 00000000 0x0 0x0 0xffffde800000d600 0041 00000000 0x0 0x0 0xffffde800000d680 0041 00000000 0x0 0x0 0xffffde800000d700 0041 00000000 0x0 0x0 0xffffde800000d780 0045 00000000 0x0 0x0 0xffffde800000d800 0041 00000000 0x0 0x0 0xffffde800000d880 0041 00000000 0x0 0x0 0xffffde800000d900 0041 00000000 0x0 0x0 0xffffde800000d980 0041 00000000 0x0 0x0 0xffffde800000da00 0041 00000000 0x0 0x0 0xffffde800000da80 0045 00000000 0x0 0x0 0xffffde800000db00 0045 00000000 0x0 0x0 0xffffde800000db80 0045 00000000 0x0 0x0 0xffffde800000dc00 0041 00000000 0x0 0x0 0xffffde800000dc80 0041 00000000 0x0 0x0 0xffffde800000dd00 0041 00000000 0x0 0x0 0xffffde800000dd80 0041 00000000 0x0