last executing test programs: 35.559958197s ago: executing program 5: mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x40000802) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) ioctl$FIOASYNC(r0, 0x80017472, &(0x7f0000000180)=0x16) __clone(0xe00, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) ioctl$FIOASYNC(r1, 0x80017472, &(0x7f0000000180)) compat_50_nanosleep(0xffffffffffffffff, 0x0) 32.893480387s ago: executing program 5: mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x40000802) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) ioctl$FIOASYNC(r0, 0x80017472, &(0x7f0000000180)=0x16) __clone(0xe00, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) ioctl$FIOASYNC(r1, 0x80017472, &(0x7f0000000180)) compat_50_nanosleep(0xffffffffffffffff, 0x0) 32.454031075s ago: executing program 5: mknod(&(0x7f00000000c0)='./file0\x00', 0x2000, 0x29b3) compat_43_stat43(&(0x7f00000001c0)='./file0/file0\x00', &(0x7f0000000040)) compat_43_ocreat(&(0x7f0000000000)='./file0\x00', 0x0) ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0xd27d43220c7df9b, 0x0) r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r1 = dup3(r0, r0, 0x0) lseek(r1, 0x0, 0x0, 0x0) compat_40_mount(&(0x7f0000000380)='tmpfs\x00', &(0x7f00000003c0)='.\x00', 0x0, &(0x7f0000000140)="01") acct(&(0x7f0000000180)='./file0/file0\x00') setrlimit(0x7, &(0x7f0000000100)={0x8000000000000000, 0x100}) compat_30_getfh(&(0x7f0000000180)='./file0\x00', 0x0) 31.824488172s ago: executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r0, &(0x7f0000000000)={0x0}, 0xfffffe32, 0x0, 0x0) symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00') compat_50___msgctl13$IPC_STAT(0x0, 0x2, &(0x7f0000000280)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100), 0xdffffffffffff7ff}}) lchown(&(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffff) compat_40_mount(&(0x7f0000000380)='union\x00', &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f00000001c0)) compat_40_mount(&(0x7f0000000180)='nilfs\x00', &(0x7f0000000040)='./file0\x00', 0x10000000, &(0x7f00000001c0)) open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) open(&(0x7f00000001c0)='./file0\x00', 0x6aaaf9f55adc2226, 0x0) 29.319779457s ago: executing program 5: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x870, 0x0) mknod(&(0x7f00000000c0)='./bus\x00', 0x2000, 0x0) open$dir(&(0x7f0000000000)='./bus\x00', 0x0, 0x8) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) (async) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f000055b000/0x2000)=nil) shmat(r0, &(0x7f0000001000/0x3000)=nil, 0x0) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil) (async) munmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000) (async) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x0) socket$inet(0x2, 0x0, 0x0) symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00') compat_43_orecvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/9, 0x9}, 0x0) (async) compat_40_mount(&(0x7f0000000180)='puffs\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000300)="1e") shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x0) (async) munmap(&(0x7f0000fec000/0x14000)=nil, 0x14000) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f000055b000/0x4000)=nil) r3 = shmat(r2, &(0x7f0000ff5000/0x4000)=nil, 0x0) __clone(0x4200, 0x0) shmdt(r3) (async) compat_40_mount(&(0x7f0000000000)='tmpfs\x00', &(0x7f00000003c0)='.\x00', 0x0, &(0x7f0000000140)="01") _lwp_create(&(0x7f0000000100)={0x0, 0x0, {[0x0, 0x0, 0x9]}, {}, {0x0, 0x0, '/)YR\x00'}}, 0x0, 0x0) (async) shmget(0x2, 0x2000, 0xff4540a6098252a4, &(0x7f0000ffc000/0x2000)=nil) _lwp_create(&(0x7f0000000200)={0x3, &(0x7f0000000180)={0x0, &(0x7f0000000080)={0x5, 0x0, {[0x0, 0x0, 0x1, 0x401]}, {}, {0x0, 0x0, 'tmpfs\x00'}}, {}, {0x0, 0x0, 0x5}, {0x400, 0xade, '.^\x05\x00'}}, {[0x4d]}, {}, {0x0, 0x0, '~\x00'}}, 0x0, 0x0) (async) __mount50(0x0, &(0x7f0000000040)='.\x00', 0xe680bf986d21abfb, &(0x7f0000000140), 0x0) (async) chroot(&(0x7f0000000180)='./file1\x00') symlink(&(0x7f0000000080)='.\x00', &(0x7f00000000c0)='./file0\x00') (async) compat_50___msgctl13$IPC_STAT(0x0, 0x2, &(0x7f0000000280)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x0, 0x40000000000000, 0x9, 0x48}, 0x1000}}) (async) open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) compat_40_mount(&(0x7f0000000380)='tmpfs\x00', &(0x7f0000000340)='./file0/../file0\x00', 0x40, &(0x7f0000000380)) 26.279268095s ago: executing program 5: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x870, 0x0) mknod(&(0x7f00000000c0)='./bus\x00', 0x2000, 0x0) open$dir(&(0x7f0000000000)='./bus\x00', 0x0, 0x8) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) (async) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f000055b000/0x2000)=nil) shmat(r0, &(0x7f0000001000/0x3000)=nil, 0x0) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil) (async) munmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000) (async) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x0) socket$inet(0x2, 0x0, 0x0) symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00') compat_43_orecvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/9, 0x9}, 0x0) (async) compat_40_mount(&(0x7f0000000180)='puffs\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000300)="1e") shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x0) (async) munmap(&(0x7f0000fec000/0x14000)=nil, 0x14000) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f000055b000/0x4000)=nil) r3 = shmat(r2, &(0x7f0000ff5000/0x4000)=nil, 0x0) __clone(0x4200, 0x0) shmdt(r3) (async) compat_40_mount(&(0x7f0000000000)='tmpfs\x00', &(0x7f00000003c0)='.\x00', 0x0, &(0x7f0000000140)="01") _lwp_create(&(0x7f0000000100)={0x0, 0x0, {[0x0, 0x0, 0x9]}, {}, {0x0, 0x0, '/)YR\x00'}}, 0x0, 0x0) (async) shmget(0x2, 0x2000, 0xff4540a6098252a4, &(0x7f0000ffc000/0x2000)=nil) _lwp_create(&(0x7f0000000200)={0x3, &(0x7f0000000180)={0x0, &(0x7f0000000080)={0x5, 0x0, {[0x0, 0x0, 0x1, 0x401]}, {}, {0x0, 0x0, 'tmpfs\x00'}}, {}, {0x0, 0x0, 0x5}, {0x400, 0xade, '.^\x05\x00'}}, {[0x4d]}, {}, {0x0, 0x0, '~\x00'}}, 0x0, 0x0) (async) __mount50(0x0, &(0x7f0000000040)='.\x00', 0xe680bf986d21abfb, &(0x7f0000000140), 0x0) (async) chroot(&(0x7f0000000180)='./file1\x00') symlink(&(0x7f0000000080)='.\x00', &(0x7f00000000c0)='./file0\x00') (async) compat_50___msgctl13$IPC_STAT(0x0, 0x2, &(0x7f0000000280)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x0, 0x40000000000000, 0x9, 0x48}, 0x1000}}) (async) open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) compat_40_mount(&(0x7f0000000380)='tmpfs\x00', &(0x7f0000000340)='./file0/../file0\x00', 0x40, &(0x7f0000000380)) 7.762274755s ago: executing program 2: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) __fhopen40(0x0, 0x0, 0x0) link(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r0 = socket(0x18, 0x3, 0x0) ioctl$FIOSEEKHOLE(r0, 0xc118691d, &(0x7f0000000180)=0x8000000000000032) compat_50___msgctl13$IPC_STAT(0x0, 0x2, &(0x7f0000000280)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)}}) __mount50(&(0x7f0000000000)='fdesc\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0) lchown(&(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffff) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x40000802) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$getflags(r1, 0x1) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setstatus(r2, 0x4, 0x20040) writev(r3, &(0x7f0000000200)=[{&(0x7f0000000100)="19", 0x3a4e1e905c56cdb7}], 0x1) socket(0x18, 0x2, 0x0) r4 = socket(0x18, 0x2, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) __mount50(&(0x7f0000000000)='kernfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0) r5 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) compat_43_ogetdirentries(r5, 0x0, 0x0, 0x0) unmount(&(0x7f0000000000)='./file0\x00', 0x255a0100) connect$unix(r4, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) getsockname$inet(r4, &(0x7f0000000080), &(0x7f0000000000)=0xfffffffffffffe22) bind$unix(0xffffffffffffffff, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x5, 0x0, 0xffffffffffffffff}, 0x8, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) socket$inet(0x2, 0x3, 0x80) r6 = socket(0x800000018, 0x1, 0x0) bind$unix(r6, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) compat_40_mount(&(0x7f0000000000)='null\x00', &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f00000001c0)) 6.277794643s ago: executing program 2: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) mknod(&(0x7f0000000340)='./file0\x00', 0x2000, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) ioctl$FIOGETBMAP(r1, 0x40287446, 0x0) modctl$MODCTL_LOAD(0x0, &(0x7f0000000140)={&(0x7f0000001180), 0x0, 0x0}) shmctl$SHM_LOCK(r0, 0x3) pathconf(&(0x7f0000000000)='./file0\x00', 0x11) compat_50___shmctl13$SHM_UNLOCK(r0, 0x3) 5.357647605s ago: executing program 0: _lwp_create(&(0x7f0000000280)={0x0, 0x0, {[0x2, 0x2, 0x9, 0x2]}, {0x9, 0x1}, {0x10000000000000, 0x0, '\\[\x00\x80\x9d|\x7f!\x18\x0f-\xd7)\xb1ODx\xbb\xa2XJ\xbf\nH\xdfk\xbb\xbd\x89\xd6\x8e\xbf\xb0>\xa9\xfbQ,\xf7\x94U\xc2\xcd\xa3J\x98\x03\x00<\xe6\xa3N\xff\x84p&n\x9ei\xc0\xdf\"Kmn`\xaf#TE\x98$6\xee\xf4Z\x02\x9b\x1c\xed\x87\x8fbo}uItT\x1a\xcb\xeb\xf6\xcb\x13\x9c\xb9R\x9c\x9c\x8c\xa5\xb2\xe8\xa56;\xf1\xe4\xa0\n\xa6\x15]\x8e\x92\xcd\x98\xa0D\x12\xf0\xa3\a\x98\xc0\xc4\xff\x98y9\xee\x93p\x979\xc0\xd2\x18'}}, 0x0, &(0x7f0000000080)) _lwp_create(&(0x7f00000001c0)={0x6, &(0x7f0000000140)={0x4, &(0x7f00000000c0)={0x2, 0x0, {[0x0, 0xfffffff7, 0x3, 0x7ff]}, {0x7, 0x9, 0x1}, {0x9ad6, 0x7f, '\x00'}}, {[0x5, 0x6, 0x6, 0x5]}, {0x8, 0x9, 0x4}, {0x800, 0x8, '\\[\x00'}}, {[0x9, 0x4, 0x1f, 0x1]}, {0x1, 0x3, 0x1}, {0xffffffffffffff42, 0xf0c5, '!:\\}\x00'}}, 0x0, &(0x7f0000000240)=0x0) open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x0) ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0xd27d43220c7df9b, 0x0) r1 = compat_30_socket(0x22, 0x3, 0x0) sendmsg$unix(r1, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYRES32=r1, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r1], 0x90, 0x6}, 0x0) _lwp_setname(r0, 0xffffffffffffffff) 5.087810017s ago: executing program 3: syz_extract_tcp_res(0x0, 0x0, 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0x2000, 0x4301) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) connect$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) compat_50_select(0x40, &(0x7f0000000000)={0xffffffff}, 0x0, 0x0, 0x0) 4.874239269s ago: executing program 1: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) compat_40_mount(0x0, 0x0, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) rasctl(&(0x7f0000000340), 0x7, 0x0) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x20, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0x0, 0x9}}}}}]}}]}}, 0x0) 4.87025594s ago: executing program 4: r0 = socket(0x1f, 0x5, 0xff) recvmmsg(r0, &(0x7f0000003480)={0x0}, 0x10, 0x2381, 0x0) 4.792242822s ago: executing program 0: mknod(&(0x7f0000000480)='./file0\x00', 0x2000, 0x1733) pipe(&(0x7f0000000a40)={0xffffffffffffffff}) r1 = getpid() fktrace(r0, 0x0, 0x62e2dd08f149ff1b, r1) compat_43_olseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FIOASYNC(0xffffffffffffffff, 0x4010426e, &(0x7f0000000140)) symlink(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='./file0\x00') mknod(&(0x7f0000000000)='./file0\x00', 0x40, 0x0) shutdown(0xffffffffffffffff, 0x2) pipe(&(0x7f0000000640)={0xffffffffffffffff}) readv(0xffffffffffffffff, &(0x7f0000000880)=[{&(0x7f0000000440)=""/234, 0xea}, {&(0x7f0000000540)=""/49, 0x31}, {&(0x7f0000000680)=""/248, 0xf8}, {&(0x7f0000000580)=""/185, 0xb9}, {&(0x7f0000000780)=""/197, 0xc5}], 0x5) write(r2, &(0x7f0000000340), 0xd4e688a67930cd) 4.542694881s ago: executing program 2: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) mknod(&(0x7f0000000340)='./file0\x00', 0x2000, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) ioctl$FIOGETBMAP(r1, 0x40287446, 0x0) modctl$MODCTL_LOAD(0x0, &(0x7f0000000140)={&(0x7f0000001180), 0x0, 0x0}) shmctl$SHM_LOCK(r0, 0x3) pathconf(&(0x7f0000000000)='./file0\x00', 0x11) compat_50___shmctl13$SHM_UNLOCK(r0, 0x3) 4.507044706s ago: executing program 1: _ksem_open(&(0x7f0000000140)='\x00\x00\x00\x00\x00', 0xf701, 0x114, 0x3, &(0x7f0000000100)) rmdir(&(0x7f0000000000)='./file0\x00') _ksem_unlink(0xfffffffffffffffe) compat_50___msgctl13$IPC_STAT(0x0, 0x2, &(0x7f0000000280)={{0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100), 0xdffffffffffff7ff}}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x400000) fcntl$getown(r1, 0x5) lchown(&(0x7f0000000340)='./file0\x00', r0, 0xffffffffffffffff) seteuid(r0) __getcwd(&(0x7f00000002c0)=""/224, 0xe0) __getcwd(&(0x7f0000000000)=""/8, 0x8) symlink(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00') 4.391943593s ago: executing program 2: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) __fhopen40(0x0, 0x0, 0x0) link(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r0 = socket(0x18, 0x3, 0x0) ioctl$FIOSEEKHOLE(r0, 0xc118691d, &(0x7f0000000180)=0x8000000000000032) compat_50___msgctl13$IPC_STAT(0x0, 0x2, &(0x7f0000000280)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)}}) __mount50(&(0x7f0000000000)='fdesc\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0) lchown(&(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffff) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x40000802) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$getflags(r1, 0x1) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setstatus(r2, 0x4, 0x20040) writev(r3, &(0x7f0000000200)=[{&(0x7f0000000100)="19", 0x3a4e1e905c56cdb7}], 0x1) socket(0x18, 0x2, 0x0) r4 = socket(0x18, 0x2, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) __mount50(&(0x7f0000000000)='kernfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0) r5 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) compat_43_ogetdirentries(r5, 0x0, 0x0, 0x0) unmount(&(0x7f0000000000)='./file0\x00', 0x255a0100) connect$unix(r4, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) getsockname$inet(r4, &(0x7f0000000080), &(0x7f0000000000)=0xfffffffffffffe22) bind$unix(0xffffffffffffffff, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x5, 0x0, 0xffffffffffffffff}, 0x8, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) socket$inet(0x2, 0x3, 0x80) r6 = socket(0x800000018, 0x1, 0x0) bind$unix(r6, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) compat_40_mount(&(0x7f0000000000)='null\x00', &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f00000001c0)) 4.256781364s ago: executing program 3: symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00') setreuid(0xee00, 0x0) r0 = getuid() setreuid(0x0, r0) chmod(&(0x7f0000000080)='./file0\x00', 0x2ea) 4.225249559s ago: executing program 1: connect$unix(0xffffffffffffffff, &(0x7f0000000040)=@abs={0x1, 0x0, 0x1}, 0x8) r0 = socket(0x18, 0x3, 0x3a) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000004d812, 0xffffffffffffffff, 0x0, 0x0) compat_50_utimes(0x0, &(0x7f0000000180)) setsockopt(r0, 0x29, 0x6c, &(0x7f0000000040), 0x4) unlinkat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0x66, &(0x7f0000000240)={0x5, 0x0, 0x0, 0x3}, 0xc) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0x67, &(0x7f0000000000), 0xc) 4.218578921s ago: executing program 4: r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000001100)={0x0, "6176b5a31c34698be1c886fa014d0aa29f47a5c627495921e6568f5c76eb6547c699ae06ce72088690e07b522990c74b91bbd73d263e01d0d8bc8e8c11487a47baed44a813d505ab341a769d5554dcd5ad528743741809c6d8d1c2d0b5b34a806c4db5432ceceec13d6f1d3b3fe22d5bce177e99c4869779cab11fbffbb0a6466e6539d5fc457636b4afeff289c0ea6ecf4fd4a28f8dbd7ad3fa6c89241126624da747b97eedb7a4f5d24701d61d09b3d5cef3e3744275713062b9254efc104f26f6a6819f8f00aca840b14aa29e76fd3986076f080ddc96c2ce8973b44611c1411b95442a4dc510f83ea05188b975b35f0758b721e0e5014656181229b0d67d696e8c04f36ed5a5525dca22cb5b379976bea35cbec6e764823a068f13e31a7f8b766f002db191c5baca3b062cedeee983e59b2914bfdd0889ff8e088b0a8c2191b22a26af262c39a3e0901b5abb702745f332d02670c506da10669b80775f5db5209921d78f8072b331e2d57f8d75d05a2e003cc704f36c909b9269e7df93e354443d4843989a8aa077336a324ab501dea10ab71c3964d8315f8cd5c7b2299bab832c8ec2aed58adc3fa29e6bde4ea648835ed627ecb8f91c7a4181c2991cec7a4ec855fa5c0129d191a2a2db4d4b791ce81a28b469e30badddce71da71ddfbf159249899abd99524275a84023008e47d5878a6fa6bcaac7f2a8aa92b887052dc28d05c0423d7f24ae1f2039d4825d99b0689911962e57b1c2090dacf55c41783c222d6b7752b654af89c50757bd4365d3c128460ad787638cac3f1bca6c913b72c08887c66e59d87b506c6b5bf02b1e4866a3a9ed454c6922e197fd58cd3d29dfa974f058ffca7ce600b67e88b19fea45ae6c06b30b166c9438e59c1e4d53b690935cfaecf8b834c0beebbf9ae2b259e2c826486446972472f0444b3ad9270ef22491d8c21e599f3a7fde12aa387d7ed33c6a0a7cc75ae5b9f0f5751b65fbbf4fdc68bc316aef66939b58164f0f5ea03f8e88ddb91d6cbdbf0509d538293b9df55bd166d2aa098ba9dcf5731c5e0ad4ac5fbb4255625ac8f90b07f962992558cc511f693b110c07ec72c61c7353c4520cf0b459f79940755030740ffad974bd041882820190e8dbccd6a32784652fd9d8b322be3930cee34d36c5096863c1551f2803cd126bd70b4d91c4caa325a291a10e4296961682bf49fc730768c3c6c20708a5ea97479a6235d50e4da0c26499041575615ecf47ee1d5f01e4b020ba575145b1372fcf56b31044abb46afce58210432498e8cd81583db1379c686d0bcd8c852318ab37e0c53d84a5eff23d4d76421f2708e5127bfa959427e5889003df786559e30273e28e03e758fe5c786b9e9f43a8d90b7823e91fba29c61f7d34a2f40412b25751c77430e5a83e80883715be90cda4fd203d2f84772970a5b608c307654bd62fae102eb322e1c5ee5d0dad9ea9c39e34cab2c3ac048eefbe321b794e92405a2a0a36699f7a6e38e4b27b434ea6a3c920425bc6a8a3e45a356414457c124cbd6bd2830168e586e819f6bba6dca987aa89cd23d9a3f8347d41a843651eb6de84d4054b20de6a264789b65d772aa02a4c18eef95c7b337203a9f23aa0cb3170fcc41523e777d2566991f3868e18798bbc1ea732e35f4f5066110c38585298dafb073295fca89a1c939c838b4424303f006df7a113b6c571fead3f672d2fc70f8008af8f620b5c12b0a7288a597de47c1cee28e076b6e973673ba03efc21fc3e85d1b3bcf4980b79c4b8c1d7276b2a4c8708fe863a747530d307a797394a50798fb356cf679f5299c3b91324ebff716fb8ad7a93ca1fb8a80d2bda0c4d89f765f4f91421565ef41acdff0ce24b07c760097796b7e56e995f96521040609f201d767339cdf593ae2700a84038b0a52754922fc69b8c0c60eee9814f5f77f7fc12c2cb85c5105c6a14a7d1060a4065c310c61e248a9b51427a21210e73519fad223becf1cac6331e6b0668c9cc1363fdefba3d82f8612e4cebcecd6358a5b62c46ae17f5a280752419f38bc39de966a53f610189f1dff91b9175576345825cda2ad647f869d6e8b51322c101d86b32a5286e4f409d9cb11d30d2e1518fdb9f3f2b9bec34dbf0cb529dee6411324f4f56952753530beaa5df97d221b48f63ac8e32f7bef9b3c3bf1a553310552dd94871595ea23f41550bc7482263ccf29d515954723c800897b168a6f4759778ab9122c0617d2cfd411078ca3a4b23bfd65f1a89c76b4f0ae8cb16d7d01e9935ff015cc51aa6a059427cbd2eccb6a1034025e10d84403fe55ebefe36cd368efcee21cb8a479d8e497114db59c2d9ec7f48d2b62d3ac0448e2a15cf7b5ed39c41c2083366527e38c8637a1778906a8d1f4835a0bb5b9cc0845156b534f5c5791a254f4dd6c07b4bcf5678a9a15babdf38bca0352a03765cbac04a2f532b3bb4ea6022771633c54154d51a5ab8cd14fbb293acb391fc737338157f0776d2d667ef98552aeb3a331f283b401bc8beeaac7994d82a419c59f94fa474c2633465ad08b393eb9e90ff500d7a993118f26277825da057f1620e31914cb12e77ff4aee266071cd66429b1d06bf8124dfe2a4b493aa97dfb892252a11954c8a4d72fc224b1af0ab9182b5f1797f6dfbf9ef87b5c2704f8aec78616617f8a50680d7efeb8cf2c195a9ab0ed40a051756fb629732dc76d587c0835bbed498653fa948dfbc37771042bfa4c18839fcb36555dd6f240cd0e215b9d99c4c2e5c11911810d0a34db47f9a32db22384c90c2359eb63514f1121162009246405c2bc09d517251a61f9e7fb10b482800e80c12b4507429bf167a1d54b2f335801787f375612186e11f16919c7dcf7f7bd4665"}, 0x801, 0x100000000000000) 3.341482165s ago: executing program 0: mknod(&(0x7f0000000480)='./file0\x00', 0x2000, 0x1733) pipe(&(0x7f0000000a40)={0xffffffffffffffff}) r1 = getpid() fktrace(r0, 0x0, 0x62e2dd08f149ff1b, r1) compat_43_olseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FIOASYNC(0xffffffffffffffff, 0x4010426e, &(0x7f0000000140)) symlink(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='./file0\x00') mknod(&(0x7f0000000000)='./file0\x00', 0x40, 0x0) shutdown(0xffffffffffffffff, 0x2) pipe(&(0x7f0000000640)={0xffffffffffffffff}) readv(0xffffffffffffffff, &(0x7f0000000880)=[{&(0x7f0000000440)=""/234, 0xea}, {&(0x7f0000000540)=""/49, 0x31}, {&(0x7f0000000680)=""/248, 0xf8}, {&(0x7f0000000580)=""/185, 0xb9}, {&(0x7f0000000780)=""/197, 0xc5}], 0x5) write(r2, &(0x7f0000000340), 0xd4e688a67930cd) 3.335007626s ago: executing program 4: r0 = socket$inet6(0x18, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000000)="02", 0x358, 0x2, &(0x7f0000000040)={0x18, 0x3}, 0x1c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4003, 0x0, 0x10, 0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0}, 0x10) 2.572163944s ago: executing program 1: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) __mount50(&(0x7f0000000040)='procfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f00000000c0)='@', 0x1) setuid(0xee01) r0 = socket$inet(0x2, 0x1, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x0}, 0x10) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0}, 0x10) compat_50___msgctl13$IPC_STAT(0x0, 0x2, &(0x7f0000000300)={{0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x0, 0x0, 0x7, 0x220}, 0x3, 0x0, 0x2}}) lchown(&(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffff) compat_40_mount(&(0x7f0000000380)='union\x00', &(0x7f0000000140)='./file0\x00', 0x3, &(0x7f00000001c0)) __fhstat50(&(0x7f0000000200)="ef187bc7f21288f381c7ffca3ad6a6755afd1ea9cebb4594e4d89cd4b3279153ce", 0x21, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', r2, r3, 0x0) pathconf(&(0x7f0000000080)='./file0\x00', 0x6) mknod(&(0x7f0000000000)='./file1\x00', 0x2000, 0xa718) r4 = open$dir(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0) ioctl$OFIOGETBMAP(r4, 0xc010447d, &(0x7f0000000080)) 2.538561599s ago: executing program 4: __mount50(&(0x7f00000002c0)='overlay\x00', &(0x7f0000000040)='.\x00', 0x0, &(0x7f0000000540), 0x0) r0 = open$dir(&(0x7f00000026c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200, 0x0) __fstat50(r0, &(0x7f0000000400)={0x0}) mknod(&(0x7f0000000200)='./file0\x00', 0x2000, r1) r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) readv(r2, 0x0, 0x0) 2.045986955s ago: executing program 2: open(0x0, 0x0, 0x0) compat_40_mount(&(0x7f0000000040)='tmpfs\x00', &(0x7f00000000c0)='.\x00', 0x0, &(0x7f00000002c0)="01") mknod(&(0x7f0000000040)='./file0\x00', 0x2950, 0x13d4) rename(0x0, 0x0) lchown(&(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffff) open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) unmount(&(0x7f0000000000)='./file0\x00', 0x0) open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) setrlimit(0x0, &(0x7f0000000980)={0xfffffffffffffffc}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) setreuid(0xee00, 0x0) r0 = getuid() mknod(&(0x7f0000000100)='./file0\x00', 0x80002005, 0x5300) __mount50(&(0x7f0000000000)='overlay\x00', &(0x7f0000000040)='.\x00', 0x0, &(0x7f0000000540), 0x0) fktrace(0xffffffffffffffff, 0x0, 0x0, 0x0) __wait450(0x0, 0x0, 0x0, 0x0) mknod(&(0x7f0000000040)='./bus\x00', 0x100000000205f, 0x0) compat_43_osethostname(0x0, 0x0) compat_50_quotactl(&(0x7f0000000000)='./file0\x00', 0x10001, 0x0, &(0x7f0000000040)) chown(&(0x7f0000000180)='./file0\x00', r0, 0xffffffffffffffff) lchown(&(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffff) compat_30_socket(0x22, 0x3, 0x2) 2.001659362s ago: executing program 0: mknod(&(0x7f0000000480)='./file0\x00', 0x2000, 0x1733) (async) mknod(&(0x7f0000000480)='./file0\x00', 0x2000, 0x1733) modctl$MODCTL_LOAD(0x0, &(0x7f0000000140)={&(0x7f0000001180), 0x0, 0x0}) compat_40_mount(&(0x7f0000000380)='tmpfs\x00', &(0x7f00000003c0)='.\x00', 0x0, &(0x7f0000000140)="01") mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0) __mount50(&(0x7f0000000000)='overlay\x00', &(0x7f0000000040)='.\x00', 0x0, &(0x7f0000000540), 0x0) (async) __mount50(&(0x7f0000000000)='overlay\x00', &(0x7f0000000040)='.\x00', 0x0, &(0x7f0000000540), 0x0) ktrace(&(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) (async) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) ioctl$FIOASYNC(r0, 0x8010427a, &(0x7f0000000000)) r1 = semget(0x1, 0x1, 0x458) semctl$GETNCNT(r1, 0x1, 0x3, &(0x7f0000000180)=""/110) 1.670834592s ago: executing program 1: semop(0x0, 0x0, 0x0) mlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) r0 = __clone(0x0, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xd49f275d97cc01bb, 0x1810, 0xffffffffffffffff, 0x0, 0x0) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x1) mknod(&(0x7f00000000c0)='./bus\x00', 0x2000, 0x4f4b) r1 = open$dir(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) ioctl$FIOASYNC(r1, 0xc0104304, &(0x7f00000001c0)=0x20000002) compat_14___semctl$GETZCNT(0x0, 0x0, 0x7) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x1000000) fktrace(r2, 0x0, 0x800, r0) 1.62162383s ago: executing program 3: symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00') setreuid(0xee00, 0x0) r0 = getuid() setreuid(0x0, r0) chmod(&(0x7f0000000080)='./file0\x00', 0x2ea) 1.588648725s ago: executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r1, &(0x7f0000000040)=@file={0xd19450564dee018c, './file0\x00'}, 0xa) shmat(0x0, &(0x7f0000ffa000/0x1000)=nil, 0x3000) compat_40_mount(&(0x7f0000000040)='tmpfs\x00', &(0x7f00000000c0)='.\x00', 0x0, &(0x7f00000002c0)="01") open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) minherit(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0xd49f275d97cc01bb, 0x1810, 0xffffffffffffffff, 0x0, 0x0) mknod(&(0x7f00000000c0)='./bus\x00', 0x2000, 0x0) open$dir(0x0, 0x0, 0x0) r2 = socket$inet6(0x18, 0x3, 0x0) __mount50(&(0x7f0000000000)='fdesc\x00', 0x0, 0x0, 0x0, 0x0) sendto$inet6(r2, &(0x7f0000000000)='<', 0x328, 0x2, &(0x7f0000000040)={0x18, 0x3}, 0x1c) r3 = open(&(0x7f0000000040)='./bus\x00', 0x100, 0x80) getpriority(0x0, 0xffffffffffffffff) r4 = getpid() fcntl$setown(r3, 0x6, r4) chflags(&(0x7f0000000000)='./file0\x00', 0xc0c971446ac1ffff) msgget(0x2, 0x10) r5 = msgget$private(0x0, 0x310) write(0xffffffffffffffff, &(0x7f0000000200)="72d219b4466082681c4814783f0acf10c54f6aacf963df81f259e3e2f12f32221b0f44c915c95d5d8882dc4438a6ba191f35c7f514533cbe60c482d05159c1b30c44cc390c61d42c2e197597ede778aaae250a7060a7bc1e4f47c6428b30bf3626b4fd5cff10fa664093bf9664", 0x6d) compat_50___msgctl13$IPC_STAT(r5, 0x2, &(0x7f0000000300)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0xfffe}, 0x0}) __mount50(0x0, 0x0, 0x0, 0x0, 0x0) r6 = socket(0x18, 0x2, 0x0) mknod(0x0, 0x0, 0x4301) listen(r6, 0x0) acct(&(0x7f0000000140)='./file0\x00') munmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000) compat_40_mount(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) modctl$MODCTL_LOAD(0x0, &(0x7f0000000140)={&(0x7f0000000040), 0x0, 0x0}) compat_43_ommap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0xc00, r0, 0x6) 1.509677037s ago: executing program 3: r0 = socket$inet6(0x18, 0x3, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) __mount50(&(0x7f0000000180)='kernfs\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0) compat_50___msgctl13$IPC_STAT(0x0, 0x2, &(0x7f00000003c0)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100), 0xdffffffffffff803}}) lchown(&(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffff) compat_40_mount(&(0x7f0000000380)='union\x00', &(0x7f0000000140)='./file0\x00', 0x3, &(0x7f00000001c0)) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) compat_30_getdents(r1, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x18, 0x3}, 0xc) 1.397242435s ago: executing program 2: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) mknod(&(0x7f0000000340)='./file0\x00', 0x2000, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) ioctl$FIOGETBMAP(r1, 0x40287446, 0x0) modctl$MODCTL_LOAD(0x0, &(0x7f0000000140)={&(0x7f0000001180), 0x0, 0x0}) shmctl$SHM_LOCK(r0, 0x3) pathconf(&(0x7f0000000000)='./file0\x00', 0x11) compat_50___shmctl13$SHM_UNLOCK(r0, 0x3) 1.16497432s ago: executing program 3: syz_extract_tcp_res(0x0, 0x0, 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0x2000, 0x4301) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) connect$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) compat_50_select(0x40, &(0x7f0000000000)={0xffffffff}, 0x0, 0x0, 0x0) 1.163355391s ago: executing program 1: mknod(&(0x7f0000000000)='./file0\x00', 0xe015, 0x0) compat_50___msgctl13$IPC_STAT(0x0, 0x2, 0x0) lchown(0x0, 0x0, 0xffffffffffffffff) compat_40_mount(0x0, 0x0, 0x0, 0x0) unlink(0x0) open(&(0x7f0000000040)='./file0\x00', 0x20000, 0x4) mknod(&(0x7f0000000000)='./file0\x00', 0x40, 0x40000802) 1.078885273s ago: executing program 0: r0 = open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7959) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="23211ad968d6b6588997c1bfcc14b11a7f8901f6f33b7a06d75615c3c02b935af8ab28e7c0baf8fe25d7181d6993a327cf675d1b5b9a6ae16eff1d5549e609", 0x3f}], 0x1) write(r0, &(0x7f00000004c0)="09eb00000db57c60c001267f5d5e8ee581e12aaa95ab10eba007a90172c84c838b4278ad535c2a591c97413f308cbbaee481ca7f31dbd1562ef7a6540a", 0x3d) r1 = fcntl$getown(r0, 0x5) getpgid(r1) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) __fhopen40(0x0, 0x0, 0x0) compat_50___msgctl13$IPC_STAT(0x0, 0x2, &(0x7f0000000280)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)}}) mknod(&(0x7f0000000480)='./file0\x00', 0x2000, 0x1733) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r3 = socket(0x18, 0x3, 0x0) connect$unix(r3, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) getsockname$inet(r3, &(0x7f00000000c0), &(0x7f0000000000)=0xffffffffffffff35) ioctl$FIOASYNC(r3, 0x80047476, &(0x7f0000000300)=0x6) ioctl$FIONREAD(r2, 0x80104267, &(0x7f0000000080)) __mount50(&(0x7f0000000000)='fdesc\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0) lchown(&(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffff) compat_40_mount(&(0x7f0000000000)='null\x00', &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f00000001c0)) pathconf(&(0x7f0000000000)='./file0\x00', 0x1) execve(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) 942.511745ms ago: executing program 3: r0 = msgget$private(0x0, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000380)=0xc) r2 = getgid() compat_12_stat12(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) __fhstat50(&(0x7f0000000140)="973d201032ddd9819a1f84c752497e1c8f655baf45c8851bd77adda5d879b7423fa1d0ffa4af7ec8575371261f7817fa2e19d20a7a86deee767f56f4c9284f0196d5e5e40704a465f4f498ffb65c97cdd1663c519cdcc483d64f5ba699db8681888c9467dc9eac82ae9e1ad9327cc7caa284978d2a2da8c6cc6385dcc7b0e2f5e9fa72d7764eb1351798492b339cedecde346d3f0ee40d410b75250508f8716afe4bc9cce832c67a2c4b13e5fcf7adb58b322e66ebbcc90e14f163db56cb24a2f1d217a63a9d8964a68e7d6579115ab0a60fbbe8f8d394c01e3c769802bbbb2977d84a1e6fcad3c112b72f026aa1d1", 0xef, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mknod(0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) __getcwd(&(0x7f0000000080)=""/26, 0x1a) pipe(&(0x7f0000000500)={0xffffffffffffffff}) r6 = getpid() fktrace(r5, 0x0, 0x62e2dd08f149ff1b, r6) mknod(&(0x7f00000000c0)='./file0\x00', 0x2000, 0x4100) r7 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="04bdfa5d3050006123339a346f731573d8d508750100000000000000325cebc37fc4e1dd543dbe2da6dd00000000000000000000000000000000a9c5143eff49ac23e9a72bc07d80", 0x48) ioctl$FIOASYNC(r7, 0x80085761, &(0x7f0000000040)=0x1) recvfrom$unix(r5, &(0x7f0000000400)=""/255, 0xff, 0x8, &(0x7f0000000040)=@abs={0x1, 0x0, 0x1}, 0x8) r8 = getpid() msgctl$IPC_SET(r0, 0x1, &(0x7f0000000300)={{0x3, r1, r2, r3, r4, 0x200, 0xff}, 0x50, 0x8000000000000001, r6, r8, 0x8, 0x1929, 0x5, 0x5}) mlock(&(0x7f0000ffe000/0x1000)=nil, 0x1000) r9 = getsid(0x0) ptrace(0x9, r9, 0x0, 0x0) compat_50_clock_gettime(0x1, 0x0) compat_50_wait4(0x0, 0x0, 0x0, 0x0) ptrace(0x1b, r9, &(0x7f0000000000), 0x4) faccessat(0xffffffffffffffff, &(0x7f00000003c0)='\x00', 0x0, 0x300) msgsnd(r0, &(0x7f0000001100)={0x0, "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"}, 0x801, 0x0) 487.919595ms ago: executing program 4: semget(0x3, 0x2, 0xf) execve(0x0, 0x0, 0x0) ____semctl50$SETALL(0x0, 0x0, 0x9, 0x0) 0s ago: executing program 0: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) __mount50(&(0x7f0000000040)='cd9660\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.208' (ED25519) to the list of known hosts. 2024/05/31 10:56:16 fuzzer started 2024/05/31 10:56:16 dialing manager at 10.128.0.163:30038 2024/05/31 10:56:17 starting 6 executor processes [ 46.7694300] uhub3: device problem, disabling port 1 [ 47.5194306] WARNING: module error: vfs load failed for `compat_12', error 2 [ 48.6694279] uhub3: device problem, disabling port 1 [ 48.8394302] load: 0.78 cmd: getty 1225 [ttyraw] 0.00u 0.05s 0% 1644k [ 49.3894289] WARNING: module error: vfs load failed for `nilfs', error 2 [ 49.8094305] uhub3: device problem, disabling port 1 [ 51.5794280] tap1: detached [ 51.7594352] tap2: detached [ 52.6094382] kobj_load, 185: [./file0]: linker error: read failed 45 [ 52.6201408] WARNING: module error: vfs load failed for `./file0', error 45 [ 53.0094294] tap4: detached [ 53.6994285] WARNING: module error: vfs load failed for `compat_12', error 2 [ 54.0494395] WARNING: module error: vfs load failed for `nilfs', error 2 [ 55.3294334] tap2: detached [ 55.7494331] tap0: detached [ 56.4794313] tap1: detached [ 58.6394310] load: 2.27 cmd: getty 1225 [ttyraw] 0.00u 0.05s 0% 1644k [ 58.9294335] tap1: detached [ 59.5094412] WARNING: module error: vfs load failed for `nilfs', error 2 [ 60.6294314] tap4: detached [ 61.0994375] tap0: detached [ 62.2494362] tap3: detached [ 62.7994298] pad0: outputs: 44100Hz, 16-bit, stereo [ 62.8094410] audio0 at pad0: playback [ 62.8094410] audio0: slinear_le:16 -> slinear_le:16 2ch 44100Hz, blk 1764 bytes (10ms) for playback [ 62.8194342] spkr1 at audio0: PC Speaker (synthesized) [ 62.8294335] wsbell at spkr1 not configured [ 62.8994380] kobj_load, 185: [./file0]: linker error: read failed 22 [ 62.9094355] WARNING: module error: vfs load failed for `./file0', error 22 [ 62.9294478] WARNING: module error: vfs load failed for `v7fs', error 2 [ 63.1894354] spkr1: detached [ 63.1994331] audio0: detached [ 63.2094339] pad0: detached [ 63.2994477] tap1: detached [ 63.7494336] kobj_load, 185: [./file0]: linker error: read failed 4 [ 63.7694387] WARNING: module error: vfs load failed for `./file0', error 4 [ 63.9094356] load: 3.37 cmd: getty 1225 [ttyraw] 0.00u 0.05s 0% 1644k [ 65.1494420] tap2: detached [ 66.0594405] kobj_load, 185: [./file0]: linker error: read failed 22 [ 66.0594405] WARNING: module error: vfs load failed for `./file0', error 22 [ 66.0794374] WARNING: module error: vfs load failed for `v7fs', error 2 [ 66.6294336] tap4: detached [ 66.6994552] load: 3.90 cmd: getty 1225 [ttyraw] 0.00u 0.05s 0% 1644k [ 67.3694411] tap3: detached [ 68.8494423] tap1: detached [ 69.1794345] tap2: detached [ 70.3994456] tap0: detached [ 71.8394395] tap5: detached [ 72.2694407] tap4: detached [ 72.5794358] tap3: detached [ 74.8594365] tap1: detached [ 74.9994425] tap2: detached [ 75.4194363] WARNING: defaulted mmap() share type to MAP_SHARED (pid 2523 command syz-executor.1) [ 77.9494358] tap3: detached [ 78.6394428] tap4: detached [ 78.6594383] tap0: detached [ 79.0194387] kobj_load, 185: [./file0]: linker error: read failed 22 [ 79.0327200] WARNING: module error: vfs load failed for `./file0', error 22 [ 79.0406732] WARNING: module error: vfs load failed for `v7fs', error 2 [ 79.3994395] tap5: detached [ 80.0194421] tap2: detached [ 81.3194385] tap4: detached [ 83.0594425] tap3: detached [ 84.4194420] tap2: detached [ 85.6594489] tap0: detached [ 86.1894394] tap1: detached [ 87.2494465] tap3: detached [ 87.8094585] WARNING: module error: vfs load failed for `autofs', error 2 [ 89.1294458] WARNING: module error: vfs load failed for `', error 2 [ 89.6694436] tap2: detached [ 92.1594436] tap0: detached [ 92.5594485] tap2: detached [ 92.9094500] WARNING: module error: vfs load failed for `l'C*;!9$S OW4s'+,e\GWmOWZ<_;:JoPbk1K;dh9Z+F<"<@$^a4b]u/', error 2 [ 93.2894465] WARNING: module error: vfs load failed for `nilfs', error 2 [ 95.2694431] tap3: detached [ 97.1694457] tap1: detached [ 97.4394522] tap2: detached [ 98.4694484] tap5: detached [ 99.1194570] uhub2: device problem, disabling port 1 [ 99.5494468] WARNING: defaulted mmap() share type to MAP_PRIVATE (pid 1698 command syz-executor.1) [ 100.4094461] tap4: detached [ 101.6494499] WARNING: module error: vfs load failed for `nilfs', error 2 [ 102.5494482] tap2: detached [ 103.2494533] .: failed to start extattr, error = 0tap4: detached [ 104.4494481] tap5: detached [ 105.8394531] tap2: detached [ 107.1394547] tap1: detached [ 109.1194475] tap0: detached [ 110.9094527] tap5: detached [ 112.0994509] tap3: detached [ 112.7394588] tap4: detached [ 112.9894518] tap1: detached [ 116.1194561] tap2: detached [ 116.8294556] tap0: detached [ 117.6994549] tap4: detached [ 118.1094558] tap3: detached [ 118.4294685] pad0: outputs: 44100Hz, 16-bit, stereo [ 118.4394619] audio0 at pad0: playback [ 118.4394619] audio0: slinear_le:16 -> slinear_le:16 2ch 44100Hz, blk 1764 bytes (10ms) for playback [ 118.4494543] spkr1 at audio0: PC Speaker (synthesized) [ 118.4594517] wsbell at spkr1 not configured [ 118.4894534] spkr1: detached [ 118.4894534] audio0: detached [ 118.5012235] pad0: detached [ 120.1794805] tap4: detached [ 121.1894579] tap1: detached [ 122.2094533] tap0: detached [ 122.3294554] tap3: detached [ 123.4394555] tap4: detached [ 123.5694547] WARNING: module error: vfs load failed for `', error 2 [ 125.3194607] tap1: detached [ 126.3994551] tap0: detached [ 128.3894612] WARNING: module error: vfs load failed for `', error 2 [ 128.6194662] tap4: detached [ 128.6994813] tap2: detached [ 128.9094547] tap3: detached [ 130.4594592] .: failed to start extattr, error = 0tap0: detached [ 131.2194639] WARNING: module error: vfs load failed for `compat_sysv_14', error 2 [ 131.4494569] uhub4: device problem, disabling port 1 [ 131.8494621] puffs_mount: development version mismatch: kernel 30, lib -678954141 [ 132.1794686] pad0: outputs: 44100Hz, 16-bit, stereo [ 132.1894615] audio0 at pad0: playback [ 132.1994579] audio0: slinear_le:16 -> slinear_le:16 2ch 44100Hz, blk 1764 bytes (10ms) for playback [ 132.2094607] spkr1 at audio0: PC Speaker (synthesized) [ 132.2094607] wsbell at spkr1 not configured [ 132.3194601] spkr1: detached [ 132.3494637] audio0: detached [ 132.3494637] pad0: detached [ 132.4694586] tap2: detached [ 133.2694597] WARNING: module error: vfs load failed for `', error 2 [ 133.8894615] tap0: detached [ 134.7594578] tap3: detached [ 135.7694615] pad0: outputs: 44100Hz, 16-bit, stereo [ 135.7794706] audio0 at pad0: playback [ 135.7794706] audio0: slinear_le:16 -> slinear_le:16 2ch 44100Hz, blk 1764 bytes (10ms) for playback [ 135.7894600] spkr1 at audio0: PC Speaker (synthesized) [ 135.7994606] wsbell at spkr1 not configured [ 135.8294617] spkr1: detached [ 135.8294617] audio0: detached [ 135.8394628] pad0: detached [ 136.0894681] WARNING: module error: vfs load failed for `', error 2 [ 138.1394618] panic: UBSan: Undefined Behavior in /syzkaller/managers/ci2-netbsd-kubsan/kernel/sys/net/if_llatbl.c:198:3, member access within misaligned address 0x646b6579 for type 'struct llentry' which requires 8 byte alignment [ 138.1660443] cpu0: Begin traceback... [ 138.1794535] vpanic() at netbsd:vpanic+0x2f0 [ 138.2494573] Report() at netbsd:Report+0x3b [ 138.3094548] HandleTypeMismatch() at netbsd:HandleTypeMismatch+0xfc [ 138.3594537] htable_foreach_lle() at netbsd:htable_foreach_lle+0x190 [ 138.4094531] htable_prefix_free() at netbsd:htable_prefix_free+0xd3 [ 138.4594568] lltable_prefix_free() at netbsd:lltable_prefix_free+0xb4 [ 138.5094573] rtrequest1() at netbsd:rtrequest1+0x138a [ 138.5594575] rtinit() at netbsd:rtinit+0x218 [ 138.6094719] in6_ifremprefix.isra.0() at netbsd:in6_ifremprefix.isra.0+0x73c [ 138.6594563] in6_purgeaddr() at netbsd:in6_purgeaddr+0xe0 [ 138.6994567] if_purgeaddrs() at netbsd:if_purgeaddrs+0x203 [ 138.7494529] in6_ifdetach() at netbsd:in6_ifdetach+0x26 [ 138.7994529] in6_purgeif() at netbsd:in6_purgeif+0x3f [ 138.8494590] rip6_purgeif_wrapper() at netbsd:rip6_purgeif_wrapper+0x3f [ 138.8994530] if_detach() at netbsd:if_detach+0xbbc [ 138.9494531] tap_detach() at netbsd:tap_detach+0x176 [ 138.9994528] config_detach_release() at netbsd:config_detach_release+0x4f9 [ 139.0594520] tap_clone_destroyer() at netbsd:tap_clone_destroyer+0x2d [ 139.1094565] tap_clone_destroy() at netbsd:tap_clone_destroy+0x30 [ 139.1694580] doifioctl() at netbsd:doifioctl+0x1a37 [ 139.2194572] soo_ioctl() at netbsd:soo_ioctl+0x294 [ 139.2594522] sys_ioctl() at netbsd:sys_ioctl+0xd88 [ 139.3094533] syscall() at netbsd:syscall+0x28b [ 139.3294710] --- syscall (number 54) --- [ 139.3394495] netbsd:syscall+0x28b: [ 139.3504224] cpu0: End traceback... [ 139.3504224] fatal breakpoint trap in supervisor mode [ 139.3504224] trap type 1 code 0 rip 0xffffffff80235475 cs 0x8 rflags 0x246 cr2 0x733032c0f702 ilevel 0x6 rsp 0xffff9b82484e3d50 [ 139.3706360] curlwp 0xffffd402ca4f3ac0 pid 2295.2295 lowest kstack 0xffff9b82484e02c0 Stopped in pid 2295.2295 (ifconfig) at netbsd:breakpoint+0x5: leave ? breakpoint() at netbsd:breakpoint+0x5 db_panic() at netbsd:db_panic+0xec vpanic() at netbsd:vpanic+0x2f0 Report() at netbsd:Report+0x3b HandleTypeMismatch() at netbsd:HandleTypeMismatch+0xfc htable_foreach_lle() at netbsd:htable_foreach_lle+0x190 htable_prefix_free() at netbsd:htable_prefix_free+0xd3 lltable_prefix_free() at netbsd:lltable_prefix_free+0xb4 rtrequest1() at netbsd:rtrequest1+0x138a rtinit() at netbsd:rtinit+0x218 in6_ifremprefix.isra.0() at netbsd:in6_ifremprefix.isra.0+0x73c in6_purgeaddr() at netbsd:in6_purgeaddr+0xe0 if_purgeaddrs() at netbsd:if_purgeaddrs+0x203 in6_ifdetach() at netbsd:in6_ifdetach+0x26 in6_purgeif() at netbsd:in6_purgeif+0x3f rip6_purgeif_wrapper() at netbsd:rip6_purgeif_wrapper+0x3f if_detach() at netbsd:if_detach+0xbbc tap_detach() at netbsd:tap_detach+0x176 config_detach_release() at netbsd:config_detach_release+0x4f9 tap_clone_destroyer() at netbsd:tap_clone_destroyer+0x2d tap_clone_destroy() at netbsd:tap_clone_destroy+0x30 doifioctl() at netbsd:doifioctl+0x1a37 soo_ioctl() at netbsd:soo_ioctl+0x294 sys_ioctl() at netbsd:sys_ioctl+0xd88 syscall() at netbsd:syscall+0x28b --- syscall (number 54) --- netbsd:syscall+0x28b: Panic string: UBSan: Undefined Behavior in /syzkaller/managers/ci2-netbsd-kubsan/kernel/sys/net/if_llatbl.c:198:3, member access within misaligned address 0x646b6579 for type 'struct llentry' which requires 8 byte alignment PID LID S CPU FLAGS STRUCT LWP * NAME WAIT 2295 > 2295 7 0 0 ffffd402ca4f3ac0 ifconfig 2441 2441 2 1 0 ffffd402c0a9b140 syz-executor.0 2450 2450 2 0 0 ffffd402c0703940 syz-executor.4 4794 4794 3 0 0 ffffd402babe7180 syz-executor.3 vm_map 2724 2724 2 1 0 ffffd402c0395300 syz-executor.1 2448 2448 3 1 180 ffffd402b4208100 syz-executor.2 wait 3936 3936 3 0 180 ffffd402ca156200 syz-executor.2 parked 2525 2525 3 0 180 ffffd402bef58a40 syz-executor.5 parked 1894 2633 3 0 1100000 ffffd402c07030c0 syz-executor.5 vfork 1894 1894 3 1 11000000 ffffd402babe75c0 syz-executor.5 lwpwait 1693 1693 3 0 180 ffffd402bef58600 syz-executor.2 parked 1642 1642 3 0 180 ffffd402b2bc4700 syz-executor.3 parked 1261 1261 3 0 180 ffffd402c0b73340 syz-executor.0 parked 1596 1596 3 0 180 ffffd402c107e980 syz-executor.4 parked 1159 1159 3 0 180 ffffd402b299c6c0 syz-executor.5 parked 2630 2630 3 1 180 ffffd402c1ba88c0 syz-executor.5 parked 758 758 3 1 180 ffffd402b48d0a80 syz-executor.1 parked 1080 1494 3 0 1c0 ffffd402b3a22500 syz-fuzzer parked 1080 1074 3 0 180 ffffd402b4208540 syz-fuzzer wait 1080 1206 3 0 180 ffffd402b2d184c0 syz-fuzzer wait 1080 1236 3 0 180 ffffd402b299c280 syz-fuzzer kqueue 1080 1240 3 1 180 ffffd402b3570600 syz-fuzzer wait 1080 990 3 0 180 ffffd402b2d18900 syz-fuzzer parked 1080 929 3 0 180 ffffd402b2ab6300 syz-fuzzer wait 1080 1241 3 1 180 ffffd402b3893a00 syz-fuzzer wait 1080 1235 3 0 180 ffffd402b2d18080 syz-fuzzer parked 1080 449 3 0 180 ffffd402b48d0200 syz-fuzzer parked 1080 1226 3 1 180 ffffd402b382db00 syz-fuzzer parked 1080 1229 3 0 180 ffffd402b44c6240 syz-fuzzer parked 1080 1233 3 0 180 ffffd402b382d6c0 syz-fuzzer nanoslp 1080 1080 3 0 180 ffffd402b382d280 syz-fuzzer parked 1231 1231 3 0 180 ffffd402b44c6ac0 sshd select 1151 1151 3 0 180 ffffd402b3570a40 getty nanoslp 1216 1216 3 0 180 ffffd402b299cb00 getty nanoslp 1184 1184 3 1 180 ffffd402b26b7200 getty nanoslp 1225 1225 3 1 180 ffffd402b26a4ac0 getty ttyraw 1109 1109 3 0 180 ffffd402b48d0640 sshd select 1096 1096 3 0 180 ffffd402b44c6680 powerd kqueue 700 700 3 1 180 ffffd402b3893180 syslogd kqueue 746 746 3 0 180 ffffd402b2fde040 dhcpcd poll 745 745 3 1 180 ffffd402b2cb1340 dhcpcd poll 742 > 742 7 1 0 ffffd402b2db6580 dhcpcd 620 620 3 1 180 ffffd402b4208980 dhcpcd poll 292 292 3 0 180 ffffd402b2cb1780 dhcpcd poll 485 485 3 0 180 ffffd402b2ab6b80 dhcpcd poll 291 291 3 1 180 ffffd402b2fde480 dhcpcd poll 1 1 3 0 180 ffffd402aa487100 init wait 0 3256 5 1 200 ffffd402babe7a00 (zombie) 0 3295 3 1 200 ffffd402b2ab6740 ktrace ktrwait 0 967 3 0 200 ffffd402b26b7640 physiod physiod 0 196 3 1 200 ffffd402b26a4680 pooldrain pooldrain 0 195 3 0 200 ffffd402b26a4240 ioflush syncer 0 194 3 0 200 ffffd402b26b7a80 pgdaemon pgdaemon 0 170 3 1 200 ffffd402b05dea40 usb7 usbevt 0 169 3 0 200 ffffd402b05de600 usb6 usbevt 0 168 3 0 200 ffffd402b05de1c0 usb5 usbevt 0 167 3 0 200 ffffd402ad559a00 usb4 usbevt 0 166 3 0 200 ffffd402ad5595c0 usb3 usbevt 0 165 3 1 200 ffffd402ad559180 usb2 usbevt 0 31 3 1 200 ffffd402ab5049c0 usb1 usbevt 0 63 3 0 200 ffffd402ab504580 usb0 usbevt 0 126 3 1 200 ffffd402ab504140 usbtask-dr usbtsk 0 125 3 1 200 ffffd402aa487980 usbtask-hc usbtsk 0 124 3 0 200 ffffd402a8895b00 swwreboot swwreboot 0 123 3 1 200 ffffd402aa487540 npfgc0 npfgcw 0 122 2 0 200 ffffd402aa44d940 rt_free 0 121 3 1 200 ffffd402aa44d500 unpgc unpgc 0 120 3 0 200 ffffd402aa44d0c0 key_timehandler key_timehandler 0 119 3 1 200 ffffd402aa447900 icmp6_wqinput/1 icmp6_wqinput 0 118 3 0 200 ffffd402aa4474c0 icmp6_wqinput/0 icmp6_wqinput 0 117 3 0 200 ffffd402aa447080 nd6_timer nd6_timer 0 116 3 1 200 ffffd402aa4328c0 carp6_wqinput/1 carp6_wqinput 0 115 3 0 200 ffffd402aa432480 carp6_wqinput/0 carp6_wqinput 0 114 3 1 200 ffffd402aa432040 carp_wqinput/1 carp_wqinput 0 113 3 0 200 ffffd402aa3debc0 carp_wqinput/0 carp_wqinput 0 112 3 1 200 ffffd402aa2ff740 icmp_wqinput/1 icmp_wqinput 0 111 3 0 200 ffffd402aa2ffb80 icmp_wqinput/0 icmp_wqinput 0 110 3 0 200 ffffd402aa3de340 rt_timer rt_timer 0 109 3 0 200 ffffd402aa3de780 vmem_rehash vmem_rehash 0 100 3 1 200 ffffd402aa2ff300 entbutler entropy 0 99 3 0 200 ffffd402a9d3eb40 viomb balloon 0 98 3 1 200 ffffd402a9d3e700 vioif0_txrx/1 vioif0_txrx 0 97 3 0 200 ffffd402a9d3e2c0 vioif0_txrx/0 vioif0_txrx 0 30 3 1 200 ffffd402a88956c0 scsibus0 sccomp 0 29 3 0 200 ffffd402a8895280 pms0 pmsreset 0 28 3 1 200 ffffd402a87b5ac0 xcall/1 xcall 0 27 1 1 200 ffffd402a87b5680 softser/1 0 26 1 1 200 ffffd402a87b5240 softclk/1 0 25 1 1 200 ffffd402a8798a80 softbio/1 0 24 1 1 200 ffffd402a8798640 softnet/1 0 23 1 1 201 ffffd402a8798200 idle/1 0 22 3 1 200 ffffd403d6b33a40 lnxsyswq lnxsyswq 0 21 3 1 200 ffffd403d6b33600 lnxubdwq lnxubdwq 0 20 3 0 200 ffffd403d6b331c0 lnxpwrwq lnxpwrwq 0 19 3 1 200 ffffd403d6b42a00 lnxlngwq lnxlngwq 0 18 3 1 200 ffffd403d6b425c0 lnxhipwq lnxhipwq 0 17 3 1 200 ffffd403d6b42180 lnxrcugc lnxrcugc 0 16 3 0 200 ffffd403d6b599c0 sysmon smtaskq 0 15 3 1 200 ffffd403d6b59580 pmfsuspend pmfsuspend 0 14 3 1 200 ffffd403d6b59140 pmfevent pmfevent 0 13 3 0 200 ffffd403d6b6c980 sopendfree sopendfr 0 12 3 0 200 ffffd403d6b6c540 ifwdog ifwdog 0 11 3 1 200 ffffd403d6b6c100 iflnkst iflnkst 0 10 3 1 200 ffffd403d7b97940 nfssilly nfssilly 0 9 3 1 200 ffffd403d7b97500 pooldisp pooldisp 0 8 3 1 200 ffffd403d7b970c0 modunload mod_unld 0 7 3 0 200 ffffd403d7bc2900 xcall/0 xcall 0 6 1 0 200 ffffd403d7bc24c0 softser/0 0 5 1 0 200 ffffd403d7bc2080 softclk/0 0 4 1 0 200 ffffd403d7bed8c0 softbio/0 0 3 1 0 200 ffffd403d7bed480 softnet/0 0 2 1 0 201 ffffd403d7bed040 idle/0 0 0 3 0 200 ffffffff86795c80 swapper uvm [Locks tracked through LWPs] ****** LWP 2295.2295 (ifconfig) @ 0xffffd402ca4f3ac0, l_stat=7 *** Locks held: * Lock 0 (initialized at netbsd:ifinit1+0x23) lock address : netbsd:if_clone_mtx type : sleep/adaptive initialized : netbsd:ifinit1+0x23 shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 0 relevant cpu : 0 last held: 0 relevant lwp : 0xffffd402ca4f3ac0 last held: 0xffffd402ca4f3ac0 last locked* : netbsd:doifioctl+0x187a unlocked : netbsd:doifioctl+0x1a62 owner field : 0xffffd402ca4f3ac0 wait/spin: 0/0 Turnstile: no active turnstile for this lock. * Lock 1 (initialized at netbsd:soinit+0x1f7) lock address : ffffd403d805e340 type : sleep/adaptive initialized : netbsd:soinit+0x1f7 shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 1 relevant cpu : 0 last held: 0 relevant lwp : 0xffffd402ca4f3ac0 last held: 0xffffd402ca4f3ac0 last locked* : netbsd:rip6_purgeif_wrapper+0x28 unlocked : netbsd:sopoll+0x144 owner field : 0xffffd402ca4f3ac0 wait/spin: 0/0 Turnstile: no active turnstile for this lock. * Lock 2 (initialized at netbsd:if_initialize+0x36d) lock address : ffffd402cb4b8400 type : sleep/adaptive initialized : netbsd:if_initialize+0x36d shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 0 relevant cpu : 0 last held: 0 relevant lwp : 0xffffd402ca4f3ac0 last held: 0xffffd402ca4f3ac0 last locked* : netbsd:in6_purgeif+0x37 unlocked : netbsd:rip_purgeif_wrapper+0x4a owner field : 0xffffd402ca4f3ac0 wait/spin: 0/0 Turnstile: no active turnstile for this lock. * Lock 3 (initialized at netbsd:if_initialize+0x26b) lock address : ffffd402cb9b27c0 type : sleep/adaptive initialized : netbsd:if_initialize+0x26b shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 0 relevant cpu : 0 last held: 0 relevant lwp : 0xffffd402ca4f3ac0 last held: 0xffffd402ca4f3ac0 last locked* : netbsd:htable_prefix_free+0x9c unlocked : netbsd:htable_prefix_free+0x19e owner/count : 0xffffd402ca4f3ac0 flags : 0x0000000000000004 Turnstile: no active turnstile for this lock. *** Locks wanted: * Lock 0 (initialized at netbsd:module_hook_init+0x1c) lock address : netbsd:module_hook type : sleep/adaptive initialized : netbsd:module_hook_init+0x1c shared holds : 0 exclusive: 0 shares wanted: 0 exclusive: 0 relevant cpu : 0 last held: 0 relevant lwp : 0xffffd402ca4f3ac0 last held: 000000000000000000 last locked : 0 unlocked* : 0 owner field : 000000000000000000 wait/spin: 0/0 Turnstile: no active turnstile for this lock. ****** LWP 2441.2441 (syz-executor.0) @ 0xffffd402c0a9b140, l_stat=2 *** Locks held: * Lock 0 (initialized at netbsd:kcov_open+0x52) lock address : ffffd402c42f9940 type : sleep/adaptive initialized : netbsd:kcov_open+0x52 shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 0 relevant cpu : 1 last held: 0 relevant lwp : 0xffffd402c0a9b140 last held: 0xffffd402c0a9b140 last locked* : netbsd:kcov_fops_ioctl+0x5c unlocked : 0 owner field : 0xffffd402c0a9b140 wait/spin: 0/0 Turnstile: no active turnstile for this lock. *** Locks wanted: * Lock 0 (initialized at netbsd:uvm_km_bootstrap+0x9e) lock address : netbsd:kernel_map_store+0x18 type : sleep/adaptive initialized : netbsd:uvm_km_bootstrap+0x9e shared holds : 0 exclusive: 0 shares wanted: 0 exclusive: 2 relevant cpu : 1 last held: 0 relevant lwp : 0xffffd402c0a9b140 last held: 000000000000000000 last locked : netbsd:vm_map_lock+0x84 unlocked* : netbsd:cv_wait+0x18f owner field : 000000000000000000 wait/spin: 0/0 Turnstile: no active turnstile for this lock. ****** LWP 2450.2450 (syz-executor.4) @ 0xffffd402c0703940, l_stat=2 *** Locks held: * Lock 0 (initialized at netbsd:kcov_open+0x52) lock address : ffffd402c01424c0 type : sleep/adaptive initialized : netbsd:kcov_open+0x52 shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 0 relevant cpu : 0 last held: 0 relevant lwp : 0xffffd402c0703940 last held: 0xffffd402c0703940 last locked* : netbsd:kcov_fops_ioctl+0x5c unlocked : 0 owner field : 0xffffd402c0703940 wait/spin: 0/0 Turnstile: no active turnstile for this lock. *** Locks wanted: none ****** LWP 4794.4794 (syz-executor.3) @ 0xffffd402babe7180, l_stat=3 *** Locks held: * Lock 0 (initialized at netbsd:kcov_open+0x52) lock address : ffffd402c965cac0 type : sleep/adaptive initialized : netbsd:kcov_open+0x52 shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 0 relevant cpu : 0 last held: 0 relevant lwp : 0xffffd402babe7180 last held: 0xffffd402babe7180 last locked* : netbsd:kcov_fops_ioctl+0x5c unlocked : 0 owner field : 0xffffd402babe7180 wait/spin: 0/0 Turnstile: no active turnstile for this lock. *** Locks wanted: none ****** LWP 2724.2724 (syz-executor.1) @ 0xffffd402c0395300, l_stat=2 *** Locks held: * Lock 0 (initialized at netbsd:kcov_open+0x52) lock address : ffffd402caaff7c0 type : sleep/adaptive initialized : netbsd:kcov_open+0x52 shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 0 relevant cpu : 1 last held: 0 relevant lwp : 0xffffd402c0395300 last held: 0xffffd402c0395300 last locked* : netbsd:kcov_fops_ioctl+0x5c unlocked : 0 owner field : 0xffffd402c0395300 wait/spin: 0/0 Turnstile: no active turnstile for this lock. *** Locks wanted: * Lock 0 (initialized at netbsd:uvm_km_bootstrap+0x9e) lock address : netbsd:kernel_map_store+0x18 type : sleep/adaptive initialized : netbsd:uvm_km_bootstrap+0x9e shared holds : 0 exclusive: 0 shares wanted: 0 exclusive: 2 relevant cpu : 1 last held: 0 relevant lwp : 0xffffd402c0395300 last held: 000000000000000000 last locked : netbsd:vm_map_lock+0x84 unlocked* : netbsd:cv_wait+0x18f owner field : 000000000000000000 wait/spin: 0/0 Turnstile: no active turnstile for this lock. ****** LWP 745.745 (dhcpcd) @ 0xffffd402b2cb1340, l_stat=3 *** Locks held: none *** Locks wanted: * Lock 0 (initialized at netbsd:module_hook_init+0x1c) lock address : netbsd:module_hook type : sleep/adaptive initialized : netbsd:module_hook_init+0x1c shared holds : 0 exclusive: 0 shares wanted: 0 exclusive: 0 relevant cpu : 1 last held: 0 relevant lwp : 0xffffd402b2cb1340 last held: 000000000000000000 last locked : 0 unlocked* : 0 owner field : 000000000000000000 wait/spin: 0/0 Turnstile: no active turnstile for this lock. ****** LWP 742.742 (dhcpcd) @ 0xffffd402b2db6580, l_stat=7 *** Locks held: none *** Locks wanted: * Lock 0 (initialized at netbsd:module_hook_init+0x1c) lock address : netbsd:module_hook type : sleep/adaptive initialized : netbsd:module_hook_init+0x1c shared holds : 0 exclusive: 0 shares wanted: 0 exclusive: 0 relevant cpu : 1 last held: 0 relevant lwp : 0xffffd402b2db6580 last held: 000000000000000000 last locked : 0 unlocked* : 0 owner field : 000000000000000000 wait/spin: 0/0 Turnstile: no active turnstile for this lock. ****** LWP 485.485 (dhcpcd) @ 0xffffd402b2ab6b80, l_stat=3 *** Locks held: none *** Locks wanted: * Lock 0 (initialized at netbsd:module_hook_init+0x1c) lock address : netbsd:module_hook type : sleep/adaptive initialized : netbsd:module_hook_init+0x1c shared holds : 0 exclusive: 0 shares wanted: 0 exclusive: 0 relevant cpu : 0 last held: 0 relevant lwp : 0xffffd402b2ab6b80 last held: 000000000000000000 last locked : 0 unlocked* : 0 owner field : 000000000000000000 wait/spin: 0/0 Turnstile: no active turnstile for this lock. ****** LWP 291.291 (dhcpcd) @ 0xffffd402b2fde480, l_stat=3 *** Locks held: none *** Locks wanted: * Lock 0 (initialized at netbsd:module_hook_init+0x1c) lock address : netbsd:module_hook type : sleep/adaptive initialized : netbsd:module_hook_init+0x1c shared holds : 0 exclusive: 0 shares wanted: 0 exclusive: 0 relevant cpu : 1 last held: 0 relevant lwp : 0xffffd402b2fde480 last held: 000000000000000000 last locked : 0 unlocked* : 0 owner field : 000000000000000000 wait/spin: 0/0 Turnstile: no active turnstile for this lock. ****** LWP 0.26 (softclk/1) @ 0xffffd402a87b5240, l_stat=1 *** Locks held: none *** Locks wanted: * Lock 0 (initialized at netbsd:module_hook_init+0x1c) lock address : netbsd:module_hook type : sleep/adaptive initialized : netbsd:module_hook_init+0x1c shared holds : 0 exclusive: 0 shares wanted: 0 exclusive: 0 relevant cpu : 1 last held: 0 relevant lwp : 0xffffd402a87b5240 last held: 000000000000000000 last locked : 0 unlocked* : 0 owner field : 000000000000000000 wait/spin: 0/0 Turnstile: no active turnstile for this lock. ****** LWP 0.11 (iflnkst) @ 0xffffd403d6b6c100, l_stat=3 *** Locks held: none *** Locks wanted: * Lock 0 (initialized at netbsd:module_hook_init+0x1c) lock address : netbsd:module_hook type : sleep/adaptive initialized : netbsd:module_hook_init+0x1c shared holds : 0 exclusive: 0 shares wanted: 0 exclusive: 0 relevant cpu : 1 last held: 0 relevant lwp : 0xffffd403d6b6c100 last held: 000000000000000000 last locked : 0 unlocked* : 0 owner field : 000000000000000000 wait/spin: 0/0 Turnstile: no active turnstile for this lock. ****** LWP 0.5 (softclk/0) @ 0xffffd403d7bc2080, l_stat=1 *** Locks held: none *** Locks wanted: * Lock 0 (initialized at netbsd:module_hook_init+0x1c) lock address : netbsd:module_hook type : sleep/adaptive initialized : netbsd:module_hook_init+0x1c shared holds : 0 exclusive: 0 shares wanted: 0 exclusive: 0 relevant cpu : 0 last held: 0 relevant lwp : 0xffffd403d7bc2080 last held: 000000000000000000 last locked : 0 unlocked* : 0 owner field : 000000000000000000 wait/spin: 0/0 Turnstile: no active turnstile for this lock. ****** LWP 0.0 (swapper) @ 0xffffffff86795c80, l_stat=3 *** Locks held: none *** Locks wanted: * Lock 0 (initialized at netbsd:module_hook_init+0x1c) lock address : netbsd:module_hook type : sleep/adaptive initialized : netbsd:module_hook_init+0x1c shared holds : 0 exclusive: 0 shares wanted: 0 exclusive: 0 relevant cpu : 0 last held: 0 relevant lwp : 0xffffffff86795c80 last held: 000000000000000000 last locked : 0 unlocked* : 0 owner field : 000000000000000000 wait/spin: 0/0 Turnstile: no active turnstile for this lock. [Locks tracked through CPUs] ******* Locks held on cpu0: * Lock 0 (initialized at netbsd:main+0x106) lock address : netbsd:kernel_lock type : spin initialized : netbsd:main+0x106 shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 0 relevant cpu : 0 last held: 0 relevant lwp : 0xffffd402ca4f3ac0 last held: 0xffffd402ca4f3ac0 last locked* : netbsd:sleepq_block+0x81d unlocked : netbsd:route_intr+0x135 curcpu holds : 3 wanted by: 000000000000000000 * Lock 1 (initialized at netbsd:kprintf_init+0x72) lock address : netbsd:kprintf_mtx type : spin initialized : netbsd:kprintf_init+0x72 shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 0 relevant cpu : 0 last held: 0 relevant lwp : 0xffffd402ca4f3ac0 last held: 0xffffd402ca4f3ac0 last locked* : netbsd:kprintf_lock+0x50 unlocked : netbsd:kprintf_unlock+0x70 owner field : 0x0000000000000800 wait/spin: 0/1 PAGE FLAG PQ UOBJECT UANON 0xffff9b8000007180 0045 00000000 0x0 0x0 0xffff9b8000007200 0045 00000000 0x0 0x0 0xffff9b8000007280 0045 00000000 0x0 0x0 0xffff9b8000007300 0045 00000000 0x0 0x0 0xffff9b8000007380 0045 00000000 0x0 0x0 0xffff9b8000007400 0045 00000000 0x0 0x0 0xffff9b8000007480 0045 00000000 0x0 0x0 0xffff9b8000007500 0045 00000000 0x0 0x0 0xffff9b8000007580 0045 00000000 0x0 0x0 0xffff9b8000007600 0045 00000000 0x0 0x0 0xffff9b8000007680 0041 00000000 0x0 0x0 0xffff9b8000007700 0041 00000000 0x0 0x0 0xffff9b8000007780 0041 00000000 0x0 0x0 0xffff9b8000007800 0041 00000000 0x0 0x0 0xffff9b8000007880 0041 00000000 0x0 0x0 0xffff9b8000007900 0045 00000000 0x0 0x0 0xffff9b8000007980 0041 00000000 0x0 0x0 0xffff9b8000007a00 0041 00000000 0x0 0x0 0xffff9b8000007a80 0041 00000000 0x0 0x0 0xffff9b8000007b00 0041 00000000 0x0 0x0 0xffff9b8000007b80 0041 00000000 0x0 0x0 0xffff9b8000007c00 0041 00000000 0x0 0x0 0xffff9b8000007c80 0041 00000000 0x0 0x0 0xffff9b8000007d00 0041 00000000 0x0 0x0 0xffff9b8000007d80 0041 00000000 0x0 0x0 0xffff9b8000007e00 0041 00000000 0x0 0x0 0xffff9b8000007e80 0041 00000000 0x0 0x0 0xffff9b8000007f00 0041 00000000 0x0 0x0 0xffff9b8000007f80 0041 00000000 0x0 0x0 0xffff9b8000008000 0041 00000000 0x0 0x0 0xffff9b8000008080 0041 00000000 0x0 0x0 0xffff9b8000008100 0041 00000000 0x0 0x0 0xffff9b8000008180 0041 00000000 0x0 0x0 0xffff9b8000008200 0041 00000000 0x0 0x0 0xffff9b8000008280 0041 00000000 0x0 0x0 0xffff9b8000008300 0041 00000000 0x0 0x0 0xffff9b8000008380 0041 00000000 0x0 0x0 0xffff9b8000008400 0041 00000000 0x0 0x0 0xffff9b8000008480 0041 00000000 0x0 0x0 0xffff9b8000008500 0041 00000000 0x0 0x0 0xffff9b8000008580 0041 00000000 0x0 0x0 0xffff9b8000008600 0045 00000000 0x0 0x0 0xffff9b8000008680 0041 00000000 0x0 0x0 0xffff9b8000008700 0041 00000000 0x0 0x0 0xffff9b8000008780 0041 00000000 0x0 0x0 0xffff9b8000008800 0041 00000000 0x0 0x0 0xffff9b8000008880 0041 00000000 0x0 0x0 0xffff9b8000008900 0041 00000000 0x0 0x0 0xffff9b8000008980 0041 00000000 0x0 0x0 0xffff9b8000008a00 0041 00000000 0x0 0x0 0xffff9b8000008a80 0041 00000000 0x0 0x0 0xffff9b8000008b00 0041 00000000 0x0 0x0 0xffff9b8000008b80 0041 00000000 0x0 0x0 0xffff9b8000008c00 0041 00000000 0x0 0x0 0xffff9b8000008c80 0041 00000000 0x0 0x0 0xffff9b8000008d00 0041 00000000 0x0 0x0 0xffff9b8000008d80 0041 00000000 0x0 0x0 0xffff9b8000008e00 0041 00000000 0x0 0x0 0xffff9b8000008e80 0041 00000000 0x0 0x0 0xffff9b8000008f00 0041 00000000 0x0 0x0 0xffff9b8000008f80 0041 00000000 0x0 0x0 0xffff9b8000009000 0041 00000000 0x0 0x0 0xffff9b8000009080 0041 00000000 0x0 0x0 0xffff9b8000009100 0045 00000000 0x0 0x0 0xffff9b8000009180 0045 00000000 0x0 0x0 0xffff9b8000009200 0041 00000000 0x0 0x0 0xffff9b8000009280 0041 00000000 0x0 0x0 0xffff9b8000009300 0041 00000000 0x0 0x0 0xffff9b8000009380 0041 00000000 0x0 0x0 0xffff9b8000009400 0041 00000000 0x0 0x0 0xffff9b8000009480 0041 00000000 0x0 0x0 0xffff9b8000009500 0041 00000000 0x0 0x0 0xffff9b8000009580 0041 00000000 0x0 0x0 0xffff9b8000009600 0041 00000000 0x0 0x0 0xffff9b8000009680 0041 00000000 0x0 0x0 0xffff9b8000009700 0041 00000000 0x0 0x0 0xffff9b8000009780 0041 00000000 0x0 0x0 0xffff9b8000009800 0041 00000000 0x0 0x0 0xffff9b8000009880 0041 00000000 0x0 0x0 0xffff9b8000009900 0041 00000000 0x0 0x0 0xffff9b8000009980 0041 00000000 0x0 0x0 0xffff9b8000009a00 0041 00000000 0x0 0x0 0xffff9b8000009a80 0041 00000000 0x0 0x0 0xffff9b8000009b00 0041 00000000 0x0 0x0 0xffff9b8000009b80 0041 00000000 0x0 0x0 0xffff9b8000009c00 0041 00000000 0x0 0x0 0xffff9b8000009c80 0041 00000000 0x0 0x0 0xffff9b8000009d00 0041 00000000 0x0 0x0 0xffff9b8000009d80 0041 00000000 0x0 0x0 0xffff9b8000009e00 0041 00000000 0x0 0x0 0xffff9b8000009e80 0041 00000000 0x0 0x0 0xffff9b8000009f00 0041 00000000 0x0 0x0 0xffff9b8000009f80 0045 00000000 0x0 0x0 0xffff9b800000a000 0041 00000000 0x0 0x0 0xffff9b800000a080 0041 00000000 0x0 0x0 0xffff9b800000a100 0041 00000000 0x0 0x0 0xffff9b800000a180 0041 00000000 0x0 0x0 0xffff9b800000a200 0041 00000000 0x0 0x0 0xffff9b800000a280 0041 00000000 0x0 0x0 0xffff9b800000a300 0041 00000000 0x0 0x0 0xffff9b800000a380 0041 00000000 0x0 0x0 0xffff9b800000a400 0041 00000000 0x0 0x0 0xffff9b800000a480 0041 00000000 0x0 0x0 0xffff9b800000a500 0041 00000000 0x0 0x0 0xffff9b800000a580 0041 00000000 0x0 0x0 0xffff9b800000a600 0041 00000000 0x0 0x0 0xffff9b800000a680 0041 00000000 0x0 0x0 0xffff9b800000a700 0041 00000000 0x0 0x0 0xffff9b800000a780 0041 00000000 0x0 0x0 0xffff9b800000a800 0041 00000000 0x0 0x0 0xffff9b800000a880 0041 00000000 0x0 0x0 0xffff9b800000a900 0041 00000000 0x0 0x0 0xffff9b800000a980 0041 00000000 0x0 0x0 0xffff9b800000aa00 0041 00000000 0x0 0x0 0xffff9b800000aa80 0041 00000000 0x0 0x0 0xffff9b800000ab00 0041 00000000 0x0 0x0 0xffff9b800000ab80 0041 00000000 0x0 0x0 0xffff9b800000ac00 0041 00000000 0x0 0x0 0xffff9b800000ac80 0041 00000000 0x0 0x0 0xffff9b800000ad00 0041 00000000 0x0 0x0 0xffff9b800000ad80 0041 00000000 0x0 0x0 0xffff9b800000ae00 0041 00000000 0x0 0x0 0xffff9b800000ae80 0041 00000000 0x0 0x0 0xffff9b800000af00 0041 00000000 0x0 0x0 0xffff9b800000af80 0041 00000000 0x0 0x0 0xffff9b800000b000 0045 00000000 0x0 0x0 0xffff9b800000b080 0041 00000000 0x0 0x0 0xffff9b800000b100 0041 00000000 0x0 0x0 0xffff9b800000b180 0041 00000000 0x0 0x0 0xffff9b800000b200 0045 00000000 0x0 0x0 0xffff9b800000b280 0045 00000000 0x0 0x0 0xffff9b800000b300 0045 00000000 0x0 0x0 0xffff9b800000b380 0045 00000000 0x0 0x0 0xffff9b800000b400 0045 00000000 0x0 0x0 0xffff9b800000b480 0045 00000000 0x0 0x0 0xffff9b800000b500 0041 00000000 0x0 0x0 0xffff9b800000b580 0041 00000000 0x0 0x0 0xffff9b800000b600 0045 00000000 0x0 0x0 0xffff9b800000b680 0045 00000000 0x0 0x0 0xffff9b800000b700 0045 00000000 0x0 0x0 0xffff9b800000b780 0045 00000000 0x0 0x0 0xffff9b800000b800 0045 00000000 0x0 0x0 0xffff9b800000b880 0045 00000000 0x0 0x0 0xffff9b800000b900 0045 00000000 0x0 0x0 0xffff9b800000b980 0045 00000000 0x0 0x0 0xffff9b800000ba00 0045 00000000 0x0 0x0 0xffff9b800000ba80 0045 00000000 0x0 0x0 0xffff9b800000bb00 0045 00000000 0x0 0x0 0xffff9b800000bb80 0045 00000000 0x0 0x0 0xffff9b800000bc00 0045 00000000 0x0 0x0 0xffff9b800000bc80 0045 00000000 0x0 0x0 0xffff9b800000bd00 0045 00000000 0x0 0x0 0xffff9b800000bd80 0045 00000000 0x0 0x0 0xffff9b800000be00 0045 00000000 0x0 0x0 0xffff9b800000be80 0045 00000000 0x0 0x0 0xffff9b800000bf00 0045 00000000 0x0 0x0 0xffff9b800000bf80 0045 00000000 0x0 0x0 0xffff9b800000c000 0045 00000000 0x0 0x0 0xffff9b800000c080 0045 00000000 0x0 0x0 0xffff9b800000c100 0045 00000000 0x0 0x0 0xffff9b800000c180 0045 00000000 0x0 0x0 0xffff9b800000c200 0045 00000000 0x0 0x0 0xffff9b800000c280 0045 00000000 0x0 0x0 0xffff9b800000c300 0045 00000000 0x0 0x0 0xffff9b800000c380 0045 00000000 0x0 0x0 0xffff9b800000c400 0045 00000000 0x0 0x0 0xffff9b800000c480 0045 00000000 0x0 0x0 0xffff9b800000c500 0045 00000000 0x0 0x0 0xffff9b800000c580 0045 00000000 0x0 0x0 0xffff9b800000c600 0045 00000000 0x0 0x0 0xffff9b800000c680 0045 00000000 0x0 0x0 0xffff9b800000c700 0045 00000000 0x0 0x0 0xffff9b800000c780 0045 00000000 0x0 0x0 0xffff9b800000c800 0041 00000000 0x0 0x0 0xffff9b800000c880 0045 00000000 0x0 0x0 0xffff9b800000c900 0045 00000000 0x0 0x0 0xffff9b800000c980 0045 00000000 0x0 0x0 0xffff9b800000ca00 0041 00000000 0x0 0x0 0xffff9b800000ca80 0045 00000000 0x0 0x0 0xffff9b800000cb00 0045 00000000 0x0 0x0 0xffff9b800000cb80 0045 00000000 0x0 0x0 0xffff9b800000cc00 0041 00000000 0x0 0x0 0xffff9b800000cc80 0041 00000000 0x0 0x0 0xffff9b800000cd00 0045 00000000 0x0 0x0 0xffff9b800000cd80 0045 00000000 0x0 0x0 0xffff9b800000ce00 0041 00000000 0x0 0x0 0xffff9b800000ce80 0041 00000000 0x0 0x0 0xffff9b800000cf00 0041 00000000 0x0 0x0 0xffff9b800000cf80 0041 00000000 0x0 0x0 0xffff9b800000d000 0041 00000000 0x0 0x0 0xffff9b800000d080 0041 00000000 0x0 0x0 0xffff9b800000d100 0041 00000000 0x0 0x0 0xffff9b800000d180 0041 00000000 0x0 0x0 0xffff9b800000d200 0041 00000000 0x0 0x0 0xffff9b800000d280 0041 00000000 0x0 0x0 0xffff9b800000d300 0041 00000000 0x0 0x0 0xffff9b800000d380 0041 00000000 0x0 0x0 0xffff9b800000d400 0041 00000000 0x0 0x0 0xffff9b800000d480 0041 00000000 0x0 0x0 0xffff9b800000d500 0041 00000000 0x0 0x0 0xffff9b800000d580 0041 00000000 0x0 0x0 0xffff9b800000d600 0041 00000000 0x0 0x0 0xffff9b800000d680 0041 00000000 0x0 0x0 0xffff9b800000d700 0041 00000000 0x0 0x0 0xffff9b800000d780 0041 00000000 0x0 0x0 0xffff9b800000d800 0045 00000000 0x0 0x0 0xffff9b800000d880 0041 00000000 0x0 0x0 0xffff9b800000d900 0041 00000000 0x0 0x0 0xffff9b800000d980 0041 00000000 0x0 0x0 0xffff9b800000da00 0041 00000000 0x0 0x0 0xffff9b800000da80 0045 00000000 0x0 0x0 0xffff9b800000db00 0045 00000000 0x0 0x0 0xffff9b800000db80 0041 00000000 0x0 0x0 0xffff9b800000dc00 0045 00000000 0x0 0x0 0xffff9b800000dc80 0045 00000000 0x0 0x0 0xffff9b800000dd00 0041 00000000 0x0 0x0 0xffff9b800000dd80 0041 00000000 0x0 0x0 0xffff9b800000de00 0045 00000000 0x0 0x0 0xffff9b800000de80 0041 00000000 0x0 0x0 0xffff9b800000df00 0041 00000000 0x0 0x0 0xffff9b800000df80 0045 00000000 0x0 0x0 0xffff9b800000e000 0045 00000000 0x0 0x0 0xffff9b800000e080 0045 00000000 0x0 0x0 0xffff9b800000e100 0041 00000000 0x0 0x0 0xffff9b800000e180 0041 00000000 0x0 0x0 0xffff9b800000e200 0041 00000000 0x0 0x0 0xffff9b800000e280 0041 00000000 0x0 0x0 0xffff9b800000e300 0045 00000000 0x0 0x0 0xffff9b800000e380 0045 00000000 0x0 0x0 0xffff9b800000e400 0041 00000000 0x0 0x0 0xffff9b800000e480 0041 00000000 0x0 0x0 0xffff9b800000e500 0045 00000000 0x0 0x0 0xffff9b800000e580 0045 00000000 0x0 0x0 0xffff9b800000e600 0041 00000000 0x0 0x0 0xffff9b800000e680 0045 00000000 0x0 0x0 0xffff9b800000e700 0045 00000000 0x0 0x0 0xffff9b800000e780 0045 00000000 0x0 0x0 0xffff9b800000e800 0041 00000000 0x0 0x0 0xffff9b800000e880 0045 00000000 0x0 0x0 0xffff9b800000e900 0041 00000000 0x0 0x0 0xffff9b800000e980 0041 00000000 0x0 0x0 0xffff9b800000ea00 0041 00000000 0x0 0x0 0xffff9b800000ea80 0041 00000000 0x0 0x0 0xffff9b800000eb00 0045 00000000 0x0 0x0 0xffff9b800000eb80 0041 00000000 0x0 0x0 0xffff9b800000ec00 0045 00000000 0x0 0x0 0xffff9b800000ec80 0041 00000000 0x0 0x0 0xffff9b800000ed00 0041 00000000 0x0 0x0 0xffff9b800000ed80 0041 00000000 0x0 0x0 0xffff9b800000ee00 0041 00000000 0x0 0x0 0xffff9b800000ee80 0045 00000000 0x0 0x0 0xffff9b800000ef00 0041 00000000 0x0 0x0 0xffff9b800000ef80 0041 00000000 0x0 0x0 0xffff9b800000f000 0041 00000000 0x0 0x0 0xffff9b800000f080 0041 00000000 0x0 0x0 0xffff9b800000f100 0041 00000000 0x0 0x0 0xffff9b800000f180 0041 00000000 0x0 0x0 0xffff9b800000f200 0041 00000000 0x0 0x0 0xffff9b800000f280 0041 00000000 0x0 0x0 0xffff9b800000f300 0041 00000000 0x0 0x0 0xffff9b800000f380 0045 00000000 0x0 0x0 0xffff9b800000f400 0045 00000000 0x0 0x0 0xffff9b800000f480 0041 00000000 0x0 0x0 0xffff9b800000f500 0041 00000000 0x0 0x0 0xffff9b800000f580 0041 00000000 0x0 0x0 0xffff9b800000f600 0045 00000000 0x0 0x0 0xffff9b800000f680 0041 00000000 0x0 0x0 0xffff9b800000f700 0041 00000000 0x0 0x0 0xffff9b800000f780 0041 00000000 0x0 0x0 0xffff9b800000f800 0041 00000000 0x0 0x0 0xffff9b800000f880 0045 00000000 0x0 0x0 0xffff9b800000f900 0045 00000000 0x0 0x0 0xffff9b800000f980 0041 00000000 0x0 0x0 0xffff9b800000fa00 0041 00000000 0x0 0x0 0xffff9b800000fa80 0045 00000000 0x0 0x0 0xffff9b800000fb00 0041 00000000 0x0 0x0 0xffff9b800000fb80 0041 00000000 0x0 0x0 0xffff9b800000fc00 0041 00000000 0x0 0x0 0xffff9b800000fc80 0041 00000000 0x0 0x0 0xffff9b800000fd00 0041 00000000 0x0 0x0 0xffff9b800000fd80 0045 00000000 0x0 0x0 0xffff9b800000fe00 0041 00000000 0x0 0x0 0xffff9b800000fe80 0041 00000000 0x0 0x0 0xffff9b800000ff00 0041 00000000 0x0 0x0 0xffff9b800000ff80 0041 00000000 0x0 0x0 0xffff9b8000010000 0041 00000000 0x0 0x0 0xffff9b8000010080 0045 00000000 0x0 0x0 0xffff9b8000010100 0045 00000000 0x0 0x0 0xffff9b8000010180 0041 00000000 0x0 0x0 0xffff9b8000010200 0045 00000000 0x0 0x0 0xffff9b8000010280 0041 00000000 0x0 0x0 0xffff9b8000010300 0041 00000000 0x0 0x0 0xffff9b8000010380 0041 00000000 0x0 0x0 0xffff9b8000010400 0041 00000000 0x0 0x0 0xffff9b8000010480 0041 00000000 0x0 0x0 0xffff9b8000010500 0041 00000000 0x0 0x0 0xffff9b8000010580 0041 00000000 0x0 0x0 0xffff9b8000010600 0041 00000000 0x0 0x0 0xffff9b8000010680 0041 00000000 0x0 0x0 0xffff9b8000010700 0041 00000000 0x0 0x0 0xffff9b8000010780 0041 00000000 0x0 0x0 0xffff9b8000010800 0041 00000000 0x0 0x0 0xffff9b8000010880 0041 00000000 0x0 0x0 0xffff9b8000010900 0045 00000000 0x0 0x0 0xffff9b8000010980 0045 00000000 0x0 0x0 0xffff9b8000010a00 0045 00000000 0x0 0x0 0xffff9b8000010a80 0045 00000000 0x0 0x0 0xffff9b8000010b00 0045 00000000 0x0 0x0 0xffff9b8000010b80 0041 00000000 0x0 0x0 0xffff9b8000010c00 0041 00000000 0x0 0x0 0xffff9b8000010c80 0041 00000000 0x0 0x0 0xffff9b8000010d00 0041 00000000 0x0 0x0 0xffff9b8000010d80 0041 00000000 0x0 0x0 0xffff9b8000010e00 0041 00000000 0x0 0x0 0xffff9b8000010e80 0041 00000000 0x0 0x0 0xffff9b8000010f00 0041 00000000 0x0 0x0 0xffff9b8000010f80 0045 00000000 0x0 0x0 0xffff9b8000011000 0041 00000000 0x0 0x0 0xffff9b8000011080 0041 00000000 0x0 0x0 0xffff9b8000011100 0041 00000000 0x0 0x0 0xffff9b8000011180 0041 00000000 0x0 0x0 0xffff9b8000011200 0041 00000000 0x0 0x0 0xffff9b8000011280 0045 00000000 0x0 0x0 0xffff9b8000011300 0041 00000000 0x0 0x0 0xffff9b8000011380 0041 00000000 0x0 0x0 0xffff9b8000011400 0041 00000000 0x0 0x0 0xffff9b8000011480 0041 00000000 0x0 0x0 0xffff9b8000011500 0041 00000000 0x0 0x0 0xffff9b8000011580 0041 00000000 0x0 0x0 0xffff9b8000011600 0041 00000000 0x0 0x0 0xffff9b8000011680 0041 00000000 0x0 0x0 0xffff9b8000011700 0041 00000000 0x0 0x0 0xffff9b8000011780 0041 00000000 0x0 0x0 0xffff9b8000011800 0041 00000000 0x0 0x0 0xffff9b8000011880 0041 00000000 0x0 0x0 0xffff9b8000011900 0041 00000000 0x0 0x0 0xffff9b8000011980 0041 00000000 0x0 0x0 0xffff9b8000011a00 0045 00000000 0x0 0x0 0xffff9b8000011a80 0041 00000000 0x0 0x0 0xffff9b8000011b00 0041 00000000 0x0 0x0 0xffff9b8000011b80 0041 00000000 0x0 0x0 0xffff9b8000011c00 0045 00000000 0x0 0x0 0xffff9b8000011c80 0045 00000000 0x0 0x0 0xffff9b8000011d00 0041 00000000 0x0 0x0 0xffff9b8000011d80 0041 00000000 0x0 0x0 0xffff9b8000011e00 0041 00000000 0x0 0x0 0xffff9b8000011e80 0041 00000000 0x0 0x0 0xffff9b8000011f00 0045 00000000 0x0 0x0 0xffff9b8000011f80 0045 00000000 0x0 0x0 0xffff9b8000012000 0041 00000000 0x0 0x0 0xffff9b8000012080 0041 00000000 0x0 0x0 0xffff9b8000012100 0041 00000000 0x0 0x0 0xffff9b8000012180 0045 00000000 0x0 0x0 0xffff9b8000012200 0041 00000000 0x0 0x0 0xffff9b8000012280 0041 00000000 0x0 0x0 0xffff9b8000012300 0041 00000000 0x0 0x0 0xffff9b8000012380 0041 00000000 0x0 0x0 0xffff9b8000012400 0041 00000000 0x0 0x0 0xffff9b8000012480 0041 00000000 0x0 0x0 0xffff9b8000012500 0045 00000000 0x0 0x0 0xffff9b8000012580 0041 00000000 0x0 0x0 0xffff9b8000012600 0041 00000000 0x0 0x0 0xffff9b8000012680 0045 00000000 0x0 0x0 0xffff9b8000012700 0001 00000000 0x0 0x0 0xffff9b8000012780 0001 00000000 0x0 0x0 0xffff9b8000012800 0001 00000000 0x0 0x0 0xffff9b8000012880 0001 00000000 0x0 0x0 0xffff9b8000012900 0001 00000000 0x0 0x0 0xffff9b8000012980 0001 00000000 0x0 0x0 0xffff9b8000012a00 0001 00000000 0x0 0x0 0xffff9b8000012a80 0001 00000000 0x0 0x0 0xffff9b8000012b00 0001 00000000 0x0 0x0 0xffff9b8000012b80 0001 00000000 0x0 0x0 0xffff9b8000012c00 0001 00000000 0x0 0x0 0xffff9b8000012c80 0001 00000000 0x0 0x0 0xffff9b8000012d00 0001 00000000 0x0 0x0 0xffff9b8000012d80 0001 00000000 0x0 0x0 0xffff9b8000012e00 0001 00000000 0x0 0x0 0xffff9b8000012e80 0001 00000000 0x0 0x0 0xffff9b8000012f00 0001 00000000 0x0 0x0 0xffff9b8000012f80 0001 00000000 0x0 0x0 0xffff9b8000013000 0001 00000000 0x0 0x0 0xffff9b8000013080 0001 00000000 0x0 0x0 0xffff9b8000013100 0001 00000000 0x0 0x0 0xffff9b8000013180 0001 00000000 0x0 0x0 0xffff9b8000013200 0001 00000000 0x0 0x0 0xffff9b8000013280 0001 00000000 0x0 0x0 0xffff9b8000013300 0001 00000000 0x0 0x0 0xffff9b8000013380 0001 00000000 0x0 0x0 0xffff9b8000013400 0001 00000000 0x0 0x0 0xffff9b8000013480 0001 00000000 0x0 0x0 0xffff9b8000013500 0001 00000000 0x0 0x0 0xffff9b8000013580 0001 00000000 0x0 0x0 0xffff9b8000013600 0001 00000000 0x0 0x0 0xffff9b8000013680 0001 00000000 0x0 0x0 0xffff9b8000013700 0001 00000000 0x0 0x0 0xffff9b8000013780 0001 00000000 0x0 0x0 0xffff9b8000013800 0001 00000000 0x0 0x0 0xffff9b8000013880 0001 00000000 0x0 0x0 0xffff9b8000013900 0001 00000000 0x0 0x0 0xffff9b8000013980 0001 00000000 0x0 0x0 0xffff9b8000013a00 0001 00000000 0x0 0x0 0xffff9b8000013a80 0001 00000000 0x0 0x0 0xffff9b8000013b00 0001 00000000 0x0 0x0 0xffff9b8000013b80 0001 00000000 0x0 0x0 0xffff9b8000013c00 0001 00000000 0x0 0x0 0xffff9b8000013c80 0001 00000000 0x0 0x0 0xffff9b8000013d00 0001 00000000 0x0 0x0 0xffff9b8000013d80 0001 00000000 0x0 0x0 0xffff9b8000013e00 0001 00000000 0x0 0x0 0xffff9b8000013e80 0001 00000000 0x0 0x0 0xffff9b8000013f00 0001 00000000 0x0 0x0 0xffff9b8000013f80 0001 00000000 0x0 0x0 0xffff9b8000014000 0001 00000000 0x0 0x0 0xffff9b8000014080 0001 00000000 0x0 0x0 0xffff9b8000014100 0001 00000000 0x0 0x0 0xffff9b8000014180 0001 00000000 0x0 0x0 0xffff9b8000014200 0041 00000000 0x0 0x0 0xffff9b8000014280 0041 00000000 0x0 0x0 0xffff9b8000014300 0041 00000000 0x0 0x0 0xffff9b8000014380 0041 00000000 0x0 0x0 0xffff9b8000014400 0041 00000000 0x0 0x0 0xffff9b8000014480 0041 00000000 0x0 0x0 0xffff9b8000014500 0041 00000000 0x0 0x0 0xffff9b8000014580 0041 00000000 0x0 0x0 0xffff9b8000014600 0041 00000000 0x0 0x0 0xffff9b8000014680 0041 00000000 0x0 0x0 0xffff9b8000014700 0041 00000000 0x0 0x0 0xffff9b8000014780 0041 00000000 0x0 0x0 0xffff9b8000014800 0041 00000000 0x0 0x0 0xffff9b8000014880 0041 00000000 0x0 0x0 0xffff9b8000014900 0041 00000000 0x0 0x0 0xffff9b8000014980 0041 00000000 0x0 0x0 0xffff9b8000014a00 0041 00000000 0x0 0x0 0xffff9b8000014a80 0041 00000000 0x0 0x0 0xffff9b8000014b00 0041 00000000 0x0 0x0 0xffff9b8000014b80 0041 00000000 0x0 0x0 0xffff9b8000014c00 0041 00000000 0x0 0x0 0xffff9b8000014c80 0041 00000000 0x0 0x0 0xffff9b8000014d00 0041 00000000 0x0 0x0 0xffff9b8000014d80 0041 00000000 0x0 0x0 0xffff9b8000014e00 0041 00000000 0x0 0x0 0xffff9b8000014e80 0041 00000000 0x0 0x0 0xffff9b8000014f00 0041 00000000 0x0 0x0 0xffff9b8000014f80 0041 00000000 0x0 0x0 0xffff9b8000015000 0041 00000000 0x0 0x0 0xffff9b8000015080 0041 00000000 0x0 0x0 0xffff9b8000015100 0041 00000000 0x0 0x0 0xffff9b8000015180 0041 00000000 0x0 0x0 0xffff9b8000015200 0041 00000000 0x0 0x0 0xffff9b8000015280 0041 00000000 0x0 0x0 0xffff9b8000015300 0041 00000000 0x0 0x0 0xffff9b8000015380 0041 00000000 0x0 0x0 0xffff9b8000015400 0041 00000000 0x0 0x0 0xffff9b8000015480 0041 00000000 0x0 0x0 0xffff9b8000015500 0041 00000000 0x0 0x0 0xffff9b8000015580 0041 00000000 0x0 0x0 0xffff9b8000015600 0041 00000000 0x0 0x0 0xffff9b8000015680 0041 00000000 0x0 0x0 0xffff9b8000015700 0041 00000000 0x0 0x0 0xffff9b8000015780 0041 00000000 0x0 0x0 0xffff9b8000015800 0041 00000000 0x0 0x0 0xffff9b8000015880 0041 00000000 0x0 0x0 0xffff9b8000015900 0041 00000000 0x0 0x0 0xffff9b8000015980 0001 00000000 0x0 0x0 0xffff9b8000015a00 0001 00000000 0x0 0x0 0xffff9b8000015a80 0001 00000000 0x0 0x0 0xffff9b8000015b00 0001 00000000 0x0 0x0 0xffff9b8000015b80 0001 00000000 0x0 0x0 0xffff9b8000015c00 0001 00000000 0x0 0x0 0xffff9b8000015c80 0001 00000000 0x0 0x0 0xffff9b8000015d00 0001 00000000 0x0 0x0 0xffff9b8000015d80 0001 00000000 0x0 0x0 0xffff9b8000015e00 0001 00000000 0x0 0x0 0xffff9b8000015e80 0001 00000000 0x0 0x0 0xffff9b8000015f00 0001 00000000 0x0 0x0 0xffff9b8000015f80 0001 00000000 0x0 0x0 0xffff9b8000016000 0001 00000000 0x0 0x0 0xffff9b8000016080 0001 00000000 0x0 0x0 0xffff9b8000016100 0001 00000000 0x0 0x0 0xffff9b8000016180 0001 00000000 0x0 0x0 0xffff9b8000016200 0001 00000000 0x0 0x0 0xffff9b8000016280 0001 00000000 0x0 0x0 0xffff9b8000016300 0001 00000000 0x0 0x0 0xffff9b8000016380 0001 00000000 0x0 0x0 0xffff9b8000016400 0001 00000000 0x0 0x0 0xffff9b8000016480 0001 00000000 0x0 0x0 0xffff9b8000016500 0001 00000000 0x0 0x0 0xffff9b8000016580 0001 00000000 0x0 0x0 0xffff9b8000016600 0001 00000000 0x0 0x0 0xffff9b8000016680 0001 00000000 0x0 0x0 0xffff9b8000016700 0001 00000000 0x0 0x0 0xffff9b8000016780 0001 00000000 0x0 0x0 0xffff9b8000016800 0001 00000000 0x0 0x0 0xffff9b8000016880 0001 00000000 0x0 0x0 0xffff9b8000016900 0001 00000000 0x0 0x0 0xffff9b8000016980 0001 00000000 0x0 0x0 0xffff9b8000016a00 0001 00000000 0x0 0x0 0xffff9b8000016a80 0001 00000000 0x0 0x0 0xffff9b8000016b00 0001 00000000 0x0 0x0 0xffff9b8000016b80 0001 00000000 0x0 0x0 0xffff9b8000016c00 0001 00000000 0x0 0x0 0xffff9b8000016c80 0001 00000000 0x0 0x0 0xffff9b8000016d00 0001 00000000 0x0 0x0 0xffff9b8000016d80 0001 00000000 0x0 0x0 0xffff9b8000016e00 0001 00000000 0x0 0x0 0xffff9b8000016e80 0001 00000000 0x0 0x0 0xffff9b8000016f00 0001 00000000 0x0 0x0 0xffff9b8000016f80 0001 00000000 0x0 0x0 0xffff9b8000017000 0001 00000000 0x0 0x0 0xffff9b8000017080 0001 00000000 0x0 0x0 0xffff9b8000017100 0001 00000000 0x0 0x0 0xffff9b8000017180 0001 00000000 0x0 0x0 0xffff9b8000017200 0001 00000000 0x0 0x0 0xffff9b8000017280 0001 00000000 0x0 0x0 0xffff9b8000017300 0001 00000000 0x0 0x0 0xffff9b8000017380 0001 00000000 0x0 0x0 0xffff9b8000017400 0001 00000000 0x0 0x0 0xffff9b8000017480 0041 00000000 0x0 0x0 0xffff9b8000017500 0041 00000000 0x0 0x0 0xffff9b8000017580 0041 00000000 0x0 0x0 0xffff9b8000017600 0041 00000000 0x0 0x0 0xffff9b8000017680 0041 00000000 0x0 0x0 0xffff9b8000017700 0041 00000000 0x0 0x0 0xffff9b8000017780 0041 00000000 0x0 0x0 0xffff9b8000017800 0041 00000000 0x0 0x0 0xffff9b8000017880 0041 00000000 0x0 0x0 0xffff9b8000017900 0041 00000000 0x0 0x0 0xffff9b8000017980 0041 00000000 0x0 0x0 0xffff9b8000017a00 0041 00000000 0x0 0x0 0xffff9b8000017a80 0041 00000000 0x0 0x0 0xffff9b8000017b00 0041 00000000 0x0 0x0 0xffff9b8000017b80 0041 00000000 0x0 0x0 0xffff9b8000017c00 0041 00000000 0x0 0x0 0xffff9b8000017c80 0041 00000000 0x0 0x0 0xffff9b8000017d00 0041 00000000 0x0 0x0 0xffff9b8000017d80 0041 00000000 0x0 0x0 0xffff9b8000017e00 0041 00000000 0x0 0x0 0xffff9b8000017e80 0041 00000000 0x0 0x0 0xffff9b8000017f00 0041 00000000 0x0 0x0 0xffff9b8000017f80 0041 00000000 0x0 0x0 0xffff9b8000018000 0041 00000000 0x0 0x0 0xffff9b8000018080 0041 00000000 0x0 0x0 0xffff9b8000018100 0041 00000000 0x0 0x0 0xffff9b8000018180 0041 00000000 0x0 0x0 0xffff9b8000018200 0041 00000000 0x0 0x0 0xffff9b8000018280 0041 00000000 0x0 0x0 0xffff9b8000018300 0041 00000000 0x0 0x0 0xffff9b8000018380 0041 00000000 0x0 0x0 0xffff9b8000018400 0041 00000000 0x0 0x0 0xffff9b8000018480 0041 00000000 0x0 0x0 0xffff9b8000018500 0041 00000000 0x0 0x0 0xffff9b8000018580 0041 00000000 0x0 0x0 0xffff9b8000018600 0041 00000000 0x0 0x0 0xffff9b8000018680 0041 00000000 0x0 0x0 0xffff9b8000018700 0041 00000000 0x0 0x0 0xffff9b8000018780 0041 00000000 0x0 0x0 0xffff9b8000018800 0041 00000000 0x0 0x0 0xffff9b8000018880 0041 00000000 0x0 0x0 0xffff9b8000018900 0041 00000000 0x0 0x0 0xffff9b8000018980 0041 00000000 0x0 0x0 0xffff9b8000018a00 0041 00000000 0x0 0x0 0xffff9b8000018a80 0041 00000000 0x0 0x0 0xffff9b8000018b00 0001 00000000 0x0 0x0 0xffff9b8000018b80 0001 00000000 0x0 0x0 0xffff9b8000018c00 0001 00000000 0x0 0x0 0xffff9b8000018c80 0001 00000000 0x0 0x0 0xffff9b8000018d00 0001 00000000 0x0 0x0 0xffff9b8000018d80 0001 00000000 0x0 0x0 0xffff9b8000018e00 0001 00000000 0x0 0x0 0xffff9b8000018e80 0001 00000000 0x0 0x0 0xffff9b8000018f00 0001 00000000 0x0 0x0 0xffff9b8000018f80 0001 00000000 0x0 0x0 0xffff9b8000019000 0001 00000000 0x0 0x0 0xffff9b8000019080 0001 00000000 0x0 0x0 0xffff9b8000019100 0001 00000000 0x0 0x0 0xffff9b8000019180 0001 00000000 0x0 0x0 0xffff9b8000019200 0001 00000000 0x0 0x0 0xffff9b8000019280 0001 00000000 0x0 0x0 0xffff9b8000019300 0001 00000000 0x0 0x0 0xffff9b8000019380 0001 00000000 0x0 0x0 0xffff9b8000019400 0001 00000000 0x0 0x0 0xffff9b8000019480 0001 00000000 0x0 0x0 0xffff9b8000019500 0001 00000000 0x0 0x0 0xffff9b8000019580 0001 00000000 0x0 0x0 0xffff9b8000019600 0001 00000000 0x0 0x0 0xffff9b8000019680 0001 00000000 0x0 0x0 0xffff9b8000019700 0001 00000000 0x0 0x0 0xffff9b8000019780 0001 00000000 0x0 0x0 0xffff9b8000019800 0001 00000000 0x0 0x0 0xffff9b8000019880 0001 00000000 0x0 0x0 0xffff9b8000019900 0001 00000000 0x0 0x0 0xffff9b8000019980 0001 00000000 0x0 0x0 0xffff9b8000019a00 0001 00000000 0x0 0x0 0xffff9b8000019a80 0001 00000000 0x0 0x0 0xffff9b8000019b00 0001 00000000 0x0 0x0 0xffff9b8000019b80 0001 00000000 0x0 0x0 0xffff9b8000019c00 0001 00000000 0x0 0x0 0xffff9b8000019c80 0001 00000000 0x0 0x0 0xffff9b8000019d00 0001 00000000 0x0 0x0 0xffff9b8000019d80 0001 00000000 0x0 0x0 0xffff9b8000019e00 0001 00000000 0x0 0x0 0xffff9b8000019e80 0001 00000000 0x0 0x0 0xffff9b8000019f00 0001 00000000 0x0 0x0 0xffff9b8000019f80 0001 00000000 0x0 0x0 0xffff9b800001a000 0001 00000000 0x0 0x0 0xffff9b800001a080 0001 00000000 0x0 0x0 0xffff9b800001a100 0001 00000000 0x0 0x0 0xffff9b800001a180 0001 00000000 0x0 0x0 0xffff9b800001a200 0001 00000000 0x0 0x0 0xffff9b800001a280 0001 00000000 0x0 0x0 0xffff9b800001a300 0001 00000000 0x0 0x0 0xffff9b800001a380 0001 00000000 0x0 0x0 0xffff9b800001a400 0001 00000000 0x0 0x0 0xffff9b800001a480 0001 00000000 0x0 0x0 0xffff9b800001a500 0001 00000000 0x0 0x0 0xffff9b800001a580 0001 00000000 0x0 0x0 0xffff9b800001a600 0041 00000000 0x0 0x0 0xffff9b800001a680 0041 00000000 0x0 0x0 0xffff9b800001a700 0041 00000000 0x0 0x0 0xffff9b800001a780 0041 00000000 0x0 0x0 0xffff9b800001a800 0041 00000000 0x0 0x0 0xffff9b800001a880 0041 00000000 0x0 0x0 0xffff9b800001a900 0041 00000000 0x0 0x0 0xffff9b800001a980 0041 00000000 0x0 0x0 0xffff9b800001aa00 0041 00000000 0x0 0x0 0xffff9b800001aa80 0041 00000000 0x0 0x0 0xffff9b800001ab00 0041 00000000 0x0 0x0 0xffff9b800001ab80 0041 00000000 0x0 0x0 0xffff9b800001ac00 0041 00000000 0x0 0x0 0xffff9b800001ac80 0041 00000000 0x0 0x0 0xffff9b800001ad00 0041 00000000 0x0 0x0 0xffff9b800001ad80 0041 00000000 0x0 0x0 0xffff9b800001ae00 0041 00000000 0x0 0x0 0xffff9b800001ae80 0041 00000000 0x0 0x0 0xffff9b800001af00 0041 00000000 0x0 0x0 0xffff9b800001af80 0041 00000000 0x0 0x0 0xffff9b800001b000 0041 00000000 0x0 0x0 0xffff9b800001b080 0041 00000000 0x0 0x0 0xffff9b800001b100 0041 00000000 0x0 0x0 0xffff9b800001b180 0041 00000000 0x0 0x0 0xffff9b800001b200 0045 00000000 0x0 0x0 0xffff9b800001b280 0041 00000000 0x0 0x0 0xffff9b800001b300 0041 00000000 0x0 0x0 0xffff9b800001b380 0041 00000000 0x0 0x0 0xffff9b800001b400 0041 00000000 0x0 0x0 0xffff9b800001b480 0041 00000000 0x0 0x0 0xffff9b800001b500 0041 00000000 0x0 0x0 0xffff9b800001b580 0041 00000000 0x0 0x0 0xffff9b800001b600 0045 00000000 0x0 0x0 0xffff9b800001b680 0041 00000000 0x0 0x0 0xffff9b800001b700 0041 00000000 0x0 0x0 0xffff9b800001b780 0041 00000000 0x0 0x0 0xffff9b800001b800 0041 00000000 0x0 0x0 0xffff9b800001b880 0041 00000000 0x0 0x0 0xffff9b800001b900 0041 00000000 0x0 0x0 0xffff9b800001b980 0041 00000000 0x0 0x0 0xffff9b800001ba00 0045 00000000 0x0 0x0 0xffff9b800001ba80 0041 00000000 0x0 0x0 0xffff9b800001bb00 0041 00000000 0x0 0x0 0xffff9b800001bb80 0041 00000000 0x0 0x0 0xffff9b800001bc00 0045 00000000 0x0 0x0 0xffff9b800001bc80 0045 00000000 0x0 0x0 0xffff9b800001bd00 0041 00000000 0x0 0x0 0xffff9b800001bd80 0041 00000000 0x0 0x0 0xffff9b800001be00 0001 00000000 0x0 0x0 0xffff9b800001be80 0001 00000000 0x0 0x0 0xffff9b800001bf00 0001 00000000 0x0 0x0 0xffff9b800001bf80 0001 00000000 0x0 0x0 0xffff9b800001c000 0001 00000000 0x0 0x0 0xffff9b800001c080 0001 00000000 0x0 0x0 0xffff9b800001c100 0001 00000000 0x0 0x0 0xffff9b800001c180 0001 00000000 0x0 0x0 0xffff9b800001c200 0001 00000000 0x0 0x0 0xffff9b800001c280 0001 00000000 0x0 0x0 0xffff9b800001c300 0001 00000000 0x0 0x0 0xffff9b800001c380 0001 00000000 0x0 0x0 0xffff9b800001c400 0001 00000000 0x0 0x0 0xffff9b800001c480 0001 00000000 0x0 0x0 0xffff9b800001c500 0001 00000000 0x0 0x0 0xffff9b800001c580 0001 00000000 0x0 0x0 0xffff9b800001c600 0001 00000000 0x0 0x0 0xffff9b800001c680 0001 00000000 0x0 0x0 0xffff9b800001c700 0001 00000000 0x0 0x0 0xffff9b800001c780 0001 00000000 0x0 0x0 0xffff9b800001c800 0001 00000000 0x0 0x0 0xffff9b800001c880 0001 00000000 0x0 0x0 0xffff9b800001c900 0001 00000000 0x0 0x0 0xffff9b800001c980 0001 00000000 0x0 0x0 0xffff9b800001ca00 0001 00000000 0x0 0x0 0xffff9b800001ca80 0001 00000000 0x0 0x0 0xffff9b800001cb00 0001 00000000 0x0 0x0 0xffff9b800001cb80 0001 00000000 0x0 0x0 0xffff9b800001cc00 0001 00000000 0x0 0x0 0xffff9b800001cc80 0001 00000000 0x0 0x0 0xffff9b800001cd00 0001 00000000 0x0 0x0 0xffff9b800001cd80 0001 00000000 0x0 0x0 0xffff9b800001ce00 0001 00000000 0x0 0x0 0xffff9b800001ce80 0001 00000000 0x0 0x0 0xffff9b800001cf00 0001 00000000 0x0 0x0 0xffff9b800001cf80 0001 00000000 0x0 0x0 0xffff9b800001d000 0001 00000000 0x0 0x0 0xffff9b800001d080 0001 00000000 0x0 0x0 0xffff9b800001d100 0001 00000000 0x0 0x0 0xffff9b800001d180 0001 00000000 0x0 0x0 0xffff9b800001d200 0001 00000000 0x0 0x0 0xffff9b800001d280 0001 00000000 0x0 0x0 0xffff9b800001d300 0001 00000000 0x0 0x0 0xffff9b800001d380 0001 00000000 0x0 0x0 0xffff9b800001d400 0001 00000000 0x0 0x0 0xffff9b800001d480 0001 00000000 0x0 0x0 0xffff9b800001d500 0001 00000000 0x0 0x0 0xffff9b800001d580 0001 00000000 0x0 0x0 0xffff9b800001d600 0001 00000000 0x0 0x0 0xffff9b800001d680 0001 00000000 0x0 0x0 0xffff9b800001d700 0001 00000000 0x0 0x0 0xffff9b800001d780 0001 00000000 0x0 0x0 0xffff9b800001d800 0001 00000000 0x0 0x0 0xffff9b800001d880 0001 00000000 0x0 0x0 0xffff9b800001d900 0001 00000000 0x0 0x0 0xffff9b800001d980 0001 00000000 0x0 0x0 0xffff9b800001da00 0001 00000000 0x0 0x0 0xffff9b800001da80 0001 00000000 0x0 0x0 0xffff9b800001db00 0001 00000000 0x0 0x0 0xffff9b800001db80 0001 00000000 0x0 0x0 0xffff9b800001dc00 0001 00000000 0x0 0x0 0xffff9b800001dc80 0001 00000000 0x0 0x0 0xffff9b800001dd00 0001 00000000 0x0 0x0 0xffff9b800001dd80 0001 00000000 0x0 0x0 0xffff9b800001de00 0001 00000000 0x0 0x0 0xffff9b800001de80 0001 00000000 0x0 0x0 0xffff9b800001df00 0001 00000000 0x0 0x0 0xffff9b800001df80 0001 00000000 0x0 0x0 0xffff9b800001e000 0001 00000000 0x0 0x0 0xffff9b800001e080 0001 00000000 0x0 0x0 0xffff9b800001e100 0001 00000000 0x0 0x0 0xffff9b800001e180 0001 00000000 0x0 0x0 0xffff9b800001e200 0001 00000000 0x0 0x0 0xffff9b800001e280 0001 00000000 0x0 0x0 0xffff9b800001e300 0001 00000000 0x0 0x0 0xffff9b800001e380 0001 00000000 0x0 0x0 0xffff9b800001e400 0001 00000000 0x0 0x0 0xffff9b800001e480 0001 00000000 0x0 0x0 0xffff9b800001e500 0001 00000000 0x0 0x0 0xffff9b800001e580 0001 00000000 0x0 0x0 0xffff9b800001e600 0001 00000000 0x0 0x0 0xffff9b800001e680 0001 00000000 0x0 0x0 0xffff9b800001e700 0001 00000000 0x0 0x0 0xffff9b800001e780 0001 00000000 0x0 0x0 0xffff9b800001e800 0001 00000000 0x0 0x0 0xffff9b800001e880 0001 00000000 0x0 0x0 0xffff9b800001e900 0001 00000000 0x0 0x0 0xffff9b800001e980 0001 00000000 0x0 0x0 0xffff9b800001ea00 0001 00000000 0x0 0x0 0xffff9b800001ea80 0001 00000000 0x0 0x0 0xffff9b800001eb00 0001 00000000 0x0 0x0 0xffff9b800001eb80 0001 00000000 0x0 0x0 0xffff9b800001ec00 0001 00000000 0x0 0x0 0xffff9b800001ec80 0001 00000000 0x0 0x0 0xffff9b800001ed00 0001 00000000 0x0 0x0 0xffff9b800001ed80 0001 00000000 0x0 0x0 0xffff9b800001ee00 0001 00000000 0x0 0x0 0xffff9b800001ee80 0001 00000000 0x0 0x0 0xffff9b800001ef00 0001 00000000 0x0 0x0 0xffff9b800001ef80 0001 00000000 0x0 0x0 0xffff9b800001f000 0001 00000000 0x0 0x0 0xffff9b800001f080 0001 00000000 0x0 0x0 0xffff9b800001f100 0001 00000000 0x0 0x0 0xffff9b800001f180 0001 00000000 0x0 0x0 0xffff9b800001f200 0001 00000000 0x0 0x0 0xffff9b800001f280 0001 00000000 0x0 0x0 0xffff9b800001f300 0001 00000000 0x0 0x0 0xffff9b800001f380 0001 00000000 0x0 0x0 0xffff9b800001f400 0001 00000000 0x0 0x0 0xffff9b800001f480 0001 00000000 0x0 0x0 0xffff9b800001f500 0001 00000000 0x0 0x0 0xffff9b800001f580 0001 00000000 0x0 0x0 0xffff9b800001f600 0001 00000000 0x0 0x0 0xffff9b800001f680 0001 00000000 0x0 0x0 0xffff9b800001f700 0001 00000000 0x0 0x0 0xffff9b800001f780 0001 00000000 0x0 0x0 0xffff9b800001f800 0001 00000000 0x0 0x0 0xffff9b800001f880 0001 00000000 0x0 0x0 0xffff9b800001f900 0001 00000000 0x0 0x0