Warning: Permanently added '10.128.0.222' (ECDSA) to the list of known hosts. 2020/09/06 22:44:06 fuzzer started 2020/09/06 22:44:06 dialing manager at 10.128.0.105:35673 2020/09/06 22:44:07 syscalls: 306 2020/09/06 22:44:07 code coverage: enabled 2020/09/06 22:44:07 comparison tracing: enabled 2020/09/06 22:44:07 extra coverage: enabled 2020/09/06 22:44:07 setuid sandbox: support is not implemented in syzkaller 2020/09/06 22:44:07 namespace sandbox: support is not implemented in syzkaller 2020/09/06 22:44:07 Android sandbox: support is not implemented in syzkaller 2020/09/06 22:44:07 fault injection: enabled 2020/09/06 22:44:07 leak checking: support is not implemented in syzkaller 2020/09/06 22:44:07 net packet injection: support is not implemented in syzkaller 2020/09/06 22:44:07 net device setup: support is not implemented in syzkaller 2020/09/06 22:44:07 concurrency sanitizer: support is not implemented in syzkaller 2020/09/06 22:44:07 devlink PCI setup: support is not implemented in syzkaller 2020/09/06 22:44:07 USB emulation: enabled 2020/09/06 22:44:07 hci packet injection: support is not implemented in syzkaller 22:44:19 executing program 0: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x2000, 0xffffffffffffffff) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) readv(r0, &(0x7f0000000280)=[{&(0x7f0000000100)=""/238, 0xee}], 0x1) 22:44:19 executing program 1: mknod(&(0x7f0000000100)='./bus\x00', 0x6000, 0x101) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r0, 0xa, 0xffffffffffffffff) 22:44:19 executing program 2: mknod(&(0x7f0000000000)='./file0\x00', 0x4000040002000, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$OFIOGETBMAP(r0, 0xc004667a, &(0x7f00000000c0)) 22:44:19 executing program 3: r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x2088611, 0x0) writev(r0, &(0x7f0000000140)=[{0x0}, {&(0x7f0000000080)="1f", 0x1}], 0x2) 22:44:19 executing program 4: mkdir(&(0x7f00000006c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) mkdir(&(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', 0x0) link(&(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000380)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00') 22:44:19 executing program 5: socket$unix(0x1, 0x5, 0x0) r0 = socket(0x1d, 0x40000003, 0x0) r1 = dup(r0) socket(0x1d, 0x40000003, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000016c0)) sendmsg$unix(r1, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0) poll(&(0x7f0000000000)=[{}], 0x3bd, 0x0) 22:44:24 executing program 3: _ksem_open(&(0x7f0000000000)="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", 0x0, 0x0, 0x0, 0x0) 22:44:24 executing program 2: mknod(&(0x7f0000000080)='./file0\x00', 0x205e, 0x200) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) preadv(r0, &(0x7f0000001380)=[{0x0}], 0x1, 0x0) 22:44:24 executing program 5: open$dir(&(0x7f0000000000)='./file0\x00', 0x2088611, 0x0) truncate(&(0x7f00000000c0)='./file0\x00', 0x0, 0x100000000) r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x2, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001380)=[{&(0x7f0000001400)=""/4136, 0x1028}], 0x1, 0x0) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000180), 0x81700}], 0x1000000000000013) 22:44:24 executing program 1: compat_50_setitimer(0x0, &(0x7f00000000c0)={{}, {0x0, 0xfffffffffffffff8}}, 0x0) 22:44:24 executing program 0: r0 = socket(0x18, 0x3, 0x0) setsockopt$sock_timeval(r0, 0xffff, 0x1006, &(0x7f0000000140), 0x10) 22:44:24 executing program 1: r0 = open$dir(0x0, 0x40000400000002c2, 0x0) open$dir(&(0x7f0000001240)='./file0\x00', 0x40000400000002c2, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x810, 0xffffffffffffffff, 0x0, 0x0) compat_43_oftruncate(r0, 0x10000) r1 = open$dir(0x0, 0x40000400000002c2, 0x0) acct(&(0x7f0000000000)='./file0\x00') writev(r1, &(0x7f00000000c0), 0x0) r2 = socket(0x1, 0x1, 0x0) fcntl$setown(r2, 0x6, 0xffffffffffffffff) 22:44:24 executing program 3: r0 = socket(0x2, 0x1, 0x0) shutdown(r0, 0xe9d8160199751778) 22:44:24 executing program 4: sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB=' '], 0x38}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x1, 0x1, 0x0) close(r0) socket(0x18, 0x2, 0x0) connect$unix(r0, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) 22:44:24 executing program 2: open(&(0x7f00000002c0)='./file0\x00', 0x611, 0x0) link(&(0x7f0000000180)='./file0\x00', &(0x7f0000000440)='.\x00') 22:44:24 executing program 1: r0 = socket(0x2, 0x1, 0x0) close(r0) connect$unix(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8202e4a3e6"], 0x1) r1 = socket(0x2, 0x2, 0x0) bind(r1, &(0x7f0000000000), 0x10) connect(r0, &(0x7f0000000000), 0x10) 22:44:24 executing program 3: munmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000) r0 = shmget$private(0x0, 0x2000, 0x281, &(0x7f0000ef1000/0x2000)=nil) r1 = shmat(r0, &(0x7f0000ffa000/0x3000)=nil, 0x0) socket$inet6(0x18, 0x0, 0x81) shmat(r0, &(0x7f0000ef2000/0x3000)=nil, 0x2000) shmdt(0x0) compat_50_getitimer(0x1, &(0x7f00000000c0)) semget$private(0x0, 0x8, 0x0) shmget$private(0x0, 0x4000, 0x43e, &(0x7f0000ffc000/0x4000)=nil) r2 = __clone(0x0, 0x0) ptrace(0x9, r2, 0x0, 0x0) compat_50_wait4(r2, &(0x7f0000000100), 0x10, &(0x7f0000000240)) r3 = __clone(0x0, 0x0) ptrace(0x9, r3, 0x0, 0x0) shmdt(r1) 22:44:24 executing program 4: r0 = socket$inet6(0x2, 0x3, 0x0) recvmsg(r0, &(0x7f0000002400)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1) 22:44:24 executing program 5: semop(0xffffffffffffffff, 0x0, 0x0) 22:44:24 executing program 1: r0 = socket(0x2, 0x1, 0x0) close(r0) connect$unix(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8202e4a3e6"], 0x1) r1 = socket(0x2, 0x2, 0x0) bind(r1, &(0x7f0000000000), 0x10) connect(r0, &(0x7f0000000000), 0x10) 22:44:24 executing program 5: open$dir(&(0x7f00000000c0)='./file0\x00', 0x2088611, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x40001, 0x0) read(r0, 0x0, 0x0) 22:44:24 executing program 4: r0 = socket$inet6(0x2, 0x3, 0x0) recvmsg(r0, &(0x7f0000002400)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1) 22:44:24 executing program 0: __clone(0x100, &(0x7f0000000000)) compat_50_wait4(0x0, &(0x7f0000000080), 0x4, 0x0) 22:44:25 executing program 2: compat_43_ocreat(&(0x7f0000000040)='./file0\x00', 0x0) compat_50_clock_gettime(0x0, &(0x7f0000000080)) 22:44:25 executing program 5: r0 = socket(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x1, &(0x7f0000000200)="ec", 0x1) 22:44:25 executing program 4: poll(0x0, 0x0, 0x80000001) 22:44:25 executing program 1: r0 = socket$inet(0x2, 0x3, 0x0) setsockopt$inet_opts(r0, 0x0, 0x16, 0x0, 0x0) 22:44:25 executing program 0: r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r1, &(0x7f0000000380)={&(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e, 0x0}, 0x0) recvmmsg(r0, &(0x7f0000001400), 0x1, 0x0, 0x0) 22:44:25 executing program 3: r0 = msgget$private(0x0, 0x0) msgctl$IPC_STAT(r0, 0x2, &(0x7f0000001200)=""/4086) 22:44:25 executing program 1: r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0}, 0x10) 22:44:25 executing program 4: r0 = socket(0x1f, 0x10000005, 0x2) getsockname$unix(r0, 0x0, 0x0) 22:44:25 executing program 5: minherit(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xd49f275d97cc01bb, 0x1810, 0xffffffffffffffff, 0x0, 0x0) __clone(0x0, 0x0) 22:44:25 executing program 2: r0 = socket(0x18, 0x1, 0x0) ioctl$FIOASYNC(r0, 0xc444443b, &(0x7f0000000040)) 22:44:25 executing program 0: r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r1, &(0x7f0000000380)={&(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e, 0x0}, 0x0) recvmmsg(r0, &(0x7f0000001400), 0x1, 0x0, 0x0) 22:44:25 executing program 4: r0 = socket(0x18, 0x1, 0x0) shutdown(r0, 0x0) setsockopt$sock_int(r0, 0xffff, 0x1004, &(0x7f0000000000)=0x4, 0x4) 22:44:25 executing program 2: r0 = getppid() setpgid(r0, 0x0) 22:44:25 executing program 5: madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0xd49f275d97cc01bb, 0x1810, 0xffffffffffffffff, 0x0, 0x0) 22:44:25 executing program 0: mknod(&(0x7f0000000080)='./bus\x00', 0x2000, 0x6b2) r0 = open$dir(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) __lstat50(&(0x7f0000000040)='./bus\x00', &(0x7f0000000100)) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) __fstat50(r1, &(0x7f0000000000)) openat(r1, &(0x7f00000001c0)='./bus\x00', 0x80, 0x8) 22:44:25 executing program 3: semop(0x0, 0x0, 0x0) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x6b2) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$FIOGETOWN(r0, 0x80047460, &(0x7f00000000c0)) 22:44:25 executing program 1: compat_60__lwp_park(&(0x7f00000015c0), 0xffffffffffffffff, 0x0, 0x0) 22:44:25 executing program 4: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x18, 0x1, 0x0) setsockopt(r0, 0x6, 0x1, &(0x7f0000000000)="2ed54287", 0x4) 22:44:25 executing program 1: r0 = socket(0x2, 0x3, 0x0) getsockopt$inet_opts(r0, 0x0, 0x0, 0x0, 0x0) 22:44:25 executing program 5: r0 = _lwp_self() _lwp_suspend(r0) r1 = _lwp_self() _lwp_suspend(r1) _lwp_continue(r1) _lwp_unpark(r1, 0x0) _lwp_wakeup(r0) r2 = _lwp_self() _lwp_suspend(r2) _lwp_continue(r2) _lwp_unpark(r2, 0x0) _lwp_suspend(0x0) _lwp_suspend(r0) setreuid(0xee00, 0x0) mmap(&(0x7f0000013000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0, 0x0) _lwp_continue(r0) 22:44:25 executing program 2: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) dup3(r2, r0, 0x0) poll(&(0x7f0000000300)=[{r1, 0x40}], 0x1, 0x0) 22:44:26 executing program 1: setrlimit(0xa, &(0x7f0000000040)) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x1810, 0xffffffffffffffff, 0x0, 0x0) 22:44:26 executing program 3: compat_50_wait4(0x0, 0x0, 0xd0101fd331032a23, 0x0) 22:44:26 executing program 4: compat_50_setitimer(0x0, 0x0, &(0x7f0000001180)) r0 = socket(0x2, 0x1, 0x0) fcntl$lock(r0, 0x113cfbbc9e985450, &(0x7f0000000fc0)) 22:44:26 executing program 0: setreuid(0xee00, 0x0) r0 = getuid() setreuid(0xee00, r0) setpriority(0x0, 0x0, 0xd3) 22:44:26 executing program 2: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) poll(&(0x7f0000000080)=[{}], 0x1, 0x0) 22:44:26 executing program 3: r0 = socket$unix(0x1, 0x1, 0x0) paccept(r0, 0x0, 0x0, 0x20000000) 22:44:26 executing program 4: open$dir(&(0x7f0000000000)='./file0\x00', 0x2088611, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0, 0xfffffffd) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x20011, r0, 0x0, 0x0) preadv(r0, &(0x7f0000001380)=[{&(0x7f0000002780)=""/4125, 0x101d}, {0x0}, {&(0x7f0000001180)=""/113, 0x71}, {&(0x7f0000001200)=""/70, 0x46}, {&(0x7f00000037c0)=""/102400, 0x19000}, {&(0x7f0000001280)=""/230, 0xe6}], 0x6, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x20011, 0xffffffffffffffff, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{0x0}, {&(0x7f0000001780)=""/4096, 0x1000}, {0x0}, {&(0x7f0000001200)=""/70, 0x46}, {0x0}, {0x0}], 0x6, 0x0) read(0xffffffffffffffff, &(0x7f00000000c0)=""/109, 0x6d) truncate(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 22:44:26 executing program 2: socketpair(0x1, 0x20000001, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$unix(r0, &(0x7f0000000100)=""/149, 0x95, 0x0, 0x0, 0x0) 22:44:26 executing program 1: mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x615, 0x0) compat_43_olseek(r0, 0x0, 0x0) 22:44:26 executing program 2: r0 = open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x0) ioctl$FIONWRITE(r0, 0x40046679, &(0x7f0000000080)) 22:44:26 executing program 1: r0 = socket(0x2, 0x2, 0x0) sendmsg(r0, &(0x7f0000000680)={&(0x7f0000000040), 0xe, 0x0, 0x0, &(0x7f0000000480)=[{0x10}], 0x10}, 0x0) 22:44:26 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002c40)=ANY=[@ANYBLOB="10000000ffff000001"], 0x10}, 0x0) recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/73, 0x49}], 0x1000000000000236, 0x0}, 0x842) recvmsg(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) sendto(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 22:44:26 executing program 5: mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) munlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) fork() mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd49f275d97cc01bb, 0x1810, 0xffffffffffffffff, 0x0, 0x0) 22:44:26 executing program 4: r0 = msgget$private(0x0, 0x0) msgrcv(r0, 0x0, 0x0, 0x2, 0x0) msgrcv(r0, 0x0, 0x3f00, 0x0, 0x0) msgsnd(r0, &(0x7f0000000000)={0x1}, 0x8, 0x0) 22:44:26 executing program 0: _ksem_open(&(0x7f0000000000), 0xa00, 0x0, 0x0, &(0x7f0000001000)) 22:44:26 executing program 2: _ksem_init(0x0, &(0x7f0000000040)=0x0) _ksem_close(r0) 22:44:27 executing program 1: compat_50_mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x3e12) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 22:44:27 executing program 2: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) posix_spawn(0x0, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0) 22:44:27 executing program 5: setreuid(0xee00, 0x0) r0 = getuid() r1 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0) fchown(r1, r0, 0x0) r2 = getuid() setreuid(0xee00, r2) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0e99db6de761f86, 0x0) lchown(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) 22:44:27 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) __mount50(&(0x7f0000000040)='puffs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000140)='n', 0x1) 22:44:27 executing program 1: pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$FIONREAD(r0, 0x541b, 0x0) 22:44:27 executing program 0: r0 = semget$private(0x0, 0x8, 0x0) semop(r0, &(0x7f0000000000)=[{0x4, 0x8000}, {0x4, 0x60}], 0x2) semop(r0, &(0x7f0000000040)=[{0x4, 0x78db}, {0x4, 0x2}], 0x2) semctl$GETVAL(r0, 0x4, 0xc, 0x0) 22:44:27 executing program 3: r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_int(r0, 0xffff, 0x1001, 0x0, 0x0) 22:44:27 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002c40)=ANY=[@ANYBLOB="10000000ffff000001"], 0x10}, 0x0) recvmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000000)=""/73, 0x49}], 0x1, 0x0}, 0x842) 22:44:27 executing program 1: r0 = socket(0x22, 0x3, 0x0) shutdown(r0, 0x2) 22:44:27 executing program 1: r0 = socket(0x18, 0x1, 0x0) shutdown(r0, 0x1) listen(r0, 0x0) 22:44:27 executing program 2: r0 = socket(0x2, 0x1, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000002c0)={0x0}, 0x10, 0x3104, 0x0) 22:44:27 executing program 4: r0 = socket(0x18, 0x1, 0x0) setsockopt(r0, 0x29, 0x1b, 0x0, 0x0) 22:44:27 executing program 5: mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) __stat50(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)) preadv(r0, &(0x7f0000000000), 0x10000000000003c2, 0x0) 22:44:27 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file0/file1\x00', 0x0) rename(&(0x7f0000000100)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file1\x00') 22:44:28 executing program 2: mknod(&(0x7f0000000080)='./bus\x00', 0x3080002002, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) ioctl$FIOASYNC(r0, 0x2000746e, 0x0) 22:44:28 executing program 1: mknod(&(0x7f0000000140)='./bus\x00', 0x6000, 0x202) open$dir(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) 22:44:28 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file0/file1\x00', 0x0) rename(&(0x7f0000000100)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file1\x00') 22:44:28 executing program 0: mknod(&(0x7f0000000080)='./bus\x00', 0x6000, 0x11d6) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) 22:44:28 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=[{0x10}], 0x10}, 0x20000001) 22:44:28 executing program 2: link(0x0, &(0x7f0000000040)='./file0\x00') _lwp_wait(0x0, 0x0) __clone(0x440a, 0xffffffffffffffff) 22:44:28 executing program 3: setreuid(0xee00, 0x0) r0 = getuid() setreuid(0x0, r0) shmget(0x0, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) 22:44:28 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) __mount50(&(0x7f0000000040)='ptyfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000140)="b6", 0x1) 22:44:28 executing program 5: r0 = getpgid(0x0) getsid(r0) 22:44:28 executing program 4: r0 = socket(0x18, 0x400000002, 0x0) setsockopt$sock_int(r0, 0xffff, 0x1000, &(0x7f0000000000), 0x4) 22:44:28 executing program 1: madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) mincore(&(0x7f0000ffc000/0x4000)=nil, 0x4000, &(0x7f0000000000)=""/32) mlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xd49f275d97cc01bb, 0x1810, 0xffffffffffffffff, 0x0, 0x0) 22:44:28 executing program 3: compat_50_mknod(&(0x7f0000000040)='./file0\x00', 0x2001, 0x20c2fc) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 22:44:28 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002c40)=ANY=[@ANYBLOB="10000000ffff000001"], 0x10}, 0x0) recvmsg(r1, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000000)=""/58, 0x3a}], 0x1, 0x0}, 0x8c6) dup2(r1, r0) 22:44:28 executing program 4: open$dir(&(0x7f0000000000)='./file0\x00', 0x2088611, 0x0) unlink(&(0x7f0000000200)='./file0\x00') 22:44:28 executing program 0: r0 = socket$unix(0x1, 0x1, 0x0) getsockopt$sock_int(r0, 0xffff, 0x1003, 0x0, 0x0) 22:44:28 executing program 2: socketpair$unix(0x1, 0x200000000000002, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000002d00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002c40)=ANY=[@ANYBLOB="10000000ffff000001"], 0x10}, 0x0) recvmsg(r1, &(0x7f0000000080)={0x0, 0x272, 0x0, 0x0, &(0x7f0000001380)=""/232, 0xf}, 0x0) 22:44:28 executing program 1: r0 = socket$inet(0x2, 0x200000002, 0x0) getsockopt$inet_opts(r0, 0x0, 0x14, 0x0, 0x0) 22:44:28 executing program 5: r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x2088611, 0x0) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000000), 0x2cfea}], 0x1000000000000013) write(r0, &(0x7f0000000200)="7fd661feac75929b652d3c157b0874176c4795341e7994", 0x17) [ 67.9480254] WARNING: module error: vfs load failed for `dm', error 2 22:44:28 executing program 1: mknod(&(0x7f0000000100)='.\x00', 0x1000, 0x0) 22:44:28 executing program 3: mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x1810, 0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x4) 22:44:28 executing program 0: r0 = socket(0x2, 0x3, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x2}, 0xc) 22:44:29 executing program 2: r0 = socket$inet6(0x18, 0x2, 0x0) getsockopt(r0, 0x29, 0x2e, 0x0, 0x0) 22:44:29 executing program 1: r0 = socket(0x18, 0x1, 0x0) setsockopt(r0, 0x1000000029, 0x32, &(0x7f00000001c0)="a1", 0x1) 22:44:29 executing program 0: access(0x0, 0x8) 22:44:29 executing program 5: open$dir(0x0, 0x40000400000002c2, 0x0) r0 = open$dir(&(0x7f0000001240)='./file0\x00', 0x40000400000002c2, 0x0) ftruncate(r0, 0x0, 0x20002000008) acct(&(0x7f0000000000)='./file0\x00') 22:44:29 executing program 4: open$dir(&(0x7f0000000000)='./file0\x00', 0x2088611, 0x0) unlink(&(0x7f0000000200)='./file0\x00') 22:44:29 executing program 3: compat_50_mknod(&(0x7f0000000080)='./file0\x00', 0x2000, 0x100051c3) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 22:44:29 executing program 0: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000d00)={{0x0, 0x0, 0x0, 0xffffffffffffffff}}) 22:44:29 executing program 2: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000080)="1f", 0x4000}], 0x1) poll(&(0x7f0000000140)=[{r0, 0x15}], 0x1, 0xffb) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup2(r1, r0) 22:44:29 executing program 4: r0 = socket(0x2, 0x2, 0x0) connect$unix(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="a00235"], 0x10) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)=@abs={0x0, 0x0, 0x1}, 0x8) semop(0x0, 0x0, 0x0) 22:44:29 executing program 4: r0 = socket(0x2, 0x2, 0x0) connect$unix(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="82022e"], 0x10) sendto(r0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) 22:44:29 executing program 0: socket(0x18, 0x1, 0x0) posix_spawn(0x0, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, {}, 0x0, {}, {[0x4, 0x5]}}, 0x0, 0x0) r0 = socket(0x22, 0x3, 0x0) shutdown(r0, 0x0) poll(&(0x7f0000000000)=[{}], 0x3bd, 0x0) [ 68.6880295] Size of accounting file not a multiple of 64 - incomplete record truncated 22:44:29 executing program 5: open$dir(0x0, 0x40000400000002c2, 0x0) r0 = open$dir(&(0x7f0000001240)='./file0\x00', 0x40000400000002c2, 0x0) ftruncate(r0, 0x0, 0x20002000008) acct(&(0x7f0000000000)='./file0\x00') 22:44:29 executing program 0: r0 = socket(0x1f, 0x5, 0x0) recvmsg(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001300)=""/187, 0xbb}, 0x0) 22:44:29 executing program 1: _lwp_unpark_all(&(0x7f0000000000), 0x0, 0x0) 22:44:29 executing program 4: rename(&(0x7f0000000340)='.\x00', &(0x7f0000000380)='./file0\x00') 22:44:29 executing program 3: r0 = socket$unix(0x1, 0x1, 0x0) recvmsg(r0, &(0x7f0000002400)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x501) 22:44:29 executing program 4: r0 = _lwp_self() compat_60__lwp_park(0x0, 0x0, 0x0, 0x0) _lwp_self() r1 = _lwp_self() _lwp_suspend(0x0) shmat(0x0, &(0x7f0000001000/0x2000)=nil, 0x0) r2 = _lwp_self() _lwp_suspend(r2) _lwp_kill(0x0, 0x0) _lwp_self() _lwp_unpark_all(&(0x7f0000000000)=[r1, r0, r0], 0x3, 0x0) 22:44:29 executing program 1: mlock(&(0x7f0000215000/0x1000)=nil, 0x50a12000000000) [ 69.0380226] Size of accounting file not a multiple of 64 - incomplete record truncated 22:44:29 executing program 2: sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f00000013c0)=ANY=[], 0x38}, 0x0) r0 = socket(0x18, 0x3, 0x0) connect$unix(r0, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) 22:44:30 executing program 0: clock_nanosleep(0x0, 0x0, &(0x7f0000001340)={0x0, 0x989680}, 0x0) 22:44:30 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvfrom$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)=@abs, 0x742000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvfrom$unix(r1, 0x0, 0x0, 0x0, &(0x7f0000000000)=@abs, 0x742000) 22:44:30 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) __mount50(&(0x7f0000000040)='puffs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) 22:44:30 executing program 2: r0 = open(&(0x7f0000000040)='./file0\x00', 0x615, 0x0) setrlimit(0x8, &(0x7f0000000140)) dup(r0) 22:44:30 executing program 5: setreuid(0x0, 0xee01) setrlimit(0x7, &(0x7f0000000040)) __clone(0x0, 0x0) 22:44:30 executing program 1: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x7, &(0x7f0000000300)="a75f6981", 0x4) 22:44:30 executing program 3: open$dir(&(0x7f0000000080)='./file0\x00', 0x2088611, 0x0) socket$unix(0x1, 0x5, 0x0) socket(0x1d, 0x40000003, 0x0) pipe2(&(0x7f0000000140), 0x0) poll(&(0x7f0000000000)=[{}], 0x3bd, 0x0) 22:44:30 executing program 0: compat_50_mknod(&(0x7f0000000040)='./file0\x00', 0x2000, 0x0) compat_50_quotactl(&(0x7f0000000000)='./file0\x00', 0x10004, 0x0, 0x0) 22:44:30 executing program 2: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x18, 0x1, 0x0) setsockopt(r0, 0x80000000000029, 0xc, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) 22:44:30 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) __mount50(&(0x7f00000000c0)='msdos\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) 22:44:30 executing program 1: mkdir(&(0x7f0000002000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) mkdir(&(0x7f0000001700)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', 0x0) lchflags(&(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', 0x6000a) rename(&(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f0000000540)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00') 22:44:30 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) fchflags(r0, 0x3) r1 = msgget$private(0x0, 0x81) msgsnd(r1, &(0x7f0000000040)={0x2, "8a3bb45db2cd73c6dbbca800c9364ce1493d61909e38c9dffc6fc25a387b96a78a299ce8f57690efaef18ba172c6b2ccb30c70d5bc876314b383f7f4154af65eaa"}, 0x49, 0x0) msgget(0x0, 0x280) 22:44:30 executing program 3: munmap(&(0x7f0000000000/0x4000)=nil, 0x4000) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000000000/0x3000)=nil) shmat(r0, &(0x7f0000000000/0x2000)=nil, 0x0) madvise(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3) 22:44:30 executing program 5: r0 = socket(0x2, 0x1, 0x0) ioctl$FIOSEEKDATA(r0, 0xc0086661, &(0x7f0000000040)) 22:44:30 executing program 2: r0 = socket(0x18, 0x1, 0x0) setsockopt(r0, 0x29, 0xb, 0x0, 0x0) 22:44:30 executing program 4: mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x39c2e77d0f75bf7d, 0xffffffffffffffff, 0x0, 0x0) 22:44:30 executing program 1: preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) __clone(0x0, 0x0) r0 = __clone(0x0, 0x0) ptrace(0x9, r0, 0x0, 0x0) ptrace(0x8, r0, 0x0, 0x0) compat_50_wait4(0x0, 0x0, 0x0, 0x0) 22:44:30 executing program 4: r0 = socket(0x2, 0x1, 0x0) setsockopt(r0, 0x0, 0x3, &(0x7f0000001180)="fcbd9e63305d7e7a81d613bf4e530c89cc2cb4fce86cb6ec16c802fc9a63fbf3d85449cb254f4e20af095095a0dd37a8738be0d41c8c4c8008c9ab4536357242b8127b67ea85c37cd175ed44477c264a208cd3ca5d60f8b8cfd69471f2c7a1fb778ed83e774649a24af53e87eae3a4", 0x6f) r1 = socket(0x2, 0x2, 0x0) connect$unix(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="82022e2fac14"], 0x10) msgget$private(0x0, 0x0) r2 = shmget$private(0x0, 0x600000, 0x0, &(0x7f0000a00000/0x600000)=nil) shmctl$SHM_LOCK(r2, 0x3) shmctl$IPC_RMID(r2, 0x0) 22:44:31 executing program 0: compat_30_socket(0x5e75be232e064000, 0x0, 0x4) 22:44:31 executing program 2: msgget(0x0, 0x74a) 22:44:31 executing program 3: __clock_gettime50(0x0, &(0x7f0000000000)) r0 = msgget$private(0x0, 0x1) msgctl$IPC_STAT(r0, 0x2, &(0x7f0000000340)=""/233) 22:44:31 executing program 5: r0 = socket(0x1d, 0x40000003, 0x0) sendmsg(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[{0x10}], 0x10}, 0xb) 22:44:31 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) setuid(0xee01) unmount(&(0x7f0000000200)='./file0\x00', 0x0) 22:44:31 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)) r0 = semget$private(0x0, 0x4000000009, 0x82) semctl$SETVAL(r0, 0x5, 0x8, &(0x7f0000000100)=0x7) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f0000000140)=""/163) semop(r0, &(0x7f00000000c0)=[{0x0, 0x1, 0x800}, {0x1, 0x1, 0x1000}], 0x2) semctl$SETALL(r0, 0x0, 0x9, &(0x7f0000000100)=[0x6, 0x2000]) semop(r0, &(0x7f00000000c0)=[{0x1, 0x101, 0x1000}], 0x1) r1 = geteuid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r2, 0xffff, 0x1022, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0xc) setregid(r3, 0xffffffffffffffff) r4 = getuid() r5 = getegid() semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000000240)={{0x0, r1, r3, r4, r5, 0xc8, 0x5000}, 0x8f800000000000, 0x1000000, 0x8}) 22:44:31 executing program 2: mmap(&(0x7f0000001000/0x2000)=nil, 0x7ffffffff000, 0x0, 0x10, 0xffffffffffffffff, 0x0, 0x0) 22:44:31 executing program 4: __clone(0x59ff, 0x0) 22:44:31 executing program 4: setuid(0xee01) r0 = semget$private(0x0, 0x4, 0x220) r1 = socket(0x18, 0x1, 0x0) close(r1) getpeername$unix(r1, 0x0, 0x0) semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000000140)={{0x20040004, 0x0, 0x0, 0x0, 0x0, 0x2, 0x100}, 0x5, 0x5, 0x2}) getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f00000001c0), 0xfffffffffffffdb0) getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000040), 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000280)={0x0, 0x0}, &(0x7f0000000300)=0xc) setuid(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r5 = socket(0x2, 0x4003, 0x0) setsockopt(r2, 0x0, 0x2, &(0x7f0000000140)="99fe358a", 0x4) connect$unix(r5, &(0x7f0000000240)=ANY=[@ANYBLOB="67a9e7102f6669004f3f01010000eb5e0000000000"], 0x10) dup2(r5, 0xffffffffffffffff) setsockopt$sock_int(r4, 0xffff, 0x10, &(0x7f0000000000)=0x43cbc, 0x4) 22:44:31 executing program 2: open$dir(&(0x7f0000000000)='./file0\x00', 0x2088611, 0x0) truncate(&(0x7f0000000100)='./file0\x00', 0x0, 0x100000000) readlink(0x0, 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x80400000000206, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x20011, r0, 0x0, 0x0) compat_43_ogetsockname(0xffffffffffffffff, 0x0, 0x0) open(0x0, 0x0, 0x0) open(0x0, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) open(0x0, 0x0, 0x0) preadv(r0, &(0x7f0000001380)=[{&(0x7f0000001780)=""/4096, 0x1000}, {&(0x7f0000001180)=""/113, 0x71}, {&(0x7f0000001200)=""/70, 0x46}, {&(0x7f00000037c0)=""/102400, 0x19000}, {&(0x7f0000001280)=""/230, 0xe6}], 0x5, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f000001d7c0)={&(0x7f0000000140)=@abs={0x0, 0x0, 0x3}, 0x8, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x4) truncate(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) 22:44:31 executing program 0: r0 = _lwp_self() _lwp_setname(r0, &(0x7f00000000c0)='#}-@%!/{\x00') 22:44:31 executing program 3: getsockname$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000040)) compat_43_ogetrlimit(0x5, &(0x7f0000000200)) 22:44:31 executing program 3: r0 = socket(0x18, 0x3, 0x0) recvmmsg(r0, &(0x7f0000001280)={0x0}, 0x10, 0x0, &(0x7f00000012c0)={0xffffffffffff8000}) 22:44:31 executing program 0: open$dir(&(0x7f0000000000)='./file0\x00', 0x2088611, 0x0) mlockall(0x2) truncate(&(0x7f0000000040)='./file0\x00', 0x0, 0xfffffffd) r0 = open(&(0x7f0000000000)='./file0\x00', 0x80400000000206, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x20011, r0, 0x0, 0x0) truncate(&(0x7f0000000080)='./file0\x00', 0x0, 0x2) 22:44:31 executing program 2: mknod(&(0x7f0000000180)='./file0\x00', 0x3a0914c44f7b202c, 0xd02) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 22:44:32 executing program 5: mknod(&(0x7f0000000180)='./file0\x00', 0x1ffb, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x1, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) 22:44:33 executing program 1: connect$unix(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="820281"], 0x1) r0 = socket(0x2, 0x2, 0x0) connect$unix(r0, &(0x7f0000000000)=ANY=[], 0x10) writev(r0, &(0x7f0000001300)=[{&(0x7f0000000080)="c3ae6f9317c828dc85f867673ccb5ba9a19c259b98f5e1c4edaea500954b79c7a30a0f35fce3d4fc48df4e0e8c6d62fe73d46a30e3a4f402fde75206fbd04759ea7690b112c08220fc15df7df10a0fb5896cb065c079368647dbf05b73d9a56878805c26c92f410b9bfa4fc345e4f7ec6be2173beaca7bcce67dff662542352b7e8f2d691036e0478a36c3ad29234c0d6f5b38d34338071de8cdaade7ce4390664454d657da939ef", 0xa8}, {&(0x7f0000000140)="c03dbb6cb3253f26351ed14acace5e7e261c2c63eab7b1dda3515c72eb56d72df743720d38e7e9e54bfe409096a4727d80bf68d8324ee7ef9bea4aa9ef7227f5c554d4df292fbe26101bdd08725ec734ffa6db793083ea3d9c3b7df4826db111a8e03546839424cbe866c9a410305561ccae7534e23b5b9e24dbea6c795812651db824493889a60727b0ffc49d905585cf798398e602ce23d0825272d8484597a88c326547566d5741e960817b0c35ae5c871a071b397b7f334862ff37b0f86fbb9ee4737aa6f1bbb0", 0xc9}], 0x2) 22:44:33 executing program 4: r0 = socket(0x2, 0x2, 0x0) getsockname(r0, 0x0, 0x0) 22:44:33 executing program 3: semop(0x0, 0xffffffffffffffff, 0x0) 22:44:33 executing program 2: r0 = open(&(0x7f000000fffa)='.\x00', 0x0, 0x0) lseek(r0, 0x0, 0x0, 0x3) 22:44:33 executing program 5: _ksem_init(0x0, &(0x7f0000003800)=0x50535244) _ksem_getvalue(r0, &(0x7f0000004980)) 22:44:33 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f000000cfc0), 0x6e) 22:44:33 executing program 5: r0 = socket(0x40000000011, 0x3, 0x0) getsockname$unix(r0, &(0x7f0000000000)=@file={0x0, ""/4096}, &(0x7f0000001040)=0x1002) 22:44:33 executing program 4: r0 = semget$private(0x0, 0x8, 0x0) semop(r0, &(0x7f0000000000)=[{0x1, 0x1}], 0x1) semop(r0, &(0x7f00000000c0)=[{0x1}], 0x1) semop(r0, &(0x7f0000000000)=[{0x1, 0xffff}], 0x1) 22:44:33 executing program 3: _lwp_create(&(0x7f00000003c0)={0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000040)={0x0, 0x0, {}, {}, {0x0, 0x0, '@\x00'}}, {}, {}, {0x0, 0x0, '$^/ *@$%#$#[\x00'}}, {}, {}, {0x0, 0x0, '\x00\x00\x00\x00\\'}}, 0x0, 0x0) mkdir(&(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) compat_40_mount(&(0x7f0000000000)='mfs\x00', &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000040)) 22:44:33 executing program 2: compat_50_mknod(&(0x7f0000000040)='./file0\x00', 0x2018, 0x51c3) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$FIONBIO(r0, 0x40086484, &(0x7f00000001c0)=0x4) 22:44:33 executing program 0: symlink(&(0x7f0000001240)='./file0\x00', &(0x7f0000001280)='./file0\x00') __lstat50(&(0x7f0000000480)='./file0\x00', &(0x7f00000008c0)) 22:44:33 executing program 3: sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f00000013c0)=ANY=[@ANYBLOB="2000000000ebfffffeff0000000000000000095b9d180000002900000031c7456b"], 0x38}, 0x0) r0 = socket(0x18, 0x3, 0x0) connect$unix(r0, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) 22:44:33 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0x0, 0x0}) bind$unix(r0, &(0x7f0000000000)=@abs={0x1}, 0x6e) 22:44:33 executing program 5: __nanosleep50(0xffffffffffffffff, 0x0) 22:44:33 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) __mount50(&(0x7f0000000140)='cd9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000001280), 0x0) 22:44:33 executing program 0: mknod(&(0x7f0000000080)='./bus\x00', 0x3080002002, 0x0) open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) acct(&(0x7f0000000640)='./bus\x00') 22:44:33 executing program 2: r0 = open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x0) mmap(&(0x7f0000000000/0x13000)=nil, 0x13000, 0x0, 0x10, r0, 0x0, 0x0) compat_20_getfsstat(&(0x7f0000000a00), 0x10000, 0x0) 22:44:33 executing program 2: madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0x1810, 0xffffffffffffffff, 0x0, 0x0) [ 73.0780317] WARNING: defaulted mmap() share type to MAP_PRIVATE (pid 2517 command syz-executor.2) [ 73.0880244] WARNING: defaulted mmap() share type to MAP_PRIVATE (pid 2517 command syz-executor.2) 22:44:34 executing program 1: r0 = socket(0x1, 0x2, 0x0) getsockopt(r0, 0x0, 0x0, 0x0, 0x0) 22:44:34 executing program 4: connect$unix(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="6202e5"], 0x1) r0 = socket(0x2, 0x1, 0x0) bind(r0, &(0x7f0000000000), 0x10) r1 = dup(r0) listen(r1, 0x0) r2 = socket(0x2, 0x1, 0x0) connect$unix(r2, &(0x7f0000000000)=ANY=[], 0x10) sendto$unix(r2, &(0x7f00000011c0)='\x00', 0xff72, 0x0, 0x0, 0x0) close(r2) accept$unix(r1, 0x0, 0x0) write(r2, &(0x7f0000000040)='\\', 0x1) 22:44:34 executing program 0: r0 = open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0xfffffffffffffffd) writev(r0, &(0x7f00000014c0)=[{&(0x7f00000000c0)='#!', 0x2}], 0x1) write(r0, &(0x7f0000000140)="0920120000feffffff04148027454a638a711de274fe266ce23205554752cd8439df6dfe4e0f84b94aaa41f680fa371c960a", 0x32) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 22:44:34 executing program 5: pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, 0x0, 0x0) 22:44:34 executing program 2: r0 = socket(0x18, 0x3, 0x0) getsockopt$inet_opts(r0, 0x29, 0x65, 0x0, 0x0) 22:44:34 executing program 3: r0 = socket(0x18, 0x1, 0x0) shutdown(r0, 0x2) compat_43_ogetsockname(r0, 0x0, 0x0) 22:44:34 executing program 5: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/', 0x0, 0x0) compat_43_olseek(r0, 0x0, 0x2) 22:44:34 executing program 2: semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f0000000100)) 22:44:34 executing program 3: r0 = socket(0x18, 0x2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x10) setsockopt(r0, 0x1000000029, 0x1b, &(0x7f0000000000), 0x4) 22:44:34 executing program 4: profil(0x0, 0x0, 0x0, 0x7) fork() 22:44:34 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0x0, 0x0}) sendmmsg(r0, 0x0, 0x0, 0x0, 0x0) 22:44:34 executing program 0: r0 = __clone(0x0, 0x0) ptrace(0x9, r0, 0x0, 0x0) compat_50_wait4(0x0, 0x0, 0x0, 0x0) ptrace(0xb, r0, 0x0, 0x0) 22:44:34 executing program 1: r0 = msgget$private(0x0, 0x0) msgrcv(r0, 0x0, 0x0, 0x0, 0x0) msgsnd(r0, 0x0, 0x0, 0x0) 22:44:34 executing program 2: __clone(0x0, &(0x7f0000000100)) fork() compat_50_wait4(0x0, 0x0, 0x1, 0x0) 22:44:34 executing program 5: mknod(&(0x7f0000000080)='./bus\x00', 0x3080002002, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) shutdown(r0, 0x0) 22:44:34 executing program 4: semget(0x0, 0x3, 0x0) 22:44:34 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) setsockopt$sock_timeval(r0, 0xffff, 0x1005, &(0x7f0000000000)={0x7}, 0x10) msgsnd(0x0, 0x0, 0x0, 0x0) 22:44:34 executing program 3: shmget(0x3, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) r0 = shmget(0x3, 0x3000, 0x78000200, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x4000) shmctl$IPC_RMID(r0, 0x0) shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) r1 = shmget(0x3, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r1, &(0x7f0000ffd000/0x3000)=nil, 0x4000) shmctl$IPC_RMID(r1, 0x0) shmat(r1, &(0x7f0000ffd000/0x3000)=nil, 0x6000) r2 = shmget(0x3, 0x3000, 0x78000200, &(0x7f0000ffd000/0x3000)=nil) r3 = shmget(0x3, 0x3000, 0x78000200, &(0x7f0000ffd000/0x3000)=nil) shmat(r3, &(0x7f0000ffd000/0x3000)=nil, 0x4000) shmctl$IPC_RMID(r3, 0x0) shmat(r3, &(0x7f0000ffd000/0x3000)=nil, 0x4000) shmctl$IPC_RMID(r2, 0x0) shmat(r2, &(0x7f0000ffd000/0x3000)=nil, 0x6000) r4 = shmget$private(0x0, 0x1000, 0x200, &(0x7f0000fff000/0x1000)=nil) shmctl$IPC_RMID(r4, 0x0) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x0) shmget(0x3, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) 22:44:34 executing program 0: r0 = __clone(0x0, 0x0) ptrace(0x9, r0, 0x0, 0x0) fork() __wait450(0x0, 0x0, 0x4, &(0x7f0000000040)) 22:44:34 executing program 5: _ksem_timedwait(0x0, &(0x7f0000000040)={0x0, 0x100000001}) 22:44:34 executing program 2: __clone(0x0, &(0x7f0000000100)) fork() compat_50_wait4(0x0, 0x0, 0x1, 0x0) 22:44:34 executing program 4: semctl$GETALL(0x0, 0x0, 0x6, &(0x7f0000000000)=""/7) __clock_getres50(0x0, &(0x7f00000000c0)) 22:44:35 executing program 4: setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x28) 22:44:35 executing program 5: semop(0x0, 0x0, 0x0) r0 = __clone(0x0, 0x0) ptrace(0x9, r0, 0x0, 0x0) ptrace(0x8, r0, 0x0, 0x0) ptrace(0xc0000000008, r0, 0x0, 0x0) 22:44:35 executing program 1: r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x2088611, 0x0) r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x2088611, 0x0) r2 = open$dir(&(0x7f0000000280)='./file0\x00', 0x40000400000002c2, 0x0) ftruncate(r2, 0x0, 0x400100000e) writev(r1, &(0x7f0000000340)=[{&(0x7f0000000000), 0x2cfea}], 0x1000000000000013) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000000), 0x2cfea}], 0x1000000000000013) 22:44:35 executing program 3: mknod(&(0x7f0000000040)='./bus\x00', 0x6010, 0x0) acct(&(0x7f0000000100)='./bus\x00') 22:44:35 executing program 0: r0 = socket(0x1f, 0x3, 0x0) ioctl$FIOSETOWN(r0, 0x8004667c, &(0x7f0000000040)=0x781) 22:44:35 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) __fstat50(r0, &(0x7f0000000300)) 22:44:35 executing program 2: setrlimit(0x9, &(0x7f0000000200)) socket$inet(0x10, 0x2, 0x0) 22:44:35 executing program 5: _ksem_init(0x0, &(0x7f0000000000)=0x50535244) _ksem_trywait(r0) 22:44:35 executing program 5: open$dir(&(0x7f0000000080)='./file0/file0\x00', 0x0, 0x0) r0 = socket(0x800000018, 0x3, 0x0) bind$unix(r0, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c) 22:44:35 executing program 3: compat_50_mknod(&(0x7f0000000100)='./file0\x00', 0x2000, 0x17fc) r0 = open$dir(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) poll(&(0x7f0000000040)=[{r0}, {}], 0x2, 0x0) 22:44:35 executing program 2: r0 = socket(0x18, 0x2, 0x0) setsockopt(r0, 0x29, 0x32, &(0x7f0000000140)="9513f3948292ae269282d455abab56626afd70c6e9b3fda3181149ee114dd200a92ef2b465bbc11fcfdb71b72ce278fa941a79b7d45722a806d166b1bc4513bb05a76025938759964a53c6bb7cf2394a7ab24012dc56fa2aa2786a7b4b39b7a51bf1baa51d3fb561c0ce637ef3c53f88edcc758d1e1eff1031571ebb9a54c1ea8426de968ad829470aa55d5b3eb81a62a35e0b41bc906838a88d756b2d17d0d7", 0xa0) setsockopt(r0, 0x29, 0x32, 0x0, 0x0) 22:44:35 executing program 0: r0 = socket(0x1f, 0x3, 0x0) sendto$inet(r0, 0x0, 0x0, 0x1, &(0x7f00000000c0)={0x2, 0x1}, 0xc) 22:44:35 executing program 4: mknod(&(0x7f0000000080)='./bus\x00', 0x2000, 0x6b2) r0 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) ioctl$FIOASYNC(r0, 0x80047465, &(0x7f0000000040)) 22:44:35 executing program 3: r0 = socket$unix(0x1, 0x1, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup3(r0, r1, 0x0) fchflags(r2, 0x0) 22:44:36 executing program 5: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x18, 0x1, 0x0) setsockopt(r0, 0x0, 0xa, &(0x7f0000000000)="00020000", 0x4) 22:44:36 executing program 2: r0 = socket(0x18, 0x1, 0x0) getsockopt(r0, 0x29, 0x16, 0x0, 0x0) 22:44:36 executing program 0: r0 = socket(0x2, 0x2, 0x0) connect$unix(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="82022e"], 0x10) sendmsg$unix(r0, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="060000001d5a7448d6"], 0x18}, 0x0) 22:44:36 executing program 1: symlink(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000240)='./file0\x00') rename(&(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00') 22:44:36 executing program 3: r0 = open$dir(&(0x7f0000001240)='./file0\x00', 0x40000400000002c2, 0x0) ftruncate(r0, 0x0, 0x80001ffffc) r1 = open$dir(&(0x7f0000001240)='./file0\x00', 0x40000400000002c2, 0x0) ftruncate(r1, 0x0, 0x80001f7ffa) r2 = open$dir(&(0x7f0000001240)='./file0\x00', 0x40000400000002c2, 0x0) ftruncate(r2, 0x0, 0x80001ffffc) r3 = open$dir(&(0x7f0000001240)='./file0\x00', 0x40000400000002c2, 0x0) ftruncate(r3, 0x0, 0x0) 22:44:36 executing program 0: r0 = socket(0x2, 0x2, 0x0) connect$unix(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="82022e"], 0x10) sendmsg$unix(r0, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="060000001d5a7448d6"], 0x18}, 0x0) 22:44:36 executing program 4: connect$unix(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="6202c1"], 0x1) r0 = socket(0x2, 0x1, 0x0) bind(r0, &(0x7f0000000000), 0x10) r1 = dup(r0) listen(r1, 0x0) accept$unix(r0, 0x0, &(0x7f0000000100)) accept$unix(r1, 0x0, 0x0) r2 = socket(0x2, 0x1, 0x0) connect$unix(r2, &(0x7f0000000000)=ANY=[], 0x10) 22:44:36 executing program 2: r0 = socket(0x18, 0x1, 0x0) getsockopt(r0, 0x29, 0x16, 0x0, 0x0) 22:44:36 executing program 2: r0 = socket(0x18, 0x1, 0x0) getsockopt(r0, 0x29, 0x16, 0x0, 0x0) 22:44:36 executing program 5: setreuid(0x0, 0x0) setregid(0x0, 0xee01) 22:44:36 executing program 2: r0 = socket(0x18, 0x1, 0x0) getsockopt(r0, 0x29, 0x16, 0x0, 0x0) 22:44:36 executing program 1: munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000) minherit(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) 22:44:36 executing program 3: chdir(&(0x7f0000739ffe)='..') mlock(&(0x7f000066d000/0x200000)=nil, 0x200000) 22:44:36 executing program 1: r0 = socket(0x11, 0x3, 0x0) __fstat50(r0, &(0x7f0000000280)) r1 = socket$inet(0x2, 0x0, 0x40) compat_50_futimes(r1, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fsync(0xffffffffffffffff) 22:44:36 executing program 5: munmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000) r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil) r1 = shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x0) mlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) shmdt(r1) 22:44:36 executing program 0: r0 = socket(0x2, 0x2, 0x0) connect$unix(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="82022e"], 0x10) sendmsg$unix(r0, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="060000001d5a7448d6"], 0x18}, 0x0) 22:44:36 executing program 2: getsockopt(0xffffffffffffffff, 0x29, 0x16, 0x0, 0x0) 22:44:36 executing program 2: getsockopt(0xffffffffffffffff, 0x29, 0x16, 0x0, 0x0) 22:44:37 executing program 0: mknod(&(0x7f0000000180)='./file0\x00', 0x61c8, 0x202) mknod(&(0x7f0000000140)='./bus\x00', 0x6000, 0x202) rename(&(0x7f0000000200)='./bus\x00', &(0x7f0000000240)='./file0\x00') 22:44:37 executing program 3: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x18, 0x1, 0x0) setsockopt(r0, 0x29, 0xd, &(0x7f0000000080)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) 22:44:37 executing program 4: seteuid(0xffffffffffffffff) 22:44:37 executing program 5: open$dir(&(0x7f0000001240)='./file0\x00', 0x40000400000002c2, 0x0) r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x40000400000002c2, 0x0) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000180), 0x81700}], 0x1000000000000013) socket(0x0, 0x3, 0x0) r1 = open$dir(&(0x7f0000001240)='./file0\x00', 0x40000400000002c2, 0x0) compat_43_oftruncate(r1, 0x10000) 22:44:37 executing program 2: getsockopt(0xffffffffffffffff, 0x29, 0x16, 0x0, 0x0) 22:44:37 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x1, 0x0) __fstat50(r0, &(0x7f0000000000)={0x0}) mknod(&(0x7f0000000080)='./bus\x00', 0x2080002002, r1) mknod(&(0x7f0000000000)='./bus\x00', 0x2000, r1) r2 = open$dir(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) compat_20_statfs(&(0x7f0000000240)='./bus\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0}) r4 = semget$private(0x0, 0x4000000009, 0x0) semop(r4, &(0x7f0000000200)=[{0x2}], 0x48) r5 = getuid() setreuid(0xee00, r5) __lstat50(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getuid() setreuid(0xee00, r7) semctl$IPC_SET(r4, 0x0, 0x1, &(0x7f0000000040)={{0x0, r5, r6, r7, 0xffffffffffffffff, 0x2b42b22caffc990d, 0x6}, 0x1, 0x9, 0x9}) setreuid(0xee00, 0x0) semctl$IPC_SET(r4, 0x0, 0x1, &(0x7f0000000400)={{0x5, r7, 0xffffffffffffffff, 0x0, r6, 0x80, 0x3}, 0x8, 0x1, 0x2}) semop(r4, &(0x7f00000003c0)=[{0x2, 0x8, 0x1800}, {0x3, 0x0, 0x800}, {0x2, 0x8001, 0x800}, {0x1, 0x4, 0x1800}], 0x4) fchownat(0xffffffffffffffff, &(0x7f0000000100)='./bus\x00', r3, r6, 0x400) ioctl$FIOASYNC(r2, 0x8004667d, &(0x7f00000000c0)) __stat50(&(0x7f0000000200)='./bus\x00', &(0x7f0000000140)) 22:44:37 executing program 3: mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x40004200000028ac) r0 = open(&(0x7f0000000400)='./bus\x00', 0x0, 0x0) ioctl$FIOSEEKDATA(r0, 0x80047442, &(0x7f0000000080)=0x4d) 22:44:37 executing program 4: open$dir(&(0x7f0000000000)='./file0\x00', 0x2088611, 0x0) truncate(&(0x7f00000000c0)='./file0\x00', 0x0, 0x100000000) open(0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x0) r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x2, 0x0) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000180), 0x81700}], 0x1000000000000013) r1 = open$dir(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000000), 0x10000000000003c2, 0x0) 22:44:37 executing program 0: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000366000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r0, 0x0) connect$unix(r0, &(0x7f0000000140)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xf) 22:44:37 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) __mount50(&(0x7f0000000100)='umap\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) 22:44:37 executing program 0: mknodat(0xffffffffffffffff, 0x0, 0x5de526e6b53e38cb, 0x0) 22:44:37 executing program 2: r0 = socket(0x0, 0x1, 0x0) getsockopt(r0, 0x29, 0x16, 0x0, 0x0) 22:44:37 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) __mount50(&(0x7f0000000100)='umap\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) 22:44:38 executing program 4: open$dir(&(0x7f0000000000)='./file0\x00', 0x2088611, 0x0) truncate(&(0x7f00000000c0)='./file0\x00', 0x0, 0x100000000) open(0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x0) r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x2, 0x0) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000180), 0x81700}], 0x1000000000000013) r1 = open$dir(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000000), 0x10000000000003c2, 0x0) 22:44:38 executing program 0: r0 = socket(0x2, 0x2, 0x0) __fstat50(r0, &(0x7f0000000000)) 22:44:38 executing program 5: open$dir(&(0x7f0000001240)='./file0\x00', 0x40000400000002c2, 0x0) r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x40000400000002c2, 0x0) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000180), 0x81700}], 0x1000000000000013) socket(0x0, 0x3, 0x0) r1 = open$dir(&(0x7f0000001240)='./file0\x00', 0x40000400000002c2, 0x0) compat_43_oftruncate(r1, 0x10000) 22:44:38 executing program 2: r0 = socket(0x0, 0x1, 0x0) getsockopt(r0, 0x29, 0x16, 0x0, 0x0) 22:44:38 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x1, 0x0) __fstat50(r0, &(0x7f0000000000)={0x0}) mknod(&(0x7f0000000080)='./bus\x00', 0x2080002002, r1) mknod(&(0x7f0000000000)='./bus\x00', 0x2000, r1) r2 = open$dir(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) compat_20_statfs(&(0x7f0000000240)='./bus\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0}) r4 = semget$private(0x0, 0x4000000009, 0x0) semop(r4, &(0x7f0000000200)=[{0x2}], 0x48) r5 = getuid() setreuid(0xee00, r5) __lstat50(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getuid() setreuid(0xee00, r7) semctl$IPC_SET(r4, 0x0, 0x1, &(0x7f0000000040)={{0x0, r5, r6, r7, 0xffffffffffffffff, 0x2b42b22caffc990d, 0x6}, 0x1, 0x9, 0x9}) setreuid(0xee00, 0x0) semctl$IPC_SET(r4, 0x0, 0x1, &(0x7f0000000400)={{0x5, r7, 0xffffffffffffffff, 0x0, r6, 0x80, 0x3}, 0x8, 0x1, 0x2}) semop(r4, &(0x7f00000003c0)=[{0x2, 0x8, 0x1800}, {0x3, 0x0, 0x800}, {0x2, 0x8001, 0x800}, {0x1, 0x4, 0x1800}], 0x4) fchownat(0xffffffffffffffff, &(0x7f0000000100)='./bus\x00', r3, r6, 0x400) ioctl$FIOASYNC(r2, 0x8004667d, &(0x7f00000000c0)) __stat50(&(0x7f0000000200)='./bus\x00', &(0x7f0000000140)) 22:44:38 executing program 2: r0 = socket(0x0, 0x1, 0x0) getsockopt(r0, 0x29, 0x16, 0x0, 0x0) 22:44:38 executing program 3: mkdir(&(0x7f00000006c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) __mount50(&(0x7f0000000000)='umap\x00', &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f00000000c0)='\a', 0x1) 22:44:38 executing program 2: r0 = socket(0x18, 0x0, 0x0) getsockopt(r0, 0x29, 0x16, 0x0, 0x0) 22:44:38 executing program 4: r0 = socket(0x1f, 0x5, 0x0) ioctl$FIOSEEKDATA(r0, 0xc0086661, &(0x7f0000000040)) 22:44:38 executing program 3: setrlimit(0x8, &(0x7f0000000180)={0x120000000, 0xffffffffdffffffc}) 22:44:38 executing program 2: r0 = socket(0x18, 0x0, 0x0) getsockopt(r0, 0x29, 0x16, 0x0, 0x0) 22:44:38 executing program 0: munlock(&(0x7f0000ffa000/0x1000)=nil, 0xffffffffdf005fff) 22:44:38 executing program 0: r0 = socket(0x22, 0x3, 0x0) __fstat50(r0, &(0x7f0000000000)) 22:44:38 executing program 3: socketpair(0x10, 0x2, 0x0, 0x0) mmap(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0, 0x0) 22:44:38 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) __getrusage50(0xffffffffffffffff, &(0x7f00000000c0)) 22:44:38 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$unix(r1, 0x0, 0x0, 0x0, 0x0, 0x0) recvfrom$unix(r0, 0x0, 0x0, 0x10142, 0x0, 0x0) 22:44:38 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) sendmmsg(r0, &(0x7f0000000000)={0x0}, 0x10, 0x0, 0x0) 22:44:38 executing program 2: r0 = socket(0x18, 0x0, 0x0) getsockopt(r0, 0x29, 0x16, 0x0, 0x0) 22:44:38 executing program 5: open(&(0x7f0000000080)='./file0\x00', 0x615, 0x0) access(&(0x7f00000000c0)='./file0\x00', 0x1) 22:44:38 executing program 3: compat_50_mknod(&(0x7f0000000040)='./file0\x00', 0x2000, 0xfff) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 22:44:39 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) chroot(&(0x7f0000000380)='./file0/../file0\x00') compat_20_getfsstat(&(0x7f0000000040), 0xb65, 0x0) 22:44:39 executing program 5: mknod(&(0x7f0000000180)='./file0\x00', 0x1ffb, 0x0) r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x2, 0x0) poll(&(0x7f0000000000)=[{r0}], 0x1, 0x0) 22:44:39 executing program 3: open$dir(&(0x7f0000000000)='./file0\x00', 0x2088611, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$FIOGETBMAP(r0, 0xc008667a, &(0x7f00000000c0)=0xfffffffffffffff9) 22:44:39 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) __mount50(&(0x7f0000000040)='overlay\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0) 22:44:39 executing program 0: r0 = socket$inet(0x2, 0x2, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r1, 0x0, 0x200000000000c, &(0x7f0000000240)="eaff125c00000000", 0x8) setsockopt$inet_opts(r1, 0x0, 0x200000000000c, &(0x7f00000000c0)="eaff115c00000000", 0x8) setsockopt$inet_opts(r1, 0x0, 0x200000000000d, &(0x7f0000000040)="eaff125c00000000", 0x8) dup2(r1, r0) setsockopt$inet_opts(r0, 0x0, 0x200000000000c, &(0x7f0000000240)="eaff125c00000000", 0x8) setsockopt$inet_opts(r0, 0x0, 0x200000000000d, &(0x7f0000000040)="eaff125c00000000", 0x8) 22:44:39 executing program 5: r0 = socket(0x18, 0x2, 0x0) sendmsg(r0, &(0x7f00000005c0)={&(0x7f0000000000)=@data="46b7f80d2c6aee0672fe13d40838", 0xe, 0x0, 0x0, 0x0}, 0x0) 22:44:39 executing program 4: r0 = socket(0x18, 0x3, 0x0) getsockopt$sock_timeval(r0, 0xffff, 0x100b, 0x0, 0x0) 22:44:39 executing program 2: socket(0x18, 0x1, 0x0) getsockopt(0xffffffffffffffff, 0x29, 0x16, 0x0, 0x0) 22:44:39 executing program 4: r0 = socket$unix(0x1, 0x1, 0x0) recvmmsg(r0, 0x0, 0xfffffcff, 0x0, 0x0) 22:44:39 executing program 5: munmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000) mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) 22:44:39 executing program 4: r0 = socket(0x18, 0x3, 0x0) setsockopt$inet_opts(r0, 0x0, 0x0, 0x0, 0x0) 22:44:39 executing program 3: access(0x0, 0x0) compat_43_fstat43(0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x5, 0x0) compat_43_fstat43(r0, 0x0) compat_43_fstat43(r0, &(0x7f0000000540)) 22:44:39 executing program 1: r0 = socket(0x11, 0x10000000000003, 0x0) sendto$unix(r0, &(0x7f0000000140)="b10003039000e803000008005786ca900f0e08fecea11ea8fef96ec2c73fd3357ae26caa0416fa4f376336acf00b7804be781e4991f7c8df5f882b297be1aa79230000f4c8b2ca3ebbc257699a1f132e27acb5d602000d7d026ba8af63ff37282934e4fd89720fd3872babfbb770c1f5a872c881ff7cc53c894303b22f310b404f36a00f90006ee01be657aea8c500000002000000000000020200a371a3f8000000000000000000010090d2c4e5187c00", 0xb1, 0x0, 0x0, 0x0) 22:44:39 executing program 4: mknod(&(0x7f0000000080)='./bus\x00', 0x2000, 0x0) r0 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) ioctl$FIOASYNC(r0, 0x8004747d, &(0x7f0000000000)=0xfcffffff) ioctl$FIONREAD(r0, 0x4004667f, &(0x7f00000000c0)) 22:44:39 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) symlink(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000100)='./file0/file0\x00') mkdir(&(0x7f0000000000)='./file0/file0/file0\x00', 0x0) 22:44:39 executing program 2: socket(0x18, 0x1, 0x0) getsockopt(0xffffffffffffffff, 0x29, 0x16, 0x0, 0x0) 22:44:39 executing program 0: sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="2000000000ebfffffeff00000000000063e86cfc9d071b9d2a538706000000b8180000002900000032"], 0x38}, 0x0) r0 = socket(0x18, 0x2, 0x0) connect$unix(r0, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) 22:44:39 executing program 2: socket(0x18, 0x1, 0x0) getsockopt(0xffffffffffffffff, 0x29, 0x16, 0x0, 0x0) [ 78.8880410] panic: UBSan: Undefined Behavior in /syzkaller/managers/netbsd-kubsan/kernel/sys/compat/common/tty_43.c:230:48, left shift of negative value -50331649 [ 78.8980161] cpu1: Begin traceback... [ 78.9280166] vpanic() at netbsd:vpanic+0x2d3 [ 78.9980161] isAlreadyReported() at netbsd:isAlreadyReported [ 79.0680177] HandleShiftOutOfBounds() at netbsd:HandleShiftOutOfBounds+0x1e0 [ 79.1480152] compat_43_ttioctl.cold.0() at netbsd:compat_43_ttioctl.cold.0+0x55 [ 79.2180153] ttioctl() at netbsd:ttioctl+0x11e8 [ 79.2780153] comioctl() at netbsd:comioctl+0x18e [ 79.3380159] cdev_ioctl() at netbsd:cdev_ioctl+0x160 [ 79.4080189] cnioctl() at netbsd:cnioctl+0xb2 [ 79.4680149] cdev_ioctl() at netbsd:cdev_ioctl+0x160 [ 79.5380166] spec_ioctl() at netbsd:spec_ioctl+0x2d0 [ 79.5980170] VOP_IOCTL() at netbsd:VOP_IOCTL+0x141 [ 79.6780164] vn_ioctl() at netbsd:vn_ioctl+0x1c7 [ 79.7480172] sys_ioctl() at netbsd:sys_ioctl+0xdaa [ 79.8080200] sys___syscall() at netbsd:sys___syscall+0x1cf [ 79.8780178] syscall() at netbsd:syscall+0x2d5 [ 79.8980168] --- syscall (number 198) --- [ 79.9180190] netbsd:syscall+0x2d5: [ 79.9180190] cpu1: End traceback... [ 79.9280161] fatal breakpoint trap in supervisor mode [ 79.9280161] trap type 1 code 0 rip 0xffffffff80221a85 cs 0x8 rflags 0x246 cr2 0x78c9e3000000 ilevel 0x8 rsp 0xffff8080bf3d8260 [ 79.9380140] curlwp 0xffffe4c304537740 pid 1324.2758 lowest kstack 0xffff8080bf3d42c0 Stopped in pid 1324.2758 (syz-executor.4) at netbsd:breakpoint+0x5: leave ? breakpoint() at netbsd:breakpoint+0x5 db_panic() at netbsd:db_panic+0xec vpanic() at netbsd:vpanic+0x2d3 isAlreadyReported() at netbsd:isAlreadyReported HandleShiftOutOfBounds() at netbsd:HandleShiftOutOfBounds+0x1e0 compat_43_ttioctl.cold.0() at netbsd:compat_43_ttioctl.cold.0+0x55 ttioctl() at netbsd:ttioctl+0x11e8 comioctl() at netbsd:comioctl+0x18e cdev_ioctl() at netbsd:cdev_ioctl+0x160 cnioctl() at netbsd:cnioctl+0xb2 cdev_ioctl() at netbsd:cdev_ioctl+0x160 spec_ioctl() at netbsd:spec_ioctl+0x2d0 VOP_IOCTL() at netbsd:VOP_IOCTL+0x141 vn_ioctl() at netbsd:vn_ioctl+0x1c7 sys_ioctl() at netbsd:sys_ioctl+0xdaa sys___syscall() at netbsd:sys___syscall+0x1cf syscall() at netbsd:syscall+0x2d5 --- syscall (number 198) --- netbsd:syscall+0x2d5: Panic string: UBSan: Undefined Behavior in /syzkaller/managers/netbsd-kubsan/kernel/sys/compat/common/tty_43.c:230:48, left shift of negative value -50331649 PID LID S CPU FLAGS STRUCT LWP * NAME WAIT 3783 3393 2 0 0 ffffe4c3043c6500 syz-executor.0 3783 >3783 7 0 0 ffffe4c304574340 syz-executor.0 3779 3779 2 0 0 ffffe4c304537b80 syz-executor.1 1324 >2758 7 1 0 ffffe4c304537740 syz-executor.4 1324 3765 3 1 80 ffffe4c3043c60c0 syz-executor.4 parked 1324 3771 2 0 0 ffffe4c3043c6940 syz-executor.4 1324 1324 2 1 10000040 ffffe4c2f4eae8c0 syz-executor.4 1711 1736 2 1 0 ffffe4c30401c600 syz-executor.3 1711 1710 2 0 0 ffffe4c3044274c0 syz-executor.3 1711 3776 3 1 80 ffffe4c2f509b080 syz-executor.3 parked 1711 1711 2 1 10000000 ffffe4c304427900 syz-executor.3 1709 1709 2 0 0 ffffe4c2f6e5d180 syz-executor.5 393 393 3 0 80 ffffe4c304453680 syz-executor.5 parked 391 391 3 1 80 ffffe4c304334b40 syz-executor.2 parked 384 384 3 1 80 ffffe4c304991480 syz-executor.0 parked 3282 3282 3 0 80 ffffe4c30401c1c0 syz-executor.0 parked 3495 3495 3 1 80 ffffe4c304574bc0 syz-executor.2 parked 2916 2916 3 1 80 ffffe4c3049918c0 syz-executor.2 parked 3281 3281 3 0 80 ffffe4c303dde200 syz-executor.4 parked 2873 2873 3 1 80 ffffe4c2f509b4c0 syz-executor.1 nanoslp 1716 1716 3 1 80 ffffe4c2f4c5bb80 syz-executor.5 parked 1872 1872 3 0 80 ffffe4c304453ac0 syz-executor.5 parked 1341 1341 3 0 80 ffffe4c2f3f5c6c0 syz-executor.5 parked 1638 1638 3 0 80 ffffe4c304453240 syz-executor.5 parked 1407 1407 3 1 80 ffffe4c2f6e5da00 syz-executor.3 parked 1238 1238 3 0 80 ffffe4c30413e6c0 syz-executor.3 parked 1079 1079 3 0 80 ffffe4c2f413e2c0 syz-executor.5 nanoslp 418 418 3 0 80 ffffe4c2f4d96780 syz-executor.4 nanoslp 855 855 3 1 80 ffffe4c2f4c5b740 syz-executor.3 nanoslp 1071 1071 3 1 80 ffffe4c2f6e5d5c0 syz-executor.2 nanoslp 1067 1067 3 1 80 ffffe4c2f6de49c0 syz-executor.0 nanoslp 936 1096 3 0 c0 ffffe4c2f6de4580 syz-fuzzer parked 936 1070 3 0 80 ffffe4c2f6de4140 syz-fuzzer parked 936 945 3 1 80 ffffe4c2f5fc4980 syz-fuzzer parked 936 1250 3 0 80 ffffe4c2eafa8b00 syz-fuzzer parked 936 1253 3 1 80 ffffe4c2f3d48240 syz-fuzzer parked 936 1069 3 0 80 ffffe4c2f3906640 syz-fuzzer parked 936 1065 3 0 80 ffffe4c2f3906a80 syz-fuzzer kqueue 936 1255 3 0 80 ffffe4c2f38f01c0 syz-fuzzer parked 936 936 3 0 80 ffffe4c2f4eae480 syz-fuzzer parked 1249 1249 3 1 80 ffffe4c2f509b900 sshd select 696 696 3 0 80 ffffe4c2f3f5c280 getty nanoslp 946 946 3 1 80 ffffe4c2f4fe50c0 getty nanoslp 938 938 3 1 80 ffffe4c2f5fc4540 getty nanoslp 1107 1107 3 1 c0 ffffe4c2f5fc4100 getty ttyraw 940 940 3 1 80 ffffe4c2f4fe5500 sshd select 975 975 3 0 80 ffffe4c2f4fe5940 powerd kqueue 733 733 3 0 80 ffffe4c2f413eb40 syslogd kqueue 590 590 3 0 80 ffffe4c2f4d96bc0 dhcpcd poll 589 589 3 0 80 ffffe4c2f4eae040 dhcpcd poll 587 587 3 0 80 ffffe4c2f3d48ac0 dhcpcd poll 412 412 3 1 80 ffffe4c2f4d96340 dhcpcd poll 347 347 3 1 80 ffffe4c2f413e700 dhcpcd poll 346 346 3 1 80 ffffe4c2f3d48680 dhcpcd poll 345 345 3 1 80 ffffe4c2f3f5cb00 dhcpcd poll 1 1 3 1 80 ffffe4c2eb6f2500 init wait 0 2876 5 1 600 ffffe4c30401ca40 (zombie) 0 1123 3 1 200 ffffe4c303ddea80 acctwatch actwat 0 860 3 0 200 ffffe4c2f38f0600 physiod physiod 0 165 3 0 200 ffffe4c2f3906200 ioflush syncer 0 164 3 0 200 ffffe4c2eb6092c0 pooldrain pooldrain 0 163 3 1 200 ffffe4c2f38f0a40 pgdaemon pgdaemon 0 160 3 1 200 ffffe4c2f182ea00 usb7 usbevt 0 31 3 0 200 ffffe4c2f182e5c0 usb6 usbevt 0 63 3 1 200 ffffe4c2f182e180 usb5 usbevt 0 126 3 1 200 ffffe4c2ee7999c0 usb4 usbevt 0 125 3 1 200 ffffe4c2ee799580 usb3 usbevt 0 124 3 1 200 ffffe4c2ee799140 usb2 usbevt 0 123 3 1 200 ffffe4c2ec754980 usb1 usbevt 0 122 3 1 200 ffffe4c2ec754540 usb0 usbevt 0 121 3 1 200 ffffe4c2ec754100 usbtask-dr usbtsk 0 120 3 1 200 ffffe4c2eb6f2940 usbtask-hc usbtsk 0 119 3 0 200 ffffe4c2e8b5aac0 npfgc0 npfgcw 0 118 3 1 200 ffffe4c2eb6f20c0 rt_free rt_free 0 117 3 1 200 ffffe4c2eb6bd900 unpgc unpgc 0 116 3 0 200 ffffe4c2eb6bd4c0 key_timehandler key_timehandler 0 115 3 1 200 ffffe4c2eb6bd080 icmp6_wqinput/1 icmp6_wqinput 0 114 3 0 200 ffffe4c2eb6a88c0 icmp6_wqinput/0 icmp6_wqinput 0 113 3 0 200 ffffe4c2eb6a8480 nd6_timer nd6_timer 0 112 3 1 200 ffffe4c2eb6a8040 carp6_wqinput/1 carp6_wqinput 0 111 3 0 200 ffffe4c2eb643bc0 carp6_wqinput/0 carp6_wqinput 0 110 3 1 200 ffffe4c2eb643780 carp_wqinput/1 carp_wqinput 0 109 3 0 200 ffffe4c2eb643340 carp_wqinput/0 carp_wqinput 0 108 3 1 200 ffffe4c2eb661b80 icmp_wqinput/1 icmp_wqinput 0 107 3 0 200 ffffe4c2eb661740 icmp_wqinput/0 icmp_wqinput 0 106 3 0 200 ffffe4c2eb661300 rt_timer rt_timer 0 105 3 1 200 ffffe4c2eb609700 vmem_rehash vmem_rehash 0 104 3 1 200 ffffe4c2eb609b40 entbutler entropy 0 30 3 1 200 ffffe4c2eafa86c0 vioif0_txrx/1 vioif0_txrx 0 29 3 0 200 ffffe4c2eafa8280 vioif0_txrx/0 vioif0_txrx 0 27 3 0 200 ffffe4c2e8b5a680 scsibus0 sccomp 0 26 3 0 200 ffffe4c2e8b5a240 pms0 pmsreset 0 25 3 1 200 ffffe4c2e8a8ca80 xcall/1 xcall 0 24 1 1 200 ffffe4c2e8a8c640 softser/1 0 23 1 1 200 ffffe4c2e8a8c200 softclk/1 0 22 1 1 200 ffffe4c2e8a57a40 softbio/1 0 21 1 1 200 ffffe4c2e8a57600 softnet/1 0 20 1 1 201 ffffe4c2e8a571c0 idle/1 0 19 3 0 200 ffffe4c3f898fa00 lnxpwrwq lnxpwrwq 0 18 3 1 200 ffffe4c3f898f5c0 lnxlngwq lnxlngwq 0 17 3 0 200 ffffe4c3f898f180 lnxsyswq lnxsyswq 0 16 3 0 200 ffffe4c3f89a09c0 lnxrcugc lnxrcugc 0 15 3 0 200 ffffe4c3f89a0580 sysmon smtaskq 0 14 3 1 200 ffffe4c3f89a0140 pmfsuspend pmfsuspend 0 13 3 0 200 ffffe4c3f89bb980 pmfevent pmfevent 0 12 3 0 200 ffffe4c3f89bb540 sopendfree sopendfr 0 11 3 0 200 ffffe4c3f89bb100 iflnkst iflnkst 0 10 3 0 200 ffffe4c3f99dc940 nfssilly nfssilly 0 9 3 0 200 ffffe4c3f99dc500 vdrain vdrain 0 8 3 0 200 ffffe4c3f99dc0c0 modunload mod_unld 0 7 3 0 200 ffffe4c3f9a15900 xcall/0 xcall 0 6 1 0 200 ffffe4c3f9a154c0 softser/0 0 > 5 7 0 200 ffffe4c3f9a15080 softclk/0 0 4 1 0 200 ffffe4c3f9a3f8c0 softbio/0 0 3 1 0 200 ffffe4c3f9a3f480 softnet/0 0 2 1 0 201 ffffe4c3f9a3f040 idle/0 0 0 3 0 200 ffffffff85cca480 swapper uvm [Locks tracked through LWPs] ****** LWP 3783.3783 (syz-executor.0) @ 0xffffe4c304574340, l_stat=7 *** Locks held: * Lock 0 (initialized at pmap_ctor) lock address : 0xffffe4c2f3deff80 type : sleep/adaptive initialized : 0xffffffff80f2eea3 shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 0 relevant cpu : 0 last held: 0 relevant lwp : 0xffffe4c304574340 last held: 0xffffe4c304574340 last locked* : 0xffffffff80f31557 unlocked : 0xffffffff80f2ebe6 owner field : 0xffffe4c304574340 wait/spin: 0/0 Turnstile: no active turnstile for this lock. *** Locks wanted: none ****** LWP 3779.3779 (syz-executor.1) @ 0xffffe4c304537b80, l_stat=2 *** Locks held: * Lock 0 (initialized at pmap_ctor) lock address : 0xffffe4c2f4fc7580 type : sleep/adaptive initialized : 0xffffffff80f2eea3 shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 0 relevant cpu : 0 last held: 0 relevant lwp : 0xffffe4c304537b80 last held: 0xffffe4c304537b80 last locked* : 0xffffffff80f31557 unlocked : 0xffffffff80f2ebe6 owner field : 0xffffe4c304537b80 wait/spin: 0/0 Turnstile: no active turnstile for this lock. *** Locks wanted: none ****** LWP 1324.2758 (syz-executor.4) @ 0xffffe4c304537740, l_stat=7 *** Locks held: none *** Locks wanted: * Lock 0 (initialized at module_hook_init) lock address : 0xffffffff860cc9c0 type : sleep/adaptive initialized : 0xffffffff831efdb0 shared holds : 0 exclusive: 0 shares wanted: 0 exclusive: 0 relevant cpu : 1 last held: 0 relevant lwp : 0xffffe4c304537740 last held: 000000000000000000 last locked : 000000000000000000 unlocked*: 000000000000000000 owner field : 000000000000000000 wait/spin: 0/0 Turnstile: no active turnstile for this lock. ****** LWP 1711.1736 (syz-executor.3) @ 0xffffe4c30401c600, l_stat=2 *** Locks held: * Lock 0 (initialized at uvm_obj_init) lock address : 0xffffe4c2f87462c0 type : sleep/adaptive initialized : 0xffffffff8310121e shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 0 relevant cpu : 1 last held: 1 relevant lwp : 0xffffe4c30401c600 last held: 0xffffe4c30401c600 last locked* : 0xffffffff830c83cb unlocked : 0xffffffff830c47d9 owner/count : 0xffffe4c30401c600 flags : 0x0000000000000004 Turnstile: no active turnstile for this lock. * Lock 1 (initialized at pmap_ctor) lock address : 0xffffe4c2f4fc7f80 type : sleep/adaptive initialized : 0xffffffff80f2eea3 shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 0 relevant cpu : 1 last held: 1 relevant lwp : 0xffffe4c30401c600 last held: 0xffffe4c30401c600 last locked* : 0xffffffff80f31557 unlocked : 0xffffffff80f31c4c owner field : 0xffffe4c30401c600 wait/spin: 0/0 Turnstile: no active turnstile for this lock. * Lock 2 (initialized at pmap_ctor) lock address : 0xffffe4c2f4fc7f88 type : sleep/adaptive initialized : 0xffffffff80f2eed2 shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 0 relevant cpu : 1 last held: 1 relevant lwp : 0xffffe4c30401c600 last held: 0xffffe4c30401c600 last locked* : 0xffffffff80f1b9bb unlocked : 0xffffffff80f1be2a owner/count : 0xffffe4c30401c600 flags : 0x0000000000000004 Turnstile: no active turnstile for this lock. *** Locks wanted: none ****** LWP 1709.1709 (syz-executor.5) @ 0xffffe4c2f6e5d180, l_stat=2 *** Locks held: * Lock 0 (initialized at amap_alloc1) lock address : 0xffffe4c2f7de29c0 type : sleep/adaptive initialized : 0xffffffff830a2fcc shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 0 relevant cpu : 0 last held: 0 relevant lwp : 0xffffe4c2f6e5d180 last held: 0xffffe4c2f6e5d180 last locked* : 0xffffffff830c698c unlocked : 0xffffffff830c2ec8 owner/count : 0xffffe4c2f6e5d180 flags : 0x0000000000000004 Turnstile: no active turnstile for this lock. *** Locks wanted: none ****** LWP 589.589 (dhcpcd) @ 0xffffe4c2f4eae040, l_stat=3 *** Locks held: none *** Locks wanted: * Lock 0 (initialized at module_hook_init) lock address : 0xffffffff860cc9c0 type : sleep/adaptive initialized : 0xffffffff831efdb0 shared holds : 0 exclusive: 0 shares wanted: 0 exclusive: 0 relevant cpu : 0 last held: 0 relevant lwp : 0xffffe4c2f4eae040 last held: 000000000000000000 last locked : 000000000000000000 unlocked*: 000000000000000000 owner field : 000000000000000000 wait/spin: 0/0 Turnstile: no active turnstile for this lock. ****** LWP 587.587 (dhcpcd) @ 0xffffe4c2f3d48ac0, l_stat=3 *** Locks held: none *** Locks wanted: * Lock 0 (initialized at module_hook_init) lock address : 0xffffffff860cc9c0 type : sleep/adaptive initialized : 0xffffffff831efdb0 shared holds : 0 exclusive: 0 shares wanted: 0 exclusive: 0 relevant cpu : 0 last held: 0 relevant lwp : 0xffffe4c2f3d48ac0 last held: 000000000000000000 last locked : 000000000000000000 unlocked*: 000000000000000000 owner field : 000000000000000000 wait/spin: 0/0 Turnstile: no active turnstile for this lock. ****** LWP 346.346 (dhcpcd) @ 0xffffe4c2f3d48680, l_stat=3 *** Locks held: none *** Locks wanted: * Lock 0 (initialized at module_hook_init) lock address : 0xffffffff860cc9c0 type : sleep/adaptive initialized : 0xffffffff831efdb0 shared holds : 0 exclusive: 0 shares wanted: 0 exclusive: 0 relevant cpu : 1 last held: 0 relevant lwp : 0xffffe4c2f3d48680 last held: 000000000000000000 last locked : 000000000000000000 unlocked*: 000000000000000000 owner field : 000000000000000000 wait/spin: 0/0 Turnstile: no active turnstile for this lock. ****** LWP 345.345 (dhcpcd) @ 0xffffe4c2f3f5cb00, l_stat=3 *** Locks held: none *** Locks wanted: * Lock 0 (initialized at module_hook_init) lock address : 0xffffffff860cc9c0 type : sleep/adaptive initialized : 0xffffffff831efdb0 shared holds : 0 exclusive: 0 shares wanted: 0 exclusive: 0 relevant cpu : 1 last held: 0 relevant lwp : 0xffffe4c2f3f5cb00 last held: 000000000000000000 last locked : 000000000000000000 unlocked*: 000000000000000000 owner field : 000000000000000000 wait/spin: 0/0 Turnstile: no active turnstile for this lock. ****** LWP 0.23 (softclk/1) @ 0xffffe4c2e8a8c200, l_stat=1 *** Locks held: none *** Locks wanted: * Lock 0 (initialized at module_hook_init) lock address : 0xffffffff860cc9c0 type : sleep/adaptive initialized : 0xffffffff831efdb0 shared holds : 0 exclusive: 0 shares wanted: 0 exclusive: 0 relevant cpu : 1 last held: 0 relevant lwp : 0xffffe4c2e8a8c200 last held: 000000000000000000 last locked : 000000000000000000 unlocked*: 000000000000000000 owner field : 000000000000000000 wait/spin: 0/0 Turnstile: no active turnstile for this lock. ****** LWP 0.11 (iflnkst) @ 0xffffe4c3f89bb100, l_stat=3 *** Locks held: none *** Locks wanted: * Lock 0 (initialized at module_hook_init) lock address : 0xffffffff860cc9c0 type : sleep/adaptive initialized : 0xffffffff831efdb0 shared holds : 0 exclusive: 0 shares wanted: 0 exclusive: 0 relevant cpu : 0 last held: 0 relevant lwp : 0xffffe4c3f89bb100 last held: 000000000000000000 last locked : 000000000000000000 unlocked*: 000000000000000000 owner field : 000000000000000000 wait/spin: 0/0 Turnstile: no active turnstile for this lock. [Locks tracked through CPUs] ******* Locks held on cpu1: * Lock 0 (initialized at main) lock address : 0xffffffff860cc8c0 type : spin initialized : 0xffffffff839d199d shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 0 relevant cpu : 1 last held: 1 relevant lwp : 0xffffe4c304537740 last held: 0xffffe4c304537740 last locked* : 0xffffffff832d3349 unlocked : 0xffffffff832d2bf0 curcpu holds : 2 wanted by: 000000000000000000 * Lock 1 (initialized at tty_init) lock address : 0xffffffff861b8ab0 type : spin initialized : 0xffffffff833bbf15 shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 0 relevant cpu : 1 last held: 1 relevant lwp : 0xffffe4c304537740 last held: 0xffffe4c304537740 last locked* : 0xffffffff822e00fb unlocked : 0xffffffff833c426e owner field : 0x0000000000010600 wait/spin: 0/1 PAGE FLAG PQ UOBJECT UANON 0xffff808000007180 0045 00000000 0x0 0x0 0xffff808000007200 0045 00000000 0x0 0x0 0xffff808000007280 0045 00000000 0x0 0x0 0xffff808000007300 0045 00000000 0x0 0x0 0xffff808000007380 0045 00000000 0x0 0x0 0xffff808000007400 0045 00000000 0x0 0x0 0xffff808000007480 0045 00000000 0x0 0x0 0xffff808000007500 0045 00000000 0x0 0x0 0xffff808000007580 0041 00000000 0x0 0x0 0xffff808000007600 0041 00000000 0x0 0x0 0xffff808000007680 0041 00000000 0x0 0x0 0xffff808000007700 0045 00000000 0x0 0x0 0xffff808000007780 0045 00000000 0x0 0x0 0xffff808000007800 0045 00000000 0x0 0x0 0xffff808000007880 0041 00000000 0x0 0x0 0xffff808000007900 0041 00000000 0x0 0x0 0xffff808000007980 0041 00000000 0x0 0x0 0xffff808000007a00 0041 00000000 0x0 0x0 0xffff808000007a80 0041 00000000 0x0 0x0 0xffff808000007b00 0041 00000000 0x0 0x0 0xffff808000007b80 0041 00000000 0x0 0x0 0xffff808000007c00 0041 00000000 0x0 0x0 0xffff808000007c80 0041 00000000 0x0 0x0 0xffff808000007d00 0041 00000000 0x0 0x0 0xffff808000007d80 0041 00000000 0x0 0x0 0xffff808000007e00 0041 00000000 0x0 0x0 0xffff808000007e80 0041 00000000 0x0 0x0 0xffff808000007f00 0041 00000000 0x0 0x0 0xffff808000007f80 0041 00000000 0x0 0x0 0xffff808000008000 0041 00000000 0x0 0x0 0xffff808000008080 0041 00000000 0x0 0x0 0xffff808000008100 0041 00000000 0x0 0x0 0xffff808000008180 0041 00000000 0x0 0x0 0xffff808000008200 0041 00000000 0x0 0x0 0xffff808000008280 0041 00000000 0x0 0x0 0xffff808000008300 0041 00000000 0x0 0x0 0xffff808000008380 0041 00000000 0x0 0x0 0xffff808000008400 0041 00000000 0x0 0x0 0xffff808000008480 0041 00000000 0x0 0x0 0xffff808000008500 0041 00000000 0x0 0x0 0xffff808000008580 0041 00000000 0x0 0x0 0xffff808000008600 0041 00000000 0x0 0x0 0xffff808000008680 0045 00000000 0x0 0x0 0xffff808000008700 0041 00000000 0x0 0x0 0xffff808000008780 0041 00000000 0x0 0x0 0xffff808000008800 0041 00000000 0x0 0x0 0xffff808000008880 0041 00000000 0x0 0x0 0xffff808000008900 0041 00000000 0x0 0x0 0xffff808000008980 0041 00000000 0x0 0x0 0xffff808000008a00 0041 00000000 0x0 0x0 0xffff808000008a80 0041 00000000 0x0 0x0 0xffff808000008b00 0041 00000000 0x0 0x0 0xffff808000008b80 0041 00000000 0x0 0x0 0xffff808000008c00 0041 00000000 0x0 0x0 0xffff808000008c80 0041 00000000 0x0 0x0 0xffff808000008d00 0041 00000000 0x0 0x0 0xffff808000008d80 0041 00000000 0x0 0x0 0xffff808000008e00 0041 00000000 0x0 0x0 0xffff808000008e80 0041 00000000 0x0 0x0 0xffff808000008f00 0045 00000000 0x0 0x0 0xffff808000008f80 0041 00000000 0x0 0x0 0xffff808000009000 0041 00000000 0x0 0x0 0xffff808000009080 0041 00000000 0x0 0x0 0xffff808000009100 0041 00000000 0x0 0x0 0xffff808000009180 0041 00000000 0x0 0x0 0xffff808000009200 0041 00000000 0x0 0x0 0xffff808000009280 0041 00000000 0x0 0x0 0xffff808000009300 0041 00000000 0x0 0x0 0xffff808000009380 0041 00000000 0x0 0x0 0xffff808000009400 0041 00000000 0x0 0x0 0xffff808000009480 0041 00000000 0x0 0x0 0xffff808000009500 0041 00000000 0x0 0x0 0xffff808000009580 0045 00000000 0x0 0x0 0xffff808000009600 0041 00000000 0x0 0x0 0xffff808000009680 0041 00000000 0x0 0x0 0xffff808000009700 0041 00000000 0x0 0x0 0xffff808000009780 0041 00000000 0x0 0x0 0xffff808000009800 0041 00000000 0x0 0x0 0xffff808000009880 0041 00000000 0x0 0x0 0xffff808000009900 0041 00000000 0x0 0x0 0xffff808000009980 0041 00000000 0x0 0x0 0xffff808000009a00 0041 00000000 0x0 0x0 0xffff808000009a80 0041 00000000 0x0 0x0 0xffff808000009b00 0041 00000000 0x0 0x0 0xffff808000009b80 0041 00000000 0x0 0x0 0xffff808000009c00 0041 00000000 0x0 0x0 0xffff808000009c80 0041 00000000 0x0 0x0 0xffff808000009d00 0041 00000000 0x0 0x0 0xffff808000009d80 0041 00000000 0x0 0x0 0xffff808000009e00 0041 00000000 0x0 0x0 0xffff808000009e80 0041 00000000 0x0 0x0 0xffff808000009f00 0041 00000000 0x0 0x0 0xffff808000009f80 0041 00000000 0x0 0x0 0xffff80800000a000 0041 00000000 0x0 0x0 0xffff80800000a080 0041 00000000 0x0 0x0 0xffff80800000a100 0045 00000000 0x0 0x0 0xffff80800000a180 0041 00000000 0x0 0x0 0xffff80800000a200 0041 00000000 0x0 0x0 0xffff80800000a280 0041 00000000 0x0 0x0 0xffff80800000a300 0041 00000000 0x0 0x0 0xffff80800000a380 0041 00000000 0x0 0x0 0xffff80800000a400 0041 00000000 0x0 0x0 0xffff80800000a480 0041 00000000 0x0 0x0 0xffff80800000a500 0041 00000000 0x0 0x0 0xffff80800000a580 0041 00000000 0x0 0x0 0xffff80800000a600 0041 00000000 0x0 0x0 0xffff80800000a680 0041 00000000 0x0 0x0 0xffff80800000a700 0041 00000000 0x0 0x0 0xffff80800000a780 0041 00000000 0x0 0x0 0xffff80800000a800 0041 00000000 0x0 0x0 0xffff80800000a880 0041 00000000 0x0 0x0 0xffff80800000a900 0041 00000000 0x0 0x0 0xffff80800000a980 0041 00000000 0x0 0x0 0xffff80800000aa00 0045 00000000 0x0 0x0 0xffff80800000aa80 0041 00000000 0x0 0x0 0xffff80800000ab00 0041 00000000 0x0 0x0 0xffff80800000ab80 0041 00000000 0x0 0x0 0xffff80800000ac00 0041 00000000 0x0 0x0 0xffff80800000ac80 0041 00000000 0x0 0x0 0xffff80800000ad00 0041 00000000 0x0 0x0 0xffff80800000ad80 0045 00000000 0x0 0x0 0xffff80800000ae00 0045 00000000 0x0 0x0 0xffff80800000ae80 0045 00000000 0x0 0x0 0xffff80800000af00 0041 00000000 0x0 0x0 0xffff80800000af80 0041 00000000 0x0 0x0 0xffff80800000b000 0041 00000000 0x0 0x0 0xffff80800000b080 0041 00000000 0x0 0x0 0xffff80800000b100 0041 00000000 0x0 0x0 0xffff80800000b180 0045 00000000 0x0 0x0 0xffff80800000b200 0045 00000000 0x0 0x0 0xffff80800000b280 0045 00000000 0x0 0x0 0xffff80800000b300 0041 00000000 0x0 0x0 0xffff80800000b380 0041 00000000 0x0 0x0 0xffff80800000b400 0041 00000000 0x0 0x0 0xffff80800000b480 0041 00000000 0x0 0x0 0xffff80800000b500 0041 00000000 0x0 0x0 0xffff80800000b580 0045 00000000 0x0 0x0 0xffff80800000b600 0045 00000000 0x0 0x0 0xffff80800000b680 0045 00000000 0x0 0x0 0xffff80800000b700 0041 00000000 0x0 0x0 0xffff80800000b780 0045 00000000 0x0 0x0 0xffff80800000b800 0045 00000000 0x0 0x0 0xffff80800000b880 0041 00000000 0x0 0x0 0xffff80800000b900 0045 00000000 0x0 0x0 0xffff80800000b980 0045 00000000 0x0 0x0 0xffff80800000ba00 0045 00000000 0x0 0x0 0xffff80800000ba80 0045 00000000 0x0 0x0 0xffff80800000bb00 0045 00000000 0x0 0x0 0xffff80800000bb80 0045 00000000 0x0 0x0 0xffff80800000bc00 0045 00000000 0x0 0x0 0xffff80800000bc80 0045 00000000 0x0 0x0 0xffff80800000bd00 0045 00000000 0x0 0x0 0xffff80800000bd80 0045 00000000 0x0 0x0 0xffff80800000be00 0041 00000000 0x0 0x0 0xffff80800000be80 0041 00000000 0x0 0x0 0xffff80800000bf00 0045 00000000 0x0 0x0 0xffff80800000bf80 0045 00000000 0x0 0x0 0xffff80800000c000 0045 00000000 0x0 0x0 0xffff80800000c080 0045 00000000 0x0 0x0 0xffff80800000c100 0045 00000000 0x0 0x0 0xffff80800000c180 0041 00000000 0x0 0x0 0xffff80800000c200 0041 00000000 0x0 0x0 0xffff80800000c280 0041 00000000 0x0 0x0 0xffff80800000c300 0045 00000000 0x0 0x0 0xffff80800000c380 0045 00000000 0x0 0x0 0xffff80800000c400 0045 00000000 0x0 0x0 0xffff80800000c480 0045 00000000 0x0 0x0 0xffff80800000c500 0045 00000000 0x0 0x0 0xffff80800000c580 0041 00000000 0x0 0x0 0xffff80800000c600 0041 00000000 0x0 0x0 0xffff80800000c680 0041 00000000 0x0 0x0 0xffff80800000c700 0045 00000000 0x0 0x0 0xffff80800000c780 0041 00000000 0x0 0x0 0xffff80800000c800 0045 00000000 0x0 0x0 0xffff80800000c880 0045 00000000 0x0 0x0 0xffff80800000c900 0045 00000000 0x0 0x0 0xffff80800000c980 0041 00000000 0x0 0x0 0xffff80800000ca00 0041 00000000 0x0 0x0 0xffff80800000ca80 0041 00000000 0x0 0x0 0xffff80800000cb00 0041 00000000 0x0 0x0 0xffff80800000cb80 0041 00000000 0x0 0x0 0xffff80800000cc00 0041 00000000 0x0 0x0 0xffff80800000cc80 0045 00000000 0x0 0x0 0xffff80800000cd00 0041 00000000 0x0 0x0 0xffff80800000cd80 0041 00000000 0x0 0x0 0xffff80800000ce00 0041 00000000 0x0 0x0 0xffff80800000ce80 0041 00000000 0x0 0x0 0xffff80800000cf00 0041 00000000 0x0 0x0 0xffff80800000cf80 0041 00000000 0x0 0x0 0xffff80800000d000 0041 00000000 0x0 0x0 0xffff80800000d080 0041 00000000 0x0 0x0 0xffff80800000d100 0041 00000000 0x0 0x0 0xffff80800000d180 0041 00000000 0x0 0x0 0xffff80800000d200 0045 00000000 0x0 0x0 0xffff80800000d280 0045 00000000 0x0 0x0 0xffff80800000d300 0041 00000000 0x0 0x0 0xffff80800000d380 0045 00000000 0x0 0x0 0xffff80800000d400 0041 00000000 0x0 0x0 0xffff80800000d480 0041 00000000 0x0 0x0 0xffff80800000d500 0041 00000000 0x0 0x0 0xffff80800000d580 0045 00000000 0x0 0x0 0xffff80800000d600 0041 00000000 0x0 0x0 0xffff80800000d680 0041 00000000 0x0 0x0 0xffff80800000d700 0045 00000000 0x0 0x0 0xffff80800000d780 0041 00000000 0x0 0x0 0xffff80800000d800 0045 00000000 0x0 0x0 0xffff80800000d880 0041 00000000 0x0 0x0 0xffff80800000d900 0041 00000000 0x0 0x0 0xffff80800000d980 0045 00000000 0x0 0x0 0xffff80800000da00 0041 00000000 0x0 0x0 0xffff80800000da80 0041 00000000 0x0 0x0 0xffff80800000db00 0041 00000000 0x0 0x0 0xffff80800000db80 0045 00000000 0x0 0x0 0xffff80800000dc00 0041 00000000 0x0 0x0 0xffff80800000dc80 0041 00000000 0x0 0x0 0xffff80800000dd00 0045 00000000 0x0 0x0 0xffff80800000dd80 0041 00000000 0x0 0x0 0xffff80800000de00 0041 00000000 0x0 0x0 0xffff80800000de80 0041 00000000 0x0 0x0 0xffff80800000df00 0041 00000000 0x0 0x0 0xffff80800000df80 0045 00000000 0x0 0x0 0xffff80800000e000 0045 00000000 0x0 0x0 0xffff80800000e080 0045 00000000 0x0 0x0 0xffff80800000e100 0045 00000000 0x0 0x0 0xffff80800000e180 0041 00000000 0x0 0x0 0xffff80800000e200 0041 00000000 0x0 0x0 0xffff80800000e280 0041 00000000 0x0 0x0 0xffff80800000e300 0045 00000000 0x0 0x0 0xffff80800000e380 0045 00000000 0x0 0x0 0xffff80800000e400 0045 00000000 0x0 0x0 0xffff80800000e480 0045 00000000 0x0 0x0 0xffff80800000e500 0041 00000000 0x0 0x0 0xffff80800000e580 0041 00000000 0x0 0x0 0xffff80800000e600 0041 00000000 0x0 0x0 0xffff80800000e680 0041 00000000 0x0 0x0 0xffff80800000e700 0041 00000000 0x0 0x0 0xffff80800000e780 0041 00000000 0x0 0x0 0xffff80800000e800 0045 00000000 0x0 0x0 0xffff80800000e880 0045 00000000 0x0 0x0 0xffff80800000e900 0041 00000000 0x0 0x0 0xffff80800000e980 0041 00000000 0x0 0x0 0xffff80800000ea00 0041 00000000 0x0 0x0 0xffff80800000ea80 0041 00000000 0x0 0x0 0xffff80800000eb00 0045 00000000 0x0 0x0 0xffff80800000eb80 0041 00000000 0x0 0x0 0xffff80800000ec00 0041 00000000 0x0 0x0 0xffff80800000ec80 0041 00000000 0x0 0x0 0xffff80800000ed00 0045 00000000 0x0 0x0 0xffff80800000ed80 0041 00000000 0x0 0x0 0xffff80800000ee00 0041 00000000 0x0 0x0 0xffff80800000ee80 0041 00000000 0x0 0x0 0xffff80800000ef00 0041 00000000 0x0 0x0 0xffff80800000ef80 0041 00000000 0x0 0x0 0xffff80800000f000 0045 00000000 0x0 0x0 0xffff80800000f080 0045 00000000 0x0 0x0 0xffff80800000f100 0041 00000000 0x0 0x0 0xffff80800000f180 0041 00000000 0x0 0x0 0xffff80800000f200 0041 00000000 0x0 0x0 0xffff80800000f280 0045 00000000 0x0 0x0 0xffff80800000f300 0041 00000000 0x0 0x0 0xffff80800000f380 0041 00000000 0x0 0x0 0xffff80800000f400 0041 00000000 0x0 0x0 0xffff80800000f480 0041 00000000 0x0 0x0 0xffff80800000f500 0041 00000000 0x0 0x0 0xffff80800000f580 0041 00000000 0x0 0x0 0xffff80800000f600 0045 00000000 0x0 0x0 0xffff80800000f680 0041 00000000 0x0 0x0 0xffff80800000f700 0041 00000000 0x0 0x0 0xffff80800000f780 0041 00000000 0x0 0x0 0xffff80800000f800 0041 00000000 0x0 0x0 0xffff80800000f880 0041 00000000 0x0 0x0 0xffff80800000f900 0041 00000000 0x0 0x0 0xffff80800000f980 0041 00000000 0x0 0x0 0xffff80800000fa00 0041 00000000 0x0 0x0 0xffff80800000fa80 0041 00000000 0x0 0x0 0xffff80800000fb00 0041 00000000 0x0 0x0 0xffff80800000fb80 0045 00000000 0x0 0x0 0xffff80800000fc00 0041 00000000 0x0 0x0 0xffff80800000fc80 0041 00000000 0x0 0x0 0xffff80800000fd00 0041 00000000 0x0 0x0 0xffff80800000fd80 0045 00000000 0x0 0x0 0xffff80800000fe00 0041 00000000 0x0 0x0 0xffff80800000fe80 0041 00000000 0x0 0x0 0xffff80800000ff00 0041 00000000 0x0 0x0 0xffff80800000ff80 0041 00000000 0x0 0x0 0xffff808000010000 0041 00000000 0x0 0x0 0xffff808000010080 0041 00000000 0x0 0x0 0xffff808000010100 0041 00000000 0x0 0x0 0xffff808000010180 0041 00000000 0x0 0x0 0xffff808000010200 0041 00000000 0x0 0x0 0xffff808000010280 0041 00000000 0x0 0x0 0xffff808000010300 0041 00000000 0x0 0x0 0xffff808000010380 0041 00000000 0x0 0x0 0xffff808000010400 0041 00000000 0x0 0x0 0xffff808000010480 0041 00000000 0x0 0x0 0xffff808000010500 0041 00000000 0x0 0x0 0xffff808000010580 0041 00000000 0x0 0x0 0xffff808000010600 0041 00000000 0x0 0x0 0xffff808000010680 0041 00000000 0x0 0x0 0xffff808000010700 0045 00000000 0x0 0x0 0xffff808000010780 0041 00000000 0x0 0x0 0xffff808000010800 0045 00000000 0x0 0x0 0xffff808000010880 0041 00000000 0x0 0x0 0xffff808000010900 0045 00000000 0x0 0x0 0xffff808000010980 0041 00000000 0x0 0x0 0xffff808000010a00 0041 00000000 0x0 0x0 0xffff808000010a80 0041 00000000 0x0 0x0 0xffff808000010b00 0041 00000000 0x0 0x0 0xffff808000010b80 0045 00000000 0x0 0x0 0xffff808000010c00 0041 00000000 0x0 0x0 0xffff808000010c80 0041 00000000 0x0 0x0 0xffff808000010d00 0041 00000000 0x0 0x0 0xffff808000010d80 0041 00000000 0x0 0x0 0xffff808000010e00 0041 00000000 0x0 0x0 0xffff808000010e80 0041 00000000 0x0 0x0 0xffff808000010f00 0041 00000000 0x0 0x0 0xffff808000010f80 0041 00000000 0x0 0x0 0xffff808000011000 0041 00000000 0x0 0x0 0xffff808000011080 0041 00000000 0x0 0x0 0xffff808000011100 0041 00000000 0x0 0x0 0xffff808000011180 0041 00000000 0x0 0x0 0xffff808000011200 0041 00000000 0x0 0x0 0xffff808000011280 0041 00000000 0x0 0x0 0xffff808000011300 0041 00000000 0x0 0x0 0xffff808000011380 0041 00000000 0x0 0x0 0xffff808000011400 0041 00000000 0x0 0x0 0xffff808000011480 0001 00000000 0x0 0x0 0xffff808000011500 0001 00000000 0x0 0x0 0xffff808000011580 0001 00000000 0x0 0x0 0xffff808000011600 0001 00000000 0x0 0x0 0xffff808000011680 0001 00000000 0x0 0x0 0xffff808000011700 0001 00000000 0x0 0x0 0xffff808000011780 0001 00000000 0x0 0x0 0xffff808000011800 0001 00000000 0x0 0x0 0xffff808000011880 0001 00000000 0x0 0x0 0xffff808000011900 0001 00000000 0x0 0x0 0xffff808000011980 0001 00000000 0x0 0x0 0xffff808000011a00 0001 00000000 0x0 0x0 0xffff808000011a80 0001 00000000 0x0 0x0 0xffff808000011b00 0001 00000000 0x0 0x0 0xffff808000011b80 0001 00000000 0x0 0x0 0xffff808000011c00 0001 00000000 0x0 0x0 0xffff808000011c80 0001 00000000 0x0 0x0 0xffff808000011d00 0001 00000000 0x0 0x0 0xffff808000011d80 0001 00000000 0x0 0x0 0xffff808000011e00 0001 00000000 0x0 0x0 0xffff808000011e80 0001 00000000 0x0 0x0 0xffff808000011f00 0001 00000000 0x0 0x0 0xffff808000011f80 0001 00000000 0x0 0x0 0xffff808000012000 0001 00000000 0x0 0x0 0xffff808000012080 0001 00000000 0x0 0x0 0xffff808000012100 0001 00000000 0x0 0x0 0xffff808000012180 0001 00000000 0x0 0x0 0xffff808000012200 0001 00000000 0x0 0x0 0xffff808000012280 0001 00000000 0x0 0x0 0xffff808000012300 0001 00000000 0x0 0x0 0xffff808000012380 0001 00000000 0x0 0x0 0xffff808000012400 0001 00000000 0x0 0x0 0xffff808000012480 0001 00000000 0x0 0x0 0xffff808000012500 0001 00000000 0x0 0x0 0xffff808000012580 0001 00000000 0x0 0x0 0xffff808000012600 0001 00000000 0x0 0x0 0xffff808000012680 0001 00000000 0x0 0x0 0xffff808000012700 0001 00000000 0x0 0x0 0xffff808000012780 0001 00000000 0x0 0x0 0xffff808000012800 0001 00000000 0x0 0x0 0xffff808000012880 0001 00000000 0x0 0x0 0xffff808000012900 0001 00000000 0x0 0x0 0xffff808000012980 0001 00000000 0x0 0x0 0xffff808000012a00 0001 00000000 0x0 0x0 0xffff808000012a80 0001 00000000 0x0 0x0 0xffff808000012b00 0001 00000000 0x0 0x0 0xffff808000012b80 0001 00000000 0x0 0x0 0xffff808000012c00 0001 00000000 0x0 0x0 0xffff808000012c80 0001 00000000 0x0 0x0 0xffff808000012d00 0001 00000000 0x0 0x0 0xffff808000012d80 0001 00000000 0x0 0x0 0xffff808000012e00 0001 00000000 0x0 0x0 0xffff808000012e80 0001 00000000 0x0 0x0 0xffff808000012f00 0001 00000000 0x0 0x0 0xffff808000012f80 0041 00000000 0x0 0x0 0xffff808000013000 0045 00000000 0x0 0x0 0xffff808000013080 0041 00000000 0x0 0x0 0xffff808000013100 0041 00000000 0x0 0x0 0xffff808000013180 0041 00000000 0x0 0x0 0xffff808000013200 0041 00000000 0x0 0x0 0xffff808000013280 0041 00000000 0x0 0x0 0xffff808000013300 0041 00000000 0x0 0x0 0xffff808000013380 0041 00000000 0x0 0x0 0xffff808000013400 0041 00000000 0x0 0x0 0xffff808000013480 0041 00000000 0x0 0x0 0xffff808000013500 0041 00000000 0x0 0x0 0xffff808000013580 0041 00000000 0x0 0x0 0xffff808000013600 0041 00000000 0x0 0x0 0xffff808000013680 0041 00000000 0x0 0x0 0xffff808000013700 0041 00000000 0x0 0x0 0xffff808000013780 0041 00000000 0x0 0x0 0xffff808000013800 0041 00000000 0x0 0x0 0xffff808000013880 0041 00000000 0x0 0x0 0xffff808000013900 0041 00000000 0x0 0x0 0xffff808000013980 0041 00000000 0x0 0x0 0xffff808000013a00 0041 00000000 0x0 0x0 0xffff808000013a80 0041 00000000 0x0 0x0 0xffff808000013b00 0041 00000000 0x0 0x0 0xffff808000013b80 0041 00000000 0x0 0x0 0xffff808000013c00 0041 00000000 0x0 0x0 0xffff808000013c80 0041 00000000 0x0 0x0 0xffff808000013d00 0041 00000000 0x0 0x0 0xffff808000013d80 0041 00000000 0x0 0x0 0xffff808000013e00 0041 00000000 0x0 0x0 0xffff808000013e80 0041 00000000 0x0 0x0 0xffff808000013f00 0041 00000000 0x0 0x0 0xffff808000013f80 0041 00000000 0x0 0x0 0xffff808000014000 0041 00000000 0x0 0x0 0xffff808000014080 0041 00000000 0x0 0x0 0xffff808000014100 0041 00000000 0x0 0x0 0xffff808000014180 0041 00000000 0x0 0x0 0xffff808000014200 0041 00000000 0x0 0x0 0xffff808000014280 0041 00000000 0x0 0x0 0xffff808000014300 0041 00000000 0x0 0x0 0xffff808000014380 0041 00000000 0x0 0x0 0xffff808000014400 0041 00000000 0x0 0x0 0xffff808000014480 0041 00000000 0x0 0x0 0xffff808000014500 0041 00000000 0x0 0x0 0xffff808000014580 0041 00000000 0x0 0x0 0xffff808000014600 0041 00000000 0x0 0x0 0xffff808000014680 0041 00000000 0x0 0x0 0xffff808000014700 0041 00000000 0x0 0x0 0xffff808000014780 0041 00000000 0x0 0x0 0xffff808000014800 0041 00000000 0x0 0x0 0xffff808000014880 0001 00000000 0x0 0x0 0xffff808000014900 0001 00000000 0x0 0x0 0xffff808000014980 0001 00000000 0x0 0x0 0xffff808000014a00 0001 00000000 0x0 0x0 0xffff808000014a80 0001 00000000 0x0 0x0 0xffff808000014b00 0001 00000000 0x0 0x0 0xffff808000014b80 0001 00000000 0x0 0x0 0xffff808000014c00 0001 00000000 0x0 0x0 0xffff808000014c80 0001 00000000 0x0 0x0 0xffff808000014d00 0001 00000000 0x0 0x0 0xffff808000014d80 0001 00000000 0x0 0x0 0xffff808000014e00 0001 00000000 0x0 0x0 0xffff808000014e80 0001 00000000 0x0 0x0 0xffff808000014f00 0001 00000000 0x0 0x0 0xffff808000014f80 0001 00000000 0x0 0x0 0xffff808000015000 0001 00000000 0x0 0x0 0xffff808000015080 0001 00000000 0x0 0x0 0xffff808000015100 0001 00000000 0x0 0x0 0xffff808000015180 0001 00000000 0x0 0x0 0xffff808000015200 0001 00000000 0x0 0x0 0xffff808000015280 0001 00000000 0x0 0x0 0xffff808000015300 0001 00000000 0x0 0x0 0xffff808000015380 0001 00000000 0x0 0x0 0xffff808000015400 0001 00000000 0x0 0x0 0xffff808000015480 0001 00000000 0x0 0x0 0xffff808000015500 0001 00000000 0x0 0x0 0xffff808000015580 0001 00000000 0x0 0x0 0xffff808000015600 0001 00000000 0x0 0x0 0xffff808000015680 0001 00000000 0x0 0x0 0xffff808000015700 0001 00000000 0x0 0x0 0xffff808000015780 0001 00000000 0x0 0x0 0xffff808000015800 0001 00000000 0x0 0x0 0xffff808000015880 0001 00000000 0x0 0x0 0xffff808000015900 0001 00000000 0x0 0x0 0xffff808000015980 0001 00000000 0x0 0x0 0xffff808000015a00 0001 00000000 0x0 0x0 0xffff808000015a80 0001 00000000 0x0 0x0 0xffff808000015b00 0001 00000000 0x0 0x0 0xffff808000015b80 0001 00000000 0x0 0x0 0xffff808000015c00 0001 00000000 0x0 0x0 0xffff808000015c80 0001 00000000 0x0 0x0 0xffff808000015d00 0001 00000000 0x0 0x0 0xffff808000015d80 0001 00000000 0x0 0x0 0xffff808000015e00 0001 00000000 0x0 0x0 0xffff808000015e80 0001 00000000 0x0 0x0 0xffff808000015f00 0001 00000000 0x0 0x0 0xffff808000015f80 0001 00000000 0x0 0x0 0xffff808000016000 0001 00000000 0x0 0x0 0xffff808000016080 0001 00000000 0x0 0x0 0xffff808000016100 0001 00000000 0x0 0x0 0xffff808000016180 0001 00000000 0x0 0x0 0xffff808000016200 0001 00000000 0x0 0x0 0xffff808000016280 0001 00000000 0x0 0x0 0xffff808000016300 0001 00000000 0x0 0x0 0xffff808000016380 0041 00000000 0x0 0x0 0xffff808000016400 0041 00000000 0x0 0x0 0xffff808000016480 0041 00000000 0x0 0x0 0xffff808000016500 0041 00000000 0x0 0x0 0xffff808000016580 0041 00000000 0x0 0x0 0xffff808000016600 0041 00000000 0x0 0x0 0xffff808000016680 0041 00000000 0x0 0x0 0xffff808000016700 0041 00000000 0x0 0x0 0xffff808000016780 0041 00000000 0x0 0x0 0xffff808000016800 0041 00000000 0x0 0x0 0xffff808000016880 0041 00000000 0x0 0x0 0xffff808000016900 0041 00000000 0x0 0x0 0xffff808000016980 0041 00000000 0x0 0x0 0xffff808000016a00 0041 00000000 0x0 0x0 0xffff808000016a80 0041 00000000 0x0 0x0 0xffff808000016b00 0041 00000000 0x0 0x0 0xffff808000016b80 0041 00000000 0x0 0x0 0xffff808000016c00 0041 00000000 0x0 0x0 0xffff808000016c80 0041 00000000 0x0 0x0 0xffff808000016d00 0041 00000000 0x0 0x0 0xffff808000016d80 0041 00000000 0x0 0x0 0xffff808000016e00 0041 00000000 0x0 0x0 0xffff808000016e80 0041 00000000 0x0 0x0 0xffff808000016f00 0041 00000000 0x0 0x0 0xffff808000016f80 0041 00000000 0x0 0x0 0xffff808000017000 0041 00000000 0x0 0x0 0xffff808000017080 0041 00000000 0x0 0x0 0xffff808000017100 0041 00000000 0x0 0x0 0xffff808000017180 0041 00000000 0x0 0x0 0xffff808000017200 0041 00000000 0x0 0x0 0xffff808000017280 0041 00000000 0x0 0x0 0xffff808000017300 0041 00000000 0x0 0x0 0xffff808000017380 0041 00000000 0x0 0x0 0xffff808000017400 0041 00000000 0x0 0x0 0xffff808000017480 0041 00000000 0x0 0x0 0xffff808000017500 0041 00000000 0x0 0x0 0xffff808000017580 0041 00000000 0x0 0x0 0xffff808000017600 0041 00000000 0x0 0x0 0xffff808000017680 0045 00000000 0x0 0x0 0xffff808000017700 0041 00000000 0x0 0x0 0xffff808000017780 0041 00000000 0x0 0x0 0xffff808000017800 0041 00000000 0x0 0x0 0xffff808000017880 0001 00000000 0x0 0x0 0xffff808000017900 0001 00000000 0x0 0x0 0xffff808000017980 0001 00000000 0x0 0x0 0xffff808000017a00 0001 00000000 0x0 0x0 0xffff808000017a80 0001 00000000 0x0 0x0 0xffff808000017b00 0001 00000000 0x0 0x0 0xffff808000017b80 0001 00000000 0x0 0x0 0xffff808000017c00 0001 00000000 0x0 0x0 0xffff808000017c80 0001 00000000 0x0 0x0 0xffff808000017d00 0001 00000000 0x0 0x0 0xffff808000017d80 0001 00000000 0x0 0x0 0xffff808000017e00 0001 00000000 0x0 0x0 0xffff808000017e80 0001 00000000 0x0 0x0 0xffff808000017f00 0001 00000000 0x0 0x0 0xffff808000017f80 0001 00000000 0x0 0x0 0xffff808000018000 0001 00000000 0x0 0x0 0xffff808000018080 0001 00000000 0x0 0x0 0xffff808000018100 0001 00000000 0x0 0x0 0xffff808000018180 0001 00000000 0x0 0x0 0xffff808000018200 0001 00000000 0x0 0x0 0xffff808000018280 0001 00000000 0x0 0x0 0xffff808000018300 0001 00000000 0x0 0x0 0xffff808000018380 0001 00000000 0x0 0x0 0xffff808000018400 0001 00000000 0x0 0x0 0xffff808000018480 0001 00000000 0x0 0x0 0xffff808000018500 0001 00000000 0x0 0x0 0xffff808000018580 0001 00000000 0x0 0x0 0xffff808000018600 0001 00000000 0x0 0x0 0xffff808000018680 0001 00000000 0x0 0x0 0xffff808000018700 0001 00000000 0x0 0x0 0xffff808000018780 0001 00000000 0x0 0x0 0xffff808000018800 0001 00000000 0x0 0x0 0xffff808000018880 0001 00000000 0x0 0x0 0xffff808000018900 0001 00000000 0x0 0x0 0xffff808000018980 0001 00000000 0x0 0x0 0xffff808000018a00 0001 00000000 0x0 0x0 0xffff808000018a80 0001 00000000 0x0 0x0 0xffff808000018b00 0001 00000000 0x0 0x0 0xffff808000018b80 0001 00000000 0x0 0x0 0xffff808000018c00 0001 00000000 0x0 0x0 0xffff808000018c80 0001 00000000 0x0 0x0 0xffff808000018d00 0001 00000000 0x0 0x0 0xffff808000018d80 0001 00000000 0x0 0x0 0xffff808000018e00 0001 00000000 0x0 0x0 0xffff808000018e80 0001 00000000 0x0 0x0 0xffff808000018f00 0001 00000000 0x0 0x0 0xffff808000018f80 0001 00000000 0x0 0x0 0xffff808000019000 0001 00000000 0x0 0x0 0xffff808000019080 0001 00000000 0x0 0x0 0xffff808000019100 0001 00000000 0x0 0x0 0xffff808000019180 0001 00000000 0x0 0x0 0xffff808000019200 0001 00000000 0x0 0x0 0xffff808000019280 0001 00000000 0x0 0x0 0xffff808000019300 0001 00000000 0x0 0x0 0xffff808000019380 0041 00000000 0x0 0x0 0xffff808000019400 0041 00000000 0x0 0x0 0xffff808000019480 0041 00000000 0x0 0x0 0xffff808000019500 0041 00000000 0x0 0x0 0xffff808000019580 0041 00000000 0x0 0x0 0xffff808000019600 0045 00000000 0x0 0x0 0xffff808000019680 0045 00000000 0x0 0x0 0xffff808000019700 0041 00000000 0x0 0x0 0xffff808000019780 0041 00000000 0x0 0x0 0xffff808000019800 0041 00000000 0x0 0x0 0xffff808000019880 0041 00000000 0x0 0x0 0xffff808000019900 0041 00000000 0x0 0x0 0xffff808000019980 0041 00000000 0x0 0x0 0xffff808000019a00 0045 00000000 0x0 0x0 0xffff808000019a80 0045 00000000 0x0 0x0 0xffff808000019b00 0041 00000000 0x0 0x0 0xffff808000019b80 0041 00000000 0x0 0x0 0xffff808000019c00 0041 00000000 0x0 0x0 0xffff808000019c80 0041 00000000 0x0 0x0 0xffff808000019d00 0041 00000000 0x0 0x0 0xffff808000019d80 0045 00000000 0x0 0x0 0xffff808000019e00 0045 00000000 0x0 0x0 0xffff808000019e80 0045 00000000 0x0 0x0 0xffff808000019f00 0041 00000000 0x0 0x0 0xffff808000019f80 0045 00000000 0x0 0x0 0xffff80800001a000 0041 00000000 0x0 0x0 0xffff80800001a080 0041 00000000 0x0 0x0 0xffff80800001a100 0041 00000000 0x0 0x0 0xffff80800001a180 0045 00000000 0x0 0x0 0xffff80800001a200 0045 00000000 0x0 0x0 0xffff80800001a280 0045 00000000 0x0 0x0 0xffff80800001a300 0041 00000000 0x0 0x0 0xffff80800001a380 0045 00000000 0x0 0x0 0xffff80800001a400 0041 00000000 0x0 0x0 0xffff80800001a480 0041 00000000 0x0 0x0 0xffff80800001a500 0041 00000000 0x0 0x0 0xffff80800001a580 0045 00000000 0x0 0x0 0xffff80800001a600 0045 00000000 0x0 0x0 0xffff80800001a680 0045 00000000 0x0 0x0 0xffff80800001a700 0045 00000000 0x0 0x0 0xffff80800001a780 0045 00000000 0x0 0x0 0xffff80800001a800 0041 00000000 0x0 0x0 0xffff80800001a880 0001 00000000 0x0 0x0 0xffff80800001a900 0001 00000000 0x0 0x0 0xffff80800001a980 0001 00000000 0x0 0x0 0xffff80800001aa00 0001 00000000 0x0 0x0 0xffff80800001aa80 0001 00000000 0x0 0x0 0xffff80800001ab00 0001 00000000 0x0 0x0 0xffff80800001ab80 0001 00000000 0x0 0x0 0xffff80800001ac00 0001 00000000 0x0 0x0 0xffff80800001ac80 0001 00000000 0x0 0x0 0xffff80800001ad00 0001 00000000 0x0 0x0 0xffff80800001ad80 0001 00000000 0x0 0x0 0xffff80800001ae00 0001 00000000 0x0 0x0 0xffff80800001ae80 0001 00000000 0x0 0x0 0xffff80800001af00 0001 00000000 0x0 0x0 0xffff80800001af80 0001 00000000 0x0 0x0 0xffff80800001b000 0001 00000000 0x0 0x0 0xffff80800001b080 0001 00000000 0x0 0x0 0xffff80800001b100 0001 00000000 0x0 0x0 0xffff80800001b180 0001 00000000 0x0 0x0 0xffff80800001b200 0001 00000000 0x0 0x0 0xffff80800001b280 0001 00000000 0x0 0x0 0xffff80800001b300 0001 00000000 0x0 0x0 0xffff80800001b380 0001 00000000 0x0 0x0 0xffff80800001b400 0001 00000000 0x0 0x0 0xffff80800001b480 0001 00000000 0x0 0x0 0xffff80800001b500 0001 00000000 0x0 0x0 0xffff80800001b580 0001 00000000 0x0 0x0 0xffff80800001b600 0001 00000000 0x0 0x0 0xffff80800001b680 0001 00000000 0x0 0x0 0xffff80800001b700 0001 00000000 0x0 0x0 0xffff80800001b780 0001 00000000 0x0 0x0 0xffff80800001b800 0001 00000000 0x0 0x0 0xffff80800001b880 0001 00000000 0x0 0x0 0xffff80800001b900 0001 00000000 0x0 0x0 0xffff80800001b980 0001 00000000 0x0 0x0 0xffff80800001ba00 0001 00000000 0x0 0x0 0xffff80800001ba80 0001 00000000 0x0 0x0 0xffff80800001bb00 0001 00000000 0x0 0x0 0xffff80800001bb80 0001 00000000 0x0 0x0 0xffff80800001bc00 0001 00000000 0x0 0x0 0xffff80800001bc80 0001 00000000 0x0 0x0 0xffff80800001bd00 0001 00000000 0x0 0x0 0xffff80800001bd80 0001 00000000 0x0 0x0 0xffff80800001be00 0001 00000000 0x0 0x0 0xffff80800001be80 0001 00000000 0x0 0x0 0xffff80800001bf00 0001 00000000 0x0 0x0 0xffff80800001bf80 0001 00000000 0x0 0x0 0xffff80800001c000 0001 00000000 0x0 0x0 0xffff80800001c080 0001 00000000 0x0 0x0 0xffff80800001c100 0001 00000000 0x0 0x0 0xffff80800001c180 0001 00000000 0x0 0x0 0xffff80800001c200 0001 00000000 0x0 0x0 0xffff80800001c280 0001 00000000 0x0 0x0 0xffff80800001c300 0001 00000000 0x0 0x0 0xffff80800001c380 0001 00000000 0x0 0x0 0xffff80800001c400 0001 00000000 0x0 0x0 0xffff80800001c480 0001 00000000 0x0 0x0 0xffff80800001c500 0001 00000000 0x0 0x0 0xffff80800001c580 0001 00000000 0x0 0x0 0xffff80800001c600 0001 00000000 0x0 0x0 0xffff80800001c680 0001 00000000 0x0 0x0 0xffff80800001c700 0001 00000000 0x0 0x0 0xffff80800001c780 0001 00000000 0x0 0x0 0xffff80800001c800 0001 00000000 0x0 0x0 0xffff80800001c880 0001 00000000 0x0 0x0 0xffff80800001c900 0001 00000000 0x0 0x0 0xffff80800001c980 0001 00000000 0x0 0x0 0xffff80800001ca00 0001 00000000 0x0 0x0 0xffff80800001ca80 0001 00000000 0x0 0x0 0xffff80800001cb00 0001 00000000 0x0 0x0 0xffff80800001cb80 0001 00000000 0x0 0x0 0xffff80800001cc00 0001 00000000 0x0 0x0 0xffff80800001cc80 0001 00000000 0x0 0x0 0xffff80800001cd00 0001 00000000 0x0 0x0 0xffff80800001cd80 0001 00000000 0x0 0x0 0xffff80800001ce00 0001 00000000 0x0 0x0 0xffff80800001ce80 0001 00000000 0x0 0x0 0xffff80800001cf00 0001 00000000 0x0 0x0 0xffff80800001cf80 0001 00000000 0x0 0x0 0xffff80800001d000 0001 00000000 0x0 0x0 0xffff80800001d080 0001 00000000 0x0 0x0 0xffff80800001d100 0001 00000000 0x0 0x0 0xffff80800001d180 0001 00000000 0x0 0x0 0xffff80800001d200 0001 00000000 0x0 0x0 0xffff80800001d280 0001 00000000 0x0 0x0 0xffff80800001d300 0001 00000000 0x0 0x0 0xffff80800001d380 0001 00000000 0x0 0x0 0xffff80800001d400 0001 00000000 0x0 0x0 0xffff80800001d480 0001 00000000 0x0 0x0 0xffff80800001d500 0001 00000000 0x0 0x0 0xffff80800001d580 0001 00000000 0x0 0x0 0xffff80800001d600 0001 00000000 0x0 0x0 0xffff80800001d680 0001 00000000 0x0 0x0 0xffff80800001d700 0001 00000000 0x0 0x0 0xffff80800001d780 0001 00000000 0x0 0x0 0xffff80800001d800 0001 00000000 0x0 0x0 0xffff80800001d880 0001 00000000 0x0 0x0 0xffff80800001d900 0001 00000000 0x0 0x0 0xffff80800001d980 0001 00000000 0x0 0x0 0xffff80800001da00 0001 00000000 0x0 0x0 0xffff80800001da80 0001 00000000 0x0 0x0 0xffff80800001db00 0001 00000000 0x0 0x0 0xffff80800001db80 0001 00000000 0x0 0x0 0xffff80800001dc00 0001 00000000 0x0 0x0 0xffff80800001dc80 0001 00000000 0x0 0x0 0xffff80800001dd00 0001 00000000 0x0 0x0 0xffff80800001dd80 0001 00000000 0x0 0x0 0xffff80800001de00 0001 00000000 0x0 0x0 0xffff80800001de80 0001 00000000 0x0 0x0 0xffff80800001df00 0001 00000000 0x0 0x0 0xffff80800001df80 0001 00000000 0x0 0x0 0xffff80800001e000 0001 00000000 0x0 0x0 0xffff80800001e080 0001 00000000 0x0 0x0 0xffff80800001e100 0001 00000000 0x0 0x0 0xffff80800001e180 0001 00000000 0x0 0x0 0xffff80800001e200 0001 00000000 0x0 0x0 0xffff80800001e280 0001 00000000 0x0 0x0 0xffff80800001e300 0001 00000000 0x0 0x0 0xffff80800001e380 0001 00000000 0x0 0x0 0xffff80800001e400 0001 00000000 0x0 0x0 0xffff80800001e480 0001 00000000 0x0 0x0 0xffff80800001e500 0001 00000000 0x0 0x0 0xffff80800001e580 0001 00000000 0x0 0x0 0xffff80800001e600 0001 00000000 0x0 0x0 0xffff80800001e680 0001 00000000 0x0 0x0 0xffff80800001e700 0001 00000000 0x0 0x0 0xffff80800001e780 0001 00000000 0x0 0x0 0xffff80800001e800 0001 00000000 0x0 0x0 0xffff80800001e880 0001 00000000 0x0 0x0 0xffff80800001e900 0001 00000000 0x0 0x0 0xffff80800001e980 0001 00000000 0x0 0x0 0xffff80800001ea00 0001 00000000 0x0 0x0 0xffff80800001ea80 0001 00000000 0x0 0x0 0xffff80800001eb00 0001 00000000 0x0 0x0 0xffff80800001eb80 0001 00000000 0x0 0x0 0xffff80800001ec00 0001 00000000 0x0 0x0 0xffff80800001ec80 0001 00000000 0x0 0x0 0xffff80800001ed00 0001 00000000 0x0 0x0 0xffff80800001ed80 0001 00000000 0x0 0x0 0xffff80800001ee00 0001 00000000 0x0 0x0 0xffff80800001ee80 0001 00000000 0x0 0x0 0xffff80800001ef00 0001 00000000 0x0 0x0 0xffff80800001ef80 0001 00000000 0x0 0x0 0xffff80800001f000 0001 00000000 0x0 0x0 0xffff80800001f080 0001 00000000 0x0 0x0 0xffff80800001f100 0001 00000000 0x0 0x0 0xffff80800001f180 0001 00000000 0x0 0x0 0xffff80800001f200 0001 00000000 0x0 0x0 0xffff80800001f280 0001 00000000 0x0 0x0 0xffff80800001f300 0001 00000000 0x0 0x0 0xffff80800001f380 0001 00000000 0x0 0x0 0xffff80800001f400 0001 00000000 0x0 0x0 0xffff80800001f480 0001 00000000 0x0 0x0 0xffff80800001f500 0001 00000000 0x0 0x0 0xffff80800001f580 0001 00000000 0x0 0x0 0xffff80800001f600 0001 00000000 0x0 0x0 0xffff80800001f680 0001 00000000 0x0 0x0 0xffff80800001f700 0001 00000000 0x0 0x0 0xffff80800001f780 0001 00000000 0x0 0x0 0xffff80800001f800 0001 00000000 0x0 0x0 0xffff80800001f880 0001 00000000 0x0 0x0 0xffff80800001f900 0001 00000000 0x0 0x0 0xffff80800001f980 0001 00000000 0x0 0x0 0xffff80800001fa00 0001 00000000 0x0 0x0 0xffff80800001fa80 0001 00000000 0x0 0x0 0xffff80800001fb00 0001 00000000 0x0 0x0 0xffff80800001fb80 0001 00000000 0x0 0x0 0xffff80800001fc00 0001 00000000 0x0 0x0 0xffff80800001fc80 0001 00000000 0x0 0x0 0xffff80800001fd00 0001 00000000 0x0 0x0 0xffff80800001fd80 0001 00000000 0x0 0x0 0xffff80800001fe00 0001 00000000 0x0 0x0 0xffff80800001fe80 0001 00000000 0x0 0x0 0xffff80800001ff00 0001 00000000 0x0 0x0 0xffff80800001ff80 0001 00000000 0x0 0x0 0xffff808000020000 0001 00000000 0x0 0x0 0xffff808000020080 0001 00000000 0x0 0x0 0xffff808000020100 0001 00000000 0x0 0x0 0xffff808000020180 0001 00000000 0x0 0x0 0xffff808000020200 0001 00000000 0x0 0x0 0xffff808000020280 0001 00000000 0x0 0x0 0xffff808000020300 0001 00000000 0x0 0x0 0xffff808000020380 0001 00000000 0x0 0x0 0xffff808000020400 0001 00000000 0x0 0x0 0xffff808000020480 0001 00000000 0x0 0x0 0xffff808000020500 0001 00000000 0x0 0x0 0xffff808000020580 0001 00000000 0x0 0x0 0xffff808000020600 0001 00000000 0x0 0x0 0xffff808000020680 0001 00000000 0x0 0x0 0xffff808000020700 0001 00000000 0x0 0x0 0xffff808000020780 0001 00000000 0x0 0x0 0xffff808000020800 0001 00000000 0x0 0x0 0xffff808000020880 0001 00000000 0x0 0x0 0xffff808000020900 0001 00000000 0x0 0x0 0xffff808000020980 0001 00000000 0x0 0x0 0xffff808000020a00 0001 00000000 0x0 0x0 0xffff808000020a80 0001 00000000 0x0 0x0 0xffff808000020b00 0001 00000000 0x0 0x0 0xffff808000020b80 0001 00000000 0x0 0x0 0xffff808000020c00 0001 00000000 0x0 0x0 0xffff808000020c80 0001 00000000 0x0 0x0 0xffff808000020d00 0001 00000000 0x0 0x0 0xffff808000020d80 0001 00000000 0x0 0x0 0xffff808000020e00 0001 00000000 0x0 0x0 0xffff808000020e80 0001 00000000 0x0 0x0 0xffff808000020f00 0001 00000000 0x0 0x0 0xffff808000020f80 0001 00000000 0x0 0x0 0xffff808000021000 0001 00000000 0x0 0x0 0xffff808000021080 0001 00000000 0x0 0x0 0xffff808000021100 0001 00000000 0x0 0x0 0xffff808000021180 0001 00000000 0x0 0x0 0xffff808000021200 0001 00000000 0x0 0x0 0xffff808000021280 0001 00000000 0x0 0x0 0xffff808000021300 0001 00000000 0x0 0x0 0xffff808000021380 0001 00000000 0x0 0x0 0xffff808000021400 0001 00000000 0x0 0x0 0xffff808000021480 0001 00000000 0x0 0x0 0xffff808000021500 0001 00000000 0x0 0x0 0xffff808000021580 0001 00000000 0x0 0x0 0xffff808000021600 0001 00000000 0x0 0x0 0xffff808000021680 0001 00000000 0x0 0x0 0xffff808000021700 0001 00000000 0x0 0x0 0xffff808000021780 0001 00000000 0x0 0x0 0xffff808000021800 0001 00000000 0x0 0x0 0xffff808000021880 0001 00000000 0x0 0x0 0xffff808000021900 0001 00000000 0x0 0x0 0xffff808000021980 0001 00000000 0x0 0x0 0xffff808000021a00 0001 00000000 0x0 0x0 0xffff808000021a80 0001 00000000 0x0 0x0 0xffff808000021b00 0001 00000000 0x0 0x0 0xffff808000021b80 0001 00000000 0x0 0x0 0xffff808000021c00 0001 00000000 0x0 0x0 0xffff808000021c80 0001 00000000 0x0 0x0 0xffff808000021d00 0001 00000000 0x0 0x0 0xffff808000021d80 0001 00000000 0x0 0x0 0xffff808000021e00 0001 00000000 0x0 0x0 0xffff808000021e80 0001 00000000 0x0 0x0 0xffff808000021f00 0001 00000000 0x0 0x0 0xffff808000021f80 0001 00000000 0x0 0x0 0xffff808000022000 0001 00000000 0x0 0x0 0xffff808000022080 0001 00000000 0x0 0x0 0xffff808000022100 0001 00000000 0x0 0x0 0xffff808000022180 0001 00000000 0x0 0x0 0xffff808000022200 0001 00000000 0x0 0x0 0xffff808000022280 0001 00000000 0x0 0x0 0xffff808000022300 0001 00000000 0x0 0x0 0xffff808000022380 0001 00000000 0x0 0x0 0xffff808000022400 0001 00000000 0x0 0x0 0xffff808000022480 0001 00000000 0x0 0x0 0xffff808000022500 0001 00000000 0x0 0x0 0xffff808000022580 0001 00000000 0x0 0x0 0xffff808000022600 0001 00000000 0x0 0x0 0xffff808000022680 0001 00000000 0x0 0x0 0xffff808000022700 0001 00000000 0x0 0x0 0xffff808000022780 0001 00000000 0x0 0x0 0xffff808000022800 0001 00000000 0x0 0x0 0xffff808000022880 0001 00000000 0x0 0x0 0xffff808000022900 0001 00000000 0x0 0x0 0xffff808000022980 0001 00000000 0x0 0x0 0xffff808000022a00 0001 00000000 0x0 0x0 0xffff808000022a80 0001 00000000 0x0 0x0 0xffff808000022b00 0001 00000000 0x0 0x0 0xffff808000022b80 0001 00000000 0x0 0x0 0xffff808000022c00 0001 00000000 0x0 0x0 0xffff808000022c80 0001 00000000 0x0 0x0 0xffff808000022d00 0001 00000000 0x0 0x0 0xffff808000022d80 0001 00000000 0x0 0x0 0xffff808000022e00 0001 00000000 0x0 0x0 0xffff808000022e80 0001 00000000 0x0 0x0 0xffff808000022f00 0001 00000000 0x0 0x0 0xffff808000022f80 0001 00000000 0x0 0x0 0xffff808000023000 0001 00000000 0x0 0x0 0xffff808000023080 0001 00000000 0x0 0x0 0xffff808000023100 0001 00000000 0x0 0x0 0xffff808000023180 0001 00000000 0x0 0x0 0xffff808000023200 0001 00000000 0x0 0x0 0xffff808000023280 0001 00000000 0x0 0x0 0xffff808000023300 0001 00000000 0x0 0x0 0xffff808000023380 0001 00000000 0x0 0x0 0xffff808000023400 0001 00000000 0x0 0x0 0xffff808000023480 0001 00000000 0x0 0x0 0xffff808000023500 0001 00000000 0x0 0x0 0xffff808000023580 0001 00000000 0x0 0x0 0xffff808000023600 0001 00000000 0x0 0x0 0xffff808000023680 0001 00000000 0x0 0x0