[ 55.7511844] panic: kernel diagnostic assertion "(use & VUSECOUNT_MASK) == 1" failed: file "/syzkaller/managers/ci2-netbsd-kubsan/kernel/sys/kern/vfs_vnode.c", line 882 [ 55.7744106] cpu0: Begin traceback... [ 55.7911745] vpanic() at netbsd:vpanic+0x2f0 sys/kern/subr_prf.c:288 [ 55.8811714] kern_assert() at netbsd:kern_assert+0x65 sys/arch/amd64/amd64/db_disasm.c:1074 [ 55.9611711] vrelel() at netbsd:vrelel+0xe96 sys/kern/vfs_vnode.c:882 [ 56.0311921] vrele_deferred() at netbsd:vrele_deferred+0x491 sys/kern/vfs_vnode.c:832 [ 56.1011711] vrele_task() at netbsd:vrele_task+0xd7 sys/kern/vfs_vnode.c:735 [ 56.1711714] threadpool_thread() at netbsd:threadpool_thread+0x3d8 x86_curlwp sys/arch/amd64/compile/obj/GENERIC_SYZKALLER/./machine/cpu.h:76 [inline] [ 56.1711714] threadpool_thread() at netbsd:threadpool_thread+0x3d8 sys/kern/kern_threadpool.c:1154 [ 56.1811727] cpu0: End traceback... [ 56.1924990] fatal breakpoint trap in supervisor mode [ 56.1924990] trap type 1 code 0 rip 0xffffffff80235475 cs 0x8 rflags 0x246 cr2 0x1b2f32f000 ilevel 0 rsp 0xffff858248c2cd90 [ 56.2081702] curlwp 0xffffb712f5e77340 pid 0.1598 lowest kstack 0xffff858248c282c0 Stopped in pid 0.1598 (system) at netbsd:breakpoint+0x5: leave ? breakpoint() at netbsd:breakpoint+0x5 db_panic() at netbsd:db_panic+0xec sys/ddb/db_panic.c:71 vpanic() at netbsd:vpanic+0x2f0 sys/kern/subr_prf.c:288 kern_assert() at netbsd:kern_assert+0x65 sys/arch/amd64/amd64/db_disasm.c:1074 vrelel() at netbsd:vrelel+0xe96 sys/kern/vfs_vnode.c:882 vrele_deferred() at netbsd:vrele_deferred+0x491 sys/kern/vfs_vnode.c:832 vrele_task() at netbsd:vrele_task+0xd7 sys/kern/vfs_vnode.c:735 threadpool_thread() at netbsd:threadpool_thread+0x3d8 x86_curlwp sys/arch/amd64/compile/obj/GENERIC_SYZKALLER/./machine/cpu.h:76 [inline] threadpool_thread() at netbsd:threadpool_thread+0x3d8 sys/kern/kern_threadpool.c:1154 Panic string: kernel diagnostic assertion "(use & VUSECOUNT_MASK) == 1" failed: file "/syzkaller/managers/ci2-netbsd-kubsan/kernel/sys/kern/vfs_vnode.c", line 882 PID LID S CPU FLAGS STRUCT LWP * NAME WAIT 843 1711 2 0 0 ffffb712e7bdeb00 syz-executor.0 843 848 2 0 0 ffffb712e99125c0 syz-executor.0 843 1755 2 0 0 ffffb712e8cef600 syz-executor.0 843 1569 2 0 0 ffffb712e9912a00 syz-executor.0 843 1745 2 0 0 ffffb712f5e77bc0 syz-executor.0 843 843 2 1 10000000 ffffb712f5b0d740 syz-executor.0 1592 1723 3 1 180 ffffb712e8b0a080 syz-executor.2 parked 1592 1325 2 0 40000 ffffb712e8a25940 syz-executor.2 1592 1592 2 1 10040000 ffffb712e8b0a900 syz-executor.2 1736 1736 2 0 40000 ffffb712e8a9d980 syz-executor.1 1640 > 1640 7 1 140 ffffb712e7d84b40 syz-executor.0 1591 1591 2 1 140 ffffb712e7bde6c0 syz-executor.2 1330 1330 3 0 180 ffffb712f5b0d300 syz-executor.5 parked 1329 1338 3 0 1100000 ffffb712e9c0fac0 syz-executor.5 vfork 1329 1329 2 0 11000040 ffffb712e7d84700 syz-executor.5 1510 1510 3 0 180 ffffb712e9ac5700 syz-executor.3 parked 1260 1407 3 0 11100000 ffffb712e9ac52c0 syz-executor.3 vfork 1260 1260 2 0 11000040 ffffb712e8a250c0 syz-executor.3 1332 1332 3 0 180 ffffb712e8b0a4c0 syz-executor.4 parked 325 1247 3 0 11100000 ffffb712e973cb00 syz-executor.4 vfork 325 325 3 1 11000000 ffffb712e8a9d100 syz-executor.4 lwpwait 1203 1203 3 0 1c0 ffffb712e78cf200 syz-executor.3 wait 1245 1245 3 0 1c0 ffffb712e973c6c0 syz-executor.4 wait 942 942 3 0 180 ffffb712e9912180 syz-executor.5 wait 1238 1205 2 0 100100 ffffb712e816d480 syz-fuzzer 1238 1240 2 0 100100 ffffb712e9b19580 syz-fuzzer 1238 1244 2 0 100100 ffffb712e8cef1c0 syz-fuzzer 1238 1241 3 1 0 ffffb712e9b199c0 syz-fuzzer lwpwait 1238 1235 2 0 100100 ffffb712e7d842c0 syz-fuzzer 1238 449 2 0 100100 ffffb712e807f780 syz-fuzzer 1238 1231 2 0 100000 ffffb712e96ed200 syz-fuzzer 1238 1238 2 0 100100 ffffb712e8cefa40 syz-fuzzer 1230 1230 2 0 0 ffffb712e96eda80 sshd 1225 1225 3 0 180 ffffb712e9c0f680 getty nanoslp 1216 1216 3 0 180 ffffb712e973c280 getty nanoslp 1196 1196 3 1 180 ffffb712e789cac0 getty nanoslp 1195 1195 3 0 180 ffffb712e7bde280 getty ttyraw 1109 1109 3 0 180 ffffb712e96ed640 sshd select 1056 1056 3 0 180 ffffb712e9c0f240 powerd kqueue 700 700 3 1 180 ffffb712e8017b80 syslogd kqueue 746 746 3 0 180 ffffb712e8017300 dhcpcd poll 747 747 3 0 180 ffffb712e816d8c0 dhcpcd poll 743 743 3 1 180 ffffb712e8a9d540 dhcpcd poll 602 602 3 1 180 ffffb712e807fbc0 dhcpcd poll 292 292 3 0 180 ffffb712e807f340 dhcpcd poll 485 485 3 1 180 ffffb712e8017740 dhcpcd poll 291 291 3 1 180 ffffb712e816d040 dhcpcd poll 1 1 3 0 180 ffffb712df69f100 init wait 0 > 1598 7 0 200 ffffb712f5e77340 vrele 0 1456 2 0 200 ffffb712e9ac5b40 ktrace 0 967 3 0 200 ffffb712e78cf640 physiod physiod 0 196 3 1 200 ffffb712e789c680 pooldrain pooldrain 0 195 3 0 200 ffffb712e789c240 ioflush syncer 0 194 3 0 200 ffffb712e78cfa80 pgdaemon pgdaemon 0 170 3 1 200 ffffb712e57dea40 usb7 usbevt 0 169 3 1 200 ffffb712e57de600 usb6 usbevt 0 168 3 1 200 ffffb712e57de1c0 usb5 usbevt 0 167 3 1 200 ffffb712e2751a00 usb4 usbevt 0 166 3 1 200 ffffb712e27515c0 usb3 usbevt 0 165 3 1 200 ffffb712e2751180 usb2 usbevt 0 31 3 1 200 ffffb712e06f49c0 usb1 usbevt 0 63 3 1 200 ffffb712e06f4580 usb0 usbevt 0 126 3 0 200 ffffb712e06f4140 usbtask-dr usbtsk 0 125 3 1 200 ffffb712df69f980 usbtask-hc usbtsk 0 124 3 0 200 ffffb712dda95b00 swwreboot swwreboot 0 123 3 0 200 ffffb712df69f540 npfgc0 npfgcw 0 122 3 1 200 ffffb712df65d940 rt_free rt_free 0 121 3 1 200 ffffb712df65d500 unpgc unpgc 0 120 3 0 200 ffffb712df65d0c0 key_timehandler key_timehandler 0 119 3 1 200 ffffb712df64f900 icmp6_wqinput/1 icmp6_wqinput 0 118 3 0 200 ffffb712df64f4c0 icmp6_wqinput/0 icmp6_wqinput 0 117 3 0 200 ffffb712df64f080 nd6_timer nd6_timer 0 116 3 1 200 ffffb712df62b8c0 carp6_wqinput/1 carp6_wqinput 0 115 3 0 200 ffffb712df62b480 carp6_wqinput/0 carp6_wqinput 0 114 3 1 200 ffffb712df62b040 carp_wqinput/1 carp_wqinput 0 113 3 0 200 ffffb712df5debc0 carp_wqinput/0 carp_wqinput 0 112 3 1 200 ffffb712df4ff740 icmp_wqinput/1 icmp_wqinput 0 111 3 0 200 ffffb712df4ffb80 icmp_wqinput/0 icmp_wqinput 0 110 3 0 200 ffffb712df5de340 rt_timer rt_timer 0 109 3 0 200 ffffb712df5de780 vmem_rehash vmem_rehash 0 100 3 0 200 ffffb712df4ff300 entbutler entropy 0 99 3 1 200 ffffb712def3eb40 viomb balloon 0 98 3 1 200 ffffb712def3e700 vioif0_txrx/1 vioif0_txrx 0 97 3 0 200 ffffb712def3e2c0 vioif0_txrx/0 vioif0_txrx 0 30 3 1 200 ffffb712dda956c0 scsibus0 sccomp 0 29 3 0 200 ffffb712dda95280 pms0 pmsreset 0 28 3 1 200 ffffb712dd9b5ac0 xcall/1 xcall 0 27 1 1 200 ffffb712dd9b5680 softser/1 0 26 1 1 200 ffffb712dd9b5240 softclk/1 0 25 1 1 200 ffffb712dd998a80 softbio/1 0 24 1 1 200 ffffb712dd998640 softnet/1 0 23 1 1 201 ffffb712dd998200 idle/1 0 22 3 1 200 ffffb7140bd33a40 lnxsyswq lnxsyswq 0 21 3 0 200 ffffb7140bd33600 lnxubdwq lnxubdwq 0 20 3 0 200 ffffb7140bd331c0 lnxpwrwq lnxpwrwq 0 19 3 0 200 ffffb7140bd42a00 lnxlngwq lnxlngwq 0 18 3 0 200 ffffb7140bd425c0 lnxhipwq lnxhipwq 0 17 3 0 200 ffffb7140bd42180 lnxrcugc lnxrcugc 0 16 3 0 200 ffffb7140bd599c0 sysmon smtaskq 0 15 3 1 200 ffffb7140bd59580 pmfsuspend pmfsuspend 0 14 3 0 200 ffffb7140bd59140 pmfevent pmfevent 0 13 3 0 200 ffffb7140bd6c980 sopendfree sopendfr 0 12 3 0 200 ffffb7140bd6c540 ifwdog ifwdog 0 11 3 0 200 ffffb7140bd6c100 iflnkst iflnkst 0 10 3 1 200 ffffb7140cd97940 nfssilly nfssilly 0 9 3 1 200 ffffb7140cd97500 pooldisp pooldisp 0 8 3 1 200 ffffb7140cd970c0 modunload mod_unld 0 7 3 0 200 ffffb7140cdc2900 xcall/0 xcall 0 6 1 0 200 ffffb7140cdc24c0 softser/0 0 5 1 0 200 ffffb7140cdc2080 softclk/0 0 4 1 0 200 ffffb7140cded8c0 softbio/0 0 3 1 0 200 ffffb7140cded480 softnet/0 0 2 1 0 201 ffffb7140cded040 idle/0 0 0 3 0 200 ffffffff86795cc0 swapper uvm [Locks tracked through LWPs] ****** LWP 843.843 (syz-executor.0) @ 0xffffb712f5b0d740, l_stat=2 *** Locks held: * Lock 0 (initialized at netbsd:vcache_alloc+0xbf sys/kern/vfs_vnode.c:1438) lock address : ffffb712f5ace9c0 type : sleep/adaptive initialized : netbsd:vcache_alloc+0xbf shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 0 relevant cpu : 1 last held: 1 relevant lwp : 0xffffb712f5b0d740 last held: 0xffffb712f5b0d740 last locked* : netbsd:genfs_lock+0xe4 unlocked : netbsd:genfs_lock+0xe4 owner/count : 000000000000000000 flags : 000000000000000000 Turnstile: no active turnstile for this lock. *** Locks wanted: none ****** LWP 1736.1736 (syz-executor.1) @ 0xffffb712e8a9d980, l_stat=2 *** Locks held: * Lock 0 (initialized at netbsd:filedesc_ctor+0xa1 sys/kern/kern_descrip.c:1355) lock address : ffffb712e8d91700 type : sleep/adaptive initialized : netbsd:filedesc_ctor+0xa1 shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 0 relevant cpu : 0 last held: 0 relevant lwp : 0xffffb712e8a9d980 last held: 0xffffb712e8a9d980 last locked* : netbsd:fd_alloc+0xf3 unlocked : netbsd:fd_close+0x43a owner field : 0xffffb712e8a9d980 wait/spin: 0/0 Turnstile: no active turnstile for this lock. *** Locks wanted: none ****** LWP 747.747 (dhcpcd) @ 0xffffb712e816d8c0, l_stat=3 *** Locks held: none *** Locks wanted: * Lock 0 (initialized at netbsd:module_hook_init+0x1c sys/kern/kern_module_hook.c:132) lock address : netbsd:module_hook type : sleep/adaptive initialized : netbsd:module_hook_init+0x1c shared holds : 0 exclusive: 0 shares wanted: 0 exclusive: 0 relevant cpu : 0 last held: 0 relevant lwp : 0xffffb712e816d8c0 last held: 000000000000000000 last locked : 0 unlocked* : 0 owner field : 000000000000000000 wait/spin: 0/0 Turnstile: no active turnstile for this lock. ****** LWP 743.743 (dhcpcd) @ 0xffffb712e8a9d540, l_stat=3 *** Locks held: none *** Locks wanted: * Lock 0 (initialized at netbsd:module_hook_init+0x1c sys/kern/kern_module_hook.c:132) lock address : netbsd:module_hook type : sleep/adaptive initialized : netbsd:module_hook_init+0x1c shared holds : 0 exclusive: 0 shares wanted: 0 exclusive: 0 relevant cpu : 1 last held: 0 relevant lwp : 0xffffb712e8a9d540 last held: 000000000000000000 last locked : 0 unlocked* : 0 owner field : 000000000000000000 wait/spin: 0/0 Turnstile: no active turnstile for this lock. ****** LWP 485.485 (dhcpcd) @ 0xffffb712e8017740, l_stat=3 *** Locks held: none *** Locks wanted: * Lock 0 (initialized at netbsd:module_hook_init+0x1c sys/kern/kern_module_hook.c:132) lock address : netbsd:module_hook type : sleep/adaptive initialized : netbsd:module_hook_init+0x1c shared holds : 0 exclusive: 0 shares wanted: 0 exclusive: 0 relevant cpu : 1 last held: 0 relevant lwp : 0xffffb712e8017740 last held: 000000000000000000 last locked : 0 unlocked* : 0 owner field : 000000000000000000 wait/spin: 0/0 Turnstile: no active turnstile for this lock. ****** LWP 291.291 (dhcpcd) @ 0xffffb712e816d040, l_stat=3 *** Locks held: none *** Locks wanted: * Lock 0 (initialized at netbsd:module_hook_init+0x1c sys/kern/kern_module_hook.c:132) lock address : netbsd:module_hook type : sleep/adaptive initialized : netbsd:module_hook_init+0x1c shared holds : 0 exclusive: 0 shares wanted: 0 exclusive: 0 relevant cpu : 1 last held: 0 relevant lwp : 0xffffb712e816d040 last held: 000000000000000000 last locked : 0 unlocked* : 0 owner field : 000000000000000000 wait/spin: 0/0 Turnstile: no active turnstile for this lock. ****** LWP 0.1598 (vrele) @ 0xffffb712f5e77340, l_stat=7 *** Locks held: * Lock 0 (initialized at netbsd:vcache_alloc+0xbf sys/kern/vfs_vnode.c:1438) lock address : ffffb712f5f01700 type : sleep/adaptive initialized : netbsd:vcache_alloc+0xbf shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 0 relevant cpu : 0 last held: 0 relevant lwp : 0xffffb712f5e77340 last held: 0xffffb712f5e77340 last locked* : netbsd:genfs_lock+0x220 unlocked : netbsd:genfs_unlock+0x50 owner/count : 0xffffb712f5e77340 flags : 0x0000000000000004 Turnstile: no active turnstile for this lock. * Lock 1 (initialized at netbsd:vcache_alloc+0xcb sys/kern/vfs_vnode.c:1438) lock address : ffffb712f6159b80 type : sleep/adaptive initialized : netbsd:vcache_alloc+0xcb shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 0 relevant cpu : 0 last held: 0 relevant lwp : 0xffffb712f5e77340 last held: 0xffffb712f5e77340 last locked* : netbsd:vrele_deferred+0x482 unlocked : netbsd:vrelel+0x932 owner field : 0xffffb712f5e77340 wait/spin: 0/0 Turnstile: no active turnstile for this lock. *** Locks wanted: none ****** LWP 0.26 (softclk/1) @ 0xffffb712dd9b5240, l_stat=1 *** Locks held: none *** Locks wanted: * Lock 0 (initialized at netbsd:module_hook_init+0x1c sys/kern/kern_module_hook.c:132) lock address : netbsd:module_hook type : sleep/adaptive initialized : netbsd:module_hook_init+0x1c shared holds : 0 exclusive: 0 shares wanted: 0 exclusive: 0 relevant cpu : 1 last held: 0 relevant lwp : 0xffffb712dd9b5240 last held: 000000000000000000 last locked : 0 unlocked* : 0 owner field : 000000000000000000 wait/spin: 0/0 Turnstile: no active turnstile for this lock. ****** LWP 0.11 (iflnkst) @ 0xffffb7140bd6c100, l_stat=3 *** Locks held: none *** Locks wanted: * Lock 0 (initialized at netbsd:module_hook_init+0x1c sys/kern/kern_module_hook.c:132) lock address : netbsd:module_hook type : sleep/adaptive initialized : netbsd:module_hook_init+0x1c shared holds : 0 exclusive: 0 shares wanted: 0 exclusive: 0 relevant cpu : 0 last held: 0 relevant lwp : 0xffffb7140bd6c100 last held: 000000000000000000 last locked : 0 unlocked* : 0 owner field : 000000000000000000 wait/spin: 0/0 Turnstile: no active turnstile for this lock. ****** LWP 0.5 (softclk/0) @ 0xffffb7140cdc2080, l_stat=1 *** Locks held: none *** Locks wanted: * Lock 0 (initialized at netbsd:module_hook_init+0x1c sys/kern/kern_module_hook.c:132) lock address : netbsd:module_hook type : sleep/adaptive initialized : netbsd:module_hook_init+0x1c shared holds : 0 exclusive: 0 shares wanted: 0 exclusive: 0 relevant cpu : 0 last held: 0 relevant lwp : 0xffffb7140cdc2080 last held: 000000000000000000 last locked : 0 unlocked* : 0 owner field : 000000000000000000 wait/spin: 0/0 Turnstile: no active turnstile for this lock. ****** LWP 0.0 (swapper) @ 0xffffffff86795cc0, l_stat=3 *** Locks held: none *** Locks wanted: * Lock 0 (initialized at netbsd:module_hook_init+0x1c sys/kern/kern_module_hook.c:132) lock address : netbsd:module_hook type : sleep/adaptive initialized : netbsd:module_hook_init+0x1c shared holds : 0 exclusive: 0 shares wanted: 0 exclusive: 0 relevant cpu : 0 last held: 0 relevant lwp : 0xffffffff86795cc0 last held: 000000000000000000 last locked : 0 unlocked* : 0 owner field : 000000000000000000 wait/spin: 0/0 Turnstile: no active turnstile for this lock. [Locks tracked through CPUs] ******* Locks held on cpu0: * Lock 0 (initialized at netbsd:kprintf_init+0x72 sys/kern/subr_prf.c:156) lock address : netbsd:kprintf_mtx type : spin initialized : netbsd:kprintf_init+0x72 shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 0 relevant cpu : 0 last held: 0 relevant lwp : 0xffffb712f5e77340 last held: 0xffffb712f5e77340 last locked* : netbsd:kprintf_lock+0x50 unlocked : netbsd:kprintf_unlock+0x70 owner field : 0x0000000000000800 wait/spin: 0/1 PAGE FLAG PQ UOBJECT UANON 0xffff858000007180 0045 00000000 0x0 0x0 0xffff858000007200 0045 00000000 0x0 0x0 0xffff858000007280 0045 00000000 0x0 0x0 0xffff858000007300 0045 00000000 0x0 0x0 0xffff858000007380 0045 00000000 0x0 0x0 0xffff858000007400 0045 00000000 0x0 0x0 0xffff858000007480 0045 00000000 0x0 0x0 0xffff858000007500 0045 00000000 0x0 0x0 0xffff858000007580 0045 00000000 0x0 0x0 0xffff858000007600 0045 00000000 0x0 0x0 0xffff858000007680 0041 00000000 0x0 0x0 0xffff858000007700 0041 00000000 0x0 0x0 0xffff858000007780 0041 00000000 0x0 0x0 0xffff858000007800 0041 00000000 0x0 0x0 0xffff858000007880 0041 00000000 0x0 0x0 0xffff858000007900 0045 00000000 0x0 0x0 0xffff858000007980 0041 00000000 0x0 0x0 0xffff858000007a00 0041 00000000 0x0 0x0 0xffff858000007a80 0041 00000000 0x0 0x0 0xffff858000007b00 0041 00000000 0x0 0x0 0xffff858000007b80 0041 00000000 0x0 0x0 0xffff858000007c00 0041 00000000 0x0 0x0 0xffff858000007c80 0041 00000000 0x0 0x0 0xffff858000007d00 0041 00000000 0x0 0x0 0xffff858000007d80 0041 00000000 0x0 0x0 0xffff858000007e00 0041 00000000 0x0 0x0 0xffff858000007e80 0041 00000000 0x0 0x0 0xffff858000007f00 0041 00000000 0x0 0x0 0xffff858000007f80 0041 00000000 0x0 0x0 0xffff858000008000 0041 00000000 0x0 0x0 0xffff858000008080 0041 00000000 0x0 0x0 0xffff858000008100 0041 00000000 0x0 0x0 0xffff858000008180 0041 00000000 0x0 0x0 0xffff858000008200 0041 00000000 0x0 0x0 0xffff858000008280 0041 00000000 0x0 0x0 0xffff858000008300 0041 00000000 0x0 0x0 0xffff858000008380 0041 00000000 0x0 0x0 0xffff858000008400 0041 00000000 0x0 0x0 0xffff858000008480 0041 00000000 0x0 0x0 0xffff858000008500 0041 00000000 0x0 0x0 0xffff858000008580 0041 00000000 0x0 0x0 0xffff858000008600 0045 00000000 0x0 0x0 0xffff858000008680 0041 00000000 0x0 0x0 0xffff858000008700 0041 00000000 0x0 0x0 0xffff858000008780 0041 00000000 0x0 0x0 0xffff858000008800 0041 00000000 0x0 0x0 0xffff858000008880 0041 00000000 0x0 0x0 0xffff858000008900 0041 00000000 0x0 0x0 0xffff858000008980 0041 00000000 0x0 0x0 0xffff858000008a00 0041 00000000 0x0 0x0 0xffff858000008a80 0041 00000000 0x0 0x0 0xffff858000008b00 0041 00000000 0x0 0x0 0xffff858000008b80 0041 00000000 0x0 0x0 0xffff858000008c00 0041 00000000 0x0 0x0 0xffff858000008c80 0041 00000000 0x0 0x0 0xffff858000008d00 0041 00000000 0x0 0x0 0xffff858000008d80 0041 00000000 0x0 0x0 0xffff858000008e00 0041 00000000 0x0 0x0 0xffff858000008e80 0041 00000000 0x0 0x0 0xffff858000008f00 0041 00000000 0x0 0x0 0xffff858000008f80 0041 00000000 0x0 0x0 0xffff858000009000 0041 00000000 0x0 0x0 0xffff858000009080 0041 00000000 0x0 0x0 0xffff858000009100 0045 00000000 0x0 0x0 0xffff858000009180 0045 00000000 0x0 0x0 0xffff858000009200 0041 00000000 0x0 0x0 0xffff858000009280 0041 00000000 0x0 0x0 0xffff858000009300 0041 00000000 0x0 0x0 0xffff858000009380 0041 00000000 0x0 0x0 0xffff858000009400 0041 00000000 0x0 0x0 0xffff858000009480 0041 00000000 0x0 0x0 0xffff858000009500 0041 00000000 0x0 0x0 0xffff858000009580 0041 00000000 0x0 0x0 0xffff858000009600 0041 00000000 0x0 0x0 0xffff858000009680 0041 00000000 0x0 0x0 0xffff858000009700 0041 00000000 0x0 0x0 0xffff858000009780 0041 00000000 0x0 0x0 0xffff858000009800 0041 00000000 0x0 0x0 0xffff858000009880 0041 00000000 0x0 0x0 0xffff858000009900 0041 00000000 0x0 0x0 0xffff858000009980 0041 00000000 0x0 0x0 0xffff858000009a00 0041 00000000 0x0 0x0 0xffff858000009a80 0041 00000000 0x0 0x0 0xffff858000009b00 0041 00000000 0x0 0x0 0xffff858000009b80 0041 00000000 0x0 0x0 0xffff858000009c00 0041 00000000 0x0 0x0 0xffff858000009c80 0041 00000000 0x0 0x0 0xffff858000009d00 0041 00000000 0x0 0x0 0xffff858000009d80 0041 00000000 0x0 0x0 0xffff858000009e00 0041 00000000 0x0 0x0 0xffff858000009e80 0041 00000000 0x0 0x0 0xffff858000009f00 0041 00000000 0x0 0x0 0xffff858000009f80 0045 00000000 0x0 0x0 0xffff85800000a000 0041 00000000 0x0 0x0 0xffff85800000a080 0041 00000000 0x0 0x0 0xffff85800000a100 0041 00000000 0x0 0x0 0xffff85800000a180 0041 00000000 0x0 0x0 0xffff85800000a200 0041 00000000 0x0 0x0 0xffff85800000a280 0041 00000000 0x0 0x0 0xffff85800000a300 0041 00000000 0x0 0x0 0xffff85800000a380 0041 00000000 0x0 0x0 0xffff85800000a400 0041 00000000 0x0 0x0 0xffff85800000a480 0041 00000000 0x0 0x0 0xffff85800000a500 0041 00000000 0x0 0x0 0xffff85800000a580 0041 00000000 0x0 0x0 0xffff85800000a600 0041 00000000 0x0 0x0 0xffff85800000a680 0041 00000000 0x0 0x0 0xffff85800000a700 0041 00000000 0x0 0x0 0xffff85800000a780 0041 00000000 0x0 0x0 0xffff85800000a800 0041 00000000 0x0 0x0 0xffff85800000a880 0041 00000000 0x0 0x0 0xffff85800000a900 0041 00000000 0x0 0x0 0xffff85800000a980 0041 00000000 0x0 0x0 0xffff85800000aa00 0041 00000000 0x0 0x0 0xffff85800000aa80 0041 00000000 0x0 0x0 0xffff85800000ab00 0041 00000000 0x0 0x0 0xffff85800000ab80 0041 00000000 0x0 0x0 0xffff85800000ac00 0041 00000000 0x0 0x0 0xffff85800000ac80 0041 00000000 0x0 0x0 0xffff85800000ad00 0041 00000000 0x0 0x0 0xffff85800000ad80 0041 00000000 0x0 0x0 0xffff85800000ae00 0041 00000000 0x0 0x0 0xffff85800000ae80 0041 00000000 0x0 0x0 0xffff85800000af00 0041 00000000 0x0 0x0 0xffff85800000af80 0041 00000000 0x0 0x0 0xffff85800000b000 0045 00000000 0x0 0x0 0xffff85800000b080 0041 00000000 0x0 0x0 0xffff85800000b100 0041 00000000 0x0 0x0 0xffff85800000b180 0041 00000000 0x0 0x0 0xffff85800000b200 0045 00000000 0x0 0x0 0xffff85800000b280 0045 00000000 0x0 0x0 0xffff85800000b300 0045 00000000 0x0 0x0 0xffff85800000b380 0045 00000000 0x0 0x0 0xffff85800000b400 0045 00000000 0x0 0x0 0xffff85800000b480 0045 00000000 0x0 0x0 0xffff85800000b500 0041 00000000 0x0 0x0 0xffff85800000b580 0041 00000000 0x0 0x0 0xffff85800000b600 0045 00000000 0x0 0x0 0xffff85800000b680 0045 00000000 0x0 0x0 0xffff85800000b700 0045 00000000 0x0 0x0 0xffff85800000b780 0045 00000000 0x0 0x0 0xffff85800000b800 0045 00000000 0x0 0x0 0xffff85800000b880 0045 00000000 0x0 0x0 0xffff85800000b900 0045 00000000 0x0 0x0 0xffff85800000b980 0045 00000000 0x0 0x0 0xffff85800000ba00 0045 00000000 0x0 0x0 0xffff85800000ba80 0045 00000000 0x0 0x0 0xffff85800000bb00 0045 00000000 0x0 0x0 0xffff85800000bb80 0045 00000000 0x0 0x0 0xffff85800000bc00 0045 00000000 0x0 0x0 0xffff85800000bc80 0045 00000000 0x0 0x0 0xffff85800000bd00 0045 00000000 0x0 0x0 0xffff85800000bd80 0045 00000000 0x0 0x0 0xffff85800000be00 0045 00000000 0x0 0x0 0xffff85800000be80 0045 00000000 0x0 0x0 0xffff85800000bf00 0045 00000000 0x0 0x0 0xffff85800000bf80 0045 00000000 0x0 0x0 0xffff85800000c000 0045 00000000 0x0 0x0 0xffff85800000c080 0045 00000000 0x0 0x0 0xffff85800000c100 0045 00000000 0x0 0x0 0xffff85800000c180 0045 00000000 0x0 0x0 0xffff85800000c200 0045 00000000 0x0 0x0 0xffff85800000c280 0045 00000000 0x0 0x0 0xffff85800000c300 0045 00000000 0x0 0x0 0xffff85800000c380 0045 00000000 0x0 0x0 0xffff85800000c400 0045 00000000 0x0 0x0 0xffff85800000c480 0045 00000000 0x0 0x0 0xffff85800000c500 0045 00000000 0x0 0x0 0xffff85800000c580 0045 00000000 0x0 0x0 0xffff85800000c600 0045 00000000 0x0 0x0 0xffff85800000c680 0045 00000000 0x0 0x0 0xffff85800000c700 0045 00000000 0x0 0x0 0xffff85800000c780 0045 00000000 0x0 0x0 0xffff85800000c800 0041 00000000 0x0 0x0 0xffff85800000c880 0045 00000000 0x0 0x0 0xffff85800000c900 0045 00000000 0x0 0x0 0xffff85800000c980 0045 00000000 0x0 0x0 0xffff85800000ca00 0041 00000000 0x0 0x0 0xffff85800000ca80 0045 00000000 0x0 0x0 0xffff85800000cb00 0045 00000000 0x0 0x0 0xffff85800000cb80 0045 00000000 0x0 0x0 0xffff85800000cc00 0041 00000000 0x0 0x0 0xffff85800000cc80 0041 00000000 0x0 0x0 0xffff85800000cd00 0045 00000000 0x0 0x0 0xffff85800000cd80 0045 00000000 0x0 0x0 0xffff85800000ce00 0041 00000000 0x0 0x0 0xffff85800000ce80 0041 00000000 0x0 0x0 0xffff85800000cf00 0041 00000000 0x0 0x0 0xffff85800000cf80 0041 00000000 0x0 0x0 0xffff85800000d000 0041 00000000 0x0 0x0 0xffff85800000d080 0041 00000000 0x0 0x0 0xffff85800000d100 0041 00000000 0x0 0x0 0xffff85800000d180 0041 00000000 0x0 0x0 0xffff85800000d200 0041 00000000 0x0 0x0 0xffff85800000d280 0041 00000000 0x0 0x0 0xffff85800000d300 0041 00000000 0x0 0x0 0xffff85800000d380 0041 00000000 0x0 0x0 0xffff85800000d400 0041 00000000 0x0 0x0 0xffff85800000d480 0041 00000000 0x0 0x0 0xffff85800000d500 0041 00000000 0x0 0x0 0xffff85800000d580 0041 00000000 0x0 0x0 0xffff85800000d600 0041 00000000 0x0 0x0 0xffff85800000d680 0041 00000000 0x0 0x0 0xffff85800000d700 0041 00000000 0x0 0x0 0xffff85800000d780 0041 00000000 0x0 0x0 0xffff85800000d800 0045 00000000 0x0 0x0 0xffff85800000d880 0041 00000000 0x0 0x0 0xffff85800000d900 0041 00000000 0x0 0x0 0xffff85800000d980 0041 00000000 0x0 0x0 0xffff85800000da00 0041 00000000 0x0 0x0 0xffff85800000da80 0045 00000000 0x0 0x0 0xffff85800000db00 0045 00000000 0x0 0x0 0xffff85800000db80 0041 00000000 0x0 0x0 0xffff85800000dc00 0045 00000000 0x0 0x0 0xffff85800000dc80 0045 00000000 0x0 0x0 0xffff85800000dd00 0041 00000000 0x0 0x0 0xffff85800000dd80 0041 00000000 0x0 0x0 0xffff85800000de00 0045 00000000 0x0 0x0 0xffff85800000de80 0041 00000000 0x0 0x0 0xffff85800000df00 0041 00000000 0x0 0x0 0xffff85800000df80 0045 00000000 0x0 0x0 0xffff85800000e000 0045 00000000 0x0 0x0 0xffff85800000e080 0045 00000000 0x0 0x0 0xffff85800000e100 0041 00000000 0x0 0x0 0xffff85800000e180 0041 00000000 0x0 0x0 0xffff85800000e200 0041 00000000 0x0 0x0 0xffff85800000e280 0041 00000000 0x0 0x0 0xffff85800000e300 0045 00000000 0x0 0x0 0xffff85800000e380 0045 00000000 0x0 0x0 0xffff85800000e400 0041 00000000 0x0 0x0 0xffff85800000e480 0041 00000000 0x0 0x0 0xffff85800000e500 0045 00000000 0x0 0x0 0xffff85800000e580 0045 00000000 0x0 0x0 0xffff85800000e600 0041 00000000 0x0 0x0 0xffff85800000e680 0045 00000000 0x0 0x0 0xffff85800000e700 0045 00000000 0x0 0x0 0xffff85800000e780 0045 00000000 0x0 0x0 0xffff85800000e800 0041 00000000 0x0 0x0 0xffff85800000e880 0045 00000000 0x0 0x0 0xffff85800000e900 0041 00000000 0x0 0x0 0xffff85800000e980 0041 00000000 0x0 0x0 0xffff85800000ea00 0041 00000000 0x0 0x0 0xffff85800000ea80 0041 00000000 0x0 0x0 0xffff85800000eb00 0045 00000000 0x0 0x0 0xffff85800000eb80 0041 00000000 0x0 0x0 0xffff85800000ec00 0045 00000000 0x0 0x0 0xffff85800000ec80 0041 00000000 0x0 0x0 0xffff85800000ed00 0041 00000000 0x0 0x0 0xffff85800000ed80 0041 00000000 0x0 0x0 0xffff85800000ee00 0041 00000000 0x0 0x0 0xffff85800000ee80 0045 00000000 0x0 0x0 0xffff85800000ef00 0041 00000000 0x0 0x0 0xffff85800000ef80 0041 00000000 0x0 0x0 0xffff85800000f000 0041 00000000 0x0 0x0 0xffff85800000f080 0041 00000000 0x0 0x0 0xffff85800000f100 0041 00000000 0x0 0x0 0xffff85800000f180 0041 00000000 0x0 0x0 0xffff85800000f200 0041 00000000 0x0 0x0 0xffff85800000f280 0041 00000000 0x0 0x0 0xffff85800000f300 0041 00000000 0x0 0x0 0xffff85800000f380 0045 00000000 0x0 0x0 0xffff85800000f400 0045 00000000 0x0 0x0 0xffff85800000f480 0041 00000000 0x0 0x0 0xffff85800000f500 0041 00000000 0x0 0x0 0xffff85800000f580 0041 00000000 0x0 0x0 0xffff85800000f600 0045 00000000 0x0 0x0 0xffff85800000f680 0041 00000000 0x0 0x0 0xffff85800000f700 0041 00000000 0x0 0x0 0xffff85800000f780 0041 00000000 0x0 0x0 0xffff85800000f800 0041 00000000 0x0 0x0 0xffff85800000f880 0045 00000000 0x0 0x0 0xffff85800000f900 0045 00000000 0x0 0x0 0xffff85800000f980 0041 00000000 0x0 0x0 0xffff85800000fa00 0041