[ 164.5364344] panic: kernel diagnostic assertion "l->l_stat == LSONPROC" failed: file "/syzkaller/managers/netbsd-kmsan/kernel/sys/kern/kern_sleepq.c", line 221 [ 164.5364344] cpu0: Begin traceback... [ 164.5364344] vpanic() at netbsd:vpanic+0x7c1 sys/kern/subr_prf.c:334 [ 164.5364344] kern_assert() at netbsd:kern_assert+0x214 [ 164.5364344] sleepq_enqueue() at netbsd:sleepq_enqueue+0x614 sys/kern/kern_sleepq.c:221 [ 164.5364344] turnstile_block() at netbsd:turnstile_block+0xbed KPREEMPT_DISABLE sys/sys/lwp.h:526 [inline] [ 164.5364344] turnstile_block() at netbsd:turnstile_block+0xbed sys/kern/kern_turnstile.c:438 [ 164.5364344] mutex_enter() at netbsd:mutex_enter+0x15eb sys/kern/kern_mutex.c:459 [ 164.5364344] pool_put() at netbsd:pool_put+0x8e [ 164.5364344] radix_tree_remove_node() at netbsd:radix_tree_remove_node+0xc1d sys/lib/libkern/../../../common/lib/libc/gen/radixtree.c:686 [ 164.5364344] exit1() at netbsd:exit1+0x3bf5 sys/kern/kern_exit.c:570 [ 164.5364344] exit1() at netbsd:exit1 [ 164.5364344] syscall() at netbsd:syscall+0x35d sy_call sys/sys/syscallvar.h:65 [inline] [ 164.5364344] syscall() at netbsd:syscall+0x35d sy_invoke sys/sys/syscallvar.h:94 [inline] [ 164.5364344] syscall() at netbsd:syscall+0x35d sys/arch/x86/x86/syscall.c:138 [ 164.5364344] --- syscall (number 1) --- [ 164.5364344] 72c010f99a6a: [ 164.5364344] cpu0: End traceback... [ 164.5364344] fatal breakpoint trap in supervisor mode [ 164.5364344] trap type 1 code 0 rip 0xffffffff8022025d cs 0x8 rflags 0x246 cr2 0x73d25dcbb2f0 ilevel 0x8 rsp 0xffffd60079dfb480 [ 164.5364344] curlwp 0xffffd60010c23a80 pid 643.1 lowest kstack 0xffffd60079df42c0 Stopped in pid 643.1 (syz-executor.4) at netbsd:breakpoint+0x5: leave ? breakpoint() at netbsd:breakpoint+0x5 vpanic() at netbsd:vpanic+0x7c1 sys/kern/subr_prf.c:334 kern_assert() at netbsd:kern_assert+0x214 sleepq_enqueue() at netbsd:sleepq_enqueue+0x614 sys/kern/kern_sleepq.c:221 turnstile_block() at netbsd:turnstile_block+0xbed KPREEMPT_DISABLE sys/sys/lwp.h:526 [inline] turnstile_block() at netbsd:turnstile_block+0xbed sys/kern/kern_turnstile.c:438 mutex_enter() at netbsd:mutex_enter+0x15eb sys/kern/kern_mutex.c:459 pool_put() at netbsd:pool_put+0x8e radix_tree_remove_node() at netbsd:radix_tree_remove_node+0xc1d sys/lib/libkern/../../../common/lib/libc/gen/radixtree.c:686 exit1() at netbsd:exit1+0x3bf5 sys/kern/kern_exit.c:570 exit1() at netbsd:exit1 syscall() at netbsd:syscall+0x35d sy_call sys/sys/syscallvar.h:65 [inline] syscall() at netbsd:syscall+0x35d sy_invoke sys/sys/syscallvar.h:94 [inline] syscall() at netbsd:syscall+0x35d sys/arch/x86/x86/syscall.c:138 --- syscall (number 1) --- 72c010f99a6a: ds b470 es 0 fs 1f90 gs 104 rdi 8000000000 rsi ffff9a8000000000 rbp ffffd60079dfb480 rbx 0 rdx ffff810010c23d38 rcx 0 rax 0 r8 0 r9 0 r10 0 r11 0 r12 0 r13 104 r14 1f90 r15 0 rip ffffffff8022025d breakpoint+0x5 cs 8 rflags 246 rsp ffffd60079dfb480 ss 0 netbsd:breakpoint+0x5: leave PID LID S CPU FLAGS STRUCT LWP * NAME WAIT 666 1 2 0 0 ffffd60012542640 syz-executor.3 73 1 2 0 40000 ffffd600108e6b00 syz-executor.5 415 1 2 0 40000 ffffd60010a5c980 syz-executor.0 623 3 3 0 80 ffffd60010c16a40 syz-executor.1 parked 623 2 2 0 0 ffffd60010c35240 syz-executor.1 623 1 2 0 10040000 ffffd60010900b40 syz-executor.1 398 1 2 1 10040000 ffffd600124481c0 syz-executor.2 452 1 2 1 0 ffffd600121a6100 syz-executor.2 632 1 2 1 0 ffffd6001218b940 syz-executor.0 542 1 2 1 0 ffffd6001218b500 syz-executor.4 45 1 3 0 80 ffffd6001218b0c0 syz-executor.5 nanoslp 619 1 2 1 0 ffffd6001217c4c0 syz-executor.3 40 1 3 0 80 ffffd6001217c080 syz-executor.1 nanoslp 500 11 3 0 80 ffffd6001217c900 syz-execprog parked 500 10 3 1 80 ffffd6001216f8c0 syz-execprog parked 500 9 3 1 80 ffffd6001216f480 syz-execprog parked 500 8 3 1 80 ffffd600108a1240 syz-execprog parked 500 7 3 0 80 ffffd6001216f040 syz-execprog parked 500 6 3 1 80 ffffd60010816a40 syz-execprog parked 500 5 3 0 80 ffffd600108161c0 syz-execprog parked 500 4 3 0 80 ffffd60011d2dbc0 syz-execprog parked 500 3 3 1 80 ffffd6001088b200 syz-execprog parked 500 2 3 0 80 ffffd600109ec740 syz-execprog parked 500 1 3 0 80 ffffd60010716a00 syz-execprog kqueue 534 1 3 1 80 ffffd60011330740 sshd select 586 1 3 0 80 ffffd60011d2d780 getty nanoslp 583 1 3 0 80 ffffd60011318b00 getty nanoslp 537 1 3 1 80 ffffd60011326700 getty nanoslp 560 1 3 1 80 ffffd600108a1680 getty ttyraw 562 1 3 1 80 ffffd60011d2d340 cron nanoslp 549 1 3 1 80 ffffd60011382980 inetd kqueue 507 1 3 1 80 ffffd6001121abc0 sshd select 439 1 3 0 80 ffffd60010bae9c0 powerd kqueue 477 1 2 0 0 ffffd60010b57b80 makemandb 204 1 3 0 80 ffffd60011370940 syslogd kqueue 275 1 3 1 80 ffffd60010b920c0 dhcpcd kqueue 209 1 3 0 80 ffffd60010a6e580 dhcpcd kqueue 1 1 3 1 80 ffffd60010561540 init wait 0 44 3 0 204 ffffd60010714140 physiod physiod 0 48 3 0 204 ffffd60010716180 pooldrain pooldrain 0 47 3 0 200 ffffd600107149c0 ioflush syncer 0 46 3 1 200 ffffd60010714580 pgdaemon pgdaemon 0 29 3 0 200 ffffd6000febe280 npfgc-0 npfgccv 0 43 3 1 204 ffffd60010561100 rt_free rt_free 0 42 3 1 204 ffffd6001055b940 unpgc unpgc 0 41 3 0 204 ffffd6001055b500 key_timehandler key_timehandler 0 40 3 1 204 ffffd6001055b0c0 icmp6_wqinput/1 icmp6_wqinput 0 39 3 0 204 ffffd60010553900 icmp6_wqinput/0 icmp6_wqinput 0 38 3 0 204 ffffd600105534c0 nd6_timer nd6_timer 0 37 3 1 204 ffffd60010553080 carp6_wqinput/1 carp6_wqinput 0 36 3 0 204 ffffd600105518c0 carp6_wqinput/0 carp6_wqinput 0 35 3 1 204 ffffd60010551480 carp_wqinput/1 carp_wqinput 0 34 3 0 204 ffffd60010551040 carp_wqinput/0 carp_wqinput 0 33 3 1 204 ffffd600103a6bc0 icmp_wqinput/1 icmp_wqinput 0 32 3 0 204 ffffd600103a6780 icmp_wqinput/0 icmp_wqinput 0 31 3 1 204 ffffd600103a6340 rt_timer rt_timer 0 30 3 0 204 ffffd60010393300 vmem_rehash vmem_rehash 0 28 3 0 204 ffffd6000eb32ac0 scsibus0 sccomp 0 27 3 0 200 ffffd6000eb32680 pms0 pmsreset 0 26 3 1 204 ffffd6000eb32240 xcall/1 xcall 0 25 1 1 200 ffffd6000eb30a80 softser/1 0 24 1 1 200 ffffd6000eb30640 softclk/1 0 23 1 1 200 ffffd6000eb30200 softbio/1 0 22 1 1 200 ffffd6000d545a40 softnet/1 0 21 1 1 201 ffffd6000d545600 idle/1 0 20 3 1 204 ffffd6000d5451c0 lnxpwrwq lnxpwrwq 0 19 3 0 204 ffffd6000d544a00 lnxlngwq lnxlngwq 0 18 3 0 204 ffffd6000d5445c0 lnxsyswq lnxsyswq 0 17 3 0 204 ffffd6000d544180 lnxrcugc lnxrcugc 0 16 3 0 204 ffffd6000d53f9c0 sysmon smtaskq 0 15 3 0 204 ffffd6000d53f580 pmfsuspend pmfsuspend 0 14 3 0 204 ffffd6000d53f140 pmfevent pmfevent 0 13 3 0 204 ffffd6000d535980 sopendfree sopendfr 0 12 3 1 204 ffffd6000d535540 iflnkst iflnkst 0 11 3 1 204 ffffd6000d535100 nfssilly nfssilly 0 > 10 7 1 200 ffffd6000d52c940 cachegc 0 9 3 0 204 ffffd6000d52c500 vdrain vdrain 0 8 3 0 200 ffffd6000d52c0c0 modunload mod_unld 0 7 3 0 204 ffffd6000cf65900 xcall/0 xcall 0 6 1 0 200 ffffd6000cf654c0 softser/0 0 5 1 0 200 ffffd6000cf65080 softclk/0 0 4 1 0 200 ffffd6000cf608c0 softbio/0 0 3 1 0 200 ffffd6000cf60480 softnet/0 0 2 1 0 201 ffffd6000cf60040 idle/0 0 1 2 1 200 ffffffff859a3b40 swapper [Locks tracked through LWPs] ****** LWP 666.1 (syz-executor.3) @ 0xffffd60012542640, l_stat=2 *** Locks held: * Lock 0 (initialized at uvm_obj_init) lock address : 0xffffd60010727300 type : sleep/adaptive initialized : 0xffffffff832ee0de shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 0 relevant cpu : 0 last held: 0 relevant lwp : 0xffffd60012542640 last held: 0xffffd60012542640 last locked* : 0xffffffff832844f9 unlocked : 0xffffffff8329205e owner field : 0xffffd60012542640 wait/spin: 0/0 Turnstile: no active turnstile for this lock. * Lock 1 (initialized at pmap_ctor) lock address : 0xffffd60012442380 type : sleep/adaptive initialized : 0xffffffff8031c437 shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 0 relevant cpu : 0 last held: 0 relevant lwp : 0xffffd60012542640 last held: 0xffffd60012542640 last locked* : 0xffffffff8032ebfb unlocked : 0xffffffff803331a7 owner field : 0xffffd60012542640 wait/spin: 0/0 Turnstile: no active turnstile for this lock. *** Locks wanted: none ****** LWP 73.1 (syz-executor.5) @ 0xffffd600108e6b00, l_stat=2 *** Locks held: * Lock 0 (initialized at amap_ctor) lock address : 0xffffd60011f9a080 type : sleep/adaptive initialized : 0xffffffff832526c4 shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 0 relevant cpu : 0 last held: 0 relevant lwp : 0xffffd600108e6b00 last held: 0xffffd600108e6b00 last locked* : 0xffffffff83281e4f unlocked : 0xffffffff8325b741 owner field : 0xffffd600108e6b00 wait/spin: 0/0 Turnstile: no active turnstile for this lock. *** Locks wanted: none ****** LWP 415.1 (syz-executor.0) @ 0xffffd60010a5c980, l_stat=2 *** Locks held: * Lock 0 (initialized at amap_ctor) lock address : 0xffffd600123a6400 type : sleep/adaptive initialized : 0xffffffff832526c4 shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 0 relevant cpu : 0 last held: 1 relevant lwp : 0xffffd60010a5c980 last held: 0xffffd60010a5c980 last locked* : 0xffffffff83281e4f unlocked : 0xffffffff8329021b owner field : 0xffffd60010a5c980 wait/spin: 0/0 Turnstile: no active turnstile for this lock. *** Locks wanted: none ****** LWP 398.1 (syz-executor.2) @ 0xffffd600124481c0, l_stat=2 *** Locks held: * Lock 0 (initialized at fork1) lock address : 0xffffd6001242d710 type : sleep/adaptive initialized : 0xffffffff833fd858 shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 0 relevant cpu : 1 last held: 1 relevant lwp : 0xffffd600124481c0 last held: 0xffffd600124481c0 last locked* : 0xffffffff833efe4e unlocked : 000000000000000000 owner/count : 0xffffd600124481c0 flags : 0x0000000000000004 Turnstile: no active turnstile for this lock. * Lock 1 (initialized at uvm_obj_init) lock address : 0xffffd60012019bc0 type : sleep/adaptive initialized : 0xffffffff832ee0de shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 0 relevant cpu : 1 last held: 1 relevant lwp : 0xffffd600124481c0 last held: 0xffffd600124481c0 last locked* : 0xffffffff832b8d53 unlocked : 0xffffffff83879e50 owner field : 0xffffd600124481c0 wait/spin: 0/0 Turnstile: no active turnstile for this lock. * Lock 2 (initialized at pmap_ctor) lock address : 0xffffd600124421c0 type : sleep/adaptive initialized : 0xffffffff8031c437 shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 0 relevant cpu : 1 last held: 1 relevant lwp : 0xffffd600124481c0 last held: 0xffffd600124481c0 last locked* : 0xffffffff803225ed unlocked : 0xffffffff832b8e6e owner field : 0xffffd600124481c0 wait/spin: 0/0 Turnstile: no active turnstile for this lock. * Lock 3 (initialized at pool_init) lock address : 0xffffd6000cf6c230 type : sleep/adaptive initialized : 0xffffffff8360a818 shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 1 relevant cpu : 1 last held: 1 relevant lwp : 0xffffd600124481c0 last held: 0xffffd600124481c0 last locked* : 0xffffffff836164de unlocked : 0xffffffff836166ad owner field : 0xffffd600124481c0 wait/spin: 1/0 Turnstile: => 0 waiting readers: => 1 waiting writers: *** Locks wanted: none ****** LWP 452.1 (syz-executor.2) @ 0xffffd600121a6100, l_stat=2 *** Locks held: none *** Locks wanted: * Lock 0 (initialized at procinit) lock address : 0xffffd6000cf440c0 type : sleep/adaptive initialized : 0xffffffff834755d0 shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 1 relevant cpu : 1 last held: 0 relevant lwp : 0xffffd600121a6100 last held: 0xffffd60010c23a80 last locked* : 0xffffffff833f020c unlocked : 0xffffffff833f86e0 owner field : 0xffffd60010c23a80 wait/spin: 0/0 Turnstile: no active turnstile for this lock. ****** LWP 0.24 (softclk/1) @ 0xffffd6000eb30640, l_stat=1 *** Locks held: none *** Locks wanted: * Lock 0 (initialized at module_hook_init) lock address : 0xffffffff85a5d440 type : sleep/adaptive initialized : 0xffffffff8344fc73 shared holds : 0 exclusive: 0 shares wanted: 0 exclusive: 0 relevant cpu : 1 last held: 0 relevant lwp : 0xffffd6000eb30640 last held: 000000000000000000 last locked : 000000000000000000 unlocked*: 000000000000000000 owner field : 000000000000000000 wait/spin: 0/0 Turnstile: no active turnstile for this lock. ****** LWP 0.12 (iflnkst) @ 0xffffd6000d535540, l_stat=3 *** Locks held: none *** Locks wanted: * Lock 0 (initialized at module_hook_init) lock address : 0xffffffff85a5d440 type : sleep/adaptive initialized : 0xffffffff8344fc73 shared holds : 0 exclusive: 0 shares wanted: 0 exclusive: 0 relevant cpu : 1 last held: 0 relevant lwp : 0xffffd6000d535540 last held: 000000000000000000 last locked : 000000000000000000 unlocked*: 000000000000000000 owner field : 000000000000000000 wait/spin: 0/0 Turnstile: no active turnstile for this lock. ****** LWP 0.5 (softclk/0) @ 0xffffd6000cf65080, l_stat=1 *** Locks held: none *** Locks wanted: * Lock 0 (initialized at module_hook_init) lock address : 0xffffffff85a5d440 type : sleep/adaptive initialized : 0xffffffff8344fc73 shared holds : 0 exclusive: 0 shares wanted: 0 exclusive: 0 relevant cpu : 0 last held: 0 relevant lwp : 0xffffd6000cf65080 last held: 000000000000000000 last locked : 000000000000000000 unlocked*: 000000000000000000 owner field : 000000000000000000 wait/spin: 0/0 Turnstile: no active turnstile for this lock. [Locks tracked through CPUs] ******* Locks held on cpu0: * Lock 0 (initialized at turnstile_init) lock address : 0xffffffff85a64d80 type : spin initialized : 0xffffffff83555f7e shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 0 relevant cpu : 0 last held: 0 relevant lwp : 0xffffd60010c23a80 last held: 0xffffd60010c23a80 last locked* : 0xffffffff835562ed unlocked : 0xffffffff83612404 owner field : 0x0000000000010700 wait/spin: 0/1 PAGE FLAG PQ UOBJECT UANON 0xffffd60000014180 0041 00000000 0x0 0x0 0xffffd600000141f8 0041 00000000 0x0 0x0 0xffffd60000014270 0041 00000000 0x0 0x0 0xffffd600000142e8 0041 00000000 0x0 0x0 0xffffd60000014360 0041 00000000 0x0 0x0 0xffffd600000143d8 0041 00000000 0x0 0x0 0xffffd60000014450 0041 00000000 0x0 0x0 0xffffd600000144c8 0041 00000000 0x0 0x0 0xffffd60000014540 0041 00000000 0x0 0x0 0xffffd600000145b8 0041 00000000 0x0 0x0 0xffffd60000014630 0041 00000000 0x0 0x0 0xffffd600000146a8 0041 00000000 0x0 0x0 0xffffd60000014720 0041 00000000 0x0 0x0 0xffffd60000014798 0041 00000000 0x0 0x0 0xffffd60000014810 0041 00000000 0x0 0x0 0xffffd60000014888 0041 00000000 0x0 0x0 0xffffd60000014900 0041 00000000 0x0 0x0 0xffffd60000014978 0041 00000000 0x0 0x0 0xffffd600000149f0 0041 00000000 0x0 0x0 0xffffd60000014a68 0041 00000000 0x0 0x0 0xffffd60000014ae0 0041 00000000 0x0 0x0 0xffffd60000014b58 0041 00000000 0x0 0x0 0xffffd60000014bd0 0041 00000000 0x0 0x0 0xffffd60000014c48 0041 00000000 0x0 0x0 0xffffd60000014cc0 0041 00000000 0x0 0x0 0xffffd60000014d38 0041 00000000 0x0 0x0 0xffffd60000014db0 0041 00000000 0x0 0x0 0xffffd60000014e28 0041 00000000 0x0 0x0 0xffffd60000014ea0 0041 00000000 0x0 0x0 0xffffd60000014f18 0041 00000000 0x0 0x0 0xffffd60000014f90 0041 00000000 0x0 0x0 0xffffd60000015008 0041 00000000 0x0 0x0 0xffffd60000015080 0041 00000000 0x0 0x0 0xffffd600000150f8 0041 00000000 0x0 0x0 0xffffd60000015170 0041 00000000 0x0 0x0 0xffffd600000151e8 0041 00000000 0x0 0x0 0xffffd60000015260 0041 00000000 0x0 0x0 0xffffd600000152d8 0041 00000000 0x0 0x0 0xffffd60000015350 0041 00000000 0x0 0x0 0xffffd600000153c8 0041 00000000 0x0 0x0 0xffffd60000015440 0041 00000000 0x0 0x0 0xffffd600000154b8 0041 00000000 0x0 0x0 0xffffd60000015530 0041 00000000 0x0 0x0 0xffffd600000155a8 0041 00000000 0x0 0x0 0xffffd60000015620 0041 00000000 0x0 0x0 0xffffd60000015698 0041 00000000 0x0 0x0 0xffffd60000015710 0041 00000000 0x0 0x0 0xffffd60000015788 0041 00000000 0x0 0x0 0xffffd60000015800 0041 00000000 0x0 0x0 0xffffd60000015878 0041 00000000 0x0 0x0 0xffffd600000158f0 0041 00000000 0x0 0x0 0xffffd60000015968 0041 00000000 0x0 0x0 0xffffd600000159e0 0041 00000000 0x0 0x0 0xffffd60000015a58 0041 00000000 0x0 0x0 0xffffd60000015ad0 0041 00000000 0x0 0x0 0xffffd60000015b48 0041 00000000 0x0 0x0 0xffffd60000015bc0 0041 00000000 0x0 0x0 0xffffd60000015c38 0041 00000000 0x0 0x0 0xffffd60000015cb0 0041 00000000 0x0 0x0 0xffffd60000015d28 0041 00000000 0x0 0x0 0xffffd60000015da0 0041 00000000 0x0 0x0 0xffffd60000015e18 0041 00000000 0x0 0x0 0xffffd60000015e90 0041 00000000 0x0 0x0 0xffffd60000015f08 0041 00000000 0x0 0x0 0xffffd60000015f80 0041 00000000 0x0 0x0 0xffffd60000015ff8 0041 00000000 0x0 0x0 0xffffd60000016070 0041 00000000 0x0 0x0 0xffffd600000160e8 0041 00000000 0x0 0x0 0xffffd60000016160 0041 00000000 0x0 0x0 0xffffd600000161d8 0041 00000000 0x0 0x0 0xffffd60000016250 0041 00000000 0x0 0x0 0xffffd600000162c8 0041 00000000 0x0 0x0 0xffffd60000016340 0041 00000000 0x0 0x0 0xffffd600000163b8 0041 00000000 0x0 0x0 0xffffd60000016430 0041 00000000 0x0 0x0 0xffffd600000164a8 0041 00000000 0x0 0x0 0xffffd60000016520 0041 00000000 0x0 0x0 0xffffd60000016598 0041 00000000 0x0 0x0 0xffffd60000016610 0041 00000000 0x0 0x0 0xffffd60000016688 0041 00000000 0x0 0x0 0xffffd60000016700 0041 00000000 0x0 0x0 0xffffd60000016778 0041 00000000 0x0 0x0 0xffffd600000167f0 0041 00000000 0x0 0x0 0xffffd60000016868 0041 00000000 0x0 0x0 0xffffd600000168e0 0041 00000000 0x0 0x0 0xffffd60000016958 0041 00000000 0x0 0x0 0xffffd600000169d0 0041 00000000 0x0 0x0 0xffffd60000016a48 0041 00000000 0x0 0x0 0xffffd60000016ac0 0041 00000000 0x0 0x0 0xffffd60000016b38 0041 00000000 0x0 0x0 0xffffd60000016bb0 0041 00000000 0x0 0x0 0xffffd60000016c28 0041 00000000 0x0 0x0 0xffffd60000016ca0 0041 00000000 0x0 0x0 0xffffd60000016d18 0041 00000000 0x0 0x0 0xffffd60000016d90 0041 00000000 0x0 0x0 0xffffd60000016e08 0041 00000000 0x0 0x0 0xffffd60000016e80 0041 00000000 0x0 0x0 0xffffd60000016ef8 0041 00000000 0x0 0x0 0xffffd60000016f70 0041 00000000 0x0 0x0 0xffffd60000016fe8 0041 00000000 0x0 0x0 0xffffd60000017060 0041 00000000 0x0 0x0 0xffffd600000170d8 0041 00000000 0x0 0x0 0xffffd60000017150 0041 00000000 0x0 0x0 0xffffd600000171c8 0041 00000000 0x0 0x0 0xffffd60000017240 0041 00000000 0x0 0x0 0xffffd600000172b8 0041 00000000 0x0 0x0 0xffffd60000017330 0041 00000000 0x0 0x0 0xffffd600000173a8 0041 00000000 0x0 0x0 0xffffd60000017420 0041 00000000 0x0 0x0 0xffffd60000017498 0041 00000000 0x0 0x0 0xffffd60000017510 0041 00000000 0x0 0x0 0xffffd60000017588 0041 00000000 0x0 0x0 0xffffd60000017600 0041 00000000 0x0 0x0 0xffffd60000017678 0041 00000000 0x0 0x0 0xffffd600000176f0 0041 00000000 0x0 0x0 0xffffd60000017768 0041 00000000 0x0 0x0 0xffffd600000177e0 0041 00000000 0x0 0x0 0xffffd60000017858 0041 00000000 0x0 0x0 0xffffd600000178d0 0041 00000000 0x0 0x0 0xffffd60000017948 0041 00000000 0x0 0x0 0xffffd600000179c0 0041 00000000 0x0 0x0 0xffffd60000017a38 0041 00000000 0x0 0x0 0xffffd60000017ab0 0041 00000000 0x0 0x0 0xffffd60000017b28 0041 00000000 0x0 0x0 0xffffd60000017ba0 0041 00000000 0x0 0x0 0xffffd60000017c18 0041 00000000 0x0 0x0 0xffffd60000017c90 0041 00000000 0x0 0x0 0xffffd60000017d08 0041 00000000 0x0 0x0 0xffffd60000017d80 0041 00000000 0x0 0x0 0xffffd60000017df8 0041 00000000 0x0 0x0 0xffffd60000017e70 0041 00000000 0x0 0x0 0xffffd60000017ee8 0041 00000000 0x0 0x0 0xffffd60000017f60 0041 00000000 0x0 0x0 0xffffd60000017fd8 0041 00000000 0x0 0x0 0xffffd60000018050 0041 00000000 0x0 0x0 0xffffd600000180c8 0041 00000000 0x0 0x0 0xffffd60000018140 0041 00000000 0x0 0x0 0xffffd600000181b8 0041 00000000 0x0 0x0 0xffffd60000018230 0041 00000000 0x0 0x0 0xffffd600000182a8 0041 00000000 0x0 0x0 0xffffd60000018320 0041 00000000 0x0 0x0 0xffffd60000018398 0041 00000000 0x0 0x0 0xffffd60000018410 0041 00000000 0x0 0x0 0xffffd60000018488 0041 00000000 0x0 0x0 0xffffd60000018500 0041 00000000 0x0 0x0 0xffffd60000018578 0041 00000000 0x0 0x0 0xffffd600000185f0 0041 00000000 0x0 0x0 0xffffd60000018668 0041 00000000 0x0 0x0