last executing test programs: 15.41369257s ago: executing program 2: pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) (async) r1 = socket(0x18, 0x3, 0x0) compat_50_select(0x0, 0x0, 0x0, 0x0, 0x0) (async) ioctl$FIOSEEKHOLE(r1, 0xc0106978, &(0x7f0000000180)) open(0x0, 0x0, 0x0) open(0x0, 0x0, 0x0) (async) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) (async) r2 = _lwp_self() readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/95, 0x5f}], 0x1) (async) _lwp_wakeup(r2) compat_50___msgctl13$IPC_STAT(0x0, 0x2, &(0x7f0000000280)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)}}) (async) symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00') setreuid(0x0, 0x0) r3 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil) munmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000) (async) r4 = shmat(r3, &(0x7f0000ffd000/0x1000)=nil, 0x0) (async) shmat(r3, &(0x7f0000ffc000/0x4000)=nil, 0x0) (async) munmap(&(0x7f0000fec000/0x14000)=nil, 0x14000) (async) r5 = shmget$private(0x0, 0x4000, 0x0, &(0x7f000055b000/0x4000)=nil) shmat(r5, &(0x7f0000ff5000/0x4000)=nil, 0x0) shmdt(r4) (async) open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) (async) compat_40_mount(&(0x7f0000000140)='umap\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f00000001c0)) (async) pathconf(&(0x7f0000000000)='./file0\x00', 0xe) (async) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) compat_50___msgctl13$IPC_STAT(0x0, 0x2, &(0x7f0000000280)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)}}) __mount50(&(0x7f0000000040)='procfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f00000000c0)='@', 0x1) (async) lchown(&(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffff) (async) compat_40_mount(&(0x7f0000000040)='umap\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f00000001c0)) (async) pathconf(&(0x7f0000000240)='./file0\x00', 0x2) 15.062654294s ago: executing program 4: r0 = socket(0x18, 0x1, 0x0) setsockopt(r0, 0x1000000029, 0x3d, &(0x7f0000000000)="5ab7776a", 0x4) 14.860325515s ago: executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sendmmsg(r1, &(0x7f0000002b40)={0x0}, 0x30, 0x0, 0x0) setreuid(0xee00, 0x0) getuid() unlink(0x0) setreuid(0x0, 0x0) semget$private(0x0, 0x4000000009, 0x0) semop(0x0, 0x0, 0x0) open(0x0, 0x0, 0x0) open(0x0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x9, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x100000001}) _lwp_create(&(0x7f0000000540)={0x8, 0x0, {[0x0, 0x0, 0xffff7e34]}, {0x10001, 0x9, 0x4}, {0x9, 0x6, '*\\-@,*\x00'}}, 0x40, &(0x7f00000005c0)=0x0) _lwp_setname(r2, &(0x7f0000000600)='\'\'!\x00') fcntl$lock(0xffffffffffffffff, 0x9, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x100000001}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r4, &(0x7f00000000c0), 0x0) recvmsg(r3, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) recvmsg(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) 14.282261583s ago: executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sendmmsg(r1, &(0x7f0000002b40)={0x0}, 0x30, 0x0, 0x0) setreuid(0xee00, 0x0) getuid() unlink(0x0) setreuid(0x0, 0x0) semget$private(0x0, 0x4000000009, 0x5) semop(0x0, 0x0, 0x0) open(0x0, 0x0, 0x0) open(0x0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x9, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x100000001}) _lwp_create(&(0x7f0000000540)={0x8, 0x0, {[0x0, 0x0, 0xffff7e34]}, {0x10001, 0x9, 0x4}, {0x9, 0x6, '*\\-@,*\x00'}}, 0x40, &(0x7f00000005c0)=0x0) _lwp_setname(r2, &(0x7f0000000600)='\'\'!\x00') fcntl$lock(0xffffffffffffffff, 0x9, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x100000001}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r4, &(0x7f00000000c0), 0x0) recvmsg(r3, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) recvmsg(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) 14.270877605s ago: executing program 3: open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x0) r0 = socket(0x2, 0x2, 0x0) ioctl$FIOSEEKHOLE(r0, 0x80206916, &(0x7f0000000180)) mknod(0x0, 0x0, 0xa718) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) __fhstat50(&(0x7f0000000080)="8a30224c35db5a15f1f3ab41", 0xc, 0x0) __stat50(&(0x7f0000000100)='./file0\x00', &(0x7f0000000380)={0x0}) mknod(&(0x7f00000001c0)='./file0\x00', 0x6000, r1) r2 = open(&(0x7f0000000140)='./file0\x00', 0x800, 0x0) ioctl$FIOASYNC(r2, 0x40067408, &(0x7f0000000000)) compat_90_getvfsstat(&(0x7f0000001240), 0xfffffffffffffff2, 0x3) getsid(0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) compat_50___msgctl13$IPC_STAT(0x0, 0x2, &(0x7f0000000280)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100), 0xdffffffffefff7ff}}) __mount50(&(0x7f0000000000)='fdesc\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0) lchown(&(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffff) compat_40_mount(&(0x7f0000000380)='union\x00', &(0x7f0000000140)='./file0\x00', 0x3, &(0x7f00000001c0)) open(0x0, 0x0, 0x0) pathconf(&(0x7f0000000080)='./file0\x00', 0xa) compat_43_ocreat(&(0x7f0000000100)='./file0\x00', 0x0) ktrace(&(0x7f00000000c0)='./file0\x00', 0x4, 0x4, 0xffffffffffffffff) symlinkat(&(0x7f0000000300)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000340)='./file0\x00') getsid(0x0) r3 = semget$private(0x0, 0x4000000009, 0x0) semop(r3, &(0x7f0000000500)=[{0x0, 0xb}, {}], 0x2) compat_50_____semctl13$IPC_RMID(r3, 0x0, 0x0) truncate(&(0x7f0000000140)='./file0\x00', 0x0, 0xffffffff) r4 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) readv(r4, &(0x7f0000000040)=[{&(0x7f0000000140)=""/87, 0xfffffe3f}], 0x1) 14.23897368s ago: executing program 0: shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000280)={&(0x7f0000000000)=@data, 0xe, &(0x7f0000000200)=[{&(0x7f0000000300)=""/222, 0xde}, {&(0x7f0000000400)=""/191, 0xbf}, {&(0x7f0000000a40)=""/4096, 0x1000}], 0x3, &(0x7f00000004c0)=""/168, 0xa8}, 0x800) setsockopt(r0, 0x0, 0x1, &(0x7f0000000a00)="8b589d9d", 0x4) bind(r1, &(0x7f0000000580)=@data="5db0a65e4b56212eea75139c7a32", 0xe) r2 = socket(0x10, 0x2, 0x0) fork() r3 = posix_spawn(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) compat_40_mount(&(0x7f0000000080)='tmpfs\x00', &(0x7f00000000c0)='.\x00', 0x0, &(0x7f00000002c0)="01") symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00') sendmsg$unix(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)=@abs={0x0, 0x0, 0x2}, 0x8, &(0x7f0000000380)}, 0x0) open(0x0, 0x0, 0x0) compat_40_mount(&(0x7f0000000140)='umap\x00', &(0x7f0000000040)='./file0\x00', 0x1000, &(0x7f0000000580)) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) chroot(&(0x7f0000000180)='./file1\x00') symlink(0x0, &(0x7f0000000240)='./file0\x00') r4 = socket$unix(0x1, 0x1, 0x0) ioctl$FIONWRITE(r4, 0x40046679, &(0x7f0000000000)) __wait450(r3, 0x0, 0x0, 0x0) ioctl$FIOSEEKHOLE(0xffffffffffffffff, 0xc118691d, 0x0) connect$inet(r2, &(0x7f0000000080)={0x10, 0x0}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$unix(r1, 0x0, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0x6000, 0xe03) r5 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) compat_40_mount(0x0, 0x0, 0x0, &(0x7f0000000140)="01") ioctl$FIONREAD(r5, 0xc0184603, &(0x7f0000000140)) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x5012, 0xffffffffffffffff, 0x0, 0x0) 12.871973118s ago: executing program 2: modctl$MODCTL_UNLOAD(0x2, 0x0) r0 = socket(0x18, 0x1, 0x0) setsockopt(r0, 0x29, 0x18, &(0x7f0000000000)="02000000", 0x4) mknod(&(0x7f00000000c0)='./bus\x00', 0x2000, 0x0) mknod(&(0x7f0000000100)='./file0\x00', 0x80002005, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) posix_spawn(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 12.713364542s ago: executing program 1: getsockopt$sock_timeval(0xffffffffffffffff, 0xffff, 0x0, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x40000802) r0 = open(&(0x7f0000000180)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x8000, 0x20) ioctl$FIOASYNC(r0, 0x80067409, &(0x7f0000000000)) r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0xffff, 0x0, 0x0, 0x0) ioctl$FIOASYNC(r1, 0x80017472, &(0x7f0000000100)) poll(&(0x7f0000000440)=[{}, {r0, 0x1}], 0x2, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket(0x1f, 0x5, 0x2) ptrace(0x0, 0x0, 0x0, 0x0) r5 = socket$inet6(0x18, 0x3, 0x0) r6 = open$dir(&(0x7f00000001c0)='./file0\x00', 0x6c85921a3b4f2a1a, 0x0) openat(r6, &(0x7f0000000080)='./file0\x00', 0x200, 0x0) sendto$inet6(r5, &(0x7f0000000000)="86", 0x1, 0xc, &(0x7f0000000040)={0x18, 0x3, 0x40000000}, 0xc) setsockopt$sock_int(r4, 0xffff, 0x0, 0x0, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) bind$unix(r7, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56) listen(r7, 0x0) connect$unix(r3, &(0x7f0000000140)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) fcntl$lock(r2, 0xa, 0x0) ioctl$FIOASYNC(0xffffffffffffffff, 0x80047401, &(0x7f0000000000)=0x5) modctl$MODCTL_LOAD(0x0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)}) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x8) mprotect(&(0x7f000049f000/0x4000)=nil, 0x4000, 0x0) r8 = socket(0x18, 0x1, 0x0) close(r8) socket(0x18, 0x2, 0x0) 11.781412615s ago: executing program 3: open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x0) r0 = socket(0x2, 0x2, 0x0) ioctl$FIOSEEKHOLE(r0, 0x80206916, &(0x7f0000000180)) mknod(0x0, 0x0, 0xa718) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) __fhstat50(&(0x7f0000000080)="8a30224c35db5a15f1f3ab41", 0xc, 0x0) __stat50(&(0x7f0000000100)='./file0\x00', &(0x7f0000000380)={0x0}) mknod(&(0x7f00000001c0)='./file0\x00', 0x6000, r1) r2 = open(&(0x7f0000000140)='./file0\x00', 0x800, 0x0) ioctl$FIOASYNC(r2, 0x40067408, &(0x7f0000000000)) compat_90_getvfsstat(&(0x7f0000001240), 0xfffffffffffffff2, 0x3) getsid(0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) compat_50___msgctl13$IPC_STAT(0x0, 0x2, &(0x7f0000000280)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100), 0xdffffffffefff7ff}}) __mount50(&(0x7f0000000000)='fdesc\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0) lchown(&(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffff) compat_40_mount(&(0x7f0000000380)='union\x00', &(0x7f0000000140)='./file0\x00', 0x3, &(0x7f00000001c0)) open(0x0, 0x0, 0x0) pathconf(&(0x7f0000000080)='./file0\x00', 0xa) compat_43_ocreat(&(0x7f0000000100)='./file0\x00', 0x0) __getfh30(0x0, 0x0, 0x0) symlinkat(&(0x7f0000000300)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000340)='./file0\x00') getsid(0x0) r3 = semget$private(0x0, 0x4000000009, 0x0) semop(r3, &(0x7f0000000500)=[{0x0, 0xb}, {}], 0x2) compat_50_____semctl13$IPC_RMID(r3, 0x0, 0x0) truncate(&(0x7f0000000140)='./file0\x00', 0x0, 0xffffffff) r4 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) readv(r4, &(0x7f0000000040)=[{&(0x7f0000000140)=""/87, 0xfffffe3f}], 0x1) 11.666322432s ago: executing program 0: shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000280)={&(0x7f0000000000)=@data, 0xe, &(0x7f0000000200)=[{&(0x7f0000000300)=""/222, 0xde}, {&(0x7f0000000400)=""/191, 0xbf}, {&(0x7f0000000a40)=""/4096, 0x1000}], 0x3, &(0x7f00000004c0)=""/168, 0xa8}, 0x800) setsockopt(r0, 0x0, 0x1, &(0x7f0000000a00)="8b589d9d", 0x4) bind(r1, &(0x7f0000000580)=@data="5db0a65e4b56212eea75139c7a32", 0xe) r2 = socket(0x10, 0x2, 0x0) fork() r3 = posix_spawn(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) compat_40_mount(&(0x7f0000000080)='tmpfs\x00', &(0x7f00000000c0)='.\x00', 0x0, &(0x7f00000002c0)="01") symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00') sendmsg$unix(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)=@abs={0x0, 0x0, 0x2}, 0x8, &(0x7f0000000380)}, 0x0) open(0x0, 0x0, 0x0) compat_40_mount(&(0x7f0000000140)='umap\x00', &(0x7f0000000040)='./file0\x00', 0x1000, &(0x7f0000000580)) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) chroot(&(0x7f0000000180)='./file1\x00') symlink(0x0, &(0x7f0000000240)='./file0\x00') r4 = socket$unix(0x1, 0x1, 0x0) ioctl$FIONWRITE(r4, 0x40046679, &(0x7f0000000000)) __wait450(r3, 0x0, 0x0, 0x0) ioctl$FIOSEEKHOLE(0xffffffffffffffff, 0xc118691d, 0x0) connect$inet(r2, &(0x7f0000000080)={0x10, 0x0}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$unix(r1, 0x0, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0x6000, 0xe03) r5 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) compat_40_mount(0x0, 0x0, 0x0, &(0x7f0000000140)="01") ioctl$FIONREAD(r5, 0xc0184603, &(0x7f0000000140)) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x5012, 0xffffffffffffffff, 0x0, 0x0) 11.630125218s ago: executing program 2: r0 = socket(0x18, 0x1, 0x0) setsockopt(r0, 0x1000000029, 0x32, 0x0, 0x0) getsockopt(r0, 0x29, 0x3d, 0x0, 0x0) r1 = socket(0x11, 0x3, 0x0) ioctl$FIOSEEKHOLE(r1, 0xc1206953, &(0x7f0000000180)=0x8000000000000036) fork() r2 = socket$inet6(0x18, 0x2, 0x0) sendto$inet6(r2, &(0x7f0000000000)="82", 0x2000, 0x2, &(0x7f0000000040)={0x18, 0x3}, 0x1c) symlink(&(0x7f0000000200)='.\x00', &(0x7f00000003c0)='./file0\x00') compat_50___msgctl13$IPC_STAT(0x0, 0x2, &(0x7f0000000280)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100), 0xdffffffffffff7ff}}) __mount50(&(0x7f00000002c0)='overlay\x00', &(0x7f0000000040)='.\x00', 0x0, &(0x7f0000000540), 0x0) lchown(&(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffff) compat_40_mount(&(0x7f0000000380)='union\x00', &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f00000001c0)) unlink(&(0x7f0000000080)='./file0\x00') mkdir(&(0x7f0000000080)='./file0\x00', 0x0) rmdir(&(0x7f0000000000)='./file0\x00') 11.276456751s ago: executing program 0: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) compat_50___msgctl13$IPC_STAT(0x0, 0x2, &(0x7f00000003c0)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)}}) lchown(&(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffff) __mount50(&(0x7f0000000000)='fdesc\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0) compat_40_mount(&(0x7f0000000000)='null\x00', &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f00000001c0)) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIOGETOWN(r0, 0x2000427e, 0x0) 11.145317481s ago: executing program 5: pipe2(0x0, 0x0) ioctl$FIOASYNC(0xffffffffffffffff, 0xc0104306, 0x0) syz_usb_connect$uac1(0x0, 0x0, 0x0, 0x0) semop(0x0, &(0x7f0000000400)=[{0x0, 0x0, 0x1000}, {}, {0x0, 0xfff}, {0x0, 0x1, 0x800}, {0x0, 0xf0d8, 0x1000}], 0x5) 8.394385091s ago: executing program 1: getsockopt$sock_timeval(0xffffffffffffffff, 0xffff, 0x0, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x40000802) r0 = open(&(0x7f0000000180)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x8000, 0x20) ioctl$FIOASYNC(r0, 0x80067409, &(0x7f0000000000)) r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0xffff, 0x0, 0x0, 0x0) ioctl$FIOASYNC(r1, 0x80017472, &(0x7f0000000100)) poll(&(0x7f0000000440)=[{}, {r0, 0x1}], 0x2, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket(0x1f, 0x5, 0x2) ptrace(0x0, 0x0, 0x0, 0x0) r5 = socket$inet6(0x18, 0x3, 0x0) r6 = open$dir(&(0x7f00000001c0)='./file0\x00', 0x6c85921a3b4f2a1a, 0x0) openat(r6, &(0x7f0000000080)='./file0\x00', 0x200, 0x0) sendto$inet6(r5, &(0x7f0000000000)="86", 0x1, 0xc, &(0x7f0000000040)={0x18, 0x3, 0x40000000}, 0xc) setsockopt$sock_int(r4, 0xffff, 0x0, 0x0, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) bind$unix(r7, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56) listen(r7, 0x0) connect$unix(r3, &(0x7f0000000140)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) fcntl$lock(r2, 0xa, 0x0) ioctl$FIOASYNC(0xffffffffffffffff, 0x80047401, &(0x7f0000000000)=0x5) modctl$MODCTL_LOAD(0x0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)}) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x8) mprotect(&(0x7f000049f000/0x4000)=nil, 0x4000, 0x0) r8 = socket(0x18, 0x1, 0x0) close(r8) socket(0x18, 0x2, 0x0) 7.344633891s ago: executing program 4: r0 = socket(0x18, 0x1, 0x0) setsockopt(r0, 0x1000000029, 0x3d, &(0x7f0000000000)="5ab7776a", 0x4) 7.031620959s ago: executing program 4: pipe2(0x0, 0x0) ioctl$FIOASYNC(0xffffffffffffffff, 0xc0104306, 0x0) syz_usb_connect$uac1(0x0, 0x0, 0x0, 0x0) r0 = semget$private(0x0, 0x4000000009, 0x0) semop(r0, &(0x7f0000000400)=[{0x2, 0x0, 0x1800}, {0x0, 0x0, 0x1000}, {}, {0x0, 0xfff}, {0x0, 0x1, 0x800}, {0x0, 0xf0d8, 0x1000}], 0x6) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) 6.846989028s ago: executing program 5: pipe2(0x0, 0x0) ioctl$FIOASYNC(0xffffffffffffffff, 0xc0104306, 0x0) syz_usb_connect$uac1(0x0, 0x0, 0x0, 0x0) semop(0x0, &(0x7f0000000400)=[{0x0, 0x0, 0x1000}, {}, {0x0, 0xfff}, {0x0, 0x1, 0x800}, {0x0, 0xf0d8, 0x1000}], 0x5) 6.770403529s ago: executing program 3: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) compat_40_mount(&(0x7f0000000180)='ptyfs\x00', &(0x7f0000000380)='./file0\x00', 0x0, &(0x7f0000000500)) compat_50___msgctl13$IPC_STAT(0x0, 0x2, &(0x7f0000000280)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)}}) open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000000)='./file0\x00') mkdirat(r0, &(0x7f0000000540)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) rename(&(0x7f00000003c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00') compat_40_mount(&(0x7f0000000300)='umap\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f00000001c0)) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r2 = dup(r1) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1000300000001, 0xffffffffffffffff}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r3 = socket(0x18, 0x1, 0x0) setsockopt(r3, 0x1000000029, 0xc, &(0x7f0000002a80)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) setsockopt(r3, 0x1000000029, 0xc, &(0x7f0000000040)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) setsockopt(r3, 0x1000000029, 0xd, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) __getdents30(r2, 0x0, 0x0) 6.159031002s ago: executing program 5: modctl$MODCTL_LOAD(0xd, &(0x7f0000000000)={&(0x7f0000000080), 0x0, &(0x7f0000000100)='\t\t', 0x2}) 6.112092719s ago: executing program 2: munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f000055b000/0x2000)=nil) shmat(r0, &(0x7f0000001000/0x3000)=nil, 0x0) r1 = socket(0x18, 0x3, 0x0) ioctl$FIOSEEKHOLE(r1, 0xc118691d, &(0x7f0000000180)) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x80000000002) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r2 = socket(0x18, 0x1, 0x0) setsockopt(r2, 0x0, 0x0, &(0x7f0000002a80)="01", 0x1) mmap(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x0, 0x10, 0xffffffffffffffff, 0x0, 0x0) modctl$MODCTL_LOAD(0x2, 0xffffffffffffffff) getpeername$unix(0xffffffffffffffff, 0x0, 0x0) __fhstat50(0x0, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0xffff, 0x0, &(0x7f0000000100), 0x4) setsockopt(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r3 = socket(0x18, 0x2, 0x0) connect$unix(r3, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) setsockopt$sock_int(0xffffffffffffffff, 0xffff, 0x1001, &(0x7f0000000100)=0x20000, 0x4) modctl$MODCTL_LOAD(0x0, &(0x7f0000000000)={&(0x7f0000000140)="1ea8dd9c1f8afb9d6bec075211746ee2b9d97436e4a7b3e507a281a992bbcf9a5eacef32c92fb2e45a4c0302b84d6be56fcd4b689d37cad80d109d6556294008d2b79644d2a5bd6a6487ea6451a2d1b7fd46d97cffe4ad961bca31298c9b788af1cacd9e6d013d1e1f629d4562bad3d04ec392e8203b9233a25a6eb0291d2e4e9524787cc16cef2bffbb36d287e7fe102d8595bf9a6550354cde956c0824ca4cfc7a403e1fd833363c6117efb2e3b3f446153db481e44f089929e9f0c691472ac57f33cfdd2232ff1c8f6f9f0915ef7e1f2ecc069890c26d53e54c43", 0x1, &(0x7f0000000240)="2c0fd44649fbe147ca12423adfd9ce955adba07219fa47c52e22da0e8db020c0d10205cafe4db9712eab765cef63cc581a6b18023f9377a6d837f7dd5d54c2822fd306e3ff24925dae1b976d816a8e707df90a848abd7692a00386e287663fe9e2f8eb6dde259f355e4e36710b6cb1743f5a56d5d2e76d6eec04d309b1a41806ee0267a094b6226be3e60c1be83e20e89116246a5c171edf23ac93500e36b8ccb21e9523162fa15db9d607712b8363e2cca4a8032dde660e5bddcd638e13428968b6f75d22787a2ec8dc3f64ee231bd90420040b09db70f374164e86", 0xdc}) write(0xffffffffffffffff, &(0x7f0000001680), 0x0) r4 = socket$inet(0x2, 0x2, 0x0) sendto$inet(r4, 0x0, 0x0, 0x24, &(0x7f0000000100)={0x2, 0x0}, 0x10) 5.962403842s ago: executing program 0: r0 = socket(0x2, 0x2, 0x0) ioctl$FIOSEEKHOLE(r0, 0xc0206912, &(0x7f0000000180)) compat_40_mount(0x0, 0x0, 0x400000, &(0x7f0000000180)) mknod(&(0x7f0000000000)='./file1\x00', 0x2000, 0xa718) r1 = open$dir(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0) ioctl$OFIOGETBMAP(r1, 0x8014447e, &(0x7f0000000100)) 5.90619906s ago: executing program 5: mknod(0x0, 0x0, 0x0) __mount50(0x0, 0x0, 0x0, 0x0, 0x0) unmount(0x0, 0x0) modctl$MODCTL_LOAD(0x2, 0xffffffffffffffff) _lwp_self() _lwp_wakeup(0x0) socket(0x0, 0x0, 0x0) open$dir(&(0x7f0000000700)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) __mount50(&(0x7f00000002c0)='overlay\x00', &(0x7f0000000040)='.\x00', 0x0, &(0x7f0000000540), 0x0) r1 = open$dir(&(0x7f00000026c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xe0290, 0x0) __fstat50(r1, &(0x7f0000000300)={0x0}) mknod(&(0x7f0000000200)='./file0\x00', 0x2000, r2) open(&(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x40, 0x400) fcntl$lock(r0, 0xa, 0x0) r3 = socket(0x10, 0x2, 0x0) fktrace(r3, 0x4, 0x62e2dd08f149ff1b, 0x0) ioctl$FIOASYNC(0xffffffffffffffff, 0x80047401, 0x0) setreuid(0x0, 0xee01) compat_30___lstat13(0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x0) __posix_rename(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./bus\x00') __stat50(&(0x7f00000004c0)='./bus\x00', &(0x7f0000000000)={0x0}) mknod(&(0x7f00000011c0)='./file0\x00', 0x2000, r4) r5 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) ioctl$FIOASYNC(r5, 0x40086484, 0x0) r6 = socket(0x10, 0x20000000, 0x0) mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) mincore(&(0x7f0000ffb000/0x4000)=nil, 0x4000, &(0x7f0000000180)=""/96) accept$unix(r6, &(0x7f0000000080)=@abs, &(0x7f00000000c0)=0x8) 5.873778016s ago: executing program 4: chroot(&(0x7f0000000000)='.\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0\x00', 0x0) compat_40_mount(&(0x7f0000000180)='ptyfs\x00', &(0x7f00000002c0)='./file0\x00', 0x0, &(0x7f0000000300)) pathconf(&(0x7f0000000040)='./file0\x00', 0xf) r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r1 = socket(0x10, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=""/187, 0xbb}], 0x1, 0x0}}, 0x10, 0x0, 0x0) posix_spawn(0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)=@close}, 0x0, 0x0, 0x0) _lwp_create(&(0x7f0000000100)={0x0, 0x0, {}, {}, {0x0, 0x0, '/)!/\x00'}}, 0x0, 0x0) compat_40_mount(&(0x7f0000000040)='tmpfs\x00', &(0x7f00000005c0)='.\x00', 0x0, &(0x7f00000002c0)="01") sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1002"], 0x10}, 0x0) r2 = socket(0x18, 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) compat_30___fstat13(0xffffffffffffffff, 0x0) setsockopt(r2, 0x1000000029, 0x3e, &(0x7f0000000000)="674cd6e5", 0x4) __mount50(0x0, &(0x7f0000000040)='.\x00', 0xe680bf986d21abfb, &(0x7f0000000140), 0x0) ioctl$FIOSEEKHOLE(r1, 0x80906931, &(0x7f0000000180)) r3 = dup3(r0, r0, 0x0) lseek(r3, 0x0, 0x4, 0x0) madvise(&(0x7f0000000000/0x4000)=nil, 0xfeffffff, 0x4) __getdents30(r3, 0x0, 0xfffffc01) getsockname(r3, &(0x7f0000000080)=@data, &(0x7f0000000100)=0xe) __getvfsstat90(&(0x7f0000001280), 0xce0, 0x0) 5.822413563s ago: executing program 3: r0 = open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) compat_40_mount(&(0x7f0000000140)='umap\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f00000001c0)) r2 = socket$inet(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x0}, 0x10) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) writev(r2, &(0x7f0000000100)=[{&(0x7f0000000080)="8f", 0x1}], 0x1) sendmsg(r2, &(0x7f0000000fc0)={&(0x7f0000000200)=@family, 0xe, &(0x7f0000000b80)=[{0x0}], 0x1, &(0x7f0000000c40)=[{0x10}, {0x10}, {0x10}, {0x108, 0x17, 0x979a, "afd14a5b8e0924d5aa2494571d4264be2a866333aaa7674f5e86eab5c94c53b46d9edb8937c8ccb3a2b6862beb12a08ea411133525f24d8394a5ad030534c19d68eef5a0f034b46645df455a13c80a51640ed6e6bdb67cdd85f3e40631103195c132d49556477066eced01a958797b6021ec4d00a49b3eb1925bcc5ee002fd796be5e288c495659fac9af15e8ebb0e3f847eb06eaafa0eb216d72ab0744bc0e6f1ac0d10f227040e061176c2821dd635dbe3f11075dc706b86f56e0ad43e49b79cc25d40f41234200f6cffa47513050c4262279a5493b3b294987d4802d221305a16e27ad5e40efa0b69ce4bd0826fd30f19"}], 0x138}, 0x1) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0x66, &(0x7f0000000180)={0x5, 0x1, 0x4, 0x9, 0xbf1a}, 0xc) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$FIONREAD(r3, 0xc0106924, &(0x7f0000000080)) socket(0x0, 0x0, 0x0) mknod(0x0, 0x0, 0x4301) acct(0x0) fpathconf(r1, 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0x2000, 0x29b3) r4 = socket(0x18, 0x3, 0x0) setsockopt(r4, 0x1000000029, 0x27, &(0x7f0000000040)="5ab7736a", 0x4) r5 = open(&(0x7f0000000000)='./file0\x00', 0x2, 0x0) ioctl$OFIOGETBMAP(r5, 0xc0284600, &(0x7f0000000080)) madvise(&(0x7f0000619000/0x1000)=nil, 0x1000, 0x1) mknod(&(0x7f00000000c0)='./bus\x00', 0x2000, 0x4f4b) __stat50(&(0x7f00000001c0)='./file0\x00', &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mknod(&(0x7f0000000480)='./file0\x00', 0x2000, r6) r7 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x0) mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) mincore(&(0x7f0000ffc000/0x3000)=nil, 0x3000, &(0x7f0000000300)=""/94) read(r7, &(0x7f0000000280)=""/10, 0xa) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 4.143431239s ago: executing program 1: compat_50_select(0x0, 0x0, 0x0, 0x0, 0x0) poll(0x0, 0x0, 0x0) __mount50(0x0, 0x0, 0x0, 0x0, 0x0) socket$inet(0x2, 0x0, 0x0) rasctl(0x0, 0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = getpid() fktrace(r0, 0x0, 0x62e2dd08f149ff1b, r1) __nanosleep50(&(0x7f00000008c0), &(0x7f0000000900)) 3.993896522s ago: executing program 3: ioctl$FIOSEEKHOLE(0xffffffffffffffff, 0x80206916, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) accept$inet6(0xffffffffffffff9c, 0x0, &(0x7f00000001c0)) (async) r0 = accept$inet6(0xffffffffffffff9c, 0x0, &(0x7f00000001c0)) r1 = getpgid(0x0) socket(0x18, 0x1, 0x0) (async) r2 = socket(0x18, 0x1, 0x0) setsockopt(r2, 0x1000000029, 0xc, &(0x7f0000000040)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) connect$unix(r2, &(0x7f0000000240)=@abs={0x0, 0x0, 0x0}, 0x8) (async) connect$unix(r2, &(0x7f0000000240)=@abs={0x0, 0x0, 0x0}, 0x8) fcntl$lock(r0, 0x7, &(0x7f0000000200)={0x1, 0x2, 0x1, 0xffffffffffffff51, r1}) (async) fcntl$lock(r0, 0x7, &(0x7f0000000200)={0x1, 0x2, 0x1, 0xffffffffffffff51, r1}) socket(0x18, 0x1, 0x0) (async) r3 = socket(0x18, 0x1, 0x0) setsockopt(r3, 0x1000000029, 0x3d, &(0x7f0000000180)="5ab7776a", 0x4) r4 = open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x4) truncate(&(0x7f0000000000)='./file0\x00', 0x0, 0x10001) mmap(&(0x7f0000000000/0x13000)=nil, 0x13000, 0x3, 0x10, r4, 0x0, 0x0) r5 = accept(r3, &(0x7f0000000080)=@data, &(0x7f00000000c0)=0xe) ioctl$FIOGETBMAP(r5, 0xc008667a, &(0x7f0000000100)=0xff) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) open(&(0x7f0000001640)='./file0\x00', 0x615, 0x0) truncate(&(0x7f0000000080)='./file0\x00', 0x0, 0x2000003) mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x40000802) swapctl$SWAP_ON(0x1, &(0x7f0000000000), 0x0) (async) swapctl$SWAP_ON(0x1, &(0x7f0000000000), 0x0) truncate(&(0x7f0000000140)='./file0\x00', 0x0, 0x8) (async) truncate(&(0x7f0000000140)='./file0\x00', 0x0, 0x8) 3.700377617s ago: executing program 4: shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000280)={&(0x7f0000000000)=@data, 0xe, &(0x7f0000000200)=[{&(0x7f0000000300)=""/222, 0xde}, {&(0x7f0000000400)=""/191, 0xbf}, {&(0x7f0000000a40)=""/4096, 0x1000}], 0x3, &(0x7f00000004c0)=""/168, 0xa8}, 0x800) setsockopt(r0, 0x0, 0x1, &(0x7f0000000a00)="8b589d9d", 0x4) bind(r1, &(0x7f0000000580)=@data="5db0a65e4b56212eea75139c7a32", 0xe) r2 = socket(0x10, 0x2, 0x0) fork() r3 = posix_spawn(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) compat_40_mount(&(0x7f0000000080)='tmpfs\x00', &(0x7f00000000c0)='.\x00', 0x0, &(0x7f00000002c0)="01") symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00') sendmsg$unix(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)=@abs={0x0, 0x0, 0x2}, 0x8, &(0x7f0000000380)}, 0x0) open(0x0, 0x0, 0x0) compat_40_mount(&(0x7f0000000140)='umap\x00', &(0x7f0000000040)='./file0\x00', 0x1000, &(0x7f0000000580)) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) chroot(&(0x7f0000000180)='./file1\x00') symlink(0x0, &(0x7f0000000240)='./file0\x00') r4 = socket$unix(0x1, 0x1, 0x0) ioctl$FIONWRITE(r4, 0x40046679, &(0x7f0000000000)) __wait450(r3, 0x0, 0x0, 0x0) ioctl$FIOSEEKHOLE(0xffffffffffffffff, 0xc118691d, 0x0) connect$inet(r2, &(0x7f0000000080)={0x10, 0x0}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$unix(r1, 0x0, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0x6000, 0xe03) r5 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) compat_40_mount(0x0, 0x0, 0x0, &(0x7f0000000140)="01") ioctl$FIONREAD(r5, 0xc0184603, &(0x7f0000000140)) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x5012, 0xffffffffffffffff, 0x0, 0x0) 3.695749788s ago: executing program 5: writev(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f0000000000)="0200b4e47f", 0x5}], 0x1) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) mknod(&(0x7f0000000300)='./file0\x00', 0x2000, 0x6da) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) unlink(0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0x6000, 0xe03) __mount50(&(0x7f00000002c0)='overlay\x00', &(0x7f0000000240)='.\x00', 0x0, &(0x7f0000000540), 0x0) open(&(0x7f0000000480)='./file0\x00', 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) modctl$MODCTL_LOAD(0x0, &(0x7f0000000140)={&(0x7f0000000040), 0x0, 0x0}) compat_40_mount(&(0x7f0000000180)='ext2fs\x00', &(0x7f00000003c0)='.\x00', 0x0, &(0x7f0000000140)) write(r2, 0x0, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) __fhopen40(&(0x7f0000000080)="9fc1f3c1d4800688ca51fcbe96071565fcbb9b1deb5d906df982de330cecec4a0fcb42aaad5d8030dbf1154e72e73d47a83d", 0x32, 0x10000) writev(r3, &(0x7f0000000040)=[{&(0x7f0000000000)="d2", 0x1}], 0x1) recvmmsg(r1, &(0x7f0000000300), 0x40000000000049e, 0x2, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) getgid() compat_50_quotactl(&(0x7f00000001c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0, &(0x7f00000004c0)="05fd65eb720c3fe754523cdefaaf1d05419761ffedba36b5feea5b3880078e8c3743590025e90fc4df066e8e32b6e5470b3ef68081ba9317c53eed7b66a7a78ac669438d2e042ebd536b7c81e2b5853b0ddba5069269e627855acd0e44292550d915212aa4c4f829d99c8468579317ae488ab7209375a23ee7b05240bf1514ba901082b314c4010177086bdb3802b1e2dfdd2497b3f268005b2a2c7ea9f6e32b71c468aaed3a967d80c4e5fd58d6") accept$inet6(r0, 0x0, 0x0) 3.078310592s ago: executing program 1: getsockopt$sock_timeval(0xffffffffffffffff, 0xffff, 0x0, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x40000802) r0 = open(&(0x7f0000000180)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x8000, 0x20) ioctl$FIOASYNC(r0, 0x80067409, &(0x7f0000000000)) r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0xffff, 0x0, 0x0, 0x0) ioctl$FIOASYNC(r1, 0x80017472, &(0x7f0000000100)) poll(&(0x7f0000000440)=[{}, {r0, 0x1}], 0x2, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket(0x1f, 0x5, 0x2) ptrace(0x0, 0x0, 0x0, 0x0) r5 = socket$inet6(0x18, 0x3, 0x0) r6 = open$dir(&(0x7f00000001c0)='./file0\x00', 0x6c85921a3b4f2a1a, 0x0) openat(r6, &(0x7f0000000080)='./file0\x00', 0x200, 0x0) sendto$inet6(r5, &(0x7f0000000000)="86", 0x1, 0xc, &(0x7f0000000040)={0x18, 0x3, 0x40000000}, 0xc) setsockopt$sock_int(r4, 0xffff, 0x0, 0x0, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) bind$unix(r7, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56) listen(r7, 0x0) connect$unix(r3, &(0x7f0000000140)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) fcntl$lock(r2, 0xa, 0x0) ioctl$FIOASYNC(0xffffffffffffffff, 0x80047401, &(0x7f0000000000)=0x5) modctl$MODCTL_LOAD(0x0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)}) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x8) mprotect(&(0x7f000049f000/0x4000)=nil, 0x4000, 0x0) r8 = socket(0x18, 0x1, 0x0) close(r8) socket(0x18, 0x2, 0x0) 2.44138317s ago: executing program 4: open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x0) r0 = socket(0x2, 0x2, 0x0) ioctl$FIOSEEKHOLE(r0, 0x80206916, &(0x7f0000000180)) mknod(0x0, 0x0, 0xa718) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) __fhstat50(&(0x7f0000000080)="8a30224c35db5a15f1f3ab41", 0xc, 0x0) __stat50(&(0x7f0000000100)='./file0\x00', &(0x7f0000000380)={0x0}) mknod(&(0x7f00000001c0)='./file0\x00', 0x6000, r1) r2 = open(&(0x7f0000000140)='./file0\x00', 0x800, 0x0) ioctl$FIOASYNC(r2, 0x40067408, &(0x7f0000000000)) compat_90_getvfsstat(&(0x7f0000001240), 0xfffffffffffffff2, 0x3) getsid(0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) compat_50___msgctl13$IPC_STAT(0x0, 0x2, &(0x7f0000000280)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100), 0xdffffffffefff7ff}}) __mount50(&(0x7f0000000000)='fdesc\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0) lchown(&(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffff) compat_40_mount(&(0x7f0000000380)='union\x00', &(0x7f0000000140)='./file0\x00', 0x3, &(0x7f00000001c0)) open(0x0, 0x0, 0x0) pathconf(&(0x7f0000000080)='./file0\x00', 0xa) compat_43_ocreat(&(0x7f0000000100)='./file0\x00', 0x0) __getfh30(0x0, 0x0, 0x0) symlinkat(&(0x7f0000000300)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000340)='./file0\x00') getsid(0x0) r3 = semget$private(0x0, 0x4000000009, 0x0) semop(r3, &(0x7f0000000500)=[{0x0, 0xb}, {}], 0x2) compat_50_____semctl13$IPC_RMID(r3, 0x0, 0x0) truncate(&(0x7f0000000140)='./file0\x00', 0x0, 0xffffffff) r4 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) readv(r4, &(0x7f0000000040)=[{&(0x7f0000000140)=""/87, 0xfffffe3f}], 0x1) 2.409318155s ago: executing program 5: pipe2(0x0, 0x0) ioctl$FIOASYNC(0xffffffffffffffff, 0xc0104306, 0x0) syz_usb_connect$uac1(0x0, 0x0, 0x0, 0x0) semop(0x0, &(0x7f0000000400)=[{0x0, 0x0, 0x1000}, {}, {0x0, 0xfff}, {0x0, 0x1, 0x800}, {0x0, 0xf0d8, 0x1000}], 0x5) 1.669089788s ago: executing program 1: r0 = socket(0x18, 0x1, 0x0) setsockopt(r0, 0x1000000029, 0x32, 0x0, 0x0) getsockopt(r0, 0x29, 0x3d, 0x0, 0x0) r1 = socket(0x11, 0x3, 0x0) ioctl$FIOSEEKHOLE(r1, 0xc1206953, &(0x7f0000000180)=0x8000000000000036) fork() r2 = socket$inet6(0x18, 0x2, 0x0) sendto$inet6(r2, &(0x7f0000000000)="82", 0x2000, 0x2, &(0x7f0000000040)={0x18, 0x3}, 0x1c) symlink(&(0x7f0000000200)='.\x00', &(0x7f00000003c0)='./file0\x00') compat_50___msgctl13$IPC_STAT(0x0, 0x2, &(0x7f0000000280)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100), 0xdffffffffffff7ff}}) __mount50(&(0x7f00000002c0)='overlay\x00', &(0x7f0000000040)='.\x00', 0x0, &(0x7f0000000540), 0x0) lchown(&(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffff) compat_40_mount(&(0x7f0000000380)='union\x00', &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f00000001c0)) unlink(&(0x7f0000000080)='./file0\x00') mkdir(&(0x7f0000000080)='./file0\x00', 0x0) rmdir(&(0x7f0000000000)='./file0\x00') 822.763056ms ago: executing program 0: r0 = socket(0x2, 0x2, 0x0) ioctl$FIOSEEKHOLE(r0, 0xc0206912, &(0x7f0000000180)) compat_40_mount(0x0, 0x0, 0x400000, &(0x7f0000000180)) mknod(&(0x7f0000000000)='./file1\x00', 0x2000, 0xa718) r1 = open$dir(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0) ioctl$OFIOGETBMAP(r1, 0x8014447e, &(0x7f0000000100)) 788.205191ms ago: executing program 2: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) compat_50___msgctl13$IPC_STAT(0x0, 0x2, &(0x7f00000003c0)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)}}) lchown(&(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffff) __mount50(&(0x7f0000000000)='fdesc\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0) compat_40_mount(&(0x7f0000000000)='null\x00', &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f00000001c0)) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIOGETOWN(r0, 0x2000427e, 0x0) 750.737857ms ago: executing program 3: ioctl$FIOSEEKHOLE(0xffffffffffffffff, 0x80206916, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) accept$inet6(0xffffffffffffff9c, 0x0, &(0x7f00000001c0)) (async) r0 = accept$inet6(0xffffffffffffff9c, 0x0, &(0x7f00000001c0)) r1 = getpgid(0x0) socket(0x18, 0x1, 0x0) (async) r2 = socket(0x18, 0x1, 0x0) setsockopt(r2, 0x1000000029, 0xc, &(0x7f0000000040)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) connect$unix(r2, &(0x7f0000000240)=@abs={0x0, 0x0, 0x0}, 0x8) (async) connect$unix(r2, &(0x7f0000000240)=@abs={0x0, 0x0, 0x0}, 0x8) fcntl$lock(r0, 0x7, &(0x7f0000000200)={0x1, 0x2, 0x1, 0xffffffffffffff51, r1}) (async) fcntl$lock(r0, 0x7, &(0x7f0000000200)={0x1, 0x2, 0x1, 0xffffffffffffff51, r1}) socket(0x18, 0x1, 0x0) (async) r3 = socket(0x18, 0x1, 0x0) setsockopt(r3, 0x1000000029, 0x3d, &(0x7f0000000180)="5ab7776a", 0x4) r4 = open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x4) truncate(&(0x7f0000000000)='./file0\x00', 0x0, 0x10001) mmap(&(0x7f0000000000/0x13000)=nil, 0x13000, 0x3, 0x10, r4, 0x0, 0x0) r5 = accept(r3, &(0x7f0000000080)=@data, &(0x7f00000000c0)=0xe) ioctl$FIOGETBMAP(r5, 0xc008667a, &(0x7f0000000100)=0xff) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) open(&(0x7f0000001640)='./file0\x00', 0x615, 0x0) truncate(&(0x7f0000000080)='./file0\x00', 0x0, 0x2000003) mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x40000802) swapctl$SWAP_ON(0x1, &(0x7f0000000000), 0x0) (async) swapctl$SWAP_ON(0x1, &(0x7f0000000000), 0x0) truncate(&(0x7f0000000140)='./file0\x00', 0x0, 0x8) (async) truncate(&(0x7f0000000140)='./file0\x00', 0x0, 0x8) 0s ago: executing program 0: shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000280)={&(0x7f0000000000)=@data, 0xe, &(0x7f0000000200)=[{&(0x7f0000000300)=""/222, 0xde}, {&(0x7f0000000400)=""/191, 0xbf}, {&(0x7f0000000a40)=""/4096, 0x1000}, {&(0x7f0000000100)=""/4, 0x4}], 0x4, &(0x7f00000004c0)=""/168, 0xa8}, 0x800) setsockopt(r0, 0x0, 0x1, &(0x7f0000000a00)="8b589d9d", 0x4) bind(r1, &(0x7f0000000580)=@data="5db0a65e4b56212eea75139c7a32", 0xe) r2 = socket(0x10, 0x2, 0x0) fork() r3 = posix_spawn(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) compat_40_mount(&(0x7f0000000080)='tmpfs\x00', &(0x7f00000000c0)='.\x00', 0x0, &(0x7f00000002c0)="01") symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00') sendmsg$unix(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)=@abs={0x0, 0x0, 0x2}, 0x8, &(0x7f0000000380)}, 0x0) open(0x0, 0x0, 0x200) compat_40_mount(&(0x7f0000000140)='umap\x00', &(0x7f0000000040)='./file0\x00', 0x1000, &(0x7f0000000580)) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) chroot(&(0x7f0000000180)='./file1\x00') symlink(0x0, &(0x7f0000000240)='./file0\x00') r4 = socket$unix(0x1, 0x1, 0x0) ioctl$FIONWRITE(r4, 0x40046679, &(0x7f0000000000)) __wait450(r3, 0x0, 0x0, 0x0) ioctl$FIOSEEKHOLE(0xffffffffffffffff, 0xc118691d, 0x0) connect$inet(r2, &(0x7f0000000080)={0x10, 0x0}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$unix(r1, 0x0, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0x6000, 0xe03) r5 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) compat_40_mount(0x0, 0x0, 0x0, &(0x7f0000000140)="01") ioctl$FIONREAD(r5, 0xc0184603, &(0x7f0000000140)) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x5012, 0xffffffffffffffff, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.25' (ED25519) to the list of known hosts. 2024/06/23 15:35:13 fuzzer started 2024/06/23 15:35:13 dialing manager at 10.128.0.163:30040 2024/06/23 15:35:13 starting 6 executor processes [ 50.9885516] tap2: detached [ 52.9285437] vrelel: missing VOP_CLOSE(): vnode 0xfffff28013b32940 flags 0x14 [ 52.9385417] tag VT_UFS(1) type VCHR(4) mount 0xfffff280121d2000 typedata 0xfffff28013605c40 [ 52.9485416] usecount 1 writecount 0 holdcount 0 [ 52.9485416] size 0 writesize 0 numoutput 0 [ 52.9585411] data 0xfffff280138eacd0 lock 0xfffff28013b32b00 [ 52.9585411] state LOADED key(0xfffff280121d2000 8) 29 fe 00 00 00 00 00 00 [ 52.9685508] lrulisthd 0xffffffff86b10110 [ 52.9685508] tag VT_UFS, ino 65065, on dev 168, 0 flags 0x0, nlink 1 [ 52.9785408] mode 020000, owner 0, group 0, size 0 [ 53.0185434] vrelel: missing VOP_CLOSE(): vnode 0xfffff28013b32940 flags 0x14 [ 53.0485475] tag VT_UFS(1) type VCHR(4) mount 0xfffff280121d2000 typedata 0xfffff28013605c40 [ 53.0585421] usecount 1 writecount 0 holdcount 0 [ 53.0685418] size 0 writesize 0 numoutput 0 [ 53.0685418] data 0xfffff280138eacd0 lock 0xfffff28013b32b00 [ 53.0785412] state LOADED key(0xfffff280121d2000 8) 29 fe 00 00 00 00 00 00 [ 53.0785412] lrulisthd 0xffffffff86b10110 [ 53.0885529] tag VT_UFS, ino 65065, on dev 168, 0 flags 0x2, nlink 0 [ 53.0885529] mode 020000, owner 0, group 0, size 0 [ 53.2585432] tap0: detached [ 56.7485510] tap1: detached [ 57.0185417] tap2: detached [ 57.4285422] tap5: detached [ 60.4785480] tap4: detached [ 62.5185428] tap0: detached [ 62.5985427] tap3: detached [ 64.5585417] WARNING: defaulted mmap() share type to MAP_SHARED (pid 496 command syz-executor.0) [ 64.6885383] uhub3: device problem, disabling port 1 [ 65.8185397] tap4: detached [ 66.3485541] tap5: detached [ 69.3785413] tap2: detached [ 69.5085389] tap1: detached [ 70.9885395] tap0: detached [ 71.4485509] tap3: detached [ 74.4485560] tap0: detached [ 75.8885464] tap1: detached [ 77.3085394] tap4: detached [ 79.0485496] tap5: detached [ 81.2085376] tap1: detached [ 83.9885457] tap0: detached [ 84.2485370] tap3: detached [ 86.6285447] tap4: detached [ 86.9885433] panic: pmap_get_physpage: out of memory [ 86.9885433] cpu0: Begin traceback... [ 87.0085249] vpanic() at netbsd:vpanic+0xc9d [ 87.0585234] panic() at netbsd:panic+0x1b3 [ 87.1085278] pmap_get_physpage() at netbsd:pmap_get_physpage+0x5a6 [ 87.1585243] kmsan_md_shadow_map_page() at netbsd:kmsan_md_shadow_map_page+0x209 [ 87.1985242] kmsan_shadow_map() at netbsd:kmsan_shadow_map+0x128 [ 87.2385233] pmap_growkernel() at netbsd:pmap_growkernel+0x59a [ 87.2885284] uvm_map_prepare() at netbsd:uvm_map_prepare+0x2033 [ 87.3285230] uvm_map() at netbsd:uvm_map+0x5f6 [ 87.3685227] kcov_allocbuf() at netbsd:kcov_allocbuf+0x2bf [ 87.4185236] kcov_fops_ioctl() at netbsd:kcov_fops_ioctl+0x1cf [ 87.4685256] sys_ioctl() at netbsd:sys_ioctl+0xd84 [ 87.5085243] syscall() at netbsd:syscall+0x576 [ 87.5185231] --- syscall (number 54) --- [ 87.5385234] netbsd:syscall+0x576: [ 87.5385234] cpu0: End traceback... [ 87.5385234] fatal breakpoint trap in supervisor mode [ 87.5511467] trap type 1 code 0 rip 0xffffffff8023687d cs 0x8 rflags 0x282 cr2 0x7067e2f60820 ilevel 0x6 rsp 0xfffff280c7ad7490 [ 87.5641151] curlwp 0xfffff280138edb40 pid 911.911 lowest kstack 0xfffff280c7ad02c0 Stopped in pid 911.911 (syz-executor.2) at netbsd:breakpoint+0x5: leave ? breakpoint() at netbsd:breakpoint+0x5 vpanic() at netbsd:vpanic+0xc9d panic() at netbsd:panic+0x1b3 pmap_get_physpage() at netbsd:pmap_get_physpage+0x5a6 kmsan_md_shadow_map_page() at netbsd:kmsan_md_shadow_map_page+0x209 kmsan_shadow_map() at netbsd:kmsan_shadow_map+0x128 pmap_growkernel() at netbsd:pmap_growkernel+0x59a uvm_map_prepare() at netbsd:uvm_map_prepare+0x2033 uvm_map() at netbsd:uvm_map+0x5f6 kcov_allocbuf() at netbsd:kcov_allocbuf+0x2bf kcov_fops_ioctl() at netbsd:kcov_fops_ioctl+0x1cf sys_ioctl() at netbsd:sys_ioctl+0xd84 syscall() at netbsd:syscall+0x576 --- syscall (number 54) --- netbsd:syscall+0x576: Panic string: pmap_get_physpage: out of memory PID LID S CPU FLAGS STRUCT LWP * NAME WAIT 916 916 2 0 0 fffff280134eb9c0 syz-executor.1 1459 1459 2 1 0 fffff28013a5eb80 syz-executor.5 917 1824 3 0 180 fffff280134eb140 syz-executor.0 parked 917 917 2 1 10000000 fffff280135f8180 syz-executor.0 912 912 2 1 0 fffff2801376d640 ifconfig 911 > 911 7 0 40000 fffff280138edb40 syz-executor.2 913 913 2 0 10000000 fffff280138ed700 syz-executor.3 907 923 2 0 0 fffff28013a5e300 syz-executor.1 907 926 2 0 0 fffff280136a1600 syz-executor.1 907 907 2 0 10000000 fffff280134d5980 syz-executor.1 906 906 3 0 40180 fffff28013b2a040 syz-executor.5 wait 905 905 3 1 40180 fffff280137f1ac0 syz-executor.4 wait 898 898 2 1 140 fffff280137f1680 syz-executor.3 1725 1725 2 1 140 fffff28013b16780 syz-executor.0 758 758 2 1 140 fffff28013b2a8c0 syz-executor.1 652 652 3 0 180 fffff28013a5e740 syz-executor.2 parked 1608 1608 3 0 180 fffff2801376da80 syz-executor.0 parked 1742 1742 3 1 180 fffff280135f85c0 syz-executor.5 parked 971 971 3 0 180 fffff280134eb580 syz-executor.2 parked 1350 1350 3 0 180 fffff280138ed2c0 syz-executor.1 parked 1598 1598 3 1 180 fffff28013b2a480 syz-executor.3 parked 1593 1593 3 0 180 fffff280136a1a40 syz-executor.4 parked 1535 1535 3 0 180 fffff280137f1240 syz-executor.3 parked 1080 1479 3 0 180 fffff2801376d200 syz-fuzzer wait 1080 1108 3 1 180 fffff280136a11c0 syz-fuzzer wait 1080 1204 3 1 180 fffff280135f8a00 syz-fuzzer parked 1080 449 3 1 180 fffff280134d5540 syz-fuzzer wait 1080 1239 3 1 180 fffff280134d5100 syz-fuzzer parked 1080 1198 3 1 180 fffff28012cdd500 syz-fuzzer wait 1080 1120 3 1 180 fffff28012cdd940 syz-fuzzer wait 1080 1238 3 0 180 fffff28012cdd0c0 syz-fuzzer parked 1080 951 3 0 180 fffff28012c00900 syz-fuzzer parked 1080 1224 3 0 180 fffff28012c004c0 syz-fuzzer wait 1080 1231 3 0 180 fffff28012c00080 syz-fuzzer kqueue 1080 1233 2 1 140 fffff2801230fb00 syz-fuzzer 1080 1080 3 0 180 fffff2801230f6c0 syz-fuzzer parked 1237 1237 3 0 180 fffff2801230f280 sshd select 1222 1222 3 0 180 fffff2801233c700 getty nanoslp 1082 1082 3 1 180 fffff2801233c2c0 getty nanoslp 1184 1184 3 1 180 fffff28012275ac0 getty nanoslp 1193 1193 3 0 180 fffff280121d7200 getty ttyraw 876 876 3 0 180 fffff28012551780 sshd select 1088 1088 3 1 180 fffff28012bd18c0 powerd kqueue 699 699 3 1 180 fffff28012521300 syslogd kqueue 746 746 3 0 180 fffff28012bd1480 dhcpcd poll 466 466 3 0 180 fffff28012bd1040 dhcpcd poll 745 745 3 1 180 fffff28012551bc0 dhcpcd poll 602 602 3 0 180 fffff2801233cb40 dhcpcd poll 292 292 3 1 180 fffff28012551340 dhcpcd poll 485 485 3 0 180 fffff28012521740 dhcpcd poll 291 291 3 1 180 fffff28012521b80 dhcpcd poll 1 1 3 0 180 fffff28011e53100 init wait 0 1100 5 0 200 fffff28013b16340 (zombie) 0 1325 3 0 200 fffff28013b16bc0 poolthread pooljob 0 872 3 0 200 fffff280121d7640 physiod physiod 0 195 2 0 200 fffff28012275680 pooldrain 0 196 3 0 200 fffff28012275240 ioflush syncer 0 > 194 7 1 200 fffff280121d7a80 pgdaemon 0 167 3 1 200 fffff280121a7a40 usb7 usbevt 0 172 3 1 200 fffff280121a7600 usb6 usbevt 0 170 3 1 200 fffff280121a71c0 usb5 usbevt 0 168 3 1 200 fffff2801211ba00 usb4 usbevt 0 166 3 1 200 fffff2801211b5c0 usb3 usbevt 0 165 3 1 200 fffff2801211b180 usb2 usbevt 0 31 3 1 200 fffff2801206b9c0 usb1 usbevt 0 63 3 1 200 fffff2801206b580 usb0 usbevt 0 126 3 1 200 fffff2801206b140 usbtask-dr usbtsk 0 125 3 1 200 fffff28011e53980 usbtask-hc usbtsk 0 124 3 0 200 fffff280103d3b00 swwreboot swwreboot 0 123 3 0 200 fffff28011e53540 npfgc0 npfgcw 0 122 3 1 200 fffff28011e48940 rt_free rt_free 0 121 3 1 200 fffff28011e48500 unpgc unpgc 0 120 3 0 200 fffff28011e480c0 key_timehandler key_timehandler 0 119 3 1 200 fffff28011e41900 icmp6_wqinput/1 icmp6_wqinput 0 118 3 0 200 fffff28011e414c0 icmp6_wqinput/0 icmp6_wqinput 0 117 3 0 200 fffff28011e41080 nd6_timer nd6_timer 0 116 3 1 200 fffff28011cccbc0 carp6_wqinput/1 carp6_wqinput 0 115 3 0 200 fffff28011ccc780 carp6_wqinput/0 carp6_wqinput 0 114 3 1 200 fffff28011ccc340 carp_wqinput/1 carp_wqinput 0 113 3 0 200 fffff28011ccd8c0 carp_wqinput/0 carp_wqinput 0 112 3 1 200 fffff28011ccd480 icmp_wqinput/1 icmp_wqinput 0 111 3 0 200 fffff28011cc9b80 icmp_wqinput/0 icmp_wqinput 0 110 3 0 200 fffff28011cc9740 rt_timer rt_timer 0 109 3 0 200 fffff28011ccd040 vmem_rehash vmem_rehash 0 100 3 0 200 fffff28011cc9300 entbutler entropy 0 99 3 0 200 fffff280117c0b40 viomb balloon 0 98 3 1 200 fffff280117c0700 vioif0_txrx/1 vioif0_txrx 0 97 3 0 200 fffff280117c02c0 vioif0_txrx/0 vioif0_txrx 0 30 3 0 200 fffff280103d36c0 scsibus0 sccomp 0 29 3 0 200 fffff280103d3280 pms0 pmsreset 0 28 3 1 200 fffff280103baac0 xcall/1 xcall 0 27 1 1 200 fffff280103ba680 softser/1 0 26 1 1 200 fffff280103ba240 softclk/1 0 25 1 1 200 fffff280103b7a80 softbio/1 0 24 1 1 200 fffff280103b7640 softnet/1 0 23 1 1 201 fffff280103b7200 idle/1 0 22 3 0 200 fffff2800f1d2a40 lnxsyswq lnxsyswq 0 21 3 0 200 fffff2800f1d2600 lnxubdwq lnxubdwq 0 20 3 0 200 fffff2800f1d21c0 lnxpwrwq lnxpwrwq 0 19 3 0 200 fffff2800f1d1a00 lnxlngwq lnxlngwq 0 18 3 0 200 fffff2800f1d15c0 lnxhipwq lnxhipwq 0 17 3 0 200 fffff2800f1d1180 lnxrcugc lnxrcugc 0 16 3 0 200 fffff2800f1ca9c0 sysmon smtaskq 0 15 3 0 200 fffff2800f1ca580 pmfsuspend pmfsuspend 0 14 3 0 200 fffff2800f1ca140 pmfevent pmfevent 0 13 3 0 200 fffff2800f1c8980 sopendfree sopendfr 0 12 3 0 200 fffff2800f1c8540 ifwdog ifwdog 0 11 3 0 200 fffff2800f1c8100 iflnkst iflnkst 0 10 3 0 200 fffff2800f1be940 nfssilly nfssilly 0 9 3 1 200 fffff2800f1be500 pooldisp pooldisp 0 8 2 1 200 fffff2800f1be0c0 modunload 0 7 3 0 200 fffff2800ebc9900 xcall/0 xcall 0 6 1 0 200 fffff2800ebc94c0 softser/0 0 5 1 0 200 fffff2800ebc9080 softclk/0 0 4 1 0 200 fffff2800ebc88c0 softbio/0 0 3 1 0 200 fffff2800ebc8480 softnet/0 0 2 1 0 201 fffff2800ebc8040 idle/0 0 0 2 1 240 ffffffff86a6fa40 swapper [Locks tracked through LWPs] ****** LWP 1459.1459 (syz-executor.5) @ 0xfffff28013a5eb80, l_stat=2 *** Locks held: * Lock 0 (initialized at netbsd:fork1+0x972) lock address : fffff28013bc5590 type : sleep/adaptive initialized : netbsd:fork1+0x972 shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 0 relevant cpu : 1 last held: 0 relevant lwp : 0xfffff28013a5eb80 last held: 0xfffff28013a5eb80 last locked* : netbsd:execve_loadvm+0x708 unlocked : 0 owner/count : 0xfffff28013a5eb80 flags : 0x0000000000000004 Turnstile: no active turnstile for this lock. *** Locks wanted: none ****** LWP 911.911 (syz-executor.2) @ 0xfffff280138edb40, l_stat=7 *** Locks held: * Lock 0 (initialized at netbsd:kcov_open+0x10d) lock address : fffff28013c87100 type : sleep/adaptive initialized : netbsd:kcov_open+0x10d shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 0 relevant cpu : 0 last held: 1 relevant lwp : 0xfffff280138edb40 last held: 0xfffff280138edb40 last locked* : netbsd:kcov_fops_ioctl+0xa0 unlocked : 0 owner field : 0xfffff280138edb40 wait/spin: 0/0 Turnstile: no active turnstile for this lock. * Lock 1 (initialized at netbsd:uvm_map_setup+0x2a0) lock address : netbsd:kernel_map_store+0x8 type : sleep/adaptive initialized : netbsd:uvm_map_setup+0x2a0 shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 0 relevant cpu : 0 last held: 1 relevant lwp : 0xfffff280138edb40 last held: 0xfffff280138edb40 last locked* : netbsd:uvm_map_prepare+0xd7f unlocked : netbsd:uvm_fault_lower_enter+0x2071 owner/count : 0xfffff280138edb40 flags : 0x0000000000000004 Turnstile: no active turnstile for this lock. * Lock 2 (initialized at netbsd:pmap_bootstrap+0x20c) lock address : netbsd:kernel_pmap_store+0x180 type : sleep/adaptive initialized : netbsd:pmap_bootstrap+0x20c shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 0 relevant cpu : 0 last held: 1 relevant lwp : 0xfffff280138edb40 last held: 0xfffff280138edb40 last locked* : netbsd:pmap_growkernel+0x98 unlocked : netbsd:pmap_enter_ma+0x6f3f owner field : 0xfffff280138edb40 wait/spin: 0/0 Turnstile: no active turnstile for this lock. *** Locks wanted: none ****** LWP 913.913 (syz-executor.3) @ 0xfffff280138ed700, l_stat=2 *** Locks held: * Lock 0 (initialized at netbsd:fork1+0x972) lock address : fffff28013bae890 type : sleep/adaptive initialized : netbsd:fork1+0x972 shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 0 relevant cpu : 0 last held: 1 relevant lwp : 0xfffff280138ed700 last held: 0xfffff280138ed700 last locked* : netbsd:exit1+0xac2 unlocked : 0 owner/count : 0xfffff280138ed700 flags : 0x0000000000000004 Turnstile: no active turnstile for this lock. * Lock 1 (initialized at netbsd:amap_ctor+0x89) lock address : fffff28013bbc180 type : sleep/adaptive initialized : netbsd:amap_ctor+0x89 shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 0 relevant cpu : 0 last held: 1 relevant lwp : 0xfffff280138ed700 last held: 0xfffff280138ed700 last locked* : netbsd:amap_unref+0x96 unlocked : netbsd:uvm_fault_unwire_locked+0xc57 owner/count : 0xfffff280138ed700 flags : 0x0000000000000004 Turnstile: no active turnstile for this lock. *** Locks wanted: * Lock 0 (initialized at netbsd:module_hook_init+0x43) lock address : netbsd:module_hook type : sleep/adaptive initialized : netbsd:module_hook_init+0x43 shared holds : 0 exclusive: 0 shares wanted: 0 exclusive: 0 relevant cpu : 0 last held: 0 relevant lwp : 0xfffff280138ed700 last held: 000000000000000000 last locked : 0 unlocked* : 0 owner field : 000000000000000000 wait/spin: 0/0 Turnstile: no active turnstile for this lock. ****** LWP 466.466 (dhcpcd) @ 0xfffff28012bd1040, l_stat=3 *** Locks held: none *** Locks wanted: * Lock 0 (initialized at netbsd:module_hook_init+0x43) lock address : netbsd:module_hook type : sleep/adaptive initialized : netbsd:module_hook_init+0x43 shared holds : 0 exclusive: 0 shares wanted: 0 exclusive: 0 relevant cpu : 0 last held: 0 relevant lwp : 0xfffff28012bd1040 last held: 000000000000000000 last locked : 0 unlocked* : 0 owner field : 000000000000000000 wait/spin: 0/0 Turnstile: no active turnstile for this lock. ****** LWP 745.745 (dhcpcd) @ 0xfffff28012551bc0, l_stat=3 *** Locks held: none *** Locks wanted: * Lock 0 (initialized at netbsd:module_hook_init+0x43) lock address : netbsd:module_hook type : sleep/adaptive initialized : netbsd:module_hook_init+0x43 shared holds : 0 exclusive: 0 shares wanted: 0 exclusive: 0 relevant cpu : 1 last held: 0 relevant lwp : 0xfffff28012551bc0 last held: 000000000000000000 last locked : 0 unlocked* : 0 owner field : 000000000000000000 wait/spin: 0/0 Turnstile: no active turnstile for this lock. ****** LWP 485.485 (dhcpcd) @ 0xfffff28012521740, l_stat=3 *** Locks held: none *** Locks wanted: * Lock 0 (initialized at netbsd:module_hook_init+0x43) lock address : netbsd:module_hook type : sleep/adaptive initialized : netbsd:module_hook_init+0x43 shared holds : 0 exclusive: 0 shares wanted: 0 exclusive: 0 relevant cpu : 0 last held: 0 relevant lwp : 0xfffff28012521740 last held: 000000000000000000 last locked : 0 unlocked* : 0 owner field : 000000000000000000 wait/spin: 0/0 Turnstile: no active turnstile for this lock. ****** LWP 291.291 (dhcpcd) @ 0xfffff28012521b80, l_stat=3 *** Locks held: none *** Locks wanted: * Lock 0 (initialized at netbsd:module_hook_init+0x43) lock address : netbsd:module_hook type : sleep/adaptive initialized : netbsd:module_hook_init+0x43 shared holds : 0 exclusive: 0 shares wanted: 0 exclusive: 0 relevant cpu : 1 last held: 0 relevant lwp : 0xfffff28012521b80 last held: 000000000000000000 last locked : 0 unlocked* : 0 owner field : 000000000000000000 wait/spin: 0/0 Turnstile: no active turnstile for this lock. ****** LWP 0.194 (pgdaemon) @ 0xfffff280121d7a80, l_stat=7 *** Locks held: * Lock 0 (initialized at netbsd:uvm_obj_init+0x88) lock address : fffff2801228f300 type : sleep/adaptive initialized : netbsd:uvm_obj_init+0x88 shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 0 relevant cpu : 1 last held: 1 relevant lwp : 0xfffff280121d7a80 last held: 0xfffff280121d7a80 last locked* : netbsd:uvmpd_trylockowner+0x12c unlocked : netbsd:uvmpdpol_balancequeue+0x1031 owner/count : 0xfffff280121d7a80 flags : 0x0000000000000004 Turnstile: no active turnstile for this lock. * Lock 1 (initialized at netbsd:uvmpdpol_init+0x3b) lock address : netbsd:pdpol_state type : sleep/adaptive initialized : netbsd:uvmpdpol_init+0x3b shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 0 relevant cpu : 1 last held: 1 relevant lwp : 0xfffff280121d7a80 last held: 0xfffff280121d7a80 last locked* : netbsd:uvmpdpol_balancequeue+0xa68 unlocked : netbsd:uvmpdpol_balancequeue+0xa25 owner field : 000000000000000000 wait/spin: 0/0 Turnstile: no active turnstile for this lock. *** Locks wanted: none ****** LWP 0.26 (softclk/1) @ 0xfffff280103ba240, l_stat=1 *** Locks held: none *** Locks wanted: * Lock 0 (initialized at netbsd:module_hook_init+0x43) lock address : netbsd:module_hook type : sleep/adaptive initialized : netbsd:module_hook_init+0x43 shared holds : 0 exclusive: 0 shares wanted: 0 exclusive: 0 relevant cpu : 1 last held: 0 relevant lwp : 0xfffff280103ba240 last held: 000000000000000000 last locked : 0 unlocked* : 0 owner field : 000000000000000000 wait/spin: 0/0 Turnstile: no active turnstile for this lock. ****** LWP 0.11 (iflnkst) @ 0xfffff2800f1c8100, l_stat=3 *** Locks held: none *** Locks wanted: * Lock 0 (initialized at netbsd:module_hook_init+0x43) lock address : netbsd:module_hook type : sleep/adaptive initialized : netbsd:module_hook_init+0x43 shared holds : 0 exclusive: 0 shares wanted: 0 exclusive: 0 relevant cpu : 0 last held: 0 relevant lwp : 0xfffff2800f1c8100 last held: 000000000000000000 last locked : 0 unlocked* : 0 owner field : 000000000000000000 wait/spin: 0/0 Turnstile: no active turnstile for this lock. ****** LWP 0.5 (softclk/0) @ 0xfffff2800ebc9080, l_stat=1 *** Locks held: none *** Locks wanted: * Lock 0 (initialized at netbsd:module_hook_init+0x43) lock address : netbsd:module_hook type : sleep/adaptive initialized : netbsd:module_hook_init+0x43 shared holds : 0 exclusive: 0 shares wanted: 0 exclusive: 0 relevant cpu : 0 last held: 0 relevant lwp : 0xfffff2800ebc9080 last held: 000000000000000000 last locked : 0 unlocked* : 0 owner field : 000000000000000000 wait/spin: 0/0 Turnstile: no active turnstile for this lock. ****** LWP 0.0 (swapper) @ 0xffffffff86a6fa40, l_stat=2 *** Locks held: none *** Locks wanted: * Lock 0 (initialized at netbsd:module_hook_init+0x43) lock address : netbsd:module_hook type : sleep/adaptive initialized : netbsd:module_hook_init+0x43 shared holds : 0 exclusive: 0 shares wanted: 0 exclusive: 0 relevant cpu : 1 last held: 0 relevant lwp : 0xffffffff86a6fa40 last held: 000000000000000000 last locked : 0 unlocked* : 0 owner field : 000000000000000000 wait/spin: 0/0 Turnstile: no active turnstile for this lock. [Locks tracked through CPUs] ******* Locks held on cpu0: * Lock 0 (initialized at netbsd:kprintf_init+0xcb) lock address : netbsd:kprintf_mtx type : spin initialized : netbsd:kprintf_init+0xcb shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 0 relevant cpu : 0 last held: 0 relevant lwp : 0xfffff280138edb40 last held: 0xfffff280138edb40 last locked* : netbsd:vpanic+0x624 unlocked : netbsd:aprint_normal_dev+0x504 owner field : 0x0000000000000800 wait/spin: 0/1 PAGE FLAG PQ UOBJECT UANON 0xfffff28000017180 0001 00000000 0x0 0x0 0xfffff28000017200 0041 00000000 0x0 0x0 0xfffff28000017280 0041 00000000 0x0 0x0 0xfffff28000017300 0041 00000000 0x0 0x0 0xfffff28000017380 0041 00000000 0x0 0x0 0xfffff28000017400 0041 00000000 0x0 0x0 0xfffff28000017480 0041 00000000 0x0 0x0 0xfffff28000017500 0041 00000000 0x0 0x0 0xfffff28000017580 0041 00000000 0x0 0x0 0xfffff28000017600 0041 00000000 0x0 0x0 0xfffff28000017680 0041 00000000 0x0 0x0 0xfffff28000017700 0041 00000000 0x0 0x0 0xfffff28000017780 0041 00000000 0x0 0x0 0xfffff28000017800 0041 00000000 0x0 0x0 0xfffff28000017880 0041 00000000 0x0 0x0 0xfffff28000017900 0041 00000000 0x0 0x0 0xfffff28000017980 0041 00000000 0x0 0x0 0xfffff28000017a00 0041 00000000 0x0 0x0 0xfffff28000017a80 0041 00000000 0x0 0x0 0xfffff28000017b00 0041 00000000 0x0 0x0 0xfffff28000017b80 0041 00000000 0x0 0x0 0xfffff28000017c00 0041 00000000 0x0 0x0 0xfffff28000017c80 0041 00000000 0x0 0x0 0xfffff28000017d00 0041 00000000 0x0 0x0 0xfffff28000017d80 0041 00000000 0x0 0x0 0xfffff28000017e00 0041 00000000 0x0 0x0 0xfffff28000017e80 0041 00000000 0x0 0x0 0xfffff28000017f00 0041 00000000 0x0 0x0 0xfffff28000017f80 0041 00000000 0x0 0x0 0xfffff28000018000 0041 00000000 0x0 0x0 0xfffff28000018080 0041 00000000 0x0 0x0 0xfffff28000018100 0041 00000000 0x0 0x0 0xfffff28000018180 0041 00000000 0x0 0x0 0xfffff28000018200 0041 00000000 0x0 0x0 0xfffff28000018280 0041 00000000 0x0 0x0 0xfffff28000018300 0041 00000000 0x0 0x0 0xfffff28000018380 0041 00000000 0x0 0x0 0xfffff28000018400 0041 00000000 0x0 0x0 0xfffff28000018480 0041 00000000 0x0 0x0 0xfffff28000018500 0041 00000000 0x0 0x0 0xfffff28000018580 0041 00000000 0x0 0x0 0xfffff28000018600 0041 00000000 0x0 0x0 0xfffff28000018680 0041 00000000 0x0 0x0 0xfffff28000018700 0041 00000000 0x0 0x0 0xfffff28000018780 0041 00000000 0x0 0x0 0xfffff28000018800 0041 00000000 0x0 0x0 0xfffff28000018880 0041 00000000 0x0 0x0 0xfffff28000018900 0041 00000000 0x0 0x0 0xfffff28000018980 0041 00000000 0x0 0x0 0xfffff28000018a00 0041 00000000 0x0 0x0 0xfffff28000018a80 0041 00000000 0x0 0x0 0xfffff28000018b00 0041 00000000 0x0 0x0 0xfffff28000018b80 0041 00000000 0x0 0x0 0xfffff28000018c00 0041 00000000 0x0 0x0 0xfffff28000018c80 0041 00000000 0x0 0x0 0xfffff28000018d00 0041 00000000 0x0 0x0 0xfffff28000018d80 0041 00000000 0x0 0x0 0xfffff28000018e00 0041 00000000 0x0 0x0 0xfffff28000018e80 0041 00000000 0x0 0x0 0xfffff28000018f00 0041 00000000 0x0 0x0 0xfffff28000018f80 0041 00000000 0x0 0x0 0xfffff28000019000 0041 00000000 0x0 0x0 0xfffff28000019080 0041 00000000 0x0 0x0 0xfffff28000019100 0041 00000000 0x0 0x0 0xfffff28000019180 0041 00000000 0x0 0x0 0xfffff28000019200 0041 00000000 0x0 0x0 0xfffff28000019280 0041 00000000 0x0 0x0 0xfffff28000019300 0041 00000000 0x0 0x0 0xfffff28000019380 0041 00000000 0x0 0x0 0xfffff28000019400 0041 00000000 0x0 0x0 0xfffff28000019480 0041 00000000 0x0 0x0 0xfffff28000019500 0041 00000000 0x0 0x0 0xfffff28000019580 0041 00000000 0x0 0x0 0xfffff28000019600 0041 00000000 0x0 0x0 0xfffff28000019680 0041 00000000 0x0 0x0 0xfffff28000019700 0041 00000000 0x0 0x0 0xfffff28000019780 0041 00000000 0x0 0x0 0xfffff28000019800 0041 00000000 0x0 0x0 0xfffff28000019880 0041 00000000 0x0 0x0 0xfffff28000019900 0041 00000000 0x0 0x0 0xfffff28000019980 0041 00000000 0x0 0x0 0xfffff28000019a00 0041 00000000 0x0 0x0 0xfffff28000019a80 0041 00000000 0x0 0x0 0xfffff28000019b00 0041 00000000 0x0 0x0 0xfffff28000019b80 0041 00000000 0x0 0x0 0xfffff28000019c00 0041 00000000 0x0 0x0 0xfffff28000019c80 0041 00000000 0x0 0x0 0xfffff28000019d00 0041 00000000 0x0 0x0 0xfffff28000019d80 0041 00000000 0x0 0x0 0xfffff28000019e00 0041 00000000 0x0 0x0 0xfffff28000019e80 0041 00000000 0x0 0x0 0xfffff28000019f00 0041 00000000 0x0 0x0 0xfffff28000019f80 0041 00000000 0x0 0x0 0xfffff2800001a000 0041 00000000 0x0 0x0 0xfffff2800001a080 0041 00000000 0x0 0x0 0xfffff2800001a100 0041 00000000 0x0 0x0 0xfffff2800001a180 0041 00000000 0x0 0x0 0xfffff2800001a200 0041 00000000 0x0 0x0 0xfffff2800001a280 0041 00000000 0x0 0x0 0xfffff2800001a300 0041 00000000 0x0 0x0 0xfffff2800001a380 0041 00000000 0x0 0x0 0xfffff2800001a400 0041 00000000 0x0 0x0 0xfffff2800001a480 0041 00000000 0x0 0x0 0xfffff2800001a500 0041 00000000 0x0 0x0 0xfffff2800001a580 0041 00000000 0x0 0x0 0xfffff2800001a600 0041 00000000 0x0 0x0 0xfffff2800001a680 0041 00000000 0x0 0x0 0xfffff2800001a700 0041 00000000 0x0 0x0 0xfffff2800001a780 0041 00000000 0x0 0x0 0xfffff2800001a800 0041 00000000 0x0 0x0 0xfffff2800001a880 0041 00000000 0x0 0x0 0xfffff2800001a900 0041 00000000 0x0 0x0 0xfffff2800001a980 0041 00000000 0x0 0x0 0xfffff2800001aa00 0041 00000000 0x0 0x0 0xfffff2800001aa80 0041 00000000 0x0 0x0 0xfffff2800001ab00 0041 00000000 0x0 0x0 0xfffff2800001ab80 0041 00000000 0x0 0x0 0xfffff2800001ac00 0041 00000000 0x0 0x0 0xfffff2800001ac80 0041 00000000 0x0 0x0 0xfffff2800001ad00 0041 00000000 0x0 0x0 0xfffff2800001ad80 0041 00000000 0x0 0x0 0xfffff2800001ae00 0041 00000000 0x0 0x0 0xfffff2800001ae80 0041 00000000 0x0 0x0 0xfffff2800001af00 0041 00000000 0x0 0x0 0xfffff2800001af80 0041 00000000 0x0 0x0 0xfffff2800001b000 0041 00000000 0x0 0x0 0xfffff2800001b080 0041 00000000 0x0 0x0 0xfffff2800001b100 0041 00000000 0x0 0x0 0xfffff2800001b180 0041 00000000 0x0 0x0 0xfffff2800001b200 0041 00000000 0x0 0x0 0xfffff2800001b280 0041 00000000 0x0 0x0 0xfffff2800001b300 0041 00000000 0x0 0x0 0xfffff2800001b380 0041 00000000 0x0 0x0 0xfffff2800001b400 0041 00000000 0x0 0x0 0xfffff2800001b480 0041 00000000 0x0 0x0 0xfffff2800001b500 0041 00000000 0x0 0x0 0xfffff2800001b580 0041 00000000 0x0 0x0 0xfffff2800001b600 0041 00000000 0x0 0x0 0xfffff2800001b680 0041 00000000 0x0 0x0 0xfffff2800001b700 0041 00000000 0x0 0x0 0xfffff2800001b780 0041 00000000 0x0 0x0 0xfffff2800001b800 0041 00000000 0x0 0x0 0xfffff2800001b880 0041 00000000 0x0 0x0 0xfffff2800001b900 0041 00000000 0x0 0x0 0xfffff2800001b980 0041 00000000 0x0 0x0 0xfffff2800001ba00 0041 00000000 0x0 0x0 0xfffff2800001ba80 0041 00000000 0x0 0x0 0xfffff2800001bb00 0041 00000000 0x0 0x0 0xfffff2800001bb80 0041 00000000 0x0 0x0 0xfffff2800001bc00 0041 00000000 0x0 0x0 0xfffff2800001bc80 0041 00000000 0x0 0x0 0xfffff2800001bd00 0041 00000000 0x0 0x0 0xfffff2800001bd80 0041 00000000 0x0 0x0 0xfffff2800001be00 0041 00000000 0x0 0x0 0xfffff2800001be80 0041 00000000 0x0 0x0 0xfffff2800001bf00 0041 00000000 0x0 0x0 0xfffff2800001bf80 0041 00000000 0x0 0x0 0xfffff2800001c000 0041 00000000 0x0 0x0 0xfffff2800001c080 0041 00000000 0x0 0x0 0xfffff2800001c100 0041 00000000 0x0 0x0 0xfffff2800001c180 0041 00000000 0x0 0x0 0xfffff2800001c200 0041 00000000 0x0 0x0 0xfffff2800001c280 0041 00000000 0x0 0x0 0xfffff2800001c300 0041 00000000 0x0 0x0 0xfffff2800001c380 0041 00000000 0x0 0x0 0xfffff2800001c400 0041 00000000 0x0 0x0 0xfffff2800001c480 0041 00000000 0x0 0x0 0xfffff2800001c500 0041 00000000 0x0 0x0 0xfffff2800001c580 0041 00000000 0x0 0x0 0xfffff2800001c600 0041 00000000 0x0 0x0 0xfffff2800001c680 0041 00000000 0x0 0x0 0xfffff2800001c700 0041 00000000 0x0 0x0 0xfffff2800001c780 0041 00000000 0x0 0x0 0xfffff2800001c800 0041 00000000 0x0 0x0 0xfffff2800001c880 0041 00000000 0x0 0x0 0xfffff2800001c900 0041 00000000 0x0 0x0 0xfffff2800001c980 0041 00000000 0x0 0x0 0xfffff2800001ca00 0041 00000000 0x0 0x0 0xfffff2800001ca80 0041 00000000 0x0 0x0 0xfffff2800001cb00 0041 00000000 0x0 0x0 0xfffff2800001cb80 0041 00000000 0x0 0x0 0xfffff2800001cc00 0041 00000000 0x0 0x0 0xfffff2800001cc80 0041 00000000 0x0 0x0 0xfffff2800001cd00 0041 00000000 0x0 0x0 0xfffff2800001cd80 0041 00000000 0x0 0x0 0xfffff2800001ce00 0041 00000000 0x0 0x0 0xfffff2800001ce80 0041 00000000 0x0 0x0 0xfffff2800001cf00 0041 00000000 0x0 0x0 0xfffff2800001cf80 0001 00000000 0x0 0x0 0xfffff2800001d000 0001 00000000 0x0 0x0 0xfffff2800001d080 0001 00000000 0x0 0x0 0xfffff2800001d100 0001 00000000 0x0 0x0 0xfffff2800001d180 0001 00000000 0x0 0x0 0xfffff2800001d200 0001 00000000 0x0 0x0 0xfffff2800001d280 0001 00000000 0x0 0x0 0xfffff2800001d300 0001 00000000 0x0 0x0 0xfffff2800001d380 0001 00000000 0x0 0x0 0xfffff2800001d400 0001 00000000 0x0 0x0 0xfffff2800001d480 0001 00000000 0x0 0x0 0xfffff2800001d500 0001 00000000 0x0 0x0 0xfffff2800001d580 0001 00000000 0x0 0x0 0xfffff2800001d600 0001 00000000 0x0 0x0 0xfffff2800001d680 0001 00000000 0x0 0x0 0xfffff2800001d700 0001 00000000 0x0 0x0 0xfffff2800001d780 0001 00000000 0x0 0x0 0xfffff2800001d800 0001 00000000 0x0 0x0 0xfffff2800001d880 0001 00000000 0x0 0x0 0xfffff2800001d900 0001 00000000 0x0 0x0 0xfffff2800001d980 0001 00000000 0x0 0x0 0xfffff2800001da00 0001 00000000 0x0 0x0 0xfffff2800001da80 0001 00000000 0x0 0x0 0xfffff2800001db00 0001 00000000 0x0 0x0 0xfffff2800001db80 0001 00000000 0x0 0x0 0xfffff2800001dc00 0001 00000000 0x0 0x0 0xfffff2800001dc80 0001 00000000 0x0 0x0 0xfffff2800001dd00 0001 00000000 0x0 0x0 0xfffff2800001dd80 0001 00000000 0x0 0x0 0xfffff2800001de00 0001 00000000 0x0 0x0 0xfffff2800001de80 0001 00000000 0x0 0x0 0xfffff2800001df00 0001 00000000 0x0 0x0 0xfffff2800001df80 0001 00000000 0x0 0x0 0xfffff2800001e000 0001 00000000 0x0 0x0 0xfffff2800001e080 0001 00000000 0x0 0x0 0xfffff2800001e100 0001 00000000 0x0 0x0 0xfffff2800001e180 0001 00000000 0x0 0x0 0xfffff2800001e200 0001 00000000 0x0 0x0 0xfffff2800001e280 0001 00000000 0x0 0x0 0xfffff2800001e300 0001 00000000 0x0 0x0 0xfffff2800001e380 0001 00000000 0x0 0x0 0xfffff2800001e400 0001 00000000 0x0 0x0 0xfffff2800001e480 0001 00000000 0x0 0x0 0xfffff2800001e500 0001 00000000 0x0 0x0 0xfffff2800001e580 0001 00000000 0x0 0x0 0xfffff2800001e600 0001 00000000 0x0 0x0 0xfffff2800001e680 0001 00000000 0x0 0x0 0xfffff2800001e700 0001 00000000 0x0 0x0 0xfffff2800001e780 0001 00000000 0x0 0x0 0xfffff2800001e800 0001 00000000 0x0 0x0 0xfffff2800001e880 0001 00000000 0x0 0x0 0xfffff2800001e900 0001 00000000 0x0 0x0 0xfffff2800001e980 0001 00000000 0x0 0x0 0xfffff2800001ea00 0001 00000000 0x0 0x0 0xfffff2800001ea80 0001 00000000 0x0 0x0 0xfffff2800001eb00 0001 00000000 0x0 0x0 0xfffff2800001eb80 0001 00000000 0x0 0x0 0xfffff2800001ec00 0001 00000000 0x0 0x0 0xfffff2800001ec80 0001 00000000 0x0 0x0 0xfffff2800001ed00 0001 00000000 0x0 0x0 0xfffff2800001ed80 0001 00000000 0x0 0x0 0xfffff2800001ee00 0001 00000000 0x0 0x0 0xfffff2800001ee80 0001 00000000 0x0 0x0 0xfffff2800001ef00 0001 00000000 0x0 0x0 0xfffff2800001ef80 0001 00000000 0x0 0x0 0xfffff2800001f000 0001 00000000 0x0 0x0 0xfffff2800001f080 0001 00000000 0x0 0x0 0xfffff2800001f100 0001 00000000 0x0 0x0 0xfffff2800001f180 0001 00000000 0x0 0x0 0xfffff2800001f200 0001 00000000 0x0 0x0 0xfffff2800001f280 0001 00000000 0x0 0x0 0xfffff2800001f300 0001 00000000 0x0 0x0 0xfffff2800001f380 0001 00000000 0x0 0x0 0xfffff2800001f400 0001 00000000 0x0 0x0 0xfffff2800001f480 0001 00000000 0x0 0x0 0xfffff2800001f500 0001 00000000 0x0 0x0 0xfffff2800001f580 0001 00000000 0x0 0x0 0xfffff2800001f600 0001 00000000 0x0 0x0 0xfffff2800001f680 0001 00000000 0x0 0x0 0xfffff2800001f700 0001 00000000 0x0 0x0 0xfffff2800001f780 0001 00000000 0x0 0x0 0xfffff2800001f800 0001 00000000 0x0 0x0 0xfffff2800001f880 0001 00000000 0x0 0x0 0xfffff2800001f900 0001 00000000 0x0 0x0 0xfffff2800001f980 0001 00000000 0x0 0x0 0xfffff2800001fa00 0001 00000000 0x0 0x0 0xfffff2800001fa80 0001 00000000 0x0 0x0 0xfffff2800001fb00 0001 00000000 0x0 0x0 0xfffff2800001fb80 0001 00000000 0x0 0x0 0xfffff2800001fc00 0001 00000000 0x0 0x0 0xfffff2800001fc80 0001 00000000 0x0 0x0 0xfffff2800001fd00 0001 00000000 0x0 0x0 0xfffff2800001fd80 0001 00000000 0x0 0x0 0xfffff2800001fe00 0001 00000000 0x0 0x0 0xfffff2800001fe80 0001 00000000 0x0 0x0 0xfffff2800001ff00 0001 00000000 0x0 0x0 0xfffff2800001ff80 0001 00000000 0x0 0x0 0xfffff28000020000 0001 00000000 0x0 0x0 0xfffff28000020080 0001 00000000 0x0 0x0 0xfffff28000020100 0001 00000000 0x0 0x0 0xfffff28000020180 0001 00000000 0x0 0x0 0xfffff28000020200 0001 00000000 0x0 0x0 0xfffff28000020280 0001 00000000 0x0 0x0 0xfffff28000020300 0001 00000000 0x0 0x0 0xfffff28000020380 0001 00000000 0x0 0x0 0xfffff28000020400 0001 00000000 0x0 0x0 0xfffff28000020480 0001 00000000 0x0 0x0 0xfffff28000020500 0001 00000000 0x0 0x0 0xfffff28000020580 0001 00000000 0x0 0x0 0xfffff28000020600 0001 00000000 0x0 0x0 0xfffff28000020680 0001 00000000 0x0 0x0 0xfffff28000020700 0001 00000000 0x0 0x0 0xfffff28000020780 0001 00000000 0x0 0x0 0xfffff28000020800 0001 00000000 0x0 0x0 0xfffff28000020880 0001 00000000 0x0 0x0 0xfffff28000020900 0001 00000000 0x0 0x0 0xfffff28000020980 0001 00000000 0x0 0x0 0xfffff28000020a00 0001 00000000 0x0 0x0 0xfffff28000020a80 0001 00000000 0x0 0x0 0xfffff28000020b00 0001 00000000 0x0 0x0 0xfffff28000020b80 0001 00000000 0x0 0x0 0xfffff28000020c00 0001 00000000 0x0 0x0 0xfffff28000020c80 0001 00000000 0x0 0x0 0xfffff28000020d00 0001 00000000 0x0 0x0 0xfffff28000020d80 0001 00000000 0x0 0x0 0xfffff28000020e00 0001 00000000 0x0 0x0 0xfffff28000020e80 0001 00000000 0x0 0x0 0xfffff28000020f00 0001 00000000 0x0 0x0 0xfffff28000020f80 0001 00000000 0x0 0x0 0xfffff28000021000 0001 00000000 0x0 0x0 0xfffff28000021080 0001 00000000 0x0 0x0 0xfffff28000021100 0001 00000000 0x0 0x0 0xfffff28000021180 0001 00000000 0x0 0x0 0xfffff28000021200 0001 00000000 0x0 0x0 0xfffff28000021280 0001 00000000 0x0 0x0 0xfffff28000021300 0001 00000000 0x0 0x0 0xfffff28000021380 0001 00000000 0x0 0x0 0xfffff28000021400 0001 00000000 0x0 0x0 0xfffff28000021480 0001 00000000 0x0 0x0 0xfffff28000021500 0001 00000000 0x0 0x0 0xfffff28000021580 0001 00000000 0x0 0x0 0xfffff28000021600 0001 00000000 0x0 0x0 0xfffff28000021680 0001 00000000 0x0 0x0 0xfffff28000021700 0001 00000000 0x0 0x0 0xfffff28000021780 0001 00000000 0x0 0x0 0xfffff28000021800 0001 00000000 0x0 0x0 0xfffff28000021880 0001 00000000 0x0 0x0 0xfffff28000021900 0001 00000000 0x0 0x0 0xfffff28000021980 0001 00000000 0x0 0x0 0xfffff28000021a00 0001 00000000 0x0 0x0 0xfffff28000021a80 0001 00000000 0x0 0x0 0xfffff28000021b00 0001 00000000 0x0 0x0 0xfffff28000021b80 0001 00000000 0x0 0x0 0xfffff28000021c00 0001 00000000 0x0 0x0 0xfffff28000021c80 0001 00000000 0x0 0x0 0xfffff28000021d00 0001 00000000 0x0 0x0 0xfffff28000021d80 0001 00000000 0x0 0x0 0xfffff28000021e00 0001 00000000 0x0 0x0 0xfffff28000021e80 0001 00000000 0x0 0x0 0xfffff28000021f00 0001 00000000 0x0 0x0 0xfffff28000021f80 0001 00000000 0x0 0x0 0xfffff28000022000 0001 00000000 0x0 0x0 0xfffff28000022080 0001 00000000 0x0 0x0 0xfffff28000022100 0001 00000000 0x0 0x0 0xfffff28000022180 0001 00000000 0x0 0x0 0xfffff28000022200 0001 00000000 0x0 0x0 0xfffff28000022280 0001 00000000 0x0 0x0 0xfffff28000022300 0001 00000000 0x0 0x0 0xfffff28000022380 0001 00000000 0x0 0x0 0xfffff28000022400 0001 00000000 0x0 0x0 0xfffff28000022480 0001 00000000 0x0 0x0 0xfffff28000022500 0001 00000000 0x0 0x0 0xfffff28000022580 0001 00000000 0x0 0x0 0xfffff28000022600 0001 00000000 0x0 0x0 0xfffff28000022680 0001 00000000 0x0 0x0 0xfffff28000022700 0001 00000000 0x0 0x0 0xfffff28000022780 0001 00000000 0x0 0x0 0xfffff28000022800 0001 00000000 0x0 0x0 0xfffff28000022880 0001 00000000 0x0 0x0 0xfffff28000022900 0001 00000000 0x0 0x0 0xfffff28000022980 0001 00000000 0x0 0x0 0xfffff28000022a00 0001 00000000 0x0 0x0 0xfffff28000022a80 0001 00000000 0x0 0x0 0xfffff28000022b00 0001 00000000 0x0 0x0 0xfffff28000022b80 0001 00000000 0x0 0x0 0xfffff28000022c00 0001 00000000 0x0 0x0 0xfffff28000022c80 0001 00000000 0x0 0x0 0xfffff28000022d00 0001 00000000 0x0 0x0 0xfffff28000022d80 0001 00000000 0x0 0x0 0xfffff28000022e00 0001 00000000 0x0 0x0 0xfffff28000022e80 0001 00000000 0x0 0x0 0xfffff28000022f00 0001 00000000 0x0 0x0 0xfffff28000022f80 0001 00000000 0x0 0x0 0xfffff28000023000 0001 00000000 0x0 0x0 0xfffff28000023080 0001 00000000 0x0 0x0 0xfffff28000023100 0001 00000000 0x0 0x0 0xfffff28000023180 0001 00000000 0x0 0x0 0xfffff28000023200 0001 00000000 0x0 0x0 0xfffff28000023280 0001 00000000 0x0 0x0 0xfffff28000023300 0001 00000000 0x0 0x0 0xfffff28000023380 0001 00000000 0x0 0x0 0xfffff28000023400 0001 00000000 0x0 0x0 0xfffff28000023480 0001 00000000 0x0 0x0 0xfffff28000023500 0001 00000000 0x0 0x0 0xfffff28000023580 0001 00000000 0x0 0x0 0xfffff28000023600 0001 00000000 0x0 0x0 0xfffff28000023680 0001 00000000 0x0 0x0 0xfffff28000023700 0001 00000000 0x0 0x0 0xfffff28000023780 0001 00000000 0x0 0x0 0xfffff28000023800 0001 00000000 0x0 0x0 0xfffff28000023880 0001 00000000 0x0 0x0 0xfffff28000023900 0001 00000000 0x0 0x0 0xfffff28000023980 0001 00000000 0x0 0x0 0xfffff28000023a00 0001 00000000 0x0 0x0 0xfffff28000023a80 0001 00000000 0x0 0x0 0xfffff28000023b00 0001 00000000 0x0 0x0 0xfffff28000023b80 0001 00000000 0x0 0x0 0xfffff28000023c00 0001 00000000 0x0 0x0 0xfffff28000023c80 0001 00000000 0x0 0x0 0xfffff28000023d00 0001 00000000 0x0 0x0 0xfffff28000023d80 0001 00000000 0x0 0x0 0xfffff28000023e00 0001 00000000 0x0 0x0 0xfffff28000023e80 0001 00000000 0x0 0x0 0xfffff28000023f00 0001 00000000 0x0 0x0 0xfffff28000023f80 0001 00000000 0x0 0x0 0xfffff28000024000 0001 00000000 0x0 0x0 0xfffff28000024080 0001 00000000 0x0 0x0 0xfffff28000024100 0001 00000000 0x0 0x0 0xfffff28000024180 0001 00000000 0x0 0x0 0xfffff28000024200 0001 00000000 0x0 0x0 0xfffff28000024280 0001 00000000 0x0 0x0 0xfffff28000024300 0001 00000000 0x0 0x0 0xfffff28000024380 0001 00000000 0x0 0x0 0xfffff28000024400 0001 00000000 0x0 0x0 0xfffff28000024480 0001 00000000 0x0 0x0 0xfffff28000024500 0001 00000000 0x0 0x0 0xfffff28000024580 0001 00000000 0x0 0x0 0xfffff28000024600 0001 00000000 0x0 0x0 0xfffff28000024680 0001 00000000 0x0 0x0 0xfffff28000024700 0001 00000000 0x0 0x0 0xfffff28000024780 0001 00000000 0x0 0x0 0xfffff28000024800 0001 00000000 0x0 0x0 0xfffff28000024880 0001 00000000 0x0 0x0 0xfffff28000024900 0001 00000000 0x0 0x0 0xfffff28000024980 0001 00000000 0x0 0x0 0xfffff28000024a00 0001 00000000 0x0 0x0 0xfffff28000024a80 0001 00000000 0x0 0x0 0xfffff28000024b00 0001 00000000 0x0 0x0 0xfffff28000024b80 0001 00000000 0x0 0x0 0xfffff28000024c00 0001 00000000 0x0 0x0 0xfffff28000024c80 0001 00000000 0x0 0x0 0xfffff28000024d00 0001 00000000 0x0 0x0 0xfffff28000024d80 0001 00000000 0x0 0x0 0xfffff28000024e00 0001 00000000 0x0 0x0 0xfffff28000024e80 0001 00000000 0x0 0x0 0xfffff28000024f00 0001 00000000 0x0 0x0 0xfffff28000024f80 0001 00000000 0x0 0x0 0xfffff28000025000 0001 00000000 0x0 0x0 0xfffff28000025080 0001 00000000 0x0 0x0 0xfffff28000025100 0001 00000000 0x0 0x0 0xfffff28000025180 0001 00000000 0x0 0x0 0xfffff28000025200 0001 00000000 0x0 0x0 0xfffff28000025280 0001 00000000 0x0 0x0 0xfffff28000025300 0001 00000000 0x0 0x0 0xfffff28000025380 0001 00000000 0x0 0x0 0xfffff28000025400 0001 00000000 0x0 0x0 0xfffff28000025480 0001 00000000 0x0 0x0 0xfffff28000025500 0001 00000000 0x0 0x0 0xfffff28000025580 0001 00000000 0x0 0x0 0xfffff28000025600 0001 00000000 0x0 0x0 0xfffff28000025680 0001 00000000 0x0 0x0 0xfffff28000025700 0001 00000000 0x0 0x0 0xfffff28000025780 0001 00000000 0x0 0x0 0xfffff28000025800 0001 00000000 0x0 0x0 0xfffff28000025880 0001 00000000 0x0 0x0 0xfffff28000025900 0001 00000000 0x0 0x0 0xfffff28000025980 0001 00000000 0x0 0x0 0xfffff28000025a00 0001 00000000 0x0 0x0 0xfffff28000025a80 0001 00000000 0x0 0x0 0xfffff28000025b00 0001 00000000 0x0 0x0 0xfffff28000025b80 0001 00000000 0x0 0x0 0xfffff28000025c00 0001 00000000 0x0 0x0 0xfffff28000025c80 0001 00000000 0x0 0x0 0xfffff28000025d00 0001 00000000 0x0 0x0 0xfffff28000025d80 0001 00000000 0x0 0x0 0xfffff28000025e00 0001 00000000 0x0 0x0 0xfffff28000025e80 0001 00000000 0x0 0x0 0xfffff28000025f00 0001 00000000 0x0 0x0 0xfffff28000025f80 0001 00000000 0x0 0x0 0xfffff28000026000 0001 00000000 0x0 0x0 0xfffff28000026080 0001 00000000 0x0 0x0 0xfffff28000026100 0001 00000000 0x0 0x0 0xfffff28000026180 0001 00000000 0x0 0x0 0xfffff28000026200 0001 00000000 0x0 0x0 0xfffff28000026280 0001 00000000 0x0 0x0 0xfffff28000026300 0001 00000000 0x0 0x0 0xfffff28000026380 0001 00000000 0x0 0x0 0xfffff28000026400 0001 00000000 0x0 0x0 0xfffff28000026480 0001 00000000 0x0 0x0 0xfffff28000026500 0001 00000000 0x0 0x0 0xfffff28000026580 0001 00000000 0x0 0x0 0xfffff28000026600 0001 00000000 0x0 0x0 0xfffff28000026680 0001 00000000 0x0 0x0 0xfffff28000026700 0001 00000000 0x0 0x0 0xfffff28000026780 0001 00000000 0x0 0x0 0xfffff28000026800 0001 00000000 0x0 0x0 0xfffff28000026880 0001 00000000 0x0 0x0 0xfffff28000026900 0001 00000000 0x0 0x0 0xfffff28000026980 0001 00000000 0x0 0x0 0xfffff28000026a00 0001 00000000 0x0 0x0 0xfffff28000026a80 0001 00000000 0x0 0x0 0xfffff28000026b00 0001 00000000 0x0 0x0 0xfffff28000026b80 0001 00000000 0x0 0x0 0xfffff28000026c00 0001 00000000 0x0 0x0 0xfffff28000026c80 0001 00000000 0x0 0x0 0xfffff28000026d00 0001 00000000 0x0 0x0 0xfffff28000026d80 0001 00000000 0x0 0x0 0xfffff28000026e00 0001 00000000 0x0 0x0 0xfffff28000026e80 0001 00000000 0x0 0x0 0xfffff28000026f00 0001 00000000 0x0 0x0 0xfffff28000026f80 0001 00000000 0x0 0x0 0xfffff28000027000 0001 00000000 0x0 0x0 0xfffff28000027080 0001 00000000 0x0 0x0 0xfffff28000027100 0001 00000000 0x0 0x0 0xfffff28000027180 0001 00000000 0x0 0x0 0xfffff28000027200 0001 00000000 0x0 0x0 0xfffff28000027280 0001 00000000 0x0 0x0 0xfffff28000027300 0001 00000000 0x0 0x0 0xfffff28000027380 0001 00000000 0x0 0x0 0xfffff28000027400 0001 00000000 0x0 0x0 0xfffff28000027480 0001 00000000 0x0 0x0 0xfffff28000027500 0001 00000000 0x0 0x0 0xfffff28000027580 0001 00000000 0x0 0x0 0xfffff28000027600 0001 00000000 0x0 0x0 0xfffff28000027680 0001 00000000 0x0 0x0 0xfffff28000027700 0001 00000000 0x0 0x0 0xfffff28000027780 0001 00000000 0x0 0x0 0xfffff28000027800 0001 00000000 0x0 0x0 0xfffff28000027880 0001 00000000 0x0 0x0 0xfffff28000027900 0001 00000000 0x0 0x0 0xfffff28000027980 0001 00000000 0x0 0x0 0xfffff28000027a00 0001 00000000 0x0 0x0 0xfffff28000027a80 0001 00000000 0x0 0x0 0xfffff28000027b00 0001 00000000 0x0 0x0 0xfffff28000027b80 0001 00000000 0x0 0x0 0xfffff28000027c00 0001 00000000 0x0 0x0 0xfffff28000027c80 0001 00000000 0x0 0x0 0xfffff28000027d00 0001 00000000 0x0 0x0 0xfffff28000027d80 0001 00000000 0x0 0x0 0xfffff28000027e00 0001 00000000 0x0 0x0 0xfffff28000027e80 0001 00000000 0x0 0x0 0xfffff28000027f00 0001 00000000 0x0 0x0 0xfffff28000027f80 0001 00000000 0x0 0x0 0xfffff28000028000 0001 00000000 0x0 0x0 0xfffff28000028080 0001 00000000 0x0 0x0 0xfffff28000028100 0001 00000000 0x0 0x0 0xfffff28000028180 0001 00000000 0x0 0x0 0xfffff28000028200 0001 00000000 0x0 0x0 0xfffff28000028280 0001 00000000 0x0 0x0 0xfffff28000028300 0001 00000000 0x0 0x0 0xfffff28000028380 0001 00000000 0x0 0x0 0xfffff28000028400 0001 00000000 0x0 0x0 0xfffff28000028480 0001 00000000 0x0 0x0 0xfffff28000028500 0001 00000000 0x0 0x0 0xfffff28000028580 0001 00000000 0x0 0x0 0xfffff28000028600 0001 00000000 0x0 0x0 0xfffff28000028680 0001 00000000 0x0 0x0 0xfffff28000028700 0001 00000000 0x0 0x0 0xfffff28000028780 0001 00000000 0x0 0x0 0xfffff28000028800 0001 00000000 0x0 0x0 0xfffff28000028880 0001 00000000 0x0 0x0 0xfffff28000028900 0001 00000000 0x0 0x0 0xfffff28000028980 0001 00000000 0x0 0x0 0xfffff28000028a00 0001 00000000 0x0 0x0 0xfffff28000028a80 0001 00000000 0x0 0x0 0xfffff28000028b00 0001 00000000 0x0 0x0 0xfffff28000028b80 0001 00000000 0x0 0x0 0xfffff28000028c00 0001 00000000 0x0 0x0 0xfffff28000028c80 0001 00000000 0x0 0x0 0xfffff28000028d00 0001 00000000 0x0 0x0 0xfffff28000028d80 0001 00000000 0x0 0x0 0xfffff28000028e00 0001 00000000 0x0 0x0 0xfffff28000028e80 0001 00000000 0x0 0x0 0xfffff28000028f00 0001 00000000 0x0 0x0 0xfffff28000028f80 0001 00000000 0x0 0x0 0xfffff28000029000 0001 00000000 0x0 0x0 0xfffff28000029080 0001 00000000 0x0 0x0 0xfffff28000029100 0001 00000000 0x0 0x0 0xfffff28000029180 0001 00000000 0x0 0x0 0xfffff28000029200 0001 00000000 0x0 0x0 0xfffff28000029280 0001 00000000 0x0 0x0 0xfffff28000029300 0001 00000000 0x0 0x0 0xfffff28000029380 0001 00000000 0x0 0x0 0xfffff28000029400 0001 00000000 0x0 0x0 0xfffff28000029480 0001 00000000 0x0 0x0 0xfffff28000029500 0001 00000000 0x0 0x0 0xfffff28000029580 0001 00000000 0x0 0x0 0xfffff28000029600 0001 00000000 0x0 0x0 0xfffff28000029680 0001 00000000 0x0 0x0 0xfffff28000029700 0001 00000000 0x0 0x0 0xfffff28000029780 0001 00000000 0x0 0x0 0xfffff28000029800 0001 00000000 0x0 0x0 0xfffff28000029880 0001 00000000 0x0 0x0 0xfffff28000029900 0001 00000000 0x0 0x0 0xfffff28000029980 0001 00000000 0x0 0x0 0xfffff28000029a00 0001 00000000 0x0 0x0 0xfffff28000029a80 0001 00000000 0x0 0x0 0xfffff28000029b00 0001 00000000 0x0 0x0 0xfffff28000029b80 0001 00000000 0x0 0x0 0xfffff28000029c00 0001 00000000 0x0 0x0 0xfffff28000029c80 0001 00000000 0x0 0x0 0xfffff28000029d00 0001 00000000 0x0 0x0 0xfffff28000029d80 0001 00000000 0x0 0x0 0xfffff28000029e00 0001 00000000 0x0 0x0 0xfffff28000029e80 0001 00000000 0x0 0x0 0xfffff28000029f00 0001 00000000 0x0 0x0 0xfffff28000029f80 0001 00000000 0x0 0x0 0xfffff2800002a000 0001 00000000 0x0 0x0 0xfffff2800002a080 0001 00000000 0x0 0x0 0xfffff2800002a100 0001 00000000 0x0 0x0 0xfffff2800002a180 0001 00000000 0x0 0x0 0xfffff2800002a200 0001 00000000 0x0 0x0 0xfffff2800002a280 0001 00000000 0x0 0x0 0xfffff2800002a300 0001 00000000 0x0 0x0 0xfffff2800002a380 0001 00000000 0x0 0x0 0xfffff2800002a400 0001 00000000 0x0 0x0 0xfffff2800002a480 0001 00000000 0x0 0x0 0xfffff2800002a500 0001 00000000 0x0 0x0 0xfffff2800002a580 0001 00000000 0x0 0x0 0xfffff2800002a600 0001 00000000 0x0 0x0 0xfffff2800002a680 0001 00000000 0x0 0x0 0xfffff2800002a700 0001 00000000 0x0 0x0 0xfffff2800002a780 0001 00000000 0x0 0x0 0xfffff2800002a800 0001 00000000 0x0 0x0 0xfffff2800002a880 0001 00000000 0x0 0x0 0xfffff2800002a900 0001 00000000 0x0 0x0 0xfffff2800002a980 0001 00000000 0x0 0x0 0xfffff2800002aa00 0001 00000000 0x0 0x0 0xfffff2800002aa80 0001 00000000 0x0 0x0 0xfffff2800002ab00 0001 00000000 0x0 0x0 0xfffff2800002ab80 0001 00000000 0x0 0x0 0xfffff2800002ac00 0001 00000000 0x0 0x0 0xfffff2800002ac80 0001 00000000 0x0 0x0 0xfffff2800002ad00 0001 00000000 0x0 0x0 0xfffff2800002ad80 0001 00000000 0x0 0x0 0xfffff2800002ae00 0001 00000000 0x0 0x0 0xfffff2800002ae80 0001 00000000 0x0 0x0 0xfffff2800002af00 0001 00000000 0x0 0x0 0xfffff2800002af80 0001 00000000 0x0 0x0 0xfffff2800002b000 0001 00000000 0x0 0x0 0xfffff2800002b080 0001 00000000 0x0 0x0 0xfffff2800002b100 0001 00000000 0x0 0x0 0xfffff2800002b180 0001 00000000 0x0 0x0 0xfffff2800002b200 0001 00000000 0x0 0x0 0xfffff2800002b280 0001 00000000 0x0 0x0 0xfffff2800002b300 0001 00000000 0x0 0x0 0xfffff2800002b380 0001 00000000 0x0 0x0 0xfffff2800002b400 0001 00000000 0x0 0x0 0xfffff2800002b480 0001 00000000 0x0 0x0 0xfffff2800002b500 0001 00000000 0x0 0x0 0xfffff2800002b580 0001 00000000 0x0 0x0 0xfffff2800002b600 0001 00000000 0x0 0x0 0xfffff2800002b680 0001 00000000 0x0 0x0 0xfffff2800002b700 0001 00000000 0x0 0x0 0xfffff2800002b780 0001 00000000 0x0 0x0 0xfffff2800002b800 0001 00000000 0x0 0x0 0xfffff2800002b880 0001 00000000 0x0 0x0 0xfffff2800002b900 0001 00000000 0x0 0x0 0xfffff2800002b980 0001 00000000 0x0 0x0 0xfffff2800002ba00 0001 00000000 0x0 0x0 0xfffff2800002ba80 0001 00000000 0x0 0x0 0xfffff2800002bb00 0001 00000000 0x0 0x0 0xfffff2800002bb80 0001 00000000 0x0 0x0 0xfffff2800002bc00 0001 00000000 0x0 0x0 0xfffff2800002bc80 0001 00000000 0x0 0x0 0xfffff2800002bd00 0001 00000000 0x0 0x0 0xfffff2800002bd80 0001 00000000 0x0 0x0 0xfffff2800002be00 0001 00000000 0x0 0x0 0xfffff2800002be80 0001 00000000 0x0 0x0 0xfffff2800002bf00 0001 00000000 0x0 0x0 0xfffff2800002bf80 0001 00000000 0x0 0x0 0xfffff2800002c000 0001 00000000 0x0 0x0 0xfffff2800002c080 0001 00000000 0x0 0x0 0xfffff2800002c100 0001 00000000 0x0 0x0 0xfffff2800002c180 0001 00000000 0x0 0x0 0xfffff2800002c200 0001 00000000 0x0 0x0 0xfffff2800002c280 0001 00000000 0x0 0x0 0xfffff2800002c300 0001 00000000 0x0 0x0 0xfffff2800002c380 0001 00000000 0x0 0x0 0xfffff2800002c400 0001 00000000 0x0 0x0 0xfffff2800002c480 0001 00000000 0x0 0x0 0xfffff2800002c500 0001 00000000 0x0 0x0 0xfffff2800002c580 0001 00000000 0x0 0x0 0xfffff2800002c600 0001 00000000 0x0 0x0 0xfffff2800002c680 0001 00000000 0x0 0x0 0xfffff2800002c700 0001 00000000 0x0 0x0 0xfffff2800002c780 0001 00000000 0x0 0x0 0xfffff2800002c800 0001 00000000 0x0 0x0 0xfffff2800002c880 0001 00000000 0x0 0x0 0xfffff2800002c900 0001 00000000 0x0 0x0 0xfffff2800002c980 0001 00000000 0x0 0x0 0xfffff2800002ca00 0001 00000000 0x0 0x0 0xfffff2800002ca80 0001 00000000 0x0 0x0 0xfffff2800002cb00 0001 00000000 0x0 0x0 0xfffff2800002cb80 0001 00000000 0x0 0x0 0xfffff2800002cc00 0001 00000000 0x0 0x0 0xfffff2800002cc80 0001 00000000 0x0 0x0 0xfffff2800002cd00 0001 00000000 0x0 0x0 0xfffff2800002cd80 0001 00000000 0x0 0x0 0xfffff2800002ce00 0001 00000000 0x0 0x0 0xfffff2800002ce80 0001 00000000 0x0 0x0 0xfffff2800002cf00 0001 00000000 0x0 0x0 0xfffff2800002cf80 0001 00000000 0x0 0x0 0xfffff2800002d000 0001 00000000 0x0 0x0 0xfffff2800002d080 0001 00000000 0x0 0x0 0xfffff2800002d100 0001 00000000 0x0 0x0 0xfffff2800002d180 0001 00000000 0x0 0x0 0xfffff2800002d200 0001 00000000 0x0 0x0 0xfffff2800002d280 0001 00000000 0x0 0x0 0xfffff2800002d300 0001 00000000 0x0 0x0 0xfffff2800002d380 0001 00000000 0x0 0x0 0xfffff2800002d400 0001 00000000 0x0 0x0 0xfffff2800002d480 0001 00000000 0x0 0x0 0xfffff2800002d500 0001 00000000 0x0 0x0 0xfffff2800002d580 0001 00000000 0x0 0x0 0xfffff2800002d600 0001 00000000 0x0 0x0 0xfffff2800002d680 0001 00000000 0x0 0x0 0xfffff2800002d700 0001 00000000 0x0 0x0 0xfffff2800002d780 0001 00000000 0x0 0x0 0xfffff2800002d800 0001 00000000 0x0 0x0 0xfffff2800002d880 0001 00000000 0x0 0x0 0xfffff2800002d900 0001 00000000 0x0 0x0 0xfffff2800002d980 0001 00000000 0x0 0x0 0xfffff2800002da00 0001 00000000 0x0 0x0 0xfffff2800002da80 0001 00000000 0x0 0x0 0xfffff2800002db00 0001 00000000 0x0 0x0 0xfffff2800002db80 0001 00000000 0x0 0x0 0xfffff2800002dc00 0001 00000000 0x0 0x0 0xfffff2800002dc80 0001 00000000 0x0 0x0 0xfffff2800002dd00 0001 00000000 0x0 0x0 0xfffff2800002dd80 0001 00000000 0x0 0x0 0xfffff2800002de00 0001 00000000 0x0 0x0 0xfffff2800002de80 0001 00000000 0x0 0x0 0xfffff2800002df00 0001 00000000 0x0 0x0 0xfffff2800002df80 0001 00000000 0x0 0x0 0xfffff2800002e000 0001 00000000 0x0 0x0 0xfffff2800002e080 0001 00000000 0x0 0x0 0xfffff2800002e100 0001 00000000 0x0 0x0 0xfffff2800002e180 0001 00000000 0x0 0x0 0xfffff2800002e200 0001 00000000 0x0 0x0 0xfffff2800002e280 0001 00000000 0x0 0x0 0xfffff2800002e300 0001 00000000 0x0 0x0 0xfffff2800002e380 0001 00000000 0x0 0x0 0xfffff2800002e400 0001 00000000 0x0 0x0 0xfffff2800002e480 0001 00000000 0x0 0x0 0xfffff2800002e500 0001 00000000 0x0 0x0 0xfffff2800002e580 0001 00000000 0x0 0x0 0xfffff2800002e600 0001 00000000 0x0 0x0 0xfffff2800002e680 0001 00000000 0x0 0x0 0xfffff2800002e700 0001 00000000 0x0 0x0 0xfffff2800002e780 0001 00000000 0x0 0x0 0xfffff2800002e800 0001 00000000 0x0 0x0 0xfffff2800002e880 0001 00000000 0x0 0x0 0xfffff2800002e900 0001 00000000 0x0 0x0 0xfffff2800002e980 0001 00000000 0x0 0x0 0xfffff2800002ea00 0001 00000000 0x0 0x0 0xfffff2800002ea80 0001 00000000 0x0 0x0 0xfffff2800002eb00 0001 00000000 0x0 0x0 0xfffff2800002eb80 0001 00000000 0x0 0x0 0xfffff2800002ec00 0001 00000000 0x0 0x0 0xfffff2800002ec80 0001 00000000 0x0 0x0 0xfffff2800002ed00 0001 00000000 0x0 0x0 0xfffff2800002ed80 0001 00000000 0x0 0x0 0xfffff2800002ee00 0001 00000000 0x0 0x0 0xfffff2800002ee80 0001 00000000 0x0 0x0 0xfffff2800002ef00 0001 00000000 0x0 0x0 0xfffff2800002ef80 0001 00000000 0x0 0x0 0xfffff2800002f000 0001 00000000 0x0 0x0 0xfffff2800002f080 0001 00000000 0x0 0x0 0xfffff2800002f100 0001 00000000 0x0 0x0 0xfffff2800002f180 0001 00000000 0x0 0x0 0xfffff2800002f200 0001 00000000 0x0 0x0 0xfffff2800002f280 0001 00000000 0x0 0x0 0xfffff2800002f300 0001 00000000 0x0 0x0 0xfffff2800002f380 0001 00000000 0x0 0x0 0xfffff2800002f400 0001 00000000 0x0 0x0 0xfffff2800002f480 0001 00000000 0x0 0x0 0xfffff2800002f500 0001 00000000 0x0 0x0 0xfffff2800002f580 0001 00000000 0x0 0x0 0xfffff2800002f600 0001 00000000 0x0 0x0 0xfffff2800002f680 0001 00000000 0x0 0x0 0xfffff2800002f700 0001 00000000 0x0 0x0 0xfffff2800002f780 0001 00000000 0x0 0x0 0xfffff2800002f800 0001 00000000 0x0 0x0 0xfffff2800002f880 0001 00000000 0x0 0x0 0xfffff2800002f900 0001 00000000 0x0 0x0 0xfffff2800002f980 0001 00000000 0x0 0x0 0xfffff2800002fa00 0001 00000000 0x0 0x0 0xfffff2800002fa80 0001 00000000 0x0 0x0 0xfffff2800002fb00 0001 00000000 0x0 0x0 0xfffff2800002fb80 0001 00000000 0x0 0x0 0xfffff2800002fc00 0001 00000000 0x0 0x0 0xfffff2800002fc80 0001 00000000 0x0 0x0 0xfffff2800002fd00 0001 00000000 0x0 0x0 0xfffff2800002fd80 0001 00000000 0x0 0x0 0xfffff2800002fe00 0001 00000000 0x0 0x0 0xfffff2800002fe80 0001 00000000 0x0 0x0 0xfffff2800002ff00 0001 00000000 0x0 0x0 0xfffff2800002ff80 0001 00000000 0x0 0x0 0xfffff28000030000 0001 00000000 0x0 0x0 0xfffff28000030080 0001 00000000 0x0 0x0 0xfffff28000030100 0001 00000000 0x0 0x0 0xfffff28000030180 0001 00000000 0x0 0x0 0xfffff28000030200 0001 00000000 0x0 0x0 0xfffff28000030280 0001 00000000 0x0 0x0 0xfffff28000030300 0001 00000000 0x0 0x0 0xfffff28000030380 0001 00000000 0x0 0x0 0xfffff28000030400 0001 00000000 0x0 0x0 0xfffff28000030480 0001 00000000 0x0 0x0 0xfffff28000030500 0001 00000000 0x0 0x0 0xfffff28000030580 0001 00000000 0x0 0x0 0xfffff28000030600 0001 00000000 0x0 0x0 0xfffff28000030680 0001 00000000 0x0 0x0 0xfffff28000030700 0001 00000000 0x0 0x0 0xfffff28000030780 0001 00000000 0x0 0x0 0xfffff28000030800 0001 00000000 0x0 0x0 0xfffff28000030880 0001 00000000 0x0 0x0 0xfffff28000030900 0001 00000000 0x0 0x0 0xfffff28000030980 0001 00000000 0x0 0x0 0xfffff28000030a00 0001 00000000 0x0 0x0 0xfffff28000030a80 0001 00000000 0x0 0x0 0xfffff28000030b00 0001 00000000 0x0 0x0 0xfffff28000030b80 0001 00000000 0x0 0x0 0xfffff28000030c00 0001 00000000 0x0 0x0 0xfffff28000030c80 0001 00000000 0x0 0x0 0xfffff28000030d00 0001 00000000 0x0 0x0 0xfffff28000030d80 0001 00000000 0x0 0x0 0xfffff28000030e00 0001 00000000 0x0 0x0 0xfffff28000030e80 0001 00000000 0x0 0x0 0xfffff28000030f00 0001 00000000 0x0 0x0 0xfffff28000030f80 0001 00000000 0x0 0x0 0xfffff28000031000 0001 00000000 0x0 0x0 0xfffff28000031080 0001 00000000 0x0 0x0 0xfffff28000031100 0001 00000000 0x0 0x0 0xfffff28000031180 0001 00000000 0x0 0x0 0xfffff28000031200 0001 00000000 0x0 0x0 0xfffff28000031280 0001 00000000 0x0 0x0 0xfffff28000031300 0001 00000000 0x0 0x0 0xfffff28000031380 0001 00000000 0x0 0x0 0xfffff28000031400 0001 00000000 0x0 0x0 0xfffff28000031480 0001 00000000 0x0 0x0 0xfffff28000031500 0001 00000000 0x0 0x0 0xfffff28000031580 0001 00000000 0x0 0x0 0xfffff28000031600 0001 00000000 0x0 0x0 0xfffff28000031680 0001 00000000 0x0 0x0 0xfffff28000031700 0001 00000000 0x0 0x0 0xfffff28000031780 0001 00000000 0x0 0x0 0xfffff28000031800 0001 00000000 0x0 0x0 0xfffff28000031880 0001 00000000 0x0 0x0 0xfffff28000031900 0001 00000000 0x0 0x0 0xfffff28000031980 0001 00000000 0x0 0x0 0xfffff28000031a00 0001 00000000 0x0 0x0 0xfffff28000031a80 0001 00000000 0x0 0x0 0xfffff28000031b00 0001 00000000 0x0 0x0 0xfffff28000031b80 0001 00000000 0x0 0x0 0xfffff28000031c00 0001 00000000 0x0 0x0 0xfffff28000031c80 0001 00000000 0x0 0x0 0xfffff28000031d00 0001 00000000 0x0 0x0 0xfffff28000031d80 0001 00000000 0x0 0x0 0xfffff28000031e00 0001 00000000 0x0 0x0 0xfffff28000031e80 0001 00000000 0x0 0x0 0xfffff28000031f00 0001 00000000 0x0 0x0 0xfffff28000031f80 0001 00000000 0x0 0x0 0xfffff28000032000 0001 00000000 0x0 0x0 0xfffff28000032080 0001 00000000 0x0 0x0 0xfffff28000032100 0001 00000000 0x0 0x0 0xfffff28000032180 0001 00000000 0x0 0x0 0xfffff28000032200 0001 00000000 0x0 0x0 0xfffff28000032280 0001 00000000 0x0 0x0 0xfffff28000032300 0001 00000000 0x0 0x0 0xfffff28000032380 0001 00000000 0x0 0x0 0xfffff28000032400 0001 00000000 0x0 0x0 0xfffff28000032480 0001 00000000 0x0 0x0 0xfffff28000032500 0001 00000000 0x0 0x0 0xfffff28000032580 0001 00000000 0x0 0x0 0xfffff28000032600 0001 00000000 0x0 0x0 0xfffff28000032680 0001 00000000 0x0 0x0 0xfffff28000032700 0001 00000000 0x0 0x0 0xfffff28000032780 0001 00000000 0x0 0x0 0xfffff28000032800 0001 00000000 0x0 0x0 0xfffff28000032880 0001 00000000 0x0 0x0 0xfffff28000032900 0001 00000000 0x0 0x0 0xfffff28000032980 0001 00000000 0x0 0x0 0xfffff28000032a00 0001 00000000 0x0 0x0 0xfffff28000032a80 0001 00000000 0x0 0x0 0xfffff28000032b00 0001 00000000 0x0 0x0 0xfffff28000032b80 0001 00000000 0x0 0x0 0xfffff28000032c00 0001 00000000 0x0 0x0 0xfffff28000032c80 0001 00000000 0x0 0x0 0xfffff28000032d00 0001 00000000 0x0 0x0 0xfffff28000032d80 0001 00000000 0x0 0x0 0xfffff28000032e00 0001 00000000 0x0 0x0 0xfffff28000032e80 0001 00000000 0x0 0x0 0xfffff28000032f00 0001 00000000 0x0 0x0 0xfffff28000032f80 0001 00000000 0x0 0x0 0xfffff28000033000 0001 00000000 0x0 0x0 0xfffff28000033080 0001 00000000 0x0 0x0 0xfffff28000033100 0001 00000000 0x0 0x0 0xfffff28000033180 0001 00000000 0x0 0x0 0xfffff28000033200 0001 00000000 0x0 0x0 0xfffff28000033280 0001 00000000 0x0 0x0 0xfffff28000033300 0001 00000000 0x0 0x0 0xfffff28000033380 0001 00000000 0x0 0x0 0xfffff28000033400 0001 00000000 0x0 0x0 0xfffff28000033480 0001 00000000 0x0 0x0 0xfffff28000033500 0001 00000000 0x0 0x0 0xfffff28000033580 0001 00000000 0x0 0x0 0xfffff28000033600 0001 00000000 0x0 0x0 0xfffff28000033680 0001 00000000 0x0 0x0 0xfffff28000033700 0001 00000000 0x0 0x0 0xfffff28000033780 0001 00000000 0x0 0x0 0xfffff28000033800 0001 00000000 0x0 0x0 0xfffff28000033880 0001 00000000 0x0 0x0 0xfffff28000033900 0001 00000000 0x0 0x0 0xfffff28000033980 0001 00000000 0x0 0x0 0xfffff28000033a00 0001 00000000 0x0 0x0 0xfffff28000033a80 0001 00000000 0x0 0x0 0xfffff28000033b00 0001 00000000 0x0 0x0 0xfffff28000033b80 0001 00000000 0x0 0x0 0xfffff28000033c00 0001 00000000 0x0 0x0 0xfffff28000033c80 0001 00000000 0x0 0x0 0xfffff28000033d00 0001 00000000 0x0 0x0 0xfffff28000033d80 0001 00000000 0x0 0x0 0xfffff28000033e00 0001 00000000 0x0 0x0 0xfffff28000033e80 0001 00000000 0x0 0x0 0xfffff28000033f00 0001 00000000 0x0 0x0 0xfffff28000033f80 0001 00000000 0x0 0x0 0xfffff28000034000 0001 00000000 0x0 0x0 0xfffff28000034080 0001 00000000 0x0 0x0 0xfffff28000034100 0001 00000000 0x0 0x0 0xfffff28000034180 0001 00000000 0x0 0x0 0xfffff28000034200 0001 00000000 0x0 0x0 0xfffff28000034280 0001 00000000 0x0 0x0 0xfffff28000034300 0001 00000000 0x0 0x0 0xfffff28000034380 0001 00000000 0x0 0x0 0xfffff28000034400 0001 00000000 0x0 0x0 0xfffff28000034480 0001 00000000 0x0 0x0 0xfffff28000034500 0001 00000000 0x0 0x0 0xfffff28000034580 0001 00000000 0x0 0x0 0xfffff28000034600 0001 00000000 0x0 0x0 0xfffff28000034680 0001 00000000 0x0 0x0 0xfffff28000034700 0001 00000000 0x0 0x0 0xfffff28000034780 0001 00000000 0x0 0x0 0xfffff28000034800 0001 00000000 0x0 0x0 0xfffff28000034880 0001 00000000 0x0 0x0 0xfffff28000034900 0001 00000000 0x0 0x0 0xfffff28000034980 0001 00000000 0x0 0x0 0xfffff28000034a00 0001 00000000 0x0 0x0 0xfffff28000034a80 0001 00000000 0x0 0x0 0xfffff28000034b00 0001 00000000 0x0 0x0 0xfffff28000034b80 0001 00000000 0x0 0x0 0xfffff28000034c00 0001 00000000 0x0 0x0 0xfffff28000034c80 0001 00000000 0x0 0x0 0xfffff28000034d00 0001 00000000 0x0 0x0 0xfffff28000034d80 0001 00000000 0x0 0x0 0xfffff28000034e00 0001 00000000 0x0 0x0 0xfffff28000034e80 0001 00000000 0x0 0x0 0xfffff28000034f00 0001 00000000 0x0 0x0 0xfffff28000034f80 0001 00000000 0x0 0x0 0xfffff28000035000 0001 00000000 0x0 0x0 0xfffff28000035080 0001 00000000 0x0 0x0 0xfffff28000035100 0001 00000000 0x0 0x0 0xfffff28000035180 0001 00000000 0x0 0x0 0xfffff28000035200 0001 00000000 0x0 0x0 0xfffff28000035280 0001 00000000 0x0 0x0 0xfffff28000035300 0001 00000000 0x0 0x0 0xfffff28000035380 0001 00000000 0x0 0x0 0xfffff28000035400 0001 00000000 0x0 0x0 0xfffff28000035480 0001 00000000 0x0 0x0 0xfffff28000035500 0001 00000000 0x0 0x0 0xfffff28000035580 0001 00000000 0x0 0x0 0xfffff28000035600 0001 00000000 0x0 0x0 0xfffff28000035680 0001 00000000 0x0 0x0 0xfffff28000035700 0001 00000000 0x0 0x0 0xfffff28000035780 0001 00000000 0x0 0x0 0xfffff28000035800 0001 00000000 0x0 0x0 0xfffff28000035880 0001 00000000 0x0 0x0 0xfffff28000035900 0001 00000000 0x0 0x0 0xfffff28000035980 0001 00000000 0x0 0x0 0xfffff28000035a00 0001 00000000 0x0 0x0 0xfffff28000035a80 0001 00000000 0x0 0x0 0xfffff28000035b00 0001 00000000 0x0 0x0 0xfffff28000035b80 0001 00000000 0x0 0x0 0xfffff28000035c00 0001 00000000 0x0 0x0 0xfffff28000035c80 0001 00000000 0x0 0x0 0xfffff28000035d00 0001 00000000 0x0 0x0 0xfffff28000035d80 0001 00000000 0x0 0x0 0xfffff28000035e00 0001 00000000 0x0 0x0 0xfffff28000035e80 0001 00000000 0x0 0x0 0xfffff28000035f00 0001 00000000 0x0 0x0 0xfffff28000035f80 0001 00000000 0x0 0x0 0xfffff28000036000 0001 00000000 0x0 0x0 0xfffff28000036080 0001 00000000 0x0 0x0 0xfffff28000036100 0001 00000000 0x0 0x0 0xfffff28000036180 0001 00000000 0x0 0x0 0xfffff28000036200 0001 00000000 0x0 0x0 0xfffff28000036280 0001 00000000 0x0 0x0 0xfffff28000036300 0001 00000000 0x0 0x0 0xfffff28000036380 0001 00000000 0x0 0x0 0xfffff28000036400 0001 00000000 0x0 0x0 0xfffff28000036480 0001 00000000 0x0 0x0 0xfffff28000036500 0001 00000000 0x0 0x0 0xfffff28000036580 0001 00000000 0x0 0x0 0xfffff28000036600 0001 00000000 0x0 0x0 0xfffff28000036680 0001 00000000 0x0 0x0 0xfffff28000036700 0001 00000000 0x0 0x0 0xfffff28000036780 0001 00000000 0x0 0x0 0xfffff28000036800 0001 00000000 0x0 0x0 0xfffff28000036880 0001 00000000 0x0 0x0 0xfffff28000036900 0001 00000000 0x0 0x0 0xfffff28000036980 0001 00000000 0x0 0x0 0xfffff28000036a00 0001 00000000 0x0 0x0 0xfffff28000036a80 0001 00000000 0x0 0x0 0xfffff28000036b00 0001 00000000 0x0 0x0 0xfffff28000036b80 0001 00000000 0x0 0x0 0xfffff28000036c00 0001 00000000 0x0 0x0 0xfffff28000036c80 0001 00000000 0x0 0x0 0xfffff28000036d00 0001 00000000 0x0 0x0 0xfffff28000036d80 0001 00000000 0x0 0x0 0xfffff28000036e00 0001 00000000 0x0 0x0 0xfffff28000036e80 0001 00000000 0x0 0x0 0xfffff28000036f00 0001 00000000 0x0 0x0