last executing test programs: 42.757892372s ago: executing program 5: open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) __getcwd(&(0x7f0000000000)=""/29, 0xff39) setuid(0xee01) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) rename(&(0x7f0000000000)='./file0/file0/../file0\x00', &(0x7f0000000140)='./file0/file0/../file0\x00') 41.036656446s ago: executing program 5: _lwp_create(&(0x7f0000000180)={0x0, 0x0, {[0x0, 0x0, 0x10001]}, {}, {0x0, 0x0, '%\x00'}}, 0x0, 0x0) ioctl$FIOSEEKHOLE(0xffffffffffffffff, 0x80906979, &(0x7f0000000180)=0x8000000000000031) sendmsg$unix(0xffffffffffffffff, &(0x7f0000002280)={0x0, 0x0, &(0x7f0000003800)=[{&(0x7f0000000040)="05833aebf065f788", 0x8}], 0x1}, 0x0) open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x0) truncate(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) read(0xffffffffffffffff, 0x0, 0x20080) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = open$dir(&(0x7f0000000200)='.\x00', 0x0, 0x0) ioctl$FIOGETBMAP(r0, 0xc008667a, &(0x7f0000000040)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0xffff, 0x0, &(0x7f0000000100)=0x20002, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = socket(0x2, 0x2, 0x0) __lstat50(&(0x7f0000000080)='./file0\x00', &(0x7f0000000300)) setsockopt$sock_int(r1, 0xffff, 0x1001, &(0x7f0000000100), 0x4) connect$unix(r1, &(0x7f0000000000), 0x10) r2 = socket(0x10, 0x2, 0x0) ioctl$FIOSEEKHOLE(r2, 0x8020690c, &(0x7f0000000180)) 34.125787724s ago: executing program 5: _lwp_create(&(0x7f0000000180)={0x0, 0x0, {[0x0, 0x0, 0x10001]}, {}, {0x0, 0x0, '%\x00'}}, 0x0, 0x0) ioctl$FIOSEEKHOLE(0xffffffffffffffff, 0x80906979, &(0x7f0000000180)=0x8000000000000031) sendmsg$unix(0xffffffffffffffff, &(0x7f0000002280)={0x0, 0x0, &(0x7f0000003800)=[{&(0x7f0000000040)="05833aebf065f788", 0x8}], 0x1}, 0x0) open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x0) truncate(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) read(0xffffffffffffffff, 0x0, 0x20080) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = open$dir(&(0x7f0000000200)='.\x00', 0x0, 0x0) ioctl$FIOGETBMAP(r0, 0xc008667a, &(0x7f0000000040)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0xffff, 0x0, &(0x7f0000000100)=0x20002, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = socket(0x2, 0x2, 0x0) __lstat50(&(0x7f0000000080)='./file0\x00', &(0x7f0000000300)) setsockopt$sock_int(r1, 0xffff, 0x1001, &(0x7f0000000100), 0x4) connect$unix(r1, &(0x7f0000000000), 0x10) r2 = socket(0x10, 0x2, 0x0) ioctl$FIOSEEKHOLE(r2, 0x8020690c, &(0x7f0000000180)) 34.008288892s ago: executing program 5: __fstat50(0xffffffffffffffff, &(0x7f00000001c0)) mknod(&(0x7f0000000180)='./file0\x00', 0x1000, 0x0) r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x2, 0x0) posix_spawn(0x0, 0x0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=@close={0x2, 0xffffffffffffff9c}}, 0x0, 0x0, 0x0) ioctl$FIONREAD(r0, 0xc0106914, &(0x7f0000000140)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) socket(0x2, 0x3, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = socket(0x2, 0x3, 0x0) ioctl$FIOSEEKHOLE(r1, 0x8090697f, &(0x7f0000000180)) readv(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1) 32.220598436s ago: executing program 5: __mount50(&(0x7f00000002c0)='overlay\x00', &(0x7f0000000040)='.\x00', 0x0, &(0x7f0000000540), 0x0) (async) __mount50(&(0x7f00000002c0)='overlay\x00', &(0x7f0000000040)='.\x00', 0x0, &(0x7f0000000540), 0x0) vfork() (async) r0 = vfork() r1 = shmget$private(0x0, 0x800000, 0x0, &(0x7f0000800000/0x800000)=nil) shmctl$SHM_LOCK(r1, 0x3) (async) shmctl$SHM_LOCK(r1, 0x3) __wait450(r0, &(0x7f0000000000), 0xf, &(0x7f0000001300)) mknod(&(0x7f00000000c0)='./bus\x00', 0x2000, 0x4f4b) r2 = socket$inet(0x2, 0x2, 0x0) r3 = socket(0x10, 0x2, 0x0) ioctl$FIOSEEKHOLE(0xffffffffffffffff, 0x80906919, 0x0) sendto$unix(r3, 0x0, 0x0, 0x1, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0xa) (async) sendto$unix(r3, 0x0, 0x0, 0x1, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0xa) recvmmsg(r2, &(0x7f0000001600)={&(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000200)=""/62, 0x3e}, {&(0x7f0000000300)=""/4086, 0xff6}], 0x2, &(0x7f00000014c0)=""/196, 0xc4}}, 0x10, 0x0, 0x0) mknod(&(0x7f0000000000)='./bus\x00', 0x2000, 0x2e00) r4 = open$dir(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) pread(r4, &(0x7f0000000140)='5', 0x1, 0x0) (async) pread(r4, &(0x7f0000000140)='5', 0x1, 0x0) recvfrom(r3, &(0x7f0000000240)=""/112, 0x70, 0x880, &(0x7f0000000100)=@family=0x22, 0xe) compat_43_ommap(&(0x7f0000672000/0x2000)=nil, 0xfffffffffffff002, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) compat_43_ommap(&(0x7f0000672000/0x2000)=nil, 0xfffffffffffff002, 0x0, 0x0, 0xffffffffffffffff, 0x0) __stat50(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180)) (async) __stat50(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180)={0x0}) mknod(&(0x7f00000011c0)='./file1\x00', 0x100, r5) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) getsid(0x0) getsid(0x0) getsid(0x0) (async) r6 = getsid(0x0) compat_50___msgctl13$IPC_STAT(0x0, 0x2, &(0x7f00000003c0)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) __mount50(&(0x7f0000000000)='overlay\x00', &(0x7f0000000040)='.\x00', 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) socket(0x0, 0x1, 0x0) close(0xffffffffffffffff) (async) close(0xffffffffffffffff) r7 = socket(0x18, 0x2, 0x0) setsockopt(r7, 0x1000000000029, 0x9, &(0x7f0000000040)='\x00\x00\x00\x00', 0x4) (async) setsockopt(r7, 0x1000000000029, 0x9, &(0x7f0000000040)='\x00\x00\x00\x00', 0x4) ptrace(0x9, r6, 0x0, 0x0) 13.267295948s ago: executing program 3: compat_40_mount(0x0, 0x0, 0x0, &(0x7f0000000340)="46fa1153a6b135f76507fa58fd26fe98ba8f6481f3213eb2f799d9ae19a1ee00c0cee94846ed95136bda987af2ab9d1b77f6eda219ae8559019fa6") symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00') r0 = socket$inet(0x2, 0x5, 0x7) compat_43_orecvmsg(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/27, 0x1b}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r1, &(0x7f0000000100)=@abs={0x0, 0x0, 0x0}, 0x8) compat_40_mount(&(0x7f0000000180)='puffs\x00', &(0x7f0000000ac0)='./file0/file0\x00', 0x0, &(0x7f0000000300)="1e") 12.159236208s ago: executing program 0: symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00') chflags(&(0x7f0000000040)='./file0\x00', 0x5) r0 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) fpathconf(r0, 0x0) dup2(0xffffffffffffffff, r0) mkdir(&(0x7f0000000040)='./file2\x00', 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0, 0x0) socket(0x18, 0x1, 0x0) compat_40_mount(&(0x7f0000000040)='tmpfs\x00', &(0x7f00000005c0)='.\x00', 0x0, &(0x7f00000002c0)="01") mknod(&(0x7f0000000480)='./file0\x00', 0x2000, 0x1733) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) ioctl$FIONREAD(r1, 0x80044279, &(0x7f0000000080)) 11.764841818s ago: executing program 1: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) (async) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x1b, &(0x7f0000000380)=ANY=[@ANYBLOB="1b03c94ab6c2c4adf5135234f7578454b629dd85f502866993b2d2"]}]}) (async) compat_40_mount(&(0x7f0000000180)='puffs\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000300)="1e") (async) mkdir(0x0, 0x0) mkdir(0x0, 0x0) (async) compat_50___msgctl13$IPC_STAT(0x0, 0x2, 0x0) (async) compat_40_mount(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) (async) pathconf(0x0, 0x0) (async, rerun: 32) mknod(&(0x7f0000000000)='./bus\x00', 0x2000, 0x2e00) (async, rerun: 32) r0 = open$dir(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$FIOASYNC(r0, 0xc1c0526b, &(0x7f0000000040)) 11.715729296s ago: executing program 0: r0 = socket(0x18, 0x1, 0x0) setsockopt(r0, 0x1000000029, 0x23, &(0x7f0000000000), 0x0) 11.516798486s ago: executing program 3: _lwp_create(&(0x7f0000000180)={0x0, 0x0, {[0x0, 0x0, 0x10001]}, {}, {0x0, 0x0, '%\x00'}}, 0x0, 0x0) __setitimer50(0x0, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000002280)={0x0, 0x0, &(0x7f0000003800)=[{&(0x7f0000000040)="05833aebf065f788", 0x8}], 0x1}, 0x0) open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x0) truncate(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) read(0xffffffffffffffff, 0x0, 0x20080) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = open$dir(&(0x7f0000000200)='.\x00', 0x0, 0x0) ioctl$FIOGETBMAP(r0, 0xc008667a, &(0x7f0000000040)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0xffff, 0x0, &(0x7f0000000100)=0x20002, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = socket(0x2, 0x2, 0x0) __lstat50(&(0x7f0000000080)='./file0\x00', &(0x7f0000000300)) setsockopt$sock_int(r1, 0xffff, 0x1001, &(0x7f0000000100), 0x4) connect$unix(r1, &(0x7f0000000000), 0x10) r2 = socket(0x10, 0x2, 0x0) ioctl$FIOSEEKHOLE(r2, 0x8020690c, &(0x7f0000000180)) 10.999153616s ago: executing program 1: sendmsg$unix(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000400)=@file={0x0, './file0\x00'}, 0xa, 0x0}, 0x0) compat_50___msgctl13$IPC_STAT(0x0, 0x2, &(0x7f0000000540)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)}}) symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00') lchown(&(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffff) compat_40_mount(&(0x7f0000000140)='umap\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f00000001c0)) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) chroot(&(0x7f0000000180)='./file1\x00') symlink(&(0x7f0000000300)='./file1/file0\x00', &(0x7f00000000c0)='./file0\x00') mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) __mount50(&(0x7f0000000040)='procfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f00000000c0)='@', 0x1) open(&(0x7f00000000c0)='./file0\x00', 0x80000000000206, 0x0) 9.951436326s ago: executing program 2: symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00') compat_50___msgctl13$IPC_STAT(0x0, 0x2, &(0x7f00000003c0)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)}}) lchown(0x0, 0x0, 0xffffffffffffffff) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)=@abs={0x0, 0x0, 0x1}, 0x8, &(0x7f00000000c0)=[{&(0x7f00000004c0)="abdadce53c287f6d218ce1c96bd428dd80e194e210c3f7b6ca77428bacd5998f0ee0060a2daee20c4bb449666f96d08433531957dc674bdc2df3c95425de84693cb50457c7e4338d93fac02cd7fe7f5350c2f661e571a63a98ea2d4fd27e6e03584cd81dc968f6", 0x67}], 0x1}, 0x0) compat_40_mount(&(0x7f0000000300)='umap\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, &(0x7f00000001c0)) setgroups(0x0, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) compat_40_mount(&(0x7f0000000140)='umap\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f00000001c0)) unlink(&(0x7f0000000000)='./file0\x00') mknod(&(0x7f00000000c0)='./file0\x00', 0x6000, 0xe03) 9.107693455s ago: executing program 0: r0 = socket$inet(0x2, 0x1, 0x0) getsockopt(r0, 0xfd, 0x6, 0xffffffffffffffff, &(0x7f0000000080)) 9.086294058s ago: executing program 2: r0 = open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x0) truncate(&(0x7f0000000000)='./file0\x00', 0x0, 0x10001) symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00') compat_50___msgctl13$IPC_STAT(0x0, 0x2, &(0x7f0000000280)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)=@abs={0x0, 0x0, 0x2}, 0x8, &(0x7f0000000200)}, 0x0) setgroups(0x0, 0x0) __mount50(&(0x7f00000002c0)='overlay\x00', &(0x7f0000000040)='.\x00', 0x0, &(0x7f0000000540), 0x0) lchown(&(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffff) compat_40_mount(&(0x7f0000000140)='umap\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f00000001c0)) unlink(&(0x7f0000000000)='./file0\x00') mmap(&(0x7f0000000000/0x13000)=nil, 0x13000, 0x3, 0x11, r0, 0x0, 0x0) read(r0, &(0x7f0000000080)=""/159, 0x9f) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x6) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 7.05165466s ago: executing program 3: _lwp_create(&(0x7f0000000180)={0x0, 0x0, {[0x0, 0x0, 0x10001]}, {}, {0x0, 0x0, '%\x00'}}, 0x0, 0x0) __setitimer50(0x0, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000002280)={0x0, 0x0, &(0x7f0000003800)=[{&(0x7f0000000040)="05833aebf065f788", 0x8}], 0x1}, 0x0) open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x0) truncate(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) read(0xffffffffffffffff, 0x0, 0x20080) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = open$dir(&(0x7f0000000200)='.\x00', 0x0, 0x0) ioctl$FIOGETBMAP(r0, 0xc008667a, &(0x7f0000000040)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0xffff, 0x0, &(0x7f0000000100)=0x20002, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = socket(0x2, 0x2, 0x0) __lstat50(&(0x7f0000000080)='./file0\x00', &(0x7f0000000300)) setsockopt$sock_int(r1, 0xffff, 0x1001, &(0x7f0000000100), 0x4) connect$unix(r1, &(0x7f0000000000), 0x10) r2 = socket(0x10, 0x2, 0x0) ioctl$FIOSEEKHOLE(r2, 0x8020690c, &(0x7f0000000180)) 6.491027156s ago: executing program 3: compat_50___msgctl13$IPC_STAT(0x0, 0x2, &(0x7f0000000280)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)}}) symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00') open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) compat_40_mount(&(0x7f0000000140)='umap\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f00000001c0)) mkdir(0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) unmount(&(0x7f0000000000)='./file0\x00', 0x0) readv(r0, &(0x7f0000000040)=[{0x0}], 0x1) 5.266599253s ago: executing program 2: mknod(0x0, 0x2000, 0x6da) open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) __getcwd(&(0x7f0000000000)=""/29, 0xff39) setuid(0xee01) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) rename(&(0x7f0000000000)='./file0/file0/../file0\x00', &(0x7f0000000140)='./file0/file0/../file0\x00') 4.89380436s ago: executing program 4: pipe2(0x0, 0x4) __fstat50(0xffffffffffffffff, &(0x7f00000001c0)) mknod(&(0x7f0000000180)='./file0\x00', 0x1000, 0x0) r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x2, 0x0) posix_spawn(0x0, 0x0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=@close={0x2, 0xffffffffffffff9c}}, 0x0, 0x0, 0x0) ioctl$FIONREAD(r0, 0xc0106914, &(0x7f0000000140)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) socket(0x2, 0x3, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = socket(0x2, 0x3, 0x0) ioctl$FIOSEEKHOLE(r1, 0x8090697f, &(0x7f0000000180)) readv(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1) 4.751137192s ago: executing program 3: ioctl$FIOSEEKHOLE(0xffffffffffffffff, 0x80906979, &(0x7f0000000180)=0x8000000000000031) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x10, 0x2, 0x0) ioctl$FIOSEEKHOLE(r0, 0x80906931, &(0x7f0000000000)=0x3ffffffffffffe) __posix_fadvise50(r0, 0x0, 0x0, 0x4, 0x0) 4.216871794s ago: executing program 1: sendmsg$unix(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000400)=@file={0x0, './file0\x00'}, 0xa, 0x0}, 0x0) compat_50___msgctl13$IPC_STAT(0x0, 0x2, &(0x7f0000000540)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)}}) symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00') lchown(&(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffff) compat_40_mount(&(0x7f0000000140)='umap\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f00000001c0)) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) chroot(&(0x7f0000000180)='./file1\x00') symlink(&(0x7f0000000300)='./file1/file0\x00', &(0x7f00000000c0)='./file0\x00') mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) __mount50(&(0x7f0000000040)='procfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f00000000c0)='@', 0x1) open(&(0x7f00000000c0)='./file0\x00', 0x80000000000206, 0x0) 4.020243994s ago: executing program 0: r0 = socket$inet(0x2, 0x1, 0x0) getsockopt(r0, 0xfd, 0x6, 0xffffffffffffffff, &(0x7f0000000080)) 3.870315517s ago: executing program 4: r0 = socket$inet(0x2, 0x1, 0x0) getsockopt(r0, 0x8, 0xb, 0xffffffffffffffff, &(0x7f0000000080)) 3.168936064s ago: executing program 3: symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00') chflags(&(0x7f0000000040)='./file0\x00', 0x5) r0 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) fpathconf(r0, 0x0) dup2(0xffffffffffffffff, r0) mkdir(&(0x7f0000000040)='./file2\x00', 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0, 0x0) compat_40_mount(&(0x7f0000000040)='tmpfs\x00', &(0x7f00000005c0)='.\x00', 0x0, &(0x7f00000002c0)="01") mknod(&(0x7f0000000480)='./file0\x00', 0x2000, 0x1733) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) ioctl$FIONREAD(r1, 0x80044279, &(0x7f0000000080)) 3.1331791s ago: executing program 4: fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x18, 0x1, 0x0) setsockopt(r0, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) connect$unix(r0, &(0x7f00000000c0)=@abs={0x860, 0x7}, 0x1c) 2.733028561s ago: executing program 1: open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) _ksem_open(&(0x7f0000000180)='/', 0xff01, 0x0, 0x0, &(0x7f0000000100)) symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00') r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) r2 = open$dir(&(0x7f00000002c0)='.\x00', 0x0, 0x0) renameat(r2, &(0x7f0000000300)='./file0\x00', r1, &(0x7f0000000040)='./file0\x00') 2.505124346s ago: executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) getsockopt$inet_opts(r0, 0xfeffffff, 0x15, 0x0, 0x0) 1.883207821s ago: executing program 4: open$dir(&(0x7f00000000c0)='./file0\x00', 0x400, 0x100) open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x0) r0 = socket(0x2, 0x2, 0x0) ioctl$FIOSEEKHOLE(r0, 0x80206916, &(0x7f0000000180)=0xfffffffffffffffc) mknod(0x0, 0x0, 0xa718) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) __fhstat50(&(0x7f0000000080)="8a30224c35db5a15f1f3ab41", 0xc, 0x0) __stat50(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000380)) open(&(0x7f0000000140)='./file0\x00', 0x800, 0x0) compat_90_getvfsstat(&(0x7f0000001240), 0x8d0, 0x0) getsid(0x0) compat_43_ocreat(&(0x7f0000000100)='./file0\x00', 0x0) ktrace(&(0x7f00000000c0)='./file0\x00', 0x4, 0x4, 0xffffffffffffffff) __getfh30(0x0, 0x0, 0x0) getsid(0x0) r1 = semget$private(0x0, 0x4000000009, 0x0) semop(r1, &(0x7f0000000500)=[{0x0, 0x800}, {0x0, 0x8001}], 0x2) 1.515705168s ago: executing program 1: mknod(&(0x7f00000000c0)='./file0\x00', 0x2000, 0x4100) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000080)={0x2, 0x1, 0xfffffffffffffff5}) ioctl$FIOASYNC(r0, 0x80185728, &(0x7f0000000080)) compat_43_ogethostname(&(0x7f0000000200)=""/4096, 0x1000) compat_43_ommap(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x2, 0x2, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0x2000, 0x4100) (async) open(&(0x7f00000001c0)='./file0\x00', 0x2, 0x0) (async) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000080)={0x2, 0x1, 0xfffffffffffffff5}) (async) ioctl$FIOASYNC(r0, 0x80185728, &(0x7f0000000080)) (async) compat_43_ogethostname(&(0x7f0000000200)=""/4096, 0x1000) (async) compat_43_ommap(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x2, 0x2, 0xffffffffffffffff, 0x0) (async) mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) (async) 1.349866563s ago: executing program 2: mknod(0x0, 0x2000, 0x6da) open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) __getcwd(&(0x7f0000000000)=""/29, 0xff39) setuid(0xee01) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) rename(&(0x7f0000000000)='./file0/file0/../file0\x00', &(0x7f0000000140)='./file0/file0/../file0\x00') 1.323113317s ago: executing program 0: r0 = socket(0x18, 0x1, 0x0) setsockopt(r0, 0x1000000029, 0x23, &(0x7f0000000000), 0x0) 1.166778311s ago: executing program 2: symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00') compat_50___msgctl13$IPC_STAT(0x0, 0x2, &(0x7f00000003c0)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)}}) lchown(0x0, 0x0, 0xffffffffffffffff) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)=@abs={0x0, 0x0, 0x1}, 0x8, &(0x7f00000000c0)=[{&(0x7f00000004c0)="abdadce53c287f6d218ce1c96bd428dd80e194e210c3f7b6ca77428bacd5998f0ee0060a2daee20c4bb449666f96d08433531957dc674bdc2df3c95425de84693cb50457c7e4338d93fac02cd7fe7f5350c2f661e571a63a98ea2d4fd27e6e03584cd81dc968f6", 0x67}], 0x1}, 0x0) compat_40_mount(&(0x7f0000000300)='umap\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, &(0x7f00000001c0)) setgroups(0x0, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) compat_40_mount(&(0x7f0000000140)='umap\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f00000001c0)) unlink(&(0x7f0000000000)='./file0\x00') mknod(&(0x7f00000000c0)='./file0\x00', 0x6000, 0xe03) 732.458188ms ago: executing program 5: _lwp_create(&(0x7f0000000180)={0x0, 0x0, {[0x0, 0x0, 0x10001]}, {}, {0x0, 0x0, '%\x00'}}, 0x0, 0x0) __setitimer50(0x0, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000002280)={0x0, 0x0, &(0x7f0000003800)=[{&(0x7f0000000040)="05833aebf065f788", 0x8}], 0x1}, 0x0) open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x0) truncate(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) read(0xffffffffffffffff, 0x0, 0x20080) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = open$dir(&(0x7f0000000200)='.\x00', 0x0, 0x0) ioctl$FIOGETBMAP(r0, 0xc008667a, &(0x7f0000000040)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0xffff, 0x0, &(0x7f0000000100)=0x20002, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = socket(0x2, 0x2, 0x0) __lstat50(&(0x7f0000000080)='./file0\x00', &(0x7f0000000300)) setsockopt$sock_int(r1, 0xffff, 0x1001, &(0x7f0000000100), 0x4) connect$unix(r1, &(0x7f0000000000), 0x10) r2 = socket(0x10, 0x2, 0x0) ioctl$FIOSEEKHOLE(r2, 0x8020690c, &(0x7f0000000180)) 526.134489ms ago: executing program 2: r0 = open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x0) truncate(&(0x7f0000000000)='./file0\x00', 0x0, 0x10001) symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00') compat_50___msgctl13$IPC_STAT(0x0, 0x2, &(0x7f0000000280)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)=@abs={0x0, 0x0, 0x2}, 0x8, &(0x7f0000000200)}, 0x0) setgroups(0x0, 0x0) __mount50(&(0x7f00000002c0)='overlay\x00', &(0x7f0000000040)='.\x00', 0x0, &(0x7f0000000540), 0x0) lchown(&(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffff) compat_40_mount(&(0x7f0000000140)='umap\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f00000001c0)) unlink(&(0x7f0000000000)='./file0\x00') mmap(&(0x7f0000000000/0x13000)=nil, 0x13000, 0x3, 0x11, r0, 0x0, 0x0) read(r0, &(0x7f0000000080)=""/159, 0x9f) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x6) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 513.194381ms ago: executing program 1: compat_50___msgctl13$IPC_STAT(0x0, 0x2, &(0x7f0000000280)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)}}) symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00') open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) compat_40_mount(&(0x7f0000000140)='umap\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f00000001c0)) mkdir(0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) unmount(&(0x7f0000000000)='./file0\x00', 0x255a0100) readv(0xffffffffffffffff, &(0x7f0000000040)=[{0x0}], 0x1) 309.839752ms ago: executing program 4: pipe2(0x0, 0x4) __fstat50(0xffffffffffffffff, &(0x7f00000001c0)) mknod(&(0x7f0000000180)='./file0\x00', 0x1000, 0x0) r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x2, 0x0) posix_spawn(0x0, 0x0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=@close={0x2, 0xffffffffffffff9c}}, 0x0, 0x0, 0x0) ioctl$FIONREAD(r0, 0xc0106914, &(0x7f0000000140)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) socket(0x2, 0x3, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = socket(0x2, 0x3, 0x0) ioctl$FIOSEEKHOLE(r1, 0x8090697f, &(0x7f0000000180)) readv(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1) 0s ago: executing program 0: r0 = open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x0) mmap(&(0x7f0000000000/0x13000)=nil, 0x13000, 0x3, 0x10, r0, 0x0, 0x0) compat_43_ocreat(&(0x7f0000000140)='./file0\x00', 0x0) ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0xd27d43220c7df9b, 0x0) compat_43_ogetrlimit(0x0, 0x0) utimensat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f000000a000/0x2000)=nil, 0x2000, 0x4) compat_43_ogetrlimit(0x3, &(0x7f0000000000)) mlockall(0x0) __mount50(0x0, &(0x7f0000000040)='.\x00', 0x0, 0x0, 0x0) compat_43_ommap(&(0x7f0000672000/0x2000)=nil, 0x2000, 0x0, 0x0, 0xffffffffffffffff, 0x0) __clone(0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.181' (ED25519) to the list of known hosts. 2024/06/22 15:42:44 fuzzer started 2024/06/22 15:42:44 dialing manager at 10.128.0.163:30040 2024/06/22 15:42:45 starting 6 executor processes [ 70.2326922] Size of accounting file not a multiple of 64 - incomplete record truncated [ 71.0727166] uhub5: device problem, disabling port 1 [ 71.8127162] tap4: detached [ 73.3827034] tap0: detached [ 76.3727186] uhub0: device problem, disabling port 1 [ 76.7927158] tap2: detached [ 77.2127123] tap1: detached [ 79.8527174] tap3: detached [ 80.4327174] tap5: detached [ 81.4827394] tap4: detached [ 84.8129006] tap0: detached [ 85.0827310] tap1: detached [ 86.6227388] uhub3: device problem, disabling port 1 [ 89.0027632] uhub1: device problem, disabling port 1 [ 89.6327424] tap4: detached [ 89.7427915] tap5: detached [ 90.2827615] tap2: detached [ 91.8427507] WARNING: defaulted mmap() share type to MAP_PRIVATE (pid 2139 command syz-executor.4) [ 94.7627644] tap0: detached [ 94.9027568] tap3: detached [ 96.8227829] tap1: detached [ 99.4827756] uhub1: device problem, disabling port 1 [ 100.2127747] tap4: detached [ 100.5227873] tap2: detached [ 100.8032237] tap5: detached [ 102.3327831] pad0: outputs: 44100Hz, 16-bit, stereo [ 102.3327831] audio0 at pad0: playback [ 102.3427824] audio0: slinear_le:16 -> slinear_le:16 2ch 44100Hz, blk 1764 bytes (10ms) for playback [ 102.3527861] spkr1 at audio0: PC Speaker (synthesized) [ 102.3627963] wsbell at spkr1 not configured [ 102.4027953] spkr1: detached [ 102.4228294] audio0: detached [ 102.4327981] pad0: detached [ 106.4628095] tap0: detached [ 106.6827901] tap3: detached [ 106.8427901] tap2: detached [ 110.1728033] uhub2: device problem, disabling port 1 [ 110.3128001] tap1: detached [ 113.8328129] .: failed to start extattr, error = 0tap4: detached [ 115.9028192] tap0: detached [ 117.9428182] tap5: detached [ 119.5828262] tap2: detached [ 119.7428408] tap3: detached [ 124.3828366] tap4: detached [ 125.0728576] tap0: detached [ 127.1828438] tap3: detached [ 127.2028440] tap5: detached [ 130.0228905] tap0: detached [ 131.7528730] tap2: detached [ 133.8328664] tap4: detached [ 136.0828772] tap5: detached [ 136.7828755] tap0: detached [ 137.8328721] tap3: detached ./file0./file0./file0./file0./file0./file0 ÿ÷ÿÿÿÿÿß./file0 êÏunionÀ [ 140.2028950] tap2: detached [ 141.7728964] superblock read failed [ 141.9028837] WARNING: defaulted mmap() share type to MAP_PRIVATE (pid 643 command syz-executor.5) [ 147.0928935] tap2: detached [ 147.7729008] tap5: detached [ 147.7928927] tap0: detached [ 150.1829046] tap1: detached [ 156.7029268] tap5: detached [ 158.0729252] tap0: detached [ 158.6229263] tap1: detached [ 160.8830151] tap4: detached [ 161.4329749] tap2: detached [ 162.8129402] tap3: detached [ 165.9629597] tap5: detached [ 166.1629600] tap1: detached [ 168.1029474] tap0: detached [ 169.9429576] tap2: detached [ 171.6729598] superblock read failed [ 174.7229735] tap4: detached [ 175.1829686] tap3: detached [ 176.2829774] tap1: detached [ 177.8729743] sockaddr_getsize_by_family: (syz-executor.3:3289:1158) Unhandled address family=0 [ 178.4429821] tap2: detached [ 179.9029828] tap0: detached [ 180.4129816] tap5: detached [ 184.4729906] tap1: detached [ 185.2030038] tap3: detached [ 188.0730059] tap5: detached [ 188.2730042] tap0: detached [ 189.7230062] sockaddr_getsize_by_family: (syz-executor.0:1444:3689) Unhandled address family=0 [ 190.7230115] tap2: detached [ 195.0830348] tap3: detached [ 195.8930228] tap0: detached [ 195.9930222] tap1: detached [ 197.7330373] sockaddr_getsize_by_family: (syz-executor.3:2219:1320) Unhandled address family=0 [ 198.4330385] tap2: detached [ 200.4630360] .: failed to start extattr, error = 0[ 203.2430621] tap3: detached [ 203.6030573] tap5: detached [ 204.4830441] tap2: detached [ 206.4830651] tap0: detached [ 206.9630646] tap1: detached [ 207.1330687] .: failed to start extattr, error = 0.: failed to start extattr, error = 0[ 212.0830735] tap5: detached [ 212.3730698] tap2: detached [ 213.2330716] tap3: detached [ 215.0730869] .: failed to start extattr, error = 0tap0: detached [ 217.9830773] tap1: detached [ 218.0430843] tap5: detached [ 221.8530932] tap2: detached [ 223.7530988] tap5: detached [ 223.9431110] tap1: detached [ 225.5431031] sockaddr_getsize_by_family: (syz-executor.5:1956:1762) Unhandled address family=0 [ 226.7531031] tap2: detached [ 229.8531269] tap0: detached [ 231.4231538] tap1: detached [ 232.8531209] tap2: detached [ 233.7131266] tap5: detached [ 234.4631698] WARNING: defaulted mmap() share type to MAP_PRIVATE (pid 5427 command syz-executor.2) [ 239.2531384] tap0: detached [ 243.3331479] tap4: detached [ 243.7831502] tap1: detached [ 244.6431640] tap2: detached [ 247.1231590] tap5: detached [ 251.2031684] tap3: detached [ 251.4231689] tap4: detached [ 252.7031766] tap2: detached [ 254.3131760] tap1: detached [ 255.8931822] tap0: detached [ 258.9931937] tap3: detached [ 261.0531964] tap5: detached [ 263.4632107] tap0: detached [ 264.8332199] tap4: detached [ 267.2032238] tap3: detached [ 267.6232235] tap2: detached [ 271.2232357] tap1: detached [ 275.6032441] tap3: detached [ 276.0632353] tap4: detached [ 276.2032348] tap0: detached [ 276.9032371] tap2: detached [ 278.8932435] tap1: detached [ 279.0632448] sockaddr_getsize_by_family: (syz-executor.4:3281:5725) Unhandled address family=0 [ 279.6032533] tap5: detached [ 282.3932563] sockaddr_getsize_by_family: (syz-executor.0:3422:6615) Unhandled address family=0 [ 285.8232618] tap3: detached [ 286.3032665] tap2: detached [ 286.4732633] tap1: detached [ 289.2032661] tap4: detached [ 291.4732728] tap0: detached [ 292.2432833] tap5: detached [ 293.4232990] tap1: detached [ 295.5332864] tap3: detached [ 296.0132903] tap4: detached [ 300.5832990] tap2: detached [ 303.0433433] tap5: detached [ 303.6933063] tap4: detached [ 304.0933117] tap3: detached [ 304.8633120] tap1: detached [ 305.9333154] sockaddr_getsize_by_family: (syz-executor.5:4020:2944) Unhandled address family=0 [ 308.1233338] tap2: detached [ 313.0733312] tap0: detached [ 313.1733293] tap4: detached [ 313.2433302] tap3: detached [ 313.5433562] tap1: detached [ 317.5333378] tap2: detached [ 321.2133519] tap1: detached [ 321.9133548] tap0: detached [ 322.6733595] tap4: detached [ 323.0333594] tap3: detached [ 325.0933630] sockaddr_getsize_by_family: (syz-executor.3:4014:3207) Unhandled address family=0 [ 325.9333654] tap2: detached [ 330.6633983] tap3: detached [ 331.5933785] tap4: detached [ 332.6633941] tap1: detached [ 332.8033838] tap0: detached [ 335.6134267] tap2: detached [ 337.4034048] tap3: detached [ 338.p9133979] panic: map_get_physpage: out of memory [ 338.9133979] cpu1: Begin traceback... [ 338.9433843] vpanic() at netbsd:vpanic+0xc9d [ 339.0033827] panic() at netbsd:panic+0x1b3 [ 339.0533842] pmap_get_physpage() at netbsd:pmap_get_physpage+0x5a6 [ 339.1133854] kmsan_md_shadow_map_page() at netbsd:kmsan_md_shadow_map_page+0x209 [ 339.1833882] kmsan_shadow_map() at netbsd:kmsan_shadow_map+0xa8 [ 339.2333857] pmap_growkernel() at netbsd:pmap_growkernel+0x59a [ 339.2933951] uvm_map_prepare() at netbsd:uvm_map_prepare+0x2033 [ 339.3533882] uvm_map() at netbsd:uvm_map+0x5f6 [ 339.4234027] kcov_allocbuf() at netbsd:kcov_allocbuf+0x2bf [ 339.4833864] kcov_fops_ioctl() at netbsd:kcov_fops_ioctl+0x1cf [ 339.5433899] sys_ioctl() at netbsd:sys_ioctl+0xd84 [ 339.6133899] syscall() at netbsd:syscall+0x576 [ 339.6333887] --- syscall (number 54) --- [ 339.6533888] netbsd:syscall+0x576: [ 339.6533888] cpu1: End traceback... [ 339.6533888] fatal breakpoint trap in supervisor mode [ 339.6633921] trap type 1 code 0 rip 0xffffffff8023687d cs 0x8 rflags 0x282 cr2 0x7cbf6dd1e700 ilevel 0x6 rsp 0xffffb900c7f50490 [ 339.6733918] curlwp 0xffffb900142249c0 pid 3320.3320 lowest kstack 0xffffb900c7f492c0 Stopped in pid 3320.3320 (syz-executor.5) at netbsd:breakpoint+0x5: leave ? breakpoint() at netbsd:breakpoint+0x5 vpanic() at netbsd:vpanic+0xc9d panic() at netbsd:panic+0x1b3 pmap_get_physpage() at netbsd:pmap_get_physpage+0x5a6 kmsan_md_shadow_map_page() at netbsd:kmsan_md_shadow_map_page+0x209 kmsan_shadow_map() at netbsd:kmsan_shadow_map+0xa8 pmap_growkernel() at netbsd:pmap_growkernel+0x59a uvm_map_prepare() at netbsd:uvm_map_prepare+0x2033 uvm_map() at netbsd:uvm_map+0x5f6 kcov_allocbuf() at netbsd:kcov_allocbuf+0x2bf kcov_fops_ioctl() at netbsd:kcov_fops_ioctl+0x1cf sys_ioctl() at netbsd:sys_ioctl+0xd84 syscall() at netbsd:syscall+0x576 --- syscall (number 54) --- netbsd:syscall+0x576: Panic string: pmap_get_physpage: out of memory PID LID S CPU FLAGS STRUCT LWP * NAME WAIT 4684 4684 2 0 0 ffffb90013d7f4c0 syz-executor.4 5946 5946 2 0 0 ffffb900138db280 syz-executor.0 4305 4305 2 0 10000000 ffffb9001369a8c0 syz-executor.1 3320 > 3320 7 1 0 ffffb900142249c0 syz-executor.5 6704 6704 2 1 1000000 ffffb90013f61540 syz-executor.3 5979 5979 2 1 0 ffffb90013f61100 syz-executor.2 5712 5712 2 1 140 ffffb90013788640 syz-executor.0 5564 5564 2 1 140 ffffb90013f61980 syz-executor.4 5334 5334 2 1 140 ffffb900138ecb40 syz-executor.1 3890 3890 3 1 180 ffffb90013a0fb80 syz-executor.5 parked 6855 6855 3 1 180 ffffb90013a0f740 syz-executor.5 parked 6328 2884 2 1 1000040 ffffb90013d7f900 syz-executor.5 6328 3839 3 1 1100000 ffffb900138ec700 syz-executor.5 vfork 6328 2799 3 1 1100000 ffffb90013788a80 syz-executor.5 vfork 5975 5975 3 1 180 ffffb90013d7f080 syz-executor.1 parked 5586 5586 3 1 180 ffffb900137fb680 syz-executor.1 parked 2245 2245 3 1 180 ffffb90013d83500 syz-executor.0 parked 1683 1683 3 0 180 ffffb90013d830c0 syz-executor.0 parked 2733 2733 3 0 180 ffffb90013a0f300 syz-executor.3 parked 4911 1679 3 0 5100000 ffffb900134e1180 syz-executor.3 vfork 4911 4911 2 1 11000040 ffffb900138dbb00 syz-executor.3 1157 1157 2 1 0 ffffb9001365d600 arp 2999 2999 3 0 180 ffffb900134e1a00 syz-executor.1 parked 2793 2763 3 0 1000000 ffffb9001365d1c0 syz-executor.1 lwpwait 2793 2620 8 1 11a0000 ffffb90013788200 syz-executor.1 2793 2746 3 0 111a0000 ffffb900134e15c0 syz-executor.1 vfork 2793 2793 8 1 111a0000 ffffb900134c89c0 syz-executor.1 2614 2614 3 0 180 ffffb900138db6c0 syz-executor.4 parked 1193 2908 3 1 180 ffffb9001365da40 syz-fuzzer parked 1193 1246 3 0 180 ffffb900134c3980 syz-fuzzer parked 1193 1202 3 1 180 ffffb900134c3100 syz-fuzzer parked 1193 814 2 1 0 ffffb90012c28940 syz-fuzzer 1193 929 3 0 180 ffffb900134c8580 syz-fuzzer wait 1193 1376 3 0 180 ffffb900134c8140 syz-fuzzer wait 1193 991 3 1 180 ffffb900134c3540 syz-fuzzer wait 1193 1076 3 0 180 ffffb90012c28500 syz-fuzzer wait 1193 830 3 0 180 ffffb90012c280c0 syz-fuzzer parked 1193 930 3 0 180 ffffb90012c0e900 syz-fuzzer wait 1193 449 3 0 180 ffffb90012c0e4c0 syz-fuzzer parked 1193 1131 3 1 180 ffffb90012c0e080 syz-fuzzer wait 1193 1235 2 0 140 ffffb90012526300 syz-fuzzer 1193 1193 3 0 180 ffffb9001233d2c0 syz-fuzzer parked 1069 1069 3 0 180 ffffb900123106c0 sshd select 1230 1230 3 0 180 ffffb90012310b00 getty nanoslp 1226 1226 3 1 180 ffffb90012310280 getty nanoslp 1225 1225 3 0 180 ffffb90012275ac0 getty nanoslp 1222 1222 3 0 180 ffffb900121d7200 getty ttyraw 1105 1105 3 0 180 ffffb90012b728c0 sshd select 955 955 3 0 180 ffffb90012554bc0 powerd kqueue 811 811 3 1 180 ffffb90012b72480 syslogd kqueue 742 742 3 1 180 ffffb90012b72040 dhcpcd poll 561 561 3 0 180 ffffb90012526b80 dhcpcd poll 744 744 2 1 0 ffffb90012554780 dhcpcd 600 600 3 0 180 ffffb9001233d700 dhcpcd poll 487 487 3 0 180 ffffb90012554340 dhcpcd poll 292 292 3 0 180 ffffb9001233db40 dhcpcd poll 485 485 2 1 0 ffffb90012526740 dhcpcd 1 1 3 1 180 ffffb90011e53100 init wait 0 3874 3 1 200 ffffb9001369a480 ktrace ktrwait 0 6201 3 1 200 ffffb900138ec2c0 ktrace ktrwait 0 4694 3 0 200 ffffb9001369a040 ktrace ktrwait 0 2179 3 0 200 ffffb900137fb240 poolthread pooljob 0 1004 3 1 200 ffffb900121d7640 physiod physiod 0 196 3 1 200 ffffb90012275680 pooldrain pooldrain 0 195 2 0 240 ffffb90012275240 ioflush 0 > 194 7 0 200 ffffb900121d7a80 pgdaemon 0 167 3 1 200 ffffb900121a7a40 usb7 usbevt 0 172 3 1 200 ffffb900121a7600 usb6 usbevt 0 170 3 0 200 ffffb900121a71c0 usb5 usbevt 0 168 3 0 200 ffffb9001211ba00 usb4 usbevt 0 166 3 1 200 ffffb9001211b5c0 usb3 usbevt 0 165 3 1 200 ffffb9001211b180 usb2 usbevt 0 31 3 1 200 ffffb9001206b9c0 usb1 usbevt 0 63 3 0 200 ffffb9001206b580 usb0 usbevt 0 126 3 1 200 ffffb9001206b140 usbtask-dr usbtsk 0 125 3 1 200 ffffb90011e53980 usbtask-hc usbtsk 0 124 3 0 200 ffffb900103d3b00 swwreboot swwreboot 0 123 3 0 200 ffffb90011e53540 npfgc0 npfgcw 0 122 3 1 200 ffffb90011e48940 rt_free rt_free 0 121 3 1 200 ffffb90011e48500 unpgc unpgc 0 120 2 0 200 ffffb90011e480c0 key_timehandler 0 119 3 1 200 ffffb90011e41900 icmp6_wqinput/1 icmp6_wqinput 0 118 3 0 200 ffffb90011e414c0 icmp6_wqinput/0 icmp6_wqinput 0 117 3 0 200 ffffb90011e41080 nd6_timer nd6_timer 0 116 3 1 200 ffffb90011cccbc0 carp6_wqinput/1 carp6_wqinput 0 115 3 0 200 ffffb90011ccc780 carp6_wqinput/0 carp6_wqinput 0 114 3 1 200 ffffb90011ccc340 carp_wqinput/1 carp_wqinput 0 113 3 0 200 ffffb90011ccd8c0 carp_wqinput/0 carp_wqinput 0 112 3 1 200 ffffb90011ccd480 icmp_wqinput/1 icmp_wqinput 0 111 3 0 200 ffffb90011cc9b80 icmp_wqinput/0 icmp_wqinput 0 110 3 0 200 ffffb90011cc9740 rt_timer rt_timer 0 109 3 0 200 ffffb90011ccd040 vmem_rehash vmem_rehash 0 100 3 0 200 ffffb90011cc9300 entbutler entropy 0 99 3 1 200 ffffb900117c0b40 viomb balloon 0 98 3 1 200 ffffb900117c0700 vioif0_txrx/1 vioif0_txrx 0 97 3 0 200 ffffb900117c02c0 vioif0_txrx/0 vioif0_txrx 0 30 3 0 200 ffffb900103d36c0 scsibus0 sccomp 0 29 3 0 200 ffffb900103d3280 pms0 pmsreset 0 28 3 1 200 ffffb900103baac0 xcall/1 xcall 0 27 1 1 200 ffffb900103ba680 softser/1 0 26 1 1 200 ffffb900103ba240 softclk/1 0 25 1 1 200 ffffb900103b7a80 softbio/1 0 24 1 1 200 ffffb900103b7640 softnet/1 0 23 1 1 201 ffffb900103b7200 idle/1 0 22 3 0 200 ffffb9000f1d2a40 lnxsyswq lnxsyswq 0 21 3 0 200 ffffb9000f1d2600 lnxubdwq lnxubdwq 0 20 3 0 200 ffffb9000f1d21c0 lnxpwrwq lnxpwrwq 0 19 3 0 200 ffffb9000f1d1a00 lnxlngwq lnxlngwq 0 18 3 0 200 ffffb9000f1d15c0 lnxhipwq lnxhipwq 0 17 3 0 200 ffffb9000f1d1180 lnxrcugc lnxrcugc 0 16 3 0 200 ffffb9000f1ca9c0 sysmon smtaskq 0 15 3 0 200 ffffb9000f1ca580 pmfsuspend pmfsuspend 0 14 3 0 200 ffffb9000f1ca140 pmfevent pmfevent 0 13 3 0 200 ffffb9000f1c8980 sopendfree sopendfr 0 12 3 0 200 ffffb9000f1c8540 ifwdog ifwdog 0 11 3 0 200 ffffb9000f1c8100 iflnkst iflnkst 0 10 3 0 200 ffffb9000f1be940 nfssilly nfssilly 0 9 3 1 200 ffffb9000f1be500 pooldisp pooldisp 0 8 3 1 200 ffffb9000f1be0c0 modunload mod_unld 0 7 3 0 200 ffffb9000ebc9900 xcall/0 xcall 0 6 1 0 200 ffffb9000ebc94c0 softser/0 0 5 1 0 200 ffffb9000ebc9080 softclk/0 0 4 1 0 200 ffffb9000ebc88c0 softbio/0 0 3 1 0 200 ffffb9000ebc8480 softnet/0 0 2 1 0 201 ffffb9000ebc8040 idle/0 0 0 2 0 240 ffffffff86a6f9c0 swapper [Locks tracked through LWPs] ****** LWP 4684.4684 (syz-executor.4) @ 0xffffb90013d7f4c0, l_stat=2 *** Locks held: * Lock 0 (initialized at netbsd:amap_ctor+0xdf) lock address : ffffb90013c42b80 type : sleep/adaptive initialized : netbsd:amap_ctor+0xdf shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 0 relevant cpu : 0 last held: 0 relevant lwp : 0xffffb90013d7f4c0 last held: 0xffffb90013d7f4c0 last locked* : netbsd:uvm_fault_internal+0x1d08 unlocked : netbsd:uvm_fault_upper_enter+0x12e9 owner/count : 0xffffb90013d7f4c0 flags : 0x0000000000000004 Turnstile: no active turnstile for this lock. *** Locks wanted: * Lock 0 (initialized at netbsd:pmap_ctor+0xc0) lock address : ffffb900137fd8c0 type : sleep/adaptive initialized : netbsd:pmap_ctor+0xc0 shared holds : 0 exclusive: 0 shares wanted: 0 exclusive: 1 relevant cpu : 0 last held: 0 relevant lwp : 0xffffb90013d7f4c0 last held: 000000000000000000 last locked : netbsd:pmap_enter_ma+0x11ce unlocked* : netbsd:pmap_enter_ma+0x6f3f owner field : 0xffffb90013d7f4c0 wait/spin: 0/0 Turnstile: no active turnstile for this lock. ****** LWP 5946.5946 (syz-executor.0) @ 0xffffb900138db280, l_stat=2 *** Locks held: * Lock 0 (initialized at netbsd:lwp_ctl_alloc+0x3b7) lock address : ffffb90013dd88c0 type : sleep/adaptive initialized : netbsd:lwp_ctl_alloc+0x3b7 shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 0 relevant cpu : 0 last held: 0 relevant lwp : 0xffffb900138db280 last held: 0xffffb900138db280 last locked* : netbsd:lwp_ctl_alloc+0x559 unlocked : 0 owner field : 0xffffb900138db280 wait/spin: 0/0 Turnstile: no active turnstile for this lock. *** Locks wanted: * Lock 0 (initialized at netbsd:uvm_km_bootstrap+0x2af) lock address : netbsd:kernel_map_store+0x18 type : sleep/adaptive initialized : netbsd:uvm_km_bootstrap+0x2af shared holds : 0 exclusive: 0 shares wanted: 0 exclusive: 1 relevant cpu : 0 last held: 0 relevant lwp : 0xffffb900138db280 last held: 000000000000000000 last locked : netbsd:vm_map_lock+0x18b unlocked* : netbsd:vm_map_lock+0x1eb owner field : 000000000000000000 wait/spin: 0/0 Turnstile: no active turnstile for this lock. ****** LWP 4305.4305 (syz-executor.1) @ 0xffffb9001369a8c0, l_stat=2 *** Locks held: * Lock 0 (initialized at netbsd:fork1+0x972) lock address : ffffb90012c1c490 type : sleep/adaptive initialized : netbsd:fork1+0x972 shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 0 relevant cpu : 0 last held: 0 relevant lwp : 0xffffb9001369a8c0 last held: 0xffffb9001369a8c0 last locked* : netbsd:exit1+0xac2 unlocked : 0 owner/count : 0xffffb9001369a8c0 flags : 0x0000000000000004 Turnstile: no active turnstile for this lock. * Lock 1 (initialized at netbsd:pmap_ctor+0xc0) lock address : ffffb900137fdfc0 type : sleep/adaptive initialized : netbsd:pmap_ctor+0xc0 shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 0 relevant cpu : 0 last held: 0 relevant lwp : 0xffffb9001369a8c0 last held: 0xffffb9001369a8c0 last locked* : netbsd:pmap_update+0x142 unlocked : netbsd:pmap_remove_all+0x3216 owner field : 0xffffb9001369a8c0 wait/spin: 0/0 Turnstile: no active turnstile for this lock. *** Locks wanted: * Lock 0 (initialized at netbsd:pmap_ctor+0xd6) lock address : ffffb900137fdfc8 type : sleep/adaptive initialized : netbsd:pmap_ctor+0xd6 shared holds : 0 exclusive: 0 shares wanted: 0 exclusive: 1 relevant cpu : 0 last held: 0 relevant lwp : 0xffffb9001369a8c0 last held: 000000000000000000 last locked : netbsd:pmap_find_ptp+0x412 unlocked* : netbsd:pmap_find_ptp+0x487 owner/count : 000000000000000000 flags : 000000000000000000 Turnstile: no active turnstile for this lock. ****** LWP 3320.3320 (syz-executor.5) @ 0xffffb900142249c0, l_stat=7 *** Locks held: * Lock 0 (initialized at netbsd:kcov_open+0x10d) lock address : ffffb900140e6c40 type : sleep/adaptive initialized : netbsd:kcov_open+0x10d shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 0 relevant cpu : 1 last held: 1 relevant lwp : 0xffffb900142249c0 last held: 0xffffb900142249c0 last locked* : netbsd:kcov_fops_ioctl+0xa0 unlocked : 0 owner field : 0xffffb900142249c0 wait/spin: 0/0 Turnstile: no active turnstile for this lock. * Lock 1 (initialized at netbsd:uvm_map_setup+0x2a0) lock address : netbsd:kernel_map_store+0x8 type : sleep/adaptive initialized : netbsd:uvm_map_setup+0x2a0 shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 0 relevant cpu : 1 last held: 1 relevant lwp : 0xffffb900142249c0 last held: 0xffffb900142249c0 last locked* : netbsd:uvm_map_prepare+0xd7f unlocked : netbsd:uvm_unmap1+0x40d owner/count : 0xffffb900142249c0 flags : 0x0000000000000004 Turnstile: no active turnstile for this lock. * Lock 2 (initialized at netbsd:pmap_bootstrap+0x20c) lock address : netbsd:kernel_pmap_store+0x180 type : sleep/adaptive initialized : netbsd:pmap_bootstrap+0x20c shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 1 relevant cpu : 1 last held: 1 relevant lwp : 0xffffb900142249c0 last held: 0xffffb900142249c0 last locked* : netbsd:pmap_growkernel+0x98 unlocked : netbsd:uvm_unmap_remove+0x1a21 owner field : 0xffffb900142249c0 wait/spin: 0/0 Turnstile: no active turnstile for this lock. *** Locks wanted: none ****** LWP 6704.6704 (syz-executor.3) @ 0xffffb90013f61540, l_stat=2 *** Locks held: none *** Locks wanted: * Lock 0 (initialized at netbsd:xc_init_cpu+0xd7) lock address : netbsd:xc_low_pri type : sleep/adaptive initialized : netbsd:xc_init_cpu+0xd7 shared holds : 0 exclusive: 0 shares wanted: 0 exclusive: 1 relevant cpu : 1 last held: 0 relevant lwp : 0xffffb90013f61540 last held: 000000000000000000 last locked : netbsd:xc_wait+0x35d unlocked* : netbsd:pool_cache_put_paddr+0x55d owner field : 000000000000000000 wait/spin: 0/0 Turnstile: no active turnstile for this lock. ****** LWP 5979.5979 (syz-executor.2) @ 0xffffb90013f61100, l_stat=2 *** Locks held: * Lock 0 (initialized at netbsd:fork1+0x972) lock address : ffffb900137ffed0 type : sleep/adaptive initialized : netbsd:fork1+0x972 shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 0 relevant cpu : 1 last held: 1 relevant lwp : 0xffffb90013f61100 last held: 0xffffb90013f61100 last locked* : netbsd:exit1+0xac2 unlocked : netbsd:execve_runproc+0x65d0 owner/count : 0xffffb90013f61100 flags : 0x0000000000000004 Turnstile: no active turnstile for this lock. *** Locks wanted: * Lock 0 (initialized at netbsd:uvm_obj_init+0x88) lock address : ffffb90013e31a80 type : sleep/adaptive initialized : netbsd:uvm_obj_init+0x88 shared holds : 0 exclusive: 0 shares wanted: 0 exclusive: 1 relevant cpu : 1 last held: 65535 relevant lwp : 0xffffb90013f61100 last held: 000000000000000000 last locked : netbsd:uvm_unmap_remove+0x196b unlocked* : netbsd:uvm_unmap_remove+0x1c22 owner/count : 0xffffb90013f61100 flags : 0x0000000000000004 Turnstile: no active turnstile for this lock. ****** LWP 2793.2620 (syz-executor.1) @ 0xffffb90013788200, l_stat=8 *** Locks held: none *** Locks wanted: * Lock 0 (initialized at netbsd:module_hook_init+0x43) lock address : netbsd:module_hook type : sleep/adaptive initialized : netbsd:module_hook_init+0x43 shared holds : 0 exclusive: 0 shares wanted: 0 exclusive: 0 relevant cpu : 1 last held: 0 relevant lwp : 0xffffb90013788200 last held: 000000000000000000 last locked : 0 unlocked* : 0 owner field : 000000000000000000 wait/spin: 0/0 Turnstile: no active turnstile for this lock. ****** LWP 561.561 (dhcpcd) @ 0xffffb90012526b80, l_stat=3 *** Locks held: none *** Locks wanted: * Lock 0 (initialized at netbsd:module_hook_init+0x43) lock address : netbsd:module_hook type : sleep/adaptive initialized : netbsd:module_hook_init+0x43 shared holds : 0 exclusive: 0 shares wanted: 0 exclusive: 0 relevant cpu : 0 last held: 0 relevant lwp : 0xffffb90012526b80 last held: 000000000000000000 last locked : 0 unlocked* : 0 owner field : 000000000000000000 wait/spin: 0/0 Turnstile: no active turnstile for this lock. ****** LWP 744.744 (dhcpcd) @ 0xffffb90012554780, l_stat=2 *** Locks held: none *** Locks wanted: * Lock 0 (initialized at netbsd:module_hook_init+0x43) lock address : netbsd:module_hook type : sleep/adaptive initialized : netbsd:module_hook_init+0x43 shared holds : 0 exclusive: 0 shares wanted: 0 exclusive: 0 relevant cpu : 1 last held: 0 relevant lwp : 0xffffb90012554780 last held: 000000000000000000 last locked : 0 unlocked* : 0 owner field : 000000000000000000 wait/spin: 0/0 Turnstile: no active turnstile for this lock. ****** LWP 292.292 (dhcpcd) @ 0xffffb9001233db40, l_stat=3 *** Locks held: none *** Locks wanted: * Lock 0 (initialized at netbsd:module_hook_init+0x43) lock address : netbsd:module_hook type : sleep/adaptive initialized : netbsd:module_hook_init+0x43 shared holds : 0 exclusive: 0 shares wanted: 0 exclusive: 0 relevant cpu : 0 last held: 0 relevant lwp : 0xffffb9001233db40 last held: 000000000000000000 last locked : 0 unlocked* : 0 owner field : 000000000000000000 wait/spin: 0/0 Turnstile: no active turnstile for this lock. ****** LWP 485.485 (dhcpcd) @ 0xffffb90012526740, l_stat=2 *** Locks held: none *** Locks wanted: * Lock 0 (initialized at netbsd:module_hook_init+0x43) lock address : netbsd:module_hook type : sleep/adaptive initialized : netbsd:module_hook_init+0x43 shared holds : 0 exclusive: 0 shares wanted: 0 exclusive: 0 relevant cpu : 1 last held: 0 relevant lwp : 0xffffb90012526740 last held: 000000000000000000 last locked : 0 unlocked* : 0 owner field : 000000000000000000 wait/spin: 0/0 Turnstile: no active turnstile for this lock. ****** LWP 0.194 (pgdaemon) @ 0xffffb900121d7a80, l_stat=7 *** Locks held: * Lock 0 (initialized at netbsd:uvm_obj_init+0x88) lock address : ffffb9001228f100 type : sleep/adaptive initialized : netbsd:uvm_obj_init+0x88 shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 0 relevant cpu : 0 last held: 0 relevant lwp : 0xffffb900121d7a80 last held: 0xffffb900121d7a80 last locked* : netbsd:uvmpd_trylockowner+0x12c unlocked : netbsd:uvmpdpol_balancequeue+0x1031 owner/count : 0xffffb900121d7a80 flags : 0x0000000000000004 Turnstile: no active turnstile for this lock. *** Locks wanted: * Lock 0 (initialized at netbsd:pmap_bootstrap+0x20c) lock address : netbsd:kernel_pmap_store+0x180 type : sleep/adaptive initialized : netbsd:pmap_bootstrap+0x20c shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 1 relevant cpu : 0 last held: 1 relevant lwp : 0xffffb900121d7a80 last held: 0xffffb900142249c0 last locked* : netbsd:pmap_growkernel+0x98 unlocked : netbsd:uvm_unmap_remove+0x1a21 owner field : 0xffffb900142249c0 wait/spin: 0/0 Turnstile: no active turnstile for this lock. ****** LWP 0.26 (softclk/1) @ 0xffffb900103ba240, l_stat=1 *** Locks held: none *** Locks wanted: * Lock 0 (initialized at netbsd:module_hook_init+0x43) lock address : netbsd:module_hook type : sleep/adaptive initialized : netbsd:module_hook_init+0x43 shared holds : 0 exclusive: 0 shares wanted: 0 exclusive: 0 relevant cpu : 1 last held: 0 relevant lwp : 0xffffb900103ba240 last held: 000000000000000000 last locked : 0 unlocked* : 0 owner field : 000000000000000000 wait/spin: 0/0 Turnstile: no active turnstile for this lock. ****** LWP 0.11 (iflnkst) @ 0xffffb9000f1c8100, l_stat=3 *** Locks held: none *** Locks wanted: * Lock 0 (initialized at netbsd:module_hook_init+0x43) lock address : netbsd:module_hook type : sleep/adaptive initialized : netbsd:module_hook_init+0x43 shared holds : 0 exclusive: 0 shares wanted: 0 exclusive: 0 relevant cpu : 0 last held: 0 relevant lwp : 0xffffb9000f1c8100 last held: 000000000000000000 last locked : 0 unlocked* : 0 owner field : 000000000000000000 wait/spin: 0/0 Turnstile: no active turnstile for this lock. ****** LWP 0.5 (softclk/0) @ 0xffffb9000ebc9080, l_stat=1 *** Locks held: none *** Locks wanted: * Lock 0 (initialized at netbsd:module_hook_init+0x43) lock address : netbsd:module_hook type : sleep/adaptive initialized : netbsd:module_hook_init+0x43 shared holds : 0 exclusive: 0 shares wanted: 0 exclusive: 0 relevant cpu : 0 last held: 0 relevant lwp : 0xffffb9000ebc9080 last held: 000000000000000000 last locked : 0 unlocked* : 0 owner field : 000000000000000000 wait/spin: 0/0 Turnstile: no active turnstile for this lock. ****** LWP 0.0 (swapper) @ 0xffffffff86a6f9c0, l_stat=2 *** Locks held: none *** Locks wanted: * Lock 0 (initialized at netbsd:module_hook_init+0x43) lock address : netbsd:module_hook type : sleep/adaptive initialized : netbsd:module_hook_init+0x43 shared holds : 0 exclusive: 0 shares wanted: 0 exclusive: 0 relevant cpu : 0 last held: 0 relevant lwp : 0xffffffff86a6f9c0 last held: 000000000000000000 last locked : 0 unlocked* : 0 owner field : 000000000000000000 wait/spin: 0/0 Turnstile: no active turnstile for this lock. [Locks tracked through CPUs] ******* Locks held on cpu0: * Lock 0 (initialized at netbsd:com_attach_subr+0x20f) lock address : ffffb900103b6f60 type : spin initialized : netbsd:com_attach_subr+0x20f shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 0 relevant cpu : 0 last held: 0 relevant lwp : 0xffffb900121d7a80 last held: 0xffffb900121d7a80 last locked* : netbsd:comintr+0x108 unlocked : netbsd:comintr+0x169e owner field : 0x0000000000000800 wait/spin: 0/1 ******* Locks held on cpu1: * Lock 0 (initialized at netbsd:kprintf_init+0xcb) lock address : netbsd:kprintf_mtx type : spin initialized : netbsd:kprintf_init+0xcb shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 0 relevant cpu : 1 last held: 1 relevant lwp : 0xffffb900142249c0 last held: 0xffffb900142249c0 last locked* : netbsd:vpanic+0x624 unlocked : netbsd:log+0x618 owner field : 0x0000000000000800 wait/spin: 0/1 PAGE FLAG PQ UOBJECT UANON 0xffffb90000017180 0001 00000000 0x0 0x0 0xffffb90000017200 0041 00000000 0x0 0x0 0xffffb90000017280 0041 00000000 0x0 0x0 0xffffb90000017300 0041 00000000 0x0 0x0 0xffffb90000017380 0041 00000000 0x0 0x0 0xffffb90000017400 0041 00000000 0x0 0x0 0xffffb90000017480 0041 00000000 0x0 0x0 0xffffb90000017500 0041 00000000 0x0 0x0 0xffffb90000017580 0041 00000000 0x0 0x0 0xffffb90000017600 0041 00000000 0x0 0x0 0xffffb90000017680 0041 00000000 0x0 0x0 0xffffb90000017700 0041 00000000 0x0 0x0 0xffffb90000017780 0041 00000000 0x0 0x0 0xffffb90000017800 0041 00000000 0x0 0x0 0xffffb90000017880 0041 00000000 0x0 0x0 0xffffb90000017900 0041 00000000 0x0 0x0 0xffffb90000017980 0041 00000000 0x0 0x0 0xffffb90000017a00 0041 00000000 0x0 0x0 0xffffb90000017a80 0041 00000000 0x0 0x0 0xffffb90000017b00 0041 00000000 0x0 0x0 0xffffb90000017b80 0041 00000000 0x0 0x0 0xffffb90000017c00 0041 00000000 0x0 0x0 0xffffb90000017c80 0041 00000000 0x0 0x0 0xffffb90000017d00 0041 00000000 0x0 0x0 0xffffb90000017d80 0041 00000000 0x0 0x0 0xffffb90000017e00 0041 00000000 0x0 0x0 0xffffb90000017e80 0041 00000000 0x0 0x0 0xffffb90000017f00 0041 00000000 0x0 0x0 0xffffb90000017f80 0041 00000000 0x0 0x0 0xffffb90000018000 0041 00000000 0x0 0x0 0xffffb90000018080 0041 00000000 0x0 0x0 0xffffb90000018100 0041 00000000 0x0 0x0 0xffffb90000018180 0041 00000000 0x0 0x0 0xffffb90000018200 0041 00000000 0x0 0x0 0xffffb90000018280 0041 00000000 0x0 0x0 0xffffb90000018300 0041 00000000 0x0 0x0 0xffffb90000018380 0041 00000000 0x0 0x0 0xffffb90000018400 0041 00000000 0x0 0x0 0xffffb90000018480 0041 00000000 0x0 0x0 0xffffb90000018500 0041 00000000 0x0 0x0 0xffffb90000018580 0041 00000000 0x0 0x0 0xffffb90000018600 0041 00000000 0x0 0x0 0xffffb90000018680 0041 00000000 0x0 0x0 0xffffb90000018700 0041 00000000 0x0 0x0 0xffffb90000018780 0041 00000000 0x0 0x0 0xffffb90000018800 0041 00000000 0x0 0x0 0xffffb90000018880 0041 00000000 0x0 0x0 0xffffb90000018900 0041 00000000 0x0 0x0 0xffffb90000018980 0041 00000000 0x0 0x0 0xffffb90000018a00 0041 00000000 0x0 0x0 0xffffb90000018a80 0041 00000000 0x0 0x0 0xffffb90000018b00 0041 00000000 0x0 0x0 0xffffb90000018b80 0041 00000000 0x0 0x0 0xffffb90000018c00 0041 00000000 0x0 0x0 0xffffb90000018c80 0041 00000000 0x0 0x0 0xffffb90000018d00 0041 00000000 0x0 0x0 0xffffb90000018d80 0041 00000000 0x0 0x0 0xffffb90000018e00 0041 00000000 0x0 0x0 0xffffb90000018e80 0041 00000000 0x0 0x0 0xffffb90000018f00 0041 00000000 0x0 0x0 0xffffb90000018f80 0041 00000000 0x0 0x0 0xffffb90000019000 0041 00000000 0x0 0x0 0xffffb90000019080 0041 00000000 0x0 0x0 0xffffb90000019100 0041 00000000 0x0 0x0 0xffffb90000019180 0041 00000000 0x0 0x0 0xffffb90000019200 0041 00000000 0x0 0x0 0xffffb90000019280 0041 00000000 0x0 0x0 0xffffb90000019300 0041 00000000 0x0 0x0 0xffffb90000019380 0041 00000000 0x0 0x0 0xffffb90000019400 0041 00000000 0x0 0x0 0xffffb90000019480 0041 00000000 0x0 0x0 0xffffb90000019500 0041 00000000 0x0 0x0 0xffffb90000019580 0041 00000000 0x0 0x0 0xffffb90000019600 0041 00000000 0x0 0x0 0xffffb90000019680 0041 00000000 0x0 0x0 0xffffb90000019700 0041 00000000 0x0 0x0 0xffffb90000019780 0041 00000000 0x0 0x0 0xffffb90000019800 0041 00000000 0x0 0x0 0xffffb90000019880 0041 00000000 0x0 0x0 0xffffb90000019900 0041 00000000 0x0 0x0 0xffffb90000019980 0041 00000000 0x0 0x0 0xffffb90000019a00 0041 00000000 0x0 0x0 0xffffb90000019a80 0041 00000000 0x0 0x0 0xffffb90000019b00 0041 00000000 0x0 0x0 0xffffb90000019b80 0041 00000000 0x0 0x0 0xffffb90000019c00 0041 00000000 0x0 0x0 0xffffb90000019c80 0041 00000000 0x0 0x0 0xffffb90000019d00 0041 00000000 0x0 0x0 0xffffb90000019d80 0041 00000000 0x0 0x0 0xffffb90000019e00 0041 00000000 0x0 0x0 0xffffb90000019e80 0041 00000000 0x0 0x0 0xffffb90000019f00 0041 00000000 0x0 0x0 0xffffb90000019f80 0041 00000000 0x0 0x0 0xffffb9000001a000 0041 00000000 0x0 0x0 0xffffb9000001a080 0041 00000000 0x0 0x0 0xffffb9000001a100 0041 00000000 0x0 0x0 0xffffb9000001a180 0041 00000000 0x0 0x0 0xffffb9000001a200 0041 00000000 0x0 0x0 0xffffb9000001a280 0041 00000000 0x0 0x0 0xffffb9000001a300 0041 00000000 0x0 0x0 0xffffb9000001a380 0041 00000000 0x0 0x0 0xffffb9000001a400 0041 00000000 0x0 0x0 0xffffb9000001a480 0041 00000000 0x0 0x0 0xffffb9000001a500 0041 00000000 0x0 0x0 0xffffb9000001a580 0041 00000000 0x0 0x0 0xffffb9000001a600 0041 00000000 0x0 0x0 0xffffb9000001a680 0041 00000000 0x0 0x0 0xffffb9000001a700 0041 00000000 0x0 0x0 0xffffb9000001a780 0041 00000000 0x0 0x0 0xffffb9000001a800 0041 00000000 0x0 0x0 0xffffb9000001a880 0041 00000000 0x0 0x0 0xffffb9000001a900 0041 00000000 0x0 0x0 0xffffb9000001a980 0041 00000000 0x0 0x0 0xffffb9000001aa00 0041 00000000 0x0 0x0 0xffffb9000001aa80 0041 00000000 0x0 0x0 0xffffb9000001ab00 0041 00000000 0x0 0x0 0xffffb9000001ab80 0041 00000000 0x0 0x0 0xffffb9000001ac00 0041 00000000 0x0 0x0 0xffffb9000001ac80 0041 00000000 0x0 0x0 0xffffb9000001ad00 0041 00000000 0x0 0x0 0xffffb9000001ad80 0041 00000000 0x0 0x0 0xffffb9000001ae00 0041 00000000 0x0 0x0 0xffffb9000001ae80 0041 00000000 0x0 0x0 0xffffb9000001af00 0041 00000000 0x0 0x0 0xffffb9000001af80 0041 00000000 0x0 0x0 0xffffb9000001b000 0041 00000000 0x0 0x0 0xffffb9000001b080 0041 00000000 0x0 0x0 0xffffb9000001b100 0041 00000000 0x0 0x0 0xffffb9000001b180 0041 00000000 0x0 0x0 0xffffb9000001b200 0041 00000000 0x0 0x0 0xffffb9000001b280 0041 00000000 0x0 0x0 0xffffb9000001b300 0041 00000000 0x0 0x0 0xffffb9000001b380 0041 00000000 0x0 0x0 0xffffb9000001b400 0041 00000000 0x0 0x0 0xffffb9000001b480 0041 00000000 0x0 0x0 0xffffb9000001b500 0041 00000000 0x0 0x0 0xffffb9000001b580 0041 00000000 0x0 0x0 0xffffb9000001b600 0041 00000000 0x0 0x0 0xffffb9000001b680 0041 00000000 0x0 0x0 0xffffb9000001b700 0041 00000000 0x0 0x0 0xffffb9000001b780 0041 00000000 0x0 0x0 0xffffb9000001b800 0041 00000000 0x0 0x0 0xffffb9000001b880 0041 00000000 0x0 0x0 0xffffb9000001b900 0041 00000000 0x0 0x0 0xffffb9000001b980 0041 00000000 0x0 0x0 0xffffb9000001ba00 0041 00000000 0x0 0x0 0xffffb9000001ba80 0041 00000000 0x0 0x0 0xffffb9000001bb00 0041 00000000 0x0 0x0 0xffffb9000001bb80 0041 00000000 0x0 0x0 0xffffb9000001bc00 0041 00000000 0x0 0x0 0xffffb9000001bc80 0041 00000000 0x0 0x0 0xffffb9000001bd00 0041 00000000 0x0 0x0 0xffffb9000001bd80 0041 00000000 0x0 0x0 0xffffb9000001be00 0041 00000000 0x0 0x0 0xffffb9000001be80 0041 00000000 0x0 0x0 0xffffb9000001bf00 0041 00000000 0x0 0x0 0xffffb9000001bf80 0041 00000000 0x0 0x0 0xffffb9000001c000 0041 00000000 0x0 0x0 0xffffb9000001c080 0041 00000000 0x0 0x0 0xffffb9000001c100 0041 00000000 0x0 0x0 0xffffb9000001c180 0041 00000000 0x0 0x0 0xffffb9000001c200 0041 00000000 0x0 0x0 0xffffb9000001c280 0041 00000000 0x0 0x0 0xffffb9000001c300 0041 00000000 0x0 0x0 0xffffb9000001c380 0041 00000000 0x0 0x0 0xffffb9000001c400 0041 00000000 0x0 0x0 0xffffb9000001c480 0041 00000000 0x0 0x0 0xffffb9000001c500 0041 00000000 0x0 0x0 0xffffb9000001c580 0041 00000000 0x0 0x0 0xffffb9000001c600 0041 00000000 0x0 0x0 0xffffb9000001c680 0041 00000000 0x0 0x0 0xffffb9000001c700 0041 00000000 0x0 0x0 0xffffb9000001c780 0041 00000000 0x0 0x0 0xffffb9000001c800 0041 00000000 0x0 0x0 0xffffb9000001c880 0041 00000000 0x0 0x0 0xffffb9000001c900 0041 00000000 0x0 0x0 0xffffb9000001c980 0041 00000000 0x0 0x0 0xffffb9000001ca00 0041 00000000 0x0 0x0 0xffffb9000001ca80 0041 00000000 0x0 0x0 0xffffb9000001cb00 0041 00000000 0x0 0x0 0xffffb9000001cb80 0041 00000000 0x0 0x0 0xffffb9000001cc00 0041 00000000 0x0 0x0 0xffffb9000001cc80 0041 00000000 0x0 0x0 0xffffb9000001cd00 0041 00000000 0x0 0x0 0xffffb9000001cd80 0041 00000000 0x0 0x0 0xffffb9000001ce00 0041 00000000 0x0 0x0 0xffffb9000001ce80 0041 00000000 0x0 0x0 0xffffb9000001cf00 0041 00000000 0x0 0x0 0xffffb9000001cf80 0001 00000000 0x0 0x0 0xffffb9000001d000 0001 00000000 0x0 0x0 0xffffb9000001d080 0001 00000000 0x0 0x0 0xffffb9000001d100 0001 00000000 0x0 0x0 0xffffb9000001d180 0001 00000000 0x0 0x0 0xffffb9000001d200 0001 00000000 0x0 0x0 0xffffb9000001d280 0001 00000000 0x0 0x0 0xffffb9000001d300 0001 00000000 0x0 0x0 0xffffb9000001d380 0001 00000000 0x0 0x0 0xffffb9000001d400 0001 00000000 0x0 0x0 0xffffb9000001d480 0001 00000000 0x0 0x0 0xffffb9000001d500 0001 00000000 0x0 0x0 0xffffb9000001d580 0001 00000000 0x0 0x0 0xffffb9000001d600 0001 00000000 0x0 0x0 0xffffb9000001d680 0001 00000000 0x0 0x0 0xffffb9000001d700 0001 00000000 0x0 0x0 0xffffb9000001d780 0001 00000000 0x0 0x0 0xffffb9000001d800 0001 00000000 0x0 0x0 0xffffb9000001d880 0001 00000000 0x0 0x0 0xffffb9000001d900 0001 00000000 0x0 0x0 0xffffb9000001d980 0001 00000000 0x0 0x0 0xffffb9000001da00 0001 00000000 0x0 0x0 0xffffb9000001da80 0001 00000000 0x0 0x0 0xffffb9000001db00 0001 00000000 0x0 0x0 0xffffb9000001db80 0001 00000000 0x0 0x0 0xffffb9000001dc00 0001 00000000 0x0 0x0 0xffffb9000001dc80 0001 00000000 0x0 0x0 0xffffb9000001dd00 0001 00000000 0x0 0x0 0xffffb9000001dd80 0001 00000000 0x0 0x0 0xffffb9000001de00 0001 00000000 0x0 0x0 0xffffb9000001de80 0001 00000000 0x0 0x0 0xffffb9000001df00 0001 00000000 0x0 0x0 0xffffb9000001df80 0001 00000000 0x0 0x0 0xffffb9000001e000 0001 00000000 0x0 0x0 0xffffb9000001e080 0001 00000000 0x0 0x0 0xffffb9000001e100 0001 00000000 0x0 0x0 0xffffb9000001e180 0001 00000000 0x0 0x0 0xffffb9000001e200 0001 00000000 0x0 0x0 0xffffb9000001e280 0001 00000000 0x0 0x0 0xffffb9000001e300 0001 00000000 0x0 0x0 0xffffb9000001e380 0001 00000000 0x0 0x0 0xffffb9000001e400 0001 00000000 0x0 0x0 0xffffb9000001e480 0001 00000000 0x0 0x0 0xffffb9000001e500 0001 00000000 0x0 0x0 0xffffb9000001e580 0001 00000000 0x0 0x0 0xffffb9000001e600 0001 00000000 0x0 0x0 0xffffb9000001e680 0001 00000000 0x0 0x0 0xffffb9000001e700 0001 00000000 0x0 0x0 0xffffb9000001e780 0001 00000000 0x0 0x0 0xffffb9000001e800 0001 00000000 0x0 0x0 0xffffb9000001e880 0001 00000000 0x0 0x0 0xffffb9000001e900 0001 00000000 0x0 0x0 0xffffb9000001e980 0001 00000000 0x0 0x0 0xffffb9000001ea00 0001 00000000 0x0 0x0 0xffffb9000001ea80 0001 00000000 0x0 0x0 0xffffb9000001eb00 0001 00000000 0x0 0x0 0xffffb9000001eb80 0001 00000000 0x0 0x0 0xffffb9000001ec00 0001 00000000 0x0 0x0 0xffffb9000001ec80 0001 00000000 0x0 0x0 0xffffb9000001ed00 0001 00000000 0x0 0x0 0xffffb9000001ed80 0001 00000000 0x0 0x0 0xffffb9000001ee00 0001 00000000 0x0 0x0 0xffffb9000001ee80 0001 00000000 0x0 0x0 0xffffb9000001ef00 0001 00000000 0x0 0x0 0xffffb9000001ef80 0001 00000000 0x0 0x0 0xffffb9000001f000 0001 00000000 0x0 0x0 0xffffb9000001f080 0001 00000000 0x0 0x0 0xffffb9000001f100 0001 00000000 0x0 0x0 0xffffb9000001f180 0001 00000000 0x0 0x0 0xffffb9000001f200 0001 00000000 0x0 0x0 0xffffb9000001f280 0001 00000000 0x0 0x0 0xffffb9000001f300 0001 00000000 0x0 0x0 0xffffb9000001f380 0001 00000000 0x0 0x0 0xffffb9000001f400 0001 00000000 0x0 0x0 0xffffb9000001f480 0001 00000000 0x0 0x0 0xffffb9000001f500 0001 00000000 0x0 0x0 0xffffb9000001f580 0001 00000000 0x0 0x0 0xffffb9000001f600 0001 00000000 0x0 0x0 0xffffb9000001f680 0001 00000000 0x0 0x0 0xffffb9000001f700 0001 00000000 0x0 0x0 0xffffb9000001f780 0001 00000000 0x0 0x0 0xffffb9000001f800 0001 00000000 0x0 0x0 0xffffb9000001f880 0001 00000000 0x0 0x0 0xffffb9000001f900 0001 00000000 0x0 0x0 0xffffb9000001f980 0001 00000000 0x0 0x0 0xffffb9000001fa00 0001 00000000 0x0 0x0 0xffffb9000001fa80 0001 00000000 0x0 0x0 0xffffb9000001fb00 0001 00000000 0x0 0x0 0xffffb9000001fb80 0001 00000000 0x0 0x0 0xffffb9000001fc00 0001 00000000 0x0 0x0 0xffffb9000001fc80 0001 00000000 0x0 0x0 0xffffb9000001fd00 0001 00000000 0x0 0x0 0xffffb9000001fd80 0001 00000000 0x0 0x0 0xffffb9000001fe00 0001 00000000 0x0 0x0 0xffffb9000001fe80 0001 00000000 0x0 0x0 0xffffb9000001ff00 0001 00000000 0x0 0x0 0xffffb9000001ff80 0001 00000000 0x0 0x0 0xffffb90000020000 0001 00000000 0x0 0x0 0xffffb90000020080 0001 00000000 0x0 0x0 0xffffb90000020100 0001 00000000 0x0 0x0 0xffffb90000020180 0001 00000000 0x0 0x0 0xffffb90000020200 0001 00000000 0x0 0x0 0xffffb90000020280 0001 00000000 0x0 0x0 0xffffb90000020300 0001 00000000 0x0 0x0 0xffffb90000020380 0001 00000000 0x0 0x0 0xffffb90000020400 0001 00000000 0x0 0x0 0xffffb90000020480 0001 00000000 0x0 0x0 0xffffb90000020500 0001 00000000 0x0 0x0 0xffffb90000020580 0001 00000000 0x0 0x0 0xffffb90000020600 0001 00000000 0x0 0x0 0xffffb90000020680 0001 00000000 0x0 0x0 0xffffb90000020700 0001 00000000 0x0 0x0 0xffffb90000020780 0001 00000000 0x0 0x0 0xffffb90000020800 0001 00000000 0x0 0x0 0xffffb90000020880 0001 00000000 0x0 0x0 0xffffb90000020900 0001 00000000 0x0 0x0 0xffffb90000020980 0001 00000000 0x0 0x0 0xffffb90000020a00 0001 00000000 0x0 0x0 0xffffb90000020a80 0001 00000000 0x0 0x0 0xffffb90000020b00 0001 00000000 0x0 0x0 0xffffb90000020b80 0001 00000000 0x0 0x0 0xffffb90000020c00 0001 00000000 0x0 0x0 0xffffb90000020c80 0001 00000000 0x0 0x0 0xffffb90000020d00 0001 00000000 0x0 0x0 0xffffb90000020d80 0001 00000000 0x0 0x0 0xffffb90000020e00 0001 00000000 0x0 0x0 0xffffb90000020e80 0001 00000000 0x0 0x0 0xffffb90000020f00 0001 00000000 0x0 0x0 0xffffb90000020f80 0001 00000000 0x0 0x0 0xffffb90000021000 0001 00000000 0x0 0x0 0xffffb90000021080 0001 00000000 0x0 0x0 0xffffb90000021100 0001 00000000 0x0 0x0 0xffffb90000021180 0001 00000000 0x0 0x0 0xffffb90000021200 0001 00000000 0x0 0x0 0xffffb90000021280 0001 00000000 0x0 0x0 0xffffb90000021300 0001 00000000 0x0 0x0 0xffffb90000021380 0001 00000000 0x0 0x0 0xffffb90000021400 0001 00000000 0x0 0x0 0xffffb90000021480 0001 00000000 0x0 0x0 0xffffb90000021500 0001 00000000 0x0 0x0 0xffffb90000021580 0001 00000000 0x0 0x0 0xffffb90000021600 0001 00000000 0x0 0x0 0xffffb90000021680 0001 00000000 0x0 0x0 0xffffb90000021700 0001 00000000 0x0 0x0 0xffffb90000021780 0001 00000000 0x0 0x0 0xffffb90000021800 0001 00000000 0x0 0x0 0xffffb90000021880 0001 00000000 0x0 0x0 0xffffb90000021900 0001 00000000 0x0 0x0 0xffffb90000021980 0001 00000000 0x0 0x0 0xffffb90000021a00 0001 00000000 0x0 0x0 0xffffb90000021a80 0001 00000000 0x0 0x0 0xffffb90000021b00 0001 00000000 0x0 0x0 0xffffb90000021b80 0001 00000000 0x0 0x0 0xffffb90000021c00 0001 00000000 0x0 0x0 0xffffb90000021c80 0001 00000000 0x0 0x0 0xffffb90000021d00 0001 00000000 0x0 0x0 0xffffb90000021d80 0001 00000000 0x0 0x0 0xffffb90000021e00 0001 00000000 0x0 0x0 0xffffb90000021e80 0001 00000000 0x0 0x0 0xffffb90000021f00 0001 00000000 0x0 0x0 0xffffb90000021f80 0001 00000000 0x0 0x0 0xffffb90000022000 0001 00000000 0x0 0x0 0xffffb90000022080 0001 00000000 0x0 0x0 0xffffb90000022100 0001 00000000 0x0 0x0 0xffffb90000022180 0001 00000000 0x0 0x0 0xffffb90000022200 0001 00000000 0x0 0x0 0xffffb90000022280 0001 00000000 0x0 0x0 0xffffb90000022300 0001 00000000 0x0 0x0 0xffffb90000022380 0001 00000000 0x0 0x0 0xffffb90000022400 0001 00000000 0x0 0x0 0xffffb90000022480 0001 00000000 0x0 0x0 0xffffb90000022500 0001 00000000 0x0 0x0 0xffffb90000022580 0001 00000000 0x0 0x0 0xffffb90000022600 0001 00000000 0x0 0x0 0xffffb90000022680 0001 00000000 0x0 0x0 0xffffb90000022700 0001 00000000 0x0 0x0 0xffffb90000022780 0001 00000000 0x0 0x0 0xffffb90000022800 0001 00000000 0x0 0x0 0xffffb90000022880 0001 00000000 0x0 0x0 0xffffb90000022900 0001 00000000 0x0 0x0 0xffffb90000022980 0001 00000000 0x0 0x0 0xffffb90000022a00 0001 00000000 0x0 0x0 0xffffb90000022a80 0001 00000000 0x0 0x0 0xffffb90000022b00 0001 00000000 0x0 0x0 0xffffb90000022b80 0001 00000000 0x0 0x0 0xffffb90000022c00 0001 00000000 0x0 0x0 0xffffb90000022c80 0001 00000000 0x0 0x0 0xffffb90000022d00 0001 00000000 0x0 0x0 0xffffb90000022d80 0001 00000000 0x0 0x0 0xffffb90000022e00 0001 00000000 0x0 0x0 0xffffb90000022e80 0001 00000000 0x0 0x0 0xffffb90000022f00 0001 00000000 0x0 0x0 0xffffb90000022f80 0001 00000000 0x0 0x0 0xffffb90000023000 0001 00000000 0x0 0x0 0xffffb90000023080 0001 00000000 0x0 0x0 0xffffb90000023100 0001 00000000 0x0 0x0 0xffffb90000023180 0001 00000000 0x0 0x0 0xffffb90000023200 0001 00000000 0x0 0x0 0xffffb90000023280 0001 00000000 0x0 0x0 0xffffb90000023300 0001 00000000 0x0 0x0 0xffffb90000023380 0001 00000000 0x0 0x0 0xffffb90000023400 0001 00000000 0x0 0x0 0xffffb90000023480 0001 00000000 0x0 0x0 0xffffb90000023500 0001 00000000 0x0 0x0 0xffffb90000023580 0001 00000000 0x0 0x0 0xffffb90000023600 0001 00000000 0x0 0x0 0xffffb90000023680 0001 00000000 0x0 0x0 0xffffb90000023700 0001 00000000 0x0 0x0 0xffffb90000023780 0001 00000000 0x0 0x0 0xffffb90000023800 0001 00000000 0x0 0x0 0xffffb90000023880 0001 00000000 0x0 0x0 0xffffb90000023900 0001 00000000 0x0 0x0 0xffffb90000023980 0001 00000000 0x0 0x0 0xffffb90000023a00 0001 00000000 0x0 0x0 0xffffb90000023a80 0001 00000000 0x0 0x0 0xffffb90000023b00 0001 00000000 0x0 0x0 0xffffb90000023b80 0001 00000000 0x0 0x0 0xffffb90000023c00 0001 00000000 0x0 0x0 0xffffb90000023c80 0001 00000000 0x0 0x0 0xffffb90000023d00 0001 00000000 0x0 0x0 0xffffb90000023d80 0001 00000000 0x0 0x0 0xffffb90000023e00 0001 00000000 0x0 0x0 0xffffb90000023e80 0001 00000000 0x0 0x0 0xffffb90000023f00 0001 00000000 0x0 0x0 0xffffb90000023f80 0001 00000000 0x0 0x0 0xffffb90000024000 0001 00000000 0x0 0x0 0xffffb90000024080 0001 00000000 0x0 0x0 0xffffb90000024100 0001 00000000 0x0 0x0 0xffffb90000024180 0001 00000000 0x0 0x0 0xffffb90000024200 0001 00000000 0x0 0x0 0xffffb90000024280 0001 00000000 0x0 0x0 0xffffb90000024300 0001 00000000 0x0 0x0 0xffffb90000024380 0001 00000000 0x0 0x0 0xffffb90000024400 0001 00000000 0x0 0x0 0xffffb90000024480 0001 00000000 0x0 0x0 0xffffb90000024500 0001 00000000 0x0 0x0 0xffffb90000024580 0001 00000000 0x0 0x0 0xffffb90000024600 0001 00000000 0x0 0x0 0xffffb90000024680 0001 00000000 0x0 0x0 0xffffb90000024700 0001 00000000 0x0 0x0 0xffffb90000024780 0001 00000000 0x0 0x0 0xffffb90000024800 0001 00000000 0x0 0x0 0xffffb90000024880 0001 00000000 0x0 0x0 0xffffb90000024900 0001 00000000 0x0 0x0 0xffffb90000024980 0001 00000000 0x0 0x0 0xffffb90000024a00 0001 00000000 0x0 0x0 0xffffb90000024a80 0001 00000000 0x0 0x0 0xffffb90000024b00 0001 00000000 0x0 0x0 0xffffb90000024b80 0001 00000000 0x0 0x0 0xffffb90000024c00 0001 00000000 0x0 0x0 0xffffb90000024c80 0001 00000000 0x0 0x0 0xffffb90000024d00 0001 00000000 0x0 0x0 0xffffb90000024d80 0001 00000000 0x0 0x0 0xffffb90000024e00 0001 00000000 0x0 0x0 0xffffb90000024e80 0001 00000000 0x0 0x0 0xffffb90000024f00 0001 00000000 0x0 0x0 0xffffb90000024f80 0001 00000000 0x0 0x0 0xffffb90000025000 0001 00000000 0x0 0x0 0xffffb90000025080 0001 00000000 0x0 0x0 0xffffb90000025100 0001 00000000 0x0 0x0 0xffffb90000025180 0001 00000000 0x0 0x0 0xffffb90000025200 0001 00000000 0x0 0x0 0xffffb90000025280 0001 00000000 0x0 0x0 0xffffb90000025300 0001 00000000 0x0 0x0 0xffffb90000025380 0001 00000000 0x0 0x0 0xffffb90000025400 0001 00000000 0x0 0x0 0xffffb90000025480 0001 00000000 0x0 0x0 0xffffb90000025500 0001 00000000 0x0 0x0 0xffffb90000025580 0001 00000000 0x0 0x0 0xffffb90000025600 0001 00000000 0x0 0x0 0xffffb90000025680 0001 00000000 0x0 0x0 0xffffb90000025700 0001 00000000 0x0 0x0 0xffffb90000025780 0001 00000000 0x0 0x0 0xffffb90000025800 0001 00000000 0x0 0x0 0xffffb90000025880 0001 00000000 0x0 0x0 0xffffb90000025900 0001 00000000 0x0 0x0 0xffffb90000025980 0001 00000000 0x0 0x0 0xffffb90000025a00 0001 00000000 0x0 0x0 0xffffb90000025a80 0001 00000000 0x0 0x0 0xffffb90000025b00 0001 00000000 0x0 0x0 0xffffb90000025b80 0001 00000000 0x0 0x0 0xffffb90000025c00 0001 00000000 0x0 0x0 0xffffb90000025c80 0001 00000000 0x0 0x0 0xffffb90000025d00 0001 00000000 0x0 0x0 0xffffb90000025d80 0001 00000000 0x0 0x0 0xffffb90000025e00 0001 00000000 0x0 0x0 0xffffb90000025e80 0001 00000000 0x0 0x0 0xffffb90000025f00 0001 00000000 0x0 0x0 0xffffb90000025f80 0001 00000000 0x0 0x0 0xffffb90000026000 0001 00000000 0x0 0x0 0xffffb90000026080 0001 00000000 0x0 0x0 0xffffb90000026100 0001 00000000 0x0 0x0 0xffffb90000026180 0001 00000000 0x0 0x0 0xffffb90000026200 0001 00000000 0x0 0x0 0xffffb90000026280 0001 00000000 0x0 0x0 0xffffb90000026300 0001 00000000 0x0 0x0 0xffffb90000026380 0001 00000000 0x0 0x0 0xffffb90000026400 0001 00000000 0x0 0x0 0xffffb90000026480 0001 00000000 0x0 0x0 0xffffb90000026500 0001 00000000 0x0 0x0 0xffffb90000026580 0001 00000000 0x0 0x0 0xffffb90000026600 0001 00000000 0x0 0x0 0xffffb90000026680 0001 00000000 0x0 0x0 0xffffb90000026700 0001 00000000 0x0 0x0 0xffffb90000026780 0001 00000000 0x0 0x0 0xffffb90000026800 0001 00000000 0x0 0x0 0xffffb90000026880 0001 00000000 0x0 0x0 0xffffb90000026900 0001 00000000 0x0 0x0 0xffffb90000026980 0001 00000000 0x0 0x0 0xffffb90000026a00 0001 00000000 0x0 0x0 0xffffb90000026a80 0001 00000000 0x0 0x0 0xffffb90000026b00 0001 00000000 0x0 0x0 0xffffb90000026b80 0001 00000000 0x0 0x0 0xffffb90000026c00 0001 00000000 0x0 0x0 0xffffb90000026c80 0001 00000000 0x0 0x0 0xffffb90000026d00 0001 00000000 0x0 0x0 0xffffb90000026d80 0001 00000000 0x0 0x0 0xffffb90000026e00 0001 00000000 0x0 0x0 0xffffb90000026e80 0001 00000000 0x0 0x0 0xffffb90000026f00 0001 00000000 0x0 0x0 0xffffb90000026f80 0001 00000000 0x0 0x0 0xffffb90000027000 0001 00000000 0x0 0x0 0xffffb90000027080 0001 00000000 0x0 0x0 0xffffb90000027100 0001 00000000 0x0 0x0 0xffffb90000027180 0001 00000000 0x0 0x0 0xffffb90000027200 0001 00000000 0x0 0x0 0xffffb90000027280 0001 00000000 0x0 0x0 0xffffb90000027300 0001 00000000 0x0 0x0 0xffffb90000027380 0001 00000000 0x0 0x0 0xffffb90000027400 0001 00000000 0x0 0x0 0xffffb90000027480 0001 00000000 0x0 0x0 0xffffb90000027500 0001 00000000 0x0 0x0 0xffffb90000027580 0001 00000000 0x0 0x0 0xffffb90000027600 0001 00000000 0x0 0x0 0xffffb90000027680 0001 00000000 0x0 0x0 0xffffb90000027700 0001 00000000 0x0 0x0 0xffffb90000027780 0001 00000000 0x0 0x0 0xffffb90000027800 0001 00000000 0x0 0x0 0xffffb90000027880 0001 00000000 0x0 0x0 0xffffb90000027900 0001 00000000 0x0 0x0 0xffffb90000027980 0001 00000000 0x0 0x0 0xffffb90000027a00 0001 00000000 0x0 0x0 0xffffb90000027a80 0001 00000000 0x0 0x0 0xffffb90000027b00 0001 00000000 0x0 0x0 0xffffb90000027b80 0001 00000000 0x0 0x0 0xffffb90000027c00 0001 00000000 0x0 0x0 0xffffb90000027c80 0001 00000000 0x0 0x0 0xffffb90000027d00 0001 00000000 0x0 0x0 0xffffb90000027d80 0001 00000000 0x0 0x0 0xffffb90000027e00 0001 00000000 0x0 0x0 0xffffb90000027e80 0001 00000000 0x0 0x0 0xffffb90000027f00 0001 00000000 0x0 0x0 0xffffb90000027f80 0001 00000000 0x0 0x0 0xffffb90000028000 0001 00000000 0x0 0x0 0xffffb90000028080 0001 00000000 0x0 0x0 0xffffb90000028100 0001 00000000 0x0 0x0 0xffffb90000028180 0001 00000000 0x0 0x0 0xffffb90000028200 0001 00000000 0x0 0x0 0xffffb90000028280 0001 00000000 0x0 0x0 0xffffb90000028300 0001 00000000 0x0 0x0 0xffffb90000028380 0001 00000000 0x0 0x0 0xffffb90000028400 0001 00000000 0x0 0x0 0xffffb90000028480 0001 00000000 0x0 0x0 0xffffb90000028500 0001 00000000 0x0 0x0 0xffffb90000028580 0001 00000000 0x0 0x0 0xffffb90000028600 0001 00000000 0x0 0x0 0xffffb90000028680 0001 00000000 0x0 0x0 0xffffb90000028700 0001 00000000 0x0 0x0 0xffffb90000028780 0001 00000000 0x0 0x0 0xffffb90000028800 0001 00000000 0x0 0x0 0xffffb90000028880 0001 00000000 0x0 0x0 0xffffb90000028900 0001 00000000 0x0 0x0 0xffffb90000028980 0001 00000000 0x0 0x0 0xffffb90000028a00 0001 00000000 0x0 0x0 0xffffb90000028a80 0001 00000000 0x0 0x0 0xffffb90000028b00 0001 00000000 0x0 0x0 0xffffb90000028b80 0001 00000000 0x0 0x0 0xffffb90000028c00 0001 00000000 0x0 0x0 0xffffb90000028c80 0001 00000000 0x0 0x0 0xffffb90000028d00 0001 00000000 0x0 0x0 0xffffb90000028d80 0001 00000000 0x0 0x0 0xffffb90000028e00 0001 00000000 0x0 0x0 0xffffb90000028e80 0001 00000000 0x0 0x0 0xffffb90000028f00 0001 00000000 0x0 0x0 0xffffb90000028f80 0001 00000000 0x0 0x0 0xffffb90000029000 0001 00000000 0x0 0x0 0xffffb90000029080 0001 00000000 0x0 0x0 0xffffb90000029100 0001 00000000 0x0 0x0 0xffffb90000029180 0001 00000000 0x0 0x0 0xffffb90000029200 0001 00000000 0x0 0x0 0xffffb90000029280 0001 00000000 0x0 0x0 0xffffb90000029300 0001 00000000 0x0 0x0 0xffffb90000029380 0001 00000000 0x0 0x0 0xffffb90000029400 0001 00000000 0x0 0x0 0xffffb90000029480 0001 00000000 0x0 0x0 0xffffb90000029500 0001 00000000 0x0 0x0 0xffffb90000029580 0001 00000000 0x0 0x0 0xffffb90000029600 0001 00000000 0x0 0x0 0xffffb90000029680 0001 00000000 0x0 0x0 0xffffb90000029700 0001 00000000 0x0 0x0 0xffffb90000029780 0001 00000000 0x0 0x0 0xffffb90000029800 0001 00000000 0x0 0x0 0xffffb90000029880 0001 00000000 0x0 0x0 0xffffb90000029900 0001 00000000 0x0 0x0 0xffffb90000029980 0001 00000000 0x0 0x0 0xffffb90000029a00 0001 00000000 0x0 0x0 0xffffb90000029a80 0001 00000000 0x0 0x0 0xffffb90000029b00 0001 00000000 0x0 0x0 0xffffb90000029b80 0001 00000000 0x0 0x0 0xffffb90000029c00 0001 00000000 0x0 0x0 0xffffb90000029c80 0001 00000000 0x0 0x0 0xffffb90000029d00 0001 00000000 0x0 0x0 0xffffb90000029d80 0001 00000000 0x0 0x0 0xffffb90000029e00 0001 00000000 0x0 0x0 0xffffb90000029e80 0001 00000000 0x0 0x0 0xffffb90000029f00 0001 00000000 0x0 0x0 0xffffb90000029f80 0001 00000000 0x0 0x0 0xffffb9000002a000 0001 00000000 0x0 0x0 0xffffb9000002a080 0001 00000000 0x0 0x0 0xffffb9000002a100 0001 00000000 0x0 0x0 0xffffb9000002a180 0001 00000000 0x0 0x0 0xffffb9000002a200 0001 00000000 0x0 0x0 0xffffb9000002a280 0001 00000000 0x0 0x0 0xffffb9000002a300 0001 00000000 0x0 0x0 0xffffb9000002a380 0001 00000000 0x0 0x0 0xffffb9000002a400 0001 00000000 0x0 0x0 0xffffb9000002a480 0001 00000000 0x0 0x0 0xffffb9000002a500 0001 00000000 0x0 0x0 0xffffb9000002a580 0001 00000000 0x0 0x0 0xffffb9000002a600 0001 00000000 0x0 0x0 0xffffb9000002a680 0001 00000000 0x0 0x0 0xffffb9000002a700 0001 00000000 0x0 0x0 0xffffb9000002a780 0001 00000000 0x0 0x0 0xffffb9000002a800 0001 00000000 0x0 0x0 0xffffb9000002a880 0001 00000000 0x0 0x0 0xffffb9000002a900 0001 00000000 0x0 0x0 0xffffb9000002a980 0001 00000000 0x0 0x0 0xffffb9000002aa00 0001 00000000 0x0 0x0 0xffffb9000002aa80 0001 00000000 0x0 0x0 0xffffb9000002ab00 0001 00000000 0x0 0x0 0xffffb9000002ab80 0001 00000000 0x0 0x0 0xffffb9000002ac00 0001 00000000 0x0 0x0 0xffffb9000002ac80 0001 00000000 0x0 0x0 0xffffb9000002ad00 0001 00000000 0x0 0x0 0xffffb9000002ad80 0001 00000000 0x0 0x0 0xffffb9000002ae00 0001 00000000 0x0 0x0 0xffffb9000002ae80 0001 00000000 0x0 0x0 0xffffb9000002af00 0001 00000000 0x0 0x0 0xffffb9000002af80 0001 00000000 0x0 0x0 0xffffb9000002b000 0001 00000000 0x0 0x0 0xffffb9000002b080 0001 00000000 0x0 0x0 0xffffb9000002b100 0001 00000000 0x0 0x0 0xffffb9000002b180 0001 00000000 0x0 0x0 0xffffb9000002b200 0001 00000000 0x0 0x0 0xffffb9000002b280 0001 00000000 0x0 0x0 0xffffb9000002b300 0001 00000000 0x0 0x0 0xffffb9000002b380 0001 00000000 0x0 0x0 0xffffb9000002b400 0001 00000000 0x0 0x0 0xffffb9000002b480 0001 00000000 0x0 0x0 0xffffb9000002b500 0001 00000000 0x0 0x0 0xffffb9000002b580 0001 00000000 0x0 0x0 0xffffb9000002b600 0001 00000000 0x0 0x0 0xffffb9000002b680 0001 00000000 0x0 0x0 0xffffb9000002b700 0001 00000000 0x0 0x0 0xffffb9000002b780 0001 00000000 0x0 0x0 0xffffb9000002b800 0001 00000000 0x0 0x0 0xffffb9000002b880 0001 00000000 0x0 0x0 0xffffb9000002b900 0001 00000000 0x0 0x0 0xffffb9000002b980 0001 00000000 0x0 0x0 0xffffb9000002ba00 0001 00000000 0x0 0x0 0xffffb9000002ba80 0001 00000000 0x0 0x0 0xffffb9000002bb00 0001 00000000 0x0 0x0 0xffffb9000002bb80 0001 00000000 0x0 0x0 0xffffb9000002bc00 0001 00000000 0x0 0x0 0xffffb9000002bc80 0001 00000000 0x0 0x0 0xffffb9000002bd00 0001 00000000 0x0 0x0 0xffffb9000002bd80 0001 00000000 0x0 0x0 0xffffb9000002be00 0001 00000000 0x0 0x0 0xffffb9000002be80 0001 00000000 0x0 0x0 0xffffb9000002bf00 0001 00000000 0x0 0x0 0xffffb9000002bf80 0001 00000000 0x0 0x0 0xffffb9000002c000 0001 00000000 0x0 0x0 0xffffb9000002c080 0001 00000000 0x0 0x0 0xffffb9000002c100 0001 00000000 0x0 0x0 0xffffb9000002c180 0001 00000000 0x0 0x0 0xffffb9000002c200 0001 00000000 0x0 0x0 0xffffb9000002c280 0001 00000000 0x0 0x0 0xffffb9000002c300 0001 00000000 0x0 0x0 0xffffb9000002c380 0001 00000000 0x0 0x0 0xffffb9000002c400 0001 00000000 0x0 0x0 0xffffb9000002c480 0001 00000000 0x0 0x0 0xffffb9000002c500 0001 00000000 0x0 0x0 0xffffb9000002c580 0001 00000000 0x0 0x0 0xffffb9000002c600 0001 00000000 0x0 0x0 0xffffb9000002c680 0001 00000000 0x0 0x0