last executing test programs: 49.40060034s ago: executing program 2: sendmsg$unix(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="89000000ffff000001"], 0x9}, 0x0) getsockname$inet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) sendmsg(r0, &(0x7f0000000380)={0x0, 0x32c, 0x0, 0x0, &(0x7f0000000000), 0x90}, 0x0) 40.622394499s ago: executing program 0: r0 = socket(0x2, 0x1, 0x0) getsockopt$sock_int(r0, 0xffff, 0x4, 0x0, 0x0) 39.687675394s ago: executing program 0: open(&(0x7f0000000140)='./file0\x00', 0x200, 0x0) (async) ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0x80000000, 0x0) (async) r0 = open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7869) (async) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) (async) writev(0xffffffffffffffff, 0x0, 0x0) (async) getgroups(0x7, &(0x7f0000000040)=[0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]) (async) setgroups(0x0, 0x0) setreuid(0xee00, 0x0) getuid() setegid(r3) (async) getsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f0000000100)={0x0, 0x0}, &(0x7f00000000c0)=0xc) (async) r7 = semget$private(0x0, 0x2, 0x39a) (async) getsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f0000000140), &(0x7f0000000580)=0xc) r8 = getuid() setregid(0x0, r2) (async) setreuid(0xee00, r8) (async) syz_emit_ethernet(0x2a, &(0x7f0000000080)) (async) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000700)={{0x8001, 0x0, r4, 0x0, r2, 0x63, 0x53}, 0xffffffffffffffff, 0x8}) (async) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) semop(0x0, 0x0, 0x0) (async) semctl$GETPID(r7, 0x3, 0x4, &(0x7f0000000ac0)=""/201) ioctl$FIONBIO(r1, 0x8004667e, &(0x7f00000004c0)) (async) getuid() semctl$GETVAL(r7, 0x4, 0x5, &(0x7f0000000800)=""/266) (async) seteuid(0x0) (async) semctl$IPC_SET(r7, 0x0, 0x1, &(0x7f0000000680)={{0x100004, r6, r5, 0xffffffffffffffff, 0x0, 0x158, 0x143}, 0x200000000000206, 0x1f, 0x9}) (async) semctl$GETNCNT(r7, 0x3, 0x3, &(0x7f0000000440)=""/64) (async) semctl$SETVAL(r7, 0x4, 0x8, &(0x7f0000000080)=0x80000001) getgid() (async) semctl$IPC_SET(r7, 0x0, 0x1, &(0x7f0000000180)={{0x8001, 0x0, 0x0, 0x0, r5, 0x12}, 0x0, 0x441, 0x8000000000000000}) 38.016758013s ago: executing program 1: compat_50___msgctl13$IPC_STAT(0x0, 0x2, &(0x7f0000000300)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x0, 0x0, 0x0, 0x100}, 0xdffffffffffff7ff}}) symlink(&(0x7f00000000c0)='.\x00', &(0x7f0000000240)='./file0\x00') lchown(&(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffff) compat_40_mount(&(0x7f0000000380)='union\x00', &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f00000001c0)) unlink(&(0x7f0000000080)='./file0\x00') mknod(&(0x7f0000000480)='./file0\x00', 0x2000, 0x1733) __mount50(&(0x7f00000002c0)='overlay\x00', &(0x7f0000000040)='.\x00', 0x0, &(0x7f0000000540), 0x0) r0 = socket$unix(0x1, 0x1, 0x0) recvfrom$unix(r0, &(0x7f0000000180)=""/24, 0x18, 0x242a, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0xa) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 36.216774032s ago: executing program 0: mknod(&(0x7f0000000000)='./bus\x00', 0x2000, 0x0) __mount50(&(0x7f00000002c0)='overlay\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, &(0x7f0000000380)="7de9ec5863204807b495c739721f1b7d1d6d3207d133e31167f3b764495aac73d9dec057b13f44b3919f9aaf4764c142e803950ae39655d91b878c63065b0cbd826afcb133b99530fb563583667db6f4c98320c07a80ba669fa3a568a9c6d32ef7c5f412c045237b32d5fb882960e2a5056e059aa2d989a220bb1067c5f88a925af766474800193273099299b4b52dd1", 0x90) mknod$loop(&(0x7f0000000300)='./file1\x00', 0xe040, 0x1) symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00') __mount50(0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) chflags(0x0, 0x0) fchownat(0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0) __utimes50(0x0, 0x0) fktrace(r0, 0x0, 0xf0709cfa615b9be3, 0x0) fktrace(r0, 0x0, 0x8, 0x0) compat_50___msgctl13$IPC_STAT(0x0, 0x2, &(0x7f0000000280)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)}}) lchown(&(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0) compat_40_mount(&(0x7f0000000140)='umap\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f00000001c0)) pathconf(&(0x7f0000000fc0)='./bus\x00', 0x7) r1 = accept$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, &(0x7f0000000200)=0x8) pipe2(&(0x7f0000000300)={0xffffffffffffffff}, 0x1000000) fcntl$dupfd(r1, 0x0, r2) mknod(&(0x7f00000000c0)='./file0\x00', 0x20, 0xffffffffffffffff) 27.384372059s ago: executing program 5: r0 = socket$inet(0x2, 0x1, 0x0) __mount50(0x0, 0x0, 0x0, 0x0, 0x0) (async) _ksem_timedwait(0x0, &(0x7f0000000180)={0x0, 0xfffffffffffffffb}) (async) modctl$MODCTL_STAT(0x4, &(0x7f0000000180)={&(0x7f00000000c0)=""/126, 0x7e}) (async) compat_40_mount(&(0x7f0000000200)='procfs\x00', &(0x7f00000000c0)='.\x00', 0x0, &(0x7f00000002c0)="01") (async) ioctl$FIOSEEKHOLE(0xffffffffffffffff, 0x8018698d, &(0x7f0000000100)=0x8000000000000035) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) chflags(&(0x7f0000000100)='./file0\x00', 0x0) (async) compat_40_mount(0x0, &(0x7f0000000040)='./file0/../file0\x00', 0x200, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) compat_30_getfh(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000080)) setsockopt$sock_timeval(r0, 0xffff, 0x100c, &(0x7f0000000140), 0x10) minherit(&(0x7f0000258000/0x2000)=nil, 0x2000, 0x1) 27.349827575s ago: executing program 0: _lwp_create(0xffffffffffffffff, 0x0, 0x0) semop(0x0, &(0x7f0000000180)=[{}, {}, {0x1, 0x0, 0x1800}], 0x3) r0 = socket(0x18, 0x3, 0x0) ioctl$FIOSEEKHOLE(r0, 0x8120690c, &(0x7f0000000180)=0x8000000000000032) 24.999438578s ago: executing program 5: r0 = socket(0x0, 0x10000000, 0x0) ioctl$FIOASYNC(r0, 0x8004667d, &(0x7f0000000000)=0x2) __stat50(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) swapctl$SWAP_GETDUMPDEV(0x8, r3, 0x9) r4 = semget(0x2, 0x1, 0x40) compat_14___semctl$GETNCNT(r4, 0x0, 0x3) __posix_rename(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0\x00') chdir(&(0x7f00000001c0)='./file0\x00') compat_50_setitimer(0x2, &(0x7f0000000200)={{0x9, 0xfff}, {0xe9, 0xd7b}}, &(0x7f0000000240)) mknod$loop(&(0x7f0000000280)='./file0\x00', 0x10, 0x1) compat_14___semctl$GETNCNT(r4, 0x0, 0x3) compat_12_stat12(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) __mount50(&(0x7f0000000380)='kernfs\x00', &(0x7f00000003c0)='./file0\x00', 0x80000000, &(0x7f0000000400)="fe469ed3529f3e", 0x7) r6 = paccept(r0, &(0x7f0000000440)=@family, &(0x7f0000000480)=0xe, 0x0) compat_43_ocreat(&(0x7f00000004c0)='\x00', 0x200) r7 = accept(r6, &(0x7f0000000500)=@data, &(0x7f0000000540)=0xe) ioctl$FIOGETOWN(r7, 0x4004667b, &(0x7f0000000580)) connect$unix(r6, &(0x7f00000005c0)=@abs={0x0, 0x0, 0x2}, 0x8) ioctl$FIOSEEKHOLE(r0, 0xc0086662, &(0x7f0000000600)) compat_50_wait4(0xffffffffffffffff, &(0x7f0000000640), 0x2, &(0x7f0000000680)) compat_12_lstat12(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) semget$private(0x0, 0x3, 0x108) umask(0x800) r10 = open$dir(&(0x7f0000000800)='./file0\x00', 0x1, 0x1c1) unlinkat(r10, &(0x7f0000000840)='./file0\x00', 0x800) r11 = socket$unix(0x1, 0x2, 0x0) compat_43_stat43(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)) r12 = getpid() __fstat50(r0, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$unix(r7, &(0x7f0000000f40)={&(0x7f0000000940)=@file={0x0, './file0\x00'}, 0xa, &(0x7f0000000b40)=[{&(0x7f0000000980)="40b7e2d73d78096f", 0x8}, {&(0x7f00000009c0)="e52e0ab8b0ad9b68f4074ba1e5d7a8cd9c5758096937f215b9512a14506e6d029c2ba87734c1a48a4913c6a36ce85de269458c78db7bb8e3a3ad42ed3d7bf21a5e8dcd2b55109c9a256c0248f8bbef52662233b58624a188322f00168c23f860c0a63825956e5b7a6b657495d4b88903af103602666cde5b16b020b96836d32de9975f25c3b27f2a5402846ea1924bb879988fb39a65908fa3989df912461b20beb36e836324b8e5dc4681fa22005e612b0d89c7ffaf01f9e5ba4f6cfdb3225b50235bff6df6a97ae0e77c32793cb14bcc0c1b04b1253c6e4784f7821499d0ebb5f23da2630f", 0xe6}, {&(0x7f0000000ac0)="8b13c5aa220220498f13b1bf2857f389922e07685e5b9f663caf664e4cc2013d5b47f45d9d08ab173049c061ae9a6ed84133e9dd240e920bf012831448969e4fa16bd6bfc671a7a5", 0x48}], 0x3, &(0x7f0000000e00)=[@cred={0x20, 0xffff, 0x2, r12, r13, r9}, @rights={0x28, 0xffff, 0x1, [0xffffffffffffffff, r6, r0, r0, r11]}, @rights={0x18, 0xffff, 0x1, [r7]}, @cred={0x20, 0xffff, 0x2, 0x0, r8, r5}, @cred={0x20, 0xffff, 0x2, 0x0, 0x0, r9}, @cred={0x20, 0xffff, 0x2, 0x0, r1}, @rights={0x28, 0xffff, 0x1, [r0, 0xffffffffffffffff, r10, 0xffffffffffffffff, 0xffffffffffffffff]}, @rights={0x28, 0xffff, 0x1, [r7, r10, r11, r6, r10]}, @cred={0x20, 0xffff, 0x2, 0x0, r8, r2}], 0x130, 0x400}, 0x800) 20.961500344s ago: executing program 5: __stat50(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)={0x0}) _lwp_setname(0x0, &(0x7f0000002c80)) r1 = _lwp_self() _lwp_continue(r1) _lwp_exit() mknod(&(0x7f0000001140)='./file0\x00', 0x1000, r0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x0) r3 = _lwp_self() getpid() compat_60__lwp_park(&(0x7f0000000300), r3, 0x0, 0x0) read(r2, &(0x7f0000000080)=""/159, 0x9f) 18.995242018s ago: executing program 4: getsockname$inet(0xffffffffffffffff, 0x0, 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0x2000, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) compat_50___msgctl13$IPC_STAT(0x0, 0x2, &(0x7f0000000200)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(0x0, 0x0, 0xffffffffffffffff) open(0x0, 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIOASYNC(r0, 0x40207442, &(0x7f0000000100)=0xf3) 18.057286133s ago: executing program 4: r0 = socket$inet6(0x18, 0x3, 0x0) ioctl$FIOSEEKHOLE(r0, 0x80906979, &(0x7f0000000180)) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) (async) compat_43_olseek(r0, 0x80000001, 0x0) __mount50(&(0x7f0000000000)='kernfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fcntl$lock(r1, 0x8, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x100000001}) (async) symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00') (async) _ksem_open(&(0x7f0000000280)="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", 0x200, 0x400, 0x8, &(0x7f0000000140)=0x0) _ksem_getvalue(r2, &(0x7f00000001c0)) (async) __mount50(&(0x7f0000000040)='union\x00', &(0x7f00000000c0)='./file0\x00', 0x8, &(0x7f0000000400)="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", 0xffffffffffffffbb) (async) compat_40_mount(0x0, 0x0, 0x0, 0x0) 17.971616186s ago: executing program 2: symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00') (async, rerun: 64) compat_50___msgctl13$IPC_STAT(0x0, 0x2, &(0x7f0000000280)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200), 0x0, 0x0, 0xffff}}) (rerun: 64) lchown(&(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0) compat_40_mount(&(0x7f0000000000)='nilfs\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, &(0x7f00000001c0)) (async, rerun: 32) r0 = socket(0x18, 0x3, 0x0) (rerun: 32) __clock_getres50(0x0, 0x0) (async) setsockopt(r0, 0x1000000029, 0x13, &(0x7f0000000000)="5ab7776a", 0x4) (async) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0, 0x0) (async) compat_43_ocreat(0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) ioctl$FIOSEEKHOLE(r1, 0x8018698d, &(0x7f0000000100)) (async) open(0x0, 0x0, 0x0) (async) open(&(0x7f00000000c0)='./file0\x00', 0x8000000000020e, 0x0) (async) __mount50(&(0x7f00000002c0)='overlay\x00', &(0x7f0000000840)='.\x00', 0x100000, &(0x7f0000000540), 0x0) (async) execve(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) compat_30_getfh(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)) (async) __lstat50(&(0x7f0000000180)='./file0\x00', &(0x7f0000000300)) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) open(&(0x7f00000000c0)='./file0\x00', 0x80000000000206, 0x0) (async) r2 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) ioctl$FIOSEEKHOLE(r2, 0x4004667f, 0x0) (async, rerun: 32) __fhopen40(&(0x7f0000000080)="047e96be822b6658ab4391f3070837ccc9f09148dc6d7da49c109790", 0x1c, 0x0) (rerun: 32) 17.704223858s ago: executing program 4: open(&(0x7f00000000c0)='./file0\x00', 0x1, 0x4) compat_40_mount(&(0x7f0000000040)='tmpfs\x00', &(0x7f00000005c0)='.\x00', 0x0, &(0x7f00000002c0)="01") mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x200) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{0x0}], 0x1, 0x0) mknod(&(0x7f0000000100)='./file0\x00', 0x80002005, 0x5300) r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIOASYNC(r1, 0x80145003, &(0x7f00000000c0)) open$dir(&(0x7f0000000b80)='./file0\x00', 0x200, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=""/100, 0x64}, 0x3f8d}, 0x10, 0x0, 0x0) r4 = fcntl$dupfd(r2, 0x0, r3) symlink(&(0x7f0000000080)='.\x00', 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r5 = socket$inet(0x2, 0x1, 0x0) setsockopt(r5, 0x0, 0x9, &(0x7f0000000080)="7f000001", 0x4) sendmmsg(r4, &(0x7f0000000080)={0x0}, 0x10, 0x400, 0x0) close(r3) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r6 = msgget$private(0x0, 0x0) msgctl$IPC_SET(r6, 0x1, &(0x7f0000000080)) sendto$unix(r2, &(0x7f0000000300)="1b407cd606bf9000c2253768578693379ffddadef79c78f4a76bf63ab1b5d49c7b3e42e15f32ac7662dc6dce6ba699ecfd9e5d738eacaf5d6211e566652dd69e23ddb3cc3038278f9bee8775482a4c423ff46a68f737efe498a2f723ecb5b721c9917277553f3d4d7d5f5193a6227340b3863039efaefb62ba60a507e0174586e7eaf1240b9e67d307e5cc8c54424899af2de64c2161098becda2a0d13f7b46a2d65ffebdce2a5e510877d42429c2bc3f8ab4d2b383c1d5e2aa75a28e62496e83e4793924831120483675faa72969451620e8db1470b956271b89eda55897ba5a741a7171024ef776eee3b2f315b226586bc6ae412", 0xf5, 0x4, &(0x7f0000000140)=@abs={0x0, 0x0, 0x3}, 0x8) poll(&(0x7f0000000000)=[{}], 0x4e8, 0x0) 16.469088699s ago: executing program 3: __mount50(&(0x7f00000000c0)='adosfs\x00', &(0x7f0000000040)='.\x00', 0x80, &(0x7f0000000540), 0x0) compat_50___msgctl13$IPC_STAT(0x0, 0x2, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)}}) symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00') lchown(&(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffff) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)=@abs={0x0, 0x0, 0x2}, 0x8, &(0x7f0000000200)}, 0x9) compat_40_mount(&(0x7f0000000140)='umap\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f00000001c0)) setgroups(0x0, 0x0) getuid() mknod(&(0x7f0000000040)='./bus\x00', 0x100000000205f, 0x2801) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$FIONREAD(r3, 0x80047442, &(0x7f00000001c0)) ioctl$FIOSEEKHOLE(0xffffffffffffffff, 0xc1206950, &(0x7f0000000180)=0x8000000000000032) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r4 = socket(0x2, 0x3, 0x0) chown(&(0x7f0000000200)='./file0\x00', r0, r2) ioctl$FIOSEEKHOLE(r4, 0x8040691a, &(0x7f0000000180)) setuid(r1) r5 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000dc0)='./file0\x00', r5, &(0x7f0000000ec0)='./file1\x00') __mount50(&(0x7f00000000c0)='adosfs\x00', &(0x7f0000000040)='.\x00', 0x80, &(0x7f0000000540), 0x0) (async) compat_50___msgctl13$IPC_STAT(0x0, 0x2, &(0x7f0000000300)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)}}) (async) symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00') (async) lchown(&(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffff) (async) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)=@abs={0x0, 0x0, 0x2}, 0x8, &(0x7f0000000200)}, 0x9) (async) compat_40_mount(&(0x7f0000000140)='umap\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f00000001c0)) (async) setgroups(0x0, 0x0) (async) getuid() (async) mknod(&(0x7f0000000040)='./bus\x00', 0x100000000205f, 0x2801) (async) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) (async) ioctl$FIONREAD(r3, 0x80047442, &(0x7f00000001c0)) (async) ioctl$FIOSEEKHOLE(0xffffffffffffffff, 0xc1206950, &(0x7f0000000180)=0x8000000000000032) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) socket(0x2, 0x3, 0x0) (async) chown(&(0x7f0000000200)='./file0\x00', r0, r2) (async) ioctl$FIOSEEKHOLE(r4, 0x8040691a, &(0x7f0000000180)) (async) setuid(r1) (async) open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) (async) symlinkat(&(0x7f0000000dc0)='./file0\x00', r5, &(0x7f0000000ec0)='./file1\x00') (async) 16.446572263s ago: executing program 5: __mount50(&(0x7f00000002c0)='overlay\x00', &(0x7f0000000040)='.\x00', 0x0, &(0x7f0000000540), 0x0) mknod(&(0x7f00000000c0)='./bus\x00', 0x2000, 0x4f4b) __stat50(&(0x7f00000004c0)='./bus\x00', &(0x7f00000005c0)={0x0}) mknod(&(0x7f00000011c0)='./file0\x00', 0x2000, r0) modctl$MODCTL_LOAD(0x2, 0xffffffffffffffff) _lwp_detach(0xffffffffffffffff) r1 = socket(0x0, 0x0, 0x0) accept$unix(r1, &(0x7f0000001200)=@file={0x0, ""/4087}, &(0x7f0000000000)=0xff9) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0x10, r2, 0x262, 0x0) 15.454991216s ago: executing program 3: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x18, 0x1, 0x0) setsockopt(r0, 0x1000000029, 0xc, &(0x7f0000002a80)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) setsockopt(r0, 0x1000000029, 0x11, 0x0, 0x0) 15.233716371s ago: executing program 0: compat_43_osetrlimit(0x0, &(0x7f0000000000)) open(0x0, 0x0, 0x0) r0 = getsid(0x0) r1 = getsid(0x0) r2 = getsid(0x0) ptrace(0x9, r2, 0x0, 0x0) compat_50_wait4(0x0, 0x0, 0x0, 0x0) ptrace(0xe, r1, 0x0, 0x0) compat_50_wait4(0x0, 0x0, 0x0, 0x0) r3 = semget$private(0x0, 0x4000000009, 0x0) semop(r3, &(0x7f0000000500)=[{0x0, 0xb}, {}], 0x2) compat_50_____semctl13$IPC_RMID(r3, 0x0, 0x0) semop(r3, &(0x7f0000000040)=[{0x2, 0xd62, 0x400}, {0x0, 0xbf66}, {0x4, 0x7, 0x1800}, {0x4, 0x1}, {0x3, 0x3, 0x1800}, {}], 0x6) ptrace(0xa, r0, 0x0, 0x0) __clone(0x4d00, 0x0) 14.940373026s ago: executing program 4: compat_50___msgctl13$IPC_STAT(0x0, 0x2, &(0x7f0000000380)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x0, 0xffffffffffffc840, 0x0, 0xfffa}, 0x731, 0x209, 0xffff}}) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)}, {&(0x7f0000001080)}], 0x2}, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000440)=@abs={0x0, 0x0, 0x2}, 0x8, &(0x7f0000000200)}, 0x0) compat_40_mount(0x0, 0x0, 0x0, 0x0) symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00') socket$unix(0x1, 0x2, 0x0) mknod(&(0x7f0000000480)='./file0\x00', 0x2000, 0x1733) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIOGETOWN(r0, 0x2000427e, 0x0) ioctl$FIOASYNC(r0, 0x40044266, &(0x7f0000000000)) symlink(0x0, 0x0) modctl$MODCTL_UNLOAD(0x2, 0x0) ioctl$FIOSEEKHOLE(0xffffffffffffffff, 0xc1206950, &(0x7f0000000180)=0x8000000000000032) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = socket(0x2, 0x3, 0x0) ioctl$FIOSEEKHOLE(r1, 0x8040691a, &(0x7f0000000180)) compat_40_mount(&(0x7f0000000000)='v7fs\x00', 0x0, 0x0, 0x0) r2 = socket(0x1f, 0x5, 0x2) getsockname$unix(r2, 0x0, 0x0) compat_40_mount(&(0x7f0000000200)='procfs\x00', &(0x7f00000000c0)='.\x00', 0x0, &(0x7f00000002c0)="01") r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_timeval(r3, 0xffff, 0x0, 0x0, 0x0) ioctl$FIOSEEKHOLE(0xffffffffffffffff, 0x8018698d, &(0x7f0000000100)=0x8000000000000031) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r4 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) compat_43_ogetdirentries(r4, 0x0, 0x0, 0x0) r5 = socket(0x1f, 0x40000003, 0x0) ioctl$FIOGETBMAP(r5, 0xc0386207, &(0x7f0000000000)) r6 = socket(0x18, 0x2, 0x0) getsockname$inet(r6, &(0x7f0000000080), 0x0) 13.961123048s ago: executing program 1: compat_50___msgctl13$IPC_STAT(0x0, 0x2, &(0x7f0000000300)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x0, 0x0, 0x0, 0x100}, 0xdffffffffffff7ff}}) symlink(&(0x7f00000000c0)='.\x00', &(0x7f0000000240)='./file0\x00') lchown(&(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffff) compat_40_mount(&(0x7f0000000380)='union\x00', &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f00000001c0)) unlink(&(0x7f0000000080)='./file0\x00') mknod(&(0x7f0000000480)='./file0\x00', 0x2000, 0x1733) __mount50(&(0x7f00000002c0)='overlay\x00', &(0x7f0000000040)='.\x00', 0x0, &(0x7f0000000540), 0x0) r0 = socket$unix(0x1, 0x1, 0x0) recvfrom$unix(r0, &(0x7f0000000180)=""/24, 0x18, 0x242a, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0xa) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 10.950922754s ago: executing program 1: symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00') compat_50___msgctl13$IPC_STAT(0x0, 0x2, &(0x7f0000000280)={{0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)}}) lchown(&(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffff) shmat(0x0, &(0x7f0000fee000/0x4000)=nil, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)=@abs={0x0, 0x0, 0x2}, 0x8, &(0x7f0000000200)}, 0x0) compat_40_mount(&(0x7f0000000140)='umap\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f00000001c0)) unlink(0x0) r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000005c0)='\x00', r1, &(0x7f0000000c80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') __stat50(&(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0) compat_50___msgctl13$IPC_STAT(0x0, 0x2, &(0x7f0000000300)={{0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)}}) unlink(0x0) r3 = socket(0x1f, 0x3, 0x0) setsockopt(r3, 0x1, 0x2, 0x0, 0x0) mkdir(&(0x7f00000007c0)='./file0\x00', 0x0) compat_40_mount(&(0x7f0000000140)='procfs\x00', &(0x7f0000000300)='./file0\x00', 0x0, &(0x7f00000002c0)="2c85f0b7b5a6327949b61502ba") lchown(&(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffff) compat_40_mount(&(0x7f0000000040)='umap\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f00000001c0)) socket$inet6(0x18, 0x10000000, 0x80) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r4, &(0x7f0000000180)=[{&(0x7f0000000080)="9c", 0x1}], 0x1) readv(r4, &(0x7f0000000580)=[{&(0x7f0000000240)=""/93, 0x5d}], 0x1) dup3(r4, r5, 0x0) r6 = open(&(0x7f0000001280)='./file0\x00', 0x0, 0x0) __mount50(&(0x7f0000000000)='puffs\x00', &(0x7f0000000080)='./file0\x00', 0x4000, &(0x7f0000000200)="be03990d2019d0da555b94962ed27b5368aefa59e9fe113d0539d76daec15c3d95cec7cfab3a1725e3ccdfd08f816d68ff298b1c4bb25dedd1f5a7b99b10d073bc2ee85a419cf5a3f1462e953950b8fad958ef0c5c870641c6954af178c31065c6b11b001a0146b6b48d688a80", 0x6d) setreuid(r2, r0) preadv(r6, &(0x7f0000000200), 0x60, 0x0) 7.527865614s ago: executing program 3: ioctl$FIOASYNC(0xffffffffffffffff, 0xc0104306, 0x0) syz_usb_connect$uac1(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = semget$private(0x0, 0x4000000009, 0x0) semop(r0, &(0x7f0000000400), 0x0) semctl$SETALL(r0, 0x0, 0x9, &(0x7f0000000240)) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) open(0x0, 0x0, 0x0) setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket(0x10, 0x0, 0x0) r1 = getsid(0x0) __getcwd(&(0x7f00000000c0)=""/15, 0xf) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) r2 = open$dir(0x0, 0x0, 0x100) modctl$MODCTL_LOAD(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xc1}) r3 = semget$private(0x0, 0x1, 0x0) r4 = semget$private(0x0, 0x1, 0x80) semctl$IPC_STAT(r4, 0x0, 0x2, &(0x7f0000000600)=""/152) compat_50___shmctl13$IPC_STAT(0xffffffffffffffff, 0x2, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)="50be0afee3a4e4b619cdf9249998bbab56b59cab261b84f44e9cd088acabd9e75368345d6db36e0a72f8a5fec1d9d39e762fea79a587adae723209937dddbd9313570b1c89308a3a3a4dee79d7b9f7b67e3a62caac1b8b307182284e82e1768c9a12434d288ec5ff628a9b25ad84c343f56d31bdbaa787dfd68ab4e795ae98716a64f349935227bf4e533ac4d4a6bc1a490590162b1f7be7e5df0058a8ff7a54b7398d3da76b9c67"}) ____semctl50$GETALL(r3, 0x0, 0x6, &(0x7f0000000580)=@buf=&(0x7f0000000540)={{r5, 0xffffffffffffffff, 0xfffffffa, 0x4, 0x100, 0x3f3, 0x2}, 0x2, 0x1, 0x8000000000000004, &(0x7f0000000500)={0x7f, 0x9, 0x22, 0x1000}}) r7 = getppid() setpgid(r7, r1) fcntl$lock(r2, 0x9, &(0x7f0000000180)={0x2, 0x2, 0x3, 0x3, r1}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r8, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYRES32=r6, @ANYRES8=r4], 0x28, 0x406}, 0x0) writev(r8, &(0x7f0000000140)=[{&(0x7f00000001c0)="23ca610c6941e0cb848c205a9157e9bc495ad91346a7575e6715444875dc4d9598f035c26288b61179fcbabfcfae92bbf13e91b8a3a5e4eb248f89c45a1bd1cbc303dd9f20968dd0f47cc1cd840b974cef1cfc8ad1fdb8146b7e69e4060d1fbaf6852e269fd787d44e3e1b6ce597d5ef428f6b7c629f013185f29bbe486c0cdbf91a61a70ba0e41a85c79157116593d5f6ecb9095c61fcb2263dcf36ac0038578b90d9a371182cf24b1571e1eb24262a4989bd07b4f061ab02859116a6eb22ebc953f9e9a64368115eeb7662d806d6a76959623e9e8f217c5e61dd9bbfe6", 0xde}, {&(0x7f00000002c0)="953e6e592f7d060f5c8b63e3b0742ed3258c6f5b0abd222dbef8635f0912262d49a3ea811c997020cf8d5319f345fe8966f08f05ea9a3aa9705b3bbbe03fbbbb3c6ece2e186d4598948338c4c5d0b8c47bc2753ba5c74a3aaa98b03d31d92f4f7330683aa47e8636d393eaa7886ffa2e4658394c9322c04859e5559a7d3a15381ca964bf49", 0x85}], 0x2) socket(0x2, 0x3, 0x0) r9 = open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x0) truncate(&(0x7f0000000000)='./file0\x00', 0x0, 0x10001) mmap(&(0x7f0000000000/0x13000)=nil, 0x13000, 0x3, 0x10, r9, 0x0, 0x800000000) 7.515654826s ago: executing program 5: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) socket(0x0, 0x0, 0x0) ioctl$FIOSEEKHOLE(r0, 0xc0086662, &(0x7f0000000080)=0x4) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$FIONREAD(r1, 0x80047458, &(0x7f00000001c0)) 5.087542922s ago: executing program 1: symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00') (async) symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00') open(&(0x7f0000000180)='./file0/file0\x00', 0x40, 0x80) (async) open(&(0x7f0000000180)='./file0/file0\x00', 0x40, 0x80) fchroot(0xffffffffffffffff) compat_40_mount(&(0x7f0000000000)='tmpfs\x00', &(0x7f00000003c0)='.\x00', 0x0, &(0x7f0000000140)="01") symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00') mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x18, 0x1, 0x0) setsockopt(r0, 0x1000000029, 0xc, &(0x7f0000002a80)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) setsockopt(r0, 0x1000000029, 0xd, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) (async) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) getsockname$inet(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000000)=0xfffffffffffffe22) r1 = socket(0x800000018, 0x2, 0x0) r2 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil) munmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000) (async) munmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000) shmat(r2, &(0x7f0000ffd000/0x1000)=nil, 0x0) madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) bind$unix(r1, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) fchownat(0xffffffffffffffff, &(0x7f00000000c0)='./file0/file0\x00', 0xffffffffffffffff, 0x0, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x6000, 0x6da) __posix_rename(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./bus\x00') (async) __posix_rename(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./bus\x00') __stat50(&(0x7f00000001c0)='./file0/file0\x00', &(0x7f0000000000)) (async) __stat50(&(0x7f00000001c0)='./file0/file0\x00', &(0x7f0000000000)={0x0}) mknod(&(0x7f00000011c0)='./file0\x00', 0x2000, r3) ktrace(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) (async) ktrace(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) (async) open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) unmount(&(0x7f0000000000)='./file0\x00', 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0x0, 0xe03) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3c0}, 0x0) (async) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3c0}, 0x0) mprotect(&(0x7f0000725000/0x2000)=nil, 0x2000, 0x0) (async) mprotect(&(0x7f0000725000/0x2000)=nil, 0x2000, 0x0) mlockall(0x3) 4.828150882s ago: executing program 3: r0 = open(0x0, 0x0, 0x0) r1 = socket(0x2, 0x1, 0x0) r2 = semget$private(0x0, 0x4, 0x0) compat_43_ogetpeername(r0, &(0x7f0000000000), &(0x7f0000000040)) semctl$SETVAL(r2, 0xb3c609ffe1eb686c, 0x8, &(0x7f00000000c0)) listen(r1, 0x0) paccept(r1, 0x0, 0x0, 0x0) writev(r1, &(0x7f0000000a40)=[{0x0}], 0x1) 4.26078114s ago: executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0\x00', 0x0) __mount50(&(0x7f0000000280)='kernfs\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0) (async) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) compat_50___msgctl13$IPC_STAT(0x0, 0x2, &(0x7f0000000280)={{0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100), 0xdffffffffffff7ff}}) (async) symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000000)='./file0\x00') (async) lchown(&(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffff) (async, rerun: 64) compat_40_mount(&(0x7f0000000380)='union\x00', &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f00000001c0)) (async, rerun: 64) __mount50(&(0x7f00000002c0)='overlay\x00', &(0x7f0000000040)='.\x00', 0x0, &(0x7f0000000540), 0x0) (async) mkdirat(r0, &(0x7f0000000540)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) rename(&(0x7f00000003c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00') lchown(&(0x7f00000000c0)='./file0\x00', r1, r2) compat_40_mount(&(0x7f0000000480)='ext2fs\x00', &(0x7f0000000600)='./file0\x00', 0x400, &(0x7f00000006c0)="89f4fbd11ae3c6f5ac66bedc3d7e535313c8ec72db499186f58fa0dd4a7a9a9e4e2fbc0e11afccfe9e975b0ed3d8731bd6eede9901d3f92bf14994ab0cc34837e7d59fcdaa865b142c4bc36bdd6771f7cc7a79f1518425585023996c4c85fac2c5ddef0909dbdab5be974001a82a3458b64e9706eace711d4f745d3afe3f441080ad4e005da9924c9735701740d30988d4740dd7b1916db31c50f778c2d20a160b7460936debf173ef") (async, rerun: 32) compat_40_mount(&(0x7f0000000180)='ptyfs\x00', &(0x7f00000002c0)='./file0\x00', 0x0, &(0x7f0000000300)) (async, rerun: 32) open$dir(&(0x7f0000000680)='./file0\x00', 0x40000, 0x10) (async, rerun: 32) lseek(0xffffffffffffffff, 0x0, 0x0, 0x0) (rerun: 32) pipe(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 32) r5 = getpid() (rerun: 32) fktrace(r3, 0x0, 0xf0709cfa615b9be3, r5) (async) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) __mount50(&(0x7f00000002c0)='overlay\x00', &(0x7f0000000040)='.\x00', 0x0, &(0x7f0000000540), 0x0) compat_40_mount(&(0x7f0000000000)='tmpfs\x00', &(0x7f00000003c0)='.\x00', 0x0, &(0x7f0000000140)="01") __mount50(&(0x7f0000000440)='smbfs\x00', &(0x7f0000000500)='./file0\x00', 0x80, &(0x7f0000000340), 0x0) (async) r6 = socket(0x2, 0x3, 0x0) ioctl$FIOSEEKHOLE(0xffffffffffffffff, 0x80906979, &(0x7f0000000180)=0x8000000000000031) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) ioctl$FIOSEEKHOLE(r6, 0x80906919, &(0x7f0000000180)) (async, rerun: 32) fsync(r4) (rerun: 32) socket(0x1f, 0x5, 0x0) ioctl$FIOSEEKHOLE(r3, 0x80906932, &(0x7f00000004c0)=0x4) (async) compat_40_mount(&(0x7f0000001ac0)='ffs\x00', &(0x7f00000003c0)='.\x00', 0x10000000, &(0x7f0000000240)="d8d8a6152d5e28d23ebbe079ac95544bcae2dbeff1b2df09750bf787751be9816193e733283c7ff6f2d62dc736522487a82c47f4baaae5f04518") 3.403689943s ago: executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) (async, rerun: 32) compat_43_ocreat(&(0x7f0000000000)='./file0\x00', 0x0) (async, rerun: 32) r1 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) compat_90_fstatvfs1(r1, &(0x7f0000001500), 0x3) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x0}, 0x10) sendmsg(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[], 0x10}, 0x0) 2.443797991s ago: executing program 3: open(&(0x7f0000000040)='./file0\x00', 0x200, 0x0) ioctl$FIOSEEKHOLE(0xffffffffffffffff, 0xc0986981, 0x0) mknod(&(0x7f0000000080)='./file0\x00', 0x0, 0x40000802) __mount50(&(0x7f00000002c0)='overlay\x00', &(0x7f0000000040)='.\x00', 0x0, &(0x7f0000000540), 0x0) mknod(0x0, 0x0, 0x4f4b) socket$inet(0x2, 0x2, 0x0) compat_50_quotactl(&(0x7f0000000000)='./file0\x00', 0x10001, 0x0, &(0x7f0000000080)) 2.247532391s ago: executing program 4: compat_50___msgctl13$IPC_STAT(0x0, 0x2, &(0x7f0000000380)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x0, 0xffffffffffffc840, 0x0, 0xfffa}, 0x731, 0x209, 0xffff}}) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)}, {&(0x7f0000001080)}], 0x2}, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000440)=@abs={0x0, 0x0, 0x2}, 0x8, &(0x7f0000000200)}, 0x0) compat_40_mount(0x0, 0x0, 0x0, 0x0) symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00') socket$unix(0x1, 0x2, 0x0) mknod(&(0x7f0000000480)='./file0\x00', 0x2000, 0x1733) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIOGETOWN(r0, 0x2000427e, 0x0) ioctl$FIOASYNC(r0, 0x40044266, &(0x7f0000000000)) symlink(0x0, 0x0) modctl$MODCTL_UNLOAD(0x2, 0x0) ioctl$FIOSEEKHOLE(0xffffffffffffffff, 0xc1206950, &(0x7f0000000180)=0x8000000000000032) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = socket(0x2, 0x3, 0x0) ioctl$FIOSEEKHOLE(r1, 0x8040691a, &(0x7f0000000180)) compat_40_mount(&(0x7f0000000000)='v7fs\x00', 0x0, 0x0, 0x0) r2 = socket(0x1f, 0x5, 0x2) getsockname$unix(r2, 0x0, 0x0) compat_40_mount(&(0x7f0000000200)='procfs\x00', &(0x7f00000000c0)='.\x00', 0x0, &(0x7f00000002c0)="01") r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_timeval(r3, 0xffff, 0x0, 0x0, 0x0) ioctl$FIOSEEKHOLE(0xffffffffffffffff, 0x8018698d, &(0x7f0000000100)=0x8000000000000031) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r4 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) compat_43_ogetdirentries(r4, 0x0, 0x0, 0x0) r5 = socket(0x1f, 0x40000003, 0x0) ioctl$FIOGETBMAP(r5, 0xc0386207, &(0x7f0000000000)) r6 = socket(0x18, 0x2, 0x0) getsockname$inet(r6, &(0x7f0000000080), 0x0) 1.527615963s ago: executing program 0: compat_43_osetrlimit(0x0, &(0x7f0000000000)) open(0x0, 0x0, 0x0) r0 = getsid(0x0) r1 = getsid(0x0) r2 = getsid(0x0) ptrace(0x9, r2, 0x0, 0x0) compat_50_wait4(0x0, 0x0, 0x0, 0x0) ptrace(0xe, r1, 0x0, 0x0) compat_50_wait4(0x0, 0x0, 0x0, 0x0) r3 = semget$private(0x0, 0x4000000009, 0x0) semop(r3, &(0x7f0000000500)=[{0x0, 0xb}, {}], 0x2) compat_50_____semctl13$IPC_RMID(r3, 0x0, 0x0) semop(r3, &(0x7f0000000040)=[{0x2, 0xd62, 0x400}, {0x0, 0xbf66}, {0x4, 0x7, 0x1800}, {0x4, 0x1}, {0x3, 0x3, 0x1800}, {}], 0x6) ptrace(0xa, r0, 0x0, 0x0) __clone(0x4d00, 0x0) 1.196277205s ago: executing program 4: modctl$MODCTL_UNLOAD(0x2, 0x0) modctl$MODCTL_UNLOAD(0x1, &(0x7f0000000080)="9f729aea633810f8e3fc928f34c8d42214387a018abb9980ce3deb0db203b4d75040fd73c57187d6244ab2dda94299d61cde38413ea06fd7d0f5f95dbb365b1c18ced44fdf8d13c78caa") modctl$MODCTL_UNLOAD(0x2, &(0x7f0000000000)) 361.483954ms ago: executing program 1: symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00') (async) symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00') open(&(0x7f0000000180)='./file0/file0\x00', 0x40, 0x80) (async) open(&(0x7f0000000180)='./file0/file0\x00', 0x40, 0x80) fchroot(0xffffffffffffffff) compat_40_mount(&(0x7f0000000000)='tmpfs\x00', &(0x7f00000003c0)='.\x00', 0x0, &(0x7f0000000140)="01") symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00') mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x18, 0x1, 0x0) setsockopt(r0, 0x1000000029, 0xc, &(0x7f0000002a80)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) setsockopt(r0, 0x1000000029, 0xd, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) (async) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) getsockname$inet(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000000)=0xfffffffffffffe22) r1 = socket(0x800000018, 0x2, 0x0) r2 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil) munmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000) (async) munmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000) shmat(r2, &(0x7f0000ffd000/0x1000)=nil, 0x0) madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) bind$unix(r1, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) fchownat(0xffffffffffffffff, &(0x7f00000000c0)='./file0/file0\x00', 0xffffffffffffffff, 0x0, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x6000, 0x6da) __posix_rename(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./bus\x00') (async) __posix_rename(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./bus\x00') __stat50(&(0x7f00000001c0)='./file0/file0\x00', &(0x7f0000000000)) (async) __stat50(&(0x7f00000001c0)='./file0/file0\x00', &(0x7f0000000000)={0x0}) mknod(&(0x7f00000011c0)='./file0\x00', 0x2000, r3) ktrace(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) (async) ktrace(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) (async) open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) unmount(&(0x7f0000000000)='./file0\x00', 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0x0, 0xe03) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3c0}, 0x0) (async) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3c0}, 0x0) mprotect(&(0x7f0000725000/0x2000)=nil, 0x2000, 0x0) (async) mprotect(&(0x7f0000725000/0x2000)=nil, 0x2000, 0x0) mlockall(0x3) 41.916483ms ago: executing program 2: symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00') (async, rerun: 64) compat_50___msgctl13$IPC_STAT(0x0, 0x2, &(0x7f0000000280)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200), 0x0, 0x0, 0xffff}}) (rerun: 64) lchown(&(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0) compat_40_mount(&(0x7f0000000000)='nilfs\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, &(0x7f00000001c0)) (async, rerun: 32) r0 = socket(0x18, 0x3, 0x0) (rerun: 32) __clock_getres50(0x0, 0x0) (async) setsockopt(r0, 0x1000000029, 0x13, &(0x7f0000000000)="5ab7776a", 0x4) (async) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0, 0x0) (async) compat_43_ocreat(0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) ioctl$FIOSEEKHOLE(r1, 0x8018698d, &(0x7f0000000100)) (async) open(0x0, 0x0, 0x0) (async) open(&(0x7f00000000c0)='./file0\x00', 0x8000000000020e, 0x0) (async) __mount50(&(0x7f00000002c0)='overlay\x00', &(0x7f0000000840)='.\x00', 0x100000, &(0x7f0000000540), 0x0) (async) execve(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) compat_30_getfh(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)) (async) __lstat50(&(0x7f0000000180)='./file0\x00', &(0x7f0000000300)) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) open(&(0x7f00000000c0)='./file0\x00', 0x80000000000206, 0x0) (async) r2 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) ioctl$FIOSEEKHOLE(r2, 0x4004667f, 0x0) (async, rerun: 32) __fhopen40(&(0x7f0000000080)="047e96be822b6658ab4391f3070837ccc9f09148dc6d7da49c109790", 0x1c, 0x0) (rerun: 32) 0s ago: executing program 1: compat_40_mount(&(0x7f0000000040)='tmpfs\x00', &(0x7f00000000c0)='.\x00', 0x0, &(0x7f0000000200)="01") symlink(&(0x7f00000003c0)='./file0/file0\x00', &(0x7f0000000380)='.\x02\x00') mknod(&(0x7f00000000c0)='./bus\x00', 0x2000, 0x4f4b) mknod(&(0x7f00000000c0)='./file0\x00', 0x2000, 0x4100) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) socket(0x26, 0x20000000, 0x8) ioctl$FIOASYNC(r0, 0x80085761, &(0x7f0000000040)=0x3) r1 = open$dir(&(0x7f0000000600)='./bus\x00', 0x1010000, 0x800) execve(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000440)=[&(0x7f0000000180)='tmpfs\x00', &(0x7f00000001c0)=',-\'^\x00', &(0x7f0000000240)='tmpfs\x00', &(0x7f0000000280)='\x00', &(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000300)='\'[$-\x00', &(0x7f0000000340)='\xa4\x00', &(0x7f0000000400)='tmpfs\x00'], &(0x7f0000000580)=[&(0x7f0000000480)='.${!\x00', 0x0, &(0x7f0000000500)='tmpfs\x00', &(0x7f00000005c0)='&\\\x9c\xfa\x84\xc1.\x00']) linkat(r1, &(0x7f0000000080)='./file0/file0\x00', r1, &(0x7f0000000100)='.\x02\x00', 0x400) mknod(&(0x7f0000000200)='./file0\x00', 0x2000, 0x0) r2 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) __futimes50(r2, &(0x7f0000000380)={0x0, 0x7fffffff}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) unmount(&(0x7f0000000000)='./file0\x00', 0x255a0100) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.164' (ED25519) to the list of known hosts. 2024/06/21 11:45:45 fuzzer started 2024/06/21 11:45:46 dialing manager at 10.128.0.163:30040 2024/06/21 11:45:46 starting 6 executor processes [ 63.6362297] uhub0: device problem, disabling port 1 [ 64.9162141] WARNING: defaulted mmap() share type to MAP_SHARED (pid 1577 command syz-executor.3) [ 68.5078067] tap4: detached [ 70.1185492] WARNING: defaulted mmap() share type to MAP_PRIVATE (pid 1236 command syz-executor.3) [ 70.1986012] tap0: detached [ 77.7021051] tap5: detached [ 91.0783664] tap4: detached [ 91.7286719] tap3: detached [ 94.5599978] tap1: detached [ 97.4913715] WARNING: defaulted mmap() share type to MAP_SHARED (pid 1227 command syz-executor.5) [ 105.6452332] WARNING: defaulted mmap() share type to MAP_PRIVATE (pid 1971 command syz-executor.3) [ 105.8953172] tap4: detached [ 106.0653893] tap0: detached [ 107.9162813] tap2: detached [ 109.5770514] tap1: detached [ 110.1272903] tap5: detached [ 111.6580108] Mutex error: mutex_vector_enter,520: locking against myself [ 111.6580108] lock address : ffff830013b41060 [ 111.6580108] type : sleep/adaptive [ 111.6580108] initialized : netbsd:dqget+0xb30 [ 111.6580108] shared holds : 0 exclusive: 1 [ 111.6580108] shares wanted: 0 exclusive: 1 [ 111.6580108] relevant cpu : 0 last held: 0 [ 111.6580108] relevant lwp : 0xffff830012275240 last held: 0xffff830012275240 [ 111.6580108] last locked* : netbsd:q1sync+0x56e [ 111.6580108] unlocked : netbsd:chkdq1+0x1b75 [ 111.6580108] owner field : 0xffff830012275240 wait/spin: 0/0 [ 111.6580108] Turnstile: no active turnstile for this lock. [ 111.7564360] panic: LOCKDEBUG: Mutex error: mutex_vector_enter,520: locking against myself [ 111.7646643] cpu0: Begin traceback... [ 111.7880564] vpanic() at netbsd:vpanic+0xc9d [ 111.8480832] panic() at netbsd:panic+0x1b3 [ 111.9181183] lockdebug_abort1() at netbsd:lockdebug_abort1+0x1004 [ 111.9881483] mutex_enter() at netbsd:mutex_enter+0x1fa [ 112.0582052] chkdq1() at netbsd:chkdq1+0x13c2 [ 112.1182390] chkdq() at netbsd:chkdq+0x263 [ 112.1882580] ffs_alloc() at netbsd:ffs_alloc+0xb86 [ 112.2482728] ffs_balloc() at netbsd:ffs_balloc+0x35d1 [ 112.3183133] ufs_gop_alloc() at netbsd:ufs_gop_alloc+0x38d [ 112.3783327] ufs_balloc_range() at netbsd:ufs_balloc_range+0x81d [ 112.4483671] ffs_write() at netbsd:ffs_write+0x225d [ 112.5083945] layer_bypass() at netbsd:layer_bypass+0x860 [ 112.5784552] VOP_WRITE() at netbsd:VOP_WRITE+0x374 [ 112.6384700] dq1sync() at netbsd:dq1sync+0x55e [ 112.6984818] q1sync() at netbsd:q1sync+0x675 [ 112.7685152] qsync() at netbsd:qsync+0x142 [ 112.8285452] ffs_sync() at netbsd:ffs_sync+0xce3 [ 112.8985760] sched_sync() at netbsd:sched_sync+0x707 [ 112.9085786] cpu0: End traceback... [ 112.9197911] fatal breakpoint trap in supervisor mode [ 112.9197911] trap type 1 code 0 rip 0xffffffff8023687d cs 0x8 rflags 0x282 cr2 0x7a1333754440 ilevel 0 rsp 0xffff8300c778a870 [ 112.9357167] curlwp 0xffff830012275240 pid 0.196 lowest kstack 0xffff8300c77842c0 Stopped in pid 0.196 (system) at netbsd:breakpoint+0x5: leave ? breakpoint() at netbsd:breakpoint+0x5 vpanic() at netbsd:vpanic+0xc9d panic() at netbsd:panic+0x1b3 lockdebug_abort1() at netbsd:lockdebug_abort1+0x1004 mutex_enter() at netbsd:mutex_enter+0x1fa chkdq1() at netbsd:chkdq1+0x13c2 chkdq() at netbsd:chkdq+0x263 ffs_alloc() at netbsd:ffs_alloc+0xb86 ffs_balloc() at netbsd:ffs_balloc+0x35d1 ufs_gop_alloc() at netbsd:ufs_gop_alloc+0x38d ufs_balloc_range() at netbsd:ufs_balloc_range+0x81d ffs_write() at netbsd:ffs_write+0x225d layer_bypass() at netbsd:layer_bypass+0x860 VOP_WRITE() at netbsd:VOP_WRITE+0x374 dq1sync() at netbsd:dq1sync+0x55e q1sync() at netbsd:q1sync+0x675 qsync() at netbsd:qsync+0x142 ffs_sync() at netbsd:ffs_sync+0xce3 sched_sync() at netbsd:sched_sync+0x707 Panic string: LOCKDEBUG: Mutex error: mutex_vector_enter,520: locking against myself PID LID S CPU FLAGS STRUCT LWP * NAME WAIT 2354 2354 2 0 0 ffff830013907300 ndp 2488 2488 2 0 40000 ffff830013907740 syz-executor.4 2227 2227 2 0 11000000 ffff8300139be700 syz-executor.0 1751 2378 2 1 100100 ffff830013907b80 syz-executor.3 1751 1488 2 0 100100 ffff8300135fb180 syz-executor.3 1751 1751 2 0 10040040 ffff830013717a80 syz-executor.3 2101 2101 3 1 180 ffff830013877280 syz-executor.5 wait 2228 > 2228 7 1 0 ffff830012ca9940 syz-executor.1 2091 2091 2 1 0 ffff8300135719c0 syz-executor.2 837 837 3 1 180 ffff830013717200 syz-executor.4 nanoslp 2267 2267 4 0 1000100 ffff8300137aaac0 syz-executor.0 1638 1638 3 1 180 ffff8300138776c0 syz-executor.3 nanoslp 1496 1496 3 1 180 ffff8300134af540 syz-executor.1 parked 1491 1470 2 0 1140000 ffff83001362ba40 syz-executor.2 1491 1491 2 0 11000040 ffff8300134af980 syz-executor.2 1223 1870 3 1 180 ffff8300137aa240 syz-fuzzer wait 1223 460 3 1 180 ffff830013717640 syz-fuzzer wait 1223 1207 3 1 180 ffff83001362b1c0 syz-fuzzer parked 1223 1376 3 1 180 ffff8300135fba00 syz-fuzzer wait 1223 1084 3 1 180 ffff8300135fb5c0 syz-fuzzer wait 1223 1384 3 1 180 ffff830013571580 syz-fuzzer parked 1223 929 3 0 180 ffff8300134af100 syz-fuzzer wait 1223 1244 3 1 180 ffff830012ca9500 syz-fuzzer parked 1223 991 3 1 180 ffff830012ca90c0 syz-fuzzer parked 1223 449 3 0 180 ffff830012be9900 syz-fuzzer wait 1223 942 3 1 180 ffff830012be94c0 syz-fuzzer parked 1223 1233 3 1 180 ffff830012be9080 syz-fuzzer kqueue 1223 1237 2 0 140 ffff830012bb88c0 syz-fuzzer 1223 1223 3 1 180 ffff83001233f2c0 syz-fuzzer parked 1238 1238 3 0 180 ffff8300123116c0 sshd select 1225 1225 3 1 180 ffff830012311b00 getty nanoslp 1222 1222 3 0 180 ffff830012311280 getty nanoslp 944 944 3 0 180 ffff830012275ac0 getty nanoslp 1184 1184 3 1 180 ffff8300121d7200 getty ttyraw 1103 1103 3 0 180 ffff830012521300 sshd select 1088 1088 3 1 180 ffff830012bb8480 powerd kqueue 699 699 3 0 180 ffff83001233fb40 syslogd kqueue 746 746 3 0 180 ffff830012bb8040 dhcpcd poll 745 745 3 0 180 ffff830012521b80 dhcpcd poll 584 584 3 1 180 ffff830012554bc0 dhcpcd poll 602 602 3 0 180 ffff83001233f700 dhcpcd poll 487 487 3 1 180 ffff830012554780 dhcpcd poll 292 292 3 0 180 ffff830012554340 dhcpcd poll 485 485 3 1 180 ffff830012521740 dhcpcd poll 1 1 3 1 180 ffff830011e53100 init wait 0 1663 5 1 200 ffff83001362b600 (zombie) 0 674 3 0 200 ffff8300121d7640 physiod physiod 0 > 196 7 0 240 ffff830012275240 ioflush 0 195 3 1 200 ffff830012275680 pooldrain pooldrain 0 194 3 0 200 ffff8300121d7a80 pgdaemon pgdaemon 0 167 3 0 200 ffff8300121a7a40 usb7 usbevt 0 172 3 0 200 ffff8300121a7600 usb6 usbevt 0 170 3 0 200 ffff8300121a71c0 usb5 usbevt 0 168 3 0 200 ffff83001211ba00 usb4 usbevt 0 166 3 0 200 ffff83001211b5c0 usb3 usbevt 0 165 3 0 200 ffff83001211b180 usb2 usbevt 0 31 3 0 200 ffff83001206b9c0 usb1 usbevt 0 63 3 0 200 ffff83001206b580 usb0 usbevt 0 126 3 1 200 ffff83001206b140 usbtask-dr usbtsk 0 125 3 1 200 ffff830011e53980 usbtask-hc usbtsk 0 124 3 0 200 ffff8300103d3b00 swwreboot swwreboot 0 123 3 1 200 ffff830011e53540 npfgc0 npfgcw 0 122 3 1 200 ffff830011e48940 rt_free rt_free 0 121 3 1 200 ffff830011e48500 unpgc unpgc 0 120 3 1 200 ffff830011e480c0 key_timehandler key_timehandler 0 119 3 1 200 ffff830011e43900 icmp6_wqinput/1 icmp6_wqinput 0 118 3 0 200 ffff830011e434c0 icmp6_wqinput/0 icmp6_wqinput 0 117 3 1 200 ffff830011e43080 nd6_timer nd6_timer 0 116 3 1 200 ffff830011cccbc0 carp6_wqinput/1 carp6_wqinput 0 115 3 0 200 ffff830011ccc780 carp6_wqinput/0 carp6_wqinput 0 114 3 1 200 ffff830011ccc340 carp_wqinput/1 carp_wqinput 0 113 3 0 200 ffff830011ccd8c0 carp_wqinput/0 carp_wqinput 0 112 3 1 200 ffff830011ccd480 icmp_wqinput/1 icmp_wqinput 0 111 3 0 200 ffff830011cc9b80 icmp_wqinput/0 icmp_wqinput 0 110 3 1 200 ffff830011cc9740 rt_timer rt_timer 0 109 3 1 200 ffff830011ccd040 vmem_rehash vmem_rehash 0 100 3 0 200 ffff830011cc9300 entbutler entropy 0 99 3 1 200 ffff8300117c0b40 viomb balloon 0 98 3 1 200 ffff8300117c0700 vioif0_txrx/1 vioif0_txrx 0 97 3 0 200 ffff8300117c02c0 vioif0_txrx/0 vioif0_txrx 0 30 3 0 200 ffff8300103d36c0 scsibus0 sccomp 0 29 3 0 200 ffff8300103d3280 pms0 pmsreset 0 28 3 1 200 ffff8300103baac0 xcall/1 xcall 0 27 1 1 200 ffff8300103ba680 softser/1 0 > 26 7 1 200 ffff8300103ba240 softclk/1 0 25 1 1 200 ffff8300103b7a80 softbio/1 0 24 1 1 200 ffff8300103b7640 softnet/1 0 23 1 1 201 ffff8300103b7200 idle/1 0 22 3 0 200 ffff83000f1d2a40 lnxsyswq lnxsyswq 0 21 3 0 200 ffff83000f1d2600 lnxubdwq lnxubdwq 0 20 3 0 200 ffff83000f1d21c0 lnxpwrwq lnxpwrwq 0 19 3 0 200 ffff83000f1d1a00 lnxlngwq lnxlngwq 0 18 3 0 200 ffff83000f1d15c0 lnxhipwq lnxhipwq 0 17 3 0 200 ffff83000f1d1180 lnxrcugc lnxrcugc 0 16 3 0 200 ffff83000f1ca9c0 sysmon smtaskq 0 15 3 0 200 ffff83000f1ca580 pmfsuspend pmfsuspend 0 14 3 0 200 ffff83000f1ca140 pmfevent pmfevent 0 13 3 0 200 ffff83000f1c8980 sopendfree sopendfr 0 12 3 0 200 ffff83000f1c8540 ifwdog ifwdog 0 11 3 1 200 ffff83000f1c8100 iflnkst iflnkst 0 10 3 1 200 ffff83000f1be940 nfssilly nfssilly 0 9 3 0 200 ffff83000f1be500 pooldisp pooldisp 0 8 3 1 200 ffff83000f1be0c0 modunload mod_unld 0 7 3 0 200 ffff83000ebc9900 xcall/0 xcall 0 6 1 0 200 ffff83000ebc94c0 softser/0 0 5 1 0 200 ffff83000ebc9080 softclk/0 0 4 1 0 200 ffff83000ebc88c0 softbio/0 0 3 2 0 200 ffff83000ebc8480 softnet/0 0 2 1 0 201 ffff83000ebc8040 idle/0 0 0 3 1 200 ffffffff86a6f9c0 swapper uvm [Locks tracked through LWPs] ****** LWP 2354.2354 (ndp) @ 0xffff830013907300, l_stat=2 *** Locks held: * Lock 0 (initialized at netbsd:filedesc_ctor+0x8e) lock address : ffff8300137a6380 type : sleep/adaptive initialized : netbsd:filedesc_ctor+0x8e shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 0 relevant cpu : 0 last held: 0 relevant lwp : 0xffff830013907300 last held: 0xffff830013907300 last locked* : netbsd:fd_alloc+0x177 unlocked : netbsd:fd_close+0xcb6 owner field : 0xffff830013907300 wait/spin: 0/0 Turnstile: no active turnstile for this lock. *** Locks wanted: none ****** LWP 2488.2488 (syz-executor.4) @ 0xffff830013907740, l_stat=2 *** Locks held: * Lock 0 (initialized at netbsd:pmap_ctor+0xc0) lock address : ffff830012be38c0 type : sleep/adaptive initialized : netbsd:pmap_ctor+0xc0 shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 0 relevant cpu : 0 last held: 0 relevant lwp : 0xffff830013907740 last held: 0xffff830013907740 last locked* : netbsd:pmap_enter_ma+0x11ce unlocked : netbsd:pmap_extract+0x72d owner field : 0xffff830013907740 wait/spin: 0/0 Turnstile: no active turnstile for this lock. *** Locks wanted: none ****** LWP 2227.2227 (syz-executor.0) @ 0xffff8300139be700, l_stat=2 *** Locks held: * Lock 0 (initialized at netbsd:fork1+0x972) lock address : ffff8300137a5b90 type : sleep/adaptive initialized : netbsd:fork1+0x972 shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 0 relevant cpu : 0 last held: 0 relevant lwp : 0xffff8300139be700 last held: 0xffff8300139be700 last locked* : netbsd:exit1+0xac2 unlocked : 0 owner/count : 0xffff8300139be700 flags : 0x0000000000000004 Turnstile: no active turnstile for this lock. *** Locks wanted: none ****** LWP 2228.2228 (syz-executor.1) @ 0xffff830012ca9940, l_stat=7 *** Locks held: * Lock 0 (initialized at netbsd:vcache_alloc+0xc6) lock address : ffff830013924680 type : sleep/adaptive initialized : netbsd:vcache_alloc+0xc6 shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 0 relevant cpu : 1 last held: 1 relevant lwp : 0xffff830012ca9940 last held: 0xffff830012ca9940 last locked* : netbsd:genfs_lock+0x1d6 unlocked : netbsd:genfs_unlock+0x55 owner/count : 000000000000000000 flags : 000000000000000000 Turnstile: no active turnstile for this lock. * Lock 1 (initialized at netbsd:bufinit+0x64) lock address : netbsd:bufcache_lock type : sleep/adaptive initialized : netbsd:bufinit+0x64 shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 0 relevant cpu : 1 last held: 1 relevant lwp : 0xffff830012ca9940 last held: 0xffff830012ca9940 last locked* : netbsd:brelse+0x4d unlocked : netbsd:breadn+0x444 owner field : 000000000000000000 wait/spin: 0/0 Turnstile: no active turnstile for this lock. *** Locks wanted: none ****** LWP 745.745 (dhcpcd) @ 0xffff830012521b80, l_stat=3 *** Locks held: none *** Locks wanted: * Lock 0 (initialized at netbsd:module_hook_init+0x43) lock address : netbsd:module_hook type : sleep/adaptive initialized : netbsd:module_hook_init+0x43 shared holds : 0 exclusive: 0 shares wanted: 0 exclusive: 0 relevant cpu : 0 last held: 0 relevant lwp : 0xffff830012521b80 last held: 000000000000000000 last locked : 0 unlocked* : 0 owner field : 000000000000000000 wait/spin: 0/0 Turnstile: no active turnstile for this lock. ****** LWP 584.584 (dhcpcd) @ 0xffff830012554bc0, l_stat=3 *** Locks held: none *** Locks wanted: * Lock 0 (initialized at netbsd:module_hook_init+0x43) lock address : netbsd:module_hook type : sleep/adaptive initialized : netbsd:module_hook_init+0x43 shared holds : 0 exclusive: 0 shares wanted: 0 exclusive: 0 relevant cpu : 1 last held: 0 relevant lwp : 0xffff830012554bc0 last held: 000000000000000000 last locked : 0 unlocked* : 0 owner field : 000000000000000000 wait/spin: 0/0 Turnstile: no active turnstile for this lock. ****** LWP 292.292 (dhcpcd) @ 0xffff830012554340, l_stat=3 *** Locks held: none *** Locks wanted: * Lock 0 (initialized at netbsd:module_hook_init+0x43) lock address : netbsd:module_hook type : sleep/adaptive initialized : netbsd:module_hook_init+0x43 shared holds : 0 exclusive: 0 shares wanted: 0 exclusive: 0 relevant cpu : 0 last held: 0 relevant lwp : 0xffff830012554340 last held: 000000000000000000 last locked : 0 unlocked* : 0 owner field : 000000000000000000 wait/spin: 0/0 Turnstile: no active turnstile for this lock. ****** LWP 485.485 (dhcpcd) @ 0xffff830012521740, l_stat=3 *** Locks held: none *** Locks wanted: * Lock 0 (initialized at netbsd:module_hook_init+0x43) lock address : netbsd:module_hook type : sleep/adaptive initialized : netbsd:module_hook_init+0x43 shared holds : 0 exclusive: 0 shares wanted: 0 exclusive: 0 relevant cpu : 1 last held: 0 relevant lwp : 0xffff830012521740 last held: 000000000000000000 last locked : 0 unlocked* : 0 owner field : 000000000000000000 wait/spin: 0/0 Turnstile: no active turnstile for this lock. ****** LWP 0.196 (ioflush) @ 0xffff830012275240, l_stat=7 *** Locks held: * Lock 0 (initialized at netbsd:vcache_alloc+0xc6) lock address : ffff8300132f9200 type : sleep/adaptive initialized : netbsd:vcache_alloc+0xc6 shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 0 relevant cpu : 0 last held: 0 relevant lwp : 0xffff830012275240 last held: 0xffff830012275240 last locked* : netbsd:genfs_lock+0x1d6 unlocked : netbsd:genfs_unlock+0x55 owner/count : 0xffff830012275240 flags : 0x0000000000000004 Turnstile: no active turnstile for this lock. * Lock 1 (initialized at netbsd:dqget+0xb30) lock address : ffff830013b41060 type : sleep/adaptive initialized : netbsd:dqget+0xb30 shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 1 relevant cpu : 0 last held: 0 relevant lwp : 0xffff830012275240 last held: 0xffff830012275240 last locked* : netbsd:q1sync+0x56e unlocked : netbsd:chkdq1+0x1b75 owner field : 0xffff830012275240 wait/spin: 0/0 Turnstile: no active turnstile for this lock. * Lock 2 (initialized at netbsd:vcache_alloc+0xc6) lock address : ffff830013924f80 type : sleep/adaptive initialized : netbsd:vcache_alloc+0xc6 shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 0 relevant cpu : 0 last held: 0 relevant lwp : 0xffff830012275240 last held: 0xffff830012275240 last locked* : netbsd:genfs_lock+0x1d6 unlocked : netbsd:genfs_unlock+0x55 owner/count : 0xffff830012275240 flags : 0x0000000000000004 Turnstile: no active turnstile for this lock. * Lock 3 (initialized at netbsd:genfs_node_init+0x6e) lock address : ffff830013912cc8 type : sleep/adaptive initialized : netbsd:genfs_node_init+0x6e shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 0 relevant cpu : 0 last held: 0 relevant lwp : 0xffff830012275240 last held: 0xffff830012275240 last locked* : netbsd:ufs_balloc_range+0x52d unlocked : 0 owner/count : 0xffff830012275240 flags : 0x0000000000000004 Turnstile: no active turnstile for this lock. *** Locks wanted: none ****** LWP 0.26 (softclk/1) @ 0xffff8300103ba240, l_stat=7 *** Locks held: none *** Locks wanted: * Lock 0 (initialized at netbsd:module_hook_init+0x43) lock address : netbsd:module_hook type : sleep/adaptive initialized : netbsd:module_hook_init+0x43 shared holds : 0 exclusive: 0 shares wanted: 0 exclusive: 0 relevant cpu : 1 last held: 0 relevant lwp : 0xffff8300103ba240 last held: 000000000000000000 last locked : 0 unlocked* : 0 owner field : 000000000000000000 wait/spin: 0/0 Turnstile: no active turnstile for this lock. ****** LWP 0.11 (iflnkst) @ 0xffff83000f1c8100, l_stat=3 *** Locks held: none *** Locks wanted: * Lock 0 (initialized at netbsd:module_hook_init+0x43) lock address : netbsd:module_hook type : sleep/adaptive initialized : netbsd:module_hook_init+0x43 shared holds : 0 exclusive: 0 shares wanted: 0 exclusive: 0 relevant cpu : 1 last held: 0 relevant lwp : 0xffff83000f1c8100 last held: 000000000000000000 last locked : 0 unlocked* : 0 owner field : 000000000000000000 wait/spin: 0/0 Turnstile: no active turnstile for this lock. ****** LWP 0.5 (softclk/0) @ 0xffff83000ebc9080, l_stat=1 *** Locks held: none *** Locks wanted: * Lock 0 (initialized at netbsd:module_hook_init+0x43) lock address : netbsd:module_hook type : sleep/adaptive initialized : netbsd:module_hook_init+0x43 shared holds : 0 exclusive: 0 shares wanted: 0 exclusive: 0 relevant cpu : 0 last held: 0 relevant lwp : 0xffff83000ebc9080 last held: 000000000000000000 last locked : 0 unlocked* : 0 owner field : 000000000000000000 wait/spin: 0/0 Turnstile: no active turnstile for this lock. ****** LWP 0.0 (swapper) @ 0xffffffff86a6f9c0, l_stat=3 *** Locks held: none *** Locks wanted: * Lock 0 (initialized at netbsd:module_hook_init+0x43) lock address : netbsd:module_hook type : sleep/adaptive initialized : netbsd:module_hook_init+0x43 shared holds : 0 exclusive: 0 shares wanted: 0 exclusive: 0 relevant cpu : 1 last held: 0 relevant lwp : 0xffffffff86a6f9c0 last held: 000000000000000000 last locked : 0 unlocked* : 0 owner field : 000000000000000000 wait/spin: 0/0 Turnstile: no active turnstile for this lock. [Locks tracked through CPUs] ******* Locks held on cpu0: * Lock 0 (initialized at netbsd:main+0x362) lock address : netbsd:kernel_lock type : spin initialized : netbsd:main+0x362 shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 0 relevant cpu : 0 last held: 0 relevant lwp : 0xffff830012275240 last held: 0xffff830012275240 last locked* : netbsd:VOP_WRITE+0x318 unlocked : netbsd:VOP_LOCK+0x7de curcpu holds : 1 wanted by: 000000000000000000 PAGE FLAG PQ UOBJECT UANON 0xffff830000017180 0001 00000000 0x0 0x0 0xffff830000017200 0041 00000000 0x0 0x0 0xffff830000017280 0041 00000000 0x0 0x0 0xffff830000017300 0041 00000000 0x0 0x0 0xffff830000017380 0041 00000000 0x0 0x0 0xffff830000017400 0041 00000000 0x0 0x0 0xffff830000017480 0041 00000000 0x0 0x0 0xffff830000017500 0041 00000000 0x0 0x0 0xffff830000017580 0041 00000000 0x0 0x0 0xffff830000017600 0041 00000000 0x0 0x0 0xffff830000017680 0041 00000000 0x0 0x0 0xffff830000017700 0041 00000000 0x0 0x0 0xffff830000017780 0041 00000000 0x0 0x0 0xffff830000017800 0041 00000000 0x0 0x0 0xffff830000017880 0041 00000000 0x0 0x0 0xffff830000017900 0041 00000000 0x0 0x0 0xffff830000017980 0041 00000000 0x0 0x0 0xffff830000017a00 0041 00000000 0x0 0x0 0xffff830000017a80 0041 00000000 0x0 0x0 0xffff830000017b00 0041 00000000 0x0 0x0 0xffff830000017b80 0041 00000000 0x0 0x0 0xffff830000017c00 0041 00000000 0x0 0x0 0xffff830000017c80 0041 00000000 0x0 0x0 0xffff830000017d00 0041 00000000 0x0 0x0 0xffff830000017d80 0041 00000000 0x0 0x0 0xffff830000017e00 0041 00000000 0x0 0x0 0xffff830000017e80 0041 00000000 0x0 0x0 0xffff830000017f00 0041 00000000 0x0 0x0 0xffff830000017f80 0041 00000000 0x0 0x0 0xffff830000018000 0041 00000000 0x0 0x0 0xffff830000018080 0041 00000000 0x0 0x0 0xffff830000018100 0041 00000000 0x0 0x0 0xffff830000018180 0041 00000000 0x0 0x0 0xffff830000018200 0041 00000000 0x0 0x0 0xffff830000018280 0041 00000000 0x0 0x0 0xffff830000018300 0041 00000000 0x0 0x0 0xffff830000018380 0041 00000000 0x0 0x0 0xffff830000018400 0041 00000000 0x0 0x0 0xffff830000018480 0041 00000000 0x0 0x0 0xffff830000018500 0041 00000000 0x0 0x0 0xffff830000018580 0041 00000000 0x0 0x0 0xffff830000018600 0041 00000000 0x0 0x0 0xffff830000018680 0041 00000000 0x0 0x0 0xffff830000018700 0041 00000000 0x0 0x0 0xffff830000018780 0041 00000000 0x0 0x0 0xffff830000018800 0041 00000000 0x0 0x0 0xffff830000018880 0041 00000000 0x0 0x0 0xffff830000018900 0041 00000000 0x0 0x0 0xffff830000018980 0041 00000000 0x0 0x0 0xffff830000018a00 0041 00000000 0x0 0x0 0xffff830000018a80 0041 00000000 0x0 0x0 0xffff830000018b00 0041 00000000 0x0 0x0 0xffff830000018b80 0041 00000000 0x0 0x0 0xffff830000018c00 0041 00000000 0x0 0x0 0xffff830000018c80 0041 00000000 0x0 0x0 0xffff830000018d00 0041 00000000 0x0 0x0 0xffff830000018d80 0041 00000000 0x0 0x0 0xffff830000018e00 0041 00000000 0x0 0x0 0xffff830000018e80 0041 00000000 0x0 0x0 0xffff830000018f00 0041 00000000 0x0 0x0 0xffff830000018f80 0041 00000000 0x0 0x0 0xffff830000019000 0041 00000000 0x0 0x0 0xffff830000019080 0041 00000000 0x0 0x0 0xffff830000019100 0041 00000000 0x0 0x0 0xffff830000019180 0041 00000000 0x0 0x0 0xffff830000019200 0041 00000000 0x0 0x0 0xffff830000019280 0041 00000000 0x0 0x0 0xffff830000019300 0041 00000000 0x0 0x0 0xffff830000019380 0041 00000000 0x0 0x0 0xffff830000019400 0041 00000000 0x0 0x0 0xffff830000019480 0041 00000000 0x0 0x0 0xffff830000019500 0041 00000000 0x0 0x0 0xffff830000019580 0041 00000000 0x0 0x0 0xffff830000019600 0041 00000000 0x0 0x0 0xffff830000019680 0041 00000000 0x0 0x0 0xffff830000019700 0041 00000000 0x0 0x0 0xffff830000019780 0041 00000000 0x0 0x0 0xffff830000019800 0041 00000000 0x0 0x0 0xffff830000019880 0041 00000000 0x0 0x0 0xffff830000019900 0041 00000000 0x0 0x0 0xffff830000019980 0041 00000000 0x0 0x0 0xffff830000019a00 0041 00000000 0x0 0x0 0xffff830000019a80 0041 00000000 0x0 0x0 0xffff830000019b00 0041 00000000 0x0 0x0 0xffff830000019b80 0041 00000000 0x0 0x0 0xffff830000019c00 0041 00000000 0x0 0x0 0xffff830000019c80 0041 00000000 0x0 0x0 0xffff830000019d00 0041 00000000 0x0 0x0 0xffff830000019d80 0041 00000000 0x0 0x0 0xffff830000019e00 0041 00000000 0x0 0x0 0xffff830000019e80 0041 00000000 0x0 0x0 0xffff830000019f00 0041 00000000 0x0 0x0 0xffff830000019f80 0041 00000000 0x0 0x0 0xffff83000001a000 0041 00000000 0x0 0x0 0xffff83000001a080 0041 00000000 0x0 0x0 0xffff83000001a100 0041 00000000 0x0 0x0 0xffff83000001a180 0041 00000000 0x0 0x0 0xffff83000001a200 0041 00000000 0x0 0x0 0xffff83000001a280 0041 00000000 0x0 0x0 0xffff83000001a300 0041 00000000 0x0 0x0 0xffff83000001a380 0041 00000000 0x0 0x0 0xffff83000001a400 0041 00000000 0x0 0x0 0xffff83000001a480 0041 00000000 0x0 0x0 0xffff83000001a500 0041 00000000 0x0 0x0 0xffff83000001a580 0041 00000000 0x0 0x0 0xffff83000001a600 0041 00000000 0x0 0x0 0xffff83000001a680 0041 00000000 0x0 0x0 0xffff83000001a700 0041 00000000 0x0 0x0 0xffff83000001a780 0041 00000000 0x0 0x0 0xffff83000001a800 0041 00000000 0x0 0x0 0xffff83000001a880 0041 00000000 0x0 0x0 0xffff83000001a900 0041 00000000 0x0 0x0 0xffff83000001a980 0041 00000000 0x0 0x0 0xffff83000001aa00 0041 00000000 0x0 0x0 0xffff83000001aa80 0041 00000000 0x0 0x0 0xffff83000001ab00 0041 00000000 0x0 0x0 0xffff83000001ab80 0041 00000000 0x0 0x0 0xffff83000001ac00 0041 00000000 0x0 0x0 0xffff83000001ac80 0041 00000000 0x0 0x0 0xffff83000001ad00 0041 00000000 0x0 0x0 0xffff83000001ad80 0041 00000000 0x0 0x0 0xffff83000001ae00 0041 00000000 0x0 0x0 0xffff83000001ae80 0041 00000000 0x0 0x0 0xffff83000001af00 0041 00000000 0x0 0x0 0xffff83000001af80 0041 00000000 0x0 0x0 0xffff83000001b000 0041 00000000 0x0 0x0 0xffff83000001b080 0041 00000000 0x0 0x0 0xffff83000001b100 0041 00000000 0x0 0x0 0xffff83000001b180 0041 00000000 0x0 0x0 0xffff83000001b200 0041 00000000 0x0 0x0 0xffff83000001b280 0041 00000000 0x0 0x0 0xffff83000001b300 0041 00000000 0x0 0x0 0xffff83000001b380 0041 00000000 0x0 0x0 0xffff83000001b400 0041 00000000 0x0 0x0 0xffff83000001b480 0041 00000000 0x0 0x0 0xffff83000001b500 0041 00000000 0x0 0x0 0xffff83000001b580 0041 00000000 0x0 0x0 0xffff83000001b600 0041 00000000 0x0 0x0 0xffff83000001b680 0041 00000000 0x0 0x0 0xffff83000001b700 0041 00000000 0x0 0x0 0xffff83000001b780 0041 00000000 0x0 0x0 0xffff83000001b800 0041 00000000 0x0 0x0 0xffff83000001b880 0041 00000000 0x0 0x0 0xffff83000001b900 0041 00000000 0x0 0x0 0xffff83000001b980 0041 00000000 0x0 0x0 0xffff83000001ba00 0041 00000000 0x0 0x0 0xffff83000001ba80 0041 00000000 0x0 0x0 0xffff83000001bb00 0041 00000000 0x0 0x0 0xffff83000001bb80 0041 00000000 0x0 0x0 0xffff83000001bc00 0041 00000000 0x0 0x0 0xffff83000001bc80 0041 00000000 0x0 0x0 0xffff83000001bd00 0041 00000000 0x0 0x0 0xffff83000001bd80 0041 00000000 0x0 0x0 0xffff83000001be00 0041 00000000 0x0 0x0 0xffff83000001be80 0041 00000000 0x0 0x0 0xffff83000001bf00 0041 00000000 0x0 0x0 0xffff83000001bf80 0041 00000000 0x0 0x0 0xffff83000001c000 0041 00000000 0x0 0x0 0xffff83000001c080 0041 00000000 0x0 0x0 0xffff83000001c100 0041 00000000 0x0 0x0 0xffff83000001c180 0041 00000000 0x0 0x0 0xffff83000001c200 0041 00000000 0x0 0x0 0xffff83000001c280 0041 00000000 0x0 0x0 0xffff83000001c300 0041 00000000 0x0 0x0 0xffff83000001c380 0041 00000000 0x0 0x0 0xffff83000001c400 0041 00000000 0x0 0x0 0xffff83000001c480 0041 00000000 0x0 0x0 0xffff83000001c500 0041 00000000 0x0 0x0 0xffff83000001c580 0041 00000000 0x0 0x0 0xffff83000001c600 0041 00000000 0x0 0x0 0xffff83000001c680 0041 00000000 0x0 0x0 0xffff83000001c700 0041 00000000 0x0 0x0 0xffff83000001c780 0041 00000000 0x0 0x0 0xffff83000001c800 0041 00000000 0x0 0x0 0xffff83000001c880 0041 00000000 0x0 0x0 0xffff83000001c900 0041 00000000 0x0 0x0 0xffff83000001c980 0041 00000000 0x0 0x0 0xffff83000001ca00 0041 00000000 0x0 0x0 0xffff83000001ca80 0041 00000000 0x0 0x0 0xffff83000001cb00 0041 00000000 0x0 0x0 0xffff83000001cb80 0041 00000000 0x0 0x0 0xffff83000001cc00 0041 00000000 0x0 0x0 0xffff83000001cc80 0041 00000000 0x0 0x0 0xffff83000001cd00 0041 00000000 0x0 0x0 0xffff83000001cd80 0041 00000000 0x0 0x0 0xffff83000001ce00 0041 00000000 0x0 0x0 0xffff83000001ce80 0041 00000000 0x0 0x0 0xffff83000001cf00 0041 00000000 0x0 0x0 0xffff83000001cf80 0001 00000000 0x0 0x0 0xffff83000001d000 0001 00000000 0x0 0x0 0xffff83000001d080 0001 00000000 0x0 0x0 0xffff83000001d100 0001 00000000 0x0 0x0 0xffff83000001d180 0001 00000000 0x0 0x0 0xffff83000001d200 0001 00000000 0x0 0x0 0xffff83000001d280 0001 00000000 0x0 0x0 0xffff83000001d300 0001 00000000 0x0 0x0 0xffff83000001d380 0001 00000000 0x0 0x0 0xffff83000001d400 0001 00000000 0x0 0x0 0xffff83000001d480 0001 00000000 0x0 0x0 0xffff83000001d500 0001 00000000 0x0 0x0 0xffff83000001d580 0001 00000000 0x0 0x0 0xffff83000001d600 0001 00000000 0x0 0x0 0xffff83000001d680 0001 00000000 0x0 0x0 0xffff83000001d700 0001 00000000 0x0 0x0 0xffff83000001d780 0001 00000000 0x0 0x0 0xffff83000001d800 0001 00000000 0x0 0x0 0xffff83000001d880 0001 00000000 0x0 0x0 0xffff83000001d900 0001 00000000 0x0 0x0 0xffff83000001d980 0001 00000000 0x0 0x0 0xffff83000001da00 0001 00000000 0x0 0x0 0xffff83000001da80 0001 00000000 0x0 0x0 0xffff83000001db00 0001 00000000 0x0 0x0 0xffff83000001db80 0001 00000000 0x0 0x0 0xffff83000001dc00 0001 00000000 0x0 0x0 0xffff83000001dc80 0001 00000000 0x0 0x0 0xffff83000001dd00 0001 00000000 0x0 0x0 0xffff83000001dd80 0001 00000000 0x0 0x0 0xffff83000001de00 0001 00000000 0x0 0x0 0xffff83000001de80 0001 00000000 0x0 0x0 0xffff83000001df00 0001 00000000 0x0 0x0 0xffff83000001df80 0001 00000000 0x0 0x0 0xffff83000001e000 0001 00000000 0x0 0x0 0xffff83000001e080 0001 00000000 0x0 0x0 0xffff83000001e100 0001 00000000 0x0 0x0 0xffff83000001e180 0001 00000000 0x0 0x0 0xffff83000001e200 0001 00000000 0x0 0x0 0xffff83000001e280 0001 00000000 0x0 0x0 0xffff83000001e300 0001 00000000 0x0 0x0 0xffff83000001e380 0001 00000000 0x0 0x0 0xffff83000001e400 0001 00000000 0x0 0x0 0xffff83000001e480 0001 00000000 0x0 0x0 0xffff83000001e500 0001 00000000 0x0 0x0 0xffff83000001e580 0001 00000000 0x0 0x0 0xffff83000001e600 0001 00000000 0x0 0x0 0xffff83000001e680 0001 00000000 0x0 0x0 0xffff83000001e700 0001 00000000 0x0 0x0 0xffff83000001e780 0001 00000000 0x0 0x0 0xffff83000001e800 0001 00000000 0x0 0x0 0xffff83000001e880 0001 00000000 0x0 0x0 0xffff83000001e900 0001 00000000 0x0 0x0 0xffff83000001e980 0001 00000000 0x0 0x0 0xffff83000001ea00 0001 00000000 0x0 0x0 0xffff83000001ea80 0001 00000000 0x0 0x0 0xffff83000001eb00 0001 00000000 0x0 0x0 0xffff83000001eb80 0001 00000000 0x0 0x0 0xffff83000001ec00 0001 00000000 0x0 0x0 0xffff83000001ec80 0001 00000000 0x0 0x0 0xffff83000001ed00 0001 00000000 0x0 0x0 0xffff83000001ed80 0001 00000000 0x0 0x0 0xffff83000001ee00 0001 00000000 0x0 0x0 0xffff83000001ee80 0001 00000000 0x0 0x0 0xffff83000001ef00 0001 00000000 0x0 0x0 0xffff83000001ef80 0001 00000000 0x0 0x0 0xffff83000001f000 0001 00000000 0x0 0x0 0xffff83000001f080 0001 00000000 0x0 0x0 0xffff83000001f100 0001 00000000 0x0 0x0 0xffff83000001f180 0001 00000000 0x0 0x0 0xffff83000001f200 0001 00000000 0x0 0x0 0xffff83000001f280 0001 00000000 0x0 0x0 0xffff83000001f300 0001 00000000 0x0 0x0 0xffff83000001f380 0001 00000000 0x0 0x0 0xffff83000001f400 0001 00000000 0x0 0x0 0xffff83000001f480 0001 00000000 0x0 0x0 0xffff83000001f500 0001 00000000 0x0 0x0 0xffff83000001f580 0001 00000000 0x0 0x0 0xffff83000001f600 0001 00000000 0x0 0x0 0xffff83000001f680 0001 00000000 0x0 0x0 0xffff83000001f700 0001 00000000 0x0 0x0 0xffff83000001f780 0001 00000000 0x0 0x0 0xffff83000001f800 0001 00000000 0x0 0x0 0xffff83000001f880 0001 00000000 0x0 0x0 0xffff83000001f900 0001 00000000 0x0 0x0 0xffff83000001f980 0001 00000000 0x0 0x0 0xffff83000001fa00 0001 00000000 0x0 0x0 0xffff83000001fa80 0001 00000000 0x0 0x0 0xffff83000001fb00 0001 00000000 0x0 0x0 0xffff83000001fb80 0001 00000000 0x0 0x0 0xffff83000001fc00 0001 00000000 0x0 0x0 0xffff83000001fc80 0001 00000000 0x0 0x0 0xffff83000001fd00 0001 00000000 0x0 0x0 0xffff83000001fd80 0001 00000000 0x0 0x0 0xffff83000001fe00 0001 00000000 0x0 0x0 0xffff83000001fe80 0001 00000000 0x0 0x0 0xffff83000001ff00 0001 00000000 0x0 0x0 0xffff83000001ff80 0001 00000000 0x0 0x0 0xffff830000020000 0001 00000000 0x0 0x0 0xffff830000020080 0001 00000000 0x0 0x0 0xffff830000020100 0001 00000000 0x0 0x0 0xffff830000020180 0001 00000000 0x0 0x0 0xffff830000020200 0001 00000000 0x0 0x0 0xffff830000020280 0001 00000000 0x0 0x0 0xffff830000020300 0001 00000000 0x0 0x0 0xffff830000020380 0001 00000000 0x0 0x0 0xffff830000020400 0001 00000000 0x0 0x0 0xffff830000020480 0001 00000000 0x0 0x0 0xffff830000020500 0001 00000000 0x0 0x0 0xffff830000020580 0001 00000000 0x0 0x0 0xffff830000020600 0001 00000000 0x0 0x0 0xffff830000020680 0001 00000000 0x0 0x0 0xffff830000020700 0001 00000000 0x0 0x0 0xffff830000020780 0001 00000000 0x0 0x0 0xffff830000020800 0001 00000000 0x0 0x0 0xffff830000020880 0001 00000000 0x0 0x0 0xffff830000020900 0001 00000000 0x0 0x0 0xffff830000020980 0001 00000000 0x0 0x0 0xffff830000020a00 0001 00000000 0x0 0x0 0xffff830000020a80 0001 00000000 0x0 0x0 0xffff830000020b00 0001 00000000 0x0 0x0 0xffff830000020b80 0001 00000000 0x0 0x0 0xffff830000020c00 0001 00000000 0x0 0x0 0xffff830000020c80 0001 00000000 0x0 0x0 0xffff830000020d00 0001 00000000 0x0 0x0 0xffff830000020d80 0001 00000000 0x0 0x0 0xffff830000020e00 0001 00000000 0x0 0x0 0xffff830000020e80 0001 00000000 0x0 0x0 0xffff830000020f00 0001 00000000 0x0 0x0 0xffff830000020f80 0001 00000000 0x0 0x0 0xffff830000021000 0001 00000000 0x0 0x0 0xffff830000021080 0001 00000000 0x0 0x0 0xffff830000021100 0001 00000000 0x0 0x0 0xffff830000021180 0001 00000000 0x0 0x0 0xffff830000021200 0001 00000000 0x0 0x0 0xffff830000021280 0001 00000000 0x0 0x0 0xffff830000021300 0001 00000000 0x0 0x0 0xffff830000021380 0001 00000000 0x0 0x0 0xffff830000021400 0001 00000000 0x0 0x0 0xffff830000021480 0001 00000000 0x0 0x0 0xffff830000021500 0001 00000000 0x0 0x0 0xffff830000021580 0001 00000000 0x0 0x0 0xffff830000021600 0001 00000000 0x0 0x0 0xffff830000021680 0001 00000000 0x0 0x0 0xffff830000021700 0001 00000000 0x0 0x0 0xffff830000021780 0001 00000000 0x0 0x0 0xffff830000021800 0001 00000000 0x0 0x0 0xffff830000021880 0001 00000000 0x0 0x0 0xffff830000021900 0001 00000000 0x0 0x0 0xffff830000021980 0001 00000000 0x0 0x0 0xffff830000021a00 0001 00000000 0x0 0x0 0xffff830000021a80 0001 00000000 0x0 0x0 0xffff830000021b00 0001 00000000 0x0 0x0 0xffff830000021b80 0001 00000000 0x0 0x0 0xffff830000021c00 0001 00000000 0x0 0x0 0xffff830000021c80 0001 00000000 0x0 0x0 0xffff830000021d00 0001 00000000 0x0 0x0 0xffff830000021d80 0001 00000000 0x0 0x0 0xffff830000021e00 0001 00000000 0x0 0x0 0xffff830000021e80 0001 00000000 0x0 0x0 0xffff830000021f00 0001 00000000 0x0 0x0 0xffff830000021f80 0001 00000000 0x0 0x0 0xffff830000022000 0001 00000000 0x0 0x0 0xffff830000022080 0001 00000000 0x0 0x0 0xffff830000022100 0001 00000000 0x0 0x0 0xffff830000022180 0001 00000000 0x0 0x0 0xffff830000022200 0001 00000000 0x0 0x0 0xffff830000022280 0001 00000000 0x0 0x0 0xffff830000022300 0001 00000000 0x0 0x0 0xffff830000022380 0001 00000000 0x0 0x0 0xffff830000022400 0001 00000000 0x0 0x0 0xffff830000022480 0001 00000000 0x0 0x0 0xffff830000022500 0001 00000000 0x0 0x0 0xffff830000022580 0001 00000000 0x0 0x0 0xffff830000022600 0001 00000000 0x0 0x0 0xffff830000022680 0001 00000000 0x0 0x0 0xffff830000022700 0001 00000000 0x0 0x0 0xffff830000022780 0001 00000000 0x0 0x0 0xffff830000022800 0001 00000000 0x0 0x0 0xffff830000022880 0001 00000000 0x0 0x0 0xffff830000022900 0001 00000000 0x0 0x0 0xffff830000022980 0001 00000000 0x0 0x0 0xffff830000022a00 0001 00000000 0x0 0x0 0xffff830000022a80 0001 00000000 0x0 0x0 0xffff830000022b00 0001 00000000 0x0 0x0 0xffff830000022b80 0001 00000000 0x0 0x0 0xffff830000022c00 0001 00000000 0x0 0x0 0xffff830000022c80 0001 00000000 0x0 0x0 0xffff830000022d00 0001 00000000 0x0 0x0 0xffff830000022d80 0001 00000000 0x0 0x0 0xffff830000022e00 0001 00000000 0x0 0x0 0xffff830000022e80 0001 00000000 0x0 0x0 0xffff830000022f00 0001 00000000 0x0 0x0 0xffff830000022f80 0001 00000000 0x0 0x0 0xffff830000023000 0001 00000000 0x0 0x0 0xffff830000023080 0001 00000000 0x0 0x0 0xffff830000023100 0001 00000000 0x0 0x0 0xffff830000023180 0001 00000000 0x0 0x0 0xffff830000023200 0001 00000000 0x0 0x0 0xffff830000023280 0001 00000000 0x0 0x0 0xffff830000023300 0001 00000000 0x0 0x0 0xffff830000023380 0001 00000000 0x0 0x0 0xffff830000023400 0001 00000000 0x0 0x0 0xffff830000023480 0001 00000000 0x0 0x0 0xffff830000023500 0001 00000000 0x0 0x0 0xffff830000023580 0001 00000000 0x0 0x0 0xffff830000023600 0001 00000000 0x0 0x0 0xffff830000023680 0001 00000000 0x0 0x0 0xffff830000023700 0001 00000000 0x0 0x0 0xffff830000023780 0001 00000000 0x0 0x0 0xffff830000023800 0001 00000000 0x0 0x0 0xffff830000023880 0001 00000000 0x0 0x0 0xffff830000023900 0001 00000000 0x0 0x0 0xffff830000023980 0001 00000000 0x0 0x0 0xffff830000023a00 0001 00000000 0x0 0x0 0xffff830000023a80 0001 00000000 0x0 0x0 0xffff830000023b00 0001 00000000 0x0 0x0 0xffff830000023b80 0001 00000000 0x0 0x0 0xffff830000023c00 0001 00000000 0x0 0x0 0xffff830000023c80 0001 00000000 0x0 0x0 0xffff830000023d00 0001 00000000 0x0 0x0 0xffff830000023d80 0001 00000000 0x0 0x0 0xffff830000023e00 0001 00000000 0x0 0x0 0xffff830000023e80 0001 00000000 0x0 0x0 0xffff830000023f00 0001 00000000 0x0 0x0 0xffff830000023f80 0001 00000000 0x0 0x0 0xffff830000024000 0001 00000000 0x0 0x0 0xffff830000024080 0001 00000000 0x0 0x0 0xffff830000024100 0001 00000000 0x0 0x0 0xffff830000024180 0001 00000000 0x0 0x0 0xffff830000024200 0001 00000000 0x0 0x0 0xffff830000024280 0001 00000000 0x0 0x0 0xffff830000024300 0001 00000000 0x0 0x0 0xffff830000024380 0001 00000000 0x0 0x0 0xffff830000024400 0001 00000000 0x0 0x0 0xffff830000024480 0001 00000000 0x0 0x0 0xffff830000024500 0001 00000000 0x0 0x0 0xffff830000024580 0001 00000000 0x0 0x0 0xffff830000024600 0001 00000000 0x0 0x0 0xffff830000024680 0001 00000000 0x0 0x0 0xffff830000024700 0001 00000000 0x0 0x0 0xffff830000024780 0001 00000000 0x0 0x0 0xffff830000024800 0001 00000000 0x0 0x0 0xffff830000024880 0001 00000000 0x0 0x0 0xffff830000024900 0001 00000000 0x0 0x0 0xffff830000024980 0001 00000000 0x0 0x0 0xffff830000024a00 0001 00000000 0x0 0x0 0xffff830000024a80 0001 00000000 0x0 0x0 0xffff830000024b00 0001 00000000 0x0 0x0 0xffff830000024b80 0001 00000000 0x0 0x0 0xffff830000024c00 0001 00000000 0x0 0x0 0xffff830000024c80 0001 00000000 0x0 0x0 0xffff830000024d00 0001 00000000 0x0 0x0 0xffff830000024d80 0001 00000000 0x0 0x0 0xffff830000024e00 0001 00000000 0x0 0x0 0xffff830000024e80 0001 00000000 0x0 0x0 0xffff830000024f00 0001 00000000 0x0 0x0 0xffff830000024f80 0001 00000000 0x0 0x0 0xffff830000025000 0001 00000000 0x0 0x0 0xffff830000025080 0001 00000000 0x0 0x0 0xffff830000025100 0001 00000000 0x0 0x0 0xffff830000025180 0001 00000000 0x0 0x0 0xffff830000025200 0001 00000000 0x0 0x0 0xffff830000025280 0001 00000000 0x0 0x0 0xffff830000025300 0001 00000000 0x0 0x0 0xffff830000025380 0001 00000000 0x0 0x0 0xffff830000025400 0001 00000000 0x0 0x0 0xffff830000025480 0001 00000000 0x0 0x0 0xffff830000025500 0001 00000000 0x0 0x0 0xffff830000025580 0001 00000000 0x0 0x0 0xffff830000025600 0001 00000000 0x0 0x0 0xffff830000025680 0001 00000000 0x0 0x0 0xffff830000025700 0001 00000000 0x0 0x0 0xffff830000025780 0001 00000000 0x0 0x0 0xffff830000025800 0001 00000000 0x0 0x0 0xffff830000025880 0001 00000000 0x0 0x0 0xffff830000025900 0001 00000000 0x0 0x0 0xffff830000025980 0001 00000000 0x0 0x0 0xffff830000025a00 0001 00000000 0x0 0x0 0xffff830000025a80 0001 00000000 0x0 0x0 0xffff830000025b00 0001 00000000 0x0 0x0 0xffff830000025b80 0001 00000000 0x0 0x0 0xffff830000025c00 0001 00000000 0x0 0x0 0xffff830000025c80 0001 00000000 0x0 0x0 0xffff830000025d00 0001 00000000 0x0 0x0 0xffff830000025d80 0001 00000000 0x0 0x0 0xffff830000025e00 0001 00000000 0x0 0x0 0xffff830000025e80 0001 00000000 0x0 0x0 0xffff830000025f00 0001 00000000 0x0 0x0 0xffff830000025f80 0001 00000000 0x0 0x0 0xffff830000026000 0001 00000000 0x0 0x0 0xffff830000026080 0001 00000000 0x0 0x0 0xffff830000026100 0001 00000000 0x0 0x0 0xffff830000026180 0001 00000000 0x0 0x0 0xffff830000026200 0001 00000000 0x0 0x0 0xffff830000026280 0001 00000000 0x0 0x0 0xffff830000026300 0001 00000000 0x0 0x0 0xffff830000026380 0001 00000000 0x0 0x0 0xffff830000026400 0001 00000000 0x0 0x0 0xffff830000026480 0001 00000000 0x0 0x0 0xffff830000026500 0001 00000000 0x0 0x0 0xffff830000026580 0001 00000000 0x0 0x0 0xffff830000026600 0001 00000000 0x0 0x0 0xffff830000026680 0001 00000000 0x0 0x0 0xffff830000026700 0001 00000000 0x0 0x0 0xffff830000026780 0001 00000000 0x0 0x0 0xffff830000026800 0001 00000000 0x0 0x0 0xffff830000026880 0001 00000000 0x0 0x0 0xffff830000026900 0001 00000000 0x0 0x0 0xffff830000026980 0001 00000000 0x0 0x0 0xffff830000026a00 0001 00000000 0x0 0x0 0xffff830000026a80 0001 00000000 0x0 0x0 0xffff830000026b00 0001 00000000 0x0 0x0 0xffff830000026b80 0001 00000000 0x0 0x0 0xffff830000026c00 0001 00000000 0x0 0x0 0xffff830000026c80 0001 00000000 0x0 0x0 0xffff830000026d00 0001 00000000 0x0 0x0 0xffff830000026d80 0001 00000000 0x0 0x0 0xffff830000026e00 0001 00000000 0x0 0x0 0xffff830000026e80 0001 00000000 0x0 0x0 0xffff830000026f00 0001 00000000 0x0 0x0 0xffff830000026f80 0001 00000000 0x0 0x0 0xffff830000027000 0001 00000000 0x0 0x0 0xffff830000027080 0001 00000000 0x0 0x0 0xffff830000027100 0001 00000000 0x0 0x0 0xffff830000027180 0001 00000000 0x0 0x0 0xffff830000027200 0001 00000000 0x0 0x0 0xffff830000027280 0001 00000000 0x0 0x0 0xffff830000027300 0001 00000000 0x0 0x0 0xffff830000027380 0001 00000000 0x0 0x0 0xffff830000027400 0001 00000000 0x0 0x0 0xffff830000027480 0001 00000000 0x0 0x0 0xffff830000027500 0001 00000000 0x0 0x0 0xffff830000027580 0001 00000000 0x0 0x0 0xffff830000027600 0001 00000000 0x0 0x0 0xffff830000027680 0001 00000000 0x0 0x0 0xffff830000027700 0001 00000000 0x0 0x0 0xffff830000027780 0001 00000000 0x0 0x0 0xffff830000027800 0001 00000000 0x0 0x0 0xffff830000027880 0001 00000000 0x0 0x0 0xffff830000027900 0001 00000000 0x0 0x0 0xffff830000027980 0001 00000000 0x0 0x0 0xffff830000027a00 0001 00000000 0x0 0x0 0xffff830000027a80 0001 00000000 0x0 0x0 0xffff830000027b00 0001 00000000 0x0 0x0 0xffff830000027b80 0001 00000000 0x0 0x0 0xffff830000027c00 0001 00000000 0x0 0x0 0xffff830000027c80 0001 00000000 0x0 0x0 0xffff830000027d00 0001 00000000 0x0 0x0 0xffff830000027d80 0001 00000000 0x0 0x0 0xffff830000027e00 0001 00000000 0x0 0x0 0xffff830000027e80 0001 00000000 0x0 0x0 0xffff830000027f00 0001 00000000 0x0 0x0 0xffff830000027f80 0001 00000000 0x0 0x0 0xffff830000028000 0001 00000000 0x0 0x0 0xffff830000028080 0001 00000000 0x0 0x0 0xffff830000028100 0001 00000000 0x0 0x0 0xffff830000028180 0001 00000000 0x0 0x0 0xffff830000028200 0001 00000000 0x0 0x0 0xffff830000028280 0001 00000000 0x0 0x0 0xffff830000028300 0001 00000000 0x0 0x0 0xffff830000028380 0001 00000000 0x0 0x0 0xffff830000028400 0001 00000000 0x0 0x0 0xffff830000028480 0001 00000000 0x0 0x0 0xffff830000028500 0001 00000000 0x0 0x0 0xffff830000028580 0001 00000000 0x0 0x0 0xffff830000028600 0001 00000000 0x0 0x0 0xffff830000028680 0001 00000000 0x0 0x0 0xffff830000028700 0001 00000000 0x0 0x0 0xffff830000028780 0001 00000000 0x0 0x0 0xffff830000028800 0001 00000000 0x0 0x0 0xffff830000028880 0001 00000000 0x0 0x0 0xffff830000028900 0001 00000000 0x0 0x0 0xffff830000028980 0001 00000000 0x0 0x0 0xffff830000028a00 0001 00000000 0x0 0x0 0xffff830000028a80 0001 00000000 0x0 0x0 0xffff830000028b00 0001 00000000 0x0 0x0 0xffff830000028b80 0001 00000000 0x0 0x0 0xffff830000028c00 0001 00000000 0x0 0x0 0xffff830000028c80 0001 00000000 0x0 0x0 0xffff830000028d00 0001 00000000 0x0 0x0 0xffff830000028d80 0001 00000000 0x0 0x0 0xffff830000028e00 0001 00000000 0x0 0x0 0xffff830000028e80 0001 00000000 0x0 0x0 0xffff830000028f00 0001 00000000 0x0 0x0 0xffff830000028f80 0001 00000000 0x0 0x0 0xffff830000029000 0001 00000000 0x0 0x0 0xffff830000029080 0001 00000000 0x0 0x0 0xffff830000029100 0001 00000000 0x0 0x0 0xffff830000029180 0001 00000000 0x0 0x0 0xffff830000029200 0001 00000000 0x0 0x0 0xffff830000029280 0001 00000000 0x0 0x0 0xffff830000029300 0001 00000000 0x0 0x0 0xffff830000029380 0001 00000000 0x0 0x0 0xffff830000029400 0001 00000000 0x0 0x0 0xffff830000029480 0001 00000000 0x0 0x0 0xffff830000029500 0001 00000000 0x0 0x0 0xffff830000029580 0001 00000000 0x0 0x0 0xffff830000029600 0001 00000000 0x0 0x0 0xffff830000029680 0001 00000000 0x0 0x0 0xffff830000029700 0001 00000000 0x0 0x0 0xffff830000029780 0001 00000000 0x0 0x0 0xffff830000029800 0001 00000000 0x0 0x0 0xffff830000029880 0001 00000000 0x0 0x0 0xffff830000029900 0001 00000000 0x0 0x0 0xffff830000029980 0001 00000000 0x0 0x0 0xffff830000029a00 0001 00000000 0x0 0x0 0xffff830000029a80 0001 00000000 0x0 0x0 0xffff830000029b00 0001 00000000 0x0 0x0 0xffff830000029b80 0001 00000000 0x0 0x0 0xffff830000029c00 0001 00000000 0x0 0x0 0xffff830000029c80 0001 00000000 0x0 0x0 0xffff830000029d00 0001 00000000 0x0 0x0 0xffff830000029d80 0001 00000000 0x0 0x0 0xffff830000029e00 0001 00000000 0x0 0x0 0xffff830000029e80 0001 00000000 0x0 0x0 0xffff830000029f00 0001 00000000 0x0 0x0 0xffff830000029f80 0001 00000000 0x0 0x0 0xffff83000002a000 0001 00000000 0x0 0x0 0xffff83000002a080 0001 00000000 0x0 0x0 0xffff83000002a100 0001 00000000 0x0 0x0 0xffff83000002a180 0001 00000000 0x0 0x0 0xffff83000002a200 0001 00000000 0x0 0x0 0xffff83000002a280 0001 00000000 0x0 0x0 0xffff83000002a300 0001 00000000 0x0 0x0 0xffff83000002a380 0001 00000000 0x0 0x0 0xffff83000002a400 0001 00000000 0x0 0x0 0xffff83000002a480 0001 00000000 0x0 0x0 0xffff83000002a500 0001 00000000 0x0 0x0 0xffff83000002a580 0001 00000000 0x0 0x0 0xffff83000002a600 0001 00000000 0x0 0x0 0xffff83000002a680 0001 00000000 0x0 0x0 0xffff83000002a700 0001 00000000 0x0 0x0 0xffff83000002a780 0001 00000000 0x0 0x0 0xffff83000002a800 0001 00000000 0x0 0x0 0xffff83000002a880 0001 00000000 0x0 0x0 0xffff83000002a900 0001 00000000 0x0 0x0 0xffff83000002a980 0001 00000000 0x0 0x0 0xffff83000002aa00 0001 00000000 0x0 0x0 0xffff83000002aa80 0001 00000000 0x0 0x0 0xffff83000002ab00 0001 00000000 0x0 0x0 0xffff83000002ab80 0001 00000000 0x0 0x0 0xffff83000002ac00 0001 00000000 0x0 0x0 0xffff83000002ac80 0001 00000000 0x0 0x0 0xffff83000002ad00 0001 00000000 0x0 0x0 0xffff83000002ad80 0001 00000000 0x0 0x0 0xffff83000002ae00 0001 00000000 0x0 0x0 0xffff83000002ae80 0001 00000000 0x0 0x0 0xffff83000002af00 0001 00000000 0x0 0x0 0xffff83000002af80 0001 00000000 0x0 0x0 0xffff83000002b000 0001 00000000 0x0 0x0 0xffff83000002b080 0001 00000000 0x0 0x0 0xffff83000002b100 0001 00000000 0x0 0x0 0xffff83000002b180 0001 00000000 0x0 0x0 0xffff83000002b200 0001 00000000 0x0 0x0 0xffff83000002b280 0001 00000000 0x0 0x0 0xffff83000002b300 0001 00000000 0x0 0x0 0xffff83000002b380 0001 00000000 0x0 0x0 0xffff83000002b400 0001 00000000 0x0 0x0 0xffff83000002b480 0001 00000000 0x0 0x0 0xffff83000002b500 0001 00000000 0x0 0x0 0xffff83000002b580 0001 00000000 0x0 0x0 0xffff83000002b600 0001 00000000 0x0 0x0 0xffff83000002b680 0001 00000000 0x0 0x0 0xffff83000002b700 0001 00000000 0x0 0x0 0xffff83000002b780 0001 00000000 0x0 0x0 0xffff83000002b800 0001 00000000 0x0 0x0 0xffff83000002b880 0001 00000000 0x0 0x0 0xffff83000002b900 0001 00000000 0x0 0x0 0xffff83000002b980 0001 00000000 0x0 0x0 0xffff83000002ba00 0001 00000000 0x0 0x0 0xffff83000002ba80 0001 00000000 0x0 0x0 0xffff83000002bb00 0001 00000000 0x0 0x0 0xffff83000002bb80 0001 00000000 0x0 0x0 0xffff83000002bc00 0001 00000000 0x0 0x0 0xffff83000002bc80 0001 00000000 0x0 0x0 0xffff83000002bd00 0001 00000000 0x0 0x0 0xffff83000002bd80 0001 00000000 0x0 0x0 0xffff83000002be00 0001 00000000 0x0 0x0 0xffff83000002be80 0001 00000000 0x0 0x0 0xffff83000002bf00 0001 00000000 0x0 0x0 0xffff83000002bf80 0001 00000000 0x0 0x0 0xffff83000002c000 0001 00000000 0x0 0x0 0xffff83000002c080 0001 00000000 0x0 0x0 0xffff83000002c100 0001 00000000 0x0 0x0 0xffff83000002c180 0001 00000000 0x0 0x0 0xffff83000002c200 0001 00000000 0x0 0x0 0xffff83000002c280 0001 00000000 0x0 0x0 0xffff83000002c300 0001 00000000 0x0 0x0 0xffff83000002c380 0001 00000000 0x0 0x0 0xffff83000002c400 0001 00000000 0x0 0x0 0xffff83000002c480 0001 00000000 0x0 0x0 0xffff83000002c500 0001 00000000 0x0 0x0 0xffff83000002c580 0001 00000000 0x0 0x0 0xffff83000002c600 0001 00000000 0x0 0x0 0xffff83000002c680 0001 00000000 0x0 0x0 0xffff83000002c700 0001 00000000 0x0 0x0 0xffff83000002c780 0001 00000000 0x0 0x0 0xffff83000002c800 0001 00000000 0x0 0x0 0xffff83000002c880 0001 00000000 0x0 0x0 0xffff83000002c900 0001 00000000 0x0 0x0 0xffff83000002c980 0001 00000000 0x0 0x0 0xffff83000002ca00 0001 00000000 0x0 0x0 0xffff83000002ca80 0001 00000000 0x0 0x0 0xffff83000002cb00 0001 00000000 0x0 0x0 0xffff83000002cb80 0001 00000000 0x0 0x0 0xffff83000002cc00 0001 00000000 0x0 0x0 0xffff83000002cc80 0001 00000000 0x0 0x0 0xffff83000002cd00 0001 00000000 0x0 0x0 0xffff83000002cd80 0001 00000000 0x0 0x0 0xffff83000002ce00 0001 00000000 0x0 0x0 0xffff83000002ce80 0001 00000000 0x0 0x0 0xffff83000002cf00 0001 00000000 0x0 0x0 0xffff83000002cf80 0001 00000000 0x0 0x0 0xffff83000002d000 0001 00000000 0x0 0x0 0xffff83000002d080 0001 00000000 0x0 0x0 0xffff83000002d100 0001 00000000 0x0 0x0 0xffff83000002d180 0001 00000000 0x0 0x0 0xffff83000002d200 0001 00000000 0x0 0x0 0xffff83000002d280 0001 00000000 0x0 0x0 0xffff83000002d300 0001 00000000 0x0 0x0 0xffff83000002d380 0001 00000000 0x0 0x0 0xffff83000002d400 0001 00000000 0x0 0x0 0xffff83000002d480 0001 00000000 0x0 0x0 0xffff83000002d500 0001 00000000 0x0 0x0 0xffff83000002d580 0001 00000000 0x0 0x0 0xffff83000002d600 0001 00000000 0x0 0x0 0xffff83000002d680 0001 00000000 0x0 0x0 0xffff83000002d700 0001 00000000 0x0 0x0 0xffff83000002d780 0001 00000000 0x0 0x0 0xffff83000002d800 0001 00000000 0x0 0x0 0xffff83000002d880 0001 00000000 0x0 0x0 0xffff83000002d900 0001 00000000 0x0 0x0 0xffff83000002d980 0001 00000000 0x0 0x0 0xffff83000002da00 0001 00000000 0x0 0x0 0xffff83000002da80 0001 00000000 0x0 0x0 0xffff83000002db00 0001 00000000 0x0 0x0 0xffff83000002db80 0001 00000000 0x0 0x0 0xffff83000002dc00 0001 00000000 0x0 0x0 0xffff83000002dc80 0001 00000000 0x0 0x0 0xffff83000002dd00 0001 00000000 0x0 0x0 0xffff83000002dd80 0001 00000000 0x0 0x0 0xffff83000002de00 0001 00000000 0x0 0x0 0xffff83000002de80 0001 00000000 0x0 0x0 0xffff83000002df00 0001 00000000 0x0 0x0 0xffff83000002df80 0001 00000000 0x0 0x0 0xffff83000002e000 0001 00000000 0x0 0x0 0xffff83000002e080 0001 00000000 0x0 0x0 0xffff83000002e100 0001 00000000 0x0 0x0 0xffff83000002e180 0001 00000000 0x0 0x0 0xffff83000002e200 0001 00000000 0x0 0x0 0xffff83000002e280 0001 00000000 0x0 0x0 0xffff83000002e300 0001 00000000 0x0 0x0 0xffff83000002e380 0001 00000000 0x0 0x0 0xffff83000002e400 0001 00000000 0x0 0x0 0xffff83000002e480 0001 00000000 0x0 0x0 0xffff83000002e500 0001 00000000 0x0 0x0 0xffff83000002e580 0001 00000000 0x0 0x0 0xffff83000002e600 0001 00000000 0x0 0x0 0xffff83000002e680 0001 00000000 0x0 0x0 0xffff83000002e700 0001 00000000 0x0 0x0 0xffff83000002e780 0001 00000000 0x0 0x0 0xffff83000002e800 0001 00000000 0x0 0x0 0xffff83000002e880 0001 00000000 0x0 0x0 0xffff83000002e900 0001 00000000 0x0 0x0 0xffff83000002e980 0001 00000000 0x0 0x0 0xffff83000002ea00 0001 00000000 0x0 0x0 0xffff83000002ea80 0001 00000000 0x0 0x0 0xffff83000002eb00 0001 00000000 0x0 0x0 0xffff83000002eb80 0001 00000000 0x0 0x0 0xffff83000002ec00 0001 00000000 0x0 0x0 0xffff83000002ec80 0001 00000000 0x0 0x0 0xffff83000002ed00 0001 00000000 0x0 0x0 0xffff83000002ed80 0001 00000000 0x0 0x0 0xffff83000002ee00 0001 00000000 0x0 0x0 0xffff83000002ee80 0001 00000000 0x0 0x0 0xffff83000002ef00 0001 00000000 0x0 0x0 0xffff83000002ef80 0001 00000000 0x0 0x0 0xffff83000002f000 0001 00000000 0x0 0x0 0xffff83000002f080 0001 00000000 0x0 0x0 0xffff83000002f100 0001 00000000 0x0 0x0 0xffff83000002f180 0001 00000000 0x0 0x0 0xffff83000002f200 0001 00000000 0x0 0x0 0xffff83000002f280 0001 00000000 0x0 0x0 0xffff83000002f300 0001 00000000 0x0 0x0 0xffff83000002f380 0001 00000000 0x0 0x0 0xffff83000002f400 0001 00000000 0x0 0x0 0xffff83000002f480 0001 00000000 0x0 0x0 0xffff83000002f500 0001 00000000 0x0 0x0 0xffff83000002f580 0001 00000000 0x0 0x0 0xffff83000002f600 0001 00000000 0x0 0x0 0xffff83000002f680 0001 00000000 0x0 0x0 0xffff83000002f700 0001 00000000 0x0 0x0 0xffff83000002f780 0001 00000000 0x0 0x0 0xffff83000002f800 0001 00000000 0x0 0x0 0xffff83000002f880 0001 00000000 0x0 0x0 0xffff83000002f900 0001 00000000 0x0 0x0 0xffff83000002f980 0001 00000000 0x0 0x0 0xffff83000002fa00 0001 00000000 0x0 0x0 0xffff83000002fa80 0001 00000000 0x0 0x0 0xffff83000002fb00 0001 00000000 0x0 0x0 0xffff83000002fb80 0001 00000000 0x0 0x0 0xffff83000002fc00 0001 00000000 0x0 0x0 0xffff83000002fc80 0001 00000000 0x0 0x0 0xffff83000002fd00 0001 00000000 0x0 0x0 0xffff83000002fd80 0001 00000000 0x0 0x0 0xffff83000002fe00 0001 00000000 0x0 0x0 0xffff83000002fe80 0001 00000000 0x0 0x0 0xffff83000002ff00 0001 00000000 0x0 0x0 0xffff83000002ff80 0001 00000000 0x0 0x0 0xffff830000030000 0001 00000000 0x0 0x0 0xffff830000030080 0001 00000000 0x0 0x0 0xffff830000030100 0001 00000000 0x0 0x0 0xffff830000030180 0001 00000000 0x0 0x0 0xffff830000030200 0001 00000000 0x0 0x0 0xffff830000030280 0001 00000000 0x0 0x0 0xffff830000030300 0001 00000000 0x0 0x0 0xffff830000030380 0001 00000000 0x0 0x0 0xffff830000030400 0001 00000000 0x0 0x0 0xffff830000030480 0001 00000000 0x0 0x0 0xffff830000030500 0001 00000000 0x0 0x0 0xffff830000030580 0001 00000000 0x0 0x0 0xffff830000030600 0001 00000000 0x0 0x0 0xffff830000030680 0001 00000000 0x0 0x0 0xffff830000030700 0001 00000000 0x0 0x0 0xffff830000030780 0001 00000000 0x0 0x0 0xffff830000030800 0001 00000000 0x0 0x0 0xffff830000030880 0001 00000000 0x0 0x0 0xffff830000030900 0001 00000000 0x0 0x0 0xffff830000030980 0001 00000000 0x0 0x0 0xffff830000030a00 0001 00000000 0x0 0x0 0xffff830000030a80 0001 00000000 0x0 0x0 0xffff830000030b00 0001 00000000 0x0 0x0 0xffff830000030b80 0001 00000000 0x0 0x0 0xffff830000030c00 0001 00000000 0x0 0x0 0xffff830000030c80 0001 00000000 0x0 0x0 0xffff830000030d00 0001 00000000 0x0 0x0 0xffff830000030d80 0001 00000000 0x0 0x0 0xffff830000030e00 0001 00000000 0x0 0x0 0xffff830000030e80 0001 00000000 0x0 0x0