[ 78.4300238] panic: kernel diagnostic assertion "l->l_stat == LSONPROC" failed: file "/syzkaller/managers/netbsd/kernel/sys/kern/kern_sleepq.c", line 221 [ 78.4300238] cpu0: Begin traceback... [ 78.4300238] vpanic() at netbsd:vpanic+0x241 sys/kern/subr_prf.c:336 [ 78.4300238] _GLOBAL__sub_D_65535_0_cpu_configure() at netbsd:_GLOBAL__sub_D_65535_0_cpu_configure [ 78.4300238] sleepq_enqueue() at netbsd:sleepq_enqueue+0x1c9 sys/kern/kern_sleepq.c:221 [ 78.4300238] turnstile_block() at netbsd:turnstile_block+0x249 x86_curlwp sys/arch/amd64/compile/obj/GENERIC_SYZKALLER/./machine/cpu.h:68 [inline] [ 78.4300238] turnstile_block() at netbsd:turnstile_block+0x249 KPREEMPT_DISABLE sys/sys/lwp.h:525 [inline] [ 78.4300238] turnstile_block() at netbsd:turnstile_block+0x249 sys/kern/kern_turnstile.c:438 [ 78.4300238] mutex_enter() at netbsd:mutex_enter+0x22f sys/kern/kern_mutex.c:692 [ 78.4300238] pool_put() at netbsd:pool_put+0x86 pool_put_quarantine sys/kern/subr_pool.c:2970 [inline] [ 78.4300238] pool_put() at netbsd:pool_put+0x86 sys/kern/subr_pool.c:1306 [ 78.4300238] radix_tree_remove_node() at netbsd:radix_tree_remove_node+0x2a4 sys/lib/libkern/../../../common/lib/libc/gen/radixtree.c:694 [ 78.4300238] exit1() at netbsd:exit1+0x13de sys/kern/kern_exit.c:571 [ 78.4300238] sys_exit() at netbsd:sys_exit+0x77 sys/kern/kern_exit.c:180 [ 78.4300238] syscall() at netbsd:syscall+0x57e sy_call sys/sys/syscallvar.h:65 [inline] [ 78.4300238] syscall() at netbsd:syscall+0x57e sy_invoke sys/sys/syscallvar.h:94 [inline] [ 78.4300238] syscall() at netbsd:syscall+0x57e sys/arch/x86/x86/syscall.c:138 [ 78.4300238] --- syscall (number 1) --- [ 78.4300238] 79b6b6799a6a: [ 78.4300238] cpu0: End traceback... [ 78.4300238] fatal breakpoint trap in supervisor mode [ 78.4300238] trap type 1 code 0 rip 0xffffffff8021e4b5 cs 0x8 rflags 0x246 cr2 0x73d66c67a4f0 ilevel 0x8 rsp 0xffffba017e8837c0 [ 78.4300238] curlwp 0xffffba001210ab00 pid 1206.1 lowest kstack 0xffffba017e87c2c0 Stopped in pid 1206.1 (syz-executor.4) at netbsd:breakpoint+0x5: leave ? breakpoint() at netbsd:breakpoint+0x5 db_panic() at netbsd:db_panic+0xe9 sys/ddb/db_panic.c:67 vpanic() at netbsd:vpanic+0x241 sys/kern/subr_prf.c:336 _GLOBAL__sub_D_65535_0_cpu_configure() at netbsd:_GLOBAL__sub_D_65535_0_cpu_configure sleepq_enqueue() at netbsd:sleepq_enqueue+0x1c9 sys/kern/kern_sleepq.c:221 turnstile_block() at netbsd:turnstile_block+0x249 x86_curlwp sys/arch/amd64/compile/obj/GENERIC_SYZKALLER/./machine/cpu.h:68 [inline] turnstile_block() at netbsd:turnstile_block+0x249 KPREEMPT_DISABLE sys/sys/lwp.h:525 [inline] turnstile_block() at netbsd:turnstile_block+0x249 sys/kern/kern_turnstile.c:438 mutex_enter() at netbsd:mutex_enter+0x22f sys/kern/kern_mutex.c:692 pool_put() at netbsd:pool_put+0x86 pool_put_quarantine sys/kern/subr_pool.c:2970 [inline] pool_put() at netbsd:pool_put+0x86 sys/kern/subr_pool.c:1306 radix_tree_remove_node() at netbsd:radix_tree_remove_node+0x2a4 sys/lib/libkern/../../../common/lib/libc/gen/radixtree.c:694 exit1() at netbsd:exit1+0x13de sys/kern/kern_exit.c:571 sys_exit() at netbsd:sys_exit+0x77 sys/kern/kern_exit.c:180 syscall() at netbsd:syscall+0x57e sy_call sys/sys/syscallvar.h:65 [inline] syscall() at netbsd:syscall+0x57e sy_invoke sys/sys/syscallvar.h:94 [inline] syscall() at netbsd:syscall+0x57e sys/arch/x86/x86/syscall.c:138 --- syscall (number 1) --- 79b6b6799a6a: ds db1e es 32a9 fs 37a0 gs 37f0 rdi ffffba000d92d488 rsi ffffba001210adb8 rbp ffffba017e8837c0 rbx ffffffff82810480 cpu_info_primary rdx 2 rcx ffffffff80d11b11 db_panic+0xd5 rax 0 r8 4 r9 1ffffffff0554b78 r10 ffffffff82aa5bc3 db_onpanic+0x3 r11 8000000000 r12 ffffba016d8a4000 r13 ffffffff821a4120 sigprop+0x200 r14 ffffba017e883850 r15 ffffba016d893068 rip ffffffff8021e4b5 breakpoint+0x5 cs 8 rflags 246 rsp ffffba017e8837c0 ss 0 netbsd:breakpoint+0x5: leave PID LID S CPU FLAGS STRUCT LWP * NAME WAIT 1275 > 1 7 1 0 ffffba00121f5a40 syz-executor.0 674 2 3 1 80 ffffba0012c50540 syz-executor.1 parked 674 1 2 0 10000000 ffffba0013aeb100 syz-executor.1 1166 2 3 1 80 ffffba0011f952c0 syz-executor.2 parked 1166 1 2 0 0 ffffba0011f76280 syz-executor.2 777 1 2 0 0 ffffba0013a7b500 syz-executor.3 1286 1 2 0 0 ffffba001212f740 syz-executor.5 602 1 2 1 0 ffffba0013a7b940 syz-executor.4 605 1 2 0 0 ffffba0013a7b0c0 syz-executor.0 600 1 2 1 0 ffffba0013a5e900 syz-executor.5 592 1 2 1 0 ffffba0013a5e4c0 syz-executor.1 601 1 2 1 0 ffffba0013a5e080 syz-executor.3 45 1 2 1 0 ffffba0013a568c0 syz-executor.2 40 10 3 0 80 ffffba0013a56480 syz-execprog parked 40 9 3 1 80 ffffba0013a56040 syz-execprog parked 40 8 3 1 80 ffffba0011c8ab40 syz-execprog kqueue 40 7 3 1 80 ffffba0011c8a700 syz-execprog parked 40 6 3 0 80 ffffba0012024bc0 syz-execprog parked 40 5 3 0 80 ffffba00135cabc0 syz-execprog parked 40 4 3 1 80 ffffba00135ca780 syz-execprog parked 40 3 3 0 80 ffffba0011c8db80 syz-execprog parked 40 2 3 1 80 ffffba0011c8d740 syz-execprog parked 40 1 3 1 80 ffffba0011efc1c0 syz-execprog parked 615 1 3 0 80 ffffba0011e2e980 sshd select 415 1 3 0 80 ffffba0012c90b00 getty nanoslp 561 1 3 0 80 ffffba0011efca40 getty nanoslp 562 1 3 1 80 ffffba0011efc600 getty nanoslp 533 1 3 1 80 ffffba0012b9c700 getty ttyraw 436 1 3 0 80 ffffba00135ca340 cron nanoslp 428 1 3 1 80 ffffba0012bf5900 inetd kqueue 503 1 3 0 80 ffffba0012bd0bc0 sshd select 485 1 3 1 80 ffffba001217e980 powerd kqueue 203 1 3 1 80 ffffba0012bdd8c0 syslogd kqueue 239 1 3 0 80 ffffba00121700c0 dhcpcd kqueue 234 1 3 0 80 ffffba0012064940 dhcpcd kqueue 1 1 3 0 80 ffffba0011e2e540 init wait 0 44 3 0 204 ffffba0011e84140 physiod physiod 0 48 3 0 204 ffffba0011e86180 pooldrain pooldrain 0 47 3 0 200 ffffba0011e849c0 ioflush syncer 0 46 3 0 200 ffffba0011e84580 pgdaemon pgdaemon 0 29 3 1 200 ffffba00116a1280 npfgc-0 npfgccv 0 43 3 1 204 ffffba0011e2e100 rt_free rt_free 0 42 3 1 204 ffffba0011e25940 unpgc unpgc 0 41 3 1 204 ffffba0011e25500 key_timehandler key_timehandler 0 40 3 1 204 ffffba0011e250c0 icmp6_wqinput/1 icmp6_wqinput 0 39 3 0 204 ffffba0011e1b900 icmp6_wqinput/0 icmp6_wqinput 0 38 3 1 204 ffffba0011e1b4c0 nd6_timer nd6_timer 0 37 3 1 204 ffffba0011e1b080 carp6_wqinput/1 carp6_wqinput 0 36 3 0 204 ffffba0011e168c0 carp6_wqinput/0 carp6_wqinput 0 35 3 1 204 ffffba0011e16480 carp_wqinput/1 carp_wqinput 0 34 3 0 204 ffffba0011e16040 carp_wqinput/0 carp_wqinput 0 33 3 1 204 ffffba0011c9bbc0 icmp_wqinput/1 icmp_wqinput 0 32 3 0 204 ffffba0011c9b780 icmp_wqinput/0 icmp_wqinput 0 31 3 1 204 ffffba0011c9b340 rt_timer rt_timer 0 30 3 0 204 ffffba0011c8d300 vmem_rehash vmem_rehash 0 28 3 0 204 ffffba000f35dac0 scsibus0 sccomp 0 27 3 0 200 ffffba000f35d680 pms0 pmsreset 0 26 3 1 204 ffffba000f35d240 xcall/1 xcall 0 25 1 1 200 ffffba000f35ca80 softser/1 0 24 1 1 200 ffffba000f35c640 softclk/1 0 23 1 1 200 ffffba000f35c200 softbio/1 0 22 1 1 200 ffffba000f26da40 softnet/1 0 21 1 1 201 ffffba000f26d600 idle/1 0 20 3 1 204 ffffba000f26d1c0 lnxpwrwq lnxpwrwq 0 19 3 1 204 ffffba000f26ba00 lnxlngwq lnxlngwq 0 18 3 1 204 ffffba000f26b5c0 lnxsyswq lnxsyswq 0 17 3 1 204 ffffba000f26b180 lnxrcugc lnxrcugc 0 16 3 0 204 ffffba000de4f9c0 sysmon smtaskq 0 15 3 1 204 ffffba000de4f580 pmfsuspend pmfsuspend 0 14 3 1 204 ffffba000de4f140 pmfevent pmfevent 0 13 3 0 204 ffffba000de40980 sopendfree sopendfr 0 12 3 1 204 ffffba000de40540 iflnkst iflnkst 0 11 3 0 204 ffffba000de40100 nfssilly nfssilly 0 10 3 1 200 ffffba000de34940 cachegc cachegc 0 9 3 0 204 ffffba000de34500 vdrain vdrain 0 8 3 0 200 ffffba000de340c0 modunload mod_unld 0 7 3 0 204 ffffba000de24900 xcall/0 xcall 0 6 1 0 200 ffffba000de244c0 softser/0 0 5 1 0 200 ffffba000de24080 softclk/0 0 4 1 0 200 ffffba000de218c0 softbio/0 0 3 1 0 200 ffffba000de21480 softnet/0 0 2 1 0 201 ffffba000de21040 idle/0 0 1 3 0 200 ffffffff82b6e280 swapper uvm [Locks tracked through LWPs] ****** LWP 1275.1 (syz-executor.0) @ 0xffffba00121f5a40, l_stat=7 *** Locks held: * Lock 0 (initialized at amap_ctor) lock address : 0xffffba0013499a80 type : sleep/adaptive initialized : 0xffffffff810d7855 shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 0 relevant cpu : 1 last held: 1 relevant lwp : 0xffffba00121f5a40 last held: 0xffffba00121f5a40 last locked* : 0xffffffff810e673f unlocked : 0xffffffff810e4620 owner field : 0xffffba00121f5a40 wait/spin: 0/0 Turnstile: no active turnstile for this lock. * Lock 1 (initialized at pmap_ctor) lock address : 0xffffba0012c6e180 type : sleep/adaptive initialized : 0xffffffff80276b39 shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 0 relevant cpu : 1 last held: 1 relevant lwp : 0xffffba00121f5a40 last held: 0xffffba00121f5a40 last locked* : 0xffffffff80278f6f unlocked : 0xffffffff802767aa owner field : 0xffffba00121f5a40 wait/spin: 0/0 Turnstile: no active turnstile for this lock. * Lock 2 (initialized at pool_init) lock address : 0xffffba000d93a0f0 type : sleep/adaptive initialized : 0xffffffff8120b0a9 shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 1 relevant cpu : 1 last held: 1 relevant lwp : 0xffffba00121f5a40 last held: 0xffffba00121f5a40 last locked* : 0xffffffff8120bc78 unlocked : 0xffffffff8120c2b6 owner field : 0xffffba00121f5a40 wait/spin: 1/0 Turnstile: => 0 waiting readers: => 1 waiting writers: *** Locks wanted: none ****** LWP 777.1 (syz-executor.3) @ 0xffffba0013a7b500, l_stat=2 *** Locks held: * Lock 0 (initialized at amap_ctor) lock address : 0xffffba0013a53d00 type : sleep/adaptive initialized : 0xffffffff810d7855 shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 0 relevant cpu : 0 last held: 0 relevant lwp : 0xffffba0013a7b500 last held: 0xffffba0013a7b500 last locked* : 0xffffffff810e673f unlocked : 0xffffffff810e4620 owner field : 0xffffba0013a7b500 wait/spin: 0/0 Turnstile: no active turnstile for this lock. *** Locks wanted: * Lock 0 (initialized at pmap_ctor) lock address : 0xffffba0012c8c980 type : sleep/adaptive initialized : 0xffffffff80276b39 shared holds : 0 exclusive: 0 shares wanted: 0 exclusive: 1 relevant cpu : 0 last held: 0 relevant lwp : 0xffffba0013a7b500 last held: 000000000000000000 last locked : 0xffffffff80278f6f unlocked*: 0xffffffff80279aef owner field : 0xffffba0013a7b500 wait/spin: 0/0 Turnstile: no active turnstile for this lock. ****** LWP 45.1 (syz-executor.2) @ 0xffffba0013a568c0, l_stat=2 *** Locks held: none *** Locks wanted: * Lock 0 (initialized at procinit) lock address : 0xffffba000d91a0c0 type : sleep/adaptive initialized : 0xffffffff81180a73 shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 1 relevant cpu : 1 last held: 0 relevant lwp : 0xffffba0013a568c0 last held: 0xffffba001210ab00 last locked* : 0xffffffff8115981c unlocked : 0xffffffff8115b85b owner field : 0xffffba001210ab00 wait/spin: 0/0 Turnstile: no active turnstile for this lock. ****** LWP 0.24 (softclk/1) @ 0xffffba000f35c640, l_stat=1 *** Locks held: none *** Locks wanted: * Lock 0 (initialized at module_hook_init) lock address : 0xffffffff82d8da80 type : sleep/adaptive initialized : 0xffffffff811752d2 shared holds : 0 exclusive: 0 shares wanted: 0 exclusive: 0 relevant cpu : 1 last held: 0 relevant lwp : 0xffffba000f35c640 last held: 000000000000000000 last locked : 000000000000000000 unlocked*: 000000000000000000 owner field : 000000000000000000 wait/spin: 0/0 Turnstile: no active turnstile for this lock. ****** LWP 0.12 (iflnkst) @ 0xffffba000de40540, l_stat=3 *** Locks held: none *** Locks wanted: * Lock 0 (initialized at module_hook_init) lock address : 0xffffffff82d8da80 type : sleep/adaptive initialized : 0xffffffff811752d2 shared holds : 0 exclusive: 0 shares wanted: 0 exclusive: 0 relevant cpu : 1 last held: 0 relevant lwp : 0xffffba000de40540 last held: 000000000000000000 last locked : 000000000000000000 unlocked*: 000000000000000000 owner field : 000000000000000000 wait/spin: 0/0 Turnstile: no active turnstile for this lock. ****** LWP 0.5 (softclk/0) @ 0xffffba000de24080, l_stat=1 *** Locks held: none *** Locks wanted: * Lock 0 (initialized at module_hook_init) lock address : 0xffffffff82d8da80 type : sleep/adaptive initialized : 0xffffffff811752d2 shared holds : 0 exclusive: 0 shares wanted: 0 exclusive: 0 relevant cpu : 0 last held: 0 relevant lwp : 0xffffba000de24080 last held: 000000000000000000 last locked : 000000000000000000 unlocked*: 000000000000000000 owner field : 000000000000000000 wait/spin: 0/0 Turnstile: no active turnstile for this lock. [Locks tracked through CPUs] ******* Locks held on cpu0: * Lock 0 (initialized at turnstile_init) lock address : 0xffffffff82d94e80 type : spin initialized : 0xffffffff811c74b4 shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 0 relevant cpu : 0 last held: 0 relevant lwp : 0xffffba001210ab00 last held: 0xffffba001210ab00 last locked* : 0xffffffff811c7599 unlocked : 0xffffffff81176e49 owner field : 0x0000000000010700 wait/spin: 0/1 PAGE FLAG PQ UOBJECT UANON 0xffffba0000014180 0041 00000000 0x0 0x0 0xffffba00000141f8 0041 00000000 0x0 0x0 0xffffba0000014270 0041 00000000 0x0 0x0 0xffffba00000142e8 0041 00000000 0x0 0x0 0xffffba0000014360 0041 00000000 0x0 0x0 0xffffba00000143d8 0041 00000000 0x0 0x0 0xffffba0000014450 0041 00000000 0x0 0x0 0xffffba00000144c8 0041 00000000 0x0 0x0 0xffffba0000014540 0041 00000000 0x0 0x0 0xffffba00000145b8 0041 00000000 0x0 0x0 0xffffba0000014630 0041 00000000 0x0 0x0 0xffffba00000146a8 0041 00000000 0x0 0x0 0xffffba0000014720 0041 00000000 0x0 0x0 0xffffba0000014798 0041 00000000 0x0 0x0 0xffffba0000014810 0041 00000000 0x0 0x0 0xffffba0000014888 0041 00000000 0x0 0x0 0xffffba0000014900 0041 00000000 0x0 0x0 0xffffba0000014978 0041 00000000 0x0 0x0 0xffffba00000149f0 0041 00000000 0x0 0x0 0xffffba0000014a68 0041 00000000 0x0 0x0 0xffffba0000014ae0 0041 00000000 0x0 0x0 0xffffba0000014b58 0041 00000000 0x0 0x0 0xffffba0000014bd0 0041 00000000 0x0 0x0 0xffffba0000014c48 0041 00000000 0x0 0x0 0xffffba0000014cc0 0041 00000000 0x0 0x0 0xffffba0000014d38 0041 00000000 0x0 0x0 0xffffba0000014db0 0041 00000000 0x0 0x0 0xffffba0000014e28 0041 00000000 0x0 0x0 0xffffba0000014ea0 0041 00000000 0x0 0x0 0xffffba0000014f18 0041 00000000 0x0 0x0 0xffffba0000014f90 0041 00000000 0x0 0x0 0xffffba0000015008 0041 00000000 0x0 0x0 0xffffba0000015080 0041 00000000 0x0 0x0 0xffffba00000150f8 0041 00000000 0x0 0x0 0xffffba0000015170 0041 00000000 0x0 0x0 0xffffba00000151e8 0041 00000000 0x0 0x0 0xffffba0000015260 0041 00000000 0x0 0x0 0xffffba00000152d8 0041 00000000 0x0 0x0 0xffffba0000015350 0041 00000000 0x0 0x0 0xffffba00000153c8 0041 00000000 0x0 0x0 0xffffba0000015440 0041 00000000 0x0 0x0 0xffffba00000154b8 0041 00000000 0x0 0x0 0xffffba0000015530 0041 00000000 0x0 0x0 0xffffba00000155a8 0041 00000000 0x0 0x0 0xffffba0000015620 0041 00000000 0x0 0x0 0xffffba0000015698 0041 00000000 0x0 0x0 0xffffba0000015710 0041 00000000 0x0 0x0 0xffffba0000015788 0041 00000000 0x0 0x0 0xffffba0000015800 0041 00000000 0x0 0x0 0xffffba0000015878 0041 00000000 0x0 0x0 0xffffba00000158f0 0041 00000000 0x0 0x0 0xffffba0000015968 0041 00000000 0x0 0x0 0xffffba00000159e0 0041 00000000 0x0 0x0 0xffffba0000015a58 0041 00000000 0x0 0x0 0xffffba0000015ad0 0041 00000000 0x0 0x0 0xffffba0000015b48 0041 00000000 0x0 0x0 0xffffba0000015bc0 0041 00000000 0x0 0x0 0xffffba0000015c38 0041 00000000 0x0 0x0 0xffffba0000015cb0 0041 00000000 0x0 0x0 0xffffba0000015d28 0041 00000000 0x0 0x0 0xffffba0000015da0 0041 00000000 0x0 0x0 0xffffba0000015e18 0041 00000000 0x0 0x0 0xffffba0000015e90 0041 00000000 0x0 0x0 0xffffba0000015f08 0041 00000000 0x0 0x0 0xffffba0000015f80 0041 00000000 0x0 0x0 0xffffba0000015ff8 0041 00000000 0x0 0x0 0xffffba0000016070 0041 00000000 0x0 0x0 0xffffba00000160e8 0041 00000000 0x0 0x0 0xffffba0000016160 0041 00000000 0x0 0x0 0xffffba00000161d8 0041 00000000 0x0 0x0 0xffffba0000016250 0041 00000000 0x0 0x0 0xffffba00000162c8 0041 00000000 0x0 0x0 0xffffba0000016340 0041 00000000 0x0 0x0 0xffffba00000163b8 0041 00000000 0x0 0x0 0xffffba0000016430 0045 00000000 0x0 0x0 0xffffba00000164a8 0041 00000000 0x0 0x0 0xffffba0000016520 0045 00000000 0x0 0x0 0xffffba0000016598 0041 00000000 0x0 0x0 0xffffba0000016610 0041 00000000 0x0 0x0 0xffffba0000016688 0041 00000000 0x0 0x0 0xffffba0000016700 0045 00000000 0x0 0x0 0xffffba0000016778 0041 00000000 0x0 0x0 0xffffba00000167f0 0045 00000000 0x0 0x0 0xffffba0000016868 0045 00000000 0x0 0x0 0xffffba00000168e0 0045 00000000 0x0 0x0 0xffffba0000016958 0045 00000000 0x0 0x0 0xffffba00000169d0 0045 00000000 0x0 0x0 0xffffba0000016a48 0045 00000000 0x0 0x0 0xffffba0000016ac0 0045 00000000 0x0 0x0 0xffffba0000016b38 0045 00000000 0x0 0x0 0xffffba0000016bb0 0041 00000000 0x0 0x0 0xffffba0000016c28 0045 00000000 0x0 0x0 0xffffba0000016ca0 0041 00000000 0x0 0x0 0xffffba0000016d18 0045 00000000 0x0 0x0 0xffffba0000016d90 0045 00000000 0x0 0x0 0xffffba0000016e08 0045 00000000 0x0 0x0 0xffffba0000016e80 0041 00000000 0x0 0x0 0xffffba0000016ef8 0045 00000000 0x0 0x0 0xffffba0000016f70 0041 00000000 0x0 0x0 0xffffba0000016fe8 0041 00000000 0x0 0x0 0xffffba0000017060 0041 00000000 0x0 0x0 0xffffba00000170d8 0041 00000000 0x0 0x0 0xffffba0000017150 0041 00000000 0x0 0x0 0xffffba00000171c8 0041 00000000 0x0 0x0 0xffffba0000017240 0041 00000000 0x0 0x0 0xffffba00000172b8 0041 00000000 0x0 0x0 0xffffba0000017330 0041 00000000 0x0 0x0 0xffffba00000173a8 0041 00000000 0x0 0x0 0xffffba0000017420 0041 00000000 0x0 0x0 0xffffba0000017498 0041 00000000 0x0 0x0 0xffffba0000017510 0041 00000000 0x0 0x0 0xffffba0000017588 0041 00000000 0x0 0x0 0xffffba0000017600 0041 00000000 0x0 0x0 0xffffba0000017678 0041 00000000 0x0 0x0 0xffffba00000176f0 0041 00000000 0x0 0x0 0xffffba0000017768 0041 00000000 0x0 0x0 0xffffba00000177e0 0041 00000000 0x0 0x0 0xffffba0000017858 0041 00000000 0x0 0x0 0xffffba00000178d0 0041 00000000 0x0 0x0 0xffffba0000017948 0041 00000000 0x0 0x0 0xffffba00000179c0 0041 00000000 0x0 0x0 0xffffba0000017a38 0041 00000000 0x0 0x0 0xffffba0000017ab0 0041 00000000 0x0 0x0 0xffffba0000017b28 0041 00000000 0x0 0x0 0xffffba0000017ba0 0041 00000000 0x0 0x0 0xffffba0000017c18 0041 00000000 0x0 0x0 0xffffba0000017c90 0041 00000000 0x0 0x0 0xffffba0000017d08 0041 00000000 0x0 0x0 0xffffba0000017d80 0041 00000000 0x0 0x0 0xffffba0000017df8 0041 00000000 0x0 0x0 0xffffba0000017e70 0041 00000000 0x0 0x0 0xffffba0000017ee8 0041 00000000 0x0 0x0 0xffffba0000017f60 0041 00000000 0x0 0x0 0xffffba0000017fd8 0041 00000000 0x0 0x0 0xffffba0000018050 0041 00000000 0x0 0x0 0xffffba00000180c8 0041 00000000 0x0 0x0 0xffffba0000018140 0041 00000000 0x0 0x0 0xffffba00000181b8 0041 00000000 0x0 0x0 0xffffba0000018230 0041 00000000 0x0 0x0 0xffffba00000182a8 0041 00000000 0x0 0x0 0xffffba0000018320 0041 00000000 0x0 0x0 0xffffba0000018398 0041 00000000 0x0 0x0 0xffffba0000018410 0041 00000000 0x0 0x0 0xffffba0000018488 0041 00000000 0x0 0x0 0xffffba0000018500 0041 00000000 0x0 0x0 0xffffba0000018578 0041 00000000 0x0 0x0 0xffffba00000185f0 0041 00000000 0x0 0x0 0xffffba0000018668 0041 00000000 0x0 0x0 0xffffba00000186e0 0041 00000000 0x0 0x0 0xffffba0000018758 0041 00000000 0x0 0x0 0xffffba00000187d0 0041 00000000 0x0 0x0 0xffffba0000018848 0041 00000000 0x0 0x0 0xffffba00000188c0 0041 00000000 0x0 0x0 0xffffba0000018938 0041 00000000 0x0 0x0 0xffffba00000189b0 0041 00000000 0x0 0x0 0xffffba0000018a28 0041 00000000 0x0 0x0 0xffffba0000018aa0 0041 00000000 0x0 0x0 0xffffba0000018b18 0041 00000000 0x0 0x0 0xffffba0000018b90 0041 00000000 0x0 0x0 0xffffba0000018c08 0041 00000000 0x0 0x0 0xffffba0000018c80 0041 00000000 0x0 0x0 0xffffba0000018cf8 0041 00000000 0x0 0x0 0xffffba0000018d70 0041 00000000 0x0 0x0 0xffffba0000018de8 0041 00000000 0x0 0x0 0xffffba0000018e60 0041 00000000 0x0 0x0 0xffffba0000018ed8 0041 00000000 0x0 0x0 0xffffba0000018f50 0041 00000000 0x0 0x0 0xffffba0000018fc8 0041 00000000 0x0 0x0 0xffffba0000019040 0041 00000000 0x0 0x0 0xffffba00000190b8 0041 00000000 0x0 0x0 0xffffba0000019130 0041 00000000 0x0 0x0 0xffffba00000191a8 0041 00000000 0x0 0x0 0xffffba0000019220 0041 00000000 0x0 0x0 0xffffba0000019298 0041 00000000 0x0 0x0 0xffffba0000019310 0041 00000000 0x0 0x0 0xffffba0000019388 0041 00000000 0x0 0x0 0xffffba0000019400 0041 00000000 0x0 0x0 0xffffba0000019478 0041 00000000 0x0 0x0 0xffffba00000194f0 0041 00000000 0x0 0x0 0xffffba0000019568 0041 00000000 0x0 0x0 0xffffba00000195e0 0041 00000000 0x0 0x0 0xffffba0000019658 0041 00000000 0x0 0x0 0xffffba00000196d0 0041 00000000 0x0 0x0 0xffffba0000019748 0041 00000000 0x0 0x0 0xffffba00000197c0 0041 00000000 0x0 0x0 0xffffba0000019838 0041 00000000 0x0 0x0 0xffffba00000198b0 0041 00000000 0x0 0x0 0xffffba0000019928 0041 00000000 0x0 0x0 0xffffba00000199a0 0041 00000000 0x0 0x0 0xffffba0000019a18 0041 00000000 0x0 0x0 0xffffba0000019a90 0041 00000000 0x0 0x0 0xffffba0000019b08 0041 00000000 0x0 0x0 0xffffba0000019b80 0041 00000000 0x0 0x0 0xffffba0000019bf8 0041 00000000 0x0 0x0 0xffffba0000019c70 0041 00000000 0x0 0x0 0xffffba0000019ce8 0041 00000000 0x0 0x0 0xffffba0000019d60 0041 00000000 0x0 0x0 0xffffba0000019dd8 0041 00000000 0x0 0x0 0xffffba0000019e50 0041 00000000 0x0 0x0 0xffffba0000019ec8 0041 00000000 0x0 0x0 0xffffba0000019f40 0041 00000000 0x0 0x0 0xffffba0000019fb8 0041 00000000 0x0 0x0 0xffffba000001a030 0041 00000000 0x0 0x0 0xffffba000001a0a8 0041 00000000 0x0 0x0 0xffffba000001a120 0041 00000000 0x0 0x0 0xffffba000001a198 0041 00000000 0x0 0x0 0xffffba000001a210 0041 00000000 0x0 0x0 0xffffba000001a288 0041 00000000 0x0 0x0 0xffffba000001a300 0041 00000000 0x0 0x0 0xffffba000001a378 0041 00000000 0x0 0x0 0xffffba000001a3f0 0001 00000000 0x0 0x0 0xffffba000001a468 0001 00000000 0x0 0x0 0xffffba000001a4e0 0001 00000000 0x0 0x0 0xffffba000001a558 0001 00000000 0x0 0x0 0xffffba000001a5d0 0001 00000000 0x0 0x0 0xffffba000001a648 0001 00000000 0x0 0x0 0xffffba000001a6c0 0001 00000000 0x0 0x0 0xffffba000001a738 0001 00000000 0x0 0x0 0xffffba000001a7b0 0001 00000000 0x0 0x0 0xffffba000001a828 0001 00000000 0x0 0x0 0xffffba000001a8a0 0001 00000000 0x0 0x0 0xffffba000001a918 0001 00000000 0x0 0x0 0xffffba000001a990 0001 00000000 0x0 0x0 0xffffba000001aa08 0001 00000000 0x0 0x0 0xffffba000001aa80 0001 00000000 0x0 0x0 0xffffba000001aaf8 0001 00000000 0x0 0x0 0xffffba000001ab70 0001 00000000 0x0 0x0 0xffffba000001abe8 0001 00000000 0x0 0x0 0xffffba000001ac60 0001 00000000 0x0 0x0 0xffffba000001acd8 0001 00000000 0x0 0x0 0xffffba000001ad50 0001 00000000 0x0 0x0 0xffffba000001adc8 0001 00000000 0x0 0x0 0xffffba000001ae40 0001 00000000 0x0 0x0 0xffffba000001aeb8 0001 00000000 0x0 0x0 0xffffba000001af30 0001 00000000 0x0 0x0 0xffffba000001afa8 0001 00000000 0x0 0x0 0xffffba000001b020 0001 00000000 0x0 0x0 0xffffba000001b098 0001 00000000 0x0 0x0 0xffffba000001b110 0001 00000000 0x0 0x0 0xffffba000001b188 0001 00000000 0x0 0x0 0xffffba000001b200 0001 00000000 0x0 0x0 0xffffba000001b278 0001 00000000 0x0 0x0 0xffffba000001b2f0 0001 00000000 0x0 0x0 0xffffba000001b368 0001 00000000 0x0 0x0 0xffffba000001b3e0 0001 00000000 0x0 0x0 0xffffba000001b458 0001 00000000 0x0 0x0 0xffffba000001b4d0 0001 00000000 0x0 0x0 0xffffba000001b548 0001 00000000 0x0 0x0 0xffffba000001b5c0 0001 00000000 0x0 0x0 0xffffba000001b638 0001 00000000 0x0 0x0 0xffffba000001b6b0 0001 00000000 0x0 0x0 0xffffba000001b728 0001 00000000 0x0 0x0 0xffffba000001b7a0 0001 00000000 0x0 0x0 0xffffba000001b818 0001 00000000 0x0 0x0 0xffffba000001b890 0001 00000000 0x0 0x0 0xffffba000001b908 0001 00000000 0x0 0x0 0xffffba000001b980 0001 00000000 0x0 0x0 0xffffba000001b9f8 0001 00000000 0x0 0x0 0xffffba000001ba70 0001 00000000 0x0 0x0 0xffffba000001bae8 0001 00000000 0x0 0x0 0xffffba000001bb60 0001 00000000 0x0 0x0 0xffffba000001bbd8 0001 00000000 0x0 0x0 0xffffba000001bc50 0001 00000000 0x0 0x0 0xffffba000001bcc8 0001 00000000 0x0 0x0 0xffffba000001bd40 0041 00000000 0x0 0x0 0xffffba000001bdb8 0041 00000000 0x0 0x0 0xffffba000001be30 0041 00000000 0x0 0x0 0xffffba000001bea8 0041 00000000 0x0 0x0 0xffffba000001bf20 0041 00000000 0x0 0x0 0xffffba000001bf98 0041 00000000 0x0 0x0 0xffffba000001c010 0041 00000000 0x0 0x0 0xffffba000001c088 0041 00000000 0x0 0x0 0xffffba000001c100 0041 00000000 0x0 0x0 0xffffba000001c178 0041 00000000 0x0 0x0 0xffffba000001c1f0 0041 00000000 0x0 0x0 0xffffba000001c268 0041 00000000 0x0 0x0 0xffffba000001c2e0 0041 00000000 0x0 0x0 0xffffba000001c358 0041 00000000 0x0 0x0 0xffffba000001c3d0 0041 00000000 0x0 0x0 0xffffba000001c448 0041 00000000 0x0 0x0 0xffffba000001c4c0 0041 00000000 0x0 0x0 0xffffba000001c538 0041 00000000 0x0 0x0 0xffffba000001c5b0 0041 00000000 0x0 0x0 0xffffba000001c628 0041 00000000 0x0 0x0 0xffffba000001c6a0 0041 00000000 0x0 0x0 0xffffba000001c718 0041 00000000 0x0 0x0 0xffffba000001c790 0041 00000000 0x0 0x0 0xffffba000001c808 0041 00000000 0x0 0x0 0xffffba000001c880 0041 00000000 0x0 0x0 0xffffba000001c8f8 0041 00000000 0x0 0x0 0xffffba000001c970 0041 00000000 0x0 0x0 0xffffba000001c9e8 0041 00000000 0x0 0x0 0xffffba000001ca60 0041 00000000 0x0 0x0 0xffffba000001cad8 0041 00000000 0x0 0x0 0xffffba000001cb50 0041 00000000 0x0 0x0 0xffffba000001cbc8 0041 00000000 0x0 0x0 0xffffba000001cc40 0041 00000000 0x0 0x0 0xffffba000001ccb8 0041 00000000 0x0 0x0 0xffffba000001cd30 0041 00000000 0x0 0x0 0xffffba000001cda8 0041 00000000 0x0 0x0 0xffffba000001ce20 0041 00000000 0x0 0x0 0xffffba000001ce98 0041 00000000 0x0 0x0 0xffffba000001cf10 0041 00000000 0x0 0x0 0xffffba000001cf88 0041 00000000 0x0 0x0 0xffffba000001d000 0041 00000000 0x0 0x0 0xffffba000001d078 0041 00000000 0x0 0x0 0xffffba000001d0f0 0041 00000000 0x0 0x0 0xffffba000001d168 0041 00000000 0x0 0x0 0xffffba000001d1e0 0041 00000000 0x0 0x0 0xffffba000001d258 0041 00000000 0x0 0x0 0xffffba000001d2d0 0041 00000000 0x0 0x0 0xffffba000001d348 0041 00000000 0x0 0x0 0xffffba000001d3c0 0001 00000000 0x0 0x0 0xffffba000001d438 0001 00000000 0x0 0x0 0xffffba000001d4b0 0001 00000000 0x0 0x0 0xffffba000001d528 0001 00000000 0x0 0x0 0xffffba000001d5a0 0001 00000000 0x0 0x0 0xffffba000001d618 0001 00000000 0x0 0x0 0xffffba000001d690 0001 00000000 0x0 0x0 0xffffba000001d708 0001 00000000 0x0 0x0 0xffffba000001d780 0001 00000000 0x0 0x0 0xffffba000001d7f8 0001 00000000 0x0 0x0 0xffffba000001d870 0001 00000000 0x0 0x0 0xffffba000001d8e8 0001 00000000 0x0 0x0 0xffffba000001d960 0001 00000000 0x0 0x0 0xffffba000001d9d8 0001 00000000 0x0 0x0 0xffffba000001da50 0001 00000000 0x0 0x0 0xffffba000001dac8 0001 00000000 0x0 0x0 0xffffba000001db40 0001 00000000 0x0 0x0 0xffffba000001dbb8 0001 00000000 0x0 0x0 0xffffba000001dc30 0001 00000000 0x0 0x0 0xffffba000001dca8 0001 00000000 0x0 0x0 0xffffba000001dd20 0001 00000000 0x0 0x0 0xffffba000001dd98 0001 00000000 0x0 0x0 0xffffba000001de10 0001 00000000 0x0 0x0 0xffffba000001de88 0001 00000000 0x0 0x0 0xffffba000001df00 0001 00000000 0x0 0x0 0xffffba000001df78 0001 00000000 0x0 0x0 0xffffba000001dff0 0001 00000000 0x0 0x0 0xffffba000001e068 0001 00000000 0x0 0x0 0xffffba000001e0e0 0001 00000000 0x0 0x0 0xffffba000001e158 0001 00000000 0x0 0x0 0xffffba000001e1d0 0001 00000000 0x0 0x0 0xffffba000001e248 0001 00000000 0x0 0x0 0xffffba000001e2c0 0001 00000000 0x0 0x0 0xffffba000001e338 0001 00000000 0x0 0x0 0xffffba000001e3b0 0001 00000000 0x0 0x0 0xffffba000001e428 0001 00000000 0x0 0x0 0xffffba000001e4a0 0001 00000000 0x0 0x0 0xffffba000001e518 0001 00000000 0x0 0x0 0xffffba000001e590 0001 00000000 0x0 0x0 0xffffba000001e608 0001 00000000 0x0 0x0 0xffffba000001e680 0001 00000000 0x0 0x0 0xffffba000001e6f8 0001 00000000 0x0 0x0 0xffffba000001e770 0001 00000000 0x0 0x0 0xffffba000001e7e8 0001 00000000 0x0 0x0 0xffffba000001e860 0001 00000000 0x0 0x0 0xffffba000001e8d8 0001 00000000 0x0 0x0 0xffffba000001e950 0001 00000000 0x0 0x0 0xffffba000001e9c8 0001 00000000 0x0 0x0 0xffffba000001ea40 0001 00000000 0x0 0x0 0xffffba000001eab8 0001 00000000 0x0 0x0 0xffffba000001eb30 0001 00000000 0x0 0x0 0xffffba000001eba8 0001 00000000 0x0 0x0 0xffffba000001ec20 0001 00000000 0x0 0x0 0xffffba000001ec98 0001 00000000 0x0 0x0 0xffffba000001ed10 0041 00000000 0x0 0x0 0xffffba000001ed88 0041 00000000 0x0 0x0 0xffffba000001ee00 0041 00000000 0x0 0x0 0xffffba000001ee78 0041 00000000 0x0 0x0 0xffffba000001eef0 0041 00000000 0x0 0x0 0xffffba000001ef68 0041 00000000 0x0 0x0 0xffffba000001efe0 0041 00000000 0x0 0x0 0xffffba000001f058 0041 00000000 0x0 0x0 0xffffba000001f0d0 0041 00000000 0x0 0x0 0xffffba000001f148 0041 00000000 0x0 0x0 0xffffba000001f1c0 0041 00000000 0x0 0x0 0xffffba000001f238 0041 00000000 0x0 0x0 0xffffba000001f2b0 0041 00000000 0x0 0x0 0xffffba000001f328 0041 00000000 0x0 0x0 0xffffba000001f3a0 0041 00000000 0x0 0x0 0xffffba000001f418 0041 00000000 0x0 0x0 0xffffba000001f490 0041 00000000 0x0 0x0 0xffffba000001f508 0041 00000000 0x0 0x0 0xffffba000001f580 0041 00000000 0x0 0x0 0xffffba000001f5f8 0041 00000000 0x0 0x0 0xffffba000001f670 0041 00000000 0x0 0x0 0xffffba000001f6e8 0041 00000000 0x0 0x0 0xffffba000001f760 0041 00000000 0x0 0x0 0xffffba000001f7d8 0041 00000000 0x0 0x0 0xffffba000001f850 0041 00000000 0x0 0x0 0xffffba000001f8c8 0041 00000000 0x0 0x0 0xffffba000001f940 0041 00000000 0x0 0x0 0xffffba000001f9b8 0041 00000000 0x0 0x0 0xffffba000001fa30 0041 00000000 0x0 0x0 0xffffba000001faa8 0041 00000000 0x0 0x0 0xffffba000001fb20 0041 00000000 0x0 0x0 0xffffba000001fb98 0041 00000000 0x0 0x0 0xffffba000001fc10 0041 00000000 0x0 0x0 0xffffba000001fc88 0041 00000000 0x0 0x0 0xffffba000001fd00 0041 00000000 0x0 0x0 0xffffba000001fd78 0041 00000000 0x0 0x0 0xffffba000001fdf0 0041 00000000 0x0 0x0 0xffffba000001fe68 0041 00000000 0x0 0x0 0xffffba000001fee0 0041 00000000 0x0 0x0 0xffffba000001ff58 0041 00000000 0x0 0x0 0xffffba000001ffd0 0041 00000000 0x0 0x0 0xffffba0000020048 0041 00000000 0x0 0x0 0xffffba00000200c0 0041 00000000 0x0 0x0 0xffffba0000020138 0041 00000000 0x0 0x0 0xffffba00000201b0 0041 00000000 0x0 0x0 0xffffba0000020228 0041 00000000 0x0 0x0 0xffffba00000202a0 0041 00000000 0x0 0x0 0xffffba0000020318 0041 00000000 0x0 0x0 0xffffba0000020390 0041 00000000 0x0 0x0 0xffffba0000020408 0001 00000000 0x0 0x0 0xffffba0000020480 0001 00000000 0x0 0x0 0xffffba00000204f8 0001 00000000 0x0 0x0 0xffffba0000020570 0001 00000000 0x0 0x0 0xffffba00000205e8 0001 00000000 0x0 0x0 0xffffba0000020660 0001 00000000 0x0 0x0 0xffffba00000206d8 0001 00000000 0x0 0x0 0xffffba0000020750 0001 00000000 0x0 0x0 0xffffba00000207c8 0001 00000000 0x0 0x0 0xffffba0000020840 0001 00000000 0x0 0x0 0xffffba00000208b8 0001 00000000 0x0 0x0 0xffffba0000020930 0001 00000000