last executing test programs: 15.222205512s ago: executing program 4: compat_50___msgctl13$IPC_STAT(0x0, 0x2, &(0x7f0000000280)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)}}) compat_40_mount(&(0x7f0000000000)='tmpfs\x00', &(0x7f00000003c0)='.\x00', 0x0, &(0x7f0000000140)="01") _lwp_create(&(0x7f0000000100)={0x0, 0x0, {}, {}, {0x0, 0x0, '/)YR\x00'}}, 0x0, 0x0) __mount50(0x0, &(0x7f0000000040)='.\x00', 0xe680bf986d21abfb, &(0x7f0000000140), 0x0) open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) unmount(&(0x7f0000000000)='./file0\x00', 0x255a0100) swapctl$SWAP_OFF(0x2, &(0x7f0000000040)="90443331559167b7859de4ac5f2d0cb73950b1c10b6d6adaf6dd4eac9a8dbddf91ee19dda42d49f61037d8ac0939c1cee87b7e3f995d7d") r0 = socket$inet(0x2, 0x3, 0x0) compat_50_clock_getres(0x1, &(0x7f0000000080)) setsockopt$inet_opts(r0, 0x0, 0x1, &(0x7f0000000000)="eaf6", 0x2) setsockopt$inet_opts(r0, 0x0, 0x200000000000c, &(0x7f0000000500)="eaef125c00000000", 0x8) 14.609796236s ago: executing program 4: getgroups(0x5, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff]) lchown(&(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, r2) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) compat_50___msgctl13$IPC_STAT(0x0, 0x2, &(0x7f0000000240)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={&(0x7f00000000c0)={0x0, 0x401, 0x9}, 0xfff, 0x1, 0x4}, 0x40, 0x80, 0x4}, &(0x7f0000000200)={&(0x7f00000001c0)={&(0x7f0000000180)={0x0, 0x7fff, 0xc59, 0x2}, 0xb3, 0xfbc1, 0x800}, 0x3, 0xa, 0x5}}) r5 = compat_43_oaccept(r4, &(0x7f00000002c0)=""/212, &(0x7f00000003c0)=0xd4) setsockopt$sock_linger(r5, 0xffff, 0x80, &(0x7f0000000400)={0xff, 0x5}, 0x8) getsockopt$sock_timeval(r4, 0xffff, 0x100c, &(0x7f0000000440), &(0x7f0000000480)=0x10) _lwp_exit() ioctl$FIOSETOWN(r3, 0x8004667c, &(0x7f00000004c0)=0x8) socketpair(0x0, 0x4, 0x7f, &(0x7f0000000500)={0xffffffffffffffff}) compat_43_osend(r6, &(0x7f0000000540)="685558d0b355553a1c6a762be655fcdb296448701ffe339e70096cc5d1f23feac8a71d7b1135df9ead3ca60d53292ed9ba1b9cc797efce10cd0e4dc09fb1a476e573a4807bf61e25301a6f6c44cd55dd06e045096b3b7621b2f748f14a604e31c663a5d90d9b71f3d350e70609218a7936a505bc083a4e7a0a04cc99e73ed44d823ed557ec51eb4428fc2158aa4d86715dc433e695cf3f82a81294246271aaf3512492df5c0c9c69ce81e2c10117e2fa4e358bf3aa6ebc499f00f6ec5dc5997b4350da7cabe7f2c0252da098d980a97dc562b81a783ab856bbcf929eae39db45158b105e2cfedbe260489ec3a4a4b5878eae", 0xf2, 0x4) getpeername$unix(r3, &(0x7f0000000640)=@file={0x0, ""/4088}, &(0x7f0000001640)=0xffa) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001680)={0xffffffffffffffff, 0xffffffffffffffff}) __lutimes50(&(0x7f00000016c0)='./file1\x00', &(0x7f0000001700)={0x6600, 0x3}) compat_43_orecvmsg(r7, &(0x7f0000001940)={&(0x7f0000001740)=@family, 0xe, &(0x7f0000001880)={&(0x7f0000001780)=""/212, 0xd4}, 0x10, &(0x7f00000018c0)=""/122, 0x7a}, 0x2040) connect(r4, &(0x7f0000001980)=@data="e030557c426e63b25f0a0476b7ae", 0xe) ioctl$FIOASYNC(r4, 0x8004667d, &(0x7f00000019c0)=0x2) compat_50_setitimer(0x2, &(0x7f0000001a00)={{0x10, 0x9}, {0x9, 0x4}}, &(0x7f0000001a40)) compat_50_lutimes(&(0x7f0000001a80)='./file1\x00', &(0x7f0000001ac0)={0x6, 0x7ff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001b00)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$unix(r8, &(0x7f0000001b40)=@abs, &(0x7f0000001b80)=0x8) r9 = accept$unix(r8, &(0x7f0000001bc0)=@file={0x0, ""/2}, &(0x7f0000001c00)=0x4) getsockname$unix(r9, &(0x7f0000001c40)=@file={0x0, ""/4099}, &(0x7f0000002c80)=0x1005) socketpair(0x10, 0x4, 0x55, &(0x7f0000002cc0)) symlink(&(0x7f0000002d00)='./file0\x00', &(0x7f0000002d40)='./file0\x00') getpeername$unix(r3, &(0x7f0000002d80)=@abs, &(0x7f0000002dc0)=0x8) compat_12_fstat12(r7, &(0x7f0000002e00)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r4, r10, r1) getsockname$unix(r7, &(0x7f0000002e80)=@file={0x0, ""/247}, &(0x7f0000002f80)=0xf9) chown(&(0x7f0000002fc0)='./file0\x00', 0x0, r0) 13.5517915s ago: executing program 4: r0 = socket$inet(0x2, 0x3, 0x0) ioctl$FIOASYNC(r0, 0x8004667d, &(0x7f0000000000)=0x9) mknod(&(0x7f0000000540)='./file0\x00', 0x6000, 0x1003) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x2, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x9fc4189e803b6384, 0x202) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) semctl$SETALL(0x0, 0x0, 0x9, &(0x7f0000000040)=[0x7ff]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = socket(0x18, 0x1, 0x0) setsockopt(r2, 0x1000000029, 0xc, &(0x7f0000000040)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) ioctl$FIOASYNC(r1, 0xc0204610, &(0x7f0000001340)) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x0}, 0x10) r3 = socket(0x2, 0x3, 0x0) ioctl$FIOSEEKHOLE(r3, 0xc0986920, &(0x7f0000000180)=0x8000000000000032) compat_90_fstatvfs1(r1, &(0x7f0000001380), 0x3) 13.250468346s ago: executing program 4: mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r0 = fcntl$dupfd(0xffffffffffffffff, 0xb, 0xffffffffffffffff) compat_50___fstat30(r0, 0x0) writev(0xffffffffffffffff, &(0x7f00000003c0), 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0x2000, 0x0) r1 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x0) open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x80) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000)="c8", 0x1}], 0x1) pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$FIOGETOWN(r2, 0x8004667c, &(0x7f0000000100)) chroot(&(0x7f0000000000)='.\x00') mknod(&(0x7f0000000300)='./file0\x00', 0x2000, 0x6da) r3 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$FIOGETBMAP(r3, 0x40287448, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mknod(&(0x7f0000000300)='./file0\x00', 0x2000, 0x6da) r4 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$FIOASYNC(r4, 0x80047465, &(0x7f0000000040)) utimensat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)={{0x86, 0x4000000000000002}, {0x400000, 0xfffffffffffffffb}}, 0x200) fcntl$getown(0xffffffffffffffff, 0x5) __lstat50(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)) ioctl$FIOASYNC(r1, 0x80047401, &(0x7f0000000000)=0x5) open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x0) r5 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x13000)=nil, 0x13000, 0x1, 0x10, r5, 0x0, 0x0) madvise(&(0x7f0000196000/0x2000)=nil, 0x2000, 0x3) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) ioctl$FIOASYNC(r1, 0x80047401, &(0x7f0000000280)=0x4) 7.416686266s ago: executing program 4: mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r0 = fcntl$dupfd(0xffffffffffffffff, 0xb, 0xffffffffffffffff) compat_50___fstat30(r0, 0x0) writev(0xffffffffffffffff, &(0x7f00000003c0), 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0x2000, 0x0) r1 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x0) open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x80) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000)="c8", 0x1}], 0x1) pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$FIOGETOWN(r2, 0x8004667c, &(0x7f0000000100)) chroot(&(0x7f0000000000)='.\x00') mknod(&(0x7f0000000300)='./file0\x00', 0x2000, 0x6da) r3 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$FIOGETBMAP(r3, 0x40287448, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mknod(&(0x7f0000000300)='./file0\x00', 0x2000, 0x6da) r4 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$FIOASYNC(r4, 0x80047465, &(0x7f0000000040)) utimensat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)={{0x86, 0x4000000000000002}, {0x400000, 0xfffffffffffffffb}}, 0x200) fcntl$getown(0xffffffffffffffff, 0x5) __lstat50(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)) ioctl$FIOASYNC(r1, 0x80047401, &(0x7f0000000000)=0x5) open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x0) r5 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x13000)=nil, 0x13000, 0x1, 0x10, r5, 0x0, 0x0) madvise(&(0x7f0000196000/0x2000)=nil, 0x2000, 0x3) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) ioctl$FIOASYNC(r1, 0x80047401, &(0x7f0000000280)=0x4) 6.095866439s ago: executing program 3: fchownat(0xffffffffffffff9c, 0x0, 0xee00, 0xffffffffffffffff, 0x0) getgroups(0x2, &(0x7f0000000000)=[0xffffffffffffffff, 0x0]) open(&(0x7f0000000040)='./file0\x00', 0x80, 0x200) msgctl$IPC_SET(0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x0, r0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x5}) r1 = socket(0x18, 0x2, 0x0) fcntl$setstatus(r1, 0x4, 0x20040) connect$unix(r1, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) mlockall(0x0) 5.76446679s ago: executing program 3: open$dir(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1000000, 0x7) r0 = socket(0x18, 0x1, 0x0) ioctl$FIOSEEKHOLE(r0, 0xc048696d, &(0x7f0000000180)=0x8000000000000032) 5.318780609s ago: executing program 3: r0 = geteuid() r1 = getegid() __posix_fchown(&(0x7f0000000000)='./file0\x00', r0, r1) pipe(&(0x7f0000000900)={0xffffffffffffffff}) (async) r3 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) compat_43_orecvmsg(r4, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) (async, rerun: 32) mknod(&(0x7f0000000480)='./file0\x00', 0x2000, 0x1733) (rerun: 32) _lwp_ctl(0x10000, &(0x7f00000000c0)=&(0x7f0000000080)={0x2f7, 0x8001}) (async) r6 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIOGETOWN(r6, 0x2000427e, 0x0) (async) ioctl$FIONSPACE(r6, 0x40044271, 0x0) (async) setsockopt(r2, 0x3f, 0x8, &(0x7f0000000180)="16a600559ad20ab431652e8a8a90096fe85d78b27ebce66aa177c2362e3a6c1a5f47458a0a5eb5545d1db3d60416446a4cba2ca694b51f33a69cb5a5dd5b01c1e5253594615eb54e2d1e251db7d47aef0bbfda41a4d2658eb9ec0b51e9e083b66843e0e32a4e5610542546e0e63dc28f01a5688f84c3c320c7aa2e40200599fbe89095f376b24a6175d5bfd390f282602180e25d164def634395ce7a70e1ccf32963ec0990ef54f4538a4ebced112e4bd464a4f579c2f1f3d5541332d69c24c7829018a3a145f70457e87769745b2c4e7ca2a67f148f2e308aa5c79a6d650d41ad3feae27e01496e098fdb1f8850182b6fd5451cf8e48998", 0xf8) (async, rerun: 64) compat_50_getitimer(0x0, &(0x7f0000000140)) (rerun: 64) fktrace(r2, 0x0, 0x62e2dd08f149ff1b, r3) (async) compat_43_osetrlimit(0x0, &(0x7f0000000100)) (async, rerun: 32) madvise(&(0x7f0000457000/0x3000)=nil, 0x3000, 0x0) (rerun: 32) r7 = socket$inet6(0x18, 0x1, 0x1) ioctl$FIOSEEKDATA(r7, 0xc0086661, &(0x7f0000000280)=0x1) 5.145117816s ago: executing program 0: r0 = _lwp_self() r1 = _lwp_self() _lwp_suspend(r1) _lwp_wait(r0, 0x0) _lwp_detach(r1) socketpair(0x2, 0x10000000, 0x1, 0x0) 4.907874793s ago: executing program 2: r0 = socket(0x18, 0x3, 0x0) getsockopt(r0, 0x29, 0x26, 0x0, 0x0) socket$inet6(0x18, 0x4, 0x64) socketpair(0x10, 0x4, 0x5, &(0x7f0000001500)={0xffffffffffffffff}) paccept(r1, &(0x7f00000013c0)=@data, &(0x7f0000001580)=0xfffffffffffffed8, 0x40000000) open(&(0x7f0000000340)='./file0\x00', 0x300, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) r2 = socket(0x18, 0x2, 0x0) connect$unix(r2, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) getsockname$inet(r2, &(0x7f0000000080), &(0x7f0000000000)=0xfffffffffffffe22) msgctl$IPC_SET(0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}) r3 = socket(0x18, 0x2, 0x0) close(r3) r4 = socket(0x800000018, 0x3, 0x0) bind$unix(r4, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) connect$unix(r3, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) writev(r3, &(0x7f0000000140)=[{&(0x7f0000000a80)="dd4c618c934ae474", 0x8}], 0x1) 4.048946795s ago: executing program 2: mknod(&(0x7f0000000000)='./file0\x00', 0x1ffa, 0x0) compat_50___lstat30(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r0, &(0x7f0000000080)={0x0}, 0x10, 0x0, 0x0) open(&(0x7f0000000480)='./file0\x00', 0x80000000020206, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) compat_43_ommap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x0, r1, 0xfffffffffffffffd) symlink(&(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='./file0\x00') r2 = msgget$private(0x0, 0x21) socketpair(0x22, 0x3, 0x18, 0x0) compat_50___msgctl13$IPC_STAT(r2, 0x2, &(0x7f0000000280)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x0, 0x0, 0x200}, 0x800000000}}) lchown(&(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffff) compat_40_mount(&(0x7f0000000140)='umap\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f00000001c0)) __mount50(&(0x7f00000002c0)='overlay\x00', &(0x7f0000000040)='.\x00', 0x1000, &(0x7f00000000c0)="d6", 0x1) open$dir(&(0x7f0000000040)='./file0\x00', 0x20, 0x0) 3.407179544s ago: executing program 2: r0 = open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x0) mlockall(0x3) compat_43_ommap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xfffffffffffffffe, 0x0, r0, 0x0) 3.258802657s ago: executing program 1: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) compat_50___msgctl13$IPC_STAT(0x0, 0x2, &(0x7f0000000580)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)}}) compat_40_mount(&(0x7f0000000000)='null\x00', &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f00000001c0)) mknod(&(0x7f0000000000)='./file1\x00', 0x20, 0xa718) mknod(&(0x7f00000000c0)='./file0\x00', 0x2000, 0x4100) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) ioctl$FIOASYNC(r0, 0x80185764, &(0x7f0000000040)) socket$inet6(0x18, 0x3, 0x0) socket(0x2, 0x2, 0x0) open(&(0x7f00000002c0)='./file0\x00', 0x841, 0x0) compat_50_select(0x40, &(0x7f00000000c0)={0x66}, 0x0, 0x0, 0x0) compat_30_getfh(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r1 = socket(0x18, 0x3, 0x0) setsockopt(r1, 0x1000000029, 0x29, &(0x7f00000000c0)="5ab7776a", 0x4) unlink(&(0x7f0000000000)='./file0\x00') __fhopen40(&(0x7f0000000180)="047e96be822b6658ab4391f3070837ccc919eebcbcfad91092bff09148dc6d7da49c10979a", 0x25, 0x8) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) (async) compat_50___msgctl13$IPC_STAT(0x0, 0x2, &(0x7f0000000580)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)}}) (async) compat_40_mount(&(0x7f0000000000)='null\x00', &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f00000001c0)) (async) mknod(&(0x7f0000000000)='./file1\x00', 0x20, 0xa718) (async) mknod(&(0x7f00000000c0)='./file0\x00', 0x2000, 0x4100) (async) open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) (async) ioctl$FIOASYNC(r0, 0x80185764, &(0x7f0000000040)) (async) socket$inet6(0x18, 0x3, 0x0) (async) socket(0x2, 0x2, 0x0) (async) open(&(0x7f00000002c0)='./file0\x00', 0x841, 0x0) (async) compat_50_select(0x40, &(0x7f00000000c0)={0x66}, 0x0, 0x0, 0x0) (async) compat_30_getfh(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) socket(0x18, 0x3, 0x0) (async) setsockopt(r1, 0x1000000029, 0x29, &(0x7f00000000c0)="5ab7776a", 0x4) (async) unlink(&(0x7f0000000000)='./file0\x00') (async) __fhopen40(&(0x7f0000000180)="047e96be822b6658ab4391f3070837ccc919eebcbcfad91092bff09148dc6d7da49c10979a", 0x25, 0x8) (async) 3.098895752s ago: executing program 2: open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x0) __stat50(&(0x7f00000004c0)='./bus\x00', &(0x7f0000000000)={0x0}) mknod(&(0x7f00000011c0)='./file0\x00', 0x2000, r0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x1, 0x0) ioctl$FIOASYNC(r1, 0x80046476, &(0x7f0000001340)) 2.880476616s ago: executing program 2: r0 = getsid(0x0) mknod(&(0x7f0000000540)='./file0\x00', 0x6000, 0x1003) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) ioctl$FIONREAD(r1, 0x4004426a, 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x2) compat_40_mount(&(0x7f0000000180)='ptyfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000500)) madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0xd49f275d97cc01bb, 0x1810, 0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = open$dir(&(0x7f0000002ec0)='./file0\x00', 0x0, 0x0) r5 = socket$inet(0x2, 0x3, 0x0) setsockopt$sock_timeval(r5, 0xffff, 0x100c, 0x0, 0x0) r6 = fcntl$dupfd(r4, 0x0, r3) ioctl$FIOGETBMAP(r2, 0xc008667a, &(0x7f0000000000)=0x9) fchflags(r6, 0x0) recvmmsg(r3, &(0x7f00000002c0)={&(0x7f0000000280)={&(0x7f0000000040), 0xe, &(0x7f0000000140)=[{&(0x7f0000000200)=""/89, 0x59}, {&(0x7f00000000c0)=""/3, 0x3}], 0x2, &(0x7f0000000380)=""/4096, 0x1000}, 0x4}, 0x10, 0x0, 0x0) r7 = socket(0x18, 0x3, 0x0) connect$unix(r7, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) getsockname$inet(r7, &(0x7f0000000080), &(0x7f0000000000)=0xfffffffffffffe22) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r8 = socket(0x800000018, 0x2, 0x0) bind$unix(r8, &(0x7f0000000080)=@abs={0x0, 0x7}, 0x1c) ptrace(0x9, r0, 0x0, 0xfffffffff7fffffd) compat_50_wait4(0x0, 0x0, 0x0, 0x0) ptrace(0x2, r0, &(0x7f0000000100), 0x0) 2.863371658s ago: executing program 1: seteuid(0x0) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000e95000/0x3000)=nil) setuid(0xee01) r1 = socket(0x18, 0x2, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) compat_50_lutimes(0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() compat_43_ogetsockname(r2, &(0x7f0000000100)=""/150, &(0x7f00000001c0)=0x96) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0, 0x0) r3 = socket(0x18, 0x3, 0x0) getsockopt(r3, 0x0, 0xa, 0x0, 0x0) mmap(&(0x7f0000ff7000/0x6000)=nil, 0x6000, 0xd49f275d97cc01bb, 0x1810, 0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) compat_50_nanosleep(&(0x7f00000008c0), &(0x7f0000000900)) __mount50(&(0x7f0000000000)='nfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000200)="02", 0x1) setsockopt(r1, 0x1000000000029, 0x200, &(0x7f0000000040)='\x00\x00\x00\x00', 0x4) shmat(r0, &(0x7f0000e31000/0x4000)=nil, 0x0) 2.739504317s ago: executing program 5: r0 = semget(0x3, 0x2, 0x40) r1 = semget$private(0x0, 0x1, 0x400) semctl$SETALL(r1, 0x0, 0x9, &(0x7f0000000040)=[0x7ff]) compat_50_____semctl13$GETNCNT(r0, 0x0, 0x3) r2 = socket(0x2, 0x5, 0x64) ioctl$FIOSEEKHOLE(r2, 0xc0086662, &(0x7f0000000000)=0x7ff) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000080)={{0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x10000000000}) socket(0x800000018, 0x3, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r3 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil) shmat(r3, &(0x7f0000001000/0x3000)=nil, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r4 = socket$inet(0x2, 0x40000000, 0xfd) setsockopt$inet_opts(r4, 0x0, 0x200000000000c, 0x0, 0x0) compat_43_ocreat(0x0, 0x0) open(0x0, 0x40, 0x0) r5 = open$dir(0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0, 0x0) socket$inet(0x2, 0x0, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0xfffffffffffffffe, &(0x7f0000000200)) pwritev(r5, &(0x7f0000000080)=[{&(0x7f00000006c0)}], 0x1, 0xffffffffffffffff) utimensat(0xffffffffffffffff, &(0x7f0000000240)='./file1\x00', &(0x7f0000000400)={{0x9}}, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x200, 0x0) setreuid(0x0, 0xee01) compat_43_ogetpeername(0xffffffffffffffff, 0x0, &(0x7f0000000040)) open(0x0, 0x0, 0x0) setsockopt$inet_opts(r4, 0x0, 0xd, &(0x7f0000000240)="ea00000100000000", 0x8) r6 = socket(0x10, 0x2, 0x0) connect$inet(r6, &(0x7f0000000080)={0x10, 0x0}, 0x10) 2.699913793s ago: executing program 0: r0 = _lwp_self() r1 = _lwp_self() _lwp_suspend(r1) _lwp_wait(r0, 0x0) _lwp_detach(r1) socketpair(0x2, 0x10000000, 0x1, 0x0) 2.277500989s ago: executing program 1: compat_50___msgctl13$IPC_STAT(0x0, 0x2, &(0x7f0000000280)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x0, 0x400}}}) compat_40_mount(&(0x7f0000000380)='tmpfs\x00', &(0x7f00000003c0)='.\x00', 0x0, &(0x7f0000000140)="01") mkdir(&(0x7f0000000080)='./file0\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)=@abs={0x0, 0x0, 0x2}, 0x8, &(0x7f0000000200)}, 0x0) lchown(&(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffff) compat_40_mount(&(0x7f0000000140)='umap\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f00000001c0)) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) unmount(&(0x7f0000000000)='./file0\x00', 0x255a0100) ioctl$FIONREAD(r0, 0x4004667f, 0x0) ioctl$FIOSEEKHOLE(0xffffffffffffffff, 0x80906979, &(0x7f0000000180)=0x8000000000000031) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) socket(0x2, 0x4, 0x0) compat_40_mount(&(0x7f0000000380)='tmpfs\x00', &(0x7f00000003c0)='.\x00', 0x0, &(0x7f0000000200)="01") mknod(&(0x7f0000000000)='./file0\x00', 0xe015, 0x0) symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00') open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mkdir(0x0, 0x0) open$dir(0x0, 0x0, 0x0) close(0xffffffffffffffff) open(&(0x7f0000000640)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0) chroot(0x0) __mount50(&(0x7f00000002c0)='kernfs\x00', &(0x7f0000000040)='.\x00', 0x0, &(0x7f0000000540), 0x0) symlink(&(0x7f0000000080)='.\x00', &(0x7f00000000c0)='./file0\x00') socket(0x0, 0x0, 0x0) compat_50___msgctl13$IPC_STAT(0x0, 0x2, &(0x7f0000000280)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100), 0xdffffffffefff7ff}}) compat_40_mount(&(0x7f0000000380)='union\x00', &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f00000001c0)) mkdir(&(0x7f0000000040)='./file2\x00', 0x0) 2.20263933s ago: executing program 4: mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r0 = fcntl$dupfd(0xffffffffffffffff, 0xb, 0xffffffffffffffff) compat_50___fstat30(r0, 0x0) writev(0xffffffffffffffff, &(0x7f00000003c0), 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0x2000, 0x0) r1 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x0) open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x80) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000)="c8", 0x1}], 0x1) pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$FIOGETOWN(r2, 0x8004667c, &(0x7f0000000100)) chroot(&(0x7f0000000000)='.\x00') mknod(&(0x7f0000000300)='./file0\x00', 0x2000, 0x6da) r3 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$FIOGETBMAP(r3, 0x40287448, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mknod(&(0x7f0000000300)='./file0\x00', 0x2000, 0x6da) r4 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$FIOASYNC(r4, 0x80047465, &(0x7f0000000040)) utimensat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)={{0x86, 0x4000000000000002}, {0x400000, 0xfffffffffffffffb}}, 0x200) fcntl$getown(0xffffffffffffffff, 0x5) __lstat50(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)) ioctl$FIOASYNC(r1, 0x80047401, &(0x7f0000000000)=0x5) open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x0) r5 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x13000)=nil, 0x13000, 0x1, 0x10, r5, 0x0, 0x0) madvise(&(0x7f0000196000/0x2000)=nil, 0x2000, 0x3) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) ioctl$FIOASYNC(r1, 0x80047401, &(0x7f0000000280)=0x4) 2.090156807s ago: executing program 3: modctl$MODCTL_UNLOAD(0x4, &(0x7f0000000400)="d767aa2cb504000000000000006f") pipe2(0x0, 0x3400004) chroot(&(0x7f0000000000)='./file0\x00') 1.680763461s ago: executing program 0: r0 = socket(0x18, 0x3, 0x0) getsockopt(r0, 0x29, 0x26, 0x0, 0x0) socket$inet6(0x18, 0x4, 0x64) socketpair(0x10, 0x4, 0x5, &(0x7f0000001500)={0xffffffffffffffff}) paccept(r1, &(0x7f00000013c0)=@data, &(0x7f0000001580)=0xfffffffffffffed8, 0x40000000) open(&(0x7f0000000340)='./file0\x00', 0x300, 0x0) r2 = socket(0x18, 0x2, 0x0) connect$unix(r2, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) getsockname$inet(r2, &(0x7f0000000080), &(0x7f0000000000)=0xfffffffffffffe22) msgctl$IPC_SET(0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}) r3 = socket(0x18, 0x2, 0x0) close(r3) r4 = socket(0x800000018, 0x3, 0x0) bind$unix(r4, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) connect$unix(r3, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) writev(r3, &(0x7f0000000140)=[{&(0x7f0000000a80)="dd4c618c934ae474", 0x8}], 0x1) 1.656011514s ago: executing program 1: r0 = socket$inet(0x2, 0x3, 0x0) setsockopt$inet_opts(r0, 0x0, 0x200000000000c, &(0x7f0000000080)="eaef125c000000", 0x7) setsockopt$inet_opts(r0, 0x0, 0x200000000000c, &(0x7f0000000500)="eaef125c00000000", 0x8) 1.220500161s ago: executing program 5: r0 = semget(0x3, 0x2, 0x40) r1 = semget$private(0x0, 0x1, 0x400) semctl$SETALL(r1, 0x0, 0x9, &(0x7f0000000040)=[0x7ff]) compat_50_____semctl13$GETNCNT(r0, 0x0, 0x3) r2 = socket(0x2, 0x5, 0x64) ioctl$FIOSEEKHOLE(r2, 0xc0086662, &(0x7f0000000000)=0x7ff) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000080)={{0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x10000000000}) socket(0x800000018, 0x3, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r3 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil) shmat(r3, &(0x7f0000001000/0x3000)=nil, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r4 = socket$inet(0x2, 0x40000000, 0xfd) setsockopt$inet_opts(r4, 0x0, 0x200000000000c, 0x0, 0x0) compat_43_ocreat(0x0, 0x0) open(0x0, 0x40, 0x0) r5 = open$dir(0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0, 0x0) socket$inet(0x2, 0x0, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0xfffffffffffffffe, &(0x7f0000000200)) pwritev(r5, &(0x7f0000000080)=[{&(0x7f00000006c0)}], 0x1, 0xffffffffffffffff) utimensat(0xffffffffffffffff, &(0x7f0000000240)='./file1\x00', &(0x7f0000000400)={{0x9}}, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x200, 0x0) setreuid(0x0, 0xee01) compat_43_ogetpeername(0xffffffffffffffff, 0x0, &(0x7f0000000040)) open(0x0, 0x0, 0x0) setsockopt$inet_opts(r4, 0x0, 0xd, &(0x7f0000000240)="ea00000100000000", 0x8) r6 = socket(0x10, 0x2, 0x0) connect$inet(r6, &(0x7f0000000080)={0x10, 0x0}, 0x10) 1.213877203s ago: executing program 1: mknod(0x0, 0x0, 0x4f4b) __stat50(0x0, 0x0) symlink(&(0x7f0000000080)='.\x00', 0x0) __mount50(&(0x7f00000001c0)='fdesc\x00', &(0x7f0000000040)='.\x00', 0x0, 0x0, 0x0) __mount50(&(0x7f0000000000)='overlay\x00', &(0x7f0000000040)='.\x00', 0x0, &(0x7f0000000540), 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) readv(r0, &(0x7f0000000040)=[{0x0}], 0x1) symlink(&(0x7f0000000080)='.\x00', &(0x7f00000004c0)='./file0\x00') compat_50___msgctl13$IPC_STAT(0x0, 0x2, &(0x7f00000003c0)={{0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100), 0x3}}) lchown(&(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffff) compat_40_mount(&(0x7f0000000380)='union\x00', &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f00000001c0)) chflags(&(0x7f00000000c0)='./file0\x00', 0x0) r2 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r2, &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x42, &(0x7f0000000f80)=ANY=[@ANYRES16=r1], 0x36, 0x8}, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)="c98d66", 0x3}], 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) compat_43_osendmsg(r3, &(0x7f00000000c0), 0x0) __getvfsstat90(&(0x7f0000000240), 0xce0, 0x2) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) socket(0x1f, 0x40000003, 0x0) mknod(0x0, 0x2, 0x0) pipe2(&(0x7f00000009c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$FIOASYNC(r5, 0x8004667d, &(0x7f0000000000)=0x101) readv(r4, &(0x7f0000000640)=[{&(0x7f00000006c0)=""/217, 0xd9}], 0x1) dup3(r0, r3, 0x0) __mount50(&(0x7f00000002c0)='overlay\x00', &(0x7f0000000040)='.\x00', 0x0, 0x0, 0x0) chflags(&(0x7f00000003c0)='./file0\x00', 0x5) unlink(&(0x7f0000000000)='./file0\x00') getpid() 1.145707593s ago: executing program 5: mknod(&(0x7f0000000100)='./file0\x00', 0x80002005, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) open(0x0, 0x615, 0x0) truncate(&(0x7f0000000200)='./file0\x00', 0x0, 0x10008001) r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) pread(r1, &(0x7f00000001c0)='6', 0x1, 0x0) ioctl$FIOASYNC(r0, 0x80047401, &(0x7f0000000040)=0xa) unmount(&(0x7f0000000000)='./file1\x00', 0x2000000) 1.137751664s ago: executing program 0: mknod(&(0x7f0000000000)='./file0\x00', 0x1ffa, 0x0) compat_50___lstat30(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r0, &(0x7f0000000080)={0x0}, 0x10, 0x0, 0x0) open(&(0x7f0000000480)='./file0\x00', 0x80000000020206, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) compat_43_ommap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x0, r1, 0xfffffffffffffffd) symlink(&(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='./file0\x00') r2 = msgget$private(0x0, 0x21) socketpair(0x22, 0x3, 0x18, 0x0) compat_50___msgctl13$IPC_STAT(r2, 0x2, &(0x7f0000000280)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x0, 0x0, 0x200}, 0x800000000}}) lchown(&(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffff) compat_40_mount(&(0x7f0000000140)='umap\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f00000001c0)) __mount50(&(0x7f00000002c0)='overlay\x00', &(0x7f0000000040)='.\x00', 0x1000, &(0x7f00000000c0)="d6", 0x1) open$dir(&(0x7f0000000040)='./file0\x00', 0x20, 0x0) 1.09686371s ago: executing program 3: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe(0x0) setreuid(0x0, 0xee01) __clock_settime50(0x0, &(0x7f0000000040)={0x80}) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000100)="19", 0x3a4e1e905c56cdb7}], 0x1) 1.005234025s ago: executing program 2: r0 = __clone(0x0, &(0x7f0000000140)) fktrace(0xffffffffffffffff, 0x0, 0x0, r0) munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000) (async) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) (async, rerun: 64) r1 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) (rerun: 64) compat_43_fstat43(r1, &(0x7f0000000080)) (async) pipe(&(0x7f0000000280)={0xffffffffffffffff}) pwrite(r2, 0x0, 0x0, 0x0) (async) setpgid(r0, 0x0) (async) __msync13(&(0x7f0000ffd000/0x3000)=nil, 0xff, 0x0) 702.294922ms ago: executing program 0: __posix_rename(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./bus\x00') __stat50(&(0x7f00000004c0)='./bus\x00', &(0x7f0000000000)={0x0}) mknod(&(0x7f00000011c0)='./file0\x00', 0x2000, r0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x1, 0x0) ioctl$FIOASYNC(r1, 0x80046476, &(0x7f0000001340)) 634.842622ms ago: executing program 5: mknod(&(0x7f0000000000)='./bus\x00', 0x2000, 0x2e00) r0 = open$dir(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) compat_30___stat13(&(0x7f0000000040)='./bus\x00', &(0x7f0000000180)) pread(r0, &(0x7f0000000140)='5', 0x1, 0x0) 328.841099ms ago: executing program 1: r0 = open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x0) mlockall(0x3) compat_43_ommap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x2, r0, 0x0) 227.212235ms ago: executing program 5: mknod(&(0x7f00000000c0)='./file0\x00', 0x6000, 0xe03) r0 = open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x0) write(r0, &(0x7f0000000040)='\t', 0xa) r1 = _lwp_self() _lwp_unpark_all(&(0x7f0000000040)=[r1], 0x1, 0x0) 26.789315ms ago: executing program 0: compat_50_clock_gettime(0x3, &(0x7f0000000040)) 5.244019ms ago: executing program 3: compat_30_fhopen(&(0x7f0000000080)={{}, {0x0, 0x0, "76d048c6b670f7b444ff6f73dbfcc72d"}}, 0x0) pipe(&(0x7f0000000900)={0xffffffffffffffff}) mknod(&(0x7f00000000c0)='./file0\x00', 0x2000, 0x4100) r1 = open(&(0x7f00000001c0)='./file0\x00', 0x40ce1, 0x0) ioctl$FIOASYNC(r1, 0x80047476, &(0x7f0000000080)) r2 = getpid() fktrace(r0, 0x0, 0x62e2dd08f149ff1b, r2) compat_43_osetrlimit(0x0, &(0x7f0000000100)) madvise(&(0x7f0000457000/0x3000)=nil, 0x3000, 0x0) 0s ago: executing program 5: sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd5}, 0x0) compat_40_mount(&(0x7f0000000080)='nfs\x00', &(0x7f0000000100)='.\x00', 0x0, &(0x7f0000000180)="03") compat_40_mount(&(0x7f0000000200)='procfs\x00', &(0x7f00000000c0)='.\x00', 0x0, &(0x7f00000002c0)="01") getsockname$inet(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000000)=0xffffffffffffff35) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = socket(0x1f, 0xe8fe9d665e68c6ce, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x90, r1, 0x0, 0x2) compat_43_osendmsg(r0, &(0x7f0000000000)="114bad16ef02a895ceb43215f95b4baa13d0ae36bff6e1ba2be2e8ddcd99bd8c7a178986752ac7395837d52382897186c7b036bf5ea17bf65e6e1f", 0x209) mprotect(&(0x7f000018c000/0x2000)=nil, 0x2000, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000004d812, 0xffffffffffffffff, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.123' (ED25519) to the list of known hosts. 2024/06/20 05:30:42 fuzzer started 2024/06/20 05:30:42 dialing manager at 10.128.0.163:30038 2024/06/20 05:30:42 starting 6 executor processes [ 44.4838945] uhub4: device problem, disabling port 1 [ 45.9238904] sockaddr_getsize_by_family: (syz-executor.2:1639:1326) Unhandled address family=0 [ 45.9838904] pad0: outputs: 44100Hz, 16-bit, stereo [ 45.9938868] audio0 at pad0: playback [ 45.9938868] audio0: slinear_le:16 -> slinear_le:16 2ch 44100Hz, blk 1764 bytes (10ms) for playback [ 46.0074969] spkr1 at audio0: PC Speaker (synthesized) [ 46.0148513] wsbell at spkr1 not configured [ 46.0838857] pad1: outputs: 44100Hz, 16-bit, stereo [ 46.0838857] audio1 at pad1: playback [ 46.0938838] audio1: slinear_le:16 -> slinear_le:16 2ch 44100Hz, blk 1764 bytes (10ms) for playback [ 46.1044034] spkr2 at audio1: PC Speaker (synthesized) [ 46.1044034] wsbell at spkr2 not configured [ 46.1338861] pad2: outputs: 44100Hz, 16-bit, stereo [ 46.1338861] audio2 at pad2: playback [ 46.1460088] audio2: slinear_le:16 -> slinear_le:16 2ch 44100Hz, blk 1764 bytes (10ms) for playback [ 46.1569735] spkr3 at audio2: PC Speaker (synthesized) [ 46.1642731] wsbell at spkr3 not configured [ 46.3738875] spkr1: detached [ 46.3838854] audio0: detached [ 46.3838854] pad0: detached [ 46.3938869] spkr2: detached [ 46.3938869] audio1: detached [ 46.4063363] pad1: detached [ 46.4063363] spkr3: detached [ 46.4138811] audio2: detached [ 46.4238836] pad2: detached [ 46.9938896] tap5: detached [ 48.5538778] tap0: detached [ 48.9539026] tap3: detached [ 49.6338772] tap4: detached [ 50.2538767] tap1: detached [ 50.8838789] WARNING: defaulted mmap() share type to MAP_PRIVATE (pid 1600 command syz-executor.4) [ 50.9738756] tap2: detached [ 51.6938761] kobj_load, 189: [./file0]: linker error: not an ELF object [ 51.7038746] WARNING: module error: vfs load failed for `./file0', error 8 [ 52.3638730] tap0: detached [ 52.4638789] superblock read failed [ 52.6138739] WARNING: module error: vfs load failed for `compat_sysv_14', error 2 [ 53.6638794] WARNING: module error: vfs load failed for `autofs', error 2 [ 53.7938746] tap3: detached [ 53.8438788] tap1: detached [ 54.8038817] WARNING: defaulted mmap() share type to MAP_PRIVATE (pid 1628 command syz-executor.2) [ 55.2738702] tap4: detached [ 57.3938647] tap3: detached [ 57.9738655] tap2: detached [ 58.0238668] tap5: detached [ 59.5638635] WARNING: defaulted mmap() share type to MAP_PRIVATE (pid 2013 command syz-executor.4) [ 59.5938786] WARNING: defaulted mmap() share type to MAP_PRIVATE (pid 2013 command syz-executor.4) [ 59.6738686] tap1: detached [ 59.9438608] tap0: detached [ 60.7838853] tap5: detached [ 61.3038593] WARNING: defaulted mmap() share type to MAP_PRIVATE (pid 2606 command syz-executor.1) [ 62.7838647] tap4: detached [ 63.6738555] tap5: detached [ 64.3238540] tap1: detached [ 64.8338595] tap0: detached ~[ 67.3338497] tap5: detached [ 67.9238478] tap3: detached [ 68.7438520] tap4: detached [ 69.3238556] tap0: detached [ 69.3438615] tap1: detached [ 70.1138475] WARNING: defaulted mmap() share type to MAP_PRIVATE (pid 2635 command syz-executor.4) [ 70.2838564] WARNING: defaulted mmap() share type to MAP_SHARED (pid 3252 command syz-executor.0) [ 72.0038443] tap4: detached [ 72.2738409] tap1: detached [ 73.1038485] ./file0: failed to start extattr: error = 45 [ 73.6438386] tap0: detached [ 74.9238417] kobj_load, 185: [./file0]: linker error: read failed 22 [ 74.9338384] WARNING: module error: vfs load failed for `./file0', error 22 [ 75.5238372] tap5: detached [ 75.7038371] tap4: detached [ 76.0738386] tap1: detached [ 77.1238435] WARNING: module error: vfs load failed for `nilfs', error 2 [ 77.6038372] kobj_load, 185: [./file0]: linker error: read failed 21 [ 77.6238351] WARNING: module error: vfs load failed for `./file0', error 21 [ 78.3438340] tap5: detached [ 79.0738288] tap4: detached [ 79.3638281] WARNING: module error: vfs load failed for `compat_sysv_14', error 2 [ 79.9838404] tap3: detached [ 80.7938335] tap1: detached [ 81.8238290] tap4: detached [ 82.4338271] WARNING: module error: vfs load failed for `compat_12', error 2 [ 83.0838261] tap3: detached [ 84.3338219] tap1: detached [ 85.3438308] WARNING: module error: vfs load failed for `', error 2 [ 85.7138203] at_ifinit: timeout?! [ 85.7738191] aarpprobe why did this happen?! [ 85.9938180] tap3: detached [ 86.1838256] tap0: detached [ 86.6838203] WARNING: module error: vfs load failed for `hfs', error 2 [ 86.9838213] WARNING: module error: vfs load failed for `compat_12', error 2 [ 87.7038183] WARNING: module error: vfs load failed for `', error 2 [ 89.1338163] tap3: detached [ 91.0738134] tap2: detached [ 92.0638230] tap3: detached [ 93.2638139] tap0: detached [ 93.8638198] .: failed to start extattr, error = 0tap2: detached [ 94.5138077] tap3: detached [ 94.9238073] WARNING: defaulted mmap() share type to MAP_SHARED (pid 3020 command syz-executor.2) [ 94.9938060] WARNING: defaulted mmap() share type to MAP_SHARED (pid 3020 command syz-executor.2) [ 95.1338055] irframe0: SIR [ 95.1338055] irframe0 attached at tty00 [ 95.7538263] tap3: detached [ 97.3238001] tap3: detached [ 97.4938085] tap2: detached [ 100.1237986] tap0: detached [ 101.0638012] tap0: detached [ 101.9638025] tap0: detached [ 105.2837936] tap2: detached [ 105.4837930] tap3: detached [ 106.6137907] tap3: detached [ 107.7937851] tap3: detached [ 109.5537846] tap0: detached [ 110.9037882] tap5: detached [ 112.0737808] tap0: detached [ 113.3237780] tap2: detached [ 114.2237752] tap5: detached [ 117.1737698] tap3: detached [ 118.6837712] tap4: detached [ 119.3037812] tap5: detached [ 120.6937647] tap1: detached [ 122.0437654] tap0: detached [ 123.4137736] tap4: detached [ 123.7037630] tap2: detached [ 125.0637640] tap5: detached [ 126.3837630] tap4: detached [ 126.8537556] tap2: detached [ 129.4637501] tap3: detached [ 130.8637525] tap1: detached [ 131.0537494] tap5: detached [ 133.3337448] tap1: detached [ 134.8737759] tap0: detached [ 136.1637419] tap5: detached [ 137.3937412] tap1: detached [ 137.5237406] tap3: detached [ 139.0937379] tap2: detached [ 139.2637352] tap4: detached [ 141.7137381] tap0: detached [ 142.1037374] tap5: detached [ 143.0837311] tap3: detached [ 143.8537304] tap2: detached [ 146.1937246] tap0: detached [ 146.5837261] tap4: detached [ 148.6637212] tap5: detached [ 148.7537194] tap0: detached [ 149.8137187] tap3: detached [ 151.4637283] tap1: detached [ 152.1937172] tap4: detached [ 153.8237140] tap2: detached [ 155.2537110] tap0: detached [ 155.8137101] tap3: detached [ 156.6937094] tap1: detached [ 156.9037104] tap5: detached [ 159.1337053] tap4: detached [ 159.8937047] tap1: detached [ 161.1937014] tap2: detached [ 162.5637233] tap3: detached [ 163.1437119] tap5: detached [ 163.6437064] tap0: detached [ 163.6836959] tap4: detached [ 165.0636970] tap2: detached [ 165.7236928] tap3: detached [ 166.8436918] tap4: detached [ 168.1036906] tap0: detached [ 169.3436995] tap4: detached [ 170.8036884] tap3: detached [ 171.6136853] tap0: detached [ 171.9237092] tap2: detached [ 174.3736795] tap5: detached [ 174.5436797] tap3: detached [ 175.7736809] tap2: detached [ 176.0336821] tap0: detached [ 178.2736752] tap4: detached [ 178.4136757] tap5: detached [ 179.4736707] tap0: detached [ 181.0536693] tap3: detached [ 181.1736753] tap4: detached [ 182.8336700] tap5: detached [ 185.7236691] tap3: detached [ 186.1136613] tap5: detached [ 186.5736624] tap4: detached [ 186.8436632] tap2: detached [ 189.9436564] tap2: detached [ 190.1336582] tap4: detached [ 190.2136565] tap0: detached [ 192.3236600] tap1: detached [ 193.5836598] tap2: detached [ 194.2436614] WARNING: module error: vfs load failed for `compat_sysv_14', error 2 [ 195.2536502] tap5: detached [ 196.1836466] tap2: detached [ 196.5036478] .: failed to start extattr, error = 0tap5: detached [ 198.6636437] tap2: detached [ 200.2036411] tap0: detached [ 201.2036409] tap1: detached [ 203.1236453] tap4: detached [ 203.2436404] tap5: detached [ 204.2236328] tap1: detached [ 205.2336341] WARNING: module error: vfs load failed for `compat_12', error 2 [ 205.4936307] tap2: detached [ 206.8036310] WARNING: module error: module `K`-v' not found [ 207.0636288] tap4: detached [ 209.1736251] tap2: detached [ 210.1736289] tap0: detached [ 210.6036226] tap1: detached [ 210.7236283] tap4: detached [ 211.7536228] uhub4: device problem, disabling port 1 [ 213.1636210] tap1: detached [ 214.0536184] tap5: detached [ 214.5236230] WARNING: module error: vfs load failed for `compat_sysv_14', error 2 [ 214.8536177] tap0: detached [ 215.2436293] uhub1: device problem, disabling port 1 [ 215.4336159] WARNING: module error: vfs load failed for `compat_12', error 2 [ 216.6036164] tap4: detached [ 218.6036231] tap5: detached [ 219.3236145] tap1: detached [ 221.9236050] tap2: detached [ 223.5636014] tap5: detached [ 224.1836082] tap1: detached [ 224.4436028] tap4: detached [ 225.8836009] .: failed to start extattr, error = 0WARNING: module error: vfs load failed for `compat_12', error 2 [ 226.6835996] tap3: detached [ 227.0636048] tap2: detached [ 227.1236053] tap0: detached [ 227.8036001] superblock read failed [ 229.1636057] WARNING: module error: vfs load failed for `zfs', error 2 [ 229.9935959] tap5: detached [ 230.0835924] tap4: detached [ 230.8935931] WARNING: module error: vfs load failed for `nilfs', error 2 [ 231.1335906] tap1: detached [ 232.9635916] tap2: detached [ 233.6135909] WARNING: module error: vfs load failed for `compat_12', error 2 [ 233.6240103] tap3: detached [ 235.1335849] tap0: detached [ 235.7935995] tap2: detached [ 237.5935791] tap3: detached [ 237.7935932] tap1: detached [ 238.9935811] tap0: detached [ 240.0335773] tap4: detached [ 240.4235799] tap2: detached [ 241.5335797] tap1: detached [ 244.8835856] kobj_load, 185: [./file0]: linker error: read failed 22 [ 244.8979100] WARNING: module error: vfs load failed for `./file0', error 22 [ 245.1435705] tap1: detached [ 246.0335702] tap4: detached [ 247.4435712] tap1: detached [ 248.5235628] tap4: detached [ 249.7135911] tap1: detached [ 251.1935598] tap0: detached [ 252.6735758] tap4: detached [ 253.5435575] uhub0: device problem, disabling port 1 [ 253.5935548] tap1: detached [ 254.2035579] WARNING: module error: vfs load failed for `', error 2 [ 254.2135570] WARNING: module error: vfs load failed for `', error 2 [ 254.5335541] btuart0: major 8 minor 262146 [ 254.7035547] WARNING: defaulted mmap() share type to MAP_PRIVATE (pid 8784 command syz-executor.1) [ 254.8435593] tap3: detached [ 255.0735498] btuart0: detached [ 255.3735532] tap2: detached [ 256.1135545] WARNING: defaulted mmap() share type to MAP_PRIVATE (pid 8878 command syz-executor.0) [ 256.6635484] WARNING: module error: vfs load failed for `J!Sc(I', error 2 [ 257.6035581] tap1: detached [ 257.9235524] uhub2: device problem, disabling port 1 [ 258.8135469] tap3: detached [ 259.7435463] tap4: detached [ 260.1235577] WARNING: module error: vfs load failed for `', error 2 [ 260.1235577] WARNING: module error: vfs load failed for `', error 2 [ 260.1335465] WARNING: module error: vfs load failed for `', error 2 [ 260.2035472] WARNING: defaulted mmap() share type to MAP_SHARED (pid 9040 command syz-executor.1) [ 260.3935496] irframe0 detached from tty00 [ 260.3935496] irframe0: detached [ 260.4935443] tap0: detached [ 262.6235428] tap1: detached [ 265.0635378] tap4: detached [ 265.3135534] tap3: detached [ 266.1535366] tap0: detached [ 266.2535572] tap5: detached [ 267.0635355] tap1: detached [ 268.5735337] tap3: detached [ 268.8335361] WARNING: defaulted mmap() share type to MAP_SHARED (pid 8078 command syz-executor.5) [ 270.6535326] WARNING: module error: vfs load failed for `', error 2 [ 270.9435433] WARNING: module error: vfs load failed for `compat_12', error 2 [ 272.2935257] tap5: detached [ 272.5235266] tap3: detached [ 272.6935268] load: 11.08 cmd: getty 1195 [ttyraw] 0.00u 0.04s 0% 1644k [ 273.0735233] WARNING: defaulted mmap() share type to MAP_SHARED (pid 7835 command syz-executor.4) [ 273.6335261] WARNING: defaulted mmap() share type to MAP_SHARED (pid 8866 command syz-executor.3) [ 273.6635248] pmap_unwire: wiring for pmap 0xffff818dd9f19200 va 0x20000000 did not change! [ 274.5235285] tap0: detached [ 275.9835226] tap1: detached [ 276.5135211] tap4: detached [ 277.0635187] tap2: detached [ 277.3035214] tap3: detached [ 277.3635186] load: 11.39 cmd: getty 1195 [ttyraw] 0.00u 0.04s [ 277.3635186] WARNING: defaulted mmap() share type to MAP_SHARED (pid 9062 command syz-executor.4) 0% 1644k [ 279.6035130] tap5: detached [ 280.4235114] tap4: detached [ 280.7235152] tap0: detached [ 280.7835140] irframe0: SIR [ 280.7835140] irframe0 attached at tty00 [ 282.4635135] lo[ 282.4635135] irframe0 detached from tty00 [ 282.4635135] irframe0: detached [ 282.4735136] WARNING: defaulted mmap() share type to MAP_SHARED (pid 10925 command syz-executor.4) [ 282.6535097] tap5: detached ~Jan 1 00:03:33 init: getty repeating too quickly on port `/dev/constty', sleeping}-}*İY~[ 283.4435127] irframe0: SIR [ 283.4435127] irframe0 attached at tty00 [ 283.9035147] WARNING: module error: vfs load failed for `', error 2 [ 284.6535065] panic: UBSan: Undefined Behavior in /syzkaller/managers/ci2-netbsd-kubsan/kernel/sys/dev/wscons/wsmux.c:529:33, member access within null pointer of type 'struct pgrp' [ 284.6634974] cpu1: Begin traceback... [ 284.7034964] vpanic() at netbsd:vpanic+0x2f0 [ 284.8334956] Report() at netbsd:Report+0x3b [ 284.9334959] HandleTypeMismatch() at netbsd:HandleTypeMismatch+0x1fb [ 285.0334966] wsmux_do_ioctl() at netbsd:wsmux_do_ioctl+0x13bb [ 285.1234973] cdev_ioctl() at netbsd:cdev_ioctl+0x162 [ 285.2134960] spec_ioctl() at netbsd:spec_ioctl+0xf2 [ 285.3034963] VOP_IOCTL() at netbsd:VOP_IOCTL+0x149 [ 285.3934947] vn_ioctl() at netbsd:vn_ioctl+0x1a4 [ 285.4834986] sys_ioctl() at netbsd:sys_ioctl+0xd88 [ 285.5734943] sys___syscall() at netbsd:sys___syscall+0x1e4 [ 285.6634955] syscall() at netbsd:syscall+0x28b [ 285.6834995] --- syscall (number 54 via SYS_syscall) --- [ 285.7134990] netbsd:syscall+0x28b: [ 285.7134990] cpu1: End traceback... [ 285.7234960] fatal breakpoint trap in supervisor mode [ 285.7234960] trap type 1 code 0 rip 0xffffffff80235475 cs 0x8 rflags 0x246 cr2 0x1b33625000 ilevel 0 rsp 0xffff87025d642630 [ 285.7334929] curlwp 0xffff818decb69a80 pid 9808.10458 lowest kstack 0xffff87025d63e2c0 Stopped in pid 9808.10458 (syz-executor.3) at netbsd:breakpoint+0x5: leave ? breakpoint() at netbsd:breakpoint+0x5 db_panic() at netbsd:db_panic+0xec vpanic() at netbsd:vpanic+0x2f0 Report() at netbsd:Report+0x3b HandleTypeMismatch() at netbsd:HandleTypeMismatch+0x1fb wsmux_do_ioctl() at netbsd:wsmux_do_ioctl+0x13bb cdev_ioctl() at netbsd:cdev_ioctl+0x162 spec_ioctl() at netbsd:spec_ioctl+0xf2 VOP_IOCTL() at netbsd:VOP_IOCTL+0x149 vn_ioctl() at netbsd:vn_ioctl+0x1a4 sys_ioctl() at netbsd:sys_ioctl+0xd88 sys___syscall() at netbsd:sys___syscall+0x1e4 syscall() at netbsd:syscall+0x28b --- syscall (number 54 via SYS_syscall) --- netbsd:syscall+0x28b: Panic string: UBSan: Undefined Behavior in /syzkaller/managers/ci2-netbsd-kubsan/kernel/sys/dev/wscons/wsmux.c:529:33, member access within null pointer of type 'struct pgrp' PID LID S CPU FLAGS STRUCT LWP * NAME WAIT 9716 9716 2 1 10000000 ffff818e209b6040 syz-executor.5 9808 >10458 7 1 0 ffff818decb69a80 syz-executor.3 9808 9834 2 0 0 ffff818e1abdeb80 syz-executor.3 9808 9808 2 1 10000000 ffff818e209b68c0 syz-executor.3 9365 9365 2 0 0 ffff818e08578700 syz-executor.0 9626 > 9626 7 0 0 ffff818e010ca9c0 syz-executor.4 11699 11699 2 0 40000 ffff818df87e2a00 syz-executor.2 9124 9124 3 0 40180 ffff818dd969eac0 init nanoslp 11519 11519 2 1 140 ffff818e13b1e340 syz-executor.5 8836 8836 2 1 140 ffff818e026d8900 syz-executor.0 8698 8698 2 1 140 ffff818e0f7cd6c0 syz-executor.3 8790 8790 2 1 0 ffff818e010ca140 syz-executor.1 7783 7783 3 0 180 ffff818dfb4fe940 syz-executor.2 parked 9024 9024 3 0 180 ffff818e08578b40 syz-executor.2 parked 6439 6439 3 1 180 ffff818e026d8080 syz-executor.0 parked 6285 6285 3 1 180 ffff818e1abde300 syz-executor.3 parked 6745 6745 3 1 180 ffff818e0f7cdb00 syz-executor.3 parked 5763 5763 3 1 180 ffff818de0b09480 syz-executor.5 parked 5780 8319 3 1 15100000 ffff818decb69640 syz-executor.5 vfork 5780 5780 2 1 11000040 ffff818e085782c0 syz-executor.5 7502 7502 3 1 180 ffff818e1090dac0 syz-executor.0 parked 5704 5704 3 1 180 ffff818dec71fa00 syz-executor.2 parked 3674 3674 3 1 180 ffff818e11ae9600 syz-executor.0 parked 5322 5322 3 0 180 ffff818dee672240 syz-executor.4 parked 3878 3878 3 0 180 ffff818decb69200 syz-executor.0 parked 5327 5327 3 1 180 ffff818ddaa71040 syz-executor.3 parked 6603 3880 3 0 1100000 ffff818e026d84c0 syz-executor.3 vfork 6603 6603 2 1 11000040 ffff818dec71f180 syz-executor.3 3983 3983 3 0 180 ffff818dde266700 syz-executor.5 parked 6588 6588 3 0 180 ffff818e00a00780 syz-executor.0 parked 3139 3139 3 0 180 ffff818ddd616b00 syz-executor.2 parked 3231 3231 3 0 180 ffff818decf656c0 syz-executor.4 parked 4256 4256 3 1 180 ffff818de76d6340 syz-executor.5 parked 4816 4816 3 1 180 ffff818decd22600 syz-executor.1 parked 2954 3669 2 1 1000040 ffff818e00a00bc0 syz-executor.1 2954 5431 3 1 1100000 ffff818e03f51540 syz-executor.1 vfork 3126 3126 3 0 180 ffff818df7e71b80 syz-executor.1 parked 2195 2195 3 0 180 ffff818decf65280 syz-executor.1 parked 4685 4685 3 0 180 ffff818ddb81ca80 syz-executor.4 parked 4840 4840 3 1 180 ffff818dde2662c0 syz-executor.2 parked 1688 1688 3 0 180 ffff818de76d6bc0 syz-executor.0 parked 4268 4268 3 1 180 ffff818df7e71740 syz-executor.1 parked 2385 2385 3 1 180 ffff818dee672680 syz-executor.3 parked 1436 1436 3 1 180 ffff818df7e71300 syz-executor.2 parked 1410 1410 3 1 180 ffff818df2f6b700 syz-executor.0 parked 1381 1381 3 1 180 ffff818df2f6bb40 syz-executor.3 parked 1164 1164 3 1 180 ffff818decf65b00 syz-executor.2 parked 1066 1066 3 0 180 ffff818dda80c4c0 syz-executor.0 parked 3403 3403 3 0 180 ffff818de0b098c0 syz-executor.3 parked 1022 1022 3 0 180 ffff818dee672ac0 syz-executor.2 parked 1848 1848 3 0 180 ffff818dec71f5c0 syz-executor.0 parked 740 740 3 1 180 ffff818ddd8cb100 syz-executor.1 parked 739 737 3 1 1100000 ffff818de16ac580 syz-executor.1 vfork 739 739 2 0 11000040 ffff818de16ac9c0 syz-executor.1 3037 3037 3 1 180 ffff818ddd8cb540 syz-executor.4 parked 1243 1624 3 1 1100000 ffff818dd9d06740 syz-executor.4 vfork 1243 1243 2 0 11000040 ffff818dda97b500 syz-executor.4 3633 3633 3 0 180 ffff818de565d0c0 syz-executor.4 parked 3509 3509 3 1 180 ffff818ddb4ce180 syz-executor.5 parked 3164 3164 3 1 180 ffff818de59aab80 syz-executor.5 parked 645 3505 3 1 1000000 ffff818de565d940 syz-executor.5 lwpwait 645 3533 3 1 111a0000 ffff818dd9d06b80 syz-executor.5 vfork 645 645 8 1 111a0000 ffff818ddb1a0100 syz-executor.5 2757 2757 3 1 180 ffff818de59aa740 syz-executor.0 parked 2999 2999 3 1 180 ffff818ddaa71480 syz-executor.3 parked 2535 2535 3 1 180 ffff818de0b09040 syz-executor.2 parked 2349 2349 3 1 180 ffff818de76d6780 syz-executor.3 parked 2131 2377 3 1 15100000 ffff818de064f4c0 syz-executor.2 vfork 2131 2131 2 0 11000040 ffff818de064f900 syz-executor.2 1236 1374 3 1 180 ffff818ddb1a0540 syz-fuzzer parked 1236 1359 3 1 180 ffff818de59aa300 syz-fuzzer wait 1236 1208 3 0 180 ffff818ddb0689c0 syz-fuzzer wait 1236 1206 3 1 180 ffff818ddb068580 syz-fuzzer wait 1236 1240 3 1 180 ffff818ddb4cea00 syz-fuzzer parked 1236 1247 3 1 180 ffff818ddb1a0980 syz-fuzzer wait 1236 1259 3 1 180 ffff818ddd6166c0 syz-fuzzer wait 1236 929 3 1 180 ffff818ddb81c640 syz-fuzzer wait 1236 1238 3 1 180 ffff818ddb4f51c0 syz-fuzzer parked 1236 1120 3 0 180 ffff818ddd616280 syz-fuzzer parked 1236 815 2 1 140 ffff818ddbd43ac0 syz-fuzzer 1236 1239 3 1 180 ffff818ddbd43680 syz-fuzzer parked 1236 1224 3 0 180 ffff818ddbd43240 syz-fuzzer parked 1236 1236 3 0 180 ffff818dd99ebb00 syz-fuzzer parked 1233 1233 3 0 180 ffff818dd9c472c0 sshd select 1083 1083 3 0 180 ffff818ddb81c200 getty nanoslp 1222 1222 3 0 180 ffff818dd99eb6c0 getty nanoslp 981 981 3 0 180 ffff818dd99eb280 getty nanoslp 1098 1098 3 0 180 ffff818ddb4f5600 sshd select 1056 1056 3 0 180 ffff818ddb4f5a40 powerd kqueue 698 698 3 0 180 ffff818dd9c47700 syslogd kqueue 745 745 3 0 180 ffff818dd9c47b40 dhcpcd poll 742 742 3 0 180 ffff818dda290780 dhcpcd poll 466 466 3 0 180 ffff818ddb068140 dhcpcd poll 603 603 3 1 180 ffff818dda290340 dhcpcd poll 292 292 3 0 180 ffff818dd964b640 dhcpcd poll 485 485 3 0 180 ffff818dd9d06300 dhcpcd poll 291 291 3 0 180 ffff818dda290bc0 dhcpcd poll 1 1 3 1 180 ffff818dd149c140 init wait 0 10446 3 1 200 ffff818e0f7cd280 ktrace ktrwait 0 7587 5 0 240 ffff818de16ac140 (zombie) 0 7244 3 1 200 ffff818e00a00340 swapiod swapiod 0 3573 3 0 200 ffff818dfb4fe0c0 ktrace ktrwait 0 2033 3 1 200 ffff818decd221c0 ktrace ktrwait 0 985 3 0 200 ffff818dd964ba80 physiod physiod 0 196 3 0 200 ffff818dd969e680 ioflush syncer 0 195 3 0 200 ffff818dd12ff740 pooldrain pooldrain 0 194 3 1 200 ffff818dd969e240 pgdaemon pgdaemon 0 170 3 1 200 ffff818dd964b200 usb7 usbevt 0 169 3 1 200 ffff818dd65a6a40 usb6 usbevt 0 168 3 0 200 ffff818dd65a6600 usb5 usbevt 0 167 3 0 200 ffff818dd65a61c0 usb4 usbevt 0 166 3 0 200 ffff818dd3531a00 usb3 usbevt 0 165 3 1 200 ffff818dd35315c0 usb2 usbevt 0 31 3 1 200 ffff818dd3531180 usb1 usbevt 0 63 3 0 200 ffff818dd149c9c0 usb0 usbevt 0 126 3 1 200 ffff818dd12ffb80 usbtask-dr usbtsk 0 125 3 1 200 ffff818dd13de340 usbtask-hc usbtsk 0 124 3 0 200 ffff818dcf895b00 swwreboot swwreboot 0 123 3 0 200 ffff818dd149c580 npfgc0 npfgcw 0 122 3 1 200 ffff818dd146a980 rt_free rt_free 0 121 3 1 200 ffff818dd146a540 unpgc unpgc 0 120 3 0 200 ffff818dd146a100 key_timehandler key_timehandler 0 119 3 1 200 ffff818dd144d940 icmp6_wqinput/1 icmp6_wqinput 0 118 3 0 200 ffff818dd144d500 icmp6_wqinput/0 icmp6_wqinput 0 117 2 0 200 ffff818dd144d0c0 nd6_timer 0 116 3 1 200 ffff818dd1438900 carp6_wqinput/1 carp6_wqinput 0 115 3 0 200 ffff818dd14384c0 carp6_wqinput/0 carp6_wqinput 0 114 3 1 200 ffff818dd1438080 carp_wqinput/1 carp_wqinput 0 113 3 0 200 ffff818dd141b8c0 carp_wqinput/0 carp_wqinput 0 112 3 1 200 ffff818dd141b480 icmp_wqinput/1 icmp_wqinput 0 111 3 0 200 ffff818dd141b040 icmp_wqinput/0 icmp_wqinput 0 110 3 0 200 ffff818dd13debc0 rt_timer rt_timer 0 109 3 0 200 ffff818dd13de780 vmem_rehash vmem_rehash 0 100 3 0 200 ffff818dd12ff300 entbutler entropy 0 99 3 1 200 ffff818dd0d3eb40 viomb balloon 0 98 3 1 200 ffff818dd0d3e700 vioif0_txrx/1 vioif0_txrx 0 97 3 0 200 ffff818dd0d3e2c0 vioif0_txrx/0 vioif0_txrx 0 30 3 1 200 ffff818dcf8956c0 scsibus0 sccomp 0 29 3 0 200 ffff818dcf895280 pms0 pmsreset 0 28 3 1 200 ffff818dcf7b5ac0 xcall/1 xcall 0 27 1 1 200 ffff818dcf7b5680 softser/1 0 26 1 1 200 ffff818dcf7b5240 softclk/1 0 25 1 1 200 ffff818dcf798a80 softbio/1 0 24 1 1 200 ffff818dcf798640 softnet/1 0 23 1 1 201 ffff818dcf798200 idle/1 0 22 3 0 200 ffff818efdb33a40 lnxsyswq lnxsyswq 0 21 3 0 200 ffff818efdb33600 lnxubdwq lnxubdwq 0 20 3 1 200 ffff818efdb331c0 lnxpwrwq lnxpwrwq 0 19 3 1 200 ffff818efdb42a00 lnxlngwq lnxlngwq 0 18 3 1 200 ffff818efdb425c0 lnxhipwq lnxhipwq 0 17 3 1 200 ffff818efdb42180 lnxrcugc lnxrcugc 0 16 3 0 200 ffff818efdb599c0 sysmon smtaskq 0 15 3 1 200 ffff818efdb59580 pmfsuspend pmfsuspend 0 14 3 0 200 ffff818efdb59140 pmfevent pmfevent 0 13 3 0 200 ffff818efdb6c980 sopendfree sopendfr 0 12 3 0 200 ffff818efdb6c540 ifwdog ifwdog 0 11 3 1 200 ffff818efdb6c100 iflnkst iflnkst 0 10 3 1 200 ffff818efeb97940 nfssilly nfssilly 0 9 3 1 200 ffff818efeb97500 pooldisp pooldisp 0 8 3 1 200 ffff818efeb970c0 modunload mod_unld 0 7 3 0 200 ffff818efebc2900 xcall/0 xcall 0 6 1 0 200 ffff818efebc24c0 softser/0 0 > 5 7 0 200 ffff818efebc2080 softclk/0 0 4 1 0 200 ffff818efebed8c0 softbio/0 0 3 1 0 200 ffff818efebed480 softnet/0 0 2 1 0 201 ffff818efebed040 idle/0 0 0 3 0 200 ffffffff86795cc0 swapper uvm [Locks tracked through LWPs] ****** LWP 9365.9365 (syz-executor.0) @ 0xffff818e08578700, l_stat=2 *** Locks held: * Lock 0 (initialized at netbsd:pmap_ctor+0x6d) lock address : ffff818e19b0c180 type : sleep/adaptive initialized : netbsd:pmap_ctor+0x6d shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 0 relevant cpu : 0 last held: 0 relevant lwp : 0xffff818e08578700 last held: 0xffff818e08578700 last locked* : netbsd:pmap_enter_ma+0x3c0 unlocked : netbsd:pmap_extract+0x2c8 owner field : 0xffff818e08578700 wait/spin: 0/0 Turnstile: no active turnstile for this lock. *** Locks wanted: none ****** LWP 9626.9626 (syz-executor.4) @ 0xffff818e010ca9c0, l_stat=7 *** Locks held: * Lock 0 (initialized at netbsd:kcov_open+0x52) lock address : ffff818e17e12e80 type : sleep/adaptive initialized : netbsd:kcov_open+0x52 shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 0 relevant cpu : 0 last held: 0 relevant lwp : 0xffff818e010ca9c0 last held: 0xffff818e010ca9c0 last locked* : netbsd:kcov_fops_ioctl+0x5c unlocked : 0 owner field : 000000000000000000 wait/spin: 0/0 Turnstile: no active turnstile for this lock. * Lock 1 (initialized at netbsd:uvm_obj_init+0xee) lock address : ffff818e13da0e80 type : sleep/adaptive initialized : netbsd:uvm_obj_init+0xee shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 0 relevant cpu : 0 last held: 0 relevant lwp : 0xffff818e010ca9c0 last held: 0xffff818e010ca9c0 last locked* : netbsd:uvm_fault_internal+0x2453 unlocked : netbsd:uvm_fault_lower_enter+0x840 owner/count : 000000000000000000 flags : 000000000000000000 Turnstile: no active turnstile for this lock. *** Locks wanted: none ****** LWP 8790.8790 (syz-executor.1) @ 0xffff818e010ca140, l_stat=2 *** Locks held: * Lock 0 (initialized at netbsd:fork1+0x4c5) lock address : ffff818e05038810 type : sleep/adaptive initialized : netbsd:fork1+0x4c5 shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 0 relevant cpu : 1 last held: 1 relevant lwp : 0xffff818e010ca140 last held: 0xffff818e010ca140 last locked* : netbsd:exit1+0x393 unlocked : netbsd:execve_runproc+0x2c3b owner/count : 0xffff818e010ca140 flags : 0x0000000000000004 Turnstile: no active turnstile for this lock. *** Locks wanted: none ****** LWP 739.737 (syz-executor.1) @ 0xffff818de16ac580, l_stat=3 *** Locks held: none *** Locks wanted: * Lock 0 (initialized at netbsd:module_hook_init+0x1c) lock address : netbsd:module_hook type : sleep/adaptive initialized : netbsd:module_hook_init+0x1c shared holds : 0 exclusive: 0 shares wanted: 0 exclusive: 0 relevant cpu : 1 last held: 0 relevant lwp : 0xffff818de16ac580 last held: 000000000000000000 last locked : 0 unlocked* : 0 owner field : 000000000000000000 wait/spin: 0/0 Turnstile: no active turnstile for this lock. ****** LWP 742.742 (dhcpcd) @ 0xffff818dda290780, l_stat=3 *** Locks held: none *** Locks wanted: * Lock 0 (initialized at netbsd:module_hook_init+0x1c) lock address : netbsd:module_hook type : sleep/adaptive initialized : netbsd:module_hook_init+0x1c shared holds : 0 exclusive: 0 shares wanted: 0 exclusive: 0 relevant cpu : 0 last held: 0 relevant lwp : 0xffff818dda290780 last held: 000000000000000000 last locked : 0 unlocked* : 0 owner field : 000000000000000000 wait/spin: 0/0 Turnstile: no active turnstile for this lock. ****** LWP 466.466 (dhcpcd) @ 0xffff818ddb068140, l_stat=3 *** Locks held: none *** Locks wanted: * Lock 0 (initialized at netbsd:module_hook_init+0x1c) lock address : netbsd:module_hook type : sleep/adaptive initialized : netbsd:module_hook_init+0x1c shared holds : 0 exclusive: 0 shares wanted: 0 exclusive: 0 relevant cpu : 0 last held: 0 relevant lwp : 0xffff818ddb068140 last held: 000000000000000000 last locked : 0 unlocked* : 0 owner field : 000000000000000000 wait/spin: 0/0 Turnstile: no active turnstile for this lock. ****** LWP 485.485 (dhcpcd) @ 0xffff818dd9d06300, l_stat=3 *** Locks held: none *** Locks wanted: * Lock 0 (initialized at netbsd:module_hook_init+0x1c) lock address : netbsd:module_hook type : sleep/adaptive initialized : netbsd:module_hook_init+0x1c shared holds : 0 exclusive: 0 shares wanted: 0 exclusive: 0 relevant cpu : 0 last held: 0 relevant lwp : 0xffff818dd9d06300 last held: 000000000000000000 last locked : 0 unlocked* : 0 owner field : 000000000000000000 wait/spin: 0/0 Turnstile: no active turnstile for this lock. ****** LWP 291.291 (dhcpcd) @ 0xffff818dda290bc0, l_stat=3 *** Locks held: none *** Locks wanted: * Lock 0 (initialized at netbsd:module_hook_init+0x1c) lock address : netbsd:module_hook type : sleep/adaptive initialized : netbsd:module_hook_init+0x1c shared holds : 0 exclusive: 0 shares wanted: 0 exclusive: 0 relevant cpu : 0 last held: 0 relevant lwp : 0xffff818dda290bc0 last held: 000000000000000000 last locked : 0 unlocked* : 0 owner field : 000000000000000000 wait/spin: 0/0 Turnstile: no active turnstile for this lock. ****** LWP 0.26 (softclk/1) @ 0xffff818dcf7b5240, l_stat=1 *** Locks held: none *** Locks wanted: * Lock 0 (initialized at netbsd:module_hook_init+0x1c) lock address : netbsd:module_hook type : sleep/adaptive initialized : netbsd:module_hook_init+0x1c shared holds : 0 exclusive: 0 shares wanted: 0 exclusive: 0 relevant cpu : 1 last held: 0 relevant lwp : 0xffff818dcf7b5240 last held: 000000000000000000 last locked : 0 unlocked* : 0 owner field : 000000000000000000 wait/spin: 0/0 Turnstile: no active turnstile for this lock. ****** LWP 0.11 (iflnkst) @ 0xffff818efdb6c100, l_stat=3 *** Locks held: none *** Locks wanted: * Lock 0 (initialized at netbsd:module_hook_init+0x1c) lock address : netbsd:module_hook type : sleep/adaptive initialized : netbsd:module_hook_init+0x1c shared holds : 0 exclusive: 0 shares wanted: 0 exclusive: 0 relevant cpu : 1 last held: 0 relevant lwp : 0xffff818efdb6c100 last held: 000000000000000000 last locked : 0 unlocked* : 0 owner field : 000000000000000000 wait/spin: 0/0 Turnstile: no active turnstile for this lock. ****** LWP 0.5 (softclk/0) @ 0xffff818efebc2080, l_stat=7 *** Locks held: none *** Locks wanted: * Lock 0 (initialized at netbsd:module_hook_init+0x1c) lock address : netbsd:module_hook type : sleep/adaptive initialized : netbsd:module_hook_init+0x1c shared holds : 0 exclusive: 0 shares wanted: 0 exclusive: 0 relevant cpu : 0 last held: 0 relevant lwp : 0xffff818efebc2080 last held: 000000000000000000 last locked : 0 unlocked* : 0 owner field : 000000000000000000 wait/spin: 0/0 Turnstile: no active turnstile for this lock. ****** LWP 0.0 (swapper) @ 0xffffffff86795cc0, l_stat=3 *** Locks held: none *** Locks wanted: * Lock 0 (initialized at netbsd:module_hook_init+0x1c) lock address : netbsd:module_hook type : sleep/adaptive initialized : netbsd:module_hook_init+0x1c shared holds : 0 exclusive: 0 shares wanted: 0 exclusive: 0 relevant cpu : 0 last held: 0 relevant lwp : 0xffffffff86795cc0 last held: 000000000000000000 last locked : 0 unlocked* : 0 owner field : 000000000000000000 wait/spin: 0/0 Turnstile: no active turnstile for this lock. [Locks tracked through CPUs] ******* Locks held on cpu1: * Lock 0 (initialized at netbsd:main+0x106) lock address : netbsd:kernel_lock type : spin initialized : netbsd:main+0x106 shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 0 relevant cpu : 1 last held: 1 relevant lwp : 0xffff818decb69a80 last held: 0xffff818decb69a80 last locked* : netbsd:cdev_ioctl+0x1bb unlocked : netbsd:cdev_open+0x3f4 curcpu holds : 1 wanted by: 000000000000000000 * Lock 1 (initialized at netbsd:kprintf_init+0x72) lock address : netbsd:kprintf_mtx type : spin initialized : netbsd:kprintf_init+0x72 shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 0 relevant cpu : 1 last held: 1 relevant lwp : 0xffff818decb69a80 last held: 0xffff818decb69a80 last locked* : netbsd:kprintf_lock+0x50 unlocked : netbsd:kprintf_unlock+0x70 owner field : 0x0000000000000800 wait/spin: 0/1 PAGE FLAG PQ UOBJECT UANON 0xffff870000007180 0045 00000000 0x0 0x0 0xffff870000007200 0045 00000000 0x0 0x0 0xffff870000007280 0045 00000000 0x0 0x0 0xffff870000007300 0045 00000000 0x0 0x0 0xffff870000007380 0045 00000000 0x0 0x0 0xffff870000007400 0045 00000000 0x0 0x0 0xffff870000007480 0045 00000000 0x0 0x0 0xffff870000007500 0045 00000000 0x0 0x0 0xffff870000007580 0045 00000000 0x0 0x0 0xffff870000007600 0045 00000000 0x0 0x0 0xffff870000007680 0041 00000000 0x0 0x0 0xffff870000007700 0041 00000000 0x0 0x0 0xffff870000007780 0041 00000000 0x0 0x0 0xffff870000007800 0041 00000000 0x0 0x0 0xffff870000007880 0041 00000000 0x0 0x0 0xffff870000007900 0045 00000000 0x0 0x0 0xffff870000007980 0041 00000000 0x0 0x0 0xffff870000007a00 0041 00000000 0x0 0x0 0xffff870000007a80 0041 00000000 0x0 0x0 0xffff870000007b00 0041 00000000 0x0 0x0 0xffff870000007b80 0041 00000000 0x0 0x0 0xffff870000007c00 0041 00000000 0x0 0x0 0xffff870000007c80 0041 00000000 0x0 0x0 0xffff870000007d00 0041 00000000 0x0 0x0 0xffff870000007d80 0041 00000000 0x0 0x0 0xffff870000007e00 0041 00000000 0x0 0x0 0xffff870000007e80 0041 00000000 0x0 0x0 0xffff870000007f00 0041 00000000 0x0 0x0 0xffff870000007f80 0041 00000000 0x0 0x0 0xffff870000008000 0041 00000000 0x0 0x0 0xffff870000008080 0041 00000000 0x0 0x0 0xffff870000008100 0041 00000000 0x0 0x0 0xffff870000008180 0041 00000000 0x0 0x0 0xffff870000008200 0041 00000000 0x0 0x0 0xffff870000008280 0041 00000000 0x0 0x0 0xffff870000008300 0041 00000000 0x0 0x0 0xffff870000008380 0041 00000000 0x0 0x0 0xffff870000008400 0041 00000000 0x0 0x0 0xffff870000008480 0041 00000000 0x0 0x0 0xffff870000008500 0041 00000000 0x0 0x0 0xffff870000008580 0041 00000000 0x0 0x0 0xffff870000008600 0045 00000000 0x0 0x0 0xffff870000008680 0041 00000000 0x0 0x0 0xffff870000008700 0041 00000000 0x0 0x0 0xffff870000008780 0041 00000000 0x0 0x0 0xffff870000008800 0041 00000000 0x0 0x0 0xffff870000008880 0041 00000000 0x0 0x0 0xffff870000008900 0041 00000000 0x0 0x0 0xffff870000008980 0041 00000000 0x0 0x0 0xffff870000008a00 0041 00000000 0x0 0x0 0xffff870000008a80 0041 00000000 0x0 0x0 0xffff870000008b00 0041 00000000 0x0 0x0 0xffff870000008b80 0041 00000000 0x0 0x0 0xffff870000008c00 0041 00000000 0x0 0x0 0xffff870000008c80 0041 00000000 0x0 0x0 0xffff870000008d00 0041 00000000 0x0 0x0 0xffff870000008d80 0041 00000000 0x0 0x0 0xffff870000008e00 0041 00000000 0x0 0x0 0xffff870000008e80 0041 00000000 0x0 0x0 0xffff870000008f00 0041 00000000 0x0 0x0 0xffff870000008f80 0041 00000000 0x0 0x0 0xffff870000009000 0041 00000000 0x0 0x0 0xffff870000009080 0041 00000000 0x0 0x0 0xffff870000009100 0045 00000000 0x0 0x0 0xffff870000009180 0045 00000000 0x0 0x0 0xffff870000009200 0041 00000000 0x0 0x0 0xffff870000009280 0041 00000000 0x0 0x0 0xffff870000009300 0041 00000000 0x0 0x0 0xffff870000009380 0041 00000000 0x0 0x0 0xffff870000009400 0041 00000000 0x0 0x0 0xffff870000009480 0041 00000000 0x0 0x0 0xffff870000009500 0041 00000000 0x0 0x0 0xffff870000009580 0041 00000000 0x0 0x0 0xffff870000009600 0041 00000000 0x0 0x0 0xffff870000009680 0041 00000000 0x0 0x0 0xffff870000009700 0041 00000000 0x0 0x0 0xffff870000009780 0041 00000000 0x0 0x0 0xffff870000009800 0041 00000000 0x0 0x0 0xffff870000009880 0041 00000000 0x0 0x0 0xffff870000009900 0041 00000000 0x0 0x0 0xffff870000009980 0041 00000000 0x0 0x0 0xffff870000009a00 0041 00000000 0x0 0x0 0xffff870000009a80 0041 00000000 0x0 0x0 0xffff870000009b00 0041 00000000 0x0 0x0 0xffff870000009b80 0041 00000000 0x0 0x0 0xffff870000009c00 0041 00000000 0x0 0x0 0xffff870000009c80 0041 00000000 0x0 0x0 0xffff870000009d00 0041 00000000 0x0 0x0 0xffff870000009d80 0041 00000000 0x0 0x0 0xffff870000009e00 0041 00000000 0x0 0x0 0xffff870000009e80 0041 00000000 0x0 0x0 0xffff870000009f00 0041 00000000 0x0 0x0 0xffff870000009f80 0045 00000000 0x0 0x0 0xffff87000000a000 0041 00000000 0x0 0x0 0xffff87000000a080 0041 00000000 0x0 0x0 0xffff87000000a100 0041 00000000 0x0 0x0 0xffff87000000a180 0041 00000000 0x0 0x0 0xffff87000000a200 0041 00000000 0x0 0x0 0xffff87000000a280 0041 00000000 0x0 0x0 0xffff87000000a300 0041 00000000 0x0 0x0 0xffff87000000a380 0041 00000000 0x0 0x0 0xffff87000000a400 0041 00000000 0x0 0x0 0xffff87000000a480 0041 00000000 0x0 0x0 0xffff87000000a500 0041 00000000 0x0 0x0 0xffff87000000a580 0041 00000000 0x0 0x0 0xffff87000000a600 0041 00000000 0x0 0x0 0xffff87000000a680 0041 00000000 0x0 0x0 0xffff87000000a700 0041 00000000 0x0 0x0 0xffff87000000a780 0041 00000000 0x0 0x0 0xffff87000000a800 0041 00000000 0x0 0x0 0xffff87000000a880 0041 00000000 0x0 0x0 0xffff87000000a900 0041 00000000 0x0 0x0 0xffff87000000a980 0041 00000000 0x0 0x0 0xffff87000000aa00 0041 00000000 0x0 0x0 0xffff87000000aa80 0041 00000000 0x0 0x0 0xffff87000000ab00 0041 00000000 0x0 0x0 0xffff87000000ab80 0041 00000000 0x0 0x0 0xffff87000000ac00 0041 00000000 0x0 0x0 0xffff87000000ac80 0041 00000000 0x0 0x0 0xffff87000000ad00 0041 00000000 0x0 0x0 0xffff87000000ad80 0041 00000000 0x0 0x0 0xffff87000000ae00 0041 00000000 0x0 0x0 0xffff87000000ae80 0041 00000000 0x0 0x0 0xffff87000000af00 0041 00000000 0x0 0x0 0xffff87000000af80 0041 00000000 0x0 0x0 0xffff87000000b000 0045 00000000 0x0 0x0 0xffff87000000b080 0041 00000000 0x0 0x0 0xffff87000000b100 0041 00000000 0x0 0x0 0xffff87000000b180 0041 00000000 0x0 0x0 0xffff87000000b200 0045 00000000 0x0 0x0 0xffff87000000b280 0045 00000000 0x0 0x0 0xffff87000000b300 0045 00000000 0x0 0x0 0xffff87000000b380 0045 00000000 0x0 0x0 0xffff87000000b400 0045 00000000 0x0 0x0 0xffff87000000b480 0045 00000000 0x0 0x0 0xffff87000000b500 0041 00000000 0x0 0x0 0xffff87000000b580 0041 00000000 0x0 0x0 0xffff87000000b600 0045 00000000 0x0 0x0 0xffff87000000b680 0045 00000000 0x0 0x0 0xffff87000000b700 0045 00000000 0x0 0x0 0xffff87000000b780 0045 00000000 0x0 0x0 0xffff87000000b800 0045 00000000 0x0 0x0 0xffff87000000b880 0045 00000000 0x0 0x0 0xffff87000000b900 0045 00000000 0x0 0x0 0xffff87000000b980 0045 00000000 0x0 0x0 0xffff87000000ba00 0045 00000000 0x0 0x0 0xffff87000000ba80 0045 00000000 0x0 0x0 0xffff87000000bb00 0045 00000000 0x0 0x0 0xffff87000000bb80 0045 00000000 0x0 0x0 0xffff87000000bc00 0045 00000000 0x0 0x0 0xffff87000000bc80 0045 00000000 0x0 0x0 0xffff87000000bd00 0045 00000000 0x0 0x0 0xffff87000000bd80 0045 00000000 0x0 0x0 0xffff87000000be00 0045 00000000 0x0 0x0 0xffff87000000be80 0045 00000000 0x0 0x0 0xffff87000000bf00 0045 00000000 0x0 0x0 0xffff87000000bf80 0045 00000000 0x0 0x0 0xffff87000000c000 0045 00000000 0x0 0x0 0xffff87000000c080 0045 00000000 0x0 0x0 0xffff87000000c100 0045 00000000 0x0 0x0 0xffff87000000c180 0045 00000000 0x0 0x0 0xffff87000000c200 0045 00000000 0x0 0x0 0xffff87000000c280 0045 00000000 0x0 0x0 0xffff87000000c300 0045 00000000 0x0 0x0 0xffff87000000c380 0045 00000000 0x0 0x0 0xffff87000000c400 0045 00000000 0x0 0x0 0xffff87000000c480 0045 00000000 0x0 0x0 0xffff87000000c500 0045 00000000 0x0 0x0 0xffff87000000c580 0045 00000000 0x0 0x0 0xffff87000000c600 0045 00000000 0x0 0x0 0xffff87000000c680 0045 00000000 0x0 0x0 0xffff87000000c700 0045 00000000 0x0 0x0 0xffff87000000c780 0045 00000000 0x0 0x0 0xffff87000000c800 0041 00000000 0x0 0x0 0xffff87000000c880 0045 00000000 0x0 0x0 0xffff87000000c900 0045 00000000 0x0 0x0 0xffff87000000c980 0045 00000000 0x0 0x0 0xffff87000000ca00 0041 00000000 0x0 0x0 0xffff87000000ca80 0045 00000000 0x0 0x0 0xffff87000000cb00 0045 00000000 0x0 0x0 0xffff87000000cb80 0045 00000000 0x0 0x0 0xffff87000000cc00 0041 00000000 0x0 0x0 0xffff87000000cc80 0041 00000000 0x0 0x0 0xffff87000000cd00 0045 00000000 0x0 0x0 0xffff87000000cd80 0045 00000000 0x0 0x0 0xffff87000000ce00 0041 00000000 0x0 0x0 0xffff87000000ce80 0041 00000000 0x0 0x0 0xffff87000000cf00 0041 00000000 0x0 0x0 0xffff87000000cf80 0041 00000000 0x0 0x0 0xffff87000000d000 0041 00000000 0x0 0x0 0xffff87000000d080 0041 00000000 0x0 0x0 0xffff87000000d100 0041 00000000 0x0 0x0 0xffff87000000d180 0041 00000000 0x0 0x0 0xffff87000000d200 0041 00000000 0x0 0x0 0xffff87000000d280 0041 00000000 0x0 0x0 0xffff87000000d300 0041 00000000 0x0 0x0 0xffff87000000d380 0041 00000000 0x0 0x0 0xffff87000000d400 0041 00000000 0x0 0x0 0xffff87000000d480 0041 00000000 0x0 0x0 0xffff87000000d500 0041 00000000 0x0 0x0 0xffff87000000d580 0041 00000000 0x0 0x0 0xffff87000000d600 0041 00000000 0x0 0x0 0xffff87000000d680 0041 00000000 0x0 0x0 0xffff87000000d700 0041 00000000 0x0 0x0 0xffff87000000d780 0041 00000000 0x0 0x0 0xffff87000000d800 0045 00000000 0x0 0x0 0xffff87000000d880 0041 00000000 0x0 0x0 0xffff87000000d900 0041 00000000 0x0 0x0 0xffff87000000d980 0041 00000000 0x0 0x0 0xffff87000000da00 0041 00000000 0x0 0x0 0xffff87000000da80 0045 00000000 0x0 0x0 0xffff87000000db00 0045 00000000 0x0 0x0 0xffff87000000db80 0041 00000000 0x0 0x0 0xffff87000000dc00 0045 00000000 0x0 0x0 0xffff87000000dc80 0045 00000000 0x0 0x0 0xffff87000000dd00 0041 00000000 0x0 0x0 0xffff87000000dd80 0041 00000000 0x0 0x0 0xffff87000000de00 0045 00000000 0x0 0x0 0xffff87000000de80 0041 00000000 0x0 0x0 0xffff87000000df00 0041 00000000 0x0 0x0 0xffff87000000df80 0045 00000000 0x0 0x0 0xffff87000000e000 0045 00000000 0x0 0x0 0xffff87000000e080 0045 00000000 0x0 0x0 0xffff87000000e100 0041 00000000 0x0 0x0 0xffff87000000e180 0041 00000000 0x0 0x0 0xffff87000000e200 0041 00000000 0x0 0x0 0xffff87000000e280 0041 00000000 0x0 0x0 0xffff87000000e300 0045 00000000 0x0 0x0 0xffff87000000e380 0045 00000000 0x0 0x0 0xffff87000000e400 0041 00000000 0x0 0x0 0xffff87000000e480 0041 00000000 0x0 0x0 0xffff87000000e500 0045 00000000 0x0 0x0 0xffff87000000e580 0045 00000000 0x0 0x0 0xffff87000000e600 0041 00000000 0x0 0x0 0xffff87000000e680 0045 00000000 0x0 0x0 0xffff87000000e700 0045 00000000 0x0 0x0 0xffff87000000e780 0045 00000000 0x0 0x0 0xffff87000000e800 0041 00000000 0x0 0x0 0xffff87000000e880 0045 00000000 0x0 0x0 0xffff87000000e900 0041 00000000 0x0 0x0 0xffff87000000e980 0041 00000000 0x0 0x0 0xffff87000000ea00 0041 00000000 0x0 0x0 0xffff87000000ea80 0041 00000000 0x0 0x0 0xffff87000000eb00 0045 00000000 0x0 0x0 0xffff87000000eb80 0041 00000000 0x0 0x0 0xffff87000000ec00 0045 00000000 0x0 0x0 0xffff87000000ec80 0041 00000000 0x0 0x0 0xffff87000000ed00 0041 00000000 0x0 0x0 0xffff87000000ed80 0041 00000000 0x0 0x0 0xffff87000000ee00 0041 00000000 0x0 0x0 0xffff87000000ee80 0045 00000000 0x0 0x0 0xffff87000000ef00 0041 00000000 0x0 0x0 0xffff87000000ef80 0041 00000000 0x0 0x0 0xffff87000000f000 0041 00000000 0x0 0x0 0xffff87000000f080 0041 00000000 0x0 0x0 0xffff87000000f100 0041 00000000 0x0 0x0 0xffff87000000f180 0041 00000000 0x0 0x0 0xffff87000000f200 0041 00000000 0x0 0x0 0xffff87000000f280 0041 00000000 0x0 0x0 0xffff87000000f300 0041 00000000 0x0 0x0 0xffff87000000f380 0045 00000000 0x0 0x0 0xffff87000000f400 0045 00000000 0x0 0x0 0xffff87000000f480 0041 00000000 0x0 0x0 0xffff87000000f500 0041 00000000 0x0 0x0 0xffff87000000f580 0041 00000000 0x0 0x0 0xffff87000000f600 0045 00000000 0x0 0x0 0xffff87000000f680 0041 00000000 0x0 0x0 0xffff87000000f700 0041 00000000 0x0 0x0 0xffff87000000f780 0041 00000000 0x0 0x0 0xffff87000000f800 0041 00000000 0x0 0x0 0xffff87000000f880 0045 00000000 0x0 0x0 0xffff87000000f900 0045 00000000 0x0 0x0 0xffff87000000f980 0041 00000000 0x0 0x0 0xffff87000000fa00 0041 00000000 0x0 0x0 0xffff87000000fa80 0045 00000000 0x0 0x0 0xffff87000000fb00 0041 00000000 0x0 0x0 0xffff87000000fb80 0041 00000000 0x0 0x0 0xffff87000000fc00 0041 00000000 0x0 0x0 0xffff87000000fc80 0041 00000000 0x0 0x0 0xffff87000000fd00 0041 00000000 0x0 0x0 0xffff87000000fd80 0045 00000000 0x0 0x0 0xffff87000000fe00 0041 00000000 0x0 0x0 0xffff87000000fe80 0041 00000000 0x0 0x0 0xffff87000000ff00 0041 00000000 0x0 0x0 0xffff87000000ff80 0041 00000000 0x0 0x0 0xffff870000010000 0041 00000000 0x0 0x0 0xffff870000010080 0045 00000000 0x0 0x0 0xffff870000010100 0045 00000000 0x0 0x0 0xffff870000010180 0041 00000000 0x0 0x0 0xffff870000010200 0045 00000000 0x0 0x0 0xffff870000010280 0041 00000000 0x0 0x0 0xffff870000010300 0041 00000000 0x0 0x0 0xffff870000010380 0041 00000000 0x0 0x0 0xffff870000010400 0041 00000000 0x0 0x0 0xffff870000010480 0041 00000000 0x0 0x0 0xffff870000010500 0041 00000000 0x0 0x0 0xffff870000010580 0041 00000000 0x0 0x0 0xffff870000010600 0041 00000000 0x0 0x0 0xffff870000010680 0041 00000000 0x0 0x0 0xffff870000010700 0041 00000000 0x0 0x0 0xffff870000010780 0041 00000000 0x0 0x0 0xffff870000010800 0041 00000000 0x0 0x0 0xffff870000010880 0041 00000000 0x0 0x0 0xffff870000010900 0045 00000000 0x0 0x0 0xffff870000010980 0045 00000000 0x0 0x0 0xffff870000010a00 0045 00000000 0x0 0x0 0xffff870000010a80 0045 00000000 0x0 0x0 0xffff870000010b00 0045 00000000 0x0 0x0 0xffff870000010b80 0041 00000000 0x0 0x0 0xffff870000010c00 0041 00000000 0x0 0x0 0xffff870000010c80 0041 00000000 0x0 0x0 0xffff870000010d00 0041 00000000 0x0 0x0 0xffff870000010d80 0041 00000000 0x0 0x0 0xffff870000010e00 0041 00000000 0x0 0x0 0xffff870000010e80 0041 00000000 0x0 0x0 0xffff870000010f00 0041 00000000 0x0 0x0 0xffff870000010f80 0045 00000000 0x0 0x0 0xffff870000011000 0041 00000000 0x0 0x0 0xffff870000011080 0041 00000000 0x0 0x0 0xffff870000011100 0041 00000000 0x0 0x0 0xffff870000011180 0041 00000000 0x0 0x0 0xffff870000011200 0041 00000000 0x0 0x0 0xffff870000011280 0045 00000000 0x0 0x0 0xffff870000011300 0041 00000000 0x0 0x0 0xffff870000011380 0041 00000000 0x0 0x0 0xffff870000011400 0041 00000000 0x0 0x0 0xffff870000011480 0041 00000000 0x0 0x0 0xffff870000011500 0041 00000000 0x0 0x0 0xffff870000011580 0041 00000000 0x0 0x0 0xffff870000011600 0041 00000000 0x0 0x0 0xffff870000011680 0041 00000000 0x0 0x0 0xffff870000011700 0041 00000000 0x0 0x0 0xffff870000011780 0041 00000000 0x0 0x0 0xffff870000011800 0041 00000000 0x0 0x0 0xffff870000011880 0041 00000000 0x0 0x0 0xffff870000011900 0041 00000000 0x0 0x0 0xffff870000011980 0041 00000000 0x0 0x0 0xffff870000011a00 0045 00000000 0x0 0x0 0xffff870000011a80 0041 00000000 0x0 0x0 0xffff870000011b00 0041 00000000 0x0 0x0 0xffff870000011b80 0041 00000000 0x0 0x0 0xffff870000011c00 0045 00000000 0x0 0x0 0xffff870000011c80 0045 00000000 0x0 0x0 0xffff870000011d00 0041 00000000 0x0 0x0 0xffff870000011d80 0041 00000000 0x0 0x0 0xffff870000011e00 0041 00000000 0x0 0x0 0xffff870000011e80 0041 00000000 0x0 0x0 0xffff870000011f00 0045 00000000 0x0 0x0 0xffff870000011f80 0045 00000000 0x0 0x0 0xffff870000012000 0041 00000000 0x0 0x0 0xffff870000012080 0041 00000000 0x0 0x0 0xffff870000012100 0041 00000000 0x0 0x0 0xffff870000012180 0045 00000000 0x0 0x0 0xffff870000012200 0041 00000000 0x0 0x0 0xffff870000012280 0041 00000000 0x0 0x0 0xffff870000012300 0041 00000000 0x0 0x0 0xffff870000012380 0041 00000000 0x0 0x0 0xffff870000012400 0041 00000000 0x0 0x0 0xffff870000012480 0041 00000000 0x0 0x0 0xffff870000012500 0045 00000000 0x0 0x0 0xffff870000012580 0041 00000000 0x0 0x0 0xffff870000012600 0041 00000000 0x0 0x0 0xffff870000012680 0045 00000000 0x0 0x0 0xffff870000012700 0001 00000000 0x0 0x0 0xffff870000012780 0001 00000000 0x0 0x0 0xffff870000012800 0001 00000000 0x0 0x0 0xffff870000012880 0001 00000000 0x0 0x0 0xffff870000012900 0001 00000000 0x0 0x0 0xffff870000012980 0001 00000000 0x0 0x0 0xffff870000012a00 0001 00000000 0x0 0x0 0xffff870000012a80 0001 00000000 0x0 0x0 0xffff870000012b00 0001 00000000 0x0 0x0 0xffff870000012b80 0001 00000000 0x0 0x0 0xffff870000012c00 0001 00000000 0x0 0x0 0xffff870000012c80 0001 00000000 0x0 0x0 0xffff870000012d00 0001 00000000 0x0 0x0 0xffff870000012d80 0001 00000000 0x0 0x0 0xffff870000012e00 0001 00000000 0x0 0x0 0xffff870000012e80 0001 00000000 0x0 0x0 0xffff870000012f00 0001 00000000 0x0 0x0 0xffff870000012f80 0001 00000000 0x0 0x0 0xffff870000013000 0001 00000000 0x0 0x0 0xffff870000013080 0001 00000000 0x0 0x0 0xffff870000013100 0001 00000000 0x0 0x0 0xffff870000013180 0001 00000000 0x0 0x0 0xffff870000013200 0001 00000000 0x0 0x0 0xffff870000013280 0001 00000000 0x0 0x0 0xffff870000013300 0001 00000000 0x0 0x0 0xffff870000013380 0001 00000000 0x0 0x0 0xffff870000013400 0001 00000000 0x0 0x0 0xffff870000013480 0001 00000000 0x0 0x0 0xffff870000013500 0001 00000000 0x0 0x0 0xffff870000013580 0001 00000000 0x0 0x0 0xffff870000013600 0001 00000000 0x0 0x0 0xffff870000013680 0001 00000000 0x0 0x0 0xffff870000013700 0001 00000000 0x0 0x0 0xffff870000013780 0001 00000000 0x0 0x0 0xffff870000013800 0001 00000000 0x0 0x0 0xffff870000013880 0001 00000000 0x0 0x0 0xffff870000013900 0001 00000000 0x0 0x0 0xffff870000013980 0001 00000000 0x0 0x0 0xffff870000013a00 0001 00000000 0x0 0x0 0xffff870000013a80 0001 00000000 0x0 0x0 0xffff870000013b00 0001 00000000 0x0 0x0 0xffff870000013b80 0001 00000000 0x0 0x0 0xffff870000013c00 0001 00000000 0x0 0x0 0xffff870000013c80 0001 00000000 0x0 0x0 0xffff870000013d00 0001 00000000 0x0 0x0 0xffff870000013d80 0001 00000000 0x0 0x0 0xffff870000013e00 0001 00000000 0x0 0x0 0xffff870000013e80 0001 00000000 0x0 0x0 0xffff870000013f00 0001 00000000 0x0 0x0 0xffff870000013f80 0001 00000000 0x0 0x0 0xffff870000014000 0001 00000000 0x0 0x0 0xffff870000014080 0001 00000000 0x0 0x0 0xffff870000014100 0001 00000000 0x0 0x0 0xffff870000014180 0001 00000000 0x0 0x0 0xffff870000014200 0041 00000000 0x0 0x0 0xffff870000014280 0041 00000000 0x0 0x0 0xffff870000014300 0041 00000000 0x0 0x0 0xffff870000014380 0041 00000000 0x0 0x0 0xffff870000014400 0041 00000000 0x0 0x0 0xffff870000014480 0041 00000000 0x0 0x0 0xffff870000014500 0041 00000000 0x0 0x0 0xffff870000014580 0041 00000000 0x0 0x0 0xffff870000014600 0041 00000000 0x0 0x0 0xffff870000014680 0041 00000000 0x0 0x0 0xffff870000014700 0041 00000000 0x0 0x0 0xffff870000014780 0041 00000000 0x0 0x0 0xffff870000014800 0041 00000000 0x0 0x0 0xffff870000014880 0041 00000000 0x0 0x0 0xffff870000014900 0041 00000000 0x0 0x0 0xffff870000014980 0041 00000000 0x0 0x0 0xffff870000014a00 0041 00000000 0x0 0x0 0xffff870000014a80 0041 00000000 0x0 0x0 0xffff870000014b00 0041 00000000 0x0 0x0 0xffff870000014b80 0041 00000000 0x0 0x0 0xffff870000014c00 0041 00000000 0x0 0x0 0xffff870000014c80 0041 00000000 0x0 0x0 0xffff870000014d00 0041 00000000 0x0 0x0 0xffff870000014d80 0041 00000000 0x0 0x0 0xffff870000014e00 0041 00000000 0x0 0x0 0xffff870000014e80 0041 00000000 0x0 0x0 0xffff870000014f00 0041 00000000 0x0 0x0 0xffff870000014f80 0041 00000000 0x0 0x0 0xffff870000015000 0041 00000000 0x0 0x0 0xffff870000015080 0041 00000000 0x0 0x0 0xffff870000015100 0041 00000000 0x0 0x0 0xffff870000015180 0041 00000000 0x0 0x0 0xffff870000015200 0041 00000000 0x0 0x0 0xffff870000015280 0041 00000000 0x0 0x0 0xffff870000015300 0041 00000000 0x0 0x0 0xffff870000015380 0041 00000000 0x0 0x0 0xffff870000015400 0041 00000000 0x0 0x0 0xffff870000015480 0041 00000000 0x0 0x0 0xffff870000015500 0041 00000000 0x0 0x0 0xffff870000015580 0041 00000000 0x0 0x0 0xffff870000015600 0041 00000000 0x0 0x0 0xffff870000015680 0041 00000000 0x0 0x0 0xffff870000015700 0041 00000000 0x0 0x0 0xffff870000015780 0041 00000000 0x0 0x0 0xffff870000015800 0041 00000000 0x0 0x0 0xffff870000015880 0041 00000000 0x0 0x0 0xffff870000015900 0041 00000000 0x0 0x0 0xffff870000015980 0001 00000000 0x0 0x0 0xffff870000015a00 0001 00000000 0x0 0x0 0xffff870000015a80 0001 00000000 0x0 0x0 0xffff870000015b00 0001 00000000 0x0 0x0 0xffff870000015b80 0001 00000000 0x0 0x0 0xffff870000015c00 0001 00000000 0x0 0x0 0xffff870000015c80 0001 00000000 0x0 0x0 0xffff870000015d00 0001 00000000 0x0 0x0 0xffff870000015d80 0001 00000000 0x0 0x0 0xffff870000015e00 0001 00000000 0x0 0x0 0xffff870000015e80 0001 00000000 0x0 0x0 0xffff870000015f00 0001 00000000 0x0 0x0 0xffff870000015f80 0001 00000000 0x0 0x0 0xffff870000016000 0001 00000000 0x0 0x0 0xffff870000016080 0001 00000000 0x0 0x0 0xffff870000016100 0001 00000000 0x0 0x0 0xffff870000016180 0001 00000000 0x0 0x0 0xffff870000016200 0001 00000000 0x0 0x0 0xffff870000016280 0001 00000000 0x0 0x0 0xffff870000016300 0001 00000000 0x0 0x0 0xffff870000016380 0001 00000000 0x0 0x0 0xffff870000016400 0001 00000000 0x0 0x0 0xffff870000016480 0001 00000000 0x0 0x0 0xffff870000016500 0001 00000000 0x0 0x0 0xffff870000016580 0001 00000000 0x0 0x0 0xffff870000016600 0001 00000000 0x0 0x0 0xffff870000016680 0001 00000000 0x0 0x0 0xffff870000016700 0001 00000000 0x0 0x0 0xffff870000016780 0001 00000000 0x0 0x0 0xffff870000016800 0001 00000000 0x0 0x0 0xffff870000016880 0001 00000000 0x0 0x0 0xffff870000016900 0001 00000000 0x0 0x0 0xffff870000016980 0001 00000000 0x0 0x0 0xffff870000016a00 0001 00000000 0x0 0x0 0xffff870000016a80 0001 00000000 0x0 0x0 0xffff870000016b00 0001 00000000 0x0 0x0 0xffff870000016b80 0001 00000000 0x0 0x0 0xffff870000016c00 0001 00000000 0x0 0x0 0xffff870000016c80 0001 00000000 0x0 0x0 0xffff870000016d00 0001 00000000 0x0 0x0 0xffff870000016d80 0001 00000000 0x0 0x0 0xffff870000016e00 0001 00000000 0x0 0x0 0xffff870000016e80 0001 00000000 0x0 0x0 0xffff870000016f00 0001 00000000 0x0 0x0 0xffff870000016f80 0001 00000000 0x0 0x0 0xffff870000017000 0001 00000000 0x0 0x0 0xffff870000017080 0001 00000000 0x0 0x0 0xffff870000017100 0001 00000000 0x0 0x0 0xffff870000017180 0001 00000000 0x0 0x0 0xffff870000017200 0001 00000000 0x0 0x0 0xffff870000017280 0001 00000000 0x0 0x0 0xffff870000017300 0001 00000000 0x0 0x0 0xffff870000017380 0001 00000000 0x0 0x0 0xffff870000017400 0001 00000000 0x0 0x0 0xffff870000017480 0041 00000000 0x0 0x0 0xffff870000017500 0041 00000000 0x0 0x0 0xffff870000017580 0041 00000000 0x0 0x0 0xffff870000017600 0041 00000000 0x0 0x0 0xffff870000017680 0041 00000000 0x0 0x0 0xffff870000017700 0041 00000000 0x0 0x0 0xffff870000017780 0041 00000000 0x0 0x0 0xffff870000017800 0041 00000000 0x0 0x0 0xffff870000017880 0041 00000000 0x0 0x0 0xffff870000017900 0041 00000000 0x0 0x0 0xffff870000017980 0041 00000000 0x0 0x0 0xffff870000017a00 0041 00000000 0x0 0x0 0xffff870000017a80 0041 00000000 0x0 0x0 0xffff870000017b00 0041 00000000 0x0 0x0 0xffff870000017b80 0041 00000000 0x0 0x0 0xffff870000017c00 0041 00000000 0x0 0x0 0xffff870000017c80 0041 00000000 0x0 0x0 0xffff870000017d00 0041 00000000 0x0 0x0 0xffff870000017d80 0041 00000000 0x0 0x0 0xffff870000017e00 0041 00000000 0x0 0x0 0xffff870000017e80 0041 00000000 0x0 0x0 0xffff870000017f00 0041 00000000 0x0 0x0 0xffff870000017f80 0041 00000000 0x0 0x0 0xffff870000018000 0041 00000000 0x0 0x0 0xffff870000018080 0041 00000000 0x0 0x0 0xffff870000018100 0041 00000000 0x0 0x0 0xffff870000018180 0041 00000000 0x0 0x0 0xffff870000018200 0041 00000000 0x0 0x0 0xffff870000018280 0041 00000000 0x0 0x0 0xffff870000018300 0041 00000000 0x0 0x0 0xffff870000018380 0041 00000000 0x0 0x0 0xffff870000018400 0041 00000000 0x0 0x0 0xffff870000018480 0041 00000000 0x0 0x0 0xffff870000018500 0041 00000000 0x0 0x0 0xffff870000018580 0041 00000000 0x0 0x0 0xffff870000018600 0041 00000000 0x0 0x0 0xffff870000018680 0041 00000000 0x0 0x0 0xffff870000018700 0041 00000000 0x0 0x0 0xffff870000018780 0041 00000000 0x0 0x0 0xffff870000018800 0041 00000000 0x0 0x0 0xffff870000018880 0041 00000000 0x0 0x0 0xffff870000018900 0041 00000000 0x0 0x0 0xffff870000018980 0041 00000000 0x0 0x0 0xffff870000018a00 0041 00000000 0x0 0x0 0xffff870000018a80 0041 00000000 0x0 0x0 0xffff870000018b00 0001 00000000 0x0 0x0 0xffff870000018b80 0001 00000000 0x0 0x0 0xffff870000018c00 0001 00000000 0x0 0x0 0xffff870000018c80 0001 00000000 0x0 0x0 0xffff870000018d00 0001 00000000 0x0 0x0 0xffff870000018d80 0001 00000000 0x0 0x0 0xffff870000018e00 0001 00000000 0x0 0x0 0xffff870000018e80 0001 00000000 0x0 0x0 0xffff870000018f00 0001 00000000 0x0 0x0 0xffff870000018f80 0001 00000000 0x0 0x0 0xffff870000019000 0001 00000000 0x0 0x0 0xffff870000019080 0001 00000000 0x0 0x0 0xffff870000019100 0001 00000000 0x0 0x0 0xffff870000019180 0001 00000000 0x0 0x0 0xffff870000019200 0001 00000000 0x0 0x0 0xffff870000019280 0001 00000000 0x0 0x0 0xffff870000019300 0001 00000000 0x0 0x0 0xffff870000019380 0001 00000000 0x0 0x0 0xffff870000019400 0001 00000000 0x0 0x0 0xffff870000019480 0001 00000000 0x0 0x0 0xffff870000019500 0001 00000000 0x0 0x0 0xffff870000019580 0001 00000000 0x0 0x0 0xffff870000019600 0001 00000000 0x0 0x0 0xffff870000019680 0001 00000000 0x0 0x0 0xffff870000019700 0001 00000000 0x0 0x0 0xffff870000019780 0001 00000000 0x0 0x0 0xffff870000019800 0001 00000000 0x0 0x0 0xffff870000019880 0001 00000000 0x0 0x0 0xffff870000019900 0001 00000000 0x0 0x0 0xffff870000019980 0001 00000000 0x0 0x0 0xffff870000019a00 0001 00000000 0x0 0x0 0xffff870000019a80 0001 00000000 0x0 0x0 0xffff870000019b00 0001 00000000 0x0 0x0 0xffff870000019b80 0001 00000000 0x0 0x0 0xffff870000019c00 0001 00000000 0x0 0x0 0xffff870000019c80 0001 00000000 0x0 0x0 0xffff870000019d00 0001 00000000 0x0 0x0 0xffff870000019d80 0001 00000000 0x0 0x0 0xffff870000019e00 0001 00000000 0x0 0x0 0xffff870000019e80 0001 00000000 0x0 0x0 0xffff870000019f00 0001 00000000 0x0 0x0 0xffff870000019f80 0001 00000000 0x0 0x0 0xffff87000001a000 0001 00000000 0x0 0x0 0xffff87000001a080 0001 00000000 0x0 0x0 0xffff87000001a100 0001 00000000 0x0 0x0 0xffff87000001a180 0001 00000000 0x0 0x0 0xffff87000001a200 0001 00000000 0x0 0x0 0xffff87000001a280 0001 00000000 0x0 0x0 0xffff87000001a300 0001 00000000 0x0 0x0 0xffff87000001a380 0001 00000000 0x0 0x0 0xffff87000001a400 0001 00000000 0x0 0x0 0xffff87000001a480 0001 00000000 0x0 0x0 0xffff87000001a500 0001 00000000 0x0 0x0 0xffff87000001a580 0001 00000000 0x0 0x0 0xffff87000001a600 0041 00000000 0x0 0x0 0xffff87000001a680 0041 00000000 0x0 0x0 0xffff87000001a700 0041 00000000 0x0 0x0 0xffff87000001a780 0041 00000000 0x0 0x0 0xffff87000001a800 0041 00000000 0x0 0x0 0xffff87000001a880 0041 00000000 0x0 0x0 0xffff87000001a900 0041 00000000 0x0 0x0 0xffff87000001a980 0041 00000000 0x0 0x0 0xffff87000001aa00 0041 00000000 0x0 0x0 0xffff87000001aa80 0041 00000000 0x0 0x0 0xffff87000001ab00 0041 00000000 0x0 0x0 0xffff87000001ab80 0041 00000000 0x0 0x0 0xffff87000001ac00 0041 00000000 0x0 0x0 0xffff87000001ac80 0041 00000000 0x0 0x0 0xffff87000001ad00 0041 00000000 0x0 0x0 0xffff87000001ad80 0041 00000000 0x0 0x0 0xffff87000001ae00 0041 00000000 0x0 0x0 0xffff87000001ae80 0041 00000000 0x0 0x0 0xffff87000001af00 0041 00000000 0x0 0x0 0xffff87000001af80 0041 00000000 0x0 0x0 0xffff87000001b000 0041 00000000 0x0 0x0 0xffff87000001b080 0041 00000000 0x0 0x0 0xffff87000001b100 0041 00000000 0x0 0x0 0xffff87000001b180 0041 00000000 0x0 0x0 0xffff87000001b200 0045 00000000 0x0 0x0 0xffff87000001b280 0041 00000000 0x0 0x0 0xffff87000001b300 0041 00000000 0x0 0x0 0xffff87000001b380 0041 00000000 0x0 0x0 0xffff87000001b400 0041 00000000 0x0 0x0 0xffff87000001b480 0041 00000000 0x0 0x0 0xffff87000001b500 0041 00000000 0x0 0x0 0xffff87000001b580 0041 00000000 0x0 0x0 0xffff87000001b600 0045 00000000 0x0 0x0 0xffff87000001b680 0041 00000000 0x0 0x0 0xffff87000001b700 0041 00000000 0x0 0x0 0xffff87000001b780 0041 00000000 0x0 0x0 0xffff87000001b800 0041 00000000 0x0 0x0 0xffff87000001b880 0041 00000000 0x0 0x0 0xffff87000001b900 0041 00000000 0x0 0x0 0xffff87000001b980 0041 00000000 0x0 0x0 0xffff87000001ba00 0045 00000000 0x0 0x0 0xffff87000001ba80 0041 00000000 0x0 0x0 0xffff87000001bb00 0041 00000000 0x0 0x0 0xffff87000001bb80 0041 00000000 0x0 0x0 0xffff87000001bc00 0045 00000000 0x0 0x0 0xffff87000001bc80 0045 00000000 0x0 0x0 0xffff87000001bd00 0041 00000000 0x0 0x0 0xffff87000001bd80 0041 00000000 0x0 0x0 0xffff87000001be00 0001 00000000 0x0 0x0 0xffff87000001be80 0001 00000000 0x0 0x0 0xffff87000001bf00 0001 00000000 0x0 0x0 0xffff87000001bf80 0001 00000000 0x0 0x0 0xffff87000001c000 0001 00000000 0x0 0x0 0xffff87000001c080 0001 00000000 0x0 0x0 0xffff87000001c100 0001 00000000 0x0 0x0 0xffff87000001c180 0001 00000000 0x0 0x0 0xffff87000001c200 0001 00000000 0x0 0x0 0xffff87000001c280 0001 00000000 0x0 0x0 0xffff87000001c300 0001 00000000 0x0 0x0 0xffff87000001c380 0001 00000000 0x0 0x0 0xffff87000001c400 0001 00000000 0x0 0x0 0xffff87000001c480 0001 00000000 0x0 0x0 0xffff87000001c500 0001 00000000 0x0 0x0 0xffff87000001c580 0001 00000000 0x0 0x0 0xffff87000001c600 0001 00000000 0x0 0x0 0xffff87000001c680 0001 00000000 0x0 0x0 0xffff87000001c700 0001 00000000 0x0 0x0 0xffff87000001c780 0001 00000000 0x0 0x0 0xffff87000001c800 0001 00000000 0x0 0x0 0xffff87000001c880 0001 00000000 0x0 0x0 0xffff87000001c900 0001 00000000 0x0 0x0 0xffff87000001c980 0001 00000000 0x0 0x0 0xffff87000001ca00 0001 00000000 0x0 0x0 0xffff87000001ca80 0001 00000000 0x0 0x0 0xffff87000001cb00 0001 00000000 0x0 0x0 0xffff87000001cb80 0001 00000000 0x0 0x0 0xffff87000001cc00 0001 00000000 0x0 0x0 0xffff87000001cc80 0001 00000000 0x0 0x0 0xffff87000001cd00 0001 00000000 0x0 0x0 0xffff87000001cd80 0001 00000000 0x0 0x0 0xffff87000001ce00 0001 00000000 0x0 0x0 0xffff87000001ce80 0001 00000000 0x0 0x0 0xffff87000001cf00 0001 00000000 0x0 0x0 0xffff87000001cf80 0001 00000000 0x0 0x0 0xffff87000001d000 0001 00000000 0x0 0x0 0xffff87000001d080 0001 00000000 0x0 0x0 0xffff87000001d100 0001 00000000 0x0 0x0 0xffff87000001d180 0001 00000000 0x0 0x0 0xffff87000001d200 0001 00000000 0x0 0x0 0xffff87000001d280 0001 00000000 0x0 0x0 0xffff87000001d300 0001 00000000 0x0 0x0 0xffff87000001d380 0001 00000000 0x0 0x0 0xffff87000001d400 0001 00000000 0x0 0x0 0xffff87000001d480 0001 00000000 0x0 0x0 0xffff87000001d500 0001 00000000 0x0 0x0 0xffff87000001d580 0001 00000000 0x0 0x0 0xffff87000001d600 0001 00000000 0x0 0x0 0xffff87000001d680 0001 00000000 0x0 0x0 0xffff87000001d700 0001 00000000 0x0 0x0 0xffff87000001d780 0001 00000000 0x0 0x0 0xffff87000001d800 0001 00000000 0x0 0x0 0xffff87000001d880 0001 00000000 0x0 0x0 0xffff87000001d900 0001 00000000 0x0 0x0 0xffff87000001d980 0001 00000000 0x0 0x0 0xffff87000001da00 0001 00000000 0x0 0x0 0xffff87000001da80 0001 00000000 0x0 0x0 0xffff87000001db00 0001 00000000 0x0 0x0 0xffff87000001db80 0001 00000000 0x0 0x0 0xffff87000001dc00 0001 00000000 0x0 0x0 0xffff87000001dc80 0001 00000000 0x0 0x0 0xffff87000001dd00 0001 00000000 0x0 0x0 0xffff87000001dd80 0001 00000000 0x0 0x0 0xffff87000001de00 0001 00000000 0x0 0x0 0xffff87000001de80 0001 00000000 0x0 0x0 0xffff87000001df00 0001 00000000 0x0 0x0 0xffff87000001df80 0001 00000000 0x0 0x0 0xffff87000001e000 0001 00000000 0x0 0x0 0xffff87000001e080 0001 00000000 0x0 0x0 0xffff87000001e100 0001 00000000 0x0 0x0 0xffff87000001e180 0001 00000000 0x0 0x0 0xffff87000001e200 0001 00000000 0x0 0x0 0xffff87000001e280 0001 00000000 0x0 0x0 0xffff87000001e300 0001 00000000 0x0 0x0 0xffff87000001e380 0001 00000000 0x0 0x0 0xffff87000001e400 0001 00000000 0x0 0x0 0xffff87000001e480 0001 00000000 0x0 0x0 0xffff87000001e500 0001 00000000 0x0 0x0 0xffff87000001e580 0001 00000000 0x0 0x0 0xffff87000001e600 0001 00000000 0x0 0x0 0xffff87000001e680 0001 00000000 0x0 0x0 0xffff87000001e700 0001 00000000 0x0 0x0 0xffff87000001e780 0001 00000000 0x0 0x0 0xffff87000001e800 0001 00000000 0x0 0x0 0xffff87000001e880 0001 00000000 0x0 0x0 0xffff87000001e900 0001 00000000 0x0 0x0 0xffff87000001e980 0001 00000000 0x0 0x0 0xffff87000001ea00 0001 00000000 0x0 0x0 0xffff87000001ea80 0001 00000000 0x0 0x0 0xffff87000001eb00 0001 00000000 0x0 0x0 0xffff87000001eb80 0001 00000000 0x0 0x0 0xffff87000001ec00 0001 00000000 0x0 0x0 0xffff87000001ec80 0001 00000000 0x0 0x0 0xffff87000001ed00 0001 00000000 0x0 0x0 0xffff87000001ed80 0001 00000000 0x0 0x0 0xffff87000001ee00 0001 00000000 0x0 0x0 0xffff87000001ee80 0001 00000000 0x0 0x0 0xffff87000001ef00 0001 00000000 0x0 0x0 0xffff87000001ef80 0001 00000000 0x0 0x0 0xffff87000001f000 0001 00000000 0x0 0x0 0xffff87000001f080 0001 00000000 0x0 0x0 0xffff87000001f100 0001 00000000 0x0 0x0 0xffff87000001f180 0001 00000000 0x0 0x0 0xffff87000001f200 0001 00000000 0x0 0x0 0xffff87000001f280 0001 00000000 0x0 0x0 0xffff87000001f300 0001 00000000 0x0 0x0 0xffff87000001f380 0001 00000000 0x0 0x0 0xffff87000001f400 0001 00000000 0x0 0x0 0xffff87000001f480 0001 00000000 0x0 0x0 0xffff87000001f500 0001 00000000 0x0 0x0 0xffff87000001f580 0001 00000000 0x0 0x0 0xffff87000001f600 0001 00000000 0x0 0x0 0xffff87000001f680 0001 00000000 0x0 0x0 0xffff87000001f700 0001 00000000 0x0 0x0 0xffff87000001f780 0001 00000000 0x0 0x0 0xffff87000001f800 0001 00000000 0x0 0x0 0xffff87000001f880 0001 00000000 0x0 0x0 0xffff87000001f900 0001 00000000 0x0 0x0 0xffff87000001f980 0001 00000000 0x0 0x0 0xffff87000001fa00 0001 00000000 0x0 0x0 0xffff87000001fa80 0001 00000000 0x0 0x0 0xffff87000001fb00 0001 00000000 0x0 0x0 0xffff87000001fb80 0001 00000000 0x0 0x0 0xffff87000001fc00 0001 00000000 0x0 0x0 0xffff87000001fc80 0001 00000000 0x0 0x0 0xffff87000001fd00 0001 00000000 0x0 0x0 0xffff87000001fd80 0001 00000000 0x0 0x0 0xffff87000001fe00 0001 00000000 0x0 0x0 0xffff87000001fe80 0001 00000000 0x0 0x0 0xffff87000001ff00 0001 00000000 0x0 0x0 0xffff87000001ff80 0001 00000000 0x0 0x0 0xffff870000020000 0001 00000000 0x0 0x0 0xffff870000020080 0001 00000000 0x0 0x0 0xffff870000020100 0001 00000000 0x0 0x0 0xffff870000020180 0001 00000000 0x0 0x0 0xffff870000020200 0001 00000000 0x0 0x0 0xffff870000020280 0001 00000000 0x0 0x0 0xffff870000020300 0001 00000000 0x0 0x0 0xffff870000020380 0001 00000000 0x0 0x0 0xffff870000020400 0001 00000000 0x0 0x0 0xffff870000020480 0001 00000000 0x0 0x0 0xffff870000020500 0001 00000000 0x0 0x0