last executing test programs: 17.251623864s ago: executing program 1: r0 = getsid(0x0) ptrace(0x9, r0, 0x0, 0x20) __clone(0x60ff, &(0x7f0000000000)="69cd53d13af6026a99fff206101d6163a364be5f2b87e75fa153a86a64ea57955d2c42107df7f20a35ea6409c16733ba5b6fc7bcfcf385dfb9816e5e2ca14527a2a15c1700bef572c2edf174fdb69fbd4c275fa7a11c029ad5f4da916d80ab770be36130c56086e0b0655426fd3f1b6bb2a99bce042c6fec8163e00a1a366edf69f70f1370a5d900518e5e18ee4a77f62b894f25") __stat50(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000540)={0x0}) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file2\x00', 0x0) rename(&(0x7f00000002c0)='./file2\x00', &(0x7f0000000200)='./file0\x00') unlinkat(r2, &(0x7f0000000000)='./file0\x00', 0x0) symlink(&(0x7f00000000c0)='.\x00', &(0x7f0000000240)='./file0\x00') socket(0x6, 0x1, 0x3f) getsockopt(r2, 0x3, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x11, &(0x7f0000000440), &(0x7f00000003c0)=0xc) symlink(&(0x7f0000000480)='./bus\x00', &(0x7f0000000240)='./file2\x00') r3 = socket(0x18, 0x3, 0x0) r4 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil) shmat(r4, &(0x7f0000ffc000/0x4000)=nil, 0x1000) fork() r5 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil) shmat(r5, &(0x7f0000001000/0x3000)=nil, 0x0) connect$unix(r3, &(0x7f0000000340)=@file={0x1, './file1\x00'}, 0x7) compat_50___msgctl13$IPC_STAT(0x0, 0x2, &(0x7f00000004c0)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) __select50(0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)) mknod(&(0x7f00000001c0)='./file0\x00', 0x1000, r1) __stat50(&(0x7f0000000380)='./file1\x00', &(0x7f0000000280)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) r6 = socket(0x18, 0x3, 0x0) connect$unix(r6, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) 15.34301668s ago: executing program 5: write(0xffffffffffffffff, 0x0, 0x0) symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00') compat_50___msgctl13$IPC_STAT(0x0, 0x2, &(0x7f0000000280)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)}}) semctl$SETALL(0x0, 0x0, 0x9, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) compat_40_mount(&(0x7f0000000140)='umap\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f00000001c0)) open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) fcntl$lock(r0, 0xa, 0x0) r1 = socket(0x18, 0x2, 0x0) connect$unix(r1, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) connect$unix(r1, &(0x7f0000000200)=@abs={0x0, 0x0, 0x2}, 0x8) r2 = open(&(0x7f0000000000)='./file0\x00', 0x2, 0x40) __posix_fadvise50(r2, 0x0, 0xffff, 0x0, 0x0) 14.758621921s ago: executing program 5: r0 = socket(0x18, 0x3, 0x0) ioctl$FIOSEEKHOLE(r0, 0xc118691d, &(0x7f0000000180)=0x8000000000000032) r1 = socket(0x18, 0x3, 0x0) ioctl$FIOSEEKHOLE(r1, 0x8090690e, &(0x7f0000000180)) 14.675733264s ago: executing program 4: r0 = getsid(0x0) ptrace(0x9, r0, 0x0, 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) compat_50_wait4(0x0, 0x0, 0x0, 0x0) ptrace(0x11, r0, &(0x7f0000000000), 0x0) 13.516221413s ago: executing program 2: symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00') compat_50___msgctl13$IPC_STAT(0x0, 0x2, &(0x7f00000003c0)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100), 0xdffffffffffff803}}) lchown(&(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffff) compat_40_mount(&(0x7f0000000380)='union\x00', &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f00000001c0)) fktrace(0xffffffffffffffff, 0x0, 0x0, 0x0) compat_40_mount(&(0x7f0000000000)='null\x00', &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f00000001c0)) mkdir(&(0x7f0000000000)='./control\x00', 0x0) __utimes50(&(0x7f00000000c0)='./control\x00', 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x80000000000206, 0x0) ktrace(&(0x7f00000000c0)='./file0\x00', 0x0, 0x30a, 0xffffffffffffffff) open$dir(&(0x7f0000000140)='./file1/file1\x00', 0x0, 0x0) compat_40_mount(&(0x7f0000000040)='tmpfs\x00', &(0x7f00000000c0)='.\x00', 0x0, &(0x7f00000002c0)="01") mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0) open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) ktrace(&(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) modctl$MODCTL_LOAD(0x0, &(0x7f0000000140)={&(0x7f0000000040), 0x0, 0x0}) mknod(&(0x7f0000000000)='./file1\x00', 0x2000, 0xa718) 12.931160984s ago: executing program 4: socket$unix(0x1, 0x2, 0x0) symlink(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', 0x0) socket(0x18, 0x2, 0x0) setsockopt(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e699", 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = getsid(0x0) open(0x0, 0x0, 0x0) msgget$private(0x0, 0x0) compat_50_wait4(r0, &(0x7f0000000140), 0x2, &(0x7f0000000180)) _lwp_kill(0x0, 0x0) r1 = getsid(0x0) ptrace(0x9, r1, 0x0, 0x0) compat_50_wait4(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="28000000ffff000001"], 0x28}, 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) pwritev(0xffffffffffffffff, &(0x7f0000002040)=[{&(0x7f0000000000)='Lds', 0x3}], 0x1, 0x0) mknod(&(0x7f00000000c0)='./bus\x00', 0x2000, 0x4f4b) r4 = open$dir(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) ioctl$FIOASYNC(r4, 0xc0104308, &(0x7f00000001c0)=0x20000002) recvmmsg(r2, &(0x7f0000000280)={0x0}, 0x10, 0x240e, 0x0) ptrace(0xb, r0, &(0x7f0000000000), 0x0) 12.303096932s ago: executing program 5: r0 = socket(0x18, 0x3, 0x0) ioctl$FIOSEEKHOLE(r0, 0xc118691d, &(0x7f0000000180)=0x8000000000000032) r1 = socket(0x18, 0x3, 0x0) ioctl$FIOSEEKHOLE(r1, 0x8090690e, &(0x7f0000000180)) 12.278320865s ago: executing program 2: fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) compat_40_mount(&(0x7f0000000080)='tmpfs\x00', &(0x7f00000000c0)='.\x00', 0x0, &(0x7f00000002c0)="01") symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00') compat_50___msgctl13$IPC_STAT(0x0, 0x2, &(0x7f0000000280)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x0, 0x0, 0xfffc}, 0xdffffffffffff7ff}}) lchown(&(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffff) compat_40_mount(&(0x7f0000000380)='union\x00', &(0x7f00000003c0)='./file0\x00', 0x0, &(0x7f00000001c0)) unlink(&(0x7f0000000000)='./file0\x00') pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x0) r2 = open$dir(&(0x7f0000000000)='./file0\x00', 0xa, 0x0) writev(r2, &(0x7f0000000340)=[{&(0x7f0000000000), 0x2cfea}], 0x1000000000000013) mmap(&(0x7f0000000000/0x13000)=nil, 0x13000, 0x3, 0x10, r1, 0x0, 0x0) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000100)="19", 0x4000}], 0x1) open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x0) r3 = socket(0x18, 0x3, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x40000802) r4 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) ioctl$FIOASYNC(r4, 0x80067475, &(0x7f0000001340)) compat_12_fstat12(r3, &(0x7f0000000440)) compat_43_oftruncate(r3, 0x4) setsockopt(r3, 0x1000000029, 0x28, &(0x7f0000000000)="5ab7776a", 0x4) syz_emit_ethernet(0x4d, &(0x7f0000000040)="b8df8efa9ce916ddcfed3308e6b532ac52d78d352dea78eb669ac838aa0f008f8755bb7b91b1b950e742ae2554f196a6211601c4303f2e5142d3189128acafb1558d2ab12d052ff44bbdfbbaf9") socket(0x1f, 0x1, 0x0) mknod(&(0x7f0000000280)='./file0\x00', 0x1100, 0x0) r5 = open(&(0x7f0000000180)='./file0\x00', 0x80000000000206, 0x0) writev(r5, &(0x7f0000000980)=[{&(0x7f0000000400)="8f", 0x1}], 0x1) r6 = socket(0x2, 0x3, 0x0) setsockopt$sock_int(r6, 0xffff, 0x100a, &(0x7f0000000080), 0x4) msgget$private(0x0, 0x288) socket(0x18, 0x2, 0x0) 12.173395952s ago: executing program 5: compat_40_mount(&(0x7f0000000040)='tmpfs\x00', &(0x7f00000000c0)='.\x00', 0x0, &(0x7f00000002c0)="01") mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0) ktrace(&(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) r0 = socket$inet6(0x18, 0x3, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) minherit(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0) r1 = accept$unix(0xffffffffffffffff, &(0x7f0000000140)=@abs, &(0x7f0000000180)=0x8) getsockopt$sock_cred(r1, 0xffff, 0x1022, &(0x7f00000001c0)={0x0, 0x0, 0x0}, &(0x7f0000000200)=0xc) close(r0) r3 = semget$private(0x0, 0x5, 0x2c4) semop(r3, &(0x7f0000001200)=[{0x0, 0x401e, 0x1000}, {0x4, 0x0, 0x1000}, {0x1, 0x20, 0x1800}], 0x3) semctl$GETZCNT(r3, 0x4, 0x7, &(0x7f0000000400)=""/30) semctl$GETVAL(r3, 0x0, 0x5, &(0x7f0000000040)=""/4096) r4 = geteuid() getgroups(0x3, &(0x7f0000000240)=[r2, r2, r2]) semctl$IPC_SET(r3, 0x0, 0x1, &(0x7f0000000280)={{0x1, 0x0, r2, r4, r5, 0x81, 0x2}, 0x6, 0x7fffffffffffffff, 0xfffffffffffffffe}) getsockopt$SO_PEERCRED(r1, 0xffff, 0x11, &(0x7f0000001040), 0xc) semop(r3, &(0x7f0000000000)=[{0x1, 0xfe85, 0x1000}, {0x6}, {0x3, 0x1, 0x800}, {0x4, 0x7, 0x800}, {0x1, 0x9, 0x1000}], 0x5) __clone(0x0, 0x0) open$dir(&(0x7f0000001080)='./file0\x00', 0x20000, 0x4) sendto$inet6(r0, &(0x7f0000001080), 0x0, 0x0, &(0x7f0000002080)={0x18, 0x2}, 0xc) 11.914982521s ago: executing program 5: compat_50___msgctl13$IPC_STAT(0x0, 0x2, 0x0) compat_50___msgctl13$IPC_STAT(0x0, 0x2, &(0x7f0000000380)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x7}}) compat_40_mount(&(0x7f0000000000)='tmpfs\x00', &(0x7f00000003c0)='.\x00', 0x0, &(0x7f0000000140)="01") mknod(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000001240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1) open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x0) unlink(&(0x7f0000000000)='./file0\x00') mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0e99db6de761f86, 0x0) 11.350615039s ago: executing program 1: __mount50(&(0x7f00000002c0)='overlay\x00', &(0x7f0000000040)='.\x00', 0x0, &(0x7f0000000540), 0x0) mknod(&(0x7f0000000080)='./file0\x00', 0x2000, 0x40000802) pathconf(&(0x7f0000000080)='./file0\x00', 0x7) mknod(&(0x7f0000000180)='./file0\x00', 0x2000, 0x202) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) readv(r0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/95, 0x5f}], 0x1) 8.852731657s ago: executing program 2: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) __mount50(&(0x7f0000000180)='kernfs\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0) mknod(&(0x7f0000000480)='./file0\x00', 0x2000, 0x1733) __posix_fadvise50(0xffffffffffffff9c, 0x0, 0x7, 0x88, 0x0) r0 = open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x0) write(r0, 0x0, 0x0) compat_50___msgctl13$IPC_STAT(0x0, 0x2, &(0x7f0000000280)={{0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={&(0x7f00000005c0)={0x0, 0x3, 0x0, 0x21}, 0x7, 0x0, 0x9}}) getegid() lchown(&(0x7f0000000100)='./file0\x00', r1, r2) compat_40_mount(&(0x7f0000000140)='umap\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000200)="c403efa46436acf968acebc6a6592eb4600d7fa3d6acf21ec0d3db20fdb42ee64552aa373e2242d5c8c0fe20bbf96b9b0bbd0d2ea8d3b08bb5eb8255e02c8b46b058755d6df666c3833bd215d9c7e20501ff93d1b3694ee0cfba925d81e2b0bf1fac5376f5e3eb026bcae0d6f3") __getfh30(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000300)=""/56, &(0x7f0000000340)=0x5d7460d0000000) chroot(&(0x7f0000000040)='./file0\x00') open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mknod(&(0x7f0000000100)='./file0\x00', 0x2000, 0x0) r3 = open(&(0x7f0000000140)='./file0\x00', 0x10, 0x209) compat_50_quotactl(&(0x7f00000003c0)='./file0\x00', 0x1, r1, &(0x7f00000004c0)="1e514096965b2ace2b3b688ff4449b1e7b58ccd6a577185c52142c6b225f50d5fd25ffc523b6b9e0a411367245da349de7b401771189ee4cba76a821741146d95ead6f073278c98865d922fd54103415ba9e0d5a946a561d31d7b79d13ac0208d5c0b75becbc53de5311b5fba9c5120e72af171118d95e6bfde5dcb070fb0be642d3652dc341f88074026aa9d7f3ed90f60c40141f0c8bccbcaed454b62ab926704728e118ac0bd1c8d4bfc3fe4494043bdea8a00fb1639bb46eaed47d2ca962d1eeb5c6ee01e5185d12702ddb36a6bf8caea3a1a8ed93b632abd29b33b2addbbdc7ad87f6d1be22c097") poll(&(0x7f0000000180)=[{r3, 0xd}], 0x1, 0x0) symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00') compat_50___msgctl13$IPC_STAT(0x0, 0x2, &(0x7f00000003c0)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100), 0xdffffffffffff803}}) lchown(&(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffff) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)=@abs={0x0, 0x0, 0x2}, 0x8, &(0x7f0000000200)}, 0x0) compat_40_mount(&(0x7f0000000140)='umap\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f00000001c0)) ioctl$FIOSEEKHOLE(0xffffffffffffffff, 0x80906979, &(0x7f0000000180)=0x8000000000000031) socketpair(0x0, 0x0, 0x0, 0x0) setuid(0xee01) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$FIOSEEKHOLE(0xffffffffffffffff, 0x8090690c, &(0x7f0000000180)) unlink(&(0x7f0000000000)='./file0\x00') pipe2(&(0x7f0000000340)={0xffffffffffffffff}, 0x0) readv(r4, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/50, 0xfd9f}], 0x2f) 8.802709465s ago: executing program 4: socket$unix(0x1, 0x2, 0x0) symlink(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', 0x0) socket(0x18, 0x2, 0x0) setsockopt(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e699", 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = getsid(0x0) open(0x0, 0x0, 0x0) msgget$private(0x0, 0x0) compat_50_wait4(r0, &(0x7f0000000140), 0x2, &(0x7f0000000180)) _lwp_kill(0x0, 0x0) r1 = getsid(0x0) ptrace(0x9, r1, 0x0, 0x0) compat_50_wait4(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="28000000ffff000001"], 0x28}, 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) pwritev(0xffffffffffffffff, &(0x7f0000002040)=[{&(0x7f0000000000)='Lds', 0x3}], 0x1, 0x0) mknod(&(0x7f00000000c0)='./bus\x00', 0x2000, 0x4f4b) r4 = open$dir(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) ioctl$FIOASYNC(r4, 0xc0104308, &(0x7f00000001c0)=0x20000002) recvmmsg(r2, &(0x7f0000000280)={0x0}, 0x10, 0x240e, 0x0) ptrace(0xb, r0, &(0x7f0000000000), 0x0) 8.584977468s ago: executing program 3: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) compat_50___msgctl13$IPC_STAT(0x0, 0x2, &(0x7f0000000280)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100), 0xdffffffffffff7ff}}) lchown(&(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffff) __mount50(&(0x7f0000000040)='procfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f00000000c0)='@', 0x1) compat_40_mount(&(0x7f0000000380)='union\x00', &(0x7f0000000140)='./file0\x00', 0x3, &(0x7f00000001c0)) pathconf(&(0x7f0000000080)='./file0\x00', 0x5) __mount50(&(0x7f0000000040)='procfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f00000000c0)='@', 0x1) r0 = socket$unix(0x1, 0x1, 0x0) readv(r0, &(0x7f0000000540)=[{0x0}, {0x0}], 0x2) compat_40_mount(0x0, &(0x7f0000000040)='./file0\x00', 0xb20c94f5593bce38, 0x0) 8.298866703s ago: executing program 3: writev(0xffffffffffffffff, &(0x7f00000016c0)=[{&(0x7f0000000080)="a8327d4eb2863deebb2a969a5cf3a1911fd57deca06ddc85cbc0147eb8e2381562b66d9adcbb8fc18f821bf33cc20fd06dc839c102075fe62aff6a2c0691d5f30362f2db0b2bf74e2c907a5e5d2fd1f27d0b6aab4aff39840f13a93e68f9549cf7560caa8c0ee5bad61c0f473fd9d6d002f2e19ff052221b06def719ee165b86f9a2d87f6a0e134ff233257f2f9c4024", 0x90}], 0x1) _lwp_setname(0x0, &(0x7f0000002c80)) mknod(&(0x7f0000000000)='./file1\x00', 0x2000, 0xa718) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) ioctl$FIOASYNC(r0, 0x40043105, 0x0) compat_43_osetrlimit(0x0, &(0x7f0000000080)) sendmsg(0xffffffffffffffff, 0x0, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x5900) __mount50(&(0x7f00000002c0)='overlay\x00', &(0x7f0000000040)='.\x00', 0x1, &(0x7f0000000540), 0x0) __mount50(0x0, &(0x7f0000000040)='.\x00', 0xe680bf986d21abfb, &(0x7f0000000140), 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) __clone(0x0, &(0x7f00000001c0)) __wait450(0x0, 0x0, 0x8, 0x0) r1 = open$dir(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$OFIOGETBMAP(r1, 0xc020447f, &(0x7f0000000100)) 7.225440899s ago: executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) socket(0x10, 0x2, 0x0) ioctl$FIOSEEKHOLE(0xffffffffffffffff, 0x8090698e, &(0x7f0000000180)) r1 = socket(0x10, 0x2, 0x0) fktrace(r1, 0x0, 0x62e2dd08f149ff1b, 0x0) semctl$SETALL(0x0, 0x0, 0x9, 0x0) fcntl$lock(r0, 0xa, 0x0) __posix_fchown(0x0, 0x0, 0x0) __getcwd(&(0x7f0000000000)=""/12, 0xc) 7.205449022s ago: executing program 3: mknod(&(0x7f0000000040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x8000, 0x0) socket$inet6(0x18, 0x3, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, 0xfffffffffffffffe) symlink(&(0x7f0000000180)='.\x00', &(0x7f0000000240)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) (async) mknod(&(0x7f00000000c0)='./bus\x00', 0x2000, 0x1604) (async) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) (async, rerun: 32) __mount50(&(0x7f00000002c0)='overlay\x00', &(0x7f0000000040)='.\x00', 0x0, &(0x7f0000000540), 0x0) (async, rerun: 32) mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0) open(0x0, 0x0, 0x0) (async) __mount50(&(0x7f00000002c0)='overlay\x00', &(0x7f0000000040)='.\x00', 0x0, &(0x7f0000000540), 0x0) (async, rerun: 32) lchown(&(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffff) (rerun: 32) r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000005c0)='\x00', r1, &(0x7f0000000c80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) open$dir(&(0x7f00000001c0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200, 0x0) (async) socket(0x0, 0x0, 0x0) (async) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) (async) __mount50(&(0x7f0000000040)='procfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f00000000c0)='@', 0x1) (async) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r3 = dup3(r2, r2, 0x0) lseek(r3, 0x0, 0x6, 0x0) __getdents30(r3, 0x0, 0xfffffc01) (async) symlinkat(&(0x7f0000000dc0)='./file0\x00', r1, &(0x7f0000000ec0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) mkdirat(r0, &(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r4 = socket$inet(0x2, 0x2, 0x0) (async, rerun: 32) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) (rerun: 32) readv(r5, &(0x7f00000000c0)=[{&(0x7f00000002c0)=""/228, 0xe4}], 0x1) (async) fcntl$lock(r4, 0xa, 0x0) (async) compat_50_getitimer(0x0, &(0x7f0000000000)) rename(&(0x7f0000000840)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000a80)='./file0\x00') 6.801970805s ago: executing program 1: __mount50(&(0x7f00000002c0)='overlay\x00', &(0x7f0000000040)='.\x00', 0x0, &(0x7f0000000540), 0x0) mknod(&(0x7f0000000080)='./file0\x00', 0x2000, 0x40000802) pathconf(&(0x7f0000000080)='./file0\x00', 0x7) mknod(&(0x7f0000000180)='./file0\x00', 0x2000, 0x202) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) readv(r0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/95, 0x5f}], 0x1) 6.728995226s ago: executing program 2: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) __mount50(&(0x7f0000000180)='kernfs\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0) mknod(&(0x7f0000000480)='./file0\x00', 0x2000, 0x1733) __posix_fadvise50(0xffffffffffffff9c, 0x0, 0x7, 0x88, 0x0) r0 = open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x0) write(r0, 0x0, 0x0) compat_50___msgctl13$IPC_STAT(0x0, 0x2, &(0x7f0000000280)={{0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={&(0x7f00000005c0)={0x0, 0x3, 0x0, 0x21}, 0x7, 0x0, 0x9}}) getegid() lchown(&(0x7f0000000100)='./file0\x00', r1, r2) compat_40_mount(&(0x7f0000000140)='umap\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000200)="c403efa46436acf968acebc6a6592eb4600d7fa3d6acf21ec0d3db20fdb42ee64552aa373e2242d5c8c0fe20bbf96b9b0bbd0d2ea8d3b08bb5eb8255e02c8b46b058755d6df666c3833bd215d9c7e20501ff93d1b3694ee0cfba925d81e2b0bf1fac5376f5e3eb026bcae0d6f3") __getfh30(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000300)=""/56, &(0x7f0000000340)=0x5d7460d0000000) chroot(&(0x7f0000000040)='./file0\x00') open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mknod(&(0x7f0000000100)='./file0\x00', 0x2000, 0x0) r3 = open(&(0x7f0000000140)='./file0\x00', 0x10, 0x209) compat_50_quotactl(&(0x7f00000003c0)='./file0\x00', 0x1, r1, &(0x7f00000004c0)="1e514096965b2ace2b3b688ff4449b1e7b58ccd6a577185c52142c6b225f50d5fd25ffc523b6b9e0a411367245da349de7b401771189ee4cba76a821741146d95ead6f073278c98865d922fd54103415ba9e0d5a946a561d31d7b79d13ac0208d5c0b75becbc53de5311b5fba9c5120e72af171118d95e6bfde5dcb070fb0be642d3652dc341f88074026aa9d7f3ed90f60c40141f0c8bccbcaed454b62ab926704728e118ac0bd1c8d4bfc3fe4494043bdea8a00fb1639bb46eaed47d2ca962d1eeb5c6ee01e5185d12702ddb36a6bf8caea3a1a8ed93b632abd29b33b2addbbdc7ad87f6d1be22c097") poll(&(0x7f0000000180)=[{r3, 0xd}], 0x1, 0x0) symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00') compat_50___msgctl13$IPC_STAT(0x0, 0x2, &(0x7f00000003c0)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100), 0xdffffffffffff803}}) lchown(&(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffff) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)=@abs={0x0, 0x0, 0x2}, 0x8, &(0x7f0000000200)}, 0x0) compat_40_mount(&(0x7f0000000140)='umap\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f00000001c0)) ioctl$FIOSEEKHOLE(0xffffffffffffffff, 0x80906979, &(0x7f0000000180)=0x8000000000000031) socketpair(0x0, 0x0, 0x0, 0x0) setuid(0xee01) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$FIOSEEKHOLE(0xffffffffffffffff, 0x8090690c, &(0x7f0000000180)) unlink(&(0x7f0000000000)='./file0\x00') pipe2(&(0x7f0000000340)={0xffffffffffffffff}, 0x0) readv(r4, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/50, 0xfd9f}], 0x2f) 6.627103032s ago: executing program 5: mknod(&(0x7f00000000c0)='./file0\x00', 0x6000, 0xe03) compat_50___msgctl13$IPC_STAT(0x0, 0x2, &(0x7f0000000280)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)}}) mknod(&(0x7f00000000c0)='./bus\x00', 0x2000, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mknod(&(0x7f0000000100)='./bus\x00', 0x8, 0x5300) compat_40_mount(&(0x7f0000000000)='null\x00', &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f00000001c0)) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) ktrace(&(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) modctl$MODCTL_LOAD(0x0, &(0x7f0000000140)={&(0x7f0000000040), 0x0, 0x0}) 5.663106422s ago: executing program 2: r0 = open(0x0, 0x0, 0x80) pipe(&(0x7f0000000400)={0xffffffffffffffff}) pipe2(&(0x7f0000000340)={0xffffffffffffffff}, 0x0) fcntl$setstatus(r2, 0x4, 0x20040) r3 = dup3(r1, r1, 0x0) fcntl$setstatus(r3, 0xa, 0x0) modctl$MODCTL_UNLOAD(0x4, &(0x7f0000000000)) r4 = socket$inet(0x2, 0x1, 0x0) compat_43_osend(r4, 0x0, 0xffffffffffffff91, 0x0) r5 = socket$inet(0x2, 0x2, 0x0) __fstat50(r5, 0x0) msgsnd(0x0, 0x0, 0x6e, 0x0) compat_50_setitimer(0x0, &(0x7f0000000080)={{0x0, 0x8000a15}}, 0x0) r6 = socket(0x1, 0x2, 0x0) symlink(&(0x7f0000000080)='.\x00', 0x0) ioctl$FIONREAD(r6, 0xc0106914, &(0x7f0000000080)) getsockopt$SO_PEERCRED(r0, 0xffff, 0x11, &(0x7f0000000000)={0x0, 0x0}, 0xc) setuid(r7) 5.447477035s ago: executing program 1: r0 = socket(0x18, 0x3, 0x0) getsockopt(r0, 0x29, 0xd, 0x0, 0x0) open(0x0, 0x0, 0x0) symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00') r1 = msgget$private(0x0, 0x214) compat_50___msgctl13$IPC_STAT(r1, 0x2, &(0x7f0000000280)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x0, 0x0, 0x4}, 0x7}}) lchown(&(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0) compat_40_mount(&(0x7f0000000380)='union\x00', &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f00000001c0)) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) rmdir(&(0x7f00000000c0)='./bus\x00') socket(0x18, 0x3, 0x0) (async) getsockopt(r0, 0x29, 0xd, 0x0, 0x0) (async) open(0x0, 0x0, 0x0) (async) symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00') (async) msgget$private(0x0, 0x214) (async) compat_50___msgctl13$IPC_STAT(r1, 0x2, &(0x7f0000000280)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x0, 0x0, 0x4}, 0x7}}) (async) lchown(&(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0) (async) compat_40_mount(&(0x7f0000000380)='union\x00', &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f00000001c0)) (async) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) (async) rmdir(&(0x7f00000000c0)='./bus\x00') (async) 4.340881847s ago: executing program 0: mknod(&(0x7f0000000100)='./file0\x00', 0x2000, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x100, 0x80) socket$inet(0x2, 0x2, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x40000802) open(&(0x7f0000000140)='./file0\x00', 0x10010, 0x1) mkdir(0x0, 0x0) socket(0x2, 0x1, 0x0) r0 = semget$private(0x0, 0x7, 0x1a2) semop(r0, &(0x7f0000000180)=[{0x4, 0xe6, 0x1800}, {0x4, 0x40, 0x1000}], 0x2) semctl$SETALL(r0, 0x0, 0x9, &(0x7f00000004c0)=[0xfffd]) ____semctl50$SETVAL(r0, 0x0, 0x8, &(0x7f0000000240)=@buf=0x0) compat_14___semctl$IPC_RMID(r0, 0x0, 0x0) r1 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) __clock_getres50(0x2, &(0x7f0000000040)) munmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000) compat_43_ommap(&(0x7f0000ffa000/0x4000)=nil, 0xfffffffffffff000, 0x0, 0x2, 0xffffffffffffffff, 0x0) ioctl$FIOASYNC(r1, 0x80047401, &(0x7f0000000000)=0x5) 4.018452637s ago: executing program 3: mknod(&(0x7f0000000040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x8000, 0x0) socket$inet6(0x18, 0x3, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, 0xfffffffffffffffe) symlink(&(0x7f0000000180)='.\x00', &(0x7f0000000240)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) (async) mknod(&(0x7f00000000c0)='./bus\x00', 0x2000, 0x1604) (async) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) (async, rerun: 32) __mount50(&(0x7f00000002c0)='overlay\x00', &(0x7f0000000040)='.\x00', 0x0, &(0x7f0000000540), 0x0) (async, rerun: 32) mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0) open(0x0, 0x0, 0x0) (async) __mount50(&(0x7f00000002c0)='overlay\x00', &(0x7f0000000040)='.\x00', 0x0, &(0x7f0000000540), 0x0) (async, rerun: 32) lchown(&(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffff) (rerun: 32) r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000005c0)='\x00', r1, &(0x7f0000000c80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) open$dir(&(0x7f00000001c0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200, 0x0) (async) socket(0x0, 0x0, 0x0) (async) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) (async) __mount50(&(0x7f0000000040)='procfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f00000000c0)='@', 0x1) (async) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r3 = dup3(r2, r2, 0x0) lseek(r3, 0x0, 0x6, 0x0) __getdents30(r3, 0x0, 0xfffffc01) (async) symlinkat(&(0x7f0000000dc0)='./file0\x00', r1, &(0x7f0000000ec0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) mkdirat(r0, &(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r4 = socket$inet(0x2, 0x2, 0x0) (async, rerun: 32) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) (rerun: 32) readv(r5, &(0x7f00000000c0)=[{&(0x7f00000002c0)=""/228, 0xe4}], 0x1) (async) fcntl$lock(r4, 0xa, 0x0) (async) compat_50_getitimer(0x0, &(0x7f0000000000)) rename(&(0x7f0000000840)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000a80)='./file0\x00') 3.944097759s ago: executing program 0: r0 = open(0x0, 0x0, 0x0) (async) compat_40_mount(0x0, &(0x7f00000003c0)='.\x00', 0x0, 0x0) (async) r1 = socket(0x2, 0x1, 0x0) ioctl$FIOSEEKHOLE(r1, 0xc0086662, &(0x7f00000000c0)) (async) setpriority(0x2, 0x0, 0x0) mknod(&(0x7f0000000080)='./file0\x00', 0x0, 0x40000802) open(0x0, 0x0, 0x0) (async) modctl$MODCTL_LOAD(0x0, 0x0) (async) symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00') (async) open(&(0x7f0000000380)='./file0/file0\x00', 0x0, 0x0) (async) compat_90_fstatvfs1(r0, &(0x7f00000004c0), 0x0) (async) socket(0x0, 0x0, 0x0) (async) r2 = getsid(0x0) open(0x0, 0x0, 0x0) (async) ptrace(0x9, r2, 0x0, 0x0) compat_50_wait4(0x0, 0x0, 0x0, 0x0) (async) ptrace(0xa, r2, &(0x7f0000000000), 0x12) (async) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) __mount50(&(0x7f00000002c0)='overlay\x00', &(0x7f0000000040)='.\x00', 0x0, &(0x7f0000000540), 0x0) (async) __mount50(&(0x7f00000002c0)='nfs\x00', &(0x7f0000000040)='.\x00', 0x0, &(0x7f00000001c0)="eb23a8793ff90000121de7a17643e3f5022333e1d670", 0x16) open(0x0, 0x0, 0x0) (async) compat_30_getfh(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)) ptrace(0x9, 0x0, 0x0, 0x0) setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) (async) socket$inet(0x2, 0x0, 0x0) (async) socket$inet(0x2, 0x0, 0x0) (async) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x40000802) r3 = open(&(0x7f0000000480)='./file0\x00', 0x1, 0x0) write(r3, &(0x7f0000000080)="8e", 0x4c0) 3.723006103s ago: executing program 0: r0 = socket(0x1f, 0x3, 0x0) sendto$inet(r0, 0x0, 0x0, 0x1, &(0x7f00000000c0)={0x2, 0x0}, 0xc) 3.721903413s ago: executing program 3: mkdir(&(0x7f0000000400)='./bus\x00', 0x8) (async) compat_40_mount(0x0, 0x0, 0x0, &(0x7f0000000140)) compat_40_mount(0x0, 0x0, 0x0, 0x0) (async) symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00') (async) compat_50___msgctl13$IPC_STAT(0x0, 0x2, &(0x7f0000000280)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100), 0x3}}) lchown(&(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffff) compat_40_mount(&(0x7f0000000380)='union\x00', &(0x7f00000003c0)='./file0\x00', 0x0, &(0x7f00000001c0)) unlink(&(0x7f0000000000)='./file0\x00') (async) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) (async, rerun: 64) r1 = open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x0) (async, rerun: 64) r2 = open$dir(&(0x7f0000000300)='./file0\x00', 0xa, 0x8) writev(r2, &(0x7f0000000340)=[{&(0x7f0000000000), 0x2cfea}], 0x1000000000000013) (async) symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00') (async) compat_50___msgctl13$IPC_STAT(0x0, 0x2, &(0x7f0000000280)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)}}) (async) lchown(&(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffff) ioctl$FIONSPACE(r1, 0x40046678, &(0x7f0000000580)) (async) compat_40_mount(&(0x7f0000000000)='null\x00', &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f00000001c0)) (async, rerun: 64) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) (rerun: 64) compat_40_mount(&(0x7f0000000440)='kernfs\x00', &(0x7f0000000480)='./file0\x00', 0x8000, &(0x7f00000004c0)="156a2c391a2c0af84b6b490322a8c0e9190b9b966839e25358e4184eddadb467d74c9274d81c2f91184f1fdf0f17bcc34aa28322f05fe94ea6d8694077720b543cb87b21ecf5e9c8bf788d42575d4f253ee693dffea4675e617203d4d01e22b64947e7d9976d66ae2b12d9bcad68b25b4cd4ea0291140e3234fcaac0a3c47b4eee08af1ac7") (async, rerun: 64) chroot(&(0x7f0000000180)='./file1\x00') (rerun: 64) symlink(&(0x7f0000000080)='.\x00', &(0x7f00000000c0)='./file0\x00') mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) (async, rerun: 32) rename(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file1/file0\x00') (async, rerun: 32) mknod(&(0x7f00000000c0)='./bus\x00', 0x6000, 0x0) (async) rename(&(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='./file1/file0\x00') (async) mmap(&(0x7f0000000000/0x13000)=nil, 0x13000, 0x3, 0x10, r1, 0x0, 0x0) sendmsg$unix(r0, &(0x7f0000000740)={&(0x7f00000005c0)=@file={0x1, './file1\x00'}, 0xa, &(0x7f0000000700)=[{&(0x7f0000000600)="9f8953d2ae081a93c791b9e4a9bca73346f61faab2021caa277eff8c998c6462f92d57926a11602939870c05bbf492c81cc9657b4b3510300800fbd2f418f173c6ca34abdc827687abce7494215109bd8d23e8804129a5885b8051ebb509f9f17b1d60e3e0984a26051d0f4ca0d9a7bc049f4ba659d97c28b17fab93886707ffe2f0265f0e4492c6d81e8ea2385bd57cc1b59804ae0175549f6e037a75e72b950563268b9c29bb467fc9b7fd9760ccd47823e528de5ad7adba64c471601c5b15b8535f34268e9e6e253d72a2e7360946706ee4fddfc6e993db338ab97118a1af94138638e9d0e981", 0xe8}], 0x1, 0x0, 0x0, 0x2}, 0x1) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000100)="19", 0x4000}], 0x1) 3.477782631s ago: executing program 0: mknod(&(0x7f0000000080)='./file0\x00', 0x2000, 0x40000802) pipe(0x0) r0 = _lwp_self() r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x53a) renameat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000480)='./file0\x00') r2 = socket$unix(0x1, 0x2, 0x0) mkdir(&(0x7f00000007c0)='./file0\x00', 0x0) compat_50___msgctl13$IPC_STAT(0x0, 0x2, &(0x7f00000003c0)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)}}) __mount50(&(0x7f0000000000)='fdesc\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0) lchown(&(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffff) compat_40_mount(&(0x7f0000000000)='null\x00', &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f00000001c0)) open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r3 = getppid() fktrace(r2, 0x0, 0x4, r3) readv(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/95, 0x5f}], 0x1) _lwp_wakeup(r0) r4 = accept$inet6(r1, &(0x7f00000001c0), &(0x7f0000000240)=0xc) compat_50___fstat30(r4, &(0x7f0000000280)) r5 = open(&(0x7f0000000000)='./bus\x00', 0x2, 0x0) r6 = open$dir(&(0x7f00000026c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800, 0x0) __fstat50(r6, &(0x7f0000000400)={0x0}) r8 = _lwp_self() recvfrom$inet6(r5, &(0x7f0000000340)=""/54, 0x36, 0x400, &(0x7f0000000380)={0x18, 0x3, 0x8001, 0x7fff}, 0xc) _lwp_wakeup(r8) open(&(0x7f0000000180)='./bus\x00', 0x400000, 0x10) r9 = socket(0x2, 0x3, 0x0) ioctl$FIOSEEKHOLE(r9, 0x4020426b, 0x0) _lwp_kill(r8, 0x80000000) mknod(&(0x7f0000000200)='./file0\x00', 0x2000, r7) mknod(&(0x7f0000000040)='./file0\x00', 0x40, r7) 3.415379711s ago: executing program 2: __mount50(&(0x7f00000002c0)='overlay\x00', &(0x7f0000000040)='.\x00', 0x0, &(0x7f0000000540), 0x0) mknod(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8000, 0x0) r0 = open$dir(&(0x7f00000026c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) compat_40_mount(&(0x7f0000000000)='tmpfs\x00', &(0x7f00000003c0)='.\x00', 0x0, &(0x7f0000000140)="01") unlink(0x0) open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x13000)=nil, 0x13000, 0x1, 0x10, r1, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x0) __fstat50(r0, &(0x7f0000000400)={0x0}) mknod(&(0x7f0000000200)='./file0\x00', 0x2000, r2) open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) 3.238357838s ago: executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) __mount50(&(0x7f0000000180)='fdesc\x00', 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f0000000540)='./file0\x00', 0x6000, 0x1003) r1 = open(&(0x7f00000001c0)='./file1\x00', 0x0, 0x2) pwrite(r1, &(0x7f0000000300)="5da3d3befc7c2c25986c8c74cb5995e1ce45532c2f78dcf146cda2a4a0069a330e4ec7b5f0ca6d8805e245f210324244aa", 0x31, 0x0) ioctl$FIONREAD(r1, 0x81986466, &(0x7f0000000080)) ioctl$FIOASYNC(0xffffffffffffffff, 0x40283104, 0x0) compat_40_mount(&(0x7f0000000380)='tmpfs\x00', &(0x7f00000003c0)='.\x00', 0x0, &(0x7f0000000140)="01") mkdir(&(0x7f0000000080)='./file0\x00', 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) _lwp_create(&(0x7f0000000100)={0x8, 0x0, {[0x0, 0xffffffff, 0x0, 0xfffffffc]}, {0x0, 0x0, 0x4}, {0xffffffffffffffff, 0x0, '/)!/\x00'}}, 0x0, 0x0) compat_40_mount(&(0x7f0000000200)='autofs\x00', &(0x7f0000000280)='./file1\x00', 0x0, &(0x7f0000000240)="008582f99104f71232da6a6abd7ebe34c72254db6e1ed323b423999b10217f79b4d855f016288230c6") __mount50(0x0, &(0x7f0000000040)='.\x00', 0xe680bf986d21abfb, 0x0, 0x0) compat_43_orecv(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r2 = socket(0x10, 0x2, 0x0) ioctl$FIOSEEKHOLE(r2, 0x8020690c, &(0x7f00000000c0)=0x8000000000000032) ioctl$OFIOGETBMAP(r0, 0xc004667a, &(0x7f0000000100)=0x7) _lwp_detach(0x0) mknod(&(0x7f0000000040)='.\x00', 0x4, 0x0) r3 = open$dir(&(0x7f0000000500)='./file2\x00', 0x0, 0x0) ioctl$FIOASYNC(r3, 0x8004667d, &(0x7f0000000100)=0x8001) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) readv(r4, 0x0, 0x0) pipe2(&(0x7f0000001600), 0x2) ioctl$FIOSETOWN(r2, 0x8004667c, &(0x7f0000002680)=0x80000004) read(r4, &(0x7f0000000700)=""/222, 0xde) 2.871609445s ago: executing program 0: symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00') open(&(0x7f0000000380)='./file0/file0\x00', 0x0, 0x0) socket(0x18, 0x2, 0x0) socket(0x10, 0x2, 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) compat_50_select(0x40, &(0x7f0000000080), 0x0, 0x0, 0x0) r1 = dup3(r0, r0, 0x0) symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00') fcntl$setstatus(r1, 0xa, 0x0) 1.943432549s ago: executing program 3: writev(0xffffffffffffffff, &(0x7f00000016c0)=[{&(0x7f0000000080)="a8327d4eb2863deebb2a969a5cf3a1911fd57deca06ddc85cbc0147eb8e2381562b66d9adcbb8fc18f821bf33cc20fd06dc839c102075fe62aff6a2c0691d5f30362f2db0b2bf74e2c907a5e5d2fd1f27d0b6aab4aff39840f13a93e68f9549cf7560caa8c0ee5bad61c0f473fd9d6d002f2e19ff052221b06def719ee165b86f9a2d87f6a0e134ff233257f2f9c4024", 0x90}], 0x1) _lwp_setname(0x0, &(0x7f0000002c80)) mknod(&(0x7f0000000000)='./file1\x00', 0x2000, 0xa718) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) ioctl$FIOASYNC(r0, 0x40043105, 0x0) compat_43_osetrlimit(0x0, &(0x7f0000000080)) sendmsg(0xffffffffffffffff, 0x0, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x5900) __mount50(&(0x7f00000002c0)='overlay\x00', &(0x7f0000000040)='.\x00', 0x1, &(0x7f0000000540), 0x0) __mount50(0x0, &(0x7f0000000040)='.\x00', 0xe680bf986d21abfb, &(0x7f0000000140), 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) __clone(0x0, &(0x7f00000001c0)) __wait450(0x0, 0x0, 0x8, 0x0) r1 = open$dir(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$OFIOGETBMAP(r1, 0xc020447f, &(0x7f0000000100)) 949.976363ms ago: executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) socket(0x10, 0x2, 0x0) ioctl$FIOSEEKHOLE(0xffffffffffffffff, 0x8090698e, &(0x7f0000000180)) r1 = socket(0x10, 0x2, 0x0) fktrace(r1, 0x0, 0x62e2dd08f149ff1b, 0x0) semctl$SETALL(0x0, 0x0, 0x9, 0x0) fcntl$lock(r0, 0xa, 0x0) __posix_fchown(0x0, 0x0, 0x0) __getcwd(&(0x7f0000000000)=""/12, 0xc) 791.733488ms ago: executing program 0: mknod(0x0, 0x0, 0x0) open(0x0, 0x0, 0x0) compat_40_mount(&(0x7f0000000000)='tmpfs\x00', &(0x7f00000003c0)='.\x00', 0x0, &(0x7f0000000140)="01") r0 = socket$unix(0x1, 0x2, 0x0) getpeername$unix(r0, &(0x7f0000000180)=@file={0x0, ""/507}, &(0x7f0000000080)=0x1fd) open(0x0, 0x0, 0x0) __getcwd(0x0, 0x0) ioctl$FIOASYNC(0xffffffffffffffff, 0x802c7415, 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0x6000, 0xe03) write(0xffffffffffffffff, 0x0, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) __posix_fadvise50(r1, 0x0, 0x0, 0x0, 0x4) _lwp_create(&(0x7f0000000100)={0x0, 0x0, {}, {}, {0x0, 0x0, '/)YR\x00'}}, 0x0, 0x0) __mount50(0x0, &(0x7f0000000040)='.\x00', 0xe680bf986d21abfb, &(0x7f0000000140), 0x0) open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) unmount(&(0x7f0000000000)='./file0\x00', 0x255a0100) 248.948872ms ago: executing program 4: compat_50___msgctl13$IPC_STAT(0x0, 0x2, 0x0) compat_50___msgctl13$IPC_STAT(0x0, 0x2, &(0x7f0000000380)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x7}}) compat_40_mount(&(0x7f0000000000)='tmpfs\x00', &(0x7f00000003c0)='.\x00', 0x0, &(0x7f0000000140)="01") mknod(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000001240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1) open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x0) unlink(&(0x7f0000000000)='./file0\x00') mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0e99db6de761f86, 0x0) 0s ago: executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) __mount50(&(0x7f0000000180)='fdesc\x00', 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f0000000540)='./file0\x00', 0x6000, 0x1003) r1 = open(&(0x7f00000001c0)='./file1\x00', 0x0, 0x2) pwrite(r1, &(0x7f0000000300)="5da3d3befc7c2c25986c8c74cb5995e1ce45532c2f78dcf146cda2a4a0069a330e4ec7b5f0ca6d8805e245f210324244aa", 0x31, 0x0) ioctl$FIONREAD(r1, 0x81986466, &(0x7f0000000080)) ioctl$FIOASYNC(0xffffffffffffffff, 0x40283104, 0x0) compat_40_mount(&(0x7f0000000380)='tmpfs\x00', &(0x7f00000003c0)='.\x00', 0x0, &(0x7f0000000140)="01") mkdir(&(0x7f0000000080)='./file0\x00', 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) _lwp_create(&(0x7f0000000100)={0x8, 0x0, {[0x0, 0xffffffff, 0x0, 0xfffffffc]}, {0x0, 0x0, 0x4}, {0xffffffffffffffff, 0x0, '/)!/\x00'}}, 0x0, 0x0) compat_40_mount(&(0x7f0000000200)='autofs\x00', &(0x7f0000000280)='./file1\x00', 0x0, &(0x7f0000000240)="008582f99104f71232da6a6abd7ebe34c72254db6e1ed323b423999b10217f79b4d855f016288230c6") __mount50(0x0, &(0x7f0000000040)='.\x00', 0xe680bf986d21abfb, 0x0, 0x0) compat_43_orecv(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r2 = socket(0x10, 0x2, 0x0) ioctl$FIOSEEKHOLE(r2, 0x8020690c, &(0x7f00000000c0)=0x8000000000000032) ioctl$OFIOGETBMAP(r0, 0xc004667a, &(0x7f0000000100)=0x7) _lwp_detach(0x0) mknod(&(0x7f0000000040)='.\x00', 0x4, 0x0) r3 = open$dir(&(0x7f0000000500)='./file2\x00', 0x0, 0x0) ioctl$FIOASYNC(r3, 0x8004667d, &(0x7f0000000100)=0x8001) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) readv(r4, 0x0, 0x0) pipe2(&(0x7f0000001600), 0x2) ioctl$FIOSETOWN(r2, 0x8004667c, &(0x7f0000002680)=0x80000004) read(r4, &(0x7f0000000700)=""/222, 0xde) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.37' (ED25519) to the list of known hosts. 2024/05/28 06:35:04 fuzzer started 2024/05/28 06:35:04 dialing manager at 10.128.0.163:30038 2024/05/28 06:35:04 starting 6 executor processes login: [ 48.1684603] WARNING: module error: vfs load failed for `', error 2 [ 48.1784705] WARNING: module error: vfs load failed for `', error 2 [ 48.1784705] WARNING: module error: vfs load failed for `', error 2 [ 50.7484660] tap0: detached [ 51.3084958] tap4: detached [ 52.1084643] tap1: detached [ 53.0184738] tap2: detached [ 53.0884882] WARNING: module error: vfs load failed for `zfs', error 2 [ 54.1884942] tap3: detached [ 54.3484787] sockaddr_getsize_by_family: (syz-executor.5:1510:1331) Unhandled address family=0 [ 54.7984679] tap4: detached [ 55.3785060] tap2: discarding oversize frame (len=4158) [ 55.3785060] tap2: discarding oversize frame (len=4158) [ 56.7284724] tap1: detached [ 56.9584708] tap0: detached [ 58.0784979] uhub1: device problem, disabling port 1 [ 58.6684723] tap5: detached [ 59.7284746] uhub1: device problem, disabling port 1 [ 60.0085091] tap0: detached [ 61.7084841] WARNING: defaulted mmap() share type to MAP_SHARED (pid 2261 command syz-executor.0) [ 61.8884766] tap1: detached [ 63.0584991] WARNING: module error: vfs load failed for `compat_12', error 2 [ 64.7284824] tap4: detached [ 65.0184844] tap5: detached [ 65.6084967] tap2: detached [ 65.7184879] tap3: detached [ 66.6684792] WARNING: defaulted mmap() share type to MAP_PRIVATE (pid 2637 command syz-executor.2) [ 67.6384825] tap1: detached [ 67.8584810] uhub0: device problem, disabling port 1 ./file0./file0@ @ jO[ 69.6985084] tap4: detached May 28 06:35:33 ci2-netbsd-kubsan-3 init: getty repeating too quickly on port `/dev/constty', sleeping [ 71.2284976] sockaddr_getsize_by_family: (syz-executor.1:2868:2912) Unhandled address family=0 [ 71.4884829] tap3: detached [ 71.9185102] tap0: detached [ 72.9784970] load: 3.78 not a controlling terminal [ 73.7685337] tap4: detached [ 75.0584895] WARNING: module error: vfs load failed for `compat_sysv_14', error 2 [ 75.7384896] tap5: detached [ 78.5584908] tap3: detached ./file0./file0[ 79.3384957] tap2: detached À @ êÏ./file0./file0À @ êÏ[ 80.3684961] WARNING: module error: vfs load failed for `compat_sysv_14', error 2 [ 80.9584959] tap3: detached [ 81.5384951] WARNING: module error: vfs load failed for `compat_12', error 2 [ 84.2484992] tap3: detached [ 84.4885144] tap1: detached [ 86.3685026] tap3: detached [ 87.2485023] WARNING: defaulted mmap() share type to MAP_PRIVATE (pid 749 command syz-executor.1) [ 87.8785077] tap5: detached [ 89.2685026] tap1: detached [ 90.8585225] tap5: detached [ 91.1085070] tap3: detached [ 91.5085425] WARNING: defaulted mmap() share type to MAP_PRIVATE (pid 908 command syz-executor.5) [ 92.7185223] tap1: detached [ 94.8585096] tap5: detached [ 95.1985098] tap3: detached [ 95.7085101] tap2: detached [ 97.2185274] tap0: detached [ 98.4385227] tap3: detached [ 99.3885388] WARNING: defaulted mmap() share type to MAP_PRIVATE (pid 835 command syz-executor.3) [ 99.6385227] tap2: detached [ 100.6985162] WARNING: defaulted mmap() share type to MAP_PRIVATE (pid 3744 command syz-executor.2) [ 102.1685344] tap1: detached [ 103.8185647] uhub3: device problem, disabling port 1 May 28 06:36:07 ci2-netbsd-kubsan-3 init: getty repeating too quickly on port `/dev/constty', sleeping [ 106.1385501] tap1: detached [ 106.2885264] tap5: detached [ 107.6385237] tap0: detached [ 108.5785350] WARNING: defaulted mmap() share type to MAP_PRIVATE (pid 4780 command syz-executor.0) [ 109.8385290] WARNING: module error: vfs load failed for `compat_12', error 2 [ 110.4185440] tap5: detached [ 111.3885500] WARNING: defaulted mmap() share type to MAP_PRIVATE (pid 4672 command syz-executor.3) [ 112.2685403] tap4: detached [ 113.4185332] WARNING: module error: vfs load failed for `compat_12', error 2 [ 113.7985368] WARNING: module error: vfs load failed for `compat_sysv_14', error 2 [ 113.8585397] WARNING: defaulted mmap() share type to MAP_PRIVATE (pid 2878 command syz-executor.5) [ 113.9085294] tap0: detached [ 114.5885321] WARNING: module error: module `sFAmJ"{' not found [ 115.9685317] tap3: detached [ 117.1785353] tap0: detached [ 118.7585362] tap5: detached [ 120.1585358] tap0: detached [ 120.9085368] uhub5: device problem, disabling port 1 [ 121.9185559] WARNING: module error: vfs load failed for `afs', error 2 [ 122.9485578] kobj_load, 185: [./file0]: linker error: read failed 4 [ 123.0085809] WARNING: module error: vfs load failed for `./file0', error 4 [ 123.3385619] tap1: detached [ 123.4985402] tap4: detached [ 124.4885423] WARNING: defaulted mmap() share type to MAP_PRIVATE (pid 1528 command syz-executor.4) [ 126.1985435] tap2: detached [ 127.1985433] tap0: detached [ 129.4490335] tap3: detached [ 129.8292157] tap4: detached [ 130.0493192] tap5: detached [ 133.9311426] tap1: detached [ 134.2813087] tap5: detached [ 135.0816859] tap4: detached 136.6024055] WARNING: module error: vfs load failed for `compat_sysv_14', error 2 [ 136.6424168] tap0: detached [ 139.4737484] tap2: detached [ 140.3341718] tap4: detached [ 141.5647328] tap0: detached [ 142.1049888] WARNING: module error: vfs load failed for `hfs', error 2 [ 143.9258725] tap4: detached [ 144.7762457] tap2: detached [ 145.1964392] tap0: detached [ 145.9868212] pad0: outputs: 44100Hz, 16-bit, stereo [ 145.9868212] audio0 at pad0: playback [ 145.9968678] audio0: slinear_le:16 -> slinear_le:16 2ch 44100Hz, blk 1764 bytes (10ms) for playback [ 146.0078136] spkr1 at audio0: PC Speaker (synthesized) [ 146.0078136] wsbell at spkr1 not configured [ 146.0568474] spkr1: detached [ 146.0668598] audio0: detached [ 146.0668598] pad0: detached [ 146.1168733] pad0: outputs: 44100Hz, 16-bit, stereo [ 146.1168733] audio0 at pad0: playback [ 146.1268785] audio0: slinear_le:16 -> slinear_le:16 2ch 44100Hz, blk 1764 bytes (10ms) for playback [ 146.1368830] spkr1 at audio0: PC Speaker (synthesized) [ 146.1368830] wsbell at spkr1 not configured [ 146.3169776] spkr1: detached [ 146.3169776] audio0: detached [ 146.3269774] pad0: detached [ 147.1773719] tap1: detached [ 148.3979587] tap0: detached [ 149.3984167] WARNING: module error: vfs load failed for `./file0', error 6 [ 150.8991406] tap5: detached [ 151.8896154] tap4: detached [ 152.6499465] pad0: outputs: 44100Hz, 16-bit, stereo [ 152.6599672] audio0 at pad0: playback [ 152.6599672] audio0: slinear_le:16 -> slinear_le:16 2ch 44100Hz, blk 1764 bytes (10ms) for playback [ 152.6699558] spkr1 at audio0: PC Speaker (synthesized) [ 152.6799645] wsbell at spkr1 not configured [ 152.7199778] spkr1: detached [ 152.7299843] audio0: detached [ 152.7299843] pad0: detached [ 152.7900209] pad0: outputs: 44100Hz, 16-bit, stereo [ 152.7900209] audio0 at pad0: playback [ 152.8000552] audio0: slinear_le:16 -> slinear_le:16 2ch 44100Hz, blk 1764 bytes (10ms) for playback [ 152.8100549] spkr1 at audio0: PC Speaker (synthesized) [ 152.8200257] wsbell at spkr1 not configured [ 152.9300902] spkr1: detached [ 152.9300902] audio0: detached [ 152.9414596] pad0: detached [ 153.4103053] tap0: detached [ 153.6604216] tap2: detached [ 155.1211100] tap1: detached [ 156.3216739] tap5: detached [ 156.3417022] btuart0: major 8 minor 262146 [ 156.5217869] btuart0: detached [ 156.8719480] WARNING: module error: vfs load failed for `compat_09', error 2 [ 159.1830174] tap1: detached [ 159.1930225] tap5: detached [ 159.9533866] tap4: detached [ 160.0934468] WARNING: defaulted mmap() share type to MAP_PRIVATE (pid 5932 command syz-executor.1) [ 161.4640964] WARNING: module error: vfs load failed for `compat_sysv_14', error 2 [ 162.2544632] tap2: detached [ 163.6751380] .: failed to start extattr, error = 0[ 164.0453284] tap0: detached [ 164.1853863] tap1: detached [ 166.0262392] tap5: detached [ 166.2863654] tap3: detached [ 166.3864549] WARNING: module error: vfs load failed for `compat_sysv_14', error 2 [ 167.4569221] tap4: detached [ 167.6970391] WARNING: module error: vfs load failed for `compat_12', error 2 [ 168.0071839] tap2: detached [ 169.0076395] .: failed to start extattr, error = 0[ 169.6779751] tap5: detached [ 170.5783900] kobj_load, 185: [./file0]: linker error: read failed 22 [ 170.5783900] WARNING: module error: vfs load failed for `./file0', error 22 [ 171.5288272] tap0: detached [ 172.2791774] sockaddr_getsize_by_family: (syz-executor.0:3913:5559) Unhandled address family=0 [ 173.1796053] tap3: detached [ 173.5998036] tap4: detached [ 175.0104623] tap1: detached [ 175.6107734] tap2: detached [ 178.1320993] tap0: detached [ 178.5923414] tap3: detached [ 179.1026252] WARNING: module error: vfs load failed for `compat_sysv_14', error 2 [ 180.5733988] tap4: detached [ 182.3543464] tap1: detached [ 182.8646358] tap2: detached [ 183.2448465] .: failed to start extattr, error = 0sockaddr_getsize_by_family: (syz-executor.1:5984:3688) Unhandled address family=0 [ 183.4449213] panic: kernel diagnostic assertion "requested_size > 0" failed: file "/syzkaller/managers/ci2-netbsd-kubsan/kernel/sys/kern/subr_kmem.c", line 370 kmem_intr_free(0xffffc347a968fc40, 0) [ 183.4678864] cpu0: Begin traceback... [ 183.5049426] vpanic() at netbsd:vpanic+0x2f0 [ 183.6450163] kern_assert() at netbsd:kern_assert+0x65 [ 183.7550758] kmem_intr_free() at netbsd:kmem_intr_free+0x242 [ 183.8451220] kern_free() at netbsd:kern_free+0x86 [ 183.9451811] netexport_clear() at netbsd:netexport_clear+0x37a [ 184.0452291] netexport_unmount() at netbsd:netexport_unmount+0xa5 [ 184.1352766] vfs_hooks_unmount() at netbsd:vfs_hooks_unmount+0x66 [ 184.2353307] dounmount() at netbsd:dounmount+0x306 [ 184.3253777] sys_unmount() at netbsd:sys_unmount+0x224 [ 184.4154272] sys___syscall() at netbsd:sys___syscall+0x1e4 [ 184.5154819] syscall() at netbsd:syscall+0x28b [ 184.5354899] --- syscall (number 22 via SYS_syscall) --- [ 184.5655162] netbsd:syscall+0x28b: [ 184.5655162] cpu0: End traceback... [ 184.5766180] fatal breakpoint trap in supervisor mode [ 184.5766180] trap type 1 code 0 rip 0xffffffff80235475 cs 0x8 rflags 0x246 cr2 0x77f60bc59ecd ilevel 0 rsp 0xffff940248b4ac20 [ 184.5925157] curlwp 0xffffc347a1898980 pid 6862.5054 lowest kstack 0xffff940248b462c0 Stopped in pid 6862.5054 (syz-executor.0) at netbsd:breakpoint+0x5: leave ? breakpoint() at netbsd:breakpoint+0x5 db_panic() at netbsd:db_panic+0xec vpanic() at netbsd:vpanic+0x2f0 kern_assert() at netbsd:kern_assert+0x65 kmem_intr_free() at netbsd:kmem_intr_free+0x242 kern_free() at netbsd:kern_free+0x86 netexport_clear() at netbsd:netexport_clear+0x37a netexport_unmount() at netbsd:netexport_unmount+0xa5 vfs_hooks_unmount() at netbsd:vfs_hooks_unmount+0x66 dounmount() at netbsd:dounmount+0x306 sys_unmount() at netbsd:sys_unmount+0x224 sys___syscall() at netbsd:sys___syscall+0x1e4 syscall() at netbsd:syscall+0x28b --- syscall (number 22 via SYS_syscall) --- netbsd:syscall+0x28b: Panic string: kernel diagnostic assertion "requested_size > 0" failed: file "/syzkaller/managers/ci2-netbsd-kubsan/kernel/sys/kern/subr_kmem.c", line 370 kmem_intr_free(0xffffc347a968fc40, 0) PID LID S CPU FLAGS STRUCT LWP * NAME WAIT 3310 3310 2 0 0 ffffc347a1d9e680 syz-executor.4 3063 3063 2 0 0 ffffc347a0ae8a80 syz-executor.5 2694 2694 2 0 0 ffffc347a1d9eac0 syz-executor.3 5851 5851 2 0 0 ffffc347a975a700 syz-executor.2 5984 3688 3 0 180 ffffc347b1ee36c0 syz-executor.1 pipe_rd 5984 5984 2 0 10000140 ffffc347a6a941c0 syz-executor.1 6862 6571 3 0 180 ffffc347a51452c0 syz-executor.0 parked 6862 > 5054 7 0 0 ffffc347a1898980 syz-executor.0 6862 6862 2 0 10040000 ffffc347af13d540 syz-executor.0 5707 5707 3 1 180 ffffc347af5355c0 syz-executor.3 wait 3041 3041 2 0 140 ffffc347b4547680 syz-executor.1 3215 3215 3 1 180 ffffc347a95d5300 syz-executor.2 wait 5553 5553 3 1 180 ffffc347a6a94600 syz-executor.5 wait 5931 > 5931 7 1 0 ffffc347a975a2c0 syz-executor.4 3200 3200 2 0 140 ffffc347a03e82c0 syz-executor.0 6495 6495 3 1 180 ffffc347aa2768c0 init nanoslp 2555 2555 3 1 180 ffffc347a96299c0 syz-executor.5 parked 2718 2718 3 1 180 ffffc347a0597300 syz-executor.1 parked 5067 5067 3 0 180 ffffc347a5145b40 syz-executor.5 parked 4807 4807 3 1 180 ffffc347ae5fe940 syz-executor.1 parked 2153 2153 3 0 180 ffffc347a1898540 syz-executor.2 parked 1785 1785 3 0 180 ffffc347ac0ff4c0 syz-executor.3 parked 1575 2653 3 0 11100000 ffffc347a066c9c0 syz-executor.3 vfork 1575 1575 2 0 11000040 ffffc347ae5fe0c0 syz-executor.3 4384 4384 3 1 180 ffffc347ae5fe500 syz-executor.0 parked 1665 1665 3 0 180 ffffc347af13d980 syz-executor.1 parked 1437 1437 3 0 180 ffffc347b4547ac0 syz-executor.3 parked 3422 3422 3 0 180 ffffc347ac0ff900 syz-executor.4 parked 3151 3151 3 1 180 ffffc347ae12a780 syz-executor.1 parked 1092 1092 3 1 180 ffffc347af535180 syz-executor.1 parked 1156 1156 3 1 180 ffffc347aa276480 syz-executor.2 parked 4150 4150 3 1 180 ffffc347ac982300 syz-executor.1 parked 754 754 3 1 180 ffffc347ac982740 syz-executor.0 parked 322 322 3 0 180 ffffc347ae12abc0 syz-executor.4 parked 3642 577 3 0 11100000 ffffc3479fec7200 syz-executor.4 vfork 3642 3642 3 1 11000000 ffffc347af13d100 syz-executor.4 lwpwait 3514 3514 3 1 180 ffffc347a9629140 syz-executor.1 parked 2739 2739 3 1 180 ffffc347a9629580 syz-executor.0 parked 2875 2875 3 0 180 ffffc347a07a7340 syz-executor.2 parked 2539 2539 3 0 180 ffffc347a1898100 syz-executor.5 parked 1238 1209 2 0 100100 ffffc347a116da00 syz-fuzzer 1238 1245 2 0 100100 ffffc347a08b61c0 syz-fuzzer 1238 1106 2 0 140100 ffffc347a09cf480 syz-fuzzer 1238 1241 3 1 0 ffffc347a066c580 syz-fuzzer lwpwait 1238 929 2 0 100100 ffffc347a24656c0 syz-fuzzer 1238 1235 2 0 100100 ffffc347a2465280 syz-fuzzer 1238 1236 2 0 100000 ffffc347a01de280 syz-fuzzer 1222 1222 2 0 0 ffffc347a01deb00 sshd 1225 1225 3 1 180 ffffc347a1d9e240 getty nanoslp 1224 1224 3 0 180 ffffc3479fe9cac0 getty nanoslp 1151 1151 3 0 180 ffffc347a01de6c0 getty nanoslp 1105 1105 3 0 180 ffffc347a0ae8200 sshd select 1098 1098 3 1 180 ffffc347a0ae8640 powerd kqueue 700 700 3 1 180 ffffc347a08b6a40 syslogd kqueue 744 744 3 1 180 ffffc347a0597b80 dhcpcd poll 559 559 3 0 180 ffffc347a066c140 dhcpcd poll 745 745 2 0 0 ffffc347a0597740 dhcpcd 604 604 3 0 180 ffffc347a03e8b40 dhcpcd poll 292 292 3 1 180 ffffc347a07a7bc0 dhcpcd poll 485 485 3 1 180 ffffc347a07a7780 dhcpcd poll 291 291 3 1 180 ffffc347a03e8700 dhcpcd poll 1 1 3 1 180 ffffc34797c9f100 init wait 0 3491 3 1 200 ffffc347a975ab40 ktrace ktrwait 0 3261 3 0 200 ffffc347ae12a340 ktrace ktrwait 0 557 3 0 200 ffffc3479fec7640 physiod physiod 0 196 3 0 200 ffffc3479fe9c680 pooldrain pooldrain 0 195 2 0 240 ffffc3479fe9c240 ioflush 0 194 3 1 200 ffffc3479fec7a80 pgdaemon pgdaemon 0 170 3 1 200 ffffc3479dddea40 usb7 usbevt 0 169 3 1 200 ffffc3479ddde600 usb6 usbevt 0 168 3 0 200 ffffc3479ddde1c0 usb5 usbevt 0 167 3 1 200 ffffc3479ad51a00 usb4 usbevt 0 166 3 1 200 ffffc3479ad515c0 usb3 usbevt 0 165 3 1 200 ffffc3479ad51180 usb2 usbevt 0 31 3 1 200 ffffc34798cf49c0 usb1 usbevt 0 63 3 0 200 ffffc34798cf4580 usb0 usbevt 0 126 3 1 200 ffffc34798cf4140 usbtask-dr usbtsk 0 125 3 1 200 ffffc34797c9f980 usbtask-hc usbtsk 0 124 3 0 200 ffffc34796095b00 swwreboot swwreboot 0 123 2 0 240 ffffc34797c9f540 npfgc0 0 122 3 1 200 ffffc34797c5d940 rt_free rt_free 0 121 3 1 200 ffffc34797c5d500 unpgc unpgc 0 120 3 1 200 ffffc34797c5d0c0 key_timehandler key_timehandler 0 119 3 1 200 ffffc34797c4f900 icmp6_wqinput/1 icmp6_wqinput 0 118 3 0 200 ffffc34797c4f4c0 icmp6_wqinput/0 icmp6_wqinput 0 117 3 1 200 ffffc34797c4f080 nd6_timer nd6_timer 0 116 3 1 200 ffffc34797c2b8c0 carp6_wqinput/1 carp6_wqinput 0 115 3 0 200 ffffc34797c2b480 carp6_wqinput/0 carp6_wqinput 0 114 3 1 200 ffffc34797c2b040 carp_wqinput/1 carp_wqinput 0 113 3 0 200 ffffc34797bdebc0 carp_wqinput/0 carp_wqinput 0 112 3 1 200 ffffc34797aff740 icmp_wqinput/1 icmp_wqinput 0 111 3 0 200 ffffc34797affb80 icmp_wqinput/0 icmp_wqinput 0 110 2 0 200 ffffc34797bde340 rt_timer 0 109 3 0 200 ffffc34797bde780 vmem_rehash vmem_rehash 0 100 3 0 200 ffffc34797aff300 entbutler entropy 0 99 3 0 200 ffffc3479753eb40 viomb balloon 0 98 3 1 200 ffffc3479753e700 vioif0_txrx/1 vioif0_txrx 0 97 3 0 200 ffffc3479753e2c0 vioif0_txrx/0 vioif0_txrx 0 30 3 1 200 ffffc347960956c0 scsibus0 sccomp 0 29 3 0 200 ffffc34796095280 pms0 pmsreset 0 28 3 1 200 ffffc34795fb5ac0 xcall/1 xcall 0 27 1 1 200 ffffc34795fb5680 softser/1 0 26 1 1 200 ffffc34795fb5240 softclk/1 0 25 1 1 200 ffffc34795f98a80 softbio/1 0 24 1 1 200 ffffc34795f98640 softnet/1 0 23 1 1 201 ffffc34795f98200 idle/1 0 22 3 0 200 ffffc348c4333a40 lnxsyswq lnxsyswq 0 21 3 1 200 ffffc348c4333600 lnxubdwq lnxubdwq 0 20 3 0 200 ffffc348c43331c0 lnxpwrwq lnxpwrwq 0 19 3 0 200 ffffc348c4342a00 lnxlngwq lnxlngwq 0 18 3 0 200 ffffc348c43425c0 lnxhipwq lnxhipwq 0 17 3 0 200 ffffc348c4342180 lnxrcugc lnxrcugc 0 16 3 0 200 ffffc348c43599c0 sysmon smtaskq 0 15 3 1 200 ffffc348c4359580 pmfsuspend pmfsuspend 0 14 3 0 200 ffffc348c4359140 pmfevent pmfevent 0 13 3 0 200 ffffc348c436c980 sopendfree sopendfr 0 12 3 0 200 ffffc348c436c540 ifwdog ifwdog 0 11 3 0 200 ffffc348c436c100 iflnkst iflnkst 0 10 3 1 200 ffffc348c5397940 nfssilly nfssilly 0 9 3 1 200 ffffc348c5397500 pooldisp pooldisp 0 8 3 1 200 ffffc348c53970c0 modunload mod_unld 0 7 3 0 200 ffffc348c53c2900 xcall/0 xcall 0 6 1 0 200 ffffc348c53c24c0 softser/0 0 5 1 0 200 ffffc348c53c2080 softclk/0 0 4 1 0 200 ffffc348c53ed8c0 softbio/0 0 3 1 0 200 ffffc348c53ed480 softnet/0 0 2 1 0 201 ffffc348c53ed040 idle/0 0 0 2 0 240 ffffffff86795c80 swapper [Locks tracked through LWPs] ****** LWP 5851.5851 (syz-executor.2) @ 0xffffc347a975a700, l_stat=2 *** Locks held: * Lock 0 (initialized at netbsd:fork1+0x4c5) lock address : ffffc347a067ee90 type : sleep/adaptive initialized : netbsd:fork1+0x4c5 shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 0 relevant cpu : 0 last held: 1 relevant lwp : 0xffffc347a975a700 last held: 0xffffc347a975a700 last locked* : netbsd:execve_loadvm+0x22d unlocked : 0 owner/count : 0xffffc347a975a700 flags : 0x0000000000000004 Turnstile: no active turnstile for this lock. *** Locks wanted: none ****** LWP 5984.3688 (syz-executor.1) @ 0xffffc347b1ee36c0, l_stat=3 *** Locks held: none *** Locks wanted: * Lock 0 (initialized at netbsd:module_hook_init+0x1c) lock address : netbsd:module_hook type : sleep/adaptive initialized : netbsd:module_hook_init+0x1c shared holds : 0 exclusive: 0 shares wanted: 0 exclusive: 0 relevant cpu : 0 last held: 0 relevant lwp : 0xffffc347b1ee36c0 last held: 000000000000000000 last locked : 0 unlocked* : 0 owner field : 000000000000000000 wait/spin: 0/0 Turnstile: no active turnstile for this lock. ****** LWP 6862.5054 (syz-executor.0) @ 0xffffc347a1898980, l_stat=7 *** Locks held: * Lock 0 (initialized at netbsd:vfsinit+0x303) lock address : netbsd:vfs_hooks_lock type : sleep/adaptive initialized : netbsd:vfsinit+0x303 shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 0 relevant cpu : 0 last held: 0 relevant lwp : 0xffffc347a1898980 last held: 0xffffc347a1898980 last locked* : netbsd:vfs_hooks_unmount+0x21 unlocked : netbsd:vfs_hooks_reexport+0xcb owner field : 0xffffc347a1898980 wait/spin: 0/0 Turnstile: no active turnstile for this lock. * Lock 1 (initialized at netbsd:nfsserver_modcmd+0xd5) lock address : netbsd:netexport_lock type : sleep/adaptive initialized : netbsd:nfsserver_modcmd+0xd5 shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 0 relevant cpu : 0 last held: 0 relevant lwp : 0xffffc347a1898980 last held: 0xffffc347a1898980 last locked* : netbsd:netexport_unmount+0x34 unlocked : netbsd:mountd_set_exports_list.part.0+0x32b owner/count : 0xffffc347a1898980 flags : 0x0000000000000004 Turnstile: no active turnstile for this lock. *** Locks wanted: * Lock 0 (initialized at netbsd:config_init+0x71) lock address : netbsd:config_misc_lock type : sleep/adaptive initialized : netbsd:config_init+0x71 shared holds : 0 exclusive: 0 shares wanted: 0 exclusive: 0 relevant cpu : 0 last held: 0 relevant lwp : 0xffffc347a1898980 last held: 000000000000000000 last locked : netbsd:config_process_deferred+0x45 unlocked* : netbsd:config_attach_pseudo_acquire+0x208 owner field : 000000000000000000 wait/spin: 0/0 Turnstile: no active turnstile for this lock. ****** LWP 5707.5707 (syz-executor.3) @ 0xffffc347af5355c0, l_stat=3 *** Locks held: * Lock 0 (initialized at netbsd:kcov_open+0x52) lock address : ffffc347c94af280 type : sleep/adaptive initialized : netbsd:kcov_open+0x52 shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 0 relevant cpu : 1 last held: 1 relevant lwp : 0xffffc347af5355c0 last held: 0xffffc347af5355c0 last locked* : netbsd:kcov_fops_ioctl+0x5c unlocked : 0 owner field : 000000000000000000 wait/spin: 0/0 Turnstile: no active turnstile for this lock. * Lock 1 (initialized at netbsd:uvm_obj_init+0xee) lock address : ffffc347c2796280 type : sleep/adaptive initialized : netbsd:uvm_obj_init+0xee shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 0 relevant cpu : 1 last held: 1 relevant lwp : 0xffffc347af5355c0 last held: 0xffffc347af5355c0 last locked* : netbsd:uvm_fault_internal+0x2453 unlocked : netbsd:uvm_fault_lower_enter+0x840 owner/count : 000000000000000000 flags : 000000000000000000 Turnstile: no active turnstile for this lock. *** Locks wanted: none ****** LWP 5553.5553 (syz-executor.5) @ 0xffffc347a6a94600, l_stat=3 *** Locks held: * Lock 0 (initialized at netbsd:kcov_open+0x52) lock address : ffffc347c7e124c0 type : sleep/adaptive initialized : netbsd:kcov_open+0x52 shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 0 relevant cpu : 1 last held: 1 relevant lwp : 0xffffc347a6a94600 last held: 0xffffc347a6a94600 last locked* : netbsd:kcov_fops_ioctl+0x5c unlocked : 0 owner field : 000000000000000000 wait/spin: 0/0 Turnstile: no active turnstile for this lock. *** Locks wanted: none ****** LWP 5931.5931 (syz-executor.4) @ 0xffffc347a975a2c0, l_stat=7 *** Locks held: * Lock 0 (initialized at netbsd:vcache_alloc+0xbf) lock address : ffffc347c79cde80 type : sleep/adaptive initialized : netbsd:vcache_alloc+0xbf shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 0 relevant cpu : 1 last held: 1 relevant lwp : 0xffffc347a975a2c0 last held: 0xffffc347a975a2c0 last locked* : netbsd:genfs_lock+0x220 unlocked : netbsd:genfs_unlock+0x50 owner/count : 000000000000000000 flags : 000000000000000000 Turnstile: no active turnstile for this lock. * Lock 1 (initialized at netbsd:vcache_alloc+0xbf) lock address : ffffc347c6cfd240 type : sleep/adaptive initialized : netbsd:vcache_alloc+0xbf shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 0 relevant cpu : 1 last held: 1 relevant lwp : 0xffffc347a975a2c0 last held: 0xffffc347a975a2c0 last locked* : netbsd:genfs_lock+0x220 unlocked : netbsd:genfs_unlock+0x50 owner/count : 000000000000000000 flags : 0x0000000000000010 Turnstile: no active turnstile for this lock. *** Locks wanted: * Lock 0 (initialized at netbsd:vcache_alloc+0xcb) lock address : ffffc347c1bdadc0 type : sleep/adaptive initialized : netbsd:vcache_alloc+0xcb shared holds : 0 exclusive: 0 shares wanted: 0 exclusive: 1 relevant cpu : 1 last held: 1 relevant lwp : 0xffffc347a975a2c0 last held: 000000000000000000 last locked : netbsd:brelsel+0x743 unlocked* : netbsd:brelsel+0x844 owner field : 0x0000000000000010 wait/spin: 0/0 Turnstile: no active turnstile for this lock. ****** LWP 559.559 (dhcpcd) @ 0xffffc347a066c140, l_stat=3 *** Locks held: none *** Locks wanted: * Lock 0 (initialized at netbsd:module_hook_init+0x1c) lock address : netbsd:module_hook type : sleep/adaptive initialized : netbsd:module_hook_init+0x1c shared holds : 0 exclusive: 0 shares wanted: 0 exclusive: 0 relevant cpu : 0 last held: 0 relevant lwp : 0xffffc347a066c140 last held: 000000000000000000 last locked : 0 unlocked* : 0 owner field : 000000000000000000 wait/spin: 0/0 Turnstile: no active turnstile for this lock. ****** LWP 745.745 (dhcpcd) @ 0xffffc347a0597740, l_stat=2 *** Locks held: none *** Locks wanted: * Lock 0 (initialized at netbsd:module_hook_init+0x1c) lock address : netbsd:module_hook type : sleep/adaptive initialized : netbsd:module_hook_init+0x1c shared holds : 0 exclusive: 0 shares wanted: 0 exclusive: 0 relevant cpu : 0 last held: 0 relevant lwp : 0xffffc347a0597740 last held: 000000000000000000 last locked : 0 unlocked* : 0 owner field : 000000000000000000 wait/spin: 0/0 Turnstile: no active turnstile for this lock. ****** LWP 485.485 (dhcpcd) @ 0xffffc347a07a7780, l_stat=3 *** Locks held: none *** Locks wanted: * Lock 0 (initialized at netbsd:module_hook_init+0x1c) lock address : netbsd:module_hook type : sleep/adaptive initialized : netbsd:module_hook_init+0x1c shared holds : 0 exclusive: 0 shares wanted: 0 exclusive: 0 relevant cpu : 1 last held: 0 relevant lwp : 0xffffc347a07a7780 last held: 000000000000000000 last locked : 0 unlocked* : 0 owner field : 000000000000000000 wait/spin: 0/0 Turnstile: no active turnstile for this lock. ****** LWP 291.291 (dhcpcd) @ 0xffffc347a03e8700, l_stat=3 *** Locks held: none *** Locks wanted: * Lock 0 (initialized at netbsd:module_hook_init+0x1c) lock address : netbsd:module_hook type : sleep/adaptive initialized : netbsd:module_hook_init+0x1c shared holds : 0 exclusive: 0 shares wanted: 0 exclusive: 0 relevant cpu : 1 last held: 0 relevant lwp : 0xffffc347a03e8700 last held: 000000000000000000 last locked : 0 unlocked* : 0 owner field : 000000000000000000 wait/spin: 0/0 Turnstile: no active turnstile for this lock. ****** LWP 0.26 (softclk/1) @ 0xffffc34795fb5240, l_stat=1 *** Locks held: none *** Locks wanted: * Lock 0 (initialized at netbsd:module_hook_init+0x1c) lock address : netbsd:module_hook type : sleep/adaptive initialized : netbsd:module_hook_init+0x1c shared holds : 0 exclusive: 0 shares wanted: 0 exclusive: 0 relevant cpu : 1 last held: 0 relevant lwp : 0xffffc34795fb5240 last held: 000000000000000000 last locked : 0 unlocked* : 0 owner field : 000000000000000000 wait/spin: 0/0 Turnstile: no active turnstile for this lock. ****** LWP 0.11 (iflnkst) @ 0xffffc348c436c100, l_stat=3 *** Locks held: none *** Locks wanted: * Lock 0 (initialized at netbsd:module_hook_init+0x1c) lock address : netbsd:module_hook type : sleep/adaptive initialized : netbsd:module_hook_init+0x1c shared holds : 0 exclusive: 0 shares wanted: 0 exclusive: 0 relevant cpu : 0 last held: 0 relevant lwp : 0xffffc348c436c100 last held: 000000000000000000 last locked : 0 unlocked* : 0 owner field : 000000000000000000 wait/spin: 0/0 Turnstile: no active turnstile for this lock. ****** LWP 0.5 (softclk/0) @ 0xffffc348c53c2080, l_stat=1 *** Locks held: none *** Locks wanted: * Lock 0 (initialized at netbsd:module_hook_init+0x1c) lock address : netbsd:module_hook type : sleep/adaptive initialized : netbsd:module_hook_init+0x1c shared holds : 0 exclusive: 0 shares wanted: 0 exclusive: 0 relevant cpu : 0 last held: 0 relevant lwp : 0xffffc348c53c2080 last held: 000000000000000000 last locked : 0 unlocked* : 0 owner field : 000000000000000000 wait/spin: 0/0 Turnstile: no active turnstile for this lock. ****** LWP 0.0 (swapper) @ 0xffffffff86795c80, l_stat=2 *** Locks held: none *** Locks wanted: * Lock 0 (initialized at netbsd:module_hook_init+0x1c) lock address : netbsd:module_hook type : sleep/adaptive initialized : netbsd:module_hook_init+0x1c shared holds : 0 exclusive: 0 shares wanted: 0 exclusive: 0 relevant cpu : 0 last held: 0 relevant lwp : 0xffffffff86795c80 last held: 000000000000000000 last locked : 0 unlocked* : 0 owner field : 000000000000000000 wait/spin: 0/0 Turnstile: no active turnstile for this lock. [Locks tracked through CPUs] ******* Locks held on cpu0: * Lock 0 (initialized at netbsd:kprintf_init+0x72) lock address : netbsd:kprintf_mtx type : spin initialized : netbsd:kprintf_init+0x72 shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 0 relevant cpu : 0 last held: 0 relevant lwp : 0xffffc347a1898980 last held: 0xffffc347a1898980 last locked* : netbsd:kprintf_lock+0x50 unlocked : netbsd:kprintf_unlock+0x70 owner field : 0x0000000000000800 wait/spin: 0/1 PAGE FLAG PQ UOBJECT UANON 0xffff940000007180 0045 00000000 0x0 0x0 0xffff940000007200 0045 00000000 0x0 0x0 0xffff940000007280 0045 00000000 0x0 0x0 0xffff940000007300 0045 00000000 0x0 0x0 0xffff940000007380 0045 00000000 0x0 0x0 0xffff940000007400 0045 00000000 0x0 0x0 0xffff940000007480 0045 00000000 0x0 0x0 0xffff940000007500 0045 00000000 0x0 0x0 0xffff940000007580 0045 00000000 0x0 0x0 0xffff940000007600 0045 00000000 0x0 0x0 0xffff940000007680 0041 00000000 0x0 0x0 0xffff940000007700 0041 00000000 0x0 0x0 0xffff940000007780 0041 00000000 0x0 0x0 0xffff940000007800 0041 00000000 0x0 0x0 0xffff940000007880 0041 00000000 0x0 0x0 0xffff940000007900 0045 00000000 0x0 0x0 0xffff940000007980 0041 00000000 0x0 0x0 0xffff940000007a00 0041 00000000 0x0 0x0 0xffff940000007a80 0041 00000000 0x0 0x0 0xffff940000007b00 0041 00000000 0x0 0x0 0xffff940000007b80 0041 00000000 0x0 0x0 0xffff940000007c00 0041 00000000 0x0 0x0 0xffff940000007c80 0041 00000000 0x0 0x0 0xffff940000007d00 0041 00000000 0x0 0x0 0xffff940000007d80 0041 00000000 0x0 0x0 0xffff940000007e00 0041 00000000 0x0 0x0 0xffff940000007e80 0041 00000000 0x0 0x0 0xffff940000007f00 0041 00000000 0x0 0x0 0xffff940000007f80 0041 00000000 0x0 0x0 0xffff940000008000 0041 00000000 0x0 0x0 0xffff940000008080 0041 00000000 0x0 0x0 0xffff940000008100 0041 00000000 0x0 0x0 0xffff940000008180 0041 00000000 0x0 0x0 0xffff940000008200 0041 00000000 0x0 0x0 0xffff940000008280 0041 00000000 0x0 0x0 0xffff940000008300 0041 00000000 0x0 0x0 0xffff940000008380 0041 00000000 0x0 0x0 0xffff940000008400 0041 00000000 0x0 0x0 0xffff940000008480 0041 00000000 0x0 0x0 0xffff940000008500 0041 00000000 0x0 0x0 0xffff940000008580 0041 00000000 0x0 0x0 0xffff940000008600 0045 00000000 0x0 0x0 0xffff940000008680 0041 00000000 0x0 0x0 0xffff940000008700 0041 00000000 0x0 0x0 0xffff940000008780 0041 00000000 0x0 0x0 0xffff940000008800 0041 00000000 0x0 0x0 0xffff940000008880 0041 00000000 0x0 0x0 0xffff940000008900 0041 00000000 0x0 0x0 0xffff940000008980 0041 00000000 0x0 0x0 0xffff940000008a00 0041 00000000 0x0 0x0 0xffff940000008a80 0041 00000000 0x0 0x0 0xffff940000008b00 0041 00000000 0x0 0x0 0xffff940000008b80 0041 00000000 0x0 0x0 0xffff940000008c00 0041 00000000 0x0 0x0 0xffff940000008c80 0041 00000000 0x0 0x0 0xffff940000008d00 0041 00000000 0x0 0x0 0xffff940000008d80 0041 00000000 0x0 0x0 0xffff940000008e00 0041 00000000 0x0 0x0 0xffff940000008e80 0041 00000000 0x0 0x0 0xffff940000008f00 0041 00000000 0x0 0x0 0xffff940000008f80 0041 00000000 0x0 0x0 0xffff940000009000 0041 00000000 0x0 0x0 0xffff940000009080 0041 00000000 0x0 0x0 0xffff940000009100 0045 00000000 0x0 0x0 0xffff940000009180 0045 00000000 0x0 0x0 0xffff940000009200 0041 00000000 0x0 0x0 0xffff940000009280 0041 00000000 0x0 0x0 0xffff940000009300 0041 00000000 0x0 0x0 0xffff940000009380 0041 00000000 0x0 0x0 0xffff940000009400 0041 00000000 0x0 0x0 0xffff940000009480 0041 00000000 0x0 0x0 0xffff940000009500 0041 00000000 0x0 0x0 0xffff940000009580 0041 00000000 0x0 0x0 0xffff940000009600 0041 00000000 0x0 0x0 0xffff940000009680 0041 00000000 0x0 0x0 0xffff940000009700 0041 00000000 0x0 0x0 0xffff940000009780 0041 00000000 0x0 0x0 0xffff940000009800 0041 00000000 0x0 0x0 0xffff940000009880 0041 00000000 0x0 0x0 0xffff940000009900 0041 00000000 0x0 0x0 0xffff940000009980 0041 00000000 0x0 0x0 0xffff940000009a00 0041 00000000 0x0 0x0 0xffff940000009a80 0041 00000000 0x0 0x0 0xffff940000009b00 0041 00000000 0x0 0x0 0xffff940000009b80 0041 00000000 0x0 0x0 0xffff940000009c00 0041 00000000 0x0 0x0 0xffff940000009c80 0041 00000000 0x0 0x0 0xffff940000009d00 0041 00000000 0x0 0x0 0xffff940000009d80 0041 00000000 0x0 0x0 0xffff940000009e00 0041 00000000 0x0 0x0 0xffff940000009e80 0041 00000000 0x0 0x0 0xffff940000009f00 0041 00000000 0x0 0x0 0xffff940000009f80 0045 00000000 0x0 0x0 0xffff94000000a000 0041 00000000 0x0 0x0 0xffff94000000a080 0041 00000000 0x0 0x0 0xffff94000000a100 0041 00000000 0x0 0x0 0xffff94000000a180 0041 00000000 0x0 0x0 0xffff94000000a200 0041 00000000 0x0 0x0 0xffff94000000a280 0041 00000000 0x0 0x0 0xffff94000000a300 0041 00000000 0x0 0x0 0xffff94000000a380 0041 00000000 0x0 0x0 0xffff94000000a400 0041 00000000 0x0 0x0 0xffff94000000a480 0041 00000000 0x0 0x0 0xffff94000000a500 0041 00000000 0x0 0x0 0xffff94000000a580 0041 00000000 0x0 0x0 0xffff94000000a600 0041 00000000 0x0 0x0 0xffff94000000a680 0041 00000000 0x0 0x0 0xffff94000000a700 0041 00000000 0x0 0x0 0xffff94000000a780 0041 00000000 0x0 0x0 0xffff94000000a800 0041 00000000 0x0 0x0 0xffff94000000a880 0041 00000000 0x0 0x0 0xffff94000000a900 0041 00000000 0x0 0x0 0xffff94000000a980 0041 00000000 0x0 0x0 0xffff94000000aa00 0041 00000000 0x0 0x0 0xffff94000000aa80 0041 00000000 0x0 0x0 0xffff94000000ab00 0041 00000000 0x0 0x0 0xffff94000000ab80 0041 00000000 0x0 0x0 0xffff94000000ac00 0041 00000000 0x0 0x0 0xffff94000000ac80 0041 00000000 0x0 0x0 0xffff94000000ad00 0041 00000000 0x0 0x0 0xffff94000000ad80 0041 00000000 0x0 0x0 0xffff94000000ae00 0041 00000000 0x0 0x0 0xffff94000000ae80 0041 00000000 0x0 0x0 0xffff94000000af00 0041 00000000 0x0 0x0 0xffff94000000af80 0041 00000000 0x0 0x0 0xffff94000000b000 0045 00000000 0x0 0x0 0xffff94000000b080 0041 00000000 0x0 0x0 0xffff94000000b100 0041 00000000 0x0 0x0 0xffff94000000b180 0041 00000000 0x0 0x0 0xffff94000000b200 0045 00000000 0x0 0x0 0xffff94000000b280 0045 00000000 0x0 0x0 0xffff94000000b300 0045 00000000 0x0 0x0 0xffff94000000b380 0045 00000000 0x0 0x0 0xffff94000000b400 0045 00000000 0x0 0x0 0xffff94000000b480 0045 00000000 0x0 0x0 0xffff94000000b500 0041 00000000 0x0 0x0 0xffff94000000b580 0041 00000000 0x0 0x0 0xffff94000000b600 0045 00000000 0x0 0x0 0xffff94000000b680 0045 00000000 0x0 0x0 0xffff94000000b700 0045 00000000 0x0 0x0 0xffff94000000b780 0045 00000000 0x0 0x0 0xffff94000000b800 0045 00000000 0x0 0x0 0xffff94000000b880 0045 00000000 0x0 0x0 0xffff94000000b900 0045 00000000 0x0 0x0 0xffff94000000b980 0045 00000000 0x0 0x0 0xffff94000000ba00 0045 00000000 0x0 0x0 0xffff94000000ba80 0045 00000000 0x0 0x0 0xffff94000000bb00 0045 00000000 0x0 0x0 0xffff94000000bb80 0045 00000000 0x0 0x0 0xffff94000000bc00 0045 00000000 0x0 0x0 0xffff94000000bc80 0045 00000000 0x0 0x0 0xffff94000000bd00 0045 00000000 0x0 0x0 0xffff94000000bd80 0045 00000000 0x0 0x0 0xffff94000000be00 0045 00000000 0x0 0x0 0xffff94000000be80 0045 00000000 0x0 0x0 0xffff94000000bf00 0045 00000000 0x0 0x0 0xffff94000000bf80 0045 00000000 0x0 0x0 0xffff94000000c000 0045 00000000 0x0 0x0 0xffff94000000c080 0045 00000000 0x0 0x0 0xffff94000000c100 0045 00000000 0x0 0x0 0xffff94000000c180 0045 00000000 0x0 0x0 0xffff94000000c200 0045 00000000 0x0 0x0 0xffff94000000c280 0045 00000000 0x0 0x0 0xffff94000000c300 0045 00000000 0x0 0x0 0xffff94000000c380 0045 00000000 0x0 0x0 0xffff94000000c400 0045 00000000 0x0 0x0 0xffff94000000c480 0045 00000000 0x0 0x0 0xffff94000000c500 0045 00000000 0x0 0x0 0xffff94000000c580 0045 00000000 0x0 0x0 0xffff94000000c600 0045 00000000 0x0 0x0 0xffff94000000c680 0045 00000000 0x0 0x0 0xffff94000000c700 0045 00000000 0x0 0x0 0xffff94000000c780 0045 00000000 0x0 0x0 0xffff94000000c800 0041 00000000 0x0 0x0 0xffff94000000c880 0045 00000000 0x0 0x0 0xffff94000000c900 0045 00000000 0x0 0x0 0xffff94000000c980 0045 00000000 0x0 0x0 0xffff94000000ca00 0041 00000000 0x0 0x0 0xffff94000000ca80 0045 00000000 0x0 0x0 0xffff94000000cb00 0045 00000000 0x0 0x0 0xffff94000000cb80 0045 00000000 0x0 0x0 0xffff94000000cc00 0041 00000000 0x0 0x0 0xffff94000000cc80 0041 00000000 0x0 0x0 0xffff94000000cd00 0045 00000000 0x0 0x0 0xffff94000000cd80 0045 00000000 0x0 0x0 0xffff94000000ce00 0041 00000000 0x0 0x0 0xffff94000000ce80 0041 00000000 0x0 0x0 0xffff94000000cf00 0041 00000000 0x0 0x0 0xffff94000000cf80 0041 00000000 0x0 0x0 0xffff94000000d000 0041 00000000 0x0 0x0 0xffff94000000d080 0041 00000000 0x0 0x0 0xffff94000000d100 0041 00000000 0x0 0x0 0xffff94000000d180 0041 00000000 0x0 0x0 0xffff94000000d200 0041 00000000 0x0 0x0 0xffff94000000d280 0041 00000000 0x0 0x0 0xffff94000000d300 0041 00000000 0x0 0x0 0xffff94000000d380 0041 00000000 0x0 0x0 0xffff94000000d400 0041 00000000 0x0 0x0 0xffff94000000d480 0041 00000000 0x0 0x0 0xffff94000000d500 0041 00000000 0x0 0x0 0xffff94000000d580 0041 00000000 0x0 0x0 0xffff94000000d600 0041 00000000 0x0 0x0 0xffff94000000d680 0041 00000000 0x0 0x0 0xffff94000000d700 0041 00000000 0x0 0x0 0xffff94000000d780 0041 00000000 0x0 0x0 0xffff94000000d800 0045 00000000 0x0 0x0 0xffff94000000d880 0041 00000000 0x0 0x0 0xffff94000000d900 0041 00000000 0x0 0x0 0xffff94000000d980 0041 00000000 0x0 0x0 0xffff94000000da00 0041 00000000 0x0 0x0 0xffff94000000da80 0045 00000000 0x0 0x0 0xffff94000000db00 0045 00000000 0x0 0x0 0xffff94000000db80 0041 00000000 0x0 0x0 0xffff94000000dc00 0045 00000000 0x0 0x0 0xffff94000000dc80 0045 00000000 0x0 0x0 0xffff94000000dd00 0041 00000000 0x0 0x0 0xffff94000000dd80 0041 00000000 0x0 0x0 0xffff94000000de00 0045 00000000 0x0 0x0 0xffff94000000de80 0041 00000000 0x0 0x0 0xffff94000000df00 0041 00000000 0x0 0x0 0xffff94000000df80 0045 00000000 0x0 0x0 0xffff94000000e000 0045 00000000 0x0 0x0 0xffff94000000e080 0045 00000000 0x0 0x0 0xffff94000000e100 0041 00000000 0x0 0x0 0xffff94000000e180 0041 00000000 0x0 0x0 0xffff94000000e200 0041 00000000 0x0 0x0 0xffff94000000e280 0041 00000000 0x0 0x0 0xffff94000000e300 0045 00000000 0x0 0x0 0xffff94000000e380 0045 00000000 0x0 0x0 0xffff94000000e400 0041 00000000 0x0 0x0 0xffff94000000e480 0041 00000000 0x0 0x0 0xffff94000000e500 0045 00000000 0x0 0x0 0xffff94000000e580 0045 00000000 0x0 0x0 0xffff94000000e600 0041 00000000 0x0 0x0 0xffff94000000e680 0045 00000000 0x0 0x0 0xffff94000000e700 0045 00000000 0x0 0x0 0xffff94000000e780 0045 00000000 0x0 0x0 0xffff94000000e800 0041 00000000 0x0 0x0 0xffff94000000e880 0045 00000000 0x0 0x0 0xffff94000000e900 0041 00000000 0x0 0x0 0xffff94000000e980 0041 00000000 0x0 0x0 0xffff94000000ea00 0041 00000000 0x0 0x0 0xffff94000000ea80 0041 00000000 0x0 0x0 0xffff94000000eb00 0045 00000000 0x0 0x0 0xffff94000000eb80 0041 00000000 0x0 0x0 0xffff94000000ec00 0045 00000000 0x0 0x0 0xffff94000000ec80 0041 00000000 0x0 0x0 0xffff94000000ed00 0041 00000000 0x0 0x0 0xffff94000000ed80 0041 00000000 0x0 0x0 0xffff94000000ee00 0041 00000000 0x0 0x0 0xffff94000000ee80 0045 00000000 0x0 0x0 0xffff94000000ef00 0041 00000000 0x0 0x0 0xffff94000000ef80 0041 00000000 0x0 0x0 0xffff94000000f000 0041 00000000 0x0 0x0 0xffff94000000f080 0041 00000000 0x0 0x0 0xffff94000000f100 0041 00000000 0x0 0x0 0xffff94000000f180 0041 00000000 0x0 0x0 0xffff94000000f200 0041 00000000 0x0 0x0 0xffff94000000f280 0041 00000000 0x0 0x0 0xffff94000000f300 0041 00000000 0x0 0x0 0xffff94000000f380 0045 00000000 0x0 0x0 0xffff94000000f400 0045 00000000 0x0 0x0 0xffff94000000f480 0041 00000000 0x0 0x0 0xffff94000000f500 0041 00000000 0x0 0x0 0xffff94000000f580 0041 00000000 0x0 0x0 0xffff94000000f600 0045 00000000 0x0 0x0 0xffff94000000f680 0041 00000000 0x0 0x0 0xffff94000000f700 0041 00000000 0x0 0x0 0xffff94000000f780 0041 00000000 0x0 0x0 0xffff94000000f800 0041 00000000 0x0 0x0 0xffff94000000f880 0045 00000000 0x0 0x0 0xffff94000000f900 0045 00000000 0x0 0x0 0xffff94000000f980 0041 00000000 0x0 0x0 0xffff94000000fa00 0041 00000000 0x0 0x0 0xffff94000000fa80 0045 00000000 0x0 0x0 0xffff94000000fb00 0041 00000000 0x0 0x0 0xffff94000000fb80 0041 00000000 0x0 0x0 0xffff94000000fc00 0041 00000000 0x0 0x0 0xffff94000000fc80 0041 00000000 0x0 0x0 0xffff94000000fd00 0041 00000000 0x0 0x0 0xffff94000000fd80 0045 00000000 0x0 0x0 0xffff94000000fe00 0041 00000000 0x0 0x0 0xffff94000000fe80 0041 00000000 0x0 0x0 0xffff94000000ff00 0041 00000000 0x0 0x0 0xffff94000000ff80 0041 00000000 0x0 0x0 0xffff940000010000 0041 00000000 0x0 0x0 0xffff940000010080 0045 00000000 0x0 0x0 0xffff940000010100 0045 00000000 0x0 0x0 0xffff940000010180 0041 00000000 0x0 0x0 0xffff940000010200 0045 00000000 0x0 0x0 0xffff940000010280 0041 00000000 0x0 0x0 0xffff940000010300 0041 00000000 0x0 0x0 0xffff940000010380 0041 00000000 0x0 0x0 0xffff940000010400 0041 00000000 0x0 0x0 0xffff940000010480 0041 00000000 0x0 0x0 0xffff940000010500 0041 00000000 0x0 0x0 0xffff940000010580 0041 00000000 0x0 0x0 0xffff940000010600 0041 00000000 0x0 0x0 0xffff940000010680 0041 00000000 0x0 0x0 0xffff940000010700 0041 00000000 0x0 0x0 0xffff940000010780 0041 00000000 0x0 0x0 0xffff940000010800 0041 00000000 0x0 0x0 0xffff940000010880 0041 00000000 0x0 0x0 0xffff940000010900 0045 00000000 0x0 0x0 0xffff940000010980 0045 00000000 0x0 0x0 0xffff940000010a00 0045 00000000 0x0 0x0 0xffff940000010a80 0045 00000000 0x0 0x0 0xffff940000010b00 0045 00000000 0x0 0x0 0xffff940000010b80 0041 00000000 0x0 0x0 0xffff940000010c00 0041 00000000 0x0 0x0 0xffff940000010c80 0041 00000000 0x0 0x0 0xffff940000010d00 0041 00000000 0x0 0x0 0xffff940000010d80 0041 00000000 0x0 0x0 0xffff940000010e00 0041 00000000 0x0 0x0 0xffff940000010e80 0041 00000000 0x0 0x0 0xffff940000010f00 0041 00000000 0x0 0x0 0xffff940000010f80 0045 00000000 0x0 0x0 0xffff940000011000 0041 00000000 0x0 0x0 0xffff940000011080 0041 00000000 0x0 0x0 0xffff940000011100 0041 00000000 0x0 0x0 0xffff940000011180 0041 00000000 0x0 0x0 0xffff940000011200 0041 00000000 0x0 0x0 0xffff940000011280 0045 00000000 0x0 0x0 0xffff940000011300 0041 00000000 0x0 0x0 0xffff940000011380 0041 00000000 0x0 0x0 0xffff940000011400 0041 00000000 0x0 0x0 0xffff940000011480 0041 00000000 0x0 0x0 0xffff940000011500 0041 00000000 0x0 0x0 0xffff940000011580 0041 00000000 0x0 0x0 0xffff940000011600 0041 00000000 0x0 0x0 0xffff940000011680 0041 00000000 0x0 0x0 0xffff940000011700 0041 00000000 0x0 0x0 0xffff940000011780 0041 00000000 0x0 0x0 0xffff940000011800 0041 00000000 0x0 0x0 0xffff940000011880 0041 00000000 0x0 0x0 0xffff940000011900 0041 00000000 0x0 0x0 0xffff940000011980 0041 00000000 0x0 0x0 0xffff940000011a00 0045 00000000 0x0 0x0 0xffff940000011a80 0041 00000000 0x0 0x0 0xffff940000011b00 0041 00000000 0x0 0x0 0xffff940000011b80 0041 00000000 0x0 0x0 0xffff940000011c00 0045 00000000 0x0 0x0 0xffff940000011c80 0045 00000000 0x0 0x0 0xffff940000011d00 0041 00000000 0x0 0x0 0xffff940000011d80 0041 00000000 0x0 0x0 0xffff940000011e00 0041 00000000 0x0 0x0 0xffff940000011e80 0041 00000000 0x0 0x0 0xffff940000011f00 0045 00000000 0x0 0x0 0xffff940000011f80 0045 00000000 0x0 0x0 0xffff940000012000 0041 00000000 0x0 0x0 0xffff940000012080 0041 00000000 0x0 0x0 0xffff940000012100 0041 00000000 0x0 0x0 0xffff940000012180 0045 00000000 0x0 0x0 0xffff940000012200 0041 00000000 0x0 0x0 0xffff940000012280 0041 00000000 0x0 0x0 0xffff940000012300 0041 00000000 0x0 0x0 0xffff940000012380 0041 00000000 0x0 0x0 0xffff940000012400 0041 00000000 0x0 0x0 0xffff940000012480 0041 00000000 0x0 0x0 0xffff940000012500 0045 00000000 0x0 0x0 0xffff940000012580 0041 00000000 0x0 0x0 0xffff940000012600 0041 00000000 0x0 0x0 0xffff940000012680 0045 00000000 0x0 0x0 0xffff940000012700 0001 00000000 0x0 0x0 0xffff940000012780 0001 00000000 0x0 0x0 0xffff940000012800 0001 00000000 0x0 0x0 0xffff940000012880 0001 00000000 0x0 0x0 0xffff940000012900 0001 00000000 0x0 0x0 0xffff940000012980 0001 00000000 0x0 0x0 0xffff940000012a00 0001 00000000 0x0 0x0 0xffff940000012a80 0001 00000000 0x0 0x0 0xffff940000012b00 0001 00000000 0x0 0x0 0xffff940000012b80 0001 00000000 0x0 0x0 0xffff940000012c00 0001 00000000 0x0 0x0 0xffff940000012c80 0001 00000000 0x0 0x0 0xffff940000012d00 0001 00000000 0x0 0x0 0xffff940000012d80 0001 00000000 0x0 0x0 0xffff940000012e00 0001 00000000 0x0 0x0 0xffff940000012e80 0001 00000000 0x0 0x0 0xffff940000012f00 0001 00000000 0x0 0x0 0xffff940000012f80 0001 00000000 0x0 0x0 0xffff940000013000 0001 00000000 0x0 0x0 0xffff940000013080 0001 00000000 0x0 0x0 0xffff940000013100 0001 00000000 0x0 0x0 0xffff940000013180 0001 00000000 0x0 0x0 0xffff940000013200 0001 00000000 0x0 0x0 0xffff940000013280 0001 00000000 0x0 0x0 0xffff940000013300 0001 00000000 0x0 0x0 0xffff940000013380 0001 00000000 0x0 0x0 0xffff940000013400 0001 00000000 0x0 0x0 0xffff940000013480 0001 00000000 0x0 0x0 0xffff940000013500 0001 00000000 0x0 0x0 0xffff940000013580 0001 00000000 0x0 0x0 0xffff940000013600 0001 00000000 0x0 0x0 0xffff940000013680 0001 00000000 0x0 0x0 0xffff940000013700 0001 00000000 0x0 0x0 0xffff940000013780 0001 00000000 0x0 0x0 0xffff940000013800 0001 00000000 0x0 0x0 0xffff940000013880 0001 00000000 0x0 0x0 0xffff940000013900 0001 00000000 0x0 0x0 0xffff940000013980 0001 00000000 0x0 0x0 0xffff940000013a00 0001 00000000 0x0 0x0 0xffff940000013a80 0001 00000000 0x0 0x0 0xffff940000013b00 0001 00000000 0x0 0x0 0xffff940000013b80 0001 00000000 0x0 0x0 0xffff940000013c00 0001 00000000 0x0 0x0 0xffff940000013c80 0001 00000000 0x0 0x0 0xffff940000013d00 0001 00000000 0x0 0x0 0xffff940000013d80 0001 00000000 0x0 0x0 0xffff940000013e00 0001 00000000 0x0 0x0 0xffff940000013e80 0001 00000000 0x0 0x0 0xffff940000013f00 0001 00000000 0x0 0x0 0xffff940000013f80 0001 00000000 0x0 0x0 0xffff940000014000 0001 00000000 0x0 0x0 0xffff940000014080 0001 00000000 0x0 0x0 0xffff940000014100 0001 00000000 0x0 0x0 0xffff940000014180 0001 00000000 0x0 0x0 0xffff940000014200 0041 00000000 0x0 0x0 0xffff940000014280 0041 00000000 0x0 0x0 0xffff940000014300 0041 00000000 0x0 0x0 0xffff940000014380 0041 00000000 0x0 0x0 0xffff940000014400 0041 00000000 0x0 0x0 0xffff940000014480 0041 00000000 0x0 0x0 0xffff940000014500 0041 00000000 0x0 0x0 0xffff940000014580 0041 00000000 0x0 0x0 0xffff940000014600 0041 00000000 0x0 0x0 0xffff940000014680 0041 00000000 0x0 0x0 0xffff940000014700 0041 00000000 0x0 0x0 0xffff940000014780 0041 00000000 0x0 0x0 0xffff940000014800 0041 00000000 0x0 0x0 0xffff940000014880 0041 00000000 0x0 0x0 0xffff940000014900 0041 00000000 0x0 0x0 0xffff940000014980 0041 00000000 0x0 0x0 0xffff940000014a00 0041 00000000 0x0 0x0 0xffff940000014a80 0041 00000000 0x0 0x0 0xffff940000014b00 0041 00000000 0x0 0x0 0xffff940000014b80 0041 00000000 0x0 0x0 0xffff940000014c00 0041 00000000 0x0 0x0 0xffff940000014c80 0041 00000000 0x0 0x0 0xffff940000014d00 0041 00000000 0x0 0x0 0xffff940000014d80 0041 00000000 0x0 0x0 0xffff940000014e00 0041 00000000 0x0 0x0 0xffff940000014e80 0041 00000000 0x0 0x0 0xffff940000014f00 0041 00000000 0x0 0x0 0xffff940000014f80 0041 00000000 0x0 0x0 0xffff940000015000 0041 00000000 0x0 0x0 0xffff940000015080 0041 00000000 0x0 0x0 0xffff940000015100 0041 00000000 0x0 0x0 0xffff940000015180 0041 00000000 0x0 0x0 0xffff940000015200 0041 00000000 0x0 0x0 0xffff940000015280 0041 00000000 0x0 0x0 0xffff940000015300 0041 00000000 0x0 0x0 0xffff940000015380 0041 00000000 0x0 0x0 0xffff940000015400 0041 00000000 0x0 0x0 0xffff940000015480 0041 00000000 0x0 0x0 0xffff940000015500 0041 00000000 0x0 0x0 0xffff940000015580 0041 00000000 0x0 0x0 0xffff940000015600 0041 00000000 0x0 0x0 0xffff940000015680 0041 00000000 0x0 0x0 0xffff940000015700 0041 00000000 0x0 0x0 0xffff940000015780 0041 00000000 0x0 0x0 0xffff940000015800 0041 00000000 0x0 0x0 0xffff940000015880 0041 00000000 0x0 0x0 0xffff940000015900 0041 00000000 0x0 0x0 0xffff940000015980 0001 00000000 0x0 0x0 0xffff940000015a00 0001 00000000 0x0 0x0 0xffff940000015a80 0001 00000000 0x0 0x0 0xffff940000015b00 0001 00000000 0x0 0x0 0xffff940000015b80 0001 00000000 0x0 0x0 0xffff940000015c00 0001 00000000 0x0 0x0 0xffff940000015c80 0001 00000000 0x0 0x0 0xffff940000015d00 0001 00000000 0x0 0x0 0xffff940000015d80 0001 00000000 0x0 0x0 0xffff940000015e00 0001 00000000 0x0 0x0 0xffff940000015e80 0001 00000000 0x0 0x0 0xffff940000015f00 0001 00000000 0x0 0x0 0xffff940000015f80 0001 00000000 0x0 0x0 0xffff940000016000 0001 00000000 0x0 0x0 0xffff940000016080 0001 00000000 0x0 0x0 0xffff940000016100 0001 00000000 0x0 0x0 0xffff940000016180 0001 00000000 0x0 0x0 0xffff940000016200 0001 00000000 0x0 0x0 0xffff940000016280 0001 00000000 0x0 0x0 0xffff940000016300 0001 00000000 0x0 0x0 0xffff940000016380 0001 00000000 0x0 0x0 0xffff940000016400 0001 00000000 0x0 0x0 0xffff940000016480 0001 00000000 0x0 0x0 0xffff940000016500 0001 00000000 0x0 0x0 0xffff940000016580 0001 00000000 0x0 0x0 0xffff940000016600 0001 00000000 0x0 0x0 0xffff940000016680 0001 00000000 0x0 0x0 0xffff940000016700 0001 00000000 0x0 0x0 0xffff940000016780 0001 00000000 0x0 0x0 0xffff940000016800 0001 00000000 0x0 0x0 0xffff940000016880 0001 00000000 0x0 0x0 0xffff940000016900 0001 00000000 0x0 0x0 0xffff940000016980 0001 00000000 0x0 0x0 0xffff940000016a00 0001 00000000 0x0 0x0 0xffff940000016a80 0001 00000000 0x0 0x0 0xffff940000016b00 0001 00000000 0x0 0x0 0xffff940000016b80 0001 00000000 0x0 0x0 0xffff940000016c00 0001 00000000 0x0 0x0 0xffff940000016c80 0001 00000000 0x0 0x0 0xffff940000016d00 0001 00000000 0x0 0x0 0xffff940000016d80 0001 00000000 0x0 0x0 0xffff940000016e00 0001 00000000 0x0 0x0 0xffff940000016e80 0001 00000000 0x0 0x0 0xffff940000016f00 0001 00000000 0x0 0x0 0xffff940000016f80 0001 00000000 0x0 0x0 0xffff940000017000 0001 00000000 0x0 0x0 0xffff940000017080 0001 00000000 0x0 0x0 0xffff940000017100 0001 00000000 0x0 0x0 0xffff940000017180 0001 00000000 0x0 0x0 0xffff940000017200 0001 00000000 0x0 0x0 0xffff940000017280 0001 00000000 0x0 0x0 0xffff940000017300 0001 00000000 0x0 0x0 0xffff940000017380 0001 00000000 0x0 0x0 0xffff940000017400 0001 00000000 0x0 0x0 0xffff940000017480 0041 00000000 0x0 0x0 0xffff940000017500 0041 00000000 0x0 0x0 0xffff940000017580 0041 00000000 0x0 0x0 0xffff940000017600 0041 00000000 0x0 0x0 0xffff940000017680 0041 00000000 0x0 0x0 0xffff940000017700 0041 00000000 0x0 0x0 0xffff940000017780 0041 00000000 0x0 0x0 0xffff940000017800 0041 00000000 0x0 0x0 0xffff940000017880 0041 00000000 0x0 0x0 0xffff940000017900 0041 00000000 0x0 0x0 0xffff940000017980 0041 00000000 0x0 0x0 0xffff940000017a00 0041 00000000 0x0 0x0 0xffff940000017a80 0041 00000000 0x0 0x0 0xffff940000017b00 0041 00000000 0x0 0x0 0xffff940000017b80 0041 00000000 0x0 0x0 0xffff940000017c00 0041 00000000 0x0 0x0 0xffff940000017c80 0041 00000000 0x0 0x0 0xffff940000017d00 0041 00000000 0x0 0x0 0xffff940000017d80 0041 00000000 0x0 0x0 0xffff940000017e00 0041 00000000 0x0 0x0 0xffff940000017e80 0041 00000000 0x0 0x0 0xffff940000017f00 0041 00000000 0x0 0x0 0xffff940000017f80 0041 00000000 0x0 0x0 0xffff940000018000 0041 00000000 0x0 0x0 0xffff940000018080 0041 00000000 0x0 0x0 0xffff940000018100 0041 00000000 0x0 0x0 0xffff940000018180 0041 00000000 0x0 0x0 0xffff940000018200 0041 00000000 0x0 0x0 0xffff940000018280 0041 00000000 0x0 0x0 0xffff940000018300 0041 00000000 0x0 0x0 0xffff940000018380 0041 00000000 0x0 0x0 0xffff940000018400 0041 00000000 0x0 0x0 0xffff940000018480 0041 00000000 0x0 0x0 0xffff940000018500 0041 00000000 0x0 0x0 0xffff940000018580 0041 00000000 0x0 0x0 0xffff940000018600 0041 00000000 0x0 0x0 0xffff940000018680 0041 00000000 0x0 0x0 0xffff940000018700 0041 00000000 0x0 0x0 0xffff940000018780 0041 00000000 0x0 0x0 0xffff940000018800 0041 00000000 0x0 0x0 0xffff940000018880 0041 00000000 0x0 0x0 0xffff940000018900 0041 00000000 0x0 0x0 0xffff940000018980 0041 00000000 0x0 0x0 0xffff940000018a00 0041 00000000 0x0 0x0 0xffff940000018a80 0041 00000000 0x0 0x0 0xffff940000018b00 0001 00000000 0x0 0x0 0xffff940000018b80 0001 00000000 0x0 0x0 0xffff940000018c00 0001 00000000 0x0 0x0 0xffff940000018c80 0001 00000000 0x0 0x0 0xffff940000018d00 0001 00000000 0x0 0x0 0xffff940000018d80 0001 00000000 0x0 0x0 0xffff940000018e00 0001 00000000 0x0 0x0 0xffff940000018e80 0001 00000000 0x0 0x0 0xffff940000018f00 0001 00000000 0x0 0x0 0xffff940000018f80 0001 00000000 0x0 0x0 0xffff940000019000 0001 00000000 0x0 0x0 0xffff940000019080 0001 00000000 0x0 0x0 0xffff940000019100 0001 00000000 0x0 0x0 0xffff940000019180 0001 00000000 0x0 0x0 0xffff940000019200 0001 00000000 0x0 0x0 0xffff940000019280 0001 00000000 0x0 0x0 0xffff940000019300 0001 00000000 0x0 0x0 0xffff940000019380 0001 00000000 0x0 0x0 0xffff940000019400 0001 00000000 0x0 0x0 0xffff940000019480 0001 00000000 0x0 0x0 0xffff940000019500 0001 00000000 0x0 0x0 0xffff940000019580 0001 00000000 0x0 0x0 0xffff940000019600 0001 00000000 0x0 0x0 0xffff940000019680 0001 00000000 0x0 0x0 0xffff940000019700 0001 00000000 0x0 0x0 0xffff940000019780 0001 00000000 0x0 0x0 0xffff940000019800 0001 00000000 0x0 0x0 0xffff940000019880 0001 00000000 0x0 0x0 0xffff940000019900 0001 00000000 0x0 0x0 0xffff940000019980 0001 00000000 0x0 0x0 0xffff940000019a00 0001 00000000 0x0 0x0 0xffff940000019a80 0001 00000000 0x0 0x0 0xffff940000019b00 0001 00000000 0x0 0x0 0xffff940000019b80 0001 00000000 0x0 0x0 0xffff940000019c00 0001 00000000 0x0 0x0 0xffff940000019c80 0001 00000000 0x0 0x0 0xffff940000019d00 0001 00000000 0x0 0x0 0xffff940000019d80 0001 00000000 0x0 0x0 0xffff940000019e00 0001 00000000 0x0 0x0 0xffff940000019e80 0001 00000000 0x0 0x0 0xffff940000019f00 0001 00000000 0x0 0x0 0xffff940000019f80 0001 00000000 0x0 0x0 0xffff94000001a000 0001 00000000 0x0 0x0 0xffff94000001a080 0001 00000000 0x0 0x0 0xffff94000001a100 0001 00000000 0x0 0x0 0xffff94000001a180 0001 00000000 0x0 0x0 0xffff94000001a200 0001 00000000 0x0 0x0 0xffff94000001a280 0001 00000000 0x0 0x0 0xffff94000001a300 0001 00000000 0x0 0x0 0xffff94000001a380 0001 00000000 0x0 0x0 0xffff94000001a400 0001 00000000 0x0 0x0 0xffff94000001a480 0001 00000000 0x0 0x0 0xffff94000001a500 0001 00000000 0x0 0x0 0xffff94000001a580 0001 00000000 0x0 0x0 0xffff94000001a600 0041 00000000 0x0 0x0 0xffff94000001a680 0041 00000000 0x0 0x0 0xffff94000001a700 0041 00000000 0x0 0x0 0xffff94000001a780 0041 00000000 0x0 0x0 0xffff94000001a800 0041 00000000 0x0 0x0 0xffff94000001a880 0041 00000000 0x0 0x0 0xffff94000001a900 0041 00000000 0x0 0x0 0xffff94000001a980 0041 00000000 0x0 0x0 0xffff94000001aa00 0041 00000000 0x0 0x0 0xffff94000001aa80 0041 00000000 0x0 0x0 0xffff94000001ab00 0041 00000000 0x0 0x0 0xffff94000001ab80 0041 00000000 0x0 0x0 0xffff94000001ac00 0041 00000000 0x0 0x0 0xffff94000001ac80 0041 00000000 0x0 0x0 0xffff94000001ad00 0041 00000000 0x0 0x0 0xffff94000001ad80 0041 00000000 0x0 0x0 0xffff94000001ae00 0041 00000000 0x0 0x0 0xffff94000001ae80 0041 00000000 0x0 0x0 0xffff94000001af00 0041 00000000 0x0 0x0 0xffff94000001af80 0041 00000000 0x0 0x0 0xffff94000001b000 0041 00000000 0x0 0x0 0xffff94000001b080 0041 00000000 0x0 0x0 0xffff94000001b100 0041 00000000 0x0 0x0 0xffff94000001b180 0041 00000000 0x0 0x0 0xffff94000001b200 0045 00000000 0x0 0x0 0xffff94000001b280 0041 00000000 0x0 0x0 0xffff94000001b300 0041 00000000 0x0 0x0 0xffff94000001b380 0041 00000000 0x0 0x0 0xffff94000001b400 0041 00000000 0x0 0x0 0xffff94000001b480 0041 00000000 0x0 0x0 0xffff94000001b500 0041 00000000 0x0 0x0 0xffff94000001b580 0041 00000000 0x0 0x0 0xffff94000001b600 0045 00000000 0x0 0x0 0xffff94000001b680 0041 00000000 0x0 0x0 0xffff94000001b700 0041 00000000 0x0 0x0 0xffff94000001b780 0041 00000000 0x0 0x0 0xffff94000001b800 0041 00000000 0x0 0x0 0xffff94000001b880 0041 00000000 0x0 0x0 0xffff94000001b900 0041 00000000 0x0 0x0 0xffff94000001b980 0041 00000000 0x0 0x0 0xffff94000001ba00 0045 00000000 0x0 0x0 0xffff94000001ba80 0041 00000000 0x0 0x0 0xffff94000001bb00 0041 00000000 0x0 0x0 0xffff94000001bb80 0041 00000000 0x0 0x0 0xffff94000001bc00 0045 00000000 0x0 0x0 0xffff94000001bc80 0045 00000000 0x0 0x0 0xffff94000001bd00 0041 00000000 0x0 0x0 0xffff94000001bd80 0041 00000000 0x0 0x0 0xffff94000001be00 0001 00000000 0x0 0x0 0xffff94000001be80 0001 00000000 0x0 0x0 0xffff94000001bf00 0001 00000000 0x0 0x0 0xffff94000001bf80 0001 00000000 0x0 0x0 0xffff94000001c000 0001 00000000 0x0 0x0 0xffff94000001c080 0001 00000000 0x0 0x0 0xffff94000001c100 0001 00000000 0x0 0x0 0xffff94000001c180 0001 00000000 0x0 0x0 0xffff94000001c200 0001 00000000 0x0 0x0 0xffff94000001c280 0001 00000000 0x0 0x0 0xffff94000001c300 0001 00000000 0x0 0x0 0xffff94000001c380 0001 00000000 0x0 0x0 0xffff94000001c400 0001 00000000 0x0 0x0 0xffff94000001c480 0001 00000000 0x0 0x0 0xffff94000001c500 0001 00000000 0x0 0x0 0xffff94000001c580 0001 00000000 0x0 0x0 0xffff94000001c600 0001 00000000 0x0 0x0 0xffff94000001c680 0001 00000000 0x0 0x0 0xffff94000001c700 0001 00000000 0x0 0x0 0xffff94000001c780 0001 00000000 0x0 0x0 0xffff94000001c800 0001 00000000 0x0 0x0 0xffff94000001c880 0001 00000000 0x0 0x0 0xffff94000001c900 0001 00000000 0x0 0x0 0xffff94000001c980 0001 00000000 0x0 0x0 0xffff94000001ca00 0001 00000000 0x0 0x0 0xffff94000001ca80 0001 00000000 0x0 0x0 0xffff94000001cb00 0001 00000000 0x0 0x0 0xffff94000001cb80 0001 00000000 0x0 0x0 0xffff94000001cc00 0001 00000000 0x0 0x0 0xffff94000001cc80 0001 00000000 0x0 0x0 0xffff94000001cd00 0001 00000000 0x0 0x0 0xffff94000001cd80 0001 00000000 0x0 0x0 0xffff94000001ce00 0001 00000000 0x0 0x0 0xffff94000001ce80 0001 00000000 0x0 0x0 0xffff94000001cf00 0001 00000000 0x0 0x0 0xffff94000001cf80 0001 00000000 0x0 0x0 0xffff94000001d000 0001 00000000 0x0 0x0 0xffff94000001d080 0001 00000000 0x0 0x0 0xffff94000001d100 0001 00000000 0x0 0x0 0xffff94000001d180 0001 00000000 0x0 0x0 0xffff94000001d200 0001 00000000 0x0 0x0 0xffff94000001d280 0001 00000000 0x0 0x0 0xffff94000001d300 0001 00000000 0x0 0x0 0xffff94000001d380 0001 00000000 0x0 0x0 0xffff94000001d400 0001 00000000 0x0 0x0 0xffff94000001d480 0001 00000000 0x0 0x0 0xffff94000001d500 0001 00000000 0x0 0x0 0xffff94000001d580 0001 00000000 0x0 0x0 0xffff94000001d600 0001 00000000 0x0 0x0 0xffff94000001d680 0001 00000000 0x0 0x0 0xffff94000001d700 0001 00000000 0x0 0x0 0xffff94000001d780 0001 00000000 0x0 0x0 0xffff94000001d800 0001 00000000 0x0 0x0 0xffff94000001d880 0001 00000000 0x0 0x0 0xffff94000001d900 0001 00000000 0x0 0x0 0xffff94000001d980 0001 00000000 0x0 0x0 0xffff94000001da00 0001 00000000 0x0 0x0 0xffff94000001da80 0001 00000000 0x0 0x0 0xffff94000001db00 0001 00000000 0x0 0x0 0xffff94000001db80 0001 00000000 0x0 0x0 0xffff94000001dc00 0001 00000000 0x0 0x0 0xffff94000001dc80 0001 00000000 0x0 0x0 0xffff94000001dd00 0001 00000000 0x0 0x0 0xffff94000001dd80 0001 00000000 0x0 0x0 0xffff94000001de00 0001 00000000 0x0 0x0 0xffff94000001de80 0001 00000000 0x0 0x0 0xffff94000001df00 0001 00000000 0x0 0x0 0xffff94000001df80 0001 00000000 0x0 0x0 0xffff94000001e000 0001 00000000 0x0 0x0 0xffff94000001e080 0001 00000000 0x0 0x0 0xffff94000001e100 0001 00000000 0x0 0x0 0xffff94000001e180 0001 00000000 0x0 0x0 0xffff94000001e200 0001 00000000 0x0 0x0 0xffff94000001e280 0001 00000000 0x0 0x0 0xffff94000001e300 0001 00000000 0x0 0x0 0xffff94000001e380 0001 00000000 0x0 0x0 0xffff94000001e400 0001 00000000 0x0 0x0 0xffff94000001e480 0001 00000000 0x0 0x0 0xffff94000001e500 0001 00000000 0x0 0x0 0xffff94000001e580 0001 00000000 0x0 0x0 0xffff94000001e600 0001 00000000 0x0 0x0 0xffff94000001e680 0001 00000000 0x0 0x0 0xffff94000001e700 0001 00000000 0x0 0x0 0xffff94000001e780 0001 00000000 0x0 0x0 0xffff94000001e800 0001 00000000 0x0 0x0 0xffff94000001e880 0001 00000000 0x0 0x0 0xffff94000001e900 0001 00000000 0x0 0x0 0xffff94000001e980 0001 00000000 0x0 0x0 0xffff94000001ea00 0001 00000000 0x0 0x0 0xffff94000001ea80 0001 00000000 0x0 0x0 0xffff94000001eb00 0001 00000000 0x0 0x0 0xffff94000001eb80 0001 00000000 0x0 0x0 0xffff94000001ec00 0001 00000000 0x0 0x0 0xffff94000001ec80 0001 00000000 0x0 0x0 0xffff94000001ed00 0001 00000000 0x0 0x0 0xffff94000001ed80 0001 00000000 0x0 0x0 0xffff94000001ee00 0001 00000000 0x0 0x0 0xffff94000001ee80 0001 00000000 0x0 0x0 0xffff94000001ef00 0001 00000000 0x0 0x0 0xffff94000001ef80 0001 00000000 0x0 0x0 0xffff94000001f000 0001 00000000 0x0 0x0 0xffff94000001f080 0001 00000000 0x0 0x0 0xffff94000001f100 0001 00000000 0x0 0x0 0xffff94000001f180 0001 00000000 0x0 0x0 0xffff94000001f200 0001 00000000 0x0 0x0 0xffff94000001f280 0001 00000000 0x0 0x0 0xffff94000001f300 0001 00000000 0x0 0x0 0xffff94000001f380 0001 00000000 0x0 0x0 0xffff94000001f400 0001 00000000 0x0 0x0 0xffff94000001f480 0001 00000000 0x0 0x0 0xffff94000001f500 0001 00000000 0x0 0x0 0xffff94000001f580 0001 00000000 0x0 0x0 0xffff94000001f600 0001 00000000 0x0 0x0 0xffff94000001f680 0001 00000000 0x0 0x0 0xffff94000001f700 0001 00000000 0x0 0x0 0xffff94000001f780 0001 00000000 0x0 0x0 0xffff94000001f800 0001 00000000 0x0 0x0 0xffff94000001f880 0001 00000000 0x0 0x0 0xffff94000001f900 0001 00000000 0x0 0x0 0xffff94000001f980 0001 00000000 0x0 0x0 0xffff94000001fa00 0001 00000000 0x0 0x0 0xffff94000001fa80 0001 00000000 0x0 0x0