last executing test programs: 15.075139276s ago: executing program 0: r0 = msgget$private(0x0, 0x400) compat_50___msgctl13$IPC_STAT(r0, 0x2, &(0x7f00000003c0)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x0, 0x0, 0x203, 0xff81}, 0x7fffffffffffffff}}) compat_40_mount(0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mknod(&(0x7f0000000000)='./file1\x00', 0x2000, 0xa718) r1 = open$dir(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0) ioctl$OFIOGETBMAP(r1, 0xc010447d, &(0x7f0000000080)) symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00') __mount50(&(0x7f00000002c0)='overlay\x00', &(0x7f0000000040)='.\x00', 0x0, &(0x7f0000000540), 0x0) lchown(&(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffff) writev(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f0000000000)="b8", 0x1}], 0x1) r2 = socket(0x0, 0x2, 0x0) _ksem_timedwait(0x0, 0x0) r3 = getsid(0x0) ptrace(0x9, r3, 0x0, 0x0) fktrace(r2, 0x4, 0x2, r3) compat_50_wait4(0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3, &(0x7f0000000000), 0x4) compat_40_mount(&(0x7f0000000380)='union\x00', &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f00000001c0)) unlink(&(0x7f0000000000)='./file0\x00') open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) 9.848551868s ago: executing program 2: r0 = socket(0x11, 0x3, 0x0) (async) r1 = semget$private(0x0, 0x2, 0x0) ____semctl50$GETZCNT(r1, 0x0, 0x7) semctl$GETVAL(r1, 0x2, 0x5, &(0x7f0000000000)=""/183) (async) open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) (async) ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0xd27d43220c7df9b, 0x0) compat_43_fstat43(r0, &(0x7f0000000100)) 9.646179949s ago: executing program 0: r0 = msgget$private(0x0, 0x400) compat_50___msgctl13$IPC_STAT(r0, 0x2, &(0x7f00000003c0)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x0, 0x0, 0x203, 0xff81}, 0x7fffffffffffffff}}) compat_40_mount(0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mknod(&(0x7f0000000000)='./file1\x00', 0x2000, 0xa718) r1 = open$dir(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0) ioctl$OFIOGETBMAP(r1, 0xc010447d, &(0x7f0000000080)) symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00') __mount50(&(0x7f00000002c0)='overlay\x00', &(0x7f0000000040)='.\x00', 0x0, &(0x7f0000000540), 0x0) lchown(&(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffff) writev(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f0000000000)="b8", 0x1}], 0x1) r2 = socket(0x0, 0x2, 0x0) _ksem_timedwait(0x0, 0x0) r3 = getsid(0x0) ptrace(0x9, r3, 0x0, 0x0) fktrace(r2, 0x4, 0x2, r3) compat_50_wait4(0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3, &(0x7f0000000000), 0x4) compat_40_mount(&(0x7f0000000380)='union\x00', &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f00000001c0)) unlink(&(0x7f0000000000)='./file0\x00') open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) 8.897954154s ago: executing program 0: socket$inet(0x2, 0x2, 0x0) (async) __mount50(&(0x7f00000002c0)='overlay\x00', &(0x7f0000000040)='.\x00', 0x0, &(0x7f0000000540), 0x0) (async) mknod(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8000, 0x0) (async) open$dir(&(0x7f00000026c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) (async) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x0, 0x0, 0xffffffffffffffff}, 0x4}) (async) poll(&(0x7f0000000000), 0x200000000000002c, 0x0) (async, rerun: 64) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) (rerun: 64) __mount50(&(0x7f0000000040)='union\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f00000000c0)='@', 0x1) (async) __fhstat50(&(0x7f0000000100)="fd42f5b66a5c77f80a7f16a21a4396e18e4063b5388d1beb38f86a1cc6653350eec4db10de1305c39a9fa462b0ec7f387c8201556500fd82ec161f0dfa37941c7632a8b1ba2826fdcfc7f3b23e0eb7f917fcd17f5e08639977defab8676b604bc42949f741325f592e54daf9afa8df021eb02e610d0b0ea55d732f8286d8dd04bed7960bef171d3085fb47f88a86", 0x8e, &(0x7f0000000340)) 8.843244582s ago: executing program 2: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mknod$loop(&(0x7f0000000280)='./file0\x00', 0x80, 0x0) compat_50___msgctl13$IPC_STAT(0x0, 0x2, &(0x7f0000000440)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100), 0x6}}) lchown(&(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffff) compat_40_mount(&(0x7f0000000380)='tmpfs\x00', &(0x7f00000003c0)='.\x00', 0x0, &(0x7f0000000140)="01") mknod(&(0x7f0000000080)='./file0\x00', 0x8000, 0xa718) __mount50(0x0, &(0x7f0000000040)='.\x00', 0xe680bf986d21abfb, &(0x7f0000000140), 0x0) chmod(&(0x7f00000001c0)='./file0\x00', 0x0) compat_40_mount(&(0x7f0000000380)='union\x00', &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f00000001c0)) compat_40_mount(&(0x7f00000000c0)='adosfs\x00', &(0x7f0000000180)='./file0\x00', 0x200, &(0x7f0000000200)="b6660d1ad551505199dbe28824d03a5e629b9ad89f20a6770c9fe3ffc7be8bc264aa237a2403c047e11e915ce014ddc773059cc26f1d132d59765ddf0fb8ab269fb16e7dc4ee0e432301a2f3a0f150033a1acf0d43de778ade6090e9f1f1b68bf63c6388f22dabca95359d0110673813a8fa73eef8170b") unmount(&(0x7f0000000000)='./file0\x00', 0x0) 8.386069733s ago: executing program 1: compat_43_ocreat(0x0, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) compat_40_mount(&(0x7f0000000180)='ptyfs\x00', &(0x7f00000002c0)='./file0\x00', 0x0, &(0x7f00000003c0)) ioctl$FIOSEEKHOLE(0xffffffffffffffff, 0x8040691a, 0x0) symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00') compat_50___stat30(&(0x7f0000000000)='./file0\x00', &(0x7f0000000180)) ioctl$FIOSEEKHOLE(0xffffffffffffffff, 0x80906979, &(0x7f0000000180)=0x8000000000000031) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = socket(0x2, 0x3, 0x0) ioctl$FIOSEEKHOLE(r1, 0x8020690c, &(0x7f0000000180)) write(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f00003c0000/0x4000)=nil, 0x4000, 0x0) fchdir(r0) ktrace(&(0x7f00000000c0)='./file0\x00', 0x4, 0x8, 0xffffffffffffffff) execve(0x0, 0x0, 0x0) socket$unix(0x1, 0x0, 0x0) compat_43_ocreat(0x0, 0x0) compat_40_mount(0x0, 0x0, 0x0, 0x0) mknod(0x0, 0x0, 0x0) open(0x0, 0x0, 0x0) compat_40_mount(&(0x7f0000000000)='tmpfs\x00', &(0x7f00000003c0)='.\x00', 0x0, &(0x7f0000000140)="01") _lwp_create(&(0x7f0000000100)={0x0, 0x0, {}, {}, {0x0, 0x0, '/)YR\x00'}}, 0x0, 0x0) __mount50(0x0, &(0x7f0000000040)='.\x00', 0xe680bf986d21abfb, &(0x7f0000000140), 0x0) 8.173306455s ago: executing program 4: symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00') __mount50(&(0x7f0000000380)='mfs\x00', &(0x7f00000003c0)='./file0\x00', 0x0, &(0x7f0000000a40), 0x2f000000) 7.640715197s ago: executing program 4: r0 = socket(0x18, 0x1, 0x0) sendto$inet6(r0, &(0x7f0000000400)="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", 0xfb, 0x800, &(0x7f0000000200)={0x18, 0x3, 0x6, 0x40}, 0xc) ioctl$FIOSEEKHOLE(0xffffffffffffffff, 0x80206913, &(0x7f0000000180)=0x8000000000000031) compat_40_mount(&(0x7f0000000380)='tmpfs\x00', &(0x7f00000003c0)='.\x00', 0x0, &(0x7f0000000140)="01") symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00') compat_50___msgctl13$IPC_STAT(0x0, 0x2, &(0x7f0000000280)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)}}) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)=@abs={0x0, 0x0, 0x2}, 0x8, &(0x7f0000000200)}, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) compat_40_mount(&(0x7f0000000140)='umap\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f00000001c0)) unlink(&(0x7f0000000000)='./file0\x00') mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x1803) r1 = open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x0) writev(r1, &(0x7f0000001580)=[{0x0}], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = socket(0x12, 0x2, 0x0) ioctl$FIOSEEKHOLE(r2, 0xc0986981, &(0x7f0000000180)) setsockopt(r0, 0x1000000029, 0x19, &(0x7f0000000000)="eb", 0x1) mmap(&(0x7f00005a4000/0x4000)=nil, 0x4000, 0x2, 0x1010, r0, 0x0, 0xdd) compat_43_ogetsockname(r0, &(0x7f0000000040)=""/193, &(0x7f0000000140)=0xc1) 7.341186143s ago: executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="89000000ffff000001"], 0x9}, 0x0) shutdown(r1, 0x0) sendmsg(r0, &(0x7f0000000380)={0x0, 0x32c, 0x0, 0x0, &(0x7f0000000000), 0x90}, 0x700000000000000) 6.639562781s ago: executing program 1: compat_30_socket(0x0, 0x0, 0x0) unlink(0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x0) r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x20000, 0x100) writev(r1, &(0x7f0000000340)=[{&(0x7f0000000000), 0x2cfea}], 0x1000000000000013) mmap(&(0x7f0000000000/0x13000)=nil, 0x13000, 0x3, 0x10, r0, 0x0, 0x0) r2 = open$dir(&(0x7f0000000000)='./file0\x00', 0xa, 0x0) r3 = socket$unix(0x1, 0x4000000001, 0x0) r4 = compat_30_socket(0x0, 0x0, 0x0) readv(r3, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/163, 0xa3}, {&(0x7f0000000180)=""/128, 0x80}, {&(0x7f0000000200)=""/233, 0xe9}], 0x3) symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00') __mount50(&(0x7f0000000580)='fdesc\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x0, 0x0) r5 = open$dir(&(0x7f0000001240)='.\x00', 0x0, 0x20) compat_30_getdents(r5, 0x0, 0x40) setsockopt(r3, 0x7, 0x642f, &(0x7f0000000380)="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", 0x1fd) compat_50_setitimer(0x0, &(0x7f0000000080)={{0x0, 0x8000a15}}, 0x0) r6 = socket$inet6(0x18, 0x3, 0x0) sendto$inet6(r6, &(0x7f0000000000)='3', 0x2000, 0x6, &(0x7f0000000040)={0x18, 0x3}, 0x1c) r7 = socket(0x1, 0x2, 0x0) getsockopt$SO_PEERCRED(r4, 0xffff, 0x11, &(0x7f0000000640)={0x0}, 0xc) ktrace(&(0x7f0000000600)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x4, r8) symlink(&(0x7f0000000080)='.\x00', 0x0) ioctl$FIONREAD(r7, 0xc0106914, &(0x7f0000000080)) bind$unix(0xffffffffffffffff, &(0x7f0000003000)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) writev(r2, &(0x7f0000000340)=[{&(0x7f0000000000), 0x2cfea}], 0x1000000000000013) 6.562269272s ago: executing program 3: r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x1}, 0xc) r1 = accept$inet6(0xffffffffffffff9c, &(0x7f0000000000), &(0x7f00000000c0)=0xc) compat_12_getdirentries(r1, &(0x7f0000000100)=""/85, 0x1160, &(0x7f0000000180)=0x100000001) r2 = open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x0) truncate(&(0x7f0000000000)='./file0\x00', 0x0, 0xc0c) mmap(&(0x7f0000000000/0x13000)=nil, 0x13000, 0x3, 0x810, r2, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) compat_40_mount(&(0x7f0000000180)='ext2fs\x00', &(0x7f00000003c0)='.\x00', 0x0, 0x0) mkdirat(0xffffffffffffffff, 0x0, 0x0) setrlimit(0x9, &(0x7f0000000100)) socket(0x18, 0x3, 0x0) r3 = getpgid(0xffffffffffffffff) setpgid(0xffffffffffffffff, r3) sendmsg(r0, &(0x7f0000001ec0)={&(0x7f0000000800)=@len=0x80, 0xe, 0x0, 0x0, &(0x7f0000001ac0)=[{0x10}], 0x10}, 0x7) socket$inet(0x2, 0x1, 0x0) (async) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0}, 0x10) (async) connect$inet(r0, &(0x7f0000000080)={0x2, 0x1}, 0xc) (async) accept$inet6(0xffffffffffffff9c, &(0x7f0000000000), &(0x7f00000000c0)=0xc) (async) compat_12_getdirentries(r1, &(0x7f0000000100)=""/85, 0x1160, &(0x7f0000000180)=0x100000001) (async) open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x0) (async) truncate(&(0x7f0000000000)='./file0\x00', 0x0, 0xc0c) (async) mmap(&(0x7f0000000000/0x13000)=nil, 0x13000, 0x3, 0x810, r2, 0x0, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) (async) compat_40_mount(&(0x7f0000000180)='ext2fs\x00', &(0x7f00000003c0)='.\x00', 0x0, 0x0) (async) mkdirat(0xffffffffffffffff, 0x0, 0x0) (async) setrlimit(0x9, &(0x7f0000000100)) (async) socket(0x18, 0x3, 0x0) (async) getpgid(0xffffffffffffffff) (async) setpgid(0xffffffffffffffff, r3) (async) sendmsg(r0, &(0x7f0000001ec0)={&(0x7f0000000800)=@len=0x80, 0xe, 0x0, 0x0, &(0x7f0000001ac0)=[{0x10}], 0x10}, 0x7) (async) 6.294234404s ago: executing program 3: compat_40_mount(&(0x7f0000000180)='ext2fs\x00', &(0x7f00000003c0)='.\x00', 0x0, 0x0) (async) compat_40_mount(&(0x7f0000000180)='ext2fs\x00', &(0x7f00000003c0)='.\x00', 0x0, 0x0) r0 = getpgid(0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000100)={&(0x7f00000006c0), 0x213, 0x0, 0x0, 0x0}}, 0x10, 0x0, 0x0) mknod(&(0x7f0000000080)='./file0\x00', 0x2000, 0x40000802) ioctl$FIOASYNC(0xffffffffffffffff, 0x80047401, &(0x7f0000000000)=0x5) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mlockall(0x2) r1 = open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x0) mmap(&(0x7f0000000000/0x13000)=nil, 0xfffff000, 0x3, 0x10, r1, 0x0, 0x0) (async) mmap(&(0x7f0000000000/0x13000)=nil, 0xfffff000, 0x3, 0x10, r1, 0x0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) (async) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) lchown(&(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffff) fcntl$setown(r2, 0x6, r0) ioctl$FIOASYNC(r2, 0x8010744d, &(0x7f0000000100)) (async) ioctl$FIOASYNC(r2, 0x8010744d, &(0x7f0000000100)) 5.723345851s ago: executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) open(&(0x7f0000000180)='./file0\x00', 0x200, 0x0) r1 = getpid() ktrace(&(0x7f0000000000)='./file0\x00', 0x0, 0x40000538, r1) sendmsg$unix(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="28000000ffff035801"], 0x28}, 0x0) 5.589659702s ago: executing program 3: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) __mount50(&(0x7f0000000000)='kernfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0) compat_50___msgctl13$IPC_STAT(0xffffffffffffffff, 0x2, &(0x7f0000000280)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)}}) unmount(&(0x7f0000001640)='./file0\x00', 0x8000000) compat_40_mount(0x0, 0x0, 0x0, 0x0) execve(0x0, &(0x7f00000001c0)=[0x0, &(0x7f0000000100)='mfs\x00'], 0x0) __mount50(&(0x7f00000002c0)='mfs\x00', &(0x7f0000000040)='.\x00', 0x0, &(0x7f0000000140), 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) munmap(&(0x7f0000a6b000/0x4000)=nil, 0x4000) pipe(&(0x7f0000000640)={0xffffffffffffffff}) write(r0, &(0x7f0000000340), 0xd4e688a67930cd) r1 = accept$inet(0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)=0xc) recvmmsg(r1, &(0x7f00000015c0)={&(0x7f0000001580)={&(0x7f0000000300), 0xe, &(0x7f0000001440)=[{&(0x7f0000000340)=""/76, 0x4c}, {&(0x7f00000003c0)=""/4096, 0x1000}, {&(0x7f00000013c0)=""/95, 0x5f}], 0x3, &(0x7f0000001480)=""/207, 0xcf}, 0x101}, 0x10, 0x2200, &(0x7f0000001600)={0x8, 0x9b0d}) lchown(&(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffff) compat_40_mount(&(0x7f0000000000)='null\x00', &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000001680)="ad4fa832593f28011ceb56316d6dbbd5172cb52374ddf8d926731948c742c89110c5cd32786f6fcb74a680a97ec345698fce2a87e87c983e083fd11d3521fffe261f42a358a4299f877005ed6d1003bde6faae0b7b9236b06de49b9b4514266ddb5772e2e8d16ee3ebecbbf02d602e7f33309592b4b0d81fa6c7491eb7ba885064af92c1577b14b3844665bb063503e3a84262c8d62e69f9bb750a964b037579f47e2b085adf082b2a1855e9be9bd8b429dca588636b6aa2eed2033dfbf4231de026b84bab5fc1b80d36a25ef1") unmount(&(0x7f00000000c0)='./file0\x00', 0x0) mknod(&(0x7f0000001780)='./file0\x00', 0x10, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000)="c8", 0x1}], 0x1) compat_43_osendmsg(0xffffffffffffffff, 0x0, 0x0) __getcwd(0x0, 0x0) mprotect(&(0x7f0000652000/0x1000)=nil, 0x1000, 0x4) __clone(0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0\x00', 0x0) compat_40_mount(&(0x7f0000000180)='ptyfs\x00', &(0x7f00000002c0)='./file0\x00', 0x0, &(0x7f0000000500)) symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00') __mount50(&(0x7f0000000180)='kernfs\x00', 0x0, 0x0, 0x0, 0x0) 5.179472405s ago: executing program 2: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mknod$loop(&(0x7f0000000280)='./file0\x00', 0x80, 0x0) compat_50___msgctl13$IPC_STAT(0x0, 0x2, &(0x7f0000000440)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100), 0x6}}) lchown(&(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffff) compat_40_mount(&(0x7f0000000380)='tmpfs\x00', &(0x7f00000003c0)='.\x00', 0x0, &(0x7f0000000140)="01") mknod(&(0x7f0000000080)='./file0\x00', 0x8000, 0xa718) __mount50(0x0, &(0x7f0000000040)='.\x00', 0xe680bf986d21abfb, &(0x7f0000000140), 0x0) chmod(&(0x7f00000001c0)='./file0\x00', 0x0) compat_40_mount(&(0x7f0000000380)='union\x00', &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f00000001c0)) compat_40_mount(&(0x7f00000000c0)='adosfs\x00', &(0x7f0000000180)='./file0\x00', 0x200, &(0x7f0000000200)="b6660d1ad551505199dbe28824d03a5e629b9ad89f20a6770c9fe3ffc7be8bc264aa237a2403c047e11e915ce014ddc773059cc26f1d132d59765ddf0fb8ab269fb16e7dc4ee0e432301a2f3a0f150033a1acf0d43de778ade6090e9f1f1b68bf63c6388f22dabca95359d0110673813a8fa73eef8170b") unmount(&(0x7f0000000000)='./file0\x00', 0x0) 4.941870781s ago: executing program 2: compat_40_mount(0x0, 0x0, 0x0, 0x0) (async) sendto(0xffffffffffffffff, &(0x7f0000000080)="e0fdfffffffffffe00", 0x9, 0x0, 0x0, 0x0) pipe2(&(0x7f00000009c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mknod(&(0x7f0000000040)='./bus\x00', 0x100000000205f, 0x2802) (async) r2 = open(&(0x7f0000000040)='./bus\x00', 0x70e, 0x0) writev(r2, &(0x7f0000000240)=[{0x0, 0x2}], 0x1) socket(0x18, 0x10000000, 0x2) (async) ioctl$FIOASYNC(r1, 0x8004667d, &(0x7f0000000000)) readv(r0, &(0x7f0000000640)=[{0x0}], 0x1) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) 4.442436738s ago: executing program 0: socket$inet(0x2, 0x2, 0x0) (async) __mount50(&(0x7f00000002c0)='overlay\x00', &(0x7f0000000040)='.\x00', 0x0, &(0x7f0000000540), 0x0) (async) mknod(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8000, 0x0) (async) open$dir(&(0x7f00000026c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) (async) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x0, 0x0, 0xffffffffffffffff}, 0x4}) (async) poll(&(0x7f0000000000), 0x200000000000002c, 0x0) (async, rerun: 64) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) (rerun: 64) __mount50(&(0x7f0000000040)='union\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f00000000c0)='@', 0x1) (async) __fhstat50(&(0x7f0000000100)="fd42f5b66a5c77f80a7f16a21a4396e18e4063b5388d1beb38f86a1cc6653350eec4db10de1305c39a9fa462b0ec7f387c8201556500fd82ec161f0dfa37941c7632a8b1ba2826fdcfc7f3b23e0eb7f917fcd17f5e08639977defab8676b604bc42949f741325f592e54daf9afa8df021eb02e610d0b0ea55d732f8286d8dd04bed7960bef171d3085fb47f88a86", 0x8e, &(0x7f0000000340)) 4.088279853s ago: executing program 3: r0 = socket(0x10, 0x2, 0x0) shutdown(r0, 0x2) compat_40_mount(&(0x7f0000000380)='tmpfs\x00', &(0x7f00000003c0)='.\x00', 0x0, &(0x7f0000000140)="01") mknod(&(0x7f00000000c0)='./file0\x00', 0x6000, 0xe03) __mount50(0x0, &(0x7f0000000040)='.\x00', 0xe680bf986d21abfb, &(0x7f0000000140), 0x0) chflags(&(0x7f00000003c0)='./file0\x00', 0x0) 3.776349971s ago: executing program 0: compat_40_mount(&(0x7f0000000380)='tmpfs\x00', &(0x7f00000003c0)='.\x00', 0x100000, &(0x7f0000000140)="01") r0 = open(&(0x7f00000001c0)='./file0\x00', 0x6aaaf9f55adc2226, 0x0) pipe(&(0x7f0000000a40)={0xffffffffffffffff}) r2 = getpid() fktrace(r1, 0x0, 0x62e2dd08f149ff1b, r2) unlinkat(0xffffffffffffffff, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) fpathconf(r0, 0x8) mknod(&(0x7f0000000480)='./file0\x00', 0x2000, 0x1733) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x400000, 0x0) compat_40_mount(&(0x7f0000000040)='tmpfs\x00', &(0x7f00000000c0)='.\x00', 0x0, &(0x7f0000000c40)="01") ptrace(0x9, 0x0, 0x0, 0x0) r4 = getsid(0x0) compat_50_wait4(0x0, 0x0, 0x0, 0x0) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x1) ptrace(0x9, r4, &(0x7f0000000000), 0x0) mknod(&(0x7f0000000080)='./file0\x00', 0x2000, 0x40000802) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x400) read(r5, &(0x7f0000000200)=""/79, 0x4f) fcntl$lock(r3, 0xa, 0x0) compat_30_fhstat(&(0x7f0000000000)={{}, {0x0, 0x40, "b965f858931524d0ac91b4665c3f5343"}}, 0x0) mknod(&(0x7f0000000480)='./file0\x00', 0x2000, 0x1733) r6 = open(&(0x7f0000000040)='./file0\x00', 0x40, 0x10) ioctl$FIOASYNC(r6, 0x8010427a, &(0x7f0000000000)) pipe2(&(0x7f0000000340), 0x0) compat_30___lstat13(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)) pipe(&(0x7f0000000240)={0xffffffffffffffff}) r8 = dup3(r7, r7, 0x0) fcntl$setstatus(r8, 0xa, 0x0) 3.550419625s ago: executing program 5: mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x40000802) mknod(&(0x7f0000000300)='./file0\x00', 0x2000, 0x6da) open$dir(&(0x7f00000000c0)='./file0\x00', 0x1, 0x0) r0 = socket(0x1f, 0x3, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x0}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0}, 0x10) sendto$inet(r1, &(0x7f0000000080), 0x0, 0xe, 0x0, 0x0) sendto(r1, &(0x7f0000000100)='v', 0x1, 0x0, &(0x7f00000001c0)=@data="e33e0f00", 0xe) ioctl$FIOSEEKHOLE(r0, 0xc0386207, &(0x7f0000000180)) mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) 3.533298758s ago: executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x0}, 0x10) compat_43_ogetpeername(r0, &(0x7f0000000280), &(0x7f0000000540)) r1 = socket(0x11, 0x3, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0xd27d43220c7df9b, 0x0) mknod(&(0x7f0000000080)='./file0\x00', 0x2000, 0x40000802) r2 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) ioctl$FIOASYNC(r2, 0x80047401, &(0x7f0000000000)=0x5) r3 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) __stat50(&(0x7f0000000100)='./file0\x00', &(0x7f0000000300)) ioctl$FIOASYNC(r3, 0x2000744e, 0x0) compat_43_fstat43(r1, &(0x7f0000000040)) 3.315170991s ago: executing program 2: socket$inet6(0x18, 0x3, 0x0) r0 = socket(0x2, 0x0, 0x0) setsockopt$sock_int(r0, 0xffff, 0x1001, &(0x7f0000000100)=0x80, 0x4) r1 = socket(0x11, 0x3, 0x0) open(&(0x7f00000003c0)='./file0\x00', 0x80000, 0x76209d917ae94f41) writev(0xffffffffffffffff, &(0x7f0000000280), 0x0) mknod(&(0x7f0000000080)='./file0\x00', 0x2000, 0x40000802) r2 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) r3 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x81) ioctl$FIOASYNC(r3, 0x80047401, &(0x7f0000000000)=0xb) ioctl$FIOASYNC(r2, 0x80047401, &(0x7f0000000040)=0x20) write(0xffffffffffffffff, &(0x7f0000000500)="1e3ac20fa2fbb43f4e790b92c675000000", 0xfffffffffffffdf0) getsockname(r0, &(0x7f0000000380), &(0x7f0000000400)=0xe) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000080)=' ', 0x1}], 0x1) connect(r0, &(0x7f0000000180)=@len=0x9, 0xe) fchflags(0xffffffffffffffff, 0x30000) sendto$unix(r1, &(0x7f0000000000)="b1000513000000000000000012000000000013fecea10500fef96ecf2ac72fd3357ae30200004e3039d2d236acf20b7804be38164991f7c8cf7f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f335c223e7d0c032bfa896443a421180000007226dee501d610a05f0fd38bfbb770c1f5a872c88106002ec589040000000c000000361b1257aea8c500002002fbfe0c2300008abfba0900000008e371a3f83437", 0xa6, 0x0, 0x0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x40, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000a40)="2de392d882f17876361c21e29e7e52d89b52c9cf5a0e403d51d8beb0a286c2117bd822e0b0a9df56cd5f92d8a4c157634f13bac62b68cebc5b82368d08355dc7e9ba9b9db83b9403fc0afa9f931cfe8a57a396019b1f9b9e32c096f5f8260f669495386cc3b2b30586cfaa25a442cd1e51c11ed42d6617169b6a7ac441311384b1f57a71d1020e6d4b169ead6e8429665080560b66c333e42937ed4cda758b675cf94a65b5acb4ed58397175c8a1df0dbb5adf1d8701ec0db44fbfe9b8b37d91684cff7af59ffd05aa33834ba4e90219f53a62bf9bc2df5ae0cc3edf50a83efee45653a97a013796c841a42174c72c652c4f51141e06b7f248eff4fd0d071a7dff690e916eb4f216e1b1f79fd487107f41e02a4b13fed03ba3e7f9cfd39f9b34b0b4fe9d0dcbd21a7d4ff9a96ac8307609541762ff65dc4f36fe310216daf8370a9a236cfed741d7e1e5a8ee437dd16fd9f357124944530abd994d0abe1d51c381b5ce3eece1c238d41a59189151ab5c1085586f4cf6ac245703a1ae525185824eebcd04df25c2ea2ec2f8351582a85cf5", 0x191}], 0x1) r5 = open$dir(&(0x7f0000000000)='./file0\x00', 0x40000, 0x0) writev(r5, &(0x7f0000000540)=[{&(0x7f0000000200)="799340cf1e6f99ae1f7199ff5204e9e1c5a7e5f4b3b00337d9c195dd3f93b930baa0a84b1baa20f71d799c26771447c887c95c3e1b91b5840cfa329544e4403a0c8533fc2c6b6f62387bb748a99cd5449800e222e17eb9", 0x57}], 0x1) open(&(0x7f00000001c0)='./file0\x00', 0x1, 0x40) symlinkat(&(0x7f0000000280)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000340)='./file0\x00') mknod(&(0x7f0000000080)='./file0\x00', 0x2000, 0x40000802) socket$unix(0x1, 0x2, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x80, 0x38) compat_43_ocreat(&(0x7f0000000080)='./file2/file0\x00', 0x0) 2.942619868s ago: executing program 5: socket$inet(0x2, 0x2, 0x0) (async) r0 = socket(0x10, 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000)="c8", 0x1}], 0x1) syz_usb_connect$hid(0x0, 0x0, 0x0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x30, &(0x7f0000000180)=ANY=[@ANYRESOCT=0x0]}]}) (async) getuid() mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) r1 = socket(0x10, 0x2, 0x0) ioctl$FIOSEEKHOLE(r1, 0xc0206935, &(0x7f0000000180)) (async) pipe(&(0x7f0000000000)) fstatat(r0, &(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000280), 0x800) (async) r2 = open(&(0x7f0000000180)='./file0\x00', 0x280, 0x0) fcntl$lock(r2, 0x8, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x100000001}) (async) r3 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) (async) open$dir(&(0x7f00000004c0)='./file0\x00', 0x20, 0x0) unlink(&(0x7f0000000340)='./file0\x00') open(&(0x7f0000000200)='./file0\x00', 0x1, 0x7) (async) fcntl$lock(r3, 0x9, &(0x7f0000000000)={0x0, 0x0, 0x20000, 0x269000000}) (async) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) (async) open(&(0x7f0000001640)='./file0\x00', 0x615, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0, 0x4000001) (async) mknod(&(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x40000802) swapctl$SWAP_ON(0x1, &(0x7f0000000000), 0x0) (async) r4 = semget$private(0x0, 0x2, 0x0) semop(r4, &(0x7f0000000240)=[{}], 0x1) (async) semctl$GETVAL(r4, 0x894f2c8f4c78c83, 0x5, 0x0) __fhstat50(&(0x7f0000000100)="46b0d9a2092e5078f02c9508b1f49fd773d312d550a52c596821553010cdeb009d1f96", 0x23, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mknod(&(0x7f0000000340)='./file0\x00', 0x2000, r5) mknod(&(0x7f00000000c0)='./file0\x00', 0x2000, 0x29b3) mkdir(0x0, 0x0) (async) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) 2.34738552s ago: executing program 1: compat_30_socket(0x0, 0x0, 0x0) unlink(0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x0) r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x20000, 0x100) writev(r1, &(0x7f0000000340)=[{&(0x7f0000000000), 0x2cfea}], 0x1000000000000013) mmap(&(0x7f0000000000/0x13000)=nil, 0x13000, 0x3, 0x10, r0, 0x0, 0x0) r2 = open$dir(&(0x7f0000000000)='./file0\x00', 0xa, 0x0) r3 = socket$unix(0x1, 0x4000000001, 0x0) r4 = compat_30_socket(0x0, 0x0, 0x0) readv(r3, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/163, 0xa3}, {&(0x7f0000000180)=""/128, 0x80}, {&(0x7f0000000200)=""/233, 0xe9}], 0x3) symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00') __mount50(&(0x7f0000000580)='fdesc\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x0, 0x0) r5 = open$dir(&(0x7f0000001240)='.\x00', 0x0, 0x20) compat_30_getdents(r5, 0x0, 0x40) setsockopt(r3, 0x7, 0x642f, &(0x7f0000000380)="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", 0x1fd) compat_50_setitimer(0x0, &(0x7f0000000080)={{0x0, 0x8000a15}}, 0x0) r6 = socket$inet6(0x18, 0x3, 0x0) sendto$inet6(r6, &(0x7f0000000000)='3', 0x2000, 0x6, &(0x7f0000000040)={0x18, 0x3}, 0x1c) r7 = socket(0x1, 0x2, 0x0) getsockopt$SO_PEERCRED(r4, 0xffff, 0x11, &(0x7f0000000640)={0x0}, 0xc) ktrace(&(0x7f0000000600)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x4, r8) symlink(&(0x7f0000000080)='.\x00', 0x0) ioctl$FIONREAD(r7, 0xc0106914, &(0x7f0000000080)) bind$unix(0xffffffffffffffff, &(0x7f0000003000)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) writev(r2, &(0x7f0000000340)=[{&(0x7f0000000000), 0x2cfea}], 0x1000000000000013) 2.34549494s ago: executing program 5: symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00') (async) compat_50___msgctl13$IPC_STAT(0x0, 0x2, &(0x7f0000000280)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100), 0xdffffffffffff7ff}}) (async) lchown(&(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0) (async) compat_40_mount(&(0x7f0000000380)='union\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0) (async) open(0x0, 0x0, 0x0) compat_40_mount(&(0x7f0000000140)='umap\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f00000001c0)) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file1\x00', 0x0) (async) rmdir(&(0x7f0000000480)='./file1\x00') (async, rerun: 64) compat_40_mount(0x0, &(0x7f00000003c0)='.\x00', 0x0, &(0x7f0000000140)) (async, rerun: 64) compat_50___msgctl13$IPC_STAT(0x0, 0x2, 0x0) (async) _ksem_open(&(0x7f0000000180)='/', 0xff01, 0x0, 0x0, &(0x7f0000000100)) (async) symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00') open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) compat_40_mount(&(0x7f0000000140)='umap\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f00000001c0)) (async) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) __fstat50(r0, 0x0) (async) compat_30_getdents(0xffffffffffffffff, 0x0, 0x0) (async) compat_50___msgctl13$IPC_STAT(0x0, 0x2, 0x0) lchown(&(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffff) rmdir(&(0x7f00000000c0)='./file0\x00') (async) compat_40_mount(&(0x7f0000000380)='union\x00', &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f00000001c0)) fktrace(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) open(&(0x7f0000000300)='./file0/file0/file0\x00', 0x8, 0x0) (async, rerun: 64) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000)="c8", 0x1}], 0x1) (async, rerun: 64) mknod(&(0x7f00000000c0)='./file0\x00', 0x2000, 0x4100) (async) bind$unix(0xffffffffffffffff, &(0x7f0000000080)=@abs={0x0, 0x7}, 0x1c) (async) r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIONREAD(r1, 0x8010572a, &(0x7f0000000080)) 2.201089752s ago: executing program 0: fstatat(0xffffffffffffffff, &(0x7f00000014c0)='./file0\x00', &(0x7f0000001500)={0x0}, 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0x2000, r0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x0, 0x2172, 0xffffffffffffffff, 0x0, 0x0) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) rename(&(0x7f00000007c0)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00') mprotect(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1000008) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$FIONREAD(r1, 0xc0187700, &(0x7f0000000080)) __clock_getres50(0x40000000, 0x0) sendmmsg(r1, &(0x7f0000001440)={&(0x7f0000001400)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000100)="9147c6a03e21d0204314cde2533c2a874a10fe362854ab7be19f8440e89b8a831b2702edfae41dba6633b62b0f600b4fb1ceb23581cb248a64941a8e820ee0bd584825284eab7fb5da3b5aabaa5098c5729ddebd08e8795197", 0x59}, {&(0x7f0000000040)="c4eae3228f", 0x5}, {&(0x7f0000000180)="8dde11d30d6d5124302304539126582ef991ae83ae219732bb31b59c8f418afb3337f42308f3020e29da8abfc99932416071714917e4afbb5dd2eaf056a1d6e666944d0c024757211186a0ac80884af9506141c0fa255ba6985286511a3e4b3407e1c232a04349f8fa12e81d9d8acd5c66e2943893e8350f7deaeb7ea500f15894da4fb713d173eecada701cb64df9a8f64fd0e5583665c763", 0x99}, {&(0x7f0000000240)="24a6d4ac3add6207f3f7388207a5342ff61dbb98613c471a1a85c210954d99aff467a27a525c23736d46c1309779284ebef33758856a450018194742e63728c5b47ffcea06427361b24331f20fb5706fa69fd140422388891ae9f05a20c0ee5906d6e9823bee4dceabb5e2fbd4e7cff261ed88add90b839e36bd12e19da5f27a73acecd70b078e2f35a860f91fe72d520cabfa93ed9185cecb844005a41b804be968e53ffef3a18a0da2f31f553a13b5e8934366dc7dd1d0f7b04807a28371a62471b26077db15603eb4ac3d754470b5d6ecf53416ce36e271d80d829ca72853dc385e4065573a022d8846db59cd8e6f50b5cfb840e5e9e7cb250b3e80b18656fdfcd717c96f42ba32dbfae15d12fafc660f77fdb2f4e4ca2a0221a1c2096ec9aa5a8ee204ec780e489076ad73da0e81987c20fccec52f234b52acf00fd7fc54ea5f295a22c9717c39c90b39630689a935d993186e5b3e4ff78072a84c6b0f02b76c3f10611243cb9ee8cb44964a483869050c11d6e7692f6e30f6ca975f6beb1a63da8392f7c5e9d2ece92142a8f4a34925e26da33091f3c45037e30800a5869a31d4483f6c465f0a2630eb563ce1f2e8c826ee28774539d8dfa8b709395ca39ee92dd144ee51de3e48d5782aa7d602cd7d9facf2265ec382d5e7676f2ae1fff661e7296b0af23ed673e6375d2766f2ec0e7abfb1d7a151e7dc43a4ad44bee511269b364d8df2eb2e22461dc4215e06df47f528780a2f3ddf8e819234e463153ab2447fde7527840e74fa1bb3aa260b5377b7f5c499240cf77d9ff4975e59b48289d4b4d71e7d42f5be4077ca7ff4b3a1e40820aaf3aec9b29f916fc8c87bad500986cdf5d06332462f027a4d819a051f7204a14ca92d5d5160f8609130fa3ca00b805f6efa5ad77530618d43bfae29de52bc60edd7f7dd031a2fcf586b6ea9234510e8b017914436f5424698786f4b256b71166cc7f66048fb8050ab4595e7c9d24a61dc7546f1eebada7d9fd92bbe91279607dcc88d879c502a721e1d2249afba54aab38156936ce2cf064f9d7cedaaf1f5d4baf0d9bec316798b52dd724f5ad24e79b35362aef4dafc99dec1f9a679558d78b41e5de99c762ae9a036c8827792a86d038d6b6df18bcbf6d7a4993a0130e65a4d1557985d1cf697c3dcfd0244b2b71c4cfe9c52943d58f9c226ceaa695242159ac005486700fcc12850d6f1af79fbd18fedade1a4ac81ee81c2c5e1bdc70639c2d99b8d3468d1c483bc4a4560ae54098ec5b775edc70e6b3b9fb292b9c0084e259d1da629222070654013998907acde2a5e5330a70e5393d5e214a383b65e7e44ef6688c4a99d8fb2a87a26b8657cd329af939449133f179af47effedd6e4204845a5b421e48571dc0ac446216cab29fea2b15f7485716c1b13c06b6e9127f8db45741ae3a4c5d706f423171e7f3a34410150e3e5f401cfc833d05a1880c076f1f88d3a8d9c9206d23b65988fa727d16705fd9c3271ef559176389600163e9b936251ed43d9f33b21b8a4909be859526540542d0c445353be2aceea11be7169f4ed50832ed8e1063e800be0d005888fa28cab336bae1dc1e38757b639a5a174dcbf2a8c70263fb5d3e5d8ff940146e5aee95eaa022f83856faac79dbd18a319a2b2d1aef38dbca5ca9554341b8e74e06ca2df13646a9aeaf059f3b57e912857d1d92806cf387e1c5c518f65ac0a83544fa721adb8c723eb104dad9a99bd06c87c570ce4f54174d04894301e0b6d35521ba31d1ae48272c9318b34a298decc9901f57fb479a454cad889bde3b17f7ad80f6c89ab1026eb5e4f763f48839095a6fc376298df6644ad155e1b992d62e29cec37ea7cf5681931dffef9f6c026ae049af48d99ec5ce40e72b3c0e85055c1f11ceaf6becf12e042d89ea54f8290bd14433efe184485cfa530317a29bd5f3824bc569c445e2b72bfc7382785365e7e3cad007648aa9597bef7ab0ace48e212a402472d1c183b1c165a6c1fd9307a5c94fa0682bcc6f8c647616cad0b507434f0183f0566eb4c877ecb983fbe875ea30ea172eb4713612cc23bc64ba22e7963b8447ebbccb2512700de21334c2cb343462eeb3556158a8ca7a75a920e48eec6948e34ccfaac03adb070fa27eadf14bb5bf03849463d05f2d7094525beaa45bcf7f8552627c3cd372aaced2c409a10fdbfc776f54e55aeb69d06ca9cf7adff63bf5590cbabac1e7ddfa1935d087011832be291ec0b607adaf63ca3451b626b4faca64b54011e5ec90021321f2e7a784d9c379104da6295eae636fbb5c3cebcc5ff169422e40c455597d9008c92a97dd52a1d4a902ae0f03144fb2dd1b72c5d2fe642aa9ca9b99aea293430410ae5867da606533571f50b763ecefffdbbc289cdc1d44e338e00194c85713057becac1de29de68c2343ecd52c5ffd77810c40fed459b4da557f531220f4a927c8448d0ee3f776f0b2bf2f206fae5b720c74e7398f2308d953786990ffb516ff84f26ec0769475fe2c08869a87745c42f427853f528fed04badb1d7efe231fcfaa350d29d8dd0205bf65f41e9937c3c52d94a1d644d66e924ae157999c6eab46536b5b4c7df166274c1ed20efc574d2b26976a6649eceffacd18ed3430b817046ddf92f0451a22500cda57328a189de16d1aef5505d09c13d14004df33a5d754438546463c236782c014a51f36af5f59ab9f48b1ac26107c68693f9221043f42391dddb61cadacf4388069ea85cdcf418915fa7789a91fc110483d54d4fdc744e7f4c809e1100d3667713cfbf7cb6eb59141e02e69b7f7bac205fb08d1afe265dae6e434c9b45129550ec8def19bb5461c5665a74f087a58b24670f08616705905042ab0792f8b2495c304ce07168fe7a48c45bdd1fa84cc5ce0c0fe7740f8583b6a11b62969ae9175f0fdd9a2ba97d9f291db38ae10c8bed0e478742c8b5af887f8c8e6492389c403a38a12041217dc2ae247b495613e35d21c49ad05fc09bbc917e310154d61846e9d681ab4d51a62ff023b526fca6c94cc49bdd9dd58fb61fb0e1abb418d4fe0f92c3b6ebfa04fa6df237b723b8520224d920c83094fe53fe0aca77b6fd534e1327016df05eb4881085fd2d8707152fd062e7d09eca8ffc23930aac44af2b95d7749a6dbc844a92381c3b127fb4a522b772bd6967997d427e0392f42c03e510a58c1190f58847cfdd890c9e298e46e2bb4fead7b62449fd5e474be4017b44bc168130dd4ed76064c153da106ddce12c4049757cd252a2bfbd440aa384bc886b80049b5ed5e64c889647c58e61fee340410d9131ede4be2602e7f90bf3025018b7df004e82277fd577d7f22481941fced4c6d4479d72b01acde89b2be591b5f6a3e58a6d111624efde35e5735aff2422c5f8c1c664dd4a4b4a7fc3c043f71d01bfac0685711911e18f6ace45f91a01f9ac250b5c7dd6ae6a3022a7ff973a1bc7c311f90f8ea567b0bd74b02e1585fdff20a2fa457972cffa6609b5017e2a2d16fd76d5107228a9a6cdd1885a0a4d7169aad7c28da719fa8fca8c809ed4b52dd22402c4b0d35d8e18fc728facb68e0bab96398633a1397d6a61bb646d68045e8a6bc2ed93349319628fbdeec47e927856c199567e2d2a4baee40dd379216db047a4541835f9893efbd4dc46f03e0337348ce0b52978d30da937058a122aa71079902d9a804ba8381feb68426efc7ba7dc3d1eef08afe92d1026b982fab77a46692a0413b5b905712b639144784b8edd7bc4aff572e1219ca7a57f504709f4e93c82d5d65cf10e5ae97467334da250830a0f0733484d26c99a611bf832d831b74133e5c72c9e9f537018549ef056ab1d78e887abca6f4e4124413ba6b283ec9d44e8f623a692ca19feeb89bfdcfe25f37ada985473e501dec856ae7d3d72de4c81fb6d8ead87ac1367810243a45727b851ab44caf445d2b08c23c7ea46aa09dd1ed397a6779256c18df05ee9ec757e332fec52928c5dc38f3cf5996a3274aa284fca5b07130277bc84cb2020522ec79067ba62be80ce77ccbcfe66d073f32414ddc19e71abb1bfa3eb3243a3b3a17089ccc87b0551a594a69766374d44ea4038bd5d6dfc3de0104eee6301c9efd799a787b2a081e5075bc42f6f6d35c834d3fa5e80600eca592da932ee6b0eb246ed352a491306c340af345cd16e722650f2693aea0f55b670cdfc4072534079c7f8008b08072d649e4fb92059b38084810ba2c15e73f5bde1933d1f5926ae00b1a80f633caabd8883dc15637dae4a03d31b26b326e11dc58cf7e26e3225f4765773d7f9a707ca0c833516448a2802dbdf73ee7b62a553599aad826e00d3f6ffcba708fdc1cedc1fe961512797a5606817a29530a5c16204b406695d0e7ef3757fe513d3278ce9af2dfc0787104bbff5085c99b46a7e1392dd5c90c82e8d138601ffd0aa1648d112e42f2a04a797b10cb8fffaf48eb60f39e4bef7355555fbcbd76296f957b4eb29682bbe33fc367beb5c87e04bdccbd57b6e4557990bb65e73cc6c08863e3589869e66d6e137797d38595766c658e494516c79cf1fc514dc6ea2f7cfa659d918059f9ddd22f9f44ef8f40d612a8f1bbce66a0f7b1db29d2bcc125f87677053e5d6de7d3be39faa6eb8f49be491381206af96ddc68acab0fcec54572635ba5a296beb5692438a2b58cca80fb50bde6e3369abd7a62e9829195886fcecd7030e6fc2a7dbd1c3a9a78679ec69ebf1f4e5746fe902603cb157815e8d0b1d70c9f934480593cfc00c8cbb6553cc660f41b63a715c4164888a54f0161cc0ad44f9347358648de9b38f18d4bd90df1da342bcbf6469a5bd1b639084268beb2ee64721426cfd74fbedcebf876f7600b261555fc8eea125af89531c89aab2edef9bae9a4ba4f23a0255ffdb2a5297e049ca24afe03b4642510924db2c1fa8e2242e415e3539e6121136561258c6afdab52d145517f815ee8c4124c3e425919b9513cb1100c4422e3eea8be86560a00cbe07c77e1d3e0488b0294eae5cb5a529c62da43fd6475fcb3a97f93dd74cdfbd92104510119938e7960497caa51fc4a99abd120bd3d2b965f8ffe219ad9b6428be4a4bf8cb5156e5fa2aea58a73821fbcc289cb16df74bff66deebfb5a557ab4be4451e7bfc140e80102e6010313d92bc50d160cc2bea77385efb18d2fcf8a0b3b10ea4d8e0d06e6fbea8786189f6599dcde711edca9c5bacd54c0c3f99cc9211cd4a8aa25f77367d2096bc134075489d3daee3e0ff5eaa8adc0d5121191064ba2591ac12c2800830331e312612c51678a5f12f6c2c46b7147f8a1d5e8e41ea3d7b3e450971af7dd48668b52de302945d30de1007e7f23d4218877a0ae40ac72e671dea08c6f0999c84aa1e95b32cca893fd3d5105bca5db69e8a2cce6b50c0cef1e12389143c12eebffabd6ac7943ae64ebe95d16b037160a8ff9e6c3992c25d329d8cff23de23482ab9d0de5c0fbec902f9e31cfaace91c89ad559109bd3058d053aa26004d5118a308fe7e7aeaca0e9799f7b52aa17d32b8b2d3ecdab228f37a37c4a766d954da21e18cae5b6cc76e33f1f591035e8d7aaa5910dff0508508ad0c3e58dc6ac26f77eab422287a7e691e6cedcf32a8a4227de96272788d3bb99159028af6b374f303714c6292e52b4909b8e8e1a90b6ea369349b7d0f20b6f0bcd1cd25a2c6a288caa8926fc74d04c891ed427bd958ef3cb162612c15430dca7296ca9ee20a4d35e75a5014a602e9b0e950b29447fa90cefc725cb3cf3121672b8ad1d8d4cfef7e58ec4cf", 0x1000}, {&(0x7f0000001240)="303a317c47717756d2654212049d5b54f9db794000552c9fc3572f53dd0b5434c2399e3bd993346c211f0e93026e85cdb9f357aebb70d3337fbb1748310eb6c59933314411e9bfcf0fa9846e6633c66c3eb02f8ab0158b92add8c356d35d9254bc4d4aaf501c2fd38d4d8437c6654adf8ac12e37ebaa661be30295fd38452101d578278231ddd9c61204e27a06989d3b652be3cd8d9e3412", 0x98}, {&(0x7f0000001300)="df993b01b498c8af2252e657debc", 0xe}], 0x6, &(0x7f00000013c0)=[{0x30, 0x11, 0x7, "9c2077b2d4bd196257358be74e7cecf97b20e6377c4d6e83c2c695ed"}], 0x30}, 0x8}, 0x10, 0x400, &(0x7f0000001480)={0x0, 0x10001}) 1.947321531s ago: executing program 5: shmget$private(0x0, 0x7ffe7002, 0x0, &(0x7f0000ffa000/0x3000)=nil) _lwp_create(0xffffffffffffffff, 0x0, 0x0) 1.876098952s ago: executing program 1: mknod(0x0, 0x0, 0x4f4b) open$dir(0x0, 0x0, 0x0) open(&(0x7f0000001640)='./file0\x00', 0x615, 0x0) ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0xd27d43220c7df9b, 0x0) open(0x0, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x80000000000206, 0x0) writev(r0, 0x0, 0x0) write(r0, 0x0, 0x0) execve(0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) truncate(&(0x7f0000000040)='./file0\x00', 0x2d000000, 0x4000001) 1.542923053s ago: executing program 3: syz_emit_ethernet(0x9d, &(0x7f00000000c0)="a37d33b33f38f9adfb173ee61fb6d630c749de722cb0e8501579ba8d0f7e7ab124af295cc420176f519d7f9384b2657c137c9d35b1ada36facb770b8e1587007ceb1e251f7a6fdf87e81e5c618103c4db55cbee67f819ff1baeb0bdd1cf3bc17ee2f48cfaa2712c8732780486843cadf9ef98da4ecf86d2bb8980db48511cb05545b2285766cc1a37941141cbaa9de2cfa170bdefa6624fcb4704c964c") writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000080)="76e5eac907f9ccf7", 0x8}], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_timeval(r0, 0xffff, 0x1006, &(0x7f0000000080), 0x10) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0xd49f275d97cc01be, 0x1810, 0xffffffffffffffff, 0x0, 0x0) 1.384559078s ago: executing program 1: r0 = socket(0x18, 0x1, 0x0) sendto$inet6(r0, &(0x7f0000000400)="b9a5d21435e1405e51769b486f530d72f96387ac3ce498056274a86e3fff83b6a7d399bd6f4294a8529ab72481f16584c623e47ee835436e8153f752e0921f622d1d31b4fdc0a74edef1283243e35538354ac3a686f37db40c7f9027e008505458ff20afc4164018601cd72b78cf9043dd9db412c14be45cd426238e83d89002969195a9a76b248501654fd6fca67a24a4a6fcfebc1a456218ba2f1d9752cb5fa82fd63b0bd1114582ad8b127bcee19e126f1b33fe8f574c724f733cb5cb5721468dcc42ad5942e035b0ac78245772f435b8536aa1757855fc79ce3018d86372a8f38ae9ca341fbacdde91d3fee2446f05c2ef6f30fa9dcb992d6c", 0xfb, 0x800, &(0x7f0000000200)={0x18, 0x3, 0x6, 0x40}, 0xc) ioctl$FIOSEEKHOLE(0xffffffffffffffff, 0x80206913, &(0x7f0000000180)=0x8000000000000031) compat_40_mount(&(0x7f0000000380)='tmpfs\x00', &(0x7f00000003c0)='.\x00', 0x0, &(0x7f0000000140)="01") (async) compat_40_mount(&(0x7f0000000380)='tmpfs\x00', &(0x7f00000003c0)='.\x00', 0x0, &(0x7f0000000140)="01") symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00') (async) symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00') compat_50___msgctl13$IPC_STAT(0x0, 0x2, &(0x7f0000000280)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)}}) (async) compat_50___msgctl13$IPC_STAT(0x0, 0x2, &(0x7f0000000280)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)}}) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)=@abs={0x0, 0x0, 0x2}, 0x8, &(0x7f0000000200)}, 0x0) (async) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)=@abs={0x0, 0x0, 0x2}, 0x8, &(0x7f0000000200)}, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) compat_40_mount(&(0x7f0000000140)='umap\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f00000001c0)) unlink(&(0x7f0000000000)='./file0\x00') mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x1803) r1 = open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x0) writev(r1, &(0x7f0000001580)=[{0x0}], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = socket(0x12, 0x2, 0x0) ioctl$FIOSEEKHOLE(r2, 0xc0986981, &(0x7f0000000180)) setsockopt(r0, 0x1000000029, 0x19, &(0x7f0000000000)="eb", 0x1) mmap(&(0x7f00005a4000/0x4000)=nil, 0x4000, 0x2, 0x1010, r0, 0x0, 0xdd) compat_43_ogetsockname(r0, &(0x7f0000000040)=""/193, &(0x7f0000000140)=0xc1) (async) compat_43_ogetsockname(r0, &(0x7f0000000040)=""/193, &(0x7f0000000140)=0xc1) 1.243596979s ago: executing program 5: compat_40_mount(&(0x7f0000000080)='tmpfs\x00', &(0x7f00000000c0)='.\x00', 0x0, &(0x7f00000002c0)="01") lchown(0x0, 0x0, 0xffffffffffffffff) __mount50(&(0x7f00000002c0)='overlay\x00', &(0x7f0000000040)='.\x00', 0x0, &(0x7f0000000540), 0x0) socket(0x6, 0x2, 0x7) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x10, 0x1) link(&(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000d40)='./file0\x00') 1.027465583s ago: executing program 5: r0 = socket(0x18, 0x3, 0x0) pipe(&(0x7f0000000a40)={0xffffffffffffffff}) r2 = getpid() fktrace(r1, 0x0, 0x62e2dd08f149ff1b, r2) writev(r0, &(0x7f0000000300)=[{&(0x7f00000001c0)="5c0f755b2260b8bf532a08ed950d78ac31dfb2cd9be555db7d5153a85248e55b5c9f388d82f56a411fc123291d"}, {&(0x7f0000000240)="6016a6d333d592c8371a3b8512e6a51e91cfc3758198e821a2a18107e0727523eab4638e83a5cda7dd7771aaa303af482b87538c3db5dc6e5c00ab9920a0f0993d83e4983bddf1a24542b56eb2f5b27e1fd4106a42fbd0b3dc77ada906e54add09daa990ce938f7023ac079d3d5d38055b2ef5f6f26a083083cbc0018f21827e1ac0a766d6a9c888efa2732ec539ef2e5281c4b01b91c5a7129385cc6debabbb7ea6ad13ef917bb1f101e5af6b02cb31069c717fb49f20"}], 0x100000000000006a) 1.001084297s ago: executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) open(&(0x7f0000000180)='./file0\x00', 0x200, 0x0) r1 = getpid() ktrace(&(0x7f0000000000)='./file0\x00', 0x0, 0x40000538, r1) sendmsg$unix(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="28000000ffff035801"], 0x28}, 0x0) 886.573884ms ago: executing program 1: pipe(&(0x7f0000000040)) (async) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fktrace(r0, 0x0, 0xf0709cfa615b9be3, 0x0) mkdir(&(0x7f00000007c0)='./file0\x00', 0x0) execve(0x0, 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) compat_43_ocreat(&(0x7f0000000040)='./file0\x00', 0x33) compat_40_mount(&(0x7f0000000380)='tmpfs\x00', &(0x7f0000000000)='.\x00', 0x0, &(0x7f0000000140)="01") posix_spawn(0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x200, 0x0) (async) open$dir(&(0x7f0000000000)='./file0\x00', 0x200, 0x0) r1 = open(&(0x7f0000000480)='./file0\x00', 0x80000000000203, 0x4ebfac6bbaf7949) open(&(0x7f0000000200)='./file0\x00', 0x10000, 0x38) ioctl$FIOASYNC(r1, 0x8004667d, &(0x7f0000000040)=0x1) r2 = fcntl$dupfd(0xffffffffffffffff, 0xb, 0xffffffffffffffff) compat_43_ommap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x0, r2, 0x0) (async) compat_43_ommap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x0, r2, 0x0) compat_43_ocreat(0x0, 0x0) (async) compat_43_ocreat(0x0, 0x0) __mount50(&(0x7f0000000080)='v7fs\x00', &(0x7f0000000100)='./file0\x00', 0x800, &(0x7f0000000180)="67529fe28bbcd21da86481f1b261bc4bfd44948369de49938d6b9bf24ef93aa4a66ae38c57b89b47270af7521e062c72aceba66abf5ca678917bc5a105a341350ca7c98c0307c079af1d959d1311b3746d116920193860180ac0f15c7e9aa1be4b9b5633f785088ef512082797d2fc3343", 0x71) _ksem_timedwait(0x0, 0x0) (async) _ksem_timedwait(0x0, 0x0) syz_usb_connect(0x1, 0x0, 0x0, &(0x7f00000002c0)={0x4b, 0x0, 0x0, 0x0, 0x1, [{0x0, &(0x7f0000000300)=@string={0x0, 0x3, "3f2f5e033764e44184b372c2dd4187ab0b28b1a5bfcba0e55c1c259d26b53ef274f5240059e9a8289f339743026ca2d3ad56bd84fcad0853d79092c08c8fa60056083c41cb01c651f49c4f3ad5bc4631c2e26c810330686de10c9d"}}]}) socket(0x10, 0x2, 0x0) (async) r3 = socket(0x10, 0x2, 0x0) ioctl$FIOSEEKHOLE(r3, 0xc020690d, &(0x7f00000000c0)=0x8000000000000032) 440.777983ms ago: executing program 4: compat_43_ocreat(&(0x7f0000000040)='./file0\x00', 0x0) execve(0x0, 0x0, 0x0) socket$unix(0x1, 0x0, 0x0) compat_43_ocreat(0x0, 0x0) compat_40_mount(0x0, 0x0, 0x0, 0x0) mknod(0x0, 0x0, 0x0) open(0x0, 0x0, 0x0) compat_40_mount(&(0x7f0000000000)='tmpfs\x00', &(0x7f00000003c0)='.\x00', 0x0, &(0x7f0000000140)="01") _lwp_create(&(0x7f0000000100)={0x0, 0x0, {}, {}, {0x0, 0x0, '/)YR\x00'}}, 0x0, 0x0) __mount50(0x0, &(0x7f0000000040)='.\x00', 0xe680bf986d21abfb, &(0x7f0000000140), 0x0) open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) unmount(&(0x7f0000000000)='./file0\x00', 0x255a0100) 0s ago: executing program 2: socket$inet6(0x18, 0x3, 0x0) r0 = socket(0x2, 0x0, 0x0) setsockopt$sock_int(r0, 0xffff, 0x1001, &(0x7f0000000100)=0x80, 0x4) r1 = socket(0x11, 0x3, 0x0) open(&(0x7f00000003c0)='./file0\x00', 0x80000, 0x76209d917ae94f41) writev(0xffffffffffffffff, &(0x7f0000000280), 0x0) mknod(&(0x7f0000000080)='./file0\x00', 0x2000, 0x40000802) r2 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) r3 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x81) ioctl$FIOASYNC(r3, 0x80047401, &(0x7f0000000000)=0xb) ioctl$FIOASYNC(r2, 0x80047401, &(0x7f0000000040)=0x20) write(0xffffffffffffffff, &(0x7f0000000500)="1e3ac20fa2fbb43f4e790b92c675000000", 0xfffffffffffffdf0) getsockname(r0, &(0x7f0000000380), &(0x7f0000000400)=0xe) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000080)=' ', 0x1}], 0x1) connect(r0, &(0x7f0000000180)=@len=0x9, 0xe) fchflags(0xffffffffffffffff, 0x30000) sendto$unix(r1, &(0x7f0000000000)="b1000513000000000000000012000000000013fecea10500fef96ecf2ac72fd3357ae30200004e3039d2d236acf20b7804be38164991f7c8cf7f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f335c223e7d0c032bfa896443a421180000007226dee501d610a05f0fd38bfbb770c1f5a872c88106002ec589040000000c000000361b1257aea8c500002002fbfe0c2300008abfba0900000008e371a3f83437", 0xa6, 0x0, 0x0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x40, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000a40)="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", 0x191}], 0x1) r5 = open$dir(&(0x7f0000000000)='./file0\x00', 0x40000, 0x0) writev(r5, &(0x7f0000000540)=[{&(0x7f0000000200)="799340cf1e6f99ae1f7199ff5204e9e1c5a7e5f4b3b00337d9c195dd3f93b930baa0a84b1baa20f71d799c26771447c887c95c3e1b91b5840cfa329544e4403a0c8533fc2c6b6f62387bb748a99cd5449800e222e17eb9", 0x57}], 0x1) open(&(0x7f00000001c0)='./file0\x00', 0x1, 0x40) symlinkat(&(0x7f0000000280)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000340)='./file0\x00') mknod(&(0x7f0000000080)='./file0\x00', 0x2000, 0x40000802) socket$unix(0x1, 0x2, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x80, 0x38) compat_43_ocreat(&(0x7f0000000080)='./file2/file0\x00', 0x0) kernel console output (not intermixed with test programs): Jun 5 08:06:48 ci2-netbsd-kubsan-2 getty[947]: /dev/ttyE2: Device not configured NetBSD/amd64 (ci2-netbsd-kubsan-2.c.syzkaller.internal) (constty) login: Jun 5 08:06:48 ci2-netbsd-kubsan-2 getty[1230]: /dev/ttyE3: Device not configured Jun 5 08:06:48 ci2-netbsd-kubsan-2 getty[1229]: /dev/ttyE1: Device not configured Warning: Permanently added '10.128.0.51' (ED25519) to the list of known hosts. 2024/06/05 08:07:25 fuzzer started 2024/06/05 08:07:25 dialing manager at 10.128.0.163:30038 2024/06/05 08:07:26 starting 6 executor processes [ 120.1574938] load: 1.84 cmd: getty 1226 [ttyraw] 0.01u 0.13s 0% 1648k [ 123.4775013] WARNING: defaulted mmap() share type to MAP_PRIVATE (pid 1627 command syz-executor.2) [ 129.4174840] tap4: detached [ 137.4674725] uhub4: device problem, disabling port 1 [ 145.8274582] tap2: detached [ 146.5975249] tap5: detached [ 147.4774613] tap0: detached [ 147.9274588] WARNING: defaulted mmap() share type to MAP_PRIVATE (pid 2385 command syz-executor.4) [ 149.1174612] tap3: detached [ 153.2174574] pad0: outputs: 44100Hz, 16-bit, stereo [ 153.2330798] audio0 at pad0: playback [ 153.2475375] audio0: slinear_le:16 -> slinear_le:16 2ch 44100Hz, blk 1764 bytes (10ms) for playback [ 153.2774521] spkr1 at audio0: PC Speaker (synthesized) [ 153.2874532] wsbell at spkr1 not configured [ 154.0474626] spkr1: detached [ 154.0674553] audio0: detached [ 154.0874754] pad0: detached [ 154.8174553] superblock read failed [ 157.8374739] tap1: detached [ 159.7474386] tap4: detached [ 163.9474368] tap0: detached [ 166.0074400] btuart0: major 8 minor 262146 [ 166.0474376] btuart0: detached [ 169.8374359] tap2: detached [ 170.0074300] WARNING: module error: vfs load failed for `compat_12', error 2 [ 170.2574351] tap5: detached [ 170.9574421] superblock read failed [ 172.5474288] tap3: detached [ 188.0274052] WARNING: defaulted mmap() share type to MAP_PRIVATE (pid 3287 command syz-executor.3) [ 190.7074170] pad0: outputs: 44100Hz, 16-bit, stereo [ 190.7274188] audio0 at pad0: playback [ 190.7374027] audio0: slinear_le:16 -> slinear_le:16 2ch 44100Hz, blk 1764 bytes (10ms) for playback [ 190.7674230] spkr1 at audio0: PC Speaker (synthesized) [ 190.7774045] wsbell at spkr1 not configured [ 191.6774028] spkr1: detached [ 191.6899755] audio0: detached [ 191.7074050] pad0: detached [ 192.3891504] superblock read failed [ 193.7273959] tap1: detached [ 194.6473930] tap4: detached [ 198.9173710] tap0: detached [ 201.0473942] WARNING: defaulted mmap() share type to MAP_SHARED (pid 1065 command syz-executor.4) [ 201.1373913] WARNING: module error: vfs load failed for `S', error 2 [ 205.3973890] tap5: detached [ 206.5773888] WARNING: defaulted mmap() share type to MAP_PRIVATE (pid 1643 command syz-executor.1) [ 206.8074444] tap2: detached [ 210.3673721] tap3: detached [ 211.8773802] pad0: outputs: 44100Hz, 16-bit, stereo [ 211.8973672] audio0 at pad0: playback [ 211.9073905] audio0: slinear_le:16 -> slinear_le:16 2ch 44100Hz, blk 1764 bytes (10ms) for playback [ 211.9373714] spkr1 at audio0: PC Speaker (synthesized) [ 211.9473782] wsbell at spkr1 not configured [ 212.5674073] spkr1: detached [ 212.5806552] audio0: detached [ 212.5973717] pad0: detached [ 215.8673831] WARNING: defaulted mmap() share type to MAP_PRIVATE (pid 1435 command syz-executor.3) [ 220.3773908] tap4: detached [ 221.5573635] tap5: detached [ 223.7473817] btuart0: major 8 minor 262146 [ 223.8773562] btuart0: detached [ 225.9273561] WARNING: defaulted mmap() share type to MAP_SHARED (pid 1505 command syz-executor.5) [ 226.0073622] WARNING: module error: vfs load failed for `S', error 2 [ 226.0873647] tap1: detached [ 228.0073513] tap3: detached [ 232.2473541] WARNING: module error: vfs load failed for `compat_sysv_14', error 2 [ 232.8473529] tap2: detached [ 237.9473479] tap4: detached [ 243.1874690] tap1: detached [ 244.6973483] tap3: detached [ 249.2073278] WARNING: defaulted mmap() share type to MAP_PRIVATE (pid 3656 command syz-executor.3) [ 253.6573409] tap5: detached [ 253.8373244] tap2: detached [ 255.9073559] tap4: detached [ 258.0073178] tap0: detached [ 258.8573127] WARNING: module error: vfs load failed for `compat_sysv_14', error 2 [ 260.7773268] WARNING: defaulted mmap() share type to MAP_PRIVATE (pid 3665 command syz-executor.5) [ 263.2273077] WARNING: module error: vfs load failed for `v7fs', error 2 [ 269.0272977] tap4: detached [ 276.0373556] tap0: detached [ 279.7272845] tap3: detached [ 284.1972833] WARNING: module error: vfs load failed for `v7fs', error 2 [ 284.6572813] tap4: detached [ 285.6672734] tap1: detached [ 288.9972735] WARNING: module error: vfs load failed for `nilfs', error 2 [ 292.7572664] tap2: detached ./file0./file0le0nfss.4M O"nGK [ 293.8872645] tap5: detached [ 294.6972644] tap0: detached [ 296.5972649] WARNING: defaulted mmap() share type to MAP_SHARED (pid 2151 command syz-executor.2) [ 296.7373760] tap3: detached [ 300.4072608] tap4: detached [ 308.3972444] WARNING: module error: vfs load failed for `compat_12', error 2 [ 308.4772606] tap2: detached [ 309.8072816] tap0: detached [ 311.8372501] .: failed to start extattr, error = 0WARNING: module error: vfs load failed for `adosfs', error 2 [ 313.3472647] tap5: detached [ 315.2172558] .: failed to start extattr, error = 0[ 317.1872483] tap1: detached [ 319.8672396] WARNING: defaulted mmap() share type to MAP_PRIVATE (pid 2300 command syz-executor.1) [ 320.0173681] tap4: detached [ 323.5184176] tap2: detached [ 325.7572248] .: failed to start extattr, error = 0panic: kernel diagnostic assertion "vm_map_min(map) <= start" failed: file "/syzkaller/managers/ci2-netbsd-kubsan/kernel/sys/uvm/uvm_km.c", line 515 vm_map_min(map) [0xffffd10000000000] <= start [0xffffcc9140e6a7c8] (size=0x32708000) [ 325.8871874] cpu1: Begin traceback... [ 326.0071943] vpanic() at netbsd:vpanic+0x2f0 2024/06/05 08:11:09 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 326.4071954] kern_assert() at netbsd:kern_assert+0x65 [ 326.7272732] uvm_km_pgremove_intrsafe() at netbsd:uvm_km_pgremove_intrsafe+0x566 [ 327.0071899] uvm_km_kmem_free() at netbsd:uvm_km_kmem_free+0x58 [ 327.2772018] kmem_intr_free() at netbsd:kmem_intr_free+0x43b [ 327.5571854] kern_free() at netbsd:kern_free+0x86 [ 327.8471870] netexport_clear() at netbsd:netexport_clear+0x37a [ 328.1471862] netexport_unmount() at netbsd:netexport_unmount+0xa5 [ 328.4271993] vfs_hooks_unmount() at netbsd:vfs_hooks_unmount+0x66 [ 328.6971873] dounmount() at netbsd:dounmount+0x306 [ 328.9771846] sys_unmount() at netbsd:sys_unmount+0x224 [ 329.2471855] sys___syscall() at netbsd:sys___syscall+0x1e4 [ 329.5371853] syscall() at netbsd:syscall+0x28b [ 329.5971878] --- syscall (number 22 via SYS_syscall) --- [ 329.6871870] netbsd:syscall+0x28b: [ 329.6971907] cpu1: End traceback... [ 329.7071852] fatal breakpoint trap in supervisor mode [ 329.7171882] trap type 1 code 0 rip 0xffffffff80235475 cs 0x8 rflags 0x246 cr2 0x20000040 ilevel 0 rsp 0xffffd102484efb00 [ 329.7471883] curlwp 0xffffcc91447d0a40 pid 2439.1950 lowest kstack 0xffffd102484eb2c0 Stopped in pid 2439.1950 (syz-executor.4) at netbsd:breakpoint+0x5: leave ? breakpoint() at netbsd:breakpoint+0x5 db_panic() at netbsd:db_panic+0xec vpanic() at netbsd:vpanic+0x2f0 kern_assert() at netbsd:kern_assert+0x65 uvm_km_pgremove_intrsafe() at netbsd:uvm_km_pgremove_intrsafe+0x566 uvm_km_kmem_free() at netbsd:uvm_km_kmem_free+0x58 kmem_intr_free() at netbsd:kmem_intr_free+0x43b kern_free() at netbsd:kern_free+0x86 netexport_clear() at netbsd:netexport_clear+0x37a netexport_unmount() at netbsd:netexport_unmount+0xa5 vfs_hooks_unmount() at netbsd:vfs_hooks_unmount+0x66 dounmount() at netbsd:dounmount+0x306 sys_unmount() at netbsd:sys_unmount+0x224 sys___syscall() at netbsd:sys___syscall+0x1e4 syscall() at netbsd:syscall+0x28b --- syscall (number 22 via SYS_syscall) --- netbsd:syscall+0x28b: Panic string: kernel diagnostic assertion "vm_map_min(map) <= start" failed: file "/syzkaller/managers/ci2-netbsd-kubsan/kernel/sys/uvm/uvm_km.c", line 515 vm_map_min(map) [0xffffd10000000000] <= start [0xffffcc9140e6a7c8] (size=0x32708000) PID LID S CPU FLAGS STRUCT LWP * NAME WAIT 3666 3666 3 1 0 ffffcc9133b1b2c0 syz-executor.2 vm_map 2439 > 1950 7 1 0 ffffcc91447d0a40 syz-executor.4 2439 1931 3 0 180 ffffcc91416f26c0 syz-executor.4 parked 2439 2439 2 0 10000000 ffffcc9142d64200 syz-executor.4 2276 2276 2 1 0 ffffcc91447d0600 syz-executor.3 2292 2292 3 1 0 ffffcc914143fb40 syz-executor.0 vm_map 3180 3180 2 1 140 ffffcc9135e60100 syz-executor.2 2274 2274 3 0 180 ffffcc91447d01c0 syz-executor.3 parked 4152 4152 2 0 140 ffffcc9141241080 syz-executor.4 2207 2207 3 0 0 ffffcc913e255580 syz-executor.1 vm_map 4047 4047 3 0 0 ffffcc913c7b6980 syz-executor.5 vm_map 3118 3118 3 0 180 ffffcc91347e5080 syz-executor.2 parked 3434 3434 3 0 180 ffffcc9135afca80 syz-executor.5 parked 1575 1575 3 1 180 ffffcc9141c31780 syz-executor.1 parked 1735 1735 3 0 180 ffffcc9134f80480 syz-executor.0 parked 2245 2142 3 0 11100000 ffffcc9134229740 syz-executor.0 vfork 2245 2245 2 1 11000040 ffffcc913c7b6540 syz-executor.0 715 715 3 0 180 ffffcc9134f808c0 syz-executor.5 parked 1082 2644 3 0 180 ffffcc91379d4240 syz-fuzzer wait 1082 460 3 0 180 ffffcc91340e7780 syz-fuzzer wait 1082 1211 2 1 0 ffffcc91379d4680 syz-fuzzer 1082 1205 3 1 180 ffffcc9135e60540 syz-fuzzer wait 1082 930 3 0 180 ffffcc91347e5900 syz-fuzzer parked 1082 1202 3 1 180 ffffcc9135869140 syz-fuzzer wait 1082 1244 2 0 0 ffffcc9135869580 syz-fuzzer 1082 1246 3 1 180 ffffcc9133b1b700 syz-fuzzer wait 1082 449 3 0 180 ffffcc91359f71c0 syz-fuzzer parked 1082 1120 3 1 180 ffffcc91355c2180 syz-fuzzer parked 1082 945 3 1 180 ffffcc91358699c0 syz-fuzzer parked 1082 1076 3 0 180 ffffcc9135afc200 syz-fuzzer parked 1082 1241 2 0 0 ffffcc91359f7a40 syz-fuzzer 1082 1082 3 1 180 ffffcc91359f7600 syz-fuzzer wait 943 943 3 0 180 ffffcc9133a23b00 sshd select 1230 1230 3 0 180 ffffcc9135afc640 getty nanoslp 947 947 3 0 180 ffffcc9133a23280 getty nanoslp 1229 1229 3 1 180 ffffcc9133a236c0 getty nanoslp 1226 1226 3 1 180 ffffcc91336bcac0 getty ttyraw 1114 1114 3 0 180 ffffcc91355c2a00 sshd select 957 957 3 1 180 ffffcc91355c25c0 powerd kqueue 695 695 3 1 180 ffffcc91342d8300 syslogd kqueue 560 560 3 1 180 ffffcc9134a7f940 dhcpcd poll 747 747 3 1 180 ffffcc91340e7bc0 dhcpcd poll 745 745 2 1 0 ffffcc9134f80040 dhcpcd 486 486 3 0 180 ffffcc91342d8740 dhcpcd poll 487 487 3 1 180 ffffcc91336bf200 dhcpcd poll 292 292 2 1 0 ffffcc91340e7340 dhcpcd 1 1 3 1 180 ffffcc912b48f100 init wait 0 3745 5 0 200 ffffcc913e2559c0 (zombie) 0 3258 3 0 200 ffffcc9141a18180 ktrace ktrwait 0 3925 3 0 200 ffffcc9134a7f0c0 ktrace ktrwait 0 1416 3 1 200 ffffcc914143f2c0 ktrace ktrwait 0 2110 3 0 200 ffffcc91347e54c0 ktrace ktrwait 0 989 3 0 200 ffffcc91336bf640 physiod physiod 0 196 3 0 200 ffffcc91336bc680 pooldrain pooldrain 0 195 2 0 240 ffffcc91336bc240 ioflush 0 194 3 1 200 ffffcc91336bfa80 pgdaemon pgdaemon 0 170 3 1 200 ffffcc91315e6a40 usb7 usbevt 0 169 3 1 200 ffffcc91315e6600 usb6 usbevt 0 168 3 1 200 ffffcc91315e61c0 usb5 usbevt 0 167 3 1 200 ffffcc912e541a00 usb4 usbevt 0 166 3 0 200 ffffcc912e5415c0 usb3 usbevt 0 165 3 0 200 ffffcc912e541180 usb2 usbevt 0 31 3 0 200 ffffcc912c5049c0 usb1 usbevt 0 63 3 0 200 ffffcc912c504580 usb0 usbevt 0 126 3 0 200 ffffcc912c504140 usbtask-dr usbtsk 0 125 3 1 200 ffffcc912b48f980 usbtask-hc usbtsk 0 124 3 0 200 ffffcc9129895b00 swwreboot swwreboot 0 123 2 0 240 ffffcc912b48f540 npfgc0 0 122 3 1 200 ffffcc912b455940 rt_free rt_free 0 121 3 1 200 ffffcc912b455500 unpgc unpgc 0 120 3 0 200 ffffcc912b4550c0 key_timehandler key_timehandler 0 119 3 1 200 ffffcc912b44f900 icmp6_wqinput/1 icmp6_wqinput 0 118 3 0 200 ffffcc912b44f4c0 icmp6_wqinput/0 icmp6_wqinput 0 117 3 0 200 ffffcc912b44f080 nd6_timer nd6_timer 0 116 3 1 200 ffffcc912b42b8c0 carp6_wqinput/1 carp6_wqinput 0 115 3 0 200 ffffcc912b42b480 carp6_wqinput/0 carp6_wqinput 0 114 3 1 200 ffffcc912b42b040 carp_wqinput/1 carp_wqinput 0 113 3 0 200 ffffcc912b3debc0 carp_wqinput/0 carp_wqinput 0 112 3 1 200 ffffcc912b2ff740 icmp_wqinput/1 icmp_wqinput 0 111 3 0 200 ffffcc912b2ffb80 icmp_wqinput/0 icmp_wqinput 0 110 3 0 200 ffffcc912b3de340 rt_timer rt_timer 0 109 3 1 200 ffffcc912b3de780 vmem_rehash vmem_rehash 0 100 3 1 200 ffffcc912b2ff300 entbutler entropy 0 99 3 0 200 ffffcc912ad3eb40 viomb balloon 0 98 3 1 200 ffffcc912ad3e700 vioif0_txrx/1 vioif0_txrx 0 97 3 0 200 ffffcc912ad3e2c0 vioif0_txrx/0 vioif0_txrx 0 30 3 0 200 ffffcc91298956c0 scsibus0 sccomp 0 29 3 1 200 ffffcc9129895280 pms0 pmsreset 0 28 3 1 200 ffffcc91297b5ac0 xcall/1 xcall 0 27 1 1 200 ffffcc91297b5680 softser/1 0 26 1 1 200 ffffcc91297b5240 softclk/1 0 25 1 1 200 ffffcc9129798a80 softbio/1 0 24 1 1 200 ffffcc9129798640 softnet/1 0 23 1 1 201 ffffcc9129798200 idle/1 0 22 3 1 200 ffffcc9257b33a40 lnxsyswq lnxsyswq 0 21 3 1 200 ffffcc9257b33600 lnxubdwq lnxubdwq 0 20 3 0 200 ffffcc9257b331c0 lnxpwrwq lnxpwrwq 0 19 3 0 200 ffffcc9257b42a00 lnxlngwq lnxlngwq 0 18 3 1 200 ffffcc9257b425c0 lnxhipwq lnxhipwq 0 17 3 0 200 ffffcc9257b42180 lnxrcugc lnxrcugc 0 16 3 0 200 ffffcc9257b599c0 sysmon smtaskq 0 15 3 0 200 ffffcc9257b59580 pmfsuspend pmfsuspend 0 14 3 1 200 ffffcc9257b59140 pmfevent pmfevent 0 13 3 1 200 ffffcc9257b6c980 sopendfree sopendfr 0 12 3 0 200 ffffcc9257b6c540 ifwdog ifwdog 0 11 3 0 200 ffffcc9257b6c100 iflnkst iflnkst 0 10 3 0 200 ffffcc9258b97940 nfssilly nfssilly 0 9 3 0 200 ffffcc9258b97500 pooldisp pooldisp 0 8 3 0 200 ffffcc9258b970c0 modunload mod_unld 0 7 3 0 200 ffffcc9258bc2900 xcall/0 xcall 0 6 1 0 200 ffffcc9258bc24c0 softser/0 0 5 1 0 200 ffffcc9258bc2080 softclk/0 0 4 1 0 200 ffffcc9258bed8c0 softbio/0 0 3 1 0 200 ffffcc9258bed480 softnet/0 0 2 1 0 201 ffffcc9258bed040 idle/0 0 > 0 7 0 240 ffffffff86795c80 swapper [Locks tracked through LWPs] ****** LWP 3666.3666 (syz-executor.2) @ 0xffffcc9133b1b2c0, l_stat=3 *** Locks held: * Lock 0 (initialized at netbsd:lwp_ctl_alloc+0xd85) lock address : ffffcc9137f571c0 type : sleep/adaptive initialized : netbsd:lwp_ctl_alloc+0xd85 shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 0 relevant cpu : 1 last held: 1 relevant lwp : 0xffffcc9133b1b2c0 last held: 0xffffcc9133b1b2c0 last locked* : netbsd:lwp_ctl_alloc+0x1da unlocked : 0 owner field : 0xffffcc9133b1b2c0 wait/spin: 0/0 Turnstile: no active turnstile for this lock. *** Locks wanted: none ****** LWP 2439.1950 (syz-executor.4) @ 0xffffcc91447d0a40, l_stat=7 *** Locks held: * Lock 0 (initialized at netbsd:vfsinit+0x303) lock address : netbsd:vfs_hooks_lock type : sleep/adaptive initialized : netbsd:vfsinit+0x303 shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 0 relevant cpu : 1 last held: 1 relevant lwp : 0xffffcc91447d0a40 last held: 0xffffcc91447d0a40 last locked* : netbsd:vfs_hooks_unmount+0x21 unlocked : netbsd:vfs_hooks_reexport+0xcb owner field : 0xffffcc91447d0a40 wait/spin: 0/0 Turnstile: no active turnstile for this lock. * Lock 1 (initialized at netbsd:nfsserver_modcmd+0xd5) lock address : netbsd:netexport_lock type : sleep/adaptive initialized : netbsd:nfsserver_modcmd+0xd5 shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 0 relevant cpu : 1 last held: 1 relevant lwp : 0xffffcc91447d0a40 last held: 0xffffcc91447d0a40 last locked* : netbsd:netexport_unmount+0x34 unlocked : netbsd:mountd_set_exports_list.part.0+0x32b owner/count : 0xffffcc91447d0a40 flags : 0x0000000000000004 Turnstile: no active turnstile for this lock. *** Locks wanted: none ****** LWP 2276.2276 (syz-executor.3) @ 0xffffcc91447d0600, l_stat=2 *** Locks held: * Lock 0 (initialized at netbsd:kcov_open+0x52) lock address : ffffcc9137fd6a00 type : sleep/adaptive initialized : netbsd:kcov_open+0x52 shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 0 relevant cpu : 1 last held: 1 relevant lwp : 0xffffcc91447d0600 last held: 0xffffcc91447d0600 last locked* : netbsd:kcov_fops_ioctl+0x5c unlocked : 0 owner field : 0xffffcc91447d0600 wait/spin: 0/0 Turnstile: no active turnstile for this lock. *** Locks wanted: none ****** LWP 2292.2292 (syz-executor.0) @ 0xffffcc914143fb40, l_stat=3 *** Locks held: * Lock 0 (initialized at netbsd:kcov_open+0x52) lock address : ffffcc913a2e9400 type : sleep/adaptive initialized : netbsd:kcov_open+0x52 shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 0 relevant cpu : 1 last held: 0 relevant lwp : 0xffffcc914143fb40 last held: 0xffffcc914143fb40 last locked* : netbsd:kcov_fops_ioctl+0x5c unlocked : 0 owner field : 0xffffcc914143fb40 wait/spin: 0/0 Turnstile: no active turnstile for this lock. *** Locks wanted: none ****** LWP 4152.4152 (syz-executor.4) @ 0xffffcc9141241080, l_stat=2 *** Locks held: * Lock 0 (initialized at netbsd:ktrinit+0x20) lock address : netbsd:ktrace_lock type : sleep/adaptive initialized : netbsd:ktrinit+0x20 shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 0 relevant cpu : 0 last held: 0 relevant lwp : 0xffffcc9141241080 last held: 0xffffcc9141241080 last locked* : netbsd:ktraddentry+0x58 unlocked : netbsd:ktraddentry+0x829 owner field : 000000000000000000 wait/spin: 0/0 Turnstile: no active turnstile for this lock. *** Locks wanted: none ****** LWP 2207.2207 (syz-executor.1) @ 0xffffcc913e255580, l_stat=3 *** Locks held: * Lock 0 (initialized at netbsd:fork1+0x4c5) lock address : ffffcc91356e2350 type : sleep/adaptive initialized : netbsd:fork1+0x4c5 shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 0 relevant cpu : 0 last held: 0 relevant lwp : 0xffffcc913e255580 last held: 0xffffcc913e255580 last locked* : netbsd:exit1+0x393 unlocked : netbsd:execve_runproc+0x2c3b owner/count : 0xffffcc913e255580 flags : 0x0000000000000004 Turnstile: no active turnstile for this lock. *** Locks wanted: none ****** LWP 4047.4047 (syz-executor.5) @ 0xffffcc913c7b6980, l_stat=3 *** Locks held: * Lock 0 (initialized at netbsd:fork1+0x4c5) lock address : ffffcc913560fbd0 type : sleep/adaptive initialized : netbsd:fork1+0x4c5 shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 0 relevant cpu : 0 last held: 1 relevant lwp : 0xffffcc913c7b6980 last held: 0xffffcc913c7b6980 last locked* : netbsd:exit1+0x393 unlocked : netbsd:execve_runproc+0x2c3b owner/count : 0xffffcc913c7b6980 flags : 0x0000000000000004 Turnstile: no active turnstile for this lock. *** Locks wanted: none ****** LWP 747.747 (dhcpcd) @ 0xffffcc91340e7bc0, l_stat=3 *** Locks held: none *** Locks wanted: * Lock 0 (initialized at netbsd:module_hook_init+0x1c) lock address : netbsd:module_hook type : sleep/adaptive initialized : netbsd:module_hook_init+0x1c shared holds : 0 exclusive: 0 shares wanted: 0 exclusive: 0 relevant cpu : 1 last held: 0 relevant lwp : 0xffffcc91340e7bc0 last held: 000000000000000000 last locked : 0 unlocked* : 0 owner field : 000000000000000000 wait/spin: 0/0 Turnstile: no active turnstile for this lock. ****** LWP 745.745 (dhcpcd) @ 0xffffcc9134f80040, l_stat=2 *** Locks held: none *** Locks wanted: * Lock 0 (initialized at netbsd:module_hook_init+0x1c) lock address : netbsd:module_hook type : sleep/adaptive initialized : netbsd:module_hook_init+0x1c shared holds : 0 exclusive: 0 shares wanted: 0 exclusive: 0 relevant cpu : 1 last held: 0 relevant lwp : 0xffffcc9134f80040 last held: 000000000000000000 last locked : 0 unlocked* : 0 owner field : 000000000000000000 wait/spin: 0/0 Turnstile: no active turnstile for this lock. ****** LWP 487.487 (dhcpcd) @ 0xffffcc91336bf200, l_stat=3 *** Locks held: none *** Locks wanted: * Lock 0 (initialized at netbsd:module_hook_init+0x1c) lock address : netbsd:module_hook type : sleep/adaptive initialized : netbsd:module_hook_init+0x1c shared holds : 0 exclusive: 0 shares wanted: 0 exclusive: 0 relevant cpu : 1 last held: 0 relevant lwp : 0xffffcc91336bf200 last held: 000000000000000000 last locked : 0 unlocked* : 0 owner field : 000000000000000000 wait/spin: 0/0 Turnstile: no active turnstile for this lock. ****** LWP 292.292 (dhcpcd) @ 0xffffcc91340e7340, l_stat=2 *** Locks held: none *** Locks wanted: * Lock 0 (initialized at netbsd:module_hook_init+0x1c) lock address : netbsd:module_hook type : sleep/adaptive initialized : netbsd:module_hook_init+0x1c shared holds : 0 exclusive: 0 shares wanted: 0 exclusive: 0 relevant cpu : 1 last held: 0 relevant lwp : 0xffffcc91340e7340 last held: 000000000000000000 last locked : 0 unlocked* : 0 owner field : 000000000000000000 wait/spin: 0/0 Turnstile: no active turnstile for this lock. ****** LWP 0.26 (softclk/1) @ 0xffffcc91297b5240, l_stat=1 *** Locks held: none *** Locks wanted: * Lock 0 (initialized at netbsd:module_hook_init+0x1c) lock address : netbsd:module_hook type : sleep/adaptive initialized : netbsd:module_hook_init+0x1c shared holds : 0 exclusive: 0 shares wanted: 0 exclusive: 0 relevant cpu : 1 last held: 0 relevant lwp : 0xffffcc91297b5240 last held: 000000000000000000 last locked : 0 unlocked* : 0 owner field : 000000000000000000 wait/spin: 0/0 Turnstile: no active turnstile for this lock. ****** LWP 0.11 (iflnkst) @ 0xffffcc9257b6c100, l_stat=3 *** Locks held: none *** Locks wanted: * Lock 0 (initialized at netbsd:module_hook_init+0x1c) lock address : netbsd:module_hook type : sleep/adaptive initialized : netbsd:module_hook_init+0x1c shared holds : 0 exclusive: 0 shares wanted: 0 exclusive: 0 relevant cpu : 0 last held: 0 relevant lwp : 0xffffcc9257b6c100 last held: 000000000000000000 last locked : 0 unlocked* : 0 owner field : 000000000000000000 wait/spin: 0/0 Turnstile: no active turnstile for this lock. ****** LWP 0.5 (softclk/0) @ 0xffffcc9258bc2080, l_stat=1 *** Locks held: none *** Locks wanted: * Lock 0 (initialized at netbsd:module_hook_init+0x1c) lock address : netbsd:module_hook type : sleep/adaptive initialized : netbsd:module_hook_init+0x1c shared holds : 0 exclusive: 0 shares wanted: 0 exclusive: 0 relevant cpu : 0 last held: 0 relevant lwp : 0xffffcc9258bc2080 last held: 000000000000000000 last locked : 0 unlocked* : 0 owner field : 000000000000000000 wait/spin: 0/0 Turnstile: no active turnstile for this lock. ****** LWP 0.0 (swapper) @ 0xffffffff86795c80, l_stat=7 *** Locks held: none *** Locks wanted: * Lock 0 (initialized at netbsd:module_hook_init+0x1c) lock address : netbsd:module_hook type : sleep/adaptive initialized : netbsd:module_hook_init+0x1c shared holds : 0 exclusive: 0 shares wanted: 0 exclusive: 0 relevant cpu : 0 last held: 0 relevant lwp : 0xffffffff86795c80 last held: 000000000000000000 last locked : 0 unlocked* : 0 owner field : 000000000000000000 wait/spin: 0/0 Turnstile: no active turnstile for this lock. [Locks tracked through CPUs] ******* Locks held on cpu0: * Lock 0 (initialized at netbsd:callout_init_cpu+0x23b) lock address : ffffcc9257aa3c40 type : spin initialized : netbsd:callout_init_cpu+0x23b shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 0 relevant cpu : 0 last held: 0 relevant lwp : 0xffffffff86795c80 last held: 0xffffcc9141241080 last locked* : netbsd:callout_pending+0x92 unlocked : netbsd:callout_pending+0xdb owner field : 0x0000000000000700 wait/spin: 0/1 ******* Locks held on cpu1: * Lock 0 (initialized at netbsd:kprintf_init+0x72) lock address : netbsd:kprintf_mtx type : spin initialized : netbsd:kprintf_init+0x72 shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 0 relevant cpu : 1 last held: 1 relevant lwp : 0xffffcc91447d0a40 last held: 0xffffcc91447d0a40 last locked* : netbsd:kprintf_lock+0x50 unlocked : netbsd:kprintf_unlock+0x70 owner field : 0x0000000000000800 wait/spin: 0/1 PAGE FLAG PQ UOBJECT UANON 0xffffd10000007180 0045 00000000 0x0 0x0 0xffffd10000007200 0045 00000000 0x0 0x0 0xffffd10000007280 0045 00000000 0x0 0x0 0xffffd10000007300 0045 00000000 0x0 0x0 0xffffd10000007380 0045 00000000 0x0 0x0 0xffffd10000007400 0045 00000000 0x0 0x0 0xffffd10000007480 0045 00000000 0x0 0x0 0xffffd10000007500 0045 00000000 0x0 0x0 0xffffd10000007580 0045 00000000 0x0 0x0 0xffffd10000007600 0045 00000000 0x0 0x0 0xffffd10000007680 0041 00000000 0x0 0x0 0xffffd10000007700 0041 00000000 0x0 0x0 0xffffd10000007780 0041 00000000 0x0 0x0 0xffffd10000007800 0041 00000000 0x0 0x0 0xffffd10000007880 0041 00000000 0x0 0x0 0xffffd10000007900 0045 00000000 0x0 0x0 0xffffd10000007980 0041 00000000 0x0 0x0 0xffffd10000007a00 0041 00000000 0x0 0x0 0xffffd10000007a80 0041 00000000 0x0 0x0 0xffffd10000007b00 0041 00000000 0x0 0x0 0xffffd10000007b80 0041 00000000 0x0 0x0 0xffffd10000007c00 0041 00000000 0x0 0x0 0xffffd10000007c80 0041 00000000 0x0 0x0 0xffffd10000007d00 0041 00000000 0x0 0x0 0xffffd10000007d80 0041 00000000 0x0 0x0 0xffffd10000007e00 0041 00000000 0x0 0x0 0xffffd10000007e80 0041 00000000 0x0 0x0 0xffffd10000007f00 0041 00000000 0x0 0x0 0xffffd10000007f80 0041 00000000 0x0 0x0 0xffffd10000008000 0041 00000000 0x0 0x0 0xffffd10000008080 0041 00000000 0x0 0x0 0xffffd10000008100 0041 00000000 0x0 0x0 0xffffd10000008180 0041 00000000 0x0 0x0 0xffffd10000008200 0041 00000000 0x0 0x0 0xffffd10000008280 0041 00000000 0x0 0x0 0xffffd10000008300 0041 00000000 0x0 0x0 0xffffd10000008380 0041 00000000 0x0 0x0 0xffffd10000008400 0041 00000000 0x0 0x0 0xffffd10000008480 0041 00000000 0x0 0x0 0xffffd10000008500 0041 00000000 0x0 0x0 0xffffd10000008580 0041 00000000 0x0 0x0 0xffffd10000008600 0045 00000000 0x0 0x0 0xffffd10000008680 0041 00000000 0x0 0x0 0xffffd10000008700 0041 00000000 0x0 0x0 0xffffd10000008780 0041 00000000 0x0 0x0 0xffffd10000008800 0041 00000000 0x0 0x0 0xffffd10000008880 0041 00000000 0x0 0x0 0xffffd10000008900 0041 00000000 0x0 0x0 0xffffd10000008980 0041 00000000 0x0 0x0 0xffffd10000008a00 0041 00000000 0x0 0x0 0xffffd10000008a80 0041 00000000 0x0 0x0 0xffffd10000008b00 0041 00000000 0x0 0x0 0xffffd10000008b80 0041 00000000 0x0 0x0 0xffffd10000008c00 0041 00000000 0x0 0x0 0xffffd10000008c80 0041 00000000 0x0 0x0 0xffffd10000008d00 0041 00000000 0x0 0x0 0xffffd10000008d80 0041 00000000 0x0 0x0 0xffffd10000008e00 0041 00000000 0x0 0x0 0xffffd10000008e80 0041 00000000 0x0 0x0 0xffffd10000008f00 0041 00000000 0x0 0x0 0xffffd10000008f80 0041 00000000 0x0 0x0 0xffffd10000009000 0041 00000000 0x0 0x0 0xffffd10000009080 0041 00000000 0x0 0x0 0xffffd10000009100 0045 00000000 0x0 0x0 0xffffd10000009180 0045 00000000 0x0 0x0 0xffffd10000009200 0041 00000000 0x0 0x0 0xffffd10000009280 0041 00000000 0x0 0x0 0xffffd10000009300 0041 00000000 0x0 0x0 0xffffd10000009380 0041 00000000 0x0 0x0 0xffffd10000009400 0041 00000000 0x0 0x0 0xffffd10000009480 0041 00000000 0x0 0x0 0xffffd10000009500 0041 00000000 0x0 0x0 0xffffd10000009580 0041 00000000 0x0 0x0 0xffffd10000009600 0041 00000000 0x0 0x0 0xffffd10000009680 0041 00000000 0x0 0x0 0xffffd10000009700 0041 00000000 0x0 0x0 0xffffd10000009780 0041 00000000 0x0 0x0 0xffffd10000009800 0041 00000000 0x0 0x0 0xffffd10000009880 0041 00000000 0x0 0x0 0xffffd10000009900 0041 00000000 0x0 0x0 0xffffd10000009980 0041 00000000 0x0 0x0 0xffffd10000009a00 0041 00000000 0x0 0x0 0xffffd10000009a80 0041 00000000 0x0 0x0 0xffffd10000009b00 0041 00000000 0x0 0x0 0xffffd10000009b80 0041 00000000 0x0 0x0 0xffffd10000009c00 0041 00000000 0x0 0x0 0xffffd10000009c80 0041 00000000 0x0 0x0 0xffffd10000009d00 0041 00000000 0x0 0x0 0xffffd10000009d80 0041 00000000 0x0 0x0 0xffffd10000009e00 0041 00000000 0x0 0x0 0xffffd10000009e80 0041 00000000 0x0 0x0 0xffffd10000009f00 0041 00000000 0x0 0x0 0xffffd10000009f80 0045 00000000 0x0 0x0 0xffffd1000000a000 0041 00000000 0x0 0x0 0xffffd1000000a080 0041 00000000 0x0 0x0 0xffffd1000000a100 0041 00000000 0x0 0x0 0xffffd1000000a180 0041 00000000 0x0 0x0 0xffffd1000000a200 0041 00000000 0x0 0x0 0xffffd1000000a280 0041 00000000 0x0 0x0 0xffffd1000000a300 0041 00000000 0x0 0x0 0xffffd1000000a380 0041 00000000 0x0 0x0 0xffffd1000000a400 0041 00000000 0x0 0x0 0xffffd1000000a480 0041 00000000 0x0 0x0 0xffffd1000000a500 0041 00000000 0x0 0x0 0xffffd1000000a580 0041 00000000 0x0 0x0 0xffffd1000000a600 0041 00000000 0x0 0x0 0xffffd1000000a680 0041 00000000 0x0 0x0 0xffffd1000000a700 0041 00000000 0x0 0x0 0xffffd1000000a780 0041 00000000 0x0 0x0 0xffffd1000000a800 0041 00000000 0x0 0x0 0xffffd1000000a880 0041 00000000 0x0 0x0 0xffffd1000000a900 0041 00000000 0x0 0x0 0xffffd1000000a980 0041 00000000 0x0 0x0 0xffffd1000000aa00 0041 00000000 0x0 0x0 0xffffd1000000aa80 0041 00000000 0x0 0x0 0xffffd1000000ab00 0041 00000000 0x0 0x0 0xffffd1000000ab80 0041 00000000 0x0 0x0 0xffffd1000000ac00 0041 00000000 0x0 0x0 0xffffd1000000ac80 0041 00000000 0x0 0x0 0xffffd1000000ad00 0041 00000000 0x0 0x0 0xffffd1000000ad80 0041 00000000 0x0 0x0 0xffffd1000000ae00 0041 00000000 0x0 0x0 0xffffd1000000ae80 0041 00000000 0x0 0x0 0xffffd1000000af00 0041 00000000 0x0 0x0 0xffffd1000000af80 0041 00000000 0x0 0x0 0xffffd1000000b000 0045 00000000 0x0 0x0 0xffffd1000000b080 0041 00000000 0x0 0x0 0xffffd1000000b100 0041 00000000 0x0 0x0 0xffffd1000000b180 0041 00000000 0x0 0x0 0xffffd1000000b200 0045 00000000 0x0 0x0 0xffffd1000000b280 0045 00000000 0x0 0x0 0xffffd1000000b300 0045 00000000 0x0 0x0 0xffffd1000000b380 0045 00000000 0x0 0x0 0xffffd1000000b400 0045 00000000 0x0 0x0 0xffffd1000000b480 0045 00000000 0x0 0x0 0xffffd1000000b500 0041 00000000 0x0 0x0 0xffffd1000000b580 0041 00000000 0x0 0x0 0xffffd1000000b600 0045 00000000 0x0 0x0 0xffffd1000000b680 0045 00000000 0x0 0x0 0xffffd1000000b700 0045 00000000 0x0 0x0 0xffffd1000000b780 0045 00000000 0x0 0x0 0xffffd1000000b800 0045 00000000 0x0 0x0 0xffffd1000000b880 0045 00000000 0x0 0x0 0xffffd1000000b900 0045 00000000 0x0 0x0 0xffffd1000000b980 0045 00000000 0x0 0x0 0xffffd1000000ba00 0045 00000000 0x0 0x0 0xffffd1000000ba80 0045 00000000 0x0 0x0 0xffffd1000000bb00 0045 00000000 0x0 0x0 0xffffd1000000bb80 0045 00000000 0x0 0x0 0xffffd1000000bc00 0045 00000000 0x0 0x0 0xffffd1000000bc80 0045 00000000 0x0 0x0 0xffffd1000000bd00 0045 00000000 0x0 0x0 0xffffd1000000bd80 0045 00000000 0x0 0x0 0xffffd1000000be00 0045 00000000 0x0 0x0 0xffffd1000000be80 0045 00000000 0x0 0x0 0xffffd1000000bf00 0045 00000000 0x0 0x0 0xffffd1000000bf80 0045 00000000 0x0 0x0 0xffffd1000000c000 0045 00000000 0x0 0x0 0xffffd1000000c080 0045 00000000 0x0 0x0 0xffffd1000000c100 0045 00000000 0x0 0x0 0xffffd1000000c180 0045 00000000 0x0 0x0 0xffffd1000000c200 0045 00000000 0x0 0x0 0xffffd1000000c280 0045 00000000 0x0 0x0 0xffffd1000000c300 0045 00000000 0x0 0x0 0xffffd1000000c380 0045 00000000 0x0 0x0 0xffffd1000000c400 0045 00000000 0x0 0x0 0xffffd1000000c480 0045 00000000 0x0 0x0 0xffffd1000000c500 0045 00000000 0x0 0x0 0xffffd1000000c580 0045 00000000 0x0 0x0 0xffffd1000000c600 0045 00000000 0x0 0x0 0xffffd1000000c680 0045 00000000 0x0 0x0 0xffffd1000000c700 0045 00000000 0x0 0x0 0xffffd1000000c780 0045 00000000 0x0 0x0 0xffffd1000000c800 0041 00000000 0x0 0x0 0xffffd1000000c880 0045 00000000 0x0 0x0 0xffffd1000000c900 0045 00000000 0x0 0x0 0xffffd1000000c980 0045 00000000 0x0 0x0 0xffffd1000000ca00 0041 00000000 0x0 0x0 0xffffd1000000ca80 0045 00000000 0x0 0x0 0xffffd1000000cb00 0045 00000000 0x0 0x0 0xffffd1000000cb80 0045 00000000 0x0 0x0 0xffffd1000000cc00 0041 00000000 0x0 0x0 0xffffd1000000cc80 0041 00000000 0x0 0x0 0xffffd1000000cd00 0045 00000000 0x0 0x0 0xffffd1000000cd80 0045 00000000 0x0 0x0 0xffffd1000000ce00 0041 00000000 0x0 0x0 0xffffd1000000ce80 0041 00000000 0x0 0x0 0xffffd1000000cf00 0041 00000000 0x0 0x0 0xffffd1000000cf80 0041 00000000 0x0 0x0 0xffffd1000000d000 0041 00000000 0x0 0x0 0xffffd1000000d080 0041 00000000 0x0 0x0 0xffffd1000000d100 0041 00000000 0x0 0x0 0xffffd1000000d180 0041 00000000 0x0 0x0 0xffffd1000000d200 0041 00000000 0x0 0x0 0xffffd1000000d280 0041 00000000 0x0 0x0 0xffffd1000000d300 0041 00000000 0x0 0x0 0xffffd1000000d380 0041 00000000 0x0 0x0 0xffffd1000000d400 0041 00000000 0x0 0x0 0xffffd1000000d480 0041 00000000 0x0 0x0 0xffffd1000000d500 0041 00000000 0x0 0x0 0xffffd1000000d580 0041 00000000 0x0 0x0 0xffffd1000000d600 0041 00000000 0x0 0x0 0xffffd1000000d680 0041 00000000 0x0 0x0 0xffffd1000000d700 0041 00000000 0x0 0x0 0xffffd1000000d780 0041 00000000 0x0 0x0 0xffffd1000000d800 0045 00000000 0x0 0x0 0xffffd1000000d880 0041 00000000 0x0 0x0 0xffffd1000000d900 0041 00000000 0x0 0x0 0xffffd1000000d980 0041 00000000 0x0 0x0 0xffffd1000000da00 0041 00000000 0x0 0x0 0xffffd1000000da80 0045 00000000 0x0 0x0 0xffffd1000000db00 0045 00000000 0x0 0x0 0xffffd1000000db80 0041 00000000 0x0 0x0 0xffffd1000000dc00 0045 00000000 0x0 0x0 0xffffd1000000dc80 0045 00000000 0x0 0x0 0xffffd1000000dd00 0041 00000000 0x0 0x0 0xffffd1000000dd80 0041 00000000 0x0 0x0 0xffffd1000000de00 0045 00000000 0x0 0x0 0xffffd1000000de80 0041 00000000 0x0 0x0 0xffffd1000000df00 0041 00000000 0x0 0x0 0xffffd1000000df80 0045 00000000 0x0 0x0 0xffffd1000000e000 0045 00000000 0x0 0x0 0xffffd1000000e080 0045 00000000 0x0 0x0 0xffffd1000000e100 0041 00000000 0x0 0x0 0xffffd1000000e180 0041 00000000 0x0 0x0 0xffffd1000000e200 0041 00000000 0x0 0x0 0xffffd1000000e280 0041 00000000 0x0 0x0 0xffffd1000000e300 0045 00000000 0x0 0x0 0xffffd1000000e380 0045 00000000 0x0 0x0 0xffffd1000000e400 0041 00000000 0x0 0x0 0xffffd1000000e480 0041 00000000 0x0 0x0 0xffffd1000000e500 0045 00000000 0x0 0x0 0xffffd1000000e580 0045 00000000 0x0 0x0 0xffffd1000000e600 0041 00000000 0x0 0x0 0xffffd1000000e680 0045 00000000 0x0 0x0 0xffffd1000000e700 0045 00000000 0x0 0x0 0xffffd1000000e780 0045 00000000 0x0 0x0 0xffffd1000000e800 0041 00000000 0x0 0x0 0xffffd1000000e880 0045 00000000 0x0 0x0 0xffffd1000000e900 0041 00000000 0x0 0x0 0xffffd1000000e980 0041 00000000 0x0 0x0 0xffffd1000000ea00 0041 00000000 0x0 0x0 0xffffd1000000ea80 0041 00000000 0x0 0x0 0xffffd1000000eb00 0045 00000000 0x0 0x0 0xffffd1000000eb80 0041 00000000 0x0 0x0 0xffffd1000000ec00 0045 00000000 0x0 0x0 0xffffd1000000ec80 0041 00000000 0x0 0x0 0xffffd1000000ed00 0041 00000000 0x0 0x0 0xffffd1000000ed80 0041 00000000 0x0 0x0 0xffffd1000000ee00 0041 00000000 0x0 0x0 0xffffd1000000ee80 0045 00000000 0x0 0x0 0xffffd1000000ef00 0041 00000000 0x0 0x0 0xffffd1000000ef80 0041 00000000 0x0 0x0 0xffffd1000000f000 0041 00000000 0x0 0x0 0xffffd1000000f080 0041 00000000 0x0 0x0 0xffffd1000000f100 0041 00000000 0x0 0x0 0xffffd1000000f180 0041 00000000 0x0 0x0 0xffffd1000000f200 0041 00000000 0x0 0x0 0xffffd1000000f280 0041 00000000 0x0 0x0 0xffffd1000000f300 0041 00000000 0x0 0x0 0xffffd1000000f380 0045 00000000 0x0 0x0 0xffffd1000000f400 0045 00000000 0x0 0x0 0xffffd1000000f480 0041 00000000 0x0 0x0 0xffffd1000000f500 0041 00000000 0x0 0x0 0xffffd1000000f580 0041 00000000 0x0 0x0 0xffffd1000000f600 0045 00000000 0x0 0x0 0xffffd1000000f680 0041 00000000 0x0 0x0 0xffffd1000000f700 0041 00000000 0x0 0x0 0xffffd1000000f780 0041 00000000 0x0 0x0 0xffffd1000000f800 0041 00000000 0x0 0x0 0xffffd1000000f880 0045 00000000 0x0 0x0 0xffffd1000000f900 0045 00000000 0x0 0x0 0xffffd1000000f980 0041 00000000 0x0 0x0 0xffffd1000000fa00 0041 00000000 0x0 0x0 0xffffd1000000fa80 0045 00000000 0x0 0x0 0xffffd1000000fb00 0041 00000000 0x0 0x0 0xffffd1000000fb80 0041 00000000 0x0 0x0 0xffffd1000000fc00 0041 00000000 0x0 0x0 0xffffd1000000fc80 0041 00000000 0x0 0x0 0xffffd1000000fd00 0041 00000000 0x0 0x0 0xffffd1000000fd80 0045 00000000 0x0 0x0 0xffffd1000000fe00 0041 00000000 0x0 0x0 0xffffd1000000fe80 0041 00000000 0x0 0x0 0xffffd1000000ff00 0041 00000000 0x0 0x0 0xffffd1000000ff80 0041 00000000 0x0 0x0 0xffffd10000010000 0041 00000000 0x0 0x0 0xffffd10000010080 0045 00000000 0x0 0x0 0xffffd10000010100 0045 00000000 0x0 0x0 0xffffd10000010180 0041 00000000 0x0 0x0 0xffffd10000010200 0045 00000000 0x0 0x0 0xffffd10000010280 0041 00000000 0x0 0x0 0xffffd10000010300 0041 00000000 0x0 0x0 0xffffd10000010380 0041 00000000 0x0 0x0 0xffffd10000010400 0041 00000000 0x0 0x0 0xffffd10000010480 0041 00000000 0x0 0x0 0xffffd10000010500 0041 00000000 0x0 0x0 0xffffd10000010580 0041 00000000 0x0 0x0 0xffffd10000010600 0041 00000000 0x0 0x0 0xffffd10000010680 0041 00000000 0x0 0x0 0xffffd10000010700 0041 00000000 0x0 0x0 0xffffd10000010780 0041 00000000 0x0 0x0 0xffffd10000010800 0041 00000000 0x0 0x0 0xffffd10000010880 0041 00000000 0x0 0x0 0xffffd10000010900 0045 00000000 0x0 0x0 0xffffd10000010980 0045 00000000 0x0 0x0 0xffffd10000010a00 0045 00000000 0x0 0x0 0xffffd10000010a80 0045 00000000 0x0 0x0 0xffffd10000010b00 0045 00000000 0x0 0x0 0xffffd10000010b80 0041 00000000 0x0 0x0 0xffffd10000010c00 0041 00000000 0x0 0x0 0xffffd10000010c80 0041 00000000 0x0 0x0 0xffffd10000010d00 0041 00000000 0x0 0x0 0xffffd10000010d80 0041 00000000 0x0 0x0 0xffffd10000010e00 0041 00000000 0x0 0x0 0xffffd10000010e80 0041 00000000 0x0 0x0 0xffffd10000010f00 0041 00000000 0x0 0x0 0xffffd10000010f80 0045 00000000 0x0 0x0 0xffffd10000011000 0041 00000000 0x0 0x0 0xffffd10000011080 0041 00000000 0x0 0x0 0xffffd10000011100 0041 00000000 0x0 0x0 0xffffd10000011180 0041 00000000 0x0 0x0 0xffffd10000011200 0041 00000000 0x0 0x0 0xffffd10000011280 0045 00000000 0x0 0x0 0xffffd10000011300 0041 00000000 0x0 0x0 0xffffd10000011380 0041 00000000 0x0 0x0 0xffffd10000011400 0041 00000000 0x0 0x0 0xffffd10000011480 0041 00000000 0x0 0x0 0xffffd10000011500 0041 00000000 0x0 0x0 0xffffd10000011580 0041 00000000 0x0 0x0 0xffffd10000011600 0041 00000000 0x0 0x0 0xffffd10000011680 0041 00000000 0x0 0x0 0xffffd10000011700 0041 00000000 0x0 0x0 0xffffd10000011780 0041 00000000 0x0 0x0 0xffffd10000011800 0041 00000000 0x0 0x0 0xffffd10000011880 0041 00000000 0x0 0x0 0xffffd10000011900 0041 00000000 0x0 0x0 0xffffd10000011980 0041 00000000 0x0 0x0 0xffffd10000011a00 0045 00000000 0x0 0x0 0xffffd10000011a80 0041 00000000 0x0 0x0 0xffffd10000011b00 0041 00000000 0x0 0x0 0xffffd10000011b80 0041 00000000 0x0 0x0 0xffffd10000011c00 0045 00000000 0x0 0x0 0xffffd10000011c80 0045 00000000 0x0 0x0 0xffffd10000011d00 0041 00000000 0x0 0x0 0xffffd10000011d80 0041 00000000 0x0 0x0 0xffffd10000011e00 0041 00000000 0x0 0x0 0xffffd10000011e80 0041 00000000 0x0 0x0 0xffffd10000011f00 0045 00000000 0x0 0x0 0xffffd10000011f80 0045 00000000 0x0 0x0 0xffffd10000012000 0041 00000000 0x0 0x0 0xffffd10000012080 0041 00000000 0x0 0x0 0xffffd10000012100 0041 00000000 0x0 0x0 0xffffd10000012180 0045 00000000 0x0 0x0 0xffffd10000012200 0041 00000000 0x0 0x0 0xffffd10000012280 0041 00000000 0x0 0x0 0xffffd10000012300 0041 00000000 0x0 0x0 0xffffd10000012380 0041 00000000 0x0 0x0 0xffffd10000012400 0041 00000000 0x0 0x0 0xffffd10000012480 0041 00000000 0x0 0x0 0xffffd10000012500 0045 00000000 0x0 0x0 0xffffd10000012580 0041 00000000 0x0 0x0 0xffffd10000012600 0041 00000000 0x0 0x0 0xffffd10000012680 0045 00000000 0x0 0x0 0xffffd10000012700 0001 00000000 0x0 0x0 0xffffd10000012780 0001 00000000 0x0 0x0 0xffffd10000012800 0001 00000000 0x0 0x0 0xffffd10000012880 0001 00000000 0x0 0x0 0xffffd10000012900 0001 00000000 0x0 0x0 0xffffd10000012980 0001 00000000 0x0 0x0 0xffffd10000012a00 0001 00000000 0x0 0x0 0xffffd10000012a80 0001 00000000 0x0 0x0 0xffffd10000012b00 0001 00000000 0x0 0x0 0xffffd10000012b80 0001 00000000 0x0 0x0 0xffffd10000012c00 0001 00000000 0x0 0x0 0xffffd10000012c80 0001 00000000 0x0 0x0 0xffffd10000012d00 0001 00000000 0x0 0x0 0xffffd10000012d80 0001 00000000 0x0 0x0 0xffffd10000012e00 0001 00000000 0x0 0x0 0xffffd10000012e80 0001 00000000 0x0 0x0 0xffffd10000012f00 0001 00000000 0x0 0x0 0xffffd10000012f80 0001 00000000 0x0 0x0 0xffffd10000013000 0001 00000000 0x0 0x0 0xffffd10000013080 0001 00000000 0x0 0x0 0xffffd10000013100 0001 00000000 0x0 0x0 0xffffd10000013180 0001 00000000 0x0 0x0 0xffffd10000013200 0001 00000000 0x0 0x0 0xffffd10000013280 0001 00000000 0x0 0x0 0xffffd10000013300 0001 00000000 0x0 0x0 0xffffd10000013380 0001 00000000 0x0 0x0 0xffffd10000013400 0001 00000000 0x0 0x0 0xffffd10000013480 0001 00000000 0x0 0x0 0xffffd10000013500 0001 00000000 0x0 0x0 0xffffd10000013580 0001 00000000 0x0 0x0 0xffffd10000013600 0001 00000000 0x0 0x0 0xffffd10000013680 0001 00000000 0x0 0x0 0xffffd10000013700 0001 00000000 0x0 0x0 0xffffd10000013780 0001 00000000 0x0 0x0 0xffffd10000013800 0001 00000000 0x0 0x0 0xffffd10000013880 0001 00000000 0x0 0x0 0xffffd10000013900 0001 00000000 0x0 0x0 0xffffd10000013980 0001 00000000 0x0 0x0 0xffffd10000013a00 0001 00000000 0x0 0x0 0xffffd10000013a80 0001 00000000 0x0 0x0 0xffffd10000013b00 0001 00000000 0x0 0x0 0xffffd10000013b80 0001 00000000 0x0 0x0 0xffffd10000013c00 0001 00000000 0x0 0x0 0xffffd10000013c80 0001 00000000 0x0 0x0 0xffffd10000013d00 0001 00000000 0x0 0x0 0xffffd10000013d80 0001 00000000 0x0 0x0 0xffffd10000013e00 0001 00000000 0x0 0x0 0xffffd10000013e80 0001 00000000 0x0 0x0 0xffffd10000013f00 0001 00000000 0x0 0x0 0xffffd10000013f80 0001 00000000 0x0 0x0 0xffffd10000014000 0001 00000000 0x0 0x0 0xffffd10000014080 0001 00000000 0x0 0x0 0xffffd10000014100 0001 00000000 0x0 0x0 0xffffd10000014180 0001 00000000 0x0 0x0 0xffffd10000014200 0041 00000000 0x0 0x0 0xffffd10000014280 0041 00000000 0x0 0x0 0xffffd10000014300 0041 00000000 0x0 0x0 0xffffd10000014380 0041 00000000 0x0 0x0 0xffffd10000014400 0041 00000000 0x0 0x0 0xffffd10000014480 0041 00000000 0x0 0x0 0xffffd10000014500 0041 00000000 0x0 0x0 0xffffd10000014580 0041 00000000 0x0 0x0 0xffffd10000014600 0041 00000000 0x0 0x0 0xffffd10000014680 0041 00000000 0x0 0x0 0xffffd10000014700 0041 00000000 0x0 0x0 0xffffd10000014780 0041 00000000 0x0 0x0 0xffffd10000014800 0041 00000000 0x0 0x0 0xffffd10000014880 0041 00000000 0x0 0x0 0xffffd10000014900 0041 00000000 0x0 0x0 0xffffd10000014980 0041 00000000 0x0 0x0 0xffffd10000014a00 0041 00000000 0x0 0x0 0xffffd10000014a80 0041 00000000 0x0 0x0 0xffffd10000014b00 0041 00000000 0x0 0x0 0xffffd10000014b80 0041 00000000 0x0 0x0 0xffffd10000014c00 0041 00000000 0x0 0x0 0xffffd10000014c80 0041 00000000 0x0 0x0 0xffffd10000014d00 0041 00000000 0x0 0x0 0xffffd10000014d80 0041 00000000 0x0 0x0 0xffffd10000014e00 0041 00000000 0x0 0x0 0xffffd10000014e80 0041 00000000 0x0 0x0 0xffffd10000014f00 0041 00000000 0x0 0x0 0xffffd10000014f80 0041 00000000 0x0 0x0 0xffffd10000015000 0041 00000000 0x0 0x0 0xffffd10000015080 0041 00000000 0x0 0x0 0xffffd10000015100 0041 00000000 0x0 0x0 0xffffd10000015180 0041 00000000 0x0 0x0 0xffffd10000015200 0041 00000000 0x0 0x0 0xffffd10000015280 0041 00000000 0x0 0x0 0xffffd10000015300 0041 00000000 0x0 0x0 0xffffd10000015380 0041 00000000 0x0 0x0 0xffffd10000015400 0041 00000000 0x0 0x0 0xffffd10000015480 0041 00000000 0x0 0x0 0xffffd10000015500 0041 00000000 0x0 0x0 0xffffd10000015580 0041 00000000 0x0 0x0 0xffffd10000015600 0041 00000000 0x0 0x0 0xffffd10000015680 0041 00000000 0x0 0x0 0xffffd10000015700 0041 00000000 0x0 0x0 0xffffd10000015780 0041 00000000 0x0 0x0 0xffffd10000015800 0041 00000000 0x0 0x0 0xffffd10000015880 0041 00000000 0x0 0x0 0xffffd10000015900 0041 00000000 0x0 0x0 0xffffd10000015980 0001 00000000 0x0 0x0 0xffffd10000015a00 0001 00000000 0x0 0x0 0xffffd10000015a80 0001 00000000 0x0 0x0 0xffffd10000015b00 0001 00000000 0x0 0x0 0xffffd10000015b80 0001 00000000 0x0 0x0 0xffffd10000015c00 0001 00000000 0x0 0x0 0xffffd10000015c80 0001 00000000 0x0 0x0 0xffffd10000015d00 0001 00000000 0x0 0x0 0xffffd10000015d80 0001 00000000 0x0 0x0 0xffffd10000015e00 0001 00000000 0x0 0x0 0xffffd10000015e80 0001 00000000 0x0 0x0 0xffffd10000015f00 0001 00000000 0x0 0x0 0xffffd10000015f80 0001 00000000 0x0 0x0 0xffffd10000016000 0001 00000000 0x0 0x0 0xffffd10000016080 0001 00000000 0x0 0x0 0xffffd10000016100 0001 00000000 0x0 0x0 0xffffd10000016180 0001 00000000 0x0 0x0 0xffffd10000016200 0001 00000000 0x0 0x0 0xffffd10000016280 0001 00000000 0x0 0x0 0xffffd10000016300 0001 00000000 0x0 0x0 0xffffd10000016380 0001 00000000 0x0 0x0 0xffffd10000016400 0001 00000000 0x0 0x0 0xffffd10000016480 0001 00000000 0x0 0x0 0xffffd10000016500 0001 00000000 0x0 0x0 0xffffd10000016580 0001 00000000 0x0 0x0 0xffffd10000016600 0001 00000000 0x0 0x0 0xffffd10000016680 0001 00000000 0x0 0x0 0xffffd10000016700 0001 00000000 0x0 0x0 0xffffd10000016780 0001 00000000 0x0 0x0 0xffffd10000016800 0001 00000000 0x0 0x0 0xffffd10000016880 0001 00000000 0x0 0x0 0xffffd10000016900 0001 00000000 0x0 0x0 0xffffd10000016980 0001 00000000 0x0 0x0 0xffffd10000016a00 0001 00000000 0x0 0x0 0xffffd10000016a80 0001 00000000 0x0 0x0 0xffffd10000016b00 0001 00000000 0x0 0x0 0xffffd10000016b80 0001 00000000 0x0 0x0 0xffffd10000016c00 0001 00000000 0x0 0x0 0xffffd10000016c80 0001 00000000 0x0 0x0 0xffffd10000016d00 0001 00000000 0x0 0x0 0xffffd10000016d80 0001 00000000 0x0 0x0 0xffffd10000016e00 0001 00000000 0x0 0x0 0xffffd10000016e80 0001 00000000 0x0 0x0 0xffffd10000016f00 0001 00000000 0x0 0x0 0xffffd10000016f80 0001 00000000 0x0 0x0 0xffffd10000017000 0001 00000000 0x0 0x0 0xffffd10000017080 0001 00000000 0x0 0x0 0xffffd10000017100 0001 00000000 0x0 0x0 0xffffd10000017180 0001 00000000 0x0 0x0 0xffffd10000017200 0001 00000000 0x0 0x0 0xffffd10000017280 0001 00000000 0x0 0x0 0xffffd10000017300 0001 00000000 0x0 0x0 0xffffd10000017380 0001 00000000 0x0 0x0 0xffffd10000017400 0001 00000000 0x0 0x0 0xffffd10000017480 0041 00000000 0x0 0x0 0xffffd10000017500 0041 00000000 0x0 0x0 0xffffd10000017580 0041 00000000 0x0 0x0 0xffffd10000017600 0041 00000000 0x0 0x0 0xffffd10000017680 0041 00000000 0x0 0x0 0xffffd10000017700 0041 00000000 0x0 0x0 0xffffd10000017780 0041 00000000 0x0 0x0 0xffffd10000017800 0041 00000000 0x0 0x0 0xffffd10000017880 0041 00000000 0x0 0x0 0xffffd10000017900 0041 00000000 0x0 0x0 0xffffd10000017980 0041 00000000 0x0 0x0 0xffffd10000017a00 0041 00000000 0x0 0x0 0xffffd10000017a80 0041 00000000 0x0 0x0 0xffffd10000017b00 0041 00000000 0x0 0x0 0xffffd10000017b80 0041 00000000 0x0 0x0 0xffffd10000017c00 0041 00000000 0x0 0x0 0xffffd10000017c80 0041 00000000 0x0 0x0 0xffffd10000017d00 0041 00000000 0x0 0x0 0xffffd10000017d80 0041 00000000 0x0 0x0 0xffffd10000017e00 0041 00000000 0x0 0x0 0xffffd10000017e80 0041 00000000 0x0 0x0 0xffffd10000017f00 0041 00000000 0x0 0x0 0xffffd10000017f80 0041 00000000 0x0 0x0 0xffffd10000018000 0041 00000000 0x0 0x0 0xffffd10000018080 0041 00000000 0x0 0x0 0xffffd10000018100 0041 00000000 0x0 0x0 0xffffd10000018180 0041 00000000 0x0 0x0 0xffffd10000018200 0041 00000000 0x0 0x0 0xffffd10000018280 0041 00000000 0x0 0x0 0xffffd10000018300 0041 00000000 0x0 0x0 0xffffd10000018380 0041 00000000 0x0 0x0 0xffffd10000018400 0041 00000000 0x0 0x0 0xffffd10000018480 0041 00000000 0x0 0x0 0xffffd10000018500 0041 00000000 0x0 0x0 0xffffd10000018580 0041 00000000 0x0 0x0 0xffffd10000018600 0041 00000000 0x0 0x0 0xffffd10000018680 0041 00000000 0x0 0x0 0xffffd10000018700 0041 00000000 0x0 0x0 0xffffd10000018780 0041 00000000 0x0 0x0 0xffffd10000018800 0041 00000000 0x0 0x0 0xffffd10000018880 0041 00000000 0x0 0x0 0xffffd10000018900 0041 00000000 0x0 0x0 0xffffd10000018980 0041 00000000 0x0 0x0 0xffffd10000018a00 0041 00000000 0x0 0x0 0xffffd10000018a80 0041 00000000 0x0 0x0 0xffffd10000018b00 0001 00000000 0x0 0x0 0xffffd10000018b80 0001 00000000 0x0 0x0 0xffffd10000018c00 0001 00000000 0x0 0x0 0xffffd10000018c80 0001 00000000 0x0 0x0 0xffffd10000018d00 0001 00000000 0x0 0x0 0xffffd10000018d80 0001 00000000 0x0 0x0 0xffffd10000018e00 0001 00000000 0x0 0x0 0xffffd10000018e80 0001 00000000 0x0 0x0 0xffffd10000018f00 0001 00000000 0x0 0x0 0xffffd10000018f80 0001 00000000 0x0 0x0 0xffffd10000019000 0001 00000000 0x0 0x0 0xffffd10000019080 0001 00000000 0x0 0x0 0xffffd10000019100 0001 00000000 0x0 0x0 0xffffd10000019180 0001 00000000 0x0 0x0 0xffffd10000019200 0001 00000000 0x0 0x0 0xffffd10000019280 0001 00000000 0x0 0x0 0xffffd10000019300 0001 00000000 0x0 0x0 0xffffd10000019380 0001 00000000 0x0 0x0 0xffffd10000019400 0001 00000000 0x0 0x0 0xffffd10000019480 0001 00000000 0x0 0x0 0xffffd10000019500 0001 00000000 0x0 0x0 0xffffd10000019580 0001 00000000 0x0 0x0 0xffffd10000019600 0001 00000000 0x0 0x0 0xffffd10000019680 0001 00000000 0x0 0x0 0xffffd10000019700 0001 00000000 0x0 0x0 0xffffd10000019780 0001 00000000 0x0 0x0 0xffffd10000019800 0001 00000000 0x0 0x0 0xffffd10000019880 0001 00000000 0x0 0x0 0xffffd10000019900 0001 00000000 0x0 0x0 0xffffd10000019980 0001 00000000 0x0 0x0 0xffffd10000019a00 0001 00000000 0x0 0x0 0xffffd10000019a80 0001 00000000 0x0 0x0 0xffffd10000019b00 0001 00000000 0x0 0x0 0xffffd10000019b80 0001 00000000 0x0 0x0 0xffffd10000019c00 0001 00000000 0x0 0x0 0xffffd10000019c80 0001 00000000 0x0 0x0 0xffffd10000019d00 0001 00000000 0x0 0x0 0xffffd10000019d80 0001 00000000 0x0 0x0 0xffffd10000019e00 0001 00000000 0x0 0x0 0xffffd10000019e80 0001 00000000 0x0 0x0 0xffffd10000019f00 0001 00000000 0x0 0x0 0xffffd10000019f80 0001 00000000 0x0 0x0 0xffffd1000001a000 0001 00000000 0x0 0x0 0xffffd1000001a080 0001 00000000 0x0 0x0 0xffffd1000001a100 0001 00000000 0x0 0x0 0xffffd1000001a180 0001 00000000 0x0 0x0 0xffffd1000001a200 0001 00000000 0x0 0x0 0xffffd1000001a280 0001 00000000 0x0 0x0 0xffffd1000001a300 0001 00000000 0x0 0x0 0xffffd1000001a380 0001 00000000 0x0 0x0 0xffffd1000001a400 0001 00000000 0x0 0x0 0xffffd1000001a480 0001 00000000 0x0 0x0 0xffffd1000001a500 0001 00000000 0x0 0x0 0xffffd1000001a580 0001 00000000 0x0 0x0 0xffffd1000001a600 0041 00000000 0x0 0x0 0xffffd1000001a680 0041 00000000 0x0 0x0 0xffffd1000001a700 0041 00000000 0x0 0x0 0xffffd1000001a780 0041 00000000 0x0 0x0 0xffffd1000001a800 0041 00000000 0x0 0x0 0xffffd1000001a880 0041 00000000 0x0 0x0 0xffffd1000001a900 0041 00000000 0x0 0x0 0xffffd1000001a980 0041 00000000 0x0 0x0 0xffffd1000001aa00 0041 00000000 0x0 0x0 0xffffd1000001aa80 0041 00000000 0x0 0x0 0xffffd1000001ab00 0041 00000000 0x0 0x0 0xffffd1000001ab80 0041 00000000 0x0 0x0 0xffffd1000001ac00 0041 00000000 0x0 0x0 0xffffd1000001ac80 0041 00000000 0x0 0x0 0xffffd1000001ad00 0041 00000000 0x0 0x0 0xffffd1000001ad80 0041 00000000 0x0 0x0 0xffffd1000001ae00 0041 00000000 0x0 0x0 0xffffd1000001ae80 0041 00000000 0x0 0x0 0xffffd1000001af00 0041 00000000 0x0 0x0 0xffffd1000001af80 0041 00000000 0x0 0x0 0xffffd1000001b000 0041 00000000 0x0 0x0 0xffffd1000001b080 0041 00000000 0x0 0x0 0xffffd1000001b100 0041 00000000 0x0 0x0 0xffffd1000001b180 0041 00000000 0x0 0x0 0xffffd1000001b200 0045 00000000 0x0 0x0 0xffffd1000001b280 0041 00000000 0x0 0x0 0xffffd1000001b300 0041 00000000 0x0 0x0 0xffffd1000001b380 0041 00000000 0x0 0x0 0xffffd1000001b400 0041 00000000 0x0 0x0 0xffffd1000001b480 0041 00000000 0x0 0x0 0xffffd1000001b500 0041 00000000 0x0 0x0 0xffffd1000001b580 0041 00000000 0x0 0x0 0xffffd1000001b600 0045 00000000 0x0 0x0 0xffffd1000001b680 0041 00000000 0x0 0x0 0xffffd1000001b700 0041 00000000 0x0 0x0 0xffffd1000001b780 0041 00000000 0x0 0x0 0xffffd1000001b800 0041 00000000 0x0 0x0 0xffffd1000001b880 0041 00000000 0x0 0x0 0xffffd1000001b900 0041 00000000 0x0 0x0 0xffffd1000001b980 0041 00000000 0x0 0x0 0xffffd1000001ba00 0045 00000000 0x0 0x0 0xffffd1000001ba80 0041 00000000 0x0 0x0 0xffffd1000001bb00 0041 00000000 0x0 0x0 0xffffd1000001bb80 0041 00000000 0x0 0x0 0xffffd1000001bc00 0045 00000000 0x0 0x0 0xffffd1000001bc80 0045 00000000 0x0 0x0 0xffffd1000001bd00 0041 00000000 0x0 0x0 0xffffd1000001bd80 0041 00000000 0x0 0x0 0xffffd1000001be00 0001 00000000 0x0 0x0 0xffffd1000001be80 0001 00000000 0x0 0x0 0xffffd1000001bf00 0001 00000000 0x0 0x0 0xffffd1000001bf80 0001 00000000 0x0 0x0 0xffffd1000001c000 0001 00000000 0x0 0x0 0xffffd1000001c080 0001 00000000 0x0 0x0 0xffffd1000001c100 0001 00000000 0x0 0x0 0xffffd1000001c180 0001 00000000 0x0 0x0 0xffffd1000001c200 0001 00000000 0x0 0x0 0xffffd1000001c280 0001 00000000 0x0 0x0 0xffffd1000001c300 0001 00000000 0x0 0x0 0xffffd1000001c380 0001 00000000 0x0 0x0 0xffffd1000001c400 0001 00000000 0x0 0x0 0xffffd1000001c480 0001 00000000 0x0 0x0 0xffffd1000001c500 0001 00000000 0x0 0x0 0xffffd1000001c580 0001 00000000 0x0 0x0 0xffffd1000001c600 0001 00000000 0x0 0x0 0xffffd1000001c680 0001 00000000 0x0 0x0 0xffffd1000001c700 0001 00000000 0x0 0x0 0xffffd1000001c780 0001 00000000 0x0 0x0 0xffffd1000001c800 0001 00000000 0x0 0x0 0xffffd1000001c880 0001 00000000 0x0 0x0 0xffffd1000001c900 0001 00000000 0x0 0x0 0xffffd1000001c980 0001 00000000 0x0 0x0 0xffffd1000001ca00 0001 00000000 0x0 0x0 0xffffd1000001ca80 0001 00000000 0x0 0x0 0xffffd1000001cb00 0001 00000000 0x0 0x0 0xffffd1000001cb80 0001 00000000 0x0 0x0 0xffffd1000001cc00 0001 00000000 0x0 0x0 0xffffd1000001cc80 0001 00000000 0x0 0x0 0xffffd1000001cd00 0001 00000000 0x0 0x0 0xffffd1000001cd80 0001 00000000 0x0 0x0 0xffffd1000001ce00 0001 00000000 0x0 0x0 0xffffd1000001ce80 0001 00000000 0x0 0x0 0xffffd1000001cf00 0001 00000000 0x0 0x0 0xffffd1000001cf80 0001 00000000 0x0 0x0 0xffffd1000001d000 0001 00000000 0x0 0x0 0xffffd1000001d080 0001 00000000 0x0 0x0 0xffffd1000001d100 0001 00000000 0x0 0x0 0xffffd1000001d180 0001 00000000 0x0 0x0 0xffffd1000001d200 0001 00000000 0x0 0x0 0xffffd1000001d280 0001 00000000 0x0 0x0 0xffffd1000001d300 0001 00000000 0x0 0x0 0xffffd1000001d380 0001 00000000 0x0 0x0 0xffffd1000001d400 0001 00000000 0x0 0x0 0xffffd1000001d480 0001 00000000 0x0 0x0 0xffffd1000001d500 0001 00000000 0x0 0x0 0xffffd1000001d580 0001 00000000 0x0 0x0 0xffffd1000001d600 0001 00000000 0x0 0x0 0xffffd1000001d680 0001 00000000 0x0 0x0 0xffffd1000001d700 0001 00000000 0x0 0x0 0xffffd1000001d780 0001 00000000 0x0 0x0 0xffffd1000001d800 0001 00000000 0x0 0x0 0xffffd1000001d880 0001 00000000 0x0 0x0 0xffffd1000001d900 0001 00000000 0x0 0x0 0xffffd1000001d980 0001 00000000 0x0 0x0 0xffffd1000001da00 0001 00000000 0x0 0x0 0xffffd1000001da80 0001 00000000 0x0 0x0 0xffffd1000001db00 0001 00000000 0x0 0x0 0xffffd1000001db80 0001 00000000 0x0 0x0 0xffffd1000001dc00 0001 00000000 0x0 0x0 0xffffd1000001dc80 0001 00000000 0x0 0x0 0xffffd1000001dd00 0001 00000000 0x0 0x0 0xffffd1000001dd80 0001 00000000 0x0 0x0