last executing test programs: 10.023962414s ago: executing program 4: posix_spawn(0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)=@close}, 0x0, 0x0, 0x0) _lwp_create(&(0x7f0000000100)={0x0, 0x0, {}, {}, {0x0, 0x0, '/)!/\x00'}}, 0x0, 0x0) ktrace(0x0, 0x1, 0x0, 0x0) symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00') r0 = open(&(0x7f0000000380)='./file0/file0\x00', 0x0, 0x0) compat_40_mount(&(0x7f0000000200)='cd9660\x00', &(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800000, &(0x7f00000002c0)="01") fchroot(r0) socketpair(0x2, 0x3, 0x69, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pread(r1, &(0x7f0000000140)="35bea394a592db1fa13e1f3bfd3f5b01a6d6d52b670ee9dfb804e65d10d8676e0123cde213e1e8d121b7eb9769a09a7b83bedc816f1dd2a6cb7ef4b9a845785c2a965afb14de88eea23e2dd2cb6dbcc2944970cdd597bf69159f63d8017ab403e1f5673aab701464855223e0c31322f935fd83ddc5e279377b581410f547c8d16138fa6b1329e3d334d97a", 0x8b, 0x4) mknod$loop(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1) compat_50___msgctl13$IPC_STAT(0x0, 0x2, &(0x7f0000000280)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x0, 0x4, 0x0, 0x1}}}) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)=@abs={0x0, 0x0, 0x2}, 0x8, &(0x7f0000000200)}, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) compat_40_mount(&(0x7f0000000140)='umap\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f00000001c0)) compat_50___msgctl13$IPC_STAT(0x0, 0x2, &(0x7f0000000280)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100), 0xdffffffffffff7ff}}) symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00') r2 = open(&(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8000, 0x406) compat_40_mount(&(0x7f0000000380)='tmpfs\x00', &(0x7f0000000300)='./file0\x00', 0x800, &(0x7f0000000800)="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") fchroot(r2) mknod(&(0x7f00000000c0)='./file0/file0\x00', 0x1005, 0x0) link(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r3 = socket(0x18, 0x3, 0x0) ioctl$FIOSEEKHOLE(r3, 0xc048696d, &(0x7f0000000180)=0x8000000000000032) link(&(0x7f0000001240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000bc0)='./file0\x00') rename(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(0x0, 0x0) open(&(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) socket(0x0, 0x0, 0x0) rename(0x0, 0x0) pipe2(&(0x7f0000000000), 0x1400004) 9.540455202s ago: executing program 0: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) lchown(&(0x7f0000000100)='./file0\x00', 0xffffffffffffffff, 0xffffffffffffffff) compat_50_____semctl13$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000180)=@array=&(0x7f0000000140)) mprotect(&(0x7f00006ac000/0x1000)=nil, 0x1000, 0x0) rename(&(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', &(0x7f0000000180)='./file0\x00') compat_50___msgctl13$IPC_STAT(0x0, 0x2, &(0x7f0000000280)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100), 0x1000000000}}) compat_40_mount(&(0x7f0000000000)='tmpfs\x00', &(0x7f00000003c0)='.\x00', 0x0, &(0x7f0000000140)) symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00') sendmsg$unix(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)=@abs={0x0, 0x0, 0x2}, 0x8, &(0x7f0000000380)}, 0x0) mknod(&(0x7f0000000540)='./file0\x00', 0x6000, 0x1003) symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00') compat_50___stat30(&(0x7f0000000000)='./file0\x00', &(0x7f0000000180)) ioctl$FIOSEEKHOLE(0xffffffffffffffff, 0x80906979, &(0x7f0000000180)=0x8000000000000031) ioctl$FIOASYNC(0xffffffffffffffff, 0x40086484, &(0x7f0000000000)) munmap(&(0x7f0000e34000/0x1000)=nil, 0xffffffffdf1cbfff) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = socket(0x10, 0x2, 0x0) ioctl$FIOSEEKHOLE(r0, 0x8090690c, &(0x7f0000000180)) syz_usb_connect$printer(0x0, 0x0, 0x0, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) swapctl$SWAP_ON(0xf, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) __mount50(0x0, 0x0, 0x0, &(0x7f0000000000)="02000000580b03d5", 0x8) open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) compat_40_mount(&(0x7f0000000140)='umap\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f00000001c0)) mknod$loop(&(0x7f0000000780)='./file0\x00', 0x1, 0x0) link(&(0x7f0000001240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000000440)='./file0\x00', &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') compat_43_ocreat(&(0x7f0000000000)='./file0\x00', 0x0) 9.493857029s ago: executing program 4: r0 = socket(0x2, 0x3, 0x0) ioctl$FIOSEEKHOLE(0xffffffffffffffff, 0x80206916, &(0x7f0000000180)=0x8000000000000032) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$FIOSEEKHOLE(r0, 0x40206500, &(0x7f0000000180)) 7.24580935s ago: executing program 3: r0 = socket(0x18, 0x3, 0x0) setsockopt(r0, 0x1000000029, 0x3e, &(0x7f0000000000)="5ab7776a", 0x4) socket(0x0, 0x0, 0x0) r1 = socket$inet6(0x18, 0x3, 0x0) dup2(r0, r1) getsockopt(r1, 0x29, 0x23, 0x0, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0xb, 0xffffffffffffffff) write(r2, 0x0, 0x0) 7.207657966s ago: executing program 4: r0 = socket(0x2, 0x3, 0x0) ioctl$FIOSEEKHOLE(0xffffffffffffffff, 0x80206916, &(0x7f0000000180)=0x8000000000000032) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$FIOSEEKHOLE(r0, 0x40206500, &(0x7f0000000180)) 7.011363147s ago: executing program 4: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) __mount50(&(0x7f0000000000)='fdesc\x00', &(0x7f0000000480)='./file0\x00', 0x0, 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r0 = socket(0x18, 0x1, 0x0) close(r0) r1 = socket(0x18, 0x2, 0x0) r2 = _lwp_self() r3 = msgget$private(0x0, 0x0) msgrcv(r3, 0x0, 0x0, 0x0, 0x800) sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x406, 0x0, 0x39) _lwp_kill(r2, 0xa) setsockopt(r1, 0xed2f, 0x4, &(0x7f0000000000)="ebffcbff13b90fd82eaa4e713048e69931929648", 0x14) r4 = semget$private(0x0, 0x0, 0x100) r5 = getuid() shmctl$IPC_SET(0x0, 0x1, &(0x7f00000003c0)={{0x0, r5}}) getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x11, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) compat_50_____semctl13$SETVAL(r4, 0x0, 0x8, &(0x7f00000003c0)=@buf=&(0x7f0000000380)={{r6, r7, 0x0, 0x7, 0x400, 0x3, 0x1}, 0x7ffa, 0x51ab, 0x6, &(0x7f00000001c0)={0x800, 0x6, 0x4}}) modctl$MODCTL_LOAD(0x0, &(0x7f0000000140)={&(0x7f0000000040), 0x0, 0x0}) recvmmsg(r1, &(0x7f0000000100)={&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1f}, 0x10, 0x957, 0x0) mknod(&(0x7f0000000340)='./file0\x00', 0x2000, 0x0) r8 = socket$inet(0x2, 0x10000000, 0x1) _ksem_trywait(0x0) mlock(&(0x7f0000ff0000/0x4000)=nil, 0x4000) fcntl$setown(r8, 0x6, 0x0) fork() socket$inet(0x2, 0x2, 0x0) chflags(&(0x7f0000000440)='./file0\x00', 0x0) socket$inet(0x2, 0x40000000, 0x22) connect$inet(r8, &(0x7f0000000000)={0x2, 0x3}, 0xc) mknod(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8000, 0x0) 6.6142169s ago: executing program 3: __clone(0x0, &(0x7f0000000100)="9c8137995623629d1d98a62b684c85f7") mknod(&(0x7f0000000200)='./file0\x00', 0xc035cd953ea0fd64, 0x1733) __lstat50(&(0x7f0000000000)='./file0\x00', 0x0) mknod(&(0x7f0000000000)='./file1\x00', 0x2000, 0xa718) r0 = open$dir(&(0x7f0000000040)='./file1\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$OFIOGETBMAP(r0, 0xc020447f, &(0x7f0000000100)) 6.444127678s ago: executing program 5: compat_50___msgctl13$IPC_STAT(0x0, 0x2, &(0x7f0000000380)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x3}}) compat_40_mount(&(0x7f0000000000)='v7fs\x00', &(0x7f0000000100)='.\x00', 0x1000000, &(0x7f00000004c0)="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") mknod(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x0) r0 = getsid(0x0) ptrace(0xa, r0, &(0x7f0000000000), 0x0) ktrace(&(0x7f0000000200)='./file2\x00', 0xf, 0x8, r0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1) symlink(&(0x7f0000000180)='./file2/file1\x00', &(0x7f0000000240)='./file0\x00') mkdir(&(0x7f0000000040)='./file2\x00', 0x0) mkdir(&(0x7f0000000300)='./file2/file0\x00', 0x0) syz_extract_tcp_res$synack(&(0x7f0000000000), 0x1, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000040), 0x1, 0x0) r1 = posix_spawn(0x0, &(0x7f0000000080)=']}\b', &(0x7f0000000100)={0x6, 0x2, &(0x7f00000000c0)=@close={0x2, 0xffffffffffffff9c}}, &(0x7f0000000140)={0x40, 0x0, {0x13ff}, 0x6, {[0x3, 0x1f, 0x2, 0x3]}, {[0x3ff, 0x1000, 0x64, 0x8]}}, &(0x7f0000000180)=['(^\x00'], &(0x7f00000001c0)=['&\x00', '[}:&,B#&#\x00', '[!\x00', '\x00', '@:#]%.{!\x00', ',%,\x00', '[+\x00', ')/\x00', '],\\>()\x00']) ptrace(0x100000000, r1, &(0x7f0000000200), 0x0) syz_extract_tcp_res$synack(&(0x7f0000000240), 0x1, 0x0) ptrace(0x7, r1, &(0x7f0000000280), 0xffff) syz_extract_tcp_res$synack(&(0x7f00000002c0), 0x1, 0x0) syz_extract_tcp_res(&(0x7f0000000300), 0x6, 0x6) syz_extract_tcp_res$synack(&(0x7f0000000340), 0x1, 0x0) ptrace(0x0, r1, &(0x7f0000000380), 0x0) syz_extract_tcp_res$synack(&(0x7f00000003c0), 0x1, 0x0) syz_extract_tcp_res(&(0x7f0000000400), 0x2, 0x9) __wait450(r1, &(0x7f0000000440), 0x40, &(0x7f0000000480)) syz_extract_tcp_res$synack(&(0x7f0000000540), 0x1, 0x0) syz_extract_tcp_res(&(0x7f0000000580), 0x1, 0x4) syz_extract_tcp_res(&(0x7f00000005c0), 0x2, 0xfffffff7) ptrace(0x7, r1, &(0x7f0000000600), 0x1000) compat_50___msgctl13$IPC_STAT(0xffffffffffffffff, 0x2, &(0x7f0000000740)={{0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000680)={0x0, 0x7fff, 0x0, 0xff58}, 0x2, 0x8, 0x8}, &(0x7f0000000700)={0x0, 0x40, 0xcf9, 0xc3c0}}) getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x11, &(0x7f00000007c0)={0x0, 0x0, 0x0}, &(0x7f0000000800)=0xc) lchown(&(0x7f0000000640)='./file0\x00', r2, r3) 6.383565287s ago: executing program 0: modctl$MODCTL_LOAD(0x2f, &(0x7f0000000040)={&(0x7f0000000200)="c36c27041eab7f43febaf9a2a1f90fa12ad0d8e33b2139f7c2245397e80bb74f5734bf73812703c5f3bf2bb72ceb91ee659b5c0dc20447c7cb57d3c46d8319e6ba804fd157f25afcb9973c5f3bc1afd9c73ace4a6f50dc89626b314b3bb6ff6468a6b5b93913075a2b463c2289860d9882b33c4024ba5e61cc34ca9b85625df075bd2f", 0x0, 0x0}) mknod(&(0x7f0000000480)='./file0\x00', 0x2000, 0x1733) modctl$MODCTL_LOAD(0x0, &(0x7f0000000040)={&(0x7f0000000100), 0x0, &(0x7f0000000300)="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", 0xff8}) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x200, 0x0) symlink(&(0x7f0000001440)='./file1\x00', &(0x7f0000001380)='./file1/file0\x00') r1 = socket(0x1, 0x10000000, 0x0) fcntl$setstatus(r1, 0x4, 0x40) connect$inet(r1, &(0x7f0000000000), 0x10) r2 = open(&(0x7f0000000380)='./file1\x00', 0x1000000, 0x2) compat_40_mount(&(0x7f0000000040)='tmpfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f00000002c0)="01") fork() fchroot(r2) compat_50_select(0x40, &(0x7f0000000280), &(0x7f0000000300)={0x6ac}, 0x0, 0x0) fstatat(r0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x100) mknod(&(0x7f0000001300)='./file1\x00', 0x2000, r3) open$dir(&(0x7f0000000040)='./file1\x00', 0x0, 0x0) __select50(0x40, &(0x7f0000000000)={0x3ff}, 0x0, 0x0, 0x0) 6.213886615s ago: executing program 0: compat_40_mount(&(0x7f0000000000)='tmpfs\x00', &(0x7f00000003c0)='.\x00', 0x0, &(0x7f0000000140)="01") open(&(0x7f00000000c0)='./file0\x00', 0x10000, 0x0) pathconf(&(0x7f0000000000)='./file0\x00', 0x4) 6.072205697s ago: executing program 0: open(&(0x7f0000001640)='./file0\x00', 0x615, 0x0) ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0xd27d43220c7df9b, 0x0) compat_43_oftruncate(0xffffffffffffffff, 0x0) modctl$MODCTL_LOAD(0x0, 0x0) socket(0x6, 0x0, 0xfd) r0 = socket$inet(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x0}, 0x10) compat_43_ogetpeername(r0, &(0x7f0000000280), &(0x7f0000000540)) socket(0x0, 0x0, 0x0) r1 = open$dir(&(0x7f0000000300)='./file0\x00', 0xf02, 0x20) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, 0x10, r1, 0x0, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x0, 0x1) swapctl$SWAP_ON(0x6, &(0x7f0000000000), 0x3) compat_40_mount(&(0x7f0000000380)='ffs\x00', &(0x7f0000000140)='./file0/file0\x00', 0x0, &(0x7f0000000500)="a03f7d5172cd011d29a88370f944b81a359edd16e56d232bfcc73b1e366c880100fd42e9ea0dd42080780afc75d2832f36236448c0fb6c129af65b46c53e474cba29341bcb5d") _ksem_unlink(&(0x7f0000000180)="5d4b230efceb7d3051e3986bb37416d1fb579a0bc56bde4eb727f423ba71a6ffc0fded6292ba0493d4c02feaadf57ad822652bede19454fe35c400f4b6c560eb50b81133645b8156c8e4f525c21cb077caf53721d428a17a69aa6a983509a1d5471609b6ca6ddddc2a06cbce9720bf81a1195ca717b2c1b653324ce93d70") compat_30___stat13(&(0x7f0000000340)='./file0\x00', &(0x7f0000000180)) socket$inet(0x2, 0x2, 0x0) mknod(&(0x7f0000000000)='./file1\x00', 0x2000, 0xa718) r2 = open$dir(&(0x7f00000000c0)='./file1\x00', 0x80, 0x0) ioctl$OFIOGETBMAP(r2, 0xc020447f, &(0x7f00000005c0)) mknod(&(0x7f0000000080)='./file0\x00', 0x2000, 0x40000802) _ksem_unlink(&(0x7f0000000240)="0e7cb11bb32bb90384a940f777e172144e72c582736a37b786e921531dd512ca74b8f5f4aa2f1a5c940893f9cf79dca0a293c0400e874680387844415c045ab668be7cc6ec5e952d96d60f68709e6aa0766b08806dd90bfbca80c9cb9f4dace8407030ea443de6a03adf96765459deb0fc696245068d82a1b7bae5f887806b0c4555338d336ae9d70f50d8ac3f45e836e4d04543bb649d129e4efafbfaf1de234a1bc982a0503b57b4c9e1cd7a77ece65374f5fa7a1826fcc5a95ebd8875db42115a919bfa") r3 = open$dir(&(0x7f0000000000)='./file0\x00', 0x2, 0x0) profil(&(0x7f0000000580)="8b45f50f0b", 0x5, 0x20, 0x1f) mkdir(&(0x7f0000000200)='./file0\x00', 0x2) __mount50(&(0x7f0000000000)='kernfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0) pathconf(&(0x7f0000000040)='./file0\x00', 0x1) writev(r3, &(0x7f0000000a80)=[{&(0x7f0000000600)="2d54278047719e7571f275cede513b4ad30e4723e0f2c66afc5d0175f126b75fe7680f255b53ebaf0c6bf0b711f47ceb0c034f4c1b6a204b807d3b85e55927f96c78c49c6a249afd8410a0ee96022c6cdbb773f64704503b07515aa85851c542d62221", 0x63}, {&(0x7f0000000b00)="a11f5893081bf8eb5cd2123e055184a8636c93760f10f219c987a138f485d07c15d60f0f59b6e21c3e282860b9d9b716134875525a2f86c746ceda559f1a3d48274cad76f17e46af27da370cc47d2e66a234773c112ba314c1e1208c73cb4031ccc1ca4ed941a4f7154d5f6aa9b714bae77463231f5ace9fced627eca421809a8eef49281c7b2370c4a3be0117ef5d6f66aee1bf55e98cc931", 0x99}, {&(0x7f0000000980)="8fdaf786e312ce99bb6ae51394f4ad54a3bf57435676c2c4a4e25c6e3b6cb88c54ad10675162ddd1b8dada1e87c1dd65c377884240cc2fa639e265584ffb08dd29f6cfd6bab17cf4dba8891bab71e9cf2f5a335adf56d27edb81ef33f5c30b8e63ca968c33e0c170c168fff89043adbaf05ba0f5339407d03a78c6b4cbcb6f54efff3be8c68d1517e70855aa34fe257f4fdaf2f3a7119d4b2d8f226bffa3266b4a8ee68c3794c07f4ecf0109f77df23e9d5f16a95ac29836bdb6bc8efc", 0xbd}, {&(0x7f0000000a40)="580619fd24ea1b05951068be24b2eba00b2c6677579d7e4a5f20322adcf619d6eb6f28630600c19bcf", 0x29}], 0x4) r4 = open(&(0x7f0000000400)='./file1\x00', 0x0, 0x0) ioctl$FIOASYNC(r4, 0x80047401, 0x0) 5.919830622s ago: executing program 4: __mount50(&(0x7f00000002c0)='overlay\x00', &(0x7f0000000040)='.\x00', 0x1, &(0x7f0000000540), 0x0) undelete(&(0x7f0000000000)='./file0\x00') mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x40000802) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) ioctl$FIONREAD(r0, 0x80207443, &(0x7f0000000040)) __clone(0x0, &(0x7f0000000040)) compat_50_wait4(0x0, 0x0, 0x8, 0x0) socket$inet(0x2, 0x5, 0x3) connect$inet(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x18, 0x3, 0x0) setsockopt(r1, 0x29, 0x6c, &(0x7f0000000040), 0x4) compat_40_mount(&(0x7f0000000380)='tmpfs\x00', &(0x7f00000003c0)='.\x00', 0x0, &(0x7f0000000140)="01") socket$inet(0x2, 0x1, 0x0) getsockopt(0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0) open$dir(0x0, 0x0, 0x0) dup(0xffffffffffffffff) __getdents30(0xffffffffffffffff, 0x0, 0x0) unlinkat(0xffffffffffffffff, 0x0, 0x800) socket(0x10, 0x40000000, 0x0) setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mknod(0x0, 0x1, 0x2e00) __mount50(0x0, 0x0, 0x0, 0x0, 0x0) symlink(0x0, 0x0) ioctl$FIOSEEKHOLE(0xffffffffffffffff, 0x80906979, &(0x7f0000000180)=0x8000000000000031) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) socket(0x10, 0x2, 0x0) symlink(&(0x7f0000000080)='.\x00', 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r2 = socket(0x18, 0x2, 0x0) setsockopt$sock_timeval(r2, 0xffff, 0x100b, &(0x7f0000000080), 0x10) 5.732330962s ago: executing program 1: compat_40_mount(&(0x7f0000000080)='ptyfs\x00', &(0x7f00000000c0)='.\x00', 0x0, &(0x7f00000002c0)="01") mknod(&(0x7f0000000480)='./file0\x00', 0x2000, 0x1733) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) ioctl$FIONBIO(r0, 0x8004667e, &(0x7f0000000000)) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) writev(r2, &(0x7f0000001480)=[{&(0x7f0000001240)="cc", 0x1}], 0x1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x2, 0x4811, r1, 0x262, 0x0) open$dir(&(0x7f0000000140)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0, 0x0) r3 = socket(0x18, 0x2, 0x0) ioctl$FIOSEEKHOLE(r3, 0xc118691d, &(0x7f0000000180)=0x8000000000000032) 4.938055249s ago: executing program 5: symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00') compat_50___msgctl13$IPC_STAT(0x0, 0x2, &(0x7f0000000280)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)}}) lchown(&(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0) _ksem_init(0x0, &(0x7f0000000000)=0x0) _ksem_open(0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000a40)={0xffffffffffffffff}) r2 = getpid() fktrace(r1, 0x0, 0x62e2dd08f149ff1b, r2) _ksem_post(r0) compat_40_mount(&(0x7f0000000000)='null\x00', &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f00000001c0)) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) chroot(&(0x7f0000000180)='./file1\x00') mkdir(0x0, 0x0) rename(0x0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x80000000000206, 0x0) 4.506692698s ago: executing program 2: socket(0x1f, 0x3, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0xe015, 0x0) 4.480588412s ago: executing program 3: mknod(&(0x7f0000000000)='./file1\x00', 0x2100, 0xa718) r0 = open$dir(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0) ioctl$OFIOGETBMAP(r0, 0x8010447b, &(0x7f0000000100)) setreuid(0xee00, 0x0) r1 = getuid() setreuid(r1, r1) setuid(r1) mknod(&(0x7f0000000040)='./bus\x00', 0x100000000205f, 0x2802) r2 = open$dir(&(0x7f0000000000)='./bus\x00', 0x0, 0x400) getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x11, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0xc) fchownat(r2, &(0x7f0000000080)='./bus\x00', r1, r3, 0x200) r4 = open$dir(&(0x7f0000000040)='./bus\x00', 0x800, 0x8) r5 = socket(0x10, 0x2, 0x0) ioctl$FIOSEEKHOLE(r5, 0xc020690d, &(0x7f00000000c0)=0x8000000000000032) compat_40_mount(&(0x7f0000000140)='autofs\x00', &(0x7f0000000180)='./bus\x00', 0x200, &(0x7f0000000200)="1ce00557989ddd2097e15c313d0c4817c3fec51df82c889dc4c51b48162a9517a68c45ebaf632497653a44a9d314c5f7929238132e29335972ec005f183c6313655d5a53d5b21704c9965e7a9d4396051876d1a7c49f8ea4c104f13bc9b492b703185566814ca5e3e136526626362b8bdf171a39af75015f4e99796770093c98f23d") ioctl$FIOASYNC(r4, 0x80047442, &(0x7f00000001c0)) 4.358901452s ago: executing program 2: r0 = open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x0) r1 = open(&(0x7f00000001c0)='./file0\x00', 0x6aaaf9f55adc2226, 0x0) compat_43_oftruncate(r0, 0x12000) compat_30___lstat13(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)) socket$inet6(0x18, 0x0, 0x0) modctl$MODCTL_UNLOAD(0x2, &(0x7f0000000040)) mknod(0x0, 0x0, 0x400) r2 = open(&(0x7f0000000080)='./file0\x00', 0x800, 0x0) read(r2, &(0x7f00000002c0)=""/82, 0x52) writev(r1, &(0x7f0000000340)=[{0x0, 0x100000}], 0x1) 4.140764636s ago: executing program 5: compat_40_mount(&(0x7f0000000380)='tmpfs\x00', &(0x7f0000000000)='.\x00', 0x0, &(0x7f0000000140)="01") unlink(0x0) modctl$MODCTL_EXISTS(0x3, 0xffff7f91) __mount50(&(0x7f00000002c0)='overlay\x00', &(0x7f0000000040)='.\x00', 0x0, &(0x7f0000000540), 0x0) mknod(&(0x7f00000000c0)='./bus\x00', 0x2000, 0x4f4b) __stat50(&(0x7f0000000280)='./file0\x00', &(0x7f00000003c0)={0x0}) mknod(&(0x7f00000011c0)='./file0\x00', 0x2000, r0) mknod(0x0, 0x0, 0x40000802) r1 = getsid(0x0) ptrace(0x9, r1, 0x0, 0x0) symlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='./file0\x00') lchown(&(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffff) compat_40_mount(&(0x7f0000000380)='union\x00', &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f00000001c0)) compat_40_mount(0x0, 0x0, 0x0, 0x0) readlink(&(0x7f0000000080)='./bus\x00', &(0x7f00000001c0)=""/97, 0x61) mknod(&(0x7f0000000100)='./file0\x00', 0x3a0914c44f7b202d, 0x500) r2 = open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x0) ioctl$FIOGETOWN(r2, 0x80017472, &(0x7f0000000000)) mknod(0x0, 0x0, 0xe03) r3 = socket(0x18, 0x3, 0x0) connect$unix(r3, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) getsockname$inet(r3, &(0x7f00000000c0), &(0x7f0000000000)=0xffffffffffffff35) r4 = socket(0x18, 0x2, 0x0) r5 = socket(0x18, 0x2, 0x0) connect$unix(r4, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) r6 = dup2(r4, r5) setsockopt(r6, 0x1000000029, 0x23, &(0x7f00000000c0)="b211d7170d816684c8e360f2fa41c1a0946988b272d2dd3dc90142a84231a746e337b372e93320cff6669cbe7868de45ed3fc33719ca6df71ecec8a918458b2c10a1f8c66653b276e7aae9cb9b21f9982230f575295d48889c9a920796b2dd92fc8575680b37ba955d2c15e6d7c9198ed900ab006ddfb67869b51a2216114d1ece85f593e74035f5bc054eb1dbddf42a", 0x90) sendmsg(r5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) compat_50_wait4(0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1, 0x0, 0x0) 3.971424584s ago: executing program 3: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) lchown(&(0x7f0000000100)='./file0\x00', 0xffffffffffffffff, 0xffffffffffffffff) compat_50_____semctl13$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000300)=@array=&(0x7f0000000140)) mprotect(&(0x7f00006ac000/0x1000)=nil, 0x1000, 0x0) rename(&(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', &(0x7f0000000180)='./file0\x00') compat_50___msgctl13$IPC_STAT(0x0, 0x2, &(0x7f0000000280)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x0, 0x0, 0xfffe}, 0xfffffffffffffffc, 0x8fb}}) compat_40_mount(&(0x7f0000000000)='tmpfs\x00', &(0x7f00000003c0)='.\x00', 0x0, &(0x7f0000000140)) symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00') sendmsg$unix(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)=@abs={0x0, 0x0, 0x2}, 0x8, &(0x7f0000000380)}, 0x0) mknod(&(0x7f0000000480)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x6000, 0x1003) symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00') compat_50___stat30(&(0x7f0000000000)='./file0\x00', &(0x7f0000000180)) ioctl$FIOSEEKHOLE(0xffffffffffffffff, 0x80906979, &(0x7f0000000180)=0x1bdfffffffd) ioctl$FIOASYNC(0xffffffffffffffff, 0x40086484, &(0x7f0000000380)=0xb82c) munmap(&(0x7f0000e34000/0x1000)=nil, 0xffffffffdf1cbfff) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = socket(0x1f, 0x10000000, 0x1) ioctl$FIOSEEKHOLE(r0, 0x8090690c, &(0x7f0000000180)) syz_usb_connect$printer(0x0, 0x0, 0x0, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) swapctl$SWAP_ON(0xf, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) __mount50(0x0, 0x0, 0x0, &(0x7f0000000000)="02000000580b03d5", 0x8) open(&(0x7f0000000100)='./file0\x00', 0x80000, 0x40) compat_40_mount(&(0x7f0000000140)='umap\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f00000001c0)) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1) link(&(0x7f0000001240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000000440)='./file0\x00', &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') compat_43_ocreat(&(0x7f0000000000)='./file0\x00', 0x0) 3.865028021s ago: executing program 1: compat_40_mount(&(0x7f0000000080)='ptyfs\x00', &(0x7f00000000c0)='.\x00', 0x0, &(0x7f00000002c0)="01") mknod(&(0x7f0000000480)='./file0\x00', 0x2000, 0x1733) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) ioctl$FIONBIO(r0, 0x8004667e, &(0x7f0000000000)) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) writev(r2, &(0x7f0000001480)=[{&(0x7f0000001240)="cc", 0x1}], 0x1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x2, 0x4811, r1, 0x262, 0x0) open$dir(&(0x7f0000000140)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0, 0x0) r3 = socket(0x18, 0x2, 0x0) ioctl$FIOSEEKHOLE(r3, 0xc118691d, &(0x7f0000000180)=0x8000000000000032) 3.687519409s ago: executing program 1: mknod(&(0x7f0000000300)='./file0\x00', 0x2000, 0x6da) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$OFIOGETBMAP(r0, 0x20007478, &(0x7f00000000c0)) 2.833688856s ago: executing program 1: _lwp_self() compat_43_ocreat(&(0x7f0000000000)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0xa, 0x0) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000040)="aca5b62dd42add506d38eb4d708cd19b72ab2afb000000000066ed43b4aa751852659905", 0x24}], 0x1) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x40000400001803c1, 0x0) pwritev(r1, &(0x7f0000000100)=[{&(0x7f0000000000)="92", 0xff2e}], 0x1, 0x0) compat_50___stat30(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)) 2.760462828s ago: executing program 5: compat_50_____semctl13$IPC_STAT(0x0, 0xc00, 0x2, 0xffffffffffffffff) 2.108596932s ago: executing program 2: r0 = open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x0) r1 = open(&(0x7f00000001c0)='./file0\x00', 0x6aaaf9f55adc2226, 0x0) compat_43_oftruncate(r0, 0x12000) compat_30___lstat13(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)) socket$inet6(0x18, 0x0, 0x0) modctl$MODCTL_UNLOAD(0x2, &(0x7f0000000040)) mknod(0x0, 0x0, 0x400) r2 = open(&(0x7f0000000080)='./file0\x00', 0x800, 0x0) read(r2, &(0x7f00000002c0)=""/82, 0x52) writev(r1, &(0x7f0000000340)=[{0x0, 0x100000}], 0x1) 1.786041934s ago: executing program 2: open$dir(&(0x7f0000000140)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0, 0x0) __getlogin(&(0x7f0000000680)=""/4096, 0x1000) socket$inet(0x2, 0x3, 0x0) r0 = socket(0x11, 0x3, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$FIOSEEKHOLE(r1, 0xc118691d, &(0x7f0000000180)=0x8000000000000031) pwritev(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x0) socket(0x0, 0x0, 0x0) ioctl$FIOGETOWN(0xffffffffffffffff, 0x40044278, 0x0) ioctl$FIOSEEKHOLE(0xffffffffffffffff, 0x80206916, &(0x7f0000000180)=0x8000000000000032) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = socket(0x10, 0x2, 0x0) ioctl$FIOSEEKHOLE(r2, 0x8090690c, &(0x7f0000000180)) sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="b10003090000000000000000070000001a5113fecea10500fef96ecfc72fd3357a89583535673039d2d236acf20b7804be38164991f7c8cf5f882b2900e1aa5b23edebc8ef99a8ad491726fa8251e2f0ac3ebbc2feb3fda1139b672f4d3353eb06acdb35a069d7080000000000000000008904000000000022830cf41bed66f4f365ccdcf3e4999d9d20002002c5dbfad800ff0f000000000000000000", 0x9d, 0x0, 0x0, 0x0) r3 = semget$private(0x0, 0x7, 0x279) sendmsg(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000280)="17bd35edb649792c4ef7ac67077b61f0e86421ad4f19bfce4d334401a6493f69806872679bc04b239d50cd75d2b57a5c7a945e88ebb55d87d7c1f787e6087603ef56391fd67c3822535d4d42509d9267a73eb16741cfca9ce7723e08982e00d38c94a3c7c2e0a29b1af8b71ab0d03a489bd8642374ce5c888203dccf1546baf8f0b4ea6c4ec411", 0x87}, {&(0x7f0000000340)="084dbfb56df71929cf595a1b3bd67a4bb1749755dd6bb1e456e4de4be9a5a93d9af968c17eb0ffb09001b6999ec24d8cb870ff074b6f1f02a8f50acbf97d4d3761bbc1807d0307ee2f826f8e1e4425403113e98d0fd80a3d3458f7a0a01fa5d184abe6fcacb6df4b69d2afd9918df3d047e089", 0x73}, {&(0x7f0000000200)="5e8d861768c74bf313e7a651d0d3baa743ff55a3685d92f86893791b37f202df3f953b2d3c91222b7bdce093d20cef7c24f47bf8c37318d024e06c0837d5bd", 0x3f}, {&(0x7f00000003c0)="c4288f71e228744bb76472e82ddd985caf92a0fa32ba524ddb20be2cbba199ed1fc0e8b0c7647be86c6c53818d16478d9497", 0x32}], 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1000000000000000808f183f0000000018000000000800000600810000000000bb9a6ed9a7000000100000000000000000000000000100000000000000000000010000006c2a000040e8d600fcd3faf27853bb1fa60f1002fab2b8a370bea99e4f3f39a362804c1746f6c4f07917daa0cf4a2cee21520ea2ac10000000000000000001000000000000"], 0x90}, 0x0) setrlimit(0x7, &(0x7f0000000100)) setuid(0xee01) execve(0x0, 0x0, 0x0) ____semctl50$SETVAL(r3, 0x0, 0x8, &(0x7f0000000240)=@buf=0x0) r4 = socket(0x18, 0x3, 0x0) ioctl$FIOSEEKHOLE(r4, 0xc118691d, &(0x7f0000000180)=0x8000000000000032) 1.731371802s ago: executing program 3: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) lchown(&(0x7f0000000100)='./file0\x00', 0xffffffffffffffff, 0xffffffffffffffff) compat_50_____semctl13$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000300)=@array=&(0x7f0000000140)) mprotect(&(0x7f00006ac000/0x1000)=nil, 0x1000, 0x0) rename(&(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', &(0x7f0000000180)='./file0\x00') compat_50___msgctl13$IPC_STAT(0x0, 0x2, &(0x7f0000000280)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x0, 0x0, 0xfffe}, 0xfffffffffffffffc, 0x8fb}}) compat_40_mount(&(0x7f0000000000)='tmpfs\x00', &(0x7f00000003c0)='.\x00', 0x0, &(0x7f0000000140)) symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00') sendmsg$unix(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)=@abs={0x0, 0x0, 0x2}, 0x8, &(0x7f0000000380)}, 0x0) mknod(&(0x7f0000000480)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x6000, 0x1003) symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00') compat_50___stat30(&(0x7f0000000000)='./file0\x00', &(0x7f0000000180)) ioctl$FIOSEEKHOLE(0xffffffffffffffff, 0x80906979, &(0x7f0000000180)=0x1bdfffffffd) ioctl$FIOASYNC(0xffffffffffffffff, 0x40086484, &(0x7f0000000380)=0xb82c) munmap(&(0x7f0000e34000/0x1000)=nil, 0xffffffffdf1cbfff) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = socket(0x1f, 0x10000000, 0x1) ioctl$FIOSEEKHOLE(r0, 0x8090690c, &(0x7f0000000180)) syz_usb_connect$printer(0x0, 0x0, 0x0, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) swapctl$SWAP_ON(0xf, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) __mount50(0x0, 0x0, 0x0, &(0x7f0000000000)="02000000580b03d5", 0x8) open(&(0x7f0000000100)='./file0\x00', 0x80000, 0x40) compat_40_mount(&(0x7f0000000140)='umap\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f00000001c0)) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1) link(&(0x7f0000001240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000000440)='./file0\x00', &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') compat_43_ocreat(&(0x7f0000000000)='./file0\x00', 0x0) 1.3731485s ago: executing program 2: mknod(&(0x7f0000000480)='./file0\x00', 0x2000, 0x1733) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000080)="76e5", 0x2}], 0x1) ioctl$FIONREAD(r0, 0x4004427c, &(0x7f0000000080)) r1 = socket(0x10, 0x2, 0x0) connect$inet(r1, &(0x7f0000000080)={0x10, 0x0}, 0x10) getpeername(r1, &(0x7f00000000c0)=@data, &(0x7f0000000180)=0xe) 1.282644364s ago: executing program 3: mknod$loop(0x0, 0xc000, 0x1) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) setsockopt$sock_int(r0, 0xffff, 0x0, &(0x7f0000000100)=0x20002, 0x4) r1 = compat_30_socket(0x22, 0x3, 0x21) pipe(&(0x7f0000000400)) fcntl$setstatus(r0, 0xa, 0x80040) mprotect(&(0x7f00002a5000/0x2000)=nil, 0x2000, 0x3) mlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) r2 = fork() compat_43_ocreat(&(0x7f00000002c0)='./bus/file0\x00', 0x0) truncate(&(0x7f0000000000)='./file0\x00', 0x0, 0x10001) open(&(0x7f00000000c0)='./file0\x00', 0x8000, 0x1c0) pipe2(&(0x7f0000000180), 0x210507849be3d453) socket(0x10, 0x40000000, 0x0) fcntl$setstatus(r1, 0x4, 0x10048) paccept(0xffffffffffffffff, 0x0, 0x0, 0x0) __mount50(&(0x7f0000000000)='lfs\x00', 0x0, 0x0, 0x0, 0x0) modctl$MODCTL_UNLOAD(0x1, &(0x7f0000000540)="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") mkdir(0x0, 0x0) __mount50(&(0x7f0000000000)='fdesc\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0) compat_50___msgctl13$IPC_STAT(0x0, 0x2, 0x0) lchown(&(0x7f0000000300)='./bus/file0\x00', 0x0, 0x0) socket(0x2, 0x5, 0x4) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) setgroups(0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0xffff, 0x0, 0x0, 0x0) mknod$loop(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) getsid(r2) r3 = getsid(r2) ptrace(0x9, r3, 0x0, 0x0) 932.01527ms ago: executing program 0: unlink(0x0) open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) pipe(&(0x7f0000000a40)) getpid() pipe(&(0x7f0000000a40)) getpid() mknod(&(0x7f00000000c0)='./bus\x00', 0x2000, 0x0) open$dir(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) compat_40_mount(0x0, 0x0, 0x0, 0x0) symlink(0x0, 0x0) __setitimer50(0x0, 0x0, 0x0) mknod$loop(&(0x7f0000000000)='./file1\x00', 0xae3a294406732672, 0x1) __lstat50(&(0x7f0000000380)='./file2\x00', &(0x7f00000004c0)={0x0}) symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00') r1 = socket(0x10, 0x2, 0x0) fktrace(r1, 0x4, 0x62e2dd08f149ff1b, 0x0) compat_30_getfh(&(0x7f0000000140)='./file2\x00', &(0x7f0000000180)) mknod(&(0x7f00000000c0)='./bus\x00', 0x2000, r0) open$dir(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000240)=@abs={0x0, 0x0, 0x3}, 0x8) readv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000a80)=""/4096, 0x1000}], 0x1) r3 = socket(0x1f, 0x1, 0x0) setsockopt$sock_int(r3, 0xffff, 0x800, &(0x7f0000000000), 0x4) __getlogin(&(0x7f00000001c0)=""/83, 0x53) open(0x0, 0x615, 0x0) compat_30___lstat13(&(0x7f0000000300)='./file0\x00', &(0x7f0000000440)) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) readv(r4, &(0x7f00000000c0), 0x0) 732.575183ms ago: executing program 4: r0 = socket(0x0, 0x0, 0x0) setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) __mount50(&(0x7f00000002c0)='overlay\x00', &(0x7f0000000040)='.\x00', 0x0, &(0x7f0000000540), 0x0) mknod(&(0x7f0000000000)='./bus\x00', 0x2000, 0x2e00) r1 = open$dir(&(0x7f0000000100)='./bus\x00', 0x0, 0x0) ioctl$FIOASYNC(r1, 0x8004667d, &(0x7f0000000040)) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) chflags(&(0x7f00000003c0)='./file0\x00', 0x5) r2 = fcntl$dupfd(0xffffffffffffff9c, 0x0, r0) r3 = getsid(0x0) __fhopen40(&(0x7f0000000140)="5e987617d2452f2fab5f9ee91c7d8ef7a0409f943592b19aeda410f7ee70f98b31ab4abead65105eb27c5d83698105c60d6f6bd2dd07112b131f92a363e38c6d3686288ffb010218e4f4f01a6dea03181caa919cb4e1ed6262d78283cab8eb21423e61dafaed17768e1edcbf87c0dd6fc017a61f5090de6653c13bc2f0aa0066dd89d21a1093fd51e5c52f61aca6793168b7843587d33191a598439434eab25b0bbf0d6cecfa90ce8fc09ea1130d115a0f01061c43d5cc6199fc24ce81817d2b10f70b3127b9041be9e84fea418100387d34b10e386563a52e7f9d5d98facf5b411fae78b53d769ae040a0f6", 0xec, 0x20000) fcntl$lock(r2, 0x7, &(0x7f0000000000)={0x1, 0x1, 0x1eb29114, 0x237, r3}) r4 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r4) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file1\x00', 0x0) rmdir(&(0x7f0000000480)='./file1\x00') 618.89105ms ago: executing program 5: compat_50_____semctl13$IPC_STAT(0x0, 0xc00, 0x2, 0xffffffffffffffff) 347.000294ms ago: executing program 1: _lwp_self() compat_43_ocreat(&(0x7f0000000000)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0xa, 0x0) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000040)="aca5b62dd42add506d38eb4d708cd19b72ab2afb000000000066ed43b4aa751852659905", 0x24}], 0x1) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x40000400001803c1, 0x0) pwritev(r1, &(0x7f0000000100)=[{&(0x7f0000000000)="92", 0xff2e}], 0x1, 0x0) compat_50___stat30(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)) 143.070287ms ago: executing program 5: open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x8004, &(0x7f0000000080)={0x2, 0x0}, 0x10) mlock(&(0x7f000052a000/0x1000)=nil, 0x1000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) munlockall() sendto$inet(r0, &(0x7f0000000480), 0x0, 0x0, &(0x7f0000000100)={0x2, 0x0}, 0x10) socketpair$unix(0x1, 0x1, 0x0, 0xfffffffffffffffe) compat_50_lutimes(0x0, &(0x7f0000000040)={0x1}) shmctl$IPC_SET(0x0, 0x1, 0xfffffffffffffffe) compat_50_select(0x40, &(0x7f0000000140)={0x9, 0x1, 0xffffffffffffffc1, 0x317}, &(0x7f0000000180)={0x6, 0x0, 0x40000, 0xfffffffffffffffc, 0x4, 0x6, 0x0, 0x20000000000000}, &(0x7f00000001c0)={0x1, 0xe91, 0x5, 0x5, 0xb98, 0x6, 0x3, 0x4}, &(0x7f0000000200)={0xffff, 0x9}) r1 = socket(0x18, 0x3, 0x0) setsockopt(r1, 0x29, 0x6c, &(0x7f0000000040), 0x4) __fhstatvfs190(&(0x7f0000000080)="aef1b3b56f0aff2bb37d5faf393acf5acb21b630473052", 0x17, 0x0, 0x0) compat_40_mount(&(0x7f0000000040)='tmpfs\x00', &(0x7f0000000140)='.\x00', 0x0, &(0x7f0000000080)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x78e, 0x0) ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0xd27d43220c7df9b, 0x0) r2 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x0) mlockall(0x2) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x12, r2, 0x0, 0xfffffffffffffffa) r3 = socket(0x18, 0x2, 0x0) fktrace(0xffffffffffffffff, 0x0, 0x62e2dd08f149ff1b, 0x0) compat_20_fstatfs(r1, &(0x7f0000000500)) __clone(0x400, &(0x7f0000000640)="55e59f1f0f79671dddf58b5538350b0aea9e2d3e675ac5c36905") __lstat50(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)) __fstat50(r1, &(0x7f0000000780)={0x0}) sendmsg(r3, &(0x7f0000000ec0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0xd001, r4) 116.737331ms ago: executing program 1: r0 = socket(0x10, 0x2, 0x0) fktrace(r0, 0x4, 0x62e2dd08f149ff1b, 0x0) __getlogin(&(0x7f0000000000)=""/4096, 0x1400) 0s ago: executing program 2: mknod(&(0x7f0000000400)='./file0\x00', 0x2000, 0x287e) r0 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x0) ioctl$FIONBIO(r0, 0x80047457, &(0x7f0000000000)=0x4) r1 = socket(0x11, 0x3, 0x0) compat_43_orecv(r1, 0x0, 0x0, 0x41) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x2000000) symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00') compat_50___stat30(&(0x7f0000000000)='./file0\x00', &(0x7f0000000180)) ioctl$FIOSEEKHOLE(0xffffffffffffffff, 0x80906979, &(0x7f0000000180)=0x8000000000000031) munmap(&(0x7f0000e34000/0x1000)=nil, 0xffffffffdf1cbfff) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r3 = socket(0x2, 0x3, 0x0) ioctl$FIOSEEKHOLE(r3, 0x8020690e, &(0x7f0000000180)) compat_40_mount(0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) writev(r2, &(0x7f0000000200)=[{0x0}], 0x1) compat_40_mount(&(0x7f0000000100)='sysvbfs\x00', &(0x7f0000000140)='./file0\x00', 0x1000000, &(0x7f00000004c0)="72dde3da6c9200ed6fd3a422bebdbf9aaad21b9d7c66a4bf242fc9c8d305945f81002c4212da3a146a1160769f97cc8fc404c2db4c3ba03bd70af1738d3707aded13d861710dda490d1199d01a1b109afc8835e9b0bfae496554c0ab7663be840e3d2f72e0679b388cd0e826eee77bba849d95939890f3fa6f9605155c23ffe6e28fe541a7a163e7406068be7f89ba1d0905c2dd23") r4 = socket(0x18, 0x2, 0x0) setsockopt(r4, 0x1000000029, 0x23, 0x0, 0x0) r5 = getpgid(0x0) ktrace(&(0x7f00000000c0)='./file0\x00', 0x4, 0xf, r5) mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0) lchmod(&(0x7f0000000040)='./file0\x00', 0x1c0) unlink(&(0x7f0000000000)='./file0\x00') kernel console output (not intermixed with test programs): Jun 12 05:04:38 ci2-netbsd-kubsan-0 getty[1216]: /dev/ttyE1: Device not configured NetBSD/amd64 (ci2-netbsd-kubsan-0.c.syzkaller.internal) (constty) Warning: Permanently added '10.128.0.117' (ED25519) to the list of known hosts. 2024/06/12 05:04:51 fuzzer started 2024/06/12 05:04:51 dialing manager at 10.128.0.163:30038 2024/06/12 05:04:51 starting 6 executor processes login: [ 47.8611383] tap4: detached [ 48.0611364] uhub1: device problem, disabling port 1 [ 48.3811461] tap5: detached [ 49.1911376] at_ifinit: timeout?! [ 49.6211330] kobj_load, 185: [./file0]: linker error: read failed 45 [ 49.6211330] WARNING: module error: vfs load failed for `./file0', error 45 [ 49.8511338] WARNING: module error: vfs load failed for `v7fs', error 2 [ 49.8711406] tap2: detached [ 51.0011319] tap1: detached [ 52.4611366] tap2: detached [ 53.0611239] tap3: detached [ 54.1711343] tap1: detached [ 54.3311301] tap5: detached [ 55.7111269] panic: UBSan: Undefined Behavior in /syzkaller/managers/ci2-netbsd-kubsan/kernel/sys/kern/subr_psref.c:235:2, member access within misaligned address 0x1 for type 'struct psref' which requires 8 byte alignment [ 55.7311214] cpu1: Begin traceback... [ 55.7811177] vpanic() at netbsd:vpanic+0x2f0 [ 55.9211227] Report() at netbsd:Report+0x3b [ 56.0311170] HandleTypeMismatch() at netbsd:HandleTypeMismatch+0xfc [ 56.1311166] psref_release() at netbsd:psref_release+0x6bf [ 56.2211202] doifioctl() at netbsd:doifioctl+0x857 [ 56.3211176] soo_ioctl() at netbsd:soo_ioctl+0x294 [ 56.4211205] sys_ioctl() at netbsd:sys_ioctl+0xd88 [ 56.5111169] sys___syscall() at netbsd:sys___syscall+0x2f7 [ 56.6111171] syscall() at netbsd:syscall+0x28b [ 56.6311188] --- syscall (number 54 via SYS_syscall) --- [ 56.6611172] netbsd:syscall+0x28b: [ 56.6611172] cpu1: End traceback... [ 56.6711180] fatal breakpoint trap in supervisor mode [ 56.6711180] trap type 1 code 0 rip 0xffffffff80235475 cs 0x8 rflags 0x246 cr2 0x62d0b8 ilevel 0x4 rsp 0xffff900248148640 [ 56.6811157] curlwp 0xffff8fe457e2f1c0 pid 2102.2097 lowest kstack 0xffff9002481442c0 Stopped in pid 2102.2097 (syz-executor.2) at netbsd:breakpoint+0x5: leave ? breakpoint() at netbsd:breakpoint+0x5 db_panic() at netbsd:db_panic+0xec vpanic() at netbsd:vpanic+0x2f0 Report() at netbsd:Report+0x3b HandleTypeMismatch() at netbsd:HandleTypeMismatch+0xfc psref_release() at netbsd:psref_release+0x6bf doifioctl() at netbsd:doifioctl+0x857 soo_ioctl() at netbsd:soo_ioctl+0x294 sys_ioctl() at netbsd:sys_ioctl+0xd88 sys___syscall() at netbsd:sys___syscall+0x2f7 syscall() at netbsd:syscall+0x28b --- syscall (number 54 via SYS_syscall) --- netbsd:syscall+0x28b: Panic string: UBSan: Undefined Behavior in /syzkaller/managers/ci2-netbsd-kubsan/kernel/sys/kern/subr_psref.c:235:2, member access within misaligned address 0x1 for type 'struct psref' which requires 8 byte alignment PID LID S CPU FLAGS STRUCT LWP * NAME WAIT 2102 > 2097 7 1 0 ffff8fe457e2f1c0 syz-executor.2 2102 2102 2 1 10000000 ffff8fe456ef3080 syz-executor.2 1870 1227 3 1 180 ffff8fe457e2fa40 syz-executor.1 parked 1870 1870 3 1 10000180 ffff8fe45732f100 syz-executor.1 nanoslp 2015 2015 2 0 10040000 ffff8fe457c3ea00 syz-executor.5 1458 1458 2 0 40000 ffff8fe45bfe4b80 syz-executor.4 1327 1327 2 0 40000 ffff8fe45bfe4300 syz-executor.0 2155 2155 3 1 180 ffff8fe456ef3900 syz-executor.3 parked 1982 1982 2 1 10000000 ffff8fe456ef34c0 syz-executor.3 1791 1791 3 0 40 ffff8fe456c48bc0 syz-executor.5 mutex 1720 1720 2 0 0 ffff8fe45732f540 syz-executor.1 1758 1758 4 1 1000000 ffff8fe456467300 syz-executor.3 1877 1877 3 1 180 ffff8fe457c3e5c0 syz-executor.2 nanoslp 1708 1708 3 1 180 ffff8fe4572820c0 syz-executor.4 parked 1863 1863 3 0 180 ffff8fe45f6972c0 syz-executor.0 parked 1236 1203 3 1 180 ffff8fe457d9c640 syz-fuzzer parked 1236 1205 3 1 180 ffff8fe457282500 syz-fuzzer wait 1236 1204 2 1 0 ffff8fe4561ecb00 syz-fuzzer 1236 1245 3 0 180 ffff8fe456467740 syz-fuzzer parked 1236 1198 3 1 180 ffff8fe45671e8c0 syz-fuzzer wait 1236 1242 3 0 180 ffff8fe456c48340 syz-fuzzer wait 1236 829 3 1 180 ffff8fe457ad09c0 syz-fuzzer wait 1236 1239 3 0 180 ffff8fe457c3e180 syz-fuzzer parked 1236 449 3 0 180 ffff8fe457ded6c0 syz-fuzzer parked 1236 1224 3 1 180 ffff8fe457322ac0 syz-fuzzer wait 1236 1226 3 1 180 ffff8fe457322240 syz-fuzzer wait 1236 1229 2 0 140 ffff8fe457dedb00 syz-fuzzer 1236 1236 3 0 180 ffff8fe4563e62c0 syz-fuzzer parked 1079 1079 3 0 180 ffff8fe455ebf200 sshd select 1222 1222 3 1 180 ffff8fe457322680 getty nanoslp 1184 1184 3 0 180 ffff8fe4561ec280 getty nanoslp 1216 1216 3 0 180 ffff8fe4561ec6c0 getty nanoslp 1195 1195 3 0 180 ffff8fe455e9cac0 getty ttyraw 1103 1103 3 0 180 ffff8fe457d9ca80 sshd select 955 955 3 0 180 ffff8fe457ded280 powerd kqueue 698 698 3 1 180 ffff8fe457ad0580 syslogd kqueue 745 745 3 0 180 ffff8fe45671e040 dhcpcd poll 743 743 3 1 180 ffff8fe4563e6700 dhcpcd poll 742 742 2 1 0 ffff8fe457282940 dhcpcd 603 603 3 0 180 ffff8fe4563e6b40 dhcpcd poll 292 292 3 0 180 ffff8fe456c48780 dhcpcd poll 485 485 3 1 180 ffff8fe456467b80 dhcpcd poll 291 291 3 0 180 ffff8fe45671e480 dhcpcd poll 1 1 3 0 180 ffff8fe44dc97100 init wait 0 2121 3 0 200 ffff8fe457e2f600 ktrace ktrwait 0 673 3 0 200 ffff8fe455ebf640 physiod physiod 0 196 3 0 200 ffff8fe455e9c680 pooldrain pooldrain 0 > 195 7 0 240 ffff8fe455e9c240 ioflush 0 194 3 1 200 ffff8fe455ebfa80 pgdaemon pgdaemon 0 170 3 1 200 ffff8fe453dd6a40 usb7 usbevt 0 169 3 0 200 ffff8fe453dd6600 usb6 usbevt 0 168 3 1 200 ffff8fe453dd61c0 usb5 usbevt 0 167 3 1 200 ffff8fe450d49a00 usb4 usbevt 0 166 3 0 200 ffff8fe450d495c0 usb3 usbevt 0 165 3 1 200 ffff8fe450d49180 usb2 usbevt 0 31 3 1 200 ffff8fe44ecf49c0 usb1 usbevt 0 63 3 0 200 ffff8fe44ecf4580 usb0 usbevt 0 126 3 1 200 ffff8fe44ecf4140 usbtask-dr usbtsk 0 125 3 1 200 ffff8fe44dc97980 usbtask-hc usbtsk 0 124 3 0 200 ffff8fe44c095b00 swwreboot swwreboot 0 123 3 1 200 ffff8fe44dc97540 npfgc0 npfgcw 0 122 3 1 200 ffff8fe44dc5d940 rt_free rt_free 0 121 3 1 200 ffff8fe44dc5d500 unpgc unpgc 0 120 3 1 200 ffff8fe44dc5d0c0 key_timehandler key_timehandler 0 119 3 1 200 ffff8fe44dc47900 icmp6_wqinput/1 icmp6_wqinput 0 118 3 0 200 ffff8fe44dc474c0 icmp6_wqinput/0 icmp6_wqinput 0 117 3 0 200 ffff8fe44dc47080 nd6_timer nd6_timer 0 116 3 1 200 ffff8fe44dc2b8c0 carp6_wqinput/1 carp6_wqinput 0 115 3 0 200 ffff8fe44dc2b480 carp6_wqinput/0 carp6_wqinput 0 114 3 1 200 ffff8fe44dc2b040 carp_wqinput/1 carp_wqinput 0 113 3 0 200 ffff8fe44dbdebc0 carp_wqinput/0 carp_wqinput 0 112 3 1 200 ffff8fe44daff740 icmp_wqinput/1 icmp_wqinput 0 111 3 0 200 ffff8fe44daffb80 icmp_wqinput/0 icmp_wqinput 0 110 3 0 200 ffff8fe44dbde340 rt_timer rt_timer 0 109 3 0 200 ffff8fe44dbde780 vmem_rehash vmem_rehash 0 100 3 0 200 ffff8fe44daff300 entbutler entropy 0 99 3 0 200 ffff8fe44d53eb40 viomb balloon 0 98 3 1 200 ffff8fe44d53e700 vioif0_txrx/1 vioif0_txrx 0 97 3 0 200 ffff8fe44d53e2c0 vioif0_txrx/0 vioif0_txrx 0 30 3 1 200 ffff8fe44c0956c0 scsibus0 sccomp 0 29 3 0 200 ffff8fe44c095280 pms0 pmsreset 0 28 3 1 200 ffff8fe44bfb5ac0 xcall/1 xcall 0 27 1 1 200 ffff8fe44bfb5680 softser/1 0 26 1 1 200 ffff8fe44bfb5240 softclk/1 0 25 1 1 200 ffff8fe44bf98a80 softbio/1 0 24 1 1 200 ffff8fe44bf98640 softnet/1 0 23 1 1 201 ffff8fe44bf98200 idle/1 0 22 3 0 200 ffff8fe57a333a40 lnxsyswq lnxsyswq 0 21 3 1 200 ffff8fe57a333600 lnxubdwq lnxubdwq 0 20 3 1 200 ffff8fe57a3331c0 lnxpwrwq lnxpwrwq 0 19 3 1 200 ffff8fe57a342a00 lnxlngwq lnxlngwq 0 18 3 1 200 ffff8fe57a3425c0 lnxhipwq lnxhipwq 0 17 3 1 200 ffff8fe57a342180 lnxrcugc lnxrcugc 0 16 3 0 200 ffff8fe57a3599c0 sysmon smtaskq 0 15 3 1 200 ffff8fe57a359580 pmfsuspend pmfsuspend 0 14 3 0 200 ffff8fe57a359140 pmfevent pmfevent 0 13 3 0 200 ffff8fe57a36c980 sopendfree sopendfr 0 12 3 0 200 ffff8fe57a36c540 ifwdog ifwdog 0 11 3 0 200 ffff8fe57a36c100 iflnkst iflnkst 0 10 3 1 200 ffff8fe57b397940 nfssilly nfssilly 0 9 3 1 200 ffff8fe57b397500 pooldisp pooldisp 0 8 3 1 200 ffff8fe57b3970c0 modunload mod_unld 0 7 3 0 200 ffff8fe57b3c2900 xcall/0 xcall 0 6 1 0 200 ffff8fe57b3c24c0 softser/0 0 5 1 0 200 ffff8fe57b3c2080 softclk/0 0 4 2 0 200 ffff8fe57b3ed8c0 softbio/0 0 3 1 0 200 ffff8fe57b3ed480 softnet/0 0 2 1 0 201 ffff8fe57b3ed040 idle/0 0 0 3 0 240 ffffffff86795cc0 swapper mutex [Locks tracked through LWPs] ****** LWP 2102.2097 (syz-executor.2) @ 0xffff8fe457e2f1c0, l_stat=7 *** Locks held: none *** Locks wanted: * Lock 0 (initialized at netbsd:module_hook_init+0x1c) lock address : netbsd:module_hook type : sleep/adaptive initialized : netbsd:module_hook_init+0x1c shared holds : 0 exclusive: 0 shares wanted: 0 exclusive: 0 relevant cpu : 1 last held: 0 relevant lwp : 0xffff8fe457e2f1c0 last held: 000000000000000000 last locked : 0 unlocked* : 0 owner field : 000000000000000000 wait/spin: 0/0 Turnstile: no active turnstile for this lock. ****** LWP 1458.1458 (syz-executor.4) @ 0xffff8fe45bfe4b80, l_stat=2 *** Locks held: * Lock 0 (initialized at netbsd:kcov_open+0x52) lock address : ffff8fe4661431c0 type : sleep/adaptive initialized : netbsd:kcov_open+0x52 shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 0 relevant cpu : 0 last held: 0 relevant lwp : 0xffff8fe45bfe4b80 last held: 0xffff8fe45bfe4b80 last locked* : netbsd:kcov_fops_ioctl+0x5c unlocked : 0 owner field : 000000000000000000 wait/spin: 0/0 Turnstile: no active turnstile for this lock. * Lock 1 (initialized at netbsd:uvm_obj_init+0xee) lock address : ffff8fe466143340 type : sleep/adaptive initialized : netbsd:uvm_obj_init+0xee shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 0 relevant cpu : 0 last held: 0 relevant lwp : 0xffff8fe45bfe4b80 last held: 0xffff8fe45bfe4b80 last locked* : netbsd:uvm_fault_internal+0x2453 unlocked : netbsd:uvm_fault_lower_enter+0x840 owner/count : 000000000000000000 flags : 000000000000000000 Turnstile: no active turnstile for this lock. *** Locks wanted: none ****** LWP 1327.1327 (syz-executor.0) @ 0xffff8fe45bfe4300, l_stat=2 *** Locks held: * Lock 0 (initialized at netbsd:kcov_open+0x52) lock address : ffff8fe466143c40 type : sleep/adaptive initialized : netbsd:kcov_open+0x52 shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 0 relevant cpu : 0 last held: 0 relevant lwp : 0xffff8fe45bfe4300 last held: 0xffff8fe45bfe4300 last locked* : netbsd:kcov_fops_ioctl+0x5c unlocked : 0 owner field : 000000000000000000 wait/spin: 0/0 Turnstile: no active turnstile for this lock. *** Locks wanted: none ****** LWP 1982.1982 (syz-executor.3) @ 0xffff8fe456ef34c0, l_stat=2 *** Locks held: * Lock 0 (initialized at netbsd:fork1+0x4c5) lock address : ffff8fe462fb97d0 type : sleep/adaptive initialized : netbsd:fork1+0x4c5 shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 0 relevant cpu : 1 last held: 1 relevant lwp : 0xffff8fe456ef34c0 last held: 0xffff8fe456ef34c0 last locked* : netbsd:exit1+0x393 unlocked : 0 owner/count : 0xffff8fe456ef34c0 flags : 0x0000000000000004 Turnstile: no active turnstile for this lock. * Lock 1 (initialized at netbsd:procinit+0x86) lock address : netbsd:proc_lock type : sleep/adaptive initialized : netbsd:procinit+0x86 shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 0 relevant cpu : 1 last held: 1 relevant lwp : 0xffff8fe456ef34c0 last held: 0xffff8fe456ef34c0 last locked* : netbsd:exit1+0x55c unlocked : netbsd:trapsignal+0xb38 owner field : 0xffff8fe456ef34c0 wait/spin: 1/0 Turnstile: => 0 waiting readers: => 2 waiting writers: 0xffffffff86795cc0 0xffff8fe456c48bc0 *** Locks wanted: * Lock 0 (initialized at netbsd:fork1+0x19f9) lock address : ffff8fe45fc83940 type : sleep/adaptive initialized : netbsd:fork1+0x19f9 shared holds : 0 exclusive: 0 shares wanted: 0 exclusive: 1 relevant cpu : 1 last held: 0 relevant lwp : 0xffff8fe456ef34c0 last held: 000000000000000000 last locked : netbsd:sched_pstats+0x128 unlocked* : netbsd:sched_pstats+0x4d7 owner field : 0xffff8fe456ef34c0 wait/spin: 0/0 Turnstile: no active turnstile for this lock. ****** LWP 743.743 (dhcpcd) @ 0xffff8fe4563e6700, l_stat=3 *** Locks held: none *** Locks wanted: * Lock 0 (initialized at netbsd:module_hook_init+0x1c) lock address : netbsd:module_hook type : sleep/adaptive initialized : netbsd:module_hook_init+0x1c shared holds : 0 exclusive: 0 shares wanted: 0 exclusive: 0 relevant cpu : 1 last held: 0 relevant lwp : 0xffff8fe4563e6700 last held: 000000000000000000 last locked : 0 unlocked* : 0 owner field : 000000000000000000 wait/spin: 0/0 Turnstile: no active turnstile for this lock. ****** LWP 742.742 (dhcpcd) @ 0xffff8fe457282940, l_stat=2 *** Locks held: none *** Locks wanted: * Lock 0 (initialized at netbsd:module_hook_init+0x1c) lock address : netbsd:module_hook type : sleep/adaptive initialized : netbsd:module_hook_init+0x1c shared holds : 0 exclusive: 0 shares wanted: 0 exclusive: 0 relevant cpu : 1 last held: 0 relevant lwp : 0xffff8fe457282940 last held: 000000000000000000 last locked : 0 unlocked* : 0 owner field : 000000000000000000 wait/spin: 0/0 Turnstile: no active turnstile for this lock. ****** LWP 485.485 (dhcpcd) @ 0xffff8fe456467b80, l_stat=3 *** Locks held: none *** Locks wanted: * Lock 0 (initialized at netbsd:module_hook_init+0x1c) lock address : netbsd:module_hook type : sleep/adaptive initialized : netbsd:module_hook_init+0x1c shared holds : 0 exclusive: 0 shares wanted: 0 exclusive: 0 relevant cpu : 1 last held: 0 relevant lwp : 0xffff8fe456467b80 last held: 000000000000000000 last locked : 0 unlocked* : 0 owner field : 000000000000000000 wait/spin: 0/0 Turnstile: no active turnstile for this lock. ****** LWP 291.291 (dhcpcd) @ 0xffff8fe45671e480, l_stat=3 *** Locks held: none *** Locks wanted: * Lock 0 (initialized at netbsd:module_hook_init+0x1c) lock address : netbsd:module_hook type : sleep/adaptive initialized : netbsd:module_hook_init+0x1c shared holds : 0 exclusive: 0 shares wanted: 0 exclusive: 0 relevant cpu : 0 last held: 0 relevant lwp : 0xffff8fe45671e480 last held: 000000000000000000 last locked : 0 unlocked* : 0 owner field : 000000000000000000 wait/spin: 0/0 Turnstile: no active turnstile for this lock. ****** LWP 0.26 (softclk/1) @ 0xffff8fe44bfb5240, l_stat=1 *** Locks held: none *** Locks wanted: * Lock 0 (initialized at netbsd:module_hook_init+0x1c) lock address : netbsd:module_hook type : sleep/adaptive initialized : netbsd:module_hook_init+0x1c shared holds : 0 exclusive: 0 shares wanted: 0 exclusive: 0 relevant cpu : 1 last held: 0 relevant lwp : 0xffff8fe44bfb5240 last held: 000000000000000000 last locked : 0 unlocked* : 0 owner field : 000000000000000000 wait/spin: 0/0 Turnstile: no active turnstile for this lock. ****** LWP 0.11 (iflnkst) @ 0xffff8fe57a36c100, l_stat=3 *** Locks held: none *** Locks wanted: * Lock 0 (initialized at netbsd:module_hook_init+0x1c) lock address : netbsd:module_hook type : sleep/adaptive initialized : netbsd:module_hook_init+0x1c shared holds : 0 exclusive: 0 shares wanted: 0 exclusive: 0 relevant cpu : 0 last held: 0 relevant lwp : 0xffff8fe57a36c100 last held: 000000000000000000 last locked : 0 unlocked* : 0 owner field : 000000000000000000 wait/spin: 0/0 Turnstile: no active turnstile for this lock. ****** LWP 0.5 (softclk/0) @ 0xffff8fe57b3c2080, l_stat=1 *** Locks held: none *** Locks wanted: * Lock 0 (initialized at netbsd:module_hook_init+0x1c) lock address : netbsd:module_hook type : sleep/adaptive initialized : netbsd:module_hook_init+0x1c shared holds : 0 exclusive: 0 shares wanted: 0 exclusive: 0 relevant cpu : 0 last held: 0 relevant lwp : 0xffff8fe57b3c2080 last held: 000000000000000000 last locked : 0 unlocked* : 0 owner field : 000000000000000000 wait/spin: 0/0 Turnstile: no active turnstile for this lock. ****** LWP 0.0 (swapper) @ 0xffffffff86795cc0, l_stat=3 *** Locks held: none *** Locks wanted: * Lock 0 (initialized at netbsd:module_hook_init+0x1c) lock address : netbsd:module_hook type : sleep/adaptive initialized : netbsd:module_hook_init+0x1c shared holds : 0 exclusive: 0 shares wanted: 0 exclusive: 0 relevant cpu : 0 last held: 0 relevant lwp : 0xffffffff86795cc0 last held: 000000000000000000 last locked : 0 unlocked* : 0 owner field : 000000000000000000 wait/spin: 0/0 Turnstile: no active turnstile for this lock. [Locks tracked through CPUs] ******* Locks held on cpu1: * Lock 0 (initialized at netbsd:kprintf_init+0x72) lock address : netbsd:kprintf_mtx type : spin initialized : netbsd:kprintf_init+0x72 shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 0 relevant cpu : 1 last held: 1 relevant lwp : 0xffff8fe457e2f1c0 last held: 0xffff8fe457e2f1c0 last locked* : netbsd:kprintf_lock+0x50 unlocked : netbsd:kprintf_unlock+0x70 owner field : 0x0000000000000800 wait/spin: 0/1 PAGE FLAG PQ UOBJECT UANON 0xffff900000007180 0045 00000000 0x0 0x0 0xffff900000007200 0045 00000000 0x0 0x0 0xffff900000007280 0045 00000000 0x0 0x0 0xffff900000007300 0045 00000000 0x0 0x0 0xffff900000007380 0045 00000000 0x0 0x0 0xffff900000007400 0045 00000000 0x0 0x0 0xffff900000007480 0045 00000000 0x0 0x0 0xffff900000007500 0045 00000000 0x0 0x0 0xffff900000007580 0045 00000000 0x0 0x0 0xffff900000007600 0045 00000000 0x0 0x0 0xffff900000007680 0041 00000000 0x0 0x0 0xffff900000007700 0041 00000000 0x0 0x0 0xffff900000007780 0041 00000000 0x0 0x0 0xffff900000007800 0041 00000000 0x0 0x0 0xffff900000007880 0041 00000000 0x0 0x0 0xffff900000007900 0045 00000000 0x0 0x0 0xffff900000007980 0041 00000000 0x0 0x0 0xffff900000007a00 0041 00000000 0x0 0x0 0xffff900000007a80 0041 00000000 0x0 0x0 0xffff900000007b00 0041 00000000 0x0 0x0 0xffff900000007b80 0041 00000000 0x0 0x0 0xffff900000007c00 0041 00000000 0x0 0x0 0xffff900000007c80 0041 00000000 0x0 0x0 0xffff900000007d00 0041 00000000 0x0 0x0 0xffff900000007d80 0041 00000000 0x0 0x0 0xffff900000007e00 0041 00000000 0x0 0x0 0xffff900000007e80 0041 00000000 0x0 0x0 0xffff900000007f00 0041 00000000 0x0 0x0 0xffff900000007f80 0041 00000000 0x0 0x0 0xffff900000008000 0041 00000000 0x0 0x0 0xffff900000008080 0041 00000000 0x0 0x0 0xffff900000008100 0041 00000000 0x0 0x0 0xffff900000008180 0041 00000000 0x0 0x0 0xffff900000008200 0041 00000000 0x0 0x0 0xffff900000008280 0041 00000000 0x0 0x0 0xffff900000008300 0041 00000000 0x0 0x0 0xffff900000008380 0041 00000000 0x0 0x0 0xffff900000008400 0041 00000000 0x0 0x0 0xffff900000008480 0041 00000000 0x0 0x0 0xffff900000008500 0041 00000000 0x0 0x0 0xffff900000008580 0041 00000000 0x0 0x0 0xffff900000008600 0045 00000000 0x0 0x0 0xffff900000008680 0041 00000000 0x0 0x0 0xffff900000008700 0041 00000000 0x0 0x0 0xffff900000008780 0041 00000000 0x0 0x0 0xffff900000008800 0041 00000000 0x0 0x0 0xffff900000008880 0041 00000000 0x0 0x0 0xffff900000008900 0041 00000000 0x0 0x0 0xffff900000008980 0041 00000000 0x0 0x0 0xffff900000008a00 0041 00000000 0x0 0x0 0xffff900000008a80 0041 00000000 0x0 0x0 0xffff900000008b00 0041 00000000 0x0 0x0 0xffff900000008b80 0041 00000000 0x0 0x0 0xffff900000008c00 0041 00000000 0x0 0x0 0xffff900000008c80 0041 00000000 0x0 0x0 0xffff900000008d00 0041 00000000 0x0 0x0 0xffff900000008d80 0041 00000000 0x0 0x0 0xffff900000008e00 0041 00000000 0x0 0x0 0xffff900000008e80 0041 00000000 0x0 0x0 0xffff900000008f00 0041 00000000 0x0 0x0 0xffff900000008f80 0041 00000000 0x0 0x0 0xffff900000009000 0041 00000000 0x0 0x0 0xffff900000009080 0041 00000000 0x0 0x0 0xffff900000009100 0045 00000000 0x0 0x0 0xffff900000009180 0045 00000000 0x0 0x0 0xffff900000009200 0041 00000000 0x0 0x0 0xffff900000009280 0041 00000000 0x0 0x0 0xffff900000009300 0041 00000000 0x0 0x0 0xffff900000009380 0041 00000000 0x0 0x0 0xffff900000009400 0041 00000000 0x0 0x0 0xffff900000009480 0041 00000000 0x0 0x0 0xffff900000009500 0041 00000000 0x0 0x0 0xffff900000009580 0041 00000000 0x0 0x0 0xffff900000009600 0041 00000000 0x0 0x0 0xffff900000009680 0041 00000000 0x0 0x0 0xffff900000009700 0041 00000000 0x0 0x0 0xffff900000009780 0041 00000000 0x0 0x0 0xffff900000009800 0041 00000000 0x0 0x0 0xffff900000009880 0041 00000000 0x0 0x0 0xffff900000009900 0041 00000000 0x0 0x0 0xffff900000009980 0041 00000000 0x0 0x0 0xffff900000009a00 0041 00000000 0x0 0x0 0xffff900000009a80 0041 00000000 0x0 0x0 0xffff900000009b00 0041 00000000 0x0 0x0 0xffff900000009b80 0041 00000000 0x0 0x0 0xffff900000009c00 0041 00000000 0x0 0x0 0xffff900000009c80 0041 00000000 0x0 0x0 0xffff900000009d00 0041 00000000 0x0 0x0 0xffff900000009d80 0041 00000000 0x0 0x0 0xffff900000009e00 0041 00000000 0x0 0x0 0xffff900000009e80 0041 00000000 0x0 0x0 0xffff900000009f00 0041 00000000 0x0 0x0 0xffff900000009f80 0045 00000000 0x0 0x0 0xffff90000000a000 0041 00000000 0x0 0x0 0xffff90000000a080 0041 00000000 0x0 0x0 0xffff90000000a100 0041 00000000 0x0 0x0 0xffff90000000a180 0041 00000000 0x0 0x0 0xffff90000000a200 0041 00000000 0x0 0x0 0xffff90000000a280 0041 00000000 0x0 0x0 0xffff90000000a300 0041 00000000 0x0 0x0 0xffff90000000a380 0041 00000000 0x0 0x0 0xffff90000000a400 0041 00000000 0x0 0x0 0xffff90000000a480 0041 00000000 0x0 0x0 0xffff90000000a500 0041 00000000 0x0 0x0 0xffff90000000a580 0041 00000000 0x0 0x0 0xffff90000000a600 0041 00000000 0x0 0x0 0xffff90000000a680 0041 00000000 0x0 0x0 0xffff90000000a700 0041 00000000 0x0 0x0 0xffff90000000a780 0041 00000000 0x0 0x0 0xffff90000000a800 0041 00000000 0x0 0x0 0xffff90000000a880 0041 00000000 0x0 0x0 0xffff90000000a900 0041 00000000 0x0 0x0 0xffff90000000a980 0041 00000000 0x0 0x0 0xffff90000000aa00 0041 00000000 0x0 0x0 0xffff90000000aa80 0041 00000000 0x0 0x0 0xffff90000000ab00 0041 00000000 0x0 0x0 0xffff90000000ab80 0041 00000000 0x0 0x0 0xffff90000000ac00 0041 00000000 0x0 0x0 0xffff90000000ac80 0041 00000000 0x0 0x0 0xffff90000000ad00 0041 00000000 0x0 0x0 0xffff90000000ad80 0041 00000000 0x0 0x0 0xffff90000000ae00 0041 00000000 0x0 0x0 0xffff90000000ae80 0041 00000000 0x0 0x0 0xffff90000000af00 0041 00000000 0x0 0x0 0xffff90000000af80 0041 00000000 0x0 0x0 0xffff90000000b000 0045 00000000 0x0 0x0 0xffff90000000b080 0041 00000000 0x0 0x0 0xffff90000000b100 0041 00000000 0x0 0x0 0xffff90000000b180 0041 00000000 0x0 0x0 0xffff90000000b200 0045 00000000 0x0 0x0 0xffff90000000b280 0045 00000000 0x0 0x0 0xffff90000000b300 0045 00000000 0x0 0x0 0xffff90000000b380 0045 00000000 0x0 0x0 0xffff90000000b400 0045 00000000 0x0 0x0 0xffff90000000b480 0045 00000000 0x0 0x0 0xffff90000000b500 0041 00000000 0x0 0x0 0xffff90000000b580 0041 00000000 0x0 0x0 0xffff90000000b600 0045 00000000 0x0 0x0 0xffff90000000b680 0045 00000000 0x0 0x0 0xffff90000000b700 0045 00000000 0x0 0x0 0xffff90000000b780 0045 00000000 0x0 0x0 0xffff90000000b800 0045 00000000 0x0 0x0 0xffff90000000b880 0045 00000000 0x0 0x0 0xffff90000000b900 0045 00000000 0x0 0x0 0xffff90000000b980 0045 00000000 0x0 0x0 0xffff90000000ba00 0045 00000000 0x0 0x0 0xffff90000000ba80 0045 00000000 0x0 0x0 0xffff90000000bb00 0045 00000000 0x0 0x0 0xffff90000000bb80 0045 00000000 0x0 0x0 0xffff90000000bc00 0045 00000000 0x0 0x0 0xffff90000000bc80 0045 00000000 0x0 0x0 0xffff90000000bd00 0045 00000000 0x0 0x0 0xffff90000000bd80 0045 00000000 0x0 0x0 0xffff90000000be00 0045 00000000 0x0 0x0 0xffff90000000be80 0045 00000000 0x0 0x0 0xffff90000000bf00 0045 00000000 0x0 0x0 0xffff90000000bf80 0045 00000000 0x0 0x0 0xffff90000000c000 0045 00000000 0x0 0x0 0xffff90000000c080 0045 00000000 0x0 0x0 0xffff90000000c100 0045 00000000 0x0 0x0 0xffff90000000c180 0045 00000000 0x0 0x0 0xffff90000000c200 0045 00000000 0x0 0x0 0xffff90000000c280 0045 00000000 0x0 0x0 0xffff90000000c300 0045 00000000 0x0 0x0 0xffff90000000c380 0045 00000000 0x0 0x0 0xffff90000000c400 0045 00000000 0x0 0x0 0xffff90000000c480 0045 00000000 0x0 0x0 0xffff90000000c500 0045 00000000 0x0 0x0 0xffff90000000c580 0045 00000000 0x0 0x0 0xffff90000000c600 0045 00000000 0x0 0x0 0xffff90000000c680 0045 00000000 0x0 0x0 0xffff90000000c700 0045 00000000 0x0 0x0 0xffff90000000c780 0045 00000000 0x0 0x0 0xffff90000000c800 0041 00000000 0x0 0x0 0xffff90000000c880 0045 00000000 0x0 0x0 0xffff90000000c900 0045 00000000 0x0 0x0 0xffff90000000c980 0045 00000000 0x0 0x0 0xffff90000000ca00 0041 00000000 0x0 0x0 0xffff90000000ca80 0045 00000000 0x0 0x0 0xffff90000000cb00 0045 00000000 0x0 0x0 0xffff90000000cb80 0045 00000000 0x0 0x0 0xffff90000000cc00 0041 00000000 0x0 0x0 0xffff90000000cc80 0041 00000000 0x0 0x0 0xffff90000000cd00 0045 00000000 0x0 0x0 0xffff90000000cd80 0045 00000000 0x0 0x0 0xffff90000000ce00 0041 00000000 0x0 0x0 0xffff90000000ce80 0041 00000000 0x0 0x0 0xffff90000000cf00 0041 00000000 0x0 0x0 0xffff90000000cf80 0041 00000000 0x0 0x0 0xffff90000000d000 0041 00000000 0x0 0x0 0xffff90000000d080 0041 00000000 0x0 0x0 0xffff90000000d100 0041 00000000 0x0 0x0 0xffff90000000d180 0041 00000000 0x0 0x0 0xffff90000000d200 0041 00000000 0x0 0x0 0xffff90000000d280 0041 00000000 0x0 0x0 0xffff90000000d300 0041 00000000 0x0 0x0 0xffff90000000d380 0041 00000000 0x0 0x0 0xffff90000000d400 0041 00000000 0x0 0x0 0xffff90000000d480 0041 00000000 0x0 0x0 0xffff90000000d500 0041 00000000 0x0 0x0 0xffff90000000d580 0041 00000000 0x0 0x0 0xffff90000000d600 0041 00000000 0x0 0x0 0xffff90000000d680 0041 00000000 0x0 0x0 0xffff90000000d700 0041 00000000 0x0 0x0 0xffff90000000d780 0041 00000000 0x0 0x0 0xffff90000000d800 0045 00000000 0x0 0x0 0xffff90000000d880 0041 00000000 0x0 0x0 0xffff90000000d900 0041 00000000 0x0 0x0 0xffff90000000d980 0041 00000000 0x0 0x0 0xffff90000000da00 0041 00000000 0x0 0x0 0xffff90000000da80 0045 00000000 0x0 0x0 0xffff90000000db00 0045 00000000 0x0 0x0 0xffff90000000db80 0041 00000000 0x0 0x0 0xffff90000000dc00 0045 00000000 0x0 0x0 0xffff90000000dc80 0045 00000000 0x0 0x0 0xffff90000000dd00 0041 00000000 0x0 0x0 0xffff90000000dd80 0041 00000000 0x0 0x0 0xffff90000000de00 0045 00000000 0x0 0x0 0xffff90000000de80 0041 00000000 0x0 0x0 0xffff90000000df00 0041 00000000 0x0 0x0 0xffff90000000df80 0045 00000000 0x0 0x0 0xffff90000000e000 0045 00000000 0x0 0x0 0xffff90000000e080 0045 00000000 0x0 0x0 0xffff90000000e100 0041 00000000 0x0 0x0 0xffff90000000e180 0041 00000000 0x0 0x0 0xffff90000000e200 0041 00000000 0x0 0x0 0xffff90000000e280 0041 00000000 0x0 0x0 0xffff90000000e300 0045 00000000 0x0 0x0 0xffff90000000e380 0045 00000000 0x0 0x0 0xffff90000000e400 0041 00000000 0x0 0x0 0xffff90000000e480 0041 00000000 0x0 0x0 0xffff90000000e500 0045 00000000 0x0 0x0 0xffff90000000e580 0045 00000000 0x0 0x0 0xffff90000000e600 0041 00000000 0x0 0x0 0xffff90000000e680 0045 00000000 0x0 0x0 0xffff90000000e700 0045 00000000 0x0 0x0 0xffff90000000e780 0045 00000000 0x0 0x0 0xffff90000000e800 0041 00000000 0x0 0x0 0xffff90000000e880 0045 00000000 0x0 0x0 0xffff90000000e900 0041 00000000 0x0 0x0 0xffff90000000e980 0041 00000000 0x0 0x0 0xffff90000000ea00 0041 00000000 0x0 0x0 0xffff90000000ea80 0041 00000000 0x0 0x0 0xffff90000000eb00 0045 00000000 0x0 0x0 0xffff90000000eb80 0041 00000000 0x0 0x0 0xffff90000000ec00 0045 00000000 0x0 0x0 0xffff90000000ec80 0041 00000000 0x0 0x0 0xffff90000000ed00 0041 00000000 0x0 0x0 0xffff90000000ed80 0041 00000000 0x0 0x0 0xffff90000000ee00 0041 00000000 0x0 0x0 0xffff90000000ee80 0045 00000000 0x0 0x0 0xffff90000000ef00 0041 00000000 0x0 0x0 0xffff90000000ef80 0041 00000000 0x0 0x0 0xffff90000000f000 0041 00000000 0x0 0x0 0xffff90000000f080 0041 00000000 0x0 0x0 0xffff90000000f100 0041 00000000 0x0 0x0 0xffff90000000f180 0041 00000000 0x0 0x0 0xffff90000000f200 0041 00000000 0x0 0x0 0xffff90000000f280 0041 00000000 0x0 0x0 0xffff90000000f300 0041 00000000 0x0 0x0 0xffff90000000f380 0045 00000000 0x0 0x0 0xffff90000000f400 0045 00000000 0x0 0x0 0xffff90000000f480 0041 00000000 0x0 0x0 0xffff90000000f500 0041 00000000 0x0 0x0 0xffff90000000f580 0041 00000000 0x0 0x0 0xffff90000000f600 0045 00000000 0x0 0x0 0xffff90000000f680 0041 00000000 0x0 0x0 0xffff90000000f700 0041 00000000 0x0 0x0 0xffff90000000f780 0041 00000000 0x0 0x0 0xffff90000000f800 0041 00000000 0x0 0x0 0xffff90000000f880 0045 00000000 0x0 0x0 0xffff90000000f900 0045 00000000 0x0 0x0 0xffff90000000f980 0041 00000000 0x0 0x0 0xffff90000000fa00 0041 00000000 0x0 0x0 0xffff90000000fa80 0045 00000000 0x0 0x0 0xffff90000000fb00 0041 00000000 0x0 0x0 0xffff90000000fb80 0041 00000000 0x0 0x0 0xffff90000000fc00 0041 00000000 0x0 0x0 0xffff90000000fc80 0041 00000000 0x0 0x0 0xffff90000000fd00 0041 00000000 0x0 0x0 0xffff90000000fd80 0045 00000000 0x0 0x0 0xffff90000000fe00 0041 00000000 0x0 0x0 0xffff90000000fe80 0041 00000000 0x0 0x0 0xffff90000000ff00 0041 00000000 0x0 0x0 0xffff90000000ff80 0041 00000000 0x0 0x0 0xffff900000010000 0041 00000000 0x0 0x0 0xffff900000010080 0045 00000000 0x0 0x0 0xffff900000010100 0045 00000000 0x0 0x0 0xffff900000010180 0041 00000000 0x0 0x0 0xffff900000010200 0045 00000000 0x0 0x0 0xffff900000010280 0041 00000000 0x0 0x0 0xffff900000010300 0041 00000000 0x0 0x0 0xffff900000010380 0041 00000000 0x0 0x0 0xffff900000010400 0041 00000000 0x0 0x0 0xffff900000010480 0041 00000000 0x0 0x0 0xffff900000010500 0041 00000000 0x0 0x0 0xffff900000010580 0041 00000000 0x0 0x0 0xffff900000010600 0041 00000000 0x0 0x0 0xffff900000010680 0041 00000000 0x0 0x0 0xffff900000010700 0041 00000000 0x0 0x0 0xffff900000010780 0041 00000000 0x0 0x0 0xffff900000010800 0041 00000000 0x0 0x0 0xffff900000010880 0041 00000000 0x0 0x0 0xffff900000010900 0045 00000000 0x0 0x0 0xffff900000010980 0045 00000000 0x0 0x0 0xffff900000010a00 0045 00000000 0x0 0x0 0xffff900000010a80 0045 00000000 0x0 0x0 0xffff900000010b00 0045 00000000 0x0 0x0 0xffff900000010b80 0041 00000000 0x0 0x0 0xffff900000010c00 0041 00000000 0x0 0x0 0xffff900000010c80 0041 00000000 0x0 0x0 0xffff900000010d00 0041 00000000 0x0 0x0 0xffff900000010d80 0041 00000000 0x0 0x0 0xffff900000010e00 0041 00000000 0x0 0x0 0xffff900000010e80 0041 00000000 0x0 0x0 0xffff900000010f00 0041 00000000 0x0 0x0 0xffff900000010f80 0045 00000000 0x0 0x0 0xffff900000011000 0041 00000000 0x0 0x0 0xffff900000011080 0041 00000000 0x0 0x0 0xffff900000011100 0041 00000000 0x0 0x0 0xffff900000011180 0041 00000000 0x0 0x0 0xffff900000011200 0041 00000000 0x0 0x0 0xffff900000011280 0045 00000000 0x0 0x0 0xffff900000011300 0041 00000000 0x0 0x0 0xffff900000011380 0041 00000000 0x0 0x0 0xffff900000011400 0041 00000000 0x0 0x0 0xffff900000011480 0041 00000000 0x0 0x0 0xffff900000011500 0041 00000000 0x0 0x0 0xffff900000011580 0041 00000000 0x0 0x0 0xffff900000011600 0041 00000000 0x0 0x0 0xffff900000011680 0041 00000000 0x0 0x0 0xffff900000011700 0041 00000000 0x0 0x0 0xffff900000011780 0041 00000000 0x0 0x0 0xffff900000011800 0041 00000000 0x0 0x0 0xffff900000011880 0041 00000000 0x0 0x0 0xffff900000011900 0041 00000000 0x0 0x0 0xffff900000011980 0041 00000000 0x0 0x0 0xffff900000011a00 0045 00000000 0x0 0x0 0xffff900000011a80 0041 00000000 0x0 0x0 0xffff900000011b00 0041 00000000 0x0 0x0 0xffff900000011b80 0041 00000000 0x0 0x0 0xffff900000011c00 0045 00000000 0x0 0x0 0xffff900000011c80 0045 00000000 0x0 0x0 0xffff900000011d00 0041 00000000 0x0 0x0 0xffff900000011d80 0041 00000000 0x0 0x0 0xffff900000011e00 0041 00000000 0x0 0x0 0xffff900000011e80 0041 00000000 0x0 0x0 0xffff900000011f00 0045 00000000 0x0 0x0 0xffff900000011f80 0045 00000000 0x0 0x0 0xffff900000012000 0041 00000000 0x0 0x0 0xffff900000012080 0041 00000000 0x0 0x0 0xffff900000012100 0041 00000000 0x0 0x0 0xffff900000012180 0045 00000000 0x0 0x0 0xffff900000012200 0041 00000000 0x0 0x0 0xffff900000012280 0041 00000000 0x0 0x0 0xffff900000012300 0041 00000000 0x0 0x0 0xffff900000012380 0041 00000000 0x0 0x0 0xffff900000012400 0041 00000000 0x0 0x0 0xffff900000012480 0041 00000000 0x0 0x0 0xffff900000012500 0045 00000000 0x0 0x0 0xffff900000012580 0041 00000000 0x0 0x0 0xffff900000012600 0041 00000000 0x0 0x0 0xffff900000012680 0045 00000000 0x0 0x0 0xffff900000012700 0001 00000000 0x0 0x0 0xffff900000012780 0001 00000000 0x0 0x0 0xffff900000012800 0001 00000000 0x0 0x0 0xffff900000012880 0001 00000000 0x0 0x0 0xffff900000012900 0001 00000000 0x0 0x0 0xffff900000012980 0001 00000000 0x0 0x0 0xffff900000012a00 0001 00000000 0x0 0x0 0xffff900000012a80 0001 00000000 0x0 0x0 0xffff900000012b00 0001 00000000 0x0 0x0 0xffff900000012b80 0001 00000000 0x0 0x0 0xffff900000012c00 0001 00000000 0x0 0x0 0xffff900000012c80 0001 00000000 0x0 0x0 0xffff900000012d00 0001 00000000 0x0 0x0 0xffff900000012d80 0001 00000000 0x0 0x0 0xffff900000012e00 0001 00000000 0x0 0x0 0xffff900000012e80 0001 00000000 0x0 0x0 0xffff900000012f00 0001 00000000 0x0 0x0 0xffff900000012f80 0001 00000000 0x0 0x0 0xffff900000013000 0001 00000000 0x0 0x0 0xffff900000013080 0001 00000000 0x0 0x0 0xffff900000013100 0001 00000000 0x0 0x0 0xffff900000013180 0001 00000000 0x0 0x0 0xffff900000013200 0001 00000000 0x0 0x0 0xffff900000013280 0001 00000000 0x0 0x0 0xffff900000013300 0001 00000000 0x0 0x0 0xffff900000013380 0001 00000000 0x0 0x0 0xffff900000013400 0001 00000000 0x0 0x0 0xffff900000013480 0001 00000000 0x0 0x0 0xffff900000013500 0001 00000000 0x0 0x0 0xffff900000013580 0001 00000000 0x0 0x0 0xffff900000013600 0001 00000000 0x0 0x0 0xffff900000013680 0001 00000000 0x0 0x0 0xffff900000013700 0001 00000000 0x0 0x0 0xffff900000013780 0001 00000000 0x0 0x0 0xffff900000013800 0001 00000000 0x0 0x0 0xffff900000013880 0001 00000000 0x0 0x0 0xffff900000013900 0001 00000000 0x0 0x0 0xffff900000013980 0001 00000000 0x0 0x0 0xffff900000013a00 0001 00000000 0x0 0x0 0xffff900000013a80 0001 00000000 0x0 0x0 0xffff900000013b00 0001 00000000 0x0 0x0 0xffff900000013b80 0001 00000000 0x0 0x0 0xffff900000013c00 0001 00000000 0x0 0x0 0xffff900000013c80 0001 00000000 0x0 0x0 0xffff900000013d00 0001 00000000 0x0 0x0 0xffff900000013d80 0001 00000000 0x0 0x0 0xffff900000013e00 0001 00000000 0x0 0x0 0xffff900000013e80 0001 00000000 0x0 0x0 0xffff900000013f00 0001 00000000 0x0 0x0 0xffff900000013f80 0001 00000000 0x0 0x0 0xffff900000014000 0001 00000000 0x0 0x0 0xffff900000014080 0001 00000000 0x0 0x0 0xffff900000014100 0001 00000000 0x0 0x0 0xffff900000014180 0001 00000000 0x0 0x0 0xffff900000014200 0041 00000000 0x0 0x0 0xffff900000014280 0041 00000000 0x0 0x0 0xffff900000014300 0041 00000000 0x0 0x0 0xffff900000014380 0041 00000000 0x0 0x0 0xffff900000014400 0041 00000000 0x0 0x0 0xffff900000014480 0041 00000000 0x0 0x0 0xffff900000014500 0041 00000000 0x0 0x0 0xffff900000014580 0041 00000000 0x0 0x0 0xffff900000014600 0041 00000000 0x0 0x0 0xffff900000014680 0041 00000000 0x0 0x0 0xffff900000014700 0041 00000000 0x0 0x0 0xffff900000014780 0041 00000000 0x0 0x0 0xffff900000014800 0041 00000000 0x0 0x0 0xffff900000014880 0041 00000000 0x0 0x0 0xffff900000014900 0041 00000000 0x0 0x0 0xffff900000014980 0041 00000000 0x0 0x0 0xffff900000014a00 0041 00000000 0x0 0x0 0xffff900000014a80 0041 00000000 0x0 0x0 0xffff900000014b00 0041 00000000 0x0 0x0 0xffff900000014b80 0041 00000000 0x0 0x0 0xffff900000014c00 0041 00000000 0x0 0x0 0xffff900000014c80 0041 00000000 0x0 0x0 0xffff900000014d00 0041 00000000 0x0 0x0 0xffff900000014d80 0041 00000000 0x0 0x0 0xffff900000014e00 0041 00000000 0x0 0x0 0xffff900000014e80 0041 00000000 0x0 0x0 0xffff900000014f00 0041 00000000 0x0 0x0 0xffff900000014f80 0041 00000000 0x0 0x0 0xffff900000015000 0041 00000000 0x0 0x0 0xffff900000015080 0041 00000000 0x0 0x0 0xffff900000015100 0041 00000000 0x0 0x0 0xffff900000015180 0041 00000000 0x0 0x0 0xffff900000015200 0041 00000000 0x0 0x0 0xffff900000015280 0041 00000000 0x0 0x0 0xffff900000015300 0041 00000000 0x0 0x0 0xffff900000015380 0041 00000000 0x0 0x0 0xffff900000015400 0041 00000000 0x0 0x0 0xffff900000015480 0041 00000000 0x0 0x0 0xffff900000015500 0041 00000000 0x0 0x0 0xffff900000015580 0041 00000000 0x0 0x0 0xffff900000015600 0041 00000000 0x0 0x0 0xffff900000015680 0041 00000000 0x0 0x0 0xffff900000015700 0041 00000000 0x0 0x0 0xffff900000015780 0041 00000000 0x0 0x0 0xffff900000015800 0041 00000000 0x0 0x0 0xffff900000015880 0041 00000000 0x0 0x0 0xffff900000015900 0041 00000000 0x0 0x0 0xffff900000015980 0001 00000000 0x0 0x0 0xffff900000015a00 0001 00000000 0x0 0x0 0xffff900000015a80 0001 00000000 0x0 0x0 0xffff900000015b00 0001 00000000 0x0 0x0 0xffff900000015b80 0001 00000000 0x0 0x0 0xffff900000015c00 0001 00000000 0x0 0x0 0xffff900000015c80 0001 00000000 0x0 0x0 0xffff900000015d00 0001 00000000 0x0 0x0 0xffff900000015d80 0001 00000000 0x0 0x0 0xffff900000015e00 0001 00000000 0x0 0x0 0xffff900000015e80 0001 00000000 0x0 0x0 0xffff900000015f00 0001 00000000 0x0 0x0 0xffff900000015f80 0001 00000000 0x0 0x0 0xffff900000016000 0001 00000000 0x0 0x0 0xffff900000016080 0001 00000000 0x0 0x0 0xffff900000016100 0001 00000000 0x0 0x0 0xffff900000016180 0001 00000000 0x0 0x0 0xffff900000016200 0001 00000000 0x0 0x0 0xffff900000016280 0001 00000000 0x0 0x0 0xffff900000016300 0001 00000000 0x0 0x0 0xffff900000016380 0001 00000000 0x0 0x0 0xffff900000016400 0001 00000000 0x0 0x0 0xffff900000016480 0001 00000000 0x0 0x0 0xffff900000016500 0001 00000000 0x0 0x0 0xffff900000016580 0001 00000000 0x0 0x0 0xffff900000016600 0001 00000000 0x0 0x0 0xffff900000016680 0001 00000000 0x0 0x0 0xffff900000016700 0001 00000000 0x0 0x0 0xffff900000016780 0001 00000000 0x0 0x0 0xffff900000016800 0001 00000000 0x0 0x0 0xffff900000016880 0001 00000000 0x0 0x0 0xffff900000016900 0001 00000000 0x0 0x0 0xffff900000016980 0001 00000000 0x0 0x0 0xffff900000016a00 0001 00000000 0x0 0x0 0xffff900000016a80 0001 00000000 0x0 0x0 0xffff900000016b00 0001 00000000 0x0 0x0 0xffff900000016b80 0001 00000000 0x0 0x0 0xffff900000016c00 0001 00000000 0x0 0x0 0xffff900000016c80 0001 00000000 0x0 0x0 0xffff900000016d00 0001 00000000 0x0 0x0 0xffff900000016d80 0001 00000000 0x0 0x0 0xffff900000016e00 0001 00000000 0x0 0x0 0xffff900000016e80 0001 00000000 0x0 0x0 0xffff900000016f00 0001 00000000 0x0 0x0 0xffff900000016f80 0001 00000000 0x0 0x0 0xffff900000017000 0001 00000000 0x0 0x0 0xffff900000017080 0001 00000000 0x0 0x0 0xffff900000017100 0001 00000000 0x0 0x0 0xffff900000017180 0001 00000000 0x0 0x0 0xffff900000017200 0001 00000000 0x0 0x0 0xffff900000017280 0001 00000000 0x0 0x0 0xffff900000017300 0001 00000000 0x0 0x0 0xffff900000017380 0001 00000000 0x0 0x0 0xffff900000017400 0001 00000000 0x0 0x0 0xffff900000017480 0041 00000000 0x0 0x0 0xffff900000017500 0041 00000000 0x0 0x0 0xffff900000017580 0041 00000000 0x0 0x0 0xffff900000017600 0041 00000000 0x0 0x0 0xffff900000017680 0041 00000000 0x0 0x0 0xffff900000017700 0041 00000000 0x0 0x0 0xffff900000017780 0041 00000000 0x0 0x0 0xffff900000017800 0041 00000000 0x0 0x0 0xffff900000017880 0041 00000000 0x0 0x0 0xffff900000017900 0041 00000000 0x0 0x0 0xffff900000017980 0041 00000000 0x0 0x0 0xffff900000017a00 0041 00000000 0x0 0x0 0xffff900000017a80 0041 00000000 0x0 0x0 0xffff900000017b00 0041 00000000 0x0 0x0 0xffff900000017b80 0041 00000000 0x0 0x0 0xffff900000017c00 0041 00000000 0x0 0x0 0xffff900000017c80 0041 00000000 0x0 0x0 0xffff900000017d00 0041 00000000 0x0 0x0 0xffff900000017d80 0041 00000000 0x0 0x0 0xffff900000017e00 0041 00000000 0x0 0x0 0xffff900000017e80 0041 00000000 0x0 0x0 0xffff900000017f00 0041 00000000 0x0 0x0 0xffff900000017f80 0041 00000000 0x0 0x0 0xffff900000018000 0041 00000000 0x0 0x0 0xffff900000018080 0041 00000000 0x0 0x0 0xffff900000018100 0041 00000000 0x0 0x0 0xffff900000018180 0041 00000000 0x0 0x0 0xffff900000018200 0041 00000000 0x0 0x0 0xffff900000018280 0041 00000000 0x0 0x0 0xffff900000018300 0041 00000000 0x0 0x0 0xffff900000018380 0041 00000000 0x0 0x0 0xffff900000018400 0041 00000000 0x0 0x0 0xffff900000018480 0041 00000000 0x0 0x0 0xffff900000018500 0041 00000000 0x0 0x0 0xffff900000018580 0041 00000000 0x0 0x0 0xffff900000018600 0041 00000000 0x0 0x0 0xffff900000018680 0041 00000000 0x0 0x0 0xffff900000018700 0041 00000000 0x0 0x0 0xffff900000018780 0041 00000000 0x0 0x0 0xffff900000018800 0041 00000000 0x0 0x0 0xffff900000018880 0041 00000000 0x0 0x0 0xffff900000018900 0041 00000000 0x0 0x0 0xffff900000018980 0041 00000000 0x0 0x0 0xffff900000018a00 0041 00000000 0x0 0x0 0xffff900000018a80 0041 00000000 0x0 0x0 0xffff900000018b00 0001 00000000 0x0 0x0 0xffff900000018b80 0001 00000000 0x0 0x0 0xffff900000018c00 0001 00000000 0x0 0x0 0xffff900000018c80 0001 00000000 0x0 0x0 0xffff900000018d00 0001 00000000 0x0 0x0 0xffff900000018d80 0001 00000000 0x0 0x0 0xffff900000018e00 0001 00000000 0x0 0x0 0xffff900000018e80 0001 00000000 0x0 0x0 0xffff900000018f00 0001 00000000 0x0 0x0 0xffff900000018f80 0001 00000000 0x0 0x0 0xffff900000019000 0001 00000000 0x0 0x0 0xffff900000019080 0001 00000000 0x0 0x0 0xffff900000019100 0001 00000000 0x0 0x0 0xffff900000019180 0001 00000000 0x0 0x0 0xffff900000019200 0001 00000000 0x0 0x0 0xffff900000019280 0001 00000000 0x0 0x0 0xffff900000019300 0001 00000000 0x0 0x0 0xffff900000019380 0001 00000000 0x0 0x0 0xffff900000019400 0001 00000000 0x0 0x0 0xffff900000019480 0001 00000000 0x0 0x0 0xffff900000019500 0001 00000000 0x0 0x0 0xffff900000019580 0001 00000000 0x0 0x0 0xffff900000019600 0001 00000000 0x0 0x0 0xffff900000019680 0001 00000000 0x0 0x0 0xffff900000019700 0001 00000000 0x0 0x0 0xffff900000019780 0001 00000000 0x0 0x0 0xffff900000019800 0001 00000000 0x0 0x0 0xffff900000019880 0001 00000000 0x0 0x0 0xffff900000019900 0001 00000000 0x0 0x0 0xffff900000019980 0001 00000000 0x0 0x0 0xffff900000019a00 0001 00000000 0x0 0x0 0xffff900000019a80 0001 00000000 0x0 0x0 0xffff900000019b00 0001 00000000 0x0 0x0 0xffff900000019b80 0001 00000000 0x0 0x0 0xffff900000019c00 0001 00000000 0x0 0x0 0xffff900000019c80 0001 00000000 0x0 0x0 0xffff900000019d00 0001 00000000 0x0 0x0 0xffff900000019d80 0001 00000000 0x0 0x0 0xffff900000019e00 0001 00000000 0x0 0x0 0xffff900000019e80 0001 00000000 0x0 0x0 0xffff900000019f00 0001 00000000 0x0 0x0 0xffff900000019f80 0001 00000000 0x0 0x0 0xffff90000001a000 0001 00000000 0x0 0x0 0xffff90000001a080 0001 00000000 0x0 0x0 0xffff90000001a100 0001 00000000 0x0 0x0 0xffff90000001a180 0001 00000000 0x0 0x0 0xffff90000001a200 0001 00000000 0x0 0x0 0xffff90000001a280 0001 00000000 0x0 0x0 0xffff90000001a300 0001 00000000 0x0 0x0 0xffff90000001a380 0001 00000000 0x0 0x0 0xffff90000001a400 0001 00000000 0x0 0x0 0xffff90000001a480 0001 00000000 0x0 0x0 0xffff90000001a500 0001 00000000 0x0 0x0 0xffff90000001a580 0001 00000000 0x0 0x0 0xffff90000001a600 0041 00000000 0x0 0x0 0xffff90000001a680 0041 00000000 0x0 0x0 0xffff90000001a700 0041 00000000 0x0 0x0 0xffff90000001a780 0041 00000000 0x0 0x0 0xffff90000001a800 0041 00000000 0x0 0x0 0xffff90000001a880 0041 00000000 0x0 0x0 0xffff90000001a900 0041 00000000 0x0 0x0 0xffff90000001a980 0041 00000000 0x0 0x0 0xffff90000001aa00 0041 00000000 0x0 0x0 0xffff90000001aa80 0041 00000000 0x0 0x0 0xffff90000001ab00 0041 00000000 0x0 0x0 0xffff90000001ab80 0041 00000000 0x0 0x0 0xffff90000001ac00 0041 00000000 0x0 0x0 0xffff90000001ac80 0041 00000000 0x0 0x0 0xffff90000001ad00 0041 00000000 0x0 0x0 0xffff90000001ad80 0041 00000000 0x0 0x0 0xffff90000001ae00 0041 00000000 0x0 0x0 0xffff90000001ae80 0041 00000000 0x0 0x0 0xffff90000001af00 0041 00000000 0x0 0x0 0xffff90000001af80 0041 00000000 0x0 0x0 0xffff90000001b000 0041 00000000 0x0 0x0 0xffff90000001b080 0041 00000000 0x0 0x0 0xffff90000001b100 0041 00000000 0x0 0x0 0xffff90000001b180 0041 00000000 0x0 0x0 0xffff90000001b200 0045 00000000 0x0 0x0 0xffff90000001b280 0041 00000000 0x0 0x0 0xffff90000001b300 0041 00000000 0x0 0x0 0xffff90000001b380 0041 00000000 0x0 0x0 0xffff90000001b400 0041 00000000 0x0 0x0 0xffff90000001b480 0041 00000000 0x0 0x0 0xffff90000001b500 0041 00000000 0x0 0x0 0xffff90000001b580 0041 00000000 0x0 0x0 0xffff90000001b600 0045 00000000 0x0 0x0 0xffff90000001b680 0041 00000000 0x0 0x0 0xffff90000001b700 0041 00000000 0x0 0x0 0xffff90000001b780 0041 00000000 0x0 0x0 0xffff90000001b800 0041 00000000 0x0 0x0 0xffff90000001b880 0041 00000000 0x0 0x0 0xffff90000001b900 0041 00000000 0x0 0x0 0xffff90000001b980 0041 00000000 0x0 0x0 0xffff90000001ba00 0045 00000000 0x0 0x0 0xffff90000001ba80 0041 00000000 0x0 0x0 0xffff90000001bb00 0041 00000000 0x0 0x0 0xffff90000001bb80 0041 00000000 0x0 0x0 0xffff90000001bc00 0045 00000000 0x0 0x0 0xffff90000001bc80 0045 00000000 0x0 0x0 0xffff90000001bd00 0041 00000000 0x0 0x0 0xffff90000001bd80 0041 00000000 0x0 0x0 0xffff90000001be00 0001 00000000 0x0 0x0 0xffff90000001be80 0001 00000000 0x0 0x0 0xffff90000001bf00 0001 00000000 0x0 0x0 0xffff90000001bf80 0001 00000000 0x0 0x0 0xffff90000001c000 0001 00000000 0x0 0x0 0xffff90000001c080 0001 00000000 0x0 0x0 0xffff90000001c100 0001 00000000 0x0 0x0 0xffff90000001c180 0001 00000000 0x0 0x0 0xffff90000001c200 0001 00000000 0x0 0x0 0xffff90000001c280 0001 00000000 0x0 0x0 0xffff90000001c300 0001 00000000 0x0 0x0 0xffff90000001c380 0001 00000000 0x0 0x0 0xffff90000001c400 0001 00000000 0x0 0x0 0xffff90000001c480 0001 00000000 0x0 0x0 0xffff90000001c500 0001 00000000 0x0 0x0 0xffff90000001c580 0001 00000000 0x0 0x0 0xffff90000001c600 0001 00000000 0x0 0x0 0xffff90000001c680 0001 00000000 0x0 0x0 0xffff90000001c700 0001 00000000 0x0 0x0 0xffff90000001c780 0001 00000000 0x0 0x0 0xffff90000001c800 0001 00000000 0x0 0x0 0xffff90000001c880 0001 00000000 0x0 0x0 0xffff90000001c900 0001 00000000 0x0 0x0 0xffff90000001c980 0001 00000000 0x0 0x0 0xffff90000001ca00 0001 00000000 0x0 0x0 0xffff90000001ca80 0001 00000000 0x0 0x0 0xffff90000001cb00 0001 00000000 0x0 0x0 0xffff90000001cb80 0001 00000000 0x0 0x0 0xffff90000001cc00 0001 00000000 0x0 0x0 0xffff90000001cc80 0001 00000000 0x0 0x0 0xffff90000001cd00 0001 00000000 0x0 0x0 0xffff90000001cd80 0001 00000000 0x0 0x0 0xffff90000001ce00 0001 00000000 0x0 0x0 0xffff90000001ce80 0001 00000000 0x0 0x0 0xffff90000001cf00 0001 00000000 0x0 0x0 0xffff90000001cf80 0001 00000000 0x0 0x0 0xffff90000001d000 0001 00000000 0x0 0x0 0xffff90000001d080 0001 00000000 0x0 0x0 0xffff90000001d100 0001 00000000 0x0 0x0 0xffff90000001d180 0001 00000000 0x0 0x0 0xffff90000001d200 0001 00000000 0x0 0x0 0xffff90000001d280 0001 00000000 0x0 0x0 0xffff90000001d300 0001 00000000 0x0 0x0 0xffff90000001d380 0001 00000000 0x0 0x0 0xffff90000001d400 0001 00000000 0x0 0x0 0xffff90000001d480 0001 00000000 0x0 0x0 0xffff90000001d500 0001 00000000 0x0 0x0 0xffff90000001d580 0001 00000000 0x0 0x0 0xffff90000001d600 0001 00000000 0x0 0x0 0xffff90000001d680 0001 00000000 0x0 0x0 0xffff90000001d700 0001 00000000 0x0 0x0 0xffff90000001d780 0001 00000000 0x0 0x0 0xffff90000001d800 0001 00000000 0x0 0x0 0xffff90000001d880 0001 00000000 0x0 0x0 0xffff90000001d900 0001 00000000 0x0 0x0 0xffff90000001d980 0001 00000000 0x0 0x0 0xffff90000001da00 0001 00000000 0x0 0x0 0xffff90000001da80 0001 00000000 0x0 0x0 0xffff90000001db00 0001 00000000 0x0 0x0 0xffff90000001db80 0001 00000000 0x0 0x0 0xffff90000001dc00 0001 00000000 0x0 0x0 0xffff90000001dc80 0001 00000000 0x0 0x0 0xffff90000001dd00 0001 00000000 0x0 0x0 0xffff90000001dd80 0001 00000000 0x0 0x0 0xffff90000001de00 0001 00000000 0x0 0x0 0xffff90000001de80 0001 00000000 0x0 0x0 0xffff90000001df00 0001 00000000 0x0 0x0 0xffff90000001df80 0001 00000000 0x0 0x0 0xffff90000001e000 0001 00000000 0x0 0x0 0xffff90000001e080 0001 00000000 0x0 0x0 0xffff90000001e100 0001 00000000 0x0 0x0 0xffff90000001e180 0001 00000000 0x0 0x0 0xffff90000001e200 0001 00000000 0x0 0x0 0xffff90000001e280 0001 00000000 0x0 0x0 0xffff90000001e300 0001 00000000 0x0 0x0 0xffff90000001e380 0001 00000000 0x0 0x0 0xffff90000001e400 0001 00000000 0x0 0x0 0xffff90000001e480 0001 00000000 0x0 0x0 0xffff90000001e500 0001 00000000 0x0 0x0 0xffff90000001e580 0001 00000000 0x0 0x0 0xffff90000001e600 0001 00000000 0x0 0x0 0xffff90000001e680 0001 00000000 0x0 0x0 0xffff90000001e700 0001 00000000 0x0 0x0 0xffff90000001e780 0001 00000000 0x0 0x0 0xffff90000001e800 0001 00000000 0x0 0x0 0xffff90000001e880 0001 00000000 0x0 0x0 0xffff90000001e900 0001 00000000 0x0 0x0 0xffff90000001e980 0001 00000000 0x0 0x0 0xffff90000001ea00 0001 00000000 0x0 0x0 0xffff90000001ea80 0001 00000000 0x0 0x0 0xffff90000001eb00 0001 00000000 0x0 0x0 0xffff90000001eb80 0001 00000000 0x0 0x0 0xffff90000001ec00 0001 00000000 0x0 0x0 0xffff90000001ec80 0001 00000000 0x0 0x0 0xffff90000001ed00 0001 00000000 0x0 0x0 0xffff90000001ed80 0001 00000000 0x0 0x0 0xffff90000001ee00 0001 00000000 0x0 0x0 0xffff90000001ee80 0001 00000000 0x0 0x0 0xffff90000001ef00 0001 00000000 0x0 0x0 0xffff90000001ef80 0001 00000000 0x0 0x0 0xffff90000001f000 0001 00000000 0x0 0x0 0xffff90000001f080 0001 00000000 0x0 0x0 0xffff90000001f100 0001 00000000 0x0 0x0 0xffff90000001f180 0001 00000000 0x0 0x0 0xffff90000001f200 0001 00000000 0x0 0x0 0xffff90000001f280 0001 00000000 0x0 0x0 0xffff90000001f300 0001 00000000 0x0 0x0 0xffff90000001f380 0001 00000000 0x0 0x0 0xffff90000001f400 0001 00000000 0x0 0x0 0xffff90000001f480 0001 00000000 0x0 0x0 0xffff90000001f500 0001 00000000 0x0 0x0 0xffff90000001f580 0001 00000000 0x0 0x0 0xffff90000001f600 0001 00000000 0x0 0x0 0xffff90000001f680 0001 00000000 0x0 0x0 0xffff90000001f700 0001 00000000 0x0 0x0 0xffff90000001f780 0001 00000000 0x0 0x0 0xffff90000001f800 0001 00000000 0x0 0x0 0xffff90000001f880 0001 00000000 0x0 0x0 0xffff90000001f900 0001 00000000 0x0 0x0 0xffff90000001f980 0001 00000000 0x0 0x0 0xffff90000001fa00 0001 00000000 0x0 0x0 0xffff90000001fa80 0001 00000000 0x0 0x0 0xffff90000001fb00 0001 00000000 0x0 0x0 0xffff90000001fb80 0001 00000000 0x0 0x0 0xffff90000001fc00 0001 00000000 0x0 0x0 0xffff90000001fc80 0001 00000000 0x0 0x0 0xffff90000001fd00 0001 00000000 0x0 0x0 0xffff90000001fd80 0001 00000000 0x0 0x0 0xffff90000001fe00 0001 00000000 0x0 0x0 0xffff90000001fe80 0001 00000000 0x0 0x0 0xffff90000001ff00 0001 00000000 0x0 0x0 0xffff90000001ff80 0001 00000000 0x0 0x0 0xffff900000020000 0001 00000000 0x0 0x0 0xffff900000020080 0001 00000000 0x0 0x0 0xffff900000020100 0001 00000000 0x0 0x0 0xffff900000020180 0001 00000000 0x0 0x0 0xffff900000020200 0001 00000000 0x0 0x0 0xffff900000020280 0001 00000000 0x0 0x0 0xffff900000020300 0001 00000000 0x0 0x0 0xffff900000020380 0001 00000000 0x0 0x0 0xffff900000020400 0001 00000000 0x0 0x0 0xffff900000020480 0001 00000000 0x0 0x0 0xffff900000020500 0001 00000000 0x0 0x0 0xffff900000020580 0001 00000000 0x0 0x0 0xffff900000020600 0001 00000000 0x0 0x0 0xffff900000020680 0001 00000000 0x0 0x0 0xffff900000020700 0001 00000000 0x0 0x0 0xffff900000020780 0001 00000000 0x0 0x0 0xffff900000020800 0001 00000000 0x0 0x0 0xffff900000020880 0001 00000000 0x0 0x0 0xffff900000020900 0001 00000000 0x0 0x0 0xffff900000020980 0001 00000000 0x0 0x0 0xffff900000020a00 0001 00000000 0x0 0x0 0xffff900000020a80 0001 00000000 0x0 0x0 0xffff900000020b00 0001 00000000 0x0 0x0 0xffff900000020b80 0001 00000000 0x0 0x0 0xffff900000020c00 0001 00000000 0x0 0x0 0xffff900000020c80 0001 00000000 0x0 0x0 0xffff900000020d00 0001 00000000 0x0 0x0 0xffff900000020d80 0001 00000000 0x0 0x0 0xffff900000020e00 0001 00000000 0x0 0x0 0xffff900000020e80 0001 00000000 0x0 0x0 0xffff900000020f00 0001 00000000 0x0 0x0 0xffff900000020f80 0001 00000000 0x0 0x0 0xffff900000021000 0001 00000000 0x0 0x0 0xffff900000021080 0001 00000000 0x0 0x0 0xffff900000021100 0001 00000000 0x0 0x0 0xffff900000021180 0001 00000000 0x0 0x0 0xffff900000021200 0001 00000000 0x0 0x0 0xffff900000021280 0001 00000000 0x0 0x0 0xffff900000021300 0001 00000000 0x0 0x0 0xffff900000021380 0001 00000000 0x0 0x0 0xffff900000021400 0001 00000000 0x0 0x0 0xffff900000021480 0001 00000000 0x0 0x0 0xffff900000021500 0001 00000000 0x0 0x0 0xffff900000021580 0001 00000000 0x0 0x0 0xffff900000021600 0001 00000000 0x0 0x0 0xffff900000021680 0001 00000000 0x0 0x0 0xffff900000021700 0001 00000000 0x0 0x0 0xffff900000021780 0001 00000000 0x0 0x0 0xffff900000021800 0001 00000000 0x0 0x0 0xffff900000021880 0001 00000000 0x0 0x0 0xffff900000021900 0001 00000000 0x0 0x0 0xffff900000021980 0001 00000000 0x0 0x0 0xffff900000021a00 0001 00000000 0x0 0x0 0xffff900000021a80 0001 00000000 0x0 0x0 0xffff900000021b00 0001 00000000 0x0 0x0 0xffff900000021b80 0001 00000000 0x0 0x0 0xffff900000021c00 0001 00000000 0x0 0x0 0xffff900000021c80 0001 00000000 0x0 0x0 0xffff900000021d00 0001 00000000 0x0 0x0 0xffff900000021d80 0001 00000000 0x0 0x0 0xffff900000021e00 0001 00000000 0x0 0x0 0xffff900000021e80 0001 00000000 0x0 0x0 0xffff900000021f00 0001 00000000 0x0 0x0 0xffff900000021f80 0001 00000000 0x0 0x0 0xffff900000022000 0001 00000000 0x0 0x0 0xffff900000022080 0001 00000000 0x0 0x0 0xffff900000022100 0001 00000000 0x0 0x0 0xffff900000022180 0001 00000000 0x0 0x0 0xffff900000022200 0001 00000000 0x0 0x0 0xffff900000022280 0001 00000000 0x0 0x0 0xffff900000022300 0001 00000000 0x0 0x0 0xffff900000022380 0001 00000000 0x0 0x0 0xffff900000022400 0001 00000000 0x0 0x0 0xffff900000022480 0001 00000000 0x0 0x0 0xffff900000022500 0001 00000000 0x0 0x0 0xffff900000022580 0001 00000000 0x0 0x0 0xffff900000022600 0001 00000000 0x0 0x0 0xffff900000022680 0001 00000000 0x0 0x0 0xffff900000022700 0001 00000000 0x0 0x0 0xffff900000022780 0001 00000000 0x0 0x0 0xffff900000022800 0001 00000000 0x0 0x0 0xffff900000022880 0001 00000000 0x0 0x0 0xffff900000022900 0001 00000000 0x0 0x0 0xffff900000022980 0001 00000000 0x0 0x0 0xffff900000022a00 0001 00000000 0x0 0x0 0xffff900000022a80 0001 00000000 0x0 0x0 0xffff900000022b00 0001 00000000 0x0 0x0 0xffff900000022b80 0001 00000000 0x0 0x0 0xffff900000022c00 0001 00000000 0x0 0x0 0xffff900000022c80 0001 00000000 0x0 0x0 0xffff900000022d00 0001 00000000 0x0 0x0 0xffff900000022d80 0001 00000000 0x0 0x0 0xffff900000022e00 0001 00000000 0x0 0x0