[ 94.4613571] panic: kernel diagnostic assertion "fp != NULL" failed: file "/syzkaller/managers/ci2-netbsd-kubsan/kernel/sys/kern/uipc_sem.c", line 1079 [ 94.4613571] cpu0: Begin traceback... [ 94.4813217] vpanic() at netbsd:vpanic+0x2f2 sys/kern/subr_prf.c:291 [ 94.5513215] kern_assert() at netbsd:kern_assert+0x65 sys/arch/amd64/amd64/db_disasm.c:1074 [ 94.6213212] sys__ksem_destroy() at netbsd:sys__ksem_destroy+0x42e sys/kern/uipc_sem.c:1079 [ 94.6713207] sys_syscall() at netbsd:sys_syscall+0x1e4 sy_call sys/sys/syscallvar.h:65 [inline] [ 94.6713207] sys_syscall() at netbsd:sys_syscall+0x1e4 sys/kern/sys_syscall.c:90 [ 94.7313203] syscall() at netbsd:syscall+0x2da sy_call sys/sys/syscallvar.h:65 [inline] [ 94.7313203] syscall() at netbsd:syscall+0x2da sy_invoke sys/sys/syscallvar.h:94 [inline] [ 94.7313203] syscall() at netbsd:syscall+0x2da sys/arch/x86/x86/syscall.c:138 [ 94.7413209] --- syscall (number 255 via SYS_syscall) --- [ 94.7613230] netbsd:syscall+0x2da: [ 94.7613230] cpu0: End traceback... [ 94.7613230] fatal breakpoint trap in supervisor mode [ 94.7735646] trap type 1 code 0 rip 0xffffffff80235375 cs 0x8 rflags 0x246 cr2 0x7a1d60f38ff8 ilevel 0 rsp 0xffffd682480f4e20 [ 94.7863901] curlwp 0xfffff87b2a7e7500 pid 6963.7612 lowest kstack 0xffffd682480f02c0 Stopped in pid 6963.7612 (syz-executor2433) at netbsd:breakpoint+0x5: leave ? breakpoint() at netbsd:breakpoint+0x5 db_panic() at netbsd:db_panic+0xec sys/ddb/db_panic.c:69 vpanic() at netbsd:vpanic+0x2f2 sys/kern/subr_prf.c:291 kern_assert() at netbsd:kern_assert+0x65 sys/arch/amd64/amd64/db_disasm.c:1074 sys__ksem_destroy() at netbsd:sys__ksem_destroy+0x42e sys/kern/uipc_sem.c:1079 sys_syscall() at netbsd:sys_syscall+0x1e4 sy_call sys/sys/syscallvar.h:65 [inline] sys_syscall() at netbsd:sys_syscall+0x1e4 sys/kern/sys_syscall.c:90 syscall() at netbsd:syscall+0x2da sy_call sys/sys/syscallvar.h:65 [inline] syscall() at netbsd:syscall+0x2da sy_invoke sys/sys/syscallvar.h:94 [inline] syscall() at netbsd:syscall+0x2da sys/arch/x86/x86/syscall.c:138 --- syscall (number 255 via SYS_syscall) --- netbsd:syscall+0x2da: Panic string: kernel diagnostic assertion "fp != NULL" failed: file "/syzkaller/managers/ci2-netbsd-kubsan/kernel/sys/kern/uipc_sem.c", line 1079 PID LID S CPU FLAGS STRUCT LWP * NAME WAIT 7125 7125 2 1 0 fffff87b28441100 syz-executor2433 7358 6983 2 0 0 fffff87b2a784680 syz-executor2433 7358 7358 2 0 10000000 fffff87b28e5f140 syz-executor2433 6347 7763 3 0 180 fffff87b28549900 syz-executor2433 parked 6347 6347 2 0 10000000 fffff87b28549080 syz-executor2433 6963 >7612 7 0 100 fffff87b2a7e7500 syz-executor2433 6963 7089 2 0 100 fffff87b2a903740 syz-executor2433 6963 6963 2 1 10000000 fffff87b2ac11280 syz-executor2433 7472 6597 2 0 0 fffff87b275132c0 syz-executor2433 7472 7374 2 0 100 fffff87b2b2c8340 syz-executor2433 7472 7472 2 0 10000000 fffff87b2a6962c0 syz-executor2433 1198 1198 2 1 140 fffff87b28f85a00 syz-executor2433 1241 1241 2 1 140 fffff87b28f855c0 syz-executor2433 941 941 2 1 140 fffff87b28441980 syz-executor2433 1120 1120 2 0 140 fffff87b28629600 syz-executor2433 1243 1243 2 0 140 fffff87b28e5f580 syz-executor2433 1224 1224 2 1 140 fffff87b273e4b00 syz-executor2433 1242 1242 3 0 180 fffff87b28629a40 syz-executor2433 nanoslp 1231 1231 3 0 180 fffff87b286291c0 sshd select 1255 1255 3 1 180 fffff87b27077200 getty nanoslp 1216 1216 3 1 180 fffff87b273e46c0 getty nanoslp 1083 1083 3 0 180 fffff87b273e4280 getty nanoslp 1184 1184 3 1 1c0 fffff87b27095ac0 getty ttyraw 951 951 3 1 180 fffff87b28f85180 sshd select 1094 1094 3 0 180 fffff87b28e5f9c0 powerd kqueue 698 698 3 0 180 fffff87b28441540 syslogd kqueue 746 746 3 1 180 fffff87b27bd38c0 dhcpcd poll 742 742 3 1 180 fffff87b27513700 dhcpcd poll 466 466 3 0 180 fffff87b276a1b80 dhcpcd poll 598 598 3 1 180 fffff87b27bd3040 dhcpcd poll 292 292 3 1 180 fffff87b27a0e780 dhcpcd poll 485 485 3 1 180 fffff87b27a0e340 dhcpcd poll 291 291 3 1 180 fffff87b27513b40 dhcpcd poll 1 1 3 1 180 fffff87b1ee53980 init wait 0 673 3 0 200 fffff87b27077640 physiod physiod 0 196 3 1 200 fffff87b27095680 pooldrain pooldrain 0 195 2 0 240 fffff87b27095240 ioflush 0 194 3 0 200 fffff87b27077a80 pgdaemon pgdaemon 0 170 3 0 200 fffff87b24fb7a40 usb7 usbevt 0 169 3 1 200 fffff87b24fb7600 usb6 usbevt 0 168 3 0 200 fffff87b24fb71c0 usb5 usbevt 0 167 3 1 200 fffff87b21f22a00 usb4 usbevt 0 166 3 1 200 fffff87b21f225c0 usb3 usbevt 0 165 3 0 200 fffff87b21f22180 usb2 usbevt 0 31 3 0 200 fffff87b1ff059c0 usb1 usbevt 0 63 3 1 200 fffff87b1ff05580 usb0 usbevt 0 126 3 1 200 fffff87b1ff05140 usbtask-dr usbtsk 0 125 3 1 200 fffff87b1ece0740 usbtask-hc usbtsk 0 124 3 0 200 fffff87b1d2a1b00 swwreboot swwreboot 0 123 3 0 200 fffff87b1ece0b80 npfgc0 npfgcw 0 122 3 1 200 fffff87b1ee53540 rt_free rt_free 0 121 3 1 200 fffff87b1ee53100 unpgc unpgc 0 120 3 0 200 fffff87b1ee46940 key_timehandler key_timehandler 0 119 3 1 200 fffff87b1ee46500 icmp6_wqinput/1 icmp6_wqinput 0 118 3 0 200 fffff87b1ee460c0 icmp6_wqinput/0 icmp6_wqinput 0 117 3 0 200 fffff87b1ee31900 nd6_timer nd6_timer 0 116 3 1 200 fffff87b1ee314c0 carp6_wqinput/1 carp6_wqinput 0 115 3 0 200 fffff87b1ee31080 carp6_wqinput/0 carp6_wqinput 0 114 3 1 200 fffff87b1ee148c0 carp_wqinput/1 carp_wqinput 0 113 3 0 200 fffff87b1ee14480 carp_wqinput/0 carp_wqinput 0 112 3 1 200 fffff87b1ee14040 icmp_wqinput/1 icmp_wqinput 0 111 3 0 200 fffff87b1edd7bc0 icmp_wqinput/0 icmp_wqinput 0 110 3 0 200 fffff87b1edd7340 rt_timer rt_timer 0 109 3 0 200 fffff87b1edd7780 vmem_rehash vmem_rehash 0 100 3 1 200 fffff87b1ece0300 entbutler entropy 0 99 3 1 200 fffff87b1e750b40 viomb balloon 0 98 3 1 200 fffff87b1e750700 vioif0_txrx/1 vioif0_txrx 0 97 3 0 200 fffff87b1e7502c0 vioif0_txrx/0 vioif0_txrx 0 30 3 0 200 fffff87b1d2a16c0 scsibus0 sccomp 0 29 3 1 200 fffff87b1d2a1280 pms0 pmsreset 0 28 3 1 200 fffff87b1d1b4ac0 xcall/1 xcall 0 27 1 1 200 fffff87b1d1b4680 softser/1 0 26 1 1 200 fffff87b1d1b4240 softclk/1 0 25 1 1 200 fffff87b1d187a80 softbio/1 0 24 1 1 200 fffff87b1d187640 softnet/1 0 23 1 1 201 fffff87b1d187200 idle/1 0 22 3 1 200 fffff87c4b52da40 lnxsyswq lnxsyswq 0 21 3 1 200 fffff87c4b52d600 lnxubdwq lnxubdwq 0 20 3 0 200 fffff87c4b52d1c0 lnxpwrwq lnxpwrwq 0 19 3 1 200 fffff87c4b534a00 lnxlngwq lnxlngwq 0 18 3 1 200 fffff87c4b5345c0 lnxhipwq lnxhipwq 0 17 3 1 200 fffff87c4b534180 lnxrcugc lnxrcugc 0 16 3 0 200 fffff87c4b5539c0 sysmon smtaskq 0 15 3 1 200 fffff87c4b553580 pmfsuspend pmfsuspend 0 14 3 0 200 fffff87c4b553140 pmfevent pmfevent 0 13 3 1 200 fffff87c4b55e980 sopendfree sopendfr 0 12 3 0 200 fffff87c4b55e540 ifwdog ifwdog 0 11 3 0 200 fffff87c4b55e100 iflnkst iflnkst 0 10 3 1 200 fffff87c4c593940 nfssilly nfssilly 0 9 3 0 200 fffff87c4c593500 vdrain vdrain 0 8 3 1 200 fffff87c4c5930c0 modunload mod_unld 0 7 3 0 200 fffff87c4c5bc900 xcall/0 xcall 0 6 1 0 200 fffff87c4c5bc4c0 softser/0 0 5 1 0 200 fffff87c4c5bc080 softclk/0 0 4 1 0 200 fffff87c4c5e98c0 softbio/0 0 3 1 0 200 fffff87c4c5e9480 softnet/0 0 2 1 0 201 fffff87c4c5e9040 idle/0 0 > 0 7 1 240 ffffffff8673ee00 swapper [Locks tracked through LWPs] ****** LWP 7125.7125 (syz-executor2433) @ 0xfffff87b28441100, l_stat=2 *** Locks held: none *** Locks wanted: * Lock 0 (initialized at netbsd:pmap_ctor+0x6d sys/arch/x86/x86/pmap.c:2860) lock address : fffff87b27693580 type : sleep/adaptive initialized : netbsd:pmap_ctor+0x6d shared holds : 0 exclusive: 0 shares wanted: 0 exclusive: 1 relevant cpu : 1 last held: 1 relevant lwp : 0xfffff87b28441100 last held: 000000000000000000 last locked : netbsd:pmap_extract+0xdb unlocked* : netbsd:pmap_extract+0x2c8 owner field : 0xfffff87b28441100 wait/spin: 0/0 Turnstile: no active turnstile for this lock. ****** LWP 6963.7612 (syz-executor2433) @ 0xfffff87b2a7e7500, l_stat=7 *** Locks held: * Lock 0 (initialized at netbsd:ksem_create+0x174 sys/kern/uipc_sem.c:474) lock address : fffff87b2a853960 type : sleep/adaptive initialized : netbsd:ksem_create+0x174 shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 0 relevant cpu : 0 last held: 0 relevant lwp : 0xfffff87b2a7e7500 last held: 0xfffff87b2a7e7500 last locked* : netbsd:ksem_lookup_pshared_locked+0x10e unlocked : netbsd:ksem_release+0x108 owner field : 0xfffff87b2a7e7500 wait/spin: 0/0 Turnstile: no active turnstile for this lock. *** Locks wanted: none ****** LWP 6963.7089 (syz-executor2433) @ 0xfffff87b2a903740, l_stat=2 *** Locks held: * Lock 0 (initialized at netbsd:filedesc_ctor+0xa1 sys/kern/kern_descrip.c:1328) lock address : fffff87b277fb600 type : sleep/adaptive initialized : netbsd:filedesc_ctor+0xa1 shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 0 relevant cpu : 0 last held: 0 relevant lwp : 0xfffff87b2a903740 last held: 0xfffff87b2a903740 last locked* : netbsd:fd_close+0x1ac unlocked : netbsd:fd_alloc+0x59c owner field : 0xfffff87b2a903740 wait/spin: 0/0 Turnstile: no active turnstile for this lock. *** Locks wanted: none ****** LWP 742.742 (dhcpcd) @ 0xfffff87b27513700, l_stat=3 *** Locks held: none *** Locks wanted: * Lock 0 (initialized at netbsd:module_hook_init+0x1c sys/kern/kern_module_hook.c:132) lock address : netbsd:module_hook type : sleep/adaptive initialized : netbsd:module_hook_init+0x1c shared holds : 0 exclusive: 0 shares wanted: 0 exclusive: 0 relevant cpu : 1 last held: 0 relevant lwp : 0xfffff87b27513700 last held: 000000000000000000 last locked : 0 unlocked* : 0 owner field : 000000000000000000 wait/spin: 0/0 Turnstile: no active turnstile for this lock. ****** LWP 466.466 (dhcpcd) @ 0xfffff87b276a1b80, l_stat=3 *** Locks held: none *** Locks wanted: * Lock 0 (initialized at netbsd:module_hook_init+0x1c sys/kern/kern_module_hook.c:132) lock address : netbsd:module_hook type : sleep/adaptive initialized : netbsd:module_hook_init+0x1c shared holds : 0 exclusive: 0 shares wanted: 0 exclusive: 0 relevant cpu : 0 last held: 0 relevant lwp : 0xfffff87b276a1b80 last held: 000000000000000000 last locked : 0 unlocked* : 0 owner field : 000000000000000000 wait/spin: 0/0 Turnstile: no active turnstile for this lock. ****** LWP 485.485 (dhcpcd) @ 0xfffff87b27a0e340, l_stat=3 *** Locks held: none *** Locks wanted: * Lock 0 (initialized at netbsd:module_hook_init+0x1c sys/kern/kern_module_hook.c:132) lock address : netbsd:module_hook type : sleep/adaptive initialized : netbsd:module_hook_init+0x1c shared holds : 0 exclusive: 0 shares wanted: 0 exclusive: 0 relevant cpu : 1 last held: 0 relevant lwp : 0xfffff87b27a0e340 last held: 000000000000000000 last locked : 0 unlocked* : 0 owner field : 000000000000000000 wait/spin: 0/0 Turnstile: no active turnstile for this lock. ****** LWP 291.291 (dhcpcd) @ 0xfffff87b27513b40, l_stat=3 *** Locks held: none *** Locks wanted: * Lock 0 (initialized at netbsd:module_hook_init+0x1c sys/kern/kern_module_hook.c:132) lock address : netbsd:module_hook type : sleep/adaptive initialized : netbsd:module_hook_init+0x1c shared holds : 0 exclusive: 0 shares wanted: 0 exclusive: 0 relevant cpu : 1 last held: 0 relevant lwp : 0xfffff87b27513b40 last held: 000000000000000000 last locked : 0 unlocked* : 0 owner field : 000000000000000000 wait/spin: 0/0 Turnstile: no active turnstile for this lock. ****** LWP 0.11 (iflnkst) @ 0xfffff87c4b55e100, l_stat=3 *** Locks held: none *** Locks wanted: * Lock 0 (initialized at netbsd:module_hook_init+0x1c sys/kern/kern_module_hook.c:132) lock address : netbsd:module_hook type : sleep/adaptive initialized : netbsd:module_hook_init+0x1c shared holds : 0 exclusive: 0 shares wanted: 0 exclusive: 0 relevant cpu : 0 last held: 0 relevant lwp : 0xfffff87c4b55e100 last held: 000000000000000000 last locked : 0 unlocked* : 0 owner field : 000000000000000000 wait/spin: 0/0 Turnstile: no active turnstile for this lock. ****** LWP 0.5 (softclk/0) @ 0xfffff87c4c5bc080, l_stat=1 *** Locks held: none *** Locks wanted: * Lock 0 (initialized at netbsd:module_hook_init+0x1c sys/kern/kern_module_hook.c:132) lock address : netbsd:module_hook type : sleep/adaptive initialized : netbsd:module_hook_init+0x1c shared holds : 0 exclusive: 0 shares wanted: 0 exclusive: 0 relevant cpu : 0 last held: 0 relevant lwp : 0xfffff87c4c5bc080 last held: 000000000000000000 last locked : 0 unlocked* : 0 owner field : 000000000000000000 wait/spin: 0/0 Turnstile: no active turnstile for this lock. ****** LWP 0.0 (swapper) @ 0xffffffff8673ee00, l_stat=7 *** Locks held: none *** Locks wanted: * Lock 0 (initialized at netbsd:module_hook_init+0x1c sys/kern/kern_module_hook.c:132) lock address : netbsd:module_hook type : sleep/adaptive initialized : netbsd:module_hook_init+0x1c shared holds : 0 exclusive: 0 shares wanted: 0 exclusive: 0 relevant cpu : 1 last held: 0 relevant lwp : 0xffffffff8673ee00 last held: 000000000000000000 last locked : 0 unlocked* : 0 owner field : 000000000000000000 wait/spin: 0/0 Turnstile: no active turnstile for this lock. [Locks tracked through CPUs] ******* Locks held on cpu0: * Lock 0 (initialized at netbsd:kprintf_init+0x72 sys/kern/subr_prf.c:155) lock address : netbsd:kprintf_mtx type : spin initialized : netbsd:kprintf_init+0x72 shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 0 relevant cpu : 0 last held: 0 relevant lwp : 0xfffff87b2a7e7500 last held: 0xfffff87b2a7e7500 last locked* : netbsd:kprintf_lock+0x50 unlocked : netbsd:kprintf_unlock+0x70 owner field : 0x0000000000000800 wait/spin: 0/1 PAGE FLAG PQ UOBJECT UANON 0xffffd68000007180 0045 00000000 0x0 0x0 0xffffd68000007200 0045 00000000 0x0 0x0 0xffffd68000007280 0045 00000000 0x0 0x0 0xffffd68000007300 0045 00000000 0x0 0x0 0xffffd68000007380 0045 00000000 0x0 0x0 0xffffd68000007400 0045 00000000 0x0 0x0 0xffffd68000007480 0045 00000000 0x0 0x0 0xffffd68000007500 0045 00000000 0x0 0x0 0xffffd68000007580 0045 00000000 0x0 0x0 0xffffd68000007600 0045 00000000 0x0 0x0 0xffffd68000007680 0045 00000000 0x0 0x0 0xffffd68000007700 0041 00000000 0x0 0x0 0xffffd68000007780 0041 00000000 0x0 0x0 0xffffd68000007800 0041 00000000 0x0 0x0 0xffffd68000007880 0041 00000000 0x0 0x0 0xffffd68000007900 0045 00000000 0x0 0x0 0xffffd68000007980 0041 00000000 0x0 0x0 0xffffd68000007a00 0041 00000000 0x0 0x0 0xffffd68000007a80 0041 00000000 0x0 0x0 0xffffd68000007b00 0041 00000000 0x0 0x0 0xffffd68000007b80 0041 00000000 0x0 0x0 0xffffd68000007c00 0041 00000000 0x0 0x0 0xffffd68000007c80 0041 00000000 0x0 0x0 0xffffd68000007d00 0041 00000000 0x0 0x0 0xffffd68000007d80 0041 00000000 0x0 0x0 0xffffd68000007e00 0041 00000000 0x0 0x0 0xffffd68000007e80 0041 00000000 0x0 0x0 0xffffd68000007f00 0041 00000000 0x0 0x0 0xffffd68000007f80 0041 00000000 0x0 0x0 0xffffd68000008000 0041 00000000 0x0 0x0 0xffffd68000008080 0041 00000000 0x0 0x0 0xffffd68000008100 0041 00000000 0x0 0x0 0xffffd68000008180 0041 00000000 0x0 0x0 0xffffd68000008200 0041 00000000 0x0 0x0 0xffffd68000008280 0041 00000000 0x0 0x0 0xffffd68000008300 0041 00000000 0x0 0x0 0xffffd68000008380 0041 00000000 0x0 0x0 0xffffd68000008400 0041 00000000 0x0 0x0 0xffffd68000008480 0041 00000000 0x0 0x0 0xffffd68000008500 0041 00000000 0x0 0x0 0xffffd68000008580 0041 00000000 0x0 0x0 0xffffd68000008600 0045 00000000 0x0 0x0 0xffffd68000008680 0041 00000000 0x0 0x0 0xffffd68000008700 0041 00000000 0x0 0x0 0xffffd68000008780 0041 00000000 0x0 0x0 0xffffd68000008800 0045 00000000 0x0 0x0 0xffffd68000008880 0041 00000000 0x0 0x0 0xffffd68000008900 0041 00000000 0x0 0x0 0xffffd68000008980 0041 00000000 0x0 0x0 0xffffd68000008a00 0041 00000000 0x0 0x0 0xffffd68000008a80 0041 00000000 0x0 0x0 0xffffd68000008b00 0041 00000000 0x0 0x0 0xffffd68000008b80 0041 00000000 0x0 0x0 0xffffd68000008c00 0041 00000000 0x0 0x0 0xffffd68000008c80 0041 00000000 0x0 0x0 0xffffd68000008d00 0041 00000000 0x0 0x0 0xffffd68000008d80 0041 00000000 0x0 0x0 0xffffd68000008e00 0041 00000000 0x0 0x0 0xffffd68000008e80 0041 00000000 0x0 0x0 0xffffd68000008f00 0041 00000000 0x0 0x0 0xffffd68000008f80 0041 00000000 0x0 0x0 0xffffd68000009000 0041 00000000 0x0 0x0 0xffffd68000009080 0045 00000000 0x0 0x0 0xffffd68000009100 0041 00000000 0x0 0x0 0xffffd68000009180 0041 00000000 0x0 0x0 0xffffd68000009200 0041 00000000 0x0 0x0 0xffffd68000009280 0041 00000000 0x0 0x0 0xffffd68000009300 0041 00000000 0x0 0x0 0xffffd68000009380 0041 00000000 0x0 0x0 0xffffd68000009400 0041 00000000 0x0 0x0 0xffffd68000009480 0041 00000000 0x0 0x0 0xffffd68000009500 0041 00000000 0x0 0x0 0xffffd68000009580 0041 00000000 0x0 0x0 0xffffd68000009600 0041 00000000 0x0 0x0 0xffffd68000009680 0041 00000000 0x0 0x0 0xffffd68000009700 0041 00000000 0x0 0x0 0xffffd68000009780 0041 00000000 0x0 0x0 0xffffd68000009800 0041 00000000 0x0 0x0 0xffffd68000009880 0041 00000000 0x0 0x0 0xffffd68000009900 0041 00000000 0x0 0x0 0xffffd68000009980 0041 00000000 0x0 0x0 0xffffd68000009a00 0041 00000000 0x0 0x0 0xffffd68000009a80 0041 00000000 0x0 0x0 0xffffd68000009b00 0041 00000000 0x0 0x0 0xffffd68000009b80 0041 00000000 0x0 0x0 0xffffd68000009c00 0041 00000000 0x0 0x0 0xffffd68000009c80 0041 00000000 0x0 0x0 0xffffd68000009d00 0041 00000000 0x0 0x0 0xffffd68000009d80 0041 00000000 0x0 0x0 0xffffd68000009e00 0041 00000000 0x0 0x0 0xffffd68000009e80 0045 00000000 0x0 0x0 0xffffd68000009f00 0041 00000000 0x0 0x0 0xffffd68000009f80 0041 00000000 0x0 0x0 0xffffd6800000a000 0041 00000000 0x0 0x0 0xffffd6800000a080 0041 00000000 0x0 0x0 0xffffd6800000a100 0041 00000000 0x0 0x0 0xffffd6800000a180 0041 00000000 0x0 0x0 0xffffd6800000a200 0041 00000000 0x0 0x0 0xffffd6800000a280 0041 00000000 0x0 0x0 0xffffd6800000a300 0041 00000000 0x0 0x0 0xffffd6800000a380 0041 00000000 0x0 0x0 0xffffd6800000a400 0041 00000000 0x0 0x0 0xffffd6800000a480 0041 00000000 0x0 0x0 0xffffd6800000a500 0041 00000000 0x0 0x0 0xffffd6800000a580 0041 00000000 0x0 0x0 0xffffd6800000a600 0041 00000000 0x0 0x0 0xffffd6800000a680 0041 00000000 0x0 0x0 0xffffd6800000a700 0041 00000000 0x0 0x0 0xffffd6800000a780 0041 00000000 0x0 0x0 0xffffd6800000a800 0041 00000000 0x0 0x0 0xffffd6800000a880 0041 00000000 0x0 0x0 0xffffd6800000a900 0041 00000000 0x0 0x0 0xffffd6800000a980 0041 00000000 0x0 0x0 0xffffd6800000aa00 0041 00000000 0x0 0x0 0xffffd6800000aa80 0041 00000000 0x0 0x0 0xffffd6800000ab00 0041 00000000 0x0 0x0 0xffffd6800000ab80 0041 00000000 0x0 0x0 0xffffd6800000ac00 0041 00000000 0x0 0x0 0xffffd6800000ac80 0041 00000000 0x0 0x0 0xffffd6800000ad00 0041 00000000 0x0 0x0 0xffffd6800000ad80 0041 00000000 0x0 0x0 0xffffd6800000ae00 0041 00000000 0x0 0x0 0xffffd6800000ae80 0041 00000000 0x0 0x0 0xffffd6800000af00 0045 00000000 0x0 0x0 0xffffd6800000af80 0045 00000000 0x0 0x0 0xffffd6800000b000 0041 00000000 0x0 0x0 0xffffd6800000b080 0041 00000000 0x0 0x0 0xffffd6800000b100 0041 00000000 0x0 0x0 0xffffd6800000b180 0045 00000000 0x0 0x0 0xffffd6800000b200 0041 00000000 0x0 0x0 0xffffd6800000b280 0045 00000000 0x0 0x0 0xffffd6800000b300 0045 00000000 0x0 0x0 0xffffd6800000b380 0045 00000000 0x0 0x0 0xffffd6800000b400 0041 00000000 0x0 0x0 0xffffd6800000b480 0041 00000000 0x0 0x0 0xffffd6800000b500 0045 00000000 0x0 0x0 0xffffd6800000b580 0045 00000000 0x0 0x0 0xffffd6800000b600 0045 00000000 0x0 0x0 0xffffd6800000b680 0045 00000000 0x0 0x0 0xffffd6800000b700 0045 00000000 0x0 0x0 0xffffd6800000b780 0045 00000000 0x0 0x0 0xffffd6800000b800 0045 00000000 0x0 0x0 0xffffd6800000b880 0041 00000000 0x0 0x0 0xffffd6800000b900 0045 00000000 0x0 0x0 0xffffd6800000b980 0045 00000000 0x0 0x0 0xffffd6800000ba00 0045 00000000 0x0 0x0 0xffffd6800000ba80 0045 00000000 0x0 0x0 0xffffd6800000bb00 0045 00000000 0x0 0x0 0xffffd6800000bb80 0045 00000000 0x0 0x0 0xffffd6800000bc00 0045 00000000 0x0 0x0 0xffffd6800000bc80 0041 00000000 0x0 0x0 0xffffd6800000bd00 0045 00000000 0x0 0x0 0xffffd6800000bd80 0045 00000000 0x0 0x0 0xffffd6800000be00 0045 00000000 0x0 0x0 0xffffd6800000be80 0045 00000000 0x0 0x0 0xffffd6800000bf00 0045 00000000 0x0 0x0 0xffffd6800000bf80 0045 00000000 0x0 0x0 0xffffd6800000c000 0045 00000000 0x0 0x0 0xffffd6800000c080 0045 00000000 0x0 0x0 0xffffd6800000c100 0045 00000000 0x0 0x0 0xffffd6800000c180 0045 00000000 0x0 0x0 0xffffd6800000c200 0045 00000000 0x0 0x0 0xffffd6800000c280 0045 00000000 0x0 0x0 0xffffd6800000c300 0045 00000000 0x0 0x0 0xffffd6800000c380 0045 00000000 0x0 0x0 0xffffd6800000c400 0045 00000000 0x0 0x0 0xffffd6800000c480 0045 00000000 0x0 0x0 0xffffd6800000c500 0045 00000000 0x0 0x0 0xffffd6800000c580 0045 00000000 0x0 0x0 0xffffd6800000c600 0045 00000000 0x0 0x0 0xffffd6800000c680 0045 00000000 0x0 0x0 0xffffd6800000c700 0041 00000000 0x0 0x0 0xffffd6800000c780 0041 00000000 0x0 0x0 0xffffd6800000c800 0045 00000000 0x0 0x0 0xffffd6800000c880 0045 00000000 0x0 0x0 0xffffd6800000c900 0045 00000000 0x0 0x0 0xffffd6800000c980 0045 00000000 0x0 0x0 0xffffd6800000ca00 0045 00000000 0x0 0x0 0xffffd6800000ca80 0045 00000000 0x0 0x0 0xffffd6800000cb00 0041 00000000 0x0 0x0 0xffffd6800000cb80 0041 00000000 0x0 0x0 0xffffd6800000cc00 0045 00000000 0x0 0x0 0xffffd6800000cc80 0045 00000000 0x0 0x0 0xffffd6800000cd00 0045 00000000 0x0 0x0 0xffffd6800000cd80 0041 00000000 0x0 0x0 0xffffd6800000ce00 0045 00000000 0x0 0x0 0xffffd6800000ce80 0041 00000000 0x0 0x0 0xffffd6800000cf00 0041 00000000 0x0 0x0 0xffffd6800000cf80 0041 00000000 0x0 0x0 0xffffd6800000d000 0041 00000000 0x0 0x0 0xffffd6800000d080 0045 00000000 0x0 0x0 0xffffd6800000d100 0041 00000000 0x0 0x0 0xffffd6800000d180 0041 00000000 0x0 0x0 0xffffd6800000d200 0041 00000000 0x0 0x0 0xffffd6800000d280 0041 00000000 0x0 0x0 0xffffd6800000d300 0045 00000000 0x0 0x0 0xffffd6800000d380 0041 00000000 0x0 0x0 0xffffd6800000d400 0041 00000000 0x0 0x0 0xffffd6800000d480 0045 00000000 0x0 0x0 0xffffd6800000d500 0041 00000000 0x0 0x0 0xffffd6800000d580 0041 00000000 0x0 0x0 0xffffd6800000d600 0041 00000000 0x0 0x0 0xffffd6800000d680 0041 00000000 0x0 0x0 0xffffd6800000d700 0041 00000000 0x0 0x0 0xffffd6800000d780 0045 00000000 0x0 0x0 0xffffd6800000d800 0041 00000000 0x0 0x0 0xffffd6800000d880 0041 00000000 0x0 0x0 0xffffd6800000d900 0041 00000000 0x0 0x0 0xffffd6800000d980 0041 00000000 0x0 0x0 0xffffd6800000da00 0041 00000000 0x0 0x0 0xffffd6800000da80 0045 00000000 0x0 0x0 0xffffd6800000db00 0045 00000000 0x0 0x0 0xffffd6800000db80 0045 00000000 0x0 0x0 0xffffd6800000dc00 0041 00000000 0x0 0x0 0xffffd6800000dc80 0041 00000000 0x0 0x0 0xffffd6800000dd00 0041 00000000 0x0 0x0 0xffffd6800000dd80 0041 00000000 0x0 0x0 0xffffd6800000de00 0041 00000000 0x0 0x0 0xffffd6800000de80 0041 00000000 0x0 0x0 0xffffd6800000df00 0045 00000000 0x0 0x0 0xffffd6800000df80 0045 00000000 0x0 0x0 0xffffd6800000e000 0045 00000000 0x0 0x0 0xffffd6800000e080 0041 00000000 0x0 0x0 0xffffd6800000e100 0041 00000000 0x0 0x0 0xffffd6800000e180 0045 00000000 0x0 0x0 0xffffd6800000e200 0041 00000000 0x0 0x0 0xffffd6800000e280 0041 00000000 0x0 0x0 0xffffd6800000e300 0045 00000000 0x0 0x0 0xffffd6800000e380 0041 00000000 0x0 0x0 0xffffd6800000e400 0045 00000000 0x0 0x0 0xffffd6800000e480 0041 00000000 0x0 0x0 0xffffd6800000e500 0045 00000000 0x0 0x0 0xffffd6800000e580 0041 00000000 0x0 0x0 0xffffd6800000e600 0045 00000000 0x0 0x0 0xffffd6800000e680 0045 00000000 0x0 0x0 0xffffd6800000e700 0041 00000000 0x0 0x0 0xffffd6800000e780 0041 00000000 0x0 0x0 0xffffd6800000e800 0045 00000000 0x0 0x0 0xffffd6800000e880 0045 00000000 0x0 0x0 0xffffd6800000e900 0041 00000000 0x0 0x0 0xffffd6800000e980 0041 00000000 0x0 0x0 0xffffd6800000ea00 0041 00000000 0x0 0x0 0xffffd6800000ea80 0041 00000000 0x0 0x0 0xffffd6800000eb00 0041 00000000 0x0 0x0 0xffffd6800000eb80 0045 00000000 0x0 0x0 0xffffd6800000ec00 0041 00000000 0x0 0x0 0xffffd6800000ec80 0041 00000000 0x0 0x0 0xffffd6800000ed00 0041 00000000 0x0 0x0 0xffffd6800000ed80 0041 00000000 0x0 0x0 0xffffd6800000ee00 0041 00000000 0x0 0x0 0xffffd6800000ee80 0045 00000000 0x0 0x0 0xffffd6800000ef00 0041 00000000 0x0 0x0 0xffffd6800000ef80 0041 00000000 0x0 0x0 0xffffd6800000f000 0041 00000000 0x0 0x0 0xffffd6800000f080 0045 00000000 0x0 0x0 0xffffd6800000f100 0041 00000000 0x0 0x0 0xffffd6800000f180 0041 00000000 0x0 0x0 0xffffd6800000f200 0041 00000000 0x0 0x0 0xffffd6800000f280 0041 00000000 0x0 0x0 0xffffd6800000f300 0041 00000000 0x0 0x0 0xffffd6800000f380 0041 00000000 0x0 0x0 0xffffd6800000f400 0045 00000000 0x0 0x0 0xffffd6800000f480 0041 00000000 0x0 0x0 0xffffd6800000f500 0041 00000000 0x0 0x0 0xffffd6800000f580 0041 00000000 0x0 0x0 0xffffd6800000f600 0041 00000000 0x0 0x0 0xffffd6800000f680 0045 00000000 0x0 0x0 0xffffd6800000f700 0041 00000000 0x0 0x0 0xffffd6800000f780 0041 00000000 0x0 0x0 0xffffd6800000f800 0041 00000000 0x0 0x0 0xffffd6800000f880 0045 00000000 0x0 0x0 0xffffd6800000f900 0041 00000000 0x0 0x0 0xffffd6800000f980 0045 00000000 0x0 0x0 0xffffd6800000fa00 0041 00000000 0x0 0x0 0xffffd6800000fa80 0041 00000000 0x0 0x0 0xffffd6800000fb00 0041 00000000 0x0 0x0 0xffffd6800000fb80 0041 00000000 0x0 0x0 0xffffd6800000fc00 0045 00000000 0x0 0x0 0xffffd6800000fc80 0041 00000000 0x0 0x0 0xffffd6800000fd00 0045 00000000 0x0 0x0 0xffffd6800000fd80 0041 00000000 0x0 0x0 0xffffd6800000fe00 0041 00000000 0x0 0x0 0xffffd6800000fe80 0041 00000000 0x0 0x0 0xffffd6800000ff00 0041 00000000 0x0 0x0 0xffffd6800000ff80 0041 00000000 0x0 0x0 0xffffd68000010000 0041 00000000 0x0 0x0 0xffffd68000010080 0041 00000000 0x0 0x0 0xffffd68000010100 0041 00000000 0x0 0x0 0xffffd68000010180 0045 00000000 0x0 0x0 0xffffd68000010200 0045 00000000 0x0 0x0 0xffffd68000010280 0041 00000000 0x0 0x0 0xffffd68000010300 0041 00000000 0x0 0x0 0xffffd68000010380 0041 00000000 0x0 0x0 0xffffd68000010400 0041 00000000 0x0 0x0 0xffffd68000010480 0045 00000000 0x0 0x0 0xffffd68000010500 0045 00000000 0x0 0x0 0xffffd68000010580 0041 00000000 0x0 0x0 0xffffd68000010600 0041 00000000 0x0 0x0 0xffffd68000010680 0041 00000000 0x0 0x0 0xffffd68000010700 0041 00000000 0x0 0x0 0xffffd68000010780 0041 00000000 0x0 0x0 0xffffd68000010800 0041 00000000 0x0 0x0 0xffffd68000010880 0041 00000000 0x0 0x0 0xffffd68000010900 0041 00000000 0x0 0x0 0xffffd68000010980 0045 00000000 0x0 0x0 0xffffd68000010a00 0045 00000000 0x0 0x0 0xffffd68000010a80 0045 00000000 0x0 0x0 0xffffd68000010b00 0041 00000000 0x0 0x0 0xffffd68000010b80 0041 00000000 0x0 0x0 0xffffd68000010c00 0041 00000000 0x0 0x0 0xffffd68000010c80 0045 00000000 0x0 0x0 0xffffd68000010d00 0041 00000000 0x0 0x0 0xffffd68000010d80 0041 00000000 0x0 0x0 0xffffd68000010e00 0041 00000000