last executing test programs: 17.37973417s ago: executing program 0: symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00') compat_50___msgctl13$IPC_STAT(0x0, 0x2, &(0x7f0000000500)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100), 0xdffffffffffff7ff}}) lchown(&(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) compat_40_mount(&(0x7f0000000380)='union\x00', &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f00000001c0)) read(0xffffffffffffffff, 0x0, 0x0) fstatat(r0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000580), 0x0) symlink(0x0, 0x0) compat_50___msgctl13$IPC_STAT(0x0, 0x2, 0x0) mknod(0x0, 0x0, 0xe03) symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00') pathconf(&(0x7f0000000000)='./file0\x00', 0x9) compat_40_mount(0x0, 0x0, 0x0, 0x0) 16.425681086s ago: executing program 0: pipe(&(0x7f0000000a40)) flock(0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) __mount50(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000140)='V', 0x1) unlink(0x0) open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x13000)=nil, 0x13000, 0x1, 0x10, 0xffffffffffffffff, 0x0, 0x0) r0 = getpid() fktrace(0xffffffffffffffff, 0x0, 0x0, r0) compat_43_osethostname(&(0x7f0000000100)='2', 0x1) mknod(&(0x7f0000000100)='./file0\x00', 0x80002005, 0x5300) r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIOASYNC(r1, 0xc01c5005, &(0x7f0000000000)=0x4) mknod(&(0x7f0000000040)='./bus\x00', 0x100000000205f, 0x2802) open$dir(&(0x7f0000000040)='./bus\x00', 0x5000000, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x101}}) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x1}) r2 = socket(0x1, 0x1, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) close(r2) r3 = socket(0x18, 0x2, 0x0) setsockopt(r3, 0x1000000000029, 0x2a, &(0x7f0000000040)='\x00\x00\x00\x00', 0x4) connect$unix(r2, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) sendto$inet(r2, &(0x7f0000000700)="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", 0x4d1, 0x24, 0x0, 0x0) 14.975561686s ago: executing program 2: r0 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000005c0)='\x00', r0, &(0x7f0000000c80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') symlinkat(&(0x7f0000000dc0)='./file0\x00', r0, &(0x7f0000000ec0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mkdirat(r0, &(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r1 = syz_usb_connect$hid(0x0, 0x0, 0x0, &(0x7f0000000100)={0x49, &(0x7f0000000080)={0xa, 0x6, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x21, &(0x7f0000000440)=ANY=[@ANYBLOB="050f210003071002028000000a10030006008b0280000b10010ccc000081400009e220c59984eac58ca6e86cdc5e2aa2589b681fb901d8b60cbf1eda4cbeba628b1093eaeb25e3a0977401f07f9e1fff3f820976b27ac7248d8c83c1127480f3fbfa91d708103e53166ec8e8a88675d2191ba1faf8cc76fd8298f337d82672c4ea390a1657881b45c04f4646dfed0ed4d70d3f3fee5c317ad955527898f9e9a0e76228df998c29aaadc1a0174f550431c5d1bede67ff22f8ebf08fd1f99277e870a127b8923ea887f25a6cf3c8121b7b295c4d39db15cf4f6f8fce3aedf6771bde3fb7e02c717c44ca98"], 0x1, [{0x96, &(0x7f0000000400)=ANY=[@ANYRESHEX=r0]}]}) __posix_chown(&(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x201, 0x0) open$dir(&(0x7f0000000b80)='./file0\x00', 0x200, 0x0) r2 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) compat_50_select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x2}) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) compat_40_mount(&(0x7f0000000180)='ptyfs\x00', &(0x7f00000002c0)='./file0\x00', 0x0, &(0x7f0000000500)) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x205, 0x0) fcntl$lock(r3, 0x9, &(0x7f0000000340)={0x0, 0x0, 0x400000}) open(&(0x7f00000000c0)='./file0\x00', 0x12, 0x0) fcntl$lock(r2, 0x7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x100000001}) posix_spawn(0x0, 0x0, &(0x7f0000000180)={0x0, 0xfffffd4a, 0x0}, 0x0, 0x0, 0x0) poll(&(0x7f0000000240)=[{r2}], 0x1, 0x8b75) r4 = socket$inet6(0x18, 0x3, 0x0) _ksem_open(&(0x7f0000000180)='/', 0xff01, 0x0, 0x0, &(0x7f0000000100)) sendto$inet6(r4, &(0x7f00000001c0)="5641db7125c12bd567538bc3458cff86f4bcdab38f5ddf194b3f97881d4d0da855389ae6c23b140ba03a56dbfc649a6f373b62b6b92a42abfcc7161a720b62314528f739500f056855f6ab34b8cd669c7a059a63749152b7", 0x58, 0x2, &(0x7f0000000040)={0x18, 0x3}, 0xc) mknod(0x0, 0xc000, 0x4100) socketpair$unix(0x1, 0x0, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0xffff, 0x0, 0x0, 0x0) socket$inet(0x2, 0x40000000, 0x0) r5 = open$dir(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$FIOASYNC(r5, 0x40046679, &(0x7f0000000140)) lchmod(&(0x7f0000000080)='./file0\x00', 0x8) bind$inet(r1, &(0x7f0000000040)={0x2, 0x1}, 0xc) connect$inet(0xffffffffffffff9c, &(0x7f0000000000)={0x2, 0x0}, 0xc) 14.008769174s ago: executing program 0: madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1) __clock_settime50(0x0, &(0x7f0000000040)) open$dir(0x0, 0x0, 0x0) mkdirat(0xffffffffffffffff, 0x0, 0x0) __mount50(&(0x7f00000002c0)='overlay\x00', &(0x7f0000000040)='.\x00', 0x0, &(0x7f0000000540), 0x0) mknod(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8000, 0x0) socket(0x12, 0x2, 0x0) socket$inet6(0x18, 0x3, 0x0) compat_40_mount(&(0x7f0000000140)='tmpfs\x00', 0x0, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) compat_30___stat13(&(0x7f00000001c0)='./file0/file0\x00', &(0x7f0000000280)) getsid(0x0) compat_50___msgctl13$IPC_STAT(0xffffffffffffffff, 0x2, 0x0) lchown(0x0, 0x0, 0xffffffffffffffff) compat_40_mount(0x0, 0x0, 0x0, 0x0) unlink(0x0) __clone(0x0, 0x0) __clone(0x0, 0x0) minherit(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0) __clone(0x0, 0x0) lchown(&(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = socket$inet(0x2, 0x2, 0x0) getppid() setsockopt$inet_opts(r0, 0x0, 0x200000000000c, &(0x7f0000000240)="ea00004100000010", 0x8) open(&(0x7f0000000040)='./file0\x00', 0x200, 0x0) ptrace(0x0, 0x0, 0x0, 0x0) fchroot(r0) __getfh30(0x0, 0x0, 0x0) __fhstat50(&(0x7f0000000300)="f74dcbc9f38391397be977c9118f071853c3bce0bdc31c9c4a2ef2c707731ac97927eddb675cbad7965c17715aa7838a680d9af7c9f0fbff08ca32062c86661f288c97fe116598288e1f27a57bf8aeaa5d8bcc34df9fe0598478c6b18d1be395dd82e27be1", 0x65, &(0x7f0000000480)) msgget$private(0x0, 0x0) 13.24499051s ago: executing program 1: compat_40_mount(&(0x7f0000000040)='tmpfs\x00', &(0x7f00000000c0)='.\x00', 0x0, &(0x7f00000002c0)="01") open(&(0x7f0000000180)='./file0\x00', 0x80000000000206, 0x0) __mount50(&(0x7f00000002c0)='overlay\x00', &(0x7f0000000040)='.\x00', 0x0, &(0x7f0000000540), 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fcntl$lock(r0, 0xa, 0x0) ____semctl50$GETALL(0x0, 0x0, 0x6, 0xfffffffffffffffe) 10.454840106s ago: executing program 0: madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1) __clock_settime50(0x0, &(0x7f0000000040)) open$dir(0x0, 0x0, 0x0) mkdirat(0xffffffffffffffff, 0x0, 0x0) __mount50(&(0x7f00000002c0)='overlay\x00', &(0x7f0000000040)='.\x00', 0x0, &(0x7f0000000540), 0x0) mknod(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8000, 0x0) socket(0x12, 0x2, 0x0) socket$inet6(0x18, 0x3, 0x0) compat_40_mount(&(0x7f0000000140)='tmpfs\x00', 0x0, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) compat_30___stat13(&(0x7f00000001c0)='./file0/file0\x00', &(0x7f0000000280)) getsid(0x0) compat_50___msgctl13$IPC_STAT(0xffffffffffffffff, 0x2, 0x0) lchown(0x0, 0x0, 0xffffffffffffffff) compat_40_mount(0x0, 0x0, 0x0, 0x0) unlink(0x0) __clone(0x0, 0x0) __clone(0x0, 0x0) minherit(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0) __clone(0x0, 0x0) lchown(&(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = socket$inet(0x2, 0x2, 0x0) getppid() setsockopt$inet_opts(r0, 0x0, 0x200000000000c, &(0x7f0000000240)="ea00004100000010", 0x8) open(&(0x7f0000000040)='./file0\x00', 0x200, 0x0) ptrace(0x0, 0x0, 0x0, 0x0) fchroot(r0) __getfh30(0x0, 0x0, 0x0) __fhstat50(&(0x7f0000000300)="f74dcbc9f38391397be977c9118f071853c3bce0bdc31c9c4a2ef2c707731ac97927eddb675cbad7965c17715aa7838a680d9af7c9f0fbff08ca32062c86661f288c97fe116598288e1f27a57bf8aeaa5d8bcc34df9fe0598478c6b18d1be395dd82e27be1", 0x65, &(0x7f0000000480)) msgget$private(0x0, 0x0) 9.959193231s ago: executing program 2: r0 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000005c0)='\x00', r0, &(0x7f0000000c80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') symlinkat(&(0x7f0000000dc0)='./file0\x00', r0, &(0x7f0000000ec0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mkdirat(r0, &(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r1 = syz_usb_connect$hid(0x0, 0x0, 0x0, &(0x7f0000000100)={0x49, &(0x7f0000000080)={0xa, 0x6, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x21, &(0x7f0000000440)=ANY=[@ANYBLOB="050f210003071002028000000a10030006008b0280000b10010ccc000081400009e220c59984eac58ca6e86cdc5e2aa2589b681fb901d8b60cbf1eda4cbeba628b1093eaeb25e3a0977401f07f9e1fff3f820976b27ac7248d8c83c1127480f3fbfa91d708103e53166ec8e8a88675d2191ba1faf8cc76fd8298f337d82672c4ea390a1657881b45c04f4646dfed0ed4d70d3f3fee5c317ad955527898f9e9a0e76228df998c29aaadc1a0174f550431c5d1bede67ff22f8ebf08fd1f99277e870a127b8923ea887f25a6cf3c8121b7b295c4d39db15cf4f6f8fce3aedf6771bde3fb7e02c717c44ca98"], 0x1, [{0x96, &(0x7f0000000400)=ANY=[@ANYRESHEX=r0]}]}) __posix_chown(&(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x201, 0x0) open$dir(&(0x7f0000000b80)='./file0\x00', 0x200, 0x0) r2 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) compat_50_select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x2}) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) compat_40_mount(&(0x7f0000000180)='ptyfs\x00', &(0x7f00000002c0)='./file0\x00', 0x0, &(0x7f0000000500)) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x205, 0x0) fcntl$lock(r3, 0x9, &(0x7f0000000340)={0x0, 0x0, 0x400000}) open(&(0x7f00000000c0)='./file0\x00', 0x12, 0x0) fcntl$lock(r2, 0x7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x100000001}) posix_spawn(0x0, 0x0, &(0x7f0000000180)={0x0, 0xfffffd4a, 0x0}, 0x0, 0x0, 0x0) poll(&(0x7f0000000240)=[{r2}], 0x1, 0x8b75) r4 = socket$inet6(0x18, 0x3, 0x0) _ksem_open(&(0x7f0000000180)='/', 0xff01, 0x0, 0x0, &(0x7f0000000100)) sendto$inet6(r4, &(0x7f00000001c0)="5641db7125c12bd567538bc3458cff86f4bcdab38f5ddf194b3f97881d4d0da855389ae6c23b140ba03a56dbfc649a6f373b62b6b92a42abfcc7161a720b62314528f739500f056855f6ab34b8cd669c7a059a63749152b7", 0x58, 0x2, &(0x7f0000000040)={0x18, 0x3}, 0xc) mknod(0x0, 0xc000, 0x4100) socketpair$unix(0x1, 0x0, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0xffff, 0x0, 0x0, 0x0) socket$inet(0x2, 0x40000000, 0x0) r5 = open$dir(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$FIOASYNC(r5, 0x40046679, &(0x7f0000000140)) lchmod(&(0x7f0000000080)='./file0\x00', 0x8) bind$inet(r1, &(0x7f0000000040)={0x2, 0x1}, 0xc) connect$inet(0xffffffffffffff9c, &(0x7f0000000000)={0x2, 0x0}, 0xc) 9.357875863s ago: executing program 0: fktrace(0xffffffffffffffff, 0x0, 0x0, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x101}}) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x1}) r0 = socket(0x1, 0x1, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) close(r0) r1 = socket(0x18, 0x2, 0x0) setsockopt(r1, 0x1000000000029, 0x2a, &(0x7f0000000040)='\x00\x00\x00\x00', 0x4) connect$unix(r0, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) sendto$inet(r0, &(0x7f0000000700)="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", 0x4d1, 0x2000000, 0x0, 0x0) 8.068423689s ago: executing program 5: symlink(&(0x7f0000000080)='.\x00', &(0x7f00000001c0)='./bus\x00') __mount50(&(0x7f0000000280)='kernfs\x00', &(0x7f0000000180)='./bus\x00', 0x0, 0x0, 0x0) symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00') compat_50___msgctl13$IPC_STAT(0x0, 0x2, &(0x7f0000000280)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100), 0xdffffffffffff7ff}}) lchown(&(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffff) compat_40_mount(&(0x7f0000000140)='umap\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f00000001c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x80002005, 0x5300) fstatat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)={0x0}, 0x0) mknod(&(0x7f00000000c0)='./bus\x00', 0x8000, r0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$FIOASYNC(r1, 0xc0185005, &(0x7f00000000c0)) compat_40_mount(&(0x7f0000000900)='union\x00', &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f00000001c0)) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) compat_50_select(0x40, &(0x7f0000000340)={0xfffffffffffffffd}, 0x0, 0x0, 0x0) getegid() __mount50(&(0x7f0000000000)='overlay\x00', &(0x7f0000000040)='.\x00', 0x0, &(0x7f0000000540), 0x0) __getfh30(&(0x7f0000000540)='./bus\x00', &(0x7f0000000940)=""/4096, &(0x7f0000000580)=0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mkdir(0x0, 0x0) unlink(&(0x7f0000000300)='./file0\x00') mknod(0x0, 0x0, 0x0) pathconf(&(0x7f0000000040)='./file0\x00', 0x3) open(&(0x7f00000000c0)='./file0\x00', 0x80000000000206, 0x0) ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0xd27d43220c7df9b, 0x0) compat_30___stat13(&(0x7f0000000380)='./bus\x00', &(0x7f00000003c0)) __fhstat50(0x0, 0x0, 0x0) 7.808572629s ago: executing program 1: compat_43_osethostname(&(0x7f0000000080)="cd5400b32402d31c4233158090afda8e5a4d0d81f7240ca89a22eae6d25c11b2711a61a790fb7331b1e5d0e861757a6fd9ae12490b0cfeccedf730d83fc46a62b860b4815a2a84c169ef121b", 0x4c) mknod(&(0x7f0000000040)='./bus\x00', 0x100000000205f, 0x2a02) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) 7.319002554s ago: executing program 3: mknod(&(0x7f00000000c0)='./file0\x00', 0x2000, 0x4100) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r1 = socket(0x1f, 0x5, 0x2) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x3e}, 0x49f229dfd73aa471) ioctl$FIOASYNC(r0, 0x80085762, &(0x7f0000000040)=0x1) pipe(&(0x7f0000000a40)={0xffffffffffffffff}) r3 = getpid() fktrace(r2, 0x0, 0x4, r3) compat_20_getfsstat(0x0, 0x0, 0x0) 7.058565183s ago: executing program 5: r0 = getsid(0x0) ptrace(0x9, r0, 0x0, 0x0) compat_40_mount(&(0x7f0000000040)='hfs\x00', &(0x7f0000000080)='./file0\x00', 0xaf81e21248661df6, &(0x7f00000001c0)="761969f3669a513147cbf77e172169b04cb4") __wait450(r0, &(0x7f0000000000), 0x8, &(0x7f0000000280)) compat_50_wait4(0x0, 0x0, 0x0, 0x0) compat_40_mount(&(0x7f0000000000)='tmpfs\x00', &(0x7f00000003c0)='.\x00', 0x0, &(0x7f0000000140)="01") ktrace(&(0x7f0000000200)='./file0\x00', 0x1, 0xf, r0) socket(0x0, 0x0, 0x0) open(0x0, 0x0, 0x0) pipe(0x0) ioctl$FIOSEEKHOLE(0xffffffffffffffff, 0xc118691d, 0x0) pread(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$FIOSEEKHOLE(0xffffffffffffffff, 0x8118691c, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) compat_43_ocreat(&(0x7f0000000000)='./file0\x00', 0x0) __mount50(0x0, 0x0, 0x0, 0x0, 0x0) __clock_getres50(0x0, 0x0) chflags(0x0, 0x0) acct(&(0x7f00000000c0)='./file0\x00') modctl$MODCTL_UNLOAD(0x4, &(0x7f0000000000)) r1 = getpgrp() getsid(r1) fcntl$lock(0xffffffffffffffff, 0x8, &(0x7f0000000080)={0x1, 0x0, 0xfc, 0x80000000}) pathconf(0x0, 0x6) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) ktrace(0x0, 0x0, 0x0, 0x0) _lwp_setprivate(0xffffffffffffffff) posix_spawn(0xffffffffffffffff, &(0x7f0000000240)='\'\xff', &(0x7f0000000340)={0x401, 0x0, 0x0}, &(0x7f0000000380)={0x0, 0x0, {0x1}, 0x7ff, {[0x100002, 0xfffffffe, 0x0, 0x1]}, {[0x0, 0x101, 0xbf43, 0x65ee]}}, &(0x7f0000000740), &(0x7f0000000600)=['\xe5\xfc\xcbf*\x97\xef(\x85\xda[e\x86\x84\x91\xcc\"t\x13Y\xfe\xc5Xl\":5\xc5jALGu+\x80!\xd3\x02B\x93\xf0\xe6\x88\xd9]\xab\x95\x1e\xae\xa0\xe6\xad\x88\xc1\x92\xd3\xea\x80\xdd\x04\xf0\xd2\xd5.\xfb\"\x82\xee\x84\x86\x97`\x91&\xfa.\xa8\xf2\xc1\\\xbc\x18sD(p-\xb4\x04\x99\xd8\xa0\xdd\x95Z\xd5\xed\x8f\x98\xa8?R\xa6\x03\x0e\tPZ\xdf\xc5\r_\x81\xc1\xf6q\xf6j:\xeet\x0e\x1d\xaf\xf8\xfe\x11i\xce`1l\xfa~4J\xe5\xe0\x19\xd9\'\xdc\xd4\x82%\xb2C\x05\x80r\x8e,W\x8e\xd2\x19\x91\x90,\xc8 \x16R\f\aH\xbb\xe6\x80\x8a\xde\x10\f\xf9Y\xd4\xb6\x9d\xaa\xaf\x1d\xb9\x02\x1d\x8ae\x9bK\xe8212U\xacq\x1d\x14\x19\x19\xf2\xbc+,\x89Z\xa4\xa7\x8b\x16\x1eN\xd5\x04`\x93\x16zR\xe8\xaa\x83/[\x18\xa7\xe1\xc6\xbb\x82u}\xc4&[,\x19-=\x87S\x02`\x8e\xaf5E;\xe6&*_Ce\xfc\xa5\x8c\xff\x1a,', 'umap\x00', '\x00\x00i\x14\x97p\x1e C\xc6\xcaP\xd6\xb4\xa3\xd4e\x04(HU\xa9hWGj\x10\xf5\xbd\x9c{\xdc\x81\x1d\xb9\x83\x1a\xb0\xd6\xc0G\x1c\xbc\xffDVF\x81?r\xd2\x87\x90']) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$FIOSEEKHOLE(r2, 0x80206931, &(0x7f0000000180)=0x8000080000000039) 6.729937224s ago: executing program 2: socket$inet6(0x18, 0x3, 0x0) compat_40_mount(&(0x7f0000000140)='tmpfs\x00', 0x0, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) compat_30___stat13(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000280)) getsid(0x0) compat_50___msgctl13$IPC_STAT(0xffffffffffffffff, 0x2, 0x0) lchown(0x0, 0x0, 0xffffffffffffffff) compat_40_mount(0x0, 0x0, 0x0, 0x0) unlink(0x0) __clone(0x0, 0x0) __clone(0x0, 0x0) minherit(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0) __clone(0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) lchown(&(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x200000000000c, &(0x7f0000000240)="ea00004100000010", 0x8) r1 = open(&(0x7f0000000040)='./file0\x00', 0x200, 0x0) ptrace(0x0, 0x0, 0x0, 0x0) fchroot(r0) __getfh30(0x0, 0x0, 0x0) __fhstat50(&(0x7f0000000300)="f74dcbc9f38391397be977c9118f071853c3bce0bdc31c9c4a2ef2c707731ac97927eddb675cbad7965c17715aa7838a680d9af7c9f0fbff08ca32062c86661f288c97fe116598288e1f27a57bf8aeaa5d8bcc34df9fe0598478c6b18d1be395dd82e27be1", 0x65, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r3 = msgget$private(0x0, 0x0) compat_50___msgctl13$IPC_STAT(r3, 0x2, &(0x7f00000003c0)={{0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r4) fchownat(r1, &(0x7f0000000200)='./file0/file0\x00', r2, 0xffffffffffffffff, 0x400) socket(0x10, 0x2, 0x0) 6.506001308s ago: executing program 5: symlink(&(0x7f00000003c0)='./file1\x00', &(0x7f0000000240)='./file0\x00') compat_40_mount(0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000180)='./file1\x00', 0x0) compat_40_mount(&(0x7f0000000040)='ptyfs\x00', &(0x7f00000002c0)='./file0\x00', 0x1, &(0x7f0000000440)) (async, rerun: 32) chmod(&(0x7f0000000280)='./file0\x00', 0x0) (async, rerun: 32) r0 = socket(0x1f, 0x40000000, 0x0) ioctl$FIOSEEKHOLE(r0, 0xc118691d, &(0x7f0000000180)=0x8000000000000032) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mincore(&(0x7f0000661000/0x3000)=nil, 0x3000, &(0x7f0000000000)=""/220) _ksem_unlink(&(0x7f0000000180)) (async, rerun: 64) r1 = getsid(0x0) (rerun: 64) ptrace(0x9, r1, 0x0, 0x0) compat_50_____semctl13$GETNCNT(0x0, 0x0, 0x3) (async) __wait450(0x0, 0x0, 0xf00, 0x0) (async) setuid(0xee01) mknod(&(0x7f00000000c0)='./bus\x00', 0x80, 0x0) (async) r2 = open$dir(&(0x7f00000001c0)='./bus\x00', 0x40, 0x1) ioctl$FIOASYNC(r2, 0x80067411, &(0x7f0000000040)) (async) socket$inet(0x2, 0x10000000, 0x0) (async, rerun: 32) _lwp_kill(0x0, 0xffff) (async, rerun: 32) modctl$MODCTL_UNLOAD(0x1, &(0x7f0000000080)="f7f18c4b0d602d76648e1e31046b3d046bdf3bf31d62c7487d077681d6fcd0998d665f90") (async) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) modctl$MODCTL_LOAD(0x0, 0x0) (async, rerun: 32) sendmmsg(r4, &(0x7f0000000080)={0x0, 0x2}, 0x10, 0x0, 0x0) (async, rerun: 32) fchmodat(r2, &(0x7f0000000300)='./file0\x00', 0x0, 0x0) (async) ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0x4, 0xffffffffffffffff) sendmmsg(r3, &(0x7f0000000280)={&(0x7f0000000140)={&(0x7f0000000100)=@data="6e4a51a176fc988ca2cc312dcdc5", 0xe, &(0x7f0000000200), 0x0, &(0x7f0000000140)}, 0x9}, 0x10, 0x408, &(0x7f0000000880)={0x0, 0x100}) (async) setregid(0x0, 0xffffffffffffffff) open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x0) getpid() 6.378695347s ago: executing program 3: writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000)="c8", 0x1}], 0x1) pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$FIONREAD(r0, 0x20007461, 0x0) 6.179621288s ago: executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) r1 = dup2(r0, r0) fork() getsid(0x0) sendmsg$unix(r1, &(0x7f0000003ac0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000003b00)=ANY=[], 0x100, 0x7000000}, 0x0) 6.15979712s ago: executing program 2: madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1) __clock_settime50(0x0, &(0x7f0000000040)) open$dir(0x0, 0x0, 0x0) mkdirat(0xffffffffffffffff, 0x0, 0x0) __mount50(&(0x7f00000002c0)='overlay\x00', &(0x7f0000000040)='.\x00', 0x0, &(0x7f0000000540), 0x0) mknod(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8000, 0x0) socket(0x12, 0x2, 0x0) socket$inet6(0x18, 0x3, 0x0) compat_40_mount(&(0x7f0000000140)='tmpfs\x00', 0x0, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) compat_30___stat13(&(0x7f00000001c0)='./file0/file0\x00', &(0x7f0000000280)) getsid(0x0) compat_50___msgctl13$IPC_STAT(0xffffffffffffffff, 0x2, 0x0) lchown(0x0, 0x0, 0xffffffffffffffff) compat_40_mount(0x0, 0x0, 0x0, 0x0) unlink(0x0) __clone(0x0, 0x0) __clone(0x0, 0x0) minherit(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0) __clone(0x0, 0x0) lchown(&(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = socket$inet(0x2, 0x2, 0x0) getppid() setsockopt$inet_opts(r0, 0x0, 0x200000000000c, &(0x7f0000000240)="ea00004100000010", 0x8) open(&(0x7f0000000040)='./file0\x00', 0x200, 0x0) ptrace(0x0, 0x0, 0x0, 0x0) fchroot(r0) __getfh30(0x0, 0x0, 0x0) __fhstat50(&(0x7f0000000300)="f74dcbc9f38391397be977c9118f071853c3bce0bdc31c9c4a2ef2c707731ac97927eddb675cbad7965c17715aa7838a680d9af7c9f0fbff08ca32062c86661f288c97fe116598288e1f27a57bf8aeaa5d8bcc34df9fe0598478c6b18d1be395dd82e27be1", 0x65, &(0x7f0000000480)) msgget$private(0x0, 0x0) 5.673452795s ago: executing program 4: r0 = open(&(0x7f0000000300)='./file0\x00', 0x200, 0x895e1fcde5192c40) compat_43_orecvmsg(0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="23211ad968d6b6588997c1bfcc14b11a7f8901f6f33b7a06d75615c3c02b935af8ab28e7c0baf8fe25d7181d6993a327cf675d1b5b9a6ae16eff1d5549e609", 0x3f}], 0x1) r1 = fcntl$getown(r0, 0x5) r2 = getsid(r1) posix_spawn(r2, 0x0, &(0x7f00000004c0)={0x3, 0x0, &(0x7f0000000480)=@close}, 0x0, 0x0, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r3, 0x11, 0x0, 0x0, 0x0) _lwp_create(&(0x7f0000000100)={0x0, 0x0, {[0x0, 0x3f, 0x0, 0x84]}, {0x0, 0x0, 0x1}, {0x1, 0x0, '/)!/\x00'}}, 0x80, 0x0) compat_40_mount(&(0x7f00000001c0)='tmpfs\x00', &(0x7f0000000240)='.\x00', 0x46ca8ad6824dfad9, &(0x7f00000002c0)="01") sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xfffffffffffffe15, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1002", @ANYRESDEC=0x0, @ANYRESOCT=r0], 0x10}, 0x0) mkdir(0x0, 0x0) __mount50(&(0x7f0000000000)='fdesc\x00', 0x0, 0x0, 0x0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) r4 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x13000)=nil, 0x13000, 0x5, 0x10, r4, 0x0, 0x0) mlockall(0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) compat_50___msgctl13$IPC_STAT(0x0, 0x2, 0x0) read(0xffffffffffffffff, &(0x7f0000000200)=""/9, 0x9) access(&(0x7f0000000280)='./file0\x00', 0x1) compat_30_getfh(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) __mount50(0x0, &(0x7f0000000040)='.\x00', 0xe680bf986d21abfb, &(0x7f0000000140), 0x0) compat_43_otruncate(&(0x7f0000000440)='./file0\x00', 0x5) __fhstatvfs190(&(0x7f0000000080)="aef1b3b56f0aff2bb37d5faf393acf5acb21b63047305255e7efa78abcbec66c07c61f70b78fd4314cd3798d78b527e5b8ee49faaa40874195a51fc17b05d326561d68d3c6c92905ab6bb8fb5112d3b35d0a904647c051b402", 0x59, 0x0, 0x0) r5 = socket(0x18, 0x2, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0xffff, 0x0, &(0x7f00000000c0)={0x0, 0x1ff}, 0x10) connect$unix(r5, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00') 5.481053454s ago: executing program 2: compat_50___msgctl13$IPC_STAT(0x0, 0x2, &(0x7f0000000280)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) symlink(0x0, 0x0) lchown(0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) r1 = compat_30_socket(0x22, 0x3, 0x0) open$dir(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = socket$inet6(0x18, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000000)='3', 0x180, 0x2, &(0x7f0000000040)={0x18, 0x3}, 0x1c) compat_43_osend(r1, &(0x7f0000000040)="58030404", 0x358, 0x0) compat_43_orecvmsg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r3 = socket(0x18, 0x3, 0x0) getsockopt(r3, 0x29, 0x16, 0x0, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0}, 0x10) mknod(&(0x7f0000000480)='./file0\x00', 0x2000, 0x1733) lchown(&(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffff) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r4 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r5 = socket$inet(0x2, 0x2, 0x0) fcntl$lock(r5, 0xa, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) mprotect(&(0x7f000077c000/0x2000)=nil, 0x2000, 0x2) pipe(&(0x7f0000000a40)={0xffffffffffffffff}) r7 = getpid() fktrace(r6, 0x0, 0x62e2dd08f149ff1b, r7) compat_50_getitimer(0x0, 0x0) _ksem_wait(0x0) pipe2(&(0x7f0000000000), 0x4) writev(r5, &(0x7f0000000380)=[{0x0}], 0x1) ioctl$FIONREAD(r4, 0x4004667f, 0x0) 4.780643201s ago: executing program 3: compat_90_getvfsstat(&(0x7f0000000900), 0x8d0, 0x1) (async) chflags(0x0, 0x0) (async) symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00') lchflags(&(0x7f0000000080)='./bus\x00', 0x50000) (async) compat_50___msgctl13$IPC_STAT(0x0, 0x2, &(0x7f00000003c0)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100), 0xdffffffffffff803}}) (async) mknod(&(0x7f00000000c0)='./file0\x00', 0x1000, 0x29b3) (async) __mount50(&(0x7f0000000000)='overlay\x00', &(0x7f0000000040)='.\x00', 0x0, &(0x7f0000000540), 0x0) compat_40_mount(0x0, &(0x7f00000000c0)='.\x00', 0x400000, &(0x7f00000001c0)) (async) compat_50___msgctl13$IPC_STAT(0x0, 0x2, &(0x7f00000003c0)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0xdffffffffffff801}}) (async) mknod(&(0x7f00000000c0)='./bus\x00', 0x2000, 0x4f4b) (async) r0 = socket$inet(0x2, 0x0, 0x0) (async) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) __fstat50(r1, 0x0) (async) mknod(&(0x7f0000000200)='./file0\x00', 0x8000, 0xffffffffffffffff) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) readv(r0, &(0x7f0000000180)=[{&(0x7f0000000300)=""/91, 0xfffffffffffffe0b}, {&(0x7f0000000440)=""/114, 0x7c}, {&(0x7f0000000500)=""/84, 0x54}], 0x3) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) mknod(0x0, 0x0, 0x0) (async) compat_43_orecvmsg(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0) (async) socketpair(0x0, 0x0, 0x0, 0x0) (async) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) (async) _lwp_wakeup(0x0) (async) mknod(0x0, 0x0, 0x5300) (async) r2 = socket$inet(0x2, 0x3, 0x0) getsockopt(r2, 0x0, 0x19, 0x0, 0x0) (async) __fhopen40(0x0, 0x0, 0x0) (async) open$dir(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) (async) mknod(&(0x7f0000000000)='./file1\x00', 0x2000, 0x0) 4.277530158s ago: executing program 4: mknod(&(0x7f0000000100)='./file0\x00', 0x80002005, 0x0) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) __clock_getres50(0x0, 0x0) compat_40_mount(&(0x7f0000000000)='tmpfs\x00', &(0x7f00000003c0)='.\x00', 0x0, &(0x7f0000000140)="01") mknod(&(0x7f0000000480)='./file0\x00', 0x2000, 0x1733) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) unmount(&(0x7f0000000000)='./file1\x00', 0x0) pathconf(&(0x7f0000000080)='./file0\x00', 0x6) acct(&(0x7f00000000c0)='./file0\x00') compat_90_statvfs1(&(0x7f0000000200)='./file0\x00', &(0x7f00000004c0), 0x1) getsockopt$SO_PEERCRED(r0, 0xffff, 0x11, &(0x7f0000000180)={0x0, 0x0}, 0xc) compat_50_quotactl(&(0x7f0000000040)='./file0\x00', 0x1, r1, &(0x7f00000001c0)="d63a") 4.074434199s ago: executing program 0: open(&(0x7f0000001640)='./file0\x00', 0x615, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0, 0x4000001) mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x40000802) setsockopt(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000), 0x0) r0 = socket$inet(0x2, 0x1, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) posix_spawn(0x0, 0x0, 0x0, &(0x7f0000000140)={0x0, 0xffffffffffffffff}, 0x0, 0x0) fchmod(0xffffffffffffffff, 0x0) setsockopt(r0, 0x0, 0x9, &(0x7f0000000040)="285c8f02", 0x4) syz_emit_ethernet(0x138, 0x0) mknod(&(0x7f0000000100)='./file0\x00', 0x2000, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x100000000000000, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f0000000240)=@abs={0x1, 0x0, 0x1}, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = socket(0x18, 0x1, 0x0) connect$unix(r1, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) swapctl$SWAP_ON(0x1, &(0x7f0000000000), 0x0) swapctl$SWAP_ON(0x1, &(0x7f0000000000), 0x0) _ksem_open(&(0x7f0000000700), 0x0, 0x0, 0x0, &(0x7f0000000800)=0x0) swapctl$SWAP_ON(0x1, &(0x7f0000000140)="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", 0x2) _ksem_trywait(r2) 4.068952569s ago: executing program 3: r0 = socket(0x2, 0x3, 0x0) r1 = socket(0x18, 0x3, 0x1f) connect$unix(r1, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) dup2(r1, r0) getsid(0x0) ptrace(0x9, 0x0, 0x0, 0x0) open(0x0, 0x0, 0x0) setsockopt$sock_int(r0, 0xffff, 0x1001, &(0x7f0000000100)=0x20000, 0x4) write(r1, &(0x7f0000000000)="04bdfa5d3010006123339a346f731573d8d5087501000000fdffffff325cebc37fc4e1dd543dbe2da6dd00000000000000000000000000000000a9c5143eff49ac23e9a72bc07d8022d78f", 0xbb20) 3.612514459s ago: executing program 5: symlink(&(0x7f00000003c0)='./file1\x00', &(0x7f0000000240)='./file0\x00') compat_40_mount(0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000180)='./file1\x00', 0x0) compat_40_mount(&(0x7f0000000040)='ptyfs\x00', &(0x7f00000002c0)='./file0\x00', 0x1, &(0x7f0000000440)) (async, rerun: 32) chmod(&(0x7f0000000280)='./file0\x00', 0x0) (async, rerun: 32) r0 = socket(0x1f, 0x40000000, 0x0) ioctl$FIOSEEKHOLE(r0, 0xc118691d, &(0x7f0000000180)=0x8000000000000032) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mincore(&(0x7f0000661000/0x3000)=nil, 0x3000, &(0x7f0000000000)=""/220) _ksem_unlink(&(0x7f0000000180)) (async, rerun: 64) r1 = getsid(0x0) (rerun: 64) ptrace(0x9, r1, 0x0, 0x0) compat_50_____semctl13$GETNCNT(0x0, 0x0, 0x3) (async) __wait450(0x0, 0x0, 0xf00, 0x0) (async) setuid(0xee01) mknod(&(0x7f00000000c0)='./bus\x00', 0x80, 0x0) (async) r2 = open$dir(&(0x7f00000001c0)='./bus\x00', 0x40, 0x1) ioctl$FIOASYNC(r2, 0x80067411, &(0x7f0000000040)) (async) socket$inet(0x2, 0x10000000, 0x0) (async, rerun: 32) _lwp_kill(0x0, 0xffff) (async, rerun: 32) modctl$MODCTL_UNLOAD(0x1, &(0x7f0000000080)="f7f18c4b0d602d76648e1e31046b3d046bdf3bf31d62c7487d077681d6fcd0998d665f90") (async) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) modctl$MODCTL_LOAD(0x0, 0x0) (async, rerun: 32) sendmmsg(r4, &(0x7f0000000080)={0x0, 0x2}, 0x10, 0x0, 0x0) (async, rerun: 32) fchmodat(r2, &(0x7f0000000300)='./file0\x00', 0x0, 0x0) (async) ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0x4, 0xffffffffffffffff) sendmmsg(r3, &(0x7f0000000280)={&(0x7f0000000140)={&(0x7f0000000100)=@data="6e4a51a176fc988ca2cc312dcdc5", 0xe, &(0x7f0000000200), 0x0, &(0x7f0000000140)}, 0x9}, 0x10, 0x408, &(0x7f0000000880)={0x0, 0x100}) (async) setregid(0x0, 0xffffffffffffffff) open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x0) getpid() 3.499250246s ago: executing program 4: mknod(&(0x7f0000000040)='./bus\x00', 0x100000000205f, 0x2a02) open(&(0x7f0000000040)='./bus\x00', 0x2d00, 0x0) 3.333648031s ago: executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) mknod(&(0x7f0000000300)='./file0\x00', 0x2000, 0x6da) posix_spawn(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x80) munmap(&(0x7f0000000000/0x3000)=nil, 0x3000) compat_50_select(0x3, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000003200)) ioctl$FIOASYNC(r0, 0x80047401, &(0x7f0000000000)) open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001200)=[{&(0x7f0000000180)="bf3b684c5ae963b45670", 0xa}], 0x1}, 0x0) modctl$MODCTL_STAT(0x4, &(0x7f0000000180)={&(0x7f00000000c0)=""/126, 0x7e}) compat_40_mount(&(0x7f0000000200)='procfs\x00', &(0x7f00000000c0)='.\x00', 0x0, &(0x7f00000002c0)="01") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) link(&(0x7f0000000400)='./file0\x00', 0x0) unmount(&(0x7f0000000000)='./file0\x00', 0x255a0100) sendmsg$unix(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00') compat_50___msgctl13$IPC_STAT(0x0, 0x2, &(0x7f00000002c0)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100), 0xdffffffffffff803}}) lchown(&(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffff) modctl$MODCTL_LOAD(0x0, &(0x7f0000000000)={&(0x7f0000000100)="c8b8e19e5ef9fc00000000000000000000ab521f721c6ecfb2586bc93ecd3d4632ccf117cd46c6de5ae871bb4b2b2386adbee9adbff1d6212cc9031b1809cba035ea32824b", 0x0, 0x0}) mkdir(0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x203, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f00000000c0)='./bus\x00', 0x2000, 0x0) r1 = open$dir(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$FIOASYNC(r1, 0x80067409, &(0x7f0000000140)) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) compat_50___fstat30(0xffffffffffffffff, 0x0) 2.850853325s ago: executing program 1: compat_43_osethostname(&(0x7f0000000080)="cd5400b32402d31c4233158090afda8e5a4d0d81f7240ca89a22eae6d25c11b2711a61a790fb7331b1e5d0e861757a6fd9ae12490b0cfeccedf730d83fc46a62b860b4815a2a84c169ef121b", 0x4c) mknod(&(0x7f0000000040)='./bus\x00', 0x100000000205f, 0x2a02) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) 2.843031086s ago: executing program 3: socket(0x10, 0x2, 0x0) r0 = socket(0x1f, 0x5, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000000), 0x1, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000080), 0x1, 0x0) syz_extract_tcp_res$synack(&(0x7f00000000c0), 0x1, 0x0) syz_extract_tcp_res(&(0x7f0000000100), 0x80, 0x0) syz_extract_tcp_res(&(0x7f0000000180), 0x4, 0x7fb7) r1 = accept$inet(0xffffffffffffffff, &(0x7f0000000200), &(0x7f0000000240)=0xc) fcntl$getown(r1, 0x5) write(r1, &(0x7f0000000440), 0x0) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) socket(0x0, 0x0, 0x0) mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0) compat_20_fstatfs(r1, &(0x7f0000001480)) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) syz_extract_tcp_res(0x0, 0x0, 0x1) syz_extract_tcp_res(&(0x7f00000016c0), 0x3, 0x1a3) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) compat_50_getrusage(0xc7e667e59ac8b2c0, 0x0) r2 = dup2(0xffffffffffffffff, r0) rasctl(&(0x7f00000012c0), 0xd39, 0x0) rasctl(0x0, 0x9, 0x0) rasctl(0x0, 0x0, 0x2) ioctl$FIOSEEKHOLE(0xffffffffffffffff, 0x8090690c, 0x0) open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) mknod(&(0x7f0000000080)='./file0\x00', 0x2000, 0x40000802) r3 = open(&(0x7f0000000040)='./file0\x00', 0x200, 0x0) ioctl$FIOASYNC(r3, 0x80047401, &(0x7f0000000000)=0xb) getsockname$unix(r2, &(0x7f0000000280)=@file={0x0, ""/4097}, &(0x7f0000000140)=0x1003) 2.709825836s ago: executing program 5: r0 = getsid(0x0) ptrace(0x9, r0, 0x0, 0x0) compat_40_mount(&(0x7f0000000040)='hfs\x00', &(0x7f0000000080)='./file0\x00', 0xaf81e21248661df6, &(0x7f00000001c0)="761969f3669a513147cbf77e172169b04cb4") __wait450(r0, &(0x7f0000000000), 0x8, &(0x7f0000000280)) compat_50_wait4(0x0, 0x0, 0x0, 0x0) compat_40_mount(&(0x7f0000000000)='tmpfs\x00', &(0x7f00000003c0)='.\x00', 0x0, &(0x7f0000000140)="01") ktrace(&(0x7f0000000200)='./file0\x00', 0x1, 0xf, r0) socket(0x0, 0x0, 0x0) open(0x0, 0x0, 0x0) pipe(0x0) ioctl$FIOSEEKHOLE(0xffffffffffffffff, 0xc118691d, 0x0) pread(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$FIOSEEKHOLE(0xffffffffffffffff, 0x8118691c, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) compat_43_ocreat(&(0x7f0000000000)='./file0\x00', 0x0) __mount50(0x0, 0x0, 0x0, 0x0, 0x0) __clock_getres50(0x0, 0x0) chflags(0x0, 0x0) acct(&(0x7f00000000c0)='./file0\x00') modctl$MODCTL_UNLOAD(0x4, &(0x7f0000000000)) r1 = getpgrp() getsid(r1) fcntl$lock(0xffffffffffffffff, 0x8, &(0x7f0000000080)={0x1, 0x0, 0xfc, 0x80000000}) pathconf(0x0, 0x6) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) ktrace(0x0, 0x0, 0x0, 0x0) _lwp_setprivate(0xffffffffffffffff) posix_spawn(0xffffffffffffffff, &(0x7f0000000240)='\'\xff', &(0x7f0000000340)={0x401, 0x0, 0x0}, &(0x7f0000000380)={0x0, 0x0, {0x1}, 0x7ff, {[0x100002, 0xfffffffe, 0x0, 0x1]}, {[0x0, 0x101, 0xbf43, 0x65ee]}}, &(0x7f0000000740), &(0x7f0000000600)=['\xe5\xfc\xcbf*\x97\xef(\x85\xda[e\x86\x84\x91\xcc\"t\x13Y\xfe\xc5Xl\":5\xc5jALGu+\x80!\xd3\x02B\x93\xf0\xe6\x88\xd9]\xab\x95\x1e\xae\xa0\xe6\xad\x88\xc1\x92\xd3\xea\x80\xdd\x04\xf0\xd2\xd5.\xfb\"\x82\xee\x84\x86\x97`\x91&\xfa.\xa8\xf2\xc1\\\xbc\x18sD(p-\xb4\x04\x99\xd8\xa0\xdd\x95Z\xd5\xed\x8f\x98\xa8?R\xa6\x03\x0e\tPZ\xdf\xc5\r_\x81\xc1\xf6q\xf6j:\xeet\x0e\x1d\xaf\xf8\xfe\x11i\xce`1l\xfa~4J\xe5\xe0\x19\xd9\'\xdc\xd4\x82%\xb2C\x05\x80r\x8e,W\x8e\xd2\x19\x91\x90,\xc8 \x16R\f\aH\xbb\xe6\x80\x8a\xde\x10\f\xf9Y\xd4\xb6\x9d\xaa\xaf\x1d\xb9\x02\x1d\x8ae\x9bK\xe8212U\xacq\x1d\x14\x19\x19\xf2\xbc+,\x89Z\xa4\xa7\x8b\x16\x1eN\xd5\x04`\x93\x16zR\xe8\xaa\x83/[\x18\xa7\xe1\xc6\xbb\x82u}\xc4&[,\x19-=\x87S\x02`\x8e\xaf5E;\xe6&*_Ce\xfc\xa5\x8c\xff\x1a,', 'umap\x00', '\x00\x00i\x14\x97p\x1e C\xc6\xcaP\xd6\xb4\xa3\xd4e\x04(HU\xa9hWGj\x10\xf5\xbd\x9c{\xdc\x81\x1d\xb9\x83\x1a\xb0\xd6\xc0G\x1c\xbc\xffDVF\x81?r\xd2\x87\x90']) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$FIOSEEKHOLE(r2, 0x80206931, &(0x7f0000000180)=0x8000080000000039) 2.632071789s ago: executing program 1: r0 = socket(0x2, 0x3, 0x0) ioctl$FIOSEEKHOLE(0xffffffffffffffff, 0x80206916, &(0x7f0000000180)=0x8000000000000032) socket(0x6, 0x5, 0xe5) mknod(&(0x7f00000000c0)='./bus\x00', 0x2000, 0x0) socket$inet(0x2, 0x2, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x0}, 0x10) __clock_gettime50(0x0, &(0x7f0000002480)) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0}, 0xc) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x1, 0x0, 0x2}, 0x8) __setitimer50(0x1, 0x0, &(0x7f00000000c0)) write(0xffffffffffffffff, 0x0, 0x0) r2 = socket(0x1f, 0x5, 0x0) getsockopt(r2, 0x2, 0x8fd, 0x0, 0x0) mprotect(&(0x7f0000487000/0x2000)=nil, 0x2000, 0x4) socket(0x1f, 0x5, 0x0) setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket(0x18, 0x0, 0x0) dup2(r0, 0xffffffffffffffff) setsockopt(0xffffffffffffffff, 0x1000000029, 0x1b, &(0x7f0000000000)="5ab7776a", 0x4) socket(0x0, 0x0, 0x0) compat_43_osend(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = open$dir(&(0x7f0000000000)='./bus\x00', 0x2, 0x0) ioctl$FIOASYNC(r3, 0x80017472, &(0x7f0000000040)) 2.149869862s ago: executing program 4: compat_43_osethostname(&(0x7f0000000040)="fc62841baec903df982213317a4793c8885d09261f74784d7116214b013c05d89aa37a1a05b0668e856bf5e71d25c7f23690b60d79335d4732c846c055077446a82cf7f10b10100ed7a7f166ebf8eb4fcd6b159de9c1eddcbf2c1e78792393ddd9a9431fe7b7d0b1dd2bba805bf15913fed1a1f3a90887233fdb7ce17c24f6227e0a2d2d30ced838db8a169832942a56c8381b1abbd3416dae4e9de3e953aad49b00cda995c4d168b8eb04fa8adc4d9efa13585e2ce370eb6fee67d4963490acff8ac3c3ff159d252b699162dd612d079451b3d40d740bab826d71fe51e5a532b5760b87c4c8895c2f44ce36301759acd6", 0xf1) __mount50(&(0x7f0000000000)='union\x00', 0x0, 0x0, 0x0, 0x0) socket(0x2, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) mknod(0x0, 0x0, 0x4100) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0}, 0x10) modctl$MODCTL_LOAD(0x0, &(0x7f0000000000)={&(0x7f0000000100)="c8b8e19e5ef9fc00000000000000000000ab521f721c6ecfb2586bc93ecd3d4632ccf117cd46c6de5ae871bb4b2b2386adbee9adbff1d6212cc9031b1809", 0x0, 0x0}) mknod(&(0x7f0000000280)='./file0\x00', 0x1040, 0x0) symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00') chflags(&(0x7f0000000200)='./file0\x00', 0x20000) unlink(0x0) modctl$MODCTL_LOAD(0x0, 0x0) mknod(0x0, 0x0, 0xe03) r1 = socket$inet(0x2, 0x0, 0x0) getsockopt(r1, 0x0, 0x1a, 0x0, 0x0) swapctl$SWAP_ON(0x1, &(0x7f0000000000), 0x0) r2 = open$dir(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) compat_43_ocreat(0x0, 0x0) compat_40_mount(&(0x7f0000000040)='tmpfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000180)="01") r3 = open(&(0x7f0000000480)='./file0\x00', 0x40, 0x8) write(r3, &(0x7f0000000040)='\t', 0xa) write(0xffffffffffffffff, &(0x7f0000000040)='\t', 0xa) ioctl$FIOASYNC(r2, 0x80067409, &(0x7f0000000140)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) open(&(0x7f00000000c0)='./file0\x00', 0x201, 0x0) r4 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fcntl$lock(r4, 0x9, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x100000001}) open(&(0x7f00000000c0)='./file0\x00', 0x205, 0x0) 2.012984713s ago: executing program 1: mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0) open(0x0, 0x0, 0x0) setrlimit(0x6, &(0x7f00000000c0)) mlockall(0x1) mlockall(0x3) compat_43_ommap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0xffffffffffffffff, 0x0) __getvfsstat90(&(0x7f0000001d00), 0xce0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) pipe(&(0x7f0000000280)={0xffffffffffffffff}) r1 = getpid() mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = socket(0x18, 0x2, 0x0) setsockopt(r2, 0x1000000029, 0x3e, &(0x7f0000000000)="5ab7776a", 0x4) r3 = socket$inet6(0x18, 0x3, 0x0) dup2(r2, r3) getsockopt(r3, 0x29, 0x3e, 0x0, 0x0) fktrace(r0, 0x0, 0x62e2dd08f149ff1b, r1) setpriority(0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet(0x2, 0x2, 0x0) socket(0x0, 0x0, 0x0) mknod(&(0x7f0000000080)='./file0\x00', 0x2000, 0x5200) r5 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) close(r5) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2}) semctl$SETALL(0x0, 0x0, 0x9, &(0x7f0000000040)=[0x7ff]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r6 = socket(0x18, 0x1, 0x0) setsockopt(r6, 0x1000000029, 0xc, &(0x7f0000000040)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) fcntl$lock(r4, 0xa, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) 1.740802444s ago: executing program 3: madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1) __clock_settime50(0x0, &(0x7f0000000040)) open$dir(0x0, 0x0, 0x0) mkdirat(0xffffffffffffffff, 0x0, 0x0) __mount50(&(0x7f00000002c0)='overlay\x00', &(0x7f0000000040)='.\x00', 0x0, &(0x7f0000000540), 0x0) mknod(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8000, 0x0) socket(0x12, 0x2, 0x0) socket$inet6(0x18, 0x3, 0x0) compat_40_mount(&(0x7f0000000140)='tmpfs\x00', 0x0, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) compat_30___stat13(&(0x7f00000001c0)='./file0/file0\x00', &(0x7f0000000280)) getsid(0x0) compat_50___msgctl13$IPC_STAT(0xffffffffffffffff, 0x2, 0x0) lchown(0x0, 0x0, 0xffffffffffffffff) compat_40_mount(0x0, 0x0, 0x0, 0x0) unlink(0x0) __clone(0x0, 0x0) __clone(0x0, 0x0) minherit(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0) __clone(0x0, 0x0) lchown(&(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = socket$inet(0x2, 0x2, 0x0) getppid() setsockopt$inet_opts(r0, 0x0, 0x200000000000c, &(0x7f0000000240)="ea00004100000010", 0x8) open(&(0x7f0000000040)='./file0\x00', 0x200, 0x0) ptrace(0x0, 0x0, 0x0, 0x0) fchroot(r0) __getfh30(0x0, 0x0, 0x0) __fhstat50(&(0x7f0000000300)="f74dcbc9f38391397be977c9118f071853c3bce0bdc31c9c4a2ef2c707731ac97927eddb675cbad7965c17715aa7838a680d9af7c9f0fbff08ca32062c86661f288c97fe116598288e1f27a57bf8aeaa5d8bcc34df9fe0598478c6b18d1be395dd82e27be1", 0x65, &(0x7f0000000480)) msgget$private(0x0, 0x0) 808.714017ms ago: executing program 1: r0 = msgget$private(0x0, 0x0) msgctl$IPC_RMID(r0, 0x0) open(0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) socket(0x0, 0x0, 0x0) getsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) getsid(0x0) msgrcv(r0, 0x0, 0x0, 0x1, 0x0) msgget$private(0x0, 0x0) (async) msgctl$IPC_RMID(r0, 0x0) (async) open(0x0, 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) (async) socket(0x0, 0x0, 0x0) (async) getsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) (async) getsid(0x0) (async) msgrcv(r0, 0x0, 0x0, 0x1, 0x0) (async) 332.015329ms ago: executing program 5: r0 = getsid(0x0) ptrace(0x9, r0, 0x0, 0x0) compat_40_mount(&(0x7f0000000040)='hfs\x00', &(0x7f0000000080)='./file0\x00', 0xaf81e21248661df6, &(0x7f00000001c0)="761969f3669a513147cbf77e172169b04cb4") __wait450(r0, &(0x7f0000000000), 0x8, &(0x7f0000000280)) compat_50_wait4(0x0, 0x0, 0x0, 0x0) compat_40_mount(&(0x7f0000000000)='tmpfs\x00', &(0x7f00000003c0)='.\x00', 0x0, &(0x7f0000000140)="01") ktrace(&(0x7f0000000200)='./file0\x00', 0x1, 0xf, r0) socket(0x0, 0x0, 0x0) open(0x0, 0x0, 0x0) pipe(0x0) ioctl$FIOSEEKHOLE(0xffffffffffffffff, 0xc118691d, 0x0) pread(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$FIOSEEKHOLE(0xffffffffffffffff, 0x8118691c, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) compat_43_ocreat(&(0x7f0000000000)='./file0\x00', 0x0) __mount50(0x0, 0x0, 0x0, 0x0, 0x0) __clock_getres50(0x0, 0x0) chflags(0x0, 0x0) acct(&(0x7f00000000c0)='./file0\x00') modctl$MODCTL_UNLOAD(0x4, &(0x7f0000000000)) r1 = getpgrp() getsid(r1) fcntl$lock(0xffffffffffffffff, 0x8, &(0x7f0000000080)={0x1, 0x0, 0xfc, 0x80000000}) pathconf(0x0, 0x6) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) ktrace(0x0, 0x0, 0x0, 0x0) _lwp_setprivate(0xffffffffffffffff) posix_spawn(0xffffffffffffffff, &(0x7f0000000240)='\'\xff', &(0x7f0000000340)={0x401, 0x0, 0x0}, &(0x7f0000000380)={0x0, 0x0, {0x1}, 0x7ff, {[0x100002, 0xfffffffe, 0x0, 0x1]}, {[0x0, 0x101, 0xbf43, 0x65ee]}}, &(0x7f0000000740), &(0x7f0000000600)=['\xe5\xfc\xcbf*\x97\xef(\x85\xda[e\x86\x84\x91\xcc\"t\x13Y\xfe\xc5Xl\":5\xc5jALGu+\x80!\xd3\x02B\x93\xf0\xe6\x88\xd9]\xab\x95\x1e\xae\xa0\xe6\xad\x88\xc1\x92\xd3\xea\x80\xdd\x04\xf0\xd2\xd5.\xfb\"\x82\xee\x84\x86\x97`\x91&\xfa.\xa8\xf2\xc1\\\xbc\x18sD(p-\xb4\x04\x99\xd8\xa0\xdd\x95Z\xd5\xed\x8f\x98\xa8?R\xa6\x03\x0e\tPZ\xdf\xc5\r_\x81\xc1\xf6q\xf6j:\xeet\x0e\x1d\xaf\xf8\xfe\x11i\xce`1l\xfa~4J\xe5\xe0\x19\xd9\'\xdc\xd4\x82%\xb2C\x05\x80r\x8e,W\x8e\xd2\x19\x91\x90,\xc8 \x16R\f\aH\xbb\xe6\x80\x8a\xde\x10\f\xf9Y\xd4\xb6\x9d\xaa\xaf\x1d\xb9\x02\x1d\x8ae\x9bK\xe8212U\xacq\x1d\x14\x19\x19\xf2\xbc+,\x89Z\xa4\xa7\x8b\x16\x1eN\xd5\x04`\x93\x16zR\xe8\xaa\x83/[\x18\xa7\xe1\xc6\xbb\x82u}\xc4&[,\x19-=\x87S\x02`\x8e\xaf5E;\xe6&*_Ce\xfc\xa5\x8c\xff\x1a,', 'umap\x00', '\x00\x00i\x14\x97p\x1e C\xc6\xcaP\xd6\xb4\xa3\xd4e\x04(HU\xa9hWGj\x10\xf5\xbd\x9c{\xdc\x81\x1d\xb9\x83\x1a\xb0\xd6\xc0G\x1c\xbc\xffDVF\x81?r\xd2\x87\x90']) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$FIOSEEKHOLE(r2, 0x80206931, &(0x7f0000000180)=0x8000080000000039) 0s ago: executing program 2: mknod(&(0x7f00000000c0)='./file0\x00', 0x1000, 0x29b3) __mount50(&(0x7f0000000000)='overlay\x00', &(0x7f0000000040)='.\x00', 0x0, &(0x7f0000000540), 0x0) compat_40_mount(0x0, &(0x7f00000000c0)='.\x00', 0x400000, &(0x7f00000001c0)) compat_50___msgctl13$IPC_STAT(0x0, 0x2, &(0x7f00000003c0)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x2d6f}}) mknod(&(0x7f00000000c0)='./bus\x00', 0x2000, 0x4f4b) r0 = socket$inet(0x2, 0x0, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) __fstat50(r1, 0x0) mknod(&(0x7f0000000200)='./file0\x00', 0x2000, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/95, 0x5f}], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mknod(0x0, 0x0, 0x0) compat_43_orecvmsg(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) _lwp_wakeup(0x0) mknod(0x0, 0x0, 0x5300) __fhopen40(0x0, 0x0, 0x0) r2 = open$dir(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000000)='./file1\x00', 0x2000, 0xa718) __lstat50(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)={0x0}) mknod(&(0x7f00000000c0)='./bus\x00', 0x2000, r3) fcntl$getflags(r0, 0x1) r4 = open$dir(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) readv(r4, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/31, 0x1f}], 0x1) ioctl$FIOASYNC(r2, 0x80104307, &(0x7f00000001c0)) open$dir(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.68' (ED25519) to the list of known hosts. 2024/06/11 16:56:25 fuzzer started 2024/06/11 16:56:26 dialing manager at 10.128.0.163:30036 2024/06/11 16:56:26 starting 6 executor processes [ 58.2542978] uhub2: device problem, disabling port 1 [ 58.8342999] tap0: detached [ 59.5542954] uhub2: device problem, disabling port 1 [ 59.7742971] uhub5: device problem, disabling port 1 [ 60.4242944] uhub5: device problem, disabling port 1 [ 60.5742945] WARNING: module error: vfs load failed for `', error 78 [ 61.1043109] uhub5: device problem, disabling port 1 [ 62.8443043] tap4: detached [ 64.4542969] tap3: detached [ 65.1742932] tap5: detached [ 67.8142929] tap3: detached [ 68.1042938] tap4: detached [ 68.2942924] .: failed to start extattr, error = 0[ 70.4242907] tap0: detached [ 70.8742905] tap2: detached [ 72.5042919] tap5: detached [ 72.6142903] tap3: detached [ 74.3742929] uhub3: device problem, disabling port 1 [ 75.1142911] tap4: detached [ 77.4143083] tap5: detached [ 77.5342897] WARNING: defaulted mmap() share type to MAP_PRIVATE (pid 1334 command syz-executor.4) [ 78.5742911] tap1: detached [ 80.9542896] WARNING: module error: vfs load failed for `^', error 78 [ 81.1042899] tap5: detached [ 82.7142887] panic: ASan: Unauthorized Access In 0xffffffff814f3cbd: Addr 0xffffd30014136ff0 [4 bytes, read, PoolUseAfterFree] [ 82.7300655] cpu0: Begin traceback... [ 82.7342759] vpanic() at netbsd:vpanic+0x282 [ 82.7742770] panic() at netbsd:panic+0x9e [ 82.8142780] kasan_report() at netbsd:kasan_report+0x8f [ 82.8442796] __asan_load4() at netbsd:__asan_load4+0x9d [ 82.8742784] igmp_leavegroup() at netbsd:igmp_leavegroup+0xd5 [ 82.8942782] in_delmulti() at netbsd:in_delmulti+0xb1 [ 82.9242772] in_purgeifmcast() at netbsd:in_purgeifmcast+0x14b [ 82.9442885] inpcb_purgeif0() at netbsd:inpcb_purgeif0+0x111 [ 82.9742789] udp_purgeif_wrapper() at netbsd:udp_purgeif_wrapper+0x4e [ 83.0042807] if_detach() at netbsd:if_detach+0x768 [ 83.0342781] tap_detach() at netbsd:tap_detach+0xe8 [ 83.0642786] config_detach_release() at netbsd:config_detach_release+0x3d7 [ 83.0942810] tap_clone_destroyer() at netbsd:tap_clone_destroyer+0x2d [ 83.1242820] tap_clone_destroy() at netbsd:tap_clone_destroy+0x2c [ 83.1542788] doifioctl() at netbsd:doifioctl+0x14b7 [ 83.1742799] soo_ioctl() at netbsd:soo_ioctl+0x3cc [ 83.2042819] sys_ioctl() at netbsd:sys_ioctl+0x8f6 [ 83.2242785] syscall() at netbsd:syscall+0x246 [ 83.2357598] --- syscall (number 54) --- [ 83.2457819] netbsd:syscall+0x246: [ 83.2545745] cpu0: End traceback... [ 83.2545745] fatal breakpoint trap in supervisor mode [ 83.2545745] trap type 1 code 0 rip 0xffffffff8023240d cs 0x8 rflags 0x286 cr2 0x77130580f702 ilevel 0x6 rsp 0xffffd30248946e60 [ 83.2722386] curlwp 0xffffd30012c02a80 pid 650.650 lowest kstack 0xffffd302489402c0 Stopped in pid 650.650 (ifconfig) at netbsd:breakpoint+0x5: leave ? breakpoint() at netbsd:breakpoint+0x5 db_panic() at netbsd:db_panic+0x105 vpanic() at netbsd:vpanic+0x282 panic() at netbsd:panic+0x9e kasan_report() at netbsd:kasan_report+0x8f __asan_load4() at netbsd:__asan_load4+0x9d igmp_leavegroup() at netbsd:igmp_leavegroup+0xd5 in_delmulti() at netbsd:in_delmulti+0xb1 in_purgeifmcast() at netbsd:in_purgeifmcast+0x14b inpcb_purgeif0() at netbsd:inpcb_purgeif0+0x111 udp_purgeif_wrapper() at netbsd:udp_purgeif_wrapper+0x4e if_detach() at netbsd:if_detach+0x768 tap_detach() at netbsd:tap_detach+0xe8 config_detach_release() at netbsd:config_detach_release+0x3d7 tap_clone_destroyer() at netbsd:tap_clone_destroyer+0x2d tap_clone_destroy() at netbsd:tap_clone_destroy+0x2c doifioctl() at netbsd:doifioctl+0x14b7 soo_ioctl() at netbsd:soo_ioctl+0x3cc sys_ioctl() at netbsd:sys_ioctl+0x8f6 syscall() at netbsd:syscall+0x246 --- syscall (number 54) --- netbsd:syscall+0x246: Panic string: ASan: Unauthorized Access In 0xffffffff814f3cbd: Addr 0xffffd30014136ff0 [4 bytes, read, PoolUseAfterFree] PID LID S CPU FLAGS STRUCT LWP * NAME WAIT 646 > 646 7 1 0 ffffd30013461940 syz-executor.2 650 > 650 7 0 0 ffffd30012c02a80 ifconfig 641 641 3 0 180 ffffd3001339e1c0 syz-executor.3 parked 3018 644 3 0 180 ffffd30014052080 syz-executor.5 parked 3018 643 3 1 180 ffffd30012a5bbc0 syz-executor.5 wait 3018 3018 3 0 10000180 ffffd30012bcd5c0 syz-executor.5 nanoslp 2615 3149 2 1 0 ffffd300129c1700 syz-executor.1 2886 2886 3 0 40180 ffffd3001407d500 syz-executor.0 wait 495 496 2 1 0 ffffd30012c4c2c0 syz-executor.3 495 495 2 1 10000000 ffffd30013348100 syz-executor.3 875 875 2 1 10040000 ffffd30012dcd940 syz-executor.4 615 615 4 1 1000000 ffffd30012dcd0c0 syz-executor.5 2622 2622 3 0 180 ffffd30013442340 syz-executor.1 nanoslp 2741 2741 3 0 180 ffffd30014133980 syz-executor.2 parked 2996 2996 3 0 180 ffffd30013ff7480 syz-executor.2 parked 2739 2739 3 0 180 ffffd30013ff7040 syz-executor.2 parked 1457 1457 3 1 180 ffffd30013f64740 syz-executor.4 parked 295 295 3 0 180 ffffd30012c87340 syz-executor.2 parked 294 294 3 0 180 ffffd30013f022c0 syz-executor.2 parked 293 293 3 0 180 ffffd30012ca0040 syz-executor.2 parked 384 384 3 1 180 ffffd30014133540 syz-executor.0 parked 2618 2618 3 1 180 ffffd30014133100 syz-executor.0 parked 1879 1879 3 1 180 ffffd30012ce0a00 syz-executor.0 parked 2271 2271 3 0 180 ffffd30013442780 syz-executor.4 nanoslp 1477 1477 3 0 180 ffffd30013484140 syz-executor.3 nanoslp 1833 1833 3 0 180 ffffd30013461500 syz-executor.1 parked 1720 1720 3 0 180 ffffd3001344b480 syz-executor.2 parked 1230 1057 3 1 180 ffffd30012be9600 syz-fuzzer parked 1230 1073 3 1 180 ffffd30013e6fb00 syz-fuzzer wait 1230 1206 3 1 180 ffffd30013e6f6c0 syz-fuzzer parked 1230 941 3 1 180 ffffd30013e27ac0 syz-fuzzer wait 1230 1108 3 1 180 ffffd30012b82100 syz-fuzzer wait 1230 990 3 0 180 ffffd30013df6640 syz-fuzzer wait 1230 829 3 1 180 ffffd30013dc81c0 syz-fuzzer wait 1230 1241 3 1 180 ffffd3001342e700 syz-fuzzer parked 1230 449 3 1 180 ffffd3001342e2c0 syz-fuzzer parked 1230 1223 3 0 180 ffffd300133aaa80 syz-fuzzer kqueue 1230 1023 3 1 180 ffffd300133aa640 syz-fuzzer wait 1230 1233 3 0 180 ffffd300133b8680 syz-fuzzer parked 1230 1230 3 1 180 ffffd30012ab34c0 syz-fuzzer parked 1238 1238 3 0 180 ffffd300133815c0 sshd select 1216 1216 3 0 180 ffffd300134849c0 getty nanoslp 943 943 3 1 180 ffffd30013484580 getty nanoslp 1225 1225 3 1 180 ffffd3001349b5c0 getty nanoslp 1184 1184 3 0 180 ffffd3001349b180 getty ttyraw 1107 1107 3 0 180 ffffd3001339ea40 sshd select 818 818 3 0 180 ffffd30012ab3900 powerd kqueue 700 700 3 0 180 ffffd3001342eb40 syslogd kqueue 746 746 3 0 180 ffffd30012c6c300 dhcpcd poll 745 745 3 0 180 ffffd30012c14680 dhcpcd poll 736 736 2 0 0 ffffd30012c4cb40 dhcpcd 602 602 3 0 180 ffffd30012c87780 dhcpcd poll 487 487 3 0 180 ffffd30012d9a900 dhcpcd poll 292 292 3 0 180 ffffd30012d9a4c0 dhcpcd poll 485 485 3 0 180 ffffd30012d9a080 dhcpcd poll 1 1 3 1 180 ffffd300128679c0 init wait 0 498 5 1 200 ffffd30013fed780 (zombie) 0 2140 3 1 200 ffffd30012be91c0 acctwatch actwat 0 1977 3 1 200 ffffd30012a2f740 ktrace ktrwait 0 1840 3 0 200 ffffd30014052900 ktrace ktrwait 0 1070 3 0 200 ffffd30012d30b80 ktrace ktrwait 0 674 3 0 200 ffffd300129c0280 physiod physiod 0 196 3 0 200 ffffd300129c12c0 pooldrain pooldrain 0 195 3 1 200 ffffd300129c0b00 ioflush syncer 0 194 3 1 200 ffffd300129c06c0 pgdaemon pgdaemon 0 167 3 1 200 ffffd30012990680 usb7 usbevt 0 172 3 0 200 ffffd30012990240 usb6 usbevt 0 170 3 0 200 ffffd3001293ba80 usb5 usbevt 0 168 3 0 200 ffffd3001293b640 usb4 usbevt 0 166 3 1 200 ffffd3001293b200 usb3 usbevt 0 165 3 1 200 ffffd300128d1a40 usb2 usbevt 0 31 3 0 200 ffffd300128d1600 usb1 usbevt 0 63 3 0 200 ffffd300128d11c0 usb0 usbevt 0 126 3 0 200 ffffd30012880a00 usbtask-dr usbtsk 0 125 3 1 200 ffffd300128805c0 usbtask-hc usbtsk 0 124 3 0 200 ffffd30010d66b00 swwreboot swwreboot 0 123 3 1 200 ffffd30012880180 npfgc0 npfgcw 0 122 2 0 200 ffffd30012867580 rt_free 0 121 3 0 200 ffffd30012867140 unpgc unpgc 0 120 3 0 200 ffffd3001270b980 key_timehandler key_timehandler 0 119 3 1 200 ffffd3001270b540 icmp6_wqinput/1 icmp6_wqinput 0 118 3 0 200 ffffd3001270b100 icmp6_wqinput/0 icmp6_wqinput 0 117 3 0 200 ffffd300126fd940 nd6_timer nd6_timer 0 116 3 1 200 ffffd300126fd500 carp6_wqinput/1 carp6_wqinput 0 115 3 0 200 ffffd300126fd0c0 carp6_wqinput/0 carp6_wqinput 0 114 3 1 200 ffffd300126ed900 carp_wqinput/1 carp_wqinput 0 113 3 0 200 ffffd300126ed4c0 carp_wqinput/0 carp_wqinput 0 112 3 1 200 ffffd300126ed080 icmp_wqinput/1 icmp_wqinput 0 111 3 0 200 ffffd300126db8c0 icmp_wqinput/0 icmp_wqinput 0 110 3 0 200 ffffd300126db040 rt_timer rt_timer 0 109 3 1 200 ffffd300126d9780 vmem_rehash vmem_rehash 0 100 3 0 200 ffffd300126d7300 entbutler entropy 0 99 3 1 200 ffffd300120bdb40 viomb balloon 0 98 3 1 200 ffffd300120bd700 vioif0_txrx/1 vioif0_txrx 0 97 3 0 200 ffffd300120bd2c0 vioif0_txrx/0 vioif0_txrx 0 30 3 0 200 ffffd30010d666c0 scsibus0 sccomp 0 29 3 0 200 ffffd30010d66280 pms0 pmsreset 0 28 3 1 200 ffffd30010cacac0 xcall/1 xcall 0 27 1 1 200 ffffd30010cac680 softser/1 0 > 26 7 1 200 ffffd30010cac240 softclk/1 0 25 1 1 200 ffffd30010ca9a80 softbio/1 0 24 1 1 200 ffffd30010ca9640 softnet/1 0 23 1 1 201 ffffd30010ca9200 idle/1 0 22 3 0 200 ffffd3000fb55a40 lnxsyswq lnxsyswq 0 21 3 0 200 ffffd3000fb55600 lnxubdwq lnxubdwq 0 20 3 0 200 ffffd3000fb551c0 lnxpwrwq lnxpwrwq 0 19 3 0 200 ffffd3000fb54a00 lnxlngwq lnxlngwq 0 18 3 0 200 ffffd3000fb545c0 lnxhipwq lnxhipwq 0 17 3 0 200 ffffd3000fb54180 lnxrcugc lnxrcugc 0 16 3 0 200 ffffd3000fb4d9c0 sysmon smtaskq 0 15 3 0 200 ffffd3000fb4d580 pmfsuspend pmfsuspend 0 14 3 0 200 ffffd3000fb4d140 pmfevent pmfevent 0 13 3 0 200 ffffd3000fb4a980 sopendfree sopendfr 0 12 3 0 200 ffffd3000fb4a540 ifwdog ifwdog 0 11 3 1 200 ffffd3000fb4a100 iflnkst iflnkst 0 10 3 0 200 ffffd3000fb3b940 nfssilly nfssilly 0 9 3 0 200 ffffd3000fb3b500 pooldisp pooldisp 0 8 3 1 200 ffffd3000fb3b0c0 modunload mod_unld 0 7 3 0 200 ffffd3000fb32900 xcall/0 xcall 0 6 1 0 200 ffffd3000fb324c0 softser/0 0 5 1 0 200 ffffd3000fb32080 softclk/0 0 4 1 0 200 ffffd3000fb308c0 softbio/0 0 3 1 0 200 ffffd3000fb30480 softnet/0 0 2 1 0 201 ffffd3000fb30040 idle/0 0 0 3 0 200 ffffffff83350200 swapper uvm [Locks tracked through LWPs] ****** LWP 646.646 (syz-executor.2) @ 0xffffd30013461940, l_stat=7 *** Locks held: * Lock 0 (initialized at netbsd:kcov_open+0x40) lock address : ffffd30014092580 type : sleep/adaptive initialized : netbsd:kcov_open+0x40 shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 0 relevant cpu : 1 last held: 1 relevant lwp : 0xffffd30013461940 last held: 0xffffd30013461940 last locked* : netbsd:kcov_fops_ioctl+0x28 unlocked : 0 owner field : 000000000000000000 wait/spin: 0/0 Turnstile: no active turnstile for this lock. * Lock 1 (initialized at netbsd:uvm_obj_init+0x9a) lock address : ffffd300141cd7c0 type : sleep/adaptive initialized : netbsd:uvm_obj_init+0x9a shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 0 relevant cpu : 1 last held: 1 relevant lwp : 0xffffd30013461940 last held: 0xffffd30013461940 last locked* : netbsd:uvm_fault_internal+0x3f45 unlocked : netbsd:uao_get+0x3bd owner/count : 000000000000000000 flags : 000000000000000000 Turnstile: no active turnstile for this lock. *** Locks wanted: none ****** LWP 650.650 (ifconfig) @ 0xffffd30012c02a80, l_stat=7 *** Locks held: * Lock 0 (initialized at netbsd:ifinit1+0x23) lock address : netbsd:if_clone_mtx type : sleep/adaptive initialized : netbsd:ifinit1+0x23 shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 0 relevant cpu : 0 last held: 0 relevant lwp : 0xffffd30012c02a80 last held: 0xffffd30012c02a80 last locked* : netbsd:doifioctl+0x137a unlocked : netbsd:doifioctl+0x1500 owner field : 0xffffd30012c02a80 wait/spin: 0/0 Turnstile: no active turnstile for this lock. * Lock 1 (initialized at netbsd:soinit+0x1f9) lock address : ffffd3000f68a880 type : sleep/adaptive initialized : netbsd:soinit+0x1f9 shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 0 relevant cpu : 0 last held: 0 relevant lwp : 0xffffd30012c02a80 last held: 0xffffd30012c02a80 last locked* : netbsd:udp_purgeif_wrapper+0x3f unlocked : netbsd:rip_purgeif_wrapper+0x7d owner field : 0xffffd30012c02a80 wait/spin: 0/0 Turnstile: no active turnstile for this lock. * Lock 2 (initialized at netbsd:in_init+0xe8) lock address : netbsd:in_multilock type : sleep/adaptive initialized : netbsd:in_init+0xe8 shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 0 relevant cpu : 0 last held: 0 relevant lwp : 0xffffd30012c02a80 last held: 0xffffd30012c02a80 last locked* : netbsd:in_delmulti+0x7c unlocked : netbsd:in_purgeif+0x46 owner/count : 0xffffd30012c02a80 flags : 0x0000000000000004 Turnstile: no active turnstile for this lock. *** Locks wanted: * Lock 0 (initialized at netbsd:module_hook_init+0x1c) lock address : netbsd:module_hook type : sleep/adaptive initialized : netbsd:module_hook_init+0x1c shared holds : 0 exclusive: 0 shares wanted: 0 exclusive: 0 relevant cpu : 0 last held: 0 relevant lwp : 0xffffd30012c02a80 last held: 000000000000000000 last locked : 0 unlocked* : 0 owner field : 000000000000000000 wait/spin: 0/0 Turnstile: no active turnstile for this lock. ****** LWP 3018.644 (syz-executor.5) @ 0xffffd30014052080, l_stat=3 *** Locks held: none *** Locks wanted: * Lock 0 (initialized at netbsd:module_hook_init+0x1c) lock address : netbsd:module_hook type : sleep/adaptive initialized : netbsd:module_hook_init+0x1c shared holds : 0 exclusive: 0 shares wanted: 0 exclusive: 0 relevant cpu : 0 last held: 0 relevant lwp : 0xffffd30014052080 last held: 000000000000000000 last locked : 0 unlocked* : 0 owner field : 000000000000000000 wait/spin: 0/0 Turnstile: no active turnstile for this lock. ****** LWP 2615.3149 (syz-executor.1) @ 0xffffd300129c1700, l_stat=2 *** Locks held: * Lock 0 (initialized at netbsd:fork1+0x365) lock address : ffffd3001344e6d0 type : sleep/adaptive initialized : netbsd:fork1+0x365 shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 0 relevant cpu : 1 last held: 1 relevant lwp : 0xffffd300129c1700 last held: 0xffffd300129c1700 last locked* : netbsd:exit1+0x2f2 unlocked : 0 owner/count : 0xffffd300129c1700 flags : 0x0000000000000004 Turnstile: no active turnstile for this lock. *** Locks wanted: none ****** LWP 495.496 (syz-executor.3) @ 0xffffd30012c4c2c0, l_stat=2 *** Locks held: none *** Locks wanted: * Lock 0 (initialized at netbsd:module_hook_init+0x1c) lock address : netbsd:module_hook type : sleep/adaptive initialized : netbsd:module_hook_init+0x1c shared holds : 0 exclusive: 0 shares wanted: 0 exclusive: 0 relevant cpu : 1 last held: 0 relevant lwp : 0xffffd30012c4c2c0 last held: 000000000000000000 last locked : 0 unlocked* : 0 owner field : 000000000000000000 wait/spin: 0/0 Turnstile: no active turnstile for this lock. ****** LWP 875.875 (syz-executor.4) @ 0xffffd30012dcd940, l_stat=2 *** Locks held: none *** Locks wanted: * Lock 0 (initialized at netbsd:xc_init_cpu+0xc3) lock address : netbsd:xc_low_pri type : sleep/adaptive initialized : netbsd:xc_init_cpu+0xc3 shared holds : 0 exclusive: 0 shares wanted: 0 exclusive: 1 relevant cpu : 1 last held: 0 relevant lwp : 0xffffd30012dcd940 last held: 000000000000000000 last locked : netbsd:xc_wait+0x182 unlocked* : netbsd:xc_wait+0x1ac owner field : 000000000000000000 wait/spin: 0/0 Turnstile: no active turnstile for this lock. ****** LWP 745.745 (dhcpcd) @ 0xffffd30012c14680, l_stat=3 *** Locks held: none *** Locks wanted: * Lock 0 (initialized at netbsd:module_hook_init+0x1c) lock address : netbsd:module_hook type : sleep/adaptive initialized : netbsd:module_hook_init+0x1c shared holds : 0 exclusive: 0 shares wanted: 0 exclusive: 0 relevant cpu : 0 last held: 0 relevant lwp : 0xffffd30012c14680 last held: 000000000000000000 last locked : 0 unlocked* : 0 owner field : 000000000000000000 wait/spin: 0/0 Turnstile: no active turnstile for this lock. ****** LWP 736.736 (dhcpcd) @ 0xffffd30012c4cb40, l_stat=2 *** Locks held: none *** Locks wanted: * Lock 0 (initialized at netbsd:module_hook_init+0x1c) lock address : netbsd:module_hook type : sleep/adaptive initialized : netbsd:module_hook_init+0x1c shared holds : 0 exclusive: 0 shares wanted: 0 exclusive: 0 relevant cpu : 0 last held: 0 relevant lwp : 0xffffd30012c4cb40 last held: 000000000000000000 last locked : 0 unlocked* : 0 owner field : 000000000000000000 wait/spin: 0/0 Turnstile: no active turnstile for this lock. ****** LWP 292.292 (dhcpcd) @ 0xffffd30012d9a4c0, l_stat=3 *** Locks held: none *** Locks wanted: * Lock 0 (initialized at netbsd:module_hook_init+0x1c) lock address : netbsd:module_hook type : sleep/adaptive initialized : netbsd:module_hook_init+0x1c shared holds : 0 exclusive: 0 shares wanted: 0 exclusive: 0 relevant cpu : 0 last held: 0 relevant lwp : 0xffffd30012d9a4c0 last held: 000000000000000000 last locked : 0 unlocked* : 0 owner field : 000000000000000000 wait/spin: 0/0 Turnstile: no active turnstile for this lock. ****** LWP 485.485 (dhcpcd) @ 0xffffd30012d9a080, l_stat=3 *** Locks held: none *** Locks wanted: * Lock 0 (initialized at netbsd:module_hook_init+0x1c) lock address : netbsd:module_hook type : sleep/adaptive initialized : netbsd:module_hook_init+0x1c shared holds : 0 exclusive: 0 shares wanted: 0 exclusive: 0 relevant cpu : 0 last held: 0 relevant lwp : 0xffffd30012d9a080 last held: 000000000000000000 last locked : 0 unlocked* : 0 owner field : 000000000000000000 wait/spin: 0/0 Turnstile: no active turnstile for this lock. ****** LWP 0.26 (softclk/1) @ 0xffffd30010cac240, l_stat=7 *** Locks held: none *** Locks wanted: * Lock 0 (initialized at netbsd:module_hook_init+0x1c) lock address : netbsd:module_hook type : sleep/adaptive initialized : netbsd:module_hook_init+0x1c shared holds : 0 exclusive: 0 shares wanted: 0 exclusive: 0 relevant cpu : 1 last held: 0 relevant lwp : 0xffffd30010cac240 last held: 000000000000000000 last locked : 0 unlocked* : 0 owner field : 000000000000000000 wait/spin: 0/0 Turnstile: no active turnstile for this lock. ****** LWP 0.11 (iflnkst) @ 0xffffd3000fb4a100, l_stat=3 *** Locks held: none *** Locks wanted: * Lock 0 (initialized at netbsd:module_hook_init+0x1c) lock address : netbsd:module_hook type : sleep/adaptive initialized : netbsd:module_hook_init+0x1c shared holds : 0 exclusive: 0 shares wanted: 0 exclusive: 0 relevant cpu : 1 last held: 0 relevant lwp : 0xffffd3000fb4a100 last held: 000000000000000000 last locked : 0 unlocked* : 0 owner field : 000000000000000000 wait/spin: 0/0 Turnstile: no active turnstile for this lock. ****** LWP 0.5 (softclk/0) @ 0xffffd3000fb32080, l_stat=1 *** Locks held: none *** Locks wanted: * Lock 0 (initialized at netbsd:module_hook_init+0x1c) lock address : netbsd:module_hook type : sleep/adaptive initialized : netbsd:module_hook_init+0x1c shared holds : 0 exclusive: 0 shares wanted: 0 exclusive: 0 relevant cpu : 0 last held: 0 relevant lwp : 0xffffd3000fb32080 last held: 000000000000000000 last locked : 0 unlocked* : 0 owner field : 000000000000000000 wait/spin: 0/0 Turnstile: no active turnstile for this lock. ****** LWP 0.0 (swapper) @ 0xffffffff83350200, l_stat=3 *** Locks held: none *** Locks wanted: * Lock 0 (initialized at netbsd:module_hook_init+0x1c) lock address : netbsd:module_hook type : sleep/adaptive initialized : netbsd:module_hook_init+0x1c shared holds : 0 exclusive: 0 shares wanted: 0 exclusive: 0 relevant cpu : 0 last held: 0 relevant lwp : 0xffffffff83350200 last held: 000000000000000000 last locked : 0 unlocked* : 0 owner field : 000000000000000000 wait/spin: 0/0 Turnstile: no active turnstile for this lock. [Locks tracked through CPUs] ******* Locks held on cpu0: * Lock 0 (initialized at netbsd:main+0x11e) lock address : netbsd:kernel_lock type : spin initialized : netbsd:main+0x11e shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 0 relevant cpu : 0 last held: 0 relevant lwp : 0xffffd30012c02a80 last held: 0xffffd30012c02a80 last locked* : netbsd:sleepq_block+0x5d7 unlocked : netbsd:route_intr+0x158 curcpu holds : 3 wanted by: 000000000000000000 * Lock 1 (initialized at netbsd:kprintf_init+0x61) lock address : netbsd:kprintf_mtx type : spin initialized : netbsd:kprintf_init+0x61 shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 0 relevant cpu : 0 last held: 0 relevant lwp : 0xffffd30012c02a80 last held: 0xffffd30012c02a80 last locked* : netbsd:kprintf_lock+0x33 unlocked : netbsd:kprintf_unlock+0x53 owner field : 0x0000000000000800 wait/spin: 0/1 PAGE FLAG PQ UOBJECT UANON 0xffffd30000017180 0041 00000000 0x0 0x0 0xffffd30000017200 0041 00000000 0x0 0x0 0xffffd30000017280 0041 00000000 0x0 0x0 0xffffd30000017300 0041 00000000 0x0 0x0 0xffffd30000017380 0041 00000000 0x0 0x0 0xffffd30000017400 0041 00000000 0x0 0x0 0xffffd30000017480 0041 00000000 0x0 0x0 0xffffd30000017500 0041 00000000 0x0 0x0 0xffffd30000017580 0041 00000000 0x0 0x0 0xffffd30000017600 0041 00000000 0x0 0x0 0xffffd30000017680 0041 00000000 0x0 0x0 0xffffd30000017700 0041 00000000 0x0 0x0 0xffffd30000017780 0041 00000000 0x0 0x0 0xffffd30000017800 0041 00000000 0x0 0x0 0xffffd30000017880 0041 00000000 0x0 0x0 0xffffd30000017900 0041 00000000 0x0 0x0 0xffffd30000017980 0041 00000000 0x0 0x0 0xffffd30000017a00 0041 00000000 0x0 0x0 0xffffd30000017a80 0041 00000000 0x0 0x0 0xffffd30000017b00 0041 00000000 0x0 0x0 0xffffd30000017b80 0041 00000000 0x0 0x0 0xffffd30000017c00 0041 00000000 0x0 0x0 0xffffd30000017c80 0041 00000000 0x0 0x0 0xffffd30000017d00 0041 00000000 0x0 0x0 0xffffd30000017d80 0041 00000000 0x0 0x0 0xffffd30000017e00 0041 00000000 0x0 0x0 0xffffd30000017e80 0041 00000000 0x0 0x0 0xffffd30000017f00 0041 00000000 0x0 0x0 0xffffd30000017f80 0041 00000000 0x0 0x0 0xffffd30000018000 0041 00000000 0x0 0x0 0xffffd30000018080 0041 00000000 0x0 0x0 0xffffd30000018100 0041 00000000 0x0 0x0 0xffffd30000018180 0041 00000000 0x0 0x0 0xffffd30000018200 0041 00000000 0x0 0x0 0xffffd30000018280 0041 00000000 0x0 0x0 0xffffd30000018300 0041 00000000 0x0 0x0 0xffffd30000018380 0041 00000000 0x0 0x0 0xffffd30000018400 0041 00000000 0x0 0x0 0xffffd30000018480 0041 00000000 0x0 0x0 0xffffd30000018500 0041 00000000 0x0 0x0 0xffffd30000018580 0041 00000000 0x0 0x0 0xffffd30000018600 0041 00000000 0x0 0x0 0xffffd30000018680 0041 00000000 0x0 0x0 0xffffd30000018700 0041 00000000 0x0 0x0 0xffffd30000018780 0041 00000000 0x0 0x0 0xffffd30000018800 0041 00000000 0x0 0x0 0xffffd30000018880 0041 00000000 0x0 0x0 0xffffd30000018900 0041 00000000 0x0 0x0 0xffffd30000018980 0041 00000000 0x0 0x0 0xffffd30000018a00 0041 00000000 0x0 0x0 0xffffd30000018a80 0041 00000000 0x0 0x0 0xffffd30000018b00 0041 00000000 0x0 0x0 0xffffd30000018b80 0041 00000000 0x0 0x0 0xffffd30000018c00 0041 00000000 0x0 0x0 0xffffd30000018c80 0041 00000000 0x0 0x0 0xffffd30000018d00 0041 00000000 0x0 0x0 0xffffd30000018d80 0041 00000000 0x0 0x0 0xffffd30000018e00 0041 00000000 0x0 0x0 0xffffd30000018e80 0041 00000000 0x0 0x0 0xffffd30000018f00 0041 00000000 0x0 0x0 0xffffd30000018f80 0041 00000000 0x0 0x0 0xffffd30000019000 0041 00000000 0x0 0x0 0xffffd30000019080 0041 00000000 0x0 0x0 0xffffd30000019100 0041 00000000 0x0 0x0 0xffffd30000019180 0041 00000000 0x0 0x0 0xffffd30000019200 0041 00000000 0x0 0x0 0xffffd30000019280 0041 00000000 0x0 0x0 0xffffd30000019300 0041 00000000 0x0 0x0 0xffffd30000019380 0041 00000000 0x0 0x0 0xffffd30000019400 0041 00000000 0x0 0x0 0xffffd30000019480 0041 00000000 0x0 0x0 0xffffd30000019500 0041 00000000 0x0 0x0 0xffffd30000019580 0041 00000000 0x0 0x0 0xffffd30000019600 0041 00000000 0x0 0x0 0xffffd30000019680 0041 00000000 0x0 0x0 0xffffd30000019700 0041 00000000 0x0 0x0 0xffffd30000019780 0041 00000000 0x0 0x0 0xffffd30000019800 0041 00000000 0x0 0x0 0xffffd30000019880 0041 00000000 0x0 0x0 0xffffd30000019900 0041 00000000 0x0 0x0 0xffffd30000019980 0041 00000000 0x0 0x0 0xffffd30000019a00 0041 00000000 0x0 0x0 0xffffd30000019a80 0041 00000000 0x0 0x0 0xffffd30000019b00 0041 00000000 0x0 0x0 0xffffd30000019b80 0041 00000000 0x0 0x0 0xffffd30000019c00 0041 00000000 0x0 0x0 0xffffd30000019c80 0041 00000000 0x0 0x0 0xffffd30000019d00 0041 00000000 0x0 0x0 0xffffd30000019d80 0041 00000000 0x0 0x0 0xffffd30000019e00 0041 00000000 0x0 0x0 0xffffd30000019e80 0041 00000000 0x0 0x0 0xffffd30000019f00 0041 00000000 0x0 0x0 0xffffd30000019f80 0041 00000000 0x0 0x0 0xffffd3000001a000 0041 00000000 0x0 0x0 0xffffd3000001a080 0041 00000000 0x0 0x0 0xffffd3000001a100 0041 00000000 0x0 0x0 0xffffd3000001a180 0041 00000000 0x0 0x0 0xffffd3000001a200 0041 00000000 0x0 0x0 0xffffd3000001a280 0041 00000000 0x0 0x0 0xffffd3000001a300 0041 00000000 0x0 0x0 0xffffd3000001a380 0041 00000000 0x0 0x0 0xffffd3000001a400 0041 00000000 0x0 0x0 0xffffd3000001a480 0041 00000000 0x0 0x0 0xffffd3000001a500 0041 00000000 0x0 0x0 0xffffd3000001a580 0041 00000000 0x0 0x0 0xffffd3000001a600 0041 00000000 0x0 0x0 0xffffd3000001a680 0041 00000000 0x0 0x0 0xffffd3000001a700 0041 00000000 0x0 0x0 0xffffd3000001a780 0041 00000000 0x0 0x0 0xffffd3000001a800 0041 00000000 0x0 0x0 0xffffd3000001a880 0041 00000000 0x0 0x0 0xffffd3000001a900 0041 00000000 0x0 0x0 0xffffd3000001a980 0041 00000000 0x0 0x0 0xffffd3000001aa00 0041 00000000 0x0 0x0 0xffffd3000001aa80 0041 00000000 0x0 0x0 0xffffd3000001ab00 0041 00000000 0x0 0x0 0xffffd3000001ab80 0041 00000000 0x0 0x0 0xffffd3000001ac00 0041 00000000 0x0 0x0 0xffffd3000001ac80 0041 00000000 0x0 0x0 0xffffd3000001ad00 0041 00000000 0x0 0x0 0xffffd3000001ad80 0041 00000000 0x0 0x0 0xffffd3000001ae00 0041 00000000 0x0 0x0 0xffffd3000001ae80 0041 00000000 0x0 0x0 0xffffd3000001af00 0041 00000000 0x0 0x0 0xffffd3000001af80 0041 00000000 0x0 0x0 0xffffd3000001b000 0041 00000000 0x0 0x0 0xffffd3000001b080 0041 00000000 0x0 0x0 0xffffd3000001b100 0041 00000000 0x0 0x0 0xffffd3000001b180 0041 00000000 0x0 0x0 0xffffd3000001b200 0041 00000000 0x0 0x0 0xffffd3000001b280 0041 00000000 0x0 0x0 0xffffd3000001b300 0041 00000000 0x0 0x0 0xffffd3000001b380 0041 00000000 0x0 0x0 0xffffd3000001b400 0041 00000000 0x0 0x0 0xffffd3000001b480 0041 00000000 0x0 0x0 0xffffd3000001b500 0041 00000000 0x0 0x0 0xffffd3000001b580 0041 00000000 0x0 0x0 0xffffd3000001b600 0041 00000000 0x0 0x0 0xffffd3000001b680 0041 00000000 0x0 0x0 0xffffd3000001b700 0041 00000000 0x0 0x0 0xffffd3000001b780 0041 00000000 0x0 0x0 0xffffd3000001b800 0041 00000000 0x0 0x0 0xffffd3000001b880 0041 00000000 0x0 0x0 0xffffd3000001b900 0041 00000000 0x0 0x0 0xffffd3000001b980 0041 00000000 0x0 0x0 0xffffd3000001ba00 0041 00000000 0x0 0x0 0xffffd3000001ba80 0041 00000000 0x0 0x0 0xffffd3000001bb00 0001 00000000 0x0 0x0 0xffffd3000001bb80 0001 00000000 0x0 0x0 0xffffd3000001bc00 0001 00000000 0x0 0x0 0xffffd3000001bc80 0001 00000000 0x0 0x0 0xffffd3000001bd00 0001 00000000 0x0 0x0 0xffffd3000001bd80 0001 00000000 0x0 0x0 0xffffd3000001be00 0001 00000000 0x0 0x0 0xffffd3000001be80 0001 00000000 0x0 0x0 0xffffd3000001bf00 0001 00000000 0x0 0x0 0xffffd3000001bf80 0001 00000000 0x0 0x0 0xffffd3000001c000 0001 00000000 0x0 0x0 0xffffd3000001c080 0001 00000000 0x0 0x0 0xffffd3000001c100 0001 00000000 0x0 0x0 0xffffd3000001c180 0001 00000000 0x0 0x0 0xffffd3000001c200 0001 00000000 0x0 0x0 0xffffd3000001c280 0001 00000000 0x0 0x0 0xffffd3000001c300 0001 00000000 0x0 0x0 0xffffd3000001c380 0001 00000000 0x0 0x0 0xffffd3000001c400 0001 00000000 0x0 0x0 0xffffd3000001c480 0001 00000000 0x0 0x0 0xffffd3000001c500 0001 00000000 0x0 0x0 0xffffd3000001c580 0001 00000000 0x0 0x0 0xffffd3000001c600 0001 00000000 0x0 0x0 0xffffd3000001c680 0001 00000000 0x0 0x0 0xffffd3000001c700 0001 00000000 0x0 0x0 0xffffd3000001c780 0001 00000000 0x0 0x0 0xffffd3000001c800 0001 00000000 0x0 0x0 0xffffd3000001c880 0001 00000000 0x0 0x0 0xffffd3000001c900 0001 00000000 0x0 0x0 0xffffd3000001c980 0001 00000000 0x0 0x0 0xffffd3000001ca00 0001 00000000 0x0 0x0 0xffffd3000001ca80 0001 00000000 0x0 0x0 0xffffd3000001cb00 0001 00000000 0x0 0x0 0xffffd3000001cb80 0001 00000000 0x0 0x0 0xffffd3000001cc00 0001 00000000 0x0 0x0 0xffffd3000001cc80 0001 00000000 0x0 0x0 0xffffd3000001cd00 0001 00000000 0x0 0x0 0xffffd3000001cd80 0001 00000000 0x0 0x0 0xffffd3000001ce00 0001 00000000 0x0 0x0 0xffffd3000001ce80 0001 00000000 0x0 0x0 0xffffd3000001cf00 0001 00000000 0x0 0x0 0xffffd3000001cf80 0001 00000000 0x0 0x0 0xffffd3000001d000 0001 00000000 0x0 0x0 0xffffd3000001d080 0001 00000000 0x0 0x0 0xffffd3000001d100 0001 00000000 0x0 0x0 0xffffd3000001d180 0001 00000000 0x0 0x0 0xffffd3000001d200 0001 00000000 0x0 0x0 0xffffd3000001d280 0001 00000000 0x0 0x0 0xffffd3000001d300 0001 00000000 0x0 0x0 0xffffd3000001d380 0001 00000000 0x0 0x0 0xffffd3000001d400 0001 00000000 0x0 0x0 0xffffd3000001d480 0001 00000000 0x0 0x0 0xffffd3000001d500 0001 00000000 0x0 0x0 0xffffd3000001d580 0001 00000000 0x0 0x0 0xffffd3000001d600 0001 00000000 0x0 0x0 0xffffd3000001d680 0001 00000000 0x0 0x0 0xffffd3000001d700 0001 00000000 0x0 0x0 0xffffd3000001d780 0001 00000000 0x0 0x0 0xffffd3000001d800 0001 00000000 0x0 0x0 0xffffd3000001d880 0001 00000000 0x0 0x0 0xffffd3000001d900 0001 00000000 0x0 0x0 0xffffd3000001d980 0001 00000000 0x0 0x0 0xffffd3000001da00 0001 00000000 0x0 0x0 0xffffd3000001da80 0001 00000000 0x0 0x0 0xffffd3000001db00 0001 00000000 0x0 0x0 0xffffd3000001db80 0001 00000000 0x0 0x0 0xffffd3000001dc00 0001 00000000 0x0 0x0 0xffffd3000001dc80 0001 00000000 0x0 0x0 0xffffd3000001dd00 0001 00000000 0x0 0x0 0xffffd3000001dd80 0001 00000000 0x0 0x0 0xffffd3000001de00 0001 00000000 0x0 0x0 0xffffd3000001de80 0001 00000000 0x0 0x0 0xffffd3000001df00 0001 00000000 0x0 0x0 0xffffd3000001df80 0001 00000000 0x0 0x0 0xffffd3000001e000 0001 00000000 0x0 0x0 0xffffd3000001e080 0001 00000000 0x0 0x0 0xffffd3000001e100 0001 00000000 0x0 0x0 0xffffd3000001e180 0001 00000000 0x0 0x0 0xffffd3000001e200 0001 00000000 0x0 0x0 0xffffd3000001e280 0001 00000000 0x0 0x0 0xffffd3000001e300 0001 00000000 0x0 0x0 0xffffd3000001e380 0001 00000000 0x0 0x0 0xffffd3000001e400 0001 00000000 0x0 0x0 0xffffd3000001e480 0001 00000000 0x0 0x0 0xffffd3000001e500 0001 00000000 0x0 0x0 0xffffd3000001e580 0001 00000000 0x0 0x0 0xffffd3000001e600 0001 00000000 0x0 0x0 0xffffd3000001e680 0001 00000000 0x0 0x0 0xffffd3000001e700 0001 00000000 0x0 0x0 0xffffd3000001e780 0001 00000000 0x0 0x0 0xffffd3000001e800 0001 00000000 0x0 0x0 0xffffd3000001e880 0001 00000000 0x0 0x0 0xffffd3000001e900 0001 00000000 0x0 0x0 0xffffd3000001e980 0001 00000000 0x0 0x0 0xffffd3000001ea00 0001 00000000 0x0 0x0 0xffffd3000001ea80 0001 00000000 0x0 0x0 0xffffd3000001eb00 0001 00000000 0x0 0x0 0xffffd3000001eb80 0001 00000000 0x0 0x0 0xffffd3000001ec00 0001 00000000 0x0 0x0 0xffffd3000001ec80 0001 00000000 0x0 0x0 0xffffd3000001ed00 0001 00000000 0x0 0x0 0xffffd3000001ed80 0001 00000000 0x0 0x0 0xffffd3000001ee00 0001 00000000 0x0 0x0 0xffffd3000001ee80 0001 00000000 0x0 0x0 0xffffd3000001ef00 0001 00000000 0x0 0x0 0xffffd3000001ef80 0001 00000000 0x0 0x0 0xffffd3000001f000 0001 00000000 0x0 0x0 0xffffd3000001f080 0001 00000000 0x0 0x0 0xffffd3000001f100 0001 00000000 0x0 0x0 0xffffd3000001f180 0001 00000000 0x0 0x0 0xffffd3000001f200 0001 00000000 0x0 0x0 0xffffd3000001f280 0001 00000000 0x0 0x0 0xffffd3000001f300 0001 00000000 0x0 0x0 0xffffd3000001f380 0001 00000000 0x0 0x0 0xffffd3000001f400 0001 00000000 0x0 0x0 0xffffd3000001f480 0001 00000000 0x0 0x0 0xffffd3000001f500 0001 00000000 0x0 0x0 0xffffd3000001f580 0001 00000000 0x0 0x0 0xffffd3000001f600 0001 00000000 0x0 0x0 0xffffd3000001f680 0001 00000000 0x0 0x0 0xffffd3000001f700 0001 00000000 0x0 0x0 0xffffd3000001f780 0001 00000000 0x0 0x0 0xffffd3000001f800 0001 00000000 0x0 0x0 0xffffd3000001f880 0001 00000000 0x0 0x0 0xffffd3000001f900 0001 00000000 0x0 0x0 0xffffd3000001f980 0001 00000000 0x0 0x0 0xffffd3000001fa00 0001 00000000 0x0 0x0 0xffffd3000001fa80 0001 00000000 0x0 0x0 0xffffd3000001fb00 0001 00000000 0x0 0x0 0xffffd3000001fb80 0001 00000000 0x0 0x0 0xffffd3000001fc00 0001 00000000 0x0 0x0 0xffffd3000001fc80 0001 00000000 0x0 0x0 0xffffd3000001fd00 0001 00000000 0x0 0x0 0xffffd3000001fd80 0001 00000000 0x0 0x0 0xffffd3000001fe00 0001 00000000 0x0 0x0 0xffffd3000001fe80 0001 00000000 0x0 0x0 0xffffd3000001ff00 0001 00000000 0x0 0x0 0xffffd3000001ff80 0001 00000000 0x0 0x0 0xffffd30000020000 0001 00000000 0x0 0x0 0xffffd30000020080 0001 00000000 0x0 0x0 0xffffd30000020100 0001 00000000 0x0 0x0 0xffffd30000020180 0001 00000000 0x0 0x0 0xffffd30000020200 0001 00000000 0x0 0x0 0xffffd30000020280 0001 00000000 0x0 0x0 0xffffd30000020300 0001 00000000 0x0 0x0 0xffffd30000020380 0001 00000000 0x0 0x0 0xffffd30000020400 0001 00000000 0x0 0x0 0xffffd30000020480 0001 00000000 0x0 0x0 0xffffd30000020500 0001 00000000 0x0 0x0 0xffffd30000020580 0001 00000000 0x0 0x0 0xffffd30000020600 0001 00000000 0x0 0x0 0xffffd30000020680 0001 00000000 0x0 0x0 0xffffd30000020700 0001 00000000 0x0 0x0 0xffffd30000020780 0001 00000000 0x0 0x0 0xffffd30000020800 0001 00000000 0x0 0x0 0xffffd30000020880 0001 00000000 0x0 0x0 0xffffd30000020900 0001 00000000 0x0 0x0 0xffffd30000020980 0001 00000000 0x0 0x0 0xffffd30000020a00 0001 00000000 0x0 0x0 0xffffd30000020a80 0001 00000000 0x0 0x0 0xffffd30000020b00 0001 00000000 0x0 0x0 0xffffd30000020b80 0001 00000000 0x0 0x0 0xffffd30000020c00 0001 00000000 0x0 0x0 0xffffd30000020c80 0001 00000000 0x0 0x0 0xffffd30000020d00 0001 00000000 0x0 0x0 0xffffd30000020d80 0001 00000000 0x0 0x0 0xffffd30000020e00 0001 00000000 0x0 0x0 0xffffd30000020e80 0001 00000000 0x0 0x0 0xffffd30000020f00 0001 00000000 0x0 0x0 0xffffd30000020f80 0001 00000000 0x0 0x0 0xffffd30000021000 0001 00000000 0x0 0x0 0xffffd30000021080 0001 00000000 0x0 0x0 0xffffd30000021100 0001 00000000 0x0 0x0 0xffffd30000021180 0001 00000000 0x0 0x0 0xffffd30000021200 0001 00000000 0x0 0x0 0xffffd30000021280 0001 00000000 0x0 0x0 0xffffd30000021300 0001 00000000 0x0 0x0 0xffffd30000021380 0001 00000000 0x0 0x0 0xffffd30000021400 0001 00000000 0x0 0x0 0xffffd30000021480 0001 00000000 0x0 0x0 0xffffd30000021500 0001 00000000 0x0 0x0 0xffffd30000021580 0001 00000000 0x0 0x0 0xffffd30000021600 0001 00000000 0x0 0x0 0xffffd30000021680 0001 00000000 0x0 0x0 0xffffd30000021700 0001 00000000 0x0 0x0 0xffffd30000021780 0001 00000000 0x0 0x0 0xffffd30000021800 0001 00000000 0x0 0x0 0xffffd30000021880 0001 00000000 0x0 0x0 0xffffd30000021900 0001 00000000 0x0 0x0 0xffffd30000021980 0001 00000000 0x0 0x0 0xffffd30000021a00 0001 00000000 0x0 0x0 0xffffd30000021a80 0001 00000000 0x0 0x0 0xffffd30000021b00 0001 00000000 0x0 0x0 0xffffd30000021b80 0001 00000000 0x0 0x0 0xffffd30000021c00 0001 00000000 0x0 0x0 0xffffd30000021c80 0001 00000000 0x0 0x0 0xffffd30000021d00 0001 00000000 0x0 0x0 0xffffd30000021d80 0001 00000000 0x0 0x0 0xffffd30000021e00 0001 00000000 0x0 0x0 0xffffd30000021e80 0001 00000000 0x0 0x0 0xffffd30000021f00 0001 00000000 0x0 0x0 0xffffd30000021f80 0001 00000000 0x0 0x0 0xffffd30000022000 0001 00000000 0x0 0x0 0xffffd30000022080 0001 00000000 0x0 0x0 0xffffd30000022100 0001 00000000 0x0 0x0 0xffffd30000022180 0001 00000000 0x0 0x0 0xffffd30000022200 0001 00000000 0x0 0x0 0xffffd30000022280 0001 00000000 0x0 0x0 0xffffd30000022300 0001 00000000 0x0 0x0 0xffffd30000022380 0001 00000000 0x0 0x0 0xffffd30000022400 0001 00000000 0x0 0x0 0xffffd30000022480 0001 00000000 0x0 0x0 0xffffd30000022500 0001 00000000 0x0 0x0 0xffffd30000022580 0001 00000000 0x0 0x0 0xffffd30000022600 0001 00000000 0x0 0x0 0xffffd30000022680 0001 00000000 0x0 0x0 0xffffd30000022700 0001 00000000 0x0 0x0 0xffffd30000022780 0001 00000000 0x0 0x0 0xffffd30000022800 0001 00000000 0x0 0x0 0xffffd30000022880 0001 00000000 0x0 0x0 0xffffd30000022900 0001 00000000 0x0 0x0 0xffffd30000022980 0001 00000000 0x0 0x0 0xffffd30000022a00 0001 00000000 0x0 0x0 0xffffd30000022a80 0001 00000000 0x0 0x0 0xffffd30000022b00 0001 00000000 0x0 0x0 0xffffd30000022b80 0001 00000000 0x0 0x0 0xffffd30000022c00 0001 00000000 0x0 0x0 0xffffd30000022c80 0001 00000000 0x0 0x0 0xffffd30000022d00 0001 00000000 0x0 0x0 0xffffd30000022d80 0001 00000000 0x0 0x0 0xffffd30000022e00 0001 00000000 0x0 0x0 0xffffd30000022e80 0001 00000000 0x0 0x0 0xffffd30000022f00 0001 00000000 0x0 0x0 0xffffd30000022f80 0001 00000000 0x0 0x0 0xffffd30000023000 0001 00000000 0x0 0x0 0xffffd30000023080 0001 00000000 0x0 0x0 0xffffd30000023100 0001 00000000 0x0 0x0 0xffffd30000023180 0001 00000000 0x0 0x0 0xffffd30000023200 0001 00000000 0x0 0x0 0xffffd30000023280 0001 00000000 0x0 0x0 0xffffd30000023300 0001 00000000 0x0 0x0 0xffffd30000023380 0001 00000000 0x0 0x0 0xffffd30000023400 0001 00000000 0x0 0x0 0xffffd30000023480 0001 00000000 0x0 0x0 0xffffd30000023500 0001 00000000 0x0 0x0 0xffffd30000023580 0001 00000000 0x0 0x0 0xffffd30000023600 0001 00000000 0x0 0x0 0xffffd30000023680 0001 00000000 0x0 0x0 0xffffd30000023700 0001 00000000 0x0 0x0 0xffffd30000023780 0001 00000000 0x0 0x0 0xffffd30000023800 0001 00000000 0x0 0x0 0xffffd30000023880 0001 00000000 0x0 0x0 0xffffd30000023900 0001 00000000 0x0 0x0 0xffffd30000023980 0001 00000000 0x0 0x0 0xffffd30000023a00 0001 00000000 0x0 0x0 0xffffd30000023a80 0001 00000000 0x0 0x0 0xffffd30000023b00 0001 00000000 0x0 0x0 0xffffd30000023b80 0001 00000000 0x0 0x0 0xffffd30000023c00 0001 00000000 0x0 0x0 0xffffd30000023c80 0001 00000000 0x0 0x0 0xffffd30000023d00 0001 00000000 0x0 0x0 0xffffd30000023d80 0001 00000000 0x0 0x0 0xffffd30000023e00 0001 00000000 0x0 0x0 0xffffd30000023e80 0001 00000000 0x0 0x0 0xffffd30000023f00 0001 00000000 0x0 0x0 0xffffd30000023f80 0001 00000000 0x0 0x0 0xffffd30000024000 0001 00000000 0x0 0x0 0xffffd30000024080 0001 00000000 0x0 0x0 0xffffd30000024100 0001 00000000 0x0 0x0 0xffffd30000024180 0001 00000000 0x0 0x0 0xffffd30000024200 0001 00000000 0x0 0x0 0xffffd30000024280 0001 00000000 0x0 0x0 0xffffd30000024300 0001 00000000 0x0 0x0 0xffffd30000024380 0001 00000000 0x0 0x0 0xffffd30000024400 0001 00000000 0x0 0x0 0xffffd30000024480 0001 00000000 0x0 0x0 0xffffd30000024500 0001 00000000 0x0 0x0 0xffffd30000024580 0001 00000000 0x0 0x0 0xffffd30000024600 0001 00000000 0x0 0x0 0xffffd30000024680 0001 00000000 0x0 0x0 0xffffd30000024700 0001 00000000 0x0 0x0 0xffffd30000024780 0001 00000000 0x0 0x0 0xffffd30000024800 0001 00000000 0x0 0x0 0xffffd30000024880 0001 00000000 0x0 0x0 0xffffd30000024900 0001 00000000 0x0 0x0 0xffffd30000024980 0001 00000000 0x0 0x0 0xffffd30000024a00 0001 00000000 0x0 0x0 0xffffd30000024a80 0001 00000000 0x0 0x0 0xffffd30000024b00 0001 00000000 0x0 0x0 0xffffd30000024b80 0001 00000000 0x0 0x0 0xffffd30000024c00 0001 00000000 0x0 0x0 0xffffd30000024c80 0001 00000000 0x0 0x0 0xffffd30000024d00 0001 00000000 0x0 0x0 0xffffd30000024d80 0001 00000000 0x0 0x0 0xffffd30000024e00 0001 00000000 0x0 0x0 0xffffd30000024e80 0001 00000000 0x0 0x0 0xffffd30000024f00 0001 00000000 0x0 0x0 0xffffd30000024f80 0001 00000000 0x0 0x0 0xffffd30000025000 0001 00000000 0x0 0x0 0xffffd30000025080 0001 00000000 0x0 0x0 0xffffd30000025100 0001 00000000 0x0 0x0 0xffffd30000025180 0001 00000000 0x0 0x0 0xffffd30000025200 0001 00000000 0x0 0x0 0xffffd30000025280 0001 00000000 0x0 0x0 0xffffd30000025300 0001 00000000 0x0 0x0 0xffffd30000025380 0001 00000000 0x0 0x0 0xffffd30000025400 0001 00000000 0x0 0x0 0xffffd30000025480 0001 00000000 0x0 0x0 0xffffd30000025500 0001 00000000 0x0 0x0 0xffffd30000025580 0001 00000000 0x0 0x0 0xffffd30000025600 0001 00000000 0x0 0x0 0xffffd30000025680 0001 00000000 0x0 0x0 0xffffd30000025700 0001 00000000 0x0 0x0 0xffffd30000025780 0001 00000000 0x0 0x0 0xffffd30000025800 0001 00000000 0x0 0x0 0xffffd30000025880 0001 00000000 0x0 0x0 0xffffd30000025900 0001 00000000 0x0 0x0 0xffffd30000025980 0001 00000000 0x0 0x0 0xffffd30000025a00 0001 00000000 0x0 0x0 0xffffd30000025a80 0001 00000000 0x0 0x0 0xffffd30000025b00 0001 00000000 0x0 0x0 0xffffd30000025b80 0001 00000000 0x0 0x0 0xffffd30000025c00 0001 00000000 0x0 0x0 0xffffd30000025c80 0001 00000000 0x0 0x0 0xffffd30000025d00 0001 00000000 0x0 0x0 0xffffd30000025d80 0001 00000000 0x0 0x0 0xffffd30000025e00 0001 00000000 0x0 0x0 0xffffd30000025e80 0001 00000000 0x0 0x0 0xffffd30000025f00 0001 00000000 0x0 0x0 0xffffd30000025f80 0001 00000000 0x0 0x0 0xffffd30000026000 0001 00000000 0x0 0x0 0xffffd30000026080 0001 00000000 0x0 0x0 0xffffd30000026100 0001 00000000 0x0 0x0 0xffffd30000026180 0001 00000000 0x0 0x0 0xffffd30000026200 0001 00000000 0x0 0x0 0xffffd30000026280 0001 00000000 0x0 0x0 0xffffd30000026300 0001 00000000 0x0 0x0 0xffffd30000026380 0001 00000000 0x0 0x0 0xffffd30000026400 0001 00000000 0x0 0x0 0xffffd30000026480 0001 00000000 0x0 0x0 0xffffd30000026500 0001 00000000 0x0 0x0 0xffffd30000026580 0001 00000000 0x0 0x0 0xffffd30000026600 0001 00000000 0x0 0x0 0xffffd30000026680 0001 00000000 0x0 0x0 0xffffd30000026700 0001 00000000 0x0 0x0 0xffffd30000026780 0001 00000000 0x0 0x0 0xffffd30000026800 0001 00000000 0x0 0x0 0xffffd30000026880 0001 00000000 0x0 0x0 0xffffd30000026900 0001 00000000 0x0 0x0 0xffffd30000026980 0001 00000000 0x0 0x0 0xffffd30000026a00 0001 00000000 0x0 0x0 0xffffd30000026a80 0001 00000000 0x0 0x0 0xffffd30000026b00 0001 00000000 0x0 0x0 0xffffd30000026b80 0001 00000000 0x0 0x0 0xffffd30000026c00 0001 00000000 0x0 0x0 0xffffd30000026c80 0001 00000000 0x0 0x0 0xffffd30000026d00 0001 00000000 0x0 0x0 0xffffd30000026d80 0001 00000000 0x0 0x0 0xffffd30000026e00 0001 00000000 0x0 0x0 0xffffd30000026e80 0001 00000000 0x0 0x0 0xffffd30000026f00 0001 00000000 0x0 0x0 0xffffd30000026f80 0001 00000000 0x0 0x0 0xffffd30000027000 0001 00000000 0x0 0x0 0xffffd30000027080 0001 00000000 0x0 0x0 0xffffd30000027100 0001 00000000 0x0 0x0 0xffffd30000027180 0001 00000000 0x0 0x0 0xffffd30000027200 0001 00000000 0x0 0x0 0xffffd30000027280 0001 00000000 0x0 0x0 0xffffd30000027300 0001 00000000 0x0 0x0 0xffffd30000027380 0001 00000000 0x0 0x0 0xffffd30000027400 0001 00000000 0x0 0x0 0xffffd30000027480 0001 00000000 0x0 0x0 0xffffd30000027500 0001 00000000 0x0 0x0 0xffffd30000027580 0001 00000000 0x0 0x0 0xffffd30000027600 0001 00000000 0x0 0x0 0xffffd30000027680 0001 00000000 0x0 0x0 0xffffd30000027700 0001 00000000 0x0 0x0 0xffffd30000027780 0001 00000000 0x0 0x0 0xffffd30000027800 0001 00000000 0x0 0x0 0xffffd30000027880 0001 00000000 0x0 0x0 0xffffd30000027900 0001 00000000 0x0 0x0 0xffffd30000027980 0001 00000000 0x0 0x0 0xffffd30000027a00 0001 00000000 0x0 0x0 0xffffd30000027a80 0001 00000000 0x0 0x0 0xffffd30000027b00 0001 00000000 0x0 0x0 0xffffd30000027b80 0001 00000000 0x0 0x0 0xffffd30000027c00 0001 00000000 0x0 0x0 0xffffd30000027c80 0001 00000000 0x0 0x0 0xffffd30000027d00 0001 00000000 0x0 0x0 0xffffd30000027d80 0001 00000000 0x0 0x0 0xffffd30000027e00 0001 00000000 0x0 0x0 0xffffd30000027e80 0001 00000000 0x0 0x0 0xffffd30000027f00 0001 00000000 0x0 0x0 0xffffd30000027f80 0001 00000000 0x0 0x0 0xffffd30000028000 0001 00000000 0x0 0x0 0xffffd30000028080 0001 00000000 0x0 0x0 0xffffd30000028100 0001 00000000 0x0 0x0 0xffffd30000028180 0001 00000000 0x0 0x0 0xffffd30000028200 0001 00000000 0x0 0x0 0xffffd30000028280 0001 00000000 0x0 0x0 0xffffd30000028300 0001 00000000 0x0 0x0 0xffffd30000028380 0001 00000000 0x0 0x0 0xffffd30000028400 0001 00000000 0x0 0x0 0xffffd30000028480 0001 00000000 0x0 0x0 0xffffd30000028500 0001 00000000 0x0 0x0 0xffffd30000028580 0001 00000000 0x0 0x0 0xffffd30000028600 0001 00000000 0x0 0x0 0xffffd30000028680 0001 00000000 0x0 0x0 0xffffd30000028700 0001 00000000 0x0 0x0 0xffffd30000028780 0001 00000000 0x0 0x0 0xffffd30000028800 0001 00000000 0x0 0x0 0xffffd30000028880 0001 00000000 0x0 0x0 0xffffd30000028900 0001 00000000 0x0 0x0 0xffffd30000028980 0001 00000000 0x0 0x0 0xffffd30000028a00 0001 00000000 0x0 0x0 0xffffd30000028a80 0001 00000000 0x0 0x0 0xffffd30000028b00 0001 00000000 0x0 0x0 0xffffd30000028b80 0001 00000000 0x0 0x0 0xffffd30000028c00 0001 00000000 0x0 0x0 0xffffd30000028c80 0001 00000000 0x0 0x0 0xffffd30000028d00 0001 00000000 0x0 0x0 0xffffd30000028d80 0001 00000000 0x0 0x0 0xffffd30000028e00 0001 00000000 0x0 0x0 0xffffd30000028e80 0001 00000000 0x0 0x0 0xffffd30000028f00 0001 00000000 0x0 0x0 0xffffd30000028f80 0001 00000000 0x0 0x0 0xffffd30000029000 0001 00000000 0x0 0x0 0xffffd30000029080 0001 00000000 0x0 0x0 0xffffd30000029100 0001 00000000 0x0 0x0 0xffffd30000029180 0001 00000000 0x0 0x0 0xffffd30000029200 0001 00000000 0x0 0x0 0xffffd30000029280 0001 00000000 0x0 0x0 0xffffd30000029300 0001 00000000 0x0 0x0 0xffffd30000029380 0001 00000000 0x0 0x0 0xffffd30000029400 0001 00000000 0x0 0x0 0xffffd30000029480 0001 00000000 0x0 0x0 0xffffd30000029500 0001 00000000 0x0 0x0 0xffffd30000029580 0001 00000000 0x0 0x0 0xffffd30000029600 0001 00000000 0x0 0x0 0xffffd30000029680 0001 00000000 0x0 0x0 0xffffd30000029700 0001 00000000 0x0 0x0 0xffffd30000029780 0001 00000000 0x0 0x0 0xffffd30000029800 0001 00000000 0x0 0x0 0xffffd30000029880 0001 00000000 0x0 0x0 0xffffd30000029900 0001 00000000 0x0 0x0 0xffffd30000029980 0001 00000000 0x0 0x0 0xffffd30000029a00 0001 00000000 0x0 0x0 0xffffd30000029a80 0001 00000000 0x0 0x0 0xffffd30000029b00 0001 00000000 0x0 0x0 0xffffd30000029b80 0001 00000000 0x0 0x0 0xffffd30000029c00 0001 00000000 0x0 0x0 0xffffd30000029c80 0001 00000000 0x0 0x0 0xffffd30000029d00 0001 00000000 0x0 0x0 0xffffd30000029d80 0001 00000000 0x0 0x0 0xffffd30000029e00 0001 00000000 0x0 0x0 0xffffd30000029e80 0001 00000000 0x0 0x0 0xffffd30000029f00 0001 00000000 0x0 0x0 0xffffd30000029f80 0001 00000000 0x0 0x0 0xffffd3000002a000 0001 00000000 0x0 0x0 0xffffd3000002a080 0001 00000000 0x0 0x0 0xffffd3000002a100 0001 00000000 0x0 0x0 0xffffd3000002a180 0001 00000000 0x0 0x0 0xffffd3000002a200 0001 00000000 0x0 0x0 0xffffd3000002a280 0001 00000000 0x0 0x0 0xffffd3000002a300 0001 00000000 0x0 0x0 0xffffd3000002a380 0001 00000000 0x0 0x0 0xffffd3000002a400 0001 00000000 0x0 0x0 0xffffd3000002a480 0001 00000000 0x0 0x0 0xffffd3000002a500 0001 00000000 0x0 0x0 0xffffd3000002a580 0001 00000000 0x0 0x0 0xffffd3000002a600 0001 00000000 0x0 0x0 0xffffd3000002a680 0001 00000000 0x0 0x0 0xffffd3000002a700 0001 00000000 0x0 0x0 0xffffd3000002a780 0001 00000000 0x0 0x0 0xffffd3000002a800 0001 00000000 0x0 0x0 0xffffd3000002a880 0001 00000000 0x0 0x0 0xffffd3000002a900 0001 00000000 0x0 0x0 0xffffd3000002a980 0001 00000000 0x0 0x0 0xffffd3000002aa00 0001 00000000 0x0 0x0 0xffffd3000002aa80 0001 00000000 0x0 0x0 0xffffd3000002ab00 0001 00000000 0x0 0x0 0xffffd3000002ab80 0001 00000000 0x0 0x0 0xffffd3000002ac00 0001 00000000 0x0 0x0 0xffffd3000002ac80 0001 00000000 0x0 0x0 0xffffd3000002ad00 0001 00000000 0x0 0x0 0xffffd3000002ad80 0001 00000000 0x0 0x0 0xffffd3000002ae00 0001 00000000 0x0 0x0 0xffffd3000002ae80 0001 00000000 0x0 0x0 0xffffd3000002af00 0001 00000000 0x0 0x0 0xffffd3000002af80 0001 00000000 0x0 0x0 0xffffd3000002b000 0001 00000000 0x0 0x0 0xffffd3000002b080 0001 00000000 0x0 0x0 0xffffd3000002b100 0001 00000000 0x0 0x0 0xffffd3000002b180 0001 00000000 0x0 0x0 0xffffd3000002b200 0001 00000000 0x0 0x0 0xffffd3000002b280 0001 00000000 0x0 0x0 0xffffd3000002b300 0001 00000000 0x0 0x0 0xffffd3000002b380 0001 00000000 0x0 0x0 0xffffd3000002b400 0001 00000000 0x0 0x0 0xffffd3000002b480 0001 00000000 0x0 0x0 0xffffd3000002b500 0001 00000000 0x0 0x0 0xffffd3000002b580 0001 00000000 0x0 0x0 0xffffd3000002b600 0001 00000000 0x0 0x0 0xffffd3000002b680 0001 00000000 0x0 0x0 0xffffd3000002b700 0001 00000000 0x0 0x0 0xffffd3000002b780 0001 00000000 0x0 0x0 0xffffd3000002b800 0001 00000000 0x0 0x0 0xffffd3000002b880 0001 00000000 0x0 0x0 0xffffd3000002b900 0001 00000000 0x0 0x0 0xffffd3000002b980 0001 00000000 0x0 0x0 0xffffd3000002ba00 0001 00000000 0x0 0x0 0xffffd3000002ba80 0001 00000000 0x0 0x0 0xffffd3000002bb00 0001 00000000 0x0 0x0 0xffffd3000002bb80 0001 00000000 0x0 0x0 0xffffd3000002bc00 0001 00000000 0x0 0x0 0xffffd3000002bc80 0001 00000000 0x0 0x0 0xffffd3000002bd00 0001 00000000 0x0 0x0 0xffffd3000002bd80 0001 00000000 0x0 0x0 0xffffd3000002be00 0001 00000000 0x0 0x0 0xffffd3000002be80 0001 00000000 0x0 0x0 0xffffd3000002bf00 0001 00000000 0x0 0x0 0xffffd3000002bf80 0001 00000000 0x0 0x0 0xffffd3000002c000 0001 00000000 0x0 0x0 0xffffd3000002c080 0001 00000000 0x0 0x0 0xffffd3000002c100 0001 00000000 0x0 0x0 0xffffd3000002c180 0001 00000000 0x0 0x0 0xffffd3000002c200 0001 00000000 0x0 0x0 0xffffd3000002c280 0001 00000000 0x0 0x0 0xffffd3000002c300 0001 00000000 0x0 0x0 0xffffd3000002c380 0001 00000000 0x0 0x0 0xffffd3000002c400 0001 00000000 0x0 0x0 0xffffd3000002c480 0001 00000000 0x0 0x0 0xffffd3000002c500 0001 00000000 0x0 0x0 0xffffd3000002c580 0001 00000000 0x0 0x0 0xffffd3000002c600 0001 00000000 0x0 0x0 0xffffd3000002c680 0001 00000000 0x0 0x0 0xffffd3000002c700 0001 00000000 0x0 0x0 0xffffd3000002c780 0001 00000000 0x0 0x0 0xffffd3000002c800 0001 00000000 0x0 0x0 0xffffd3000002c880 0001 00000000 0x0 0x0 0xffffd3000002c900 0001 00000000 0x0 0x0 0xffffd3000002c980 0001 00000000 0x0 0x0 0xffffd3000002ca00 0001 00000000 0x0 0x0 0xffffd3000002ca80 0001 00000000 0x0 0x0 0xffffd3000002cb00 0001 00000000 0x0 0x0 0xffffd3000002cb80 0001 00000000 0x0 0x0 0xffffd3000002cc00 0001 00000000 0x0 0x0 0xffffd3000002cc80 0001 00000000 0x0 0x0 0xffffd3000002cd00 0001 00000000 0x0 0x0 0xffffd3000002cd80 0001 00000000 0x0 0x0 0xffffd3000002ce00 0001 00000000 0x0 0x0 0xffffd3000002ce80 0001 00000000 0x0 0x0 0xffffd3000002cf00 0001 00000000 0x0 0x0 0xffffd3000002cf80 0001 00000000 0x0 0x0 0xffffd3000002d000 0001 00000000 0x0 0x0 0xffffd3000002d080 0001 00000000 0x0 0x0 0xffffd3000002d100 0001 00000000 0x0 0x0 0xffffd3000002d180 0001 00000000 0x0 0x0 0xffffd3000002d200 0001 00000000 0x0 0x0 0xffffd3000002d280 0001 00000000 0x0 0x0 0xffffd3000002d300 0001 00000000 0x0 0x0 0xffffd3000002d380 0001 00000000 0x0 0x0 0xffffd3000002d400 0001 00000000 0x0 0x0 0xffffd3000002d480 0001 00000000 0x0 0x0 0xffffd3000002d500 0001 00000000 0x0 0x0 0xffffd3000002d580 0001 00000000 0x0 0x0 0xffffd3000002d600 0001 00000000 0x0 0x0 0xffffd3000002d680 0001 00000000 0x0 0x0 0xffffd3000002d700 0001 00000000 0x0 0x0 0xffffd3000002d780 0001 00000000 0x0 0x0 0xffffd3000002d800 0001 00000000 0x0 0x0 0xffffd3000002d880 0001 00000000 0x0 0x0 0xffffd3000002d900 0001 00000000 0x0 0x0 0xffffd3000002d980 0001 00000000 0x0 0x0 0xffffd3000002da00 0001 00000000 0x0 0x0 0xffffd3000002da80 0001 00000000 0x0 0x0 0xffffd3000002db00 0001 00000000 0x0 0x0 0xffffd3000002db80 0001 00000000 0x0 0x0 0xffffd3000002dc00 0001 00000000 0x0 0x0 0xffffd3000002dc80 0001 00000000 0x0 0x0 0xffffd3000002dd00 0001 00000000 0x0 0x0 0xffffd3000002dd80 0001 00000000 0x0 0x0 0xffffd3000002de00 0001 00000000 0x0 0x0 0xffffd3000002de80 0001 00000000 0x0 0x0 0xffffd3000002df00 0001 00000000 0x0 0x0 0xffffd3000002df80 0001 00000000 0x0 0x0 0xffffd3000002e000 0001 00000000 0x0 0x0 0xffffd3000002e080 0001 00000000 0x0 0x0 0xffffd3000002e100 0001 00000000 0x0 0x0 0xffffd3000002e180 0001 00000000 0x0 0x0 0xffffd3000002e200 0001 00000000 0x0 0x0 0xffffd3000002e280 0001 00000000 0x0 0x0 0xffffd3000002e300 0001 00000000 0x0 0x0 0xffffd3000002e380 0001 00000000 0x0 0x0 0xffffd3000002e400 0001 00000000 0x0 0x0 0xffffd3000002e480 0001 00000000 0x0 0x0 0xffffd3000002e500 0001 00000000 0x0 0x0 0xffffd3000002e580 0001 00000000 0x0 0x0 0xffffd3000002e600 0001 00000000 0x0 0x0 0xffffd3000002e680 0001 00000000 0x0 0x0 0xffffd3000002e700 0001 00000000 0x0 0x0 0xffffd3000002e780 0001 00000000 0x0 0x0 0xffffd3000002e800 0001 00000000 0x0 0x0 0xffffd3000002e880 0001 00000000 0x0 0x0 0xffffd3000002e900 0001 00000000 0x0 0x0 0xffffd3000002e980 0001 00000000 0x0 0x0 0xffffd3000002ea00 0001 00000000 0x0 0x0 0xffffd3000002ea80 0001 00000000 0x0 0x0 0xffffd3000002eb00 0001 00000000 0x0 0x0 0xffffd3000002eb80 0001 00000000 0x0 0x0 0xffffd3000002ec00 0001 00000000 0x0 0x0 0xffffd3000002ec80 0001 00000000 0x0 0x0 0xffffd3000002ed00 0001 00000000 0x0 0x0 0xffffd3000002ed80 0001 00000000 0x0 0x0 0xffffd3000002ee00 0001 00000000 0x0 0x0 0xffffd3000002ee80 0001 00000000 0x0 0x0 0xffffd3000002ef00 0001 00000000 0x0 0x0 0xffffd3000002ef80 0001 00000000 0x0 0x0 0xffffd3000002f000 0001 00000000 0x0 0x0 0xffffd3000002f080 0001 00000000 0x0 0x0 0xffffd3000002f100 0001 00000000 0x0 0x0 0xffffd3000002f180 0001 00000000 0x0 0x0 0xffffd3000002f200 0001 00000000 0x0 0x0 0xffffd3000002f280 0001 00000000 0x0 0x0 0xffffd3000002f300 0001 00000000 0x0 0x0 0xffffd3000002f380 0001 00000000 0x0 0x0 0xffffd3000002f400 0001 00000000 0x0 0x0 0xffffd3000002f480 0001 00000000 0x0 0x0 0xffffd3000002f500 0001 00000000 0x0 0x0 0xffffd3000002f580 0001 00000000 0x0 0x0 0xffffd3000002f600 0001 00000000 0x0 0x0 0xffffd3000002f680 0001 00000000 0x0 0x0 0xffffd3000002f700 0001 00000000 0x0 0x0 0xffffd3000002f780 0001 00000000 0x0 0x0 0xffffd3000002f800 0001 00000000 0x0 0x0 0xffffd3000002f880 0001 00000000 0x0 0x0 0xffffd3000002f900 0001 00000000 0x0 0x0 0xffffd3000002f980 0001 00000000 0x0 0x0 0xffffd3000002fa00 0001 00000000 0x0 0x0 0xffffd3000002fa80 0001 00000000 0x0 0x0 0xffffd3000002fb00 0001 00000000 0x0 0x0 0xffffd3000002fb80 0001 00000000 0x0 0x0 0xffffd3000002fc00 0001 00000000 0x0 0x0 0xffffd3000002fc80 0001 00000000 0x0 0x0 0xffffd3000002fd00 0001 00000000 0x0 0x0 0xffffd3000002fd80 0001 00000000 0x0 0x0 0xffffd3000002fe00 0001 00000000 0x0 0x0 0xffffd3000002fe80 0001 00000000 0x0 0x0 0xffffd3000002ff00 0001 00000000 0x0 0x0 0xffffd3000002ff80 0001 00000000 0x0 0x0 0xffffd30000030000 0001 00000000 0x0 0x0 0xffffd30000030080 0001 00000000 0x0 0x0 0xffffd30000030100 0001 00000000 0x0 0x0 0xffffd30000030180 0001 00000000 0x0 0x0 0xffffd30000030200 0001 00000000 0x0 0x0 0xffffd30000030280 0001 00000000 0x0 0x0 0xffffd30000030300 0001 00000000 0x0 0x0 0xffffd30000030380 0001 00000000 0x0 0x0 0xffffd30000030400 0001 00000000 0x0 0x0 0xffffd30000030480 0001 00000000 0x0 0x0 0xffffd30000030500 0001 00000000 0x0 0x0 0xffffd30000030580 0001 00000000 0x0 0x0 0xffffd30000030600 0001 00000000 0x0 0x0 0xffffd30000030680 0001 00000000 0x0 0x0 0xffffd30000030700 0001 00000000 0x0 0x0 0xffffd30000030780 0001 00000000 0x0 0x0 0xffffd30000030800 0001 00000000 0x0 0x0 0xffffd30000030880 0001 00000000 0x0 0x0 0xffffd30000030900 0001 00000000 0x0 0x0 0xffffd30000030980 0001 00000000 0x0 0x0 0xffffd30000030a00 0001 00000000 0x0 0x0 0xffffd30000030a80 0001 00000000 0x0 0x0 0xffffd30000030b00 0001 00000000 0x0 0x0 0xffffd30000030b80 0001 00000000 0x0 0x0 0xffffd30000030c00 0001 00000000 0x0 0x0 0xffffd30000030c80 0001 00000000 0x0 0x0 0xffffd30000030d00 0001 00000000 0x0 0x0 0xffffd30000030d80 0001 00000000 0x0 0x0 0xffffd30000030e00 0001 00000000 0x0 0x0 0xffffd30000030e80 0001 00000000 0x0 0x0 0xffffd30000030f00 0001 00000000 0x0 0x0 0xffffd30000030f80 0001 00000000 0x0 0x0 0xffffd30000031000 0001 00000000 0x0 0x0 0xffffd30000031080 0001 00000000 0x0 0x0 0xffffd30000031100 0001 00000000 0x0 0x0 0xffffd30000031180 0001 00000000 0x0 0x0 0xffffd30000031200 0001 00000000 0x0 0x0 0xffffd30000031280 0001 00000000 0x0 0x0 0xffffd30000031300 0001 00000000 0x0 0x0 0xffffd30000031380 0001 00000000 0x0 0x0 0xffffd30000031400 0001 00000000 0x0 0x0 0xffffd30000031480 0001 00000000 0x0 0x0 0xffffd30000031500 0001 00000000 0x0 0x0 0xffffd30000031580 0001 00000000 0x0 0x0 0xffffd30000031600 0001 00000000 0x0 0x0 0xffffd30000031680 0001 00000000 0x0 0x0 0xffffd30000031700 0001 00000000 0x0 0x0 0xffffd30000031780 0001 00000000 0x0 0x0 0xffffd30000031800 0001 00000000 0x0 0x0 0xffffd30000031880 0001 00000000 0x0 0x0 0xffffd30000031900 0001 00000000 0x0 0x0 0xffffd30000031980 0001 00000000 0x0 0x0 0xffffd30000031a00 0001 00000000 0x0 0x0 0xffffd30000031a80 0001 00000000 0x0 0x0 0xffffd30000031b00 0001 00000000 0x0 0x0 0xffffd30000031b80 0001 00000000 0x0 0x0 0xffffd30000031c00 0001 00000000 0x0 0x0 0xffffd30000031c80 0001 00000000 0x0 0x0 0xffffd30000031d00 0001 00000000 0x0 0x0 0xffffd30000031d80 0001 00000000 0x0 0x0 0xffffd30000031e00 0001 00000000 0x0 0x0 0xffffd30000031e80 0001 00000000 0x0 0x0 0xffffd30000031f00 0001 00000000 0x0 0x0 0xffffd30000031f80 0001 00000000 0x0 0x0 0xffffd30000032000 0001 00000000 0x0 0x0 0xffffd30000032080 0001 00000000 0x0 0x0 0xffffd30000032100 0001 00000000 0x0 0x0 0xffffd30000032180 0001 00000000 0x0 0x0 0xffffd30000032200 0001 00000000 0x0 0x0 0xffffd30000032280 0001 00000000 0x0 0x0 0xffffd30000032300 0001 00000000 0x0 0x0 0xffffd30000032380 0001 00000000 0x0 0x0 0xffffd30000032400 0001 00000000 0x0 0x0 0xffffd30000032480 0001 00000000 0x0 0x0 0xffffd30000032500 0001 00000000 0x0 0x0 0xffffd30000032580 0001 00000000 0x0 0x0 0xffffd30000032600 0001 00000000 0x0 0x0 0xffffd30000032680 0001 00000000 0x0 0x0 0xffffd30000032700 0001 00000000 0x0 0x0 0xffffd30000032780 0001 00000000 0x0 0x0 0xffffd30000032800 0001 00000000 0x0 0x0 0xffffd30000032880 0001 00000000 0x0 0x0 0xffffd30000032900 0001 00000000 0x0 0x0 0xffffd30000032980 0001 00000000 0x0 0x0 0xffffd30000032a00 0001 00000000 0x0 0x0 0xffffd30000032a80 0001 00000000 0x0 0x0 0xffffd30000032b00 0001 00000000 0x0 0x0 0xffffd30000032b80 0001 00000000 0x0 0x0 0xffffd30000032c00 0001 00000000 0x0 0x0 0xffffd30000032c80 0001 00000000 0x0 0x0 0xffffd30000032d00 0001 00000000 0x0 0x0 0xffffd30000032d80 0001 00000000 0x0 0x0 0xffffd30000032e00 0001 00000000 0x0 0x0 0xffffd30000032e80 0001 00000000 0x0 0x0 0xffffd30000032f00 0001 00000000 0x0 0x0 0xffffd30000032f80 0001 00000000 0x0 0x0 0xffffd30000033000 0001 00000000 0x0 0x0 0xffffd30000033080 0001 00000000 0x0 0x0 0xffffd30000033100 0001 00000000 0x0 0x0 0xffffd30000033180 0001 00000000 0x0 0x0 0xffffd30000033200 0001 00000000 0x0 0x0 0xffffd30000033280 0001 00000000 0x0 0x0 0xffffd30000033300 0001 00000000 0x0 0x0 0xffffd30000033380 0001 00000000 0x0 0x0 0xffffd30000033400 0001 00000000 0x0 0x0 0xffffd30000033480 0001 00000000 0x0 0x0 0xffffd30000033500 0001 00000000 0x0 0x0 0xffffd30000033580 0001 00000000 0x0 0x0 0xffffd30000033600 0001 00000000 0x0 0x0 0xffffd30000033680 0001 00000000 0x0 0x0 0xffffd30000033700 0001 00000000 0x0 0x0 0xffffd30000033780 0001 00000000 0x0 0x0 0xffffd30000033800 0001 00000000 0x0 0x0 0xffffd30000033880 0001 00000000 0x0 0x0 0xffffd30000033900 0001 00000000 0x0 0x0 0xffffd30000033980 0001 00000000 0x0 0x0 0xffffd30000033a00 0001 00000000 0x0 0x0 0xffffd30000033a80 0001 00000000 0x0 0x0 0xffffd30000033b00 0001 00000000 0x0 0x0 0xffffd30000033b80 0001 00000000 0x0 0x0 0xffffd30000033c00 0001 00000000 0x0 0x0 0xffffd30000033c80 0001 00000000 0x0 0x0 0xffffd30000033d00 0001 00000000 0x0 0x0 0xffffd30000033d80 0001 00000000 0x0 0x0 0xffffd30000033e00 0001 00000000 0x0 0x0 0xffffd30000033e80 0001 00000000 0x0 0x0 0xffffd30000033f00 0001 00000000 0x0 0x0 0xffffd30000033f80 0001 00000000 0x0 0x0 0xffffd30000034000 0001 00000000 0x0 0x0 0xffffd30000034080 0001 00000000 0x0 0x0 0xffffd30000034100 0001 00000000 0x0 0x0 0xffffd30000034180 0001 00000000 0x0 0x0 0xffffd30000034200 0001 00000000 0x0 0x0 0xffffd30000034280 0001 00000000 0x0 0x0 0xffffd30000034300 0001 00000000 0x0 0x0 0xffffd30000034380 0001 00000000 0x0 0x0 0xffffd30000034400 0001 00000000 0x0 0x0 0xffffd30000034480 0001 00000000 0x0 0x0 0xffffd30000034500 0001 00000000 0x0 0x0 0xffffd30000034580 0001 00000000 0x0 0x0 0xffffd30000034600 0001 00000000 0x0 0x0 0xffffd30000034680 0001 00000000 0x0 0x0 0xffffd30000034700 0001 00000000 0x0 0x0 0xffffd30000034780 0001 00000000 0x0 0x0 0xffffd30000034800 0001 00000000 0x0 0x0 0xffffd30000034880 0001 00000000 0x0 0x0 0xffffd30000034900 0001 00000000 0x0 0x0 0xffffd30000034980 0001 00000000 0x0 0x0 0xffffd30000034a00 0001 00000000 0x0 0x0 0xffffd30000034a80 0001 00000000 0x0 0x0 0xffffd30000034b00 0001 00000000 0x0 0x0 0xffffd30000034b80 0001 00000000 0x0 0x0 0xffffd30000034c00 0001 00000000 0x0 0x0 0xffffd30000034c80 0001 00000000 0x0 0x0 0xffffd30000034d00 0001 00000000 0x0 0x0 0xffffd30000034d80 0001 00000000 0x0 0x0 0xffffd30000034e00 0001 00000000 0x0 0x0 0xffffd30000034e80 0001 00000000 0x0 0x0 0xffffd30000034f00 0001 00000000 0x0 0x0 0xffffd30000034f80 0001 00000000 0x0 0x0 0xffffd30000035000 0001 00000000 0x0 0x0 0xffffd30000035080 0001 00000000 0x0 0x0 0xffffd30000035100 0001 00000000 0x0 0x0 0xffffd30000035180 0001 00000000 0x0 0x0 0xffffd30000035200 0001 00000000 0x0 0x0 0xffffd30000035280 0001 00000000 0x0 0x0 0xffffd30000035300 0001 00000000 0x0 0x0 0xffffd30000035380 0001 00000000 0x0 0x0 0xffffd30000035400 0001 00000000 0x0 0x0 0xffffd30000035480 0001 00000000 0x0 0x0 0xffffd30000035500 0001 00000000 0x0 0x0 0xffffd30000035580 0001 00000000 0x0 0x0 0xffffd30000035600 0001 00000000 0x0 0x0 0xffffd30000035680 0001 00000000 0x0 0x0 0xffffd30000035700 0001 00000000 0x0 0x0 0xffffd30000035780 0001 00000000 0x0 0x0 0xffffd30000035800 0001 00000000 0x0 0x0 0xffffd30000035880 0001 00000000 0x0 0x0 0xffffd30000035900 0001 00000000 0x0 0x0 0xffffd30000035980 0001 00000000 0x0 0x0 0xffffd30000035a00 0001 00000000 0x0 0x0 0xffffd30000035a80 0001 00000000 0x0 0x0 0xffffd30000035b00 0001 00000000 0x0 0x0 0xffffd30000035b80 0001 00000000 0x0 0x0 0xffffd30000035c00 0001 00000000 0x0 0x0 0xffffd30000035c80 0001 00000000 0x0 0x0 0xffffd30000035d00 0001 00000000 0x0 0x0 0xffffd30000035d80 0001 00000000 0x0 0x0 0xffffd30000035e00 0001 00000000 0x0 0x0 0xffffd30000035e80 0001 00000000 0x0 0x0 0xffffd30000035f00 0001 00000000 0x0 0x0 0xffffd30000035f80 0001 00000000 0x0 0x0 0xffffd30000036000 0001 00000000 0x0 0x0 0xffffd30000036080 0001 00000000 0x0 0x0 0xffffd30000036100 0001 00000000 0x0 0x0 0xffffd30000036180 0001 00000000 0x0 0x0 0xffffd30000036200 0001 00000000 0x0 0x0 0xffffd30000036280 0001 00000000 0x0 0x0 0xffffd30000036300 0001 00000000 0x0 0x0 0xffffd30000036380 0001 00000000 0x0 0x0 0xffffd30000036400 0001 00000000 0x0 0x0 0xffffd30000036480 0001 00000000 0x0 0x0 0xffffd30000036500 0001 00000000 0x0 0x0 0xffffd30000036580 0001 00000000 0x0 0x0 0xffffd30000036600 0001 00000000 0x0 0x0 0xffffd30000036680 0001 00000000 0x0 0x0 0xffffd30000036700 0001 00000000 0x0 0x0 0xffffd30000036780 0001 00000000 0x0 0x0 0xffffd30000036800 0001 00000000 0x0 0x0 0xffffd30000036880 0001 00000000 0x0 0x0 0xffffd30000036900 0001 00000000 0x0 0x0 0xffffd30000036980 0001 00000000 0x0 0x0 0xffffd30000036a00 0001 00000000 0x0 0x0 0xffffd30000036a80 0001 00000000 0x0 0x0 0xffffd30000036b00 0001 00000000 0x0 0x0 0xffffd30000036b80 0001 00000000 0x0 0x0 0xffffd30000036c00 0001 00000000 0x0 0x0 0xffffd30000036c80 0001 00000000 0x0 0x0 0xffffd30000036d00 0001 00000000 0x0 0x0 0xffffd30000036d80 0001 00000000 0x0 0x0 0xffffd30000036e00 0001 00000000 0x0 0x0 0xffffd30000036e80 0001 00000000 0x0 0x0 0xffffd30000036f00 0001 00000000 0x0 0x0 0xffffd30000036f80 0001 00000000 0x0 0x0 0xffffd30000037000 0001 00000000 0x0 0x0 0xffffd30000037080 0001 00000000 0x0 0x0 0xffffd30000037100 0001 00000000 0x0 0x0 0xffffd30000037180 0001 00000000 0x0 0x0 0xffffd30000037200 0001 00000000 0x0 0x0 0xffffd30000037280 0001 00000000 0x0 0x0 0xffffd30000037300 0001 00000000 0x0 0x0 0xffffd30000037380 0001 00000000 0x0 0x0 0xffffd30000037400 0001 00000000 0x0 0x0 0xffffd30000037480 0001 00000000 0x0 0x0 0xffffd30000037500 0001 00000000 0x0 0x0 0xffffd30000037580 0001 00000000 0x0 0x0 0xffffd30000037600 0001 00000000 0x0 0x0 0xffffd30000037680 0001 00000000 0x0 0x0 0xffffd30000037700 0001 00000000 0x0 0x0 0xffffd30000037780 0001 00000000 0x0 0x0 0xffffd30000037800 0001 00000000 0x0 0x0 0xffffd30000037880 0001 00000000 0x0 0x0 0xffffd30000037900 0001 00000000 0x0 0x0 0xffffd30000037980 0001 00000000 0x0 0x0 0xffffd30000037a00 0001 00000000 0x0 0x0 0xffffd30000037a80 0001 00000000 0x0 0x0 0xffffd30000037b00 0001 00000000 0x0 0x0 0xffffd30000037b80 0001 00000000 0x0 0x0 0xffffd30000037c00 0001 00000000 0x0 0x0 0xffffd30000037c80 0001 00000000 0x0 0x0 0xffffd30000037d00 0001 00000000 0x0 0x0 0xffffd30000037d80 0001 00000000 0x0 0x0 0xffffd30000037e00 0001 00000000 0x0 0x0 0xffffd30000037e80 0001 00000000 0x0 0x0 0xffffd30000037f00 0001 00000000 0x0 0x0 0xffffd30000037f80 0001 00000000 0x0 0x0 0xffffd30000038000 0001 00000000 0x0 0x0 0xffffd30000038080 0001 00000000 0x0 0x0 0xffffd30000038100 0001 00000000 0x0 0x0 0xffffd30000038180 0001 00000000 0x0 0x0 0xffffd30000038200 0001 00000000 0x0 0x0 0xffffd30000038280 0001 00000000 0x0 0x0 0xffffd30000038300 0001 00000000 0x0 0x0 0xffffd30000038380 0001 00000000 0x0 0x0 0xffffd30000038400 0001 00000000 0x0 0x0 0xffffd30000038480 0001 00000000 0x0 0x0 0xffffd30000038500 0001 00000000 0x0 0x0 0xffffd30000038580 0001 00000000 0x0 0x0 0xffffd30000038600 0001 00000000 0x0 0x0 0xffffd30000038680 0001 00000000 0x0 0x0 0xffffd30000038700 0001 00000000 0x0 0x0 0xffffd30000038780 0001 00000000 0x0 0x0 0xffffd30000038800 0001 00000000 0x0 0x0 0xffffd30000038880 0001 00000000 0x0 0x0 0xffffd30000038900 0001 00000000 0x0 0x0 0xffffd30000038980 0001 00000000 0x0 0x0 0xffffd30000038a00 0001 00000000 0x0 0x0 0xffffd30000038a80 0001 00000000 0x0 0x0 0xffffd30000038b00 0001 00000000 0x0 0x0 0xffffd30000038b80 0001 00000000 0x0 0x0 0xffffd30000038c00 0001 00000000 0x0 0x0 0xffffd30000038c80 0001 00000000 0x0 0x0 0xffffd30000038d00 0001 00000000 0x0 0x0 0xffffd30000038d80 0001 00000000 0x0 0x0 0xffffd30000038e00 0001 00000000 0x0 0x0 0xffffd30000038e80 0001 00000000 0x0 0x0 0xffffd30000038f00 0001 00000000 0x0 0x0 0xffffd30000038f80 0001 00000000 0x0 0x0 0xffffd30000039000 0001 00000000 0x0 0x0 0xffffd30000039080 0001 00000000 0x0 0x0 0xffffd30000039100 0001 00000000 0x0 0x0 0xffffd30000039180 0001 00000000 0x0 0x0 0xffffd30000039200 0001 00000000 0x0 0x0 0xffffd30000039280 0001 00000000 0x0 0x0 0xffffd30000039300 0001 00000000 0x0 0x0 0xffffd30000039380 0001 00000000 0x0 0x0 0xffffd30000039400 0001 00000000 0x0 0x0 0xffffd30000039480 0001 00000000 0x0 0x0 0xffffd30000039500 0001 00000000 0x0 0x0 0xffffd30000039580 0001 00000000 0x0 0x0 0xffffd30000039600 0001 00000000 0x0 0x0 0xffffd30000039680 0001 00000000 0x0 0x0 0xffffd30000039700 0001 00000000 0x0 0x0 0xffffd30000039780 0001 00000000 0x0 0x0 0xffffd30000039800 0001 00000000 0x0 0x0 0xffffd30000039880 0001 00000000 0x0 0x0 0xffffd30000039900 0001 00000000 0x0 0x0 0xffffd30000039980 0001 00000000 0x0 0x0 0xffffd30000039a00 0001 00000000 0x0 0x0 0xffffd30000039a80 0001 00000000 0x0 0x0 0xffffd30000039b00 0001 00000000 0x0 0x0 0xffffd30000039b80 0001 00000000 0x0 0x0 0xffffd30000039c00 0001 00000000 0x0 0x0 0xffffd30000039c80 0001 00000000 0x0 0x0 0xffffd30000039d00 0001 00000000 0x0 0x0 0xffffd30000039d80 0001 00000000 0x0 0x0 0xffffd30000039e00 0001 00000000 0x0 0x0 0xffffd30000039e80 0001 00000000 0x0 0x0 0xffffd30000039f00 0001 00000000 0x0 0x0 0xffffd30000039f80 0001 00000000 0x0 0x0 0xffffd3000003a000 0001 00000000 0x0 0x0 0xffffd3000003a080 0001 00000000 0x0 0x0 0xffffd3000003a100 0001 00000000 0x0 0x0 0xffffd3000003a180 0001 00000000 0x0 0x0 0xffffd3000003a200 0001 00000000 0x0 0x0 0xffffd3000003a280 0001 00000000 0x0 0x0 0xffffd3000003a300 0001 00000000 0x0 0x0 0xffffd3000003a380 0001 00000000 0x0 0x0 0xffffd3000003a400 0001 00000000 0x0 0x0 0xffffd3000003a480 0001 00000000 0x0 0x0 0xffffd3000003a500 0001 00000000 0x0 0x0 0xffffd3000003a580 0001 00000000 0x0 0x0 0xffffd3000003a600 0001 00000000 0x0 0x0 0xffffd3000003a680 0001 00000000 0x0 0x0 0xffffd3000003a700 0001 00000000 0x0 0x0 0xffffd3000003a780 0001 00000000 0x0 0x0 0xffffd3000003a800 0001 00000000 0x0 0x0 0xffffd3000003a880 0001 00000000 0x0 0x0 0xffffd3000003a900 0001 00000000 0x0 0x0 0xffffd3000003a980 0001 00000000 0x0 0x0 0xffffd3000003aa00 0001 00000000 0x0 0x0 0xffffd3000003aa80 0001 00000000 0x0 0x0 0xffffd3000003ab00 0001 00000000 0x0 0x0 0xffffd3000003ab80 0001 00000000 0x0 0x0 0xffffd3000003ac00 0001 00000000 0x0 0x0 0xffffd3000003ac80 0001 00000000 0x0 0x0 0xffffd3000003ad00 0001 00000000 0x0 0x0 0xffffd3000003ad80 0001 00000000 0x0 0x0 0xffffd3000003ae00 0001 00000000 0x0 0x0 0xffffd3000003ae80 0001 00000000 0x0 0x0 0xffffd3000003af00 0001 00000000 0x0 0x0 0xffffd3000003af80 0001 00000000 0x0 0x0 0xffffd3000003b000 0001 00000000 0x0 0x0 0xffffd3000003b080 0001 00000000 0x0 0x0 0xffffd3000003b100 0001 00000000 0x0 0x0 0xffffd3000003b180 0001 00000000 0x0 0x0 0xffffd3000003b200 0001 00000000 0x0 0x0 0xffffd3000003b280 0001 00000000 0x0 0x0 0xffffd3000003b300 0001 00000000 0x0 0x0 0xffffd3000003b380 0001 00000000 0x0 0x0 0xffffd3000003b400 0001 00000000 0x0 0x0 0xffffd3000003b480 0001 00000000 0x0 0x0 0xffffd3000003b500 0001 00000000 0x0 0x0 0xffffd3000003b580 0001 00000000 0x0 0x0 0xffffd3000003b600 0001 00000000 0x0 0x0 0xffffd3000003b680 0001 00000000 0x0 0x0 0xffffd3000003b700 0001 00000000 0x0 0x0 0xffffd3000003b780 0001 00000000 0x0 0x0 0xffffd3000003b800 0001 00000000 0x0 0x0 0xffffd3000003b880 0001 00000000 0x0 0x0 0xffffd3000003b900 0001 00000000 0x0 0x0 0xffffd3000003b980 0001 00000000 0x0 0x0 0xffffd3000003ba00 0001 00000000 0x0 0x0 0xffffd3000003ba80 0001 00000000 0x0 0x0 0xffffd3000003bb00 0001 00000000 0x0 0x0 0xffffd3000003bb80 0001 00000000 0x0 0x0 0xffffd3000003bc00 0001 00000000 0x0 0x0 0xffffd3000003bc80 0001 00000000 0x0 0x0 0xffffd3000003bd00 0001 00000000 0x0 0x0 0xffffd3000003bd80 0001 00000000 0x0 0x0 0xffffd3000003be00 0001 00000000 0x0 0x0 0xffffd3000003be80 0001 00000000 0x0 0x0 0xffffd3000003bf00 0001 00000000 0x0 0x0 0xffffd3000003bf80 0001 00000000 0x0 0x0 0xffffd3000003c000 0001 00000000 0x0 0x0 0xffffd3000003c080 0001 00000000 0x0 0x0 0xffffd3000003c100 0001 00000000 0x0 0x0 0xffffd3000003c180 0001 00000000 0x0 0x0 0xffffd3000003c200 0001 00000000 0x0 0x0 0xffffd3000003c280 0001 00000000 0x0 0x0 0xffffd3000003c300 0001 00000000 0x0 0x0 0xffffd3000003c380 0001 00000000 0x0 0x0 0xffffd3000003c400 0001 00000000 0x0 0x0 0xffffd3000003c480 0001 00000000 0x0 0x0 0xffffd3000003c500 0001 00000000 0x0 0x0 0xffffd3000003c580 0001 00000000 0x0 0x0 0xffffd3000003c600 0001 00000000 0x0 0x0 0xffffd3000003c680 0001 00000000 0x0 0x0 0xffffd3000003c700 0001 00000000 0x0 0x0 0xffffd3000003c780 0001 00000000 0x0 0x0 0xffffd3000003c800 0001 00000000 0x0 0x0 0xffffd3000003c880 0001 00000000 0x0 0x0 0xffffd3000003c900 0001 00000000 0x0 0x0 0xffffd3000003c980 0001 00000000 0x0 0x0 0xffffd3000003ca00 0001 00000000 0x0 0x0 0xffffd3000003ca80 0001 00000000 0x0 0x0 0xffffd3000003cb00 0001 00000000 0x0 0x0 0xffffd3000003cb80 0001 00000000 0x0 0x0 0xffffd3000003cc00 0001 00000000 0x0 0x0 0xffffd3000003cc80 0001 00000000 0x0 0x0