[ 55.8034611] panic: kernel diagnostic assertion "lwpcnt >= 0" failed: file "/syzkaller/managers/ci2-netbsd-kubsan/kernel/sys/kern/kern_uidinfo.c", line 258 uid=60928 diff=-1 lwpcnt=-1 [ 55.8034611] cpu1: Begin traceback... [ 55.8234469] vpanic() at netbsd:vpanic+0x2f0 sys/kern/subr_prf.c:288 [ 55.9034466] kern_assert() at netbsd:kern_assert+0x65 sys/arch/amd64/amd64/db_disasm.c:1074 [ 55.9634478] chglwpcnt() at netbsd:chglwpcnt+0xaf sys/kern/kern_uidinfo.c:258 [ 56.0034883] lwp_free() at netbsd:lwp_free+0x9f7 sys/kern/kern_lwp.c:1267 [ 56.0334761] lwp_wait() at netbsd:lwp_wait+0x5dc sys/kern/kern_lwp.c:707 [ 56.0634744] exit_lwps() at netbsd:exit_lwps+0x2a1 sys/kern/kern_exit.c:651 [ 56.0934787] exit1() at netbsd:exit1+0x1a9 ksiginfo_queue_init sys/sys/signalvar.h:240 [inline] [ 56.0934787] exit1() at netbsd:exit1+0x1a9 sys/kern/kern_exit.c:232 [ 56.1234740] sys_exit() at netbsd:sys_exit+0xd4 sys/kern/kern_exit.c:181 [ 56.1534955] syscall() at netbsd:syscall+0x28b sy_call sys/sys/syscallvar.h:65 [inline] [ 56.1534955] syscall() at netbsd:syscall+0x28b sy_invoke sys/sys/syscallvar.h:94 [inline] [ 56.1534955] syscall() at netbsd:syscall+0x28b sys/arch/x86/x86/syscall.c:137 [ 56.1634897] --- syscall (number 1) --- [ 56.1734849] netbsd:syscall+0x28b: [ 56.1834817] cpu1: End traceback... [ 56.1834817] fatal breakpoint trap in supervisor mode [ 56.1834817] trap type 1 code 0 rip 0xffffffff80235475 cs 0x8 rflags 0x246 cr2 0x7259c4deb969 ilevel 0 rsp 0xffff978248332be0 [ 56.2034662] curlwp 0xffff96112e3b6200 pid 5939.5939 lowest kstack 0xffff97824832e2c0 Stopped in pid 5939.5939 (syz-executor8179) at netbsd:breakpoint+0x5: leave ? breakpoint() at netbsd:breakpoint+0x5 db_panic() at netbsd:db_panic+0xec sys/ddb/db_panic.c:71 vpanic() at netbsd:vpanic+0x2f0 sys/kern/subr_prf.c:288 kern_assert() at netbsd:kern_assert+0x65 sys/arch/amd64/amd64/db_disasm.c:1074 chglwpcnt() at netbsd:chglwpcnt+0xaf sys/kern/kern_uidinfo.c:258 lwp_free() at netbsd:lwp_free+0x9f7 sys/kern/kern_lwp.c:1267 lwp_wait() at netbsd:lwp_wait+0x5dc sys/kern/kern_lwp.c:707 exit_lwps() at netbsd:exit_lwps+0x2a1 sys/kern/kern_exit.c:651 exit1() at netbsd:exit1+0x1a9 ksiginfo_queue_init sys/sys/signalvar.h:240 [inline] exit1() at netbsd:exit1+0x1a9 sys/kern/kern_exit.c:232 sys_exit() at netbsd:sys_exit+0xd4 sys/kern/kern_exit.c:181 syscall() at netbsd:syscall+0x28b sy_call sys/sys/syscallvar.h:65 [inline] syscall() at netbsd:syscall+0x28b sy_invoke sys/sys/syscallvar.h:94 [inline] syscall() at netbsd:syscall+0x28b sys/arch/x86/x86/syscall.c:137 --- syscall (number 1) --- netbsd:syscall+0x28b: Panic string: kernel diagnostic assertion "lwpcnt >= 0" failed: file "/syzkaller/managers/ci2-netbsd-kubsan/kernel/sys/kern/kern_uidinfo.c", line 258 uid=60928 diff=-1 lwpcnt=-1 PID LID S CPU FLAGS STRUCT LWP * NAME WAIT 5939 6097 5 0 100100 ffff96112e3b6640 syz-executor8179 5939 > 5939 7 1 0 ffff96112e3b6200 syz-executor8179 1130 1130 3 0 40 ffff96112d9e7300 syz-executor8179 mutex 1235 1235 3 0 180 ffff96112fed8280 sshd select 1225 1225 3 0 180 ffff96112ee8e180 getty nanoslp 1226 1226 3 0 180 ffff96112e5069c0 getty nanoslp 1083 1083 3 0 180 ffff96112d5ec6c0 getty nanoslp 1224 1224 3 0 180 ffff96112d5ec280 getty ttyraw 1102 1102 3 0 180 ffff96112dcd68c0 sshd select 953 953 3 0 180 ffff96112f1d5ac0 powerd kqueue 700 700 3 1 180 ffff96112e4ad540 syslogd kqueue 559 559 3 0 180 ffff96112db67780 dhcpcd poll 558 558 3 0 180 ffff96112d5ecb00 dhcpcd poll 742 742 3 0 180 ffff96112db67340 dhcpcd poll 602 602 3 1 180 ffff96112dcd6040 dhcpcd poll 292 292 3 0 180 ffff96112db67bc0 dhcpcd poll 485 485 3 1 180 ffff96112d7deb40 dhcpcd poll 291 291 3 1 180 ffff96112d9e7740 dhcpcd poll 1 1 3 0 180 ffff96112509f100 init wait 0 673 3 0 200 ffff96112d2c7640 physiod physiod 0 196 3 0 200 ffff96112d2a4680 pooldrain pooldrain 0 195 3 0 200 ffff96112d2a4240 ioflush syncer 0 194 3 1 200 ffff96112d2c7a80 pgdaemon pgdaemon 0 170 3 1 200 ffff96112b1c6a40 usb7 usbevt 0 169 3 1 200 ffff96112b1c6600 usb6 usbevt 0 168 3 0 200 ffff96112b1c61c0 usb5 usbevt 0 167 3 0 200 ffff961128159a00 usb4 usbevt 0 166 3 0 200 ffff9611281595c0 usb3 usbevt 0 165 3 0 200 ffff961128159180 usb2 usbevt 0 31 3 0 200 ffff9611260fc9c0 usb1 usbevt 0 63 3 0 200 ffff9611260fc580 usb0 usbevt 0 126 3 1 200 ffff9611260fc140 usbtask-dr usbtsk 0 125 3 1 200 ffff96112509f980 usbtask-hc usbtsk 0 124 3 0 200 ffff961123495b00 swwreboot swwreboot 0 123 3 0 200 ffff96112509f540 npfgc0 npfgcw 0 122 3 1 200 ffff961125050940 rt_free rt_free 0 121 3 1 200 ffff961125050500 unpgc unpgc 0 120 3 0 200 ffff9611250500c0 key_timehandler key_timehandler 0 119 3 1 200 ffff96112504f900 icmp6_wqinput/1 icmp6_wqinput 0 118 3 0 200 ffff96112504f4c0 icmp6_wqinput/0 icmp6_wqinput 0 117 3 0 200 ffff96112504f080 nd6_timer nd6_timer 0 116 3 1 200 ffff96112502b8c0 carp6_wqinput/1 carp6_wqinput 0 115 3 0 200 ffff96112502b480 carp6_wqinput/0 carp6_wqinput 0 114 3 1 200 ffff96112502b040 carp_wqinput/1 carp_wqinput 0 113 3 0 200 ffff961124fdebc0 carp_wqinput/0 carp_wqinput 0 112 3 1 200 ffff961124eff740 icmp_wqinput/1 icmp_wqinput 0 111 3 0 200 ffff961124effb80 icmp_wqinput/0 icmp_wqinput 0 110 3 0 200 ffff961124fde340 rt_timer rt_timer 0 109 3 0 200 ffff961124fde780 vmem_rehash vmem_rehash 0 100 3 0 200 ffff961124eff300 entbutler entropy 0 99 3 1 200 ffff96112493eb40 viomb balloon 0 98 3 1 200 ffff96112493e700 vioif0_txrx/1 vioif0_txrx 0 97 3 0 200 ffff96112493e2c0 vioif0_txrx/0 vioif0_txrx 0 30 3 1 200 ffff9611234956c0 scsibus0 sccomp 0 29 3 0 200 ffff961123495280 pms0 pmsreset 0 28 3 1 200 ffff9611233b5ac0 xcall/1 xcall 0 27 1 1 200 ffff9611233b5680 softser/1 0 26 1 1 200 ffff9611233b5240 softclk/1 0 25 1 1 200 ffff961123398a80 softbio/1 0 24 1 1 200 ffff961123398640 softnet/1 0 23 1 1 201 ffff961123398200 idle/1 0 22 3 1 200 ffff961251733a40 lnxsyswq lnxsyswq 0 21 3 0 200 ffff961251733600 lnxubdwq lnxubdwq 0 20 3 0 200 ffff9612517331c0 lnxpwrwq lnxpwrwq 0 19 3 0 200 ffff961251742a00 lnxlngwq lnxlngwq 0 18 3 0 200 ffff9612517425c0 lnxhipwq lnxhipwq 0 17 3 0 200 ffff961251742180 lnxrcugc lnxrcugc 0 16 3 0 200 ffff9612517599c0 sysmon smtaskq 0 15 3 1 200 ffff961251759580 pmfsuspend pmfsuspend 0 14 3 0 200 ffff961251759140 pmfevent pmfevent 0 13 3 0 200 ffff96125176c980 sopendfree sopendfr 0 12 3 0 200 ffff96125176c540 ifwdog ifwdog 0 11 3 0 200 ffff96125176c100 iflnkst iflnkst 0 10 3 1 200 ffff961252797940 nfssilly nfssilly 0 9 3 1 200 ffff961252797500 pooldisp pooldisp 0 8 3 1 200 ffff9612527970c0 modunload mod_unld 0 7 3 0 200 ffff9612527c2900 xcall/0 xcall 0 6 1 0 200 ffff9612527c24c0 softser/0 0 5 1 0 200 ffff9612527c2080 softclk/0 0 4 1 0 200 ffff9612527ed8c0 softbio/0 0 3 1 0 200 ffff9612527ed480 softnet/0 0 > 2 1 0 201 ffff9612527ed040 idle/0 0 0 3 0 200 ffffffff867959c0 swapper uvm [Locks tracked through LWPs] ****** LWP 5939.5939 (syz-executor8179) @ 0xffff96112e3b6200, l_stat=7 *** Locks held: * Lock 0 (initialized at netbsd:fork1+0x19f9 sys/kern/kern_fork.c:377) lock address : ffff96112f99bf40 type : sleep/adaptive initialized : netbsd:fork1+0x19f9 shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 0 relevant cpu : 1 last held: 1 relevant lwp : 0xffff96112e3b6200 last held: 0xffff96112e3b6200 last locked* : netbsd:lwp_wait+0x5f8 unlocked : netbsd:lwp_exit+0x7fd owner field : 0xffff96112e3b6200 wait/spin: 1/0 Turnstile: => 0 waiting readers: => 1 waiting writers: 0xffff96112d9e7300 *** Locks wanted: none ****** LWP 558.558 (dhcpcd) @ 0xffff96112d5ecb00, l_stat=3 *** Locks held: none *** Locks wanted: * Lock 0 (initialized at netbsd:module_hook_init+0x1c sys/kern/kern_module_hook.c:132) lock address : netbsd:module_hook type : sleep/adaptive initialized : netbsd:module_hook_init+0x1c shared holds : 0 exclusive: 0 shares wanted: 0 exclusive: 0 relevant cpu : 0 last held: 0 relevant lwp : 0xffff96112d5ecb00 last held: 000000000000000000 last locked : 0 unlocked* : 0 owner field : 000000000000000000 wait/spin: 0/0 Turnstile: no active turnstile for this lock. ****** LWP 742.742 (dhcpcd) @ 0xffff96112db67340, l_stat=3 *** Locks held: none *** Locks wanted: * Lock 0 (initialized at netbsd:module_hook_init+0x1c sys/kern/kern_module_hook.c:132) lock address : netbsd:module_hook type : sleep/adaptive initialized : netbsd:module_hook_init+0x1c shared holds : 0 exclusive: 0 shares wanted: 0 exclusive: 0 relevant cpu : 0 last held: 0 relevant lwp : 0xffff96112db67340 last held: 000000000000000000 last locked : 0 unlocked* : 0 owner field : 000000000000000000 wait/spin: 0/0 Turnstile: no active turnstile for this lock. ****** LWP 485.485 (dhcpcd) @ 0xffff96112d7deb40, l_stat=3 *** Locks held: none *** Locks wanted: * Lock 0 (initialized at netbsd:module_hook_init+0x1c sys/kern/kern_module_hook.c:132) lock address : netbsd:module_hook type : sleep/adaptive initialized : netbsd:module_hook_init+0x1c shared holds : 0 exclusive: 0 shares wanted: 0 exclusive: 0 relevant cpu : 1 last held: 0 relevant lwp : 0xffff96112d7deb40 last held: 000000000000000000 last locked : 0 unlocked* : 0 owner field : 000000000000000000 wait/spin: 0/0 Turnstile: no active turnstile for this lock. ****** LWP 291.291 (dhcpcd) @ 0xffff96112d9e7740, l_stat=3 *** Locks held: none *** Locks wanted: * Lock 0 (initialized at netbsd:module_hook_init+0x1c sys/kern/kern_module_hook.c:132) lock address : netbsd:module_hook type : sleep/adaptive initialized : netbsd:module_hook_init+0x1c shared holds : 0 exclusive: 0 shares wanted: 0 exclusive: 0 relevant cpu : 1 last held: 0 relevant lwp : 0xffff96112d9e7740 last held: 000000000000000000 last locked : 0 unlocked* : 0 owner field : 000000000000000000 wait/spin: 0/0 Turnstile: no active turnstile for this lock. ****** LWP 0.26 (softclk/1) @ 0xffff9611233b5240, l_stat=1 *** Locks held: none *** Locks wanted: * Lock 0 (initialized at netbsd:module_hook_init+0x1c sys/kern/kern_module_hook.c:132) lock address : netbsd:module_hook type : sleep/adaptive initialized : netbsd:module_hook_init+0x1c shared holds : 0 exclusive: 0 shares wanted: 0 exclusive: 0 relevant cpu : 1 last held: 0 relevant lwp : 0xffff9611233b5240 last held: 000000000000000000 last locked : 0 unlocked* : 0 owner field : 000000000000000000 wait/spin: 0/0 Turnstile: no active turnstile for this lock. ****** LWP 0.11 (iflnkst) @ 0xffff96125176c100, l_stat=3 *** Locks held: none *** Locks wanted: * Lock 0 (initialized at netbsd:module_hook_init+0x1c sys/kern/kern_module_hook.c:132) lock address : netbsd:module_hook type : sleep/adaptive initialized : netbsd:module_hook_init+0x1c shared holds : 0 exclusive: 0 shares wanted: 0 exclusive: 0 relevant cpu : 0 last held: 0 relevant lwp : 0xffff96125176c100 last held: 000000000000000000 last locked : 0 unlocked* : 0 owner field : 000000000000000000 wait/spin: 0/0 Turnstile: no active turnstile for this lock. ****** LWP 0.0 (swapper) @ 0xffffffff867959c0, l_stat=3 *** Locks held: none *** Locks wanted: * Lock 0 (initialized at netbsd:module_hook_init+0x1c sys/kern/kern_module_hook.c:132) lock address : netbsd:module_hook type : sleep/adaptive initialized : netbsd:module_hook_init+0x1c shared holds : 0 exclusive: 0 shares wanted: 0 exclusive: 0 relevant cpu : 0 last held: 0 relevant lwp : 0xffffffff867959c0 last held: 000000000000000000 last locked : 0 unlocked* : 0 owner field : 000000000000000000 wait/spin: 0/0 Turnstile: no active turnstile for this lock. [Locks tracked through CPUs] ******* Locks held on cpu1: * Lock 0 (initialized at netbsd:kprintf_init+0x72 sys/kern/subr_prf.c:156) lock address : netbsd:kprintf_mtx type : spin initialized : netbsd:kprintf_init+0x72 shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 0 relevant cpu : 1 last held: 1 relevant lwp : 0xffff96112e3b6200 last held: 0xffff96112e3b6200 last locked* : netbsd:kprintf_lock+0x50 unlocked : netbsd:kprintf_unlock+0x70 owner field : 0x0000000000000800 wait/spin: 0/1 PAGE FLAG PQ UOBJECT UANON 0xffff978000007180 0045 00000000 0x0 0x0 0xffff978000007200 0045 00000000 0x0 0x0 0xffff978000007280 0045 00000000 0x0 0x0 0xffff978000007300 0045 00000000 0x0 0x0 0xffff978000007380 0045 00000000 0x0 0x0 0xffff978000007400 0045 00000000 0x0 0x0 0xffff978000007480 0045 00000000 0x0 0x0 0xffff978000007500 0045 00000000 0x0 0x0 0xffff978000007580 0045 00000000 0x0 0x0 0xffff978000007600 0045 00000000 0x0 0x0 0xffff978000007680 0041 00000000 0x0 0x0 0xffff978000007700 0041 00000000 0x0 0x0 0xffff978000007780 0041 00000000 0x0 0x0 0xffff978000007800 0041 00000000 0x0 0x0 0xffff978000007880 0041 00000000 0x0 0x0 0xffff978000007900 0045 00000000 0x0 0x0 0xffff978000007980 0041 00000000 0x0 0x0 0xffff978000007a00 0041 00000000 0x0 0x0 0xffff978000007a80 0041 00000000 0x0 0x0 0xffff978000007b00 0041 00000000 0x0 0x0 0xffff978000007b80 0041 00000000 0x0 0x0 0xffff978000007c00 0041 00000000 0x0 0x0 0xffff978000007c80 0041 00000000 0x0 0x0 0xffff978000007d00 0041 00000000 0x0 0x0 0xffff978000007d80 0041 00000000 0x0 0x0 0xffff978000007e00 0041 00000000 0x0 0x0 0xffff978000007e80 0041 00000000 0x0 0x0 0xffff978000007f00 0041 00000000 0x0 0x0 0xffff978000007f80 0041 00000000 0x0 0x0 0xffff978000008000 0041 00000000 0x0 0x0 0xffff978000008080 0041 00000000 0x0 0x0 0xffff978000008100 0041 00000000 0x0 0x0 0xffff978000008180 0041 00000000 0x0 0x0 0xffff978000008200 0041 00000000 0x0 0x0 0xffff978000008280 0041 00000000 0x0 0x0 0xffff978000008300 0041 00000000 0x0 0x0 0xffff978000008380 0041 00000000 0x0 0x0 0xffff978000008400 0041 00000000 0x0 0x0 0xffff978000008480 0041 00000000 0x0 0x0 0xffff978000008500 0041 00000000 0x0 0x0 0xffff978000008580 0041 00000000 0x0 0x0 0xffff978000008600 0045 00000000 0x0 0x0 0xffff978000008680 0041 00000000 0x0 0x0 0xffff978000008700 0041 00000000 0x0 0x0 0xffff978000008780 0041 00000000 0x0 0x0 0xffff978000008800 0041 00000000 0x0 0x0 0xffff978000008880 0041 00000000 0x0 0x0 0xffff978000008900 0041 00000000 0x0 0x0 0xffff978000008980 0041 00000000 0x0 0x0 0xffff978000008a00 0041 00000000 0x0 0x0 0xffff978000008a80 0041 00000000 0x0 0x0 0xffff978000008b00 0041 00000000 0x0 0x0 0xffff978000008b80 0041 00000000 0x0 0x0 0xffff978000008c00 0041 00000000 0x0 0x0 0xffff978000008c80 0041 00000000 0x0 0x0 0xffff978000008d00 0041 00000000 0x0 0x0 0xffff978000008d80 0041 00000000 0x0 0x0 0xffff978000008e00 0041 00000000 0x0 0x0 0xffff978000008e80 0041 00000000 0x0 0x0 0xffff978000008f00 0041 00000000 0x0 0x0 0xffff978000008f80 0041 00000000 0x0 0x0 0xffff978000009000 0041 00000000 0x0 0x0 0xffff978000009080 0041 00000000 0x0 0x0 0xffff978000009100 0045 00000000 0x0 0x0 0xffff978000009180 0045 00000000 0x0 0x0 0xffff978000009200 0041 00000000 0x0 0x0 0xffff978000009280 0041 00000000 0x0 0x0 0xffff978000009300 0041 00000000 0x0 0x0 0xffff978000009380 0041 00000000 0x0 0x0 0xffff978000009400 0041 00000000 0x0 0x0 0xffff978000009480 0041 00000000 0x0 0x0 0xffff978000009500 0041 00000000 0x0 0x0 0xffff978000009580 0041 00000000 0x0 0x0 0xffff978000009600 0041 00000000 0x0 0x0 0xffff978000009680 0041 00000000 0x0 0x0 0xffff978000009700 0041 00000000 0x0 0x0 0xffff978000009780 0041 00000000 0x0 0x0 0xffff978000009800 0041 00000000 0x0 0x0 0xffff978000009880 0041 00000000 0x0 0x0 0xffff978000009900 0041 00000000 0x0 0x0 0xffff978000009980 0041 00000000 0x0 0x0 0xffff978000009a00 0041 00000000 0x0 0x0 0xffff978000009a80 0041 00000000 0x0 0x0 0xffff978000009b00 0041 00000000 0x0 0x0 0xffff978000009b80 0041 00000000 0x0 0x0 0xffff978000009c00 0041 00000000 0x0 0x0 0xffff978000009c80 0041 00000000 0x0 0x0 0xffff978000009d00 0041 00000000 0x0 0x0 0xffff978000009d80 0041 00000000 0x0 0x0 0xffff978000009e00 0041 00000000 0x0 0x0 0xffff978000009e80 0041 00000000 0x0 0x0 0xffff978000009f00 0041 00000000 0x0 0x0 0xffff978000009f80 0045 00000000 0x0 0x0 0xffff97800000a000 0041 00000000 0x0 0x0 0xffff97800000a080 0041 00000000 0x0 0x0 0xffff97800000a100 0041 00000000 0x0 0x0 0xffff97800000a180 0041 00000000 0x0 0x0 0xffff97800000a200 0041 00000000 0x0 0x0 0xffff97800000a280 0041 00000000 0x0 0x0 0xffff97800000a300 0041 00000000 0x0 0x0 0xffff97800000a380 0041 00000000 0x0 0x0 0xffff97800000a400 0041 00000000 0x0 0x0 0xffff97800000a480 0041 00000000 0x0 0x0 0xffff97800000a500 0041 00000000 0x0 0x0 0xffff97800000a580 0041 00000000 0x0 0x0 0xffff97800000a600 0041 00000000 0x0 0x0 0xffff97800000a680 0041 00000000 0x0 0x0 0xffff97800000a700 0041 00000000 0x0 0x0 0xffff97800000a780 0041 00000000 0x0 0x0 0xffff97800000a800 0041 00000000 0x0 0x0 0xffff97800000a880 0041 00000000 0x0 0x0 0xffff97800000a900 0041 00000000 0x0 0x0 0xffff97800000a980 0041 00000000 0x0 0x0 0xffff97800000aa00 0041 00000000 0x0 0x0 0xffff97800000aa80 0041 00000000 0x0 0x0 0xffff97800000ab00 0041 00000000 0x0 0x0 0xffff97800000ab80 0041 00000000 0x0 0x0 0xffff97800000ac00 0041 00000000 0x0 0x0 0xffff97800000ac80 0041 00000000 0x0 0x0 0xffff97800000ad00 0041 00000000 0x0 0x0 0xffff97800000ad80 0041 00000000 0x0 0x0 0xffff97800000ae00 0041 00000000 0x0 0x0 0xffff97800000ae80 0041 00000000 0x0 0x0 0xffff97800000af00 0041 00000000 0x0 0x0 0xffff97800000af80 0041 00000000 0x0 0x0 0xffff97800000b000 0045 00000000 0x0 0x0 0xffff97800000b080 0041 00000000 0x0 0x0 0xffff97800000b100 0041 00000000 0x0 0x0 0xffff97800000b180 0041 00000000 0x0 0x0 0xffff97800000b200 0045 00000000 0x0 0x0 0xffff97800000b280 0045 00000000 0x0 0x0 0xffff97800000b300 0045 00000000 0x0 0x0 0xffff97800000b380 0045 00000000 0x0 0x0 0xffff97800000b400 0045 00000000 0x0 0x0 0xffff97800000b480 0045 00000000 0x0 0x0 0xffff97800000b500 0041 00000000 0x0 0x0 0xffff97800000b580 0041 00000000 0x0 0x0 0xffff97800000b600 0045 00000000 0x0 0x0 0xffff97800000b680 0045 00000000 0x0 0x0 0xffff97800000b700 0045 00000000 0x0 0x0 0xffff97800000b780 0045 00000000 0x0 0x0 0xffff97800000b800 0045 00000000 0x0 0x0 0xffff97800000b880 0045 00000000 0x0 0x0 0xffff97800000b900 0045 00000000 0x0 0x0 0xffff97800000b980 0045 00000000 0x0 0x0 0xffff97800000ba00 0045 00000000 0x0 0x0 0xffff97800000ba80 0045 00000000 0x0 0x0 0xffff97800000bb00 0045 00000000 0x0 0x0 0xffff97800000bb80 0045 00000000 0x0 0x0 0xffff97800000bc00 0045 00000000 0x0 0x0 0xffff97800000bc80 0045 00000000 0x0 0x0 0xffff97800000bd00 0045 00000000 0x0 0x0 0xffff97800000bd80 0045 00000000 0x0 0x0 0xffff97800000be00 0045 00000000 0x0 0x0 0xffff97800000be80 0045 00000000 0x0 0x0 0xffff97800000bf00 0045 00000000 0x0 0x0 0xffff97800000bf80 0045 00000000 0x0 0x0 0xffff97800000c000 0045 00000000 0x0 0x0 0xffff97800000c080 0045 00000000 0x0 0x0 0xffff97800000c100 0045 00000000 0x0 0x0 0xffff97800000c180 0045 00000000 0x0 0x0 0xffff97800000c200 0045 00000000 0x0 0x0 0xffff97800000c280 0045 00000000 0x0 0x0 0xffff97800000c300 0045 00000000 0x0 0x0 0xffff97800000c380 0045 00000000 0x0 0x0 0xffff97800000c400 0045 00000000 0x0 0x0 0xffff97800000c480 0045 00000000 0x0 0x0 0xffff97800000c500 0045 00000000 0x0 0x0 0xffff97800000c580 0045 00000000 0x0 0x0 0xffff97800000c600 0045 00000000 0x0 0x0 0xffff97800000c680 0045 00000000 0x0 0x0 0xffff97800000c700 0045 00000000 0x0 0x0 0xffff97800000c780 0045 00000000 0x0 0x0 0xffff97800000c800 0041 00000000 0x0 0x0 0xffff97800000c880 0045 00000000 0x0 0x0 0xffff97800000c900 0045 00000000 0x0 0x0 0xffff97800000c980 0045 00000000 0x0 0x0 0xffff97800000ca00 0041 00000000 0x0 0x0 0xffff97800000ca80 0045 00000000 0x0 0x0 0xffff97800000cb00 0045 00000000 0x0 0x0 0xffff97800000cb80 0045 00000000 0x0 0x0 0xffff97800000cc00 0041 00000000 0x0 0x0 0xffff97800000cc80 0041 00000000 0x0 0x0 0xffff97800000cd00 0045 00000000 0x0 0x0 0xffff97800000cd80 0045 00000000 0x0 0x0 0xffff97800000ce00 0041 00000000 0x0 0x0 0xffff97800000ce80 0041 00000000 0x0 0x0 0xffff97800000cf00 0041 00000000 0x0 0x0 0xffff97800000cf80 0041 00000000 0x0 0x0 0xffff97800000d000 0041 00000000 0x0 0x0 0xffff97800000d080 0041 00000000 0x0 0x0 0xffff97800000d100 0041 00000000 0x0 0x0 0xffff97800000d180 0041 00000000 0x0 0x0 0xffff97800000d200 0041 00000000 0x0 0x0 0xffff97800000d280 0041 00000000 0x0 0x0 0xffff97800000d300 0041 00000000 0x0 0x0 0xffff97800000d380 0041 00000000 0x0 0x0 0xffff97800000d400 0041 00000000 0x0 0x0 0xffff97800000d480 0041 00000000 0x0 0x0 0xffff97800000d500 0041 00000000 0x0 0x0 0xffff97800000d580 0041 00000000 0x0 0x0 0xffff97800000d600 0041 00000000 0x0 0x0 0xffff97800000d680 0041 00000000 0x0 0x0 0xffff97800000d700 0041 00000000 0x0 0x0 0xffff97800000d780 0041 00000000 0x0 0x0 0xffff97800000d800 0045 00000000 0x0 0x0 0xffff97800000d880 0041 00000000 0x0 0x0 0xffff97800000d900 0041 00000000 0x0 0x0 0xffff97800000d980 0041 00000000 0x0 0x0 0xffff97800000da00 0041 00000000 0x0 0x0 0xffff97800000da80 0045 00000000 0x0 0x0 0xffff97800000db00 0045 00000000 0x0 0x0 0xffff97800000db80 0041 00000000 0x0 0x0 0xffff97800000dc00 0045 00000000 0x0 0x0 0xffff97800000dc80 0045 00000000 0x0 0x0 0xffff97800000dd00 0041 00000000 0x0 0x0 0xffff97800000dd80 0041 00000000 0x0 0x0 0xffff97800000de00 0045 00000000 0x0 0x0 0xffff97800000de80 0041 00000000 0x0 0x0 0xffff97800000df00 0041 00000000 0x0 0x0 0xffff97800000df80 0045 00000000 0x0 0x0 0xffff97800000e000 0045 00000000 0x0 0x0 0xffff97800000e080 0045 00000000 0x0 0x0 0xffff97800000e100 0041 00000000 0x0 0x0 0xffff97800000e180 0041 00000000 0x0 0x0 0xffff97800000e200 0041 00000000 0x0 0x0 0xffff97800000e280 0041 00000000 0x0 0x0 0xffff97800000e300 0045 00000000 0x0 0x0 0xffff97800000e380 0045 00000000 0x0 0x0 0xffff97800000e400 0041 00000000 0x0 0x0 0xffff97800000e480 0041 00000000 0x0 0x0 0xffff97800000e500 0045 00000000 0x0 0x0 0xffff97800000e580 0045 00000000 0x0 0x0 0xffff97800000e600 0041 00000000 0x0 0x0 0xffff97800000e680 0045 00000000 0x0 0x0 0xffff97800000e700 0045 00000000 0x0 0x0 0xffff97800000e780 0045 00000000 0x0 0x0 0xffff97800000e800 0041 00000000 0x0 0x0 0xffff97800000e880 0045 00000000 0x0 0x0 0xffff97800000e900 0041 00000000 0x0 0x0 0xffff97800000e980 0041 00000000 0x0 0x0 0xffff97800000ea00 0041 00000000 0x0 0x0 0xffff97800000ea80 0041 00000000 0x0 0x0 0xffff97800000eb00 0045 00000000 0x0 0x0 0xffff97800000eb80 0041 00000000 0x0 0x0 0xffff97800000ec00 0045 00000000 0x0 0x0 0xffff97800000ec80 0041 00000000 0x0 0x0 0xffff97800000ed00 0041 00000000 0x0 0x0 0xffff97800000ed80 0041 00000000 0x0 0x0 0xffff97800000ee00 0041 00000000 0x0 0x0 0xffff97800000ee80 0045 00000000 0x0 0x0 0xffff97800000ef00 0041 00000000 0x0 0x0 0xffff97800000ef80 0041 00000000 0x0 0x0 0xffff97800000f000 0041 00000000 0x0 0x0 0xffff97800000f080 0041 00000000 0x0 0x0 0xffff97800000f100 0041 00000000 0x0 0x0 0xffff97800000f180 0041 00000000 0x0 0x0 0xffff97800000f200 0041 00000000 0x0 0x0 0xffff97800000f280 0041 00000000 0x0 0x0 0xffff97800000f300 0041 00000000 0x0 0x0 0xffff97800000f380 0045 00000000 0x0 0x0 0xffff97800000f400 0045 00000000 0x0 0x0 0xffff97800000f480 0041 00000000 0x0 0x0 0xffff97800000f500 0041 00000000 0x0 0x0 0xffff97800000f580 0041 00000000 0x0 0x0 0xffff97800000f600 0045 00000000 0x0 0x0 0xffff97800000f680 0041 00000000 0x0 0x0 0xffff97800000f700 0041 00000000 0x0 0x0 0xffff97800000f780 0041 00000000 0x0 0x0 0xffff97800000f800 0041 00000000 0x0 0x0 0xffff97800000f880 0045 00000000 0x0 0x0 0xffff97800000f900 0045 00000000 0x0 0x0 0xffff97800000f980 0041 00000000 0x0 0x0 0xffff97800000fa00 0041 00000000 0x0 0x0 0xffff97800000fa80 0045 00000000 0x0 0x0 0xffff97800000fb00 0041 00000000 0x0 0x0 0xffff97800000fb80 0041 00000000 0x0 0x0 0xffff97800000fc00 0041 00000000 0x0 0x0 0xffff97800000fc80 0041 00000000 0x0 0x0 0xffff97800000fd00 0041 00000000 0x0 0x0 0xffff97800000fd80 0045 00000000 0x0 0x0 0xffff97800000fe00 0041 00000000 0x0 0x0 0xffff97800000fe80 0041 00000000 0x0 0x0 0xffff97800000ff00 0041 00000000 0x0 0x0 0xffff97800000ff80 0041 00000000 0x0 0x0 0xffff978000010000 0041 00000000 0x0 0x0 0xffff978000010080 0045 00000000 0x0 0x0 0xffff978000010100 0045 00000000 0x0 0x0 0xffff978000010180 0041 00000000 0x0 0x0 0xffff978000010200 0045 00000000 0x0 0x0 0xffff978000010280 0041 00000000 0x0 0x0 0xffff978000010300 0041 00000000 0x0 0x0 0xffff978000010380 0041 00000000 0x0 0x0 0xffff978000010400 0041 00000000 0x0 0x0 0xffff978000010480 0041 00000000 0x0 0x0 0xffff978000010500 0041 00000000 0x0 0x0 0xffff978000010580 0041 00000000 0x0 0x0 0xffff978000010600 0041 00000000 0x0 0x0 0xffff978000010680 0041 00000000 0x0 0x0 0xffff978000010700 0041 00000000 0x0 0x0 0xffff978000010780 0041 00000000 0x0 0x0 0xffff978000010800 0041 00000000 0x0 0x0 0xffff978000010880 0041 00000000 0x0 0x0 0xffff978000010900 0045 00000000 0x0 0x0 0xffff978000010980 0045 00000000 0x0 0x0 0xffff978000010a00 0045 00000000 0x0 0x0 0xffff978000010a80 0045 00000000 0x0 0x0 0xffff978000010b00 0045 00000000 0x0 0x0 0xffff978000010b80 0041 00000000 0x0 0x0 0xffff978000010c00 0041 00000000 0x0 0x0 0xffff978000010c80 0041 000000