Warning: Permanently added '10.128.10.22' (ECDSA) to the list of known hosts. 2020/10/03 20:40:37 fuzzer started 2020/10/03 20:40:37 dialing manager at 10.128.0.105:43593 2020/10/03 20:40:38 syscalls: 306 2020/10/03 20:40:38 code coverage: enabled 2020/10/03 20:40:38 comparison tracing: enabled 2020/10/03 20:40:38 extra coverage: enabled 2020/10/03 20:40:38 setuid sandbox: support is not implemented in syzkaller 2020/10/03 20:40:38 namespace sandbox: support is not implemented in syzkaller 2020/10/03 20:40:38 Android sandbox: support is not implemented in syzkaller 2020/10/03 20:40:38 fault injection: enabled 2020/10/03 20:40:38 leak checking: support is not implemented in syzkaller 2020/10/03 20:40:38 net packet injection: support is not implemented in syzkaller 2020/10/03 20:40:38 net device setup: support is not implemented in syzkaller 2020/10/03 20:40:38 concurrency sanitizer: support is not implemented in syzkaller 2020/10/03 20:40:38 devlink PCI setup: support is not implemented in syzkaller 2020/10/03 20:40:38 USB emulation: enabled 2020/10/03 20:40:38 hci packet injection: support is not implemented in syzkaller 2020/10/03 20:40:38 wifi device emulation: support is not implemented in syzkaller 20:41:00 executing program 0: socket(0xf, 0x0, 0x0) 20:41:01 executing program 1: msgsnd(0x0, &(0x7f0000000280)={0x3}, 0x8, 0x800) 20:41:01 executing program 2: sendmmsg(0xffffffffffffffff, &(0x7f00000084c0), 0x1, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000000c0)='/', r0, &(0x7f0000d06ff8)='./file0\x00') readlinkat(r0, &(0x7f00000032c0)='./file0\x00', &(0x7f0000008680)=""/197, 0xc5) 20:41:01 executing program 3: msgsnd(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) 20:41:01 executing program 4: syz_emit_ethernet(0x3b, &(0x7f0000000140)) 20:41:01 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x0}, 0x10) recvmsg(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xb01001f1}, 0x60) 20:41:14 executing program 1: mknod(&(0x7f0000000180)='./file0/file0\x00', 0x0, 0xffffffffffffffff) 20:41:15 executing program 0: compat_50_getitimer(0x0, &(0x7f0000000540)) 20:41:15 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/', 0x0, 0x0) fchdir(r0) r1 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000000)='.\x00', 0x0) 20:41:15 executing program 1: setrlimit(0x8, &(0x7f0000000040)={0x4, 0xfffffffffffffffd}) pipe2(0x0, 0x0) 20:41:16 executing program 0: r0 = socket(0x10000000002, 0x2, 0x0) shutdown(r0, 0x2) 20:41:17 executing program 1: open$dir(&(0x7f0000000000)='./file0\x00', 0x2088611, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x28a01, 0x0) 20:41:17 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000100)='./file0\x00', 0x0) rmdir(&(0x7f0000000000)='./file0\x00') 20:41:17 executing program 0: r0 = socket(0x1f, 0x3, 0x0) sendmmsg(r0, &(0x7f0000000100)={&(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x7}, 0x10, 0x9, 0x0) 20:41:17 executing program 2: r0 = socket(0x1f, 0x3, 0x0) ioctl$FIOGETBMAP(r0, 0xc004730a, &(0x7f0000000140)) 20:41:17 executing program 3: r0 = open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0xfffffffffffffffd) writev(r0, &(0x7f0000000640)=[{&(0x7f0000000140)='#!', 0x2}], 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000040)="1c", 0x1}], 0x1) write(r1, &(0x7f0000000280)="20d3cf596a0a", 0x6) execve(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) 20:41:17 executing program 4: open$dir(&(0x7f00000002c0)='./file0\x00', 0x2088611, 0x0) acct(&(0x7f0000000380)='./file0\x00') r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x2088611, 0x0) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000000), 0x2cfea}], 0x1000000000000013) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x10, 0xffffffffffffffff, 0x0, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x80400000000206, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x20011, r1, 0x0, 0x0) mmap(&(0x7f0000048000/0x4000)=nil, 0x4000, 0x0, 0x10, r1, 0x0, 0x4) open(0x0, 0x0, 0x0) mmap(&(0x7f0000013000/0x4000)=nil, 0x4000, 0x3, 0x10, 0xffffffffffffffff, 0x0, 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) preadv(r2, &(0x7f0000001740)=[{&(0x7f0000000740)=""/4096, 0x400003}], 0x1, 0x0) 20:41:17 executing program 5: setrlimit(0xa, &(0x7f0000000040)) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x1810, 0xffffffffffffffff, 0x0, 0x0) 20:41:17 executing program 1: r0 = __clone(0x0, 0x0) r1 = __clone(0x0, 0x0) setpgid(r1, r0) 20:41:18 executing program 0: pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) __fstat50(r0, &(0x7f0000000100)) 20:41:18 executing program 2: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = _lwp_self() _lwp_setname(r0, &(0x7f00000000c0)='$\x00') 20:41:18 executing program 5: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) compat_50_nanosleep(&(0x7f0000000040), 0x0) 20:41:18 executing program 5: r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f00000000c0)={0x3}, 0x8, 0x0) msgrcv(r0, 0x0, 0x0, 0x3, 0x0) 20:41:18 executing program 1: compat_43_oaccept(0xffffffffffffffff, 0x0, &(0x7f0000000100)) compat_50_clock_getres(0x0, &(0x7f0000000740)) 20:41:18 executing program 3: __clone(0x0, 0x0) __wait450(0x0, 0x0, 0x20009, 0x0) 20:41:18 executing program 4: open$dir(&(0x7f00000002c0)='./file0\x00', 0x2088611, 0x0) acct(&(0x7f0000000380)='./file0\x00') r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x2088611, 0x0) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000000), 0x2cfea}], 0x1000000000000013) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x10, 0xffffffffffffffff, 0x0, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x80400000000206, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x20011, r1, 0x0, 0x0) mmap(&(0x7f0000048000/0x4000)=nil, 0x4000, 0x0, 0x10, r1, 0x0, 0x4) open(0x0, 0x0, 0x0) mmap(&(0x7f0000013000/0x4000)=nil, 0x4000, 0x3, 0x10, 0xffffffffffffffff, 0x0, 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) preadv(r2, &(0x7f0000001740)=[{&(0x7f0000000740)=""/4096, 0x400003}], 0x1, 0x0) 20:41:19 executing program 1: open$dir(&(0x7f00000002c0)='./file0\x00', 0x2088611, 0x0) acct(&(0x7f0000000380)='./file0\x00') r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x2088611, 0x0) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000000), 0x2cfea}], 0x1000000000000013) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x10, 0xffffffffffffffff, 0x0, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x80400000000206, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x20011, r1, 0x0, 0x0) mmap(&(0x7f0000048000/0x4000)=nil, 0x4000, 0x0, 0x10, r1, 0x0, 0x4) open(0x0, 0x0, 0x0) mmap(&(0x7f0000013000/0x4000)=nil, 0x4000, 0x3, 0x10, 0xffffffffffffffff, 0x0, 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) preadv(r2, &(0x7f0000001740)=[{&(0x7f0000000740)=""/4096, 0x400003}], 0x1, 0x0) 20:41:19 executing program 3: open(&(0x7f00000000c0)='./file0\x00', 0x80000000000209, 0x0) r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = open$dir(&(0x7f0000000140)='./file0\x00', 0x102, 0x0) writev(r1, &(0x7f0000000340)=[{&(0x7f0000000180), 0x81700}], 0x1000000000000013) preadv(r0, &(0x7f0000001780)=[{&(0x7f0000000180)=""/184, 0x1b133353141e377d}], 0x10000000000000d1, 0x0) 20:41:19 executing program 0: r0 = socket$inet6(0x18, 0x2, 0x0) r1 = socket(0x18, 0x1, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000040)="e89c", 0x2}], 0x1, 0x0, 0x120}, 0x0) setsockopt(r1, 0x29, 0x32, 0x0, 0x0) dup2(r1, r0) getsockopt(r0, 0x29, 0x20800000032, 0x0, 0x0) 20:41:19 executing program 2: r0 = socket(0x18, 0x1, 0x0) compat_43_ogetpeername(r0, 0x0, 0x0) 20:41:19 executing program 5: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) 20:41:19 executing program 0: linkat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0) 20:41:20 executing program 4: open$dir(&(0x7f00000002c0)='./file0\x00', 0x2088611, 0x0) acct(&(0x7f0000000380)='./file0\x00') r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x2088611, 0x0) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000000), 0x2cfea}], 0x1000000000000013) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x10, 0xffffffffffffffff, 0x0, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x80400000000206, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x20011, r1, 0x0, 0x0) mmap(&(0x7f0000048000/0x4000)=nil, 0x4000, 0x0, 0x10, r1, 0x0, 0x4) open(0x0, 0x0, 0x0) mmap(&(0x7f0000013000/0x4000)=nil, 0x4000, 0x3, 0x10, 0xffffffffffffffff, 0x0, 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) preadv(r2, &(0x7f0000001740)=[{&(0x7f0000000740)=""/4096, 0x400003}], 0x1, 0x0) 20:41:20 executing program 2: shmat(0xffffffffffffffff, &(0x7f0000ffb000/0x3000)=nil, 0x0) 20:41:20 executing program 5: r0 = open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x0) pwritev(r0, &(0x7f00000003c0)=[{&(0x7f0000000740)="90c3fe67eb586898600425f2f573e0d1ac83c18d65c8e22066c0d389fe894a974c8d45aaf9846f9b3aec3213d2a6ac68a0b0632688ca0fab3647175abf22fea120c9b3bb77ca60c128295bf234505356095dbf9e50a4a5079723b57fed8ef0a251b91e67e1f5d347d5b668a390a25beea3962e7c10b8d9f53f5c82b5eacc26757d14f2fa6be9a2cbb2cfacc5e906dfd1e3208364bb049bd84682cec454327b6a1522c332ea628b0cb672e9e7247818f900e017c7cb9303e6b505059f34d3fb9df3993b7535fa269859e24b2802782224d7d5c13c21d4eee4f8621037c3d78695ad9a278978b26c46049befba997acb9ac407791cdf6046f9f71e36d09827a4493c17a0921dc38af76420c885862413c6ed4f7fe335a5547ee2d7c65d735b189214606da83f9be40faef7438cbfe1ed0439c45506672cda99d1c3471259d08198e13683ef6b08d5c54bfb991dcca6919362e1a0b65844e9194c2d7fd257281fbcae0694eb4c1e7121b6a2c19d7c82054126e2146349c1c8489aada96f3a8400c78d1da37d5228e5aa36b139a8d5957e8209712744b813", 0x196}], 0x1, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000200)="0ec465cdab1ab6925cb81235dbb17399c070dde203e502106f690d9947364fe3569560e73bfa9012263c0ef6eb626ad79d51e7b4607879072ca33809a85443bef8e011b3e2e63de6f9637ca6e422106a6a1762b67f560814eef6dcb3f39a2e51600251fbad1ee82088a75ca376da066e763d4d967ce8aadb3c3fd7f9ae4f4c83b220d59b80283161ec55078a180c86454a6af889e6877abb5119218026dd409b65c450ff09e8a2b84a3bc3e8ffeceb6761b349d9d7512b3b4bcbcf5ceb029b7740fbb949d4dd", 0xc6}], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x10, r0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x0) open$dir(&(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x400000002c4, 0x0) rmdir(&(0x7f0000000080)='./file1\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r1 = open(&(0x7f0000000300)='./file0/file1\x00', 0x8, 0x101) recvfrom$inet(r1, &(0x7f0000000400)=""/222, 0xde, 0x2, &(0x7f0000000380)={0x2, 0x2}, 0xc) open(&(0x7f0000000040)='./file0\x00', 0x60e, 0x80) open$dir(&(0x7f0000000040)='./file0\x00', 0x400000002c5, 0x0) r2 = msgget$private(0x0, 0x10) msgctl$IPC_SET(r2, 0x1, &(0x7f0000000180)={{0x600, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x182, 0x80}, 0x1, 0x3, 0x0, 0x0, 0x5, 0x4, 0x9, 0x1}) 20:41:20 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) r1 = dup(r0) __fstat50(r1, &(0x7f0000000000)) 20:41:20 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000000)="f13a3c20bfd86c6f3050c37c7fee55ed541e6f25846efc8723cc8de29cf48441a5d6450567d390b37fae76f4536cb7", 0x2f) write(r1, 0x0, 0x0) sendto$unix(r1, 0x0, 0x0, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000280)=""/47, 0x2f}], 0x1, 0x0, 0x0, 0x9}, 0x40) 20:41:20 executing program 1: r0 = socket(0x2, 0x3, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0}, 0x10) 20:41:21 executing program 0: r0 = socket(0x18, 0x2, 0x0) connect$unix(r0, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0x18, 0x2}, 0xc) 20:41:21 executing program 2: compat_50_clock_getres(0x20000000, 0x0) login: [ 134.8920661] WARNING: defaulted mmap() share type to MAP_PRIVATE (pid 1454 command syz-executor.5) 20:41:21 executing program 4: open$dir(&(0x7f00000002c0)='./file0\x00', 0x2088611, 0x0) acct(&(0x7f0000000380)='./file0\x00') r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x2088611, 0x0) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000000), 0x2cfea}], 0x1000000000000013) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x10, 0xffffffffffffffff, 0x0, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x80400000000206, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x20011, r1, 0x0, 0x0) mmap(&(0x7f0000048000/0x4000)=nil, 0x4000, 0x0, 0x10, r1, 0x0, 0x4) open(0x0, 0x0, 0x0) mmap(&(0x7f0000013000/0x4000)=nil, 0x4000, 0x3, 0x10, 0xffffffffffffffff, 0x0, 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) preadv(r2, &(0x7f0000001740)=[{&(0x7f0000000740)=""/4096, 0x400003}], 0x1, 0x0) 20:41:21 executing program 3: _lwp_unpark_all(&(0x7f0000000000), 0x15c, 0x0) compat_50_getrusage(0x0, &(0x7f0000000000)) 20:41:21 executing program 1: connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x18, 0x1, 0x0) close(r0) r1 = socket(0x18, 0x2, 0x0) socket(0x0, 0x0, 0x0) setsockopt(r1, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) connect$unix(r0, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) 20:41:21 executing program 0: r0 = open(&(0x7f0000000480)='./file0\x00', 0x80400000000206, 0x0) mlockall(0x2) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x101, 0x0) r2 = open$dir(&(0x7f0000000000)='./file0\x00', 0x40000400000002c2, 0x0) pwritev(r2, &(0x7f0000000080)=[{&(0x7f00000006c0), 0x100000}], 0x1, 0x0) writev(r1, &(0x7f0000000340)=[{&(0x7f0000000180), 0x81700}], 0x1000000000000013) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x20011, r0, 0x0, 0x0) 20:41:21 executing program 2: open(&(0x7f0000000200)='./file1\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) symlink(&(0x7f000000bffa)='./control\x00', &(0x7f0000000200)='./control\x00') 20:41:21 executing program 5: __clone(0x0, &(0x7f0000000540)="48e202256ec2f588568557c8a270b476d271c4c2c7c75309f1792883df92a2b09c259b233067f134e1a306ec0f752e0cd0d87d2ef12c75bd7a1df29451e99c70092d876cd746da4bc04cb264a4aa5563f63f8ecad6b03704b3ee2b8a346216a62694a24068620cbfd5d318c3c5591df2897b4d00a633fa4468c636ecfd6dba4d0128b493d5149a52ffd6ced370b6eef96926603f0be7490c68e3e8d47f7f14dee5c88c030d11fae0") [ 135.5920190] WARNING: defaulted mmap() share type to MAP_PRIVATE (pid 1454 command syz-executor.5) 20:41:22 executing program 4: r0 = open$dir(&(0x7f0000001240)='./file0\x00', 0x40000400000002c2, 0x0) r1 = open$dir(&(0x7f0000001240)='./file0\x00', 0x40000400000002c2, 0x0) ftruncate(r1, 0x0, 0x20002000008) r2 = open(&(0x7f0000001640)='./file0\x00', 0x0, 0x0) fchmod(r2, 0x400) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x810, r2, 0x0, 0x0) compat_43_oftruncate(r0, 0x10000) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000000)="b9", 0x1}], 0x1) 20:41:22 executing program 5: __clone(0x0, 0x0) 20:41:22 executing program 3: mknod(&(0x7f0000000040)='./bus\x00', 0x2005, 0x8000000000005200) open$dir(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) 20:41:22 executing program 2: open(&(0x7f00000000c0)='./file0\x00', 0x80000000000206, 0x0) r0 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x10, r0, 0x0, 0x0) open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) mlock(&(0x7f0000119000/0x3000)=nil, 0x3000) [ 136.4820135] WARNING: defaulted mmap() share type to MAP_PRIVATE (pid 1600 command syz-executor.4) 20:41:22 executing program 1: r0 = socket(0x18, 0x1, 0x0) compat_43_orecvfrom(r0, 0x0, 0x0, 0x21, 0x0, 0x0) 20:41:23 executing program 3: unlinkat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x0) 20:41:23 executing program 4: r0 = socket(0x18, 0x3, 0xb6) setsockopt(r0, 0x29, 0x17, &(0x7f00000000c0), 0x4) [ 137.0120277] WARNING: defaulted mmap() share type to MAP_PRIVATE (pid 1600 command syz-executor.4) 20:41:23 executing program 5: r0 = socket$inet(0x2, 0x840000000003, 0x0) getsockopt$inet_opts(r0, 0x0, 0x9, 0x0, 0x0) 20:41:23 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000026ff8)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000002700)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000100)=""/66, 0x42}], 0x1, 0x0}, 0x840) write(r1, &(0x7f0000000000)="87", 0x1) close(r1) [ 137.2620115] WARNING: defaulted mmap() share type to MAP_PRIVATE (pid 1762 command syz-executor.2) [ 137.3120167] WARNING: defaulted mmap() share type to MAP_PRIVATE (pid 1762 command syz-executor.2) 20:41:24 executing program 0: r0 = open(&(0x7f0000000480)='./file0\x00', 0x80400000000206, 0x0) mlockall(0x2) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x101, 0x0) r2 = open$dir(&(0x7f0000000000)='./file0\x00', 0x40000400000002c2, 0x0) pwritev(r2, &(0x7f0000000080)=[{&(0x7f00000006c0), 0x100000}], 0x1, 0x0) writev(r1, &(0x7f0000000340)=[{&(0x7f0000000180), 0x81700}], 0x1000000000000013) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x20011, r0, 0x0, 0x0) 20:41:24 executing program 3: open$dir(&(0x7f00000002c0)='./file0\x00', 0x2088611, 0x0) r0 = open$dir(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ioctl$OFIOGETBMAP(r0, 0xc004667a, &(0x7f00000000c0)) 20:41:24 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) recvfrom$unix(r0, 0x0, 0x0, 0x4059, 0x0, 0x0) 20:41:24 executing program 5: symlinkat(&(0x7f00000000c0)='/', 0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00') rmdir(&(0x7f0000000100)='./file0/file0\x00') r0 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000003c0)='./file0/file0\x00', 0x0) 20:41:24 executing program 2: bind$unix(0xffffffffffffffff, &(0x7f0000005ec0)=@file={0x0, './file0\x00'}, 0xa) 20:41:24 executing program 4: clock_nanosleep(0x40000003, 0x0, &(0x7f0000000000), &(0x7f0000000040)) 20:41:24 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000000c0)='/', r0, &(0x7f0000d06ff8)='./file0\x00') rename(&(0x7f0000001100)='./file0\x00', &(0x7f0000001140)='./file0/file0\x00') 20:41:24 executing program 3: r0 = socket(0x2, 0x2, 0x0) listen(r0, 0x0) 20:41:25 executing program 1: sync() openat(0xffffffffffffffff, 0x0, 0x0, 0x0) mknodat(0xffffffffffffffff, 0x0, 0x0, 0x0) 20:41:25 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)=""/135, 0x87}], 0x1f8, 0x0, 0x46}, 0x0) writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)="fe", 0x2cc}], 0x1) 20:41:25 executing program 5: setrlimit(0x8, &(0x7f0000000040)={0x4, 0x100}) socketpair$unix(0x1, 0x1, 0x0, 0x0) 20:41:25 executing program 3: compat_50_mknod(&(0x7f0000000080)='./file0\x00', 0x2000, 0x51c3) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x200000, 0x7) r2 = dup(r0) symlinkat(&(0x7f00000001c0)='./file1\x00', r2, &(0x7f0000000200)='./file0\x00') unlinkat(r0, &(0x7f0000000180)='./file1\x00', 0x800) rename(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00') r3 = openat(0xffffffffffffffff, &(0x7f0000000080)='/', 0x0, 0x0) openat(r3, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) rename(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='./file0\x00') linkat(r1, &(0x7f0000000340)='./file0\x00', r3, &(0x7f0000000380)='./file0\x00', 0x0) 20:41:26 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x18, 0x3, 0x0) connect$unix(r1, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) fcntl$dupfd(r0, 0xa, 0xffffffffffffffff) 20:41:26 executing program 4: getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x11, 0x0, 0x0) seteuid(0x0) socket$inet6(0x18, 0x0, 0x0) getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x11, 0x0, 0x0) fchflags(0xffffffffffffffff, 0x0) compat_30_getdents(0xffffffffffffff9c, 0x0, 0x0) __clone(0x200, &(0x7f00000003c0)="82300baa5c58b627") 20:41:26 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) __mount50(&(0x7f0000000080)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) 20:41:26 executing program 3: semop(0x0, 0x0, 0x0) mlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) __clone(0x0, 0x0) __nanosleep50(0x0, 0x0) r0 = __clone(0x0, 0x0) ptrace(0x9, r0, 0x0, 0x0) ptrace(0x8, r0, 0x0, 0x0) ptrace(0xc0000000008, r0, 0x0, 0x0) ptrace(0x4, 0x0, 0x0, 0x104) 20:41:26 executing program 5: r0 = socket(0x18, 0x50000003, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0xfffffffffffffffe}) connect$unix(r0, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) 20:41:27 executing program 4: r0 = open$dir(&(0x7f0000000900)='./file0\x00', 0x40000400000002c2, 0x0) seteuid(0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0, 0xf2bf) truncate(&(0x7f0000000000)='./file0\x00', 0x0, 0xe19c) ftruncate(r0, 0x0, 0x2eead) 20:41:27 executing program 1: shmctl$SHM_LOCK(0x0, 0x3) 20:41:27 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) r0 = open$dir(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchownat(r0, &(0x7f0000000000)='.\x00', 0xffffffffffffffff, 0x0, 0x0) 20:41:27 executing program 2: syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000bc0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x5753, 0x0, 0x1, {0x22, 0xf25}}, {{}, [{{0x9, 0x5, 0x2, 0x3, 0x0, 0x2, 0x6}}]}}}]}}]}}, 0x0) 20:41:27 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x18, 0x3, 0x0) connect$unix(r1, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) fcntl$dupfd(r0, 0xa, 0xffffffffffffffff) 20:41:28 executing program 1: sync() sync() 20:41:28 executing program 5: readlinkat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) 20:41:28 executing program 3: syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="1001"], 0x0) 20:41:28 executing program 4: mknod(&(0x7f0000000080)='./file0\x00', 0x205e, 0x200) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0, 0x0) __clone(0x0, 0x0) [ 143.1820457] WARNING: defaulted mmap() share type to MAP_SHARED (pid 2112 command syz-executor.4) [ 143.2620151] WARNING: defaulted mmap() share type to MAP_SHARED (pid 2112 command syz-executor.4) 20:41:29 executing program 4: _ksem_timedwait(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./file0\x00', 0x0) [ 143.6620437] uhub2: device problem, disabling port 1 20:41:30 executing program 5: setsockopt$sock_int(0xffffffffffffffff, 0xffff, 0x0, &(0x7f0000000040)=0xb1, 0x4) r0 = msgget$private(0x0, 0x0) msgrcv(r0, &(0x7f00000013c0)={0x0, ""/4111}, 0x106e, 0x0, 0x0) msgsnd(r0, &(0x7f0000000040)=ANY=[], 0x0, 0x0) 20:41:30 executing program 0: r0 = __clone(0x0, 0x0) setreuid(0xee00, 0x0) ptrace(0x9, r0, 0x0, 0x0) r1 = socket(0x2, 0x0, 0x0) listen(r1, 0x1) __fstat50(r1, 0x0) __clone(0x0, 0x0) getppid() [ 144.2720244] uhub3: device problem, disabling port 1 20:41:30 executing program 1: sync() sync() 20:41:30 executing program 4: acct(&(0x7f0000000280)='./file0\x00') 20:41:30 executing program 5: open$dir(&(0x7f0000000080)='./file0\x00', 0x400000002c2, 0x0) rename(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='.\x00') 20:41:31 executing program 2: fstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8000, 0xfff) r0 = msgget(0x1, 0x40) msgctl$IPC_RMID(r0, 0x0) getgroups(0x0, 0x0) 20:41:31 executing program 5: r0 = open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x0) pwritev(r0, &(0x7f00000003c0)=[{&(0x7f0000000740)="90c3fe67eb586898600425f2f573e0d1ac83c18d65c8e22066c0d389fe894a974c8d45aaf9846f9b3aec3213d2a6ac68a0b0632688ca0fab3647175abf22fea120c9b3bb77ca60c128295bf234505356095dbf9e50a4a5079723b57fed8ef0a251b91e67e1f5d347d5b668a390a25beea3962e7c10b8d9f53f5c82b5eacc26757d14f2fa6be9a2cbb2cfacc5e906dfd1e3208364bb049bd84682cec454327b6a1522c332ea628b0cb672e9e7247818f900e017c7cb9303e6b505059f34d3fb9df3993b7535fa269859e24b2802782224d7d5c13c21d4eee4f8621037c3d78695ad9a278978b26c46049befba997acb9ac407791cdf6046f9f71e36d09827a4493c17a0921dc38af76420c885862413c6ed4f7fe335a5547ee2d7c65d735b189214606da83f9be40faef7438cbfe1ed0439c45506672cda99d1c3471259d08198e13683ef6b08d5c54bfb991dcca6919362e1a0b65844e9194c2d7fd257281fbcae0694eb4c1e7121b6a2c19d7c82054126e2146349c1c8489aada96f3a8400c78d1da37d5228e5aa36b139a8d5957e8209712744b81352d093315d238f5a0c3cb694e5bd546af01421ace28b2e266c33488bccf4815baf3226156e050704a0b7fe058bf69a49e52ac968a0", 0x1cb}], 0x1, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000004c0)="0ec465cdab1ab6925cb81235dbb17399c070dde203e502106f690d9947364fe3569560e73bfa9012263c0ef6eb626ad79d51e7b4607879072ca33809a85443bef8e011b3e2e63de6f9637ca6e422106a6a1762b67f560814eef6dcb3f39a2e51600251fbad1ee82088a75ca3764729af3f3d4d967ce8aadb3c3fd7f9ae4f4c83b2", 0x35a}], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x10, r0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) rmdir(&(0x7f0000000080)='./file1\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) 20:41:31 executing program 4: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) rename(&(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='..') pipe(&(0x7f0000000280)) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000002000/0x3000)=nil) shmat(r0, &(0x7f0000000000/0x2000)=nil, 0x0) __clone(0x0, 0x0) [ 145.8620546] WARNING: defaulted mmap() share type to MAP_PRIVATE (pid 2209 command syz-executor.5) 20:41:32 executing program 3: r0 = socket(0x40000000011, 0x3, 0x0) getsockopt$inet_opts(r0, 0x0, 0x0, 0x0, 0x0) 20:41:32 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) __mount50(&(0x7f0000000080)='mfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) [ 146.0720605] WARNING: defaulted mmap() share type to MAP_PRIVATE (pid 2209 command syz-executor.5) 20:41:32 executing program 0: setreuid(0x0, 0xee01) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="2000000000ebff0000000000000000000000095b9d071b542ad387050000e2b8180000002900000031"], 0x38}, 0x0) r0 = socket(0x18, 0x2, 0x0) connect$unix(r0, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) 20:41:32 executing program 2: r0 = socket$inet6(0x18, 0x3, 0x0) shutdown(r0, 0x1) 20:41:32 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) shutdown(r1, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="28000000ffff000001"], 0x9}, 0x0) sendmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x28}, 0x0) 20:41:33 executing program 1: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) _lwp_setname(0xffffffffffffffff, &(0x7f0000000000)='\x15%\x00') 20:41:33 executing program 3: r0 = _lwp_self() _lwp_setname(r0, &(0x7f0000000280)=':+L/@\x00') 20:41:33 executing program 4: fchflags(0xffffffffffffffff, 0x0) 20:41:33 executing program 0: r0 = socket$inet(0x2, 0x3, 0x0) setsockopt$inet_opts(r0, 0x0, 0x2, 0x0, 0x0) 20:41:33 executing program 2: open$dir(&(0x7f0000000000)='./file0\x00', 0x2088611, 0x0) write(0xffffffffffffffff, 0x0, 0x0) socket$unix(0x1, 0x0, 0x0) access(&(0x7f0000000040)='./file0\x00', 0x4) 20:41:33 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) __mount50(&(0x7f0000000080)='mfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) 20:41:33 executing program 4: r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x40000400000002c2, 0x85) truncate(&(0x7f0000000140)='./file0\x00', 0x0, 0xffffffff) ftruncate(r0, 0x0, 0x400000000f) [ 147.4220157] uhub2: device problem, disabling port 1 20:41:33 executing program 1: compat_50_mknod(&(0x7f0000000080)='./file0\x00', 0x6131, 0x0) acct(&(0x7f0000000040)='./file0\x00') 20:41:33 executing program 5: r0 = open$dir(&(0x7f0000000540)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000580)='./file0\x00', 0x0) 20:41:33 executing program 3: chown(0x0, 0x0, 0xffffffffffffffff) 20:41:34 executing program 4: r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000000000), 0x2000, 0x0) 20:41:34 executing program 0: open(0x0, 0x0, 0x0) fork() ioctl$OFIOGETBMAP(0xffffffffffffffff, 0xc004667a, 0x0) 20:41:34 executing program 2: open$dir(&(0x7f0000000000)='./file0\x00', 0x2088611, 0x0) write(0xffffffffffffffff, 0x0, 0x0) socket$unix(0x1, 0x0, 0x0) access(&(0x7f0000000040)='./file0\x00', 0x4) 20:41:34 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = socket(0x2, 0x2, 0x0) dup2(r1, r0) 20:41:34 executing program 5: open$dir(&(0x7f0000000240)='./file0\x00', 0x200, 0x0) truncate(&(0x7f0000000000)='./file0\x00', 0x0, 0x10020008001) truncate(&(0x7f00000000c0)='./file0\x00', 0x0, 0x100208000) 20:41:34 executing program 2: open$dir(&(0x7f0000000000)='./file0\x00', 0x2088611, 0x0) lchmod(&(0x7f0000000240)='./file0\x00', 0x0) [ 148.4520141] uhub3: device problem, disabling port 1 20:41:34 executing program 1: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000740)=@abs={0x1, 0x5c}, 0x6e) 20:41:34 executing program 4: socket$unix(0x1, 0x1, 0x0) 20:41:34 executing program 3: compat_50_select(0x40, &(0x7f0000000200), &(0x7f0000000240)={0x3}, 0x0, 0x0) 20:41:35 executing program 0: mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1000, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x4, 0x0) r1 = socket(0x2, 0x1, 0x0) dup2(r1, r0) 20:41:35 executing program 0: msgrcv(0x0, 0x0, 0x4, 0x0, 0x0) r0 = msgget(0x1, 0x0) msgctl$IPC_RMID(r0, 0x0) msgsnd(r0, &(0x7f0000000000)={0x1, "9688a620e7131e6e6733bb1d21cdc68ccd61882daed2c361526f01f9b495edeb60a017ca8a3f9d2f0e933be5f2d9f331a703baf7eb63542935472879dab7f2aaedf0abef02db3c99bedf469dbae5336137a6a6021078de76ff05712ac5416d7e6a626e8a9c17f79c067876f4611f212b4df6b7f3d0629ce368a1722f466919bb49e6db8cfff00ca74a0de14ef06fc42309085cbf04f20fc1fd1d7930664a9e2c65a3926ddf101f79f8bc89a71428b30316c65e020b5388abaafe4a8350e838a5cfcb14ba735215e050fe47f61dab7f85ad50dca4c52c3d48"}, 0xe0, 0x0) socket(0x3f, 0x1, 0x0) 20:41:35 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x200000000000d, &(0x7f0000000140)="eaff125c00000000", 0x8) 20:41:35 executing program 1: acct(0x0) _lwp_setname(0x0, &(0x7f0000000380)='\x00') madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0) 20:41:35 executing program 2: open$dir(&(0x7f0000000000)='./file0\x00', 0x2088611, 0x0) lchmod(&(0x7f0000000240)='./file0\x00', 0x0) 20:41:35 executing program 3: setuid(0xee01) setpriority(0x2, 0x0, 0x0) 20:41:35 executing program 5: compat_43_osetrlimit(0x7, &(0x7f0000000040)={0x7ff, 0x10001}) 20:41:36 executing program 5: mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x1010, 0xffffffffffffffff, 0x0, 0x0) posix_spawn(0x0, 0x0, &(0x7f0000000340)={0x0, 0x0, 0x0}, &(0x7f0000000380), 0x0, 0x0) 20:41:36 executing program 1: open$dir(&(0x7f0000000080)='./file0\x00', 0x200, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x0, 0x100000100005) madvise(&(0x7f0000118000/0x1000)=nil, 0x1000, 0x0) writev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000180), 0x81700}], 0x1000000000000013) r0 = open$dir(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000000), 0x10000000000003c2, 0x0) 20:41:36 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvfrom$unix(r0, &(0x7f00000000c0), 0x832f1f7d, 0x0, &(0x7f0000000000)=@abs, 0x20000000) shutdown(r0, 0x0) 20:41:36 executing program 3: setuid(0xee01) setrlimit(0x7, &(0x7f0000000040)={0x0, 0xceb0}) 20:41:36 executing program 0: ptrace(0x100, 0xffffffffffffffff, 0x0, 0x0) 20:41:36 executing program 2: mknod(&(0x7f0000000080)='./file0\x00', 0x205e, 0x200) r0 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x0) fcntl$getown(r0, 0x5) 20:41:36 executing program 0: __msync13(&(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) 20:41:36 executing program 4: r0 = compat_30_socket(0x6, 0x0, 0x0) fcntl$setown(r0, 0x6, 0xffffffffffffffff) compat_50_getrusage(0x0, &(0x7f0000001640)) 20:41:36 executing program 2: r0 = open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x0) pwritev(r0, &(0x7f00000003c0)=[{&(0x7f0000000740)="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", 0x1cb}], 0x1, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000004c0)="0ec465cdab1ab6925cb81235dbb17399c070dde203e502106f690d9947364fe3569560e73bfa9012263c0ef6eb626ad79d51e7b4607879072ca33809a85443bef8e011b3e2e63de6f9637ca6e422106a6a1762b67f560814eef6dcb3f39a2e51600251fbad1ee82088a75ca3764729af3f3d4d967ce8aadb3c3fd7f9ae4f4c83b2", 0x35a}], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x10, r0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x0) rmdir(&(0x7f0000000080)='./file1\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0) 20:41:37 executing program 5: munmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000) r0 = shmget$private(0x0, 0x2000, 0x281, &(0x7f0000ef1000/0x2000)=nil) r1 = shmat(r0, &(0x7f0000ffa000/0x3000)=nil, 0x0) socket$inet6(0x18, 0x0, 0x81) shmat(r0, &(0x7f0000ef2000/0x3000)=nil, 0x2000) shmdt(0x0) compat_50_getitimer(0x1, &(0x7f00000000c0)) semget$private(0x0, 0x8, 0x0) shmget$private(0x0, 0x4000, 0x43e, &(0x7f0000ffc000/0x4000)=nil) r2 = __clone(0x0, 0x0) ptrace(0x9, r2, 0x0, 0x0) compat_50_wait4(r2, &(0x7f0000000100), 0x10, &(0x7f0000000240)) r3 = __clone(0x0, 0x0) ptrace(0x9, r3, 0x0, 0x0) shmdt(r1) 20:41:37 executing program 3: r0 = __clone(0x0, 0x0) fork() ptrace(0x9, r0, 0x0, 0x0) setpgid(r0, 0x0) compat_50_wait4(0x0, 0x0, 0x0, 0x0) [ 151.0820079] WARNING: defaulted mmap() share type to MAP_PRIVATE (pid 2402 command syz-executor.2) 20:41:37 executing program 0: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil) munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) shmat(r0, &(0x7f0000ffc000/0x1000)=nil, 0x0) munmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000) r1 = shmget$private(0x0, 0x1000, 0x500, &(0x7f0000ffc000/0x1000)=nil) r2 = shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x3000) shmdt(r2) shmdt(r2) 20:41:37 executing program 4: __getcwd(&(0x7f00000320c0)=""/102397, 0x19033) munlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) 20:41:37 executing program 1: socketpair$unix(0x1, 0x200000000000002, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000002d00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002c40)=ANY=[@ANYBLOB="10000000ffff000001"], 0x10}, 0x0) recvmsg(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=""/9, 0x9}, 0x0) 20:41:37 executing program 2: r0 = msgget$private(0x0, 0x0) msgrcv(r0, 0x0, 0x1017, 0x0, 0x0) msgctl$IPC_RMID(r0, 0x0) [ 151.6320096] WARNING: defaulted mmap() share type to MAP_PRIVATE (pid 2402 command syz-executor.2) 20:41:38 executing program 0: open$dir(&(0x7f0000000000)='./file0\x00', 0x40, 0x40) setreuid(0xee00, 0x0) r0 = getuid() r1 = getuid() r2 = open$dir(&(0x7f0000000340)='./file0\x00', 0x80, 0x120) fchown(r2, r1, 0x0) setreuid(0x0, r1) setreuid(r0, r1) setreuid(0xee00, r0) munlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) r3 = semget$private(0x0, 0x1, 0x25e) semctl$IPC_SET(r3, 0x0, 0x1, &(0x7f00000003c0)={{0x20040004, 0x0, 0x0, r1, 0x0, 0xb3, 0x9}, 0x100000000004, 0x703, 0x8000000000000006}) 20:41:38 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) __mount50(&(0x7f0000000100)='nfs\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) 20:41:38 executing program 1: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x200000000000c, &(0x7f0000000000)="e68c5be6b17e922d", 0x8) 20:41:38 executing program 3: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) link(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='.\x00') 20:41:38 executing program 1: open$dir(&(0x7f0000000000)='./file0\x00', 0x2088611, 0x0) truncate(&(0x7f0000000100)='./file0\x00', 0x0, 0x100000000) r0 = open(&(0x7f0000000000)='./file0\x00', 0x80400000000206, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x20011, r0, 0x0, 0x0) preadv(r0, &(0x7f0000001380)=[{&(0x7f0000002780)=""/4125, 0x101d}, {0x0}, {&(0x7f0000001180)=""/113, 0x71}, {0x0}, {&(0x7f00000037c0)=""/102400, 0x19000}, {0x0}], 0x6, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0, 0xc2c) 20:41:38 executing program 2: compat_50_mknod(&(0x7f0000000040)='./file0\x00', 0x2000, 0x2ffd) open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 20:41:38 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) lseek(r0, 0x0, 0x0, 0x0) 20:41:39 executing program 3: compat_50_clock_settime(0x0, &(0x7f0000000000)={0x0, 0x100000001}) 20:41:39 executing program 4: accept$inet(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000140)=0xc) msgsnd(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="03"], 0x29, 0x0) r0 = msgget$private(0x0, 0x0) msgsnd(r0, 0x0, 0x0, 0x0) compat_20_fstatfs(0xffffffffffffffff, &(0x7f00000001c0)) r1 = __clone(0x0, 0x0) ptrace(0x9, r1, 0x0, 0x0) __wait450(r1, 0x0, 0x4, &(0x7f0000000180)) ptrace(0x1, r1, &(0x7f0000000040), 0x1000) r2 = __clone(0x0, 0x0) ptrace(0x9, r2, 0x0, 0x0) ptrace(0x1, r2, &(0x7f0000000040), 0x1000) 20:41:39 executing program 5: compat_50_mknod(&(0x7f0000000080)='./file0\x00', 0x2004, 0x6) openat(0xffffffffffffff9c, &(0x7f00000006c0)='./file0\x00', 0x1080a, 0x0) 20:41:39 executing program 0: r0 = semget$private(0x0, 0x4000000009, 0x0) semop(r0, &(0x7f0000000200)=[{0x2}], 0x48) r1 = getuid() setreuid(0xee00, r1) __lstat50(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = getuid() setreuid(0xee00, r3) semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000000040)={{0x0, r1, r2, r3, 0xffffffffffffffff, 0x2b42b22caffc990d, 0x6}, 0x1, 0x9, 0x9}) compat_50_quotactl(&(0x7f0000000000)='.\x00', 0x6, r1, &(0x7f0000000180)="db93d93300183f2dd8a92ddb01e271903550cab618712934881db05af04cd967f626c8136ec1c91edc3edcafc1101e69bedae1516b654fa16f73f3c2a295f449ce05c6b6ce93d5a7f12f3bd56648a98d2b90abf73e9db2a28b322efa91b4043c16bd5ee44502543bd2225bfe80ad243993e0f0247c7aa9c68c54b558f3612952f2fdf08cc6228b5446e550d2f9d87a26381a32c9b55bdcc7da14e5f7273e37069043bd5f3f0994aba0dfe45d7147533c7340dd13d371") __getrusage50(0x0, &(0x7f00000000c0)) r4 = socket(0x18, 0x3, 0x0) connect$unix(r4, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) 20:41:39 executing program 2: pipe(&(0x7f00000001c0)={0xffffffffffffffff}) fcntl$lock(r0, 0x5, 0x0) 20:41:39 executing program 1: open$dir(&(0x7f0000000000)='./file0\x00', 0x2088611, 0x0) truncate(&(0x7f0000000100)='./file0\x00', 0x0, 0x100000000) r0 = open(&(0x7f0000000000)='./file0\x00', 0x80400000000206, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x20011, r0, 0x0, 0x0) preadv(r0, &(0x7f0000001380)=[{&(0x7f0000002780)=""/4125, 0x101d}, {0x0}, {&(0x7f0000001180)=""/113, 0x71}, {0x0}, {&(0x7f00000037c0)=""/102400, 0x19000}, {0x0}], 0x6, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0, 0xc2c) 20:41:39 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x800000000009031, 0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x800000000009031, 0xffffffffffffffff, 0x0, 0x0) 20:41:40 executing program 3: r0 = socket(0x2, 0x3, 0x0) getsockopt(r0, 0x0, 0x3, 0x0, 0x0) 20:41:40 executing program 4: accept$inet(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000140)=0xc) msgsnd(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="03"], 0x29, 0x0) r0 = msgget$private(0x0, 0x0) msgsnd(r0, 0x0, 0x0, 0x0) compat_20_fstatfs(0xffffffffffffffff, &(0x7f00000001c0)) r1 = __clone(0x0, 0x0) ptrace(0x9, r1, 0x0, 0x0) __wait450(r1, 0x0, 0x4, &(0x7f0000000180)) ptrace(0x1, r1, &(0x7f0000000040), 0x1000) r2 = __clone(0x0, 0x0) ptrace(0x9, r2, 0x0, 0x0) ptrace(0x1, r2, &(0x7f0000000040), 0x1000) 20:41:40 executing program 5: setreuid(0xffffffffffffffff, 0xee00) r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil) shmctl$SHM_UNLOCK(r0, 0x4) 20:41:40 executing program 1: mknod$loop(&(0x7f0000001180)='./file0\x00', 0x2000, 0x1) rename(&(0x7f00000011c0)='./file0\x00', &(0x7f0000001200)='./file0\x00') symlink(&(0x7f0000005e00)='./file0\x00', &(0x7f0000005e40)='./file0\x00') 20:41:40 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) setreuid(0xee00, 0x0) r0 = getuid() setreuid(0xee00, r0) __utimes50(&(0x7f0000000000)='./file0\x00', 0x0) 20:41:40 executing program 5: mincore(&(0x7f0000ffb000/0x4000)=nil, 0x4000, &(0x7f0000000000)=""/85) __msync13(&(0x7f0000ffc000/0x4000)=nil, 0x6, 0x3) socket(0x0, 0x5, 0xff) 20:41:40 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x800000000009031, 0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x800000000009031, 0xffffffffffffffff, 0x0, 0x0) 20:41:41 executing program 4: compat_20_getfsstat(&(0x7f0000000140), 0x20808e, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) sendmmsg(r0, &(0x7f0000000580)={0x0}, 0x10, 0x0, 0x0) 20:41:41 executing program 0: compat_50_clock_getres(0x0, &(0x7f0000000780)) 20:41:41 executing program 5: mincore(&(0x7f0000ffb000/0x4000)=nil, 0x4000, &(0x7f0000000000)=""/85) __msync13(&(0x7f0000ffc000/0x4000)=nil, 0x6, 0x3) socket(0x0, 0x5, 0xff) 20:41:41 executing program 0: r0 = socket(0x1f, 0x5, 0x0) listen(r0, 0x0) connect$unix(r0, &(0x7f0000000040)=@file={0x0, './file0\x00'}, 0xa) 20:41:41 executing program 3: r0 = socket(0x1f, 0x5, 0x0) setsockopt(r0, 0x4, 0x0, 0x0, 0x0) 20:41:41 executing program 2: r0 = socket(0x22, 0x3, 0x0) setsockopt$sock_int(r0, 0xffff, 0x800, &(0x7f0000000000), 0x4) 20:41:41 executing program 1: r0 = socket$inet(0x2, 0x3, 0x0) getsockopt(r0, 0x0, 0x6, 0x0, 0x0) 20:41:41 executing program 5: r0 = posix_spawn(0x0, &(0x7f0000000000)='\x00', &(0x7f00000000c0)={0x2, 0x101, &(0x7f0000000080)=@open={0x0, 0xffffffffffffffff, {&(0x7f0000000040)='()\x00', 0x7, 0x1}}}, &(0x7f0000000100)={0x20, 0xffffffffffffffff, {0x7}, 0x7fffffff, {[0xfff, 0x7fffffff, 0x0, 0x80000001]}, {[0x1000, 0xffff0001, 0x81, 0x112]}}, &(0x7f0000000140)=['\x00', '+(*^(\\(\x00', '\x00', '\x00'], &(0x7f0000000180)=['n#-\x00', '.\x00', ',+[\x00', '\x00', '\\-+(:*\x00']) fcntl$setown(0xffffffffffffff9c, 0x6, r0) link(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='./file0\x00') _lwp_setname(0x0, &(0x7f0000000240)='.\x00') mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) fchmod(0xffffffffffffff9c, 0x800) __clone(0x0, &(0x7f0000000340)="c1afc07b4b9a93669533c55c9fb59930a668a5ff7dbcf690c48657e99d39100b13e5cf55a788d724d84182ff03562c3ae49f772f08266f1fd96d0666e7d6f7229f682dc6fdf73164c46ba5d1588d91da66ebdcb8318dd1b5cb100bf3b0ed0243fd90cd3e343a22034fca61555c4106cf9657ee73de98df6410411060bbe9bb79e8725c75b663efd57c3693b8ffc5d9") pipe(&(0x7f0000000400)) 20:41:42 executing program 2: mknod(&(0x7f0000000040)='./bus\x00', 0x2080002002, 0x40004000000028ad) r0 = open(&(0x7f0000000100)='./bus\x00', 0x0, 0x0) ioctl$FIONREAD(r0, 0x4004667f, &(0x7f0000000000)) 20:41:42 executing program 0: connect$unix(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="6b02e1"], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x2, 0x2, 0x0) connect$unix(r0, &(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x10) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)=@file={0x0, './file0/file0\x00'}, 0x10) 20:41:42 executing program 4: mknod(&(0x7f0000000080)='./bus\x00', 0x2000, 0x0) r0 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) ioctl$FIOASYNC(r0, 0x8004747d, &(0x7f0000000000)=0xfcffffff) ioctl$FIONREAD(r0, 0x4004667f, &(0x7f00000000c0)) 20:41:42 executing program 1: mknod$loop(&(0x7f0000001180)='./file0\x00', 0x2000, 0x1) symlink(&(0x7f0000005e00)='./file0\x00', &(0x7f0000005e40)='./file0\x00') 20:41:42 executing program 3: r0 = socket(0x1f, 0x5, 0x0) setsockopt(r0, 0x4, 0x0, 0x0, 0x0) 20:41:42 executing program 3: r0 = socket(0x1f, 0x5, 0x0) setsockopt(r0, 0x4, 0x0, 0x0, 0x0) 20:41:42 executing program 1: mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0, 0x0) posix_spawn(0x0, 0x0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0) 20:41:42 executing program 5: setuid(0xee01) shmget(0x1, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil) [ 156.8120357] panic: UBSan: Undefined Behavior in /syzkaller/managers/netbsd-kubsan/kernel/sys/compat/common/tty_43.c:230:48, left shift of negative value -50331649 [ 156.8120357] cpu0: Begin traceback... [ 156.8120357] vpanic() at netbsd:vpanic+0x2cd [ 156.8120357] isAlreadyReported() at netbsd:isAlreadyReported [ 156.8120357] HandleShiftOutOfBounds() at netbsd:HandleShiftOutOfBounds+0x1ee [ 156.8120357] compat_43_ttioctl.cold() at netbsd:compat_43_ttioctl.cold+0x37 [ 156.8120357] ttioctl() at netbsd:ttioctl+0x83c [ 156.8120357] comioctl() at netbsd:comioctl+0x1a3 [ 156.8120357] cdev_ioctl() at netbsd:cdev_ioctl+0x15f [ 156.8120357] cnioctl() at netbsd:cnioctl+0xb4 [ 156.8120357] cdev_ioctl() at netbsd:cdev_ioctl+0x15f [ 156.8120357] spec_ioctl() at netbsd:spec_ioctl+0x2d3 [ 156.8120357] VOP_IOCTL() at netbsd:VOP_IOCTL+0x142 [ 156.8120357] vn_ioctl() at netbsd:vn_ioctl+0x197 [ 156.8120357] sys_ioctl() at netbsd:sys_ioctl+0xd8b [ 156.8120357] sys___syscall() at netbsd:sys___syscall+0x1cf [ 156.8120357] syscall() at netbsd:syscall+0x2d5 [ 156.8120357] --- syscall (number 198) --- [ 156.8120357] netbsd:syscall+0x2d5: [ 156.8120357] cpu0: End traceback... [ 156.8120357] fatal breakpoint trap in supervisor mode [ 156.8120357] trap type 1 code 0 rip 0xffffffff80221a85 cs 0x8 rflags 0x246 cr2 0x79baf0601000 ilevel 0x8 rsp 0xffffb280cb500280 [ 156.8120357] curlwp 0xffff8e2c6289e5c0 pid 844.986 lowest kstack 0xffffb280cb4fc2c0 Stopped in pid 844.986 (syz-executor.4) at netbsd:breakpoint+0x5: leave ? breakpoint() at netbsd:breakpoint+0x5 db_panic() at netbsd:db_panic+0xec vpanic() at netbsd:vpanic+0x2cd isAlreadyReported() at netbsd:isAlreadyReported HandleShiftOutOfBounds() at netbsd:HandleShiftOutOfBounds+0x1ee compat_43_ttioctl.cold() at netbsd:compat_43_ttioctl.cold+0x37 ttioctl() at netbsd:ttioctl+0x83c comioctl() at netbsd:comioctl+0x1a3 cdev_ioctl() at netbsd:cdev_ioctl+0x15f cnioctl() at netbsd:cnioctl+0xb4 cdev_ioctl() at netbsd:cdev_ioctl+0x15f spec_ioctl() at netbsd:spec_ioctl+0x2d3 VOP_IOCTL() at netbsd:VOP_IOCTL+0x142 vn_ioctl() at netbsd:vn_ioctl+0x197 sys_ioctl() at netbsd:sys_ioctl+0xd8b sys___syscall() at netbsd:sys___syscall+0x1cf syscall() at netbsd:syscall+0x2d5 --- syscall (number 198) --- netbsd:syscall+0x2d5: Panic string: UBSan: Undefined Behavior in /syzkaller/managers/netbsd-kubsan/kernel/sys/compat/common/tty_43.c:230:48, left shift of negative value -50331649 PID LID S CPU FLAGS STRUCT LWP * NAME WAIT 1617 989 3 0 80 ffff8e2c6e28d980 syz-executor.3 parked 1617 1617 2 0 10000000 ffff8e2c6e204140 syz-executor.3 844 >1759 7 1 0 ffff8e2c6e5d26c0 syz-executor.4 844 > 986 7 0 0 ffff8e2c6289e5c0 syz-executor.4 844 844 2 1 10000000 ffff8e2c6decdac0 syz-executor.4 1709 2388 3 0 80 ffff8e2c6e28d540 syz-executor.2 parked 1709 2759 3 0 80 ffff8e2c6e329a80 syz-executor.2 parked 1709 1709 2 0 10000040 ffff8e2c6e9790c0 syz-executor.2 669 669 3 0 80 ffff8e2c6e2e1bc0 syz-executor.4 parked 660 660 3 1 80 ffff8e2c6e2049c0 syz-executor.4 parked 2530 2530 3 1 80 ffff8e2c6e979940 syz-executor.5 parked 2076 2076 3 1 80 ffff8e2c6e979500 syz-executor.3 parked 506 506 3 0 80 ffff8e2c6e82c900 syz-executor.3 parked 495 495 3 0 80 ffff8e2c6e8b9040 syz-executor.3 parked 1459 1459 3 1 80 ffff8e2c6eea8700 syz-executor.0 parked 1457 1457 3 1 80 ffff8e2c6e2e1340 syz-executor.0 parked 397 397 3 0 80 ffff8e2c5ecb3040 syz-executor.4 parked 385 385 3 0 80 ffff8e2c6dbdca40 syz-executor.4 parked 2104 2104 3 0 80 ffff8e2c6289ea00 syz-executor.0 parked 2119 2119 3 0 80 ffff8e2c5ddea280 syz-executor.0 parked 2004 2004 3 0 80 ffff8e2c6e8b98c0 syz-executor.4 parked 2089 2089 3 1 80 ffff8e2c6e8b9480 syz-executor.4 parked 2125 2125 3 0 80 ffff8e2c6decd680 syz-executor.3 parked 1842 1842 3 0 80 ffff8e2c5f428080 syz-executor.3 parked 1494 1494 3 0 80 ffff8e2c5ecb38c0 syz-executor.5 parked 1576 1576 3 1 80 ffff8e2c5e720740 syz-executor.5 parked 1342 1342 3 0 80 ffff8e2c6e3d4300 syz-executor.3 parked 1507 1507 3 0 80 ffff8e2c6eea8b40 syz-executor.3 parked 422 422 3 0 80 ffff8e2c6eea82c0 syz-executor.1 parked 1252 1252 3 0 80 ffff8e2c6e5d2b00 syz-executor.1 parked 454 454 3 0 80 ffff8e2c6e5d2280 syz-executor.1 parked 1233 1233 3 0 80 ffff8e2c6decd240 syz-executor.1 parked 1102 1102 3 0 40 ffff8e2c6289e180 syz-executor.5 biowait 1118 1118 3 0 80 ffff8e2c601a19c0 syz-executor.3 nanoslp 1083 1083 3 0 80 ffff8e2c5deb6780 syz-executor.4 nanoslp 1084 1084 3 0 80 ffff8e2c5dbf7680 syz-executor.2 nanoslp 418 418 2 0 40 ffff8e2c5ddea6c0 syz-executor.1 1079 1079 3 0 80 ffff8e2c601a1140 syz-executor.0 nanoslp 1023 1085 2 1 40 ffff8e2c601a1580 syz-fuzzer 1023 1073 3 1 c0 ffff8e2c5d8e8640 syz-fuzzer parked 1023 1068 3 0 80 ffff8e2c5ddeab00 syz-fuzzer parked 1023 1075 3 1 80 ffff8e2c5f4284c0 syz-fuzzer parked 1023 1092 3 0 80 ffff8e2c5fb120c0 syz-fuzzer parked 1023 1069 3 0 80 ffff8e2c5fb12940 syz-fuzzer parked 1023 1078 2 1 40 ffff8e2c5dbf7240 syz-fuzzer 1023 1023 3 0 80 ffff8e2c5d8e8a80 syz-fuzzer parked 1071 1071 3 0 80 ffff8e2c5d8e8200 sshd select 1119 1119 3 1 80 ffff8e2c5f776100 getty nanoslp 1096 1096 3 0 80 ffff8e2c5f776540 getty nanoslp 697 697 3 1 80 ffff8e2c5fb12500 getty nanoslp 1091 1091 3 0 c0 ffff8e2c5f776980 getty ttyraw 948 948 3 0 80 ffff8e2c5d65d5c0 sshd select 1121 1121 3 1 80 ffff8e2c5f428900 powerd kqueue 871 871 3 1 80 ffff8e2c5ecb3480 syslogd kqueue 460 460 3 0 80 ffff8e2c5deb6340 dhcpcd poll 595 595 3 0 80 ffff8e2c5dc45700 dhcpcd poll 592 592 3 1 80 ffff8e2c5e720b80 dhcpcd poll 577 577 3 0 80 ffff8e2c5dc452c0 dhcpcd poll 349 349 3 0 80 ffff8e2c5e720300 dhcpcd poll 348 348 3 1 80 ffff8e2c5dc45b40 dhcpcd poll 347 347 3 1 80 ffff8e2c5dbf7ac0 dhcpcd poll 1 1 3 0 80 ffff8e2c554d4900 init wait 0 1838 5 1 600 ffff8e2c6e3d4b80 (zombie) 0 1200 3 0 200 ffff8e2c5deb6bc0 acctwatch actwat 0 821 3 0 200 ffff8e2c5d65da00 physiod physiod 0 165 3 0 200 ffff8e2c5d6d7a40 pooldrain pooldrain 0 164 3 0 200 ffff8e2c5d6d7600 ioflush syncer 0 163 3 1 200 ffff8e2c5d6d71c0 pgdaemon pgdaemon 0 160 3 1 200 ffff8e2c5d65d180 usb7 usbevt 0 31 3 0 200 ffff8e2c5a5e89c0 usb6 usbevt 0 63 3 0 200 ffff8e2c5a5e8580 usb5 usbevt 0 126 3 0 200 ffff8e2c5a5e8140 usb4 usbevt 0 125 3 1 200 ffff8e2c57583980 usb3 usbevt 0 124 3 1 200 ffff8e2c57583540 usb2 usbevt 0 123 3 0 200 ffff8e2c57583100 usb1 usbevt 0 122 3 0 200 ffff8e2c5650e940 usb0 usbevt 0 121 3 1 200 ffff8e2c5650e500 usbtask-dr usbtsk 0 120 3 1 200 ffff8e2c5650e0c0 usbtask-hc usbtsk 0 119 3 0 200 ffff8e2c5293aac0 npfgc0 npfgcw 0 118 3 1 200 ffff8e2c554d44c0 rt_free rt_free 0 117 3 0 200 ffff8e2c554d4080 unpgc unpgc 0 116 3 0 200 ffff8e2c554878c0 key_timehandler key_timehandler 0 115 3 1 200 ffff8e2c55487480 icmp6_wqinput/1 icmp6_wqinput 0 114 3 0 200 ffff8e2c55487040 icmp6_wqinput/0 icmp6_wqinput 0 113 3 0 200 ffff8e2c5547abc0 nd6_timer nd6_timer 0 112 3 1 200 ffff8e2c5547a780 carp6_wqinput/1 carp6_wqinput 0 111 3 0 200 ffff8e2c5547a340 carp6_wqinput/0 carp6_wqinput 0 110 3 1 200 ffff8e2c55419b80 carp_wqinput/1 carp_wqinput 0 109 3 0 200 ffff8e2c55419740 carp_wqinput/0 carp_wqinput 0 108 3 1 200 ffff8e2c54d80b00 icmp_wqinput/1 icmp_wqinput 0 107 3 0 200 ffff8e2c554002c0 icmp_wqinput/0 icmp_wqinput 0 106 2 1 200 ffff8e2c55400700 rt_timer 0 105 3 0 200 ffff8e2c55419300 vmem_rehash vmem_rehash 0 104 3 0 200 ffff8e2c55400b40 entbutler entropy 0 30 3 1 200 ffff8e2c54d806c0 vioif0_txrx/1 vioif0_txrx 0 29 3 0 200 ffff8e2c54d80280 vioif0_txrx/0 vioif0_txrx 0 27 3 0 200 ffff8e2c5293a680 scsibus0 sccomp 0 26 3 0 200 ffff8e2c5293a240 pms0 pmsreset 0 25 3 1 200 ffff8e2c5287ca80 xcall/1 xcall 0 24 1 1 200 ffff8e2c5287c640 softser/1 0 23 1 1 200 ffff8e2c5287c200 softclk/1 0 22 1 1 200 ffff8e2c52847a40 softbio/1 0 21 1 1 200 ffff8e2c52847600 softnet/1 0 20 1 1 201 ffff8e2c528471c0 idle/1 0 19 3 0 200 ffff8e2d6278ba00 lnxpwrwq lnxpwrwq 0 18 3 0 200 ffff8e2d6278b5c0 lnxlngwq lnxlngwq 0 17 3 0 200 ffff8e2d6278b180 lnxsyswq lnxsyswq 0 16 3 0 200 ffff8e2d627a49c0 lnxrcugc lnxrcugc 0 15 3 0 200 ffff8e2d627a4580 sysmon smtaskq 0 14 3 0 200 ffff8e2d627a4140 pmfsuspend pmfsuspend 0 13 3 0 200 ffff8e2d627b5980 pmfevent pmfevent 0 12 3 0 200 ffff8e2d627b5540 sopendfree sopendfr 0 11 3 0 200 ffff8e2d627b5100 iflnkst iflnkst 0 10 3 0 200 ffff8e2d637de940 nfssilly nfssilly 0 9 3 0 200 ffff8e2d637de500 vdrain vdrain 0 8 3 0 200 ffff8e2d637de0c0 modunload mod_unld 0 7 3 0 200 ffff8e2d63815900 xcall/0 xcall 0 6 1 0 200 ffff8e2d638154c0 softser/0 0 5 1 0 200 ffff8e2d63815080 softclk/0 0 4 1 0 200 ffff8e2d6383f8c0 softbio/0 0 3 1 0 200 ffff8e2d6383f480 softnet/0 0 2 1 0 201 ffff8e2d6383f040 idle/0 0 0 2 1 240 ffffffff85ed8700 swapper [Locks tracked through LWPs] ****** LWP 1617.1617 (syz-executor.3) @ 0xffff8e2c6e204140, l_stat=2 *** Locks held: * Lock 0 (initialized at pmap_ctor) lock address : 0xffff8e2c5ecef580 type : sleep/adaptive initialized : 0xffffffff80f5972e shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 0 relevant cpu : 0 last held: 0 relevant lwp : 0xffff8e2c6e204140 last held: 0xffff8e2c6e204140 last locked* : 0xffffffff80f5bdda unlocked : 0xffffffff80f5c4c6 owner field : 0xffff8e2c6e204140 wait/spin: 0/0 Turnstile: no active turnstile for this lock. *** Locks wanted: none ****** LWP 844.986 (syz-executor.4) @ 0xffff8e2c6289e5c0, l_stat=7 *** Locks held: none *** Locks wanted: * Lock 0 (initialized at module_hook_init) lock address : 0xffffffff862d23c0 type : sleep/adaptive initialized : 0xffffffff83268977 shared holds : 0 exclusive: 0 shares wanted: 0 exclusive: 0 relevant cpu : 0 last held: 0 relevant lwp : 0xffff8e2c6289e5c0 last held: 000000000000000000 last locked : 000000000000000000 unlocked*: 000000000000000000 owner field : 000000000000000000 wait/spin: 0/0 Turnstile: no active turnstile for this lock. ****** LWP 1709.1709 (syz-executor.2) @ 0xffff8e2c6e9790c0, l_stat=2 *** Locks held: * Lock 0 (initialized at pmap_ctor) lock address : 0xffff8e2c6ebc3180 type : sleep/adaptive initialized : 0xffffffff80f5972e shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 0 relevant cpu : 0 last held: 0 relevant lwp : 0xffff8e2c6e9790c0 last held: 0xffff8e2c6e9790c0 last locked* : 0xffffffff80f5bdda unlocked : 0xffffffff80f5c4c6 owner field : 0xffff8e2c6e9790c0 wait/spin: 0/0 Turnstile: no active turnstile for this lock. *** Locks wanted: * Lock 0 (initialized at pmap_ctor) lock address : 0xffff8e2c6ebc3188 type : sleep/adaptive initialized : 0xffffffff80f5975c shared holds : 0 exclusive: 0 shares wanted: 0 exclusive: 1 relevant cpu : 0 last held: 0 relevant lwp : 0xffff8e2c6e9790c0 last held: 000000000000000000 last locked : 0xffffffff80f4073f unlocked*: 0xffffffff80f407a0 owner/count : 0xffff8e2c6e9790c0 flags : 0x0000000000000004 Turnstile: no active turnstile for this lock. ****** LWP 1102.1102 (syz-executor.5) @ 0xffff8e2c6289e180, l_stat=3 *** Locks held: * Lock 0 (initialized at vcache_alloc) lock address : 0xffff8e2c61ec7ec0 type : sleep/adaptive initialized : 0xffffffff83523818 shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 0 relevant cpu : 0 last held: 0 relevant lwp : 0xffff8e2c6289e180 last held: 0xffff8e2c6289e180 last locked* : 0xffffffff8357de10 unlocked : 0xffffffff8357db9d owner/count : 0xffff8e2c6289e180 flags : 0x0000000000000004 Turnstile: no active turnstile for this lock. * Lock 1 (initialized at vcache_alloc) lock address : 0xffff8e2c6f630280 type : sleep/adaptive initialized : 0xffffffff83523818 shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 0 relevant cpu : 0 last held: 0 relevant lwp : 0xffff8e2c6289e180 last held: 0xffff8e2c6289e180 last locked* : 0xffffffff8357de10 unlocked : 000000000000000000 owner/count : 0xffff8e2c6289e180 flags : 0x0000000000000004 Turnstile: no active turnstile for this lock. *** Locks wanted: none ****** LWP 418.418 (syz-executor.1) @ 0xffff8e2c5ddea6c0, l_stat=2 *** Locks held: * Lock 0 (initialized at uvm_map_setup) lock address : 0xffff8e2c554b7300 type : sleep/adaptive initialized : 0xffffffff831623b2 shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 0 relevant cpu : 0 last held: 0 relevant lwp : 0xffff8e2c5ddea6c0 last held: 0xffff8e2c5ddea6c0 last locked* : 0xffffffff83154f4f unlocked : 0xffffffff8313be2e owner/count : 0xffff8e2c5ddea6c0 flags : 0x0000000000000004 Turnstile: no active turnstile for this lock. *** Locks wanted: none ****** LWP 595.595 (dhcpcd) @ 0xffff8e2c5dc45700, l_stat=3 *** Locks held: none *** Locks wanted: * Lock 0 (initialized at module_hook_init) lock address : 0xffffffff862d23c0 type : sleep/adaptive initialized : 0xffffffff83268977 shared holds : 0 exclusive: 0 shares wanted: 0 exclusive: 0 relevant cpu : 0 last held: 0 relevant lwp : 0xffff8e2c5dc45700 last held: 000000000000000000 last locked : 000000000000000000 unlocked*: 000000000000000000 owner field : 000000000000000000 wait/spin: 0/0 Turnstile: no active turnstile for this lock. ****** LWP 592.592 (dhcpcd) @ 0xffff8e2c5e720b80, l_stat=3 *** Locks held: none *** Locks wanted: * Lock 0 (initialized at module_hook_init) lock address : 0xffffffff862d23c0 type : sleep/adaptive initialized : 0xffffffff83268977 shared holds : 0 exclusive: 0 shares wanted: 0 exclusive: 0 relevant cpu : 1 last held: 0 relevant lwp : 0xffff8e2c5e720b80 last held: 000000000000000000 last locked : 000000000000000000 unlocked*: 000000000000000000 owner field : 000000000000000000 wait/spin: 0/0 Turnstile: no active turnstile for this lock. ****** LWP 348.348 (dhcpcd) @ 0xffff8e2c5dc45b40, l_stat=3 *** Locks held: none *** Locks wanted: * Lock 0 (initialized at module_hook_init) lock address : 0xffffffff862d23c0 type : sleep/adaptive initialized : 0xffffffff83268977 shared holds : 0 exclusive: 0 shares wanted: 0 exclusive: 0 relevant cpu : 1 last held: 0 relevant lwp : 0xffff8e2c5dc45b40 last held: 000000000000000000 last locked : 000000000000000000 unlocked*: 000000000000000000 owner field : 000000000000000000 wait/spin: 0/0 Turnstile: no active turnstile for this lock. ****** LWP 347.347 (dhcpcd) @ 0xffff8e2c5dbf7ac0, l_stat=3 *** Locks held: none *** Locks wanted: * Lock 0 (initialized at module_hook_init) lock address : 0xffffffff862d23c0 type : sleep/adaptive initialized : 0xffffffff83268977 shared holds : 0 exclusive: 0 shares wanted: 0 exclusive: 0 relevant cpu : 1 last held: 0 relevant lwp : 0xffff8e2c5dbf7ac0 last held: 000000000000000000 last locked : 000000000000000000 unlocked*: 000000000000000000 owner field : 000000000000000000 wait/spin: 0/0 Turnstile: no active turnstile for this lock. ****** LWP 0.23 (softclk/1) @ 0xffff8e2c5287c200, l_stat=1 *** Locks held: none *** Locks wanted: * Lock 0 (initialized at module_hook_init) lock address : 0xffffffff862d23c0 type : sleep/adaptive initialized : 0xffffffff83268977 shared holds : 0 exclusive: 0 shares wanted: 0 exclusive: 0 relevant cpu : 1 last held: 0 relevant lwp : 0xffff8e2c5287c200 last held: 000000000000000000 last locked : 000000000000000000 unlocked*: 000000000000000000 owner field : 000000000000000000 wait/spin: 0/0 Turnstile: no active turnstile for this lock. ****** LWP 0.11 (iflnkst) @ 0xffff8e2d627b5100, l_stat=3 *** Locks held: none *** Locks wanted: * Lock 0 (initialized at module_hook_init) lock address : 0xffffffff862d23c0 type : sleep/adaptive initialized : 0xffffffff83268977 shared holds : 0 exclusive: 0 shares wanted: 0 exclusive: 0 relevant cpu : 0 last held: 0 relevant lwp : 0xffff8e2d627b5100 last held: 000000000000000000 last locked : 000000000000000000 unlocked*: 000000000000000000 owner field : 000000000000000000 wait/spin: 0/0 Turnstile: no active turnstile for this lock. [Locks tracked through CPUs] ******* Locks held on cpu0: * Lock 0 (initialized at main) lock address : 0xffffffff862d22c0 type : spin initialized : 0xffffffff83a53536 shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 0 relevant cpu : 0 last held: 0 relevant lwp : 0xffff8e2c6289e5c0 last held: 0xffff8e2c6289e5c0 last locked* : 0xffffffff8334c923 unlocked : 0xffffffff802b0512 curcpu holds : 2 wanted by: 000000000000000000 * Lock 1 (initialized at tty_init) lock address : 0xffffffff863bdab0 type : spin initialized : 0xffffffff834372b8 shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 0 relevant cpu : 0 last held: 0 relevant lwp : 0xffff8e2c6289e5c0 last held: 0xffff8e2c6289e5c0 last locked* : 0xffffffff823512a2 unlocked : 0xffffffff8343e422 owner field : 0x0000000000010600 wait/spin: 0/1 PAGE FLAG PQ UOBJECT UANON 0xffffb28000007180 0045 00000000 0x0 0x0 0xffffb28000007200 0045 00000000 0x0 0x0 0xffffb28000007280 0045 00000000 0x0 0x0 0xffffb28000007300 0045 00000000 0x0 0x0 0xffffb28000007380 0045 00000000 0x0 0x0 0xffffb28000007400 0045 00000000 0x0 0x0 0xffffb28000007480 0045 00000000 0x0 0x0 0xffffb28000007500 0045 00000000 0x0 0x0 0xffffb28000007580 0041 00000000 0x0 0x0 0xffffb28000007600 0041 00000000 0x0 0x0 0xffffb28000007680 0041 00000000 0x0 0x0 0xffffb28000007700 0041 00000000 0x0 0x0 0xffffb28000007780 0045 00000000 0x0 0x0 0xffffb28000007800 0045 00000000 0x0 0x0 0xffffb28000007880 0045 00000000 0x0 0x0 0xffffb28000007900 0041 00000000 0x0 0x0 0xffffb28000007980 0041 00000000 0x0 0x0 0xffffb28000007a00 0041 00000000 0x0 0x0 0xffffb28000007a80 0041 00000000 0x0 0x0 0xffffb28000007b00 0041 00000000 0x0 0x0 0xffffb28000007b80 0041 00000000 0x0 0x0 0xffffb28000007c00 0041 00000000 0x0 0x0 0xffffb28000007c80 0041 00000000 0x0 0x0 0xffffb28000007d00 0041 00000000 0x0 0x0 0xffffb28000007d80 0041 00000000 0x0 0x0 0xffffb28000007e00 0041 00000000 0x0 0x0 0xffffb28000007e80 0041 00000000 0x0 0x0 0xffffb28000007f00 0041 00000000 0x0 0x0 0xffffb28000007f80 0041 00000000 0x0 0x0 0xffffb28000008000 0041 00000000 0x0 0x0 0xffffb28000008080 0041 00000000 0x0 0x0 0xffffb28000008100 0041 00000000 0x0 0x0 0xffffb28000008180 0041 00000000 0x0 0x0 0xffffb28000008200 0041 00000000 0x0 0x0 0xffffb28000008280 0041 00000000 0x0 0x0 0xffffb28000008300 0041 00000000 0x0 0x0 0xffffb28000008380 0041 00000000 0x0 0x0 0xffffb28000008400 0041 00000000 0x0 0x0 0xffffb28000008480 0041 00000000 0x0 0x0 0xffffb28000008500 0041 00000000 0x0 0x0 0xffffb28000008580 0041 00000000 0x0 0x0 0xffffb28000008600 0041 00000000 0x0 0x0 0xffffb28000008680 0045 00000000 0x0 0x0 0xffffb28000008700 0041 00000000 0x0 0x0 0xffffb28000008780 0041 00000000 0x0 0x0 0xffffb28000008800 0041 00000000 0x0 0x0 0xffffb28000008880 0041 00000000 0x0 0x0 0xffffb28000008900 0041 00000000 0x0 0x0 0xffffb28000008980 0041 00000000 0x0 0x0 0xffffb28000008a00 0041 00000000 0x0 0x0 0xffffb28000008a80 0041 00000000 0x0 0x0 0xffffb28000008b00 0045 00000000 0x0 0x0 0xffffb28000008b80 0041 00000000 0x0 0x0 0xffffb28000008c00 0041 00000000 0x0 0x0 0xffffb28000008c80 0041 00000000 0x0 0x0 0xffffb28000008d00 0041 00000000 0x0 0x0 0xffffb28000008d80 0041 00000000 0x0 0x0 0xffffb28000008e00 0041 00000000 0x0 0x0 0xffffb28000008e80 0041 00000000 0x0 0x0 0xffffb28000008f00 0041 00000000 0x0 0x0 0xffffb28000008f80 0045 00000000 0x0 0x0 0xffffb28000009000 0041 00000000 0x0 0x0 0xffffb28000009080 0041 00000000 0x0 0x0 0xffffb28000009100 0041 00000000 0x0 0x0 0xffffb28000009180 0041 00000000 0x0 0x0 0xffffb28000009200 0041 00000000 0x0 0x0 0xffffb28000009280 0041 00000000 0x0 0x0 0xffffb28000009300 0041 00000000 0x0 0x0 0xffffb28000009380 0041 00000000 0x0 0x0 0xffffb28000009400 0041 00000000 0x0 0x0 0xffffb28000009480 0041 00000000 0x0 0x0 0xffffb28000009500 0041 00000000 0x0 0x0 0xffffb28000009580 0041 00000000 0x0 0x0 0xffffb28000009600 0041 00000000 0x0 0x0 0xffffb28000009680 0041 00000000 0x0 0x0 0xffffb28000009700 0041 00000000 0x0 0x0 0xffffb28000009780 0041 00000000 0x0 0x0 0xffffb28000009800 0041 00000000 0x0 0x0 0xffffb28000009880 0041 00000000 0x0 0x0 0xffffb28000009900 0041 00000000 0x0 0x0 0xffffb28000009980 0041 00000000 0x0 0x0 0xffffb28000009a00 0041 00000000 0x0 0x0 0xffffb28000009a80 0041 00000000 0x0 0x0 0xffffb28000009b00 0041 00000000 0x0 0x0 0xffffb28000009b80 0041 00000000 0x0 0x0 0xffffb28000009c00 0041 00000000 0x0 0x0 0xffffb28000009c80 0041 00000000 0x0 0x0 0xffffb28000009d00 0041 00000000 0x0 0x0 0xffffb28000009d80 0041 00000000 0x0 0x0 0xffffb28000009e00 0041 00000000 0x0 0x0 0xffffb28000009e80 0041 00000000 0x0 0x0 0xffffb28000009f00 0041 00000000 0x0 0x0 0xffffb28000009f80 0041 00000000 0x0 0x0 0xffffb2800000a000 0041 00000000 0x0 0x0 0xffffb2800000a080 0041 00000000 0x0 0x0 0xffffb2800000a100 0045 00000000 0x0 0x0 0xffffb2800000a180 0041 00000000 0x0 0x0 0xffffb2800000a200 0041 00000000 0x0 0x0 0xffffb2800000a280 0041 00000000 0x0 0x0 0xffffb2800000a300 0041 00000000 0x0 0x0 0xffffb2800000a380 0041 00000000 0x0 0x0 0xffffb2800000a400 0041 00000000 0x0 0x0 0xffffb2800000a480 0041 00000000 0x0 0x0 0xffffb2800000a500 0041 00000000 0x0 0x0 0xffffb2800000a580 0041 00000000 0x0 0x0 0xffffb2800000a600 0045 00000000 0x0 0x0 0xffffb2800000a680 0041 00000000 0x0 0x0 0xffffb2800000a700 0041 00000000 0x0 0x0 0xffffb2800000a780 0041 00000000 0x0 0x0 0xffffb2800000a800 0041 00000000 0x0 0x0 0xffffb2800000a880 0041 00000000 0x0 0x0 0xffffb2800000a900 0041 00000000 0x0 0x0 0xffffb2800000a980 0045 00000000 0x0 0x0 0xffffb2800000aa00 0045 00000000 0x0 0x0 0xffffb2800000aa80 0041 00000000 0x0 0x0 0xffffb2800000ab00 0041 00000000 0x0 0x0 0xffffb2800000ab80 0041 00000000 0x0 0x0 0xffffb2800000ac00 0041 00000000 0x0 0x0 0xffffb2800000ac80 0041 00000000 0x0 0x0 0xffffb2800000ad00 0041 00000000 0x0 0x0 0xffffb2800000ad80 0045 00000000 0x0 0x0 0xffffb2800000ae00 0045 00000000 0x0 0x0 0xffffb2800000ae80 0041 00000000 0x0 0x0 0xffffb2800000af00 0041 00000000 0x0 0x0 0xffffb2800000af80 0041 00000000 0x0 0x0 0xffffb2800000b000 0041 00000000 0x0 0x0 0xffffb2800000b080 0041 00000000 0x0 0x0 0xffffb2800000b100 0041 00000000 0x0 0x0 0xffffb2800000b180 0045 00000000 0x0 0x0 0xffffb2800000b200 0045 00000000 0x0 0x0 0xffffb2800000b280 0045 00000000 0x0 0x0 0xffffb2800000b300 0041 00000000 0x0 0x0 0xffffb2800000b380 0041 00000000 0x0 0x0 0xffffb2800000b400 0041 00000000 0x0 0x0 0xffffb2800000b480 0041 00000000 0x0 0x0 0xffffb2800000b500 0045 00000000 0x0 0x0 0xffffb2800000b580 0045 00000000 0x0 0x0 0xffffb2800000b600 0045 00000000 0x0 0x0 0xffffb2800000b680 0045 00000000 0x0 0x0 0xffffb2800000b700 0041 00000000 0x0 0x0 0xffffb2800000b780 0041 00000000 0x0 0x0 0xffffb2800000b800 0045 00000000 0x0 0x0 0xffffb2800000b880 0041 00000000 0x0 0x0 0xffffb2800000b900 0045 00000000 0x0 0x0 0xffffb2800000b980 0045 00000000 0x0 0x0 0xffffb2800000ba00 0041 00000000 0x0 0x0 0xffffb2800000ba80 0045 00000000 0x0 0x0 0xffffb2800000bb00 0045 00000000 0x0 0x0 0xffffb2800000bb80 0041 00000000 0x0 0x0 0xffffb2800000bc00 0045 00000000 0x0 0x0 0xffffb2800000bc80 0045 00000000 0x0 0x0 0xffffb2800000bd00 0045 00000000 0x0 0x0 0xffffb2800000bd80 0041 00000000 0x0 0x0 0xffffb2800000be00 0041 00000000 0x0 0x0 0xffffb2800000be80 0045 00000000 0x0 0x0 0xffffb2800000bf00 0045 00000000 0x0 0x0 0xffffb2800000bf80 0045 00000000 0x0 0x0 0xffffb2800000c000 0045 00000000 0x0 0x0 0xffffb2800000c080 0045 00000000 0x0 0x0 0xffffb2800000c100 0045 00000000 0x0 0x0 0xffffb2800000c180 0041 00000000 0x0 0x0 0xffffb2800000c200 0041 00000000 0x0 0x0 0xffffb2800000c280 0041 00000000 0x0 0x0 0xffffb2800000c300 0045 00000000 0x0 0x0 0xffffb2800000c380 0045 00000000 0x0 0x0 0xffffb2800000c400 0045 00000000 0x0 0x0 0xffffb2800000c480 0045 00000000 0x0 0x0 0xffffb2800000c500 0045 00000000 0x0 0x0 0xffffb2800000c580 0041 00000000 0x0 0x0 0xffffb2800000c600 0041 00000000 0x0 0x0 0xffffb2800000c680 0041 00000000 0x0 0x0 0xffffb2800000c700 0045 00000000 0x0 0x0 0xffffb2800000c780 0045 00000000 0x0 0x0 0xffffb2800000c800 0045 00000000 0x0 0x0 0xffffb2800000c880 0045 00000000 0x0 0x0 0xffffb2800000c900 0041 00000000 0x0 0x0 0xffffb2800000c980 0041 00000000 0x0 0x0 0xffffb2800000ca00 0041 00000000 0x0 0x0 0xffffb2800000ca80 0041 00000000 0x0 0x0 0xffffb2800000cb00 0041 00000000 0x0 0x0 0xffffb2800000cb80 0045 00000000 0x0 0x0 0xffffb2800000cc00 0041 00000000 0x0 0x0 0xffffb2800000cc80 0045 00000000 0x0 0x0 0xffffb2800000cd00 0041 00000000 0x0 0x0 0xffffb2800000cd80 0041 00000000 0x0 0x0 0xffffb2800000ce00 0045 00000000 0x0 0x0 0xffffb2800000ce80 0045 00000000 0x0 0x0 0xffffb2800000cf00 0041 00000000 0x0 0x0 0xffffb2800000cf80 0041 00000000 0x0 0x0 0xffffb2800000d000 0041 00000000 0x0 0x0 0xffffb2800000d080 0041 00000000 0x0 0x0 0xffffb2800000d100 0041 00000000 0x0 0x0 0xffffb2800000d180 0045 00000000 0x0 0x0 0xffffb2800000d200 0041 00000000 0x0 0x0 0xffffb2800000d280 0041 00000000 0x0 0x0 0xffffb2800000d300 0041 00000000 0x0 0x0 0xffffb2800000d380 0041 00000000 0x0 0x0 0xffffb2800000d400 0041 00000000 0x0 0x0 0xffffb2800000d480 0041 00000000 0x0 0x0 0xffffb2800000d500 0041 00000000 0x0 0x0 0xffffb2800000d580 0041 00000000 0x0 0x0 0xffffb2800000d600 0041 00000000 0x0 0x0 0xffffb2800000d680 0041 00000000 0x0 0x0 0xffffb2800000d700 0041 00000000 0x0 0x0 0xffffb2800000d780 0041 00000000 0x0 0x0 0xffffb2800000d800 0041 00000000 0x0 0x0 0xffffb2800000d880 0041 00000000 0x0 0x0 0xffffb2800000d900 0041 00000000 0x0 0x0 0xffffb2800000d980 0041 00000000 0x0 0x0 0xffffb2800000da00 0041 00000000 0x0 0x0 0xffffb2800000da80 0045 00000000 0x0 0x0 0xffffb2800000db00 0045 00000000 0x0 0x0 0xffffb2800000db80 0041 00000000 0x0 0x0 0xffffb2800000dc00 0045 00000000 0x0 0x0 0xffffb2800000dc80 0041 00000000 0x0 0x0 0xffffb2800000dd00 0045 00000000 0x0 0x0 0xffffb2800000dd80 0041 00000000 0x0 0x0 0xffffb2800000de00 0045 00000000 0x0 0x0 0xffffb2800000de80 0041 00000000 0x0 0x0 0xffffb2800000df00 0045 00000000 0x0 0x0 0xffffb2800000df80 0045 00000000 0x0 0x0 0xffffb2800000e000 0045 00000000 0x0 0x0 0xffffb2800000e080 0045 00000000 0x0 0x0 0xffffb2800000e100 0045 00000000 0x0 0x0 0xffffb2800000e180 0041 00000000 0x0 0x0 0xffffb2800000e200 0041 00000000 0x0 0x0 0xffffb2800000e280 0045 00000000 0x0 0x0 0xffffb2800000e300 0045 00000000 0x0 0x0 0xffffb2800000e380 0045 00000000 0x0 0x0 0xffffb2800000e400 0045 00000000 0x0 0x0 0xffffb2800000e480 0045 00000000 0x0 0x0 0xffffb2800000e500 0041 00000000 0x0 0x0 0xffffb2800000e580 0041 00000000 0x0 0x0 0xffffb2800000e600 0041 00000000 0x0 0x0 0xffffb2800000e680 0041 00000000 0x0 0x0 0xffffb2800000e700 0041 00000000 0x0 0x0 0xffffb2800000e780 0045 00000000 0x0 0x0 0xffffb2800000e800 0041 00000000 0x0 0x0 0xffffb2800000e880 0041 00000000 0x0 0x0 0xffffb2800000e900 0041 00000000 0x0 0x0 0xffffb2800000e980 0041 00000000 0x0 0x0 0xffffb2800000ea00 0041 00000000 0x0 0x0 0xffffb2800000ea80 0041 00000000 0x0 0x0 0xffffb2800000eb00 0041 00000000 0x0 0x0 0xffffb2800000eb80 0041 00000000 0x0 0x0 0xffffb2800000ec00 0045 00000000 0x0 0x0 0xffffb2800000ec80 0041 00000000 0x0 0x0 0xffffb2800000ed00 0041 00000000 0x0 0x0 0xffffb2800000ed80 0041 00000000 0x0 0x0 0xffffb2800000ee00 0041 00000000 0x0 0x0 0xffffb2800000ee80 0041 00000000 0x0 0x0 0xffffb2800000ef00 0041 00000000 0x0 0x0 0xffffb2800000ef80 0045 00000000 0x0 0x0 0xffffb2800000f000 0041 00000000 0x0 0x0 0xffffb2800000f080 0045 00000000 0x0 0x0 0xffffb2800000f100 0041 00000000 0x0 0x0 0xffffb2800000f180 0041 00000000 0x0 0x0 0xffffb2800000f200 0045 00000000 0x0 0x0 0xffffb2800000f280 0041 00000000 0x0 0x0 0xffffb2800000f300 0041 00000000 0x0 0x0 0xffffb2800000f380 0041 00000000 0x0 0x0 0xffffb2800000f400 0041 00000000 0x0 0x0 0xffffb2800000f480 0041 00000000 0x0 0x0 0xffffb2800000f500 0041 00000000 0x0 0x0 0xffffb2800000f580 0045 00000000 0x0 0x0 0xffffb2800000f600 0041 00000000 0x0 0x0 0xffffb2800000f680 0041 00000000 0x0 0x0 0xffffb2800000f700 0041 00000000 0x0 0x0 0xffffb2800000f780 0041 00000000 0x0 0x0 0xffffb2800000f800 0041 00000000 0x0 0x0 0xffffb2800000f880 0041 00000000 0x0 0x0 0xffffb2800000f900 0041 00000000 0x0 0x0 0xffffb2800000f980 0041 00000000 0x0 0x0 0xffffb2800000fa00 0041 00000000 0x0 0x0 0xffffb2800000fa80 0041 00000000 0x0 0x0 0xffffb2800000fb00 0041 00000000 0x0 0x0 0xffffb2800000fb80 0041 00000000 0x0 0x0 0xffffb2800000fc00 0041 00000000 0x0 0x0 0xffffb2800000fc80 0041 00000000 0x0 0x0 0xffffb2800000fd00 0041 00000000 0x0 0x0 0xffffb2800000fd80 0041 00000000 0x0 0x0 0xffffb2800000fe00 0041 00000000 0x0 0x0 0xffffb2800000fe80 0041 00000000 0x0 0x0 0xffffb2800000ff00 0041 00000000 0x0 0x0 0xffffb2800000ff80 0041 00000000 0x0 0x0 0xffffb28000010000 0045 00000000 0x0 0x0 0xffffb28000010080 0041 00000000 0x0 0x0 0xffffb28000010100 0041 00000000 0x0 0x0 0xffffb28000010180 0041 00000000 0x0 0x0 0xffffb28000010200 0041 00000000 0x0 0x0 0xffffb28000010280 0045 00000000 0x0 0x0 0xffffb28000010300 0041 00000000 0x0 0x0 0xffffb28000010380 0045 00000000 0x0 0x0 0xffffb28000010400 0041 00000000 0x0 0x0 0xffffb28000010480 0041 00000000 0x0 0x0 0xffffb28000010500 0045 00000000 0x0 0x0 0xffffb28000010580 0041 00000000 0x0 0x0 0xffffb28000010600 0041 00000000 0x0 0x0 0xffffb28000010680 0041 00000000 0x0 0x0 0xffffb28000010700 0045 00000000 0x0 0x0 0xffffb28000010780 0041 00000000 0x0 0x0 0xffffb28000010800 0041 00000000 0x0 0x0 0xffffb28000010880 0045 00000000 0x0 0x0 0xffffb28000010900 0041 00000000 0x0 0x0 0xffffb28000010980 0041 00000000 0x0 0x0 0xffffb28000010a00 0041 00000000 0x0 0x0 0xffffb28000010a80 0041 00000000 0x0 0x0 0xffffb28000010b00 0041 00000000 0x0 0x0 0xffffb28000010b80 0041 00000000 0x0 0x0 0xffffb28000010c00 0041 00000000 0x0 0x0 0xffffb28000010c80 0041 00000000 0x0 0x0 0xffffb28000010d00 0041 00000000 0x0 0x0 0xffffb28000010d80 0041 00000000 0x0 0x0 0xffffb28000010e00 0041 00000000 0x0 0x0 0xffffb28000010e80 0041 00000000 0x0 0x0 0xffffb28000010f00 0041 00000000 0x0 0x0 0xffffb28000010f80 0041 00000000 0x0 0x0 0xffffb28000011000 0001 00000000 0x0 0x0 0xffffb28000011080 0001 00000000 0x0 0x0 0xffffb28000011100 0001 00000000 0x0 0x0 0xffffb28000011180 0001 00000000 0x0 0x0 0xffffb28000011200 0001 00000000 0x0 0x0 0xffffb28000011280 0001 00000000 0x0 0x0 0xffffb28000011300 0001 00000000 0x0 0x0 0xffffb28000011380 0001 00000000 0x0 0x0 0xffffb28000011400 0001 00000000 0x0 0x0 0xffffb28000011480 0001 00000000 0x0 0x0 0xffffb28000011500 0001 00000000 0x0 0x0 0xffffb28000011580 0001 00000000 0x0 0x0 0xffffb28000011600 0001 00000000 0x0 0x0 0xffffb28000011680 0001 00000000 0x0 0x0 0xffffb28000011700 0001 00000000 0x0 0x0 0xffffb28000011780 0001 00000000 0x0 0x0 0xffffb28000011800 0001 00000000 0x0 0x0 0xffffb28000011880 0001 00000000 0x0 0x0 0xffffb28000011900 0001 00000000 0x0 0x0 0xffffb28000011980 0001 00000000 0x0 0x0 0xffffb28000011a00 0001 00000000 0x0 0x0 0xffffb28000011a80 0001 00000000 0x0 0x0 0xffffb28000011b00 0001 00000000 0x0 0x0 0xffffb28000011b80 0001 00000000 0x0 0x0 0xffffb28000011c00 0001 00000000 0x0 0x0 0xffffb28000011c80 0001 00000000 0x0 0x0 0xffffb28000011d00 0001 00000000 0x0 0x0 0xffffb28000011d80 0001 00000000 0x0 0x0 0xffffb28000011e00 0001 00000000 0x0 0x0 0xffffb28000011e80 0001 00000000 0x0 0x0 0xffffb28000011f00 0001 00000000 0x0 0x0 0xffffb28000011f80 0001 00000000 0x0 0x0 0xffffb28000012000 0001 00000000 0x0 0x0 0xffffb28000012080 0001 00000000 0x0 0x0 0xffffb28000012100 0001 00000000 0x0 0x0 0xffffb28000012180 0001 00000000 0x0 0x0 0xffffb28000012200 0001 00000000 0x0 0x0 0xffffb28000012280 0001 00000000 0x0 0x0 0xffffb28000012300 0001 00000000 0x0 0x0 0xffffb28000012380 0001 00000000 0x0 0x0 0xffffb28000012400 0001 00000000 0x0 0x0 0xffffb28000012480 0001 00000000 0x0 0x0 0xffffb28000012500 0001 00000000 0x0 0x0 0xffffb28000012580 0001 00000000 0x0 0x0 0xffffb28000012600 0001 00000000 0x0 0x0 0xffffb28000012680 0001 00000000 0x0 0x0 0xffffb28000012700 0001 00000000 0x0 0x0 0xffffb28000012780 0001 00000000 0x0 0x0 0xffffb28000012800 0001 00000000 0x0 0x0 0xffffb28000012880 0001 00000000 0x0 0x0 0xffffb28000012900 0001 00000000 0x0 0x0 0xffffb28000012980 0001 00000000 0x0 0x0 0xffffb28000012a00 0001 00000000 0x0 0x0 0xffffb28000012a80 0001 00000000 0x0 0x0 0xffffb28000012b00 0041 00000000 0x0 0x0 0xffffb28000012b80 0045 00000000 0x0 0x0 0xffffb28000012c00 0041 00000000 0x0 0x0 0xffffb28000012c80 0041 00000000 0x0 0x0 0xffffb28000012d00 0041 00000000 0x0 0x0 0xffffb28000012d80 0041 00000000 0x0 0x0 0xffffb28000012e00 0041 00000000 0x0 0x0 0xffffb28000012e80 0041 00000000 0x0 0x0 0xffffb28000012f00 0041 00000000 0x0 0x0 0xffffb28000012f80 0041 00000000 0x0 0x0 0xffffb28000013000 0041 00000000 0x0 0x0 0xffffb28000013080 0041 00000000 0x0 0x0 0xffffb28000013100 0041 00000000 0x0 0x0 0xffffb28000013180 0041 00000000 0x0 0x0 0xffffb28000013200 0041 00000000 0x0 0x0 0xffffb28000013280 0041 00000000 0x0 0x0 0xffffb28000013300 0041 00000000 0x0 0x0 0xffffb28000013380 0041 00000000 0x0 0x0 0xffffb28000013400 0041 00000000 0x0 0x0 0xffffb28000013480 0041 00000000 0x0 0x0 0xffffb28000013500 0041 00000000 0x0 0x0 0xffffb28000013580 0041 00000000 0x0 0x0 0xffffb28000013600 0041 00000000 0x0 0x0 0xffffb28000013680 0041 00000000 0x0 0x0 0xffffb28000013700 0041 00000000 0x0 0x0 0xffffb28000013780 0041 00000000 0x0 0x0 0xffffb28000013800 0041 00000000 0x0 0x0 0xffffb28000013880 0041 00000000 0x0 0x0 0xffffb28000013900 0041 00000000 0x0 0x0 0xffffb28000013980 0041 00000000 0x0 0x0 0xffffb28000013a00 0041 00000000 0x0 0x0 0xffffb28000013a80 0041 00000000 0x0 0x0 0xffffb28000013b00 0041 00000000 0x0 0x0 0xffffb28000013b80 0041 00000000 0x0 0x0 0xffffb28000013c00 0041 00000000 0x0 0x0 0xffffb28000013c80 0041 00000000 0x0 0x0 0xffffb28000013d00 0041 00000000 0x0 0x0 0xffffb28000013d80 0041 00000000 0x0 0x0 0xffffb28000013e00 0041 00000000 0x0 0x0 0xffffb28000013e80 0041 00000000 0x0 0x0 0xffffb28000013f00 0041 00000000 0x0 0x0 0xffffb28000013f80 0041 00000000 0x0 0x0 0xffffb28000014000 0041 00000000 0x0 0x0 0xffffb28000014080 0041 00000000 0x0 0x0 0xffffb28000014100 0041 00000000 0x0 0x0 0xffffb28000014180 0041 00000000 0x0 0x0 0xffffb28000014200 0041 00000000 0x0 0x0 0xffffb28000014280 0041 00000000 0x0 0x0 0xffffb28000014300 0041 00000000 0x0 0x0 0xffffb28000014380 0041 00000000 0x0 0x0 0xffffb28000014400 0001 00000000 0x0 0x0 0xffffb28000014480 0001 00000000 0x0 0x0 0xffffb28000014500 0001 00000000 0x0 0x0 0xffffb28000014580 0001 00000000 0x0 0x0 0xffffb28000014600 0001 00000000 0x0 0x0 0xffffb28000014680 0001 00000000 0x0 0x0 0xffffb28000014700 0001 00000000 0x0 0x0 0xffffb28000014780 0001 00000000 0x0 0x0 0xffffb28000014800 0001 00000000 0x0 0x0 0xffffb28000014880 0001 00000000 0x0 0x0 0xffffb28000014900 0001 00000000 0x0 0x0 0xffffb28000014980 0001 00000000 0x0 0x0 0xffffb28000014a00 0001 00000000 0x0 0x0 0xffffb28000014a80 0001 00000000 0x0 0x0 0xffffb28000014b00 0001 00000000 0x0 0x0 0xffffb28000014b80 0001 00000000 0x0 0x0 0xffffb28000014c00 0001 00000000 0x0 0x0 0xffffb28000014c80 0001 00000000 0x0 0x0 0xffffb28000014d00 0001 00000000 0x0 0x0 0xffffb28000014d80 0001 00000000 0x0 0x0 0xffffb28000014e00 0001 00000000 0x0 0x0 0xffffb28000014e80 0001 00000000 0x0 0x0 0xffffb28000014f00 0001 00000000 0x0 0x0 0xffffb28000014f80 0001 00000000 0x0 0x0 0xffffb28000015000 0001 00000000 0x0 0x0 0xffffb28000015080 0001 00000000 0x0 0x0 0xffffb28000015100 0001 00000000 0x0 0x0 0xffffb28000015180 0001 00000000 0x0 0x0 0xffffb28000015200 0001 00000000 0x0 0x0 0xffffb28000015280 0001 00000000 0x0 0x0 0xffffb28000015300 0001 00000000 0x0 0x0 0xffffb28000015380 0001 00000000 0x0 0x0 0xffffb28000015400 0001 00000000 0x0 0x0 0xffffb28000015480 0001 00000000 0x0 0x0 0xffffb28000015500 0001 00000000 0x0 0x0 0xffffb28000015580 0001 00000000 0x0 0x0 0xffffb28000015600 0001 00000000 0x0 0x0 0xffffb28000015680 0001 00000000 0x0 0x0 0xffffb28000015700 0001 00000000 0x0 0x0 0xffffb28000015780 0001 00000000 0x0 0x0 0xffffb28000015800 0001 00000000 0x0 0x0 0xffffb28000015880 0001 00000000 0x0 0x0 0xffffb28000015900 0001 00000000 0x0 0x0 0xffffb28000015980 0001 00000000 0x0 0x0 0xffffb28000015a00 0001 00000000 0x0 0x0 0xffffb28000015a80 0001 00000000 0x0 0x0 0xffffb28000015b00 0001 00000000 0x0 0x0 0xffffb28000015b80 0001 00000000 0x0 0x0 0xffffb28000015c00 0001 00000000 0x0 0x0 0xffffb28000015c80 0001 00000000 0x0 0x0 0xffffb28000015d00 0001 00000000 0x0 0x0 0xffffb28000015d80 0001 00000000 0x0 0x0 0xffffb28000015e00 0001 00000000 0x0 0x0 0xffffb28000015e80 0001 00000000 0x0 0x0 0xffffb28000015f00 0041 00000000 0x0 0x0 0xffffb28000015f80 0041 00000000 0x0 0x0 0xffffb28000016000 0041 00000000 0x0 0x0 0xffffb28000016080 0041 00000000 0x0 0x0 0xffffb28000016100 0041 00000000 0x0 0x0 0xffffb28000016180 0041 00000000 0x0 0x0 0xffffb28000016200 0041 00000000 0x0 0x0 0xffffb28000016280 0041 00000000 0x0 0x0 0xffffb28000016300 0041 00000000 0x0 0x0 0xffffb28000016380 0041 00000000 0x0 0x0 0xffffb28000016400 0041 00000000 0x0 0x0 0xffffb28000016480 0041 00000000 0x0 0x0 0xffffb28000016500 0041 00000000 0x0 0x0 0xffffb28000016580 0041 00000000 0x0 0x0 0xffffb28000016600 0041 00000000 0x0 0x0 0xffffb28000016680 0041 00000000 0x0 0x0 0xffffb28000016700 0041 00000000 0x0 0x0 0xffffb28000016780 0041 00000000 0x0 0x0 0xffffb28000016800 0041 00000000 0x0 0x0 0xffffb28000016880 0041 00000000 0x0 0x0 0xffffb28000016900 0041 00000000 0x0 0x0 0xffffb28000016980 0041 00000000 0x0 0x0 0xffffb28000016a00 0041 00000000 0x0 0x0 0xffffb28000016a80 0041 00000000 0x0 0x0 0xffffb28000016b00 0041 00000000 0x0 0x0 0xffffb28000016b80 0041 00000000 0x0 0x0 0xffffb28000016c00 0041 00000000 0x0 0x0 0xffffb28000016c80 0041 00000000 0x0 0x0 0xffffb28000016d00 0041 00000000 0x0 0x0 0xffffb28000016d80 0041 00000000 0x0 0x0 0xffffb28000016e00 0041 00000000 0x0 0x0 0xffffb28000016e80 0041 00000000 0x0 0x0 0xffffb28000016f00 0041 00000000 0x0 0x0 0xffffb28000016f80 0041 00000000 0x0 0x0 0xffffb28000017000 0041 00000000 0x0 0x0 0xffffb28000017080 0041 00000000 0x0 0x0 0xffffb28000017100 0041 00000000 0x0 0x0 0xffffb28000017180 0041 00000000 0x0 0x0 0xffffb28000017200 0041 00000000 0x0 0x0 0xffffb28000017280 0041 00000000 0x0 0x0 0xffffb28000017300 0041 00000000 0x0 0x0 0xffffb28000017380 0041 00000000 0x0 0x0 0xffffb28000017400 0041 00000000 0x0 0x0 0xffffb28000017480 0001 00000000 0x0 0x0 0xffffb28000017500 0001 00000000 0x0 0x0 0xffffb28000017580 0001 00000000 0x0 0x0 0xffffb28000017600 0001 00000000 0x0 0x0 0xffffb28000017680 0001 00000000 0x0 0x0 0xffffb28000017700 0001 00000000 0x0 0x0 0xffffb28000017780 0001 00000000 0x0 0x0 0xffffb28000017800 0001 00000000 0x0 0x0 0xffffb28000017880 0001 00000000 0x0 0x0 0xffffb28000017900 0001 00000000 0x0 0x0 0xffffb28000017980 0001 00000000 0x0 0x0 0xffffb28000017a00 0001 00000000 0x0 0x0 0xffffb28000017a80 0001 00000000 0x0 0x0 0xffffb28000017b00 0001 00000000 0x0 0x0 0xffffb28000017b80 0001 00000000 0x0 0x0 0xffffb28000017c00 0001 00000000 0x0 0x0 0xffffb28000017c80 0001 00000000 0x0 0x0 0xffffb28000017d00 0001 00000000 0x0 0x0 0xffffb28000017d80 0001 00000000 0x0 0x0 0xffffb28000017e00 0001 00000000 0x0 0x0 0xffffb28000017e80 0001 00000000 0x0 0x0 0xffffb28000017f00 0001 00000000 0x0 0x0 0xffffb28000017f80 0001 00000000 0x0 0x0 0xffffb28000018000 0001 00000000 0x0 0x0 0xffffb28000018080 0001 00000000 0x0 0x0 0xffffb28000018100 0001 00000000 0x0 0x0 0xffffb28000018180 0001 00000000 0x0 0x0 0xffffb28000018200 0001 00000000 0x0 0x0 0xffffb28000018280 0001 00000000 0x0 0x0 0xffffb28000018300 0001 00000000 0x0 0x0 0xffffb28000018380 0001 00000000 0x0 0x0 0xffffb28000018400 0001 00000000 0x0 0x0 0xffffb28000018480 0001 00000000 0x0 0x0 0xffffb28000018500 0001 00000000 0x0 0x0 0xffffb28000018580 0001 00000000 0x0 0x0 0xffffb28000018600 0001 00000000 0x0 0x0 0xffffb28000018680 0001 00000000 0x0 0x0 0xffffb28000018700 0001 00000000 0x0 0x0 0xffffb28000018780 0001 00000000 0x0 0x0 0xffffb28000018800 0001 00000000 0x0 0x0 0xffffb28000018880 0001 00000000 0x0 0x0 0xffffb28000018900 0001 00000000 0x0 0x0 0xffffb28000018980 0001 00000000 0x0 0x0 0xffffb28000018a00 0001 00000000 0x0 0x0 0xffffb28000018a80 0001 00000000 0x0 0x0 0xffffb28000018b00 0001 00000000 0x0 0x0 0xffffb28000018b80 0001 00000000 0x0 0x0 0xffffb28000018c00 0001 00000000 0x0 0x0 0xffffb28000018c80 0001 00000000 0x0 0x0 0xffffb28000018d00 0001 00000000 0x0 0x0 0xffffb28000018d80 0001 00000000 0x0 0x0 0xffffb28000018e00 0001 00000000 0x0 0x0 0xffffb28000018e80 0001 00000000 0x0 0x0 0xffffb28000018f00 0001 00000000 0x0 0x0 0xffffb28000018f80 0041 00000000 0x0 0x0 0xffffb28000019000 0041 00000000 0x0 0x0 0xffffb28000019080 0041 00000000 0x0 0x0 0xffffb28000019100 0041 00000000 0x0 0x0 0xffffb28000019180 0041 00000000 0x0 0x0 0xffffb28000019200 0045 00000000 0x0 0x0 0xffffb28000019280 0041 00000000 0x0 0x0 0xffffb28000019300 0041 00000000 0x0 0x0 0xffffb28000019380 0041 00000000 0x0 0x0 0xffffb28000019400 0041 00000000 0x0 0x0 0xffffb28000019480 0041 00000000 0x0 0x0 0xffffb28000019500 0041 00000000 0x0 0x0 0xffffb28000019580 0045 00000000 0x0 0x0 0xffffb28000019600 0045 00000000 0x0 0x0