Jun 26 12:13:55 ci2-netbsd-kubsan-1 getty[1126]: /dev/ttyE2: Device not configured NetBSD/amd64 (ci2-netbsd-kubsan-1.c.syzkaller.internal) (constty) Warning: Permanently added '10.128.0.226' (ECDSA) to the list of known hosts. 2022/06/26 12:14:04 fuzzer started 2022/06/26 12:14:05 dialing manager at 10.128.0.163:46799 2022/06/26 12:14:05 syscalls: 460 2022/06/26 12:14:05 code coverage: enabled 2022/06/26 12:14:05 comparison tracing: enabled 2022/06/26 12:14:05 extra coverage: enabled 2022/06/26 12:14:05 delay kcov mmap: enabled 2022/06/26 12:14:05 setuid sandbox: support is not implemented in syzkaller 2022/06/26 12:14:05 namespace sandbox: support is not implemented in syzkaller 2022/06/26 12:14:05 Android sandbox: support is not implemented in syzkaller 2022/06/26 12:14:05 fault injection: enabled 2022/06/26 12:14:05 leak checking: support is not implemented in syzkaller 2022/06/26 12:14:05 net packet injection: support is not implemented in syzkaller 2022/06/26 12:14:05 net device setup: support is not implemented in syzkaller 2022/06/26 12:14:05 concurrency sanitizer: support is not implemented in syzkaller 2022/06/26 12:14:05 devlink PCI setup: support is not implemented in syzkaller 2022/06/26 12:14:05 USB emulation: enabled 2022/06/26 12:14:05 hci packet injection: support is not implemented in syzkaller 2022/06/26 12:14:05 wifi device emulation: support is not implemented in syzkaller 2022/06/26 12:14:05 802.15.4 emulation: support is not implemented in syzkaller 2022/06/26 12:14:05 fetching corpus: 50, signal 14572/16345 (executing program) 2022/06/26 12:14:05 fetching corpus: 100, signal 23001/26297 (executing program) 2022/06/26 12:14:05 fetching corpus: 150, signal 26137/30878 (executing program) 2022/06/26 12:14:05 fetching corpus: 200, signal 36367/41982 (executing program) 2022/06/26 12:14:06 fetching corpus: 250, signal 41647/48243 (executing program) 2022/06/26 12:14:06 fetching corpus: 300, signal 44584/52217 (executing program) 2022/06/26 12:14:06 fetching corpus: 350, signal 46661/55290 (executing program) 2022/06/26 12:14:06 fetching corpus: 400, signal 52531/61633 (executing program) 2022/06/26 12:14:06 fetching corpus: 450, signal 54979/64870 (executing program) 2022/06/26 12:14:06 fetching corpus: 500, signal 58348/68807 (executing program) 2022/06/26 12:14:06 fetching corpus: 550, signal 59879/71110 (executing program) 2022/06/26 12:14:06 fetching corpus: 600, signal 61325/73245 (executing program) 2022/06/26 12:14:07 fetching corpus: 650, signal 63517/75969 (executing program) 2022/06/26 12:14:07 fetching corpus: 700, signal 64660/77791 (executing program) 2022/06/26 12:14:07 fetching corpus: 750, signal 65565/79406 (executing program) 2022/06/26 12:14:07 fetching corpus: 800, signal 66754/81172 (executing program) 2022/06/26 12:14:07 fetching corpus: 850, signal 68207/83065 (executing program) 2022/06/26 12:14:07 fetching corpus: 900, signal 69162/84587 (executing program) 2022/06/26 12:14:07 fetching corpus: 950, signal 70196/86130 (executing program) 2022/06/26 12:14:07 fetching corpus: 1000, signal 70747/87324 (executing program) 2022/06/26 12:14:08 fetching corpus: 1050, signal 72407/89271 (executing program) 2022/06/26 12:14:08 fetching corpus: 1100, signal 73167/90570 (executing program) 2022/06/26 12:14:08 fetching corpus: 1150, signal 73962/91875 (executing program) 2022/06/26 12:14:08 fetching corpus: 1200, signal 76782/94377 (executing program) 2022/06/26 12:14:08 fetching corpus: 1250, signal 77663/95625 (executing program) 2022/06/26 12:14:08 fetching corpus: 1300, signal 78373/96753 (executing program) 2022/06/26 12:14:08 fetching corpus: 1350, signal 79207/97959 (executing program) 2022/06/26 12:14:08 fetching corpus: 1400, signal 80009/99132 (executing program) 2022/06/26 12:14:09 fetching corpus: 1450, signal 80396/100023 (executing program) 2022/06/26 12:14:09 fetching corpus: 1500, signal 81164/101087 (executing program) 2022/06/26 12:14:09 fetching corpus: 1550, signal 81863/102116 (executing program) 2022/06/26 12:14:09 fetching corpus: 1600, signal 82437/103067 (executing program) 2022/06/26 12:14:09 fetching corpus: 1650, signal 83214/104042 (executing program) 2022/06/26 12:14:09 fetching corpus: 1700, signal 84887/105450 (executing program) 2022/06/26 12:14:09 fetching corpus: 1750, signal 85265/106181 (executing program) 2022/06/26 12:14:09 fetching corpus: 1800, signal 85618/106888 (executing program) 2022/06/26 12:14:09 fetching corpus: 1850, signal 86247/107694 (executing program) 2022/06/26 12:14:10 fetching corpus: 1900, signal 87352/108729 (executing program) 2022/06/26 12:14:10 fetching corpus: 1950, signal 88017/109553 (executing program) 2022/06/26 12:14:10 fetching corpus: 2000, signal 88456/110280 (executing program) 2022/06/26 12:14:10 fetching corpus: 2050, signal 89466/111132 (executing program) 2022/06/26 12:14:10 fetching corpus: 2100, signal 90155/111897 (executing program) 2022/06/26 12:14:10 fetching corpus: 2150, signal 90763/112598 (executing program) 2022/06/26 12:14:10 fetching corpus: 2200, signal 91525/113232 (executing program) 2022/06/26 12:14:10 fetching corpus: 2250, signal 91918/113815 (executing program) 2022/06/26 12:14:10 fetching corpus: 2300, signal 92679/114456 (executing program) 2022/06/26 12:14:11 fetching corpus: 2350, signal 93088/115026 (executing program) 2022/06/26 12:14:11 fetching corpus: 2400, signal 93785/115620 (executing program) 2022/06/26 12:14:11 fetching corpus: 2450, signal 94304/116176 (executing program) 2022/06/26 12:14:11 fetching corpus: 2500, signal 94816/116751 (executing program) 2022/06/26 12:14:11 fetching corpus: 2550, signal 95374/117259 (executing program) 2022/06/26 12:14:11 fetching corpus: 2600, signal 95867/117729 (executing program) 2022/06/26 12:14:11 fetching corpus: 2650, signal 96227/118216 (executing program) 2022/06/26 12:14:11 fetching corpus: 2700, signal 96743/118678 (executing program) 2022/06/26 12:14:11 fetching corpus: 2750, signal 97369/119151 (executing program) 2022/06/26 12:14:11 fetching corpus: 2800, signal 97787/119589 (executing program) 2022/06/26 12:14:12 fetching corpus: 2850, signal 98095/119981 (executing program) 2022/06/26 12:14:12 fetching corpus: 2900, signal 98648/120371 (executing program) 2022/06/26 12:14:12 fetching corpus: 2950, signal 98924/120739 (executing program) 2022/06/26 12:14:12 fetching corpus: 3000, signal 99250/121123 (executing program) 2022/06/26 12:14:12 fetching corpus: 3050, signal 99939/121411 (executing program) 2022/06/26 12:14:12 fetching corpus: 3100, signal 100339/121411 (executing program) 2022/06/26 12:14:12 fetching corpus: 3150, signal 100694/121411 (executing program) 2022/06/26 12:14:12 fetching corpus: 3200, signal 101072/121411 (executing program) 2022/06/26 12:14:13 fetching corpus: 3250, signal 101465/121411 (executing program) 2022/06/26 12:14:13 fetching corpus: 3300, signal 101725/121411 (executing program) 2022/06/26 12:14:13 fetching corpus: 3350, signal 102213/121411 (executing program) 2022/06/26 12:14:13 fetching corpus: 3400, signal 102620/121411 (executing program) 2022/06/26 12:14:13 fetching corpus: 3450, signal 102835/121411 (executing program) 2022/06/26 12:14:13 fetching corpus: 3500, signal 103705/121411 (executing program) 2022/06/26 12:14:13 fetching corpus: 3550, signal 104035/121411 (executing program) 2022/06/26 12:14:13 fetching corpus: 3600, signal 104300/121411 (executing program) 2022/06/26 12:14:13 fetching corpus: 3650, signal 104550/121411 (executing program) 2022/06/26 12:14:14 fetching corpus: 3700, signal 104986/121411 (executing program) 2022/06/26 12:14:14 fetching corpus: 3750, signal 105196/121411 (executing program) 2022/06/26 12:14:14 fetching corpus: 3800, signal 105425/121411 (executing program) 2022/06/26 12:14:14 fetching corpus: 3850, signal 106555/121411 (executing program) 2022/06/26 12:14:14 fetching corpus: 3900, signal 106895/121411 (executing program) 2022/06/26 12:14:14 fetching corpus: 3950, signal 107085/121411 (executing program) 2022/06/26 12:14:14 fetching corpus: 4000, signal 107266/121411 (executing program) 2022/06/26 12:14:14 fetching corpus: 4050, signal 107586/121411 (executing program) 2022/06/26 12:14:15 fetching corpus: 4100, signal 108595/121411 (executing program) 2022/06/26 12:14:15 fetching corpus: 4150, signal 109055/121411 (executing program) 2022/06/26 12:14:15 fetching corpus: 4200, signal 109394/121411 (executing program) 2022/06/26 12:14:15 fetching corpus: 4250, signal 109642/121411 (executing program) 2022/06/26 12:14:15 fetching corpus: 4300, signal 110010/121411 (executing program) 2022/06/26 12:14:15 fetching corpus: 4350, signal 111645/121411 (executing program) 2022/06/26 12:14:15 fetching corpus: 4400, signal 111913/121411 (executing program) 2022/06/26 12:14:15 fetching corpus: 4450, signal 112239/121411 (executing program) 2022/06/26 12:14:16 fetching corpus: 4500, signal 112537/121411 (executing program) 2022/06/26 12:14:16 fetching corpus: 4550, signal 112902/121411 (executing program) 2022/06/26 12:14:16 fetching corpus: 4600, signal 113138/121411 (executing program) 2022/06/26 12:14:16 fetching corpus: 4650, signal 114209/121411 (executing program) 2022/06/26 12:14:16 fetching corpus: 4700, signal 114371/121411 (executing program) 2022/06/26 12:14:16 fetching corpus: 4750, signal 114547/121411 (executing program) 2022/06/26 12:14:16 fetching corpus: 4800, signal 115086/121411 (executing program) 2022/06/26 12:14:16 fetching corpus: 4824, signal 115170/121411 (executing program) 2022/06/26 12:14:16 fetching corpus: 4824, signal 115170/121411 (executing program) 2022/06/26 12:14:16 starting 6 fuzzer processes 12:14:16 executing program 0: ioctl$WSKBDIO_SETDEFAULTBELL(0xffffffffffffffff, 0x80105705, &(0x7f0000000000)={0x4, 0x9, 0x6, 0x1}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$WSDISPLAYIO_GETCMAP(r0, 0x80205742, &(0x7f0000000140)={0xffffffff, 0x4, &(0x7f0000000080)=0x8, &(0x7f00000000c0)=0x8, &(0x7f0000000100)=0x80}) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$WSKBDIO_GETLEDS(r2, 0x4004570c, 0xff) r4 = open(&(0x7f00000001c0)='./file0\x00', 0x40, 0x100) ioctl$WSMOUSEIO_SSCALE(r4, 0x80085722, &(0x7f0000000200)=[0xfffff010, 0x3]) ioctl$KDENABIO(r1, 0x20004b3c) ioctl$WSMOUSEIO_GETREPEAT(r3, 0x40185727, &(0x7f0000000240)) r5 = dup3(r1, r2, 0x400000) compat_43_ogetdirentries(r5, &(0x7f0000000280)=""/165, 0x9c, &(0x7f0000000340)=0x3) compat_43_ogetdirentries(0xffffffffffffffff, &(0x7f0000000380)=""/112, 0x6f, &(0x7f0000000400)=0x3) fktrace(r1, 0x1, 0x8, 0xffffffffffffffff) link(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00') r6 = syz_usb_connect$printer(0x4, 0x36, &(0x7f00000004c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x40, 0x20, 0xf7, [{{0x9, 0x4, 0x0, 0xe9, 0x1, 0x7, 0x1, 0x1, 0x6, "", {{{0x9, 0x5, 0x1, 0x2, 0x8, 0xfe, 0x1, 0x4}}, [{{0x9, 0x5, 0x82, 0x2, 0x20, 0x40, 0xff, 0x5}}]}}}]}}]}}, &(0x7f0000000780)={0xa, &(0x7f0000000500)={0xa, 0x6, 0x200, 0x80, 0x7, 0x0, 0x8}, 0x29, &(0x7f0000000540)={0x5, 0xf, 0x29, 0x4, [@ptm_cap={0x3}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x6, 0x9, 0x7}, @ssp_cap={0x14, 0x10, 0xa, 0x7f, 0x2, 0x5, 0xf00, 0x225e, [0xf, 0x3f0f]}]}, 0x6, [{0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x446}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x40e}}, {0x48, &(0x7f0000000600)=@string={0x48, 0x3, "995873204de35d94abb339c67c9365111c4265b09df7b4f8f25fea96e37de8f5868fd98b4dcc9249404c1ebe95057f05f9ffb90d8a5c86aaec7cad170dbc0c4be079a88cacff"}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x1c01}}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x1c4c}}, {0x7e, &(0x7f0000000700)=@string={0x7e, 0x3, "f34e588335800fdc577bb34d6e75a3a0a9f74a8e0f3e83057a9266a865cf44405bf1962eea9cca101e04636510046fab1b6524e75004217b709c22deebf7d11f4120c2d47e61458b5ffc270ba6e33449b9fb55a964451361636ffe97b911867ad7c8098b25072af2a54bb100938f77d04719e659f26c03f464ae71e2"}}]}) fsync(r6) fcntl$lock(r6, 0x8, &(0x7f0000000800)={0x1, 0x0, 0x7, 0xffff, 0xffffffffffffffff}) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2, 0x810, r5, 0x0, 0x20) r7 = dup3(r3, r6, 0x0) ioctl$FIONREAD(r7, 0x4004667f, &(0x7f0000000840)) 12:14:16 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) preadv(r1, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/126, 0x7e}, {&(0x7f00000000c0)=""/250, 0xfa}, {&(0x7f00000001c0)=""/251, 0xfb}], 0x3, 0xc347) r2 = accept(r1, 0x0, &(0x7f0000000300)) r3 = fcntl$dupfd(r2, 0x0, r1) fchmod(r3, 0x20) mmap(&(0x7f0000ff1000/0xf000)=nil, 0xf000, 0x4, 0x10, r3, 0x0, 0xfffffffffffffffa) ioctl$FIONWRITE(r0, 0x40046679, &(0x7f0000000340)) read(r3, &(0x7f0000000380)=""/42, 0x2a) r4 = socket$inet6(0x18, 0x5, 0x3f) ioctl$FIOSETOWN(r4, 0x8004667c, &(0x7f00000003c0)=0x1) ioctl$WSDISPLAYIO_DSSCROLL(r0, 0x800c5758, &(0x7f0000000400)={0x2, 0x6, 0xcb}) write(r0, &(0x7f0000000440)="952e6283a6c2b389423424cab7ed756cf26cd733dbe6f70806bf3d4bf5222dfae6444cefd4660e2dc8eb80123f0c56fcf6f2df931cf7414afb6f6edd743cd75b91f9149ac371a2ce196f9d81bafdb67080c8559697c0f7da19cede89db699142562f70beb3b1a78d4955fe05f02ebfaca11b817fd1ff3973bc3c173480a80d582b29a74bc382d2b4cb6aee34d120cf096bae5b59a05f4ae384fd42595bd65411a664f03f14f0efaad7a5ed2e1307b3bfe9f3aa61bc107b6c21e4b2a4880f70facdc830455ce55eee121c", 0xca) compat_43_orecv(r1, &(0x7f0000000540)=""/184, 0xb8, 0x840) write(r4, &(0x7f0000000600)="75c8bc48935d56ca468701a8038eeb189e03388a2364a9b5499728168e2664e051c64751233a7c8be6eebc202d51b64086e513e6bf0bd900fce4a8a0098c8c0a95213b374cc4b2e3eead57833c743db81a53f6e26b0156d4cdd60e35bf3105f3915bb7d278b4a3e1a34f26dbccfb2a385e9df58e9defd95488b9cacc1027e0bf6b99478e035d07965e90677210f657c8aaecf8bf90de0de2dd57ffbf66b8c453c9f73a27b7faa05cfac2a6aba3c08c01f292b863d4855b0292c930e7b3d62a153d427196362364936043bde28e56dbcbeb1fe6dbb2a4fdb12e85454b", 0xdc) connect(r4, &(0x7f0000000700)=@len=0x3, 0xe) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x10, r3, 0x0, 0x200) ioctl$WSKBDIO_SETDEFAULTBELL(r0, 0x80105705, &(0x7f0000000740)={0x1, 0x6, 0x1, 0xffffffff}) r5 = getpid() r6 = compat_30_fhopen(&(0x7f00000007c0)={{[0x8, 0x7]}, {0x8, 0x7, "5adff295448c05ff57323ea8110edcaa"}}, 0x40) posix_spawn(r5, &(0x7f0000000780)='\x00', &(0x7f0000000880)={0x2, 0x2, &(0x7f0000000840)=@open={0x0, r6, {&(0x7f0000000800)='-])\x00', 0x3, 0x3}}}, &(0x7f00000008c0)={0x8, 0x0, {0xc92}, 0xffff, {[0x2, 0x3, 0xfffff000]}, {[0xe109, 0x3, 0x5, 0x8]}}, &(0x7f0000000900)=['!\x00', '\x00', '\x00', '[@^$%\x00', '\x00', '&^),:\\\xdb\x00', '+--\xed\x00', '#\x00'], &(0x7f0000000940)=['#./{\x00', '\\-]#{\\&[-{%\x00', '{\'#\x00', '\x00', ':!%\x00', '{.\x00', '#^-+T\xea(\x00', '-{,)\x00', '\x00']) 12:14:16 executing program 2: ioctl$WSKBDIO_SETMAP(0xffffffffffffffff, 0x8010570e, &(0x7f0000000040)={0xa, &(0x7f0000000000)={0x7ff, [0xffff, 0x6], [0xffff, 0xd4]}}) ioctl$WSDISPLAYIO_LINEBYTES(0xffffffffffffffff, 0x4004575f, &(0x7f0000000080)) ioctl$VT_ACTIVATE(0xffffffffffffff9c, 0x20007605) ioctl$WSMUXIO_ADD_DEVICE(0xffffffffffffff9c, 0x80085761, &(0x7f00000000c0)={0x3, 0x2}) ioctl$KDGETLED(0xffffffffffffffff, 0x40044b41, 0x58) ioctl$WSDISPLAYIO_GTYPE(0xffffffffffffff9c, 0x40045740, &(0x7f0000000100)) ioctl$WSKBDIO_SETBELL(0xffffffffffffffff, 0x80105703, &(0x7f0000000140)={0x1, 0x6, 0x8, 0x73}) ioctl$KDMKTONE(0xffffffffffffff9c, 0x20004b08) ioctl$WSDISPLAYIO_GET_EDID(0xffffffffffffffff, 0xc0105766, &(0x7f0000000240)={0xfff, 0x0, &(0x7f0000000180)="dabc537ee0acb8263d882ef6c8c286cb8f5cc2068ca50012e7570d2e4616975c2feb568372016c7e0f74bf348103640eca6e0b7fd3bbc95abbdb0ed9d16d8844c0fe092ef7a40a768f7ee27ab8764917f98dfecf848b453792e4e5aca0d66e0e8b8e3cddfb56b451d56ddbea084155a9300d0b12ebb18111bad7688308b61bcfb5beb82497b3f4015052fc84c6d7d6312a62f5b61a45db5555e8d50b2fa6e0bcded5ff4ef3"}) ioctl$WSKBDIO_GETBELL(0xffffffffffffffff, 0x40105704, &(0x7f0000000280)) ioctl$WSDISPLAYIO_GETACTIVESCREEN(0xffffffffffffffff, 0x40045754, 0x9) ioctl$WSMOUSEIO_SRATE(0xffffffffffffffff, 0x80045723, &(0x7f00000002c0)=0x101) ioctl$WSKBDIO_SETKEYCLICK(0xffffffffffffff9c, 0x80045715, 0x0) ioctl$WSMUXIO_REMOVE_DEVICE(0xffffffffffffffff, 0x80085762, &(0x7f0000000300)={0x3, 0xf425}) ioctl$WSKBDIO_GETDEFAULTKEYREPEAT(0xffffffffffffffff, 0x400c570a, &(0x7f0000000340)) ioctl$WSKBDIO_BELL(0xffffffffffffffff, 0x20005701) ioctl$WSMOUSEIO_GTYPE(0xffffffffffffffff, 0x40045720, &(0x7f0000000380)) ioctl$WSKBDIO_COMPLEXBELL(0xffffffffffffff9c, 0x80105702, &(0x7f00000003c0)={0x7, 0x2, 0x6}) r0 = openat$wscons(0xffffffffffffff9c, &(0x7f0000000400), 0x20, 0x0) ioctl$WSDISPLAYIO_DSSCROLL(r0, 0x800c5758, &(0x7f0000000440)={0x3, 0x1, 0x5}) 12:14:16 executing program 4: compat_43_ogetrlimit(0x5, &(0x7f0000000000)) compat_43_osetrlimit(0xf32abcb016c121c1, &(0x7f0000000040)={0x8001, 0x7fff00}) compat_43_osetrlimit(0x9, &(0x7f0000000080)={0x1000, 0x20}) compat_43_ogetrlimit(0x8, &(0x7f00000000c0)) compat_43_osetrlimit(0x2, &(0x7f0000000100)={0x7fffffff, 0x3f}) compat_43_osetrlimit(0x9, &(0x7f0000000140)={0x1cc, 0x4}) compat_43_osetrlimit(0x0, &(0x7f0000000180)={0x9, 0x2}) compat_43_osetrlimit(0xb, &(0x7f00000001c0)={0x3, 0x986}) compat_43_osetrlimit(0x2, &(0x7f0000000200)={0x81, 0x2}) compat_43_ogetrlimit(0x9, &(0x7f0000000240)) compat_43_osetrlimit(0x5, &(0x7f0000000280)={0x8, 0x7}) compat_43_osetrlimit(0x6, &(0x7f00000002c0)={0x1ff, 0x1000}) compat_43_ogetrlimit(0x2, &(0x7f0000000300)) compat_43_ogetrlimit(0x0, &(0x7f0000000340)) compat_43_ogetrlimit(0x1, &(0x7f0000000380)) compat_43_osetrlimit(0x1, &(0x7f00000003c0)={0x2, 0x3}) compat_43_osetrlimit(0x1, &(0x7f0000000400)={0x7f6620a1}) compat_43_osetrlimit(0x8, &(0x7f0000000440)={0x3, 0x7}) compat_43_osetrlimit(0x2, &(0x7f0000000480)={0x4, 0x5d}) compat_43_osetrlimit(0x5, &(0x7f00000004c0)={0x100, 0x1}) 12:14:17 executing program 5: mlock(&(0x7f0000ffe000/0x1000)=nil, 0x1000) mlock(&(0x7f0000ffe000/0x1000)=nil, 0x1000) mlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) r0 = openat$hdaudio(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0, 0xfffffffffffff000) munmap(&(0x7f0000ff8000/0x8000)=nil, 0x8000) r1 = dup3(r0, r0, 0x4) ioctl$HDAUDIO_FGRP_WIDGET_INFO(r1, 0xc0106803, &(0x7f0000000100)={&(0x7f0000000040)="d3e4e710eeca88717f7bbd459690135f273e7605d41a9e7b3c42cb70e3735c9a7c2a88524fc8faf1f870d9e449d48195fb7a985e9cd8c784a9832521aa75a2a155c88642730fbfa5459006923bce6f2da3a9f9eb44e4132b14297281818e66e1ca9b7f5a2d35d1e7938cddcc0280afe314d70704194cfb527b4dc7703704c35cf3f8ef30ffd1", 0x86}) r2 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) ioctl$FIONWRITE(r2, 0x40046679, &(0x7f0000000140)) r3 = openat(r2, &(0x7f0000000180)='./file0\x00', 0x8, 0x1) ioctl$HDAUDIO_FGRP_CODEC_INFO(r0, 0xc0106804, &(0x7f0000000240)={&(0x7f00000001c0)="879e03f77b77acea661cbf6ba62b1df2fcd226e62e77490ed380ce6d4e360e39b7af99fe5fbc60ca389b40f42027e42e06671410683060a171524762dc10b565c670cc3beaab48d2efb37148855c2fbffba01c211e6356d29ba5f7613a0594934355cbc1550bfe3a5e04fa57e133e39f5b6b9ad88179", 0x76}) munmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000) munlock(&(0x7f0000ff7000/0x4000)=nil, 0x4000) mlock(&(0x7f0000fef000/0x11000)=nil, 0x11000) msgrcv(0x0, &(0x7f0000000280)={0x0, ""/181}, 0xbd, 0x1, 0x1000) fstatat(r3, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x400) syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000440)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x5, 0x10, 0x2, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x7, 0x1, 0x1, 0x40, "", {{{0x9, 0x5, 0x1, 0x2, 0x200, 0x6, 0x40}}}}}]}}]}}, &(0x7f00000005c0)={0xa, &(0x7f0000000480)={0xa, 0x6, 0x250, 0x9, 0x1a, 0x0, 0x20, 0x4}, 0x1b, &(0x7f00000004c0)={0x5, 0xf, 0x1b, 0x2, [@wireless={0xb, 0x10, 0x1, 0x2, 0x2, 0x40, 0x7, 0xffff, 0x1}, @wireless={0xb, 0x10, 0x1, 0x4, 0x20, 0x9, 0x4, 0x1ff, 0x1}]}, 0x3, [{0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x458}}, {0x38, &(0x7f0000000540)=@string={0x38, 0x3, "01b5ab06a4074bc6126cd200b7abfb245c7bf3679e29e58ecd0e701ad5fff9188dc2284f92464414394ee7181dbf2aa47a1d34416e7c"}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x280a}}]}) openat$wscons(0xffffffffffffff9c, &(0x7f0000000600), 0x400000, 0x0) ioctl$FIOSETOWN(0xffffffffffffffff, 0x8004667c, &(0x7f0000000680)=0x3) 12:14:16 executing program 3: r0 = _lwp_self() _lwp_wait(r0, &(0x7f0000000000)=0xffffffffffffffff) r1 = _lwp_self() _lwp_wakeup(r1) _lwp_suspend(0xffffffffffffffff) _lwp_suspend(r1) _lwp_create(&(0x7f0000000040)={0x400f0026, 0x0, {[0x7fffffff, 0x41, 0x9, 0x4]}, {0xb7c0, 0x1}, {0x1, 0x0, ')-$(,^\\*\x00'}}, 0x40, &(0x7f00000000c0)=0x0) _lwp_suspend(r2) _lwp_create(&(0x7f0000000180)={0x2, &(0x7f0000000100)={0x400f0021, 0x0, {[0x81, 0x400, 0x4, 0x20]}, {0x27d, 0x8001, 0x5}, {0x63, 0x5, ')-$(,^\\*\x00'}}, {[0x7, 0x36, 0x8, 0x3]}, {0x0, 0x101}, {0x6, 0x4, '-\x00'}}, 0x0, &(0x7f0000000200)=0x0) _lwp_wakeup(r3) r4 = _lwp_self() _lwp_wait(r0, &(0x7f0000000240)=r4) _lwp_detach(r2) _lwp_create(&(0x7f0000000300)={0x400f0021, &(0x7f0000000280)={0x4, 0x0, {[0x2000, 0xa7b, 0x8, 0x2]}, {0x10000, 0x380000000000, 0x1}, {0x73c, 0x3, ')-$(,^\\*\x00'}}, {[0x3ff, 0x8, 0x5, 0x1f]}, {0x7, 0x7, 0x5}, {0x9, 0x2, '-\x00'}}, 0x0, &(0x7f0000000380)=0x0) _lwp_detach(r5) _lwp_create(&(0x7f00000004c0)={0x400f0023, &(0x7f0000000440)={0x0, &(0x7f00000003c0)={0x4, 0x0, {[0xffff8000, 0x10000, 0xffffff00, 0x86f]}, {0xaccb, 0x7, 0x1}, {0x5, 0xfffffffffffffffc, '-\x00'}}, {[0x3ff, 0xae1e, 0x6, 0x101]}, {0x1, 0x9}, {0x40, 0x4, '&+(#.+\x00'}}, {[0x1, 0x4, 0x7, 0x8]}, {}, {0xed, 0x6, '\xd4{{-\x95$$\'\x00'}}, 0x40, &(0x7f0000000540)=0x0) _lwp_kill(r6, 0x83) _lwp_wait(r6, &(0x7f0000000580)=r4) _lwp_self() _lwp_continue(0x0) 12:14:19 executing program 4: compat_43_ogetrlimit(0x5, &(0x7f0000000000)) (async) compat_43_osetrlimit(0xf32abcb016c121c1, &(0x7f0000000040)={0x8001, 0x7fff00}) (async) compat_43_osetrlimit(0x9, &(0x7f0000000080)={0x1000, 0x20}) (async) compat_43_ogetrlimit(0x8, &(0x7f00000000c0)) (async) compat_43_osetrlimit(0x2, &(0x7f0000000100)={0x7fffffff, 0x3f}) (async) compat_43_osetrlimit(0x9, &(0x7f0000000140)={0x1cc, 0x4}) compat_43_osetrlimit(0x0, &(0x7f0000000180)={0x9, 0x2}) (async) compat_43_osetrlimit(0xb, &(0x7f00000001c0)={0x3, 0x986}) (async) compat_43_osetrlimit(0x2, &(0x7f0000000200)={0x81, 0x2}) compat_43_ogetrlimit(0x9, &(0x7f0000000240)) (async) compat_43_osetrlimit(0x5, &(0x7f0000000280)={0x8, 0x7}) (async) compat_43_osetrlimit(0x6, &(0x7f00000002c0)={0x1ff, 0x1000}) compat_43_ogetrlimit(0x2, &(0x7f0000000300)) compat_43_ogetrlimit(0x0, &(0x7f0000000340)) compat_43_ogetrlimit(0x1, &(0x7f0000000380)) (async) compat_43_osetrlimit(0x1, &(0x7f00000003c0)={0x2, 0x3}) compat_43_osetrlimit(0x1, &(0x7f0000000400)={0x7f6620a1}) (async) compat_43_osetrlimit(0x8, &(0x7f0000000440)={0x3, 0x7}) compat_43_osetrlimit(0x2, &(0x7f0000000480)={0x4, 0x5d}) (async) compat_43_osetrlimit(0x5, &(0x7f00000004c0)={0x100, 0x1}) 12:14:19 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) preadv(r1, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/126, 0x7e}, {&(0x7f00000000c0)=""/250, 0xfa}, {&(0x7f00000001c0)=""/251, 0xfb}], 0x3, 0xc347) r2 = accept(r1, 0x0, &(0x7f0000000300)) r3 = fcntl$dupfd(r2, 0x0, r1) fchmod(r3, 0x20) (async) mmap(&(0x7f0000ff1000/0xf000)=nil, 0xf000, 0x4, 0x10, r3, 0x0, 0xfffffffffffffffa) ioctl$FIONWRITE(r0, 0x40046679, &(0x7f0000000340)) read(r3, &(0x7f0000000380)=""/42, 0x2a) (async) r4 = socket$inet6(0x18, 0x5, 0x3f) ioctl$FIOSETOWN(r4, 0x8004667c, &(0x7f00000003c0)=0x1) (async) ioctl$WSDISPLAYIO_DSSCROLL(r0, 0x800c5758, &(0x7f0000000400)={0x2, 0x6, 0xcb}) (async) write(r0, &(0x7f0000000440)="952e6283a6c2b389423424cab7ed756cf26cd733dbe6f70806bf3d4bf5222dfae6444cefd4660e2dc8eb80123f0c56fcf6f2df931cf7414afb6f6edd743cd75b91f9149ac371a2ce196f9d81bafdb67080c8559697c0f7da19cede89db699142562f70beb3b1a78d4955fe05f02ebfaca11b817fd1ff3973bc3c173480a80d582b29a74bc382d2b4cb6aee34d120cf096bae5b59a05f4ae384fd42595bd65411a664f03f14f0efaad7a5ed2e1307b3bfe9f3aa61bc107b6c21e4b2a4880f70facdc830455ce55eee121c", 0xca) (async) compat_43_orecv(r1, &(0x7f0000000540)=""/184, 0xb8, 0x840) write(r4, &(0x7f0000000600)="75c8bc48935d56ca468701a8038eeb189e03388a2364a9b5499728168e2664e051c64751233a7c8be6eebc202d51b64086e513e6bf0bd900fce4a8a0098c8c0a95213b374cc4b2e3eead57833c743db81a53f6e26b0156d4cdd60e35bf3105f3915bb7d278b4a3e1a34f26dbccfb2a385e9df58e9defd95488b9cacc1027e0bf6b99478e035d07965e90677210f657c8aaecf8bf90de0de2dd57ffbf66b8c453c9f73a27b7faa05cfac2a6aba3c08c01f292b863d4855b0292c930e7b3d62a153d427196362364936043bde28e56dbcbeb1fe6dbb2a4fdb12e85454b", 0xdc) connect(r4, &(0x7f0000000700)=@len=0x3, 0xe) (async) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x10, r3, 0x0, 0x200) (async) ioctl$WSKBDIO_SETDEFAULTBELL(r0, 0x80105705, &(0x7f0000000740)={0x1, 0x6, 0x1, 0xffffffff}) r5 = getpid() r6 = compat_30_fhopen(&(0x7f00000007c0)={{[0x8, 0x7]}, {0x8, 0x7, "5adff295448c05ff57323ea8110edcaa"}}, 0x40) posix_spawn(r5, &(0x7f0000000780)='\x00', &(0x7f0000000880)={0x2, 0x2, &(0x7f0000000840)=@open={0x0, r6, {&(0x7f0000000800)='-])\x00', 0x3, 0x3}}}, &(0x7f00000008c0)={0x8, 0x0, {0xc92}, 0xffff, {[0x2, 0x3, 0xfffff000]}, {[0xe109, 0x3, 0x5, 0x8]}}, &(0x7f0000000900)=['!\x00', '\x00', '\x00', '[@^$%\x00', '\x00', '&^),:\\\xdb\x00', '+--\xed\x00', '#\x00'], &(0x7f0000000940)=['#./{\x00', '\\-]#{\\&[-{%\x00', '{\'#\x00', '\x00', ':!%\x00', '{.\x00', '#^-+T\xea(\x00', '-{,)\x00', '\x00']) 12:14:19 executing program 2: ioctl$WSKBDIO_SETMAP(0xffffffffffffffff, 0x8010570e, &(0x7f0000000040)={0xa, &(0x7f0000000000)={0x7ff, [0xffff, 0x6], [0xffff, 0xd4]}}) ioctl$WSDISPLAYIO_LINEBYTES(0xffffffffffffffff, 0x4004575f, &(0x7f0000000080)) (async) ioctl$VT_ACTIVATE(0xffffffffffffff9c, 0x20007605) (async) ioctl$WSMUXIO_ADD_DEVICE(0xffffffffffffff9c, 0x80085761, &(0x7f00000000c0)={0x3, 0x2}) (async) ioctl$KDGETLED(0xffffffffffffffff, 0x40044b41, 0x58) (async) ioctl$WSDISPLAYIO_GTYPE(0xffffffffffffff9c, 0x40045740, &(0x7f0000000100)) (async) ioctl$WSKBDIO_SETBELL(0xffffffffffffffff, 0x80105703, &(0x7f0000000140)={0x1, 0x6, 0x8, 0x73}) ioctl$KDMKTONE(0xffffffffffffff9c, 0x20004b08) (async) ioctl$WSDISPLAYIO_GET_EDID(0xffffffffffffffff, 0xc0105766, &(0x7f0000000240)={0xfff, 0x0, &(0x7f0000000180)="dabc537ee0acb8263d882ef6c8c286cb8f5cc2068ca50012e7570d2e4616975c2feb568372016c7e0f74bf348103640eca6e0b7fd3bbc95abbdb0ed9d16d8844c0fe092ef7a40a768f7ee27ab8764917f98dfecf848b453792e4e5aca0d66e0e8b8e3cddfb56b451d56ddbea084155a9300d0b12ebb18111bad7688308b61bcfb5beb82497b3f4015052fc84c6d7d6312a62f5b61a45db5555e8d50b2fa6e0bcded5ff4ef3"}) (async) ioctl$WSKBDIO_GETBELL(0xffffffffffffffff, 0x40105704, &(0x7f0000000280)) ioctl$WSDISPLAYIO_GETACTIVESCREEN(0xffffffffffffffff, 0x40045754, 0x9) ioctl$WSMOUSEIO_SRATE(0xffffffffffffffff, 0x80045723, &(0x7f00000002c0)=0x101) (async) ioctl$WSKBDIO_SETKEYCLICK(0xffffffffffffff9c, 0x80045715, 0x0) (async) ioctl$WSMUXIO_REMOVE_DEVICE(0xffffffffffffffff, 0x80085762, &(0x7f0000000300)={0x3, 0xf425}) (async) ioctl$WSKBDIO_GETDEFAULTKEYREPEAT(0xffffffffffffffff, 0x400c570a, &(0x7f0000000340)) ioctl$WSKBDIO_BELL(0xffffffffffffffff, 0x20005701) ioctl$WSMOUSEIO_GTYPE(0xffffffffffffffff, 0x40045720, &(0x7f0000000380)) (async) ioctl$WSKBDIO_COMPLEXBELL(0xffffffffffffff9c, 0x80105702, &(0x7f00000003c0)={0x7, 0x2, 0x6}) (async) r0 = openat$wscons(0xffffffffffffff9c, &(0x7f0000000400), 0x20, 0x0) ioctl$WSDISPLAYIO_DSSCROLL(r0, 0x800c5758, &(0x7f0000000440)={0x3, 0x1, 0x5}) 12:14:19 executing program 2: ioctl$WSKBDIO_SETMAP(0xffffffffffffffff, 0x8010570e, &(0x7f0000000040)={0xa, &(0x7f0000000000)={0x7ff, [0xffff, 0x6], [0xffff, 0xd4]}}) ioctl$WSDISPLAYIO_LINEBYTES(0xffffffffffffffff, 0x4004575f, &(0x7f0000000080)) ioctl$VT_ACTIVATE(0xffffffffffffff9c, 0x20007605) ioctl$WSMUXIO_ADD_DEVICE(0xffffffffffffff9c, 0x80085761, &(0x7f00000000c0)={0x3, 0x2}) ioctl$KDGETLED(0xffffffffffffffff, 0x40044b41, 0x58) ioctl$WSDISPLAYIO_GTYPE(0xffffffffffffff9c, 0x40045740, &(0x7f0000000100)) ioctl$WSKBDIO_SETBELL(0xffffffffffffffff, 0x80105703, &(0x7f0000000140)={0x1, 0x6, 0x8, 0x73}) ioctl$KDMKTONE(0xffffffffffffff9c, 0x20004b08) ioctl$WSDISPLAYIO_GET_EDID(0xffffffffffffffff, 0xc0105766, &(0x7f0000000240)={0xfff, 0x0, &(0x7f0000000180)="dabc537ee0acb8263d882ef6c8c286cb8f5cc2068ca50012e7570d2e4616975c2feb568372016c7e0f74bf348103640eca6e0b7fd3bbc95abbdb0ed9d16d8844c0fe092ef7a40a768f7ee27ab8764917f98dfecf848b453792e4e5aca0d66e0e8b8e3cddfb56b451d56ddbea084155a9300d0b12ebb18111bad7688308b61bcfb5beb82497b3f4015052fc84c6d7d6312a62f5b61a45db5555e8d50b2fa6e0bcded5ff4ef3"}) ioctl$WSKBDIO_GETBELL(0xffffffffffffffff, 0x40105704, &(0x7f0000000280)) ioctl$WSDISPLAYIO_GETACTIVESCREEN(0xffffffffffffffff, 0x40045754, 0x9) ioctl$WSMOUSEIO_SRATE(0xffffffffffffffff, 0x80045723, &(0x7f00000002c0)=0x101) ioctl$WSKBDIO_SETKEYCLICK(0xffffffffffffff9c, 0x80045715, 0x0) ioctl$WSMUXIO_REMOVE_DEVICE(0xffffffffffffffff, 0x80085762, &(0x7f0000000300)={0x3, 0xf425}) ioctl$WSKBDIO_GETDEFAULTKEYREPEAT(0xffffffffffffffff, 0x400c570a, &(0x7f0000000340)) ioctl$WSKBDIO_BELL(0xffffffffffffffff, 0x20005701) ioctl$WSMOUSEIO_GTYPE(0xffffffffffffffff, 0x40045720, &(0x7f0000000380)) ioctl$WSKBDIO_COMPLEXBELL(0xffffffffffffff9c, 0x80105702, &(0x7f00000003c0)={0x7, 0x2, 0x6}) r0 = openat$wscons(0xffffffffffffff9c, &(0x7f0000000400), 0x20, 0x0) ioctl$WSDISPLAYIO_DSSCROLL(r0, 0x800c5758, &(0x7f0000000440)={0x3, 0x1, 0x5}) ioctl$WSKBDIO_SETMAP(0xffffffffffffffff, 0x8010570e, &(0x7f0000000040)={0xa, &(0x7f0000000000)={0x7ff, [0xffff, 0x6], [0xffff, 0xd4]}}) (async) ioctl$WSDISPLAYIO_LINEBYTES(0xffffffffffffffff, 0x4004575f, &(0x7f0000000080)) (async) ioctl$VT_ACTIVATE(0xffffffffffffff9c, 0x20007605) (async) ioctl$WSMUXIO_ADD_DEVICE(0xffffffffffffff9c, 0x80085761, &(0x7f00000000c0)={0x3, 0x2}) (async) ioctl$KDGETLED(0xffffffffffffffff, 0x40044b41, 0x58) (async) ioctl$WSDISPLAYIO_GTYPE(0xffffffffffffff9c, 0x40045740, &(0x7f0000000100)) (async) ioctl$WSKBDIO_SETBELL(0xffffffffffffffff, 0x80105703, &(0x7f0000000140)={0x1, 0x6, 0x8, 0x73}) (async) ioctl$KDMKTONE(0xffffffffffffff9c, 0x20004b08) (async) ioctl$WSDISPLAYIO_GET_EDID(0xffffffffffffffff, 0xc0105766, &(0x7f0000000240)={0xfff, 0x0, &(0x7f0000000180)="dabc537ee0acb8263d882ef6c8c286cb8f5cc2068ca50012e7570d2e4616975c2feb568372016c7e0f74bf348103640eca6e0b7fd3bbc95abbdb0ed9d16d8844c0fe092ef7a40a768f7ee27ab8764917f98dfecf848b453792e4e5aca0d66e0e8b8e3cddfb56b451d56ddbea084155a9300d0b12ebb18111bad7688308b61bcfb5beb82497b3f4015052fc84c6d7d6312a62f5b61a45db5555e8d50b2fa6e0bcded5ff4ef3"}) (async) ioctl$WSKBDIO_GETBELL(0xffffffffffffffff, 0x40105704, &(0x7f0000000280)) (async) ioctl$WSDISPLAYIO_GETACTIVESCREEN(0xffffffffffffffff, 0x40045754, 0x9) (async) ioctl$WSMOUSEIO_SRATE(0xffffffffffffffff, 0x80045723, &(0x7f00000002c0)=0x101) (async) ioctl$WSKBDIO_SETKEYCLICK(0xffffffffffffff9c, 0x80045715, 0x0) (async) ioctl$WSMUXIO_REMOVE_DEVICE(0xffffffffffffffff, 0x80085762, &(0x7f0000000300)={0x3, 0xf425}) (async) ioctl$WSKBDIO_GETDEFAULTKEYREPEAT(0xffffffffffffffff, 0x400c570a, &(0x7f0000000340)) (async) ioctl$WSKBDIO_BELL(0xffffffffffffffff, 0x20005701) (async) ioctl$WSMOUSEIO_GTYPE(0xffffffffffffffff, 0x40045720, &(0x7f0000000380)) (async) ioctl$WSKBDIO_COMPLEXBELL(0xffffffffffffff9c, 0x80105702, &(0x7f00000003c0)={0x7, 0x2, 0x6}) (async) openat$wscons(0xffffffffffffff9c, &(0x7f0000000400), 0x20, 0x0) (async) ioctl$WSDISPLAYIO_DSSCROLL(r0, 0x800c5758, &(0x7f0000000440)={0x3, 0x1, 0x5}) (async) 12:14:20 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) preadv(r1, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/126, 0x7e}, {&(0x7f00000000c0)=""/250, 0xfa}, {&(0x7f00000001c0)=""/251, 0xfb}], 0x3, 0xc347) r2 = accept(r1, 0x0, &(0x7f0000000300)) r3 = fcntl$dupfd(r2, 0x0, r1) fchmod(r3, 0x20) mmap(&(0x7f0000ff1000/0xf000)=nil, 0xf000, 0x4, 0x10, r3, 0x0, 0xfffffffffffffffa) ioctl$FIONWRITE(r0, 0x40046679, &(0x7f0000000340)) read(r3, &(0x7f0000000380)=""/42, 0x2a) r4 = socket$inet6(0x18, 0x5, 0x3f) ioctl$FIOSETOWN(r4, 0x8004667c, &(0x7f00000003c0)=0x1) ioctl$WSDISPLAYIO_DSSCROLL(r0, 0x800c5758, &(0x7f0000000400)={0x2, 0x6, 0xcb}) write(r0, &(0x7f0000000440)="952e6283a6c2b389423424cab7ed756cf26cd733dbe6f70806bf3d4bf5222dfae6444cefd4660e2dc8eb80123f0c56fcf6f2df931cf7414afb6f6edd743cd75b91f9149ac371a2ce196f9d81bafdb67080c8559697c0f7da19cede89db699142562f70beb3b1a78d4955fe05f02ebfaca11b817fd1ff3973bc3c173480a80d582b29a74bc382d2b4cb6aee34d120cf096bae5b59a05f4ae384fd42595bd65411a664f03f14f0efaad7a5ed2e1307b3bfe9f3aa61bc107b6c21e4b2a4880f70facdc830455ce55eee121c", 0xca) compat_43_orecv(r1, &(0x7f0000000540)=""/184, 0xb8, 0x840) write(r4, &(0x7f0000000600)="75c8bc48935d56ca468701a8038eeb189e03388a2364a9b5499728168e2664e051c64751233a7c8be6eebc202d51b64086e513e6bf0bd900fce4a8a0098c8c0a95213b374cc4b2e3eead57833c743db81a53f6e26b0156d4cdd60e35bf3105f3915bb7d278b4a3e1a34f26dbccfb2a385e9df58e9defd95488b9cacc1027e0bf6b99478e035d07965e90677210f657c8aaecf8bf90de0de2dd57ffbf66b8c453c9f73a27b7faa05cfac2a6aba3c08c01f292b863d4855b0292c930e7b3d62a153d427196362364936043bde28e56dbcbeb1fe6dbb2a4fdb12e85454b", 0xdc) connect(r4, &(0x7f0000000700)=@len=0x3, 0xe) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x10, r3, 0x0, 0x200) ioctl$WSKBDIO_SETDEFAULTBELL(r0, 0x80105705, &(0x7f0000000740)={0x1, 0x6, 0x1, 0xffffffff}) r5 = getpid() r6 = compat_30_fhopen(&(0x7f00000007c0)={{[0x8, 0x7]}, {0x8, 0x7, "5adff295448c05ff57323ea8110edcaa"}}, 0x40) posix_spawn(r5, &(0x7f0000000780)='\x00', &(0x7f0000000880)={0x2, 0x2, &(0x7f0000000840)=@open={0x0, r6, {&(0x7f0000000800)='-])\x00', 0x3, 0x3}}}, &(0x7f00000008c0)={0x8, 0x0, {0xc92}, 0xffff, {[0x2, 0x3, 0xfffff000]}, {[0xe109, 0x3, 0x5, 0x8]}}, &(0x7f0000000900)=['!\x00', '\x00', '\x00', '[@^$%\x00', '\x00', '&^),:\\\xdb\x00', '+--\xed\x00', '#\x00'], &(0x7f0000000940)=['#./{\x00', '\\-]#{\\&[-{%\x00', '{\'#\x00', '\x00', ':!%\x00', '{.\x00', '#^-+T\xea(\x00', '-{,)\x00', '\x00']) pipe(&(0x7f0000000000)) (async) preadv(r1, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/126, 0x7e}, {&(0x7f00000000c0)=""/250, 0xfa}, {&(0x7f00000001c0)=""/251, 0xfb}], 0x3, 0xc347) (async) accept(r1, 0x0, &(0x7f0000000300)) (async) fcntl$dupfd(r2, 0x0, r1) (async) fchmod(r3, 0x20) (async) mmap(&(0x7f0000ff1000/0xf000)=nil, 0xf000, 0x4, 0x10, r3, 0x0, 0xfffffffffffffffa) (async) ioctl$FIONWRITE(r0, 0x40046679, &(0x7f0000000340)) (async) read(r3, &(0x7f0000000380)=""/42, 0x2a) (async) socket$inet6(0x18, 0x5, 0x3f) (async) ioctl$FIOSETOWN(r4, 0x8004667c, &(0x7f00000003c0)=0x1) (async) ioctl$WSDISPLAYIO_DSSCROLL(r0, 0x800c5758, &(0x7f0000000400)={0x2, 0x6, 0xcb}) (async) write(r0, &(0x7f0000000440)="952e6283a6c2b389423424cab7ed756cf26cd733dbe6f70806bf3d4bf5222dfae6444cefd4660e2dc8eb80123f0c56fcf6f2df931cf7414afb6f6edd743cd75b91f9149ac371a2ce196f9d81bafdb67080c8559697c0f7da19cede89db699142562f70beb3b1a78d4955fe05f02ebfaca11b817fd1ff3973bc3c173480a80d582b29a74bc382d2b4cb6aee34d120cf096bae5b59a05f4ae384fd42595bd65411a664f03f14f0efaad7a5ed2e1307b3bfe9f3aa61bc107b6c21e4b2a4880f70facdc830455ce55eee121c", 0xca) (async) compat_43_orecv(r1, &(0x7f0000000540)=""/184, 0xb8, 0x840) (async) write(r4, &(0x7f0000000600)="75c8bc48935d56ca468701a8038eeb189e03388a2364a9b5499728168e2664e051c64751233a7c8be6eebc202d51b64086e513e6bf0bd900fce4a8a0098c8c0a95213b374cc4b2e3eead57833c743db81a53f6e26b0156d4cdd60e35bf3105f3915bb7d278b4a3e1a34f26dbccfb2a385e9df58e9defd95488b9cacc1027e0bf6b99478e035d07965e90677210f657c8aaecf8bf90de0de2dd57ffbf66b8c453c9f73a27b7faa05cfac2a6aba3c08c01f292b863d4855b0292c930e7b3d62a153d427196362364936043bde28e56dbcbeb1fe6dbb2a4fdb12e85454b", 0xdc) (async) connect(r4, &(0x7f0000000700)=@len=0x3, 0xe) (async) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x10, r3, 0x0, 0x200) (async) ioctl$WSKBDIO_SETDEFAULTBELL(r0, 0x80105705, &(0x7f0000000740)={0x1, 0x6, 0x1, 0xffffffff}) (async) getpid() (async) compat_30_fhopen(&(0x7f00000007c0)={{[0x8, 0x7]}, {0x8, 0x7, "5adff295448c05ff57323ea8110edcaa"}}, 0x40) (async) posix_spawn(r5, &(0x7f0000000780)='\x00', &(0x7f0000000880)={0x2, 0x2, &(0x7f0000000840)=@open={0x0, r6, {&(0x7f0000000800)='-])\x00', 0x3, 0x3}}}, &(0x7f00000008c0)={0x8, 0x0, {0xc92}, 0xffff, {[0x2, 0x3, 0xfffff000]}, {[0xe109, 0x3, 0x5, 0x8]}}, &(0x7f0000000900)=['!\x00', '\x00', '\x00', '[@^$%\x00', '\x00', '&^),:\\\xdb\x00', '+--\xed\x00', '#\x00'], &(0x7f0000000940)=['#./{\x00', '\\-]#{\\&[-{%\x00', '{\'#\x00', '\x00', ':!%\x00', '{.\x00', '#^-+T\xea(\x00', '-{,)\x00', '\x00']) (async) login: [ 53.8871336] uhub0: device problem, disabling port 1 12:14:20 executing program 3: r0 = _lwp_self() _lwp_wait(r0, &(0x7f0000000000)=0xffffffffffffffff) (async) r1 = _lwp_self() _lwp_wakeup(r1) _lwp_suspend(0xffffffffffffffff) _lwp_suspend(r1) (async) _lwp_create(&(0x7f0000000040)={0x400f0026, 0x0, {[0x7fffffff, 0x41, 0x9, 0x4]}, {0xb7c0, 0x1}, {0x1, 0x0, ')-$(,^\\*\x00'}}, 0x40, &(0x7f00000000c0)=0x0) _lwp_suspend(r2) _lwp_create(&(0x7f0000000180)={0x2, &(0x7f0000000100)={0x400f0021, 0x0, {[0x81, 0x400, 0x4, 0x20]}, {0x27d, 0x8001, 0x5}, {0x63, 0x5, ')-$(,^\\*\x00'}}, {[0x7, 0x36, 0x8, 0x3]}, {0x0, 0x101}, {0x6, 0x4, '-\x00'}}, 0x0, &(0x7f0000000200)=0x0) _lwp_wakeup(r3) (async) r4 = _lwp_self() _lwp_wait(r0, &(0x7f0000000240)=r4) (async) _lwp_detach(r2) (async) _lwp_create(&(0x7f0000000300)={0x400f0021, &(0x7f0000000280)={0x4, 0x0, {[0x2000, 0xa7b, 0x8, 0x2]}, {0x10000, 0x380000000000, 0x1}, {0x73c, 0x3, ')-$(,^\\*\x00'}}, {[0x3ff, 0x8, 0x5, 0x1f]}, {0x7, 0x7, 0x5}, {0x9, 0x2, '-\x00'}}, 0x0, &(0x7f0000000380)=0x0) _lwp_detach(r5) (async) _lwp_create(&(0x7f00000004c0)={0x400f0023, &(0x7f0000000440)={0x0, &(0x7f00000003c0)={0x4, 0x0, {[0xffff8000, 0x10000, 0xffffff00, 0x86f]}, {0xaccb, 0x7, 0x1}, {0x5, 0xfffffffffffffffc, '-\x00'}}, {[0x3ff, 0xae1e, 0x6, 0x101]}, {0x1, 0x9}, {0x40, 0x4, '&+(#.+\x00'}}, {[0x1, 0x4, 0x7, 0x8]}, {}, {0xed, 0x6, '\xd4{{-\x95$$\'\x00'}}, 0x40, &(0x7f0000000540)=0x0) _lwp_kill(r6, 0x83) (async) _lwp_wait(r6, &(0x7f0000000580)=r4) _lwp_self() (async) _lwp_continue(0x0) [ 54.5671371] uhub5: device problem, disabling port 1 12:14:21 executing program 2: __nanosleep50(&(0x7f0000000000)={0x61, 0x3}, &(0x7f0000000040)) socketpair(0x1f, 0x5, 0x2, 0x0) 12:14:21 executing program 4: compat_43_ogetrlimit(0x5, &(0x7f0000000000)) compat_43_osetrlimit(0xf32abcb016c121c1, &(0x7f0000000040)={0x8001, 0x7fff00}) (async) compat_43_osetrlimit(0x9, &(0x7f0000000080)={0x1000, 0x20}) (async) compat_43_ogetrlimit(0x8, &(0x7f00000000c0)) (async) compat_43_osetrlimit(0x2, &(0x7f0000000100)={0x7fffffff, 0x3f}) (async) compat_43_osetrlimit(0x9, &(0x7f0000000140)={0x1cc, 0x4}) (async) compat_43_osetrlimit(0x0, &(0x7f0000000180)={0x9, 0x2}) compat_43_osetrlimit(0xb, &(0x7f00000001c0)={0x3, 0x986}) compat_43_osetrlimit(0x2, &(0x7f0000000200)={0x81, 0x2}) (async) compat_43_ogetrlimit(0x9, &(0x7f0000000240)) compat_43_osetrlimit(0x5, &(0x7f0000000280)={0x8, 0x7}) compat_43_osetrlimit(0x6, &(0x7f00000002c0)={0x1ff, 0x1000}) (async) compat_43_ogetrlimit(0x2, &(0x7f0000000300)) (async) compat_43_ogetrlimit(0x0, &(0x7f0000000340)) (async) compat_43_ogetrlimit(0x1, &(0x7f0000000380)) (async) compat_43_osetrlimit(0x1, &(0x7f00000003c0)={0x2, 0x3}) compat_43_osetrlimit(0x1, &(0x7f0000000400)={0x7f6620a1}) (async) compat_43_osetrlimit(0x8, &(0x7f0000000440)={0x3, 0x7}) compat_43_osetrlimit(0x2, &(0x7f0000000480)={0x4, 0x5d}) compat_43_osetrlimit(0x5, &(0x7f00000004c0)={0x100, 0x1}) 12:14:21 executing program 0: ioctl$WSKBDIO_SETDEFAULTBELL(0xffffffffffffffff, 0x80105705, &(0x7f0000000000)={0x4, 0x9, 0x6, 0x1}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$WSDISPLAYIO_GETCMAP(r0, 0x80205742, &(0x7f0000000140)={0xffffffff, 0x4, &(0x7f0000000080)=0x8, &(0x7f00000000c0)=0x8, &(0x7f0000000100)=0x80}) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$WSKBDIO_GETLEDS(r2, 0x4004570c, 0xff) r4 = open(&(0x7f00000001c0)='./file0\x00', 0x40, 0x100) ioctl$WSMOUSEIO_SSCALE(r4, 0x80085722, &(0x7f0000000200)=[0xfffff010, 0x3]) ioctl$KDENABIO(r1, 0x20004b3c) ioctl$WSMOUSEIO_GETREPEAT(r3, 0x40185727, &(0x7f0000000240)) r5 = dup3(r1, r2, 0x400000) compat_43_ogetdirentries(r5, &(0x7f0000000280)=""/165, 0x9c, &(0x7f0000000340)=0x3) compat_43_ogetdirentries(0xffffffffffffffff, &(0x7f0000000380)=""/112, 0x6f, &(0x7f0000000400)=0x3) fktrace(r1, 0x1, 0x8, 0xffffffffffffffff) link(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00') r6 = syz_usb_connect$printer(0x4, 0x36, &(0x7f00000004c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x40, 0x20, 0xf7, [{{0x9, 0x4, 0x0, 0xe9, 0x1, 0x7, 0x1, 0x1, 0x6, "", {{{0x9, 0x5, 0x1, 0x2, 0x8, 0xfe, 0x1, 0x4}}, [{{0x9, 0x5, 0x82, 0x2, 0x20, 0x40, 0xff, 0x5}}]}}}]}}]}}, &(0x7f0000000780)={0xa, &(0x7f0000000500)={0xa, 0x6, 0x200, 0x80, 0x7, 0x0, 0x8}, 0x29, &(0x7f0000000540)={0x5, 0xf, 0x29, 0x4, [@ptm_cap={0x3}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x6, 0x9, 0x7}, @ssp_cap={0x14, 0x10, 0xa, 0x7f, 0x2, 0x5, 0xf00, 0x225e, [0xf, 0x3f0f]}]}, 0x6, [{0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x446}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x40e}}, {0x48, &(0x7f0000000600)=@string={0x48, 0x3, "995873204de35d94abb339c67c9365111c4265b09df7b4f8f25fea96e37de8f5868fd98b4dcc9249404c1ebe95057f05f9ffb90d8a5c86aaec7cad170dbc0c4be079a88cacff"}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x1c01}}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x1c4c}}, {0x7e, &(0x7f0000000700)=@string={0x7e, 0x3, "f34e588335800fdc577bb34d6e75a3a0a9f74a8e0f3e83057a9266a865cf44405bf1962eea9cca101e04636510046fab1b6524e75004217b709c22deebf7d11f4120c2d47e61458b5ffc270ba6e33449b9fb55a964451361636ffe97b911867ad7c8098b25072af2a54bb100938f77d04719e659f26c03f464ae71e2"}}]}) fsync(r6) fcntl$lock(r6, 0x8, &(0x7f0000000800)={0x1, 0x0, 0x7, 0xffff, 0xffffffffffffffff}) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2, 0x810, r5, 0x0, 0x20) r7 = dup3(r3, r6, 0x0) ioctl$FIONREAD(r7, 0x4004667f, &(0x7f0000000840)) ioctl$WSKBDIO_SETDEFAULTBELL(0xffffffffffffffff, 0x80105705, &(0x7f0000000000)={0x4, 0x9, 0x6, 0x1}) (async) pipe(&(0x7f0000000040)) (async) ioctl$WSDISPLAYIO_GETCMAP(r0, 0x80205742, &(0x7f0000000140)={0xffffffff, 0x4, &(0x7f0000000080)=0x8, &(0x7f00000000c0)=0x8, &(0x7f0000000100)=0x80}) (async) pipe(&(0x7f0000000180)) (async) ioctl$WSKBDIO_GETLEDS(r2, 0x4004570c, 0xff) (async) open(&(0x7f00000001c0)='./file0\x00', 0x40, 0x100) (async) ioctl$WSMOUSEIO_SSCALE(r4, 0x80085722, &(0x7f0000000200)=[0xfffff010, 0x3]) (async) ioctl$KDENABIO(r1, 0x20004b3c) (async) ioctl$WSMOUSEIO_GETREPEAT(r3, 0x40185727, &(0x7f0000000240)) (async) dup3(r1, r2, 0x400000) (async) compat_43_ogetdirentries(r5, &(0x7f0000000280)=""/165, 0x9c, &(0x7f0000000340)=0x3) (async) compat_43_ogetdirentries(0xffffffffffffffff, &(0x7f0000000380)=""/112, 0x6f, &(0x7f0000000400)=0x3) (async) fktrace(r1, 0x1, 0x8, 0xffffffffffffffff) (async) link(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00') (async) syz_usb_connect$printer(0x4, 0x36, &(0x7f00000004c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x40, 0x20, 0xf7, [{{0x9, 0x4, 0x0, 0xe9, 0x1, 0x7, 0x1, 0x1, 0x6, "", {{{0x9, 0x5, 0x1, 0x2, 0x8, 0xfe, 0x1, 0x4}}, [{{0x9, 0x5, 0x82, 0x2, 0x20, 0x40, 0xff, 0x5}}]}}}]}}]}}, &(0x7f0000000780)={0xa, &(0x7f0000000500)={0xa, 0x6, 0x200, 0x80, 0x7, 0x0, 0x8}, 0x29, &(0x7f0000000540)={0x5, 0xf, 0x29, 0x4, [@ptm_cap={0x3}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x6, 0x9, 0x7}, @ssp_cap={0x14, 0x10, 0xa, 0x7f, 0x2, 0x5, 0xf00, 0x225e, [0xf, 0x3f0f]}]}, 0x6, [{0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x446}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x40e}}, {0x48, &(0x7f0000000600)=@string={0x48, 0x3, "995873204de35d94abb339c67c9365111c4265b09df7b4f8f25fea96e37de8f5868fd98b4dcc9249404c1ebe95057f05f9ffb90d8a5c86aaec7cad170dbc0c4be079a88cacff"}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x1c01}}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x1c4c}}, {0x7e, &(0x7f0000000700)=@string={0x7e, 0x3, "f34e588335800fdc577bb34d6e75a3a0a9f74a8e0f3e83057a9266a865cf44405bf1962eea9cca101e04636510046fab1b6524e75004217b709c22deebf7d11f4120c2d47e61458b5ffc270ba6e33449b9fb55a964451361636ffe97b911867ad7c8098b25072af2a54bb100938f77d04719e659f26c03f464ae71e2"}}]}) (async) fsync(r6) (async) fcntl$lock(r6, 0x8, &(0x7f0000000800)={0x1, 0x0, 0x7, 0xffff, 0xffffffffffffffff}) (async) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2, 0x810, r5, 0x0, 0x20) (async) dup3(r3, r6, 0x0) (async) ioctl$FIONREAD(r7, 0x4004667f, &(0x7f0000000840)) (async) 12:14:21 executing program 1: sendto$unix(0xffffffffffffffff, &(0x7f0000000100)="17a654912c", 0x5, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="00002e0800696c0930f51ffcb7e411ccba1fe59677ebf1470f0000000067174be56b5f397712185b301f9bea76e29a984e4917daaac81183cf5a201d09d98454a55f8e7cb4786b39f91be7997383709b8d1a9108aeabf49357495e78b2af6270295e068470e63dd6036f45a458aaa175c6f31f7d27b86a4923f4680c6fb7acc110b2adea57a69d4749037e17565201576c9c66c1d6524e7d5a754ae9d3b419716fc7e17b414e0f52669df5a39dc6e632447dfd"], 0xa) r0 = open(&(0x7f0000000040)='./file0\x00', 0x200, 0x0) r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x408001, 0x0) writev(r1, &(0x7f0000000340)=[{&(0x7f0000000000), 0x2cfea}], 0x1000000000000013) r2 = openat(0xffffffffffffffff, &(0x7f0000001640)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1, 0x10, r2, 0x0, 0x0) preadv(r2, &(0x7f0000001580)=[{0x0}], 0x1, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x10, r0, 0x0, 0x0) r3 = socket$inet6(0x18, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000080)='3', 0x1, 0x0, &(0x7f0000000000)={0x18, 0x2, 0x0, 0x20080fa}, 0xc) 12:14:21 executing program 3: r0 = _lwp_self() _lwp_wait(r0, &(0x7f0000000000)=0xffffffffffffffff) r1 = _lwp_self() _lwp_wakeup(r1) (async) _lwp_suspend(0xffffffffffffffff) (async) _lwp_suspend(r1) (async) _lwp_create(&(0x7f0000000040)={0x400f0026, 0x0, {[0x7fffffff, 0x41, 0x9, 0x4]}, {0xb7c0, 0x1}, {0x1, 0x0, ')-$(,^\\*\x00'}}, 0x40, &(0x7f00000000c0)=0x0) _lwp_suspend(r2) _lwp_create(&(0x7f0000000180)={0x2, &(0x7f0000000100)={0x400f0021, 0x0, {[0x81, 0x400, 0x4, 0x20]}, {0x27d, 0x8001, 0x5}, {0x63, 0x5, ')-$(,^\\*\x00'}}, {[0x7, 0x36, 0x8, 0x3]}, {0x0, 0x101}, {0x6, 0x4, '-\x00'}}, 0x0, &(0x7f0000000200)=0x0) _lwp_wakeup(r3) (async) r4 = _lwp_self() _lwp_wait(r0, &(0x7f0000000240)=r4) (async) _lwp_detach(r2) (async) _lwp_create(&(0x7f0000000300)={0x400f0021, &(0x7f0000000280)={0x4, 0x0, {[0x2000, 0xa7b, 0x8, 0x2]}, {0x10000, 0x380000000000, 0x1}, {0x73c, 0x3, ')-$(,^\\*\x00'}}, {[0x3ff, 0x8, 0x5, 0x1f]}, {0x7, 0x7, 0x5}, {0x9, 0x2, '-\x00'}}, 0x0, &(0x7f0000000380)=0x0) _lwp_detach(r5) (async) _lwp_create(&(0x7f00000004c0)={0x400f0023, &(0x7f0000000440)={0x0, &(0x7f00000003c0)={0x4, 0x0, {[0xffff8000, 0x10000, 0xffffff00, 0x86f]}, {0xaccb, 0x7, 0x1}, {0x5, 0xfffffffffffffffc, '-\x00'}}, {[0x3ff, 0xae1e, 0x6, 0x101]}, {0x1, 0x9}, {0x40, 0x4, '&+(#.+\x00'}}, {[0x1, 0x4, 0x7, 0x8]}, {}, {0xed, 0x6, '\xd4{{-\x95$$\'\x00'}}, 0x40, &(0x7f0000000540)=0x0) _lwp_kill(r6, 0x83) (async) _lwp_wait(r6, &(0x7f0000000580)=r4) (async) _lwp_self() (async) _lwp_continue(0x0) 12:14:21 executing program 5: mlock(&(0x7f0000ffe000/0x1000)=nil, 0x1000) mlock(&(0x7f0000ffe000/0x1000)=nil, 0x1000) mlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) r0 = openat$hdaudio(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0, 0xfffffffffffff000) munmap(&(0x7f0000ff8000/0x8000)=nil, 0x8000) r1 = dup3(r0, r0, 0x4) ioctl$HDAUDIO_FGRP_WIDGET_INFO(r1, 0xc0106803, &(0x7f0000000100)={&(0x7f0000000040)="d3e4e710eeca88717f7bbd459690135f273e7605d41a9e7b3c42cb70e3735c9a7c2a88524fc8faf1f870d9e449d48195fb7a985e9cd8c784a9832521aa75a2a155c88642730fbfa5459006923bce6f2da3a9f9eb44e4132b14297281818e66e1ca9b7f5a2d35d1e7938cddcc0280afe314d70704194cfb527b4dc7703704c35cf3f8ef30ffd1", 0x86}) r2 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) ioctl$FIONWRITE(r2, 0x40046679, &(0x7f0000000140)) r3 = openat(r2, &(0x7f0000000180)='./file0\x00', 0x8, 0x1) ioctl$HDAUDIO_FGRP_CODEC_INFO(r0, 0xc0106804, &(0x7f0000000240)={&(0x7f00000001c0)="879e03f77b77acea661cbf6ba62b1df2fcd226e62e77490ed380ce6d4e360e39b7af99fe5fbc60ca389b40f42027e42e06671410683060a171524762dc10b565c670cc3beaab48d2efb37148855c2fbffba01c211e6356d29ba5f7613a0594934355cbc1550bfe3a5e04fa57e133e39f5b6b9ad88179", 0x76}) munmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000) munlock(&(0x7f0000ff7000/0x4000)=nil, 0x4000) mlock(&(0x7f0000fef000/0x11000)=nil, 0x11000) msgrcv(0x0, &(0x7f0000000280)={0x0, ""/181}, 0xbd, 0x1, 0x1000) fstatat(r3, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x400) syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000440)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x5, 0x10, 0x2, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x7, 0x1, 0x1, 0x40, "", {{{0x9, 0x5, 0x1, 0x2, 0x200, 0x6, 0x40}}}}}]}}]}}, &(0x7f00000005c0)={0xa, &(0x7f0000000480)={0xa, 0x6, 0x250, 0x9, 0x1a, 0x0, 0x20, 0x4}, 0x1b, &(0x7f00000004c0)={0x5, 0xf, 0x1b, 0x2, [@wireless={0xb, 0x10, 0x1, 0x2, 0x2, 0x40, 0x7, 0xffff, 0x1}, @wireless={0xb, 0x10, 0x1, 0x4, 0x20, 0x9, 0x4, 0x1ff, 0x1}]}, 0x3, [{0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x458}}, {0x38, &(0x7f0000000540)=@string={0x38, 0x3, "01b5ab06a4074bc6126cd200b7abfb245c7bf3679e29e58ecd0e701ad5fff9188dc2284f92464414394ee7181dbf2aa47a1d34416e7c"}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x280a}}]}) openat$wscons(0xffffffffffffff9c, &(0x7f0000000600), 0x400000, 0x0) ioctl$FIOSETOWN(0xffffffffffffffff, 0x8004667c, &(0x7f0000000680)=0x3) mlock(&(0x7f0000ffe000/0x1000)=nil, 0x1000) (async) mlock(&(0x7f0000ffe000/0x1000)=nil, 0x1000) (async) mlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) (async) openat$hdaudio(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) (async) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0, 0xfffffffffffff000) (async) munmap(&(0x7f0000ff8000/0x8000)=nil, 0x8000) (async) dup3(r0, r0, 0x4) (async) ioctl$HDAUDIO_FGRP_WIDGET_INFO(r1, 0xc0106803, &(0x7f0000000100)={&(0x7f0000000040)="d3e4e710eeca88717f7bbd459690135f273e7605d41a9e7b3c42cb70e3735c9a7c2a88524fc8faf1f870d9e449d48195fb7a985e9cd8c784a9832521aa75a2a155c88642730fbfa5459006923bce6f2da3a9f9eb44e4132b14297281818e66e1ca9b7f5a2d35d1e7938cddcc0280afe314d70704194cfb527b4dc7703704c35cf3f8ef30ffd1", 0x86}) (async) fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) (async) ioctl$FIONWRITE(r2, 0x40046679, &(0x7f0000000140)) (async) openat(r2, &(0x7f0000000180)='./file0\x00', 0x8, 0x1) (async) ioctl$HDAUDIO_FGRP_CODEC_INFO(r0, 0xc0106804, &(0x7f0000000240)={&(0x7f00000001c0)="879e03f77b77acea661cbf6ba62b1df2fcd226e62e77490ed380ce6d4e360e39b7af99fe5fbc60ca389b40f42027e42e06671410683060a171524762dc10b565c670cc3beaab48d2efb37148855c2fbffba01c211e6356d29ba5f7613a0594934355cbc1550bfe3a5e04fa57e133e39f5b6b9ad88179", 0x76}) (async) munmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000) (async) munlock(&(0x7f0000ff7000/0x4000)=nil, 0x4000) (async) mlock(&(0x7f0000fef000/0x11000)=nil, 0x11000) (async) msgrcv(0x0, &(0x7f0000000280)={0x0, ""/181}, 0xbd, 0x1, 0x1000) (async) fstatat(r3, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x400) (async) syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000440)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x5, 0x10, 0x2, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x7, 0x1, 0x1, 0x40, "", {{{0x9, 0x5, 0x1, 0x2, 0x200, 0x6, 0x40}}}}}]}}]}}, &(0x7f00000005c0)={0xa, &(0x7f0000000480)={0xa, 0x6, 0x250, 0x9, 0x1a, 0x0, 0x20, 0x4}, 0x1b, &(0x7f00000004c0)={0x5, 0xf, 0x1b, 0x2, [@wireless={0xb, 0x10, 0x1, 0x2, 0x2, 0x40, 0x7, 0xffff, 0x1}, @wireless={0xb, 0x10, 0x1, 0x4, 0x20, 0x9, 0x4, 0x1ff, 0x1}]}, 0x3, [{0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x458}}, {0x38, &(0x7f0000000540)=@string={0x38, 0x3, "01b5ab06a4074bc6126cd200b7abfb245c7bf3679e29e58ecd0e701ad5fff9188dc2284f92464414394ee7181dbf2aa47a1d34416e7c"}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x280a}}]}) (async) openat$wscons(0xffffffffffffff9c, &(0x7f0000000600), 0x400000, 0x0) (async) ioctl$FIOSETOWN(0xffffffffffffffff, 0x8004667c, &(0x7f0000000680)=0x3) (async) [ 55.3571295] uhub0: device problem, disabling port 1 12:14:21 executing program 0: ioctl$WSKBDIO_SETDEFAULTBELL(0xffffffffffffffff, 0x80105705, &(0x7f0000000000)={0x4, 0x9, 0x6, 0x1}) (async) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$WSDISPLAYIO_GETCMAP(r0, 0x80205742, &(0x7f0000000140)={0xffffffff, 0x4, &(0x7f0000000080)=0x8, &(0x7f00000000c0)=0x8, &(0x7f0000000100)=0x80}) (async) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$WSKBDIO_GETLEDS(r2, 0x4004570c, 0xff) (async) r4 = open(&(0x7f00000001c0)='./file0\x00', 0x40, 0x100) ioctl$WSMOUSEIO_SSCALE(r4, 0x80085722, &(0x7f0000000200)=[0xfffff010, 0x3]) (async) ioctl$KDENABIO(r1, 0x20004b3c) (async, rerun: 64) ioctl$WSMOUSEIO_GETREPEAT(r3, 0x40185727, &(0x7f0000000240)) (async, rerun: 64) r5 = dup3(r1, r2, 0x400000) compat_43_ogetdirentries(r5, &(0x7f0000000280)=""/165, 0x9c, &(0x7f0000000340)=0x3) (async) compat_43_ogetdirentries(0xffffffffffffffff, &(0x7f0000000380)=""/112, 0x6f, &(0x7f0000000400)=0x3) fktrace(r1, 0x1, 0x8, 0xffffffffffffffff) (async, rerun: 64) link(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00') (async, rerun: 64) r6 = syz_usb_connect$printer(0x4, 0x36, &(0x7f00000004c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x40, 0x20, 0xf7, [{{0x9, 0x4, 0x0, 0xe9, 0x1, 0x7, 0x1, 0x1, 0x6, "", {{{0x9, 0x5, 0x1, 0x2, 0x8, 0xfe, 0x1, 0x4}}, [{{0x9, 0x5, 0x82, 0x2, 0x20, 0x40, 0xff, 0x5}}]}}}]}}]}}, &(0x7f0000000780)={0xa, &(0x7f0000000500)={0xa, 0x6, 0x200, 0x80, 0x7, 0x0, 0x8}, 0x29, &(0x7f0000000540)={0x5, 0xf, 0x29, 0x4, [@ptm_cap={0x3}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x6, 0x9, 0x7}, @ssp_cap={0x14, 0x10, 0xa, 0x7f, 0x2, 0x5, 0xf00, 0x225e, [0xf, 0x3f0f]}]}, 0x6, [{0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x446}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x40e}}, {0x48, &(0x7f0000000600)=@string={0x48, 0x3, "995873204de35d94abb339c67c9365111c4265b09df7b4f8f25fea96e37de8f5868fd98b4dcc9249404c1ebe95057f05f9ffb90d8a5c86aaec7cad170dbc0c4be079a88cacff"}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x1c01}}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x1c4c}}, {0x7e, &(0x7f0000000700)=@string={0x7e, 0x3, "f34e588335800fdc577bb34d6e75a3a0a9f74a8e0f3e83057a9266a865cf44405bf1962eea9cca101e04636510046fab1b6524e75004217b709c22deebf7d11f4120c2d47e61458b5ffc270ba6e33449b9fb55a964451361636ffe97b911867ad7c8098b25072af2a54bb100938f77d04719e659f26c03f464ae71e2"}}]}) fsync(r6) (async) fcntl$lock(r6, 0x8, &(0x7f0000000800)={0x1, 0x0, 0x7, 0xffff, 0xffffffffffffffff}) (async) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2, 0x810, r5, 0x0, 0x20) (async) r7 = dup3(r3, r6, 0x0) ioctl$FIONREAD(r7, 0x4004667f, &(0x7f0000000840)) [ 55.5471344] WARNING: defaulted mmap() share type to MAP_PRIVATE (pid 451 command syz-executor.1) 12:14:22 executing program 4: r0 = openat(0xffffffffffffffff, &(0x7f0000001640)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1, 0x12, r0, 0x0, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$WSDISPLAYIO_DGSCROLL(r1, 0x400c5757, 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$WSDISPLAYIO_DGSCROLL(r2, 0x400c5757, 0x0) preadv(r2, &(0x7f00000000c0)=[{&(0x7f00000001c0)=""/225, 0xe1}, {&(0x7f0000000040)=""/6, 0x6}], 0x2, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = getpid() fktrace(r3, 0x0, 0x4, r4) semget(0x2, 0x0, 0x0) 12:14:22 executing program 3: compat_50_mknod(&(0x7f0000000040)='./file1\x00', 0x8, 0x3000) r0 = open(&(0x7f0000000040)='./file0\x00', 0x611, 0x0) ioctl$OFIOGETBMAP(r0, 0x8004667d, &(0x7f0000000080)) 12:14:22 executing program 5: mlock(&(0x7f0000ffe000/0x1000)=nil, 0x1000) mlock(&(0x7f0000ffe000/0x1000)=nil, 0x1000) mlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) r0 = openat$hdaudio(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0, 0xfffffffffffff000) munmap(&(0x7f0000ff8000/0x8000)=nil, 0x8000) r1 = dup3(r0, r0, 0x4) ioctl$HDAUDIO_FGRP_WIDGET_INFO(r1, 0xc0106803, &(0x7f0000000100)={&(0x7f0000000040)="d3e4e710eeca88717f7bbd459690135f273e7605d41a9e7b3c42cb70e3735c9a7c2a88524fc8faf1f870d9e449d48195fb7a985e9cd8c784a9832521aa75a2a155c88642730fbfa5459006923bce6f2da3a9f9eb44e4132b14297281818e66e1ca9b7f5a2d35d1e7938cddcc0280afe314d70704194cfb527b4dc7703704c35cf3f8ef30ffd1", 0x86}) r2 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) ioctl$FIONWRITE(r2, 0x40046679, &(0x7f0000000140)) r3 = openat(r2, &(0x7f0000000180)='./file0\x00', 0x8, 0x1) ioctl$HDAUDIO_FGRP_CODEC_INFO(r0, 0xc0106804, &(0x7f0000000240)={&(0x7f00000001c0)="879e03f77b77acea661cbf6ba62b1df2fcd226e62e77490ed380ce6d4e360e39b7af99fe5fbc60ca389b40f42027e42e06671410683060a171524762dc10b565c670cc3beaab48d2efb37148855c2fbffba01c211e6356d29ba5f7613a0594934355cbc1550bfe3a5e04fa57e133e39f5b6b9ad88179", 0x76}) munmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000) munlock(&(0x7f0000ff7000/0x4000)=nil, 0x4000) mlock(&(0x7f0000fef000/0x11000)=nil, 0x11000) msgrcv(0x0, &(0x7f0000000280)={0x0, ""/181}, 0xbd, 0x1, 0x1000) fstatat(r3, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x400) syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000440)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x5, 0x10, 0x2, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x7, 0x1, 0x1, 0x40, "", {{{0x9, 0x5, 0x1, 0x2, 0x200, 0x6, 0x40}}}}}]}}]}}, &(0x7f00000005c0)={0xa, &(0x7f0000000480)={0xa, 0x6, 0x250, 0x9, 0x1a, 0x0, 0x20, 0x4}, 0x1b, &(0x7f00000004c0)={0x5, 0xf, 0x1b, 0x2, [@wireless={0xb, 0x10, 0x1, 0x2, 0x2, 0x40, 0x7, 0xffff, 0x1}, @wireless={0xb, 0x10, 0x1, 0x4, 0x20, 0x9, 0x4, 0x1ff, 0x1}]}, 0x3, [{0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x458}}, {0x38, &(0x7f0000000540)=@string={0x38, 0x3, "01b5ab06a4074bc6126cd200b7abfb245c7bf3679e29e58ecd0e701ad5fff9188dc2284f92464414394ee7181dbf2aa47a1d34416e7c"}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x280a}}]}) openat$wscons(0xffffffffffffff9c, &(0x7f0000000600), 0x400000, 0x0) ioctl$FIOSETOWN(0xffffffffffffffff, 0x8004667c, &(0x7f0000000680)=0x3) mlock(&(0x7f0000ffe000/0x1000)=nil, 0x1000) (async) mlock(&(0x7f0000ffe000/0x1000)=nil, 0x1000) (async) mlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) (async) openat$hdaudio(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) (async) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0, 0xfffffffffffff000) (async) munmap(&(0x7f0000ff8000/0x8000)=nil, 0x8000) (async) dup3(r0, r0, 0x4) (async) ioctl$HDAUDIO_FGRP_WIDGET_INFO(r1, 0xc0106803, &(0x7f0000000100)={&(0x7f0000000040)="d3e4e710eeca88717f7bbd459690135f273e7605d41a9e7b3c42cb70e3735c9a7c2a88524fc8faf1f870d9e449d48195fb7a985e9cd8c784a9832521aa75a2a155c88642730fbfa5459006923bce6f2da3a9f9eb44e4132b14297281818e66e1ca9b7f5a2d35d1e7938cddcc0280afe314d70704194cfb527b4dc7703704c35cf3f8ef30ffd1", 0x86}) (async) fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) (async) ioctl$FIONWRITE(r2, 0x40046679, &(0x7f0000000140)) (async) openat(r2, &(0x7f0000000180)='./file0\x00', 0x8, 0x1) (async) ioctl$HDAUDIO_FGRP_CODEC_INFO(r0, 0xc0106804, &(0x7f0000000240)={&(0x7f00000001c0)="879e03f77b77acea661cbf6ba62b1df2fcd226e62e77490ed380ce6d4e360e39b7af99fe5fbc60ca389b40f42027e42e06671410683060a171524762dc10b565c670cc3beaab48d2efb37148855c2fbffba01c211e6356d29ba5f7613a0594934355cbc1550bfe3a5e04fa57e133e39f5b6b9ad88179", 0x76}) (async) munmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000) (async) munlock(&(0x7f0000ff7000/0x4000)=nil, 0x4000) (async) mlock(&(0x7f0000fef000/0x11000)=nil, 0x11000) (async) msgrcv(0x0, &(0x7f0000000280)={0x0, ""/181}, 0xbd, 0x1, 0x1000) (async) fstatat(r3, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x400) (async) syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000440)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x5, 0x10, 0x2, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x7, 0x1, 0x1, 0x40, "", {{{0x9, 0x5, 0x1, 0x2, 0x200, 0x6, 0x40}}}}}]}}]}}, &(0x7f00000005c0)={0xa, &(0x7f0000000480)={0xa, 0x6, 0x250, 0x9, 0x1a, 0x0, 0x20, 0x4}, 0x1b, &(0x7f00000004c0)={0x5, 0xf, 0x1b, 0x2, [@wireless={0xb, 0x10, 0x1, 0x2, 0x2, 0x40, 0x7, 0xffff, 0x1}, @wireless={0xb, 0x10, 0x1, 0x4, 0x20, 0x9, 0x4, 0x1ff, 0x1}]}, 0x3, [{0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x458}}, {0x38, &(0x7f0000000540)=@string={0x38, 0x3, "01b5ab06a4074bc6126cd200b7abfb245c7bf3679e29e58ecd0e701ad5fff9188dc2284f92464414394ee7181dbf2aa47a1d34416e7c"}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x280a}}]}) (async) openat$wscons(0xffffffffffffff9c, &(0x7f0000000600), 0x400000, 0x0) (async) ioctl$FIOSETOWN(0xffffffffffffffff, 0x8004667c, &(0x7f0000000680)=0x3) (async) [ 55.6471428] WARNING: defaulted mmap() share type to MAP_PRIVATE (pid 451 command syz-executor.1) [ 55.6671351] uhub5: device problem, disabling port 1 12:14:22 executing program 1: sendto$unix(0xffffffffffffffff, &(0x7f0000000100)="17a654912c", 0x5, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="00002e0800696c0930f51ffcb7e411ccba1fe59677ebf1470f0000000067174be56b5f397712185b301f9bea76e29a984e4917daaac81183cf5a201d09d98454a55f8e7cb4786b39f91be7997383709b8d1a9108aeabf49357495e78b2af6270295e068470e63dd6036f45a458aaa175c6f31f7d27b86a4923f4680c6fb7acc110b2adea57a69d4749037e17565201576c9c66c1d6524e7d5a754ae9d3b419716fc7e17b414e0f52669df5a39dc6e632447dfd"], 0xa) (async) r0 = open(&(0x7f0000000040)='./file0\x00', 0x200, 0x0) (async) r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x408001, 0x0) writev(r1, &(0x7f0000000340)=[{&(0x7f0000000000), 0x2cfea}], 0x1000000000000013) (async) r2 = openat(0xffffffffffffffff, &(0x7f0000001640)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1, 0x10, r2, 0x0, 0x0) (async) preadv(r2, &(0x7f0000001580)=[{0x0}], 0x1, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x10, r0, 0x0, 0x0) r3 = socket$inet6(0x18, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000080)='3', 0x1, 0x0, &(0x7f0000000000)={0x18, 0x2, 0x0, 0x20080fa}, 0xc) 12:14:22 executing program 0: r0 = msgget(0x3, 0x829a6800eda71e72) msgrcv(r0, &(0x7f0000000000)={0x0, ""/194}, 0xca, 0x3, 0x0) msgctl$IPC_RMID(r0, 0x0) [ 55.7671316] WARNING: defaulted mmap() share type to MAP_PRIVATE (pid 403 command syz-executor.1) [ 55.7771311] WARNING: defaulted mmap() share type to MAP_PRIVATE (pid 403 command syz-executor.1) 12:14:22 executing program 2: __nanosleep50(&(0x7f0000000000)={0x61, 0x3}, &(0x7f0000000040)) socketpair(0x1f, 0x5, 0x2, 0x0) 12:14:22 executing program 4: r0 = openat(0xffffffffffffffff, &(0x7f0000001640)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1, 0x12, r0, 0x0, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$WSDISPLAYIO_DGSCROLL(r1, 0x400c5757, 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$WSDISPLAYIO_DGSCROLL(r2, 0x400c5757, 0x0) preadv(r2, &(0x7f00000000c0)=[{&(0x7f00000001c0)=""/225, 0xe1}, {&(0x7f0000000040)=""/6, 0x6}], 0x2, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = getpid() fktrace(r3, 0x0, 0x4, r4) semget(0x2, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000001640)='/proc/self/exe\x00', 0x0, 0x0) (async) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1, 0x12, r0, 0x0, 0x0) (async) open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) (async) open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) (async) ioctl$WSDISPLAYIO_DGSCROLL(r1, 0x400c5757, 0x0) (async) open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) (async) ioctl$WSDISPLAYIO_DGSCROLL(r2, 0x400c5757, 0x0) (async) preadv(r2, &(0x7f00000000c0)=[{&(0x7f00000001c0)=""/225, 0xe1}, {&(0x7f0000000040)=""/6, 0x6}], 0x2, 0x0) (async) pipe(&(0x7f0000000180)) (async) getpid() (async) fktrace(r3, 0x0, 0x4, r4) (async) semget(0x2, 0x0, 0x0) (async) 12:14:22 executing program 1: sendto$unix(0xffffffffffffffff, &(0x7f0000000100)="17a654912c", 0x5, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="00002e0800696c0930f51ffcb7e411ccba1fe59677ebf1470f0000000067174be56b5f397712185b301f9bea76e29a984e4917daaac81183cf5a201d09d98454a55f8e7cb4786b39f91be7997383709b8d1a9108aeabf49357495e78b2af6270295e068470e63dd6036f45a458aaa175c6f31f7d27b86a4923f4680c6fb7acc110b2adea57a69d4749037e17565201576c9c66c1d6524e7d5a754ae9d3b419716fc7e17b414e0f52669df5a39dc6e632447dfd"], 0xa) r0 = open(&(0x7f0000000040)='./file0\x00', 0x200, 0x0) r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x408001, 0x0) writev(r1, &(0x7f0000000340)=[{&(0x7f0000000000), 0x2cfea}], 0x1000000000000013) r2 = openat(0xffffffffffffffff, &(0x7f0000001640)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1, 0x10, r2, 0x0, 0x0) preadv(r2, &(0x7f0000001580)=[{0x0}], 0x1, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x10, r0, 0x0, 0x0) r3 = socket$inet6(0x18, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000080)='3', 0x1, 0x0, &(0x7f0000000000)={0x18, 0x2, 0x0, 0x20080fa}, 0xc) sendto$unix(0xffffffffffffffff, &(0x7f0000000100)="17a654912c", 0x5, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="00002e0800696c0930f51ffcb7e411ccba1fe59677ebf1470f0000000067174be56b5f397712185b301f9bea76e29a984e4917daaac81183cf5a201d09d98454a55f8e7cb4786b39f91be7997383709b8d1a9108aeabf49357495e78b2af6270295e068470e63dd6036f45a458aaa175c6f31f7d27b86a4923f4680c6fb7acc110b2adea57a69d4749037e17565201576c9c66c1d6524e7d5a754ae9d3b419716fc7e17b414e0f52669df5a39dc6e632447dfd"], 0xa) (async) open(&(0x7f0000000040)='./file0\x00', 0x200, 0x0) (async) open$dir(&(0x7f0000000000)='./file0\x00', 0x408001, 0x0) (async) writev(r1, &(0x7f0000000340)=[{&(0x7f0000000000), 0x2cfea}], 0x1000000000000013) (async) openat(0xffffffffffffffff, &(0x7f0000001640)='/proc/self/exe\x00', 0x0, 0x0) (async) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1, 0x10, r2, 0x0, 0x0) (async) preadv(r2, &(0x7f0000001580)=[{0x0}], 0x1, 0x0) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x10, r0, 0x0, 0x0) (async) socket$inet6(0x18, 0x3, 0x0) (async) sendto$inet6(r3, &(0x7f0000000080)='3', 0x1, 0x0, &(0x7f0000000000)={0x18, 0x2, 0x0, 0x20080fa}, 0xc) (async) 12:14:22 executing program 3: compat_50_mknod(&(0x7f0000000040)='./file1\x00', 0x8, 0x3000) (async, rerun: 32) r0 = open(&(0x7f0000000040)='./file0\x00', 0x611, 0x0) (rerun: 32) ioctl$OFIOGETBMAP(r0, 0x8004667d, &(0x7f0000000080)) 12:14:22 executing program 0: r0 = msgget(0x3, 0x829a6800eda71e72) msgrcv(r0, &(0x7f0000000000)={0x0, ""/194}, 0xca, 0x3, 0x0) msgctl$IPC_RMID(r0, 0x0) msgget(0x3, 0x829a6800eda71e72) (async) msgrcv(r0, &(0x7f0000000000)={0x0, ""/194}, 0xca, 0x3, 0x0) (async) msgctl$IPC_RMID(r0, 0x0) (async) 12:14:22 executing program 3: compat_50_mknod(&(0x7f0000000040)='./file1\x00', 0x8, 0x3000) r0 = open(&(0x7f0000000040)='./file0\x00', 0x611, 0x0) ioctl$OFIOGETBMAP(r0, 0x8004667d, &(0x7f0000000080)) 12:14:22 executing program 4: r0 = openat(0xffffffffffffffff, &(0x7f0000001640)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1, 0x12, r0, 0x0, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$WSDISPLAYIO_DGSCROLL(r1, 0x400c5757, 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$WSDISPLAYIO_DGSCROLL(r2, 0x400c5757, 0x0) preadv(r2, &(0x7f00000000c0)=[{&(0x7f00000001c0)=""/225, 0xe1}, {&(0x7f0000000040)=""/6, 0x6}], 0x2, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = getpid() fktrace(r3, 0x0, 0x4, r4) semget(0x2, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000001640)='/proc/self/exe\x00', 0x0, 0x0) (async) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1, 0x12, r0, 0x0, 0x0) (async) open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) (async) open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) (async) ioctl$WSDISPLAYIO_DGSCROLL(r1, 0x400c5757, 0x0) (async) open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) (async) ioctl$WSDISPLAYIO_DGSCROLL(r2, 0x400c5757, 0x0) (async) preadv(r2, &(0x7f00000000c0)=[{&(0x7f00000001c0)=""/225, 0xe1}, {&(0x7f0000000040)=""/6, 0x6}], 0x2, 0x0) (async) pipe(&(0x7f0000000180)) (async) getpid() (async) fktrace(r3, 0x0, 0x4, r4) (async) semget(0x2, 0x0, 0x0) (async) 12:14:22 executing program 4: socketpair(0x1, 0x30000001, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt(r0, 0x6, 0x7, &(0x7f0000000040)="d179281945b594dd81211231fa9600001bd78747a9be0d95b15800138acb1a01ec2b35563d2bf3701758f5c479491ff650eba7c9efe34b6bf39b978bf951fe5700a660e6490e99fdec4d640b93b99519340fbcf4b5f761bcb4ef06f04326234cea3b1bb680b8662b8774ba314c6847ba690ae080a179c28b513e544f453869c9fbcd51863a11a91c719a05dcabadbb3843585da6ae", 0x95) [ 56.1671315] WARNING: defaulted mmap() share type to MAP_PRIVATE (pid 673 command syz-executor.1) 12:14:22 executing program 4: socketpair(0x1, 0x30000001, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt(r0, 0x6, 0x7, &(0x7f0000000040)="d179281945b594dd81211231fa9600001bd78747a9be0d95b15800138acb1a01ec2b35563d2bf3701758f5c479491ff650eba7c9efe34b6bf39b978bf951fe5700a660e6490e99fdec4d640b93b99519340fbcf4b5f761bcb4ef06f04326234cea3b1bb680b8662b8774ba314c6847ba690ae080a179c28b513e544f453869c9fbcd51863a11a91c719a05dcabadbb3843585da6ae", 0x95) [ 56.2671384] WARNING: defaulted mmap() share type to MAP_PRIVATE (pid 673 command syz-executor.1) [ 56.7671230] usbd_fill_iface_data: no desc found [ 56.7671230] uhub5: port 1, set config at addr 2 failed [ 56.7797849] uhub5: device problem, disabling port 1 12:14:24 executing program 3: compat_43_ogethostid() r0 = __clone(0x0, 0x0) ptrace(0x9, r0, 0x0, 0x0) r1 = getpid() fktrace(0xffffffffffffffff, 0x0, 0x4, r1) ptrace(0x8, r0, 0x0, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000001640)='/proc/self/exe\x00', 0x0, 0x0) __clone(0x4100, 0xffffffffffffffff) r3 = open(&(0x7f0000000080)='./file0\x00', 0x400, 0x40) ioctl$WSDISPLAYIO_DGSCROLL(r3, 0x400c5757, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r3, 0x0, 0x0) preadv(r2, &(0x7f0000001580)=[{0x0}], 0x1, 0x0) fork() r4 = getpgid(r0) __wait450(r4, &(0x7f0000000000), 0x20000, &(0x7f0000000340)) 12:14:24 executing program 0: r0 = msgget(0x3, 0x829a6800eda71e72) msgrcv(r0, &(0x7f0000000000)={0x0, ""/194}, 0xca, 0x3, 0x0) msgctl$IPC_RMID(r0, 0x0) 12:14:24 executing program 4: socketpair(0x1, 0x30000001, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt(r0, 0x6, 0x7, &(0x7f0000000040)="d179281945b594dd81211231fa9600001bd78747a9be0d95b15800138acb1a01ec2b35563d2bf3701758f5c479491ff650eba7c9efe34b6bf39b978bf951fe5700a660e6490e99fdec4d640b93b99519340fbcf4b5f761bcb4ef06f04326234cea3b1bb680b8662b8774ba314c6847ba690ae080a179c28b513e544f453869c9fbcd51863a11a91c719a05dcabadbb3843585da6ae", 0x95) 12:14:24 executing program 1: open(&(0x7f0000000040)='./file0\x00', 0x611, 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff}) r1 = getpid() fktrace(r0, 0x0, 0x4, r1) ktrace(&(0x7f0000000000)='./file0\x00', 0x4, 0x326, r1) chmod(&(0x7f0000000140)='./file0\x00', 0x3f) setuid(0xee01) r2 = getpid() ktrace(&(0x7f0000000040)='./file0\x00', 0x0, 0x4000040e, r2) 12:14:24 executing program 2: __nanosleep50(&(0x7f0000000000)={0x61, 0x3}, &(0x7f0000000040)) (async) socketpair(0x1f, 0x5, 0x2, 0x0) 12:14:24 executing program 5: syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) compat_30_socket(0x0, 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$WSDISPLAYIO_DGSCROLL(r0, 0x400c5757, 0x0) openat(r0, &(0x7f0000000000)='./file0\x00', 0x800, 0x20) flock(0xffffffffffffffff, 0x0) compat_20_fstatfs(0xffffffffffffffff, 0x0) 12:14:24 executing program 0: r0 = socket(0x1d, 0x10000001, 0x84) connect(r0, &(0x7f0000000000), 0xe) 12:14:24 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$WSDISPLAYIO_DGSCROLL(r2, 0x400c5757, 0x0) ioctl$FIOASYNC(r1, 0x8004667d, &(0x7f0000000140)=0x9a) recvfrom$unix(r2, &(0x7f0000000000)=""/208, 0xd0, 0x8, &(0x7f0000000100)=ANY=[@ANYBLOB="e00200002e2f66696c65"], 0xa) getpeername(r0, 0x0, &(0x7f0000000180)) recvmsg(r0, &(0x7f0000000640)={&(0x7f0000000200)=@data, 0xe, &(0x7f00000004c0)=[{&(0x7f0000000240)=""/204, 0xcc}, {&(0x7f0000000340)=""/49, 0x31}, {&(0x7f0000000380)=""/90, 0x5a}, {&(0x7f0000000400)=""/124, 0x7c}, {&(0x7f0000000480)=""/49, 0x31}], 0x5, &(0x7f0000000540)=""/196, 0xc4}, 0x4500) 12:14:24 executing program 3: compat_43_ogethostid() (async) r0 = __clone(0x0, 0x0) ptrace(0x9, r0, 0x0, 0x0) (async) r1 = getpid() fktrace(0xffffffffffffffff, 0x0, 0x4, r1) ptrace(0x8, r0, 0x0, 0x0) (async) r2 = openat(0xffffffffffffffff, &(0x7f0000001640)='/proc/self/exe\x00', 0x0, 0x0) __clone(0x4100, 0xffffffffffffffff) r3 = open(&(0x7f0000000080)='./file0\x00', 0x400, 0x40) ioctl$WSDISPLAYIO_DGSCROLL(r3, 0x400c5757, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r3, 0x0, 0x0) (async) preadv(r2, &(0x7f0000001580)=[{0x0}], 0x1, 0x0) (async) fork() (async) r4 = getpgid(r0) __wait450(r4, &(0x7f0000000000), 0x20000, &(0x7f0000000340)) 12:14:24 executing program 0: r0 = socket(0x1d, 0x10000001, 0x84) connect(r0, &(0x7f0000000000), 0xe) socket(0x1d, 0x10000001, 0x84) (async) connect(r0, &(0x7f0000000000), 0xe) (async) 12:14:24 executing program 1: open(&(0x7f0000000040)='./file0\x00', 0x611, 0x0) (async) pipe(&(0x7f0000000400)={0xffffffffffffffff}) r1 = getpid() fktrace(r0, 0x0, 0x4, r1) ktrace(&(0x7f0000000000)='./file0\x00', 0x4, 0x326, r1) chmod(&(0x7f0000000140)='./file0\x00', 0x3f) (async) setuid(0xee01) (async) r2 = getpid() ktrace(&(0x7f0000000040)='./file0\x00', 0x0, 0x4000040e, r2) 12:14:24 executing program 1: open(&(0x7f0000000040)='./file0\x00', 0x611, 0x0) (async) pipe(&(0x7f0000000400)={0xffffffffffffffff}) (async) r1 = getpid() fktrace(r0, 0x0, 0x4, r1) ktrace(&(0x7f0000000000)='./file0\x00', 0x4, 0x326, r1) (async) chmod(&(0x7f0000000140)='./file0\x00', 0x3f) (async) setuid(0xee01) (async) r2 = getpid() ktrace(&(0x7f0000000040)='./file0\x00', 0x0, 0x4000040e, r2) [ 58.1271324] uhub5: device problem, disabling port 1 12:14:24 executing program 0: r0 = socket(0x1d, 0x10000001, 0x84) connect(r0, &(0x7f0000000000), 0xe) 12:14:24 executing program 3: compat_43_ogethostid() (async) r0 = __clone(0x0, 0x0) ptrace(0x9, r0, 0x0, 0x0) (async) r1 = getpid() fktrace(0xffffffffffffffff, 0x0, 0x4, r1) (async) ptrace(0x8, r0, 0x0, 0x0) (async) r2 = openat(0xffffffffffffffff, &(0x7f0000001640)='/proc/self/exe\x00', 0x0, 0x0) __clone(0x4100, 0xffffffffffffffff) (async) r3 = open(&(0x7f0000000080)='./file0\x00', 0x400, 0x40) ioctl$WSDISPLAYIO_DGSCROLL(r3, 0x400c5757, 0x0) (async) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r3, 0x0, 0x0) preadv(r2, &(0x7f0000001580)=[{0x0}], 0x1, 0x0) fork() (async) r4 = getpgid(r0) __wait450(r4, &(0x7f0000000000), 0x20000, &(0x7f0000000340)) 12:14:24 executing program 0: open(&(0x7f0000000040)='./file0\x00', 0x611, 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff}) r1 = getpid() fktrace(r0, 0x0, 0x4, r1) ktrace(&(0x7f0000000000)='./file0\x00', 0x4, 0x326, r1) chmod(&(0x7f0000000140)='./file0\x00', 0x3f) setuid(0xee01) r2 = getpid() ktrace(&(0x7f0000000040)='./file0\x00', 0x0, 0x4000040e, r2) 12:14:24 executing program 1: open(&(0x7f0000000040)='./file0\x00', 0x611, 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff}) r1 = getpid() fktrace(r0, 0x0, 0x4, r1) ktrace(&(0x7f0000000000)='./file0\x00', 0x4, 0x326, r1) chmod(&(0x7f0000000140)='./file0\x00', 0x3f) setuid(0xee01) r2 = getpid() ktrace(&(0x7f0000000040)='./file0\x00', 0x0, 0x4000040e, r2) 12:14:24 executing program 2: symlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') open$dir(&(0x7f00000000c0)='./file0\x00', 0x200, 0x152) 12:14:25 executing program 1: r0 = socket$inet6(0x18, 0x1, 0x0) r1 = accept(r0, &(0x7f0000000000)=@data, &(0x7f0000000040)) recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/17, 0x11}, 0x801) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2, 0xa10, r3, 0x0, 0xfff) recvmsg(r2, &(0x7f0000000480)={&(0x7f0000000140)=@family, 0xe, &(0x7f0000000380)=[{&(0x7f0000000180)=""/198, 0xc6}, {&(0x7f0000000280)=""/194, 0xc2}], 0x2, &(0x7f00000003c0)=""/185, 0xb9}, 0x1000) 12:14:25 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$WSDISPLAYIO_DGSCROLL(r2, 0x400c5757, 0x0) ioctl$FIOASYNC(r1, 0x8004667d, &(0x7f0000000140)=0x9a) recvfrom$unix(r2, &(0x7f0000000000)=""/208, 0xd0, 0x8, &(0x7f0000000100)=ANY=[@ANYBLOB="e00200002e2f66696c65"], 0xa) getpeername(r0, 0x0, &(0x7f0000000180)) (async) recvmsg(r0, &(0x7f0000000640)={&(0x7f0000000200)=@data, 0xe, &(0x7f00000004c0)=[{&(0x7f0000000240)=""/204, 0xcc}, {&(0x7f0000000340)=""/49, 0x31}, {&(0x7f0000000380)=""/90, 0x5a}, {&(0x7f0000000400)=""/124, 0x7c}, {&(0x7f0000000480)=""/49, 0x31}], 0x5, &(0x7f0000000540)=""/196, 0xc4}, 0x4500) 12:14:25 executing program 0: mknod(&(0x7f00000001c0)='./bus\x00', 0x80002005, 0x5300) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x400000, 0x20) ioctl$WSKBDIO_SETDEFAULTKEYREPEAT(r0, 0x40085004, &(0x7f0000000000)) ioctl$WSKBDIO_GETMODE(r0, 0x40045714, 0x101) 12:14:25 executing program 5: syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) compat_30_socket(0x0, 0x0, 0x0) (async, rerun: 32) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) (rerun: 32) ioctl$WSDISPLAYIO_DGSCROLL(r0, 0x400c5757, 0x0) openat(r0, &(0x7f0000000000)='./file0\x00', 0x800, 0x20) flock(0xffffffffffffffff, 0x0) (async) compat_20_fstatfs(0xffffffffffffffff, 0x0) 12:14:25 executing program 2: symlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') open$dir(&(0x7f00000000c0)='./file0\x00', 0x200, 0x152) symlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') (async) open$dir(&(0x7f00000000c0)='./file0\x00', 0x200, 0x152) (async) 12:14:25 executing program 2: symlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') open$dir(&(0x7f00000000c0)='./file0\x00', 0x200, 0x152) 12:14:25 executing program 2: shmget$private(0x0, 0x4000, 0x321, &(0x7f0000ff9000/0x4000)=nil) syz_usb_connect$uac1(0x0, 0x7d, &(0x7f00000006c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6b, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@input_terminal={0xc, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x82}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) 12:14:25 executing program 0: mknod(&(0x7f00000001c0)='./bus\x00', 0x80002005, 0x5300) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) (async) r0 = open(&(0x7f0000000080)='./bus\x00', 0x400000, 0x20) ioctl$WSKBDIO_SETDEFAULTKEYREPEAT(r0, 0x40085004, &(0x7f0000000000)) (async) ioctl$WSKBDIO_GETMODE(r0, 0x40045714, 0x101) 12:14:25 executing program 3: mknod(&(0x7f00000001c0)='./bus\x00', 0x80002005, 0x5300) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x400000, 0x20) ioctl$WSKBDIO_SETDEFAULTKEYREPEAT(r0, 0x40085004, &(0x7f0000000000)) ioctl$WSKBDIO_GETMODE(r0, 0x40045714, 0x101) 12:14:25 executing program 0: mknod(&(0x7f00000001c0)='./bus\x00', 0x80002005, 0x5300) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x400000, 0x20) ioctl$WSKBDIO_SETDEFAULTKEYREPEAT(r0, 0x40085004, &(0x7f0000000000)) ioctl$WSKBDIO_GETMODE(r0, 0x40045714, 0x101) mknod(&(0x7f00000001c0)='./bus\x00', 0x80002005, 0x5300) (async) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) (async) open(&(0x7f0000000080)='./bus\x00', 0x400000, 0x20) (async) ioctl$WSKBDIO_SETDEFAULTKEYREPEAT(r0, 0x40085004, &(0x7f0000000000)) (async) ioctl$WSKBDIO_GETMODE(r0, 0x40045714, 0x101) (async) 12:14:25 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000001640)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1, 0x10, r0, 0x0, 0x0) preadv(r0, &(0x7f0000000000), 0x0, 0xfffffffffffffffe) pipe(&(0x7f0000000400)={0xffffffffffffffff}) r2 = getpid() r3 = open(&(0x7f0000000000)='./file0\x00', 0x8, 0x200) fktrace(r3, 0x1, 0x800, r2) fktrace(r1, 0x0, 0x4, r2) symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') 12:14:25 executing program 1: r0 = socket$inet6(0x18, 0x1, 0x0) r1 = accept(r0, &(0x7f0000000000)=@data, &(0x7f0000000040)) recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/17, 0x11}, 0x801) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2, 0xa10, r3, 0x0, 0xfff) recvmsg(r2, &(0x7f0000000480)={&(0x7f0000000140)=@family, 0xe, &(0x7f0000000380)=[{&(0x7f0000000180)=""/198, 0xc6}, {&(0x7f0000000280)=""/194, 0xc2}], 0x2, &(0x7f00000003c0)=""/185, 0xb9}, 0x1000) socket$inet6(0x18, 0x1, 0x0) (async) accept(r0, &(0x7f0000000000)=@data, &(0x7f0000000040)) (async) recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/17, 0x11}, 0x801) (async) pipe(&(0x7f0000000080)) (async) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2, 0xa10, r3, 0x0, 0xfff) (async) recvmsg(r2, &(0x7f0000000480)={&(0x7f0000000140)=@family, 0xe, &(0x7f0000000380)=[{&(0x7f0000000180)=""/198, 0xc6}, {&(0x7f0000000280)=""/194, 0xc2}], 0x2, &(0x7f00000003c0)=""/185, 0xb9}, 0x1000) (async) [ 59.4571244] WARNING: defaulted mmap() share type to MAP_PRIVATE (pid 653 command syz-executor.3) [ 59.4771278] uhub5: device problem, disabling port 1 12:14:26 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000001640)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1, 0x10, r0, 0x0, 0x0) preadv(r0, &(0x7f0000000000), 0x0, 0xfffffffffffffffe) pipe(&(0x7f0000000400)={0xffffffffffffffff}) r2 = getpid() r3 = open(&(0x7f0000000000)='./file0\x00', 0x8, 0x200) fktrace(r3, 0x1, 0x800, r2) fktrace(r1, 0x0, 0x4, r2) symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') openat(0xffffffffffffffff, &(0x7f0000001640)='/proc/self/exe\x00', 0x0, 0x0) (async) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1, 0x10, r0, 0x0, 0x0) (async) preadv(r0, &(0x7f0000000000), 0x0, 0xfffffffffffffffe) (async) pipe(&(0x7f0000000400)) (async) getpid() (async) open(&(0x7f0000000000)='./file0\x00', 0x8, 0x200) (async) fktrace(r3, 0x1, 0x800, r2) (async) fktrace(r1, 0x0, 0x4, r2) (async) symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') (async) [ 59.6271313] uhub2: device problem, disabling port 1 [ 59.6771252] WARNING: defaulted mmap() share type to MAP_PRIVATE (pid 657 command syz-executor.3) [ 59.6971135] WARNING: defaulted mmap() share type to MAP_PRIVATE (pid 657 command syz-executor.3) 12:14:26 executing program 1: r0 = socket$inet6(0x18, 0x1, 0x0) r1 = accept(r0, &(0x7f0000000000)=@data, &(0x7f0000000040)) recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/17, 0x11}, 0x801) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2, 0xa10, r3, 0x0, 0xfff) recvmsg(r2, &(0x7f0000000480)={&(0x7f0000000140)=@family, 0xe, &(0x7f0000000380)=[{&(0x7f0000000180)=""/198, 0xc6}, {&(0x7f0000000280)=""/194, 0xc2}], 0x2, &(0x7f00000003c0)=""/185, 0xb9}, 0x1000) 12:14:26 executing program 0: _lwp_unpark_all(&(0x7f00000006c0), 0x300, 0x0) compat_60__lwp_park(&(0x7f0000000000)={0x5, 0x8}, 0xffffffffffffffff, 0x0, &(0x7f0000000040)=0x1c1) _lwp_wakeup(0x0) 12:14:26 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000001640)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1, 0x10, r0, 0x0, 0x0) preadv(r0, &(0x7f0000000000), 0x0, 0xfffffffffffffffe) pipe(&(0x7f0000000400)={0xffffffffffffffff}) r2 = getpid() r3 = open(&(0x7f0000000000)='./file0\x00', 0x8, 0x200) fktrace(r3, 0x1, 0x800, r2) fktrace(r1, 0x0, 0x4, r2) symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') openat(0xffffffffffffffff, &(0x7f0000001640)='/proc/self/exe\x00', 0x0, 0x0) (async) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1, 0x10, r0, 0x0, 0x0) (async) preadv(r0, &(0x7f0000000000), 0x0, 0xfffffffffffffffe) (async) pipe(&(0x7f0000000400)) (async) getpid() (async) open(&(0x7f0000000000)='./file0\x00', 0x8, 0x200) (async) fktrace(r3, 0x1, 0x800, r2) (async) fktrace(r1, 0x0, 0x4, r2) (async) symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') (async) 12:14:26 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$WSDISPLAYIO_DGSCROLL(r2, 0x400c5757, 0x0) ioctl$FIOASYNC(r1, 0x8004667d, &(0x7f0000000140)=0x9a) recvfrom$unix(r2, &(0x7f0000000000)=""/208, 0xd0, 0x8, &(0x7f0000000100)=ANY=[@ANYBLOB="e00200002e2f66696c65"], 0xa) getpeername(r0, 0x0, &(0x7f0000000180)) recvmsg(r0, &(0x7f0000000640)={&(0x7f0000000200)=@data, 0xe, &(0x7f00000004c0)=[{&(0x7f0000000240)=""/204, 0xcc}, {&(0x7f0000000340)=""/49, 0x31}, {&(0x7f0000000380)=""/90, 0x5a}, {&(0x7f0000000400)=""/124, 0x7c}, {&(0x7f0000000480)=""/49, 0x31}], 0x5, &(0x7f0000000540)=""/196, 0xc4}, 0x4500) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) (async) open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) (async) ioctl$WSDISPLAYIO_DGSCROLL(r2, 0x400c5757, 0x0) (async) ioctl$FIOASYNC(r1, 0x8004667d, &(0x7f0000000140)=0x9a) (async) recvfrom$unix(r2, &(0x7f0000000000)=""/208, 0xd0, 0x8, &(0x7f0000000100)=ANY=[@ANYBLOB="e00200002e2f66696c65"], 0xa) (async) getpeername(r0, 0x0, &(0x7f0000000180)) (async) recvmsg(r0, &(0x7f0000000640)={&(0x7f0000000200)=@data, 0xe, &(0x7f00000004c0)=[{&(0x7f0000000240)=""/204, 0xcc}, {&(0x7f0000000340)=""/49, 0x31}, {&(0x7f0000000380)=""/90, 0x5a}, {&(0x7f0000000400)=""/124, 0x7c}, {&(0x7f0000000480)=""/49, 0x31}], 0x5, &(0x7f0000000540)=""/196, 0xc4}, 0x4500) (async) 12:14:26 executing program 5: syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) (async) compat_30_socket(0x0, 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$WSDISPLAYIO_DGSCROLL(r0, 0x400c5757, 0x0) (async) openat(r0, &(0x7f0000000000)='./file0\x00', 0x800, 0x20) (async) flock(0xffffffffffffffff, 0x0) (async) compat_20_fstatfs(0xffffffffffffffff, 0x0) 12:14:26 executing program 2: shmget$private(0x0, 0x4000, 0x321, &(0x7f0000ff9000/0x4000)=nil) syz_usb_connect$uac1(0x0, 0x7d, &(0x7f00000006c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6b, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@input_terminal={0xc, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x82}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) shmget$private(0x0, 0x4000, 0x321, &(0x7f0000ff9000/0x4000)=nil) (async) syz_usb_connect$uac1(0x0, 0x7d, &(0x7f00000006c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6b, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@input_terminal={0xc, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x82}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) (async) 12:14:26 executing program 1: r0 = openat(0xffffffffffffffff, &(0x7f0000001640)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1, 0x10, r0, 0x0, 0x10001) preadv(r0, &(0x7f0000001580)=[{0x0}], 0x1, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x10, r0, 0x0, 0x0) compat_30_socket(0x1f, 0x5, 0x0) pipe2(0x0, 0x0) open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) poll(&(0x7f0000000140)=[{}], 0x4e8, 0x0) 12:14:26 executing program 5: setrlimit(0x8, &(0x7f0000000000)={0xc618fffffffffffc, 0xffff7fffffffffff}) setrlimit(0x4, &(0x7f0000000040)={0x2, 0x9}) setrlimit(0x8, &(0x7f0000000080)={0x3ff, 0x3}) [ 60.3971218] WARNING: defaulted mmap() share type to MAP_PRIVATE (pid 671 command syz-executor.3) 12:14:26 executing program 5: setrlimit(0x8, &(0x7f0000000000)={0xc618fffffffffffc, 0xffff7fffffffffff}) (async) setrlimit(0x4, &(0x7f0000000040)={0x2, 0x9}) setrlimit(0x8, &(0x7f0000000080)={0x3ff, 0x3}) 12:14:27 executing program 3: syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x8b, 0x83, 0xe, 0x40, 0x403, 0xbca2, 0xe6d3, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x80, 0xab, 0xc9}}]}}]}}, 0x0) syz_usb_connect$cdc_ncm(0x5, 0xd2, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc0, 0x2, 0x1, 0x1, 0x0, 0x4, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "a9c7470e"}, {0x5, 0x24, 0x0, 0xffff}, {0xd, 0x24, 0xf, 0x1, 0xad, 0x5, 0x7ff}, {0x6, 0x24, 0x1a, 0x6, 0x21}, [@acm={0x4, 0x24, 0x2, 0x1}, @mdlm_detail={0x2b, 0x24, 0x13, 0xfa, "f3aa11c504ebfe75091a118a02f4d042eddb48b8cdd37c63866b2c409af8560c21b4bafe77ca27"}, @mdlm={0x15, 0x24, 0x12, 0x5}, @mbim_extended={0x8, 0x24, 0x1c, 0x200, 0x8}, @country_functional={0x8, 0x24, 0x7, 0x1, 0x7, [0x8]}, @mbim={0xc, 0x24, 0x1b, 0x4a8, 0xc6ec, 0x41, 0x40, 0x3ff, 0x3}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x3f, 0x2, 0x9}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x20, 0x8, 0x80}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x3f, 0x0, 0xff}}}}}}}]}}, &(0x7f0000000240)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x100, 0xff, 0x8, 0x3, 0x20, 0x9}, 0x2b, &(0x7f0000000040)={0x5, 0xf, 0x2b, 0x6, [@wireless={0xb, 0x10, 0x1, 0x8, 0x1, 0x9, 0x1f, 0x100, 0xab}, @ext_cap={0x7, 0x10, 0x2, 0x6, 0x0, 0x9, 0x200}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0xa, 0x6, 0x9, 0x2}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x1, 0x6, 0x4}]}, 0x2, [{0x18, &(0x7f0000000280)=@string={0x18, 0x3, "83a1340dd9c48d3c3435cbee22484931b90e74ab2d2b"}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x414}}]}) [ 60.4771270] WARNING: defaulted mmap() share type to MAP_PRIVATE (pid 928 command syz-executor.1) [ 60.5171228] WARNING: defaulted mmap() share type to MAP_PRIVATE (pid 671 command syz-executor.3) 12:14:27 executing program 0: _lwp_unpark_all(&(0x7f00000006c0), 0x300, 0x0) compat_60__lwp_park(&(0x7f0000000000)={0x5, 0x8}, 0xffffffffffffffff, 0x0, &(0x7f0000000040)=0x1c1) (async) _lwp_wakeup(0x0) 12:14:27 executing program 4: r0 = socket(0x11, 0x3, 0x0) setsockopt(r0, 0x11, 0x2, &(0x7f0000000000)="1a7b43da", 0x4) ioctl$FIOASYNC(r0, 0x8004667d, &(0x7f0000000200)=0x10000) mkdir(&(0x7f0000000140)='./file0\x00', 0x1d2) r1 = open(&(0x7f0000004380)='./file0\x00', 0x0, 0x0) mkdirat(r1, &(0x7f00000043c0)='./file0\x00', 0x0) rmdir(&(0x7f00000000c0)='./file0\x00') msgctl$IPC_SET(0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x0, 0x0, 0x0, 0x0, 0xb2, 0x8}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}) r2 = socket(0x18, 0x1, 0x0) getpgid(0x0) connect$unix(r2, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) r3 = msgget$private(0x0, 0x60e) msgsnd(r3, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x101, 0x0) getsockname$inet(r2, &(0x7f00000000c0), &(0x7f0000000000)=0xc) r4 = socket(0x23, 0x4003, 0x1) sendto$unix(r4, &(0x7f0000000000)="b100050460000000000008000501000000000000cea1fea7fef96eefc73fd3357ae26caa0416fa76d06336acf00b7804be781e4991f7c8df5f882b2b7be1aa5b23ed19f4c8b2ca3ebb3557699a1f132e27ec0ed602000d7d026ba8af63ff37282921e4fd89720fd3872babfb8070c1abda58601a8bfee8aca4911faff575e8c881ff7cc53c894303b22f310b404f36a0069000fcfffcffe608a371a3f80004002ec7299e34000000000000010000000000", 0xb1, 0x0, 0x0, 0x0) getsockname(r4, &(0x7f0000000400)=ANY=[@ANYBLOB="8f64a67bbdc1fcec00000000000000000016ec3b26a1e282d645ea74b361963e0f809f907ff2ea868da7d7c230a4ee4caf2fef12ee5016a314a962b47bdf64a63987bdecbd561213d185e81bf447d1faf3bb88b6795fbbee25712e9f408da6df24341cbc676ba8dc314d8f683c344481087504e4c69016c6cc4e5c42389a2af69a82550400000000000000a8ecef8a47f4c53f53d3c5d9dbe8761f4e5feca9382e08d08044391cc5be0cef9c14abd97fcf13328b8d74a9fb285aaa86ae33597a13cda58ee1642778d49a30a30c857e344c92fa23726d056183741b4ab7ecf8000000000000005a7d66f331fadca2eb"], &(0x7f0000000080)=0x11) r5 = socket(0x18, 0xc002, 0x0) connect$unix(r5, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) 12:14:27 executing program 1: r0 = openat(0xffffffffffffffff, &(0x7f0000001640)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1, 0x10, r0, 0x0, 0x10001) preadv(r0, &(0x7f0000001580)=[{0x0}], 0x1, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x10, r0, 0x0, 0x0) compat_30_socket(0x1f, 0x5, 0x0) pipe2(0x0, 0x0) open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) poll(&(0x7f0000000140)=[{}], 0x4e8, 0x0) openat(0xffffffffffffffff, &(0x7f0000001640)='/proc/self/exe\x00', 0x0, 0x0) (async) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1, 0x10, r0, 0x0, 0x10001) (async) preadv(r0, &(0x7f0000001580)=[{0x0}], 0x1, 0x0) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x10, r0, 0x0, 0x0) (async) compat_30_socket(0x1f, 0x5, 0x0) (async) pipe2(0x0, 0x0) (async) open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) (async) poll(&(0x7f0000000140)=[{}], 0x4e8, 0x0) (async) 12:14:27 executing program 4: r0 = socket(0x11, 0x3, 0x0) setsockopt(r0, 0x11, 0x2, &(0x7f0000000000)="1a7b43da", 0x4) (async) ioctl$FIOASYNC(r0, 0x8004667d, &(0x7f0000000200)=0x10000) mkdir(&(0x7f0000000140)='./file0\x00', 0x1d2) (async) r1 = open(&(0x7f0000004380)='./file0\x00', 0x0, 0x0) mkdirat(r1, &(0x7f00000043c0)='./file0\x00', 0x0) (async) rmdir(&(0x7f00000000c0)='./file0\x00') (async) msgctl$IPC_SET(0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x0, 0x0, 0x0, 0x0, 0xb2, 0x8}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}) (async) r2 = socket(0x18, 0x1, 0x0) getpgid(0x0) (async) connect$unix(r2, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) (async) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) (async) r3 = msgget$private(0x0, 0x60e) msgsnd(r3, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x101, 0x0) (async, rerun: 32) getsockname$inet(r2, &(0x7f00000000c0), &(0x7f0000000000)=0xc) (async, rerun: 32) r4 = socket(0x23, 0x4003, 0x1) sendto$unix(r4, &(0x7f0000000000)="b100050460000000000008000501000000000000cea1fea7fef96eefc73fd3357ae26caa0416fa76d06336acf00b7804be781e4991f7c8df5f882b2b7be1aa5b23ed19f4c8b2ca3ebb3557699a1f132e27ec0ed602000d7d026ba8af63ff37282921e4fd89720fd3872babfb8070c1abda58601a8bfee8aca4911faff575e8c881ff7cc53c894303b22f310b404f36a0069000fcfffcffe608a371a3f80004002ec7299e34000000000000010000000000", 0xb1, 0x0, 0x0, 0x0) (async, rerun: 32) getsockname(r4, &(0x7f0000000400)=ANY=[@ANYBLOB="8f64a67bbdc1fcec00000000000000000016ec3b26a1e282d645ea74b361963e0f809f907ff2ea868da7d7c230a4ee4caf2fef12ee5016a314a962b47bdf64a63987bdecbd561213d185e81bf447d1faf3bb88b6795fbbee25712e9f408da6df24341cbc676ba8dc314d8f683c344481087504e4c69016c6cc4e5c42389a2af69a82550400000000000000a8ecef8a47f4c53f53d3c5d9dbe8761f4e5feca9382e08d08044391cc5be0cef9c14abd97fcf13328b8d74a9fb285aaa86ae33597a13cda58ee1642778d49a30a30c857e344c92fa23726d056183741b4ab7ecf8000000000000005a7d66f331fadca2eb"], &(0x7f0000000080)=0x11) (async, rerun: 32) r5 = socket(0x18, 0xc002, 0x0) connect$unix(r5, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) 12:14:27 executing program 0: _lwp_unpark_all(&(0x7f00000006c0), 0x300, 0x0) compat_60__lwp_park(&(0x7f0000000000)={0x5, 0x8}, 0xffffffffffffffff, 0x0, &(0x7f0000000040)=0x1c1) _lwp_wakeup(0x0) _lwp_unpark_all(&(0x7f00000006c0), 0x300, 0x0) (async) compat_60__lwp_park(&(0x7f0000000000)={0x5, 0x8}, 0xffffffffffffffff, 0x0, &(0x7f0000000040)=0x1c1) (async) _lwp_wakeup(0x0) (async) 12:14:27 executing program 4: r0 = socket(0x11, 0x3, 0x0) setsockopt(r0, 0x11, 0x2, &(0x7f0000000000)="1a7b43da", 0x4) (async) ioctl$FIOASYNC(r0, 0x8004667d, &(0x7f0000000200)=0x10000) (async) mkdir(&(0x7f0000000140)='./file0\x00', 0x1d2) (async) r1 = open(&(0x7f0000004380)='./file0\x00', 0x0, 0x0) mkdirat(r1, &(0x7f00000043c0)='./file0\x00', 0x0) (async) rmdir(&(0x7f00000000c0)='./file0\x00') (async) msgctl$IPC_SET(0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x0, 0x0, 0x0, 0x0, 0xb2, 0x8}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}) (async) r2 = socket(0x18, 0x1, 0x0) getpgid(0x0) (async) connect$unix(r2, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) (async) r3 = msgget$private(0x0, 0x60e) msgsnd(r3, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x101, 0x0) (async) getsockname$inet(r2, &(0x7f00000000c0), &(0x7f0000000000)=0xc) (async) r4 = socket(0x23, 0x4003, 0x1) sendto$unix(r4, &(0x7f0000000000)="b100050460000000000008000501000000000000cea1fea7fef96eefc73fd3357ae26caa0416fa76d06336acf00b7804be781e4991f7c8df5f882b2b7be1aa5b23ed19f4c8b2ca3ebb3557699a1f132e27ec0ed602000d7d026ba8af63ff37282921e4fd89720fd3872babfb8070c1abda58601a8bfee8aca4911faff575e8c881ff7cc53c894303b22f310b404f36a0069000fcfffcffe608a371a3f80004002ec7299e34000000000000010000000000", 0xb1, 0x0, 0x0, 0x0) getsockname(r4, &(0x7f0000000400)=ANY=[@ANYBLOB="8f64a67bbdc1fcec00000000000000000016ec3b26a1e282d645ea74b361963e0f809f907ff2ea868da7d7c230a4ee4caf2fef12ee5016a314a962b47bdf64a63987bdecbd561213d185e81bf447d1faf3bb88b6795fbbee25712e9f408da6df24341cbc676ba8dc314d8f683c344481087504e4c69016c6cc4e5c42389a2af69a82550400000000000000a8ecef8a47f4c53f53d3c5d9dbe8761f4e5feca9382e08d08044391cc5be0cef9c14abd97fcf13328b8d74a9fb285aaa86ae33597a13cda58ee1642778d49a30a30c857e344c92fa23726d056183741b4ab7ecf8000000000000005a7d66f331fadca2eb"], &(0x7f0000000080)=0x11) (async) r5 = socket(0x18, 0xc002, 0x0) connect$unix(r5, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) [ 61.0971187] uhub2: port 1, set config at addr 2 failed [ 61.1071254] uhub2: device problem, disabling port 1 12:14:27 executing program 5: setrlimit(0x8, &(0x7f0000000000)={0xc618fffffffffffc, 0xffff7fffffffffff}) (async) setrlimit(0x4, &(0x7f0000000040)={0x2, 0x9}) (async) setrlimit(0x8, &(0x7f0000000080)={0x3ff, 0x3}) [ 61.2871223] WARNING: defaulted mmap() share type to MAP_PRIVATE (pid 1073 command syz-executor.1) [ 61.6071269] uhub3: device problem, disabling port 1 12:14:28 executing program 2: shmget$private(0x0, 0x4000, 0x321, &(0x7f0000ff9000/0x4000)=nil) (async, rerun: 32) syz_usb_connect$uac1(0x0, 0x7d, &(0x7f00000006c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6b, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@input_terminal={0xc, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x82}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) (rerun: 32) 12:14:28 executing program 4: open$dir(&(0x7f0000000140)='./file1\x00', 0x200, 0x0) compat_12_stat12(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) chown(&(0x7f0000000000)='./file1\x00', 0xffffffffffffffff, r0) 12:14:28 executing program 5: r0 = open(&(0x7f0000000040)='./file0\x00', 0x200, 0x0) r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x1, 0x0) writev(r1, &(0x7f0000000340)=[{&(0x7f0000000000), 0x2cfea}], 0x1000000000000013) openat(0xffffffffffffffff, &(0x7f00000000c0)='./file2\x00', 0x8, 0x4) r2 = openat(0xffffffffffffffff, &(0x7f0000001640)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1, 0x10, r2, 0x0, 0x0) preadv(r2, &(0x7f0000000180)=[{0x0}], 0x1, 0xfff) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x10, r0, 0x0, 0x0) r3 = socket$inet6(0x18, 0x3, 0x0) openat(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FIONWRITE(r1, 0x40046679, &(0x7f0000000140)) sendto$inet6(r3, &(0x7f0000000080)='3', 0x358, 0x0, &(0x7f0000000000), 0x1c) 12:14:28 executing program 0: _ksem_open(&(0x7f0000000000)="0539e9bf5f9a7ad32ad975c8469529085aa5d7b5f40a593eebb5a65ad67ed2d8cc076b70c51d41e2196df0f245b1170175af03e16babfb991423bce19e36ae89", 0x200, 0x7, 0x3, &(0x7f0000000040)=0x0) _ksem_timedwait(r0, &(0x7f0000000080)={0x8fd3, 0x4}) compat_43_osetrlimit(0x6, 0xffffffffffffffff) [ 62.0171254] WARNING: defaulted mmap() share type to MAP_PRIVATE (pid 1895 command syz-executor.5) [ 62.0671215] WARNING: defaulted mmap() share type to MAP_PRIVATE (pid 1895 command syz-executor.5) [ 62.0871283] WARNING: module error: vfs load failed for `compat_12', error 2 12:14:28 executing program 3: syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x8b, 0x83, 0xe, 0x40, 0x403, 0xbca2, 0xe6d3, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x80, 0xab, 0xc9}}]}}]}}, 0x0) syz_usb_connect$cdc_ncm(0x5, 0xd2, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc0, 0x2, 0x1, 0x1, 0x0, 0x4, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "a9c7470e"}, {0x5, 0x24, 0x0, 0xffff}, {0xd, 0x24, 0xf, 0x1, 0xad, 0x5, 0x7ff}, {0x6, 0x24, 0x1a, 0x6, 0x21}, [@acm={0x4, 0x24, 0x2, 0x1}, @mdlm_detail={0x2b, 0x24, 0x13, 0xfa, "f3aa11c504ebfe75091a118a02f4d042eddb48b8cdd37c63866b2c409af8560c21b4bafe77ca27"}, @mdlm={0x15, 0x24, 0x12, 0x5}, @mbim_extended={0x8, 0x24, 0x1c, 0x200, 0x8}, @country_functional={0x8, 0x24, 0x7, 0x1, 0x7, [0x8]}, @mbim={0xc, 0x24, 0x1b, 0x4a8, 0xc6ec, 0x41, 0x40, 0x3ff, 0x3}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x3f, 0x2, 0x9}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x20, 0x8, 0x80}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x3f, 0x0, 0xff}}}}}}}]}}, &(0x7f0000000240)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x100, 0xff, 0x8, 0x3, 0x20, 0x9}, 0x2b, &(0x7f0000000040)={0x5, 0xf, 0x2b, 0x6, [@wireless={0xb, 0x10, 0x1, 0x8, 0x1, 0x9, 0x1f, 0x100, 0xab}, @ext_cap={0x7, 0x10, 0x2, 0x6, 0x0, 0x9, 0x200}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0xa, 0x6, 0x9, 0x2}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x1, 0x6, 0x4}]}, 0x2, [{0x18, &(0x7f0000000280)=@string={0x18, 0x3, "83a1340dd9c48d3c3435cbee22484931b90e74ab2d2b"}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x414}}]}) 12:14:28 executing program 1: r0 = openat(0xffffffffffffffff, &(0x7f0000001640)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1, 0x10, r0, 0x0, 0x10001) (async, rerun: 32) preadv(r0, &(0x7f0000001580)=[{0x0}], 0x1, 0x0) (rerun: 32) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x10, r0, 0x0, 0x0) (async) compat_30_socket(0x1f, 0x5, 0x0) (async) pipe2(0x0, 0x0) (async) open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) poll(&(0x7f0000000140)=[{}], 0x4e8, 0x0) 12:14:28 executing program 0: _ksem_open(&(0x7f0000000000)="0539e9bf5f9a7ad32ad975c8469529085aa5d7b5f40a593eebb5a65ad67ed2d8cc076b70c51d41e2196df0f245b1170175af03e16babfb991423bce19e36ae89", 0x200, 0x7, 0x3, &(0x7f0000000040)=0x0) _ksem_timedwait(r0, &(0x7f0000000080)={0x8fd3, 0x4}) compat_43_osetrlimit(0x6, 0xffffffffffffffff) _ksem_open(&(0x7f0000000000)="0539e9bf5f9a7ad32ad975c8469529085aa5d7b5f40a593eebb5a65ad67ed2d8cc076b70c51d41e2196df0f245b1170175af03e16babfb991423bce19e36ae89", 0x200, 0x7, 0x3, &(0x7f0000000040)) (async) _ksem_timedwait(r0, &(0x7f0000000080)={0x8fd3, 0x4}) (async) compat_43_osetrlimit(0x6, 0xffffffffffffffff) (async) 12:14:28 executing program 4: open$dir(&(0x7f0000000140)='./file1\x00', 0x200, 0x0) compat_12_stat12(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) chown(&(0x7f0000000000)='./file1\x00', 0xffffffffffffffff, r0) open$dir(&(0x7f0000000140)='./file1\x00', 0x200, 0x0) (async) compat_12_stat12(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)) (async) chown(&(0x7f0000000000)='./file1\x00', 0xffffffffffffffff, r0) (async) 12:14:28 executing program 5: r0 = open(&(0x7f0000000040)='./file0\x00', 0x200, 0x0) r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x1, 0x0) writev(r1, &(0x7f0000000340)=[{&(0x7f0000000000), 0x2cfea}], 0x1000000000000013) openat(0xffffffffffffffff, &(0x7f00000000c0)='./file2\x00', 0x8, 0x4) r2 = openat(0xffffffffffffffff, &(0x7f0000001640)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1, 0x10, r2, 0x0, 0x0) preadv(r2, &(0x7f0000000180)=[{0x0}], 0x1, 0xfff) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x10, r0, 0x0, 0x0) r3 = socket$inet6(0x18, 0x3, 0x0) openat(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FIONWRITE(r1, 0x40046679, &(0x7f0000000140)) sendto$inet6(r3, &(0x7f0000000080)='3', 0x358, 0x0, &(0x7f0000000000), 0x1c) open(&(0x7f0000000040)='./file0\x00', 0x200, 0x0) (async) open$dir(&(0x7f0000000000)='./file0\x00', 0x1, 0x0) (async) writev(r1, &(0x7f0000000340)=[{&(0x7f0000000000), 0x2cfea}], 0x1000000000000013) (async) openat(0xffffffffffffffff, &(0x7f00000000c0)='./file2\x00', 0x8, 0x4) (async) openat(0xffffffffffffffff, &(0x7f0000001640)='/proc/self/exe\x00', 0x0, 0x0) (async) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1, 0x10, r2, 0x0, 0x0) (async) preadv(r2, &(0x7f0000000180)=[{0x0}], 0x1, 0xfff) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x10, r0, 0x0, 0x0) (async) socket$inet6(0x18, 0x3, 0x0) (async) openat(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) (async) ioctl$FIONWRITE(r1, 0x40046679, &(0x7f0000000140)) (async) sendto$inet6(r3, &(0x7f0000000080)='3', 0x358, 0x0, &(0x7f0000000000), 0x1c) (async) 12:14:28 executing program 0: _ksem_open(&(0x7f0000000000)="0539e9bf5f9a7ad32ad975c8469529085aa5d7b5f40a593eebb5a65ad67ed2d8cc076b70c51d41e2196df0f245b1170175af03e16babfb991423bce19e36ae89", 0x200, 0x7, 0x3, &(0x7f0000000040)=0x0) _ksem_timedwait(r0, &(0x7f0000000080)={0x8fd3, 0x4}) compat_43_osetrlimit(0x6, 0xffffffffffffffff) _ksem_open(&(0x7f0000000000)="0539e9bf5f9a7ad32ad975c8469529085aa5d7b5f40a593eebb5a65ad67ed2d8cc076b70c51d41e2196df0f245b1170175af03e16babfb991423bce19e36ae89", 0x200, 0x7, 0x3, &(0x7f0000000040)) (async) _ksem_timedwait(r0, &(0x7f0000000080)={0x8fd3, 0x4}) (async) compat_43_osetrlimit(0x6, 0xffffffffffffffff) (async) 12:14:28 executing program 4: open$dir(&(0x7f0000000140)='./file1\x00', 0x200, 0x0) (async, rerun: 64) compat_12_stat12(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (rerun: 64) chown(&(0x7f0000000000)='./file1\x00', 0xffffffffffffffff, r0) [ 62.3171198] WARNING: module error: vfs load failed for `compat_12', error 2 12:14:28 executing program 0: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write(r1, 0x0, 0x400000) dup2(r1, r0) pipe2(&(0x7f0000000040), 0x1000000) [ 62.4971278] WARNING: defaulted mmap() share type to MAP_PRIVATE (pid 1339 command syz-executor.5) [ 62.5671319] WARNING: defaulted mmap() share type to MAP_PRIVATE (pid 1339 command syz-executor.5) [ 62.6171175] WARNING: module error: vfs load failed for `compat_12', error 2 [ 62.6471168] WARNING: defaulted mmap() share type to MAP_PRIVATE (pid 1835 command syz-executor.1) [ 62.6471168] uhub2: port 1, set config at addr 2 failed [ 62.6610607] uhub2: device problem, disabling port 1 [ 62.8671225] uhub3: device problem, disabling port 1 [ 63.1571139] uhub2: port 1, set config at addr 2 failed [ 63.1671249] uhub2: device problem, disabling port 1 [ 63.6571159] uhub2: port 1, set config at addr 2 failed [ 63.6671141] uhub2: device problem, disabling port 1 12:14:30 executing program 1: mknod(&(0x7f0000000080)='./file0\x00', 0x205e, 0x200) r0 = open(&(0x7f0000000480)='./file0\x00', 0x80400000000206, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2, 0x10, r0, 0x0, 0x0) mmap(&(0x7f00000d1000/0x4000)=nil, 0x4000, 0x2, 0x10, r0, 0x0, 0x3) preadv(r0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/174, 0xae}, {&(0x7f0000000180)=""/66, 0x42}, {&(0x7f0000000200)=""/246, 0xf6}], 0x3, 0x6b3f1d0000000000) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0, 0x1) mlock(&(0x7f0000000000/0x400000)=nil, 0x400000) 12:14:30 executing program 0: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write(r1, 0x0, 0x400000) (async) dup2(r1, r0) pipe2(&(0x7f0000000040), 0x1000000) 12:14:30 executing program 2: syz_usb_connect$uac1(0x6, 0x8f, &(0x7f00000004c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7d, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@output_terminal={0x9, 0x24, 0x3, 0x0, 0x1ff, 0x6, 0x3}, @mixer_unit={0x5}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x5, 0x2, 0x80}, @format_type_i_discrete={0x8}]}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x0, 0x0, 0x200}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x0, 0x7, 0x0, {0x7, 0x25, 0x1, 0x0, 0x8}}}}}}}]}}, 0x0) 12:14:30 executing program 3: syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x8b, 0x83, 0xe, 0x40, 0x403, 0xbca2, 0xe6d3, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x80, 0xab, 0xc9}}]}}]}}, 0x0) (async, rerun: 64) syz_usb_connect$cdc_ncm(0x5, 0xd2, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc0, 0x2, 0x1, 0x1, 0x0, 0x4, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "a9c7470e"}, {0x5, 0x24, 0x0, 0xffff}, {0xd, 0x24, 0xf, 0x1, 0xad, 0x5, 0x7ff}, {0x6, 0x24, 0x1a, 0x6, 0x21}, [@acm={0x4, 0x24, 0x2, 0x1}, @mdlm_detail={0x2b, 0x24, 0x13, 0xfa, "f3aa11c504ebfe75091a118a02f4d042eddb48b8cdd37c63866b2c409af8560c21b4bafe77ca27"}, @mdlm={0x15, 0x24, 0x12, 0x5}, @mbim_extended={0x8, 0x24, 0x1c, 0x200, 0x8}, @country_functional={0x8, 0x24, 0x7, 0x1, 0x7, [0x8]}, @mbim={0xc, 0x24, 0x1b, 0x4a8, 0xc6ec, 0x41, 0x40, 0x3ff, 0x3}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x3f, 0x2, 0x9}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x20, 0x8, 0x80}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x3f, 0x0, 0xff}}}}}}}]}}, &(0x7f0000000240)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x100, 0xff, 0x8, 0x3, 0x20, 0x9}, 0x2b, &(0x7f0000000040)={0x5, 0xf, 0x2b, 0x6, [@wireless={0xb, 0x10, 0x1, 0x8, 0x1, 0x9, 0x1f, 0x100, 0xab}, @ext_cap={0x7, 0x10, 0x2, 0x6, 0x0, 0x9, 0x200}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0xa, 0x6, 0x9, 0x2}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x1, 0x6, 0x4}]}, 0x2, [{0x18, &(0x7f0000000280)=@string={0x18, 0x3, "83a1340dd9c48d3c3435cbee22484931b90e74ab2d2b"}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x414}}]}) (rerun: 64) 12:14:30 executing program 4: r0 = openat(0xffffffffffffffff, &(0x7f0000001640)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1, 0x10, r0, 0x0, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$WSDISPLAYIO_DGSCROLL(r1, 0x400c5757, 0x0) r2 = getpid() fktrace(r1, 0x2, 0x8, r2) __select50(0x40, &(0x7f0000000000), 0x0, 0x0, 0x0) 12:14:30 executing program 5: r0 = open(&(0x7f0000000040)='./file0\x00', 0x200, 0x0) r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x1, 0x0) writev(r1, &(0x7f0000000340)=[{&(0x7f0000000000), 0x2cfea}], 0x1000000000000013) openat(0xffffffffffffffff, &(0x7f00000000c0)='./file2\x00', 0x8, 0x4) r2 = openat(0xffffffffffffffff, &(0x7f0000001640)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1, 0x10, r2, 0x0, 0x0) preadv(r2, &(0x7f0000000180)=[{0x0}], 0x1, 0xfff) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x10, r0, 0x0, 0x0) r3 = socket$inet6(0x18, 0x3, 0x0) openat(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FIONWRITE(r1, 0x40046679, &(0x7f0000000140)) sendto$inet6(r3, &(0x7f0000000080)='3', 0x358, 0x0, &(0x7f0000000000), 0x1c) open(&(0x7f0000000040)='./file0\x00', 0x200, 0x0) (async) open$dir(&(0x7f0000000000)='./file0\x00', 0x1, 0x0) (async) writev(r1, &(0x7f0000000340)=[{&(0x7f0000000000), 0x2cfea}], 0x1000000000000013) (async) openat(0xffffffffffffffff, &(0x7f00000000c0)='./file2\x00', 0x8, 0x4) (async) openat(0xffffffffffffffff, &(0x7f0000001640)='/proc/self/exe\x00', 0x0, 0x0) (async) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1, 0x10, r2, 0x0, 0x0) (async) preadv(r2, &(0x7f0000000180)=[{0x0}], 0x1, 0xfff) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x10, r0, 0x0, 0x0) (async) socket$inet6(0x18, 0x3, 0x0) (async) openat(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) (async) ioctl$FIONWRITE(r1, 0x40046679, &(0x7f0000000140)) (async) sendto$inet6(r3, &(0x7f0000000080)='3', 0x358, 0x0, &(0x7f0000000000), 0x1c) (async) 12:14:31 executing program 0: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write(r1, 0x0, 0x400000) (async) dup2(r1, r0) (async) pipe2(&(0x7f0000000040), 0x1000000) [ 64.5671171] WARNING: defaulted mmap() share type to MAP_PRIVATE (pid 904 command syz-executor.4) [ 64.6271151] WARNING: defaulted mmap() share type to MAP_SHARED (pid 900 command syz-executor.1) 12:14:31 executing program 1: mknod(&(0x7f0000000080)='./file0\x00', 0x205e, 0x200) r0 = open(&(0x7f0000000480)='./file0\x00', 0x80400000000206, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2, 0x10, r0, 0x0, 0x0) mmap(&(0x7f00000d1000/0x4000)=nil, 0x4000, 0x2, 0x10, r0, 0x0, 0x3) preadv(r0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/174, 0xae}, {&(0x7f0000000180)=""/66, 0x42}, {&(0x7f0000000200)=""/246, 0xf6}], 0x3, 0x6b3f1d0000000000) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0, 0x1) mlock(&(0x7f0000000000/0x400000)=nil, 0x400000) mknod(&(0x7f0000000080)='./file0\x00', 0x205e, 0x200) (async) open(&(0x7f0000000480)='./file0\x00', 0x80400000000206, 0x0) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2, 0x10, r0, 0x0, 0x0) (async) mmap(&(0x7f00000d1000/0x4000)=nil, 0x4000, 0x2, 0x10, r0, 0x0, 0x3) (async) preadv(r0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/174, 0xae}, {&(0x7f0000000180)=""/66, 0x42}, {&(0x7f0000000200)=""/246, 0xf6}], 0x3, 0x6b3f1d0000000000) (async) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) (async) truncate(&(0x7f0000000040)='./file0\x00', 0x0, 0x1) (async) mlock(&(0x7f0000000000/0x400000)=nil, 0x400000) (async) [ 64.8271124] WARNING: defaulted mmap() share type to MAP_PRIVATE (pid 1844 command syz-executor.5) 12:14:31 executing program 4: r0 = openat(0xffffffffffffffff, &(0x7f0000001640)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1, 0x10, r0, 0x0, 0x0) (async) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$WSDISPLAYIO_DGSCROLL(r1, 0x400c5757, 0x0) (async) r2 = getpid() fktrace(r1, 0x2, 0x8, r2) (async) __select50(0x40, &(0x7f0000000000), 0x0, 0x0, 0x0) [ 64.9271156] WARNING: defaulted mmap() share type to MAP_PRIVATE (pid 1844 command syz-executor.5) 12:14:31 executing program 5: mknod(&(0x7f0000000080)='./file0\x00', 0x205e, 0x200) r0 = open(&(0x7f0000000480)='./file0\x00', 0x80400000000206, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2, 0x10, r0, 0x0, 0x0) mmap(&(0x7f00000d1000/0x4000)=nil, 0x4000, 0x2, 0x10, r0, 0x0, 0x3) preadv(r0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/174, 0xae}, {&(0x7f0000000180)=""/66, 0x42}, {&(0x7f0000000200)=""/246, 0xf6}], 0x3, 0x6b3f1d0000000000) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0, 0x1) mlock(&(0x7f0000000000/0x400000)=nil, 0x400000) [ 64.9771127] WARNING: defaulted mmap() share type to MAP_SHARED (pid 903 command syz-executor.1) [ 65.0971190] WARNING: defaulted mmap() share type to MAP_SHARED (pid 903 command syz-executor.1) [ 65.1085235] WARNING: module error: vfs load failed for `usbverbose', error 2 [ 65.1085235] WARNING: module error: vfs load failed for `usbverbose', error 2 [ 65.1271121] ugen0 at uhub3 port 1 [ 65.1271121] WARNING: module error: vfs load failed for `usbverbose', error 2 [ 65.1389025] WARNING: module error: vfs load failed for `usbverbose', error 2 [ 65.1389025] ugen0: vendor 0403 (0x0403) product bca2 (0xbca2), rev 0.00/e6.d3, addr 2 [ 65.1543597] WARNING: defaulted mmap() share type to MAP_SHARED (pid 916 command syz-executor.5) [ 65.1644551] pmap_unwire: wiring for pmap 0xfffffdcf2a1fe800 va 0x20000000 did not change! [ 65.1771165] pmap_unwire: wiring for pmap 0xfffffdcf2a1fe800 va 0x20001000 did not change! [ 65.1771165] pmap_unwire: wiring for pmap 0xfffffdcf2a1fe800 va 0x20002000 did not change! [ 65.1935702] pmap_unwire: wiring for pmap 0xfffffdcf2a1fe800 va 0x20003000 did not change! [ 65.2018899] pmap_unwire: wiring for pmap 0xfffffdcf2a1fe800 va 0x20004000 did not change! [ 65.2119472] pmap_unwire: wiring for pmap 0xfffffdcf2a1fe800 va 0x20005000 did not change! [ 65.2205114] pmap_unwire: wiring for pmap 0xfffffdcf2a1fe800 va 0x20006000 did not change! [ 65.2286489] pmap_unwire: wiring for pmap 0xfffffdcf2a1fe800 va 0x20007000 did not change! [ 65.2286489] pmap_unwire: wiring for pmap 0xfffffdcf2a1fe800 va 0x20008000 did not change! [ 65.2450459] panic: UBSan: Undefined Behavior in /syzkaller/managers/ci2-netbsd-kubsan/kernel/sys/uvm/uvm_page.c:2056:34, member access within misaligned address 0xdeadbeef for type 'struct uvm_object' which requires 8 byte alignment [ 65.2657174] cpu0: Begin traceback... [ 65.2871059] vpanic() at netbsd:vpanic+0x2f2 [ 65.3571068] Report() at netbsd:Report+0x3b [ 65.3871028] ugen0: setting configuration index 0 failed [ 65.4171036] HandleTypeMismatch() at netbsd:HandleTypeMismatch+0xfc [ 65.4671033] uvm_page_owner_locked_p() at netbsd:uvm_page_owner_locked_p+0x1f4 [ 65.5171043] uvm_pageunwire() at netbsd:uvm_pageunwire+0x22 [ 65.5771047] uvm_fault_unwire_locked() at netbsd:uvm_fault_unwire_locked+0x399 [ 65.6271044] uvm_unmap_remove() at netbsd:uvm_unmap_remove+0x76e [ 65.6771073] uvm_map_enter() at netbsd:uvm_map_enter+0x268 [ 65.7271044] uvm_map() at netbsd:uvm_map+0x135 [ 65.7871039] uvm_mmap.part.0() at netbsd:uvm_mmap.part.0+0x3b0 [ 65.8371031] sys_mmap() at netbsd:sys_mmap+0x9d5 [ 65.8971062] sys___syscall() at netbsd:sys___syscall+0x1e3 [ 65.9471049] syscall() at netbsd:syscall+0x2da [ 65.9571038] --- syscall (number 198) --- [ 65.9771042] netbsd:syscall+0x2da: [ 65.9771042] cpu0: End traceback... [ 65.9879879] fatal breakpoint trap in supervisor mode [ 65.9879879] trap type 1 code 0 rip 0xffffffff80221ab5 cs 0x8 rflags 0x246 cr2 0x7695eb800000 ilevel 0 rsp 0xffffb900d0a725a0 [ 66.0040864] curlwp 0xfffffdcf382e4540 pid 903.907 lowest kstack 0xffffb900d0a6e2c0 Stopped in pid 903.907 (syz-executor.1) at netbsd:breakpoint+0x5: leave ? breakpoint() at netbsd:breakpoint+0x5 db_panic() at netbsd:db_panic+0xec vpanic() at netbsd:vpanic+0x2f2 Report() at netbsd:Report+0x3b HandleTypeMismatch() at netbsd:HandleTypeMismatch+0xfc uvm_page_owner_locked_p() at netbsd:uvm_page_owner_locked_p+0x1f4 uvm_pageunwire() at netbsd:uvm_pageunwire+0x22 uvm_fault_unwire_locked() at netbsd:uvm_fault_unwire_locked+0x399 uvm_unmap_remove() at netbsd:uvm_unmap_remove+0x76e uvm_map_enter() at netbsd:uvm_map_enter+0x268 uvm_map() at netbsd:uvm_map+0x135 uvm_mmap.part.0() at netbsd:uvm_mmap.part.0+0x3b0 sys_mmap() at netbsd:sys_mmap+0x9d5 sys___syscall() at netbsd:sys___syscall+0x1e3 syscall() at netbsd:syscall+0x2da --- syscall (number 198) --- netbsd:syscall+0x2da: Panic string: UBSan: Undefined Behavior in /syzkaller/managers/ci2-netbsd-kubsan/kernel/sys/uvm/uvm_page.c:2056:34, member access within misaligned address 0xdeadbeef for type 'struct uvm_object' which requires 8 byte alignment PID LID S CPU FLAGS STRUCT LWP * NAME WAIT 916 2027 3 0 180 fffffdcf3835b300 syz-executor.5 parked 916 916 3 0 10000000 fffffdcf359e3200 syz-executor.5 tstile 920 2023 3 0 180 fffffdcf2af37080 syz-executor.4 parked 920 920 2 1 10000000 fffffdcf37cf6700 syz-executor.4 903 913 3 1 0 fffffdcf373f6ac0 syz-executor.1 lwpwait 903 > 907 7 0 100000 fffffdcf382e4540 syz-executor.1 903 922 2 1 100100 fffffdcf38671bc0 syz-executor.1 903 911 2 1 100100 fffffdcf37d3cb00 syz-executor.1 910 1750 3 0 180 fffffdcf373f6680 syz-executor.0 parked 910 910 2 1 10000000 fffffdcf2ad6c8c0 syz-executor.0 763 1852 2 1 0 fffffdcf2af37900 syz-executor.2 763 763 2 1 10000000 fffffdcf385fa900 syz-executor.2 905 1853 2 1 0 fffffdcf2aed3940 syz-executor.3 905 1845 2 1 140 fffffdcf37f0d040 syz-executor.3 905 905 2 1 10000000 fffffdcf38759140 syz-executor.3 509 509 3 0 180 fffffdcf373f6240 syz-executor.3 parked 497 497 3 0 180 fffffdcf382e4100 syz-executor.3 parked 1754 1754 3 0 180 fffffdcf37d3c280 syz-executor.3 parked 1151 1151 2 1 140 fffffdcf2a5ac540 syz-executor.3 1229 1229 2 1 140 fffffdcf2a5ac100 syz-executor.5 1130 1130 2 1 140 fffffdcf2a719300 syz-executor.4 1192 1192 2 1 140 fffffdcf2a337700 syz-executor.1 425 425 2 1 140 fffffdcf2aed3500 syz-executor.2 1224 1224 2 1 140 fffffdcf2bb0f140 syz-executor.0 1078 1220 2 0 100 fffffdcf2c044a40 syz-fuzzer 1078 1194 3 1 180 fffffdcf2a5ac980 syz-fuzzer parked 1078 1222 2 0 140 fffffdcf29e17ac0 syz-fuzzer 1078 1001 3 1 180 fffffdcf2a1a0280 syz-fuzzer parked 1078 1107 3 0 180 fffffdcf29bfa600 syz-fuzzer parked 1078 1054 2 0 100 fffffdcf29e17240 syz-fuzzer 1078 >1086 7 1 140 fffffdcf2bb0f9c0 syz-fuzzer 1078 1078 3 0 180 fffffdcf2c044600 syz-fuzzer parked 1079 1079 3 0 180 fffffdcf29e17680 sshd select 1069 1069 3 0 180 fffffdcf2beb9180 getty nanoslp 1126 1126 3 1 180 fffffdcf2c0441c0 getty nanoslp 1000 1000 3 0 180 fffffdcf2beb9a00 getty nanoslp 1115 1115 3 0 1c0 fffffdcf2beb95c0 getty ttyraw 1093 1093 3 1 180 fffffdcf2bb0f580 sshd select 953 953 3 0 180 fffffdcf2ad6c040 powerd kqueue 689 689 3 1 180 fffffdcf2acdf780 syslogd kqueue 547 547 3 0 180 fffffdcf2a1a06c0 dhcpcd poll 546 546 3 1 180 fffffdcf2acdf340 dhcpcd poll 600 600 3 0 180 fffffdcf2aed30c0 dhcpcd poll 587 587 3 0 180 fffffdcf2a1a0b00 dhcpcd poll 289 289 3 0 180 fffffdcf2a3372c0 dhcpcd poll 288 288 3 1 180 fffffdcf2a337b40 dhcpcd poll 351 351 3 0 180 fffffdcf2a719740 dhcpcd poll 1 1 3 0 180 fffffdcf21a69940 init wait 0 1978 5 1 200 fffffdcf37cf6b40 (zombie) 0 1636 3 0 200 fffffdcf384170c0 ktrace ktrwait 0 483 3 0 200 fffffdcf3835b740 ktrace ktrwait 0 819 3 0 200 fffffdcf29bfaa40 physiod physiod 0 194 3 0 200 fffffdcf29c65a80 pooldrain pooldrain 0 193 2 0 240 fffffdcf29c65640 ioflush 0 192 3 1 200 fffffdcf29c65200 pgdaemon pgdaemon 0 167 3 1 200 fffffdcf29bfa1c0 usb7 usbevt 0 166 3 1 200 fffffdcf26b7da00 usb6 usbevt 0 165 3 1 200 fffffdcf26b7d5c0 usb5 usbevt 0 164 3 1 200 fffffdcf26b7d180 usb4 usbevt 0 31 3 1 240 fffffdcf23b309c0 usb3 xclocv 0 63 3 1 200 fffffdcf23b30580 usb2 usbevt 0 126 3 1 200 fffffdcf23b30140 usb1 usbevt 0 125 3 1 200 fffffdcf21a83980 usb0 usbevt 0 124 3 1 200 fffffdcf21a83540 usbtask-dr usbtsk 0 123 3 1 200 fffffdcf2133d6c0 usbtask-hc usbtsk 0 122 3 1 200 fffffdcf21a83100 npfgc0 npfgcw 0 121 3 1 200 fffffdcf21a69500 rt_free rt_free 0 120 3 1 200 fffffdcf21a690c0 unpgc unpgc 0 119 2 0 200 fffffdcf21a24900 key_timehandler 0 118 3 1 200 fffffdcf21a244c0 icmp6_wqinput/1 icmp6_wqinput 0 117 3 0 200 fffffdcf21a24080 icmp6_wqinput/0 icmp6_wqinput 0 116 2 0 200 fffffdcf21a178c0 nd6_timer 0 115 3 1 200 fffffdcf21a17480 carp6_wqinput/1 carp6_wqinput 0 114 3 0 200 fffffdcf21a17040 carp6_wqinput/0 carp6_wqinput 0 113 3 1 200 fffffdcf219eabc0 carp_wqinput/1 carp_wqinput 0 112 3 0 200 fffffdcf219dd300 carp_wqinput/0 carp_wqinput 0 111 3 1 200 fffffdcf219dd740 icmp_wqinput/1 icmp_wqinput 0 110 3 0 200 fffffdcf219ddb80 icmp_wqinput/0 icmp_wqinput 0 109 2 0 200 fffffdcf219ea780 rt_timer 0 108 3 1 200 fffffdcf219ea340 vmem_rehash vmem_rehash 0 99 3 0 200 fffffdcf2134ab40 entbutler entropy 0 98 3 1 200 fffffdcf2134a700 viomb balloon 0 97 3 1 200 fffffdcf2134a2c0 vioif0_txrx/1 vioif0_txrx 0 96 3 0 200 fffffdcf2133db00 vioif0_txrx/0 vioif0_txrx 0 29 3 1 200 fffffdcf2133d280 scsibus0 sccomp 0 28 3 0 200 fffffdcf1fdc3ac0 pms0 pmsreset 0 27 3 1 200 fffffdcf1fdc3680 xcall/1 xcall 0 26 1 1 200 fffffdcf1fdc3240 softser/1 0 25 1 1 200 fffffdcf1fd8ea80 softclk/1 0 24 1 1 200 fffffdcf1fd8e640 softbio/1 0 23 1 1 200 fffffdcf1fd8e200 softnet/1 0 22 1 1 201 fffffdd04ed35a40 idle/1 0 21 3 1 200 fffffdd04ed35600 lnxsyswq lnxsyswq 0 20 3 1 200 fffffdd04ed351c0 lnxubdwq lnxubdwq 0 19 3 1 200 fffffdd04ed44a00 lnxpwrwq lnxpwrwq 0 18 3 1 200 fffffdd04ed445c0 lnxlngwq lnxlngwq 0 17 3 1 200 fffffdd04ed44180 lnxhipwq lnxhipwq 0 16 3 0 200 fffffdd04ed5d9c0 lnxrcugc lnxrcugc 0 15 3 0 200 fffffdd04ed5d580 sysmon smtaskq 0 14 3 1 200 fffffdd04ed5d140 pmfsuspend pmfsuspend 0 13 3 0 200 fffffdd04ed6a980 pmfevent pmfevent 0 12 3 1 200 fffffdd04ed6a540 sopendfree sopendfr 0 11 3 1 200 fffffdd04ed6a100 iflnkst iflnkst 0 10 3 1 200 fffffdd04fd9b940 nfssilly nfssilly 0 9 3 0 200 fffffdd04fd9b500 vdrain vdrain 0 8 3 1 200 fffffdd04fd9b0c0 modunload mod_unld 0 7 2 0 200 fffffdd04fdc2900 xcall/0 0 6 1 0 200 fffffdd04fdc24c0 softser/0 0 5 1 0 200 fffffdd04fdc2080 softclk/0 0 4 1 0 200 fffffdd04fdf18c0 softbio/0 0 3 1 0 200 fffffdd04fdf1480 softnet/0 0 2 1 0 201 fffffdd04fdf1040 idle/0 0 0 2 0 240 ffffffff86750740 swapper [Locks tracked through LWPs] ****** LWP 916.916 (syz-executor.5) @ 0xfffffdcf359e3200, l_stat=3 *** Locks held: none *** Locks wanted: * Lock 0 (initialized at uvm_obj_init) lock address : 0xfffffdcf387cf800 type : sleep/adaptive initialized : 0xffffffff8360c43e shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 1 relevant cpu : 0 last held: 0 relevant lwp : 0xfffffdcf359e3200 last held: 0xfffffdcf382e4540 last locked* : 0xffffffff836009f3 unlocked : 0xffffffff835c9612 owner/count : 0xfffffdcf382e4540 flags : 0x0000000000000007 Turnstile: => 0 waiting readers: => 1 waiting writers: 0xfffffdcf359e3200 ****** LWP 903.907 (syz-executor.1) @ 0xfffffdcf382e4540, l_stat=7 *** Locks held: * Lock 0 (initialized at uvmspace_alloc) lock address : 0xfffffdcf2ab085d0 type : sleep/adaptive initialized : 0xffffffff835f6c15 shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 0 relevant cpu : 0 last held: 0 relevant lwp : 0xfffffdcf382e4540 last held: 0xfffffdcf382e4540 last locked* : 0xffffffff835e9fd4 unlocked : 0xffffffff835cfb65 owner/count : 0xfffffdcf382e4540 flags : 0x0000000000000004 Turnstile: no active turnstile for this lock. * Lock 1 (initialized at uvm_obj_init) lock address : 0xfffffdcf387cf800 type : sleep/adaptive initialized : 0xffffffff8360c43e shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 1 relevant cpu : 0 last held: 0 relevant lwp : 0xfffffdcf382e4540 last held: 0xfffffdcf382e4540 last locked* : 0xffffffff836009f3 unlocked : 0xffffffff835c9612 owner/count : 0xfffffdcf382e4540 flags : 0x0000000000000007 Turnstile: => 0 waiting readers: => 1 waiting writers: 0xfffffdcf359e3200 *** Locks wanted: none ****** LWP 763.763 (syz-executor.2) @ 0xfffffdcf385fa900, l_stat=2 *** Locks held: none *** Locks wanted: * Lock 0 (initialized at sched_cpuattach) lock address : 0xfffffdd050271340 type : spin initialized : 0xffffffff8374e7e9 shared holds : 0 exclusive: 0 shares wanted: 0 exclusive: 1 relevant cpu : 1 last held: 1 relevant lwp : 0xfffffdcf385fa900 last held: 000000000000000000 last locked : 0xffffffff83727aa8 unlocked*: 0xffffffff838ac10e owner field : 0x0000000000000700 wait/spin: 0/1 ****** LWP 546.546 (dhcpcd) @ 0xfffffdcf2acdf340, l_stat=3 *** Locks held: none *** Locks wanted: * Lock 0 (initialized at module_hook_init) lock address : 0xffffffff86beab00 type : sleep/adaptive initialized : 0xffffffff8370d547 shared holds : 0 exclusive: 0 shares wanted: 0 exclusive: 0 relevant cpu : 1 last held: 0 relevant lwp : 0xfffffdcf2acdf340 last held: 000000000000000000 last locked : 000000000000000000 unlocked*: 000000000000000000 owner field : 000000000000000000 wait/spin: 0/0 Turnstile: no active turnstile for this lock. ****** LWP 600.600 (dhcpcd) @ 0xfffffdcf2aed30c0, l_stat=3 *** Locks held: none *** Locks wanted: * Lock 0 (initialized at module_hook_init) lock address : 0xffffffff86beab00 type : sleep/adaptive initialized : 0xffffffff8370d547 shared holds : 0 exclusive: 0 shares wanted: 0 exclusive: 0 relevant cpu : 0 last held: 0 relevant lwp : 0xfffffdcf2aed30c0 last held: 000000000000000000 last locked : 000000000000000000 unlocked*: 000000000000000000 owner field : 000000000000000000 wait/spin: 0/0 Turnstile: no active turnstile for this lock. ****** LWP 288.288 (dhcpcd) @ 0xfffffdcf2a337b40, l_stat=3 *** Locks held: none *** Locks wanted: * Lock 0 (initialized at module_hook_init) lock address : 0xffffffff86beab00 type : sleep/adaptive initialized : 0xffffffff8370d547 shared holds : 0 exclusive: 0 shares wanted: 0 exclusive: 0 relevant cpu : 1 last held: 0 relevant lwp : 0xfffffdcf2a337b40 last held: 000000000000000000 last locked : 000000000000000000 unlocked*: 000000000000000000 owner field : 000000000000000000 wait/spin: 0/0 Turnstile: no active turnstile for this lock. ****** LWP 351.351 (dhcpcd) @ 0xfffffdcf2a719740, l_stat=3 *** Locks held: none *** Locks wanted: * Lock 0 (initialized at module_hook_init) lock address : 0xffffffff86beab00 type : sleep/adaptive initialized : 0xffffffff8370d547 shared holds : 0 exclusive: 0 shares wanted: 0 exclusive: 0 relevant cpu : 0 last held: 0 relevant lwp : 0xfffffdcf2a719740 last held: 000000000000000000 last locked : 000000000000000000 unlocked*: 000000000000000000 owner field : 000000000000000000 wait/spin: 0/0 Turnstile: no active turnstile for this lock. ****** LWP 0.25 (softclk/1) @ 0xfffffdcf1fd8ea80, l_stat=1 *** Locks held: none *** Locks wanted: * Lock 0 (initialized at module_hook_init) lock address : 0xffffffff86beab00 type : sleep/adaptive initialized : 0xffffffff8370d547 shared holds : 0 exclusive: 0 shares wanted: 0 exclusive: 0 relevant cpu : 1 last held: 0 relevant lwp : 0xfffffdcf1fd8ea80 last held: 000000000000000000 last locked : 000000000000000000 unlocked*: 000000000000000000 owner field : 000000000000000000 wait/spin: 0/0 Turnstile: no active turnstile for this lock. ****** LWP 0.11 (iflnkst) @ 0xfffffdd04ed6a100, l_stat=3 *** Locks held: none *** Locks wanted: * Lock 0 (initialized at module_hook_init) lock address : 0xffffffff86beab00 type : sleep/adaptive initialized : 0xffffffff8370d547 shared holds : 0 exclusive: 0 shares wanted: 0 exclusive: 0 relevant cpu : 1 last held: 0 relevant lwp : 0xfffffdd04ed6a100 last held: 000000000000000000 last locked : 000000000000000000 unlocked*: 000000000000000000 owner field : 000000000000000000 wait/spin: 0/0 Turnstile: no active turnstile for this lock. ****** LWP 0.0 (swapper) @ 0xffffffff86750740, l_stat=2 *** Locks held: none *** Locks wanted: * Lock 0 (initialized at module_hook_init) lock address : 0xffffffff86beab00 type : sleep/adaptive initialized : 0xffffffff8370d547 shared holds : 0 exclusive: 0 shares wanted: 0 exclusive: 0 relevant cpu : 0 last held: 0 relevant lwp : 0xffffffff86750740 last held: 000000000000000000 last locked : 000000000000000000 unlocked*: 000000000000000000 owner field : 000000000000000000 wait/spin: 0/0 Turnstile: no active turnstile for this lock. [Locks tracked through CPUs] ******* Locks held on cpu0: * Lock 0 (initialized at kprintf_init) lock address : 0xffffffff86cce668 type : spin initialized : 0xffffffff8385b0a3 shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 0 relevant cpu : 0 last held: 0 relevant lwp : 0xfffffdcf382e4540 last held: 0xfffffdcf382e4540 last locked* : 0xffffffff8385b131 unlocked : 0xffffffff8385b1ac owner field : 0x0000000000000800 wait/spin: 0/1 PAGE FLAG PQ UOBJECT UANON 0xffffb90000007180 0045 00000000 0x0 0x0 0xffffb90000007200 0045 00000000 0x0 0x0 0xffffb90000007280 0045 00000000 0x0 0x0 0xffffb90000007300 0045 00000000 0x0 0x0 0xffffb90000007380 0045 00000000 0x0 0x0 0xffffb90000007400 0045 00000000 0x0 0x0 0xffffb90000007480 0045 00000000 0x0 0x0 0xffffb90000007500 0045 00000000 0x0 0x0 0xffffb90000007580 0045 00000000 0x0 0x0 0xffffb90000007600 0045 00000000 0x0 0x0 0xffffb90000007680 0041 00000000 0x0 0x0 0xffffb90000007700 0041 00000000 0x0 0x0 0xffffb90000007780 0041 00000000 0x0 0x0 0xffffb90000007800 0041 00000000 0x0 0x0 0xffffb90000007880 0041 00000000 0x0 0x0 0xffffb90000007900 0045 00000000 0x0 0x0 0xffffb90000007980 0041 00000000 0x0 0x0 0xffffb90000007a00 0041 00000000 0x0 0x0 0xffffb90000007a80 0041 00000000 0x0 0x0 0xffffb90000007b00 0041 00000000 0x0 0x0 0xffffb90000007b80 0041 00000000 0x0 0x0 0xffffb90000007c00 0041 00000000 0x0 0x0 0xffffb90000007c80 0041 00000000 0x0 0x0 0xffffb90000007d00 0041 00000000 0x0 0x0 0xffffb90000007d80 0041 00000000 0x0 0x0 0xffffb90000007e00 0041 00000000 0x0 0x0 0xffffb90000007e80 0041 00000000 0x0 0x0 0xffffb90000007f00 0041 00000000 0x0 0x0 0xffffb90000007f80 0041 00000000 0x0 0x0 0xffffb90000008000 0041 00000000 0x0 0x0 0xffffb90000008080 0041 00000000 0x0 0x0 0xffffb90000008100 0041 00000000 0x0 0x0 0xffffb90000008180 0041 00000000 0x0 0x0 0xffffb90000008200 0041 00000000 0x0 0x0 0xffffb90000008280 0041 00000000 0x0 0x0 0xffffb90000008300 0041 00000000 0x0 0x0 0xffffb90000008380 0041 00000000 0x0 0x0 0xffffb90000008400 0041 00000000 0x0 0x0 0xffffb90000008480 0041 00000000 0x0 0x0 0xffffb90000008500 0041 00000000 0x0 0x0 0xffffb90000008580 0041 00000000 0x0 0x0 0xffffb90000008600 0041 00000000 0x0 0x0 0xffffb90000008680 0041 00000000 0x0 0x0 0xffffb90000008700 0041 00000000 0x0 0x0 0xffffb90000008780 0041 00000000 0x0 0x0 0xffffb90000008800 0041 00000000 0x0 0x0 0xffffb90000008880 0041 00000000 0x0 0x0 0xffffb90000008900 0041 00000000 0x0 0x0 0xffffb90000008980 0041 00000000 0x0 0x0 0xffffb90000008a00 0041 00000000 0x0 0x0 0xffffb90000008a80 0041 00000000 0x0 0x0 0xffffb90000008b00 0041 00000000 0x0 0x0 0xffffb90000008b80 0045 00000000 0x0 0x0 0xffffb90000008c00 0045 00000000 0x0 0x0 0xffffb90000008c80 0041 00000000 0x0 0x0 0xffffb90000008d00 0041 00000000 0x0 0x0 0xffffb90000008d80 0041 00000000 0x0 0x0 0xffffb90000008e00 0041 00000000 0x0 0x0 0xffffb90000008e80 0041 00000000 0x0 0x0 0xffffb90000008f00 0041 00000000 0x0 0x0 0xffffb90000008f80 0041 00000000 0x0 0x0 0xffffb90000009000 0041 00000000 0x0 0x0 0xffffb90000009080 0045 00000000 0x0 0x0 0xffffb90000009100 0041 00000000 0x0 0x0 0xffffb90000009180 0041 00000000 0x0 0x0 0xffffb90000009200 0041 00000000 0x0 0x0 0xffffb90000009280 0041 00000000 0x0 0x0 0xffffb90000009300 0041 00000000 0x0 0x0 0xffffb90000009380 0041 00000000 0x0 0x0 0xffffb90000009400 0041 00000000 0x0 0x0 0xffffb90000009480 0041 00000000 0x0 0x0 0xffffb90000009500 0041 00000000 0x0 0x0 0xffffb90000009580 0041 00000000 0x0 0x0 0xffffb90000009600 0041 00000000 0x0 0x0 0xffffb90000009680 0041 00000000 0x0 0x0 0xffffb90000009700 0041 00000000 0x0 0x0 0xffffb90000009780 0041 00000000 0x0 0x0 0xffffb90000009800 0041 00000000 0x0 0x0 0xffffb90000009880 0041 00000000 0x0 0x0 0xffffb90000009900 0041 00000000 0x0 0x0 0xffffb90000009980 0041 00000000 0x0 0x0 0xffffb90000009a00 0041 00000000 0x0 0x0 0xffffb90000009a80 0041 00000000 0x0 0x0 0xffffb90000009b00 0041 00000000 0x0 0x0 0xffffb90000009b80 0041 00000000 0x0 0x0 0xffffb90000009c00 0041 00000000 0x0 0x0 0xffffb90000009c80 0041 00000000 0x0 0x0 0xffffb90000009d00 0041 00000000 0x0 0x0 0xffffb90000009d80 0041 00000000 0x0 0x0 0xffffb90000009e00 0041 00000000 0x0 0x0 0xffffb90000009e80 0041 00000000 0x0 0x0 0xffffb90000009f00 0041 00000000 0x0 0x0 0xffffb90000009f80 0041 00000000 0x0 0x0 0xffffb9000000a000 0041 00000000 0x0 0x0 0xffffb9000000a080 0041 00000000 0x0 0x0 0xffffb9000000a100 0041 00000000 0x0 0x0 0xffffb9000000a180 0041 00000000 0x0 0x0 0xffffb9000000a200 0041 00000000 0x0 0x0 0xffffb9000000a280 0045 00000000 0x0 0x0 0xffffb9000000a300 0041 00000000 0x0 0x0 0xffffb9000000a380 0041 00000000 0x0 0x0 0xffffb9000000a400 0041 00000000 0x0 0x0 0xffffb9000000a480 0041 00000000 0x0 0x0 0xffffb9000000a500 0041 00000000 0x0 0x0 0xffffb9000000a580 0041 00000000 0x0 0x0 0xffffb9000000a600 0045 00000000 0x0 0x0 0xffffb9000000a680 0041 00000000 0x0 0x0 0xffffb9000000a700 0041 00000000 0x0 0x0 0xffffb9000000a780 0041 00000000 0x0 0x0 0xffffb9000000a800 0041 00000000 0x0 0x0 0xffffb9000000a880 0041 00000000 0x0 0x0 0xffffb9000000a900 0041 00000000 0x0 0x0 0xffffb9000000a980 0041 00000000 0x0 0x0 0xffffb9000000aa00 0041 00000000 0x0 0x0 0xffffb9000000aa80 0041 00000000 0x0 0x0 0xffffb9000000ab00 0041 00000000 0x0 0x0 0xffffb9000000ab80 0041 00000000 0x0 0x0 0xffffb9000000ac00 0041 00000000 0x0 0x0 0xffffb9000000ac80 0041 00000000 0x0 0x0 0xffffb9000000ad00 0041 00000000 0x0 0x0 0xffffb9000000ad80 0041 00000000 0x0 0x0 0xffffb9000000ae00 0041 00000000 0x0 0x0 0xffffb9000000ae80 0045 00000000 0x0 0x0 0xffffb9000000af00 0045 00000000 0x0 0x0 0xffffb9000000af80 0041 00000000 0x0 0x0 0xffffb9000000b000 0041 00000000 0x0 0x0 0xffffb9000000b080 0041 00000000 0x0 0x0 0xffffb9000000b100 0041 00000000 0x0 0x0 0xffffb9000000b180 0045 00000000 0x0 0x0 0xffffb9000000b200 0045 00000000 0x0 0x0 0xffffb9000000b280 0045 00000000 0x0 0x0 0xffffb9000000b300 0045 00000000 0x0 0x0 0xffffb9000000b380 0045 00000000 0x0 0x0 0xffffb9000000b400 0041 00000000 0x0 0x0 0xffffb9000000b480 0041 00000000 0x0 0x0 0xffffb9000000b500 0045 00000000 0x0 0x0 0xffffb9000000b580 0045 00000000 0x0 0x0 0xffffb9000000b600 0045 00000000 0x0 0x0 0xffffb9000000b680 0045 00000000 0x0 0x0 0xffffb9000000b700 0045 00000000 0x0 0x0 0xffffb9000000b780 0045 00000000 0x0 0x0 0xffffb9000000b800 0041 00000000 0x0 0x0 0xffffb9000000b880 0041 00000000 0x0 0x0 0xffffb9000000b900 0045 00000000 0x0 0x0 0xffffb9000000b980 0045 00000000 0x0 0x0 0xffffb9000000ba00 0045 00000000 0x0 0x0 0xffffb9000000ba80 0045 00000000 0x0 0x0 0xffffb9000000bb00 0045 00000000 0x0 0x0 0xffffb9000000bb80 0045 00000000 0x0 0x0 0xffffb9000000bc00 0045 00000000 0x0 0x0 0xffffb9000000bc80 0041 00000000 0x0 0x0 0xffffb9000000bd00 0045 00000000 0x0 0x0 0xffffb9000000bd80 0045 00000000 0x0 0x0 0xffffb9000000be00 0045 00000000 0x0 0x0 0xffffb9000000be80 0045 00000000 0x0 0x0 0xffffb9000000bf00 0045 00000000 0x0 0x0 0xffffb9000000bf80 0045 00000000 0x0 0x0 0xffffb9000000c000 0045 00000000 0x0 0x0 0xffffb9000000c080 0045 00000000 0x0 0x0 0xffffb9000000c100 0045 00000000 0x0 0x0 0xffffb9000000c180 0045 00000000 0x0 0x0 0xffffb9000000c200 0045 00000000 0x0 0x0 0xffffb9000000c280 0045 00000000 0x0 0x0 0xffffb9000000c300 0045 00000000 0x0 0x0 0xffffb9000000c380 0045 00000000 0x0 0x0 0xffffb9000000c400 0045 00000000 0x0 0x0 0xffffb9000000c480 0045 00000000 0x0 0x0 0xffffb9000000c500 0045 00000000 0x0 0x0 0xffffb9000000c580 0045 00000000 0x0 0x0 0xffffb9000000c600 0045 00000000 0x0 0x0 0xffffb9000000c680 0045 00000000 0x0 0x0 0xffffb9000000c700 0041 00000000 0x0 0x0 0xffffb9000000c780 0045 00000000 0x0 0x0 0xffffb9000000c800 0045 00000000 0x0 0x0 0xffffb9000000c880 0045 00000000 0x0 0x0 0xffffb9000000c900 0045 00000000 0x0 0x0 0xffffb9000000c980 0045 00000000 0x0 0x0 0xffffb9000000ca00 0045 00000000 0x0 0x0 0xffffb9000000ca80 0041 00000000 0x0 0x0 0xffffb9000000cb00 0041 00000000 0x0 0x0 0xffffb9000000cb80 0041 00000000 0x0 0x0 0xffffb9000000cc00 0045 00000000 0x0 0x0 0xffffb9000000cc80 0045 00000000 0x0 0x0 0xffffb9000000cd00 0041 00000000 0x0 0x0 0xffffb9000000cd80 0041 00000000 0x0 0x0 0xffffb9000000ce00 0041 00000000 0x0 0x0 0xffffb9000000ce80 0041 00000000 0x0 0x0 0xffffb9000000cf00 0041 00000000 0x0 0x0 0xffffb9000000cf80 0041 00000000 0x0 0x0 0xffffb9000000d000 0045 00000000 0x0 0x0 0xffffb9000000d080 0045 00000000 0x0 0x0 0xffffb9000000d100 0041 00000000 0x0 0x0 0xffffb9000000d180 0041 00000000 0x0 0x0 0xffffb9000000d200 0041 00000000 0x0 0x0 0xffffb9000000d280 0041 00000000 0x0 0x0 0xffffb9000000d300 0045 00000000 0x0 0x0 0xffffb9000000d380 0041 00000000 0x0 0x0 0xffffb9000000d400 0041 00000000 0x0 0x0 0xffffb9000000d480 0045 00000000 0x0 0x0 0xffffb9000000d500 0041 00000000 0x0 0x0 0xffffb9000000d580 0041 00000000 0x0 0x0 0xffffb9000000d600 0041 00000000 0x0 0x0 0xffffb9000000d680 0045 00000000 0x0 0x0 0xffffb9000000d700 0041 00000000 0x0 0x0 0xffffb9000000d780 0045 00000000 0x0 0x0 0xffffb9000000d800 0041 00000000 0x0 0x0 0xffffb9000000d880 0041 00000000 0x0 0x0 0xffffb9000000d900 0041 00000000 0x0 0x0 0xffffb9000000d980 0041 00000000 0x0 0x0 0xffffb9000000da00 0041 00000000 0x0 0x0 0xffffb9000000da80 0041 00000000 0x0 0x0 0xffffb9000000db00 0045 00000000 0x0 0x0 0xffffb9000000db80 0041 00000000 0x0 0x0 0xffffb9000000dc00 0041 00000000 0x0 0x0 0xffffb9000000dc80 0041 00000000 0x0 0x0 0xffffb9000000dd00 0041 00000000 0x0 0x0 0xffffb9000000dd80 0041 00000000 0x0 0x0 0xffffb9000000de00 0041 00000000 0x0 0x0 0xffffb9000000de80 0041 00000000 0x0 0x0 0xffffb9000000df00 0045 00000000 0x0 0x0 0xffffb9000000df80 0045 00000000 0x0 0x0 0xffffb9000000e000 0045 00000000 0x0 0x0 0xffffb9000000e080 0041 00000000 0x0 0x0 0xffffb9000000e100 0045 00000000 0x0 0x0 0xffffb9000000e180 0045 00000000 0x0 0x0 0xffffb9000000e200 0045 00000000 0x0 0x0 0xffffb9000000e280 0045 00000000 0x0 0x0 0xffffb9000000e300 0045 00000000 0x0 0x0 0xffffb9000000e380 0045 00000000 0x0 0x0 0xffffb9000000e400 0041 00000000 0x0 0x0 0xffffb9000000e480 0045 00000000 0x0 0x0 0xffffb9000000e500 0041 00000000 0x0 0x0 0xffffb9000000e580 0041 00000000 0x0 0x0 0xffffb9000000e600 0041 00000000 0x0 0x0 0xffffb9000000e680 0041 00000000 0x0 0x0 0xffffb9000000e700 0041 00000000 0x0 0x0 0xffffb9000000e780 0045 00000000 0x0 0x0 0xffffb9000000e800 0045 00000000 0x0 0x0 0xffffb9000000e880 0041 00000000 0x0 0x0 0xffffb9000000e900 0041 00000000 0x0 0x0 0xffffb9000000e980 0041 00000000 0x0 0x0 0xffffb9000000ea00 0041 00000000 0x0 0x0 0xffffb9000000ea80 0045 00000000 0x0 0x0 0xffffb9000000eb00 0041 00000000 0x0 0x0 0xffffb9000000eb80 0041 00000000 0x0 0x0 0xffffb9000000ec00 0045 00000000 0x0 0x0 0xffffb9000000ec80 0045 00000000 0x0 0x0 0xffffb9000000ed00 0045 00000000 0x0 0x0 0xffffb9000000ed80 0041 00000000 0x0 0x0 0xffffb9000000ee00 0041 00000000 0x0 0x0 0xffffb9000000ee80 0041 00000000 0x0 0x0 0xffffb9000000ef00 0041 00000000 0x0 0x0 0xffffb9000000ef80 0041 00000000 0x0 0x0 0xffffb9000000f000 0045 00000000 0x0 0x0 0xffffb9000000f080 0041 00000000 0x0 0x0 0xffffb9000000f100 0041 00000000 0x0 0x0 0xffffb9000000f180 0041 00000000 0x0 0x0 0xffffb9000000f200 0041 00000000 0x0 0x0 0xffffb9000000f280 0045 00000000 0x0 0x0 0xffffb9000000f300 0041 00000000 0x0 0x0 0xffffb9000000f380 0045 00000000 0x0 0x0 0xffffb9000000f400 0041 00000000 0x0 0x0 0xffffb9000000f480 0041 00000000 0x0 0x0 0xffffb9000000f500 0041 00000000 0x0 0x0 0xffffb9000000f580 0041 00000000 0x0 0x0 0xffffb9000000f600 0041 00000000 0x0 0x0 0xffffb9000000f680 0041 00000000 0x0 0x0 0xffffb9000000f700 0041 00000000 0x0 0x0 0xffffb9000000f780 0041 00000000 0x0 0x0 0xffffb9000000f800 0041 00000000 0x0 0x0 0xffffb9000000f880 0045 00000000 0x0 0x0 0xffffb9000000f900 0041 00000000 0x0 0x0 0xffffb9000000f980 0045 00000000 0x0 0x0 0xffffb9000000fa00 0045 00000000 0x0 0x0 0xffffb9000000fa80 0041 00000000 0x0 0x0 0xffffb9000000fb00 0041 00000000 0x0 0x0 0xffffb9000000fb80 0041 00000000 0x0 0x0 0xffffb9000000fc00 0045 00000000 0x0 0x0 0xffffb9000000fc80 0041 00000000 0x0 0x0 0xffffb9000000fd00 0045 00000000 0x0 0x0 0xffffb9000000fd80 0041 00000000 0x0 0x0 0xffffb9000000fe00 0041 00000000 0x0 0x0 0xffffb9000000fe80 0041 00000000 0x0 0x0 0xffffb9000000ff00 0041 00000000 0x0 0x0 0xffffb9000000ff80 0041 00000000 0x0 0x0 0xffffb90000010000 0041 00000000 0x0 0x0 0xffffb90000010080 0041 00000000 0x0 0x0 0xffffb90000010100 0041 00000000 0x0 0x0 0xffffb90000010180 0041 00000000 0x0 0x0 0xffffb90000010200 0041 00000000 0x0 0x0 0xffffb90000010280 0041 00000000 0x0 0x0 0xffffb90000010300 0041 00000000 0x0 0x0 0xffffb90000010380 0041 00000000 0x0 0x0 0xffffb90000010400 0045 00000000 0x0 0x0 0xffffb90000010480 0045 00000000 0x0 0x0 0xffffb90000010500 0045 00000000 0x0 0x0 0xffffb90000010580 0045 00000000 0x0 0x0 0xffffb90000010600 0045 00000000 0x0 0x0 0xffffb90000010680 0041 00000000 0x0 0x0 0xffffb90000010700 0045 00000000 0x0 0x0 0xffffb90000010780 0041 00000000 0x0 0x0 0xffffb90000010800 0041 00000000 0x0 0x0 0xffffb90000010880 0041 00000000 0x0 0x0 0xffffb90000010900 0041 00000000 0x0 0x0 0xffffb90000010980 0041 00000000 0x0 0x0 0xffffb90000010a00 0041 00000000 0x0 0x0 0xffffb90000010a80 0045 00000000 0x0 0x0 0xffffb90000010b00 0041 00000000 0x0 0x0 0xffffb90000010b80 0041 00000000 0x0 0x0 0xffffb90000010c00 0041 00000000 0x0 0x0 0xffffb90000010c80 0045 00000000 0x0 0x0 0xffffb90000010d00 0041 00000000 0x0 0x0 0xffffb90000010d80 0041 00000000 0x0 0x0 0xffffb90000010e00 0045 00000000 0x0 0x0 0xffffb90000010e80 0041 00000000 0x0 0x0 0xffffb90000010f00 0041 00000000 0x0 0x0 0xffffb90000010f80 0041 00000000 0x0 0x0 0xffffb90000011000 0041 00000000 0x0 0x0 0xffffb90000011080 0041 00000000 0x0 0x0 0xffffb90000011100 0041 00000000 0x0 0x0 0xffffb90000011180 0041 00000000 0x0 0x0 0xffffb90000011200 0041 00000000 0x0 0x0 0xffffb90000011280 0041 00000000 0x0 0x0 0xffffb90000011300 0041 00000000 0x0 0x0 0xffffb90000011380 0041 00000000 0x0 0x0 0xffffb90000011400 0041 00000000 0x0 0x0 0xffffb90000011480 0041 00000000 0x0 0x0 0xffffb90000011500 0041 00000000 0x0 0x0 0xffffb90000011580 0041 00000000 0x0 0x0 0xffffb90000011600 0041 00000000 0x0 0x0 0xffffb90000011680 0041 00000000 0x0 0x0 0xffffb90000011700 0041 00000000 0x0 0x0 0xffffb90000011780 0041 00000000 0x0 0x0 0xffffb90000011800 0041 00000000 0x0 0x0 0xffffb90000011880 0041 00000000 0x0 0x0 0xffffb90000011900 0041 00000000 0x0 0x0 0xffffb90000011980 0045 00000000 0x0 0x0 0xffffb90000011a00 0041 00000000 0x0 0x0 0xffffb90000011a80 0045 00000000 0x0 0x0 0xffffb90000011b00 0045 00000000 0x0 0x0 0xffffb90000011b80 0041 00000000 0x0 0x0 0xffffb90000011c00 0041 00000000 0x0 0x0 0xffffb90000011c80 0041 00000000 0x0 0x0 0xffffb90000011d00 0045 00000000 0x0 0x0 0xffffb90000011d80 0041 00000000 0x0 0x0 0xffffb90000011e00 0045 00000000 0x0 0x0 0xffffb90000011e80 0041 00000000 0x0 0x0 0xffffb90000011f00 0041 00000000 0x0 0x0 0xffffb90000011f80 0045 00000000 0x0 0x0 0xffffb90000012000 0041 00000000 0x0 0x0 0xffffb90000012080 0041 00000000 0x0 0x0 0xffffb90000012100 0041 00000000 0x0 0x0 0xffffb90000012180 0041 00000000 0x0 0x0 0xffffb90000012200 0041 00000000 0x0 0x0 0xffffb90000012280 0041 00000000 0x0 0x0 0xffffb90000012300 0041 00000000 0x0 0x0 0xffffb90000012380 0041 00000000 0x0 0x0 0xffffb90000012400 0041 00000000 0x0 0x0 0xffffb90000012480 0041 00000000 0x0 0x0 0xffffb90000012500 0041 00000000 0x0 0x0 0xffffb90000012580 0041 00000000 0x0 0x0 0xffffb90000012600 0041 00000000 0x0 0x0 0xffffb90000012680 0041 00000000 0x0 0x0 0xffffb90000012700 0041 00000000 0x0 0x0 0xffffb90000012780 0041 00000000 0x0 0x0 0xffffb90000012800 0041 00000000 0x0 0x0 0xffffb90000012880 0041 00000000 0x0 0x0 0xffffb90000012900 0041 00000000 0x0 0x0 0xffffb90000012980 0041 00000000 0x0 0x0 0xffffb90000012a00 0041 00000000 0x0 0x0 0xffffb90000012a80 0041 00000000 0x0 0x0 0xffffb90000012b00 0041 00000000 0x0 0x0 0xffffb90000012b80 0041 00000000 0x0 0x0 0xffffb90000012c00 0041 00000000 0x0 0x0 0xffffb90000012c80 0045 00000000 0x0 0x0 0xffffb90000012d00 0001 00000000 0x0 0x0 0xffffb90000012d80 0001 00000000 0x0 0x0 0xffffb90000012e00 0001 00000000 0x0 0x0 0xffffb90000012e80 0001 00000000 0x0 0x0 0xffffb90000012f00 0001 00000000 0x0 0x0 0xffffb90000012f80 0001 00000000 0x0 0x0 0xffffb90000013000 0001 00000000 0x0 0x0 0xffffb90000013080 0001 00000000 0x0 0x0 0xffffb90000013100 0001 00000000 0x0 0x0 0xffffb90000013180 0001 00000000 0x0 0x0 0xffffb90000013200 0001 00000000 0x0 0x0 0xffffb90000013280 0001 00000000 0x0 0x0 0xffffb90000013300 0001 00000000 0x0 0x0 0xffffb90000013380 0001 00000000 0x0 0x0 0xffffb90000013400 0001 00000000 0x0 0x0 0xffffb90000013480 0001 00000000 0x0 0x0 0xffffb90000013500 0001 00000000 0x0 0x0 0xffffb90000013580 0001 00000000 0x0 0x0 0xffffb90000013600 0001 00000000 0x0 0x0 0xffffb90000013680 0001 00000000 0x0 0x0 0xffffb90000013700 0001 00000000 0x0 0x0 0xffffb90000013780 0001 00000000 0x0 0x0 0xffffb90000013800 0001 00000000 0x0 0x0 0xffffb90000013880 0001 00000000 0x0 0x0 0xffffb90000013900 0001 00000000 0x0 0x0 0xffffb90000013980 0001 00000000 0x0 0x0 0xffffb90000013a00 0001 00000000 0x0 0x0 0xffffb90000013a80 0001 00000000 0x0 0x0 0xffffb90000013b00 0001 00000000 0x0 0x0 0xffffb90000013b80 0001 00000000 0x0 0x0 0xffffb90000013c00 0001 00000000 0x0 0x0 0xffffb90000013c80 0001 00000000 0x0 0x0 0xffffb90000013d00 0001 00000000 0x0 0x0 0xffffb90000013d80 0001 00000000 0x0 0x0 0xffffb90000013e00 0001 00000000 0x0 0x0 0xffffb90000013e80 0001 00000000 0x0 0x0 0xffffb90000013f00 0001 00000000 0x0 0x0 0xffffb90000013f80 0001 00000000 0x0 0x0 0xffffb90000014000 0001 00000000 0x0 0x0 0xffffb90000014080 0001 00000000 0x0 0x0 0xffffb90000014100 0001 00000000 0x0 0x0 0xffffb90000014180 0001 00000000 0x0 0x0 0xffffb90000014200 0001 00000000 0x0 0x0 0xffffb90000014280 0001 00000000 0x0 0x0 0xffffb90000014300 0001 00000000 0x0 0x0 0xffffb90000014380 0001 00000000 0x0 0x0 0xffffb90000014400 0001 00000000 0x0 0x0 0xffffb90000014480 0001 00000000 0x0 0x0 0xffffb90000014500 0001 00000000 0x0 0x0 0xffffb90000014580 0001 00000000 0x0 0x0 0xffffb90000014600 0001 00000000 0x0 0x0 0xffffb90000014680 0001 00000000 0x0 0x0 0xffffb90000014700 0001 00000000 0x0 0x0 0xffffb90000014780 0001 00000000 0x0 0x0 0xffffb90000014800 0041 00000000 0x0 0x0 0xffffb90000014880 0041 00000000 0x0 0x0 0xffffb90000014900 0041 00000000 0x0 0x0 0xffffb90000014980 0041 00000000 0x0 0x0 0xffffb90000014a00 0041 00000000 0x0 0x0 0xffffb90000014a80 0041 00000000 0x0 0x0 0xffffb90000014b00 0041 00000000 0x0 0x0 0xffffb90000014b80 0041 00000000 0x0 0x0 0xffffb90000014c00 0041 00000000 0x0 0x0 0xffffb90000014c80 0041 00000000 0x0 0x0 0xffffb90000014d00 0041 00000000 0x0 0x0 0xffffb90000014d80 0041 00000000 0x0 0x0 0xffffb90000014e00 0041 00000000 0x0 0x0 0xffffb90000014e80 0041 00000000 0x0 0x0 0xffffb90000014f00 0041 00000000 0x0 0x0 0xffffb90000014f80 0041 00000000 0x0 0x0 0xffffb90000015000 0041 00000000 0x0 0x0 0xffffb90000015080 0041 00000000 0x0 0x0 0xffffb90000015100 0041 00000000 0x0 0x0 0xffffb90000015180 0041 00000000 0x0 0x0 0xffffb90000015200 0041 00000000 0x0 0x0 0xffffb90000015280 0041 00000000 0x0 0x0 0xffffb90000015300 0041 00000000 0x0 0x0 0xffffb90000015380 0041 00000000 0x0 0x0 0xffffb90000015400 0041 00000000 0x0 0x0 0xffffb90000015480 0041 00000000 0x0 0x0 0xffffb90000015500 0041 00000000 0x0 0x0 0xffffb90000015580 0041 00000000 0x0 0x0 0xffffb90000015600 0041 00000000 0x0 0x0 0xffffb90000015680 0041 00000000 0x0 0x0 0xffffb90000015700 0041 00000000 0x0 0x0 0xffffb90000015780 0041 00000000 0x0 0x0 0xffffb90000015800 0041 00000000 0x0 0x0 0xffffb90000015880 0041 00000000 0x0 0x0 0xffffb90000015900 0041 00000000 0x0 0x0 0xffffb90000015980 0041 00000000 0x0 0x0 0xffffb90000015a00 0041 00000000 0x0 0x0 0xffffb90000015a80 0041 00000000 0x0 0x0 0xffffb90000015b00 0041 00000000 0x0 0x0 0xffffb90000015b80 0041 00000000 0x0 0x0 0xffffb90000015c00 0041 00000000 0x0 0x0 0xffffb90000015c80 0041 00000000 0x0 0x0 0xffffb90000015d00 0001 00000000 0x0 0x0 0xffffb90000015d80 0001 00000000 0x0 0x0 0xffffb90000015e00 0001 00000000 0x0 0x0 0xffffb90000015e80 0001 00000000 0x0 0x0 0xffffb90000015f00 0001 00000000 0x0 0x0 0xffffb90000015f80 0001 00000000 0x0 0x0 0xffffb90000016000 0001 00000000 0x0 0x0 0xffffb90000016080 0001 00000000 0x0 0x0 0xffffb90000016100 0001 00000000 0x0 0x0 0xffffb90000016180 0001 00000000 0x0 0x0 0xffffb90000016200 0001 00000000 0x0 0x0 0xffffb90000016280 0001 00000000 0x0 0x0 0xffffb90000016300 0001 00000000 0x0 0x0 0xffffb90000016380 0001 00000000 0x0 0x0 0xffffb90000016400 0001 00000000 0x0 0x0 0xffffb90000016480 0001 00000000 0x0 0x0 0xffffb90000016500 0001 00000000 0x0 0x0 0xffffb90000016580 0001 00000000 0x0 0x0 0xffffb90000016600 0001 00000000 0x0 0x0 0xffffb90000016680 0001 00000000 0x0 0x0 0xffffb90000016700 0001 00000000 0x0 0x0 0xffffb90000016780 0001 00000000 0x0 0x0 0xffffb90000016800 0001 00000000 0x0 0x0 0xffffb90000016880 0001 00000000 0x0 0x0 0xffffb90000016900 0001 00000000 0x0 0x0 0xffffb90000016980 0001 00000000 0x0 0x0 0xffffb90000016a00 0001 00000000 0x0 0x0 0xffffb90000016a80 0001 00000000 0x0 0x0 0xffffb90000016b00 0001 00000000 0x0 0x0 0xffffb90000016b80 0001 00000000 0x0 0x0 0xffffb90000016c00 0001 00000000 0x0 0x0 0xffffb90000016c80 0001 00000000 0x0 0x0 0xffffb90000016d00 0001 00000000 0x0 0x0 0xffffb90000016d80 0001 00000000 0x0 0x0 0xffffb90000016e00 0001 00000000 0x0 0x0 0xffffb90000016e80 0001 00000000 0x0 0x0 0xffffb90000016f00 0001 00000000 0x0 0x0 0xffffb90000016f80 0001 00000000 0x0 0x0 0xffffb90000017000 0001 00000000 0x0 0x0 0xffffb90000017080 0001 00000000 0x0 0x0 0xffffb90000017100 0001 00000000 0x0 0x0 0xffffb90000017180 0001 00000000 0x0 0x0 0xffffb90000017200 0001 00000000 0x0 0x0 0xffffb90000017280 0001 00000000 0x0 0x0 0xffffb90000017300 0001 00000000 0x0 0x0 0xffffb90000017380 0001 00000000 0x0 0x0 0xffffb90000017400 0001 00000000 0x0 0x0 0xffffb90000017480 0001 00000000 0x0 0x0 0xffffb90000017500 0001 00000000 0x0 0x0 0xffffb90000017580 0001 00000000 0x0 0x0 0xffffb90000017600 0001 00000000 0x0 0x0 0xffffb90000017680 0001 00000000 0x0 0x0 0xffffb90000017700 0001 00000000 0x0 0x0 0xffffb90000017780 0001 00000000 0x0 0x0 0xffffb90000017800 0041 00000000 0x0 0x0 0xffffb90000017880 0041 00000000 0x0 0x0 0xffffb90000017900 0041 00000000 0x0 0x0 0xffffb90000017980 0041 00000000 0x0 0x0 0xffffb90000017a00 0041 00000000 0x0 0x0 0xffffb90000017a80 0041 00000000 0x0 0x0 0xffffb90000017b00 0041 00000000 0x0 0x0 0xffffb90000017b80 0041 00000000 0x0 0x0 0xffffb90000017c00 0041 00000000 0x0 0x0 0xffffb90000017c80 0041 00000000 0x0 0x0 0xffffb90000017d00 0041 00000000 0x0 0x0 0xffffb90000017d80 0041 00000000 0x0 0x0 0xffffb90000017e00 0041 00000000 0x0 0x0 0xffffb90000017e80 0041 00000000 0x0 0x0 0xffffb90000017f00 0041 00000000 0x0 0x0 0xffffb90000017f80 0041 00000000 0x0 0x0 0xffffb90000018000 0041 00000000 0x0 0x0 0xffffb90000018080 0041 00000000 0x0 0x0 0xffffb90000018100 0041 00000000 0x0 0x0 0xffffb90000018180 0041 00000000 0x0 0x0 0xffffb90000018200 0041 00000000 0x0 0x0 0xffffb90000018280 0041 00000000 0x0 0x0 0xffffb90000018300 0041 00000000 0x0 0x0 0xffffb90000018380 0041 00000000 0x0 0x0 0xffffb90000018400 0041 00000000 0x0 0x0 0xffffb90000018480 0041 00000000 0x0 0x0 0xffffb90000018500 0041 00000000 0x0 0x0 0xffffb90000018580 0041 00000000 0x0 0x0 0xffffb90000018600 0041 00000000 0x0 0x0 0xffffb90000018680 0041 00000000 0x0 0x0 0xffffb90000018700 0041 00000000 0x0 0x0 0xffffb90000018780 0041 00000000 0x0 0x0 0xffffb90000018800 0041 00000000 0x0 0x0 0xffffb90000018880 0041 00000000 0x0 0x0 0xffffb90000018900 0041 00000000 0x0 0x0 0xffffb90000018980 0041 00000000 0x0 0x0 0xffffb90000018a00 0041 00000000 0x0 0x0 0xffffb90000018a80 0041 00000000 0x0 0x0 0xffffb90000018b00 0041 00000000 0x0 0x0 0xffffb90000018b80 0041 00000000 0x0 0x0 0xffffb90000018c00 0041 00000000 0x0 0x0 0xffffb90000018c80 0041 00000000 0x0 0x0 0xffffb90000018d00 0001 00000000 0x0 0x0 0xffffb90000018d80 0001 00000000 0x0 0x0 0xffffb90000018e00 0001 00000000 0x0 0x0 0xffffb90000018e80 0001 00000000 0x0 0x0 0xffffb90000018f00 0001 00000000 0x0 0x0 0xffffb90000018f80 0001 00000000 0x0 0x0 0xffffb90000019000 0001 00000000 0x0 0x0 0xffffb90000019080 0001 00000000 0x0 0x0 0xffffb90000019100 0001 00000000 0x0 0x0 0xffffb90000019180 0001 00000000 0x0 0x0 0xffffb90000019200 0001 00000000 0x0 0x0 0xffffb90000019280 0001 00000000 0x0 0x0 0xffffb90000019300 0001 00000000 0x0 0x0 0xffffb90000019380 0001 00000000 0x0 0x0 0xffffb90000019400 0001 00000000 0x0 0x0 0xffffb90000019480 0001 00000000 0x0 0x0 0xffffb90000019500 0001 00000000 0x0 0x0 0xffffb90000019580 0001 00000000 0x0 0x0 0xffffb90000019600 0001 00000000 0x0 0x0 0xffffb90000019680 0001 00000000 0x0 0x0 0xffffb90000019700 0001 00000000 0x0 0x0 0xffffb90000019780 0001 00000000 0x0 0x0 0xffffb90000019800 0001 00000000 0x0 0x0 0xffffb90000019880 0001 00000000 0x0 0x0 0xffffb90000019900 0001 00000000 0x0 0x0 0xffffb90000019980 0001 00000000 0x0 0x0 0xffffb90000019a00 0001 00000000 0x0 0x0 0xffffb90000019a80 0001 00000000 0x0 0x0 0xffffb90000019b00 0001 00000000 0x0 0x0 0xffffb90000019b80 0001 00000000 0x0 0x0 0xffffb90000019c00 0001 00000000 0x0 0x0 0xffffb90000019c80 0001 00000000 0x0 0x0 0xffffb90000019d00 0001 00000000 0x0 0x0 0xffffb90000019d80 0001 00000000 0x0 0x0 0xffffb90000019e00 0001 00000000 0x0 0x0 0xffffb90000019e80 0001 00000000 0x0 0x0 0xffffb90000019f00 0001 00000000 0x0 0x0 0xffffb90000019f80 0001 00000000 0x0 0x0 0xffffb9000001a000 0001 00000000 0x0 0x0 0xffffb9000001a080 0001 00000000 0x0 0x0 0xffffb9000001a100 0001 00000000 0x0 0x0 0xffffb9000001a180 0001 00000000 0x0 0x0 0xffffb9000001a200 0001 00000000 0x0 0x0 0xffffb9000001a280 0001 00000000 0x0 0x0 0xffffb9000001a300 0001 00000000 0x0 0x0 0xffffb9000001a380 0001 00000000 0x0 0x0 0xffffb9000001a400 0001 00000000 0x0 0x0 0xffffb9000001a480 0001 00000000 0x0 0x0 0xffffb9000001a500 0001 00000000 0x0 0x0 0xffffb9000001a580 0001 00000000 0x0 0x0 0xffffb9000001a600 0001 00000000 0x0 0x0 0xffffb9000001a680 0001 00000000 0x0 0x0 0xffffb9000001a700 0001 00000000 0x0 0x0 0xffffb9000001a780 0001 00000000 0x0 0x0 0xffffb9000001a800 0041 00000000 0x0 0x0 0xffffb9000001a880 0041 00000000 0x0 0x0 0xffffb9000001a900 0041 00000000 0x0 0x0 0xffffb9000001a980 0041 00000000 0x0 0x0 0xffffb9000001aa00 0041 00000000 0x0 0x0 0xffffb9000001aa80 0041 00000000 0x0 0x0 0xffffb9000001ab00 0041 00000000 0x0 0x0 0xffffb9000001ab80 0041 00000000 0x0 0x0 0xffffb9000001ac00 0041 00000000 0x0 0x0 0xffffb9000001ac80 0041 00000000 0x0 0x0 0xffffb9000001ad00 0041 00000000 0x0 0x0 0xffffb9000001ad80 0041 00000000 0x0 0x0 0xffffb9000001ae00 0041 00000000 0x0 0x0 0xffffb9000001ae80 0041 00000000 0x0 0x0 0xffffb9000001af00 0041 00000000 0x0 0x0 0xffffb9000001af80 0041 00000000 0x0 0x0 0xffffb9000001b000 0041 00000000 0x0 0x0 0xffffb9000001b080 0041 00000000 0x0 0x0 0xffffb9000001b100 0041 00000000 0x0 0x0 0xffffb9000001b180 0041 00000000 0x0 0x0 0xffffb9000001b200 0041 00000000 0x0 0x0 0xffffb9000001b280 0041 00000000 0x0 0x0 0xffffb9000001b300 0041 00000000 0x0 0x0 0xffffb9000001b380 0041 00000000 0x0 0x0 0xffffb9000001b400 0041 00000000 0x0 0x0 0xffffb9000001b480 0041 00000000 0x0 0x0 0xffffb9000001b500 0041 00000000 0x0 0x0 0xffffb9000001b580 0041 00000000 0x0 0x0 0xffffb9000001b600 0041 00000000 0x0 0x0 0xffffb9000001b680 0041 00000000 0x0 0x0 0xffffb9000001b700 0041 00000000 0x0 0x0 0xffffb9000001b780 0041 00000000 0x0 0x0 0xffffb9000001b800 0041 00000000 0x0 0x0 0xffffb9000001b880 0041 00000000 0x0 0x0 0xffffb9000001b900 0041 00000000 0x0 0x0 0xffffb9000001b980 0045 00000000 0x0 0x0 0xffffb9000001ba00 0041 00000000 0x0 0x0 0xffffb9000001ba80 0045 00000000 0x0 0x0 0xffffb9000001bb00 0045 00000000 0x0 0x0 0xffffb9000001bb80 0041 00000000 0x0 0x0 0xffffb9000001bc00 0045 00000000 0x0 0x0 0xffffb9000001bc80 0041 00000000 0x0 0x0 0xffffb9000001bd00 0001 00000000 0x0 0x0 0xffffb9000001bd80 0001 00000000 0x0 0x0 0xffffb9000001be00 0001 00000000 0x0 0x0 0xffffb9000001be80 0001 00000000 0x0 0x0 0xffffb9000001bf00 0001 00000000 0x0 0x0 0xffffb9000001bf80 0001 00000000 0x0 0x0 0xffffb9000001c000 0001 00000000 0x0 0x0 0xffffb9000001c080 0001 00000000 0x0 0x0 0xffffb9000001c100 0001 00000000 0x0 0x0 0xffffb9000001c180 0001 00000000 0x0 0x0 0xffffb9000001c200 0001 00000000 0x0 0x0 0xffffb9000001c280 0001 00000000 0x0 0x0 0xffffb9000001c300 0001 00000000 0x0 0x0 0xffffb9000001c380 0001 00000000 0x0 0x0 0xffffb9000001c400 0001 00000000 0x0 0x0 0xffffb9000001c480 0001 00000000 0x0 0x0 0xffffb9000001c500 0001 00000000 0x0 0x0 0xffffb9000001c580 0001 00000000 0x0 0x0 0xffffb9000001c600 0001 00000000 0x0 0x0 0xffffb9000001c680 0001 00000000 0x0 0x0 0xffffb9000001c700 0001 00000000 0x0 0x0 0xffffb9000001c780 0001 00000000 0x0 0x0 0xffffb9000001c800 0001 00000000 0x0 0x0 0xffffb9000001c880 0001 00000000 0x0 0x0 0xffffb9000001c900 0001 00000000 0x0 0x0 0xffffb9000001c980 0001 00000000 0x0 0x0 0xffffb9000001ca00 0001 00000000 0x0 0x0 0xffffb9000001ca80 0001 00000000 0x0 0x0 0xffffb9000001cb00 0001 00000000 0x0 0x0 0xffffb9000001cb80 0001 00000000 0x0 0x0 0xffffb9000001cc00 0001 00000000 0x0 0x0 0xffffb9000001cc80 0001 00000000 0x0 0x0 0xffffb9000001cd00 0001 00000000 0x0 0x0 0xffffb9000001cd80 0001 00000000 0x0 0x0 0xffffb9000001ce00 0001 00000000 0x0 0x0 0xffffb9000001ce80 0001 00000000 0x0 0x0 0xffffb9000001cf00 0001 00000000 0x0 0x0 0xffffb9000001cf80 0001 00000000 0x0 0x0 0xffffb9000001d000 0001 00000000 0x0 0x0 0xffffb9000001d080 0001 00000000 0x0 0x0 0xffffb9000001d100 0001 00000000 0x0 0x0 0xffffb9000001d180 0001 00000000 0x0 0x0 0xffffb9000001d200 0001 00000000 0x0 0x0 0xffffb9000001d280 0001 00000000 0x0 0x0 0xffffb9000001d300 0001 00000000 0x0 0x0 0xffffb9000001d380 0001 00000000 0x0 0x0 0xffffb9000001d400 0001 00000000 0x0 0x0 0xffffb9000001d480 0001 00000000 0x0 0x0 0xffffb9000001d500 0001 00000000 0x0 0x0 0xffffb9000001d580 0001 00000000 0x0 0x0 0xffffb9000001d600 0001 00000000 0x0 0x0 0xffffb9000001d680 0001 00000000 0x0 0x0 0xffffb9000001d700 0001 00000000 0x0 0x0 0xffffb9000001d780 0001 00000000 0x0 0x0 0xffffb9000001d800 0001 00000000 0x0 0x0 0xffffb9000001d880 0001 00000000 0x0 0x0 0xffffb9000001d900 0001 00000000 0x0 0x0 0xffffb9000001d980 0001 00000000 0x0 0x0 0xffffb9000001da00 0001 00000000 0x0 0x0 0xffffb9000001da80 0001 00000000 0x0 0x0 0xffffb9000001db00 0001 00000000 0x0 0x0 0xffffb9000001db80 0001 00000000 0x0 0x0 0xffffb9000001dc00 0001 00000000 0x0 0x0 0xffffb9000001dc80 0001 00000000 0x0 0x0 0xffffb9000001dd00 0001 00000000 0x0 0x0 0xffffb9000001dd80 0001 00000000 0x0 0x0 0xffffb9000001de00 0001 00000000 0x0 0x0 0xffffb9000001de80 0001 00000000 0x0 0x0 0xffffb9000001df00 0001 00000000 0x0 0x0 0xffffb9000001df80 0001 00000000 0x0 0x0 0xffffb9000001e000 0001 00000000 0x0 0x0 0xffffb9000001e080 0001 00000000 0x0 0x0 0xffffb9000001e100 0001 00000000 0x0 0x0 0xffffb9000001e180 0001 00000000 0x0 0x0 0xffffb9000001e200 0001 00000000 0x0 0x0 0xffffb9000001e280 0001 00000000 0x0 0x0 0xffffb9000001e300 0001 00000000 0x0 0x0 0xffffb9000001e380 0001 00000000 0x0 0x0 0xffffb9000001e400 0001 00000000 0x0 0x0 0xffffb9000001e480 0001 00000000 0x0 0x0 0xffffb9000001e500 0001 00000000 0x0 0x0 0xffffb9000001e580 0001 00000000 0x0 0x0 0xffffb9000001e600 0001 00000000 0x0 0x0 0xffffb9000001e680 0001 00000000 0x0 0x0 0xffffb9000001e700 0001 00000000 0x0 0x0 0xffffb9000001e780 0001 00000000 0x0 0x0 0xffffb9000001e800 0001 00000000 0x0 0x0 0xffffb9000001e880 0001 00000000 0x0 0x0 0xffffb9000001e900 0001 00000000 0x0 0x0 0xffffb9000001e980 0001 00000000 0x0 0x0 0xffffb9000001ea00 0001 00000000 0x0 0x0 0xffffb9000001ea80 0001 00000000 0x0 0x0 0xffffb9000001eb00 0001 00000000 0x0 0x0 0xffffb9000001eb80 0001 00000000 0x0 0x0 0xffffb9000001ec00 0001 00000000 0x0 0x0 0xffffb9000001ec80 0001 00000000 0x0 0x0 0xffffb9000001ed00 0001 00000000 0x0 0x0 0xffffb9000001ed80 0001 00000000 0x0 0x0 0xffffb9000001ee00 0001 00000000 0x0 0x0 0xffffb9000001ee80 0001 00000000 0x0 0x0 0xffffb9000001ef00 0001 00000000 0x0 0x0 0xffffb9000001ef80 0001 00000000 0x0 0x0 0xffffb9000001f000 0001 00000000 0x0 0x0 0xffffb9000001f080 0001 00000000 0x0 0x0 0xffffb9000001f100 0001 00000000 0x0 0x0 0xffffb9000001f180 0001 00000000 0x0 0x0 0xffffb9000001f200 0001 00000000 0x0 0x0 0xffffb9000001f280 0001 00000000 0x0 0x0 0xffffb9000001f300 0001 00000000 0x0 0x0 0xffffb9000001f380 0001 00000000 0x0 0x0 0xffffb9000001f400 0001 00000000 0x0 0x0 0xffffb9000001f480 0001 00000000 0x0 0x0 0xffffb9000001f500 0001 00000000 0x0 0x0 0xffffb9000001f580 0001 00000000 0x0 0x0 0xffffb9000001f600 0001 00000000 0x0 0x0 0xffffb9000001f680 0001 00000000 0x0 0x0 0xffffb9000001f700 0001 00000000 0x0 0x0 0xffffb9000001f780 0001 00000000 0x0 0x0 0xffffb9000001f800 0001 00000000 0x0 0x0 0xffffb9000001f880 0001 00000000 0x0 0x0 0xffffb9000001f900 0001 00000000 0x0 0x0 0xffffb9000001f980 0001 00000000 0x0 0x0 0xffffb9000001fa00 0001 00000000 0x0 0x0 0xffffb9000001fa80 0001 00000000 0x0 0x0 0xffffb9000001fb00 0001 00000000 0x0 0x0 0xffffb9000001fb80 0001 00000000 0x0 0x0 0xffffb9000001fc00 0001 00000000 0x0 0x0 0xffffb9000001fc80 0001 00000000 0x0 0x0 0xffffb9000001fd00 0001 00000000 0x0 0x0 0xffffb9000001fd80 0001 00000000 0x0 0x0 0xffffb9000001fe00 0001 00000000 0x0 0x0 0xffffb9000001fe80 0001 00000000 0x0 0x0 0xffffb9000001ff00 0001 00000000 0x0 0x0 0xffffb9000001ff80 0001 00000000 0x0 0x0 0xffffb90000020000 0001 00000000 0x0 0x0 0xffffb90000020080 0001 00000000 0x0 0x0 0xffffb90000020100 0001 00000000 0x0 0x0 0xffffb90000020180 0001 00000000 0x0 0x0 0xffffb90000020200 0001 00000000 0x0 0x0 0xffffb90000020280 0001 00000000 0x0 0x0 0xffffb90000020300 0001 00000000 0x0 0x0 0xffffb90000020380 0001 00000000 0x0 0x0 0xffffb90000020400 0001 00000000 0x0 0x0 0xffffb90000020480 0001 00000000 0x0 0x0 0xffffb90000020500 0001 00000000 0x0 0x0 0xffffb90000020580 0001 00000000 0x0 0x0 0xffffb90000020600 0001 00000000 0x0 0x0 0xffffb90000020680 0001 00000000 0x0 0x0 0xffffb90000020700 0001 00000000 0x0 0x0 0xffffb90000020780 0001 00000000 0x0 0x0 0xffffb90000020800 0001 00000000 0x0 0x0 0xffffb90000020880 0001 00000000 0x0 0x0 0xffffb90000020900 0001 00000000 0x0 0x0 0xffffb90000020980 0001 00000000 0x0 0x0 0xffffb90000020a00 0001 00000000 0x0 0x0 0xffffb90000020a80 0001 00000000 0x0 0x0 0xffffb90000020b00 0001 00000000 0x0 0x0 0xffffb90000020b80 0001 00000000 0x0 0x0 0xffffb90000020c00 0001 00000000 0x0 0x0 0xffffb90000020c80 0001 00000000 0x0 0x0 0xffffb90000020d00 0001 00000000 0x0 0x0 0xffffb90000020d80 0001 00000000 0x0 0x0 0xffffb90000020e00 0001 00000000 0x0 0x0 0xffffb90000020e80 0001 00000000 0x0 0x0 0xffffb90000020f00 0001 00000000 0x0 0x0 0xffffb90000020f80 0001 00000000 0x0 0x0 0xffffb90000021000 0001 00000000 0x0 0x0 0xffffb90000021080 0001 00000000 0x0 0x0 0xffffb90000021100 0001 00000000 0x0 0x0 0xffffb90000021180 0001 00000000 0x0 0x0 0xffffb90000021200 0001 00000000 0x0 0x0 0xffffb90000021280 0001 00000000 0x0 0x0 0xffffb90000021300 0001 00000000 0x0 0x0 0xffffb90000021380 0001 00000000 0x0 0x0 0xffffb90000021400 0001 00000000 0x0 0x0 0xffffb90000021480 0001 00000000 0x0 0x0 0xffffb90000021500 0001 00000000 0x0 0x0 0xffffb90000021580 0001 00000000 0x0 0x0 0xffffb90000021600 0001 00000000 0x0 0x0 0xffffb90000021680 0001 00000000 0x0 0x0 0xffffb90000021700 0001 00000000 0x0 0x0 0xffffb90000021780 0001 00000000 0x0 0x0 0xffffb90000021800 0001 00000000 0x0 0x0 0xffffb90000021880 0001 00000000 0x0 0x0 0xffffb90000021900 0001 00000000 0x0 0x0 0xffffb90000021980 0001 00000000 0x0 0x0 0xffffb90000021a00 0001 00000000 0x0 0x0 0xffffb90000021a80 0001 00000000 0x0 0x0 0xffffb90000021b00 0001 00000000 0x0 0x0 0xffffb90000021b80 0001 00000000 0x0 0x0 0xffffb90000021c00 0001 00000000 0x0 0x0 0xffffb90000021c80 0001 00000000 0x0 0x0 0xffffb90000021d00 0001 00000000 0x0 0x0 0xffffb90000021d80 0001 00000000 0x0 0x0 0xffffb90000021e00 0001 00000000 0x0 0x0 0xffffb90000021e80 0001 00000000 0x0 0x0 0xffffb90000021f00 0001 00000000 0x0 0x0 0xffffb90000021f80 0001 00000000 0x0 0x0 0xffffb90000022000 0001 00000000 0x0 0x0 0xffffb90000022080 0001 00000000 0x0 0x0 0xffffb90000022100 0001 00000000 0x0 0x0 0xffffb90000022180 0001 00000000 0x0 0x0 0xffffb90000022200 0001 00000000 0x0 0x0 0xffffb90000022280 0001 00000000 0x0 0x0 0xffffb90000022300 0001 00000000 0x0 0x0 0xffffb90000022380 0001 00000000 0x0 0x0 0xffffb90000022400 0001 00000000 0x0 0x0 0xffffb90000022480 0001 00000000 0x0 0x0 0xffffb90000022500 0001 00000000 0x0 0x0 0xffffb90000022580 0001 00000000 0x0 0x0 0xffffb90000022600 0001 00000000 0x0 0x0 0xffffb90000022680 0001 00000000 0x0 0x0 0xffffb90000022700 0001 00000000 0x0 0x0 0xffffb90000022780 0001 00000000 0x0 0x0 0xffffb90000022800 0001 00000000 0x0 0x0 0xffffb90000022880 0001 00000000 0x0 0x0 0xffffb90000022900 0001 00000000 0x0 0x0 0xffffb90000022980 0001 00000000 0x0 0x0 0xffffb90000022a00 0001 00000000 0x0 0x0 0xffffb90000022a80 0001 00000000 0x0 0x0 0xffffb90000022b00 0001 00000000 0x0 0x0 0xffffb90000022b80 0001 00000000 0x0 0x0 0xffffb90000022c00 0001 00000000 0x0 0x0 0xffffb90000022c80 0001 00000000 0x0 0x0 0xffffb90000022d00 0001 00000000 0x0 0x0 0xffffb90000022d80 0001 00000000 0x0 0x0 0xffffb90000022e00 0001 00000000 0x0 0x0 0xffffb90000022e80 0001 00000000 0x0 0x0 0xffffb90000022f00 0001 00000000 0x0 0x0 0xffffb90000022f80 0001 00000000 0x0 0x0 0xffffb90000023000 0001 00000000 0x0 0x0 0xffffb90000023080 0001 00000000 0x0 0x0 0xffffb90000023100 0001 00000000 0x0 0x0 0xffffb90000023180 0001 00000000 0x0 0x0 0xffffb90000023200 0001 00000000 0x0 0x0 0xffffb90000023280 0001 00000000 0x0 0x0 0xffffb90000023300 0001 00000000 0x0 0x0 0xffffb90000023380 0001 00000000 0x0 0x0 0xffffb90000023400 0001 00000000 0x0 0x0 0xffffb90000023480 0001 00000000 0x0 0x0 0xffffb90000023500 0001 00000000 0x0 0x0 0xffffb90000023580 0001 00000000 0x0 0x0 0xffffb90000023600 0001 00000000 0x0 0x0 0xffffb90000023680 0001 00000000 0x0 0x0 0xffffb90000023700 0001 00000000 0x0 0x0 0xffffb90000023780 0001 00000000 0x0 0x0 0xffffb90000023800 0001 00000000 0x0 0x0 0xffffb90000023880 0001 00000000 0x0 0x0 0xffffb90000023900 0001 00000000 0x0 0x0 0xffffb90000023980 0001 00000000 0x0 0x0 0xffffb90000023a00 0001 00000000 0x0 0x0 0xffffb90000023a80 0001 00000000 0x0 0x0 0xffffb90000023b00 0001 00000000 0x0 0x0 0xffffb90000023b80 0001 00000000 0x0 0x0 0xffffb90000023c00 0001 00000000 0x0 0x0 0xffffb90000023c80 0001 00000000 0x0 0x0 0xffffb90000023d00 0001 00000000 0x0 0x0 0xffffb90000023d80 0001 00000000 0x0 0x0 0xffffb90000023e00 0001 00000000 0x0 0x0 0xffffb90000023e80 0001 00000000 0x0 0x0 0xffffb90000023f00 0001 00000000 0x0 0x0 0xffffb90000023f80 0001 00000000 0x0 0x0 0xffffb90000024000 0001 00000000 0x0 0x0 0xffffb90000024080 0001 00000000 0x0 0x0 0xffffb90000024100 0001 00000000 0x0 0x0 0xffffb90000024180 0001 00000000 0x0 0x0 0xffffb90000024200 0001 00000000 0x0 0x0 0xffffb90000024280 0001 00000000 0x0 0x0 0xffffb90000024300 0001 00000000 0x0 0x0 0xffffb90000024380 0001 00000000 0x0 0x0 0xffffb90000024400 0001 00000000 0x0 0x0 0xffffb90000024480 0001 00000000 0x0 0x0 0xffffb90000024500 0001 00000000 0x0 0x0 0xffffb90000024580 0001 00000000 0x0 0x0 0xffffb90000024600 0001 00000000 0x0 0x0 0xffffb90000024680 0001 00000000 0x0 0x0 0xffffb90000024700 0001 00000000 0x0 0x0 0xffffb90000024780 0001 00000000 0x0 0x0 0xffffb90000024800 0001 00000000 0x0 0x0 0xffffb90000024880 0001 00000000 0x0 0x0 0xffffb90000024900 0001 00000000 0x0 0x0 0xffffb90000024980 0001 00000000 0x0 0x0 0xffffb90000024a00 0001 00000000 0x0 0x0 0xffffb90000024a80 0001 00000000 0x0 0x0 0xffffb90000024b00 0001 00000000 0x0 0x0 0xffffb90000024b80 0001 00000000 0x0 0x0 0xffffb90000024c00 0001 00000000 0x0 0x0 0xffffb90000024c80 0001 00000000 0x0 0x0 0xffffb90000024d00 0001 00000000 0x0 0x0 0xffffb90000024d80 0001 00000000 0x0 0x0 0xffffb90000024e00 0001 00000000 0x0 0x0 0xffffb90000024e80 0001 00000000 0x0 0x0 0xffffb90000024f00 0001 00000000 0x0 0x0 0xffffb90000024f80 0001 00000000 0x0 0x0 0xffffb90000025000 0001 00000000 0x0 0x0 0xffffb90000025080 0001 00000000 0x0 0x0 0xffffb90000025100 0001 00000000 0x0 0x0 0xffffb90000025180 0001 00000000 0x0 0x0 0xffffb90000025200 0001 00000000 0x0 0x0 0xffffb90000025280 0001 00000000 0x0 0x0 0xffffb90000025300 0001 00000000 0x0 0x0 0xffffb90000025380 0001 00000000 0x0 0x0 0xffffb90000025400 0001 00000000 0x0 0x0 0xffffb90000025480 0001 00000000 0x0 0x0 0xffffb90000025500 0001 00000000 0x0 0x0 0xffffb90000025580 0001 00000000 0x0 0x0 0xffffb90000025600 0001 00000000 0x0 0x0 0xffffb90000025680 0001 00000000 0x0 0x0 0xffffb90000025700 0001 00000000 0x0 0x0 0xffffb90000025780 0001 00000000 0x0 0x0 0xffffb90000025800 0001 00000000 0x0 0x0 0xffffb90000025880 0001 00000000 0x0 0x0 0xffffb90000025900 0001 00000000 0x0 0x0 0xffffb90000025980 0001 00000000 0x0 0x0 0xffffb90000025a00 0001 00000000 0x0 0x0 0xffffb90000025a80 0001 00000000 0x0 0x0 0xffffb90000025b00 0001 00000000 0x0 0x0 0xffffb90000025b80 0001 00000000 0x0 0x0 0xffffb90000025c00 0001 00000000 0x0 0x0 0xffffb90000025c80 0001 00000000 0x0 0x0 0xffffb90000025d00 0001 00000000 0x0 0x0 0xffffb90000025d80 0001 00000000 0x0 0x0 0xffffb90000025e00 0001 00000000 0x0 0x0 0xffffb90000025e80 0001 00000000 0x0 0x0 0xffffb90000025f00 0001 00000000 0x0 0x0 0xffffb90000025f80 0001 00000000 0x0 0x0 0xffffb90000026000 0001 00000000 0x0 0x0 0xffffb90000026080 0001 00000000 0x0 0x0 0xffffb90000026100 0001 00000000 0x0 0x0 0xffffb90000026180 0001 00000000 0x0 0x0 0xffffb90000026200 0001 00000000 0x0 0x0 0xffffb90000026280 0001 00000000 0x0 0x0 0xffffb90000026300 0001 00000000 0x0 0x0 0xffffb90000026380 0001 00000000 0x0 0x0 0xffffb90000026400 0001 00000000 0x0 0x0 0xffffb90000026480 0001 00000000 0x0 0x0 0xffffb90000026500 0001 00000000 0x0 0x0 0xffffb90000026580 0001 00000000 0x0 0x0 0xffffb90000026600 0001 00000000 0x0 0x0 0xffffb90000026680 0001 00000000 0x0 0x0 0xffffb90000026700 0001 00000000 0x0 0x0 0xffffb90000026780 0001 00000000 0x0 0x0 0xffffb90000026800 0001 00000000 0x0 0x0 0xffffb90000026880 0001 00000000 0x0 0x0 0xffffb90000026900 0001 00000000 0x0 0x0 0xffffb90000026980 0001 00000000 0x0 0x0 0xffffb90000026a00 0001 00000000 0x0 0x0 0xffffb90000026a80 0001 00000000 0x0 0x0 0xffffb90000026b00 0001 00000000 0x0 0x0 0xffffb90000026b80 0001 00000000 0x0 0x0 0xffffb90000026c00 0001 00000000 0x0 0x0 0xffffb90000026c80 0001 00000000 0x0 0x0 0xffffb90000026d00 0001 00000000 0x0 0x0 0xffffb90000026d80 0001 00000000 0x0 0x0 0xffffb90000026e00 0001 00000000 0x0 0x0 0xffffb90000026e80 0001 00000000 0x0 0x0 0xffffb90000026f00 0001 00000000 0x0 0x0 0xffffb90000026f80 0001 00000000 0x0 0x0 0xffffb90000027000 0001 00000000 0x0 0x0 0xffffb90000027080 0001 00000000 0x0 0x0 0xffffb90000027100 0001 00000000 0x0 0x0 0xffffb90000027180 0001 00000000 0x0 0x0 0xffffb90000027200 0001 00000000 0x0 0x0 0xffffb90000027280 0001 00000000 0x0 0x0 0xffffb90000027300 0001 00000000 0x0 0x0 0xffffb90000027380 0001 00000000 0x0 0x0 0xffffb90000027400 0001 00000000 0x0 0x0 0xffffb90000027480 0001 00000000 0x0 0x0 0xffffb90000027500 0045 00000000 0x0 0x0 0xffffb90000027580 0045 00000000 0x0 0x0 0xffffb90000027600 0045 00000000 0x0 0x0 0xffffb90000027680 0045 00000000 0x0 0x0 0xffffb90000027700 0045 00000000 0x0 0x0 0xffffb90000027780 0045 00000000 0x0 0x0 0xffffb90000027800 0045 00000000 0x0 0x0 0xffffb90000027880 0041 00000000 0x0 0x0 0xffffb90000027900 0045 00000000 0x0 0x0 0xffffb90000027980 0045 00000000 0x0 0x0 0xffffb90000027a00 0045 00000000 0x0 0x0 0xffffb90000027a80 0045 00000000 0x0 0x0 0xffffb90000027b00 0045 00000000 0x0 0x0 0xffffb90000027b80 0045 00000000 0x0 0x0 0xffffb90000027c00 0045 00000000 0x0 0x0 0xffffb90000027c80 0045 00000000 0x0 0x0 0xffffb90000027d00 0045 00000000 0x0 0x0 0xffffb90000027d80 0045 00000000 0x0 0x0 0xffffb90000027e00 0045 00000000 0x0 0x0 0xffffb90000027e80 0045 00000000 0x0 0x0 0xffffb90000027f00 0045 00000000 0x0 0x0 0xffffb90000027f80 0045 00000000 0x0 0x0 0xffffb90000028000 0045 00000000 0x0 0x0 0xffffb90000028080 0045 00000000 0x0 0x0 0xffffb90000028100 0045 00000000 0x0 0x0 0xffffb90000028180 0045 00000000 0x0 0x0 0xffffb90000028200 0045 00000000 0x0 0x0 0xffffb90000028280 0045 00000000 0x0 0x0 0xffffb90000028300 0045 00000000 0x0 0x0 0xffffb90000028380 0045 00000000 0x0 0x0 0xffffb90000028400 0045 00000000 0x0 0x0 0xffffb90000028480 0045 00000000 0x0 0x0 0xffffb90000028500 0045 00000000 0x0 0x0 0xffffb90000028580 0045 00000000 0x0 0x0 0xffffb90000028600 0045 00000000 0x0 0x0 0xffffb90000028680 0045 00000000 0x0 0x0 0xffffb90000028700 0045 00000000 0x0 0x0 0xffffb90000028780 0045 00000000 0x0 0x0 0xffffb90000028800 0045 00000000 0x0 0x0 0xffffb90000028880 0045 00000000 0x0 0x0 0xffffb90000028900 0045 00000000 0x0 0x0 0xffffb90000028980 0045 00000000 0x0 0x0 0xffffb90000028a00 0045 00000000 0x0 0x0 0xffffb90000028a80 0045 00000000 0x0 0x0 0xffffb90000028b00 0045 00000000 0x0 0x0 0xffffb90000028b80 0045 00000000 0x0 0x0 0xffffb90000028c00 0045 00000000 0x0 0x0 0xffffb90000028c80 0045 00000000 0x0 0x0 0xffffb90000028d00 0045 00000000 0x0 0x0 0xffffb90000028d80 0045 00000000 0x0 0x0 0xffffb90000028e00 0045 00000000 0x0 0x0 0xffffb90000028e80 0045 00000000 0x0 0x0 0xffffb90000028f00 0045 00000000 0x0 0x0 0xffffb90000028f80 0045 00000000 0x0 0x0 0xffffb90000029000 0045 00000000 0x0 0x0 0xffffb90000029080 0045 00000000 0x0 0x0 0xffffb90000029100 0045 00000000 0x0 0x0 0xffffb90000029180 0045 00000000 0x0 0x0 0xffffb90000029200 0045 00000000 0x0 0x0 0xffffb90000029280 0045 00000000 0x0 0x0 0xffffb90000029300 0045 00000000 0x0 0x0